# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 14.10.2020 12:58:23.357 Process: id = "1" image_name = "powershell.exe" filename = "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x7f134ca0" os_pid = "0xf04" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x5bc" cmd_line = "\"C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\" -File \"C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1\" " cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xf08 [0074.098] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0074.467] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0074.467] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0074.467] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0074.467] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0075.453] GetVersionExW (in: lpVersionInformation=0x259458*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x259458*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0075.453] GetLastError () returned 0x2 [0075.454] GetVersionExW (in: lpVersionInformation=0x259458*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x259458*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0075.454] GetLastError () returned 0x2 [0075.462] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0075.462] GetLastError () returned 0x2 [0075.469] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae4e8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0075.469] GetLastError () returned 0x2 [0075.469] GetVersionExW (in: lpVersionInformation=0x259458*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x259458*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0075.470] GetLastError () returned 0x2 [0075.471] SetErrorMode (uMode=0x1) returned 0x1 [0075.473] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x1ae968 | out: lpFileInformation=0x1ae968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380b82d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x380b82d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x331cb500, ftLastWriteTime.dwHighDateTime=0x1cb887d, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0075.473] GetLastError () returned 0x2 [0075.473] SetErrorMode (uMode=0x1) returned 0x1 [0075.477] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x1ae9ec | out: lpdwHandle=0x1ae9ec) returned 0x94c [0075.478] GetLastError () returned 0x0 [0075.480] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x1d54d64 | out: lpData=0x1d54d64) returned 1 [0075.484] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1ae9b8, puLen=0x1ae9b4 | out: lplpBuffer=0x1ae9b8*=0x1d54e00, puLen=0x1ae9b4) returned 1 [0075.488] lstrlenW (lpString="䅁") returned 1 [0075.498] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x1d54edc, puLen=0x1ae930) returned 1 [0075.498] lstrlenW (lpString="Microsoft Corporation") returned 21 [0075.500] lstrcpyW (in: lpString1=0x259440, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0075.500] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x1d54f30, puLen=0x1ae930) returned 1 [0075.500] lstrlenW (lpString="System.Management.Automation") returned 28 [0075.500] lstrcpyW (in: lpString1=0x259440, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0075.500] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x1d54f8c, puLen=0x1ae930) returned 1 [0075.500] lstrlenW (lpString="6.1.7601.17514") returned 14 [0075.500] lstrcpyW (in: lpString1=0x259440, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0075.501] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x1d54fcc, puLen=0x1ae930) returned 1 [0075.501] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0075.501] lstrcpyW (in: lpString1=0x259440, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0075.501] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x1d55034, puLen=0x1ae930) returned 1 [0075.501] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0075.501] lstrcpyW (in: lpString1=0x259440, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0075.501] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x1d550d0, puLen=0x1ae930) returned 1 [0075.501] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0075.501] lstrcpyW (in: lpString1=0x259440, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0075.501] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x1d55134, puLen=0x1ae930) returned 1 [0075.501] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0075.501] lstrcpyW (in: lpString1=0x259440, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0075.501] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x1d551b0, puLen=0x1ae930) returned 1 [0075.501] lstrlenW (lpString="6.1.7601.17514") returned 14 [0075.501] lstrcpyW (in: lpString1=0x259440, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0075.502] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x1d54e58, puLen=0x1ae930) returned 1 [0075.502] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0075.502] lstrcpyW (in: lpString1=0x259440, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0075.502] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x0, puLen=0x1ae930) returned 0 [0075.502] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x0, puLen=0x1ae930) returned 0 [0075.502] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x1ae934, puLen=0x1ae930 | out: lplpBuffer=0x1ae934*=0x0, puLen=0x1ae930) returned 0 [0075.502] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1ae928, puLen=0x1ae924 | out: lplpBuffer=0x1ae928*=0x1d54e00, puLen=0x1ae924) returned 1 [0075.504] VerLanguageNameW (in: wLang=0x0, szLang=0x259440, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0075.506] VerQueryValueW (in: pBlock=0x1d54d64, lpSubBlock="\\", lplpBuffer=0x1ae93c, puLen=0x1ae938 | out: lplpBuffer=0x1ae93c*=0x1d54d8c, puLen=0x1ae938) returned 1 [0075.513] GetCurrentProcessId () returned 0xf04 [0075.523] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x1ae174 | out: lpLuid=0x1ae174*(LowPart=0x14, HighPart=0)) returned 1 [0075.525] GetLastError () returned 0x0 [0075.528] GetCurrentProcess () returned 0xffffffff [0075.528] GetLastError () returned 0x0 [0075.530] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x1ae170 | out: TokenHandle=0x1ae170*=0x2ec) returned 1 [0075.530] GetLastError () returned 0x0 [0075.533] AdjustTokenPrivileges (in: TokenHandle=0x2ec, DisableAllPrivileges=0, NewState=0x1d578a4*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0075.533] GetLastError () returned 0x0 [0075.536] CloseHandle (hObject=0x2ec) returned 1 [0075.536] GetLastError () returned 0x0 [0075.542] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf04) returned 0x2ec [0075.542] GetLastError () returned 0x0 [0075.701] EnumProcessModules (in: hProcess=0x2ec, lphModule=0x1d578e8, cb=0x100, lpcbNeeded=0x1ae964 | out: lphModule=0x1d578e8, lpcbNeeded=0x1ae964) returned 1 [0075.702] GetLastError () returned 0x0 [0075.705] GetModuleInformation (in: hProcess=0x2ec, hModule=0x22850000, lpmodinfo=0x1d57a28, cb=0xc | out: lpmodinfo=0x1d57a28*(lpBaseOfDll=0x22850000, SizeOfImage=0x72000, EntryPoint=0x22857363)) returned 1 [0075.705] GetLastError () returned 0x0 [0075.709] GetModuleBaseNameW (in: hProcess=0x2ec, hModule=0x22850000, lpBaseName=0x259c00, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0075.709] GetLastError () returned 0x0 [0075.710] GetModuleFileNameExW (in: hProcess=0x2ec, hModule=0x22850000, lpFilename=0x259c00, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0075.711] GetLastError () returned 0x0 [0075.712] CloseHandle (hObject=0x2ec) returned 1 [0075.712] GetLastError () returned 0x0 [0075.712] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xf04) returned 0x2ec [0075.712] GetLastError () returned 0x0 [0075.715] GetExitCodeProcess (in: hProcess=0x2ec, lpExitCode=0x1d56ed8 | out: lpExitCode=0x1d56ed8*=0x103) returned 1 [0075.715] GetLastError () returned 0x0 [0075.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d55278, Length=0x20000, ResultLength=0x1ae9ac | out: SystemInformation=0x2d55278, ResultLength=0x1ae9ac*=0xe428) returned 0x0 [0075.747] EnumWindows (lpEnumFunc=0x1cb3612, lParam=0x0) returned 0 [0075.750] GetWindowThreadProcessId (in: hWnd=0x30120, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x270 [0075.750] GetLastError () returned 0x0 [0075.750] GetWindowThreadProcessId (in: hWnd=0x30092, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.750] GetLastError () returned 0x0 [0075.751] GetWindowThreadProcessId (in: hWnd=0x300ce, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.751] GetLastError () returned 0x0 [0075.751] GetWindowThreadProcessId (in: hWnd=0x400a0, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.751] GetLastError () returned 0x0 [0075.751] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x724 [0075.751] GetLastError () returned 0x0 [0075.751] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.751] GetLastError () returned 0x0 [0075.751] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x3fc [0075.751] GetLastError () returned 0x0 [0075.751] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x3fc [0075.751] GetLastError () returned 0x0 [0075.752] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.752] GetLastError () returned 0x0 [0075.752] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.752] GetLastError () returned 0x0 [0075.752] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.752] GetLastError () returned 0x0 [0075.752] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.752] GetLastError () returned 0x0 [0075.752] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.752] GetLastError () returned 0x0 [0075.752] GetWindowThreadProcessId (in: hWnd=0x1006c, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.752] GetLastError () returned 0x0 [0075.753] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.753] GetLastError () returned 0x0 [0075.753] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.753] GetLastError () returned 0x0 [0075.753] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.753] GetLastError () returned 0x0 [0075.753] GetWindowThreadProcessId (in: hWnd=0x100da, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x5c0 [0075.753] GetLastError () returned 0x0 [0075.753] GetWindowThreadProcessId (in: hWnd=0x50084, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.753] GetLastError () returned 0x0 [0075.753] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0x60c [0075.753] GetLastError () returned 0x0 [0075.754] GetWindowThreadProcessId (in: hWnd=0x60100, lpdwProcessId=0x1ae600 | out: lpdwProcessId=0x1ae600) returned 0xf08 [0075.754] GetLastError () returned 0x0 [0075.756] GetWindow (hWnd=0x60100, uCmd=0x4) returned 0x0 [0075.758] IsWindowVisible (hWnd=0x60100) returned 1 [0075.758] GetLastError () returned 0x0 [0075.760] WerSetFlags () returned 0x0 [0075.768] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0075.787] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x1ae9dc, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x1ae9d8 | out: pulNumLanguages=0x1ae9dc, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x1ae9d8) returned 1 [0075.787] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x1ae9dc, pwszLanguagesBuffer=0x1d74bbc, pcchLanguagesBuffer=0x1ae9d8 | out: pulNumLanguages=0x1ae9dc, pwszLanguagesBuffer=0x1d74bbc, pcchLanguagesBuffer=0x1ae9d8) returned 1 [0075.791] GetUserDefaultLocaleName (in: lpLocaleName=0x259440, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0075.819] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0075.819] GetLastError () returned 0xcb [0075.823] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0075.823] GetLastError () returned 0xcb [0075.826] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0075.826] GetLastError () returned 0xcb [0075.839] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae44c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0075.839] GetLastError () returned 0xcb [0075.839] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae468, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0075.839] GetLastError () returned 0xcb [0075.839] SetErrorMode (uMode=0x1) returned 0x1 [0075.839] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x1ae8e8 | out: lpFileInformation=0x1ae8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380b82d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x380b82d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x331cb500, ftLastWriteTime.dwHighDateTime=0x1cb887d, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0075.840] GetLastError () returned 0xcb [0075.840] SetErrorMode (uMode=0x1) returned 0x1 [0075.840] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x1ae96c | out: lpdwHandle=0x1ae96c) returned 0x94c [0075.841] GetLastError () returned 0x0 [0075.841] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x1d770ec | out: lpData=0x1d770ec) returned 1 [0075.842] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1ae938, puLen=0x1ae934 | out: lplpBuffer=0x1ae938*=0x1d77188, puLen=0x1ae934) returned 1 [0075.842] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x1d77264, puLen=0x1ae8b0) returned 1 [0075.842] lstrlenW (lpString="Microsoft Corporation") returned 21 [0075.842] lstrcpyW (in: lpString1=0x259440, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0075.843] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x1d772b8, puLen=0x1ae8b0) returned 1 [0075.843] lstrlenW (lpString="System.Management.Automation") returned 28 [0075.843] lstrcpyW (in: lpString1=0x259440, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0075.843] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x1d77314, puLen=0x1ae8b0) returned 1 [0075.843] lstrlenW (lpString="6.1.7601.17514") returned 14 [0075.843] lstrcpyW (in: lpString1=0x259440, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0075.843] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x1d77354, puLen=0x1ae8b0) returned 1 [0075.843] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0075.843] lstrcpyW (in: lpString1=0x259440, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0075.843] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x1d773bc, puLen=0x1ae8b0) returned 1 [0075.843] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0075.843] lstrcpyW (in: lpString1=0x259440, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0075.844] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x1d77458, puLen=0x1ae8b0) returned 1 [0075.844] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0075.844] lstrcpyW (in: lpString1=0x259440, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0075.844] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x1d774bc, puLen=0x1ae8b0) returned 1 [0075.844] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0075.844] lstrcpyW (in: lpString1=0x259440, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0075.844] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x1d77538, puLen=0x1ae8b0) returned 1 [0075.844] lstrlenW (lpString="6.1.7601.17514") returned 14 [0075.844] lstrcpyW (in: lpString1=0x259440, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0075.844] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x1d771e0, puLen=0x1ae8b0) returned 1 [0075.844] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0075.845] lstrcpyW (in: lpString1=0x259440, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0075.845] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x0, puLen=0x1ae8b0) returned 0 [0075.845] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x0, puLen=0x1ae8b0) returned 0 [0075.845] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x1ae8b4, puLen=0x1ae8b0 | out: lplpBuffer=0x1ae8b4*=0x0, puLen=0x1ae8b0) returned 0 [0075.845] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1ae8a8, puLen=0x1ae8a4 | out: lplpBuffer=0x1ae8a8*=0x1d77188, puLen=0x1ae8a4) returned 1 [0075.845] VerLanguageNameW (in: wLang=0x0, szLang=0x259440, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0075.845] VerQueryValueW (in: pBlock=0x1d770ec, lpSubBlock="\\", lplpBuffer=0x1ae8bc, puLen=0x1ae8b8 | out: lplpBuffer=0x1ae8bc*=0x1d77114, puLen=0x1ae8b8) returned 1 [0075.858] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0075.858] GetLastError () returned 0xcb [0075.863] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0075.863] GetLastError () returned 0xcb [0075.868] lstrlenW (lpString="䅁") returned 1 [0075.872] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae880 | out: phkResult=0x1ae880*=0x304) returned 0x0 [0075.873] RegOpenKeyExW (in: hKey=0x304, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae884 | out: phkResult=0x1ae884*=0x308) returned 0x0 [0075.873] RegOpenKeyExW (in: hKey=0x308, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae8b8 | out: phkResult=0x1ae8b8*=0x30c) returned 0x0 [0075.875] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae8f8, lpData=0x0, lpcbData=0x1ae8f4*=0x0 | out: lpType=0x1ae8f8*=0x1, lpData=0x0, lpcbData=0x1ae8f4*=0x56) returned 0x0 [0075.878] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae8f8, lpData=0x259440, lpcbData=0x1ae8f4*=0x56 | out: lpType=0x1ae8f8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae8f4*=0x56) returned 0x0 [0075.883] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0075.883] GetLastError () returned 0x0 [0075.885] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0075.885] GetLastError () returned 0x0 [0075.893] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0075.893] GetLastError () returned 0x0 [0075.911] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0075.911] GetLastError () returned 0xcb [0076.231] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0076.231] GetLastError () returned 0x2 [0076.231] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0076.231] GetLastError () returned 0x2 [0076.353] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0076.353] GetLastError () returned 0xcb [0076.354] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0076.354] GetLastError () returned 0xcb [0076.395] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0076.395] GetLastError () returned 0xcb [0076.397] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0076.397] GetLastError () returned 0xcb [0076.397] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0076.397] GetLastError () returned 0xcb [0076.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0076.602] GetLastError () returned 0x0 [0076.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0076.602] GetLastError () returned 0x0 [0076.633] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0076.633] GetLastError () returned 0xcb [0076.635] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0076.635] GetLastError () returned 0xcb [0076.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0076.733] GetLastError () returned 0x7e [0076.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0076.733] GetLastError () returned 0x7e [0077.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0077.489] GetLastError () returned 0x2 [0077.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0077.489] GetLastError () returned 0x2 [0077.702] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0077.702] GetLastError () returned 0x57 [0077.702] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0077.702] GetLastError () returned 0x57 [0077.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0077.959] GetLastError () returned 0x2 [0077.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0077.959] GetLastError () returned 0x2 [0078.226] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0078.226] GetLastError () returned 0x2 [0078.226] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x1ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0078.226] GetLastError () returned 0x2 [0078.286] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.286] GetLastError () returned 0xcb [0078.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae488, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.288] GetLastError () returned 0xcb [0078.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae438, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.288] GetLastError () returned 0xcb [0078.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae438, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.289] GetLastError () returned 0xcb [0078.297] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae438, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.297] GetLastError () returned 0xcb [0078.380] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1ae3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0078.380] GetLastError () returned 0x2 [0078.380] SetErrorMode (uMode=0x1) returned 0x1 [0078.381] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x1ae874 | out: lpFileInformation=0x1ae874*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0078.381] GetLastError () returned 0x2 [0078.381] SetErrorMode (uMode=0x1) returned 0x1 [0078.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae488, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.637] GetLastError () returned 0x0 [0078.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae438, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.637] GetLastError () returned 0x0 [0078.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae438, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.639] GetLastError () returned 0x0 [0078.642] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.642] GetLastError () returned 0xcb [0078.646] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.646] GetLastError () returned 0xcb [0078.646] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.646] GetLastError () returned 0xcb [0078.648] CoCreateGuid (in: pguid=0x1ae954 | out: pguid=0x1ae954*(Data1=0x51017867, Data2=0x2aff, Data3=0x4a22, Data4=([0]=0x9f, [1]=0x5e, [2]=0x64, [3]=0x24, [4]=0xa7, [5]=0xa6, [6]=0x92, [7]=0xd9))) returned 0x0 [0078.653] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.653] GetLastError () returned 0xcb [0078.656] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.656] GetLastError () returned 0xcb [0078.659] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.659] GetLastError () returned 0xcb [0078.666] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0078.666] GetLastError () returned 0x0 [0078.669] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x1ae834 | out: lpConsoleScreenBufferInfo=0x1ae834) returned 1 [0078.669] GetLastError () returned 0x0 [0078.674] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0078.674] GetLastError () returned 0x0 [0078.674] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x1ae834 | out: lpConsoleScreenBufferInfo=0x1ae834) returned 1 [0078.674] GetLastError () returned 0x0 [0078.675] GetVersionExW (in: lpVersionInformation=0x259458*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x259458*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0078.675] GetLastError () returned 0x0 [0078.677] GetCurrentProcess () returned 0xffffffff [0078.677] GetLastError () returned 0x3f0 [0078.679] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ae844 | out: TokenHandle=0x1ae844*=0x328) returned 1 [0078.679] GetLastError () returned 0x3f0 [0078.682] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x1ae89c | out: TokenInformation=0x0, ReturnLength=0x1ae89c) returned 0 [0078.683] GetLastError () returned 0x7a [0078.684] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x27a6b0 [0078.684] GetLastError () returned 0x7a [0078.684] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x27a6b0, TokenInformationLength=0x4, ReturnLength=0x1ae89c | out: TokenInformation=0x27a6b0, ReturnLength=0x1ae89c) returned 1 [0078.684] GetLastError () returned 0x7a [0078.690] DuplicateTokenEx (in: hExistingToken=0x328, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x1ae854 | out: phNewToken=0x1ae854*=0x320) returned 1 [0078.690] GetLastError () returned 0x7f [0078.690] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x1ae89c | out: TokenInformation=0x0, ReturnLength=0x1ae89c) returned 0 [0078.690] GetLastError () returned 0x7a [0078.690] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x27a690 [0078.690] GetLastError () returned 0x7a [0078.690] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x27a690, TokenInformationLength=0x4, ReturnLength=0x1ae89c | out: TokenInformation=0x27a690, ReturnLength=0x1ae89c) returned 1 [0078.691] GetLastError () returned 0x7a [0078.691] CheckTokenMembership (in: TokenHandle=0x320, SidToCheck=0x1df9f58*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x1ae830 | out: IsMember=0x1ae830) returned 1 [0078.691] GetLastError () returned 0x7a [0078.692] CloseHandle (hObject=0x320) returned 1 [0078.692] GetLastError () returned 0x7a [0078.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.692] GetLastError () returned 0x7a [0078.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.692] GetLastError () returned 0x7a [0078.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.692] GetLastError () returned 0x7a [0078.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.692] GetLastError () returned 0x7a [0078.728] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.728] GetLastError () returned 0x7a [0078.728] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.728] GetLastError () returned 0x7a [0078.728] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.728] GetLastError () returned 0x7a [0078.732] GetConsoleTitleW (in: lpConsoleTitle=0x259c00, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0078.732] GetLastError () returned 0x7a [0078.752] GetConsoleTitleW (in: lpConsoleTitle=0x259c00, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0078.781] GetLastError () returned 0x7a [0078.782] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.782] GetLastError () returned 0x7a [0078.782] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae2ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.782] GetLastError () returned 0x7a [0078.782] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae2ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.782] GetLastError () returned 0x7a [0078.784] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 1 [0078.786] GetLastError () returned 0x7a [0078.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae374, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.787] GetLastError () returned 0x7a [0078.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae324, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.787] GetLastError () returned 0x7a [0078.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae324, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.787] GetLastError () returned 0x7a [0078.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae324, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.787] GetLastError () returned 0x7a [0078.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae324, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.831] GetLastError () returned 0x7a [0078.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae324, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.831] GetLastError () returned 0x7a [0078.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.831] GetLastError () returned 0x7a [0078.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae338, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.831] GetLastError () returned 0x7a [0078.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae338, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.831] GetLastError () returned 0x7a [0078.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae338, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0078.832] GetLastError () returned 0x7a [0078.858] SetConsoleCtrlHandler (HandlerRoutine=0x1cb384a, Add=1) returned 1 [0078.858] GetLastError () returned 0x7a [0078.868] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", nBufferLength=0x105, lpBuffer=0x1ae2a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", lpFilePart=0x0) returned 0x23 [0078.868] GetLastError () returned 0x7a [0078.868] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", nBufferLength=0x105, lpBuffer=0x1ae294, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", lpFilePart=0x0) returned 0x23 [0078.868] GetLastError () returned 0x7a [0078.868] SetErrorMode (uMode=0x1) returned 0x1 [0078.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\oopsno.ps1"), fInfoLevelId=0x0, lpFileInformation=0x1ae714 | out: lpFileInformation=0x1ae714*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e5fa500, ftCreationTime.dwHighDateTime=0x1d6a229, ftLastAccessTime.dwLowDateTime=0x8ef83b80, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xffea2400, ftLastWriteTime.dwHighDateTime=0x1d6a226, nFileSizeHigh=0x0, nFileSizeLow=0xe40d4)) returned 1 [0078.869] GetLastError () returned 0x7a [0078.869] SetErrorMode (uMode=0x1) returned 0x1 [0078.882] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x320 [0078.882] GetLastError () returned 0x0 [0078.883] CoCreateGuid (in: pguid=0x1ae868 | out: pguid=0x1ae868*(Data1=0xcc2fb338, Data2=0x3467, Data3=0x4e25, Data4=([0]=0x8f, [1]=0x57, [2]=0xa7, [3]=0x61, [4]=0xf4, [5]=0x57, [6]=0x3f, [7]=0x48))) returned 0x0 [0078.918] WinSqmIsOptedIn () returned 0x0 [0078.919] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.919] GetLastError () returned 0xcb [0078.921] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.921] GetLastError () returned 0xcb [0078.921] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.921] GetLastError () returned 0xcb [0078.922] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.922] GetLastError () returned 0xcb [0078.922] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.922] GetLastError () returned 0xcb [0078.926] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.926] GetLastError () returned 0xcb [0078.927] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.927] GetLastError () returned 0xcb [0078.927] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.927] GetLastError () returned 0xcb [0078.929] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.929] GetLastError () returned 0xcb [0078.937] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.937] GetLastError () returned 0xcb [0078.940] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.940] GetLastError () returned 0xcb [0078.941] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.941] GetLastError () returned 0xcb [0079.278] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.278] GetLastError () returned 0xcb [0079.278] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.278] GetLastError () returned 0xcb [0079.278] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.278] GetLastError () returned 0xcb [0079.279] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.279] GetLastError () returned 0xcb [0079.356] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.356] GetLastError () returned 0x3 [0079.356] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.356] GetLastError () returned 0x3 [0079.356] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.356] GetLastError () returned 0x3 [0079.356] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.356] GetLastError () returned 0x3 [0079.356] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.356] GetLastError () returned 0x3 [0079.356] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.357] GetLastError () returned 0x3 [0079.357] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.357] GetLastError () returned 0x3 [0079.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.358] GetLastError () returned 0x3 [0079.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.358] GetLastError () returned 0x3 [0079.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.358] GetLastError () returned 0x3 [0079.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.358] GetLastError () returned 0x3 [0079.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.359] GetLastError () returned 0x3 [0079.362] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0079.362] GetLastError () returned 0x3 [0079.365] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x259440, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0079.365] GetLastError () returned 0x3 [0079.365] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae680 | out: phkResult=0x1ae680*=0x32c) returned 0x0 [0079.365] RegQueryValueExW (in: hKey=0x32c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x1ae6c4, lpData=0x0, lpcbData=0x1ae6c0*=0x0 | out: lpType=0x1ae6c4*=0x2, lpData=0x0, lpcbData=0x1ae6c0*=0x6c) returned 0x0 [0079.366] RegQueryValueExW (in: hKey=0x32c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x1ae6c4, lpData=0x259440, lpcbData=0x1ae6c0*=0x6c | out: lpType=0x1ae6c4*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0x1ae6c0*=0x6c) returned 0x0 [0079.366] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x259440, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0079.366] GetLastError () returned 0x3 [0079.366] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x259440, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0079.366] GetLastError () returned 0x3 [0079.367] RegCloseKey (hKey=0x32c) returned 0x0 [0079.367] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x259440, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0079.367] GetLastError () returned 0x3 [0079.367] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae680 | out: phkResult=0x1ae680*=0x32c) returned 0x0 [0079.367] RegQueryValueExW (in: hKey=0x32c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x1ae6c4, lpData=0x0, lpcbData=0x1ae6c0*=0x0 | out: lpType=0x1ae6c4*=0x0, lpData=0x0, lpcbData=0x1ae6c0*=0x0) returned 0x2 [0079.368] RegCloseKey (hKey=0x32c) returned 0x0 [0079.397] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x259440 | out: pszPath="C:\\Users\\EEBsYm5\\Documents") returned 0x0 [0079.398] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents", nBufferLength=0x105, lpBuffer=0x1ae1e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents", lpFilePart=0x0) returned 0x1a [0079.398] GetLastError () returned 0x3f0 [0079.400] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1 [0079.400] GetLastError () returned 0x3f0 [0079.415] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.415] GetLastError () returned 0xcb [0079.416] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.416] GetLastError () returned 0xcb [0079.424] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.424] GetLastError () returned 0xcb [0079.425] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.425] GetLastError () returned 0xcb [0079.433] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae600 | out: phkResult=0x1ae600*=0x334) returned 0x0 [0079.434] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x1ae668, lpData=0x0, lpcbData=0x1ae664*=0x0 | out: lpType=0x1ae668*=0x1, lpData=0x0, lpcbData=0x1ae664*=0x74) returned 0x0 [0079.436] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x1ae648, lpData=0x0, lpcbData=0x1ae644*=0x0 | out: lpType=0x1ae648*=0x1, lpData=0x0, lpcbData=0x1ae644*=0x74) returned 0x0 [0079.436] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x1ae648, lpData=0x259440, lpcbData=0x1ae644*=0x74 | out: lpType=0x1ae648*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x1ae644*=0x74) returned 0x0 [0079.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x1ae1c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0079.436] GetLastError () returned 0xcb [0079.436] SetErrorMode (uMode=0x1) returned 0x1 [0079.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x1ae648 | out: lpFileInformation=0x1ae648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f50ebe, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11e5af50, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x11e5af50, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.437] GetLastError () returned 0xcb [0079.437] SetErrorMode (uMode=0x1) returned 0x1 [0079.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0079.439] GetLastError () returned 0xcb [0079.439] SetErrorMode (uMode=0x1) returned 0x1 [0079.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae63c | out: lpFileInformation=0x1ae63c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0079.439] GetLastError () returned 0xcb [0079.439] SetErrorMode (uMode=0x1) returned 0x1 [0079.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0079.441] GetLastError () returned 0xcb [0079.441] SetErrorMode (uMode=0x1) returned 0x1 [0079.441] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae63c | out: lpFileInformation=0x1ae63c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0079.441] GetLastError () returned 0xcb [0079.441] SetErrorMode (uMode=0x1) returned 0x1 [0079.444] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.444] GetLastError () returned 0xcb [0079.446] GetACP () returned 0x4e4 [0079.474] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae04c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0079.474] GetLastError () returned 0x0 [0079.474] SetErrorMode (uMode=0x1) returned 0x1 [0079.477] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x338 [0079.477] GetLastError () returned 0x0 [0079.479] GetFileType (hFile=0x338) returned 0x1 [0079.479] SetErrorMode (uMode=0x1) returned 0x1 [0079.479] GetFileType (hFile=0x338) returned 0x1 [0079.484] ReadFile (in: hFile=0x338, lpBuffer=0x1e5a2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e5a2c8*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.486] GetLastError () returned 0x0 [0079.487] ReadFile (in: hFile=0x338, lpBuffer=0x1e5a2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e5a2c8*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.487] GetLastError () returned 0x0 [0079.488] ReadFile (in: hFile=0x338, lpBuffer=0x1e5a2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e5a2c8*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.488] GetLastError () returned 0x0 [0079.489] ReadFile (in: hFile=0x338, lpBuffer=0x1e5a2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e5a2c8*, lpNumberOfBytesRead=0x1ae5b4*=0xcf3, lpOverlapped=0x0) returned 1 [0079.489] GetLastError () returned 0x0 [0079.489] ReadFile (in: hFile=0x338, lpBuffer=0x1e5975b, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e5975b*, lpNumberOfBytesRead=0x1ae5b4*=0x0, lpOverlapped=0x0) returned 1 [0079.489] GetLastError () returned 0x0 [0079.489] ReadFile (in: hFile=0x338, lpBuffer=0x1e5a2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e5a2c8*, lpNumberOfBytesRead=0x1ae5b4*=0x0, lpOverlapped=0x0) returned 1 [0079.489] GetLastError () returned 0x0 [0079.490] CloseHandle (hObject=0x338) returned 1 [0079.491] GetLastError () returned 0x0 [0079.492] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae114, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0079.492] GetLastError () returned 0x0 [0079.492] SetErrorMode (uMode=0x1) returned 0x1 [0079.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1e6b63c | out: lpFileInformation=0x1e6b63c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0079.492] GetLastError () returned 0x0 [0079.492] SetErrorMode (uMode=0x1) returned 0x1 [0079.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0079.493] GetLastError () returned 0x0 [0079.493] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae538 | out: phkResult=0x1ae538*=0x338) returned 0x0 [0079.494] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae580, lpData=0x0, lpcbData=0x1ae57c*=0x0 | out: lpType=0x1ae580*=0x1, lpData=0x0, lpcbData=0x1ae57c*=0x56) returned 0x0 [0079.494] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae580, lpData=0x259440, lpcbData=0x1ae57c*=0x56 | out: lpType=0x1ae580*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae57c*=0x56) returned 0x0 [0079.495] RegCloseKey (hKey=0x338) returned 0x0 [0079.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0079.495] GetLastError () returned 0x0 [0079.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae074, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0079.495] GetLastError () returned 0x0 [0079.540] GetSystemInfo (in: lpSystemInfo=0x1adcb8 | out: lpSystemInfo=0x1adcb8*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0079.541] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.558] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae04c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0079.558] GetLastError () returned 0x0 [0079.558] SetErrorMode (uMode=0x1) returned 0x1 [0079.558] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x338 [0079.558] GetLastError () returned 0x0 [0079.558] GetFileType (hFile=0x338) returned 0x1 [0079.558] SetErrorMode (uMode=0x1) returned 0x1 [0079.558] GetFileType (hFile=0x338) returned 0x1 [0079.559] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.561] GetLastError () returned 0x0 [0079.562] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.562] GetLastError () returned 0x0 [0079.562] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.562] GetLastError () returned 0x0 [0079.563] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.564] GetLastError () returned 0x0 [0079.564] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.564] GetLastError () returned 0x0 [0079.566] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.566] GetLastError () returned 0x0 [0079.566] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.566] GetLastError () returned 0x0 [0079.566] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.566] GetLastError () returned 0x0 [0079.566] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.566] GetLastError () returned 0x0 [0079.569] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.569] GetLastError () returned 0x0 [0079.569] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.569] GetLastError () returned 0x0 [0079.569] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.570] GetLastError () returned 0x0 [0079.570] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.570] GetLastError () returned 0x0 [0079.570] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.570] GetLastError () returned 0x0 [0079.571] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.571] GetLastError () returned 0x0 [0079.571] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.571] GetLastError () returned 0x0 [0079.571] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.571] GetLastError () returned 0x0 [0079.576] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.576] GetLastError () returned 0x0 [0079.577] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.577] GetLastError () returned 0x0 [0079.577] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.577] GetLastError () returned 0x0 [0079.577] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.577] GetLastError () returned 0x0 [0079.578] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.578] GetLastError () returned 0x0 [0079.578] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.578] GetLastError () returned 0x0 [0079.579] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.579] GetLastError () returned 0x0 [0079.579] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.579] GetLastError () returned 0x0 [0079.579] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.579] GetLastError () returned 0x0 [0079.580] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.580] GetLastError () returned 0x0 [0079.580] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.580] GetLastError () returned 0x0 [0079.581] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.581] GetLastError () returned 0x0 [0079.581] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.581] GetLastError () returned 0x0 [0079.581] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.581] GetLastError () returned 0x0 [0079.582] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.582] GetLastError () returned 0x0 [0079.582] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.582] GetLastError () returned 0x0 [0079.592] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.592] GetLastError () returned 0x0 [0079.592] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.593] GetLastError () returned 0x0 [0079.593] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.593] GetLastError () returned 0x0 [0079.593] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.593] GetLastError () returned 0x0 [0079.594] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.594] GetLastError () returned 0x0 [0079.594] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.594] GetLastError () returned 0x0 [0079.595] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.595] GetLastError () returned 0x0 [0079.595] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.595] GetLastError () returned 0x0 [0079.595] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x1b4, lpOverlapped=0x0) returned 1 [0079.595] GetLastError () returned 0x0 [0079.596] ReadFile (in: hFile=0x338, lpBuffer=0x1e9fa4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae5b4, lpOverlapped=0x0 | out: lpBuffer=0x1e9fa4c*, lpNumberOfBytesRead=0x1ae5b4*=0x0, lpOverlapped=0x0) returned 1 [0079.596] GetLastError () returned 0x0 [0079.596] CloseHandle (hObject=0x338) returned 1 [0079.596] GetLastError () returned 0x0 [0079.596] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae114, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0079.596] GetLastError () returned 0x0 [0079.596] SetErrorMode (uMode=0x1) returned 0x1 [0079.596] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ec02dc | out: lpFileInformation=0x1ec02dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0079.596] GetLastError () returned 0x0 [0079.596] SetErrorMode (uMode=0x1) returned 0x1 [0079.596] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0079.597] GetLastError () returned 0x0 [0079.597] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae538 | out: phkResult=0x1ae538*=0x338) returned 0x0 [0079.597] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae580, lpData=0x0, lpcbData=0x1ae57c*=0x0 | out: lpType=0x1ae580*=0x1, lpData=0x0, lpcbData=0x1ae57c*=0x56) returned 0x0 [0079.597] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae580, lpData=0x259440, lpcbData=0x1ae57c*=0x56 | out: lpType=0x1ae580*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae57c*=0x56) returned 0x0 [0079.597] RegCloseKey (hKey=0x338) returned 0x0 [0079.598] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0079.598] GetLastError () returned 0x0 [0079.598] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae074, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0079.598] GetLastError () returned 0x0 [0079.781] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.786] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.788] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.789] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.789] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.789] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.790] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.794] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.811] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.811] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.812] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.812] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.813] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.813] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.814] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.815] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.824] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.835] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.836] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.838] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.839] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.840] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.842] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.843] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.843] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.846] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.847] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.847] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.847] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.848] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.852] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.858] VirtualQuery (in: lpAddress=0x1ad478, lpBuffer=0x1ae478, dwLength=0x1c | out: lpBuffer=0x1ae478*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.859] VirtualQuery (in: lpAddress=0x1ad478, lpBuffer=0x1ae478, dwLength=0x1c | out: lpBuffer=0x1ae478*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.859] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.862] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.903] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.903] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.904] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.909] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.909] GetLastError () returned 0xcb [0079.911] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.915] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.915] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.916] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.916] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.917] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.917] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.920] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.921] VirtualQuery (in: lpAddress=0x1ad474, lpBuffer=0x1ae474, dwLength=0x1c | out: lpBuffer=0x1ae474*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0079.922] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae5fc | out: phkResult=0x1ae5fc*=0x334) returned 0x0 [0079.922] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x1ae664, lpData=0x0, lpcbData=0x1ae660*=0x0 | out: lpType=0x1ae664*=0x1, lpData=0x0, lpcbData=0x1ae660*=0x74) returned 0x0 [0079.923] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x1ae644, lpData=0x0, lpcbData=0x1ae640*=0x0 | out: lpType=0x1ae644*=0x1, lpData=0x0, lpcbData=0x1ae640*=0x74) returned 0x0 [0079.923] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x1ae644, lpData=0x259440, lpcbData=0x1ae640*=0x74 | out: lpType=0x1ae644*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x1ae640*=0x74) returned 0x0 [0079.923] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x1ae1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0079.923] GetLastError () returned 0xcb [0079.923] SetErrorMode (uMode=0x1) returned 0x1 [0079.923] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x1ae644 | out: lpFileInformation=0x1ae644*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f50ebe, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11e5af50, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x11e5af50, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.923] GetLastError () returned 0xcb [0079.923] SetErrorMode (uMode=0x1) returned 0x1 [0079.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0079.924] GetLastError () returned 0xcb [0079.924] SetErrorMode (uMode=0x1) returned 0x1 [0079.924] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae638 | out: lpFileInformation=0x1ae638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0079.924] GetLastError () returned 0xcb [0079.924] SetErrorMode (uMode=0x1) returned 0x1 [0079.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0079.924] GetLastError () returned 0xcb [0079.924] SetErrorMode (uMode=0x1) returned 0x1 [0079.924] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae638 | out: lpFileInformation=0x1ae638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0079.924] GetLastError () returned 0xcb [0079.924] SetErrorMode (uMode=0x1) returned 0x1 [0079.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0079.924] GetLastError () returned 0xcb [0079.924] SetErrorMode (uMode=0x1) returned 0x1 [0079.925] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae638 | out: lpFileInformation=0x1ae638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0079.925] GetLastError () returned 0xcb [0079.925] SetErrorMode (uMode=0x1) returned 0x1 [0079.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0079.925] GetLastError () returned 0xcb [0079.925] SetErrorMode (uMode=0x1) returned 0x1 [0079.925] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae638 | out: lpFileInformation=0x1ae638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0079.925] GetLastError () returned 0xcb [0079.925] SetErrorMode (uMode=0x1) returned 0x1 [0079.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0079.925] GetLastError () returned 0xcb [0079.925] SetErrorMode (uMode=0x1) returned 0x1 [0079.925] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae638 | out: lpFileInformation=0x1ae638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0079.925] GetLastError () returned 0xcb [0079.925] SetErrorMode (uMode=0x1) returned 0x1 [0079.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0079.926] GetLastError () returned 0xcb [0079.926] SetErrorMode (uMode=0x1) returned 0x1 [0079.926] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae638 | out: lpFileInformation=0x1ae638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0079.926] GetLastError () returned 0xcb [0079.926] SetErrorMode (uMode=0x1) returned 0x1 [0079.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0079.926] GetLastError () returned 0xcb [0079.926] SetErrorMode (uMode=0x1) returned 0x1 [0079.926] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae638 | out: lpFileInformation=0x1ae638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a182698, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a182698, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd368cf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0079.926] GetLastError () returned 0xcb [0079.926] SetErrorMode (uMode=0x1) returned 0x1 [0079.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0079.926] GetLastError () returned 0xcb [0079.926] SetErrorMode (uMode=0x1) returned 0x1 [0079.926] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae638 | out: lpFileInformation=0x1ae638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0079.927] GetLastError () returned 0xcb [0079.927] SetErrorMode (uMode=0x1) returned 0x1 [0079.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0079.927] GetLastError () returned 0xcb [0079.927] SetErrorMode (uMode=0x1) returned 0x1 [0079.927] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1ae638 | out: lpFileInformation=0x1ae638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0079.927] GetLastError () returned 0xcb [0079.927] SetErrorMode (uMode=0x1) returned 0x1 [0079.927] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.927] GetLastError () returned 0xcb [0079.932] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.932] GetLastError () returned 0xcb [0079.932] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.932] GetLastError () returned 0xcb [0079.933] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.933] GetLastError () returned 0xcb [0079.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0079.933] GetLastError () returned 0xcb [0079.933] SetErrorMode (uMode=0x1) returned 0x1 [0079.933] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0079.934] GetLastError () returned 0x0 [0079.934] GetFileType (hFile=0x304) returned 0x1 [0079.934] SetErrorMode (uMode=0x1) returned 0x1 [0079.934] GetFileType (hFile=0x304) returned 0x1 [0079.934] ReadFile (in: hFile=0x304, lpBuffer=0x215e550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x215e550*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.936] GetLastError () returned 0x0 [0079.937] ReadFile (in: hFile=0x304, lpBuffer=0x215e550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x215e550*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.937] GetLastError () returned 0x0 [0079.938] ReadFile (in: hFile=0x304, lpBuffer=0x215e550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x215e550*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.938] GetLastError () returned 0x0 [0079.938] ReadFile (in: hFile=0x304, lpBuffer=0x215e550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x215e550*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.938] GetLastError () returned 0x0 [0079.939] ReadFile (in: hFile=0x304, lpBuffer=0x215e550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x215e550*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.939] GetLastError () returned 0x0 [0079.939] ReadFile (in: hFile=0x304, lpBuffer=0x215e550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x215e550*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0079.939] GetLastError () returned 0x0 [0079.939] ReadFile (in: hFile=0x304, lpBuffer=0x215e550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x215e550*, lpNumberOfBytesRead=0x1ae4b4*=0x9e2, lpOverlapped=0x0) returned 1 [0079.939] GetLastError () returned 0x0 [0079.940] ReadFile (in: hFile=0x304, lpBuffer=0x215dad2, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x215dad2*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0079.940] GetLastError () returned 0x0 [0079.940] ReadFile (in: hFile=0x304, lpBuffer=0x215e550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x215e550*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0079.940] GetLastError () returned 0x0 [0079.940] CloseHandle (hObject=0x304) returned 1 [0079.940] GetLastError () returned 0x0 [0079.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0079.940] GetLastError () returned 0x0 [0079.940] SetErrorMode (uMode=0x1) returned 0x1 [0079.940] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x216f60c | out: lpFileInformation=0x216f60c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0079.940] GetLastError () returned 0x0 [0079.940] SetErrorMode (uMode=0x1) returned 0x1 [0079.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0079.941] GetLastError () returned 0x0 [0079.941] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae438 | out: phkResult=0x1ae438*=0x304) returned 0x0 [0079.941] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x0, lpcbData=0x1ae47c*=0x0 | out: lpType=0x1ae480*=0x1, lpData=0x0, lpcbData=0x1ae47c*=0x56) returned 0x0 [0079.941] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x259440, lpcbData=0x1ae47c*=0x56 | out: lpType=0x1ae480*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae47c*=0x56) returned 0x0 [0079.941] RegCloseKey (hKey=0x304) returned 0x0 [0079.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0079.942] GetLastError () returned 0x0 [0079.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0079.942] GetLastError () returned 0x0 [0079.955] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xd3fa852, Data2=0x8561, Data3=0x4faa, Data4=([0]=0x80, [1]=0x32, [2]=0xdd, [3]=0xd2, [4]=0x70, [5]=0xda, [6]=0xdd, [7]=0x88))) returned 0x0 [0080.000] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xd12c5011, Data2=0xee02, Data3=0x4667, Data4=([0]=0xb6, [1]=0xd1, [2]=0x6b, [3]=0x8e, [4]=0xb1, [5]=0x39, [6]=0xfa, [7]=0xc2))) returned 0x0 [0080.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0080.002] GetLastError () returned 0x0 [0080.002] SetErrorMode (uMode=0x1) returned 0x1 [0080.002] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0080.003] GetLastError () returned 0x0 [0080.003] GetFileType (hFile=0x304) returned 0x1 [0080.003] SetErrorMode (uMode=0x1) returned 0x1 [0080.003] GetFileType (hFile=0x304) returned 0x1 [0080.004] ReadFile (in: hFile=0x304, lpBuffer=0x21828f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21828f4*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.005] GetLastError () returned 0x0 [0080.006] ReadFile (in: hFile=0x304, lpBuffer=0x21828f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21828f4*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.006] GetLastError () returned 0x0 [0080.007] ReadFile (in: hFile=0x304, lpBuffer=0x21828f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21828f4*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.007] GetLastError () returned 0x0 [0080.008] ReadFile (in: hFile=0x304, lpBuffer=0x21828f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21828f4*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.008] GetLastError () returned 0x0 [0080.008] ReadFile (in: hFile=0x304, lpBuffer=0x21828f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21828f4*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.008] GetLastError () returned 0x0 [0080.010] ReadFile (in: hFile=0x304, lpBuffer=0x21828f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21828f4*, lpNumberOfBytesRead=0x1ae4b4*=0xfb2, lpOverlapped=0x0) returned 1 [0080.010] GetLastError () returned 0x0 [0080.010] ReadFile (in: hFile=0x304, lpBuffer=0x2182046, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2182046*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.010] GetLastError () returned 0x0 [0080.010] ReadFile (in: hFile=0x304, lpBuffer=0x21828f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21828f4*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.010] GetLastError () returned 0x0 [0080.010] CloseHandle (hObject=0x304) returned 1 [0080.010] GetLastError () returned 0x0 [0080.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0080.010] GetLastError () returned 0x0 [0080.010] SetErrorMode (uMode=0x1) returned 0x1 [0080.011] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x21a3184 | out: lpFileInformation=0x21a3184*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0080.011] GetLastError () returned 0x0 [0080.011] SetErrorMode (uMode=0x1) returned 0x1 [0080.011] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0080.011] GetLastError () returned 0x0 [0080.011] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae438 | out: phkResult=0x1ae438*=0x304) returned 0x0 [0080.011] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x0, lpcbData=0x1ae47c*=0x0 | out: lpType=0x1ae480*=0x1, lpData=0x0, lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.011] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x259440, lpcbData=0x1ae47c*=0x56 | out: lpType=0x1ae480*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.012] RegCloseKey (hKey=0x304) returned 0x0 [0080.012] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0080.012] GetLastError () returned 0x0 [0080.012] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0080.012] GetLastError () returned 0x0 [0080.014] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x227be746, Data2=0x1a33, Data3=0x4a4f, Data4=([0]=0x9b, [1]=0xdd, [2]=0xc3, [3]=0x4f, [4]=0xa7, [5]=0x6, [6]=0xb8, [7]=0xfd))) returned 0x0 [0080.015] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xadc77856, Data2=0xb8a9, Data3=0x4404, Data4=([0]=0xb8, [1]=0x6b, [2]=0x2, [3]=0x97, [4]=0xb3, [5]=0xc8, [6]=0xeb, [7]=0xcc))) returned 0x0 [0080.015] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa8ca681d, Data2=0x97e6, Data3=0x4c6c, Data4=([0]=0xb8, [1]=0x8c, [2]=0xe3, [3]=0x64, [4]=0x24, [5]=0x31, [6]=0x43, [7]=0x7))) returned 0x0 [0080.016] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xe82bdee8, Data2=0x4c0, Data3=0x48f2, Data4=([0]=0xa0, [1]=0xd8, [2]=0x86, [3]=0xe7, [4]=0x3f, [5]=0xad, [6]=0xbb, [7]=0x2))) returned 0x0 [0080.016] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xe9d370b4, Data2=0xae99, Data3=0x442c, Data4=([0]=0x9a, [1]=0x6f, [2]=0x82, [3]=0xa3, [4]=0xa2, [5]=0xdd, [6]=0x6d, [7]=0x3a))) returned 0x0 [0080.016] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9bf068b9, Data2=0xd86b, Data3=0x42ab, Data4=([0]=0x90, [1]=0x71, [2]=0x7e, [3]=0xbe, [4]=0xdf, [5]=0x2, [6]=0xe4, [7]=0x4d))) returned 0x0 [0080.016] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.016] GetLastError () returned 0x0 [0080.016] SetErrorMode (uMode=0x1) returned 0x1 [0080.017] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0080.017] GetLastError () returned 0x0 [0080.017] GetFileType (hFile=0x304) returned 0x1 [0080.017] SetErrorMode (uMode=0x1) returned 0x1 [0080.017] GetFileType (hFile=0x304) returned 0x1 [0080.018] ReadFile (in: hFile=0x304, lpBuffer=0x21c2b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21c2b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.020] GetLastError () returned 0x0 [0080.020] ReadFile (in: hFile=0x304, lpBuffer=0x21c2b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21c2b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.020] GetLastError () returned 0x0 [0080.021] ReadFile (in: hFile=0x304, lpBuffer=0x21c2b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21c2b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.021] GetLastError () returned 0x0 [0080.021] ReadFile (in: hFile=0x304, lpBuffer=0x21c2b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21c2b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.022] GetLastError () returned 0x0 [0080.023] ReadFile (in: hFile=0x304, lpBuffer=0x21c2b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21c2b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.023] GetLastError () returned 0x0 [0080.023] ReadFile (in: hFile=0x304, lpBuffer=0x21c2b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21c2b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.023] GetLastError () returned 0x0 [0080.023] ReadFile (in: hFile=0x304, lpBuffer=0x21c2b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21c2b2c*, lpNumberOfBytesRead=0x1ae4b4*=0xaca, lpOverlapped=0x0) returned 1 [0080.023] GetLastError () returned 0x0 [0080.024] ReadFile (in: hFile=0x304, lpBuffer=0x21c2196, nNumberOfBytesToRead=0x136, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21c2196*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.024] GetLastError () returned 0x0 [0080.024] ReadFile (in: hFile=0x304, lpBuffer=0x21c2b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x21c2b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.024] GetLastError () returned 0x0 [0080.024] CloseHandle (hObject=0x304) returned 1 [0080.024] GetLastError () returned 0x0 [0080.024] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.024] GetLastError () returned 0x0 [0080.024] SetErrorMode (uMode=0x1) returned 0x1 [0080.024] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x21e3b28 | out: lpFileInformation=0x21e3b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0080.024] GetLastError () returned 0x0 [0080.024] SetErrorMode (uMode=0x1) returned 0x1 [0080.024] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.025] GetLastError () returned 0x0 [0080.025] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae438 | out: phkResult=0x1ae438*=0x304) returned 0x0 [0080.025] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x0, lpcbData=0x1ae47c*=0x0 | out: lpType=0x1ae480*=0x1, lpData=0x0, lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.025] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x259440, lpcbData=0x1ae47c*=0x56 | out: lpType=0x1ae480*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.025] RegCloseKey (hKey=0x304) returned 0x0 [0080.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.025] GetLastError () returned 0x0 [0080.025] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.026] GetLastError () returned 0x0 [0080.031] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a [0080.031] GetLastError () returned 0x0 [0080.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.034] GetLastError () returned 0x57 [0080.050] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0080.050] GetLastError () returned 0x57 [0080.064] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.064] GetLastError () returned 0x57 [0080.080] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0080.080] GetLastError () returned 0x57 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", lpFilePart=0x0) returned 0x52 [0080.087] GetLastError () returned 0x57 [0080.089] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", lpFilePart=0x0) returned 0x74 [0080.089] GetLastError () returned 0x57 [0080.092] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0080.092] GetLastError () returned 0x57 [0080.095] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x0) returned 0x60 [0080.095] GetLastError () returned 0x57 [0080.097] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0080.097] GetLastError () returned 0x57 [0080.100] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0080.100] GetLastError () returned 0x57 [0080.104] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0080.104] GetLastError () returned 0x57 [0080.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", lpFilePart=0x0) returned 0x50 [0080.107] GetLastError () returned 0x57 [0080.109] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", lpFilePart=0x0) returned 0x5e [0080.109] GetLastError () returned 0x57 [0080.112] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", lpFilePart=0x0) returned 0x6c [0080.112] GetLastError () returned 0x57 [0080.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a [0080.114] GetLastError () returned 0x57 [0080.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.114] GetLastError () returned 0x57 [0080.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0080.114] GetLastError () returned 0x57 [0080.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adca4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.115] GetLastError () returned 0x57 [0080.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adce0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.115] GetLastError () returned 0x57 [0080.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.115] GetLastError () returned 0x57 [0080.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.115] GetLastError () returned 0x57 [0080.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.115] GetLastError () returned 0x57 [0080.198] VirtualQuery (in: lpAddress=0x1ad190, lpBuffer=0x1ae190, dwLength=0x1c | out: lpBuffer=0x1ae190*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.199] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xc9129395, Data2=0xb085, Data3=0x4576, Data4=([0]=0xb2, [1]=0xc3, [2]=0xbd, [3]=0x27, [4]=0xf5, [5]=0x7e, [6]=0xb1, [7]=0xb5))) returned 0x0 [0080.201] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x671b6367, Data2=0xce75, Data3=0x416c, Data4=([0]=0x9a, [1]=0x70, [2]=0xbc, [3]=0xf3, [4]=0x49, [5]=0x86, [6]=0x61, [7]=0xef))) returned 0x0 [0080.201] VirtualQuery (in: lpAddress=0x1ad208, lpBuffer=0x1ae208, dwLength=0x1c | out: lpBuffer=0x1ae208*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.202] VirtualQuery (in: lpAddress=0x1ad208, lpBuffer=0x1ae208, dwLength=0x1c | out: lpBuffer=0x1ae208*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.202] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xce89cc12, Data2=0x1402, Data3=0x46dc, Data4=([0]=0xbf, [1]=0x7d, [2]=0x9e, [3]=0xb2, [4]=0x6, [5]=0x33, [6]=0x3f, [7]=0x67))) returned 0x0 [0080.204] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x60b03898, Data2=0x8b3e, Data3=0x492f, Data4=([0]=0xa1, [1]=0x37, [2]=0xb2, [3]=0xd4, [4]=0xc7, [5]=0x33, [6]=0x90, [7]=0xfd))) returned 0x0 [0080.205] VirtualQuery (in: lpAddress=0x1ad334, lpBuffer=0x1ae334, dwLength=0x1c | out: lpBuffer=0x1ae334*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.205] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.205] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.206] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa0c4ee61, Data2=0xa5fe, Data3=0x43d0, Data4=([0]=0x93, [1]=0x36, [2]=0x5c, [3]=0x33, [4]=0xce, [5]=0x8f, [6]=0xe4, [7]=0xf7))) returned 0x0 [0080.206] VirtualQuery (in: lpAddress=0x1ad334, lpBuffer=0x1ae334, dwLength=0x1c | out: lpBuffer=0x1ae334*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.206] VirtualQuery (in: lpAddress=0x1ad24c, lpBuffer=0x1ae24c, dwLength=0x1c | out: lpBuffer=0x1ae24c*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.207] VirtualQuery (in: lpAddress=0x1acf00, lpBuffer=0x1adf00, dwLength=0x1c | out: lpBuffer=0x1adf00*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.208] VirtualQuery (in: lpAddress=0x1acf00, lpBuffer=0x1adf00, dwLength=0x1c | out: lpBuffer=0x1adf00*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.208] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x74fc5130, Data2=0xd3b9, Data3=0x4403, Data4=([0]=0x82, [1]=0x22, [2]=0x8b, [3]=0xee, [4]=0x9e, [5]=0xd2, [6]=0x48, [7]=0xb8))) returned 0x0 [0080.208] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xcea1e9a6, Data2=0x56a8, Data3=0x400b, Data4=([0]=0xb9, [1]=0x37, [2]=0xa7, [3]=0x99, [4]=0xaa, [5]=0x39, [6]=0x60, [7]=0x72))) returned 0x0 [0080.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.209] GetLastError () returned 0x57 [0080.209] SetErrorMode (uMode=0x1) returned 0x1 [0080.209] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0080.209] GetLastError () returned 0x0 [0080.209] GetFileType (hFile=0x304) returned 0x1 [0080.209] SetErrorMode (uMode=0x1) returned 0x1 [0080.209] GetFileType (hFile=0x304) returned 0x1 [0080.210] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.211] GetLastError () returned 0x0 [0080.212] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.212] GetLastError () returned 0x0 [0080.213] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.213] GetLastError () returned 0x0 [0080.214] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.214] GetLastError () returned 0x0 [0080.215] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.216] GetLastError () returned 0x0 [0080.216] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.216] GetLastError () returned 0x0 [0080.216] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.216] GetLastError () returned 0x0 [0080.216] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.216] GetLastError () returned 0x0 [0080.233] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.234] GetLastError () returned 0x0 [0080.234] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.234] GetLastError () returned 0x0 [0080.234] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.234] GetLastError () returned 0x0 [0080.234] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.234] GetLastError () returned 0x0 [0080.235] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.235] GetLastError () returned 0x0 [0080.235] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.235] GetLastError () returned 0x0 [0080.235] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.235] GetLastError () returned 0x0 [0080.235] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.236] GetLastError () returned 0x0 [0080.239] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.239] GetLastError () returned 0x0 [0080.239] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0xbce, lpOverlapped=0x0) returned 1 [0080.239] GetLastError () returned 0x0 [0080.239] ReadFile (in: hFile=0x304, lpBuffer=0x224838e, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x224838e*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.240] GetLastError () returned 0x0 [0080.240] ReadFile (in: hFile=0x304, lpBuffer=0x2248c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2248c20*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.240] GetLastError () returned 0x0 [0080.240] CloseHandle (hObject=0x304) returned 1 [0080.240] GetLastError () returned 0x0 [0080.240] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.240] GetLastError () returned 0x0 [0080.240] SetErrorMode (uMode=0x1) returned 0x1 [0080.240] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2269c1c | out: lpFileInformation=0x2269c1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0080.240] GetLastError () returned 0x0 [0080.240] SetErrorMode (uMode=0x1) returned 0x1 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.241] GetLastError () returned 0x0 [0080.241] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae438 | out: phkResult=0x1ae438*=0x304) returned 0x0 [0080.241] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x0, lpcbData=0x1ae47c*=0x0 | out: lpType=0x1ae480*=0x1, lpData=0x0, lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.241] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x259440, lpcbData=0x1ae47c*=0x56 | out: lpType=0x1ae480*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.241] RegCloseKey (hKey=0x304) returned 0x0 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.242] GetLastError () returned 0x0 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0080.242] GetLastError () returned 0x0 [0080.248] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9baaea70, Data2=0xfd71, Data3=0x4503, Data4=([0]=0x8e, [1]=0x5c, [2]=0xb, [3]=0x83, [4]=0x62, [5]=0x7d, [6]=0x25, [7]=0x63))) returned 0x0 [0080.248] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x1bb369be, Data2=0x497f, Data3=0x4669, Data4=([0]=0x8d, [1]=0xf4, [2]=0x85, [3]=0x25, [4]=0x31, [5]=0x23, [6]=0x5f, [7]=0x9b))) returned 0x0 [0080.249] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xc8c0aa66, Data2=0x5905, Data3=0x450f, Data4=([0]=0xb2, [1]=0xfd, [2]=0x6a, [3]=0xb6, [4]=0xd6, [5]=0x17, [6]=0x3, [7]=0x7b))) returned 0x0 [0080.249] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x1f6b5f45, Data2=0xe9c8, Data3=0x4721, Data4=([0]=0xb1, [1]=0x9, [2]=0x6a, [3]=0x73, [4]=0x45, [5]=0x42, [6]=0x0, [7]=0x99))) returned 0x0 [0080.249] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x36fbf08e, Data2=0xb32e, Data3=0x4cb6, Data4=([0]=0x83, [1]=0x2f, [2]=0x90, [3]=0xca, [4]=0xe1, [5]=0xd6, [6]=0x7b, [7]=0x94))) returned 0x0 [0080.249] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa88ee499, Data2=0xd9d7, Data3=0x4842, Data4=([0]=0x8f, [1]=0xae, [2]=0xb2, [3]=0xa7, [4]=0x14, [5]=0xd5, [6]=0x3d, [7]=0x7d))) returned 0x0 [0080.250] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.250] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xab00a411, Data2=0xb6fa, Data3=0x4eb6, Data4=([0]=0x99, [1]=0x3, [2]=0x18, [3]=0x9f, [4]=0xa2, [5]=0x88, [6]=0x84, [7]=0x8d))) returned 0x0 [0080.250] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.251] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.251] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xb71bed2c, Data2=0x1cfc, Data3=0x4338, Data4=([0]=0xb6, [1]=0xae, [2]=0x35, [3]=0x17, [4]=0xdd, [5]=0x9b, [6]=0x38, [7]=0x5d))) returned 0x0 [0080.251] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xe8db95c0, Data2=0x946, Data3=0x4438, Data4=([0]=0xb8, [1]=0xf, [2]=0x87, [3]=0xb4, [4]=0xe6, [5]=0x90, [6]=0x38, [7]=0x30))) returned 0x0 [0080.252] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xb738cf9e, Data2=0xed10, Data3=0x43dc, Data4=([0]=0x9b, [1]=0x8f, [2]=0x80, [3]=0x7, [4]=0x4a, [5]=0x6a, [6]=0xc9, [7]=0x6a))) returned 0x0 [0080.252] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x8b98aece, Data2=0xae63, Data3=0x4f14, Data4=([0]=0x9c, [1]=0x3e, [2]=0x23, [3]=0xf5, [4]=0x48, [5]=0x28, [6]=0xb4, [7]=0xd5))) returned 0x0 [0080.252] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.253] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x39793558, Data2=0xfd1b, Data3=0x4a9c, Data4=([0]=0xa1, [1]=0xaf, [2]=0xd, [3]=0xac, [4]=0x2c, [5]=0xe5, [6]=0x26, [7]=0x7))) returned 0x0 [0080.253] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.254] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.254] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.255] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.256] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.256] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xbeb0196f, Data2=0xbffa, Data3=0x4345, Data4=([0]=0x91, [1]=0x20, [2]=0x14, [3]=0x87, [4]=0xf6, [5]=0x4, [6]=0xd4, [7]=0xec))) returned 0x0 [0080.257] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa89ce493, Data2=0x6b50, Data3=0x47fc, Data4=([0]=0xb3, [1]=0x4e, [2]=0x17, [3]=0xdd, [4]=0x47, [5]=0x8f, [6]=0x46, [7]=0xb4))) returned 0x0 [0080.257] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9551fe7, Data2=0x2675, Data3=0x4b75, Data4=([0]=0x8a, [1]=0x2a, [2]=0xe8, [3]=0xbd, [4]=0x4c, [5]=0x3c, [6]=0x9c, [7]=0x89))) returned 0x0 [0080.257] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xf3a29779, Data2=0xd072, Data3=0x4499, Data4=([0]=0x9a, [1]=0x64, [2]=0x40, [3]=0xb4, [4]=0x65, [5]=0x23, [6]=0x21, [7]=0xf3))) returned 0x0 [0080.257] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa92b7436, Data2=0x83c4, Data3=0x4b61, Data4=([0]=0xad, [1]=0x7c, [2]=0x96, [3]=0x74, [4]=0x9c, [5]=0x56, [6]=0x4, [7]=0x37))) returned 0x0 [0080.257] VirtualQuery (in: lpAddress=0x1ad334, lpBuffer=0x1ae334, dwLength=0x1c | out: lpBuffer=0x1ae334*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.258] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9e2662d4, Data2=0x6d92, Data3=0x435d, Data4=([0]=0x9c, [1]=0xbf, [2]=0x9d, [3]=0x1, [4]=0x8e, [5]=0x11, [6]=0x0, [7]=0x9b))) returned 0x0 [0080.258] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x23e9e2f5, Data2=0xbbf9, Data3=0x4a88, Data4=([0]=0xa5, [1]=0x56, [2]=0x8d, [3]=0xce, [4]=0xda, [5]=0x5b, [6]=0x4f, [7]=0x40))) returned 0x0 [0080.259] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xe51fa2c3, Data2=0xa3da, Data3=0x43a6, Data4=([0]=0x90, [1]=0x2, [2]=0xb0, [3]=0x31, [4]=0x63, [5]=0x29, [6]=0x62, [7]=0xa6))) returned 0x0 [0080.259] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xcd4a6215, Data2=0x8001, Data3=0x433b, Data4=([0]=0xa8, [1]=0xc6, [2]=0x6a, [3]=0x90, [4]=0x70, [5]=0x2, [6]=0x8f, [7]=0xb0))) returned 0x0 [0080.260] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x396d07ea, Data2=0x7eb2, Data3=0x49b7, Data4=([0]=0x90, [1]=0x56, [2]=0xba, [3]=0x4, [4]=0xcc, [5]=0xf0, [6]=0x8b, [7]=0xd6))) returned 0x0 [0080.268] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xb3245bb6, Data2=0xa7ea, Data3=0x43b5, Data4=([0]=0xa0, [1]=0x6, [2]=0xf2, [3]=0x72, [4]=0x5b, [5]=0x6, [6]=0xf8, [7]=0xd4))) returned 0x0 [0080.268] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x431737e6, Data2=0x39bc, Data3=0x4aa4, Data4=([0]=0x89, [1]=0xac, [2]=0xb2, [3]=0xf6, [4]=0x3b, [5]=0xda, [6]=0xac, [7]=0xf))) returned 0x0 [0080.269] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x25d1bedd, Data2=0x953c, Data3=0x4f4d, Data4=([0]=0xa8, [1]=0xbf, [2]=0x9d, [3]=0xe5, [4]=0x3, [5]=0x18, [6]=0x75, [7]=0x26))) returned 0x0 [0080.269] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x1efae462, Data2=0x85aa, Data3=0x4901, Data4=([0]=0xad, [1]=0xda, [2]=0x1e, [3]=0x3c, [4]=0xee, [5]=0xa2, [6]=0x37, [7]=0x33))) returned 0x0 [0080.269] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x7b9b12c4, Data2=0xcdc9, Data3=0x4a72, Data4=([0]=0xb1, [1]=0xe5, [2]=0xf4, [3]=0x2b, [4]=0x1a, [5]=0x71, [6]=0x89, [7]=0x36))) returned 0x0 [0080.270] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x6168a00c, Data2=0xdca9, Data3=0x426e, Data4=([0]=0xa2, [1]=0x55, [2]=0xf0, [3]=0xe3, [4]=0x60, [5]=0xc9, [6]=0xd9, [7]=0x49))) returned 0x0 [0080.270] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x377a9f07, Data2=0x338c, Data3=0x41ee, Data4=([0]=0xa6, [1]=0xac, [2]=0xd3, [3]=0xed, [4]=0xe1, [5]=0x3b, [6]=0xc8, [7]=0xee))) returned 0x0 [0080.270] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x8039b948, Data2=0x73a4, Data3=0x4fc6, Data4=([0]=0xac, [1]=0x4b, [2]=0xb8, [3]=0x3f, [4]=0x69, [5]=0x95, [6]=0xe0, [7]=0x26))) returned 0x0 [0080.271] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x401ee38e, Data2=0xb8a2, Data3=0x47f8, Data4=([0]=0xb5, [1]=0x1a, [2]=0xa6, [3]=0xb9, [4]=0xf7, [5]=0x9e, [6]=0x85, [7]=0xf0))) returned 0x0 [0080.271] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x463c2225, Data2=0xdc2c, Data3=0x4fdc, Data4=([0]=0x84, [1]=0xe6, [2]=0x5b, [3]=0x2, [4]=0xd9, [5]=0x72, [6]=0xbb, [7]=0x14))) returned 0x0 [0080.271] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x2310dc51, Data2=0xe637, Data3=0x4204, Data4=([0]=0x92, [1]=0x62, [2]=0xf, [3]=0xe2, [4]=0x31, [5]=0xe6, [6]=0x57, [7]=0x9b))) returned 0x0 [0080.272] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x49606ce7, Data2=0xf3a8, Data3=0x4cd8, Data4=([0]=0xae, [1]=0xb1, [2]=0x5a, [3]=0x50, [4]=0x2c, [5]=0xf8, [6]=0xd0, [7]=0x70))) returned 0x0 [0080.272] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xb89aa2cc, Data2=0xbf53, Data3=0x43a2, Data4=([0]=0xa6, [1]=0xf1, [2]=0x26, [3]=0xb0, [4]=0x8b, [5]=0xea, [6]=0xb3, [7]=0x98))) returned 0x0 [0080.272] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xb0bba553, Data2=0x5000, Data3=0x42ac, Data4=([0]=0x80, [1]=0xf, [2]=0xef, [3]=0xf3, [4]=0x24, [5]=0xd2, [6]=0x24, [7]=0x7a))) returned 0x0 [0080.273] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.273] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.274] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.276] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xe748acba, Data2=0xb911, Data3=0x42da, Data4=([0]=0xb5, [1]=0x77, [2]=0x19, [3]=0x33, [4]=0x50, [5]=0xc7, [6]=0xb, [7]=0x37))) returned 0x0 [0080.276] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0080.276] GetLastError () returned 0x0 [0080.276] SetErrorMode (uMode=0x1) returned 0x1 [0080.276] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0080.277] GetLastError () returned 0x0 [0080.277] GetFileType (hFile=0x304) returned 0x1 [0080.277] SetErrorMode (uMode=0x1) returned 0x1 [0080.277] GetFileType (hFile=0x304) returned 0x1 [0080.277] ReadFile (in: hFile=0x304, lpBuffer=0x2306b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2306b08*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.279] GetLastError () returned 0x0 [0080.280] ReadFile (in: hFile=0x304, lpBuffer=0x2306b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2306b08*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.280] GetLastError () returned 0x0 [0080.281] ReadFile (in: hFile=0x304, lpBuffer=0x2306b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2306b08*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.281] GetLastError () returned 0x0 [0080.281] ReadFile (in: hFile=0x304, lpBuffer=0x2306b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2306b08*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.281] GetLastError () returned 0x0 [0080.283] ReadFile (in: hFile=0x304, lpBuffer=0x2306b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2306b08*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.283] GetLastError () returned 0x0 [0080.283] ReadFile (in: hFile=0x304, lpBuffer=0x2306b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2306b08*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.284] GetLastError () returned 0x0 [0080.284] ReadFile (in: hFile=0x304, lpBuffer=0x2306b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2306b08*, lpNumberOfBytesRead=0x1ae4b4*=0x119, lpOverlapped=0x0) returned 1 [0080.284] GetLastError () returned 0x0 [0080.284] ReadFile (in: hFile=0x304, lpBuffer=0x2306b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2306b08*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.284] GetLastError () returned 0x0 [0080.284] CloseHandle (hObject=0x304) returned 1 [0080.284] GetLastError () returned 0x0 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0080.284] GetLastError () returned 0x0 [0080.284] SetErrorMode (uMode=0x1) returned 0x1 [0080.284] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2327b04 | out: lpFileInformation=0x2327b04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0080.285] GetLastError () returned 0x0 [0080.285] SetErrorMode (uMode=0x1) returned 0x1 [0080.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0080.285] GetLastError () returned 0x0 [0080.285] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae438 | out: phkResult=0x1ae438*=0x304) returned 0x0 [0080.285] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x0, lpcbData=0x1ae47c*=0x0 | out: lpType=0x1ae480*=0x1, lpData=0x0, lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.285] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x259440, lpcbData=0x1ae47c*=0x56 | out: lpType=0x1ae480*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.286] RegCloseKey (hKey=0x304) returned 0x0 [0080.286] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0080.286] GetLastError () returned 0x0 [0080.286] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0080.286] GetLastError () returned 0x0 [0080.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adce0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.288] GetLastError () returned 0x0 [0080.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.288] GetLastError () returned 0x0 [0080.289] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.289] GetLastError () returned 0x0 [0080.289] VirtualQuery (in: lpAddress=0x1ad190, lpBuffer=0x1ae190, dwLength=0x1c | out: lpBuffer=0x1ae190*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.289] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x5c9fcf4b, Data2=0xc59, Data3=0x42c4, Data4=([0]=0xb3, [1]=0x5a, [2]=0x93, [3]=0x47, [4]=0x8d, [5]=0x17, [6]=0x92, [7]=0x40))) returned 0x0 [0080.289] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.290] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x11c5a7b, Data2=0x88c6, Data3=0x4fc8, Data4=([0]=0xa1, [1]=0xcb, [2]=0x62, [3]=0x21, [4]=0x29, [5]=0x81, [6]=0xd1, [7]=0x55))) returned 0x0 [0080.290] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa1babc93, Data2=0x344a, Data3=0x437b, Data4=([0]=0x92, [1]=0x8b, [2]=0xa2, [3]=0xc5, [4]=0x7d, [5]=0x7a, [6]=0x3f, [7]=0x1f))) returned 0x0 [0080.290] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xeb06792b, Data2=0xb42d, Data3=0x4297, Data4=([0]=0xb9, [1]=0x37, [2]=0x91, [3]=0x19, [4]=0x66, [5]=0x96, [6]=0x8e, [7]=0x21))) returned 0x0 [0080.290] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.290] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.291] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0080.291] GetLastError () returned 0x0 [0080.291] SetErrorMode (uMode=0x1) returned 0x1 [0080.291] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0080.291] GetLastError () returned 0x0 [0080.291] GetFileType (hFile=0x304) returned 0x1 [0080.291] SetErrorMode (uMode=0x1) returned 0x1 [0080.291] GetFileType (hFile=0x304) returned 0x1 [0080.291] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.297] GetLastError () returned 0x0 [0080.299] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.300] GetLastError () returned 0x0 [0080.300] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.300] GetLastError () returned 0x0 [0080.300] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.300] GetLastError () returned 0x0 [0080.302] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.302] GetLastError () returned 0x0 [0080.302] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.302] GetLastError () returned 0x0 [0080.302] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.302] GetLastError () returned 0x0 [0080.302] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.303] GetLastError () returned 0x0 [0080.309] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.309] GetLastError () returned 0x0 [0080.310] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.310] GetLastError () returned 0x0 [0080.310] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.310] GetLastError () returned 0x0 [0080.310] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.310] GetLastError () returned 0x0 [0080.311] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.311] GetLastError () returned 0x0 [0080.311] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.311] GetLastError () returned 0x0 [0080.311] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.311] GetLastError () returned 0x0 [0080.312] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.312] GetLastError () returned 0x0 [0080.316] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.316] GetLastError () returned 0x0 [0080.317] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.317] GetLastError () returned 0x0 [0080.317] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.317] GetLastError () returned 0x0 [0080.318] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.318] GetLastError () returned 0x0 [0080.318] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.318] GetLastError () returned 0x0 [0080.318] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.318] GetLastError () returned 0x0 [0080.319] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.319] GetLastError () returned 0x0 [0080.319] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.319] GetLastError () returned 0x0 [0080.319] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.320] GetLastError () returned 0x0 [0080.320] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.320] GetLastError () returned 0x0 [0080.320] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.320] GetLastError () returned 0x0 [0080.320] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.321] GetLastError () returned 0x0 [0080.321] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.321] GetLastError () returned 0x0 [0080.321] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.321] GetLastError () returned 0x0 [0080.322] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.322] GetLastError () returned 0x0 [0080.322] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.322] GetLastError () returned 0x0 [0080.330] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.330] GetLastError () returned 0x0 [0080.330] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.330] GetLastError () returned 0x0 [0080.331] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.331] GetLastError () returned 0x0 [0080.331] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.331] GetLastError () returned 0x0 [0080.331] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.331] GetLastError () returned 0x0 [0080.331] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.332] GetLastError () returned 0x0 [0080.332] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.332] GetLastError () returned 0x0 [0080.332] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.332] GetLastError () returned 0x0 [0080.333] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.333] GetLastError () returned 0x0 [0080.333] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.333] GetLastError () returned 0x0 [0080.333] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.334] GetLastError () returned 0x0 [0080.334] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.334] GetLastError () returned 0x0 [0080.334] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.334] GetLastError () returned 0x0 [0080.334] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.335] GetLastError () returned 0x0 [0080.335] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.335] GetLastError () returned 0x0 [0080.335] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.335] GetLastError () returned 0x0 [0080.336] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.336] GetLastError () returned 0x0 [0080.336] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.336] GetLastError () returned 0x0 [0080.336] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.336] GetLastError () returned 0x0 [0080.337] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.337] GetLastError () returned 0x0 [0080.337] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.337] GetLastError () returned 0x0 [0080.337] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.338] GetLastError () returned 0x0 [0080.338] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.338] GetLastError () returned 0x0 [0080.338] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.338] GetLastError () returned 0x0 [0080.339] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.339] GetLastError () returned 0x0 [0080.339] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.339] GetLastError () returned 0x0 [0080.339] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.339] GetLastError () returned 0x0 [0080.340] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.340] GetLastError () returned 0x0 [0080.340] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.340] GetLastError () returned 0x0 [0080.341] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.341] GetLastError () returned 0x0 [0080.341] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0xf37, lpOverlapped=0x0) returned 1 [0080.341] GetLastError () returned 0x0 [0080.341] ReadFile (in: hFile=0x304, lpBuffer=0x2350203, nNumberOfBytesToRead=0xc9, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350203*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.341] GetLastError () returned 0x0 [0080.342] ReadFile (in: hFile=0x304, lpBuffer=0x2350b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2350b2c*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.342] GetLastError () returned 0x0 [0080.342] CloseHandle (hObject=0x304) returned 1 [0080.342] GetLastError () returned 0x0 [0080.342] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0080.342] GetLastError () returned 0x0 [0080.342] SetErrorMode (uMode=0x1) returned 0x1 [0080.342] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2371b28 | out: lpFileInformation=0x2371b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0080.342] GetLastError () returned 0x0 [0080.342] SetErrorMode (uMode=0x1) returned 0x1 [0080.342] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0080.342] GetLastError () returned 0x0 [0080.343] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae438 | out: phkResult=0x1ae438*=0x304) returned 0x0 [0080.343] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x0, lpcbData=0x1ae47c*=0x0 | out: lpType=0x1ae480*=0x1, lpData=0x0, lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.343] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x259440, lpcbData=0x1ae47c*=0x56 | out: lpType=0x1ae480*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.344] RegCloseKey (hKey=0x304) returned 0x0 [0080.345] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0080.345] GetLastError () returned 0x0 [0080.345] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0080.345] GetLastError () returned 0x0 [0080.366] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x6148731, Data2=0x64d3, Data3=0x4bf1, Data4=([0]=0x80, [1]=0x6b, [2]=0xc7, [3]=0x54, [4]=0x6, [5]=0x8a, [6]=0x73, [7]=0x5c))) returned 0x0 [0080.366] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9bd3911a, Data2=0x3176, Data3=0x4c22, Data4=([0]=0xbd, [1]=0x68, [2]=0x51, [3]=0x25, [4]=0x98, [5]=0xe5, [6]=0x3f, [7]=0xd0))) returned 0x0 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.367] GetLastError () returned 0x0 [0080.367] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.367] GetLastError () returned 0x0 [0080.367] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.367] GetLastError () returned 0x0 [0080.367] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.367] GetLastError () returned 0x0 [0080.413] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.413] GetLastError () returned 0x0 [0080.413] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.414] GetLastError () returned 0x0 [0080.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.414] GetLastError () returned 0x0 [0080.414] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x209cf265, Data2=0x2f36, Data3=0x40cc, Data4=([0]=0x84, [1]=0xf, [2]=0xdd, [3]=0x6a, [4]=0x98, [5]=0xe4, [6]=0x9f, [7]=0x64))) returned 0x0 [0080.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adbb8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.414] GetLastError () returned 0x0 [0080.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adb68, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.414] GetLastError () returned 0x0 [0080.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adb68, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.414] GetLastError () returned 0x0 [0080.415] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adbb8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.415] GetLastError () returned 0x0 [0080.415] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adb68, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.415] GetLastError () returned 0x0 [0080.415] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adb68, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.415] GetLastError () returned 0x0 [0080.415] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.415] GetLastError () returned 0x0 [0080.415] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.415] GetLastError () returned 0x0 [0080.415] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.415] GetLastError () returned 0x0 [0080.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad980, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.416] GetLastError () returned 0x0 [0080.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad930, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.416] GetLastError () returned 0x0 [0080.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad930, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.416] GetLastError () returned 0x0 [0080.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.416] GetLastError () returned 0x0 [0080.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.416] GetLastError () returned 0x0 [0080.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.416] GetLastError () returned 0x0 [0080.417] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.417] GetLastError () returned 0x0 [0080.417] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.417] GetLastError () returned 0x0 [0080.418] VirtualQuery (in: lpAddress=0x1acdf4, lpBuffer=0x1addf4, dwLength=0x1c | out: lpBuffer=0x1addf4*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.420] VirtualQuery (in: lpAddress=0x1ace30, lpBuffer=0x1ade30, dwLength=0x1c | out: lpBuffer=0x1ade30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.421] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.421] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.422] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.423] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.423] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.425] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.426] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.426] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.426] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.427] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.427] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.428] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.428] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.430] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.430] VirtualQuery (in: lpAddress=0x1acf9c, lpBuffer=0x1adf9c, dwLength=0x1c | out: lpBuffer=0x1adf9c*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.431] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.432] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.433] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.433] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.434] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9901144, Data2=0x947d, Data3=0x45eb, Data4=([0]=0x8b, [1]=0x64, [2]=0xab, [3]=0xe6, [4]=0x7e, [5]=0xa8, [6]=0x96, [7]=0xce))) returned 0x0 [0080.436] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.436] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.437] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.438] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.438] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.440] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.445] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.446] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.446] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.446] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.446] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.447] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.448] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.449] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.449] VirtualQuery (in: lpAddress=0x1acf9c, lpBuffer=0x1adf9c, dwLength=0x1c | out: lpBuffer=0x1adf9c*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.449] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.451] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.452] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.452] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.452] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xbe0bbb01, Data2=0x5987, Data3=0x47a4, Data4=([0]=0xb0, [1]=0x63, [2]=0xce, [3]=0xba, [4]=0x5b, [5]=0x2e, [6]=0x86, [7]=0xc))) returned 0x0 [0080.453] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x1f01d63c, Data2=0x9e7a, Data3=0x4147, Data4=([0]=0xab, [1]=0xe, [2]=0x8f, [3]=0xb3, [4]=0xf0, [5]=0x9f, [6]=0x44, [7]=0x14))) returned 0x0 [0080.455] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.455] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.456] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.456] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.456] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.457] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.458] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.458] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.459] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.459] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.459] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.460] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.461] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.462] VirtualQuery (in: lpAddress=0x1ad1c4, lpBuffer=0x1ae1c4, dwLength=0x1c | out: lpBuffer=0x1ae1c4*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.463] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad930, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.463] GetLastError () returned 0x0 [0080.463] VirtualQuery (in: lpAddress=0x1ad1c4, lpBuffer=0x1ae1c4, dwLength=0x1c | out: lpBuffer=0x1ae1c4*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.464] VirtualQuery (in: lpAddress=0x1ad1c4, lpBuffer=0x1ae1c4, dwLength=0x1c | out: lpBuffer=0x1ae1c4*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.465] VirtualQuery (in: lpAddress=0x1ad1c4, lpBuffer=0x1ae1c4, dwLength=0x1c | out: lpBuffer=0x1ae1c4*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.466] VirtualQuery (in: lpAddress=0x1acdf4, lpBuffer=0x1addf4, dwLength=0x1c | out: lpBuffer=0x1addf4*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.466] VirtualQuery (in: lpAddress=0x1ace30, lpBuffer=0x1ade30, dwLength=0x1c | out: lpBuffer=0x1ade30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.467] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.467] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.468] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.468] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.468] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.469] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.469] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.469] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.469] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.470] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.471] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.471] VirtualQuery (in: lpAddress=0x1acf9c, lpBuffer=0x1adf9c, dwLength=0x1c | out: lpBuffer=0x1adf9c*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.471] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.472] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.472] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.473] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.473] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x54d09399, Data2=0x7fbd, Data3=0x430b, Data4=([0]=0xab, [1]=0x20, [2]=0xc2, [3]=0xea, [4]=0x56, [5]=0xc5, [6]=0x22, [7]=0x6))) returned 0x0 [0080.475] VirtualQuery (in: lpAddress=0x1acdf4, lpBuffer=0x1addf4, dwLength=0x1c | out: lpBuffer=0x1addf4*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.475] VirtualQuery (in: lpAddress=0x1ace30, lpBuffer=0x1ade30, dwLength=0x1c | out: lpBuffer=0x1ade30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.476] VirtualQuery (in: lpAddress=0x1acefc, lpBuffer=0x1adefc, dwLength=0x1c | out: lpBuffer=0x1adefc*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.476] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9d6f565a, Data2=0xd018, Data3=0x4e29, Data4=([0]=0x85, [1]=0xbb, [2]=0xd8, [3]=0xb1, [4]=0x93, [5]=0x6d, [6]=0x9c, [7]=0x33))) returned 0x0 [0080.477] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xe4bb8310, Data2=0xce77, Data3=0x4dda, Data4=([0]=0xa6, [1]=0xa2, [2]=0x22, [3]=0xe5, [4]=0x96, [5]=0x52, [6]=0x8a, [7]=0xc9))) returned 0x0 [0080.478] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xfe8817aa, Data2=0x229d, Data3=0x470c, Data4=([0]=0x93, [1]=0xc0, [2]=0xa, [3]=0x8a, [4]=0x9b, [5]=0xcb, [6]=0x6c, [7]=0xc3))) returned 0x0 [0080.479] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xd5ef88ae, Data2=0x6561, Data3=0x42ef, Data4=([0]=0xb3, [1]=0xad, [2]=0xc7, [3]=0x3f, [4]=0xd6, [5]=0x16, [6]=0x6e, [7]=0xf1))) returned 0x0 [0080.479] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xb5749886, Data2=0x78cf, Data3=0x4a6e, Data4=([0]=0xb3, [1]=0xb, [2]=0xfb, [3]=0x83, [4]=0xef, [5]=0xd1, [6]=0xe9, [7]=0x7d))) returned 0x0 [0080.480] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa03992b3, Data2=0x727e, Data3=0x4c5b, Data4=([0]=0x97, [1]=0xb2, [2]=0xdc, [3]=0x33, [4]=0x70, [5]=0x4a, [6]=0x55, [7]=0xb1))) returned 0x0 [0080.480] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x1a4629ba, Data2=0x195a, Data3=0x4031, Data4=([0]=0x99, [1]=0x4d, [2]=0xc, [3]=0xfa, [4]=0xd0, [5]=0xaf, [6]=0x85, [7]=0x8f))) returned 0x0 [0080.481] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x55755274, Data2=0xf498, Data3=0x4307, Data4=([0]=0x93, [1]=0x6a, [2]=0x82, [3]=0x35, [4]=0x5b, [5]=0x42, [6]=0xca, [7]=0xdf))) returned 0x0 [0080.482] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.482] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.482] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.483] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.483] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.483] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.484] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.485] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.485] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.485] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.486] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.486] VirtualQuery (in: lpAddress=0x1acd54, lpBuffer=0x1add54, dwLength=0x1c | out: lpBuffer=0x1add54*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.487] VirtualQuery (in: lpAddress=0x1acd90, lpBuffer=0x1add90, dwLength=0x1c | out: lpBuffer=0x1add90*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.487] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.488] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.488] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.489] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.489] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.490] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.490] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.490] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xfbec361, Data2=0x1a65, Data3=0x4861, Data4=([0]=0xab, [1]=0xe0, [2]=0xb8, [3]=0x7f, [4]=0x12, [5]=0x6d, [6]=0x62, [7]=0xf))) returned 0x0 [0080.490] VirtualQuery (in: lpAddress=0x1ad124, lpBuffer=0x1ae124, dwLength=0x1c | out: lpBuffer=0x1ae124*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.491] VirtualQuery (in: lpAddress=0x1ad124, lpBuffer=0x1ae124, dwLength=0x1c | out: lpBuffer=0x1ae124*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.492] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.492] VirtualQuery (in: lpAddress=0x1ad124, lpBuffer=0x1ae124, dwLength=0x1c | out: lpBuffer=0x1ae124*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.492] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.493] VirtualQuery (in: lpAddress=0x1ad124, lpBuffer=0x1ae124, dwLength=0x1c | out: lpBuffer=0x1ae124*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.493] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.493] VirtualQuery (in: lpAddress=0x1ad124, lpBuffer=0x1ae124, dwLength=0x1c | out: lpBuffer=0x1ae124*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.494] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.497] VirtualQuery (in: lpAddress=0x1ad124, lpBuffer=0x1ae124, dwLength=0x1c | out: lpBuffer=0x1ae124*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.497] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.498] VirtualQuery (in: lpAddress=0x1ad124, lpBuffer=0x1ae124, dwLength=0x1c | out: lpBuffer=0x1ae124*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.498] VirtualQuery (in: lpAddress=0x1ad160, lpBuffer=0x1ae160, dwLength=0x1c | out: lpBuffer=0x1ae160*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.499] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.499] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.500] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.500] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.501] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.501] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.502] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.502] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x8a4b35bd, Data2=0xf04a, Data3=0x4313, Data4=([0]=0xa7, [1]=0x29, [2]=0xdb, [3]=0x4d, [4]=0x35, [5]=0xd1, [6]=0x4d, [7]=0x93))) returned 0x0 [0080.502] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.502] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.503] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.504] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.504] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.504] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.505] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.505] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.505] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.505] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.506] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.507] VirtualQuery (in: lpAddress=0x1acf9c, lpBuffer=0x1adf9c, dwLength=0x1c | out: lpBuffer=0x1adf9c*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.507] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.507] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.508] VirtualQuery (in: lpAddress=0x1ad0f8, lpBuffer=0x1ae0f8, dwLength=0x1c | out: lpBuffer=0x1ae0f8*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.508] VirtualQuery (in: lpAddress=0x1ad134, lpBuffer=0x1ae134, dwLength=0x1c | out: lpBuffer=0x1ae134*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.509] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x28ba4559, Data2=0x2fdf, Data3=0x451d, Data4=([0]=0x98, [1]=0x32, [2]=0xa2, [3]=0x51, [4]=0x37, [5]=0xe, [6]=0xfb, [7]=0x78))) returned 0x0 [0080.509] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x689a9280, Data2=0xfaaf, Data3=0x40df, Data4=([0]=0x9c, [1]=0x14, [2]=0x19, [3]=0xda, [4]=0x9a, [5]=0xf9, [6]=0x6b, [7]=0x1f))) returned 0x0 [0080.509] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x3402e45d, Data2=0xa23d, Data3=0x498a, Data4=([0]=0x8c, [1]=0xa6, [2]=0x46, [3]=0x24, [4]=0x0, [5]=0x50, [6]=0x9e, [7]=0xad))) returned 0x0 [0080.510] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x2c875d2, Data2=0x5739, Data3=0x4420, Data4=([0]=0xb0, [1]=0x47, [2]=0x65, [3]=0xf6, [4]=0xb6, [5]=0xe0, [6]=0x94, [7]=0x63))) returned 0x0 [0080.510] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x7e82f251, Data2=0xbd2e, Data3=0x4ead, Data4=([0]=0xa1, [1]=0x2b, [2]=0x5e, [3]=0x9e, [4]=0x8b, [5]=0xee, [6]=0xb3, [7]=0xa8))) returned 0x0 [0080.511] VirtualQuery (in: lpAddress=0x1ad02c, lpBuffer=0x1ae02c, dwLength=0x1c | out: lpBuffer=0x1ae02c*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.511] VirtualQuery (in: lpAddress=0x1ad068, lpBuffer=0x1ae068, dwLength=0x1c | out: lpBuffer=0x1ae068*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.511] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x5b873004, Data2=0x51cf, Data3=0x41e1, Data4=([0]=0xb1, [1]=0xad, [2]=0x2a, [3]=0x7c, [4]=0x82, [5]=0x7f, [6]=0xf5, [7]=0xe8))) returned 0x0 [0080.511] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xeff26fbe, Data2=0x6a26, Data3=0x4485, Data4=([0]=0xa9, [1]=0xd1, [2]=0x91, [3]=0xd5, [4]=0xc3, [5]=0x65, [6]=0xb2, [7]=0x2b))) returned 0x0 [0080.512] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x92afd980, Data2=0x8b2a, Data3=0x4a78, Data4=([0]=0xb9, [1]=0x63, [2]=0xb0, [3]=0x91, [4]=0xf8, [5]=0x48, [6]=0x2, [7]=0xad))) returned 0x0 [0080.512] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0080.512] GetLastError () returned 0x0 [0080.512] SetErrorMode (uMode=0x1) returned 0x1 [0080.512] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0080.513] GetLastError () returned 0x0 [0080.513] GetFileType (hFile=0x304) returned 0x1 [0080.513] SetErrorMode (uMode=0x1) returned 0x1 [0080.513] GetFileType (hFile=0x304) returned 0x1 [0080.513] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.514] GetLastError () returned 0x0 [0080.515] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.515] GetLastError () returned 0x0 [0080.515] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.516] GetLastError () returned 0x0 [0080.516] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.516] GetLastError () returned 0x0 [0080.516] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.516] GetLastError () returned 0x0 [0080.518] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.518] GetLastError () returned 0x0 [0080.518] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.518] GetLastError () returned 0x0 [0080.518] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.518] GetLastError () returned 0x0 [0080.518] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.518] GetLastError () returned 0x0 [0080.520] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.520] GetLastError () returned 0x0 [0080.521] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.521] GetLastError () returned 0x0 [0080.521] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.521] GetLastError () returned 0x0 [0080.521] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.521] GetLastError () returned 0x0 [0080.521] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.521] GetLastError () returned 0x0 [0080.522] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.522] GetLastError () returned 0x0 [0080.522] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.522] GetLastError () returned 0x0 [0080.522] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.522] GetLastError () returned 0x0 [0080.526] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.526] GetLastError () returned 0x0 [0080.526] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.526] GetLastError () returned 0x0 [0080.526] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.526] GetLastError () returned 0x0 [0080.526] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.526] GetLastError () returned 0x0 [0080.527] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0xe67, lpOverlapped=0x0) returned 1 [0080.527] GetLastError () returned 0x0 [0080.527] ReadFile (in: hFile=0x304, lpBuffer=0x261cca3, nNumberOfBytesToRead=0x199, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261cca3*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.527] GetLastError () returned 0x0 [0080.527] ReadFile (in: hFile=0x304, lpBuffer=0x261d69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x261d69c*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.527] GetLastError () returned 0x0 [0080.527] CloseHandle (hObject=0x304) returned 1 [0080.527] GetLastError () returned 0x0 [0080.527] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0080.527] GetLastError () returned 0x0 [0080.528] SetErrorMode (uMode=0x1) returned 0x1 [0080.528] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x263df2c | out: lpFileInformation=0x263df2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a182698, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a182698, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd368cf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0080.528] GetLastError () returned 0x0 [0080.528] SetErrorMode (uMode=0x1) returned 0x1 [0080.528] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0080.528] GetLastError () returned 0x0 [0080.528] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae438 | out: phkResult=0x1ae438*=0x304) returned 0x0 [0080.528] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x0, lpcbData=0x1ae47c*=0x0 | out: lpType=0x1ae480*=0x1, lpData=0x0, lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.528] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x259440, lpcbData=0x1ae47c*=0x56 | out: lpType=0x1ae480*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.528] RegCloseKey (hKey=0x304) returned 0x0 [0080.528] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0080.529] GetLastError () returned 0x0 [0080.529] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0080.529] GetLastError () returned 0x0 [0080.535] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x23d115e9, Data2=0x4b37, Data3=0x4e45, Data4=([0]=0x8b, [1]=0xa3, [2]=0x1, [3]=0x7b, [4]=0x6e, [5]=0x72, [6]=0x2c, [7]=0x93))) returned 0x0 [0080.535] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x67352205, Data2=0x7c51, Data3=0x4827, Data4=([0]=0xae, [1]=0x9a, [2]=0x19, [3]=0xbb, [4]=0x6, [5]=0xe4, [6]=0x68, [7]=0x79))) returned 0x0 [0080.536] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xd8ee0de2, Data2=0x18ce, Data3=0x4140, Data4=([0]=0x9a, [1]=0x11, [2]=0x98, [3]=0xb0, [4]=0x9f, [5]=0xd7, [6]=0x83, [7]=0x5f))) returned 0x0 [0080.536] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xd0a3adc5, Data2=0xc848, Data3=0x4f96, Data4=([0]=0x84, [1]=0x9, [2]=0x0, [3]=0x5d, [4]=0x3a, [5]=0x7e, [6]=0xd6, [7]=0xe6))) returned 0x0 [0080.536] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x8f95fa7a, Data2=0x9ee2, Data3=0x4f64, Data4=([0]=0xb0, [1]=0x4b, [2]=0xa7, [3]=0x17, [4]=0xae, [5]=0x58, [6]=0xe6, [7]=0xff))) returned 0x0 [0080.536] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9a14998e, Data2=0x5e9e, Data3=0x4b60, Data4=([0]=0xae, [1]=0x21, [2]=0xcd, [3]=0x9c, [4]=0x69, [5]=0xa2, [6]=0xd7, [7]=0x86))) returned 0x0 [0080.536] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x3f4a2290, Data2=0x96ac, Data3=0x4490, Data4=([0]=0xb9, [1]=0x84, [2]=0xaf, [3]=0x80, [4]=0xcb, [5]=0xdc, [6]=0x51, [7]=0x81))) returned 0x0 [0080.536] VirtualQuery (in: lpAddress=0x1ad200, lpBuffer=0x1ae200, dwLength=0x1c | out: lpBuffer=0x1ae200*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.537] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x982d8f39, Data2=0xe7e4, Data3=0x4f13, Data4=([0]=0x85, [1]=0xfc, [2]=0x50, [3]=0x61, [4]=0xb3, [5]=0xe9, [6]=0xb2, [7]=0x3))) returned 0x0 [0080.537] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xff272377, Data2=0x3f40, Data3=0x44a8, Data4=([0]=0x9a, [1]=0x1b, [2]=0x23, [3]=0xff, [4]=0x6f, [5]=0x77, [6]=0x1b, [7]=0xc4))) returned 0x0 [0080.537] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x800eafb4, Data2=0x4829, Data3=0x499f, Data4=([0]=0x85, [1]=0xfe, [2]=0xd1, [3]=0x24, [4]=0xc1, [5]=0x9c, [6]=0x10, [7]=0x4c))) returned 0x0 [0080.537] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x51e67800, Data2=0xabfe, Data3=0x47ce, Data4=([0]=0x80, [1]=0xe4, [2]=0xf3, [3]=0xfb, [4]=0xad, [5]=0x70, [6]=0x56, [7]=0x72))) returned 0x0 [0080.538] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xf7a6905c, Data2=0xe2fb, Data3=0x4420, Data4=([0]=0x9a, [1]=0x49, [2]=0x99, [3]=0xdd, [4]=0xb4, [5]=0x54, [6]=0x87, [7]=0xf6))) returned 0x0 [0080.538] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x73be9758, Data2=0x7f81, Data3=0x433e, Data4=([0]=0x8e, [1]=0x60, [2]=0x60, [3]=0xf2, [4]=0x43, [5]=0xa1, [6]=0x84, [7]=0x3c))) returned 0x0 [0080.538] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x5800750c, Data2=0x1844, Data3=0x4250, Data4=([0]=0x8f, [1]=0x91, [2]=0x55, [3]=0xb2, [4]=0x47, [5]=0xaa, [6]=0x35, [7]=0x4a))) returned 0x0 [0080.539] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x6b64c9f0, Data2=0xa6ce, Data3=0x468e, Data4=([0]=0xbb, [1]=0xd, [2]=0xba, [3]=0x9e, [4]=0xe6, [5]=0x39, [6]=0x20, [7]=0x9f))) returned 0x0 [0080.539] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xcd94a897, Data2=0x2a43, Data3=0x4660, Data4=([0]=0xa5, [1]=0xd1, [2]=0x89, [3]=0x74, [4]=0x8c, [5]=0xf4, [6]=0xa6, [7]=0xd4))) returned 0x0 [0080.539] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xff769079, Data2=0x474d, Data3=0x4469, Data4=([0]=0x9d, [1]=0x1b, [2]=0x2a, [3]=0x5c, [4]=0x48, [5]=0x82, [6]=0xf7, [7]=0x0))) returned 0x0 [0080.539] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x3977cc2, Data2=0xe18f, Data3=0x4f3a, Data4=([0]=0x85, [1]=0xc0, [2]=0x3, [3]=0x78, [4]=0x26, [5]=0x45, [6]=0xee, [7]=0x27))) returned 0x0 [0080.540] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x3ba33c2d, Data2=0x5524, Data3=0x44ec, Data4=([0]=0x97, [1]=0x2d, [2]=0x5a, [3]=0xae, [4]=0xf4, [5]=0x77, [6]=0x48, [7]=0x16))) returned 0x0 [0080.540] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.540] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.541] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.541] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xb0dccd, Data2=0x62ee, Data3=0x41d3, Data4=([0]=0xaf, [1]=0x2, [2]=0x4b, [3]=0xff, [4]=0x38, [5]=0x1c, [6]=0x3c, [7]=0xf))) returned 0x0 [0080.541] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x5fc5a1ea, Data2=0x3fe9, Data3=0x4a04, Data4=([0]=0x83, [1]=0x84, [2]=0x93, [3]=0xb1, [4]=0xb5, [5]=0x91, [6]=0xef, [7]=0x27))) returned 0x0 [0080.542] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x2cb96675, Data2=0x1779, Data3=0x4cc0, Data4=([0]=0x97, [1]=0x71, [2]=0x29, [3]=0x61, [4]=0x52, [5]=0xbf, [6]=0xac, [7]=0xc7))) returned 0x0 [0080.543] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x20203619, Data2=0xec37, Data3=0x4c4a, Data4=([0]=0xb9, [1]=0x4f, [2]=0x20, [3]=0xaf, [4]=0x53, [5]=0x40, [6]=0xf5, [7]=0x1a))) returned 0x0 [0080.543] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xdb8f0ddf, Data2=0x9ed2, Data3=0x4e21, Data4=([0]=0x81, [1]=0xb1, [2]=0xff, [3]=0x90, [4]=0x7e, [5]=0x23, [6]=0x2a, [7]=0xb9))) returned 0x0 [0080.543] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xf16558b4, Data2=0xe2f2, Data3=0x414f, Data4=([0]=0xa2, [1]=0x7f, [2]=0xbd, [3]=0xec, [4]=0x43, [5]=0xb1, [6]=0xa6, [7]=0x49))) returned 0x0 [0080.544] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xee6817c7, Data2=0x3408, Data3=0x4687, Data4=([0]=0x9a, [1]=0x3, [2]=0xcd, [3]=0xb0, [4]=0x6, [5]=0x7a, [6]=0x11, [7]=0x60))) returned 0x0 [0080.544] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9431b112, Data2=0xde2f, Data3=0x4839, Data4=([0]=0x91, [1]=0xf0, [2]=0x51, [3]=0x8b, [4]=0x7d, [5]=0xa3, [6]=0x51, [7]=0x14))) returned 0x0 [0080.544] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xd12ed2, Data2=0xf458, Data3=0x420d, Data4=([0]=0x91, [1]=0x59, [2]=0x23, [3]=0xd2, [4]=0x93, [5]=0xad, [6]=0x7a, [7]=0x70))) returned 0x0 [0080.544] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x661bd1da, Data2=0x110c, Data3=0x472a, Data4=([0]=0xb9, [1]=0x1f, [2]=0xd1, [3]=0xa8, [4]=0x7e, [5]=0x21, [6]=0x5a, [7]=0xdd))) returned 0x0 [0080.545] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x22555ca3, Data2=0x9925, Data3=0x439e, Data4=([0]=0xb3, [1]=0x88, [2]=0xcb, [3]=0xdd, [4]=0x8, [5]=0xff, [6]=0x72, [7]=0x60))) returned 0x0 [0080.545] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x9966a454, Data2=0x57ef, Data3=0x4062, Data4=([0]=0x87, [1]=0x26, [2]=0x61, [3]=0xcf, [4]=0xd2, [5]=0xa0, [6]=0xfb, [7]=0xfc))) returned 0x0 [0080.545] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x95ba9f72, Data2=0x1f6d, Data3=0x4e5a, Data4=([0]=0x96, [1]=0xc1, [2]=0x88, [3]=0x50, [4]=0x3e, [5]=0xd9, [6]=0x42, [7]=0x4a))) returned 0x0 [0080.545] VirtualQuery (in: lpAddress=0x1ad200, lpBuffer=0x1ae200, dwLength=0x1c | out: lpBuffer=0x1ae200*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.545] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x83b8310d, Data2=0xeb43, Data3=0x488c, Data4=([0]=0x98, [1]=0xf5, [2]=0xb9, [3]=0x9f, [4]=0xdc, [5]=0x4b, [6]=0x47, [7]=0x10))) returned 0x0 [0080.546] VirtualQuery (in: lpAddress=0x1ad200, lpBuffer=0x1ae200, dwLength=0x1c | out: lpBuffer=0x1ae200*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.548] VirtualQuery (in: lpAddress=0x1ad200, lpBuffer=0x1ae200, dwLength=0x1c | out: lpBuffer=0x1ae200*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.551] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x5b5bb419, Data2=0xb993, Data3=0x4b05, Data4=([0]=0x8c, [1]=0xe9, [2]=0x50, [3]=0x88, [4]=0x61, [5]=0x17, [6]=0xf3, [7]=0xd6))) returned 0x0 [0080.551] VirtualQuery (in: lpAddress=0x1ad200, lpBuffer=0x1ae200, dwLength=0x1c | out: lpBuffer=0x1ae200*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.551] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xbe1dde1c, Data2=0x78c0, Data3=0x4853, Data4=([0]=0xac, [1]=0x8d, [2]=0x41, [3]=0x51, [4]=0xbd, [5]=0xfb, [6]=0x7b, [7]=0x66))) returned 0x0 [0080.552] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x21700f2e, Data2=0x3257, Data3=0x46c2, Data4=([0]=0x86, [1]=0x72, [2]=0x6e, [3]=0x27, [4]=0x4a, [5]=0x31, [6]=0x56, [7]=0xbb))) returned 0x0 [0080.552] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x72e9fa1b, Data2=0xfd79, Data3=0x4676, Data4=([0]=0x97, [1]=0xf, [2]=0x90, [3]=0x81, [4]=0x5e, [5]=0xd1, [6]=0x18, [7]=0xb0))) returned 0x0 [0080.552] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xc485a3c2, Data2=0x8163, Data3=0x460f, Data4=([0]=0xa9, [1]=0x82, [2]=0xb7, [3]=0x79, [4]=0xfb, [5]=0x44, [6]=0x80, [7]=0xee))) returned 0x0 [0080.552] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xf6c0e220, Data2=0xe0b7, Data3=0x4035, Data4=([0]=0x9e, [1]=0xd0, [2]=0x9b, [3]=0xa3, [4]=0x6a, [5]=0x3, [6]=0xe2, [7]=0xc7))) returned 0x0 [0080.552] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x1b081142, Data2=0x8933, Data3=0x43fd, Data4=([0]=0xb1, [1]=0x22, [2]=0xc, [3]=0x24, [4]=0xc9, [5]=0xf7, [6]=0x21, [7]=0x36))) returned 0x0 [0080.553] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x6ace8e2b, Data2=0xdd21, Data3=0x4bb6, Data4=([0]=0x9b, [1]=0xe8, [2]=0x6e, [3]=0x12, [4]=0x84, [5]=0x27, [6]=0x58, [7]=0xf7))) returned 0x0 [0080.553] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.553] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xec761a1d, Data2=0xa64c, Data3=0x4c8a, Data4=([0]=0xb1, [1]=0xfa, [2]=0xfe, [3]=0xdd, [4]=0x1a, [5]=0xa9, [6]=0x63, [7]=0xb4))) returned 0x0 [0080.554] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xfb1a7aa0, Data2=0xc12d, Data3=0x4712, Data4=([0]=0xbe, [1]=0x14, [2]=0xfe, [3]=0xe1, [4]=0xc4, [5]=0xc1, [6]=0xcf, [7]=0xbe))) returned 0x0 [0080.554] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa6b637f1, Data2=0xe2d2, Data3=0x444a, Data4=([0]=0xae, [1]=0x11, [2]=0x83, [3]=0x39, [4]=0xaf, [5]=0x17, [6]=0x57, [7]=0x74))) returned 0x0 [0080.554] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xaa15c4ca, Data2=0x5db9, Data3=0x4773, Data4=([0]=0x87, [1]=0x0, [2]=0x27, [3]=0x6e, [4]=0x2e, [5]=0xb8, [6]=0xdc, [7]=0x73))) returned 0x0 [0080.554] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa50a30, Data2=0xae65, Data3=0x4707, Data4=([0]=0x84, [1]=0x1f, [2]=0x5b, [3]=0xe4, [4]=0x76, [5]=0x23, [6]=0x67, [7]=0x3))) returned 0x0 [0080.554] VirtualQuery (in: lpAddress=0x1ad1e0, lpBuffer=0x1ae1e0, dwLength=0x1c | out: lpBuffer=0x1ae1e0*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.555] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x771f1ec5, Data2=0x5b77, Data3=0x47d3, Data4=([0]=0x81, [1]=0x57, [2]=0x99, [3]=0x7d, [4]=0x81, [5]=0xb5, [6]=0x87, [7]=0x29))) returned 0x0 [0080.555] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xd6e7933, Data2=0xaca1, Data3=0x4aca, Data4=([0]=0xba, [1]=0xc2, [2]=0xcc, [3]=0xaf, [4]=0xcf, [5]=0xe8, [6]=0x49, [7]=0xfc))) returned 0x0 [0080.555] VirtualQuery (in: lpAddress=0x1ad208, lpBuffer=0x1ae208, dwLength=0x1c | out: lpBuffer=0x1ae208*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.555] VirtualQuery (in: lpAddress=0x1ad208, lpBuffer=0x1ae208, dwLength=0x1c | out: lpBuffer=0x1ae208*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.556] VirtualQuery (in: lpAddress=0x1ad208, lpBuffer=0x1ae208, dwLength=0x1c | out: lpBuffer=0x1ae208*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.556] VirtualQuery (in: lpAddress=0x1ad208, lpBuffer=0x1ae208, dwLength=0x1c | out: lpBuffer=0x1ae208*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.556] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0080.556] GetLastError () returned 0x0 [0080.556] SetErrorMode (uMode=0x1) returned 0x1 [0080.556] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0080.557] GetLastError () returned 0x0 [0080.557] GetFileType (hFile=0x304) returned 0x1 [0080.557] SetErrorMode (uMode=0x1) returned 0x1 [0080.557] GetFileType (hFile=0x304) returned 0x1 [0080.557] ReadFile (in: hFile=0x304, lpBuffer=0x270e074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x270e074*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.559] GetLastError () returned 0x0 [0080.559] ReadFile (in: hFile=0x304, lpBuffer=0x270e074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x270e074*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.559] GetLastError () returned 0x0 [0080.560] ReadFile (in: hFile=0x304, lpBuffer=0x270e074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x270e074*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.560] GetLastError () returned 0x0 [0080.560] ReadFile (in: hFile=0x304, lpBuffer=0x270e074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x270e074*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.560] GetLastError () returned 0x0 [0080.561] ReadFile (in: hFile=0x304, lpBuffer=0x270e074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x270e074*, lpNumberOfBytesRead=0x1ae4b4*=0x8b4, lpOverlapped=0x0) returned 1 [0080.561] GetLastError () returned 0x0 [0080.561] ReadFile (in: hFile=0x304, lpBuffer=0x270d4c8, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x270d4c8*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.561] GetLastError () returned 0x0 [0080.561] ReadFile (in: hFile=0x304, lpBuffer=0x270e074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x270e074*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.561] GetLastError () returned 0x0 [0080.562] CloseHandle (hObject=0x304) returned 1 [0080.562] GetLastError () returned 0x0 [0080.562] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0080.562] GetLastError () returned 0x0 [0080.562] SetErrorMode (uMode=0x1) returned 0x1 [0080.562] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x272f070 | out: lpFileInformation=0x272f070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0080.562] GetLastError () returned 0x0 [0080.562] SetErrorMode (uMode=0x1) returned 0x1 [0080.562] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0080.562] GetLastError () returned 0x0 [0080.562] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae438 | out: phkResult=0x1ae438*=0x304) returned 0x0 [0080.562] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x0, lpcbData=0x1ae47c*=0x0 | out: lpType=0x1ae480*=0x1, lpData=0x0, lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.562] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x259440, lpcbData=0x1ae47c*=0x56 | out: lpType=0x1ae480*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.563] RegCloseKey (hKey=0x304) returned 0x0 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0080.563] GetLastError () returned 0x0 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0080.563] GetLastError () returned 0x0 [0080.564] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x59303e0e, Data2=0x50d9, Data3=0x4690, Data4=([0]=0x9b, [1]=0x20, [2]=0x9a, [3]=0x30, [4]=0x12, [5]=0xe2, [6]=0x40, [7]=0x9c))) returned 0x0 [0080.565] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xa4939400, Data2=0xf4be, Data3=0x48ea, Data4=([0]=0xaf, [1]=0x2a, [2]=0x63, [3]=0x8f, [4]=0xb5, [5]=0xac, [6]=0xa9, [7]=0x50))) returned 0x0 [0080.565] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0080.565] GetLastError () returned 0x0 [0080.565] SetErrorMode (uMode=0x1) returned 0x1 [0080.565] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0080.565] GetLastError () returned 0x0 [0080.565] GetFileType (hFile=0x304) returned 0x1 [0080.565] SetErrorMode (uMode=0x1) returned 0x1 [0080.565] GetFileType (hFile=0x304) returned 0x1 [0080.565] ReadFile (in: hFile=0x304, lpBuffer=0x2744f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2744f80*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.567] GetLastError () returned 0x0 [0080.567] ReadFile (in: hFile=0x304, lpBuffer=0x2744f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2744f80*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.567] GetLastError () returned 0x0 [0080.568] ReadFile (in: hFile=0x304, lpBuffer=0x2744f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2744f80*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.568] GetLastError () returned 0x0 [0080.568] ReadFile (in: hFile=0x304, lpBuffer=0x2744f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2744f80*, lpNumberOfBytesRead=0x1ae4b4*=0x1000, lpOverlapped=0x0) returned 1 [0080.568] GetLastError () returned 0x0 [0080.570] ReadFile (in: hFile=0x304, lpBuffer=0x2744f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2744f80*, lpNumberOfBytesRead=0x1ae4b4*=0xe98, lpOverlapped=0x0) returned 1 [0080.570] GetLastError () returned 0x0 [0080.570] ReadFile (in: hFile=0x304, lpBuffer=0x27445b8, nNumberOfBytesToRead=0x168, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x27445b8*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.570] GetLastError () returned 0x0 [0080.570] ReadFile (in: hFile=0x304, lpBuffer=0x2744f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ae4b4, lpOverlapped=0x0 | out: lpBuffer=0x2744f80*, lpNumberOfBytesRead=0x1ae4b4*=0x0, lpOverlapped=0x0) returned 1 [0080.570] GetLastError () returned 0x0 [0080.570] CloseHandle (hObject=0x304) returned 1 [0080.570] GetLastError () returned 0x0 [0080.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1ae014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0080.570] GetLastError () returned 0x0 [0080.570] SetErrorMode (uMode=0x1) returned 0x1 [0080.570] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2765f7c | out: lpFileInformation=0x2765f7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0080.570] GetLastError () returned 0x0 [0080.570] SetErrorMode (uMode=0x1) returned 0x1 [0080.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0080.571] GetLastError () returned 0x0 [0080.571] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae438 | out: phkResult=0x1ae438*=0x304) returned 0x0 [0080.571] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x0, lpcbData=0x1ae47c*=0x0 | out: lpType=0x1ae480*=0x1, lpData=0x0, lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.571] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae480, lpData=0x259440, lpcbData=0x1ae47c*=0x56 | out: lpType=0x1ae480*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae47c*=0x56) returned 0x0 [0080.571] RegCloseKey (hKey=0x304) returned 0x0 [0080.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0080.571] GetLastError () returned 0x0 [0080.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x1adf74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0080.571] GetLastError () returned 0x0 [0080.573] VirtualQuery (in: lpAddress=0x1ad190, lpBuffer=0x1ae190, dwLength=0x1c | out: lpBuffer=0x1ae190*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0080.573] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0xb634b4a2, Data2=0x2b25, Data3=0x4ba7, Data4=([0]=0x96, [1]=0x33, [2]=0xde, [3]=0x93, [4]=0x6c, [5]=0x9, [6]=0xe3, [7]=0xe))) returned 0x0 [0080.573] CoCreateGuid (in: pguid=0x1ae4a8 | out: pguid=0x1ae4a8*(Data1=0x30aba9f8, Data2=0x914e, Data3=0x45db, Data4=([0]=0xaa, [1]=0x64, [2]=0x9, [3]=0xf3, [4]=0xf, [5]=0x3a, [6]=0xae, [7]=0x76))) returned 0x0 [0080.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0080.604] GetLastError () returned 0x57 [0080.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0080.604] GetLastError () returned 0x57 [0080.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0080.622] GetLastError () returned 0x57 [0080.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0080.623] GetLastError () returned 0x57 [0080.625] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.625] GetLastError () returned 0x57 [0080.626] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.626] GetLastError () returned 0x57 [0080.628] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0080.628] GetLastError () returned 0x57 [0080.628] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0080.628] GetLastError () returned 0x57 [0080.631] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.631] GetLastError () returned 0x57 [0080.631] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0080.631] GetLastError () returned 0x57 [0080.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0080.633] GetLastError () returned 0x57 [0080.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0080.633] GetLastError () returned 0x57 [0080.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0080.635] GetLastError () returned 0x57 [0080.636] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x1ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0080.636] GetLastError () returned 0x57 [0080.641] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.641] GetLastError () returned 0xcb [0080.642] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.642] GetLastError () returned 0xcb [0080.643] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.643] GetLastError () returned 0xcb [0080.644] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.644] GetLastError () returned 0xcb [0080.649] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.649] GetLastError () returned 0xcb [0080.651] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.651] GetLastError () returned 0xcb [0080.652] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.652] GetLastError () returned 0xcb [0080.654] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae52c | out: phkResult=0x1ae52c*=0x304) returned 0x0 [0080.655] RegQueryInfoKeyW (in: hKey=0x304, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x1ae57c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae580, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x1ae57c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae580*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.657] RegEnumValueW (in: hKey=0x304, dwIndex=0x0, lpValueName=0x259440, lpcchValueName=0x1ae5a4, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x1ae5a4, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0080.658] RegEnumValueW (in: hKey=0x304, dwIndex=0x1, lpValueName=0x259440, lpcchValueName=0x1ae5a4, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x1ae5a4, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0080.658] RegEnumValueW (in: hKey=0x304, dwIndex=0x2, lpValueName=0x259440, lpcchValueName=0x1ae5a4, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x1ae5a4, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0080.658] RegQueryValueExW (in: hKey=0x304, lpValueName="StackVersion", lpReserved=0x0, lpType=0x1ae584, lpData=0x0, lpcbData=0x1ae580*=0x0 | out: lpType=0x1ae584*=0x1, lpData=0x0, lpcbData=0x1ae580*=0x8) returned 0x0 [0080.658] RegQueryValueExW (in: hKey=0x304, lpValueName="StackVersion", lpReserved=0x0, lpType=0x1ae584, lpData=0x259440, lpcbData=0x1ae580*=0x8 | out: lpType=0x1ae584*=0x1, lpData="2.0", lpcbData=0x1ae580*=0x8) returned 0x0 [0080.731] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4e8 | out: phkResult=0x1ae4e8*=0x308) returned 0x0 [0080.731] RegQueryInfoKeyW (in: hKey=0x308, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x1ae538, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae53c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x1ae538*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae53c*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.731] RegEnumValueW (in: hKey=0x308, dwIndex=0x0, lpValueName=0x259440, lpcchValueName=0x1ae560, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x1ae560, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0080.731] RegEnumValueW (in: hKey=0x308, dwIndex=0x1, lpValueName=0x259440, lpcchValueName=0x1ae560, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x1ae560, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0080.732] RegEnumValueW (in: hKey=0x308, dwIndex=0x2, lpValueName=0x259440, lpcchValueName=0x1ae560, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x1ae560, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0080.732] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0x1ae540, lpData=0x0, lpcbData=0x1ae53c*=0x0 | out: lpType=0x1ae540*=0x1, lpData=0x0, lpcbData=0x1ae53c*=0x8) returned 0x0 [0080.732] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0x1ae540, lpData=0x259440, lpcbData=0x1ae53c*=0x8 | out: lpType=0x1ae540*=0x1, lpData="2.0", lpcbData=0x1ae53c*=0x8) returned 0x0 [0080.733] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.733] GetLastError () returned 0xcb [0080.737] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.737] GetLastError () returned 0xcb [0080.742] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4a8 | out: phkResult=0x1ae4a8*=0x30c) returned 0x0 [0080.742] RegQueryInfoKeyW (in: hKey=0x30c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x1ae510, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae50c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x1ae510*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae50c*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.743] RegEnumKeyExW (in: hKey=0x30c, dwIndex=0x0, lpName=0x259440, lpcchName=0x1ae52c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x1ae52c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.743] RegEnumKeyExW (in: hKey=0x30c, dwIndex=0x1, lpName=0x259440, lpcchName=0x1ae52c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x1ae52c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.744] RegEnumKeyExW (in: hKey=0x30c, dwIndex=0x2, lpName=0x259440, lpcchName=0x1ae52c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x1ae52c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.744] RegEnumKeyExW (in: hKey=0x30c, dwIndex=0x3, lpName=0x259440, lpcchName=0x1ae52c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x1ae52c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.744] RegEnumKeyExW (in: hKey=0x30c, dwIndex=0x4, lpName=0x259440, lpcchName=0x1ae52c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x1ae52c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.744] RegEnumKeyExW (in: hKey=0x30c, dwIndex=0x5, lpName=0x259440, lpcchName=0x1ae52c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x1ae52c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.744] RegEnumKeyExW (in: hKey=0x30c, dwIndex=0x6, lpName=0x259440, lpcchName=0x1ae52c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x1ae52c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.745] RegEnumKeyExW (in: hKey=0x30c, dwIndex=0x7, lpName=0x259440, lpcchName=0x1ae52c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x1ae52c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.745] RegEnumKeyExW (in: hKey=0x30c, dwIndex=0x8, lpName=0x259440, lpcchName=0x1ae52c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x1ae52c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.745] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x328) returned 0x0 [0080.745] RegOpenKeyExW (in: hKey=0x328, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x0) returned 0x2 [0080.745] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x338) returned 0x0 [0080.746] RegOpenKeyExW (in: hKey=0x338, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x0) returned 0x2 [0080.746] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x33c) returned 0x0 [0080.746] RegOpenKeyExW (in: hKey=0x33c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x0) returned 0x2 [0080.746] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x340) returned 0x0 [0080.746] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x0) returned 0x2 [0080.746] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x344) returned 0x0 [0080.746] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x0) returned 0x2 [0080.747] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x348) returned 0x0 [0080.747] RegOpenKeyExW (in: hKey=0x348, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x0) returned 0x2 [0080.747] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x34c) returned 0x0 [0080.747] RegOpenKeyExW (in: hKey=0x34c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x0) returned 0x2 [0080.747] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x350) returned 0x0 [0080.747] RegOpenKeyExW (in: hKey=0x350, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x0) returned 0x2 [0080.747] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x354) returned 0x0 [0080.747] RegOpenKeyExW (in: hKey=0x354, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4d8 | out: phkResult=0x1ae4d8*=0x358) returned 0x0 [0080.747] RegCloseKey (hKey=0x358) returned 0x0 [0080.748] RegCloseKey (hKey=0x30c) returned 0x0 [0080.748] RegCloseKey (hKey=0x354) returned 0x0 [0080.923] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae624 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae624) returned 0x1 [0080.925] GetLastError () returned 0x3 [0080.926] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae62c | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae62c) returned 1 [0080.997] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae48c | out: phkResult=0x1ae48c*=0x35c) returned 0x0 [0080.997] RegQueryInfoKeyW (in: hKey=0x35c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x1ae4f4, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae4f0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x1ae4f4*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae4f0*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.997] RegEnumKeyExW (in: hKey=0x35c, dwIndex=0x0, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.997] RegEnumKeyExW (in: hKey=0x35c, dwIndex=0x1, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.997] RegEnumKeyExW (in: hKey=0x35c, dwIndex=0x2, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.998] RegEnumKeyExW (in: hKey=0x35c, dwIndex=0x3, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.998] RegEnumKeyExW (in: hKey=0x35c, dwIndex=0x4, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.998] RegEnumKeyExW (in: hKey=0x35c, dwIndex=0x5, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.998] RegEnumKeyExW (in: hKey=0x35c, dwIndex=0x6, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.999] RegEnumKeyExW (in: hKey=0x35c, dwIndex=0x7, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.999] RegEnumKeyExW (in: hKey=0x35c, dwIndex=0x8, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0080.999] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x360) returned 0x0 [0081.000] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.000] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x364) returned 0x0 [0081.000] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.000] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x368) returned 0x0 [0081.001] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.001] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x36c) returned 0x0 [0081.001] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.001] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x370) returned 0x0 [0081.001] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.001] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x374) returned 0x0 [0081.002] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.002] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x378) returned 0x0 [0081.002] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.002] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x37c) returned 0x0 [0081.003] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.003] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x380) returned 0x0 [0081.003] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x384) returned 0x0 [0081.003] RegCloseKey (hKey=0x384) returned 0x0 [0081.003] RegCloseKey (hKey=0x35c) returned 0x0 [0081.003] RegCloseKey (hKey=0x380) returned 0x0 [0081.004] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae48c | out: phkResult=0x1ae48c*=0x380) returned 0x0 [0081.004] RegQueryInfoKeyW (in: hKey=0x380, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x1ae4f4, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae4f0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x1ae4f4*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae4f0*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.004] RegEnumKeyExW (in: hKey=0x380, dwIndex=0x0, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.004] RegEnumKeyExW (in: hKey=0x380, dwIndex=0x1, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.004] RegEnumKeyExW (in: hKey=0x380, dwIndex=0x2, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.005] RegEnumKeyExW (in: hKey=0x380, dwIndex=0x3, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.005] RegEnumKeyExW (in: hKey=0x380, dwIndex=0x4, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.005] RegEnumKeyExW (in: hKey=0x380, dwIndex=0x5, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.005] RegEnumKeyExW (in: hKey=0x380, dwIndex=0x6, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.006] RegEnumKeyExW (in: hKey=0x380, dwIndex=0x7, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.006] RegEnumKeyExW (in: hKey=0x380, dwIndex=0x8, lpName=0x259440, lpcchName=0x1ae510, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x1ae510, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.006] RegOpenKeyExW (in: hKey=0x380, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x35c) returned 0x0 [0081.007] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.007] RegOpenKeyExW (in: hKey=0x380, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x384) returned 0x0 [0081.007] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.007] RegOpenKeyExW (in: hKey=0x380, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x388) returned 0x0 [0081.007] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.007] RegOpenKeyExW (in: hKey=0x380, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x38c) returned 0x0 [0081.008] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.008] RegOpenKeyExW (in: hKey=0x380, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x390) returned 0x0 [0081.008] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.008] RegOpenKeyExW (in: hKey=0x380, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x394) returned 0x0 [0081.008] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.009] RegOpenKeyExW (in: hKey=0x380, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x398) returned 0x0 [0081.009] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.009] RegOpenKeyExW (in: hKey=0x380, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x39c) returned 0x0 [0081.009] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x0) returned 0x2 [0081.009] RegOpenKeyExW (in: hKey=0x380, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x3a0) returned 0x0 [0081.010] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4bc | out: phkResult=0x1ae4bc*=0x3a4) returned 0x0 [0081.010] RegCloseKey (hKey=0x3a4) returned 0x0 [0081.010] RegCloseKey (hKey=0x380) returned 0x0 [0081.011] RegCloseKey (hKey=0x3a0) returned 0x0 [0081.011] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae480 | out: phkResult=0x1ae480*=0x3a0) returned 0x0 [0081.011] RegQueryInfoKeyW (in: hKey=0x3a0, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x1ae4e8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae4e4, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x1ae4e8*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1ae4e4*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.011] RegEnumKeyExW (in: hKey=0x3a0, dwIndex=0x0, lpName=0x259440, lpcchName=0x1ae504, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x1ae504, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.012] RegEnumKeyExW (in: hKey=0x3a0, dwIndex=0x1, lpName=0x259440, lpcchName=0x1ae504, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x1ae504, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.012] RegEnumKeyExW (in: hKey=0x3a0, dwIndex=0x2, lpName=0x259440, lpcchName=0x1ae504, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x1ae504, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.012] RegEnumKeyExW (in: hKey=0x3a0, dwIndex=0x3, lpName=0x259440, lpcchName=0x1ae504, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x1ae504, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.012] RegEnumKeyExW (in: hKey=0x3a0, dwIndex=0x4, lpName=0x259440, lpcchName=0x1ae504, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x1ae504, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.013] RegEnumKeyExW (in: hKey=0x3a0, dwIndex=0x5, lpName=0x259440, lpcchName=0x1ae504, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x1ae504, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.013] RegEnumKeyExW (in: hKey=0x3a0, dwIndex=0x6, lpName=0x259440, lpcchName=0x1ae504, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x1ae504, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.013] RegEnumKeyExW (in: hKey=0x3a0, dwIndex=0x7, lpName=0x259440, lpcchName=0x1ae504, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x1ae504, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.013] RegEnumKeyExW (in: hKey=0x3a0, dwIndex=0x8, lpName=0x259440, lpcchName=0x1ae504, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x1ae504, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0081.014] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x380) returned 0x0 [0081.014] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x0) returned 0x2 [0081.014] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x3a4) returned 0x0 [0081.014] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x0) returned 0x2 [0081.014] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x3a8) returned 0x0 [0081.015] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x0) returned 0x2 [0081.015] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x3ac) returned 0x0 [0081.015] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x0) returned 0x2 [0081.015] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x3b0) returned 0x0 [0081.015] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x0) returned 0x2 [0081.016] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x3b4) returned 0x0 [0081.016] RegOpenKeyExW (in: hKey=0x3b4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x0) returned 0x2 [0081.016] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x3b8) returned 0x0 [0081.016] RegOpenKeyExW (in: hKey=0x3b8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x0) returned 0x2 [0081.016] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x3bc) returned 0x0 [0081.017] RegOpenKeyExW (in: hKey=0x3bc, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x0) returned 0x2 [0081.017] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x3c0) returned 0x0 [0081.017] RegOpenKeyExW (in: hKey=0x3c0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae4b0 | out: phkResult=0x1ae4b0*=0x3c4) returned 0x0 [0081.017] RegCloseKey (hKey=0x3c4) returned 0x0 [0081.017] RegCloseKey (hKey=0x3a0) returned 0x0 [0081.017] RegCloseKey (hKey=0x3c0) returned 0x0 [0081.020] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x4340004 [0081.040] GetLastError () returned 0x0 [0081.041] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x27ddd0c*="WSMan", lpRawData=0x27ddbb4) returned 1 [0081.042] GetLastError () returned 0x0 [0081.044] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.044] GetLastError () returned 0xcb [0081.044] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae024, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.044] GetLastError () returned 0xcb [0081.044] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adfd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.044] GetLastError () returned 0xcb [0081.044] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adfd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.044] GetLastError () returned 0xcb [0081.044] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae624 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae624) returned 0x1 [0081.045] GetLastError () returned 0xcb [0081.045] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae62c | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae62c) returned 1 [0081.045] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x27e1b94*="Alias", lpRawData=0x27e1a50) returned 1 [0081.046] GetLastError () returned 0x0 [0081.047] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.047] GetLastError () returned 0xcb [0081.048] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae024, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.048] GetLastError () returned 0xcb [0081.048] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adfd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.048] GetLastError () returned 0xcb [0081.048] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adfd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.048] GetLastError () returned 0xcb [0081.048] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae624 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae624) returned 0x1 [0081.048] GetLastError () returned 0xcb [0081.048] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae62c | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae62c) returned 1 [0081.049] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x27e5ad4*="Environment", lpRawData=0x27e5990) returned 1 [0081.049] GetLastError () returned 0x0 [0081.050] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.051] GetLastError () returned 0xcb [0081.051] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0081.051] GetLastError () returned 0xcb [0081.051] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="\\Users\\EEBsYm5") returned 0xe [0081.051] GetLastError () returned 0xcb [0081.051] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5", nBufferLength=0x105, lpBuffer=0x1ae154, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5", lpFilePart=0x0) returned 0x10 [0081.051] GetLastError () returned 0xcb [0081.051] SetErrorMode (uMode=0x1) returned 0x1 [0081.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5" (normalized: "c:\\users\\eebsym5"), fInfoLevelId=0x0, lpFileInformation=0x1ae5d4 | out: lpFileInformation=0x1ae5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.051] GetLastError () returned 0xcb [0081.051] SetErrorMode (uMode=0x1) returned 0x1 [0081.052] GetLogicalDrives () returned 0x4 [0081.052] GetLastError () returned 0xcb [0081.053] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1ae078, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.053] GetLastError () returned 0xcb [0081.054] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0081.054] GetLastError () returned 0xcb [0081.054] SetErrorMode (uMode=0x1) returned 0x1 [0081.056] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x259540, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x1ae5a0, lpMaximumComponentLength=0x1ae59c, lpFileSystemFlags=0x1ae598, lpFileSystemNameBuffer=0x259440, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x1ae5a0*=0x90c08a66, lpMaximumComponentLength=0x1ae59c*=0xff, lpFileSystemFlags=0x1ae598*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0081.056] GetLastError () returned 0xcb [0081.056] SetErrorMode (uMode=0x1) returned 0x1 [0081.056] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0081.056] GetLastError () returned 0xcb [0081.056] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae100, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.057] GetLastError () returned 0xcb [0081.057] SetErrorMode (uMode=0x1) returned 0x1 [0081.057] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x27e6c70 | out: lpFileInformation=0x27e6c70*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.057] GetLastError () returned 0xcb [0081.057] SetErrorMode (uMode=0x1) returned 0x1 [0081.057] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae100, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.057] GetLastError () returned 0xcb [0081.057] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1ae08c, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.057] GetLastError () returned 0xcb [0081.057] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0081.057] GetLastError () returned 0xcb [0081.059] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1ae048, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.059] GetLastError () returned 0xcb [0081.059] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0081.059] GetLastError () returned 0xcb [0081.060] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae050, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.061] GetLastError () returned 0xcb [0081.061] SetErrorMode (uMode=0x1) returned 0x1 [0081.061] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x27e78c8 | out: lpFileInformation=0x27e78c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.061] GetLastError () returned 0xcb [0081.061] SetErrorMode (uMode=0x1) returned 0x1 [0081.061] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae058, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.061] GetLastError () returned 0xcb [0081.061] SetErrorMode (uMode=0x1) returned 0x1 [0081.061] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x27e7a18 | out: lpFileInformation=0x27e7a18*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.061] GetLastError () returned 0xcb [0081.061] SetErrorMode (uMode=0x1) returned 0x1 [0081.061] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae09c, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.061] GetLastError () returned 0xcb [0081.061] SetErrorMode (uMode=0x1) returned 0x1 [0081.061] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x27e7bb8 | out: lpFileInformation=0x27e7bb8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.062] GetLastError () returned 0xcb [0081.062] SetErrorMode (uMode=0x1) returned 0x1 [0081.062] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae624 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae624) returned 0x1 [0081.062] GetLastError () returned 0xcb [0081.062] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae62c | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae62c) returned 1 [0081.063] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x27ea8ec*="FileSystem", lpRawData=0x27ea7a8) returned 1 [0081.064] GetLastError () returned 0x0 [0081.065] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.065] GetLastError () returned 0xcb [0081.066] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.066] GetLastError () returned 0xcb [0081.066] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.066] GetLastError () returned 0xcb [0081.066] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.067] GetLastError () returned 0xcb [0081.067] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae624 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae624) returned 0x1 [0081.067] GetLastError () returned 0xcb [0081.067] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae62c | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae62c) returned 1 [0081.068] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x27ee988*="Function", lpRawData=0x27ee844) returned 1 [0081.068] GetLastError () returned 0x0 [0081.072] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.072] GetLastError () returned 0xcb [0081.078] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae038, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.078] GetLastError () returned 0xcb [0081.078] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adfe8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.078] GetLastError () returned 0xcb [0081.078] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adfe8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.078] GetLastError () returned 0xcb [0081.078] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adfe8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.078] GetLastError () returned 0xcb [0081.131] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae624 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae624) returned 0x1 [0081.132] GetLastError () returned 0xcb [0081.132] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae62c | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae62c) returned 1 [0081.133] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x28079e8*="Registry", lpRawData=0x28078a4) returned 1 [0081.133] GetLastError () returned 0x0 [0081.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae024, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.135] GetLastError () returned 0x0 [0081.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adfd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.135] GetLastError () returned 0x0 [0081.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adfd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.135] GetLastError () returned 0x0 [0081.136] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae624 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae624) returned 0x1 [0081.136] GetLastError () returned 0x0 [0081.136] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae62c | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae62c) returned 1 [0081.137] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x280b77c*="Variable", lpRawData=0x280b638) returned 1 [0081.137] GetLastError () returned 0x0 [0081.139] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.139] GetLastError () returned 0xcb [0081.141] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.141] GetLastError () returned 0xcb [0081.142] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x1ae024, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0081.142] GetLastError () returned 0xcb [0081.142] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x1adfd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0081.142] GetLastError () returned 0xcb [0081.142] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x1adfd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0081.142] GetLastError () returned 0xcb [0081.142] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x1adfd4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0081.142] GetLastError () returned 0xcb [0081.218] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae624 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae624) returned 0x1 [0081.218] GetLastError () returned 0x3 [0081.219] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae62c | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae62c) returned 1 [0081.219] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x28194ec*="Certificate", lpRawData=0x28193a8) returned 1 [0081.233] GetLastError () returned 0x0 [0081.251] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.251] GetLastError () returned 0xcb [0081.253] GetLogicalDrives () returned 0x4 [0081.253] GetLastError () returned 0xcb [0081.253] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1ae19c, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.253] GetLastError () returned 0xcb [0081.254] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0081.254] GetLastError () returned 0xcb [0081.254] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x259440 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0081.254] GetLastError () returned 0xcb [0081.255] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.255] GetLastError () returned 0xcb [0081.256] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.256] GetLastError () returned 0xcb [0081.266] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.266] GetLastError () returned 0xcb [0081.268] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.268] GetLastError () returned 0xcb [0081.269] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1adfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.269] GetLastError () returned 0xcb [0081.269] SetErrorMode (uMode=0x1) returned 0x1 [0081.269] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x282040c | out: lpFileInformation=0x282040c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0081.269] GetLastError () returned 0xcb [0081.269] SetErrorMode (uMode=0x1) returned 0x1 [0081.269] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1adfec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.269] GetLastError () returned 0xcb [0081.269] SetErrorMode (uMode=0x1) returned 0x1 [0081.269] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x28205a0 | out: lpFileInformation=0x28205a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0081.269] GetLastError () returned 0xcb [0081.269] SetErrorMode (uMode=0x1) returned 0x1 [0081.270] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.270] GetLastError () returned 0xcb [0081.335] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1ae134, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.335] GetLastError () returned 0xcb [0081.336] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae0b0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.336] GetLastError () returned 0xcb [0081.336] SetErrorMode (uMode=0x1) returned 0x1 [0081.336] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x1ae530 | out: lpFileInformation=0x1ae530*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.337] GetLastError () returned 0xcb [0081.337] SetErrorMode (uMode=0x1) returned 0x1 [0081.337] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae0b0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.337] GetLastError () returned 0xcb [0081.337] SetErrorMode (uMode=0x1) returned 0x1 [0081.337] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x1ae530 | out: lpFileInformation=0x1ae530*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.337] GetLastError () returned 0xcb [0081.337] SetErrorMode (uMode=0x1) returned 0x1 [0081.337] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ae0c4, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.337] GetLastError () returned 0xcb [0081.337] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1ae060, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0081.337] GetLastError () returned 0xcb [0081.337] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x1ae0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0081.337] GetLastError () returned 0xcb [0081.337] SetErrorMode (uMode=0x1) returned 0x1 [0081.337] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x1ae530 | out: lpFileInformation=0x1ae530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0081.337] GetLastError () returned 0xcb [0081.337] SetErrorMode (uMode=0x1) returned 0x1 [0081.338] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x1ae0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0081.338] GetLastError () returned 0xcb [0081.338] SetErrorMode (uMode=0x1) returned 0x1 [0081.338] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x1ae530 | out: lpFileInformation=0x1ae530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0081.338] GetLastError () returned 0xcb [0081.338] SetErrorMode (uMode=0x1) returned 0x1 [0081.338] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x1ae0c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0081.338] GetLastError () returned 0xcb [0081.338] GetFullPathNameW (in: lpFileName="C:\\Windows\\.", nBufferLength=0x105, lpBuffer=0x1ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0081.338] GetLastError () returned 0xcb [0081.338] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1ae0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.338] GetLastError () returned 0xcb [0081.338] SetErrorMode (uMode=0x1) returned 0x1 [0081.338] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x1ae530 | out: lpFileInformation=0x1ae530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0081.338] GetLastError () returned 0xcb [0081.338] SetErrorMode (uMode=0x1) returned 0x1 [0081.338] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1ae0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.339] GetLastError () returned 0xcb [0081.339] SetErrorMode (uMode=0x1) returned 0x1 [0081.339] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x1ae530 | out: lpFileInformation=0x1ae530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0081.339] GetLastError () returned 0xcb [0081.339] SetErrorMode (uMode=0x1) returned 0x1 [0081.339] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1ae0c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.339] GetLastError () returned 0xcb [0081.339] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\.", nBufferLength=0x105, lpBuffer=0x1ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.339] GetLastError () returned 0xcb [0081.339] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x1ae0bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0081.339] GetLastError () returned 0xcb [0081.339] SetErrorMode (uMode=0x1) returned 0x1 [0081.339] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x1ae53c | out: lpFileInformation=0x1ae53c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0081.339] GetLastError () returned 0xcb [0081.339] SetErrorMode (uMode=0x1) returned 0x1 [0081.340] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x1ae0bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0081.340] GetLastError () returned 0xcb [0081.340] SetErrorMode (uMode=0x1) returned 0x1 [0081.340] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x1ae53c | out: lpFileInformation=0x1ae53c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0081.340] GetLastError () returned 0xcb [0081.340] SetErrorMode (uMode=0x1) returned 0x1 [0081.340] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x1ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0081.340] GetLastError () returned 0xcb [0081.340] GetFullPathNameW (in: lpFileName="C:\\Windows\\.", nBufferLength=0x105, lpBuffer=0x1ae06c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0081.340] GetLastError () returned 0xcb [0081.340] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1ae0bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.340] GetLastError () returned 0xcb [0081.340] SetErrorMode (uMode=0x1) returned 0x1 [0081.340] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x1ae53c | out: lpFileInformation=0x1ae53c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0081.340] GetLastError () returned 0xcb [0081.340] SetErrorMode (uMode=0x1) returned 0x1 [0081.340] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1ae0bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.340] GetLastError () returned 0xcb [0081.341] SetErrorMode (uMode=0x1) returned 0x1 [0081.341] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x1ae53c | out: lpFileInformation=0x1ae53c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0081.341] GetLastError () returned 0xcb [0081.341] SetErrorMode (uMode=0x1) returned 0x1 [0081.341] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.341] GetLastError () returned 0xcb [0081.341] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\.", nBufferLength=0x105, lpBuffer=0x1ae06c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.341] GetLastError () returned 0xcb [0081.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1ae18c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0081.358] GetLastError () returned 0xcb [0081.358] SetErrorMode (uMode=0x1) returned 0x1 [0081.358] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x20f4364 | out: lpFileInformation=0x20f4364*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0081.358] GetLastError () returned 0xcb [0081.358] SetErrorMode (uMode=0x1) returned 0x1 [0081.360] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.360] GetLastError () returned 0xcb [0081.361] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae184, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.361] GetLastError () returned 0xcb [0081.361] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae184, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.361] GetLastError () returned 0xcb [0081.361] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae184, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.361] GetLastError () returned 0xcb [0081.413] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae728 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae728) returned 0x1 [0081.414] GetLastError () returned 0xcb [0081.414] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae730 | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae730) returned 1 [0081.415] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2114f68*="Available", lpRawData=0x2114e24) returned 1 [0081.417] GetLastError () returned 0x0 [0081.418] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.418] GetLastError () returned 0xcb [0081.420] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.420] GetLastError () returned 0xcb [0081.424] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae208, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.424] GetLastError () returned 0xcb [0081.424] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.424] GetLastError () returned 0xcb [0081.424] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.424] GetLastError () returned 0xcb [0081.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.428] GetLastError () returned 0xcb [0081.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.428] GetLastError () returned 0xcb [0081.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.428] GetLastError () returned 0xcb [0081.428] GetEnvironmentVariableW (in: lpName="HomeDrive", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0081.428] GetLastError () returned 0xcb [0081.428] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="\\Users\\EEBsYm5") returned 0xe [0081.428] GetLastError () returned 0xcb [0081.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.428] GetLastError () returned 0xcb [0081.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.428] GetLastError () returned 0xcb [0081.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.428] GetLastError () returned 0xcb [0081.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.429] GetLastError () returned 0xcb [0081.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.429] GetLastError () returned 0xcb [0081.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.429] GetLastError () returned 0xcb [0081.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.429] GetLastError () returned 0xcb [0081.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.429] GetLastError () returned 0xcb [0081.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.429] GetLastError () returned 0xcb [0081.429] GetCurrentProcessId () returned 0xf04 [0081.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.429] GetLastError () returned 0xcb [0081.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.429] GetLastError () returned 0xcb [0081.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.430] GetLastError () returned 0xcb [0081.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae198, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.430] GetLastError () returned 0xcb [0081.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae148, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.430] GetLastError () returned 0xcb [0081.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae148, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.430] GetLastError () returned 0xcb [0081.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae198, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.431] GetLastError () returned 0xcb [0081.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae148, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.431] GetLastError () returned 0xcb [0081.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae148, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.431] GetLastError () returned 0xcb [0081.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.431] GetLastError () returned 0xcb [0081.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.431] GetLastError () returned 0xcb [0081.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.431] GetLastError () returned 0xcb [0081.432] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae6bc | out: phkResult=0x1ae6bc*=0x334) returned 0x0 [0081.432] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae704, lpData=0x0, lpcbData=0x1ae700*=0x0 | out: lpType=0x1ae704*=0x1, lpData=0x0, lpcbData=0x1ae700*=0x56) returned 0x0 [0081.432] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae704, lpData=0x259440, lpcbData=0x1ae700*=0x56 | out: lpType=0x1ae704*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae700*=0x56) returned 0x0 [0081.432] RegCloseKey (hKey=0x334) returned 0x0 [0081.432] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae1ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.432] GetLastError () returned 0xcb [0081.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.433] GetLastError () returned 0xcb [0081.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.433] GetLastError () returned 0xcb [0081.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.433] GetLastError () returned 0xcb [0081.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae144, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.433] GetLastError () returned 0xcb [0081.433] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ae144, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.433] GetLastError () returned 0xcb [0081.444] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.444] GetLastError () returned 0xcb [0081.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad824, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.444] GetLastError () returned 0xcb [0081.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.444] GetLastError () returned 0xcb [0081.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.444] GetLastError () returned 0xcb [0081.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad824, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.445] GetLastError () returned 0xcb [0081.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.445] GetLastError () returned 0xcb [0081.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.445] GetLastError () returned 0xcb [0081.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad824, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.445] GetLastError () returned 0xcb [0081.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.445] GetLastError () returned 0xcb [0081.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.445] GetLastError () returned 0xcb [0081.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad824, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.446] GetLastError () returned 0xcb [0081.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.446] GetLastError () returned 0xcb [0081.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.446] GetLastError () returned 0xcb [0081.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad824, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.446] GetLastError () returned 0xcb [0081.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.446] GetLastError () returned 0xcb [0081.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.446] GetLastError () returned 0xcb [0081.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad824, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.446] GetLastError () returned 0xcb [0081.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.446] GetLastError () returned 0xcb [0081.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.446] GetLastError () returned 0xcb [0081.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad824, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.447] GetLastError () returned 0xcb [0081.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.447] GetLastError () returned 0xcb [0081.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.447] GetLastError () returned 0xcb [0081.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.447] GetLastError () returned 0xcb [0081.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.447] GetLastError () returned 0xcb [0081.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.447] GetLastError () returned 0xcb [0081.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.447] GetLastError () returned 0xcb [0081.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.447] GetLastError () returned 0xcb [0081.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.448] GetLastError () returned 0xcb [0081.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.448] GetLastError () returned 0xcb [0081.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.448] GetLastError () returned 0xcb [0081.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.448] GetLastError () returned 0xcb [0081.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.448] GetLastError () returned 0xcb [0081.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.448] GetLastError () returned 0xcb [0081.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.448] GetLastError () returned 0xcb [0081.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.448] GetLastError () returned 0xcb [0081.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.448] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.449] GetLastError () returned 0xcb [0081.450] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.450] GetLastError () returned 0xcb [0081.450] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.450] GetLastError () returned 0xcb [0081.450] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.450] GetLastError () returned 0xcb [0081.458] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad804, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.458] GetLastError () returned 0xcb [0081.458] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.458] GetLastError () returned 0xcb [0081.458] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.458] GetLastError () returned 0xcb [0081.458] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1ad7b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.458] GetLastError () returned 0xcb [0081.491] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0081.492] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.493] GetLastError () returned 0xcb [0081.493] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0081.505] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.505] GetLastError () returned 0xcb [0081.506] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.506] GetLastError () returned 0xcb [0081.508] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.508] GetLastError () returned 0xcb [0081.510] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.510] GetLastError () returned 0xcb [0081.511] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.511] GetLastError () returned 0xcb [0081.512] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0081.512] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0081.581] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.581] GetLastError () returned 0xcb [0081.590] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0081.592] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0081.592] GetLastError () returned 0xcb [0086.861] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x264ba0 [0086.862] GetLastError () returned 0x0 [0086.863] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x264c28 [0086.864] GetLastError () returned 0x0 [0087.519] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.542] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.544] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.545] VirtualQuery (in: lpAddress=0x1ac3e4, lpBuffer=0x1ad3e4, dwLength=0x1c | out: lpBuffer=0x1ad3e4*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.578] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.578] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.578] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.578] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.578] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.579] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.580] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.580] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.580] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.580] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.580] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.580] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.580] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.580] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.581] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.581] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.581] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.581] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.581] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.581] VirtualQuery (in: lpAddress=0x1acd30, lpBuffer=0x1add30, dwLength=0x1c | out: lpBuffer=0x1add30*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.584] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.584] GetLastError () returned 0xcb [0087.588] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.588] GetLastError () returned 0xcb [0087.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adb2c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.588] GetLastError () returned 0xcb [0087.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adadc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.588] GetLastError () returned 0xcb [0087.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adadc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.588] GetLastError () returned 0xcb [0087.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adadc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.588] GetLastError () returned 0xcb [0087.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adb2c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.621] GetLastError () returned 0xcb [0087.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adadc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.621] GetLastError () returned 0xcb [0087.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adadc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.621] GetLastError () returned 0xcb [0087.621] VirtualQuery (in: lpAddress=0x1ad058, lpBuffer=0x1ae058, dwLength=0x1c | out: lpBuffer=0x1ae058*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adb2c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.623] GetLastError () returned 0xcb [0087.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adadc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.623] GetLastError () returned 0xcb [0087.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1adadc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0087.623] GetLastError () returned 0xcb [0087.623] VirtualQuery (in: lpAddress=0x1ad050, lpBuffer=0x1ae050, dwLength=0x1c | out: lpBuffer=0x1ae050*(BaseAddress=0x1ad000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.623] VirtualQuery (in: lpAddress=0x1acd04, lpBuffer=0x1add04, dwLength=0x1c | out: lpBuffer=0x1add04*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.623] VirtualQuery (in: lpAddress=0x1acd04, lpBuffer=0x1add04, dwLength=0x1c | out: lpBuffer=0x1add04*(BaseAddress=0x1ac000, AllocationBase=0x170000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0087.631] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae78c | out: phkResult=0x1ae78c*=0x388) returned 0x0 [0087.632] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae7d4, lpData=0x0, lpcbData=0x1ae7d0*=0x0 | out: lpType=0x1ae7d4*=0x1, lpData=0x0, lpcbData=0x1ae7d0*=0x56) returned 0x0 [0087.632] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae7d4, lpData=0x259440, lpcbData=0x1ae7d0*=0x56 | out: lpType=0x1ae7d4*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae7d0*=0x56) returned 0x0 [0087.632] RegCloseKey (hKey=0x388) returned 0x0 [0087.632] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae78c | out: phkResult=0x1ae78c*=0x388) returned 0x0 [0087.632] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae7d4, lpData=0x0, lpcbData=0x1ae7d0*=0x0 | out: lpType=0x1ae7d4*=0x1, lpData=0x0, lpcbData=0x1ae7d0*=0x56) returned 0x0 [0087.632] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x1ae7d4, lpData=0x259440, lpcbData=0x1ae7d0*=0x56 | out: lpType=0x1ae7d4*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x1ae7d0*=0x56) returned 0x0 [0087.633] RegCloseKey (hKey=0x388) returned 0x0 [0087.634] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x259440 | out: pszPath="C:\\Users\\EEBsYm5\\Documents") returned 0x0 [0087.635] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents", nBufferLength=0x105, lpBuffer=0x1ae324, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents", lpFilePart=0x0) returned 0x1a [0087.635] GetLastError () returned 0x3f0 [0087.635] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x259440 | out: pszPath="C:\\Users\\EEBsYm5\\Documents") returned 0x0 [0087.635] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents", nBufferLength=0x105, lpBuffer=0x1ae324, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents", lpFilePart=0x0) returned 0x1a [0087.635] GetLastError () returned 0x3f0 [0087.636] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x105, lpBuffer=0x1ae3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", lpFilePart=0x0) returned 0x36 [0087.636] GetLastError () returned 0x3f0 [0087.636] SetErrorMode (uMode=0x1) returned 0x1 [0087.637] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x1ae83c | out: lpFileInformation=0x1ae83c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0087.637] GetLastError () returned 0x2 [0087.637] SetErrorMode (uMode=0x1) returned 0x1 [0087.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x1ae3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4b [0087.637] GetLastError () returned 0x2 [0087.637] SetErrorMode (uMode=0x1) returned 0x1 [0087.637] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x1ae83c | out: lpFileInformation=0x1ae83c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0087.637] GetLastError () returned 0x2 [0087.637] SetErrorMode (uMode=0x1) returned 0x1 [0087.637] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x105, lpBuffer=0x1ae3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\profile.ps1", lpFilePart=0x0) returned 0x38 [0087.637] GetLastError () returned 0x2 [0087.637] SetErrorMode (uMode=0x1) returned 0x1 [0087.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\profile.ps1" (normalized: "c:\\users\\eebsym5\\documents\\windowspowershell\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x1ae83c | out: lpFileInformation=0x1ae83c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0087.637] GetLastError () returned 0x3 [0087.637] SetErrorMode (uMode=0x1) returned 0x1 [0087.637] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x1ae3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4d [0087.637] GetLastError () returned 0x3 [0087.638] SetErrorMode (uMode=0x1) returned 0x1 [0087.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\users\\eebsym5\\documents\\windowspowershell\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x1ae83c | out: lpFileInformation=0x1ae83c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0087.638] GetLastError () returned 0x3 [0087.638] SetErrorMode (uMode=0x1) returned 0x1 [0087.639] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.639] GetLastError () returned 0xcb [0087.642] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.642] GetLastError () returned 0xcb [0087.643] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.643] GetLastError () returned 0xcb [0087.643] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.643] GetLastError () returned 0xcb [0087.643] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.643] GetLastError () returned 0xcb [0087.644] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x388 [0087.644] GetLastError () returned 0x0 [0087.644] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x38c [0087.644] GetLastError () returned 0x0 [0087.644] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x390 [0087.644] GetLastError () returned 0x0 [0087.644] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x394 [0087.644] GetLastError () returned 0x0 [0087.644] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x398 [0087.644] GetLastError () returned 0x0 [0087.644] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x39c [0087.644] GetLastError () returned 0x0 [0087.645] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3bc [0087.645] GetLastError () returned 0x0 [0087.645] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x380 [0087.645] GetLastError () returned 0x0 [0087.645] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3a4 [0087.645] GetLastError () returned 0x0 [0087.645] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3a8 [0087.645] GetLastError () returned 0x0 [0087.645] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x304 [0087.645] GetLastError () returned 0x0 [0087.645] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x308 [0087.645] GetLastError () returned 0x0 [0087.646] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.646] GetLastError () returned 0xcb [0087.646] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.646] GetLastError () returned 0xcb [0087.647] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0087.647] GetLastError () returned 0xcb [0087.648] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x1ae87c | out: lpMode=0x1ae87c) returned 1 [0087.648] GetLastError () returned 0xcb [0087.651] SetEvent (hEvent=0x394) returned 1 [0087.651] GetLastError () returned 0xcb [0087.651] SetEvent (hEvent=0x388) returned 1 [0087.651] GetLastError () returned 0xcb [0087.651] SetEvent (hEvent=0x38c) returned 1 [0087.651] GetLastError () returned 0xcb [0087.652] SetEvent (hEvent=0x390) returned 1 [0087.652] GetLastError () returned 0xcb [0087.652] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3ac [0087.652] GetLastError () returned 0x0 [0087.652] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.652] GetLastError () returned 0xcb [0087.653] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae6e0 | out: phkResult=0x1ae6e0*=0x328) returned 0x0 [0087.653] RegQueryValueExW (in: hKey=0x328, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x1ae728, lpData=0x0, lpcbData=0x1ae724*=0x0 | out: lpType=0x1ae728*=0x0, lpData=0x0, lpcbData=0x1ae724*=0x0) returned 0x2 [0246.630] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x368 [0246.630] GetLastError () returned 0x0 [0246.630] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x364 [0246.630] GetLastError () returned 0x0 [0246.630] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x34c [0246.630] GetLastError () returned 0x0 [0246.630] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3e4 [0246.630] GetLastError () returned 0x0 [0246.630] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x494 [0246.630] GetLastError () returned 0x0 [0246.631] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x488 [0246.631] GetLastError () returned 0x0 [0246.631] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x48c [0246.631] GetLastError () returned 0x0 [0246.631] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x378 [0246.631] GetLastError () returned 0x0 [0246.631] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3b4 [0246.631] GetLastError () returned 0x0 [0246.631] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x328 [0246.631] GetLastError () returned 0x0 [0246.631] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x468 [0246.631] GetLastError () returned 0x0 [0246.631] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x478 [0246.631] GetLastError () returned 0x0 [0246.631] SetEvent (hEvent=0x3e4) returned 1 [0246.631] GetLastError () returned 0x0 [0246.631] SetEvent (hEvent=0x368) returned 1 [0246.632] GetLastError () returned 0x0 [0246.632] SetEvent (hEvent=0x364) returned 1 [0246.632] GetLastError () returned 0x0 [0246.632] SetEvent (hEvent=0x34c) returned 1 [0246.632] GetLastError () returned 0x0 [0246.632] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x400 [0246.632] GetLastError () returned 0x0 [0246.632] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ae714 | out: phkResult=0x1ae714*=0x3fc) returned 0x0 [0246.647] RegQueryValueExW (in: hKey=0x3fc, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x1ae75c, lpData=0x0, lpcbData=0x1ae758*=0x0 | out: lpType=0x1ae75c*=0x0, lpData=0x0, lpcbData=0x1ae758*=0x0) returned 0x2 [0246.965] SetEvent (hEvent=0x494) returned 1 [0246.965] GetLastError () returned 0x0 [0246.966] SetEvent (hEvent=0x488) returned 1 [0246.966] GetLastError () returned 0x0 [0246.966] SetEvent (hEvent=0x48c) returned 1 [0246.966] GetLastError () returned 0x0 [0247.011] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x259440, nSize=0x80 | out: lpBuffer="") returned 0x0 [0247.012] GetLastError () returned 0xcb [0247.018] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x259c00, nSize=0x1ae7f0 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x1ae7f0) returned 0x1 [0247.019] GetLastError () returned 0xcb [0247.019] GetUserNameW (in: lpBuffer=0x259440, pcbBuffer=0x1ae7f8 | out: lpBuffer="EEBsYm5", pcbBuffer=0x1ae7f8) returned 1 [0247.020] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x636cbe8*="Stopped", lpRawData=0x636caa4) returned 1 [0247.024] GetLastError () returned 0x0 [0247.024] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0247.024] GetLastError () returned 0x0 [0247.029] CoGetContextToken (in: pToken=0x1af520 | out: pToken=0x1af520) returned 0x0 [0247.029] IUnknown:QueryInterface (in: This=0x205788, riid=0x6c343ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1af554 | out: ppvObject=0x1af554*=0x205794) returned 0x0 [0247.030] IComThreadingInfo:GetCurrentThreadType (in: This=0x205794, pThreadType=0x1af5c4 | out: pThreadType=0x1af5c4*=0) returned 0x0 [0247.030] IUnknown:Release (This=0x205794) returned 0x1 [0247.032] CoGetContextToken (in: pToken=0x1af2f8 | out: pToken=0x1af2f8) returned 0x0 [0247.032] IUnknown:QueryInterface (in: This=0x205788, riid=0x6c343ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1af32c | out: ppvObject=0x1af32c*=0x205794) returned 0x0 [0247.033] IComThreadingInfo:GetCurrentThreadType (in: This=0x205794, pThreadType=0x1af360 | out: pThreadType=0x1af360*=0) returned 0x0 [0247.033] IUnknown:Release (This=0x205794) returned 0x1 [0247.037] CoGetContextToken (in: pToken=0x1af2f8 | out: pToken=0x1af2f8) returned 0x0 [0247.037] IUnknown:QueryInterface (in: This=0x205788, riid=0x6c343ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1af32c | out: ppvObject=0x1af32c*=0x205794) returned 0x0 [0247.037] IComThreadingInfo:GetCurrentThreadType (in: This=0x205794, pThreadType=0x1af360 | out: pThreadType=0x1af360*=0) returned 0x0 [0247.038] IUnknown:Release (This=0x205794) returned 0x1 [0247.047] CoGetContextToken (in: pToken=0x1af2f8 | out: pToken=0x1af2f8) returned 0x0 [0247.047] IUnknown:QueryInterface (in: This=0x205788, riid=0x6c343ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1af32c | out: ppvObject=0x1af32c*=0x205794) returned 0x0 [0247.048] IComThreadingInfo:GetCurrentThreadType (in: This=0x205794, pThreadType=0x1af360 | out: pThreadType=0x1af360*=0) returned 0x0 [0247.048] IUnknown:Release (This=0x205794) returned 0x1 [0247.094] CoGetContextToken (in: pToken=0x1af2d8 | out: pToken=0x1af2d8) returned 0x0 [0247.094] IUnknown:QueryInterface (in: This=0x205788, riid=0x6c343ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1af30c | out: ppvObject=0x1af30c*=0x205794) returned 0x0 [0247.094] IComThreadingInfo:GetCurrentThreadType (in: This=0x205794, pThreadType=0x1af340 | out: pThreadType=0x1af340*=0) returned 0x0 [0247.094] IUnknown:Release (This=0x205794) returned 0x1 [0247.112] CoUninitialize () Thread: id = 2 os_tid = 0xf1c Thread: id = 3 os_tid = 0xf20 Thread: id = 4 os_tid = 0xf24 Thread: id = 5 os_tid = 0xf28 Thread: id = 6 os_tid = 0xf2c [0074.099] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0079.686] LocalFree (hMem=0x27a690) returned 0x0 [0079.686] GetLastError () returned 0x0 [0079.686] CloseHandle (hObject=0x328) returned 1 [0079.686] GetLastError () returned 0x0 [0079.686] CloseHandle (hObject=0x13) returned 1 [0079.687] GetLastError () returned 0x0 [0079.687] CloseHandle (hObject=0xf) returned 1 [0079.687] GetLastError () returned 0x0 [0079.688] RegCloseKey (hKey=0x30c) returned 0x0 [0079.688] RegCloseKey (hKey=0x308) returned 0x0 [0079.688] RegCloseKey (hKey=0x304) returned 0x0 [0079.688] LocalFree (hMem=0x27a6b0) returned 0x0 [0079.688] GetLastError () returned 0x0 [0079.689] RegCloseKey (hKey=0x334) returned 0x0 [0081.320] RegCloseKey (hKey=0x3b4) returned 0x0 [0081.320] RegCloseKey (hKey=0x37c) returned 0x0 [0081.320] RegCloseKey (hKey=0x378) returned 0x0 [0081.321] RegCloseKey (hKey=0x374) returned 0x0 [0081.321] RegCloseKey (hKey=0x370) returned 0x0 [0081.321] RegCloseKey (hKey=0x36c) returned 0x0 [0081.322] RegCloseKey (hKey=0x368) returned 0x0 [0081.322] RegCloseKey (hKey=0x364) returned 0x0 [0081.322] RegCloseKey (hKey=0x360) returned 0x0 [0081.323] RegCloseKey (hKey=0x3b0) returned 0x0 [0081.323] RegCloseKey (hKey=0x350) returned 0x0 [0081.324] RegCloseKey (hKey=0x34c) returned 0x0 [0081.324] RegCloseKey (hKey=0x348) returned 0x0 [0081.324] RegCloseKey (hKey=0x344) returned 0x0 [0081.325] RegCloseKey (hKey=0x340) returned 0x0 [0081.325] RegCloseKey (hKey=0x33c) returned 0x0 [0081.325] RegCloseKey (hKey=0x338) returned 0x0 [0081.326] RegCloseKey (hKey=0x328) returned 0x0 [0081.326] RegCloseKey (hKey=0x3ac) returned 0x0 [0081.326] RegCloseKey (hKey=0x308) returned 0x0 [0081.326] RegCloseKey (hKey=0x304) returned 0x0 [0081.327] RegCloseKey (hKey=0x3a8) returned 0x0 [0081.327] RegCloseKey (hKey=0x3a4) returned 0x0 [0081.327] RegCloseKey (hKey=0x380) returned 0x0 [0081.327] RegCloseKey (hKey=0x3bc) returned 0x0 [0081.328] RegCloseKey (hKey=0x39c) returned 0x0 [0081.328] RegCloseKey (hKey=0x398) returned 0x0 [0081.329] RegCloseKey (hKey=0x394) returned 0x0 [0081.329] RegCloseKey (hKey=0x390) returned 0x0 [0081.329] RegCloseKey (hKey=0x38c) returned 0x0 [0081.330] RegCloseKey (hKey=0x388) returned 0x0 [0081.330] RegCloseKey (hKey=0x384) returned 0x0 [0081.330] RegCloseKey (hKey=0x35c) returned 0x0 [0081.330] RegCloseKey (hKey=0x3b8) returned 0x0 [0081.331] RegCloseKey (hKey=0x334) returned 0x0 [0087.880] RegCloseKey (hKey=0x328) returned 0x0 [0106.143] CloseHandle (hObject=0x360) returned 1 [0106.144] GetLastError () returned 0x0 [0106.144] CloseHandle (hObject=0x328) returned 1 [0106.144] GetLastError () returned 0x0 [0106.145] CloseHandle (hObject=0x34c) returned 1 [0106.145] GetLastError () returned 0x0 [0106.147] CloseHandle (hObject=0x364) returned 1 [0106.147] GetLastError () returned 0x0 [0106.147] CloseHandle (hObject=0x368) returned 1 [0106.147] GetLastError () returned 0x0 [0106.148] CloseHandle (hObject=0x350) returned 1 [0106.148] GetLastError () returned 0x0 [0117.963] CoGetContextToken (in: pToken=0x3e2fa38 | out: pToken=0x3e2fa38) returned 0x0 [0117.963] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0117.963] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x0 [0117.963] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0117.963] IUnknown:Release (This=0x767dcd8) returned 0x1 [0117.963] CoGetContextToken (in: pToken=0x3e2f994 | out: pToken=0x3e2f994) returned 0x0 [0117.963] WbemLocator:IUnknown:Release (This=0x75180ec) returned 0x1 [0117.963] IUnknown:Release (This=0x767cbcc) returned 0x0 [0118.045] IUnknown:Release (This=0x767dcd8) returned 0x0 [0246.655] CoGetContextToken (in: pToken=0x3e2fa38 | out: pToken=0x3e2fa38) returned 0x0 [0246.655] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.655] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x0 [0246.656] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.656] IUnknown:Release (This=0x767d268) returned 0x1 [0246.656] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.656] WbemStatusCodeText:IUnknown:Release (This=0x767d400) returned 0x1 [0246.656] WbemStatusCodeText:IUnknown:Release (This=0x767d400) returned 0x0 [0246.656] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.656] WbemDefPath:IUnknown:Release (This=0x767e270) returned 0x1 [0246.657] WbemDefPath:IUnknown:Release (This=0x767e270) returned 0x0 [0246.657] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.657] WbemDefPath:IUnknown:Release (This=0x767e308) returned 0x1 [0246.657] WbemDefPath:IUnknown:Release (This=0x767e308) returned 0x0 [0246.657] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.657] WbemDefPath:IUnknown:Release (This=0x767e3a0) returned 0x1 [0246.657] WbemDefPath:IUnknown:Release (This=0x767e3a0) returned 0x0 [0246.658] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.658] WbemDefPath:IUnknown:Release (This=0x767e4d8) returned 0x1 [0246.658] WbemDefPath:IUnknown:Release (This=0x767e4d8) returned 0x0 [0246.658] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.658] WbemDefPath:IUnknown:Release (This=0x767e570) returned 0x1 [0246.658] WbemDefPath:IUnknown:Release (This=0x767e570) returned 0x0 [0246.658] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.658] WbemDefPath:IUnknown:Release (This=0x767e608) returned 0x1 [0246.659] WbemDefPath:IUnknown:Release (This=0x767e608) returned 0x0 [0246.659] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.659] WbemDefPath:IUnknown:Release (This=0x76816a0) returned 0x1 [0246.659] WbemDefPath:IUnknown:Release (This=0x76816a0) returned 0x0 [0246.659] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.659] WbemDefPath:IUnknown:Release (This=0x767e960) returned 0x1 [0246.659] WbemDefPath:IUnknown:Release (This=0x767e960) returned 0x0 [0246.659] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.660] WbemDefPath:IUnknown:Release (This=0x767e9d0) returned 0x1 [0246.660] WbemDefPath:IUnknown:Release (This=0x767e9d0) returned 0x0 [0246.660] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.660] WbemDefPath:IUnknown:Release (This=0x7683050) returned 0x1 [0246.660] WbemDefPath:IUnknown:Release (This=0x7683050) returned 0x0 [0246.660] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.660] WbemStatusCodeText:IUnknown:Release (This=0x767f048) returned 0x1 [0246.660] WbemStatusCodeText:IUnknown:Release (This=0x767f048) returned 0x0 [0246.661] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.661] IUnknown:Release (This=0x7687808) returned 0x1 [0246.661] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.661] IUnknown:Release (This=0x7687d88) returned 0x1 [0246.661] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.661] IUnknown:Release (This=0x7688318) returned 0x1 [0246.661] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.661] IUnknown:Release (This=0x76888a8) returned 0x1 [0246.661] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.662] IUnknown:Release (This=0x7688e38) returned 0x1 [0246.662] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.662] IUnknown:Release (This=0x76893c8) returned 0x1 [0246.662] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.662] IUnknown:Release (This=0x7689958) returned 0x1 [0246.662] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.662] IUnknown:Release (This=0x7689ee8) returned 0x1 [0246.662] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.662] IUnknown:Release (This=0x768a878) returned 0x1 [0246.663] CoGetContextToken (in: pToken=0x3e2f9c8 | out: pToken=0x3e2f9c8) returned 0x0 [0246.663] IUnknown:Release (This=0x768b1f8) returned 0x1 [0246.663] IUnknown:Release (This=0x7685918) returned 0x0 [0246.663] IUnknown:Release (This=0x76858c0) returned 0x0 [0246.664] IUnknown:Release (This=0x76856c8) returned 0x0 [0246.664] IUnknown:Release (This=0x76851d8) returned 0x0 [0246.664] IUnknown:Release (This=0x7684d50) returned 0x0 [0246.664] IUnknown:Release (This=0x76849d0) returned 0x0 [0246.664] IUnknown:Release (This=0x76845c0) returned 0x0 [0246.665] IUnknown:Release (This=0x767ee40) returned 0x0 [0246.665] IUnknown:Release (This=0x767e6a0) returned 0x1 [0246.665] IUnknown:Release (This=0x767d268) returned 0x0 [0246.666] CoGetContextToken (in: pToken=0x3e2f994 | out: pToken=0x3e2f994) returned 0x0 [0246.666] WbemLocator:IUnknown:Release (This=0x2ea904) returned 0x1 [0246.666] IUnknown:Release (This=0x767d164) returned 0x0 [0246.826] IUnknown:Release (This=0x768b1f8) returned 0x0 [0246.826] IUnknown:Release (This=0x768a878) returned 0x0 [0246.826] IUnknown:Release (This=0x7689ee8) returned 0x0 [0246.826] IUnknown:Release (This=0x7689958) returned 0x0 [0246.826] IUnknown:Release (This=0x76893c8) returned 0x0 [0246.827] IUnknown:Release (This=0x7688e38) returned 0x0 [0246.827] IUnknown:Release (This=0x76888a8) returned 0x0 [0246.827] IUnknown:Release (This=0x7688318) returned 0x0 [0246.827] IUnknown:Release (This=0x7687d88) returned 0x0 [0246.828] IUnknown:Release (This=0x7687808) returned 0x0 [0246.828] IUnknown:Release (This=0x7687610) returned 0x0 [0246.828] IUnknown:Release (This=0x7687290) returned 0x0 [0246.828] IUnknown:Release (This=0x7680538) returned 0x0 [0246.828] IUnknown:Release (This=0x76804e8) returned 0x0 [0246.829] IUnknown:Release (This=0x7686e80) returned 0x0 [0246.829] IUnknown:Release (This=0x7686b00) returned 0x0 [0246.829] IUnknown:Release (This=0x7680498) returned 0x0 [0246.829] IUnknown:Release (This=0x7680448) returned 0x0 [0246.829] IUnknown:Release (This=0x76866f0) returned 0x0 [0246.829] IUnknown:Release (This=0x7686370) returned 0x0 [0246.830] IUnknown:Release (This=0x7686100) returned 0x0 [0246.830] IUnknown:Release (This=0x7685f08) returned 0x0 [0246.830] IUnknown:Release (This=0x7685b88) returned 0x0 [0246.830] CloseHandle (hObject=0xf) returned 1 [0246.831] GetLastError () returned 0x0 [0247.036] GetLastError () returned 0x0 [0247.036] GetLastError () returned 0x0 [0247.036] LocalFree (hMem=0x264c28) returned 0x0 [0247.036] GetLastError () returned 0x0 [0247.037] GetLastError () returned 0x0 [0247.037] GetLastError () returned 0x0 [0247.037] LocalFree (hMem=0x264ba0) returned 0x0 [0247.037] GetLastError () returned 0x0 [0247.047] DeregisterEventSource (hEventLog=0x4340004) returned 1 [0247.048] GetLastError () returned 0x0 [0247.079] RegCloseKey (hKey=0x3fc) returned 0x0 [0247.081] CloseHandle (hObject=0x328) returned 1 [0247.081] GetLastError () returned 0x0 [0247.081] CloseHandle (hObject=0x3b4) returned 1 [0247.081] GetLastError () returned 0x0 [0247.081] CloseHandle (hObject=0x400) returned 1 [0247.081] GetLastError () returned 0x0 [0247.082] CloseHandle (hObject=0x478) returned 1 [0247.082] GetLastError () returned 0x0 [0247.082] CloseHandle (hObject=0x378) returned 1 [0247.082] GetLastError () returned 0x0 [0247.082] CloseHandle (hObject=0x48c) returned 1 [0247.082] GetLastError () returned 0x0 [0247.083] CloseHandle (hObject=0x468) returned 1 [0247.083] GetLastError () returned 0x0 [0247.083] CloseHandle (hObject=0x488) returned 1 [0247.083] GetLastError () returned 0x0 [0247.083] CloseHandle (hObject=0x494) returned 1 [0247.083] GetLastError () returned 0x0 [0247.083] CloseHandle (hObject=0x3e4) returned 1 [0247.084] GetLastError () returned 0x0 [0247.084] CloseHandle (hObject=0x304) returned 1 [0247.084] GetLastError () returned 0x0 [0247.084] CloseHandle (hObject=0x3a8) returned 1 [0247.084] GetLastError () returned 0x0 [0247.084] CloseHandle (hObject=0x3a4) returned 1 [0247.084] GetLastError () returned 0x0 [0247.085] CloseHandle (hObject=0x380) returned 1 [0247.085] GetLastError () returned 0x0 [0247.085] CloseHandle (hObject=0x3bc) returned 1 [0247.085] GetLastError () returned 0x0 [0247.085] CloseHandle (hObject=0x39c) returned 1 [0247.086] GetLastError () returned 0x0 [0247.086] CloseHandle (hObject=0x398) returned 1 [0247.086] GetLastError () returned 0x0 [0247.086] CloseHandle (hObject=0x394) returned 1 [0247.086] GetLastError () returned 0x0 [0247.086] CloseHandle (hObject=0x3ac) returned 1 [0247.086] GetLastError () returned 0x0 [0247.087] CloseHandle (hObject=0x390) returned 1 [0247.087] GetLastError () returned 0x0 [0247.087] CloseHandle (hObject=0x38c) returned 1 [0247.087] GetLastError () returned 0x0 [0247.087] CloseHandle (hObject=0x388) returned 1 [0247.087] GetLastError () returned 0x0 [0247.088] CloseHandle (hObject=0x34c) returned 1 [0247.088] GetLastError () returned 0x0 [0247.088] UnmapViewOfFile (lpBaseAddress=0x42a0000) returned 1 [0247.089] CloseHandle (hObject=0x308) returned 1 [0247.089] GetLastError () returned 0x0 [0247.090] CloseHandle (hObject=0x364) returned 1 [0247.090] GetLastError () returned 0x0 [0247.090] CloseHandle (hObject=0x330) returned 1 [0247.090] GetLastError () returned 0x0 [0247.091] RegCloseKey (hKey=0x80000004) returned 0x0 [0247.091] CloseHandle (hObject=0x350) returned 1 [0247.091] GetLastError () returned 0x0 [0247.091] CloseHandle (hObject=0x2ec) returned 1 [0247.092] GetLastError () returned 0x0 [0247.092] CloseHandle (hObject=0x320) returned 1 [0247.092] GetLastError () returned 0x0 [0247.092] CloseHandle (hObject=0x368) returned 1 [0247.092] GetLastError () returned 0x0 [0247.096] CoGetContextToken (in: pToken=0x3e2e48c | out: pToken=0x3e2e48c) returned 0x0 [0247.096] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.096] WbemDefPath:IUnknown:Release (This=0x76833d0) returned 0x1 [0247.096] WbemDefPath:IUnknown:Release (This=0x76833d0) returned 0x0 [0247.096] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.096] WbemDefPath:IUnknown:Release (This=0x7683210) returned 0x1 [0247.097] WbemDefPath:IUnknown:Release (This=0x7683210) returned 0x0 [0247.097] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.097] WbemDefPath:IUnknown:Release (This=0x767e898) returned 0x1 [0247.097] WbemDefPath:IUnknown:Release (This=0x767e898) returned 0x0 [0247.097] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.097] WbemDefPath:IUnknown:Release (This=0x767ccd8) returned 0x1 [0247.098] WbemDefPath:IUnknown:Release (This=0x767ccd8) returned 0x0 [0247.098] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.098] WbemDefPath:IUnknown:Release (This=0x7683440) returned 0x1 [0247.098] WbemDefPath:IUnknown:Release (This=0x7683440) returned 0x0 [0247.098] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.098] WbemDefPath:IUnknown:Release (This=0x7683280) returned 0x1 [0247.099] WbemDefPath:IUnknown:Release (This=0x7683280) returned 0x0 [0247.099] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.099] WbemDefPath:IUnknown:Release (This=0x76830c0) returned 0x1 [0247.099] WbemDefPath:IUnknown:Release (This=0x76830c0) returned 0x0 [0247.100] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.100] WbemDefPath:IUnknown:Release (This=0x76708b8) returned 0x1 [0247.100] WbemDefPath:IUnknown:Release (This=0x76708b8) returned 0x0 [0247.100] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.100] WbemDefPath:IUnknown:Release (This=0x7670820) returned 0x1 [0247.100] WbemDefPath:IUnknown:Release (This=0x7670820) returned 0x0 [0247.101] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.101] WbemDefPath:IUnknown:Release (This=0x76834b0) returned 0x1 [0247.101] WbemDefPath:IUnknown:Release (This=0x76834b0) returned 0x0 [0247.101] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.101] WbemDefPath:IUnknown:Release (This=0x76832f0) returned 0x1 [0247.101] WbemDefPath:IUnknown:Release (This=0x76832f0) returned 0x0 [0247.102] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.102] WbemDefPath:IUnknown:Release (This=0x7683130) returned 0x1 [0247.102] WbemDefPath:IUnknown:Release (This=0x7683130) returned 0x0 [0247.102] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.102] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x1 [0247.102] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x0 [0247.106] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.106] WbemDefPath:IUnknown:Release (This=0x7670c00) returned 0x1 [0247.106] WbemDefPath:IUnknown:Release (This=0x7670c00) returned 0x0 [0247.107] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.107] WbemDefPath:IUnknown:Release (This=0x7683360) returned 0x1 [0247.107] WbemDefPath:IUnknown:Release (This=0x7683360) returned 0x0 [0247.107] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.107] WbemDefPath:IUnknown:Release (This=0x76831a0) returned 0x1 [0247.107] WbemDefPath:IUnknown:Release (This=0x76831a0) returned 0x0 [0247.108] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.108] WbemDefPath:IUnknown:Release (This=0x767dc10) returned 0x1 [0247.108] WbemDefPath:IUnknown:Release (This=0x767dc10) returned 0x0 [0247.108] CoGetContextToken (in: pToken=0x3e2e41c | out: pToken=0x3e2e41c) returned 0x0 [0247.108] WbemLocator:IUnknown:Release (This=0x751fa8c) returned 0x1 [0247.109] IUnknown:Release (This=0x205788) returned 0x0 [0247.109] WbemLocator:IUnknown:Release (This=0x767cb2c) returned 0x0 Thread: id = 7 os_tid = 0xf40 [0087.669] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0087.721] SetThreadUILanguage (LangId=0x0) returned 0x409 [0087.735] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.735] GetLastError () returned 0xcb [0087.771] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", nBufferLength=0x105, lpBuffer=0x515ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", lpFilePart=0x0) returned 0x23 [0087.771] GetLastError () returned 0x0 [0087.771] SetErrorMode (uMode=0x1) returned 0x1 [0087.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\oopsno.ps1"), fInfoLevelId=0x0, lpFileInformation=0x22e2258 | out: lpFileInformation=0x22e2258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e5fa500, ftCreationTime.dwHighDateTime=0x1d6a229, ftLastAccessTime.dwLowDateTime=0x8ef83b80, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xffea2400, ftLastWriteTime.dwHighDateTime=0x1d6a226, nFileSizeHigh=0x0, nFileSizeLow=0xe40d4)) returned 1 [0087.772] GetLastError () returned 0x0 [0087.772] SetErrorMode (uMode=0x1) returned 0x1 [0087.774] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", nBufferLength=0x105, lpBuffer=0x515efd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", lpFilePart=0x0) returned 0x23 [0087.774] GetLastError () returned 0x0 [0087.774] SetErrorMode (uMode=0x1) returned 0x1 [0087.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\oopsno.ps1"), fInfoLevelId=0x0, lpFileInformation=0x515f450 | out: lpFileInformation=0x515f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e5fa500, ftCreationTime.dwHighDateTime=0x1d6a229, ftLastAccessTime.dwLowDateTime=0x8ef83b80, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xffea2400, ftLastWriteTime.dwHighDateTime=0x1d6a226, nFileSizeHigh=0x0, nFileSizeLow=0xe40d4)) returned 1 [0087.775] GetLastError () returned 0x0 [0087.775] SetErrorMode (uMode=0x1) returned 0x1 [0087.776] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", nBufferLength=0x105, lpBuffer=0x515ef98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", lpFilePart=0x0) returned 0x23 [0087.776] GetLastError () returned 0x0 [0087.776] SetErrorMode (uMode=0x1) returned 0x1 [0087.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\oopsno.ps1"), fInfoLevelId=0x0, lpFileInformation=0x515f418 | out: lpFileInformation=0x515f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e5fa500, ftCreationTime.dwHighDateTime=0x1d6a229, ftLastAccessTime.dwLowDateTime=0x8ef83b80, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xffea2400, ftLastWriteTime.dwHighDateTime=0x1d6a226, nFileSizeHigh=0x0, nFileSizeLow=0xe40d4)) returned 1 [0087.776] GetLastError () returned 0x0 [0087.776] SetErrorMode (uMode=0x1) returned 0x1 [0087.777] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", nBufferLength=0x105, lpBuffer=0x515efc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", lpFilePart=0x0) returned 0x23 [0087.778] GetLastError () returned 0x0 [0087.778] SetErrorMode (uMode=0x1) returned 0x1 [0087.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\oopsno.ps1"), fInfoLevelId=0x0, lpFileInformation=0x22e3c0c | out: lpFileInformation=0x22e3c0c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e5fa500, ftCreationTime.dwHighDateTime=0x1d6a229, ftLastAccessTime.dwLowDateTime=0x8ef83b80, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xffea2400, ftLastWriteTime.dwHighDateTime=0x1d6a226, nFileSizeHigh=0x0, nFileSizeLow=0xe40d4)) returned 1 [0087.778] GetLastError () returned 0x0 [0087.778] SetErrorMode (uMode=0x1) returned 0x1 [0087.778] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", nBufferLength=0x105, lpBuffer=0x515ef90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", lpFilePart=0x0) returned 0x23 [0087.778] GetLastError () returned 0x0 [0087.780] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.780] GetLastError () returned 0xcb [0087.783] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x515f39c | out: phkResult=0x515f39c*=0x0) returned 0x2 [0087.783] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x515f39c | out: phkResult=0x515f39c*=0x0) returned 0x2 [0087.784] GetEnvironmentVariableW (in: lpName="PSExecutionPolicyPreference", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0087.784] GetLastError () returned 0xcb [0087.784] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x515f39c | out: phkResult=0x515f39c*=0x0) returned 0x2 [0087.785] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x515f39c | out: phkResult=0x515f39c*=0x34c) returned 0x0 [0087.785] RegQueryValueExW (in: hKey=0x34c, lpValueName="ExecutionPolicy", lpReserved=0x0, lpType=0x515f3e4, lpData=0x0, lpcbData=0x515f3e0*=0x0 | out: lpType=0x515f3e4*=0x1, lpData=0x0, lpcbData=0x515f3e0*=0xe) returned 0x0 [0087.785] RegQueryValueExW (in: hKey=0x34c, lpValueName="ExecutionPolicy", lpReserved=0x0, lpType=0x515f3e4, lpData=0x2d3758, lpcbData=0x515f3e0*=0xe | out: lpType=0x515f3e4*=0x1, lpData="Bypass", lpcbData=0x515f3e0*=0xe) returned 0x0 [0087.785] RegCloseKey (hKey=0x34c) returned 0x0 [0087.788] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", nBufferLength=0x105, lpBuffer=0x515eebc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1", lpFilePart=0x0) returned 0x23 [0087.788] GetLastError () returned 0xcb [0087.788] SetErrorMode (uMode=0x1) returned 0x1 [0087.789] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\oopsNO.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\oopsno.ps1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x34c [0087.789] GetLastError () returned 0x0 [0087.789] GetFileType (hFile=0x34c) returned 0x1 [0087.789] SetErrorMode (uMode=0x1) returned 0x1 [0087.789] GetFileType (hFile=0x34c) returned 0x1 [0087.789] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.791] GetLastError () returned 0x0 [0087.791] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.791] GetLastError () returned 0x0 [0087.791] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.791] GetLastError () returned 0x0 [0087.791] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.792] GetLastError () returned 0x0 [0087.792] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.792] GetLastError () returned 0x0 [0087.792] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.792] GetLastError () returned 0x0 [0087.792] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.792] GetLastError () returned 0x0 [0087.792] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.792] GetLastError () returned 0x0 [0087.792] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.793] GetLastError () returned 0x0 [0087.795] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.795] GetLastError () returned 0x0 [0087.795] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.795] GetLastError () returned 0x0 [0087.795] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.795] GetLastError () returned 0x0 [0087.796] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.796] GetLastError () returned 0x0 [0087.796] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.796] GetLastError () returned 0x0 [0087.796] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.796] GetLastError () returned 0x0 [0087.797] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.797] GetLastError () returned 0x0 [0087.797] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.798] GetLastError () returned 0x0 [0087.802] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.802] GetLastError () returned 0x0 [0087.802] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.802] GetLastError () returned 0x0 [0087.802] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.802] GetLastError () returned 0x0 [0087.803] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.803] GetLastError () returned 0x0 [0087.803] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.803] GetLastError () returned 0x0 [0087.803] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.804] GetLastError () returned 0x0 [0087.804] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.804] GetLastError () returned 0x0 [0087.804] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.804] GetLastError () returned 0x0 [0087.805] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.805] GetLastError () returned 0x0 [0087.805] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.805] GetLastError () returned 0x0 [0087.806] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.806] GetLastError () returned 0x0 [0087.806] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.806] GetLastError () returned 0x0 [0087.806] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.807] GetLastError () returned 0x0 [0087.807] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.807] GetLastError () returned 0x0 [0087.807] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.807] GetLastError () returned 0x0 [0087.808] ReadFile (in: hFile=0x34c, lpBuffer=0x22e66f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x22e66f8*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0087.808] GetLastError () returned 0x0 [0088.074] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.094] GetLastError () returned 0x0 [0088.094] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.094] GetLastError () returned 0x0 [0088.094] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.095] GetLastError () returned 0x0 [0088.095] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.095] GetLastError () returned 0x0 [0088.095] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.095] GetLastError () returned 0x0 [0088.095] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.095] GetLastError () returned 0x0 [0088.095] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.096] GetLastError () returned 0x0 [0088.096] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.096] GetLastError () returned 0x0 [0088.096] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.096] GetLastError () returned 0x0 [0088.096] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.096] GetLastError () returned 0x0 [0088.096] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.097] GetLastError () returned 0x0 [0088.097] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.097] GetLastError () returned 0x0 [0088.097] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.097] GetLastError () returned 0x0 [0088.097] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.097] GetLastError () returned 0x0 [0088.097] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.098] GetLastError () returned 0x0 [0088.098] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.098] GetLastError () returned 0x0 [0088.098] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.098] GetLastError () returned 0x0 [0088.098] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.098] GetLastError () returned 0x0 [0088.098] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.099] GetLastError () returned 0x0 [0088.099] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.099] GetLastError () returned 0x0 [0088.099] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.099] GetLastError () returned 0x0 [0088.099] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.099] GetLastError () returned 0x0 [0088.099] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.100] GetLastError () returned 0x0 [0088.100] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.100] GetLastError () returned 0x0 [0088.100] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.100] GetLastError () returned 0x0 [0088.100] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.100] GetLastError () returned 0x0 [0088.100] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.101] GetLastError () returned 0x0 [0088.101] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.101] GetLastError () returned 0x0 [0088.101] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.101] GetLastError () returned 0x0 [0088.101] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.101] GetLastError () returned 0x0 [0088.101] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.101] GetLastError () returned 0x0 [0088.102] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.103] GetLastError () returned 0x0 [0088.127] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.127] GetLastError () returned 0x0 [0088.127] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.127] GetLastError () returned 0x0 [0088.127] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.127] GetLastError () returned 0x0 [0088.127] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.128] GetLastError () returned 0x0 [0088.128] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.128] GetLastError () returned 0x0 [0088.128] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.128] GetLastError () returned 0x0 [0088.128] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.128] GetLastError () returned 0x0 [0088.128] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.128] GetLastError () returned 0x0 [0088.129] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.129] GetLastError () returned 0x0 [0088.129] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.129] GetLastError () returned 0x0 [0088.129] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.129] GetLastError () returned 0x0 [0088.129] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.129] GetLastError () returned 0x0 [0088.129] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.130] GetLastError () returned 0x0 [0088.130] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.130] GetLastError () returned 0x0 [0088.130] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.130] GetLastError () returned 0x0 [0088.130] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.130] GetLastError () returned 0x0 [0088.130] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.130] GetLastError () returned 0x0 [0088.131] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.131] GetLastError () returned 0x0 [0088.131] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.131] GetLastError () returned 0x0 [0088.131] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.131] GetLastError () returned 0x0 [0088.131] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.131] GetLastError () returned 0x0 [0088.131] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.132] GetLastError () returned 0x0 [0088.132] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.132] GetLastError () returned 0x0 [0088.132] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.132] GetLastError () returned 0x0 [0088.132] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.132] GetLastError () returned 0x0 [0088.132] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.133] GetLastError () returned 0x0 [0088.133] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.133] GetLastError () returned 0x0 [0088.133] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.133] GetLastError () returned 0x0 [0088.133] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.133] GetLastError () returned 0x0 [0088.134] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.134] GetLastError () returned 0x0 [0088.134] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.134] GetLastError () returned 0x0 [0088.134] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.134] GetLastError () returned 0x0 [0088.134] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.134] GetLastError () returned 0x0 [0088.135] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.135] GetLastError () returned 0x0 [0088.135] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.135] GetLastError () returned 0x0 [0088.135] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.135] GetLastError () returned 0x0 [0088.135] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.135] GetLastError () returned 0x0 [0088.135] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.136] GetLastError () returned 0x0 [0088.136] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.136] GetLastError () returned 0x0 [0088.136] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.136] GetLastError () returned 0x0 [0088.136] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.136] GetLastError () returned 0x0 [0088.136] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.136] GetLastError () returned 0x0 [0088.137] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.137] GetLastError () returned 0x0 [0088.137] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.137] GetLastError () returned 0x0 [0088.137] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.137] GetLastError () returned 0x0 [0088.137] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.137] GetLastError () returned 0x0 [0088.137] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.138] GetLastError () returned 0x0 [0088.138] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.138] GetLastError () returned 0x0 [0088.138] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.138] GetLastError () returned 0x0 [0088.138] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.138] GetLastError () returned 0x0 [0088.138] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.138] GetLastError () returned 0x0 [0088.139] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.139] GetLastError () returned 0x0 [0088.139] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.139] GetLastError () returned 0x0 [0088.139] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.139] GetLastError () returned 0x0 [0088.139] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.139] GetLastError () returned 0x0 [0088.139] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.139] GetLastError () returned 0x0 [0088.140] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.140] GetLastError () returned 0x0 [0088.140] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.140] GetLastError () returned 0x0 [0088.140] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.140] GetLastError () returned 0x0 [0088.140] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.140] GetLastError () returned 0x0 [0088.141] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.141] GetLastError () returned 0x0 [0088.141] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.141] GetLastError () returned 0x0 [0088.141] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.141] GetLastError () returned 0x0 [0088.141] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.143] GetLastError () returned 0x0 [0088.176] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.176] GetLastError () returned 0x0 [0088.177] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.177] GetLastError () returned 0x0 [0088.177] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.177] GetLastError () returned 0x0 [0088.177] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.177] GetLastError () returned 0x0 [0088.178] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.178] GetLastError () returned 0x0 [0088.178] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.178] GetLastError () returned 0x0 [0088.178] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.178] GetLastError () returned 0x0 [0088.178] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.179] GetLastError () returned 0x0 [0088.179] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.179] GetLastError () returned 0x0 [0088.179] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.179] GetLastError () returned 0x0 [0088.179] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.180] GetLastError () returned 0x0 [0088.180] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.180] GetLastError () returned 0x0 [0088.180] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.180] GetLastError () returned 0x0 [0088.181] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.181] GetLastError () returned 0x0 [0088.181] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.181] GetLastError () returned 0x0 [0088.181] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.181] GetLastError () returned 0x0 [0088.181] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.182] GetLastError () returned 0x0 [0088.182] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.182] GetLastError () returned 0x0 [0088.182] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.182] GetLastError () returned 0x0 [0088.182] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.183] GetLastError () returned 0x0 [0088.183] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.183] GetLastError () returned 0x0 [0088.183] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.183] GetLastError () returned 0x0 [0088.183] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.184] GetLastError () returned 0x0 [0088.184] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.184] GetLastError () returned 0x0 [0088.184] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.184] GetLastError () returned 0x0 [0088.184] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.185] GetLastError () returned 0x0 [0088.185] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.185] GetLastError () returned 0x0 [0088.185] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.185] GetLastError () returned 0x0 [0088.185] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.185] GetLastError () returned 0x0 [0088.186] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.186] GetLastError () returned 0x0 [0088.186] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.186] GetLastError () returned 0x0 [0088.186] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.187] GetLastError () returned 0x0 [0088.187] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.187] GetLastError () returned 0x0 [0088.187] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.187] GetLastError () returned 0x0 [0088.187] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.188] GetLastError () returned 0x0 [0088.188] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.188] GetLastError () returned 0x0 [0088.188] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.188] GetLastError () returned 0x0 [0088.189] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.189] GetLastError () returned 0x0 [0088.189] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.189] GetLastError () returned 0x0 [0088.189] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.189] GetLastError () returned 0x0 [0088.190] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.190] GetLastError () returned 0x0 [0088.190] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.190] GetLastError () returned 0x0 [0088.190] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.190] GetLastError () returned 0x0 [0088.191] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.191] GetLastError () returned 0x0 [0088.191] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.191] GetLastError () returned 0x0 [0088.191] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.191] GetLastError () returned 0x0 [0088.192] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.192] GetLastError () returned 0x0 [0088.192] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.192] GetLastError () returned 0x0 [0088.192] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.198] GetLastError () returned 0x0 [0088.199] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.199] GetLastError () returned 0x0 [0088.199] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.199] GetLastError () returned 0x0 [0088.199] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.200] GetLastError () returned 0x0 [0088.200] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.200] GetLastError () returned 0x0 [0088.200] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.200] GetLastError () returned 0x0 [0088.200] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.201] GetLastError () returned 0x0 [0088.201] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.201] GetLastError () returned 0x0 [0088.201] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.201] GetLastError () returned 0x0 [0088.201] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.202] GetLastError () returned 0x0 [0088.202] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.202] GetLastError () returned 0x0 [0088.202] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.202] GetLastError () returned 0x0 [0088.202] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.203] GetLastError () returned 0x0 [0088.203] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.203] GetLastError () returned 0x0 [0088.203] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.203] GetLastError () returned 0x0 [0088.203] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.205] GetLastError () returned 0x0 [0088.206] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.206] GetLastError () returned 0x0 [0088.206] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.206] GetLastError () returned 0x0 [0088.206] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.206] GetLastError () returned 0x0 [0088.207] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.207] GetLastError () returned 0x0 [0088.207] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.207] GetLastError () returned 0x0 [0088.207] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.207] GetLastError () returned 0x0 [0088.208] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.208] GetLastError () returned 0x0 [0088.208] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.208] GetLastError () returned 0x0 [0088.208] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.208] GetLastError () returned 0x0 [0088.209] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.209] GetLastError () returned 0x0 [0088.209] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.209] GetLastError () returned 0x0 [0088.209] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.210] GetLastError () returned 0x0 [0088.210] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.210] GetLastError () returned 0x0 [0088.210] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.210] GetLastError () returned 0x0 [0088.210] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.211] GetLastError () returned 0x0 [0088.211] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.211] GetLastError () returned 0x0 [0088.211] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.211] GetLastError () returned 0x0 [0088.211] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.212] GetLastError () returned 0x0 [0088.212] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.212] GetLastError () returned 0x0 [0088.212] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.212] GetLastError () returned 0x0 [0088.213] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.213] GetLastError () returned 0x0 [0088.213] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.213] GetLastError () returned 0x0 [0088.213] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.213] GetLastError () returned 0x0 [0088.214] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.214] GetLastError () returned 0x0 [0088.214] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.214] GetLastError () returned 0x0 [0088.214] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.214] GetLastError () returned 0x0 [0088.214] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.214] GetLastError () returned 0x0 [0088.215] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.215] GetLastError () returned 0x0 [0088.215] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.215] GetLastError () returned 0x0 [0088.215] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.215] GetLastError () returned 0x0 [0088.215] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.215] GetLastError () returned 0x0 [0088.216] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.216] GetLastError () returned 0x0 [0088.216] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.216] GetLastError () returned 0x0 [0088.216] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.216] GetLastError () returned 0x0 [0088.217] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x1000, lpOverlapped=0x0) returned 1 [0088.217] GetLastError () returned 0x0 [0088.217] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0xd4, lpOverlapped=0x0) returned 1 [0088.217] GetLastError () returned 0x0 [0088.217] ReadFile (in: hFile=0x34c, lpBuffer=0x1ed0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f424, lpOverlapped=0x0 | out: lpBuffer=0x1ed0428*, lpNumberOfBytesRead=0x515f424*=0x0, lpOverlapped=0x0) returned 1 [0088.217] GetLastError () returned 0x0 [0088.218] CloseHandle (hObject=0x34c) returned 1 [0088.218] GetLastError () returned 0x0 [0088.232] VirtualQuery (in: lpAddress=0x515e42c, lpBuffer=0x515f42c, dwLength=0x1c | out: lpBuffer=0x515f42c*(BaseAddress=0x515e000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0091.581] VirtualQuery (in: lpAddress=0x515de74, lpBuffer=0x515ee74, dwLength=0x1c | out: lpBuffer=0x515ee74*(BaseAddress=0x515d000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0091.600] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.600] GetLastError () returned 0xcb [0091.611] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.611] GetLastError () returned 0xcb [0091.654] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.654] GetLastError () returned 0xcb [0091.658] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.658] GetLastError () returned 0xcb [0091.660] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.660] GetLastError () returned 0xcb [0091.667] VirtualQuery (in: lpAddress=0x515e63c, lpBuffer=0x515f63c, dwLength=0x1c | out: lpBuffer=0x515f63c*(BaseAddress=0x515e000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0091.669] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.669] GetLastError () returned 0xcb [0091.673] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.673] GetLastError () returned 0xcb [0091.673] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.673] GetLastError () returned 0xcb [0091.690] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.690] GetLastError () returned 0xcb [0091.760] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.760] GetLastError () returned 0xcb [0091.828] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.828] GetLastError () returned 0xcb [0091.832] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.832] GetLastError () returned 0xcb [0091.833] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.833] GetLastError () returned 0xcb [0091.837] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.837] GetLastError () returned 0xcb [0091.839] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.839] GetLastError () returned 0xcb [0091.841] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.841] GetLastError () returned 0xcb [0091.843] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.843] GetLastError () returned 0xcb [0091.880] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d3758, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.880] GetLastError () returned 0xcb [0092.519] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0092.519] GetLastError () returned 0xcb [0092.768] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0092.768] GetLastError () returned 0xcb [0094.099] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x515e888, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0094.099] GetLastError () returned 0xcb [0094.573] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0094.573] GetLastError () returned 0xcb [0094.579] GetCurrentProcess () returned 0xffffffff [0094.579] GetLastError () returned 0x3f0 [0094.579] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515f0c0 | out: TokenHandle=0x515f0c0*=0x34c) returned 1 [0094.579] GetLastError () returned 0x3f0 [0094.583] GetVersionExW (in: lpVersionInformation=0x2d37c8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2d37c8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0094.583] GetLastError () returned 0x3f0 [0094.603] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x2d86b0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\") returned 0x24 [0094.604] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x515ec74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0094.604] GetLastError () returned 0x0 [0094.606] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij", nBufferLength=0x105, lpBuffer=0x515ec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij", lpFilePart=0x0) returned 0x2c [0094.606] GetLastError () returned 0x0 [0094.606] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij", nBufferLength=0x105, lpBuffer=0x515ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij", lpFilePart=0x0) returned 0x2c [0094.606] GetLastError () returned 0x0 [0094.606] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.tmp", nBufferLength=0x105, lpBuffer=0x515eb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.tmp", lpFilePart=0x0) returned 0x30 [0094.606] GetLastError () returned 0x0 [0094.606] SetErrorMode (uMode=0x1) returned 0x1 [0094.606] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x328 [0094.607] GetLastError () returned 0x0 [0094.608] GetFileType (hFile=0x328) returned 0x1 [0094.608] SetErrorMode (uMode=0x1) returned 0x1 [0094.608] GetFileType (hFile=0x328) returned 0x1 [0094.614] CloseHandle (hObject=0x328) returned 1 [0094.615] GetLastError () returned 0x0 [0094.615] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.0.cs", nBufferLength=0x105, lpBuffer=0x515ebe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.0.cs", lpFilePart=0x0) returned 0x31 [0094.615] GetLastError () returned 0x0 [0094.615] SetErrorMode (uMode=0x1) returned 0x1 [0094.615] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.0.cs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x328 [0094.616] GetLastError () returned 0x0 [0094.616] GetFileType (hFile=0x328) returned 0x1 [0094.616] SetErrorMode (uMode=0x1) returned 0x1 [0094.616] GetFileType (hFile=0x328) returned 0x1 [0094.618] WriteFile (in: hFile=0x328, lpBuffer=0x64755ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x515f10c, lpOverlapped=0x0 | out: lpBuffer=0x64755ac*, lpNumberOfBytesWritten=0x515f10c*=0x1000, lpOverlapped=0x0) returned 1 [0094.621] GetLastError () returned 0x0 [0094.621] WriteFile (in: hFile=0x328, lpBuffer=0x64755ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x515f10c, lpOverlapped=0x0 | out: lpBuffer=0x64755ac*, lpNumberOfBytesWritten=0x515f10c*=0x1000, lpOverlapped=0x0) returned 1 [0094.621] GetLastError () returned 0x0 [0094.621] WriteFile (in: hFile=0x328, lpBuffer=0x64755ac*, nNumberOfBytesToWrite=0x34e, lpNumberOfBytesWritten=0x515f128, lpOverlapped=0x0 | out: lpBuffer=0x64755ac*, lpNumberOfBytesWritten=0x515f128*=0x34e, lpOverlapped=0x0) returned 1 [0094.621] GetLastError () returned 0x0 [0094.624] CloseHandle (hObject=0x328) returned 1 [0094.625] GetLastError () returned 0x0 [0094.628] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll", nBufferLength=0x105, lpBuffer=0x515eb94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll", lpFilePart=0x0) returned 0x30 [0094.628] GetLastError () returned 0x0 [0094.628] SetErrorMode (uMode=0x1) returned 0x1 [0094.628] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x328 [0094.629] GetLastError () returned 0x0 [0094.629] GetFileType (hFile=0x328) returned 0x1 [0094.629] SetErrorMode (uMode=0x1) returned 0x1 [0094.629] GetFileType (hFile=0x328) returned 0x1 [0094.630] CloseHandle (hObject=0x328) returned 1 [0094.630] GetLastError () returned 0x0 [0094.641] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.cmdline", nBufferLength=0x105, lpBuffer=0x515eb58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.cmdline", lpFilePart=0x0) returned 0x34 [0094.641] GetLastError () returned 0x0 [0094.641] SetErrorMode (uMode=0x1) returned 0x1 [0094.642] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.cmdline"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x328 [0094.642] GetLastError () returned 0x0 [0094.642] GetFileType (hFile=0x328) returned 0x1 [0094.643] SetErrorMode (uMode=0x1) returned 0x1 [0094.643] GetFileType (hFile=0x328) returned 0x1 [0094.643] WriteFile (in: hFile=0x328, lpBuffer=0x6478f88*, nNumberOfBytesToWrite=0x139, lpNumberOfBytesWritten=0x515f0a0, lpOverlapped=0x0 | out: lpBuffer=0x6478f88*, lpNumberOfBytesWritten=0x515f0a0*=0x139, lpOverlapped=0x0) returned 1 [0094.644] GetLastError () returned 0x0 [0094.647] CloseHandle (hObject=0x328) returned 1 [0094.647] GetLastError () returned 0x0 [0094.649] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x515ec08, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0094.649] GetLastError () returned 0x0 [0094.650] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", nBufferLength=0x105, lpBuffer=0x515ec48, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", lpFilePart=0x0) returned 0x35 [0094.650] GetLastError () returned 0x0 [0094.650] SetErrorMode (uMode=0x1) returned 0x1 [0094.650] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe"), fInfoLevelId=0x0, lpFileInformation=0x515f0c8 | out: lpFileInformation=0x515f0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b437aa, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0xf8b437aa, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9b67d5fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x12d38)) returned 1 [0094.651] GetLastError () returned 0x0 [0094.651] SetErrorMode (uMode=0x1) returned 0x1 [0094.651] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x2d86b0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0094.651] GetLastError () returned 0x0 [0094.652] GetCurrentProcess () returned 0xffffffff [0094.652] GetLastError () returned 0x3f0 [0094.652] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515eff8 | out: TokenHandle=0x515eff8*=0x350) returned 1 [0094.652] GetLastError () returned 0x3f0 [0094.654] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.out", nBufferLength=0x105, lpBuffer=0x515ea44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.out", lpFilePart=0x0) returned 0x30 [0094.654] GetLastError () returned 0x3f0 [0094.654] SetErrorMode (uMode=0x1) returned 0x1 [0094.654] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.out"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x647af60, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x328 [0094.655] GetLastError () returned 0x0 [0094.655] GetFileType (hFile=0x328) returned 0x1 [0094.655] SetErrorMode (uMode=0x1) returned 0x1 [0094.655] GetFileType (hFile=0x328) returned 0x1 [0094.655] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.err", nBufferLength=0x105, lpBuffer=0x515ea44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.err", lpFilePart=0x0) returned 0x30 [0094.655] GetLastError () returned 0x0 [0094.655] SetErrorMode (uMode=0x1) returned 0x1 [0094.655] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.err"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x647b170, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b0 [0094.656] GetLastError () returned 0x0 [0094.656] GetFileType (hFile=0x3b0) returned 0x1 [0094.656] SetErrorMode (uMode=0x1) returned 0x1 [0094.656] GetFileType (hFile=0x3b0) returned 0x1 [0094.657] WriteFile (in: hFile=0x328, lpBuffer=0x647cac8*, nNumberOfBytesToWrite=0x18c, lpNumberOfBytesWritten=0x515ef98, lpOverlapped=0x0 | out: lpBuffer=0x647cac8*, lpNumberOfBytesWritten=0x515ef98*=0x18c, lpOverlapped=0x0) returned 1 [0094.659] GetLastError () returned 0x0 [0094.659] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0094.673] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.cmdline\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x6488ad4, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x2d37c8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3, hStdOutput=0x328, hStdError=0x3b0), lpProcessInformation=0x647b304 | out: lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.cmdline\"", lpProcessInformation=0x647b304*(hProcess=0x364, hThread=0x360, dwProcessId=0xf44, dwThreadId=0xf48)) returned 1 [0094.686] GetLastError () returned 0x7f [0094.687] CloseHandle (hObject=0x328) returned 1 [0094.688] GetLastError () returned 0x7f [0094.688] CloseHandle (hObject=0x3b0) returned 1 [0094.688] GetLastError () returned 0x7f [0094.690] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0x927c0) returned 0x0 [0100.564] GetLastError () returned 0x7f [0100.565] GetExitCodeProcess (in: hProcess=0x364, lpExitCode=0x515f084 | out: lpExitCode=0x515f084*=0x0) returned 1 [0100.565] GetLastError () returned 0x7f [0100.565] CloseHandle (hObject=0x364) returned 1 [0100.565] GetLastError () returned 0x7f [0100.566] CloseHandle (hObject=0x360) returned 1 [0100.566] GetLastError () returned 0x7f [0100.567] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll", nBufferLength=0x105, lpBuffer=0x515eb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll", lpFilePart=0x0) returned 0x30 [0100.567] GetLastError () returned 0x7f [0100.567] SetErrorMode (uMode=0x1) returned 0x1 [0100.567] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0100.567] GetLastError () returned 0x0 [0100.567] GetFileType (hFile=0x360) returned 0x1 [0100.568] SetErrorMode (uMode=0x1) returned 0x1 [0100.568] GetFileType (hFile=0x360) returned 0x1 [0100.570] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x515f144 | out: lpFileSizeHigh=0x515f144*=0x0) returned 0x1800 [0100.570] GetLastError () returned 0x0 [0100.570] ReadFile (in: hFile=0x360, lpBuffer=0x6489364, nNumberOfBytesToRead=0x1800, lpNumberOfBytesRead=0x515f0ec, lpOverlapped=0x0 | out: lpBuffer=0x6489364*, lpNumberOfBytesRead=0x515f0ec*=0x1800, lpOverlapped=0x0) returned 1 [0100.570] GetLastError () returned 0x0 [0100.619] CloseHandle (hObject=0x360) returned 1 [0100.619] GetLastError () returned 0x0 [0100.619] GetCurrentProcess () returned 0xffffffff [0100.619] GetLastError () returned 0x3f0 [0100.620] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515f0e4 | out: TokenHandle=0x515f0e4*=0x360) returned 1 [0100.620] GetLastError () returned 0x3f0 [0100.622] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.out", nBufferLength=0x105, lpBuffer=0x515ecbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.out", lpFilePart=0x0) returned 0x30 [0100.623] GetLastError () returned 0x3f0 [0100.623] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.out")) returned 1 [0100.625] GetLastError () returned 0x3f0 [0100.625] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.tmp", nBufferLength=0x105, lpBuffer=0x515ecbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.tmp", lpFilePart=0x0) returned 0x30 [0100.625] GetLastError () returned 0x3f0 [0100.625] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.tmp")) returned 1 [0100.625] GetLastError () returned 0x3f0 [0100.625] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.0.cs", nBufferLength=0x105, lpBuffer=0x515ecbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.0.cs", lpFilePart=0x0) returned 0x31 [0100.625] GetLastError () returned 0x3f0 [0100.625] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.0.cs")) returned 1 [0100.626] GetLastError () returned 0x3f0 [0100.626] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll", nBufferLength=0x105, lpBuffer=0x515ecbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll", lpFilePart=0x0) returned 0x30 [0100.626] GetLastError () returned 0x3f0 [0100.626] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.dll")) returned 1 [0100.627] GetLastError () returned 0x3f0 [0100.627] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.cmdline", nBufferLength=0x105, lpBuffer=0x515ecbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.cmdline", lpFilePart=0x0) returned 0x34 [0100.627] GetLastError () returned 0x3f0 [0100.628] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.cmdline")) returned 1 [0100.628] GetLastError () returned 0x3f0 [0100.628] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.pdb", nBufferLength=0x105, lpBuffer=0x515ecbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.pdb", lpFilePart=0x0) returned 0x30 [0100.628] GetLastError () returned 0x3f0 [0100.628] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.pdb" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.pdb")) returned 1 [0100.630] GetLastError () returned 0x3f0 [0100.630] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.err", nBufferLength=0x105, lpBuffer=0x515ecbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.err", lpFilePart=0x0) returned 0x30 [0100.630] GetLastError () returned 0x3f0 [0100.630] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\m1pgl9ij.err")) returned 1 [0100.630] GetLastError () returned 0x3f0 [0102.141] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x515ece4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0102.141] GetLastError () returned 0x3f0 [0102.160] GetCurrentProcess () returned 0xffffffff [0102.160] GetLastError () returned 0x3f0 [0102.160] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515f064 | out: TokenHandle=0x515f064*=0x364) returned 1 [0102.160] GetLastError () returned 0x3f0 [0102.160] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x2d9e20 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\") returned 0x24 [0102.160] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x515ec18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0102.160] GetLastError () returned 0x3f0 [0102.161] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx", nBufferLength=0x105, lpBuffer=0x515ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx", lpFilePart=0x0) returned 0x2c [0102.161] GetLastError () returned 0x0 [0102.161] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx", nBufferLength=0x105, lpBuffer=0x515ebc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx", lpFilePart=0x0) returned 0x2c [0102.161] GetLastError () returned 0x0 [0102.161] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.tmp", nBufferLength=0x105, lpBuffer=0x515eb28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.tmp", lpFilePart=0x0) returned 0x30 [0102.161] GetLastError () returned 0x0 [0102.161] SetErrorMode (uMode=0x1) returned 0x1 [0102.161] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b0 [0102.162] GetLastError () returned 0x0 [0102.162] GetFileType (hFile=0x3b0) returned 0x1 [0102.162] SetErrorMode (uMode=0x1) returned 0x1 [0102.162] GetFileType (hFile=0x3b0) returned 0x1 [0102.163] CloseHandle (hObject=0x3b0) returned 1 [0102.163] GetLastError () returned 0x0 [0102.163] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.0.cs", nBufferLength=0x105, lpBuffer=0x515eb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.0.cs", lpFilePart=0x0) returned 0x31 [0102.163] GetLastError () returned 0x0 [0102.163] SetErrorMode (uMode=0x1) returned 0x1 [0102.163] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.0.cs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b0 [0102.164] GetLastError () returned 0x0 [0102.164] GetFileType (hFile=0x3b0) returned 0x1 [0102.164] SetErrorMode (uMode=0x1) returned 0x1 [0102.164] GetFileType (hFile=0x3b0) returned 0x1 [0102.164] WriteFile (in: hFile=0x3b0, lpBuffer=0x64a5974*, nNumberOfBytesToWrite=0x873, lpNumberOfBytesWritten=0x515f0cc, lpOverlapped=0x0 | out: lpBuffer=0x64a5974*, lpNumberOfBytesWritten=0x515f0cc*=0x873, lpOverlapped=0x0) returned 1 [0102.166] GetLastError () returned 0x0 [0102.166] CloseHandle (hObject=0x3b0) returned 1 [0102.177] GetLastError () returned 0x0 [0102.177] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll", nBufferLength=0x105, lpBuffer=0x515eb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll", lpFilePart=0x0) returned 0x30 [0102.177] GetLastError () returned 0x0 [0102.177] SetErrorMode (uMode=0x1) returned 0x1 [0102.177] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b0 [0102.178] GetLastError () returned 0x0 [0102.178] GetFileType (hFile=0x3b0) returned 0x1 [0102.178] SetErrorMode (uMode=0x1) returned 0x1 [0102.178] GetFileType (hFile=0x3b0) returned 0x1 [0102.178] CloseHandle (hObject=0x3b0) returned 1 [0102.178] GetLastError () returned 0x0 [0102.179] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.cmdline", nBufferLength=0x105, lpBuffer=0x515eafc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.cmdline", lpFilePart=0x0) returned 0x34 [0102.179] GetLastError () returned 0x0 [0102.179] SetErrorMode (uMode=0x1) returned 0x1 [0102.179] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.cmdline"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b0 [0102.179] GetLastError () returned 0x0 [0102.179] GetFileType (hFile=0x3b0) returned 0x1 [0102.179] SetErrorMode (uMode=0x1) returned 0x1 [0102.179] GetFileType (hFile=0x3b0) returned 0x1 [0102.180] WriteFile (in: hFile=0x3b0, lpBuffer=0x64a8fdc*, nNumberOfBytesToWrite=0x139, lpNumberOfBytesWritten=0x515f044, lpOverlapped=0x0 | out: lpBuffer=0x64a8fdc*, lpNumberOfBytesWritten=0x515f044*=0x139, lpOverlapped=0x0) returned 1 [0102.181] GetLastError () returned 0x0 [0102.181] CloseHandle (hObject=0x3b0) returned 1 [0102.190] GetLastError () returned 0x0 [0102.191] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x515ebac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0102.191] GetLastError () returned 0x0 [0102.191] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", nBufferLength=0x105, lpBuffer=0x515ebec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", lpFilePart=0x0) returned 0x35 [0102.191] GetLastError () returned 0x0 [0102.192] SetErrorMode (uMode=0x1) returned 0x1 [0102.192] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe"), fInfoLevelId=0x0, lpFileInformation=0x515f06c | out: lpFileInformation=0x515f06c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b437aa, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0xf8b437aa, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9b67d5fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x12d38)) returned 1 [0102.192] GetLastError () returned 0x0 [0102.192] SetErrorMode (uMode=0x1) returned 0x1 [0102.192] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x2d9e20 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0102.192] GetLastError () returned 0x0 [0102.192] GetCurrentProcess () returned 0xffffffff [0102.192] GetLastError () returned 0x3f0 [0102.192] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515ef9c | out: TokenHandle=0x515ef9c*=0x328) returned 1 [0102.192] GetLastError () returned 0x3f0 [0102.193] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.out", nBufferLength=0x105, lpBuffer=0x515e9e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.out", lpFilePart=0x0) returned 0x30 [0102.193] GetLastError () returned 0x3f0 [0102.193] SetErrorMode (uMode=0x1) returned 0x1 [0102.193] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.out"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x64aae8c, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b0 [0102.193] GetLastError () returned 0x0 [0102.193] GetFileType (hFile=0x3b0) returned 0x1 [0102.193] SetErrorMode (uMode=0x1) returned 0x1 [0102.194] GetFileType (hFile=0x3b0) returned 0x1 [0102.194] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.err", nBufferLength=0x105, lpBuffer=0x515e9e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.err", lpFilePart=0x0) returned 0x30 [0102.194] GetLastError () returned 0x0 [0102.194] SetErrorMode (uMode=0x1) returned 0x1 [0102.194] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.err"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x64ab09c, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x36c [0102.194] GetLastError () returned 0x0 [0102.194] GetFileType (hFile=0x36c) returned 0x1 [0102.194] SetErrorMode (uMode=0x1) returned 0x1 [0102.194] GetFileType (hFile=0x36c) returned 0x1 [0102.195] WriteFile (in: hFile=0x3b0, lpBuffer=0x64ac9f4*, nNumberOfBytesToWrite=0x18c, lpNumberOfBytesWritten=0x515ef3c, lpOverlapped=0x0 | out: lpBuffer=0x64ac9f4*, lpNumberOfBytesWritten=0x515ef3c*=0x18c, lpOverlapped=0x0) returned 1 [0102.212] GetLastError () returned 0x0 [0102.212] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0102.213] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.cmdline\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x64b89f4, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x2d37c8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3, hStdOutput=0x3b0, hStdError=0x36c), lpProcessInformation=0x64ab230 | out: lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.cmdline\"", lpProcessInformation=0x64ab230*(hProcess=0x374, hThread=0x368, dwProcessId=0xf70, dwThreadId=0xf74)) returned 1 [0102.216] GetLastError () returned 0x0 [0102.216] CloseHandle (hObject=0x3b0) returned 1 [0102.225] GetLastError () returned 0x0 [0102.225] CloseHandle (hObject=0x36c) returned 1 [0102.225] GetLastError () returned 0x0 [0102.225] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x927c0) returned 0x0 [0104.443] GetLastError () returned 0x0 [0104.443] GetExitCodeProcess (in: hProcess=0x374, lpExitCode=0x515f028 | out: lpExitCode=0x515f028*=0x0) returned 1 [0104.443] GetLastError () returned 0x0 [0104.443] CloseHandle (hObject=0x374) returned 1 [0104.443] GetLastError () returned 0x0 [0104.443] CloseHandle (hObject=0x368) returned 1 [0104.443] GetLastError () returned 0x0 [0104.444] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll", nBufferLength=0x105, lpBuffer=0x515eb34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll", lpFilePart=0x0) returned 0x30 [0104.444] GetLastError () returned 0x0 [0104.444] SetErrorMode (uMode=0x1) returned 0x1 [0104.444] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0104.444] GetLastError () returned 0x0 [0104.444] GetFileType (hFile=0x368) returned 0x1 [0104.444] SetErrorMode (uMode=0x1) returned 0x1 [0104.444] GetFileType (hFile=0x368) returned 0x1 [0104.444] GetFileSize (in: hFile=0x368, lpFileSizeHigh=0x515f0e8 | out: lpFileSizeHigh=0x515f0e8*=0x0) returned 0x1200 [0104.444] GetLastError () returned 0x0 [0104.444] ReadFile (in: hFile=0x368, lpBuffer=0x64b9284, nNumberOfBytesToRead=0x1200, lpNumberOfBytesRead=0x515f090, lpOverlapped=0x0 | out: lpBuffer=0x64b9284*, lpNumberOfBytesRead=0x515f090*=0x1200, lpOverlapped=0x0) returned 1 [0104.444] GetLastError () returned 0x0 [0104.454] CloseHandle (hObject=0x368) returned 1 [0104.454] GetLastError () returned 0x0 [0104.455] GetCurrentProcess () returned 0xffffffff [0104.455] GetLastError () returned 0x3f0 [0104.455] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515f088 | out: TokenHandle=0x515f088*=0x368) returned 1 [0104.455] GetLastError () returned 0x3f0 [0104.455] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll", nBufferLength=0x105, lpBuffer=0x515ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll", lpFilePart=0x0) returned 0x30 [0104.455] GetLastError () returned 0x3f0 [0104.455] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.dll")) returned 1 [0104.457] GetLastError () returned 0x3f0 [0104.457] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.err", nBufferLength=0x105, lpBuffer=0x515ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.err", lpFilePart=0x0) returned 0x30 [0104.457] GetLastError () returned 0x3f0 [0104.457] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.err")) returned 1 [0104.457] GetLastError () returned 0x3f0 [0104.457] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.0.cs", nBufferLength=0x105, lpBuffer=0x515ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.0.cs", lpFilePart=0x0) returned 0x31 [0104.457] GetLastError () returned 0x3f0 [0104.457] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.0.cs")) returned 1 [0104.458] GetLastError () returned 0x3f0 [0104.458] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.tmp", nBufferLength=0x105, lpBuffer=0x515ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.tmp", lpFilePart=0x0) returned 0x30 [0104.458] GetLastError () returned 0x3f0 [0104.458] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.tmp")) returned 1 [0104.458] GetLastError () returned 0x3f0 [0104.458] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.cmdline", nBufferLength=0x105, lpBuffer=0x515ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.cmdline", lpFilePart=0x0) returned 0x34 [0104.458] GetLastError () returned 0x3f0 [0104.458] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.cmdline")) returned 1 [0104.458] GetLastError () returned 0x3f0 [0104.459] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.pdb", nBufferLength=0x105, lpBuffer=0x515ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.pdb", lpFilePart=0x0) returned 0x30 [0104.459] GetLastError () returned 0x3f0 [0104.459] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.pdb" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.pdb")) returned 1 [0104.460] GetLastError () returned 0x3f0 [0104.460] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.out", nBufferLength=0x105, lpBuffer=0x515ec60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.out", lpFilePart=0x0) returned 0x30 [0104.460] GetLastError () returned 0x3f0 [0104.460] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\raurtmxx.out")) returned 1 [0104.462] GetLastError () returned 0x3f0 [0105.959] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0105.959] GetLastError () returned 0xcb [0105.992] VirtualQuery (in: lpAddress=0x515e228, lpBuffer=0x515f228, dwLength=0x1c | out: lpBuffer=0x515f228*(BaseAddress=0x515e000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0106.020] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0106.020] GetLastError () returned 0xcb [0106.037] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0106.037] GetLastError () returned 0xcb [0106.140] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0106.140] GetLastError () returned 0xcb [0106.234] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0106.234] GetLastError () returned 0xcb [0106.378] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x350 [0106.378] GetLastError () returned 0x0 [0106.381] CoGetObjectContext (in: riid=0x6366648*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ee3c | out: ppv=0x515ee3c*=0x205794) returned 0x0 [0106.849] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x515dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0106.849] GetLastError () returned 0x0 [0106.855] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\\\wminet_utils.dll") returned 0x3d90000 [0107.303] GetProcAddress (hModule=0x3d90000, lpProcName="ResetSecurity") returned 0x3d91944 [0107.314] GetProcAddress (hModule=0x3d90000, lpProcName="SetSecurity") returned 0x3d91986 [0107.322] GetProcAddress (hModule=0x3d90000, lpProcName="BlessIWbemServices") returned 0x3d919cc [0107.336] GetProcAddress (hModule=0x3d90000, lpProcName="BlessIWbemServicesObject") returned 0x3d91a1e [0107.351] GetProcAddress (hModule=0x3d90000, lpProcName="GetPropertyHandle") returned 0x3d91a70 [0107.369] GetProcAddress (hModule=0x3d90000, lpProcName="WritePropertyValue") returned 0x3d91a89 [0107.378] GetProcAddress (hModule=0x3d90000, lpProcName="Clone") returned 0x3d91aa2 [0107.385] GetProcAddress (hModule=0x3d90000, lpProcName="VerifyClientKey") returned 0x3d92270 [0107.394] GetProcAddress (hModule=0x3d90000, lpProcName="GetQualifierSet") returned 0x3d91d73 [0107.401] GetProcAddress (hModule=0x3d90000, lpProcName="Get") returned 0x3d91b96 [0107.411] GetProcAddress (hModule=0x3d90000, lpProcName="Put") returned 0x3d91b7a [0107.426] GetProcAddress (hModule=0x3d90000, lpProcName="Delete") returned 0x3d91bb5 [0107.456] GetProcAddress (hModule=0x3d90000, lpProcName="GetNames") returned 0x3d91bc8 [0107.465] GetProcAddress (hModule=0x3d90000, lpProcName="BeginEnumeration") returned 0x3d91be4 [0107.470] GetProcAddress (hModule=0x3d90000, lpProcName="Next") returned 0x3d91bf7 [0107.474] GetProcAddress (hModule=0x3d90000, lpProcName="EndEnumeration") returned 0x3d91c16 [0107.479] GetProcAddress (hModule=0x3d90000, lpProcName="GetPropertyQualifierSet") returned 0x3d91c26 [0107.480] GetProcAddress (hModule=0x3d90000, lpProcName="Clone") returned 0x3d91aa2 [0107.482] GetProcAddress (hModule=0x3d90000, lpProcName="GetObjectText") returned 0x3d91c3c [0107.483] GetProcAddress (hModule=0x3d90000, lpProcName="SpawnDerivedClass") returned 0x3d91c52 [0107.484] GetProcAddress (hModule=0x3d90000, lpProcName="SpawnInstance") returned 0x3d91c68 [0107.485] GetProcAddress (hModule=0x3d90000, lpProcName="CompareTo") returned 0x3d91c7e [0107.487] GetProcAddress (hModule=0x3d90000, lpProcName="GetPropertyOrigin") returned 0x3d91c94 [0107.488] GetProcAddress (hModule=0x3d90000, lpProcName="InheritsFrom") returned 0x3d91caa [0107.490] GetProcAddress (hModule=0x3d90000, lpProcName="GetMethod") returned 0x3d91cbd [0107.491] GetProcAddress (hModule=0x3d90000, lpProcName="PutMethod") returned 0x3d91cd9 [0107.493] GetProcAddress (hModule=0x3d90000, lpProcName="DeleteMethod") returned 0x3d91cf5 [0107.495] GetProcAddress (hModule=0x3d90000, lpProcName="BeginMethodEnumeration") returned 0x3d91d08 [0107.497] GetProcAddress (hModule=0x3d90000, lpProcName="NextMethod") returned 0x3d91d1b [0107.500] GetProcAddress (hModule=0x3d90000, lpProcName="EndMethodEnumeration") returned 0x3d91d37 [0107.505] GetProcAddress (hModule=0x3d90000, lpProcName="GetMethodQualifierSet") returned 0x3d91d47 [0107.511] GetProcAddress (hModule=0x3d90000, lpProcName="GetMethodOrigin") returned 0x3d91d5d [0107.515] GetProcAddress (hModule=0x3d90000, lpProcName="QualifierSet_Get") returned 0x3d91d86 [0107.520] GetProcAddress (hModule=0x3d90000, lpProcName="QualifierSet_Put") returned 0x3d91da2 [0107.525] GetProcAddress (hModule=0x3d90000, lpProcName="QualifierSet_Delete") returned 0x3d91dbb [0107.528] GetProcAddress (hModule=0x3d90000, lpProcName="QualifierSet_GetNames") returned 0x3d91dce [0107.532] GetProcAddress (hModule=0x3d90000, lpProcName="QualifierSet_BeginEnumeration") returned 0x3d91de4 [0107.541] GetProcAddress (hModule=0x3d90000, lpProcName="QualifierSet_Next") returned 0x3d91df7 [0107.548] GetProcAddress (hModule=0x3d90000, lpProcName="QualifierSet_EndEnumeration") returned 0x3d91e13 [0107.557] GetProcAddress (hModule=0x3d90000, lpProcName="GetCurrentApartmentType") returned 0x3d91d73 [0107.570] GetProcAddress (hModule=0x3d90000, lpProcName="GetDemultiplexedStub") returned 0x3d918fd [0107.586] GetProcAddress (hModule=0x3d90000, lpProcName="CreateInstanceEnumWmi") returned 0x3d91580 [0107.603] GetProcAddress (hModule=0x3d90000, lpProcName="CreateClassEnumWmi") returned 0x3d915f6 [0107.614] GetProcAddress (hModule=0x3d90000, lpProcName="ExecQueryWmi") returned 0x3d9169e [0107.619] GetProcAddress (hModule=0x3d90000, lpProcName="ExecNotificationQueryWmi") returned 0x3d91717 [0107.623] GetProcAddress (hModule=0x3d90000, lpProcName="PutInstanceWmi") returned 0x3d91790 [0107.628] GetProcAddress (hModule=0x3d90000, lpProcName="PutClassWmi") returned 0x3d91810 [0107.634] GetProcAddress (hModule=0x3d90000, lpProcName="CloneEnumWbemClassObject") returned 0x3d91890 [0107.641] GetProcAddress (hModule=0x3d90000, lpProcName="ConnectServerWmi") returned 0x3d924b7 [0107.649] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ee34 | out: pAptType=0x515ee34*=1) returned 0x0 [0107.657] IUnknown:QueryInterface (in: This=0x205794, riid=0x6366630*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ee38 | out: ppvObject=0x515ee38*=0x0) returned 0x80004002 [0107.659] IUnknown:Release (This=0x205794) returned 0x0 [0107.759] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x515e9ec | out: lpiid=0x515e9ec) returned 0x0 [0107.760] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e954 | out: ppv=0x515e954*=0x7670810) returned 0x0 [0108.454] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670810, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e784 | out: ppvObject=0x515e784*=0x0) returned 0x80004002 [0108.454] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7670810, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e7bc | out: ppvObject=0x515e7bc*=0x7670820) returned 0x0 [0108.455] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670820, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e560 | out: ppvObject=0x515e560*=0x7670820) returned 0x0 [0108.455] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670820, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e51c | out: ppvObject=0x515e51c*=0x0) returned 0x80004002 [0108.456] WbemDefPath:IUnknown:AddRef (This=0x7670820) returned 0x3 [0108.457] CoGetContextToken (in: pToken=0x515e3a8 | out: pToken=0x515e3a8) returned 0x0 [0108.457] CoGetObjectContext (in: riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x2d0ea4 | out: ppv=0x2d0ea4*=0x205788) returned 0x0 [0108.458] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670820, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e390 | out: ppvObject=0x515e390*=0x2daf80) returned 0x0 [0108.458] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x2daf80, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e398 | out: pCid=0x515e398*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0108.458] WbemDefPath:IUnknown:Release (This=0x2daf80) returned 0x3 [0108.459] CoGetContextToken (in: pToken=0x515e3a0 | out: pToken=0x515e3a0) returned 0x0 [0108.459] WbemDefPath:IUnknown:AddRef (This=0x7670820) returned 0x4 [0108.459] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670820, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e414 | out: ppvObject=0x515e414*=0x0) returned 0x80004002 [0108.459] WbemDefPath:IUnknown:Release (This=0x7670820) returned 0x3 [0108.460] WbemDefPath:IUnknown:Release (This=0x7670820) returned 0x2 [0108.460] WbemDefPath:IUnknown:Release (This=0x7670810) returned 0x0 [0108.460] WbemDefPath:IUnknown:Release (This=0x7670820) returned 0x1 [0108.461] CoGetContextToken (in: pToken=0x515ec50 | out: pToken=0x515ec50) returned 0x0 [0108.461] CoGetContextToken (in: pToken=0x515ec10 | out: pToken=0x515ec10) returned 0x0 [0108.461] WbemDefPath:IUnknown:AddRef (This=0x7670820) returned 0x2 [0108.461] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670820, riid=0x515ec8c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ec88 | out: ppvObject=0x515ec88*=0x7670820) returned 0x0 [0108.462] WbemDefPath:IUnknown:Release (This=0x7670820) returned 0x2 [0108.462] WbemDefPath:IUnknown:Release (This=0x7670820) returned 0x1 [0108.463] CoGetObjectContext (in: riid=0x6366648*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e660 | out: ppv=0x515e660*=0x205794) returned 0x0 [0108.463] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515e658 | out: pAptType=0x515e658*=1) returned 0x0 [0108.463] IUnknown:QueryInterface (in: This=0x205794, riid=0x6366630*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e65c | out: ppvObject=0x515e65c*=0x0) returned 0x80004002 [0108.463] IUnknown:Release (This=0x205794) returned 0x1 [0108.465] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e178 | out: ppv=0x515e178*=0x7670810) returned 0x0 [0108.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670810, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x0) returned 0x80004002 [0108.465] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7670810, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfe0 | out: ppvObject=0x515dfe0*=0x76708b8) returned 0x0 [0108.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x76708b8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dd84 | out: ppvObject=0x515dd84*=0x76708b8) returned 0x0 [0108.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x76708b8, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515dd40 | out: ppvObject=0x515dd40*=0x0) returned 0x80004002 [0108.466] WbemDefPath:IUnknown:AddRef (This=0x76708b8) returned 0x3 [0108.466] CoGetContextToken (in: pToken=0x515dbcc | out: pToken=0x515dbcc) returned 0x0 [0108.466] WbemDefPath:IUnknown:QueryInterface (in: This=0x76708b8, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dbb4 | out: ppvObject=0x515dbb4*=0x2daf90) returned 0x0 [0108.466] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x2daf90, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dbbc | out: pCid=0x515dbbc*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0108.466] WbemDefPath:IUnknown:Release (This=0x2daf90) returned 0x3 [0108.466] CoGetContextToken (in: pToken=0x515dbc4 | out: pToken=0x515dbc4) returned 0x0 [0108.467] WbemDefPath:IUnknown:AddRef (This=0x76708b8) returned 0x4 [0108.467] WbemDefPath:IUnknown:QueryInterface (in: This=0x76708b8, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc38 | out: ppvObject=0x515dc38*=0x0) returned 0x80004002 [0108.467] WbemDefPath:IUnknown:Release (This=0x76708b8) returned 0x3 [0108.467] WbemDefPath:IUnknown:Release (This=0x76708b8) returned 0x2 [0108.467] WbemDefPath:IUnknown:Release (This=0x7670810) returned 0x0 [0108.467] WbemDefPath:IUnknown:Release (This=0x76708b8) returned 0x1 [0108.467] CoGetContextToken (in: pToken=0x515e474 | out: pToken=0x515e474) returned 0x0 [0108.467] CoGetContextToken (in: pToken=0x515e434 | out: pToken=0x515e434) returned 0x0 [0108.467] WbemDefPath:IUnknown:AddRef (This=0x76708b8) returned 0x2 [0108.467] WbemDefPath:IUnknown:QueryInterface (in: This=0x76708b8, riid=0x515e4b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e4ac | out: ppvObject=0x515e4ac*=0x76708b8) returned 0x0 [0108.468] WbemDefPath:IUnknown:Release (This=0x76708b8) returned 0x2 [0108.468] WbemDefPath:IUnknown:Release (This=0x76708b8) returned 0x1 [0108.482] CoGetContextToken (in: pToken=0x515e4f4 | out: pToken=0x515e4f4) returned 0x0 [0108.482] CoGetContextToken (in: pToken=0x515e4b4 | out: pToken=0x515e4b4) returned 0x0 [0108.482] WbemDefPath:IUnknown:AddRef (This=0x76708b8) returned 0x2 [0108.482] WbemDefPath:IUnknown:QueryInterface (in: This=0x76708b8, riid=0x515e530*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e52c | out: ppvObject=0x515e52c*=0x76708b8) returned 0x0 [0108.482] WbemDefPath:IUnknown:Release (This=0x76708b8) returned 0x2 [0108.482] WbemDefPath:IUnknown:AddRef (This=0x76708b8) returned 0x3 [0108.482] WbemDefPath:IWbemPath:SetText (This=0x76708b8, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0108.483] WbemDefPath:IUnknown:Release (This=0x76708b8) returned 0x2 [0108.483] CoGetContextToken (in: pToken=0x515ecd0 | out: pToken=0x515ecd0) returned 0x0 [0108.483] CoGetContextToken (in: pToken=0x515ec90 | out: pToken=0x515ec90) returned 0x0 [0108.483] WbemDefPath:IUnknown:AddRef (This=0x7670820) returned 0x2 [0108.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670820, riid=0x515ed0c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed08 | out: ppvObject=0x515ed08*=0x7670820) returned 0x0 [0108.484] WbemDefPath:IUnknown:Release (This=0x7670820) returned 0x2 [0108.484] WbemDefPath:IUnknown:AddRef (This=0x7670820) returned 0x3 [0108.484] WbemDefPath:IWbemPath:SetText (This=0x7670820, uMode=0x4, pszPath="\\\\localhost\\root\\cimv2") returned 0x0 [0108.484] WbemDefPath:IUnknown:Release (This=0x7670820) returned 0x2 [0108.495] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ee74 | out: puCount=0x515ee74*=0x2) returned 0x0 [0108.507] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ee70*=0x0, pszText=0x0 | out: puBuffLength=0x515ee70*=0x17, pszText=0x0) returned 0x0 [0108.510] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ee70*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ee70*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0108.514] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ee70 | out: puCount=0x515ee70*=0x2) returned 0x0 [0108.514] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ee6c*=0x0, pszText=0x0 | out: puBuffLength=0x515ee6c*=0x17, pszText=0x0) returned 0x0 [0108.514] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ee6c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ee6c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0108.514] CoGetObjectContext (in: riid=0x6366648*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515edec | out: ppv=0x515edec*=0x205794) returned 0x0 [0108.515] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ede4 | out: pAptType=0x515ede4*=1) returned 0x0 [0108.515] IUnknown:QueryInterface (in: This=0x205794, riid=0x6366630*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ede8 | out: ppvObject=0x515ede8*=0x0) returned 0x80004002 [0108.515] IUnknown:Release (This=0x205794) returned 0x1 [0108.515] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x515ecd4 | out: lpiid=0x515ecd4) returned 0x0 [0108.516] CoGetClassObject (in: rclsid=0x2dbbc4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ec3c | out: ppv=0x515ec3c*=0x7670ad0) returned 0x0 [0108.782] WbemLocator:IUnknown:QueryInterface (in: This=0x7670ad0, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515ea6c | out: ppvObject=0x515ea6c*=0x0) returned 0x80004002 [0108.782] WbemLocator:IClassFactory:CreateInstance (in: This=0x7670ad0, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515eaa4 | out: ppvObject=0x515eaa4*=0x7670bf0) returned 0x0 [0108.782] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e848 | out: ppvObject=0x515e848*=0x7670bf0) returned 0x0 [0108.782] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e804 | out: ppvObject=0x515e804*=0x0) returned 0x80004002 [0108.783] WbemLocator:IUnknown:AddRef (This=0x7670bf0) returned 0x3 [0108.783] CoGetContextToken (in: pToken=0x515e690 | out: pToken=0x515e690) returned 0x0 [0108.783] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e678 | out: ppvObject=0x515e678*=0x0) returned 0x80004002 [0108.783] CoGetContextToken (in: pToken=0x515e688 | out: pToken=0x515e688) returned 0x0 [0108.783] WbemLocator:IUnknown:AddRef (This=0x7670bf0) returned 0x4 [0108.783] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6fc | out: ppvObject=0x515e6fc*=0x0) returned 0x80004002 [0108.783] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x3 [0108.784] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x2 [0108.784] WbemLocator:IUnknown:Release (This=0x7670ad0) returned 0x0 [0108.784] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x1 [0108.784] CoGetContextToken (in: pToken=0x515eb94 | out: pToken=0x515eb94) returned 0x0 [0108.784] CoGetContextToken (in: pToken=0x515eb54 | out: pToken=0x515eb54) returned 0x0 [0108.784] WbemLocator:IUnknown:AddRef (This=0x7670bf0) returned 0x2 [0108.784] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x515ebd0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515ebcc | out: ppvObject=0x515ebcc*=0x7670bf0) returned 0x0 [0108.785] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x2 [0108.785] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x1 [0108.787] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515edc4 | out: puCount=0x515edc4*=0x2) returned 0x0 [0108.790] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=8, puBuffLength=0x515edc0*=0x0, pszText=0x0 | out: puBuffLength=0x515edc0*=0x17, pszText=0x0) returned 0x0 [0108.792] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=8, puBuffLength=0x515edc0*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515edc0*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0108.793] CoCreateInstance (in: rclsid=0x3d913a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x3d912d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x515e89c | out: ppv=0x515e89c*=0x7670c00) returned 0x0 [0108.793] WbemLocator:IWbemLocator:ConnectServer (in: This=0x7670c00, strNetworkResource="\\\\localhost\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x515e8e8 | out: ppNamespace=0x515e8e8*=0x767cb2c) returned 0x0 [0117.636] WbemLocator:IUnknown:QueryInterface (in: This=0x767cb2c, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e7b8 | out: ppvObject=0x515e7b8*=0x751fa6c) returned 0x0 [0117.636] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x751fa6c, pProxy=0x767cb2c, pAuthnSvc=0x515e800, pAuthzSvc=0x515e7fc, pServerPrincName=0x515e80c, pAuthnLevel=0x515e804, pImpLevel=0x515e7f0, pAuthInfo=0x515e7f4, pCapabilites=0x515e7f8 | out: pAuthnSvc=0x515e800*=0xa, pAuthzSvc=0x515e7fc*=0x0, pServerPrincName=0x515e80c, pAuthnLevel=0x515e804*=0x6, pImpLevel=0x515e7f0*=0x2, pAuthInfo=0x515e7f4, pCapabilites=0x515e7f8*=0x1) returned 0x0 [0117.636] WbemLocator:IUnknown:Release (This=0x751fa6c) returned 0x1 [0117.636] WbemLocator:IUnknown:QueryInterface (in: This=0x767cb2c, riid=0x3d91250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e7ac | out: ppvObject=0x515e7ac*=0x751fa8c) returned 0x0 [0117.636] WbemLocator:IUnknown:QueryInterface (in: This=0x767cb2c, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e7a8 | out: ppvObject=0x515e7a8*=0x751fa6c) returned 0x0 [0117.636] WbemLocator:IClientSecurity:SetBlanket (This=0x751fa6c, pProxy=0x767cb2c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0117.637] WbemLocator:IUnknown:Release (This=0x751fa6c) returned 0x2 [0117.637] WbemLocator:IUnknown:Release (This=0x751fa8c) returned 0x1 [0117.637] CoTaskMemFree (pv=0x2e5138) [0117.637] WbemLocator:IUnknown:Release (This=0x7670c00) returned 0x0 [0117.637] WbemLocator:IUnknown:QueryInterface (in: This=0x767cb2c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e168 | out: ppvObject=0x515e168*=0x751fa8c) returned 0x0 [0117.637] WbemLocator:IUnknown:QueryInterface (in: This=0x751fa8c, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e124 | out: ppvObject=0x515e124*=0x0) returned 0x80004002 [0117.638] WbemLocator:IUnknown:QueryInterface (in: This=0x751fa8c, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e018 | out: ppvObject=0x515e018*=0x0) returned 0x80004002 [0117.639] WbemLocator:IUnknown:AddRef (This=0x751fa8c) returned 0x3 [0117.639] CoGetContextToken (in: pToken=0x515dfb0 | out: pToken=0x515dfb0) returned 0x0 [0117.639] WbemLocator:IUnknown:QueryInterface (in: This=0x751fa8c, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df98 | out: ppvObject=0x515df98*=0x751f9ec) returned 0x0 [0117.639] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x751f9ec, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dfa0 | out: pCid=0x515dfa0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0117.639] WbemLocator:IUnknown:Release (This=0x751f9ec) returned 0x3 [0117.640] CoGetContextToken (in: pToken=0x515dfa8 | out: pToken=0x515dfa8) returned 0x0 [0117.640] WbemLocator:IUnknown:AddRef (This=0x751fa8c) returned 0x4 [0117.640] WbemLocator:IUnknown:QueryInterface (in: This=0x751fa8c, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e01c | out: ppvObject=0x515e01c*=0x751fa74) returned 0x0 [0117.640] WbemLocator:IUnknown:Release (This=0x751fa8c) returned 0x4 [0117.640] WbemLocator:IRpcOptions:Query (in: This=0x751fa74, pPrx=0x751fa8c, dwProperty=2, pdwValue=0x515e040 | out: pdwValue=0x515e040) returned 0x80004002 [0117.641] WbemLocator:IUnknown:Release (This=0x751fa74) returned 0x3 [0117.641] WbemLocator:IUnknown:Release (This=0x751fa8c) returned 0x2 [0117.641] CoGetContextToken (in: pToken=0x515e41c | out: pToken=0x515e41c) returned 0x0 [0117.641] CoGetContextToken (in: pToken=0x515e3dc | out: pToken=0x515e3dc) returned 0x0 [0117.641] WbemLocator:IUnknown:AddRef (This=0x751fa8c) returned 0x3 [0117.641] WbemLocator:IUnknown:QueryInterface (in: This=0x751fa8c, riid=0x515e458*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x515e454 | out: ppvObject=0x515e454*=0x767cb2c) returned 0x0 [0117.641] WbemLocator:IUnknown:Release (This=0x751fa8c) returned 0x3 [0117.642] WbemLocator:IUnknown:Release (This=0x767cb2c) returned 0x2 [0117.642] WbemLocator:IUnknown:Release (This=0x767cb2c) returned 0x1 [0117.643] CoGetContextToken (in: pToken=0x515ed38 | out: pToken=0x515ed38) returned 0x0 [0117.643] WbemLocator:IUnknown:AddRef (This=0x751fa8c) returned 0x2 [0117.644] WbemLocator:IUnknown:QueryInterface (in: This=0x751fa8c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e95c | out: ppvObject=0x515e95c*=0x751fa8c) returned 0x0 [0117.644] WbemLocator:IUnknown:Release (This=0x751fa8c) returned 0x2 [0117.644] WbemLocator:IUnknown:Release (This=0x751fa8c) returned 0x1 [0117.645] CoGetContextToken (in: pToken=0x515e53c | out: pToken=0x515e53c) returned 0x0 [0117.645] CoGetContextToken (in: pToken=0x515e4fc | out: pToken=0x515e4fc) returned 0x0 [0117.645] WbemLocator:IUnknown:AddRef (This=0x751fa8c) returned 0x2 [0117.645] WbemLocator:IUnknown:QueryInterface (in: This=0x751fa8c, riid=0x515e578*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x515e574 | out: ppvObject=0x515e574*=0x767cb2c) returned 0x0 [0117.645] WbemLocator:IUnknown:Release (This=0x751fa8c) returned 0x2 [0117.645] WbemLocator:IUnknown:AddRef (This=0x767cb2c) returned 0x3 [0117.645] IWbemServices:ExecQuery (in: This=0x767cb2c, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x515eb80 | out: ppEnum=0x515eb80*=0x767cbcc) returned 0x0 [0117.672] IUnknown:QueryInterface (in: This=0x767cbcc, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e82c | out: ppvObject=0x515e82c*=0x767cbd0) returned 0x0 [0117.672] IClientSecurity:QueryBlanket (in: This=0x767cbd0, pProxy=0x767cbcc, pAuthnSvc=0x515e874, pAuthzSvc=0x515e870, pServerPrincName=0x515e880, pAuthnLevel=0x515e878, pImpLevel=0x515e864, pAuthInfo=0x515e868, pCapabilites=0x515e86c | out: pAuthnSvc=0x515e874*=0xa, pAuthzSvc=0x515e870*=0x0, pServerPrincName=0x515e880, pAuthnLevel=0x515e878*=0x6, pImpLevel=0x515e864*=0x2, pAuthInfo=0x515e868, pCapabilites=0x515e86c*=0x1) returned 0x0 [0117.672] IUnknown:Release (This=0x767cbd0) returned 0x1 [0117.672] IUnknown:QueryInterface (in: This=0x767cbcc, riid=0x3d91250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e820 | out: ppvObject=0x515e820*=0x75180ec) returned 0x0 [0117.672] IUnknown:QueryInterface (in: This=0x767cbcc, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e81c | out: ppvObject=0x515e81c*=0x767cbd0) returned 0x0 [0117.673] IClientSecurity:SetBlanket (This=0x767cbd0, pProxy=0x767cbcc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0117.675] IUnknown:Release (This=0x767cbd0) returned 0x2 [0117.675] WbemLocator:IUnknown:Release (This=0x75180ec) returned 0x1 [0117.675] CoTaskMemFree (pv=0x2e5168) [0117.675] WbemLocator:IUnknown:Release (This=0x767cb2c) returned 0x2 [0117.675] IUnknown:QueryInterface (in: This=0x767cbcc, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1d8 | out: ppvObject=0x515e1d8*=0x75180ec) returned 0x0 [0117.676] WbemLocator:IUnknown:QueryInterface (in: This=0x75180ec, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e194 | out: ppvObject=0x515e194*=0x0) returned 0x80004002 [0117.676] WbemLocator:IUnknown:QueryInterface (in: This=0x75180ec, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e088 | out: ppvObject=0x515e088*=0x0) returned 0x80004002 [0117.677] WbemLocator:IUnknown:AddRef (This=0x75180ec) returned 0x3 [0117.677] CoGetContextToken (in: pToken=0x515e020 | out: pToken=0x515e020) returned 0x0 [0117.677] WbemLocator:IUnknown:QueryInterface (in: This=0x75180ec, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e008 | out: ppvObject=0x515e008*=0x751804c) returned 0x0 [0117.677] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x751804c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e010 | out: pCid=0x515e010*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0117.677] WbemLocator:IUnknown:Release (This=0x751804c) returned 0x3 [0117.677] CoGetContextToken (in: pToken=0x515e018 | out: pToken=0x515e018) returned 0x0 [0117.677] WbemLocator:IUnknown:AddRef (This=0x75180ec) returned 0x4 [0117.677] WbemLocator:IUnknown:QueryInterface (in: This=0x75180ec, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e08c | out: ppvObject=0x515e08c*=0x75180d4) returned 0x0 [0117.677] WbemLocator:IUnknown:Release (This=0x75180ec) returned 0x4 [0117.678] WbemLocator:IRpcOptions:Query (in: This=0x75180d4, pPrx=0x75180ec, dwProperty=2, pdwValue=0x515e0b0 | out: pdwValue=0x515e0b0) returned 0x80004002 [0117.678] WbemLocator:IUnknown:Release (This=0x75180d4) returned 0x3 [0117.678] WbemLocator:IUnknown:Release (This=0x75180ec) returned 0x2 [0117.678] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0117.678] CoGetContextToken (in: pToken=0x515e44c | out: pToken=0x515e44c) returned 0x0 [0117.678] WbemLocator:IUnknown:AddRef (This=0x75180ec) returned 0x3 [0117.678] WbemLocator:IUnknown:QueryInterface (in: This=0x75180ec, riid=0x515e4c8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e4c4 | out: ppvObject=0x515e4c4*=0x767cbcc) returned 0x0 [0117.678] WbemLocator:IUnknown:Release (This=0x75180ec) returned 0x3 [0117.678] IUnknown:Release (This=0x767cbcc) returned 0x2 [0117.678] IUnknown:Release (This=0x767cbcc) returned 0x1 [0117.679] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ee18 | out: puCount=0x515ee18*=0x2) returned 0x0 [0117.679] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ee14*=0x0, pszText=0x0 | out: puBuffLength=0x515ee14*=0x17, pszText=0x0) returned 0x0 [0117.679] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ee14*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ee14*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.679] CoGetContextToken (in: pToken=0x515e7b4 | out: pToken=0x515e7b4) returned 0x0 [0117.679] CoGetContextToken (in: pToken=0x515e774 | out: pToken=0x515e774) returned 0x0 [0117.679] WbemLocator:IUnknown:AddRef (This=0x75180ec) returned 0x2 [0117.680] WbemLocator:IUnknown:QueryInterface (in: This=0x75180ec, riid=0x515e7f0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e7ec | out: ppvObject=0x515e7ec*=0x767cbcc) returned 0x0 [0117.680] WbemLocator:IUnknown:Release (This=0x75180ec) returned 0x2 [0117.680] IUnknown:AddRef (This=0x767cbcc) returned 0x3 [0117.680] IEnumWbemClassObject:Clone (in: This=0x767cbcc, ppEnum=0x515ede8 | out: ppEnum=0x515ede8*=0x767dc9c) returned 0x0 [0117.681] IUnknown:QueryInterface (in: This=0x767dc9c, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515eaa4 | out: ppvObject=0x515eaa4*=0x767dca0) returned 0x0 [0117.681] IClientSecurity:QueryBlanket (in: This=0x767dca0, pProxy=0x767dc9c, pAuthnSvc=0x515eaec, pAuthzSvc=0x515eae8, pServerPrincName=0x515eaf8, pAuthnLevel=0x515eaf0, pImpLevel=0x515eadc, pAuthInfo=0x515eae0, pCapabilites=0x515eae4 | out: pAuthnSvc=0x515eaec*=0xa, pAuthzSvc=0x515eae8*=0x0, pServerPrincName=0x515eaf8, pAuthnLevel=0x515eaf0*=0x6, pImpLevel=0x515eadc*=0x2, pAuthInfo=0x515eae0, pCapabilites=0x515eae4*=0x1) returned 0x0 [0117.681] IUnknown:Release (This=0x767dca0) returned 0x1 [0117.681] IUnknown:QueryInterface (in: This=0x767dc9c, riid=0x3d91250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ea98 | out: ppvObject=0x515ea98*=0x751a264) returned 0x0 [0117.681] IUnknown:QueryInterface (in: This=0x767dc9c, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ea94 | out: ppvObject=0x515ea94*=0x767dca0) returned 0x0 [0117.681] IClientSecurity:SetBlanket (This=0x767dca0, pProxy=0x767dc9c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0117.683] IUnknown:Release (This=0x767dca0) returned 0x2 [0117.683] WbemLocator:IUnknown:Release (This=0x751a264) returned 0x1 [0117.683] CoTaskMemFree (pv=0x2e5108) [0117.683] IUnknown:Release (This=0x767cbcc) returned 0x2 [0117.683] IUnknown:QueryInterface (in: This=0x767dc9c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e440 | out: ppvObject=0x515e440*=0x751a264) returned 0x0 [0117.683] WbemLocator:IUnknown:QueryInterface (in: This=0x751a264, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e3fc | out: ppvObject=0x515e3fc*=0x0) returned 0x80004002 [0117.684] WbemLocator:IUnknown:QueryInterface (in: This=0x751a264, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e2f0 | out: ppvObject=0x515e2f0*=0x0) returned 0x80004002 [0117.684] WbemLocator:IUnknown:AddRef (This=0x751a264) returned 0x3 [0117.684] CoGetContextToken (in: pToken=0x515e288 | out: pToken=0x515e288) returned 0x0 [0117.684] WbemLocator:IUnknown:QueryInterface (in: This=0x751a264, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e270 | out: ppvObject=0x515e270*=0x751a1c4) returned 0x0 [0117.685] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x751a1c4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e278 | out: pCid=0x515e278*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0117.685] WbemLocator:IUnknown:Release (This=0x751a1c4) returned 0x3 [0117.685] CoGetContextToken (in: pToken=0x515e280 | out: pToken=0x515e280) returned 0x0 [0117.685] WbemLocator:IUnknown:AddRef (This=0x751a264) returned 0x4 [0117.685] WbemLocator:IUnknown:QueryInterface (in: This=0x751a264, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2f4 | out: ppvObject=0x515e2f4*=0x751a24c) returned 0x0 [0117.685] WbemLocator:IUnknown:Release (This=0x751a264) returned 0x4 [0117.685] WbemLocator:IRpcOptions:Query (in: This=0x751a24c, pPrx=0x751a264, dwProperty=2, pdwValue=0x515e318 | out: pdwValue=0x515e318) returned 0x80004002 [0117.685] WbemLocator:IUnknown:Release (This=0x751a24c) returned 0x3 [0117.685] WbemLocator:IUnknown:Release (This=0x751a264) returned 0x2 [0117.685] CoGetContextToken (in: pToken=0x515e6f4 | out: pToken=0x515e6f4) returned 0x0 [0117.685] CoGetContextToken (in: pToken=0x515e6b4 | out: pToken=0x515e6b4) returned 0x0 [0117.685] WbemLocator:IUnknown:AddRef (This=0x751a264) returned 0x3 [0117.686] WbemLocator:IUnknown:QueryInterface (in: This=0x751a264, riid=0x515e730*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e72c | out: ppvObject=0x515e72c*=0x767dc9c) returned 0x0 [0117.686] WbemLocator:IUnknown:Release (This=0x751a264) returned 0x3 [0117.686] IUnknown:Release (This=0x767dc9c) returned 0x2 [0117.686] IUnknown:Release (This=0x767dc9c) returned 0x1 [0117.693] CoGetContextToken (in: pToken=0x515ece8 | out: pToken=0x515ece8) returned 0x0 [0117.693] CoGetContextToken (in: pToken=0x515eca8 | out: pToken=0x515eca8) returned 0x0 [0117.693] WbemLocator:IUnknown:AddRef (This=0x751a264) returned 0x2 [0117.693] WbemLocator:IUnknown:QueryInterface (in: This=0x751a264, riid=0x515ed24*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515ed20 | out: ppvObject=0x515ed20*=0x767dc9c) returned 0x0 [0117.693] WbemLocator:IUnknown:Release (This=0x751a264) returned 0x2 [0117.693] IUnknown:AddRef (This=0x767dc9c) returned 0x3 [0117.694] IEnumWbemClassObject:Reset (This=0x767dc9c) returned 0x0 [0117.694] IUnknown:Release (This=0x767dc9c) returned 0x2 [0117.704] CoGetContextToken (in: pToken=0x515ebdc | out: pToken=0x515ebdc) returned 0x0 [0117.704] IUnknown:AddRef (This=0x767dc9c) returned 0x3 [0117.704] IEnumWbemClassObject:Next (in: This=0x767dc9c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x636b410 | out: apObjects=0x2d37c8*=0x767dcd8, puReturned=0x636b410*=0x1) returned 0x0 [0117.708] IUnknown:QueryInterface (in: This=0x767dcd8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1e8 | out: ppvObject=0x515e1e8*=0x767dcd8) returned 0x0 [0117.708] IUnknown:QueryInterface (in: This=0x767dcd8, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e1a4 | out: ppvObject=0x515e1a4*=0x0) returned 0x80004002 [0117.708] IUnknown:QueryInterface (in: This=0x767dcd8, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e098 | out: ppvObject=0x515e098*=0x0) returned 0x80004002 [0117.709] IUnknown:AddRef (This=0x767dcd8) returned 0x3 [0117.709] CoGetContextToken (in: pToken=0x515e030 | out: pToken=0x515e030) returned 0x0 [0117.709] IUnknown:QueryInterface (in: This=0x767dcd8, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e018 | out: ppvObject=0x515e018*=0x767dcdc) returned 0x0 [0117.709] IMarshal:GetUnmarshalClass (in: This=0x767dcdc, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e020 | out: pCid=0x515e020*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0117.709] IUnknown:Release (This=0x767dcdc) returned 0x3 [0117.709] CoGetContextToken (in: pToken=0x515e028 | out: pToken=0x515e028) returned 0x0 [0117.709] IUnknown:AddRef (This=0x767dcd8) returned 0x4 [0117.710] IUnknown:QueryInterface (in: This=0x767dcd8, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e09c | out: ppvObject=0x515e09c*=0x0) returned 0x80004002 [0117.710] IUnknown:Release (This=0x767dcd8) returned 0x3 [0117.710] IUnknown:Release (This=0x767dcd8) returned 0x2 [0117.710] CoGetContextToken (in: pToken=0x515e488 | out: pToken=0x515e488) returned 0x0 [0117.710] CoGetContextToken (in: pToken=0x515e448 | out: pToken=0x515e448) returned 0x0 [0117.710] IUnknown:AddRef (This=0x767dcd8) returned 0x3 [0117.710] IUnknown:QueryInterface (in: This=0x767dcd8, riid=0x515e4c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e4c0 | out: ppvObject=0x515e4c0*=0x767dcd8) returned 0x0 [0117.710] IUnknown:Release (This=0x767dcd8) returned 0x3 [0117.710] IUnknown:Release (This=0x767dcd8) returned 0x2 [0117.711] IUnknown:Release (This=0x767dcd8) returned 0x1 [0117.711] IUnknown:Release (This=0x767dc9c) returned 0x2 [0117.711] CoGetContextToken (in: pToken=0x515ed6c | out: pToken=0x515ed6c) returned 0x0 [0117.711] IUnknown:AddRef (This=0x767dcd8) returned 0x2 [0117.739] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__GENUS", lFlags=0, pVal=0x515ede8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ee9c*=0, plFlavor=0x515ee98*=0 | out: pVal=0x515ede8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ee9c*=3, plFlavor=0x515ee98*=64) returned 0x0 [0117.739] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__PATH", lFlags=0, pVal=0x515edc8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ee80*=0, plFlavor=0x515ee7c*=0 | out: pVal=0x515edc8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x515ee80*=8, plFlavor=0x515ee7c*=64) returned 0x0 [0117.740] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x3d [0117.740] CoGetObjectContext (in: riid=0x6366648*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ee20 | out: ppv=0x515ee20*=0x205794) returned 0x0 [0117.740] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ee18 | out: pAptType=0x515ee18*=1) returned 0x0 [0117.740] IUnknown:QueryInterface (in: This=0x205794, riid=0x6366630*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ee1c | out: ppvObject=0x515ee1c*=0x0) returned 0x80004002 [0117.740] IUnknown:Release (This=0x205794) returned 0x1 [0117.741] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e938 | out: ppv=0x515e938*=0x7670ad0) returned 0x0 [0117.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670ad0, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e768 | out: ppvObject=0x515e768*=0x0) returned 0x80004002 [0117.742] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7670ad0, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e7a0 | out: ppvObject=0x515e7a0*=0x7670c00) returned 0x0 [0117.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670c00, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e544 | out: ppvObject=0x515e544*=0x7670c00) returned 0x0 [0117.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670c00, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0117.743] WbemDefPath:IUnknown:AddRef (This=0x7670c00) returned 0x3 [0117.743] CoGetContextToken (in: pToken=0x515e38c | out: pToken=0x515e38c) returned 0x0 [0117.743] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670c00, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e374 | out: ppvObject=0x515e374*=0x2db0a0) returned 0x0 [0117.743] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x2db0a0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e37c | out: pCid=0x515e37c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0117.743] WbemDefPath:IUnknown:Release (This=0x2db0a0) returned 0x3 [0117.743] CoGetContextToken (in: pToken=0x515e384 | out: pToken=0x515e384) returned 0x0 [0117.743] WbemDefPath:IUnknown:AddRef (This=0x7670c00) returned 0x4 [0117.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670c00, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3f8 | out: ppvObject=0x515e3f8*=0x0) returned 0x80004002 [0117.744] WbemDefPath:IUnknown:Release (This=0x7670c00) returned 0x3 [0117.744] WbemDefPath:IUnknown:Release (This=0x7670c00) returned 0x2 [0117.744] WbemDefPath:IUnknown:Release (This=0x7670ad0) returned 0x0 [0117.744] WbemDefPath:IUnknown:Release (This=0x7670c00) returned 0x1 [0117.744] CoGetContextToken (in: pToken=0x515ec34 | out: pToken=0x515ec34) returned 0x0 [0117.744] CoGetContextToken (in: pToken=0x515ebf4 | out: pToken=0x515ebf4) returned 0x0 [0117.744] WbemDefPath:IUnknown:AddRef (This=0x7670c00) returned 0x2 [0117.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670c00, riid=0x515ec70*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ec6c | out: ppvObject=0x515ec6c*=0x7670c00) returned 0x0 [0117.745] WbemDefPath:IUnknown:Release (This=0x7670c00) returned 0x2 [0117.745] WbemDefPath:IUnknown:Release (This=0x7670c00) returned 0x1 [0117.745] CoGetContextToken (in: pToken=0x515ecb4 | out: pToken=0x515ecb4) returned 0x0 [0117.745] CoGetContextToken (in: pToken=0x515ec74 | out: pToken=0x515ec74) returned 0x0 [0117.745] WbemDefPath:IUnknown:AddRef (This=0x7670c00) returned 0x2 [0117.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670c00, riid=0x515ecf0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ecec | out: ppvObject=0x515ecec*=0x7670c00) returned 0x0 [0117.745] WbemDefPath:IUnknown:Release (This=0x7670c00) returned 0x2 [0117.745] WbemDefPath:IUnknown:AddRef (This=0x7670c00) returned 0x3 [0117.745] WbemDefPath:IWbemPath:SetText (This=0x7670c00, uMode=0x4, pszPath="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x0 [0117.745] WbemDefPath:IUnknown:Release (This=0x7670c00) returned 0x2 [0117.746] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ee54 | out: puCount=0x515ee54*=0x2) returned 0x0 [0117.746] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ee50*=0x0, pszText=0x0 | out: puBuffLength=0x515ee50*=0x17, pszText=0x0) returned 0x0 [0117.746] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ee50*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ee50*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.760] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0117.760] GetLastError () returned 0xcb [0117.785] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ebb4 | out: puCount=0x515ebb4*=0x2) returned 0x0 [0117.786] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ebb0*=0x0, pszText=0x0 | out: puBuffLength=0x515ebb0*=0x17, pszText=0x0) returned 0x0 [0117.786] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ebb0*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ebb0*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.786] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x515eb70*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x636cb98*=0, plFlavor=0x636cb9c*=0 | out: pVal=0x515eb70*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x636cb98*=8, plFlavor=0x636cb9c*=64) returned 0x0 [0117.786] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0117.786] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x515eb74*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x636cb98*=8, plFlavor=0x636cb9c*=64 | out: pVal=0x515eb74*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x636cb98*=8, plFlavor=0x636cb9c*=64) returned 0x0 [0117.786] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0117.787] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ebb4 | out: puCount=0x515ebb4*=0x2) returned 0x0 [0117.787] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ebb0*=0x0, pszText=0x0 | out: puBuffLength=0x515ebb0*=0x17, pszText=0x0) returned 0x0 [0117.787] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ebb0*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ebb0*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.787] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__CLASS", lFlags=0, pVal=0x515eb70*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x636cc50*=0, plFlavor=0x636cc54*=0 | out: pVal=0x515eb70*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x636cc50*=8, plFlavor=0x636cc54*=64) returned 0x0 [0117.787] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0117.787] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__CLASS", lFlags=0, pVal=0x515eb74*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x636cc50*=8, plFlavor=0x636cc54*=64 | out: pVal=0x515eb74*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x636cc50*=8, plFlavor=0x636cc54*=64) returned 0x0 [0117.787] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0117.838] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ea30 | out: puCount=0x515ea30*=0x2) returned 0x0 [0117.838] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea2c*=0x0, pszText=0x0 | out: puBuffLength=0x515ea2c*=0x17, pszText=0x0) returned 0x0 [0117.838] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea2c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ea2c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.838] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ea30 | out: puCount=0x515ea30*=0x2) returned 0x0 [0117.838] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea2c*=0x0, pszText=0x0 | out: puBuffLength=0x515ea2c*=0x17, pszText=0x0) returned 0x0 [0117.838] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea2c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ea2c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.838] IWbemClassObject:GetNames (in: This=0x767dcd8, wszQualifierName=0x0, lFlags=48, pQualifierVal=0x515e9f4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515e9c0 | out: pNames=0x515e9c0*="\x01ƀ\x04") returned 0x0 [0117.839] SafeArrayGetDim (psa=0x2e51a8) returned 0x1 [0117.839] SafeArrayGetDim (psa=0x2e51a8) returned 0x1 [0117.839] SafeArrayGetLBound (in: psa=0x2e51a8, nDim=0x1, plLbound=0x515e5bc | out: plLbound=0x515e5bc) returned 0x0 [0117.839] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__GENUS", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6370728*=0, plFlavor=0x637072c*=0 | out: pVal=0x515e9ec*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x6370728*=3, plFlavor=0x637072c*=64) returned 0x0 [0117.840] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__CLASS", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x637075c*=0, plFlavor=0x6370760*=0 | out: pVal=0x515e9ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x637075c*=8, plFlavor=0x6370760*=64) returned 0x0 [0117.840] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0117.840] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__SUPERCLASS", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63707c0*=0, plFlavor=0x63707c4*=0 | out: pVal=0x515e9ec*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63707c0*=8, plFlavor=0x63707c4*=64) returned 0x0 [0117.840] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__DYNASTY", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63707e8*=0, plFlavor=0x63707ec*=0 | out: pVal=0x515e9ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x63707e8*=8, plFlavor=0x63707ec*=64) returned 0x0 [0117.841] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0117.841] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__RELPATH", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x637084c*=0, plFlavor=0x6370850*=0 | out: pVal=0x515e9ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x637084c*=8, plFlavor=0x6370850*=64) returned 0x0 [0117.841] SysStringLen (param_1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x27 [0117.841] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__PROPERTY_COUNT", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63708d4*=0, plFlavor=0x63708d8*=0 | out: pVal=0x515e9ec*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3f, varVal2=0x0), pType=0x63708d4*=3, plFlavor=0x63708d8*=64) returned 0x0 [0117.841] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__DERIVATION", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6370908*=0, plFlavor=0x637090c*=0 | out: pVal=0x515e9ec*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2e51a8*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x2db130, rgsabound=((cElements=0x0, lLbound=0))), varVal2=0x0), pType=0x6370908*=8200, plFlavor=0x637090c*=64) returned 0x0 [0117.842] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__SERVER", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6370940*=0, plFlavor=0x6370944*=0 | out: pVal=0x515e9ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x6370940*=8, plFlavor=0x6370944*=64) returned 0x0 [0117.842] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0117.842] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x637098c*=0, plFlavor=0x6370990*=0 | out: pVal=0x515e9ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x637098c*=8, plFlavor=0x6370990*=64) returned 0x0 [0117.842] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0117.842] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__PATH", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63709dc*=0, plFlavor=0x63709e0*=0 | out: pVal=0x515e9ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x63709dc*=8, plFlavor=0x63709e0*=64) returned 0x0 [0117.842] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x3d [0117.842] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ea6c | out: puCount=0x515ea6c*=0x2) returned 0x0 [0117.842] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea68*=0x0, pszText=0x0 | out: puBuffLength=0x515ea68*=0x17, pszText=0x0) returned 0x0 [0117.842] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea68*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ea68*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.843] IWbemClassObject:Get (in: This=0x767dcd8, wszName="OSArchitecture", lFlags=0, pVal=0x515ea28*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6370ae0*=0, plFlavor=0x6370ae4*=0 | out: pVal=0x515ea28*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="32-bit", varVal2=0x0), pType=0x6370ae0*=8, plFlavor=0x6370ae4*=32) returned 0x0 [0117.843] SysStringLen (param_1="32-bit") returned 0x6 [0117.846] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ea18 | out: puCount=0x515ea18*=0x2) returned 0x0 [0117.846] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea14*=0x0, pszText=0x0 | out: puBuffLength=0x515ea14*=0x17, pszText=0x0) returned 0x0 [0117.846] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea14*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ea14*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.846] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ea18 | out: puCount=0x515ea18*=0x2) returned 0x0 [0117.846] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea14*=0x0, pszText=0x0 | out: puBuffLength=0x515ea14*=0x17, pszText=0x0) returned 0x0 [0117.846] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea14*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ea14*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.846] IWbemClassObject:GetNames (in: This=0x767dcd8, wszQualifierName=0x0, lFlags=48, pQualifierVal=0x515e9dc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515e9a8 | out: pNames=0x515e9a8*="\x01ƀ\x04") returned 0x0 [0117.846] SafeArrayGetDim (psa=0x2e5118) returned 0x1 [0117.846] SafeArrayGetDim (psa=0x2e5118) returned 0x1 [0117.846] SafeArrayGetLBound (in: psa=0x2e5118, nDim=0x1, plLbound=0x515e5a4 | out: plLbound=0x515e5a4) returned 0x0 [0117.847] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__GENUS", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6371100*=0, plFlavor=0x6371104*=0 | out: pVal=0x515e9d4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x6371100*=3, plFlavor=0x6371104*=64) returned 0x0 [0117.847] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__CLASS", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6371134*=0, plFlavor=0x6371138*=0 | out: pVal=0x515e9d4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6371134*=8, plFlavor=0x6371138*=64) returned 0x0 [0117.847] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0117.847] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__SUPERCLASS", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6371198*=0, plFlavor=0x637119c*=0 | out: pVal=0x515e9d4*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6371198*=8, plFlavor=0x637119c*=64) returned 0x0 [0117.848] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__DYNASTY", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63711c0*=0, plFlavor=0x63711c4*=0 | out: pVal=0x515e9d4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x63711c0*=8, plFlavor=0x63711c4*=64) returned 0x0 [0117.848] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0117.848] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__RELPATH", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6371224*=0, plFlavor=0x6371228*=0 | out: pVal=0x515e9d4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x6371224*=8, plFlavor=0x6371228*=64) returned 0x0 [0117.848] SysStringLen (param_1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x27 [0117.848] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__PROPERTY_COUNT", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63712ac*=0, plFlavor=0x63712b0*=0 | out: pVal=0x515e9d4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3f, varVal2=0x0), pType=0x63712ac*=3, plFlavor=0x63712b0*=64) returned 0x0 [0117.848] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__DERIVATION", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63712e0*=0, plFlavor=0x63712e4*=0 | out: pVal=0x515e9d4*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2e5118*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x2db130, rgsabound=((cElements=0x0, lLbound=0))), varVal2=0x0), pType=0x63712e0*=8200, plFlavor=0x63712e4*=64) returned 0x0 [0117.849] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__SERVER", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6371318*=0, plFlavor=0x637131c*=0 | out: pVal=0x515e9d4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x6371318*=8, plFlavor=0x637131c*=64) returned 0x0 [0117.849] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0117.849] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6371364*=0, plFlavor=0x6371368*=0 | out: pVal=0x515e9d4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x6371364*=8, plFlavor=0x6371368*=64) returned 0x0 [0117.849] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0117.849] IWbemClassObject:Get (in: This=0x767dcd8, wszName="__PATH", lFlags=0, pVal=0x515e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63713b4*=0, plFlavor=0x63713b8*=0 | out: pVal=0x515e9d4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x63713b4*=8, plFlavor=0x63713b8*=64) returned 0x0 [0117.849] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x3d [0117.849] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7670820, puCount=0x515ea54 | out: puCount=0x515ea54*=0x2) returned 0x0 [0117.849] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea50*=0x0, pszText=0x0 | out: puBuffLength=0x515ea50*=0x17, pszText=0x0) returned 0x0 [0117.850] WbemDefPath:IWbemPath:GetText (in: This=0x7670820, lFlags=4, puBuffLength=0x515ea50*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ea50*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0117.850] IWbemClassObject:Get (in: This=0x767dcd8, wszName="OSArchitecture", lFlags=0, pVal=0x515ea10*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63714a8*=0, plFlavor=0x63714ac*=0 | out: pVal=0x515ea10*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="32-bit", varVal2=0x0), pType=0x63714a8*=8, plFlavor=0x63714ac*=32) returned 0x0 [0117.850] SysStringLen (param_1="32-bit") returned 0x6 [0117.850] IWbemClassObject:Get (in: This=0x767dcd8, wszName="OSArchitecture", lFlags=0, pVal=0x515eaac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63714a8*=8, plFlavor=0x63714ac*=32 | out: pVal=0x515eaac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="32-bit", varVal2=0x0), pType=0x63714a8*=8, plFlavor=0x63714ac*=32) returned 0x0 [0117.850] SysStringLen (param_1="32-bit") returned 0x6 [0117.857] CoGetContextToken (in: pToken=0x515ebdc | out: pToken=0x515ebdc) returned 0x0 [0117.857] IUnknown:AddRef (This=0x767dc9c) returned 0x3 [0117.857] IEnumWbemClassObject:Next (in: This=0x767dc9c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x636b410 | out: apObjects=0x2d37c8*=0x0, puReturned=0x636b410*=0x0) returned 0x1 [0117.858] IUnknown:Release (This=0x767dc9c) returned 0x2 [0117.859] CoGetContextToken (in: pToken=0x515ed24 | out: pToken=0x515ed24) returned 0x0 [0117.859] WbemLocator:IUnknown:Release (This=0x751a264) returned 0x1 [0117.859] IUnknown:Release (This=0x767dc9c) returned 0x0 [0118.799] GetCurrentProcess () returned 0xffffffff [0118.799] GetLastError () returned 0x0 [0119.265] LocalAlloc (uFlags=0x0, uBytes=0xee00) returned 0x7521f88 [0119.587] VirtualAlloc (lpAddress=0x0, dwSize=0x13000, flAllocationType=0x3000, flProtect=0x4) returned 0x3dd0000 [0119.588] GetLastError () returned 0x0 [0119.663] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x3dd0000, lpBuffer=0x7521f88*, nSize=0x400, lpNumberOfBytesWritten=0x515f258 | out: lpBuffer=0x7521f88*, lpNumberOfBytesWritten=0x515f258*=0x400) returned 1 [0119.664] GetLastError () returned 0x0 [0119.736] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x3dd1000, lpBuffer=0x7522388*, nSize=0xc600, lpNumberOfBytesWritten=0x515f184 | out: lpBuffer=0x7522388*, lpNumberOfBytesWritten=0x515f184*=0xc600) returned 1 [0119.740] GetLastError () returned 0x0 [0119.759] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x3dde000, lpBuffer=0x752e988*, nSize=0x600, lpNumberOfBytesWritten=0x515f230 | out: lpBuffer=0x752e988*, lpNumberOfBytesWritten=0x515f230*=0x600) returned 1 [0119.760] GetLastError () returned 0x0 [0119.779] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x3ddf000, lpBuffer=0x752ef88*, nSize=0x200, lpNumberOfBytesWritten=0x515f230 | out: lpBuffer=0x752ef88*, lpNumberOfBytesWritten=0x515f230*=0x200) returned 1 [0119.781] GetLastError () returned 0x0 [0119.803] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x3de0000, lpBuffer=0x752f188*, nSize=0x1600, lpNumberOfBytesWritten=0x515f230 | out: lpBuffer=0x752f188*, lpNumberOfBytesWritten=0x515f230*=0x1600) returned 1 [0119.804] GetLastError () returned 0x0 [0119.828] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x3de2000, lpBuffer=0x7530788*, nSize=0x600, lpNumberOfBytesWritten=0x515f230 | out: lpBuffer=0x7530788*, lpNumberOfBytesWritten=0x515f230*=0x600) returned 1 [0119.830] GetLastError () returned 0x0 [0119.943] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0119.943] GetLastError () returned 0xcb [0120.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2e8cf90, Length=0x20000, ResultLength=0x515ef6c | out: SystemInformation=0x2e8cf90, ResultLength=0x515ef6c*=0xde68) returned 0x0 [0120.198] EnumWindows (lpEnumFunc=0x1cbf68a, lParam=0x0) returned 0 [0120.198] GetWindowThreadProcessId (in: hWnd=0x30120, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x270 [0120.198] GetLastError () returned 0x0 [0120.198] GetWindow (hWnd=0x30120, uCmd=0x4) returned 0x3011e [0120.198] GetWindowThreadProcessId (in: hWnd=0x30092, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.198] GetLastError () returned 0x0 [0120.199] GetWindow (hWnd=0x30092, uCmd=0x4) returned 0x0 [0120.199] IsWindowVisible (hWnd=0x30092) returned 0 [0120.199] GetWindowThreadProcessId (in: hWnd=0x300ce, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.199] GetLastError () returned 0x0 [0120.199] GetWindow (hWnd=0x300ce, uCmd=0x4) returned 0x0 [0120.199] IsWindowVisible (hWnd=0x300ce) returned 0 [0120.199] GetWindowThreadProcessId (in: hWnd=0x400a0, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.199] GetLastError () returned 0x0 [0120.199] GetWindow (hWnd=0x400a0, uCmd=0x4) returned 0x0 [0120.199] IsWindowVisible (hWnd=0x400a0) returned 0 [0120.199] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x724 [0120.199] GetLastError () returned 0x0 [0120.199] GetWindow (hWnd=0x10128, uCmd=0x4) returned 0x20126 [0120.199] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.200] GetLastError () returned 0x0 [0120.200] GetWindow (hWnd=0x10106, uCmd=0x4) returned 0x10044 [0120.200] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x3fc [0120.200] GetLastError () returned 0x0 [0120.200] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x3fc [0120.200] GetLastError () returned 0x0 [0120.200] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.200] GetLastError () returned 0x0 [0120.200] GetWindow (hWnd=0x10066, uCmd=0x4) returned 0x10044 [0120.200] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.200] GetLastError () returned 0x0 [0120.200] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x10044 [0120.200] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.200] GetLastError () returned 0x0 [0120.200] GetWindow (hWnd=0x10050, uCmd=0x4) returned 0x10044 [0120.201] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.201] GetLastError () returned 0x0 [0120.201] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10044 [0120.201] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.201] GetLastError () returned 0x0 [0120.201] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x10044 [0120.201] GetWindowThreadProcessId (in: hWnd=0x1006c, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.201] GetLastError () returned 0x0 [0120.201] GetWindow (hWnd=0x1006c, uCmd=0x4) returned 0x10044 [0120.201] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.201] GetLastError () returned 0x0 [0120.201] GetWindow (hWnd=0x10068, uCmd=0x4) returned 0x10044 [0120.201] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.201] GetLastError () returned 0x0 [0120.201] GetWindow (hWnd=0x10048, uCmd=0x4) returned 0x10044 [0120.201] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x515eb00 | out: lpdwProcessId=0x515eb00) returned 0x60c [0120.201] GetLastError () returned 0x0 [0120.201] GetWindow (hWnd=0x10044, uCmd=0x4) returned 0x0 [0120.202] IsWindowVisible (hWnd=0x10044) returned 1 [0120.202] GetLastError () returned 0x0 [0120.212] OpenProcess (dwDesiredAccess=0x43a, bInheritHandle=0, dwProcessId=0x5bc) returned 0x404 [0120.212] GetLastError () returned 0x0 [0120.212] VirtualAlloc (lpAddress=0x0, dwSize=0x13000, flAllocationType=0x3000, flProtect=0x4) returned 0x4710000 [0120.213] GetLastError () returned 0x0 [0120.213] GetCurrentProcess () returned 0xffffffff [0120.213] GetLastError () returned 0x0 [0120.213] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x4710000, lpBuffer=0x3dd0000*, nSize=0x13000, lpNumberOfBytesWritten=0x515ea4c | out: lpBuffer=0x3dd0000*, lpNumberOfBytesWritten=0x515ea4c*=0x13000) returned 1 [0120.217] GetLastError () returned 0x0 [0120.229] VirtualAllocEx (hProcess=0x404, lpAddress=0x0, dwSize=0x13000, flAllocationType=0x3000, flProtect=0x40) returned 0x21c0000 [0123.339] GetLastError () returned 0x0 [0128.294] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0128.294] GetLastError () returned 0xcb [0128.302] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0128.302] GetLastError () returned 0xcb [0128.357] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0128.357] GetLastError () returned 0xcb [0128.369] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0128.369] GetLastError () returned 0xcb [0128.372] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0128.372] GetLastError () returned 0xcb [0128.404] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0128.404] GetLastError () returned 0xcb [0128.480] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2d37b0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0128.480] GetLastError () returned 0xcb [0128.506] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0128.508] GetLastError () returned 0xcb [0128.508] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x515e428 | out: lpConsoleScreenBufferInfo=0x515e428) returned 1 [0128.508] GetLastError () returned 0xcb [0128.510] GetConsoleOutputCP () returned 0x1b5 [0128.516] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x515e430, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x515e430) returned 0 [0128.516] GetLastError () returned 0xcb [0128.518] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0128.518] GetLastError () returned 0xcb [0128.518] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x515e478 | out: lpMode=0x515e478) returned 1 [0128.518] GetLastError () returned 0xcb [0128.523] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0128.524] GetLastError () returned 0xcb [0128.524] GetConsoleMode (in: hConsoleHandle=0x13, lpMode=0x515e45c | out: lpMode=0x515e45c) returned 1 [0128.524] GetLastError () returned 0xcb [0128.532] WriteConsoleW (in: hConsoleOutput=0x13, lpBuffer=0x6474524*, nNumberOfCharsToWrite=0x4, lpNumberOfCharsWritten=0x515e45c, lpReserved=0x0 | out: lpBuffer=0x6474524*, lpNumberOfCharsWritten=0x515e45c*=0x4) returned 1 [0128.533] GetLastError () returned 0xcb [0128.537] CloseHandle (hObject=0x13) returned 1 [0128.537] GetLastError () returned 0xcb [0128.542] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0128.542] GetLastError () returned 0xcb [0128.542] GetConsoleMode (in: hConsoleHandle=0x13, lpMode=0x515e45c | out: lpMode=0x515e45c) returned 1 [0128.543] GetLastError () returned 0xcb [0128.543] WriteConsoleW (in: hConsoleOutput=0x13, lpBuffer=0x6474688*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x515e45c, lpReserved=0x0 | out: lpBuffer=0x6474688*, lpNumberOfCharsWritten=0x515e45c*=0x2) returned 1 [0128.543] GetLastError () returned 0xcb [0128.543] CloseHandle (hObject=0x13) returned 1 [0128.544] GetLastError () returned 0xcb [0128.545] WriteProcessMemory (in: hProcess=0x404, lpBaseAddress=0x21c0000, lpBuffer=0x4710000*, nSize=0x13000, lpNumberOfBytesWritten=0x515e8a4 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0x515e8a4*=0x13000) returned 1 [0128.574] GetLastError () returned 0xcb [0128.950] CreateRemoteThread (in: hProcess=0x404, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabc0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8 [0128.967] VirtualFree (lpAddress=0x4710000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.968] GetLastError () returned 0xcb [0129.000] CloseHandle (hObject=0x404) returned 1 [0129.000] GetLastError () returned 0xcb [0129.114] VirtualQuery (in: lpAddress=0x515e284, lpBuffer=0x515f284, dwLength=0x1c | out: lpBuffer=0x515f284*(BaseAddress=0x515e000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0129.172] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef44 | out: ppv=0x515ef44*=0x205794) returned 0x0 [0129.172] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef3c | out: pAptType=0x515ef3c*=1) returned 0x0 [0129.172] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef40 | out: ppvObject=0x515ef40*=0x0) returned 0x80004002 [0129.173] IUnknown:Release (This=0x205794) returned 0x1 [0129.227] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea5c | out: ppv=0x515ea5c*=0x7670bf0) returned 0x0 [0129.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e88c | out: ppvObject=0x515e88c*=0x0) returned 0x80004002 [0129.228] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7670bf0, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8c4 | out: ppvObject=0x515e8c4*=0x767dc10) returned 0x0 [0129.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x767dc10, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e668 | out: ppvObject=0x515e668*=0x767dc10) returned 0x0 [0129.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x767dc10, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e624 | out: ppvObject=0x515e624*=0x0) returned 0x80004002 [0129.229] WbemDefPath:IUnknown:AddRef (This=0x767dc10) returned 0x3 [0129.229] CoGetContextToken (in: pToken=0x515e4b0 | out: pToken=0x515e4b0) returned 0x0 [0129.229] WbemDefPath:IUnknown:QueryInterface (in: This=0x767dc10, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e498 | out: ppvObject=0x515e498*=0x2ed920) returned 0x0 [0129.229] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x2ed920, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e4a0 | out: pCid=0x515e4a0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.229] WbemDefPath:IUnknown:Release (This=0x2ed920) returned 0x3 [0129.230] CoGetContextToken (in: pToken=0x515e4a8 | out: pToken=0x515e4a8) returned 0x0 [0129.230] WbemDefPath:IUnknown:AddRef (This=0x767dc10) returned 0x4 [0129.230] WbemDefPath:IUnknown:QueryInterface (in: This=0x767dc10, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e51c | out: ppvObject=0x515e51c*=0x0) returned 0x80004002 [0129.230] WbemDefPath:IUnknown:Release (This=0x767dc10) returned 0x3 [0129.231] WbemDefPath:IUnknown:Release (This=0x767dc10) returned 0x2 [0129.231] WbemDefPath:IUnknown:Release (This=0x7670bf0) returned 0x0 [0129.231] WbemDefPath:IUnknown:Release (This=0x767dc10) returned 0x1 [0129.231] CoGetContextToken (in: pToken=0x515ed58 | out: pToken=0x515ed58) returned 0x0 [0129.231] CoGetContextToken (in: pToken=0x515ed18 | out: pToken=0x515ed18) returned 0x0 [0129.231] WbemDefPath:IUnknown:AddRef (This=0x767dc10) returned 0x2 [0129.231] WbemDefPath:IUnknown:QueryInterface (in: This=0x767dc10, riid=0x515ed94*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed90 | out: ppvObject=0x515ed90*=0x767dc10) returned 0x0 [0129.232] WbemDefPath:IUnknown:Release (This=0x767dc10) returned 0x2 [0129.232] WbemDefPath:IUnknown:Release (This=0x767dc10) returned 0x1 [0129.232] CoGetContextToken (in: pToken=0x515edd8 | out: pToken=0x515edd8) returned 0x0 [0129.232] CoGetContextToken (in: pToken=0x515ed98 | out: pToken=0x515ed98) returned 0x0 [0129.232] WbemDefPath:IUnknown:AddRef (This=0x767dc10) returned 0x2 [0129.232] WbemDefPath:IUnknown:QueryInterface (in: This=0x767dc10, riid=0x515ee14*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ee10 | out: ppvObject=0x515ee10*=0x767dc10) returned 0x0 [0129.232] WbemDefPath:IUnknown:Release (This=0x767dc10) returned 0x2 [0129.233] WbemDefPath:IUnknown:AddRef (This=0x767dc10) returned 0x3 [0129.233] WbemDefPath:IWbemPath:SetText (This=0x767dc10, uMode=0x4, pszPath="\\\\localhost\\root\\cimv2") returned 0x0 [0129.233] WbemDefPath:IUnknown:Release (This=0x767dc10) returned 0x2 [0129.233] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef7c | out: puCount=0x515ef7c*=0x2) returned 0x0 [0129.233] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef78*=0x0, pszText=0x0 | out: puBuffLength=0x515ef78*=0x17, pszText=0x0) returned 0x0 [0129.233] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef78*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef78*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0129.233] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef78 | out: puCount=0x515ef78*=0x2) returned 0x0 [0129.233] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef74*=0x0, pszText=0x0 | out: puBuffLength=0x515ef74*=0x17, pszText=0x0) returned 0x0 [0129.233] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef74*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef74*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0129.234] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515eef4 | out: ppv=0x515eef4*=0x205794) returned 0x0 [0129.234] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515eeec | out: pAptType=0x515eeec*=1) returned 0x0 [0129.234] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515eef0 | out: ppvObject=0x515eef0*=0x0) returned 0x80004002 [0129.234] IUnknown:Release (This=0x205794) returned 0x1 [0129.234] CoGetClassObject (in: rclsid=0x2dbbc4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ed44 | out: ppv=0x515ed44*=0x767df00) returned 0x0 [0129.234] WbemLocator:IUnknown:QueryInterface (in: This=0x767df00, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515eb74 | out: ppvObject=0x515eb74*=0x0) returned 0x80004002 [0129.235] WbemLocator:IClassFactory:CreateInstance (in: This=0x767df00, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ebac | out: ppvObject=0x515ebac*=0x7670bf0) returned 0x0 [0129.235] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e950 | out: ppvObject=0x515e950*=0x7670bf0) returned 0x0 [0129.235] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e90c | out: ppvObject=0x515e90c*=0x0) returned 0x80004002 [0129.235] WbemLocator:IUnknown:AddRef (This=0x7670bf0) returned 0x3 [0129.235] CoGetContextToken (in: pToken=0x515e798 | out: pToken=0x515e798) returned 0x0 [0129.236] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e780 | out: ppvObject=0x515e780*=0x0) returned 0x80004002 [0129.236] CoGetContextToken (in: pToken=0x515e790 | out: pToken=0x515e790) returned 0x0 [0129.236] WbemLocator:IUnknown:AddRef (This=0x7670bf0) returned 0x4 [0129.236] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e804 | out: ppvObject=0x515e804*=0x0) returned 0x80004002 [0129.236] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x3 [0129.236] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x2 [0129.237] WbemLocator:IUnknown:Release (This=0x767df00) returned 0x0 [0129.237] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x1 [0129.237] CoGetContextToken (in: pToken=0x515ec9c | out: pToken=0x515ec9c) returned 0x0 [0129.237] CoGetContextToken (in: pToken=0x515ec5c | out: pToken=0x515ec5c) returned 0x0 [0129.237] WbemLocator:IUnknown:AddRef (This=0x7670bf0) returned 0x2 [0129.237] WbemLocator:IUnknown:QueryInterface (in: This=0x7670bf0, riid=0x515ecd8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515ecd4 | out: ppvObject=0x515ecd4*=0x7670bf0) returned 0x0 [0129.237] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x2 [0129.237] WbemLocator:IUnknown:Release (This=0x7670bf0) returned 0x1 [0129.237] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eecc | out: puCount=0x515eecc*=0x2) returned 0x0 [0129.237] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=8, puBuffLength=0x515eec8*=0x0, pszText=0x0 | out: puBuffLength=0x515eec8*=0x17, pszText=0x0) returned 0x0 [0129.238] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=8, puBuffLength=0x515eec8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eec8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0129.238] CoCreateInstance (in: rclsid=0x3d913a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x3d912d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x515e9a4 | out: ppv=0x515e9a4*=0x767dd80) returned 0x0 [0129.238] WbemLocator:IWbemLocator:ConnectServer (in: This=0x767dd80, strNetworkResource="\\\\localhost\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x515e9f0 | out: ppNamespace=0x515e9f0*=0x767ddfc) returned 0x0 [0129.486] WbemLocator:IUnknown:QueryInterface (in: This=0x767ddfc, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8c0 | out: ppvObject=0x515e8c0*=0x2ea9d4) returned 0x0 [0129.486] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x2ea9d4, pProxy=0x767ddfc, pAuthnSvc=0x515e908, pAuthzSvc=0x515e904, pServerPrincName=0x515e914, pAuthnLevel=0x515e90c, pImpLevel=0x515e8f8, pAuthInfo=0x515e8fc, pCapabilites=0x515e900 | out: pAuthnSvc=0x515e908*=0xa, pAuthzSvc=0x515e904*=0x0, pServerPrincName=0x515e914, pAuthnLevel=0x515e90c*=0x6, pImpLevel=0x515e8f8*=0x2, pAuthInfo=0x515e8fc, pCapabilites=0x515e900*=0x1) returned 0x0 [0129.486] WbemLocator:IUnknown:Release (This=0x2ea9d4) returned 0x1 [0129.486] WbemLocator:IUnknown:QueryInterface (in: This=0x767ddfc, riid=0x3d91250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8b4 | out: ppvObject=0x515e8b4*=0x2ea9f4) returned 0x0 [0129.486] WbemLocator:IUnknown:QueryInterface (in: This=0x767ddfc, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8b0 | out: ppvObject=0x515e8b0*=0x2ea9d4) returned 0x0 [0129.487] WbemLocator:IClientSecurity:SetBlanket (This=0x2ea9d4, pProxy=0x767ddfc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0129.487] WbemLocator:IUnknown:Release (This=0x2ea9d4) returned 0x2 [0129.487] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x1 [0129.487] CoTaskMemFree (pv=0x2e52e8) [0129.487] WbemLocator:IUnknown:Release (This=0x767dd80) returned 0x0 [0129.487] WbemLocator:IUnknown:QueryInterface (in: This=0x767ddfc, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e270 | out: ppvObject=0x515e270*=0x2ea9f4) returned 0x0 [0129.488] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e22c | out: ppvObject=0x515e22c*=0x0) returned 0x80004002 [0129.488] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e120 | out: ppvObject=0x515e120*=0x0) returned 0x80004002 [0129.489] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0129.489] CoGetContextToken (in: pToken=0x515e0b8 | out: pToken=0x515e0b8) returned 0x0 [0129.490] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e0a0 | out: ppvObject=0x515e0a0*=0x2ea954) returned 0x0 [0129.490] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x2ea954, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e0a8 | out: pCid=0x515e0a8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.490] WbemLocator:IUnknown:Release (This=0x2ea954) returned 0x3 [0129.491] CoGetContextToken (in: pToken=0x515e0b0 | out: pToken=0x515e0b0) returned 0x0 [0129.491] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x4 [0129.491] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e124 | out: ppvObject=0x515e124*=0x2ea9dc) returned 0x0 [0129.491] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x4 [0129.491] WbemLocator:IRpcOptions:Query (in: This=0x2ea9dc, pPrx=0x2ea9f4, dwProperty=2, pdwValue=0x515e148 | out: pdwValue=0x515e148) returned 0x80004002 [0129.491] WbemLocator:IUnknown:Release (This=0x2ea9dc) returned 0x3 [0129.492] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0129.492] CoGetContextToken (in: pToken=0x515e524 | out: pToken=0x515e524) returned 0x0 [0129.492] CoGetContextToken (in: pToken=0x515e4e4 | out: pToken=0x515e4e4) returned 0x0 [0129.492] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0129.492] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x515e560*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x515e55c | out: ppvObject=0x515e55c*=0x767ddfc) returned 0x0 [0129.492] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0129.493] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0129.493] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x1 [0129.493] CoGetContextToken (in: pToken=0x515ee40 | out: pToken=0x515ee40) returned 0x0 [0129.493] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x2 [0129.493] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ea64 | out: ppvObject=0x515ea64*=0x2ea9f4) returned 0x0 [0129.493] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0129.494] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x1 [0129.494] CoGetContextToken (in: pToken=0x515e644 | out: pToken=0x515e644) returned 0x0 [0129.494] CoGetContextToken (in: pToken=0x515e604 | out: pToken=0x515e604) returned 0x0 [0129.494] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x2 [0129.494] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x515e680*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x515e67c | out: ppvObject=0x515e67c*=0x767ddfc) returned 0x0 [0129.494] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0129.494] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0129.494] IWbemServices:ExecQuery (in: This=0x767ddfc, strQueryLanguage="WQL", strQuery="select * from Win32_Shadowcopy", lFlags=16, pCtx=0x0, ppEnum=0x515ec88 | out: ppEnum=0x515ec88*=0x767d164) returned 0x0 [0129.516] IUnknown:QueryInterface (in: This=0x767d164, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e934 | out: ppvObject=0x515e934*=0x767d168) returned 0x0 [0129.516] IClientSecurity:QueryBlanket (in: This=0x767d168, pProxy=0x767d164, pAuthnSvc=0x515e97c, pAuthzSvc=0x515e978, pServerPrincName=0x515e988, pAuthnLevel=0x515e980, pImpLevel=0x515e96c, pAuthInfo=0x515e970, pCapabilites=0x515e974 | out: pAuthnSvc=0x515e97c*=0xa, pAuthzSvc=0x515e978*=0x0, pServerPrincName=0x515e988, pAuthnLevel=0x515e980*=0x6, pImpLevel=0x515e96c*=0x2, pAuthInfo=0x515e970, pCapabilites=0x515e974*=0x1) returned 0x0 [0129.516] IUnknown:Release (This=0x767d168) returned 0x1 [0129.516] IUnknown:QueryInterface (in: This=0x767d164, riid=0x3d91250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e928 | out: ppvObject=0x515e928*=0x2ea904) returned 0x0 [0129.516] IUnknown:QueryInterface (in: This=0x767d164, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e924 | out: ppvObject=0x515e924*=0x767d168) returned 0x0 [0129.517] IClientSecurity:SetBlanket (This=0x767d168, pProxy=0x767d164, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0129.525] IUnknown:Release (This=0x767d168) returned 0x2 [0129.525] WbemLocator:IUnknown:Release (This=0x2ea904) returned 0x1 [0129.525] CoTaskMemFree (pv=0x2e5288) [0129.526] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0129.526] IUnknown:QueryInterface (in: This=0x767d164, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e0 | out: ppvObject=0x515e2e0*=0x2ea904) returned 0x0 [0129.527] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea904, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e29c | out: ppvObject=0x515e29c*=0x0) returned 0x80004002 [0129.528] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea904, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e190 | out: ppvObject=0x515e190*=0x0) returned 0x80004002 [0129.529] WbemLocator:IUnknown:AddRef (This=0x2ea904) returned 0x3 [0129.530] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0129.530] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea904, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e110 | out: ppvObject=0x515e110*=0x2ea864) returned 0x0 [0129.530] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x2ea864, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e118 | out: pCid=0x515e118*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.530] WbemLocator:IUnknown:Release (This=0x2ea864) returned 0x3 [0129.531] CoGetContextToken (in: pToken=0x515e120 | out: pToken=0x515e120) returned 0x0 [0129.531] WbemLocator:IUnknown:AddRef (This=0x2ea904) returned 0x4 [0129.531] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea904, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e194 | out: ppvObject=0x515e194*=0x2ea8ec) returned 0x0 [0129.532] WbemLocator:IUnknown:Release (This=0x2ea904) returned 0x4 [0129.532] WbemLocator:IRpcOptions:Query (in: This=0x2ea8ec, pPrx=0x2ea904, dwProperty=2, pdwValue=0x515e1b8 | out: pdwValue=0x515e1b8) returned 0x80004002 [0129.532] WbemLocator:IUnknown:Release (This=0x2ea8ec) returned 0x3 [0129.533] WbemLocator:IUnknown:Release (This=0x2ea904) returned 0x2 [0129.533] CoGetContextToken (in: pToken=0x515e594 | out: pToken=0x515e594) returned 0x0 [0129.534] CoGetContextToken (in: pToken=0x515e554 | out: pToken=0x515e554) returned 0x0 [0129.534] WbemLocator:IUnknown:AddRef (This=0x2ea904) returned 0x3 [0129.534] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea904, riid=0x515e5d0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e5cc | out: ppvObject=0x515e5cc*=0x767d164) returned 0x0 [0129.534] WbemLocator:IUnknown:Release (This=0x2ea904) returned 0x3 [0129.535] IUnknown:Release (This=0x767d164) returned 0x2 [0129.535] IUnknown:Release (This=0x767d164) returned 0x1 [0129.536] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef20 | out: puCount=0x515ef20*=0x2) returned 0x0 [0129.536] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef1c*=0x0, pszText=0x0 | out: puBuffLength=0x515ef1c*=0x17, pszText=0x0) returned 0x0 [0129.536] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef1c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef1c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0129.536] CoGetContextToken (in: pToken=0x515e8bc | out: pToken=0x515e8bc) returned 0x0 [0129.536] CoGetContextToken (in: pToken=0x515e87c | out: pToken=0x515e87c) returned 0x0 [0129.536] WbemLocator:IUnknown:AddRef (This=0x2ea904) returned 0x2 [0129.537] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea904, riid=0x515e8f8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e8f4 | out: ppvObject=0x515e8f4*=0x767d164) returned 0x0 [0129.537] WbemLocator:IUnknown:Release (This=0x2ea904) returned 0x2 [0129.538] IUnknown:AddRef (This=0x767d164) returned 0x3 [0129.538] IEnumWbemClassObject:Clone (in: This=0x767d164, ppEnum=0x515eef0 | out: ppEnum=0x515eef0*=0x767d22c) returned 0x0 [0129.540] IUnknown:QueryInterface (in: This=0x767d22c, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ebac | out: ppvObject=0x515ebac*=0x767d230) returned 0x0 [0129.541] IClientSecurity:QueryBlanket (in: This=0x767d230, pProxy=0x767d22c, pAuthnSvc=0x515ebf4, pAuthzSvc=0x515ebf0, pServerPrincName=0x515ec00, pAuthnLevel=0x515ebf8, pImpLevel=0x515ebe4, pAuthInfo=0x515ebe8, pCapabilites=0x515ebec | out: pAuthnSvc=0x515ebf4*=0xa, pAuthzSvc=0x515ebf0*=0x0, pServerPrincName=0x515ec00, pAuthnLevel=0x515ebf8*=0x6, pImpLevel=0x515ebe4*=0x2, pAuthInfo=0x515ebe8, pCapabilites=0x515ebec*=0x1) returned 0x0 [0129.541] IUnknown:Release (This=0x767d230) returned 0x1 [0129.541] IUnknown:QueryInterface (in: This=0x767d22c, riid=0x3d91250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515eba0 | out: ppvObject=0x515eba0*=0x2eabd4) returned 0x0 [0129.541] IUnknown:QueryInterface (in: This=0x767d22c, riid=0x3d91260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515eb9c | out: ppvObject=0x515eb9c*=0x767d230) returned 0x0 [0129.541] IClientSecurity:SetBlanket (This=0x767d230, pProxy=0x767d22c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0129.544] IUnknown:Release (This=0x767d230) returned 0x2 [0129.544] WbemLocator:IUnknown:Release (This=0x2eabd4) returned 0x1 [0129.544] CoTaskMemFree (pv=0x2e52e8) [0129.545] IUnknown:Release (This=0x767d164) returned 0x2 [0129.546] IUnknown:QueryInterface (in: This=0x767d22c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e548 | out: ppvObject=0x515e548*=0x2eabd4) returned 0x0 [0129.547] WbemLocator:IUnknown:QueryInterface (in: This=0x2eabd4, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e504 | out: ppvObject=0x515e504*=0x0) returned 0x80004002 [0129.548] WbemLocator:IUnknown:QueryInterface (in: This=0x2eabd4, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e3f8 | out: ppvObject=0x515e3f8*=0x0) returned 0x80004002 [0129.549] WbemLocator:IUnknown:AddRef (This=0x2eabd4) returned 0x3 [0129.549] CoGetContextToken (in: pToken=0x515e390 | out: pToken=0x515e390) returned 0x0 [0129.549] WbemLocator:IUnknown:QueryInterface (in: This=0x2eabd4, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e378 | out: ppvObject=0x515e378*=0x2eab34) returned 0x0 [0129.550] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x2eab34, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e380 | out: pCid=0x515e380*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.550] WbemLocator:IUnknown:Release (This=0x2eab34) returned 0x3 [0129.551] CoGetContextToken (in: pToken=0x515e388 | out: pToken=0x515e388) returned 0x0 [0129.551] WbemLocator:IUnknown:AddRef (This=0x2eabd4) returned 0x4 [0129.552] WbemLocator:IUnknown:QueryInterface (in: This=0x2eabd4, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3fc | out: ppvObject=0x515e3fc*=0x2eabbc) returned 0x0 [0129.553] WbemLocator:IUnknown:Release (This=0x2eabd4) returned 0x4 [0129.553] WbemLocator:IRpcOptions:Query (in: This=0x2eabbc, pPrx=0x2eabd4, dwProperty=2, pdwValue=0x515e420 | out: pdwValue=0x515e420) returned 0x80004002 [0129.553] WbemLocator:IUnknown:Release (This=0x2eabbc) returned 0x3 [0129.554] WbemLocator:IUnknown:Release (This=0x2eabd4) returned 0x2 [0129.555] CoGetContextToken (in: pToken=0x515e7fc | out: pToken=0x515e7fc) returned 0x0 [0129.555] CoGetContextToken (in: pToken=0x515e7bc | out: pToken=0x515e7bc) returned 0x0 [0129.555] WbemLocator:IUnknown:AddRef (This=0x2eabd4) returned 0x3 [0129.555] WbemLocator:IUnknown:QueryInterface (in: This=0x2eabd4, riid=0x515e838*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e834 | out: ppvObject=0x515e834*=0x767d22c) returned 0x0 [0129.556] WbemLocator:IUnknown:Release (This=0x2eabd4) returned 0x3 [0129.557] IUnknown:Release (This=0x767d22c) returned 0x2 [0129.557] IUnknown:Release (This=0x767d22c) returned 0x1 [0129.558] CoGetContextToken (in: pToken=0x515edf0 | out: pToken=0x515edf0) returned 0x0 [0129.558] CoGetContextToken (in: pToken=0x515edb0 | out: pToken=0x515edb0) returned 0x0 [0129.558] WbemLocator:IUnknown:AddRef (This=0x2eabd4) returned 0x2 [0129.559] WbemLocator:IUnknown:QueryInterface (in: This=0x2eabd4, riid=0x515ee2c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515ee28 | out: ppvObject=0x515ee28*=0x767d22c) returned 0x0 [0129.559] WbemLocator:IUnknown:Release (This=0x2eabd4) returned 0x2 [0129.560] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0129.560] IEnumWbemClassObject:Reset (This=0x767d22c) returned 0x0 [0129.562] IUnknown:Release (This=0x767d22c) returned 0x2 [0129.563] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0129.563] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0129.563] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x767d268, puReturned=0x64d2d40*=0x1) returned 0x0 [0157.167] IUnknown:QueryInterface (in: This=0x767d268, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x767d268) returned 0x0 [0157.167] IUnknown:QueryInterface (in: This=0x767d268, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0157.167] IUnknown:QueryInterface (in: This=0x767d268, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0157.168] IUnknown:AddRef (This=0x767d268) returned 0x3 [0157.169] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0157.169] IUnknown:QueryInterface (in: This=0x767d268, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x767d26c) returned 0x0 [0157.169] IMarshal:GetUnmarshalClass (in: This=0x767d26c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0157.169] IUnknown:Release (This=0x767d26c) returned 0x3 [0157.170] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0157.170] IUnknown:AddRef (This=0x767d268) returned 0x4 [0157.170] IUnknown:QueryInterface (in: This=0x767d268, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0157.170] IUnknown:Release (This=0x767d268) returned 0x3 [0157.170] IUnknown:Release (This=0x767d268) returned 0x2 [0157.171] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0157.171] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0157.171] IUnknown:AddRef (This=0x767d268) returned 0x3 [0157.171] IUnknown:QueryInterface (in: This=0x767d268, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x767d268) returned 0x0 [0157.171] IUnknown:Release (This=0x767d268) returned 0x3 [0157.171] IUnknown:Release (This=0x767d268) returned 0x2 [0157.172] IUnknown:Release (This=0x767d268) returned 0x1 [0157.172] IUnknown:Release (This=0x767d22c) returned 0x2 [0157.172] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0157.172] IUnknown:AddRef (This=0x767d268) returned 0x2 [0157.173] IWbemClassObject:Get (in: This=0x767d268, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0157.174] IWbemClassObject:Get (in: This=0x767d268, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0157.174] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x52 [0157.174] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0157.174] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0157.175] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0157.175] IUnknown:Release (This=0x205794) returned 0x1 [0157.177] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x767d400) returned 0x0 [0157.177] WbemDefPath:IUnknown:QueryInterface (in: This=0x767d400, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0157.177] WbemDefPath:IClassFactory:CreateInstance (in: This=0x767d400, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x767ccd8) returned 0x0 [0157.178] WbemDefPath:IUnknown:QueryInterface (in: This=0x767ccd8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x767ccd8) returned 0x0 [0157.178] WbemDefPath:IUnknown:QueryInterface (in: This=0x767ccd8, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0157.178] WbemDefPath:IUnknown:AddRef (This=0x767ccd8) returned 0x3 [0157.179] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0157.179] WbemDefPath:IUnknown:QueryInterface (in: This=0x767ccd8, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x27a480) returned 0x0 [0157.179] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x27a480, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0157.179] WbemDefPath:IUnknown:Release (This=0x27a480) returned 0x3 [0157.179] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0157.179] WbemDefPath:IUnknown:AddRef (This=0x767ccd8) returned 0x4 [0157.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x767ccd8, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0157.180] WbemDefPath:IUnknown:Release (This=0x767ccd8) returned 0x3 [0157.180] WbemDefPath:IUnknown:Release (This=0x767ccd8) returned 0x2 [0157.180] WbemDefPath:IUnknown:Release (This=0x767d400) returned 0x0 [0157.180] WbemDefPath:IUnknown:Release (This=0x767ccd8) returned 0x1 [0157.181] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0157.181] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0157.181] WbemDefPath:IUnknown:AddRef (This=0x767ccd8) returned 0x2 [0157.181] WbemDefPath:IUnknown:QueryInterface (in: This=0x767ccd8, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x767ccd8) returned 0x0 [0157.181] WbemDefPath:IUnknown:Release (This=0x767ccd8) returned 0x2 [0157.181] WbemDefPath:IUnknown:Release (This=0x767ccd8) returned 0x1 [0157.181] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0157.181] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0157.181] WbemDefPath:IUnknown:AddRef (This=0x767ccd8) returned 0x2 [0157.182] WbemDefPath:IUnknown:QueryInterface (in: This=0x767ccd8, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x767ccd8) returned 0x0 [0157.182] WbemDefPath:IUnknown:Release (This=0x767ccd8) returned 0x2 [0157.182] WbemDefPath:IUnknown:AddRef (This=0x767ccd8) returned 0x3 [0157.182] WbemDefPath:IWbemPath:SetText (This=0x767ccd8, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x0 [0157.182] WbemDefPath:IUnknown:Release (This=0x767ccd8) returned 0x2 [0157.182] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0157.182] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0157.182] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0157.192] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0157.192] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0157.192] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0157.192] IWbemClassObject:Get (in: This=0x767d268, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d3b80*=0, plFlavor=0x64d3b84*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64d3b80*=8, plFlavor=0x64d3b84*=64) returned 0x0 [0157.192] SysStringLen (param_1="root\\cimv2") returned 0xa [0157.193] IWbemClassObject:Get (in: This=0x767d268, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d3b80*=8, plFlavor=0x64d3b84*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64d3b80*=8, plFlavor=0x64d3b84*=64) returned 0x0 [0157.193] SysStringLen (param_1="root\\cimv2") returned 0xa [0157.193] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0157.193] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0157.193] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0157.193] IWbemClassObject:Get (in: This=0x767d268, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d3c38*=0, plFlavor=0x64d3c3c*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64d3c38*=8, plFlavor=0x64d3c3c*=64) returned 0x0 [0157.193] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0157.193] IWbemClassObject:Get (in: This=0x767d268, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d3c38*=8, plFlavor=0x64d3c3c*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64d3c38*=8, plFlavor=0x64d3c3c*=64) returned 0x0 [0157.193] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0158.463] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ead0 | out: puCount=0x515ead0*=0x2) returned 0x0 [0158.463] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eacc*=0x0, pszText=0x0 | out: puBuffLength=0x515eacc*=0x17, pszText=0x0) returned 0x0 [0158.463] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eacc*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eacc*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0158.463] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ead0 | out: puCount=0x515ead0*=0x2) returned 0x0 [0158.463] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eacc*=0x0, pszText=0x0 | out: puBuffLength=0x515eacc*=0x17, pszText=0x0) returned 0x0 [0158.463] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eacc*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eacc*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0158.463] IWbemClassObject:GetNames (in: This=0x767d268, wszQualifierName=0x0, lFlags=48, pQualifierVal=0x515ea94*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515ea60 | out: pNames=0x515ea60*="\x01ƀ\x04") returned 0x0 [0158.463] SafeArrayGetDim (psa=0x2e5358) returned 0x1 [0158.463] SafeArrayGetDim (psa=0x2e5358) returned 0x1 [0158.463] SafeArrayGetLBound (in: psa=0x2e5358, nDim=0x1, plLbound=0x515e65c | out: plLbound=0x515e65c) returned 0x0 [0158.464] IWbemClassObject:Get (in: This=0x767d268, wszName="__GENUS", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d685c*=0, plFlavor=0x64d6860*=0 | out: pVal=0x515ea8c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x64d685c*=3, plFlavor=0x64d6860*=64) returned 0x0 [0158.464] IWbemClassObject:Get (in: This=0x767d268, wszName="__CLASS", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d6890*=0, plFlavor=0x64d6894*=0 | out: pVal=0x515ea8c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64d6890*=8, plFlavor=0x64d6894*=64) returned 0x0 [0158.464] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0158.465] IWbemClassObject:Get (in: This=0x767d268, wszName="__SUPERCLASS", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d68ec*=0, plFlavor=0x64d68f0*=0 | out: pVal=0x515ea8c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CIM_LogicalElement", varVal2=0x0), pType=0x64d68ec*=8, plFlavor=0x64d68f0*=64) returned 0x0 [0158.465] SysStringLen (param_1="CIM_LogicalElement") returned 0x12 [0158.465] IWbemClassObject:Get (in: This=0x767d268, wszName="__DYNASTY", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d694c*=0, plFlavor=0x64d6950*=0 | out: pVal=0x515ea8c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CIM_ManagedSystemElement", varVal2=0x0), pType=0x64d694c*=8, plFlavor=0x64d6950*=64) returned 0x0 [0158.465] SysStringLen (param_1="CIM_ManagedSystemElement") returned 0x18 [0158.465] IWbemClassObject:Get (in: This=0x767d268, wszName="__RELPATH", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d69b8*=0, plFlavor=0x64d69bc*=0 | out: pVal=0x515ea8c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", varVal2=0x0), pType=0x64d69b8*=8, plFlavor=0x64d69bc*=64) returned 0x0 [0158.465] SysStringLen (param_1="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x3c [0158.465] IWbemClassObject:Get (in: This=0x767d268, wszName="__PROPERTY_COUNT", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d6a6c*=0, plFlavor=0x64d6a70*=0 | out: pVal=0x515ea8c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1c, varVal2=0x0), pType=0x64d6a6c*=3, plFlavor=0x64d6a70*=64) returned 0x0 [0158.466] IWbemClassObject:Get (in: This=0x767d268, wszName="__DERIVATION", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d6aa0*=0, plFlavor=0x64d6aa4*=0 | out: pVal=0x515ea8c*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2e5358*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x7536958, rgsabound=((cElements=0x2, lLbound=0))), varVal2=0x0), pType=0x64d6aa0*=8200, plFlavor=0x64d6aa4*=64) returned 0x0 [0158.466] IWbemClassObject:Get (in: This=0x767d268, wszName="__SERVER", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d6b5c*=0, plFlavor=0x64d6b60*=0 | out: pVal=0x515ea8c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x64d6b5c*=8, plFlavor=0x64d6b60*=64) returned 0x0 [0158.466] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0158.466] IWbemClassObject:Get (in: This=0x767d268, wszName="__NAMESPACE", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d6ba8*=0, plFlavor=0x64d6bac*=0 | out: pVal=0x515ea8c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64d6ba8*=8, plFlavor=0x64d6bac*=64) returned 0x0 [0158.466] SysStringLen (param_1="root\\cimv2") returned 0xa [0158.467] IWbemClassObject:Get (in: This=0x767d268, wszName="__PATH", lFlags=0, pVal=0x515ea8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d6bf8*=0, plFlavor=0x64d6bfc*=0 | out: pVal=0x515ea8c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", varVal2=0x0), pType=0x64d6bf8*=8, plFlavor=0x64d6bfc*=64) returned 0x0 [0158.467] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x52 [0158.467] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb0c | out: puCount=0x515eb0c*=0x2) returned 0x0 [0158.467] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb08*=0x0, pszText=0x0 | out: puBuffLength=0x515eb08*=0x17, pszText=0x0) returned 0x0 [0158.467] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb08*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb08*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0158.467] IWbemClassObject:Get (in: This=0x767d268, wszName="Delete", lFlags=0, pVal=0x515eac8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d6d28*=0, plFlavor=0x64d6d2c*=0 | out: pVal=0x515eac8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d6d28*=0, plFlavor=0x64d6d2c*=0) returned 0x80041002 [0158.478] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x515eaac | out: pperrinfo=0x515eaac*=0x0) returned 0x1 [0158.478] IIDFromString (in: lpsz="{EB87E1BD-3233-11D2-AEC9-00C04FB68820}", lpiid=0x515ea04 | out: lpiid=0x515ea04) returned 0x0 [0158.479] CoGetClassObject (in: rclsid=0x2dc2f4*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e96c | out: ppv=0x515e96c*=0x767cef0) returned 0x0 [0158.481] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767cef0, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e79c | out: ppvObject=0x515e79c*=0x0) returned 0x80004002 [0158.481] WbemStatusCodeText:IClassFactory:CreateInstance (in: This=0x767cef0, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e7d4 | out: ppvObject=0x515e7d4*=0x767d400) returned 0x0 [0158.481] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767d400, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e578 | out: ppvObject=0x515e578*=0x767d400) returned 0x0 [0158.481] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767d400, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e534 | out: ppvObject=0x515e534*=0x0) returned 0x80004002 [0158.482] WbemStatusCodeText:IUnknown:AddRef (This=0x767d400) returned 0x3 [0158.482] CoGetContextToken (in: pToken=0x515e3c0 | out: pToken=0x515e3c0) returned 0x0 [0158.482] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767d400, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3a8 | out: ppvObject=0x515e3a8*=0x0) returned 0x80004002 [0158.482] CoGetContextToken (in: pToken=0x515e3b8 | out: pToken=0x515e3b8) returned 0x0 [0158.482] WbemStatusCodeText:IUnknown:AddRef (This=0x767d400) returned 0x4 [0158.482] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767d400, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e42c | out: ppvObject=0x515e42c*=0x0) returned 0x80004002 [0158.482] WbemStatusCodeText:IUnknown:Release (This=0x767d400) returned 0x3 [0158.482] WbemStatusCodeText:IUnknown:Release (This=0x767d400) returned 0x2 [0158.482] WbemStatusCodeText:IUnknown:Release (This=0x767cef0) returned 0x0 [0158.483] WbemStatusCodeText:IUnknown:Release (This=0x767d400) returned 0x1 [0158.483] CoGetContextToken (in: pToken=0x515e8c4 | out: pToken=0x515e8c4) returned 0x0 [0158.483] CoGetContextToken (in: pToken=0x515e884 | out: pToken=0x515e884) returned 0x0 [0158.483] WbemStatusCodeText:IUnknown:AddRef (This=0x767d400) returned 0x2 [0158.483] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767d400, riid=0x515e900*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x515e8fc | out: ppvObject=0x515e8fc*=0x767d400) returned 0x0 [0158.483] WbemStatusCodeText:IUnknown:Release (This=0x767d400) returned 0x2 [0158.483] WbemStatusCodeText:IUnknown:Release (This=0x767d400) returned 0x1 [0158.492] CoGetContextToken (in: pToken=0x515e88c | out: pToken=0x515e88c) returned 0x0 [0158.492] CoGetContextToken (in: pToken=0x515e84c | out: pToken=0x515e84c) returned 0x0 [0158.492] WbemStatusCodeText:IUnknown:AddRef (This=0x767d400) returned 0x2 [0158.492] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767d400, riid=0x515e8c8*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x515e8c4 | out: ppvObject=0x515e8c4*=0x767d400) returned 0x0 [0158.492] WbemStatusCodeText:IUnknown:Release (This=0x767d400) returned 0x2 [0158.492] WbemStatusCodeText:IUnknown:AddRef (This=0x767d400) returned 0x3 [0158.492] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x767d400, hRes=0x80041002, LocaleId=0x0, lFlags=1, MessageText=0x515e9fc | out: MessageText=0x515e9fc*="Not found ") returned 0x0 [0158.521] SysStringByteLen (bstr="Not found ") returned 0x14 [0158.521] SysStringByteLen (bstr="Not found ") returned 0x14 [0158.521] WbemStatusCodeText:IUnknown:Release (This=0x767d400) returned 0x2 [0158.559] IWbemClassObject:Get (in: This=0x767d268, wszName="__SERVER", lFlags=0, pVal=0x515ea78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eb30*=0, plFlavor=0x515eb2c*=0 | out: pVal=0x515ea78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x515eb30*=8, plFlavor=0x515eb2c*=64) returned 0x0 [0158.559] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0158.559] IWbemClassObject:Get (in: This=0x767d268, wszName="__NAMESPACE", lFlags=0, pVal=0x515ea78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eb30*=8, plFlavor=0x515eb2c*=64 | out: pVal=0x515ea78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x515eb30*=8, plFlavor=0x515eb2c*=64) returned 0x0 [0158.559] SysStringLen (param_1="root\\cimv2") returned 0xa [0158.559] IWbemClassObject:Get (in: This=0x767d268, wszName="__CLASS", lFlags=0, pVal=0x515ea78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eb30*=8, plFlavor=0x515eb2c*=64 | out: pVal=0x515ea78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x515eb30*=8, plFlavor=0x515eb2c*=64) returned 0x0 [0158.559] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0158.559] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea58 | out: ppv=0x515ea58*=0x205794) returned 0x0 [0158.560] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea50 | out: pAptType=0x515ea50*=1) returned 0x0 [0158.560] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea54 | out: ppvObject=0x515ea54*=0x0) returned 0x80004002 [0158.560] IUnknown:Release (This=0x205794) returned 0x1 [0158.560] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e570 | out: ppv=0x515e570*=0x767cef0) returned 0x0 [0158.561] WbemDefPath:IUnknown:QueryInterface (in: This=0x767cef0, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e3a0 | out: ppvObject=0x515e3a0*=0x0) returned 0x80004002 [0158.561] WbemDefPath:IClassFactory:CreateInstance (in: This=0x767cef0, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3d8 | out: ppvObject=0x515e3d8*=0x767e270) returned 0x0 [0158.561] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e270, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e17c | out: ppvObject=0x515e17c*=0x767e270) returned 0x0 [0158.561] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e270, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e138 | out: ppvObject=0x515e138*=0x0) returned 0x80004002 [0158.561] WbemDefPath:IUnknown:AddRef (This=0x767e270) returned 0x3 [0158.561] CoGetContextToken (in: pToken=0x515dfc4 | out: pToken=0x515dfc4) returned 0x0 [0158.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e270, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfac | out: ppvObject=0x515dfac*=0x7536968) returned 0x0 [0158.562] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536968, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dfb4 | out: pCid=0x515dfb4*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0158.562] WbemDefPath:IUnknown:Release (This=0x7536968) returned 0x3 [0158.562] CoGetContextToken (in: pToken=0x515dfbc | out: pToken=0x515dfbc) returned 0x0 [0158.562] WbemDefPath:IUnknown:AddRef (This=0x767e270) returned 0x4 [0158.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e270, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e030 | out: ppvObject=0x515e030*=0x0) returned 0x80004002 [0158.562] WbemDefPath:IUnknown:Release (This=0x767e270) returned 0x3 [0158.562] WbemDefPath:IUnknown:Release (This=0x767e270) returned 0x2 [0158.563] WbemDefPath:IUnknown:Release (This=0x767cef0) returned 0x0 [0158.563] WbemDefPath:IUnknown:Release (This=0x767e270) returned 0x1 [0158.563] CoGetContextToken (in: pToken=0x515e86c | out: pToken=0x515e86c) returned 0x0 [0158.563] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0158.563] WbemDefPath:IUnknown:AddRef (This=0x767e270) returned 0x2 [0158.563] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e270, riid=0x515e8a8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e8a4 | out: ppvObject=0x515e8a4*=0x767e270) returned 0x0 [0158.563] WbemDefPath:IUnknown:Release (This=0x767e270) returned 0x2 [0158.563] WbemDefPath:IUnknown:Release (This=0x767e270) returned 0x1 [0158.563] CoGetContextToken (in: pToken=0x515e8ec | out: pToken=0x515e8ec) returned 0x0 [0158.563] CoGetContextToken (in: pToken=0x515e8ac | out: pToken=0x515e8ac) returned 0x0 [0158.563] WbemDefPath:IUnknown:AddRef (This=0x767e270) returned 0x2 [0158.563] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e270, riid=0x515e928*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e924 | out: ppvObject=0x515e924*=0x767e270) returned 0x0 [0158.564] WbemDefPath:IUnknown:Release (This=0x767e270) returned 0x2 [0158.564] WbemDefPath:IUnknown:AddRef (This=0x767e270) returned 0x3 [0158.564] WbemDefPath:IWbemPath:SetText (This=0x767e270, uMode=0x4, pszPath="") returned 0x0 [0158.564] WbemDefPath:IUnknown:Release (This=0x767e270) returned 0x2 [0158.564] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea58 | out: ppv=0x515ea58*=0x205794) returned 0x0 [0158.564] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea50 | out: pAptType=0x515ea50*=1) returned 0x0 [0158.564] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea54 | out: ppvObject=0x515ea54*=0x0) returned 0x80004002 [0158.564] IUnknown:Release (This=0x205794) returned 0x1 [0158.564] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e570 | out: ppv=0x515e570*=0x767cef0) returned 0x0 [0158.565] WbemDefPath:IUnknown:QueryInterface (in: This=0x767cef0, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e3a0 | out: ppvObject=0x515e3a0*=0x0) returned 0x80004002 [0158.565] WbemDefPath:IClassFactory:CreateInstance (in: This=0x767cef0, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3d8 | out: ppvObject=0x515e3d8*=0x767e308) returned 0x0 [0158.565] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e308, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e17c | out: ppvObject=0x515e17c*=0x767e308) returned 0x0 [0158.565] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e308, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e138 | out: ppvObject=0x515e138*=0x0) returned 0x80004002 [0158.566] WbemDefPath:IUnknown:AddRef (This=0x767e308) returned 0x3 [0158.566] CoGetContextToken (in: pToken=0x515dfc4 | out: pToken=0x515dfc4) returned 0x0 [0158.566] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e308, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfac | out: ppvObject=0x515dfac*=0x7536958) returned 0x0 [0158.566] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536958, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dfb4 | out: pCid=0x515dfb4*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0158.566] WbemDefPath:IUnknown:Release (This=0x7536958) returned 0x3 [0158.566] CoGetContextToken (in: pToken=0x515dfbc | out: pToken=0x515dfbc) returned 0x0 [0158.566] WbemDefPath:IUnknown:AddRef (This=0x767e308) returned 0x4 [0158.566] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e308, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e030 | out: ppvObject=0x515e030*=0x0) returned 0x80004002 [0158.566] WbemDefPath:IUnknown:Release (This=0x767e308) returned 0x3 [0158.566] WbemDefPath:IUnknown:Release (This=0x767e308) returned 0x2 [0158.567] WbemDefPath:IUnknown:Release (This=0x767cef0) returned 0x0 [0158.567] WbemDefPath:IUnknown:Release (This=0x767e308) returned 0x1 [0158.567] CoGetContextToken (in: pToken=0x515e86c | out: pToken=0x515e86c) returned 0x0 [0158.567] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0158.567] WbemDefPath:IUnknown:AddRef (This=0x767e308) returned 0x2 [0158.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e308, riid=0x515e8a8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e8a4 | out: ppvObject=0x515e8a4*=0x767e308) returned 0x0 [0158.567] WbemDefPath:IUnknown:Release (This=0x767e308) returned 0x2 [0158.567] WbemDefPath:IUnknown:Release (This=0x767e308) returned 0x1 [0158.567] CoGetContextToken (in: pToken=0x515e8ec | out: pToken=0x515e8ec) returned 0x0 [0158.567] CoGetContextToken (in: pToken=0x515e8ac | out: pToken=0x515e8ac) returned 0x0 [0158.567] WbemDefPath:IUnknown:AddRef (This=0x767e308) returned 0x2 [0158.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e308, riid=0x515e928*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e924 | out: ppvObject=0x515e924*=0x767e308) returned 0x0 [0158.568] WbemDefPath:IUnknown:Release (This=0x767e308) returned 0x2 [0158.568] WbemDefPath:IUnknown:AddRef (This=0x767e308) returned 0x3 [0158.568] WbemDefPath:IWbemPath:SetText (This=0x767e308, uMode=0x4, pszPath="") returned 0x0 [0158.568] WbemDefPath:IUnknown:Release (This=0x767e308) returned 0x2 [0158.568] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e308, puCount=0x515eaac | out: puCount=0x515eaac*=0x0) returned 0x0 [0158.568] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e270, puCount=0x515eaac | out: puCount=0x515eaac*=0x0) returned 0x0 [0158.581] WbemDefPath:IWbemPath:GetClassName (in: This=0x767e308, puBuffLength=0x515eb00*=0x0, pszName=0x0 | out: puBuffLength=0x515eb00*=0x0, pszName=0x0) returned 0x8004103a [0158.585] WbemDefPath:IWbemPath:GetServer (in: This=0x767e308, puNameBufLength=0x515eb04*=0x0, pName=0x0 | out: puNameBufLength=0x515eb04*=0x0, pName=0x0) returned 0x80041009 [0158.590] WbemDefPath:IWbemPath:SetServer (This=0x767e308, Name="CRH2YWU7") returned 0x0 [0158.590] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea58 | out: ppv=0x515ea58*=0x205794) returned 0x0 [0158.591] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea50 | out: pAptType=0x515ea50*=1) returned 0x0 [0158.591] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea54 | out: ppvObject=0x515ea54*=0x0) returned 0x80004002 [0158.591] IUnknown:Release (This=0x205794) returned 0x1 [0158.591] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e570 | out: ppv=0x515e570*=0x767cef0) returned 0x0 [0158.592] WbemDefPath:IUnknown:QueryInterface (in: This=0x767cef0, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e3a0 | out: ppvObject=0x515e3a0*=0x0) returned 0x80004002 [0158.592] WbemDefPath:IClassFactory:CreateInstance (in: This=0x767cef0, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3d8 | out: ppvObject=0x515e3d8*=0x767e3a0) returned 0x0 [0158.592] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e3a0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e17c | out: ppvObject=0x515e17c*=0x767e3a0) returned 0x0 [0158.592] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e3a0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e138 | out: ppvObject=0x515e138*=0x0) returned 0x80004002 [0158.593] WbemDefPath:IUnknown:AddRef (This=0x767e3a0) returned 0x3 [0158.593] CoGetContextToken (in: pToken=0x515dfc4 | out: pToken=0x515dfc4) returned 0x0 [0158.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e3a0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfac | out: ppvObject=0x515dfac*=0x7536978) returned 0x0 [0158.593] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536978, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dfb4 | out: pCid=0x515dfb4*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0158.593] WbemDefPath:IUnknown:Release (This=0x7536978) returned 0x3 [0158.593] CoGetContextToken (in: pToken=0x515dfbc | out: pToken=0x515dfbc) returned 0x0 [0158.593] WbemDefPath:IUnknown:AddRef (This=0x767e3a0) returned 0x4 [0158.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e3a0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e030 | out: ppvObject=0x515e030*=0x0) returned 0x80004002 [0158.594] WbemDefPath:IUnknown:Release (This=0x767e3a0) returned 0x3 [0158.594] WbemDefPath:IUnknown:Release (This=0x767e3a0) returned 0x2 [0158.594] WbemDefPath:IUnknown:Release (This=0x767cef0) returned 0x0 [0158.594] WbemDefPath:IUnknown:Release (This=0x767e3a0) returned 0x1 [0158.594] CoGetContextToken (in: pToken=0x515e86c | out: pToken=0x515e86c) returned 0x0 [0158.594] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0158.594] WbemDefPath:IUnknown:AddRef (This=0x767e3a0) returned 0x2 [0158.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e3a0, riid=0x515e8a8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e8a4 | out: ppvObject=0x515e8a4*=0x767e3a0) returned 0x0 [0158.595] WbemDefPath:IUnknown:Release (This=0x767e3a0) returned 0x2 [0158.595] WbemDefPath:IUnknown:Release (This=0x767e3a0) returned 0x1 [0158.595] CoGetContextToken (in: pToken=0x515e8ec | out: pToken=0x515e8ec) returned 0x0 [0158.595] CoGetContextToken (in: pToken=0x515e8ac | out: pToken=0x515e8ac) returned 0x0 [0158.595] WbemDefPath:IUnknown:AddRef (This=0x767e3a0) returned 0x2 [0158.595] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e3a0, riid=0x515e928*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e924 | out: ppvObject=0x515e924*=0x767e3a0) returned 0x0 [0158.595] WbemDefPath:IUnknown:Release (This=0x767e3a0) returned 0x2 [0158.595] WbemDefPath:IUnknown:AddRef (This=0x767e3a0) returned 0x3 [0158.595] WbemDefPath:IWbemPath:SetText (This=0x767e3a0, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0158.595] WbemDefPath:IUnknown:Release (This=0x767e3a0) returned 0x2 [0158.596] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e308, puCount=0x515eaac | out: puCount=0x515eaac*=0x0) returned 0x0 [0158.596] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e3a0, puCount=0x515eaac | out: puCount=0x515eaac*=0x2) returned 0x0 [0158.596] WbemDefPath:IWbemPath:GetText (in: This=0x767e3a0, lFlags=16, puBuffLength=0x515eaa8*=0x0, pszText=0x0 | out: puBuffLength=0x515eaa8*=0xb, pszText=0x0) returned 0x0 [0158.596] WbemDefPath:IWbemPath:GetText (in: This=0x767e3a0, lFlags=16, puBuffLength=0x515eaa8*=0xb, pszText="0000000000" | out: puBuffLength=0x515eaa8*=0xb, pszText="root\\cimv2") returned 0x0 [0158.599] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x767e308) returned 0x0 [0158.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e3a0, puCount=0x515eae0 | out: puCount=0x515eae0*=0x2) returned 0x0 [0158.607] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x767e3a0, uIndex=0x0, puNameBufLength=0x515eadc*=0x0, pName=0x0 | out: puNameBufLength=0x515eadc*=0x5, pName=0x0) returned 0x0 [0158.608] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x767e3a0, uIndex=0x0, puNameBufLength=0x515eadc*=0x5, pName="0000" | out: puNameBufLength=0x515eadc*=0x5, pName="root") returned 0x0 [0158.613] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x767e308, uIndex=0x0, pszName="root") returned 0x0 [0158.613] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x767e3a0, uIndex=0x1, puNameBufLength=0x515eadc*=0x0, pName=0x0 | out: puNameBufLength=0x515eadc*=0x6, pName=0x0) returned 0x0 [0158.613] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x767e3a0, uIndex=0x1, puNameBufLength=0x515eadc*=0x6, pName="00000" | out: puNameBufLength=0x515eadc*=0x6, pName="cimv2") returned 0x0 [0158.613] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x767e308, uIndex=0x1, pszName="cimv2") returned 0x0 [0158.613] WbemDefPath:IWbemPath:GetClassName (in: This=0x767e308, puBuffLength=0x515eb00*=0x0, pszName=0x0 | out: puBuffLength=0x515eb00*=0x0, pszName=0x0) returned 0x8004103a [0158.616] WbemDefPath:IWbemPath:SetClassName (This=0x767e308, Name="Win32_ShadowCopy") returned 0x0 [0158.616] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e308, puCount=0x515eb4c | out: puCount=0x515eb4c*=0x2) returned 0x0 [0158.616] WbemDefPath:IWbemPath:GetText (in: This=0x767e308, lFlags=4, puBuffLength=0x515eb48*=0x0, pszText=0x0 | out: puBuffLength=0x515eb48*=0x27, pszText=0x0) returned 0x0 [0158.616] WbemDefPath:IWbemPath:GetText (in: This=0x767e308, lFlags=4, puBuffLength=0x515eb48*=0x27, pszText="00000000000000000000000000000000000000" | out: puBuffLength=0x515eb48*=0x27, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy") returned 0x0 [0158.617] IWbemClassObject:Get (in: This=0x767d268, wszName="__SERVER", lFlags=0, pVal=0x515ea64*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eb1c*=0, plFlavor=0x515eb18*=0 | out: pVal=0x515ea64*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x515eb1c*=8, plFlavor=0x515eb18*=64) returned 0x0 [0158.617] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0158.617] IWbemClassObject:Get (in: This=0x767d268, wszName="__NAMESPACE", lFlags=0, pVal=0x515ea64*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eb1c*=8, plFlavor=0x515eb18*=64 | out: pVal=0x515ea64*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x515eb1c*=8, plFlavor=0x515eb18*=64) returned 0x0 [0158.617] SysStringLen (param_1="root\\cimv2") returned 0xa [0158.617] IWbemClassObject:Get (in: This=0x767d268, wszName="__CLASS", lFlags=0, pVal=0x515ea64*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eb1c*=8, plFlavor=0x515eb18*=64 | out: pVal=0x515ea64*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x515eb1c*=8, plFlavor=0x515eb18*=64) returned 0x0 [0158.617] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0158.617] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea44 | out: ppv=0x515ea44*=0x205794) returned 0x0 [0158.618] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea3c | out: pAptType=0x515ea3c*=1) returned 0x0 [0158.618] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea40 | out: ppvObject=0x515ea40*=0x0) returned 0x80004002 [0158.618] IUnknown:Release (This=0x205794) returned 0x1 [0158.618] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e55c | out: ppv=0x515e55c*=0x767dda8) returned 0x0 [0158.619] WbemDefPath:IUnknown:QueryInterface (in: This=0x767dda8, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e38c | out: ppvObject=0x515e38c*=0x0) returned 0x80004002 [0158.619] WbemDefPath:IClassFactory:CreateInstance (in: This=0x767dda8, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3c4 | out: ppvObject=0x515e3c4*=0x767e4d8) returned 0x0 [0158.619] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e4d8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e168 | out: ppvObject=0x515e168*=0x767e4d8) returned 0x0 [0158.619] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e4d8, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e124 | out: ppvObject=0x515e124*=0x0) returned 0x80004002 [0158.619] WbemDefPath:IUnknown:AddRef (This=0x767e4d8) returned 0x3 [0158.620] CoGetContextToken (in: pToken=0x515dfb0 | out: pToken=0x515dfb0) returned 0x0 [0158.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e4d8, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df98 | out: ppvObject=0x515df98*=0x75369d8) returned 0x0 [0158.620] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75369d8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dfa0 | out: pCid=0x515dfa0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0158.620] WbemDefPath:IUnknown:Release (This=0x75369d8) returned 0x3 [0158.620] CoGetContextToken (in: pToken=0x515dfa8 | out: pToken=0x515dfa8) returned 0x0 [0158.620] WbemDefPath:IUnknown:AddRef (This=0x767e4d8) returned 0x4 [0158.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e4d8, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e01c | out: ppvObject=0x515e01c*=0x0) returned 0x80004002 [0158.620] WbemDefPath:IUnknown:Release (This=0x767e4d8) returned 0x3 [0158.620] WbemDefPath:IUnknown:Release (This=0x767e4d8) returned 0x2 [0161.378] WbemDefPath:IUnknown:Release (This=0x767dda8) returned 0x0 [0161.378] WbemDefPath:IUnknown:Release (This=0x767e4d8) returned 0x1 [0161.378] CoGetContextToken (in: pToken=0x515e858 | out: pToken=0x515e858) returned 0x0 [0161.378] CoGetContextToken (in: pToken=0x515e818 | out: pToken=0x515e818) returned 0x0 [0161.378] WbemDefPath:IUnknown:AddRef (This=0x767e4d8) returned 0x2 [0161.379] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e4d8, riid=0x515e894*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e890 | out: ppvObject=0x515e890*=0x767e4d8) returned 0x0 [0161.379] WbemDefPath:IUnknown:Release (This=0x767e4d8) returned 0x2 [0161.379] WbemDefPath:IUnknown:Release (This=0x767e4d8) returned 0x1 [0161.380] CoGetContextToken (in: pToken=0x515e8d8 | out: pToken=0x515e8d8) returned 0x0 [0161.380] CoGetContextToken (in: pToken=0x515e898 | out: pToken=0x515e898) returned 0x0 [0161.380] WbemDefPath:IUnknown:AddRef (This=0x767e4d8) returned 0x2 [0161.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e4d8, riid=0x515e914*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e910 | out: ppvObject=0x515e910*=0x767e4d8) returned 0x0 [0161.380] WbemDefPath:IUnknown:Release (This=0x767e4d8) returned 0x2 [0161.380] WbemDefPath:IUnknown:AddRef (This=0x767e4d8) returned 0x3 [0161.381] WbemDefPath:IWbemPath:SetText (This=0x767e4d8, uMode=0x4, pszPath="") returned 0x0 [0161.381] WbemDefPath:IUnknown:Release (This=0x767e4d8) returned 0x2 [0161.381] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea44 | out: ppv=0x515ea44*=0x205794) returned 0x0 [0161.381] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea3c | out: pAptType=0x515ea3c*=1) returned 0x0 [0161.381] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea40 | out: ppvObject=0x515ea40*=0x0) returned 0x80004002 [0161.381] IUnknown:Release (This=0x205794) returned 0x1 [0161.384] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e55c | out: ppv=0x515e55c*=0x767dda8) returned 0x0 [0161.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x767dda8, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e38c | out: ppvObject=0x515e38c*=0x0) returned 0x80004002 [0161.384] WbemDefPath:IClassFactory:CreateInstance (in: This=0x767dda8, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3c4 | out: ppvObject=0x515e3c4*=0x767e570) returned 0x0 [0161.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e570, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e168 | out: ppvObject=0x515e168*=0x767e570) returned 0x0 [0161.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e570, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e124 | out: ppvObject=0x515e124*=0x0) returned 0x80004002 [0161.386] WbemDefPath:IUnknown:AddRef (This=0x767e570) returned 0x3 [0161.386] CoGetContextToken (in: pToken=0x515dfb0 | out: pToken=0x515dfb0) returned 0x0 [0161.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e570, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df98 | out: ppvObject=0x515df98*=0x75369e8) returned 0x0 [0161.386] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75369e8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dfa0 | out: pCid=0x515dfa0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0161.386] WbemDefPath:IUnknown:Release (This=0x75369e8) returned 0x3 [0161.387] CoGetContextToken (in: pToken=0x515dfa8 | out: pToken=0x515dfa8) returned 0x0 [0161.387] WbemDefPath:IUnknown:AddRef (This=0x767e570) returned 0x4 [0161.387] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e570, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e01c | out: ppvObject=0x515e01c*=0x0) returned 0x80004002 [0161.387] WbemDefPath:IUnknown:Release (This=0x767e570) returned 0x3 [0161.387] WbemDefPath:IUnknown:Release (This=0x767e570) returned 0x2 [0161.387] WbemDefPath:IUnknown:Release (This=0x767dda8) returned 0x0 [0161.388] WbemDefPath:IUnknown:Release (This=0x767e570) returned 0x1 [0161.388] CoGetContextToken (in: pToken=0x515e858 | out: pToken=0x515e858) returned 0x0 [0161.388] CoGetContextToken (in: pToken=0x515e818 | out: pToken=0x515e818) returned 0x0 [0161.388] WbemDefPath:IUnknown:AddRef (This=0x767e570) returned 0x2 [0161.388] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e570, riid=0x515e894*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e890 | out: ppvObject=0x515e890*=0x767e570) returned 0x0 [0161.388] WbemDefPath:IUnknown:Release (This=0x767e570) returned 0x2 [0161.388] WbemDefPath:IUnknown:Release (This=0x767e570) returned 0x1 [0161.389] CoGetContextToken (in: pToken=0x515e8d8 | out: pToken=0x515e8d8) returned 0x0 [0161.389] CoGetContextToken (in: pToken=0x515e898 | out: pToken=0x515e898) returned 0x0 [0161.389] WbemDefPath:IUnknown:AddRef (This=0x767e570) returned 0x2 [0161.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e570, riid=0x515e914*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e910 | out: ppvObject=0x515e910*=0x767e570) returned 0x0 [0161.389] WbemDefPath:IUnknown:Release (This=0x767e570) returned 0x2 [0161.389] WbemDefPath:IUnknown:AddRef (This=0x767e570) returned 0x3 [0161.389] WbemDefPath:IWbemPath:SetText (This=0x767e570, uMode=0x4, pszPath="") returned 0x0 [0161.389] WbemDefPath:IUnknown:Release (This=0x767e570) returned 0x2 [0161.389] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e570, puCount=0x515ea98 | out: puCount=0x515ea98*=0x0) returned 0x0 [0161.390] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e4d8, puCount=0x515ea98 | out: puCount=0x515ea98*=0x0) returned 0x0 [0161.390] WbemDefPath:IWbemPath:GetClassName (in: This=0x767e570, puBuffLength=0x515eaec*=0x0, pszName=0x0 | out: puBuffLength=0x515eaec*=0x0, pszName=0x0) returned 0x8004103a [0161.390] WbemDefPath:IWbemPath:GetServer (in: This=0x767e570, puNameBufLength=0x515eaf0*=0x0, pName=0x0 | out: puNameBufLength=0x515eaf0*=0x0, pName=0x0) returned 0x80041009 [0161.390] WbemDefPath:IWbemPath:SetServer (This=0x767e570, Name="CRH2YWU7") returned 0x0 [0161.390] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea44 | out: ppv=0x515ea44*=0x205794) returned 0x0 [0161.390] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea3c | out: pAptType=0x515ea3c*=1) returned 0x0 [0161.390] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea40 | out: ppvObject=0x515ea40*=0x0) returned 0x80004002 [0161.390] IUnknown:Release (This=0x205794) returned 0x1 [0161.390] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e55c | out: ppv=0x515e55c*=0x767dda8) returned 0x0 [0161.391] WbemDefPath:IUnknown:QueryInterface (in: This=0x767dda8, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e38c | out: ppvObject=0x515e38c*=0x0) returned 0x80004002 [0161.391] WbemDefPath:IClassFactory:CreateInstance (in: This=0x767dda8, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3c4 | out: ppvObject=0x515e3c4*=0x767e608) returned 0x0 [0161.391] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e608, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e168 | out: ppvObject=0x515e168*=0x767e608) returned 0x0 [0161.391] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e608, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e124 | out: ppvObject=0x515e124*=0x0) returned 0x80004002 [0161.392] WbemDefPath:IUnknown:AddRef (This=0x767e608) returned 0x3 [0161.392] CoGetContextToken (in: pToken=0x515dfb0 | out: pToken=0x515dfb0) returned 0x0 [0161.392] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e608, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df98 | out: ppvObject=0x515df98*=0x75369f8) returned 0x0 [0161.392] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75369f8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dfa0 | out: pCid=0x515dfa0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0161.392] WbemDefPath:IUnknown:Release (This=0x75369f8) returned 0x3 [0161.393] CoGetContextToken (in: pToken=0x515dfa8 | out: pToken=0x515dfa8) returned 0x0 [0161.393] WbemDefPath:IUnknown:AddRef (This=0x767e608) returned 0x4 [0161.393] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e608, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e01c | out: ppvObject=0x515e01c*=0x0) returned 0x80004002 [0161.393] WbemDefPath:IUnknown:Release (This=0x767e608) returned 0x3 [0161.393] WbemDefPath:IUnknown:Release (This=0x767e608) returned 0x2 [0161.393] WbemDefPath:IUnknown:Release (This=0x767dda8) returned 0x0 [0161.393] WbemDefPath:IUnknown:Release (This=0x767e608) returned 0x1 [0161.394] CoGetContextToken (in: pToken=0x515e858 | out: pToken=0x515e858) returned 0x0 [0161.394] CoGetContextToken (in: pToken=0x515e818 | out: pToken=0x515e818) returned 0x0 [0161.394] WbemDefPath:IUnknown:AddRef (This=0x767e608) returned 0x2 [0161.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e608, riid=0x515e894*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e890 | out: ppvObject=0x515e890*=0x767e608) returned 0x0 [0161.394] WbemDefPath:IUnknown:Release (This=0x767e608) returned 0x2 [0161.394] WbemDefPath:IUnknown:Release (This=0x767e608) returned 0x1 [0161.394] CoGetContextToken (in: pToken=0x515e8d8 | out: pToken=0x515e8d8) returned 0x0 [0161.394] CoGetContextToken (in: pToken=0x515e898 | out: pToken=0x515e898) returned 0x0 [0161.394] WbemDefPath:IUnknown:AddRef (This=0x767e608) returned 0x2 [0161.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e608, riid=0x515e914*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e910 | out: ppvObject=0x515e910*=0x767e608) returned 0x0 [0161.395] WbemDefPath:IUnknown:Release (This=0x767e608) returned 0x2 [0161.395] WbemDefPath:IUnknown:AddRef (This=0x767e608) returned 0x3 [0161.395] WbemDefPath:IWbemPath:SetText (This=0x767e608, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0161.395] WbemDefPath:IUnknown:Release (This=0x767e608) returned 0x2 [0161.395] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e570, puCount=0x515ea98 | out: puCount=0x515ea98*=0x0) returned 0x0 [0161.395] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e608, puCount=0x515ea98 | out: puCount=0x515ea98*=0x2) returned 0x0 [0161.395] WbemDefPath:IWbemPath:GetText (in: This=0x767e608, lFlags=16, puBuffLength=0x515ea94*=0x0, pszText=0x0 | out: puBuffLength=0x515ea94*=0xb, pszText=0x0) returned 0x0 [0161.395] WbemDefPath:IWbemPath:GetText (in: This=0x767e608, lFlags=16, puBuffLength=0x515ea94*=0xb, pszText="0000000000" | out: puBuffLength=0x515ea94*=0xb, pszText="root\\cimv2") returned 0x0 [0161.395] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x767e570) returned 0x0 [0161.395] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e608, puCount=0x515eacc | out: puCount=0x515eacc*=0x2) returned 0x0 [0161.396] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x767e608, uIndex=0x0, puNameBufLength=0x515eac8*=0x0, pName=0x0 | out: puNameBufLength=0x515eac8*=0x5, pName=0x0) returned 0x0 [0161.396] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x767e608, uIndex=0x0, puNameBufLength=0x515eac8*=0x5, pName="0000" | out: puNameBufLength=0x515eac8*=0x5, pName="root") returned 0x0 [0161.396] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x767e570, uIndex=0x0, pszName="root") returned 0x0 [0161.396] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x767e608, uIndex=0x1, puNameBufLength=0x515eac8*=0x0, pName=0x0 | out: puNameBufLength=0x515eac8*=0x6, pName=0x0) returned 0x0 [0161.396] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x767e608, uIndex=0x1, puNameBufLength=0x515eac8*=0x6, pName="00000" | out: puNameBufLength=0x515eac8*=0x6, pName="cimv2") returned 0x0 [0161.396] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x767e570, uIndex=0x1, pszName="cimv2") returned 0x0 [0161.396] WbemDefPath:IWbemPath:GetClassName (in: This=0x767e570, puBuffLength=0x515eaec*=0x0, pszName=0x0 | out: puBuffLength=0x515eaec*=0x0, pszName=0x0) returned 0x8004103a [0161.396] WbemDefPath:IWbemPath:SetClassName (This=0x767e570, Name="Win32_ShadowCopy") returned 0x0 [0161.396] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e570, puCount=0x515eb00 | out: puCount=0x515eb00*=0x2) returned 0x0 [0161.396] WbemDefPath:IWbemPath:GetText (in: This=0x767e570, lFlags=4, puBuffLength=0x515eafc*=0x0, pszText=0x0 | out: puBuffLength=0x515eafc*=0x27, pszText=0x0) returned 0x0 [0161.396] WbemDefPath:IWbemPath:GetText (in: This=0x767e570, lFlags=4, puBuffLength=0x515eafc*=0x27, pszText="00000000000000000000000000000000000000" | out: puBuffLength=0x515eafc*=0x27, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy") returned 0x0 [0161.405] WbemDefPath:IWbemPath:GetInfo (in: This=0x767e570, uRequestedInfo=0x0, puResponse=0x515eb04 | out: puResponse=0x515eb04*=0x20c16) returned 0x0 [0161.405] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e570, puCount=0x515eb00 | out: puCount=0x515eb00*=0x2) returned 0x0 [0161.405] WbemDefPath:IWbemPath:GetText (in: This=0x767e570, lFlags=8, puBuffLength=0x515eafc*=0x0, pszText=0x0 | out: puBuffLength=0x515eafc*=0x16, pszText=0x0) returned 0x0 [0161.405] WbemDefPath:IWbemPath:GetText (in: This=0x767e570, lFlags=8, puBuffLength=0x515eafc*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x515eafc*=0x16, pszText="\\\\CRH2YWU7\\root\\cimv2") returned 0x0 [0161.406] WbemDefPath:IWbemPath:GetInfo (in: This=0x767e570, uRequestedInfo=0x0, puResponse=0x515eb04 | out: puResponse=0x515eb04*=0x20c16) returned 0x0 [0161.406] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515eaa0 | out: ppv=0x515eaa0*=0x205794) returned 0x0 [0161.406] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea98 | out: pAptType=0x515ea98*=1) returned 0x0 [0161.406] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea9c | out: ppvObject=0x515ea9c*=0x0) returned 0x80004002 [0161.407] IUnknown:Release (This=0x205794) returned 0x1 [0161.407] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e5b8 | out: ppv=0x515e5b8*=0x7681690) returned 0x0 [0161.407] WbemDefPath:IUnknown:QueryInterface (in: This=0x7681690, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e3e8 | out: ppvObject=0x515e3e8*=0x0) returned 0x80004002 [0161.407] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7681690, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e420 | out: ppvObject=0x515e420*=0x76816a0) returned 0x0 [0161.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x76816a0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c4 | out: ppvObject=0x515e1c4*=0x76816a0) returned 0x0 [0161.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x76816a0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e180 | out: ppvObject=0x515e180*=0x0) returned 0x80004002 [0161.408] WbemDefPath:IUnknown:AddRef (This=0x76816a0) returned 0x3 [0161.408] CoGetContextToken (in: pToken=0x515e00c | out: pToken=0x515e00c) returned 0x0 [0161.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x76816a0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dff4 | out: ppvObject=0x515dff4*=0x7536a58) returned 0x0 [0161.409] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536a58, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dffc | out: pCid=0x515dffc*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0161.409] WbemDefPath:IUnknown:Release (This=0x7536a58) returned 0x3 [0161.409] CoGetContextToken (in: pToken=0x515e004 | out: pToken=0x515e004) returned 0x0 [0161.409] WbemDefPath:IUnknown:AddRef (This=0x76816a0) returned 0x4 [0161.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x76816a0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e078 | out: ppvObject=0x515e078*=0x0) returned 0x80004002 [0161.410] WbemDefPath:IUnknown:Release (This=0x76816a0) returned 0x3 [0161.410] WbemDefPath:IUnknown:Release (This=0x76816a0) returned 0x2 [0161.410] WbemDefPath:IUnknown:Release (This=0x7681690) returned 0x0 [0161.410] WbemDefPath:IUnknown:Release (This=0x76816a0) returned 0x1 [0161.410] CoGetContextToken (in: pToken=0x515e8b4 | out: pToken=0x515e8b4) returned 0x0 [0161.410] CoGetContextToken (in: pToken=0x515e874 | out: pToken=0x515e874) returned 0x0 [0161.410] WbemDefPath:IUnknown:AddRef (This=0x76816a0) returned 0x2 [0161.411] WbemDefPath:IUnknown:QueryInterface (in: This=0x76816a0, riid=0x515e8f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e8ec | out: ppvObject=0x515e8ec*=0x76816a0) returned 0x0 [0161.411] WbemDefPath:IUnknown:Release (This=0x76816a0) returned 0x2 [0161.411] WbemDefPath:IUnknown:Release (This=0x76816a0) returned 0x1 [0161.411] CoGetContextToken (in: pToken=0x515e934 | out: pToken=0x515e934) returned 0x0 [0161.411] CoGetContextToken (in: pToken=0x515e8f4 | out: pToken=0x515e8f4) returned 0x0 [0161.411] WbemDefPath:IUnknown:AddRef (This=0x76816a0) returned 0x2 [0161.411] WbemDefPath:IUnknown:QueryInterface (in: This=0x76816a0, riid=0x515e970*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e96c | out: ppvObject=0x515e96c*=0x76816a0) returned 0x0 [0161.412] WbemDefPath:IUnknown:Release (This=0x76816a0) returned 0x2 [0161.412] WbemDefPath:IUnknown:AddRef (This=0x76816a0) returned 0x3 [0161.412] WbemDefPath:IWbemPath:SetText (This=0x76816a0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2") returned 0x0 [0161.412] WbemDefPath:IUnknown:Release (This=0x76816a0) returned 0x2 [0161.412] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76816a0, puCount=0x515ead8 | out: puCount=0x515ead8*=0x2) returned 0x0 [0161.412] WbemDefPath:IWbemPath:GetText (in: This=0x76816a0, lFlags=4, puBuffLength=0x515ead4*=0x0, pszText=0x0 | out: puBuffLength=0x515ead4*=0x16, pszText=0x0) returned 0x0 [0161.412] WbemDefPath:IWbemPath:GetText (in: This=0x76816a0, lFlags=4, puBuffLength=0x515ead4*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x515ead4*=0x16, pszText="\\\\CRH2YWU7\\root\\cimv2") returned 0x0 [0161.412] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eaf8 | out: puCount=0x515eaf8*=0x2) returned 0x0 [0161.412] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eaf4*=0x0, pszText=0x0 | out: puBuffLength=0x515eaf4*=0x17, pszText=0x0) returned 0x0 [0161.412] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eaf4*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eaf4*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0161.413] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eaa0 | out: puCount=0x515eaa0*=0x2) returned 0x0 [0161.413] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ea9c*=0x0, pszText=0x0 | out: puBuffLength=0x515ea9c*=0x17, pszText=0x0) returned 0x0 [0161.413] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ea9c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ea9c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0161.413] CoGetContextToken (in: pToken=0x515e978 | out: pToken=0x515e978) returned 0x0 [0161.413] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0161.413] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e59c | out: ppvObject=0x515e59c*=0x2ea9f4) returned 0x0 [0161.414] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0161.414] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0161.418] WbemDefPath:IWbemPath:GetText (in: This=0x767e570, lFlags=2, puBuffLength=0x515eaa4*=0x0, pszText=0x0 | out: puBuffLength=0x515eaa4*=0x11, pszText=0x0) returned 0x0 [0161.421] WbemDefPath:IWbemPath:GetText (in: This=0x767e570, lFlags=2, puBuffLength=0x515eaa4*=0x11, pszText="0000000000000000" | out: puBuffLength=0x515eaa4*=0x11, pszText="Win32_ShadowCopy") returned 0x0 [0161.442] CoGetContextToken (in: pToken=0x515e6dc | out: pToken=0x515e6dc) returned 0x0 [0161.442] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0161.442] IWbemServices:GetObject (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy", lFlags=0, pCtx=0x0, ppObject=0x515e850*=0x0, ppCallResult=0x0 | out: ppObject=0x515e850*=0x767e6a0, ppCallResult=0x0) returned 0x0 [0162.834] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0162.835] IWbemClassObject:Get (in: This=0x767e6a0, wszName="__PATH", lFlags=0, pVal=0x515ea08*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eaec*=0, plFlavor=0x515eae8*=0 | out: pVal=0x515ea08*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy", varVal2=0x0), pType=0x515eaec*=8, plFlavor=0x515eae8*=64) returned 0x0 [0162.835] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy") returned 0x26 [0162.836] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x205794) returned 0x0 [0162.836] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea38 | out: pAptType=0x515ea38*=1) returned 0x0 [0162.836] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea3c | out: ppvObject=0x515ea3c*=0x0) returned 0x80004002 [0162.836] IUnknown:Release (This=0x205794) returned 0x1 [0162.838] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e558 | out: ppv=0x515e558*=0x7681690) returned 0x0 [0162.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x7681690, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e388 | out: ppvObject=0x515e388*=0x0) returned 0x80004002 [0162.839] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7681690, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3c0 | out: ppvObject=0x515e3c0*=0x767e898) returned 0x0 [0162.839] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e898, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e164 | out: ppvObject=0x515e164*=0x767e898) returned 0x0 [0162.840] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e898, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e120 | out: ppvObject=0x515e120*=0x0) returned 0x80004002 [0162.841] WbemDefPath:IUnknown:AddRef (This=0x767e898) returned 0x3 [0162.841] CoGetContextToken (in: pToken=0x515dfac | out: pToken=0x515dfac) returned 0x0 [0162.841] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e898, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df94 | out: ppvObject=0x515df94*=0x7536a88) returned 0x0 [0162.842] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536a88, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515df9c | out: pCid=0x515df9c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0162.842] WbemDefPath:IUnknown:Release (This=0x7536a88) returned 0x3 [0162.842] CoGetContextToken (in: pToken=0x515dfa4 | out: pToken=0x515dfa4) returned 0x0 [0162.842] WbemDefPath:IUnknown:AddRef (This=0x767e898) returned 0x4 [0162.843] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e898, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e018 | out: ppvObject=0x515e018*=0x0) returned 0x80004002 [0162.843] WbemDefPath:IUnknown:Release (This=0x767e898) returned 0x3 [0162.843] WbemDefPath:IUnknown:Release (This=0x767e898) returned 0x2 [0162.844] WbemDefPath:IUnknown:Release (This=0x7681690) returned 0x0 [0162.844] WbemDefPath:IUnknown:Release (This=0x767e898) returned 0x1 [0162.845] CoGetContextToken (in: pToken=0x515e854 | out: pToken=0x515e854) returned 0x0 [0162.845] CoGetContextToken (in: pToken=0x515e814 | out: pToken=0x515e814) returned 0x0 [0162.845] WbemDefPath:IUnknown:AddRef (This=0x767e898) returned 0x2 [0162.845] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e898, riid=0x515e890*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e88c | out: ppvObject=0x515e88c*=0x767e898) returned 0x0 [0162.846] WbemDefPath:IUnknown:Release (This=0x767e898) returned 0x2 [0162.846] WbemDefPath:IUnknown:Release (This=0x767e898) returned 0x1 [0162.846] CoGetContextToken (in: pToken=0x515e8d4 | out: pToken=0x515e8d4) returned 0x0 [0162.846] CoGetContextToken (in: pToken=0x515e894 | out: pToken=0x515e894) returned 0x0 [0162.847] WbemDefPath:IUnknown:AddRef (This=0x767e898) returned 0x2 [0162.847] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e898, riid=0x515e910*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e90c | out: ppvObject=0x515e90c*=0x767e898) returned 0x0 [0162.847] WbemDefPath:IUnknown:Release (This=0x767e898) returned 0x2 [0162.848] WbemDefPath:IUnknown:AddRef (This=0x767e898) returned 0x3 [0162.848] WbemDefPath:IWbemPath:SetText (This=0x767e898, uMode=0x4, pszPath="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy") returned 0x0 [0162.848] WbemDefPath:IUnknown:Release (This=0x767e898) returned 0x2 [0162.849] IWbemClassObject:Get (in: This=0x767e6a0, wszName="__SERVER", lFlags=0, pVal=0x515ea40*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eaf8*=0, plFlavor=0x515eaf4*=0 | out: pVal=0x515ea40*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x515eaf8*=8, plFlavor=0x515eaf4*=64) returned 0x0 [0162.849] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0162.849] IWbemClassObject:Get (in: This=0x767e6a0, wszName="__NAMESPACE", lFlags=0, pVal=0x515ea40*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eaf8*=8, plFlavor=0x515eaf4*=64 | out: pVal=0x515ea40*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x515eaf8*=8, plFlavor=0x515eaf4*=64) returned 0x0 [0162.850] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0162.850] IWbemClassObject:Get (in: This=0x767e6a0, wszName="__CLASS", lFlags=0, pVal=0x515ea40*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eaf8*=8, plFlavor=0x515eaf4*=64 | out: pVal=0x515ea40*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x515eaf8*=8, plFlavor=0x515eaf4*=64) returned 0x0 [0162.850] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0162.851] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea20 | out: ppv=0x515ea20*=0x205794) returned 0x0 [0162.851] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea18 | out: pAptType=0x515ea18*=1) returned 0x0 [0162.851] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea1c | out: ppvObject=0x515ea1c*=0x0) returned 0x80004002 [0162.851] IUnknown:Release (This=0x205794) returned 0x1 [0162.852] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e538 | out: ppv=0x515e538*=0x7681690) returned 0x0 [0162.852] WbemDefPath:IUnknown:QueryInterface (in: This=0x7681690, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e368 | out: ppvObject=0x515e368*=0x0) returned 0x80004002 [0162.853] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7681690, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3a0 | out: ppvObject=0x515e3a0*=0x767e960) returned 0x0 [0162.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e960, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e144 | out: ppvObject=0x515e144*=0x767e960) returned 0x0 [0162.854] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e960, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e100 | out: ppvObject=0x515e100*=0x0) returned 0x80004002 [0162.855] WbemDefPath:IUnknown:AddRef (This=0x767e960) returned 0x3 [0162.855] CoGetContextToken (in: pToken=0x515df8c | out: pToken=0x515df8c) returned 0x0 [0162.855] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e960, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df74 | out: ppvObject=0x515df74*=0x7536ac8) returned 0x0 [0162.855] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536ac8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515df7c | out: pCid=0x515df7c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0162.855] WbemDefPath:IUnknown:Release (This=0x7536ac8) returned 0x3 [0162.856] CoGetContextToken (in: pToken=0x515df84 | out: pToken=0x515df84) returned 0x0 [0162.856] WbemDefPath:IUnknown:AddRef (This=0x767e960) returned 0x4 [0162.856] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e960, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dff8 | out: ppvObject=0x515dff8*=0x0) returned 0x80004002 [0162.857] WbemDefPath:IUnknown:Release (This=0x767e960) returned 0x3 [0162.858] WbemDefPath:IUnknown:Release (This=0x767e960) returned 0x2 [0162.858] WbemDefPath:IUnknown:Release (This=0x7681690) returned 0x0 [0162.858] WbemDefPath:IUnknown:Release (This=0x767e960) returned 0x1 [0162.859] CoGetContextToken (in: pToken=0x515e834 | out: pToken=0x515e834) returned 0x0 [0162.859] CoGetContextToken (in: pToken=0x515e7f4 | out: pToken=0x515e7f4) returned 0x0 [0162.859] WbemDefPath:IUnknown:AddRef (This=0x767e960) returned 0x2 [0162.859] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e960, riid=0x515e870*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e86c | out: ppvObject=0x515e86c*=0x767e960) returned 0x0 [0162.859] WbemDefPath:IUnknown:Release (This=0x767e960) returned 0x2 [0162.860] WbemDefPath:IUnknown:Release (This=0x767e960) returned 0x1 [0162.860] CoGetContextToken (in: pToken=0x515e8b4 | out: pToken=0x515e8b4) returned 0x0 [0162.860] CoGetContextToken (in: pToken=0x515e874 | out: pToken=0x515e874) returned 0x0 [0162.860] WbemDefPath:IUnknown:AddRef (This=0x767e960) returned 0x2 [0162.861] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e960, riid=0x515e8f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e8ec | out: ppvObject=0x515e8ec*=0x767e960) returned 0x0 [0162.861] WbemDefPath:IUnknown:Release (This=0x767e960) returned 0x2 [0162.861] WbemDefPath:IUnknown:AddRef (This=0x767e960) returned 0x3 [0162.862] WbemDefPath:IWbemPath:SetText (This=0x767e960, uMode=0x4, pszPath="") returned 0x0 [0162.862] WbemDefPath:IUnknown:Release (This=0x767e960) returned 0x2 [0162.862] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea20 | out: ppv=0x515ea20*=0x205794) returned 0x0 [0162.862] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea18 | out: pAptType=0x515ea18*=1) returned 0x0 [0162.862] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea1c | out: ppvObject=0x515ea1c*=0x0) returned 0x80004002 [0162.863] IUnknown:Release (This=0x205794) returned 0x1 [0162.863] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e538 | out: ppv=0x515e538*=0x7681690) returned 0x0 [0163.914] WbemDefPath:IUnknown:QueryInterface (in: This=0x7681690, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e368 | out: ppvObject=0x515e368*=0x0) returned 0x80004002 [0163.914] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7681690, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3a0 | out: ppvObject=0x515e3a0*=0x767e9d0) returned 0x0 [0163.914] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e9d0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e144 | out: ppvObject=0x515e144*=0x767e9d0) returned 0x0 [0163.914] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e9d0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e100 | out: ppvObject=0x515e100*=0x0) returned 0x80004002 [0163.915] WbemDefPath:IUnknown:AddRef (This=0x767e9d0) returned 0x3 [0163.915] CoGetContextToken (in: pToken=0x515df8c | out: pToken=0x515df8c) returned 0x0 [0163.915] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e9d0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df74 | out: ppvObject=0x515df74*=0x7536ad8) returned 0x0 [0163.916] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536ad8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515df7c | out: pCid=0x515df7c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0163.916] WbemDefPath:IUnknown:Release (This=0x7536ad8) returned 0x3 [0163.916] CoGetContextToken (in: pToken=0x515df84 | out: pToken=0x515df84) returned 0x0 [0163.916] WbemDefPath:IUnknown:AddRef (This=0x767e9d0) returned 0x4 [0163.916] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e9d0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dff8 | out: ppvObject=0x515dff8*=0x0) returned 0x80004002 [0163.917] WbemDefPath:IUnknown:Release (This=0x767e9d0) returned 0x3 [0163.917] WbemDefPath:IUnknown:Release (This=0x767e9d0) returned 0x2 [0163.917] WbemDefPath:IUnknown:Release (This=0x7681690) returned 0x0 [0163.917] WbemDefPath:IUnknown:Release (This=0x767e9d0) returned 0x1 [0163.917] CoGetContextToken (in: pToken=0x515e834 | out: pToken=0x515e834) returned 0x0 [0163.917] CoGetContextToken (in: pToken=0x515e7f4 | out: pToken=0x515e7f4) returned 0x0 [0163.917] WbemDefPath:IUnknown:AddRef (This=0x767e9d0) returned 0x2 [0163.918] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e9d0, riid=0x515e870*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e86c | out: ppvObject=0x515e86c*=0x767e9d0) returned 0x0 [0163.918] WbemDefPath:IUnknown:Release (This=0x767e9d0) returned 0x2 [0163.918] WbemDefPath:IUnknown:Release (This=0x767e9d0) returned 0x1 [0163.918] CoGetContextToken (in: pToken=0x515e8b4 | out: pToken=0x515e8b4) returned 0x0 [0163.918] CoGetContextToken (in: pToken=0x515e874 | out: pToken=0x515e874) returned 0x0 [0163.918] WbemDefPath:IUnknown:AddRef (This=0x767e9d0) returned 0x2 [0163.918] WbemDefPath:IUnknown:QueryInterface (in: This=0x767e9d0, riid=0x515e8f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e8ec | out: ppvObject=0x515e8ec*=0x767e9d0) returned 0x0 [0163.918] WbemDefPath:IUnknown:Release (This=0x767e9d0) returned 0x2 [0163.919] WbemDefPath:IUnknown:AddRef (This=0x767e9d0) returned 0x3 [0163.919] WbemDefPath:IWbemPath:SetText (This=0x767e9d0, uMode=0x4, pszPath="") returned 0x0 [0163.919] WbemDefPath:IUnknown:Release (This=0x767e9d0) returned 0x2 [0163.919] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e9d0, puCount=0x515ea74 | out: puCount=0x515ea74*=0x0) returned 0x0 [0163.919] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e960, puCount=0x515ea74 | out: puCount=0x515ea74*=0x0) returned 0x0 [0163.919] WbemDefPath:IWbemPath:GetClassName (in: This=0x767e9d0, puBuffLength=0x515eac8*=0x0, pszName=0x0 | out: puBuffLength=0x515eac8*=0x0, pszName=0x0) returned 0x8004103a [0163.919] WbemDefPath:IWbemPath:GetServer (in: This=0x767e9d0, puNameBufLength=0x515eacc*=0x0, pName=0x0 | out: puNameBufLength=0x515eacc*=0x0, pName=0x0) returned 0x80041009 [0163.919] WbemDefPath:IWbemPath:SetServer (This=0x767e9d0, Name="CRH2YWU7") returned 0x0 [0163.919] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea20 | out: ppv=0x515ea20*=0x205794) returned 0x0 [0163.919] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ea18 | out: pAptType=0x515ea18*=1) returned 0x0 [0163.919] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ea1c | out: ppvObject=0x515ea1c*=0x0) returned 0x80004002 [0163.920] IUnknown:Release (This=0x205794) returned 0x1 [0163.920] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e538 | out: ppv=0x515e538*=0x7681690) returned 0x0 [0163.920] WbemDefPath:IUnknown:QueryInterface (in: This=0x7681690, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e368 | out: ppvObject=0x515e368*=0x0) returned 0x80004002 [0163.921] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7681690, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3a0 | out: ppvObject=0x515e3a0*=0x7683050) returned 0x0 [0163.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683050, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e144 | out: ppvObject=0x515e144*=0x7683050) returned 0x0 [0163.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683050, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e100 | out: ppvObject=0x515e100*=0x0) returned 0x80004002 [0163.923] WbemDefPath:IUnknown:AddRef (This=0x7683050) returned 0x3 [0163.924] CoGetContextToken (in: pToken=0x515df8c | out: pToken=0x515df8c) returned 0x0 [0163.924] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683050, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df74 | out: ppvObject=0x515df74*=0x7536ae8) returned 0x0 [0163.924] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536ae8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515df7c | out: pCid=0x515df7c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0163.924] WbemDefPath:IUnknown:Release (This=0x7536ae8) returned 0x3 [0163.924] CoGetContextToken (in: pToken=0x515df84 | out: pToken=0x515df84) returned 0x0 [0163.924] WbemDefPath:IUnknown:AddRef (This=0x7683050) returned 0x4 [0163.924] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683050, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dff8 | out: ppvObject=0x515dff8*=0x0) returned 0x80004002 [0163.925] WbemDefPath:IUnknown:Release (This=0x7683050) returned 0x3 [0163.925] WbemDefPath:IUnknown:Release (This=0x7683050) returned 0x2 [0163.925] WbemDefPath:IUnknown:Release (This=0x7681690) returned 0x0 [0163.926] WbemDefPath:IUnknown:Release (This=0x7683050) returned 0x1 [0163.926] CoGetContextToken (in: pToken=0x515e834 | out: pToken=0x515e834) returned 0x0 [0163.926] CoGetContextToken (in: pToken=0x515e7f4 | out: pToken=0x515e7f4) returned 0x0 [0163.926] WbemDefPath:IUnknown:AddRef (This=0x7683050) returned 0x2 [0163.926] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683050, riid=0x515e870*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e86c | out: ppvObject=0x515e86c*=0x7683050) returned 0x0 [0163.926] WbemDefPath:IUnknown:Release (This=0x7683050) returned 0x2 [0163.927] WbemDefPath:IUnknown:Release (This=0x7683050) returned 0x1 [0163.927] CoGetContextToken (in: pToken=0x515e8b4 | out: pToken=0x515e8b4) returned 0x0 [0163.927] CoGetContextToken (in: pToken=0x515e874 | out: pToken=0x515e874) returned 0x0 [0163.927] WbemDefPath:IUnknown:AddRef (This=0x7683050) returned 0x2 [0163.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683050, riid=0x515e8f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e8ec | out: ppvObject=0x515e8ec*=0x7683050) returned 0x0 [0163.928] WbemDefPath:IUnknown:Release (This=0x7683050) returned 0x2 [0163.928] WbemDefPath:IUnknown:AddRef (This=0x7683050) returned 0x3 [0163.928] WbemDefPath:IWbemPath:SetText (This=0x7683050, uMode=0x4, pszPath="ROOT\\cimv2") returned 0x0 [0163.928] WbemDefPath:IUnknown:Release (This=0x7683050) returned 0x2 [0163.928] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e9d0, puCount=0x515ea74 | out: puCount=0x515ea74*=0x0) returned 0x0 [0163.928] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7683050, puCount=0x515ea74 | out: puCount=0x515ea74*=0x2) returned 0x0 [0163.928] WbemDefPath:IWbemPath:GetText (in: This=0x7683050, lFlags=16, puBuffLength=0x515ea70*=0x0, pszText=0x0 | out: puBuffLength=0x515ea70*=0xb, pszText=0x0) returned 0x0 [0163.928] WbemDefPath:IWbemPath:GetText (in: This=0x7683050, lFlags=16, puBuffLength=0x515ea70*=0xb, pszText="0000000000" | out: puBuffLength=0x515ea70*=0xb, pszText="ROOT\\cimv2") returned 0x0 [0163.928] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x767e9d0) returned 0x0 [0163.929] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7683050, puCount=0x515eaa8 | out: puCount=0x515eaa8*=0x2) returned 0x0 [0163.929] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x7683050, uIndex=0x0, puNameBufLength=0x515eaa4*=0x0, pName=0x0 | out: puNameBufLength=0x515eaa4*=0x5, pName=0x0) returned 0x0 [0163.929] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x7683050, uIndex=0x0, puNameBufLength=0x515eaa4*=0x5, pName="0000" | out: puNameBufLength=0x515eaa4*=0x5, pName="ROOT") returned 0x0 [0163.929] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x767e9d0, uIndex=0x0, pszName="ROOT") returned 0x0 [0163.929] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x7683050, uIndex=0x1, puNameBufLength=0x515eaa4*=0x0, pName=0x0 | out: puNameBufLength=0x515eaa4*=0x6, pName=0x0) returned 0x0 [0163.929] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x7683050, uIndex=0x1, puNameBufLength=0x515eaa4*=0x6, pName="00000" | out: puNameBufLength=0x515eaa4*=0x6, pName="cimv2") returned 0x0 [0163.929] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x767e9d0, uIndex=0x1, pszName="cimv2") returned 0x0 [0163.929] WbemDefPath:IWbemPath:GetClassName (in: This=0x767e9d0, puBuffLength=0x515eac8*=0x0, pszName=0x0 | out: puBuffLength=0x515eac8*=0x0, pszName=0x0) returned 0x8004103a [0163.929] WbemDefPath:IWbemPath:SetClassName (This=0x767e9d0, Name="Win32_ShadowCopy") returned 0x0 [0163.929] IWbemClassObject:BeginMethodEnumeration (This=0x767e6a0, lEnumFlags=0) returned 0x0 [0163.930] IWbemClassObject:NextMethod (in: This=0x767e6a0, lFlags=0, pstrName=0x515ea38*=0x0, ppInSignature=0x515eac0*=0x0, ppOutSignature=0x515eabc*=0x0 | out: pstrName=0x515ea38*="Create", ppInSignature=0x515eac0*=0x767ee40, ppOutSignature=0x515eabc*=0x76845c0) returned 0x0 [0163.930] SysStringByteLen (bstr="Create") returned 0xc [0163.930] SysStringByteLen (bstr="Create") returned 0xc [0163.930] IWbemClassObject:NextMethod (in: This=0x767e6a0, lFlags=0, pstrName=0x515ea38*=0x0, ppInSignature=0x515eac0*=0x0, ppOutSignature=0x515eabc*=0x0 | out: pstrName=0x515ea38*="Revert", ppInSignature=0x515eac0*=0x76849d0, ppOutSignature=0x515eabc*=0x7684d50) returned 0x0 [0163.931] SysStringByteLen (bstr="Revert") returned 0xc [0163.931] SysStringByteLen (bstr="Revert") returned 0xc [0163.931] IWbemClassObject:NextMethod (in: This=0x767e6a0, lFlags=0, pstrName=0x515ea38*=0x0, ppInSignature=0x515eac0*=0x0, ppOutSignature=0x515eabc*=0x0 | out: pstrName=0x515ea38*=0x0, ppInSignature=0x515eac0*=0x0, ppOutSignature=0x515eabc*=0x0) returned 0x40005 [0163.931] IWbemClassObject:EndMethodEnumeration (This=0x767e6a0) returned 0x0 [0163.933] IWbemClassObject:GetMethod (in: This=0x767e6a0, wszName="Create", lFlags=0, ppInSignature=0x515eacc, ppOutSignature=0x515eac8 | out: ppInSignature=0x515eacc*=0x76851d8, ppOutSignature=0x515eac8*=0x76856c8) returned 0x0 [0163.951] IWbemClassObject:GetMethodQualifierSet (in: This=0x767e6a0, wszMethod="Create", ppQualSet=0x515eac0 | out: ppQualSet=0x515eac0*=0x76858c0) returned 0x0 [0163.951] IWbemQualifierSet:Get (in: This=0x76858c0, wszName="static", lFlags=0, pVal=0x515ea34*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64dae5c*=0 | out: pVal=0x515ea34*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), plFlavor=0x64dae5c*=0) returned 0x0 [0163.952] IWbemClassObject:GetMethodQualifierSet (in: This=0x767e6a0, wszMethod="Create", ppQualSet=0x515eacc | out: ppQualSet=0x515eacc*=0x7685918) returned 0x0 [0163.952] IWbemQualifierSet:Get (in: This=0x7685918, wszName="static", lFlags=0, pVal=0x515ea40*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64dae5c*=0 | out: pVal=0x515ea40*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), plFlavor=0x64dae5c*=0) returned 0x0 [0163.954] IWbemClassObject:GetMethod (in: This=0x767e6a0, wszName="Revert", lFlags=0, ppInSignature=0x515eacc, ppOutSignature=0x515eac8 | out: ppInSignature=0x515eacc*=0x7685b88, ppOutSignature=0x515eac8*=0x7685f08) returned 0x0 [0163.955] IWbemClassObject:GetMethodQualifierSet (in: This=0x767e6a0, wszMethod="Revert", ppQualSet=0x515eac0 | out: ppQualSet=0x515eac0*=0x7686100) returned 0x0 [0163.955] IWbemQualifierSet:Get (in: This=0x7686100, wszName="static", lFlags=0, pVal=0x515ea34*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64daf3c*=0 | out: pVal=0x515ea34*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64daf3c*=0) returned 0x80041002 [0163.956] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x515ea10 | out: pperrinfo=0x515ea10*=0x0) returned 0x1 [0163.956] CoGetClassObject (in: rclsid=0x2dc2f4*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e8d0 | out: ppv=0x515e8d0*=0x767f038) returned 0x0 [0163.956] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767f038, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e700 | out: ppvObject=0x515e700*=0x0) returned 0x80004002 [0163.956] WbemStatusCodeText:IClassFactory:CreateInstance (in: This=0x767f038, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e738 | out: ppvObject=0x515e738*=0x767f048) returned 0x0 [0163.957] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767f048, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e4dc | out: ppvObject=0x515e4dc*=0x767f048) returned 0x0 [0163.957] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767f048, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e498 | out: ppvObject=0x515e498*=0x0) returned 0x80004002 [0163.958] WbemStatusCodeText:IUnknown:AddRef (This=0x767f048) returned 0x3 [0163.958] CoGetContextToken (in: pToken=0x515e324 | out: pToken=0x515e324) returned 0x0 [0163.958] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767f048, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x0) returned 0x80004002 [0163.958] CoGetContextToken (in: pToken=0x515e31c | out: pToken=0x515e31c) returned 0x0 [0163.958] WbemStatusCodeText:IUnknown:AddRef (This=0x767f048) returned 0x4 [0163.958] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767f048, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e390 | out: ppvObject=0x515e390*=0x0) returned 0x80004002 [0163.958] WbemStatusCodeText:IUnknown:Release (This=0x767f048) returned 0x3 [0163.959] WbemStatusCodeText:IUnknown:Release (This=0x767f048) returned 0x2 [0163.959] WbemStatusCodeText:IUnknown:Release (This=0x767f038) returned 0x0 [0163.959] WbemStatusCodeText:IUnknown:Release (This=0x767f048) returned 0x1 [0163.960] CoGetContextToken (in: pToken=0x515e828 | out: pToken=0x515e828) returned 0x0 [0163.960] CoGetContextToken (in: pToken=0x515e7e8 | out: pToken=0x515e7e8) returned 0x0 [0163.960] WbemStatusCodeText:IUnknown:AddRef (This=0x767f048) returned 0x2 [0163.960] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767f048, riid=0x515e864*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x515e860 | out: ppvObject=0x515e860*=0x767f048) returned 0x0 [0163.960] WbemStatusCodeText:IUnknown:Release (This=0x767f048) returned 0x2 [0163.960] WbemStatusCodeText:IUnknown:Release (This=0x767f048) returned 0x1 [0163.960] CoGetContextToken (in: pToken=0x515e7fc | out: pToken=0x515e7fc) returned 0x0 [0163.960] CoGetContextToken (in: pToken=0x515e7bc | out: pToken=0x515e7bc) returned 0x0 [0163.960] WbemStatusCodeText:IUnknown:AddRef (This=0x767f048) returned 0x2 [0163.961] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x767f048, riid=0x515e838*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x515e834 | out: ppvObject=0x515e834*=0x767f048) returned 0x0 [0163.961] WbemStatusCodeText:IUnknown:Release (This=0x767f048) returned 0x2 [0163.961] WbemStatusCodeText:IUnknown:AddRef (This=0x767f048) returned 0x3 [0163.961] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x767f048, hRes=0x80041002, LocaleId=0x0, lFlags=1, MessageText=0x515e96c | out: MessageText=0x515e96c*="Not found ") returned 0x0 [0163.961] SysStringByteLen (bstr="Not found ") returned 0x14 [0163.961] SysStringByteLen (bstr="Not found ") returned 0x14 [0163.962] WbemStatusCodeText:IUnknown:Release (This=0x767f048) returned 0x2 [0163.964] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767e9d0, puCount=0x515eb14 | out: puCount=0x515eb14*=0x2) returned 0x0 [0163.964] WbemDefPath:IWbemPath:GetText (in: This=0x767e9d0, lFlags=4, puBuffLength=0x515eb10*=0x0, pszText=0x0 | out: puBuffLength=0x515eb10*=0x27, pszText=0x0) returned 0x0 [0163.964] WbemDefPath:IWbemPath:GetText (in: This=0x767e9d0, lFlags=4, puBuffLength=0x515eb10*=0x27, pszText="00000000000000000000000000000000000000" | out: puBuffLength=0x515eb10*=0x27, pszText="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy") returned 0x0 [0163.966] IWbemClassObject:GetMethod (in: This=0x767e6a0, wszName="Revert", lFlags=0, ppInSignature=0x515eac0, ppOutSignature=0x515eabc | out: ppInSignature=0x515eac0*=0x7686370, ppOutSignature=0x515eabc*=0x76866f0) returned 0x0 [0163.966] IWbemClassObject:GetNames (in: This=0x7686370, wszQualifierName=0x0, lFlags=64, pQualifierVal=0x515ea18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515e9e4 | out: pNames=0x515e9e4*="\x01ƀ\x04") returned 0x0 [0163.966] SafeArrayGetDim (psa=0x2e5208) returned 0x1 [0163.966] SafeArrayGetDim (psa=0x2e5208) returned 0x1 [0163.966] SafeArrayGetLBound (in: psa=0x2e5208, nDim=0x1, plLbound=0x515e5e0 | out: plLbound=0x515e5e0) returned 0x0 [0163.967] IWbemClassObject:Get (in: This=0x7686370, wszName="ForceDismount", lFlags=0, pVal=0x515ea10*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db234*=0, plFlavor=0x64db238*=0 | out: pVal=0x515ea10*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db234*=11, plFlavor=0x64db238*=0) returned 0x0 [0163.968] IWbemClassObject:Get (in: This=0x7686370, wszName="ForceDismount", lFlags=0, pVal=0x515ea04*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db234*=11, plFlavor=0x64db238*=0 | out: pVal=0x515ea04*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db234*=11, plFlavor=0x64db238*=0) returned 0x0 [0163.968] IWbemClassObject:Get (in: This=0x7686370, wszName="ForceDismount", lFlags=0, pVal=0x515ea04*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db234*=11, plFlavor=0x64db238*=0 | out: pVal=0x515ea04*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db234*=11, plFlavor=0x64db238*=0) returned 0x0 [0163.968] IWbemClassObject:Get (in: This=0x7686370, wszName="ForceDismount", lFlags=0, pVal=0x515ea04*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db234*=11, plFlavor=0x64db238*=0 | out: pVal=0x515ea04*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db234*=11, plFlavor=0x64db238*=0) returned 0x0 [0163.970] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7686370, wszProperty="ForceDismount", ppQualSet=0x515eaa0 | out: ppQualSet=0x515eaa0*=0x7680448) returned 0x0 [0163.970] IWbemQualifierSet:Get (in: This=0x7680448, wszName="ID", lFlags=0, pVal=0x515ea14*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64db34c*=0 | out: pVal=0x515ea14*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64db34c*=17) returned 0x0 [0163.970] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7686370, wszProperty="ForceDismount", ppQualSet=0x515eaac | out: ppQualSet=0x515eaac*=0x7680498) returned 0x0 [0163.971] IWbemQualifierSet:Get (in: This=0x7680498, wszName="ID", lFlags=0, pVal=0x515ea20*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64db34c*=17 | out: pVal=0x515ea20*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64db34c*=17) returned 0x0 [0163.974] IWbemClassObject:GetMethod (in: This=0x767e6a0, wszName="Revert", lFlags=0, ppInSignature=0x515ea98, ppOutSignature=0x515ea94 | out: ppInSignature=0x515ea98*=0x7686b00, ppOutSignature=0x515ea94*=0x7686e80) returned 0x0 [0163.975] IWbemClassObject:GetNames (in: This=0x7686b00, wszQualifierName=0x0, lFlags=64, pQualifierVal=0x515e9f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515e9bc | out: pNames=0x515e9bc*="\x01ƀ\x04") returned 0x0 [0163.975] SafeArrayGetDim (psa=0x2e5298) returned 0x1 [0163.975] SafeArrayGetDim (psa=0x2e5298) returned 0x1 [0163.975] SafeArrayGetLBound (in: psa=0x2e5298, nDim=0x1, plLbound=0x515e5b8 | out: plLbound=0x515e5b8) returned 0x0 [0163.976] IWbemClassObject:Get (in: This=0x7686b00, wszName="ForceDismount", lFlags=0, pVal=0x515e9e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db67c*=0, plFlavor=0x64db680*=0 | out: pVal=0x515e9e8*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db67c*=11, plFlavor=0x64db680*=0) returned 0x0 [0163.976] IWbemClassObject:Get (in: This=0x7686b00, wszName="ForceDismount", lFlags=0, pVal=0x515e9dc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db67c*=11, plFlavor=0x64db680*=0 | out: pVal=0x515e9dc*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db67c*=11, plFlavor=0x64db680*=0) returned 0x0 [0163.977] IWbemClassObject:Get (in: This=0x7686b00, wszName="ForceDismount", lFlags=0, pVal=0x515e9dc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db67c*=11, plFlavor=0x64db680*=0 | out: pVal=0x515e9dc*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db67c*=11, plFlavor=0x64db680*=0) returned 0x0 [0163.977] IWbemClassObject:Get (in: This=0x7686b00, wszName="ForceDismount", lFlags=0, pVal=0x515e9dc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db67c*=11, plFlavor=0x64db680*=0 | out: pVal=0x515e9dc*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db67c*=11, plFlavor=0x64db680*=0) returned 0x0 [0163.979] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7686b00, wszProperty="ForceDismount", ppQualSet=0x515ea78 | out: ppQualSet=0x515ea78*=0x76804e8) returned 0x0 [0163.979] IWbemQualifierSet:Get (in: This=0x76804e8, wszName="ID", lFlags=0, pVal=0x515e9ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64db720*=0 | out: pVal=0x515e9ec*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64db720*=17) returned 0x0 [0163.979] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7686b00, wszProperty="ForceDismount", ppQualSet=0x515ea84 | out: ppQualSet=0x515ea84*=0x7680538) returned 0x0 [0163.980] IWbemQualifierSet:Get (in: This=0x7680538, wszName="ID", lFlags=0, pVal=0x515e9f8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64db720*=17 | out: pVal=0x515e9f8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64db720*=17) returned 0x0 [0163.998] IWbemClassObject:GetMethod (in: This=0x767e6a0, wszName="Revert", lFlags=0, ppInSignature=0x515ea98, ppOutSignature=0x515ea94 | out: ppInSignature=0x515ea98*=0x7687290, ppOutSignature=0x515ea94*=0x7687610) returned 0x0 [0163.999] IWbemClassObject:Get (in: This=0x7687290, wszName="ForceDismount", lFlags=0, pVal=0x515ea24*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db928*=0, plFlavor=0x64db92c*=0 | out: pVal=0x515ea24*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db928*=11, plFlavor=0x64db92c*=0) returned 0x0 [0163.999] IWbemClassObject:Get (in: This=0x7687290, wszName="ForceDismount", lFlags=0, pVal=0x515ea30*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64db928*=11, plFlavor=0x64db92c*=0 | out: pVal=0x515ea30*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64db928*=11, plFlavor=0x64db92c*=0) returned 0x0 [0165.410] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767ccd8, puCount=0x515eb1c | out: puCount=0x515eb1c*=0x2) returned 0x0 [0165.410] WbemDefPath:IWbemPath:GetText (in: This=0x767ccd8, lFlags=4, puBuffLength=0x515eb18*=0x0, pszText=0x0 | out: puBuffLength=0x515eb18*=0x53, pszText=0x0) returned 0x0 [0165.411] WbemDefPath:IWbemPath:GetText (in: This=0x767ccd8, lFlags=4, puBuffLength=0x515eb18*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515eb18*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x0 [0165.411] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eab0 | out: puCount=0x515eab0*=0x2) returned 0x0 [0165.411] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eaac*=0x0, pszText=0x0 | out: puBuffLength=0x515eaac*=0x17, pszText=0x0) returned 0x0 [0165.411] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eaac*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eaac*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0165.411] CoGetContextToken (in: pToken=0x515e9f4 | out: pToken=0x515e9f4) returned 0x0 [0165.411] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0165.411] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e618 | out: ppvObject=0x515e618*=0x2ea9f4) returned 0x0 [0165.411] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0165.411] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0165.412] IWbemClassObject:Get (in: This=0x767d268, wszName="__GENUS", lFlags=0, pVal=0x515ea6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eb20*=0, plFlavor=0x515eb1c*=0 | out: pVal=0x515ea6c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515eb20*=3, plFlavor=0x515eb1c*=64) returned 0x0 [0165.412] WbemDefPath:IWbemPath:GetText (in: This=0x767ccd8, lFlags=2, puBuffLength=0x515eb20*=0x0, pszText=0x0 | out: puBuffLength=0x515eb20*=0x3d, pszText=0x0) returned 0x0 [0165.412] WbemDefPath:IWbemPath:GetText (in: This=0x767ccd8, lFlags=2, puBuffLength=0x515eb20*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515eb20*=0x3d, pszText="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x0 [0165.415] CoGetContextToken (in: pToken=0x515e78c | out: pToken=0x515e78c) returned 0x0 [0165.415] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0165.415] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0191.417] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0191.418] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0191.418] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0191.418] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x7687808, puReturned=0x64d2d40*=0x1) returned 0x0 [0191.422] IUnknown:QueryInterface (in: This=0x7687808, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x7687808) returned 0x0 [0191.422] IUnknown:QueryInterface (in: This=0x7687808, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0191.422] IUnknown:QueryInterface (in: This=0x7687808, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0191.423] IUnknown:AddRef (This=0x7687808) returned 0x3 [0191.423] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0191.423] IUnknown:QueryInterface (in: This=0x7687808, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x768780c) returned 0x0 [0191.423] IMarshal:GetUnmarshalClass (in: This=0x768780c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0191.423] IUnknown:Release (This=0x768780c) returned 0x3 [0191.424] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0191.424] IUnknown:AddRef (This=0x7687808) returned 0x4 [0191.424] IUnknown:QueryInterface (in: This=0x7687808, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0191.424] IUnknown:Release (This=0x7687808) returned 0x3 [0191.424] IUnknown:Release (This=0x7687808) returned 0x2 [0191.424] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0191.425] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0191.425] IUnknown:AddRef (This=0x7687808) returned 0x3 [0191.425] IUnknown:QueryInterface (in: This=0x7687808, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x7687808) returned 0x0 [0191.425] IUnknown:Release (This=0x7687808) returned 0x3 [0191.425] IUnknown:Release (This=0x7687808) returned 0x2 [0191.425] IUnknown:Release (This=0x7687808) returned 0x1 [0191.425] IUnknown:Release (This=0x767d22c) returned 0x2 [0191.426] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0191.426] IUnknown:AddRef (This=0x7687808) returned 0x2 [0191.426] IWbemClassObject:Get (in: This=0x7687808, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0191.426] IWbemClassObject:Get (in: This=0x7687808, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0191.427] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x52 [0191.427] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0191.427] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0191.427] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0191.758] IUnknown:Release (This=0x205794) returned 0x1 [0191.760] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x767f038) returned 0x0 [0191.760] WbemDefPath:IUnknown:QueryInterface (in: This=0x767f038, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0191.760] WbemDefPath:IClassFactory:CreateInstance (in: This=0x767f038, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x76830c0) returned 0x0 [0191.761] WbemDefPath:IUnknown:QueryInterface (in: This=0x76830c0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x76830c0) returned 0x0 [0191.761] WbemDefPath:IUnknown:QueryInterface (in: This=0x76830c0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0191.762] WbemDefPath:IUnknown:AddRef (This=0x76830c0) returned 0x3 [0191.762] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0191.762] WbemDefPath:IUnknown:QueryInterface (in: This=0x76830c0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x7536c48) returned 0x0 [0191.762] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536c48, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0191.762] WbemDefPath:IUnknown:Release (This=0x7536c48) returned 0x3 [0191.762] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0191.763] WbemDefPath:IUnknown:AddRef (This=0x76830c0) returned 0x4 [0191.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x76830c0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0191.763] WbemDefPath:IUnknown:Release (This=0x76830c0) returned 0x3 [0191.763] WbemDefPath:IUnknown:Release (This=0x76830c0) returned 0x2 [0191.763] WbemDefPath:IUnknown:Release (This=0x767f038) returned 0x0 [0191.763] WbemDefPath:IUnknown:Release (This=0x76830c0) returned 0x1 [0191.764] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0191.764] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0191.764] WbemDefPath:IUnknown:AddRef (This=0x76830c0) returned 0x2 [0191.764] WbemDefPath:IUnknown:QueryInterface (in: This=0x76830c0, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x76830c0) returned 0x0 [0191.764] WbemDefPath:IUnknown:Release (This=0x76830c0) returned 0x2 [0191.764] WbemDefPath:IUnknown:Release (This=0x76830c0) returned 0x1 [0191.765] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0191.765] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0191.765] WbemDefPath:IUnknown:AddRef (This=0x76830c0) returned 0x2 [0191.765] WbemDefPath:IUnknown:QueryInterface (in: This=0x76830c0, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x76830c0) returned 0x0 [0191.765] WbemDefPath:IUnknown:Release (This=0x76830c0) returned 0x2 [0191.765] WbemDefPath:IUnknown:AddRef (This=0x76830c0) returned 0x3 [0191.765] WbemDefPath:IWbemPath:SetText (This=0x76830c0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x0 [0191.765] WbemDefPath:IUnknown:Release (This=0x76830c0) returned 0x2 [0191.766] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0191.766] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0191.766] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0191.766] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0191.766] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0191.767] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0191.767] IWbemClassObject:Get (in: This=0x7687808, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64fe49c*=0, plFlavor=0x64fe4a0*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64fe49c*=8, plFlavor=0x64fe4a0*=64) returned 0x0 [0191.767] SysStringLen (param_1="root\\cimv2") returned 0xa [0191.767] IWbemClassObject:Get (in: This=0x7687808, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64fe49c*=8, plFlavor=0x64fe4a0*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64fe49c*=8, plFlavor=0x64fe4a0*=64) returned 0x0 [0191.767] SysStringLen (param_1="root\\cimv2") returned 0xa [0191.767] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0191.767] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0191.767] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0191.768] IWbemClassObject:Get (in: This=0x7687808, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64fe554*=0, plFlavor=0x64fe558*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64fe554*=8, plFlavor=0x64fe558*=64) returned 0x0 [0191.768] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0191.768] IWbemClassObject:Get (in: This=0x7687808, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64fe554*=8, plFlavor=0x64fe558*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64fe554*=8, plFlavor=0x64fe558*=64) returned 0x0 [0191.768] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0191.774] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76830c0, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0191.774] WbemDefPath:IWbemPath:GetText (in: This=0x76830c0, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0191.774] WbemDefPath:IWbemPath:GetText (in: This=0x76830c0, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x0 [0191.775] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0191.775] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0191.775] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0191.775] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0191.775] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0191.775] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0191.775] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0191.776] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0191.776] IWbemClassObject:Get (in: This=0x7687808, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0191.776] WbemDefPath:IWbemPath:GetText (in: This=0x76830c0, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0191.776] WbemDefPath:IWbemPath:GetText (in: This=0x76830c0, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x0 [0191.776] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0191.776] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0191.776] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0222.272] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0222.276] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0222.276] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0222.276] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x7687d88, puReturned=0x64d2d40*=0x1) returned 0x0 [0222.613] IUnknown:QueryInterface (in: This=0x7687d88, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x7687d88) returned 0x0 [0222.613] IUnknown:QueryInterface (in: This=0x7687d88, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0222.614] IUnknown:QueryInterface (in: This=0x7687d88, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0222.614] IUnknown:AddRef (This=0x7687d88) returned 0x3 [0222.614] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0222.614] IUnknown:QueryInterface (in: This=0x7687d88, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x7687d8c) returned 0x0 [0222.615] IMarshal:GetUnmarshalClass (in: This=0x7687d8c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0222.615] IUnknown:Release (This=0x7687d8c) returned 0x3 [0222.615] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0222.615] IUnknown:AddRef (This=0x7687d88) returned 0x4 [0222.615] IUnknown:QueryInterface (in: This=0x7687d88, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0222.615] IUnknown:Release (This=0x7687d88) returned 0x3 [0222.615] IUnknown:Release (This=0x7687d88) returned 0x2 [0222.616] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0222.616] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0222.616] IUnknown:AddRef (This=0x7687d88) returned 0x3 [0222.616] IUnknown:QueryInterface (in: This=0x7687d88, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x7687d88) returned 0x0 [0222.616] IUnknown:Release (This=0x7687d88) returned 0x3 [0222.616] IUnknown:Release (This=0x7687d88) returned 0x2 [0222.616] IUnknown:Release (This=0x7687d88) returned 0x1 [0222.616] IUnknown:Release (This=0x767d22c) returned 0x2 [0222.617] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0222.617] IUnknown:AddRef (This=0x7687d88) returned 0x2 [0222.617] IWbemClassObject:Get (in: This=0x7687d88, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0222.617] IWbemClassObject:Get (in: This=0x7687d88, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0222.617] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x52 [0222.618] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0222.618] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0222.618] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0222.618] IUnknown:Release (This=0x205794) returned 0x1 [0222.619] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x767f058) returned 0x0 [0222.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x767f058, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0222.620] WbemDefPath:IClassFactory:CreateInstance (in: This=0x767f058, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x7683130) returned 0x0 [0222.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683130, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x7683130) returned 0x0 [0222.620] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683130, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0222.620] WbemDefPath:IUnknown:AddRef (This=0x7683130) returned 0x3 [0222.621] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0222.621] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683130, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x7536c88) returned 0x0 [0222.621] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536c88, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0222.621] WbemDefPath:IUnknown:Release (This=0x7536c88) returned 0x3 [0222.621] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0222.621] WbemDefPath:IUnknown:AddRef (This=0x7683130) returned 0x4 [0222.621] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683130, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0222.621] WbemDefPath:IUnknown:Release (This=0x7683130) returned 0x3 [0222.621] WbemDefPath:IUnknown:Release (This=0x7683130) returned 0x2 [0222.622] WbemDefPath:IUnknown:Release (This=0x767f058) returned 0x0 [0222.622] WbemDefPath:IUnknown:Release (This=0x7683130) returned 0x1 [0222.622] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0222.622] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0222.622] WbemDefPath:IUnknown:AddRef (This=0x7683130) returned 0x2 [0222.622] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683130, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x7683130) returned 0x0 [0222.622] WbemDefPath:IUnknown:Release (This=0x7683130) returned 0x2 [0222.622] WbemDefPath:IUnknown:Release (This=0x7683130) returned 0x1 [0222.623] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0222.623] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0222.623] WbemDefPath:IUnknown:AddRef (This=0x7683130) returned 0x2 [0222.623] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683130, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x7683130) returned 0x0 [0222.623] WbemDefPath:IUnknown:Release (This=0x7683130) returned 0x2 [0222.623] WbemDefPath:IUnknown:AddRef (This=0x7683130) returned 0x3 [0222.623] WbemDefPath:IWbemPath:SetText (This=0x7683130, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x0 [0222.623] WbemDefPath:IUnknown:Release (This=0x7683130) returned 0x2 [0222.623] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0222.623] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0222.623] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0222.624] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0222.624] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0222.624] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0222.625] IWbemClassObject:Get (in: This=0x7687d88, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6501954*=0, plFlavor=0x6501958*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6501954*=8, plFlavor=0x6501958*=64) returned 0x0 [0222.625] SysStringLen (param_1="root\\cimv2") returned 0xa [0222.625] IWbemClassObject:Get (in: This=0x7687d88, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6501954*=8, plFlavor=0x6501958*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6501954*=8, plFlavor=0x6501958*=64) returned 0x0 [0222.625] SysStringLen (param_1="root\\cimv2") returned 0xa [0222.625] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0222.625] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0222.625] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0222.625] IWbemClassObject:Get (in: This=0x7687d88, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6501a0c*=0, plFlavor=0x6501a10*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6501a0c*=8, plFlavor=0x6501a10*=64) returned 0x0 [0222.625] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0222.625] IWbemClassObject:Get (in: This=0x7687d88, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6501a0c*=8, plFlavor=0x6501a10*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6501a0c*=8, plFlavor=0x6501a10*=64) returned 0x0 [0222.625] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0222.628] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7683130, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0222.628] WbemDefPath:IWbemPath:GetText (in: This=0x7683130, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0222.628] WbemDefPath:IWbemPath:GetText (in: This=0x7683130, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x0 [0222.628] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0222.628] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0222.628] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0222.628] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0222.628] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0222.628] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0222.629] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0222.629] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0222.629] IWbemClassObject:Get (in: This=0x7687d88, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0222.629] WbemDefPath:IWbemPath:GetText (in: This=0x7683130, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0222.629] WbemDefPath:IWbemPath:GetText (in: This=0x7683130, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x0 [0222.629] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0222.629] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0222.629] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0227.367] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0227.367] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0227.367] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0227.367] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x7688318, puReturned=0x64d2d40*=0x1) returned 0x0 [0227.369] IUnknown:QueryInterface (in: This=0x7688318, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x7688318) returned 0x0 [0227.370] IUnknown:QueryInterface (in: This=0x7688318, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0227.370] IUnknown:QueryInterface (in: This=0x7688318, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0227.371] IUnknown:AddRef (This=0x7688318) returned 0x3 [0227.371] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0227.371] IUnknown:QueryInterface (in: This=0x7688318, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x768831c) returned 0x0 [0227.371] IMarshal:GetUnmarshalClass (in: This=0x768831c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0227.371] IUnknown:Release (This=0x768831c) returned 0x3 [0227.371] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0227.371] IUnknown:AddRef (This=0x7688318) returned 0x4 [0227.372] IUnknown:QueryInterface (in: This=0x7688318, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0227.372] IUnknown:Release (This=0x7688318) returned 0x3 [0227.372] IUnknown:Release (This=0x7688318) returned 0x2 [0227.372] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0227.372] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0227.372] IUnknown:AddRef (This=0x7688318) returned 0x3 [0227.372] IUnknown:QueryInterface (in: This=0x7688318, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x7688318) returned 0x0 [0227.372] IUnknown:Release (This=0x7688318) returned 0x3 [0227.373] IUnknown:Release (This=0x7688318) returned 0x2 [0227.373] IUnknown:Release (This=0x7688318) returned 0x1 [0227.373] IUnknown:Release (This=0x767d22c) returned 0x2 [0227.373] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0227.373] IUnknown:AddRef (This=0x7688318) returned 0x2 [0227.373] IWbemClassObject:Get (in: This=0x7688318, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0227.374] IWbemClassObject:Get (in: This=0x7688318, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0227.374] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x52 [0227.374] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0227.374] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0227.374] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0227.374] IUnknown:Release (This=0x205794) returned 0x1 [0227.375] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x7688308) returned 0x0 [0227.375] WbemDefPath:IUnknown:QueryInterface (in: This=0x7688308, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0227.375] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7688308, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x76831a0) returned 0x0 [0227.375] WbemDefPath:IUnknown:QueryInterface (in: This=0x76831a0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x76831a0) returned 0x0 [0227.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x76831a0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0227.376] WbemDefPath:IUnknown:AddRef (This=0x76831a0) returned 0x3 [0227.376] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0227.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x76831a0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x7536cc8) returned 0x0 [0227.377] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536cc8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0227.377] WbemDefPath:IUnknown:Release (This=0x7536cc8) returned 0x3 [0227.377] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0227.377] WbemDefPath:IUnknown:AddRef (This=0x76831a0) returned 0x4 [0227.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x76831a0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0227.377] WbemDefPath:IUnknown:Release (This=0x76831a0) returned 0x3 [0227.377] WbemDefPath:IUnknown:Release (This=0x76831a0) returned 0x2 [0227.378] WbemDefPath:IUnknown:Release (This=0x7688308) returned 0x0 [0227.378] WbemDefPath:IUnknown:Release (This=0x76831a0) returned 0x1 [0227.378] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0227.378] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0227.378] WbemDefPath:IUnknown:AddRef (This=0x76831a0) returned 0x2 [0227.378] WbemDefPath:IUnknown:QueryInterface (in: This=0x76831a0, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x76831a0) returned 0x0 [0227.378] WbemDefPath:IUnknown:Release (This=0x76831a0) returned 0x2 [0227.378] WbemDefPath:IUnknown:Release (This=0x76831a0) returned 0x1 [0227.379] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0227.379] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0227.379] WbemDefPath:IUnknown:AddRef (This=0x76831a0) returned 0x2 [0227.379] WbemDefPath:IUnknown:QueryInterface (in: This=0x76831a0, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x76831a0) returned 0x0 [0227.379] WbemDefPath:IUnknown:Release (This=0x76831a0) returned 0x2 [0227.379] WbemDefPath:IUnknown:AddRef (This=0x76831a0) returned 0x3 [0227.379] WbemDefPath:IWbemPath:SetText (This=0x76831a0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x0 [0227.379] WbemDefPath:IUnknown:Release (This=0x76831a0) returned 0x2 [0227.379] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0227.379] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0227.380] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0227.380] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0227.380] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0227.380] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0227.381] IWbemClassObject:Get (in: This=0x7688318, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6504e00*=0, plFlavor=0x6504e04*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6504e00*=8, plFlavor=0x6504e04*=64) returned 0x0 [0227.381] SysStringLen (param_1="root\\cimv2") returned 0xa [0227.381] IWbemClassObject:Get (in: This=0x7688318, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6504e00*=8, plFlavor=0x6504e04*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6504e00*=8, plFlavor=0x6504e04*=64) returned 0x0 [0227.381] SysStringLen (param_1="root\\cimv2") returned 0xa [0227.381] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0227.381] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0227.381] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0227.381] IWbemClassObject:Get (in: This=0x7688318, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6504eb8*=0, plFlavor=0x6504ebc*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6504eb8*=8, plFlavor=0x6504ebc*=64) returned 0x0 [0227.381] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0227.382] IWbemClassObject:Get (in: This=0x7688318, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6504eb8*=8, plFlavor=0x6504ebc*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6504eb8*=8, plFlavor=0x6504ebc*=64) returned 0x0 [0227.382] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0227.382] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76831a0, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0227.382] WbemDefPath:IWbemPath:GetText (in: This=0x76831a0, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0227.382] WbemDefPath:IWbemPath:GetText (in: This=0x76831a0, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x0 [0227.382] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0227.382] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0227.382] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0227.382] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0227.382] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0227.382] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0227.383] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0227.383] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0227.383] IWbemClassObject:Get (in: This=0x7688318, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0227.383] WbemDefPath:IWbemPath:GetText (in: This=0x76831a0, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0227.383] WbemDefPath:IWbemPath:GetText (in: This=0x76831a0, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x0 [0227.384] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0227.384] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0227.384] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0230.676] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0230.676] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0230.676] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0230.676] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x76888a8, puReturned=0x64d2d40*=0x1) returned 0x0 [0230.678] IUnknown:QueryInterface (in: This=0x76888a8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x76888a8) returned 0x0 [0230.679] IUnknown:QueryInterface (in: This=0x76888a8, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0230.679] IUnknown:QueryInterface (in: This=0x76888a8, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0230.679] IUnknown:AddRef (This=0x76888a8) returned 0x3 [0230.679] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0230.679] IUnknown:QueryInterface (in: This=0x76888a8, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x76888ac) returned 0x0 [0230.680] IMarshal:GetUnmarshalClass (in: This=0x76888ac, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0230.680] IUnknown:Release (This=0x76888ac) returned 0x3 [0230.680] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0230.680] IUnknown:AddRef (This=0x76888a8) returned 0x4 [0230.680] IUnknown:QueryInterface (in: This=0x76888a8, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0230.680] IUnknown:Release (This=0x76888a8) returned 0x3 [0230.680] IUnknown:Release (This=0x76888a8) returned 0x2 [0230.680] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0230.680] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0230.680] IUnknown:AddRef (This=0x76888a8) returned 0x3 [0230.681] IUnknown:QueryInterface (in: This=0x76888a8, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x76888a8) returned 0x0 [0230.681] IUnknown:Release (This=0x76888a8) returned 0x3 [0230.681] IUnknown:Release (This=0x76888a8) returned 0x2 [0230.681] IUnknown:Release (This=0x76888a8) returned 0x1 [0230.681] IUnknown:Release (This=0x767d22c) returned 0x2 [0230.681] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0230.681] IUnknown:AddRef (This=0x76888a8) returned 0x2 [0230.682] IWbemClassObject:Get (in: This=0x76888a8, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0230.682] IWbemClassObject:Get (in: This=0x76888a8, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0230.682] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x52 [0230.682] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0230.682] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0230.683] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0230.683] IUnknown:Release (This=0x205794) returned 0x1 [0230.683] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x7688898) returned 0x0 [0230.683] WbemDefPath:IUnknown:QueryInterface (in: This=0x7688898, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0230.684] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7688898, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x7683210) returned 0x0 [0230.684] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683210, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x7683210) returned 0x0 [0230.684] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683210, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0230.685] WbemDefPath:IUnknown:AddRef (This=0x7683210) returned 0x3 [0230.685] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0230.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683210, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x7536d08) returned 0x0 [0230.685] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7536d08, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0230.685] WbemDefPath:IUnknown:Release (This=0x7536d08) returned 0x3 [0230.685] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0230.685] WbemDefPath:IUnknown:AddRef (This=0x7683210) returned 0x4 [0230.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683210, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0230.686] WbemDefPath:IUnknown:Release (This=0x7683210) returned 0x3 [0230.686] WbemDefPath:IUnknown:Release (This=0x7683210) returned 0x2 [0230.686] WbemDefPath:IUnknown:Release (This=0x7688898) returned 0x0 [0230.686] WbemDefPath:IUnknown:Release (This=0x7683210) returned 0x1 [0230.686] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0230.686] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0230.686] WbemDefPath:IUnknown:AddRef (This=0x7683210) returned 0x2 [0230.686] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683210, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x7683210) returned 0x0 [0230.687] WbemDefPath:IUnknown:Release (This=0x7683210) returned 0x2 [0230.687] WbemDefPath:IUnknown:Release (This=0x7683210) returned 0x1 [0230.687] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0230.687] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0230.687] WbemDefPath:IUnknown:AddRef (This=0x7683210) returned 0x2 [0230.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683210, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x7683210) returned 0x0 [0230.687] WbemDefPath:IUnknown:Release (This=0x7683210) returned 0x2 [0230.687] WbemDefPath:IUnknown:AddRef (This=0x7683210) returned 0x3 [0230.687] WbemDefPath:IWbemPath:SetText (This=0x7683210, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x0 [0230.687] WbemDefPath:IUnknown:Release (This=0x7683210) returned 0x2 [0230.688] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0230.688] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0230.688] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0230.688] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0230.688] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0230.688] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0230.688] IWbemClassObject:Get (in: This=0x76888a8, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x65082ac*=0, plFlavor=0x65082b0*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x65082ac*=8, plFlavor=0x65082b0*=64) returned 0x0 [0230.688] SysStringLen (param_1="root\\cimv2") returned 0xa [0230.688] IWbemClassObject:Get (in: This=0x76888a8, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x65082ac*=8, plFlavor=0x65082b0*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x65082ac*=8, plFlavor=0x65082b0*=64) returned 0x0 [0230.688] SysStringLen (param_1="root\\cimv2") returned 0xa [0230.688] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0230.688] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0230.688] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0230.689] IWbemClassObject:Get (in: This=0x76888a8, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6508364*=0, plFlavor=0x6508368*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6508364*=8, plFlavor=0x6508368*=64) returned 0x0 [0230.689] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0230.689] IWbemClassObject:Get (in: This=0x76888a8, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6508364*=8, plFlavor=0x6508368*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6508364*=8, plFlavor=0x6508368*=64) returned 0x0 [0230.689] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0230.689] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7683210, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0230.689] WbemDefPath:IWbemPath:GetText (in: This=0x7683210, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0230.689] WbemDefPath:IWbemPath:GetText (in: This=0x7683210, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x0 [0230.689] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0230.689] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0230.689] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0230.689] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0230.689] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0230.689] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0230.690] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0230.690] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0230.690] IWbemClassObject:Get (in: This=0x76888a8, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0230.690] WbemDefPath:IWbemPath:GetText (in: This=0x7683210, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0230.690] WbemDefPath:IWbemPath:GetText (in: This=0x7683210, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x0 [0230.690] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0230.690] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0230.690] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0232.897] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0232.898] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0232.898] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0232.898] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x7688e38, puReturned=0x64d2d40*=0x1) returned 0x0 [0232.899] IUnknown:QueryInterface (in: This=0x7688e38, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x7688e38) returned 0x0 [0232.900] IUnknown:QueryInterface (in: This=0x7688e38, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0232.900] IUnknown:QueryInterface (in: This=0x7688e38, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0232.900] IUnknown:AddRef (This=0x7688e38) returned 0x3 [0232.900] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0232.900] IUnknown:QueryInterface (in: This=0x7688e38, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x7688e3c) returned 0x0 [0232.900] IMarshal:GetUnmarshalClass (in: This=0x7688e3c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0232.900] IUnknown:Release (This=0x7688e3c) returned 0x3 [0232.901] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0232.901] IUnknown:AddRef (This=0x7688e38) returned 0x4 [0232.901] IUnknown:QueryInterface (in: This=0x7688e38, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0232.901] IUnknown:Release (This=0x7688e38) returned 0x3 [0232.901] IUnknown:Release (This=0x7688e38) returned 0x2 [0232.901] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0232.901] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0232.901] IUnknown:AddRef (This=0x7688e38) returned 0x3 [0232.901] IUnknown:QueryInterface (in: This=0x7688e38, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x7688e38) returned 0x0 [0232.901] IUnknown:Release (This=0x7688e38) returned 0x3 [0232.901] IUnknown:Release (This=0x7688e38) returned 0x2 [0232.902] IUnknown:Release (This=0x7688e38) returned 0x1 [0232.902] IUnknown:Release (This=0x767d22c) returned 0x2 [0232.902] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0232.902] IUnknown:AddRef (This=0x7688e38) returned 0x2 [0232.902] IWbemClassObject:Get (in: This=0x7688e38, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0232.902] IWbemClassObject:Get (in: This=0x7688e38, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0232.902] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x52 [0232.902] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0232.902] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0232.903] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0232.903] IUnknown:Release (This=0x205794) returned 0x1 [0232.903] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x7688e28) returned 0x0 [0232.903] WbemDefPath:IUnknown:QueryInterface (in: This=0x7688e28, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0232.903] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7688e28, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x7683280) returned 0x0 [0232.903] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683280, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x7683280) returned 0x0 [0232.904] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683280, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0232.904] WbemDefPath:IUnknown:AddRef (This=0x7683280) returned 0x3 [0232.904] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0232.904] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683280, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x7539670) returned 0x0 [0232.904] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7539670, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0232.904] WbemDefPath:IUnknown:Release (This=0x7539670) returned 0x3 [0232.905] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0232.905] WbemDefPath:IUnknown:AddRef (This=0x7683280) returned 0x4 [0232.905] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683280, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0232.905] WbemDefPath:IUnknown:Release (This=0x7683280) returned 0x3 [0232.905] WbemDefPath:IUnknown:Release (This=0x7683280) returned 0x2 [0232.905] WbemDefPath:IUnknown:Release (This=0x7688e28) returned 0x0 [0232.905] WbemDefPath:IUnknown:Release (This=0x7683280) returned 0x1 [0232.905] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0232.906] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0232.906] WbemDefPath:IUnknown:AddRef (This=0x7683280) returned 0x2 [0232.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683280, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x7683280) returned 0x0 [0232.906] WbemDefPath:IUnknown:Release (This=0x7683280) returned 0x2 [0232.906] WbemDefPath:IUnknown:Release (This=0x7683280) returned 0x1 [0232.906] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0232.906] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0232.906] WbemDefPath:IUnknown:AddRef (This=0x7683280) returned 0x2 [0232.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683280, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x7683280) returned 0x0 [0232.906] WbemDefPath:IUnknown:Release (This=0x7683280) returned 0x2 [0232.907] WbemDefPath:IUnknown:AddRef (This=0x7683280) returned 0x3 [0232.907] WbemDefPath:IWbemPath:SetText (This=0x7683280, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x0 [0232.907] WbemDefPath:IUnknown:Release (This=0x7683280) returned 0x2 [0232.907] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0232.907] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0232.907] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0232.907] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0232.907] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0232.907] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0232.907] IWbemClassObject:Get (in: This=0x7688e38, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x650b758*=0, plFlavor=0x650b75c*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x650b758*=8, plFlavor=0x650b75c*=64) returned 0x0 [0232.907] SysStringLen (param_1="root\\cimv2") returned 0xa [0232.907] IWbemClassObject:Get (in: This=0x7688e38, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x650b758*=8, plFlavor=0x650b75c*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x650b758*=8, plFlavor=0x650b75c*=64) returned 0x0 [0232.907] SysStringLen (param_1="root\\cimv2") returned 0xa [0232.907] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0232.907] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0232.908] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0232.908] IWbemClassObject:Get (in: This=0x7688e38, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x650b810*=0, plFlavor=0x650b814*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x650b810*=8, plFlavor=0x650b814*=64) returned 0x0 [0232.908] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0232.908] IWbemClassObject:Get (in: This=0x7688e38, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x650b810*=8, plFlavor=0x650b814*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x650b810*=8, plFlavor=0x650b814*=64) returned 0x0 [0232.908] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0232.908] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7683280, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0232.908] WbemDefPath:IWbemPath:GetText (in: This=0x7683280, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0232.909] WbemDefPath:IWbemPath:GetText (in: This=0x7683280, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x0 [0232.909] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0232.909] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0232.909] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0232.909] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0232.909] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0232.909] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0232.909] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0232.909] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0232.909] IWbemClassObject:Get (in: This=0x7688e38, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0232.909] WbemDefPath:IWbemPath:GetText (in: This=0x7683280, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0232.909] WbemDefPath:IWbemPath:GetText (in: This=0x7683280, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x0 [0232.910] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0232.910] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0232.910] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0237.188] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0237.189] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0237.189] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0237.189] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x76893c8, puReturned=0x64d2d40*=0x1) returned 0x0 [0237.190] IUnknown:QueryInterface (in: This=0x76893c8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x76893c8) returned 0x0 [0237.191] IUnknown:QueryInterface (in: This=0x76893c8, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0237.191] IUnknown:QueryInterface (in: This=0x76893c8, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0237.191] IUnknown:AddRef (This=0x76893c8) returned 0x3 [0237.191] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0237.191] IUnknown:QueryInterface (in: This=0x76893c8, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x76893cc) returned 0x0 [0237.191] IMarshal:GetUnmarshalClass (in: This=0x76893cc, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0237.191] IUnknown:Release (This=0x76893cc) returned 0x3 [0237.192] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0237.192] IUnknown:AddRef (This=0x76893c8) returned 0x4 [0237.192] IUnknown:QueryInterface (in: This=0x76893c8, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0237.192] IUnknown:Release (This=0x76893c8) returned 0x3 [0237.192] IUnknown:Release (This=0x76893c8) returned 0x2 [0237.192] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0237.192] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0237.192] IUnknown:AddRef (This=0x76893c8) returned 0x3 [0237.192] IUnknown:QueryInterface (in: This=0x76893c8, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x76893c8) returned 0x0 [0237.192] IUnknown:Release (This=0x76893c8) returned 0x3 [0237.193] IUnknown:Release (This=0x76893c8) returned 0x2 [0237.193] IUnknown:Release (This=0x76893c8) returned 0x1 [0237.193] IUnknown:Release (This=0x767d22c) returned 0x2 [0237.193] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0237.193] IUnknown:AddRef (This=0x76893c8) returned 0x2 [0237.193] IWbemClassObject:Get (in: This=0x76893c8, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0237.193] IWbemClassObject:Get (in: This=0x76893c8, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0237.193] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x52 [0237.194] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0237.194] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0237.194] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0237.194] IUnknown:Release (This=0x205794) returned 0x1 [0237.194] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x76893b8) returned 0x0 [0237.194] WbemDefPath:IUnknown:QueryInterface (in: This=0x76893b8, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0237.194] WbemDefPath:IClassFactory:CreateInstance (in: This=0x76893b8, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x76832f0) returned 0x0 [0237.195] WbemDefPath:IUnknown:QueryInterface (in: This=0x76832f0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x76832f0) returned 0x0 [0237.195] WbemDefPath:IUnknown:QueryInterface (in: This=0x76832f0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0237.195] WbemDefPath:IUnknown:AddRef (This=0x76832f0) returned 0x3 [0237.195] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0237.195] WbemDefPath:IUnknown:QueryInterface (in: This=0x76832f0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x75396b0) returned 0x0 [0237.195] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75396b0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0237.195] WbemDefPath:IUnknown:Release (This=0x75396b0) returned 0x3 [0237.196] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0237.196] WbemDefPath:IUnknown:AddRef (This=0x76832f0) returned 0x4 [0237.196] WbemDefPath:IUnknown:QueryInterface (in: This=0x76832f0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0237.196] WbemDefPath:IUnknown:Release (This=0x76832f0) returned 0x3 [0237.196] WbemDefPath:IUnknown:Release (This=0x76832f0) returned 0x2 [0237.196] WbemDefPath:IUnknown:Release (This=0x76893b8) returned 0x0 [0237.196] WbemDefPath:IUnknown:Release (This=0x76832f0) returned 0x1 [0237.196] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0237.196] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0237.196] WbemDefPath:IUnknown:AddRef (This=0x76832f0) returned 0x2 [0237.196] WbemDefPath:IUnknown:QueryInterface (in: This=0x76832f0, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x76832f0) returned 0x0 [0237.197] WbemDefPath:IUnknown:Release (This=0x76832f0) returned 0x2 [0237.197] WbemDefPath:IUnknown:Release (This=0x76832f0) returned 0x1 [0237.197] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0237.197] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0237.197] WbemDefPath:IUnknown:AddRef (This=0x76832f0) returned 0x2 [0237.197] WbemDefPath:IUnknown:QueryInterface (in: This=0x76832f0, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x76832f0) returned 0x0 [0237.197] WbemDefPath:IUnknown:Release (This=0x76832f0) returned 0x2 [0237.197] WbemDefPath:IUnknown:AddRef (This=0x76832f0) returned 0x3 [0237.197] WbemDefPath:IWbemPath:SetText (This=0x76832f0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x0 [0237.197] WbemDefPath:IUnknown:Release (This=0x76832f0) returned 0x2 [0237.197] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0237.197] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0237.198] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0237.198] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0237.198] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0237.198] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0237.198] IWbemClassObject:Get (in: This=0x76893c8, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x650ec04*=0, plFlavor=0x650ec08*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x650ec04*=8, plFlavor=0x650ec08*=64) returned 0x0 [0237.198] SysStringLen (param_1="root\\cimv2") returned 0xa [0237.198] IWbemClassObject:Get (in: This=0x76893c8, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x650ec04*=8, plFlavor=0x650ec08*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x650ec04*=8, plFlavor=0x650ec08*=64) returned 0x0 [0237.199] SysStringLen (param_1="root\\cimv2") returned 0xa [0237.199] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0237.199] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0237.199] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0237.199] IWbemClassObject:Get (in: This=0x76893c8, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x650ecbc*=0, plFlavor=0x650ecc0*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x650ecbc*=8, plFlavor=0x650ecc0*=64) returned 0x0 [0237.199] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0237.199] IWbemClassObject:Get (in: This=0x76893c8, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x650ecbc*=8, plFlavor=0x650ecc0*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x650ecbc*=8, plFlavor=0x650ecc0*=64) returned 0x0 [0237.199] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0237.199] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76832f0, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0237.199] WbemDefPath:IWbemPath:GetText (in: This=0x76832f0, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0237.199] WbemDefPath:IWbemPath:GetText (in: This=0x76832f0, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x0 [0237.199] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0237.199] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0237.199] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0237.200] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0237.200] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0237.200] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0237.200] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0237.200] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0237.200] IWbemClassObject:Get (in: This=0x76893c8, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0237.200] WbemDefPath:IWbemPath:GetText (in: This=0x76832f0, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0237.200] WbemDefPath:IWbemPath:GetText (in: This=0x76832f0, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x0 [0237.200] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0237.201] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0237.201] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0239.526] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0239.527] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0239.527] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0239.527] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x7689958, puReturned=0x64d2d40*=0x1) returned 0x0 [0239.528] IUnknown:QueryInterface (in: This=0x7689958, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x7689958) returned 0x0 [0239.528] IUnknown:QueryInterface (in: This=0x7689958, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0239.529] IUnknown:QueryInterface (in: This=0x7689958, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0239.529] IUnknown:AddRef (This=0x7689958) returned 0x3 [0239.529] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0239.529] IUnknown:QueryInterface (in: This=0x7689958, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x768995c) returned 0x0 [0239.529] IMarshal:GetUnmarshalClass (in: This=0x768995c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0239.529] IUnknown:Release (This=0x768995c) returned 0x3 [0239.529] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0239.529] IUnknown:AddRef (This=0x7689958) returned 0x4 [0239.530] IUnknown:QueryInterface (in: This=0x7689958, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0239.530] IUnknown:Release (This=0x7689958) returned 0x3 [0239.530] IUnknown:Release (This=0x7689958) returned 0x2 [0239.530] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0239.530] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0239.530] IUnknown:AddRef (This=0x7689958) returned 0x3 [0239.530] IUnknown:QueryInterface (in: This=0x7689958, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x7689958) returned 0x0 [0239.530] IUnknown:Release (This=0x7689958) returned 0x3 [0239.530] IUnknown:Release (This=0x7689958) returned 0x2 [0239.531] IUnknown:Release (This=0x7689958) returned 0x1 [0239.531] IUnknown:Release (This=0x767d22c) returned 0x2 [0239.531] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0239.531] IUnknown:AddRef (This=0x7689958) returned 0x2 [0239.531] IWbemClassObject:Get (in: This=0x7689958, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0239.531] IWbemClassObject:Get (in: This=0x7689958, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0239.531] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x52 [0239.531] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0239.531] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0239.531] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0239.532] IUnknown:Release (This=0x205794) returned 0x1 [0239.532] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x7689948) returned 0x0 [0239.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x7689948, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0239.532] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7689948, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x7683360) returned 0x0 [0239.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683360, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x7683360) returned 0x0 [0239.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683360, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0239.533] WbemDefPath:IUnknown:AddRef (This=0x7683360) returned 0x3 [0239.533] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0239.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683360, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x75396f0) returned 0x0 [0239.533] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75396f0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0239.533] WbemDefPath:IUnknown:Release (This=0x75396f0) returned 0x3 [0239.533] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0239.533] WbemDefPath:IUnknown:AddRef (This=0x7683360) returned 0x4 [0239.534] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683360, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0239.534] WbemDefPath:IUnknown:Release (This=0x7683360) returned 0x3 [0239.534] WbemDefPath:IUnknown:Release (This=0x7683360) returned 0x2 [0239.534] WbemDefPath:IUnknown:Release (This=0x7689948) returned 0x0 [0239.534] WbemDefPath:IUnknown:Release (This=0x7683360) returned 0x1 [0239.534] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0239.534] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0239.534] WbemDefPath:IUnknown:AddRef (This=0x7683360) returned 0x2 [0239.534] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683360, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x7683360) returned 0x0 [0239.535] WbemDefPath:IUnknown:Release (This=0x7683360) returned 0x2 [0239.535] WbemDefPath:IUnknown:Release (This=0x7683360) returned 0x1 [0239.535] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0239.535] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0239.535] WbemDefPath:IUnknown:AddRef (This=0x7683360) returned 0x2 [0239.535] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683360, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x7683360) returned 0x0 [0239.535] WbemDefPath:IUnknown:Release (This=0x7683360) returned 0x2 [0239.535] WbemDefPath:IUnknown:AddRef (This=0x7683360) returned 0x3 [0239.535] WbemDefPath:IWbemPath:SetText (This=0x7683360, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x0 [0239.535] WbemDefPath:IUnknown:Release (This=0x7683360) returned 0x2 [0239.535] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0239.535] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0239.536] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0239.536] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0239.536] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0239.536] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0239.536] IWbemClassObject:Get (in: This=0x7689958, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x65120b0*=0, plFlavor=0x65120b4*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x65120b0*=8, plFlavor=0x65120b4*=64) returned 0x0 [0239.536] SysStringLen (param_1="root\\cimv2") returned 0xa [0239.536] IWbemClassObject:Get (in: This=0x7689958, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x65120b0*=8, plFlavor=0x65120b4*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x65120b0*=8, plFlavor=0x65120b4*=64) returned 0x0 [0239.536] SysStringLen (param_1="root\\cimv2") returned 0xa [0239.536] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0239.536] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0239.536] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0239.536] IWbemClassObject:Get (in: This=0x7689958, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6512168*=0, plFlavor=0x651216c*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6512168*=8, plFlavor=0x651216c*=64) returned 0x0 [0239.536] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0239.537] IWbemClassObject:Get (in: This=0x7689958, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6512168*=8, plFlavor=0x651216c*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6512168*=8, plFlavor=0x651216c*=64) returned 0x0 [0239.537] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0239.537] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7683360, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0239.537] WbemDefPath:IWbemPath:GetText (in: This=0x7683360, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0239.537] WbemDefPath:IWbemPath:GetText (in: This=0x7683360, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x0 [0239.537] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0239.537] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0239.537] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0239.537] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0239.537] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0239.537] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0239.537] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0239.538] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0239.538] IWbemClassObject:Get (in: This=0x7689958, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0239.538] WbemDefPath:IWbemPath:GetText (in: This=0x7683360, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0239.538] WbemDefPath:IWbemPath:GetText (in: This=0x7683360, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x0 [0239.538] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0239.538] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0239.538] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0241.461] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0241.461] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0241.461] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0241.461] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x7689ee8, puReturned=0x64d2d40*=0x1) returned 0x0 [0241.463] IUnknown:QueryInterface (in: This=0x7689ee8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x7689ee8) returned 0x0 [0241.463] IUnknown:QueryInterface (in: This=0x7689ee8, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0241.463] IUnknown:QueryInterface (in: This=0x7689ee8, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0241.464] IUnknown:AddRef (This=0x7689ee8) returned 0x3 [0241.464] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0241.464] IUnknown:QueryInterface (in: This=0x7689ee8, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x7689eec) returned 0x0 [0241.464] IMarshal:GetUnmarshalClass (in: This=0x7689eec, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0241.464] IUnknown:Release (This=0x7689eec) returned 0x3 [0241.465] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0241.465] IUnknown:AddRef (This=0x7689ee8) returned 0x4 [0241.465] IUnknown:QueryInterface (in: This=0x7689ee8, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0241.465] IUnknown:Release (This=0x7689ee8) returned 0x3 [0241.465] IUnknown:Release (This=0x7689ee8) returned 0x2 [0241.465] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0241.465] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0241.465] IUnknown:AddRef (This=0x7689ee8) returned 0x3 [0241.465] IUnknown:QueryInterface (in: This=0x7689ee8, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x7689ee8) returned 0x0 [0241.466] IUnknown:Release (This=0x7689ee8) returned 0x3 [0241.466] IUnknown:Release (This=0x7689ee8) returned 0x2 [0241.466] IUnknown:Release (This=0x7689ee8) returned 0x1 [0241.466] IUnknown:Release (This=0x767d22c) returned 0x2 [0241.467] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0241.467] IUnknown:AddRef (This=0x7689ee8) returned 0x2 [0241.467] IWbemClassObject:Get (in: This=0x7689ee8, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0241.467] IWbemClassObject:Get (in: This=0x7689ee8, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0241.467] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x52 [0241.468] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0241.468] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0241.468] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0241.468] IUnknown:Release (This=0x205794) returned 0x1 [0241.468] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x7689ed8) returned 0x0 [0241.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x7689ed8, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0241.469] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7689ed8, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x76833d0) returned 0x0 [0241.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x76833d0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x76833d0) returned 0x0 [0241.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x76833d0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0241.470] WbemDefPath:IUnknown:AddRef (This=0x76833d0) returned 0x3 [0241.470] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0241.470] WbemDefPath:IUnknown:QueryInterface (in: This=0x76833d0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x7539730) returned 0x0 [0241.470] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7539730, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0241.470] WbemDefPath:IUnknown:Release (This=0x7539730) returned 0x3 [0241.470] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0241.470] WbemDefPath:IUnknown:AddRef (This=0x76833d0) returned 0x4 [0241.471] WbemDefPath:IUnknown:QueryInterface (in: This=0x76833d0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0241.471] WbemDefPath:IUnknown:Release (This=0x76833d0) returned 0x3 [0241.471] WbemDefPath:IUnknown:Release (This=0x76833d0) returned 0x2 [0241.471] WbemDefPath:IUnknown:Release (This=0x7689ed8) returned 0x0 [0241.471] WbemDefPath:IUnknown:Release (This=0x76833d0) returned 0x1 [0241.472] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0241.472] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0241.472] WbemDefPath:IUnknown:AddRef (This=0x76833d0) returned 0x2 [0241.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x76833d0, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x76833d0) returned 0x0 [0241.472] WbemDefPath:IUnknown:Release (This=0x76833d0) returned 0x2 [0241.491] WbemDefPath:IUnknown:Release (This=0x76833d0) returned 0x1 [0241.491] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0241.491] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0241.491] WbemDefPath:IUnknown:AddRef (This=0x76833d0) returned 0x2 [0241.492] WbemDefPath:IUnknown:QueryInterface (in: This=0x76833d0, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x76833d0) returned 0x0 [0241.492] WbemDefPath:IUnknown:Release (This=0x76833d0) returned 0x2 [0241.492] WbemDefPath:IUnknown:AddRef (This=0x76833d0) returned 0x3 [0241.492] WbemDefPath:IWbemPath:SetText (This=0x76833d0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x0 [0241.492] WbemDefPath:IUnknown:Release (This=0x76833d0) returned 0x2 [0241.492] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0241.492] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0241.493] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0241.493] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0241.493] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0241.493] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0241.493] IWbemClassObject:Get (in: This=0x7689ee8, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x651555c*=0, plFlavor=0x6515560*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x651555c*=8, plFlavor=0x6515560*=64) returned 0x0 [0241.493] SysStringLen (param_1="root\\cimv2") returned 0xa [0241.494] IWbemClassObject:Get (in: This=0x7689ee8, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x651555c*=8, plFlavor=0x6515560*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x651555c*=8, plFlavor=0x6515560*=64) returned 0x0 [0241.494] SysStringLen (param_1="root\\cimv2") returned 0xa [0241.494] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0241.494] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0241.494] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0241.494] IWbemClassObject:Get (in: This=0x7689ee8, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6515614*=0, plFlavor=0x6515618*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6515614*=8, plFlavor=0x6515618*=64) returned 0x0 [0241.494] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0241.494] IWbemClassObject:Get (in: This=0x7689ee8, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6515614*=8, plFlavor=0x6515618*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6515614*=8, plFlavor=0x6515618*=64) returned 0x0 [0241.494] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0241.495] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76833d0, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0241.495] WbemDefPath:IWbemPath:GetText (in: This=0x76833d0, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0241.495] WbemDefPath:IWbemPath:GetText (in: This=0x76833d0, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x0 [0241.495] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0241.495] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0241.495] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0241.495] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0241.495] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0241.495] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0241.496] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0241.496] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0241.496] IWbemClassObject:Get (in: This=0x7689ee8, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0241.496] WbemDefPath:IWbemPath:GetText (in: This=0x76833d0, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0241.496] WbemDefPath:IWbemPath:GetText (in: This=0x76833d0, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x0 [0241.496] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0241.496] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0241.497] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0243.954] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0243.954] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0243.954] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0243.954] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x768a878, puReturned=0x64d2d40*=0x1) returned 0x0 [0243.956] IUnknown:QueryInterface (in: This=0x768a878, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x768a878) returned 0x0 [0243.956] IUnknown:QueryInterface (in: This=0x768a878, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0243.956] IUnknown:QueryInterface (in: This=0x768a878, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0243.957] IUnknown:AddRef (This=0x768a878) returned 0x3 [0243.957] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0243.957] IUnknown:QueryInterface (in: This=0x768a878, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x768a87c) returned 0x0 [0243.957] IMarshal:GetUnmarshalClass (in: This=0x768a87c, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0243.957] IUnknown:Release (This=0x768a87c) returned 0x3 [0243.958] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0243.958] IUnknown:AddRef (This=0x768a878) returned 0x4 [0243.958] IUnknown:QueryInterface (in: This=0x768a878, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0243.958] IUnknown:Release (This=0x768a878) returned 0x3 [0243.958] IUnknown:Release (This=0x768a878) returned 0x2 [0243.958] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0243.958] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0243.958] IUnknown:AddRef (This=0x768a878) returned 0x3 [0243.958] IUnknown:QueryInterface (in: This=0x768a878, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x768a878) returned 0x0 [0243.959] IUnknown:Release (This=0x768a878) returned 0x3 [0243.959] IUnknown:Release (This=0x768a878) returned 0x2 [0243.959] IUnknown:Release (This=0x768a878) returned 0x1 [0243.959] IUnknown:Release (This=0x767d22c) returned 0x2 [0243.959] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0243.959] IUnknown:AddRef (This=0x768a878) returned 0x2 [0243.959] IWbemClassObject:Get (in: This=0x768a878, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0243.960] IWbemClassObject:Get (in: This=0x768a878, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0243.960] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x52 [0243.960] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0243.960] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0243.960] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0243.960] IUnknown:Release (This=0x205794) returned 0x1 [0243.961] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x768ad08) returned 0x0 [0243.961] WbemDefPath:IUnknown:QueryInterface (in: This=0x768ad08, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0243.961] WbemDefPath:IClassFactory:CreateInstance (in: This=0x768ad08, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x7683440) returned 0x0 [0243.961] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683440, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x7683440) returned 0x0 [0243.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683440, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0243.962] WbemDefPath:IUnknown:AddRef (This=0x7683440) returned 0x3 [0243.962] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0243.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683440, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x7539770) returned 0x0 [0243.962] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7539770, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0243.962] WbemDefPath:IUnknown:Release (This=0x7539770) returned 0x3 [0243.963] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0243.963] WbemDefPath:IUnknown:AddRef (This=0x7683440) returned 0x4 [0243.963] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683440, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0243.963] WbemDefPath:IUnknown:Release (This=0x7683440) returned 0x3 [0243.963] WbemDefPath:IUnknown:Release (This=0x7683440) returned 0x2 [0243.963] WbemDefPath:IUnknown:Release (This=0x768ad08) returned 0x0 [0243.964] WbemDefPath:IUnknown:Release (This=0x7683440) returned 0x1 [0243.964] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0243.964] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0243.964] WbemDefPath:IUnknown:AddRef (This=0x7683440) returned 0x2 [0243.964] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683440, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x7683440) returned 0x0 [0243.964] WbemDefPath:IUnknown:Release (This=0x7683440) returned 0x2 [0243.964] WbemDefPath:IUnknown:Release (This=0x7683440) returned 0x1 [0243.964] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0243.964] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0243.964] WbemDefPath:IUnknown:AddRef (This=0x7683440) returned 0x2 [0243.965] WbemDefPath:IUnknown:QueryInterface (in: This=0x7683440, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x7683440) returned 0x0 [0243.965] WbemDefPath:IUnknown:Release (This=0x7683440) returned 0x2 [0243.965] WbemDefPath:IUnknown:AddRef (This=0x7683440) returned 0x3 [0243.965] WbemDefPath:IWbemPath:SetText (This=0x7683440, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x0 [0243.965] WbemDefPath:IUnknown:Release (This=0x7683440) returned 0x2 [0243.965] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0243.965] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0243.965] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0243.965] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0243.965] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0243.965] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0243.966] IWbemClassObject:Get (in: This=0x768a878, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6518a08*=0, plFlavor=0x6518a0c*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6518a08*=8, plFlavor=0x6518a0c*=64) returned 0x0 [0243.966] SysStringLen (param_1="root\\cimv2") returned 0xa [0243.966] IWbemClassObject:Get (in: This=0x768a878, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6518a08*=8, plFlavor=0x6518a0c*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6518a08*=8, plFlavor=0x6518a0c*=64) returned 0x0 [0243.966] SysStringLen (param_1="root\\cimv2") returned 0xa [0243.966] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0243.966] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0243.966] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0243.966] IWbemClassObject:Get (in: This=0x768a878, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6518ac0*=0, plFlavor=0x6518ac4*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6518ac0*=8, plFlavor=0x6518ac4*=64) returned 0x0 [0243.966] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0243.967] IWbemClassObject:Get (in: This=0x768a878, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6518ac0*=8, plFlavor=0x6518ac4*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6518ac0*=8, plFlavor=0x6518ac4*=64) returned 0x0 [0243.967] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0243.967] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7683440, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0243.967] WbemDefPath:IWbemPath:GetText (in: This=0x7683440, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0243.967] WbemDefPath:IWbemPath:GetText (in: This=0x7683440, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x0 [0243.967] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0243.967] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0243.967] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0243.967] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0243.967] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0243.967] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0243.968] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0243.968] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0243.968] IWbemClassObject:Get (in: This=0x768a878, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0243.968] WbemDefPath:IWbemPath:GetText (in: This=0x7683440, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0243.968] WbemDefPath:IWbemPath:GetText (in: This=0x7683440, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x0 [0243.968] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0243.968] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0243.969] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0246.342] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0246.342] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0246.342] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0246.343] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x768b1f8, puReturned=0x64d2d40*=0x1) returned 0x0 [0246.344] IUnknown:QueryInterface (in: This=0x768b1f8, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2e8 | out: ppvObject=0x515e2e8*=0x768b1f8) returned 0x0 [0246.345] IUnknown:QueryInterface (in: This=0x768b1f8, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2a4 | out: ppvObject=0x515e2a4*=0x0) returned 0x80004002 [0246.345] IUnknown:QueryInterface (in: This=0x768b1f8, riid=0x6c270b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e198 | out: ppvObject=0x515e198*=0x0) returned 0x80004002 [0246.345] IUnknown:AddRef (This=0x768b1f8) returned 0x3 [0246.345] CoGetContextToken (in: pToken=0x515e130 | out: pToken=0x515e130) returned 0x0 [0246.346] IUnknown:QueryInterface (in: This=0x768b1f8, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e118 | out: ppvObject=0x515e118*=0x768b1fc) returned 0x0 [0246.346] IMarshal:GetUnmarshalClass (in: This=0x768b1fc, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e120 | out: pCid=0x515e120*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0246.346] IUnknown:Release (This=0x768b1fc) returned 0x3 [0246.346] CoGetContextToken (in: pToken=0x515e128 | out: pToken=0x515e128) returned 0x0 [0246.346] IUnknown:AddRef (This=0x768b1f8) returned 0x4 [0246.346] IUnknown:QueryInterface (in: This=0x768b1f8, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x0) returned 0x80004002 [0246.346] IUnknown:Release (This=0x768b1f8) returned 0x3 [0246.346] IUnknown:Release (This=0x768b1f8) returned 0x2 [0246.347] CoGetContextToken (in: pToken=0x515e588 | out: pToken=0x515e588) returned 0x0 [0246.347] CoGetContextToken (in: pToken=0x515e548 | out: pToken=0x515e548) returned 0x0 [0246.347] IUnknown:AddRef (This=0x768b1f8) returned 0x3 [0246.347] IUnknown:QueryInterface (in: This=0x768b1f8, riid=0x515e5c4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e5c0 | out: ppvObject=0x515e5c0*=0x768b1f8) returned 0x0 [0246.347] IUnknown:Release (This=0x768b1f8) returned 0x3 [0246.347] IUnknown:Release (This=0x768b1f8) returned 0x2 [0246.347] IUnknown:Release (This=0x768b1f8) returned 0x1 [0246.347] IUnknown:Release (This=0x767d22c) returned 0x2 [0246.347] CoGetContextToken (in: pToken=0x515ee74 | out: pToken=0x515ee74) returned 0x0 [0246.347] IUnknown:AddRef (This=0x768b1f8) returned 0x2 [0246.348] IWbemClassObject:Get (in: This=0x768b1f8, wszName="__GENUS", lFlags=0, pVal=0x515eef0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515efa4*=0, plFlavor=0x515efa0*=0 | out: pVal=0x515eef0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515efa4*=3, plFlavor=0x515efa0*=64) returned 0x0 [0246.348] IWbemClassObject:Get (in: This=0x768b1f8, wszName="__PATH", lFlags=0, pVal=0x515eed0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ef88*=0, plFlavor=0x515ef84*=0 | out: pVal=0x515eed0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"", varVal2=0x0), pType=0x515ef88*=8, plFlavor=0x515ef84*=64) returned 0x0 [0246.348] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x52 [0246.348] CoGetObjectContext (in: riid=0x57d2f34*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ef28 | out: ppv=0x515ef28*=0x205794) returned 0x0 [0246.348] IComThreadingInfo:GetCurrentApartmentType (in: This=0x205794, pAptType=0x515ef20 | out: pAptType=0x515ef20*=1) returned 0x0 [0246.348] IUnknown:QueryInterface (in: This=0x205794, riid=0x57d2f1c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ef24 | out: ppvObject=0x515ef24*=0x0) returned 0x80004002 [0246.348] IUnknown:Release (This=0x205794) returned 0x1 [0246.349] CoGetClassObject (in: rclsid=0x2db9bc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c2aa3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea40 | out: ppv=0x515ea40*=0x768ad18) returned 0x0 [0246.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x768ad18, riid=0x6c397ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e870 | out: ppvObject=0x515e870*=0x0) returned 0x80004002 [0246.349] WbemDefPath:IClassFactory:CreateInstance (in: This=0x768ad18, pUnkOuter=0x0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e8a8 | out: ppvObject=0x515e8a8*=0x76834b0) returned 0x0 [0246.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x76834b0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e64c | out: ppvObject=0x515e64c*=0x76834b0) returned 0x0 [0246.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x76834b0, riid=0x6c344204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e608 | out: ppvObject=0x515e608*=0x0) returned 0x80004002 [0246.350] WbemDefPath:IUnknown:AddRef (This=0x76834b0) returned 0x3 [0246.350] CoGetContextToken (in: pToken=0x515e494 | out: pToken=0x515e494) returned 0x0 [0246.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x76834b0, riid=0x6c2223cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x75397b0) returned 0x0 [0246.350] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75397b0, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e484 | out: pCid=0x515e484*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0246.350] WbemDefPath:IUnknown:Release (This=0x75397b0) returned 0x3 [0246.350] CoGetContextToken (in: pToken=0x515e48c | out: pToken=0x515e48c) returned 0x0 [0246.350] WbemDefPath:IUnknown:AddRef (This=0x76834b0) returned 0x4 [0246.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x76834b0, riid=0x6c27767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e500 | out: ppvObject=0x515e500*=0x0) returned 0x80004002 [0246.351] WbemDefPath:IUnknown:Release (This=0x76834b0) returned 0x3 [0246.351] WbemDefPath:IUnknown:Release (This=0x76834b0) returned 0x2 [0246.351] WbemDefPath:IUnknown:Release (This=0x768ad18) returned 0x0 [0246.351] WbemDefPath:IUnknown:Release (This=0x76834b0) returned 0x1 [0246.351] CoGetContextToken (in: pToken=0x515ed3c | out: pToken=0x515ed3c) returned 0x0 [0246.351] CoGetContextToken (in: pToken=0x515ecfc | out: pToken=0x515ecfc) returned 0x0 [0246.351] WbemDefPath:IUnknown:AddRef (This=0x76834b0) returned 0x2 [0246.351] WbemDefPath:IUnknown:QueryInterface (in: This=0x76834b0, riid=0x515ed78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ed74 | out: ppvObject=0x515ed74*=0x76834b0) returned 0x0 [0246.351] WbemDefPath:IUnknown:Release (This=0x76834b0) returned 0x2 [0246.352] WbemDefPath:IUnknown:Release (This=0x76834b0) returned 0x1 [0246.352] CoGetContextToken (in: pToken=0x515edbc | out: pToken=0x515edbc) returned 0x0 [0246.352] CoGetContextToken (in: pToken=0x515ed7c | out: pToken=0x515ed7c) returned 0x0 [0246.352] WbemDefPath:IUnknown:AddRef (This=0x76834b0) returned 0x2 [0246.352] WbemDefPath:IUnknown:QueryInterface (in: This=0x76834b0, riid=0x515edf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515edf4 | out: ppvObject=0x515edf4*=0x76834b0) returned 0x0 [0246.352] WbemDefPath:IUnknown:Release (This=0x76834b0) returned 0x2 [0246.352] WbemDefPath:IUnknown:AddRef (This=0x76834b0) returned 0x3 [0246.352] WbemDefPath:IWbemPath:SetText (This=0x76834b0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x0 [0246.353] WbemDefPath:IUnknown:Release (This=0x76834b0) returned 0x2 [0246.353] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ef5c | out: puCount=0x515ef5c*=0x2) returned 0x0 [0246.353] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x0, pszText=0x0 | out: puBuffLength=0x515ef58*=0x17, pszText=0x0) returned 0x0 [0246.353] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ef58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ef58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0246.353] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0246.353] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0246.353] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0246.353] IWbemClassObject:Get (in: This=0x768b1f8, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x651beb4*=0, plFlavor=0x651beb8*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x651beb4*=8, plFlavor=0x651beb8*=64) returned 0x0 [0246.354] SysStringLen (param_1="root\\cimv2") returned 0xa [0246.354] IWbemClassObject:Get (in: This=0x768b1f8, wszName="__NAMESPACE", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x651beb4*=8, plFlavor=0x651beb8*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x651beb4*=8, plFlavor=0x651beb8*=64) returned 0x0 [0246.354] SysStringLen (param_1="root\\cimv2") returned 0xa [0246.354] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515ecbc | out: puCount=0x515ecbc*=0x2) returned 0x0 [0246.354] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x0, pszText=0x0 | out: puBuffLength=0x515ecb8*=0x17, pszText=0x0) returned 0x0 [0246.354] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515ecb8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ecb8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0246.354] IWbemClassObject:Get (in: This=0x768b1f8, wszName="__CLASS", lFlags=0, pVal=0x515ec78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x651bf6c*=0, plFlavor=0x651bf70*=0 | out: pVal=0x515ec78*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x651bf6c*=8, plFlavor=0x651bf70*=64) returned 0x0 [0246.354] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0246.354] IWbemClassObject:Get (in: This=0x768b1f8, wszName="__CLASS", lFlags=0, pVal=0x515ec7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x651bf6c*=8, plFlavor=0x651bf70*=64 | out: pVal=0x515ec7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x651bf6c*=8, plFlavor=0x651bf70*=64) returned 0x0 [0246.354] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0246.355] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76834b0, puCount=0x515ebc8 | out: puCount=0x515ebc8*=0x2) returned 0x0 [0246.355] WbemDefPath:IWbemPath:GetText (in: This=0x76834b0, lFlags=4, puBuffLength=0x515ebc4*=0x0, pszText=0x0 | out: puBuffLength=0x515ebc4*=0x53, pszText=0x0) returned 0x0 [0246.355] WbemDefPath:IWbemPath:GetText (in: This=0x76834b0, lFlags=4, puBuffLength=0x515ebc4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebc4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x0 [0246.355] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x767dc10, puCount=0x515eb5c | out: puCount=0x515eb5c*=0x2) returned 0x0 [0246.355] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x0, pszText=0x0 | out: puBuffLength=0x515eb58*=0x17, pszText=0x0) returned 0x0 [0246.355] WbemDefPath:IWbemPath:GetText (in: This=0x767dc10, lFlags=4, puBuffLength=0x515eb58*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb58*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0246.356] CoGetContextToken (in: pToken=0x515eaa0 | out: pToken=0x515eaa0) returned 0x0 [0246.356] WbemLocator:IUnknown:AddRef (This=0x2ea9f4) returned 0x3 [0246.356] WbemLocator:IUnknown:QueryInterface (in: This=0x2ea9f4, riid=0x6c327714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e6c4 | out: ppvObject=0x515e6c4*=0x2ea9f4) returned 0x0 [0246.356] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x3 [0246.356] WbemLocator:IUnknown:Release (This=0x2ea9f4) returned 0x2 [0246.356] IWbemClassObject:Get (in: This=0x768b1f8, wszName="__GENUS", lFlags=0, pVal=0x515eb18*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ebcc*=0, plFlavor=0x515ebc8*=0 | out: pVal=0x515eb18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ebcc*=3, plFlavor=0x515ebc8*=64) returned 0x0 [0246.356] WbemDefPath:IWbemPath:GetText (in: This=0x76834b0, lFlags=2, puBuffLength=0x515ebcc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebcc*=0x3d, pszText=0x0) returned 0x0 [0246.356] WbemDefPath:IWbemPath:GetText (in: This=0x76834b0, lFlags=2, puBuffLength=0x515ebcc*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515ebcc*=0x3d, pszText="Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x0 [0246.357] CoGetContextToken (in: pToken=0x515e82c | out: pToken=0x515e82c) returned 0x0 [0246.357] WbemLocator:IUnknown:AddRef (This=0x767ddfc) returned 0x3 [0246.357] IWbemServices:DeleteInstance (in: This=0x767ddfc, strObjectPath="Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0246.564] WbemLocator:IUnknown:Release (This=0x767ddfc) returned 0x2 [0246.565] CoGetContextToken (in: pToken=0x515ecdc | out: pToken=0x515ecdc) returned 0x0 [0246.565] IUnknown:AddRef (This=0x767d22c) returned 0x3 [0246.565] IEnumWbemClassObject:Next (in: This=0x767d22c, lTimeout=-1, uCount=0x1, apObjects=0x2d37c8, puReturned=0x64d2d40 | out: apObjects=0x2d37c8*=0x0, puReturned=0x64d2d40*=0x0) returned 0x1 [0246.566] IUnknown:Release (This=0x767d22c) returned 0x2 [0246.566] CoGetContextToken (in: pToken=0x515ee2c | out: pToken=0x515ee2c) returned 0x0 [0246.566] WbemLocator:IUnknown:Release (This=0x2eabd4) returned 0x1 [0246.567] IUnknown:Release (This=0x767d22c) returned 0x0 [0246.576] SetEvent (hEvent=0x380) returned 1 [0246.576] GetLastError () returned 0x0 [0246.576] SetEvent (hEvent=0x398) returned 1 [0246.576] GetLastError () returned 0x0 [0246.576] SetEvent (hEvent=0x39c) returned 1 [0246.576] GetLastError () returned 0x0 [0246.576] SetEvent (hEvent=0x3bc) returned 1 [0246.576] GetLastError () returned 0x0 [0246.576] SetEvent (hEvent=0x308) returned 1 [0246.576] GetLastError () returned 0x0 [0246.576] SetEvent (hEvent=0x3a4) returned 1 [0246.576] GetLastError () returned 0x0 [0246.576] SetEvent (hEvent=0x3a8) returned 1 [0246.577] GetLastError () returned 0x0 [0246.577] SetEvent (hEvent=0x304) returned 1 [0246.577] GetLastError () returned 0x0 [0246.577] SetEvent (hEvent=0x3ac) returned 1 [0246.577] GetLastError () returned 0x0 [0246.577] CoUninitialize () Thread: id = 12 os_tid = 0xf80 Thread: id = 13 os_tid = 0xf84 Thread: id = 14 os_tid = 0xff4 Thread: id = 105 os_tid = 0x848 Thread: id = 9216 os_tid = 0x2b10 [0246.864] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0246.910] SetThreadUILanguage (LangId=0x0) returned 0x409 [0246.911] VirtualQuery (in: lpAddress=0x514e2d0, lpBuffer=0x514f2d0, dwLength=0x1c | out: lpBuffer=0x514f2d0*(BaseAddress=0x514e000, AllocationBase=0x47c0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0246.912] VirtualQuery (in: lpAddress=0x514e3ec, lpBuffer=0x514f3ec, dwLength=0x1c | out: lpBuffer=0x514f3ec*(BaseAddress=0x514e000, AllocationBase=0x47c0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0246.922] SetEvent (hEvent=0x494) returned 1 [0246.922] GetLastError () returned 0x0 [0246.922] SetEvent (hEvent=0x488) returned 1 [0246.922] GetLastError () returned 0x0 [0246.923] SetEvent (hEvent=0x378) returned 1 [0246.923] GetLastError () returned 0x0 [0246.923] SetEvent (hEvent=0x494) returned 1 [0246.923] GetLastError () returned 0x0 [0246.923] SetEvent (hEvent=0x488) returned 1 [0246.923] GetLastError () returned 0x0 [0246.923] SetEvent (hEvent=0x478) returned 1 [0246.923] GetLastError () returned 0x0 [0246.923] SetEvent (hEvent=0x3b4) returned 1 [0246.923] GetLastError () returned 0x0 [0246.923] SetEvent (hEvent=0x328) returned 1 [0246.923] GetLastError () returned 0x0 [0246.923] SetEvent (hEvent=0x468) returned 1 [0246.923] GetLastError () returned 0x0 [0246.923] SetEvent (hEvent=0x400) returned 1 [0246.923] GetLastError () returned 0x0 [0246.924] CoUninitialize () Process: id = "2" image_name = "csc.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe" page_root = "0x7f134c40" os_pid = "0xf44" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf04" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.cmdline\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 8 os_tid = 0xf48 [0095.994] SysStringByteLen (bstr="4") returned 0x2 [0095.996] SysStringByteLen (bstr="ꇠ#c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll") returned 0x136 [0095.996] SysStringByteLen (bstr="ꇠ#c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\m1pgl9ij.dll") returned 0x136 [0095.997] SysStringByteLen (bstr="DEBUG") returned 0xa [0095.997] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0095.997] SysStringLen (param_1=0x0) returned 0x0 [0095.997] SysStringLen (param_1=0x0) returned 0x0 [0095.998] SysStringByteLen (bstr="DEBUG") returned 0xa [0095.998] SysStringLen (param_1=0x0) returned 0x0 [0095.998] SysStringByteLen (bstr="DEBUG") returned 0xa [0095.998] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0095.998] SysStringByteLen (bstr="4") returned 0x2 [0095.998] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0096.010] SysStringByteLen (bstr="DEBUG") returned 0xa [0096.010] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0096.010] SysStringByteLen (bstr="4") returned 0x2 [0096.011] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0096.060] CoCreateInstance (in: rclsid=0x5a143ad0*(Data1=0xe5cb7a31, Data2=0x7512, Data3=0x11d2, Data4=([0]=0x89, [1]=0xce, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0x92, [6]=0xe5, [7]=0xd8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x5a143ae0*(Data1=0x31bcfce2, Data2=0xdafb, Data3=0x11d2, Data4=([0]=0x9f, [1]=0x81, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x79, [6]=0xa0, [7]=0xa3)), ppv=0x12fe5c | out: ppv=0x12fe5c*=0x237af8) returned 0x0 [0096.073] SysStringLen (param_1=0x0) returned 0x0 [0096.073] SysStringLen (param_1="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0x7f [0096.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.114] SysStringByteLen (bstr="DEBUG") returned 0xa [0096.114] SysStringByteLen (bstr="DEBUG") returned 0xa [0096.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.280] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.280] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.311] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.311] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.311] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.375] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.375] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.375] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.609] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.610] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.611] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.669] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0096.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.552] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.552] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.561] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.561] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.562] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.563] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.563] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.565] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.565] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.565] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.640] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.642] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.645] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.646] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.650] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.650] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.650] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.650] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.651] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.651] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.652] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.652] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.652] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.654] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.654] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.659] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.659] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.660] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.664] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.669] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0097.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.842] CoCreateGuid (in: pguid=0x12e63c | out: pguid=0x12e63c*(Data1=0x44a437eb, Data2=0x2634, Data3=0x4746, Data4=([0]=0x95, [1]=0x8a, [2]=0xab, [3]=0xed, [4]=0x10, [5]=0x41, [6]=0x5d, [7]=0x89))) returned 0x0 [0098.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0098.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.038] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.148] SysStringLen (param_1=0x0) returned 0x0 [0099.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.149] GetTempFileNameW (in: lpPathName="c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", lpPrefixString="CSC", uUnique=0x0, lpTempFileName=0x12eb40 | out: lpTempFileName="c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\CSC4807.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\csc4807.tmp")) returned 0x4807 [0099.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.155] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x12e55c | out: ppstm=0x12e55c*=0x24ca80) returned 0x0 [0099.168] IUnknown:AddRef (This=0x24ca80) returned 0x2 [0099.168] IStream:RemoteSeek (in: This=0x24ca80, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0099.173] ISequentialStream:RemoteWrite (in: This=0x24ca80, pv=0x2bf6e0*=0x42, cb=0xe60, pcbWritten=0x12e410 | out: pcbWritten=0x12e410*=0xe60) returned 0x0 [0099.173] IUnknown:Release (This=0x24ca80) returned 0x1 [0099.173] IStream:Stat (in: This=0x24ca80, pstatstg=0x12e578, grfStatFlag=0x1 | out: pstatstg=0x12e578) returned 0x0 [0099.175] IStream:RemoteSeek (in: This=0x24ca80, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0099.175] ISequentialStream:RemoteRead (in: This=0x24ca80, pv=0x2c4560, cb=0xe61, pcbRead=0x12e554 | out: pv=0x2c4560*=0x42, pcbRead=0x12e554*=0xe60) returned 0x0 [0099.175] IUnknown:Release (This=0x24ca80) returned 0x0 [0099.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0099.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0100.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 Process: id = "3" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe" page_root = "0x7f134220" os_pid = "0xf50" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xf44" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 \"/OUT:C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\RES4846.tmp\" \"c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\CSC4807.tmp\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9 os_tid = 0xf54 Process: id = "4" image_name = "csc.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe" page_root = "0x7f134c40" os_pid = "0xf70" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf04" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.cmdline\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 10 os_tid = 0xf74 [0102.459] SysStringByteLen (bstr="4") returned 0x2 [0102.461] SysStringByteLen (bstr="ꇠ\x1cc:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll") returned 0x136 [0102.461] SysStringByteLen (bstr="ꇠ\x1cc:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\raurtmxx.dll") returned 0x136 [0102.462] SysStringByteLen (bstr="DEBUG") returned 0xa [0102.462] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0102.462] SysStringLen (param_1=0x0) returned 0x0 [0102.462] SysStringLen (param_1=0x0) returned 0x0 [0102.463] SysStringByteLen (bstr="DEBUG") returned 0xa [0102.463] SysStringLen (param_1=0x0) returned 0x0 [0102.463] SysStringByteLen (bstr="DEBUG") returned 0xa [0102.463] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0102.463] SysStringByteLen (bstr="4") returned 0x2 [0102.463] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0102.465] SysStringByteLen (bstr="DEBUG") returned 0xa [0102.465] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0102.465] SysStringByteLen (bstr="4") returned 0x2 [0102.465] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0102.496] CoCreateInstance (in: rclsid=0x5a143ad0*(Data1=0xe5cb7a31, Data2=0x7512, Data3=0x11d2, Data4=([0]=0x89, [1]=0xce, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0x92, [6]=0xe5, [7]=0xd8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x5a143ae0*(Data1=0x31bcfce2, Data2=0xdafb, Data3=0x11d2, Data4=([0]=0x9f, [1]=0x81, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x79, [6]=0xa0, [7]=0xa3)), ppv=0x12fe5c | out: ppv=0x12fe5c*=0x1c7af8) returned 0x0 [0102.504] SysStringLen (param_1=0x0) returned 0x0 [0102.504] SysStringLen (param_1="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0x7f [0102.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.534] SysStringByteLen (bstr="DEBUG") returned 0xa [0102.534] SysStringByteLen (bstr="DEBUG") returned 0xa [0102.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.651] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.311] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.602] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.603] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.611] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.658] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.807] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.807] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.807] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.807] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.807] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.809] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.809] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.809] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.036] CoCreateGuid (in: pguid=0x12e63c | out: pguid=0x12e63c*(Data1=0x51c5e3b9, Data2=0x64de, Data3=0x4e26, Data4=([0]=0xa5, [1]=0xc5, [2]=0xff, [3]=0x54, [4]=0xfa, [5]=0xd3, [6]=0x74, [7]=0x16))) returned 0x0 [0104.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.177] SysStringLen (param_1=0x0) returned 0x0 [0104.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.183] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x12e55c | out: ppstm=0x12e55c*=0x1dca28) returned 0x0 [0104.186] IUnknown:AddRef (This=0x1dca28) returned 0x2 [0104.186] IStream:RemoteSeek (in: This=0x1dca28, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0104.189] ISequentialStream:RemoteWrite (in: This=0x1dca28, pv=0x259df8*=0x42, cb=0x7dc, pcbWritten=0x12e410 | out: pcbWritten=0x12e410*=0x7dc) returned 0x0 [0104.190] IUnknown:Release (This=0x1dca28) returned 0x1 [0104.190] IStream:Stat (in: This=0x1dca28, pstatstg=0x12e578, grfStatFlag=0x1 | out: pstatstg=0x12e578) returned 0x0 [0104.190] IStream:RemoteSeek (in: This=0x1dca28, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0104.190] ISequentialStream:RemoteRead (in: This=0x1dca28, pv=0x249cc8, cb=0x7dd, pcbRead=0x12e554 | out: pv=0x249cc8*=0x42, pcbRead=0x12e554*=0x7dc) returned 0x0 [0104.190] IUnknown:Release (This=0x1dca28) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 Process: id = "5" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe" page_root = "0x7f134220" os_pid = "0xf78" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0xf70" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 \"/OUT:C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\RES58BA.tmp\" \"c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\CSC58AA.tmp\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 11 os_tid = 0xf7c Process: id = "6" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f1341a0" os_pid = "0x334" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ad2e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 15 os_tid = 0xfe0 Thread: id = 16 os_tid = 0xfdc Thread: id = 17 os_tid = 0xfd8 Thread: id = 18 os_tid = 0xfd4 Thread: id = 19 os_tid = 0xfd0 Thread: id = 20 os_tid = 0xfcc Thread: id = 21 os_tid = 0xfc8 Thread: id = 22 os_tid = 0xfc4 Thread: id = 23 os_tid = 0xe3c Thread: id = 24 os_tid = 0xe38 Thread: id = 25 os_tid = 0xe2c Thread: id = 26 os_tid = 0xe28 Thread: id = 27 os_tid = 0x61c Thread: id = 28 os_tid = 0x548 Thread: id = 29 os_tid = 0x49c Thread: id = 30 os_tid = 0x33c Thread: id = 31 os_tid = 0x764 Thread: id = 32 os_tid = 0x758 Thread: id = 33 os_tid = 0x744 Thread: id = 34 os_tid = 0x738 Thread: id = 35 os_tid = 0x734 Thread: id = 36 os_tid = 0x71c Thread: id = 37 os_tid = 0x694 Thread: id = 38 os_tid = 0x4f0 Thread: id = 39 os_tid = 0x4dc Thread: id = 40 os_tid = 0x4b4 Thread: id = 41 os_tid = 0x4b0 Thread: id = 42 os_tid = 0x4a0 Thread: id = 43 os_tid = 0x494 Thread: id = 44 os_tid = 0x478 Thread: id = 45 os_tid = 0x3cc Thread: id = 46 os_tid = 0x3c0 Thread: id = 47 os_tid = 0x3b4 Thread: id = 48 os_tid = 0x364 Thread: id = 49 os_tid = 0x354 Thread: id = 50 os_tid = 0x350 Thread: id = 51 os_tid = 0x340 Thread: id = 52 os_tid = 0x338 Thread: id = 2926 os_tid = 0x2aa8 Thread: id = 3631 os_tid = 0xb1c Thread: id = 5111 os_tid = 0x2c90 Thread: id = 6657 os_tid = 0x1e7c Thread: id = 7044 os_tid = 0x2d4c Thread: id = 7045 os_tid = 0x2d50 Thread: id = 7609 os_tid = 0x21bc Thread: id = 7699 os_tid = 0x1c5c Thread: id = 7943 os_tid = 0x2fc4 Thread: id = 7944 os_tid = 0x11a0 Thread: id = 7945 os_tid = 0x163c Thread: id = 7946 os_tid = 0x2fd4 Thread: id = 7947 os_tid = 0x2fd8 Thread: id = 9220 os_tid = 0x8a4 Thread: id = 9221 os_tid = 0x2394 Thread: id = 9222 os_tid = 0x2398 Thread: id = 9223 os_tid = 0x23b0 Thread: id = 9224 os_tid = 0x23c8 Thread: id = 9225 os_tid = 0x23cc Thread: id = 9226 os_tid = 0x23d0 Thread: id = 9228 os_tid = 0x23e4 Thread: id = 9243 os_tid = 0x1fb8 Thread: id = 9244 os_tid = 0x2348 Thread: id = 9245 os_tid = 0x234c Thread: id = 9283 os_tid = 0x2454 Thread: id = 9284 os_tid = 0x2464 Process: id = "7" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x7f134c20" os_pid = "0xb24" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00042c6c" [0xc000000f] Thread: id = 53 os_tid = 0xe30 Thread: id = 54 os_tid = 0xb50 Thread: id = 55 os_tid = 0xb40 Thread: id = 56 os_tid = 0xb3c Thread: id = 57 os_tid = 0xb38 Thread: id = 58 os_tid = 0xb34 Thread: id = 59 os_tid = 0xb2c Thread: id = 60 os_tid = 0xb28 Thread: id = 106 os_tid = 0x868 Thread: id = 1152 os_tid = 0x4b8 Thread: id = 8222 os_tid = 0xb7c Thread: id = 9227 os_tid = 0x23dc Thread: id = 9290 os_tid = 0x230c Process: id = "8" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x7f134c00" os_pid = "0xae0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e990" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ad2e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 61 os_tid = 0xe34 Thread: id = 62 os_tid = 0xb00 Thread: id = 63 os_tid = 0xafc Thread: id = 64 os_tid = 0xaf8 Thread: id = 65 os_tid = 0xaf4 Thread: id = 66 os_tid = 0xaf0 Thread: id = 67 os_tid = 0xae8 Thread: id = 68 os_tid = 0xae4 Thread: id = 1117 os_tid = 0x5c8 Thread: id = 7948 os_tid = 0xed8 Thread: id = 8004 os_tid = 0x18e4 Thread: id = 9289 os_tid = 0x2308 Process: id = "9" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x7f134320" os_pid = "0x5bc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0xffffffffffffffff" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 69 os_tid = 0xc9c Thread: id = 70 os_tid = 0xc14 Thread: id = 71 os_tid = 0xbe4 Thread: id = 72 os_tid = 0xbcc Thread: id = 73 os_tid = 0xbc4 Thread: id = 74 os_tid = 0x788 Thread: id = 75 os_tid = 0x418 Thread: id = 76 os_tid = 0x468 Thread: id = 77 os_tid = 0x470 Thread: id = 78 os_tid = 0x270 Thread: id = 79 os_tid = 0x724 Thread: id = 80 os_tid = 0x700 Thread: id = 81 os_tid = 0x6ec Thread: id = 82 os_tid = 0x708 Thread: id = 83 os_tid = 0x28c Thread: id = 84 os_tid = 0x7ac Thread: id = 85 os_tid = 0x79c Thread: id = 86 os_tid = 0x7a8 Thread: id = 87 os_tid = 0x718 Thread: id = 88 os_tid = 0x6e0 Thread: id = 89 os_tid = 0x6dc Thread: id = 90 os_tid = 0x6d8 Thread: id = 91 os_tid = 0x6d4 Thread: id = 92 os_tid = 0x6d0 Thread: id = 93 os_tid = 0x6bc Thread: id = 94 os_tid = 0x6b4 Thread: id = 95 os_tid = 0x6ac Thread: id = 96 os_tid = 0x67c Thread: id = 97 os_tid = 0x610 Thread: id = 98 os_tid = 0x60c Thread: id = 99 os_tid = 0x600 Thread: id = 100 os_tid = 0x5fc Thread: id = 101 os_tid = 0x5f0 Thread: id = 102 os_tid = 0x5cc Thread: id = 103 os_tid = 0x5c0 Thread: id = 104 os_tid = 0x838 [0129.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x288) returned 0x3e59890 [0129.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x309ff58 [0129.066] RtlInitAnsiString (in: DestinationString=0x3f8fe7c, SourceString="NTDLL" | out: DestinationString="NTDLL") [0129.066] RtlAnsiStringToUnicodeString (in: DestinationString=0x3f8fe74, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0 [0129.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e153e8 [0129.066] RtlFreeAnsiString (AnsiString="N") [0129.069] RtlInitUnicodeString (in: DestinationString=0x3f8fe8c, SourceString="NTDLL" | out: DestinationString="NTDLL") [0129.069] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x3f8fe98 | out: BaseAddress=0x3f8fe98*=0x77100000) returned 0x0 [0129.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e153e8) returned 1 [0129.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309ff58) returned 1 [0129.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x309ff58 [0129.070] RtlInitAnsiString (in: DestinationString=0x3f8fe74, SourceString="NTDLL" | out: DestinationString="NTDLL") [0129.070] RtlAnsiStringToUnicodeString (in: DestinationString=0x3f8fe6c, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0 [0129.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e151f0 [0129.070] RtlFreeAnsiString (AnsiString="N") [0129.071] RtlInitUnicodeString (in: DestinationString=0x3f8fe84, SourceString="NTDLL" | out: DestinationString="NTDLL") [0129.071] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x3f8fe90 | out: BaseAddress=0x3f8fe90*=0x77100000) returned 0x0 [0129.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e151f0) returned 1 [0129.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309ff58) returned 1 [0129.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x309ff58 [0129.072] RtlInitAnsiString (in: DestinationString=0x3f8fe6c, SourceString="NTDLL" | out: DestinationString="NTDLL") [0129.072] RtlAnsiStringToUnicodeString (in: DestinationString=0x3f8fe64, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0 [0129.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e153e8 [0129.072] RtlFreeAnsiString (AnsiString="N") [0129.072] RtlInitUnicodeString (in: DestinationString=0x3f8fe7c, SourceString="NTDLL" | out: DestinationString="NTDLL") [0129.072] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x3f8fe88 | out: BaseAddress=0x3f8fe88*=0x77100000) returned 0x0 [0129.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e153e8) returned 1 [0129.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309ff58) returned 1 [0129.186] RtlInitUnicodeString (in: DestinationString=0x3f8fed8, SourceString="netapi32.dll" | out: DestinationString="netapi32.dll") [0129.186] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="netapi32.dll", BaseAddress=0x3f8fed4 | out: BaseAddress=0x3f8fed4*=0x73570000) returned 0x0 [0129.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7) returned 0x309ff58 [0129.193] RtlInitAnsiString (in: DestinationString=0x3f8fe7c, SourceString="SRVCLI" | out: DestinationString="SRVCLI") [0129.193] RtlAnsiStringToUnicodeString (in: DestinationString=0x3f8fe74, SourceString="SRVCLI", AllocateDestinationString=1 | out: DestinationString="SRVCLI") returned 0x0 [0129.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e14f80 [0129.194] RtlFreeAnsiString (AnsiString="S") [0129.194] RtlInitUnicodeString (in: DestinationString=0x3f8fe8c, SourceString="SRVCLI" | out: DestinationString="SRVCLI") [0129.194] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="SRVCLI", BaseAddress=0x3f8fe98 | out: BaseAddress=0x3f8fe98*=0x750f0000) returned 0x0 [0129.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14f80) returned 1 [0129.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309ff58) returned 1 [0129.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9) returned 0x3e14f80 [0129.195] RtlInitAnsiString (in: DestinationString=0x3f8fe74, SourceString="NETUTILS" | out: DestinationString="NETUTILS") [0129.195] RtlAnsiStringToUnicodeString (in: DestinationString=0x3f8fe6c, SourceString="NETUTILS", AllocateDestinationString=1 | out: DestinationString="NETUTILS") returned 0x0 [0129.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x30a4138 [0129.195] RtlFreeAnsiString (AnsiString="N") [0129.195] RtlInitUnicodeString (in: DestinationString=0x3f8fe84, SourceString="NETUTILS" | out: DestinationString="NETUTILS") [0129.195] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NETUTILS", BaseAddress=0x3f8fe90 | out: BaseAddress=0x3f8fe90*=0x73560000) returned 0x0 [0129.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30a4138) returned 1 [0129.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14f80) returned 1 [0129.201] FindResourceA (hModule=0x21c0000, lpName=0x7a69, lpType=0x539) returned 0x21d0048 [0129.201] LoadResource (hModule=0x21c0000, hResInfo=0x21d0048) returned 0x21d0058 [0129.201] LockResource (hResData=0x21d0058) returned 0x21d0058 [0129.201] SizeofResource (hModule=0x21c0000, hResInfo=0x21d0048) returned 0x1542 [0129.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1542) returned 0x30bd4b8 [0129.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3e15070 [0129.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2faea0 [0129.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f95e0 [0129.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f95e0) returned 1 [0129.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2faea0) returned 1 [0129.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4138 [0129.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309ff58 [0129.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4118 [0129.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fd58 [0129.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a3d78 [0129.203] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fd58, Size=0x8) returned 0x309feb8 [0129.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a40f8 [0129.203] strtol (in: _Str="0,\"spsz\":15360,\"thr\":2000,\"namesz\":8,\"idsz\":6,\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQpJZiBmb3Igc29tZSByZWFzb24geW91IHJlYWQgdGhpcyB0ZXh0IGJlZm9yZSB0aGUgZW5jcnlwdGlvbiBlbmRlZCwNCnRoaXMgY2FuIGJlIHVuZGVyc3Rvb2QgYnkgdGhlIGZhY3QgdGhhdCB0aGUgY29tcHV0ZXIgc2xvd3MgZG93biwNCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQuDQpSZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeS4NCg0KLS0NCk91ciAgZW5jcnlwdGlvbiBhbGdvcml0aG1zIGFyZSB2ZXJ5IHN0cm9uZyBhbmQgeW91ciBmaWxlcyBhcmUgdmVyeSB3ZWxsIHByb3RlY3RlZCwNCnRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KDQpEbyBub3QgdHJ5IHRvIHJlY292ZXIgeW91ciBmaWxlcyB3aXRob3V0IGEgZGVjcnlwdGVyIHByb2dyYW0sIHlvdSBtYXkgZGFtYWdlIHRoZW0gYW5kIHRoZW4gdGhleSB3aWxsIGJlIGltcG9zc2libGUgdG8gcmVjb3Zlci4NCg0KRm9yIHVzIHRoaXMgaXMganVzdCBidXNpbmVzcyBhbmQgdG8gcHJvdmUgdG8geW91IG91ciBzZXJpb3VzbmVzcywgd2Ugd2lsbCBkZWNyeXB0IHlvdSBvbmUgZmlsZSBmb3IgZnJlZS4NCkp1c3Qgb3BlbiBvdXIgd2Vic2l0ZSwgdXBsb2FkIHRoZSBlbmNyeXB0ZWQgZmlsZSBhbmQgZ2V0IHRoZSBkZWNyeXB0ZWQgZmlsZSBmb3IgZnJlZS4NCg0KQWRkaXRpb25hbGx5LCB5b3VyIGRhdGEgbWF5IGhhdmUgYmVlbiBzdG9sZW4gYW5kIGlmIHlvdSBkbyBub3QgY29vcGVyYXRlIHdpdGggdXMsIGl0IHdpbGwgYmVjb21lIHB1YmxpY2x5IGF2YWlsYWJsZSBvbiBvdXIgYmxvZy4NCg0KLS0NCg0KU3RlcHMgdG8gZ2V0IGFjY2VzcyBvbiBvdXIgd2Vic2l0ZToNCg0KMS5Eb3dubG9hZCBhbmQgaW5zdGFsbCB0b3ItYnJvd3NlcjogaHR0cHM6Ly90b3Jwcm9qZWN0Lm9yZy8NCg0KMi5PcGVuIG91ciB3ZWJzaXRlOiB7b25pb24xfQ0KSWYgdGhlIHdlYnNpdGUgaXMgbm90IGF2YWlsYWJsZSwgb3BlbiBhbm90aGVyIG9uZToge29uaW9uMn0NCg0KMy5QdXQgeW91ciBwZXJzb25hbCBjb2RlIGluIHRoZSBpbnB1dCBmb3JtOg0KDQp7Y29kZX0=\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10", _EndPtr=0x3f8fe74, _Radix=0 | out: _EndPtr=0x3f8fe74*=",\"spsz\":15360,\"thr\":2000,\"namesz\":8,\"idsz\":6,\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10") returned 0 [0129.203] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309feb8, Size=0xc) returned 0x3e14cc8 [0129.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a40d8 [0129.203] strtol (in: _Str="15360,\"thr\":2000,\"namesz\":8,\"idsz\":6,\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10", _EndPtr=0x3f8fe74, _Radix=0 | out: _EndPtr=0x3f8fe74*=",\"thr\":2000,\"namesz\":8,\"idsz\":6,\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10") returned 15360 [0129.203] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e14cc8, Size=0x10) returned 0x3e145c0 [0129.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a40b8 [0129.203] strtol (in: _Str="2000,\"namesz\":8,\"idsz\":6,\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10", _EndPtr=0x3f8fe74, _Radix=0 | out: _EndPtr=0x3f8fe74*=",\"namesz\":8,\"idsz\":6,\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10") returned 2000 [0129.203] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e145c0, Size=0x14) returned 0x30a4098 [0129.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4078 [0129.204] strtol (in: _Str="8,\"idsz\":6,\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10", _EndPtr=0x3f8fe74, _Radix=0 | out: _EndPtr=0x3f8fe74*=",\"idsz\":6,\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQpJZiBmb3Igc29tZSByZWFzb24geW91IHJlYWQgdGhpcyB0ZXh0IGJlZm9yZSB0aGUgZW5jcnlwdGlvbiBlbmRlZCwNCnRoaXMgY2FuIGJlIHVuZGVyc3Rvb2QgYnkgdGhlIGZhY3QgdGhhdCB0aGUgY29tcHV0ZXIgc2xvd3MgZG93biwNCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQuDQpSZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeS4NCg0KLS0NCk91ciAgZW5jcnlwdGlvbiBhbGdvcml0aG1zIGFyZSB2ZXJ5IHN0cm9uZyBhbmQgeW91ciBmaWxlcyBhcmUgdmVyeSB3ZWxsIHByb3RlY3RlZCwNCnRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KDQpEbyBub3QgdHJ5IHRvIHJlY292ZXIgeW91ciBmaWxlcyB3aXRob3V0IGEgZGVjcnlwdGVyIHByb2dyYW0sIHlvdSBtYXkgZGFtYWdlIHRoZW0gYW5kIHRoZW4gdGhleSB3aWxsIGJlIGltcG9zc2libGUgdG8gcmVjb3Zlci4NCg0KRm9yIHVzIHRoaXMgaXMganVzdCBidXNpbmVzcyBhbmQgdG8gcHJvdmUgdG8geW91IG91ciBzZXJpb3VzbmVzcywgd2Ugd2lsbCBkZWNyeXB0IHlvdSBvbmUgZmlsZSBmb3IgZnJlZS4NCkp1c3Qgb3BlbiBvdXIgd2Vic2l0ZSwgdXBsb2FkIHRoZSBlbmNyeXB0ZWQgZmlsZSBhbmQgZ2V0IHRoZSBkZWNyeXB0ZWQgZmlsZSBmb3IgZnJlZS4NCg0KQWRkaXRpb25hbGx5LCB5b3VyIGRhdGEgbWF5IGhhdmUgYmVlbiBzdG9sZW4gYW5kIGlmIHlvdSBkbyBub3QgY29vcGVyYXRlIHdpdGggdXMsIGl0IHdpbGwgYmVjb21lIHB1YmxpY2x5IGF2YWlsYWJsZSBvbiBvdXIgYmxvZy4NCg0KLS0NCg0KU3RlcHMgdG8gZ2V0IGFjY2VzcyBvbiBvdXIgd2Vic2l0ZToNCg0KMS5Eb3dubG9hZCBhbmQgaW5zdGFsbCB0b3ItYnJvd3NlcjogaHR0cHM6Ly90b3Jwcm9qZWN0Lm9yZy8NCg0KMi5PcGVuIG91ciB3ZWJzaXRlOiB7b25pb24xfQ0KSWYgdGhlIHdlYnNpdGUgaXMgbm90IGF2YWlsYWJsZSwgb3BlbiBhbm90aGVyIG9uZToge29uaW9uMn0NCg0KMy5QdXQgeW91ciBwZXJzb25hbCBjb2RlIGluIHRoZSBpbnB1dCBmb3JtOg0KDQp7Y29kZX0=\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10") returned 8 [0129.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30a4098, Size=0x18) returned 0x30a4058 [0129.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4098 [0129.204] strtol (in: _Str="6,\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10", _EndPtr=0x3f8fe74, _Radix=0 | out: _EndPtr=0x3f8fe74*=",\"pers\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10") returned 6 [0129.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30a4058, Size=0x1c) returned 0x3d4ba18 [0129.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4058 [0129.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4ba18, Size=0x20) returned 0x3d4b7c0 [0129.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4038 [0129.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4b7c0, Size=0x24) returned 0x3df3998 [0129.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4018 [0129.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df3998, Size=0x28) returned 0x3df35a8 [0129.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4338 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df35a8, Size=0x2c) returned 0x3df7a68 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4318 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7a68, Size=0x30) returned 0x3df7e20 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a42f8 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309feb8 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a42d8 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fd58 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a42b8 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fd58, Size=0x8) returned 0x309fea8 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4298 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fea8, Size=0xc) returned 0x3e145c0 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4278 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e145c0, Size=0x10) returned 0x3e14cc8 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4258 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e14cc8, Size=0x14) returned 0x30a4238 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a3ff8 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30a4238, Size=0x18) returned 0x30a4218 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4238 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30a4218, Size=0x1c) returned 0x3d4b7c0 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4218 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4b7c0, Size=0x20) returned 0x3d4ba18 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a41f8 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4ba18, Size=0x24) returned 0x3df35a8 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a41d8 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df35a8, Size=0x28) returned 0x3df3998 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a41b8 [0129.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df3998, Size=0x2c) returned 0x3df7a68 [0129.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4198 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7a68, Size=0x30) returned 0x3df7ec8 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4178 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7ec8, Size=0x34) returned 0x3e54b48 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a3fd8 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54b48, Size=0x38) returned 0x3e54a88 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4358 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54a88, Size=0x3c) returned 0x3e0d8c8 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4378 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d8c8, Size=0x40) returned 0x3e0d838 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4398 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d838, Size=0x44) returned 0x3de6928 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a43b8 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6928, Size=0x48) returned 0x3de6798 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a43d8 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6798, Size=0x4c) returned 0x3e0eae0 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a43f8 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0eae0, Size=0x50) returned 0x3e0f320 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4418 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0f320, Size=0x54) returned 0x2fe1328 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4438 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1328, Size=0x58) returned 0x2fe1ce8 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4458 [0129.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1ce8, Size=0x5c) returned 0x3ecd068 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30a4478 [0129.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ecd068, Size=0x60) returned 0x3ecd138 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c3d8 [0129.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ecd138, Size=0x64) returned 0x3e2ccd8 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c318 [0129.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2ccd8, Size=0x68) returned 0x2ff5e80 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0bcf8 [0129.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff5e80, Size=0x6c) returned 0x30156e8 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0bb78 [0129.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30156e8, Size=0x70) returned 0x3015238 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0bab8 [0129.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3015238, Size=0x74) returned 0x3dc5508 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0be98 [0129.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5508, Size=0x78) returned 0x3dc5108 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0ca38 [0129.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5108, Size=0x7c) returned 0x3e1fff8 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0ca58 [0129.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1fff8, Size=0x80) returned 0x3e20a98 [0129.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c9f8 [0129.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e20a98, Size=0x84) returned 0x3df1f88 [0129.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c9d8 [0129.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df1f88, Size=0x88) returned 0x3df2018 [0129.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c218 [0129.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df2018, Size=0x8c) returned 0x3e2b118 [0129.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c258 [0129.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2b118, Size=0x90) returned 0x3e2afe8 [0129.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c018 [0129.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2afe8, Size=0x94) returned 0x2c7378 [0129.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0bdb8 [0129.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c7378, Size=0x98) returned 0x2c6f18 [0129.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c6d8 [0129.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c6f18, Size=0x9c) returned 0x3053f00 [0129.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c078 [0129.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053f00, Size=0xa0) returned 0x3052fe8 [0129.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c1f8 [0129.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309feb8, Size=0x8) returned 0x309fea8 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0bc78 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309feb8 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c098 [0129.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309feb8, Size=0x8) returned 0x309fd58 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c4f8 [0129.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fd58, Size=0xc) returned 0x3e14cc8 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0be78 [0129.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e14cc8, Size=0x10) returned 0x3e145c0 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c378 [0129.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e145c0, Size=0x14) returned 0x3e0c658 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0baf8 [0129.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0c658, Size=0x18) returned 0x3e0bdf8 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c658 [0129.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0bdf8, Size=0x1c) returned 0x3d4ba18 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0bdf8 [0129.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4ba18, Size=0x20) returned 0x3d4b7c0 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0bef8 [0129.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4b7c0, Size=0x24) returned 0x3df3998 [0129.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c058 [0129.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df3998, Size=0x28) returned 0x3df35a8 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c1d8 [0129.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df35a8, Size=0x2c) returned 0x3df7ec8 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c358 [0129.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7ec8, Size=0x30) returned 0x3df7a68 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c4d8 [0129.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7a68, Size=0x34) returned 0x3e54a88 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c638 [0129.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54a88, Size=0x38) returned 0x3e54b48 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0bb38 [0129.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54b48, Size=0x3c) returned 0x3e0d838 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0bcb8 [0129.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d838, Size=0x40) returned 0x3e0d8c8 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c0f8 [0129.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fea8, Size=0xc) returned 0x3e145c0 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c278 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fea8 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e0c3f8 [0129.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fea8, Size=0x8) returned 0x309fd58 [0129.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b57f8 [0129.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fd58, Size=0xc) returned 0x3e14cc8 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5af8 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e14cc8, Size=0x10) returned 0x3e15088 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b59d8 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15088, Size=0x14) returned 0x30b5898 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5498 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30b5898, Size=0x18) returned 0x30b5638 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5898 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30b5638, Size=0x1c) returned 0x3d4b7c0 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5638 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4b7c0, Size=0x20) returned 0x3d4ba18 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5718 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4ba18, Size=0x24) returned 0x3df35a8 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5658 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df35a8, Size=0x28) returned 0x3df3998 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5418 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df3998, Size=0x2c) returned 0x3df7a68 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5778 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7a68, Size=0x30) returned 0x3df7ec8 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5478 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7ec8, Size=0x34) returned 0x3e54b48 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5ab8 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54b48, Size=0x38) returned 0x3e54a88 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b54b8 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54a88, Size=0x3c) returned 0x3e0d838 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5978 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d838, Size=0x40) returned 0x3e0d760 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5758 [0129.211] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d760, Size=0x44) returned 0x3de6798 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5398 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6798, Size=0x48) returned 0x3de6928 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5a98 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6928, Size=0x4c) returned 0x3e0f320 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5558 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0f320, Size=0x50) returned 0x3e0eae0 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5938 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0eae0, Size=0x54) returned 0x2fe1ce8 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b55d8 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1ce8, Size=0x58) returned 0x2fe1328 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b59b8 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1328, Size=0x5c) returned 0x3ecd138 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5b18 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ecd138, Size=0x60) returned 0x3ecd068 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b56d8 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ecd068, Size=0x64) returned 0x2ff5e80 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b54d8 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff5e80, Size=0x68) returned 0x2ff5080 [0129.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5a78 [0129.212] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff5080, Size=0x6c) returned 0x3015238 [0129.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b59f8 [0129.213] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3015238, Size=0x70) returned 0x30156e8 [0129.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5458 [0129.213] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30156e8, Size=0x74) returned 0x3dc5108 [0129.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74660 [0129.213] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5108, Size=0x78) returned 0x3dc5508 [0129.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e746a0 [0129.213] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5508, Size=0x7c) returned 0x3e20a98 [0129.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73980 [0129.213] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e20a98, Size=0x80) returned 0x3e1fff8 [0129.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73ba0 [0129.213] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1fff8, Size=0x84) returned 0x3df2018 [0129.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73b20 [0129.213] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df2018, Size=0x88) returned 0x3df1f88 [0129.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73c20 [0129.214] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df1f88, Size=0x8c) returned 0x3e2afe8 [0129.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73960 [0129.214] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2afe8, Size=0x90) returned 0x3e2b118 [0129.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73c60 [0129.214] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2b118, Size=0x94) returned 0x2c6f18 [0129.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74880 [0129.214] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c6f18, Size=0x98) returned 0x2c7378 [0129.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74840 [0129.214] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c7378, Size=0x9c) returned 0x3053f00 [0129.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74800 [0129.214] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053f00, Size=0xa0) returned 0x3d84ba0 [0129.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73ae0 [0129.214] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d84ba0, Size=0xa4) returned 0x35c2c8 [0129.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e739e0 [0129.214] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35c2c8, Size=0xa8) returned 0x35b718 [0129.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74620 [0129.265] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35b718, Size=0xac) returned 0x2ff6688 [0129.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74500 [0129.265] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff6688, Size=0xb0) returned 0x2ff6a20 [0129.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73a80 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff6a20, Size=0xb4) returned 0x333528 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e747e0 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x333528, Size=0xb8) returned 0x3329e8 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73a60 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3329e8, Size=0xbc) returned 0x3e34d08 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74640 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e34d08, Size=0xc0) returned 0x3e34c40 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e747a0 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e34c40, Size=0xc4) returned 0x3e1ae08 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74900 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1ae08, Size=0xc8) returned 0x3e1aed8 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74780 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1aed8, Size=0xcc) returned 0x30110b0 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e739c0 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30110b0, Size=0xd0) returned 0x3011d58 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e74460 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7e20, Size=0x34) returned 0x3e54a88 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e747c0 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fd58 [0129.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e73a40 [0129.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fd58, Size=0x8) returned 0x309fea8 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8608 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fd58 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8a88 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fd58, Size=0x8) returned 0x309feb8 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd89a8 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309feb8, Size=0xc) returned 0x3e15088 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd89c8 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15088, Size=0x10) returned 0x3e14cc8 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8648 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e14cc8, Size=0x14) returned 0x2fd8688 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8a28 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd8688, Size=0x18) returned 0x2fd8628 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8688 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd8628, Size=0x1c) returned 0x3d4ba18 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8628 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4ba18, Size=0x20) returned 0x3d4b7c0 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8b28 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4b7c0, Size=0x24) returned 0x3df3998 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd85c8 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df3998, Size=0x28) returned 0x3df35a8 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8988 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df35a8, Size=0x2c) returned 0x3df7e20 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8b08 [0129.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7e20, Size=0x30) returned 0x3df7ec8 [0129.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8668 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7ec8, Size=0x34) returned 0x3e54b48 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d540f8 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54b48, Size=0x38) returned 0x3e54888 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53f98 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54888, Size=0x3c) returned 0x3e0d760 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d537f8 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d760, Size=0x40) returned 0x3e0d838 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54198 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d838, Size=0x44) returned 0x3de6928 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54418 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6928, Size=0x48) returned 0x3de6798 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53838 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6798, Size=0x4c) returned 0x3e0eae0 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53878 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0eae0, Size=0x50) returned 0x3e0f320 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d542f8 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0f320, Size=0x54) returned 0x2fe1328 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d537d8 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1328, Size=0x58) returned 0x2fe1ce8 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53f58 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1ce8, Size=0x5c) returned 0x3ecd068 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53698 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ecd068, Size=0x60) returned 0x3ecd138 [0129.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53758 [0129.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ecd138, Size=0x64) returned 0x2ff5080 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d536d8 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff5080, Size=0x68) returned 0x2ff5e80 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54378 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff5e80, Size=0x6c) returned 0x30156e8 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53798 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30156e8, Size=0x70) returned 0x3015238 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d540b8 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3015238, Size=0x74) returned 0x3dc5508 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54118 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5508, Size=0x78) returned 0x3dc5108 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53958 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5108, Size=0x7c) returned 0x3e1fff8 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53ed8 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1fff8, Size=0x80) returned 0x3e20a98 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54258 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e20a98, Size=0x84) returned 0x3df1f88 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d541b8 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df1f88, Size=0x88) returned 0x3df2018 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d538b8 [0129.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df2018, Size=0x8c) returned 0x3e2b118 [0129.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53578 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2b118, Size=0x90) returned 0x3e2afe8 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d501e0 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2afe8, Size=0x94) returned 0x2c7378 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50280 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c7378, Size=0x98) returned 0x2c6f18 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50260 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c6f18, Size=0x9c) returned 0x3053f00 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50360 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053f00, Size=0xa0) returned 0x3d84ba0 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50340 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d84ba0, Size=0xa4) returned 0x35b718 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50320 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35b718, Size=0xa8) returned 0x35c2c8 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d502a0 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35c2c8, Size=0xac) returned 0x2ff6a20 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50240 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff6a20, Size=0xb0) returned 0x2ff6688 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50380 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff6688, Size=0xb4) returned 0x3329e8 [0129.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50200 [0129.270] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3329e8, Size=0xb8) returned 0x333528 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d500a0 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x333528, Size=0xbc) returned 0x3e34c40 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50400 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e34c40, Size=0xc0) returned 0x3e34d08 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a170 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e34d08, Size=0xc4) returned 0x3e1aed8 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3069f70 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1aed8, Size=0xc8) returned 0x3e1ae08 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a050 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1ae08, Size=0xcc) returned 0x30110b0 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3069e10 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30110b0, Size=0xd0) returned 0x3011fe0 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3069f10 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3011fe0, Size=0xd4) returned 0x2c8648 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a130 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c8648, Size=0xd8) returned 0x2c8568 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb940 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c8568, Size=0xdc) returned 0x3e3a508 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb560 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3a508, Size=0xe0) returned 0x3e39b10 [0129.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb6a0 [0129.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e39b10, Size=0xe4) returned 0x3ddfa68 [0129.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb6c0 [0129.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ddfa68, Size=0xe8) returned 0x3ddee38 [0129.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb740 [0129.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ddee38, Size=0xec) returned 0x3dad468 [0129.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb8a0 [0129.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dad468, Size=0xf0) returned 0x3dad750 [0129.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e127e8 [0129.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dad750, Size=0xf4) returned 0x3e25740 [0129.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e13488 [0129.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e25740, Size=0xf8) returned 0x3e25540 [0129.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e12dc8 [0129.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e25540, Size=0xfc) returned 0x2faea0 [0129.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e130a8 [0129.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2faea0, Size=0x100) returned 0x2f95e0 [0129.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e12d48 [0129.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2f95e0, Size=0x104) returned 0x300dfd8 [0129.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30954a0 [0129.273] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x300dfd8, Size=0x108) returned 0x3debf68 [0129.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3095520 [0129.273] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fea8, Size=0xc) returned 0x3e14cc8 [0129.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30953e0 [0129.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fea8 [0129.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3095540 [0129.273] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fea8, Size=0x8) returned 0x309feb8 [0129.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3095420 [0129.273] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309feb8, Size=0xc) returned 0x3e15088 [0129.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x301be68 [0129.273] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15088, Size=0x10) returned 0x3e15400 [0129.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x301bdc8 [0129.273] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15400, Size=0x14) returned 0x3709b0 [0129.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x370d30 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3709b0, Size=0x18) returned 0x311d20 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3709b0 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x311d20, Size=0x1c) returned 0x3d4b7c0 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x311d20 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4b7c0, Size=0x20) returned 0x3d4ba18 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x312180 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d4ba18, Size=0x24) returned 0x3df35a8 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3046af8 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df35a8, Size=0x28) returned 0x3df3998 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x37cb18 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df3998, Size=0x2c) returned 0x3df7ec8 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x328608 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7ec8, Size=0x30) returned 0x3df7e20 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3dbabc8 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7e20, Size=0x34) returned 0x3e54888 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75580 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54888, Size=0x38) returned 0x3e54b48 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e755a0 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54b48, Size=0x3c) returned 0x3e0d838 [0129.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e755c0 [0129.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d838, Size=0x40) returned 0x3e0d760 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e755e0 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d760, Size=0x44) returned 0x3de6798 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75600 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6798, Size=0x48) returned 0x3de6928 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75620 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6928, Size=0x4c) returned 0x3e0f320 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75640 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0f320, Size=0x50) returned 0x3e0eae0 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75660 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0eae0, Size=0x54) returned 0x2fe1ce8 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75680 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1ce8, Size=0x58) returned 0x2fe1328 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e756a0 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1328, Size=0x5c) returned 0x3ecd138 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e756c0 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ecd138, Size=0x60) returned 0x3ecd068 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e756e0 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ecd068, Size=0x64) returned 0x2ff5e80 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75700 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff5e80, Size=0x68) returned 0x2ff5080 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75720 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff5080, Size=0x6c) returned 0x3015238 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75740 [0129.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3015238, Size=0x70) returned 0x30156e8 [0129.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75760 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30156e8, Size=0x74) returned 0x3dc5108 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75780 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5108, Size=0x78) returned 0x3dc5508 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e757a0 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5508, Size=0x7c) returned 0x3e20a98 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e757c0 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e20a98, Size=0x80) returned 0x3e1fff8 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e757e0 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1fff8, Size=0x84) returned 0x3df2018 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75800 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df2018, Size=0x88) returned 0x3df1f88 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75820 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df1f88, Size=0x8c) returned 0x3e2afe8 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75840 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2afe8, Size=0x90) returned 0x3e2b118 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75860 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e14cc8, Size=0x10) returned 0x3e15400 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75880 [0129.276] strtol (in: _Str="0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10", _EndPtr=0x3f8fe58, _Radix=0 | out: _EndPtr=0x3f8fe58*=",\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x03\x03À§\x03\x03º\x98\x1eñÎÝ\x10") returned 0 [0129.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15400, Size=0x14) returned 0x3e758a0 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e758c0 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309feb8 [0129.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e758e0 [0129.277] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309feb8, Size=0x8) returned 0x309fea8 [0129.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75900 [0129.277] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fea8, Size=0xc) returned 0x3e15400 [0129.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75920 [0129.277] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15400, Size=0x10) returned 0x3e14cc8 [0129.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75940 [0129.277] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e14cc8, Size=0x14) returned 0x3e75960 [0129.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75980 [0129.277] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54a88, Size=0x38) returned 0x3e54b48 [0129.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e759a0 [0129.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fea8 [0129.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e759c0 [0129.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fea8, Size=0x8) returned 0x309feb8 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e759e0 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fea8 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75a00 [0129.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fea8, Size=0x8) returned 0x309fd58 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75a20 [0129.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fd58, Size=0xc) returned 0x3e14cc8 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75a40 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fd58 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75a60 [0129.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fd58, Size=0x8) returned 0x309fea8 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e75a80 [0129.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e54b48, Size=0x3c) returned 0x3e0d760 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fd58 [0129.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x309fd58 [0129.283] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x3df3998, Length=0x20) returned 0x2e9cdbf1 [0129.287] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x0, nSize=0x3f8fd84 | out: lpBuffer=0x0, nSize=0x3f8fd84) returned 0 [0129.287] GetLastError () returned 0xea [0129.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e76540 [0129.287] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x3e76540, nSize=0x3f8fd84 | out: lpBuffer="CRH2YWU7", nSize=0x3f8fd84) returned 1 [0129.287] GetCurrentHwProfileW (in: lpHwProfileInfo=0x3e25540 | out: lpHwProfileInfo=0x3e25540) returned 1 [0129.291] sprintf (in: _Dest=0x3de6928, _Format="%0.2x" | out: _Dest="f0") returned 2 [0129.291] sprintf (in: _Dest=0x3de692a, _Format="%0.2x" | out: _Dest="db") returned 2 [0129.291] sprintf (in: _Dest=0x3de692c, _Format="%0.2x" | out: _Dest="ec") returned 2 [0129.291] sprintf (in: _Dest=0x3de692e, _Format="%0.2x" | out: _Dest="33") returned 2 [0129.291] sprintf (in: _Dest=0x3de6930, _Format="%0.2x" | out: _Dest="01") returned 2 [0129.291] sprintf (in: _Dest=0x3de6932, _Format="%0.2x" | out: _Dest="a1") returned 2 [0129.291] sprintf (in: _Dest=0x3de6934, _Format="%0.2x" | out: _Dest="0c") returned 2 [0129.291] sprintf (in: _Dest=0x3de6936, _Format="%0.2x" | out: _Dest="78") returned 2 [0129.291] sprintf (in: _Dest=0x3de6938, _Format="%0.2x" | out: _Dest="af") returned 2 [0129.291] sprintf (in: _Dest=0x3de693a, _Format="%0.2x" | out: _Dest="95") returned 2 [0129.291] sprintf (in: _Dest=0x3de693c, _Format="%0.2x" | out: _Dest="b5") returned 2 [0129.291] sprintf (in: _Dest=0x3de693e, _Format="%0.2x" | out: _Dest="d7") returned 2 [0129.291] sprintf (in: _Dest=0x3de6940, _Format="%0.2x" | out: _Dest="ef") returned 2 [0129.292] sprintf (in: _Dest=0x3de6942, _Format="%0.2x" | out: _Dest="4f") returned 2 [0129.292] sprintf (in: _Dest=0x3de6944, _Format="%0.2x" | out: _Dest="d3") returned 2 [0129.292] sprintf (in: _Dest=0x3de6946, _Format="%0.2x" | out: _Dest="7b") returned 2 [0129.292] sprintf (in: _Dest=0x3de6948, _Format="%0.2x" | out: _Dest="8e") returned 2 [0129.292] sprintf (in: _Dest=0x3de694a, _Format="%0.2x" | out: _Dest="bf") returned 2 [0129.292] sprintf (in: _Dest=0x3de694c, _Format="%0.2x" | out: _Dest="07") returned 2 [0129.292] sprintf (in: _Dest=0x3de694e, _Format="%0.2x" | out: _Dest="cd") returned 2 [0129.292] sprintf (in: _Dest=0x3de6950, _Format="%0.2x" | out: _Dest="7e") returned 2 [0129.292] sprintf (in: _Dest=0x3de6952, _Format="%0.2x" | out: _Dest="1f") returned 2 [0129.292] sprintf (in: _Dest=0x3de6954, _Format="%0.2x" | out: _Dest="b9") returned 2 [0129.292] sprintf (in: _Dest=0x3de6956, _Format="%0.2x" | out: _Dest="ef") returned 2 [0129.292] sprintf (in: _Dest=0x3de6958, _Format="%0.2x" | out: _Dest="71") returned 2 [0129.292] sprintf (in: _Dest=0x3de695a, _Format="%0.2x" | out: _Dest="d6") returned 2 [0129.292] sprintf (in: _Dest=0x3de695c, _Format="%0.2x" | out: _Dest="cc") returned 2 [0129.292] sprintf (in: _Dest=0x3de695e, _Format="%0.2x" | out: _Dest="f9") returned 2 [0129.292] sprintf (in: _Dest=0x3de6960, _Format="%0.2x" | out: _Dest="0b") returned 2 [0129.292] sprintf (in: _Dest=0x3de6962, _Format="%0.2x" | out: _Dest="1d") returned 2 [0129.292] sprintf (in: _Dest=0x3de6964, _Format="%0.2x" | out: _Dest="67") returned 2 [0129.292] sprintf (in: _Dest=0x3de6966, _Format="%0.2x" | out: _Dest="0b") returned 2 [0129.293] RtlInitAnsiString (in: DestinationString=0x3f8fd48, SourceString="f0dbec3301a10c78af95b5d7ef4fd37b8ebf07cd7e1fb9ef71d6ccf90b1d670b" | out: DestinationString="f0dbec3301a10c78af95b5d7ef4fd37b8ebf07cd7e1fb9ef71d6ccf90b1d670b") [0129.293] RtlAnsiStringToUnicodeString (in: DestinationString=0x3f8fd40, SourceString="f0dbec3301a10c78af95b5d7ef4fd37b8ebf07cd7e1fb9ef71d6ccf90b1d670b", AllocateDestinationString=1 | out: DestinationString="f0dbec3301a10c78af95b5d7ef4fd37b8ebf07cd7e1fb9ef71d6ccf90b1d670b") returned 0x0 [0129.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2018 [0129.293] RtlFreeAnsiString (AnsiString="f") [0129.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58298 [0129.293] wcscpy (in: _Dest=0x3e58298, _Source="\\\\" | out: _Dest="\\\\") returned="\\\\" [0129.293] wcscat (in: _Dest=0x3e58298, _Source="CRH2YWU7" | out: _Dest="\\\\CRH2YWU7") returned="\\\\CRH2YWU7" [0129.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdf50 [0129.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e582b8 [0129.293] wcscpy (in: _Dest=0x3e582b8, _Source="\\\\CRH2YWU7" | out: _Dest="\\\\CRH2YWU7") returned="\\\\CRH2YWU7" [0129.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58298) returned 1 [0129.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0129.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0129.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25540) returned 1 [0129.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e58298 [0129.294] RtlGetVersion (in: lpVersionInformation=0x3f8fdd4 | out: lpVersionInformation=0x3f8fdd4*(dwOSVersionInfoSize=0x2c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0129.294] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x30156f4 | out: Wow64Process=0x30156f4) returned 1 [0129.294] GetCurrentProcessId () returned 0x5bc [0129.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df35a8 [0129.294] wcscpy (in: _Dest=0x3df35a8, _Source="software\\" | out: _Dest="software\\") returned="software\\" [0129.294] wcscat (in: _Dest=0x3df35a8, _Source="f0dbec33" | out: _Dest="software\\f0dbec33") returned="software\\f0dbec33" [0129.295] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="software\\f0dbec33", ulOptions=0x0, samDesired=0x20019, phkResult=0x3f8fd4c | out: phkResult=0x3f8fd4c*=0x0) returned 0x2 [0129.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df35a8 [0129.295] wcscpy (in: _Dest=0x3df35a8, _Source="software\\" | out: _Dest="software\\") returned="software\\" [0129.295] wcscat (in: _Dest=0x3df35a8, _Source="f0dbec33" | out: _Dest="software\\f0dbec33") returned="software\\f0dbec33" [0129.295] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="software\\f0dbec33", ulOptions=0x0, samDesired=0x20019, phkResult=0x3f8fd4c | out: phkResult=0x3f8fd4c*=0x0) returned 0x2 [0129.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0129.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bc98 [0129.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c580 [0129.296] NtQuerySystemTime (in: CurrentTime=0x3f8fd70 | out: CurrentTime=0x3f8fd70*=132471539982972000) returned 0x0 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x5fc06575 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x4be20a5a [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x7a8fd2d1 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x5dbf7dd [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x7350dd8a [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x26a1ab39 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x4a83d83a [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x1dbb2641 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x96a6f32 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x34c45478 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x53c6f72b [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0xe1b7d91 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x4eee5e79 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x1e89fafc [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x7f7a1640 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x1cdb8b06 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x5857e43d [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x4c61a591 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x21225b87 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x649cb881 [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x48a1f5bc [0129.296] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x1ac12a09 [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x1a5853f6 [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x3a8ff0b9 [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x55d8e102 [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x5a4c5a07 [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x506a5ec3 [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x1113a91f [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x42bacba5 [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x1ca27b2a [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0x654c752f [0129.297] RtlRandomEx (in: Seed=0x3f8fd54 | out: Seed=0x3f8fd54) returned 0xa151ea4 [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x609fc267 [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x308d2018 [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x912b953 [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x16fbec3b [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0xded4693 [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x2112b90 [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x363c5d0b [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x5caef7ec [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x1ce20f63 [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x161e985d [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x1c078d50 [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x267ccb5d [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x363c5d0b [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x28f85599 [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x68d74f2d [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x64e213dc [0129.316] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x55f59abc [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x7350dd8a [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x1cdb8b06 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x73f46c8e [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x61e32d00 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x41597ae2 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x3ee432d7 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x781d7c10 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x7b397763 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x551096c [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x70d80bcc [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x7781020 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x6e79a820 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x1730fc66 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x675b60e7 [0129.317] RtlRandomEx (in: Seed=0x3f8fd0c | out: Seed=0x3f8fd0c) returned 0x16d6fee2 [0129.319] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x3d4bc98, Length=0x20) returned 0xad6afe56 [0129.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e0d328 [0129.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015238 [0129.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0129.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0129.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0129.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd10 [0129.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b888 [0129.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b888) returned 1 [0129.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0129.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d328) returned 1 [0129.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3015238 [0129.320] wcscpy (in: _Dest=0x3df35a8, _Source="software\\" | out: _Dest="software\\") returned="software\\" [0129.320] wcscat (in: _Dest=0x3df35a8, _Source="f0dbec33" | out: _Dest="software\\f0dbec33") returned="software\\f0dbec33" [0129.320] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="software\\f0dbec33", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x3f8fd34, lpdwDisposition=0x0 | out: phkResult=0x3f8fd34*=0x0, lpdwDisposition=0x0) returned 0x5 [0129.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df35a8 [0129.321] wcscpy (in: _Dest=0x3df35a8, _Source="software\\" | out: _Dest="software\\") returned="software\\" [0129.321] wcscat (in: _Dest=0x3df35a8, _Source="f0dbec33" | out: _Dest="software\\f0dbec33") returned="software\\f0dbec33" [0129.321] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="software\\f0dbec33", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x3f8fd2c, lpdwDisposition=0x0 | out: phkResult=0x3f8fd2c*=0x864, lpdwDisposition=0x0) returned 0x0 [0129.321] RegSetValueExW (in: hKey=0x864, lpValueName="f0dbec33", Reserved=0x0, dwType=0x3, lpData=0x3e2ae20*, cbData=0x8c | out: lpData=0x3e2ae20*) returned 0x0 [0129.322] RegFlushKey (hKey=0x864) returned 0x0 [0129.928] RegCloseKey (hKey=0x864) returned 0x0 [0129.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 [0129.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e15070 [0129.928] wcscat (in: _Dest=0x3e15070, _Source="f0dbec" | out: _Dest=".f0dbec") returned=".f0dbec" [0129.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7) returned 0x2ffdf30 [0129.928] strstr (_Str="{id}-Readme.txt", _SubStr="{id}") returned="{id}-Readme.txt" [0129.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e582d8 [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x60dbb717 [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x423d28b3 [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x3b722d74 [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x6db81aaa [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x70d80bcc [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x725867c7 [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x1ca27b2a [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x61f5e7dc [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x57b32324 [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x3540d66b [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x69b6778 [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x59a77577 [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x2975077b [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x45853208 [0129.929] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x5567872f [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x7595d300 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x65cff995 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x41ab3a37 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x7469c178 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x1613be0d [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x174721f [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0xea82ba7 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x3239bd59 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x392ec636 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x25ca1874 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x7c9356cb [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x4eddae20 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x487aec61 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x55451dd0 [0129.930] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x57fa172a [0129.931] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x4ecd027c [0129.931] RtlRandomEx (in: Seed=0x3f8fcfc | out: Seed=0x3f8fcfc) returned 0x57fa172a [0129.932] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x3f8fe5c | out: lpLuid=0x3f8fe5c*(LowPart=0x14, HighPart=0)) returned 1 [0129.934] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x3f8fecc | out: TokenHandle=0x3f8fecc*=0x948) returned 0x0 [0129.934] AdjustTokenPrivileges (in: TokenHandle=0x948, DisableAllPrivileges=0, NewState=0x3f8fe64*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0129.934] GetLastError () returned 0x514 [0129.934] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x3f8fe54 | out: lpLuid=0x3f8fe54*(LowPart=0x1d, HighPart=0)) returned 1 [0129.935] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x3f8fec4 | out: TokenHandle=0x3f8fec4*=0xe94) returned 0x0 [0129.935] AdjustTokenPrivileges (in: TokenHandle=0xe94, DisableAllPrivileges=0, NewState=0x3f8fe5c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0129.935] GetLastError () returned 0x514 [0129.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c46e0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0 [0129.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c4450, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0129.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c4530, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0129.938] Sleep (dwMilliseconds=0x0) [0130.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3e67c88 [0130.016] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3e67c88, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3e67c88, ResultLength=0x0) returned 0xc0000004 [0130.018] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e67c88, Size=0x2048) returned 0x803e7b8 [0130.018] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.020] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x306c) returned 0x803e7b8 [0130.020] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.021] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x4090) returned 0x3f2c4b0 [0130.021] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.022] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x50b4) returned 0x3f2c4b0 [0130.022] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.023] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x60d8) returned 0x3f2c4b0 [0130.023] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x70fc) returned 0x3f2c4b0 [0130.024] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x8120) returned 0x3f2c4b0 [0130.026] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.027] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x9144) returned 0x3f2c4b0 [0130.027] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.028] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xa168) returned 0x3f2c4b0 [0130.029] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.030] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xb18c) returned 0x3f2c4b0 [0130.030] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.031] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xc1b0) returned 0x3f2c4b0 [0130.031] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.033] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xd1d4) returned 0x3f2c4b0 [0130.033] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.034] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xe1f8) returned 0x3f2c4b0 [0130.034] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xf21c) returned 0x3f2c4b0 [0130.036] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.037] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x10240) returned 0x3f2c4b0 [0130.037] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x11264) returned 0x3f2c4b0 [0130.039] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.041] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x12288) returned 0x3f2c4b0 [0130.041] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.043] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x132ac) returned 0x3f2c4b0 [0130.043] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f2c4b0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x142d0) returned 0x803e7b8 [0130.047] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.049] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x152f4) returned 0x803e7b8 [0130.049] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.051] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x16318) returned 0x803e7b8 [0130.051] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.053] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x1733c) returned 0x803e7b8 [0130.053] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x18360) returned 0x803e7b8 [0130.055] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.093] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x19384) returned 0x8056b20 [0130.097] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x8056b20, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x8056b20, ResultLength=0x0) returned 0xc0000004 [0130.099] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8056b20, Size=0x1a3a8) returned 0x8056b20 [0130.099] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x8056b20, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x8056b20, ResultLength=0x0) returned 0xc0000004 [0130.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8056b20, Size=0x1b3cc) returned 0x8070ed0 [0130.105] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x8070ed0, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x8070ed0, ResultLength=0x0) returned 0xc0000004 [0130.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8070ed0, Size=0x1c3f0) returned 0x803e7b8 [0130.108] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x1d414) returned 0x803e7b8 [0130.111] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.113] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x1e438) returned 0x803e7b8 [0130.113] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.116] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x1f45c) returned 0x803e7b8 [0130.116] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.118] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x20480) returned 0x803e7b8 [0130.118] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.122] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x214a4) returned 0x803e7b8 [0130.122] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.124] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x224c8) returned 0x803e7b8 [0130.125] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.127] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x234ec) returned 0x803e7b8 [0130.127] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.130] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x24510) returned 0x803e7b8 [0130.130] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.133] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x25534) returned 0x803e7b8 [0130.133] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0130.172] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x26558) returned 0x803e7b8 [0130.172] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x803e7b8, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0x0 [0130.188] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.188] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.188] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.188] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.188] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.188] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.188] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.188] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.188] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.189] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.190] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.191] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.192] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.193] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.194] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.195] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.196] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.197] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.198] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.198] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.198] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.198] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.198] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.199] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.200] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.201] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.202] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.203] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.204] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.205] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.206] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.207] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.208] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.208] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.208] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.208] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.208] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.208] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.208] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.208] NtOpenProcess (in: ProcessHandle=0x3f8feb0, DesiredAccess=0x440, ObjectAttributes=0x3f8fe94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe8c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3f8feb0*=0x0) returned 0xc0000022 [0130.224] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0130.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e1e4e8 [0130.225] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e1e4e8 | out: lpBuffer="C:\\") returned 0x4 [0130.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2ffddc0 [0130.225] wcscpy (in: _Dest=0x2ffddc0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3d9e560 [0130.225] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x3d9e560, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0130.225] wcscat (in: _Dest=0x3d9e560, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0130.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd068 [0130.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cc9c0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0130.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cca70, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4 [0130.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0130.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0130.228] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x3f2e3f8 [0130.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.228] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x306c) returned 0x3f2e3f8 [0130.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.229] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x4090) returned 0x3f2e3f8 [0130.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.229] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x50b4) returned 0x3f2e3f8 [0130.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.229] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x60d8) returned 0x3f2e3f8 [0130.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.229] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x70fc) returned 0x3f2e3f8 [0130.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.230] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x8120) returned 0x3f2e3f8 [0130.230] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.230] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x9144) returned 0x3f2e3f8 [0130.230] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.230] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xa168) returned 0x3f2e3f8 [0130.230] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.230] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xb18c) returned 0x3f2e3f8 [0130.230] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.230] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xc1b0) returned 0x3f2e3f8 [0130.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.231] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xd1d4) returned 0x3f2e3f8 [0130.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.231] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xe1f8) returned 0x3f2e3f8 [0130.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0x0 [0130.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2e3f8) returned 1 [0130.231] NtOpenProcess (in: ProcessHandle=0x3f8fe7c, DesiredAccess=0x400, ObjectAttributes=0x3f8fe90*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe88*(UniqueProcess=0x1ac, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe7c*=0x0) returned 0xc0000022 [0130.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f95e0 [0130.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0130.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0130.231] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x3f2e3f8 [0130.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.232] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x306c) returned 0x3f2e3f8 [0130.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.232] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x4090) returned 0x3f2e3f8 [0130.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.232] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x50b4) returned 0x3f2e3f8 [0130.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.232] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x60d8) returned 0x3f2e3f8 [0130.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.232] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x70fc) returned 0x3f2e3f8 [0130.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.233] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x8120) returned 0x3f2e3f8 [0130.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.233] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x9144) returned 0x3f2e3f8 [0130.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.233] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xa168) returned 0x3f2e3f8 [0130.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.233] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xb18c) returned 0x3f2e3f8 [0130.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.234] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xc1b0) returned 0x3f2e3f8 [0130.234] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.234] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xd1d4) returned 0x3f2e3f8 [0130.234] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.234] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xe1f8) returned 0x3f2e3f8 [0130.234] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0x0 [0130.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2e3f8) returned 1 [0130.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f95e0) returned 1 [0130.235] SetErrorMode (uMode=0x8003) returned 0x1 [0130.235] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0130.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e1e338 [0130.235] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e1e338 | out: lpBuffer="C:\\") returned 0x4 [0130.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2ffddc0 [0130.235] wcscpy (in: _Dest=0x2ffddc0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.235] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0130.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ffddc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0130.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e338) returned 1 [0130.236] Sleep (dwMilliseconds=0x3e8) [0131.915] Sleep (dwMilliseconds=0x3e8) [0134.143] Sleep (dwMilliseconds=0x3e8) [0145.013] Sleep (dwMilliseconds=0x3e8) [0148.889] Sleep (dwMilliseconds=0x3e8) [0151.727] Sleep (dwMilliseconds=0x3e8) [0162.400] Sleep (dwMilliseconds=0x3e8) [0167.210] Sleep (dwMilliseconds=0x3e8) [0168.983] Sleep (dwMilliseconds=0x3e8) [0170.267] Sleep (dwMilliseconds=0x3e8) [0171.289] Sleep (dwMilliseconds=0x3e8) [0177.475] Sleep (dwMilliseconds=0x3e8) [0179.120] Sleep (dwMilliseconds=0x3e8) [0180.731] Sleep (dwMilliseconds=0x3e8) [0185.513] Sleep (dwMilliseconds=0x3e8) [0188.322] Sleep (dwMilliseconds=0x3e8) [0191.153] Sleep (dwMilliseconds=0x3e8) [0192.840] Sleep (dwMilliseconds=0x3e8) [0195.744] Sleep (dwMilliseconds=0x3e8) [0201.954] Sleep (dwMilliseconds=0x3e8) [0203.331] Sleep (dwMilliseconds=0x3e8) [0205.547] Sleep (dwMilliseconds=0x3e8) [0206.576] Sleep (dwMilliseconds=0x3e8) [0211.591] Sleep (dwMilliseconds=0x3e8) [0212.759] Sleep (dwMilliseconds=0x3e8) [0215.357] Sleep (dwMilliseconds=0x3e8) [0219.729] Sleep (dwMilliseconds=0x3e8) [0222.135] Sleep (dwMilliseconds=0x3e8) [0223.622] Sleep (dwMilliseconds=0x3e8) [0225.180] Sleep (dwMilliseconds=0x3e8) [0226.300] Sleep (dwMilliseconds=0x3e8) [0227.423] Sleep (dwMilliseconds=0x3e8) [0228.579] Sleep (dwMilliseconds=0x3e8) [0229.833] Sleep (dwMilliseconds=0x3e8) [0230.880] Sleep (dwMilliseconds=0x3e8) [0231.941] Sleep (dwMilliseconds=0x3e8) [0233.004] Sleep (dwMilliseconds=0x3e8) [0236.262] Sleep (dwMilliseconds=0x3e8) [0237.306] Sleep (dwMilliseconds=0x3e8) [0238.355] Sleep (dwMilliseconds=0x3e8) [0239.556] Sleep (dwMilliseconds=0x3e8) [0240.633] Sleep (dwMilliseconds=0x3e8) [0242.280] Sleep (dwMilliseconds=0x3e8) [0243.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0243.662] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0243.746] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0243.746] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0243.747] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0243.748] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0243.857] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0243.857] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0243.858] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0243.858] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0243.860] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0243.860] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0243.861] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0243.861] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0243.862] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0243.862] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0243.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0243.864] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0243.865] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0243.865] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0243.867] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0243.867] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0243.868] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0243.868] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0243.870] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0243.870] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0243.871] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0243.872] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0xc0000004 [0243.873] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e78700, Size=0xf21c) returned 0x3e78700 [0243.873] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3e78700, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0xc0000004 [0243.876] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e78700, Size=0x10240) returned 0x82e8440 [0243.880] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.882] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x11264) returned 0x82e8440 [0243.882] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.884] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x12288) returned 0x82e8440 [0243.884] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.886] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x132ac) returned 0x82e8440 [0243.886] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x142d0) returned 0x82e8440 [0243.888] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.916] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x152f4) returned 0x82e8440 [0243.916] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.919] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x16318) returned 0x82e8440 [0243.919] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.921] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x1733c) returned 0x82e8440 [0243.921] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.924] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x18360) returned 0x82e8440 [0243.924] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.926] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x19384) returned 0x82e8440 [0243.926] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.929] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x1a3a8) returned 0x82e8440 [0243.929] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.931] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x1b3cc) returned 0x82e8440 [0243.932] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.934] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x1c3f0) returned 0x82e8440 [0243.934] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.937] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x1d414) returned 0x82e8440 [0243.937] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.940] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x1e438) returned 0x82e8440 [0243.940] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.943] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x1f45c) returned 0x82e8440 [0243.943] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x82e8440, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x82e8440, ResultLength=0x0) returned 0xc0000004 [0243.946] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x82e8440, Size=0x20480) returned 0x8146440 [0243.949] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0243.952] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x214a4) returned 0x8146440 [0243.986] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0243.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x224c8) returned 0x8146440 [0243.990] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0243.993] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x234ec) returned 0x8146440 [0243.993] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0243.996] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x24510) returned 0x8146440 [0243.996] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.000] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x25534) returned 0x8146440 [0244.000] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.003] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x26558) returned 0x8146440 [0244.003] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.007] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x2757c) returned 0x8146440 [0244.007] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x2757c, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.010] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x285a0) returned 0x8146440 [0244.011] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x285a0, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.014] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x295c4) returned 0x8146440 [0244.014] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x295c4, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.018] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x2a5e8) returned 0x8146440 [0244.018] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x2a5e8, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.022] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x2b60c) returned 0x8146440 [0244.022] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x2b60c, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.025] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x2c630) returned 0x8146440 [0244.026] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x2c630, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.029] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x2d654) returned 0x8146440 [0244.029] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x2d654, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.092] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x2e678) returned 0x8146440 [0244.092] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x2e678, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.097] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x2f69c) returned 0x8146440 [0244.097] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x2f69c, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x306c0) returned 0x8146440 [0244.102] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x306c0, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x316e4) returned 0x8146440 [0244.106] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x316e4, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x32708) returned 0x8146440 [0244.111] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x32708, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x3372c) returned 0x8146440 [0244.115] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x3372c, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.120] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x34750) returned 0x8146440 [0244.120] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x34750, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.128] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x35774) returned 0x8146440 [0244.128] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x35774, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.133] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x36798) returned 0x8146440 [0244.133] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x36798, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.138] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x377bc) returned 0x8146440 [0244.138] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x377bc, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.149] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x387e0) returned 0x8146440 [0244.149] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x387e0, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.154] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x39804) returned 0x8146440 [0244.154] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x39804, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.159] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x3a828) returned 0x8146440 [0244.159] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x3a828, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.164] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x3b84c) returned 0x8146440 [0244.164] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x3b84c, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.169] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x3c870) returned 0x8146440 [0244.169] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x3c870, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x3d894) returned 0x8146440 [0244.175] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x3d894, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x3e8b8) returned 0x8146440 [0244.180] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x3e8b8, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.185] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x3f8dc) returned 0x8146440 [0244.185] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x8146440, Length=0x3f8dc, ResultLength=0x0 | out: SystemInformation=0x8146440, ResultLength=0x0) returned 0xc0000004 [0244.191] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8146440, Size=0x40900) returned 0x809a360 [0244.196] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x809a360, Length=0x40900, ResultLength=0x0 | out: SystemInformation=0x809a360, ResultLength=0x0) returned 0xc0000004 [0244.201] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x809a360, Size=0x41924) returned 0x809a360 [0244.202] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x809a360, Length=0x41924, ResultLength=0x0 | out: SystemInformation=0x809a360, ResultLength=0x0) returned 0xc0000004 [0244.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x809a360, Size=0x42948) returned 0x809a360 [0244.208] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x809a360, Length=0x42948, ResultLength=0x0 | out: SystemInformation=0x809a360, ResultLength=0x0) returned 0xc0000004 [0244.213] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x809a360, Size=0x4396c) returned 0x809a360 [0244.213] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x809a360, Length=0x4396c, ResultLength=0x0 | out: SystemInformation=0x809a360, ResultLength=0x0) returned 0xc0000004 [0244.226] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x809a360, Size=0x44990) returned 0x14c06008 [0244.232] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x14c06008, Length=0x44990, ResultLength=0x0 | out: SystemInformation=0x14c06008, ResultLength=0x0) returned 0xc0000004 [0244.238] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c06008, Size=0x459b4) returned 0x14c06008 [0244.238] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x14c06008, Length=0x459b4, ResultLength=0x0 | out: SystemInformation=0x14c06008, ResultLength=0x0) returned 0x0 [0244.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0244.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0244.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0244.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0244.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0244.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0244.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0244.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0244.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0244.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0244.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0244.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0244.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0244.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0244.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0244.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0244.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0244.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0244.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0244.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0244.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0244.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0244.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0244.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0244.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0244.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0244.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0244.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0244.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e15388 [0245.439] QueryFullProcessImageNameW (in: hProcess=0x13ec, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x3f8fe84) returned 1 [0245.439] NtClose (Handle=0x13ec) returned 0x0 [0245.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.439] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8208240, Size=0x8) returned 0x8208090 [0245.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.439] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.440] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.440] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.440] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.440] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.440] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.440] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.440] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.440] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.440] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.440] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.440] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.440] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.441] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.441] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.441] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.441] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.441] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.441] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.441] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.441] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.441] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.441] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.441] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.442] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.442] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.442] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x8097eb0 [0245.444] QueryFullProcessImageNameW (in: hProcess=0x13ec, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Windows\\System32\\dwm.exe", lpdwSize=0x3f8fe84) returned 1 [0245.444] NtClose (Handle=0x13ec) returned 0x0 [0245.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15388) returned 1 [0245.444] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8208090, Size=0xc) returned 0x3e15388 [0245.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.445] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.445] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.445] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.445] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.445] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.445] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x8097eb0 [0245.509] QueryFullProcessImageNameW (in: hProcess=0x13ec, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Mail\\veteran.exe", lpdwSize=0x3f8fe84) returned 1 [0245.509] NtClose (Handle=0x13ec) returned 0x0 [0245.509] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x41c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x13ec) returned 0x0 [0245.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e144e8 [0245.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097eb0) returned 1 [0245.509] NtDuplicateObject (in: SourceProcessHandle=0x13ec, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xfb8) returned 0x0 [0245.510] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xfb8 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.510] NtClose (Handle=0xfb8) returned 0x0 [0245.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.510] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.510] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.510] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x8097eb0 [0245.514] QueryFullProcessImageNameW (in: hProcess=0xfb8, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Mail\\volvo.exe", lpdwSize=0x3f8fe84) returned 1 [0245.514] NtClose (Handle=0xfb8) returned 0x0 [0245.514] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x6e8, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xfb8) returned 0x0 [0245.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e144e8, Size=0x18) returned 0x8097650 [0245.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097eb0) returned 1 [0245.514] NtDuplicateObject (in: SourceProcessHandle=0xfb8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x16a4) returned 0x0 [0245.514] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x16a4 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.515] NtClose (Handle=0x16a4) returned 0x0 [0245.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68f40 [0245.518] QueryFullProcessImageNameW (in: hProcess=0x16a4, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Google\\double appeared.exe", lpdwSize=0x3f8fe84) returned 1 [0245.519] NtClose (Handle=0x16a4) returned 0x0 [0245.519] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x6e4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x16a4) returned 0x0 [0245.519] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8097650, Size=0x24) returned 0x3e69900 [0245.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f40) returned 1 [0245.519] NtDuplicateObject (in: SourceProcessHandle=0x16a4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1148) returned 0x0 [0245.519] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1148 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.519] NtClose (Handle=0x1148) returned 0x0 [0245.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.519] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.522] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.522] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.522] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77e18 [0245.523] QueryFullProcessImageNameW (in: hProcess=0x1148, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Java\\vacations entire.exe", lpdwSize=0x3f8fe84) returned 1 [0245.523] NtClose (Handle=0x1148) returned 0x0 [0245.523] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x240, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1148) returned 0x0 [0245.523] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69900, Size=0x30) returned 0x3e77d38 [0245.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0245.523] NtDuplicateObject (in: SourceProcessHandle=0x1148, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x8bc) returned 0x0 [0245.524] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x8bc | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.524] NtClose (Handle=0x8bc) returned 0x0 [0245.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.525] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.525] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.525] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.525] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dcab20 [0245.527] QueryFullProcessImageNameW (in: hProcess=0x8bc, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\relay_judy.exe", lpdwSize=0x3f8fe84) returned 1 [0245.528] NtClose (Handle=0x8bc) returned 0x0 [0245.528] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x10c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x8bc) returned 0x0 [0245.528] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e77d38, Size=0x3c) returned 0x81e3768 [0245.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.528] NtDuplicateObject (in: SourceProcessHandle=0x8bc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1698) returned 0x0 [0245.528] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1698 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.534] NtClose (Handle=0x1698) returned 0x0 [0245.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.534] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.534] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.534] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.534] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dcab20 [0245.538] QueryFullProcessImageNameW (in: hProcess=0x1698, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\anne_quad.exe", lpdwSize=0x3f8fe84) returned 1 [0245.538] NtClose (Handle=0x1698) returned 0x0 [0245.538] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x214, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1698) returned 0x0 [0245.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e3768, Size=0x48) returned 0x3dc5f38 [0245.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.538] NtDuplicateObject (in: SourceProcessHandle=0x1698, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x106c) returned 0x0 [0245.538] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x106c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.538] NtClose (Handle=0x106c) returned 0x0 [0245.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.540] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.540] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.540] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.540] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.542] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.542] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x8097650 [0245.542] QueryFullProcessImageNameW (in: hProcess=0x106c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\rounds.exe", lpdwSize=0x3f8fe84) returned 1 [0245.542] NtClose (Handle=0x106c) returned 0x0 [0245.543] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x40c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x106c) returned 0x0 [0245.543] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5f38, Size=0x54) returned 0x2fe64e8 [0245.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.543] NtDuplicateObject (in: SourceProcessHandle=0x106c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xd14) returned 0x0 [0245.543] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xd14 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.543] NtClose (Handle=0xd14) returned 0x0 [0245.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.543] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.543] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x80991d0 [0245.547] QueryFullProcessImageNameW (in: hProcess=0xd14, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Office\\hopefullycontributing.exe", lpdwSize=0x3f8fe84) returned 1 [0245.547] NtClose (Handle=0xd14) returned 0x0 [0245.547] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x1e4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xd14) returned 0x0 [0245.547] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe64e8, Size=0x60) returned 0x3d8d370 [0245.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80991d0) returned 1 [0245.548] NtDuplicateObject (in: SourceProcessHandle=0xd14, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x168c) returned 0x0 [0245.548] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x168c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.548] NtClose (Handle=0x168c) returned 0x0 [0245.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77d38 [0245.552] QueryFullProcessImageNameW (in: hProcess=0x168c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\woodsvcrmomentum.exe", lpdwSize=0x3f8fe84) returned 1 [0245.552] NtClose (Handle=0x168c) returned 0x0 [0245.552] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x1c0, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x168c) returned 0x0 [0245.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d8d370, Size=0x6c) returned 0x3015670 [0245.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0245.552] NtDuplicateObject (in: SourceProcessHandle=0x168c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x12c8) returned 0x0 [0245.553] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x12c8 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.553] NtClose (Handle=0x12c8) returned 0x0 [0245.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.556] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.556] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.556] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.556] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77d38 [0245.557] QueryFullProcessImageNameW (in: hProcess=0x12c8, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Uninstall Information\\cyberincludedwages.exe", lpdwSize=0x3f8fe84) returned 1 [0245.557] NtClose (Handle=0x12c8) returned 0x0 [0245.557] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x774, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x12c8) returned 0x0 [0245.557] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3015670, Size=0x78) returned 0x3dc5008 [0245.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0245.557] NtDuplicateObject (in: SourceProcessHandle=0x12c8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xfc4) returned 0x0 [0245.557] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xfc4 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.557] NtClose (Handle=0xfc4) returned 0x0 [0245.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x80991d0 [0245.563] QueryFullProcessImageNameW (in: hProcess=0xfc4, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\tortureburnportraits.exe", lpdwSize=0x3f8fe84) returned 1 [0245.563] NtClose (Handle=0xfc4) returned 0x0 [0245.563] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x6a0, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xfc4) returned 0x0 [0245.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5008, Size=0x84) returned 0x81df4a8 [0245.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80991d0) returned 1 [0245.564] NtDuplicateObject (in: SourceProcessHandle=0xfc4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1680) returned 0x0 [0245.564] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1680 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.564] NtClose (Handle=0x1680) returned 0x0 [0245.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0245.568] QueryFullProcessImageNameW (in: hProcess=0x1680, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\coloradoremains.exe", lpdwSize=0x3f8fe84) returned 1 [0245.569] NtClose (Handle=0x1680) returned 0x0 [0245.569] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x684, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1680) returned 0x0 [0245.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81df4a8, Size=0x90) returned 0x3e2a4a0 [0245.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0245.569] NtDuplicateObject (in: SourceProcessHandle=0x1680, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xe44) returned 0x0 [0245.569] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xe44 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.569] NtClose (Handle=0xe44) returned 0x0 [0245.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.572] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.572] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.572] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.573] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.573] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x8097650 [0245.573] QueryFullProcessImageNameW (in: hProcess=0xe44, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Portable Devices\\harvest.exe", lpdwSize=0x3f8fe84) returned 1 [0245.573] NtClose (Handle=0xe44) returned 0x0 [0245.573] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x628, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xe44) returned 0x0 [0245.574] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2a4a0, Size=0x9c) returned 0x3e2d7d0 [0245.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.574] NtDuplicateObject (in: SourceProcessHandle=0xe44, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xfc8) returned 0x0 [0245.574] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xfc8 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.574] NtClose (Handle=0xfc8) returned 0x0 [0245.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.574] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.574] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.575] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.575] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.589] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.589] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.590] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.590] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.590] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.591] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.591] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.591] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.592] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.592] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e3768 [0245.593] QueryFullProcessImageNameW (in: hProcess=0xfc8, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\suggestion spears introduce.exe", lpdwSize=0x3f8fe84) returned 1 [0245.593] NtClose (Handle=0xfc8) returned 0x0 [0245.593] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x224, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xfc8) returned 0x0 [0245.593] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2d7d0, Size=0xa8) returned 0x35c6e8 [0245.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3768) returned 1 [0245.593] NtDuplicateObject (in: SourceProcessHandle=0xfc8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1654) returned 0x0 [0245.593] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1654 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.593] NtClose (Handle=0x1654) returned 0x0 [0245.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.594] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.594] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.594] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.594] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.595] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.595] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.595] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.595] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.596] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.596] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.596] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.596] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.596] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.596] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.597] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.597] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.597] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.597] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e3768 [0245.597] QueryFullProcessImageNameW (in: hProcess=0x1654, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\inquiry-electricity-organic.exe", lpdwSize=0x3f8fe84) returned 1 [0245.598] NtClose (Handle=0x1654) returned 0x0 [0245.598] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x78c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1654) returned 0x0 [0245.598] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35c6e8, Size=0xb4) returned 0x333fa8 [0245.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3768) returned 1 [0245.598] NtDuplicateObject (in: SourceProcessHandle=0x1654, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xb94) returned 0x0 [0245.598] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xb94 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.598] NtClose (Handle=0xb94) returned 0x0 [0245.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.598] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.600] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.600] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.600] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.602] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.602] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x8097650 [0245.602] QueryFullProcessImageNameW (in: hProcess=0xb94, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Sidebar\\mounted.exe", lpdwSize=0x3f8fe84) returned 1 [0245.603] NtClose (Handle=0xb94) returned 0x0 [0245.603] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x390, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xb94) returned 0x0 [0245.603] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x333fa8, Size=0xc0) returned 0x3e34d08 [0245.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.603] NtDuplicateObject (in: SourceProcessHandle=0xb94, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xfd0) returned 0x0 [0245.603] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xfd0 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.603] NtClose (Handle=0xfd0) returned 0x0 [0245.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.603] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.604] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.604] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.604] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.604] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.604] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.604] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.604] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.604] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.605] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.605] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.605] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.605] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.606] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.606] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.606] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.606] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.606] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.606] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.607] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.607] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e69900 [0245.607] QueryFullProcessImageNameW (in: hProcess=0xfd0, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Adobe\\swaziland_echo.exe", lpdwSize=0x3f8fe84) returned 1 [0245.607] NtClose (Handle=0xfd0) returned 0x0 [0245.608] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x380, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xfd0) returned 0x0 [0245.608] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e34d08, Size=0xcc) returned 0x3e65440 [0245.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0245.608] NtDuplicateObject (in: SourceProcessHandle=0xfd0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x940) returned 0x0 [0245.608] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x940 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.608] NtClose (Handle=0x940) returned 0x0 [0245.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.608] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.608] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.608] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e69900 [0245.612] QueryFullProcessImageNameW (in: hProcess=0x940, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Defender\\putsgogothic.exe", lpdwSize=0x3f8fe84) returned 1 [0245.612] NtClose (Handle=0x940) returned 0x0 [0245.612] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x3f0, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x940) returned 0x0 [0245.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e65440, Size=0xd8) returned 0x2c8fe8 [0245.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0245.613] NtDuplicateObject (in: SourceProcessHandle=0x940, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x6cc) returned 0x0 [0245.613] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x6cc | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.613] NtClose (Handle=0x6cc) returned 0x0 [0245.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.616] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.616] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.616] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.616] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.616] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.616] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x80991d0 [0245.617] QueryFullProcessImageNameW (in: hProcess=0x6cc, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Portable Devices\\politiciansexperiencing.exe", lpdwSize=0x3f8fe84) returned 1 [0245.617] NtClose (Handle=0x6cc) returned 0x0 [0245.617] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x3a0, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x6cc) returned 0x0 [0245.617] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c8fe8, Size=0xe4) returned 0x3ddee38 [0245.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80991d0) returned 1 [0245.617] NtDuplicateObject (in: SourceProcessHandle=0x6cc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1d58) returned 0x0 [0245.618] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1d58 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.618] NtClose (Handle=0x1d58) returned 0x0 [0245.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.618] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.618] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.618] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.618] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.618] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.618] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.618] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.619] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.619] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.619] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.619] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.619] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.619] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.619] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.619] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.620] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.620] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.620] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.620] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.620] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.620] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.621] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.621] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.621] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.621] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.621] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.621] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0245.622] QueryFullProcessImageNameW (in: hProcess=0x1d58, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\china_syndicate.exe", lpdwSize=0x3f8fe84) returned 1 [0245.624] NtClose (Handle=0x1d58) returned 0x0 [0245.625] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x778, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1d58) returned 0x0 [0245.625] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ddee38, Size=0xf0) returned 0x3dae1f8 [0245.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0245.625] NtDuplicateObject (in: SourceProcessHandle=0x1d58, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1ef4) returned 0x0 [0245.625] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1ef4 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.625] NtClose (Handle=0x1ef4) returned 0x0 [0245.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.625] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.628] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.628] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.628] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x8097650 [0245.629] QueryFullProcessImageNameW (in: hProcess=0x1ef4, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\3dftp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.629] NtClose (Handle=0x1ef4) returned 0x0 [0245.629] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x64, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1ef4) returned 0x0 [0245.629] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dae1f8, Size=0xfc) returned 0x3ef5078 [0245.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.630] NtDuplicateObject (in: SourceProcessHandle=0x1ef4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x164c) returned 0x0 [0245.630] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x164c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.630] NtClose (Handle=0x164c) returned 0x0 [0245.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e69900 [0245.634] QueryFullProcessImageNameW (in: hProcess=0x164c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\absolutetelnet.exe", lpdwSize=0x3f8fe84) returned 1 [0245.634] NtClose (Handle=0x164c) returned 0x0 [0245.634] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x308, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x164c) returned 0x0 [0245.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef5078, Size=0x108) returned 0x300dc90 [0245.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0245.634] NtDuplicateObject (in: SourceProcessHandle=0x164c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1d90) returned 0x0 [0245.634] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1d90 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.634] NtClose (Handle=0x1d90) returned 0x0 [0245.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x8097650 [0245.639] QueryFullProcessImageNameW (in: hProcess=0x1d90, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Common Files\\alftp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.639] NtClose (Handle=0x1d90) returned 0x0 [0245.639] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x704, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1d90) returned 0x0 [0245.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x300dc90, Size=0x114) returned 0x3d574c8 [0245.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.639] NtDuplicateObject (in: SourceProcessHandle=0x1d90, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1bc0) returned 0x0 [0245.639] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1bc0 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.639] NtClose (Handle=0x1bc0) returned 0x0 [0245.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.640] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.640] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.640] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.640] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.640] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.641] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.641] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.641] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.641] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.641] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.641] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.641] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.641] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.642] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.642] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.642] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.642] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.642] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.642] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.642] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.643] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab20 [0245.643] QueryFullProcessImageNameW (in: hProcess=0x1bc0, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Mozilla Maintenance Service\\bitkinex.exe", lpdwSize=0x3f8fe84) returned 1 [0245.643] NtClose (Handle=0x1bc0) returned 0x0 [0245.643] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x2dc, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1bc0) returned 0x0 [0245.643] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d574c8, Size=0x120) returned 0x3d57e08 [0245.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.644] NtDuplicateObject (in: SourceProcessHandle=0x1bc0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x193c) returned 0x0 [0245.644] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x193c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.644] NtClose (Handle=0x193c) returned 0x0 [0245.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.644] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.644] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x8097650 [0245.648] QueryFullProcessImageNameW (in: hProcess=0x193c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Java\\coreftp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.648] NtClose (Handle=0x193c) returned 0x0 [0245.648] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x80c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x193c) returned 0x0 [0245.648] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d57e08, Size=0x12c) returned 0x3ef85f0 [0245.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.648] NtDuplicateObject (in: SourceProcessHandle=0x193c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x25d4) returned 0x0 [0245.648] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x25d4 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.648] NtClose (Handle=0x25d4) returned 0x0 [0245.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.648] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.651] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.651] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.651] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.651] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.652] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.652] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e144e8 [0245.652] QueryFullProcessImageNameW (in: hProcess=0x25d4, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\far.exe", lpdwSize=0x3f8fe84) returned 1 [0245.653] NtClose (Handle=0x25d4) returned 0x0 [0245.653] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x81c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x25d4) returned 0x0 [0245.653] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef85f0, Size=0x138) returned 0x3ef8c58 [0245.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e144e8) returned 1 [0245.653] NtDuplicateObject (in: SourceProcessHandle=0x25d4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x748) returned 0x0 [0245.653] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x748 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.653] NtClose (Handle=0x748) returned 0x0 [0245.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.653] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dcab20 [0245.657] QueryFullProcessImageNameW (in: hProcess=0x748, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Sidebar\\filezilla.exe", lpdwSize=0x3f8fe84) returned 1 [0245.657] NtClose (Handle=0x748) returned 0x0 [0245.657] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x82c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x748) returned 0x0 [0245.657] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef8c58, Size=0x144) returned 0x3e18260 [0245.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.657] NtDuplicateObject (in: SourceProcessHandle=0x748, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1884) returned 0x0 [0245.658] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1884 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.658] NtClose (Handle=0x1884) returned 0x0 [0245.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.658] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.658] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.658] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.658] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.658] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.658] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.658] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab20 [0245.661] QueryFullProcessImageNameW (in: hProcess=0x1884, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Java\\flashfxp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.662] NtClose (Handle=0x1884) returned 0x0 [0245.662] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x83c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1884) returned 0x0 [0245.662] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e18260, Size=0x150) returned 0x3e16ce0 [0245.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.662] NtDuplicateObject (in: SourceProcessHandle=0x1884, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xabc) returned 0x0 [0245.662] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xabc | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.662] NtClose (Handle=0xabc) returned 0x0 [0245.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.662] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.662] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.663] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.663] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.663] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.663] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.663] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.663] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.663] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.663] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.663] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.664] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.664] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.664] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.664] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.664] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.664] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.664] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.664] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.665] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.665] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.665] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.665] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.665] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.665] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.665] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x8097650 [0245.666] QueryFullProcessImageNameW (in: hProcess=0xabc, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\MSBuild\\fling.exe", lpdwSize=0x3f8fe84) returned 1 [0245.666] NtClose (Handle=0xabc) returned 0x0 [0245.666] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x84c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xabc) returned 0x0 [0245.667] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e16ce0, Size=0x15c) returned 0x3dcd460 [0245.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.667] NtDuplicateObject (in: SourceProcessHandle=0xabc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1028) returned 0x0 [0245.667] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1028 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.667] NtClose (Handle=0x1028) returned 0x0 [0245.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.667] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.667] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.667] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.670] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.670] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.670] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.670] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.670] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.670] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.671] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.671] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.671] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.671] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.672] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.672] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e69900 [0245.672] QueryFullProcessImageNameW (in: hProcess=0x1028, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Office\\foxmailincmail.exe", lpdwSize=0x3f8fe84) returned 1 [0245.673] NtClose (Handle=0x1028) returned 0x0 [0245.673] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x85c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1028) returned 0x0 [0245.673] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcd460, Size=0x168) returned 0x3e396f8 [0245.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0245.673] NtDuplicateObject (in: SourceProcessHandle=0x1028, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x2a94) returned 0x0 [0245.673] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2a94 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.673] NtClose (Handle=0x2a94) returned 0x0 [0245.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.673] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.674] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.674] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.674] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.674] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.675] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.675] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.675] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.675] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77d38 [0245.677] QueryFullProcessImageNameW (in: hProcess=0x2a94, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Media Player\\gmailnotifierpro.exe", lpdwSize=0x3f8fe84) returned 1 [0245.678] NtClose (Handle=0x2a94) returned 0x0 [0245.678] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x86c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x2a94) returned 0x0 [0245.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e396f8, Size=0x174) returned 0x32ef18 [0245.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0245.678] NtDuplicateObject (in: SourceProcessHandle=0x2a94, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x2b5c) returned 0x0 [0245.678] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2b5c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.678] NtClose (Handle=0x2b5c) returned 0x0 [0245.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.682] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e144e8 [0245.682] QueryFullProcessImageNameW (in: hProcess=0x2b5c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Defender\\icq.exe", lpdwSize=0x3f8fe84) returned 1 [0245.683] NtClose (Handle=0x2b5c) returned 0x0 [0245.683] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x87c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x2b5c) returned 0x0 [0245.683] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32ef18, Size=0x180) returned 0x32dcb8 [0245.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e144e8) returned 1 [0245.683] NtDuplicateObject (in: SourceProcessHandle=0x2b5c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1d68) returned 0x0 [0245.683] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1d68 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.683] NtClose (Handle=0x1d68) returned 0x0 [0245.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.683] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.684] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.684] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.684] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.684] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.684] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.684] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.685] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.685] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.685] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.685] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.685] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.685] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.685] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.685] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.686] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.686] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.686] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.686] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.686] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.686] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.686] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.686] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.687] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.687] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.687] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.687] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab20 [0245.687] QueryFullProcessImageNameW (in: hProcess=0x1d68, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\leechftp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.688] NtClose (Handle=0x1d68) returned 0x0 [0245.688] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x88c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1d68) returned 0x0 [0245.688] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32dcb8, Size=0x18c) returned 0x30746a0 [0245.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.688] NtDuplicateObject (in: SourceProcessHandle=0x1d68, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x2680) returned 0x0 [0245.688] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2680 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.688] NtClose (Handle=0x2680) returned 0x0 [0245.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.689] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.689] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.689] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.689] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.689] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.689] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.689] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.690] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.690] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.690] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.690] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.690] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.690] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.690] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.690] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.690] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.691] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.691] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.691] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.691] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.691] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.691] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.691] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.692] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.692] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.692] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.692] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x8097650 [0245.693] QueryFullProcessImageNameW (in: hProcess=0x2680, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Mail\\ncftp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.693] NtClose (Handle=0x2680) returned 0x0 [0245.693] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x89c, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x2680) returned 0x0 [0245.693] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30746a0, Size=0x198) returned 0x3e2fcd8 [0245.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.693] NtDuplicateObject (in: SourceProcessHandle=0x2680, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x2b7c) returned 0x0 [0245.693] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2b7c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.694] NtClose (Handle=0x2b7c) returned 0x0 [0245.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.694] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.694] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.694] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.696] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.696] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.696] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.697] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.697] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.697] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.697] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.697] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.697] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x8097650 [0245.698] QueryFullProcessImageNameW (in: hProcess=0x2b7c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\notepad.exe", lpdwSize=0x3f8fe84) returned 1 [0245.698] NtClose (Handle=0x2b7c) returned 0x0 [0245.699] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x8ac, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x2b7c) returned 0x0 [0245.699] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e2fcd8, Size=0x1a4) returned 0x3e213d8 [0245.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.699] NtDuplicateObject (in: SourceProcessHandle=0x2b7c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1b98) returned 0x0 [0245.699] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1b98 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.699] NtClose (Handle=0x1b98) returned 0x0 [0245.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.700] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.700] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.700] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.700] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.701] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.701] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.701] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.701] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.701] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.701] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.702] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.702] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.702] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.703] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.703] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.703] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.704] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.704] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dcab20 [0245.704] QueryFullProcessImageNameW (in: hProcess=0x1b98, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\operamail.exe", lpdwSize=0x3f8fe84) returned 1 [0245.705] NtClose (Handle=0x1b98) returned 0x0 [0245.705] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x8bc, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1b98) returned 0x0 [0245.705] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e213d8, Size=0x1b0) returned 0x3e21220 [0245.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.705] NtDuplicateObject (in: SourceProcessHandle=0x1b98, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1ba8) returned 0x0 [0245.705] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1ba8 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.706] NtClose (Handle=0x1ba8) returned 0x0 [0245.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.706] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.706] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.706] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.707] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.707] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.707] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.707] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.708] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.708] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.708] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.709] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.709] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.709] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.709] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.709] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.709] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x8097650 [0245.710] QueryFullProcessImageNameW (in: hProcess=0x1ba8, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\pidgin.exe", lpdwSize=0x3f8fe84) returned 1 [0245.710] NtClose (Handle=0x1ba8) returned 0x0 [0245.710] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x8e0, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1ba8) returned 0x0 [0245.710] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e21220, Size=0x1bc) returned 0x30b0550 [0245.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.710] NtDuplicateObject (in: SourceProcessHandle=0x1ba8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x28b8) returned 0x0 [0245.710] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x28b8 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.711] NtClose (Handle=0x28b8) returned 0x0 [0245.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.711] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.711] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.711] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.711] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.711] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.711] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.711] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.712] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.712] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.712] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.712] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.713] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.713] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.713] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.713] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.713] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.713] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.714] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.714] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.714] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.714] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.714] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.714] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dcab20 [0245.715] QueryFullProcessImageNameW (in: hProcess=0x28b8, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\MSBuild\\scriptftp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.716] NtClose (Handle=0x28b8) returned 0x0 [0245.717] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x8f0, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x28b8) returned 0x0 [0245.717] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30b0550, Size=0x1c8) returned 0x300b788 [0245.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.717] NtDuplicateObject (in: SourceProcessHandle=0x28b8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1c58) returned 0x0 [0245.717] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1c58 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.717] NtClose (Handle=0x1c58) returned 0x0 [0245.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.717] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.717] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.717] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.718] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.718] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.718] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.718] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.718] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.719] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.719] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.719] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.719] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.719] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.719] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.719] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.720] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.720] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.720] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.720] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x8097650 [0245.721] QueryFullProcessImageNameW (in: hProcess=0x1c58, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Mozilla Firefox\\skype.exe", lpdwSize=0x3f8fe84) returned 1 [0245.721] NtClose (Handle=0x1c58) returned 0x0 [0245.721] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x900, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1c58) returned 0x0 [0245.722] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x300b788, Size=0x1d4) returned 0x3d593d8 [0245.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.722] NtDuplicateObject (in: SourceProcessHandle=0x1c58, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x2a98) returned 0x0 [0245.722] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2a98 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.722] NtClose (Handle=0x2a98) returned 0x0 [0245.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.722] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.722] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.722] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.722] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.722] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.723] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.723] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.723] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.723] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.724] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.724] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.724] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.724] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.725] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.725] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.725] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab20 [0245.726] QueryFullProcessImageNameW (in: hProcess=0x2a98, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows NT\\smartftp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.726] NtClose (Handle=0x2a98) returned 0x0 [0245.726] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x910, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x2a98) returned 0x0 [0245.726] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d593d8, Size=0x1e0) returned 0x3d595c0 [0245.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.726] NtDuplicateObject (in: SourceProcessHandle=0x2a98, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1cc8) returned 0x0 [0245.726] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1cc8 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.727] NtClose (Handle=0x1cc8) returned 0x0 [0245.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.727] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.727] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.727] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.727] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.727] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.727] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.727] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.728] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.728] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.728] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.728] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.729] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.729] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.729] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.729] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.729] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.729] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.729] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.729] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.730] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.730] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab20 [0245.731] QueryFullProcessImageNameW (in: hProcess=0x1cc8, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\DVD Maker\\totalcmd.exe", lpdwSize=0x3f8fe84) returned 1 [0245.753] NtClose (Handle=0x1cc8) returned 0x0 [0245.753] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x934, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1cc8) returned 0x0 [0245.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d595c0, Size=0x1ec) returned 0x3d54498 [0245.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.753] NtDuplicateObject (in: SourceProcessHandle=0x1cc8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x29b0) returned 0x0 [0245.754] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x29b0 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.754] NtClose (Handle=0x29b0) returned 0x0 [0245.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.756] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.756] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.756] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab20 [0245.758] QueryFullProcessImageNameW (in: hProcess=0x29b0, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Media Player\\trillian.exe", lpdwSize=0x3f8fe84) returned 1 [0245.758] NtClose (Handle=0x29b0) returned 0x0 [0245.758] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x944, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x29b0) returned 0x0 [0245.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d54498, Size=0x1f8) returned 0x341318 [0245.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.758] NtDuplicateObject (in: SourceProcessHandle=0x29b0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x16d8) returned 0x0 [0245.758] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x16d8 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.759] NtClose (Handle=0x16d8) returned 0x0 [0245.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.759] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.759] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.759] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.761] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.761] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.761] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.761] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.762] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.762] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab20 [0245.763] QueryFullProcessImageNameW (in: hProcess=0x16d8, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Mozilla Firefox\\webdrive.exe", lpdwSize=0x3f8fe84) returned 1 [0245.763] NtClose (Handle=0x16d8) returned 0x0 [0245.763] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x954, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x16d8) returned 0x0 [0245.763] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x341318, Size=0x204) returned 0x830f870 [0245.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.763] NtDuplicateObject (in: SourceProcessHandle=0x16d8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1758) returned 0x0 [0245.764] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1758 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.764] NtClose (Handle=0x1758) returned 0x0 [0245.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.764] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.764] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.764] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.765] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.765] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.765] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.765] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.765] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.765] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.765] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.765] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.766] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.766] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.766] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.766] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.766] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.766] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.766] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.766] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.767] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.767] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab20 [0245.767] QueryFullProcessImageNameW (in: hProcess=0x1758, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\whatsapp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.768] NtClose (Handle=0x1758) returned 0x0 [0245.768] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x964, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1758) returned 0x0 [0245.768] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x830f870, Size=0x210) returned 0x830fcc0 [0245.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.768] NtDuplicateObject (in: SourceProcessHandle=0x1758, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x19ac) returned 0x0 [0245.768] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x19ac | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.768] NtClose (Handle=0x19ac) returned 0x0 [0245.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.768] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.769] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.769] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.769] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.769] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.770] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.770] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.770] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.770] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.771] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.771] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.771] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.771] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x8097650 [0245.772] QueryFullProcessImageNameW (in: hProcess=0x19ac, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Office\\winscp.exe", lpdwSize=0x3f8fe84) returned 1 [0245.772] NtClose (Handle=0x19ac) returned 0x0 [0245.772] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x974, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x19ac) returned 0x0 [0245.773] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x830fcc0, Size=0x21c) returned 0x830f870 [0245.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.773] NtDuplicateObject (in: SourceProcessHandle=0x19ac, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xcec) returned 0x0 [0245.773] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xcec | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.773] NtClose (Handle=0xcec) returned 0x0 [0245.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.773] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.773] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.774] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.774] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.774] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.774] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.774] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.775] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.775] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.775] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.775] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.776] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.776] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e69900 [0245.777] QueryFullProcessImageNameW (in: hProcess=0xcec, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\yahoomessenger.exe", lpdwSize=0x3f8fe84) returned 1 [0245.777] NtClose (Handle=0xcec) returned 0x0 [0245.777] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x984, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xcec) returned 0x0 [0245.777] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x830f870, Size=0x228) returned 0x3d87de0 [0245.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0245.777] NtDuplicateObject (in: SourceProcessHandle=0xcec, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x155c) returned 0x0 [0245.777] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x155c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.777] NtClose (Handle=0x155c) returned 0x0 [0245.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e69900 [0245.896] QueryFullProcessImageNameW (in: hProcess=0x155c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\active-charge.exe", lpdwSize=0x3f8fe84) returned 1 [0245.960] NtClose (Handle=0x155c) returned 0x0 [0245.960] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x994, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x155c) returned 0x0 [0245.960] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d87de0, Size=0x234) returned 0x3d89b88 [0245.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0245.961] NtDuplicateObject (in: SourceProcessHandle=0x155c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x2c7c) returned 0x0 [0245.961] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2c7c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.961] NtClose (Handle=0x2c7c) returned 0x0 [0245.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.961] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.961] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.961] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.961] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.961] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.962] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.962] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.962] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.962] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.962] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.962] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.962] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.962] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.962] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.963] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.963] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.963] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.963] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.963] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.963] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.963] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.963] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.963] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.964] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.964] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.964] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.964] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x8097650 [0245.965] QueryFullProcessImageNameW (in: hProcess=0x2c7c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Adobe\\accupos.exe", lpdwSize=0x3f8fe84) returned 1 [0245.965] NtClose (Handle=0x2c7c) returned 0x0 [0245.965] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x9a4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x2c7c) returned 0x0 [0245.965] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d89b88, Size=0x240) returned 0x3d87de0 [0245.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.965] NtDuplicateObject (in: SourceProcessHandle=0x2c7c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xb70) returned 0x0 [0245.965] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xb70 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.965] NtClose (Handle=0xb70) returned 0x0 [0245.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.966] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.966] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.966] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.966] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x8097650 [0245.969] QueryFullProcessImageNameW (in: hProcess=0xb70, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows NT\\afr38.exe", lpdwSize=0x3f8fe84) returned 1 [0245.970] NtClose (Handle=0xb70) returned 0x0 [0245.970] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x9b4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xb70) returned 0x0 [0245.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d87de0, Size=0x24c) returned 0x8100138 [0245.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.970] NtDuplicateObject (in: SourceProcessHandle=0xb70, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1ddc) returned 0x0 [0245.970] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1ddc | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.970] NtClose (Handle=0x1ddc) returned 0x0 [0245.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x8097650 [0245.974] QueryFullProcessImageNameW (in: hProcess=0x1ddc, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\DVD Maker\\aldelo.exe", lpdwSize=0x3f8fe84) returned 1 [0245.974] NtClose (Handle=0x1ddc) returned 0x0 [0245.974] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x9c4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1ddc) returned 0x0 [0245.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8100138, Size=0x258) returned 0x81003a0 [0245.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0245.974] NtDuplicateObject (in: SourceProcessHandle=0x1ddc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1dcc) returned 0x0 [0245.974] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1dcc | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.974] NtClose (Handle=0x1dcc) returned 0x0 [0245.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.975] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.975] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.975] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.975] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.975] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.976] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.976] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.976] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.976] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.976] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.976] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.977] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.977] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0245.977] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0245.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dcab20 [0245.978] QueryFullProcessImageNameW (in: hProcess=0x1dcc, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\ccv_server.exe", lpdwSize=0x3f8fe84) returned 1 [0245.978] NtClose (Handle=0x1dcc) returned 0x0 [0245.978] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x9d4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1dcc) returned 0x0 [0245.978] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81003a0, Size=0x264) returned 0x3e30c60 [0245.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0245.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0245.978] NtDuplicateObject (in: SourceProcessHandle=0x1dcc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x181c) returned 0x0 [0245.978] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x181c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0245.978] NtClose (Handle=0x181c) returned 0x0 [0245.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0245.978] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0245.978] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0245.978] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0245.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0245.979] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0245.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0245.979] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0245.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0245.979] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0245.979] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0245.979] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0245.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0245.979] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0245.980] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0245.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0245.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0245.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0245.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0245.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.000] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77d38 [0246.000] QueryFullProcessImageNameW (in: hProcess=0x181c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Defender\\centralcreditcard.exe", lpdwSize=0x3f8fe84) returned 1 [0246.007] NtClose (Handle=0x181c) returned 0x0 [0246.011] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x9e4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x181c) returned 0x0 [0246.018] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e30c60, Size=0x270) returned 0x3e309d8 [0246.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0246.018] NtDuplicateObject (in: SourceProcessHandle=0x181c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x19bc) returned 0x0 [0246.018] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x19bc | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.018] NtClose (Handle=0x19bc) returned 0x0 [0246.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.018] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.018] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.018] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.019] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.019] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.019] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.019] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.019] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.019] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.019] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.019] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.019] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.020] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.020] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.020] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.020] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.020] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.020] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.020] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.021] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.021] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.021] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.021] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.021] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.021] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.021] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.021] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e69900 [0246.022] QueryFullProcessImageNameW (in: hProcess=0x19bc, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\MSBuild\\creditservice.exe", lpdwSize=0x3f8fe84) returned 1 [0246.023] NtClose (Handle=0x19bc) returned 0x0 [0246.023] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0x9f4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x19bc) returned 0x0 [0246.023] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e309d8, Size=0x27c) returned 0x3e30c60 [0246.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0246.023] NtDuplicateObject (in: SourceProcessHandle=0x19bc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x22f8) returned 0x0 [0246.023] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x22f8 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.023] NtClose (Handle=0x22f8) returned 0x0 [0246.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.023] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.293] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.293] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.293] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.294] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.294] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.294] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x8097650 [0246.295] QueryFullProcessImageNameW (in: hProcess=0x22f8, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Portable Devices\\edcsvr.exe", lpdwSize=0x3f8fe84) returned 1 [0246.295] NtClose (Handle=0x22f8) returned 0x0 [0246.295] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa04, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x22f8) returned 0x0 [0246.295] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e30c60, Size=0x288) returned 0x378430 [0246.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0246.295] NtDuplicateObject (in: SourceProcessHandle=0x22f8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x2bc4) returned 0x0 [0246.295] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2bc4 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.295] NtClose (Handle=0x2bc4) returned 0x0 [0246.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.295] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.296] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.296] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.296] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.296] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.296] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.296] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.297] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.297] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.297] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.297] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.298] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.298] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.298] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.298] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x8097650 [0246.298] QueryFullProcessImageNameW (in: hProcess=0x2bc4, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Journal\\fpos.exe", lpdwSize=0x3f8fe84) returned 1 [0246.298] NtClose (Handle=0x2bc4) returned 0x0 [0246.298] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa14, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x2bc4) returned 0x0 [0246.299] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x378430, Size=0x294) returned 0x378430 [0246.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0246.299] NtDuplicateObject (in: SourceProcessHandle=0x2bc4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x187c) returned 0x0 [0246.299] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x187c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.299] NtClose (Handle=0x187c) returned 0x0 [0246.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.299] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.299] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.299] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.299] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.300] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.300] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.300] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.300] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.300] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.301] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.301] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.301] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.301] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.301] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.301] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.301] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.301] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x8097650 [0246.302] QueryFullProcessImageNameW (in: hProcess=0x187c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\isspos.exe", lpdwSize=0x3f8fe84) returned 1 [0246.302] NtClose (Handle=0x187c) returned 0x0 [0246.302] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa24, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x187c) returned 0x0 [0246.302] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x378430, Size=0x2a0) returned 0x378430 [0246.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0246.302] NtDuplicateObject (in: SourceProcessHandle=0x187c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1d10) returned 0x0 [0246.302] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1d10 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.302] NtClose (Handle=0x1d10) returned 0x0 [0246.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.302] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.302] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.302] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.303] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.303] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.303] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.303] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.303] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.303] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.303] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.303] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.303] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.303] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.303] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.303] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.304] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.304] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.304] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.304] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.304] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.304] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.304] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.304] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.304] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.304] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.304] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.305] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e69900 [0246.305] QueryFullProcessImageNameW (in: hProcess=0x1d10, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\mxslipstream.exe", lpdwSize=0x3f8fe84) returned 1 [0246.305] NtClose (Handle=0x1d10) returned 0x0 [0246.305] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa34, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1d10) returned 0x0 [0246.305] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x378430, Size=0x2ac) returned 0x30661b0 [0246.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0246.305] NtDuplicateObject (in: SourceProcessHandle=0x1d10, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x2c9c) returned 0x0 [0246.305] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2c9c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.306] NtClose (Handle=0x2c9c) returned 0x0 [0246.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.306] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.306] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.306] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.306] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.306] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.306] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.306] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.306] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.306] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.307] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.307] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.307] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.307] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.308] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.308] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.308] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.308] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.308] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.308] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.309] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.309] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.309] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.309] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x8097650 [0246.309] QueryFullProcessImageNameW (in: hProcess=0x2c9c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Office\\omnipos.exe", lpdwSize=0x3f8fe84) returned 1 [0246.309] NtClose (Handle=0x2c9c) returned 0x0 [0246.310] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa44, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x2c9c) returned 0x0 [0246.310] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30661b0, Size=0x2b8) returned 0x30b1a88 [0246.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0246.310] NtDuplicateObject (in: SourceProcessHandle=0x2c9c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1078) returned 0x0 [0246.310] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1078 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.310] NtClose (Handle=0x1078) returned 0x0 [0246.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.310] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.310] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.310] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.310] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.310] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.311] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.311] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.311] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.311] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.311] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.311] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.311] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.311] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.311] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.311] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.312] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.312] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.312] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.312] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.312] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.312] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.312] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.312] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.313] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.313] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.313] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.313] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x8097650 [0246.313] QueryFullProcessImageNameW (in: hProcess=0x1078, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Portable Devices\\spcwin.exe", lpdwSize=0x3f8fe84) returned 1 [0246.314] NtClose (Handle=0x1078) returned 0x0 [0246.314] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa54, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1078) returned 0x0 [0246.314] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30b1a88, Size=0x2c4) returned 0x369e98 [0246.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0246.314] NtDuplicateObject (in: SourceProcessHandle=0x1078, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1c88) returned 0x0 [0246.314] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1c88 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.314] NtClose (Handle=0x1c88) returned 0x0 [0246.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.314] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.314] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.314] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.315] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.315] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.315] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.315] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.315] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.315] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.315] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.315] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.315] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.315] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.316] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.316] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.316] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.316] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.316] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.316] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.316] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.316] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.316] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.317] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.317] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.317] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.317] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.317] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0246.317] QueryFullProcessImageNameW (in: hProcess=0x1c88, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\spgagentservice.exe", lpdwSize=0x3f8fe84) returned 1 [0246.318] NtClose (Handle=0x1c88) returned 0x0 [0246.318] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa64, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1c88) returned 0x0 [0246.318] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x369e98, Size=0x2d0) returned 0x369e98 [0246.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0246.318] NtDuplicateObject (in: SourceProcessHandle=0x1c88, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1cd0) returned 0x0 [0246.318] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1cd0 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.318] NtClose (Handle=0x1cd0) returned 0x0 [0246.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.318] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.318] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.319] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.319] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.319] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.319] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x8097650 [0246.322] QueryFullProcessImageNameW (in: hProcess=0x1cd0, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Java\\utg2.exe", lpdwSize=0x3f8fe84) returned 1 [0246.322] NtClose (Handle=0x1cd0) returned 0x0 [0246.322] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa74, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1cd0) returned 0x0 [0246.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x369e98, Size=0x2dc) returned 0x3e6c6f0 [0246.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097650) returned 1 [0246.322] NtDuplicateObject (in: SourceProcessHandle=0x1cd0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xd1c) returned 0x0 [0246.322] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xd1c | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.322] NtClose (Handle=0xd1c) returned 0x0 [0246.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0246.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0246.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x14850060 [0246.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0246.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x306c) returned 0x8288458 [0246.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0246.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x8092048 [0246.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8092048, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8092048, ResultLength=0x0) returned 0xc0000004 [0246.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8092048, Size=0x50b4) returned 0x81ac440 [0246.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.324] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x60d8) returned 0x81ac440 [0246.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.371] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x70fc) returned 0x81ac440 [0246.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81ac440, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81ac440, ResultLength=0x0) returned 0xc0000004 [0246.371] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81ac440, Size=0x8120) returned 0x840a918 [0246.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.371] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0x9144) returned 0x840a918 [0246.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.371] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xa168) returned 0x840a918 [0246.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.372] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xb18c) returned 0x840a918 [0246.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.372] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xc1b0) returned 0x840a918 [0246.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.372] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xd1d4) returned 0x840a918 [0246.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x840a918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x840a918, ResultLength=0x0) returned 0xc0000004 [0246.372] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x840a918, Size=0xe1f8) returned 0x3e78700 [0246.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e78700, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3e78700, ResultLength=0x0) returned 0x0 [0246.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77d38 [0246.373] QueryFullProcessImageNameW (in: hProcess=0xd1c, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Java\\hang-approximate.exe", lpdwSize=0x3f8fe84) returned 1 [0246.373] NtClose (Handle=0xd1c) returned 0x0 [0246.373] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa84, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xd1c) returned 0x0 [0246.373] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e6c6f0, Size=0x2e8) returned 0x3e6c6f0 [0246.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0246.373] NtDuplicateObject (in: SourceProcessHandle=0xd1c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xac4) returned 0x0 [0246.373] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xac4 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.373] NtClose (Handle=0xac4) returned 0x0 [0246.374] NtDuplicateObject (in: SourceProcessHandle=0xd1c, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0xac4) returned 0x0 [0246.374] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xac4 | out: SectionHandle=0x3f8fe88*=0x1214) returned 0x0 [0246.374] NtMapViewOfSection (in: SectionHandle=0x1214, ProcessHandle=0xffffffff, BaseAddress=0x3f8fea0*=0x0, ZeroBits=0x0, CommitSize=0x1, SectionOffset=0x0, ViewSize=0x3f8fe8c*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x3f8fea0*=0x2280000, SectionOffset=0x0, ViewSize=0x3f8fe8c*=0x1000) returned 0x0 [0246.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x210) returned 0x830e958 [0246.383] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2280000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x830e958, Length=0x210, ResultLength=0x3f8fe90 | out: VirtualMemoryInformation=0x830e958*(SectionFileName.Length=0x6a, SectionFileName.MaximumLength=0x6c, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat"), ResultLength=0x3f8fe90) returned 0x0 [0246.383] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0246.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e144e8 [0246.383] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e144e8 | out: lpBuffer="C:\\") returned 0x4 [0246.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x8208240 [0246.383] wcscpy (in: _Dest=0x8208240, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0246.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x830f870 [0246.383] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x830f870, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0246.383] wcscat (in: _Dest=0x830f870, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0246.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3dc5f38 [0246.385] QueryFullProcessImageNameW (in: hProcess=0xac4, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\supported.exe", lpdwSize=0x3f8fe84) returned 1 [0246.385] NtClose (Handle=0xac4) returned 0x0 [0246.385] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xa94, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0xac4) returned 0x0 [0246.385] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e6c6f0, Size=0x2f4) returned 0x3e6c6f0 [0246.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0246.385] NtDuplicateObject (in: SourceProcessHandle=0xac4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1214) returned 0x0 [0246.385] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1214 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.385] NtClose (Handle=0x1214) returned 0x0 [0246.385] NtDuplicateObject (in: SourceProcessHandle=0xac4, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1214) returned 0x0 [0246.386] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1214 | out: SectionHandle=0x3f8fe88*=0x1738) returned 0x0 [0246.386] NtMapViewOfSection (in: SectionHandle=0x1738, ProcessHandle=0xffffffff, BaseAddress=0x3f8fea0*=0x0, ZeroBits=0x0, CommitSize=0x1, SectionOffset=0x0, ViewSize=0x3f8fe8c*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x3f8fea0*=0x2280000, SectionOffset=0x0, ViewSize=0x3f8fe8c*=0x1000) returned 0x0 [0246.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x210) returned 0x830e958 [0246.386] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2280000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x830e958, Length=0x210, ResultLength=0x3f8fe90 | out: VirtualMemoryInformation=0x830e958*(SectionFileName.Length=0x6a, SectionFileName.MaximumLength=0x6c, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat"), ResultLength=0x3f8fe90) returned 0x0 [0246.386] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0246.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e144e8 [0246.386] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e144e8 | out: lpBuffer="C:\\") returned 0x4 [0246.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x8208240 [0246.387] wcscpy (in: _Dest=0x8208240, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0246.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x830f870 [0246.387] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x830f870, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0246.387] wcscat (in: _Dest=0x830f870, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0246.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3dc5f38 [0246.388] QueryFullProcessImageNameW (in: hProcess=0x1214, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Microsoft Office\\chrisborder.exe", lpdwSize=0x3f8fe84) returned 1 [0246.388] NtClose (Handle=0x1214) returned 0x0 [0246.388] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xaa4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1214) returned 0x0 [0246.388] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e6c6f0, Size=0x300) returned 0x3e6c6f0 [0246.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0246.388] NtDuplicateObject (in: SourceProcessHandle=0x1214, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1738) returned 0x0 [0246.389] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1738 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.389] NtClose (Handle=0x1738) returned 0x0 [0246.389] NtDuplicateObject (in: SourceProcessHandle=0x1214, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1738) returned 0x0 [0246.389] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1738 | out: SectionHandle=0x3f8fe88*=0x1c30) returned 0x0 [0246.389] NtMapViewOfSection (in: SectionHandle=0x1c30, ProcessHandle=0xffffffff, BaseAddress=0x3f8fea0*=0x0, ZeroBits=0x0, CommitSize=0x1, SectionOffset=0x0, ViewSize=0x3f8fe8c*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x3f8fea0*=0x2280000, SectionOffset=0x0, ViewSize=0x3f8fe8c*=0x1000) returned 0x0 [0246.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x210) returned 0x830e958 [0246.389] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2280000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x830e958, Length=0x210, ResultLength=0x3f8fe90 | out: VirtualMemoryInformation=0x830e958*(SectionFileName.Length=0x6a, SectionFileName.MaximumLength=0x6c, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat"), ResultLength=0x3f8fe90) returned 0x0 [0246.389] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0246.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e144e8 [0246.389] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e144e8 | out: lpBuffer="C:\\") returned 0x4 [0246.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x8208240 [0246.390] wcscpy (in: _Dest=0x8208240, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0246.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x830f870 [0246.390] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x830f870, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0246.390] wcscat (in: _Dest=0x830f870, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0246.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3dc5f38 [0246.391] QueryFullProcessImageNameW (in: hProcess=0x1738, dwFlags=0x0, lpExeName=0x830e958, lpdwSize=0x3f8fe84 | out: lpExeName="C:\\Program Files\\Windows Mail\\racing rg neighborhood.exe", lpdwSize=0x3f8fe84) returned 1 [0246.391] NtClose (Handle=0x1738) returned 0x0 [0246.391] NtOpenProcess (in: ProcessHandle=0x3f8fe80, DesiredAccess=0x441, ObjectAttributes=0x3f8fe64*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3f8fe5c*(UniqueProcess=0xab4, UniqueThread=0x0) | out: ProcessHandle=0x3f8fe80*=0x1738) returned 0x0 [0246.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e6c6f0, Size=0x30c) returned 0x3e6c6f0 [0246.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0246.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80991d0) returned 1 [0246.391] NtDuplicateObject (in: SourceProcessHandle=0x1738, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1c30) returned 0x0 [0246.392] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1c30 | out: SectionHandle=0x3f8fe88*=0x0) returned 0xc0000022 [0246.392] NtClose (Handle=0x1c30) returned 0x0 [0246.392] NtDuplicateObject (in: SourceProcessHandle=0x1738, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x3f8feb4, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3f8feb4*=0x1c30) returned 0x0 [0246.392] NtCreateSection (in: SectionHandle=0x3f8fe88, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3f8fe94, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1c30 | out: SectionHandle=0x3f8fe88*=0x1950) returned 0x0 [0246.392] NtMapViewOfSection (in: SectionHandle=0x1950, ProcessHandle=0xffffffff, BaseAddress=0x3f8fea0*=0x0, ZeroBits=0x0, CommitSize=0x1, SectionOffset=0x0, ViewSize=0x3f8fe8c*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x3f8fea0*=0x2280000, SectionOffset=0x0, ViewSize=0x3f8fe8c*=0x1000) returned 0x0 [0246.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x210) returned 0x830e958 [0246.392] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2280000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x830e958, Length=0x210, ResultLength=0x3f8fe90 | out: VirtualMemoryInformation=0x830e958*(SectionFileName.Length=0x6a, SectionFileName.MaximumLength=0x6c, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat"), ResultLength=0x3f8fe90) returned 0x0 [0246.393] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0246.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e144e8 [0246.393] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e144e8 | out: lpBuffer="C:\\") returned 0x4 [0246.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x8208240 [0246.393] wcscpy (in: _Dest=0x8208240, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0246.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x830f870 [0246.393] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x830f870, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0246.393] wcscat (in: _Dest=0x830f870, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0246.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3dc5f38 [0246.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8db90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0246.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80541e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0246.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0246.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80976b0) returned 1 [0246.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15388) returned 1 [0246.467] Sleep (dwMilliseconds=0x3e8) [0247.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb950, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0247.513] Sleep (dwMilliseconds=0x3e8) [0250.349] Sleep (dwMilliseconds=0x3e8) [0251.394] Sleep (dwMilliseconds=0x3e8) [0252.426] Sleep (dwMilliseconds=0x3e8) [0253.471] Sleep (dwMilliseconds=0x3e8) [0254.531] Sleep (dwMilliseconds=0x3e8) [0255.545] Sleep (dwMilliseconds=0x3e8) [0256.591] Sleep (dwMilliseconds=0x3e8) [0257.652] Sleep (dwMilliseconds=0x3e8) [0258.681] Sleep (dwMilliseconds=0x3e8) [0259.757] Sleep (dwMilliseconds=0x3e8) [0260.786] Sleep (dwMilliseconds=0x3e8) [0261.802] Sleep (dwMilliseconds=0x3e8) [0262.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x830e958 [0262.814] SHGetFolderPathW (in: hwnd=0x0, csidl=16, hToken=0x0, dwFlags=0x0, pszPath=0x830e958 | out: pszPath="C:\\Users\\EEBsYm5\\Desktop") returned 0x0 [0262.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe58e8 [0262.815] wcscpy (in: _Dest=0x2fe58e8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0262.815] wcscat (in: _Dest=0x2fe58e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0262.815] wcscat (in: _Dest=0x2fe58e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0262.815] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd1c [0262.817] WriteFile (in: hFile=0xd1c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x3f8fe30, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x3f8fe30*=0x70c, lpOverlapped=0x0) returned 1 [0262.820] CloseHandle (hObject=0xd1c) returned 1 [0262.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x830fcc0 [0262.821] GetSystemDirectoryW (in: lpBuffer=0x830fcc0, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.821] wcscat (in: _Dest=0x830fcc0, _Source="\\notepad.exe" | out: _Dest="C:\\Windows\\system32\\notepad.exe") returned="C:\\Windows\\system32\\notepad.exe" [0262.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053b10 [0262.821] wcscpy (in: _Dest=0x3053b10, _Source="C:\\Windows\\system32\\notepad.exe" | out: _Dest="C:\\Windows\\system32\\notepad.exe") returned="C:\\Windows\\system32\\notepad.exe" [0262.822] wcscat (in: _Dest=0x3053b10, _Source=" " | out: _Dest="C:\\Windows\\system32\\notepad.exe ") returned="C:\\Windows\\system32\\notepad.exe " [0262.822] wcscat (in: _Dest=0x3053b10, _Source="\"" | out: _Dest="C:\\Windows\\system32\\notepad.exe \"") returned="C:\\Windows\\system32\\notepad.exe \"" [0262.822] wcscat (in: _Dest=0x3053b10, _Source="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" | out: _Dest="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0262.822] wcscat (in: _Dest=0x3053b10, _Source="\"" | out: _Dest="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt\"") returned="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt\"" [0262.822] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\notepad.exe", lpCommandLine="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x3f8fe84*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3f8fe58 | out: lpCommandLine="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt\"", lpProcessInformation=0x3f8fe58*(hProcess=0x16bc, hThread=0xd1c, dwProcessId=0x2b7c, dwThreadId=0x1790)) returned 1 [0262.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053b10) returned 1 [0262.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830fcc0) returned 1 [0262.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe58e8) returned 1 [0262.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830e958) returned 1 [0262.852] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0262.853] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0262.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x831d768 [0262.853] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x831d768 | out: lpBuffer="C:\\") returned 0x4 [0262.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3013f18 [0262.853] wcscpy (in: _Dest=0x3013f18, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0262.853] wcscat (in: _Dest=0x3013f18, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\F0DBEC-Readme.txt") returned="C:\\F0DBEC-Readme.txt" [0262.853] CreateFileW (lpFileName="C:\\F0DBEC-Readme.txt" (normalized: "c:\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0262.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3013f18) returned 1 [0262.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831d768) returned 1 Thread: id = 107 os_tid = 0x878 [0129.969] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0129.970] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0129.986] CoUninitialize () [0129.987] Sleep (dwMilliseconds=0xea60) [0140.956] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0140.956] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0140.956] CoUninitialize () [0140.956] Sleep (dwMilliseconds=0xea60) [0151.313] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0151.313] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0151.314] CoUninitialize () [0151.314] Sleep (dwMilliseconds=0xea60) [0162.629] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0162.629] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0162.629] CoUninitialize () [0162.630] Sleep (dwMilliseconds=0xea60) [0173.212] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0173.212] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0173.212] CoUninitialize () [0173.212] Sleep (dwMilliseconds=0xea60) [0184.662] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0184.663] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0184.663] CoUninitialize () [0184.663] Sleep (dwMilliseconds=0xea60) [0195.551] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0195.551] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0195.552] CoUninitialize () [0195.552] Sleep (dwMilliseconds=0xea60) [0206.157] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0206.157] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0206.157] CoUninitialize () [0206.158] Sleep (dwMilliseconds=0xea60) [0217.499] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0217.499] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0217.500] CoUninitialize () [0217.500] Sleep (dwMilliseconds=0xea60) [0229.363] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0229.363] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0229.364] CoUninitialize () [0229.364] Sleep (dwMilliseconds=0xea60) [0239.617] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0239.617] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0239.618] CoUninitialize () [0239.618] Sleep (dwMilliseconds=0xea60) [0252.161] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0252.161] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0252.162] CoUninitialize () [0252.162] Sleep (dwMilliseconds=0xea60) [0262.320] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0262.320] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0262.320] CoUninitialize () [0262.320] Sleep (dwMilliseconds=0xea60) Thread: id = 108 os_tid = 0x888 [0129.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3e67c88 [0129.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e67c88, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3e67c88, ResultLength=0x0) returned 0xc0000004 [0129.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e67c88, Size=0x2048) returned 0x803e7b8 [0129.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x803e7b8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0129.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x306c) returned 0x803e7b8 [0129.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x803e7b8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x803e7b8, ResultLength=0x0) returned 0xc0000004 [0129.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x803e7b8, Size=0x4090) returned 0x3f2c4b0 [0129.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x50b4) returned 0x3f2c4b0 [0129.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x60d8) returned 0x3f2c4b0 [0129.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x70fc) returned 0x3f2c4b0 [0129.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x8120) returned 0x3f2c4b0 [0129.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x9144) returned 0x3f2c4b0 [0129.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xa168) returned 0x3f2c4b0 [0129.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xb18c) returned 0x3f2c4b0 [0129.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xc1b0) returned 0x3f2c4b0 [0129.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xd1d4) returned 0x3f2c4b0 [0129.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0129.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xe1f8) returned 0x3f2c4b0 [0129.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0x0 [0129.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2ffdf30 [0129.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffdf30) returned 1 [0129.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e1e320 [0129.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e320) returned 1 [0129.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e58338 [0129.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0129.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0129.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0129.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0129.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0129.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0129.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0129.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e320 [0129.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e320) returned 1 [0129.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e320 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e320) returned 1 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0129.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0129.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0129.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7e20 [0129.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0129.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4ba18 [0129.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0129.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0129.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0129.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58338 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e54b48 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7e20 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df7e20 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54b48 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e0d448 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d448) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e0d448 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d448) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df35a8 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e54b48 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0129.997] NtOpenProcess (in: ProcessHandle=0x3c0f8b4, DesiredAccess=0x1, ObjectAttributes=0x3c0f898*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c0f890*(UniqueProcess=0x75c, UniqueThread=0x0) | out: ProcessHandle=0x3c0f8b4*=0x278) returned 0x0 [0129.997] NtTerminateProcess (ProcessHandle=0x278, ExitStatus=0x0) returned 0x0 [0130.000] NtClose (Handle=0x278) returned 0x0 [0130.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0130.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e4e8 [0130.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e4e8) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7ad8 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7ad8) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e4e8 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e4e8) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0130.002] NtOpenProcess (in: ProcessHandle=0x3c0f8b4, DesiredAccess=0x1, ObjectAttributes=0x3c0f898*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c0f890*(UniqueProcess=0x8cc, UniqueThread=0x0) | out: ProcessHandle=0x3c0f8b4*=0x278) returned 0x0 [0130.002] NtTerminateProcess (ProcessHandle=0x278, ExitStatus=0x0) returned 0x0 [0130.003] NtClose (Handle=0x278) returned 0x0 [0130.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58338 [0130.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0130.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0130.003] NtOpenProcess (in: ProcessHandle=0x3c0f8b4, DesiredAccess=0x1, ObjectAttributes=0x3c0f898*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c0f890*(UniqueProcess=0x920, UniqueThread=0x0) | out: ProcessHandle=0x3c0f8b4*=0x278) returned 0x0 [0130.003] NtTerminateProcess (ProcessHandle=0x278, ExitStatus=0x0) returned 0x0 [0130.004] NtClose (Handle=0x278) returned 0x0 [0130.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58338 [0130.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0130.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df35a8 [0130.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0130.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58338 [0130.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58338 [0130.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4ba18 [0130.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df7ad8 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7ad8) returned 1 [0130.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df35a8 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58338 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e58338 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58338 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df35a8 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58338 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e58338 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7ad8 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7ad8) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54b48 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4ba18 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0130.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58338 [0130.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58338 [0130.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58338) returned 1 [0130.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2c4b0) returned 1 [0130.008] Sleep (dwMilliseconds=0x64) [0130.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3e67c88 [0130.152] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e67c88, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3e67c88, ResultLength=0x0) returned 0xc0000004 [0130.152] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e67c88, Size=0x2048) returned 0x3f2c4b0 [0130.152] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.152] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x306c) returned 0x3f2c4b0 [0130.152] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.152] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x4090) returned 0x3f2c4b0 [0130.152] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.153] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x50b4) returned 0x3f2c4b0 [0130.153] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.153] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x60d8) returned 0x3f2c4b0 [0130.153] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.153] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x70fc) returned 0x3f2c4b0 [0130.153] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.153] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x8120) returned 0x3f2c4b0 [0130.153] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.154] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0x9144) returned 0x3f2c4b0 [0130.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.154] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xa168) returned 0x3f2c4b0 [0130.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.154] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xb18c) returned 0x3f2c4b0 [0130.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.154] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xc1b0) returned 0x3f2c4b0 [0130.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.155] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xd1d4) returned 0x3f2c4b0 [0130.155] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0xc0000004 [0130.155] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2c4b0, Size=0xe1f8) returned 0x3f2c4b0 [0130.155] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2c4b0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f2c4b0, ResultLength=0x0) returned 0x0 [0130.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2ffddc0 [0130.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 [0130.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e1e4e8 [0130.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e4e8) returned 1 [0130.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e58318 [0130.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e4e8 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e4e8) returned 1 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e4e8 [0130.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e4e8) returned 1 [0130.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df79c0 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4ba18 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58318 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e54b48 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df79c0 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df79c0 [0130.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54b48 [0130.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0130.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e0d448 [0130.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d448) returned 1 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e0d448 [0130.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d448) returned 1 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df35a8 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e54b48 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e4e8 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e4e8) returned 1 [0130.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df79c0 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0130.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e4e8 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e4e8) returned 1 [0130.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58318 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58318 [0130.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0130.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df35a8 [0130.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58318 [0130.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58318 [0130.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4ba18 [0130.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df79c0 [0130.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0130.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df35a8 [0130.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58318 [0130.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e58318 [0130.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58318 [0130.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df35a8 [0130.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58318 [0130.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0130.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e58318 [0130.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df79c0 [0130.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0130.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54b48 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4ba18 [0130.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58318 [0130.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58318 [0130.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58318) returned 1 [0130.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2c4b0) returned 1 [0130.170] Sleep (dwMilliseconds=0x64) [0130.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0130.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0130.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x3f2e3f8 [0130.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x306c) returned 0x3f2e3f8 [0130.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x4090) returned 0x3f2e3f8 [0130.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x50b4) returned 0x3f2e3f8 [0130.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x60d8) returned 0x3f2e3f8 [0130.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x70fc) returned 0x3f2e3f8 [0130.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x8120) returned 0x3f2e3f8 [0130.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0x9144) returned 0x3f2e3f8 [0130.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xa168) returned 0x3f2e3f8 [0130.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xb18c) returned 0x3f2e3f8 [0130.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xc1b0) returned 0x3f2e3f8 [0130.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.397] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xd1d4) returned 0x3f2e3f8 [0130.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.397] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xe1f8) returned 0x3f2e3f8 [0130.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0xc0000004 [0130.397] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f2e3f8, Size=0xf21c) returned 0x3f2e3f8 [0130.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f2e3f8, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3f2e3f8, ResultLength=0x0) returned 0x0 [0130.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2ffddc0 [0130.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 [0130.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e1e338 [0130.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e338) returned 1 [0130.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e58358 [0130.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58358 [0130.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58358 [0130.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4bbd0 [0130.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0130.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4bbd0 [0130.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0130.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58358 [0130.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e338 [0130.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e338) returned 1 [0130.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4bbd0 [0130.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0130.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e338 [0130.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e338) returned 1 [0130.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4bbd0 [0130.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0130.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58358 [0130.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df42f8 [0130.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0130.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7e90 [0130.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0130.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4bbd0 [0130.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0130.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4bbd0 [0130.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0130.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e58358 [0130.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e54848 [0130.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 [0130.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7e90 [0130.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0130.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df7e90 [0130.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0130.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54848 [0130.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 [0130.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df42f8 [0130.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0130.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dfa150 [0130.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa150) returned 1 [0130.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dfa150 [0130.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa150) returned 1 [0130.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df42f8 [0130.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0130.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df42f8 [0130.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0130.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e54848 [0130.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 [0130.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df42f8 [0130.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0130.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58358 [0130.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df42f8 [0130.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0130.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58358 [0130.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4bbd0 [0130.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0130.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58358 [0130.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58358) returned 1 [0130.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e1e338 [0133.975] Sleep (dwMilliseconds=0x64) [0134.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0134.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0134.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x8188458 [0134.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8188458, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x8188458, ResultLength=0x0) returned 0xc0000004 [0134.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8188458, Size=0x306c) returned 0x80527c8 [0134.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x80527c8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x80527c8, ResultLength=0x0) returned 0xc0000004 [0134.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x80527c8, Size=0x4090) returned 0x8065fc8 [0134.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0x50b4) returned 0x8065fc8 [0134.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0x60d8) returned 0x8065fc8 [0134.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0x70fc) returned 0x8065fc8 [0134.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0x8120) returned 0x8065fc8 [0134.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0x9144) returned 0x8065fc8 [0134.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0xa168) returned 0x8065fc8 [0134.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0xb18c) returned 0x8065fc8 [0134.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0xc1b0) returned 0x8065fc8 [0134.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0xd1d4) returned 0x8065fc8 [0134.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0xe1f8) returned 0x8065fc8 [0134.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0xf21c) returned 0x8065fc8 [0134.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0x10240) returned 0x8065fc8 [0134.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0x11264) returned 0x8065fc8 [0134.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0x12288) returned 0x8065fc8 [0134.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0xc0000004 [0134.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8065fc8, Size=0x132ac) returned 0x8065fc8 [0134.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8065fc8, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x8065fc8, ResultLength=0x0) returned 0x0 [0134.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2730 [0161.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0161.317] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0161.318] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x8208458 [0161.318] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8208458, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x8208458, ResultLength=0x0) returned 0xc0000004 [0161.318] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8208458, Size=0x306c) returned 0x8288458 [0161.318] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0161.319] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x81e9630 [0161.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.319] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x50b4) returned 0x81e9630 [0161.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.319] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x60d8) returned 0x81e9630 [0161.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x70fc) returned 0x81e9630 [0161.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x8120) returned 0x81e9630 [0161.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x9144) returned 0x81e9630 [0161.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xa168) returned 0x81e9630 [0161.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xb18c) returned 0x81e9630 [0161.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xc1b0) returned 0x81e9630 [0161.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xd1d4) returned 0x81e9630 [0161.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xe1f8) returned 0x81e9630 [0161.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xf21c) returned 0x81e9630 [0161.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x10240) returned 0x81e9630 [0161.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x11264) returned 0x81e9630 [0161.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.324] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x12288) returned 0x81e9630 [0161.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.324] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x132ac) returned 0x81e9630 [0161.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x142d0) returned 0x81e9630 [0161.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x152f4) returned 0x81e9630 [0161.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x16318) returned 0x81e9630 [0161.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0161.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x1733c) returned 0x81e9630 [0161.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0x0 [0161.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd98 [0162.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x8208458 [0162.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8208458, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x8208458, ResultLength=0x0) returned 0xc0000004 [0162.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8208458, Size=0x306c) returned 0x8288458 [0162.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0162.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x81e9630 [0162.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x50b4) returned 0x81e9630 [0162.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x60d8) returned 0x81e9630 [0162.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x70fc) returned 0x81e9630 [0162.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x8120) returned 0x81e9630 [0162.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x9144) returned 0x81e9630 [0162.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xa168) returned 0x81e9630 [0162.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xb18c) returned 0x81e9630 [0162.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xc1b0) returned 0x81e9630 [0162.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xd1d4) returned 0x81e9630 [0162.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xe1f8) returned 0x81e9630 [0162.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xf21c) returned 0x81e9630 [0162.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x10240) returned 0x81e9630 [0162.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.477] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x11264) returned 0x81e9630 [0162.477] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.477] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x12288) returned 0x81e9630 [0162.477] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.478] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x132ac) returned 0x81e9630 [0162.478] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.478] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x142d0) returned 0x81e9630 [0162.478] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0162.478] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x152f4) returned 0x81e9630 [0162.478] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0x0 [0162.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x36b410 [0163.281] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x8208458 [0163.281] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8208458, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x8208458, ResultLength=0x0) returned 0xc0000004 [0163.282] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8208458, Size=0x306c) returned 0x8288458 [0163.282] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8288458, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x8288458, ResultLength=0x0) returned 0xc0000004 [0163.282] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8288458, Size=0x4090) returned 0x81e9630 [0163.282] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.282] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x50b4) returned 0x81e9630 [0163.282] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.282] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x60d8) returned 0x81e9630 [0163.283] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.283] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x70fc) returned 0x81e9630 [0163.283] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.283] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x8120) returned 0x81e9630 [0163.283] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.283] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x9144) returned 0x81e9630 [0163.284] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.284] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xa168) returned 0x81e9630 [0163.284] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.284] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xb18c) returned 0x81e9630 [0163.284] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.284] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xc1b0) returned 0x81e9630 [0163.285] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.285] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xd1d4) returned 0x81e9630 [0163.285] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.285] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xe1f8) returned 0x81e9630 [0163.285] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.286] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0xf21c) returned 0x81e9630 [0163.286] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.286] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x10240) returned 0x81e9630 [0163.286] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.286] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x11264) returned 0x81e9630 [0163.286] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.287] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x12288) returned 0x81e9630 [0163.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.287] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x132ac) returned 0x81e9630 [0163.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.287] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x142d0) returned 0x81e9630 [0163.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.288] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x152f4) returned 0x81e9630 [0163.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0xc0000004 [0163.288] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x81e9630, Size=0x16318) returned 0x81e9630 [0163.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x81e9630, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x81e9630, ResultLength=0x0) returned 0x0 [0163.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x36b410 [0195.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0195.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0195.034] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x8208458 [0195.034] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8208458, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x8208458, ResultLength=0x0) returned 0xc0000004 [0195.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8208458, Size=0x306c) returned 0x14850060 [0195.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0195.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x4090) returned 0x8409918 [0195.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x50b4) returned 0x8409918 [0195.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x60d8) returned 0x8409918 [0195.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x70fc) returned 0x8409918 [0195.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.037] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x8120) returned 0x8409918 [0195.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.037] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x9144) returned 0x8409918 [0195.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.038] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xa168) returned 0x8409918 [0195.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.038] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xb18c) returned 0x8409918 [0195.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xc1b0) returned 0x8409918 [0195.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xd1d4) returned 0x8409918 [0195.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.040] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xe1f8) returned 0x8409918 [0195.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.040] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xf21c) returned 0x14a46048 [0195.041] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.042] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x10240) returned 0x14a46048 [0195.042] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.042] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x11264) returned 0x14a46048 [0195.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.043] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x12288) returned 0x14a46048 [0195.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.044] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x132ac) returned 0x14a46048 [0195.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.044] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x142d0) returned 0x14a46048 [0195.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x152f4) returned 0x14a46048 [0195.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x16318) returned 0x14a46048 [0195.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x1733c) returned 0x14a46048 [0195.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x18360) returned 0x14a46048 [0195.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x19384) returned 0x14a46048 [0195.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0x0 [0195.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x8208320 [0195.644] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x8208458 [0195.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8208458, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x8208458, ResultLength=0x0) returned 0xc0000004 [0195.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8208458, Size=0x306c) returned 0x14850060 [0195.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0195.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x4090) returned 0x8409918 [0195.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x50b4) returned 0x8409918 [0195.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x60d8) returned 0x8409918 [0195.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x70fc) returned 0x8409918 [0195.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x8120) returned 0x8409918 [0195.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x9144) returned 0x8409918 [0195.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xa168) returned 0x8409918 [0195.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xb18c) returned 0x8409918 [0195.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xc1b0) returned 0x8409918 [0195.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xd1d4) returned 0x8409918 [0195.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.648] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xe1f8) returned 0x8409918 [0195.648] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0195.648] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xf21c) returned 0x14a46048 [0195.648] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.648] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x10240) returned 0x14a46048 [0195.648] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x11264) returned 0x14a46048 [0195.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x12288) returned 0x14a46048 [0195.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x132ac) returned 0x14a46048 [0195.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x142d0) returned 0x14a46048 [0195.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x152f4) returned 0x14a46048 [0195.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x16318) returned 0x14a46048 [0195.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0xc0000004 [0195.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14a46048, Size=0x1733c) returned 0x14a46048 [0195.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14a46048, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x14a46048, ResultLength=0x0) returned 0x0 [0195.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x8208320 [0201.367] Sleep (dwMilliseconds=0x64) [0201.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0201.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0201.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x148c6060 [0201.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x148c6060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x148c6060, ResultLength=0x0) returned 0xc0000004 [0201.889] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x148c6060, Size=0x306c) returned 0x14850060 [0201.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0201.889] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x4090) returned 0x8409918 [0201.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.890] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x50b4) returned 0x8409918 [0201.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.890] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x60d8) returned 0x8409918 [0201.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.891] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x70fc) returned 0x8409918 [0201.891] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.891] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x8120) returned 0x8409918 [0201.891] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.891] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x9144) returned 0x8409918 [0201.892] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.892] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xa168) returned 0x8409918 [0201.892] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.892] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xb18c) returned 0x8409918 [0201.892] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xc1b0) returned 0x8409918 [0201.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xd1d4) returned 0x8409918 [0201.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xe1f8) returned 0x8409918 [0201.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0201.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xf21c) returned 0x14c46048 [0201.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0201.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x10240) returned 0x14c46048 [0201.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0201.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x11264) returned 0x14c46048 [0201.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0201.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x12288) returned 0x14c46048 [0201.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0201.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x132ac) returned 0x14c46048 [0201.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0201.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x142d0) returned 0x14c46048 [0201.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0201.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x152f4) returned 0x14c46048 [0201.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0201.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x16318) returned 0x14c46048 [0201.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0x0 [0201.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2f2b98 [0201.898] Sleep (dwMilliseconds=0x64) [0202.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0202.937] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0202.938] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x148c6060 [0202.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x148c6060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x148c6060, ResultLength=0x0) returned 0xc0000004 [0202.938] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x148c6060, Size=0x306c) returned 0x14850060 [0202.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14850060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x14850060, ResultLength=0x0) returned 0xc0000004 [0202.938] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14850060, Size=0x4090) returned 0x8409918 [0202.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.939] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x50b4) returned 0x8409918 [0202.939] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.939] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x60d8) returned 0x8409918 [0202.939] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.939] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x70fc) returned 0x8409918 [0202.939] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.939] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x8120) returned 0x8409918 [0202.939] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.940] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0x9144) returned 0x8409918 [0202.940] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.940] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xa168) returned 0x8409918 [0202.940] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.940] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xb18c) returned 0x8409918 [0202.941] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.941] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xc1b0) returned 0x8409918 [0202.941] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.941] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xd1d4) returned 0x8409918 [0202.941] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.941] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xe1f8) returned 0x8409918 [0202.941] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8409918, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x8409918, ResultLength=0x0) returned 0xc0000004 [0202.942] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x8409918, Size=0xf21c) returned 0x14c46048 [0202.942] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0202.942] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x10240) returned 0x14c46048 [0202.942] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0202.942] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x11264) returned 0x14c46048 [0202.942] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0202.943] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x12288) returned 0x14c46048 [0202.943] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0202.943] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x132ac) returned 0x14c46048 [0202.943] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0202.943] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x142d0) returned 0x14c46048 [0202.943] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0202.944] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x152f4) returned 0x14c46048 [0202.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0202.944] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x16318) returned 0x14c46048 [0202.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0xc0000004 [0202.944] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x14c46048, Size=0x1733c) returned 0x14c46048 [0202.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x14c46048, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x14c46048, ResultLength=0x0) returned 0x0 [0202.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2f2b98 Thread: id = 109 os_tid = 0x898 Thread: id = 110 os_tid = 0x8b8 [0130.238] WaitForSingleObject (hHandle=0xe78, dwMilliseconds=0x0) returned 0x102 [0130.238] Sleep (dwMilliseconds=0x1) [0130.280] WaitForSingleObject (hHandle=0xe78, dwMilliseconds=0x0) returned 0x0 [0130.280] CloseHandle (hObject=0xe78) returned 1 [0130.280] WaitForSingleObject (hHandle=0xe8c, dwMilliseconds=0x0) returned 0x0 [0130.280] CloseHandle (hObject=0xe8c) returned 1 [0130.280] WaitForSingleObject (hHandle=0xe04, dwMilliseconds=0x0) returned 0x0 [0130.280] CloseHandle (hObject=0xe04) returned 1 [0130.280] WaitForSingleObject (hHandle=0xea8, dwMilliseconds=0x0) returned 0x102 [0130.280] WaitForSingleObject (hHandle=0xef0, dwMilliseconds=0x0) returned 0x102 [0130.280] WaitForSingleObject (hHandle=0xe6c, dwMilliseconds=0x0) returned 0x102 [0130.280] WaitForSingleObject (hHandle=0xb44, dwMilliseconds=0x0) returned 0x102 [0130.280] WaitForSingleObject (hHandle=0xe58, dwMilliseconds=0x0) returned 0x102 [0130.281] Sleep (dwMilliseconds=0x1) [0130.418] WaitForSingleObject (hHandle=0xe8c, dwMilliseconds=0x0) returned 0x0 [0130.418] CloseHandle (hObject=0xe8c) returned 1 [0130.418] WaitForSingleObject (hHandle=0xe78, dwMilliseconds=0x0) returned 0x0 [0130.418] CloseHandle (hObject=0xe78) returned 1 [0130.418] WaitForSingleObject (hHandle=0xc08, dwMilliseconds=0x0) returned 0x102 [0130.418] WaitForSingleObject (hHandle=0xea8, dwMilliseconds=0x0) returned 0x0 [0130.418] CloseHandle (hObject=0xea8) returned 1 [0130.418] WaitForSingleObject (hHandle=0xef0, dwMilliseconds=0x0) returned 0x0 [0130.418] CloseHandle (hObject=0xef0) returned 1 [0130.418] WaitForSingleObject (hHandle=0xe6c, dwMilliseconds=0x0) returned 0x102 [0130.419] WaitForSingleObject (hHandle=0xb44, dwMilliseconds=0x0) returned 0x0 [0130.419] CloseHandle (hObject=0xb44) returned 1 [0130.419] WaitForSingleObject (hHandle=0xe58, dwMilliseconds=0x0) returned 0x0 [0130.419] CloseHandle (hObject=0xe58) returned 1 [0130.419] WaitForSingleObject (hHandle=0xec4, dwMilliseconds=0x0) returned 0x102 [0130.419] WaitForSingleObject (hHandle=0xb3c, dwMilliseconds=0x0) returned 0x102 [0130.419] WaitForSingleObject (hHandle=0xe80, dwMilliseconds=0x0) returned 0x102 [0130.419] WaitForSingleObject (hHandle=0xec0, dwMilliseconds=0x0) returned 0x102 [0130.419] WaitForSingleObject (hHandle=0xb34, dwMilliseconds=0x0) returned 0x102 [0130.419] WaitForSingleObject (hHandle=0xe98, dwMilliseconds=0x0) returned 0x102 [0130.419] WaitForSingleObject (hHandle=0xef4, dwMilliseconds=0x0) returned 0x102 [0130.419] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0x0) returned 0x102 [0130.419] WaitForSingleObject (hHandle=0xe68, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0xec8, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0xb08, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0xeac, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0xee8, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0xeb8, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0xee4, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x57c, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x578, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x5ac, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x574, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x5a0, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x570, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x594, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x598, dwMilliseconds=0x0) returned 0x102 [0130.420] WaitForSingleObject (hHandle=0x56c, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0x588, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0x58c, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0x568, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0x580, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0x584, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0x564, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0x55c, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0x560, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0xb20, dwMilliseconds=0x0) returned 0x102 [0130.421] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0x0) returned 0x102 [0130.421] Sleep (dwMilliseconds=0x1) [0131.184] WaitForSingleObject (hHandle=0xb44, dwMilliseconds=0x0) returned 0x102 [0131.184] WaitForSingleObject (hHandle=0xef0, dwMilliseconds=0x0) returned 0x0 [0131.184] CloseHandle (hObject=0xef0) returned 1 [0131.184] WaitForSingleObject (hHandle=0xc08, dwMilliseconds=0x0) returned 0x0 [0131.184] CloseHandle (hObject=0xc08) returned 1 [0131.184] WaitForSingleObject (hHandle=0xea8, dwMilliseconds=0x0) returned 0x102 [0131.184] WaitForSingleObject (hHandle=0xe78, dwMilliseconds=0x0) returned 0x0 [0131.185] CloseHandle (hObject=0xe78) returned 1 [0131.185] WaitForSingleObject (hHandle=0xe6c, dwMilliseconds=0x0) returned 0x0 [0131.185] CloseHandle (hObject=0xe6c) returned 1 [0131.185] WaitForSingleObject (hHandle=0xe8c, dwMilliseconds=0x0) returned 0x102 [0131.185] WaitForSingleObject (hHandle=0xe04, dwMilliseconds=0x0) returned 0x102 [0131.185] WaitForSingleObject (hHandle=0xec4, dwMilliseconds=0x0) returned 0x0 [0131.185] CloseHandle (hObject=0xec4) returned 1 [0131.185] WaitForSingleObject (hHandle=0xb3c, dwMilliseconds=0x0) returned 0x0 [0131.186] CloseHandle (hObject=0xb3c) returned 1 [0131.186] WaitForSingleObject (hHandle=0xe80, dwMilliseconds=0x0) returned 0x0 [0131.186] CloseHandle (hObject=0xe80) returned 1 [0131.186] WaitForSingleObject (hHandle=0xec0, dwMilliseconds=0x0) returned 0x0 [0131.186] CloseHandle (hObject=0xec0) returned 1 [0131.186] WaitForSingleObject (hHandle=0xb34, dwMilliseconds=0x0) returned 0x0 [0131.186] CloseHandle (hObject=0xb34) returned 1 [0131.186] WaitForSingleObject (hHandle=0xe98, dwMilliseconds=0x0) returned 0x0 [0131.186] CloseHandle (hObject=0xe98) returned 1 [0131.186] WaitForSingleObject (hHandle=0xef4, dwMilliseconds=0x0) returned 0x0 [0131.186] CloseHandle (hObject=0xef4) returned 1 [0131.186] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0x0) returned 0x0 [0131.186] CloseHandle (hObject=0xb2c) returned 1 [0131.187] WaitForSingleObject (hHandle=0xe68, dwMilliseconds=0x0) returned 0x0 [0131.187] CloseHandle (hObject=0xe68) returned 1 [0131.187] WaitForSingleObject (hHandle=0xec8, dwMilliseconds=0x0) returned 0x0 [0131.187] CloseHandle (hObject=0xec8) returned 1 [0131.187] WaitForSingleObject (hHandle=0xb08, dwMilliseconds=0x0) returned 0x0 [0131.187] CloseHandle (hObject=0xb08) returned 1 [0131.187] WaitForSingleObject (hHandle=0xeac, dwMilliseconds=0x0) returned 0x0 [0131.187] CloseHandle (hObject=0xeac) returned 1 [0131.187] WaitForSingleObject (hHandle=0xee8, dwMilliseconds=0x0) returned 0x0 [0131.187] CloseHandle (hObject=0xee8) returned 1 [0131.187] WaitForSingleObject (hHandle=0xeb8, dwMilliseconds=0x0) returned 0x102 [0131.187] WaitForSingleObject (hHandle=0xee4, dwMilliseconds=0x0) returned 0x0 [0131.188] CloseHandle (hObject=0xee4) returned 1 [0131.188] WaitForSingleObject (hHandle=0x57c, dwMilliseconds=0x0) returned 0x0 [0131.188] CloseHandle (hObject=0x57c) returned 1 [0131.188] WaitForSingleObject (hHandle=0x578, dwMilliseconds=0x0) returned 0x0 [0131.188] CloseHandle (hObject=0x578) returned 1 [0131.188] WaitForSingleObject (hHandle=0x5ac, dwMilliseconds=0x0) returned 0x0 [0131.188] CloseHandle (hObject=0x5ac) returned 1 [0131.188] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0x0) returned 0x102 [0131.188] WaitForSingleObject (hHandle=0x574, dwMilliseconds=0x0) returned 0x102 [0131.188] WaitForSingleObject (hHandle=0x5a0, dwMilliseconds=0x0) returned 0x102 [0131.189] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0x0) returned 0x0 [0131.189] CloseHandle (hObject=0x5a4) returned 1 [0131.189] WaitForSingleObject (hHandle=0x570, dwMilliseconds=0x0) returned 0x102 [0131.189] WaitForSingleObject (hHandle=0x594, dwMilliseconds=0x0) returned 0x102 [0131.189] WaitForSingleObject (hHandle=0x598, dwMilliseconds=0x0) returned 0x102 [0131.189] WaitForSingleObject (hHandle=0x56c, dwMilliseconds=0x0) returned 0x102 [0131.189] WaitForSingleObject (hHandle=0x588, dwMilliseconds=0x0) returned 0x102 [0131.189] WaitForSingleObject (hHandle=0x58c, dwMilliseconds=0x0) returned 0x0 [0131.189] CloseHandle (hObject=0x58c) returned 1 [0131.190] WaitForSingleObject (hHandle=0x568, dwMilliseconds=0x0) returned 0x102 [0131.190] WaitForSingleObject (hHandle=0x580, dwMilliseconds=0x0) returned 0x102 [0131.190] WaitForSingleObject (hHandle=0x584, dwMilliseconds=0x0) returned 0x102 [0131.190] WaitForSingleObject (hHandle=0x564, dwMilliseconds=0x0) returned 0x0 [0131.190] CloseHandle (hObject=0x564) returned 1 [0131.190] WaitForSingleObject (hHandle=0x55c, dwMilliseconds=0x0) returned 0x102 [0131.190] WaitForSingleObject (hHandle=0x560, dwMilliseconds=0x0) returned 0x102 [0131.190] WaitForSingleObject (hHandle=0xb20, dwMilliseconds=0x0) returned 0x102 [0131.190] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0x0) returned 0x102 [0131.191] WaitForSingleObject (hHandle=0xb48, dwMilliseconds=0x0) returned 0x102 [0131.191] WaitForSingleObject (hHandle=0xb1c, dwMilliseconds=0x0) returned 0x102 [0131.191] WaitForSingleObject (hHandle=0xac8, dwMilliseconds=0x0) returned 0x102 [0131.191] WaitForSingleObject (hHandle=0xb40, dwMilliseconds=0x0) returned 0x102 [0131.191] WaitForSingleObject (hHandle=0xb18, dwMilliseconds=0x0) returned 0x102 [0131.191] WaitForSingleObject (hHandle=0xac0, dwMilliseconds=0x0) returned 0x0 [0131.191] CloseHandle (hObject=0xac0) returned 1 [0131.191] WaitForSingleObject (hHandle=0xb38, dwMilliseconds=0x0) returned 0x102 [0131.191] WaitForSingleObject (hHandle=0xb14, dwMilliseconds=0x0) returned 0x102 [0131.192] WaitForSingleObject (hHandle=0xab8, dwMilliseconds=0x0) returned 0x0 [0131.192] CloseHandle (hObject=0xab8) returned 1 [0131.192] WaitForSingleObject (hHandle=0xb30, dwMilliseconds=0x0) returned 0x102 [0131.192] WaitForSingleObject (hHandle=0xb10, dwMilliseconds=0x0) returned 0x0 [0131.192] CloseHandle (hObject=0xb10) returned 1 [0131.192] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x0 [0131.192] CloseHandle (hObject=0x3a8) returned 1 [0131.192] WaitForSingleObject (hHandle=0xb28, dwMilliseconds=0x0) returned 0x0 [0131.192] CloseHandle (hObject=0xb28) returned 1 [0131.192] WaitForSingleObject (hHandle=0xb0c, dwMilliseconds=0x0) returned 0x0 [0131.193] CloseHandle (hObject=0xb0c) returned 1 [0131.193] WaitForSingleObject (hHandle=0xafc, dwMilliseconds=0x0) returned 0x0 [0131.193] CloseHandle (hObject=0xafc) returned 1 [0131.193] WaitForSingleObject (hHandle=0xb00, dwMilliseconds=0x0) returned 0x0 [0131.193] CloseHandle (hObject=0xb00) returned 1 [0131.193] WaitForSingleObject (hHandle=0x914, dwMilliseconds=0x0) returned 0x102 [0131.193] WaitForSingleObject (hHandle=0x744, dwMilliseconds=0x0) returned 0x0 [0131.193] CloseHandle (hObject=0x744) returned 1 [0131.193] WaitForSingleObject (hHandle=0x74c, dwMilliseconds=0x0) returned 0x102 [0131.193] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x0) returned 0x102 [0131.193] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0x0) returned 0x102 [0131.193] WaitForSingleObject (hHandle=0x748, dwMilliseconds=0x0) returned 0x102 [0131.193] WaitForSingleObject (hHandle=0x674, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0xacc, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0x3ac, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0x66c, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0xac4, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0x664, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0xabc, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0x84c, dwMilliseconds=0x0) returned 0x102 [0131.194] WaitForSingleObject (hHandle=0x12cc, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x12d4, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x12c4, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x12c8, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x12c0, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x128c, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x12b4, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x12b8, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x12ac, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x12b0, dwMilliseconds=0x0) returned 0x102 [0131.195] WaitForSingleObject (hHandle=0x12a4, dwMilliseconds=0x0) returned 0x102 [0131.196] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0x0) returned 0x0 [0131.196] CloseHandle (hObject=0x274) returned 1 [0131.196] WaitForSingleObject (hHandle=0x1298, dwMilliseconds=0x0) returned 0x0 [0131.196] CloseHandle (hObject=0x1298) returned 1 [0131.196] WaitForSingleObject (hHandle=0x1290, dwMilliseconds=0x0) returned 0x102 [0131.196] WaitForSingleObject (hHandle=0x12d8, dwMilliseconds=0x0) returned 0x102 [0131.196] WaitForSingleObject (hHandle=0x129c, dwMilliseconds=0x0) returned 0x0 [0131.196] CloseHandle (hObject=0x129c) returned 1 [0131.196] WaitForSingleObject (hHandle=0x12a0, dwMilliseconds=0x0) returned 0x102 [0131.197] WaitForSingleObject (hHandle=0x1294, dwMilliseconds=0x0) returned 0x0 [0131.197] CloseHandle (hObject=0x1294) returned 1 [0131.197] WaitForSingleObject (hHandle=0x1284, dwMilliseconds=0x0) returned 0x0 [0131.197] CloseHandle (hObject=0x1284) returned 1 [0131.197] WaitForSingleObject (hHandle=0x1288, dwMilliseconds=0x0) returned 0x102 [0131.197] WaitForSingleObject (hHandle=0xf64, dwMilliseconds=0x0) returned 0x0 [0131.197] CloseHandle (hObject=0xf64) returned 1 [0131.197] WaitForSingleObject (hHandle=0x123c, dwMilliseconds=0x0) returned 0x102 [0131.197] WaitForSingleObject (hHandle=0x1270, dwMilliseconds=0x0) returned 0x102 [0131.197] WaitForSingleObject (hHandle=0x1280, dwMilliseconds=0x0) returned 0x0 [0131.198] CloseHandle (hObject=0x1280) returned 1 [0131.198] WaitForSingleObject (hHandle=0x127c, dwMilliseconds=0x0) returned 0x0 [0131.198] CloseHandle (hObject=0x127c) returned 1 [0131.198] WaitForSingleObject (hHandle=0x1200, dwMilliseconds=0x0) returned 0x0 [0131.198] CloseHandle (hObject=0x1200) returned 1 [0131.198] WaitForSingleObject (hHandle=0x1274, dwMilliseconds=0x0) returned 0x0 [0131.198] CloseHandle (hObject=0x1274) returned 1 [0131.198] WaitForSingleObject (hHandle=0x1278, dwMilliseconds=0x0) returned 0x0 [0131.198] CloseHandle (hObject=0x1278) returned 1 [0131.199] WaitForSingleObject (hHandle=0x1268, dwMilliseconds=0x0) returned 0x0 [0131.199] CloseHandle (hObject=0x1268) returned 1 [0131.199] WaitForSingleObject (hHandle=0x1264, dwMilliseconds=0x0) returned 0x0 [0131.199] CloseHandle (hObject=0x1264) returned 1 [0131.199] WaitForSingleObject (hHandle=0x1254, dwMilliseconds=0x0) returned 0x0 [0131.199] CloseHandle (hObject=0x1254) returned 1 [0131.199] WaitForSingleObject (hHandle=0x1220, dwMilliseconds=0x0) returned 0x102 [0131.199] WaitForSingleObject (hHandle=0x12ec, dwMilliseconds=0x0) returned 0x102 [0131.199] WaitForSingleObject (hHandle=0x1214, dwMilliseconds=0x0) returned 0x102 [0131.199] WaitForSingleObject (hHandle=0x12e0, dwMilliseconds=0x0) returned 0x102 [0131.200] WaitForSingleObject (hHandle=0x12bc, dwMilliseconds=0x0) returned 0x102 [0131.200] WaitForSingleObject (hHandle=0x1210, dwMilliseconds=0x0) returned 0x0 [0131.200] CloseHandle (hObject=0x1210) returned 1 [0131.200] WaitForSingleObject (hHandle=0x120c, dwMilliseconds=0x0) returned 0x102 [0131.200] WaitForSingleObject (hHandle=0x1204, dwMilliseconds=0x0) returned 0x0 [0131.200] CloseHandle (hObject=0x1204) returned 1 [0131.200] WaitForSingleObject (hHandle=0xea0, dwMilliseconds=0x0) returned 0x102 [0131.200] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0131.200] WaitForSingleObject (hHandle=0xe9c, dwMilliseconds=0x0) returned 0x0 [0131.200] CloseHandle (hObject=0xe9c) returned 1 [0131.200] WaitForSingleObject (hHandle=0x11f4, dwMilliseconds=0x0) returned 0x102 [0131.201] WaitForSingleObject (hHandle=0x11f8, dwMilliseconds=0x0) returned 0x0 [0131.201] CloseHandle (hObject=0x11f8) returned 1 [0131.201] WaitForSingleObject (hHandle=0xea4, dwMilliseconds=0x0) returned 0x0 [0131.201] CloseHandle (hObject=0xea4) returned 1 [0131.201] WaitForSingleObject (hHandle=0x11fc, dwMilliseconds=0x0) returned 0x102 [0131.201] WaitForSingleObject (hHandle=0x11d8, dwMilliseconds=0x0) returned 0x0 [0131.201] CloseHandle (hObject=0x11d8) returned 1 [0131.201] WaitForSingleObject (hHandle=0x11e8, dwMilliseconds=0x0) returned 0x0 [0131.201] CloseHandle (hObject=0x11e8) returned 1 [0131.201] WaitForSingleObject (hHandle=0x11dc, dwMilliseconds=0x0) returned 0x102 [0131.201] WaitForSingleObject (hHandle=0x11e0, dwMilliseconds=0x0) returned 0x0 [0131.202] CloseHandle (hObject=0x11e0) returned 1 [0131.202] WaitForSingleObject (hHandle=0x11ec, dwMilliseconds=0x0) returned 0x0 [0131.202] CloseHandle (hObject=0x11ec) returned 1 [0131.202] WaitForSingleObject (hHandle=0x11e4, dwMilliseconds=0x0) returned 0x0 [0131.202] CloseHandle (hObject=0x11e4) returned 1 [0131.202] WaitForSingleObject (hHandle=0x11c4, dwMilliseconds=0x0) returned 0x102 [0131.202] WaitForSingleObject (hHandle=0x11cc, dwMilliseconds=0x0) returned 0x0 [0131.202] CloseHandle (hObject=0x11cc) returned 1 [0131.202] WaitForSingleObject (hHandle=0x11d4, dwMilliseconds=0x0) returned 0x102 [0131.202] WaitForSingleObject (hHandle=0x1114, dwMilliseconds=0x0) returned 0x102 [0131.202] WaitForSingleObject (hHandle=0x1198, dwMilliseconds=0x0) returned 0x102 [0131.202] WaitForSingleObject (hHandle=0x119c, dwMilliseconds=0x0) returned 0x102 [0131.203] Sleep (dwMilliseconds=0x1) [0131.810] WaitForSingleObject (hHandle=0xb44, dwMilliseconds=0x0) returned 0x102 [0131.810] WaitForSingleObject (hHandle=0x11cc, dwMilliseconds=0x0) returned 0x0 [0131.810] CloseHandle (hObject=0x11cc) returned 1 [0131.810] WaitForSingleObject (hHandle=0x11e4, dwMilliseconds=0x0) returned 0x102 [0131.810] WaitForSingleObject (hHandle=0xea8, dwMilliseconds=0x0) returned 0x0 [0131.810] CloseHandle (hObject=0xea8) returned 1 [0131.810] WaitForSingleObject (hHandle=0x11ec, dwMilliseconds=0x0) returned 0x102 [0131.810] WaitForSingleObject (hHandle=0x11e0, dwMilliseconds=0x0) returned 0x102 [0131.810] WaitForSingleObject (hHandle=0xe8c, dwMilliseconds=0x0) returned 0x0 [0131.811] CloseHandle (hObject=0xe8c) returned 1 [0131.811] WaitForSingleObject (hHandle=0xe04, dwMilliseconds=0x0) returned 0x102 [0131.811] WaitForSingleObject (hHandle=0x11e8, dwMilliseconds=0x0) returned 0x102 [0131.811] WaitForSingleObject (hHandle=0x11d8, dwMilliseconds=0x0) returned 0x102 [0131.811] WaitForSingleObject (hHandle=0xea4, dwMilliseconds=0x0) returned 0x102 [0131.811] WaitForSingleObject (hHandle=0x11f8, dwMilliseconds=0x0) returned 0x102 [0131.811] WaitForSingleObject (hHandle=0xe9c, dwMilliseconds=0x0) returned 0x102 [0131.811] WaitForSingleObject (hHandle=0x1204, dwMilliseconds=0x0) returned 0x102 [0131.811] WaitForSingleObject (hHandle=0x12d0, dwMilliseconds=0x0) returned 0x102 [0131.811] WaitForSingleObject (hHandle=0x1238, dwMilliseconds=0x0) returned 0x0 [0131.811] CloseHandle (hObject=0x1238) returned 1 [0131.811] WaitForSingleObject (hHandle=0x1210, dwMilliseconds=0x0) returned 0x0 [0131.811] CloseHandle (hObject=0x1210) returned 1 [0131.812] WaitForSingleObject (hHandle=0x1254, dwMilliseconds=0x0) returned 0x0 [0131.812] CloseHandle (hObject=0x1254) returned 1 [0131.812] WaitForSingleObject (hHandle=0x1208, dwMilliseconds=0x0) returned 0x102 [0131.812] WaitForSingleObject (hHandle=0x1264, dwMilliseconds=0x0) returned 0x0 [0131.812] CloseHandle (hObject=0x1264) returned 1 [0131.812] WaitForSingleObject (hHandle=0x1268, dwMilliseconds=0x0) returned 0x0 [0131.812] CloseHandle (hObject=0x1268) returned 1 [0131.812] WaitForSingleObject (hHandle=0xeb8, dwMilliseconds=0x0) returned 0x102 [0131.812] WaitForSingleObject (hHandle=0x1278, dwMilliseconds=0x0) returned 0x0 [0131.812] CloseHandle (hObject=0x1278) returned 1 [0131.812] WaitForSingleObject (hHandle=0x1274, dwMilliseconds=0x0) returned 0x0 [0131.812] CloseHandle (hObject=0x1274) returned 1 [0131.813] WaitForSingleObject (hHandle=0x484, dwMilliseconds=0x0) returned 0x102 [0131.813] WaitForSingleObject (hHandle=0xf70, dwMilliseconds=0x0) returned 0x102 [0131.813] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0x0) returned 0x102 [0131.813] WaitForSingleObject (hHandle=0x574, dwMilliseconds=0x0) returned 0x102 [0131.813] WaitForSingleObject (hHandle=0x5a0, dwMilliseconds=0x0) returned 0x102 [0131.813] WaitForSingleObject (hHandle=0xf54, dwMilliseconds=0x0) returned 0x0 [0131.813] CloseHandle (hObject=0xf54) returned 1 [0131.813] WaitForSingleObject (hHandle=0x570, dwMilliseconds=0x0) returned 0x0 [0131.813] CloseHandle (hObject=0x570) returned 1 [0131.813] WaitForSingleObject (hHandle=0x594, dwMilliseconds=0x0) returned 0x102 [0131.813] WaitForSingleObject (hHandle=0x598, dwMilliseconds=0x0) returned 0x0 [0131.813] CloseHandle (hObject=0x598) returned 1 [0131.814] WaitForSingleObject (hHandle=0x56c, dwMilliseconds=0x0) returned 0x102 [0131.814] WaitForSingleObject (hHandle=0x588, dwMilliseconds=0x0) returned 0x0 [0131.814] CloseHandle (hObject=0x588) returned 1 [0131.814] WaitForSingleObject (hHandle=0x1200, dwMilliseconds=0x0) returned 0x102 [0131.814] WaitForSingleObject (hHandle=0x568, dwMilliseconds=0x0) returned 0x102 [0131.814] WaitForSingleObject (hHandle=0x580, dwMilliseconds=0x0) returned 0x102 [0131.814] WaitForSingleObject (hHandle=0x584, dwMilliseconds=0x0) returned 0x102 [0131.814] WaitForSingleObject (hHandle=0x11b4, dwMilliseconds=0x0) returned 0x102 [0131.814] WaitForSingleObject (hHandle=0x55c, dwMilliseconds=0x0) returned 0x102 [0131.814] WaitForSingleObject (hHandle=0x560, dwMilliseconds=0x0) returned 0x102 [0131.814] WaitForSingleObject (hHandle=0xb20, dwMilliseconds=0x0) returned 0x102 [0131.814] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0xb48, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0xb1c, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0xac8, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0xb40, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0xb18, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0x127c, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0xb38, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0xb14, dwMilliseconds=0x0) returned 0x0 [0131.815] CloseHandle (hObject=0xb14) returned 1 [0131.815] WaitForSingleObject (hHandle=0x1280, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0xb30, dwMilliseconds=0x0) returned 0x0 [0131.815] CloseHandle (hObject=0xb30) returned 1 [0131.815] WaitForSingleObject (hHandle=0xf64, dwMilliseconds=0x0) returned 0x102 [0131.815] WaitForSingleObject (hHandle=0x1284, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0x1294, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0x11b8, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0x129c, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0x11a4, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0x914, dwMilliseconds=0x0) returned 0x0 [0131.816] CloseHandle (hObject=0x914) returned 1 [0131.816] WaitForSingleObject (hHandle=0x1298, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0x74c, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0x748, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0x674, dwMilliseconds=0x0) returned 0x102 [0131.816] WaitForSingleObject (hHandle=0xacc, dwMilliseconds=0x0) returned 0x102 [0131.817] WaitForSingleObject (hHandle=0x3ac, dwMilliseconds=0x0) returned 0x102 [0131.817] WaitForSingleObject (hHandle=0x66c, dwMilliseconds=0x0) returned 0x102 [0131.817] WaitForSingleObject (hHandle=0xac4, dwMilliseconds=0x0) returned 0x102 [0131.817] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0x0) returned 0x102 [0131.817] WaitForSingleObject (hHandle=0x664, dwMilliseconds=0x0) returned 0x102 [0131.817] WaitForSingleObject (hHandle=0xabc, dwMilliseconds=0x0) returned 0x102 [0131.817] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0x0) returned 0x102 [0131.817] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x84c, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12cc, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12d4, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12c4, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12c8, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12c0, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x128c, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12b4, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12b8, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12ac, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12b0, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x12a4, dwMilliseconds=0x0) returned 0x102 [0131.818] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0x0) returned 0x102 [0131.819] WaitForSingleObject (hHandle=0x744, dwMilliseconds=0x0) returned 0x102 [0131.819] WaitForSingleObject (hHandle=0x1290, dwMilliseconds=0x0) returned 0x0 [0131.819] CloseHandle (hObject=0x1290) returned 1 [0131.819] WaitForSingleObject (hHandle=0x12d8, dwMilliseconds=0x0) returned 0x0 [0131.819] CloseHandle (hObject=0x12d8) returned 1 [0131.819] WaitForSingleObject (hHandle=0xb00, dwMilliseconds=0x0) returned 0x102 [0131.819] WaitForSingleObject (hHandle=0x12a0, dwMilliseconds=0x0) returned 0x0 [0131.819] CloseHandle (hObject=0x12a0) returned 1 [0131.819] WaitForSingleObject (hHandle=0xafc, dwMilliseconds=0x0) returned 0x102 [0131.819] WaitForSingleObject (hHandle=0xb0c, dwMilliseconds=0x0) returned 0x102 [0131.819] WaitForSingleObject (hHandle=0x1288, dwMilliseconds=0x0) returned 0x0 [0131.819] CloseHandle (hObject=0x1288) returned 1 [0131.820] WaitForSingleObject (hHandle=0xb28, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0x123c, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0x1270, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0x12fc, dwMilliseconds=0x0) returned 0x0 [0131.820] CloseHandle (hObject=0x12fc) returned 1 [0131.820] WaitForSingleObject (hHandle=0xb10, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0xab8, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0x12e4, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0xac0, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0x11d0, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0x564, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0x1220, dwMilliseconds=0x0) returned 0x102 [0131.820] WaitForSingleObject (hHandle=0x12ec, dwMilliseconds=0x0) returned 0x0 [0131.821] CloseHandle (hObject=0x12ec) returned 1 [0131.821] WaitForSingleObject (hHandle=0x1214, dwMilliseconds=0x0) returned 0x0 [0131.821] CloseHandle (hObject=0x1214) returned 1 [0131.821] WaitForSingleObject (hHandle=0x12e0, dwMilliseconds=0x0) returned 0x0 [0131.821] CloseHandle (hObject=0x12e0) returned 1 [0131.821] WaitForSingleObject (hHandle=0x12bc, dwMilliseconds=0x0) returned 0x0 [0131.821] CloseHandle (hObject=0x12bc) returned 1 [0131.821] WaitForSingleObject (hHandle=0x11b0, dwMilliseconds=0x0) returned 0x0 [0131.821] CloseHandle (hObject=0x11b0) returned 1 [0131.821] WaitForSingleObject (hHandle=0x120c, dwMilliseconds=0x0) returned 0x0 [0131.821] CloseHandle (hObject=0x120c) returned 1 [0131.821] WaitForSingleObject (hHandle=0x58c, dwMilliseconds=0x0) returned 0x102 [0131.821] WaitForSingleObject (hHandle=0xea0, dwMilliseconds=0x0) returned 0x102 [0131.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0131.821] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0x11f4, dwMilliseconds=0x0) returned 0x0 [0131.822] CloseHandle (hObject=0x11f4) returned 1 [0131.822] WaitForSingleObject (hHandle=0x11bc, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0x5ac, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0x11fc, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0x578, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0x57c, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0x11dc, dwMilliseconds=0x0) returned 0x0 [0131.822] CloseHandle (hObject=0x11dc) returned 1 [0131.822] WaitForSingleObject (hHandle=0x11ac, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0xee4, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0xee8, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0x11c4, dwMilliseconds=0x0) returned 0x0 [0131.822] CloseHandle (hObject=0x11c4) returned 1 [0131.822] WaitForSingleObject (hHandle=0xeac, dwMilliseconds=0x0) returned 0x102 [0131.822] WaitForSingleObject (hHandle=0x11d4, dwMilliseconds=0x0) returned 0x0 [0131.822] CloseHandle (hObject=0x11d4) returned 1 [0131.823] WaitForSingleObject (hHandle=0x1114, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0x1198, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0x119c, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xb08, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xec8, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xe68, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xef4, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xe98, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xb34, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xec0, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xe80, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xb3c, dwMilliseconds=0x0) returned 0x102 [0131.823] WaitForSingleObject (hHandle=0xec4, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0xe6c, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0xe78, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0xc08, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0xef0, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x1304, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x1130, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x1134, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x1128, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x111c, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x1124, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x1108, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x1118, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x1110, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x110c, dwMilliseconds=0x0) returned 0x102 [0131.824] WaitForSingleObject (hHandle=0x10e4, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10f8, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x1104, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x1100, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10fc, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10d0, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10d4, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10f0, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10f4, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10e8, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x11a0, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10ec, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10e0, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10d8, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x1174, dwMilliseconds=0x0) returned 0x102 [0131.825] WaitForSingleObject (hHandle=0x10dc, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x1170, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x10c4, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x1148, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x1098, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x10bc, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x10c8, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x10cc, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x10c0, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x1150, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x1244, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x1084, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x10b8, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x10a4, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x10b0, dwMilliseconds=0x0) returned 0x102 [0131.826] WaitForSingleObject (hHandle=0x10b4, dwMilliseconds=0x0) returned 0x102 [0131.827] WaitForSingleObject (hHandle=0x10a8, dwMilliseconds=0x0) returned 0x102 [0131.827] WaitForSingleObject (hHandle=0x10ac, dwMilliseconds=0x0) returned 0x102 [0131.827] WaitForSingleObject (hHandle=0x10a0, dwMilliseconds=0x0) returned 0x102 [0131.827] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0x0) returned 0x102 [0131.827] WaitForSingleObject (hHandle=0x109c, dwMilliseconds=0x0) returned 0x102 [0131.827] Sleep (dwMilliseconds=0x1) [0131.911] WaitForSingleObject (hHandle=0xb44, dwMilliseconds=0x0) returned 0x102 [0131.911] WaitForSingleObject (hHandle=0x11d4, dwMilliseconds=0x0) returned 0x102 [0131.911] WaitForSingleObject (hHandle=0x11e4, dwMilliseconds=0x0) returned 0x102 [0131.911] WaitForSingleObject (hHandle=0x11c4, dwMilliseconds=0x0) returned 0x102 [0131.911] WaitForSingleObject (hHandle=0x11ec, dwMilliseconds=0x0) returned 0x0 [0131.911] CloseHandle (hObject=0x11ec) returned 1 [0131.911] WaitForSingleObject (hHandle=0x11e0, dwMilliseconds=0x0) returned 0x102 [0131.911] WaitForSingleObject (hHandle=0x1240, dwMilliseconds=0x0) returned 0x102 [0131.911] WaitForSingleObject (hHandle=0xe04, dwMilliseconds=0x0) returned 0x102 [0131.911] WaitForSingleObject (hHandle=0x11e8, dwMilliseconds=0x0) returned 0x102 [0131.911] WaitForSingleObject (hHandle=0x11d8, dwMilliseconds=0x0) returned 0x0 [0131.911] CloseHandle (hObject=0x11d8) returned 1 [0131.911] WaitForSingleObject (hHandle=0xea4, dwMilliseconds=0x0) returned 0x102 [0131.911] WaitForSingleObject (hHandle=0x11f8, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0xe9c, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x1204, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x12d0, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x118c, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x11dc, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x11f4, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x1208, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x120c, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x1180, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0xeb8, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x11b0, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x12bc, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x484, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0xf70, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0x0) returned 0x102 [0131.912] WaitForSingleObject (hHandle=0x574, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x5a0, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x1158, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x12e0, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x594, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x1140, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x56c, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x12f8, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x1200, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x568, dwMilliseconds=0x0) returned 0x0 [0131.913] CloseHandle (hObject=0x568) returned 1 [0131.913] WaitForSingleObject (hHandle=0x580, dwMilliseconds=0x0) returned 0x0 [0131.913] CloseHandle (hObject=0x580) returned 1 [0131.913] WaitForSingleObject (hHandle=0x584, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x11b4, dwMilliseconds=0x0) returned 0x102 [0131.913] WaitForSingleObject (hHandle=0x55c, dwMilliseconds=0x0) returned 0x102 [0131.914] WaitForSingleObject (hHandle=0x560, dwMilliseconds=0x0) returned 0x102 [0131.914] WaitForSingleObject (hHandle=0xb20, dwMilliseconds=0x0) returned 0x102 [0131.914] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0x0) returned 0x102 [0131.914] WaitForSingleObject (hHandle=0xb48, dwMilliseconds=0x0) returned 0x102 [0131.914] WaitForSingleObject (hHandle=0xb1c, dwMilliseconds=0x0) returned 0x102 [0131.914] WaitForSingleObject (hHandle=0xac8, dwMilliseconds=0x0) returned 0x102 [0131.914] WaitForSingleObject (hHandle=0xb40, dwMilliseconds=0x0) returned 0x0 [0131.914] CloseHandle (hObject=0xb40) returned 1 [0131.914] WaitForSingleObject (hHandle=0xb18, dwMilliseconds=0x0) returned 0x0 [0131.914] CloseHandle (hObject=0xb18) returned 1 [0131.914] WaitForSingleObject (hHandle=0x127c, dwMilliseconds=0x0) returned 0x102 [0131.914] WaitForSingleObject (hHandle=0xb38, dwMilliseconds=0x0) returned 0x0 [0131.914] CloseHandle (hObject=0xb38) returned 1 [0131.914] WaitForSingleObject (hHandle=0x12e8, dwMilliseconds=0x0) returned 0x102 [0131.914] WaitForSingleObject (hHandle=0x1280, dwMilliseconds=0x0) returned 0x102 [0131.915] CloseHandle (hObject=0x11d0) returned 1 [0131.915] CloseHandle (hObject=0x11bc) returned 1 [0131.915] CloseHandle (hObject=0x11fc) returned 1 [0131.915] CloseHandle (hObject=0x1198) returned 1 [0134.188] CloseHandle (hObject=0x11e4) returned 1 [0134.188] CloseHandle (hObject=0x1198) returned 1 [0134.188] CloseHandle (hObject=0x11e0) returned 1 [0134.188] CloseHandle (hObject=0x1240) returned 1 [0134.188] CloseHandle (hObject=0x11e8) returned 1 [0134.188] CloseHandle (hObject=0x11fc) returned 1 [0134.188] CloseHandle (hObject=0xea4) returned 1 [0134.188] CloseHandle (hObject=0x11f8) returned 1 [0134.188] CloseHandle (hObject=0xe9c) returned 1 [0134.188] CloseHandle (hObject=0x12d0) returned 1 [0134.188] CloseHandle (hObject=0x11f4) returned 1 [0134.189] CloseHandle (hObject=0x120c) returned 1 [0134.189] CloseHandle (hObject=0x1180) returned 1 [0134.189] CloseHandle (hObject=0xeb8) returned 1 [0134.189] CloseHandle (hObject=0x11b0) returned 1 [0134.189] CloseHandle (hObject=0x12bc) returned 1 [0134.189] CloseHandle (hObject=0xf70) returned 1 [0134.189] CloseHandle (hObject=0x5b0) returned 1 [0134.189] CloseHandle (hObject=0x5a0) returned 1 [0134.189] CloseHandle (hObject=0x1158) returned 1 [0134.189] CloseHandle (hObject=0x1140) returned 1 [0134.189] CloseHandle (hObject=0x56c) returned 1 [0134.189] CloseHandle (hObject=0x12f8) returned 1 [0134.190] CloseHandle (hObject=0x1200) returned 1 [0134.190] CloseHandle (hObject=0x584) returned 1 [0134.190] CloseHandle (hObject=0x55c) returned 1 [0134.190] CloseHandle (hObject=0x560) returned 1 [0134.190] CloseHandle (hObject=0xad0) returned 1 [0134.190] CloseHandle (hObject=0xb48) returned 1 [0134.190] CloseHandle (hObject=0x12e8) returned 1 [0134.190] CloseHandle (hObject=0x1214) returned 1 [0134.190] CloseHandle (hObject=0x12ec) returned 1 [0134.190] CloseHandle (hObject=0x1298) returned 1 [0134.190] CloseHandle (hObject=0x74c) returned 1 [0134.190] CloseHandle (hObject=0x67c) returned 1 [0134.191] CloseHandle (hObject=0xad4) returned 1 [0134.191] CloseHandle (hObject=0x748) returned 1 [0134.191] CloseHandle (hObject=0x674) returned 1 [0134.191] CloseHandle (hObject=0xacc) returned 1 [0134.191] CloseHandle (hObject=0x3ac) returned 1 [0134.191] CloseHandle (hObject=0x66c) returned 1 [0134.192] CloseHandle (hObject=0xac4) returned 1 [0134.192] CloseHandle (hObject=0x3b0) returned 1 [0134.192] CloseHandle (hObject=0x664) returned 1 [0134.192] CloseHandle (hObject=0xabc) returned 1 [0134.192] CloseHandle (hObject=0x12c8) returned 1 [0134.192] CloseHandle (hObject=0x12c0) returned 1 [0134.192] CloseHandle (hObject=0x128c) returned 1 [0134.192] CloseHandle (hObject=0x12b4) returned 1 [0134.192] CloseHandle (hObject=0x12b8) returned 1 [0134.192] CloseHandle (hObject=0x12ac) returned 1 [0134.192] CloseHandle (hObject=0x12b0) returned 1 [0134.193] CloseHandle (hObject=0x744) returned 1 [0134.193] CloseHandle (hObject=0x12fc) returned 1 [0134.193] CloseHandle (hObject=0xb00) returned 1 [0134.193] CloseHandle (hObject=0x12a0) returned 1 [0134.193] CloseHandle (hObject=0xafc) returned 1 [0134.193] CloseHandle (hObject=0xb0c) returned 1 [0134.193] CloseHandle (hObject=0x12d8) returned 1 [0134.193] CloseHandle (hObject=0xb28) returned 1 [0134.193] CloseHandle (hObject=0x1270) returned 1 [0134.193] CloseHandle (hObject=0x3a8) returned 1 [0134.193] CloseHandle (hObject=0x1290) returned 1 [0134.194] CloseHandle (hObject=0xb10) returned 1 [0134.194] CloseHandle (hObject=0xac0) returned 1 [0134.194] CloseHandle (hObject=0x564) returned 1 [0134.194] CloseHandle (hObject=0x1220) returned 1 [0134.194] CloseHandle (hObject=0x914) returned 1 [0134.194] CloseHandle (hObject=0x1310) returned 1 [0134.194] CloseHandle (hObject=0xb30) returned 1 [0134.194] CloseHandle (hObject=0x1300) returned 1 [0134.194] CloseHandle (hObject=0xb14) returned 1 [0134.194] CloseHandle (hObject=0x58c) returned 1 [0134.195] CloseHandle (hObject=0x11f0) returned 1 [0134.195] CloseHandle (hObject=0x580) returned 1 [0134.195] CloseHandle (hObject=0x5ac) returned 1 [0134.195] CloseHandle (hObject=0x578) returned 1 [0134.195] CloseHandle (hObject=0x570) returned 1 [0134.195] CloseHandle (hObject=0x1114) returned 1 [0134.195] CloseHandle (hObject=0x1100) returned 1 [0134.195] CloseHandle (hObject=0x10fc) returned 1 [0134.195] CloseHandle (hObject=0x10d0) returned 1 [0134.196] CloseHandle (hObject=0x10d4) returned 1 [0134.196] CloseHandle (hObject=0x10f0) returned 1 [0134.196] CloseHandle (hObject=0x10f4) returned 1 [0134.196] CloseHandle (hObject=0x10e8) returned 1 [0134.196] CloseHandle (hObject=0x11a0) returned 1 [0134.196] CloseHandle (hObject=0x10d8) returned 1 [0134.196] CloseHandle (hObject=0x1174) returned 1 [0134.196] CloseHandle (hObject=0x10dc) returned 1 [0134.196] CloseHandle (hObject=0x1170) returned 1 [0134.197] CloseHandle (hObject=0x10c4) returned 1 [0134.197] CloseHandle (hObject=0x1098) returned 1 [0134.197] CloseHandle (hObject=0x10bc) returned 1 [0134.197] CloseHandle (hObject=0x10c8) returned 1 [0134.197] CloseHandle (hObject=0x10cc) returned 1 [0134.197] CloseHandle (hObject=0x10c0) returned 1 [0134.197] CloseHandle (hObject=0x1150) returned 1 [0134.197] CloseHandle (hObject=0x10b8) returned 1 [0134.198] CloseHandle (hObject=0x10a4) returned 1 [0134.198] CloseHandle (hObject=0x1278) returned 1 [0134.198] CloseHandle (hObject=0x1184) returned 1 [0134.198] CloseHandle (hObject=0x1254) returned 1 [0134.198] CloseHandle (hObject=0x1210) returned 1 [0134.198] CloseHandle (hObject=0x1238) returned 1 [0134.198] CloseHandle (hObject=0x106c) returned 1 [0134.199] CloseHandle (hObject=0x108c) returned 1 [0134.199] CloseHandle (hObject=0xf3c) returned 1 [0134.199] CloseHandle (hObject=0xd94) returned 1 [0134.199] CloseHandle (hObject=0xfe0) returned 1 [0134.199] CloseHandle (hObject=0xff4) returned 1 [0134.199] CloseHandle (hObject=0xd5c) returned 1 [0134.199] CloseHandle (hObject=0x1034) returned 1 [0134.199] CloseHandle (hObject=0x1048) returned 1 [0134.200] CloseHandle (hObject=0xd58) returned 1 [0134.200] CloseHandle (hObject=0xd54) returned 1 [0134.200] CloseHandle (hObject=0xcc8) returned 1 [0134.200] CloseHandle (hObject=0xcb4) returned 1 [0134.200] CloseHandle (hObject=0xcbc) returned 1 [0134.200] CloseHandle (hObject=0xf0c) returned 1 [0134.200] CloseHandle (hObject=0x105c) returned 1 [0134.200] CloseHandle (hObject=0xca4) returned 1 [0134.200] CloseHandle (hObject=0xcb8) returned 1 [0134.200] CloseHandle (hObject=0xc74) returned 1 [0134.201] CloseHandle (hObject=0xcac) returned 1 [0134.201] CloseHandle (hObject=0xca0) returned 1 [0134.201] CloseHandle (hObject=0xc90) returned 1 [0134.201] CloseHandle (hObject=0xc98) returned 1 [0134.201] CloseHandle (hObject=0xe0c) returned 1 [0134.201] CloseHandle (hObject=0xe08) returned 1 [0134.201] CloseHandle (hObject=0x1058) returned 1 [0134.201] CloseHandle (hObject=0xe28) returned 1 [0136.140] CloseHandle (hObject=0xb44) returned 1 [0136.140] CloseHandle (hObject=0x10c4) returned 1 [0136.140] CloseHandle (hObject=0x1170) returned 1 [0136.141] CloseHandle (hObject=0x10dc) returned 1 [0136.141] CloseHandle (hObject=0x1174) returned 1 [0136.141] CloseHandle (hObject=0xac8) returned 1 [0136.141] CloseHandle (hObject=0x11a0) returned 1 [0136.141] CloseHandle (hObject=0x10e8) returned 1 [0136.141] CloseHandle (hObject=0x10f4) returned 1 [0136.141] CloseHandle (hObject=0x270) returned 1 [0136.141] CloseHandle (hObject=0x84c) returned 1 [0136.141] CloseHandle (hObject=0x12cc) returned 1 [0136.142] CloseHandle (hObject=0x12d4) returned 1 [0136.142] CloseHandle (hObject=0x12c4) returned 1 [0136.142] CloseHandle (hObject=0x1190) returned 1 [0136.142] CloseHandle (hObject=0x11f0) returned 1 [0136.142] CloseHandle (hObject=0x58c) returned 1 [0136.142] CloseHandle (hObject=0x1288) returned 1 [0136.142] CloseHandle (hObject=0x5a4) returned 1 [0136.142] CloseHandle (hObject=0x598) returned 1 [0136.143] CloseHandle (hObject=0x11ac) returned 1 [0136.143] CloseHandle (hObject=0xee4) returned 1 [0136.143] CloseHandle (hObject=0xee8) returned 1 [0136.143] CloseHandle (hObject=0xeac) returned 1 [0136.143] CloseHandle (hObject=0xb08) returned 1 [0136.143] CloseHandle (hObject=0xec8) returned 1 [0136.143] CloseHandle (hObject=0xe68) returned 1 [0136.143] CloseHandle (hObject=0xb2c) returned 1 [0136.143] CloseHandle (hObject=0xef4) returned 1 [0136.144] CloseHandle (hObject=0xe98) returned 1 [0136.144] CloseHandle (hObject=0xb34) returned 1 [0136.144] CloseHandle (hObject=0xec0) returned 1 [0136.144] CloseHandle (hObject=0xb3c) returned 1 [0136.144] CloseHandle (hObject=0xec4) returned 1 [0136.144] CloseHandle (hObject=0xe6c) returned 1 [0136.144] CloseHandle (hObject=0xe78) returned 1 [0136.144] CloseHandle (hObject=0xc08) returned 1 [0136.145] CloseHandle (hObject=0xef0) returned 1 [0136.145] CloseHandle (hObject=0x1304) returned 1 [0136.145] CloseHandle (hObject=0x1130) returned 1 [0136.145] CloseHandle (hObject=0x1134) returned 1 [0136.145] CloseHandle (hObject=0x1128) returned 1 [0136.145] CloseHandle (hObject=0x111c) returned 1 [0136.146] CloseHandle (hObject=0x1124) returned 1 [0136.146] CloseHandle (hObject=0x1108) returned 1 [0136.146] CloseHandle (hObject=0x110c) returned 1 [0136.146] CloseHandle (hObject=0x10e4) returned 1 [0136.146] CloseHandle (hObject=0x10f8) returned 1 [0136.146] CloseHandle (hObject=0xff4) returned 1 [0136.146] CloseHandle (hObject=0x1244) returned 1 [0136.146] CloseHandle (hObject=0x1084) returned 1 [0136.147] CloseHandle (hObject=0x10b0) returned 1 [0136.147] CloseHandle (hObject=0x10b4) returned 1 [0136.147] CloseHandle (hObject=0x10a8) returned 1 [0136.147] CloseHandle (hObject=0x10ac) returned 1 [0136.147] CloseHandle (hObject=0x10a0) returned 1 [0136.147] CloseHandle (hObject=0x1094) returned 1 [0136.147] CloseHandle (hObject=0x109c) returned 1 [0136.147] CloseHandle (hObject=0x1268) returned 1 [0136.147] CloseHandle (hObject=0xf18) returned 1 [0136.148] CloseHandle (hObject=0x700) returned 1 [0136.148] CloseHandle (hObject=0x3e8) returned 1 [0136.148] CloseHandle (hObject=0xe7c) returned 1 [0136.148] CloseHandle (hObject=0xe60) returned 1 [0136.148] CloseHandle (hObject=0xc94) returned 1 [0136.148] CloseHandle (hObject=0x1188) returned 1 [0136.148] CloseHandle (hObject=0xc8c) returned 1 [0136.148] CloseHandle (hObject=0xe1c) returned 1 [0136.148] CloseHandle (hObject=0xc78) returned 1 [0136.149] CloseHandle (hObject=0xc84) returned 1 [0136.149] CloseHandle (hObject=0xdfc) returned 1 [0136.149] CloseHandle (hObject=0xdc8) returned 1 [0136.149] CloseHandle (hObject=0xc38) returned 1 [0136.149] CloseHandle (hObject=0xc3c) returned 1 [0136.149] CloseHandle (hObject=0xc40) returned 1 [0136.149] CloseHandle (hObject=0xc28) returned 1 [0136.149] CloseHandle (hObject=0x102c) returned 1 [0136.149] CloseHandle (hObject=0xc20) returned 1 [0136.149] CloseHandle (hObject=0xc0c) returned 1 [0136.150] CloseHandle (hObject=0xd28) returned 1 [0136.150] CloseHandle (hObject=0xbfc) returned 1 [0136.150] CloseHandle (hObject=0xbbc) returned 1 [0136.150] CloseHandle (hObject=0x144c) returned 1 [0136.150] CloseHandle (hObject=0x1450) returned 1 [0136.150] CloseHandle (hObject=0x1454) returned 1 [0136.150] CloseHandle (hObject=0xe2c) returned 1 [0136.150] CloseHandle (hObject=0xe18) returned 1 [0136.150] CloseHandle (hObject=0xe34) returned 1 [0136.151] CloseHandle (hObject=0xe20) returned 1 [0136.151] CloseHandle (hObject=0xfec) returned 1 [0136.151] Sleep (dwMilliseconds=0x1) [0138.969] CloseHandle (hObject=0xca0) returned 1 [0138.970] CloseHandle (hObject=0xcac) returned 1 [0138.970] CloseHandle (hObject=0xc74) returned 1 [0138.970] CloseHandle (hObject=0xcb8) returned 1 [0138.970] CloseHandle (hObject=0xca4) returned 1 [0138.970] CloseHandle (hObject=0x105c) returned 1 [0138.970] CloseHandle (hObject=0xf0c) returned 1 [0138.970] CloseHandle (hObject=0xcbc) returned 1 [0138.970] CloseHandle (hObject=0xd54) returned 1 [0138.971] CloseHandle (hObject=0x12e0) returned 1 [0138.971] CloseHandle (hObject=0x594) returned 1 [0138.971] CloseHandle (hObject=0x10bc) returned 1 [0138.971] CloseHandle (hObject=0x1164) returned 1 [0138.971] CloseHandle (hObject=0x11bc) returned 1 [0138.971] CloseHandle (hObject=0x11b4) returned 1 [0138.971] CloseHandle (hObject=0xb20) returned 1 [0138.971] CloseHandle (hObject=0x11d0) returned 1 [0138.971] CloseHandle (hObject=0xb38) returned 1 [0138.972] CloseHandle (hObject=0xb18) returned 1 [0138.972] CloseHandle (hObject=0x1280) returned 1 [0138.972] CloseHandle (hObject=0x1284) returned 1 [0138.972] CloseHandle (hObject=0x1294) returned 1 [0138.972] CloseHandle (hObject=0x11b8) returned 1 [0138.972] CloseHandle (hObject=0x129c) returned 1 [0138.972] CloseHandle (hObject=0x634) returned 1 [0138.972] CloseHandle (hObject=0x10d4) returned 1 [0138.972] CloseHandle (hObject=0x13f0) returned 1 [0138.973] CloseHandle (hObject=0x10fc) returned 1 [0138.973] CloseHandle (hObject=0x1100) returned 1 [0138.973] CloseHandle (hObject=0x1408) returned 1 [0138.973] CloseHandle (hObject=0x578) returned 1 [0138.973] CloseHandle (hObject=0xe44) returned 1 [0138.973] CloseHandle (hObject=0xe40) returned 1 [0138.973] CloseHandle (hObject=0x12a4) returned 1 [0138.973] CloseHandle (hObject=0xb40) returned 1 [0138.973] CloseHandle (hObject=0x588) returned 1 [0138.974] CloseHandle (hObject=0x568) returned 1 [0138.974] CloseHandle (hObject=0x57c) returned 1 [0138.974] CloseHandle (hObject=0x1274) returned 1 [0138.974] CloseHandle (hObject=0x11d8) returned 1 [0138.974] CloseHandle (hObject=0x119c) returned 1 [0138.974] CloseHandle (hObject=0xe80) returned 1 [0138.974] CloseHandle (hObject=0x1104) returned 1 [0138.974] CloseHandle (hObject=0xf88) returned 1 [0138.975] CloseHandle (hObject=0x11a8) returned 1 [0138.975] CloseHandle (hObject=0xe8c) returned 1 [0138.975] CloseHandle (hObject=0xea8) returned 1 [0138.975] CloseHandle (hObject=0x11cc) returned 1 [0138.975] CloseHandle (hObject=0x12a8) returned 1 [0138.975] CloseHandle (hObject=0x1090) returned 1 [0138.975] CloseHandle (hObject=0x1074) returned 1 [0138.975] CloseHandle (hObject=0x1088) returned 1 [0138.975] CloseHandle (hObject=0x1080) returned 1 [0138.976] CloseHandle (hObject=0x1054) returned 1 [0138.976] CloseHandle (hObject=0xf7c) returned 1 [0138.976] CloseHandle (hObject=0xf44) returned 1 [0138.976] CloseHandle (hObject=0xf5c) returned 1 [0138.976] CloseHandle (hObject=0xebc) returned 1 [0138.976] CloseHandle (hObject=0xf6c) returned 1 [0138.976] CloseHandle (hObject=0xf60) returned 1 [0138.976] CloseHandle (hObject=0xf78) returned 1 [0138.976] CloseHandle (hObject=0xe74) returned 1 [0138.977] CloseHandle (hObject=0xf4c) returned 1 [0138.977] CloseHandle (hObject=0xf50) returned 1 [0138.977] CloseHandle (hObject=0xf38) returned 1 [0138.977] CloseHandle (hObject=0xf48) returned 1 [0138.977] CloseHandle (hObject=0xf24) returned 1 [0138.977] CloseHandle (hObject=0xf34) returned 1 [0138.977] CloseHandle (hObject=0xf20) returned 1 [0138.977] CloseHandle (hObject=0xf2c) returned 1 [0138.977] CloseHandle (hObject=0xf30) returned 1 [0138.978] CloseHandle (hObject=0xf28) returned 1 [0138.978] CloseHandle (hObject=0xef8) returned 1 [0138.978] CloseHandle (hObject=0xf1c) returned 1 [0138.978] CloseHandle (hObject=0xf10) returned 1 [0138.978] CloseHandle (hObject=0xee0) returned 1 [0138.978] CloseHandle (hObject=0xe70) returned 1 [0138.978] CloseHandle (hObject=0xf14) returned 1 [0138.978] CloseHandle (hObject=0xda4) returned 1 [0138.978] CloseHandle (hObject=0xd9c) returned 1 [0138.979] CloseHandle (hObject=0xd84) returned 1 [0138.979] CloseHandle (hObject=0xd98) returned 1 [0138.979] CloseHandle (hObject=0xd90) returned 1 [0138.979] CloseHandle (hObject=0xd48) returned 1 [0138.979] CloseHandle (hObject=0x718) returned 1 [0138.979] CloseHandle (hObject=0xd88) returned 1 [0138.979] CloseHandle (hObject=0xf90) returned 1 [0138.979] CloseHandle (hObject=0xd80) returned 1 [0138.979] CloseHandle (hObject=0xd7c) returned 1 [0138.980] CloseHandle (hObject=0xd74) returned 1 [0138.980] CloseHandle (hObject=0xd78) returned 1 [0138.980] CloseHandle (hObject=0xd60) returned 1 [0138.980] CloseHandle (hObject=0xd6c) returned 1 [0138.980] CloseHandle (hObject=0xd70) returned 1 [0138.980] CloseHandle (hObject=0xd64) returned 1 [0138.980] CloseHandle (hObject=0xd68) returned 1 [0138.980] CloseHandle (hObject=0x13f8) returned 1 [0138.980] CloseHandle (hObject=0x1038) returned 1 [0138.981] CloseHandle (hObject=0x101c) returned 1 [0138.981] CloseHandle (hObject=0xe9c) returned 1 [0138.981] CloseHandle (hObject=0x11f8) returned 1 [0138.981] CloseHandle (hObject=0xea4) returned 1 [0138.981] CloseHandle (hObject=0x11fc) returned 1 [0138.981] CloseHandle (hObject=0xd40) returned 1 [0138.981] CloseHandle (hObject=0x6b4) returned 1 [0138.981] CloseHandle (hObject=0xd50) returned 1 [0138.981] CloseHandle (hObject=0xd4c) returned 1 [0138.982] CloseHandle (hObject=0x11e8) returned 1 [0138.982] CloseHandle (hObject=0x1400) returned 1 [0138.982] CloseHandle (hObject=0x1240) returned 1 [0138.982] CloseHandle (hObject=0x11e0) returned 1 [0138.982] CloseHandle (hObject=0xe4c) returned 1 [0138.982] CloseHandle (hObject=0x1198) returned 1 [0138.982] CloseHandle (hObject=0x11e4) returned 1 [0138.982] CloseHandle (hObject=0xdb0) returned 1 [0138.982] CloseHandle (hObject=0xdf8) returned 1 [0138.983] CloseHandle (hObject=0xc88) returned 1 [0138.983] CloseHandle (hObject=0xc7c) returned 1 [0138.983] CloseHandle (hObject=0x1144) returned 1 [0138.983] CloseHandle (hObject=0xc50) returned 1 [0138.983] CloseHandle (hObject=0xc6c) returned 1 [0138.983] CloseHandle (hObject=0xc68) returned 1 [0138.983] CloseHandle (hObject=0xc58) returned 1 [0138.983] CloseHandle (hObject=0xc5c) returned 1 [0138.984] CloseHandle (hObject=0xc60) returned 1 [0138.984] CloseHandle (hObject=0xc34) returned 1 [0138.984] CloseHandle (hObject=0xc4c) returned 1 [0138.984] CloseHandle (hObject=0x104c) returned 1 [0138.984] CloseHandle (hObject=0xc24) returned 1 [0138.984] CloseHandle (hObject=0xc2c) returned 1 [0138.984] CloseHandle (hObject=0xc30) returned 1 [0138.984] CloseHandle (hObject=0xc18) returned 1 [0138.985] CloseHandle (hObject=0xbd0) returned 1 [0138.985] CloseHandle (hObject=0xd34) returned 1 [0138.985] CloseHandle (hObject=0x1460) returned 1 [0138.985] CloseHandle (hObject=0x1464) returned 1 [0138.985] CloseHandle (hObject=0x1468) returned 1 [0138.985] CloseHandle (hObject=0x1470) returned 1 [0138.985] CloseHandle (hObject=0x1478) returned 1 [0138.985] CloseHandle (hObject=0x147c) returned 1 [0138.985] CloseHandle (hObject=0x1480) returned 1 [0138.986] CloseHandle (hObject=0xccc) returned 1 [0144.219] CloseHandle (hObject=0xfec) returned 1 [0144.219] CloseHandle (hObject=0xe28) returned 1 [0144.219] CloseHandle (hObject=0x11c4) returned 1 [0144.220] CloseHandle (hObject=0x1058) returned 1 [0144.220] CloseHandle (hObject=0xe08) returned 1 [0144.220] CloseHandle (hObject=0xe0c) returned 1 [0144.220] CloseHandle (hObject=0xc90) returned 1 [0144.220] CloseHandle (hObject=0xccc) returned 1 [0144.220] CloseHandle (hObject=0x1480) returned 1 [0144.220] CloseHandle (hObject=0x1204) returned 1 [0144.220] CloseHandle (hObject=0x117c) returned 1 [0144.221] CloseHandle (hObject=0x118c) returned 1 [0144.221] CloseHandle (hObject=0x11dc) returned 1 [0144.221] CloseHandle (hObject=0x103c) returned 1 [0144.221] CloseHandle (hObject=0x1208) returned 1 [0144.221] CloseHandle (hObject=0x147c) returned 1 [0144.221] CloseHandle (hObject=0x1028) returned 1 [0144.221] CloseHandle (hObject=0x1478) returned 1 [0144.222] CloseHandle (hObject=0x654) returned 1 [0144.222] CloseHandle (hObject=0xb64) returned 1 [0144.222] CloseHandle (hObject=0xb60) returned 1 [0144.222] CloseHandle (hObject=0xb50) returned 1 [0144.222] CloseHandle (hObject=0x644) returned 1 [0144.222] CloseHandle (hObject=0x934) returned 1 [0144.222] CloseHandle (hObject=0x680) returned 1 [0144.222] CloseHandle (hObject=0x1098) returned 1 [0144.222] CloseHandle (hObject=0x1470) returned 1 [0144.223] CloseHandle (hObject=0x1464) returned 1 [0144.223] CloseHandle (hObject=0xe20) returned 1 [0144.223] CloseHandle (hObject=0x1460) returned 1 [0144.223] CloseHandle (hObject=0xe2c) returned 1 [0144.223] CloseHandle (hObject=0xd34) returned 1 [0144.223] CloseHandle (hObject=0xbd0) returned 1 [0144.224] CloseHandle (hObject=0x127c) returned 1 [0144.224] CloseHandle (hObject=0xc18) returned 1 [0144.224] CloseHandle (hObject=0xc30) returned 1 [0144.224] CloseHandle (hObject=0xf64) returned 1 [0144.224] CloseHandle (hObject=0xc2c) returned 1 [0144.224] CloseHandle (hObject=0xc24) returned 1 [0144.224] CloseHandle (hObject=0x104c) returned 1 [0144.224] CloseHandle (hObject=0xc4c) returned 1 [0144.225] CloseHandle (hObject=0x11a4) returned 1 [0144.225] CloseHandle (hObject=0xc34) returned 1 [0144.225] CloseHandle (hObject=0x10f0) returned 1 [0144.225] CloseHandle (hObject=0xc60) returned 1 [0144.225] CloseHandle (hObject=0xc58) returned 1 [0144.225] CloseHandle (hObject=0xc6c) returned 1 [0144.226] CloseHandle (hObject=0xc50) returned 1 [0144.226] CloseHandle (hObject=0x5ac) returned 1 [0144.226] CloseHandle (hObject=0xcd0) returned 1 [0144.226] CloseHandle (hObject=0xcc4) returned 1 [0144.226] CloseHandle (hObject=0xd04) returned 1 [0144.226] CloseHandle (hObject=0xcdc) returned 1 [0144.226] CloseHandle (hObject=0x580) returned 1 [0144.227] CloseHandle (hObject=0xe10) returned 1 [0144.227] CloseHandle (hObject=0xe3c) returned 1 [0144.227] CloseHandle (hObject=0x1144) returned 1 [0144.227] CloseHandle (hObject=0x57c) returned 1 [0144.227] CloseHandle (hObject=0x113c) returned 1 [0144.227] CloseHandle (hObject=0xb14) returned 1 [0144.228] CloseHandle (hObject=0xb30) returned 1 [0144.228] CloseHandle (hObject=0x1310) returned 1 [0144.228] CloseHandle (hObject=0x914) returned 1 [0144.228] CloseHandle (hObject=0x1220) returned 1 [0144.228] CloseHandle (hObject=0x123c) returned 1 [0144.228] CloseHandle (hObject=0x564) returned 1 [0144.229] CloseHandle (hObject=0xb10) returned 1 [0144.229] CloseHandle (hObject=0x1290) returned 1 [0144.229] CloseHandle (hObject=0xab8) returned 1 [0144.229] CloseHandle (hObject=0x568) returned 1 [0144.229] CloseHandle (hObject=0x1270) returned 1 [0144.229] CloseHandle (hObject=0xb28) returned 1 [0144.230] CloseHandle (hObject=0x12d8) returned 1 [0144.230] CloseHandle (hObject=0xafc) returned 1 [0144.230] CloseHandle (hObject=0x12a0) returned 1 [0144.230] CloseHandle (hObject=0xb00) returned 1 [0144.230] CloseHandle (hObject=0xfb0) returned 1 [0144.231] CloseHandle (hObject=0x12fc) returned 1 [0144.231] CloseHandle (hObject=0xea0) returned 1 [0144.231] CloseHandle (hObject=0x744) returned 1 [0144.231] CloseHandle (hObject=0xae4) returned 1 [0144.231] CloseHandle (hObject=0x12b0) returned 1 [0144.231] CloseHandle (hObject=0xcf0) returned 1 [0144.232] CloseHandle (hObject=0xd0c) returned 1 [0144.232] CloseHandle (hObject=0xd18) returned 1 [0144.232] CloseHandle (hObject=0x1210) returned 1 [0144.232] CloseHandle (hObject=0x12ac) returned 1 [0144.232] CloseHandle (hObject=0xf9c) returned 1 [0144.232] CloseHandle (hObject=0xb40) returned 1 [0144.233] CloseHandle (hObject=0xd10) returned 1 [0144.233] CloseHandle (hObject=0xfa4) returned 1 [0144.233] CloseHandle (hObject=0x143c) returned 1 [0144.233] CloseHandle (hObject=0xf94) returned 1 [0144.233] CloseHandle (hObject=0x1184) returned 1 [0144.234] CloseHandle (hObject=0x13e8) returned 1 [0144.234] CloseHandle (hObject=0x1430) returned 1 [0144.234] CloseHandle (hObject=0x664) returned 1 [0144.234] CloseHandle (hObject=0x3b0) returned 1 [0144.234] CloseHandle (hObject=0x13e0) returned 1 [0144.234] CloseHandle (hObject=0x13f4) returned 1 [0144.234] CloseHandle (hObject=0x1048) returned 1 [0144.234] CloseHandle (hObject=0xb94) returned 1 [0144.235] CloseHandle (hObject=0x13ec) returned 1 [0144.235] CloseHandle (hObject=0xfb8) returned 1 [0144.235] CloseHandle (hObject=0x8bc) returned 1 [0144.235] CloseHandle (hObject=0xd14) returned 1 [0144.235] CloseHandle (hObject=0xfc4) returned 1 [0144.235] CloseHandle (hObject=0xfc8) returned 1 [0144.236] CloseHandle (hObject=0xfd0) returned 1 [0144.236] CloseHandle (hObject=0x940) returned 1 [0144.236] CloseHandle (hObject=0xb58) returned 1 [0144.236] CloseHandle (hObject=0x6cc) returned 1 [0144.236] CloseHandle (hObject=0x650) returned 1 [0144.236] CloseHandle (hObject=0x1168) returned 1 [0144.236] CloseHandle (hObject=0xe44) returned 1 [0144.237] CloseHandle (hObject=0xac4) returned 1 [0144.237] CloseHandle (hObject=0x66c) returned 1 [0144.237] CloseHandle (hObject=0x3ac) returned 1 [0144.237] CloseHandle (hObject=0xacc) returned 1 [0144.237] CloseHandle (hObject=0x674) returned 1 [0144.237] CloseHandle (hObject=0x748) returned 1 [0144.237] CloseHandle (hObject=0xd44) returned 1 [0144.237] CloseHandle (hObject=0x10ec) returned 1 [0144.238] CloseHandle (hObject=0x10e0) returned 1 [0144.238] CloseHandle (hObject=0xd94) returned 1 [0144.238] CloseHandle (hObject=0x106c) returned 1 [0144.238] CloseHandle (hObject=0xf68) returned 1 [0144.238] CloseHandle (hObject=0x578) returned 1 [0144.238] CloseHandle (hObject=0x67c) returned 1 [0144.238] CloseHandle (hObject=0x1148) returned 1 [0144.238] CloseHandle (hObject=0x74c) returned 1 [0144.238] CloseHandle (hObject=0x1298) returned 1 [0144.239] CloseHandle (hObject=0x12ec) returned 1 [0144.239] CloseHandle (hObject=0x1214) returned 1 [0144.239] CloseHandle (hObject=0x12e8) returned 1 [0144.239] CloseHandle (hObject=0xb48) returned 1 [0144.239] CloseHandle (hObject=0xd30) returned 1 [0144.239] CloseHandle (hObject=0xd1c) returned 1 [0144.240] CloseHandle (hObject=0xad0) returned 1 [0144.240] CloseHandle (hObject=0x560) returned 1 [0144.240] CloseHandle (hObject=0x13c0) returned 1 [0144.240] CloseHandle (hObject=0xefc) returned 1 [0144.240] CloseHandle (hObject=0x1418) returned 1 [0144.240] CloseHandle (hObject=0x1428) returned 1 [0144.240] CloseHandle (hObject=0x141c) returned 1 [0144.240] CloseHandle (hObject=0x13dc) returned 1 [0144.241] CloseHandle (hObject=0x1420) returned 1 [0144.241] CloseHandle (hObject=0x55c) returned 1 [0144.241] CloseHandle (hObject=0xe58) returned 1 [0144.241] CloseHandle (hObject=0x1264) returned 1 [0144.241] CloseHandle (hObject=0x584) returned 1 [0144.241] CloseHandle (hObject=0x1200) returned 1 [0144.241] CloseHandle (hObject=0x12f8) returned 1 [0144.241] CloseHandle (hObject=0x56c) returned 1 [0144.242] CloseHandle (hObject=0x11ec) returned 1 [0144.242] CloseHandle (hObject=0x13c8) returned 1 [0144.242] CloseHandle (hObject=0x13cc) returned 1 [0144.242] CloseHandle (hObject=0x1408) returned 1 [0144.242] CloseHandle (hObject=0x1140) returned 1 [0144.242] CloseHandle (hObject=0x1100) returned 1 [0144.242] CloseHandle (hObject=0x10fc) returned 1 [0144.242] CloseHandle (hObject=0x13f0) returned 1 [0144.242] CloseHandle (hObject=0x1158) returned 1 [0144.242] CloseHandle (hObject=0xb04) returned 1 [0144.243] CloseHandle (hObject=0x1078) returned 1 [0144.243] CloseHandle (hObject=0x634) returned 1 [0144.243] CloseHandle (hObject=0x1294) returned 1 [0144.243] CloseHandle (hObject=0x1284) returned 1 [0144.243] CloseHandle (hObject=0xeb8) returned 1 [0144.243] CloseHandle (hObject=0x1030) returned 1 [0144.243] CloseHandle (hObject=0x5a0) returned 1 [0144.243] CloseHandle (hObject=0xfe4) returned 1 [0144.244] CloseHandle (hObject=0x1280) returned 1 [0144.244] CloseHandle (hObject=0xb18) returned 1 [0144.244] CloseHandle (hObject=0xb38) returned 1 [0144.244] CloseHandle (hObject=0x11d0) returned 1 [0144.244] CloseHandle (hObject=0xb20) returned 1 [0144.244] CloseHandle (hObject=0x11b4) returned 1 [0144.244] CloseHandle (hObject=0x10b0) returned 1 [0144.244] CloseHandle (hObject=0xd54) returned 1 [0144.244] CloseHandle (hObject=0xcbc) returned 1 [0144.244] CloseHandle (hObject=0x5b0) returned 1 [0144.244] CloseHandle (hObject=0xf70) returned 1 [0144.245] CloseHandle (hObject=0x116c) returned 1 [0144.245] CloseHandle (hObject=0x1154) returned 1 [0144.245] CloseHandle (hObject=0x105c) returned 1 [0144.245] CloseHandle (hObject=0xca4) returned 1 [0144.245] CloseHandle (hObject=0xcb8) returned 1 [0144.245] CloseHandle (hObject=0xc74) returned 1 [0144.245] CloseHandle (hObject=0xcac) returned 1 [0144.245] CloseHandle (hObject=0xca0) returned 1 [0144.245] CloseHandle (hObject=0x1138) returned 1 [0144.245] CloseHandle (hObject=0xc38) returned 1 [0144.246] CloseHandle (hObject=0xdfc) returned 1 [0144.246] CloseHandle (hObject=0xe1c) returned 1 [0144.246] CloseHandle (hObject=0x10f8) returned 1 [0144.246] CloseHandle (hObject=0xfb4) returned 1 [0144.246] CloseHandle (hObject=0xfa8) returned 1 [0144.246] CloseHandle (hObject=0x10ac) returned 1 [0144.246] CloseHandle (hObject=0x10a0) returned 1 [0144.246] CloseHandle (hObject=0x102c) returned 1 [0144.246] CloseHandle (hObject=0xc84) returned 1 [0144.246] CloseHandle (hObject=0x1044) returned 1 [0144.246] CloseHandle (hObject=0xfd4) returned 1 [0144.247] CloseHandle (hObject=0xce0) returned 1 [0144.247] CloseHandle (hObject=0x5cc) returned 1 [0144.247] CloseHandle (hObject=0x1018) returned 1 [0144.247] CloseHandle (hObject=0xff4) returned 1 [0144.247] CloseHandle (hObject=0xfd8) returned 1 [0144.247] CloseHandle (hObject=0xcfc) returned 1 [0144.247] CloseHandle (hObject=0x10e8) returned 1 [0144.247] CloseHandle (hObject=0x1084) returned 1 [0144.247] CloseHandle (hObject=0xedc) returned 1 [0144.247] CloseHandle (hObject=0xf08) returned 1 [0144.247] CloseHandle (hObject=0xdc8) returned 1 [0144.248] CloseHandle (hObject=0xb4c) returned 1 [0144.248] CloseHandle (hObject=0xe64) returned 1 [0144.248] CloseHandle (hObject=0xc8c) returned 1 [0144.248] CloseHandle (hObject=0x1308) returned 1 [0144.248] CloseHandle (hObject=0xcd8) returned 1 [0144.248] CloseHandle (hObject=0xc80) returned 1 [0144.248] CloseHandle (hObject=0xfc0) returned 1 [0144.248] CloseHandle (hObject=0x1050) returned 1 [0144.248] CloseHandle (hObject=0x12d0) returned 1 [0144.248] CloseHandle (hObject=0xc78) returned 1 [0144.248] CloseHandle (hObject=0xe60) returned 1 [0144.249] CloseHandle (hObject=0x5d4) returned 1 [0144.249] CloseHandle (hObject=0x1244) returned 1 [0144.249] CloseHandle (hObject=0x1404) returned 1 [0144.249] CloseHandle (hObject=0x1014) returned 1 [0144.249] CloseHandle (hObject=0xe48) returned 1 [0144.249] CloseHandle (hObject=0xe54) returned 1 [0144.249] CloseHandle (hObject=0xc3c) returned 1 [0144.249] CloseHandle (hObject=0xc70) returned 1 [0144.249] CloseHandle (hObject=0xc10) returned 1 [0144.249] CloseHandle (hObject=0xc40) returned 1 [0144.250] CloseHandle (hObject=0xff0) returned 1 [0144.250] CloseHandle (hObject=0xc28) returned 1 [0144.250] CloseHandle (hObject=0x11c8) returned 1 [0144.250] CloseHandle (hObject=0x107c) returned 1 [0144.250] CloseHandle (hObject=0x1070) returned 1 [0144.250] CloseHandle (hObject=0xc48) returned 1 [0144.250] CloseHandle (hObject=0xbf8) returned 1 [0144.250] CloseHandle (hObject=0x14fc) returned 1 [0144.250] CloseHandle (hObject=0x1500) returned 1 [0144.250] CloseHandle (hObject=0x1504) returned 1 [0144.251] CloseHandle (hObject=0x1508) returned 1 [0144.251] CloseHandle (hObject=0x150c) returned 1 [0144.251] CloseHandle (hObject=0xc14) returned 1 Thread: id = 111 os_tid = 0x8c8 [0130.238] Sleep (dwMilliseconds=0x1) [0130.281] Sleep (dwMilliseconds=0x1) [0130.422] Sleep (dwMilliseconds=0x1) [0130.671] Sleep (dwMilliseconds=0x1) [0130.887] Sleep (dwMilliseconds=0x1) [0131.103] Sleep (dwMilliseconds=0x1) [0131.509] Sleep (dwMilliseconds=0x1) [0131.972] Sleep (dwMilliseconds=0x1) [0132.420] Sleep (dwMilliseconds=0x1) [0133.298] Sleep (dwMilliseconds=0x1) [0133.878] Sleep (dwMilliseconds=0x1) [0134.254] Sleep (dwMilliseconds=0x1) [0135.630] Sleep (dwMilliseconds=0x1) [0136.027] Sleep (dwMilliseconds=0x1) [0137.127] Sleep (dwMilliseconds=0x1) [0139.127] Sleep (dwMilliseconds=0x1) [0140.003] Sleep (dwMilliseconds=0x1) [0140.952] Sleep (dwMilliseconds=0x1) [0141.567] Sleep (dwMilliseconds=0x1) [0142.581] Sleep (dwMilliseconds=0x1) [0143.123] Sleep (dwMilliseconds=0x1) [0143.612] Sleep (dwMilliseconds=0x1) [0143.996] Sleep (dwMilliseconds=0x1) [0144.771] Sleep (dwMilliseconds=0x1) [0145.176] Sleep (dwMilliseconds=0x1) [0145.257] Sleep (dwMilliseconds=0x1) [0145.299] Sleep (dwMilliseconds=0x1) [0145.543] Sleep (dwMilliseconds=0x1) [0147.624] Sleep (dwMilliseconds=0x1) [0148.433] Sleep (dwMilliseconds=0x1) [0148.988] Sleep (dwMilliseconds=0x1) [0149.291] Sleep (dwMilliseconds=0x1) [0149.663] Sleep (dwMilliseconds=0x1) [0150.070] Sleep (dwMilliseconds=0x1) [0150.368] Sleep (dwMilliseconds=0x1) [0150.819] Sleep (dwMilliseconds=0x1) [0151.100] Sleep (dwMilliseconds=0x1) [0151.407] Sleep (dwMilliseconds=0x1) [0151.981] Sleep (dwMilliseconds=0x1) [0152.503] Sleep (dwMilliseconds=0x1) [0153.708] Sleep (dwMilliseconds=0x1) [0153.967] Sleep (dwMilliseconds=0x1) [0154.482] Sleep (dwMilliseconds=0x1) [0154.958] Sleep (dwMilliseconds=0x1) [0155.297] Sleep (dwMilliseconds=0x1) [0155.972] Sleep (dwMilliseconds=0x1) [0157.145] Sleep (dwMilliseconds=0x1) [0158.454] Sleep (dwMilliseconds=0x1) [0161.328] Sleep (dwMilliseconds=0x1) [0162.468] Sleep (dwMilliseconds=0x1) [0163.250] Sleep (dwMilliseconds=0x1) [0164.740] Sleep (dwMilliseconds=0x1) [0165.480] Sleep (dwMilliseconds=0x1) [0166.216] Sleep (dwMilliseconds=0x1) [0166.711] Sleep (dwMilliseconds=0x1) [0167.389] Sleep (dwMilliseconds=0x1) [0168.245] Sleep (dwMilliseconds=0x1) [0168.684] Sleep (dwMilliseconds=0x1) [0169.355] Sleep (dwMilliseconds=0x1) [0170.048] Sleep (dwMilliseconds=0x1) [0170.188] Sleep (dwMilliseconds=0x1) [0170.295] Sleep (dwMilliseconds=0x1) [0170.322] Sleep (dwMilliseconds=0x1) [0170.389] Sleep (dwMilliseconds=0x1) [0170.450] Sleep (dwMilliseconds=0x1) [0170.514] Sleep (dwMilliseconds=0x1) [0171.063] Sleep (dwMilliseconds=0x1) [0171.087] Sleep (dwMilliseconds=0x1) [0171.253] Sleep (dwMilliseconds=0x1) [0171.259] Sleep (dwMilliseconds=0x1) [0171.273] Sleep (dwMilliseconds=0x1) [0171.289] Sleep (dwMilliseconds=0x1) [0171.304] Sleep (dwMilliseconds=0x1) [0171.734] Sleep (dwMilliseconds=0x1) [0172.674] Sleep (dwMilliseconds=0x1) [0173.212] Sleep (dwMilliseconds=0x1) [0173.609] Sleep (dwMilliseconds=0x1) [0174.389] Sleep (dwMilliseconds=0x1) [0175.127] Sleep (dwMilliseconds=0x1) [0175.440] Sleep (dwMilliseconds=0x1) [0175.749] Sleep (dwMilliseconds=0x1) [0176.169] Sleep (dwMilliseconds=0x1) [0177.522] Sleep (dwMilliseconds=0x1) [0177.669] Sleep (dwMilliseconds=0x1) [0177.972] Sleep (dwMilliseconds=0x1) [0178.217] Sleep (dwMilliseconds=0x1) [0178.425] Sleep (dwMilliseconds=0x1) [0178.613] Sleep (dwMilliseconds=0x1) [0178.812] Sleep (dwMilliseconds=0x1) [0178.983] Sleep (dwMilliseconds=0x1) [0179.173] Sleep (dwMilliseconds=0x1) [0179.540] Sleep (dwMilliseconds=0x1) [0179.764] Sleep (dwMilliseconds=0x1) [0179.859] Sleep (dwMilliseconds=0x1) [0179.980] Sleep (dwMilliseconds=0x1) [0180.317] Sleep (dwMilliseconds=0x1) [0180.535] Sleep (dwMilliseconds=0x1) [0180.802] Sleep (dwMilliseconds=0x1) [0180.915] Sleep (dwMilliseconds=0x1) [0180.933] Sleep (dwMilliseconds=0x1) [0180.945] Sleep (dwMilliseconds=0x1) [0180.965] Sleep (dwMilliseconds=0x1) [0180.980] Sleep (dwMilliseconds=0x1) [0180.992] Sleep (dwMilliseconds=0x1) [0181.015] Sleep (dwMilliseconds=0x1) [0181.026] Sleep (dwMilliseconds=0x1) [0181.060] Sleep (dwMilliseconds=0x1) [0181.074] Sleep (dwMilliseconds=0x1) [0181.090] Sleep (dwMilliseconds=0x1) [0181.107] Sleep (dwMilliseconds=0x1) [0181.124] Sleep (dwMilliseconds=0x1) [0181.135] Sleep (dwMilliseconds=0x1) [0181.150] Sleep (dwMilliseconds=0x1) [0181.170] Sleep (dwMilliseconds=0x1) [0181.179] Sleep (dwMilliseconds=0x1) [0181.196] Sleep (dwMilliseconds=0x1) [0181.215] Sleep (dwMilliseconds=0x1) [0181.231] Sleep (dwMilliseconds=0x1) [0181.276] Sleep (dwMilliseconds=0x1) [0183.359] Sleep (dwMilliseconds=0x1) [0184.660] Sleep (dwMilliseconds=0x1) [0185.109] Sleep (dwMilliseconds=0x1) [0185.933] Sleep (dwMilliseconds=0x1) [0186.517] Sleep (dwMilliseconds=0x1) [0187.134] Sleep (dwMilliseconds=0x1) [0187.482] Sleep (dwMilliseconds=0x1) [0187.779] Sleep (dwMilliseconds=0x1) [0187.931] Sleep (dwMilliseconds=0x1) [0188.173] Sleep (dwMilliseconds=0x1) [0188.460] Sleep (dwMilliseconds=0x1) [0188.554] Sleep (dwMilliseconds=0x1) [0188.586] Sleep (dwMilliseconds=0x1) [0188.628] Sleep (dwMilliseconds=0x1) [0188.665] Sleep (dwMilliseconds=0x1) [0188.693] Sleep (dwMilliseconds=0x1) [0188.703] Sleep (dwMilliseconds=0x1) [0188.718] Sleep (dwMilliseconds=0x1) [0188.737] Sleep (dwMilliseconds=0x1) [0188.749] Sleep (dwMilliseconds=0x1) [0188.766] Sleep (dwMilliseconds=0x1) [0188.778] Sleep (dwMilliseconds=0x1) [0188.798] Sleep (dwMilliseconds=0x1) [0188.807] Sleep (dwMilliseconds=0x1) [0188.824] Sleep (dwMilliseconds=0x1) [0189.355] Sleep (dwMilliseconds=0x1) [0189.851] Sleep (dwMilliseconds=0x1) [0190.193] Sleep (dwMilliseconds=0x1) [0191.192] Sleep (dwMilliseconds=0x1) [0191.534] Sleep (dwMilliseconds=0x1) [0191.860] Sleep (dwMilliseconds=0x1) [0192.084] Sleep (dwMilliseconds=0x1) [0192.326] Sleep (dwMilliseconds=0x1) [0192.674] Sleep (dwMilliseconds=0x1) [0193.007] Sleep (dwMilliseconds=0x1) [0194.103] Sleep (dwMilliseconds=0x1) [0195.414] Sleep (dwMilliseconds=0x1) [0195.809] Sleep (dwMilliseconds=0x1) [0198.590] Sleep (dwMilliseconds=0x1) [0201.504] Sleep (dwMilliseconds=0x1) [0202.057] Sleep (dwMilliseconds=0x1) [0202.960] Sleep (dwMilliseconds=0x1) [0203.109] Sleep (dwMilliseconds=0x1) [0203.426] Sleep (dwMilliseconds=0x1) [0204.796] Sleep (dwMilliseconds=0x1) [0205.385] Sleep (dwMilliseconds=0x1) [0205.699] Sleep (dwMilliseconds=0x1) [0206.157] Sleep (dwMilliseconds=0x1) [0206.253] Sleep (dwMilliseconds=0x1) [0206.360] Sleep (dwMilliseconds=0x1) [0206.463] Sleep (dwMilliseconds=0x1) [0206.490] Sleep (dwMilliseconds=0x1) [0206.511] Sleep (dwMilliseconds=0x1) [0206.521] Sleep (dwMilliseconds=0x1) [0206.530] Sleep (dwMilliseconds=0x1) [0206.545] Sleep (dwMilliseconds=0x1) [0206.560] Sleep (dwMilliseconds=0x1) [0206.577] Sleep (dwMilliseconds=0x1) [0206.599] Sleep (dwMilliseconds=0x1) [0206.608] Sleep (dwMilliseconds=0x1) [0209.941] Sleep (dwMilliseconds=0x1) [0211.700] Sleep (dwMilliseconds=0x1) [0212.209] Sleep (dwMilliseconds=0x1) [0212.436] Sleep (dwMilliseconds=0x1) [0212.658] Sleep (dwMilliseconds=0x1) [0212.808] Sleep (dwMilliseconds=0x1) [0212.937] Sleep (dwMilliseconds=0x1) [0213.027] Sleep (dwMilliseconds=0x1) [0213.293] Sleep (dwMilliseconds=0x1) [0213.546] Sleep (dwMilliseconds=0x1) [0213.720] Sleep (dwMilliseconds=0x1) [0213.890] Sleep (dwMilliseconds=0x1) [0214.283] Sleep (dwMilliseconds=0x1) [0215.400] Sleep (dwMilliseconds=0x1) [0216.778] Sleep (dwMilliseconds=0x1) [0217.680] Sleep (dwMilliseconds=0x1) [0219.912] Sleep (dwMilliseconds=0x1) [0220.164] Sleep (dwMilliseconds=0x1) [0221.290] Sleep (dwMilliseconds=0x1) [0222.631] Sleep (dwMilliseconds=0x1) [0222.928] Sleep (dwMilliseconds=0x1) [0223.022] Sleep (dwMilliseconds=0x1) [0223.245] Sleep (dwMilliseconds=0x1) [0223.277] Sleep (dwMilliseconds=0x1) [0223.357] Sleep (dwMilliseconds=0x1) [0223.441] Sleep (dwMilliseconds=0x1) [0223.606] Sleep (dwMilliseconds=0x1) [0223.682] Sleep (dwMilliseconds=0x1) [0223.777] Sleep (dwMilliseconds=0x1) [0223.835] Sleep (dwMilliseconds=0x1) [0224.829] Sleep (dwMilliseconds=0x1) [0225.057] Sleep (dwMilliseconds=0x1) [0225.200] Sleep (dwMilliseconds=0x1) [0225.250] Sleep (dwMilliseconds=0x1) [0225.314] Sleep (dwMilliseconds=0x1) [0225.476] Sleep (dwMilliseconds=0x1) [0225.788] Sleep (dwMilliseconds=0x1) [0225.934] Sleep (dwMilliseconds=0x1) [0225.973] Sleep (dwMilliseconds=0x1) [0226.076] Sleep (dwMilliseconds=0x1) [0226.246] Sleep (dwMilliseconds=0x1) [0226.305] Sleep (dwMilliseconds=0x1) [0226.450] Sleep (dwMilliseconds=0x1) [0226.567] Sleep (dwMilliseconds=0x1) [0226.617] Sleep (dwMilliseconds=0x1) [0226.678] Sleep (dwMilliseconds=0x1) [0227.279] Sleep (dwMilliseconds=0x1) [0227.390] Sleep (dwMilliseconds=0x1) [0227.478] Sleep (dwMilliseconds=0x1) [0227.532] Sleep (dwMilliseconds=0x1) [0227.554] Sleep (dwMilliseconds=0x1) [0228.354] Sleep (dwMilliseconds=0x1) [0228.507] Sleep (dwMilliseconds=0x1) [0228.613] Sleep (dwMilliseconds=0x1) [0228.711] Sleep (dwMilliseconds=0x1) [0228.854] Sleep (dwMilliseconds=0x1) [0229.081] Sleep (dwMilliseconds=0x1) [0229.187] Sleep (dwMilliseconds=0x1) [0229.218] Sleep (dwMilliseconds=0x1) [0229.238] Sleep (dwMilliseconds=0x1) [0229.328] Sleep (dwMilliseconds=0x1) [0229.419] Sleep (dwMilliseconds=0x1) [0229.568] Sleep (dwMilliseconds=0x1) [0229.674] Sleep (dwMilliseconds=0x1) [0229.898] Sleep (dwMilliseconds=0x1) [0230.072] Sleep (dwMilliseconds=0x1) [0230.162] Sleep (dwMilliseconds=0x1) [0230.213] Sleep (dwMilliseconds=0x1) [0230.621] Sleep (dwMilliseconds=0x1) [0230.673] Sleep (dwMilliseconds=0x1) [0230.742] Sleep (dwMilliseconds=0x1) [0230.860] Sleep (dwMilliseconds=0x1) [0230.922] Sleep (dwMilliseconds=0x1) [0231.352] Sleep (dwMilliseconds=0x1) [0231.805] Sleep (dwMilliseconds=0x1) [0231.858] Sleep (dwMilliseconds=0x1) [0231.940] Sleep (dwMilliseconds=0x1) [0232.048] Sleep (dwMilliseconds=0x1) [0232.055] Sleep (dwMilliseconds=0x1) [0232.182] Sleep (dwMilliseconds=0x1) [0232.239] Sleep (dwMilliseconds=0x1) [0232.351] Sleep (dwMilliseconds=0x1) [0232.410] Sleep (dwMilliseconds=0x1) [0232.464] Sleep (dwMilliseconds=0x1) [0232.876] Sleep (dwMilliseconds=0x1) [0232.920] Sleep (dwMilliseconds=0x1) [0232.969] Sleep (dwMilliseconds=0x1) [0233.019] Sleep (dwMilliseconds=0x1) [0233.085] Sleep (dwMilliseconds=0x1) [0233.914] Sleep (dwMilliseconds=0x1) [0234.019] Sleep (dwMilliseconds=0x1) [0236.248] Sleep (dwMilliseconds=0x1) [0236.366] Sleep (dwMilliseconds=0x1) [0236.415] Sleep (dwMilliseconds=0x1) [0236.454] Sleep (dwMilliseconds=0x1) [0236.547] Sleep (dwMilliseconds=0x1) [0236.608] Sleep (dwMilliseconds=0x1) [0236.644] Sleep (dwMilliseconds=0x1) [0237.112] Sleep (dwMilliseconds=0x1) [0237.173] Sleep (dwMilliseconds=0x1) [0237.230] Sleep (dwMilliseconds=0x1) [0237.284] Sleep (dwMilliseconds=0x1) [0237.314] Sleep (dwMilliseconds=0x1) [0238.111] Sleep (dwMilliseconds=0x1) [0238.145] Sleep (dwMilliseconds=0x1) [0238.259] Sleep (dwMilliseconds=0x1) [0238.340] Sleep (dwMilliseconds=0x1) [0238.366] Sleep (dwMilliseconds=0x1) [0238.384] Sleep (dwMilliseconds=0x1) [0238.474] Sleep (dwMilliseconds=0x1) [0238.539] Sleep (dwMilliseconds=0x1) [0238.611] Sleep (dwMilliseconds=0x1) [0238.663] Sleep (dwMilliseconds=0x1) [0238.724] Sleep (dwMilliseconds=0x1) [0238.795] Sleep (dwMilliseconds=0x1) [0239.004] Sleep (dwMilliseconds=0x1) [0239.514] Sleep (dwMilliseconds=0x1) [0239.619] Sleep (dwMilliseconds=0x1) [0239.697] Sleep (dwMilliseconds=0x1) [0239.751] Sleep (dwMilliseconds=0x1) [0239.803] Sleep (dwMilliseconds=0x1) [0240.554] Sleep (dwMilliseconds=0x1) [0240.602] Sleep (dwMilliseconds=0x1) [0240.691] Sleep (dwMilliseconds=0x1) [0240.722] Sleep (dwMilliseconds=0x1) [0240.947] Sleep (dwMilliseconds=0x1) [0240.974] Sleep (dwMilliseconds=0x1) [0240.992] Sleep (dwMilliseconds=0x1) [0241.009] Sleep (dwMilliseconds=0x1) [0241.046] Sleep (dwMilliseconds=0x1) [0241.055] Sleep (dwMilliseconds=0x1) [0241.424] Sleep (dwMilliseconds=0x1) [0241.477] Sleep (dwMilliseconds=0x1) [0241.502] Sleep (dwMilliseconds=0x1) [0241.552] Sleep (dwMilliseconds=0x1) [0242.280] Sleep (dwMilliseconds=0x1) [0242.286] Sleep (dwMilliseconds=0x1) [0243.391] Sleep (dwMilliseconds=0x1) [0243.438] Sleep (dwMilliseconds=0x1) [0243.449] Sleep (dwMilliseconds=0x1) [0243.503] Sleep (dwMilliseconds=0x1) [0243.538] Sleep (dwMilliseconds=0x1) [0243.552] Sleep (dwMilliseconds=0x1) [0243.574] Sleep (dwMilliseconds=0x1) [0243.891] Sleep (dwMilliseconds=0x1) [0243.972] Sleep (dwMilliseconds=0x1) [0244.086] Sleep (dwMilliseconds=0x1) [0244.128] Sleep (dwMilliseconds=0x1) [0244.172] Sleep (dwMilliseconds=0x1) [0244.224] Sleep (dwMilliseconds=0x1) [0244.279] Sleep (dwMilliseconds=0x1) [0245.170] Sleep (dwMilliseconds=0x1) [0245.220] Sleep (dwMilliseconds=0x1) [0245.268] Sleep (dwMilliseconds=0x1) [0245.313] Sleep (dwMilliseconds=0x1) [0245.358] Sleep (dwMilliseconds=0x1) [0245.406] Sleep (dwMilliseconds=0x1) [0245.492] Sleep (dwMilliseconds=0x1) [0245.534] Sleep (dwMilliseconds=0x1) [0245.589] Sleep (dwMilliseconds=0x1) [0245.624] Sleep (dwMilliseconds=0x1) [0245.670] Sleep (dwMilliseconds=0x1) [0245.716] Sleep (dwMilliseconds=0x1) [0245.835] Sleep (dwMilliseconds=0x1) [0246.289] Sleep (dwMilliseconds=0x1) [0246.370] Sleep (dwMilliseconds=0x1) [0246.419] Sleep (dwMilliseconds=0x1) [0246.465] Sleep (dwMilliseconds=0x1) [0246.488] Sleep (dwMilliseconds=0x1) [0246.525] Sleep (dwMilliseconds=0x1) [0246.529] Sleep (dwMilliseconds=0x1) [0246.560] Sleep (dwMilliseconds=0x1) [0246.838] Sleep (dwMilliseconds=0x1) [0246.984] Sleep (dwMilliseconds=0x1) [0247.023] Sleep (dwMilliseconds=0x1) [0247.104] Sleep (dwMilliseconds=0x1) [0247.183] Sleep (dwMilliseconds=0x1) [0247.338] Sleep (dwMilliseconds=0x1) [0247.439] Sleep (dwMilliseconds=0x1) [0247.448] Sleep (dwMilliseconds=0x1) [0247.464] Sleep (dwMilliseconds=0x1) [0247.482] Sleep (dwMilliseconds=0x1) [0247.502] Sleep (dwMilliseconds=0x1) [0247.513] Sleep (dwMilliseconds=0x1) [0247.529] Sleep (dwMilliseconds=0x1) [0248.039] Sleep (dwMilliseconds=0x1) [0248.042] Sleep (dwMilliseconds=0x1) [0248.773] Sleep (dwMilliseconds=0x1) [0249.027] Sleep (dwMilliseconds=0x1) [0249.039] Sleep (dwMilliseconds=0x1) [0249.100] Sleep (dwMilliseconds=0x1) [0249.103] Sleep (dwMilliseconds=0x1) [0249.129] Sleep (dwMilliseconds=0x1) [0249.565] Sleep (dwMilliseconds=0x1) [0249.573] Sleep (dwMilliseconds=0x1) [0249.586] Sleep (dwMilliseconds=0x1) [0249.600] Sleep (dwMilliseconds=0x1) [0249.616] Sleep (dwMilliseconds=0x1) [0249.633] Sleep (dwMilliseconds=0x1) [0249.647] Sleep (dwMilliseconds=0x1) [0249.665] Sleep (dwMilliseconds=0x1) [0249.703] Sleep (dwMilliseconds=0x1) [0249.749] Sleep (dwMilliseconds=0x1) [0249.756] Sleep (dwMilliseconds=0x1) [0249.772] Sleep (dwMilliseconds=0x1) [0249.789] Sleep (dwMilliseconds=0x1) [0249.803] Sleep (dwMilliseconds=0x1) [0249.819] Sleep (dwMilliseconds=0x1) [0249.834] Sleep (dwMilliseconds=0x1) [0249.850] Sleep (dwMilliseconds=0x1) [0249.865] Sleep (dwMilliseconds=0x1) [0249.881] Sleep (dwMilliseconds=0x1) [0249.900] Sleep (dwMilliseconds=0x1) [0249.912] Sleep (dwMilliseconds=0x1) [0249.928] Sleep (dwMilliseconds=0x1) [0249.943] Sleep (dwMilliseconds=0x1) [0249.959] Sleep (dwMilliseconds=0x1) [0249.976] Sleep (dwMilliseconds=0x1) [0249.990] Sleep (dwMilliseconds=0x1) [0250.008] Sleep (dwMilliseconds=0x1) [0250.022] Sleep (dwMilliseconds=0x1) [0250.037] Sleep (dwMilliseconds=0x1) [0250.053] Sleep (dwMilliseconds=0x1) [0250.068] Sleep (dwMilliseconds=0x1) [0250.084] Sleep (dwMilliseconds=0x1) [0250.099] Sleep (dwMilliseconds=0x1) [0250.117] Sleep (dwMilliseconds=0x1) [0250.131] Sleep (dwMilliseconds=0x1) [0250.146] Sleep (dwMilliseconds=0x1) [0250.162] Sleep (dwMilliseconds=0x1) [0250.178] Sleep (dwMilliseconds=0x1) [0250.194] Sleep (dwMilliseconds=0x1) [0250.209] Sleep (dwMilliseconds=0x1) [0250.226] Sleep (dwMilliseconds=0x1) [0250.240] Sleep (dwMilliseconds=0x1) [0250.255] Sleep (dwMilliseconds=0x1) [0250.271] Sleep (dwMilliseconds=0x1) [0250.287] Sleep (dwMilliseconds=0x1) [0250.303] Sleep (dwMilliseconds=0x1) [0250.318] Sleep (dwMilliseconds=0x1) [0250.335] Sleep (dwMilliseconds=0x1) [0250.349] Sleep (dwMilliseconds=0x1) [0250.365] Sleep (dwMilliseconds=0x1) [0250.380] Sleep (dwMilliseconds=0x1) [0250.396] Sleep (dwMilliseconds=0x1) [0250.412] Sleep (dwMilliseconds=0x1) [0250.427] Sleep (dwMilliseconds=0x1) [0250.445] Sleep (dwMilliseconds=0x1) [0250.458] Sleep (dwMilliseconds=0x1) [0250.474] Sleep (dwMilliseconds=0x1) [0250.489] Sleep (dwMilliseconds=0x1) [0250.505] Sleep (dwMilliseconds=0x1) [0250.523] Sleep (dwMilliseconds=0x1) [0250.536] Sleep (dwMilliseconds=0x1) [0250.553] Sleep (dwMilliseconds=0x1) [0250.567] Sleep (dwMilliseconds=0x1) [0250.583] Sleep (dwMilliseconds=0x1) [0250.598] Sleep (dwMilliseconds=0x1) [0250.614] Sleep (dwMilliseconds=0x1) [0250.630] Sleep (dwMilliseconds=0x1) [0250.645] Sleep (dwMilliseconds=0x1) [0250.662] Sleep (dwMilliseconds=0x1) [0250.677] Sleep (dwMilliseconds=0x1) [0250.773] Sleep (dwMilliseconds=0x1) [0250.786] Sleep (dwMilliseconds=0x1) [0250.803] Sleep (dwMilliseconds=0x1) [0250.817] Sleep (dwMilliseconds=0x1) [0250.833] Sleep (dwMilliseconds=0x1) [0250.848] Sleep (dwMilliseconds=0x1) [0250.864] Sleep (dwMilliseconds=0x1) [0250.880] Sleep (dwMilliseconds=0x1) [0250.895] Sleep (dwMilliseconds=0x1) [0250.913] Sleep (dwMilliseconds=0x1) [0250.927] Sleep (dwMilliseconds=0x1) [0250.942] Sleep (dwMilliseconds=0x1) [0250.958] Sleep (dwMilliseconds=0x1) [0250.973] Sleep (dwMilliseconds=0x1) [0250.989] Sleep (dwMilliseconds=0x1) [0251.004] Sleep (dwMilliseconds=0x1) [0251.022] Sleep (dwMilliseconds=0x1) [0251.035] Sleep (dwMilliseconds=0x1) [0251.051] Sleep (dwMilliseconds=0x1) [0251.067] Sleep (dwMilliseconds=0x1) [0251.083] Sleep (dwMilliseconds=0x1) [0251.099] Sleep (dwMilliseconds=0x1) [0251.113] Sleep (dwMilliseconds=0x1) [0251.130] Sleep (dwMilliseconds=0x1) [0251.145] Sleep (dwMilliseconds=0x1) [0251.160] Sleep (dwMilliseconds=0x1) [0251.176] Sleep (dwMilliseconds=0x1) [0251.191] Sleep (dwMilliseconds=0x1) [0251.207] Sleep (dwMilliseconds=0x1) [0251.223] Sleep (dwMilliseconds=0x1) [0251.240] Sleep (dwMilliseconds=0x1) [0251.254] Sleep (dwMilliseconds=0x1) [0251.269] Sleep (dwMilliseconds=0x1) [0251.285] Sleep (dwMilliseconds=0x1) [0251.301] Sleep (dwMilliseconds=0x1) [0251.317] Sleep (dwMilliseconds=0x1) [0251.332] Sleep (dwMilliseconds=0x1) [0251.349] Sleep (dwMilliseconds=0x1) [0251.363] Sleep (dwMilliseconds=0x1) [0251.379] Sleep (dwMilliseconds=0x1) [0251.394] Sleep (dwMilliseconds=0x1) [0251.410] Sleep (dwMilliseconds=0x1) [0251.425] Sleep (dwMilliseconds=0x1) [0251.441] Sleep (dwMilliseconds=0x1) [0251.458] Sleep (dwMilliseconds=0x1) [0251.473] Sleep (dwMilliseconds=0x1) [0251.488] Sleep (dwMilliseconds=0x1) [0251.503] Sleep (dwMilliseconds=0x1) [0251.519] Sleep (dwMilliseconds=0x1) [0251.535] Sleep (dwMilliseconds=0x1) [0251.550] Sleep (dwMilliseconds=0x1) [0251.568] Sleep (dwMilliseconds=0x1) [0251.581] Sleep (dwMilliseconds=0x1) [0251.597] Sleep (dwMilliseconds=0x1) [0251.612] Sleep (dwMilliseconds=0x1) [0251.628] Sleep (dwMilliseconds=0x1) [0251.645] Sleep (dwMilliseconds=0x1) [0251.663] Sleep (dwMilliseconds=0x1) [0251.676] Sleep (dwMilliseconds=0x1) [0251.804] Sleep (dwMilliseconds=0x1) [0251.870] Sleep (dwMilliseconds=0x1) [0251.879] Sleep (dwMilliseconds=0x1) [0251.893] Sleep (dwMilliseconds=0x1) [0251.931] Sleep (dwMilliseconds=0x1) [0251.978] Sleep (dwMilliseconds=0x1) [0252.001] Sleep (dwMilliseconds=0x1) [0252.014] Sleep (dwMilliseconds=0x1) [0252.019] Sleep (dwMilliseconds=0x1) [0252.041] Sleep (dwMilliseconds=0x1) [0252.052] Sleep (dwMilliseconds=0x1) [0252.065] Sleep (dwMilliseconds=0x1) [0252.112] Sleep (dwMilliseconds=0x1) [0252.159] Sleep (dwMilliseconds=0x1) [0252.206] Sleep (dwMilliseconds=0x1) [0252.253] Sleep (dwMilliseconds=0x1) [0252.300] Sleep (dwMilliseconds=0x1) [0252.346] Sleep (dwMilliseconds=0x1) [0252.379] Sleep (dwMilliseconds=0x1) [0252.424] Sleep (dwMilliseconds=0x1) [0252.471] Sleep (dwMilliseconds=0x1) [0252.519] Sleep (dwMilliseconds=0x1) [0252.566] Sleep (dwMilliseconds=0x1) [0252.611] Sleep (dwMilliseconds=0x1) [0252.658] Sleep (dwMilliseconds=0x1) [0252.706] Sleep (dwMilliseconds=0x1) [0252.826] Sleep (dwMilliseconds=0x1) [0252.861] Sleep (dwMilliseconds=0x1) [0252.910] Sleep (dwMilliseconds=0x1) [0252.954] Sleep (dwMilliseconds=0x1) [0253.012] Sleep (dwMilliseconds=0x1) [0253.048] Sleep (dwMilliseconds=0x1) [0253.095] Sleep (dwMilliseconds=0x1) [0253.143] Sleep (dwMilliseconds=0x1) [0253.189] Sleep (dwMilliseconds=0x1) [0253.235] Sleep (dwMilliseconds=0x1) [0253.284] Sleep (dwMilliseconds=0x1) [0253.329] Sleep (dwMilliseconds=0x1) [0253.376] Sleep (dwMilliseconds=0x1) [0253.424] Sleep (dwMilliseconds=0x1) [0253.471] Sleep (dwMilliseconds=0x1) [0253.517] Sleep (dwMilliseconds=0x1) [0253.565] Sleep (dwMilliseconds=0x1) [0253.610] Sleep (dwMilliseconds=0x1) [0253.656] Sleep (dwMilliseconds=0x1) [0253.680] Sleep (dwMilliseconds=0x1) [0253.692] Sleep (dwMilliseconds=0x1) [0253.703] Sleep (dwMilliseconds=0x1) [0253.719] Sleep (dwMilliseconds=0x1) [0253.734] Sleep (dwMilliseconds=0x1) [0253.750] Sleep (dwMilliseconds=0x1) [0253.844] Sleep (dwMilliseconds=0x1) [0253.880] Sleep (dwMilliseconds=0x1) [0253.893] Sleep (dwMilliseconds=0x1) [0253.907] Sleep (dwMilliseconds=0x1) [0253.937] Sleep (dwMilliseconds=0x1) [0253.955] Sleep (dwMilliseconds=0x1) [0253.975] Sleep (dwMilliseconds=0x1) [0253.984] Sleep (dwMilliseconds=0x1) [0254.000] Sleep (dwMilliseconds=0x1) [0254.036] Sleep (dwMilliseconds=0x1) [0254.046] Sleep (dwMilliseconds=0x1) [0254.063] Sleep (dwMilliseconds=0x1) [0254.078] Sleep (dwMilliseconds=0x1) [0254.111] Sleep (dwMilliseconds=0x1) [0254.130] Sleep (dwMilliseconds=0x1) [0254.142] Sleep (dwMilliseconds=0x1) [0254.156] Sleep (dwMilliseconds=0x1) [0254.204] Sleep (dwMilliseconds=0x1) [0254.223] Sleep (dwMilliseconds=0x1) [0254.250] Sleep (dwMilliseconds=0x1) [0254.266] Sleep (dwMilliseconds=0x1) [0254.280] Sleep (dwMilliseconds=0x1) [0254.298] Sleep (dwMilliseconds=0x1) [0254.314] Sleep (dwMilliseconds=0x1) [0254.332] Sleep (dwMilliseconds=0x1) [0254.344] Sleep (dwMilliseconds=0x1) [0254.359] Sleep (dwMilliseconds=0x1) [0254.377] Sleep (dwMilliseconds=0x1) [0254.390] Sleep (dwMilliseconds=0x1) [0254.436] Sleep (dwMilliseconds=0x1) [0254.483] Sleep (dwMilliseconds=0x1) [0254.499] Sleep (dwMilliseconds=0x1) [0254.532] Sleep (dwMilliseconds=0x1) [0254.574] Sleep (dwMilliseconds=0x1) [0254.577] Sleep (dwMilliseconds=0x1) [0254.607] Sleep (dwMilliseconds=0x1) [0254.635] Sleep (dwMilliseconds=0x1) [0254.654] Sleep (dwMilliseconds=0x1) [0254.664] Sleep (dwMilliseconds=0x1) [0254.672] Sleep (dwMilliseconds=0x1) [0254.690] Sleep (dwMilliseconds=0x1) [0254.711] Sleep (dwMilliseconds=0x1) [0254.718] Sleep (dwMilliseconds=0x1) [0254.735] Sleep (dwMilliseconds=0x1) [0254.749] Sleep (dwMilliseconds=0x1) [0254.765] Sleep (dwMilliseconds=0x1) [0254.856] Sleep (dwMilliseconds=0x1) [0254.866] Sleep (dwMilliseconds=0x1) [0254.905] Sleep (dwMilliseconds=0x1) [0254.951] Sleep (dwMilliseconds=0x1) [0254.969] Sleep (dwMilliseconds=0x1) [0254.986] Sleep (dwMilliseconds=0x1) [0254.998] Sleep (dwMilliseconds=0x1) [0255.018] Sleep (dwMilliseconds=0x1) [0255.033] Sleep (dwMilliseconds=0x1) [0255.049] Sleep (dwMilliseconds=0x1) [0255.097] Sleep (dwMilliseconds=0x1) [0255.126] Sleep (dwMilliseconds=0x1) [0255.147] Sleep (dwMilliseconds=0x1) [0255.184] Sleep (dwMilliseconds=0x1) [0255.191] Sleep (dwMilliseconds=0x1) [0255.239] Sleep (dwMilliseconds=0x1) [0255.266] Sleep (dwMilliseconds=0x1) [0255.302] Sleep (dwMilliseconds=0x1) [0255.316] Sleep (dwMilliseconds=0x1) [0255.328] Sleep (dwMilliseconds=0x1) [0255.376] Sleep (dwMilliseconds=0x1) [0255.393] Sleep (dwMilliseconds=0x1) [0255.404] Sleep (dwMilliseconds=0x1) [0255.419] Sleep (dwMilliseconds=0x1) [0255.440] Sleep (dwMilliseconds=0x1) [0255.463] Sleep (dwMilliseconds=0x1) [0255.498] Sleep (dwMilliseconds=0x1) [0255.544] Sleep (dwMilliseconds=0x1) [0255.591] Sleep (dwMilliseconds=0x1) [0255.641] Sleep (dwMilliseconds=0x1) [0255.674] Sleep (dwMilliseconds=0x1) [0255.685] Sleep (dwMilliseconds=0x1) [0255.702] Sleep (dwMilliseconds=0x1) [0255.747] Sleep (dwMilliseconds=0x1) [0255.847] Sleep (dwMilliseconds=0x1) [0255.887] Sleep (dwMilliseconds=0x1) [0255.934] Sleep (dwMilliseconds=0x1) [0255.981] Sleep (dwMilliseconds=0x1) [0255.998] Sleep (dwMilliseconds=0x1) [0256.043] Sleep (dwMilliseconds=0x1) [0256.168] Sleep (dwMilliseconds=0x1) [0256.216] Sleep (dwMilliseconds=0x1) [0256.263] Sleep (dwMilliseconds=0x1) [0256.310] Sleep (dwMilliseconds=0x1) [0256.355] Sleep (dwMilliseconds=0x1) [0256.402] Sleep (dwMilliseconds=0x1) [0256.450] Sleep (dwMilliseconds=0x1) [0256.496] Sleep (dwMilliseconds=0x1) [0256.543] Sleep (dwMilliseconds=0x1) [0256.591] Sleep (dwMilliseconds=0x1) [0256.636] Sleep (dwMilliseconds=0x1) [0256.683] Sleep (dwMilliseconds=0x1) [0256.732] Sleep (dwMilliseconds=0x1) [0256.745] Sleep (dwMilliseconds=0x1) [0256.761] Sleep (dwMilliseconds=0x1) [0256.776] Sleep (dwMilliseconds=0x1) [0256.792] Sleep (dwMilliseconds=0x1) [0256.827] Sleep (dwMilliseconds=0x1) [0256.840] Sleep (dwMilliseconds=0x1) [0256.896] Sleep (dwMilliseconds=0x1) [0256.904] Sleep (dwMilliseconds=0x1) [0256.917] Sleep (dwMilliseconds=0x1) [0256.933] Sleep (dwMilliseconds=0x1) [0256.948] Sleep (dwMilliseconds=0x1) [0256.966] Sleep (dwMilliseconds=0x1) [0256.979] Sleep (dwMilliseconds=0x1) [0256.995] Sleep (dwMilliseconds=0x1) [0257.010] Sleep (dwMilliseconds=0x1) [0257.026] Sleep (dwMilliseconds=0x1) [0257.042] Sleep (dwMilliseconds=0x1) [0257.057] Sleep (dwMilliseconds=0x1) [0257.106] Sleep (dwMilliseconds=0x1) [0257.151] Sleep (dwMilliseconds=0x1) [0257.198] Sleep (dwMilliseconds=0x1) [0257.245] Sleep (dwMilliseconds=0x1) [0257.291] Sleep (dwMilliseconds=0x1) [0257.338] Sleep (dwMilliseconds=0x1) [0257.386] Sleep (dwMilliseconds=0x1) [0257.432] Sleep (dwMilliseconds=0x1) [0257.467] Sleep (dwMilliseconds=0x1) [0257.510] Sleep (dwMilliseconds=0x1) [0257.556] Sleep (dwMilliseconds=0x1) [0257.603] Sleep (dwMilliseconds=0x1) [0257.652] Sleep (dwMilliseconds=0x1) [0257.697] Sleep (dwMilliseconds=0x1) [0257.743] Sleep (dwMilliseconds=0x1) [0257.792] Sleep (dwMilliseconds=0x1) [0257.850] Sleep (dwMilliseconds=0x1) [0257.916] Sleep (dwMilliseconds=0x1) [0257.962] Sleep (dwMilliseconds=0x1) [0258.010] Sleep (dwMilliseconds=0x1) [0258.057] Sleep (dwMilliseconds=0x1) [0258.165] Sleep (dwMilliseconds=0x1) [0258.212] Sleep (dwMilliseconds=0x1) [0258.258] Sleep (dwMilliseconds=0x1) [0258.308] Sleep (dwMilliseconds=0x1) [0258.352] Sleep (dwMilliseconds=0x1) [0258.399] Sleep (dwMilliseconds=0x1) [0258.446] Sleep (dwMilliseconds=0x1) [0258.493] Sleep (dwMilliseconds=0x1) [0258.539] Sleep (dwMilliseconds=0x1) [0258.588] Sleep (dwMilliseconds=0x1) [0258.633] Sleep (dwMilliseconds=0x1) [0258.680] Sleep (dwMilliseconds=0x1) [0258.708] Sleep (dwMilliseconds=0x1) [0258.711] Sleep (dwMilliseconds=0x1) [0258.726] Sleep (dwMilliseconds=0x1) [0258.773] Sleep (dwMilliseconds=0x1) [0258.820] Sleep (dwMilliseconds=0x1) [0258.882] Sleep (dwMilliseconds=0x1) [0258.964] Sleep (dwMilliseconds=0x1) [0259.007] Sleep (dwMilliseconds=0x1) [0259.054] Sleep (dwMilliseconds=0x1) [0259.091] Sleep (dwMilliseconds=0x1) [0259.132] Sleep (dwMilliseconds=0x1) [0259.179] Sleep (dwMilliseconds=0x1) [0259.227] Sleep (dwMilliseconds=0x1) [0259.272] Sleep (dwMilliseconds=0x1) [0259.320] Sleep (dwMilliseconds=0x1) [0259.368] Sleep (dwMilliseconds=0x1) [0259.414] Sleep (dwMilliseconds=0x1) [0259.429] Sleep (dwMilliseconds=0x1) [0259.475] Sleep (dwMilliseconds=0x1) [0259.498] Sleep (dwMilliseconds=0x1) [0259.522] Sleep (dwMilliseconds=0x1) [0259.569] Sleep (dwMilliseconds=0x1) [0259.617] Sleep (dwMilliseconds=0x1) [0259.662] Sleep (dwMilliseconds=0x1) [0259.709] Sleep (dwMilliseconds=0x1) [0259.758] Sleep (dwMilliseconds=0x1) [0259.806] Sleep (dwMilliseconds=0x1) [0259.850] Sleep (dwMilliseconds=0x1) [0259.914] Sleep (dwMilliseconds=0x1) [0259.984] Sleep (dwMilliseconds=0x1) [0260.022] Sleep (dwMilliseconds=0x1) [0260.070] Sleep (dwMilliseconds=0x1) [0260.115] Sleep (dwMilliseconds=0x1) [0260.239] Sleep (dwMilliseconds=0x1) [0260.287] Sleep (dwMilliseconds=0x1) [0260.333] Sleep (dwMilliseconds=0x1) [0260.382] Sleep (dwMilliseconds=0x1) [0260.420] Sleep (dwMilliseconds=0x1) [0260.433] Sleep (dwMilliseconds=0x1) [0260.442] Sleep (dwMilliseconds=0x1) [0260.459] Sleep (dwMilliseconds=0x1) [0260.474] Sleep (dwMilliseconds=0x1) [0260.492] Sleep (dwMilliseconds=0x1) [0260.505] Sleep (dwMilliseconds=0x1) [0260.521] Sleep (dwMilliseconds=0x1) [0260.537] Sleep (dwMilliseconds=0x1) [0260.552] Sleep (dwMilliseconds=0x1) [0260.567] Sleep (dwMilliseconds=0x1) [0260.583] Sleep (dwMilliseconds=0x1) [0260.601] Sleep (dwMilliseconds=0x1) [0260.614] Sleep (dwMilliseconds=0x1) [0260.629] Sleep (dwMilliseconds=0x1) [0260.645] Sleep (dwMilliseconds=0x1) [0260.661] Sleep (dwMilliseconds=0x1) [0260.677] Sleep (dwMilliseconds=0x1) [0260.692] Sleep (dwMilliseconds=0x1) [0260.709] Sleep (dwMilliseconds=0x1) [0260.723] Sleep (dwMilliseconds=0x1) [0260.739] Sleep (dwMilliseconds=0x1) [0260.755] Sleep (dwMilliseconds=0x1) [0260.770] Sleep (dwMilliseconds=0x1) [0260.786] Sleep (dwMilliseconds=0x1) [0260.801] Sleep (dwMilliseconds=0x1) [0260.819] Sleep (dwMilliseconds=0x1) [0260.833] Sleep (dwMilliseconds=0x1) [0260.848] Sleep (dwMilliseconds=0x1) [0260.863] Sleep (dwMilliseconds=0x1) [0260.900] Sleep (dwMilliseconds=0x1) [0260.911] Sleep (dwMilliseconds=0x1) [0260.928] Sleep (dwMilliseconds=0x1) [0260.942] Sleep (dwMilliseconds=0x1) [0260.957] Sleep (dwMilliseconds=0x1) [0260.973] Sleep (dwMilliseconds=0x1) [0260.989] Sleep (dwMilliseconds=0x1) [0261.031] Sleep (dwMilliseconds=0x1) [0261.036] Sleep (dwMilliseconds=0x1) [0261.051] Sleep (dwMilliseconds=0x1) [0261.066] Sleep (dwMilliseconds=0x1) [0261.083] Sleep (dwMilliseconds=0x1) [0261.098] Sleep (dwMilliseconds=0x1) [0261.114] Sleep (dwMilliseconds=0x1) [0261.129] Sleep (dwMilliseconds=0x1) [0261.152] Sleep (dwMilliseconds=0x1) [0261.160] Sleep (dwMilliseconds=0x1) [0261.177] Sleep (dwMilliseconds=0x1) [0261.191] Sleep (dwMilliseconds=0x1) [0261.207] Sleep (dwMilliseconds=0x1) [0261.222] Sleep (dwMilliseconds=0x1) [0261.238] Sleep (dwMilliseconds=0x1) [0261.255] Sleep (dwMilliseconds=0x1) [0261.269] Sleep (dwMilliseconds=0x1) [0261.285] Sleep (dwMilliseconds=0x1) [0261.302] Sleep (dwMilliseconds=0x1) [0261.316] Sleep (dwMilliseconds=0x1) [0261.332] Sleep (dwMilliseconds=0x1) [0261.347] Sleep (dwMilliseconds=0x1) [0261.366] Sleep (dwMilliseconds=0x1) [0261.378] Sleep (dwMilliseconds=0x1) [0261.394] Sleep (dwMilliseconds=0x1) [0261.410] Sleep (dwMilliseconds=0x1) [0261.425] Sleep (dwMilliseconds=0x1) [0261.441] Sleep (dwMilliseconds=0x1) [0261.457] Sleep (dwMilliseconds=0x1) [0261.474] Sleep (dwMilliseconds=0x1) [0261.488] Sleep (dwMilliseconds=0x1) [0261.503] Sleep (dwMilliseconds=0x1) [0261.519] Sleep (dwMilliseconds=0x1) [0261.536] Sleep (dwMilliseconds=0x1) [0261.550] Sleep (dwMilliseconds=0x1) [0261.565] Sleep (dwMilliseconds=0x1) [0261.583] Sleep (dwMilliseconds=0x1) [0261.597] Sleep (dwMilliseconds=0x1) [0261.613] Sleep (dwMilliseconds=0x1) [0261.628] Sleep (dwMilliseconds=0x1) [0261.643] Sleep (dwMilliseconds=0x1) [0261.659] Sleep (dwMilliseconds=0x1) [0261.675] Sleep (dwMilliseconds=0x1) [0261.693] Sleep (dwMilliseconds=0x1) [0261.706] Sleep (dwMilliseconds=0x1) [0261.721] Sleep (dwMilliseconds=0x1) [0261.737] Sleep (dwMilliseconds=0x1) [0261.752] Sleep (dwMilliseconds=0x1) [0261.769] Sleep (dwMilliseconds=0x1) [0261.784] Sleep (dwMilliseconds=0x1) [0261.802] Sleep (dwMilliseconds=0x1) [0261.816] Sleep (dwMilliseconds=0x1) [0261.831] Sleep (dwMilliseconds=0x1) [0261.846] Sleep (dwMilliseconds=0x1) [0261.862] Sleep (dwMilliseconds=0x1) [0261.896] Sleep (dwMilliseconds=0x1) [0261.911] Sleep (dwMilliseconds=0x1) [0261.925] Sleep (dwMilliseconds=0x1) [0261.946] Sleep (dwMilliseconds=0x1) [0261.956] Sleep (dwMilliseconds=0x1) [0261.971] Sleep (dwMilliseconds=0x1) [0261.987] Sleep (dwMilliseconds=0x1) [0262.002] Sleep (dwMilliseconds=0x1) [0262.039] Sleep (dwMilliseconds=0x1) [0262.049] Sleep (dwMilliseconds=0x1) [0262.065] Sleep (dwMilliseconds=0x1) [0262.081] Sleep (dwMilliseconds=0x1) [0262.127] Sleep (dwMilliseconds=0x1) [0262.145] Sleep (dwMilliseconds=0x1) [0262.159] Sleep (dwMilliseconds=0x1) [0262.174] Sleep (dwMilliseconds=0x1) [0262.190] Sleep (dwMilliseconds=0x1) [0262.206] Sleep (dwMilliseconds=0x1) [0262.221] Sleep (dwMilliseconds=0x1) [0262.237] Sleep (dwMilliseconds=0x1) [0262.254] Sleep (dwMilliseconds=0x1) [0262.268] Sleep (dwMilliseconds=0x1) [0262.284] Sleep (dwMilliseconds=0x1) [0262.299] Sleep (dwMilliseconds=0x1) [0262.319] Sleep (dwMilliseconds=0x1) [0262.330] Sleep (dwMilliseconds=0x1) [0262.346] Sleep (dwMilliseconds=0x1) [0262.363] Sleep (dwMilliseconds=0x1) [0262.377] Sleep (dwMilliseconds=0x1) [0262.392] Sleep (dwMilliseconds=0x1) [0262.408] Sleep (dwMilliseconds=0x1) [0262.423] Sleep (dwMilliseconds=0x1) [0262.439] Sleep (dwMilliseconds=0x1) [0262.455] Sleep (dwMilliseconds=0x1) [0262.472] Sleep (dwMilliseconds=0x1) [0262.486] Sleep (dwMilliseconds=0x1) [0262.501] Sleep (dwMilliseconds=0x1) [0262.517] Sleep (dwMilliseconds=0x1) [0262.534] Sleep (dwMilliseconds=0x1) [0262.548] Sleep (dwMilliseconds=0x1) [0262.564] Sleep (dwMilliseconds=0x1) [0262.581] Sleep (dwMilliseconds=0x1) [0262.595] Sleep (dwMilliseconds=0x1) [0262.611] Sleep (dwMilliseconds=0x1) [0262.626] Sleep (dwMilliseconds=0x1) [0262.642] Sleep (dwMilliseconds=0x1) [0262.658] Sleep (dwMilliseconds=0x1) [0262.673] Sleep (dwMilliseconds=0x1) [0262.691] Sleep (dwMilliseconds=0x1) [0262.704] Sleep (dwMilliseconds=0x1) [0262.720] Sleep (dwMilliseconds=0x1) [0262.735] Sleep (dwMilliseconds=0x1) [0262.751] Sleep (dwMilliseconds=0x1) [0262.767] Sleep (dwMilliseconds=0x1) [0262.783] Sleep (dwMilliseconds=0x1) [0262.800] Sleep (dwMilliseconds=0x1) [0262.823] Sleep (dwMilliseconds=0x1) [0262.830] Sleep (dwMilliseconds=0x1) [0263.493] Sleep (dwMilliseconds=0x1) [0263.531] Sleep (dwMilliseconds=0x1) [0263.922] Sleep (dwMilliseconds=0x1) [0263.938] Sleep (dwMilliseconds=0x1) [0263.966] Sleep (dwMilliseconds=0x1) [0264.009] Sleep (dwMilliseconds=0x1) [0264.024] Sleep (dwMilliseconds=0x1) [0264.054] Sleep (dwMilliseconds=0x1) [0264.128] Sleep (dwMilliseconds=0x1) [0264.176] Sleep (dwMilliseconds=0x1) [0264.188] Sleep (dwMilliseconds=0x1) [0264.211] Sleep (dwMilliseconds=0x1) [0264.222] Sleep (dwMilliseconds=0x1) [0264.236] Sleep (dwMilliseconds=0x1) [0264.252] Sleep (dwMilliseconds=0x1) [0264.267] Sleep (dwMilliseconds=0x1) [0264.289] Sleep (dwMilliseconds=0x1) [0264.312] Sleep (dwMilliseconds=0x1) [0264.507] Sleep (dwMilliseconds=0x1) [0264.516] Sleep (dwMilliseconds=0x1) [0264.530] Sleep (dwMilliseconds=0x1) [0264.557] Sleep (dwMilliseconds=0x1) [0264.564] Sleep (dwMilliseconds=0x1) [0264.596] Sleep (dwMilliseconds=0x1) [0264.614] Sleep (dwMilliseconds=0x1) [0264.624] Sleep (dwMilliseconds=0x1) [0264.689] Sleep (dwMilliseconds=0x1) [0264.706] Sleep (dwMilliseconds=0x1) [0264.737] Sleep (dwMilliseconds=0x1) [0264.784] Sleep (dwMilliseconds=0x1) [0264.808] Sleep (dwMilliseconds=0x1) [0264.827] Sleep (dwMilliseconds=0x1) [0264.844] Sleep (dwMilliseconds=0x1) [0264.860] Sleep (dwMilliseconds=0x1) [0264.889] Sleep (dwMilliseconds=0x1) [0265.030] Sleep (dwMilliseconds=0x1) [0265.139] Sleep (dwMilliseconds=0x1) [0265.208] Sleep (dwMilliseconds=0x1) [0265.325] Sleep (dwMilliseconds=0x1) [0265.398] Sleep (dwMilliseconds=0x1) [0265.440] Sleep (dwMilliseconds=0x1) [0265.502] Sleep (dwMilliseconds=0x1) [0265.584] Sleep (dwMilliseconds=0x1) [0265.623] Sleep (dwMilliseconds=0x1) [0265.656] Sleep (dwMilliseconds=0x1) [0265.670] Sleep (dwMilliseconds=0x1) [0265.687] Sleep (dwMilliseconds=0x1) [0265.700] Sleep (dwMilliseconds=0x1) [0265.715] Sleep (dwMilliseconds=0x1) [0265.731] Sleep (dwMilliseconds=0x1) [0265.747] Sleep (dwMilliseconds=0x1) [0265.762] Sleep (dwMilliseconds=0x1) [0265.781] Sleep (dwMilliseconds=0x1) [0265.793] Sleep (dwMilliseconds=0x1) [0265.810] Sleep (dwMilliseconds=0x1) [0265.825] Sleep (dwMilliseconds=0x1) [0265.840] Sleep (dwMilliseconds=0x1) [0265.856] Sleep (dwMilliseconds=0x1) [0265.871] Sleep (dwMilliseconds=0x1) [0265.888] Sleep (dwMilliseconds=0x1) [0265.902] Sleep (dwMilliseconds=0x1) [0265.918] Sleep (dwMilliseconds=0x1) [0265.934] Sleep (dwMilliseconds=0x1) [0265.988] Sleep (dwMilliseconds=0x1) [0265.999] Sleep (dwMilliseconds=0x1) [0266.012] Sleep (dwMilliseconds=0x1) [0266.028] Sleep (dwMilliseconds=0x1) [0266.043] Sleep (dwMilliseconds=0x1) [0266.058] Sleep (dwMilliseconds=0x1) [0266.074] Sleep (dwMilliseconds=0x1) [0266.103] Sleep (dwMilliseconds=0x1) [0266.109] Sleep (dwMilliseconds=0x1) [0266.121] Sleep (dwMilliseconds=0x1) [0266.136] Sleep (dwMilliseconds=0x1) [0266.153] Sleep (dwMilliseconds=0x1) [0266.167] Sleep (dwMilliseconds=0x1) [0266.183] Sleep (dwMilliseconds=0x1) [0266.199] Sleep (dwMilliseconds=0x1) [0266.216] Sleep (dwMilliseconds=0x1) [0266.230] Sleep (dwMilliseconds=0x1) [0266.246] Sleep (dwMilliseconds=0x1) [0266.261] Sleep (dwMilliseconds=0x1) [0266.277] Sleep (dwMilliseconds=0x1) [0266.292] Sleep (dwMilliseconds=0x1) [0266.308] Sleep (dwMilliseconds=0x1) [0266.325] Sleep (dwMilliseconds=0x1) [0266.339] Sleep (dwMilliseconds=0x1) [0266.355] Sleep (dwMilliseconds=0x1) [0266.370] Sleep (dwMilliseconds=0x1) [0266.386] Sleep (dwMilliseconds=0x1) [0266.401] Sleep (dwMilliseconds=0x1) [0266.417] Sleep (dwMilliseconds=0x1) [0266.434] Sleep (dwMilliseconds=0x1) [0266.449] Sleep (dwMilliseconds=0x1) [0266.464] Sleep (dwMilliseconds=0x1) [0266.479] Sleep (dwMilliseconds=0x1) [0266.514] Sleep (dwMilliseconds=0x1) [0266.526] Sleep (dwMilliseconds=0x1) [0266.543] Sleep (dwMilliseconds=0x1) [0266.557] Sleep (dwMilliseconds=0x1) [0266.574] Sleep (dwMilliseconds=0x1) [0266.589] Sleep (dwMilliseconds=0x1) [0266.605] Sleep (dwMilliseconds=0x1) [0266.620] Sleep (dwMilliseconds=0x1) [0266.635] Sleep (dwMilliseconds=0x1) [0266.653] Sleep (dwMilliseconds=0x1) [0266.667] Sleep (dwMilliseconds=0x1) [0266.688] Sleep (dwMilliseconds=0x1) [0266.853] Sleep (dwMilliseconds=0x1) [0266.869] Sleep (dwMilliseconds=0x1) [0266.886] Sleep (dwMilliseconds=0x1) [0266.905] Sleep (dwMilliseconds=0x1) [0266.932] Sleep (dwMilliseconds=0x1) [0266.982] Sleep (dwMilliseconds=0x1) [0266.997] Sleep (dwMilliseconds=0x1) [0267.010] Sleep (dwMilliseconds=0x1) [0267.025] Sleep (dwMilliseconds=0x1) [0267.072] Sleep (dwMilliseconds=0x1) [0267.123] Sleep (dwMilliseconds=0x1) [0267.135] Sleep (dwMilliseconds=0x1) [0267.154] Sleep (dwMilliseconds=0x1) [0267.189] Sleep (dwMilliseconds=0x1) [0267.204] Sleep (dwMilliseconds=0x1) [0267.212] Sleep (dwMilliseconds=0x1) [0267.228] Sleep (dwMilliseconds=0x1) [0267.246] Sleep (dwMilliseconds=0x1) [0267.259] Sleep (dwMilliseconds=0x1) [0267.275] Sleep (dwMilliseconds=0x1) [0267.291] Sleep (dwMilliseconds=0x1) [0267.306] Sleep (dwMilliseconds=0x1) [0267.322] Sleep (dwMilliseconds=0x1) [0267.337] Sleep (dwMilliseconds=0x1) [0267.367] Sleep (dwMilliseconds=0x1) [0267.368] Sleep (dwMilliseconds=0x1) [0267.384] Sleep (dwMilliseconds=0x1) [0267.400] Sleep (dwMilliseconds=0x1) [0267.419] Sleep (dwMilliseconds=0x1) [0267.431] Sleep (dwMilliseconds=0x1) [0267.447] Sleep (dwMilliseconds=0x1) [0267.464] Sleep (dwMilliseconds=0x1) [0267.602] Sleep (dwMilliseconds=0x1) [0267.604] Sleep (dwMilliseconds=0x1) [0267.619] Sleep (dwMilliseconds=0x1) [0267.634] Sleep (dwMilliseconds=0x1) [0267.650] Sleep (dwMilliseconds=0x1) [0267.665] Sleep (dwMilliseconds=0x1) [0267.681] Sleep (dwMilliseconds=0x1) [0267.696] Sleep (dwMilliseconds=0x1) [0267.713] Sleep (dwMilliseconds=0x1) [0267.727] Sleep (dwMilliseconds=0x1) [0267.745] Sleep (dwMilliseconds=0x1) [0267.758] Sleep (dwMilliseconds=0x1) [0267.774] Sleep (dwMilliseconds=0x1) [0267.790] Sleep (dwMilliseconds=0x1) [0267.809] Sleep (dwMilliseconds=0x1) [0267.822] Sleep (dwMilliseconds=0x1) [0268.605] Sleep (dwMilliseconds=0x1) [0268.617] Sleep (dwMilliseconds=0x1) [0268.651] Sleep (dwMilliseconds=0x1) [0268.844] Sleep (dwMilliseconds=0x1) [0268.880] Sleep (dwMilliseconds=0x1) [0268.882] Sleep (dwMilliseconds=0x1) [0268.903] Sleep (dwMilliseconds=0x1) [0269.084] Sleep (dwMilliseconds=0x1) [0269.090] Sleep (dwMilliseconds=0x1) [0269.127] Sleep (dwMilliseconds=0x1) [0269.157] Sleep (dwMilliseconds=0x1) [0269.188] Sleep (dwMilliseconds=0x1) [0269.227] Sleep (dwMilliseconds=0x1) [0269.263] Sleep (dwMilliseconds=0x1) [0269.291] Sleep (dwMilliseconds=0x1) [0269.321] Sleep (dwMilliseconds=0x1) [0269.349] Sleep (dwMilliseconds=0x1) [0269.380] Sleep (dwMilliseconds=0x1) [0269.410] Sleep (dwMilliseconds=0x1) [0269.438] Sleep (dwMilliseconds=0x1) [0269.467] Sleep (dwMilliseconds=0x1) [0269.496] Sleep (dwMilliseconds=0x1) [0269.549] Sleep (dwMilliseconds=0x1) [0269.578] Sleep (dwMilliseconds=0x1) [0269.606] Sleep (dwMilliseconds=0x1) [0269.632] Sleep (dwMilliseconds=0x1) [0269.659] Sleep (dwMilliseconds=0x1) [0269.685] Sleep (dwMilliseconds=0x1) [0269.717] Sleep (dwMilliseconds=0x1) [0269.743] Sleep (dwMilliseconds=0x1) [0269.773] Sleep (dwMilliseconds=0x1) [0269.807] Sleep (dwMilliseconds=0x1) [0269.834] Sleep (dwMilliseconds=0x1) [0269.862] Sleep (dwMilliseconds=0x1) [0269.887] Sleep (dwMilliseconds=0x1) [0269.917] Sleep (dwMilliseconds=0x1) [0269.944] Sleep (dwMilliseconds=0x1) [0269.977] Sleep (dwMilliseconds=0x1) [0270.001] Sleep (dwMilliseconds=0x1) [0270.049] Sleep (dwMilliseconds=0x1) [0270.052] Sleep (dwMilliseconds=0x1) [0270.078] Sleep (dwMilliseconds=0x1) [0270.107] Sleep (dwMilliseconds=0x1) [0270.133] Sleep (dwMilliseconds=0x1) [0270.163] Sleep (dwMilliseconds=0x1) [0270.187] Sleep (dwMilliseconds=0x1) [0270.213] Sleep (dwMilliseconds=0x1) [0270.241] Sleep (dwMilliseconds=0x1) [0270.269] Sleep (dwMilliseconds=0x1) [0270.271] Sleep (dwMilliseconds=0x1) [0270.297] Sleep (dwMilliseconds=0x1) [0270.322] Sleep (dwMilliseconds=0x1) [0270.349] Sleep (dwMilliseconds=0x1) [0270.377] Sleep (dwMilliseconds=0x1) [0270.402] Sleep (dwMilliseconds=0x1) [0270.428] Sleep (dwMilliseconds=0x1) [0270.453] Sleep (dwMilliseconds=0x1) [0270.478] Sleep (dwMilliseconds=0x1) [0270.504] Sleep (dwMilliseconds=0x1) [0270.572] Sleep (dwMilliseconds=0x1) [0270.587] Sleep (dwMilliseconds=0x1) [0270.598] Sleep (dwMilliseconds=0x1) [0270.615] Sleep (dwMilliseconds=0x1) [0270.648] Sleep (dwMilliseconds=0x1) [0270.674] Sleep (dwMilliseconds=0x1) [0270.703] Sleep (dwMilliseconds=0x1) [0270.729] Sleep (dwMilliseconds=0x1) [0270.759] Sleep (dwMilliseconds=0x1) [0270.786] Sleep (dwMilliseconds=0x1) [0270.813] Sleep (dwMilliseconds=0x1) [0270.838] Sleep (dwMilliseconds=0x1) [0270.864] Sleep (dwMilliseconds=0x1) [0270.893] Sleep (dwMilliseconds=0x1) [0270.910] Sleep (dwMilliseconds=0x1) [0270.950] Sleep (dwMilliseconds=0x1) [0270.961] Sleep (dwMilliseconds=0x1) [0270.973] Sleep (dwMilliseconds=0x1) [0271.001] Sleep (dwMilliseconds=0x1) [0271.008] Sleep (dwMilliseconds=0x1) [0271.045] Sleep (dwMilliseconds=0x1) [0271.050] Sleep (dwMilliseconds=0x1) [0271.077] Sleep (dwMilliseconds=0x1) [0271.082] Sleep (dwMilliseconds=0x1) [0271.150] Sleep (dwMilliseconds=0x1) [0271.168] Sleep (dwMilliseconds=0x1) [0271.175] Sleep (dwMilliseconds=0x1) [0271.194] Sleep (dwMilliseconds=0x1) [0271.248] Sleep (dwMilliseconds=0x1) [0271.255] Sleep (dwMilliseconds=0x1) [0271.269] Sleep (dwMilliseconds=0x1) [0271.285] Sleep (dwMilliseconds=0x1) [0271.301] Sleep (dwMilliseconds=0x1) [0271.316] Sleep (dwMilliseconds=0x1) [0271.331] Sleep (dwMilliseconds=0x1) [0271.350] Sleep (dwMilliseconds=0x1) [0271.362] Sleep (dwMilliseconds=0x1) [0271.378] Sleep (dwMilliseconds=0x1) [0271.394] Sleep (dwMilliseconds=0x1) [0271.409] Sleep (dwMilliseconds=0x1) [0271.424] Sleep (dwMilliseconds=0x1) [0271.440] Sleep (dwMilliseconds=0x1) [0271.456] Sleep (dwMilliseconds=0x1) [0271.471] Sleep (dwMilliseconds=0x1) [0271.490] Sleep (dwMilliseconds=0x1) [0271.559] Sleep (dwMilliseconds=0x1) [0271.566] Sleep (dwMilliseconds=0x1) [0271.581] Sleep (dwMilliseconds=0x1) [0271.598] Sleep (dwMilliseconds=0x1) [0271.612] Sleep (dwMilliseconds=0x1) [0271.633] Sleep (dwMilliseconds=0x1) [0271.643] Sleep (dwMilliseconds=0x1) [0271.682] Sleep (dwMilliseconds=0x1) [0271.690] Sleep (dwMilliseconds=0x1) [0271.706] Sleep (dwMilliseconds=0x1) [0271.721] Sleep (dwMilliseconds=0x1) [0271.739] Sleep (dwMilliseconds=0x1) [0271.757] Sleep (dwMilliseconds=0x1) [0271.770] Sleep (dwMilliseconds=0x1) [0271.786] Sleep (dwMilliseconds=0x1) [0271.799] Sleep (dwMilliseconds=0x1) [0271.815] Sleep (dwMilliseconds=0x1) [0271.830] Sleep (dwMilliseconds=0x1) [0271.831] Sleep (dwMilliseconds=0x1) [0271.832] Sleep (dwMilliseconds=0x1) [0271.833] Sleep (dwMilliseconds=0x1) [0271.834] Sleep (dwMilliseconds=0x1) [0271.835] Sleep (dwMilliseconds=0x1) [0271.836] Sleep (dwMilliseconds=0x1) [0271.837] Sleep (dwMilliseconds=0x1) [0271.838] Sleep (dwMilliseconds=0x1) [0271.839] Sleep (dwMilliseconds=0x1) [0271.840] Sleep (dwMilliseconds=0x1) [0271.841] Sleep (dwMilliseconds=0x1) [0271.842] Sleep (dwMilliseconds=0x1) [0271.843] Sleep (dwMilliseconds=0x1) [0271.844] Sleep (dwMilliseconds=0x1) [0271.845] Sleep (dwMilliseconds=0x1) [0271.846] Sleep (dwMilliseconds=0x1) [0271.847] Sleep (dwMilliseconds=0x1) [0271.853] Sleep (dwMilliseconds=0x1) [0271.854] Sleep (dwMilliseconds=0x1) [0271.855] Sleep (dwMilliseconds=0x1) [0271.856] Sleep (dwMilliseconds=0x1) [0271.863] Sleep (dwMilliseconds=0x1) [0271.864] Sleep (dwMilliseconds=0x1) [0271.866] Sleep (dwMilliseconds=0x1) [0271.866] Sleep (dwMilliseconds=0x1) [0271.867] Sleep (dwMilliseconds=0x1) [0271.868] Sleep (dwMilliseconds=0x1) [0271.870] Sleep (dwMilliseconds=0x1) [0271.871] Sleep (dwMilliseconds=0x1) [0271.872] Sleep (dwMilliseconds=0x1) [0271.874] Sleep (dwMilliseconds=0x1) [0271.875] Sleep (dwMilliseconds=0x1) [0271.876] Sleep (dwMilliseconds=0x1) [0271.877] Sleep (dwMilliseconds=0x1) [0271.878] Sleep (dwMilliseconds=0x1) [0271.879] Sleep (dwMilliseconds=0x1) [0271.880] Sleep (dwMilliseconds=0x1) [0271.881] Sleep (dwMilliseconds=0x1) [0271.882] Sleep (dwMilliseconds=0x1) [0271.883] Sleep (dwMilliseconds=0x1) [0271.884] Sleep (dwMilliseconds=0x1) [0271.886] Sleep (dwMilliseconds=0x1) [0271.887] Sleep (dwMilliseconds=0x1) [0271.888] Sleep (dwMilliseconds=0x1) [0271.889] Sleep (dwMilliseconds=0x1) [0271.890] Sleep (dwMilliseconds=0x1) [0271.891] Sleep (dwMilliseconds=0x1) [0271.892] Sleep (dwMilliseconds=0x1) [0271.893] Sleep (dwMilliseconds=0x1) [0271.895] Sleep (dwMilliseconds=0x1) [0271.896] Sleep (dwMilliseconds=0x1) [0271.897] Sleep (dwMilliseconds=0x1) [0271.898] Sleep (dwMilliseconds=0x1) [0271.899] Sleep (dwMilliseconds=0x1) [0271.900] Sleep (dwMilliseconds=0x1) [0271.901] Sleep (dwMilliseconds=0x1) [0271.902] Sleep (dwMilliseconds=0x1) [0271.904] Sleep (dwMilliseconds=0x1) [0271.905] Sleep (dwMilliseconds=0x1) [0271.906] Sleep (dwMilliseconds=0x1) [0271.907] Sleep (dwMilliseconds=0x1) [0271.908] Sleep (dwMilliseconds=0x1) [0271.909] Sleep (dwMilliseconds=0x1) [0271.910] Sleep (dwMilliseconds=0x1) [0271.911] Sleep (dwMilliseconds=0x1) [0271.912] Sleep (dwMilliseconds=0x1) [0271.916] Sleep (dwMilliseconds=0x1) [0271.917] Sleep (dwMilliseconds=0x1) [0271.918] Sleep (dwMilliseconds=0x1) [0271.919] Sleep (dwMilliseconds=0x1) [0271.920] Sleep (dwMilliseconds=0x1) [0271.921] Sleep (dwMilliseconds=0x1) [0271.923] Sleep (dwMilliseconds=0x1) [0271.924] Sleep (dwMilliseconds=0x1) [0271.925] Sleep (dwMilliseconds=0x1) [0271.926] Sleep (dwMilliseconds=0x1) [0271.927] Sleep (dwMilliseconds=0x1) [0271.928] Sleep (dwMilliseconds=0x1) [0271.929] Sleep (dwMilliseconds=0x1) [0271.930] Sleep (dwMilliseconds=0x1) [0271.931] Sleep (dwMilliseconds=0x1) [0271.933] Sleep (dwMilliseconds=0x1) [0271.934] Sleep (dwMilliseconds=0x1) [0271.935] Sleep (dwMilliseconds=0x1) [0271.936] Sleep (dwMilliseconds=0x1) [0271.937] Sleep (dwMilliseconds=0x1) [0271.938] Sleep (dwMilliseconds=0x1) [0271.939] Sleep (dwMilliseconds=0x1) [0271.940] Sleep (dwMilliseconds=0x1) [0271.941] Sleep (dwMilliseconds=0x1) [0271.943] Sleep (dwMilliseconds=0x1) [0271.944] Sleep (dwMilliseconds=0x1) [0271.946] Sleep (dwMilliseconds=0x1) [0271.947] Sleep (dwMilliseconds=0x1) [0271.948] Sleep (dwMilliseconds=0x1) [0271.949] Sleep (dwMilliseconds=0x1) [0271.950] Sleep (dwMilliseconds=0x1) [0271.951] Sleep (dwMilliseconds=0x1) [0271.953] Sleep (dwMilliseconds=0x1) [0271.954] Sleep (dwMilliseconds=0x1) [0271.957] Sleep (dwMilliseconds=0x1) [0271.958] Sleep (dwMilliseconds=0x1) [0271.959] Sleep (dwMilliseconds=0x1) [0271.960] Sleep (dwMilliseconds=0x1) [0271.961] Sleep (dwMilliseconds=0x1) [0271.962] Sleep (dwMilliseconds=0x1) [0271.964] Sleep (dwMilliseconds=0x1) [0271.965] Sleep (dwMilliseconds=0x1) [0271.966] Sleep (dwMilliseconds=0x1) [0271.967] Sleep (dwMilliseconds=0x1) [0271.968] Sleep (dwMilliseconds=0x1) [0271.969] Sleep (dwMilliseconds=0x1) [0271.970] Sleep (dwMilliseconds=0x1) [0271.971] Sleep (dwMilliseconds=0x1) [0271.972] Sleep (dwMilliseconds=0x1) [0271.973] Sleep (dwMilliseconds=0x1) [0271.975] Sleep (dwMilliseconds=0x1) [0271.977] Sleep (dwMilliseconds=0x1) [0271.981] Sleep (dwMilliseconds=0x1) [0271.982] Sleep (dwMilliseconds=0x1) [0271.983] Sleep (dwMilliseconds=0x1) [0271.984] Sleep (dwMilliseconds=0x1) [0271.985] Sleep (dwMilliseconds=0x1) [0271.986] Sleep (dwMilliseconds=0x1) [0271.987] Sleep (dwMilliseconds=0x1) [0271.988] Sleep (dwMilliseconds=0x1) [0271.989] Sleep (dwMilliseconds=0x1) [0271.990] Sleep (dwMilliseconds=0x1) [0271.991] Sleep (dwMilliseconds=0x1) [0271.993] Sleep (dwMilliseconds=0x1) [0271.995] Sleep (dwMilliseconds=0x1) [0271.996] Sleep (dwMilliseconds=0x1) [0271.997] Sleep (dwMilliseconds=0x1) [0271.998] Sleep (dwMilliseconds=0x1) [0271.999] Sleep (dwMilliseconds=0x1) [0272.000] Sleep (dwMilliseconds=0x1) [0272.001] Sleep (dwMilliseconds=0x1) [0272.002] Sleep (dwMilliseconds=0x1) [0272.003] Sleep (dwMilliseconds=0x1) [0272.004] Sleep (dwMilliseconds=0x1) [0272.005] Sleep (dwMilliseconds=0x1) [0272.006] Sleep (dwMilliseconds=0x1) [0272.007] Sleep (dwMilliseconds=0x1) [0272.008] Sleep (dwMilliseconds=0x1) [0272.009] Sleep (dwMilliseconds=0x1) [0272.010] Sleep (dwMilliseconds=0x1) [0272.011] Sleep (dwMilliseconds=0x1) [0272.012] Sleep (dwMilliseconds=0x1) [0272.013] Sleep (dwMilliseconds=0x1) [0272.015] Sleep (dwMilliseconds=0x1) [0272.016] Sleep (dwMilliseconds=0x1) [0272.017] Sleep (dwMilliseconds=0x1) [0272.018] Sleep (dwMilliseconds=0x1) [0272.019] Sleep (dwMilliseconds=0x1) [0272.020] Sleep (dwMilliseconds=0x1) [0272.021] Sleep (dwMilliseconds=0x1) [0272.022] Sleep (dwMilliseconds=0x1) [0272.023] Sleep (dwMilliseconds=0x1) [0272.025] Sleep (dwMilliseconds=0x1) [0272.026] Sleep (dwMilliseconds=0x1) [0272.027] Sleep (dwMilliseconds=0x1) [0272.028] Sleep (dwMilliseconds=0x1) [0272.029] Sleep (dwMilliseconds=0x1) [0272.030] Sleep (dwMilliseconds=0x1) [0272.060] Sleep (dwMilliseconds=0x1) [0272.061] Sleep (dwMilliseconds=0x1) [0272.062] Sleep (dwMilliseconds=0x1) [0272.063] Sleep (dwMilliseconds=0x1) [0272.064] Sleep (dwMilliseconds=0x1) [0272.065] Sleep (dwMilliseconds=0x1) [0272.066] Sleep (dwMilliseconds=0x1) [0272.067] Sleep (dwMilliseconds=0x1) [0272.069] Sleep (dwMilliseconds=0x1) [0272.070] Sleep (dwMilliseconds=0x1) [0272.071] Sleep (dwMilliseconds=0x1) [0272.072] Sleep (dwMilliseconds=0x1) [0272.073] Sleep (dwMilliseconds=0x1) [0272.074] Sleep (dwMilliseconds=0x1) [0272.075] Sleep (dwMilliseconds=0x1) [0272.076] Sleep (dwMilliseconds=0x1) [0272.077] Sleep (dwMilliseconds=0x1) [0272.078] Sleep (dwMilliseconds=0x1) [0272.079] Sleep (dwMilliseconds=0x1) [0272.080] Sleep (dwMilliseconds=0x1) [0272.081] Sleep (dwMilliseconds=0x1) [0272.082] Sleep (dwMilliseconds=0x1) [0272.083] Sleep (dwMilliseconds=0x1) [0272.084] Sleep (dwMilliseconds=0x1) [0272.085] Sleep (dwMilliseconds=0x1) [0272.086] Sleep (dwMilliseconds=0x1) [0272.087] Sleep (dwMilliseconds=0x1) [0272.088] Sleep (dwMilliseconds=0x1) [0272.089] Sleep (dwMilliseconds=0x1) [0272.090] Sleep (dwMilliseconds=0x1) [0272.091] Sleep (dwMilliseconds=0x1) [0272.092] Sleep (dwMilliseconds=0x1) [0272.093] Sleep (dwMilliseconds=0x1) [0272.095] Sleep (dwMilliseconds=0x1) [0272.096] Sleep (dwMilliseconds=0x1) [0272.097] Sleep (dwMilliseconds=0x1) [0272.098] Sleep (dwMilliseconds=0x1) [0272.100] Sleep (dwMilliseconds=0x1) [0272.101] Sleep (dwMilliseconds=0x1) [0272.102] Sleep (dwMilliseconds=0x1) [0272.103] Sleep (dwMilliseconds=0x1) [0272.104] Sleep (dwMilliseconds=0x1) [0272.105] Sleep (dwMilliseconds=0x1) [0272.106] Sleep (dwMilliseconds=0x1) [0272.107] Sleep (dwMilliseconds=0x1) [0272.108] Sleep (dwMilliseconds=0x1) [0272.111] Sleep (dwMilliseconds=0x1) [0272.112] Sleep (dwMilliseconds=0x1) [0272.113] Sleep (dwMilliseconds=0x1) [0272.114] Sleep (dwMilliseconds=0x1) [0272.115] Sleep (dwMilliseconds=0x1) [0272.116] Sleep (dwMilliseconds=0x1) [0272.117] Sleep (dwMilliseconds=0x1) [0272.118] Sleep (dwMilliseconds=0x1) [0272.119] Sleep (dwMilliseconds=0x1) [0272.120] Sleep (dwMilliseconds=0x1) [0272.121] Sleep (dwMilliseconds=0x1) [0272.122] Sleep (dwMilliseconds=0x1) [0272.123] Sleep (dwMilliseconds=0x1) [0272.124] Sleep (dwMilliseconds=0x1) [0272.125] Sleep (dwMilliseconds=0x1) [0272.126] Sleep (dwMilliseconds=0x1) [0272.127] Sleep (dwMilliseconds=0x1) [0272.128] Sleep (dwMilliseconds=0x1) [0272.129] Sleep (dwMilliseconds=0x1) [0272.130] Sleep (dwMilliseconds=0x1) [0272.131] Sleep (dwMilliseconds=0x1) [0272.132] Sleep (dwMilliseconds=0x1) [0272.133] Sleep (dwMilliseconds=0x1) [0272.134] Sleep (dwMilliseconds=0x1) [0272.135] Sleep (dwMilliseconds=0x1) [0272.136] Sleep (dwMilliseconds=0x1) Thread: id = 112 os_tid = 0x7f0 [0130.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e1e338 [0130.239] wcscpy (in: _Dest=0x3e1e338, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.239] wcscat (in: _Dest=0x3e1e338, _Source="*" | out: _Dest="C:\\*") returned="C:\\*" [0130.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0130.239] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbbd37a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3e54b48 [0130.239] wcscmp (_String1="$Recycle.Bin", _String2=".") returned -1 [0130.239] wcscmp (_String1="$Recycle.Bin", _String2="..") returned -1 [0130.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df35a8 [0130.239] wcscpy (in: _Dest=0x3df35a8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.239] wcscat (in: _Dest=0x3df35a8, _Source="$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0130.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df35a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0130.241] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdb0de4, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x5cdb0de4, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x54e43b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="autoexec.bat", cAlternateFileName="")) returned 1 [0130.241] wcscmp (_String1="autoexec.bat", _String2=".") returned 1 [0130.241] wcscmp (_String1="autoexec.bat", _String2="..") returned 1 [0130.241] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x5524eae0, ftCreationTime.dwHighDateTime=0x1d2da3e, ftLastAccessTime.dwLowDateTime=0xe8c441c0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xe8c441c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0130.241] wcscmp (_String1="Boot", _String2=".") returned 1 [0130.241] wcscmp (_String1="Boot", _String2="..") returned 1 [0130.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e58398 [0130.241] wcscpy (in: _Dest=0x3e58398, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.241] wcscat (in: _Dest=0x3e58398, _Source="Boot" | out: _Dest="C:\\Boot") returned="C:\\Boot" [0130.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58398) returned 1 [0130.241] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x553cb8a0, ftCreationTime.dwHighDateTime=0x1d2da3e, ftLastAccessTime.dwLowDateTime=0xe8c441c0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xc5bd5400, ftLastWriteTime.dwHighDateTime=0x1cb887d, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0130.241] wcscmp (_String1="bootmgr", _String2=".") returned 1 [0130.241] wcscmp (_String1="bootmgr", _String2="..") returned 1 [0130.241] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x58b95c40, ftCreationTime.dwHighDateTime=0x1d2da3e, ftLastAccessTime.dwLowDateTime=0x58b95c40, ftLastAccessTime.dwHighDateTime=0x1d2da3e, ftLastWriteTime.dwLowDateTime=0x58b95c40, ftLastWriteTime.dwHighDateTime=0x1d2da3e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0130.241] wcscmp (_String1="BOOTSECT.BAK", _String2=".") returned 1 [0130.241] wcscmp (_String1="BOOTSECT.BAK", _String2="..") returned 1 [0130.241] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdd6f43, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x5cdd6f43, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x54e43b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.sys", cAlternateFileName="")) returned 1 [0130.241] wcscmp (_String1="config.sys", _String2=".") returned 1 [0130.241] wcscmp (_String1="config.sys", _String2="..") returned 1 [0130.241] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1765f29d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1765f29d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1765f29d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0130.241] wcscmp (_String1="Documents and Settings", _String2=".") returned 1 [0130.241] wcscmp (_String1="Documents and Settings", _String2="..") returned 1 [0130.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54848 [0130.242] wcscpy (in: _Dest=0x3e54848, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.242] wcscat (in: _Dest=0x3e54848, _Source="Documents and Settings" | out: _Dest="C:\\Documents and Settings") returned="C:\\Documents and Settings" [0130.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e54848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04 [0130.243] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9e132e40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0x9e132e40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0x631e0680, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0130.243] wcscmp (_String1="hiberfil.sys", _String2=".") returned 1 [0130.243] wcscmp (_String1="hiberfil.sys", _String2="..") returned 1 [0130.243] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0x2f8a2590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x2f8a2590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f8a2590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0130.243] wcscmp (_String1="MSOCache", _String2=".") returned 1 [0130.243] wcscmp (_String1="MSOCache", _String2="..") returned 1 [0130.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.243] wcscpy (in: _Dest=0x3d4ba18, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.243] wcscat (in: _Dest=0x3d4ba18, _Source="MSOCache" | out: _Dest="C:\\MSOCache") returned="C:\\MSOCache" [0130.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.243] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9e1a5260, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0x9e1a5260, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0x63500360, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0130.243] wcscmp (_String1="pagefile.sys", _String2=".") returned 1 [0130.243] wcscmp (_String1="pagefile.sys", _String2="..") returned 1 [0130.243] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a933d4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9a933d4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9a933d4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0130.243] wcscmp (_String1="PerfLogs", _String2=".") returned 1 [0130.243] wcscmp (_String1="PerfLogs", _String2="..") returned 1 [0130.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4ba18 [0130.243] wcscpy (in: _Dest=0x3d4ba18, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.243] wcscat (in: _Dest=0x3d4ba18, _Source="PerfLogs" | out: _Dest="C:\\PerfLogs") returned="C:\\PerfLogs" [0130.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.244] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x97b1cda0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x97b1cda0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0130.244] wcscmp (_String1="Program Files", _String2=".") returned 1 [0130.244] wcscmp (_String1="Program Files", _String2="..") returned 1 [0130.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df41d8 [0130.244] wcscpy (in: _Dest=0x3df41d8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.244] wcscat (in: _Dest=0x3df41d8, _Source="Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df41d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0130.245] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~2")) returned 1 [0130.245] wcscmp (_String1="ProgramData", _String2=".") returned 1 [0130.245] wcscmp (_String1="ProgramData", _String2="..") returned 1 [0130.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0130.245] wcscpy (in: _Dest=0x3d4ba18, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.245] wcscat (in: _Dest=0x3d4ba18, _Source="ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d4ba18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0130.246] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8396470, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8408890, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8408890, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0130.246] wcscmp (_String1="Recovery", _String2=".") returned 1 [0130.246] wcscmp (_String1="Recovery", _String2="..") returned 1 [0130.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4bd10 [0130.246] wcscpy (in: _Dest=0x3d4bd10, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.247] wcscat (in: _Dest=0x3d4bd10, _Source="Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery" [0130.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d4bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0130.248] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9e0c0a20, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0x98bf23f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98bf23f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0130.248] wcscmp (_String1="System Volume Information", _String2=".") returned 1 [0130.248] wcscmp (_String1="System Volume Information", _String2="..") returned 1 [0130.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e0d718 [0130.248] wcscpy (in: _Dest=0x3e0d718, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.248] wcscat (in: _Dest=0x3e0d718, _Source="System Volume Information" | out: _Dest="C:\\System Volume Information") returned="C:\\System Volume Information" [0130.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d718) returned 1 [0130.248] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8dda350, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8dda350, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0130.248] wcscmp (_String1="Users", _String2=".") returned 1 [0130.248] wcscmp (_String1="Users", _String2="..") returned 1 [0130.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58418 [0130.248] wcscpy (in: _Dest=0x3e58418, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.248] wcscat (in: _Dest=0x3e58418, _Source="Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0130.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e58418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0130.249] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0130.249] wcscmp (_String1="Windows", _String2=".") returned 1 [0130.249] wcscmp (_String1="Windows", _String2="..") returned 1 [0130.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e58458 [0130.249] wcscpy (in: _Dest=0x3e58458, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0130.249] wcscat (in: _Dest=0x3e58458, _Source="Windows" | out: _Dest="C:\\Windows") returned="C:\\Windows" [0130.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58458) returned 1 [0130.249] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0130.249] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0130.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0130.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e338) returned 1 [0130.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 Thread: id = 113 os_tid = 0x8d8 [0130.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df3ed8 [0130.260] wcscpy (in: _Dest=0x3df3ed8, _Source="C:\\$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0130.260] wcscat (in: _Dest=0x3df3ed8, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\" [0130.260] wcscat (in: _Dest=0x3df3ed8, _Source="*" | out: _Dest="C:\\$Recycle.Bin\\*") returned="C:\\$Recycle.Bin\\*" [0130.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0130.261] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbbd37a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0130.261] wcscmp (_String1=".", _String2=".") returned 0 [0130.261] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbbd37a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.261] wcscmp (_String1="..", _String2=".") returned 1 [0130.261] wcscmp (_String1="..", _String2="..") returned 0 [0130.261] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3785418085-2572485238-895829336-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0130.261] wcscmp (_String1="S-1-5-21-3785418085-2572485238-895829336-1000", _String2=".") returned 1 [0130.261] wcscmp (_String1="S-1-5-21-3785418085-2572485238-895829336-1000", _String2="..") returned 1 [0130.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1fff8 [0130.261] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0130.261] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\" [0130.261] wcscat (in: _Dest=0x3e1fff8, _Source="S-1-5-21-3785418085-2572485238-895829336-1000" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000" [0130.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0130.263] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3785418085-2572485238-895829336-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0130.263] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0130.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0130.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3ed8) returned 1 [0130.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 Thread: id = 114 os_tid = 0x8ec [0130.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e54b48 [0130.277] wcscpy (in: _Dest=0x3e54b48, _Source="C:\\Documents and Settings" | out: _Dest="C:\\Documents and Settings") returned="C:\\Documents and Settings" [0130.277] wcscat (in: _Dest=0x3e54b48, _Source="\\" | out: _Dest="C:\\Documents and Settings\\") returned="C:\\Documents and Settings\\" [0130.277] wcscat (in: _Dest=0x3e54b48, _Source="*" | out: _Dest="C:\\Documents and Settings\\*") returned="C:\\Documents and Settings\\*" [0130.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0130.277] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0130.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0130.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 Thread: id = 115 os_tid = 0x8fc [0130.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0130.286] wcscpy (in: _Dest=0x3df35a8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.286] wcscat (in: _Dest=0x3df35a8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.286] wcscat (in: _Dest=0x3df35a8, _Source="*" | out: _Dest="C:\\Program Files\\*") returned="C:\\Program Files\\*" [0130.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0130.286] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x97b1cda0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x97b1cda0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.286] wcscmp (_String1=".", _String2=".") returned 0 [0130.286] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x97b1cda0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x97b1cda0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.287] wcscmp (_String1="..", _String2=".") returned 1 [0130.287] wcscmp (_String1="..", _String2="..") returned 0 [0130.287] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x90737e80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90737e80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0130.287] wcscmp (_String1="Adobe", _String2=".") returned 1 [0130.287] wcscmp (_String1="Adobe", _String2="..") returned 1 [0130.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df79c0 [0130.287] wcscpy (in: _Dest=0x3df79c0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.287] wcscat (in: _Dest=0x3df79c0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.287] wcscat (in: _Dest=0x3df79c0, _Source="Adobe" | out: _Dest="C:\\Program Files\\Adobe") returned="C:\\Program Files\\Adobe" [0130.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df79c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0130.288] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x901b6ba0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x901b6ba0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0130.288] wcscmp (_String1="Common Files", _String2=".") returned 1 [0130.288] wcscmp (_String1="Common Files", _String2="..") returned 1 [0130.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e0d718 [0130.288] wcscpy (in: _Dest=0x3e0d718, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.288] wcscat (in: _Dest=0x3e0d718, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.288] wcscat (in: _Dest=0x3e0d718, _Source="Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0130.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0130.289] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b61335c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b61335c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.290] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0130.290] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0130.290] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90737e80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90737e80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1 [0130.290] wcscmp (_String1="DVD Maker", _String2=".") returned 1 [0130.290] wcscmp (_String1="DVD Maker", _String2="..") returned 1 [0130.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54b48 [0130.290] wcscpy (in: _Dest=0x3e54b48, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.290] wcscat (in: _Dest=0x3e54b48, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.290] wcscat (in: _Dest=0x3e54b48, _Source="DVD Maker" | out: _Dest="C:\\Program Files\\DVD Maker") returned="C:\\Program Files\\DVD Maker" [0130.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0130.290] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffde9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x9062d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9062d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0130.290] wcscmp (_String1="Google", _String2=".") returned 1 [0130.290] wcscmp (_String1="Google", _String2="..") returned 1 [0130.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df7ad8 [0130.290] wcscpy (in: _Dest=0x3df7ad8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.290] wcscat (in: _Dest=0x3df7ad8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.290] wcscat (in: _Dest=0x3df7ad8, _Source="Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0130.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df7ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0130.291] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x13413810, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x13413810, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0130.291] wcscmp (_String1="Internet Explorer", _String2=".") returned 1 [0130.291] wcscmp (_String1="Internet Explorer", _String2="..") returned 1 [0130.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5f78 [0130.291] wcscpy (in: _Dest=0x3de5f78, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.292] wcscat (in: _Dest=0x3de5f78, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.292] wcscat (in: _Dest=0x3de5f78, _Source="Internet Explorer" | out: _Dest="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer" [0130.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5f78) returned 1 [0130.292] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x929e1ee0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x929e1ee0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0130.292] wcscmp (_String1="Java", _String2=".") returned 1 [0130.292] wcscmp (_String1="Java", _String2="..") returned 1 [0130.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df7e20 [0130.292] wcscpy (in: _Dest=0x3df7e20, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.292] wcscat (in: _Dest=0x3df7e20, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.292] wcscat (in: _Dest=0x3df7e20, _Source="Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java" [0130.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df7e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0130.293] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904181a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x904181a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0130.293] wcscmp (_String1="Microsoft Analysis Services", _String2=".") returned 1 [0130.293] wcscmp (_String1="Microsoft Analysis Services", _String2="..") returned 1 [0130.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd068 [0130.293] wcscpy (in: _Dest=0x3ecd068, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.293] wcscat (in: _Dest=0x3ecd068, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.293] wcscat (in: _Dest=0x3ecd068, _Source="Microsoft Analysis Services" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services" [0130.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0130.294] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92a2e1a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92a2e1a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0130.294] wcscmp (_String1="Microsoft Office", _String2=".") returned 1 [0130.294] wcscmp (_String1="Microsoft Office", _String2="..") returned 1 [0130.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de5f78 [0130.294] wcscpy (in: _Dest=0x3de5f78, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.294] wcscat (in: _Dest=0x3de5f78, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.294] wcscat (in: _Dest=0x3de5f78, _Source="Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0130.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0130.295] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8f289f60, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f289f60, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~4")) returned 1 [0130.295] wcscmp (_String1="Microsoft SQL Server Compact Edition", _String2=".") returned 1 [0130.295] wcscmp (_String1="Microsoft SQL Server Compact Edition", _String2="..") returned 1 [0130.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3015670 [0130.295] wcscpy (in: _Dest=0x3015670, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.295] wcscat (in: _Dest=0x3015670, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.295] wcscat (in: _Dest=0x3015670, _Source="Microsoft SQL Server Compact Edition" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition" [0130.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3015670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0130.297] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8f23dca0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f23dca0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MIA29A~1")) returned 1 [0130.297] wcscmp (_String1="Microsoft Sync Framework", _String2=".") returned 1 [0130.297] wcscmp (_String1="Microsoft Sync Framework", _String2="..") returned 1 [0130.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1328 [0130.297] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.297] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.297] wcscat (in: _Dest=0x2fe1328, _Source="Microsoft Sync Framework" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework" [0130.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0130.298] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9075dfe0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9075dfe0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1 [0130.298] wcscmp (_String1="Microsoft Synchronization Services", _String2=".") returned 1 [0130.298] wcscmp (_String1="Microsoft Synchronization Services", _String2="..") returned 1 [0130.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5080 [0130.298] wcscpy (in: _Dest=0x2ff5080, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.298] wcscat (in: _Dest=0x2ff5080, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.298] wcscat (in: _Dest=0x2ff5080, _Source="Microsoft Synchronization Services" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services" [0130.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0130.299] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x929e1ee0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x929e1ee0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1 [0130.299] wcscmp (_String1="Microsoft Visual Studio 8", _String2=".") returned 1 [0130.299] wcscmp (_String1="Microsoft Visual Studio 8", _String2="..") returned 1 [0130.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1d48 [0130.299] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.299] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.299] wcscat (in: _Dest=0x2fe1d48, _Source="Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0130.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0130.300] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90737e80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90737e80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0130.300] wcscmp (_String1="Microsoft.NET", _String2=".") returned 1 [0130.300] wcscmp (_String1="Microsoft.NET", _String2="..") returned 1 [0130.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e0d250 [0130.300] wcscpy (in: _Dest=0x3e0d250, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.300] wcscat (in: _Dest=0x3e0d250, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.300] wcscat (in: _Dest=0x3e0d250, _Source="Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0130.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0d250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0130.301] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7450cbf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x906ebbc0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x906ebbc0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0130.301] wcscmp (_String1="Mozilla Firefox", _String2=".") returned 1 [0130.301] wcscmp (_String1="Mozilla Firefox", _String2="..") returned 1 [0130.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6068 [0130.301] wcscpy (in: _Dest=0x3de6068, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.301] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.302] wcscat (in: _Dest=0x3de6068, _Source="Mozilla Firefox" | out: _Dest="C:\\Program Files\\Mozilla Firefox") returned="C:\\Program Files\\Mozilla Firefox" [0130.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 [0130.302] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a8ded0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x9043e300, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9043e300, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1 [0130.302] wcscmp (_String1="Mozilla Maintenance Service", _String2=".") returned 1 [0130.302] wcscmp (_String1="Mozilla Maintenance Service", _String2="..") returned 1 [0130.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3eccf98 [0130.302] wcscpy (in: _Dest=0x3eccf98, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.302] wcscat (in: _Dest=0x3eccf98, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.302] wcscat (in: _Dest=0x3eccf98, _Source="Mozilla Maintenance Service" | out: _Dest="C:\\Program Files\\Mozilla Maintenance Service") returned="C:\\Program Files\\Mozilla Maintenance Service" [0130.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccf98) returned 1 [0130.302] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x9075dfe0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9075dfe0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0130.302] wcscmp (_String1="MSBuild", _String2=".") returned 1 [0130.302] wcscmp (_String1="MSBuild", _String2="..") returned 1 [0130.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54b48 [0130.302] wcscpy (in: _Dest=0x3e54b48, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.302] wcscat (in: _Dest=0x3e54b48, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.302] wcscat (in: _Dest=0x3e54b48, _Source="MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0130.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e54b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0130.303] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x907aa2a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x907aa2a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0130.303] wcscmp (_String1="Reference Assemblies", _String2=".") returned 1 [0130.303] wcscmp (_String1="Reference Assemblies", _String2="..") returned 1 [0130.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0eae0 [0130.303] wcscpy (in: _Dest=0x3e0eae0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.303] wcscat (in: _Dest=0x3e0eae0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.304] wcscat (in: _Dest=0x3e0eae0, _Source="Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0130.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0eae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0130.305] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x48a8eee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8f263e00, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f263e00, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0130.305] wcscmp (_String1="Uninstall Information", _String2=".") returned 1 [0130.305] wcscmp (_String1="Uninstall Information", _String2="..") returned 1 [0130.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f5e0 [0130.305] wcscpy (in: _Dest=0x3e0f5e0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.305] wcscat (in: _Dest=0x3e0f5e0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.305] wcscat (in: _Dest=0x3e0f5e0, _Source="Uninstall Information" | out: _Dest="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information" [0130.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0130.306] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x9075dfe0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9075dfe0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0130.306] wcscmp (_String1="Windows Defender", _String2=".") returned 1 [0130.306] wcscmp (_String1="Windows Defender", _String2="..") returned 1 [0130.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6068 [0130.306] wcscpy (in: _Dest=0x3de6068, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.306] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.306] wcscat (in: _Dest=0x3de6068, _Source="Windows Defender" | out: _Dest="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender" [0130.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 [0130.307] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ab4e22, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x90784140, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90784140, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1 [0130.307] wcscmp (_String1="Windows Journal", _String2=".") returned 1 [0130.307] wcscmp (_String1="Windows Journal", _String2="..") returned 1 [0130.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6068 [0130.307] wcscpy (in: _Dest=0x3de6068, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.307] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.307] wcscat (in: _Dest=0x3de6068, _Source="Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0130.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0130.308] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92a2e1a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92a2e1a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0130.308] wcscmp (_String1="Windows Mail", _String2=".") returned 1 [0130.308] wcscmp (_String1="Windows Mail", _String2="..") returned 1 [0130.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3dfa978 [0130.308] wcscpy (in: _Dest=0x3dfa978, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.308] wcscat (in: _Dest=0x3dfa978, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.309] wcscat (in: _Dest=0x3dfa978, _Source="Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0130.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0130.310] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x906ebbc0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x906ebbc0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0130.310] wcscmp (_String1="Windows Media Player", _String2=".") returned 1 [0130.310] wcscmp (_String1="Windows Media Player", _String2="..") returned 1 [0130.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0ecf0 [0130.310] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.310] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.310] wcscat (in: _Dest=0x3e0ecf0, _Source="Windows Media Player" | out: _Dest="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player" [0130.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 [0130.310] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e254bc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90737e80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90737e80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0130.310] wcscmp (_String1="Windows NT", _String2=".") returned 1 [0130.310] wcscmp (_String1="Windows NT", _String2="..") returned 1 [0130.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e54ac8 [0130.310] wcscpy (in: _Dest=0x3e54ac8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.310] wcscat (in: _Dest=0x3e54ac8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.310] wcscat (in: _Dest=0x3e54ac8, _Source="Windows NT" | out: _Dest="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT" [0130.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54ac8) returned 1 [0130.310] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x904181a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x904181a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0130.310] wcscmp (_String1="Windows Photo Viewer", _String2=".") returned 1 [0130.310] wcscmp (_String1="Windows Photo Viewer", _String2="..") returned 1 [0130.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0ecf0 [0130.311] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.311] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.311] wcscat (in: _Dest=0x3e0ecf0, _Source="Windows Photo Viewer" | out: _Dest="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer" [0130.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 [0130.311] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90784140, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90784140, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0130.311] wcscmp (_String1="Windows Portable Devices", _String2=".") returned 1 [0130.311] wcscmp (_String1="Windows Portable Devices", _String2="..") returned 1 [0130.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe0c68 [0130.311] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.311] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.311] wcscat (in: _Dest=0x2fe0c68, _Source="Windows Portable Devices" | out: _Dest="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices" [0130.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 [0130.311] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x903a5d80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x903a5d80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0130.311] wcscmp (_String1="Windows Sidebar", _String2=".") returned 1 [0130.311] wcscmp (_String1="Windows Sidebar", _String2="..") returned 1 [0130.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6338 [0130.311] wcscpy (in: _Dest=0x3de6338, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0130.311] wcscat (in: _Dest=0x3de6338, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0130.311] wcscat (in: _Dest=0x3de6338, _Source="Windows Sidebar" | out: _Dest="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar" [0130.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6338) returned 1 [0130.311] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x903a5d80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x903a5d80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0 [0130.311] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0130.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0130.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41d8) returned 1 Thread: id = 116 os_tid = 0x740 [0130.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df41d8 [0130.315] wcscpy (in: _Dest=0x3df41d8, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.315] wcscat (in: _Dest=0x3df41d8, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.315] wcscat (in: _Dest=0x3df41d8, _Source="*" | out: _Dest="C:\\ProgramData\\*") returned="C:\\ProgramData\\*" [0130.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0130.315] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.315] wcscmp (_String1=".", _String2=".") returned 0 [0130.315] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.316] wcscmp (_String1="..", _String2=".") returned 1 [0130.316] wcscmp (_String1="..", _String2="..") returned 0 [0130.316] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0130.316] wcscmp (_String1="Adobe", _String2=".") returned 1 [0130.316] wcscmp (_String1="Adobe", _String2="..") returned 1 [0130.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df8210 [0130.316] wcscpy (in: _Dest=0x3df8210, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.316] wcscat (in: _Dest=0x3df8210, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.316] wcscat (in: _Dest=0x3df8210, _Source="Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0130.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df8210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0130.317] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0130.317] wcscmp (_String1="Application Data", _String2=".") returned 1 [0130.317] wcscmp (_String1="Application Data", _String2="..") returned 1 [0130.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dfa738 [0130.317] wcscpy (in: _Dest=0x3dfa738, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.318] wcscat (in: _Dest=0x3dfa738, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.318] wcscat (in: _Dest=0x3dfa738, _Source="Application Data" | out: _Dest="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0130.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0130.319] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0130.319] wcscmp (_String1="Desktop", _String2=".") returned 1 [0130.319] wcscmp (_String1="Desktop", _String2="..") returned 1 [0130.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df78a8 [0130.319] wcscpy (in: _Dest=0x3df78a8, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.319] wcscat (in: _Dest=0x3df78a8, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.319] wcscat (in: _Dest=0x3df78a8, _Source="Desktop" | out: _Dest="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0130.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df78a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0130.321] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0130.321] wcscmp (_String1="Documents", _String2=".") returned 1 [0130.321] wcscmp (_String1="Documents", _String2="..") returned 1 [0130.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54ac8 [0130.321] wcscpy (in: _Dest=0x3e54ac8, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.321] wcscat (in: _Dest=0x3e54ac8, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.321] wcscat (in: _Dest=0x3e54ac8, _Source="Documents" | out: _Dest="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0130.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e54ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0130.322] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0130.322] wcscmp (_String1="Favorites", _String2=".") returned 1 [0130.323] wcscmp (_String1="Favorites", _String2="..") returned 1 [0130.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54c88 [0130.323] wcscpy (in: _Dest=0x3e54c88, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.323] wcscat (in: _Dest=0x3e54c88, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.323] wcscat (in: _Dest=0x3e54c88, _Source="Favorites" | out: _Dest="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0130.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e54c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0130.324] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0130.324] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0130.324] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0130.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54a08 [0130.324] wcscpy (in: _Dest=0x3e54a08, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.324] wcscat (in: _Dest=0x3e54a08, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.324] wcscat (in: _Dest=0x3e54a08, _Source="Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e54a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0130.326] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0130.326] wcscmp (_String1="Microsoft Help", _String2=".") returned 1 [0130.326] wcscmp (_String1="Microsoft Help", _String2="..") returned 1 [0130.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3dfa1e0 [0130.326] wcscpy (in: _Dest=0x3dfa1e0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.326] wcscat (in: _Dest=0x3dfa1e0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.326] wcscat (in: _Dest=0x3dfa1e0, _Source="Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0130.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0130.327] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74b72710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x74b72710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x74b72710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0130.327] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0130.327] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0130.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df78e0 [0130.327] wcscpy (in: _Dest=0x3df78e0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.327] wcscat (in: _Dest=0x3df78e0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.327] wcscat (in: _Dest=0x3df78e0, _Source="Mozilla" | out: _Dest="C:\\ProgramData\\Mozilla") returned="C:\\ProgramData\\Mozilla" [0130.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78e0) returned 1 [0130.327] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0130.327] wcscmp (_String1="Oracle", _String2=".") returned 1 [0130.327] wcscmp (_String1="Oracle", _String2="..") returned 1 [0130.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df78e0 [0130.327] wcscpy (in: _Dest=0x3df78e0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.327] wcscat (in: _Dest=0x3df78e0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.327] wcscat (in: _Dest=0x3df78e0, _Source="Oracle" | out: _Dest="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle" [0130.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df78e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0130.329] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0130.329] wcscmp (_String1="Package Cache", _String2=".") returned 1 [0130.329] wcscmp (_String1="Package Cache", _String2="..") returned 1 [0130.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3dfa108 [0130.329] wcscpy (in: _Dest=0x3dfa108, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.329] wcscat (in: _Dest=0x3dfa108, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.329] wcscat (in: _Dest=0x3dfa108, _Source="Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0130.330] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0130.330] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0130.330] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0130.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e54cc8 [0130.330] wcscpy (in: _Dest=0x3e54cc8, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.330] wcscat (in: _Dest=0x3e54cc8, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.330] wcscat (in: _Dest=0x3e54cc8, _Source="Start Menu" | out: _Dest="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0130.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e54cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0130.331] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0130.331] wcscmp (_String1="Sun", _String2=".") returned 1 [0130.331] wcscmp (_String1="Sun", _String2="..") returned 1 [0130.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df35a8 [0130.331] wcscpy (in: _Dest=0x3df35a8, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.331] wcscat (in: _Dest=0x3df35a8, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.331] wcscat (in: _Dest=0x3df35a8, _Source="Sun" | out: _Dest="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0130.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df35a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0130.332] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0130.332] wcscmp (_String1="Templates", _String2=".") returned 1 [0130.332] wcscmp (_String1="Templates", _String2="..") returned 1 [0130.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54b88 [0130.332] wcscpy (in: _Dest=0x3e54b88, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0130.333] wcscat (in: _Dest=0x3e54b88, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0130.333] wcscat (in: _Dest=0x3e54b88, _Source="Templates" | out: _Dest="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0130.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e54b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0130.334] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0130.334] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0130.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41d8) returned 1 [0130.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 Thread: id = 117 os_tid = 0xc8 [0130.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4ba18 [0130.353] wcscpy (in: _Dest=0x3d4ba18, _Source="C:\\Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery" [0130.353] wcscat (in: _Dest=0x3d4ba18, _Source="\\" | out: _Dest="C:\\Recovery\\") returned="C:\\Recovery\\" [0130.353] wcscat (in: _Dest=0x3d4ba18, _Source="*" | out: _Dest="C:\\Recovery\\*") returned="C:\\Recovery\\*" [0130.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0130.353] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0130.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0130.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd10) returned 1 Thread: id = 118 os_tid = 0x90c [0130.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e583d8 [0130.362] wcscpy (in: _Dest=0x3e583d8, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0130.362] wcscat (in: _Dest=0x3e583d8, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0130.362] wcscat (in: _Dest=0x3e583d8, _Source="*" | out: _Dest="C:\\Users\\*") returned="C:\\Users\\*" [0130.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.362] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8dda350, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8dda350, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.363] wcscmp (_String1=".", _String2=".") returned 0 [0130.363] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8dda350, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8dda350, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.363] wcscmp (_String1="..", _String2=".") returned 1 [0130.363] wcscmp (_String1="..", _String2="..") returned 0 [0130.363] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1765f29d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1765f29d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1765f29d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0130.363] wcscmp (_String1="All Users", _String2=".") returned 1 [0130.363] wcscmp (_String1="All Users", _String2="..") returned 1 [0130.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df41d8 [0130.363] wcscpy (in: _Dest=0x3df41d8, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0130.363] wcscat (in: _Dest=0x3df41d8, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0130.364] wcscat (in: _Dest=0x3df41d8, _Source="All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0130.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df41d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0130.365] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x6bd02b0, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0130.365] wcscmp (_String1="Default", _String2=".") returned 1 [0130.366] wcscmp (_String1="Default", _String2="..") returned 1 [0130.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df3ed8 [0130.366] wcscpy (in: _Dest=0x3df3ed8, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0130.366] wcscat (in: _Dest=0x3df3ed8, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0130.366] wcscat (in: _Dest=0x3df3ed8, _Source="Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0130.369] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1765f29d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1765f29d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1765f29d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0130.369] wcscmp (_String1="Default User", _String2=".") returned 1 [0130.369] wcscmp (_String1="Default User", _String2="..") returned 1 [0130.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df7838 [0130.369] wcscpy (in: _Dest=0x3df7838, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0130.369] wcscat (in: _Dest=0x3df7838, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0130.369] wcscat (in: _Dest=0x3df7838, _Source="Default User" | out: _Dest="C:\\Users\\Default User") returned="C:\\Users\\Default User" [0130.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df7838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0130.370] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b61335c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b61335c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.370] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0130.370] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0130.370] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EEBsYm5", cAlternateFileName="")) returned 1 [0130.371] wcscmp (_String1="EEBsYm5", _String2=".") returned 1 [0130.371] wcscmp (_String1="EEBsYm5", _String2="..") returned 1 [0130.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df3f38 [0130.371] wcscpy (in: _Dest=0x3df3f38, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0130.371] wcscat (in: _Dest=0x3df3f38, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0130.371] wcscat (in: _Dest=0x3df3f38, _Source="EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0130.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df3f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0130.372] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0130.372] wcscmp (_String1="Public", _String2=".") returned 1 [0130.372] wcscmp (_String1="Public", _String2="..") returned 1 [0130.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5f8 [0130.372] wcscpy (in: _Dest=0x3d4c5f8, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0130.372] wcscat (in: _Dest=0x3d4c5f8, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0130.372] wcscat (in: _Dest=0x3d4c5f8, _Source="Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0130.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d4c5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0130.373] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0130.373] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e583d8) returned 1 [0130.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58418) returned 1 Thread: id = 119 os_tid = 0x91c [0130.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e20a98 [0130.391] wcscpy (in: _Dest=0x3e20a98, _Source="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000" [0130.391] wcscat (in: _Dest=0x3e20a98, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\" [0130.391] wcscat (in: _Dest=0x3e20a98, _Source="*" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\*") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\*" [0130.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.392] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.392] wcscmp (_String1=".", _String2=".") returned 0 [0130.392] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.392] wcscmp (_String1="..", _String2=".") returned 1 [0130.392] wcscmp (_String1="..", _String2="..") returned 0 [0130.392] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.392] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0130.392] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0130.392] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0130.392] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20a98) returned 1 [0130.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 Thread: id = 120 os_tid = 0x92c [0130.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54848 [0130.405] wcscpy (in: _Dest=0x3e54848, _Source="C:\\Program Files\\Adobe" | out: _Dest="C:\\Program Files\\Adobe") returned="C:\\Program Files\\Adobe" [0130.405] wcscat (in: _Dest=0x3e54848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\") returned="C:\\Program Files\\Adobe\\" [0130.405] wcscat (in: _Dest=0x3e54848, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\*") returned="C:\\Program Files\\Adobe\\*" [0130.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x90737e80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90737e80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a48 [0130.406] wcscmp (_String1=".", _String2=".") returned 0 [0130.406] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x90737e80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90737e80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.406] wcscmp (_String1="..", _String2=".") returned 1 [0130.406] wcscmp (_String1="..", _String2="..") returned 0 [0130.406] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105f7bd0, ftCreationTime.dwHighDateTime=0x1d57b79, ftLastAccessTime.dwLowDateTime=0x9e3c73a0, ftLastAccessTime.dwHighDateTime=0x1d5e766, ftLastWriteTime.dwLowDateTime=0x9e3c73a0, ftLastWriteTime.dwHighDateTime=0x1d5e766, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0130.406] wcscmp (_String1="accupos.exe", _String2=".") returned 1 [0130.406] wcscmp (_String1="accupos.exe", _String2="..") returned 1 [0130.406] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 1 [0130.406] wcscmp (_String1="Reader 10.0", _String2=".") returned 1 [0130.406] wcscmp (_String1="Reader 10.0", _String2="..") returned 1 [0130.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6338 [0130.406] wcscpy (in: _Dest=0x3de6338, _Source="C:\\Program Files\\Adobe" | out: _Dest="C:\\Program Files\\Adobe") returned="C:\\Program Files\\Adobe" [0130.406] wcscat (in: _Dest=0x3de6338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\") returned="C:\\Program Files\\Adobe\\" [0130.406] wcscat (in: _Dest=0x3de6338, _Source="Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0130.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0130.407] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78be70, ftCreationTime.dwHighDateTime=0x1d5a95d, ftLastAccessTime.dwLowDateTime=0x686f5af0, ftLastAccessTime.dwHighDateTime=0x1d5cdc4, ftLastWriteTime.dwLowDateTime=0x686f5af0, ftLastWriteTime.dwHighDateTime=0x1d5cdc4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="swaziland_echo.exe", cAlternateFileName="SWAZIL~1.EXE")) returned 1 [0130.407] wcscmp (_String1="swaziland_echo.exe", _String2=".") returned 1 [0130.407] wcscmp (_String1="swaziland_echo.exe", _String2="..") returned 1 [0130.407] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78be70, ftCreationTime.dwHighDateTime=0x1d5a95d, ftLastAccessTime.dwLowDateTime=0x686f5af0, ftLastAccessTime.dwHighDateTime=0x1d5cdc4, ftLastWriteTime.dwLowDateTime=0x686f5af0, ftLastWriteTime.dwHighDateTime=0x1d5cdc4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="swaziland_echo.exe", cAlternateFileName="SWAZIL~1.EXE")) returned 0 [0130.407] FindClose (in: hFindFile=0x3e54a48 | out: hFindFile=0x3e54a48) returned 1 [0130.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 [0130.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 Thread: id = 121 os_tid = 0x940 [0130.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dfa078 [0130.408] wcscpy (in: _Dest=0x3dfa078, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0130.408] wcscat (in: _Dest=0x3dfa078, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0130.408] wcscat (in: _Dest=0x3dfa078, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\*") returned="C:\\Program Files\\Common Files\\*" [0130.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.409] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x901b6ba0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x901b6ba0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.409] wcscmp (_String1=".", _String2=".") returned 0 [0130.409] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x901b6ba0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x901b6ba0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.409] wcscmp (_String1="..", _String2=".") returned 1 [0130.409] wcscmp (_String1="..", _String2="..") returned 0 [0130.409] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0130.409] wcscmp (_String1="Adobe", _String2=".") returned 1 [0130.409] wcscmp (_String1="Adobe", _String2="..") returned 1 [0130.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de5e88 [0130.409] wcscpy (in: _Dest=0x3de5e88, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0130.409] wcscat (in: _Dest=0x3de5e88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0130.409] wcscat (in: _Dest=0x3de5e88, _Source="Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0130.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0130.410] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc012d710, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x9ae3b840, ftLastAccessTime.dwHighDateTime=0x1d5a566, ftLastWriteTime.dwLowDateTime=0x9ae3b840, ftLastWriteTime.dwHighDateTime=0x1d5a566, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="alftp.exe", cAlternateFileName="")) returned 1 [0130.410] wcscmp (_String1="alftp.exe", _String2=".") returned 1 [0130.410] wcscmp (_String1="alftp.exe", _String2="..") returned 1 [0130.410] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8086a130, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0130.410] wcscmp (_String1="DESIGNER", _String2=".") returned 1 [0130.410] wcscmp (_String1="DESIGNER", _String2="..") returned 1 [0130.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0ecf0 [0130.410] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0130.410] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0130.410] wcscat (in: _Dest=0x3e0ecf0, _Source="DESIGNER" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER" [0130.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0130.411] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x701bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x701bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0130.411] wcscmp (_String1="Java", _String2=".") returned 1 [0130.411] wcscmp (_String1="Java", _String2="..") returned 1 [0130.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6478 [0130.412] wcscpy (in: _Dest=0x3de6478, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0130.412] wcscat (in: _Dest=0x3de6478, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0130.412] wcscat (in: _Dest=0x3de6478, _Source="Java" | out: _Dest="C:\\Program Files\\Common Files\\Java") returned="C:\\Program Files\\Common Files\\Java" [0130.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0130.412] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbd988d10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd988d10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0130.412] wcscmp (_String1="microsoft shared", _String2=".") returned 1 [0130.413] wcscmp (_String1="microsoft shared", _String2="..") returned 1 [0130.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eccf98 [0130.413] wcscpy (in: _Dest=0x3eccf98, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0130.413] wcscat (in: _Dest=0x3eccf98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0130.413] wcscat (in: _Dest=0x3eccf98, _Source="microsoft shared" | out: _Dest="C:\\Program Files\\Common Files\\microsoft shared") returned="C:\\Program Files\\Common Files\\microsoft shared" [0130.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccf98) returned 1 [0130.413] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cce865, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cce865, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cce865, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0130.413] wcscmp (_String1="Services", _String2=".") returned 1 [0130.413] wcscmp (_String1="Services", _String2="..") returned 1 [0130.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0eea8 [0130.413] wcscpy (in: _Dest=0x3e0eea8, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0130.413] wcscat (in: _Dest=0x3e0eea8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0130.413] wcscat (in: _Dest=0x3e0eea8, _Source="Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0130.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0eea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0130.414] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cf49c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cf49c4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0130.414] wcscmp (_String1="SpeechEngines", _String2=".") returned 1 [0130.414] wcscmp (_String1="SpeechEngines", _String2="..") returned 1 [0130.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0c68 [0130.414] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0130.414] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0130.414] wcscat (in: _Dest=0x2fe0c68, _Source="SpeechEngines" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0130.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0130.415] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48c8dab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0130.415] wcscmp (_String1="System", _String2=".") returned 1 [0130.415] wcscmp (_String1="System", _String2="..") returned 1 [0130.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0efb0 [0130.416] wcscpy (in: _Dest=0x3e0efb0, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0130.416] wcscat (in: _Dest=0x3e0efb0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0130.416] wcscat (in: _Dest=0x3e0efb0, _Source="System" | out: _Dest="C:\\Program Files\\Common Files\\System") returned="C:\\Program Files\\Common Files\\System" [0130.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0efb0) returned 1 [0130.416] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48c8dab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0130.416] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa078) returned 1 [0130.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d718) returned 1 Thread: id = 122 os_tid = 0x950 [0130.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e54848 [0130.423] wcscpy (in: _Dest=0x3e54848, _Source="C:\\Program Files\\Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0130.423] wcscat (in: _Dest=0x3e54848, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\") returned="C:\\Program Files\\Google\\" [0130.423] wcscat (in: _Dest=0x3e54848, _Source="*" | out: _Dest="C:\\Program Files\\Google\\*") returned="C:\\Program Files\\Google\\*" [0130.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffde9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x9062d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9062d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a48 [0130.424] wcscmp (_String1=".", _String2=".") returned 0 [0130.424] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffde9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x9062d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9062d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.424] wcscmp (_String1="..", _String2=".") returned 1 [0130.424] wcscmp (_String1="..", _String2="..") returned 0 [0130.424] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde8209d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0130.424] wcscmp (_String1="Chrome", _String2=".") returned 1 [0130.424] wcscmp (_String1="Chrome", _String2="..") returned 1 [0130.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3dfa078 [0130.424] wcscpy (in: _Dest=0x3dfa078, _Source="C:\\Program Files\\Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0130.424] wcscat (in: _Dest=0x3dfa078, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\") returned="C:\\Program Files\\Google\\" [0130.424] wcscat (in: _Dest=0x3dfa078, _Source="Chrome" | out: _Dest="C:\\Program Files\\Google\\Chrome") returned="C:\\Program Files\\Google\\Chrome" [0130.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0130.425] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffe10c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xcffe10c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcffe10c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0130.425] wcscmp (_String1="CrashReports", _String2=".") returned 1 [0130.425] wcscmp (_String1="CrashReports", _String2="..") returned 1 [0130.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0efb0 [0130.426] wcscpy (in: _Dest=0x3e0efb0, _Source="C:\\Program Files\\Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0130.426] wcscat (in: _Dest=0x3e0efb0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\") returned="C:\\Program Files\\Google\\" [0130.426] wcscat (in: _Dest=0x3e0efb0, _Source="CrashReports" | out: _Dest="C:\\Program Files\\Google\\CrashReports") returned="C:\\Program Files\\Google\\CrashReports" [0130.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0efb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0130.427] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1801f0d0, ftCreationTime.dwHighDateTime=0x1d5aebd, ftLastAccessTime.dwLowDateTime=0x1b30cee0, ftLastAccessTime.dwHighDateTime=0x1d596dd, ftLastWriteTime.dwLowDateTime=0x1b30cee0, ftLastWriteTime.dwHighDateTime=0x1d596dd, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="double appeared.exe", cAlternateFileName="DOUBLE~1.EXE")) returned 1 [0130.427] wcscmp (_String1="double appeared.exe", _String2=".") returned 1 [0130.427] wcscmp (_String1="double appeared.exe", _String2="..") returned 1 [0130.427] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397254a0, ftCreationTime.dwHighDateTime=0x1d5b91a, ftLastAccessTime.dwLowDateTime=0xfe17a220, ftLastAccessTime.dwHighDateTime=0x1d562fc, ftLastWriteTime.dwLowDateTime=0xfe17a220, ftLastWriteTime.dwHighDateTime=0x1d562fc, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 1 [0130.427] wcscmp (_String1="thunderbird.exe", _String2=".") returned 1 [0130.427] wcscmp (_String1="thunderbird.exe", _String2="..") returned 1 [0130.427] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397254a0, ftCreationTime.dwHighDateTime=0x1d5b91a, ftLastAccessTime.dwLowDateTime=0xfe17a220, ftLastAccessTime.dwHighDateTime=0x1d562fc, ftLastWriteTime.dwLowDateTime=0xfe17a220, ftLastWriteTime.dwHighDateTime=0x1d562fc, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 0 [0130.427] FindClose (in: hFindFile=0x3e54a48 | out: hFindFile=0x3e54a48) returned 1 [0130.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 [0130.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7ad8) returned 1 Thread: id = 123 os_tid = 0x7b4 [0130.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df7ad8 [0130.429] wcscpy (in: _Dest=0x3df7ad8, _Source="C:\\Program Files\\Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java" [0130.429] wcscat (in: _Dest=0x3df7ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\") returned="C:\\Program Files\\Java\\" [0130.429] wcscat (in: _Dest=0x3df7ad8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\*") returned="C:\\Program Files\\Java\\*" [0130.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x929e1ee0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x929e1ee0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.429] wcscmp (_String1=".", _String2=".") returned 0 [0130.429] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x929e1ee0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x929e1ee0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.429] wcscmp (_String1="..", _String2=".") returned 1 [0130.429] wcscmp (_String1="..", _String2="..") returned 0 [0130.429] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4f6fa20, ftCreationTime.dwHighDateTime=0x1d5e16c, ftLastAccessTime.dwLowDateTime=0xd64ec610, ftLastAccessTime.dwHighDateTime=0x1d5b685, ftLastWriteTime.dwLowDateTime=0xd64ec610, ftLastWriteTime.dwHighDateTime=0x1d5b685, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0130.429] wcscmp (_String1="coreftp.exe", _String2=".") returned 1 [0130.429] wcscmp (_String1="coreftp.exe", _String2="..") returned 1 [0130.430] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bd658d0, ftCreationTime.dwHighDateTime=0x1d5dd91, ftLastAccessTime.dwLowDateTime=0xc05c5210, ftLastAccessTime.dwHighDateTime=0x1d5c665, ftLastWriteTime.dwLowDateTime=0xc05c5210, ftLastWriteTime.dwHighDateTime=0x1d5c665, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1 [0130.430] wcscmp (_String1="flashfxp.exe", _String2=".") returned 1 [0130.430] wcscmp (_String1="flashfxp.exe", _String2="..") returned 1 [0130.430] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16a79f80, ftCreationTime.dwHighDateTime=0x1d58511, ftLastAccessTime.dwLowDateTime=0x9a285c00, ftLastAccessTime.dwHighDateTime=0x1d5a18b, ftLastWriteTime.dwLowDateTime=0x9a285c00, ftLastWriteTime.dwHighDateTime=0x1d5a18b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hang-approximate.exe", cAlternateFileName="HANG-A~1.EXE")) returned 1 [0130.430] wcscmp (_String1="hang-approximate.exe", _String2=".") returned 1 [0130.430] wcscmp (_String1="hang-approximate.exe", _String2="..") returned 1 [0130.430] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1 [0130.430] wcscmp (_String1="jre7", _String2=".") returned 1 [0130.430] wcscmp (_String1="jre7", _String2="..") returned 1 [0130.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54a48 [0130.430] wcscpy (in: _Dest=0x3e54a48, _Source="C:\\Program Files\\Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java" [0130.430] wcscat (in: _Dest=0x3e54a48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\") returned="C:\\Program Files\\Java\\" [0130.430] wcscat (in: _Dest=0x3e54a48, _Source="jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0130.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e54a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0130.432] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28c06d0, ftCreationTime.dwHighDateTime=0x1d58fed, ftLastAccessTime.dwLowDateTime=0xb325f30, ftLastAccessTime.dwHighDateTime=0x1d5953a, ftLastWriteTime.dwLowDateTime=0xb325f30, ftLastWriteTime.dwHighDateTime=0x1d5953a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0130.432] wcscmp (_String1="utg2.exe", _String2=".") returned 1 [0130.432] wcscmp (_String1="utg2.exe", _String2="..") returned 1 [0130.432] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf440b510, ftCreationTime.dwHighDateTime=0x1d5a3e4, ftLastAccessTime.dwLowDateTime=0xd66b9080, ftLastAccessTime.dwHighDateTime=0x1d5c2f4, ftLastWriteTime.dwLowDateTime=0xd66b9080, ftLastWriteTime.dwHighDateTime=0x1d5c2f4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="vacations entire.exe", cAlternateFileName="VACATI~1.EXE")) returned 1 [0130.432] wcscmp (_String1="vacations entire.exe", _String2=".") returned 1 [0130.432] wcscmp (_String1="vacations entire.exe", _String2="..") returned 1 [0130.432] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf440b510, ftCreationTime.dwHighDateTime=0x1d5a3e4, ftLastAccessTime.dwLowDateTime=0xd66b9080, ftLastAccessTime.dwHighDateTime=0x1d5c2f4, ftLastWriteTime.dwLowDateTime=0xd66b9080, ftLastWriteTime.dwHighDateTime=0x1d5c2f4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="vacations entire.exe", cAlternateFileName="VACATI~1.EXE")) returned 0 [0130.432] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7ad8) returned 1 [0130.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 Thread: id = 124 os_tid = 0x960 [0130.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eccf98 [0130.433] wcscpy (in: _Dest=0x3eccf98, _Source="C:\\Program Files\\Microsoft Analysis Services" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services" [0130.434] wcscat (in: _Dest=0x3eccf98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\") returned="C:\\Program Files\\Microsoft Analysis Services\\" [0130.434] wcscat (in: _Dest=0x3eccf98, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\*" [0130.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904181a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x904181a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.434] wcscmp (_String1=".", _String2=".") returned 0 [0130.434] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904181a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x904181a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.434] wcscmp (_String1="..", _String2=".") returned 1 [0130.434] wcscmp (_String1="..", _String2="..") returned 0 [0130.434] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3d8540, ftCreationTime.dwHighDateTime=0x1d5ca11, ftLastAccessTime.dwLowDateTime=0x9a600520, ftLastAccessTime.dwHighDateTime=0x1d585b0, ftLastWriteTime.dwLowDateTime=0x9a600520, ftLastWriteTime.dwHighDateTime=0x1d585b0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="anne_quad.exe", cAlternateFileName="ANNE_Q~1.EXE")) returned 1 [0130.434] wcscmp (_String1="anne_quad.exe", _String2=".") returned 1 [0130.434] wcscmp (_String1="anne_quad.exe", _String2="..") returned 1 [0130.434] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0130.435] wcscmp (_String1="AS OLEDB", _String2=".") returned 1 [0130.435] wcscmp (_String1="AS OLEDB", _String2="..") returned 1 [0130.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d51200 [0130.435] wcscpy (in: _Dest=0x3d51200, _Source="C:\\Program Files\\Microsoft Analysis Services" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services" [0130.435] wcscat (in: _Dest=0x3d51200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\") returned="C:\\Program Files\\Microsoft Analysis Services\\" [0130.435] wcscat (in: _Dest=0x3d51200, _Source="AS OLEDB" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" [0130.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d51200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0130.436] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cd062e0, ftCreationTime.dwHighDateTime=0x1d5d8f4, ftLastAccessTime.dwLowDateTime=0xcde4dce0, ftLastAccessTime.dwHighDateTime=0x1d5ae37, ftLastWriteTime.dwLowDateTime=0xcde4dce0, ftLastWriteTime.dwHighDateTime=0x1d5ae37, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="coloradoremains.exe", cAlternateFileName="COLORA~1.EXE")) returned 1 [0130.436] wcscmp (_String1="coloradoremains.exe", _String2=".") returned 1 [0130.436] wcscmp (_String1="coloradoremains.exe", _String2="..") returned 1 [0130.436] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80767ab0, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0x81fe1680, ftLastAccessTime.dwHighDateTime=0x1d59158, ftLastWriteTime.dwLowDateTime=0x81fe1680, ftLastWriteTime.dwHighDateTime=0x1d59158, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0130.436] wcscmp (_String1="notepad.exe", _String2=".") returned 1 [0130.436] wcscmp (_String1="notepad.exe", _String2="..") returned 1 [0130.436] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e3ed0, ftCreationTime.dwHighDateTime=0x1d5dcf7, ftLastAccessTime.dwLowDateTime=0x28d50b00, ftLastAccessTime.dwHighDateTime=0x1d56a56, ftLastWriteTime.dwLowDateTime=0x28d50b00, ftLastWriteTime.dwHighDateTime=0x1d56a56, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tortureburnportraits.exe", cAlternateFileName="TORTUR~1.EXE")) returned 1 [0130.436] wcscmp (_String1="tortureburnportraits.exe", _String2=".") returned 1 [0130.436] wcscmp (_String1="tortureburnportraits.exe", _String2="..") returned 1 [0130.436] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e3ed0, ftCreationTime.dwHighDateTime=0x1d5dcf7, ftLastAccessTime.dwLowDateTime=0x28d50b00, ftLastAccessTime.dwHighDateTime=0x1d56a56, ftLastWriteTime.dwLowDateTime=0x28d50b00, ftLastWriteTime.dwHighDateTime=0x1d56a56, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tortureburnportraits.exe", cAlternateFileName="TORTUR~1.EXE")) returned 0 [0130.436] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccf98) returned 1 [0130.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd068) returned 1 Thread: id = 125 os_tid = 0x970 [0130.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de62e8 [0130.438] wcscpy (in: _Dest=0x3de62e8, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0130.438] wcscat (in: _Dest=0x3de62e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0130.438] wcscat (in: _Dest=0x3de62e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\*") returned="C:\\Program Files\\Microsoft Office\\*" [0130.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.438] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92a2e1a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92a2e1a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.438] wcscmp (_String1=".", _String2=".") returned 0 [0130.438] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92a2e1a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92a2e1a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.438] wcscmp (_String1="..", _String2=".") returned 1 [0130.439] wcscmp (_String1="..", _String2="..") returned 0 [0130.439] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb389ca10, ftCreationTime.dwHighDateTime=0x1d59292, ftLastAccessTime.dwLowDateTime=0x2cf00ba0, ftLastAccessTime.dwHighDateTime=0x1d583eb, ftLastWriteTime.dwLowDateTime=0x2cf00ba0, ftLastWriteTime.dwHighDateTime=0x1d583eb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrisborder.exe", cAlternateFileName="CHRISB~1.EXE")) returned 1 [0130.439] wcscmp (_String1="chrisborder.exe", _String2=".") returned 1 [0130.439] wcscmp (_String1="chrisborder.exe", _String2="..") returned 1 [0130.439] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0130.439] wcscmp (_String1="CLIPART", _String2=".") returned 1 [0130.439] wcscmp (_String1="CLIPART", _String2="..") returned 1 [0130.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1508 [0130.439] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0130.439] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0130.439] wcscat (in: _Dest=0x2fe1508, _Source="CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0130.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0130.440] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="DOCUME~1")) returned 1 [0130.440] wcscmp (_String1="Document Themes 14", _String2=".") returned 1 [0130.440] wcscmp (_String1="Document Themes 14", _String2="..") returned 1 [0130.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d50e40 [0130.440] wcscpy (in: _Dest=0x3d50e40, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0130.440] wcscat (in: _Dest=0x3d50e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0130.441] wcscat (in: _Dest=0x3d50e40, _Source="Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0130.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d50e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04 [0130.442] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa29f20, ftCreationTime.dwHighDateTime=0x1d5d0df, ftLastAccessTime.dwLowDateTime=0x8335cf90, ftLastAccessTime.dwHighDateTime=0x1d5b8de, ftLastWriteTime.dwLowDateTime=0x8335cf90, ftLastWriteTime.dwHighDateTime=0x1d5b8de, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="FOXMAI~1.EXE")) returned 1 [0130.442] wcscmp (_String1="foxmailincmail.exe", _String2=".") returned 1 [0130.442] wcscmp (_String1="foxmailincmail.exe", _String2="..") returned 1 [0130.442] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc258a820, ftCreationTime.dwHighDateTime=0x1d5dd2b, ftLastAccessTime.dwLowDateTime=0x934b27d0, ftLastAccessTime.dwHighDateTime=0x1d5ae3a, ftLastWriteTime.dwLowDateTime=0x934b27d0, ftLastWriteTime.dwHighDateTime=0x1d5ae3a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hopefullycontributing.exe", cAlternateFileName="HOPEFU~1.EXE")) returned 1 [0130.442] wcscmp (_String1="hopefullycontributing.exe", _String2=".") returned 1 [0130.442] wcscmp (_String1="hopefullycontributing.exe", _String2="..") returned 1 [0130.442] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0130.442] wcscmp (_String1="MEDIA", _String2=".") returned 1 [0130.442] wcscmp (_String1="MEDIA", _String2="..") returned 1 [0130.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0f060 [0130.442] wcscpy (in: _Dest=0x3e0f060, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0130.442] wcscat (in: _Dest=0x3e0f060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0130.442] wcscat (in: _Dest=0x3e0f060, _Source="MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0130.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0130.443] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe942c610, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0130.443] wcscmp (_String1="Office14", _String2=".") returned 1 [0130.444] wcscmp (_String1="Office14", _String2="..") returned 1 [0130.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe5708 [0130.444] wcscpy (in: _Dest=0x2fe5708, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0130.444] wcscat (in: _Dest=0x2fe5708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0130.444] wcscat (in: _Dest=0x2fe5708, _Source="Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0130.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0130.451] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7e6030, ftCreationTime.dwHighDateTime=0x1d572eb, ftLastAccessTime.dwLowDateTime=0xa3815130, ftLastAccessTime.dwHighDateTime=0x1d5d0ca, ftLastWriteTime.dwLowDateTime=0xa3815130, ftLastWriteTime.dwHighDateTime=0x1d5d0ca, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1 [0130.451] wcscmp (_String1="omnipos.exe", _String2=".") returned 1 [0130.451] wcscmp (_String1="omnipos.exe", _String2="..") returned 1 [0130.451] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48bf5530, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0130.451] wcscmp (_String1="Stationery", _String2=".") returned 1 [0130.451] wcscmp (_String1="Stationery", _String2="..") returned 1 [0130.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd068 [0130.451] wcscpy (in: _Dest=0x3ecd068, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0130.451] wcscat (in: _Dest=0x3ecd068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0130.451] wcscat (in: _Dest=0x3ecd068, _Source="Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery" [0130.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0130.452] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0130.452] wcscmp (_String1="Templates", _String2=".") returned 1 [0130.452] wcscmp (_String1="Templates", _String2="..") returned 1 [0130.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6608 [0130.452] wcscpy (in: _Dest=0x2fe6608, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0130.452] wcscat (in: _Dest=0x2fe6608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0130.453] wcscat (in: _Dest=0x2fe6608, _Source="Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0130.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0130.454] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x338ca030, ftCreationTime.dwHighDateTime=0x1d5d248, ftLastAccessTime.dwLowDateTime=0x6f058350, ftLastAccessTime.dwHighDateTime=0x1d5b2d8, ftLastWriteTime.dwLowDateTime=0x6f058350, ftLastWriteTime.dwHighDateTime=0x1d5b2d8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0130.454] wcscmp (_String1="winscp.exe", _String2=".") returned 1 [0130.454] wcscmp (_String1="winscp.exe", _String2="..") returned 1 [0130.454] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x338ca030, ftCreationTime.dwHighDateTime=0x1d5d248, ftLastAccessTime.dwLowDateTime=0x6f058350, ftLastAccessTime.dwHighDateTime=0x1d5b2d8, ftLastWriteTime.dwLowDateTime=0x6f058350, ftLastWriteTime.dwHighDateTime=0x1d5b2d8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0130.454] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de62e8) returned 1 [0130.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5f78) returned 1 Thread: id = 126 os_tid = 0x980 [0130.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50be8 [0130.458] wcscpy (in: _Dest=0x3d50be8, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition" [0130.458] wcscat (in: _Dest=0x3d50be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\" [0130.458] wcscat (in: _Dest=0x3d50be8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*" [0130.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.458] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8f289f60, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f289f60, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.459] wcscmp (_String1=".", _String2=".") returned 0 [0130.459] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8f289f60, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f289f60, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.459] wcscmp (_String1="..", _String2=".") returned 1 [0130.459] wcscmp (_String1="..", _String2="..") returned 0 [0130.459] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4cb750, ftCreationTime.dwHighDateTime=0x1d592c0, ftLastAccessTime.dwLowDateTime=0x76b02690, ftLastAccessTime.dwHighDateTime=0x1d566e4, ftLastWriteTime.dwLowDateTime=0x76b02690, ftLastWriteTime.dwHighDateTime=0x1d566e4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="suggestion spears introduce.exe", cAlternateFileName="SUGGES~1.EXE")) returned 1 [0130.459] wcscmp (_String1="suggestion spears introduce.exe", _String2=".") returned 1 [0130.459] wcscmp (_String1="suggestion spears introduce.exe", _String2="..") returned 1 [0130.459] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0130.459] wcscmp (_String1="v3.5", _String2=".") returned 1 [0130.459] wcscmp (_String1="v3.5", _String2="..") returned 1 [0130.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5508 [0130.459] wcscpy (in: _Dest=0x3dc5508, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition" [0130.459] wcscat (in: _Dest=0x3dc5508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\" [0130.459] wcscat (in: _Dest=0x3dc5508, _Source="v3.5" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" [0130.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0130.460] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0130.460] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50be8) returned 1 [0130.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015670) returned 1 Thread: id = 127 os_tid = 0x990 [0130.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe4a48 [0130.462] wcscpy (in: _Dest=0x2fe4a48, _Source="C:\\Program Files\\Microsoft Sync Framework" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework" [0130.462] wcscat (in: _Dest=0x2fe4a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\") returned="C:\\Program Files\\Microsoft Sync Framework\\" [0130.462] wcscat (in: _Dest=0x2fe4a48, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\*" [0130.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.462] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8f23dca0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f23dca0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.463] wcscmp (_String1=".", _String2=".") returned 0 [0130.463] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8f23dca0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f23dca0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.463] wcscmp (_String1="..", _String2=".") returned 1 [0130.463] wcscmp (_String1="..", _String2="..") returned 0 [0130.463] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0130.463] wcscmp (_String1="v1.0", _String2=".") returned 1 [0130.463] wcscmp (_String1="v1.0", _String2="..") returned 1 [0130.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eccf98 [0130.463] wcscpy (in: _Dest=0x3eccf98, _Source="C:\\Program Files\\Microsoft Sync Framework" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework" [0130.463] wcscat (in: _Dest=0x3eccf98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\") returned="C:\\Program Files\\Microsoft Sync Framework\\" [0130.463] wcscat (in: _Dest=0x3eccf98, _Source="v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0130.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eccf98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0 [0130.465] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c55a0, ftCreationTime.dwHighDateTime=0x1d5706c, ftLastAccessTime.dwLowDateTime=0x89344e70, ftLastAccessTime.dwHighDateTime=0x1d56f24, ftLastWriteTime.dwLowDateTime=0x89344e70, ftLastWriteTime.dwHighDateTime=0x1d56f24, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="woodsvcrmomentum.exe", cAlternateFileName="WOODSV~1.EXE")) returned 1 [0130.465] wcscmp (_String1="woodsvcrmomentum.exe", _String2=".") returned 1 [0130.465] wcscmp (_String1="woodsvcrmomentum.exe", _String2="..") returned 1 [0130.465] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c55a0, ftCreationTime.dwHighDateTime=0x1d5706c, ftLastAccessTime.dwLowDateTime=0x89344e70, ftLastAccessTime.dwHighDateTime=0x1d56f24, ftLastWriteTime.dwLowDateTime=0x89344e70, ftLastWriteTime.dwHighDateTime=0x1d56f24, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="woodsvcrmomentum.exe", cAlternateFileName="WOODSV~1.EXE")) returned 0 [0130.465] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4a48) returned 1 [0130.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 128 os_tid = 0x9a0 [0130.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3015670 [0130.466] wcscpy (in: _Dest=0x3015670, _Source="C:\\Program Files\\Microsoft Synchronization Services" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services" [0130.466] wcscat (in: _Dest=0x3015670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\" [0130.467] wcscat (in: _Dest=0x3015670, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\*") returned="C:\\Program Files\\Microsoft Synchronization Services\\*" [0130.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9075dfe0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9075dfe0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.467] wcscmp (_String1=".", _String2=".") returned 0 [0130.467] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9075dfe0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9075dfe0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.467] wcscmp (_String1="..", _String2=".") returned 1 [0130.467] wcscmp (_String1="..", _String2="..") returned 0 [0130.467] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c947b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO.NET", cAlternateFileName="")) returned 1 [0130.467] wcscmp (_String1="ADO.NET", _String2=".") returned 1 [0130.467] wcscmp (_String1="ADO.NET", _String2="..") returned 1 [0130.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5108 [0130.467] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Microsoft Synchronization Services" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services" [0130.467] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\" [0130.468] wcscat (in: _Dest=0x3dc5108, _Source="ADO.NET" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" [0130.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0130.469] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b80800, ftCreationTime.dwHighDateTime=0x1d5d774, ftLastAccessTime.dwLowDateTime=0x2c32e710, ftLastAccessTime.dwHighDateTime=0x1d5d6f6, ftLastWriteTime.dwLowDateTime=0x2c32e710, ftLastWriteTime.dwHighDateTime=0x1d5d6f6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="CCV_SE~1.EXE")) returned 1 [0130.469] wcscmp (_String1="ccv_server.exe", _String2=".") returned 1 [0130.469] wcscmp (_String1="ccv_server.exe", _String2="..") returned 1 [0130.469] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59f81e0, ftCreationTime.dwHighDateTime=0x1d5a284, ftLastAccessTime.dwLowDateTime=0xb547d600, ftLastAccessTime.dwHighDateTime=0x1d5aee7, ftLastWriteTime.dwLowDateTime=0xb547d600, ftLastWriteTime.dwHighDateTime=0x1d5aee7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0130.469] wcscmp (_String1="whatsapp.exe", _String2=".") returned 1 [0130.469] wcscmp (_String1="whatsapp.exe", _String2="..") returned 1 [0130.469] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59f81e0, ftCreationTime.dwHighDateTime=0x1d5a284, ftLastAccessTime.dwLowDateTime=0xb547d600, ftLastAccessTime.dwHighDateTime=0x1d5aee7, ftLastWriteTime.dwLowDateTime=0xb547d600, ftLastWriteTime.dwHighDateTime=0x1d5aee7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 0 [0130.469] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015670) returned 1 [0130.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5080) returned 1 Thread: id = 129 os_tid = 0x9b0 [0130.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3eccd28 [0130.471] wcscpy (in: _Dest=0x3eccd28, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0130.472] wcscat (in: _Dest=0x3eccd28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0130.472] wcscat (in: _Dest=0x3eccd28, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\*" [0130.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x929e1ee0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x929e1ee0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.472] wcscmp (_String1=".", _String2=".") returned 0 [0130.472] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x929e1ee0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x929e1ee0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.472] wcscmp (_String1="..", _String2=".") returned 1 [0130.472] wcscmp (_String1="..", _String2="..") returned 0 [0130.472] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53bf9a70, ftCreationTime.dwHighDateTime=0x1d5cddd, ftLastAccessTime.dwLowDateTime=0xa3767b00, ftLastAccessTime.dwHighDateTime=0x1d5c8e3, ftLastWriteTime.dwLowDateTime=0xa3767b00, ftLastWriteTime.dwHighDateTime=0x1d5c8e3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1 [0130.472] wcscmp (_String1="3dftp.exe", _String2=".") returned 1 [0130.472] wcscmp (_String1="3dftp.exe", _String2="..") returned 1 [0130.473] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb89f00, ftCreationTime.dwHighDateTime=0x1d562e7, ftLastAccessTime.dwLowDateTime=0xc5e45440, ftLastAccessTime.dwHighDateTime=0x1d595cc, ftLastWriteTime.dwLowDateTime=0xc5e45440, ftLastWriteTime.dwHighDateTime=0x1d595cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="china_syndicate.exe", cAlternateFileName="CHINA_~1.EXE")) returned 1 [0130.473] wcscmp (_String1="china_syndicate.exe", _String2=".") returned 1 [0130.473] wcscmp (_String1="china_syndicate.exe", _String2="..") returned 1 [0130.473] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common7", cAlternateFileName="")) returned 1 [0130.473] wcscmp (_String1="Common7", _String2=".") returned 1 [0130.473] wcscmp (_String1="Common7", _String2="..") returned 1 [0130.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x2ff5080 [0130.473] wcscpy (in: _Dest=0x2ff5080, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0130.473] wcscat (in: _Dest=0x2ff5080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0130.473] wcscat (in: _Dest=0x2ff5080, _Source="Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0130.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0130.474] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c15750, ftCreationTime.dwHighDateTime=0x1d57ace, ftLastAccessTime.dwLowDateTime=0x369c6b90, ftLastAccessTime.dwHighDateTime=0x1d5c2ce, ftLastWriteTime.dwLowDateTime=0x369c6b90, ftLastWriteTime.dwHighDateTime=0x1d5c2ce, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="inquiry-electricity-organic.exe", cAlternateFileName="INQUIR~1.EXE")) returned 1 [0130.474] wcscmp (_String1="inquiry-electricity-organic.exe", _String2=".") returned 1 [0130.474] wcscmp (_String1="inquiry-electricity-organic.exe", _String2="..") returned 1 [0130.475] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9df460, ftCreationTime.dwHighDateTime=0x1d58123, ftLastAccessTime.dwLowDateTime=0x494392a0, ftLastAccessTime.dwHighDateTime=0x1d5a4ec, ftLastWriteTime.dwLowDateTime=0x494392a0, ftLastWriteTime.dwHighDateTime=0x1d5a4ec, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0130.475] wcscmp (_String1="isspos.exe", _String2=".") returned 1 [0130.475] wcscmp (_String1="isspos.exe", _String2="..") returned 1 [0130.475] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f95c070, ftCreationTime.dwHighDateTime=0x1d5b19b, ftLastAccessTime.dwLowDateTime=0x132c9d50, ftLastAccessTime.dwHighDateTime=0x1d5ad44, ftLastWriteTime.dwLowDateTime=0x132c9d50, ftLastWriteTime.dwHighDateTime=0x1d5ad44, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0130.475] wcscmp (_String1="leechftp.exe", _String2=".") returned 1 [0130.475] wcscmp (_String1="leechftp.exe", _String2="..") returned 1 [0130.475] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbce2ca0, ftCreationTime.dwHighDateTime=0x1d57204, ftLastAccessTime.dwLowDateTime=0xa825d60, ftLastAccessTime.dwHighDateTime=0x1d57820, ftLastWriteTime.dwLowDateTime=0xa825d60, ftLastWriteTime.dwHighDateTime=0x1d57820, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="MXSLIP~1.EXE")) returned 1 [0130.475] wcscmp (_String1="mxslipstream.exe", _String2=".") returned 1 [0130.475] wcscmp (_String1="mxslipstream.exe", _String2="..") returned 1 [0130.475] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDK", cAlternateFileName="")) returned 1 [0130.475] wcscmp (_String1="SDK", _String2=".") returned 1 [0130.475] wcscmp (_String1="SDK", _String2="..") returned 1 [0130.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecd0d0 [0130.476] wcscpy (in: _Dest=0x3ecd0d0, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0130.476] wcscat (in: _Dest=0x3ecd0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0130.476] wcscat (in: _Dest=0x3ecd0d0, _Source="SDK" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK" [0130.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0130.477] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171ebe0, ftCreationTime.dwHighDateTime=0x1d5ca58, ftLastAccessTime.dwLowDateTime=0xd71c9ce0, ftLastAccessTime.dwHighDateTime=0x1d57849, ftLastWriteTime.dwLowDateTime=0xd71c9ce0, ftLastWriteTime.dwHighDateTime=0x1d57849, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="supported.exe", cAlternateFileName="SUPPOR~1.EXE")) returned 1 [0130.477] wcscmp (_String1="supported.exe", _String2=".") returned 1 [0130.477] wcscmp (_String1="supported.exe", _String2="..") returned 1 [0130.477] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0130.477] wcscmp (_String1="VSTA", _String2=".") returned 1 [0130.477] wcscmp (_String1="VSTA", _String2="..") returned 1 [0130.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd3a8 [0130.477] wcscpy (in: _Dest=0x3ecd3a8, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0130.478] wcscat (in: _Dest=0x3ecd3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0130.478] wcscat (in: _Dest=0x3ecd3a8, _Source="VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" [0130.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0130.492] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0 [0130.492] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccd28) returned 1 [0130.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 130 os_tid = 0x9c0 [0130.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5f78 [0130.494] wcscpy (in: _Dest=0x3de5f78, _Source="C:\\Program Files\\Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0130.494] wcscat (in: _Dest=0x3de5f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\") returned="C:\\Program Files\\Microsoft.NET\\" [0130.494] wcscat (in: _Dest=0x3de5f78, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft.NET\\*") returned="C:\\Program Files\\Microsoft.NET\\*" [0130.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft.NET\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90737e80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90737e80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.495] wcscmp (_String1=".", _String2=".") returned 0 [0130.495] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90737e80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90737e80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.495] wcscmp (_String1="..", _String2=".") returned 1 [0130.495] wcscmp (_String1="..", _String2="..") returned 0 [0130.495] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd82aad80, ftCreationTime.dwHighDateTime=0x1d57393, ftLastAccessTime.dwLowDateTime=0xa6e116c0, ftLastAccessTime.dwHighDateTime=0x1d5a353, ftLastWriteTime.dwLowDateTime=0xa6e116c0, ftLastWriteTime.dwHighDateTime=0x1d5a353, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-charge.exe", cAlternateFileName="ACTIVE~1.EXE")) returned 1 [0130.495] wcscmp (_String1="active-charge.exe", _String2=".") returned 1 [0130.495] wcscmp (_String1="active-charge.exe", _String2="..") returned 1 [0130.495] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c16030, ftCreationTime.dwHighDateTime=0x1d5a1fd, ftLastAccessTime.dwLowDateTime=0x4d55d060, ftLastAccessTime.dwHighDateTime=0x1d5af7d, ftLastWriteTime.dwLowDateTime=0x4d55d060, ftLastWriteTime.dwHighDateTime=0x1d5af7d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0130.495] wcscmp (_String1="barca.exe", _String2=".") returned 1 [0130.495] wcscmp (_String1="barca.exe", _String2="..") returned 1 [0130.495] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7d9a4b0, ftCreationTime.dwHighDateTime=0x1d59ac0, ftLastAccessTime.dwLowDateTime=0x4dc805e0, ftLastAccessTime.dwHighDateTime=0x1d5a316, ftLastWriteTime.dwLowDateTime=0x4dc805e0, ftLastWriteTime.dwHighDateTime=0x1d5a316, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0130.495] wcscmp (_String1="pidgin.exe", _String2=".") returned 1 [0130.496] wcscmp (_String1="pidgin.exe", _String2="..") returned 1 [0130.496] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0130.496] wcscmp (_String1="Primary Interop Assemblies", _String2=".") returned 1 [0130.496] wcscmp (_String1="Primary Interop Assemblies", _String2="..") returned 1 [0130.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4588 [0130.496] wcscpy (in: _Dest=0x3dc4588, _Source="C:\\Program Files\\Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0130.496] wcscat (in: _Dest=0x3dc4588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\") returned="C:\\Program Files\\Microsoft.NET\\" [0130.496] wcscat (in: _Dest=0x3dc4588, _Source="Primary Interop Assemblies" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies" [0130.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0130.497] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0130.497] wcscmp (_String1="RedistList", _String2=".") returned 1 [0130.497] wcscmp (_String1="RedistList", _String2="..") returned 1 [0130.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1d48 [0130.497] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Program Files\\Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0130.497] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\") returned="C:\\Program Files\\Microsoft.NET\\" [0130.497] wcscat (in: _Dest=0x2fe1d48, _Source="RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0130.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0130.499] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe406b3e0, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x4f96acf0, ftLastAccessTime.dwHighDateTime=0x1d5a37a, ftLastWriteTime.dwLowDateTime=0x4f96acf0, ftLastWriteTime.dwHighDateTime=0x1d5a37a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="relay_judy.exe", cAlternateFileName="RELAY_~1.EXE")) returned 1 [0130.499] wcscmp (_String1="relay_judy.exe", _String2=".") returned 1 [0130.499] wcscmp (_String1="relay_judy.exe", _String2="..") returned 1 [0130.499] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe406b3e0, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x4f96acf0, ftLastAccessTime.dwHighDateTime=0x1d5a37a, ftLastWriteTime.dwLowDateTime=0x4f96acf0, ftLastWriteTime.dwHighDateTime=0x1d5a37a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="relay_judy.exe", cAlternateFileName="RELAY_~1.EXE")) returned 0 [0130.499] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5f78) returned 1 [0130.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d250) returned 1 Thread: id = 131 os_tid = 0x9d0 [0130.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54848 [0130.501] wcscpy (in: _Dest=0x3e54848, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0130.501] wcscat (in: _Dest=0x3e54848, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\" [0130.501] wcscat (in: _Dest=0x3e54848, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\*") returned="C:\\Program Files\\MSBuild\\*" [0130.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.501] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x9075dfe0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9075dfe0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d08 [0130.501] wcscmp (_String1=".", _String2=".") returned 0 [0130.501] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x9075dfe0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x9075dfe0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.501] wcscmp (_String1="..", _String2=".") returned 1 [0130.501] wcscmp (_String1="..", _String2="..") returned 0 [0130.501] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee3016f0, ftCreationTime.dwHighDateTime=0x1d5bc8c, ftLastAccessTime.dwLowDateTime=0xeb1dc300, ftLastAccessTime.dwHighDateTime=0x1d57992, ftLastWriteTime.dwLowDateTime=0xeb1dc300, ftLastWriteTime.dwHighDateTime=0x1d57992, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="CREDIT~1.EXE")) returned 1 [0130.501] wcscmp (_String1="creditservice.exe", _String2=".") returned 1 [0130.502] wcscmp (_String1="creditservice.exe", _String2="..") returned 1 [0130.502] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef80800, ftCreationTime.dwHighDateTime=0x1d5d3c9, ftLastAccessTime.dwLowDateTime=0xdda9dbe0, ftLastAccessTime.dwHighDateTime=0x1d59f59, ftLastWriteTime.dwLowDateTime=0xdda9dbe0, ftLastWriteTime.dwHighDateTime=0x1d59f59, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0130.502] wcscmp (_String1="fling.exe", _String2=".") returned 1 [0130.502] wcscmp (_String1="fling.exe", _String2="..") returned 1 [0130.502] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0130.502] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0130.502] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0130.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5f78 [0130.502] wcscpy (in: _Dest=0x3de5f78, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0130.502] wcscat (in: _Dest=0x3de5f78, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\" [0130.502] wcscat (in: _Dest=0x3de5f78, _Source="Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0130.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0130.503] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b04a00, ftCreationTime.dwHighDateTime=0x1cacf8d, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45b04a00, ftLastWriteTime.dwHighDateTime=0x1cacf8d, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 1 [0130.503] wcscmp (_String1="Microsoft.Office.InfoPath.targets", _String2=".") returned 1 [0130.503] wcscmp (_String1="Microsoft.Office.InfoPath.targets", _String2="..") returned 1 [0130.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4188 [0130.503] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0130.503] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\" [0130.503] wcscat (in: _Dest=0x3dc4188, _Source="Microsoft.Office.InfoPath.targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets") returned="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets" [0130.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0130.504] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95aef250, ftCreationTime.dwHighDateTime=0x1d5c6ad, ftLastAccessTime.dwLowDateTime=0x88007780, ftLastAccessTime.dwHighDateTime=0x1d57f79, ftLastWriteTime.dwLowDateTime=0x88007780, ftLastWriteTime.dwHighDateTime=0x1d57f79, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 1 [0130.504] wcscmp (_String1="scriptftp.exe", _String2=".") returned 1 [0130.504] wcscmp (_String1="scriptftp.exe", _String2="..") returned 1 [0130.504] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95aef250, ftCreationTime.dwHighDateTime=0x1d5c6ad, ftLastAccessTime.dwLowDateTime=0x88007780, ftLastAccessTime.dwHighDateTime=0x1d57f79, ftLastWriteTime.dwLowDateTime=0x88007780, ftLastWriteTime.dwHighDateTime=0x1d57f79, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 0 [0130.505] FindClose (in: hFindFile=0x3e54d08 | out: hFindFile=0x3e54d08) returned 1 [0130.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 [0130.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 Thread: id = 132 os_tid = 0x9e0 [0130.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0f008 [0130.506] wcscpy (in: _Dest=0x3e0f008, _Source="C:\\Program Files\\Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0130.506] wcscat (in: _Dest=0x3e0f008, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\") returned="C:\\Program Files\\Reference Assemblies\\" [0130.506] wcscat (in: _Dest=0x3e0f008, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\*") returned="C:\\Program Files\\Reference Assemblies\\*" [0130.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x907aa2a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x907aa2a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0130.506] wcscmp (_String1=".", _String2=".") returned 0 [0130.506] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x907aa2a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x907aa2a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.506] wcscmp (_String1="..", _String2=".") returned 1 [0130.507] wcscmp (_String1="..", _String2="..") returned 0 [0130.507] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0130.507] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0130.507] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0130.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eccd28 [0130.507] wcscpy (in: _Dest=0x3eccd28, _Source="C:\\Program Files\\Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0130.507] wcscat (in: _Dest=0x3eccd28, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\") returned="C:\\Program Files\\Reference Assemblies\\" [0130.507] wcscat (in: _Dest=0x3eccd28, _Source="Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0130.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eccd28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0130.508] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4f78e0, ftCreationTime.dwHighDateTime=0x1d57898, ftLastAccessTime.dwLowDateTime=0xae4aeb00, ftLastAccessTime.dwHighDateTime=0x1d5dda7, ftLastWriteTime.dwLowDateTime=0xae4aeb00, ftLastWriteTime.dwHighDateTime=0x1d5dda7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 1 [0130.508] wcscmp (_String1="spgagentservice.exe", _String2=".") returned 1 [0130.508] wcscmp (_String1="spgagentservice.exe", _String2="..") returned 1 [0130.508] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b117410, ftCreationTime.dwHighDateTime=0x1d5b34c, ftLastAccessTime.dwLowDateTime=0xb50a8810, ftLastAccessTime.dwHighDateTime=0x1d578f3, ftLastWriteTime.dwLowDateTime=0xb50a8810, ftLastWriteTime.dwHighDateTime=0x1d578f3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 1 [0130.508] wcscmp (_String1="yahoomessenger.exe", _String2=".") returned 1 [0130.508] wcscmp (_String1="yahoomessenger.exe", _String2="..") returned 1 [0130.508] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b117410, ftCreationTime.dwHighDateTime=0x1d5b34c, ftLastAccessTime.dwLowDateTime=0xb50a8810, ftLastAccessTime.dwHighDateTime=0x1d578f3, ftLastWriteTime.dwLowDateTime=0xb50a8810, ftLastWriteTime.dwHighDateTime=0x1d578f3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 0 [0130.508] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0130.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f008) returned 1 [0130.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eae0) returned 1 Thread: id = 133 os_tid = 0x9f0 [0130.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1328 [0130.514] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Uninstall Information" | out: _Dest="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information" [0130.514] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Uninstall Information\\") returned="C:\\Program Files\\Uninstall Information\\" [0130.514] wcscat (in: _Dest=0x2fe1328, _Source="*" | out: _Dest="C:\\Program Files\\Uninstall Information\\*") returned="C:\\Program Files\\Uninstall Information\\*" [0130.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x48a8eee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8f263e00, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f263e00, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0130.514] wcscmp (_String1=".", _String2=".") returned 0 [0130.514] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x48a8eee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8f263e00, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f263e00, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.514] wcscmp (_String1="..", _String2=".") returned 1 [0130.514] wcscmp (_String1="..", _String2="..") returned 0 [0130.514] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92a659d0, ftCreationTime.dwHighDateTime=0x1d57285, ftLastAccessTime.dwLowDateTime=0xfefe3fd0, ftLastAccessTime.dwHighDateTime=0x1d5cd2f, ftLastWriteTime.dwLowDateTime=0xfefe3fd0, ftLastWriteTime.dwHighDateTime=0x1d5cd2f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cyberincludedwages.exe", cAlternateFileName="CYBERI~1.EXE")) returned 1 [0130.514] wcscmp (_String1="cyberincludedwages.exe", _String2=".") returned 1 [0130.514] wcscmp (_String1="cyberincludedwages.exe", _String2="..") returned 1 [0130.514] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92a659d0, ftCreationTime.dwHighDateTime=0x1d57285, ftLastAccessTime.dwLowDateTime=0xfefe3fd0, ftLastAccessTime.dwHighDateTime=0x1d5cd2f, ftLastWriteTime.dwLowDateTime=0xfefe3fd0, ftLastWriteTime.dwHighDateTime=0x1d5cd2f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cyberincludedwages.exe", cAlternateFileName="CYBERI~1.EXE")) returned 0 [0130.514] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0130.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0130.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f5e0) returned 1 Thread: id = 134 os_tid = 0xa00 [0130.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de62e8 [0130.516] wcscpy (in: _Dest=0x3de62e8, _Source="C:\\Program Files\\Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0130.516] wcscat (in: _Dest=0x3de62e8, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\") returned="C:\\Program Files\\Windows Journal\\" [0130.516] wcscat (in: _Dest=0x3de62e8, _Source="*" | out: _Dest="C:\\Program Files\\Windows Journal\\*") returned="C:\\Program Files\\Windows Journal\\*" [0130.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ab4e22, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x90784140, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90784140, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0130.516] wcscmp (_String1=".", _String2=".") returned 0 [0130.516] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ab4e22, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x90784140, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90784140, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.516] wcscmp (_String1="..", _String2=".") returned 1 [0130.516] wcscmp (_String1="..", _String2="..") returned 0 [0130.516] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3608042, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee69aeba, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc386a5c2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0130.516] wcscmp (_String1="en-US", _String2=".") returned 1 [0130.516] wcscmp (_String1="en-US", _String2="..") returned 1 [0130.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f5e0 [0130.517] wcscpy (in: _Dest=0x3e0f5e0, _Source="C:\\Program Files\\Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0130.517] wcscat (in: _Dest=0x3e0f5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\") returned="C:\\Program Files\\Windows Journal\\" [0130.517] wcscat (in: _Dest=0x3e0f5e0, _Source="en-US" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US") returned="C:\\Program Files\\Windows Journal\\en-US" [0130.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0130.518] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5d82320, ftCreationTime.dwHighDateTime=0x1d5aad7, ftLastAccessTime.dwLowDateTime=0x74c3dfd0, ftLastAccessTime.dwHighDateTime=0x1d58876, ftLastWriteTime.dwLowDateTime=0x74c3dfd0, ftLastWriteTime.dwHighDateTime=0x1d58876, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0130.518] wcscmp (_String1="fpos.exe", _String2=".") returned 1 [0130.518] wcscmp (_String1="fpos.exe", _String2="..") returned 1 [0130.518] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ebe7e76, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4ebe7e76, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x95c30110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkSeg.dll", cAlternateFileName="")) returned 1 [0130.518] wcscmp (_String1="InkSeg.dll", _String2=".") returned 1 [0130.518] wcscmp (_String1="InkSeg.dll", _String2="..") returned 1 [0130.518] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d33f28, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x54d33f28, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96d00440, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll", cAlternateFileName="")) returned 1 [0130.518] wcscmp (_String1="JNTFiltr.dll", _String2=".") returned 1 [0130.518] wcscmp (_String1="JNTFiltr.dll", _String2="..") returned 1 [0130.518] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54dcc4a4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x54dcc4a4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ea4300, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xeca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNWDRV.dll", cAlternateFileName="")) returned 1 [0130.518] wcscmp (_String1="JNWDRV.dll", _String2=".") returned 1 [0130.518] wcscmp (_String1="JNWDRV.dll", _String2="..") returned 1 [0130.518] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed64c2c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4ed64c2c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ec8cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll", cAlternateFileName="")) returned 1 [0130.518] wcscmp (_String1="jnwdui.dll", _String2=".") returned 1 [0130.518] wcscmp (_String1="jnwdui.dll", _String2="..") returned 1 [0130.518] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffb14d1, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4ffb14d1, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ec8cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll", cAlternateFileName="")) returned 1 [0130.518] wcscmp (_String1="jnwmon.dll", _String2=".") returned 1 [0130.518] wcscmp (_String1="jnwmon.dll", _String2="..") returned 1 [0130.518] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4db8a7a4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4db8a7a4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ec8cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwppr.dll", cAlternateFileName="")) returned 1 [0130.518] wcscmp (_String1="jnwppr.dll", _String2=".") returned 1 [0130.518] wcscmp (_String1="jnwppr.dll", _String2="..") returned 1 [0130.518] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37947e10, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x37947e10, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x93f6be00, ftLastWriteTime.dwHighDateTime=0x1cb887a, nFileSizeHigh=0x0, nFileSizeLow=0x1b3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe", cAlternateFileName="")) returned 1 [0130.519] wcscmp (_String1="Journal.exe", _String2=".") returned 1 [0130.519] wcscmp (_String1="Journal.exe", _String2="..") returned 1 [0130.519] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x595f3d9f, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x595f3d9f, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9e2fae70, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL", cAlternateFileName="")) returned 1 [0130.519] wcscmp (_String1="MSPVWCTL.DLL", _String2=".") returned 1 [0130.519] wcscmp (_String1="MSPVWCTL.DLL", _String2="..") returned 1 [0130.519] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cf907e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x55cf907e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xa7240260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBDoc.DLL", cAlternateFileName="")) returned 1 [0130.519] wcscmp (_String1="NBDoc.DLL", _String2=".") returned 1 [0130.519] wcscmp (_String1="NBDoc.DLL", _String2="..") returned 1 [0130.519] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27ad38, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4b27ad38, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xa7264c50, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll", cAlternateFileName="")) returned 1 [0130.519] wcscmp (_String1="NBMapTIP.dll", _String2=".") returned 1 [0130.519] wcscmp (_String1="NBMapTIP.dll", _String2="..") returned 1 [0130.519] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51bf5953, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x51bf5953, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x6f3fb0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe", cAlternateFileName="")) returned 1 [0130.519] wcscmp (_String1="PDIALOG.exe", _String2=".") returned 1 [0130.519] wcscmp (_String1="PDIALOG.exe", _String2="..") returned 1 [0130.519] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0130.519] wcscmp (_String1="Templates", _String2=".") returned 1 [0130.519] wcscmp (_String1="Templates", _String2="..") returned 1 [0130.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1328 [0130.519] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0130.519] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\") returned="C:\\Program Files\\Windows Journal\\" [0130.519] wcscat (in: _Dest=0x2fe1328, _Source="Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0130.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0130.520] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0130.521] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0130.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de62e8) returned 1 [0130.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 Thread: id = 135 os_tid = 0xa10 [0130.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dfa0c0 [0130.524] wcscpy (in: _Dest=0x3dfa0c0, _Source="C:\\Program Files\\Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0130.524] wcscat (in: _Dest=0x3dfa0c0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\") returned="C:\\Program Files\\Windows Mail\\" [0130.524] wcscat (in: _Dest=0x3dfa0c0, _Source="*" | out: _Dest="C:\\Program Files\\Windows Mail\\*") returned="C:\\Program Files\\Windows Mail\\*" [0130.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92a2e1a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92a2e1a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0130.524] wcscmp (_String1=".", _String2=".") returned 0 [0130.524] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92a2e1a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92a2e1a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.524] wcscmp (_String1="..", _String2=".") returned 1 [0130.524] wcscmp (_String1="..", _String2="..") returned 0 [0130.525] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0a419b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7f0a419b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f0a419b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0130.525] wcscmp (_String1="en-US", _String2=".") returned 1 [0130.525] wcscmp (_String1="en-US", _String2="..") returned 1 [0130.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6068 [0130.525] wcscpy (in: _Dest=0x3de6068, _Source="C:\\Program Files\\Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0130.525] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\") returned="C:\\Program Files\\Windows Mail\\" [0130.525] wcscat (in: _Dest=0x3de6068, _Source="en-US" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US" [0130.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0130.526] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94146c90, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x94146c90, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf223a100, ftLastWriteTime.dwHighDateTime=0x1cb887a, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0130.526] wcscmp (_String1="msoe.dll", _String2=".") returned 1 [0130.526] wcscmp (_String1="msoe.dll", _String2="..") returned 1 [0130.526] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0130.526] wcscmp (_String1="MSOERES.dll", _String2=".") returned 1 [0130.526] wcscmp (_String1="MSOERES.dll", _String2="..") returned 1 [0130.526] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f384df0, ftCreationTime.dwHighDateTime=0x1d584ae, ftLastAccessTime.dwLowDateTime=0x47a42740, ftLastAccessTime.dwHighDateTime=0x1d570a6, ftLastWriteTime.dwLowDateTime=0x47a42740, ftLastWriteTime.dwHighDateTime=0x1d570a6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1 [0130.526] wcscmp (_String1="ncftp.exe", _String2=".") returned 1 [0130.526] wcscmp (_String1="ncftp.exe", _String2="..") returned 1 [0130.526] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94dc6010, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x94dc6010, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x13848d00, ftLastWriteTime.dwHighDateTime=0x1cb887b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0130.526] wcscmp (_String1="oeimport.dll", _String2=".") returned 1 [0130.526] wcscmp (_String1="oeimport.dll", _String2="..") returned 1 [0130.526] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae9f3b20, ftCreationTime.dwHighDateTime=0x1d57370, ftLastAccessTime.dwLowDateTime=0x26f98410, ftLastAccessTime.dwHighDateTime=0x1d57987, ftLastWriteTime.dwLowDateTime=0x26f98410, ftLastWriteTime.dwHighDateTime=0x1d57987, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="racing rg neighborhood.exe", cAlternateFileName="RACING~1.EXE")) returned 1 [0130.526] wcscmp (_String1="racing rg neighborhood.exe", _String2=".") returned 1 [0130.526] wcscmp (_String1="racing rg neighborhood.exe", _String2="..") returned 1 [0130.526] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59f50930, ftCreationTime.dwHighDateTime=0x1d5dc46, ftLastAccessTime.dwLowDateTime=0xe408bd30, ftLastAccessTime.dwHighDateTime=0x1d576af, ftLastWriteTime.dwLowDateTime=0xe408bd30, ftLastWriteTime.dwHighDateTime=0x1d576af, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="veteran.exe", cAlternateFileName="")) returned 1 [0130.526] wcscmp (_String1="veteran.exe", _String2=".") returned 1 [0130.526] wcscmp (_String1="veteran.exe", _String2="..") returned 1 [0130.526] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c96c70, ftCreationTime.dwHighDateTime=0x1d5ace5, ftLastAccessTime.dwLowDateTime=0x8361a0c0, ftLastAccessTime.dwHighDateTime=0x1d5b31b, ftLastWriteTime.dwLowDateTime=0x8361a0c0, ftLastWriteTime.dwHighDateTime=0x1d5b31b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="volvo.exe", cAlternateFileName="")) returned 1 [0130.526] wcscmp (_String1="volvo.exe", _String2=".") returned 1 [0130.527] wcscmp (_String1="volvo.exe", _String2="..") returned 1 [0130.527] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a5a5d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x89a5a5d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xa96be800, ftLastWriteTime.dwHighDateTime=0x1cb887a, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0130.527] wcscmp (_String1="wab.exe", _String2=".") returned 1 [0130.527] wcscmp (_String1="wab.exe", _String2="..") returned 1 [0130.527] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0130.527] wcscmp (_String1="wabfind.dll", _String2=".") returned 1 [0130.527] wcscmp (_String1="wabfind.dll", _String2="..") returned 1 [0130.527] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0130.527] wcscmp (_String1="wabimp.dll", _String2=".") returned 1 [0130.527] wcscmp (_String1="wabimp.dll", _String2="..") returned 1 [0130.527] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0130.527] wcscmp (_String1="wabmig.exe", _String2=".") returned 1 [0130.527] wcscmp (_String1="wabmig.exe", _String2="..") returned 1 [0130.527] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0130.527] wcscmp (_String1="WinMail.exe", _String2=".") returned 1 [0130.527] wcscmp (_String1="WinMail.exe", _String2="..") returned 1 [0130.527] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0130.527] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0130.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0130.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa0c0) returned 1 [0130.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa978) returned 1 Thread: id = 136 os_tid = 0xa20 [0130.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df7e20 [0130.532] wcscpy (in: _Dest=0x3df7e20, _Source="C:\\ProgramData\\Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0130.532] wcscat (in: _Dest=0x3df7e20, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\") returned="C:\\ProgramData\\Adobe\\" [0130.532] wcscat (in: _Dest=0x3df7e20, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\*") returned="C:\\ProgramData\\Adobe\\*" [0130.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0130.532] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a48 [0132.195] wcscmp (_String1=".", _String2=".") returned 0 [0132.195] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.196] wcscmp (_String1="..", _String2=".") returned 1 [0132.196] wcscmp (_String1="..", _String2="..") returned 0 [0132.196] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0132.196] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0132.196] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0132.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x2ff00a0 [0132.196] wcscpy (in: _Dest=0x2ff00a0, _Source="C:\\ProgramData\\Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0132.196] wcscat (in: _Dest=0x2ff00a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\") returned="C:\\ProgramData\\Adobe\\" [0132.196] wcscat (in: _Dest=0x2ff00a0, _Source="Acrobat" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat" [0132.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff00a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0132.410] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0132.410] FindClose (in: hFindFile=0x3e54a48 | out: hFindFile=0x3e54a48) returned 1 [0132.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0132.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0132.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8210) returned 1 Thread: id = 137 os_tid = 0xa30 [0130.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de62e8 [0130.534] wcscpy (in: _Dest=0x3de62e8, _Source="C:\\ProgramData\\Application Data" | out: _Dest="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0130.534] wcscat (in: _Dest=0x3de62e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Application Data\\") returned="C:\\ProgramData\\Application Data\\" [0130.534] wcscat (in: _Dest=0x3de62e8, _Source="*" | out: _Dest="C:\\ProgramData\\Application Data\\*") returned="C:\\ProgramData\\Application Data\\*" [0130.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0130.534] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0130.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de62e8) returned 1 [0130.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa738) returned 1 Thread: id = 138 os_tid = 0xa40 [0130.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54b48 [0130.536] wcscpy (in: _Dest=0x3e54b48, _Source="C:\\ProgramData\\Desktop" | out: _Dest="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0130.536] wcscat (in: _Dest=0x3e54b48, _Source="\\" | out: _Dest="C:\\ProgramData\\Desktop\\") returned="C:\\ProgramData\\Desktop\\" [0130.536] wcscat (in: _Dest=0x3e54b48, _Source="*" | out: _Dest="C:\\ProgramData\\Desktop\\*") returned="C:\\ProgramData\\Desktop\\*" [0130.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0130.536] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0130.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0130.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78a8) returned 1 Thread: id = 139 os_tid = 0xa50 [0130.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54b48 [0130.538] wcscpy (in: _Dest=0x3e54b48, _Source="C:\\ProgramData\\Documents" | out: _Dest="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0130.538] wcscat (in: _Dest=0x3e54b48, _Source="\\" | out: _Dest="C:\\ProgramData\\Documents\\") returned="C:\\ProgramData\\Documents\\" [0130.538] wcscat (in: _Dest=0x3e54b48, _Source="*" | out: _Dest="C:\\ProgramData\\Documents\\*") returned="C:\\ProgramData\\Documents\\*" [0130.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0130.538] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0130.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0130.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54ac8) returned 1 Thread: id = 140 os_tid = 0xa60 [0130.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54ac8 [0130.539] wcscpy (in: _Dest=0x3e54ac8, _Source="C:\\ProgramData\\Favorites" | out: _Dest="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0130.539] wcscat (in: _Dest=0x3e54ac8, _Source="\\" | out: _Dest="C:\\ProgramData\\Favorites\\") returned="C:\\ProgramData\\Favorites\\" [0130.540] wcscat (in: _Dest=0x3e54ac8, _Source="*" | out: _Dest="C:\\ProgramData\\Favorites\\*") returned="C:\\ProgramData\\Favorites\\*" [0130.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0130.540] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0130.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54ac8) returned 1 [0130.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54c88) returned 1 Thread: id = 141 os_tid = 0xa70 [0130.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54c88 [0130.548] wcscpy (in: _Dest=0x3e54c88, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.548] wcscat (in: _Dest=0x3e54c88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.548] wcscat (in: _Dest=0x3e54c88, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\*") returned="C:\\ProgramData\\Microsoft\\*" [0130.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0130.548] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54ac8 [0130.549] wcscmp (_String1=".", _String2=".") returned 0 [0130.549] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.549] wcscmp (_String1="..", _String2=".") returned 1 [0130.549] wcscmp (_String1="..", _String2="..") returned 0 [0130.549] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0130.549] wcscmp (_String1="Assistance", _String2=".") returned 1 [0130.549] wcscmp (_String1="Assistance", _String2="..") returned 1 [0130.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de62e8 [0130.549] wcscpy (in: _Dest=0x3de62e8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.549] wcscat (in: _Dest=0x3de62e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.549] wcscat (in: _Dest=0x3de62e8, _Source="Assistance" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0130.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de62e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0130.551] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0130.551] wcscmp (_String1="Crypto", _String2=".") returned 1 [0130.551] wcscmp (_String1="Crypto", _String2="..") returned 1 [0130.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dfa738 [0130.551] wcscpy (in: _Dest=0x3dfa738, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.551] wcscat (in: _Dest=0x3dfa738, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.551] wcscat (in: _Dest=0x3dfa738, _Source="Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0130.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0130.552] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0130.552] wcscmp (_String1="Device Stage", _String2=".") returned 1 [0130.552] wcscmp (_String1="Device Stage", _String2="..") returned 1 [0130.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0eae0 [0130.552] wcscpy (in: _Dest=0x3e0eae0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.553] wcscat (in: _Dest=0x3e0eae0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.553] wcscat (in: _Dest=0x3e0eae0, _Source="Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0130.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0eae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0130.554] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0130.554] wcscmp (_String1="DeviceSync", _String2=".") returned 1 [0130.554] wcscmp (_String1="DeviceSync", _String2="..") returned 1 [0130.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de61f8 [0130.554] wcscpy (in: _Dest=0x3de61f8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.554] wcscat (in: _Dest=0x3de61f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.554] wcscat (in: _Dest=0x3de61f8, _Source="DeviceSync" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync" [0130.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de61f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0130.555] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0130.555] wcscmp (_String1="DRM", _String2=".") returned 1 [0130.555] wcscmp (_String1="DRM", _String2="..") returned 1 [0130.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3dfa0c0 [0130.556] wcscpy (in: _Dest=0x3dfa0c0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.556] wcscat (in: _Dest=0x3dfa0c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.556] wcscat (in: _Dest=0x3dfa0c0, _Source="DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0130.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa0c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0130.557] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0130.557] wcscmp (_String1="eHome", _String2=".") returned 1 [0130.557] wcscmp (_String1="eHome", _String2="..") returned 1 [0130.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3df9fe8 [0130.557] wcscpy (in: _Dest=0x3df9fe8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.557] wcscat (in: _Dest=0x3df9fe8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.558] wcscat (in: _Dest=0x3df9fe8, _Source="eHome" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0130.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df9fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0130.559] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0130.559] wcscmp (_String1="Event Viewer", _String2=".") returned 1 [0130.559] wcscmp (_String1="Event Viewer", _String2="..") returned 1 [0130.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0f008 [0130.559] wcscpy (in: _Dest=0x3e0f008, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.559] wcscat (in: _Dest=0x3e0f008, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.559] wcscat (in: _Dest=0x3e0f008, _Source="Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer" [0130.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0130.561] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTML Help", cAlternateFileName="HTMLHE~1")) returned 1 [0130.561] wcscmp (_String1="HTML Help", _String2=".") returned 1 [0130.561] wcscmp (_String1="HTML Help", _String2="..") returned 1 [0130.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de60b8 [0130.561] wcscpy (in: _Dest=0x3de60b8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.561] wcscat (in: _Dest=0x3de60b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.561] wcscat (in: _Dest=0x3de60b8, _Source="HTML Help" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help") returned="C:\\ProgramData\\Microsoft\\HTML Help" [0130.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de60b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0130.563] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0130.563] wcscmp (_String1="IdentityCRL", _String2=".") returned 1 [0130.563] wcscmp (_String1="IdentityCRL", _String2="..") returned 1 [0130.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0f168 [0130.563] wcscpy (in: _Dest=0x3e0f168, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.563] wcscat (in: _Dest=0x3e0f168, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.563] wcscat (in: _Dest=0x3e0f168, _Source="IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL" [0130.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0130.564] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x263aa572, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x263aa572, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x263aa572, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0130.564] wcscmp (_String1="Media Player", _String2=".") returned 1 [0130.564] wcscmp (_String1="Media Player", _String2="..") returned 1 [0130.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0e7c8 [0130.564] wcscpy (in: _Dest=0x3e0e7c8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.565] wcscat (in: _Dest=0x3e0e7c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.565] wcscat (in: _Dest=0x3e0e7c8, _Source="Media Player" | out: _Dest="C:\\ProgramData\\Microsoft\\Media Player") returned="C:\\ProgramData\\Microsoft\\Media Player" [0130.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7c8) returned 1 [0130.565] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0130.565] wcscmp (_String1="MF", _String2=".") returned 1 [0130.565] wcscmp (_String1="MF", _String2="..") returned 1 [0130.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e54b48 [0130.565] wcscpy (in: _Dest=0x3e54b48, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.565] wcscat (in: _Dest=0x3e54b48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.565] wcscat (in: _Dest=0x3e54b48, _Source="MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0130.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e54b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0130.567] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0130.567] wcscmp (_String1="MSDN", _String2=".") returned 1 [0130.567] wcscmp (_String1="MSDN", _String2="..") returned 1 [0130.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3dfa030 [0130.567] wcscpy (in: _Dest=0x3dfa030, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.567] wcscat (in: _Dest=0x3dfa030, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.567] wcscat (in: _Dest=0x3dfa030, _Source="MSDN" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN" [0130.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0130.568] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0130.568] wcscmp (_String1="NetFramework", _String2=".") returned 1 [0130.568] wcscmp (_String1="NetFramework", _String2="..") returned 1 [0130.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0e7c8 [0130.569] wcscpy (in: _Dest=0x3e0e7c8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.569] wcscat (in: _Dest=0x3e0e7c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.569] wcscat (in: _Dest=0x3e0e7c8, _Source="NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0130.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0e7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0130.570] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0130.570] wcscmp (_String1="Network", _String2=".") returned 1 [0130.570] wcscmp (_String1="Network", _String2="..") returned 1 [0130.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5c08 [0130.571] wcscpy (in: _Dest=0x3de5c08, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.571] wcscat (in: _Dest=0x3de5c08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.571] wcscat (in: _Dest=0x3de5c08, _Source="Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0130.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0130.573] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0130.573] wcscmp (_String1="OFFICE", _String2=".") returned 1 [0130.574] wcscmp (_String1="OFFICE", _String2="..") returned 1 [0130.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9f58 [0130.574] wcscpy (in: _Dest=0x3df9f58, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.574] wcscat (in: _Dest=0x3df9f58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.574] wcscat (in: _Dest=0x3df9f58, _Source="OFFICE" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE" [0130.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df9f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0130.575] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0130.575] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2=".") returned 1 [0130.575] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2="..") returned 1 [0130.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3f88 [0130.575] wcscpy (in: _Dest=0x3dc3f88, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.575] wcscat (in: _Dest=0x3dc3f88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.575] wcscat (in: _Dest=0x3dc3f88, _Source="OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0130.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc3f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c [0130.844] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0130.845] wcscmp (_String1="RAC", _String2=".") returned 1 [0130.845] wcscmp (_String1="RAC", _String2="..") returned 1 [0130.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e6a110 [0130.845] wcscpy (in: _Dest=0x3e6a110, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0130.845] wcscat (in: _Dest=0x3e6a110, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0130.845] wcscat (in: _Dest=0x3e6a110, _Source="RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0131.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6a110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0131.206] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0131.206] wcscmp (_String1="Search", _String2=".") returned 1 [0131.206] wcscmp (_String1="Search", _String2="..") returned 1 [0131.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9cd0 [0131.206] wcscpy (in: _Dest=0x3df9cd0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.206] wcscat (in: _Dest=0x3df9cd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.206] wcscat (in: _Dest=0x3df9cd0, _Source="Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0131.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0131.208] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0131.208] wcscmp (_String1="User Account Pictures", _String2=".") returned 1 [0131.208] wcscmp (_String1="User Account Pictures", _String2="..") returned 1 [0131.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c810 [0131.208] wcscpy (in: _Dest=0x3d8c810, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.208] wcscat (in: _Dest=0x3d8c810, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.208] wcscat (in: _Dest=0x3d8c810, _Source="User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0131.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0131.210] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0131.210] wcscmp (_String1="Vault", _String2=".") returned 1 [0131.210] wcscmp (_String1="Vault", _String2="..") returned 1 [0131.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3df9e38 [0131.210] wcscpy (in: _Dest=0x3df9e38, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.210] wcscat (in: _Dest=0x3df9e38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.210] wcscat (in: _Dest=0x3df9e38, _Source="Vault" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault" [0131.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df9e38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0131.212] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0131.212] wcscmp (_String1="VISIO", _String2=".") returned 1 [0131.212] wcscmp (_String1="VISIO", _String2="..") returned 1 [0131.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3dfa108 [0131.212] wcscpy (in: _Dest=0x3dfa108, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.212] wcscat (in: _Dest=0x3dfa108, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.212] wcscat (in: _Dest=0x3dfa108, _Source="VISIO" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO") returned="C:\\ProgramData\\Microsoft\\VISIO" [0131.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0131.214] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0131.214] wcscmp (_String1="Windows", _String2=".") returned 1 [0131.214] wcscmp (_String1="Windows", _String2="..") returned 1 [0131.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5e88 [0131.214] wcscpy (in: _Dest=0x3de5e88, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.214] wcscat (in: _Dest=0x3de5e88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.214] wcscat (in: _Dest=0x3de5e88, _Source="Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0131.216] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x8fa22600, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0x8fa22600, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0131.216] wcscmp (_String1="Windows Defender", _String2=".") returned 1 [0131.216] wcscmp (_String1="Windows Defender", _String2="..") returned 1 [0131.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1d48 [0131.216] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.216] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.216] wcscat (in: _Dest=0x2fe1d48, _Source="Windows Defender" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender") returned="C:\\ProgramData\\Microsoft\\Windows Defender" [0131.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 [0131.216] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0131.216] wcscmp (_String1="Windows NT", _String2=".") returned 1 [0131.216] wcscmp (_String1="Windows NT", _String2="..") returned 1 [0131.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6518 [0131.216] wcscpy (in: _Dest=0x3de6518, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.217] wcscat (in: _Dest=0x3de6518, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.217] wcscat (in: _Dest=0x3de6518, _Source="Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0131.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0131.218] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0131.218] wcscmp (_String1="WwanSvc", _String2=".") returned 1 [0131.218] wcscmp (_String1="WwanSvc", _String2="..") returned 1 [0131.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5bb8 [0131.218] wcscpy (in: _Dest=0x3de5bb8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.218] wcscat (in: _Dest=0x3de5bb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.218] wcscat (in: _Dest=0x3de5bb8, _Source="WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0131.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0131.220] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0132.010] FindClose (in: hFindFile=0x3e54ac8 | out: hFindFile=0x3e54ac8) returned 1 [0132.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0132.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54c88) returned 1 [0132.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54a08) returned 1 Thread: id = 142 os_tid = 0xa80 [0130.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9ec8 [0130.576] wcscpy (in: _Dest=0x3df9ec8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0130.576] wcscat (in: _Dest=0x3df9ec8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0130.576] wcscat (in: _Dest=0x3df9ec8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft Help\\*") returned="C:\\ProgramData\\Microsoft Help\\*" [0130.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0130.577] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0133.544] wcscmp (_String1=".", _String2=".") returned 0 [0133.544] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.328] wcscmp (_String1="..", _String2=".") returned 1 [0134.328] wcscmp (_String1="..", _String2="..") returned 0 [0134.328] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa5d70f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d70f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0134.328] wcscmp (_String1="Hx.hxn", _String2=".") returned 1 [0134.328] wcscmp (_String1="Hx.hxn", _String2="..") returned 1 [0134.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6ee30 [0134.328] wcscpy (in: _Dest=0x3e6ee30, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.328] wcscat (in: _Dest=0x3e6ee30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.328] wcscat (in: _Dest=0x3e6ee30, _Source="Hx.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx.hxn") returned="C:\\ProgramData\\Microsoft Help\\Hx.hxn" [0140.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e6ee30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0140.907] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1659930, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_K.HxW", cAlternateFileName="HX_103~1.HXW")) returned 1 [0140.907] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2=".") returned 1 [0140.907] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2="..") returned 1 [0140.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8054ee0 [0140.907] wcscpy (in: _Dest=0x8054ee0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.907] wcscat (in: _Dest=0x8054ee0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.907] wcscat (in: _Dest=0x8054ee0, _Source="Hx_1033_MKWD_K.HxW" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW" [0140.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8 [0140.908] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1ed4790, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_NamedURL.HxW", cAlternateFileName="HX_103~2.HXW")) returned 1 [0140.908] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2=".") returned 1 [0140.908] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2="..") returned 1 [0140.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32958 [0140.908] wcscpy (in: _Dest=0x3f32958, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.908] wcscat (in: _Dest=0x3f32958, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.908] wcscat (in: _Dest=0x3f32958, _Source="Hx_1033_MKWD_NamedURL.HxW" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" [0140.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0140.909] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0fcdcb0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MTOC_Hx.HxH", cAlternateFileName="HX_103~1.HXH")) returned 1 [0140.909] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2=".") returned 1 [0140.910] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2="..") returned 1 [0140.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8055260 [0140.910] wcscpy (in: _Dest=0x8055260, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.910] wcscat (in: _Dest=0x8055260, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.910] wcscat (in: _Dest=0x8055260, _Source="Hx_1033_MTOC_Hx.HxH" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" [0140.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8055260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0140.911] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe343ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe343ca50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x25a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.HxD", cAlternateFileName="HX_103~1.HXD")) returned 1 [0140.911] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2=".") returned 1 [0140.911] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2="..") returned 1 [0140.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32430 [0140.911] wcscpy (in: _Dest=0x3f32430, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.911] wcscat (in: _Dest=0x3f32430, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.911] wcscat (in: _Dest=0x3f32430, _Source="Hx_1033_MValidator.HxD" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD" [0140.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0140.912] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.Lck", cAlternateFileName="HX_103~1.LCK")) returned 1 [0140.912] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2=".") returned 1 [0140.912] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2="..") returned 1 [0140.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67d90 [0140.912] wcscpy (in: _Dest=0x3e67d90, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.912] wcscat (in: _Dest=0x3e67d90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.912] wcscat (in: _Dest=0x3e67d90, _Source="Hx_1033_MValidator.Lck" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck" [0140.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0140.914] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43513230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43513230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0140.914] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2=".") returned 1 [0140.914] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2="..") returned 1 [0140.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x80552d0 [0140.914] wcscpy (in: _Dest=0x80552d0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.914] wcscat (in: _Dest=0x80552d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.914] wcscat (in: _Dest=0x80552d0, _Source="MS.EXCEL.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" [0140.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80552d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0140.915] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43539390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43539390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0140.915] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2=".") returned 1 [0140.915] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2="..") returned 1 [0140.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68ab0 [0140.915] wcscpy (in: _Dest=0x3e68ab0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.915] wcscat (in: _Dest=0x3e68ab0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.915] wcscat (in: _Dest=0x3e68ab0, _Source="MS.EXCEL.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" [0140.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0140.916] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0140.916] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2=".") returned 1 [0140.916] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2="..") returned 1 [0140.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8054d90 [0140.916] wcscpy (in: _Dest=0x8054d90, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.916] wcscat (in: _Dest=0x8054d90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.916] wcscat (in: _Dest=0x8054d90, _Source="MS.GRAPH.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" [0140.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0140.917] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x46aa2130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x46aa2130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46bd2c30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0140.917] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2=".") returned 1 [0140.917] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2="..") returned 1 [0140.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054cb0 [0140.918] wcscpy (in: _Dest=0x8054cb0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.918] wcscat (in: _Dest=0x8054cb0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.918] wcscat (in: _Dest=0x8054cb0, _Source="MS.GROOVE.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" [0140.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0140.919] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0140.919] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2=".") returned 1 [0140.919] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2="..") returned 1 [0140.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e67d18 [0140.919] wcscpy (in: _Dest=0x3e67d18, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.919] wcscat (in: _Dest=0x3e67d18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.919] wcscat (in: _Dest=0x3e67d18, _Source="MS.INFOPATH.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" [0140.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0140.920] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0140.920] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2=".") returned 1 [0140.920] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2="..") returned 1 [0140.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0008 [0140.920] wcscpy (in: _Dest=0x3db0008, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.920] wcscat (in: _Dest=0x3db0008, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.920] wcscat (in: _Dest=0x3db0008, _Source="MS.INFOPATHEDITOR.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" [0140.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0140.921] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0140.921] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2=".") returned 1 [0140.921] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2="..") returned 1 [0140.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68ba0 [0140.921] wcscpy (in: _Dest=0x3e68ba0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.921] wcscat (in: _Dest=0x3e68ba0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.921] wcscat (in: _Dest=0x3e68ba0, _Source="MS.MSACCESS.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" [0140.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0140.922] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0140.922] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2=".") returned 1 [0140.922] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2="..") returned 1 [0140.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dafa08 [0140.923] wcscpy (in: _Dest=0x3dafa08, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.923] wcscat (in: _Dest=0x3dafa08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.923] wcscat (in: _Dest=0x3dafa08, _Source="MS.MSACCESS.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" [0140.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dafa08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0140.924] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3639a230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3639a230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0140.924] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2=".") returned 1 [0140.924] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2="..") returned 1 [0140.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8055340 [0140.924] wcscpy (in: _Dest=0x8055340, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.924] wcscat (in: _Dest=0x8055340, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.924] wcscat (in: _Dest=0x8055340, _Source="MS.MSOUC.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" [0140.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8055340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0140.925] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0140.925] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2=".") returned 1 [0140.925] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2="..") returned 1 [0140.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x80553b0 [0140.925] wcscpy (in: _Dest=0x80553b0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.925] wcscat (in: _Dest=0x80553b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.926] wcscat (in: _Dest=0x80553b0, _Source="MS.MSPUB.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" [0140.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80553b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0140.927] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0140.927] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2=".") returned 1 [0140.927] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2="..") returned 1 [0140.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68b28 [0140.927] wcscpy (in: _Dest=0x3e68b28, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.927] wcscat (in: _Dest=0x3e68b28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.927] wcscat (in: _Dest=0x3e68b28, _Source="MS.MSPUB.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" [0140.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0140.928] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35f6fbb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35f6fbb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0140.928] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2=".") returned 1 [0140.928] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2="..") returned 1 [0140.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8055420 [0140.928] wcscpy (in: _Dest=0x8055420, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.928] wcscat (in: _Dest=0x8055420, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.928] wcscat (in: _Dest=0x8055420, _Source="MS.MSTORE.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" [0140.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8055420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0140.929] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x362dbb50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x362dbb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0140.929] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2=".") returned 1 [0140.929] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2="..") returned 1 [0140.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8055490 [0140.929] wcscpy (in: _Dest=0x8055490, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.929] wcscat (in: _Dest=0x8055490, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.929] wcscat (in: _Dest=0x8055490, _Source="MS.OIS.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" [0140.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8055490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0140.930] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x555fe070, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x555fe070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5564a330, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0140.930] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2=".") returned 1 [0140.930] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2="..") returned 1 [0140.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67e08 [0140.931] wcscpy (in: _Dest=0x3e67e08, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.931] wcscat (in: _Dest=0x3e67e08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.931] wcscat (in: _Dest=0x3e67e08, _Source="MS.ONENOTE.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" [0140.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0140.932] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0140.932] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2=".") returned 1 [0140.932] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2="..") returned 1 [0140.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67e80 [0140.932] wcscpy (in: _Dest=0x3e67e80, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.932] wcscat (in: _Dest=0x3e67e80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.932] wcscat (in: _Dest=0x3e67e80, _Source="MS.OUTLOOK.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" [0140.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0140.933] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0140.933] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2=".") returned 1 [0140.933] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2="..") returned 1 [0140.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3daf208 [0140.933] wcscpy (in: _Dest=0x3daf208, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.933] wcscat (in: _Dest=0x3daf208, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.933] wcscat (in: _Dest=0x3daf208, _Source="MS.OUTLOOK.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" [0140.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3daf208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0140.934] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e281710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0140.934] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2=".") returned 1 [0140.934] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2="..") returned 1 [0140.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e67f70 [0140.934] wcscpy (in: _Dest=0x3e67f70, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.935] wcscat (in: _Dest=0x3e67f70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.935] wcscat (in: _Dest=0x3e67f70, _Source="MS.POWERPNT.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" [0140.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0140.936] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ec06f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0140.936] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2=".") returned 1 [0140.936] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2="..") returned 1 [0140.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3db0f88 [0140.936] wcscpy (in: _Dest=0x3db0f88, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.936] wcscat (in: _Dest=0x3db0f88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.936] wcscat (in: _Dest=0x3db0f88, _Source="MS.POWERPNT.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" [0140.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db0f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0140.937] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x36327e10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x36327e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0140.937] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2=".") returned 1 [0140.937] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2="..") returned 1 [0140.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67ef8 [0140.937] wcscpy (in: _Dest=0x3e67ef8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.937] wcscat (in: _Dest=0x3e67ef8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.937] wcscat (in: _Dest=0x3e67ef8, _Source="MS.SETLANG.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" [0140.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0140.938] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa723f470, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa723f470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa75852b0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0140.938] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2=".") returned 1 [0140.938] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2="..") returned 1 [0140.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8055500 [0140.938] wcscpy (in: _Dest=0x8055500, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.938] wcscat (in: _Dest=0x8055500, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.938] wcscat (in: _Dest=0x8055500, _Source="MS.VISIO.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" [0140.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8055500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0140.939] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa780ca10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0140.939] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2=".") returned 1 [0140.939] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2="..") returned 1 [0140.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e689c0 [0140.939] wcscpy (in: _Dest=0x3e689c0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.940] wcscat (in: _Dest=0x3e689c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.940] wcscat (in: _Dest=0x3e689c0, _Source="MS.VISIO.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" [0140.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e689c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0140.940] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa79fbbf0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0140.940] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2=".") returned 1 [0140.940] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2="..") returned 1 [0140.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fda8 [0140.941] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.941] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.941] wcscat (in: _Dest=0x3f2fda8, _Source="MS.VISIO.SHAPESHEET.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" [0140.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0140.942] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa7a21d50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0140.942] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2=".") returned 1 [0140.942] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2="..") returned 1 [0140.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68a38 [0140.942] wcscpy (in: _Dest=0x3e68a38, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.942] wcscat (in: _Dest=0x3e68a38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.942] wcscat (in: _Dest=0x3e68a38, _Source="MS.VISIO_PRM.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" [0140.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0141.514] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa77281d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0141.514] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2=".") returned 1 [0141.514] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2="..") returned 1 [0141.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32e08 [0141.514] wcscpy (in: _Dest=0x3f32e08, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.514] wcscat (in: _Dest=0x3f32e08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.514] wcscat (in: _Dest=0x3f32e08, _Source="MS.VISIO_STD.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" [0144.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0144.271] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99cf35d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0144.271] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2=".") returned 1 [0144.271] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2="..") returned 1 [0144.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32ac0 [0144.271] wcscpy (in: _Dest=0x3f32ac0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0144.271] wcscat (in: _Dest=0x3f32ac0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0144.271] wcscat (in: _Dest=0x3f32ac0, _Source="MS.WINPROJ.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" [0144.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0144.272] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99d3f890, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0144.272] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2=".") returned 1 [0144.272] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2="..") returned 1 [0144.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6770 [0144.272] wcscpy (in: _Dest=0x3da6770, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0144.272] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0144.272] wcscat (in: _Dest=0x3da6770, _Source="MS.WINPROJ.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" [0144.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3da6770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0144.274] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x649ec510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0144.274] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2=".") returned 1 [0144.274] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2="..") returned 1 [0144.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0bb68 [0144.274] wcscpy (in: _Dest=0x3f0bb68, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0144.274] wcscat (in: _Dest=0x3f0bb68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0144.274] wcscat (in: _Dest=0x3f0bb68, _Source="MS.WINWORD.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" [0144.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0bb68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0144.278] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64a12670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0144.278] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2=".") returned 1 [0144.278] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2="..") returned 1 [0144.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6570 [0144.279] wcscpy (in: _Dest=0x3da6570, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0144.279] wcscat (in: _Dest=0x3da6570, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0144.279] wcscat (in: _Dest=0x3da6570, _Source="MS.WINWORD.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" [0144.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3da6570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0144.280] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0144.280] wcscmp (_String1="nslist.hxl", _String2=".") returned 1 [0144.280] wcscmp (_String1="nslist.hxl", _String2="..") returned 1 [0144.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe66c8 [0144.280] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0144.280] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0144.280] wcscat (in: _Dest=0x2fe66c8, _Source="nslist.hxl" | out: _Dest="C:\\ProgramData\\Microsoft Help\\nslist.hxl") returned="C:\\ProgramData\\Microsoft Help\\nslist.hxl" [0144.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0144.282] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0145.228] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0145.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0145.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9ec8) returned 1 [0145.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa1e0) returned 1 Thread: id = 143 os_tid = 0xa90 [0130.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df78a8 [0130.577] wcscpy (in: _Dest=0x3df78a8, _Source="C:\\ProgramData\\Oracle" | out: _Dest="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle" [0130.577] wcscat (in: _Dest=0x3df78a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\") returned="C:\\ProgramData\\Oracle\\" [0130.577] wcscat (in: _Dest=0x3df78a8, _Source="*" | out: _Dest="C:\\ProgramData\\Oracle\\*") returned="C:\\ProgramData\\Oracle\\*" [0130.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0130.578] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a98 [0132.507] wcscmp (_String1=".", _String2=".") returned 0 [0132.507] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.507] wcscmp (_String1="..", _String2=".") returned 1 [0132.507] wcscmp (_String1="..", _String2="..") returned 0 [0132.507] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.507] FindClose (in: hFindFile=0x3f37a98 | out: hFindFile=0x3f37a98) returned 1 [0132.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0132.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78a8) returned 1 [0132.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78e0) returned 1 Thread: id = 144 os_tid = 0xaa0 [0130.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3df9e80 [0130.578] wcscpy (in: _Dest=0x3df9e80, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.578] wcscat (in: _Dest=0x3df9e80, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.578] wcscat (in: _Dest=0x3df9e80, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\*") returned="C:\\ProgramData\\Package Cache\\*" [0130.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0130.579] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0130.581] wcscmp (_String1=".", _String2=".") returned 0 [0130.581] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.581] wcscmp (_String1="..", _String2=".") returned 1 [0130.581] wcscmp (_String1="..", _String2="..") returned 0 [0130.581] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="564F02E6419B9858949B0CD5A65E2C8C0944DD88", cAlternateFileName="564F02~1")) returned 1 [0130.581] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2=".") returned 1 [0130.581] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2="..") returned 1 [0130.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ae20 [0130.581] wcscpy (in: _Dest=0x3e2ae20, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.582] wcscat (in: _Dest=0x3e2ae20, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.582] wcscat (in: _Dest=0x3e2ae20, _Source="564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0130.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2ae20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0130.773] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D4036846864773E3D647F421DFE7F6CA536E307B", cAlternateFileName="D40368~1")) returned 1 [0130.773] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2=".") returned 1 [0130.773] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2="..") returned 1 [0130.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a240 [0130.773] wcscpy (in: _Dest=0x3e2a240, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.773] wcscat (in: _Dest=0x3e2a240, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.773] wcscat (in: _Dest=0x3e2a240, _Source="D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0130.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2a240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0130.775] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0130.775] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2=".") returned 1 [0130.775] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2="..") returned 1 [0130.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2cf48 [0130.776] wcscpy (in: _Dest=0x3e2cf48, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.776] wcscat (in: _Dest=0x3e2cf48, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.776] wcscat (in: _Dest=0x3e2cf48, _Source="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0130.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0130.778] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0130.778] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2=".") returned 1 [0130.778] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2="..") returned 1 [0130.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2888 [0130.778] wcscpy (in: _Dest=0x3df2888, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.778] wcscat (in: _Dest=0x3df2888, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.778] wcscat (in: _Dest=0x3df2888, _Source="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0130.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df2888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0130.780] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0130.780] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2=".") returned 1 [0130.780] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2="..") returned 1 [0130.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2cff0 [0130.780] wcscpy (in: _Dest=0x3e2cff0, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.781] wcscat (in: _Dest=0x3e2cff0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.781] wcscat (in: _Dest=0x3e2cff0, _Source="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0130.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0130.783] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0130.783] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2=".") returned 1 [0130.783] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2="..") returned 1 [0130.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d098 [0130.783] wcscpy (in: _Dest=0x3e2d098, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.783] wcscat (in: _Dest=0x3e2d098, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.783] wcscat (in: _Dest=0x3e2d098, _Source="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0130.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0130.785] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0130.785] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2=".") returned 1 [0130.785] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2="..") returned 1 [0130.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d140 [0130.785] wcscpy (in: _Dest=0x3e2d140, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.786] wcscat (in: _Dest=0x3e2d140, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.786] wcscat (in: _Dest=0x3e2d140, _Source="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0130.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0130.787] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0130.787] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2=".") returned 1 [0130.787] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2="..") returned 1 [0130.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d1e8 [0130.787] wcscpy (in: _Dest=0x3e2d1e8, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.788] wcscat (in: _Dest=0x3e2d1e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.788] wcscat (in: _Dest=0x3e2d1e8, _Source="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0130.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0130.789] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0130.789] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2=".") returned 1 [0130.789] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2="..") returned 1 [0130.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1d48 [0130.790] wcscpy (in: _Dest=0x3df1d48, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.790] wcscat (in: _Dest=0x3df1d48, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.790] wcscat (in: _Dest=0x3df1d48, _Source="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0130.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0130.791] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0130.792] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2=".") returned 1 [0130.792] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2="..") returned 1 [0130.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2408 [0130.792] wcscpy (in: _Dest=0x3df2408, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.792] wcscat (in: _Dest=0x3df2408, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.792] wcscat (in: _Dest=0x3df2408, _Source="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0130.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df2408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0130.794] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0130.794] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2=".") returned 1 [0130.794] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2="..") returned 1 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d290 [0130.794] wcscpy (in: _Dest=0x3e2d290, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0130.795] wcscat (in: _Dest=0x3e2d290, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0130.795] wcscat (in: _Dest=0x3e2d290, _Source="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0130.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0130.796] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0130.796] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0130.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0130.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9e80) returned 1 [0130.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa108) returned 1 Thread: id = 145 os_tid = 0xab0 [0130.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e54d08 [0130.582] wcscpy (in: _Dest=0x3e54d08, _Source="C:\\ProgramData\\Start Menu" | out: _Dest="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0130.583] wcscat (in: _Dest=0x3e54d08, _Source="\\" | out: _Dest="C:\\ProgramData\\Start Menu\\") returned="C:\\ProgramData\\Start Menu\\" [0130.583] wcscat (in: _Dest=0x3e54d08, _Source="*" | out: _Dest="C:\\ProgramData\\Start Menu\\*") returned="C:\\ProgramData\\Start Menu\\*" [0130.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0130.583] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0131.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54d08) returned 1 [0131.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54cc8) returned 1 Thread: id = 146 os_tid = 0xad8 [0130.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7ad8 [0130.584] wcscpy (in: _Dest=0x3df7ad8, _Source="C:\\ProgramData\\Sun" | out: _Dest="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0130.584] wcscat (in: _Dest=0x3df7ad8, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\") returned="C:\\ProgramData\\Sun\\" [0130.584] wcscat (in: _Dest=0x3df7ad8, _Source="*" | out: _Dest="C:\\ProgramData\\Sun\\*") returned="C:\\ProgramData\\Sun\\*" [0130.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0130.584] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ad8 [0132.511] wcscmp (_String1=".", _String2=".") returned 0 [0132.511] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.511] wcscmp (_String1="..", _String2=".") returned 1 [0132.511] wcscmp (_String1="..", _String2="..") returned 0 [0132.511] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0132.511] wcscmp (_String1="Java", _String2=".") returned 1 [0132.511] wcscmp (_String1="Java", _String2="..") returned 1 [0132.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df78e0 [0132.511] wcscpy (in: _Dest=0x3df78e0, _Source="C:\\ProgramData\\Sun" | out: _Dest="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0132.511] wcscat (in: _Dest=0x3df78e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\") returned="C:\\ProgramData\\Sun\\" [0132.511] wcscat (in: _Dest=0x3df78e0, _Source="Java" | out: _Dest="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java" [0138.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df78e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0138.955] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0138.955] FindClose (in: hFindFile=0x3f37ad8 | out: hFindFile=0x3f37ad8) returned 1 [0138.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0138.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7ad8) returned 1 [0138.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 Thread: id = 147 os_tid = 0xad4 [0130.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e55008 [0130.585] wcscpy (in: _Dest=0x3e55008, _Source="C:\\ProgramData\\Templates" | out: _Dest="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0130.585] wcscat (in: _Dest=0x3e55008, _Source="\\" | out: _Dest="C:\\ProgramData\\Templates\\") returned="C:\\ProgramData\\Templates\\" [0130.586] wcscat (in: _Dest=0x3e55008, _Source="*" | out: _Dest="C:\\ProgramData\\Templates\\*") returned="C:\\ProgramData\\Templates\\*" [0130.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0130.586] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0131.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55008) returned 1 [0131.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b88) returned 1 Thread: id = 148 os_tid = 0xac8 [0130.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df79c0 [0130.638] wcscpy (in: _Dest=0x3df79c0, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0130.638] wcscat (in: _Dest=0x3df79c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0130.639] wcscat (in: _Dest=0x3df79c0, _Source="*" | out: _Dest="C:\\Users\\All Users\\*") returned="C:\\Users\\All Users\\*" [0130.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0130.639] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0131.983] wcscmp (_String1=".", _String2=".") returned 0 [0131.983] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.508] wcscmp (_String1="..", _String2=".") returned 1 [0132.508] wcscmp (_String1="..", _String2="..") returned 0 [0132.508] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0132.508] wcscmp (_String1="Adobe", _String2=".") returned 1 [0132.508] wcscmp (_String1="Adobe", _String2="..") returned 1 [0132.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f37a98 [0132.508] wcscpy (in: _Dest=0x3f37a98, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.508] wcscat (in: _Dest=0x3f37a98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.508] wcscat (in: _Dest=0x3f37a98, _Source="Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe" [0133.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f37a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0133.648] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0133.648] wcscmp (_String1="Application Data", _String2=".") returned 1 [0133.648] wcscmp (_String1="Application Data", _String2="..") returned 1 [0133.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de62e8 [0133.648] wcscpy (in: _Dest=0x3de62e8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.648] wcscat (in: _Dest=0x3de62e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.648] wcscat (in: _Dest=0x3de62e8, _Source="Application Data" | out: _Dest="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data" [0133.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de62e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0133.650] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0133.650] wcscmp (_String1="Desktop", _String2=".") returned 1 [0133.650] wcscmp (_String1="Desktop", _String2="..") returned 1 [0133.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37a58 [0133.650] wcscpy (in: _Dest=0x3f37a58, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.650] wcscat (in: _Dest=0x3f37a58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.650] wcscat (in: _Dest=0x3f37a58, _Source="Desktop" | out: _Dest="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop" [0133.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f37a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0133.651] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0133.651] wcscmp (_String1="Documents", _String2=".") returned 1 [0133.651] wcscmp (_String1="Documents", _String2="..") returned 1 [0133.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e6aae8 [0133.652] wcscpy (in: _Dest=0x3e6aae8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.652] wcscat (in: _Dest=0x3e6aae8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.652] wcscat (in: _Dest=0x3e6aae8, _Source="Documents" | out: _Dest="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents" [0133.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6aae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0133.653] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0133.653] wcscmp (_String1="Favorites", _String2=".") returned 1 [0133.653] wcscmp (_String1="Favorites", _String2="..") returned 1 [0133.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e6a668 [0133.653] wcscpy (in: _Dest=0x3e6a668, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.653] wcscat (in: _Dest=0x3e6a668, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.653] wcscat (in: _Dest=0x3e6a668, _Source="Favorites" | out: _Dest="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites" [0133.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6a668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0133.654] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0133.655] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0133.655] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0133.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e6a038 [0133.655] wcscpy (in: _Dest=0x3e6a038, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.655] wcscat (in: _Dest=0x3e6a038, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.655] wcscat (in: _Dest=0x3e6a038, _Source="Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0133.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0133.656] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0133.656] wcscmp (_String1="Microsoft Help", _String2=".") returned 1 [0133.656] wcscmp (_String1="Microsoft Help", _String2="..") returned 1 [0133.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6338 [0133.656] wcscpy (in: _Dest=0x3de6338, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.656] wcscat (in: _Dest=0x3de6338, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.656] wcscat (in: _Dest=0x3de6338, _Source="Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0133.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0133.658] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74b72710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x74b72710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x74b72710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0133.658] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0133.658] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0133.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37a18 [0133.658] wcscpy (in: _Dest=0x3f37a18, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.658] wcscat (in: _Dest=0x3f37a18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.658] wcscat (in: _Dest=0x3f37a18, _Source="Mozilla" | out: _Dest="C:\\Users\\All Users\\Mozilla") returned="C:\\Users\\All Users\\Mozilla" [0133.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37a18) returned 1 [0133.658] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0133.658] wcscmp (_String1="Oracle", _String2=".") returned 1 [0133.658] wcscmp (_String1="Oracle", _String2="..") returned 1 [0133.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f37a18 [0133.658] wcscpy (in: _Dest=0x3f37a18, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.659] wcscat (in: _Dest=0x3f37a18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.659] wcscat (in: _Dest=0x3f37a18, _Source="Oracle" | out: _Dest="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle" [0133.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f37a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0133.660] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0133.660] wcscmp (_String1="Package Cache", _String2=".") returned 1 [0133.660] wcscmp (_String1="Package Cache", _String2="..") returned 1 [0133.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6ab8 [0133.660] wcscpy (in: _Dest=0x3de6ab8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.660] wcscat (in: _Dest=0x3de6ab8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.660] wcscat (in: _Dest=0x3de6ab8, _Source="Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0133.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0133.661] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0133.661] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0133.661] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0133.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e69fa8 [0133.662] wcscpy (in: _Dest=0x3e69fa8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.662] wcscat (in: _Dest=0x3e69fa8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.662] wcscat (in: _Dest=0x3e69fa8, _Source="Start Menu" | out: _Dest="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu" [0133.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e69fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0133.663] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0133.663] wcscmp (_String1="Sun", _String2=".") returned 1 [0133.663] wcscmp (_String1="Sun", _String2="..") returned 1 [0133.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77ad0 [0133.663] wcscpy (in: _Dest=0x3e77ad0, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.663] wcscat (in: _Dest=0x3e77ad0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.663] wcscat (in: _Dest=0x3e77ad0, _Source="Sun" | out: _Dest="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun" [0133.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e77ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0133.664] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0133.664] wcscmp (_String1="Templates", _String2=".") returned 1 [0133.664] wcscmp (_String1="Templates", _String2="..") returned 1 [0133.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e6a0c8 [0133.665] wcscpy (in: _Dest=0x3e6a0c8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0133.665] wcscat (in: _Dest=0x3e6a0c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0133.665] wcscat (in: _Dest=0x3e6a0c8, _Source="Templates" | out: _Dest="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates" [0133.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6a0c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0133.666] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0133.666] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0133.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0133.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0133.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41d8) returned 1 Thread: id = 149 os_tid = 0xac4 [0130.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df42f8 [0130.642] wcscpy (in: _Dest=0x3df42f8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.642] wcscat (in: _Dest=0x3df42f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.642] wcscat (in: _Dest=0x3df42f8, _Source="*" | out: _Dest="C:\\Users\\Default\\*") returned="C:\\Users\\Default\\*" [0130.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0130.642] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x6bd02b0, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0130.643] wcscmp (_String1=".", _String2=".") returned 0 [0130.643] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x6bd02b0, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.643] wcscmp (_String1="..", _String2=".") returned 1 [0130.643] wcscmp (_String1="..", _String2="..") returned 0 [0130.643] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0130.643] wcscmp (_String1="AppData", _String2=".") returned 1 [0130.643] wcscmp (_String1="AppData", _String2="..") returned 1 [0130.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066b40 [0130.644] wcscpy (in: _Dest=0x3066b40, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.644] wcscat (in: _Dest=0x3066b40, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.644] wcscat (in: _Dest=0x3066b40, _Source="AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0130.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0130.810] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175c6d1c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175c6d1c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175c6d1c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0130.810] wcscmp (_String1="Application Data", _String2=".") returned 1 [0130.810] wcscmp (_String1="Application Data", _String2="..") returned 1 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6018 [0130.810] wcscpy (in: _Dest=0x3de6018, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.810] wcscat (in: _Dest=0x3de6018, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.810] wcscat (in: _Dest=0x3de6018, _Source="Application Data" | out: _Dest="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data" [0130.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0130.812] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0130.812] wcscmp (_String1="Contacts", _String2=".") returned 1 [0130.812] wcscmp (_String1="Contacts", _String2="..") returned 1 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066e80 [0130.812] wcscpy (in: _Dest=0x3066e80, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.812] wcscat (in: _Dest=0x3066e80, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.812] wcscat (in: _Dest=0x3066e80, _Source="Contacts" | out: _Dest="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts" [0130.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0130.814] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0130.814] wcscmp (_String1="Cookies", _String2=".") returned 1 [0130.814] wcscmp (_String1="Cookies", _String2="..") returned 1 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066f00 [0130.814] wcscpy (in: _Dest=0x3066f00, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.814] wcscat (in: _Dest=0x3066f00, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.814] wcscat (in: _Dest=0x3066f00, _Source="Cookies" | out: _Dest="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies" [0130.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0130.816] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0130.816] wcscmp (_String1="Desktop", _String2=".") returned 1 [0130.816] wcscmp (_String1="Desktop", _String2="..") returned 1 [0130.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066dc0 [0130.816] wcscpy (in: _Dest=0x3066dc0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.816] wcscat (in: _Dest=0x3066dc0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.816] wcscat (in: _Dest=0x3066dc0, _Source="Desktop" | out: _Dest="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop" [0130.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0130.818] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0130.818] wcscmp (_String1="Documents", _String2=".") returned 1 [0130.818] wcscmp (_String1="Documents", _String2="..") returned 1 [0130.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066e40 [0130.818] wcscpy (in: _Dest=0x3066e40, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.818] wcscat (in: _Dest=0x3066e40, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.818] wcscat (in: _Dest=0x3066e40, _Source="Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0130.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0130.819] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0130.819] wcscmp (_String1="Downloads", _String2=".") returned 1 [0130.820] wcscmp (_String1="Downloads", _String2="..") returned 1 [0130.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066e00 [0130.820] wcscpy (in: _Dest=0x3066e00, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.820] wcscat (in: _Dest=0x3066e00, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.820] wcscat (in: _Dest=0x3066e00, _Source="Downloads" | out: _Dest="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads" [0130.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0130.822] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0130.822] wcscmp (_String1="Favorites", _String2=".") returned 1 [0130.822] wcscmp (_String1="Favorites", _String2="..") returned 1 [0130.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066d40 [0130.822] wcscpy (in: _Dest=0x3066d40, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.822] wcscat (in: _Dest=0x3066d40, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.822] wcscat (in: _Dest=0x3066d40, _Source="Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0130.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0130.824] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0130.824] wcscmp (_String1="Links", _String2=".") returned 1 [0130.824] wcscmp (_String1="Links", _String2="..") returned 1 [0130.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df7e90 [0130.824] wcscpy (in: _Dest=0x3df7e90, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.824] wcscat (in: _Dest=0x3df7e90, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.825] wcscat (in: _Dest=0x3df7e90, _Source="Links" | out: _Dest="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links" [0130.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df7e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0130.826] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0130.826] wcscmp (_String1="Local Settings", _String2=".") returned 1 [0130.826] wcscmp (_String1="Local Settings", _String2="..") returned 1 [0130.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a788 [0130.827] wcscpy (in: _Dest=0x3e6a788, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.827] wcscat (in: _Dest=0x3e6a788, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.827] wcscat (in: _Dest=0x3e6a788, _Source="Local Settings" | out: _Dest="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings" [0130.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6a788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0130.828] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0130.828] wcscmp (_String1="Music", _String2=".") returned 1 [0130.828] wcscmp (_String1="Music", _String2="..") returned 1 [0130.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df79f8 [0130.829] wcscpy (in: _Dest=0x3df79f8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.829] wcscat (in: _Dest=0x3df79f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.829] wcscat (in: _Dest=0x3df79f8, _Source="Music" | out: _Dest="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music" [0130.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df79f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0130.831] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0130.831] wcscmp (_String1="My Documents", _String2=".") returned 1 [0130.831] wcscmp (_String1="My Documents", _String2="..") returned 1 [0130.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e6a8f0 [0130.831] wcscpy (in: _Dest=0x3e6a8f0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.831] wcscat (in: _Dest=0x3e6a8f0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.831] wcscat (in: _Dest=0x3e6a8f0, _Source="My Documents" | out: _Dest="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents" [0130.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6a8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0130.833] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0130.833] wcscmp (_String1="NetHood", _String2=".") returned 1 [0130.833] wcscmp (_String1="NetHood", _String2="..") returned 1 [0130.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066b00 [0130.833] wcscpy (in: _Dest=0x3066b00, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.834] wcscat (in: _Dest=0x3066b00, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.834] wcscat (in: _Dest=0x3066b00, _Source="NetHood" | out: _Dest="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood" [0130.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0130.836] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4ef6cd7a, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xe87815c0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0x7b6f310, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0130.836] wcscmp (_String1="NTUSER.DAT", _String2=".") returned 1 [0130.836] wcscmp (_String1="NTUSER.DAT", _String2="..") returned 1 [0130.836] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4c6063a4, ftCreationTime.dwHighDateTime=0x1ca0453, ftLastAccessTime.dwLowDateTime=0x82363a0a, ftLastAccessTime.dwHighDateTime=0x1ca0458, ftLastWriteTime.dwLowDateTime=0x82389c62, ftLastWriteTime.dwHighDateTime=0x1ca0458, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0130.836] wcscmp (_String1="NTUSER.DAT.LOG", _String2=".") returned 1 [0130.836] wcscmp (_String1="NTUSER.DAT.LOG", _String2="..") returned 1 [0130.836] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4ef6cd7a, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x4ef6cd7a, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xe862a960, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x30400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0130.836] wcscmp (_String1="NTUSER.DAT.LOG1", _String2=".") returned 1 [0130.836] wcscmp (_String1="NTUSER.DAT.LOG1", _String2="..") returned 1 [0130.836] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4ef6cd7a, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x4ef6cd7a, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x4ef6cd7a, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0130.836] wcscmp (_String1="NTUSER.DAT.LOG2", _String2=".") returned 1 [0130.837] wcscmp (_String1="NTUSER.DAT.LOG2", _String2="..") returned 1 [0130.837] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5bbcea65, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0x5bbcea65, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x5bfd2f8c, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0130.837] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2=".") returned 1 [0130.837] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2="..") returned 1 [0130.837] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5bc8d146, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0x5bc8d146, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x5bface2c, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0130.837] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2=".") returned 1 [0130.837] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2="..") returned 1 [0130.837] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5bd71988, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0x5bd71988, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x5bfd2f8c, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0130.837] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2=".") returned 1 [0130.837] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2="..") returned 1 [0130.837] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6baa150, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0130.837] wcscmp (_String1="ntuser.ini", _String2=".") returned 1 [0130.837] wcscmp (_String1="ntuser.ini", _String2="..") returned 1 [0130.837] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0130.838] wcscmp (_String1="Pictures", _String2=".") returned 1 [0130.838] wcscmp (_String1="Pictures", _String2="..") returned 1 [0130.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066d80 [0130.838] wcscpy (in: _Dest=0x3066d80, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.838] wcscat (in: _Dest=0x3066d80, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.838] wcscat (in: _Dest=0x3066d80, _Source="Pictures" | out: _Dest="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures" [0130.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0130.840] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0130.840] wcscmp (_String1="PrintHood", _String2=".") returned 1 [0130.840] wcscmp (_String1="PrintHood", _String2="..") returned 1 [0130.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067040 [0130.840] wcscpy (in: _Dest=0x3067040, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.840] wcscat (in: _Dest=0x3067040, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.840] wcscat (in: _Dest=0x3067040, _Source="PrintHood" | out: _Dest="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood" [0130.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3067040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0130.841] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0130.841] wcscmp (_String1="Recent", _String2=".") returned 1 [0130.841] wcscmp (_String1="Recent", _String2="..") returned 1 [0130.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df7988 [0130.841] wcscpy (in: _Dest=0x3df7988, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.842] wcscat (in: _Dest=0x3df7988, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.842] wcscat (in: _Dest=0x3df7988, _Source="Recent" | out: _Dest="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent" [0130.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df7988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0130.843] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0130.843] wcscmp (_String1="Saved Games", _String2=".") returned 1 [0130.843] wcscmp (_String1="Saved Games", _String2="..") returned 1 [0130.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e6a158 [0130.843] wcscpy (in: _Dest=0x3e6a158, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0130.843] wcscat (in: _Dest=0x3e6a158, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0130.843] wcscat (in: _Dest=0x3e6a158, _Source="Saved Games" | out: _Dest="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games" [0130.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6a158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0131.069] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0131.070] wcscmp (_String1="Searches", _String2=".") returned 1 [0131.070] wcscmp (_String1="Searches", _String2="..") returned 1 [0131.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfe50 [0131.070] wcscpy (in: _Dest=0x3dcfe50, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0131.070] wcscat (in: _Dest=0x3dcfe50, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0131.070] wcscat (in: _Dest=0x3dcfe50, _Source="Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0131.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dcfe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0131.254] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0131.254] wcscmp (_String1="SendTo", _String2=".") returned 1 [0131.254] wcscmp (_String1="SendTo", _String2="..") returned 1 [0131.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77a98 [0131.255] wcscpy (in: _Dest=0x3e77a98, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0131.255] wcscat (in: _Dest=0x3e77a98, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0131.255] wcscat (in: _Dest=0x3e77a98, _Source="SendTo" | out: _Dest="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo" [0131.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e77a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0131.256] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x17612fdc, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x17612fdc, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x17612fdc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0131.256] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0131.256] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0131.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066e40 [0131.256] wcscpy (in: _Dest=0x3066e40, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0131.256] wcscat (in: _Dest=0x3066e40, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0131.256] wcscat (in: _Dest=0x3066e40, _Source="Start Menu" | out: _Dest="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu" [0131.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0131.257] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0131.257] wcscmp (_String1="Templates", _String2=".") returned 1 [0131.257] wcscmp (_String1="Templates", _String2="..") returned 1 [0131.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066dc0 [0131.258] wcscpy (in: _Dest=0x3066dc0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0131.258] wcscat (in: _Dest=0x3066dc0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0131.258] wcscat (in: _Dest=0x3066dc0, _Source="Templates" | out: _Dest="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates" [0131.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0131.259] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0131.259] wcscmp (_String1="Videos", _String2=".") returned 1 [0131.259] wcscmp (_String1="Videos", _String2="..") returned 1 [0131.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77980 [0131.259] wcscpy (in: _Dest=0x3e77980, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0131.259] wcscat (in: _Dest=0x3e77980, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0131.259] wcscat (in: _Dest=0x3e77980, _Source="Videos" | out: _Dest="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos" [0131.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e77980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0131.260] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0131.260] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0131.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0131.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0131.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3ed8) returned 1 Thread: id = 150 os_tid = 0x6f0 [0130.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df7e90 [0130.644] wcscpy (in: _Dest=0x3df7e90, _Source="C:\\Users\\Default User" | out: _Dest="C:\\Users\\Default User") returned="C:\\Users\\Default User" [0130.645] wcscat (in: _Dest=0x3df7e90, _Source="\\" | out: _Dest="C:\\Users\\Default User\\") returned="C:\\Users\\Default User\\" [0130.645] wcscat (in: _Dest=0x3df7e90, _Source="*" | out: _Dest="C:\\Users\\Default User\\*") returned="C:\\Users\\Default User\\*" [0130.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0130.645] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0130.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0130.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7838) returned 1 Thread: id = 151 os_tid = 0xb08 [0130.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df42c8 [0130.647] wcscpy (in: _Dest=0x3df42c8, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0130.647] wcscat (in: _Dest=0x3df42c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0130.647] wcscat (in: _Dest=0x3df42c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\*") returned="C:\\Users\\EEBsYm5\\*" [0130.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0130.647] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0130.648] wcscmp (_String1=".", _String2=".") returned 0 [0130.648] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.648] wcscmp (_String1="..", _String2=".") returned 1 [0130.648] wcscmp (_String1="..", _String2="..") returned 0 [0130.648] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0130.648] wcscmp (_String1="AppData", _String2=".") returned 1 [0130.648] wcscmp (_String1="AppData", _String2="..") returned 1 [0130.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067180 [0130.648] wcscpy (in: _Dest=0x3067180, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0130.648] wcscat (in: _Dest=0x3067180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0130.649] wcscat (in: _Dest=0x3067180, _Source="AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0131.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3067180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0131.033] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0131.033] wcscmp (_String1="Application Data", _String2=".") returned 1 [0131.033] wcscmp (_String1="Application Data", _String2="..") returned 1 [0131.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de5f78 [0131.034] wcscpy (in: _Dest=0x3de5f78, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.034] wcscat (in: _Dest=0x3de5f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.034] wcscat (in: _Dest=0x3de5f78, _Source="Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data") returned="C:\\Users\\EEBsYm5\\Application Data" [0131.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0131.035] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0131.035] wcscmp (_String1="Contacts", _String2=".") returned 1 [0131.035] wcscmp (_String1="Contacts", _String2="..") returned 1 [0131.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066ec0 [0131.035] wcscpy (in: _Dest=0x3066ec0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.035] wcscat (in: _Dest=0x3066ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.036] wcscat (in: _Dest=0x3066ec0, _Source="Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0131.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0131.037] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0131.037] wcscmp (_String1="Cookies", _String2=".") returned 1 [0131.037] wcscmp (_String1="Cookies", _String2="..") returned 1 [0131.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x30670c0 [0131.037] wcscpy (in: _Dest=0x30670c0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.037] wcscat (in: _Dest=0x30670c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.038] wcscat (in: _Dest=0x30670c0, _Source="Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies") returned="C:\\Users\\EEBsYm5\\Cookies" [0131.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30670c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0131.039] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xc1132300, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc1132300, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0131.039] wcscmp (_String1="Desktop", _String2=".") returned 1 [0131.039] wcscmp (_String1="Desktop", _String2="..") returned 1 [0131.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067100 [0131.039] wcscpy (in: _Dest=0x3067100, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.039] wcscat (in: _Dest=0x3067100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.039] wcscat (in: _Dest=0x3067100, _Source="Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0131.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3067100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0 [0131.041] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e950a20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8e950a20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0131.041] wcscmp (_String1="Documents", _String2=".") returned 1 [0131.041] wcscmp (_String1="Documents", _String2="..") returned 1 [0131.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067040 [0131.041] wcscpy (in: _Dest=0x3067040, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.041] wcscat (in: _Dest=0x3067040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.041] wcscat (in: _Dest=0x3067040, _Source="Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0131.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3067040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0131.043] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xcb798a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0131.043] wcscmp (_String1="Downloads", _String2=".") returned 1 [0131.043] wcscmp (_String1="Downloads", _String2="..") returned 1 [0131.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd00d0 [0131.044] wcscpy (in: _Dest=0x3dd00d0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.044] wcscat (in: _Dest=0x3dd00d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.044] wcscat (in: _Dest=0x3dd00d0, _Source="Downloads" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads") returned="C:\\Users\\EEBsYm5\\Downloads" [0131.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dd00d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0131.045] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0131.046] wcscmp (_String1="Favorites", _String2=".") returned 1 [0131.046] wcscmp (_String1="Favorites", _String2="..") returned 1 [0131.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfe10 [0131.046] wcscpy (in: _Dest=0x3dcfe10, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.046] wcscat (in: _Dest=0x3dcfe10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.046] wcscat (in: _Dest=0x3dcfe10, _Source="Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0131.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dcfe10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0131.047] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0131.048] wcscmp (_String1="Links", _String2=".") returned 1 [0131.048] wcscmp (_String1="Links", _String2="..") returned 1 [0131.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df7988 [0131.048] wcscpy (in: _Dest=0x3df7988, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.048] wcscat (in: _Dest=0x3df7988, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.048] wcscat (in: _Dest=0x3df7988, _Source="Links" | out: _Dest="C:\\Users\\EEBsYm5\\Links") returned="C:\\Users\\EEBsYm5\\Links" [0131.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df7988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0131.049] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0131.049] wcscmp (_String1="Local Settings", _String2=".") returned 1 [0131.049] wcscmp (_String1="Local Settings", _String2="..") returned 1 [0131.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a8a8 [0131.049] wcscpy (in: _Dest=0x3e6a8a8, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.050] wcscat (in: _Dest=0x3e6a8a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.050] wcscat (in: _Dest=0x3e6a8a8, _Source="Local Settings" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings") returned="C:\\Users\\EEBsYm5\\Local Settings" [0131.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0131.051] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ea0f100, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ea0f100, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0131.051] wcscmp (_String1="Music", _String2=".") returned 1 [0131.051] wcscmp (_String1="Music", _String2="..") returned 1 [0131.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e777f8 [0131.051] wcscpy (in: _Dest=0x3e777f8, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.051] wcscat (in: _Dest=0x3e777f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.051] wcscat (in: _Dest=0x3e777f8, _Source="Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0131.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e777f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0131.053] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0131.053] wcscmp (_String1="My Documents", _String2=".") returned 1 [0131.053] wcscmp (_String1="My Documents", _String2="..") returned 1 [0131.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e6aaa0 [0131.053] wcscpy (in: _Dest=0x3e6aaa0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.053] wcscat (in: _Dest=0x3e6aaa0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.053] wcscat (in: _Dest=0x3e6aaa0, _Source="My Documents" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents") returned="C:\\Users\\EEBsYm5\\My Documents" [0131.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6aaa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0131.055] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0131.055] wcscmp (_String1="NetHood", _String2=".") returned 1 [0131.055] wcscmp (_String1="NetHood", _String2="..") returned 1 [0131.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfdd0 [0131.055] wcscpy (in: _Dest=0x3dcfdd0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.055] wcscat (in: _Dest=0x3dcfdd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.055] wcscat (in: _Dest=0x3dcfdd0, _Source="NetHood" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood") returned="C:\\Users\\EEBsYm5\\NetHood" [0131.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dcfdd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0131.057] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8e4c770, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4a55c980, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0xebb84fe0, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0131.057] wcscmp (_String1="NTUSER.DAT", _String2=".") returned 1 [0131.057] wcscmp (_String1="NTUSER.DAT", _String2="..") returned 1 [0131.057] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x90fa030, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x90fa030, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xebb84fe0, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0131.057] wcscmp (_String1="ntuser.dat.LOG1", _String2=".") returned 1 [0131.057] wcscmp (_String1="ntuser.dat.LOG1", _String2="..") returned 1 [0131.057] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9120190, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0131.057] wcscmp (_String1="ntuser.dat.LOG2", _String2=".") returned 1 [0131.058] wcscmp (_String1="ntuser.dat.LOG2", _String2="..") returned 1 [0131.058] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27f942d0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0131.058] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2=".") returned 1 [0131.058] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2="..") returned 1 [0131.058] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27f6e170, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0131.058] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2=".") returned 1 [0131.058] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2="..") returned 1 [0131.058] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27f942d0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0131.058] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2=".") returned 1 [0131.058] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2="..") returned 1 [0131.058] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x8e4c770, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e4c770, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0131.058] wcscmp (_String1="ntuser.ini", _String2=".") returned 1 [0131.058] wcscmp (_String1="ntuser.ini", _String2="..") returned 1 [0131.058] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8edc7360, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8edc7360, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0131.058] wcscmp (_String1="Pictures", _String2=".") returned 1 [0131.059] wcscmp (_String1="Pictures", _String2="..") returned 1 [0131.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfd10 [0131.059] wcscpy (in: _Dest=0x3dcfd10, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.059] wcscat (in: _Dest=0x3dcfd10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.059] wcscat (in: _Dest=0x3dcfd10, _Source="Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dcfd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc [0131.060] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0131.060] wcscmp (_String1="PrintHood", _String2=".") returned 1 [0131.060] wcscmp (_String1="PrintHood", _String2="..") returned 1 [0131.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0110 [0131.060] wcscpy (in: _Dest=0x3dd0110, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.060] wcscat (in: _Dest=0x3dd0110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.061] wcscat (in: _Dest=0x3dd0110, _Source="PrintHood" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood") returned="C:\\Users\\EEBsYm5\\PrintHood" [0131.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dd0110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0131.062] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0131.062] wcscmp (_String1="Recent", _String2=".") returned 1 [0131.062] wcscmp (_String1="Recent", _String2="..") returned 1 [0131.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77980 [0131.062] wcscpy (in: _Dest=0x3e77980, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.062] wcscat (in: _Dest=0x3e77980, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.062] wcscat (in: _Dest=0x3e77980, _Source="Recent" | out: _Dest="C:\\Users\\EEBsYm5\\Recent") returned="C:\\Users\\EEBsYm5\\Recent" [0131.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e77980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0131.064] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0131.064] wcscmp (_String1="Saved Games", _String2=".") returned 1 [0131.064] wcscmp (_String1="Saved Games", _String2="..") returned 1 [0131.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e6ac98 [0131.064] wcscpy (in: _Dest=0x3e6ac98, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.064] wcscat (in: _Dest=0x3e6ac98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.064] wcscat (in: _Dest=0x3e6ac98, _Source="Saved Games" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games") returned="C:\\Users\\EEBsYm5\\Saved Games" [0131.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ac98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0131.065] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0131.065] wcscmp (_String1="Searches", _String2=".") returned 1 [0131.065] wcscmp (_String1="Searches", _String2="..") returned 1 [0131.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfe90 [0131.065] wcscpy (in: _Dest=0x3dcfe90, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.065] wcscat (in: _Dest=0x3dcfe90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.065] wcscat (in: _Dest=0x3dcfe90, _Source="Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0131.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dcfe90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0131.067] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0131.067] wcscmp (_String1="SendTo", _String2=".") returned 1 [0131.067] wcscmp (_String1="SendTo", _String2="..") returned 1 [0131.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77a98 [0131.067] wcscpy (in: _Dest=0x3e77a98, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.067] wcscat (in: _Dest=0x3e77a98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.067] wcscat (in: _Dest=0x3e77a98, _Source="SendTo" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo") returned="C:\\Users\\EEBsYm5\\SendTo" [0131.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e77a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0131.068] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0131.068] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0131.068] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0131.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcff90 [0131.068] wcscpy (in: _Dest=0x3dcff90, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.068] wcscat (in: _Dest=0x3dcff90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.068] wcscat (in: _Dest=0x3dcff90, _Source="Start Menu" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu") returned="C:\\Users\\EEBsYm5\\Start Menu" [0131.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dcff90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0131.497] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0131.497] wcscmp (_String1="Templates", _String2=".") returned 1 [0131.497] wcscmp (_String1="Templates", _String2="..") returned 1 [0131.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfe10 [0131.498] wcscpy (in: _Dest=0x3dcfe10, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.498] wcscat (in: _Dest=0x3dcfe10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.498] wcscat (in: _Dest=0x3dcfe10, _Source="Templates" | out: _Dest="C:\\Users\\EEBsYm5\\Templates") returned="C:\\Users\\EEBsYm5\\Templates" [0131.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dcfe10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0131.885] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ece2b20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ece2b20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0131.885] wcscmp (_String1="Videos", _String2=".") returned 1 [0131.885] wcscmp (_String1="Videos", _String2="..") returned 1 [0131.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77ad0 [0131.885] wcscpy (in: _Dest=0x3e77ad0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.885] wcscat (in: _Dest=0x3e77ad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.885] wcscat (in: _Dest=0x3e77ad0, _Source="Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0131.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e77ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0131.886] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ece2b20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ece2b20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0131.887] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0131.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0131.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42c8) returned 1 [0131.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3f38) returned 1 Thread: id = 152 os_tid = 0x7bc [0130.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df3908 [0130.649] wcscpy (in: _Dest=0x3df3908, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0130.649] wcscat (in: _Dest=0x3df3908, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0130.649] wcscat (in: _Dest=0x3df3908, _Source="*" | out: _Dest="C:\\Users\\Public\\*") returned="C:\\Users\\Public\\*" [0130.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0130.650] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0130.650] wcscmp (_String1=".", _String2=".") returned 0 [0130.650] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.650] wcscmp (_String1="..", _String2=".") returned 1 [0130.650] wcscmp (_String1="..", _String2="..") returned 0 [0130.650] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0130.650] wcscmp (_String1="Desktop", _String2=".") returned 1 [0130.650] wcscmp (_String1="Desktop", _String2="..") returned 1 [0130.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df7838 [0130.651] wcscpy (in: _Dest=0x3df7838, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0130.651] wcscat (in: _Dest=0x3df7838, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0130.651] wcscat (in: _Dest=0x3df7838, _Source="Desktop" | out: _Dest="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop" [0131.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df7838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0131.870] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b61335c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b61335c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.870] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.871] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.871] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1771d97e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1771d97e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0131.871] wcscmp (_String1="Documents", _String2=".") returned 1 [0131.871] wcscmp (_String1="Documents", _String2="..") returned 1 [0131.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067080 [0131.871] wcscpy (in: _Dest=0x3067080, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.871] wcscat (in: _Dest=0x3067080, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.871] wcscat (in: _Dest=0x3067080, _Source="Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0131.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3067080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0131.872] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0131.872] wcscmp (_String1="Downloads", _String2=".") returned 1 [0131.872] wcscmp (_String1="Downloads", _String2="..") returned 1 [0131.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066f80 [0131.872] wcscpy (in: _Dest=0x3066f80, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.872] wcscat (in: _Dest=0x3066f80, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.872] wcscat (in: _Dest=0x3066f80, _Source="Downloads" | out: _Dest="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads" [0131.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0131.873] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0131.874] wcscmp (_String1="Favorites", _String2=".") returned 1 [0131.874] wcscmp (_String1="Favorites", _String2="..") returned 1 [0131.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066500 [0131.874] wcscpy (in: _Dest=0x3066500, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.874] wcscat (in: _Dest=0x3066500, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.874] wcscat (in: _Dest=0x3066500, _Source="Favorites" | out: _Dest="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites" [0131.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0131.875] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0131.875] wcscmp (_String1="Libraries", _String2=".") returned 1 [0131.875] wcscmp (_String1="Libraries", _String2="..") returned 1 [0131.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066f00 [0131.875] wcscpy (in: _Dest=0x3066f00, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.875] wcscat (in: _Dest=0x3066f00, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.875] wcscat (in: _Dest=0x3066f00, _Source="Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries" [0131.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0131.876] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0131.876] wcscmp (_String1="Music", _String2=".") returned 1 [0131.876] wcscmp (_String1="Music", _String2="..") returned 1 [0131.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77980 [0131.877] wcscpy (in: _Dest=0x3e77980, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.877] wcscat (in: _Dest=0x3e77980, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.877] wcscat (in: _Dest=0x3e77980, _Source="Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music" [0131.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e77980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0131.878] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0131.878] wcscmp (_String1="Pictures", _String2=".") returned 1 [0131.878] wcscmp (_String1="Pictures", _String2="..") returned 1 [0131.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066f40 [0131.878] wcscpy (in: _Dest=0x3066f40, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.878] wcscat (in: _Dest=0x3066f40, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.878] wcscat (in: _Dest=0x3066f40, _Source="Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures" [0131.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0131.879] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0131.879] wcscmp (_String1="Recorded TV", _String2=".") returned 1 [0131.879] wcscmp (_String1="Recorded TV", _String2="..") returned 1 [0131.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066b80 [0131.879] wcscpy (in: _Dest=0x3066b80, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.880] wcscat (in: _Dest=0x3066b80, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.880] wcscat (in: _Dest=0x3066b80, _Source="Recorded TV" | out: _Dest="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV" [0131.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3066b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0131.881] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0131.881] wcscmp (_String1="Videos", _String2=".") returned 1 [0131.881] wcscmp (_String1="Videos", _String2="..") returned 1 [0131.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77a98 [0131.881] wcscpy (in: _Dest=0x3e77a98, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.881] wcscat (in: _Dest=0x3e77a98, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.881] wcscat (in: _Dest=0x3e77a98, _Source="Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos" [0131.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e77a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0131.882] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0131.882] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0131.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0131.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3908) returned 1 [0131.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 Thread: id = 153 os_tid = 0xb4c [0130.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0e718 [0130.652] wcscpy (in: _Dest=0x3e0e718, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0130.652] wcscat (in: _Dest=0x3e0e718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0130.652] wcscat (in: _Dest=0x3e0e718, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\*" [0130.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0130.652] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0130.652] wcscmp (_String1=".", _String2=".") returned 0 [0130.653] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.849] wcscmp (_String1="..", _String2=".") returned 1 [0130.849] wcscmp (_String1="..", _String2="..") returned 0 [0130.852] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0x0, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1 [0130.852] wcscmp (_String1="Benioku.htm", _String2=".") returned 1 [0130.853] wcscmp (_String1="Benioku.htm", _String2="..") returned 1 [0130.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eccd28 [0130.884] wcscpy (in: _Dest=0x3eccd28, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0130.884] wcscat (in: _Dest=0x3eccd28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0130.884] wcscat (in: _Dest=0x3eccd28, _Source="Benioku.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm" [0131.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eccd28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0131.437] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x42ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berime.htm", cAlternateFileName="")) returned 1 [0131.437] wcscmp (_String1="Berime.htm", _String2=".") returned 1 [0131.437] wcscmp (_String1="Berime.htm", _String2="..") returned 1 [0131.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8dbf8 [0131.437] wcscpy (in: _Dest=0x3d8dbf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.437] wcscat (in: _Dest=0x3d8dbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.437] wcscat (in: _Dest=0x3d8dbf8, _Source="Berime.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm" [0131.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0131.439] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0131.439] wcscmp (_String1="Esl", _String2=".") returned 1 [0131.439] wcscmp (_String1="Esl", _String2="..") returned 1 [0131.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6eee0 [0131.439] wcscpy (in: _Dest=0x3e6eee0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.439] wcscat (in: _Dest=0x3e6eee0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.439] wcscat (in: _Dest=0x3e6eee0, _Source="Esl" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl" [0131.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6eee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0131.440] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0x0, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1 [0131.440] wcscmp (_String1="IrakHau.htm", _String2=".") returned 1 [0131.440] wcscmp (_String1="IrakHau.htm", _String2="..") returned 1 [0131.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8db90 [0131.440] wcscpy (in: _Dest=0x3d8db90, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.440] wcscat (in: _Dest=0x3d8db90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.440] wcscat (in: _Dest=0x3d8db90, _Source="IrakHau.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm" [0131.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8db90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0131.442] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x423b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leame.htm", cAlternateFileName="")) returned 1 [0131.442] wcscmp (_String1="Leame.htm", _String2=".") returned 1 [0131.442] wcscmp (_String1="Leame.htm", _String2="..") returned 1 [0131.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8dd30 [0131.442] wcscpy (in: _Dest=0x3d8dd30, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.442] wcscat (in: _Dest=0x3d8dd30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.442] wcscat (in: _Dest=0x3d8dd30, _Source="Leame.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm" [0131.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8dd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0131.443] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeesMij.htm", cAlternateFileName="")) returned 1 [0131.443] wcscmp (_String1="LeesMij.htm", _String2=".") returned 1 [0131.443] wcscmp (_String1="LeesMij.htm", _String2="..") returned 1 [0131.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dc60 [0131.444] wcscpy (in: _Dest=0x3d8dc60, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.444] wcscat (in: _Dest=0x3d8dc60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.444] wcscat (in: _Dest=0x3d8dc60, _Source="LeesMij.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm" [0131.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8dc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0131.448] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4289, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leggimi.htm", cAlternateFileName="")) returned 1 [0131.449] wcscmp (_String1="Leggimi.htm", _String2=".") returned 1 [0131.449] wcscmp (_String1="Leggimi.htm", _String2="..") returned 1 [0131.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8de00 [0131.449] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.449] wcscat (in: _Dest=0x3d8de00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.449] wcscat (in: _Dest=0x3d8de00, _Source="Leggimi.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm" [0131.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0131.451] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeiaMe.htm", cAlternateFileName="")) returned 1 [0131.451] wcscmp (_String1="LeiaMe.htm", _String2=".") returned 1 [0131.451] wcscmp (_String1="LeiaMe.htm", _String2="..") returned 1 [0131.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8cbb8 [0131.451] wcscpy (in: _Dest=0x3d8cbb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.451] wcscat (in: _Dest=0x3d8cbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.451] wcscat (in: _Dest=0x3d8cbb8, _Source="LeiaMe.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm" [0131.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0131.453] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x42b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Liesmich.htm", cAlternateFileName="")) returned 1 [0131.453] wcscmp (_String1="Liesmich.htm", _String2=".") returned 1 [0131.453] wcscmp (_String1="Liesmich.htm", _String2="..") returned 1 [0131.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8eb00 [0131.453] wcscpy (in: _Dest=0x3d8eb00, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.453] wcscat (in: _Dest=0x3d8eb00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.453] wcscat (in: _Dest=0x3d8eb00, _Source="Liesmich.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm" [0131.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8eb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0131.454] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb691e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisezmoi.htm", cAlternateFileName="")) returned 1 [0131.454] wcscmp (_String1="Lisezmoi.htm", _String2=".") returned 1 [0131.454] wcscmp (_String1="Lisezmoi.htm", _String2="..") returned 1 [0131.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea98 [0131.454] wcscpy (in: _Dest=0x3d8ea98, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.454] wcscat (in: _Dest=0x3d8ea98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.454] wcscat (in: _Dest=0x3d8ea98, _Source="Lisezmoi.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0131.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8ea98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0131.456] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Llegiu-me.htm", cAlternateFileName="LLEGIU~1.HTM")) returned 1 [0131.456] wcscmp (_String1="Llegiu-me.htm", _String2=".") returned 1 [0131.456] wcscmp (_String1="Llegiu-me.htm", _String2="..") returned 1 [0131.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5080 [0131.456] wcscpy (in: _Dest=0x2ff5080, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.456] wcscat (in: _Dest=0x2ff5080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.456] wcscat (in: _Dest=0x2ff5080, _Source="Llegiu-me.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0131.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0131.457] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x434e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LueMinut.htm", cAlternateFileName="")) returned 1 [0131.458] wcscmp (_String1="LueMinut.htm", _String2=".") returned 1 [0131.458] wcscmp (_String1="LueMinut.htm", _String2="..") returned 1 [0131.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0131.458] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.458] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.458] wcscat (in: _Dest=0x3d8ea30, _Source="LueMinut.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm" [0131.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8ea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0131.459] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e43ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0131.459] wcscmp (_String1="Reader", _String2=".") returned 1 [0131.459] wcscmp (_String1="Reader", _String2="..") returned 1 [0131.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1508 [0131.459] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.459] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.459] wcscat (in: _Dest=0x2fe1508, _Source="Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0131.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0131.461] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0131.461] wcscmp (_String1="ReadMe.htm", _String2=".") returned 1 [0131.461] wcscmp (_String1="ReadMe.htm", _String2="..") returned 1 [0131.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e9c8 [0131.461] wcscpy (in: _Dest=0x3d8e9c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.461] wcscat (in: _Dest=0x3d8e9c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.461] wcscat (in: _Dest=0x3d8e9c8, _Source="ReadMe.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm" [0131.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0131.462] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCS.htm", cAlternateFileName="")) returned 1 [0131.462] wcscmp (_String1="ReadMeCS.htm", _String2=".") returned 1 [0131.462] wcscmp (_String1="ReadMeCS.htm", _String2="..") returned 1 [0131.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e960 [0131.463] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.463] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.463] wcscat (in: _Dest=0x3d8e960, _Source="ReadMeCS.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0131.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0131.464] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCT.htm", cAlternateFileName="")) returned 1 [0131.464] wcscmp (_String1="ReadMeCT.htm", _String2=".") returned 1 [0131.464] wcscmp (_String1="ReadMeCT.htm", _String2="..") returned 1 [0131.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e8f8 [0131.465] wcscpy (in: _Dest=0x3d8e8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.465] wcscat (in: _Dest=0x3d8e8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.465] wcscat (in: _Dest=0x3d8e8f8, _Source="ReadMeCT.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0131.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0131.466] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4623, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCZE.htm", cAlternateFileName="REE3F7~1.HTM")) returned 1 [0131.466] wcscmp (_String1="ReadMeCZE.htm", _String2=".") returned 1 [0131.466] wcscmp (_String1="ReadMeCZE.htm", _String2="..") returned 1 [0131.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1638 [0131.466] wcscpy (in: _Dest=0x3db1638, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.466] wcscat (in: _Dest=0x3db1638, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.467] wcscat (in: _Dest=0x3db1638, _Source="ReadMeCZE.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0131.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0131.468] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x42aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHRV.htm", cAlternateFileName="RE2D2E~1.HTM")) returned 1 [0131.468] wcscmp (_String1="ReadMeHRV.htm", _String2=".") returned 1 [0131.468] wcscmp (_String1="ReadMeHRV.htm", _String2="..") returned 1 [0131.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1b08 [0131.468] wcscpy (in: _Dest=0x3db1b08, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.468] wcscat (in: _Dest=0x3db1b08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.468] wcscat (in: _Dest=0x3db1b08, _Source="ReadMeHRV.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0131.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0131.470] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4274, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHUN.htm", cAlternateFileName="RE50AF~1.HTM")) returned 1 [0131.470] wcscmp (_String1="ReadMeHUN.htm", _String2=".") returned 1 [0131.470] wcscmp (_String1="ReadMeHUN.htm", _String2="..") returned 1 [0131.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1be8 [0131.470] wcscpy (in: _Dest=0x3db1be8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.470] wcscat (in: _Dest=0x3db1be8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.470] wcscat (in: _Dest=0x3db1be8, _Source="ReadMeHUN.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0131.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0131.472] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeJ.htm", cAlternateFileName="")) returned 1 [0131.472] wcscmp (_String1="ReadMeJ.htm", _String2=".") returned 1 [0131.472] wcscmp (_String1="ReadMeJ.htm", _String2="..") returned 1 [0131.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e890 [0131.472] wcscpy (in: _Dest=0x3d8e890, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.472] wcscat (in: _Dest=0x3d8e890, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.472] wcscat (in: _Dest=0x3d8e890, _Source="ReadMeJ.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0131.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0131.473] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeK.htm", cAlternateFileName="")) returned 1 [0131.473] wcscmp (_String1="ReadMeK.htm", _String2=".") returned 1 [0131.473] wcscmp (_String1="ReadMeK.htm", _String2="..") returned 1 [0131.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e828 [0131.474] wcscpy (in: _Dest=0x3d8e828, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.474] wcscat (in: _Dest=0x3d8e828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.474] wcscat (in: _Dest=0x3d8e828, _Source="ReadMeK.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm" [0131.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0131.722] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMePOL.htm", cAlternateFileName="RECE99~1.HTM")) returned 1 [0131.722] wcscmp (_String1="ReadMePOL.htm", _String2=".") returned 1 [0131.722] wcscmp (_String1="ReadMePOL.htm", _String2="..") returned 1 [0131.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1718 [0131.723] wcscpy (in: _Dest=0x3db1718, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.723] wcscat (in: _Dest=0x3db1718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.723] wcscat (in: _Dest=0x3db1718, _Source="ReadMePOL.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0131.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0131.724] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4318, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUM.htm", cAlternateFileName="README~4.HTM")) returned 1 [0131.724] wcscmp (_String1="ReadMeRUM.htm", _String2=".") returned 1 [0131.724] wcscmp (_String1="ReadMeRUM.htm", _String2="..") returned 1 [0131.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1cc8 [0131.724] wcscpy (in: _Dest=0x3db1cc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.724] wcscat (in: _Dest=0x3db1cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.724] wcscat (in: _Dest=0x3db1cc8, _Source="ReadMeRUM.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0131.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0131.726] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4872, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUS.htm", cAlternateFileName="README~3.HTM")) returned 1 [0131.726] wcscmp (_String1="ReadMeRUS.htm", _String2=".") returned 1 [0131.726] wcscmp (_String1="ReadMeRUS.htm", _String2="..") returned 1 [0131.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e2ccd8 [0131.726] wcscpy (in: _Dest=0x3e2ccd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.726] wcscat (in: _Dest=0x3e2ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.726] wcscat (in: _Dest=0x3e2ccd8, _Source="ReadMeRUS.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0131.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0131.727] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeSKY.htm", cAlternateFileName="README~2.HTM")) returned 1 [0131.727] wcscmp (_String1="ReadMeSKY.htm", _String2=".") returned 1 [0131.727] wcscmp (_String1="ReadMeSKY.htm", _String2="..") returned 1 [0131.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x364a80 [0131.728] wcscpy (in: _Dest=0x364a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.728] wcscat (in: _Dest=0x364a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.728] wcscat (in: _Dest=0x364a80, _Source="ReadMeSKY.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0131.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x364a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0131.729] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4995, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeUKR.htm", cAlternateFileName="README~1.HTM")) returned 1 [0131.729] wcscmp (_String1="ReadMeUKR.htm", _String2=".") returned 1 [0131.729] wcscmp (_String1="ReadMeUKR.htm", _String2="..") returned 1 [0131.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3519c0 [0131.729] wcscpy (in: _Dest=0x3519c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.729] wcscat (in: _Dest=0x3519c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.729] wcscat (in: _Dest=0x3519c0, _Source="ReadMeUKR.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0131.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3519c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0131.730] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0131.731] wcscmp (_String1="Resource", _String2=".") returned 1 [0131.731] wcscmp (_String1="Resource", _String2="..") returned 1 [0131.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe4b08 [0131.731] wcscpy (in: _Dest=0x2fe4b08, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.731] wcscat (in: _Dest=0x2fe4b08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.731] wcscat (in: _Dest=0x2fe4b08, _Source="Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0131.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe4b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0131.732] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9009a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9009a20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0131.733] wcscmp (_String1="Setup Files", _String2=".") returned 1 [0131.733] wcscmp (_String1="Setup Files", _String2="..") returned 1 [0131.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e620 [0131.733] wcscpy (in: _Dest=0x3d8e620, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.733] wcscat (in: _Dest=0x3d8e620, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.733] wcscat (in: _Dest=0x3d8e620, _Source="Setup Files" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" [0131.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110 [0131.734] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1 [0131.734] wcscmp (_String1="Vigtigt.htm", _String2=".") returned 1 [0131.734] wcscmp (_String1="Vigtigt.htm", _String2="..") returned 1 [0131.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e5b8 [0131.734] wcscpy (in: _Dest=0x3d8e5b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.734] wcscat (in: _Dest=0x3d8e5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.734] wcscat (in: _Dest=0x3d8e5b8, _Source="Vigtigt.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm" [0131.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0131.735] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktig.htm", cAlternateFileName="")) returned 1 [0131.735] wcscmp (_String1="Viktig.htm", _String2=".") returned 1 [0131.735] wcscmp (_String1="Viktig.htm", _String2="..") returned 1 [0131.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e550 [0131.736] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.736] wcscat (in: _Dest=0x3d8e550, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.736] wcscat (in: _Dest=0x3d8e550, _Source="Viktig.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm" [0131.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0131.737] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 1 [0131.737] wcscmp (_String1="Viktigt.htm", _String2=".") returned 1 [0131.737] wcscmp (_String1="Viktigt.htm", _String2="..") returned 1 [0131.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e4e8 [0131.737] wcscpy (in: _Dest=0x3d8e4e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.737] wcscat (in: _Dest=0x3d8e4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.737] wcscat (in: _Dest=0x3d8e4e8, _Source="Viktigt.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm" [0131.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0131.739] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 0 [0132.478] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0133.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0133.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e718) returned 1 [0133.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6338) returned 1 Thread: id = 154 os_tid = 0x154 [0130.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0f0b8 [0130.654] wcscpy (in: _Dest=0x3e0f0b8, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0130.654] wcscat (in: _Dest=0x3e0f0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0130.654] wcscat (in: _Dest=0x3e0f0b8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\*") returned="C:\\Program Files\\Common Files\\Adobe\\*" [0130.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0130.654] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0130.654] wcscmp (_String1=".", _String2=".") returned 0 [0130.655] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.655] wcscmp (_String1="..", _String2=".") returned 1 [0130.655] wcscmp (_String1="..", _String2="..") returned 0 [0130.655] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd8fbd760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd8fbd760, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0130.655] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0130.655] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0130.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe4a48 [0130.655] wcscpy (in: _Dest=0x2fe4a48, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0130.655] wcscat (in: _Dest=0x2fe4a48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0130.655] wcscat (in: _Dest=0x2fe4a48, _Source="Acrobat" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat" [0131.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe4a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1114 [0131.179] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0131.179] wcscmp (_String1="ARM", _String2=".") returned 1 [0131.179] wcscmp (_String1="ARM", _String2="..") returned 1 [0131.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ec78 [0131.179] wcscpy (in: _Dest=0x3e6ec78, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0131.179] wcscat (in: _Dest=0x3e6ec78, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0131.179] wcscat (in: _Dest=0x3e6ec78, _Source="ARM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM") returned="C:\\Program Files\\Common Files\\Adobe\\ARM" [0131.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ec78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0131.181] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0131.181] wcscmp (_String1="HelpCfg", _String2=".") returned 1 [0131.181] wcscmp (_String1="HelpCfg", _String2="..") returned 1 [0131.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe2b88 [0131.181] wcscpy (in: _Dest=0x2fe2b88, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0131.181] wcscat (in: _Dest=0x2fe2b88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0131.181] wcscat (in: _Dest=0x2fe2b88, _Source="HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0131.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe2b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0131.182] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 0 [0131.183] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0131.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0131.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b8) returned 1 [0131.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5e88) returned 1 Thread: id = 155 os_tid = 0x6a8 [0130.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe5b28 [0130.656] wcscpy (in: _Dest=0x2fe5b28, _Source="C:\\Program Files\\Common Files\\DESIGNER" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER" [0130.656] wcscat (in: _Dest=0x2fe5b28, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\") returned="C:\\Program Files\\Common Files\\DESIGNER\\" [0130.656] wcscat (in: _Dest=0x2fe5b28, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\*") returned="C:\\Program Files\\Common Files\\DESIGNER\\*" [0130.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0130.657] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8086a130, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0131.960] wcscmp (_String1=".", _String2=".") returned 0 [0131.961] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8086a130, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.961] wcscmp (_String1="..", _String2=".") returned 1 [0131.961] wcscmp (_String1="..", _String2="..") returned 0 [0131.961] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be1ac00, ftCreationTime.dwHighDateTime=0x1ca8d8a, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5be1ac00, ftLastWriteTime.dwHighDateTime=0x1ca8d8a, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0131.961] wcscmp (_String1="MSADDNDR.DLL", _String2=".") returned 1 [0131.961] wcscmp (_String1="MSADDNDR.DLL", _String2="..") returned 1 [0131.961] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be1ac00, ftCreationTime.dwHighDateTime=0x1ca8d8a, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5be1ac00, ftLastWriteTime.dwHighDateTime=0x1ca8d8a, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0131.961] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0131.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0131.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5b28) returned 1 [0131.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 156 os_tid = 0x6a4 [0130.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0f110 [0130.658] wcscpy (in: _Dest=0x3e0f110, _Source="C:\\Program Files\\Common Files\\Java" | out: _Dest="C:\\Program Files\\Common Files\\Java") returned="C:\\Program Files\\Common Files\\Java" [0130.659] wcscat (in: _Dest=0x3e0f110, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\") returned="C:\\Program Files\\Common Files\\Java\\" [0130.659] wcscat (in: _Dest=0x3e0f110, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Java\\*") returned="C:\\Program Files\\Common Files\\Java\\*" [0130.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0130.659] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Java\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x701bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x701bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0131.963] wcscmp (_String1=".", _String2=".") returned 0 [0131.963] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x701bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x701bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.963] wcscmp (_String1="..", _String2=".") returned 1 [0131.963] wcscmp (_String1="..", _String2="..") returned 0 [0131.963] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0131.963] wcscmp (_String1="Java Update", _String2=".") returned 1 [0131.963] wcscmp (_String1="Java Update", _String2="..") returned 1 [0131.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e070 [0131.963] wcscpy (in: _Dest=0x3d8e070, _Source="C:\\Program Files\\Common Files\\Java" | out: _Dest="C:\\Program Files\\Common Files\\Java") returned="C:\\Program Files\\Common Files\\Java" [0131.963] wcscat (in: _Dest=0x3d8e070, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\") returned="C:\\Program Files\\Common Files\\Java\\" [0131.963] wcscat (in: _Dest=0x3d8e070, _Source="Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0133.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8 [0133.752] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0133.752] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0133.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0133.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f110) returned 1 [0133.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6478) returned 1 Thread: id = 157 os_tid = 0x6b8 [0130.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe0cc8 [0130.660] wcscpy (in: _Dest=0x2fe0cc8, _Source="C:\\Program Files\\Common Files\\Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0130.660] wcscat (in: _Dest=0x2fe0cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Services\\") returned="C:\\Program Files\\Common Files\\Services\\" [0130.660] wcscat (in: _Dest=0x2fe0cc8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Services\\*") returned="C:\\Program Files\\Common Files\\Services\\*" [0130.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0130.660] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cce865, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cce865, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cce865, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a48 [0132.413] wcscmp (_String1=".", _String2=".") returned 0 [0132.413] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cce865, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cce865, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cce865, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.413] wcscmp (_String1="..", _String2=".") returned 1 [0132.413] wcscmp (_String1="..", _String2="..") returned 0 [0132.413] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0132.414] wcscmp (_String1="verisign.bmp", _String2=".") returned 1 [0132.414] wcscmp (_String1="verisign.bmp", _String2="..") returned 1 [0132.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f397e8 [0132.414] wcscpy (in: _Dest=0x3f397e8, _Source="C:\\Program Files\\Common Files\\Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0132.414] wcscat (in: _Dest=0x3f397e8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Services\\") returned="C:\\Program Files\\Common Files\\Services\\" [0132.414] wcscat (in: _Dest=0x3f397e8, _Source="verisign.bmp" | out: _Dest="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned="C:\\Program Files\\Common Files\\Services\\verisign.bmp" [0138.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f397e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1404 [0138.953] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0138.953] FindClose (in: hFindFile=0x3e54a48 | out: hFindFile=0x3e54a48) returned 1 [0138.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0138.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0cc8) returned 1 [0138.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eea8) returned 1 Thread: id = 158 os_tid = 0x448 [0130.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd4e0 [0130.661] wcscpy (in: _Dest=0x3ecd4e0, _Source="C:\\Program Files\\Common Files\\SpeechEngines" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0130.661] wcscat (in: _Dest=0x3ecd4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\" [0130.662] wcscat (in: _Dest=0x3ecd4e0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\*" [0130.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0130.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cf49c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cf49c4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0131.964] wcscmp (_String1=".", _String2=".") returned 0 [0131.964] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cf49c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cf49c4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.964] wcscmp (_String1="..", _String2=".") returned 1 [0131.964] wcscmp (_String1="..", _String2="..") returned 0 [0131.964] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0131.964] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0131.964] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0131.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32bb0 [0131.964] wcscpy (in: _Dest=0x3f32bb0, _Source="C:\\Program Files\\Common Files\\SpeechEngines" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0131.964] wcscat (in: _Dest=0x3f32bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\" [0131.964] wcscat (in: _Dest=0x3f32bb0, _Source="Microsoft" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" [0133.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0133.755] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0133.755] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0133.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0133.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd4e0) returned 1 [0133.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 Thread: id = 159 os_tid = 0x48c [0130.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5ed8 [0130.663] wcscpy (in: _Dest=0x3de5ed8, _Source="C:\\Program Files\\Google\\Chrome" | out: _Dest="C:\\Program Files\\Google\\Chrome") returned="C:\\Program Files\\Google\\Chrome" [0130.663] wcscat (in: _Dest=0x3de5ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\") returned="C:\\Program Files\\Google\\Chrome\\" [0130.663] wcscat (in: _Dest=0x3de5ed8, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\*") returned="C:\\Program Files\\Google\\Chrome\\*" [0130.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0130.663] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde8209d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0130.664] wcscmp (_String1=".", _String2=".") returned 0 [0130.664] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde8209d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.664] wcscmp (_String1="..", _String2=".") returned 1 [0130.664] wcscmp (_String1="..", _String2="..") returned 0 [0130.664] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0130.664] wcscmp (_String1="Application", _String2=".") returned 1 [0130.664] wcscmp (_String1="Application", _String2="..") returned 1 [0130.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe66c8 [0130.665] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Program Files\\Google\\Chrome" | out: _Dest="C:\\Program Files\\Google\\Chrome") returned="C:\\Program Files\\Google\\Chrome" [0130.665] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\") returned="C:\\Program Files\\Google\\Chrome\\" [0130.665] wcscat (in: _Dest=0x2fe66c8, _Source="Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0134.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0134.203] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0134.203] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0134.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0134.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5ed8) returned 1 [0134.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa078) returned 1 Thread: id = 160 os_tid = 0x7b8 [0130.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0ea88 [0130.666] wcscpy (in: _Dest=0x3e0ea88, _Source="C:\\Program Files\\Google\\CrashReports" | out: _Dest="C:\\Program Files\\Google\\CrashReports") returned="C:\\Program Files\\Google\\CrashReports" [0130.667] wcscat (in: _Dest=0x3e0ea88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\CrashReports\\") returned="C:\\Program Files\\Google\\CrashReports\\" [0130.667] wcscat (in: _Dest=0x3e0ea88, _Source="*" | out: _Dest="C:\\Program Files\\Google\\CrashReports\\*") returned="C:\\Program Files\\Google\\CrashReports\\*" [0130.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0130.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\CrashReports\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0130.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ea88) returned 1 [0130.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0efb0) returned 1 Thread: id = 161 os_tid = 0xb54 [0130.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3dfaa08 [0130.669] wcscpy (in: _Dest=0x3dfaa08, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0130.669] wcscat (in: _Dest=0x3dfaa08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0130.669] wcscat (in: _Dest=0x3dfaa08, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\*") returned="C:\\Program Files\\Java\\jre7\\*" [0130.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0130.669] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0130.670] wcscmp (_String1=".", _String2=".") returned 0 [0130.670] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.670] wcscmp (_String1="..", _String2=".") returned 1 [0130.670] wcscmp (_String1="..", _String2="..") returned 0 [0130.670] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0130.670] wcscmp (_String1="bin", _String2=".") returned 1 [0130.670] wcscmp (_String1="bin", _String2="..") returned 1 [0130.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3dfa9c0 [0130.670] wcscpy (in: _Dest=0x3dfa9c0, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0130.670] wcscat (in: _Dest=0x3dfa9c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0130.671] wcscat (in: _Dest=0x3dfa9c0, _Source="bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0131.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dfa9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0131.300] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67654e80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0131.300] wcscmp (_String1="COPYRIGHT", _String2=".") returned 1 [0131.300] wcscmp (_String1="COPYRIGHT", _String2="..") returned 1 [0131.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6ed28 [0131.300] wcscpy (in: _Dest=0x3e6ed28, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.300] wcscat (in: _Dest=0x3e6ed28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.300] wcscat (in: _Dest=0x3e6ed28, _Source="COPYRIGHT" | out: _Dest="C:\\Program Files\\Java\\jre7\\COPYRIGHT") returned="C:\\Program Files\\Java\\jre7\\COPYRIGHT" [0131.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e6ed28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0131.302] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0131.302] wcscmp (_String1="lib", _String2=".") returned 1 [0131.302] wcscmp (_String1="lib", _String2="..") returned 1 [0131.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e51100 [0131.302] wcscpy (in: _Dest=0x3e51100, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.302] wcscat (in: _Dest=0x3e51100, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.302] wcscat (in: _Dest=0x3e51100, _Source="lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0131.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e51100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0131.304] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67654e80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0131.304] wcscmp (_String1="LICENSE", _String2=".") returned 1 [0131.304] wcscmp (_String1="LICENSE", _String2="..") returned 1 [0131.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6888 [0131.305] wcscpy (in: _Dest=0x3de6888, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.305] wcscat (in: _Dest=0x3de6888, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.305] wcscat (in: _Dest=0x3de6888, _Source="LICENSE" | out: _Dest="C:\\Program Files\\Java\\jre7\\LICENSE") returned="C:\\Program Files\\Java\\jre7\\LICENSE" [0131.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3de6888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0131.307] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67654e80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0131.307] wcscmp (_String1="README.txt", _String2=".") returned 1 [0131.307] wcscmp (_String1="README.txt", _String2="..") returned 1 [0131.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6ed80 [0131.307] wcscpy (in: _Dest=0x3e6ed80, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.307] wcscat (in: _Dest=0x3e6ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.307] wcscat (in: _Dest=0x3e6ed80, _Source="README.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\README.txt") returned="C:\\Program Files\\Java\\jre7\\README.txt" [0131.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e6ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0131.314] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0131.314] wcscmp (_String1="release", _String2=".") returned 1 [0131.314] wcscmp (_String1="release", _String2="..") returned 1 [0131.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de68d8 [0131.314] wcscpy (in: _Dest=0x3de68d8, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.314] wcscat (in: _Dest=0x3de68d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.314] wcscat (in: _Dest=0x3de68d8, _Source="release" | out: _Dest="C:\\Program Files\\Java\\jre7\\release") returned="C:\\Program Files\\Java\\jre7\\release" [0131.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3de68d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0131.315] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0131.315] wcscmp (_String1="THIRDPARTYLICENSEREADME-JAVAFX.txt", _String2=".") returned 1 [0131.316] wcscmp (_String1="THIRDPARTYLICENSEREADME-JAVAFX.txt", _String2="..") returned 1 [0131.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e20438 [0131.316] wcscpy (in: _Dest=0x3e20438, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.316] wcscat (in: _Dest=0x3e20438, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.316] wcscat (in: _Dest=0x3e20438, _Source="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0131.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e20438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0131.317] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0131.318] wcscmp (_String1="THIRDPARTYLICENSEREADME.txt", _String2=".") returned 1 [0131.318] wcscmp (_String1="THIRDPARTYLICENSEREADME.txt", _String2="..") returned 1 [0131.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x348f48 [0131.318] wcscpy (in: _Dest=0x348f48, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.318] wcscat (in: _Dest=0x348f48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.318] wcscat (in: _Dest=0x348f48, _Source="THIRDPARTYLICENSEREADME.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0131.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x348f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0131.319] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0131.319] wcscmp (_String1="Welcome.html", _String2=".") returned 1 [0131.319] wcscmp (_String1="Welcome.html", _String2="..") returned 1 [0131.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6edd8 [0131.319] wcscpy (in: _Dest=0x3e6edd8, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.319] wcscat (in: _Dest=0x3e6edd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.319] wcscat (in: _Dest=0x3e6edd8, _Source="Welcome.html" | out: _Dest="C:\\Program Files\\Java\\jre7\\Welcome.html") returned="C:\\Program Files\\Java\\jre7\\Welcome.html" [0131.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e6edd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0131.321] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0131.321] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0131.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0131.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfaa08) returned 1 [0131.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54a48) returned 1 Thread: id = 162 os_tid = 0x710 [0130.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015670 [0130.672] wcscpy (in: _Dest=0x3015670, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" [0130.672] wcscat (in: _Dest=0x3015670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\" [0130.672] wcscat (in: _Dest=0x3015670, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*" [0130.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84e08 [0130.672] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0130.672] wcscmp (_String1=".", _String2=".") returned 0 [0130.673] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.673] wcscmp (_String1="..", _String2=".") returned 1 [0130.673] wcscmp (_String1="..", _String2="..") returned 0 [0130.673] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0130.673] wcscmp (_String1="10", _String2=".") returned 1 [0130.673] wcscmp (_String1="10", _String2="..") returned 1 [0130.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4088 [0130.673] wcscpy (in: _Dest=0x3dc4088, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" [0130.673] wcscat (in: _Dest=0x3dc4088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\" [0130.673] wcscat (in: _Dest=0x3dc4088, _Source="10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0131.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0131.023] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0131.023] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0131.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e08) returned 1 [0131.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015670) returned 1 [0131.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 Thread: id = 163 os_tid = 0xb88 [0130.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6788 [0130.674] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0130.674] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\" [0130.674] wcscat (in: _Dest=0x2fe6788, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\*" [0130.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85070 [0130.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8688 [0131.094] wcscmp (_String1=".", _String2=".") returned 0 [0131.094] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.094] wcscmp (_String1="..", _String2=".") returned 1 [0131.094] wcscmp (_String1="..", _String2="..") returned 0 [0131.094] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923f9df0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0131.094] wcscmp (_String1="PUB60COR", _String2=".") returned 1 [0131.094] wcscmp (_String1="PUB60COR", _String2="..") returned 1 [0131.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x2ff5e80 [0131.094] wcscpy (in: _Dest=0x2ff5e80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0131.094] wcscat (in: _Dest=0x2ff5e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\" [0131.095] wcscat (in: _Dest=0x2ff5e80, _Source="PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0131.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4 [0131.364] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0131.364] wcscmp (_String1="Publisher", _String2=".") returned 1 [0131.364] wcscmp (_String1="Publisher", _String2="..") returned 1 [0131.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1b78 [0131.365] wcscpy (in: _Dest=0x3db1b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0131.365] wcscat (in: _Dest=0x3db1b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\" [0131.365] wcscat (in: _Dest=0x3db1b78, _Source="Publisher" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" [0131.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3db1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0 [0131.390] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0131.390] FindClose (in: hFindFile=0x2fc8688 | out: hFindFile=0x2fc8688) returned 1 [0131.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85070) returned 1 [0131.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0131.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 Thread: id = 164 os_tid = 0x124 [0130.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d50be8 [0130.675] wcscpy (in: _Dest=0x3d50be8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0130.675] wcscat (in: _Dest=0x3d50be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0130.676] wcscat (in: _Dest=0x3d50be8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*" [0130.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d852d8 [0130.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0131.654] wcscmp (_String1=".", _String2=".") returned 0 [0131.654] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.951] wcscmp (_String1="..", _String2=".") returned 1 [0133.951] wcscmp (_String1="..", _String2="..") returned 0 [0133.951] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52307700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94788d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52307700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.thmx", cAlternateFileName="ADJACE~1.THM")) returned 1 [0133.951] wcscmp (_String1="Adjacency.thmx", _String2=".") returned 1 [0133.952] wcscmp (_String1="Adjacency.thmx", _String2="..") returned 1 [0133.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f349e0 [0133.952] wcscpy (in: _Dest=0x3f349e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.952] wcscat (in: _Dest=0x3f349e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.952] wcscat (in: _Dest=0x3f349e0, _Source="Adjacency.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" [0143.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f349e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0143.504] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5492d100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe949ea30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5492d100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x11098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.thmx", cAlternateFileName="ANGLES~1.THM")) returned 1 [0143.504] wcscmp (_String1="Angles.thmx", _String2=".") returned 1 [0143.504] wcscmp (_String1="Angles.thmx", _String2="..") returned 1 [0143.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3550e0 [0143.504] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.504] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.504] wcscat (in: _Dest=0x3550e0, _Source="Angles.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" [0143.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0143.505] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3ee000, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xef3ee000, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x3f427, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.thmx", cAlternateFileName="APEX~1.THM")) returned 1 [0143.505] wcscmp (_String1="Apex.thmx", _String2=".") returned 1 [0143.505] wcscmp (_String1="Apex.thmx", _String2="..") returned 1 [0143.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f418 [0143.506] wcscpy (in: _Dest=0x3f2f418, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.506] wcscat (in: _Dest=0x3f2f418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.506] wcscat (in: _Dest=0x3f2f418, _Source="Apex.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" [0143.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0143.507] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6d3100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e6d3100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x15a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.thmx", cAlternateFileName="APOTHE~1.THM")) returned 1 [0143.507] wcscmp (_String1="Apothecary.thmx", _String2=".") returned 1 [0143.507] wcscmp (_String1="Apothecary.thmx", _String2="..") returned 1 [0143.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a700 [0143.507] wcscpy (in: _Dest=0x3e2a700, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.507] wcscat (in: _Dest=0x3e2a700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.507] wcscat (in: _Dest=0x3e2a700, _Source="Apothecary.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" [0143.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0143.508] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d26700, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2d26700, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x109e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.thmx", cAlternateFileName="ASPECT~1.THM")) returned 1 [0143.508] wcscmp (_String1="Aspect.thmx", _String2=".") returned 1 [0143.508] wcscmp (_String1="Aspect.thmx", _String2="..") returned 1 [0143.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354ab0 [0143.508] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.508] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.508] wcscat (in: _Dest=0x354ab0, _Source="Aspect.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" [0143.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0143.509] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3200b800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94eacf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3200b800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1763b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.thmx", cAlternateFileName="AUSTIN~1.THM")) returned 1 [0143.509] wcscmp (_String1="Austin.thmx", _String2=".") returned 1 [0143.509] wcscmp (_String1="Austin.thmx", _String2="..") returned 1 [0143.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35e20 [0143.510] wcscpy (in: _Dest=0x3f35e20, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.510] wcscat (in: _Dest=0x3f35e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.510] wcscat (in: _Dest=0x3f35e20, _Source="Austin.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" [0143.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0143.511] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58265800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9510e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58265800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x9ff03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.thmx", cAlternateFileName="BLACKT~1.THM")) returned 1 [0143.511] wcscmp (_String1="Black Tie.thmx", _String2=".") returned 1 [0143.511] wcscmp (_String1="Black Tie.thmx", _String2="..") returned 1 [0143.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35eb0 [0143.511] wcscpy (in: _Dest=0x3f35eb0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.511] wcscat (in: _Dest=0x3f35eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.511] wcscat (in: _Dest=0x3f35eb0, _Source="Black Tie.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" [0143.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0143.512] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf665ee00, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9536fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf665ee00, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x18c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.thmx", cAlternateFileName="CIVIC~1.THM")) returned 1 [0143.512] wcscmp (_String1="Civic.thmx", _String2=".") returned 1 [0143.512] wcscmp (_String1="Civic.thmx", _String2="..") returned 1 [0143.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80540d8 [0143.513] wcscpy (in: _Dest=0x80540d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.513] wcscat (in: _Dest=0x80540d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.513] wcscat (in: _Dest=0x80540d8, _Source="Civic.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" [0143.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80540d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0143.514] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35943f00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9536fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35943f00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x105f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.thmx", cAlternateFileName="CLARIT~1.THM")) returned 1 [0143.514] wcscmp (_String1="Clarity.thmx", _String2=".") returned 1 [0143.514] wcscmp (_String1="Clarity.thmx", _String2="..") returned 1 [0143.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35f40 [0143.514] wcscpy (in: _Dest=0x3f35f40, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.514] wcscat (in: _Dest=0x3f35f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.514] wcscat (in: _Dest=0x3f35f40, _Source="Clarity.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" [0143.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0143.515] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ceb0c00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9583270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ceb0c00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8ad4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.thmx", cAlternateFileName="COMPOS~1.THM")) returned 1 [0143.515] wcscmp (_String1="Composite.thmx", _String2=".") returned 1 [0143.515] wcscmp (_String1="Composite.thmx", _String2="..") returned 1 [0143.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35fd0 [0143.515] wcscpy (in: _Dest=0x3f35fd0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.515] wcscat (in: _Dest=0x3f35fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.515] wcscat (in: _Dest=0x3f35fd0, _Source="Composite.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" [0143.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0143.517] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8c84800, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9583270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8c84800, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.thmx", cAlternateFileName="CONCOU~1.THM")) returned 1 [0143.517] wcscmp (_String1="Concourse.thmx", _String2=".") returned 1 [0143.517] wcscmp (_String1="Concourse.thmx", _String2="..") returned 1 [0143.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f36060 [0143.517] wcscpy (in: _Dest=0x3f36060, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.517] wcscat (in: _Dest=0x3f36060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.517] wcscat (in: _Dest=0x3f36060, _Source="Concourse.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" [0143.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0143.518] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61afc000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe95f5690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x61afc000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1e92c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.thmx", cAlternateFileName="COUTUR~1.THM")) returned 1 [0143.518] wcscmp (_String1="Couture.thmx", _String2=".") returned 1 [0143.519] wcscmp (_String1="Couture.thmx", _String2="..") returned 1 [0143.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f360f0 [0143.519] wcscpy (in: _Dest=0x3f360f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.519] wcscat (in: _Dest=0x3f360f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.519] wcscat (in: _Dest=0x3f360f0, _Source="Couture.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" [0143.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f360f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0143.520] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65434700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe961b7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65434700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x555df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.thmx", cAlternateFileName="ELEMEN~1.THM")) returned 1 [0143.520] wcscmp (_String1="Elemental.thmx", _String2=".") returned 1 [0143.520] wcscmp (_String1="Elemental.thmx", _String2="..") returned 1 [0143.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f36180 [0143.520] wcscpy (in: _Dest=0x3f36180, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.520] wcscat (in: _Dest=0x3f36180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.520] wcscat (in: _Dest=0x3f36180, _Source="Elemental.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" [0143.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0143.522] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5bcf00, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc5bcf00, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x10f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.thmx", cAlternateFileName="EQUITY~1.THM")) returned 1 [0143.522] wcscmp (_String1="Equity.thmx", _String2=".") returned 1 [0143.522] wcscmp (_String1="Equity.thmx", _String2="..") returned 1 [0143.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f36210 [0143.522] wcscpy (in: _Dest=0x3f36210, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.522] wcscat (in: _Dest=0x3f36210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.522] wcscat (in: _Dest=0x3f36210, _Source="Equity.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" [0143.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0143.523] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3927c600, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3927c600, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.thmx", cAlternateFileName="ESSENT~1.THM")) returned 1 [0143.523] wcscmp (_String1="Essential.thmx", _String2=".") returned 1 [0143.523] wcscmp (_String1="Essential.thmx", _String2="..") returned 1 [0143.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f362a0 [0143.524] wcscpy (in: _Dest=0x3f362a0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.524] wcscat (in: _Dest=0x3f362a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.524] wcscat (in: _Dest=0x3f362a0, _Source="Essential.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" [0143.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f362a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0143.525] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6ce00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68d6ce00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.thmx", cAlternateFileName="EXECUT~1.THM")) returned 1 [0143.525] wcscmp (_String1="Executive.thmx", _String2=".") returned 1 [0143.525] wcscmp (_String1="Executive.thmx", _String2="..") returned 1 [0143.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f36330 [0143.525] wcscpy (in: _Dest=0x3f36330, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.525] wcscat (in: _Dest=0x3f36330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.525] wcscat (in: _Dest=0x3f36330, _Source="Executive.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" [0143.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0143.526] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382dd00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9667ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x382dd00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x100a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.thmx", cAlternateFileName="FLOW~1.THM")) returned 1 [0143.526] wcscmp (_String1="Flow.thmx", _String2=".") returned 1 [0143.526] wcscmp (_String1="Flow.thmx", _String2="..") returned 1 [0143.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053390 [0143.526] wcscpy (in: _Dest=0x8053390, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.526] wcscat (in: _Dest=0x8053390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.527] wcscat (in: _Dest=0x8053390, _Source="Flow.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" [0143.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0143.528] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffef5600, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe968dc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xffef5600, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0xf814, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.thmx", cAlternateFileName="FOUNDR~1.THM")) returned 1 [0143.528] wcscmp (_String1="Foundry.thmx", _String2=".") returned 1 [0143.528] wcscmp (_String1="Foundry.thmx", _String2="..") returned 1 [0143.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2408 [0143.528] wcscpy (in: _Dest=0x3df2408, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.528] wcscat (in: _Dest=0x3df2408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.528] wcscat (in: _Dest=0x3df2408, _Source="Foundry.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" [0143.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0143.530] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cbb4d00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96b3d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cbb4d00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.thmx", cAlternateFileName="GRID~1.THM")) returned 1 [0143.530] wcscmp (_String1="Grid.thmx", _String2=".") returned 1 [0143.530] wcscmp (_String1="Grid.thmx", _String2="..") returned 1 [0143.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8054490 [0143.530] wcscpy (in: _Dest=0x8054490, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.530] wcscat (in: _Dest=0x8054490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.530] wcscat (in: _Dest=0x8054490, _Source="Grid.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" [0143.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0143.531] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404ed400, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96b3d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x404ed400, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x60041, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.thmx", cAlternateFileName="HARDCO~1.THM")) returned 1 [0143.531] wcscmp (_String1="Hardcover.thmx", _String2=".") returned 1 [0143.531] wcscmp (_String1="Hardcover.thmx", _String2="..") returned 1 [0143.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1d48 [0143.531] wcscpy (in: _Dest=0x3df1d48, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.531] wcscat (in: _Dest=0x3df1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.531] wcscat (in: _Dest=0x3df1d48, _Source="Hardcover.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" [0143.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0143.533] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6a5500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6c6a5500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x3becb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.thmx", cAlternateFileName="HORIZO~1.THM")) returned 1 [0143.533] wcscmp (_String1="Horizon.thmx", _String2=".") returned 1 [0143.533] wcscmp (_String1="Horizon.thmx", _String2="..") returned 1 [0143.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2888 [0143.533] wcscpy (in: _Dest=0x3df2888, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.533] wcscat (in: _Dest=0x3df2888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.533] wcscat (in: _Dest=0x3df2888, _Source="Horizon.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" [0143.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0143.534] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7166400, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7166400, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x146a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.thmx", cAlternateFileName="MEDIAN~1.THM")) returned 1 [0143.534] wcscmp (_String1="Median.thmx", _String2=".") returned 1 [0143.534] wcscmp (_String1="Median.thmx", _String2="..") returned 1 [0143.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2be8 [0143.534] wcscpy (in: _Dest=0x3df2be8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.534] wcscat (in: _Dest=0x3df2be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.534] wcscat (in: _Dest=0x3df2be8, _Source="Median.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" [0143.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0143.536] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x978be00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9726190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x978be00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x13af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.thmx", cAlternateFileName="METRO~1.THM")) returned 1 [0143.536] wcscmp (_String1="Metro.thmx", _String2=".") returned 1 [0143.536] wcscmp (_String1="Metro.thmx", _String2="..") returned 1 [0143.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054408 [0143.536] wcscpy (in: _Dest=0x8054408, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.536] wcscat (in: _Dest=0x8054408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.536] wcscat (in: _Dest=0x8054408, _Source="Metro.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" [0143.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0143.537] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c4500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9726190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0c4500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1583a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.thmx", cAlternateFileName="MODULE~1.THM")) returned 1 [0143.538] wcscmp (_String1="Module.thmx", _String2=".") returned 1 [0143.538] wcscmp (_String1="Module.thmx", _String2="..") returned 1 [0143.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1f88 [0143.538] wcscpy (in: _Dest=0x3df1f88, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.538] wcscat (in: _Dest=0x3df1f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.538] wcscat (in: _Dest=0x3df1f88, _Source="Module.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" [0143.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df1f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0143.539] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffddc00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe974c2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6ffddc00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x96ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.thmx", cAlternateFileName="NEWSPR~1.THM")) returned 1 [0143.539] wcscmp (_String1="Newsprint.thmx", _String2=".") returned 1 [0143.539] wcscmp (_String1="Newsprint.thmx", _String2="..") returned 1 [0143.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb0fe8 [0143.539] wcscpy (in: _Dest=0x3eb0fe8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.539] wcscat (in: _Dest=0x3eb0fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.539] wcscat (in: _Dest=0x3eb0fe8, _Source="Newsprint.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" [0143.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0143.977] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109fcc00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x109fcc00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x132b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.thmx", cAlternateFileName="OPULEN~1.THM")) returned 1 [0143.977] wcscmp (_String1="Opulent.thmx", _String2=".") returned 1 [0143.977] wcscmp (_String1="Opulent.thmx", _String2="..") returned 1 [0143.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34d40 [0143.977] wcscpy (in: _Dest=0x3f34d40, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0143.977] wcscat (in: _Dest=0x3f34d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0143.978] wcscat (in: _Dest=0x3f34d40, _Source="Opulent.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" [0154.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0154.038] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14335300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x14335300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x16ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.thmx", cAlternateFileName="ORIEL~1.THM")) returned 1 [0154.038] wcscmp (_String1="Oriel.thmx", _String2=".") returned 1 [0154.038] wcscmp (_String1="Oriel.thmx", _String2="..") returned 1 [0154.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fff8 [0154.038] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.038] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.039] wcscat (in: _Dest=0x3e1fff8, _Source="Oriel.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" [0154.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0154.040] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c6da00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17c6da00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1540b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.thmx", cAlternateFileName="ORIGIN~1.THM")) returned 1 [0154.040] wcscmp (_String1="Origin.thmx", _String2=".") returned 1 [0154.040] wcscmp (_String1="Origin.thmx", _String2="..") returned 1 [0154.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1a98 [0154.040] wcscpy (in: _Dest=0x3eb1a98, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.040] wcscat (in: _Dest=0x3eb1a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.040] wcscat (in: _Dest=0x3eb1a98, _Source="Origin.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" [0154.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0154.041] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5a6100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b5a6100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x421e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.thmx", cAlternateFileName="PAPER~1.THM")) returned 1 [0154.041] wcscmp (_String1="Paper.thmx", _String2=".") returned 1 [0154.041] wcscmp (_String1="Paper.thmx", _String2="..") returned 1 [0154.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f448 [0154.041] wcscpy (in: _Dest=0x3e1f448, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.041] wcscat (in: _Dest=0x3e1f448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.041] wcscat (in: _Dest=0x3e1f448, _Source="Paper.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" [0154.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0154.042] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e25b00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97be710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x43e25b00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.thmx", cAlternateFileName="PERSPE~1.THM")) returned 1 [0154.042] wcscmp (_String1="Perspective.thmx", _String2=".") returned 1 [0154.042] wcscmp (_String1="Perspective.thmx", _String2="..") returned 1 [0154.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d16c0 [0154.042] wcscpy (in: _Dest=0x81d16c0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.042] wcscat (in: _Dest=0x81d16c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.042] wcscat (in: _Dest=0x81d16c0, _Source="Perspective.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" [0154.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d16c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0154.043] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4775e200, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97e4870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4775e200, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xc97ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.thmx", cAlternateFileName="PUSHPI~1.THM")) returned 1 [0154.044] wcscmp (_String1="Pushpin.thmx", _String2=".") returned 1 [0154.044] wcscmp (_String1="Pushpin.thmx", _String2="..") returned 1 [0154.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb2db8 [0154.044] wcscpy (in: _Dest=0x3eb2db8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.044] wcscat (in: _Dest=0x3eb2db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.044] wcscat (in: _Dest=0x3eb2db8, _Source="Pushpin.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" [0154.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0154.045] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73916300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73916300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x106e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.thmx", cAlternateFileName="SLIPST~1.THM")) returned 1 [0154.045] wcscmp (_String1="Slipstream.thmx", _String2=".") returned 1 [0154.045] wcscmp (_String1="Slipstream.thmx", _String2="..") returned 1 [0154.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d17f0 [0154.045] wcscpy (in: _Dest=0x81d17f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.045] wcscat (in: _Dest=0x81d17f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.045] wcscat (in: _Dest=0x81d17f0, _Source="Slipstream.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" [0154.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d17f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0154.046] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbcbb00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1dbcbb00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x124a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.thmx", cAlternateFileName="SOLSTI~1.THM")) returned 1 [0154.046] wcscmp (_String1="Solstice.thmx", _String2=".") returned 1 [0154.046] wcscmp (_String1="Solstice.thmx", _String2="..") returned 1 [0154.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb0fe8 [0154.046] wcscpy (in: _Dest=0x3eb0fe8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.046] wcscat (in: _Dest=0x3eb0fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.046] wcscat (in: _Dest=0x3eb0fe8, _Source="Solstice.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" [0154.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230c [0154.047] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21504200, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x21504200, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x10d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.thmx", cAlternateFileName="TECHNI~1.THM")) returned 1 [0154.047] wcscmp (_String1="Technic.thmx", _String2=".") returned 1 [0154.047] wcscmp (_String1="Technic.thmx", _String2="..") returned 1 [0154.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb2d28 [0154.047] wcscpy (in: _Dest=0x3eb2d28, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.047] wcscat (in: _Dest=0x3eb2d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.047] wcscat (in: _Dest=0x3eb2d28, _Source="Technic.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" [0154.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0154.048] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b096900, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9830b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b096900, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x15d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.thmx", cAlternateFileName="THATCH~1.THM")) returned 1 [0154.048] wcscmp (_String1="Thatch.thmx", _String2=".") returned 1 [0154.049] wcscmp (_String1="Thatch.thmx", _String2="..") returned 1 [0154.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2c98 [0154.049] wcscpy (in: _Dest=0x3eb2c98, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.049] wcscat (in: _Dest=0x3eb2c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.049] wcscat (in: _Dest=0x3eb2c98, _Source="Thatch.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" [0154.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0154.050] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f53a50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c63d30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1 [0154.050] wcscmp (_String1="Theme Colors", _String2=".") returned 1 [0154.050] wcscmp (_String1="Theme Colors", _String2="..") returned 1 [0154.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb2c08 [0154.050] wcscpy (in: _Dest=0x3eb2c08, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.050] wcscat (in: _Dest=0x3eb2c08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.050] wcscat (in: _Dest=0x3eb2c08, _Source="Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0154.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb2c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0154.051] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1 [0154.051] wcscmp (_String1="Theme Effects", _String2=".") returned 1 [0154.051] wcscmp (_String1="Theme Effects", _String2="..") returned 1 [0154.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2b78 [0154.051] wcscpy (in: _Dest=0x3eb2b78, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.051] wcscat (in: _Dest=0x3eb2b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.051] wcscat (in: _Dest=0x3eb2b78, _Source="Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0154.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb2b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0154.052] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d4fb90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x883e5670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1 [0154.052] wcscmp (_String1="Theme Fonts", _String2=".") returned 1 [0154.052] wcscmp (_String1="Theme Fonts", _String2="..") returned 1 [0154.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1228 [0154.052] wcscpy (in: _Dest=0x3eb1228, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.052] wcscat (in: _Dest=0x3eb1228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.052] wcscat (in: _Dest=0x3eb1228, _Source="Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0154.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0154.053] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24e3c900, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9856c90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x24e3c900, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.thmx", cAlternateFileName="TREK~1.THM")) returned 1 [0154.053] wcscmp (_String1="Trek.thmx", _String2=".") returned 1 [0154.053] wcscmp (_String1="Trek.thmx", _String2="..") returned 1 [0154.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfc40 [0154.053] wcscpy (in: _Dest=0x81bfc40, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.053] wcscat (in: _Dest=0x81bfc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.053] wcscat (in: _Dest=0x81bfc40, _Source="Trek.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" [0154.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0154.055] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28775000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9d8bcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28775000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xfc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.thmx", cAlternateFileName="URBAN~1.THM")) returned 1 [0154.055] wcscmp (_String1="Urban.thmx", _String2=".") returned 1 [0154.055] wcscmp (_String1="Urban.thmx", _String2="..") returned 1 [0154.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfcc8 [0154.055] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.055] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.055] wcscat (in: _Dest=0x81bfcc8, _Source="Urban.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" [0154.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0154.056] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c0ad700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2c0ad700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.thmx", cAlternateFileName="VERVE~1.THM")) returned 1 [0154.056] wcscmp (_String1="Verve.thmx", _String2=".") returned 1 [0154.056] wcscmp (_String1="Verve.thmx", _String2="..") returned 1 [0154.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfd50 [0154.056] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.056] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.056] wcscat (in: _Dest=0x81bfd50, _Source="Verve.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" [0154.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0154.057] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9cf000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e9cf000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="WAVEFO~1.THM")) returned 1 [0154.057] wcscmp (_String1="Waveform.thmx", _String2=".") returned 1 [0154.057] wcscmp (_String1="Waveform.thmx", _String2="..") returned 1 [0154.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2ae8 [0154.057] wcscpy (in: _Dest=0x3eb2ae8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0154.057] wcscat (in: _Dest=0x3eb2ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0154.057] wcscat (in: _Dest=0x3eb2ae8, _Source="Waveform.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" [0154.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0154.059] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9cf000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e9cf000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="WAVEFO~1.THM")) returned 0 [0154.059] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0154.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852d8) returned 1 [0154.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50be8) returned 1 [0154.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50e40) returned 1 Thread: id = 165 os_tid = 0x524 [0130.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe40e8 [0130.677] wcscpy (in: _Dest=0x2fe40e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0130.677] wcscat (in: _Dest=0x2fe40e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\" [0130.677] wcscat (in: _Dest=0x2fe40e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\*" [0130.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0130.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8b08 [0131.099] wcscmp (_String1=".", _String2=".") returned 0 [0131.099] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.099] wcscmp (_String1="..", _String2=".") returned 1 [0131.099] wcscmp (_String1="..", _String2="..") returned 0 [0131.099] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe30e510, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0131.099] wcscmp (_String1="CAGCAT10", _String2=".") returned 1 [0131.099] wcscmp (_String1="CAGCAT10", _String2="..") returned 1 [0131.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5240 [0131.099] wcscpy (in: _Dest=0x2ff5240, _Source="C:\\Program Files\\Microsoft Office\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0131.099] wcscat (in: _Dest=0x2ff5240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\" [0131.099] wcscat (in: _Dest=0x2ff5240, _Source="CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0133.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0133.747] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0133.747] wcscmp (_String1="OFFICE14", _String2=".") returned 1 [0133.747] wcscmp (_String1="OFFICE14", _String2="..") returned 1 [0133.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39c48 [0133.747] wcscpy (in: _Dest=0x3f39c48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0133.748] wcscat (in: _Dest=0x3f39c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\" [0133.748] wcscat (in: _Dest=0x3f39c48, _Source="OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0133.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0133.749] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 0 [0133.749] FindClose (in: hFindFile=0x2fc8b08 | out: hFindFile=0x2fc8b08) returned 1 [0133.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0133.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe40e8) returned 1 [0133.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f060) returned 1 Thread: id = 166 os_tid = 0xb8c [0130.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd340 [0130.678] wcscpy (in: _Dest=0x3ecd340, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0130.678] wcscat (in: _Dest=0x3ecd340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0130.679] wcscat (in: _Dest=0x3ecd340, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\*" [0130.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d857a8 [0130.679] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe942c610, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0130.679] wcscmp (_String1=".", _String2=".") returned 0 [0130.679] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe942c610, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.886] wcscmp (_String1="..", _String2=".") returned 1 [0130.886] wcscmp (_String1="..", _String2="..") returned 0 [0130.886] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0130.886] wcscmp (_String1="1033", _String2=".") returned 1 [0130.886] wcscmp (_String1="1033", _String2="..") returned 1 [0130.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd410 [0130.887] wcscpy (in: _Dest=0x3ecd410, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0130.887] wcscat (in: _Dest=0x3ecd410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0130.887] wcscat (in: _Dest=0x3ecd410, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0134.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0134.206] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e395f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e395f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0134.206] wcscmp (_String1="1036", _String2=".") returned 1 [0134.206] wcscmp (_String1="1036", _String2="..") returned 1 [0134.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c468 [0134.206] wcscpy (in: _Dest=0x3d8c468, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.206] wcscat (in: _Dest=0x3d8c468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.206] wcscat (in: _Dest=0x3d8c468, _Source="1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036" [0134.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8c468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0134.207] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba86390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ba86390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0134.207] wcscmp (_String1="3082", _String2=".") returned 1 [0134.208] wcscmp (_String1="3082", _String2="..") returned 1 [0134.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd548 [0134.208] wcscpy (in: _Dest=0x3ecd548, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.208] wcscat (in: _Dest=0x3ecd548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.208] wcscat (in: _Dest=0x3ecd548, _Source="3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082" [0134.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0134.209] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x7636cc50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0xdc5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1 [0134.209] wcscmp (_String1="ACCDDS.DLL", _String2=".") returned 1 [0134.209] wcscmp (_String1="ACCDDS.DLL", _String2="..") returned 1 [0134.209] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x62fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSF.DLL", cAlternateFileName="")) returned 1 [0134.209] wcscmp (_String1="ACCDDSF.DLL", _String2=".") returned 1 [0134.209] wcscmp (_String1="ACCDDSF.DLL", _String2="..") returned 1 [0134.209] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x855c6c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x5a9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSLM.DLL", cAlternateFileName="")) returned 1 [0134.209] wcscmp (_String1="ACCDDSLM.DLL", _String2=".") returned 1 [0134.209] wcscmp (_String1="ACCDDSLM.DLL", _String2="..") returned 1 [0134.209] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c3dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1 [0134.210] wcscmp (_String1="AccessWeb", _String2=".") returned 1 [0134.210] wcscmp (_String1="AccessWeb", _String2="..") returned 1 [0134.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32868 [0134.210] wcscpy (in: _Dest=0x3f32868, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.210] wcscat (in: _Dest=0x3f32868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.210] wcscat (in: _Dest=0x3f32868, _Source="AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0134.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0134.211] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a619c00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x76392db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a619c00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1 [0134.211] wcscmp (_String1="ACCICONS.EXE", _String2=".") returned 1 [0134.211] wcscmp (_String1="ACCICONS.EXE", _String2="..") returned 1 [0134.211] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x763df070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDT.DLL", cAlternateFileName="")) returned 1 [0134.211] wcscmp (_String1="ACCVDT.DLL", _String2=".") returned 1 [0134.211] wcscmp (_String1="ACCVDT.DLL", _String2="..") returned 1 [0134.211] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85769b50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1 [0134.211] wcscmp (_String1="ACCWIZ", _String2=".") returned 1 [0134.212] wcscmp (_String1="ACCWIZ", _String2="..") returned 1 [0134.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a348 [0134.212] wcscpy (in: _Dest=0x3f3a348, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.212] wcscat (in: _Dest=0x3f3a348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.212] wcscat (in: _Dest=0x3f3a348, _Source="ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0134.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0134.213] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x855ecd90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x28180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0134.213] wcscmp (_String1="ACCWIZ.DLL", _String2=".") returned 1 [0134.213] wcscmp (_String1="ACCWIZ.DLL", _String2="..") returned 1 [0134.213] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0caa00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0caa00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x85fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0134.213] wcscmp (_String1="ACEDAO.DLL", _String2=".") returned 1 [0134.213] wcscmp (_String1="ACEDAO.DLL", _String2="..") returned 1 [0134.214] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x882688b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0134.214] wcscmp (_String1="ADDINS", _String2=".") returned 1 [0134.214] wcscmp (_String1="ADDINS", _String2="..") returned 1 [0134.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a3b8 [0134.214] wcscpy (in: _Dest=0x3f3a3b8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.214] wcscat (in: _Dest=0x3f3a3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.214] wcscat (in: _Dest=0x3f3a3b8, _Source="ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0134.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0134.215] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a1f8b00, ftCreationTime.dwHighDateTime=0x1c9c9dd, ftLastAccessTime.dwLowDateTime=0x765a80f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a1f8b00, ftLastWriteTime.dwHighDateTime=0x1c9c9dd, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1 [0134.215] wcscmp (_String1="ADVCMP.DIC", _String2=".") returned 1 [0134.215] wcscmp (_String1="ADVCMP.DIC", _String2="..") returned 1 [0134.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32e08 [0134.215] wcscpy (in: _Dest=0x3f32e08, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.215] wcscat (in: _Dest=0x3f32e08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.216] wcscat (in: _Dest=0x3f32e08, _Source="ADVCMP.DIC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" [0134.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0134.217] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68715e00, ftCreationTime.dwHighDateTime=0x1c1866a, ftLastAccessTime.dwLowDateTime=0x858020d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68715e00, ftLastWriteTime.dwHighDateTime=0x1c1866a, nFileSizeHigh=0x0, nFileSizeLow=0x3a1fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVTEL.DIC", cAlternateFileName="")) returned 1 [0134.217] wcscmp (_String1="ADVTEL.DIC", _String2=".") returned 1 [0134.217] wcscmp (_String1="ADVTEL.DIC", _String2="..") returned 1 [0134.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68678 [0134.217] wcscpy (in: _Dest=0x3e68678, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.217] wcscat (in: _Dest=0x3e68678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.217] wcscat (in: _Dest=0x3e68678, _Source="ADVTEL.DIC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" [0134.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0134.219] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e917700, ftCreationTime.dwHighDateTime=0x1c9c9d0, ftLastAccessTime.dwLowDateTime=0x765f43b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e917700, ftLastWriteTime.dwHighDateTime=0x1c9c9d0, nFileSizeHigh=0x0, nFileSizeLow=0x2e25e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVZIP.DIC", cAlternateFileName="")) returned 1 [0134.219] wcscmp (_String1="ADVZIP.DIC", _String2=".") returned 1 [0134.219] wcscmp (_String1="ADVZIP.DIC", _String2="..") returned 1 [0134.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e686f0 [0134.219] wcscpy (in: _Dest=0x3e686f0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.219] wcscat (in: _Dest=0x3e686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.219] wcscat (in: _Dest=0x3e686f0, _Source="ADVZIP.DIC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" [0134.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0134.221] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8bb17b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xdd178, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1 [0134.221] wcscmp (_String1="AEC.DLL", _String2=".") returned 1 [0134.221] wcscmp (_String1="AEC.DLL", _String2="..") returned 1 [0134.221] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90c0670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x75f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1 [0134.221] wcscmp (_String1="AECUTILS.DLL", _String2=".") returned 1 [0134.222] wcscmp (_String1="AECUTILS.DLL", _String2="..") returned 1 [0134.222] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4852fb00, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x769864b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4852fb00, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x46080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASCIIENG.LNG", cAlternateFileName="")) returned 1 [0134.222] wcscmp (_String1="ASCIIENG.LNG", _String2=".") returned 1 [0134.222] wcscmp (_String1="ASCIIENG.LNG", _String2="..") returned 1 [0134.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68768 [0134.222] wcscpy (in: _Dest=0x3e68768, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.222] wcscat (in: _Dest=0x3e68768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.222] wcscat (in: _Dest=0x3e68768, _Source="ASCIIENG.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" [0134.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0134.225] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc0dd00, ftCreationTime.dwHighDateTime=0x1ca9891, ftLastAccessTime.dwLowDateTime=0x85d5d250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedc0dd00, ftLastWriteTime.dwHighDateTime=0x1ca9891, nFileSizeHigh=0x0, nFileSizeLow=0x187b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="AUDIOS~2.DLL")) returned 1 [0134.225] wcscmp (_String1="AUDIOSEARCHLTS.DLL", _String2=".") returned 1 [0134.225] wcscmp (_String1="AUDIOSEARCHLTS.DLL", _String2="..") returned 1 [0134.225] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc0dd00, ftCreationTime.dwHighDateTime=0x1ca9891, ftLastAccessTime.dwLowDateTime=0x769ac610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedc0dd00, ftLastWriteTime.dwHighDateTime=0x1ca9891, nFileSizeHigh=0x0, nFileSizeLow=0xf3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="AUDIOS~1.DLL")) returned 1 [0134.225] wcscmp (_String1="AUDIOSEARCHMAIN.DLL", _String2=".") returned 1 [0134.225] wcscmp (_String1="AUDIOSEARCHMAIN.DLL", _String2="..") returned 1 [0134.225] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc0dd00, ftCreationTime.dwHighDateTime=0x1ca9891, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedc0dd00, ftLastWriteTime.dwHighDateTime=0x1ca9891, nFileSizeHigh=0x0, nFileSizeLow=0x214b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="AUDIOS~3.DLL")) returned 1 [0134.225] wcscmp (_String1="AUDIOSEARCHSAPIFE.DLL", _String2=".") returned 1 [0134.225] wcscmp (_String1="AUDIOSEARCHSAPIFE.DLL", _String2="..") returned 1 [0134.225] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3509e800, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3509e800, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0xd388, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1 [0134.225] wcscmp (_String1="AUTHZAX.DLL", _String2=".") returned 1 [0134.225] wcscmp (_String1="AUTHZAX.DLL", _String2="..") returned 1 [0134.226] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345f0200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x345f0200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x9d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAutogen.dll", cAlternateFileName="BCSAUT~1.DLL")) returned 1 [0134.226] wcscmp (_String1="BCSAutogen.dll", _String2=".") returned 1 [0134.226] wcscmp (_String1="BCSAutogen.dll", _String2="..") returned 1 [0134.226] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332dd500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x332dd500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClient.Msg.dll", cAlternateFileName="BCSCLI~1.DLL")) returned 1 [0134.226] wcscmp (_String1="BCSClient.Msg.dll", _String2=".") returned 1 [0134.226] wcscmp (_String1="BCSClient.Msg.dll", _String2="..") returned 1 [0134.226] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ab5900, ftCreationTime.dwHighDateTime=0x1cac256, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8ab5900, ftLastWriteTime.dwHighDateTime=0x1cac256, nFileSizeHigh=0x0, nFileSizeLow=0x6886, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClientManifest.man", cAlternateFileName="BCSCLI~1.MAN")) returned 1 [0134.226] wcscmp (_String1="BCSClientManifest.man", _String2=".") returned 1 [0134.226] wcscmp (_String1="BCSClientManifest.man", _String2="..") returned 1 [0134.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34950 [0134.226] wcscpy (in: _Dest=0x3f34950, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.226] wcscat (in: _Dest=0x3f34950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.227] wcscat (in: _Dest=0x3f34950, _Source="BCSClientManifest.man" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man") returned="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" [0134.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0134.228] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e6a500, ftCreationTime.dwHighDateTime=0x1cac256, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3e6a500, ftLastWriteTime.dwHighDateTime=0x1cac256, nFileSizeHigh=0x0, nFileSizeLow=0x8d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSEvents.man", cAlternateFileName="BCSEVE~1.MAN")) returned 1 [0134.228] wcscmp (_String1="BCSEvents.man", _String2=".") returned 1 [0134.228] wcscmp (_String1="BCSEvents.man", _String2="..") returned 1 [0134.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24040 [0134.228] wcscpy (in: _Dest=0x3e24040, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.228] wcscat (in: _Dest=0x3e24040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.229] wcscat (in: _Dest=0x3e24040, _Source="BCSEvents.man" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man") returned="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" [0134.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0134.235] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfced6000, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfced6000, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xdf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="BCSLAU~1.DLL")) returned 1 [0134.235] wcscmp (_String1="BCSLaunch.dll", _String2=".") returned 1 [0134.235] wcscmp (_String1="BCSLaunch.dll", _String2="..") returned 1 [0134.235] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd587a000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x19780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSProxy32.dll", cAlternateFileName="BCSPRO~1.DLL")) returned 1 [0134.235] wcscmp (_String1="BCSProxy32.dll", _String2=".") returned 1 [0134.235] wcscmp (_String1="BCSProxy32.dll", _String2="..") returned 1 [0134.235] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b8cd00, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6b8cd00, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x6d580, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntime.dll", cAlternateFileName="BCSRUN~2.DLL")) returned 1 [0134.235] wcscmp (_String1="BCSRuntime.dll", _String2=".") returned 1 [0134.235] wcscmp (_String1="BCSRuntime.dll", _String2="..") returned 1 [0134.235] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35902f00, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7d053ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35902f00, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeUI.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1 [0134.235] wcscmp (_String1="BCSRuntimeUI.dll", _String2=".") returned 1 [0134.235] wcscmp (_String1="BCSRuntimeUI.dll", _String2="..") returned 1 [0134.235] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd587a000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x1e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSStr32.dll", cAlternateFileName="")) returned 1 [0134.235] wcscmp (_String1="BCSStr32.dll", _String2=".") returned 1 [0134.235] wcscmp (_String1="BCSStr32.dll", _String2="..") returned 1 [0134.235] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b8cd00, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6b8cd00, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x16580, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSSync.exe", cAlternateFileName="")) returned 1 [0134.235] wcscmp (_String1="BCSSync.exe", _String2=".") returned 1 [0134.235] wcscmp (_String1="BCSSync.exe", _String2="..") returned 1 [0134.235] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe20600, ftCreationTime.dwHighDateTime=0x1cac09a, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdbe20600, ftLastWriteTime.dwHighDateTime=0x1cac09a, nFileSizeHigh=0x0, nFileSizeLow=0x65ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="BDCMET~1.XSD")) returned 1 [0134.236] wcscmp (_String1="bdcmetadata.xsd", _String2=".") returned 1 [0134.236] wcscmp (_String1="bdcmetadata.xsd", _String2="..") returned 1 [0134.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24740 [0134.236] wcscpy (in: _Dest=0x3e24740, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.236] wcscat (in: _Dest=0x3e24740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.236] wcscat (in: _Dest=0x3e24740, _Source="bdcmetadata.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" [0134.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0134.237] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe20600, ftCreationTime.dwHighDateTime=0x1cac09a, ftLastAccessTime.dwLowDateTime=0x869dc5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdbe20600, ftLastWriteTime.dwHighDateTime=0x1cac09a, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="BDCMET~2.XSD")) returned 1 [0134.237] wcscmp (_String1="bdcmetadataresource.xsd", _String2=".") returned 1 [0134.237] wcscmp (_String1="bdcmetadataresource.xsd", _String2="..") returned 1 [0134.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34b90 [0134.237] wcscpy (in: _Dest=0x3f34b90, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.237] wcscat (in: _Dest=0x3f34b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.238] wcscat (in: _Dest=0x3f34b90, _Source="bdcmetadataresource.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" [0134.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0134.239] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85da9510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0134.239] wcscmp (_String1="Bibliography", _String2=".") returned 1 [0134.239] wcscmp (_String1="Bibliography", _String2="..") returned 1 [0134.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e687e0 [0134.239] wcscpy (in: _Dest=0x3e687e0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.239] wcscat (in: _Dest=0x3e687e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.239] wcscat (in: _Dest=0x3e687e0, _Source="Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0134.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e687e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0134.241] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d4fa3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0134.241] wcscmp (_String1="BORDERS", _String2=".") returned 1 [0134.241] wcscmp (_String1="BORDERS", _String2="..") returned 1 [0134.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33438 [0134.241] wcscpy (in: _Dest=0x3f33438, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.241] wcscat (in: _Dest=0x3f33438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.241] wcscat (in: _Dest=0x3f33438, _Source="BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0134.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0134.243] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90c0670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x21f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1 [0134.243] wcscmp (_String1="BRTVIEW.DLL", _String2=".") returned 1 [0134.243] wcscmp (_String1="BRTVIEW.DLL", _String2="..") returned 1 [0134.243] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8bd7910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0134.243] wcscmp (_String1="BSTORM.DLL", _String2=".") returned 1 [0134.243] wcscmp (_String1="BSTORM.DLL", _String2="..") returned 1 [0134.243] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeffef000, ftCreationTime.dwHighDateTime=0x1cba639, ftLastAccessTime.dwLowDateTime=0xf72c8430, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xeffef000, ftLastWriteTime.dwHighDateTime=0x1cba639, nFileSizeHigh=0x0, nFileSizeLow=0x60f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1 [0134.243] wcscmp (_String1="CDLMSO.DLL", _String2=".") returned 1 [0134.243] wcscmp (_String1="CDLMSO.DLL", _String2="..") returned 1 [0134.243] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a1d600, ftCreationTime.dwHighDateTime=0x1bcac51, ftLastAccessTime.dwLowDateTime=0x3527e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26a1d600, ftLastWriteTime.dwHighDateTime=0x1bcac51, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1 [0134.243] wcscmp (_String1="CGMIMP32.HLP", _String2=".") returned 1 [0134.243] wcscmp (_String1="CGMIMP32.HLP", _String2="..") returned 1 [0134.243] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49842800, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49842800, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="CHARSE~1.CHR")) returned 1 [0134.243] wcscmp (_String1="CharSetTable.chr", _String2=".") returned 1 [0134.243] wcscmp (_String1="CharSetTable.chr", _String2="..") returned 1 [0134.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24440 [0134.244] wcscpy (in: _Dest=0x3e24440, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.244] wcscat (in: _Dest=0x3e24440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.244] wcscat (in: _Dest=0x3e24440, _Source="CharSetTable.chr" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr") returned="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" [0134.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0134.250] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67250900, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf50907f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x67250900, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x33578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0134.250] wcscmp (_String1="CLVIEW.EXE", _String2=".") returned 1 [0134.251] wcscmp (_String1="CLVIEW.EXE", _String2="..") returned 1 [0134.251] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8afeab00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90e67d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8afeab00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x7a578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1 [0134.251] wcscmp (_String1="CMAX20.DLL", _String2=".") returned 1 [0134.251] wcscmp (_String1="CMAX20.DLL", _String2="..") returned 1 [0134.251] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x24f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0134.251] wcscmp (_String1="CNFNOT32.EXE", _String2=".") returned 1 [0134.251] wcscmp (_String1="CNFNOT32.EXE", _String2="..") returned 1 [0134.251] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90e67d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1 [0134.251] wcscmp (_String1="CODEEDIT.DLL", _String2=".") returned 1 [0134.251] wcscmp (_String1="CODEEDIT.DLL", _String2="..") returned 1 [0134.251] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efe4100, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x86cafff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6efe4100, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x20f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0134.251] wcscmp (_String1="CONTAB32.DLL", _String2=".") returned 1 [0134.251] wcscmp (_String1="CONTAB32.DLL", _String2="..") returned 1 [0134.251] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a51900, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45a51900, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x28f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1 [0134.251] wcscmp (_String1="ContactPicker.dll", _String2=".") returned 1 [0134.251] wcscmp (_String1="ContactPicker.dll", _String2="..") returned 1 [0134.251] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x907b58b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0134.251] wcscmp (_String1="CONVERT", _String2=".") returned 1 [0134.251] wcscmp (_String1="CONVERT", _String2="..") returned 1 [0134.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f334a8 [0134.251] wcscpy (in: _Dest=0x3f334a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.251] wcscat (in: _Dest=0x3f334a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.252] wcscat (in: _Dest=0x3f334a8, _Source="CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0134.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f334a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd58 [0135.626] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e19800, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xd87ae950, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa7e19800, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x78db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1 [0135.626] wcscmp (_String1="CSS7DATA0009.DLL", _String2=".") returned 1 [0135.627] wcscmp (_String1="CSS7DATA0009.DLL", _String2="..") returned 1 [0135.627] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1e0b00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf6f6dd0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xab1e0b00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0xa51b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1 [0135.627] wcscmp (_String1="CSS7DATA000A.DLL", _String2=".") returned 1 [0135.627] wcscmp (_String1="CSS7DATA000A.DLL", _String2="..") returned 1 [0135.627] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d5fe00, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdbdfbf30, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99d5fe00, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0xa3fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1 [0135.627] wcscmp (_String1="CSS7DATA000C.DLL", _String2=".") returned 1 [0135.627] wcscmp (_String1="CSS7DATA000C.DLL", _String2="..") returned 1 [0135.627] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee05000, ftCreationTime.dwHighDateTime=0x1c8da63, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee05000, ftLastWriteTime.dwHighDateTime=0x1c8da63, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1 [0135.627] wcscmp (_String1="Custom.propdesc", _String2=".") returned 1 [0135.627] wcscmp (_String1="Custom.propdesc", _String2="..") returned 1 [0135.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3f88 [0135.627] wcscpy (in: _Dest=0x3dc3f88, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0135.627] wcscat (in: _Dest=0x3dc3f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0135.627] wcscat (in: _Dest=0x3dc3f88, _Source="Custom.propdesc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc") returned="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" [0144.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068 [0144.433] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe910c930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x56f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0144.433] wcscmp (_String1="DATAGATH.DLL", _String2=".") returned 1 [0144.433] wcscmp (_String1="DATAGATH.DLL", _String2="..") returned 1 [0144.433] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f93a000, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8bd7910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6f93a000, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xa1978, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1 [0144.433] wcscmp (_String1="DBENGR.DLL", _String2=".") returned 1 [0144.433] wcscmp (_String1="DBENGR.DLL", _String2="..") returned 1 [0144.433] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2c4700, ftCreationTime.dwHighDateTime=0x1c98311, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb2c4700, ftLastWriteTime.dwHighDateTime=0x1c98311, nFileSizeHigh=0x0, nFileSizeLow=0x107d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0144.433] wcscmp (_String1="DBGHELP.DLL", _String2=".") returned 1 [0144.433] wcscmp (_String1="DBGHELP.DLL", _String2="..") returned 1 [0144.433] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe910c930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x147c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1 [0144.433] wcscmp (_String1="DBSHARE.DLL", _String2=".") returned 1 [0144.433] wcscmp (_String1="DBSHARE.DLL", _String2="..") returned 1 [0144.434] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9132a90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xe1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0144.434] wcscmp (_String1="DBWIZ.DLL", _String2=".") returned 1 [0144.434] wcscmp (_String1="DBWIZ.DLL", _String2="..") returned 1 [0144.434] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e01fe00, ftCreationTime.dwHighDateTime=0x1cb7188, ftLastAccessTime.dwLowDateTime=0xe9132a90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e01fe00, ftLastWriteTime.dwHighDateTime=0x1cb7188, nFileSizeHigh=0x0, nFileSizeLow=0x14768, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1 [0144.434] wcscmp (_String1="DGRMLNCH.DLL", _String2=".") returned 1 [0144.434] wcscmp (_String1="DGRMLNCH.DLL", _String2="..") returned 1 [0144.434] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x15570, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0144.434] wcscmp (_String1="DLGSETP.DLL", _String2=".") returned 1 [0144.434] wcscmp (_String1="DLGSETP.DLL", _String2="..") returned 1 [0144.434] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1 [0144.434] wcscmp (_String1="Document Parts", _String2=".") returned 1 [0144.434] wcscmp (_String1="Document Parts", _String2="..") returned 1 [0144.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e23ec0 [0144.434] wcscpy (in: _Dest=0x3e23ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.434] wcscat (in: _Dest=0x3e23ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.434] wcscat (in: _Dest=0x3e23ec0, _Source="Document Parts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" [0144.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e23ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0144.435] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a524a00, ftCreationTime.dwHighDateTime=0x1cb722b, ftLastAccessTime.dwLowDateTime=0xe8bfda70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a524a00, ftLastWriteTime.dwHighDateTime=0x1cb722b, nFileSizeHigh=0x0, nFileSizeLow=0xe2578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0144.435] wcscmp (_String1="DRILLDWN.DLL", _String2=".") returned 1 [0144.435] wcscmp (_String1="DRILLDWN.DLL", _String2="..") returned 1 [0144.435] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff23f200, ftCreationTime.dwHighDateTime=0x1cba0bd, ftLastAccessTime.dwLowDateTime=0xe8c23bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xff23f200, ftLastWriteTime.dwHighDateTime=0x1cba0bd, nFileSizeHigh=0x0, nFileSizeLow=0x23760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0144.436] wcscmp (_String1="DWGCNV.DLL", _String2=".") returned 1 [0144.436] wcscmp (_String1="DWGCNV.DLL", _String2="..") returned 1 [0144.436] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75752400, ftCreationTime.dwHighDateTime=0x1cba0bf, ftLastAccessTime.dwLowDateTime=0xe8c95ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x75752400, ftLastWriteTime.dwHighDateTime=0x1cba0bf, nFileSizeHigh=0x0, nFileSizeLow=0x59c368, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0144.436] wcscmp (_String1="DWGDP.DLL", _String2=".") returned 1 [0144.436] wcscmp (_String1="DWGDP.DLL", _String2="..") returned 1 [0144.436] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9158bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1 [0144.436] wcscmp (_String1="EDITOR.EXE", _String2=".") returned 1 [0144.436] wcscmp (_String1="EDITOR.EXE", _String2="..") returned 1 [0144.436] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9158bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x9588, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1 [0144.436] wcscmp (_String1="EDITORS.DLL", _String2=".") returned 1 [0144.436] wcscmp (_String1="EDITORS.DLL", _String2="..") returned 1 [0144.436] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe917ed50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x31388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1 [0144.436] wcscmp (_String1="ELEMENTS.DLL", _String2=".") returned 1 [0144.436] wcscmp (_String1="ELEMENTS.DLL", _String2="..") returned 1 [0144.436] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe917ed50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1 [0144.436] wcscmp (_String1="ELEMUTIL.DLL", _String2=".") returned 1 [0144.436] wcscmp (_String1="ELEMUTIL.DLL", _String2="..") returned 1 [0144.436] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x878249d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x1c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0144.437] wcscmp (_String1="EMABLT32.DLL", _String2=".") returned 1 [0144.437] wcscmp (_String1="EMABLT32.DLL", _String2="..") returned 1 [0144.437] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efe4100, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x87896df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6efe4100, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x17a7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0144.437] wcscmp (_String1="EMSMDB32.DLL", _String2=".") returned 1 [0144.437] wcscmp (_String1="EMSMDB32.DLL", _String2="..") returned 1 [0144.437] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab55500, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x87896df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ab55500, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1 [0144.437] wcscmp (_String1="ENGDIC.DAT", _String2=".") returned 1 [0144.437] wcscmp (_String1="ENGDIC.DAT", _String2="..") returned 1 [0144.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0b4d8 [0144.437] wcscpy (in: _Dest=0x3f0b4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.437] wcscat (in: _Dest=0x3f0b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.437] wcscat (in: _Dest=0x3f0b4d8, _Source="ENGDIC.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" [0144.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0144.438] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab55500, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ab55500, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1 [0144.438] wcscmp (_String1="ENGIDX.DAT", _String2=".") returned 1 [0144.438] wcscmp (_String1="ENGIDX.DAT", _String2="..") returned 1 [0144.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0b730 [0144.438] wcscpy (in: _Dest=0x3f0b730, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.438] wcscat (in: _Dest=0x3f0b730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.438] wcscat (in: _Dest=0x3f0b730, _Source="ENGIDX.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" [0144.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0144.440] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618eab00, ftCreationTime.dwHighDateTime=0x1c3e3ed, ftLastAccessTime.dwLowDateTime=0x519710d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x618eab00, ftLastWriteTime.dwHighDateTime=0x1c3e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1 [0144.440] wcscmp (_String1="ENGLISH.LNG", _String2=".") returned 1 [0144.440] wcscmp (_String1="ENGLISH.LNG", _String2="..") returned 1 [0144.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0c1f8 [0144.440] wcscpy (in: _Dest=0x3f0c1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.440] wcscat (in: _Dest=0x3f0c1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.440] wcscat (in: _Dest=0x3f0c1f8, _Source="ENGLISH.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" [0144.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0c1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0144.441] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332dd500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x878bcf50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x332dd500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0xbd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1 [0144.441] wcscmp (_String1="EntityDataHandler.dll", _String2=".") returned 1 [0144.441] wcscmp (_String1="EntityDataHandler.dll", _String2="..") returned 1 [0144.441] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345f0200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x345f0200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x2ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0144.441] wcscmp (_String1="EntityPicker.dll", _String2=".") returned 1 [0144.441] wcscmp (_String1="EntityPicker.dll", _String2="..") returned 1 [0144.441] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x25d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0144.441] wcscmp (_String1="ENVELOPE.DLL", _String2=".") returned 1 [0144.441] wcscmp (_String1="ENVELOPE.DLL", _String2="..") returned 1 [0144.441] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdcf4cb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xffa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1 [0144.441] wcscmp (_String1="ERXIMP.ADD", _String2=".") returned 1 [0144.442] wcscmp (_String1="ERXIMP.ADD", _String2="..") returned 1 [0144.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0c108 [0144.442] wcscpy (in: _Dest=0x3f0c108, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.442] wcscat (in: _Dest=0x3f0c108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.442] wcscat (in: _Dest=0x3f0c108, _Source="ERXIMP.ADD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD") returned="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" [0144.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0c108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0144.443] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc274d000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc274d000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x13cad60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0144.443] wcscmp (_String1="EXCEL.EXE", _String2=".") returned 1 [0144.443] wcscmp (_String1="EXCEL.EXE", _String2="..") returned 1 [0144.443] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ddd700, ftCreationTime.dwHighDateTime=0x1cac255, ftLastAccessTime.dwLowDateTime=0x77462910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7ddd700, ftLastWriteTime.dwHighDateTime=0x1cac255, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1 [0144.443] wcscmp (_String1="excel.exe.manifest", _String2=".") returned 1 [0144.443] wcscmp (_String1="excel.exe.manifest", _String2="..") returned 1 [0144.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e202a0 [0144.443] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.443] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.444] wcscat (in: _Dest=0x3e202a0, _Source="excel.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" [0144.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0144.445] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c6f700, ftCreationTime.dwHighDateTime=0x1cac257, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7c6f700, ftLastWriteTime.dwHighDateTime=0x1cac257, nFileSizeHigh=0x0, nFileSizeLow=0x10f9d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0144.445] wcscmp (_String1="excelcnv.exe", _String2=".") returned 1 [0144.445] wcscmp (_String1="excelcnv.exe", _String2="..") returned 1 [0144.445] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c6f700, ftCreationTime.dwHighDateTime=0x1cac257, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7c6f700, ftLastWriteTime.dwHighDateTime=0x1cac257, nFileSizeHigh=0x0, nFileSizeLow=0xcf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1 [0144.445] wcscmp (_String1="excelcnvpxy.dll", _String2=".") returned 1 [0144.445] wcscmp (_String1="excelcnvpxy.dll", _String2="..") returned 1 [0144.445] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1 [0144.445] wcscmp (_String1="EXLIRM.XML", _String2=".") returned 1 [0144.445] wcscmp (_String1="EXLIRM.XML", _String2="..") returned 1 [0144.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0b460 [0144.445] wcscpy (in: _Dest=0x3f0b460, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.445] wcscat (in: _Dest=0x3f0b460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.446] wcscat (in: _Dest=0x3f0b460, _Source="EXLIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" [0144.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0144.447] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1 [0144.447] wcscmp (_String1="EXLIRMV.XML", _String2=".") returned 1 [0144.447] wcscmp (_String1="EXLIRMV.XML", _String2="..") returned 1 [0144.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b898 [0144.447] wcscpy (in: _Dest=0x3f0b898, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.447] wcscat (in: _Dest=0x3f0b898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.447] wcscat (in: _Dest=0x3f0b898, _Source="EXLIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" [0144.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0144.448] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x50950, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0144.448] wcscmp (_String1="EXSEC32.DLL", _String2=".") returned 1 [0144.448] wcscmp (_String1="EXSEC32.DLL", _String2="..") returned 1 [0144.448] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe917ed50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x393a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1 [0144.449] wcscmp (_String1="EXTRACT.DLL", _String2=".") returned 1 [0144.449] wcscmp (_String1="EXTRACT.DLL", _String2="..") returned 1 [0144.449] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8cbc150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xf7968, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0144.449] wcscmp (_String1="FACILITY.DLL", _String2=".") returned 1 [0144.449] wcscmp (_String1="FACILITY.DLL", _String2="..") returned 1 [0144.449] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x34180, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1 [0144.449] wcscmp (_String1="FORM.DLL", _String2=".") returned 1 [0144.449] wcscmp (_String1="FORM.DLL", _String2="..") returned 1 [0144.449] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ba9270, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0144.449] wcscmp (_String1="FORMS", _String2=".") returned 1 [0144.449] wcscmp (_String1="FORMS", _String2="..") returned 1 [0144.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5470 [0144.449] wcscpy (in: _Dest=0x2ff5470, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.449] wcscat (in: _Dest=0x2ff5470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.449] wcscat (in: _Dest=0x2ff5470, _Source="FORMS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" [0144.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0144.450] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618eab00, ftCreationTime.dwHighDateTime=0x1c3e3ed, ftLastAccessTime.dwLowDateTime=0x4e669930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x618eab00, ftLastWriteTime.dwHighDateTime=0x1c3e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x88933, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRENCH.LNG", cAlternateFileName="")) returned 1 [0144.451] wcscmp (_String1="FRENCH.LNG", _String2=".") returned 1 [0144.451] wcscmp (_String1="FRENCH.LNG", _String2="..") returned 1 [0144.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df9438 [0144.451] wcscpy (in: _Dest=0x3df9438, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.451] wcscat (in: _Dest=0x3df9438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.451] wcscat (in: _Dest=0x3df9438, _Source="FRENCH.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" [0144.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df9438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc [0144.453] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8ce22b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xe8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0144.453] wcscmp (_String1="GANTT.DLL", _String2=".") returned 1 [0144.453] wcscmp (_String1="GANTT.DLL", _String2="..") returned 1 [0144.453] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5957100, ftCreationTime.dwHighDateTime=0x1cbca52, ftLastAccessTime.dwLowDateTime=0xf6d93410, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x5957100, ftLastWriteTime.dwHighDateTime=0x1cbca52, nFileSizeHigh=0x0, nFileSizeLow=0x1aad68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GFX.DLL", cAlternateFileName="")) returned 1 [0144.453] wcscmp (_String1="GFX.DLL", _String2=".") returned 1 [0144.453] wcscmp (_String1="GFX.DLL", _String2="..") returned 1 [0144.453] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb18d00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x88705350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaeb18d00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0x333180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0144.453] wcscmp (_String1="GKExcel.dll", _String2=".") returned 1 [0144.453] wcscmp (_String1="GKExcel.dll", _String2="..") returned 1 [0144.453] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb18d00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x77ef2ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaeb18d00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0x201580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="GKPOWE~1.DLL")) returned 1 [0144.453] wcscmp (_String1="GKPowerPoint.dll", _String2=".") returned 1 [0144.453] wcscmp (_String1="GKPowerPoint.dll", _String2="..") returned 1 [0144.453] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb18d00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaeb18d00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0x237580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1 [0144.453] wcscmp (_String1="GKWord.dll", _String2=".") returned 1 [0144.454] wcscmp (_String1="GKWord.dll", _String2="..") returned 1 [0144.454] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba7a700, ftCreationTime.dwHighDateTime=0x1cac246, ftLastAccessTime.dwLowDateTime=0x77f64ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba7a700, ftLastWriteTime.dwHighDateTime=0x1cac246, nFileSizeHigh=0x0, nFileSizeLow=0x419b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1 [0144.454] wcscmp (_String1="GRAPH.EXE", _String2=".") returned 1 [0144.454] wcscmp (_String1="GRAPH.EXE", _String2="..") returned 1 [0144.454] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6efd00, ftCreationTime.dwHighDateTime=0x1cac244, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6efd00, ftLastWriteTime.dwHighDateTime=0x1cac244, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="GRAPHE~1.MAN")) returned 1 [0144.454] wcscmp (_String1="Graph.exe.manifest", _String2=".") returned 1 [0144.454] wcscmp (_String1="Graph.exe.manifest", _String2="..") returned 1 [0144.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ff70 [0144.454] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.454] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.454] wcscat (in: _Dest=0x3e1ff70, _Source="Graph.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" [0144.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc8 [0144.455] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82ab600, ftCreationTime.dwHighDateTime=0x1c3b9b4, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc82ab600, ftLastWriteTime.dwHighDateTime=0x1c3b9b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1 [0144.456] wcscmp (_String1="GRAPH.ICO", _String2=".") returned 1 [0144.456] wcscmp (_String1="GRAPH.ICO", _String2="..") returned 1 [0144.521] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x824623b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0144.523] wcscmp (_String1="Groove", _String2=".") returned 1 [0144.523] wcscmp (_String1="Groove", _String2="..") returned 1 [0144.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5080 [0144.524] wcscpy (in: _Dest=0x2ff5080, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.524] wcscat (in: _Dest=0x2ff5080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.530] wcscat (in: _Dest=0x2ff5080, _Source="Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0144.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0144.531] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1ae500, ftCreationTime.dwHighDateTime=0x1cacc16, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d1ae500, ftLastWriteTime.dwHighDateTime=0x1cacc16, nFileSizeHigh=0x0, nFileSizeLow=0x1d88d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1 [0144.532] wcscmp (_String1="GROOVE.EXE", _String2=".") returned 1 [0144.532] wcscmp (_String1="GROOVE.EXE", _String2="..") returned 1 [0144.532] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1ae500, ftCreationTime.dwHighDateTime=0x1cacc16, ftLastAccessTime.dwLowDateTime=0x78d3aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d1ae500, ftLastWriteTime.dwHighDateTime=0x1cacc16, nFileSizeHigh=0x0, nFileSizeLow=0x406f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0144.532] wcscmp (_String1="GROOVEEX.DLL", _String2=".") returned 1 [0144.532] wcscmp (_String1="GROOVEEX.DLL", _String2="..") returned 1 [0144.532] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305fa800, ftCreationTime.dwHighDateTime=0x1cacba8, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x305fa800, ftLastWriteTime.dwHighDateTime=0x1cacba8, nFileSizeHigh=0x0, nFileSizeLow=0xe6788, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEMN.EXE", cAlternateFileName="")) returned 1 [0144.536] wcscmp (_String1="GROOVEMN.EXE", _String2=".") returned 1 [0144.536] wcscmp (_String1="GROOVEMN.EXE", _String2="..") returned 1 [0144.537] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d08410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x55168, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1 [0144.537] wcscmp (_String1="HVAC.DLL", _String2=".") returned 1 [0144.537] wcscmp (_String1="HVAC.DLL", _String2="..") returned 1 [0144.537] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefad1200, ftCreationTime.dwHighDateTime=0x1cbcf63, ftLastAccessTime.dwLowDateTime=0xf5044530, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xefad1200, ftLastWriteTime.dwHighDateTime=0x1cbcf63, nFileSizeHigh=0x0, nFileSizeLow=0x2ff60, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0144.537] wcscmp (_String1="IEAWSDC.DLL", _String2=".") returned 1 [0144.537] wcscmp (_String1="IEAWSDC.DLL", _String2="..") returned 1 [0144.537] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7ad00, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7ad00, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x8d3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="IECONT~1.EXE")) returned 1 [0144.537] wcscmp (_String1="IEContentService.exe", _String2=".") returned 1 [0144.537] wcscmp (_String1="IEContentService.exe", _String2="..") returned 1 [0144.537] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91cb010, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x7b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCOMMON.DLL", cAlternateFileName="")) returned 1 [0144.537] wcscmp (_String1="IMCOMMON.DLL", _String2=".") returned 1 [0144.537] wcscmp (_String1="IMCOMMON.DLL", _String2="..") returned 1 [0144.537] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbdf30150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMDIMP.ADD", cAlternateFileName="")) returned 1 [0144.537] wcscmp (_String1="IMDIMP.ADD", _String2=".") returned 1 [0144.537] wcscmp (_String1="IMDIMP.ADD", _String2="..") returned 1 [0144.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df9690 [0144.537] wcscpy (in: _Dest=0x3df9690, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0144.537] wcscat (in: _Dest=0x3df9690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0144.537] wcscat (in: _Dest=0x3df9690, _Source="IMDIMP.ADD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD") returned="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" [0149.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df9690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0149.588] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x20f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPMAIL.DLL", cAlternateFileName="")) returned 1 [0149.588] wcscmp (_String1="IMPMAIL.DLL", _String2=".") returned 1 [0149.588] wcscmp (_String1="IMPMAIL.DLL", _String2="..") returned 1 [0149.588] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91cb010, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x23d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMUTIL.DLL", cAlternateFileName="")) returned 1 [0149.588] wcscmp (_String1="IMUTIL.DLL", _String2=".") returned 1 [0149.588] wcscmp (_String1="IMUTIL.DLL", _String2="..") returned 1 [0149.588] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91cb010, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x29d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWDD.DLL", cAlternateFileName="")) returned 1 [0149.588] wcscmp (_String1="IMWDD.DLL", _String2=".") returned 1 [0149.588] wcscmp (_String1="IMWDD.DLL", _String2="..") returned 1 [0149.588] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91f1170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x3b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWIZ.DLL", cAlternateFileName="")) returned 1 [0149.588] wcscmp (_String1="IMWIZ.DLL", _String2=".") returned 1 [0149.588] wcscmp (_String1="IMWIZ.DLL", _String2="..") returned 1 [0149.588] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4c4200, ftCreationTime.dwHighDateTime=0x1cacff4, ftLastAccessTime.dwLowDateTime=0x88c86630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc4c4200, ftLastWriteTime.dwHighDateTime=0x1cacff4, nFileSizeHigh=0x0, nFileSizeLow=0x1a7570, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.EXE", cAlternateFileName="")) returned 1 [0149.589] wcscmp (_String1="INFOPATH.EXE", _String2=".") returned 1 [0149.589] wcscmp (_String1="INFOPATH.EXE", _String2="..") returned 1 [0149.589] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8922da70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOM", cAlternateFileName="INFOPA~1")) returned 1 [0149.589] wcscmp (_String1="InfoPathOM", _String2=".") returned 1 [0149.589] wcscmp (_String1="InfoPathOM", _String2="..") returned 1 [0149.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e688d0 [0149.589] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.589] wcscat (in: _Dest=0x3e688d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.589] wcscat (in: _Dest=0x3e688d0, _Source="InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0149.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e688d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0149.590] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65d4d800, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x65d4d800, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x62978, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1 [0149.590] wcscmp (_String1="INLAUNCH.DLL", _String2=".") returned 1 [0149.590] wcscmp (_String1="INLAUNCH.DLL", _String2="..") returned 1 [0149.590] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9433a200, ftCreationTime.dwHighDateTime=0x1cacba3, ftLastAccessTime.dwLowDateTime=0x7900e8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9433a200, ftLastWriteTime.dwHighDateTime=0x1cacba3, nFileSizeHigh=0x0, nFileSizeLow=0x1bac000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_resources14.xss", cAlternateFileName="INSTAL~1.XSS")) returned 1 [0149.590] wcscmp (_String1="Installed_resources14.xss", _String2=".") returned 1 [0149.590] wcscmp (_String1="Installed_resources14.xss", _String2="..") returned 1 [0149.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2ac58 [0149.590] wcscpy (in: _Dest=0x3e2ac58, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.590] wcscat (in: _Dest=0x3e2ac58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.590] wcscat (in: _Dest=0x3e2ac58, _Source="Installed_resources14.xss" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss") returned="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" [0149.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ac58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0149.592] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9433a200, ftCreationTime.dwHighDateTime=0x1cacba3, ftLastAccessTime.dwLowDateTime=0x790ccfb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9433a200, ftLastWriteTime.dwHighDateTime=0x1cacba3, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_schemas14.xss", cAlternateFileName="INSTAL~2.XSS")) returned 1 [0149.592] wcscmp (_String1="Installed_schemas14.xss", _String2=".") returned 1 [0149.592] wcscmp (_String1="Installed_schemas14.xss", _String2="..") returned 1 [0149.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35eb0 [0149.592] wcscpy (in: _Dest=0x3f35eb0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.592] wcscat (in: _Dest=0x3f35eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.592] wcscat (in: _Dest=0x3f35eb0, _Source="Installed_schemas14.xss" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss") returned="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" [0149.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0149.593] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb40e4400, ftCreationTime.dwHighDateTime=0x1cb7066, ftLastAccessTime.dwLowDateTime=0xf590b650, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb40e4400, ftLastWriteTime.dwHighDateTime=0x1cb7066, nFileSizeHigh=0x0, nFileSizeLow=0x13580, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1 [0149.593] wcscmp (_String1="INTLDATE.DLL", _String2=".") returned 1 [0149.593] wcscmp (_String1="INTLDATE.DLL", _String2="..") returned 1 [0149.593] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4c4200, ftCreationTime.dwHighDateTime=0x1cacff4, ftLastAccessTime.dwLowDateTime=0x7a3fe110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc4c4200, ftLastWriteTime.dwHighDateTime=0x1cacff4, nFileSizeHigh=0x0, nFileSizeLow=0x598978, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDESIGN.DLL", cAlternateFileName="")) returned 1 [0149.593] wcscmp (_String1="IPDESIGN.DLL", _String2=".") returned 1 [0149.593] wcscmp (_String1="IPDESIGN.DLL", _String2="..") returned 1 [0149.593] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4c4200, ftCreationTime.dwHighDateTime=0x1cacff4, ftLastAccessTime.dwLowDateTime=0x7a4e2950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc4c4200, ftLastWriteTime.dwHighDateTime=0x1cacff4, nFileSizeHigh=0x0, nFileSizeLow=0x53df70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDITOR.DLL", cAlternateFileName="")) returned 1 [0149.593] wcscmp (_String1="IPEDITOR.DLL", _String2=".") returned 1 [0149.593] wcscmp (_String1="IPEDITOR.DLL", _String2="..") returned 1 [0149.593] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x89149230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1375c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRM.XML", cAlternateFileName="")) returned 1 [0149.593] wcscmp (_String1="IPIRM.XML", _String2=".") returned 1 [0149.593] wcscmp (_String1="IPIRM.XML", _String2="..") returned 1 [0149.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68060 [0149.594] wcscpy (in: _Dest=0x3e68060, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.594] wcscat (in: _Dest=0x3e68060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.594] wcscat (in: _Dest=0x3e68060, _Source="IPIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" [0149.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0149.595] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x7a4e2950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x135a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRMV.XML", cAlternateFileName="")) returned 1 [0149.595] wcscmp (_String1="IPIRMV.XML", _String2=".") returned 1 [0149.595] wcscmp (_String1="IPIRMV.XML", _String2="..") returned 1 [0149.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68498 [0149.595] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.595] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.595] wcscat (in: _Dest=0x3e68498, _Source="IPIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" [0149.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0149.596] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x29588, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLK.DLL", cAlternateFileName="")) returned 1 [0149.596] wcscmp (_String1="IPOLK.DLL", _String2=".") returned 1 [0149.596] wcscmp (_String1="IPOLK.DLL", _String2="..") returned 1 [0149.596] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x39da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXACS.PDL", cAlternateFileName="")) returned 1 [0149.596] wcscmp (_String1="IXACS.PDL", _String2=".") returned 1 [0149.596] wcscmp (_String1="IXACS.PDL", _String2="..") returned 1 [0149.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e686f0 [0149.597] wcscpy (in: _Dest=0x3e686f0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.597] wcscat (in: _Dest=0x3e686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.597] wcscat (in: _Dest=0x3e686f0, _Source="IXACS.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" [0149.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0149.598] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x29188, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXDB2.PDL", cAlternateFileName="")) returned 1 [0149.598] wcscmp (_String1="IXDB2.PDL", _String2=".") returned 1 [0149.598] wcscmp (_String1="IXDB2.PDL", _String2="..") returned 1 [0149.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68858 [0149.598] wcscpy (in: _Dest=0x3e68858, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.598] wcscat (in: _Dest=0x3e68858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.598] wcscat (in: _Dest=0x3e68858, _Source="IXDB2.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" [0149.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0149.599] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x137b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXGENERC.PDL", cAlternateFileName="")) returned 1 [0149.599] wcscmp (_String1="IXGENERC.PDL", _String2=".") returned 1 [0149.599] wcscmp (_String1="IXGENERC.PDL", _String2="..") returned 1 [0149.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68420 [0149.599] wcscpy (in: _Dest=0x3e68420, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.599] wcscat (in: _Dest=0x3e68420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.599] wcscat (in: _Dest=0x3e68420, _Source="IXGENERC.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" [0149.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0149.600] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x219a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXOLEDB.PDL", cAlternateFileName="")) returned 1 [0149.600] wcscmp (_String1="IXOLEDB.PDL", _String2=".") returned 1 [0149.600] wcscmp (_String1="IXOLEDB.PDL", _String2="..") returned 1 [0149.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68150 [0149.600] wcscpy (in: _Dest=0x3e68150, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.600] wcscat (in: _Dest=0x3e68150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.600] wcscat (in: _Dest=0x3e68150, _Source="IXOLEDB.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" [0149.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0149.602] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x4b1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXORACLE.PDL", cAlternateFileName="")) returned 1 [0149.602] wcscmp (_String1="IXORACLE.PDL", _String2=".") returned 1 [0149.602] wcscmp (_String1="IXORACLE.PDL", _String2="..") returned 1 [0149.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68768 [0149.602] wcscpy (in: _Dest=0x3e68768, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.602] wcscat (in: _Dest=0x3e68768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.602] wcscat (in: _Dest=0x3e68768, _Source="IXORACLE.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" [0149.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0149.603] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x25fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXSSRV.PDL", cAlternateFileName="")) returned 1 [0149.603] wcscmp (_String1="IXSSRV.PDL", _String2=".") returned 1 [0149.603] wcscmp (_String1="IXSSRV.PDL", _String2="..") returned 1 [0149.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68510 [0149.603] wcscpy (in: _Dest=0x3e68510, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.603] wcscat (in: _Dest=0x3e68510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.603] wcscat (in: _Dest=0x3e68510, _Source="IXSSRV.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" [0149.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c [0149.605] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92172d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXUTIL.DLL", cAlternateFileName="")) returned 1 [0149.605] wcscmp (_String1="IXUTIL.DLL", _String2=".") returned 1 [0149.605] wcscmp (_String1="IXUTIL.DLL", _String2="..") returned 1 [0149.605] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d17af00, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d17af00, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x499c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JFONT.DAT", cAlternateFileName="")) returned 1 [0149.605] wcscmp (_String1="JFONT.DAT", _String2=".") returned 1 [0149.605] wcscmp (_String1="JFONT.DAT", _String2="..") returned 1 [0149.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68588 [0149.606] wcscpy (in: _Dest=0x3e68588, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.606] wcscat (in: _Dest=0x3e68588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.606] wcscat (in: _Dest=0x3e68588, _Source="JFONT.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" [0149.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0149.607] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x89e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATIN1.SHP", cAlternateFileName="")) returned 1 [0149.607] wcscmp (_String1="LATIN1.SHP", _String2=".") returned 1 [0149.607] wcscmp (_String1="LATIN1.SHP", _String2="..") returned 1 [0149.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e67e08 [0149.607] wcscpy (in: _Dest=0x3e67e08, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.607] wcscat (in: _Dest=0x3e67e08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.607] wcscat (in: _Dest=0x3e67e08, _Source="LATIN1.SHP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP") returned="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" [0149.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0149.608] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92172d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x58970, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1 [0149.608] wcscmp (_String1="LGND.DLL", _String2=".") returned 1 [0149.608] wcscmp (_String1="LGND.DLL", _String2="..") returned 1 [0149.608] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x878e30b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Library", cAlternateFileName="")) returned 1 [0149.608] wcscmp (_String1="Library", _String2=".") returned 1 [0149.608] wcscmp (_String1="Library", _String2="..") returned 1 [0149.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x2ff5470 [0149.608] wcscpy (in: _Dest=0x2ff5470, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.608] wcscat (in: _Dest=0x2ff5470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.608] wcscat (in: _Dest=0x2ff5470, _Source="Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0149.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0149.609] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe923d430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xb27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGELEMS.DLL", cAlternateFileName="")) returned 1 [0149.610] wcscmp (_String1="LOGELEMS.DLL", _String2=".") returned 1 [0149.610] wcscmp (_String1="LOGELEMS.DLL", _String2="..") returned 1 [0149.610] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbe334670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x9990, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGMODEL.MDL", cAlternateFileName="")) returned 1 [0149.610] wcscmp (_String1="LOGMODEL.MDL", _String2=".") returned 1 [0149.610] wcscmp (_String1="LOGMODEL.MDL", _String2="..") returned 1 [0149.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68a38 [0149.610] wcscpy (in: _Dest=0x3e68a38, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.610] wcscat (in: _Dest=0x3e68a38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.610] wcscat (in: _Dest=0x3e68a38, _Source="LOGMODEL.MDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" [0149.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0149.611] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe923d430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x571a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGVIEW.DLL", cAlternateFileName="")) returned 1 [0149.626] wcscmp (_String1="LOGVIEW.DLL", _String2=".") returned 1 [0149.626] wcscmp (_String1="LOGVIEW.DLL", _String2="..") returned 1 [0149.626] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOOKUP.DAT", cAlternateFileName="")) returned 1 [0149.626] wcscmp (_String1="LOOKUP.DAT", _String2=".") returned 1 [0149.626] wcscmp (_String1="LOOKUP.DAT", _String2="..") returned 1 [0149.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e67d18 [0149.626] wcscpy (in: _Dest=0x3e67d18, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0149.626] wcscat (in: _Dest=0x3e67d18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0149.626] wcscat (in: _Dest=0x3e67d18, _Source="LOOKUP.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" [0160.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat")) returned 0x20 [0160.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT", dwFileAttributes=0x20) returned 0 [0160.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.079] GetLastError () returned 0x5 [0160.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT", dwFileAttributes=0x20) returned 0 [0160.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0160.079] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x429a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIPH.DLL", cAlternateFileName="")) returned 1 [0160.079] wcscmp (_String1="MAPIPH.DLL", _String2=".") returned 1 [0160.079] wcscmp (_String1="MAPIPH.DLL", _String2="..") returned 1 [0160.079] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x311d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELL.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0160.079] wcscmp (_String1="MAPISHELL.DLL", _String2=".") returned 1 [0160.079] wcscmp (_String1="MAPISHELL.DLL", _String2="..") returned 1 [0160.079] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x8d18e430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x19b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCPS.DLL", cAlternateFileName="")) returned 1 [0160.080] wcscmp (_String1="MCPS.DLL", _String2=".") returned 1 [0160.080] wcscmp (_String1="MCPS.DLL", _String2="..") returned 1 [0160.080] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9535100, ftCreationTime.dwHighDateTime=0x1cb7079, ftLastAccessTime.dwLowDateTime=0xf4fabfb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x9535100, ftLastWriteTime.dwHighDateTime=0x1cb7079, nFileSizeHigh=0x0, nFileSizeLow=0xaa768, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDCAT.DLL", cAlternateFileName="")) returned 1 [0160.080] wcscmp (_String1="MEDCAT.DLL", _String2=".") returned 1 [0160.080] wcscmp (_String1="MEDCAT.DLL", _String2="..") returned 1 [0160.080] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76cf2450, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923d3c90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0160.080] wcscmp (_String1="MEDIA", _String2=".") returned 1 [0160.080] wcscmp (_String1="MEDIA", _String2="..") returned 1 [0160.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8054bd0 [0160.080] wcscpy (in: _Dest=0x8054bd0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0160.080] wcscat (in: _Dest=0x8054bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0160.080] wcscat (in: _Dest=0x8054bd0, _Source="MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8054a80 [0160.080] wcscpy (in: _Dest=0x8054a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.080] wcscat (in: _Dest=0x8054a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.080] wcscat (in: _Dest=0x8054a80, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*" [0160.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe928 [0160.080] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76cf2450, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923d3c90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0160.155] wcscmp (_String1=".", _String2=".") returned 0 [0160.155] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76cf2450, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923d3c90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.155] wcscmp (_String1="..", _String2=".") returned 1 [0160.155] wcscmp (_String1="..", _String2="..") returned 0 [0160.155] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccb9f00, ftCreationTime.dwHighDateTime=0x1bd8b1c, ftLastAccessTime.dwLowDateTime=0x8589a650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ccb9f00, ftLastWriteTime.dwHighDateTime=0x1bd8b1c, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1 [0160.155] wcscmp (_String1="APPLAUSE.WAV", _String2=".") returned 1 [0160.155] wcscmp (_String1="APPLAUSE.WAV", _String2="..") returned 1 [0160.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bebc8 [0160.156] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.156] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.156] wcscat (in: _Dest=0x81bebc8, _Source="APPLAUSE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" [0160.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav")) returned 0x20 [0160.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV", dwFileAttributes=0x20) returned 0 [0160.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.156] GetLastError () returned 0x5 [0160.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV", dwFileAttributes=0x20) returned 0 [0160.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.156] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707b9000, ftCreationTime.dwHighDateTime=0x1bfbf53, ftLastAccessTime.dwLowDateTime=0x85c065f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x707b9000, ftLastWriteTime.dwHighDateTime=0x1bfbf53, nFileSizeHigh=0x0, nFileSizeLow=0x59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROW.WAV", cAlternateFileName="")) returned 1 [0160.156] wcscmp (_String1="ARROW.WAV", _String2=".") returned 1 [0160.156] wcscmp (_String1="ARROW.WAV", _String2="..") returned 1 [0160.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4188 [0160.157] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.157] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.157] wcscat (in: _Dest=0x3dc4188, _Source="ARROW.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" [0160.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav")) returned 0x20 [0160.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV", dwFileAttributes=0x20) returned 0 [0160.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.157] GetLastError () returned 0x5 [0160.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV", dwFileAttributes=0x20) returned 0 [0160.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.157] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ac4900, ftCreationTime.dwHighDateTime=0x1bfbf50, ftLastAccessTime.dwLowDateTime=0x76cf2450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25ac4900, ftLastWriteTime.dwHighDateTime=0x1bfbf50, nFileSizeHigh=0x0, nFileSizeLow=0x2f676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOMB.WAV", cAlternateFileName="")) returned 1 [0160.157] wcscmp (_String1="BOMB.WAV", _String2=".") returned 1 [0160.157] wcscmp (_String1="BOMB.WAV", _String2="..") returned 1 [0160.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4188 [0160.158] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.158] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.158] wcscat (in: _Dest=0x3dc4188, _Source="BOMB.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" [0160.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav")) returned 0x20 [0160.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV", dwFileAttributes=0x20) returned 0 [0160.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.158] GetLastError () returned 0x5 [0160.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV", dwFileAttributes=0x20) returned 0 [0160.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.158] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5a29200, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5a29200, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.WAV", cAlternateFileName="")) returned 1 [0160.158] wcscmp (_String1="BREEZE.WAV", _String2=".") returned 1 [0160.158] wcscmp (_String1="BREEZE.WAV", _String2="..") returned 1 [0160.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4188 [0160.159] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.159] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.159] wcscat (in: _Dest=0x3dc4188, _Source="BREEZE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" [0160.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav")) returned 0x20 [0160.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV", dwFileAttributes=0x20) returned 0 [0160.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.182] GetLastError () returned 0x5 [0160.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV", dwFileAttributes=0x20) returned 0 [0160.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.182] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x76e95370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAMERA.WAV", cAlternateFileName="")) returned 1 [0160.182] wcscmp (_String1="CAMERA.WAV", _String2=".") returned 1 [0160.182] wcscmp (_String1="CAMERA.WAV", _String2="..") returned 1 [0160.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4188 [0160.182] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.182] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.182] wcscat (in: _Dest=0x3dc4188, _Source="CAMERA.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" [0160.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav")) returned 0x20 [0160.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV", dwFileAttributes=0x20) returned 0 [0160.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.183] GetLastError () returned 0x5 [0160.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV", dwFileAttributes=0x20) returned 0 [0160.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.183] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASHREG.WAV", cAlternateFileName="")) returned 1 [0160.183] wcscmp (_String1="CASHREG.WAV", _String2=".") returned 1 [0160.183] wcscmp (_String1="CASHREG.WAV", _String2="..") returned 1 [0160.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bebc8 [0160.183] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.183] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.183] wcscat (in: _Dest=0x81bebc8, _Source="CASHREG.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" [0160.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav")) returned 0x20 [0160.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV", dwFileAttributes=0x20) returned 0 [0160.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.198] GetLastError () returned 0x5 [0160.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV", dwFileAttributes=0x20) returned 0 [0160.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.198] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccb9f00, ftCreationTime.dwHighDateTime=0x1bd8b1c, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ccb9f00, ftLastWriteTime.dwHighDateTime=0x1bd8b1c, nFileSizeHigh=0x0, nFileSizeLow=0x91be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHIMES.WAV", cAlternateFileName="")) returned 1 [0160.198] wcscmp (_String1="CHIMES.WAV", _String2=".") returned 1 [0160.198] wcscmp (_String1="CHIMES.WAV", _String2="..") returned 1 [0160.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4188 [0160.198] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.198] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.198] wcscat (in: _Dest=0x3dc4188, _Source="CHIMES.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" [0160.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav")) returned 0x20 [0160.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV", dwFileAttributes=0x20) returned 0 [0160.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.199] GetLastError () returned 0x5 [0160.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV", dwFileAttributes=0x20) returned 0 [0160.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.199] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94f21c00, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94f21c00, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLICK.WAV", cAlternateFileName="")) returned 1 [0160.199] wcscmp (_String1="CLICK.WAV", _String2=".") returned 1 [0160.199] wcscmp (_String1="CLICK.WAV", _String2="..") returned 1 [0160.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4188 [0160.199] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.199] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.199] wcscat (in: _Dest=0x3dc4188, _Source="CLICK.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" [0160.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav")) returned 0x20 [0160.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV", dwFileAttributes=0x20) returned 0 [0160.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.216] GetLastError () returned 0x5 [0160.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV", dwFileAttributes=0x20) returned 0 [0160.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.216] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8441a600, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8441a600, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COIN.WAV", cAlternateFileName="")) returned 1 [0160.216] wcscmp (_String1="COIN.WAV", _String2=".") returned 1 [0160.216] wcscmp (_String1="COIN.WAV", _String2="..") returned 1 [0160.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4188 [0160.216] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.217] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.217] wcscat (in: _Dest=0x3dc4188, _Source="COIN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" [0160.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav")) returned 0x20 [0160.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV", dwFileAttributes=0x20) returned 0 [0160.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.233] GetLastError () returned 0x5 [0160.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV", dwFileAttributes=0x20) returned 0 [0160.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.233] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x4be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUMROLL.WAV", cAlternateFileName="")) returned 1 [0160.233] wcscmp (_String1="DRUMROLL.WAV", _String2=".") returned 1 [0160.233] wcscmp (_String1="DRUMROLL.WAV", _String2="..") returned 1 [0160.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bebc8 [0160.233] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.233] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.233] wcscat (in: _Dest=0x81bebc8, _Source="DRUMROLL.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" [0160.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav")) returned 0x20 [0160.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV", dwFileAttributes=0x20) returned 0 [0160.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.254] GetLastError () returned 0x5 [0160.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV", dwFileAttributes=0x20) returned 0 [0160.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.254] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x5c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLODE.WAV", cAlternateFileName="")) returned 1 [0160.254] wcscmp (_String1="EXPLODE.WAV", _String2=".") returned 1 [0160.254] wcscmp (_String1="EXPLODE.WAV", _String2="..") returned 1 [0160.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bebc8 [0160.254] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.254] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.254] wcscat (in: _Dest=0x81bebc8, _Source="EXPLODE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" [0160.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav")) returned 0x20 [0160.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV", dwFileAttributes=0x20) returned 0 [0160.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.270] GetLastError () returned 0x5 [0160.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV", dwFileAttributes=0x20) returned 0 [0160.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.270] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6b9000, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x78d3aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d6b9000, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAMMER.WAV", cAlternateFileName="")) returned 1 [0160.270] wcscmp (_String1="HAMMER.WAV", _String2=".") returned 1 [0160.270] wcscmp (_String1="HAMMER.WAV", _String2="..") returned 1 [0160.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4188 [0160.270] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.270] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.270] wcscat (in: _Dest=0x3dc4188, _Source="HAMMER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" [0160.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav")) returned 0x20 [0160.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV", dwFileAttributes=0x20) returned 0 [0160.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.271] GetLastError () returned 0x5 [0160.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV", dwFileAttributes=0x20) returned 0 [0160.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.271] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0160.271] wcscmp (_String1="LASER.WAV", _String2=".") returned 1 [0160.271] wcscmp (_String1="LASER.WAV", _String2="..") returned 1 [0160.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4188 [0160.271] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.271] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.271] wcscat (in: _Dest=0x3dc4188, _Source="LASER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" [0160.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav")) returned 0x20 [0160.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0160.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.272] GetLastError () returned 0x5 [0160.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0160.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.272] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89eabc00, ftCreationTime.dwHighDateTime=0x1bfc74b, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89eabc00, ftLastWriteTime.dwHighDateTime=0x1bfc74b, nFileSizeHigh=0x0, nFileSizeLow=0x3d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUSH.WAV", cAlternateFileName="")) returned 1 [0160.272] wcscmp (_String1="PUSH.WAV", _String2=".") returned 1 [0160.272] wcscmp (_String1="PUSH.WAV", _String2="..") returned 1 [0160.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4188 [0160.272] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.273] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.273] wcscat (in: _Dest=0x3dc4188, _Source="PUSH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" [0160.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav")) returned 0x20 [0160.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV", dwFileAttributes=0x20) returned 0 [0160.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.303] GetLastError () returned 0x5 [0160.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV", dwFileAttributes=0x20) returned 0 [0160.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.304] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3ef1e00, ftCreationTime.dwHighDateTime=0x1bfa314, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd3ef1e00, ftLastWriteTime.dwHighDateTime=0x1bfa314, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUCTION.WAV", cAlternateFileName="")) returned 1 [0160.304] wcscmp (_String1="SUCTION.WAV", _String2=".") returned 1 [0160.304] wcscmp (_String1="SUCTION.WAV", _String2="..") returned 1 [0160.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bee70 [0160.304] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.304] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.304] wcscat (in: _Dest=0x81bee70, _Source="SUCTION.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" [0160.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav")) returned 0x20 [0160.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV", dwFileAttributes=0x20) returned 0 [0160.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.322] GetLastError () returned 0x5 [0160.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV", dwFileAttributes=0x20) returned 0 [0160.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.322] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccb9f00, ftCreationTime.dwHighDateTime=0x1bd8b1c, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ccb9f00, ftLastWriteTime.dwHighDateTime=0x1bd8b1c, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TYPE.WAV", cAlternateFileName="")) returned 1 [0160.322] wcscmp (_String1="TYPE.WAV", _String2=".") returned 1 [0160.322] wcscmp (_String1="TYPE.WAV", _String2="..") returned 1 [0160.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e241c0 [0160.322] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.322] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.322] wcscat (in: _Dest=0x3e241c0, _Source="TYPE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" [0160.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav")) returned 0x20 [0160.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV", dwFileAttributes=0x20) returned 0 [0160.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.382] GetLastError () returned 0x5 [0160.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV", dwFileAttributes=0x20) returned 0 [0160.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e241c0) returned 1 [0160.382] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82106800, ftCreationTime.dwHighDateTime=0x1bfbf52, ftLastAccessTime.dwLowDateTime=0x9227d030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82106800, ftLastWriteTime.dwHighDateTime=0x1bfbf52, nFileSizeHigh=0x0, nFileSizeLow=0x35c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VOLTAGE.WAV", cAlternateFileName="")) returned 1 [0160.383] wcscmp (_String1="VOLTAGE.WAV", _String2=".") returned 1 [0160.383] wcscmp (_String1="VOLTAGE.WAV", _String2="..") returned 1 [0160.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bee70 [0160.383] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.383] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.383] wcscat (in: _Dest=0x81bee70, _Source="VOLTAGE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" [0160.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav")) returned 0x20 [0160.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV", dwFileAttributes=0x20) returned 0 [0160.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.383] GetLastError () returned 0x5 [0160.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV", dwFileAttributes=0x20) returned 0 [0160.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.384] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0160.384] wcscmp (_String1="WHOOSH.WAV", _String2=".") returned 1 [0160.384] wcscmp (_String1="WHOOSH.WAV", _String2="..") returned 1 [0160.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e241c0 [0160.384] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.384] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.384] wcscat (in: _Dest=0x3e241c0, _Source="WHOOSH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" [0160.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav")) returned 0x20 [0160.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0160.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.384] GetLastError () returned 0x5 [0160.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0160.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e241c0) returned 1 [0160.385] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72133800, ftCreationTime.dwHighDateTime=0x1bfc74b, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72133800, ftLastWriteTime.dwHighDateTime=0x1bfc74b, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 1 [0160.385] wcscmp (_String1="WIND.WAV", _String2=".") returned 1 [0160.385] wcscmp (_String1="WIND.WAV", _String2="..") returned 1 [0160.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e241c0 [0160.385] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0160.385] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0160.385] wcscat (in: _Dest=0x3e241c0, _Source="WIND.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" [0160.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav")) returned 0x20 [0160.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV", dwFileAttributes=0x20) returned 0 [0160.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.412] GetLastError () returned 0x5 [0160.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV", dwFileAttributes=0x20) returned 0 [0160.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e241c0) returned 1 [0160.412] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72133800, ftCreationTime.dwHighDateTime=0x1bfc74b, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72133800, ftLastWriteTime.dwHighDateTime=0x1bfc74b, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 0 [0160.413] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0160.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe928) returned 1 [0160.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a80) returned 1 [0160.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054bd0) returned 1 [0160.414] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe403300, ftCreationTime.dwHighDateTime=0x1cac09c, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe403300, ftLastWriteTime.dwHighDateTime=0x1cac09c, nFileSizeHigh=0x0, nFileSizeLow=0x1c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0160.414] wcscmp (_String1="Microsoft.BusinessData.dll", _String2=".") returned 1 [0160.414] wcscmp (_String1="Microsoft.BusinessData.dll", _String2="..") returned 1 [0160.414] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf54100, ftCreationTime.dwHighDateTime=0x1ca2511, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcbf54100, ftLastWriteTime.dwHighDateTime=0x1ca2511, nFileSizeHigh=0x0, nFileSizeLow=0x5a768, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0160.414] wcscmp (_String1="Microsoft.BusinessData.xml", _String2=".") returned 1 [0160.414] wcscmp (_String1="Microsoft.BusinessData.xml", _String2="..") returned 1 [0160.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0160.415] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0160.415] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0160.415] wcscat (in: _Dest=0x3e3db38, _Source="Microsoft.BusinessData.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" [0160.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml")) returned 0x20 [0160.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0160.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.415] GetLastError () returned 0x5 [0160.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0160.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.416] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe396200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7ba02c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe396200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x8a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0160.416] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.dll", _String2=".") returned 1 [0160.416] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.dll", _String2="..") returned 1 [0160.416] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ba1200, ftCreationTime.dwHighDateTime=0x1ca2512, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3ba1200, ftLastWriteTime.dwHighDateTime=0x1ca2512, nFileSizeHigh=0x0, nFileSizeLow=0x295c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.xml", cAlternateFileName="MIAF81~1.XML")) returned 1 [0160.416] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.xml", _String2=".") returned 1 [0160.416] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.xml", _String2="..") returned 1 [0160.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d5a30 [0160.416] wcscpy (in: _Dest=0x81d5a30, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0160.416] wcscat (in: _Dest=0x81d5a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0160.416] wcscat (in: _Dest=0x81d5a30, _Source="Microsoft.Office.BusinessApplications.Runtime.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" [0160.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml")) returned 0x20 [0162.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", dwFileAttributes=0x20) returned 0 [0162.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.243] GetLastError () returned 0x5 [0162.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", dwFileAttributes=0x20) returned 0 [0162.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a30) returned 1 [0162.243] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe396200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7d2b50d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe396200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0xa2780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.dll", cAlternateFileName="MIBA26~1.DLL")) returned 1 [0162.243] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.dll", _String2=".") returned 1 [0162.243] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.dll", _String2="..") returned 1 [0162.243] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68711f00, ftCreationTime.dwHighDateTime=0x1ca25b6, ftLastAccessTime.dwLowDateTime=0x7d2b50d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68711f00, ftLastWriteTime.dwHighDateTime=0x1ca25b6, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.xml", cAlternateFileName="MICROS~3.XML")) returned 1 [0162.243] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.xml", _String2=".") returned 1 [0162.243] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.xml", _String2="..") returned 1 [0162.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5a30 [0162.243] wcscpy (in: _Dest=0x81d5a30, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0162.243] wcscat (in: _Dest=0x81d5a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0162.243] wcscat (in: _Dest=0x81d5a30, _Source="Microsoft.Office.BusinessApplications.RuntimeUi.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" [0162.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0162.948] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd083500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd083500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0xea780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.dll", cAlternateFileName="MIB82D~1.DLL")) returned 1 [0162.948] wcscmp (_String1="Microsoft.Office.BusinessData.dll", _String2=".") returned 1 [0162.948] wcscmp (_String1="Microsoft.Office.BusinessData.dll", _String2="..") returned 1 [0162.948] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ba1200, ftCreationTime.dwHighDateTime=0x1ca2512, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3ba1200, ftLastWriteTime.dwHighDateTime=0x1ca2512, nFileSizeHigh=0x0, nFileSizeLow=0x33737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.xml", cAlternateFileName="MIB8A9~1.XML")) returned 1 [0162.948] wcscmp (_String1="Microsoft.Office.BusinessData.xml", _String2=".") returned 1 [0162.948] wcscmp (_String1="Microsoft.Office.BusinessData.xml", _String2="..") returned 1 [0162.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81867a0 [0162.949] wcscpy (in: _Dest=0x81867a0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0162.949] wcscat (in: _Dest=0x81867a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0162.949] wcscat (in: _Dest=0x81867a0, _Source="Microsoft.Office.BusinessData.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" [0162.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81867a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0162.950] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cdca00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71cdca00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x4998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0162.950] wcscmp (_String1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", _String2=".") returned 1 [0162.950] wcscmp (_String1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", _String2="..") returned 1 [0162.950] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76927e00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x891230d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76927e00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.FormControl.dll", cAlternateFileName="MI8F13~1.DLL")) returned 1 [0162.951] wcscmp (_String1="Microsoft.Office.InfoPath.FormControl.dll", _String2=".") returned 1 [0162.951] wcscmp (_String1="Microsoft.Office.InfoPath.FormControl.dll", _String2="..") returned 1 [0162.951] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76927e00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x790ccfb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76927e00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x63790, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0162.951] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", _String2=".") returned 1 [0162.951] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", _String2="..") returned 1 [0162.951] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x891230d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0xc5265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", cAlternateFileName="MICROS~4.XML")) returned 1 [0162.951] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", _String2=".") returned 1 [0162.951] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", _String2="..") returned 1 [0162.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3330a8 [0162.951] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0162.951] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0162.951] wcscat (in: _Dest=0x3330a8, _Source="Microsoft.Office.Interop.InfoPath.SemiTrust.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" [0162.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2888 [0162.952] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76927e00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x8b8b5e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76927e00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.dll", cAlternateFileName="MI0E06~1.DLL")) returned 1 [0162.953] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.dll", _String2=".") returned 1 [0162.953] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.dll", _String2="..") returned 1 [0162.953] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf813d200, ftCreationTime.dwHighDateTime=0x1c9bc94, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf813d200, ftLastWriteTime.dwHighDateTime=0x1c9bc94, nFileSizeHigh=0x0, nFileSizeLow=0x837d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0162.953] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.xml", _String2=".") returned 1 [0162.953] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.xml", _String2="..") returned 1 [0162.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d41bb0 [0162.953] wcscpy (in: _Dest=0x3d41bb0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0162.953] wcscat (in: _Dest=0x3d41bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0162.953] wcscat (in: _Dest=0x3d41bb0, _Source="Microsoft.Office.Interop.InfoPath.Xml.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" [0162.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0162.954] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6af05200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0xc02be9f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6af05200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x12798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="MIAE71~1.DLL")) returned 1 [0162.954] wcscmp (_String1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", _String2=".") returned 1 [0162.954] wcscmp (_String1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", _String2="..") returned 1 [0162.954] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xc02e4b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x67760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="MIF37A~1.DLL")) returned 1 [0162.955] wcscmp (_String1="microsoft.office.workflow.actions.proxy.dll", _String2=".") returned 1 [0162.955] wcscmp (_String1="microsoft.office.workflow.actions.proxy.dll", _String2="..") returned 1 [0162.955] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd083500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd083500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x7e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.dll", cAlternateFileName="MI5DD9~1.DLL")) returned 1 [0162.955] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", _String2=".") returned 1 [0162.955] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", _String2="..") returned 1 [0162.955] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ba1200, ftCreationTime.dwHighDateTime=0x1ca2512, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3ba1200, ftLastWriteTime.dwHighDateTime=0x1ca2512, nFileSizeHigh=0x0, nFileSizeLow=0x311b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.xml", cAlternateFileName="MI14FC~1.XML")) returned 1 [0162.976] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", _String2=".") returned 1 [0162.976] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", _String2="..") returned 1 [0162.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e65878 [0162.976] wcscpy (in: _Dest=0x3e65878, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0162.976] wcscat (in: _Dest=0x3e65878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0162.977] wcscat (in: _Dest=0x3e65878, _Source="Microsoft.SharePoint.BusinessData.Administration.Client.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" [0164.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c0 [0164.467] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xc02e4b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x74760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="MI6AA3~1.DLL")) returned 1 [0164.467] wcscmp (_String1="microsoft.sharepoint.workflowactions.proxy.dll", _String2=".") returned 1 [0164.467] wcscmp (_String1="microsoft.sharepoint.workflowactions.proxy.dll", _String2="..") returned 1 [0164.467] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8d30b1f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x57760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1 [0164.467] wcscmp (_String1="MIMEDIR.DLL", _String2=".") returned 1 [0164.468] wcscmp (_String1="MIMEDIR.DLL", _String2="..") returned 1 [0164.468] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5df52300, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5df52300, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x8b760, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0164.468] wcscmp (_String1="misc.exe", _String2=".") returned 1 [0164.468] wcscmp (_String1="misc.exe", _String2="..") returned 1 [0164.468] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x807f7d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0xf588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLCFG32.CPL", cAlternateFileName="")) returned 1 [0164.468] wcscmp (_String1="MLCFG32.CPL", _String2=".") returned 1 [0164.468] wcscmp (_String1="MLCFG32.CPL", _String2="..") returned 1 [0164.468] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x5180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLSHEXT.DLL", cAlternateFileName="")) returned 1 [0164.468] wcscmp (_String1="MLSHEXT.DLL", _String2=".") returned 1 [0164.468] wcscmp (_String1="MLSHEXT.DLL", _String2="..") returned 1 [0164.468] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3aedd00, ftCreationTime.dwHighDateTime=0x1c9ce63, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3aedd00, ftLastWriteTime.dwHighDateTime=0x1c9ce63, nFileSizeHigh=0x0, nFileSizeLow=0x25f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="MML2OMML.XSL", cAlternateFileName="")) returned 1 [0164.468] wcscmp (_String1="MML2OMML.XSL", _String2=".") returned 1 [0164.468] wcscmp (_String1="MML2OMML.XSL", _String2="..") returned 1 [0164.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b3e8 [0164.468] wcscpy (in: _Dest=0x3f0b3e8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.468] wcscat (in: _Dest=0x3f0b3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.468] wcscat (in: _Dest=0x3f0b3e8, _Source="MML2OMML.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" [0164.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0164.469] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9263590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x72768, dwReserved0=0x0, dwReserved1=0x0, cFileName="MODELENG.DLL", cAlternateFileName="")) returned 1 [0164.469] wcscmp (_String1="MODELENG.DLL", _String2=".") returned 1 [0164.469] wcscmp (_String1="MODELENG.DLL", _String2="..") returned 1 [0164.469] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5331d000, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x8d3574b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5331d000, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x6f990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MORPH9.DLL", cAlternateFileName="")) returned 1 [0164.469] wcscmp (_String1="MORPH9.DLL", _String2=".") returned 1 [0164.470] wcscmp (_String1="MORPH9.DLL", _String2="..") returned 1 [0164.470] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbe5bbdd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXINT.DLL", cAlternateFileName="")) returned 1 [0164.470] wcscmp (_String1="MPXINT.DLL", _String2=".") returned 1 [0164.470] wcscmp (_String1="MPXINT.DLL", _String2="..") returned 1 [0164.470] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0xa5580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACC.OLB", cAlternateFileName="")) returned 1 [0164.470] wcscmp (_String1="MSACC.OLB", _String2=".") returned 1 [0164.470] wcscmp (_String1="MSACC.OLB", _String2="..") returned 1 [0164.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0bb68 [0164.470] wcscpy (in: _Dest=0x3f0bb68, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.470] wcscat (in: _Dest=0x3f0bb68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.470] wcscat (in: _Dest=0x3f0bb68, _Source="MSACC.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" [0164.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0bb68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0164.471] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1961c900, ftCreationTime.dwHighDateTime=0x1cab90e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1961c900, ftLastWriteTime.dwHighDateTime=0x1cab90e, nFileSizeHigh=0x0, nFileSizeLow=0xd57360, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.EXE", cAlternateFileName="")) returned 1 [0164.471] wcscmp (_String1="MSACCESS.EXE", _String2=".") returned 1 [0164.471] wcscmp (_String1="MSACCESS.EXE", _String2="..") returned 1 [0164.471] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca972f00, ftCreationTime.dwHighDateTime=0x1cab83a, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca972f00, ftLastWriteTime.dwHighDateTime=0x1cab83a, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe.manifest", cAlternateFileName="MSACCE~1.MAN")) returned 1 [0164.471] wcscmp (_String1="msaccess.exe.manifest", _String2=".") returned 1 [0164.471] wcscmp (_String1="msaccess.exe.manifest", _String2="..") returned 1 [0164.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dee78 [0164.471] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.471] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.471] wcscat (in: _Dest=0x81dee78, _Source="msaccess.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" [0164.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dee78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0164.472] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1961c900, ftCreationTime.dwHighDateTime=0x1cab90e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1961c900, ftLastWriteTime.dwHighDateTime=0x1cab90e, nFileSizeHigh=0x0, nFileSizeLow=0xf188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAEXP30.DLL", cAlternateFileName="")) returned 1 [0164.472] wcscmp (_String1="MSAEXP30.DLL", _String2=".") returned 1 [0164.472] wcscmp (_String1="MSAEXP30.DLL", _String2="..") returned 1 [0164.472] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcda9300, ftCreationTime.dwHighDateTime=0x1ca9a29, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfcda9300, ftLastWriteTime.dwHighDateTime=0x1ca9a29, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.INF", cAlternateFileName="")) returned 1 [0164.472] wcscmp (_String1="MSCOL11.INF", _String2=".") returned 1 [0164.472] wcscmp (_String1="MSCOL11.INF", _String2="..") returned 1 [0164.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0c270 [0164.473] wcscpy (in: _Dest=0x3f0c270, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.473] wcscat (in: _Dest=0x3f0c270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.473] wcscat (in: _Dest=0x3f0c270, _Source="MSCOL11.INF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" [0164.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0c270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0164.474] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465ba00, ftCreationTime.dwHighDateTime=0x1c2f2c8, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7465ba00, ftLastWriteTime.dwHighDateTime=0x1c2f2c8, nFileSizeHigh=0x0, nFileSizeLow=0x1aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.PPD", cAlternateFileName="")) returned 1 [0164.474] wcscmp (_String1="MSCOL11.PPD", _String2=".") returned 1 [0164.474] wcscmp (_String1="MSCOL11.PPD", _String2="..") returned 1 [0164.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0bbe0 [0164.474] wcscpy (in: _Dest=0x3f0bbe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.474] wcscat (in: _Dest=0x3f0bbe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.474] wcscat (in: _Dest=0x3f0bbe0, _Source="MSCOL11.PPD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" [0164.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0bbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0164.475] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896a5700, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd86ca110, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x896a5700, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_en.dub", cAlternateFileName="MSBB80~1.DUB")) returned 1 [0164.475] wcscmp (_String1="mscss7cm_en.dub", _String2=".") returned 1 [0164.475] wcscmp (_String1="mscss7cm_en.dub", _String2="..") returned 1 [0164.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e23cc0 [0164.475] wcscpy (in: _Dest=0x3e23cc0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.475] wcscat (in: _Dest=0x3e23cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.475] wcscat (in: _Dest=0x3e23cc0, _Source="mscss7cm_en.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" [0164.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0164.476] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2f0b00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf6849b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8e2f0b00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_es.dub", cAlternateFileName="MSCSS7~1.DUB")) returned 1 [0164.476] wcscmp (_String1="mscss7cm_es.dub", _String2=".") returned 1 [0164.476] wcscmp (_String1="mscss7cm_es.dub", _String2="..") returned 1 [0164.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24a40 [0164.476] wcscpy (in: _Dest=0x3e24a40, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.477] wcscat (in: _Dest=0x3e24a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.477] wcscat (in: _Dest=0x3e24a40, _Source="mscss7cm_es.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" [0164.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0164.478] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bccb100, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdbd639b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8bccb100, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_fr.dub", cAlternateFileName="MSCSS7~3.DUB")) returned 1 [0164.478] wcscmp (_String1="mscss7cm_fr.dub", _String2=".") returned 1 [0164.478] wcscmp (_String1="mscss7cm_fr.dub", _String2="..") returned 1 [0164.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24340 [0164.478] wcscpy (in: _Dest=0x3e24340, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.478] wcscat (in: _Dest=0x3e24340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.478] wcscat (in: _Dest=0x3e24340, _Source="mscss7cm_fr.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" [0164.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0164.479] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f6fd00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xd8ef8cb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa3f6fd00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7en.dll", cAlternateFileName="")) returned 1 [0164.479] wcscmp (_String1="mscss7en.dll", _String2=".") returned 1 [0164.479] wcscmp (_String1="mscss7en.dll", _String2="..") returned 1 [0164.479] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1e0b00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf65e850, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xab1e0b00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7es.dll", cAlternateFileName="")) returned 1 [0164.479] wcscmp (_String1="mscss7es.dll", _String2=".") returned 1 [0164.479] wcscmp (_String1="mscss7es.dll", _String2="..") returned 1 [0164.479] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4909300, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdcf8a170, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa4909300, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x4ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7fr.dll", cAlternateFileName="")) returned 1 [0164.479] wcscmp (_String1="mscss7fr.dll", _String2=".") returned 1 [0164.479] wcscmp (_String1="mscss7fr.dll", _String2="..") returned 1 [0164.479] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9b8400, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd87d4ab0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8a9b8400, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_en.dub", cAlternateFileName="MS79E7~1.DUB")) returned 1 [0164.479] wcscmp (_String1="mscss7wre_en.dub", _String2=".") returned 1 [0164.479] wcscmp (_String1="mscss7wre_en.dub", _String2="..") returned 1 [0164.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e23fc0 [0164.480] wcscpy (in: _Dest=0x3e23fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.480] wcscat (in: _Dest=0x3e23fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.480] wcscat (in: _Dest=0x3e23fc0, _Source="mscss7wre_en.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" [0164.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0164.481] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f603800, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf6f6dd0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8f603800, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_es.dub", cAlternateFileName="MSCSS7~2.DUB")) returned 1 [0164.481] wcscmp (_String1="mscss7wre_es.dub", _String2=".") returned 1 [0164.481] wcscmp (_String1="mscss7wre_es.dub", _String2="..") returned 1 [0164.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e23ec0 [0164.481] wcscpy (in: _Dest=0x3e23ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.481] wcscat (in: _Dest=0x3e23ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.481] wcscat (in: _Dest=0x3e23ec0, _Source="mscss7wre_es.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" [0164.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0164.482] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cfdde00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdbe22090, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8cfdde00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_fr.dub", cAlternateFileName="MSCSS7~4.DUB")) returned 1 [0164.482] wcscmp (_String1="mscss7wre_fr.dub", _String2=".") returned 1 [0164.482] wcscmp (_String1="mscss7wre_fr.dub", _String2="..") returned 1 [0164.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24740 [0164.482] wcscpy (in: _Dest=0x3e24740, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.482] wcscat (in: _Dest=0x3e24740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.482] wcscat (in: _Dest=0x3e24740, _Source="mscss7wre_fr.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" [0164.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0164.483] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3daad700, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x80a59310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3daad700, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x849a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7.dll", cAlternateFileName="")) returned 1 [0164.483] wcscmp (_String1="mset7.dll", _String2=".") returned 1 [0164.483] wcscmp (_String1="mset7.dll", _String2="..") returned 1 [0164.483] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eee2600, ftCreationTime.dwHighDateTime=0x1c87a58, ftLastAccessTime.dwLowDateTime=0x8d5dec10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4eee2600, ftLastWriteTime.dwHighDateTime=0x1c87a58, nFileSizeHigh=0x0, nFileSizeLow=0x2c5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7db.kic", cAlternateFileName="")) returned 1 [0164.483] wcscmp (_String1="mset7db.kic", _String2=".") returned 1 [0164.483] wcscmp (_String1="mset7db.kic", _String2="..") returned 1 [0164.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b730 [0164.483] wcscpy (in: _Dest=0x3f0b730, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.483] wcscat (in: _Dest=0x3f0b730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.483] wcscat (in: _Dest=0x3f0b730, _Source="mset7db.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" [0164.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0164.484] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e216400, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x8d604d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e216400, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7en.kic", cAlternateFileName="")) returned 1 [0164.484] wcscmp (_String1="mset7en.kic", _String2=".") returned 1 [0164.485] wcscmp (_String1="mset7en.kic", _String2="..") returned 1 [0164.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b898 [0164.485] wcscpy (in: _Dest=0x3f0b898, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.485] wcscat (in: _Dest=0x3f0b898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.485] wcscat (in: _Dest=0x3f0b898, _Source="mset7en.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" [0164.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0164.486] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e216400, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x8d62aed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e216400, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x13e9f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7es.kic", cAlternateFileName="")) returned 1 [0164.486] wcscmp (_String1="mset7es.kic", _String2=".") returned 1 [0164.486] wcscmp (_String1="mset7es.kic", _String2="..") returned 1 [0164.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0c1f8 [0164.486] wcscpy (in: _Dest=0x3f0c1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.486] wcscat (in: _Dest=0x3f0c1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.486] wcscat (in: _Dest=0x3f0c1f8, _Source="mset7es.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" [0164.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0c1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0164.487] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f529100, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x80a7f470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f529100, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7fr.kic", cAlternateFileName="")) returned 1 [0164.487] wcscmp (_String1="mset7fr.kic", _String2=".") returned 1 [0164.487] wcscmp (_String1="mset7fr.kic", _String2="..") returned 1 [0164.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b4d8 [0164.488] wcscpy (in: _Dest=0x3f0b4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.488] wcscat (in: _Dest=0x3f0b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.488] wcscat (in: _Dest=0x3f0b4d8, _Source="mset7fr.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" [0164.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0164.489] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e216400, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x80acb730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e216400, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x3567a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7ge.kic", cAlternateFileName="")) returned 1 [0164.489] wcscmp (_String1="mset7ge.kic", _String2=".") returned 1 [0164.489] wcscmp (_String1="mset7ge.kic", _String2="..") returned 1 [0164.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b988 [0164.489] wcscpy (in: _Dest=0x3f0b988, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.489] wcscat (in: _Dest=0x3f0b988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.489] wcscat (in: _Dest=0x3f0b988, _Source="mset7ge.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" [0164.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0164.490] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f529100, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x80af1890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f529100, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x1da59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7jp.kic", cAlternateFileName="")) returned 1 [0164.490] wcscmp (_String1="mset7jp.kic", _String2=".") returned 1 [0164.490] wcscmp (_String1="mset7jp.kic", _String2="..") returned 1 [0164.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b7a8 [0164.490] wcscpy (in: _Dest=0x3f0b7a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.490] wcscat (in: _Dest=0x3f0b7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.490] wcscat (in: _Dest=0x3f0b7a8, _Source="mset7jp.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" [0164.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0164.491] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400d3100, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x80af1890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x400d3100, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x7d188, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tk.dll", cAlternateFileName="")) returned 1 [0164.491] wcscmp (_String1="mset7tk.dll", _String2=".") returned 1 [0164.491] wcscmp (_String1="mset7tk.dll", _String2="..") returned 1 [0164.492] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35529c00, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x8d62aed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35529c00, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0xc0598, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tkjp.dll", cAlternateFileName="MSET7T~1.DLL")) returned 1 [0164.492] wcscmp (_String1="mset7tkjp.dll", _String2=".") returned 1 [0164.492] wcscmp (_String1="mset7tkjp.dll", _String2="..") returned 1 [0164.492] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2feafd00, ftCreationTime.dwHighDateTime=0x1bf9d7f, ftLastAccessTime.dwLowDateTime=0x80b179f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2feafd00, ftLastWriteTime.dwHighDateTime=0x1bf9d7f, nFileSizeHigh=0x0, nFileSizeLow=0xe36, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.ICO", cAlternateFileName="")) returned 1 [0164.492] wcscmp (_String1="MSN.ICO", _String2=".") returned 1 [0164.492] wcscmp (_String1="MSN.ICO", _String2="..") returned 1 [0164.492] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49654b00, ftCreationTime.dwHighDateTime=0x1ca229f, ftLastAccessTime.dwLowDateTime=0x8d7cddf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49654b00, ftLastWriteTime.dwHighDateTime=0x1ca229f, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1 [0164.492] wcscmp (_String1="MSO0127.ACL", _String2=".") returned 1 [0164.492] wcscmp (_String1="MSO0127.ACL", _String2="..") returned 1 [0164.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32778 [0164.492] wcscpy (in: _Dest=0x3f32778, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.492] wcscat (in: _Dest=0x3f32778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.492] wcscat (in: _Dest=0x3f32778, _Source="MSO0127.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" [0164.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0164.493] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7b4d00, ftCreationTime.dwHighDateTime=0x1cbe025, ftLastAccessTime.dwLowDateTime=0xf8b2e5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x1e7b4d00, ftLastWriteTime.dwHighDateTime=0x1cbe025, nFileSizeHigh=0x0, nFileSizeLow=0x25578, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCF.DLL", cAlternateFileName="")) returned 1 [0164.493] wcscmp (_String1="MSOCF.DLL", _String2=".") returned 1 [0164.493] wcscmp (_String1="MSOCF.DLL", _String2="..") returned 1 [0164.493] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc0400, ftCreationTime.dwHighDateTime=0x1cbe025, ftLastAccessTime.dwLowDateTime=0xf8b2e5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xefc0400, ftLastWriteTime.dwHighDateTime=0x1cbe025, nFileSizeHigh=0x0, nFileSizeLow=0x4990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFU.DLL", cAlternateFileName="")) returned 1 [0164.493] wcscmp (_String1="MSOCFU.DLL", _String2=".") returned 1 [0164.493] wcscmp (_String1="MSOCFU.DLL", _String2="..") returned 1 [0164.493] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7b4d00, ftCreationTime.dwHighDateTime=0x1cbe025, ftLastAccessTime.dwLowDateTime=0xf8b2e5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x1e7b4d00, ftLastWriteTime.dwHighDateTime=0x1cbe025, nFileSizeHigh=0x0, nFileSizeLow=0x3b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFUIUTILITIESDLL.DLL", cAlternateFileName="MSOCFU~1.DLL")) returned 1 [0164.493] wcscmp (_String1="MSOCFUIUTILITIESDLL.DLL", _String2=".") returned 1 [0164.493] wcscmp (_String1="MSOCFUIUTILITIESDLL.DLL", _String2="..") returned 1 [0164.493] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c14100, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf5aae570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x83c14100, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x7a760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSODCW.DLL", cAlternateFileName="")) returned 1 [0164.493] wcscmp (_String1="MSODCW.DLL", _String2=".") returned 1 [0164.493] wcscmp (_String1="MSODCW.DLL", _String2="..") returned 1 [0164.493] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74830500, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x80b3db50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74830500, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0164.493] wcscmp (_String1="MSOHEV.DLL", _String2=".") returned 1 [0164.493] wcscmp (_String1="MSOHEV.DLL", _String2="..") returned 1 [0164.493] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7220ab00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x8d7f3f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7220ab00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xf180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEVI.DLL", cAlternateFileName="")) returned 1 [0164.494] wcscmp (_String1="MSOHEVI.DLL", _String2=".") returned 1 [0164.494] wcscmp (_String1="MSOHEVI.DLL", _String2="..") returned 1 [0164.494] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbec9bc00, ftCreationTime.dwHighDateTime=0x1ca923e, ftLastAccessTime.dwLowDateTime=0x8d7f3f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbec9bc00, ftLastWriteTime.dwHighDateTime=0x1ca923e, nFileSizeHigh=0x0, nFileSizeLow=0x11580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0164.494] wcscmp (_String1="MSOHTMED.EXE", _String2=".") returned 1 [0164.494] wcscmp (_String1="MSOHTMED.EXE", _String2="..") returned 1 [0164.494] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c893400, ftCreationTime.dwHighDateTime=0x1caca89, ftLastAccessTime.dwLowDateTime=0x80b63cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c893400, ftLastWriteTime.dwHighDateTime=0x1caca89, nFileSizeHigh=0x0, nFileSizeLow=0x8598, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSTYLE.DLL", cAlternateFileName="")) returned 1 [0164.494] wcscmp (_String1="MSOSTYLE.DLL", _String2=".") returned 1 [0164.494] wcscmp (_String1="MSOSTYLE.DLL", _String2="..") returned 1 [0164.494] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17464200, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf5b46af0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x17464200, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0xaf780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSYNC.EXE", cAlternateFileName="")) returned 1 [0164.494] wcscmp (_String1="MSOSYNC.EXE", _String2=".") returned 1 [0164.494] wcscmp (_String1="MSOSYNC.EXE", _String2="..") returned 1 [0164.494] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16151500, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf5b92db0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x16151500, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x58178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.EXE", cAlternateFileName="")) returned 1 [0164.494] wcscmp (_String1="MSOUC.EXE", _String2=".") returned 1 [0164.494] wcscmp (_String1="MSOUC.EXE", _String2="..") returned 1 [0164.494] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x80b89e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x65d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTL.OLB", cAlternateFileName="")) returned 1 [0164.494] wcscmp (_String1="MSOUTL.OLB", _String2=".") returned 1 [0164.494] wcscmp (_String1="MSOUTL.OLB", _String2="..") returned 1 [0164.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32958 [0164.494] wcscpy (in: _Dest=0x3f32958, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.494] wcscat (in: _Dest=0x3f32958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.494] wcscat (in: _Dest=0x3f32958, _Source="MSOUTL.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" [0164.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140 [0164.495] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49671f00, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xe92896f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49671f00, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x33378, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTLS.DLL", cAlternateFileName="")) returned 1 [0164.495] wcscmp (_String1="MSOUTLS.DLL", _String2=".") returned 1 [0164.495] wcscmp (_String1="MSOUTLS.DLL", _String2="..") returned 1 [0164.495] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8889300, ftCreationTime.dwHighDateTime=0x1caba87, ftLastAccessTime.dwLowDateTime=0xb6f5ac70, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8889300, ftLastWriteTime.dwHighDateTime=0x1caba87, nFileSizeHigh=0x0, nFileSizeLow=0xd560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPJEVTS.DLL", cAlternateFileName="")) returned 1 [0164.495] wcscmp (_String1="MSPJEVTS.DLL", _String2=".") returned 1 [0164.495] wcscmp (_String1="MSPJEVTS.DLL", _String2="..") returned 1 [0164.495] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a76e00, ftCreationTime.dwHighDateTime=0x1cabf05, ftLastAccessTime.dwLowDateTime=0x80baff70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95a76e00, ftLastWriteTime.dwHighDateTime=0x1cabf05, nFileSizeHigh=0x0, nFileSizeLow=0x62588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPPT.OLB", cAlternateFileName="")) returned 1 [0164.495] wcscmp (_String1="MSPPT.OLB", _String2=".") returned 1 [0164.495] wcscmp (_String1="MSPPT.OLB", _String2="..") returned 1 [0164.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32688 [0164.496] wcscpy (in: _Dest=0x3f32688, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.496] wcscat (in: _Dest=0x3f32688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.496] wcscat (in: _Dest=0x3f32688, _Source="MSPPT.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" [0164.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0164.497] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f29f800, ftCreationTime.dwHighDateTime=0x1cb707d, ftLastAccessTime.dwLowDateTime=0xf5b92db0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x5f29f800, ftLastWriteTime.dwHighDateTime=0x1cb707d, nFileSizeHigh=0x0, nFileSizeLow=0xd6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPRJ.OLB", cAlternateFileName="")) returned 1 [0164.497] wcscmp (_String1="MSPRJ.OLB", _String2=".") returned 1 [0164.497] wcscmp (_String1="MSPRJ.OLB", _String2="..") returned 1 [0164.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32598 [0164.497] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.497] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.497] wcscat (in: _Dest=0x3f32598, _Source="MSPRJ.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" [0164.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0164.498] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3764600, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xf85d3430, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3764600, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x35760, dwReserved0=0x0, dwReserved1=0x0, cFileName="msproof7.dll", cAlternateFileName="")) returned 1 [0164.498] wcscmp (_String1="msproof7.dll", _String2=".") returned 1 [0164.498] wcscmp (_String1="msproof7.dll", _String2="..") returned 1 [0164.498] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x12bbb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPST32.DLL", cAlternateFileName="")) returned 1 [0164.498] wcscmp (_String1="MSPST32.DLL", _String2=".") returned 1 [0164.498] wcscmp (_String1="MSPST32.DLL", _String2="..") returned 1 [0164.498] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462fd00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5462fd00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x9cbd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.EXE", cAlternateFileName="")) returned 1 [0164.498] wcscmp (_String1="MSPUB.EXE", _String2=".") returned 1 [0164.498] wcscmp (_String1="MSPUB.EXE", _String2="..") returned 1 [0164.498] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f1c700, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72f1c700, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x4b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe.manifest", cAlternateFileName="MSPUBE~1.MAN")) returned 1 [0164.498] wcscmp (_String1="mspub.exe.manifest", _String2=".") returned 1 [0164.498] wcscmp (_String1="mspub.exe.manifest", _String2="..") returned 1 [0164.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf338 [0164.498] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.498] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.498] wcscat (in: _Dest=0x81bf338, _Source="mspub.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" [0164.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0164.499] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e8f900, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86e8f900, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0x3ff28, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.TLB", cAlternateFileName="")) returned 1 [0164.499] wcscmp (_String1="MSPUB.TLB", _String2=".") returned 1 [0164.499] wcscmp (_String1="MSPUB.TLB", _String2="..") returned 1 [0164.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f33060 [0164.499] wcscpy (in: _Dest=0x3f33060, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.499] wcscat (in: _Dest=0x3f33060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.499] wcscat (in: _Dest=0x3f33060, _Source="MSPUB.TLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" [0164.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0164.500] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b67b00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x80c22390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b67b00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0xa3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.EXE", cAlternateFileName="")) returned 1 [0164.500] wcscmp (_String1="MSQRY32.EXE", _String2=".") returned 1 [0164.500] wcscmp (_String1="MSQRY32.EXE", _String2="..") returned 1 [0164.500] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x17750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSRTEDIT.DLL", cAlternateFileName="")) returned 1 [0164.500] wcscmp (_String1="MSRTEDIT.DLL", _String2=".") returned 1 [0164.500] wcscmp (_String1="MSRTEDIT.DLL", _String2="..") returned 1 [0164.500] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9535100, ftCreationTime.dwHighDateTime=0x1cb7079, ftLastAccessTime.dwLowDateTime=0xf4ff8270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x9535100, ftLastWriteTime.dwHighDateTime=0x1cb7079, nFileSizeHigh=0x0, nFileSizeLow=0xab768, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORDB.EXE", cAlternateFileName="")) returned 1 [0164.500] wcscmp (_String1="MSTORDB.EXE", _String2=".") returned 1 [0164.500] wcscmp (_String1="MSTORDB.EXE", _String2="..") returned 1 [0164.500] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x80c484f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x19f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.EXE", cAlternateFileName="")) returned 1 [0164.500] wcscmp (_String1="MSTORE.EXE", _String2=".") returned 1 [0164.501] wcscmp (_String1="MSTORE.EXE", _String2="..") returned 1 [0164.501] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x8dd4f0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x66d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORES.DLL", cAlternateFileName="")) returned 1 [0164.501] wcscmp (_String1="MSTORES.DLL", _String2=".") returned 1 [0164.501] wcscmp (_String1="MSTORES.DLL", _String2="..") returned 1 [0164.501] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf9f800, ftCreationTime.dwHighDateTime=0x1cacd3f, ftLastAccessTime.dwLowDateTime=0x8dd75230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5cf9f800, ftLastWriteTime.dwHighDateTime=0x1cacd3f, nFileSizeHigh=0x0, nFileSizeLow=0xdc158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWORD.OLB", cAlternateFileName="")) returned 1 [0164.501] wcscmp (_String1="MSWORD.OLB", _String2=".") returned 1 [0164.501] wcscmp (_String1="MSWORD.OLB", _String2="..") returned 1 [0164.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32700 [0164.501] wcscpy (in: _Dest=0x3f32700, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.501] wcscat (in: _Dest=0x3f32700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.501] wcscat (in: _Dest=0x3f32700, _Source="MSWORD.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" [0164.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0164.502] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf611ed00, ftCreationTime.dwHighDateTime=0x1c9cea7, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf611ed00, ftLastWriteTime.dwHighDateTime=0x1c9cea7, nFileSizeHigh=0x0, nFileSizeLow=0x39530, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSYUBIN7.DLL", cAlternateFileName="")) returned 1 [0164.502] wcscmp (_String1="MSYUBIN7.DLL", _String2=".") returned 1 [0164.502] wcscmp (_String1="MSYUBIN7.DLL", _String2="..") returned 1 [0164.502] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a180200, ftCreationTime.dwHighDateTime=0x1c62b3a, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a180200, ftLastWriteTime.dwHighDateTime=0x1c62b3a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="MYSL.ICO", cAlternateFileName="")) returned 1 [0164.502] wcscmp (_String1="MYSL.ICO", _String2=".") returned 1 [0164.502] wcscmp (_String1="MYSL.ICO", _String2="..") returned 1 [0164.502] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b400, ftCreationTime.dwHighDateTime=0x1cb707a, ftLastAccessTime.dwLowDateTime=0xf7a388f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x16b400, ftLastWriteTime.dwHighDateTime=0x1cb707a, nFileSizeHigh=0x0, nFileSizeLow=0x14d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0164.502] wcscmp (_String1="NAME.DLL", _String2=".") returned 1 [0164.502] wcscmp (_String1="NAME.DLL", _String2="..") returned 1 [0164.502] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3208300, ftCreationTime.dwHighDateTime=0x1cab9fe, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3208300, ftLastWriteTime.dwHighDateTime=0x1cab9fe, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="NAMECO~1.DLL")) returned 1 [0164.502] wcscmp (_String1="NAMECONTROLPROXY.DLL", _String2=".") returned 1 [0164.502] wcscmp (_String1="NAMECONTROLPROXY.DLL", _String2="..") returned 1 [0164.503] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0be2900, ftCreationTime.dwHighDateTime=0x1cab9fe, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0be2900, ftLastWriteTime.dwHighDateTime=0x1cab9fe, nFileSizeHigh=0x0, nFileSizeLow=0x15b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLSERVER.EXE", cAlternateFileName="NAMECO~1.EXE")) returned 1 [0164.504] wcscmp (_String1="NAMECONTROLSERVER.EXE", _String2=".") returned 1 [0164.504] wcscmp (_String1="NAMECONTROLSERVER.EXE", _String2="..") returned 1 [0164.504] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a51f00, ftCreationTime.dwHighDateTime=0x1ca919d, ftLastAccessTime.dwLowDateTime=0xb7065610, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x95a51f00, ftLastWriteTime.dwHighDateTime=0x1ca919d, nFileSizeHigh=0x0, nFileSizeLow=0x21180, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0164.504] wcscmp (_String1="NAMEEXT.DLL", _String2=".") returned 1 [0164.504] wcscmp (_String1="NAMEEXT.DLL", _String2="..") returned 1 [0164.504] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e62300, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x8df18150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x38e62300, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x71f1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Data0011.DLL", cAlternateFileName="NL7DAT~1.DLL")) returned 1 [0164.504] wcscmp (_String1="NL7Data0011.DLL", _String2=".") returned 1 [0164.504] wcscmp (_String1="NL7Data0011.DLL", _String2="..") returned 1 [0164.504] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a0b800, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x80d9f150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x43a0b800, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x2589b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Lexicons0011.DLL", cAlternateFileName="NL7LEX~1.DLL")) returned 1 [0164.504] wcscmp (_String1="NL7Lexicons0011.DLL", _String2=".") returned 1 [0164.505] wcscmp (_String1="NL7Lexicons0011.DLL", _String2="..") returned 1 [0164.505] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e19800, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xd8e86890, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa7e19800, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x5899b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS0009.dll", cAlternateFileName="NL7MOD~3.DLL")) returned 1 [0164.505] wcscmp (_String1="NL7MODELS0009.dll", _String2=".") returned 1 [0164.505] wcscmp (_String1="NL7MODELS0009.dll", _String2="..") returned 1 [0164.505] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3764600, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdfdced10, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3764600, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x5ef1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000A.dll", cAlternateFileName="NL7MOD~1.DLL")) returned 1 [0164.505] wcscmp (_String1="NL7MODELS000A.dll", _String2=".") returned 1 [0164.505] wcscmp (_String1="NL7MODELS000A.dll", _String2="..") returned 1 [0164.505] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba9d5400, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdcf3deb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xba9d5400, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x5695b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000C.dll", cAlternateFileName="NL7MOD~2.DLL")) returned 1 [0164.505] wcscmp (_String1="NL7MODELS000C.dll", _String2=".") returned 1 [0164.505] wcscmp (_String1="NL7MODELS000C.dll", _String2="..") returned 1 [0164.505] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48656c00, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x8df64410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48656c00, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x6529b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Models0011.DLL", cAlternateFileName="NL7MOD~4.DLL")) returned 1 [0164.505] wcscmp (_String1="NL7Models0011.DLL", _String2=".") returned 1 [0164.505] wcscmp (_String1="NL7Models0011.DLL", _String2="..") returned 1 [0164.505] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61256900, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61256900, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPAUTHZ.DLL", cAlternateFileName="")) returned 1 [0164.505] wcscmp (_String1="NPAUTHZ.DLL", _String2=".") returned 1 [0164.505] wcscmp (_String1="NPAUTHZ.DLL", _String2="..") returned 1 [0164.505] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x59e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1 [0164.505] wcscmp (_String1="NPSPWRAP.DLL", _String2=".") returned 1 [0164.505] wcscmp (_String1="NPSPWRAP.DLL", _String2="..") returned 1 [0164.505] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3593df00, ftCreationTime.dwHighDateTime=0x1cbe5d1, ftLastAccessTime.dwLowDateTime=0xfa74c990, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x3593df00, ftLastWriteTime.dwHighDateTime=0x1cbe5d1, nFileSizeHigh=0x0, nFileSizeLow=0x1393168, dwReserved0=0x0, dwReserved1=0x0, cFileName="OART.DLL", cAlternateFileName="")) returned 1 [0164.505] wcscmp (_String1="OART.DLL", _String2=".") returned 1 [0164.505] wcscmp (_String1="OART.DLL", _String2="..") returned 1 [0164.505] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa4d600, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0x811ef930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9fa4d600, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0xa9b378, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARTCONV.DLL", cAlternateFileName="")) returned 1 [0164.505] wcscmp (_String1="OARTCONV.DLL", _String2=".") returned 1 [0164.505] wcscmp (_String1="OARTCONV.DLL", _String2="..") returned 1 [0164.505] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0xd00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRHC.DAT", cAlternateFileName="")) returned 1 [0164.505] wcscmp (_String1="OCRHC.DAT", _String2=".") returned 1 [0164.505] wcscmp (_String1="OCRHC.DAT", _String2="..") returned 1 [0164.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f327f0 [0164.506] wcscpy (in: _Dest=0x3f327f0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0164.506] wcscat (in: _Dest=0x3f327f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0164.506] wcscat (in: _Dest=0x3f327f0, _Source="OCRHC.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" [0166.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f327f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2488 [0166.042] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0xa00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRVC.DAT", cAlternateFileName="")) returned 1 [0166.042] wcscmp (_String1="OCRVC.DAT", _String2=".") returned 1 [0166.042] wcscmp (_String1="OCRVC.DAT", _String2="..") returned 1 [0166.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68240 [0166.042] wcscpy (in: _Dest=0x3e68240, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.043] wcscat (in: _Dest=0x3e68240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.043] wcscat (in: _Dest=0x3e68240, _Source="OCRVC.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" [0166.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2504 [0166.044] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcda9300, ftCreationTime.dwHighDateTime=0x1ca9a29, ftLastAccessTime.dwLowDateTime=0x812ae010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfcda9300, ftLastWriteTime.dwHighDateTime=0x1ca9a29, nFileSizeHigh=0x0, nFileSizeLow=0x1c99, dwReserved0=0x0, dwReserved1=0x0, cFileName="OEMPRINT.CAT", cAlternateFileName="")) returned 1 [0166.044] wcscmp (_String1="OEMPRINT.CAT", _String2=".") returned 1 [0166.044] wcscmp (_String1="OEMPRINT.CAT", _String2="..") returned 1 [0166.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e687e0 [0166.044] wcscpy (in: _Dest=0x3e687e0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.044] wcscat (in: _Dest=0x3e687e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.044] wcscat (in: _Dest=0x3e687e0, _Source="OEMPRINT.CAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" [0166.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e687e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24fc [0166.084] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f5db00, ftCreationTime.dwHighDateTime=0x1cbd8c6, ftLastAccessTime.dwLowDateTime=0xf8834a30, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa8f5db00, ftLastWriteTime.dwHighDateTime=0x1cbd8c6, nFileSizeHigh=0x0, nFileSizeLow=0x6f1180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWC.DLL", cAlternateFileName="")) returned 1 [0166.084] wcscmp (_String1="OFFOWC.DLL", _String2=".") returned 1 [0166.084] wcscmp (_String1="OFFOWC.DLL", _String2="..") returned 1 [0166.084] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfbe600, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x8150f610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cfbe600, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0xdfe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFRHD.DLL", cAlternateFileName="")) returned 1 [0166.084] wcscmp (_String1="OFFRHD.DLL", _String2=".") returned 1 [0166.084] wcscmp (_String1="OFFRHD.DLL", _String2="..") returned 1 [0166.084] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9aad100, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x8e4bf590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9aad100, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0x62178, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFXML.DLL", cAlternateFileName="")) returned 1 [0166.084] wcscmp (_String1="OFFXML.DLL", _String2=".") returned 1 [0166.084] wcscmp (_String1="OFFXML.DLL", _String2="..") returned 1 [0166.084] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d87900, ftCreationTime.dwHighDateTime=0x1c6f433, ftLastAccessTime.dwLowDateTime=0x8e4bf590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7d87900, ftLastWriteTime.dwHighDateTime=0x1c6f433, nFileSizeHigh=0x0, nFileSizeLow=0x9bb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogalegit.dll", cAlternateFileName="")) returned 1 [0166.084] wcscmp (_String1="ogalegit.dll", _String2=".") returned 1 [0166.084] wcscmp (_String1="ogalegit.dll", _String2="..") returned 1 [0166.085] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa657bf00, ftCreationTime.dwHighDateTime=0x1cb7064, ftLastAccessTime.dwLowDateTime=0xf8c12df0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa657bf00, ftLastWriteTime.dwHighDateTime=0x1cb7064, nFileSizeHigh=0x0, nFileSizeLow=0x352578, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIMG.DLL", cAlternateFileName="")) returned 1 [0166.085] wcscmp (_String1="OIMG.DLL", _String2=".") returned 1 [0166.085] wcscmp (_String1="OIMG.DLL", _String2="..") returned 1 [0166.085] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d2c000, ftCreationTime.dwHighDateTime=0x1cba0bc, ftLastAccessTime.dwLowDateTime=0xfaa46510, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x88d2c000, ftLastWriteTime.dwHighDateTime=0x1cba0bc, nFileSizeHigh=0x0, nFileSizeLow=0x42f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.EXE", cAlternateFileName="")) returned 1 [0166.085] wcscmp (_String1="OIS.EXE", _String2=".") returned 1 [0166.085] wcscmp (_String1="OIS.EXE", _String2="..") returned 1 [0166.085] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d2c000, ftCreationTime.dwHighDateTime=0x1cba0bc, ftLastAccessTime.dwLowDateTime=0xfab2ad50, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x88d2c000, ftLastWriteTime.dwHighDateTime=0x1cba0bc, nFileSizeHigh=0x0, nFileSizeLow=0xd8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISAPP.DLL", cAlternateFileName="")) returned 1 [0166.085] wcscmp (_String1="OISAPP.DLL", _String2=".") returned 1 [0166.085] wcscmp (_String1="OISAPP.DLL", _String2="..") returned 1 [0166.085] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df92700, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7df92700, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x5988, dwReserved0=0x0, dwReserved1=0x0, cFileName="oisctrl.dll", cAlternateFileName="")) returned 1 [0166.085] wcscmp (_String1="oisctrl.dll", _String2=".") returned 1 [0166.085] wcscmp (_String1="oisctrl.dll", _String2="..") returned 1 [0166.085] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d2c000, ftCreationTime.dwHighDateTime=0x1cba0bc, ftLastAccessTime.dwLowDateTime=0xfab50eb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x88d2c000, ftLastWriteTime.dwHighDateTime=0x1cba0bc, nFileSizeHigh=0x0, nFileSizeLow=0x3f778, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISGRAPH.DLL", cAlternateFileName="")) returned 1 [0166.085] wcscmp (_String1="OISGRAPH.DLL", _String2=".") returned 1 [0166.085] wcscmp (_String1="OISGRAPH.DLL", _String2="..") returned 1 [0166.085] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x3e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0166.085] wcscmp (_String1="OLKFSTUB.DLL", _String2=".") returned 1 [0166.085] wcscmp (_String1="OLKFSTUB.DLL", _String2="..") returned 1 [0166.085] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKIRM.XML", cAlternateFileName="")) returned 1 [0166.085] wcscmp (_String1="OLKIRM.XML", _String2=".") returned 1 [0166.085] wcscmp (_String1="OLKIRM.XML", _String2="..") returned 1 [0166.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e67ca0 [0166.086] wcscpy (in: _Dest=0x3e67ca0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.086] wcscat (in: _Dest=0x3e67ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.086] wcscat (in: _Dest=0x3e67ca0, _Source="OLKIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" [0166.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e0 [0166.087] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13594, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKIRMV.XML", cAlternateFileName="")) returned 1 [0166.087] wcscmp (_String1="OLKIRMV.XML", _String2=".") returned 1 [0166.087] wcscmp (_String1="OLKIRMV.XML", _String2="..") returned 1 [0166.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67d90 [0166.087] wcscpy (in: _Dest=0x3e67d90, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.087] wcscat (in: _Dest=0x3e67d90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.087] wcscat (in: _Dest=0x3e67d90, _Source="OLKIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" [0166.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f4 [0166.089] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x8e5319b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x30a980, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAPI32.DLL", cAlternateFileName="")) returned 1 [0166.089] wcscmp (_String1="OLMAPI32.DLL", _String2=".") returned 1 [0166.089] wcscmp (_String1="OLMAPI32.DLL", _String2="..") returned 1 [0166.089] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91d3b00, ftCreationTime.dwHighDateTime=0x1c9e609, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc91d3b00, ftLastWriteTime.dwHighDateTime=0x1c9e609, nFileSizeHigh=0x0, nFileSizeLow=0x172bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMML2MML.XSL", cAlternateFileName="")) returned 1 [0166.089] wcscmp (_String1="OMML2MML.XSL", _String2=".") returned 1 [0166.089] wcscmp (_String1="OMML2MML.XSL", _String2="..") returned 1 [0166.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68ba0 [0166.089] wcscpy (in: _Dest=0x3e68ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.089] wcscat (in: _Dest=0x3e68ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.089] wcscat (in: _Dest=0x3e68ba0, _Source="OMML2MML.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" [0166.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26dc [0166.091] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf8fc300, ftCreationTime.dwHighDateTime=0x1cab90b, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf8fc300, ftLastWriteTime.dwHighDateTime=0x1cab90b, nFileSizeHigh=0x0, nFileSizeLow=0xb0d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMAIN.DLL", cAlternateFileName="")) returned 1 [0166.091] wcscmp (_String1="OMSMAIN.DLL", _String2=".") returned 1 [0166.091] wcscmp (_String1="OMSMAIN.DLL", _String2="..") returned 1 [0166.091] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf8fc300, ftCreationTime.dwHighDateTime=0x1cab90b, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf8fc300, ftLastWriteTime.dwHighDateTime=0x1cab90b, nFileSizeHigh=0x0, nFileSizeLow=0x39390, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSXP32.DLL", cAlternateFileName="")) returned 1 [0166.091] wcscmp (_String1="OMSXP32.DLL", _String2=".") returned 1 [0166.091] wcscmp (_String1="OMSXP32.DLL", _String2="..") returned 1 [0166.091] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x9d190, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0166.091] wcscmp (_String1="ONBttnIE.dll", _String2=".") returned 1 [0166.091] wcscmp (_String1="ONBttnIE.dll", _String2="..") returned 1 [0166.091] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x79390, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="ONBTTN~1.DLL")) returned 1 [0166.091] wcscmp (_String1="ONBttnIELinkedNotes.dll", _String2=".") returned 1 [0166.091] wcscmp (_String1="ONBttnIELinkedNotes.dll", _String2="..") returned 1 [0166.091] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e81ce00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x816b2530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e81ce00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0xaa580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnOL.dll", cAlternateFileName="")) returned 1 [0166.091] wcscmp (_String1="ONBttnOL.dll", _String2=".") returned 1 [0166.091] wcscmp (_String1="ONBttnOL.dll", _String2="..") returned 1 [0166.091] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x816b2530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x82380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnPPT.dll", cAlternateFileName="ONBTTN~2.DLL")) returned 1 [0166.091] wcscmp (_String1="ONBttnPPT.dll", _String2=".") returned 1 [0166.091] wcscmp (_String1="ONBttnPPT.dll", _String2="..") returned 1 [0166.091] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x816b2530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x82378, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnWD.dll", cAlternateFileName="")) returned 1 [0166.091] wcscmp (_String1="ONBttnWD.dll", _String2=".") returned 1 [0166.091] wcscmp (_String1="ONBttnWD.dll", _String2="..") returned 1 [0166.091] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e57dc70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote", cAlternateFileName="")) returned 1 [0166.092] wcscmp (_String1="OneNote", _String2=".") returned 1 [0166.092] wcscmp (_String1="OneNote", _String2="..") returned 1 [0166.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33c88 [0166.092] wcscpy (in: _Dest=0x3f33c88, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.092] wcscat (in: _Dest=0x3f33c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.092] wcscat (in: _Dest=0x3f33c88, _Source="OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0166.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e8 [0166.093] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eb3900, ftCreationTime.dwHighDateTime=0x1cacff3, ftLastAccessTime.dwLowDateTime=0x816d8690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7eb3900, ftLastWriteTime.dwHighDateTime=0x1cacff3, nFileSizeHigh=0x0, nFileSizeLow=0x199360, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1 [0166.093] wcscmp (_String1="ONENOTE.EXE", _String2=".") returned 1 [0166.093] wcscmp (_String1="ONENOTE.EXE", _String2="..") returned 1 [0166.093] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b55b00, ftCreationTime.dwHighDateTime=0x1ca1b71, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73b55b00, ftLastWriteTime.dwHighDateTime=0x1ca1b71, nFileSizeHigh=0x0, nFileSizeLow=0x138f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEIRM.XML", cAlternateFileName="ONENOT~1.XML")) returned 1 [0166.093] wcscmp (_String1="ONENOTEIRM.XML", _String2=".") returned 1 [0166.093] wcscmp (_String1="ONENOTEIRM.XML", _String2="..") returned 1 [0166.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4488 [0166.093] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.093] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.094] wcscat (in: _Dest=0x3dc4488, _Source="ONENOTEIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" [0166.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26d8 [0166.095] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x37980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEM.EXE", cAlternateFileName="")) returned 1 [0166.095] wcscmp (_String1="ONENOTEM.EXE", _String2=".") returned 1 [0166.095] wcscmp (_String1="ONENOTEM.EXE", _String2="..") returned 1 [0166.095] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x22370, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEMANAGED.DLL", cAlternateFileName="ONENOT~2.DLL")) returned 1 [0166.095] wcscmp (_String1="ONENOTEMANAGED.DLL", _String2=".") returned 1 [0166.095] wcscmp (_String1="ONENOTEMANAGED.DLL", _String2="..") returned 1 [0166.096] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x412f2f00, ftCreationTime.dwHighDateTime=0x1cab831, ftLastAccessTime.dwLowDateTime=0x81a1e4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x412f2f00, ftLastWriteTime.dwHighDateTime=0x1cab831, nFileSizeHigh=0x0, nFileSizeLow=0xe0bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPC.dll", cAlternateFileName="ONENOT~1.DLL")) returned 1 [0166.096] wcscmp (_String1="OneNoteSyncPC.dll", _String2=".") returned 1 [0166.096] wcscmp (_String1="OneNoteSyncPC.dll", _String2="..") returned 1 [0166.096] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eb3900, ftCreationTime.dwHighDateTime=0x1cacff3, ftLastAccessTime.dwLowDateTime=0x8174aab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7eb3900, ftLastWriteTime.dwHighDateTime=0x1cacff3, nFileSizeHigh=0x0, nFileSizeLow=0x11f970, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONFILTER.DLL", cAlternateFileName="")) returned 1 [0166.096] wcscmp (_String1="ONFILTER.DLL", _String2=".") returned 1 [0166.096] wcscmp (_String1="ONFILTER.DLL", _String2="..") returned 1 [0166.096] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8174aab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xf9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="ONLNTC~1.DLL")) returned 1 [0166.096] wcscmp (_String1="ONLNTCOMLIB.DLL", _String2=".") returned 1 [0166.096] wcscmp (_String1="ONLNTCOMLIB.DLL", _String2="..") returned 1 [0166.096] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eb3900, ftCreationTime.dwHighDateTime=0x1cacff3, ftLastAccessTime.dwLowDateTime=0x8187b5b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7eb3900, ftLastWriteTime.dwHighDateTime=0x1cacff3, nFileSizeHigh=0x0, nFileSizeLow=0x8c1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONMAIN.DLL", cAlternateFileName="")) returned 1 [0166.096] wcscmp (_String1="ONMAIN.DLL", _String2=".") returned 1 [0166.096] wcscmp (_String1="ONMAIN.DLL", _String2="..") returned 1 [0166.096] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x88d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONPPTAddin.dll", cAlternateFileName="ONPPTA~1.DLL")) returned 1 [0166.096] wcscmp (_String1="ONPPTAddin.dll", _String2=".") returned 1 [0166.096] wcscmp (_String1="ONPPTAddin.dll", _String2="..") returned 1 [0166.096] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x96578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONWordAddin.dll", cAlternateFileName="ONWORD~1.DLL")) returned 1 [0166.096] wcscmp (_String1="ONWordAddin.dll", _String2=".") returned 1 [0166.096] wcscmp (_String1="ONWordAddin.dll", _String2="..") returned 1 [0166.096] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d2e570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x123188, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.DLL", cAlternateFileName="")) returned 1 [0166.096] wcscmp (_String1="ORGCHART.DLL", _String2=".") returned 1 [0166.096] wcscmp (_String1="ORGCHART.DLL", _String2="..") returned 1 [0166.096] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d546d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x70188, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHWIZ.DLL", cAlternateFileName="")) returned 1 [0166.096] wcscmp (_String1="ORGCHWIZ.DLL", _String2=".") returned 1 [0166.096] wcscmp (_String1="ORGCHWIZ.DLL", _String2="..") returned 1 [0166.097] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92af850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x13190, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.EXE", cAlternateFileName="")) returned 1 [0166.097] wcscmp (_String1="ORGWIZ.EXE", _String2=".") returned 1 [0166.097] wcscmp (_String1="ORGWIZ.EXE", _String2="..") returned 1 [0166.097] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92af850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x4fd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORMELEMS.DLL", cAlternateFileName="")) returned 1 [0166.097] wcscmp (_String1="ORMELEMS.DLL", _String2=".") returned 1 [0166.097] wcscmp (_String1="ORMELEMS.DLL", _String2="..") returned 1 [0166.097] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbeea9050, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xdf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORMMODEL.MDL", cAlternateFileName="")) returned 1 [0166.097] wcscmp (_String1="ORMMODEL.MDL", _String2=".") returned 1 [0166.097] wcscmp (_String1="ORMMODEL.MDL", _String2="..") returned 1 [0166.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67d18 [0166.097] wcscpy (in: _Dest=0x3e67d18, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.097] wcscat (in: _Dest=0x3e67d18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.097] wcscat (in: _Dest=0x3e67d18, _Source="ORMMODEL.MDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" [0166.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26d4 [0166.099] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2277df00, ftCreationTime.dwHighDateTime=0x1cabcee, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2277df00, ftLastWriteTime.dwHighDateTime=0x1cabcee, nFileSizeHigh=0x0, nFileSizeLow=0x3d05, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0166.099] wcscmp (_String1="OSPP.HTM", _String2=".") returned 1 [0166.099] wcscmp (_String1="OSPP.HTM", _String2="..") returned 1 [0166.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f337b8 [0166.099] wcscpy (in: _Dest=0x3f337b8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.099] wcscat (in: _Dest=0x3f337b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.099] wcscat (in: _Dest=0x3f337b8, _Source="OSPP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM") returned="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" [0166.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f337b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e0 [0166.101] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2277df00, ftCreationTime.dwHighDateTime=0x1cabcee, ftLastAccessTime.dwLowDateTime=0x81ab6a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2277df00, ftLastWriteTime.dwHighDateTime=0x1cabcee, nFileSizeHigh=0x0, nFileSizeLow=0xc119, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0166.101] wcscmp (_String1="OSPP.VBS", _String2=".") returned 1 [0166.101] wcscmp (_String1="OSPP.VBS", _String2="..") returned 1 [0166.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f334a8 [0166.101] wcscpy (in: _Dest=0x3f334a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.101] wcscat (in: _Dest=0x3f334a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.101] wcscat (in: _Dest=0x3f334a8, _Source="OSPP.VBS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS") returned="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" [0166.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f334a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26d0 [0166.102] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x7760, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLACCT.DLL", cAlternateFileName="")) returned 1 [0166.102] wcscmp (_String1="OUTLACCT.DLL", _String2=".") returned 1 [0166.102] wcscmp (_String1="OUTLACCT.DLL", _String2="..") returned 1 [0166.103] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8e5c9f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x1df60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLCTL.DLL", cAlternateFileName="")) returned 1 [0166.103] wcscmp (_String1="OUTLCTL.DLL", _String2=".") returned 1 [0166.103] wcscmp (_String1="OUTLCTL.DLL", _String2="..") returned 1 [0166.103] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b48400, ftCreationTime.dwHighDateTime=0x1ca0b8d, ftLastAccessTime.dwLowDateTime=0x81d64310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x58b48400, ftLastWriteTime.dwHighDateTime=0x1ca0b8d, nFileSizeHigh=0x0, nFileSizeLow=0x380000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DAT", cAlternateFileName="")) returned 1 [0166.103] wcscmp (_String1="OUTLFLTR.DAT", _String2=".") returned 1 [0166.103] wcscmp (_String1="OUTLFLTR.DAT", _String2="..") returned 1 [0166.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e682b8 [0166.103] wcscpy (in: _Dest=0x3e682b8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.103] wcscat (in: _Dest=0x3e682b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.103] wcscat (in: _Dest=0x3e682b8, _Source="OUTLFLTR.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" [0166.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e682b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d8 [0166.104] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41fc600, ftCreationTime.dwHighDateTime=0x1ca50e7, ftLastAccessTime.dwLowDateTime=0x8e5c9f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd41fc600, ftLastWriteTime.dwHighDateTime=0x1ca50e7, nFileSizeHigh=0x0, nFileSizeLow=0xa5138, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DLL", cAlternateFileName="")) returned 1 [0166.104] wcscmp (_String1="OUTLFLTR.DLL", _String2=".") returned 1 [0166.104] wcscmp (_String1="OUTLFLTR.DLL", _String2="..") returned 1 [0166.104] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x81d8a470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x7fd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLMIME.DLL", cAlternateFileName="")) returned 1 [0166.104] wcscmp (_String1="OUTLMIME.DLL", _String2=".") returned 1 [0166.104] wcscmp (_String1="OUTLMIME.DLL", _String2="..") returned 1 [0166.105] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x8e720b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0xf27360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE", cAlternateFileName="")) returned 1 [0166.105] wcscmp (_String1="OUTLOOK.EXE", _String2=".") returned 1 [0166.105] wcscmp (_String1="OUTLOOK.EXE", _String2="..") returned 1 [0166.105] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9830ba00, ftCreationTime.dwHighDateTime=0x1caca13, ftLastAccessTime.dwLowDateTime=0x8e720b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9830ba00, ftLastWriteTime.dwHighDateTime=0x1caca13, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE.MANIFEST", cAlternateFileName="OUTLOO~1.MAN")) returned 1 [0166.105] wcscmp (_String1="OUTLOOK.EXE.MANIFEST", _String2=".") returned 1 [0166.105] wcscmp (_String1="OUTLOOK.EXE.MANIFEST", _String2="..") returned 1 [0166.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfdd8 [0166.105] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.105] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.105] wcscat (in: _Dest=0x81bfdd8, _Source="OUTLOOK.EXE.MANIFEST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST") returned="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" [0166.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26cc [0166.106] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookAutoDiscover", cAlternateFileName="OUTLOO~1")) returned 1 [0166.106] wcscmp (_String1="OutlookAutoDiscover", _String2=".") returned 1 [0166.106] wcscmp (_String1="OutlookAutoDiscover", _String2="..") returned 1 [0166.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81c0218 [0166.106] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.106] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.106] wcscat (in: _Dest=0x81c0218, _Source="OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0166.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d0 [0166.110] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x81d8a470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x50590, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1 [0166.110] wcscmp (_String1="OUTLPH.DLL", _String2=".") returned 1 [0166.110] wcscmp (_String1="OUTLPH.DLL", _String2="..") returned 1 [0166.110] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x81dfc890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0xa958, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLRPC.DLL", cAlternateFileName="")) returned 1 [0166.110] wcscmp (_String1="OUTLRPC.DLL", _String2=".") returned 1 [0166.110] wcscmp (_String1="OUTLRPC.DLL", _String2="..") returned 1 [0166.110] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8f888c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0xd970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBS.DLL", cAlternateFileName="")) returned 1 [0166.110] wcscmp (_String1="OUTLVBS.DLL", _String2=".") returned 1 [0166.110] wcscmp (_String1="OUTLVBS.DLL", _String2="..") returned 1 [0166.110] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ccc500, ftCreationTime.dwHighDateTime=0x1cb7078, ftLastAccessTime.dwLowDateTime=0xf733a850, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xc1ccc500, ftLastWriteTime.dwHighDateTime=0x1cb7078, nFileSizeHigh=0x0, nFileSizeLow=0x7ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSCLT.DLL", cAlternateFileName="")) returned 1 [0166.111] wcscmp (_String1="OWSCLT.DLL", _String2=".") returned 1 [0166.111] wcscmp (_String1="OWSCLT.DLL", _String2="..") returned 1 [0166.111] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x20d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1 [0166.113] wcscmp (_String1="OWSSUPP.DLL", _String2=".") returned 1 [0166.113] wcscmp (_String1="OWSSUPP.DLL", _String2="..") returned 1 [0166.113] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ebaf70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fba8950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAGESIZE", cAlternateFileName="")) returned 1 [0166.113] wcscmp (_String1="PAGESIZE", _String2=".") returned 1 [0166.113] wcscmp (_String1="PAGESIZE", _String2="..") returned 1 [0166.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f34008 [0166.113] wcscpy (in: _Dest=0x3f34008, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.113] wcscat (in: _Dest=0x3f34008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.113] wcscat (in: _Dest=0x3f34008, _Source="PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0168.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f34008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0168.998] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92d59b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x549a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDSBASE.DLL", cAlternateFileName="")) returned 1 [0168.998] wcscmp (_String1="PDSBASE.DLL", _String2=".") returned 1 [0168.998] wcscmp (_String1="PDSBASE.DLL", _String2="..") returned 1 [0168.998] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d546d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x86170, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.DLL", cAlternateFileName="")) returned 1 [0168.998] wcscmp (_String1="PE.DLL", _String2=".") returned 1 [0168.998] wcscmp (_String1="PE.DLL", _String2="..") returned 1 [0168.998] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b22a00, ftCreationTime.dwHighDateTime=0x1cba0b6, ftLastAccessTime.dwLowDateTime=0xf53b04d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xf4b22a00, ftLastWriteTime.dwHighDateTime=0x1cba0b6, nFileSizeHigh=0x0, nFileSizeLow=0x143a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEOPLEDATAHANDLER.DLL", cAlternateFileName="PEOPLE~1.DLL")) returned 1 [0168.998] wcscmp (_String1="PEOPLEDATAHANDLER.DLL", _String2=".") returned 1 [0168.998] wcscmp (_String1="PEOPLEDATAHANDLER.DLL", _String2="..") returned 1 [0168.998] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae97b700, ftCreationTime.dwHighDateTime=0x1caba0d, ftLastAccessTime.dwLowDateTime=0xb773d550, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xae97b700, ftLastWriteTime.dwHighDateTime=0x1caba0d, nFileSizeHigh=0x0, nFileSizeLow=0x22560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJCALEND.DLL", cAlternateFileName="")) returned 1 [0168.998] wcscmp (_String1="PJCALEND.DLL", _String2=".") returned 1 [0168.998] wcscmp (_String1="PJCALEND.DLL", _String2="..") returned 1 [0168.998] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ddd200, ftCreationTime.dwHighDateTime=0x1cabf7f, ftLastAccessTime.dwLowDateTime=0x82037d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7ddd200, ftLastWriteTime.dwHighDateTime=0x1cabf7f, nFileSizeHigh=0x0, nFileSizeLow=0x20fd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.EXE", cAlternateFileName="")) returned 1 [0168.998] wcscmp (_String1="POWERPNT.EXE", _String2=".") returned 1 [0168.998] wcscmp (_String1="POWERPNT.EXE", _String2="..") returned 1 [0168.998] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1591800, ftCreationTime.dwHighDateTime=0x1cabf03, ftLastAccessTime.dwLowDateTime=0x8fcd9450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1591800, ftLastWriteTime.dwHighDateTime=0x1cabf03, nFileSizeHigh=0x0, nFileSizeLow=0xdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe.manifest", cAlternateFileName="POWERP~1.MAN")) returned 1 [0168.998] wcscmp (_String1="powerpnt.exe.manifest", _String2=".") returned 1 [0168.999] wcscmp (_String1="powerpnt.exe.manifest", _String2="..") returned 1 [0168.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de068 [0168.999] wcscpy (in: _Dest=0x81de068, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0168.999] wcscat (in: _Dest=0x81de068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0168.999] wcscat (in: _Dest=0x81de068, _Source="powerpnt.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" [0168.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050 [0169.000] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ddd200, ftCreationTime.dwHighDateTime=0x1cabf7f, ftLastAccessTime.dwLowDateTime=0x8fdbdc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7ddd200, ftLastWriteTime.dwHighDateTime=0x1cabf7f, nFileSizeHigh=0x0, nFileSizeLow=0x93f568, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPCORE.DLL", cAlternateFileName="")) returned 1 [0169.000] wcscmp (_String1="PPCORE.DLL", _String2=".") returned 1 [0169.000] wcscmp (_String1="PPCORE.DLL", _String2="..") returned 1 [0169.000] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0d9db00, ftCreationTime.dwHighDateTime=0x1cab83b, ftLastAccessTime.dwLowDateTime=0x8fdbdc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0d9db00, ftLastWriteTime.dwHighDateTime=0x1cab83b, nFileSizeHigh=0x0, nFileSizeLow=0x5ef90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1 [0169.000] wcscmp (_String1="PPSLAX.DLL", _String2=".") returned 1 [0169.000] wcscmp (_String1="PPSLAX.DLL", _String2="..") returned 1 [0169.000] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a619c00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x8205de90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a619c00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x39df60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTICO.EXE", cAlternateFileName="")) returned 1 [0169.000] wcscmp (_String1="PPTICO.EXE", _String2=".") returned 1 [0169.001] wcscmp (_String1="PPTICO.EXE", _String2="..") returned 1 [0169.001] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8205de90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTIRM.XML", cAlternateFileName="")) returned 1 [0169.001] wcscmp (_String1="PPTIRM.XML", _String2=".") returned 1 [0169.001] wcscmp (_String1="PPTIRM.XML", _String2="..") returned 1 [0169.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df9438 [0169.001] wcscpy (in: _Dest=0x3df9438, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0169.001] wcscat (in: _Dest=0x3df9438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0169.001] wcscat (in: _Dest=0x3df9438, _Source="PPTIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" [0169.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df9438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0169.007] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8fdbdc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x135b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTIRMV.XML", cAlternateFileName="")) returned 1 [0169.007] wcscmp (_String1="PPTIRMV.XML", _String2=".") returned 1 [0169.007] wcscmp (_String1="PPTIRMV.XML", _String2="..") returned 1 [0169.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df8ad8 [0169.007] wcscpy (in: _Dest=0x3df8ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0169.007] wcscat (in: _Dest=0x3df8ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0169.007] wcscat (in: _Dest=0x3df8ad8, _Source="PPTIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" [0169.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a34 [0169.008] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92d59b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x13388, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJIMPT.EXE", cAlternateFileName="")) returned 1 [0169.008] wcscmp (_String1="PROJIMPT.EXE", _String2=".") returned 1 [0169.009] wcscmp (_String1="PROJIMPT.EXE", _String2="..") returned 1 [0169.009] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73272700, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92d59b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73272700, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1c960, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJMODL.DLL", cAlternateFileName="")) returned 1 [0169.009] wcscmp (_String1="PROJMODL.DLL", _String2=".") returned 1 [0169.009] wcscmp (_String1="PROJMODL.DLL", _String2="..") returned 1 [0169.009] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b97b9f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xdf9a4690, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdf9a4690, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0169.009] wcscmp (_String1="PROOF", _String2=".") returned 1 [0169.009] wcscmp (_String1="PROOF", _String2="..") returned 1 [0169.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a348 [0169.009] wcscpy (in: _Dest=0x3f3a348, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0169.009] wcscat (in: _Dest=0x3f3a348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0169.009] wcscat (in: _Dest=0x3f3a348, _Source="PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0169.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0169.011] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92fbb10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xeb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPMGR.DLL", cAlternateFileName="")) returned 1 [0169.011] wcscmp (_String1="PROPMGR.DLL", _String2=".") returned 1 [0169.011] wcscmp (_String1="PROPMGR.DLL", _String2="..") returned 1 [0169.011] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92fbb10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xb3988, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.DLL", cAlternateFileName="")) returned 1 [0169.011] wcscmp (_String1="PROPRPT.DLL", _String2=".") returned 1 [0169.011] wcscmp (_String1="PROPRPT.DLL", _String2="..") returned 1 [0169.011] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x21f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRTF9.DLL", cAlternateFileName="")) returned 1 [0169.011] wcscmp (_String1="PRTF9.DLL", _String2=".") returned 1 [0169.011] wcscmp (_String1="PRTF9.DLL", _String2="..") returned 1 [0169.011] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x4b568, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTPRX32.DLL", cAlternateFileName="")) returned 1 [0169.011] wcscmp (_String1="PSTPRX32.DLL", _String2=".") returned 1 [0169.011] wcscmp (_String1="PSTPRX32.DLL", _String2="..") returned 1 [0169.011] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462fd00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x820f6410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5462fd00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x9e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTXT9.DLL", cAlternateFileName="")) returned 1 [0169.011] wcscmp (_String1="PTXT9.DLL", _String2=".") returned 1 [0169.011] wcscmp (_String1="PTXT9.DLL", _String2="..") returned 1 [0169.011] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80bd60d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd28f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBBA", cAlternateFileName="")) returned 1 [0169.011] wcscmp (_String1="PUBBA", _String2=".") returned 1 [0169.012] wcscmp (_String1="PUBBA", _String2="..") returned 1 [0169.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39a88 [0169.012] wcscpy (in: _Dest=0x3f39a88, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0169.012] wcscat (in: _Dest=0x3f39a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0169.012] wcscat (in: _Dest=0x3f39a88, _Source="PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0169.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0169.013] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462fd00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x824160f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5462fd00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x93778, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1 [0169.013] wcscmp (_String1="PUBCONV.DLL", _String2=".") returned 1 [0169.013] wcscmp (_String1="PUBCONV.DLL", _String2="..") returned 1 [0169.013] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x903650d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xbd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBTRAP.DLL", cAlternateFileName="")) returned 1 [0169.013] wcscmp (_String1="PUBTRAP.DLL", _String2=".") returned 1 [0169.013] wcscmp (_String1="PUBTRAP.DLL", _String2="..") returned 1 [0169.013] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924460b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWIZ", cAlternateFileName="")) returned 1 [0169.013] wcscmp (_String1="PUBWIZ", _String2=".") returned 1 [0169.013] wcscmp (_String1="PUBWIZ", _String2="..") returned 1 [0169.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39938 [0169.014] wcscpy (in: _Dest=0x3f39938, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0169.014] wcscat (in: _Dest=0x3f39938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0169.014] wcscat (in: _Dest=0x3f39938, _Source="PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0169.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0169.015] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ef99d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f1fb30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUERIES", cAlternateFileName="")) returned 1 [0169.015] wcscmp (_String1="QUERIES", _String2=".") returned 1 [0169.015] wcscmp (_String1="QUERIES", _String2="..") returned 1 [0169.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a0a8 [0169.015] wcscpy (in: _Dest=0x3f3a0a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0169.015] wcscat (in: _Dest=0x3f3a0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0169.015] wcscat (in: _Dest=0x3f3a0a8, _Source="QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0169.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0169.016] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x9d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECALL.DLL", cAlternateFileName="")) returned 1 [0169.016] wcscmp (_String1="RECALL.DLL", _String2=".") returned 1 [0169.016] wcscmp (_String1="RECALL.DLL", _String2="..") returned 1 [0169.017] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFEDIT.DLL", cAlternateFileName="")) returned 1 [0169.017] wcscmp (_String1="REFEDIT.DLL", _String2=".") returned 1 [0169.017] wcscmp (_String1="REFEDIT.DLL", _String2="..") returned 1 [0169.017] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f864b00, ftCreationTime.dwHighDateTime=0x1c5c856, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f864b00, ftLastWriteTime.dwHighDateTime=0x1c5c856, nFileSizeHigh=0x0, nFileSizeLow=0x1a900, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMINDER.WAV", cAlternateFileName="")) returned 1 [0169.017] wcscmp (_String1="REMINDER.WAV", _String2=".") returned 1 [0169.017] wcscmp (_String1="REMINDER.WAV", _String2="..") returned 1 [0169.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df88f8 [0169.017] wcscpy (in: _Dest=0x3df88f8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0169.017] wcscat (in: _Dest=0x3df88f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0169.017] wcscat (in: _Dest=0x3df88f8, _Source="REMINDER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" [0169.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df88f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0169.018] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9321c70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x29f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.DLL", cAlternateFileName="")) returned 1 [0169.018] wcscmp (_String1="REPORT.DLL", _String2=".") returned 1 [0169.018] wcscmp (_String1="REPORT.DLL", _String2="..") returned 1 [0169.018] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x903fd650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x4f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="REVERSE.DLL", cAlternateFileName="")) returned 1 [0169.019] wcscmp (_String1="REVERSE.DLL", _String2=".") returned 1 [0169.019] wcscmp (_String1="REVERSE.DLL", _String2="..") returned 1 [0169.019] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30aa1100, ftCreationTime.dwHighDateTime=0x1c7a7cb, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30aa1100, ftLastWriteTime.dwHighDateTime=0x1c7a7cb, nFileSizeHigh=0x0, nFileSizeLow=0x353f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSWOP.ICM", cAlternateFileName="")) returned 1 [0169.019] wcscmp (_String1="RSWOP.ICM", _String2=".") returned 1 [0169.019] wcscmp (_String1="RSWOP.ICM", _String2="..") returned 1 [0169.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3df8970 [0169.019] wcscpy (in: _Dest=0x3df8970, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0169.019] wcscat (in: _Dest=0x3df8970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0169.019] wcscat (in: _Dest=0x3df8970, _Source="RSWOP.ICM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM") returned="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" [0169.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0169.024] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x65570, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTFHTML.DLL", cAlternateFileName="")) returned 1 [0169.024] wcscmp (_String1="RTFHTML.DLL", _String2=".") returned 1 [0169.024] wcscmp (_String1="RTFHTML.DLL", _String2="..") returned 1 [0169.024] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494be600, ftCreationTime.dwHighDateTime=0x1ca9181, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x494be600, ftLastWriteTime.dwHighDateTime=0x1ca9181, nFileSizeHigh=0x0, nFileSizeLow=0x46d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAEXT.DLL", cAlternateFileName="")) returned 1 [0169.024] wcscmp (_String1="SAEXT.DLL", _String2=".") returned 1 [0169.024] wcscmp (_String1="SAEXT.DLL", _String2="..") returned 1 [0169.024] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4302a4d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAMPLES", cAlternateFileName="")) returned 1 [0171.728] wcscmp (_String1="SAMPLES", _String2=".") returned 1 [0171.728] wcscmp (_String1="SAMPLES", _String2="..") returned 1 [0171.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a188 [0171.728] wcscpy (in: _Dest=0x3f3a188, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0171.728] wcscat (in: _Dest=0x3f3a188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0171.728] wcscat (in: _Dest=0x3f3a188, _Source="SAMPLES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" [0173.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2978 [0173.044] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9321c70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x67b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1 [0173.044] wcscmp (_String1="SAVASWEB.DLL", _String2=".") returned 1 [0173.044] wcscmp (_String1="SAVASWEB.DLL", _String2="..") returned 1 [0173.044] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81754300, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9347dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81754300, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1c5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBHF.DLL", cAlternateFileName="")) returned 1 [0173.044] wcscmp (_String1="SAVWBHF.DLL", _String2=".") returned 1 [0173.044] wcscmp (_String1="SAVWBHF.DLL", _String2="..") returned 1 [0173.044] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9347dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2d988, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBRAS.DLL", cAlternateFileName="")) returned 1 [0173.045] wcscmp (_String1="SAVWBRAS.DLL", _String2=".") returned 1 [0173.045] wcscmp (_String1="SAVWBRAS.DLL", _String2="..") returned 1 [0173.045] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9347dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2bf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBVML.DLL", cAlternateFileName="")) returned 1 [0173.045] wcscmp (_String1="SAVWBVML.DLL", _String2=".") returned 1 [0173.045] wcscmp (_String1="SAVWBVML.DLL", _String2="..") returned 1 [0173.045] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe936df30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x22988, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBXAML.DLL", cAlternateFileName="SAVWBX~1.DLL")) returned 1 [0173.045] wcscmp (_String1="SAVWBXAML.DLL", _String2=".") returned 1 [0173.045] wcscmp (_String1="SAVWBXAML.DLL", _String2="..") returned 1 [0173.045] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCANPST.EXE", cAlternateFileName="")) returned 1 [0173.045] wcscmp (_String1="SCANPST.EXE", _String2=".") returned 1 [0173.045] wcscmp (_String1="SCANPST.EXE", _String2="..") returned 1 [0173.045] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x507a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST32.DLL", cAlternateFileName="")) returned 1 [0173.045] wcscmp (_String1="SCNPST32.DLL", _String2=".") returned 1 [0173.045] wcscmp (_String1="SCNPST32.DLL", _String2="..") returned 1 [0173.045] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x531b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST64.DLL", cAlternateFileName="")) returned 1 [0173.045] wcscmp (_String1="SCNPST64.DLL", _String2=".") returned 1 [0173.045] wcscmp (_String1="SCNPST64.DLL", _String2="..") returned 1 [0173.045] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74536f00, ftCreationTime.dwHighDateTime=0x1c74aa6, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74536f00, ftLastWriteTime.dwHighDateTime=0x1c74aa6, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SegoeChess.ttf", cAlternateFileName="SEGOEC~1.TTF")) returned 1 [0173.045] wcscmp (_String1="SegoeChess.ttf", _String2=".") returned 1 [0173.045] wcscmp (_String1="SegoeChess.ttf", _String2="..") returned 1 [0173.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24640 [0173.045] wcscpy (in: _Dest=0x3e24640, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.045] wcscat (in: _Dest=0x3e24640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.045] wcscat (in: _Dest=0x3e24640, _Source="SegoeChess.ttf" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf") returned="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" [0173.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x297c [0173.047] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b690600, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf8c85210, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7b690600, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x7f590, dwReserved0=0x0, dwReserved1=0x0, cFileName="SELFCERT.EXE", cAlternateFileName="")) returned 1 [0173.047] wcscmp (_String1="SELFCERT.EXE", _String2=".") returned 1 [0173.047] wcscmp (_String1="SELFCERT.EXE", _String2="..") returned 1 [0173.047] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x904bbd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x5f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SENDTO.DLL", cAlternateFileName="")) returned 1 [0173.047] wcscmp (_String1="SENDTO.DLL", _String2=".") returned 1 [0173.047] wcscmp (_String1="SENDTO.DLL", _String2="..") returned 1 [0173.047] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef015400, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef015400, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x10b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEQCHK10.DLL", cAlternateFileName="")) returned 1 [0173.047] wcscmp (_String1="SEQCHK10.DLL", _String2=".") returned 1 [0173.047] wcscmp (_String1="SEQCHK10.DLL", _String2="..") returned 1 [0173.047] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3756fd00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3756fd00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x8180, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.EXE", cAlternateFileName="")) returned 1 [0173.047] wcscmp (_String1="SETLANG.EXE", _String2=".") returned 1 [0173.047] wcscmp (_String1="SETLANG.EXE", _String2="..") returned 1 [0173.047] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2fd800, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8da0990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8c2fd800, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x181968, dwReserved0=0x0, dwReserved1=0x0, cFileName="SG.DLL", cAlternateFileName="")) returned 1 [0173.047] wcscmp (_String1="SG.DLL", _String2=".") returned 1 [0173.047] wcscmp (_String1="SG.DLL", _String2="..") returned 1 [0173.047] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe936df30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x32b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.DLL", cAlternateFileName="")) returned 1 [0173.047] wcscmp (_String1="SHAPNUM.DLL", _String2=".") returned 1 [0173.047] wcscmp (_String1="SHAPNUM.DLL", _String2="..") returned 1 [0173.047] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1dc100, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff1dc100, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x31b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAREPOINTPROVIDER.DLL", cAlternateFileName="SHAREP~1.DLL")) returned 1 [0173.047] wcscmp (_String1="SHAREPOINTPROVIDER.DLL", _String2=".") returned 1 [0173.047] wcscmp (_String1="SHAREPOINTPROVIDER.DLL", _String2="..") returned 1 [0173.048] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d7eef00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6d7eef00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchPadTestSchema.xml", cAlternateFileName="SKETCH~1.XML")) returned 1 [0173.048] wcscmp (_String1="SketchPadTestSchema.xml", _String2=".") returned 1 [0173.048] wcscmp (_String1="SketchPadTestSchema.xml", _String2="..") returned 1 [0173.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dede8 [0173.048] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.048] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.048] wcscat (in: _Dest=0x81dede8, _Source="SketchPadTestSchema.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" [0173.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2980 [0173.066] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a90c00, ftCreationTime.dwHighDateTime=0x1cabcee, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23a90c00, ftLastWriteTime.dwHighDateTime=0x1cabcee, nFileSizeHigh=0x0, nFileSizeLow=0x80fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0173.066] wcscmp (_String1="SLERROR.XML", _String2=".") returned 1 [0173.066] wcscmp (_String1="SLERROR.XML", _String2="..") returned 1 [0173.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df8b50 [0173.066] wcscpy (in: _Dest=0x3df8b50, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.067] wcscat (in: _Dest=0x3df8b50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.067] wcscat (in: _Dest=0x3df8b50, _Source="SLERROR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" [0173.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0173.068] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc9be00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0xbf2612b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccc9be00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x23170, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.DLL", cAlternateFileName="")) returned 1 [0173.069] wcscmp (_String1="SMIGRATE.DLL", _String2=".") returned 1 [0173.069] wcscmp (_String1="SMIGRATE.DLL", _String2="..") returned 1 [0173.069] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1961c900, ftCreationTime.dwHighDateTime=0x1cab90e, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1961c900, ftLastWriteTime.dwHighDateTime=0x1cab90e, nFileSizeHigh=0x0, nFileSizeLow=0x7ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOA.DLL", cAlternateFileName="")) returned 1 [0173.069] wcscmp (_String1="SOA.DLL", _String2=".") returned 1 [0173.069] wcscmp (_String1="SOA.DLL", _String2="..") returned 1 [0173.069] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1dc100, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x826776f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff1dc100, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x1a0f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTOR.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1 [0173.069] wcscmp (_String1="SOCIALCONNECTOR.DLL", _String2=".") returned 1 [0173.069] wcscmp (_String1="SOCIALCONNECTOR.DLL", _String2="..") returned 1 [0173.069] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdec9400, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdec9400, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x7ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALPROVIDER.DLL", cAlternateFileName="SOCIAL~2.DLL")) returned 1 [0173.069] wcscmp (_String1="SOCIALPROVIDER.DLL", _String2=".") returned 1 [0173.069] wcscmp (_String1="SOCIALPROVIDER.DLL", _String2="..") returned 1 [0173.069] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9394090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x32b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLUTILS.DLL", cAlternateFileName="")) returned 1 [0173.069] wcscmp (_String1="SOLUTILS.DLL", _String2=".") returned 1 [0173.069] wcscmp (_String1="SOLUTILS.DLL", _String2="..") returned 1 [0173.069] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66535f00, ftCreationTime.dwHighDateTime=0x1c3e3ed, ftLastAccessTime.dwLowDateTime=0x4bc03150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66535f00, ftLastWriteTime.dwHighDateTime=0x1c3e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x597e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPANISH.LNG", cAlternateFileName="")) returned 1 [0173.069] wcscmp (_String1="SPANISH.LNG", _String2=".") returned 1 [0173.069] wcscmp (_String1="SPANISH.LNG", _String2="..") returned 1 [0173.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df8970 [0173.069] wcscpy (in: _Dest=0x3df8970, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.069] wcscat (in: _Dest=0x3df8970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.069] wcscat (in: _Dest=0x3df8970, _Source="SPANISH.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" [0173.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a8 [0173.071] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dc200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c4dc200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x173e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0173.071] wcscmp (_String1="SplashScreen.bmp", _String2=".") returned 1 [0173.071] wcscmp (_String1="SplashScreen.bmp", _String2="..") returned 1 [0173.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e249c0 [0173.071] wcscpy (in: _Dest=0x3e249c0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.071] wcscat (in: _Dest=0x3e249c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.071] wcscat (in: _Dest=0x3e249c0, _Source="SplashScreen.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" [0173.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e249c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ac [0173.072] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9394090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2fda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLSHARE.DLL", cAlternateFileName="")) returned 1 [0173.072] wcscmp (_String1="SQLSHARE.DLL", _String2=".") returned 1 [0173.072] wcscmp (_String1="SQLSHARE.DLL", _String2="..") returned 1 [0173.072] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455f7900, ftCreationTime.dwHighDateTime=0x1ca50e8, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x455f7900, ftLastWriteTime.dwHighDateTime=0x1ca50e8, nFileSizeHigh=0x0, nFileSizeLow=0x29540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSGEN.DLL", cAlternateFileName="")) returned 1 [0173.072] wcscmp (_String1="SSGEN.DLL", _String2=".") returned 1 [0173.072] wcscmp (_String1="SSGEN.DLL", _String2="..") returned 1 [0173.072] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0173.072] wcscmp (_String1="STARTUP", _String2=".") returned 1 [0173.073] wcscmp (_String1="STARTUP", _String2="..") returned 1 [0173.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39858 [0173.073] wcscpy (in: _Dest=0x3f39858, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.073] wcscat (in: _Dest=0x3f39858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.073] wcscat (in: _Dest=0x3f39858, _Source="STARTUP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" [0173.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0173.074] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x16f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSCOPY.DLL", cAlternateFileName="")) returned 1 [0173.074] wcscmp (_String1="STSCOPY.DLL", _String2=".") returned 1 [0173.074] wcscmp (_String1="STSCOPY.DLL", _String2="..") returned 1 [0173.074] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102eaf00, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xf5364210, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x102eaf00, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3998, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1 [0173.074] wcscmp (_String1="STSLIST.DLL", _String2=".") returned 1 [0173.074] wcscmp (_String1="STSLIST.DLL", _String2="..") returned 1 [0173.074] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69941a00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69941a00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.DLL", cAlternateFileName="")) returned 1 [0173.074] wcscmp (_String1="STSUPLD.DLL", _String2=".") returned 1 [0173.074] wcscmp (_String1="STSUPLD.DLL", _String2="..") returned 1 [0173.074] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9394090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x18b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="STYLEMGR.DLL", cAlternateFileName="")) returned 1 [0173.074] wcscmp (_String1="STYLEMGR.DLL", _String2=".") returned 1 [0173.075] wcscmp (_String1="STYLEMGR.DLL", _String2="..") returned 1 [0173.075] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9dc8600, ftCreationTime.dwHighDateTime=0x1cac256, ftLastAccessTime.dwLowDateTime=0x7f10e950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9dc8600, ftLastWriteTime.dwHighDateTime=0x1cac256, nFileSizeHigh=0x0, nFileSizeLow=0x15f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="subscription.xsd", cAlternateFileName="SUBSCR~1.XSD")) returned 1 [0173.077] wcscmp (_String1="subscription.xsd", _String2=".") returned 1 [0173.077] wcscmp (_String1="subscription.xsd", _String2="..") returned 1 [0173.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e23e40 [0173.077] wcscpy (in: _Dest=0x3e23e40, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.077] wcscat (in: _Dest=0x3e23e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.077] wcscat (in: _Dest=0x3e23e40, _Source="subscription.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" [0179.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0179.810] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe93ba1f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xc798, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMINFO.DLL", cAlternateFileName="")) returned 1 [0179.811] wcscmp (_String1="SUMINFO.DLL", _String2=".") returned 1 [0179.811] wcscmp (_String1="SUMINFO.DLL", _String2="..") returned 1 [0179.811] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5786bc00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5786bc00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x17d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaxonomyControl.dll", cAlternateFileName="TAXONO~1.DLL")) returned 1 [0179.811] wcscmp (_String1="TaxonomyControl.dll", _String2=".") returned 1 [0179.811] wcscmp (_String1="TaxonomyControl.dll", _String2="..") returned 1 [0179.811] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77322a00, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77322a00, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="THOCR.PSP", cAlternateFileName="")) returned 1 [0179.811] wcscmp (_String1="THOCR.PSP", _String2=".") returned 1 [0179.811] wcscmp (_String1="THOCR.PSP", _String2="..") returned 1 [0179.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b5c8 [0179.811] wcscpy (in: _Dest=0x3f0b5c8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.811] wcscat (in: _Dest=0x3f0b5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.811] wcscat (in: _Dest=0x3f0b5c8, _Source="THOCR.PSP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP") returned="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" [0179.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0179.813] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3aed00, ftCreationTime.dwHighDateTime=0x1cb7065, ftLastAccessTime.dwLowDateTime=0xfaf7b530, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6c3aed00, ftLastWriteTime.dwHighDateTime=0x1cb7065, nFileSizeHigh=0x0, nFileSizeLow=0x7358, dwReserved0=0x0, dwReserved1=0x0, cFileName="THOCRAPI.DLL", cAlternateFileName="")) returned 1 [0179.813] wcscmp (_String1="THOCRAPI.DLL", _String2=".") returned 1 [0179.813] wcscmp (_String1="THOCRAPI.DLL", _String2="..") returned 1 [0179.813] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8dc6af0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xe9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.DLL", cAlternateFileName="")) returned 1 [0179.813] wcscmp (_String1="TIMESOLN.DLL", _String2=".") returned 1 [0179.813] wcscmp (_String1="TIMESOLN.DLL", _String2="..") returned 1 [0179.813] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe93ba1f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLIMPT.EXE", cAlternateFileName="")) returned 1 [0179.813] wcscmp (_String1="TLIMPT.EXE", _String2=".") returned 1 [0179.813] wcscmp (_String1="TLIMPT.EXE", _String2="..") returned 1 [0179.813] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3aed00, ftCreationTime.dwHighDateTime=0x1cb7065, ftLastAccessTime.dwLowDateTime=0xfb085ed0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6c3aed00, ftLastWriteTime.dwHighDateTime=0x1cb7065, nFileSizeHigh=0x0, nFileSizeLow=0x20b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWCUTCHR.DLL", cAlternateFileName="")) returned 1 [0179.813] wcscmp (_String1="TWCUTCHR.DLL", _String2=".") returned 1 [0179.813] wcscmp (_String1="TWCUTCHR.DLL", _String2="..") returned 1 [0179.813] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x16380, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWCUTLIN.DLL", cAlternateFileName="")) returned 1 [0179.813] wcscmp (_String1="TWCUTLIN.DLL", _String2=".") returned 1 [0179.813] wcscmp (_String1="TWCUTLIN.DLL", _String2="..") returned 1 [0179.813] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0xe978, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWLAY32.DLL", cAlternateFileName="")) returned 1 [0179.814] wcscmp (_String1="TWLAY32.DLL", _String2=".") returned 1 [0179.814] wcscmp (_String1="TWLAY32.DLL", _String2="..") returned 1 [0179.814] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWORIENT.DLL", cAlternateFileName="")) returned 1 [0179.814] wcscmp (_String1="TWORIENT.DLL", _String2=".") returned 1 [0179.814] wcscmp (_String1="TWORIENT.DLL", _String2="..") returned 1 [0179.814] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x8780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECC.DLL", cAlternateFileName="")) returned 1 [0179.814] wcscmp (_String1="TWRECC.DLL", _String2=".") returned 1 [0179.814] wcscmp (_String1="TWRECC.DLL", _String2="..") returned 1 [0179.814] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0xd180, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECE.DLL", cAlternateFileName="")) returned 1 [0179.814] wcscmp (_String1="TWRECE.DLL", _String2=".") returned 1 [0179.814] wcscmp (_String1="TWRECE.DLL", _String2="..") returned 1 [0179.814] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECS.DLL", cAlternateFileName="")) returned 1 [0179.814] wcscmp (_String1="TWRECS.DLL", _String2=".") returned 1 [0179.814] wcscmp (_String1="TWRECS.DLL", _String2="..") returned 1 [0179.814] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x13b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWSTRUCT.DLL", cAlternateFileName="")) returned 1 [0179.814] wcscmp (_String1="TWSTRUCT.DLL", _String2=".") returned 1 [0179.814] wcscmp (_String1="TWSTRUCT.DLL", _String2="..") returned 1 [0179.814] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8decc50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x193f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.DLL", cAlternateFileName="")) returned 1 [0179.814] wcscmp (_String1="UML.DLL", _String2=".") returned 1 [0179.814] wcscmp (_String1="UML.DLL", _String2="..") returned 1 [0179.814] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfbc0950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x78f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSYS.DLL", cAlternateFileName="")) returned 1 [0179.815] wcscmp (_String1="UMLSYS.DLL", _String2=".") returned 1 [0179.815] wcscmp (_String1="UMLSYS.DLL", _String2="..") returned 1 [0179.815] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd0d100, ftCreationTime.dwHighDateTime=0x1cb7188, ftLastAccessTime.dwLowDateTime=0xe93e0350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cd0d100, ftLastWriteTime.dwHighDateTime=0x1cb7188, nFileSizeHigh=0x0, nFileSizeLow=0x22568, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVB.DLL", cAlternateFileName="")) returned 1 [0179.815] wcscmp (_String1="UMLVB.DLL", _String2=".") returned 1 [0179.815] wcscmp (_String1="UMLVB.DLL", _String2="..") returned 1 [0179.815] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xbfccb2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x22768, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60.DLL", cAlternateFileName="")) returned 1 [0179.815] wcscmp (_String1="UMLVC60.DLL", _String2=".") returned 1 [0179.815] wcscmp (_String1="UMLVC60.DLL", _String2="..") returned 1 [0179.815] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd0d100, ftCreationTime.dwHighDateTime=0x1cb7188, ftLastAccessTime.dwLowDateTime=0xe93e0350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cd0d100, ftLastWriteTime.dwHighDateTime=0x1cb7188, nFileSizeHigh=0x0, nFileSizeLow=0x3c378, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVS.DLL", cAlternateFileName="")) returned 1 [0179.815] wcscmp (_String1="UMLVS.DLL", _String2=".") returned 1 [0179.815] wcscmp (_String1="UMLVS.DLL", _String2="..") returned 1 [0179.815] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e40500, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf8c5f0b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xe7e40500, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x89190, dwReserved0=0x0, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0179.815] wcscmp (_String1="URLREDIR.DLL", _String2=".") returned 1 [0179.815] wcscmp (_String1="URLREDIR.DLL", _String2="..") returned 1 [0179.815] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe93e0350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x17b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VAOSOLX.DLL", cAlternateFileName="")) returned 1 [0179.815] wcscmp (_String1="VAOSOLX.DLL", _String2=".") returned 1 [0179.815] wcscmp (_String1="VAOSOLX.DLL", _String2="..") returned 1 [0179.815] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x1b5d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0007.TLL", cAlternateFileName="")) returned 1 [0179.815] wcscmp (_String1="VBLZ0007.TLL", _String2=".") returned 1 [0179.815] wcscmp (_String1="VBLZ0007.TLL", _String2="..") returned 1 [0179.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bdc0 [0179.816] wcscpy (in: _Dest=0x3f0bdc0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.816] wcscat (in: _Dest=0x3f0bdc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.816] wcscat (in: _Dest=0x3f0bdc0, _Source="VBLZ0007.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" [0179.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0bdc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0179.818] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x18fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0009.TLL", cAlternateFileName="")) returned 1 [0179.818] wcscmp (_String1="VBLZ0009.TLL", _String2=".") returned 1 [0179.818] wcscmp (_String1="VBLZ0009.TLL", _String2="..") returned 1 [0179.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c018 [0179.818] wcscpy (in: _Dest=0x3f0c018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.818] wcscat (in: _Dest=0x3f0c018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.818] wcscat (in: _Dest=0x3f0c018, _Source="VBLZ0009.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" [0179.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0179.820] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x203d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ000C.TLL", cAlternateFileName="")) returned 1 [0179.820] wcscmp (_String1="VBLZ000C.TLL", _String2=".") returned 1 [0179.820] wcscmp (_String1="VBLZ000C.TLL", _String2="..") returned 1 [0179.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bbe0 [0179.820] wcscpy (in: _Dest=0x3f0bbe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.820] wcscat (in: _Dest=0x3f0bbe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.820] wcscat (in: _Dest=0x3f0bbe0, _Source="VBLZ000C.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" [0179.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0bbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0179.822] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x17be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0011.TLL", cAlternateFileName="")) returned 1 [0179.822] wcscmp (_String1="VBLZ0011.TLL", _String2=".") returned 1 [0179.822] wcscmp (_String1="VBLZ0011.TLL", _String2="..") returned 1 [0179.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0179.822] wcscpy (in: _Dest=0x3f0b7a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.822] wcscat (in: _Dest=0x3f0b7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.822] wcscat (in: _Dest=0x3f0b7a8, _Source="VBLZ0011.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" [0179.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0179.824] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3623e600, ftCreationTime.dwHighDateTime=0x1c444dd, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3623e600, ftLastWriteTime.dwHighDateTime=0x1c444dd, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2EXCL.XSL", cAlternateFileName="")) returned 1 [0179.824] wcscmp (_String1="VBS2EXCL.XSL", _String2=".") returned 1 [0179.824] wcscmp (_String1="VBS2EXCL.XSL", _String2="..") returned 1 [0179.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0179.824] wcscpy (in: _Dest=0x3f0b988, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.824] wcscat (in: _Dest=0x3f0b988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.824] wcscat (in: _Dest=0x3f0b988, _Source="VBS2EXCL.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" [0179.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0179.826] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3623e600, ftCreationTime.dwHighDateTime=0x1c444dd, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3623e600, ftLastWriteTime.dwHighDateTime=0x1c444dd, nFileSizeHigh=0x0, nFileSizeLow=0x189d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2WORD.XSL", cAlternateFileName="")) returned 1 [0179.826] wcscmp (_String1="VBS2WORD.XSL", _String2=".") returned 1 [0179.826] wcscmp (_String1="VBS2WORD.XSL", _String2="..") returned 1 [0179.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b4d8 [0179.826] wcscpy (in: _Dest=0x3f0b4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.826] wcscat (in: _Dest=0x3f0b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.826] wcscat (in: _Dest=0x3f0b4d8, _Source="VBS2WORD.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" [0179.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0179.827] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a67000, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe94064b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x82a67000, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1d980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VERBWIND.DLL", cAlternateFileName="")) returned 1 [0179.827] wcscmp (_String1="VERBWIND.DLL", _String2=".") returned 1 [0179.827] wcscmp (_String1="VERBWIND.DLL", _String2="..") returned 1 [0179.827] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe94064b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x17558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWMODL.DLL", cAlternateFileName="")) returned 1 [0179.828] wcscmp (_String1="VIEWMODL.DLL", _String2=".") returned 1 [0179.828] wcscmp (_String1="VIEWMODL.DLL", _String2="..") returned 1 [0179.828] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c7c500, ftCreationTime.dwHighDateTime=0x1cbb8ec, ftLastAccessTime.dwLowDateTime=0xe8ed1490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87c7c500, ftLastWriteTime.dwHighDateTime=0x1cbb8ec, nFileSizeHigh=0x0, nFileSizeLow=0x992d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRGR.DLL", cAlternateFileName="")) returned 1 [0179.828] wcscmp (_String1="VISBRGR.DLL", _String2=".") returned 1 [0179.828] wcscmp (_String1="VISBRGR.DLL", _String2="..") returned 1 [0179.828] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a524a00, ftCreationTime.dwHighDateTime=0x1cb722b, ftLastAccessTime.dwLowDateTime=0xe8ed1490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a524a00, ftLastWriteTime.dwHighDateTime=0x1cb722b, nFileSizeHigh=0x0, nFileSizeLow=0x36970, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.DLL", cAlternateFileName="")) returned 1 [0179.828] wcscmp (_String1="VISCOLOR.DLL", _String2=".") returned 1 [0179.828] wcscmp (_String1="VISCOLOR.DLL", _String2="..") returned 1 [0179.828] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49671f00, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xe8ef75f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49671f00, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x21f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISDLGU.DLL", cAlternateFileName="")) returned 1 [0179.828] wcscmp (_String1="VISDLGU.DLL", _String2=".") returned 1 [0179.828] wcscmp (_String1="VISDLGU.DLL", _String2="..") returned 1 [0179.828] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4a3000, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xe8ef75f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c4a3000, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x88f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISGRF.DLL", cAlternateFileName="")) returned 1 [0179.828] wcscmp (_String1="VISGRF.DLL", _String2=".") returned 1 [0179.828] wcscmp (_String1="VISGRF.DLL", _String2="..") returned 1 [0179.828] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dde200, ftCreationTime.dwHighDateTime=0x1cb706c, ftLastAccessTime.dwLowDateTime=0xe8f1d750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77dde200, ftLastWriteTime.dwHighDateTime=0x1cb706c, nFileSizeHigh=0x0, nFileSizeLow=0x11bd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISICON.EXE", cAlternateFileName="")) returned 1 [0179.828] wcscmp (_String1="VISICON.EXE", _String2=".") returned 1 [0179.828] wcscmp (_String1="VISICON.EXE", _String2="..") returned 1 [0179.828] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa4492e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4492e50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Content", cAlternateFileName="VISIOC~1")) returned 1 [0179.828] wcscmp (_String1="Visio Content", _String2=".") returned 1 [0179.828] wcscmp (_String1="Visio Content", _String2="..") returned 1 [0179.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831aed8 [0179.829] wcscpy (in: _Dest=0x831aed8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.829] wcscat (in: _Dest=0x831aed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.829] wcscat (in: _Dest=0x831aed8, _Source="Visio Content" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" [0179.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831aed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0179.830] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e778600, ftCreationTime.dwHighDateTime=0x1cbd92c, ftLastAccessTime.dwLowDateTime=0xe8f438b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e778600, ftLastWriteTime.dwHighDateTime=0x1cbd92c, nFileSizeHigh=0x0, nFileSizeLow=0x169f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1 [0179.830] wcscmp (_String1="VISIO.EXE", _String2=".") returned 1 [0179.830] wcscmp (_String1="VISIO.EXE", _String2="..") returned 1 [0179.830] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5180100, ftCreationTime.dwHighDateTime=0x1cac24d, ftLastAccessTime.dwLowDateTime=0xbffeafd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5180100, ftLastWriteTime.dwHighDateTime=0x1cac24d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.exe.manifest", cAlternateFileName="VISIOE~1.MAN")) returned 1 [0179.830] wcscmp (_String1="visio.exe.manifest", _String2=".") returned 1 [0179.830] wcscmp (_String1="visio.exe.manifest", _String2="..") returned 1 [0179.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2ff40 [0179.831] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.831] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.831] wcscat (in: _Dest=0x3f2ff40, _Source="visio.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" [0179.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c [0179.832] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478e4300, ftCreationTime.dwHighDateTime=0x1c9abac, ftLastAccessTime.dwLowDateTime=0xbffeafd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x478e4300, ftLastWriteTime.dwHighDateTime=0x1c9abac, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioCustom.propdesc", cAlternateFileName="VISIOC~1.PRO")) returned 1 [0179.832] wcscmp (_String1="VisioCustom.propdesc", _String2=".") returned 1 [0179.833] wcscmp (_String1="VisioCustom.propdesc", _String2="..") returned 1 [0179.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f9f0 [0179.833] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.833] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.833] wcscat (in: _Dest=0x3f2f9f0, _Source="VisioCustom.propdesc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc") returned="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" [0179.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0179.834] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e778600, ftCreationTime.dwHighDateTime=0x1cbd92c, ftLastAccessTime.dwLowDateTime=0xe904e250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e778600, ftLastWriteTime.dwHighDateTime=0x1cbd92c, nFileSizeHigh=0x0, nFileSizeLow=0xcfb368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISLIB.DLL", cAlternateFileName="")) returned 1 [0179.834] wcscmp (_String1="VISLIB.DLL", _String2=".") returned 1 [0179.834] wcscmp (_String1="VISLIB.DLL", _String2="..") returned 1 [0179.834] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ba8200, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0xc0226470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x74ba8200, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0x62b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISOCX.DLL", cAlternateFileName="")) returned 1 [0179.834] wcscmp (_String1="VISOCX.DLL", _String2=".") returned 1 [0179.835] wcscmp (_String1="VISOCX.DLL", _String2="..") returned 1 [0179.835] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ba8200, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0x8520e9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74ba8200, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0xdbd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISSHE.DLL", cAlternateFileName="")) returned 1 [0179.835] wcscmp (_String1="VISSHE.DLL", _String2=".") returned 1 [0179.835] wcscmp (_String1="VISSHE.DLL", _String2="..") returned 1 [0179.835] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90743b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x83b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISSUPP.DLL", cAlternateFileName="")) returned 1 [0179.835] wcscmp (_String1="VISSUPP.DLL", _String2=".") returned 1 [0179.835] wcscmp (_String1="VISSUPP.DLL", _String2="..") returned 1 [0179.835] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90743b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x6db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.DLL", cAlternateFileName="")) returned 1 [0179.835] wcscmp (_String1="VISUTILS.DLL", _String2=".") returned 1 [0179.835] wcscmp (_String1="VISUTILS.DLL", _String2="..") returned 1 [0179.835] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81754300, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe909a510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81754300, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xaab88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.DLL", cAlternateFileName="")) returned 1 [0179.835] wcscmp (_String1="VISWEB.DLL", _String2=".") returned 1 [0179.835] wcscmp (_String1="VISWEB.DLL", _String2="..") returned 1 [0179.835] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xc0272730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x14180, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISXDATA.DLL", cAlternateFileName="")) returned 1 [0179.835] wcscmp (_String1="VISXDATA.DLL", _String2=".") returned 1 [0179.835] wcscmp (_String1="VISXDATA.DLL", _String2="..") returned 1 [0179.835] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x9227d030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x8d980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPREVIEW.EXE", cAlternateFileName="")) returned 1 [0179.835] wcscmp (_String1="VPREVIEW.EXE", _String2=".") returned 1 [0179.835] wcscmp (_String1="VPREVIEW.EXE", _String2="..") returned 1 [0179.835] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x582978, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1 [0179.835] wcscmp (_String1="VVIEWDWG.DLL", _String2=".") returned 1 [0179.835] wcscmp (_String1="VVIEWDWG.DLL", _String2="..") returned 1 [0179.835] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad7e00, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbbad7e00, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x3fc368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1 [0179.836] wcscmp (_String1="VVIEWER.DLL", _String2=".") returned 1 [0179.836] wcscmp (_String1="VVIEWER.DLL", _String2="..") returned 1 [0179.836] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952ee00, ftCreationTime.dwHighDateTime=0x1cbe026, ftLastAccessTime.dwLowDateTime=0xfadb24b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x952ee00, ftLastWriteTime.dwHighDateTime=0x1cbe026, nFileSizeHigh=0x0, nFileSizeLow=0xd3b960, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE", cAlternateFileName="")) returned 1 [0179.836] wcscmp (_String1="WINPROJ.EXE", _String2=".") returned 1 [0179.836] wcscmp (_String1="WINPROJ.EXE", _String2="..") returned 1 [0179.836] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7665000, ftCreationTime.dwHighDateTime=0x1caba0c, ftLastAccessTime.dwLowDateTime=0xb809cbf0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7665000, ftLastWriteTime.dwHighDateTime=0x1caba0c, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="winproj.exe.manifest", cAlternateFileName="WINPRO~1.MAN")) returned 1 [0179.836] wcscmp (_String1="winproj.exe.manifest", _String2=".") returned 1 [0179.836] wcscmp (_String1="winproj.exe.manifest", _String2="..") returned 1 [0179.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30380 [0179.836] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.836] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.836] wcscat (in: _Dest=0x3f30380, _Source="winproj.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" [0179.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0179.838] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d1200, ftCreationTime.dwHighDateTime=0x1cacd99, ftLastAccessTime.dwLowDateTime=0x8533f4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6d1200, ftLastWriteTime.dwHighDateTime=0x1cacd99, nFileSizeHigh=0x0, nFileSizeLow=0x15b358, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.EXE", cAlternateFileName="")) returned 1 [0179.838] wcscmp (_String1="WINWORD.EXE", _String2=".") returned 1 [0179.838] wcscmp (_String1="WINWORD.EXE", _String2="..") returned 1 [0179.838] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce1b00, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0ce1b00, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x535158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordcnv.dll", cAlternateFileName="")) returned 1 [0179.838] wcscmp (_String1="Wordcnv.dll", _String2=".") returned 1 [0179.838] wcscmp (_String1="Wordcnv.dll", _String2="..") returned 1 [0179.838] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3307500, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3307500, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x5f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordcnvpxy.cnv", cAlternateFileName="WORDCN~1.CNV")) returned 1 [0179.838] wcscmp (_String1="Wordcnvpxy.cnv", _String2=".") returned 1 [0179.838] wcscmp (_String1="Wordcnvpxy.cnv", _String2="..") returned 1 [0179.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b9d8 [0179.838] wcscpy (in: _Dest=0x831b9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.838] wcscat (in: _Dest=0x831b9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.838] wcscat (in: _Dest=0x831b9d8, _Source="Wordcnvpxy.cnv" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv") returned="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" [0179.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0179.840] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3307500, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3307500, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x62f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordcnvr.dll", cAlternateFileName="")) returned 1 [0179.840] wcscmp (_String1="Wordcnvr.dll", _String2=".") returned 1 [0179.840] wcscmp (_String1="Wordcnvr.dll", _String2="..") returned 1 [0179.840] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce1b00, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0ce1b00, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x5360, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordconv.exe", cAlternateFileName="")) returned 1 [0179.840] wcscmp (_String1="Wordconv.exe", _String2=".") returned 1 [0179.840] wcscmp (_String1="Wordconv.exe", _String2="..") returned 1 [0179.840] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a619c00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x9241ff50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a619c00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDICON.EXE", cAlternateFileName="")) returned 1 [0179.840] wcscmp (_String1="WORDICON.EXE", _String2=".") returned 1 [0179.840] wcscmp (_String1="WORDICON.EXE", _String2="..") returned 1 [0179.840] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1373c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDIRM.XML", cAlternateFileName="")) returned 1 [0179.841] wcscmp (_String1="WORDIRM.XML", _String2=".") returned 1 [0179.841] wcscmp (_String1="WORDIRM.XML", _String2="..") returned 1 [0179.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0c1f8 [0179.841] wcscpy (in: _Dest=0x3f0c1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.841] wcscat (in: _Dest=0x3f0c1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.841] wcscat (in: _Dest=0x3f0c1f8, _Source="WORDIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" [0179.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0c1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0179.842] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x9241ff50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13584, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDIRMV.XML", cAlternateFileName="")) returned 1 [0179.842] wcscmp (_String1="WORDIRMV.XML", _String2=".") returned 1 [0179.842] wcscmp (_String1="WORDIRMV.XML", _String2="..") returned 1 [0179.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b898 [0179.843] wcscpy (in: _Dest=0x3f0b898, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.843] wcscat (in: _Dest=0x3f0b898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.843] wcscat (in: _Dest=0x3f0b898, _Source="WORDIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" [0179.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0179.844] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x5d178, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORKFLOW.DLL", cAlternateFileName="")) returned 1 [0179.844] wcscmp (_String1="WORKFLOW.DLL", _String2=".") returned 1 [0179.844] wcscmp (_String1="WORKFLOW.DLL", _String2="..") returned 1 [0179.844] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d1200, ftCreationTime.dwHighDateTime=0x1cacd99, ftLastAccessTime.dwLowDateTime=0x85508550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6d1200, ftLastWriteTime.dwHighDateTime=0x1cacd99, nFileSizeHigh=0x0, nFileSizeLow=0x1279358, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWLIB.DLL", cAlternateFileName="")) returned 1 [0179.844] wcscmp (_String1="WWLIB.DLL", _String2=".") returned 1 [0179.844] wcscmp (_String1="WWLIB.DLL", _String2="..") returned 1 [0179.844] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe909a510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x6eb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC.DLL", cAlternateFileName="")) returned 1 [0179.844] wcscmp (_String1="XFUNC.DLL", _String2=".") returned 1 [0179.844] wcscmp (_String1="XFUNC.DLL", _String2="..") returned 1 [0179.844] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x924de630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0xc0998, dwReserved0=0x0, dwReserved1=0x0, cFileName="XIMAGE3B.DLL", cAlternateFileName="")) returned 1 [0179.845] wcscmp (_String1="XIMAGE3B.DLL", _String2=".") returned 1 [0179.845] wcscmp (_String1="XIMAGE3B.DLL", _String2="..") returned 1 [0179.845] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d5300, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x738d5300, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x2578, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLCALL32.DLL", cAlternateFileName="")) returned 1 [0179.845] wcscmp (_String1="XLCALL32.DLL", _String2=".") returned 1 [0179.845] wcscmp (_String1="XLCALL32.DLL", _String2="..") returned 1 [0179.845] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x85508550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13784, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLCPRTID.XML", cAlternateFileName="")) returned 1 [0179.845] wcscmp (_String1="XLCPRTID.XML", _String2=".") returned 1 [0179.845] wcscmp (_String1="XLCPRTID.XML", _String2="..") returned 1 [0179.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0179.845] wcscpy (in: _Dest=0x3f0b730, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.845] wcscat (in: _Dest=0x3f0b730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.845] wcscat (in: _Dest=0x3f0b730, _Source="XLCPRTID.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" [0179.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0179.979] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60577d00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x8552e6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60577d00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x169360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLICONS.EXE", cAlternateFileName="")) returned 1 [0179.979] wcscmp (_String1="XLICONS.EXE", _String2=".") returned 1 [0179.979] wcscmp (_String1="XLICONS.EXE", _String2="..") returned 1 [0179.980] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0179.980] wcscmp (_String1="XLSTART", _String2=".") returned 1 [0179.980] wcscmp (_String1="XLSTART", _String2="..") returned 1 [0179.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1b08 [0179.980] wcscpy (in: _Dest=0x3db1b08, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0179.980] wcscat (in: _Dest=0x3db1b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0179.980] wcscat (in: _Dest=0x3db1b08, _Source="XLSTART" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" [0180.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3db1b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24bc [0180.241] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5204dc00, ftCreationTime.dwHighDateTime=0x1c43cd4, ftLastAccessTime.dwLowDateTime=0x8552e6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5204dc00, ftLastWriteTime.dwHighDateTime=0x1c43cd4, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1 [0181.699] wcscmp (_String1="XML2WORD.XSL", _String2=".") returned 1 [0181.700] wcscmp (_String1="XML2WORD.XSL", _String2="..") returned 1 [0181.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32520 [0181.700] wcscpy (in: _Dest=0x3f32520, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0181.700] wcscat (in: _Dest=0x3f32520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0181.700] wcscat (in: _Dest=0x3f32520, _Source="XML2WORD.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" [0184.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0184.872] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ecbf00, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81ecbf00, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x14e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="XOCR3.PSP", cAlternateFileName="")) returned 1 [0184.872] wcscmp (_String1="XOCR3.PSP", _String2=".") returned 1 [0184.872] wcscmp (_String1="XOCR3.PSP", _String2="..") returned 1 [0184.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68510 [0184.872] wcscpy (in: _Dest=0x3e68510, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0184.872] wcscat (in: _Dest=0x3e68510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0184.872] wcscat (in: _Dest=0x3e68510, _Source="XOCR3.PSP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP") returned="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" [0184.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0184.873] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x41390, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPAGE3C.DLL", cAlternateFileName="")) returned 1 [0184.873] wcscmp (_String1="XPAGE3C.DLL", _String2=".") returned 1 [0184.873] wcscmp (_String1="XPAGE3C.DLL", _String2="..") returned 1 [0184.873] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3d857a8 | out: lpFindFileData=0x3d857a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x41390, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPAGE3C.DLL", cAlternateFileName="")) returned 0 [0184.873] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0184.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d857a8) returned 1 [0184.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd340) returned 1 [0184.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5708) returned 1 Thread: id = 167 os_tid = 0x6c0 [0130.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecd208 [0130.684] wcscpy (in: _Dest=0x3ecd208, _Source="C:\\Program Files\\Microsoft Office\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery" [0130.684] wcscat (in: _Dest=0x3ecd208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\" [0130.684] wcscat (in: _Dest=0x3ecd208, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\*") returned="C:\\Program Files\\Microsoft Office\\Stationery\\*" [0130.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85a10 [0130.684] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48bf5530, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0130.889] wcscmp (_String1=".", _String2=".") returned 0 [0130.889] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48bf5530, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.889] wcscmp (_String1="..", _String2=".") returned 1 [0130.889] wcscmp (_String1="..", _String2="..") returned 0 [0130.889] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0130.889] wcscmp (_String1="1033", _String2=".") returned 1 [0130.889] wcscmp (_String1="1033", _String2="..") returned 1 [0130.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff50f0 [0130.890] wcscpy (in: _Dest=0x2ff50f0, _Source="C:\\Program Files\\Microsoft Office\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery" [0130.890] wcscat (in: _Dest=0x2ff50f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\" [0130.890] wcscat (in: _Dest=0x2ff50f0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0136.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff50f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0136.139] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0136.139] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0136.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85a10) returned 1 [0136.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd208) returned 1 [0136.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd068) returned 1 Thread: id = 168 os_tid = 0x5ec [0130.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3eccc58 [0130.687] wcscpy (in: _Dest=0x3eccc58, _Source="C:\\Program Files\\Microsoft Office\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0130.687] wcscat (in: _Dest=0x3eccc58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\" [0130.687] wcscat (in: _Dest=0x3eccc58, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\*" [0130.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0130.688] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0130.890] wcscmp (_String1=".", _String2=".") returned 0 [0130.890] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.891] wcscmp (_String1="..", _String2=".") returned 1 [0130.891] wcscmp (_String1="..", _String2="..") returned 0 [0130.891] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x997722f0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0130.891] wcscmp (_String1="1033", _String2=".") returned 1 [0130.891] wcscmp (_String1="1033", _String2="..") returned 1 [0130.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff51d0 [0130.891] wcscpy (in: _Dest=0x2ff51d0, _Source="C:\\Program Files\\Microsoft Office\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0130.891] wcscat (in: _Dest=0x2ff51d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\" [0130.891] wcscat (in: _Dest=0x2ff51d0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff51d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0131.829] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1 [0131.830] wcscmp (_String1="Presentation Designs", _String2=".") returned 1 [0131.830] wcscmp (_String1="Presentation Designs", _String2="..") returned 1 [0131.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3550e0 [0131.830] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Program Files\\Microsoft Office\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0131.830] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\" [0131.830] wcscat (in: _Dest=0x3550e0, _Source="Presentation Designs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" [0131.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0131.831] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0 [0131.831] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0131.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0131.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccc58) returned 1 [0131.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6608) returned 1 Thread: id = 169 os_tid = 0x668 [0130.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fff8 [0130.689] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" [0130.690] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\" [0130.690] wcscat (in: _Dest=0x3e1fff8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*" [0130.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85ee0 [0130.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0130.892] wcscmp (_String1=".", _String2=".") returned 0 [0130.892] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.892] wcscmp (_String1="..", _String2=".") returned 1 [0130.892] wcscmp (_String1="..", _String2="..") returned 0 [0130.892] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0130.892] wcscmp (_String1="Desktop", _String2=".") returned 1 [0130.893] wcscmp (_String1="Desktop", _String2="..") returned 1 [0130.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2be8 [0130.893] wcscpy (in: _Dest=0x3df2be8, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" [0130.893] wcscat (in: _Dest=0x3df2be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\" [0130.893] wcscat (in: _Dest=0x3df2be8, _Source="Desktop" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" [0131.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df2be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0131.862] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfdedb00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfdedb00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceca35.dll", cAlternateFileName="SQLCEC~1.DLL")) returned 1 [0131.862] wcscmp (_String1="sqlceca35.dll", _String2=".") returned 1 [0131.862] wcscmp (_String1="sqlceca35.dll", _String2="..") returned 1 [0131.862] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcecompact35.dll", cAlternateFileName="SQLCEC~2.DLL")) returned 1 [0131.862] wcscmp (_String1="sqlcecompact35.dll", _String2=".") returned 1 [0131.862] wcscmp (_String1="sqlcecompact35.dll", _String2="..") returned 1 [0131.862] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x24240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceer35EN.dll", cAlternateFileName="SQLCEE~1.DLL")) returned 1 [0131.862] wcscmp (_String1="sqlceer35EN.dll", _String2=".") returned 1 [0131.862] wcscmp (_String1="sqlceer35EN.dll", _String2="..") returned 1 [0131.862] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0xfe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceme35.dll", cAlternateFileName="SQLCEM~1.DLL")) returned 1 [0131.862] wcscmp (_String1="sqlceme35.dll", _String2=".") returned 1 [0131.862] wcscmp (_String1="sqlceme35.dll", _String2="..") returned 1 [0131.862] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfdedb00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfdedb00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceoledb35.dll", cAlternateFileName="SQLCEO~1.DLL")) returned 1 [0131.862] wcscmp (_String1="sqlceoledb35.dll", _String2=".") returned 1 [0131.862] wcscmp (_String1="sqlceoledb35.dll", _String2="..") returned 1 [0131.862] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d440, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceqp35.dll", cAlternateFileName="SQLCEQ~1.DLL")) returned 1 [0131.862] wcscmp (_String1="sqlceqp35.dll", _String2=".") returned 1 [0131.862] wcscmp (_String1="sqlceqp35.dll", _String2="..") returned 1 [0131.862] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x55040, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="SQLCES~1.DLL")) returned 1 [0131.862] wcscmp (_String1="sqlcese35.dll", _String2=".") returned 1 [0131.862] wcscmp (_String1="sqlcese35.dll", _String2="..") returned 1 [0131.862] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x55040, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="SQLCES~1.DLL")) returned 0 [0131.862] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0131.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ee0) returned 1 [0131.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 [0131.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5508) returned 1 Thread: id = 170 os_tid = 0x714 [0130.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5e80 [0130.693] wcscpy (in: _Dest=0x2ff5e80, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0130.693] wcscat (in: _Dest=0x2ff5e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\" [0130.694] wcscat (in: _Dest=0x2ff5e80, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*" [0130.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0130.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0130.694] wcscmp (_String1=".", _String2=".") returned 0 [0130.694] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.694] wcscmp (_String1="..", _String2=".") returned 1 [0130.694] wcscmp (_String1="..", _String2="..") returned 0 [0130.695] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documentation", cAlternateFileName="DOCUME~1")) returned 1 [0130.695] wcscmp (_String1="Documentation", _String2=".") returned 1 [0130.695] wcscmp (_String1="Documentation", _String2="..") returned 1 [0130.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e20a98 [0130.695] wcscpy (in: _Dest=0x3e20a98, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0130.695] wcscat (in: _Dest=0x3e20a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\" [0130.695] wcscat (in: _Dest=0x3e20a98, _Source="Documentation" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" [0131.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e20a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0131.026] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 1 [0131.026] wcscmp (_String1="Runtime", _String2=".") returned 1 [0131.026] wcscmp (_String1="Runtime", _String2="..") returned 1 [0131.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51200 [0131.026] wcscpy (in: _Dest=0x3d51200, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0131.026] wcscat (in: _Dest=0x3d51200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\" [0131.026] wcscat (in: _Dest=0x3d51200, _Source="Runtime" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" [0131.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d51200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0131.028] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 0 [0131.028] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0131.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0131.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5e80) returned 1 [0131.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccf98) returned 1 Thread: id = 171 os_tid = 0x508 [0130.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e202a0 [0130.696] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" [0130.696] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\" [0130.696] wcscat (in: _Dest=0x3e202a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*" [0130.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d863b0 [0130.696] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c947b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0130.697] wcscmp (_String1=".", _String2=".") returned 0 [0130.697] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c947b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.697] wcscmp (_String1="..", _String2=".") returned 1 [0130.697] wcscmp (_String1="..", _String2="..") returned 0 [0130.697] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0130.697] wcscmp (_String1="v1.0", _String2=".") returned 1 [0130.697] wcscmp (_String1="v1.0", _String2="..") returned 1 [0130.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1f88 [0130.697] wcscpy (in: _Dest=0x3df1f88, _Source="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" [0130.697] wcscat (in: _Dest=0x3df1f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\" [0130.698] wcscat (in: _Dest=0x3df1f88, _Source="v1.0" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" [0131.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df1f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0131.866] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0131.866] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0131.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d863b0) returned 1 [0131.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 [0131.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 Thread: id = 172 os_tid = 0x520 [0130.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51728 [0130.698] wcscpy (in: _Dest=0x3d51728, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0130.698] wcscat (in: _Dest=0x3d51728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\" [0130.698] wcscat (in: _Dest=0x3d51728, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\*" [0130.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86618 [0130.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8e48 [0131.100] wcscmp (_String1=".", _String2=".") returned 0 [0131.100] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.100] wcscmp (_String1="..", _String2=".") returned 1 [0131.100] wcscmp (_String1="..", _String2="..") returned 0 [0131.100] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7788cf90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDE", cAlternateFileName="")) returned 1 [0131.100] wcscmp (_String1="IDE", _String2=".") returned 1 [0131.100] wcscmp (_String1="IDE", _String2="..") returned 1 [0131.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df9438 [0131.100] wcscpy (in: _Dest=0x3df9438, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0131.100] wcscat (in: _Dest=0x3df9438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\" [0131.100] wcscat (in: _Dest=0x3df9438, _Source="IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0131.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df9438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0131.411] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0131.411] wcscmp (_String1="Packages", _String2=".") returned 1 [0131.411] wcscmp (_String1="Packages", _String2="..") returned 1 [0131.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4608 [0131.411] wcscpy (in: _Dest=0x3dc4608, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0131.411] wcscat (in: _Dest=0x3dc4608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\" [0131.411] wcscat (in: _Dest=0x3dc4608, _Source="Packages" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" [0131.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0131.414] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0131.414] FindClose (in: hFindFile=0x2fc8e48 | out: hFindFile=0x2fc8e48) returned 1 [0131.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86618) returned 1 [0131.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0131.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5080) returned 1 Thread: id = 173 os_tid = 0x6b0 [0130.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5010 [0130.700] wcscpy (in: _Dest=0x2ff5010, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\SDK" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK" [0130.700] wcscat (in: _Dest=0x2ff5010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\" [0130.700] wcscat (in: _Dest=0x2ff5010, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\*" [0130.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86880 [0130.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0130.894] wcscmp (_String1=".", _String2=".") returned 0 [0130.894] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.895] wcscmp (_String1="..", _String2=".") returned 1 [0130.895] wcscmp (_String1="..", _String2="..") returned 0 [0130.895] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.895] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0130.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86880) returned 1 [0130.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5010) returned 1 [0130.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd0d0) returned 1 Thread: id = 174 os_tid = 0xb74 [0130.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5160 [0130.701] wcscpy (in: _Dest=0x2ff5160, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" [0130.701] wcscat (in: _Dest=0x2ff5160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\" [0130.701] wcscat (in: _Dest=0x2ff5160, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\*" [0130.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0130.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0130.897] wcscmp (_String1=".", _String2=".") returned 0 [0130.897] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.897] wcscmp (_String1="..", _String2=".") returned 1 [0130.897] wcscmp (_String1="..", _String2="..") returned 0 [0130.897] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1 [0130.897] wcscmp (_String1="Bin", _String2=".") returned 1 [0130.897] wcscmp (_String1="Bin", _String2="..") returned 1 [0130.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5010 [0130.898] wcscpy (in: _Dest=0x2ff5010, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" [0130.898] wcscat (in: _Dest=0x2ff5010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\" [0130.898] wcscat (in: _Dest=0x2ff5010, _Source="Bin" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" [0131.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0131.787] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0 [0131.787] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0131.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0131.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5160) returned 1 [0131.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd3a8) returned 1 Thread: id = 175 os_tid = 0xb6c [0130.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4688 [0130.708] wcscpy (in: _Dest=0x3dc4688, _Source="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies" [0130.708] wcscat (in: _Dest=0x3dc4688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\" [0130.708] wcscat (in: _Dest=0x3dc4688, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\*" [0130.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0130.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0130.898] wcscmp (_String1=".", _String2=".") returned 0 [0130.898] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.899] wcscmp (_String1="..", _String2=".") returned 1 [0130.899] wcscmp (_String1="..", _String2="..") returned 0 [0130.899] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663bd400, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x87bb6ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x663bd400, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0130.899] wcscmp (_String1="adodb.dll", _String2=".") returned 1 [0130.899] wcscmp (_String1="adodb.dll", _String2="..") returned 1 [0130.899] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb155e700, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x87c9b310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb155e700, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0130.899] wcscmp (_String1="Microsoft.mshtml.dll", _String2=".") returned 1 [0130.899] wcscmp (_String1="Microsoft.mshtml.dll", _String2="..") returned 1 [0130.899] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e135800, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x87c9b310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e135800, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0130.900] wcscmp (_String1="Microsoft.stdformat.dll", _String2=".") returned 1 [0130.900] wcscmp (_String1="Microsoft.stdformat.dll", _String2="..") returned 1 [0130.900] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c0900, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x881aa1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x971c0900, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0130.900] wcscmp (_String1="msdatasrc.dll", _String2=".") returned 1 [0130.900] wcscmp (_String1="msdatasrc.dll", _String2="..") returned 1 [0130.900] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781d7700, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x781d7700, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0130.900] wcscmp (_String1="stdole.dll", _String2=".") returned 1 [0130.900] wcscmp (_String1="stdole.dll", _String2="..") returned 1 [0130.900] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781d7700, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x781d7700, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0130.900] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0130.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0130.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4688) returned 1 [0130.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4588) returned 1 Thread: id = 176 os_tid = 0xb60 [0130.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0130.711] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Program Files\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0130.711] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\" [0130.711] wcscat (in: _Dest=0x2fe6548, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\*") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\*" [0130.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0130.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0130.712] wcscmp (_String1=".", _String2=".") returned 0 [0130.712] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.712] wcscmp (_String1="..", _String2=".") returned 1 [0130.712] wcscmp (_String1="..", _String2="..") returned 0 [0130.712] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e2b00, ftCreationTime.dwHighDateTime=0x1cd906a, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x34e2b00, ftLastWriteTime.dwHighDateTime=0x1cd906a, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1 [0130.713] wcscmp (_String1="AssemblyList_4_client.xml", _String2=".") returned 1 [0130.713] wcscmp (_String1="AssemblyList_4_client.xml", _String2="..") returned 1 [0130.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2378 [0130.713] wcscpy (in: _Dest=0x3df2378, _Source="C:\\Program Files\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0130.713] wcscat (in: _Dest=0x3df2378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\" [0130.713] wcscat (in: _Dest=0x3df2378, _Source="AssemblyList_4_client.xml" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0130.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0130.801] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e2b00, ftCreationTime.dwHighDateTime=0x1cd906a, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x34e2b00, ftLastWriteTime.dwHighDateTime=0x1cd906a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1 [0130.801] wcscmp (_String1="AssemblyList_4_extended.xml", _String2=".") returned 1 [0130.802] wcscmp (_String1="AssemblyList_4_extended.xml", _String2="..") returned 1 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a2d8 [0130.802] wcscpy (in: _Dest=0x3e2a2d8, _Source="C:\\Program Files\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0130.802] wcscat (in: _Dest=0x3e2a2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\" [0130.802] wcscat (in: _Dest=0x3e2a2d8, _Source="AssemblyList_4_extended.xml" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0130.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0130.803] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e2b00, ftCreationTime.dwHighDateTime=0x1cd906a, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x34e2b00, ftLastWriteTime.dwHighDateTime=0x1cd906a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 0 [0130.803] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0130.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0130.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0130.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 177 os_tid = 0xb5c [0130.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0efb0 [0130.714] wcscpy (in: _Dest=0x3e0efb0, _Source="C:\\Program Files\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0130.714] wcscat (in: _Dest=0x3e0efb0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\" [0130.714] wcscat (in: _Dest=0x3e0efb0, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\*" [0130.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0130.714] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0130.714] wcscmp (_String1=".", _String2=".") returned 0 [0130.714] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.715] wcscmp (_String1="..", _String2=".") returned 1 [0130.715] wcscmp (_String1="..", _String2="..") returned 0 [0130.715] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0130.715] wcscmp (_String1="Windows Workflow Foundation", _String2=".") returned 1 [0130.715] wcscmp (_String1="Windows Workflow Foundation", _String2="..") returned 1 [0130.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e20438 [0130.715] wcscpy (in: _Dest=0x3e20438, _Source="C:\\Program Files\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0130.715] wcscat (in: _Dest=0x3e20438, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\" [0130.715] wcscat (in: _Dest=0x3e20438, _Source="Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0131.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e20438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0131.031] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0131.031] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0131.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0131.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0efb0) returned 1 [0131.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5f78) returned 1 Thread: id = 178 os_tid = 0xbac [0130.716] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files\\msbuild\\microsoft.office.infopath.targets")) returned 0x20 [0130.905] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets", dwFileAttributes=0x20) returned 0 [0130.905] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files\\msbuild\\microsoft.office.infopath.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0130.905] GetLastError () returned 0x5 [0130.905] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets", dwFileAttributes=0x20) returned 0 [0130.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 Thread: id = 179 os_tid = 0xbc0 [0130.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff50f0 [0130.717] wcscpy (in: _Dest=0x2ff50f0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0130.717] wcscat (in: _Dest=0x2ff50f0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\" [0130.717] wcscat (in: _Dest=0x2ff50f0, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\*" [0130.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0130.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0130.718] wcscmp (_String1=".", _String2=".") returned 0 [0130.718] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.718] wcscmp (_String1="..", _String2=".") returned 1 [0130.718] wcscmp (_String1="..", _String2="..") returned 0 [0130.718] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0130.718] wcscmp (_String1="Framework", _String2=".") returned 1 [0130.719] wcscmp (_String1="Framework", _String2="..") returned 1 [0130.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4488 [0130.719] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0130.719] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\" [0130.719] wcscat (in: _Dest=0x3dc4488, _Source="Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0130.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0130.807] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0130.807] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0130.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0130.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff50f0) returned 1 [0130.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccd28) returned 1 Thread: id = 180 os_tid = 0xbbc [0130.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe2b88 [0130.726] wcscpy (in: _Dest=0x2fe2b88, _Source="C:\\Program Files\\Windows Journal\\en-US" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US") returned="C:\\Program Files\\Windows Journal\\en-US" [0130.726] wcscat (in: _Dest=0x2fe2b88, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US\\") returned="C:\\Program Files\\Windows Journal\\en-US\\" [0130.726] wcscat (in: _Dest=0x2fe2b88, _Source="*" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US\\*") returned="C:\\Program Files\\Windows Journal\\en-US\\*" [0130.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0130.726] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3608042, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee69aeba, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc386a5c2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0130.907] wcscmp (_String1=".", _String2=".") returned 0 [0130.907] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3608042, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee69aeba, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc386a5c2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.907] wcscmp (_String1="..", _String2=".") returned 1 [0130.907] wcscmp (_String1="..", _String2="..") returned 0 [0130.907] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e63554, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40e63554, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x53399a00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll.mui", cAlternateFileName="")) returned 1 [0130.907] wcscmp (_String1="JNTFiltr.dll.mui", _String2=".") returned 1 [0130.908] wcscmp (_String1="JNTFiltr.dll.mui", _String2="..") returned 1 [0130.908] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4115d0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x4115d0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xc0e5c600, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll.mui", cAlternateFileName="")) returned 1 [0130.908] wcscmp (_String1="jnwdui.dll.mui", _String2=".") returned 1 [0130.908] wcscmp (_String1="jnwdui.dll.mui", _String2="..") returned 1 [0130.908] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4115d0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x4115d0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1454400, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll.mui", cAlternateFileName="")) returned 1 [0130.908] wcscmp (_String1="jnwmon.dll.mui", _String2=".") returned 1 [0130.908] wcscmp (_String1="jnwmon.dll.mui", _String2="..") returned 1 [0130.908] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e63554, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40e63554, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x546ac700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe.mui", cAlternateFileName="")) returned 1 [0130.908] wcscmp (_String1="Journal.exe.mui", _String2=".") returned 1 [0130.908] wcscmp (_String1="Journal.exe.mui", _String2="..") returned 1 [0130.908] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f21c35, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40f21c35, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x72382c00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL.mui", cAlternateFileName="")) returned 1 [0130.908] wcscmp (_String1="MSPVWCTL.DLL.mui", _String2=".") returned 1 [0130.908] wcscmp (_String1="MSPVWCTL.DLL.mui", _String2="..") returned 1 [0130.908] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f21c35, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40f21c35, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xf2f72800, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll.mui", cAlternateFileName="")) returned 1 [0130.908] wcscmp (_String1="NBMapTIP.dll.mui", _String2=".") returned 1 [0130.909] wcscmp (_String1="NBMapTIP.dll.mui", _String2="..") returned 1 [0130.909] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411a939a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x411a939a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xe4a90c00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 1 [0130.909] wcscmp (_String1="PDIALOG.exe.mui", _String2=".") returned 1 [0130.909] wcscmp (_String1="PDIALOG.exe.mui", _String2="..") returned 1 [0130.909] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411a939a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x411a939a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xe4a90c00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 0 [0130.909] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0130.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0130.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe2b88) returned 1 [0130.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f5e0) returned 1 Thread: id = 181 os_tid = 0xbb4 [0130.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd000 [0130.734] wcscpy (in: _Dest=0x3ecd000, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0130.734] wcscat (in: _Dest=0x3ecd000, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0130.734] wcscat (in: _Dest=0x3ecd000, _Source="*" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\*") returned="C:\\Program Files\\Windows Journal\\Templates\\*" [0130.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0130.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0130.912] wcscmp (_String1=".", _String2=".") returned 0 [0130.913] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.913] wcscmp (_String1="..", _String2=".") returned 1 [0130.913] wcscmp (_String1="..", _String2="..") returned 0 [0130.913] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98deb0d2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98deb0d2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x249311fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.jtp", cAlternateFileName="")) returned 1 [0130.913] wcscmp (_String1="blank.jtp", _String2=".") returned 1 [0130.913] wcscmp (_String1="blank.jtp", _String2="..") returned 1 [0130.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3df9690 [0130.913] wcscpy (in: _Dest=0x3df9690, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0130.913] wcscat (in: _Dest=0x3df9690, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0130.913] wcscat (in: _Dest=0x3df9690, _Source="blank.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" [0131.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df9690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0131.790] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98e5d4ef, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98e5d4ef, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24c7703c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Line.jtp", cAlternateFileName="")) returned 1 [0131.790] wcscmp (_String1="Dotted_Line.jtp", _String2=".") returned 1 [0131.790] wcscmp (_String1="Dotted_Line.jtp", _String2="..") returned 1 [0131.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4588 [0131.790] wcscpy (in: _Dest=0x3dc4588, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.790] wcscat (in: _Dest=0x3dc4588, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.790] wcscat (in: _Dest=0x3dc4588, _Source="Dotted_Line.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" [0131.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0131.791] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ea97ad, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98ea97ad, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24c9d19c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x361c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.jtp", cAlternateFileName="")) returned 1 [0131.791] wcscmp (_String1="Genko_1.jtp", _String2=".") returned 1 [0131.792] wcscmp (_String1="Genko_1.jtp", _String2="..") returned 1 [0131.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32598 [0131.792] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.792] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.792] wcscat (in: _Dest=0x3f32598, _Source="Genko_1.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" [0131.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0131.793] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ecf90c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98ecf90c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24c9d19c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x4c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.jtp", cAlternateFileName="")) returned 1 [0131.793] wcscmp (_String1="Genko_2.jtp", _String2=".") returned 1 [0131.793] wcscmp (_String1="Genko_2.jtp", _String2="..") returned 1 [0131.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32610 [0131.793] wcscpy (in: _Dest=0x3f32610, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.793] wcscat (in: _Dest=0x3f32610, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.793] wcscat (in: _Dest=0x3f32610, _Source="Genko_2.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" [0131.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0131.795] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f1bbca, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98f1bbca, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24cc32fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1e15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.jtp", cAlternateFileName="")) returned 1 [0131.795] wcscmp (_String1="Graph.jtp", _String2=".") returned 1 [0131.795] wcscmp (_String1="Graph.jtp", _String2="..") returned 1 [0131.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32688 [0131.795] wcscpy (in: _Dest=0x3f32688, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.795] wcscat (in: _Dest=0x3f32688, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.795] wcscat (in: _Dest=0x3f32688, _Source="Graph.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" [0131.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0 [0131.796] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f41d29, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98f41d29, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24ce945c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x26f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.jtp", cAlternateFileName="")) returned 1 [0131.796] wcscmp (_String1="Memo.jtp", _String2=".") returned 1 [0131.796] wcscmp (_String1="Memo.jtp", _String2="..") returned 1 [0131.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5160 [0131.797] wcscpy (in: _Dest=0x2ff5160, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.797] wcscat (in: _Dest=0x2ff5160, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.797] wcscat (in: _Dest=0x2ff5160, _Source="Memo.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" [0131.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0131.798] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fb4146, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98fb4146, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24ce945c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.jtp", cAlternateFileName="")) returned 1 [0131.798] wcscmp (_String1="Month_Calendar.jtp", _String2=".") returned 1 [0131.798] wcscmp (_String1="Month_Calendar.jtp", _String2="..") returned 1 [0131.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e678c8 [0131.798] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.798] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.798] wcscat (in: _Dest=0x3e678c8, _Source="Month_Calendar.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" [0131.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0131.800] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fda2a5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98fda2a5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d0f5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x9f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.jtp", cAlternateFileName="")) returned 1 [0131.800] wcscmp (_String1="Music.jtp", _String2=".") returned 1 [0131.800] wcscmp (_String1="Music.jtp", _String2="..") returned 1 [0131.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32700 [0131.800] wcscpy (in: _Dest=0x3f32700, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.800] wcscat (in: _Dest=0x3f32700, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.800] wcscat (in: _Dest=0x3f32700, _Source="Music.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" [0131.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0131.801] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99026563, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x99026563, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d0f5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.jtp", cAlternateFileName="")) returned 1 [0131.801] wcscmp (_String1="Seyes.jtp", _String2=".") returned 1 [0131.801] wcscmp (_String1="Seyes.jtp", _String2="..") returned 1 [0131.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32778 [0131.802] wcscpy (in: _Dest=0x3f32778, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.802] wcscat (in: _Dest=0x3f32778, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.802] wcscat (in: _Dest=0x3f32778, _Source="Seyes.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" [0131.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0131.803] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99098980, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x99098980, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d3571c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1575a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.jtp", cAlternateFileName="")) returned 1 [0131.803] wcscmp (_String1="Shorthand.jtp", _String2=".") returned 1 [0131.803] wcscmp (_String1="Shorthand.jtp", _String2="..") returned 1 [0131.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5688 [0131.803] wcscpy (in: _Dest=0x3dc5688, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.803] wcscat (in: _Dest=0x3dc5688, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.804] wcscat (in: _Dest=0x3dc5688, _Source="Shorthand.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" [0131.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0131.805] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9910ad9d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9910ad9d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d5b87c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 1 [0131.805] wcscmp (_String1="To_Do_List.jtp", _String2=".") returned 1 [0131.805] wcscmp (_String1="To_Do_List.jtp", _String2="..") returned 1 [0131.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5308 [0131.805] wcscpy (in: _Dest=0x3dc5308, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.805] wcscat (in: _Dest=0x3dc5308, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0131.805] wcscat (in: _Dest=0x3dc5308, _Source="To_Do_List.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" [0131.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0131.807] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9910ad9d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9910ad9d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d5b87c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 0 [0131.807] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0131.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0131.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd000) returned 1 [0131.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 182 os_tid = 0xbb0 [0130.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0ea88 [0130.737] wcscpy (in: _Dest=0x3e0ea88, _Source="C:\\Program Files\\Windows Mail\\en-US" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US" [0130.737] wcscat (in: _Dest=0x3e0ea88, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US\\") returned="C:\\Program Files\\Windows Mail\\en-US\\" [0130.738] wcscat (in: _Dest=0x3e0ea88, _Source="*" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US\\*") returned="C:\\Program Files\\Windows Mail\\en-US\\*" [0130.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0130.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0a419b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7f0a419b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f0a419b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0130.738] wcscmp (_String1=".", _String2=".") returned 0 [0130.738] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0a419b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7f0a419b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f0a419b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.738] wcscmp (_String1="..", _String2=".") returned 1 [0130.738] wcscmp (_String1="..", _String2="..") returned 0 [0130.739] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b7eaad, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34b7eaad, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2767100, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0130.739] wcscmp (_String1="msoeres.dll.mui", _String2=".") returned 1 [0130.739] wcscmp (_String1="msoeres.dll.mui", _String2="..") returned 1 [0130.739] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ff53f5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34ff53f5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xfc33c500, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0130.739] wcscmp (_String1="WinMail.exe.mui", _String2=".") returned 1 [0130.739] wcscmp (_String1="WinMail.exe.mui", _String2="..") returned 1 [0130.739] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ff53f5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34ff53f5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xfc33c500, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0130.739] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0130.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0130.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ea88) returned 1 [0130.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 Thread: id = 183 os_tid = 0xba4 [0130.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0ea88 [0130.745] wcscpy (in: _Dest=0x3e0ea88, _Source="C:\\ProgramData\\Microsoft\\Assistance" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0130.745] wcscat (in: _Dest=0x3e0ea88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\" [0130.746] wcscat (in: _Dest=0x3e0ea88, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\*" [0130.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0130.746] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37958 [0132.422] wcscmp (_String1=".", _String2=".") returned 0 [0132.422] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.422] wcscmp (_String1="..", _String2=".") returned 1 [0132.422] wcscmp (_String1="..", _String2="..") returned 0 [0132.422] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0132.422] wcscmp (_String1="Client", _String2=".") returned 1 [0132.422] wcscmp (_String1="Client", _String2="..") returned 1 [0132.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f68 [0132.422] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\ProgramData\\Microsoft\\Assistance" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0132.422] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\" [0132.422] wcscat (in: _Dest=0x2fe6f68, _Source="Client" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client" [0133.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0133.639] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0133.639] FindClose (in: hFindFile=0x3f37958 | out: hFindFile=0x3f37958) returned 1 [0133.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0133.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ea88) returned 1 [0133.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de62e8) returned 1 Thread: id = 184 os_tid = 0xb9c [0130.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6068 [0130.748] wcscpy (in: _Dest=0x3de6068, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0130.748] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0130.748] wcscat (in: _Dest=0x3de6068, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\*" [0130.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0130.749] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0132.520] wcscmp (_String1=".", _String2=".") returned 0 [0132.520] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.524] wcscmp (_String1="..", _String2=".") returned 1 [0132.524] wcscmp (_String1="..", _String2="..") returned 0 [0132.525] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0132.525] wcscmp (_String1="DSS", _String2=".") returned 1 [0132.525] wcscmp (_String1="DSS", _String2="..") returned 1 [0132.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6888 [0132.525] wcscpy (in: _Dest=0x3de6888, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0132.525] wcscat (in: _Dest=0x3de6888, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0132.525] wcscat (in: _Dest=0x3de6888, _Source="DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS" [0133.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0133.835] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0133.835] wcscmp (_String1="Keys", _String2=".") returned 1 [0133.835] wcscmp (_String1="Keys", _String2="..") returned 1 [0133.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e23118 [0133.835] wcscpy (in: _Dest=0x3e23118, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0133.835] wcscat (in: _Dest=0x3e23118, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0133.835] wcscat (in: _Dest=0x3e23118, _Source="Keys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys" [0133.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e23118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0133.836] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0133.836] wcscmp (_String1="RSA", _String2=".") returned 1 [0133.836] wcscmp (_String1="RSA", _String2="..") returned 1 [0133.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6478 [0133.837] wcscpy (in: _Dest=0x3de6478, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0133.837] wcscat (in: _Dest=0x3de6478, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0133.837] wcscat (in: _Dest=0x3de6478, _Source="RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0133.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0133.838] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0133.838] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0133.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0133.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 [0133.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa738) returned 1 Thread: id = 185 os_tid = 0xb98 [0130.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0f270 [0130.750] wcscpy (in: _Dest=0x3e0f270, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0130.750] wcscat (in: _Dest=0x3e0f270, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\" [0130.750] wcscat (in: _Dest=0x3e0f270, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\*" [0130.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0130.750] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d98 [0132.525] wcscmp (_String1=".", _String2=".") returned 0 [0132.525] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.525] wcscmp (_String1="..", _String2=".") returned 1 [0132.525] wcscmp (_String1="..", _String2="..") returned 0 [0132.525] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0132.525] wcscmp (_String1="Device", _String2=".") returned 1 [0132.525] wcscmp (_String1="Device", _String2="..") returned 1 [0132.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bd18 [0132.525] wcscpy (in: _Dest=0x3d8bd18, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0132.525] wcscat (in: _Dest=0x3d8bd18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\" [0132.525] wcscat (in: _Dest=0x3d8bd18, _Source="Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0133.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8bd18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0133.668] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0133.669] wcscmp (_String1="Task", _String2=".") returned 1 [0133.669] wcscmp (_String1="Task", _String2="..") returned 1 [0133.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe4a48 [0133.669] wcscpy (in: _Dest=0x2fe4a48, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0133.669] wcscat (in: _Dest=0x2fe4a48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\" [0133.669] wcscat (in: _Dest=0x2fe4a48, _Source="Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0133.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe4a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0133.670] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0133.670] FindClose (in: hFindFile=0x3f37d98 | out: hFindFile=0x3f37d98) returned 1 [0133.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0133.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f270) returned 1 [0133.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eae0) returned 1 Thread: id = 186 os_tid = 0xb94 [0130.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6e598 [0130.751] wcscpy (in: _Dest=0x3e6e598, _Source="C:\\ProgramData\\Microsoft\\DeviceSync" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync" [0130.751] wcscat (in: _Dest=0x3e6e598, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync\\") returned="C:\\ProgramData\\Microsoft\\DeviceSync\\" [0130.752] wcscat (in: _Dest=0x3e6e598, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync\\*") returned="C:\\ProgramData\\Microsoft\\DeviceSync\\*" [0130.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0130.752] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0132.526] wcscmp (_String1=".", _String2=".") returned 0 [0132.526] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.526] wcscmp (_String1="..", _String2=".") returned 1 [0132.526] wcscmp (_String1="..", _String2="..") returned 0 [0132.526] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.526] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0132.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0132.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6e598) returned 1 [0132.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de61f8) returned 1 Thread: id = 187 os_tid = 0xbb8 [0130.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e6a3e0 [0130.753] wcscpy (in: _Dest=0x3e6a3e0, _Source="C:\\ProgramData\\Microsoft\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0130.753] wcscat (in: _Dest=0x3e6a3e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\") returned="C:\\ProgramData\\Microsoft\\DRM\\" [0130.753] wcscat (in: _Dest=0x3e6a3e0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\*") returned="C:\\ProgramData\\Microsoft\\DRM\\*" [0130.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0130.753] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0132.527] wcscmp (_String1=".", _String2=".") returned 0 [0132.527] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.527] wcscmp (_String1="..", _String2=".") returned 1 [0132.528] wcscmp (_String1="..", _String2="..") returned 0 [0132.528] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0132.528] wcscmp (_String1="Server", _String2=".") returned 1 [0132.528] wcscmp (_String1="Server", _String2="..") returned 1 [0132.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de61f8 [0132.528] wcscpy (in: _Dest=0x3de61f8, _Source="C:\\ProgramData\\Microsoft\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0132.528] wcscat (in: _Dest=0x3de61f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\") returned="C:\\ProgramData\\Microsoft\\DRM\\" [0132.528] wcscat (in: _Dest=0x3de61f8, _Source="Server" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server" [0134.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de61f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0134.167] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0134.167] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0134.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0134.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a3e0) returned 1 [0134.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa0c0) returned 1 Thread: id = 188 os_tid = 0xba0 [0130.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de63d8 [0130.754] wcscpy (in: _Dest=0x3de63d8, _Source="C:\\ProgramData\\Microsoft\\eHome" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0130.755] wcscat (in: _Dest=0x3de63d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\") returned="C:\\ProgramData\\Microsoft\\eHome\\" [0130.755] wcscat (in: _Dest=0x3de63d8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\*") returned="C:\\ProgramData\\Microsoft\\eHome\\*" [0130.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0130.755] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e18 [0132.528] wcscmp (_String1=".", _String2=".") returned 0 [0132.528] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.528] wcscmp (_String1="..", _String2=".") returned 1 [0132.528] wcscmp (_String1="..", _String2="..") returned 0 [0132.528] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0132.528] wcscmp (_String1="logs", _String2=".") returned 1 [0132.528] wcscmp (_String1="logs", _String2="..") returned 1 [0132.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e580b8 [0132.528] wcscpy (in: _Dest=0x3e580b8, _Source="C:\\ProgramData\\Microsoft\\eHome" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0132.528] wcscat (in: _Dest=0x3e580b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\") returned="C:\\ProgramData\\Microsoft\\eHome\\" [0132.528] wcscat (in: _Dest=0x3e580b8, _Source="logs" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs") returned="C:\\ProgramData\\Microsoft\\eHome\\logs" [0133.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e580b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0133.673] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0133.673] FindClose (in: hFindFile=0x3f37e18 | out: hFindFile=0x3f37e18) returned 1 [0133.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0133.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de63d8) returned 1 [0133.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9fe8) returned 1 Thread: id = 189 os_tid = 0xba8 [0130.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ea10 [0130.756] wcscpy (in: _Dest=0x3e6ea10, _Source="C:\\ProgramData\\Microsoft\\Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer" [0130.756] wcscat (in: _Dest=0x3e6ea10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\" [0130.756] wcscat (in: _Dest=0x3e6ea10, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\*" [0130.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a470 [0130.756] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e58 [0132.529] wcscmp (_String1=".", _String2=".") returned 0 [0132.529] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.529] wcscmp (_String1="..", _String2=".") returned 1 [0132.529] wcscmp (_String1="..", _String2="..") returned 0 [0132.529] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0132.529] wcscmp (_String1="Views", _String2=".") returned 1 [0132.529] wcscmp (_String1="Views", _String2="..") returned 1 [0132.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7088 [0132.529] wcscpy (in: _Dest=0x2fe7088, _Source="C:\\ProgramData\\Microsoft\\Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer" [0132.529] wcscat (in: _Dest=0x2fe7088, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\" [0132.529] wcscat (in: _Dest=0x2fe7088, _Source="Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0133.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe7088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0133.676] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0133.676] FindClose (in: hFindFile=0x3f37e58 | out: hFindFile=0x3f37e58) returned 1 [0133.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a470) returned 1 [0133.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ea10) returned 1 [0133.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f008) returned 1 Thread: id = 190 os_tid = 0xb90 [0130.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6eb70 [0130.758] wcscpy (in: _Dest=0x3e6eb70, _Source="C:\\ProgramData\\Microsoft\\HTML Help" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help") returned="C:\\ProgramData\\Microsoft\\HTML Help" [0130.758] wcscat (in: _Dest=0x3e6eb70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help\\") returned="C:\\ProgramData\\Microsoft\\HTML Help\\" [0130.758] wcscat (in: _Dest=0x3e6eb70, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help\\*") returned="C:\\ProgramData\\Microsoft\\HTML Help\\*" [0130.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a6d8 [0130.758] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\HTML Help\\*", lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0132.530] wcscmp (_String1=".", _String2=".") returned 0 [0132.530] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.530] wcscmp (_String1="..", _String2=".") returned 1 [0132.530] wcscmp (_String1="..", _String2="..") returned 0 [0132.530] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.530] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0132.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a6d8) returned 1 [0132.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6eb70) returned 1 [0132.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de60b8) returned 1 Thread: id = 191 os_tid = 0xbc8 [0130.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6ebc8 [0130.763] wcscpy (in: _Dest=0x3e6ebc8, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL" [0130.763] wcscat (in: _Dest=0x3e6ebc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\" [0130.763] wcscat (in: _Dest=0x3e6ebc8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\*") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\*" [0130.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0130.763] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0132.531] wcscmp (_String1=".", _String2=".") returned 0 [0132.531] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.531] wcscmp (_String1="..", _String2=".") returned 1 [0132.531] wcscmp (_String1="..", _String2="..") returned 0 [0132.531] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x9fd2229c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0132.531] wcscmp (_String1="ppcrlconfig.dll", _String2=".") returned 1 [0132.531] wcscmp (_String1="ppcrlconfig.dll", _String2="..") returned 1 [0132.531] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0132.531] wcscmp (_String1="ppcrlui.dll", _String2=".") returned 1 [0132.531] wcscmp (_String1="ppcrlui.dll", _String2="..") returned 1 [0132.531] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0132.532] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0132.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0132.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ebc8) returned 1 [0132.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f168) returned 1 Thread: id = 192 os_tid = 0xbd0 [0130.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e6a350 [0130.766] wcscpy (in: _Dest=0x3e6a350, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0130.766] wcscat (in: _Dest=0x3e6a350, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\" [0130.766] wcscat (in: _Dest=0x3e6a350, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\*") returned="C:\\ProgramData\\Microsoft\\MF\\*" [0130.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3aba8 [0130.766] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0132.533] wcscmp (_String1=".", _String2=".") returned 0 [0132.533] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.533] wcscmp (_String1="..", _String2=".") returned 1 [0132.533] wcscmp (_String1="..", _String2="..") returned 0 [0132.533] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0132.533] wcscmp (_String1="Active.GRL", _String2=".") returned 1 [0132.533] wcscmp (_String1="Active.GRL", _String2="..") returned 1 [0132.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f168 [0132.533] wcscpy (in: _Dest=0x3e0f168, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0132.533] wcscat (in: _Dest=0x3e0f168, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\" [0132.533] wcscat (in: _Dest=0x3e0f168, _Source="Active.GRL" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0133.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e0f168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0133.678] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0133.678] wcscmp (_String1="Pending.GRL", _String2=".") returned 1 [0133.678] wcscmp (_String1="Pending.GRL", _String2="..") returned 1 [0133.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0f008 [0133.678] wcscpy (in: _Dest=0x3e0f008, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0133.678] wcscat (in: _Dest=0x3e0f008, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\" [0133.678] wcscat (in: _Dest=0x3e0f008, _Source="Pending.GRL" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0133.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e0f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0133.679] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0133.680] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0133.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3aba8) returned 1 [0133.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a350) returned 1 [0133.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 Thread: id = 193 os_tid = 0xbe0 [0130.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a1a0 [0130.767] wcscpy (in: _Dest=0x3e6a1a0, _Source="C:\\ProgramData\\Microsoft\\MSDN" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN" [0130.767] wcscat (in: _Dest=0x3e6a1a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\") returned="C:\\ProgramData\\Microsoft\\MSDN\\" [0130.767] wcscat (in: _Dest=0x3e6a1a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\*") returned="C:\\ProgramData\\Microsoft\\MSDN\\*" [0130.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ae10 [0130.767] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37cd8 [0132.519] wcscmp (_String1=".", _String2=".") returned 0 [0132.519] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.519] wcscmp (_String1="..", _String2=".") returned 1 [0132.519] wcscmp (_String1="..", _String2="..") returned 0 [0132.519] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0132.519] wcscmp (_String1="8.0", _String2=".") returned 1 [0132.519] wcscmp (_String1="8.0", _String2="..") returned 1 [0132.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de68d8 [0132.519] wcscpy (in: _Dest=0x3de68d8, _Source="C:\\ProgramData\\Microsoft\\MSDN" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN" [0132.519] wcscat (in: _Dest=0x3de68d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\") returned="C:\\ProgramData\\Microsoft\\MSDN\\" [0132.519] wcscat (in: _Dest=0x3de68d8, _Source="8.0" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0" [0134.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de68d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0134.164] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0134.164] FindClose (in: hFindFile=0x3f37cd8 | out: hFindFile=0x3f37cd8) returned 1 [0134.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ae10) returned 1 [0134.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a1a0) returned 1 [0134.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa030) returned 1 Thread: id = 194 os_tid = 0xbec [0130.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ec20 [0130.768] wcscpy (in: _Dest=0x3e6ec20, _Source="C:\\ProgramData\\Microsoft\\NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0130.768] wcscat (in: _Dest=0x3e6ec20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\" [0130.768] wcscat (in: _Dest=0x3e6ec20, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\*") returned="C:\\ProgramData\\Microsoft\\NetFramework\\*" [0130.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0130.769] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c98 [0132.518] wcscmp (_String1=".", _String2=".") returned 0 [0132.518] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.518] wcscmp (_String1="..", _String2=".") returned 1 [0132.518] wcscmp (_String1="..", _String2="..") returned 0 [0132.518] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0132.518] wcscmp (_String1="BreadcrumbStore", _String2=".") returned 1 [0132.518] wcscmp (_String1="BreadcrumbStore", _String2="..") returned 1 [0132.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d51728 [0132.518] wcscpy (in: _Dest=0x3d51728, _Source="C:\\ProgramData\\Microsoft\\NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0132.518] wcscat (in: _Dest=0x3d51728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\" [0132.518] wcscat (in: _Dest=0x3d51728, _Source="BreadcrumbStore" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0134.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d51728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0134.162] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0134.162] FindClose (in: hFindFile=0x3f37c98 | out: hFindFile=0x3f37c98) returned 1 [0134.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0134.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ec20) returned 1 [0134.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7c8) returned 1 Thread: id = 195 os_tid = 0xbd8 [0130.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6108 [0130.769] wcscpy (in: _Dest=0x3de6108, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0130.769] wcscat (in: _Dest=0x3de6108, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\" [0130.770] wcscat (in: _Dest=0x3de6108, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\*") returned="C:\\ProgramData\\Microsoft\\Network\\*" [0130.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b2e0 [0130.770] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b18 [0132.512] wcscmp (_String1=".", _String2=".") returned 0 [0132.512] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.512] wcscmp (_String1="..", _String2=".") returned 1 [0132.512] wcscmp (_String1="..", _String2="..") returned 0 [0132.512] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0132.512] wcscmp (_String1="Connections", _String2=".") returned 1 [0132.512] wcscmp (_String1="Connections", _String2="..") returned 1 [0132.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e348 [0132.512] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0132.512] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\" [0132.512] wcscat (in: _Dest=0x3d8e348, _Source="Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections" [0135.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0135.523] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0135.523] wcscmp (_String1="Downloader", _String2=".") returned 1 [0135.523] wcscmp (_String1="Downloader", _String2="..") returned 1 [0135.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0135.523] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0135.523] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\" [0135.523] wcscat (in: _Dest=0x2fe6c68, _Source="Downloader" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader" [0135.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0135.525] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0135.525] FindClose (in: hFindFile=0x3f37b18 | out: hFindFile=0x3f37b18) returned 1 [0135.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b2e0) returned 1 [0135.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6108) returned 1 [0135.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5c08) returned 1 Thread: id = 196 os_tid = 0xbe8 [0130.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de5fc8 [0130.770] wcscpy (in: _Dest=0x3de5fc8, _Source="C:\\ProgramData\\Microsoft\\OFFICE" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE" [0130.771] wcscat (in: _Dest=0x3de5fc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\" [0130.771] wcscat (in: _Dest=0x3de5fc8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\*" [0130.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b548 [0130.771] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0133.550] wcscmp (_String1=".", _String2=".") returned 0 [0133.550] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.550] wcscmp (_String1="..", _String2=".") returned 1 [0133.550] wcscmp (_String1="..", _String2="..") returned 0 [0133.550] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe546bd00, ftCreationTime.dwHighDateTime=0x1ca0563, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe546bd00, ftLastWriteTime.dwHighDateTime=0x1ca0563, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0133.550] wcscmp (_String1="AssetLibrary.ico", _String2=".") returned 1 [0133.550] wcscmp (_String1="AssetLibrary.ico", _String2="..") returned 1 [0133.550] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4123ca00, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4123ca00, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0133.550] wcscmp (_String1="DocumentRepository.ico", _String2=".") returned 1 [0133.550] wcscmp (_String1="DocumentRepository.ico", _String2="..") returned 1 [0133.550] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc130b800, ftCreationTime.dwHighDateTime=0x1c9fb2f, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc130b800, ftLastWriteTime.dwHighDateTime=0x1c9fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0133.550] wcscmp (_String1="MySharePoints.ico", _String2=".") returned 1 [0133.550] wcscmp (_String1="MySharePoints.ico", _String2="..") returned 1 [0133.550] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e61fd00, ftCreationTime.dwHighDateTime=0x1c62807, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e61fd00, ftLastWriteTime.dwHighDateTime=0x1c62807, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0133.550] wcscmp (_String1="MySite.ico", _String2=".") returned 1 [0133.550] wcscmp (_String1="MySite.ico", _String2="..") returned 1 [0133.550] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87792900, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87792900, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0133.550] wcscmp (_String1="SharePointPortalSite.ico", _String2=".") returned 1 [0133.551] wcscmp (_String1="SharePointPortalSite.ico", _String2="..") returned 1 [0133.551] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42a91900, ftCreationTime.dwHighDateTime=0x1c6276b, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42a91900, ftLastWriteTime.dwHighDateTime=0x1c6276b, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0133.551] wcscmp (_String1="SharePointTeamSite.ico", _String2=".") returned 1 [0133.551] wcscmp (_String1="SharePointTeamSite.ico", _String2="..") returned 1 [0133.551] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0133.551] wcscmp (_String1="UICaptions", _String2=".") returned 1 [0133.551] wcscmp (_String1="UICaptions", _String2="..") returned 1 [0133.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe67e8 [0133.551] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\ProgramData\\Microsoft\\OFFICE" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE" [0133.551] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\" [0133.551] wcscat (in: _Dest=0x2fe67e8, _Source="UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0144.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0144.426] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0144.426] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0144.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b548) returned 1 [0144.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5fc8) returned 1 [0144.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9f58) returned 1 Thread: id = 197 os_tid = 0xbd4 [0130.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4188 [0130.919] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0130.919] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0130.919] wcscat (in: _Dest=0x3dc4188, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0130.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0130.919] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0132.516] wcscmp (_String1=".", _String2=".") returned 0 [0132.516] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.516] wcscmp (_String1="..", _String2=".") returned 1 [0132.516] wcscmp (_String1="..", _String2="..") returned 0 [0132.516] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0132.516] wcscmp (_String1="Cache", _String2=".") returned 1 [0132.516] wcscmp (_String1="Cache", _String2="..") returned 1 [0132.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e20438 [0132.516] wcscpy (in: _Dest=0x3e20438, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0132.516] wcscat (in: _Dest=0x3e20438, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0132.516] wcscat (in: _Dest=0x3e20438, _Source="Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0135.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e20438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0135.536] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0135.536] wcscmp (_String1="tokens.dat", _String2=".") returned 1 [0135.536] wcscmp (_String1="tokens.dat", _String2="..") returned 1 [0135.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a240 [0135.536] wcscpy (in: _Dest=0x3e2a240, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0135.536] wcscat (in: _Dest=0x3e2a240, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0135.536] wcscat (in: _Dest=0x3e2a240, _Source="tokens.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0135.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0135.537] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0135.537] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0135.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0135.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0135.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3f88) returned 1 Thread: id = 198 os_tid = 0xc34 [0130.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2acf0 [0130.920] wcscpy (in: _Dest=0x3e2acf0, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0130.920] wcscat (in: _Dest=0x3e2acf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0130.920] wcscat (in: _Dest=0x3e2acf0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*" [0130.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0130.920] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0132.513] wcscmp (_String1=".", _String2=".") returned 0 [0132.513] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.513] wcscmp (_String1="..", _String2=".") returned 1 [0132.513] wcscmp (_String1="..", _String2="..") returned 0 [0132.513] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0132.513] wcscmp (_String1="packages", _String2=".") returned 1 [0132.513] wcscmp (_String1="packages", _String2="..") returned 1 [0132.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d5d8 [0132.514] wcscpy (in: _Dest=0x3e2d5d8, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0132.514] wcscat (in: _Dest=0x3e2d5d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0132.514] wcscat (in: _Dest=0x3e2d5d8, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0135.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0135.528] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0135.528] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0135.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0135.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2acf0) returned 1 [0135.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 Thread: id = 199 os_tid = 0xc40 [0130.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e29f48 [0130.924] wcscpy (in: _Dest=0x3e29f48, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0130.925] wcscat (in: _Dest=0x3e29f48, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0130.925] wcscat (in: _Dest=0x3e29f48, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*" [0130.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0130.925] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37bd8 [0132.514] wcscmp (_String1=".", _String2=".") returned 0 [0132.514] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.514] wcscmp (_String1="..", _String2=".") returned 1 [0132.514] wcscmp (_String1="..", _String2="..") returned 0 [0132.514] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0132.514] wcscmp (_String1="packages", _String2=".") returned 1 [0132.514] wcscmp (_String1="packages", _String2="..") returned 1 [0132.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d680 [0132.514] wcscpy (in: _Dest=0x3e2d680, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0132.514] wcscat (in: _Dest=0x3e2d680, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0132.514] wcscat (in: _Dest=0x3e2d680, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0135.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0135.530] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0135.530] FindClose (in: hFindFile=0x3f37bd8 | out: hFindFile=0x3f37bd8) returned 1 [0135.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0135.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e29f48) returned 1 [0135.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a240) returned 1 Thread: id = 200 os_tid = 0xc38 [0130.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c2c8 [0130.926] wcscpy (in: _Dest=0x35c2c8, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0130.926] wcscat (in: _Dest=0x35c2c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0130.926] wcscat (in: _Dest=0x35c2c8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" [0130.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0130.926] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c18 [0132.515] wcscmp (_String1=".", _String2=".") returned 0 [0132.515] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.515] wcscmp (_String1="..", _String2=".") returned 1 [0132.515] wcscmp (_String1="..", _String2="..") returned 0 [0132.515] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0132.515] wcscmp (_String1="packages", _String2=".") returned 1 [0132.515] wcscmp (_String1="packages", _String2="..") returned 1 [0132.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff79f0 [0132.515] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0132.515] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0132.515] wcscat (in: _Dest=0x2ff79f0, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0135.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0135.534] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0135.534] FindClose (in: hFindFile=0x3f37c18 | out: hFindFile=0x3f37c18) returned 1 [0135.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0135.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c2c8) returned 1 [0135.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cf48) returned 1 Thread: id = 201 os_tid = 0xc3c [0130.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b1b0 [0130.927] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0130.927] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0130.927] wcscat (in: _Dest=0x3e2b1b0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" [0130.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b7b0 [0130.927] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37858 [0132.418] wcscmp (_String1=".", _String2=".") returned 0 [0132.418] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.418] wcscmp (_String1="..", _String2=".") returned 1 [0132.418] wcscmp (_String1="..", _String2="..") returned 0 [0132.418] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xcae8da20, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0132.418] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0132.418] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0132.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d530 [0132.418] wcscpy (in: _Dest=0x3e2d530, _Source="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0132.418] wcscat (in: _Dest=0x3e2d530, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0132.418] wcscat (in: _Dest=0x3e2d530, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0133.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0133.633] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0133.633] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0133.633] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0133.633] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0133.633] FindClose (in: hFindFile=0x3f37858 | out: hFindFile=0x3f37858) returned 1 [0133.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b7b0) returned 1 [0133.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 [0133.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2888) returned 1 Thread: id = 202 os_tid = 0xc28 [0130.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b718 [0130.928] wcscpy (in: _Dest=0x35b718, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0130.928] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0130.928] wcscat (in: _Dest=0x35b718, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*" [0130.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ba18 [0130.928] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0132.417] wcscmp (_String1=".", _String2=".") returned 0 [0132.417] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.417] wcscmp (_String1="..", _String2=".") returned 1 [0132.417] wcscmp (_String1="..", _String2="..") returned 0 [0132.417] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0132.418] wcscmp (_String1="packages", _String2=".") returned 1 [0132.418] wcscmp (_String1="packages", _String2="..") returned 1 [0132.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333528 [0132.418] wcscpy (in: _Dest=0x333528, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0132.418] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0132.418] wcscat (in: _Dest=0x333528, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0133.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0133.630] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0133.630] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0133.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ba18) returned 1 [0133.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 [0133.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cff0) returned 1 Thread: id = 203 os_tid = 0xc2c [0130.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b5b8 [0130.929] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0130.929] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0130.929] wcscat (in: _Dest=0x35b5b8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*" [0130.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0130.929] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0132.420] wcscmp (_String1=".", _String2=".") returned 0 [0132.420] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.420] wcscmp (_String1="..", _String2=".") returned 1 [0132.420] wcscmp (_String1="..", _String2="..") returned 0 [0132.420] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0132.420] wcscmp (_String1="packages", _String2=".") returned 1 [0132.420] wcscmp (_String1="packages", _String2="..") returned 1 [0132.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3329e8 [0132.420] wcscpy (in: _Dest=0x3329e8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0132.420] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0132.420] wcscat (in: _Dest=0x3329e8, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0133.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0133.637] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0133.637] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0133.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0133.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 [0133.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d098) returned 1 Thread: id = 204 os_tid = 0xc30 [0130.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35aa08 [0130.930] wcscpy (in: _Dest=0x35aa08, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0130.930] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0130.930] wcscat (in: _Dest=0x35aa08, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" [0130.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bee8 [0130.930] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0132.417] wcscmp (_String1=".", _String2=".") returned 0 [0132.417] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.417] wcscmp (_String1="..", _String2=".") returned 1 [0132.417] wcscmp (_String1="..", _String2="..") returned 0 [0132.417] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0132.417] wcscmp (_String1="packages", _String2=".") returned 1 [0132.417] wcscmp (_String1="packages", _String2="..") returned 1 [0132.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff63a8 [0132.417] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0132.417] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0132.417] wcscat (in: _Dest=0x2ff63a8, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0133.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0133.627] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0133.627] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0133.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bee8) returned 1 [0133.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 [0133.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d140) returned 1 Thread: id = 205 os_tid = 0xc00 [0130.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b7c8 [0130.931] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0130.931] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0130.931] wcscat (in: _Dest=0x35b7c8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" [0130.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0130.931] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37898 [0132.419] wcscmp (_String1=".", _String2=".") returned 0 [0132.419] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.419] wcscmp (_String1="..", _String2=".") returned 1 [0132.419] wcscmp (_String1="..", _String2="..") returned 0 [0132.419] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0132.419] wcscmp (_String1="packages", _String2=".") returned 1 [0132.419] wcscmp (_String1="packages", _String2="..") returned 1 [0132.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff62f0 [0132.419] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0132.419] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0132.419] wcscat (in: _Dest=0x2ff62f0, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0133.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0133.635] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0133.635] FindClose (in: hFindFile=0x3f37898 | out: hFindFile=0x3f37898) returned 1 [0133.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0133.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 [0133.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d1e8) returned 1 Thread: id = 206 os_tid = 0xbfc [0130.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ac58 [0130.932] wcscpy (in: _Dest=0x3e2ac58, _Source="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0130.932] wcscat (in: _Dest=0x3e2ac58, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0130.932] wcscat (in: _Dest=0x3e2ac58, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" [0130.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0130.932] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0132.416] wcscmp (_String1=".", _String2=".") returned 0 [0132.416] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.416] wcscmp (_String1="..", _String2=".") returned 1 [0132.416] wcscmp (_String1="..", _String2="..") returned 0 [0132.416] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb20410, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xd7101e80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0132.416] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0132.416] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0132.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d488 [0132.416] wcscpy (in: _Dest=0x3e2d488, _Source="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0132.416] wcscat (in: _Dest=0x3e2d488, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0132.416] wcscat (in: _Dest=0x3e2d488, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0133.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0133.624] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0133.624] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0133.624] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0133.624] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0133.624] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0133.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0133.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ac58) returned 1 [0133.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1d48) returned 1 Thread: id = 207 os_tid = 0x4bc [0130.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b378 [0130.933] wcscpy (in: _Dest=0x3e2b378, _Source="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0130.933] wcscat (in: _Dest=0x3e2b378, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0130.933] wcscat (in: _Dest=0x3e2b378, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*" [0130.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0130.933] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0132.415] wcscmp (_String1=".", _String2=".") returned 0 [0132.415] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.415] wcscmp (_String1="..", _String2=".") returned 1 [0132.415] wcscmp (_String1="..", _String2="..") returned 0 [0132.415] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe644ba0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x2fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0132.415] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0132.415] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0132.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d3e0 [0132.415] wcscpy (in: _Dest=0x3e2d3e0, _Source="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0132.415] wcscat (in: _Dest=0x3e2d3e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0132.415] wcscat (in: _Dest=0x3e2d3e0, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0133.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0133.621] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0133.622] wcscmp (_String1="VC_redist.x86.exe", _String2=".") returned 1 [0133.622] wcscmp (_String1="VC_redist.x86.exe", _String2="..") returned 1 [0133.622] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0133.622] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0133.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0133.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b378) returned 1 [0133.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2408) returned 1 Thread: id = 208 os_tid = 0xc68 [0130.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bbe8 [0130.934] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0130.934] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0130.934] wcscat (in: _Dest=0x35bbe8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*" [0130.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0130.934] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b58 [0132.512] wcscmp (_String1=".", _String2=".") returned 0 [0132.512] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.513] wcscmp (_String1="..", _String2=".") returned 1 [0132.513] wcscmp (_String1="..", _String2="..") returned 0 [0132.513] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0132.513] wcscmp (_String1="packages", _String2=".") returned 1 [0132.513] wcscmp (_String1="packages", _String2="..") returned 1 [0132.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6688 [0132.513] wcscpy (in: _Dest=0x2ff6688, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0132.513] wcscat (in: _Dest=0x2ff6688, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0132.513] wcscat (in: _Dest=0x2ff6688, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0138.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff6688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0138.958] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0138.958] FindClose (in: hFindFile=0x3f37b58 | out: hFindFile=0x3f37b58) returned 1 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d290) returned 1 Thread: id = 209 os_tid = 0xc78 [0130.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_client.xml")) returned 0x20 [0131.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", dwFileAttributes=0x20) returned 0 [0131.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.107] GetLastError () returned 0x5 [0131.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", dwFileAttributes=0x20) returned 0 [0131.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2378) returned 1 Thread: id = 210 os_tid = 0xc6c [0130.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 0x20 [0131.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", dwFileAttributes=0x20) returned 0 [0131.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.108] GetLastError () returned 0x5 [0131.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", dwFileAttributes=0x20) returned 0 [0131.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a2d8) returned 1 Thread: id = 211 os_tid = 0xc64 [0130.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4588 [0130.943] wcscpy (in: _Dest=0x3dc4588, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0130.943] wcscat (in: _Dest=0x3dc4588, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\" [0130.943] wcscat (in: _Dest=0x3dc4588, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*" [0130.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3caf0 [0130.943] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0050 [0130.943] wcscmp (_String1=".", _String2=".") returned 0 [0130.944] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.944] wcscmp (_String1="..", _String2=".") returned 1 [0130.944] wcscmp (_String1="..", _String2="..") returned 0 [0130.944] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1318c0b0, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x1318c0b0, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0130.944] wcscmp (_String1="v3.0", _String2=".") returned 1 [0130.944] wcscmp (_String1="v3.0", _String2="..") returned 1 [0130.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1fbb8 [0130.944] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0130.944] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\" [0130.944] wcscat (in: _Dest=0x3e1fbb8, _Source="v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0131.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0131.221] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0131.221] wcscmp (_String1="v3.5", _String2=".") returned 1 [0131.221] wcscmp (_String1="v3.5", _String2="..") returned 1 [0131.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ff70 [0131.222] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0131.222] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\" [0131.222] wcscat (in: _Dest=0x3e1ff70, _Source="v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0131.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0131.223] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0131.223] FindClose (in: hFindFile=0x3dd0050 | out: hFindFile=0x3dd0050) returned 1 [0131.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3caf0) returned 1 [0131.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4588) returned 1 [0131.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 Thread: id = 212 os_tid = 0xc20 [0130.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf390 [0130.945] wcscpy (in: _Dest=0x3dcf390, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0130.945] wcscat (in: _Dest=0x3dcf390, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0130.945] wcscat (in: _Dest=0x3dcf390, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\*") returned="C:\\Users\\Default\\AppData\\*" [0130.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cd58 [0130.945] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0130.946] wcscmp (_String1=".", _String2=".") returned 0 [0130.946] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.946] wcscmp (_String1="..", _String2=".") returned 1 [0130.946] wcscmp (_String1="..", _String2="..") returned 0 [0130.946] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x79a6290, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c717c5e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0130.947] wcscmp (_String1="Local", _String2=".") returned 1 [0130.947] wcscmp (_String1="Local", _String2="..") returned 1 [0130.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e69db0 [0130.947] wcscpy (in: _Dest=0x3e69db0, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0130.947] wcscat (in: _Dest=0x3e69db0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0130.947] wcscat (in: _Dest=0x3e69db0, _Source="Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0131.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e69db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0131.324] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0131.324] wcscmp (_String1="LocalLow", _String2=".") returned 1 [0131.324] wcscmp (_String1="LocalLow", _String2="..") returned 1 [0131.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de69c8 [0131.324] wcscpy (in: _Dest=0x3de69c8, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0131.324] wcscat (in: _Dest=0x3de69c8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0131.324] wcscat (in: _Dest=0x3de69c8, _Source="LocalLow" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow" [0131.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de69c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0131.326] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0131.326] wcscmp (_String1="Roaming", _String2=".") returned 1 [0131.326] wcscmp (_String1="Roaming", _String2="..") returned 1 [0131.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6608 [0131.327] wcscpy (in: _Dest=0x3de6608, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0131.327] wcscat (in: _Dest=0x3de6608, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0131.327] wcscat (in: _Dest=0x3de6608, _Source="Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0131.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0131.328] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0131.328] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd58) returned 1 [0131.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf390) returned 1 [0131.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b40) returned 1 Thread: id = 213 os_tid = 0xc7c [0130.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6158 [0130.948] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Users\\Default\\Application Data" | out: _Dest="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data" [0130.948] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Users\\Default\\Application Data\\") returned="C:\\Users\\Default\\Application Data\\" [0130.948] wcscat (in: _Dest=0x3de6158, _Source="*" | out: _Dest="C:\\Users\\Default\\Application Data\\*") returned="C:\\Users\\Default\\Application Data\\*" [0130.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0130.948] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0130.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 [0130.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6018) returned 1 Thread: id = 214 os_tid = 0xc1c [0130.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcff50 [0130.950] wcscpy (in: _Dest=0x3dcff50, _Source="C:\\Users\\Default\\Contacts" | out: _Dest="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts" [0130.950] wcscat (in: _Dest=0x3dcff50, _Source="\\" | out: _Dest="C:\\Users\\Default\\Contacts\\") returned="C:\\Users\\Default\\Contacts\\" [0130.950] wcscat (in: _Dest=0x3dcff50, _Source="*" | out: _Dest="C:\\Users\\Default\\Contacts\\*") returned="C:\\Users\\Default\\Contacts\\*" [0130.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0130.950] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0130.951] wcscmp (_String1=".", _String2=".") returned 0 [0130.951] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.952] wcscmp (_String1="..", _String2=".") returned 1 [0130.952] wcscmp (_String1="..", _String2="..") returned 0 [0130.952] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x1ff8a75a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0130.952] wcscmp (_String1="Administrator.contact", _String2=".") returned 1 [0130.952] wcscmp (_String1="Administrator.contact", _String2="..") returned 1 [0130.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd0d0 [0130.952] wcscpy (in: _Dest=0x3ecd0d0, _Source="C:\\Users\\Default\\Contacts" | out: _Dest="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts" [0130.952] wcscat (in: _Dest=0x3ecd0d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Contacts\\") returned="C:\\Users\\Default\\Contacts\\" [0130.952] wcscat (in: _Dest=0x3ecd0d0, _Source="Administrator.contact" | out: _Dest="C:\\Users\\Default\\Contacts\\Administrator.contact") returned="C:\\Users\\Default\\Contacts\\Administrator.contact" [0131.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ecd0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0131.227] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.227] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.227] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.227] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0131.227] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0131.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0131.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcff50) returned 1 [0131.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e80) returned 1 Thread: id = 215 os_tid = 0xb1c [0130.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd00d0 [0130.955] wcscpy (in: _Dest=0x3dd00d0, _Source="C:\\Users\\Default\\Cookies" | out: _Dest="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies" [0130.955] wcscat (in: _Dest=0x3dd00d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Cookies\\") returned="C:\\Users\\Default\\Cookies\\" [0130.955] wcscat (in: _Dest=0x3dd00d0, _Source="*" | out: _Dest="C:\\Users\\Default\\Cookies\\*") returned="C:\\Users\\Default\\Cookies\\*" [0130.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d228 [0130.955] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d228) returned 1 [0130.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd00d0) returned 1 [0130.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f00) returned 1 Thread: id = 216 os_tid = 0xb18 [0130.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066f00 [0130.962] wcscpy (in: _Dest=0x3066f00, _Source="C:\\Users\\Default\\Desktop" | out: _Dest="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop" [0130.962] wcscat (in: _Dest=0x3066f00, _Source="\\" | out: _Dest="C:\\Users\\Default\\Desktop\\") returned="C:\\Users\\Default\\Desktop\\" [0130.962] wcscat (in: _Dest=0x3066f00, _Source="*" | out: _Dest="C:\\Users\\Default\\Desktop\\*") returned="C:\\Users\\Default\\Desktop\\*" [0130.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d228 [0130.962] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd00d0 [0130.963] wcscmp (_String1=".", _String2=".") returned 0 [0130.963] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.963] wcscmp (_String1="..", _String2=".") returned 1 [0130.963] wcscmp (_String1="..", _String2="..") returned 0 [0130.963] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.963] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0130.963] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0130.963] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0130.963] FindClose (in: hFindFile=0x3dd00d0 | out: hFindFile=0x3dd00d0) returned 1 [0130.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d228) returned 1 [0130.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f00) returned 1 [0130.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066dc0) returned 1 Thread: id = 217 os_tid = 0xb14 [0130.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e50d10 [0130.967] wcscpy (in: _Dest=0x3e50d10, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0130.967] wcscat (in: _Dest=0x3e50d10, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0130.967] wcscat (in: _Dest=0x3e50d10, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\*") returned="C:\\Users\\Default\\Documents\\*" [0130.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d228 [0130.967] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0130.969] wcscmp (_String1=".", _String2=".") returned 0 [0130.970] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.970] wcscmp (_String1="..", _String2=".") returned 1 [0130.970] wcscmp (_String1="..", _String2="..") returned 0 [0130.970] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.970] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0130.970] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0130.970] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0130.970] wcscmp (_String1="My Music", _String2=".") returned 1 [0130.970] wcscmp (_String1="My Music", _String2="..") returned 1 [0130.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6018 [0130.970] wcscpy (in: _Dest=0x3de6018, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0130.970] wcscat (in: _Dest=0x3de6018, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0130.970] wcscat (in: _Dest=0x3de6018, _Source="My Music" | out: _Dest="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music" [0131.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0131.241] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0131.241] wcscmp (_String1="My Pictures", _String2=".") returned 1 [0131.241] wcscmp (_String1="My Pictures", _String2="..") returned 1 [0131.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f0b8 [0131.241] wcscpy (in: _Dest=0x3e0f0b8, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0131.241] wcscat (in: _Dest=0x3e0f0b8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0131.241] wcscat (in: _Dest=0x3e0f0b8, _Source="My Pictures" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures" [0131.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0131.243] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0131.243] wcscmp (_String1="My Videos", _String2=".") returned 1 [0131.243] wcscmp (_String1="My Videos", _String2="..") returned 1 [0131.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6ecd0 [0131.243] wcscpy (in: _Dest=0x3e6ecd0, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0131.243] wcscat (in: _Dest=0x3e6ecd0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0131.243] wcscat (in: _Dest=0x3e6ecd0, _Source="My Videos" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos" [0131.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ecd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0131.251] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0131.251] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0131.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d228) returned 1 [0131.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50d10) returned 1 [0131.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e40) returned 1 Thread: id = 218 os_tid = 0xb10 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e50c80 [0130.974] wcscpy (in: _Dest=0x3e50c80, _Source="C:\\Users\\Default\\Downloads" | out: _Dest="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads" [0130.974] wcscat (in: _Dest=0x3e50c80, _Source="\\" | out: _Dest="C:\\Users\\Default\\Downloads\\") returned="C:\\Users\\Default\\Downloads\\" [0130.974] wcscat (in: _Dest=0x3e50c80, _Source="*" | out: _Dest="C:\\Users\\Default\\Downloads\\*") returned="C:\\Users\\Default\\Downloads\\*" [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d490 [0130.974] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0130.974] wcscmp (_String1=".", _String2=".") returned 0 [0130.974] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.975] wcscmp (_String1="..", _String2=".") returned 1 [0130.975] wcscmp (_String1="..", _String2="..") returned 0 [0130.975] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.975] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0130.975] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0130.975] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0130.975] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d490) returned 1 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50c80) returned 1 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e00) returned 1 Thread: id = 219 os_tid = 0xb84 [0130.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e50c80 [0130.981] wcscpy (in: _Dest=0x3e50c80, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0130.982] wcscat (in: _Dest=0x3e50c80, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0130.982] wcscat (in: _Dest=0x3e50c80, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\*") returned="C:\\Users\\Default\\Favorites\\*" [0130.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d490 [0130.982] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc9288 [0131.110] wcscmp (_String1=".", _String2=".") returned 0 [0131.110] FindNextFileW (in: hFindFile=0x2fc9288, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.110] wcscmp (_String1="..", _String2=".") returned 1 [0131.110] wcscmp (_String1="..", _String2="..") returned 0 [0131.110] FindNextFileW (in: hFindFile=0x2fc9288, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.110] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.110] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.110] FindNextFileW (in: hFindFile=0x2fc9288, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299394d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0131.110] wcscmp (_String1="Links", _String2=".") returned 1 [0131.110] wcscmp (_String1="Links", _String2="..") returned 1 [0131.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6158 [0131.111] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0131.111] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0131.111] wcscat (in: _Dest=0x3de6158, _Source="Links" | out: _Dest="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links" [0143.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0143.496] FindNextFileW (in: hFindFile=0x2fc9288, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7614190, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0143.496] wcscmp (_String1="Microsoft Websites", _String2=".") returned 1 [0143.496] wcscmp (_String1="Microsoft Websites", _String2="..") returned 1 [0143.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e418 [0143.497] wcscpy (in: _Dest=0x3d8e418, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0143.497] wcscat (in: _Dest=0x3d8e418, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0143.497] wcscat (in: _Dest=0x3d8e418, _Source="Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0143.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0143.498] FindNextFileW (in: hFindFile=0x2fc9288, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0143.498] wcscmp (_String1="MSN Websites", _String2=".") returned 1 [0143.498] wcscmp (_String1="MSN Websites", _String2="..") returned 1 [0143.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ecd0 [0143.498] wcscpy (in: _Dest=0x3e6ecd0, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0143.498] wcscat (in: _Dest=0x3e6ecd0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0143.498] wcscat (in: _Dest=0x3e6ecd0, _Source="MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0143.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ecd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0143.499] FindNextFileW (in: hFindFile=0x2fc9288, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0143.499] wcscmp (_String1="Windows Live", _String2=".") returned 1 [0143.499] wcscmp (_String1="Windows Live", _String2="..") returned 1 [0143.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6f148 [0143.499] wcscpy (in: _Dest=0x3e6f148, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0143.499] wcscat (in: _Dest=0x3e6f148, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0143.499] wcscat (in: _Dest=0x3e6f148, _Source="Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0143.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6f148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0143.500] FindNextFileW (in: hFindFile=0x2fc9288, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0143.500] FindClose (in: hFindFile=0x2fc9288 | out: hFindFile=0x2fc9288) returned 1 [0143.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d490) returned 1 [0143.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50c80) returned 1 [0143.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d40) returned 1 Thread: id = 220 os_tid = 0xc84 [0130.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066e00 [0130.987] wcscpy (in: _Dest=0x3066e00, _Source="C:\\Users\\Default\\Links" | out: _Dest="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links" [0130.987] wcscat (in: _Dest=0x3066e00, _Source="\\" | out: _Dest="C:\\Users\\Default\\Links\\") returned="C:\\Users\\Default\\Links\\" [0130.987] wcscat (in: _Dest=0x3066e00, _Source="*" | out: _Dest="C:\\Users\\Default\\Links\\*") returned="C:\\Users\\Default\\Links\\*" [0130.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0130.988] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0131.968] wcscmp (_String1=".", _String2=".") returned 0 [0131.968] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.968] wcscmp (_String1="..", _String2=".") returned 1 [0131.968] wcscmp (_String1="..", _String2="..") returned 0 [0131.968] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.969] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.969] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.969] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28087067, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0131.969] wcscmp (_String1="Desktop.lnk", _String2=".") returned 1 [0131.969] wcscmp (_String1="Desktop.lnk", _String2="..") returned 1 [0131.969] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280d3328, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0131.969] wcscmp (_String1="Downloads.lnk", _String2=".") returned 1 [0131.969] wcscmp (_String1="Downloads.lnk", _String2="..") returned 1 [0131.969] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28087067, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0131.969] wcscmp (_String1="RecentPlaces.lnk", _String2=".") returned 1 [0131.969] wcscmp (_String1="RecentPlaces.lnk", _String2="..") returned 1 [0131.969] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28087067, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0131.969] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0131.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0131.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e00) returned 1 [0131.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 Thread: id = 221 os_tid = 0xb80 [0130.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6158 [0130.990] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Users\\Default\\Local Settings" | out: _Dest="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings" [0130.990] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Users\\Default\\Local Settings\\") returned="C:\\Users\\Default\\Local Settings\\" [0130.990] wcscat (in: _Dest=0x3de6158, _Source="*" | out: _Dest="C:\\Users\\Default\\Local Settings\\*") returned="C:\\Users\\Default\\Local Settings\\*" [0130.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0130.990] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0130.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 [0130.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a788) returned 1 Thread: id = 222 os_tid = 0xb70 [0130.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066f00 [0130.995] wcscpy (in: _Dest=0x3066f00, _Source="C:\\Users\\Default\\Music" | out: _Dest="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music" [0130.996] wcscat (in: _Dest=0x3066f00, _Source="\\" | out: _Dest="C:\\Users\\Default\\Music\\") returned="C:\\Users\\Default\\Music\\" [0130.996] wcscat (in: _Dest=0x3066f00, _Source="*" | out: _Dest="C:\\Users\\Default\\Music\\*") returned="C:\\Users\\Default\\Music\\*" [0130.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0130.996] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0131.112] wcscmp (_String1=".", _String2=".") returned 0 [0131.112] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.112] wcscmp (_String1="..", _String2=".") returned 1 [0131.112] wcscmp (_String1="..", _String2="..") returned 0 [0131.112] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.112] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.113] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.113] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0131.113] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0131.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0131.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f00) returned 1 [0131.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79f8) returned 1 Thread: id = 223 os_tid = 0xb78 [0131.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50de8 [0131.001] wcscpy (in: _Dest=0x3e50de8, _Source="C:\\Users\\Default\\My Documents" | out: _Dest="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents" [0131.001] wcscat (in: _Dest=0x3e50de8, _Source="\\" | out: _Dest="C:\\Users\\Default\\My Documents\\") returned="C:\\Users\\Default\\My Documents\\" [0131.001] wcscat (in: _Dest=0x3e50de8, _Source="*" | out: _Dest="C:\\Users\\Default\\My Documents\\*") returned="C:\\Users\\Default\\My Documents\\*" [0131.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0131.002] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0131.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50de8) returned 1 [0131.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a8f0) returned 1 Thread: id = 224 os_tid = 0xb7c [0131.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd00d0 [0131.005] wcscpy (in: _Dest=0x3dd00d0, _Source="C:\\Users\\Default\\NetHood" | out: _Dest="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood" [0131.005] wcscat (in: _Dest=0x3dd00d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\NetHood\\") returned="C:\\Users\\Default\\NetHood\\" [0131.005] wcscat (in: _Dest=0x3dd00d0, _Source="*" | out: _Dest="C:\\Users\\Default\\NetHood\\*") returned="C:\\Users\\Default\\NetHood\\*" [0131.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0131.005] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0131.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd00d0) returned 1 [0131.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b00) returned 1 Thread: id = 225 os_tid = 0xb68 [0131.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066b00 [0131.009] wcscpy (in: _Dest=0x3066b00, _Source="C:\\Users\\Default\\Pictures" | out: _Dest="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures" [0131.009] wcscat (in: _Dest=0x3066b00, _Source="\\" | out: _Dest="C:\\Users\\Default\\Pictures\\") returned="C:\\Users\\Default\\Pictures\\" [0131.009] wcscat (in: _Dest=0x3066b00, _Source="*" | out: _Dest="C:\\Users\\Default\\Pictures\\*") returned="C:\\Users\\Default\\Pictures\\*" [0131.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0131.010] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0131.114] wcscmp (_String1=".", _String2=".") returned 0 [0131.114] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.114] wcscmp (_String1="..", _String2=".") returned 1 [0131.114] wcscmp (_String1="..", _String2="..") returned 0 [0131.114] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.114] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.115] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.115] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0131.115] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0131.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0131.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b00) returned 1 [0131.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d80) returned 1 Thread: id = 226 os_tid = 0xb64 [0131.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e51190 [0131.015] wcscpy (in: _Dest=0x3e51190, _Source="C:\\Users\\Default\\PrintHood" | out: _Dest="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood" [0131.015] wcscat (in: _Dest=0x3e51190, _Source="\\" | out: _Dest="C:\\Users\\Default\\PrintHood\\") returned="C:\\Users\\Default\\PrintHood\\" [0131.016] wcscat (in: _Dest=0x3e51190, _Source="*" | out: _Dest="C:\\Users\\Default\\PrintHood\\*") returned="C:\\Users\\Default\\PrintHood\\*" [0131.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0131.016] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0131.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0131.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 Thread: id = 227 os_tid = 0xb0c [0131.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067040 [0131.018] wcscpy (in: _Dest=0x3067040, _Source="C:\\Users\\Default\\Recent" | out: _Dest="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent" [0131.018] wcscat (in: _Dest=0x3067040, _Source="\\" | out: _Dest="C:\\Users\\Default\\Recent\\") returned="C:\\Users\\Default\\Recent\\" [0131.019] wcscat (in: _Dest=0x3067040, _Source="*" | out: _Dest="C:\\Users\\Default\\Recent\\*") returned="C:\\Users\\Default\\Recent\\*" [0131.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0131.019] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0131.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 [0131.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7988) returned 1 Thread: id = 228 os_tid = 0x5d4 [0131.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e50ba8 [0131.119] wcscpy (in: _Dest=0x3e50ba8, _Source="C:\\Users\\Default\\Saved Games" | out: _Dest="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games" [0131.119] wcscat (in: _Dest=0x3e50ba8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Saved Games\\") returned="C:\\Users\\Default\\Saved Games\\" [0131.119] wcscat (in: _Dest=0x3e50ba8, _Source="*" | out: _Dest="C:\\Users\\Default\\Saved Games\\*") returned="C:\\Users\\Default\\Saved Games\\*" [0131.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0131.119] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0131.120] wcscmp (_String1=".", _String2=".") returned 0 [0131.120] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.120] wcscmp (_String1="..", _String2=".") returned 1 [0131.120] wcscmp (_String1="..", _String2="..") returned 0 [0131.120] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.120] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.120] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.120] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0131.120] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0131.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0131.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50ba8) returned 1 [0131.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a158) returned 1 Thread: id = 229 os_tid = 0xadc [0131.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4688 [0131.121] wcscpy (in: _Dest=0x3dc4688, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0131.121] wcscat (in: _Dest=0x3dc4688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" [0131.121] wcscat (in: _Dest=0x3dc4688, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*" [0131.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0131.122] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0131.991] wcscmp (_String1=".", _String2=".") returned 0 [0131.991] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.991] wcscmp (_String1="..", _String2=".") returned 1 [0131.991] wcscmp (_String1="..", _String2="..") returned 0 [0131.991] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76724eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85cc4cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0131.991] wcscmp (_String1="Cartridges", _String2=".") returned 1 [0131.991] wcscmp (_String1="Cartridges", _String2="..") returned 1 [0131.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355290 [0131.991] wcscpy (in: _Dest=0x355290, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0131.992] wcscat (in: _Dest=0x355290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" [0131.992] wcscat (in: _Dest=0x355290, _Source="Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0133.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x355290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0133.766] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa3f4b00, ftCreationTime.dwHighDateTime=0x1ca2cc3, ftLastAccessTime.dwLowDateTime=0x7693a1f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaa3f4b00, ftLastWriteTime.dwHighDateTime=0x1ca2cc3, nFileSizeHigh=0x0, nFileSizeLow=0x1663968, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0133.766] wcscmp (_String1="msmdlocal.dll", _String2=".") returned 1 [0133.767] wcscmp (_String1="msmdlocal.dll", _String2="..") returned 1 [0133.767] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4f9e000, ftCreationTime.dwHighDateTime=0x1ca2cc3, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4f9e000, ftLastWriteTime.dwHighDateTime=0x1ca2cc3, nFileSizeHigh=0x0, nFileSizeLow=0x82b958, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0133.767] wcscmp (_String1="msmgdsrv.dll", _String2=".") returned 1 [0133.767] wcscmp (_String1="msmgdsrv.dll", _String2="..") returned 1 [0133.767] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb62b0d00, ftCreationTime.dwHighDateTime=0x1ca2cc3, ftLastAccessTime.dwLowDateTime=0x85d5d250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb62b0d00, ftLastWriteTime.dwHighDateTime=0x1ca2cc3, nFileSizeHigh=0x0, nFileSizeLow=0x63bb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0133.767] wcscmp (_String1="msolap100.dll", _String2=".") returned 1 [0133.767] wcscmp (_String1="msolap100.dll", _String2="..") returned 1 [0133.767] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970e2800, ftCreationTime.dwHighDateTime=0x1c8e244, ftLastAccessTime.dwLowDateTime=0x76960350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x970e2800, ftLastWriteTime.dwHighDateTime=0x1c8e244, nFileSizeHigh=0x0, nFileSizeLow=0x43618, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0133.767] wcscmp (_String1="msolui100.dll", _String2=".") returned 1 [0133.767] wcscmp (_String1="msolui100.dll", _String2="..") returned 1 [0133.767] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0133.767] wcscmp (_String1="Resources", _String2=".") returned 1 [0133.767] wcscmp (_String1="Resources", _String2="..") returned 1 [0133.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x355dd0 [0133.767] wcscpy (in: _Dest=0x355dd0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0133.767] wcscat (in: _Dest=0x355dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" [0133.767] wcscat (in: _Dest=0x355dd0, _Source="Resources" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" [0133.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x355dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40 [0133.769] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0 [0133.769] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0133.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0133.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4688) returned 1 [0133.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4088) returned 1 Thread: id = 230 os_tid = 0xb0 [0131.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1fc40 [0131.124] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" [0131.124] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\" [0131.124] wcscat (in: _Dest=0x3e1fc40, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*" [0131.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0131.124] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0131.125] wcscmp (_String1=".", _String2=".") returned 0 [0131.125] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.125] wcscmp (_String1="..", _String2=".") returned 1 [0131.125] wcscmp (_String1="..", _String2="..") returned 0 [0131.125] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0131.125] wcscmp (_String1="1033", _String2=".") returned 1 [0131.125] wcscmp (_String1="1033", _String2="..") returned 1 [0131.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2378 [0131.125] wcscpy (in: _Dest=0x3df2378, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" [0131.125] wcscat (in: _Dest=0x3df2378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\" [0131.125] wcscat (in: _Dest=0x3df2378, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" [0131.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df2378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0131.263] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0131.263] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0131.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0131.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 [0131.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20a98) returned 1 Thread: id = 231 os_tid = 0x1c4 [0131.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4608 [0131.126] wcscpy (in: _Dest=0x3dc4608, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" [0131.126] wcscat (in: _Dest=0x3dc4608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\" [0131.126] wcscat (in: _Dest=0x3dc4608, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*" [0131.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0131.126] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0131.126] wcscmp (_String1=".", _String2=".") returned 0 [0131.126] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.126] wcscmp (_String1="..", _String2=".") returned 1 [0131.126] wcscmp (_String1="..", _String2="..") returned 0 [0131.126] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0131.126] wcscmp (_String1="x86", _String2=".") returned 1 [0131.126] wcscmp (_String1="x86", _String2="..") returned 1 [0131.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5608 [0131.126] wcscpy (in: _Dest=0x3dc5608, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" [0131.126] wcscat (in: _Dest=0x3dc5608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\" [0131.126] wcscat (in: _Dest=0x3dc5608, _Source="x86" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" [0131.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0131.265] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0131.265] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0131.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0131.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4608) returned 1 [0131.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 Thread: id = 232 os_tid = 0x7fc [0131.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x355dd0 [0131.127] wcscpy (in: _Dest=0x355dd0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0131.127] wcscat (in: _Dest=0x355dd0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\" [0131.127] wcscat (in: _Dest=0x355dd0, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*" [0131.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3e098 [0131.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0131.127] wcscmp (_String1=".", _String2=".") returned 0 [0131.127] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.128] wcscmp (_String1="..", _String2=".") returned 1 [0131.128] wcscmp (_String1="..", _String2="..") returned 0 [0131.128] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0131.128] wcscmp (_String1="v3.0", _String2=".") returned 1 [0131.128] wcscmp (_String1="v3.0", _String2="..") returned 1 [0131.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3550e0 [0131.128] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0131.128] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\" [0131.128] wcscat (in: _Dest=0x3550e0, _Source="v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0131.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0131.272] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0131.272] wcscmp (_String1="v3.5", _String2=".") returned 1 [0131.272] wcscmp (_String1="v3.5", _String2="..") returned 1 [0131.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355290 [0131.273] wcscpy (in: _Dest=0x355290, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0131.273] wcscat (in: _Dest=0x355290, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\" [0131.273] wcscat (in: _Dest=0x355290, _Source="v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0131.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x355290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0131.274] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0131.274] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0131.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e098) returned 1 [0131.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355dd0) returned 1 [0131.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20438) returned 1 Thread: id = 233 os_tid = 0xc94 [0131.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e54848 [0131.128] wcscpy (in: _Dest=0x3e54848, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0131.128] wcscat (in: _Dest=0x3e54848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0131.128] wcscat (in: _Dest=0x3e54848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\*") returned="C:\\Users\\EEBsYm5\\AppData\\*" [0131.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0131.129] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0131.129] wcscmp (_String1=".", _String2=".") returned 0 [0131.129] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.129] wcscmp (_String1="..", _String2=".") returned 1 [0131.129] wcscmp (_String1="..", _String2="..") returned 0 [0131.129] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0131.129] wcscmp (_String1="Local", _String2=".") returned 1 [0131.129] wcscmp (_String1="Local", _String2="..") returned 1 [0131.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e50f08 [0131.129] wcscpy (in: _Dest=0x3e50f08, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0131.129] wcscat (in: _Dest=0x3e50f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0131.129] wcscat (in: _Dest=0x3e50f08, _Source="Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e50f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0131.417] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0131.417] wcscmp (_String1="LocalLow", _String2=".") returned 1 [0131.417] wcscmp (_String1="LocalLow", _String2="..") returned 1 [0131.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6658 [0131.417] wcscpy (in: _Dest=0x3de6658, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0131.417] wcscat (in: _Dest=0x3de6658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0131.417] wcscat (in: _Dest=0x3de6658, _Source="LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0131.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0131.421] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ef6a280, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ef6a280, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0131.421] wcscmp (_String1="Roaming", _String2=".") returned 1 [0131.421] wcscmp (_String1="Roaming", _String2="..") returned 1 [0131.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6a68 [0131.421] wcscpy (in: _Dest=0x3de6a68, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0131.421] wcscat (in: _Dest=0x3de6a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0131.421] wcscat (in: _Dest=0x3de6a68, _Source="Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0131.423] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ef6a280, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ef6a280, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0131.423] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0131.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0131.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 [0131.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067180) returned 1 Thread: id = 234 os_tid = 0xde0 [0131.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6518 [0131.130] wcscpy (in: _Dest=0x3de6518, _Source="C:\\Users\\EEBsYm5\\Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data") returned="C:\\Users\\EEBsYm5\\Application Data" [0131.130] wcscat (in: _Dest=0x3de6518, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data\\") returned="C:\\Users\\EEBsYm5\\Application Data\\" [0131.130] wcscat (in: _Dest=0x3de6518, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data\\*") returned="C:\\Users\\EEBsYm5\\Application Data\\*" [0131.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84e08 [0131.130] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Application Data\\*", lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e08) returned 1 [0131.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6518) returned 1 [0131.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5f78) returned 1 Thread: id = 235 os_tid = 0xde4 [0131.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f37498 [0131.132] wcscpy (in: _Dest=0x3f37498, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0131.132] wcscat (in: _Dest=0x3f37498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0131.132] wcscat (in: _Dest=0x3f37498, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\*") returned="C:\\Users\\EEBsYm5\\Contacts\\*" [0131.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84e08 [0131.132] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Contacts\\*", lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f374d8 [0131.132] wcscmp (_String1=".", _String2=".") returned 0 [0131.132] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.132] wcscmp (_String1="..", _String2=".") returned 1 [0131.132] wcscmp (_String1="..", _String2="..") returned 0 [0131.132] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1ff8a75a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0131.132] wcscmp (_String1="Administrator.contact", _String2=".") returned 1 [0131.132] wcscmp (_String1="Administrator.contact", _String2="..") returned 1 [0131.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bd80 [0131.133] wcscpy (in: _Dest=0x3d8bd80, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0131.133] wcscat (in: _Dest=0x3d8bd80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0131.133] wcscat (in: _Dest=0x3d8bd80, _Source="Administrator.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" [0131.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8bd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0131.277] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.277] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.277] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.277] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a55460, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x56a55460, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x56a55460, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ihnvbh euuncnh.contact", cAlternateFileName="IHNVBH~1.CON")) returned 1 [0131.277] wcscmp (_String1="ihnvbh euuncnh.contact", _String2=".") returned 1 [0131.277] wcscmp (_String1="ihnvbh euuncnh.contact", _String2="..") returned 1 [0131.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff52b0 [0131.277] wcscpy (in: _Dest=0x2ff52b0, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0131.277] wcscat (in: _Dest=0x2ff52b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0131.277] wcscat (in: _Dest=0x2ff52b0, _Source="ihnvbh euuncnh.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" [0131.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff52b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0131.278] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abb8cc0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lodkd auftnm.contact", cAlternateFileName="LODKDA~1.CON")) returned 1 [0131.278] wcscmp (_String1="lodkd auftnm.contact", _String2=".") returned 1 [0131.278] wcscmp (_String1="lodkd auftnm.contact", _String2="..") returned 1 [0131.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ce28 [0131.278] wcscpy (in: _Dest=0x3d8ce28, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0131.278] wcscat (in: _Dest=0x3d8ce28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0131.279] wcscat (in: _Dest=0x3d8ce28, _Source="lodkd auftnm.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" [0131.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8ce28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0131.280] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4ad560, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x6c4ad560, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x6c4ad560, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="mneuc uhnfghgg.contact", cAlternateFileName="MNEUCU~1.CON")) returned 1 [0131.280] wcscmp (_String1="mneuc uhnfghgg.contact", _String2=".") returned 1 [0131.280] wcscmp (_String1="mneuc uhnfghgg.contact", _String2="..") returned 1 [0131.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5400 [0131.280] wcscpy (in: _Dest=0x2ff5400, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0131.280] wcscat (in: _Dest=0x2ff5400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0131.280] wcscat (in: _Dest=0x2ff5400, _Source="mneuc uhnfghgg.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" [0131.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0131.282] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25458f20, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x25458f20, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x25458f20, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ofhbnh edferrr.contact", cAlternateFileName="OFHBNH~1.CON")) returned 1 [0131.282] wcscmp (_String1="ofhbnh edferrr.contact", _String2=".") returned 1 [0131.282] wcscmp (_String1="ofhbnh edferrr.contact", _String2="..") returned 1 [0131.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5390 [0131.283] wcscpy (in: _Dest=0x2ff5390, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0131.283] wcscat (in: _Dest=0x2ff5390, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0131.283] wcscat (in: _Dest=0x2ff5390, _Source="ofhbnh edferrr.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" [0131.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0131.284] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3beee70, ftCreationTime.dwHighDateTime=0x1d2fb2e, ftLastAccessTime.dwLowDateTime=0xe3beee70, ftLastAccessTime.dwHighDateTime=0x1d2fb2e, ftLastWriteTime.dwLowDateTime=0xe3beee70, ftLastWriteTime.dwHighDateTime=0x1d2fb2e, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="uosjfl sidvllie.contact", cAlternateFileName="UOSJFL~1.CON")) returned 1 [0131.284] wcscmp (_String1="uosjfl sidvllie.contact", _String2=".") returned 1 [0131.284] wcscmp (_String1="uosjfl sidvllie.contact", _String2="..") returned 1 [0131.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5470 [0131.285] wcscpy (in: _Dest=0x2ff5470, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0131.285] wcscat (in: _Dest=0x2ff5470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0131.285] wcscat (in: _Dest=0x2ff5470, _Source="uosjfl sidvllie.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" [0131.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0131.292] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3beee70, ftCreationTime.dwHighDateTime=0x1d2fb2e, ftLastAccessTime.dwLowDateTime=0xe3beee70, ftLastAccessTime.dwHighDateTime=0x1d2fb2e, ftLastWriteTime.dwLowDateTime=0xe3beee70, ftLastWriteTime.dwHighDateTime=0x1d2fb2e, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="uosjfl sidvllie.contact", cAlternateFileName="UOSJFL~1.CON")) returned 0 [0131.292] FindClose (in: hFindFile=0x3f374d8 | out: hFindFile=0x3f374d8) returned 1 [0131.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e08) returned 1 [0131.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37498) returned 1 [0131.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066ec0) returned 1 Thread: id = 236 os_tid = 0xc10 [0131.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37518 [0131.133] wcscpy (in: _Dest=0x3f37518, _Source="C:\\Users\\EEBsYm5\\Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies") returned="C:\\Users\\EEBsYm5\\Cookies" [0131.133] wcscat (in: _Dest=0x3f37518, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies\\") returned="C:\\Users\\EEBsYm5\\Cookies\\" [0131.133] wcscat (in: _Dest=0x3f37518, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies\\*") returned="C:\\Users\\EEBsYm5\\Cookies\\*" [0131.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86880 [0131.133] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Cookies\\*", lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86880) returned 1 [0131.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37518) returned 1 [0131.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30670c0) returned 1 Thread: id = 237 os_tid = 0xc0c [0131.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x30670c0 [0131.135] wcscpy (in: _Dest=0x30670c0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0131.135] wcscat (in: _Dest=0x30670c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0131.135] wcscat (in: _Dest=0x30670c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\*" [0131.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86880 [0131.135] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\*", lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xc1132300, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc1132300, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0131.135] wcscmp (_String1=".", _String2=".") returned 0 [0131.136] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xc1132300, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc1132300, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.136] wcscmp (_String1="..", _String2=".") returned 1 [0131.136] wcscmp (_String1="..", _String2="..") returned 0 [0131.136] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaac8fc20, ftCreationTime.dwHighDateTime=0x1d5e53a, ftLastAccessTime.dwLowDateTime=0x3124c800, ftLastAccessTime.dwHighDateTime=0x1d5e50c, ftLastWriteTime.dwLowDateTime=0x3124c800, ftLastWriteTime.dwHighDateTime=0x1d5e50c, nFileSizeHigh=0x0, nFileSizeLow=0x58a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="08gmEEOGW.gif", cAlternateFileName="08GMEE~1.GIF")) returned 1 [0131.136] wcscmp (_String1="08gmEEOGW.gif", _String2=".") returned 1 [0131.136] wcscmp (_String1="08gmEEOGW.gif", _String2="..") returned 1 [0131.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0efb0 [0131.136] wcscpy (in: _Dest=0x3e0efb0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0131.136] wcscat (in: _Dest=0x3e0efb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0131.136] wcscat (in: _Dest=0x3e0efb0, _Source="08gmEEOGW.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif" [0132.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e0efb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0132.375] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5976c540, ftCreationTime.dwHighDateTime=0x1d5ddb6, ftLastAccessTime.dwLowDateTime=0x2ab6aa50, ftLastAccessTime.dwHighDateTime=0x1d5e7ec, ftLastWriteTime.dwLowDateTime=0x2ab6aa50, ftLastWriteTime.dwHighDateTime=0x1d5e7ec, nFileSizeHigh=0x0, nFileSizeLow=0x11b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="0wivz.bmp", cAlternateFileName="")) returned 1 [0132.375] wcscmp (_String1="0wivz.bmp", _String2=".") returned 1 [0132.375] wcscmp (_String1="0wivz.bmp", _String2="..") returned 1 [0132.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5f78 [0132.376] wcscpy (in: _Dest=0x3de5f78, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.376] wcscat (in: _Dest=0x3de5f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.376] wcscat (in: _Dest=0x3de5f78, _Source="0wivz.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp" [0132.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3de5f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0132.377] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeed93f0, ftCreationTime.dwHighDateTime=0x1d5dcb9, ftLastAccessTime.dwLowDateTime=0x66dfbe0, ftLastAccessTime.dwHighDateTime=0x1d5e624, ftLastWriteTime.dwLowDateTime=0x66dfbe0, ftLastWriteTime.dwHighDateTime=0x1d5e624, nFileSizeHigh=0x0, nFileSizeLow=0x128f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DQknaUj.gif", cAlternateFileName="")) returned 1 [0132.377] wcscmp (_String1="1DQknaUj.gif", _String2=".") returned 1 [0132.377] wcscmp (_String1="1DQknaUj.gif", _String2="..") returned 1 [0132.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e232d0 [0132.377] wcscpy (in: _Dest=0x3e232d0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.377] wcscat (in: _Dest=0x3e232d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.377] wcscat (in: _Dest=0x3e232d0, _Source="1DQknaUj.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif" [0132.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e232d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0132.378] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aaeeca0, ftCreationTime.dwHighDateTime=0x1d5e3a8, ftLastAccessTime.dwLowDateTime=0x4625bfe0, ftLastAccessTime.dwHighDateTime=0x1d5de1b, ftLastWriteTime.dwLowDateTime=0x4625bfe0, ftLastWriteTime.dwHighDateTime=0x1d5de1b, nFileSizeHigh=0x0, nFileSizeLow=0x8399, dwReserved0=0x0, dwReserved1=0x0, cFileName="1OmcWiK9Hed.wav", cAlternateFileName="1OMCWI~1.WAV")) returned 1 [0132.378] wcscmp (_String1="1OmcWiK9Hed.wav", _String2=".") returned 1 [0132.378] wcscmp (_String1="1OmcWiK9Hed.wav", _String2="..") returned 1 [0132.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6cc8 [0132.379] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.379] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.379] wcscat (in: _Dest=0x2fe6cc8, _Source="1OmcWiK9Hed.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav" [0132.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0132.380] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c954fe0, ftCreationTime.dwHighDateTime=0x1d5e25c, ftLastAccessTime.dwLowDateTime=0xb65de790, ftLastAccessTime.dwHighDateTime=0x1d5d931, ftLastWriteTime.dwLowDateTime=0xb65de790, ftLastWriteTime.dwHighDateTime=0x1d5d931, nFileSizeHigh=0x0, nFileSizeLow=0xd0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="6zBoDw8HN 01mZRUWEX.wav", cAlternateFileName="6ZBODW~1.WAV")) returned 1 [0132.380] wcscmp (_String1="6zBoDw8HN 01mZRUWEX.wav", _String2=".") returned 1 [0132.380] wcscmp (_String1="6zBoDw8HN 01mZRUWEX.wav", _String2="..") returned 1 [0132.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f395b8 [0132.380] wcscpy (in: _Dest=0x3f395b8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.380] wcscat (in: _Dest=0x3f395b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.380] wcscat (in: _Dest=0x3f395b8, _Source="6zBoDw8HN 01mZRUWEX.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav" [0132.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f395b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0132.382] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x643fbfe0, ftCreationTime.dwHighDateTime=0x1d5db4a, ftLastAccessTime.dwLowDateTime=0x9e06a360, ftLastAccessTime.dwHighDateTime=0x1d5e441, ftLastWriteTime.dwLowDateTime=0x9e06a360, ftLastWriteTime.dwHighDateTime=0x1d5e441, nFileSizeHigh=0x0, nFileSizeLow=0x20be, dwReserved0=0x0, dwReserved1=0x0, cFileName="7uWSl0.ods", cAlternateFileName="")) returned 1 [0132.382] wcscmp (_String1="7uWSl0.ods", _String2=".") returned 1 [0132.382] wcscmp (_String1="7uWSl0.ods", _String2="..") returned 1 [0132.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e572f8 [0132.382] wcscpy (in: _Dest=0x3e572f8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.382] wcscat (in: _Dest=0x3e572f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.382] wcscat (in: _Dest=0x3e572f8, _Source="7uWSl0.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods") returned="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods" [0132.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e572f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0132.383] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cc18700, ftCreationTime.dwHighDateTime=0x1d5e7c8, ftLastAccessTime.dwLowDateTime=0xe1511cd0, ftLastAccessTime.dwHighDateTime=0x1d5e735, ftLastWriteTime.dwLowDateTime=0xe1511cd0, ftLastWriteTime.dwHighDateTime=0x1d5e735, nFileSizeHigh=0x0, nFileSizeLow=0xadc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABmxaMA.m4a", cAlternateFileName="")) returned 1 [0132.383] wcscmp (_String1="ABmxaMA.m4a", _String2=".") returned 1 [0132.383] wcscmp (_String1="ABmxaMA.m4a", _String2="..") returned 1 [0132.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e23278 [0132.383] wcscpy (in: _Dest=0x3e23278, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.383] wcscat (in: _Dest=0x3e23278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.383] wcscat (in: _Dest=0x3e23278, _Source="ABmxaMA.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a") returned="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a" [0132.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0132.384] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5be9d0, ftCreationTime.dwHighDateTime=0x1d5d929, ftLastAccessTime.dwLowDateTime=0xe8d7d0f0, ftLastAccessTime.dwHighDateTime=0x1d5dc06, ftLastWriteTime.dwLowDateTime=0xe8d7d0f0, ftLastWriteTime.dwHighDateTime=0x1d5dc06, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AsxWWkO6fg1g-Gs3v.pdf", cAlternateFileName="ASXWWK~1.PDF")) returned 1 [0132.384] wcscmp (_String1="AsxWWkO6fg1g-Gs3v.pdf", _String2=".") returned 1 [0132.385] wcscmp (_String1="AsxWWkO6fg1g-Gs3v.pdf", _String2="..") returned 1 [0132.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dd98 [0132.385] wcscpy (in: _Dest=0x3d8dd98, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.385] wcscat (in: _Dest=0x3d8dd98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.385] wcscat (in: _Dest=0x3d8dd98, _Source="AsxWWkO6fg1g-Gs3v.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf") returned="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf" [0132.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8dd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0132.386] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38b53f60, ftCreationTime.dwHighDateTime=0x1d5e7ef, ftLastAccessTime.dwLowDateTime=0x6175650, ftLastAccessTime.dwHighDateTime=0x1d5df53, ftLastWriteTime.dwLowDateTime=0x6175650, ftLastWriteTime.dwHighDateTime=0x1d5df53, nFileSizeHigh=0x0, nFileSizeLow=0x91a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bixILAvbmaW.mp3", cAlternateFileName="BIXILA~1.MP3")) returned 1 [0132.386] wcscmp (_String1="bixILAvbmaW.mp3", _String2=".") returned 1 [0132.386] wcscmp (_String1="bixILAvbmaW.mp3", _String2="..") returned 1 [0132.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6d28 [0132.386] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.386] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.386] wcscat (in: _Dest=0x2fe6d28, _Source="bixILAvbmaW.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3" [0132.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0132.387] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22478210, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x8c943920, ftLastAccessTime.dwHighDateTime=0x1d5dace, ftLastWriteTime.dwLowDateTime=0x8c943920, ftLastWriteTime.dwHighDateTime=0x1d5dace, nFileSizeHigh=0x0, nFileSizeLow=0xf1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="c 3b6IL45xgd.ods", cAlternateFileName="C3B6IL~1.ODS")) returned 1 [0132.387] wcscmp (_String1="c 3b6IL45xgd.ods", _String2=".") returned 1 [0132.387] wcscmp (_String1="c 3b6IL45xgd.ods", _String2="..") returned 1 [0132.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6d88 [0132.387] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.387] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.388] wcscat (in: _Dest=0x2fe6d88, _Source="c 3b6IL45xgd.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods") returned="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods" [0132.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0132.389] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa715a140, ftCreationTime.dwHighDateTime=0x1d5e720, ftLastAccessTime.dwLowDateTime=0x471656f0, ftLastAccessTime.dwHighDateTime=0x1d5e71a, ftLastWriteTime.dwLowDateTime=0x471656f0, ftLastWriteTime.dwHighDateTime=0x1d5e71a, nFileSizeHigh=0x0, nFileSizeLow=0x157c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="d88_gVatVIhdz_XXX6T_.mp3", cAlternateFileName="D88_GV~1.MP3")) returned 1 [0132.389] wcscmp (_String1="d88_gVatVIhdz_XXX6T_.mp3", _String2=".") returned 1 [0132.389] wcscmp (_String1="d88_gVatVIhdz_XXX6T_.mp3", _String2="..") returned 1 [0132.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39628 [0132.389] wcscpy (in: _Dest=0x3f39628, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.389] wcscat (in: _Dest=0x3f39628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.389] wcscat (in: _Dest=0x3f39628, _Source="d88_gVatVIhdz_XXX6T_.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3" [0132.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0132.390] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.390] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.390] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.390] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8181f0, ftCreationTime.dwHighDateTime=0x1d5defc, ftLastAccessTime.dwLowDateTime=0xf61c64b0, ftLastAccessTime.dwHighDateTime=0x1d5e4e4, ftLastWriteTime.dwLowDateTime=0xf61c64b0, ftLastWriteTime.dwHighDateTime=0x1d5e4e4, nFileSizeHigh=0x0, nFileSizeLow=0xc714, dwReserved0=0x0, dwReserved1=0x0, cFileName="JadF.pptx", cAlternateFileName="JADF~1.PPT")) returned 1 [0132.390] wcscmp (_String1="JadF.pptx", _String2=".") returned 1 [0132.390] wcscmp (_String1="JadF.pptx", _String2="..") returned 1 [0132.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e57f78 [0132.390] wcscpy (in: _Dest=0x3e57f78, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.390] wcscat (in: _Dest=0x3e57f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.390] wcscat (in: _Dest=0x3e57f78, _Source="JadF.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx") returned="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx" [0132.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e57f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0132.391] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb3374b0, ftCreationTime.dwHighDateTime=0x1d5e417, ftLastAccessTime.dwLowDateTime=0x38c43680, ftLastAccessTime.dwHighDateTime=0x1d5de0a, ftLastWriteTime.dwLowDateTime=0x38c43680, ftLastWriteTime.dwHighDateTime=0x1d5de0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpaQUl_gR3", cAlternateFileName="JPAQUL~1")) returned 1 [0132.392] wcscmp (_String1="jpaQUl_gR3", _String2=".") returned 1 [0132.392] wcscmp (_String1="jpaQUl_gR3", _String2="..") returned 1 [0132.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e581a8 [0132.392] wcscpy (in: _Dest=0x3e581a8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.392] wcscat (in: _Dest=0x3e581a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.392] wcscat (in: _Dest=0x3e581a8, _Source="jpaQUl_gR3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" [0132.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e581a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0132.393] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47db2430, ftCreationTime.dwHighDateTime=0x1d5dfe0, ftLastAccessTime.dwLowDateTime=0x2b86ecf0, ftLastAccessTime.dwHighDateTime=0x1d5d825, ftLastWriteTime.dwLowDateTime=0x2b86ecf0, ftLastWriteTime.dwHighDateTime=0x1d5d825, nFileSizeHigh=0x0, nFileSizeLow=0xe7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="K3yUy4.odt", cAlternateFileName="")) returned 1 [0132.393] wcscmp (_String1="K3yUy4.odt", _String2=".") returned 1 [0132.393] wcscmp (_String1="K3yUy4.odt", _String2="..") returned 1 [0132.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e572a8 [0132.393] wcscpy (in: _Dest=0x3e572a8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.393] wcscat (in: _Dest=0x3e572a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.393] wcscat (in: _Dest=0x3e572a8, _Source="K3yUy4.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt") returned="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt" [0132.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e572a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0132.394] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaece3940, ftCreationTime.dwHighDateTime=0x1d5d91c, ftLastAccessTime.dwLowDateTime=0x92d86e0, ftLastAccessTime.dwHighDateTime=0x1d5e18b, ftLastWriteTime.dwLowDateTime=0x92d86e0, ftLastWriteTime.dwHighDateTime=0x1d5e18b, nFileSizeHigh=0x0, nFileSizeLow=0x1131b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml7dLOMDDabGAltri.bmp", cAlternateFileName="ML7DLO~1.BMP")) returned 1 [0132.394] wcscmp (_String1="ml7dLOMDDabGAltri.bmp", _String2=".") returned 1 [0132.394] wcscmp (_String1="ml7dLOMDDabGAltri.bmp", _String2="..") returned 1 [0132.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ca80 [0132.394] wcscpy (in: _Dest=0x3d8ca80, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.394] wcscat (in: _Dest=0x3d8ca80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.394] wcscat (in: _Dest=0x3d8ca80, _Source="ml7dLOMDDabGAltri.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp" [0132.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8ca80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0132.395] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3164b00, ftCreationTime.dwHighDateTime=0x1d5db10, ftLastAccessTime.dwLowDateTime=0x45c72cd0, ftLastAccessTime.dwHighDateTime=0x1d5e679, ftLastWriteTime.dwLowDateTime=0x45c72cd0, ftLastWriteTime.dwHighDateTime=0x1d5e679, nFileSizeHigh=0x0, nFileSizeLow=0x74e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="nxo0G2y CGrHAVdR.mp3", cAlternateFileName="NXO0G2~1.MP3")) returned 1 [0132.396] wcscmp (_String1="nxo0G2y CGrHAVdR.mp3", _String2=".") returned 1 [0132.396] wcscmp (_String1="nxo0G2y CGrHAVdR.mp3", _String2="..") returned 1 [0132.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c740 [0132.396] wcscpy (in: _Dest=0x3d8c740, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.396] wcscat (in: _Dest=0x3d8c740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.396] wcscat (in: _Dest=0x3d8c740, _Source="nxo0G2y CGrHAVdR.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3" [0132.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0132.397] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96d7c90, ftCreationTime.dwHighDateTime=0x1d5df20, ftLastAccessTime.dwLowDateTime=0x62ed4a0, ftLastAccessTime.dwHighDateTime=0x1d5e0c1, ftLastWriteTime.dwLowDateTime=0x62ed4a0, ftLastWriteTime.dwHighDateTime=0x1d5e0c1, nFileSizeHigh=0x0, nFileSizeLow=0x1109c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nYUV12ih.mp4", cAlternateFileName="")) returned 1 [0132.397] wcscmp (_String1="nYUV12ih.mp4", _String2=".") returned 1 [0132.397] wcscmp (_String1="nYUV12ih.mp4", _String2="..") returned 1 [0132.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e23748 [0132.397] wcscpy (in: _Dest=0x3e23748, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.397] wcscat (in: _Dest=0x3e23748, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.397] wcscat (in: _Dest=0x3e23748, _Source="nYUV12ih.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4") returned="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4" [0132.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0132.398] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e5fa500, ftCreationTime.dwHighDateTime=0x1d6a229, ftLastAccessTime.dwLowDateTime=0x8ef83b80, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xffea2400, ftLastWriteTime.dwHighDateTime=0x1d6a226, nFileSizeHigh=0x0, nFileSizeLow=0xe40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="oopsNO.ps1", cAlternateFileName="")) returned 1 [0132.398] wcscmp (_String1="oopsNO.ps1", _String2=".") returned 1 [0132.398] wcscmp (_String1="oopsNO.ps1", _String2="..") returned 1 [0132.398] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13f7690, ftCreationTime.dwHighDateTime=0x1d5e399, ftLastAccessTime.dwLowDateTime=0x79bde4f0, ftLastAccessTime.dwHighDateTime=0x1d5d965, ftLastWriteTime.dwLowDateTime=0x79bde4f0, ftLastWriteTime.dwHighDateTime=0x1d5d965, nFileSizeHigh=0x0, nFileSizeLow=0xb870, dwReserved0=0x0, dwReserved1=0x0, cFileName="pizzp02Yg-c2y7Y8r_16.avi", cAlternateFileName="PIZZP0~1.AVI")) returned 1 [0132.398] wcscmp (_String1="pizzp02Yg-c2y7Y8r_16.avi", _String2=".") returned 1 [0132.398] wcscmp (_String1="pizzp02Yg-c2y7Y8r_16.avi", _String2="..") returned 1 [0132.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39698 [0132.398] wcscpy (in: _Dest=0x3f39698, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.398] wcscat (in: _Dest=0x3f39698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.398] wcscat (in: _Dest=0x3f39698, _Source="pizzp02Yg-c2y7Y8r_16.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi" [0132.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0132.400] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc04b870, ftCreationTime.dwHighDateTime=0x1d5e530, ftLastAccessTime.dwLowDateTime=0x329f770, ftLastAccessTime.dwHighDateTime=0x1d5e603, ftLastWriteTime.dwLowDateTime=0x329f770, ftLastWriteTime.dwHighDateTime=0x1d5e603, nFileSizeHigh=0x0, nFileSizeLow=0x167d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="QYGVhr1vbSruLZB b0G.png", cAlternateFileName="QYGVHR~1.PNG")) returned 1 [0132.400] wcscmp (_String1="QYGVhr1vbSruLZB b0G.png", _String2=".") returned 1 [0132.400] wcscmp (_String1="QYGVhr1vbSruLZB b0G.png", _String2="..") returned 1 [0132.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39708 [0132.400] wcscpy (in: _Dest=0x3f39708, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.400] wcscat (in: _Dest=0x3f39708, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.400] wcscat (in: _Dest=0x3f39708, _Source="QYGVhr1vbSruLZB b0G.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png") returned="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png" [0132.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0132.401] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7ec070, ftCreationTime.dwHighDateTime=0x1d5dcc5, ftLastAccessTime.dwLowDateTime=0x5b53af70, ftLastAccessTime.dwHighDateTime=0x1d5e0d3, ftLastWriteTime.dwLowDateTime=0x5b53af70, ftLastWriteTime.dwHighDateTime=0x1d5e0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe378, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCZMza6KLZAdUFM.mp4", cAlternateFileName="RCZMZA~1.MP4")) returned 1 [0132.401] wcscmp (_String1="RCZMza6KLZAdUFM.mp4", _String2=".") returned 1 [0132.401] wcscmp (_String1="RCZMza6KLZAdUFM.mp4", _String2="..") returned 1 [0132.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ac08 [0132.401] wcscpy (in: _Dest=0x3d8ac08, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.401] wcscat (in: _Dest=0x3d8ac08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.401] wcscat (in: _Dest=0x3d8ac08, _Source="RCZMza6KLZAdUFM.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4") returned="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4" [0132.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8ac08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0132.402] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d43fac0, ftCreationTime.dwHighDateTime=0x1d5dfcf, ftLastAccessTime.dwLowDateTime=0xf0d6e00, ftLastAccessTime.dwHighDateTime=0x1d5e27f, ftLastWriteTime.dwLowDateTime=0xf0d6e00, ftLastWriteTime.dwHighDateTime=0x1d5e27f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rzHjJDlRQK9cK95aTPQ.png", cAlternateFileName="RZHJJD~1.PNG")) returned 1 [0132.402] wcscmp (_String1="rzHjJDlRQK9cK95aTPQ.png", _String2=".") returned 1 [0132.402] wcscmp (_String1="rzHjJDlRQK9cK95aTPQ.png", _String2="..") returned 1 [0132.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39778 [0132.403] wcscpy (in: _Dest=0x3f39778, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.403] wcscat (in: _Dest=0x3f39778, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.403] wcscat (in: _Dest=0x3f39778, _Source="rzHjJDlRQK9cK95aTPQ.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png") returned="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png" [0132.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0132.404] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75d29d0, ftCreationTime.dwHighDateTime=0x1d5d881, ftLastAccessTime.dwLowDateTime=0xdf0f6730, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0xdf0f6730, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0x5a49, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNoveEUCdjPCLIz.wav", cAlternateFileName="SNOVEE~1.WAV")) returned 1 [0132.404] wcscmp (_String1="SNoveEUCdjPCLIz.wav", _String2=".") returned 1 [0132.404] wcscmp (_String1="SNoveEUCdjPCLIz.wav", _String2="..") returned 1 [0132.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d5e0 [0132.404] wcscpy (in: _Dest=0x3d8d5e0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.404] wcscat (in: _Dest=0x3d8d5e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.404] wcscat (in: _Dest=0x3d8d5e0, _Source="SNoveEUCdjPCLIz.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav" [0132.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0132.405] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d60530, ftCreationTime.dwHighDateTime=0x1d5e0f1, ftLastAccessTime.dwLowDateTime=0x610a3030, ftLastAccessTime.dwHighDateTime=0x1d5e7a7, ftLastWriteTime.dwLowDateTime=0x610a3030, ftLastWriteTime.dwHighDateTime=0x1d5e7a7, nFileSizeHigh=0x0, nFileSizeLow=0x15786, dwReserved0=0x0, dwReserved1=0x0, cFileName="U2Ad_ffs8tBXmn.swf", cAlternateFileName="U2AD_F~1.SWF")) returned 1 [0132.405] wcscmp (_String1="U2Ad_ffs8tBXmn.swf", _String2=".") returned 1 [0132.405] wcscmp (_String1="U2Ad_ffs8tBXmn.swf", _String2="..") returned 1 [0132.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6de8 [0132.405] wcscpy (in: _Dest=0x2fe6de8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.406] wcscat (in: _Dest=0x2fe6de8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.406] wcscat (in: _Dest=0x2fe6de8, _Source="U2Ad_ffs8tBXmn.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf" [0132.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0132.407] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd5c3210, ftCreationTime.dwHighDateTime=0x1d5da34, ftLastAccessTime.dwLowDateTime=0x7cf37a40, ftLastAccessTime.dwHighDateTime=0x1d5e4e6, ftLastWriteTime.dwLowDateTime=0x7cf37a40, ftLastWriteTime.dwHighDateTime=0x1d5e4e6, nFileSizeHigh=0x0, nFileSizeLow=0x321f, dwReserved0=0x0, dwReserved1=0x0, cFileName="uHwesVNlGy4.flv", cAlternateFileName="UHWESV~1.FLV")) returned 1 [0132.407] wcscmp (_String1="uHwesVNlGy4.flv", _String2=".") returned 1 [0132.407] wcscmp (_String1="uHwesVNlGy4.flv", _String2="..") returned 1 [0132.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6e48 [0132.407] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.407] wcscat (in: _Dest=0x2fe6e48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.407] wcscat (in: _Dest=0x2fe6e48, _Source="uHwesVNlGy4.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv" [0132.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0132.408] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e04770, ftCreationTime.dwHighDateTime=0x1d5dda0, ftLastAccessTime.dwLowDateTime=0x1c923620, ftLastAccessTime.dwHighDateTime=0x1d5e138, ftLastWriteTime.dwLowDateTime=0x1c923620, ftLastWriteTime.dwHighDateTime=0x1d5e138, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPdKweg8PDwV.wav", cAlternateFileName="UPDKWE~1.WAV")) returned 1 [0132.408] wcscmp (_String1="UPdKweg8PDwV.wav", _String2=".") returned 1 [0132.408] wcscmp (_String1="UPdKweg8PDwV.wav", _String2="..") returned 1 [0132.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6ea8 [0132.408] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.408] wcscat (in: _Dest=0x2fe6ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.408] wcscat (in: _Dest=0x2fe6ea8, _Source="UPdKweg8PDwV.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav" [0132.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0132.411] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87794390, ftCreationTime.dwHighDateTime=0x1d5e81b, ftLastAccessTime.dwLowDateTime=0x367b6e0, ftLastAccessTime.dwHighDateTime=0x1d5db46, ftLastWriteTime.dwLowDateTime=0x367b6e0, ftLastWriteTime.dwHighDateTime=0x1d5db46, nFileSizeHigh=0x0, nFileSizeLow=0x121ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="v0FWQZluAyd.jpg", cAlternateFileName="V0FWQZ~1.JPG")) returned 1 [0132.411] wcscmp (_String1="v0FWQZluAyd.jpg", _String2=".") returned 1 [0132.411] wcscmp (_String1="v0FWQZluAyd.jpg", _String2="..") returned 1 [0132.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6f08 [0132.412] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.412] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.412] wcscat (in: _Dest=0x2fe6f08, _Source="v0FWQZluAyd.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg" [0132.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0133.151] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x205066b0, ftCreationTime.dwHighDateTime=0x1d5e395, ftLastAccessTime.dwLowDateTime=0x8251c0a0, ftLastAccessTime.dwHighDateTime=0x1d5db9a, ftLastWriteTime.dwLowDateTime=0x8251c0a0, ftLastWriteTime.dwHighDateTime=0x1d5db9a, nFileSizeHigh=0x0, nFileSizeLow=0xf7d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="veCZb.xls", cAlternateFileName="")) returned 1 [0133.151] wcscmp (_String1="veCZb.xls", _String2=".") returned 1 [0133.151] wcscmp (_String1="veCZb.xls", _String2="..") returned 1 [0133.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3dc6528 [0133.151] wcscpy (in: _Dest=0x3dc6528, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.151] wcscat (in: _Dest=0x3dc6528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.152] wcscat (in: _Dest=0x3dc6528, _Source="veCZb.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls") returned="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls" [0133.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc6528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0133.153] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cc4b4b0, ftCreationTime.dwHighDateTime=0x1d5de74, ftLastAccessTime.dwLowDateTime=0xcde05090, ftLastAccessTime.dwHighDateTime=0x1d5e19e, ftLastWriteTime.dwLowDateTime=0xcde05090, ftLastWriteTime.dwHighDateTime=0x1d5e19e, nFileSizeHigh=0x0, nFileSizeLow=0x527b, dwReserved0=0x0, dwReserved1=0x0, cFileName="W9fBbcc5xZKLO.flv", cAlternateFileName="W9FBBC~1.FLV")) returned 1 [0133.153] wcscmp (_String1="W9fBbcc5xZKLO.flv", _String2=".") returned 1 [0133.153] wcscmp (_String1="W9fBbcc5xZKLO.flv", _String2="..") returned 1 [0133.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7208 [0133.153] wcscpy (in: _Dest=0x2fe7208, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.153] wcscat (in: _Dest=0x2fe7208, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.153] wcscat (in: _Dest=0x2fe7208, _Source="W9fBbcc5xZKLO.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv" [0133.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0133.154] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e524b0, ftCreationTime.dwHighDateTime=0x1d5dc88, ftLastAccessTime.dwLowDateTime=0x294f5820, ftLastAccessTime.dwHighDateTime=0x1d5db75, ftLastWriteTime.dwLowDateTime=0x294f5820, ftLastWriteTime.dwHighDateTime=0x1d5db75, nFileSizeHigh=0x0, nFileSizeLow=0x132dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wVMk5 sXek.m4a", cAlternateFileName="WVMK5S~1.M4A")) returned 1 [0133.154] wcscmp (_String1="wVMk5 sXek.m4a", _String2=".") returned 1 [0133.154] wcscmp (_String1="wVMk5 sXek.m4a", _String2="..") returned 1 [0133.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e23488 [0133.154] wcscpy (in: _Dest=0x3e23488, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.154] wcscat (in: _Dest=0x3e23488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.154] wcscat (in: _Dest=0x3e23488, _Source="wVMk5 sXek.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a") returned="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a" [0133.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98 [0133.157] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5a3060, ftCreationTime.dwHighDateTime=0x1d5e607, ftLastAccessTime.dwLowDateTime=0x4bf9fa60, ftLastAccessTime.dwHighDateTime=0x1d5dbf2, ftLastWriteTime.dwLowDateTime=0x4bf9fa60, ftLastWriteTime.dwHighDateTime=0x1d5dbf2, nFileSizeHigh=0x0, nFileSizeLow=0x225d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wWrQWmHzjyFI1gyw45.flv", cAlternateFileName="WWRQWM~1.FLV")) returned 1 [0133.595] wcscmp (_String1="wWrQWmHzjyFI1gyw45.flv", _String2=".") returned 1 [0133.595] wcscmp (_String1="wWrQWmHzjyFI1gyw45.flv", _String2="..") returned 1 [0133.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d510 [0133.596] wcscpy (in: _Dest=0x3d8d510, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.596] wcscat (in: _Dest=0x3d8d510, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.596] wcscat (in: _Dest=0x3d8d510, _Source="wWrQWmHzjyFI1gyw45.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv" [0135.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0135.517] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4772630, ftCreationTime.dwHighDateTime=0x1d5dba2, ftLastAccessTime.dwLowDateTime=0xb388480, ftLastAccessTime.dwHighDateTime=0x1d5e04b, ftLastWriteTime.dwLowDateTime=0xb388480, ftLastWriteTime.dwHighDateTime=0x1d5e04b, nFileSizeHigh=0x0, nFileSizeLow=0x280b, dwReserved0=0x0, dwReserved1=0x0, cFileName="yjvzuCK9.flv", cAlternateFileName="")) returned 1 [0135.517] wcscmp (_String1="yjvzuCK9.flv", _String2=".") returned 1 [0135.517] wcscmp (_String1="yjvzuCK9.flv", _String2="..") returned 1 [0135.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6ec20 [0135.517] wcscpy (in: _Dest=0x3e6ec20, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.517] wcscat (in: _Dest=0x3e6ec20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.517] wcscat (in: _Dest=0x3e6ec20, _Source="yjvzuCK9.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv" [0135.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e6ec20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0135.518] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef5e20, ftCreationTime.dwHighDateTime=0x1d5e720, ftLastAccessTime.dwLowDateTime=0x3fa53a80, ftLastAccessTime.dwHighDateTime=0x1d5dcfc, ftLastWriteTime.dwLowDateTime=0x3fa53a80, ftLastWriteTime.dwHighDateTime=0x1d5dcfc, nFileSizeHigh=0x0, nFileSizeLow=0xc051, dwReserved0=0x0, dwReserved1=0x0, cFileName="YLLdCulbEJgUAzh15.mp3", cAlternateFileName="YLLDCU~1.MP3")) returned 1 [0135.518] wcscmp (_String1="YLLdCulbEJgUAzh15.mp3", _String2=".") returned 1 [0135.518] wcscmp (_String1="YLLdCulbEJgUAzh15.mp3", _String2="..") returned 1 [0135.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8bd18 [0135.518] wcscpy (in: _Dest=0x3d8bd18, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.518] wcscat (in: _Dest=0x3d8bd18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.519] wcscat (in: _Dest=0x3d8bd18, _Source="YLLdCulbEJgUAzh15.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3" [0135.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8bd18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0135.520] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b271f30, ftCreationTime.dwHighDateTime=0x1d5d948, ftLastAccessTime.dwLowDateTime=0x73a4f4f0, ftLastAccessTime.dwHighDateTime=0x1d5d94c, ftLastWriteTime.dwLowDateTime=0x73a4f4f0, ftLastWriteTime.dwHighDateTime=0x1d5d94c, nFileSizeHigh=0x0, nFileSizeLow=0x12f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="_vqEd17vFz24RKh.odp", cAlternateFileName="_VQED1~1.ODP")) returned 1 [0135.520] wcscmp (_String1="_vqEd17vFz24RKh.odp", _String2=".") returned 1 [0135.520] wcscmp (_String1="_vqEd17vFz24RKh.odp", _String2="..") returned 1 [0135.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bff0 [0135.520] wcscpy (in: _Dest=0x3d8bff0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.520] wcscat (in: _Dest=0x3d8bff0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.520] wcscat (in: _Dest=0x3d8bff0, _Source="_vqEd17vFz24RKh.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp") returned="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp" [0135.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8bff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0135.521] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b271f30, ftCreationTime.dwHighDateTime=0x1d5d948, ftLastAccessTime.dwLowDateTime=0x73a4f4f0, ftLastAccessTime.dwHighDateTime=0x1d5d94c, ftLastWriteTime.dwLowDateTime=0x73a4f4f0, ftLastWriteTime.dwHighDateTime=0x1d5d94c, nFileSizeHigh=0x0, nFileSizeLow=0x12f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="_vqEd17vFz24RKh.odp", cAlternateFileName="_VQED1~1.ODP")) returned 0 [0135.521] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0139.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86880) returned 1 [0139.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30670c0) returned 1 [0139.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067100) returned 1 Thread: id = 238 os_tid = 0xe4c [0131.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e512b0 [0131.136] wcscpy (in: _Dest=0x3e512b0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0131.137] wcscat (in: _Dest=0x3e512b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0131.137] wcscat (in: _Dest=0x3e512b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\*") returned="C:\\Users\\EEBsYm5\\Documents\\*" [0131.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0131.137] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e950a20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8e950a20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37558 [0131.137] wcscmp (_String1=".", _String2=".") returned 0 [0131.137] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e950a20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8e950a20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.137] wcscmp (_String1="..", _String2=".") returned 1 [0131.137] wcscmp (_String1="..", _String2="..") returned 0 [0131.137] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2553f90, ftCreationTime.dwHighDateTime=0x1d5db4b, ftLastAccessTime.dwLowDateTime=0xc6386400, ftLastAccessTime.dwHighDateTime=0x1d57e9c, ftLastWriteTime.dwLowDateTime=0xc6386400, ftLastWriteTime.dwHighDateTime=0x1d57e9c, nFileSizeHigh=0x0, nFileSizeLow=0x6685, dwReserved0=0x0, dwReserved1=0x0, cFileName="-AjNSCDbxjN475.docx", cAlternateFileName="-AJNSC~1.DOC")) returned 1 [0131.137] wcscmp (_String1="-AjNSCDbxjN475.docx", _String2=".") returned -1 [0131.137] wcscmp (_String1="-AjNSCDbxjN475.docx", _String2="..") returned -1 [0131.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8b1b8 [0131.137] wcscpy (in: _Dest=0x3d8b1b8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0131.137] wcscat (in: _Dest=0x3d8b1b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0131.137] wcscat (in: _Dest=0x3d8b1b8, _Source="-AjNSCDbxjN475.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx") returned="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx" [0133.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0133.175] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d8e1330, ftCreationTime.dwHighDateTime=0x1d5a23d, ftLastAccessTime.dwLowDateTime=0x8f7e04b0, ftLastAccessTime.dwHighDateTime=0x1d5a00c, ftLastWriteTime.dwLowDateTime=0x8f7e04b0, ftLastWriteTime.dwHighDateTime=0x1d5a00c, nFileSizeHigh=0x0, nFileSizeLow=0x1202c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1GtRrw_iJnJt9Pm.pptx", cAlternateFileName="1GTRRW~1.PPT")) returned 1 [0133.175] wcscmp (_String1="1GtRrw_iJnJt9Pm.pptx", _String2=".") returned 1 [0133.175] wcscmp (_String1="1GtRrw_iJnJt9Pm.pptx", _String2="..") returned 1 [0133.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d4a8 [0133.175] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.175] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.175] wcscat (in: _Dest=0x3d8d4a8, _Source="1GtRrw_iJnJt9Pm.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx" [0133.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0133.176] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02ff380, ftCreationTime.dwHighDateTime=0x1d58b95, ftLastAccessTime.dwLowDateTime=0x23d44e00, ftLastAccessTime.dwHighDateTime=0x1d58db9, ftLastWriteTime.dwLowDateTime=0x23d44e00, ftLastWriteTime.dwHighDateTime=0x1d58db9, nFileSizeHigh=0x0, nFileSizeLow=0x29d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABoUcNiJLIyD.pptx", cAlternateFileName="ABOUCN~1.PPT")) returned 1 [0133.176] wcscmp (_String1="ABoUcNiJLIyD.pptx", _String2=".") returned 1 [0133.176] wcscmp (_String1="ABoUcNiJLIyD.pptx", _String2="..") returned 1 [0133.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8c128 [0133.176] wcscpy (in: _Dest=0x3d8c128, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.176] wcscat (in: _Dest=0x3d8c128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.176] wcscat (in: _Dest=0x3d8c128, _Source="ABoUcNiJLIyD.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx" [0133.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0133.178] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7c210, ftCreationTime.dwHighDateTime=0x1d5a382, ftLastAccessTime.dwLowDateTime=0x6c616f80, ftLastAccessTime.dwHighDateTime=0x1d5ce2e, ftLastWriteTime.dwLowDateTime=0x6c616f80, ftLastWriteTime.dwHighDateTime=0x1d5ce2e, nFileSizeHigh=0x0, nFileSizeLow=0x5e77, dwReserved0=0x0, dwReserved1=0x0, cFileName="bKMM9eTf6.xlsx", cAlternateFileName="BKMM9E~1.XLS")) returned 1 [0133.178] wcscmp (_String1="bKMM9eTf6.xlsx", _String2=".") returned 1 [0133.178] wcscmp (_String1="bKMM9eTf6.xlsx", _String2="..") returned 1 [0133.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6b48 [0133.178] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.178] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.178] wcscat (in: _Dest=0x2fe6b48, _Source="bKMM9eTf6.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx" [0133.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0133.180] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2dff0, ftCreationTime.dwHighDateTime=0x1d5cfb1, ftLastAccessTime.dwLowDateTime=0x46e765d0, ftLastAccessTime.dwHighDateTime=0x1d5af42, ftLastWriteTime.dwLowDateTime=0x46e765d0, ftLastWriteTime.dwHighDateTime=0x1d5af42, nFileSizeHigh=0x0, nFileSizeLow=0xd198, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLesYlcnHCG _v.docx", cAlternateFileName="CLESYL~1.DOC")) returned 1 [0133.180] wcscmp (_String1="CLesYlcnHCG _v.docx", _String2=".") returned 1 [0133.180] wcscmp (_String1="CLesYlcnHCG _v.docx", _String2="..") returned 1 [0133.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c878 [0133.180] wcscpy (in: _Dest=0x3d8c878, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.180] wcscat (in: _Dest=0x3d8c878, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.180] wcscat (in: _Dest=0x3d8c878, _Source="CLesYlcnHCG _v.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx") returned="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx" [0133.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0133.181] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.181] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.181] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.181] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb751c920, ftCreationTime.dwHighDateTime=0x1d5da10, ftLastAccessTime.dwLowDateTime=0xd7740690, ftLastAccessTime.dwHighDateTime=0x1d5dbb0, ftLastWriteTime.dwLowDateTime=0xd7740690, ftLastWriteTime.dwHighDateTime=0x1d5dbb0, nFileSizeHigh=0x0, nFileSizeLow=0x176be, dwReserved0=0x0, dwReserved1=0x0, cFileName="ettRpQ9.pptx", cAlternateFileName="ETTRPQ~1.PPT")) returned 1 [0133.181] wcscmp (_String1="ettRpQ9.pptx", _String2=".") returned 1 [0133.181] wcscmp (_String1="ettRpQ9.pptx", _String2="..") returned 1 [0133.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e23ab8 [0133.182] wcscpy (in: _Dest=0x3e23ab8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.182] wcscat (in: _Dest=0x3e23ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.182] wcscat (in: _Dest=0x3e23ab8, _Source="ettRpQ9.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx" [0133.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0133.183] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85818900, ftCreationTime.dwHighDateTime=0x1d5c960, ftLastAccessTime.dwLowDateTime=0x92962cc0, ftLastAccessTime.dwHighDateTime=0x1d5b279, ftLastWriteTime.dwLowDateTime=0x92962cc0, ftLastWriteTime.dwHighDateTime=0x1d5b279, nFileSizeHigh=0x0, nFileSizeLow=0x13c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="fy0CnPd3SShRjJNg.xlsx", cAlternateFileName="FY0CNP~1.XLS")) returned 1 [0133.183] wcscmp (_String1="fy0CnPd3SShRjJNg.xlsx", _String2=".") returned 1 [0133.183] wcscmp (_String1="fy0CnPd3SShRjJNg.xlsx", _String2="..") returned 1 [0133.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39a18 [0133.183] wcscpy (in: _Dest=0x3f39a18, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.183] wcscat (in: _Dest=0x3f39a18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.183] wcscat (in: _Dest=0x3f39a18, _Source="fy0CnPd3SShRjJNg.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx" [0133.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0133.185] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c316a50, ftCreationTime.dwHighDateTime=0x1d5e297, ftLastAccessTime.dwLowDateTime=0x2a9eae80, ftLastAccessTime.dwHighDateTime=0x1d5c129, ftLastWriteTime.dwLowDateTime=0x2a9eae80, ftLastWriteTime.dwHighDateTime=0x1d5c129, nFileSizeHigh=0x0, nFileSizeLow=0x18026, dwReserved0=0x0, dwReserved1=0x0, cFileName="hfr1I51 8Epu3Xt7zA1.docx", cAlternateFileName="HFR1I5~1.DOC")) returned 1 [0133.185] wcscmp (_String1="hfr1I51 8Epu3Xt7zA1.docx", _String2=".") returned 1 [0133.185] wcscmp (_String1="hfr1I51 8Epu3Xt7zA1.docx", _String2="..") returned 1 [0133.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39a88 [0133.185] wcscpy (in: _Dest=0x3f39a88, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.185] wcscat (in: _Dest=0x3f39a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.185] wcscat (in: _Dest=0x3f39a88, _Source="hfr1I51 8Epu3Xt7zA1.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx") returned="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx" [0133.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0133.187] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c592100, ftCreationTime.dwHighDateTime=0x1d5a9d6, ftLastAccessTime.dwLowDateTime=0x97483160, ftLastAccessTime.dwHighDateTime=0x1d5e103, ftLastWriteTime.dwLowDateTime=0x97483160, ftLastWriteTime.dwHighDateTime=0x1d5e103, nFileSizeHigh=0x0, nFileSizeLow=0x18a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="i6tD6dSrI.pptx", cAlternateFileName="I6TD6D~1.PPT")) returned 1 [0133.187] wcscmp (_String1="i6tD6dSrI.pptx", _String2=".") returned 1 [0133.187] wcscmp (_String1="i6tD6dSrI.pptx", _String2="..") returned 1 [0133.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe74a8 [0133.187] wcscpy (in: _Dest=0x2fe74a8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.187] wcscat (in: _Dest=0x2fe74a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.187] wcscat (in: _Dest=0x2fe74a8, _Source="i6tD6dSrI.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx" [0133.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe74a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0133.188] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c164cd0, ftCreationTime.dwHighDateTime=0x1d5a70a, ftLastAccessTime.dwLowDateTime=0x8c6c0540, ftLastAccessTime.dwHighDateTime=0x1d5d99d, ftLastWriteTime.dwLowDateTime=0x8c6c0540, ftLastWriteTime.dwHighDateTime=0x1d5d99d, nFileSizeHigh=0x0, nFileSizeLow=0x18d9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="JHR8txH LCnrE.docx", cAlternateFileName="JHR8TX~1.DOC")) returned 1 [0133.188] wcscmp (_String1="JHR8txH LCnrE.docx", _String2=".") returned 1 [0133.189] wcscmp (_String1="JHR8txH LCnrE.docx", _String2="..") returned 1 [0133.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bbe0 [0133.189] wcscpy (in: _Dest=0x3d8bbe0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.189] wcscat (in: _Dest=0x3d8bbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.189] wcscat (in: _Dest=0x3d8bbe0, _Source="JHR8txH LCnrE.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx") returned="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx" [0133.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8bbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0133.190] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a6b2a90, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x5e37dac0, ftLastAccessTime.dwHighDateTime=0x1d5e21f, ftLastWriteTime.dwLowDateTime=0x5e37dac0, ftLastWriteTime.dwHighDateTime=0x1d5e21f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="K0lHR 0GU", cAlternateFileName="K0LHR0~1")) returned 1 [0133.190] wcscmp (_String1="K0lHR 0GU", _String2=".") returned 1 [0133.190] wcscmp (_String1="K0lHR 0GU", _String2="..") returned 1 [0133.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e23328 [0133.190] wcscpy (in: _Dest=0x3e23328, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.190] wcscat (in: _Dest=0x3e23328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.190] wcscat (in: _Dest=0x3e23328, _Source="K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0133.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e23328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0133.192] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80de02d0, ftCreationTime.dwHighDateTime=0x1d5ad2b, ftLastAccessTime.dwLowDateTime=0xa3415be0, ftLastAccessTime.dwHighDateTime=0x1d5931a, ftLastWriteTime.dwLowDateTime=0xa3415be0, ftLastWriteTime.dwHighDateTime=0x1d5931a, nFileSizeHigh=0x0, nFileSizeLow=0x55bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="LvbXmuZ.pptx", cAlternateFileName="LVBXMU~1.PPT")) returned 1 [0133.192] wcscmp (_String1="LvbXmuZ.pptx", _String2=".") returned 1 [0133.192] wcscmp (_String1="LvbXmuZ.pptx", _String2="..") returned 1 [0133.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e23430 [0133.192] wcscpy (in: _Dest=0x3e23430, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.192] wcscat (in: _Dest=0x3e23430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.192] wcscat (in: _Dest=0x3e23430, _Source="LvbXmuZ.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx" [0133.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0133.243] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb71a930, ftCreationTime.dwHighDateTime=0x1d5ccb1, ftLastAccessTime.dwLowDateTime=0x253ae5b0, ftLastAccessTime.dwHighDateTime=0x1d5cced, ftLastWriteTime.dwLowDateTime=0x253ae5b0, ftLastWriteTime.dwHighDateTime=0x1d5cced, nFileSizeHigh=0x0, nFileSizeLow=0x9b61, dwReserved0=0x0, dwReserved1=0x0, cFileName="M kAGzng2M9iV.xlsx", cAlternateFileName="MKAGZN~1.XLS")) returned 1 [0133.243] wcscmp (_String1="M kAGzng2M9iV.xlsx", _String2=".") returned 1 [0133.243] wcscmp (_String1="M kAGzng2M9iV.xlsx", _String2="..") returned 1 [0133.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bf88 [0133.244] wcscpy (in: _Dest=0x3d8bf88, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.244] wcscat (in: _Dest=0x3d8bf88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.244] wcscat (in: _Dest=0x3d8bf88, _Source="M kAGzng2M9iV.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx" [0133.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8bf88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c [0133.255] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0133.255] wcscmp (_String1="My Music", _String2=".") returned 1 [0133.255] wcscmp (_String1="My Music", _String2="..") returned 1 [0133.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e58108 [0133.255] wcscpy (in: _Dest=0x3e58108, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.255] wcscat (in: _Dest=0x3e58108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.255] wcscat (in: _Dest=0x3e58108, _Source="My Music" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music") returned="C:\\Users\\EEBsYm5\\Documents\\My Music" [0133.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e58108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0133.257] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0133.257] wcscmp (_String1="My Pictures", _String2=".") returned 1 [0133.257] wcscmp (_String1="My Pictures", _String2="..") returned 1 [0133.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f5e0 [0133.257] wcscpy (in: _Dest=0x3e0f5e0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.257] wcscat (in: _Dest=0x3e0f5e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.257] wcscat (in: _Dest=0x3e0f5e0, _Source="My Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures" [0133.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0133.258] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0133.258] wcscmp (_String1="My Shapes", _String2=".") returned 1 [0133.259] wcscmp (_String1="My Shapes", _String2="..") returned 1 [0133.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0f0b8 [0133.259] wcscpy (in: _Dest=0x3e0f0b8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.259] wcscat (in: _Dest=0x3e0f0b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.259] wcscat (in: _Dest=0x3e0f0b8, _Source="My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0133.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0133.260] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0133.260] wcscmp (_String1="My Videos", _String2=".") returned 1 [0133.260] wcscmp (_String1="My Videos", _String2="..") returned 1 [0133.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e22cf8 [0133.260] wcscpy (in: _Dest=0x3e22cf8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.260] wcscat (in: _Dest=0x3e22cf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.260] wcscat (in: _Dest=0x3e22cf8, _Source="My Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos" [0133.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22cf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd58 [0133.261] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x448c76c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0133.261] wcscmp (_String1="Outlook Files", _String2=".") returned 1 [0133.261] wcscmp (_String1="Outlook Files", _String2="..") returned 1 [0133.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6848 [0133.262] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.262] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.262] wcscat (in: _Dest=0x2fe6848, _Source="Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0133.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0133.263] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f482d00, ftCreationTime.dwHighDateTime=0x1d5d587, ftLastAccessTime.dwLowDateTime=0x3a3c11b0, ftLastAccessTime.dwHighDateTime=0x1d5e1f5, ftLastWriteTime.dwLowDateTime=0x3a3c11b0, ftLastWriteTime.dwHighDateTime=0x1d5e1f5, nFileSizeHigh=0x0, nFileSizeLow=0x727c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pGJYduW8M0uxfizB.xlsx", cAlternateFileName="PGJYDU~1.XLS")) returned 1 [0133.263] wcscmp (_String1="pGJYduW8M0uxfizB.xlsx", _String2=".") returned 1 [0133.263] wcscmp (_String1="pGJYduW8M0uxfizB.xlsx", _String2="..") returned 1 [0133.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39468 [0133.263] wcscpy (in: _Dest=0x3f39468, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.263] wcscat (in: _Dest=0x3f39468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.263] wcscat (in: _Dest=0x3f39468, _Source="pGJYduW8M0uxfizB.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx" [0133.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40 [0133.264] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf93b330, ftCreationTime.dwHighDateTime=0x1d5cc24, ftLastAccessTime.dwLowDateTime=0xb78ce800, ftLastAccessTime.dwHighDateTime=0x1d58a1c, ftLastWriteTime.dwLowDateTime=0xb78ce800, ftLastWriteTime.dwHighDateTime=0x1d58a1c, nFileSizeHigh=0x0, nFileSizeLow=0x1d54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ruXaUUhy81Yxf8di4jH.xlsx", cAlternateFileName="RUXAUU~1.XLS")) returned 1 [0133.264] wcscmp (_String1="ruXaUUhy81Yxf8di4jH.xlsx", _String2=".") returned 1 [0133.264] wcscmp (_String1="ruXaUUhy81Yxf8di4jH.xlsx", _String2="..") returned 1 [0133.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39938 [0133.264] wcscpy (in: _Dest=0x3f39938, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.264] wcscat (in: _Dest=0x3f39938, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.265] wcscat (in: _Dest=0x3f39938, _Source="ruXaUUhy81Yxf8di4jH.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx" [0133.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0133.266] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb057d660, ftCreationTime.dwHighDateTime=0x1d5e2a7, ftLastAccessTime.dwLowDateTime=0x2a099ae0, ftLastAccessTime.dwHighDateTime=0x1d5e2dd, ftLastWriteTime.dwLowDateTime=0x2a099ae0, ftLastWriteTime.dwHighDateTime=0x1d5e2dd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sHoNibZaADk", cAlternateFileName="SHONIB~1")) returned 1 [0133.266] wcscmp (_String1="sHoNibZaADk", _String2=".") returned 1 [0133.266] wcscmp (_String1="sHoNibZaADk", _String2="..") returned 1 [0133.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e22eb0 [0133.266] wcscpy (in: _Dest=0x3e22eb0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.266] wcscat (in: _Dest=0x3e22eb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.266] wcscat (in: _Dest=0x3e22eb0, _Source="sHoNibZaADk" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" [0133.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0133.267] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c7c2480, ftCreationTime.dwHighDateTime=0x1d55ff7, ftLastAccessTime.dwLowDateTime=0x94e13b90, ftLastAccessTime.dwHighDateTime=0x1d58b24, ftLastWriteTime.dwLowDateTime=0x94e13b90, ftLastWriteTime.dwHighDateTime=0x1d58b24, nFileSizeHigh=0x0, nFileSizeLow=0xaa23, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uf56KTtaPabF2_1IJ.docx", cAlternateFileName="UF56KT~1.DOC")) returned 1 [0133.267] wcscmp (_String1="Uf56KTtaPabF2_1IJ.docx", _String2=".") returned 1 [0133.267] wcscmp (_String1="Uf56KTtaPabF2_1IJ.docx", _String2="..") returned 1 [0133.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39b68 [0133.267] wcscpy (in: _Dest=0x3f39b68, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.267] wcscat (in: _Dest=0x3f39b68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.267] wcscat (in: _Dest=0x3f39b68, _Source="Uf56KTtaPabF2_1IJ.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx") returned="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx" [0133.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50 [0133.269] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248fd30, ftCreationTime.dwHighDateTime=0x1d5e359, ftLastAccessTime.dwLowDateTime=0xb4110ff0, ftLastAccessTime.dwHighDateTime=0x1d5e37a, ftLastWriteTime.dwLowDateTime=0xb4110ff0, ftLastWriteTime.dwHighDateTime=0x1d5e37a, nFileSizeHigh=0x0, nFileSizeLow=0x8705, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XD73.xlsx", cAlternateFileName="XD73~1.XLS")) returned 1 [0133.269] wcscmp (_String1="XD73.xlsx", _String2=".") returned 1 [0133.269] wcscmp (_String1="XD73.xlsx", _String2="..") returned 1 [0133.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e235e8 [0133.269] wcscpy (in: _Dest=0x3e235e8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.269] wcscat (in: _Dest=0x3e235e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.269] wcscat (in: _Dest=0x3e235e8, _Source="XD73.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx" [0133.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e235e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0133.270] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8052b110, ftCreationTime.dwHighDateTime=0x1d59374, ftLastAccessTime.dwLowDateTime=0xe3745de0, ftLastAccessTime.dwHighDateTime=0x1d55e70, ftLastWriteTime.dwLowDateTime=0xe3745de0, ftLastWriteTime.dwHighDateTime=0x1d55e70, nFileSizeHigh=0x0, nFileSizeLow=0xb3df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zPAObiSn08.pptx", cAlternateFileName="ZPAOBI~1.PPT")) returned 1 [0133.270] wcscmp (_String1="zPAObiSn08.pptx", _String2=".") returned 1 [0133.270] wcscmp (_String1="zPAObiSn08.pptx", _String2="..") returned 1 [0133.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7028 [0133.271] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.271] wcscat (in: _Dest=0x2fe7028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.271] wcscat (in: _Dest=0x2fe7028, _Source="zPAObiSn08.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx" [0133.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc [0133.875] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8052b110, ftCreationTime.dwHighDateTime=0x1d59374, ftLastAccessTime.dwLowDateTime=0xe3745de0, ftLastAccessTime.dwHighDateTime=0x1d55e70, ftLastWriteTime.dwLowDateTime=0xe3745de0, ftLastWriteTime.dwHighDateTime=0x1d55e70, nFileSizeHigh=0x0, nFileSizeLow=0xb3df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zPAObiSn08.pptx", cAlternateFileName="ZPAOBI~1.PPT")) returned 0 [0133.875] FindClose (in: hFindFile=0x3f37558 | out: hFindFile=0x3f37558) returned 1 [0133.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0133.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e512b0) returned 1 [0133.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 Thread: id = 239 os_tid = 0xdfc [0131.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e51028 [0131.138] wcscpy (in: _Dest=0x3e51028, _Source="C:\\Users\\EEBsYm5\\Downloads" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads") returned="C:\\Users\\EEBsYm5\\Downloads" [0131.138] wcscat (in: _Dest=0x3e51028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads\\") returned="C:\\Users\\EEBsYm5\\Downloads\\" [0131.138] wcscat (in: _Dest=0x3e51028, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads\\*") returned="C:\\Users\\EEBsYm5\\Downloads\\*" [0131.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0131.138] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Downloads\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xcb798a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0131.139] wcscmp (_String1=".", _String2=".") returned 0 [0131.139] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xcb798a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.139] wcscmp (_String1="..", _String2=".") returned 1 [0131.139] wcscmp (_String1="..", _String2="..") returned 0 [0131.139] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb3ba6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xc9ff0fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcbf08f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChromeSetup.exe", cAlternateFileName="CHROME~1.EXE")) returned 1 [0131.139] wcscmp (_String1="ChromeSetup.exe", _String2=".") returned 1 [0131.139] wcscmp (_String1="ChromeSetup.exe", _String2="..") returned 1 [0131.139] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.139] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.139] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.139] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0131.139] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0131.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0131.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51028) returned 1 [0131.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd00d0) returned 1 Thread: id = 240 os_tid = 0xdf8 [0131.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e51028 [0131.141] wcscpy (in: _Dest=0x3e51028, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0131.141] wcscat (in: _Dest=0x3e51028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0131.141] wcscat (in: _Dest=0x3e51028, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\*" [0131.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0131.141] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd00d0 [0131.141] wcscmp (_String1=".", _String2=".") returned 0 [0131.141] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.141] wcscmp (_String1="..", _String2=".") returned 1 [0131.141] wcscmp (_String1="..", _String2="..") returned 0 [0131.141] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.142] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.142] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.142] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0131.142] wcscmp (_String1="Links", _String2=".") returned 1 [0131.142] wcscmp (_String1="Links", _String2="..") returned 1 [0131.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5f78 [0131.142] wcscpy (in: _Dest=0x3de5f78, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0131.142] wcscat (in: _Dest=0x3de5f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0131.142] wcscat (in: _Dest=0x3de5f78, _Source="Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0131.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc [0131.426] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0131.426] wcscmp (_String1="Microsoft Websites", _String2=".") returned 1 [0131.426] wcscmp (_String1="Microsoft Websites", _String2="..") returned 1 [0131.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c8e0 [0131.426] wcscpy (in: _Dest=0x3d8c8e0, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0131.426] wcscat (in: _Dest=0x3d8c8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0131.426] wcscat (in: _Dest=0x3d8c8e0, _Source="Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0131.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8c8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0131.427] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f57110, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0131.427] wcscmp (_String1="MSN Websites", _String2=".") returned 1 [0131.427] wcscmp (_String1="MSN Websites", _String2="..") returned 1 [0131.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ee30 [0131.428] wcscpy (in: _Dest=0x3e6ee30, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0131.428] wcscat (in: _Dest=0x3e6ee30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0131.428] wcscat (in: _Dest=0x3e6ee30, _Source="MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0131.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ee30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0131.429] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0131.429] wcscmp (_String1="Windows Live", _String2=".") returned 1 [0131.429] wcscmp (_String1="Windows Live", _String2="..") returned 1 [0131.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ee88 [0131.429] wcscpy (in: _Dest=0x3e6ee88, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0131.430] wcscat (in: _Dest=0x3e6ee88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0131.430] wcscat (in: _Dest=0x3e6ee88, _Source="Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0131.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ee88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0131.434] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0131.434] FindClose (in: hFindFile=0x3dd00d0 | out: hFindFile=0x3dd00d0) returned 1 [0131.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0131.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51028) returned 1 [0131.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe10) returned 1 Thread: id = 241 os_tid = 0xe00 [0131.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f37598 [0131.146] wcscpy (in: _Dest=0x3f37598, _Source="C:\\Users\\EEBsYm5\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Links") returned="C:\\Users\\EEBsYm5\\Links" [0131.146] wcscat (in: _Dest=0x3f37598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Links\\") returned="C:\\Users\\EEBsYm5\\Links\\" [0131.146] wcscat (in: _Dest=0x3f37598, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Links\\*") returned="C:\\Users\\EEBsYm5\\Links\\*" [0131.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80467d0 [0131.146] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Links\\*", lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f375d8 [0131.147] wcscmp (_String1=".", _String2=".") returned 0 [0131.147] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.147] wcscmp (_String1="..", _String2=".") returned 1 [0131.147] wcscmp (_String1="..", _String2="..") returned 0 [0131.147] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.147] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.147] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.147] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0131.147] wcscmp (_String1="Desktop.lnk", _String2=".") returned 1 [0131.147] wcscmp (_String1="Desktop.lnk", _String2="..") returned 1 [0131.147] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0131.147] wcscmp (_String1="Downloads.lnk", _String2=".") returned 1 [0131.147] wcscmp (_String1="Downloads.lnk", _String2="..") returned 1 [0131.147] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec480980, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0131.147] wcscmp (_String1="RecentPlaces.lnk", _String2=".") returned 1 [0131.147] wcscmp (_String1="RecentPlaces.lnk", _String2="..") returned 1 [0131.147] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec480980, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0131.148] FindClose (in: hFindFile=0x3f375d8 | out: hFindFile=0x3f375d8) returned 1 [0131.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80467d0) returned 1 [0131.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37598) returned 1 [0131.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7988) returned 1 Thread: id = 242 os_tid = 0xe04 [0131.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6518 [0131.150] wcscpy (in: _Dest=0x3de6518, _Source="C:\\Users\\EEBsYm5\\Local Settings" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings") returned="C:\\Users\\EEBsYm5\\Local Settings" [0131.150] wcscat (in: _Dest=0x3de6518, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings\\") returned="C:\\Users\\EEBsYm5\\Local Settings\\" [0131.150] wcscat (in: _Dest=0x3de6518, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings\\*") returned="C:\\Users\\EEBsYm5\\Local Settings\\*" [0131.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80467d0 [0131.150] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Local Settings\\*", lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80467d0) returned 1 [0131.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6518) returned 1 [0131.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a8a8) returned 1 Thread: id = 243 os_tid = 0xe44 [0131.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f37598 [0131.152] wcscpy (in: _Dest=0x3f37598, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0131.152] wcscat (in: _Dest=0x3f37598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0131.152] wcscat (in: _Dest=0x3f37598, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\*") returned="C:\\Users\\EEBsYm5\\Music\\*" [0131.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80467d0 [0131.152] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\*", lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ea0f100, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ea0f100, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f375d8 [0131.152] wcscmp (_String1=".", _String2=".") returned 0 [0131.152] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ea0f100, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ea0f100, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.153] wcscmp (_String1="..", _String2=".") returned 1 [0131.153] wcscmp (_String1="..", _String2="..") returned 0 [0131.153] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fcfa680, ftCreationTime.dwHighDateTime=0x1d5e3fa, ftLastAccessTime.dwLowDateTime=0xb771caa0, ftLastAccessTime.dwHighDateTime=0x1d5dfaa, ftLastWriteTime.dwLowDateTime=0xb771caa0, ftLastWriteTime.dwHighDateTime=0x1d5dfaa, nFileSizeHigh=0x0, nFileSizeLow=0x124fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="-jZ1AbKpz9V.mp3", cAlternateFileName="-JZ1AB~1.MP3")) returned 1 [0131.153] wcscmp (_String1="-jZ1AbKpz9V.mp3", _String2=".") returned -1 [0131.153] wcscmp (_String1="-jZ1AbKpz9V.mp3", _String2="..") returned -1 [0131.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f5e0 [0131.153] wcscpy (in: _Dest=0x3e0f5e0, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0131.153] wcscat (in: _Dest=0x3e0f5e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0131.153] wcscat (in: _Dest=0x3e0f5e0, _Source="-jZ1AbKpz9V.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3") returned="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3" [0131.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e0f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0131.905] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d5edf0, ftCreationTime.dwHighDateTime=0x1d5e444, ftLastAccessTime.dwLowDateTime=0xf4e5e400, ftLastAccessTime.dwHighDateTime=0x1d5d9c1, ftLastWriteTime.dwLowDateTime=0xf4e5e400, ftLastWriteTime.dwHighDateTime=0x1d5d9c1, nFileSizeHigh=0x0, nFileSizeLow=0x4424, dwReserved0=0x0, dwReserved1=0x0, cFileName="7gjnLrS6K.wav", cAlternateFileName="7GJNLR~1.WAV")) returned 1 [0131.905] wcscmp (_String1="7gjnLrS6K.wav", _String2=".") returned 1 [0131.905] wcscmp (_String1="7gjnLrS6K.wav", _String2="..") returned 1 [0131.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e23488 [0131.905] wcscpy (in: _Dest=0x3e23488, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0131.905] wcscat (in: _Dest=0x3e23488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0131.905] wcscat (in: _Dest=0x3e23488, _Source="7gjnLrS6K.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav") returned="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav" [0131.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0131.906] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8e1d750, ftCreationTime.dwHighDateTime=0x1d5e2a2, ftLastAccessTime.dwLowDateTime=0xaa44c460, ftLastAccessTime.dwHighDateTime=0x1d5df0d, ftLastWriteTime.dwLowDateTime=0xaa44c460, ftLastWriteTime.dwHighDateTime=0x1d5df0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cvNSdvuCZ088HtdBMJg", cAlternateFileName="CVNSDV~1")) returned 1 [0131.906] wcscmp (_String1="cvNSdvuCZ088HtdBMJg", _String2=".") returned 1 [0131.906] wcscmp (_String1="cvNSdvuCZ088HtdBMJg", _String2="..") returned 1 [0131.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe69c8 [0131.906] wcscpy (in: _Dest=0x2fe69c8, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0131.906] wcscat (in: _Dest=0x2fe69c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0131.906] wcscat (in: _Dest=0x2fe69c8, _Source="cvNSdvuCZ088HtdBMJg" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" [0131.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe69c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0131.908] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.908] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.908] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.908] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x962bfb00, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x30d6dd0, ftLastAccessTime.dwHighDateTime=0x1d5ddf7, ftLastWriteTime.dwLowDateTime=0x30d6dd0, ftLastWriteTime.dwHighDateTime=0x1d5ddf7, nFileSizeHigh=0x0, nFileSizeLow=0x12bc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MQ5Ej2nj3.m4a", cAlternateFileName="MQ5EJ2~1.M4A")) returned 1 [0131.908] wcscmp (_String1="MQ5Ej2nj3.m4a", _String2=".") returned 1 [0131.908] wcscmp (_String1="MQ5Ej2nj3.m4a", _String2="..") returned 1 [0131.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e23ab8 [0131.908] wcscpy (in: _Dest=0x3e23ab8, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0131.908] wcscat (in: _Dest=0x3e23ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0131.908] wcscat (in: _Dest=0x3e23ab8, _Source="MQ5Ej2nj3.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a") returned="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a" [0131.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0131.909] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x962bfb00, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x30d6dd0, ftLastAccessTime.dwHighDateTime=0x1d5ddf7, ftLastWriteTime.dwLowDateTime=0x30d6dd0, ftLastWriteTime.dwHighDateTime=0x1d5ddf7, nFileSizeHigh=0x0, nFileSizeLow=0x12bc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MQ5Ej2nj3.m4a", cAlternateFileName="MQ5EJ2~1.M4A")) returned 0 [0131.909] FindClose (in: hFindFile=0x3f375d8 | out: hFindFile=0x3f375d8) returned 1 [0131.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80467d0) returned 1 [0131.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37598) returned 1 [0131.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e777f8) returned 1 Thread: id = 244 os_tid = 0xe48 [0131.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e51100 [0131.159] wcscpy (in: _Dest=0x3e51100, _Source="C:\\Users\\EEBsYm5\\My Documents" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents") returned="C:\\Users\\EEBsYm5\\My Documents" [0131.159] wcscat (in: _Dest=0x3e51100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents\\") returned="C:\\Users\\EEBsYm5\\My Documents\\" [0131.159] wcscat (in: _Dest=0x3e51100, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents\\*") returned="C:\\Users\\EEBsYm5\\My Documents\\*" [0131.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0131.159] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\My Documents\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0131.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51100) returned 1 [0131.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aaa0) returned 1 Thread: id = 245 os_tid = 0xe08 [0131.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37618 [0131.160] wcscpy (in: _Dest=0x3f37618, _Source="C:\\Users\\EEBsYm5\\NetHood" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood") returned="C:\\Users\\EEBsYm5\\NetHood" [0131.160] wcscat (in: _Dest=0x3f37618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood\\") returned="C:\\Users\\EEBsYm5\\NetHood\\" [0131.161] wcscat (in: _Dest=0x3f37618, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood\\*") returned="C:\\Users\\EEBsYm5\\NetHood\\*" [0131.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0131.161] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\NetHood\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0131.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37618) returned 1 [0131.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfdd0) returned 1 Thread: id = 246 os_tid = 0xdf4 [0131.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcfdd0 [0131.162] wcscpy (in: _Dest=0x3dcfdd0, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.162] wcscat (in: _Dest=0x3dcfdd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0131.162] wcscat (in: _Dest=0x3dcfdd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\*" [0131.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0131.163] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8edc7360, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8edc7360, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0131.163] wcscmp (_String1=".", _String2=".") returned 0 [0131.163] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8edc7360, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8edc7360, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.163] wcscmp (_String1="..", _String2=".") returned 1 [0131.163] wcscmp (_String1="..", _String2="..") returned 0 [0131.163] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb715e9d0, ftCreationTime.dwHighDateTime=0x1d5dfbc, ftLastAccessTime.dwLowDateTime=0x670a2360, ftLastAccessTime.dwHighDateTime=0x1d5daae, ftLastWriteTime.dwLowDateTime=0x670a2360, ftLastWriteTime.dwHighDateTime=0x1d5daae, nFileSizeHigh=0x0, nFileSizeLow=0x11148, dwReserved0=0x0, dwReserved1=0x0, cFileName="6EiZ_-qhGlnnk4hV7 FA.png", cAlternateFileName="6EIZ_-~1.PNG")) returned 1 [0131.163] wcscmp (_String1="6EiZ_-qhGlnnk4hV7 FA.png", _String2=".") returned 1 [0131.163] wcscmp (_String1="6EiZ_-qhGlnnk4hV7 FA.png", _String2="..") returned 1 [0131.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x2ff5320 [0131.163] wcscpy (in: _Dest=0x2ff5320, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.163] wcscat (in: _Dest=0x2ff5320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0131.163] wcscat (in: _Dest=0x2ff5320, _Source="6EiZ_-qhGlnnk4hV7 FA.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png") returned="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png" [0131.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0131.740] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33efdb0, ftCreationTime.dwHighDateTime=0x1d5e882, ftLastAccessTime.dwLowDateTime=0x7e3286c0, ftLastAccessTime.dwHighDateTime=0x1d5e4e2, ftLastWriteTime.dwLowDateTime=0x7e3286c0, ftLastWriteTime.dwHighDateTime=0x1d5e4e2, nFileSizeHigh=0x0, nFileSizeLow=0xd728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AKOhtk.png", cAlternateFileName="")) returned 1 [0131.740] wcscmp (_String1="AKOhtk.png", _String2=".") returned 1 [0131.740] wcscmp (_String1="AKOhtk.png", _String2="..") returned 1 [0131.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6f098 [0131.740] wcscpy (in: _Dest=0x3e6f098, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.740] wcscat (in: _Dest=0x3e6f098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0131.740] wcscat (in: _Dest=0x3e6f098, _Source="AKOhtk.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png") returned="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png" [0131.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e6f098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0131.742] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.742] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.742] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.742] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c36720, ftCreationTime.dwHighDateTime=0x1d5def3, ftLastAccessTime.dwLowDateTime=0xf8ce2a40, ftLastAccessTime.dwHighDateTime=0x1d5e34f, ftLastWriteTime.dwLowDateTime=0xf8ce2a40, ftLastWriteTime.dwHighDateTime=0x1d5e34f, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="l8xsjdN7qrS.bmp", cAlternateFileName="L8XSJD~1.BMP")) returned 1 [0131.742] wcscmp (_String1="l8xsjdN7qrS.bmp", _String2=".") returned 1 [0131.742] wcscmp (_String1="l8xsjdN7qrS.bmp", _String2="..") returned 1 [0131.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe67e8 [0131.742] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.742] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0131.742] wcscat (in: _Dest=0x2fe67e8, _Source="l8xsjdN7qrS.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp" [0131.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0131.744] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x286b7540, ftCreationTime.dwHighDateTime=0x1d5dbcc, ftLastAccessTime.dwLowDateTime=0x62eaff60, ftLastAccessTime.dwHighDateTime=0x1d5dd39, ftLastWriteTime.dwLowDateTime=0x62eaff60, ftLastWriteTime.dwHighDateTime=0x1d5dd39, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lzaA15LKh0WzL3 lfAU", cAlternateFileName="LZAA15~1")) returned 1 [0131.744] wcscmp (_String1="lzaA15LKh0WzL3 lfAU", _String2=".") returned 1 [0131.744] wcscmp (_String1="lzaA15LKh0WzL3 lfAU", _String2="..") returned 1 [0131.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e480 [0131.744] wcscpy (in: _Dest=0x3d8e480, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.744] wcscat (in: _Dest=0x3d8e480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0131.744] wcscat (in: _Dest=0x3d8e480, _Source="lzaA15LKh0WzL3 lfAU" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" [0131.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d0 [0131.745] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93810820, ftCreationTime.dwHighDateTime=0x1d5e5a1, ftLastAccessTime.dwLowDateTime=0xb2fd1df0, ftLastAccessTime.dwHighDateTime=0x1d5dce2, ftLastWriteTime.dwLowDateTime=0xb2fd1df0, ftLastWriteTime.dwHighDateTime=0x1d5dce2, nFileSizeHigh=0x0, nFileSizeLow=0x32bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oQKZ.bmp", cAlternateFileName="")) returned 1 [0131.745] wcscmp (_String1="oQKZ.bmp", _String2=".") returned 1 [0131.745] wcscmp (_String1="oQKZ.bmp", _String2="..") returned 1 [0131.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e58108 [0131.745] wcscpy (in: _Dest=0x3e58108, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.745] wcscat (in: _Dest=0x3e58108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0131.745] wcscat (in: _Dest=0x3e58108, _Source="oQKZ.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp" [0131.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e58108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4 [0131.747] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a12840, ftCreationTime.dwHighDateTime=0x1d5dc0a, ftLastAccessTime.dwLowDateTime=0x2f6be10, ftLastAccessTime.dwHighDateTime=0x1d5e053, ftLastWriteTime.dwLowDateTime=0x2f6be10, ftLastWriteTime.dwHighDateTime=0x1d5e053, nFileSizeHigh=0x0, nFileSizeLow=0xfd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="QWU--FMlQ1il.bmp", cAlternateFileName="QWU--F~1.BMP")) returned 1 [0131.747] wcscmp (_String1="QWU--FMlQ1il.bmp", _String2=".") returned 1 [0131.747] wcscmp (_String1="QWU--FMlQ1il.bmp", _String2="..") returned 1 [0131.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6848 [0131.747] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.747] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0131.747] wcscat (in: _Dest=0x2fe6848, _Source="QWU--FMlQ1il.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp" [0131.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0131.748] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x928872c0, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x6bffb850, ftLastAccessTime.dwHighDateTime=0x1d5e718, ftLastWriteTime.dwLowDateTime=0x6bffb850, ftLastWriteTime.dwHighDateTime=0x1d5e718, nFileSizeHigh=0x0, nFileSizeLow=0x641a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNvE3qtbjyO.bmp", cAlternateFileName="WNVE3Q~1.BMP")) returned 1 [0131.748] wcscmp (_String1="WNvE3qtbjyO.bmp", _String2=".") returned 1 [0131.748] wcscmp (_String1="WNvE3qtbjyO.bmp", _String2="..") returned 1 [0131.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6968 [0131.748] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.748] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0131.748] wcscat (in: _Dest=0x2fe6968, _Source="WNvE3qtbjyO.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp" [0131.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0131.750] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1cd330, ftCreationTime.dwHighDateTime=0x1d5df70, ftLastAccessTime.dwLowDateTime=0xcc9e56c0, ftLastAccessTime.dwHighDateTime=0x1d5e106, ftLastWriteTime.dwLowDateTime=0xcc9e56c0, ftLastWriteTime.dwHighDateTime=0x1d5e106, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x0, dwReserved1=0x0, cFileName="xjiT1jHDdAN0VDCS T.gif", cAlternateFileName="XJIT1J~1.GIF")) returned 1 [0131.750] wcscmp (_String1="xjiT1jHDdAN0VDCS T.gif", _String2=".") returned 1 [0131.750] wcscmp (_String1="xjiT1jHDdAN0VDCS T.gif", _String2="..") returned 1 [0131.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39468 [0131.750] wcscpy (in: _Dest=0x3f39468, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0131.750] wcscat (in: _Dest=0x3f39468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0131.750] wcscat (in: _Dest=0x3f39468, _Source="xjiT1jHDdAN0VDCS T.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif" [0131.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0131.751] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1cd330, ftCreationTime.dwHighDateTime=0x1d5df70, ftLastAccessTime.dwLowDateTime=0xcc9e56c0, ftLastAccessTime.dwHighDateTime=0x1d5e106, ftLastWriteTime.dwLowDateTime=0xcc9e56c0, ftLastWriteTime.dwHighDateTime=0x1d5e106, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x0, dwReserved1=0x0, cFileName="xjiT1jHDdAN0VDCS T.gif", cAlternateFileName="XJIT1J~1.GIF")) returned 0 [0131.751] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0131.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0131.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfdd0) returned 1 [0131.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfd10) returned 1 Thread: id = 247 os_tid = 0xdec [0131.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e50fe0 [0131.164] wcscpy (in: _Dest=0x3e50fe0, _Source="C:\\Users\\EEBsYm5\\PrintHood" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood") returned="C:\\Users\\EEBsYm5\\PrintHood" [0131.164] wcscat (in: _Dest=0x3e50fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood\\") returned="C:\\Users\\EEBsYm5\\PrintHood\\" [0131.164] wcscat (in: _Dest=0x3e50fe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood\\*") returned="C:\\Users\\EEBsYm5\\PrintHood\\*" [0131.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0131.164] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\PrintHood\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0131.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50fe0) returned 1 [0131.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0110) returned 1 Thread: id = 248 os_tid = 0xe54 [0131.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0110 [0131.166] wcscpy (in: _Dest=0x3dd0110, _Source="C:\\Users\\EEBsYm5\\Recent" | out: _Dest="C:\\Users\\EEBsYm5\\Recent") returned="C:\\Users\\EEBsYm5\\Recent" [0131.166] wcscat (in: _Dest=0x3dd0110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Recent\\") returned="C:\\Users\\EEBsYm5\\Recent\\" [0131.166] wcscat (in: _Dest=0x3dd0110, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Recent\\*") returned="C:\\Users\\EEBsYm5\\Recent\\*" [0131.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0131.166] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Recent\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0131.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0110) returned 1 [0131.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77980) returned 1 Thread: id = 249 os_tid = 0xad0 [0131.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e50fe0 [0131.168] wcscpy (in: _Dest=0x3e50fe0, _Source="C:\\Users\\EEBsYm5\\Saved Games" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games") returned="C:\\Users\\EEBsYm5\\Saved Games" [0131.168] wcscat (in: _Dest=0x3e50fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games\\") returned="C:\\Users\\EEBsYm5\\Saved Games\\" [0131.168] wcscat (in: _Dest=0x3e50fe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games\\*") returned="C:\\Users\\EEBsYm5\\Saved Games\\*" [0131.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0131.168] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Saved Games\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0131.169] wcscmp (_String1=".", _String2=".") returned 0 [0131.169] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.169] wcscmp (_String1="..", _String2=".") returned 1 [0131.169] wcscmp (_String1="..", _String2="..") returned 0 [0131.169] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.169] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.170] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.170] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0131.170] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0131.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0131.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50fe0) returned 1 [0131.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ac98) returned 1 Thread: id = 250 os_tid = 0xca0 [0131.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd0110 [0131.172] wcscpy (in: _Dest=0x3dd0110, _Source="C:\\Users\\EEBsYm5\\Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0131.172] wcscat (in: _Dest=0x3dd0110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0131.172] wcscat (in: _Dest=0x3dd0110, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\*") returned="C:\\Users\\EEBsYm5\\Searches\\*" [0131.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0131.172] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Searches\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0131.172] wcscmp (_String1=".", _String2=".") returned 0 [0131.173] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.173] wcscmp (_String1="..", _String2=".") returned 1 [0131.173] wcscmp (_String1="..", _String2="..") returned 0 [0131.173] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.173] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.173] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.173] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0131.173] wcscmp (_String1="Everywhere.search-ms", _String2=".") returned 1 [0131.173] wcscmp (_String1="Everywhere.search-ms", _String2="..") returned 1 [0131.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8cb50 [0131.174] wcscpy (in: _Dest=0x3d8cb50, _Source="C:\\Users\\EEBsYm5\\Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0131.174] wcscat (in: _Dest=0x3d8cb50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0131.174] wcscat (in: _Dest=0x3d8cb50, _Source="Everywhere.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" [0131.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8cb50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0131.295] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0131.295] wcscmp (_String1="Indexed Locations.search-ms", _String2=".") returned 1 [0131.295] wcscmp (_String1="Indexed Locations.search-ms", _String2="..") returned 1 [0131.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d51200 [0131.296] wcscpy (in: _Dest=0x3d51200, _Source="C:\\Users\\EEBsYm5\\Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0131.296] wcscat (in: _Dest=0x3d51200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0131.296] wcscat (in: _Dest=0x3d51200, _Source="Indexed Locations.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" [0131.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d51200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0131.297] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0131.297] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0131.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0131.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0110) returned 1 [0131.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe90) returned 1 Thread: id = 251 os_tid = 0x620 [0131.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f37698 [0131.176] wcscpy (in: _Dest=0x3f37698, _Source="C:\\Users\\EEBsYm5\\SendTo" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo") returned="C:\\Users\\EEBsYm5\\SendTo" [0131.176] wcscat (in: _Dest=0x3f37698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo\\") returned="C:\\Users\\EEBsYm5\\SendTo\\" [0131.176] wcscat (in: _Dest=0x3f37698, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo\\*") returned="C:\\Users\\EEBsYm5\\SendTo\\*" [0131.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046f08 [0131.176] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\SendTo\\*", lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046f08) returned 1 [0131.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37698) returned 1 [0131.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77a98) returned 1 Thread: id = 252 os_tid = 0x614 [0131.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3df9da8 [0131.510] wcscpy (in: _Dest=0x3df9da8, _Source="C:\\Users\\EEBsYm5\\Start Menu" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu") returned="C:\\Users\\EEBsYm5\\Start Menu" [0131.510] wcscat (in: _Dest=0x3df9da8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu\\") returned="C:\\Users\\EEBsYm5\\Start Menu\\" [0131.510] wcscat (in: _Dest=0x3df9da8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu\\*") returned="C:\\Users\\EEBsYm5\\Start Menu\\*" [0131.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0131.510] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Start Menu\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0131.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0131.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcff90) returned 1 Thread: id = 253 os_tid = 0x474 [0131.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e7c0 [0131.511] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat" [0131.511] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\" [0131.511] wcscat (in: _Dest=0x3d8e7c0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\*") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\*" [0131.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0131.512] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd8fbd760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd8fbd760, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0132.414] wcscmp (_String1=".", _String2=".") returned 0 [0132.414] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd8fbd760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd8fbd760, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.414] wcscmp (_String1="..", _String2=".") returned 1 [0132.414] wcscmp (_String1="..", _String2="..") returned 0 [0132.414] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0132.414] wcscmp (_String1="ActiveX", _String2=".") returned 1 [0132.414] wcscmp (_String1="ActiveX", _String2="..") returned 1 [0132.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39858 [0132.414] wcscpy (in: _Dest=0x3f39858, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat" [0132.415] wcscat (in: _Dest=0x3f39858, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\" [0132.415] wcscat (in: _Dest=0x3f39858, _Source="ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0133.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0133.619] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0133.619] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0133.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0133.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 [0133.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4a48) returned 1 Thread: id = 254 os_tid = 0x490 [0131.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6788 [0131.512] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Program Files\\Common Files\\Adobe\\ARM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM") returned="C:\\Program Files\\Common Files\\Adobe\\ARM" [0131.512] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\" [0131.512] wcscat (in: _Dest=0x2fe6788, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\*") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\*" [0131.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0131.512] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0131.513] wcscmp (_String1=".", _String2=".") returned 0 [0131.513] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.513] wcscmp (_String1="..", _String2=".") returned 1 [0131.513] wcscmp (_String1="..", _String2="..") returned 0 [0131.513] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0131.513] wcscmp (_String1="1.0", _String2=".") returned 1 [0131.513] wcscmp (_String1="1.0", _String2="..") returned 1 [0131.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1d48 [0131.513] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Program Files\\Common Files\\Adobe\\ARM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM") returned="C:\\Program Files\\Common Files\\Adobe\\ARM" [0131.513] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\" [0131.513] wcscat (in: _Dest=0x2fe1d48, _Source="1.0" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0" [0131.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0131.834] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0131.834] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0131.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0131.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0131.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ec78) returned 1 Thread: id = 255 os_tid = 0x410 [0131.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e758 [0131.513] wcscpy (in: _Dest=0x3d8e758, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0131.513] wcscat (in: _Dest=0x3d8e758, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0131.513] wcscat (in: _Dest=0x3d8e758, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\*" [0131.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0131.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38098 [0132.556] wcscmp (_String1=".", _String2=".") returned 0 [0132.556] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.556] wcscmp (_String1="..", _String2=".") returned 1 [0132.556] wcscmp (_String1="..", _String2="..") returned 0 [0132.556] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0132.556] wcscmp (_String1="ca_ES", _String2=".") returned 1 [0132.556] wcscmp (_String1="ca_ES", _String2="..") returned 1 [0132.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f398c8 [0132.557] wcscpy (in: _Dest=0x3f398c8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0132.557] wcscat (in: _Dest=0x3f398c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0132.557] wcscat (in: _Dest=0x3f398c8, _Source="ca_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" [0135.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f398c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0135.539] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0135.539] wcscmp (_String1="cs_CZ", _String2=".") returned 1 [0135.539] wcscmp (_String1="cs_CZ", _String2="..") returned 1 [0135.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33898 [0135.540] wcscpy (in: _Dest=0x3f33898, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.540] wcscat (in: _Dest=0x3f33898, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.540] wcscat (in: _Dest=0x3f33898, _Source="cs_CZ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" [0135.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0135.541] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0135.541] wcscmp (_String1="da_DK", _String2=".") returned 1 [0135.541] wcscmp (_String1="da_DK", _String2="..") returned 1 [0135.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33908 [0135.541] wcscpy (in: _Dest=0x3f33908, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.541] wcscat (in: _Dest=0x3f33908, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.541] wcscat (in: _Dest=0x3f33908, _Source="da_DK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" [0135.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0135.542] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0135.542] wcscmp (_String1="de_DE", _String2=".") returned 1 [0135.542] wcscmp (_String1="de_DE", _String2="..") returned 1 [0135.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33978 [0135.542] wcscpy (in: _Dest=0x3f33978, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.542] wcscat (in: _Dest=0x3f33978, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.542] wcscat (in: _Dest=0x3f33978, _Source="de_DE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" [0135.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0135.544] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0135.544] wcscmp (_String1="en_US", _String2=".") returned 1 [0135.544] wcscmp (_String1="en_US", _String2="..") returned 1 [0135.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f339e8 [0135.544] wcscpy (in: _Dest=0x3f339e8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.544] wcscat (in: _Dest=0x3f339e8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.544] wcscat (in: _Dest=0x3f339e8, _Source="en_US" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" [0135.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f339e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0135.545] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0135.545] wcscmp (_String1="es_ES", _String2=".") returned 1 [0135.545] wcscmp (_String1="es_ES", _String2="..") returned 1 [0135.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33a58 [0135.546] wcscpy (in: _Dest=0x3f33a58, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.546] wcscat (in: _Dest=0x3f33a58, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.546] wcscat (in: _Dest=0x3f33a58, _Source="es_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" [0135.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0135.547] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0135.547] wcscmp (_String1="eu_ES", _String2=".") returned 1 [0135.547] wcscmp (_String1="eu_ES", _String2="..") returned 1 [0135.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33ac8 [0135.547] wcscpy (in: _Dest=0x3f33ac8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.547] wcscat (in: _Dest=0x3f33ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.548] wcscat (in: _Dest=0x3f33ac8, _Source="eu_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" [0135.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0135.549] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0135.549] wcscmp (_String1="fi_FI", _String2=".") returned 1 [0135.549] wcscmp (_String1="fi_FI", _String2="..") returned 1 [0135.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33b38 [0135.549] wcscpy (in: _Dest=0x3f33b38, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.549] wcscat (in: _Dest=0x3f33b38, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.549] wcscat (in: _Dest=0x3f33b38, _Source="fi_FI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" [0135.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0135.551] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0135.551] wcscmp (_String1="fr_FR", _String2=".") returned 1 [0135.551] wcscmp (_String1="fr_FR", _String2="..") returned 1 [0135.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33ba8 [0135.551] wcscpy (in: _Dest=0x3f33ba8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.551] wcscat (in: _Dest=0x3f33ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.551] wcscat (in: _Dest=0x3f33ba8, _Source="fr_FR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" [0135.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0 [0135.552] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0135.553] wcscmp (_String1="hr_HR", _String2=".") returned 1 [0135.553] wcscmp (_String1="hr_HR", _String2="..") returned 1 [0135.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33c18 [0135.553] wcscpy (in: _Dest=0x3f33c18, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.553] wcscat (in: _Dest=0x3f33c18, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.553] wcscat (in: _Dest=0x3f33c18, _Source="hr_HR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" [0135.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0135.554] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0135.554] wcscmp (_String1="hu_HU", _String2=".") returned 1 [0135.554] wcscmp (_String1="hu_HU", _String2="..") returned 1 [0135.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33c88 [0135.554] wcscpy (in: _Dest=0x3f33c88, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.555] wcscat (in: _Dest=0x3f33c88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.555] wcscat (in: _Dest=0x3f33c88, _Source="hu_HU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" [0135.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0135.556] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0135.556] wcscmp (_String1="it_IT", _String2=".") returned 1 [0135.556] wcscmp (_String1="it_IT", _String2="..") returned 1 [0135.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33cf8 [0135.556] wcscpy (in: _Dest=0x3f33cf8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.556] wcscat (in: _Dest=0x3f33cf8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.556] wcscat (in: _Dest=0x3f33cf8, _Source="it_IT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" [0135.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33cf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0135.558] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0135.558] wcscmp (_String1="ja_JP", _String2=".") returned 1 [0135.558] wcscmp (_String1="ja_JP", _String2="..") returned 1 [0135.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33d68 [0135.558] wcscpy (in: _Dest=0x3f33d68, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.558] wcscat (in: _Dest=0x3f33d68, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.558] wcscat (in: _Dest=0x3f33d68, _Source="ja_JP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" [0135.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0135.560] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0135.560] wcscmp (_String1="ko_KR", _String2=".") returned 1 [0135.560] wcscmp (_String1="ko_KR", _String2="..") returned 1 [0135.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33dd8 [0135.560] wcscpy (in: _Dest=0x3f33dd8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.560] wcscat (in: _Dest=0x3f33dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.560] wcscat (in: _Dest=0x3f33dd8, _Source="ko_KR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" [0135.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0135.562] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0135.562] wcscmp (_String1="nb_NO", _String2=".") returned 1 [0135.562] wcscmp (_String1="nb_NO", _String2="..") returned 1 [0135.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33e48 [0135.562] wcscpy (in: _Dest=0x3f33e48, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.562] wcscat (in: _Dest=0x3f33e48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.562] wcscat (in: _Dest=0x3f33e48, _Source="nb_NO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" [0135.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0135.564] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0135.564] wcscmp (_String1="nl_NL", _String2=".") returned 1 [0135.564] wcscmp (_String1="nl_NL", _String2="..") returned 1 [0135.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33eb8 [0135.615] wcscpy (in: _Dest=0x3f33eb8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.615] wcscat (in: _Dest=0x3f33eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.615] wcscat (in: _Dest=0x3f33eb8, _Source="nl_NL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" [0135.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0135.616] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0135.616] wcscmp (_String1="pl_PL", _String2=".") returned 1 [0135.616] wcscmp (_String1="pl_PL", _String2="..") returned 1 [0135.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33f28 [0135.616] wcscpy (in: _Dest=0x3f33f28, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.616] wcscat (in: _Dest=0x3f33f28, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.616] wcscat (in: _Dest=0x3f33f28, _Source="pl_PL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" [0135.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0135.618] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0135.618] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0135.618] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0135.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33f98 [0135.618] wcscpy (in: _Dest=0x3f33f98, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.618] wcscat (in: _Dest=0x3f33f98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.618] wcscat (in: _Dest=0x3f33f98, _Source="pt_BR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" [0135.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0135.620] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0135.620] wcscmp (_String1="ro_RO", _String2=".") returned 1 [0135.620] wcscmp (_String1="ro_RO", _String2="..") returned 1 [0135.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f34008 [0135.620] wcscpy (in: _Dest=0x3f34008, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.620] wcscat (in: _Dest=0x3f34008, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.620] wcscat (in: _Dest=0x3f34008, _Source="ro_RO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" [0135.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f34008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0135.621] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0135.621] wcscmp (_String1="ru_RU", _String2=".") returned 1 [0135.621] wcscmp (_String1="ru_RU", _String2="..") returned 1 [0135.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f34078 [0135.621] wcscpy (in: _Dest=0x3f34078, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.622] wcscat (in: _Dest=0x3f34078, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.622] wcscat (in: _Dest=0x3f34078, _Source="ru_RU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" [0135.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f34078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0135.623] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0135.623] wcscmp (_String1="sk_SK", _String2=".") returned 1 [0135.623] wcscmp (_String1="sk_SK", _String2="..") returned 1 [0135.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f340e8 [0135.623] wcscpy (in: _Dest=0x3f340e8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.623] wcscat (in: _Dest=0x3f340e8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.623] wcscat (in: _Dest=0x3f340e8, _Source="sk_SK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" [0135.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f340e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0135.624] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0135.624] wcscmp (_String1="sl_SI", _String2=".") returned 1 [0135.625] wcscmp (_String1="sl_SI", _String2="..") returned 1 [0135.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f34158 [0135.625] wcscpy (in: _Dest=0x3f34158, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.625] wcscat (in: _Dest=0x3f34158, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0135.625] wcscat (in: _Dest=0x3f34158, _Source="sl_SI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" [0135.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f34158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0136.023] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0136.023] wcscmp (_String1="sv_SE", _String2=".") returned 1 [0136.023] wcscmp (_String1="sv_SE", _String2="..") returned 1 [0136.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8054af0 [0136.023] wcscpy (in: _Dest=0x8054af0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0136.023] wcscat (in: _Dest=0x8054af0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0136.023] wcscat (in: _Dest=0x8054af0, _Source="sv_SE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" [0138.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0 [0138.930] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0138.930] wcscmp (_String1="tr_TR", _String2=".") returned 1 [0138.930] wcscmp (_String1="tr_TR", _String2="..") returned 1 [0138.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f395b8 [0138.930] wcscpy (in: _Dest=0x3f395b8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0138.930] wcscat (in: _Dest=0x3f395b8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0138.930] wcscat (in: _Dest=0x3f395b8, _Source="tr_TR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" [0138.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f395b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0138.932] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0138.932] wcscmp (_String1="uk_UA", _String2=".") returned 1 [0138.932] wcscmp (_String1="uk_UA", _String2="..") returned 1 [0138.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39a88 [0138.932] wcscpy (in: _Dest=0x3f39a88, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0138.932] wcscat (in: _Dest=0x3f39a88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0138.932] wcscat (in: _Dest=0x3f39a88, _Source="uk_UA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" [0138.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0138.934] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0138.934] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0138.934] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0138.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39a18 [0138.934] wcscpy (in: _Dest=0x3f39a18, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0138.934] wcscat (in: _Dest=0x3f39a18, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0138.934] wcscat (in: _Dest=0x3f39a18, _Source="zh_CN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" [0138.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0138.936] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0138.936] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0138.936] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0138.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39708 [0138.936] wcscpy (in: _Dest=0x3f39708, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0138.936] wcscat (in: _Dest=0x3f39708, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0138.936] wcscat (in: _Dest=0x3f39708, _Source="zh_TW" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" [0138.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0138.938] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0138.938] FindClose (in: hFindFile=0x3f38098 | out: hFindFile=0x3f38098) returned 1 [0138.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0138.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e758) returned 1 [0138.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe2b88) returned 1 Thread: id = 256 os_tid = 0x4c0 [0131.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3df9e80 [0131.523] wcscpy (in: _Dest=0x3df9e80, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0131.523] wcscat (in: _Dest=0x3df9e80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0131.523] wcscat (in: _Dest=0x3df9e80, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\*" [0131.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0131.524] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd00d0 [0131.524] wcscmp (_String1=".", _String2=".") returned 0 [0131.524] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.524] wcscmp (_String1="..", _String2=".") returned 1 [0131.524] wcscmp (_String1="..", _String2="..") returned 0 [0131.524] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0131.524] wcscmp (_String1="Outbound", _String2=".") returned 1 [0131.524] wcscmp (_String1="Outbound", _String2="..") returned 1 [0131.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6ef38 [0131.524] wcscpy (in: _Dest=0x3e6ef38, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0131.524] wcscat (in: _Dest=0x3e6ef38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0131.524] wcscat (in: _Dest=0x3e6ef38, _Source="Outbound" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound" [0131.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ef38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0131.754] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0131.754] wcscmp (_String1="PublishedData", _String2=".") returned 1 [0131.754] wcscmp (_String1="PublishedData", _String2="..") returned 1 [0131.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6908 [0131.754] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0131.754] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0131.754] wcscat (in: _Dest=0x2fe6908, _Source="PublishedData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0131.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0131.756] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0131.756] wcscmp (_String1="StateData", _String2=".") returned 1 [0131.756] wcscmp (_String1="StateData", _String2="..") returned 1 [0131.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6f0f0 [0131.756] wcscpy (in: _Dest=0x3e6f0f0, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0131.756] wcscat (in: _Dest=0x3e6f0f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0131.756] wcscat (in: _Dest=0x3e6f0f0, _Source="StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0131.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6f0f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0131.758] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc4b83e00, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc4b83e00, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0131.758] wcscmp (_String1="Temp", _String2=".") returned 1 [0131.758] wcscmp (_String1="Temp", _String2="..") returned 1 [0131.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e58068 [0131.758] wcscpy (in: _Dest=0x3e58068, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0131.758] wcscat (in: _Dest=0x3e58068, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0131.758] wcscat (in: _Dest=0x3e58068, _Source="Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0131.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e58068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0131.760] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc4b83e00, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc4b83e00, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0131.760] FindClose (in: hFindFile=0x3dd00d0 | out: hFindFile=0x3dd00d0) returned 1 [0131.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0131.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9e80) returned 1 [0131.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a110) returned 1 Thread: id = 257 os_tid = 0x7dc [0131.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de66f8 [0131.525] wcscpy (in: _Dest=0x3de66f8, _Source="C:\\ProgramData\\Microsoft\\Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0131.525] wcscat (in: _Dest=0x3de66f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\") returned="C:\\ProgramData\\Microsoft\\Search\\" [0131.525] wcscat (in: _Dest=0x3de66f8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\*") returned="C:\\ProgramData\\Microsoft\\Search\\*" [0131.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0131.525] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0132.520] wcscmp (_String1=".", _String2=".") returned 0 [0132.520] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.520] wcscmp (_String1="..", _String2=".") returned 1 [0132.520] wcscmp (_String1="..", _String2="..") returned 0 [0132.520] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0132.520] wcscmp (_String1="Data", _String2=".") returned 1 [0132.520] wcscmp (_String1="Data", _String2="..") returned 1 [0132.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6ed80 [0132.520] wcscpy (in: _Dest=0x3e6ed80, _Source="C:\\ProgramData\\Microsoft\\Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0132.520] wcscat (in: _Dest=0x3e6ed80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\") returned="C:\\ProgramData\\Microsoft\\Search\\" [0132.520] wcscat (in: _Dest=0x3e6ed80, _Source="Data" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data" [0134.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0134.166] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0134.166] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0134.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0134.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de66f8) returned 1 [0134.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9cd0) returned 1 Thread: id = 258 os_tid = 0x2c0 [0131.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db16a8 [0131.526] wcscpy (in: _Dest=0x3db16a8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0131.526] wcscat (in: _Dest=0x3db16a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0131.526] wcscat (in: _Dest=0x3db16a8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\*") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\*" [0131.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046f08 [0131.526] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf390 [0131.526] wcscmp (_String1=".", _String2=".") returned 0 [0131.526] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.526] wcscmp (_String1="..", _String2=".") returned 1 [0131.526] wcscmp (_String1="..", _String2="..") returned 0 [0131.526] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0131.527] wcscmp (_String1="Default Pictures", _String2=".") returned 1 [0131.527] wcscmp (_String1="Default Pictures", _String2="..") returned 1 [0131.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e20a98 [0131.527] wcscpy (in: _Dest=0x3e20a98, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0131.527] wcscat (in: _Dest=0x3e20a98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0131.527] wcscat (in: _Dest=0x3e20a98, _Source="Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0131.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e20a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0131.836] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9250c90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEBsYm5.dat", cAlternateFileName="")) returned 1 [0131.836] wcscmp (_String1="EEBsYm5.dat", _String2=".") returned 1 [0131.836] wcscmp (_String1="EEBsYm5.dat", _String2="..") returned 1 [0131.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3e08 [0131.836] wcscpy (in: _Dest=0x3dc3e08, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0131.836] wcscat (in: _Dest=0x3dc3e08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0131.836] wcscat (in: _Dest=0x3dc3e08, _Source="EEBsYm5.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat" [0131.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc [0131.838] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0131.838] wcscmp (_String1="guest.bmp", _String2=".") returned 1 [0131.838] wcscmp (_String1="guest.bmp", _String2="..") returned 1 [0131.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc3d88 [0131.838] wcscpy (in: _Dest=0x3dc3d88, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0131.838] wcscat (in: _Dest=0x3dc3d88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0131.839] wcscat (in: _Dest=0x3dc3d88, _Source="guest.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" [0131.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0131.845] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0131.845] wcscmp (_String1="user.bmp", _String2=".") returned 1 [0131.845] wcscmp (_String1="user.bmp", _String2="..") returned 1 [0131.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f327f0 [0131.845] wcscpy (in: _Dest=0x3f327f0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0131.845] wcscat (in: _Dest=0x3f327f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0131.845] wcscat (in: _Dest=0x3f327f0, _Source="user.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" [0131.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f327f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0131.846] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0131.846] FindClose (in: hFindFile=0x3dcf390 | out: hFindFile=0x3dcf390) returned 1 [0131.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046f08) returned 1 [0131.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db16a8) returned 1 [0131.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c810) returned 1 Thread: id = 259 os_tid = 0x2a4 [0131.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6ab8 [0131.527] wcscpy (in: _Dest=0x3de6ab8, _Source="C:\\ProgramData\\Microsoft\\Vault" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault" [0131.527] wcscat (in: _Dest=0x3de6ab8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\") returned="C:\\ProgramData\\Microsoft\\Vault\\" [0131.527] wcscat (in: _Dest=0x3de6ab8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\*") returned="C:\\ProgramData\\Microsoft\\Vault\\*" [0131.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047170 [0131.527] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0132.544] wcscmp (_String1=".", _String2=".") returned 0 [0132.544] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.544] wcscmp (_String1="..", _String2=".") returned 1 [0132.544] wcscmp (_String1="..", _String2="..") returned 0 [0132.544] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.544] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0132.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047170) returned 1 [0132.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6ab8) returned 1 [0132.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9e38) returned 1 Thread: id = 260 os_tid = 0x218 [0131.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6b08 [0131.528] wcscpy (in: _Dest=0x3de6b08, _Source="C:\\ProgramData\\Microsoft\\VISIO" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO") returned="C:\\ProgramData\\Microsoft\\VISIO" [0131.528] wcscat (in: _Dest=0x3de6b08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO\\") returned="C:\\ProgramData\\Microsoft\\VISIO\\" [0131.528] wcscat (in: _Dest=0x3de6b08, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO\\*") returned="C:\\ProgramData\\Microsoft\\VISIO\\*" [0131.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80473d8 [0131.528] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0132.536] wcscmp (_String1=".", _String2=".") returned 0 [0132.536] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.536] wcscmp (_String1="..", _String2=".") returned 1 [0132.536] wcscmp (_String1="..", _String2="..") returned 0 [0132.536] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.536] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0132.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80473d8) returned 1 [0132.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6b08) returned 1 [0132.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa108) returned 1 Thread: id = 261 os_tid = 0x414 [0131.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de64c8 [0131.528] wcscpy (in: _Dest=0x3de64c8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.528] wcscat (in: _Dest=0x3de64c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.528] wcscat (in: _Dest=0x3de64c8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\*" [0131.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047640 [0131.528] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.529] wcscmp (_String1=".", _String2=".") returned 0 [0131.529] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.529] wcscmp (_String1="..", _String2=".") returned 1 [0131.529] wcscmp (_String1="..", _String2="..") returned 0 [0131.529] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0131.529] wcscmp (_String1="AIT", _String2=".") returned 1 [0131.529] wcscmp (_String1="AIT", _String2="..") returned 1 [0131.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6ef90 [0131.529] wcscpy (in: _Dest=0x3e6ef90, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.529] wcscat (in: _Dest=0x3e6ef90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.529] wcscat (in: _Dest=0x3e6ef90, _Source="AIT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT" [0131.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ef90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0131.889] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b470439, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xd800ce10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd800ce10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0131.889] wcscmp (_String1="Caches", _String2=".") returned 1 [0131.889] wcscmp (_String1="Caches", _String2="..") returned 1 [0131.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ec78 [0131.889] wcscpy (in: _Dest=0x3e6ec78, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.889] wcscat (in: _Dest=0x3e6ec78, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.889] wcscat (in: _Dest=0x3e6ec78, _Source="Caches" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Caches") returned="C:\\ProgramData\\Microsoft\\Windows\\Caches" [0131.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ec78) returned 1 [0131.889] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0131.889] wcscmp (_String1="DeviceMetadataStore", _String2=".") returned 1 [0131.889] wcscmp (_String1="DeviceMetadataStore", _String2="..") returned 1 [0131.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32868 [0131.890] wcscpy (in: _Dest=0x3f32868, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.890] wcscat (in: _Dest=0x3f32868, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.890] wcscat (in: _Dest=0x3f32868, _Source="DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0131.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0131.891] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0131.891] wcscmp (_String1="DRM", _String2=".") returned 1 [0131.891] wcscmp (_String1="DRM", _String2="..") returned 1 [0131.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6ec78 [0131.891] wcscpy (in: _Dest=0x3e6ec78, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.891] wcscat (in: _Dest=0x3e6ec78, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.891] wcscat (in: _Dest=0x3e6ec78, _Source="DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0131.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ec78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0131.892] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0131.892] wcscmp (_String1="GameExplorer", _String2=".") returned 1 [0131.892] wcscmp (_String1="GameExplorer", _String2="..") returned 1 [0131.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c810 [0131.892] wcscpy (in: _Dest=0x3d8c810, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.892] wcscat (in: _Dest=0x3d8c810, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.892] wcscat (in: _Dest=0x3d8c810, _Source="GameExplorer" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" [0131.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0131.893] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7202b9f0, ftLastAccessTime.dwHighDateTime=0x1d30232, ftLastWriteTime.dwLowDateTime=0x7202b9f0, ftLastWriteTime.dwHighDateTime=0x1d30232, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0131.894] wcscmp (_String1="Power Efficiency Diagnostics", _String2=".") returned 1 [0131.894] wcscmp (_String1="Power Efficiency Diagnostics", _String2="..") returned 1 [0131.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e202a0 [0131.894] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.894] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.894] wcscat (in: _Dest=0x3e202a0, _Source="Power Efficiency Diagnostics" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0131.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0131.895] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0131.895] wcscmp (_String1="Ringtones", _String2=".") returned 1 [0131.895] wcscmp (_String1="Ringtones", _String2="..") returned 1 [0131.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6788 [0131.895] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.895] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.895] wcscat (in: _Dest=0x2fe6788, _Source="Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0131.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0131.896] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0131.896] wcscmp (_String1="Sqm", _String2=".") returned 1 [0131.896] wcscmp (_String1="Sqm", _String2="..") returned 1 [0131.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e234e0 [0131.896] wcscpy (in: _Dest=0x3e234e0, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.896] wcscat (in: _Dest=0x3e234e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.897] wcscat (in: _Dest=0x3e234e0, _Source="Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0131.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e234e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0131.898] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0131.898] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0131.898] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0131.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6608 [0131.898] wcscpy (in: _Dest=0x2fe6608, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.898] wcscat (in: _Dest=0x2fe6608, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.898] wcscat (in: _Dest=0x2fe6608, _Source="Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0131.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0131.899] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0131.900] wcscmp (_String1="Templates", _String2=".") returned 1 [0131.900] wcscmp (_String1="Templates", _String2="..") returned 1 [0131.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1328 [0131.900] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.900] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.900] wcscat (in: _Dest=0x2fe1328, _Source="Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates" [0131.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0131.901] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0131.901] wcscmp (_String1="WER", _String2=".") returned 1 [0131.901] wcscmp (_String1="WER", _String2="..") returned 1 [0131.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e22fb8 [0131.901] wcscpy (in: _Dest=0x3e22fb8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0131.901] wcscat (in: _Dest=0x3e22fb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0131.901] wcscat (in: _Dest=0x3e22fb8, _Source="WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0131.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0131.903] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0131.903] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047640) returned 1 [0131.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de64c8) returned 1 [0131.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5e88) returned 1 Thread: id = 262 os_tid = 0x7a8 [0131.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6efe8 [0131.530] wcscpy (in: _Dest=0x3e6efe8, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0131.530] wcscat (in: _Dest=0x3e6efe8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\" [0131.530] wcscat (in: _Dest=0x3e6efe8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\*" [0131.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0131.530] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f18 [0132.535] wcscmp (_String1=".", _String2=".") returned 0 [0132.535] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.535] wcscmp (_String1="..", _String2=".") returned 1 [0132.535] wcscmp (_String1="..", _String2="..") returned 0 [0132.535] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0132.535] wcscmp (_String1="MSFax", _String2=".") returned 1 [0132.535] wcscmp (_String1="MSFax", _String2="..") returned 1 [0132.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7148 [0132.535] wcscpy (in: _Dest=0x2fe7148, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0132.535] wcscat (in: _Dest=0x2fe7148, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\" [0132.535] wcscat (in: _Dest=0x2fe7148, _Source="MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" [0133.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe7148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0133.682] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0133.682] wcscmp (_String1="MSScan", _String2=".") returned 1 [0133.682] wcscmp (_String1="MSScan", _String2="..") returned 1 [0133.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe75c8 [0133.682] wcscpy (in: _Dest=0x2fe75c8, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0133.682] wcscat (in: _Dest=0x2fe75c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\" [0133.683] wcscat (in: _Dest=0x2fe75c8, _Source="MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0133.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe75c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0133.684] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0133.684] FindClose (in: hFindFile=0x3f37f18 | out: hFindFile=0x3f37f18) returned 1 [0133.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0133.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6efe8) returned 1 [0133.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6518) returned 1 Thread: id = 263 os_tid = 0x4d0 [0131.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6978 [0131.530] wcscpy (in: _Dest=0x3de6978, _Source="C:\\ProgramData\\Microsoft\\WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0131.530] wcscat (in: _Dest=0x3de6978, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\" [0131.530] wcscat (in: _Dest=0x3de6978, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\*") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\*" [0131.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047b10 [0131.530] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0132.534] wcscmp (_String1=".", _String2=".") returned 0 [0132.534] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.534] wcscmp (_String1="..", _String2=".") returned 1 [0132.534] wcscmp (_String1="..", _String2="..") returned 0 [0132.534] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0132.534] wcscmp (_String1="Profiles", _String2=".") returned 1 [0132.534] wcscmp (_String1="Profiles", _String2="..") returned 1 [0132.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe70e8 [0132.534] wcscpy (in: _Dest=0x2fe70e8, _Source="C:\\ProgramData\\Microsoft\\WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0132.534] wcscat (in: _Dest=0x2fe70e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\" [0132.534] wcscat (in: _Dest=0x2fe70e8, _Source="Profiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" [0134.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe70e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0134.169] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0134.169] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0134.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047b10) returned 1 [0134.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6978) returned 1 [0134.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5bb8) returned 1 Thread: id = 264 os_tid = 0x784 [0131.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x355dd0 [0131.531] wcscpy (in: _Dest=0x355dd0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0131.531] wcscat (in: _Dest=0x355dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0131.531] wcscat (in: _Dest=0x355dd0, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*" [0131.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047d78 [0131.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1318c0b0, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x1318c0b0, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0131.976] wcscmp (_String1=".", _String2=".") returned 0 [0131.976] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1318c0b0, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x1318c0b0, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.976] wcscmp (_String1="..", _String2=".") returned 1 [0131.976] wcscmp (_String1="..", _String2="..") returned 0 [0131.976] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8adb1890, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8adb1890, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xef5d6500, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0131.976] wcscmp (_String1="PresentationBuildTasks.dll", _String2=".") returned 1 [0131.976] wcscmp (_String1="PresentationBuildTasks.dll", _String2="..") returned 1 [0131.976] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a231830, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3a231830, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf08e9200, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0131.977] wcscmp (_String1="PresentationCore.dll", _String2=".") returned 1 [0131.977] wcscmp (_String1="PresentationCore.dll", _String2="..") returned 1 [0131.977] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0131.977] wcscmp (_String1="PresentationFramework.Aero.dll", _String2=".") returned 1 [0131.977] wcscmp (_String1="PresentationFramework.Aero.dll", _String2="..") returned 1 [0131.977] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0131.977] wcscmp (_String1="PresentationFramework.Classic.dll", _String2=".") returned 1 [0131.977] wcscmp (_String1="PresentationFramework.Classic.dll", _String2="..") returned 1 [0131.977] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad3f470, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8ad3f470, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf08e9200, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0131.977] wcscmp (_String1="PresentationFramework.dll", _String2=".") returned 1 [0131.977] wcscmp (_String1="PresentationFramework.dll", _String2="..") returned 1 [0131.977] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a33c1d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3a33c1d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf08e9200, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0131.977] wcscmp (_String1="PresentationFramework.Luna.dll", _String2=".") returned 1 [0131.977] wcscmp (_String1="PresentationFramework.Luna.dll", _String2="..") returned 1 [0131.977] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0131.977] wcscmp (_String1="PresentationFramework.Royale.dll", _String2=".") returned 1 [0131.977] wcscmp (_String1="PresentationFramework.Royale.dll", _String2="..") returned 1 [0131.977] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ba30b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x91ba30b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf1bfbf00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0131.977] wcscmp (_String1="ReachFramework.dll", _String2=".") returned 1 [0131.977] wcscmp (_String1="ReachFramework.dll", _String2="..") returned 1 [0131.977] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0131.977] wcscmp (_String1="RedistList", _String2=".") returned 1 [0131.977] wcscmp (_String1="RedistList", _String2="..") returned 1 [0131.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c74b8 [0131.978] wcscpy (in: _Dest=0x2c74b8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0131.978] wcscat (in: _Dest=0x2c74b8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0131.978] wcscat (in: _Dest=0x2c74b8, _Source="RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" [0133.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c74b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1070 [0133.757] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0133.757] wcscmp (_String1="SubsetList", _String2=".") returned 1 [0133.757] wcscmp (_String1="SubsetList", _String2="..") returned 1 [0133.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0133.757] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0133.757] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0133.757] wcscat (in: _Dest=0x2c75f8, _Source="SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" [0133.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48 [0133.759] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a216d50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a216d50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xcf2da600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0133.759] wcscmp (_String1="System.IdentityModel.dll", _String2=".") returned 1 [0133.759] wcscmp (_String1="System.IdentityModel.dll", _String2="..") returned 1 [0133.759] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380de430, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x380de430, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xcf2da600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0133.759] wcscmp (_String1="System.IdentityModel.Selectors.dll", _String2=".") returned 1 [0133.759] wcscmp (_String1="System.IdentityModel.Selectors.dll", _String2="..") returned 1 [0133.759] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0133.759] wcscmp (_String1="System.IO.Log.dll", _String2=".") returned 1 [0133.759] wcscmp (_String1="System.IO.Log.dll", _String2="..") returned 1 [0133.759] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a36d9b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a36d9b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf1bfbf00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0133.759] wcscmp (_String1="System.Printing.dll", _String2=".") returned 1 [0133.759] wcscmp (_String1="System.Printing.dll", _String2="..") returned 1 [0133.759] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2d5430, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a2d5430, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xcf2da600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0133.759] wcscmp (_String1="System.Runtime.Serialization.dll", _String2=".") returned 1 [0133.759] wcscmp (_String1="System.Runtime.Serialization.dll", _String2="..") returned 1 [0133.759] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3820ef30, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3820ef30, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xd1900000, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0133.759] wcscmp (_String1="System.ServiceModel.dll", _String2=".") returned 1 [0133.759] wcscmp (_String1="System.ServiceModel.dll", _String2="..") returned 1 [0133.759] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0133.759] wcscmp (_String1="System.Speech.dll", _String2=".") returned 1 [0133.760] wcscmp (_String1="System.Speech.dll", _String2="..") returned 1 [0133.760] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xfdab8100, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0133.760] wcscmp (_String1="System.Workflow.Activities.dll", _String2=".") returned 1 [0133.760] wcscmp (_String1="System.Workflow.Activities.dll", _String2="..") returned 1 [0133.760] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a94eb0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a94eb0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xfedcae00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0133.760] wcscmp (_String1="System.Workflow.ComponentModel.dll", _String2=".") returned 1 [0133.760] wcscmp (_String1="System.Workflow.ComponentModel.dll", _String2="..") returned 1 [0133.760] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xfedcae00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0133.760] wcscmp (_String1="System.Workflow.Runtime.dll", _String2=".") returned 1 [0133.760] wcscmp (_String1="System.Workflow.Runtime.dll", _String2="..") returned 1 [0133.760] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0133.760] wcscmp (_String1="UIAutomationClient.dll", _String2=".") returned 1 [0133.760] wcscmp (_String1="UIAutomationClient.dll", _String2="..") returned 1 [0133.760] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0133.760] wcscmp (_String1="UIAutomationClientsideProviders.dll", _String2=".") returned 1 [0133.760] wcscmp (_String1="UIAutomationClientsideProviders.dll", _String2="..") returned 1 [0133.760] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0133.760] wcscmp (_String1="UIAutomationProvider.dll", _String2=".") returned 1 [0133.760] wcscmp (_String1="UIAutomationProvider.dll", _String2="..") returned 1 [0133.760] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0133.760] wcscmp (_String1="UIAutomationTypes.dll", _String2=".") returned 1 [0133.761] wcscmp (_String1="UIAutomationTypes.dll", _String2="..") returned 1 [0133.761] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932d8730, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x932d8730, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf2f0ec00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0133.761] wcscmp (_String1="WindowsBase.dll", _String2=".") returned 1 [0133.761] wcscmp (_String1="WindowsBase.dll", _String2="..") returned 1 [0133.761] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0133.761] wcscmp (_String1="WindowsFormsIntegration.dll", _String2=".") returned 1 [0133.761] wcscmp (_String1="WindowsFormsIntegration.dll", _String2="..") returned 1 [0133.761] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e0b6fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21a484a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21a484a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0133.761] wcscmp (_String1="WinFXList.xml", _String2=".") returned 1 [0133.761] wcscmp (_String1="WinFXList.xml", _String2="..") returned 1 [0133.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d098 [0133.761] wcscpy (in: _Dest=0x3e2d098, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0133.761] wcscat (in: _Dest=0x3e2d098, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0133.761] wcscat (in: _Dest=0x3e2d098, _Source="WinFXList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" [0133.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0133.762] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e0b6fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21a484a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21a484a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0 [0133.762] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0133.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047d78) returned 1 [0133.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355dd0) returned 1 [0133.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 265 os_tid = 0x6cc [0131.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x355200 [0131.542] wcscpy (in: _Dest=0x355200, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0131.542] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\" [0131.542] wcscat (in: _Dest=0x355200, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*" [0131.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047fe0 [0131.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37918 [0132.421] wcscmp (_String1=".", _String2=".") returned 0 [0132.421] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.272] wcscmp (_String1="..", _String2=".") returned 1 [0133.272] wcscmp (_String1="..", _String2="..") returned 0 [0133.272] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0133.272] wcscmp (_String1="Microsoft.Build.Conversion.v3.5.dll", _String2=".") returned 1 [0133.272] wcscmp (_String1="Microsoft.Build.Conversion.v3.5.dll", _String2="..") returned 1 [0133.272] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a492e30, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3a492e30, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0133.272] wcscmp (_String1="Microsoft.Build.Engine.dll", _String2=".") returned 1 [0133.272] wcscmp (_String1="Microsoft.Build.Engine.dll", _String2="..") returned 1 [0133.273] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0133.273] wcscmp (_String1="Microsoft.Build.Framework.dll", _String2=".") returned 1 [0133.273] wcscmp (_String1="Microsoft.Build.Framework.dll", _String2="..") returned 1 [0133.273] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9166e090, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x9166e090, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0133.273] wcscmp (_String1="Microsoft.Build.Utilities.v3.5.dll", _String2=".") returned 1 [0133.273] wcscmp (_String1="Microsoft.Build.Utilities.v3.5.dll", _String2="..") returned 1 [0133.273] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0133.273] wcscmp (_String1="Microsoft.VisualC.STLCLR.dll", _String2=".") returned 1 [0133.273] wcscmp (_String1="Microsoft.VisualC.STLCLR.dll", _String2="..") returned 1 [0133.273] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0133.273] wcscmp (_String1="RedistList", _String2=".") returned 1 [0133.273] wcscmp (_String1="RedistList", _String2="..") returned 1 [0133.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7698 [0133.273] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0133.273] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\" [0133.273] wcscat (in: _Dest=0x2c7698, _Source="RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" [0139.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0139.649] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0139.649] wcscmp (_String1="SubsetList", _String2=".") returned 1 [0139.649] wcscmp (_String1="SubsetList", _String2="..") returned 1 [0139.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0139.649] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0139.649] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\" [0139.649] wcscat (in: _Dest=0x2c75f8, _Source="SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" [0139.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0139.650] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9380d750, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x9380d750, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0139.650] wcscmp (_String1="System.AddIn.Contract.dll", _String2=".") returned 1 [0139.650] wcscmp (_String1="System.AddIn.Contract.dll", _String2="..") returned 1 [0139.650] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2aba70, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c2aba70, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0139.650] wcscmp (_String1="System.AddIn.dll", _String2=".") returned 1 [0139.650] wcscmp (_String1="System.AddIn.dll", _String2="..") returned 1 [0139.650] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2aba70, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c2aba70, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0139.651] wcscmp (_String1="System.ComponentModel.DataAnnotations.dll", _String2=".") returned 1 [0139.651] wcscmp (_String1="System.ComponentModel.DataAnnotations.dll", _String2="..") returned 1 [0139.651] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc3a8d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3bc3a8d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0139.651] wcscmp (_String1="System.Core.dll", _String2=".") returned 1 [0139.651] wcscmp (_String1="System.Core.dll", _String2="..") returned 1 [0139.651] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382cd610, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x382cd610, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0139.651] wcscmp (_String1="System.Data.DataSetExtensions.dll", _String2=".") returned 1 [0139.651] wcscmp (_String1="System.Data.DataSetExtensions.dll", _String2="..") returned 1 [0139.651] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a216d50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a216d50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0139.651] wcscmp (_String1="System.Data.Entity.Design.dll", _String2=".") returned 1 [0139.651] wcscmp (_String1="System.Data.Entity.Design.dll", _String2="..") returned 1 [0139.651] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2134f0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c2134f0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0139.651] wcscmp (_String1="System.Data.Entity.dll", _String2=".") returned 1 [0139.651] wcscmp (_String1="System.Data.Entity.dll", _String2="..") returned 1 [0139.651] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c285910, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c285910, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0139.652] wcscmp (_String1="System.Data.Linq.dll", _String2=".") returned 1 [0139.652] wcscmp (_String1="System.Data.Linq.dll", _String2="..") returned 1 [0139.652] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a216d50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a216d50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0139.652] wcscmp (_String1="System.Data.Services.Client.dll", _String2=".") returned 1 [0139.652] wcscmp (_String1="System.Data.Services.Client.dll", _String2="..") returned 1 [0139.652] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383fe110, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x383fe110, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0139.652] wcscmp (_String1="System.Data.Services.Design.dll", _String2=".") returned 1 [0139.652] wcscmp (_String1="System.Data.Services.Design.dll", _String2="..") returned 1 [0139.652] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383b1e50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x383b1e50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0139.652] wcscmp (_String1="System.Data.Services.dll", _String2=".") returned 1 [0139.652] wcscmp (_String1="System.Data.Services.dll", _String2="..") returned 1 [0139.652] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a48bf0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a48bf0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0139.652] wcscmp (_String1="System.DirectoryServices.AccountManagement.dll", _String2=".") returned 1 [0139.652] wcscmp (_String1="System.DirectoryServices.AccountManagement.dll", _String2="..") returned 1 [0139.652] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a36d9b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a36d9b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0139.652] wcscmp (_String1="System.Management.Instrumentation.dll", _String2=".") returned 1 [0139.652] wcscmp (_String1="System.Management.Instrumentation.dll", _String2="..") returned 1 [0139.652] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a22a90, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a22a90, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0139.652] wcscmp (_String1="System.Net.dll", _String2=".") returned 1 [0139.652] wcscmp (_String1="System.Net.dll", _String2="..") returned 1 [0139.652] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a94eb0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a94eb0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xd9e83b00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0139.652] wcscmp (_String1="System.ServiceModel.Web.dll", _String2=".") returned 1 [0139.653] wcscmp (_String1="System.ServiceModel.Web.dll", _String2="..") returned 1 [0139.653] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c343ff0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c343ff0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0139.653] wcscmp (_String1="System.Web.Abstractions.dll", _String2=".") returned 1 [0139.653] wcscmp (_String1="System.Web.Abstractions.dll", _String2="..") returned 1 [0139.653] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x381769b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x381769b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0139.653] wcscmp (_String1="System.Web.DynamicData.Design.dll", _String2=".") returned 1 [0139.653] wcscmp (_String1="System.Web.DynamicData.Design.dll", _String2="..") returned 1 [0139.653] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93abb010, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93abb010, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0139.653] wcscmp (_String1="System.Web.DynamicData.dll", _String2=".") returned 1 [0139.653] wcscmp (_String1="System.Web.DynamicData.dll", _String2="..") returned 1 [0139.653] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f32bab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8f32bab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0139.653] wcscmp (_String1="System.Web.Entity.Design.dll", _String2=".") returned 1 [0139.653] wcscmp (_String1="System.Web.Entity.Design.dll", _String2="..") returned 1 [0139.653] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384bc7f0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x384bc7f0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0139.653] wcscmp (_String1="System.Web.Entity.dll", _String2=".") returned 1 [0139.653] wcscmp (_String1="System.Web.Entity.dll", _String2="..") returned 1 [0139.653] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384e2950, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x384e2950, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0139.653] wcscmp (_String1="System.Web.Extensions.Design.dll", _String2=".") returned 1 [0139.653] wcscmp (_String1="System.Web.Extensions.Design.dll", _String2="..") returned 1 [0139.653] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f351c10, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8f351c10, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0139.654] wcscmp (_String1="System.Web.Extensions.dll", _String2=".") returned 1 [0139.654] wcscmp (_String1="System.Web.Extensions.dll", _String2="..") returned 1 [0139.654] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93abb010, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93abb010, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0139.654] wcscmp (_String1="System.Web.Routing.dll", _String2=".") returned 1 [0139.654] wcscmp (_String1="System.Web.Routing.dll", _String2="..") returned 1 [0139.654] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0139.654] wcscmp (_String1="System.Windows.Presentation.dll", _String2=".") returned 1 [0139.654] wcscmp (_String1="System.Windows.Presentation.dll", _String2="..") returned 1 [0139.654] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3852ec10, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3852ec10, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xd9e83b00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0139.654] wcscmp (_String1="System.WorkflowServices.dll", _String2=".") returned 1 [0139.654] wcscmp (_String1="System.WorkflowServices.dll", _String2="..") returned 1 [0139.654] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf7b5a000, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0139.654] wcscmp (_String1="System.Xml.Linq.dll", _String2=".") returned 1 [0139.654] wcscmp (_String1="System.Xml.Linq.dll", _String2="..") returned 1 [0139.654] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf7b5a000, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0139.654] FindClose (in: hFindFile=0x3f37918 | out: hFindFile=0x3f37918) returned 1 [0139.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047fe0) returned 1 [0139.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 [0139.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 266 os_tid = 0x5e8 [0131.544] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact")) returned 0x20 [0131.981] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact", dwFileAttributes=0x20) returned 0 [0131.981] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.981] GetLastError () returned 0x5 [0131.981] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact", dwFileAttributes=0x20) returned 0 [0131.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd0d0) returned 1 Thread: id = 267 os_tid = 0x110 [0131.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6f040 [0131.545] wcscpy (in: _Dest=0x3e6f040, _Source="C:\\Users\\Default\\Documents\\My Music" | out: _Dest="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music" [0131.545] wcscat (in: _Dest=0x3e6f040, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Music\\") returned="C:\\Users\\Default\\Documents\\My Music\\" [0131.545] wcscat (in: _Dest=0x3e6f040, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Music\\*") returned="C:\\Users\\Default\\Documents\\My Music\\*" [0131.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048248 [0131.545] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048248) returned 1 [0131.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f040) returned 1 [0131.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6018) returned 1 Thread: id = 268 os_tid = 0x730 [0131.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6548 [0131.553] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\Default\\Documents\\My Pictures" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures" [0131.553] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures\\") returned="C:\\Users\\Default\\Documents\\My Pictures\\" [0131.553] wcscat (in: _Dest=0x2fe6548, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures\\*") returned="C:\\Users\\Default\\Documents\\My Pictures\\*" [0131.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048248 [0131.554] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048248) returned 1 [0131.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0131.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b8) returned 1 Thread: id = 269 os_tid = 0x358 [0131.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f0b8 [0131.565] wcscpy (in: _Dest=0x3e0f0b8, _Source="C:\\Users\\Default\\Documents\\My Videos" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos" [0131.565] wcscat (in: _Dest=0x3e0f0b8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos\\") returned="C:\\Users\\Default\\Documents\\My Videos\\" [0131.565] wcscat (in: _Dest=0x3e0f0b8, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos\\*") returned="C:\\Users\\Default\\Documents\\My Videos\\*" [0131.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048248 [0131.565] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048248) returned 1 [0131.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b8) returned 1 [0131.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ecd0) returned 1 Thread: id = 270 os_tid = 0x158 [0131.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcfe90 [0131.574] wcscpy (in: _Dest=0x3dcfe90, _Source="C:\\Users\\Default\\Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0131.574] wcscat (in: _Dest=0x3dcfe90, _Source="\\" | out: _Dest="C:\\Users\\Default\\Searches\\") returned="C:\\Users\\Default\\Searches\\" [0131.574] wcscat (in: _Dest=0x3dcfe90, _Source="*" | out: _Dest="C:\\Users\\Default\\Searches\\*") returned="C:\\Users\\Default\\Searches\\*" [0131.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048248 [0131.574] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0131.984] wcscmp (_String1=".", _String2=".") returned 0 [0131.984] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.984] wcscmp (_String1="..", _String2=".") returned 1 [0131.984] wcscmp (_String1="..", _String2="..") returned 0 [0131.984] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.984] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.984] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.984] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0131.984] wcscmp (_String1="Everywhere.search-ms", _String2=".") returned 1 [0131.984] wcscmp (_String1="Everywhere.search-ms", _String2="..") returned 1 [0131.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecd0d0 [0131.984] wcscpy (in: _Dest=0x3ecd0d0, _Source="C:\\Users\\Default\\Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0131.984] wcscat (in: _Dest=0x3ecd0d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Searches\\") returned="C:\\Users\\Default\\Searches\\" [0131.985] wcscat (in: _Dest=0x3ecd0d0, _Source="Everywhere.search-ms" | out: _Dest="C:\\Users\\Default\\Searches\\Everywhere.search-ms") returned="C:\\Users\\Default\\Searches\\Everywhere.search-ms" [0138.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ecd0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0138.987] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0138.987] wcscmp (_String1="Indexed Locations.search-ms", _String2=".") returned 1 [0138.987] wcscmp (_String1="Indexed Locations.search-ms", _String2="..") returned 1 [0138.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e67d90 [0138.987] wcscpy (in: _Dest=0x3e67d90, _Source="C:\\Users\\Default\\Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0138.987] wcscat (in: _Dest=0x3e67d90, _Source="\\" | out: _Dest="C:\\Users\\Default\\Searches\\") returned="C:\\Users\\Default\\Searches\\" [0138.987] wcscat (in: _Dest=0x3e67d90, _Source="Indexed Locations.search-ms" | out: _Dest="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms") returned="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" [0138.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0138.989] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0138.989] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0138.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048248) returned 1 [0138.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe90) returned 1 [0138.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe50) returned 1 Thread: id = 271 os_tid = 0x484 [0131.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0110 [0131.577] wcscpy (in: _Dest=0x3dd0110, _Source="C:\\Users\\Default\\SendTo" | out: _Dest="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo" [0131.577] wcscat (in: _Dest=0x3dd0110, _Source="\\" | out: _Dest="C:\\Users\\Default\\SendTo\\") returned="C:\\Users\\Default\\SendTo\\" [0131.577] wcscat (in: _Dest=0x3dd0110, _Source="*" | out: _Dest="C:\\Users\\Default\\SendTo\\*") returned="C:\\Users\\Default\\SendTo\\*" [0131.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80484b0 [0131.577] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80484b0) returned 1 [0131.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0110) returned 1 [0131.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77a98) returned 1 Thread: id = 272 os_tid = 0x20c [0131.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e5d1b0 [0131.579] wcscpy (in: _Dest=0x3e5d1b0, _Source="C:\\Users\\Default\\Start Menu" | out: _Dest="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu" [0131.579] wcscat (in: _Dest=0x3e5d1b0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Start Menu\\") returned="C:\\Users\\Default\\Start Menu\\" [0131.579] wcscat (in: _Dest=0x3e5d1b0, _Source="*" | out: _Dest="C:\\Users\\Default\\Start Menu\\*") returned="C:\\Users\\Default\\Start Menu\\*" [0131.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80484b0 [0131.579] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80484b0) returned 1 [0131.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1b0) returned 1 [0131.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e40) returned 1 Thread: id = 273 os_tid = 0x264 [0131.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5d1b0 [0131.581] wcscpy (in: _Dest=0x3e5d1b0, _Source="C:\\Users\\Default\\Templates" | out: _Dest="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates" [0131.581] wcscat (in: _Dest=0x3e5d1b0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Templates\\") returned="C:\\Users\\Default\\Templates\\" [0131.581] wcscat (in: _Dest=0x3e5d1b0, _Source="*" | out: _Dest="C:\\Users\\Default\\Templates\\*") returned="C:\\Users\\Default\\Templates\\*" [0131.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80484b0 [0131.581] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80484b0) returned 1 [0131.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1b0) returned 1 [0131.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066dc0) returned 1 Thread: id = 274 os_tid = 0xc4 [0131.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066dc0 [0131.582] wcscpy (in: _Dest=0x3066dc0, _Source="C:\\Users\\Default\\Videos" | out: _Dest="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos" [0131.582] wcscat (in: _Dest=0x3066dc0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Videos\\") returned="C:\\Users\\Default\\Videos\\" [0131.582] wcscat (in: _Dest=0x3066dc0, _Source="*" | out: _Dest="C:\\Users\\Default\\Videos\\*") returned="C:\\Users\\Default\\Videos\\*" [0131.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80484b0 [0131.583] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0131.583] wcscmp (_String1=".", _String2=".") returned 0 [0131.583] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.583] wcscmp (_String1="..", _String2=".") returned 1 [0131.583] wcscmp (_String1="..", _String2="..") returned 0 [0131.583] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.583] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.583] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.583] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0131.583] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0131.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80484b0) returned 1 [0131.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066dc0) returned 1 [0131.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77980) returned 1 Thread: id = 275 os_tid = 0x4fc [0131.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355170 [0131.585] wcscpy (in: _Dest=0x355170, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" [0131.585] wcscat (in: _Dest=0x355170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\" [0131.585] wcscat (in: _Dest=0x355170, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*" [0131.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80484b0 [0131.585] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0131.983] wcscmp (_String1=".", _String2=".") returned 0 [0131.983] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.983] wcscmp (_String1="..", _String2=".") returned 1 [0131.983] wcscmp (_String1="..", _String2="..") returned 0 [0131.983] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 1 [0131.983] wcscmp (_String1="License Agreements", _String2=".") returned 1 [0131.983] wcscmp (_String1="License Agreements", _String2="..") returned 1 [0131.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7378 [0131.984] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" [0131.984] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\" [0131.984] wcscat (in: _Dest=0x2ff7378, _Source="License Agreements" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" [0144.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0144.428] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 0 [0144.428] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0144.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80484b0) returned 1 [0144.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355170) returned 1 [0144.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2378) returned 1 Thread: id = 276 os_tid = 0x720 [0131.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fc40 [0131.586] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" [0131.587] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\" [0131.587] wcscat (in: _Dest=0x3e1fc40, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\*" [0131.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048718 [0131.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\*", lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0132.499] wcscmp (_String1=".", _String2=".") returned 0 [0132.499] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.499] wcscmp (_String1="..", _String2=".") returned 1 [0132.500] wcscmp (_String1="..", _String2="..") returned 0 [0132.500] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x338d9500, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x338d9500, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x29370, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedSync.dll", cAlternateFileName="")) returned 1 [0132.500] wcscmp (_String1="FeedSync.dll", _String2=".") returned 1 [0132.500] wcscmp (_String1="FeedSync.dll", _String2="..") returned 1 [0132.500] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4902bf00, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4902bf00, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x33770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0132.500] wcscmp (_String1="Microsoft.Synchronization.dll", _String2=".") returned 1 [0132.500] wcscmp (_String1="Microsoft.Synchronization.dll", _String2="..") returned 1 [0132.500] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0132.500] wcscmp (_String1="resources", _String2=".") returned 1 [0132.500] wcscmp (_String1="resources", _String2="..") returned 1 [0132.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2af50 [0132.500] wcscpy (in: _Dest=0x3e2af50, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" [0132.500] wcscat (in: _Dest=0x3e2af50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\" [0132.500] wcscat (in: _Dest=0x3e2af50, _Source="resources" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" [0133.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2af50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0133.641] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35efef00, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35efef00, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x46f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 1 [0133.641] wcscmp (_String1="Synchronization.dll", _String2=".") returned 1 [0133.641] wcscmp (_String1="Synchronization.dll", _String2="..") returned 1 [0133.641] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35efef00, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35efef00, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x46f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 0 [0133.642] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0133.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048718) returned 1 [0133.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 [0133.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5608) returned 1 Thread: id = 277 os_tid = 0x588 [0131.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a2d8 [0131.588] wcscpy (in: _Dest=0x3e2a2d8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0131.588] wcscat (in: _Dest=0x3e2a2d8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\" [0131.588] wcscat (in: _Dest=0x3e2a2d8, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*" [0131.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048980 [0131.588] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0131.588] wcscmp (_String1=".", _String2=".") returned 0 [0131.588] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.588] wcscmp (_String1="..", _String2=".") returned 1 [0131.588] wcscmp (_String1="..", _String2="..") returned 0 [0131.588] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d992d9, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe217e6ea, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe217e6ea, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0131.588] wcscmp (_String1="Workflow.Targets", _String2=".") returned 1 [0131.588] wcscmp (_String1="Workflow.Targets", _String2="..") returned 1 [0131.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6688 [0131.589] wcscpy (in: _Dest=0x2ff6688, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0131.589] wcscat (in: _Dest=0x2ff6688, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\" [0131.589] wcscat (in: _Dest=0x2ff6688, _Source="Workflow.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" [0131.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0131.762] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d992d9, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe217e6ea, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe217e6ea, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0131.762] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2=".") returned 1 [0131.763] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2="..") returned 1 [0131.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1b558 [0131.763] wcscpy (in: _Dest=0x3e1b558, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0131.763] wcscat (in: _Dest=0x3e1b558, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\" [0131.763] wcscat (in: _Dest=0x3e1b558, _Source="Workflow.VisualBasic.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" [0131.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0131.764] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d992d9, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe217e6ea, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe217e6ea, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 0 [0131.764] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0131.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048980) returned 1 [0131.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a2d8) returned 1 [0131.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 278 os_tid = 0x598 [0131.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2be28 [0131.589] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0131.589] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\" [0131.589] wcscat (in: _Dest=0x3e2be28, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*" [0131.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0131.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0131.590] wcscmp (_String1=".", _String2=".") returned 0 [0131.590] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.590] wcscmp (_String1="..", _String2=".") returned 1 [0131.590] wcscmp (_String1="..", _String2="..") returned 0 [0131.590] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fae55dc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5fae55dc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x5fc160dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0131.590] wcscmp (_String1="Workflow.Targets", _String2=".") returned 1 [0131.590] wcscmp (_String1="Workflow.Targets", _String2="..") returned 1 [0131.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6a20 [0131.590] wcscpy (in: _Dest=0x2ff6a20, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0131.590] wcscat (in: _Dest=0x2ff6a20, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\" [0131.590] wcscat (in: _Dest=0x2ff6a20, _Source="Workflow.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" [0131.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0131.916] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0131.916] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2=".") returned 1 [0131.917] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2="..") returned 1 [0131.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1aed8 [0131.917] wcscpy (in: _Dest=0x3e1aed8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0131.917] wcscat (in: _Dest=0x3e1aed8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\" [0131.917] wcscat (in: _Dest=0x3e1aed8, _Source="Workflow.VisualBasic.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" [0131.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1aed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0131.918] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0131.918] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0131.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0131.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 [0131.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 Thread: id = 279 os_tid = 0x804 [0131.591] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" (normalized: "c:\\users\\eebsym5\\contacts\\administrator.contact")) returned 0x20 [0131.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact", dwFileAttributes=0x20) returned 1 [0131.591] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" (normalized: "c:\\users\\eebsym5\\contacts\\administrator.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1168 [0131.591] GetFileSizeEx (in: hFile=0x1168, lpFileSize=0x8effdf8 | out: lpFileSize=0x8effdf8*=68382) returned 1 [0131.591] SetFilePointerEx (in: hFile=0x1168, liDistanceToMove=0x10b1a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.592] ReadFile (in: hFile=0x1168, lpBuffer=0x8effe04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8effde0, lpOverlapped=0x0 | out: lpBuffer=0x8effe04*, lpNumberOfBytesRead=0x8effde0*=0x4, lpOverlapped=0x0) returned 1 [0131.594] SetFilePointerEx (in: hFile=0x1168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0131.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0131.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b888 [0131.594] NtQuerySystemTime (in: CurrentTime=0x8effd80 | out: CurrentTime=0x8effd80*=132471540002784000) returned 0x0 [0131.594] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x519f1125 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x15c57918 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x55d8e102 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x646b8266 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x179fd253 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x1700ad74 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x77f0af7a [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x2f806d02 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x18d05cb7 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x7bb2911e [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x56c335ea [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x4950734e [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x3930e60d [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x3528b745 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x2a79de23 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x5f32e0e4 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0xdffaf2d [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x58d05db7 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x3cd29ddf [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x7ab60fef [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x5b21c9a2 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x7070d489 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x3bc1afad [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x353f8aa9 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x1cb5b23e [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x66463543 [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x68e49c4d [0131.595] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x1e06d5b6 [0131.596] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x49d1f36d [0131.596] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x58855602 [0131.596] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x681a9a3d [0131.596] RtlRandomEx (in: Seed=0x8effd78 | out: Seed=0x8effd78) returned 0x71707e5e [0131.607] SetFilePointerEx (in: hFile=0x1168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.607] ReadFile (in: hFile=0x1168, lpBuffer=0x804a7b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8effd80, lpOverlapped=0x0 | out: lpBuffer=0x804a7b8*, lpNumberOfBytesRead=0x8effd80*=0x3c00, lpOverlapped=0x0) returned 1 [0131.608] SetFilePointerEx (in: hFile=0x1168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d0d8 [0131.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0131.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0131.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0131.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x804e3c0 [0131.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0131.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b888 [0131.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b888) returned 1 [0131.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0131.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0d8) returned 1 [0131.609] WriteFile (in: hFile=0x1168, lpBuffer=0x804e3c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8effd80, lpOverlapped=0x0 | out: lpBuffer=0x804e3c0*, lpNumberOfBytesWritten=0x8effd80*=0x3c00, lpOverlapped=0x0) returned 1 [0131.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804e3c0) returned 1 [0131.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a7b8) returned 1 [0131.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067180 [0131.611] SetFilePointerEx (in: hFile=0x1168, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.611] WriteFile (in: hFile=0x1168, lpBuffer=0x3041e10*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x8effdec, lpOverlapped=0x0 | out: lpBuffer=0x3041e10*, lpNumberOfBytesWritten=0x8effdec*=0x11c, lpOverlapped=0x0) returned 1 [0133.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041e10) returned 1 [0133.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b40) returned 1 [0133.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b888) returned 1 [0133.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067180) returned 1 [0133.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0133.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf90) returned 1 [0133.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b018) returned 1 [0133.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0133.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f327f0 [0133.275] wcscpy (in: _Dest=0x3f327f0, _Source="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" [0133.275] wcscat (in: _Dest=0x3f327f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact.f0dbec") returned="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact.f0dbec" [0133.275] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact.f0dbec", NtPathName=0x8effd70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f348c0 [0136.655] FlushFileBuffers (hFile=0x1168) returned 1 [0136.712] CloseHandle (hObject=0x1168) returned 1 [0136.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecdb60 [0136.713] wcscpy (in: _Dest=0x3ecdb60, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0136.713] wcscat (in: _Dest=0x3ecdb60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" [0136.714] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\f0dbec-readme.txt")) returned 0x20 [0136.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdb60) returned 1 [0136.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd80) returned 1 Thread: id = 280 os_tid = 0x814 [0131.613] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ihnvbh euuncnh.contact")) returned 0x20 [0137.469] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact", dwFileAttributes=0x20) returned 1 [0137.470] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ihnvbh euuncnh.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10b4 [0137.470] GetFileSizeEx (in: hFile=0x10b4, lpFileSize=0x77afe98 | out: lpFileSize=0x77afe98*=1259) returned 1 [0137.470] SetFilePointerEx (in: hFile=0x10b4, liDistanceToMove=0x4e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.470] ReadFile (in: hFile=0x10b4, lpBuffer=0x77afea4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x77afe80, lpOverlapped=0x0 | out: lpBuffer=0x77afea4*, lpNumberOfBytesRead=0x77afe80*=0x4, lpOverlapped=0x0) returned 1 [0137.587] SetFilePointerEx (in: hFile=0x10b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0137.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b08 [0137.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312f68 [0137.588] NtQuerySystemTime (in: CurrentTime=0x77afe20 | out: CurrentTime=0x77afe20*=132471540062688000) returned 0x0 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x6048ac73 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0xbf6d5a0 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x5e13e8f [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x1364aced [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x19504be [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x311643e7 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x5e50f081 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x4f965e69 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x4af8d052 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x6063be51 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x3ae3dfa0 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x4dc1eda3 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x4fceae9e [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0xd0740b4 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x3d5d3c70 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x426b7f2e [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x7d2de7ec [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x565415b6 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x72bbf036 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x3c017c6d [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x1b5d33e2 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x56ab8684 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0xf3a4f4d [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x1f225013 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x585516b2 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x3a20616 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x17a1232e [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x40565128 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x17d38333 [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x32c5b11a [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x6e1678eb [0137.588] RtlRandomEx (in: Seed=0x77afe18 | out: Seed=0x77afe18) returned 0x1c7c125c [0137.597] ReadFile (in: hFile=0x10b4, lpBuffer=0x8266498, nNumberOfBytesToRead=0x4eb, lpNumberOfBytesRead=0x77afe14, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0x77afe14*=0x4eb, lpOverlapped=0x0) returned 1 [0137.597] SetFilePointerEx (in: hFile=0x10b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.597] WriteFile (in: hFile=0x10b4, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0x4eb, lpNumberOfBytesWritten=0x77afe18, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0x77afe18*=0x4eb, lpOverlapped=0x0) returned 1 [0139.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0139.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0139.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0139.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0139.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0139.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c090) returned 1 [0139.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308d58) returned 1 [0139.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x8308d58 [0139.196] SetFilePointerEx (in: hFile=0x10b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.196] WriteFile (in: hFile=0x10b4, lpBuffer=0x3041e10*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x77afe8c, lpOverlapped=0x0 | out: lpBuffer=0x3041e10*, lpNumberOfBytesWritten=0x77afe8c*=0x11e, lpOverlapped=0x0) returned 1 [0140.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041e10) returned 1 [0140.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309850) returned 1 [0140.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0140.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308d58) returned 1 [0140.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0140.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b08) returned 1 [0140.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312f90) returned 1 [0140.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0140.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0140.984] wcscpy (in: _Dest=0x3e686f0, _Source="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" [0140.984] wcscat (in: _Dest=0x3e686f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact.f0dbec") returned="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact.f0dbec" [0140.984] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact.f0dbec", NtPathName=0x77afe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0140.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34ef0 [0141.624] FlushFileBuffers (hFile=0x10b4) returned 1 [0141.634] CloseHandle (hObject=0x10b4) returned 1 [0141.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ed3c10 [0141.741] wcscpy (in: _Dest=0x3ed3c10, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0141.741] wcscat (in: _Dest=0x3ed3c10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" [0141.741] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\f0dbec-readme.txt")) returned 0x20 [0141.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3c10) returned 1 [0141.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff52b0) returned 1 Thread: id = 281 os_tid = 0x824 [0131.614] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" (normalized: "c:\\users\\eebsym5\\contacts\\lodkd auftnm.contact")) returned 0x20 [0137.461] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact", dwFileAttributes=0x20) returned 1 [0137.461] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" (normalized: "c:\\users\\eebsym5\\contacts\\lodkd auftnm.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10a0 [0137.461] GetFileSizeEx (in: hFile=0x10a0, lpFileSize=0x89efaf0 | out: lpFileSize=0x89efaf0*=1256) returned 1 [0137.462] SetFilePointerEx (in: hFile=0x10a0, liDistanceToMove=0x4e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.462] ReadFile (in: hFile=0x10a0, lpBuffer=0x89efafc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x89efad8, lpOverlapped=0x0 | out: lpBuffer=0x89efafc*, lpNumberOfBytesRead=0x89efad8*=0x4, lpOverlapped=0x0) returned 1 [0137.649] SetFilePointerEx (in: hFile=0x10a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0137.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0137.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0137.649] NtQuerySystemTime (in: CurrentTime=0x89efa78 | out: CurrentTime=0x89efa78*=132471540063312000) returned 0x0 [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x1647f387 [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x2643b695 [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x2af21c54 [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x2f75031b [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x1f7f4fdc [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x4af1b02d [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x54cc99b4 [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x67ef8905 [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x7396787b [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x77afe81b [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x29c5c7d7 [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x14efd03f [0137.649] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0xd0740b4 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x3bb80c7b [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x70cd10ea [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x246a56c7 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x2d941d3b [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x763a34 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x7aa1c756 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x5e70682e [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x43896d41 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x2a008257 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x4bb0be23 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x2889085c [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x609ffba6 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x1adca9a2 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x7d8c1dcc [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x6976cc18 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x2d941d3b [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x4f3d2944 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x4a046733 [0137.650] RtlRandomEx (in: Seed=0x89efa70 | out: Seed=0x89efa70) returned 0x157d731a [0137.813] ReadFile (in: hFile=0x10a0, lpBuffer=0x8257478, nNumberOfBytesToRead=0x4e8, lpNumberOfBytesRead=0x89efa6c, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0x89efa6c*=0x4e8, lpOverlapped=0x0) returned 1 [0137.813] SetFilePointerEx (in: hFile=0x10a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.813] WriteFile (in: hFile=0x10a0, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x4e8, lpNumberOfBytesWritten=0x89efa70, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0x89efa70*=0x4e8, lpOverlapped=0x0) returned 1 [0137.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0137.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3390 [0137.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0137.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0137.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0137.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b28) returned 1 [0137.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308de8) returned 1 [0137.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37818 [0137.858] SetFilePointerEx (in: hFile=0x10a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.858] WriteFile (in: hFile=0x10a0, lpBuffer=0x3d57028*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x89efae4, lpOverlapped=0x0 | out: lpBuffer=0x3d57028*, lpNumberOfBytesWritten=0x89efae4*=0x11a, lpOverlapped=0x0) returned 1 [0137.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57028) returned 1 [0137.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37f18) returned 1 [0137.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0137.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37818) returned 1 [0137.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0137.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0137.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1658) returned 1 [0137.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0137.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f324a8 [0137.868] wcscpy (in: _Dest=0x3f324a8, _Source="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" [0137.868] wcscat (in: _Dest=0x3f324a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact.f0dbec") returned="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact.f0dbec" [0137.868] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact.f0dbec", NtPathName=0x89efa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34d40 [0137.895] FlushFileBuffers (hFile=0x10a0) returned 1 [0137.901] CloseHandle (hObject=0x10a0) returned 1 [0137.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecddd0 [0137.902] wcscpy (in: _Dest=0x3ecddd0, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0137.902] wcscat (in: _Dest=0x3ecddd0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" [0137.902] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\f0dbec-readme.txt")) returned 0x20 [0137.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecddd0) returned 1 [0137.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ce28) returned 1 Thread: id = 282 os_tid = 0x834 [0131.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" (normalized: "c:\\users\\eebsym5\\contacts\\mneuc uhnfghgg.contact")) returned 0x20 [0137.466] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact", dwFileAttributes=0x20) returned 1 [0137.467] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" (normalized: "c:\\users\\eebsym5\\contacts\\mneuc uhnfghgg.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10a8 [0137.467] GetFileSizeEx (in: hFile=0x10a8, lpFileSize=0x941f840 | out: lpFileSize=0x941f840*=1257) returned 1 [0137.467] SetFilePointerEx (in: hFile=0x10a8, liDistanceToMove=0x4e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.467] ReadFile (in: hFile=0x10a8, lpBuffer=0x941f84c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x941f828, lpOverlapped=0x0 | out: lpBuffer=0x941f84c*, lpNumberOfBytesRead=0x941f828*=0x4, lpOverlapped=0x0) returned 1 [0137.577] SetFilePointerEx (in: hFile=0x10a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0137.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b58 [0137.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b08 [0137.578] NtQuerySystemTime (in: CurrentTime=0x941f7c8 | out: CurrentTime=0x941f7c8*=132471540062688000) returned 0x0 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x41d399cf [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x2539a205 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x6377b89c [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0xca68d48 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x349362b6 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0xd6bdedc [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x18814a47 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x71ffcd80 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x6e198be8 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x3d5718c [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x2a7bfddc [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0xa68a15c [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x9a0478 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x74dc6151 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x69557a8e [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x752baf53 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x58629ad8 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x7c50da20 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x5156774f [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x328e3bae [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x14187275 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x1e6dfb64 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x4bb0a907 [0137.578] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x161200dd [0137.579] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x357ad1f6 [0137.579] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x1b880ca2 [0137.579] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x3c39d490 [0137.579] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x39310ad4 [0137.579] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x6254a18b [0137.579] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x49f8fea7 [0137.579] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x27b210c4 [0137.579] RtlRandomEx (in: Seed=0x941f7c0 | out: Seed=0x941f7c0) returned 0x37e4b7ef [0137.586] ReadFile (in: hFile=0x10a8, lpBuffer=0x825ec88, nNumberOfBytesToRead=0x4e9, lpNumberOfBytesRead=0x941f7bc, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0x941f7bc*=0x4e9, lpOverlapped=0x0) returned 1 [0137.587] SetFilePointerEx (in: hFile=0x10a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.587] WriteFile (in: hFile=0x10a8, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0x4e9, lpNumberOfBytesWritten=0x941f7c0, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0x941f7c0*=0x4e9, lpOverlapped=0x0) returned 1 [0139.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0139.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0139.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0139.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0139.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0139.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c018) returned 1 [0139.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308d10) returned 1 [0139.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x8308d10 [0139.198] SetFilePointerEx (in: hFile=0x10a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.198] WriteFile (in: hFile=0x10a8, lpBuffer=0x3040a68*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x941f834, lpOverlapped=0x0 | out: lpBuffer=0x3040a68*, lpNumberOfBytesWritten=0x941f834*=0x11e, lpOverlapped=0x0) returned 1 [0140.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 [0140.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309898) returned 1 [0140.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0140.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308d10) returned 1 [0140.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0140.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b58) returned 1 [0140.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312ae0) returned 1 [0140.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312a90) returned 1 [0140.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e681c8 [0140.986] wcscpy (in: _Dest=0x3e681c8, _Source="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" [0140.986] wcscat (in: _Dest=0x3e681c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact.f0dbec") returned="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact.f0dbec" [0140.986] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact.f0dbec", NtPathName=0x941f7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0140.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f348c0 [0141.709] FlushFileBuffers (hFile=0x10a8) returned 1 [0141.711] CloseHandle (hObject=0x10a8) returned 1 [0141.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ed3c78 [0141.799] wcscpy (in: _Dest=0x3ed3c78, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0141.799] wcscat (in: _Dest=0x3ed3c78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" [0141.799] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\f0dbec-readme.txt")) returned 0x20 [0141.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3c78) returned 1 [0141.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5400) returned 1 Thread: id = 283 os_tid = 0x844 [0131.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ofhbnh edferrr.contact")) returned 0x20 [0137.464] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact", dwFileAttributes=0x20) returned 1 [0137.464] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ofhbnh edferrr.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10ac [0137.464] GetFileSizeEx (in: hFile=0x10ac, lpFileSize=0x47bfa50 | out: lpFileSize=0x47bfa50*=1265) returned 1 [0137.464] SetFilePointerEx (in: hFile=0x10ac, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.464] ReadFile (in: hFile=0x10ac, lpBuffer=0x47bfa5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x47bfa38, lpOverlapped=0x0 | out: lpBuffer=0x47bfa5c*, lpNumberOfBytesRead=0x47bfa38*=0x4, lpOverlapped=0x0) returned 1 [0137.813] SetFilePointerEx (in: hFile=0x10ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0137.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0137.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0137.814] NtQuerySystemTime (in: CurrentTime=0x47bf9d8 | out: CurrentTime=0x47bf9d8*=132471540065028000) returned 0x0 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x720e9b2d [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x2f71bfdb [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x68e99c33 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x7f46b547 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x7f46b547 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x1203ff4b [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x5d2116bb [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x2d7539e5 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x32c9d035 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x1695d834 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x17a1232e [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x3e753571 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x211ff7b0 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x28a4fa82 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x4b95f197 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x1f468ce1 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x7a707799 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x5e70682e [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x49acacdc [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x424c92a4 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x40ebd0eb [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x585516b2 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x62873bee [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x60e842db [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x46e8c6c2 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x77251771 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x42342964 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x58300149 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x6ec91be7 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x6385aa67 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x265d6946 [0137.814] RtlRandomEx (in: Seed=0x47bf9d0 | out: Seed=0x47bf9d0) returned 0x56dafbf3 [0137.822] ReadFile (in: hFile=0x10ac, lpBuffer=0x8248458, nNumberOfBytesToRead=0x4f1, lpNumberOfBytesRead=0x47bf9cc, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0x47bf9cc*=0x4f1, lpOverlapped=0x0) returned 1 [0137.822] SetFilePointerEx (in: hFile=0x10ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.822] WriteFile (in: hFile=0x10ac, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x4f1, lpNumberOfBytesWritten=0x47bf9d0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0x47bf9d0*=0x4f1, lpOverlapped=0x0) returned 1 [0137.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0137.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0137.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0137.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0137.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0137.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0137.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f08) returned 1 [0137.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x8308f08 [0137.861] SetFilePointerEx (in: hFile=0x10ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.861] WriteFile (in: hFile=0x10ac, lpBuffer=0x3d56f00*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x47bfa44, lpOverlapped=0x0 | out: lpBuffer=0x3d56f00*, lpNumberOfBytesWritten=0x47bfa44*=0x11e, lpOverlapped=0x0) returned 1 [0137.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 [0137.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308c80) returned 1 [0137.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0137.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f08) returned 1 [0137.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0137.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0137.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0137.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0137.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32778 [0137.873] wcscpy (in: _Dest=0x3f32778, _Source="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" [0137.873] wcscat (in: _Dest=0x3f32778, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact.f0dbec") returned="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact.f0dbec" [0137.873] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact.f0dbec", NtPathName=0x47bf9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34dd0 [0137.901] FlushFileBuffers (hFile=0x10ac) returned 1 [0137.904] CloseHandle (hObject=0x10ac) returned 1 [0137.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ce28 [0137.905] wcscpy (in: _Dest=0x3d8ce28, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0137.905] wcscat (in: _Dest=0x3d8ce28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" [0137.905] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\f0dbec-readme.txt")) returned 0x20 [0137.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ce28) returned 1 [0137.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5390) returned 1 Thread: id = 284 os_tid = 0x854 [0131.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" (normalized: "c:\\users\\eebsym5\\contacts\\uosjfl sidvllie.contact")) returned 0x20 [0133.276] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact", dwFileAttributes=0x20) returned 1 [0134.697] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" (normalized: "c:\\users\\eebsym5\\contacts\\uosjfl sidvllie.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd44 [0134.697] GetFileSizeEx (in: hFile=0xd44, lpFileSize=0x94ffc78 | out: lpFileSize=0x94ffc78*=1267) returned 1 [0134.697] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x4ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.697] ReadFile (in: hFile=0xd44, lpBuffer=0x94ffc84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94ffc60, lpOverlapped=0x0 | out: lpBuffer=0x94ffc84*, lpNumberOfBytesRead=0x94ffc60*=0x4, lpOverlapped=0x0) returned 1 [0135.166] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0135.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0135.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0135.166] NtQuerySystemTime (in: CurrentTime=0x94ffc00 | out: CurrentTime=0x94ffc00*=132471540038508000) returned 0x0 [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x35a421a2 [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x2343a8bd [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x429c6760 [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x53e2275 [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x2d80428b [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0xd62aa16 [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x1f0543c6 [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x377fb33c [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x60ab4d37 [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x5a97172d [0135.166] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x5bae975c [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x3bee8851 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x3dfb87ca [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x3bd95a7 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x2f7984a8 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x2495b5f3 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x7ce17bef [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x4bfb1c66 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x45556155 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x5179a03a [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x6ebe73e0 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x42354eea [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x4985d5d8 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x1990869c [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x3226fe5a [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x21605e8d [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x418899df [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x4df1df53 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x17054569 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x35239762 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x3cab7a05 [0135.167] RtlRandomEx (in: Seed=0x94ffbf8 | out: Seed=0x94ffbf8) returned 0x107ebdb5 [0135.177] ReadFile (in: hFile=0xd44, lpBuffer=0x82cc060, nNumberOfBytesToRead=0x4f3, lpNumberOfBytesRead=0x94ffbf4, lpOverlapped=0x0 | out: lpBuffer=0x82cc060*, lpNumberOfBytesRead=0x94ffbf4*=0x4f3, lpOverlapped=0x0) returned 1 [0135.177] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.177] WriteFile (in: hFile=0xd44, lpBuffer=0x82cfc68*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x94ffbf8, lpOverlapped=0x0 | out: lpBuffer=0x82cfc68*, lpNumberOfBytesWritten=0x94ffbf8*=0x4f3, lpOverlapped=0x0) returned 1 [0135.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0135.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0135.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0135.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82cfc68) returned 1 [0135.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82cc060) returned 1 [0135.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b550) returned 1 [0135.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31df0) returned 1 [0135.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3f31df0 [0135.407] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.407] WriteFile (in: hFile=0xd44, lpBuffer=0x3d57718*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x94ffc6c, lpOverlapped=0x0 | out: lpBuffer=0x3d57718*, lpNumberOfBytesWritten=0x94ffc6c*=0x120, lpOverlapped=0x0) returned 1 [0136.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57718) returned 1 [0136.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32348) returned 1 [0136.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0136.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31df0) returned 1 [0136.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0136.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0136.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0136.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0136.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e23d40 [0136.385] wcscpy (in: _Dest=0x3e23d40, _Source="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" [0136.385] wcscat (in: _Dest=0x3e23d40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact.f0dbec") returned="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact.f0dbec" [0136.385] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact.f0dbec", NtPathName=0x94ffbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f356d0 [0136.648] FlushFileBuffers (hFile=0xd44) returned 1 [0136.649] CloseHandle (hObject=0xd44) returned 1 [0136.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecdb60 [0136.651] wcscpy (in: _Dest=0x3ecdb60, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0136.651] wcscat (in: _Dest=0x3ecdb60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" [0136.651] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\f0dbec-readme.txt")) returned 0xffffffff [0136.651] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd44 [0136.651] WriteFile (in: hFile=0xd44, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x94ffc14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x94ffc14*=0x70c, lpOverlapped=0x0) returned 1 [0136.653] CloseHandle (hObject=0xd44) returned 1 [0136.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdb60) returned 1 [0136.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5470) returned 1 Thread: id = 285 os_tid = 0x864 [0131.616] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\everywhere.search-ms")) returned 0x23 [0131.616] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms", dwFileAttributes=0x20) returned 1 [0131.616] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x116c [0131.616] GetFileSizeEx (in: hFile=0x116c, lpFileSize=0x946fd90 | out: lpFileSize=0x946fd90*=248) returned 1 [0131.617] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.617] ReadFile (in: hFile=0x116c, lpBuffer=0x946fd9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x946fd78, lpOverlapped=0x0 | out: lpBuffer=0x946fd9c*, lpNumberOfBytesRead=0x946fd78*=0x4, lpOverlapped=0x0) returned 1 [0131.619] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0131.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0131.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b040 [0131.619] NtQuerySystemTime (in: CurrentTime=0x946fd18 | out: CurrentTime=0x946fd18*=132471540003096000) returned 0x0 [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x5b37e591 [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x4e6c2fae [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x67f6eb38 [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x4f3ce20f [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x4d71cb96 [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x8a25cce [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x4632e496 [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x5acc1822 [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x4bf7ef6c [0131.619] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x19044fd0 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x2e21276b [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x64957946 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x71d94936 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x22bdc4ac [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x742cbf7b [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x30a375c5 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x51f8cd93 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x124a18d4 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x65dac794 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0xea82ba7 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x13f46c9d [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x6f617626 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x4f1040ff [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x4fa6a95d [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x6d7d78c9 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x4170ec36 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x6aa9e119 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0xcd7437d [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x67b6a078 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x18110e12 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x1da64d53 [0131.620] RtlRandomEx (in: Seed=0x946fd10 | out: Seed=0x946fd10) returned 0x7fe0150e [0131.631] ReadFile (in: hFile=0x116c, lpBuffer=0x804e7b8, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x946fd0c, lpOverlapped=0x0 | out: lpBuffer=0x804e7b8*, lpNumberOfBytesRead=0x946fd0c*=0xf8, lpOverlapped=0x0) returned 1 [0131.631] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.631] WriteFile (in: hFile=0x116c, lpBuffer=0x80523c0*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x946fd10, lpOverlapped=0x0 | out: lpBuffer=0x80523c0*, lpNumberOfBytesWritten=0x946fd10*=0xf8, lpOverlapped=0x0) returned 1 [0132.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e88 [0132.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0f28 [0132.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f28) returned 1 [0132.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80523c0) returned 1 [0132.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804e7b8) returned 1 [0132.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0132.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cee0) returned 1 [0132.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37998 [0132.468] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.468] WriteFile (in: hFile=0x116c, lpBuffer=0x3d56dd8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x946fd84, lpOverlapped=0x0 | out: lpBuffer=0x3d56dd8*, lpNumberOfBytesWritten=0x946fd84*=0x11a, lpOverlapped=0x0) returned 1 [0134.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56dd8) returned 1 [0134.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f379d8) returned 1 [0134.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f28) returned 1 [0134.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37998) returned 1 [0134.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e88) returned 1 [0134.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf40) returned 1 [0134.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0134.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0134.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68a38 [0134.696] wcscpy (in: _Dest=0x3e68a38, _Source="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" [0134.696] wcscat (in: _Dest=0x3e68a38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms.f0dbec") returned="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms.f0dbec" [0134.696] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms.f0dbec", NtPathName=0x946fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34c20 [0135.402] FlushFileBuffers (hFile=0x116c) returned 1 [0136.094] CloseHandle (hObject=0x116c) returned 1 [0136.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd8f0 [0136.344] wcscpy (in: _Dest=0x3ecd8f0, _Source="C:\\Users\\EEBsYm5\\Searches\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0136.344] wcscat (in: _Dest=0x3ecd8f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Searches\\F0DBEC-Readme.txt" [0136.363] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\searches\\f0dbec-readme.txt")) returned 0xffffffff [0136.523] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\searches\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1168 [0136.716] WriteFile (in: hFile=0x1168, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x946fd2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x946fd2c*=0x70c, lpOverlapped=0x0) returned 1 [0136.736] CloseHandle (hObject=0x1168) returned 1 [0136.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd8f0) returned 1 [0136.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cb50) returned 1 Thread: id = 286 os_tid = 0x874 [0131.637] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\indexed locations.search-ms")) returned 0x23 [0131.637] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x20) returned 1 [0133.277] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1160 [0133.277] GetFileSizeEx (in: hFile=0x1160, lpFileSize=0x926fa80 | out: lpFileSize=0x926fa80*=248) returned 1 [0133.277] SetFilePointerEx (in: hFile=0x1160, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.277] ReadFile (in: hFile=0x1160, lpBuffer=0x926fa8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x926fa68, lpOverlapped=0x0 | out: lpBuffer=0x926fa8c*, lpNumberOfBytesRead=0x926fa68*=0x4, lpOverlapped=0x0) returned 1 [0133.279] SetFilePointerEx (in: hFile=0x1160, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49bc8 [0133.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b018 [0133.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0133.279] NtQuerySystemTime (in: CurrentTime=0x926fa08 | out: CurrentTime=0x926fa08*=132471540019632000) returned 0x0 [0133.279] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x2e0c6f49 [0133.279] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x6ad8d898 [0133.279] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x12ed4171 [0133.279] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x57ed5598 [0133.279] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x79b56d5 [0133.279] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x53dcf8e3 [0133.279] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x28a2e525 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0xba647d5 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x24965440 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x4219584 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x2f33f1d0 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x20bcf655 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x4cc11adf [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x248be324 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x39153c5d [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x43202c9b [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x490e58a2 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x4230bd33 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x5304de65 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x4b078101 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x3d0ccbe9 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x3587f5ee [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x4c224163 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x2e58ff1d [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x501ba336 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x78775eb7 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0xb42072d [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x1f0ce185 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x6d31256a [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x7713e4c8 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x700a13d2 [0133.280] RtlRandomEx (in: Seed=0x926fa00 | out: Seed=0x926fa00) returned 0x4b3dc02a [0133.292] ReadFile (in: hFile=0x1160, lpBuffer=0x80a5870, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x926f9fc, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0x926f9fc*=0xf8, lpOverlapped=0x0) returned 1 [0133.292] SetFilePointerEx (in: hFile=0x1160, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.293] WriteFile (in: hFile=0x1160, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x926fa00, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0x926fa00*=0xf8, lpOverlapped=0x0) returned 1 [0133.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0dc0 [0133.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0133.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0133.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0133.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0133.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f330d8) returned 1 [0133.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50fe0) returned 1 [0133.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6068 [0133.877] SetFilePointerEx (in: hFile=0x1160, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.877] WriteFile (in: hFile=0x1160, lpBuffer=0x3ef7d68*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x926fa74, lpOverlapped=0x0 | out: lpBuffer=0x3ef7d68*, lpNumberOfBytesWritten=0x926fa74*=0x128, lpOverlapped=0x0) returned 1 [0136.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0136.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6658) returned 1 [0136.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0136.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 [0136.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0dc0) returned 1 [0136.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b018) returned 1 [0136.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0136.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b888) returned 1 [0136.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30958 [0136.289] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" [0136.289] wcscat (in: _Dest=0x3f30958, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms.f0dbec") returned="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms.f0dbec" [0136.289] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms.f0dbec", NtPathName=0x926f9f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2b968 [0136.716] FlushFileBuffers (hFile=0x1160) returned 1 [0136.775] CloseHandle (hObject=0x1160) returned 1 [0136.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e2e0 [0136.776] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Users\\EEBsYm5\\Searches\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0136.776] wcscat (in: _Dest=0x3d8e2e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Searches\\F0DBEC-Readme.txt" [0136.776] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\searches\\f0dbec-readme.txt")) returned 0x20 [0136.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 [0136.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 Thread: id = 287 os_tid = 0x884 [0131.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6018 [0131.638] wcscpy (in: _Dest=0x3de6018, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0131.638] wcscat (in: _Dest=0x3de6018, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0131.638] wcscat (in: _Dest=0x3de6018, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\*" [0131.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048e50 [0131.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\*", lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54c88 [0132.136] wcscmp (_String1=".", _String2=".") returned 0 [0132.136] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.540] wcscmp (_String1="..", _String2=".") returned 1 [0133.540] wcscmp (_String1="..", _String2="..") returned 0 [0133.540] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0133.540] wcscmp (_String1="awt.dll", _String2=".") returned 1 [0133.540] wcscmp (_String1="awt.dll", _String2="..") returned 1 [0133.540] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1 [0133.541] wcscmp (_String1="axbridge.dll", _String2=".") returned 1 [0133.541] wcscmp (_String1="axbridge.dll", _String2="..") returned 1 [0133.541] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a8ea200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0133.541] wcscmp (_String1="client", _String2=".") returned 1 [0133.541] wcscmp (_String1="client", _String2="..") returned 1 [0133.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e233d8 [0133.541] wcscpy (in: _Dest=0x3e233d8, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0133.541] wcscat (in: _Dest=0x3e233d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0133.541] wcscat (in: _Dest=0x3e233d8, _Source="client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0134.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e233d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c [0134.137] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0134.137] wcscmp (_String1="dcpr.dll", _String2=".") returned 1 [0134.137] wcscmp (_String1="dcpr.dll", _String2="..") returned 1 [0134.137] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0134.137] wcscmp (_String1="decora-sse.dll", _String2=".") returned 1 [0134.137] wcscmp (_String1="decora-sse.dll", _String2="..") returned 1 [0134.137] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0134.137] wcscmp (_String1="deploy.dll", _String2=".") returned 1 [0134.137] wcscmp (_String1="deploy.dll", _String2="..") returned 1 [0134.137] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0134.137] wcscmp (_String1="dtplugin", _String2=".") returned 1 [0134.137] wcscmp (_String1="dtplugin", _String2="..") returned 1 [0134.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6f1a0 [0134.137] wcscpy (in: _Dest=0x3e6f1a0, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0134.137] wcscat (in: _Dest=0x3e6f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0134.138] wcscat (in: _Dest=0x3e6f1a0, _Source="dtplugin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin" [0134.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0134.140] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0134.140] wcscmp (_String1="dt_shmem.dll", _String2=".") returned 1 [0134.140] wcscmp (_String1="dt_shmem.dll", _String2="..") returned 1 [0134.140] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0134.140] wcscmp (_String1="dt_socket.dll", _String2=".") returned 1 [0134.140] wcscmp (_String1="dt_socket.dll", _String2="..") returned 1 [0134.140] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0134.140] wcscmp (_String1="eula.dll", _String2=".") returned 1 [0134.140] wcscmp (_String1="eula.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0134.141] wcscmp (_String1="fontmanager.dll", _String2=".") returned 1 [0134.141] wcscmp (_String1="fontmanager.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0134.141] wcscmp (_String1="fxplugins.dll", _String2=".") returned 1 [0134.141] wcscmp (_String1="fxplugins.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0134.141] wcscmp (_String1="glass.dll", _String2=".") returned 1 [0134.141] wcscmp (_String1="glass.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0134.141] wcscmp (_String1="glib-lite.dll", _String2=".") returned 1 [0134.141] wcscmp (_String1="glib-lite.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0134.141] wcscmp (_String1="gstreamer-lite.dll", _String2=".") returned 1 [0134.141] wcscmp (_String1="gstreamer-lite.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0134.141] wcscmp (_String1="hprof.dll", _String2=".") returned 1 [0134.141] wcscmp (_String1="hprof.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="INSTAL~1.DLL")) returned 1 [0134.141] wcscmp (_String1="installer.dll", _String2=".") returned 1 [0134.141] wcscmp (_String1="installer.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0134.141] wcscmp (_String1="instrument.dll", _String2=".") returned 1 [0134.141] wcscmp (_String1="instrument.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0134.141] wcscmp (_String1="j2pcsc.dll", _String2=".") returned 1 [0134.141] wcscmp (_String1="j2pcsc.dll", _String2="..") returned 1 [0134.141] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0134.142] wcscmp (_String1="j2pkcs11.dll", _String2=".") returned 1 [0134.142] wcscmp (_String1="j2pkcs11.dll", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0134.142] wcscmp (_String1="jaas_nt.dll", _String2=".") returned 1 [0134.142] wcscmp (_String1="jaas_nt.dll", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0134.142] wcscmp (_String1="jabswitch.exe", _String2=".") returned 1 [0134.142] wcscmp (_String1="jabswitch.exe", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0134.142] wcscmp (_String1="java-rmi.exe", _String2=".") returned 1 [0134.142] wcscmp (_String1="java-rmi.exe", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0134.142] wcscmp (_String1="java.dll", _String2=".") returned 1 [0134.142] wcscmp (_String1="java.dll", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0134.142] wcscmp (_String1="java.exe", _String2=".") returned 1 [0134.142] wcscmp (_String1="java.exe", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge.dll", cAlternateFileName="JAVAAC~2.DLL")) returned 1 [0134.142] wcscmp (_String1="JavaAccessBridge.dll", _String2=".") returned 1 [0134.142] wcscmp (_String1="JavaAccessBridge.dll", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0134.142] wcscmp (_String1="javacpl.exe", _String2=".") returned 1 [0134.142] wcscmp (_String1="javacpl.exe", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0134.142] wcscmp (_String1="javafx-font.dll", _String2=".") returned 1 [0134.142] wcscmp (_String1="javafx-font.dll", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0134.142] wcscmp (_String1="javafx-iio.dll", _String2=".") returned 1 [0134.142] wcscmp (_String1="javafx-iio.dll", _String2="..") returned 1 [0134.142] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0134.143] wcscmp (_String1="javaw.exe", _String2=".") returned 1 [0134.143] wcscmp (_String1="javaw.exe", _String2="..") returned 1 [0134.143] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0134.143] wcscmp (_String1="javaws.exe", _String2=".") returned 1 [0134.143] wcscmp (_String1="javaws.exe", _String2="..") returned 1 [0134.143] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0134.143] wcscmp (_String1="java_crw_demo.dll", _String2=".") returned 1 [0134.143] wcscmp (_String1="java_crw_demo.dll", _String2="..") returned 1 [0134.143] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0134.143] wcscmp (_String1="jawt.dll", _String2=".") returned 1 [0134.143] wcscmp (_String1="jawt.dll", _String2="..") returned 1 [0134.143] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge.dll", cAlternateFileName="JAWTAC~2.DLL")) returned 1 [0138.682] wcscmp (_String1="JAWTAccessBridge.dll", _String2=".") returned 1 [0138.682] wcscmp (_String1="JAWTAccessBridge.dll", _String2="..") returned 1 [0138.682] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1 [0138.682] wcscmp (_String1="JdbcOdbc.dll", _String2=".") returned 1 [0138.682] wcscmp (_String1="JdbcOdbc.dll", _String2="..") returned 1 [0138.682] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0138.682] wcscmp (_String1="jdwp.dll", _String2=".") returned 1 [0138.682] wcscmp (_String1="jdwp.dll", _String2="..") returned 1 [0138.682] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0138.682] wcscmp (_String1="jfr.dll", _String2=".") returned 1 [0138.682] wcscmp (_String1="jfr.dll", _String2="..") returned 1 [0138.682] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0138.682] wcscmp (_String1="jfxmedia.dll", _String2=".") returned 1 [0138.682] wcscmp (_String1="jfxmedia.dll", _String2="..") returned 1 [0138.682] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0138.682] wcscmp (_String1="jfxwebkit.dll", _String2=".") returned 1 [0138.682] wcscmp (_String1="jfxwebkit.dll", _String2="..") returned 1 [0138.682] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0138.682] wcscmp (_String1="jli.dll", _String2=".") returned 1 [0138.682] wcscmp (_String1="jli.dll", _String2="..") returned 1 [0138.683] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0138.683] wcscmp (_String1="jp2iexp.dll", _String2=".") returned 1 [0138.683] wcscmp (_String1="jp2iexp.dll", _String2="..") returned 1 [0138.683] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0138.683] wcscmp (_String1="jp2launcher.exe", _String2=".") returned 1 [0138.683] wcscmp (_String1="jp2launcher.exe", _String2="..") returned 1 [0138.683] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0138.683] wcscmp (_String1="jp2native.dll", _String2=".") returned 1 [0138.683] wcscmp (_String1="jp2native.dll", _String2="..") returned 1 [0138.683] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0138.683] wcscmp (_String1="jp2ssv.dll", _String2=".") returned 1 [0138.683] wcscmp (_String1="jp2ssv.dll", _String2="..") returned 1 [0138.683] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0138.683] wcscmp (_String1="jpeg.dll", _String2=".") returned 1 [0138.683] wcscmp (_String1="jpeg.dll", _String2="..") returned 1 [0138.683] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1 [0138.683] wcscmp (_String1="jpicom.dll", _String2=".") returned 1 [0138.683] wcscmp (_String1="jpicom.dll", _String2="..") returned 1 [0138.683] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1 [0138.683] wcscmp (_String1="jpiexp.dll", _String2=".") returned 1 [0138.683] wcscmp (_String1="jpiexp.dll", _String2="..") returned 1 [0138.684] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1 [0138.684] wcscmp (_String1="jpinscp.dll", _String2=".") returned 1 [0138.684] wcscmp (_String1="jpinscp.dll", _String2="..") returned 1 [0138.684] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1 [0138.684] wcscmp (_String1="jpioji.dll", _String2=".") returned 1 [0138.684] wcscmp (_String1="jpioji.dll", _String2="..") returned 1 [0138.684] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1 [0138.684] wcscmp (_String1="jpishare.dll", _String2=".") returned 1 [0138.684] wcscmp (_String1="jpishare.dll", _String2="..") returned 1 [0138.684] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1 [0138.684] wcscmp (_String1="jqs.exe", _String2=".") returned 1 [0138.685] wcscmp (_String1="jqs.exe", _String2="..") returned 1 [0138.685] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0138.685] wcscmp (_String1="jsdt.dll", _String2=".") returned 1 [0138.685] wcscmp (_String1="jsdt.dll", _String2="..") returned 1 [0138.685] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0138.685] wcscmp (_String1="jsound.dll", _String2=".") returned 1 [0138.685] wcscmp (_String1="jsound.dll", _String2="..") returned 1 [0138.685] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0138.685] wcscmp (_String1="jsoundds.dll", _String2=".") returned 1 [0138.685] wcscmp (_String1="jsoundds.dll", _String2="..") returned 1 [0138.685] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0138.685] wcscmp (_String1="kcms.dll", _String2=".") returned 1 [0138.685] wcscmp (_String1="kcms.dll", _String2="..") returned 1 [0138.685] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0138.685] wcscmp (_String1="keytool.exe", _String2=".") returned 1 [0138.685] wcscmp (_String1="keytool.exe", _String2="..") returned 1 [0138.685] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0138.685] wcscmp (_String1="kinit.exe", _String2=".") returned 1 [0138.685] wcscmp (_String1="kinit.exe", _String2="..") returned 1 [0138.686] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0138.686] wcscmp (_String1="klist.exe", _String2=".") returned 1 [0138.686] wcscmp (_String1="klist.exe", _String2="..") returned 1 [0138.686] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0138.686] wcscmp (_String1="ktab.exe", _String2=".") returned 1 [0138.686] wcscmp (_String1="ktab.exe", _String2="..") returned 1 [0138.686] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1 [0138.686] wcscmp (_String1="libxml2.dll", _String2=".") returned 1 [0138.686] wcscmp (_String1="libxml2.dll", _String2="..") returned 1 [0138.686] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1 [0138.686] wcscmp (_String1="libxslt.dll", _String2=".") returned 1 [0138.686] wcscmp (_String1="libxslt.dll", _String2="..") returned 1 [0138.686] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0138.686] wcscmp (_String1="management.dll", _String2=".") returned 1 [0138.686] wcscmp (_String1="management.dll", _String2="..") returned 1 [0138.686] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0138.686] wcscmp (_String1="mlib_image.dll", _String2=".") returned 1 [0138.686] wcscmp (_String1="mlib_image.dll", _String2="..") returned 1 [0138.686] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0138.686] wcscmp (_String1="msvcr100.dll", _String2=".") returned 1 [0138.687] wcscmp (_String1="msvcr100.dll", _String2="..") returned 1 [0138.687] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0138.687] wcscmp (_String1="net.dll", _String2=".") returned 1 [0138.687] wcscmp (_String1="net.dll", _String2="..") returned 1 [0138.687] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0138.687] wcscmp (_String1="nio.dll", _String2=".") returned 1 [0138.687] wcscmp (_String1="nio.dll", _String2="..") returned 1 [0138.687] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="NPJPI1~1.DLL")) returned 1 [0138.687] wcscmp (_String1="npjpi170_45.dll", _String2=".") returned 1 [0138.687] wcscmp (_String1="npjpi170_45.dll", _String2="..") returned 1 [0138.687] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1 [0139.330] wcscmp (_String1="npoji610.dll", _String2=".") returned 1 [0139.330] wcscmp (_String1="npoji610.dll", _String2="..") returned 1 [0139.330] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0139.330] wcscmp (_String1="npt.dll", _String2=".") returned 1 [0139.330] wcscmp (_String1="npt.dll", _String2="..") returned 1 [0139.330] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0139.330] wcscmp (_String1="orbd.exe", _String2=".") returned 1 [0139.330] wcscmp (_String1="orbd.exe", _String2="..") returned 1 [0139.330] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0139.330] wcscmp (_String1="pack200.exe", _String2=".") returned 1 [0139.330] wcscmp (_String1="pack200.exe", _String2="..") returned 1 [0139.330] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0139.330] wcscmp (_String1="plugin2", _String2=".") returned 1 [0139.330] wcscmp (_String1="plugin2", _String2="..") returned 1 [0139.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6f1a0 [0139.330] wcscpy (in: _Dest=0x3e6f1a0, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0139.330] wcscat (in: _Dest=0x3e6f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0139.331] wcscat (in: _Dest=0x3e6f1a0, _Source="plugin2" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2" [0141.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0141.363] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0141.363] wcscmp (_String1="policytool.exe", _String2=".") returned 1 [0141.363] wcscmp (_String1="policytool.exe", _String2="..") returned 1 [0141.363] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="PRISM-~1.DLL")) returned 1 [0141.363] wcscmp (_String1="prism-d3d.dll", _String2=".") returned 1 [0141.363] wcscmp (_String1="prism-d3d.dll", _String2="..") returned 1 [0141.363] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0141.363] wcscmp (_String1="rmid.exe", _String2=".") returned 1 [0141.364] wcscmp (_String1="rmid.exe", _String2="..") returned 1 [0141.364] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0141.364] wcscmp (_String1="rmiregistry.exe", _String2=".") returned 1 [0141.364] wcscmp (_String1="rmiregistry.exe", _String2="..") returned 1 [0141.364] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0141.364] wcscmp (_String1="servertool.exe", _String2=".") returned 1 [0141.365] wcscmp (_String1="servertool.exe", _String2="..") returned 1 [0141.365] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0141.365] wcscmp (_String1="splashscreen.dll", _String2=".") returned 1 [0141.365] wcscmp (_String1="splashscreen.dll", _String2="..") returned 1 [0141.365] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0141.365] wcscmp (_String1="ssv.dll", _String2=".") returned 1 [0141.365] wcscmp (_String1="ssv.dll", _String2="..") returned 1 [0141.365] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0141.365] wcscmp (_String1="ssvagent.exe", _String2=".") returned 1 [0141.365] wcscmp (_String1="ssvagent.exe", _String2="..") returned 1 [0141.365] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0141.365] wcscmp (_String1="sunec.dll", _String2=".") returned 1 [0141.365] wcscmp (_String1="sunec.dll", _String2="..") returned 1 [0141.365] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0141.365] wcscmp (_String1="sunmscapi.dll", _String2=".") returned 1 [0141.366] wcscmp (_String1="sunmscapi.dll", _String2="..") returned 1 [0141.366] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0141.366] wcscmp (_String1="t2k.dll", _String2=".") returned 1 [0141.366] wcscmp (_String1="t2k.dll", _String2="..") returned 1 [0141.366] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0141.366] wcscmp (_String1="tnameserv.exe", _String2=".") returned 1 [0141.366] wcscmp (_String1="tnameserv.exe", _String2="..") returned 1 [0141.366] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0141.366] wcscmp (_String1="unpack.dll", _String2=".") returned 1 [0141.366] wcscmp (_String1="unpack.dll", _String2="..") returned 1 [0141.366] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0141.366] wcscmp (_String1="unpack200.exe", _String2=".") returned 1 [0141.366] wcscmp (_String1="unpack200.exe", _String2="..") returned 1 [0141.366] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0141.366] wcscmp (_String1="verify.dll", _String2=".") returned 1 [0141.366] wcscmp (_String1="verify.dll", _String2="..") returned 1 [0141.367] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0141.367] wcscmp (_String1="w2k_lsa_auth.dll", _String2=".") returned 1 [0141.367] wcscmp (_String1="w2k_lsa_auth.dll", _String2="..") returned 1 [0141.367] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x171a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge.dll", cAlternateFileName="WINDOW~2.DLL")) returned 1 [0141.367] wcscmp (_String1="WindowsAccessBridge.dll", _String2=".") returned 1 [0141.367] wcscmp (_String1="WindowsAccessBridge.dll", _String2="..") returned 1 [0141.367] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0141.367] wcscmp (_String1="wsdetect.dll", _String2=".") returned 1 [0141.367] wcscmp (_String1="wsdetect.dll", _String2="..") returned 1 [0141.367] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0141.367] wcscmp (_String1="zip.dll", _String2=".") returned 1 [0141.367] wcscmp (_String1="zip.dll", _String2="..") returned 1 [0141.368] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0141.368] FindClose (in: hFindFile=0x3e54c88 | out: hFindFile=0x3e54c88) returned 1 [0141.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048e50) returned 1 [0141.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6018) returned 1 [0141.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa9c0) returned 1 Thread: id = 288 os_tid = 0x894 [0131.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre7\\copyright")) returned 0x20 [0132.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT", dwFileAttributes=0x20) returned 0 [0132.469] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre7\\copyright"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.469] GetLastError () returned 0x5 [0132.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT", dwFileAttributes=0x20) returned 0 [0132.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ed28) returned 1 Thread: id = 289 os_tid = 0x8a4 [0131.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e57438 [0131.640] wcscpy (in: _Dest=0x3e57438, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0131.640] wcscat (in: _Dest=0x3e57438, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0131.640] wcscat (in: _Dest=0x3e57438, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\*" [0131.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80490b8 [0131.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\*", lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37698 [0133.551] wcscmp (_String1=".", _String2=".") returned 0 [0133.551] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.329] wcscmp (_String1="..", _String2=".") returned 1 [0134.329] wcscmp (_String1="..", _String2="..") returned 0 [0134.329] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0134.329] wcscmp (_String1="accessibility.properties", _String2=".") returned 1 [0134.329] wcscmp (_String1="accessibility.properties", _String2="..") returned 1 [0134.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32688 [0134.329] wcscpy (in: _Dest=0x3f32688, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0134.329] wcscat (in: _Dest=0x3f32688, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0134.329] wcscat (in: _Dest=0x3f32688, _Source="accessibility.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties" [0144.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0144.342] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1 [0144.342] wcscmp (_String1="alt-rt.jar", _String2=".") returned 1 [0144.342] wcscmp (_String1="alt-rt.jar", _String2="..") returned 1 [0144.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe4a48 [0144.342] wcscpy (in: _Dest=0x2fe4a48, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.342] wcscat (in: _Dest=0x2fe4a48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.342] wcscat (in: _Dest=0x2fe4a48, _Source="alt-rt.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar" [0144.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe4a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0144.343] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0144.344] wcscmp (_String1="applet", _String2=".") returned 1 [0144.344] wcscmp (_String1="applet", _String2="..") returned 1 [0144.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x303d490 [0144.344] wcscpy (in: _Dest=0x303d490, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.344] wcscat (in: _Dest=0x303d490, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.344] wcscat (in: _Dest=0x303d490, _Source="applet" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet") returned="C:\\Program Files\\Java\\jre7\\lib\\applet" [0144.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x303d490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc0 [0144.345] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0144.345] wcscmp (_String1="calendars.properties", _String2=".") returned 1 [0144.345] wcscmp (_String1="calendars.properties", _String2="..") returned 1 [0144.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5400 [0144.345] wcscpy (in: _Dest=0x2ff5400, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.345] wcscat (in: _Dest=0x2ff5400, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.346] wcscat (in: _Dest=0x2ff5400, _Source="calendars.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties" [0144.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0144.347] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6970fd00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6970fd00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69782120, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0144.347] wcscmp (_String1="charsets.jar", _String2=".") returned 1 [0144.347] wcscmp (_String1="charsets.jar", _String2="..") returned 1 [0144.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0cc8 [0144.347] wcscpy (in: _Dest=0x2fe0cc8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.347] wcscat (in: _Dest=0x2fe0cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.347] wcscat (in: _Dest=0x2fe0cc8, _Source="charsets.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar" [0144.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe0cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0144.348] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0144.348] wcscmp (_String1="classlist", _String2=".") returned 1 [0144.348] wcscmp (_String1="classlist", _String2="..") returned 1 [0144.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe7448 [0144.348] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.348] wcscat (in: _Dest=0x2fe7448, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.348] wcscat (in: _Dest=0x2fe7448, _Source="classlist" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\classlist") returned="C:\\Program Files\\Java\\jre7\\lib\\classlist" [0144.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0144.350] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0144.350] wcscmp (_String1="cmm", _String2=".") returned 1 [0144.350] wcscmp (_String1="cmm", _String2="..") returned 1 [0144.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6ab8 [0144.350] wcscpy (in: _Dest=0x3de6ab8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.350] wcscat (in: _Dest=0x3de6ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.350] wcscat (in: _Dest=0x3de6ab8, _Source="cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0144.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0144.352] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0144.352] wcscmp (_String1="content-types.properties", _String2=".") returned 1 [0144.352] wcscmp (_String1="content-types.properties", _String2="..") returned 1 [0144.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32700 [0144.352] wcscpy (in: _Dest=0x3f32700, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.352] wcscat (in: _Dest=0x3f32700, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.352] wcscat (in: _Dest=0x3f32700, _Source="content-types.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties" [0144.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0144.353] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0144.353] wcscmp (_String1="currency.data", _String2=".") returned 1 [0144.353] wcscmp (_String1="currency.data", _String2="..") returned 1 [0144.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d4a8 [0144.353] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.353] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.354] wcscat (in: _Dest=0x3d8d4a8, _Source="currency.data" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\currency.data") returned="C:\\Program Files\\Java\\jre7\\lib\\currency.data" [0144.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0144.355] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0144.355] wcscmp (_String1="deploy", _String2=".") returned 1 [0144.355] wcscmp (_String1="deploy", _String2="..") returned 1 [0144.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x303d598 [0144.355] wcscpy (in: _Dest=0x303d598, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.355] wcscat (in: _Dest=0x303d598, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.355] wcscat (in: _Dest=0x303d598, _Source="deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0144.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x303d598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0144.356] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x697a8280, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x697a8280, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6988cac0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0144.356] wcscmp (_String1="deploy.jar", _String2=".") returned 1 [0144.356] wcscmp (_String1="deploy.jar", _String2="..") returned 1 [0144.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe73e8 [0144.356] wcscpy (in: _Dest=0x2fe73e8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.356] wcscat (in: _Dest=0x2fe73e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.356] wcscat (in: _Dest=0x2fe73e8, _Source="deploy.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar" [0144.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe73e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0144.357] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0144.358] wcscmp (_String1="ext", _String2=".") returned 1 [0144.358] wcscmp (_String1="ext", _String2="..") returned 1 [0144.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5e88 [0144.358] wcscpy (in: _Dest=0x3de5e88, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.358] wcscat (in: _Dest=0x3de5e88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.358] wcscat (in: _Dest=0x3de5e88, _Source="ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0144.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0144.359] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0144.359] wcscmp (_String1="flavormap.properties", _String2=".") returned 1 [0144.359] wcscmp (_String1="flavormap.properties", _String2="..") returned 1 [0144.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5390 [0144.359] wcscpy (in: _Dest=0x2ff5390, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.359] wcscat (in: _Dest=0x2ff5390, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.359] wcscat (in: _Dest=0x2ff5390, _Source="flavormap.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties" [0144.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0144.360] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0144.360] wcscmp (_String1="fontconfig.bfc", _String2=".") returned 1 [0144.360] wcscmp (_String1="fontconfig.bfc", _String2="..") returned 1 [0144.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c810 [0144.360] wcscpy (in: _Dest=0x3d8c810, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.360] wcscat (in: _Dest=0x3d8c810, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.360] wcscat (in: _Dest=0x3d8c810, _Source="fontconfig.bfc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc") returned="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc" [0144.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0144.361] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x28ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0144.361] wcscmp (_String1="fontconfig.properties.src", _String2=".") returned 1 [0144.361] wcscmp (_String1="fontconfig.properties.src", _String2="..") returned 1 [0144.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3daf908 [0144.362] wcscpy (in: _Dest=0x3daf908, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.362] wcscat (in: _Dest=0x3daf908, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.362] wcscat (in: _Dest=0x3daf908, _Source="fontconfig.properties.src" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src") returned="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src" [0144.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3daf908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004 [0144.363] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0144.363] wcscmp (_String1="fonts", _String2=".") returned 1 [0144.363] wcscmp (_String1="fonts", _String2="..") returned 1 [0144.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x303d4e8 [0144.363] wcscpy (in: _Dest=0x303d4e8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.363] wcscat (in: _Dest=0x303d4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.364] wcscat (in: _Dest=0x303d4e8, _Source="fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0144.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x303d4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0144.365] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0144.365] wcscmp (_String1="i386", _String2=".") returned 1 [0144.366] wcscmp (_String1="i386", _String2="..") returned 1 [0144.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6608 [0144.366] wcscpy (in: _Dest=0x3de6608, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.366] wcscat (in: _Dest=0x3de6608, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.366] wcscat (in: _Dest=0x3de6608, _Source="i386" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386") returned="C:\\Program Files\\Java\\jre7\\lib\\i386" [0144.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0144.367] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0144.367] wcscmp (_String1="images", _String2=".") returned 1 [0144.367] wcscmp (_String1="images", _String2="..") returned 1 [0144.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x303c888 [0144.367] wcscpy (in: _Dest=0x303c888, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.367] wcscat (in: _Dest=0x303c888, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.367] wcscat (in: _Dest=0x303c888, _Source="images" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images") returned="C:\\Program Files\\Java\\jre7\\lib\\images" [0144.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x303c888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0144.368] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0144.368] wcscmp (_String1="javafx.properties", _String2=".") returned 1 [0144.368] wcscmp (_String1="javafx.properties", _String2="..") returned 1 [0144.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5010 [0144.369] wcscpy (in: _Dest=0x2ff5010, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.369] wcscat (in: _Dest=0x2ff5010, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.369] wcscat (in: _Dest=0x2ff5010, _Source="javafx.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties" [0144.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0144.370] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6988cac0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6988cac0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x698b2c20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0144.370] wcscmp (_String1="javaws.jar", _String2=".") returned 1 [0144.370] wcscmp (_String1="javaws.jar", _String2="..") returned 1 [0144.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7328 [0144.370] wcscpy (in: _Dest=0x2fe7328, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.370] wcscat (in: _Dest=0x2fe7328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.370] wcscat (in: _Dest=0x2fe7328, _Source="javaws.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar" [0144.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0144.371] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0144.371] wcscmp (_String1="jce.jar", _String2=".") returned 1 [0144.371] wcscmp (_String1="jce.jar", _String2="..") returned 1 [0144.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x303c830 [0144.371] wcscpy (in: _Dest=0x303c830, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.371] wcscat (in: _Dest=0x303c830, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.371] wcscat (in: _Dest=0x303c830, _Source="jce.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jce.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jce.jar" [0144.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x303c830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0144.372] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0144.372] wcscmp (_String1="jfr", _String2=".") returned 1 [0144.372] wcscmp (_String1="jfr", _String2="..") returned 1 [0144.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6018 [0144.372] wcscpy (in: _Dest=0x3de6018, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.372] wcscat (in: _Dest=0x3de6018, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.372] wcscat (in: _Dest=0x3de6018, _Source="jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0144.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0144.374] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679c0e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0144.374] wcscmp (_String1="jfr.jar", _String2=".") returned 1 [0144.374] wcscmp (_String1="jfr.jar", _String2="..") returned 1 [0144.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x303c8e0 [0144.374] wcscpy (in: _Dest=0x303c8e0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.374] wcscat (in: _Dest=0x303c8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.374] wcscat (in: _Dest=0x303c8e0, _Source="jfr.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar" [0144.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x303c8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0144.375] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69997460, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69997460, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xce642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0144.375] wcscmp (_String1="jfxrt.jar", _String2=".") returned 1 [0144.375] wcscmp (_String1="jfxrt.jar", _String2="..") returned 1 [0144.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe74a8 [0144.375] wcscpy (in: _Dest=0x2fe74a8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.375] wcscat (in: _Dest=0x2fe74a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.375] wcscat (in: _Dest=0x2fe74a8, _Source="jfxrt.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar" [0144.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe74a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0144.376] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69925040, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69925040, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6994b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x809cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0144.376] wcscmp (_String1="jsse.jar", _String2=".") returned 1 [0144.376] wcscmp (_String1="jsse.jar", _String2="..") returned 1 [0144.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x303c938 [0144.377] wcscpy (in: _Dest=0x303c938, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.377] wcscat (in: _Dest=0x303c938, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.377] wcscat (in: _Dest=0x303c938, _Source="jsse.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar" [0144.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x303c938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0144.378] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f8e3c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67f8e3c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67fb4520, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0144.378] wcscmp (_String1="jvm.hprof.txt", _String2=".") returned 1 [0144.378] wcscmp (_String1="jvm.hprof.txt", _String2="..") returned 1 [0144.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d370 [0144.378] wcscpy (in: _Dest=0x3d8d370, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.378] wcscat (in: _Dest=0x3d8d370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.378] wcscat (in: _Dest=0x3d8d370, _Source="jvm.hprof.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt") returned="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt" [0144.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0144.379] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67fb4520, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67fb4520, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0144.379] wcscmp (_String1="logging.properties", _String2=".") returned 1 [0144.379] wcscmp (_String1="logging.properties", _String2="..") returned 1 [0144.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33c88 [0144.923] wcscpy (in: _Dest=0x3f33c88, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0144.923] wcscat (in: _Dest=0x3f33c88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0144.923] wcscat (in: _Dest=0x3f33c88, _Source="logging.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\logging.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\logging.properties" [0165.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0165.255] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0165.255] wcscmp (_String1="management", _String2=".") returned 1 [0165.255] wcscmp (_String1="management", _String2="..") returned 1 [0165.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1508 [0165.255] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.255] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.255] wcscat (in: _Dest=0x2fe1508, _Source="management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0165.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0165.256] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0165.257] wcscmp (_String1="management-agent.jar", _String2=".") returned 1 [0165.257] wcscmp (_String1="management-agent.jar", _String2="..") returned 1 [0165.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39a88 [0165.257] wcscpy (in: _Dest=0x3f39a88, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.257] wcscat (in: _Dest=0x3f39a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.257] wcscat (in: _Dest=0x3f39a88, _Source="management-agent.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar" [0165.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0165.258] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6804caa0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0165.258] wcscmp (_String1="meta-index", _String2=".") returned 1 [0165.258] wcscmp (_String1="meta-index", _String2="..") returned 1 [0165.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0165.258] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.258] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.258] wcscat (in: _Dest=0x2fe6c08, _Source="meta-index" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\meta-index") returned="C:\\Program Files\\Java\\jre7\\lib\\meta-index" [0165.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0165.260] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6804caa0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6804caa0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6804caa0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0165.260] wcscmp (_String1="net.properties", _String2=".") returned 1 [0165.260] wcscmp (_String1="net.properties", _String2="..") returned 1 [0165.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x2fce780 [0165.260] wcscpy (in: _Dest=0x2fce780, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.260] wcscat (in: _Dest=0x2fce780, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.260] wcscat (in: _Dest=0x2fce780, _Source="net.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\net.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\net.properties" [0165.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fce780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0165.261] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698d8d80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x698d8d80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69925040, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0165.261] wcscmp (_String1="plugin.jar", _String2=".") returned 1 [0165.261] wcscmp (_String1="plugin.jar", _String2="..") returned 1 [0165.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6968 [0165.261] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.262] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.262] wcscat (in: _Dest=0x2fe6968, _Source="plugin.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar" [0165.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0165.264] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68072c00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68072c00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68072c00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0165.264] wcscmp (_String1="psfont.properties.ja", _String2=".") returned 1 [0165.264] wcscmp (_String1="psfont.properties.ja", _String2="..") returned 1 [0165.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a348 [0165.264] wcscpy (in: _Dest=0x3f3a348, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.264] wcscat (in: _Dest=0x3f3a348, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.264] wcscat (in: _Dest=0x3f3a348, _Source="psfont.properties.ja" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja") returned="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja" [0165.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0165.266] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68072c00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68072c00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68072c00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0165.266] wcscmp (_String1="psfontj2d.properties", _String2=".") returned 1 [0165.266] wcscmp (_String1="psfontj2d.properties", _String2="..") returned 1 [0165.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a1f8 [0165.266] wcscpy (in: _Dest=0x3f3a1f8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.266] wcscat (in: _Dest=0x3f3a1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.266] wcscat (in: _Dest=0x3f3a1f8, _Source="psfontj2d.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties" [0165.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0165.268] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68072c00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68072c00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68098d60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0165.268] wcscmp (_String1="resources.jar", _String2=".") returned 1 [0165.268] wcscmp (_String1="resources.jar", _String2="..") returned 1 [0165.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x2fcea58 [0165.268] wcscpy (in: _Dest=0x2fcea58, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.268] wcscat (in: _Dest=0x2fcea58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.268] wcscat (in: _Dest=0x2fcea58, _Source="resources.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\resources.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\resources.jar" [0165.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fcea58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0165.269] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683928e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683928e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6970fd00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0165.269] wcscmp (_String1="rt.jar", _String2=".") returned 1 [0165.269] wcscmp (_String1="rt.jar", _String2="..") returned 1 [0165.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e230c0 [0165.270] wcscpy (in: _Dest=0x3e230c0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.270] wcscat (in: _Dest=0x3e230c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.270] wcscat (in: _Dest=0x3e230c0, _Source="rt.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\rt.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\rt.jar" [0165.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e230c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0165.271] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681312e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0165.271] wcscmp (_String1="security", _String2=".") returned 1 [0165.271] wcscmp (_String1="security", _String2="..") returned 1 [0165.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e23900 [0165.271] wcscpy (in: _Dest=0x3e23900, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.271] wcscat (in: _Dest=0x3e23900, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.271] wcscat (in: _Dest=0x3e23900, _Source="security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0165.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e23900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0165.272] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0165.272] wcscmp (_String1="sound.properties", _String2=".") returned 1 [0165.272] wcscmp (_String1="sound.properties", _String2="..") returned 1 [0165.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fce098 [0165.273] wcscpy (in: _Dest=0x2fce098, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.273] wcscat (in: _Dest=0x2fce098, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.273] wcscat (in: _Dest=0x2fce098, _Source="sound.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\sound.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\sound.properties" [0165.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fce098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0165.274] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0165.274] wcscmp (_String1="tzmappings", _String2=".") returned 1 [0165.274] wcscmp (_String1="tzmappings", _String2="..") returned 1 [0165.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6cc8 [0165.274] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.274] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.274] wcscat (in: _Dest=0x2fe6cc8, _Source="tzmappings" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\tzmappings") returned="C:\\Program Files\\Java\\jre7\\lib\\tzmappings" [0165.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0165.275] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 1 [0165.276] wcscmp (_String1="zi", _String2=".") returned 1 [0165.276] wcscmp (_String1="zi", _String2="..") returned 1 [0165.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6158 [0165.276] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0165.276] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0165.276] wcscat (in: _Dest=0x3de6158, _Source="zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0165.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de6158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0165.277] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 0 [0165.277] FindClose (in: hFindFile=0x3f37698 | out: hFindFile=0x3f37698) returned 1 [0165.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80490b8) returned 1 [0165.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57438) returned 1 [0165.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51100) returned 1 Thread: id = 290 os_tid = 0x8b4 [0131.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE" (normalized: "c:\\program files\\java\\jre7\\license")) returned 0x20 [0132.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE", dwFileAttributes=0x20) returned 0 [0132.472] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE" (normalized: "c:\\program files\\java\\jre7\\license"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.472] GetLastError () returned 0x5 [0132.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE", dwFileAttributes=0x20) returned 0 [0132.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6888) returned 1 Thread: id = 291 os_tid = 0x8c4 [0131.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt" (normalized: "c:\\program files\\java\\jre7\\readme.txt")) returned 0x20 [0132.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt", dwFileAttributes=0x20) returned 0 [0132.473] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt" (normalized: "c:\\program files\\java\\jre7\\readme.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.473] GetLastError () returned 0x5 [0132.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt", dwFileAttributes=0x20) returned 0 [0132.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ed80) returned 1 Thread: id = 292 os_tid = 0x8d4 [0131.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\release" (normalized: "c:\\program files\\java\\jre7\\release")) returned 0x20 [0132.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\release", dwFileAttributes=0x20) returned 0 [0132.475] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\release" (normalized: "c:\\program files\\java\\jre7\\release"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.475] GetLastError () returned 0x5 [0132.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\release", dwFileAttributes=0x20) returned 0 [0132.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de68d8) returned 1 Thread: id = 293 os_tid = 0x8e8 [0131.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0132.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x20) returned 0 [0132.476] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.476] GetLastError () returned 0x5 [0132.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x20) returned 0 [0132.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20438) returned 1 Thread: id = 294 os_tid = 0x8f8 [0131.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme.txt")) returned 0x20 [0131.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x20) returned 0 [0131.996] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.996] GetLastError () returned 0x5 [0131.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x20) returned 0 [0131.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 Thread: id = 295 os_tid = 0x908 [0131.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files\\java\\jre7\\welcome.html")) returned 0x20 [0131.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html", dwFileAttributes=0x20) returned 0 [0131.998] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files\\java\\jre7\\welcome.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.998] GetLastError () returned 0x5 [0131.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html", dwFileAttributes=0x20) returned 0 [0131.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6edd8) returned 1 Thread: id = 296 os_tid = 0x918 [0131.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e572a8 [0131.647] wcscpy (in: _Dest=0x3e572a8, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0131.647] wcscat (in: _Dest=0x3e572a8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0131.647] wcscat (in: _Dest=0x3e572a8, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\*") returned="C:\\Users\\Default\\AppData\\Local\\*" [0131.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049320 [0131.647] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x79a6290, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c717c5e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0131.649] wcscmp (_String1=".", _String2=".") returned 0 [0131.649] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x79a6290, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c717c5e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.649] wcscmp (_String1="..", _String2=".") returned 1 [0131.649] wcscmp (_String1="..", _String2="..") returned 0 [0131.649] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0131.650] wcscmp (_String1="Application Data", _String2=".") returned 1 [0131.650] wcscmp (_String1="Application Data", _String2="..") returned 1 [0131.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e6f0 [0131.650] wcscpy (in: _Dest=0x3d8e6f0, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0131.650] wcscat (in: _Dest=0x3d8e6f0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0131.650] wcscat (in: _Dest=0x3d8e6f0, _Source="Application Data" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data" [0131.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0131.767] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0131.767] wcscmp (_String1="History", _String2=".") returned 1 [0131.767] wcscmp (_String1="History", _String2="..") returned 1 [0131.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6f148 [0131.767] wcscpy (in: _Dest=0x3e6f148, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0131.767] wcscat (in: _Dest=0x3e6f148, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0131.767] wcscat (in: _Dest=0x3e6f148, _Source="History" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History" [0131.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6f148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0131.768] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x7959fd0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7959fd0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c78a07f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xbd860, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0131.768] wcscmp (_String1="IconCache.db", _String2=".") returned 1 [0131.768] wcscmp (_String1="IconCache.db", _String2="..") returned 1 [0131.768] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2b4e54c8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0131.769] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0131.769] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0131.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe68a8 [0131.769] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0131.769] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0131.769] wcscat (in: _Dest=0x2fe68a8, _Source="Microsoft" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft" [0131.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 [0131.769] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x771eb30, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x5ac162de, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0131.769] wcscmp (_String1="Temp", _String2=".") returned 1 [0131.769] wcscmp (_String1="Temp", _String2="..") returned 1 [0131.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e580b8 [0131.769] wcscpy (in: _Dest=0x3e580b8, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0131.769] wcscat (in: _Dest=0x3e580b8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0131.769] wcscat (in: _Dest=0x3e580b8, _Source="Temp" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Temp") returned="C:\\Users\\Default\\AppData\\Local\\Temp" [0131.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e580b8) returned 1 [0131.770] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0131.770] wcscmp (_String1="Temporary Internet Files", _String2=".") returned 1 [0131.770] wcscmp (_String1="Temporary Internet Files", _String2="..") returned 1 [0131.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0131.770] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0131.770] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0131.770] wcscat (in: _Dest=0x3f32598, _Source="Temporary Internet Files" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files" [0131.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0131.770] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0131.770] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0131.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049320) returned 1 [0131.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e572a8) returned 1 [0131.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69db0) returned 1 Thread: id = 297 os_tid = 0x928 [0131.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e572f8 [0131.650] wcscpy (in: _Dest=0x3e572f8, _Source="C:\\Users\\Default\\AppData\\LocalLow" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow" [0131.650] wcscat (in: _Dest=0x3e572f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow\\") returned="C:\\Users\\Default\\AppData\\LocalLow\\" [0131.650] wcscat (in: _Dest=0x3e572f8, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow\\*") returned="C:\\Users\\Default\\AppData\\LocalLow\\*" [0131.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049588 [0131.650] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0132.000] wcscmp (_String1=".", _String2=".") returned 0 [0132.000] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.000] wcscmp (_String1="..", _String2=".") returned 1 [0132.000] wcscmp (_String1="..", _String2="..") returned 0 [0132.000] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.000] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0132.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049588) returned 1 [0132.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e572f8) returned 1 [0132.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de69c8) returned 1 Thread: id = 298 os_tid = 0x93c [0131.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e57258 [0131.651] wcscpy (in: _Dest=0x3e57258, _Source="C:\\Users\\Default\\AppData\\Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0131.651] wcscat (in: _Dest=0x3e57258, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\" [0131.651] wcscat (in: _Dest=0x3e57258, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\*" [0131.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80497f0 [0131.652] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0132.002] wcscmp (_String1=".", _String2=".") returned 0 [0132.002] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.002] wcscmp (_String1="..", _String2=".") returned 1 [0132.002] wcscmp (_String1="..", _String2="..") returned 0 [0132.002] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0132.002] wcscmp (_String1="Identities", _String2=".") returned 1 [0132.002] wcscmp (_String1="Identities", _String2="..") returned 1 [0132.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5b28 [0132.002] wcscpy (in: _Dest=0x2fe5b28, _Source="C:\\Users\\Default\\AppData\\Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0132.002] wcscat (in: _Dest=0x2fe5b28, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\" [0132.002] wcscat (in: _Dest=0x2fe5b28, _Source="Identities" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities" [0144.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe5b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0144.218] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfa086aac, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x216e5f65, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0144.218] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0144.218] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0144.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe66c8 [0144.218] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\Default\\AppData\\Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0144.218] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\" [0144.218] wcscat (in: _Dest=0x2fe66c8, _Source="Microsoft" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft" [0144.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0144.218] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfa086aac, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x216e5f65, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0144.218] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0144.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80497f0) returned 1 [0144.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57258) returned 1 [0144.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6608) returned 1 Thread: id = 299 os_tid = 0x94c [0131.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015670 [0131.653] wcscpy (in: _Dest=0x3015670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0131.653] wcscat (in: _Dest=0x3015670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0131.653] wcscat (in: _Dest=0x3015670, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*" [0131.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049a58 [0131.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923f9df0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f380d8 [0132.637] wcscmp (_String1=".", _String2=".") returned 0 [0132.637] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923f9df0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.647] wcscmp (_String1="..", _String2=".") returned 1 [0132.647] wcscmp (_String1="..", _String2="..") returned 0 [0132.647] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ca0c00, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9ca0c00, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0132.647] wcscmp (_String1="AG00004_.GIF", _String2=".") returned 1 [0132.647] wcscmp (_String1="AG00004_.GIF", _String2="..") returned 1 [0132.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0132.647] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0132.647] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0132.647] wcscat (in: _Dest=0x3f2f528, _Source="AG00004_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" [0139.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0139.659] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1847e700, ftCreationTime.dwHighDateTime=0x1bd4bae, ftLastAccessTime.dwLowDateTime=0x765f43b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1847e700, ftLastWriteTime.dwHighDateTime=0x1bd4bae, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0139.659] wcscmp (_String1="AG00011_.GIF", _String2=".") returned 1 [0139.659] wcscmp (_String1="AG00011_.GIF", _String2="..") returned 1 [0139.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ff70 [0139.659] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.659] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.659] wcscat (in: _Dest=0x3e1ff70, _Source="AG00011_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" [0139.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0139.660] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8d5200, ftCreationTime.dwHighDateTime=0x1bd4bae, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8d5200, ftLastWriteTime.dwHighDateTime=0x1bd4bae, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0139.660] wcscmp (_String1="AG00021_.GIF", _String2=".") returned 1 [0139.660] wcscmp (_String1="AG00021_.GIF", _String2="..") returned 1 [0139.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053308 [0139.660] wcscpy (in: _Dest=0x8053308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.660] wcscat (in: _Dest=0x8053308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.660] wcscat (in: _Dest=0x8053308, _Source="AG00021_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" [0139.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0139.662] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9495500, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf9495500, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0139.662] wcscmp (_String1="AG00037_.GIF", _String2=".") returned 1 [0139.662] wcscmp (_String1="AG00037_.GIF", _String2="..") returned 1 [0139.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053390 [0139.662] wcscpy (in: _Dest=0x8053390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.662] wcscat (in: _Dest=0x8053390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.662] wcscat (in: _Dest=0x8053390, _Source="AG00037_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" [0139.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0139.663] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8d7c00, ftCreationTime.dwHighDateTime=0x1bf32c1, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc8d7c00, ftLastWriteTime.dwHighDateTime=0x1bf32c1, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0139.663] wcscmp (_String1="AG00038_.GIF", _String2=".") returned 1 [0139.663] wcscmp (_String1="AG00038_.GIF", _String2="..") returned 1 [0139.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053418 [0139.664] wcscpy (in: _Dest=0x8053418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.664] wcscat (in: _Dest=0x8053418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.664] wcscat (in: _Dest=0x8053418, _Source="AG00038_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" [0139.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0139.665] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf484a100, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf484a100, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0139.665] wcscmp (_String1="AG00040_.GIF", _String2=".") returned 1 [0139.665] wcscmp (_String1="AG00040_.GIF", _String2="..") returned 1 [0139.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80534a0 [0139.665] wcscpy (in: _Dest=0x80534a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.665] wcscat (in: _Dest=0x80534a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.665] wcscat (in: _Dest=0x80534a0, _Source="AG00040_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" [0139.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80534a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0139.932] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb633400, ftCreationTime.dwHighDateTime=0x1bd4c74, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb633400, ftLastWriteTime.dwHighDateTime=0x1bd4c74, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0139.932] wcscmp (_String1="AG00052_.GIF", _String2=".") returned 1 [0139.932] wcscmp (_String1="AG00052_.GIF", _String2="..") returned 1 [0139.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053528 [0139.932] wcscpy (in: _Dest=0x8053528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.932] wcscat (in: _Dest=0x8053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.932] wcscat (in: _Dest=0x8053528, _Source="AG00052_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" [0139.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0139.933] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a02200, ftCreationTime.dwHighDateTime=0x1bd4bae, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20a02200, ftLastWriteTime.dwHighDateTime=0x1bd4bae, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0139.933] wcscmp (_String1="AG00057_.GIF", _String2=".") returned 1 [0139.933] wcscmp (_String1="AG00057_.GIF", _String2="..") returned 1 [0139.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80535b0 [0139.933] wcscpy (in: _Dest=0x80535b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.933] wcscat (in: _Dest=0x80535b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.933] wcscat (in: _Dest=0x80535b0, _Source="AG00057_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" [0139.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80535b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0139.934] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe966e00, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe966e00, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0139.934] wcscmp (_String1="AG00090_.GIF", _String2=".") returned 1 [0139.934] wcscmp (_String1="AG00090_.GIF", _String2="..") returned 1 [0139.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053638 [0139.934] wcscpy (in: _Dest=0x8053638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.935] wcscat (in: _Dest=0x8053638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.935] wcscat (in: _Dest=0x8053638, _Source="AG00090_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" [0139.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0139.936] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc341400, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc341400, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0139.936] wcscmp (_String1="AG00092_.GIF", _String2=".") returned 1 [0139.936] wcscmp (_String1="AG00092_.GIF", _String2="..") returned 1 [0139.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80536c0 [0139.936] wcscpy (in: _Dest=0x80536c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.936] wcscat (in: _Dest=0x80536c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.936] wcscat (in: _Dest=0x80536c0, _Source="AG00092_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" [0139.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80536c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0139.937] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42a5700, ftCreationTime.dwHighDateTime=0x1bd4fef, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe42a5700, ftLastWriteTime.dwHighDateTime=0x1bd4fef, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0139.937] wcscmp (_String1="AG00103_.GIF", _String2=".") returned 1 [0139.937] wcscmp (_String1="AG00103_.GIF", _String2="..") returned 1 [0139.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053748 [0139.937] wcscpy (in: _Dest=0x8053748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.937] wcscat (in: _Dest=0x8053748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.937] wcscat (in: _Dest=0x8053748, _Source="AG00103_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" [0139.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0139.939] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884b8100, ftCreationTime.dwHighDateTime=0x1bd4c31, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x884b8100, ftLastWriteTime.dwHighDateTime=0x1bd4c31, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0139.939] wcscmp (_String1="AG00120_.GIF", _String2=".") returned 1 [0139.939] wcscmp (_String1="AG00120_.GIF", _String2="..") returned 1 [0139.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80537d0 [0139.939] wcscpy (in: _Dest=0x80537d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.939] wcscat (in: _Dest=0x80537d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.939] wcscat (in: _Dest=0x80537d0, _Source="AG00120_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" [0139.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80537d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0139.940] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9870ce00, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9870ce00, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0139.940] wcscmp (_String1="AG00126_.GIF", _String2=".") returned 1 [0139.940] wcscmp (_String1="AG00126_.GIF", _String2="..") returned 1 [0139.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053858 [0139.940] wcscpy (in: _Dest=0x8053858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.940] wcscat (in: _Dest=0x8053858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.940] wcscat (in: _Dest=0x8053858, _Source="AG00126_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" [0139.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0139.941] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x960e7400, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x960e7400, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0139.941] wcscmp (_String1="AG00129_.GIF", _String2=".") returned 1 [0139.941] wcscmp (_String1="AG00129_.GIF", _String2="..") returned 1 [0139.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80538e0 [0139.941] wcscpy (in: _Dest=0x80538e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.941] wcscat (in: _Dest=0x80538e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.942] wcscat (in: _Dest=0x80538e0, _Source="AG00129_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" [0139.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80538e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0139.942] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94dd4700, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94dd4700, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0139.942] wcscmp (_String1="AG00130_.GIF", _String2=".") returned 1 [0139.942] wcscmp (_String1="AG00130_.GIF", _String2="..") returned 1 [0139.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053968 [0139.943] wcscpy (in: _Dest=0x8053968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.943] wcscat (in: _Dest=0x8053968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.943] wcscat (in: _Dest=0x8053968, _Source="AG00130_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" [0139.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0139.944] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee76600, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ee76600, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0139.944] wcscmp (_String1="AG00135_.GIF", _String2=".") returned 1 [0139.944] wcscmp (_String1="AG00135_.GIF", _String2="..") returned 1 [0139.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80539f0 [0139.944] wcscpy (in: _Dest=0x80539f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.944] wcscat (in: _Dest=0x80539f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.944] wcscat (in: _Dest=0x80539f0, _Source="AG00135_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" [0139.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80539f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0139.945] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88f18500, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88f18500, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0139.945] wcscmp (_String1="AG00139_.GIF", _String2=".") returned 1 [0139.945] wcscmp (_String1="AG00139_.GIF", _String2="..") returned 1 [0139.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053a78 [0139.945] wcscpy (in: _Dest=0x8053a78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.945] wcscat (in: _Dest=0x8053a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.945] wcscat (in: _Dest=0x8053a78, _Source="AG00139_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" [0139.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0139.946] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fba400, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82fba400, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0139.946] wcscmp (_String1="AG00142_.GIF", _String2=".") returned 1 [0139.947] wcscmp (_String1="AG00142_.GIF", _String2="..") returned 1 [0139.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053b00 [0139.947] wcscpy (in: _Dest=0x8053b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.947] wcscat (in: _Dest=0x8053b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.947] wcscat (in: _Dest=0x8053b00, _Source="AG00142_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" [0139.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0139.948] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9d6900, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e9d6900, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0139.948] wcscmp (_String1="AG00154_.GIF", _String2=".") returned 1 [0139.948] wcscmp (_String1="AG00154_.GIF", _String2="..") returned 1 [0139.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053b88 [0139.948] wcscpy (in: _Dest=0x8053b88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.948] wcscat (in: _Dest=0x8053b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.949] wcscat (in: _Dest=0x8053b88, _Source="AG00154_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" [0139.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0139.950] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47765b00, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47765b00, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0139.950] wcscmp (_String1="AG00157_.GIF", _String2=".") returned 1 [0139.950] wcscmp (_String1="AG00157_.GIF", _String2="..") returned 1 [0139.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053c10 [0139.950] wcscpy (in: _Dest=0x8053c10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.950] wcscat (in: _Dest=0x8053c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.950] wcscat (in: _Dest=0x8053c10, _Source="AG00157_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" [0139.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0139.951] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b1a700, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42b1a700, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0139.952] wcscmp (_String1="AG00158_.GIF", _String2=".") returned 1 [0139.952] wcscmp (_String1="AG00158_.GIF", _String2="..") returned 1 [0139.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053c98 [0139.952] wcscpy (in: _Dest=0x8053c98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0139.952] wcscat (in: _Dest=0x8053c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0139.952] wcscat (in: _Dest=0x8053c98, _Source="AG00158_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" [0139.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0140.943] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f9ed700, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f9ed700, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0140.943] wcscmp (_String1="AG00160_.GIF", _String2=".") returned 1 [0140.943] wcscmp (_String1="AG00160_.GIF", _String2="..") returned 1 [0140.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0140.943] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.943] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.943] wcscat (in: _Dest=0x3f2f528, _Source="AG00160_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" [0155.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98 [0155.678] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ada2300, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2ada2300, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0155.678] wcscmp (_String1="AG00161_.GIF", _String2=".") returned 1 [0155.678] wcscmp (_String1="AG00161_.GIF", _String2="..") returned 1 [0155.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f748 [0155.678] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.678] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.678] wcscat (in: _Dest=0x3f2f748, _Source="AG00161_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" [0155.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278c [0155.680] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb195e00, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb195e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0155.680] wcscmp (_String1="AG00163_.GIF", _String2=".") returned 1 [0155.680] wcscmp (_String1="AG00163_.GIF", _String2="..") returned 1 [0155.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2b40 [0155.680] wcscpy (in: _Dest=0x81d2b40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.680] wcscat (in: _Dest=0x81d2b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.680] wcscat (in: _Dest=0x81d2b40, _Source="AG00163_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" [0155.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2790 [0155.681] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2281e800, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2281e800, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0155.681] wcscmp (_String1="AG00164_.GIF", _String2=".") returned 1 [0155.681] wcscmp (_String1="AG00164_.GIF", _String2="..") returned 1 [0155.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2ab8 [0155.681] wcscpy (in: _Dest=0x81d2ab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.681] wcscat (in: _Dest=0x81d2ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.681] wcscat (in: _Dest=0x81d2ab8, _Source="AG00164_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" [0155.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2794 [0155.682] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee6100, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1eee6100, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0155.682] wcscmp (_String1="AG00165_.GIF", _String2=".") returned 1 [0155.683] wcscmp (_String1="AG00165_.GIF", _String2="..") returned 1 [0155.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2bc8 [0155.683] wcscpy (in: _Dest=0x81d2bc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.683] wcscat (in: _Dest=0x81d2bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.683] wcscat (in: _Dest=0x81d2bc8, _Source="AG00165_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" [0155.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2798 [0155.684] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16962600, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16962600, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0155.684] wcscmp (_String1="AG00167_.GIF", _String2=".") returned 1 [0155.684] wcscmp (_String1="AG00167_.GIF", _String2="..") returned 1 [0155.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2c50 [0155.684] wcscpy (in: _Dest=0x81d2c50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.684] wcscat (in: _Dest=0x81d2c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.684] wcscat (in: _Dest=0x81d2c50, _Source="AG00167_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" [0155.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x279c [0155.685] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d17200, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11d17200, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0155.685] wcscmp (_String1="AG00169_.GIF", _String2=".") returned 1 [0155.685] wcscmp (_String1="AG00169_.GIF", _String2="..") returned 1 [0155.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2cd8 [0155.685] wcscpy (in: _Dest=0x81d2cd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.686] wcscat (in: _Dest=0x81d2cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.686] wcscat (in: _Dest=0x81d2cd8, _Source="AG00169_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" [0155.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a0 [0155.687] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb9100, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdb9100, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0155.687] wcscmp (_String1="AG00170_.GIF", _String2=".") returned 1 [0155.687] wcscmp (_String1="AG00170_.GIF", _String2="..") returned 1 [0155.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2d60 [0155.687] wcscpy (in: _Dest=0x81d2d60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.687] wcscat (in: _Dest=0x81d2d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.687] wcscat (in: _Dest=0x81d2d60, _Source="AG00170_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" [0155.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a4 [0155.688] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716dd00, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x716dd00, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0155.688] wcscmp (_String1="AG00171_.GIF", _String2=".") returned 1 [0155.688] wcscmp (_String1="AG00171_.GIF", _String2="..") returned 1 [0155.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2de8 [0155.688] wcscpy (in: _Dest=0x81d2de8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.689] wcscat (in: _Dest=0x81d2de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.689] wcscat (in: _Dest=0x81d2de8, _Source="AG00171_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" [0155.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a8 [0155.690] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf39c500, ftCreationTime.dwHighDateTime=0x1bd4ec5, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf39c500, ftLastWriteTime.dwHighDateTime=0x1bd4ec5, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0155.690] wcscmp (_String1="AG00172_.GIF", _String2=".") returned 1 [0155.690] wcscmp (_String1="AG00172_.GIF", _String2="..") returned 1 [0155.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2e70 [0155.690] wcscpy (in: _Dest=0x81d2e70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.690] wcscat (in: _Dest=0x81d2e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.690] wcscat (in: _Dest=0x81d2e70, _Source="AG00172_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" [0155.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ac [0155.691] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73821e00, ftCreationTime.dwHighDateTime=0x1bd4ebb, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73821e00, ftLastWriteTime.dwHighDateTime=0x1bd4ebb, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0155.691] wcscmp (_String1="AG00174_.GIF", _String2=".") returned 1 [0155.691] wcscmp (_String1="AG00174_.GIF", _String2="..") returned 1 [0155.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2ef8 [0155.692] wcscpy (in: _Dest=0x81d2ef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.692] wcscat (in: _Dest=0x81d2ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.692] wcscat (in: _Dest=0x81d2ef8, _Source="AG00174_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" [0155.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b0 [0155.693] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914d8400, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x914d8400, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0155.693] wcscmp (_String1="AG00175_.GIF", _String2=".") returned 1 [0155.693] wcscmp (_String1="AG00175_.GIF", _String2="..") returned 1 [0155.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d2f80 [0155.693] wcscpy (in: _Dest=0x81d2f80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.693] wcscat (in: _Dest=0x81d2f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.693] wcscat (in: _Dest=0x81d2f80, _Source="AG00175_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" [0155.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b4 [0155.695] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3719900, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3719900, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0155.696] wcscmp (_String1="AG00176_.GIF", _String2=".") returned 1 [0155.696] wcscmp (_String1="AG00176_.GIF", _String2="..") returned 1 [0155.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0155.697] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0155.697] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0155.697] wcscat (in: _Dest=0x81d3008, _Source="AG00176_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" [0159.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 0x20 [0159.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x20) returned 0 [0159.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.784] GetLastError () returned 0x5 [0159.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x20) returned 0 [0159.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.784] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef940300, ftCreationTime.dwHighDateTime=0x1bd4b55, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef940300, ftLastWriteTime.dwHighDateTime=0x1bd4b55, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0159.784] wcscmp (_String1="AN00010_.WMF", _String2=".") returned 1 [0159.784] wcscmp (_String1="AN00010_.WMF", _String2="..") returned 1 [0159.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.785] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.785] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.785] wcscat (in: _Dest=0x81d3008, _Source="AN00010_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" [0159.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0x20 [0159.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x20) returned 0 [0159.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.817] GetLastError () returned 0x5 [0159.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x20) returned 0 [0159.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.818] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40512f00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x40512f00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0159.818] wcscmp (_String1="AN00015_.WMF", _String2=".") returned 1 [0159.818] wcscmp (_String1="AN00015_.WMF", _String2="..") returned 1 [0159.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.818] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.818] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.818] wcscat (in: _Dest=0x81d3008, _Source="AN00015_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" [0159.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 0x20 [0159.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x20) returned 0 [0159.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.819] GetLastError () returned 0x5 [0159.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x20) returned 0 [0159.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.819] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b60b00, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x13b60b00, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0159.819] wcscmp (_String1="AN00790_.WMF", _String2=".") returned 1 [0159.819] wcscmp (_String1="AN00790_.WMF", _String2="..") returned 1 [0159.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.819] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.819] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.819] wcscat (in: _Dest=0x81d3008, _Source="AN00790_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" [0159.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0x20 [0159.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x20) returned 0 [0159.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.825] GetLastError () returned 0x5 [0159.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x20) returned 0 [0159.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.825] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f200200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f200200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0159.825] wcscmp (_String1="AN00853_.WMF", _String2=".") returned 1 [0159.825] wcscmp (_String1="AN00853_.WMF", _String2="..") returned 1 [0159.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.825] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.825] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.825] wcscat (in: _Dest=0x81d3008, _Source="AN00853_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" [0159.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 0x20 [0159.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x20) returned 0 [0159.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.826] GetLastError () returned 0x5 [0159.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x20) returned 0 [0159.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.826] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4300900, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4300900, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0159.826] wcscmp (_String1="AN00914_.WMF", _String2=".") returned 1 [0159.826] wcscmp (_String1="AN00914_.WMF", _String2="..") returned 1 [0159.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.826] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.826] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.826] wcscat (in: _Dest=0x81d3008, _Source="AN00914_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" [0159.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0x20 [0159.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x20) returned 0 [0159.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.831] GetLastError () returned 0x5 [0159.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x20) returned 0 [0159.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.831] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3deed500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3deed500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0159.831] wcscmp (_String1="AN00932_.WMF", _String2=".") returned 1 [0159.831] wcscmp (_String1="AN00932_.WMF", _String2="..") returned 1 [0159.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.831] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.831] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.831] wcscat (in: _Dest=0x81d3008, _Source="AN00932_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" [0159.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0x20 [0159.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x20) returned 0 [0159.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.832] GetLastError () returned 0x5 [0159.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x20) returned 0 [0159.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.832] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5683dd00, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5683dd00, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0159.832] wcscmp (_String1="AN00965_.WMF", _String2=".") returned 1 [0159.832] wcscmp (_String1="AN00965_.WMF", _String2="..") returned 1 [0159.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.832] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.832] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.832] wcscat (in: _Dest=0x81d3008, _Source="AN00965_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" [0159.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 0x20 [0159.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x20) returned 0 [0159.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.833] GetLastError () returned 0x5 [0159.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x20) returned 0 [0159.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.833] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8ca00, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b8ca00, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0159.833] wcscmp (_String1="AN01039_.WMF", _String2=".") returned 1 [0159.833] wcscmp (_String1="AN01039_.WMF", _String2="..") returned 1 [0159.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.834] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.834] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.834] wcscat (in: _Dest=0x81d3008, _Source="AN01039_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" [0159.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 0x20 [0159.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x20) returned 0 [0159.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.834] GetLastError () returned 0x5 [0159.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x20) returned 0 [0159.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.834] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc71e0000, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc71e0000, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0159.835] wcscmp (_String1="AN01044_.WMF", _String2=".") returned 1 [0159.835] wcscmp (_String1="AN01044_.WMF", _String2="..") returned 1 [0159.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.835] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.835] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.835] wcscat (in: _Dest=0x81d3008, _Source="AN01044_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" [0159.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0x20 [0159.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x20) returned 0 [0159.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.835] GetLastError () returned 0x5 [0159.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x20) returned 0 [0159.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.836] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37328300, ftCreationTime.dwHighDateTime=0x1bd4b86, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37328300, ftLastWriteTime.dwHighDateTime=0x1bd4b86, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0159.836] wcscmp (_String1="AN01060_.WMF", _String2=".") returned 1 [0159.836] wcscmp (_String1="AN01060_.WMF", _String2="..") returned 1 [0159.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.836] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.836] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.836] wcscat (in: _Dest=0x81d3008, _Source="AN01060_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" [0159.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 0x20 [0159.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x20) returned 0 [0159.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.836] GetLastError () returned 0x5 [0159.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x20) returned 0 [0159.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.837] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c124400, ftCreationTime.dwHighDateTime=0x1bd4b83, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c124400, ftLastWriteTime.dwHighDateTime=0x1bd4b83, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0159.837] wcscmp (_String1="AN01084_.WMF", _String2=".") returned 1 [0159.837] wcscmp (_String1="AN01084_.WMF", _String2="..") returned 1 [0159.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.837] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.837] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.837] wcscat (in: _Dest=0x81d3008, _Source="AN01084_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" [0159.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf")) returned 0x20 [0159.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x20) returned 0 [0159.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.838] GetLastError () returned 0x5 [0159.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x20) returned 0 [0159.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.838] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9754500, ftCreationTime.dwHighDateTime=0x1bd4b9c, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9754500, ftLastWriteTime.dwHighDateTime=0x1bd4b9c, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0159.838] wcscmp (_String1="AN01173_.WMF", _String2=".") returned 1 [0159.838] wcscmp (_String1="AN01173_.WMF", _String2="..") returned 1 [0159.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.838] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.838] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.838] wcscat (in: _Dest=0x81d3008, _Source="AN01173_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" [0159.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 0x20 [0159.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x20) returned 0 [0159.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.848] GetLastError () returned 0x5 [0159.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x20) returned 0 [0159.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.848] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8441800, ftCreationTime.dwHighDateTime=0x1bd4b9c, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8441800, ftLastWriteTime.dwHighDateTime=0x1bd4b9c, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0159.848] wcscmp (_String1="AN01174_.WMF", _String2=".") returned 1 [0159.848] wcscmp (_String1="AN01174_.WMF", _String2="..") returned 1 [0159.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.848] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.848] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.848] wcscat (in: _Dest=0x81d3008, _Source="AN01174_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" [0159.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf")) returned 0x20 [0159.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x20) returned 0 [0159.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.857] GetLastError () returned 0x5 [0159.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x20) returned 0 [0159.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.857] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f42f00, ftCreationTime.dwHighDateTime=0x1bd4b5b, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21f42f00, ftLastWriteTime.dwHighDateTime=0x1bd4b5b, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0159.857] wcscmp (_String1="AN01184_.WMF", _String2=".") returned 1 [0159.857] wcscmp (_String1="AN01184_.WMF", _String2="..") returned 1 [0159.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.857] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.857] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.857] wcscat (in: _Dest=0x81d3008, _Source="AN01184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" [0159.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf")) returned 0x20 [0159.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x20) returned 0 [0159.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.858] GetLastError () returned 0x5 [0159.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x20) returned 0 [0159.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.858] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x186ac700, ftCreationTime.dwHighDateTime=0x1bd4b5b, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x186ac700, ftLastWriteTime.dwHighDateTime=0x1bd4b5b, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0159.858] wcscmp (_String1="AN01216_.WMF", _String2=".") returned 1 [0159.858] wcscmp (_String1="AN01216_.WMF", _String2="..") returned 1 [0159.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.858] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.858] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.858] wcscat (in: _Dest=0x81d3008, _Source="AN01216_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" [0159.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf")) returned 0x20 [0159.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x20) returned 0 [0159.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.859] GetLastError () returned 0x5 [0159.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x20) returned 0 [0159.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.859] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d74000, ftCreationTime.dwHighDateTime=0x1bd4b5b, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14d74000, ftLastWriteTime.dwHighDateTime=0x1bd4b5b, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0159.859] wcscmp (_String1="AN01218_.WMF", _String2=".") returned 1 [0159.859] wcscmp (_String1="AN01218_.WMF", _String2="..") returned 1 [0159.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.859] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.859] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.859] wcscat (in: _Dest=0x81d3008, _Source="AN01218_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" [0159.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf")) returned 0x20 [0159.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x20) returned 0 [0159.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.859] GetLastError () returned 0x5 [0159.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x20) returned 0 [0159.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.860] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf01800, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdf01800, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0159.860] wcscmp (_String1="AN01251_.WMF", _String2=".") returned 1 [0159.860] wcscmp (_String1="AN01251_.WMF", _String2="..") returned 1 [0159.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.860] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.860] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.860] wcscat (in: _Dest=0x81d3008, _Source="AN01251_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" [0159.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf")) returned 0x20 [0159.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x20) returned 0 [0159.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.860] GetLastError () returned 0x5 [0159.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x20) returned 0 [0159.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.861] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596bd700, ftCreationTime.dwHighDateTime=0x1bd4b6d, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x596bd700, ftLastWriteTime.dwHighDateTime=0x1bd4b6d, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0159.861] wcscmp (_String1="AN01545_.WMF", _String2=".") returned 1 [0159.861] wcscmp (_String1="AN01545_.WMF", _String2="..") returned 1 [0159.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.861] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.861] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.861] wcscat (in: _Dest=0x81d3008, _Source="AN01545_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" [0159.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf")) returned 0x20 [0159.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x20) returned 0 [0159.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.861] GetLastError () returned 0x5 [0159.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x20) returned 0 [0159.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.862] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78af3800, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78af3800, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0159.862] wcscmp (_String1="AN02122_.WMF", _String2=".") returned 1 [0159.862] wcscmp (_String1="AN02122_.WMF", _String2="..") returned 1 [0159.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.862] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.862] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.862] wcscat (in: _Dest=0x81d3008, _Source="AN02122_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" [0159.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf")) returned 0x20 [0159.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x20) returned 0 [0159.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.862] GetLastError () returned 0x5 [0159.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x20) returned 0 [0159.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.863] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63fe9d00, ftCreationTime.dwHighDateTime=0x1bd4c4f, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63fe9d00, ftLastWriteTime.dwHighDateTime=0x1bd4c4f, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0159.863] wcscmp (_String1="AN02559_.WMF", _String2=".") returned 1 [0159.863] wcscmp (_String1="AN02559_.WMF", _String2="..") returned 1 [0159.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.863] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.863] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.863] wcscat (in: _Dest=0x81d3008, _Source="AN02559_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" [0159.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf")) returned 0x20 [0159.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x20) returned 0 [0159.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.871] GetLastError () returned 0x5 [0159.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x20) returned 0 [0159.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.871] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a0a300, ftCreationTime.dwHighDateTime=0x1bd4c64, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0a0a300, ftLastWriteTime.dwHighDateTime=0x1bd4c64, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0159.871] wcscmp (_String1="AN02724_.WMF", _String2=".") returned 1 [0159.871] wcscmp (_String1="AN02724_.WMF", _String2="..") returned 1 [0159.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.871] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.871] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.871] wcscat (in: _Dest=0x81d3008, _Source="AN02724_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" [0159.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf")) returned 0x20 [0159.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x20) returned 0 [0159.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.877] GetLastError () returned 0x5 [0159.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x20) returned 0 [0159.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.877] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bc9100, ftCreationTime.dwHighDateTime=0x1bd4c7d, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1bc9100, ftLastWriteTime.dwHighDateTime=0x1bd4c7d, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0159.877] wcscmp (_String1="AN03500_.WMF", _String2=".") returned 1 [0159.877] wcscmp (_String1="AN03500_.WMF", _String2="..") returned 1 [0159.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.877] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.877] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.877] wcscat (in: _Dest=0x81d3008, _Source="AN03500_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" [0159.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf")) returned 0x20 [0159.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x20) returned 0 [0159.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.878] GetLastError () returned 0x5 [0159.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x20) returned 0 [0159.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.878] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0159.878] wcscmp (_String1="AN04108_.WMF", _String2=".") returned 1 [0159.878] wcscmp (_String1="AN04108_.WMF", _String2="..") returned 1 [0159.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.878] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.878] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.878] wcscat (in: _Dest=0x81d3008, _Source="AN04108_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" [0159.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf")) returned 0x20 [0159.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x20) returned 0 [0159.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.879] GetLastError () returned 0x5 [0159.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x20) returned 0 [0159.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.879] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0159.879] wcscmp (_String1="AN04117_.WMF", _String2=".") returned 1 [0159.879] wcscmp (_String1="AN04117_.WMF", _String2="..") returned 1 [0159.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.879] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.879] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.879] wcscat (in: _Dest=0x81d3008, _Source="AN04117_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" [0159.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf")) returned 0x20 [0159.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x20) returned 0 [0159.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.880] GetLastError () returned 0x5 [0159.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x20) returned 0 [0159.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.880] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0159.880] wcscmp (_String1="AN04134_.WMF", _String2=".") returned 1 [0159.880] wcscmp (_String1="AN04134_.WMF", _String2="..") returned 1 [0159.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.880] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.880] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.880] wcscat (in: _Dest=0x81d3008, _Source="AN04134_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" [0159.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf")) returned 0x20 [0159.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x20) returned 0 [0159.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.881] GetLastError () returned 0x5 [0159.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x20) returned 0 [0159.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.881] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0159.881] wcscmp (_String1="AN04174_.WMF", _String2=".") returned 1 [0159.881] wcscmp (_String1="AN04174_.WMF", _String2="..") returned 1 [0159.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.881] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.881] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.881] wcscat (in: _Dest=0x81d3008, _Source="AN04174_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" [0159.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf")) returned 0x20 [0159.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x20) returned 0 [0159.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.882] GetLastError () returned 0x5 [0159.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x20) returned 0 [0159.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.882] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0159.882] wcscmp (_String1="AN04191_.WMF", _String2=".") returned 1 [0159.882] wcscmp (_String1="AN04191_.WMF", _String2="..") returned 1 [0159.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.882] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.882] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.882] wcscat (in: _Dest=0x81d3008, _Source="AN04191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" [0159.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf")) returned 0x20 [0159.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x20) returned 0 [0159.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.892] GetLastError () returned 0x5 [0159.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x20) returned 0 [0159.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.893] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0159.893] wcscmp (_String1="AN04195_.WMF", _String2=".") returned 1 [0159.893] wcscmp (_String1="AN04195_.WMF", _String2="..") returned 1 [0159.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.893] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.893] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.893] wcscat (in: _Dest=0x81d3008, _Source="AN04195_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" [0159.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf")) returned 0x20 [0159.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x20) returned 0 [0159.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.893] GetLastError () returned 0x5 [0159.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x20) returned 0 [0159.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.893] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0159.893] wcscmp (_String1="AN04196_.WMF", _String2=".") returned 1 [0159.894] wcscmp (_String1="AN04196_.WMF", _String2="..") returned 1 [0159.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.894] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.894] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.894] wcscat (in: _Dest=0x81d3008, _Source="AN04196_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" [0159.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf")) returned 0x20 [0159.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x20) returned 0 [0159.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.894] GetLastError () returned 0x5 [0159.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x20) returned 0 [0159.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0159.894] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0159.894] wcscmp (_String1="AN04206_.WMF", _String2=".") returned 1 [0159.894] wcscmp (_String1="AN04206_.WMF", _String2="..") returned 1 [0159.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0159.895] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.895] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.895] wcscat (in: _Dest=0x81d3008, _Source="AN04206_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" [0159.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf")) returned 0x20 [0162.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x20) returned 0 [0162.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.158] GetLastError () returned 0x5 [0162.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x20) returned 0 [0162.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 [0162.159] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0162.159] wcscmp (_String1="AN04225_.WMF", _String2=".") returned 1 [0162.159] wcscmp (_String1="AN04225_.WMF", _String2="..") returned 1 [0162.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3008 [0162.159] wcscpy (in: _Dest=0x81d3008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.159] wcscat (in: _Dest=0x81d3008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.159] wcscat (in: _Dest=0x81d3008, _Source="AN04225_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" [0168.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b88 [0168.984] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0168.984] wcscmp (_String1="AN04235_.WMF", _String2=".") returned 1 [0168.985] wcscmp (_String1="AN04235_.WMF", _String2="..") returned 1 [0168.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0168.985] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0168.985] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0168.985] wcscat (in: _Dest=0x81c0190, _Source="AN04235_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" [0168.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b84 [0168.986] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0168.986] wcscmp (_String1="AN04267_.WMF", _String2=".") returned 1 [0168.986] wcscmp (_String1="AN04267_.WMF", _String2="..") returned 1 [0168.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf5e0 [0168.986] wcscpy (in: _Dest=0x81bf5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0168.986] wcscat (in: _Dest=0x81bf5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0168.986] wcscat (in: _Dest=0x81bf5e0, _Source="AN04267_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" [0168.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa0 [0168.988] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0171.729] wcscmp (_String1="AN04269_.WMF", _String2=".") returned 1 [0171.729] wcscmp (_String1="AN04269_.WMF", _String2="..") returned 1 [0171.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bec50 [0171.729] wcscpy (in: _Dest=0x81bec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0171.729] wcscat (in: _Dest=0x81bec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0171.729] wcscat (in: _Dest=0x81bec50, _Source="AN04269_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" [0175.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2974 [0175.348] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0175.348] wcscmp (_String1="AN04323_.WMF", _String2=".") returned 1 [0175.348] wcscmp (_String1="AN04323_.WMF", _String2="..") returned 1 [0175.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80538e0 [0175.348] wcscpy (in: _Dest=0x80538e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.349] wcscat (in: _Dest=0x80538e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.349] wcscat (in: _Dest=0x80538e0, _Source="AN04323_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" [0175.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80538e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0175.358] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0175.358] wcscmp (_String1="AN04326_.WMF", _String2=".") returned 1 [0175.358] wcscmp (_String1="AN04326_.WMF", _String2="..") returned 1 [0175.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80534a0 [0175.358] wcscpy (in: _Dest=0x80534a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.358] wcscat (in: _Dest=0x80534a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.358] wcscat (in: _Dest=0x80534a0, _Source="AN04326_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" [0175.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80534a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0175.364] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0175.364] wcscmp (_String1="AN04332_.WMF", _String2=".") returned 1 [0175.364] wcscmp (_String1="AN04332_.WMF", _String2="..") returned 1 [0175.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053418 [0175.365] wcscpy (in: _Dest=0x8053418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.365] wcscat (in: _Dest=0x8053418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.365] wcscat (in: _Dest=0x8053418, _Source="AN04332_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" [0175.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0175.366] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766fed50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0175.366] wcscmp (_String1="AN04355_.WMF", _String2=".") returned 1 [0175.366] wcscmp (_String1="AN04355_.WMF", _String2="..") returned 1 [0175.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80539f0 [0175.366] wcscpy (in: _Dest=0x80539f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.366] wcscat (in: _Dest=0x80539f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.366] wcscat (in: _Dest=0x80539f0, _Source="AN04355_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" [0175.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80539f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0175.367] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766fed50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0175.367] wcscmp (_String1="AN04369_.WMF", _String2=".") returned 1 [0175.367] wcscmp (_String1="AN04369_.WMF", _String2="..") returned 1 [0175.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053c10 [0175.367] wcscpy (in: _Dest=0x8053c10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.368] wcscat (in: _Dest=0x8053c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.368] wcscat (in: _Dest=0x8053c10, _Source="AN04369_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" [0175.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0175.369] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0175.369] wcscmp (_String1="AN04384_.WMF", _String2=".") returned 1 [0175.369] wcscmp (_String1="AN04384_.WMF", _String2="..") returned 1 [0175.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053fc8 [0175.369] wcscpy (in: _Dest=0x8053fc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.369] wcscat (in: _Dest=0x8053fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.369] wcscat (in: _Dest=0x8053fc8, _Source="AN04384_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" [0175.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0175.384] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0175.384] wcscmp (_String1="AN04385_.WMF", _String2=".") returned 1 [0175.384] wcscmp (_String1="AN04385_.WMF", _String2="..") returned 1 [0175.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053b88 [0175.385] wcscpy (in: _Dest=0x8053b88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.385] wcscat (in: _Dest=0x8053b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.385] wcscat (in: _Dest=0x8053b88, _Source="AN04385_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" [0175.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0175.386] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f8f400, ftCreationTime.dwHighDateTime=0x1bd4c7a, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64f8f400, ftLastWriteTime.dwHighDateTime=0x1bd4c7a, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0175.386] wcscmp (_String1="BABY_01.MID", _String2=".") returned 1 [0175.386] wcscmp (_String1="BABY_01.MID", _String2="..") returned 1 [0175.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053eb8 [0175.386] wcscpy (in: _Dest=0x8053eb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.386] wcscat (in: _Dest=0x8053eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.386] wcscat (in: _Dest=0x8053eb8, _Source="BABY_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" [0175.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0175.387] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0175.387] wcscmp (_String1="BD00116_.WMF", _String2=".") returned 1 [0175.387] wcscmp (_String1="BD00116_.WMF", _String2="..") returned 1 [0175.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053390 [0175.388] wcscpy (in: _Dest=0x8053390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.388] wcscat (in: _Dest=0x8053390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.388] wcscat (in: _Dest=0x8053390, _Source="BD00116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" [0175.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0175.389] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8679b00, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8679b00, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0175.389] wcscmp (_String1="BD00141_.WMF", _String2=".") returned 1 [0175.389] wcscmp (_String1="BD00141_.WMF", _String2="..") returned 1 [0175.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053280 [0175.389] wcscpy (in: _Dest=0x8053280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.389] wcscat (in: _Dest=0x8053280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.389] wcscat (in: _Dest=0x8053280, _Source="BD00141_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" [0175.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0175.390] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb8b700, ftCreationTime.dwHighDateTime=0x1bf14f3, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4eb8b700, ftLastWriteTime.dwHighDateTime=0x1bf14f3, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0175.391] wcscmp (_String1="BD00146_.WMF", _String2=".") returned 1 [0175.391] wcscmp (_String1="BD00146_.WMF", _String2="..") returned 1 [0175.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053da8 [0175.391] wcscpy (in: _Dest=0x8053da8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.391] wcscat (in: _Dest=0x8053da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.391] wcscat (in: _Dest=0x8053da8, _Source="BD00146_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" [0175.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0175.392] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9706af00, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9706af00, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0175.392] wcscmp (_String1="BD00155_.WMF", _String2=".") returned 1 [0175.392] wcscmp (_String1="BD00155_.WMF", _String2="..") returned 1 [0175.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054490 [0175.393] wcscpy (in: _Dest=0x8054490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.393] wcscat (in: _Dest=0x8054490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.393] wcscat (in: _Dest=0x8054490, _Source="BD00155_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" [0175.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0175.394] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdfa100, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fdfa100, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0175.394] wcscmp (_String1="BD00160_.WMF", _String2=".") returned 1 [0175.394] wcscmp (_String1="BD00160_.WMF", _String2="..") returned 1 [0175.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054408 [0175.394] wcscpy (in: _Dest=0x8054408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.394] wcscat (in: _Dest=0x8054408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.394] wcscat (in: _Dest=0x8054408, _Source="BD00160_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" [0175.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0175.395] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60309900, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60309900, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0175.395] wcscmp (_String1="BD00173_.WMF", _String2=".") returned 1 [0175.395] wcscmp (_String1="BD00173_.WMF", _String2="..") returned 1 [0175.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80535b0 [0175.396] wcscpy (in: _Dest=0x80535b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.396] wcscat (in: _Dest=0x80535b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.396] wcscat (in: _Dest=0x80535b0, _Source="BD00173_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" [0175.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80535b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0175.397] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0175.397] wcscmp (_String1="BD05119_.WMF", _String2=".") returned 1 [0175.397] wcscmp (_String1="BD05119_.WMF", _String2="..") returned 1 [0175.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053528 [0175.397] wcscpy (in: _Dest=0x8053528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.397] wcscat (in: _Dest=0x8053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.397] wcscat (in: _Dest=0x8053528, _Source="BD05119_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" [0175.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0175.398] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0175.398] wcscmp (_String1="BD06102_.WMF", _String2=".") returned 1 [0175.398] wcscmp (_String1="BD06102_.WMF", _String2="..") returned 1 [0175.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053638 [0175.399] wcscpy (in: _Dest=0x8053638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.399] wcscat (in: _Dest=0x8053638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.399] wcscat (in: _Dest=0x8053638, _Source="BD06102_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" [0175.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0175.400] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0175.400] wcscmp (_String1="BD06200_.WMF", _String2=".") returned 1 [0175.400] wcscmp (_String1="BD06200_.WMF", _String2="..") returned 1 [0175.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80536c0 [0175.400] wcscpy (in: _Dest=0x80536c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.400] wcscat (in: _Dest=0x80536c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.400] wcscat (in: _Dest=0x80536c0, _Source="BD06200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" [0175.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80536c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0175.401] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0175.401] wcscmp (_String1="BD07761_.WMF", _String2=".") returned 1 [0175.401] wcscmp (_String1="BD07761_.WMF", _String2="..") returned 1 [0175.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053748 [0175.401] wcscpy (in: _Dest=0x8053748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.401] wcscat (in: _Dest=0x8053748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.402] wcscat (in: _Dest=0x8053748, _Source="BD07761_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" [0175.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0175.403] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0175.403] wcscmp (_String1="BD07804_.WMF", _String2=".") returned 1 [0175.403] wcscmp (_String1="BD07804_.WMF", _String2="..") returned 1 [0175.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80537d0 [0175.403] wcscpy (in: _Dest=0x80537d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.403] wcscat (in: _Dest=0x80537d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.403] wcscat (in: _Dest=0x80537d0, _Source="BD07804_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" [0175.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80537d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0175.404] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0175.404] wcscmp (_String1="BD07831_.WMF", _String2=".") returned 1 [0175.404] wcscmp (_String1="BD07831_.WMF", _String2="..") returned 1 [0175.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054160 [0175.404] wcscpy (in: _Dest=0x8054160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.404] wcscat (in: _Dest=0x8054160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.404] wcscat (in: _Dest=0x8054160, _Source="BD07831_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" [0175.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0175.405] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0175.406] wcscmp (_String1="BD08758_.WMF", _String2=".") returned 1 [0175.406] wcscmp (_String1="BD08758_.WMF", _String2="..") returned 1 [0175.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8052f50 [0175.406] wcscpy (in: _Dest=0x8052f50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.406] wcscat (in: _Dest=0x8052f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.406] wcscat (in: _Dest=0x8052f50, _Source="BD08758_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" [0175.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8052f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0175.407] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0175.407] wcscmp (_String1="BD08773_.WMF", _String2=".") returned 1 [0175.407] wcscmp (_String1="BD08773_.WMF", _String2="..") returned 1 [0175.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053b00 [0175.407] wcscpy (in: _Dest=0x8053b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.407] wcscat (in: _Dest=0x8053b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.407] wcscat (in: _Dest=0x8053b00, _Source="BD08773_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" [0175.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0 [0175.409] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0175.409] wcscmp (_String1="BD08808_.WMF", _String2=".") returned 1 [0175.409] wcscmp (_String1="BD08808_.WMF", _String2="..") returned 1 [0175.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053858 [0175.409] wcscpy (in: _Dest=0x8053858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.409] wcscat (in: _Dest=0x8053858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.409] wcscat (in: _Dest=0x8053858, _Source="BD08808_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" [0175.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0175.410] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0175.410] wcscmp (_String1="BD08868_.WMF", _String2=".") returned 1 [0175.410] wcscmp (_String1="BD08868_.WMF", _String2="..") returned 1 [0175.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053968 [0175.410] wcscpy (in: _Dest=0x8053968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.410] wcscat (in: _Dest=0x8053968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.411] wcscat (in: _Dest=0x8053968, _Source="BD08868_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" [0175.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0175.723] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0175.723] wcscmp (_String1="BD09031_.WMF", _String2=".") returned 1 [0175.723] wcscmp (_String1="BD09031_.WMF", _String2="..") returned 1 [0175.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80538e0 [0175.723] wcscpy (in: _Dest=0x80538e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.723] wcscat (in: _Dest=0x80538e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.723] wcscat (in: _Dest=0x80538e0, _Source="BD09031_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" [0178.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80538e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0178.551] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0178.551] wcscmp (_String1="BD09194_.WMF", _String2=".") returned 1 [0178.551] wcscmp (_String1="BD09194_.WMF", _String2="..") returned 1 [0178.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0178.552] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.552] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.552] wcscat (in: _Dest=0x81c0190, _Source="BD09194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" [0178.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0178.553] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0178.553] wcscmp (_String1="BD09662_.WMF", _String2=".") returned 1 [0178.553] wcscmp (_String1="BD09662_.WMF", _String2="..") returned 1 [0178.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c02a0 [0178.553] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.553] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.553] wcscat (in: _Dest=0x81c02a0, _Source="BD09662_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" [0178.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0178.555] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0178.555] wcscmp (_String1="BD09664_.WMF", _String2=".") returned 1 [0178.555] wcscmp (_String1="BD09664_.WMF", _String2="..") returned 1 [0178.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf5e0 [0178.555] wcscpy (in: _Dest=0x81bf5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.555] wcscat (in: _Dest=0x81bf5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.555] wcscat (in: _Dest=0x81bf5e0, _Source="BD09664_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" [0178.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0178.556] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe16b3a00, ftCreationTime.dwHighDateTime=0x1bd4fce, ftLastAccessTime.dwLowDateTime=0x85e1b930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe16b3a00, ftLastWriteTime.dwHighDateTime=0x1bd4fce, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0178.556] wcscmp (_String1="BD10890_.GIF", _String2=".") returned 1 [0178.556] wcscmp (_String1="BD10890_.GIF", _String2="..") returned 1 [0178.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be5f0 [0178.556] wcscpy (in: _Dest=0x81be5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.556] wcscat (in: _Dest=0x81be5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.556] wcscat (in: _Dest=0x81be5f0, _Source="BD10890_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" [0178.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0178.558] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a4fb00, ftCreationTime.dwHighDateTime=0x1bd4fce, ftLastAccessTime.dwLowDateTime=0x76a6acf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28a4fb00, ftLastWriteTime.dwHighDateTime=0x1bd4fce, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0178.558] wcscmp (_String1="BD10972_.GIF", _String2=".") returned 1 [0178.558] wcscmp (_String1="BD10972_.GIF", _String2="..") returned 1 [0178.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf998 [0178.558] wcscpy (in: _Dest=0x81bf998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.558] wcscat (in: _Dest=0x81bf998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.558] wcscat (in: _Dest=0x81bf998, _Source="BD10972_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" [0178.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0178.559] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b8a5800, ftCreationTime.dwHighDateTime=0x1bd4dbb, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b8a5800, ftLastWriteTime.dwHighDateTime=0x1bd4dbb, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0178.560] wcscmp (_String1="BD19563_.GIF", _String2=".") returned 1 [0178.560] wcscmp (_String1="BD19563_.GIF", _String2="..") returned 1 [0178.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0108 [0178.560] wcscpy (in: _Dest=0x81c0108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.560] wcscat (in: _Dest=0x81c0108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.560] wcscat (in: _Dest=0x81c0108, _Source="BD19563_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" [0178.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0178.561] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a296c00, ftCreationTime.dwHighDateTime=0x1bd4dbb, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7a296c00, ftLastWriteTime.dwHighDateTime=0x1bd4dbb, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0178.561] wcscmp (_String1="BD19582_.GIF", _String2=".") returned 1 [0178.561] wcscmp (_String1="BD19582_.GIF", _String2="..") returned 1 [0178.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be678 [0178.561] wcscpy (in: _Dest=0x81be678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.561] wcscat (in: _Dest=0x81be678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.562] wcscat (in: _Dest=0x81be678, _Source="BD19582_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" [0178.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0178.563] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59fbac00, ftCreationTime.dwHighDateTime=0x1bd4dbf, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59fbac00, ftLastWriteTime.dwHighDateTime=0x1bd4dbf, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0178.563] wcscmp (_String1="BD19695_.WMF", _String2=".") returned 1 [0178.563] wcscmp (_String1="BD19695_.WMF", _String2="..") returned 1 [0178.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be568 [0178.563] wcscpy (in: _Dest=0x81be568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.563] wcscat (in: _Dest=0x81be568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.563] wcscat (in: _Dest=0x81be568, _Source="BD19695_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" [0178.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0178.565] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83680800, ftCreationTime.dwHighDateTime=0x1bd4dbe, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x83680800, ftLastWriteTime.dwHighDateTime=0x1bd4dbe, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0183.746] wcscmp (_String1="BD19827_.WMF", _String2=".") returned 1 [0183.746] wcscmp (_String1="BD19827_.WMF", _String2="..") returned 1 [0183.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30518 [0183.746] wcscpy (in: _Dest=0x3f30518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0183.746] wcscat (in: _Dest=0x3f30518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0183.746] wcscat (in: _Dest=0x3f30518, _Source="BD19827_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" [0187.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c [0187.042] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8236db00, ftCreationTime.dwHighDateTime=0x1bd4dbe, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8236db00, ftLastWriteTime.dwHighDateTime=0x1bd4dbe, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0187.042] wcscmp (_String1="BD19828_.WMF", _String2=".") returned 1 [0187.042] wcscmp (_String1="BD19828_.WMF", _String2="..") returned 1 [0187.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be4e0 [0187.042] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.042] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.042] wcscat (in: _Dest=0x81be4e0, _Source="BD19828_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" [0187.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0187.043] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac30200, ftCreationTime.dwHighDateTime=0x1bd4dbd, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7ac30200, ftLastWriteTime.dwHighDateTime=0x1bd4dbd, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0187.043] wcscmp (_String1="BD19986_.WMF", _String2=".") returned 1 [0187.043] wcscmp (_String1="BD19986_.WMF", _String2="..") returned 1 [0187.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfb30 [0187.043] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.043] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.043] wcscat (in: _Dest=0x81bfb30, _Source="BD19986_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" [0187.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0187.045] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f7b00, ftCreationTime.dwHighDateTime=0x1bd4dbd, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x772f7b00, ftLastWriteTime.dwHighDateTime=0x1bd4dbd, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0187.045] wcscmp (_String1="BD19988_.WMF", _String2=".") returned 1 [0187.045] wcscmp (_String1="BD19988_.WMF", _String2="..") returned 1 [0187.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bec50 [0187.045] wcscpy (in: _Dest=0x81bec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.045] wcscat (in: _Dest=0x81bec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.045] wcscat (in: _Dest=0x81bec50, _Source="BD19988_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" [0187.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0187.047] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549d6200, ftCreationTime.dwHighDateTime=0x1bd4dbd, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x549d6200, ftLastWriteTime.dwHighDateTime=0x1bd4dbd, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0187.047] wcscmp (_String1="BD20013_.WMF", _String2=".") returned 1 [0187.047] wcscmp (_String1="BD20013_.WMF", _String2="..") returned 1 [0187.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf090 [0187.047] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.047] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.047] wcscat (in: _Dest=0x81bf090, _Source="BD20013_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" [0187.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0187.049] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20495c00, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20495c00, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0187.049] wcscmp (_String1="BL00008_.WMF", _String2=".") returned 1 [0187.049] wcscmp (_String1="BL00008_.WMF", _String2="..") returned 1 [0187.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf558 [0187.049] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.049] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.049] wcscat (in: _Dest=0x81bf558, _Source="BL00008_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" [0187.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a00 [0187.050] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a537b00, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a537b00, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0187.050] wcscmp (_String1="BL00012_.WMF", _String2=".") returned 1 [0187.050] wcscmp (_String1="BL00012_.WMF", _String2="..") returned 1 [0187.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfc40 [0187.050] wcscpy (in: _Dest=0x81bfc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.051] wcscat (in: _Dest=0x81bfc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.051] wcscat (in: _Dest=0x81bfc40, _Source="BL00012_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" [0187.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0187.052] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fe6800, ftCreationTime.dwHighDateTime=0x1bd4b90, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76fe6800, ftLastWriteTime.dwHighDateTime=0x1bd4b90, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0187.052] wcscmp (_String1="BL00045_.WMF", _String2=".") returned 1 [0187.052] wcscmp (_String1="BL00045_.WMF", _String2="..") returned 1 [0187.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf4d0 [0187.052] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.052] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.052] wcscat (in: _Dest=0x81bf4d0, _Source="BL00045_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" [0187.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0187.054] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f75dd00, ftCreationTime.dwHighDateTime=0x1bd4b8c, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f75dd00, ftLastWriteTime.dwHighDateTime=0x1bd4b8c, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0187.054] wcscmp (_String1="BL00098_.WMF", _String2=".") returned 1 [0187.054] wcscmp (_String1="BL00098_.WMF", _String2="..") returned 1 [0187.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf6f0 [0187.054] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.054] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.054] wcscat (in: _Dest=0x81bf6f0, _Source="BL00098_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" [0187.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0187.055] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbf1600, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1dbf1600, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0187.055] wcscmp (_String1="BL00105_.WMF", _String2=".") returned 1 [0187.055] wcscmp (_String1="BL00105_.WMF", _String2="..") returned 1 [0187.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfdd8 [0187.055] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.055] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.055] wcscat (in: _Dest=0x81bfdd8, _Source="BL00105_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" [0187.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0187.056] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2443c00, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2443c00, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0187.056] wcscmp (_String1="BL00122_.WMF", _String2=".") returned 1 [0187.056] wcscmp (_String1="BL00122_.WMF", _String2="..") returned 1 [0187.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0080 [0187.057] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.057] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.057] wcscat (in: _Dest=0x81c0080, _Source="BL00122_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" [0187.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0187.058] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf316c00, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf316c00, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0187.058] wcscmp (_String1="BL00130_.WMF", _String2=".") returned 1 [0187.058] wcscmp (_String1="BL00130_.WMF", _String2="..") returned 1 [0187.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf778 [0187.058] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.058] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.059] wcscat (in: _Dest=0x81bf778, _Source="BL00130_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" [0187.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0187.060] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18fa6200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18fa6200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0187.060] wcscmp (_String1="BL00148_.WMF", _String2=".") returned 1 [0187.060] wcscmp (_String1="BL00148_.WMF", _String2="..") returned 1 [0187.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfa20 [0187.060] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.060] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.060] wcscat (in: _Dest=0x81bfa20, _Source="BL00148_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" [0187.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0187.062] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c93500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17c93500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0187.062] wcscmp (_String1="BL00152_.WMF", _String2=".") returned 1 [0187.062] wcscmp (_String1="BL00152_.WMF", _String2="..") returned 1 [0187.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfaa8 [0187.062] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.062] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.062] wcscat (in: _Dest=0x81bfaa8, _Source="BL00152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" [0187.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0187.063] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2adc0500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2adc0500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0187.063] wcscmp (_String1="BL00194_.WMF", _String2=".") returned 1 [0187.063] wcscmp (_String1="BL00194_.WMF", _String2="..") returned 1 [0187.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf910 [0187.063] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.064] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.064] wcscat (in: _Dest=0x81bf910, _Source="BL00194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" [0187.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0187.065] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16980800, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16980800, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0187.065] wcscmp (_String1="BL00195_.WMF", _String2=".") returned 1 [0187.065] wcscmp (_String1="BL00195_.WMF", _String2="..") returned 1 [0187.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf800 [0187.065] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.065] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.065] wcscat (in: _Dest=0x81bf800, _Source="BL00195_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" [0187.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0187.066] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16bdf500, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16bdf500, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0187.067] wcscmp (_String1="BL00234_.WMF", _String2=".") returned 1 [0187.067] wcscmp (_String1="BL00234_.WMF", _String2="..") returned 1 [0187.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf338 [0187.067] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.067] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.067] wcscat (in: _Dest=0x81bf338, _Source="BL00234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" [0187.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0187.068] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e786d00, ftCreationTime.dwHighDateTime=0x1bd4b94, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e786d00, ftLastWriteTime.dwHighDateTime=0x1bd4b94, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0187.068] wcscmp (_String1="BL00242_.WMF", _String2=".") returned 1 [0187.068] wcscmp (_String1="BL00242_.WMF", _String2="..") returned 1 [0187.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf668 [0187.068] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.068] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.068] wcscat (in: _Dest=0x81bf668, _Source="BL00242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" [0187.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0187.070] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a472300, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7a472300, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0187.070] wcscmp (_String1="BL00247_.WMF", _String2=".") returned 1 [0187.070] wcscmp (_String1="BL00247_.WMF", _String2="..") returned 1 [0187.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfe60 [0187.070] wcscpy (in: _Dest=0x81bfe60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.070] wcscat (in: _Dest=0x81bfe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.070] wcscat (in: _Dest=0x81bfe60, _Source="BL00247_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" [0187.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0187.072] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeecb00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9eeecb00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0187.072] wcscmp (_String1="BL00248_.WMF", _String2=".") returned 1 [0187.072] wcscmp (_String1="BL00248_.WMF", _String2="..") returned 1 [0187.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c03b0 [0187.072] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.072] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.072] wcscat (in: _Dest=0x81c03b0, _Source="BL00248_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" [0187.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0187.073] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc09c8200, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc09c8200, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0187.073] wcscmp (_String1="BL00252_.WMF", _String2=".") returned 1 [0187.073] wcscmp (_String1="BL00252_.WMF", _String2="..") returned 1 [0187.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf448 [0187.073] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.073] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.074] wcscat (in: _Dest=0x81bf448, _Source="BL00252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" [0187.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0187.075] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d35400, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11d35400, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0187.075] wcscmp (_String1="BL00254_.WMF", _String2=".") returned 1 [0187.075] wcscmp (_String1="BL00254_.WMF", _String2="..") returned 1 [0187.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bef80 [0187.075] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.075] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.075] wcscat (in: _Dest=0x81bef80, _Source="BL00254_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" [0187.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0187.077] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x159f00, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x159f00, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0187.077] wcscmp (_String1="BL00261_.WMF", _String2=".") returned 1 [0187.077] wcscmp (_String1="BL00261_.WMF", _String2="..") returned 1 [0187.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfcc8 [0187.077] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.077] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.077] wcscat (in: _Dest=0x81bfcc8, _Source="BL00261_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" [0187.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0187.078] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8ee9100, ftCreationTime.dwHighDateTime=0x1bd4b90, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8ee9100, ftLastWriteTime.dwHighDateTime=0x1bd4b90, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0187.078] wcscmp (_String1="BL00262_.WMF", _String2=".") returned 1 [0187.078] wcscmp (_String1="BL00262_.WMF", _String2="..") returned 1 [0187.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bede8 [0187.079] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.079] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.079] wcscat (in: _Dest=0x81bede8, _Source="BL00262_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" [0187.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0187.080] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fff4c00, ftCreationTime.dwHighDateTime=0x1bd4b77, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5fff4c00, ftLastWriteTime.dwHighDateTime=0x1bd4b77, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0187.080] wcscmp (_String1="BL00265_.WMF", _String2=".") returned 1 [0187.080] wcscmp (_String1="BL00265_.WMF", _String2="..") returned 1 [0187.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beab8 [0187.080] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.080] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.080] wcscat (in: _Dest=0x81beab8, _Source="BL00265_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" [0187.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0187.449] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875a1700, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x875a1700, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0187.449] wcscmp (_String1="BL00267_.WMF", _String2=".") returned 1 [0187.449] wcscmp (_String1="BL00267_.WMF", _String2="..") returned 1 [0187.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f8e0 [0187.449] wcscpy (in: _Dest=0x3f2f8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.449] wcscat (in: _Dest=0x3f2f8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.449] wcscat (in: _Dest=0x3f2f8e0, _Source="BL00267_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" [0187.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0187.972] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53173400, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53173400, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0187.972] wcscmp (_String1="BL00269_.WMF", _String2=".") returned 1 [0187.972] wcscmp (_String1="BL00269_.WMF", _String2="..") returned 1 [0187.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f311d8 [0187.973] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.973] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.973] wcscat (in: _Dest=0x3f311d8, _Source="BL00269_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" [0187.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26b8 [0187.975] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23e3f00, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe23e3f00, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0187.975] wcscmp (_String1="BL00270_.WMF", _String2=".") returned 1 [0187.975] wcscmp (_String1="BL00270_.WMF", _String2="..") returned 1 [0187.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ffc8 [0187.975] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.975] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.975] wcscat (in: _Dest=0x3f2ffc8, _Source="BL00270_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" [0187.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2594 [0187.977] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925f7800, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x925f7800, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0187.977] wcscmp (_String1="BL00273_.WMF", _String2=".") returned 1 [0187.977] wcscmp (_String1="BL00273_.WMF", _String2="..") returned 1 [0187.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f858 [0187.977] wcscpy (in: _Dest=0x3f2f858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.977] wcscat (in: _Dest=0x3f2f858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.977] wcscat (in: _Dest=0x3f2f858, _Source="BL00273_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" [0187.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a1c [0187.978] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f1ce900, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f1ce900, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0187.978] wcscmp (_String1="BL00274_.WMF", _String2=".") returned 1 [0187.978] wcscmp (_String1="BL00274_.WMF", _String2="..") returned 1 [0187.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f338 [0187.979] wcscpy (in: _Dest=0x3e1f338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.979] wcscat (in: _Dest=0x3e1f338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.979] wcscat (in: _Dest=0x3e1f338, _Source="BL00274_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" [0187.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0187.980] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41657900, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41657900, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0187.980] wcscmp (_String1="BL00296_.WMF", _String2=".") returned 1 [0187.980] wcscmp (_String1="BL00296_.WMF", _String2="..") returned 1 [0187.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f558 [0187.980] wcscpy (in: _Dest=0x3e1f558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.980] wcscat (in: _Dest=0x3e1f558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.980] wcscat (in: _Dest=0x3e1f558, _Source="BL00296_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" [0187.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a18 [0187.988] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74881800, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74881800, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0187.988] wcscmp (_String1="BL00390_.WMF", _String2=".") returned 1 [0187.988] wcscmp (_String1="BL00390_.WMF", _String2="..") returned 1 [0187.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f5e0 [0187.988] wcscpy (in: _Dest=0x3e1f5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.988] wcscat (in: _Dest=0x3e1f5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.988] wcscat (in: _Dest=0x3e1f5e0, _Source="BL00390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" [0187.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0187.990] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7225be00, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7225be00, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0187.990] wcscmp (_String1="BL00392_.WMF", _String2=".") returned 1 [0187.990] wcscmp (_String1="BL00392_.WMF", _String2="..") returned 1 [0187.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f668 [0187.990] wcscpy (in: _Dest=0x3e1f668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.990] wcscat (in: _Dest=0x3e1f668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.990] wcscat (in: _Dest=0x3e1f668, _Source="BL00392_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" [0187.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0187.993] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b924900, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b924900, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0187.993] wcscmp (_String1="BL00524_.WMF", _String2=".") returned 1 [0187.993] wcscmp (_String1="BL00524_.WMF", _String2="..") returned 1 [0187.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f778 [0187.993] wcscpy (in: _Dest=0x3e1f778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0187.993] wcscat (in: _Dest=0x3e1f778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0187.993] wcscat (in: _Dest=0x3e1f778, _Source="BL00524_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" [0187.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29cc [0187.994] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a611c00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a611c00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0189.298] wcscmp (_String1="BL00525_.WMF", _String2=".") returned 1 [0189.298] wcscmp (_String1="BL00525_.WMF", _String2="..") returned 1 [0189.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0189.299] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0189.299] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0189.299] wcscat (in: _Dest=0x81bee70, _Source="BL00525_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" [0190.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0190.086] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692fef00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x692fef00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0190.086] wcscmp (_String1="BL00526_.WMF", _String2=".") returned 1 [0190.086] wcscmp (_String1="BL00526_.WMF", _String2="..") returned 1 [0190.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31040 [0190.086] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.086] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.086] wcscat (in: _Dest=0x3f31040, _Source="BL00526_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" [0190.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0190.087] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb631c500, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb631c500, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0190.087] wcscmp (_String1="BL00648_.WMF", _String2=".") returned 1 [0190.087] wcscmp (_String1="BL00648_.WMF", _String2="..") returned 1 [0190.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f306b0 [0190.087] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.087] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.087] wcscat (in: _Dest=0x3f306b0, _Source="BL00648_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" [0190.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0190.088] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d9a700, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80d9a700, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0190.088] wcscmp (_String1="BL00921_.WMF", _String2=".") returned 1 [0190.088] wcscmp (_String1="BL00921_.WMF", _String2="..") returned 1 [0190.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ff40 [0190.089] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.089] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.089] wcscat (in: _Dest=0x3f2ff40, _Source="BL00921_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" [0190.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0190.090] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b80900, ftCreationTime.dwHighDateTime=0x1bd4c5c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b80900, ftLastWriteTime.dwHighDateTime=0x1bd4c5c, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0190.090] wcscmp (_String1="BL00923_.WMF", _String2=".") returned 1 [0190.090] wcscmp (_String1="BL00923_.WMF", _String2="..") returned 1 [0190.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f418 [0190.090] wcscpy (in: _Dest=0x3f2f418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.090] wcscat (in: _Dest=0x3f2f418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.090] wcscat (in: _Dest=0x3f2f418, _Source="BL00923_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" [0190.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0190.091] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0190.091] wcscmp (_String1="BL00932_.WMF", _String2=".") returned 1 [0190.091] wcscmp (_String1="BL00932_.WMF", _String2="..") returned 1 [0190.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0190.091] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.091] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.091] wcscat (in: _Dest=0x3f310c8, _Source="BL00932_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" [0190.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0190.092] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d094d00, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x76ccc2f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d094d00, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0190.092] wcscmp (_String1="BL00985_.WMF", _String2=".") returned 1 [0190.092] wcscmp (_String1="BL00985_.WMF", _String2="..") returned 1 [0190.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fd20 [0190.092] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.092] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.092] wcscat (in: _Dest=0x3f2fd20, _Source="BL00985_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" [0190.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0190.094] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x76ccc2f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0190.094] wcscmp (_String1="BOAT.WMF", _String2=".") returned 1 [0190.094] wcscmp (_String1="BOAT.WMF", _String2="..") returned 1 [0190.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b4d8 [0190.094] wcscpy (in: _Dest=0x831b4d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.094] wcscat (in: _Dest=0x831b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.094] wcscat (in: _Dest=0x831b4d8, _Source="BOAT.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" [0190.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0190.095] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x76ccc2f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0190.095] wcscmp (_String1="BOATINST.WMF", _String2=".") returned 1 [0190.095] wcscmp (_String1="BOATINST.WMF", _String2="..") returned 1 [0190.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0190.095] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.095] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.095] wcscat (in: _Dest=0x3f2f528, _Source="BOATINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" [0190.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0190.096] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc98f800, ftCreationTime.dwHighDateTime=0x1bd4b8f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc98f800, ftLastWriteTime.dwHighDateTime=0x1bd4b8f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0190.096] wcscmp (_String1="BS00076_.WMF", _String2=".") returned 1 [0190.096] wcscmp (_String1="BS00076_.WMF", _String2="..") returned 1 [0190.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f748 [0190.096] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.096] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.096] wcscat (in: _Dest=0x3f2f748, _Source="BS00076_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" [0190.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0190.097] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e2ad00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4e2ad00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0190.097] wcscmp (_String1="BS00078_.WMF", _String2=".") returned 1 [0190.097] wcscmp (_String1="BS00078_.WMF", _String2="..") returned 1 [0190.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f5b0 [0190.098] wcscpy (in: _Dest=0x3f2f5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.098] wcscat (in: _Dest=0x3f2f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.098] wcscat (in: _Dest=0x3f2f5b0, _Source="BS00078_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" [0190.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0190.098] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8caa300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8caa300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0190.098] wcscmp (_String1="BS00092_.WMF", _String2=".") returned 1 [0190.099] wcscmp (_String1="BS00092_.WMF", _String2="..") returned 1 [0190.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30628 [0190.099] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.099] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.099] wcscat (in: _Dest=0x3f30628, _Source="BS00092_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" [0190.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0190.100] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5371c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf5371c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0190.100] wcscmp (_String1="BS00100_.WMF", _String2=".") returned 1 [0190.100] wcscmp (_String1="BS00100_.WMF", _String2="..") returned 1 [0190.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f9f0 [0190.100] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.100] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.100] wcscat (in: _Dest=0x3f2f9f0, _Source="BS00100_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" [0190.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0190.101] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a39500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1a39500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0190.101] wcscmp (_String1="BS00135_.WMF", _String2=".") returned 1 [0190.101] wcscmp (_String1="BS00135_.WMF", _String2="..") returned 1 [0190.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30380 [0190.101] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.101] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.101] wcscat (in: _Dest=0x3f30380, _Source="BS00135_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" [0190.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0190.102] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5e3200, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a5e3200, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0190.102] wcscmp (_String1="BS00136_.WMF", _String2=".") returned 1 [0190.102] wcscmp (_String1="BS00136_.WMF", _String2="..") returned 1 [0190.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f638 [0190.102] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.102] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.102] wcscat (in: _Dest=0x3f2f638, _Source="BS00136_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" [0190.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0190.103] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecf0a00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ecf0a00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0190.103] wcscmp (_String1="BS00145_.WMF", _String2=".") returned 1 [0190.103] wcscmp (_String1="BS00145_.WMF", _String2="..") returned 1 [0190.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30738 [0190.104] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.104] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.104] wcscat (in: _Dest=0x3f30738, _Source="BS00145_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" [0190.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0190.105] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d95100, ftCreationTime.dwHighDateTime=0x1bd4b55, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11d95100, ftLastWriteTime.dwHighDateTime=0x1bd4b55, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0190.105] wcscmp (_String1="BS00174_.WMF", _String2=".") returned 1 [0190.105] wcscmp (_String1="BS00174_.WMF", _String2="..") returned 1 [0190.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f305a0 [0190.105] wcscpy (in: _Dest=0x3f305a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.105] wcscat (in: _Dest=0x3f305a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.105] wcscat (in: _Dest=0x3f305a0, _Source="BS00174_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" [0190.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f305a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0190.106] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a86600, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14a86600, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0190.106] wcscmp (_String1="BS00184_.WMF", _String2=".") returned 1 [0190.106] wcscmp (_String1="BS00184_.WMF", _String2="..") returned 1 [0190.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30f30 [0190.106] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.106] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.106] wcscat (in: _Dest=0x3f30f30, _Source="BS00184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" [0190.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0190.107] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1959600, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1959600, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0190.107] wcscmp (_String1="BS00186_.WMF", _String2=".") returned 1 [0190.107] wcscmp (_String1="BS00186_.WMF", _String2="..") returned 1 [0190.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30848 [0190.107] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.107] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.107] wcscat (in: _Dest=0x3f30848, _Source="BS00186_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" [0190.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0190.109] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f24b600, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f24b600, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0190.109] wcscmp (_String1="BS00200_.WMF", _String2=".") returned 1 [0190.109] wcscmp (_String1="BS00200_.WMF", _String2="..") returned 1 [0190.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30fb8 [0190.109] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.109] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.109] wcscat (in: _Dest=0x3f30fb8, _Source="BS00200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" [0190.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0190.110] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea2fbc00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xea2fbc00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0190.110] wcscmp (_String1="BS00224_.WMF", _String2=".") returned 1 [0190.110] wcscmp (_String1="BS00224_.WMF", _String2="..") returned 1 [0190.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30ea8 [0190.110] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.110] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.110] wcscat (in: _Dest=0x3f30ea8, _Source="BS00224_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" [0190.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0190.111] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7fa3700, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7fa3700, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0190.111] wcscmp (_String1="BS00438_.WMF", _String2=".") returned 1 [0190.111] wcscmp (_String1="BS00438_.WMF", _String2="..") returned 1 [0190.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31370 [0190.112] wcscpy (in: _Dest=0x3f31370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.112] wcscat (in: _Dest=0x3f31370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.112] wcscat (in: _Dest=0x3f31370, _Source="BS00438_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" [0190.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0190.113] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca03e00, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbca03e00, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0190.113] wcscmp (_String1="BS00439_.WMF", _String2=".") returned 1 [0190.113] wcscmp (_String1="BS00439_.WMF", _String2="..") returned 1 [0190.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c00 [0190.113] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.113] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.113] wcscat (in: _Dest=0x3f30c00, _Source="BS00439_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" [0190.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0190.114] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6f1100, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb6f1100, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0190.114] wcscmp (_String1="BS00440_.WMF", _String2=".") returned 1 [0190.114] wcscmp (_String1="BS00440_.WMF", _String2="..") returned 1 [0190.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f312e8 [0190.114] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.114] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.114] wcscat (in: _Dest=0x3f312e8, _Source="BS00440_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" [0190.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0190.115] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3de400, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba3de400, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0190.115] wcscmp (_String1="BS00441_.WMF", _String2=".") returned 1 [0190.115] wcscmp (_String1="BS00441_.WMF", _String2="..") returned 1 [0190.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f307c0 [0190.115] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.115] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.115] wcscat (in: _Dest=0x3f307c0, _Source="BS00441_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" [0190.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0190.116] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90cb700, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb90cb700, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0190.116] wcscmp (_String1="BS00442_.WMF", _String2=".") returned 1 [0190.116] wcscmp (_String1="BS00442_.WMF", _String2="..") returned 1 [0190.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30b78 [0190.116] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.116] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.116] wcscat (in: _Dest=0x3f30b78, _Source="BS00442_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" [0190.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0190.146] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4da00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50b4da00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0190.146] wcscmp (_String1="BS00443_.WMF", _String2=".") returned 1 [0190.146] wcscmp (_String1="BS00443_.WMF", _String2="..") returned 1 [0190.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f302f8 [0190.146] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.146] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.146] wcscat (in: _Dest=0x3f302f8, _Source="BS00443_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" [0190.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0190.147] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7db8a00, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7db8a00, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0190.147] wcscmp (_String1="BS00444_.WMF", _String2=".") returned 1 [0190.147] wcscmp (_String1="BS00444_.WMF", _String2="..") returned 1 [0190.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f300d8 [0190.148] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.148] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.148] wcscat (in: _Dest=0x3f300d8, _Source="BS00444_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" [0190.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0190.149] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6aa5d00, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6aa5d00, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0190.149] wcscmp (_String1="BS00445_.WMF", _String2=".") returned 1 [0190.149] wcscmp (_String1="BS00445_.WMF", _String2="..") returned 1 [0190.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fe30 [0190.149] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.149] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.149] wcscat (in: _Dest=0x3f2fe30, _Source="BS00445_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" [0190.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0190.150] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0190.150] wcscmp (_String1="BS00453_.WMF", _String2=".") returned 1 [0190.150] wcscmp (_String1="BS00453_.WMF", _String2="..") returned 1 [0190.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30490 [0190.150] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.150] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.150] wcscat (in: _Dest=0x3f30490, _Source="BS00453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" [0190.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b34 [0190.151] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0dd4700, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0dd4700, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0190.151] wcscmp (_String1="BS01080_.WMF", _String2=".") returned 1 [0190.151] wcscmp (_String1="BS01080_.WMF", _String2="..") returned 1 [0190.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30e20 [0190.151] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.151] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.151] wcscat (in: _Dest=0x3f30e20, _Source="BS01080_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" [0190.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0190.152] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24d4600, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe24d4600, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0190.152] wcscmp (_String1="BS01603_.WMF", _String2=".") returned 1 [0190.152] wcscmp (_String1="BS01603_.WMF", _String2="..") returned 1 [0190.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30408 [0190.152] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.152] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.152] wcscat (in: _Dest=0x3f30408, _Source="BS01603_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" [0190.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0190.153] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5851ad00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5851ad00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0190.154] wcscmp (_String1="BS01634_.WMF", _String2=".") returned 1 [0190.154] wcscmp (_String1="BS01634_.WMF", _String2="..") returned 1 [0190.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f7d0 [0190.154] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.154] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.154] wcscat (in: _Dest=0x3f2f7d0, _Source="BS01634_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" [0190.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0190.155] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f39d00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8f39d00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0190.155] wcscmp (_String1="BS01635_.WMF", _String2=".") returned 1 [0190.155] wcscmp (_String1="BS01635_.WMF", _String2="..") returned 1 [0190.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f308d0 [0190.155] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.155] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.155] wcscat (in: _Dest=0x3f308d0, _Source="BS01635_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" [0190.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0190.156] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7975c600, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7975c600, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0191.152] wcscmp (_String1="BS01636_.WMF", _String2=".") returned 1 [0191.152] wcscmp (_String1="BS01636_.WMF", _String2="..") returned 1 [0191.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f311d8 [0191.152] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.152] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.152] wcscat (in: _Dest=0x3f311d8, _Source="BS01636_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" [0192.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0192.267] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26404b00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26404b00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0192.267] wcscmp (_String1="BS01637_.WMF", _String2=".") returned 1 [0192.267] wcscmp (_String1="BS01637_.WMF", _String2="..") returned 1 [0192.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f306b0 [0192.267] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.267] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.267] wcscat (in: _Dest=0x3f306b0, _Source="BS01637_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" [0192.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15bc [0192.268] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x669fc900, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x669fc900, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0192.268] wcscmp (_String1="BS01638_.WMF", _String2=".") returned 1 [0192.268] wcscmp (_String1="BS01638_.WMF", _String2="..") returned 1 [0192.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0192.268] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.268] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.268] wcscat (in: _Dest=0x3f310c8, _Source="BS01638_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" [0192.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0192.269] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df80800, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1df80800, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0192.269] wcscmp (_String1="BS01639_.WMF", _String2=".") returned 1 [0192.269] wcscmp (_String1="BS01639_.WMF", _String2="..") returned 1 [0192.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfcc8 [0192.269] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.269] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.270] wcscat (in: _Dest=0x81bfcc8, _Source="BS01639_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" [0192.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0192.270] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0192.271] wcscmp (_String1="CARBN_01.MID", _String2=".") returned 1 [0192.271] wcscmp (_String1="CARBN_01.MID", _String2="..") returned 1 [0192.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bede8 [0192.271] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.271] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.271] wcscat (in: _Dest=0x81bede8, _Source="CARBN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" [0192.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0192.272] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6403ce00, ftCreationTime.dwHighDateTime=0x1c9b882, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6403ce00, ftLastWriteTime.dwHighDateTime=0x1c9b882, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0192.272] wcscmp (_String1="CG1606.WMF", _String2=".") returned 1 [0192.272] wcscmp (_String1="CG1606.WMF", _String2="..") returned 1 [0192.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81beab8 [0192.272] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.272] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.272] wcscat (in: _Dest=0x81beab8, _Source="CG1606.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" [0192.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0192.273] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0192.273] wcscmp (_String1="CLASSIC1.WMF", _String2=".") returned 1 [0192.273] wcscmp (_String1="CLASSIC1.WMF", _String2="..") returned 1 [0192.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf090 [0192.273] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.273] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.273] wcscat (in: _Dest=0x81bf090, _Source="CLASSIC1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" [0192.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0192.274] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0192.274] wcscmp (_String1="CLASSIC2.WMF", _String2=".") returned 1 [0192.274] wcscmp (_String1="CLASSIC2.WMF", _String2="..") returned 1 [0192.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf558 [0192.274] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.274] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.274] wcscat (in: _Dest=0x81bf558, _Source="CLASSIC2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" [0192.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0192.275] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0192.275] wcscmp (_String1="CLIP.WMF", _String2=".") returned 1 [0192.275] wcscmp (_String1="CLIP.WMF", _String2="..") returned 1 [0192.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a6d8 [0192.275] wcscpy (in: _Dest=0x831a6d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.275] wcscat (in: _Dest=0x831a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.275] wcscat (in: _Dest=0x831a6d8, _Source="CLIP.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" [0192.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0192.276] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0192.276] wcscmp (_String1="CMNTY_01.MID", _String2=".") returned 1 [0192.276] wcscmp (_String1="CMNTY_01.MID", _String2="..") returned 1 [0192.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfc40 [0192.276] wcscpy (in: _Dest=0x81bfc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.276] wcscat (in: _Dest=0x81bfc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.276] wcscat (in: _Dest=0x81bfc40, _Source="CMNTY_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" [0192.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0192.277] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x77084550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0192.277] wcscmp (_String1="CRANE.WMF", _String2=".") returned 1 [0192.277] wcscmp (_String1="CRANE.WMF", _String2="..") returned 1 [0192.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bea30 [0192.278] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.278] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.278] wcscat (in: _Dest=0x81bea30, _Source="CRANE.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" [0192.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0192.279] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x86cfc2b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0192.279] wcscmp (_String1="CRANINST.WMF", _String2=".") returned 1 [0192.279] wcscmp (_String1="CRANINST.WMF", _String2="..") returned 1 [0192.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be4e0 [0192.279] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.279] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.279] wcscat (in: _Dest=0x81be4e0, _Source="CRANINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" [0192.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0192.280] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0192.280] wcscmp (_String1="CUP.WMF", _String2=".") returned 1 [0192.280] wcscmp (_String1="CUP.WMF", _String2="..") returned 1 [0192.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831b558 [0192.280] wcscpy (in: _Dest=0x831b558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.280] wcscat (in: _Dest=0x831b558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.280] wcscat (in: _Dest=0x831b558, _Source="CUP.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" [0192.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0192.281] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0192.281] wcscmp (_String1="CUPINST.WMF", _String2=".") returned 1 [0192.281] wcscmp (_String1="CUPINST.WMF", _String2="..") returned 1 [0192.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bec50 [0192.281] wcscpy (in: _Dest=0x81bec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.281] wcscat (in: _Dest=0x81bec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.281] wcscat (in: _Dest=0x81bec50, _Source="CUPINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" [0192.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0192.282] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0192.282] wcscmp (_String1="DD00117_.WMF", _String2=".") returned 1 [0192.282] wcscmp (_String1="DD00117_.WMF", _String2="..") returned 1 [0192.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0108 [0192.282] wcscpy (in: _Dest=0x81c0108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.282] wcscat (in: _Dest=0x81c0108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.282] wcscat (in: _Dest=0x81c0108, _Source="DD00117_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" [0192.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0192.283] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bd91700, ftCreationTime.dwHighDateTime=0x1bd4b53, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6bd91700, ftLastWriteTime.dwHighDateTime=0x1bd4b53, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0192.283] wcscmp (_String1="DD00121_.WMF", _String2=".") returned 1 [0192.283] wcscmp (_String1="DD00121_.WMF", _String2="..") returned 1 [0192.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be678 [0192.283] wcscpy (in: _Dest=0x81be678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.283] wcscat (in: _Dest=0x81be678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.283] wcscat (in: _Dest=0x81be678, _Source="DD00121_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" [0192.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0192.284] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0192.284] wcscmp (_String1="DD00234_.WMF", _String2=".") returned 1 [0192.285] wcscmp (_String1="DD00234_.WMF", _String2="..") returned 1 [0192.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be568 [0192.285] wcscpy (in: _Dest=0x81be568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.285] wcscat (in: _Dest=0x81be568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.285] wcscat (in: _Dest=0x81be568, _Source="DD00234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" [0192.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0192.286] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa499e000, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa499e000, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0192.286] wcscmp (_String1="DD00255_.WMF", _String2=".") returned 1 [0192.286] wcscmp (_String1="DD00255_.WMF", _String2="..") returned 1 [0192.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0192.286] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.286] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.286] wcscat (in: _Dest=0x81c0190, _Source="DD00255_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" [0192.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0192.287] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0192.287] wcscmp (_String1="DD00256_.WMF", _String2=".") returned 1 [0192.287] wcscmp (_String1="DD00256_.WMF", _String2="..") returned 1 [0192.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c02a0 [0192.287] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.287] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.287] wcscat (in: _Dest=0x81c02a0, _Source="DD00256_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" [0192.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0192.288] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5389ec00, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5389ec00, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0192.288] wcscmp (_String1="DD00261_.WMF", _String2=".") returned 1 [0192.288] wcscmp (_String1="DD00261_.WMF", _String2="..") returned 1 [0192.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf5e0 [0192.288] wcscpy (in: _Dest=0x81bf5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.289] wcscat (in: _Dest=0x81bf5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.289] wcscat (in: _Dest=0x81bf5e0, _Source="DD00261_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" [0192.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0192.289] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8c0f00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d8c0f00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0192.289] wcscmp (_String1="DD00297_.WMF", _String2=".") returned 1 [0192.289] wcscmp (_String1="DD00297_.WMF", _String2="..") returned 1 [0192.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be5f0 [0192.290] wcscpy (in: _Dest=0x81be5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.290] wcscat (in: _Dest=0x81be5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.290] wcscat (in: _Dest=0x81be5f0, _Source="DD00297_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" [0192.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0192.291] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c12300, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf2c12300, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0192.291] wcscmp (_String1="DD00372_.WMF", _String2=".") returned 1 [0192.291] wcscmp (_String1="DD00372_.WMF", _String2="..") returned 1 [0192.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf998 [0192.291] wcscpy (in: _Dest=0x81bf998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.291] wcscat (in: _Dest=0x81bf998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.291] wcscat (in: _Dest=0x81bf998, _Source="DD00372_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" [0192.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0192.292] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0192.292] wcscmp (_String1="DD00405_.WMF", _String2=".") returned 1 [0192.292] wcscmp (_String1="DD00405_.WMF", _String2="..") returned 1 [0192.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be920 [0192.292] wcscpy (in: _Dest=0x81be920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.292] wcscat (in: _Dest=0x81be920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.292] wcscat (in: _Dest=0x81be920, _Source="DD00405_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" [0192.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0192.293] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0192.293] wcscmp (_String1="DD00407_.WMF", _String2=".") returned 1 [0192.293] wcscmp (_String1="DD00407_.WMF", _String2="..") returned 1 [0192.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be9a8 [0192.293] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.293] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.293] wcscat (in: _Dest=0x81be9a8, _Source="DD00407_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" [0192.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0192.294] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0192.294] wcscmp (_String1="DD00413_.WMF", _String2=".") returned 1 [0192.294] wcscmp (_String1="DD00413_.WMF", _String2="..") returned 1 [0192.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0218 [0192.294] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.294] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.294] wcscat (in: _Dest=0x81c0218, _Source="DD00413_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" [0192.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0192.295] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e52f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0192.295] wcscmp (_String1="DD00414_.WMF", _String2=".") returned 1 [0192.295] wcscmp (_String1="DD00414_.WMF", _String2="..") returned 1 [0192.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0192.295] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.295] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.295] wcscat (in: _Dest=0x81bf1a0, _Source="DD00414_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" [0192.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0192.296] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f83ad00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x86e52f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f83ad00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0192.296] wcscmp (_String1="DD00419_.WMF", _String2=".") returned 1 [0192.296] wcscmp (_String1="DD00419_.WMF", _String2="..") returned 1 [0192.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bff70 [0192.296] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.296] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.296] wcscat (in: _Dest=0x81bff70, _Source="DD00419_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" [0192.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0192.297] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e528000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x86e52f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e528000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0192.297] wcscmp (_String1="DD00437_.WMF", _String2=".") returned 1 [0192.297] wcscmp (_String1="DD00437_.WMF", _String2="..") returned 1 [0192.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be898 [0192.297] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.297] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.297] wcscat (in: _Dest=0x81be898, _Source="DD00437_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" [0192.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0192.298] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0192.298] wcscmp (_String1="DD00448_.WMF", _String2=".") returned 1 [0192.298] wcscmp (_String1="DD00448_.WMF", _String2="..") returned 1 [0192.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bed60 [0192.298] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.298] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.298] wcscat (in: _Dest=0x81bed60, _Source="DD00448_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" [0192.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0192.299] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0192.299] wcscmp (_String1="DD00449_.WMF", _String2=".") returned 1 [0192.299] wcscmp (_String1="DD00449_.WMF", _String2="..") returned 1 [0192.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beb40 [0192.300] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.300] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.300] wcscat (in: _Dest=0x81beb40, _Source="DD00449_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" [0192.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0192.300] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4139de00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4139de00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0192.300] wcscmp (_String1="DD00687_.WMF", _String2=".") returned 1 [0192.301] wcscmp (_String1="DD00687_.WMF", _String2="..") returned 1 [0192.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beef8 [0192.301] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.301] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.301] wcscat (in: _Dest=0x81beef8, _Source="DD00687_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" [0192.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0192.302] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfffe00, ftCreationTime.dwHighDateTime=0x1bd4b9c, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfffe00, ftLastWriteTime.dwHighDateTime=0x1bd4b9c, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0192.302] wcscmp (_String1="DD00705_.WMF", _String2=".") returned 1 [0192.302] wcscmp (_String1="DD00705_.WMF", _String2="..") returned 1 [0192.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0192.302] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.302] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.302] wcscat (in: _Dest=0x81bebc8, _Source="DD00705_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" [0192.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0192.303] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c7b600, ftCreationTime.dwHighDateTime=0x1bd4ba7, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x70c7b600, ftLastWriteTime.dwHighDateTime=0x1bd4ba7, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0192.303] wcscmp (_String1="DD01015_.WMF", _String2=".") returned 1 [0192.303] wcscmp (_String1="DD01015_.WMF", _String2="..") returned 1 [0192.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0328 [0192.303] wcscpy (in: _Dest=0x81c0328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.303] wcscat (in: _Dest=0x81c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.303] wcscat (in: _Dest=0x81c0328, _Source="DD01015_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" [0192.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0192.304] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0192.304] wcscmp (_String1="DD01039_.WMF", _String2=".") returned 1 [0192.304] wcscmp (_String1="DD01039_.WMF", _String2="..") returned 1 [0192.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfff8 [0192.304] wcscpy (in: _Dest=0x81bfff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0192.304] wcscat (in: _Dest=0x81bfff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0192.304] wcscat (in: _Dest=0x81bfff8, _Source="DD01039_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" [0192.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0192.657] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0194.119] wcscmp (_String1="DD01138_.WMF", _String2=".") returned 1 [0194.119] wcscmp (_String1="DD01138_.WMF", _String2="..") returned 1 [0194.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf228 [0194.119] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.119] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.119] wcscat (in: _Dest=0x81bf228, _Source="DD01138_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" [0195.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0195.374] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0195.374] wcscmp (_String1="DD01139_.WMF", _String2=".") returned 1 [0195.374] wcscmp (_String1="DD01139_.WMF", _String2="..") returned 1 [0195.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bede8 [0195.374] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.374] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.374] wcscat (in: _Dest=0x81bede8, _Source="DD01139_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" [0195.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0195.376] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0195.376] wcscmp (_String1="DD01140_.WMF", _String2=".") returned 1 [0195.376] wcscmp (_String1="DD01140_.WMF", _String2="..") returned 1 [0195.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0195.376] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.376] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.376] wcscat (in: _Dest=0x81be458, _Source="DD01140_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" [0195.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0195.377] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0195.377] wcscmp (_String1="DD01143_.WMF", _String2=".") returned 1 [0195.377] wcscmp (_String1="DD01143_.WMF", _String2="..") returned 1 [0195.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf888 [0195.377] wcscpy (in: _Dest=0x81bf888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.377] wcscat (in: _Dest=0x81bf888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.378] wcscat (in: _Dest=0x81bf888, _Source="DD01143_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" [0195.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0195.378] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0195.379] wcscmp (_String1="DD01145_.WMF", _String2=".") returned 1 [0195.379] wcscmp (_String1="DD01145_.WMF", _String2="..") returned 1 [0195.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf2b0 [0195.379] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.379] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.379] wcscat (in: _Dest=0x81bf2b0, _Source="DD01145_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" [0195.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0195.380] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0195.380] wcscmp (_String1="DD01146_.WMF", _String2=".") returned 1 [0195.380] wcscmp (_String1="DD01146_.WMF", _String2="..") returned 1 [0195.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be810 [0195.380] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.380] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.380] wcscat (in: _Dest=0x81be810, _Source="DD01146_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" [0195.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0195.381] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0195.381] wcscmp (_String1="DD01151_.WMF", _String2=".") returned 1 [0195.381] wcscmp (_String1="DD01151_.WMF", _String2="..") returned 1 [0195.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81becd8 [0195.382] wcscpy (in: _Dest=0x81becd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.382] wcscat (in: _Dest=0x81becd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.382] wcscat (in: _Dest=0x81becd8, _Source="DD01151_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" [0195.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81becd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0195.383] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0195.383] wcscmp (_String1="DD01152_.WMF", _String2=".") returned 1 [0195.383] wcscmp (_String1="DD01152_.WMF", _String2="..") returned 1 [0195.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30518 [0195.383] wcscpy (in: _Dest=0x3f30518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.383] wcscat (in: _Dest=0x3f30518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.383] wcscat (in: _Dest=0x3f30518, _Source="DD01152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" [0195.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0195.384] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0195.385] wcscmp (_String1="DD01157_.WMF", _String2=".") returned 1 [0195.385] wcscmp (_String1="DD01157_.WMF", _String2="..") returned 1 [0195.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30e20 [0195.385] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.385] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.385] wcscat (in: _Dest=0x3f30e20, _Source="DD01157_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" [0195.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0195.386] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0195.386] wcscmp (_String1="DD01160_.WMF", _String2=".") returned 1 [0195.386] wcscmp (_String1="DD01160_.WMF", _String2="..") returned 1 [0195.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f311d8 [0195.386] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.386] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.386] wcscat (in: _Dest=0x3f311d8, _Source="DD01160_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" [0195.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0195.387] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0195.387] wcscmp (_String1="DD01162_.WMF", _String2=".") returned 1 [0195.387] wcscmp (_String1="DD01162_.WMF", _String2="..") returned 1 [0195.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f306b0 [0195.387] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.388] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.388] wcscat (in: _Dest=0x3f306b0, _Source="DD01162_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" [0195.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0195.389] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0195.389] wcscmp (_String1="DD01163_.WMF", _String2=".") returned 1 [0195.389] wcscmp (_String1="DD01163_.WMF", _String2="..") returned 1 [0195.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0195.389] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.389] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.389] wcscat (in: _Dest=0x3f310c8, _Source="DD01163_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" [0195.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0195.390] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0195.390] wcscmp (_String1="DD01166_.WMF", _String2=".") returned 1 [0195.390] wcscmp (_String1="DD01166_.WMF", _String2="..") returned 1 [0195.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f968 [0195.390] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.390] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.390] wcscat (in: _Dest=0x3f2f968, _Source="DD01166_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" [0195.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0195.392] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0195.392] wcscmp (_String1="DD01167_.WMF", _String2=".") returned 1 [0195.392] wcscmp (_String1="DD01167_.WMF", _String2="..") returned 1 [0195.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30a68 [0195.392] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.392] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.392] wcscat (in: _Dest=0x3f30a68, _Source="DD01167_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" [0195.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0195.393] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0195.393] wcscmp (_String1="DD01168_.WMF", _String2=".") returned 1 [0195.393] wcscmp (_String1="DD01168_.WMF", _String2="..") returned 1 [0195.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f8e0 [0195.393] wcscpy (in: _Dest=0x3f2f8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.393] wcscat (in: _Dest=0x3f2f8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.393] wcscat (in: _Dest=0x3f2f8e0, _Source="DD01168_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" [0195.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4 [0195.395] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0195.395] wcscmp (_String1="DD01169_.WMF", _String2=".") returned 1 [0195.395] wcscmp (_String1="DD01169_.WMF", _String2="..") returned 1 [0195.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fda8 [0195.395] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.395] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.395] wcscat (in: _Dest=0x3f2fda8, _Source="DD01169_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" [0195.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0195.396] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0195.396] wcscmp (_String1="DD01170_.WMF", _String2=".") returned 1 [0195.396] wcscmp (_String1="DD01170_.WMF", _String2="..") returned 1 [0195.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f300d8 [0195.396] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.396] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.396] wcscat (in: _Dest=0x3f300d8, _Source="DD01170_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" [0195.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0195.398] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0195.398] wcscmp (_String1="DD01171_.WMF", _String2=".") returned 1 [0195.398] wcscmp (_String1="DD01171_.WMF", _String2="..") returned 1 [0195.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f307c0 [0195.398] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.398] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.398] wcscat (in: _Dest=0x3f307c0, _Source="DD01171_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" [0195.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0195.399] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0195.399] wcscmp (_String1="DD01172_.WMF", _String2=".") returned 1 [0195.399] wcscmp (_String1="DD01172_.WMF", _String2="..") returned 1 [0195.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f312e8 [0195.399] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.399] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.399] wcscat (in: _Dest=0x3f312e8, _Source="DD01172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" [0195.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0195.401] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0195.401] wcscmp (_String1="DD01173_.WMF", _String2=".") returned 1 [0195.401] wcscmp (_String1="DD01173_.WMF", _String2="..") returned 1 [0195.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30ea8 [0195.401] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.401] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.401] wcscat (in: _Dest=0x3f30ea8, _Source="DD01173_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" [0195.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0195.402] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0195.402] wcscmp (_String1="DD01176_.WMF", _String2=".") returned 1 [0195.402] wcscmp (_String1="DD01176_.WMF", _String2="..") returned 1 [0195.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30848 [0195.402] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.402] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.402] wcscat (in: _Dest=0x3f30848, _Source="DD01176_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" [0195.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0195.404] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0195.404] wcscmp (_String1="DD01178_.WMF", _String2=".") returned 1 [0195.404] wcscmp (_String1="DD01178_.WMF", _String2="..") returned 1 [0195.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f305a0 [0195.404] wcscpy (in: _Dest=0x3f305a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.404] wcscat (in: _Dest=0x3f305a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.404] wcscat (in: _Dest=0x3f305a0, _Source="DD01178_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" [0195.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f305a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0195.406] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0195.406] wcscmp (_String1="DD01179_.WMF", _String2=".") returned 1 [0195.406] wcscmp (_String1="DD01179_.WMF", _String2="..") returned 1 [0195.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0195.406] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.406] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.406] wcscat (in: _Dest=0x3f2f528, _Source="DD01179_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" [0195.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0195.788] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0195.788] wcscmp (_String1="DD01180_.WMF", _String2=".") returned 1 [0195.788] wcscmp (_String1="DD01180_.WMF", _String2="..") returned 1 [0195.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bed60 [0195.788] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.788] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.788] wcscat (in: _Dest=0x81bed60, _Source="DD01180_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" [0198.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0198.431] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0198.431] wcscmp (_String1="DD01181_.WMF", _String2=".") returned 1 [0198.432] wcscmp (_String1="DD01181_.WMF", _String2="..") returned 1 [0198.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fd20 [0198.432] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.432] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.432] wcscat (in: _Dest=0x3f2fd20, _Source="DD01181_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" [0198.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0198.434] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0198.434] wcscmp (_String1="DD01182_.WMF", _String2=".") returned 1 [0198.434] wcscmp (_String1="DD01182_.WMF", _String2="..") returned 1 [0198.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f301e8 [0198.434] wcscpy (in: _Dest=0x3f301e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.434] wcscat (in: _Dest=0x3f301e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.434] wcscat (in: _Dest=0x3f301e8, _Source="DD01182_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" [0198.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f301e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0198.436] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0198.436] wcscmp (_String1="DD01183_.WMF", _String2=".") returned 1 [0198.436] wcscmp (_String1="DD01183_.WMF", _String2="..") returned 1 [0198.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2feb8 [0198.436] wcscpy (in: _Dest=0x3f2feb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.436] wcscat (in: _Dest=0x3f2feb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.436] wcscat (in: _Dest=0x3f2feb8, _Source="DD01183_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" [0198.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2feb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0198.438] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6bab00, ftCreationTime.dwHighDateTime=0x1bd4c73, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e6bab00, ftLastWriteTime.dwHighDateTime=0x1bd4c73, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0198.438] wcscmp (_String1="DD01186_.WMF", _String2=".") returned 1 [0198.438] wcscmp (_String1="DD01186_.WMF", _String2="..") returned 1 [0198.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30160 [0198.438] wcscpy (in: _Dest=0x3f30160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.438] wcscat (in: _Dest=0x3f30160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.438] wcscat (in: _Dest=0x3f30160, _Source="DD01186_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" [0198.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2664 [0198.440] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a337900, ftCreationTime.dwHighDateTime=0x1c7a7cb, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a337900, ftLastWriteTime.dwHighDateTime=0x1c7a7cb, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0198.440] wcscmp (_String1="DD01366_.WMF", _String2=".") returned 1 [0198.440] wcscmp (_String1="DD01366_.WMF", _String2="..") returned 1 [0198.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f748 [0198.440] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.440] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.440] wcscat (in: _Dest=0x3f2f748, _Source="DD01366_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" [0198.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0198.442] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x168e2a00, ftCreationTime.dwHighDateTime=0x1bd4c67, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x168e2a00, ftLastWriteTime.dwHighDateTime=0x1bd4c67, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0198.442] wcscmp (_String1="DD01434_.WMF", _String2=".") returned 1 [0198.442] wcscmp (_String1="DD01434_.WMF", _String2="..") returned 1 [0198.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f5b0 [0198.442] wcscpy (in: _Dest=0x3f2f5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.442] wcscat (in: _Dest=0x3f2f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.442] wcscat (in: _Dest=0x3f2f5b0, _Source="DD01434_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" [0198.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0198.443] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeab77800, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeab77800, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0198.444] wcscmp (_String1="DD01585_.WMF", _String2=".") returned 1 [0198.444] wcscmp (_String1="DD01585_.WMF", _String2="..") returned 1 [0198.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30628 [0198.444] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.444] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.444] wcscat (in: _Dest=0x3f30628, _Source="DD01585_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" [0198.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0198.445] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe12e1000, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe12e1000, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0198.445] wcscmp (_String1="DD01586_.WMF", _String2=".") returned 1 [0198.446] wcscmp (_String1="DD01586_.WMF", _String2="..") returned 1 [0198.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f9f0 [0198.446] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.446] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.446] wcscat (in: _Dest=0x3f2f9f0, _Source="DD01586_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" [0198.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0198.447] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c3e200, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87c3e200, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0198.447] wcscmp (_String1="DD01628_.WMF", _String2=".") returned 1 [0198.448] wcscmp (_String1="DD01628_.WMF", _String2="..") returned 1 [0198.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f7d0 [0198.448] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.448] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.448] wcscat (in: _Dest=0x3f2f7d0, _Source="DD01628_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" [0198.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0198.449] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f58f400, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f58f400, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0198.449] wcscmp (_String1="DD01629_.WMF", _String2=".") returned 1 [0198.449] wcscmp (_String1="DD01629_.WMF", _String2="..") returned 1 [0198.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f308d0 [0198.449] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.449] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.450] wcscat (in: _Dest=0x3f308d0, _Source="DD01629_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" [0198.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0198.451] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c9f100, ftCreationTime.dwHighDateTime=0x1bd4c55, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84c9f100, ftLastWriteTime.dwHighDateTime=0x1bd4c55, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0198.453] wcscmp (_String1="DD01630_.WMF", _String2=".") returned 1 [0198.453] wcscmp (_String1="DD01630_.WMF", _String2="..") returned 1 [0198.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f302f8 [0198.453] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.453] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.453] wcscat (in: _Dest=0x3f302f8, _Source="DD01630_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" [0201.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c [0201.464] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b95ae00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b95ae00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0201.464] wcscmp (_String1="DD01631_.WMF", _String2=".") returned 1 [0201.464] wcscmp (_String1="DD01631_.WMF", _String2="..") returned 1 [0201.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30270 [0201.465] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.465] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.465] wcscat (in: _Dest=0x3f30270, _Source="DD01631_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" [0201.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae0 [0201.466] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0201.466] wcscmp (_String1="DD01761_.WMF", _String2=".") returned 1 [0201.466] wcscmp (_String1="DD01761_.WMF", _String2="..") returned 1 [0201.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ffc8 [0201.466] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.466] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.466] wcscat (in: _Dest=0x3f2ffc8, _Source="DD01761_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" [0201.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0201.467] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0201.467] wcscmp (_String1="DD01772_.WMF", _String2=".") returned 1 [0201.467] wcscmp (_String1="DD01772_.WMF", _String2="..") returned 1 [0201.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30958 [0201.467] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.467] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.467] wcscat (in: _Dest=0x3f30958, _Source="DD01772_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" [0201.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0201.468] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0201.468] wcscmp (_String1="DD01793_.WMF", _String2=".") returned 1 [0201.468] wcscmp (_String1="DD01793_.WMF", _String2="..") returned 1 [0201.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30050 [0201.468] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.468] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.468] wcscat (in: _Dest=0x3f30050, _Source="DD01793_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" [0201.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0201.469] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x773a4230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0201.469] wcscmp (_String1="EAST_01.MID", _String2=".") returned 1 [0201.469] wcscmp (_String1="EAST_01.MID", _String2="..") returned 1 [0201.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f4a0 [0201.469] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.469] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.469] wcscat (in: _Dest=0x3f2f4a0, _Source="EAST_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" [0201.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0201.470] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ad5d00, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x773a4230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72ad5d00, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0201.470] wcscmp (_String1="ED00010_.WMF", _String2=".") returned 1 [0201.470] wcscmp (_String1="ED00010_.WMF", _String2="..") returned 1 [0201.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc10 [0201.470] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.470] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.470] wcscat (in: _Dest=0x3f2fc10, _Source="ED00010_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" [0201.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0201.471] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dcfc00, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x773f04f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47dcfc00, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0201.471] wcscmp (_String1="ED00019_.WMF", _String2=".") returned 1 [0201.471] wcscmp (_String1="ED00019_.WMF", _String2="..") returned 1 [0201.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f858 [0201.472] wcscpy (in: _Dest=0x3f2f858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.472] wcscat (in: _Dest=0x3f2f858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.472] wcscat (in: _Dest=0x3f2f858, _Source="ED00019_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" [0201.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0201.473] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599ace00, ftCreationTime.dwHighDateTime=0x1bd4c64, ftLastAccessTime.dwLowDateTime=0x87740190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599ace00, ftLastWriteTime.dwHighDateTime=0x1bd4c64, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0201.473] wcscmp (_String1="ED00172_.WMF", _String2=".") returned 1 [0201.473] wcscmp (_String1="ED00172_.WMF", _String2="..") returned 1 [0201.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c88 [0201.473] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.473] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.473] wcscat (in: _Dest=0x3f30c88, _Source="ED00172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" [0201.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0201.474] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b001000, ftCreationTime.dwHighDateTime=0x1bd4cc3, ftLastAccessTime.dwLowDateTime=0x773f04f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b001000, ftLastWriteTime.dwHighDateTime=0x1bd4cc3, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0201.474] wcscmp (_String1="ED00184_.WMF", _String2=".") returned 1 [0201.474] wcscmp (_String1="ED00184_.WMF", _String2="..") returned 1 [0201.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eb40 [0201.474] wcscpy (in: _Dest=0x3e1eb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.474] wcscat (in: _Dest=0x3e1eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.474] wcscat (in: _Dest=0x3e1eb40, _Source="ED00184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" [0201.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80 [0201.475] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0cf900, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x87896df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbd0cf900, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0201.475] wcscmp (_String1="EN00006_.WMF", _String2=".") returned 1 [0201.475] wcscmp (_String1="EN00006_.WMF", _String2="..") returned 1 [0201.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f118 [0201.475] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.475] wcscat (in: _Dest=0x3e1f118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.475] wcscat (in: _Dest=0x3e1f118, _Source="EN00006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" [0201.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c [0201.476] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecba0200, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xecba0200, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0201.476] wcscmp (_String1="EN00202_.WMF", _String2=".") returned 1 [0201.476] wcscmp (_String1="EN00202_.WMF", _String2="..") returned 1 [0201.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f998 [0201.476] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.476] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.476] wcscat (in: _Dest=0x3e1f998, _Source="EN00202_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" [0201.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d1c [0201.477] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdb6a00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cdb6a00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0201.477] wcscmp (_String1="EN00222_.WMF", _String2=".") returned 1 [0201.477] wcscmp (_String1="EN00222_.WMF", _String2="..") returned 1 [0201.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ecd8 [0201.477] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.477] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.478] wcscat (in: _Dest=0x3e1ecd8, _Source="EN00222_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" [0201.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0201.479] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57117900, ftCreationTime.dwHighDateTime=0x1bd4b7d, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57117900, ftLastWriteTime.dwHighDateTime=0x1bd4b7d, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0201.479] wcscmp (_String1="EN00242_.WMF", _String2=".") returned 1 [0201.479] wcscmp (_String1="EN00242_.WMF", _String2="..") returned 1 [0201.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f6f0 [0201.479] wcscpy (in: _Dest=0x3e1f6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.479] wcscat (in: _Dest=0x3e1f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.479] wcscat (in: _Dest=0x3e1f6f0, _Source="EN00242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" [0201.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0201.480] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d215300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d215300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0201.480] wcscmp (_String1="EN00319_.WMF", _String2=".") returned 1 [0201.480] wcscmp (_String1="EN00319_.WMF", _String2="..") returned 1 [0201.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e202a0 [0201.480] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.480] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.480] wcscat (in: _Dest=0x3e202a0, _Source="EN00319_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" [0201.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0201.481] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f11900, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9f11900, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0201.481] wcscmp (_String1="EN00320_.WMF", _String2=".") returned 1 [0201.481] wcscmp (_String1="EN00320_.WMF", _String2="..") returned 1 [0201.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ede8 [0201.481] wcscpy (in: _Dest=0x3e1ede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.481] wcscat (in: _Dest=0x3e1ede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.481] wcscat (in: _Dest=0x3e1ede8, _Source="EN00320_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" [0201.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0201.482] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa666a200, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa666a200, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0201.482] wcscmp (_String1="EN00397_.WMF", _String2=".") returned 1 [0201.482] wcscmp (_String1="EN00397_.WMF", _String2="..") returned 1 [0201.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f090 [0201.482] wcscpy (in: _Dest=0x3e1f090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.482] wcscat (in: _Dest=0x3e1f090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.482] wcscat (in: _Dest=0x3e1f090, _Source="EN00397_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" [0201.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c [0201.483] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c52f00, ftCreationTime.dwHighDateTime=0x1bd4c32, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe6c52f00, ftLastWriteTime.dwHighDateTime=0x1bd4c32, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0201.483] wcscmp (_String1="EN00902_.WMF", _String2=".") returned 1 [0201.483] wcscmp (_String1="EN00902_.WMF", _String2="..") returned 1 [0201.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f3c0 [0201.483] wcscpy (in: _Dest=0x3e1f3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.483] wcscat (in: _Dest=0x3e1f3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.483] wcscat (in: _Dest=0x3e1f3c0, _Source="EN00902_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" [0201.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a8 [0201.484] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0201.484] wcscmp (_String1="EXPLR_01.MID", _String2=".") returned 1 [0201.484] wcscmp (_String1="EXPLR_01.MID", _String2="..") returned 1 [0201.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ebc8 [0201.485] wcscpy (in: _Dest=0x3e1ebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.485] wcscat (in: _Dest=0x3e1ebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.485] wcscat (in: _Dest=0x3e1ebc8, _Source="EXPLR_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" [0201.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec [0201.486] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0201.486] wcscmp (_String1="FALL_01.MID", _String2=".") returned 1 [0201.486] wcscmp (_String1="FALL_01.MID", _String2="..") returned 1 [0201.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f008 [0201.486] wcscpy (in: _Dest=0x3e1f008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.486] wcscat (in: _Dest=0x3e1f008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.486] wcscat (in: _Dest=0x3e1f008, _Source="FALL_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" [0201.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b04 [0201.487] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43244200, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x43244200, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0201.487] wcscmp (_String1="FD00074_.WMF", _String2=".") returned 1 [0201.487] wcscmp (_String1="FD00074_.WMF", _String2="..") returned 1 [0201.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ff70 [0201.487] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.487] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.487] wcscat (in: _Dest=0x3e1ff70, _Source="FD00074_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" [0201.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0201.488] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f90bb00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f90bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0201.488] wcscmp (_String1="FD00076_.WMF", _String2=".") returned 1 [0201.488] wcscmp (_String1="FD00076_.WMF", _String2="..") returned 1 [0201.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eef8 [0201.488] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.488] wcscat (in: _Dest=0x3e1eef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.488] wcscat (in: _Dest=0x3e1eef8, _Source="FD00076_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" [0201.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0201.489] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf02600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bf02600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0201.489] wcscmp (_String1="FD00077_.WMF", _String2=".") returned 1 [0201.489] wcscmp (_String1="FD00077_.WMF", _String2="..") returned 1 [0201.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fff8 [0201.490] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.490] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.490] wcscat (in: _Dest=0x3e1fff8, _Source="FD00077_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" [0201.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0201.491] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abef900, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4abef900, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0201.491] wcscmp (_String1="FD00086_.WMF", _String2=".") returned 1 [0201.491] wcscmp (_String1="FD00086_.WMF", _String2="..") returned 1 [0201.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f800 [0201.491] wcscpy (in: _Dest=0x3e1f800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.491] wcscat (in: _Dest=0x3e1f800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.491] wcscat (in: _Dest=0x3e1f800, _Source="FD00086_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" [0201.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0201.492] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f60fc00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f60fc00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0201.492] wcscmp (_String1="FD00090_.WMF", _String2=".") returned 1 [0201.492] wcscmp (_String1="FD00090_.WMF", _String2="..") returned 1 [0201.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f1a0 [0201.492] wcscpy (in: _Dest=0x3e1f1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.492] wcscat (in: _Dest=0x3e1f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.492] wcscat (in: _Dest=0x3e1f1a0, _Source="FD00090_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" [0201.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0201.493] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498dcc00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x498dcc00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0201.493] wcscmp (_String1="FD00096_.WMF", _String2=".") returned 1 [0201.493] wcscmp (_String1="FD00096_.WMF", _String2="..") returned 1 [0201.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fc40 [0201.493] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.493] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.493] wcscat (in: _Dest=0x3e1fc40, _Source="FD00096_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" [0201.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0201.494] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472b7200, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x472b7200, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0201.494] wcscmp (_String1="FD00296_.WMF", _String2=".") returned 1 [0201.494] wcscmp (_String1="FD00296_.WMF", _String2="..") returned 1 [0201.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f4d0 [0201.495] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.495] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.495] wcscat (in: _Dest=0x3e1f4d0, _Source="FD00296_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" [0201.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0201.496] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e8ee00, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9e8ee00, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0201.496] wcscmp (_String1="FD00297_.WMF", _String2=".") returned 1 [0201.496] wcscmp (_String1="FD00297_.WMF", _String2="..") returned 1 [0201.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f2b0 [0201.496] wcscpy (in: _Dest=0x3e1f2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.496] wcscat (in: _Dest=0x3e1f2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.496] wcscat (in: _Dest=0x3e1f2b0, _Source="FD00297_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" [0201.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0201.497] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fa4500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fa4500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0201.497] wcscmp (_String1="FD00306_.WMF", _String2=".") returned 1 [0201.497] wcscmp (_String1="FD00306_.WMF", _String2="..") returned 1 [0201.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f448 [0201.497] wcscpy (in: _Dest=0x3e1f448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.497] wcscat (in: _Dest=0x3e1f448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.497] wcscat (in: _Dest=0x3e1f448, _Source="FD00306_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" [0201.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0201.498] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87fda800, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87fda800, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0201.498] wcscmp (_String1="FD00336_.WMF", _String2=".") returned 1 [0201.498] wcscmp (_String1="FD00336_.WMF", _String2="..") returned 1 [0201.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ed60 [0201.498] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.498] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.498] wcscat (in: _Dest=0x3e1ed60, _Source="FD00336_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" [0201.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0201.499] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c91800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c91800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0201.499] wcscmp (_String1="FD00361_.WMF", _String2=".") returned 1 [0201.499] wcscmp (_String1="FD00361_.WMF", _String2="..") returned 1 [0201.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f338 [0201.499] wcscpy (in: _Dest=0x3e1f338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.499] wcscat (in: _Dest=0x3e1f338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.500] wcscat (in: _Dest=0x3e1f338, _Source="FD00361_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" [0201.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0202.004] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a0af00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90a0af00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0202.004] wcscmp (_String1="FD00369_.WMF", _String2=".") returned 1 [0202.004] wcscmp (_String1="FD00369_.WMF", _String2="..") returned 1 [0202.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f4a0 [0202.005] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.005] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.005] wcscat (in: _Dest=0x3f2f4a0, _Source="FD00369_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" [0203.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0203.314] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9214ac00, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9214ac00, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0203.314] wcscmp (_String1="FD00382_.WMF", _String2=".") returned 1 [0203.314] wcscmp (_String1="FD00382_.WMF", _String2="..") returned 1 [0203.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f998 [0203.314] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.314] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.314] wcscat (in: _Dest=0x3e1f998, _Source="FD00382_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" [0203.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0203.316] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4397eb00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4397eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0203.316] wcscmp (_String1="FD00397_.WMF", _String2=".") returned 1 [0203.316] wcscmp (_String1="FD00397_.WMF", _String2="..") returned 1 [0203.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ecd8 [0203.316] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.316] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.316] wcscat (in: _Dest=0x3e1ecd8, _Source="FD00397_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" [0203.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0203.317] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4266be00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4266be00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0203.329] wcscmp (_String1="FD00403_.WMF", _String2=".") returned 1 [0203.329] wcscmp (_String1="FD00403_.WMF", _String2="..") returned 1 [0203.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f6f0 [0203.329] wcscpy (in: _Dest=0x3e1f6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.329] wcscat (in: _Dest=0x3e1f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.329] wcscat (in: _Dest=0x3e1f6f0, _Source="FD00403_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" [0204.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0204.753] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41359100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41359100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0204.753] wcscmp (_String1="FD00414_.WMF", _String2=".") returned 1 [0204.753] wcscmp (_String1="FD00414_.WMF", _String2="..") returned 1 [0204.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ecd8 [0204.754] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.754] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.754] wcscat (in: _Dest=0x3e1ecd8, _Source="FD00414_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" [0204.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0204.755] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40046400, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x40046400, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0204.755] wcscmp (_String1="FD00419_.WMF", _String2=".") returned 1 [0204.755] wcscmp (_String1="FD00419_.WMF", _String2="..") returned 1 [0204.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f998 [0204.755] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.755] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.755] wcscat (in: _Dest=0x3e1f998, _Source="FD00419_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" [0204.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0204.757] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da20a00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3da20a00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0204.757] wcscmp (_String1="FD00428_.WMF", _String2=".") returned 1 [0204.757] wcscmp (_String1="FD00428_.WMF", _String2="..") returned 1 [0204.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e202a0 [0204.757] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.757] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.757] wcscat (in: _Dest=0x3e202a0, _Source="FD00428_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" [0204.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0204.758] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c70dd00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c70dd00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0204.758] wcscmp (_String1="FD00435_.WMF", _String2=".") returned 1 [0204.758] wcscmp (_String1="FD00435_.WMF", _String2="..") returned 1 [0204.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f448 [0204.759] wcscpy (in: _Dest=0x3e1f448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.759] wcscat (in: _Dest=0x3e1f448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.759] wcscat (in: _Dest=0x3e1f448, _Source="FD00435_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" [0204.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0204.760] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3fb000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b3fb000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0204.760] wcscmp (_String1="FD00438_.WMF", _String2=".") returned 1 [0204.760] wcscmp (_String1="FD00438_.WMF", _String2="..") returned 1 [0204.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f2b0 [0204.760] wcscpy (in: _Dest=0x3e1f2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.760] wcscat (in: _Dest=0x3e1f2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.760] wcscat (in: _Dest=0x3e1f2b0, _Source="FD00438_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" [0204.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0204.762] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0e8300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a0e8300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0204.762] wcscmp (_String1="FD00455_.WMF", _String2=".") returned 1 [0204.762] wcscmp (_String1="FD00455_.WMF", _String2="..") returned 1 [0204.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f4d0 [0204.762] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.762] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.762] wcscat (in: _Dest=0x3e1f4d0, _Source="FD00455_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" [0204.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0204.763] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38dd5600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x38dd5600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0204.764] wcscmp (_String1="FD00459_.WMF", _String2=".") returned 1 [0204.764] wcscmp (_String1="FD00459_.WMF", _String2="..") returned 1 [0204.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fc40 [0204.764] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.764] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.764] wcscat (in: _Dest=0x3e1fc40, _Source="FD00459_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" [0204.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0204.765] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ac2900, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37ac2900, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0204.765] wcscmp (_String1="FD00543_.WMF", _String2=".") returned 1 [0204.765] wcscmp (_String1="FD00543_.WMF", _String2="..") returned 1 [0204.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f1a0 [0204.765] wcscpy (in: _Dest=0x3e1f1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.766] wcscat (in: _Dest=0x3e1f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.767] wcscat (in: _Dest=0x3e1f1a0, _Source="FD00543_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" [0204.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0204.768] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a421100, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a421100, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0204.768] wcscmp (_String1="FD00544_.WMF", _String2=".") returned 1 [0204.768] wcscmp (_String1="FD00544_.WMF", _String2="..") returned 1 [0204.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f800 [0204.768] wcscpy (in: _Dest=0x3e1f800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.768] wcscat (in: _Dest=0x3e1f800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.768] wcscat (in: _Dest=0x3e1f800, _Source="FD00544_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" [0204.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0204.769] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e9d600, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81e9d600, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0204.769] wcscmp (_String1="FD00564_.WMF", _String2=".") returned 1 [0204.769] wcscmp (_String1="FD00564_.WMF", _String2="..") returned 1 [0204.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fff8 [0204.769] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.769] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.769] wcscat (in: _Dest=0x3e1fff8, _Source="FD00564_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" [0204.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0204.771] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a125200, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a125200, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0204.771] wcscmp (_String1="FD00586_.WMF", _String2=".") returned 1 [0204.771] wcscmp (_String1="FD00586_.WMF", _String2="..") returned 1 [0204.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eef8 [0204.771] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.771] wcscat (in: _Dest=0x3e1eef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.771] wcscat (in: _Dest=0x3e1eef8, _Source="FD00586_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" [0204.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d4 [0204.772] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54258100, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54258100, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0204.772] wcscmp (_String1="FD00775_.WMF", _String2=".") returned 1 [0204.772] wcscmp (_String1="FD00775_.WMF", _String2="..") returned 1 [0204.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f338 [0204.772] wcscpy (in: _Dest=0x3e1f338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.772] wcscat (in: _Dest=0x3e1f338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.772] wcscat (in: _Dest=0x3e1f338, _Source="FD00775_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" [0204.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0204.773] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676b2900, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x676b2900, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0204.773] wcscmp (_String1="FD00779_.WMF", _String2=".") returned 1 [0204.773] wcscmp (_String1="FD00779_.WMF", _String2="..") returned 1 [0204.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ede8 [0204.774] wcscpy (in: _Dest=0x3e1ede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.774] wcscat (in: _Dest=0x3e1ede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.774] wcscat (in: _Dest=0x3e1ede8, _Source="FD00779_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" [0204.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c [0204.775] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e29300, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e29300, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0204.775] wcscmp (_String1="FD00799_.WMF", _String2=".") returned 1 [0204.775] wcscmp (_String1="FD00799_.WMF", _String2="..") returned 1 [0204.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ff70 [0204.775] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.775] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.775] wcscat (in: _Dest=0x3e1ff70, _Source="FD00799_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" [0204.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0204.776] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bb8500, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42bb8500, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0204.776] wcscmp (_String1="FD00814_.WMF", _String2=".") returned 1 [0204.776] wcscmp (_String1="FD00814_.WMF", _String2="..") returned 1 [0204.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f008 [0204.776] wcscpy (in: _Dest=0x3e1f008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.776] wcscat (in: _Dest=0x3e1f008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.776] wcscat (in: _Dest=0x3e1f008, _Source="FD00814_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" [0204.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca8 [0204.777] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b32cb00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b32cb00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0204.777] wcscmp (_String1="FD00965_.WMF", _String2=".") returned 1 [0204.777] wcscmp (_String1="FD00965_.WMF", _String2="..") returned 1 [0204.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ebc8 [0204.777] wcscpy (in: _Dest=0x3e1ebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.778] wcscat (in: _Dest=0x3e1ebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.778] wcscat (in: _Dest=0x3e1ebc8, _Source="FD00965_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" [0204.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0204.779] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e988600, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e988600, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0204.779] wcscmp (_String1="FD01074_.WMF", _String2=".") returned 1 [0204.779] wcscmp (_String1="FD01074_.WMF", _String2="..") returned 1 [0204.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f3c0 [0204.779] wcscpy (in: _Dest=0x3e1f3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.779] wcscat (in: _Dest=0x3e1f3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.779] wcscat (in: _Dest=0x3e1f3c0, _Source="FD01074_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" [0204.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0204.780] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898aa700, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x898aa700, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0204.780] wcscmp (_String1="FD01084_.WMF", _String2=".") returned 1 [0204.780] wcscmp (_String1="FD01084_.WMF", _String2="..") returned 1 [0204.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f090 [0204.780] wcscpy (in: _Dest=0x3e1f090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.780] wcscat (in: _Dest=0x3e1f090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.780] wcscat (in: _Dest=0x3e1f090, _Source="FD01084_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" [0204.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a04 [0204.781] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe33f000, ftCreationTime.dwHighDateTime=0x1bd4c63, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe33f000, ftLastWriteTime.dwHighDateTime=0x1bd4c63, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0204.781] wcscmp (_String1="FD01176_.WMF", _String2=".") returned 1 [0204.781] wcscmp (_String1="FD01176_.WMF", _String2="..") returned 1 [0204.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eb40 [0204.782] wcscpy (in: _Dest=0x3e1eb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.782] wcscat (in: _Dest=0x3e1eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.782] wcscat (in: _Dest=0x3e1eb40, _Source="FD01176_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" [0204.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0204.783] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2aa0900, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2aa0900, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0204.783] wcscmp (_String1="FD01191_.WMF", _String2=".") returned 1 [0204.783] wcscmp (_String1="FD01191_.WMF", _String2="..") returned 1 [0204.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ed60 [0204.783] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.783] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.783] wcscat (in: _Dest=0x3e1ed60, _Source="FD01191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" [0204.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0204.784] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c362c00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c362c00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0204.784] wcscmp (_String1="FD01193_.WMF", _String2=".") returned 1 [0204.784] wcscmp (_String1="FD01193_.WMF", _String2="..") returned 1 [0204.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f118 [0204.784] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.784] wcscat (in: _Dest=0x3e1f118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.784] wcscat (in: _Dest=0x3e1f118, _Source="FD01193_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" [0204.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0204.786] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf168200, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf168200, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0204.786] wcscmp (_String1="FD01196_.WMF", _String2=".") returned 1 [0204.786] wcscmp (_String1="FD01196_.WMF", _String2="..") returned 1 [0204.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf2b0 [0204.786] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.786] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.786] wcscat (in: _Dest=0x81bf2b0, _Source="FD01196_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" [0204.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0204.787] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1604be00, ftCreationTime.dwHighDateTime=0x1bf32a7, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1604be00, ftLastWriteTime.dwHighDateTime=0x1bf32a7, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0204.787] wcscmp (_String1="FD01548_.WMF", _String2=".") returned 1 [0204.787] wcscmp (_String1="FD01548_.WMF", _String2="..") returned 1 [0204.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf888 [0204.787] wcscpy (in: _Dest=0x81bf888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.787] wcscat (in: _Dest=0x81bf888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.787] wcscat (in: _Dest=0x81bf888, _Source="FD01548_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" [0204.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0204.789] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a335000, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a335000, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0204.789] wcscmp (_String1="FD01657_.WMF", _String2=".") returned 1 [0204.789] wcscmp (_String1="FD01657_.WMF", _String2="..") returned 1 [0204.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81becd8 [0204.789] wcscpy (in: _Dest=0x81becd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.789] wcscat (in: _Dest=0x81becd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.789] wcscat (in: _Dest=0x81becd8, _Source="FD01657_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" [0204.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81becd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0205.382] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e92f00, ftCreationTime.dwHighDateTime=0x1bd4c70, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3e92f00, ftLastWriteTime.dwHighDateTime=0x1bd4c70, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0205.382] wcscmp (_String1="FD01658_.WMF", _String2=".") returned 1 [0205.382] wcscmp (_String1="FD01658_.WMF", _String2="..") returned 1 [0205.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0205.383] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.383] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.383] wcscat (in: _Dest=0x81be458, _Source="FD01658_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" [0206.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0206.093] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85618800, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85618800, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0206.093] wcscmp (_String1="FD01659_.WMF", _String2=".") returned 1 [0206.093] wcscmp (_String1="FD01659_.WMF", _String2="..") returned 1 [0206.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0206.093] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0206.093] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0206.093] wcscat (in: _Dest=0x81bf1a0, _Source="FD01659_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" [0206.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0206.094] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b647d00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b647d00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0206.094] wcscmp (_String1="FD01660_.WMF", _String2=".") returned 1 [0206.094] wcscmp (_String1="FD01660_.WMF", _String2="..") returned 1 [0206.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bff70 [0206.095] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0206.095] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0206.095] wcscat (in: _Dest=0x81bff70, _Source="FD01660_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" [0206.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0206.095] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0206.095] wcscmp (_String1="FD02068_.WMF", _String2=".") returned 1 [0206.096] wcscmp (_String1="FD02068_.WMF", _String2="..") returned 1 [0206.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be898 [0206.096] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0206.096] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0206.096] wcscat (in: _Dest=0x81be898, _Source="FD02068_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" [0206.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0206.097] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0206.097] wcscmp (_String1="FD02071_.WMF", _String2=".") returned 1 [0206.097] wcscmp (_String1="FD02071_.WMF", _String2="..") returned 1 [0206.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfe60 [0206.097] wcscpy (in: _Dest=0x81bfe60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0206.097] wcscat (in: _Dest=0x81bfe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0206.097] wcscat (in: _Dest=0x81bfe60, _Source="FD02071_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" [0206.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0206.098] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0206.098] wcscmp (_String1="FD02075_.WMF", _String2=".") returned 1 [0206.098] wcscmp (_String1="FD02075_.WMF", _String2="..") returned 1 [0206.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf910 [0206.098] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0206.098] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0206.098] wcscat (in: _Dest=0x81bf910, _Source="FD02075_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" [0206.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0206.099] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0206.099] wcscmp (_String1="FD02088_.WMF", _String2=".") returned 1 [0206.099] wcscmp (_String1="FD02088_.WMF", _String2="..") returned 1 [0206.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf118 [0206.099] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0206.099] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0206.099] wcscat (in: _Dest=0x81bf118, _Source="FD02088_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" [0206.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0206.101] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0206.101] wcscmp (_String1="FD02097_.WMF", _String2=".") returned 1 [0206.101] wcscmp (_String1="FD02097_.WMF", _String2="..") returned 1 [0206.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfbb8 [0206.101] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0206.101] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0206.101] wcscat (in: _Dest=0x81bfbb8, _Source="FD02097_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" [0206.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0206.102] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0206.102] wcscmp (_String1="FD02115_.WMF", _String2=".") returned 1 [0206.102] wcscmp (_String1="FD02115_.WMF", _String2="..") returned 1 [0206.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfcc8 [0206.102] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0206.102] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0206.102] wcscat (in: _Dest=0x81bfcc8, _Source="FD02115_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" [0206.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0206.103] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0211.704] wcscmp (_String1="FD02116_.WMF", _String2=".") returned 1 [0211.704] wcscmp (_String1="FD02116_.WMF", _String2="..") returned 1 [0211.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf998 [0211.704] wcscpy (in: _Dest=0x81bf998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.704] wcscat (in: _Dest=0x81bf998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.704] wcscat (in: _Dest=0x81bf998, _Source="FD02116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" [0212.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0212.569] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0212.569] wcscmp (_String1="FD02141_.WMF", _String2=".") returned 1 [0212.569] wcscmp (_String1="FD02141_.WMF", _String2="..") returned 1 [0212.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30f30 [0212.569] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.569] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.569] wcscat (in: _Dest=0x3f30f30, _Source="FD02141_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" [0212.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0212.570] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0212.570] wcscmp (_String1="FD02153_.WMF", _String2=".") returned 1 [0212.570] wcscmp (_String1="FD02153_.WMF", _String2="..") returned 1 [0212.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f302f8 [0212.570] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.571] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.571] wcscat (in: _Dest=0x3f302f8, _Source="FD02153_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" [0212.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0212.571] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0212.571] wcscmp (_String1="FD02158_.WMF", _String2=".") returned 1 [0212.571] wcscmp (_String1="FD02158_.WMF", _String2="..") returned 1 [0212.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30270 [0212.572] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.572] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.572] wcscat (in: _Dest=0x3f30270, _Source="FD02158_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" [0212.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0212.573] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0212.573] wcscmp (_String1="FD02161_.WMF", _String2=".") returned 1 [0212.573] wcscmp (_String1="FD02161_.WMF", _String2="..") returned 1 [0212.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ffc8 [0212.573] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.573] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.573] wcscat (in: _Dest=0x3f2ffc8, _Source="FD02161_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" [0212.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bac [0212.574] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x87bb6ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0212.574] wcscmp (_String1="FINCL_01.MID", _String2=".") returned 1 [0212.574] wcscmp (_String1="FINCL_01.MID", _String2="..") returned 1 [0212.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f308d0 [0212.574] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.574] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.574] wcscat (in: _Dest=0x3f308d0, _Source="FINCL_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" [0212.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0212.575] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0212.575] wcscmp (_String1="FINCL_02.MID", _String2=".") returned 1 [0212.575] wcscmp (_String1="FINCL_02.MID", _String2="..") returned 1 [0212.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc98 [0212.575] wcscpy (in: _Dest=0x3f2fc98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.575] wcscat (in: _Dest=0x3f2fc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.575] wcscat (in: _Dest=0x3f2fc98, _Source="FINCL_02.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" [0212.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0212.576] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0212.576] wcscmp (_String1="FLAP.WMF", _String2=".") returned 1 [0212.576] wcscmp (_String1="FLAP.WMF", _String2="..") returned 1 [0212.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5a08 [0212.576] wcscpy (in: _Dest=0x3dc5a08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.576] wcscat (in: _Dest=0x3dc5a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.576] wcscat (in: _Dest=0x3dc5a08, _Source="FLAP.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" [0212.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0212.577] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0212.577] wcscmp (_String1="GRDEN_01.MID", _String2=".") returned 1 [0212.577] wcscmp (_String1="GRDEN_01.MID", _String2="..") returned 1 [0212.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30958 [0212.577] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.577] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.577] wcscat (in: _Dest=0x3f30958, _Source="GRDEN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" [0212.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0212.578] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0212.578] wcscmp (_String1="GRID_01.MID", _String2=".") returned 1 [0212.578] wcscmp (_String1="GRID_01.MID", _String2="..") returned 1 [0212.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f418 [0212.579] wcscpy (in: _Dest=0x3f2f418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.579] wcscat (in: _Dest=0x3f2f418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.579] wcscat (in: _Dest=0x3f2f418, _Source="GRID_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" [0212.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0212.579] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a1c600, ftCreationTime.dwHighDateTime=0x1bd4b8f, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8a1c600, ftLastWriteTime.dwHighDateTime=0x1bd4b8f, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0212.580] wcscmp (_String1="HH00057_.WMF", _String2=".") returned 1 [0212.580] wcscmp (_String1="HH00057_.WMF", _String2="..") returned 1 [0212.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30408 [0212.580] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.580] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.580] wcscat (in: _Dest=0x3f30408, _Source="HH00057_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" [0212.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0212.584] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e41b00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85e41b00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0212.584] wcscmp (_String1="HH00084_.WMF", _String2=".") returned 1 [0212.584] wcscmp (_String1="HH00084_.WMF", _String2="..") returned 1 [0212.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30050 [0212.584] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.584] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.584] wcscat (in: _Dest=0x3f30050, _Source="HH00084_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" [0212.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c8 [0212.585] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d53f600, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d53f600, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0212.585] wcscmp (_String1="HH00231_.WMF", _String2=".") returned 1 [0212.585] wcscmp (_String1="HH00231_.WMF", _String2="..") returned 1 [0212.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ff40 [0212.585] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.585] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.585] wcscat (in: _Dest=0x3f2ff40, _Source="HH00231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" [0212.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0212.586] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd2900, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x65fd2900, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0212.586] wcscmp (_String1="HH00235_.WMF", _String2=".") returned 1 [0212.586] wcscmp (_String1="HH00235_.WMF", _String2="..") returned 1 [0212.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30738 [0212.586] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.586] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.586] wcscat (in: _Dest=0x3f30738, _Source="HH00235_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" [0212.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0212.587] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64cbfc00, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64cbfc00, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0212.587] wcscmp (_String1="HH00236_.WMF", _String2=".") returned 1 [0212.587] wcscmp (_String1="HH00236_.WMF", _String2="..") returned 1 [0212.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30fb8 [0212.587] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.587] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.587] wcscat (in: _Dest=0x3f30fb8, _Source="HH00236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" [0212.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b4 [0212.588] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220a2400, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x220a2400, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0212.588] wcscmp (_String1="HH00241_.WMF", _String2=".") returned 1 [0212.588] wcscmp (_String1="HH00241_.WMF", _String2="..") returned 1 [0212.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31370 [0212.588] wcscpy (in: _Dest=0x3f31370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.588] wcscat (in: _Dest=0x3f31370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.588] wcscat (in: _Dest=0x3f31370, _Source="HH00241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" [0212.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0212.594] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x367afc00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x367afc00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0212.594] wcscmp (_String1="HH00260_.WMF", _String2=".") returned 1 [0212.594] wcscmp (_String1="HH00260_.WMF", _String2="..") returned 1 [0212.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c00 [0212.594] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.594] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.594] wcscat (in: _Dest=0x3f30c00, _Source="HH00260_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" [0212.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0212.595] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3549cf00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3549cf00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0212.595] wcscmp (_String1="HH00276_.WMF", _String2=".") returned 1 [0212.595] wcscmp (_String1="HH00276_.WMF", _String2="..") returned 1 [0212.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30b78 [0212.595] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.595] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.595] wcscat (in: _Dest=0x3f30b78, _Source="HH00276_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" [0212.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0212.596] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bd1400, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5bd1400, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0212.596] wcscmp (_String1="HH00334_.WMF", _String2=".") returned 1 [0212.596] wcscmp (_String1="HH00334_.WMF", _String2="..") returned 1 [0212.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f4a0 [0212.597] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.597] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.597] wcscat (in: _Dest=0x3f2f4a0, _Source="HH00334_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" [0212.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0212.598] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78bf3000, ftCreationTime.dwHighDateTime=0x1bd4b7e, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78bf3000, ftLastWriteTime.dwHighDateTime=0x1bd4b7e, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0212.598] wcscmp (_String1="HH00443_.WMF", _String2=".") returned 1 [0212.598] wcscmp (_String1="HH00443_.WMF", _String2="..") returned 1 [0212.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fd20 [0212.598] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.598] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.598] wcscat (in: _Dest=0x3f2fd20, _Source="HH00443_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" [0212.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0212.599] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7effdd00, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7effdd00, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0212.599] wcscmp (_String1="HH00513_.WMF", _String2=".") returned 1 [0212.599] wcscmp (_String1="HH00513_.WMF", _String2="..") returned 1 [0212.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f301e8 [0212.599] wcscpy (in: _Dest=0x3f301e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.599] wcscat (in: _Dest=0x3f301e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.599] wcscat (in: _Dest=0x3f301e8, _Source="HH00513_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" [0212.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f301e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0212.600] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8c4c00, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b8c4c00, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0212.600] wcscmp (_String1="HH00524_.WMF", _String2=".") returned 1 [0212.600] wcscmp (_String1="HH00524_.WMF", _String2="..") returned 1 [0212.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2feb8 [0212.600] wcscpy (in: _Dest=0x3f2feb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.600] wcscat (in: _Dest=0x3f2feb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.600] wcscat (in: _Dest=0x3f2feb8, _Source="HH00524_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" [0212.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2feb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0212.601] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6929f200, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6929f200, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0212.601] wcscmp (_String1="HH00526_.WMF", _String2=".") returned 1 [0212.601] wcscmp (_String1="HH00526_.WMF", _String2="..") returned 1 [0212.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30160 [0212.601] wcscpy (in: _Dest=0x3f30160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.601] wcscat (in: _Dest=0x3f30160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.601] wcscat (in: _Dest=0x3f30160, _Source="HH00526_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" [0212.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0212.602] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f8c500, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67f8c500, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0212.602] wcscmp (_String1="HH00527_.WMF", _String2=".") returned 1 [0212.602] wcscmp (_String1="HH00527_.WMF", _String2="..") returned 1 [0212.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f5b0 [0212.602] wcscpy (in: _Dest=0x3f2f5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.602] wcscat (in: _Dest=0x3f2f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.602] wcscat (in: _Dest=0x3f2f5b0, _Source="HH00527_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" [0212.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2664 [0212.603] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17eb600, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf17eb600, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0212.603] wcscmp (_String1="HH00546_.WMF", _String2=".") returned 1 [0212.603] wcscmp (_String1="HH00546_.WMF", _String2="..") returned 1 [0212.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30628 [0212.604] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.604] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.604] wcscat (in: _Dest=0x3f30628, _Source="HH00546_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" [0212.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0212.604] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1b1d00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde1b1d00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0212.605] wcscmp (_String1="HH00601_.WMF", _String2=".") returned 1 [0212.605] wcscmp (_String1="HH00601_.WMF", _String2="..") returned 1 [0212.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f9f0 [0212.605] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.605] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.605] wcscat (in: _Dest=0x3f2f9f0, _Source="HH00601_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" [0212.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0212.606] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3eb0b00, ftCreationTime.dwHighDateTime=0x1bd4bab, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf3eb0b00, ftLastWriteTime.dwHighDateTime=0x1bd4bab, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0212.606] wcscmp (_String1="HH00602_.WMF", _String2=".") returned 1 [0212.606] wcscmp (_String1="HH00602_.WMF", _String2="..") returned 1 [0212.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f7d0 [0212.606] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.606] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.606] wcscat (in: _Dest=0x3f2f7d0, _Source="HH00602_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" [0212.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0212.607] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe21100, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafe21100, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0212.607] wcscmp (_String1="HH00612_.WMF", _String2=".") returned 1 [0212.607] wcscmp (_String1="HH00612_.WMF", _String2="..") returned 1 [0212.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f305a0 [0212.607] wcscpy (in: _Dest=0x3f305a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.607] wcscat (in: _Dest=0x3f305a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.607] wcscat (in: _Dest=0x3f305a0, _Source="HH00612_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" [0212.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f305a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0212.608] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d585200, ftCreationTime.dwHighDateTime=0x1bd4b7d, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d585200, ftLastWriteTime.dwHighDateTime=0x1bd4b7d, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0212.608] wcscmp (_String1="HH00623_.WMF", _String2=".") returned 1 [0212.608] wcscmp (_String1="HH00623_.WMF", _String2="..") returned 1 [0212.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c88 [0212.608] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.608] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.608] wcscat (in: _Dest=0x3f30c88, _Source="HH00623_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" [0212.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0212.609] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10bc1a00, ftCreationTime.dwHighDateTime=0x1bd4b7d, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10bc1a00, ftLastWriteTime.dwHighDateTime=0x1bd4b7d, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0212.609] wcscmp (_String1="HH00625_.WMF", _String2=".") returned 1 [0212.609] wcscmp (_String1="HH00625_.WMF", _String2="..") returned 1 [0212.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f858 [0212.609] wcscpy (in: _Dest=0x3f2f858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.609] wcscat (in: _Dest=0x3f2f858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.609] wcscat (in: _Dest=0x3f2f858, _Source="HH00625_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" [0212.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4 [0212.610] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b0cd800, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b0cd800, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0212.610] wcscmp (_String1="HH00636_.WMF", _String2=".") returned 1 [0212.610] wcscmp (_String1="HH00636_.WMF", _String2="..") returned 1 [0212.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc10 [0212.610] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.610] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.610] wcscat (in: _Dest=0x3f2fc10, _Source="HH00636_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" [0212.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0212.611] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e77500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x32e77500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0212.611] wcscmp (_String1="HH00669_.WMF", _String2=".") returned 1 [0212.612] wcscmp (_String1="HH00669_.WMF", _String2="..") returned 1 [0212.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0212.612] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.612] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.612] wcscat (in: _Dest=0x3f310c8, _Source="HH00669_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" [0212.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0212.613] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf117c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf117c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0212.613] wcscmp (_String1="HH00681_.WMF", _String2=".") returned 1 [0212.613] wcscmp (_String1="HH00681_.WMF", _String2="..") returned 1 [0212.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0212.613] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.613] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.613] wcscat (in: _Dest=0x3f2f528, _Source="HH00681_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" [0212.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0212.614] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2295e00, ftCreationTime.dwHighDateTime=0x1bd4b82, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd2295e00, ftLastWriteTime.dwHighDateTime=0x1bd4b82, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0212.614] wcscmp (_String1="HH00685_.WMF", _String2=".") returned 1 [0212.614] wcscmp (_String1="HH00685_.WMF", _String2="..") returned 1 [0212.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30518 [0212.614] wcscpy (in: _Dest=0x3f30518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.614] wcscat (in: _Dest=0x3f30518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.614] wcscat (in: _Dest=0x3f30518, _Source="HH00685_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" [0212.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0212.804] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b64800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31b64800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0213.479] wcscmp (_String1="HH00687_.WMF", _String2=".") returned 1 [0213.479] wcscmp (_String1="HH00687_.WMF", _String2="..") returned 1 [0213.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f638 [0213.479] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.479] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.479] wcscat (in: _Dest=0x3f2f638, _Source="HH00687_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" [0213.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0213.666] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaad29100, ftCreationTime.dwHighDateTime=0x1bd4b82, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaad29100, ftLastWriteTime.dwHighDateTime=0x1bd4b82, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0213.666] wcscmp (_String1="HH00688_.WMF", _String2=".") returned 1 [0213.666] wcscmp (_String1="HH00688_.WMF", _String2="..") returned 1 [0213.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfa20 [0213.666] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.666] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.666] wcscat (in: _Dest=0x81bfa20, _Source="HH00688_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" [0213.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0213.680] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30851b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30851b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0213.680] wcscmp (_String1="HH00693_.WMF", _String2=".") returned 1 [0213.680] wcscmp (_String1="HH00693_.WMF", _String2="..") returned 1 [0213.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf4d0 [0213.680] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.680] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.680] wcscat (in: _Dest=0x81bf4d0, _Source="HH00693_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" [0213.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0213.681] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c9b00, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3c9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0213.681] wcscmp (_String1="HH01013_.WMF", _String2=".") returned 1 [0213.681] wcscmp (_String1="HH01013_.WMF", _String2="..") returned 1 [0213.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beab8 [0213.681] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.681] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.681] wcscat (in: _Dest=0x81beab8, _Source="HH01013_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" [0213.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0213.682] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0213.683] wcscmp (_String1="HH01015_.WMF", _String2=".") returned 1 [0213.683] wcscmp (_String1="HH01015_.WMF", _String2="..") returned 1 [0213.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0213.683] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.683] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.683] wcscat (in: _Dest=0x81bf1a0, _Source="HH01015_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" [0213.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0213.684] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a2e000, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8a2e000, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0213.684] wcscmp (_String1="HH01058_.WMF", _String2=".") returned 1 [0213.684] wcscmp (_String1="HH01058_.WMF", _String2="..") returned 1 [0213.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfdd8 [0213.684] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.684] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.684] wcscat (in: _Dest=0x81bfdd8, _Source="HH01058_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" [0213.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0213.685] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf197800, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf197800, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0213.685] wcscmp (_String1="HH01065_.WMF", _String2=".") returned 1 [0213.685] wcscmp (_String1="HH01065_.WMF", _String2="..") returned 1 [0213.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf008 [0213.685] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.685] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.685] wcscat (in: _Dest=0x81bf008, _Source="HH01065_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" [0213.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0213.687] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad57b00, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbad57b00, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0213.687] wcscmp (_String1="HH01080_.WMF", _String2=".") returned 1 [0213.687] wcscmp (_String1="HH01080_.WMF", _String2="..") returned 1 [0213.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bed60 [0213.688] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.688] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.688] wcscat (in: _Dest=0x81bed60, _Source="HH01080_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" [0213.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0213.689] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0213.689] wcscmp (_String1="HH01242_.WMF", _String2=".") returned 1 [0213.689] wcscmp (_String1="HH01242_.WMF", _String2="..") returned 1 [0213.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0213.689] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.689] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.689] wcscat (in: _Dest=0x81bebc8, _Source="HH01242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" [0213.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0213.690] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0213.690] wcscmp (_String1="HH01291_.WMF", _String2=".") returned 1 [0213.690] wcscmp (_String1="HH01291_.WMF", _String2="..") returned 1 [0213.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beef8 [0213.691] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.691] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.691] wcscat (in: _Dest=0x81beef8, _Source="HH01291_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" [0213.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0213.692] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0213.692] wcscmp (_String1="HH01329_.WMF", _String2=".") returned 1 [0213.692] wcscmp (_String1="HH01329_.WMF", _String2="..") returned 1 [0213.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beb40 [0213.692] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.692] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.692] wcscat (in: _Dest=0x81beb40, _Source="HH01329_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" [0213.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0213.693] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253cea00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x253cea00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0213.693] wcscmp (_String1="HH01461_.WMF", _String2=".") returned 1 [0213.693] wcscmp (_String1="HH01461_.WMF", _String2="..") returned 1 [0213.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0218 [0213.693] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.693] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.693] wcscat (in: _Dest=0x81c0218, _Source="HH01461_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" [0213.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0213.694] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0213.694] wcscmp (_String1="HH01618_.WMF", _String2=".") returned 1 [0213.694] wcscmp (_String1="HH01618_.WMF", _String2="..") returned 1 [0213.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf800 [0213.694] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.694] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.694] wcscat (in: _Dest=0x81bf800, _Source="HH01618_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" [0213.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0213.695] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1844f700, ftCreationTime.dwHighDateTime=0x1bd4c41, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1844f700, ftLastWriteTime.dwHighDateTime=0x1bd4c41, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0213.695] wcscmp (_String1="HH01759_.WMF", _String2=".") returned 1 [0213.695] wcscmp (_String1="HH01759_.WMF", _String2="..") returned 1 [0213.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be5f0 [0213.695] wcscpy (in: _Dest=0x81be5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.695] wcscat (in: _Dest=0x81be5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.695] wcscat (in: _Dest=0x81be5f0, _Source="HH01759_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" [0213.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0213.696] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c86600, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0c86600, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0213.697] wcscmp (_String1="HH01875_.WMF", _String2=".") returned 1 [0213.697] wcscmp (_String1="HH01875_.WMF", _String2="..") returned 1 [0213.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c02a0 [0213.697] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.697] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.697] wcscat (in: _Dest=0x81c02a0, _Source="HH01875_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" [0213.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0213.698] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6774a00, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6774a00, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0213.698] wcscmp (_String1="HH01923_.WMF", _String2=".") returned 1 [0213.698] wcscmp (_String1="HH01923_.WMF", _String2="..") returned 1 [0213.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be568 [0213.698] wcscpy (in: _Dest=0x81be568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.698] wcscat (in: _Dest=0x81be568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.698] wcscat (in: _Dest=0x81be568, _Source="HH01923_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" [0213.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0213.699] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0213.699] wcscmp (_String1="HH02155_.WMF", _String2=".") returned 1 [0213.699] wcscmp (_String1="HH02155_.WMF", _String2="..") returned 1 [0213.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be678 [0213.699] wcscpy (in: _Dest=0x81be678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.699] wcscat (in: _Dest=0x81be678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.699] wcscat (in: _Dest=0x81be678, _Source="HH02155_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" [0213.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0213.700] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07d9a00, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd07d9a00, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0213.700] wcscmp (_String1="HH02166_.WMF", _String2=".") returned 1 [0213.700] wcscmp (_String1="HH02166_.WMF", _String2="..") returned 1 [0213.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf5e0 [0213.700] wcscpy (in: _Dest=0x81bf5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.700] wcscat (in: _Dest=0x81bf5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.700] wcscat (in: _Dest=0x81bf5e0, _Source="HH02166_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" [0213.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0213.701] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47199800, ftCreationTime.dwHighDateTime=0x1bd4c56, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47199800, ftLastWriteTime.dwHighDateTime=0x1bd4c56, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0213.701] wcscmp (_String1="HH02282_.WMF", _String2=".") returned 1 [0213.701] wcscmp (_String1="HH02282_.WMF", _String2="..") returned 1 [0213.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0213.701] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.701] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.701] wcscat (in: _Dest=0x81c0190, _Source="HH02282_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" [0213.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0213.702] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4da7600, ftCreationTime.dwHighDateTime=0x1bd4c59, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf4da7600, ftLastWriteTime.dwHighDateTime=0x1bd4c59, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0213.702] wcscmp (_String1="HH02298_.WMF", _String2=".") returned 1 [0213.702] wcscmp (_String1="HH02298_.WMF", _String2="..") returned 1 [0213.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0108 [0213.703] wcscpy (in: _Dest=0x81c0108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.703] wcscat (in: _Dest=0x81c0108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.703] wcscat (in: _Dest=0x81c0108, _Source="HH02298_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" [0213.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0213.703] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69022300, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69022300, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0213.704] wcscmp (_String1="HH02312_.WMF", _String2=".") returned 1 [0213.704] wcscmp (_String1="HH02312_.WMF", _String2="..") returned 1 [0213.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bec50 [0213.704] wcscpy (in: _Dest=0x81bec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.704] wcscat (in: _Dest=0x81bec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.704] wcscat (in: _Dest=0x81bec50, _Source="HH02312_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" [0213.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0213.705] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d3d200, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x29d3d200, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0213.705] wcscmp (_String1="HH02313_.WMF", _String2=".") returned 1 [0213.705] wcscmp (_String1="HH02313_.WMF", _String2="..") returned 1 [0213.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be4e0 [0213.705] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.705] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.705] wcscat (in: _Dest=0x81be4e0, _Source="HH02313_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" [0213.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0213.706] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed850100, ftCreationTime.dwHighDateTime=0x1bf0b4c, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed850100, ftLastWriteTime.dwHighDateTime=0x1bf0b4c, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0213.706] wcscmp (_String1="HM00005_.WMF", _String2=".") returned 1 [0213.706] wcscmp (_String1="HM00005_.WMF", _String2="..") returned 1 [0213.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bea30 [0213.706] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.706] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.706] wcscat (in: _Dest=0x81bea30, _Source="HM00005_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" [0213.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0213.707] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d2a700, ftCreationTime.dwHighDateTime=0x1bd4b98, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d2a700, ftLastWriteTime.dwHighDateTime=0x1bd4b98, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0213.707] wcscmp (_String1="HM00114_.WMF", _String2=".") returned 1 [0213.707] wcscmp (_String1="HM00114_.WMF", _String2="..") returned 1 [0213.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfc40 [0213.707] wcscpy (in: _Dest=0x81bfc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.707] wcscat (in: _Dest=0x81bfc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.707] wcscat (in: _Dest=0x81bfc40, _Source="HM00114_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" [0213.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0213.708] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f53ee00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f53ee00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0213.708] wcscmp (_String1="HM00116_.WMF", _String2=".") returned 1 [0213.708] wcscmp (_String1="HM00116_.WMF", _String2="..") returned 1 [0213.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf558 [0213.708] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.708] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.708] wcscat (in: _Dest=0x81bf558, _Source="HM00116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" [0213.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0213.709] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1242100, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1242100, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0213.709] wcscmp (_String1="HM00172_.WMF", _String2=".") returned 1 [0213.709] wcscmp (_String1="HM00172_.WMF", _String2="..") returned 1 [0213.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf090 [0213.709] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.709] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.709] wcscat (in: _Dest=0x81bf090, _Source="HM00172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" [0213.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0213.710] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c75e300, ftCreationTime.dwHighDateTime=0x1bf3c3d, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c75e300, ftLastWriteTime.dwHighDateTime=0x1bf3c3d, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0213.710] wcscmp (_String1="HM00426_.WMF", _String2=".") returned 1 [0213.710] wcscmp (_String1="HM00426_.WMF", _String2="..") returned 1 [0213.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0328 [0213.710] wcscpy (in: _Dest=0x81c0328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.710] wcscat (in: _Dest=0x81c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.710] wcscat (in: _Dest=0x81c0328, _Source="HM00426_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" [0213.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0213.711] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0213.711] wcscmp (_String1="HTECH_01.MID", _String2=".") returned 1 [0213.711] wcscmp (_String1="HTECH_01.MID", _String2="..") returned 1 [0213.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfff8 [0213.711] wcscpy (in: _Dest=0x81bfff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.711] wcscat (in: _Dest=0x81bfff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.712] wcscat (in: _Dest=0x81bfff8, _Source="HTECH_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" [0213.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0213.712] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146cc00, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x146cc00, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0213.712] wcscmp (_String1="IN00046_.WMF", _String2=".") returned 1 [0213.713] wcscmp (_String1="IN00046_.WMF", _String2="..") returned 1 [0213.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f1a0 [0213.713] wcscpy (in: _Dest=0x3e1f1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.713] wcscat (in: _Dest=0x3e1f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.713] wcscat (in: _Dest=0x3e1f1a0, _Source="IN00046_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" [0213.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0213.714] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb628bb00, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb628bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0213.714] wcscmp (_String1="IN00118_.WMF", _String2=".") returned 1 [0213.714] wcscmp (_String1="IN00118_.WMF", _String2="..") returned 1 [0213.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f800 [0213.714] wcscpy (in: _Dest=0x3e1f800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.714] wcscat (in: _Dest=0x3e1f800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.714] wcscat (in: _Dest=0x3e1f800, _Source="IN00118_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" [0213.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0213.715] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa99f6500, ftCreationTime.dwHighDateTime=0x1bd4b7e, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa99f6500, ftLastWriteTime.dwHighDateTime=0x1bd4b7e, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0213.715] wcscmp (_String1="IN00177_.WMF", _String2=".") returned 1 [0213.715] wcscmp (_String1="IN00177_.WMF", _String2="..") returned 1 [0213.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fff8 [0213.715] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.715] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.715] wcscat (in: _Dest=0x3e1fff8, _Source="IN00177_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" [0213.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f8 [0213.716] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd23d900, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd23d900, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0213.716] wcscmp (_String1="IN00204_.WMF", _String2=".") returned 1 [0213.716] wcscmp (_String1="IN00204_.WMF", _String2="..") returned 1 [0213.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eef8 [0213.716] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.716] wcscat (in: _Dest=0x3e1eef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.716] wcscat (in: _Dest=0x3e1eef8, _Source="IN00204_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" [0213.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0213.871] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e22c100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e22c100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0213.871] wcscmp (_String1="IN00233_.WMF", _String2=".") returned 1 [0213.871] wcscmp (_String1="IN00233_.WMF", _String2="..") returned 1 [0213.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f338 [0213.871] wcscpy (in: _Dest=0x3e1f338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0213.871] wcscat (in: _Dest=0x3e1f338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0213.871] wcscat (in: _Dest=0x3e1f338, _Source="IN00233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" [0214.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264c [0214.235] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b776b00, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b776b00, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0214.235] wcscmp (_String1="IN00343_.WMF", _String2=".") returned 1 [0214.235] wcscmp (_String1="IN00343_.WMF", _String2="..") returned 1 [0214.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ede8 [0214.235] wcscpy (in: _Dest=0x3e1ede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0214.235] wcscat (in: _Dest=0x3e1ede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0214.235] wcscat (in: _Dest=0x3e1ede8, _Source="IN00343_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" [0214.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0214.237] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b2b700, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56b2b700, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0216.775] wcscmp (_String1="IN00346_.WMF", _String2=".") returned 1 [0216.775] wcscmp (_String1="IN00346_.WMF", _String2="..") returned 1 [0216.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f302f8 [0216.775] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.775] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.775] wcscat (in: _Dest=0x3f302f8, _Source="IN00346_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" [0217.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0217.616] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8ba900, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f8ba900, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0217.616] wcscmp (_String1="IN00351_.WMF", _String2=".") returned 1 [0217.616] wcscmp (_String1="IN00351_.WMF", _String2="..") returned 1 [0217.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30380 [0217.616] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.617] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.617] wcscat (in: _Dest=0x3f30380, _Source="IN00351_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" [0217.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0217.618] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46233f00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46233f00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0217.618] wcscmp (_String1="IN00557_.WMF", _String2=".") returned 1 [0217.618] wcscmp (_String1="IN00557_.WMF", _String2="..") returned 1 [0217.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ff70 [0217.619] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.619] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.619] wcscat (in: _Dest=0x3e1ff70, _Source="IN00557_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" [0217.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0217.626] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81d00000, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81d00000, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0217.626] wcscmp (_String1="IN00915_.WMF", _String2=".") returned 1 [0217.626] wcscmp (_String1="IN00915_.WMF", _String2="..") returned 1 [0217.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f008 [0217.626] wcscpy (in: _Dest=0x3e1f008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.626] wcscat (in: _Dest=0x3e1f008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.626] wcscat (in: _Dest=0x3e1f008, _Source="IN00915_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" [0217.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0217.627] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa58100, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa58100, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0217.627] wcscmp (_String1="IN00919_.WMF", _String2=".") returned 1 [0217.628] wcscmp (_String1="IN00919_.WMF", _String2="..") returned 1 [0217.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ebc8 [0217.628] wcscpy (in: _Dest=0x3e1ebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.628] wcscat (in: _Dest=0x3e1ebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.628] wcscat (in: _Dest=0x3e1ebc8, _Source="IN00919_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" [0217.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0217.629] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9ec00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa9ec00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0217.629] wcscmp (_String1="IN00956_.WMF", _String2=".") returned 1 [0217.629] wcscmp (_String1="IN00956_.WMF", _String2="..") returned 1 [0217.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f3c0 [0217.629] wcscpy (in: _Dest=0x3e1f3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.629] wcscat (in: _Dest=0x3e1f3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.629] wcscat (in: _Dest=0x3e1f3c0, _Source="IN00956_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" [0217.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0217.637] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97432b00, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97432b00, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0217.637] wcscmp (_String1="IN00957_.WMF", _String2=".") returned 1 [0217.637] wcscmp (_String1="IN00957_.WMF", _String2="..") returned 1 [0217.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f090 [0217.637] wcscpy (in: _Dest=0x3e1f090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.637] wcscat (in: _Dest=0x3e1f090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.637] wcscat (in: _Dest=0x3e1f090, _Source="IN00957_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" [0217.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0217.639] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0217.639] wcscmp (_String1="INDST_01.MID", _String2=".") returned 1 [0217.639] wcscmp (_String1="INDST_01.MID", _String2="..") returned 1 [0217.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eb40 [0217.639] wcscpy (in: _Dest=0x3e1eb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.639] wcscat (in: _Dest=0x3e1eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.639] wcscat (in: _Dest=0x3e1eb40, _Source="INDST_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" [0217.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0217.640] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cfe900, ftCreationTime.dwHighDateTime=0x1bd63c5, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x22cfe900, ftLastWriteTime.dwHighDateTime=0x1bd63c5, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0217.640] wcscmp (_String1="J0075478.GIF", _String2=".") returned 1 [0217.641] wcscmp (_String1="J0075478.GIF", _String2="..") returned 1 [0217.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ed60 [0217.641] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.641] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.641] wcscat (in: _Dest=0x3e1ed60, _Source="J0075478.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" [0217.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0217.642] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0217.642] wcscmp (_String1="J0086384.WMF", _String2=".") returned 1 [0217.642] wcscmp (_String1="J0086384.WMF", _String2="..") returned 1 [0217.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f6f0 [0217.643] wcscpy (in: _Dest=0x3e1f6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.643] wcscat (in: _Dest=0x3e1f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.643] wcscat (in: _Dest=0x3e1f6f0, _Source="J0086384.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" [0217.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0217.644] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0217.644] wcscmp (_String1="J0086420.WMF", _String2=".") returned 1 [0217.644] wcscmp (_String1="J0086420.WMF", _String2="..") returned 1 [0217.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ecd8 [0217.644] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.644] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.644] wcscat (in: _Dest=0x3e1ecd8, _Source="J0086420.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" [0217.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2658 [0217.646] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0217.646] wcscmp (_String1="J0086424.WMF", _String2=".") returned 1 [0217.646] wcscmp (_String1="J0086424.WMF", _String2="..") returned 1 [0217.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f998 [0217.646] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.646] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.646] wcscat (in: _Dest=0x3e1f998, _Source="J0086424.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" [0217.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0217.648] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0217.648] wcscmp (_String1="J0086426.WMF", _String2=".") returned 1 [0217.648] wcscmp (_String1="J0086426.WMF", _String2="..") returned 1 [0217.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e202a0 [0217.648] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.648] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.648] wcscat (in: _Dest=0x3e202a0, _Source="J0086426.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" [0217.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0217.650] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0217.650] wcscmp (_String1="J0086428.WMF", _String2=".") returned 1 [0217.650] wcscmp (_String1="J0086428.WMF", _String2="..") returned 1 [0217.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f448 [0217.650] wcscpy (in: _Dest=0x3e1f448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.650] wcscat (in: _Dest=0x3e1f448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.650] wcscat (in: _Dest=0x3e1f448, _Source="J0086428.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" [0217.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0217.651] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0217.652] wcscmp (_String1="J0086432.WMF", _String2=".") returned 1 [0217.652] wcscmp (_String1="J0086432.WMF", _String2="..") returned 1 [0217.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f2b0 [0217.652] wcscpy (in: _Dest=0x3e1f2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.652] wcscat (in: _Dest=0x3e1f2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.652] wcscat (in: _Dest=0x3e1f2b0, _Source="J0086432.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" [0217.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0217.660] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0217.660] wcscmp (_String1="J0086478.WMF", _String2=".") returned 1 [0217.660] wcscmp (_String1="J0086478.WMF", _String2="..") returned 1 [0217.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f4d0 [0217.661] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.661] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.661] wcscat (in: _Dest=0x3e1f4d0, _Source="J0086478.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" [0217.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0217.662] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0217.662] wcscmp (_String1="J0089945.WMF", _String2=".") returned 1 [0217.662] wcscmp (_String1="J0089945.WMF", _String2="..") returned 1 [0217.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fc40 [0217.662] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.662] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.662] wcscat (in: _Dest=0x3e1fc40, _Source="J0089945.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" [0217.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d30 [0217.664] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0217.664] wcscmp (_String1="J0089992.WMF", _String2=".") returned 1 [0217.664] wcscmp (_String1="J0089992.WMF", _String2="..") returned 1 [0217.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f118 [0217.664] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.664] wcscat (in: _Dest=0x3e1f118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.664] wcscat (in: _Dest=0x3e1f118, _Source="J0089992.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" [0217.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a8 [0217.665] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0217.665] wcscmp (_String1="J0090027.WMF", _String2=".") returned 1 [0217.665] wcscmp (_String1="J0090027.WMF", _String2="..") returned 1 [0217.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ec50 [0217.665] wcscpy (in: _Dest=0x3e1ec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.665] wcscat (in: _Dest=0x3e1ec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.666] wcscat (in: _Dest=0x3e1ec50, _Source="J0090027.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" [0217.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25cc [0217.667] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0217.667] wcscmp (_String1="J0090087.WMF", _String2=".") returned 1 [0217.667] wcscmp (_String1="J0090087.WMF", _String2="..") returned 1 [0217.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fbb8 [0217.667] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.667] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.668] wcscat (in: _Dest=0x3e1fbb8, _Source="J0090087.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" [0217.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d0 [0217.669] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0217.669] wcscmp (_String1="J0090089.WMF", _String2=".") returned 1 [0217.669] wcscmp (_String1="J0090089.WMF", _String2="..") returned 1 [0217.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ef80 [0217.669] wcscpy (in: _Dest=0x3e1ef80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.669] wcscat (in: _Dest=0x3e1ef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.669] wcscat (in: _Dest=0x3e1ef80, _Source="J0090089.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" [0217.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0217.670] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0217.671] wcscmp (_String1="J0090149.WMF", _String2=".") returned 1 [0217.671] wcscmp (_String1="J0090149.WMF", _String2="..") returned 1 [0217.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f228 [0217.671] wcscpy (in: _Dest=0x3e1f228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.671] wcscat (in: _Dest=0x3e1f228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.671] wcscat (in: _Dest=0x3e1f228, _Source="J0090149.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" [0217.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0217.672] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0217.672] wcscmp (_String1="J0090390.WMF", _String2=".") returned 1 [0217.672] wcscmp (_String1="J0090390.WMF", _String2="..") returned 1 [0217.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f558 [0217.672] wcscpy (in: _Dest=0x3e1f558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.672] wcscat (in: _Dest=0x3e1f558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.672] wcscat (in: _Dest=0x3e1f558, _Source="J0090390.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" [0217.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0219.903] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20ba900, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd20ba900, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0219.904] wcscmp (_String1="J0090777.WMF", _String2=".") returned 1 [0219.904] wcscmp (_String1="J0090777.WMF", _String2="..") returned 1 [0219.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30380 [0219.904] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.904] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.904] wcscat (in: _Dest=0x3f30380, _Source="J0090777.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" [0220.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0220.106] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33cd600, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd33cd600, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0220.106] wcscmp (_String1="J0090779.WMF", _String2=".") returned 1 [0220.106] wcscmp (_String1="J0090779.WMF", _String2="..") returned 1 [0220.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c88 [0220.106] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.106] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.106] wcscat (in: _Dest=0x3f30c88, _Source="J0090779.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" [0220.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0220.108] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33cd600, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd33cd600, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0220.108] wcscmp (_String1="J0090781.WMF", _String2=".") returned 1 [0220.108] wcscmp (_String1="J0090781.WMF", _String2="..") returned 1 [0220.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30a68 [0220.108] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.108] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.108] wcscat (in: _Dest=0x3f30a68, _Source="J0090781.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" [0220.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0220.109] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33cd600, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd33cd600, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0220.109] wcscmp (_String1="J0090783.WMF", _String2=".") returned 1 [0220.109] wcscmp (_String1="J0090783.WMF", _String2="..") returned 1 [0220.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f311d8 [0220.109] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.109] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.110] wcscat (in: _Dest=0x3f311d8, _Source="J0090783.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" [0220.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0220.111] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0220.111] wcscmp (_String1="J0093905.WMF", _String2=".") returned 1 [0220.111] wcscmp (_String1="J0093905.WMF", _String2="..") returned 1 [0220.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f306b0 [0220.111] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.111] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.111] wcscat (in: _Dest=0x3f306b0, _Source="J0093905.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" [0220.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0220.112] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0220.113] wcscmp (_String1="J0098497.WMF", _String2=".") returned 1 [0220.113] wcscmp (_String1="J0098497.WMF", _String2="..") returned 1 [0220.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f968 [0220.113] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.113] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.113] wcscat (in: _Dest=0x3f2f968, _Source="J0098497.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" [0220.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0220.114] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0220.114] wcscmp (_String1="J0099145.JPG", _String2=".") returned 1 [0220.114] wcscmp (_String1="J0099145.JPG", _String2="..") returned 1 [0220.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31040 [0220.114] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.114] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.114] wcscat (in: _Dest=0x3f31040, _Source="J0099145.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" [0220.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0220.116] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0220.116] wcscmp (_String1="J0099146.WMF", _String2=".") returned 1 [0220.116] wcscmp (_String1="J0099146.WMF", _String2="..") returned 1 [0220.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30e20 [0220.116] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.116] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.116] wcscat (in: _Dest=0x3f30e20, _Source="J0099146.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" [0220.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0220.118] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0220.118] wcscmp (_String1="J0099147.JPG", _String2=".") returned 1 [0220.118] wcscmp (_String1="J0099147.JPG", _String2="..") returned 1 [0220.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f8e0 [0220.118] wcscpy (in: _Dest=0x3f2f8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.118] wcscat (in: _Dest=0x3f2f8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.118] wcscat (in: _Dest=0x3f2f8e0, _Source="J0099147.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" [0220.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29fc [0220.119] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0220.119] wcscmp (_String1="J0099148.JPG", _String2=".") returned 1 [0220.120] wcscmp (_String1="J0099148.JPG", _String2="..") returned 1 [0220.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fda8 [0220.120] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.120] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.120] wcscat (in: _Dest=0x3f2fda8, _Source="J0099148.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" [0220.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0220.121] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0220.121] wcscmp (_String1="J0099149.WMF", _String2=".") returned 1 [0220.121] wcscmp (_String1="J0099149.WMF", _String2="..") returned 1 [0220.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f300d8 [0220.122] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.122] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.122] wcscat (in: _Dest=0x3f300d8, _Source="J0099149.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" [0220.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b4 [0220.123] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0222.787] wcscmp (_String1="J0099150.JPG", _String2=".") returned 1 [0222.787] wcscmp (_String1="J0099150.JPG", _String2="..") returned 1 [0222.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0222.788] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.788] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.788] wcscat (in: _Dest=0x3f2f528, _Source="J0099150.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" [0222.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0222.789] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0222.789] wcscmp (_String1="J0099151.WMF", _String2=".") returned 1 [0222.789] wcscmp (_String1="J0099151.WMF", _String2="..") returned 1 [0222.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc10 [0222.789] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.789] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.789] wcscat (in: _Dest=0x3f2fc10, _Source="J0099151.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" [0222.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0222.790] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0222.790] wcscmp (_String1="J0099152.JPG", _String2=".") returned 1 [0222.790] wcscmp (_String1="J0099152.JPG", _String2="..") returned 1 [0222.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f858 [0222.791] wcscpy (in: _Dest=0x3f2f858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.791] wcscat (in: _Dest=0x3f2f858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.791] wcscat (in: _Dest=0x3f2f858, _Source="J0099152.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" [0222.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0222.792] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0222.792] wcscmp (_String1="J0099153.WMF", _String2=".") returned 1 [0222.792] wcscmp (_String1="J0099153.WMF", _String2="..") returned 1 [0222.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f307c0 [0222.792] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.792] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.792] wcscat (in: _Dest=0x3f307c0, _Source="J0099153.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" [0222.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0222.792] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0222.793] wcscmp (_String1="J0099154.JPG", _String2=".") returned 1 [0222.793] wcscmp (_String1="J0099154.JPG", _String2="..") returned 1 [0222.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f312e8 [0222.793] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.793] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.793] wcscat (in: _Dest=0x3f312e8, _Source="J0099154.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" [0222.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0222.794] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0222.794] wcscmp (_String1="J0099155.JPG", _String2=".") returned 1 [0222.794] wcscmp (_String1="J0099155.JPG", _String2="..") returned 1 [0222.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30848 [0222.794] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.794] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.794] wcscat (in: _Dest=0x3f30848, _Source="J0099155.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" [0222.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0222.795] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0222.795] wcscmp (_String1="J0099156.JPG", _String2=".") returned 1 [0222.795] wcscmp (_String1="J0099156.JPG", _String2="..") returned 1 [0222.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f748 [0222.795] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.795] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.795] wcscat (in: _Dest=0x3f2f748, _Source="J0099156.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" [0222.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0222.796] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0222.796] wcscmp (_String1="J0099157.JPG", _String2=".") returned 1 [0222.796] wcscmp (_String1="J0099157.JPG", _String2="..") returned 1 [0222.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30ea8 [0222.796] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.797] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.797] wcscat (in: _Dest=0x3f30ea8, _Source="J0099157.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" [0222.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0222.798] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0222.798] wcscmp (_String1="J0099158.WMF", _String2=".") returned 1 [0222.798] wcscmp (_String1="J0099158.WMF", _String2="..") returned 1 [0222.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fe30 [0222.798] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.798] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.800] wcscat (in: _Dest=0x3f2fe30, _Source="J0099158.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" [0222.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0222.801] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0222.801] wcscmp (_String1="J0099159.WMF", _String2=".") returned 1 [0222.801] wcscmp (_String1="J0099159.WMF", _String2="..") returned 1 [0222.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f302f8 [0222.801] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.801] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.801] wcscat (in: _Dest=0x3f302f8, _Source="J0099159.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" [0222.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0222.802] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0222.802] wcscmp (_String1="J0099160.JPG", _String2=".") returned 1 [0222.802] wcscmp (_String1="J0099160.JPG", _String2="..") returned 1 [0222.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f305a0 [0222.802] wcscpy (in: _Dest=0x3f305a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.802] wcscat (in: _Dest=0x3f305a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.802] wcscat (in: _Dest=0x3f305a0, _Source="J0099160.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" [0222.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f305a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0222.803] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0222.804] wcscmp (_String1="J0099161.JPG", _String2=".") returned 1 [0222.804] wcscmp (_String1="J0099161.JPG", _String2="..") returned 1 [0222.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30490 [0222.804] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.804] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.804] wcscat (in: _Dest=0x3f30490, _Source="J0099161.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" [0222.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0222.805] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0222.805] wcscmp (_String1="J0099162.JPG", _String2=".") returned 1 [0222.805] wcscmp (_String1="J0099162.JPG", _String2="..") returned 1 [0222.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f5e0 [0222.805] wcscpy (in: _Dest=0x3e1f5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.805] wcscat (in: _Dest=0x3e1f5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.805] wcscat (in: _Dest=0x3e1f5e0, _Source="J0099162.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" [0222.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0222.806] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0222.806] wcscmp (_String1="J0099163.WMF", _String2=".") returned 1 [0222.806] wcscmp (_String1="J0099163.WMF", _String2="..") returned 1 [0222.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f778 [0222.806] wcscpy (in: _Dest=0x3e1f778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.806] wcscat (in: _Dest=0x3e1f778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.806] wcscat (in: _Dest=0x3e1f778, _Source="J0099163.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" [0222.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0222.807] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0222.807] wcscmp (_String1="J0099164.WMF", _String2=".") returned 1 [0222.807] wcscmp (_String1="J0099164.WMF", _String2="..") returned 1 [0222.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f668 [0222.808] wcscpy (in: _Dest=0x3e1f668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.808] wcscat (in: _Dest=0x3e1f668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.808] wcscat (in: _Dest=0x3e1f668, _Source="J0099164.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" [0222.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0222.809] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0222.809] wcscmp (_String1="J0099165.JPG", _String2=".") returned 1 [0222.809] wcscmp (_String1="J0099165.JPG", _String2="..") returned 1 [0222.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf338 [0222.809] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.809] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.809] wcscat (in: _Dest=0x81bf338, _Source="J0099165.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" [0222.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0222.810] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0222.810] wcscmp (_String1="J0099166.JPG", _String2=".") returned 1 [0222.810] wcscmp (_String1="J0099166.JPG", _String2="..") returned 1 [0222.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf910 [0222.810] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.810] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.810] wcscat (in: _Dest=0x81bf910, _Source="J0099166.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" [0222.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0222.812] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0222.812] wcscmp (_String1="J0099167.JPG", _String2=".") returned 1 [0222.812] wcscmp (_String1="J0099167.JPG", _String2="..") returned 1 [0222.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0080 [0222.812] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.812] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.812] wcscat (in: _Dest=0x81c0080, _Source="J0099167.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" [0222.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b90 [0222.813] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0222.813] wcscmp (_String1="J0099168.JPG", _String2=".") returned 1 [0222.813] wcscmp (_String1="J0099168.JPG", _String2="..") returned 1 [0222.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf668 [0222.814] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.814] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.814] wcscat (in: _Dest=0x81bf668, _Source="J0099168.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" [0222.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0222.815] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0222.815] wcscmp (_String1="J0099169.WMF", _String2=".") returned 1 [0222.815] wcscmp (_String1="J0099169.WMF", _String2="..") returned 1 [0222.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf888 [0222.815] wcscpy (in: _Dest=0x81bf888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.815] wcscat (in: _Dest=0x81bf888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.815] wcscat (in: _Dest=0x81bf888, _Source="J0099169.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" [0222.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0222.816] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0222.816] wcscmp (_String1="J0099170.WMF", _String2=".") returned 1 [0222.817] wcscmp (_String1="J0099170.WMF", _String2="..") returned 1 [0222.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf2b0 [0222.817] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.817] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.817] wcscat (in: _Dest=0x81bf2b0, _Source="J0099170.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" [0222.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0222.818] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0222.818] wcscmp (_String1="J0099171.WMF", _String2=".") returned 1 [0222.818] wcscmp (_String1="J0099171.WMF", _String2="..") returned 1 [0222.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf778 [0222.818] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.818] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.818] wcscat (in: _Dest=0x81bf778, _Source="J0099171.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" [0222.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0222.819] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0222.819] wcscmp (_String1="J0099172.WMF", _String2=".") returned 1 [0222.819] wcscmp (_String1="J0099172.WMF", _String2="..") returned 1 [0222.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bef80 [0222.819] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.819] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.819] wcscat (in: _Dest=0x81bef80, _Source="J0099172.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" [0222.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0222.820] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0222.820] wcscmp (_String1="J0099173.WMF", _String2=".") returned 1 [0222.820] wcscmp (_String1="J0099173.WMF", _String2="..") returned 1 [0222.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf6f0 [0222.821] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.821] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.821] wcscat (in: _Dest=0x81bf6f0, _Source="J0099173.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" [0222.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d28 [0222.822] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0222.822] wcscmp (_String1="J0099174.WMF", _String2=".") returned 1 [0222.822] wcscmp (_String1="J0099174.WMF", _String2="..") returned 1 [0222.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfb30 [0222.822] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.822] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.822] wcscat (in: _Dest=0x81bfb30, _Source="J0099174.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" [0222.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b98 [0222.986] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0222.986] wcscmp (_String1="J0099175.WMF", _String2=".") returned 1 [0222.986] wcscmp (_String1="J0099175.WMF", _String2="..") returned 1 [0222.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be920 [0222.986] wcscpy (in: _Dest=0x81be920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.986] wcscat (in: _Dest=0x81be920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.986] wcscat (in: _Dest=0x81be920, _Source="J0099175.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" [0223.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0223.038] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0223.038] wcscmp (_String1="J0099176.WMF", _String2=".") returned 1 [0223.038] wcscmp (_String1="J0099176.WMF", _String2="..") returned 1 [0223.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be9a8 [0223.038] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.038] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.038] wcscat (in: _Dest=0x81be9a8, _Source="J0099176.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" [0223.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0223.040] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0223.040] wcscmp (_String1="J0099177.WMF", _String2=".") returned 1 [0223.040] wcscmp (_String1="J0099177.WMF", _String2="..") returned 1 [0223.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be810 [0223.040] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.040] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.040] wcscat (in: _Dest=0x81be810, _Source="J0099177.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" [0223.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0223.041] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0223.041] wcscmp (_String1="J0099178.WMF", _String2=".") returned 1 [0223.041] wcscmp (_String1="J0099178.WMF", _String2="..") returned 1 [0223.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bede8 [0223.041] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.041] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.041] wcscat (in: _Dest=0x81bede8, _Source="J0099178.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" [0223.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0223.042] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0223.043] wcscmp (_String1="J0099179.WMF", _String2=".") returned 1 [0223.043] wcscmp (_String1="J0099179.WMF", _String2="..") returned 1 [0223.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c03b0 [0223.043] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.043] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.043] wcscat (in: _Dest=0x81c03b0, _Source="J0099179.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" [0223.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0223.044] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0223.044] wcscmp (_String1="J0099180.WMF", _String2=".") returned 1 [0223.044] wcscmp (_String1="J0099180.WMF", _String2="..") returned 1 [0223.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf448 [0223.044] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.044] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.044] wcscat (in: _Dest=0x81bf448, _Source="J0099180.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" [0223.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0223.045] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0223.045] wcscmp (_String1="J0099181.WMF", _String2=".") returned 1 [0223.045] wcscmp (_String1="J0099181.WMF", _String2="..") returned 1 [0223.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfaa8 [0223.046] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.046] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.046] wcscat (in: _Dest=0x81bfaa8, _Source="J0099181.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" [0223.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0223.047] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0223.047] wcscmp (_String1="J0099182.WMF", _String2=".") returned 1 [0223.047] wcscmp (_String1="J0099182.WMF", _String2="..") returned 1 [0223.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfbb8 [0223.047] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.047] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.047] wcscat (in: _Dest=0x81bfbb8, _Source="J0099182.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" [0223.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0223.048] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0223.048] wcscmp (_String1="J0099183.WMF", _String2=".") returned 1 [0223.048] wcscmp (_String1="J0099183.WMF", _String2="..") returned 1 [0223.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfcc8 [0223.048] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.048] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.048] wcscat (in: _Dest=0x81bfcc8, _Source="J0099183.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" [0223.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0223.049] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0223.361] wcscmp (_String1="J0099184.WMF", _String2=".") returned 1 [0223.361] wcscmp (_String1="J0099184.WMF", _String2="..") returned 1 [0223.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf090 [0223.361] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.361] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.361] wcscat (in: _Dest=0x81bf090, _Source="J0099184.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" [0223.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e8 [0223.362] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0223.362] wcscmp (_String1="J0099185.JPG", _String2=".") returned 1 [0223.362] wcscmp (_String1="J0099185.JPG", _String2="..") returned 1 [0223.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf008 [0223.362] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.362] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.362] wcscat (in: _Dest=0x81bf008, _Source="J0099185.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" [0223.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0223.363] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad71cf00, ftCreationTime.dwHighDateTime=0x1bdbfd8, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad71cf00, ftLastWriteTime.dwHighDateTime=0x1bdbfd8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0223.363] wcscmp (_String1="J0099186.JPG", _String2=".") returned 1 [0223.364] wcscmp (_String1="J0099186.JPG", _String2="..") returned 1 [0223.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfdd8 [0223.364] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.364] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.364] wcscat (in: _Dest=0x81bfdd8, _Source="J0099186.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" [0223.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0223.366] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5199400, ftCreationTime.dwHighDateTime=0x1bdbfd8, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5199400, ftLastWriteTime.dwHighDateTime=0x1bdbfd8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0223.366] wcscmp (_String1="J0099187.JPG", _String2=".") returned 1 [0223.366] wcscmp (_String1="J0099187.JPG", _String2="..") returned 1 [0223.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0223.366] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.366] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.366] wcscat (in: _Dest=0x81bf1a0, _Source="J0099187.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" [0223.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2974 [0223.367] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0223.367] wcscmp (_String1="J0099188.JPG", _String2=".") returned 1 [0223.367] wcscmp (_String1="J0099188.JPG", _String2="..") returned 1 [0223.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beab8 [0223.367] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.367] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.367] wcscat (in: _Dest=0x81beab8, _Source="J0099188.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" [0223.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0223.368] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0223.368] wcscmp (_String1="J0099189.JPG", _String2=".") returned 1 [0223.368] wcscmp (_String1="J0099189.JPG", _String2="..") returned 1 [0223.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf4d0 [0223.368] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.368] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.369] wcscat (in: _Dest=0x81bf4d0, _Source="J0099189.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" [0223.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0223.369] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0223.369] wcscmp (_String1="J0099190.JPG", _String2=".") returned 1 [0223.369] wcscmp (_String1="J0099190.JPG", _String2="..") returned 1 [0223.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfa20 [0223.370] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.370] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.370] wcscat (in: _Dest=0x81bfa20, _Source="J0099190.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" [0223.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0223.370] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0223.370] wcscmp (_String1="J0099191.JPG", _String2=".") returned 1 [0223.371] wcscmp (_String1="J0099191.JPG", _String2="..") returned 1 [0223.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be568 [0223.371] wcscpy (in: _Dest=0x81be568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.371] wcscat (in: _Dest=0x81be568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.371] wcscat (in: _Dest=0x81be568, _Source="J0099191.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" [0223.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0223.371] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0223.372] wcscmp (_String1="J0099192.GIF", _String2=".") returned 1 [0223.372] wcscmp (_String1="J0099192.GIF", _String2="..") returned 1 [0223.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c02a0 [0223.372] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.372] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.372] wcscat (in: _Dest=0x81c02a0, _Source="J0099192.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" [0223.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0223.373] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0223.373] wcscmp (_String1="J0099193.GIF", _String2=".") returned 1 [0223.373] wcscmp (_String1="J0099193.GIF", _String2="..") returned 1 [0223.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be5f0 [0223.373] wcscpy (in: _Dest=0x81be5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.373] wcscat (in: _Dest=0x81be5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.373] wcscat (in: _Dest=0x81be5f0, _Source="J0099193.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" [0223.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0223.374] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0223.374] wcscmp (_String1="J0099194.GIF", _String2=".") returned 1 [0223.374] wcscmp (_String1="J0099194.GIF", _String2="..") returned 1 [0223.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf800 [0223.374] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.374] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.374] wcscat (in: _Dest=0x81bf800, _Source="J0099194.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" [0223.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0223.375] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0223.375] wcscmp (_String1="J0099195.GIF", _String2=".") returned 1 [0223.375] wcscmp (_String1="J0099195.GIF", _String2="..") returned 1 [0223.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0218 [0223.375] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.375] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.375] wcscat (in: _Dest=0x81c0218, _Source="J0099195.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" [0223.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0223.375] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0223.376] wcscmp (_String1="J0099196.GIF", _String2=".") returned 1 [0223.376] wcscmp (_String1="J0099196.GIF", _String2="..") returned 1 [0223.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beb40 [0223.376] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.376] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.376] wcscat (in: _Dest=0x81beb40, _Source="J0099196.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" [0223.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0223.377] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0223.377] wcscmp (_String1="J0099197.GIF", _String2=".") returned 1 [0223.377] wcscmp (_String1="J0099197.GIF", _String2="..") returned 1 [0223.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beef8 [0223.377] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.377] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.377] wcscat (in: _Dest=0x81beef8, _Source="J0099197.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" [0223.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0223.378] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0223.378] wcscmp (_String1="J0099198.GIF", _String2=".") returned 1 [0223.378] wcscmp (_String1="J0099198.GIF", _String2="..") returned 1 [0223.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0223.378] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.378] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.378] wcscat (in: _Dest=0x81bebc8, _Source="J0099198.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" [0223.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0223.383] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0223.384] wcscmp (_String1="J0099199.GIF", _String2=".") returned 1 [0223.384] wcscmp (_String1="J0099199.GIF", _String2="..") returned 1 [0223.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bed60 [0223.384] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.384] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.384] wcscat (in: _Dest=0x81bed60, _Source="J0099199.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" [0223.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0223.385] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0223.385] wcscmp (_String1="J0099200.GIF", _String2=".") returned 1 [0223.385] wcscmp (_String1="J0099200.GIF", _String2="..") returned 1 [0223.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf998 [0223.385] wcscpy (in: _Dest=0x81bf998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.385] wcscat (in: _Dest=0x81bf998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.385] wcscat (in: _Dest=0x81bf998, _Source="J0099200.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" [0223.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0223.386] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0223.386] wcscmp (_String1="J0099201.GIF", _String2=".") returned 1 [0223.386] wcscmp (_String1="J0099201.GIF", _String2="..") returned 1 [0223.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0223.386] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.386] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.386] wcscat (in: _Dest=0x81be458, _Source="J0099201.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" [0223.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f4 [0223.387] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0223.387] wcscmp (_String1="J0099202.GIF", _String2=".") returned 1 [0223.387] wcscmp (_String1="J0099202.GIF", _String2="..") returned 1 [0223.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bff70 [0223.387] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.387] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.388] wcscat (in: _Dest=0x81bff70, _Source="J0099202.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" [0223.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0223.389] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0223.389] wcscmp (_String1="J0099203.GIF", _String2=".") returned 1 [0223.389] wcscmp (_String1="J0099203.GIF", _String2="..") returned 1 [0223.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0223.389] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.389] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.389] wcscat (in: _Dest=0x81bee70, _Source="J0099203.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" [0223.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28fc [0223.390] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0223.390] wcscmp (_String1="J0099204.WMF", _String2=".") returned 1 [0223.390] wcscmp (_String1="J0099204.WMF", _String2="..") returned 1 [0223.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf228 [0223.390] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.390] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.390] wcscat (in: _Dest=0x81bf228, _Source="J0099204.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" [0223.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0223.392] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0223.392] wcscmp (_String1="J0099205.WMF", _String2=".") returned 1 [0223.392] wcscmp (_String1="J0099205.WMF", _String2="..") returned 1 [0223.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf118 [0223.392] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.392] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.392] wcscat (in: _Dest=0x81bf118, _Source="J0099205.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" [0223.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0223.393] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52558e00, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x52558e00, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0223.393] wcscmp (_String1="J0101856.BMP", _String2=".") returned 1 [0223.393] wcscmp (_String1="J0101856.BMP", _String2="..") returned 1 [0223.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfe60 [0223.393] wcscpy (in: _Dest=0x81bfe60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.393] wcscat (in: _Dest=0x81bfe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.393] wcscat (in: _Dest=0x81bfe60, _Source="J0101856.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" [0223.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0223.394] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b7e800, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54b7e800, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0223.394] wcscmp (_String1="J0101857.BMP", _String2=".") returned 1 [0223.394] wcscmp (_String1="J0101857.BMP", _String2="..") returned 1 [0223.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be898 [0223.394] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.394] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.395] wcscat (in: _Dest=0x81be898, _Source="J0101857.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" [0223.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0223.395] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bdef600, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5bdef600, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0223.395] wcscmp (_String1="J0101858.BMP", _String2=".") returned 1 [0223.395] wcscmp (_String1="J0101858.BMP", _String2="..") returned 1 [0223.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81becd8 [0223.396] wcscpy (in: _Dest=0x81becd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.396] wcscat (in: _Dest=0x81becd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.396] wcscat (in: _Dest=0x81becd8, _Source="J0101858.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" [0223.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81becd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0223.397] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a51800, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41a51800, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0223.397] wcscmp (_String1="J0101859.BMP", _String2=".") returned 1 [0223.397] wcscmp (_String1="J0101859.BMP", _String2="..") returned 1 [0223.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfd50 [0223.397] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.397] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.397] wcscat (in: _Dest=0x81bfd50, _Source="J0101859.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" [0223.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0223.398] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44077200, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44077200, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0223.398] wcscmp (_String1="J0101860.BMP", _String2=".") returned 1 [0223.398] wcscmp (_String1="J0101860.BMP", _String2="..") returned 1 [0223.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053a78 [0223.398] wcscpy (in: _Dest=0x8053a78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.398] wcscat (in: _Dest=0x8053a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.398] wcscat (in: _Dest=0x8053a78, _Source="J0101860.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" [0223.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b7c [0223.399] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479af900, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x479af900, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0223.399] wcscmp (_String1="J0101861.BMP", _String2=".") returned 1 [0223.399] wcscmp (_String1="J0101861.BMP", _String2="..") returned 1 [0223.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80540d8 [0223.399] wcscpy (in: _Dest=0x80540d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.399] wcscat (in: _Dest=0x80540d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.399] wcscat (in: _Dest=0x80540d8, _Source="J0101861.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" [0223.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80540d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0223.400] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2e8000, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b2e8000, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0223.400] wcscmp (_String1="J0101862.BMP", _String2=".") returned 1 [0223.401] wcscmp (_String1="J0101862.BMP", _String2="..") returned 1 [0223.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054628 [0223.401] wcscpy (in: _Dest=0x8054628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.401] wcscat (in: _Dest=0x8054628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.401] wcscat (in: _Dest=0x8054628, _Source="J0101862.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" [0223.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0223.499] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571a4200, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x571a4200, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0223.499] wcscmp (_String1="J0101863.BMP", _String2=".") returned 1 [0223.499] wcscmp (_String1="J0101863.BMP", _String2="..") returned 1 [0223.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053d20 [0223.499] wcscpy (in: _Dest=0x8053d20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.499] wcscat (in: _Dest=0x8053d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.499] wcscat (in: _Dest=0x8053d20, _Source="J0101863.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" [0223.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0223.616] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597c9c00, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x597c9c00, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0223.616] wcscmp (_String1="J0101864.BMP", _String2=".") returned 1 [0223.616] wcscmp (_String1="J0101864.BMP", _String2="..") returned 1 [0223.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf558 [0223.616] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.616] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.616] wcscat (in: _Dest=0x81bf558, _Source="J0101864.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" [0223.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0223.618] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec20700, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ec20700, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0223.618] wcscmp (_String1="J0101865.BMP", _String2=".") returned 1 [0223.618] wcscmp (_String1="J0101865.BMP", _String2="..") returned 1 [0223.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053968 [0223.618] wcscpy (in: _Dest=0x8053968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.618] wcscat (in: _Dest=0x8053968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.618] wcscat (in: _Dest=0x8053968, _Source="J0101865.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" [0223.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0223.619] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff33400, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ff33400, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0223.619] wcscmp (_String1="J0101866.BMP", _String2=".") returned 1 [0223.619] wcscmp (_String1="J0101866.BMP", _String2="..") returned 1 [0223.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80538e0 [0223.619] wcscpy (in: _Dest=0x80538e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.619] wcscat (in: _Dest=0x80538e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.619] wcscat (in: _Dest=0x80538e0, _Source="J0101866.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" [0223.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80538e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0223.620] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f42be00, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f42be00, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0223.620] wcscmp (_String1="J0101867.BMP", _String2=".") returned 1 [0223.620] wcscmp (_String1="J0101867.BMP", _String2="..") returned 1 [0223.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053390 [0223.620] wcscpy (in: _Dest=0x8053390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.620] wcscat (in: _Dest=0x8053390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.621] wcscat (in: _Dest=0x8053390, _Source="J0101867.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" [0223.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0223.621] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0223.833] wcscmp (_String1="J0101980.WMF", _String2=".") returned 1 [0223.833] wcscmp (_String1="J0101980.WMF", _String2="..") returned 1 [0223.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053da8 [0223.833] wcscpy (in: _Dest=0x8053da8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.833] wcscat (in: _Dest=0x8053da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.833] wcscat (in: _Dest=0x8053da8, _Source="J0101980.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" [0223.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0223.859] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0223.859] wcscmp (_String1="J0102002.WMF", _String2=".") returned 1 [0223.859] wcscmp (_String1="J0102002.WMF", _String2="..") returned 1 [0223.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054490 [0223.859] wcscpy (in: _Dest=0x8054490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.860] wcscat (in: _Dest=0x8054490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.860] wcscat (in: _Dest=0x8054490, _Source="J0102002.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" [0223.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c8 [0223.861] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0223.861] wcscmp (_String1="J0102594.WMF", _String2=".") returned 1 [0223.861] wcscmp (_String1="J0102594.WMF", _String2="..") returned 1 [0223.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054408 [0223.861] wcscpy (in: _Dest=0x8054408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.861] wcscat (in: _Dest=0x8054408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.861] wcscat (in: _Dest=0x8054408, _Source="J0102594.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" [0223.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0223.862] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0223.862] wcscmp (_String1="J0102762.WMF", _String2=".") returned 1 [0223.862] wcscmp (_String1="J0102762.WMF", _String2="..") returned 1 [0223.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80535b0 [0223.862] wcscpy (in: _Dest=0x80535b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.862] wcscat (in: _Dest=0x80535b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.862] wcscat (in: _Dest=0x80535b0, _Source="J0102762.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" [0223.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80535b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0223.863] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0223.863] wcscmp (_String1="J0102984.WMF", _String2=".") returned 1 [0223.863] wcscmp (_String1="J0102984.WMF", _String2="..") returned 1 [0223.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053528 [0223.863] wcscpy (in: _Dest=0x8053528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.863] wcscat (in: _Dest=0x8053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.863] wcscat (in: _Dest=0x8053528, _Source="J0102984.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" [0223.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0223.864] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0223.864] wcscmp (_String1="J0103058.WMF", _String2=".") returned 1 [0223.864] wcscmp (_String1="J0103058.WMF", _String2="..") returned 1 [0223.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053638 [0223.864] wcscpy (in: _Dest=0x8053638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.864] wcscat (in: _Dest=0x8053638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.864] wcscat (in: _Dest=0x8053638, _Source="J0103058.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" [0223.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0223.865] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0223.865] wcscmp (_String1="J0103262.WMF", _String2=".") returned 1 [0223.865] wcscmp (_String1="J0103262.WMF", _String2="..") returned 1 [0223.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80536c0 [0223.865] wcscpy (in: _Dest=0x80536c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.865] wcscat (in: _Dest=0x80536c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.865] wcscat (in: _Dest=0x80536c0, _Source="J0103262.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" [0223.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80536c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0223.866] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0223.867] wcscmp (_String1="J0103402.WMF", _String2=".") returned 1 [0223.867] wcscmp (_String1="J0103402.WMF", _String2="..") returned 1 [0223.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053748 [0223.867] wcscpy (in: _Dest=0x8053748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.867] wcscat (in: _Dest=0x8053748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.867] wcscat (in: _Dest=0x8053748, _Source="J0103402.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" [0223.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680 [0223.868] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0223.868] wcscmp (_String1="J0103812.WMF", _String2=".") returned 1 [0223.868] wcscmp (_String1="J0103812.WMF", _String2="..") returned 1 [0223.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80537d0 [0223.868] wcscpy (in: _Dest=0x80537d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.868] wcscat (in: _Dest=0x80537d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.868] wcscat (in: _Dest=0x80537d0, _Source="J0103812.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" [0223.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80537d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0223.869] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0223.869] wcscmp (_String1="J0103850.WMF", _String2=".") returned 1 [0223.869] wcscmp (_String1="J0103850.WMF", _String2="..") returned 1 [0223.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054160 [0223.869] wcscpy (in: _Dest=0x8054160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.869] wcscat (in: _Dest=0x8054160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.869] wcscat (in: _Dest=0x8054160, _Source="J0103850.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" [0223.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098 [0223.870] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0223.870] wcscmp (_String1="J0105230.WMF", _String2=".") returned 1 [0223.870] wcscmp (_String1="J0105230.WMF", _String2="..") returned 1 [0223.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8052f50 [0223.871] wcscpy (in: _Dest=0x8052f50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.871] wcscat (in: _Dest=0x8052f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.871] wcscat (in: _Dest=0x8052f50, _Source="J0105230.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" [0223.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8052f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0223.872] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0223.872] wcscmp (_String1="J0105232.WMF", _String2=".") returned 1 [0223.872] wcscmp (_String1="J0105232.WMF", _String2="..") returned 1 [0223.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053b00 [0223.872] wcscpy (in: _Dest=0x8053b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.872] wcscat (in: _Dest=0x8053b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.872] wcscat (in: _Dest=0x8053b00, _Source="J0105232.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" [0223.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0223.873] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0223.873] wcscmp (_String1="J0105234.WMF", _String2=".") returned 1 [0223.873] wcscmp (_String1="J0105234.WMF", _String2="..") returned 1 [0223.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053858 [0223.873] wcscpy (in: _Dest=0x8053858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.873] wcscat (in: _Dest=0x8053858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.873] wcscat (in: _Dest=0x8053858, _Source="J0105234.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" [0223.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0223.874] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0223.874] wcscmp (_String1="J0105238.WMF", _String2=".") returned 1 [0223.874] wcscmp (_String1="J0105238.WMF", _String2="..") returned 1 [0223.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80539f0 [0223.875] wcscpy (in: _Dest=0x80539f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.875] wcscat (in: _Dest=0x80539f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.875] wcscat (in: _Dest=0x80539f0, _Source="J0105238.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" [0223.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80539f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0223.876] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0223.876] wcscmp (_String1="J0105240.WMF", _String2=".") returned 1 [0223.876] wcscmp (_String1="J0105240.WMF", _String2="..") returned 1 [0223.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053fc8 [0223.876] wcscpy (in: _Dest=0x8053fc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.876] wcscat (in: _Dest=0x8053fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.876] wcscat (in: _Dest=0x8053fc8, _Source="J0105240.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" [0223.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0223.877] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0223.877] wcscmp (_String1="J0105244.WMF", _String2=".") returned 1 [0223.877] wcscmp (_String1="J0105244.WMF", _String2="..") returned 1 [0223.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053eb8 [0223.877] wcscpy (in: _Dest=0x8053eb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.877] wcscat (in: _Dest=0x8053eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.877] wcscat (in: _Dest=0x8053eb8, _Source="J0105244.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" [0223.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0223.878] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0223.879] wcscmp (_String1="J0105246.WMF", _String2=".") returned 1 [0223.879] wcscmp (_String1="J0105246.WMF", _String2="..") returned 1 [0223.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80534a0 [0223.879] wcscpy (in: _Dest=0x80534a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.879] wcscat (in: _Dest=0x80534a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.879] wcscat (in: _Dest=0x80534a0, _Source="J0105246.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" [0223.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80534a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0223.880] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0223.880] wcscmp (_String1="J0105250.WMF", _String2=".") returned 1 [0223.880] wcscmp (_String1="J0105250.WMF", _String2="..") returned 1 [0223.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053b88 [0223.880] wcscpy (in: _Dest=0x8053b88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.880] wcscat (in: _Dest=0x8053b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.880] wcscat (in: _Dest=0x8053b88, _Source="J0105250.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" [0223.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0223.881] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0223.881] wcscmp (_String1="J0105266.WMF", _String2=".") returned 1 [0223.881] wcscmp (_String1="J0105266.WMF", _String2="..") returned 1 [0223.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053280 [0223.881] wcscpy (in: _Dest=0x8053280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.881] wcscat (in: _Dest=0x8053280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.881] wcscat (in: _Dest=0x8053280, _Source="J0105266.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" [0223.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0223.882] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0223.882] wcscmp (_String1="J0105272.WMF", _String2=".") returned 1 [0223.882] wcscmp (_String1="J0105272.WMF", _String2="..") returned 1 [0223.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053c10 [0223.882] wcscpy (in: _Dest=0x8053c10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.882] wcscat (in: _Dest=0x8053c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.882] wcscat (in: _Dest=0x8053c10, _Source="J0105272.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" [0223.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0223.883] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0223.883] wcscmp (_String1="J0105276.WMF", _String2=".") returned 1 [0223.883] wcscmp (_String1="J0105276.WMF", _String2="..") returned 1 [0223.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f638 [0223.883] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.883] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.883] wcscat (in: _Dest=0x3f2f638, _Source="J0105276.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" [0223.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0223.884] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0223.885] wcscmp (_String1="J0105280.WMF", _String2=".") returned 1 [0223.885] wcscmp (_String1="J0105280.WMF", _String2="..") returned 1 [0223.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f308d0 [0223.885] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.885] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.885] wcscat (in: _Dest=0x3f308d0, _Source="J0105280.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" [0223.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0223.886] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0223.886] wcscmp (_String1="J0105282.WMF", _String2=".") returned 1 [0223.886] wcscmp (_String1="J0105282.WMF", _String2="..") returned 1 [0223.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ffc8 [0223.886] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.886] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.886] wcscat (in: _Dest=0x3f2ffc8, _Source="J0105282.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" [0223.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0223.887] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0223.887] wcscmp (_String1="J0105286.WMF", _String2=".") returned 1 [0223.887] wcscmp (_String1="J0105286.WMF", _String2="..") returned 1 [0223.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30270 [0223.887] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.887] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.887] wcscat (in: _Dest=0x3f30270, _Source="J0105286.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" [0223.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0223.888] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0223.888] wcscmp (_String1="J0105288.WMF", _String2=".") returned 1 [0223.888] wcscmp (_String1="J0105288.WMF", _String2="..") returned 1 [0223.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f7d0 [0223.888] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.888] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.888] wcscat (in: _Dest=0x3f2f7d0, _Source="J0105288.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" [0223.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0223.889] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0223.889] wcscmp (_String1="J0105292.WMF", _String2=".") returned 1 [0223.889] wcscmp (_String1="J0105292.WMF", _String2="..") returned 1 [0223.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f418 [0223.889] wcscpy (in: _Dest=0x3f2f418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.889] wcscat (in: _Dest=0x3f2f418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.889] wcscat (in: _Dest=0x3f2f418, _Source="J0105292.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" [0223.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0223.891] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0223.891] wcscmp (_String1="J0105294.WMF", _String2=".") returned 1 [0223.891] wcscmp (_String1="J0105294.WMF", _String2="..") returned 1 [0223.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30958 [0223.891] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.891] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.891] wcscat (in: _Dest=0x3f30958, _Source="J0105294.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" [0223.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0223.892] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0223.893] wcscmp (_String1="J0105298.WMF", _String2=".") returned 1 [0223.893] wcscmp (_String1="J0105298.WMF", _String2="..") returned 1 [0223.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc98 [0223.893] wcscpy (in: _Dest=0x3f2fc98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.893] wcscat (in: _Dest=0x3f2fc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.893] wcscat (in: _Dest=0x3f2fc98, _Source="J0105298.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" [0223.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0223.894] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0223.894] wcscmp (_String1="J0105306.WMF", _String2=".") returned 1 [0223.894] wcscmp (_String1="J0105306.WMF", _String2="..") returned 1 [0223.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30fb8 [0223.894] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0223.894] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0223.894] wcscat (in: _Dest=0x3f30fb8, _Source="J0105306.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" [0223.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0224.844] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0224.844] wcscmp (_String1="J0105320.WMF", _String2=".") returned 1 [0224.844] wcscmp (_String1="J0105320.WMF", _String2="..") returned 1 [0224.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30738 [0224.844] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0224.844] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0224.845] wcscat (in: _Dest=0x3f30738, _Source="J0105320.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" [0224.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0224.846] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0224.846] wcscmp (_String1="J0105328.WMF", _String2=".") returned 1 [0224.846] wcscmp (_String1="J0105328.WMF", _String2="..") returned 1 [0224.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ff40 [0224.846] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0224.846] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0224.846] wcscat (in: _Dest=0x3f2ff40, _Source="J0105328.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" [0224.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0224.853] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0224.854] wcscmp (_String1="J0105332.WMF", _String2=".") returned 1 [0224.854] wcscmp (_String1="J0105332.WMF", _String2="..") returned 1 [0224.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30050 [0224.854] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0224.854] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0224.854] wcscat (in: _Dest=0x3f30050, _Source="J0105332.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" [0224.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0224.855] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0224.855] wcscmp (_String1="J0105336.WMF", _String2=".") returned 1 [0224.855] wcscmp (_String1="J0105336.WMF", _String2="..") returned 1 [0224.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0224.856] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0224.856] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0224.856] wcscat (in: _Dest=0x3f310c8, _Source="J0105336.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" [0224.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0224.857] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0224.857] wcscmp (_String1="J0105338.WMF", _String2=".") returned 1 [0224.857] wcscmp (_String1="J0105338.WMF", _String2="..") returned 1 [0224.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30408 [0224.857] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0224.857] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0224.857] wcscat (in: _Dest=0x3f30408, _Source="J0105338.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" [0224.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0224.859] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0225.006] wcscmp (_String1="J0105348.WMF", _String2=".") returned 1 [0225.006] wcscmp (_String1="J0105348.WMF", _String2="..") returned 1 [0225.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bea30 [0225.007] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.007] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.007] wcscat (in: _Dest=0x81bea30, _Source="J0105348.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" [0225.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c4 [0225.008] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0225.008] wcscmp (_String1="J0105360.WMF", _String2=".") returned 1 [0225.008] wcscmp (_String1="J0105360.WMF", _String2="..") returned 1 [0225.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be4e0 [0225.008] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.008] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.008] wcscat (in: _Dest=0x81be4e0, _Source="J0105360.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" [0225.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2878 [0225.009] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0225.009] wcscmp (_String1="J0105368.WMF", _String2=".") returned 1 [0225.009] wcscmp (_String1="J0105368.WMF", _String2="..") returned 1 [0225.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bec50 [0225.010] wcscpy (in: _Dest=0x81bec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.010] wcscat (in: _Dest=0x81bec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.010] wcscat (in: _Dest=0x81bec50, _Source="J0105368.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" [0225.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0225.011] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0225.011] wcscmp (_String1="J0105376.WMF", _String2=".") returned 1 [0225.011] wcscmp (_String1="J0105376.WMF", _String2="..") returned 1 [0225.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0108 [0225.011] wcscpy (in: _Dest=0x81c0108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.011] wcscat (in: _Dest=0x81c0108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.011] wcscat (in: _Dest=0x81c0108, _Source="J0105376.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" [0225.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0225.012] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0225.012] wcscmp (_String1="J0105378.WMF", _String2=".") returned 1 [0225.012] wcscmp (_String1="J0105378.WMF", _String2="..") returned 1 [0225.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfc40 [0225.012] wcscpy (in: _Dest=0x81bfc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.012] wcscat (in: _Dest=0x81bfc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.012] wcscat (in: _Dest=0x81bfc40, _Source="J0105378.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" [0225.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0225.013] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0225.013] wcscmp (_String1="J0105380.WMF", _String2=".") returned 1 [0225.013] wcscmp (_String1="J0105380.WMF", _String2="..") returned 1 [0225.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30f30 [0225.014] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.014] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.014] wcscat (in: _Dest=0x3f30f30, _Source="J0105380.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" [0225.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0225.015] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0225.015] wcscmp (_String1="J0105384.WMF", _String2=".") returned 1 [0225.015] wcscmp (_String1="J0105384.WMF", _String2="..") returned 1 [0225.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30518 [0225.015] wcscpy (in: _Dest=0x3f30518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.015] wcscat (in: _Dest=0x3f30518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.015] wcscat (in: _Dest=0x3f30518, _Source="J0105384.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" [0225.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0225.016] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0225.016] wcscmp (_String1="J0105386.WMF", _String2=".") returned 1 [0225.016] wcscmp (_String1="J0105386.WMF", _String2="..") returned 1 [0225.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f9f0 [0225.017] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.017] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.017] wcscat (in: _Dest=0x3f2f9f0, _Source="J0105386.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" [0225.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0225.018] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0225.018] wcscmp (_String1="J0105388.WMF", _String2=".") returned 1 [0225.018] wcscmp (_String1="J0105388.WMF", _String2="..") returned 1 [0225.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30628 [0225.018] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.018] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.018] wcscat (in: _Dest=0x3f30628, _Source="J0105388.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" [0225.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0225.019] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0225.019] wcscmp (_String1="J0105390.WMF", _String2=".") returned 1 [0225.019] wcscmp (_String1="J0105390.WMF", _String2="..") returned 1 [0225.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f5b0 [0225.019] wcscpy (in: _Dest=0x3f2f5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.019] wcscat (in: _Dest=0x3f2f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.019] wcscat (in: _Dest=0x3f2f5b0, _Source="J0105390.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" [0225.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0225.020] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0225.020] wcscmp (_String1="J0105396.WMF", _String2=".") returned 1 [0225.020] wcscmp (_String1="J0105396.WMF", _String2="..") returned 1 [0225.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30160 [0225.021] wcscpy (in: _Dest=0x3f30160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.021] wcscat (in: _Dest=0x3f30160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.021] wcscat (in: _Dest=0x3f30160, _Source="J0105396.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" [0225.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0225.022] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0225.022] wcscmp (_String1="J0105398.WMF", _String2=".") returned 1 [0225.022] wcscmp (_String1="J0105398.WMF", _String2="..") returned 1 [0225.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2feb8 [0225.022] wcscpy (in: _Dest=0x3f2feb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.022] wcscat (in: _Dest=0x3f2feb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.022] wcscat (in: _Dest=0x3f2feb8, _Source="J0105398.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" [0225.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2feb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0 [0225.023] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0225.023] wcscmp (_String1="J0105410.WMF", _String2=".") returned 1 [0225.023] wcscmp (_String1="J0105410.WMF", _String2="..") returned 1 [0225.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f301e8 [0225.024] wcscpy (in: _Dest=0x3f301e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.024] wcscat (in: _Dest=0x3f301e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.024] wcscat (in: _Dest=0x3f301e8, _Source="J0105410.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" [0225.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f301e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0225.025] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0225.025] wcscmp (_String1="J0105412.WMF", _String2=".") returned 1 [0225.025] wcscmp (_String1="J0105412.WMF", _String2="..") returned 1 [0225.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fd20 [0225.025] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.025] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.025] wcscat (in: _Dest=0x3f2fd20, _Source="J0105412.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" [0225.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0225.026] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0225.026] wcscmp (_String1="J0105414.WMF", _String2=".") returned 1 [0225.026] wcscmp (_String1="J0105414.WMF", _String2="..") returned 1 [0225.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f4a0 [0225.026] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.026] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.026] wcscat (in: _Dest=0x3f2f4a0, _Source="J0105414.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" [0225.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0225.028] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0225.028] wcscmp (_String1="J0105490.WMF", _String2=".") returned 1 [0225.028] wcscmp (_String1="J0105490.WMF", _String2="..") returned 1 [0225.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30b78 [0225.028] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.028] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.028] wcscat (in: _Dest=0x3f30b78, _Source="J0105490.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" [0225.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0225.029] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0225.029] wcscmp (_String1="J0105496.WMF", _String2=".") returned 1 [0225.029] wcscmp (_String1="J0105496.WMF", _String2="..") returned 1 [0225.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c00 [0225.029] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.029] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.029] wcscat (in: _Dest=0x3f30c00, _Source="J0105496.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" [0225.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0225.030] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0225.031] wcscmp (_String1="J0105502.WMF", _String2=".") returned 1 [0225.031] wcscmp (_String1="J0105502.WMF", _String2="..") returned 1 [0225.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31370 [0225.031] wcscpy (in: _Dest=0x3f31370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.031] wcscat (in: _Dest=0x3f31370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.031] wcscat (in: _Dest=0x3f31370, _Source="J0105502.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" [0225.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0225.181] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0225.181] wcscmp (_String1="J0105504.WMF", _String2=".") returned 1 [0225.181] wcscmp (_String1="J0105504.WMF", _String2="..") returned 1 [0225.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36f3e0 [0225.181] wcscpy (in: _Dest=0x36f3e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.181] wcscat (in: _Dest=0x36f3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.181] wcscat (in: _Dest=0x36f3e0, _Source="J0105504.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" [0225.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0225.182] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0225.182] wcscmp (_String1="J0105506.WMF", _String2=".") returned 1 [0225.182] wcscmp (_String1="J0105506.WMF", _String2="..") returned 1 [0225.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e588 [0225.182] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.182] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.182] wcscat (in: _Dest=0x36e588, _Source="J0105506.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" [0225.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0225.183] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0225.183] wcscmp (_String1="J0105520.WMF", _String2=".") returned 1 [0225.183] wcscmp (_String1="J0105520.WMF", _String2="..") returned 1 [0225.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0225.183] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.183] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.183] wcscat (in: _Dest=0x36e478, _Source="J0105520.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" [0225.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0225.184] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0225.184] wcscmp (_String1="J0105526.WMF", _String2=".") returned 1 [0225.184] wcscmp (_String1="J0105526.WMF", _String2="..") returned 1 [0225.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0225.184] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.184] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.184] wcscat (in: _Dest=0x36e500, _Source="J0105526.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" [0225.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0225.185] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0225.185] wcscmp (_String1="J0105530.WMF", _String2=".") returned 1 [0225.185] wcscmp (_String1="J0105530.WMF", _String2="..") returned 1 [0225.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e830 [0225.185] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.185] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.185] wcscat (in: _Dest=0x36e830, _Source="J0105530.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" [0225.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0225.186] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0225.186] wcscmp (_String1="J0105588.WMF", _String2=".") returned 1 [0225.186] wcscmp (_String1="J0105588.WMF", _String2="..") returned 1 [0225.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36fc60 [0225.186] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.186] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.186] wcscat (in: _Dest=0x36fc60, _Source="J0105588.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" [0225.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0225.187] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0225.187] wcscmp (_String1="J0105600.WMF", _String2=".") returned 1 [0225.187] wcscmp (_String1="J0105600.WMF", _String2="..") returned 1 [0225.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0225.187] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.187] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.187] wcscat (in: _Dest=0x36ecf8, _Source="J0105600.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" [0225.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0225.188] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0225.188] wcscmp (_String1="J0105638.WMF", _String2=".") returned 1 [0225.188] wcscmp (_String1="J0105638.WMF", _String2="..") returned 1 [0225.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ead8 [0225.188] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.188] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.188] wcscat (in: _Dest=0x36ead8, _Source="J0105638.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" [0225.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2894 [0225.189] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0225.189] wcscmp (_String1="J0105710.WMF", _String2=".") returned 1 [0225.189] wcscmp (_String1="J0105710.WMF", _String2="..") returned 1 [0225.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ebc8 [0225.189] wcscpy (in: _Dest=0x3e1ebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.189] wcscat (in: _Dest=0x3e1ebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.189] wcscat (in: _Dest=0x3e1ebc8, _Source="J0105710.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" [0225.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2660 [0225.190] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0225.190] wcscmp (_String1="J0105846.WMF", _String2=".") returned 1 [0225.190] wcscmp (_String1="J0105846.WMF", _String2="..") returned 1 [0225.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f338 [0225.190] wcscpy (in: _Dest=0x3e1f338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.190] wcscat (in: _Dest=0x3e1f338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.190] wcscat (in: _Dest=0x3e1f338, _Source="J0105846.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" [0225.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2898 [0225.191] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0225.191] wcscmp (_String1="J0105912.WMF", _String2=".") returned 1 [0225.191] wcscmp (_String1="J0105912.WMF", _String2="..") returned 1 [0225.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eef8 [0225.191] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.191] wcscat (in: _Dest=0x3e1eef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.191] wcscat (in: _Dest=0x3e1eef8, _Source="J0105912.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" [0225.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0225.193] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0225.193] wcscmp (_String1="J0105974.WMF", _String2=".") returned 1 [0225.193] wcscmp (_String1="J0105974.WMF", _String2="..") returned 1 [0225.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fff8 [0225.193] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.193] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.193] wcscat (in: _Dest=0x3e1fff8, _Source="J0105974.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" [0225.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0225.194] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0225.194] wcscmp (_String1="J0106020.WMF", _String2=".") returned 1 [0225.194] wcscmp (_String1="J0106020.WMF", _String2="..") returned 1 [0225.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f800 [0225.194] wcscpy (in: _Dest=0x3e1f800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.194] wcscat (in: _Dest=0x3e1f800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.194] wcscat (in: _Dest=0x3e1f800, _Source="J0106020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" [0225.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0225.195] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0225.195] wcscmp (_String1="J0106124.WMF", _String2=".") returned 1 [0225.195] wcscmp (_String1="J0106124.WMF", _String2="..") returned 1 [0225.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f1a0 [0225.195] wcscpy (in: _Dest=0x3e1f1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.195] wcscat (in: _Dest=0x3e1f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.195] wcscat (in: _Dest=0x3e1f1a0, _Source="J0106124.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" [0225.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0225.196] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0225.196] wcscmp (_String1="J0106146.WMF", _String2=".") returned 1 [0225.196] wcscmp (_String1="J0106146.WMF", _String2="..") returned 1 [0225.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a5f8 [0225.196] wcscpy (in: _Dest=0x309a5f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.196] wcscat (in: _Dest=0x309a5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.196] wcscat (in: _Dest=0x309a5f8, _Source="J0106146.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" [0225.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0225.197] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0225.197] wcscmp (_String1="J0106208.WMF", _String2=".") returned 1 [0225.197] wcscmp (_String1="J0106208.WMF", _String2="..") returned 1 [0225.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a708 [0225.197] wcscpy (in: _Dest=0x309a708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.197] wcscat (in: _Dest=0x309a708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.197] wcscat (in: _Dest=0x309a708, _Source="J0106208.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" [0225.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0225.198] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0225.455] wcscmp (_String1="J0106222.WMF", _String2=".") returned 1 [0225.455] wcscmp (_String1="J0106222.WMF", _String2="..") returned 1 [0225.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a680 [0225.455] wcscpy (in: _Dest=0x309a680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.455] wcscat (in: _Dest=0x309a680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.455] wcscat (in: _Dest=0x309a680, _Source="J0106222.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" [0225.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0225.682] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0225.682] wcscmp (_String1="J0106572.WMF", _String2=".") returned 1 [0225.682] wcscmp (_String1="J0106572.WMF", _String2="..") returned 1 [0225.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30633a0 [0225.682] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.683] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.683] wcscat (in: _Dest=0x30633a0, _Source="J0106572.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" [0225.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x30633a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0225.689] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0225.689] wcscmp (_String1="J0106816.WMF", _String2=".") returned 1 [0225.689] wcscmp (_String1="J0106816.WMF", _String2="..") returned 1 [0225.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062c30 [0225.690] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.690] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.690] wcscat (in: _Dest=0x3062c30, _Source="J0106816.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" [0225.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab0 [0225.691] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0225.691] wcscmp (_String1="J0106958.WMF", _String2=".") returned 1 [0225.691] wcscmp (_String1="J0106958.WMF", _String2="..") returned 1 [0225.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e678c8 [0225.691] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.691] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.692] wcscat (in: _Dest=0x3e678c8, _Source="J0106958.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" [0225.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0225.694] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0225.694] wcscmp (_String1="J0107024.WMF", _String2=".") returned 1 [0225.694] wcscmp (_String1="J0107024.WMF", _String2="..") returned 1 [0225.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a458 [0225.694] wcscpy (in: _Dest=0x819a458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.694] wcscat (in: _Dest=0x819a458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.694] wcscat (in: _Dest=0x819a458, _Source="J0107024.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" [0225.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0225.695] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0225.695] wcscmp (_String1="J0107026.WMF", _String2=".") returned 1 [0225.695] wcscmp (_String1="J0107026.WMF", _String2="..") returned 1 [0225.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a4e0 [0225.695] wcscpy (in: _Dest=0x819a4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.695] wcscat (in: _Dest=0x819a4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.695] wcscat (in: _Dest=0x819a4e0, _Source="J0107026.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" [0225.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0225.696] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0225.696] wcscmp (_String1="J0107042.WMF", _String2=".") returned 1 [0225.696] wcscmp (_String1="J0107042.WMF", _String2="..") returned 1 [0225.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a568 [0225.696] wcscpy (in: _Dest=0x819a568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.696] wcscat (in: _Dest=0x819a568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.696] wcscat (in: _Dest=0x819a568, _Source="J0107042.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" [0225.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0225.697] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0225.697] wcscmp (_String1="J0107090.WMF", _String2=".") returned 1 [0225.697] wcscmp (_String1="J0107090.WMF", _String2="..") returned 1 [0225.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a5f0 [0225.697] wcscpy (in: _Dest=0x819a5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.697] wcscat (in: _Dest=0x819a5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.697] wcscat (in: _Dest=0x819a5f0, _Source="J0107090.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" [0225.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0225.698] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0225.698] wcscmp (_String1="J0107130.WMF", _String2=".") returned 1 [0225.698] wcscmp (_String1="J0107130.WMF", _String2="..") returned 1 [0225.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a678 [0225.698] wcscpy (in: _Dest=0x819a678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.722] wcscat (in: _Dest=0x819a678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.722] wcscat (in: _Dest=0x819a678, _Source="J0107130.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" [0225.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c [0225.725] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0225.725] wcscmp (_String1="J0107132.WMF", _String2=".") returned 1 [0225.725] wcscmp (_String1="J0107132.WMF", _String2="..") returned 1 [0225.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a700 [0225.726] wcscpy (in: _Dest=0x819a700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.726] wcscat (in: _Dest=0x819a700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.726] wcscat (in: _Dest=0x819a700, _Source="J0107132.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" [0225.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0225.727] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0225.727] wcscmp (_String1="J0107134.WMF", _String2=".") returned 1 [0225.727] wcscmp (_String1="J0107134.WMF", _String2="..") returned 1 [0225.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a788 [0225.727] wcscpy (in: _Dest=0x819a788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.727] wcscat (in: _Dest=0x819a788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.727] wcscat (in: _Dest=0x819a788, _Source="J0107134.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" [0225.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0225.728] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0225.728] wcscmp (_String1="J0107138.WMF", _String2=".") returned 1 [0225.728] wcscmp (_String1="J0107138.WMF", _String2="..") returned 1 [0225.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a810 [0225.728] wcscpy (in: _Dest=0x819a810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.728] wcscat (in: _Dest=0x819a810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.728] wcscat (in: _Dest=0x819a810, _Source="J0107138.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" [0225.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0225.729] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0225.729] wcscmp (_String1="J0107146.WMF", _String2=".") returned 1 [0225.729] wcscmp (_String1="J0107146.WMF", _String2="..") returned 1 [0225.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a898 [0225.729] wcscpy (in: _Dest=0x819a898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.729] wcscat (in: _Dest=0x819a898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.729] wcscat (in: _Dest=0x819a898, _Source="J0107146.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" [0225.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0225.731] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0225.731] wcscmp (_String1="J0107148.WMF", _String2=".") returned 1 [0225.731] wcscmp (_String1="J0107148.WMF", _String2="..") returned 1 [0225.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a920 [0225.731] wcscpy (in: _Dest=0x819a920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.731] wcscat (in: _Dest=0x819a920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.731] wcscat (in: _Dest=0x819a920, _Source="J0107148.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" [0225.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0225.732] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0225.732] wcscmp (_String1="J0107150.WMF", _String2=".") returned 1 [0225.732] wcscmp (_String1="J0107150.WMF", _String2="..") returned 1 [0225.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a9a8 [0225.732] wcscpy (in: _Dest=0x819a9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.732] wcscat (in: _Dest=0x819a9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.732] wcscat (in: _Dest=0x819a9a8, _Source="J0107150.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" [0225.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0225.733] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0225.733] wcscmp (_String1="J0107152.WMF", _String2=".") returned 1 [0225.733] wcscmp (_String1="J0107152.WMF", _String2="..") returned 1 [0225.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819aa30 [0225.733] wcscpy (in: _Dest=0x819aa30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.733] wcscat (in: _Dest=0x819aa30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.733] wcscat (in: _Dest=0x819aa30, _Source="J0107152.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" [0225.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aa30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0225.736] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0225.736] wcscmp (_String1="J0107154.WMF", _String2=".") returned 1 [0225.736] wcscmp (_String1="J0107154.WMF", _String2="..") returned 1 [0225.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819aab8 [0225.736] wcscpy (in: _Dest=0x819aab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.736] wcscat (in: _Dest=0x819aab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.736] wcscat (in: _Dest=0x819aab8, _Source="J0107154.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" [0225.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0225.737] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0225.738] wcscmp (_String1="J0107158.WMF", _String2=".") returned 1 [0225.738] wcscmp (_String1="J0107158.WMF", _String2="..") returned 1 [0225.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ab40 [0225.738] wcscpy (in: _Dest=0x819ab40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.738] wcscat (in: _Dest=0x819ab40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.738] wcscat (in: _Dest=0x819ab40, _Source="J0107158.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" [0225.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ab40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0225.739] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0225.739] wcscmp (_String1="J0107182.WMF", _String2=".") returned 1 [0225.739] wcscmp (_String1="J0107182.WMF", _String2="..") returned 1 [0225.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819abc8 [0225.739] wcscpy (in: _Dest=0x819abc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.739] wcscat (in: _Dest=0x819abc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.739] wcscat (in: _Dest=0x819abc8, _Source="J0107182.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" [0225.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819abc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0225.740] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0225.740] wcscmp (_String1="J0107188.WMF", _String2=".") returned 1 [0225.740] wcscmp (_String1="J0107188.WMF", _String2="..") returned 1 [0225.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ac50 [0225.740] wcscpy (in: _Dest=0x819ac50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.740] wcscat (in: _Dest=0x819ac50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.741] wcscat (in: _Dest=0x819ac50, _Source="J0107188.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" [0225.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ac50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0225.741] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0225.741] wcscmp (_String1="J0107192.WMF", _String2=".") returned 1 [0225.741] wcscmp (_String1="J0107192.WMF", _String2="..") returned 1 [0225.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819acd8 [0225.741] wcscpy (in: _Dest=0x819acd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.741] wcscat (in: _Dest=0x819acd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.742] wcscat (in: _Dest=0x819acd8, _Source="J0107192.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" [0225.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819acd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c8 [0225.743] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0225.743] wcscmp (_String1="J0107254.WMF", _String2=".") returned 1 [0225.743] wcscmp (_String1="J0107254.WMF", _String2="..") returned 1 [0225.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ad60 [0225.743] wcscpy (in: _Dest=0x819ad60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.743] wcscat (in: _Dest=0x819ad60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.743] wcscat (in: _Dest=0x819ad60, _Source="J0107254.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" [0225.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ad60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0225.744] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0225.744] wcscmp (_String1="J0107258.WMF", _String2=".") returned 1 [0225.744] wcscmp (_String1="J0107258.WMF", _String2="..") returned 1 [0225.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ade8 [0225.744] wcscpy (in: _Dest=0x819ade8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.744] wcscat (in: _Dest=0x819ade8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.744] wcscat (in: _Dest=0x819ade8, _Source="J0107258.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" [0225.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ade8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0225.745] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0225.745] wcscmp (_String1="J0107262.WMF", _String2=".") returned 1 [0225.745] wcscmp (_String1="J0107262.WMF", _String2="..") returned 1 [0225.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ae70 [0225.745] wcscpy (in: _Dest=0x819ae70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.745] wcscat (in: _Dest=0x819ae70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.745] wcscat (in: _Dest=0x819ae70, _Source="J0107262.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" [0225.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ae70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b4 [0225.746] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0225.746] wcscmp (_String1="J0107264.WMF", _String2=".") returned 1 [0225.746] wcscmp (_String1="J0107264.WMF", _String2="..") returned 1 [0225.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819aef8 [0225.746] wcscpy (in: _Dest=0x819aef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.746] wcscat (in: _Dest=0x819aef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.746] wcscat (in: _Dest=0x819aef8, _Source="J0107264.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" [0225.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2664 [0225.747] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0225.747] wcscmp (_String1="J0107266.WMF", _String2=".") returned 1 [0225.747] wcscmp (_String1="J0107266.WMF", _String2="..") returned 1 [0225.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819af80 [0225.747] wcscpy (in: _Dest=0x819af80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.747] wcscat (in: _Dest=0x819af80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.747] wcscat (in: _Dest=0x819af80, _Source="J0107266.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" [0225.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819af80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0225.748] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0225.748] wcscmp (_String1="J0107280.WMF", _String2=".") returned 1 [0225.748] wcscmp (_String1="J0107280.WMF", _String2="..") returned 1 [0225.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b008 [0225.748] wcscpy (in: _Dest=0x819b008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.748] wcscat (in: _Dest=0x819b008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.748] wcscat (in: _Dest=0x819b008, _Source="J0107280.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" [0225.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0225.752] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0225.752] wcscmp (_String1="J0107282.WMF", _String2=".") returned 1 [0225.752] wcscmp (_String1="J0107282.WMF", _String2="..") returned 1 [0225.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b090 [0225.753] wcscpy (in: _Dest=0x819b090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.753] wcscat (in: _Dest=0x819b090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.753] wcscat (in: _Dest=0x819b090, _Source="J0107282.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" [0225.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0225.753] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0225.753] wcscmp (_String1="J0107288.WMF", _String2=".") returned 1 [0225.753] wcscmp (_String1="J0107288.WMF", _String2="..") returned 1 [0225.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b118 [0225.754] wcscpy (in: _Dest=0x819b118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.754] wcscat (in: _Dest=0x819b118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.754] wcscat (in: _Dest=0x819b118, _Source="J0107288.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" [0225.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0225.755] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0225.755] wcscmp (_String1="J0107290.WMF", _String2=".") returned 1 [0225.755] wcscmp (_String1="J0107290.WMF", _String2="..") returned 1 [0225.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b1a0 [0225.755] wcscpy (in: _Dest=0x819b1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.755] wcscat (in: _Dest=0x819b1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.755] wcscat (in: _Dest=0x819b1a0, _Source="J0107290.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" [0225.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0225.842] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0225.842] wcscmp (_String1="J0107300.WMF", _String2=".") returned 1 [0225.842] wcscmp (_String1="J0107300.WMF", _String2="..") returned 1 [0225.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b228 [0225.842] wcscpy (in: _Dest=0x819b228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.842] wcscat (in: _Dest=0x819b228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.842] wcscat (in: _Dest=0x819b228, _Source="J0107300.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" [0225.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0225.843] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0225.843] wcscmp (_String1="J0107302.WMF", _String2=".") returned 1 [0225.843] wcscmp (_String1="J0107302.WMF", _String2="..") returned 1 [0225.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b2b0 [0225.843] wcscpy (in: _Dest=0x819b2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.843] wcscat (in: _Dest=0x819b2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.843] wcscat (in: _Dest=0x819b2b0, _Source="J0107302.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" [0225.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0225.844] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0225.844] wcscmp (_String1="J0107308.WMF", _String2=".") returned 1 [0225.844] wcscmp (_String1="J0107308.WMF", _String2="..") returned 1 [0225.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b338 [0225.844] wcscpy (in: _Dest=0x819b338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.844] wcscat (in: _Dest=0x819b338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.844] wcscat (in: _Dest=0x819b338, _Source="J0107308.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" [0225.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0225.845] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0225.845] wcscmp (_String1="J0107314.WMF", _String2=".") returned 1 [0225.845] wcscmp (_String1="J0107314.WMF", _String2="..") returned 1 [0225.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b3c0 [0225.845] wcscpy (in: _Dest=0x819b3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.845] wcscat (in: _Dest=0x819b3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.845] wcscat (in: _Dest=0x819b3c0, _Source="J0107314.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" [0225.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264c [0225.846] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0225.997] wcscmp (_String1="J0107316.WMF", _String2=".") returned 1 [0225.999] wcscmp (_String1="J0107316.WMF", _String2="..") returned 1 [0225.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f300d8 [0226.001] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.001] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.003] wcscat (in: _Dest=0x3f300d8, _Source="J0107316.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" [0226.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b4 [0226.015] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0226.015] wcscmp (_String1="J0107328.WMF", _String2=".") returned 1 [0226.015] wcscmp (_String1="J0107328.WMF", _String2="..") returned 1 [0226.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b448 [0226.015] wcscpy (in: _Dest=0x819b448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.015] wcscat (in: _Dest=0x819b448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.015] wcscat (in: _Dest=0x819b448, _Source="J0107328.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" [0226.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0226.017] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0226.017] wcscmp (_String1="J0107342.WMF", _String2=".") returned 1 [0226.017] wcscmp (_String1="J0107342.WMF", _String2="..") returned 1 [0226.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b4d0 [0226.017] wcscpy (in: _Dest=0x819b4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.017] wcscat (in: _Dest=0x819b4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.017] wcscat (in: _Dest=0x819b4d0, _Source="J0107342.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" [0226.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0226.021] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0226.021] wcscmp (_String1="J0107344.WMF", _String2=".") returned 1 [0226.021] wcscmp (_String1="J0107344.WMF", _String2="..") returned 1 [0226.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b558 [0226.021] wcscpy (in: _Dest=0x819b558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.021] wcscat (in: _Dest=0x819b558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.021] wcscat (in: _Dest=0x819b558, _Source="J0107344.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" [0226.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0226.023] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0226.023] wcscmp (_String1="J0107350.WMF", _String2=".") returned 1 [0226.023] wcscmp (_String1="J0107350.WMF", _String2="..") returned 1 [0226.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b5e0 [0226.023] wcscpy (in: _Dest=0x819b5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.023] wcscat (in: _Dest=0x819b5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.023] wcscat (in: _Dest=0x819b5e0, _Source="J0107350.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" [0226.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bac [0226.025] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0226.025] wcscmp (_String1="J0107358.WMF", _String2=".") returned 1 [0226.025] wcscmp (_String1="J0107358.WMF", _String2="..") returned 1 [0226.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b668 [0226.025] wcscpy (in: _Dest=0x819b668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.025] wcscat (in: _Dest=0x819b668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.025] wcscat (in: _Dest=0x819b668, _Source="J0107358.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" [0226.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0226.027] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0226.027] wcscmp (_String1="J0107364.WMF", _String2=".") returned 1 [0226.027] wcscmp (_String1="J0107364.WMF", _String2="..") returned 1 [0226.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b6f0 [0226.027] wcscpy (in: _Dest=0x819b6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.027] wcscat (in: _Dest=0x819b6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.027] wcscat (in: _Dest=0x819b6f0, _Source="J0107364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" [0226.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0226.044] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0226.044] wcscmp (_String1="J0107426.WMF", _String2=".") returned 1 [0226.044] wcscmp (_String1="J0107426.WMF", _String2="..") returned 1 [0226.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b778 [0226.044] wcscpy (in: _Dest=0x819b778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.044] wcscat (in: _Dest=0x819b778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.044] wcscat (in: _Dest=0x819b778, _Source="J0107426.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" [0226.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0226.045] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0226.045] wcscmp (_String1="J0107446.WMF", _String2=".") returned 1 [0226.045] wcscmp (_String1="J0107446.WMF", _String2="..") returned 1 [0226.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b800 [0226.045] wcscpy (in: _Dest=0x819b800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.045] wcscat (in: _Dest=0x819b800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.045] wcscat (in: _Dest=0x819b800, _Source="J0107446.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" [0226.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f8 [0226.046] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0226.046] wcscmp (_String1="J0107450.WMF", _String2=".") returned 1 [0226.046] wcscmp (_String1="J0107450.WMF", _String2="..") returned 1 [0226.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b888 [0226.046] wcscpy (in: _Dest=0x819b888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.047] wcscat (in: _Dest=0x819b888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.047] wcscat (in: _Dest=0x819b888, _Source="J0107450.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" [0226.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0226.047] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0226.048] wcscmp (_String1="J0107452.WMF", _String2=".") returned 1 [0226.048] wcscmp (_String1="J0107452.WMF", _String2="..") returned 1 [0226.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b910 [0226.048] wcscpy (in: _Dest=0x819b910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.048] wcscat (in: _Dest=0x819b910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.048] wcscat (in: _Dest=0x819b910, _Source="J0107452.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" [0226.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0226.048] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0226.049] wcscmp (_String1="J0107456.WMF", _String2=".") returned 1 [0226.049] wcscmp (_String1="J0107456.WMF", _String2="..") returned 1 [0226.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b998 [0226.049] wcscpy (in: _Dest=0x819b998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.049] wcscat (in: _Dest=0x819b998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.049] wcscat (in: _Dest=0x819b998, _Source="J0107456.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" [0226.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0226.050] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0226.050] wcscmp (_String1="J0107458.WMF", _String2=".") returned 1 [0226.050] wcscmp (_String1="J0107458.WMF", _String2="..") returned 1 [0226.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ba20 [0226.050] wcscpy (in: _Dest=0x819ba20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.050] wcscat (in: _Dest=0x819ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.050] wcscat (in: _Dest=0x819ba20, _Source="J0107458.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" [0226.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0226.051] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0226.051] wcscmp (_String1="J0107468.WMF", _String2=".") returned 1 [0226.051] wcscmp (_String1="J0107468.WMF", _String2="..") returned 1 [0226.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819baa8 [0226.051] wcscpy (in: _Dest=0x819baa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.051] wcscat (in: _Dest=0x819baa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.051] wcscat (in: _Dest=0x819baa8, _Source="J0107468.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" [0226.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819baa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0226.052] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0226.052] wcscmp (_String1="J0107480.WMF", _String2=".") returned 1 [0226.052] wcscmp (_String1="J0107480.WMF", _String2="..") returned 1 [0226.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bb30 [0226.052] wcscpy (in: _Dest=0x819bb30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.052] wcscat (in: _Dest=0x819bb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.052] wcscat (in: _Dest=0x819bb30, _Source="J0107480.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" [0226.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0226.053] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0226.053] wcscmp (_String1="J0107482.WMF", _String2=".") returned 1 [0226.053] wcscmp (_String1="J0107482.WMF", _String2="..") returned 1 [0226.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bbb8 [0226.053] wcscpy (in: _Dest=0x819bbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.053] wcscat (in: _Dest=0x819bbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.053] wcscat (in: _Dest=0x819bbb8, _Source="J0107482.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" [0226.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0226.054] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0226.054] wcscmp (_String1="J0107484.WMF", _String2=".") returned 1 [0226.054] wcscmp (_String1="J0107484.WMF", _String2="..") returned 1 [0226.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bc40 [0226.054] wcscpy (in: _Dest=0x819bc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.054] wcscat (in: _Dest=0x819bc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.054] wcscat (in: _Dest=0x819bc40, _Source="J0107484.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" [0226.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0226.056] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0226.056] wcscmp (_String1="J0107488.WMF", _String2=".") returned 1 [0226.056] wcscmp (_String1="J0107488.WMF", _String2="..") returned 1 [0226.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bcc8 [0226.056] wcscpy (in: _Dest=0x819bcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.056] wcscat (in: _Dest=0x819bcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.056] wcscat (in: _Dest=0x819bcc8, _Source="J0107488.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" [0226.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0226.057] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0226.057] wcscmp (_String1="J0107490.WMF", _String2=".") returned 1 [0226.057] wcscmp (_String1="J0107490.WMF", _String2="..") returned 1 [0226.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bd50 [0226.057] wcscpy (in: _Dest=0x819bd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.057] wcscat (in: _Dest=0x819bd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.057] wcscat (in: _Dest=0x819bd50, _Source="J0107490.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" [0226.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934 [0226.058] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0226.058] wcscmp (_String1="J0107492.WMF", _String2=".") returned 1 [0226.058] wcscmp (_String1="J0107492.WMF", _String2="..") returned 1 [0226.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bdd8 [0226.058] wcscpy (in: _Dest=0x819bdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.058] wcscat (in: _Dest=0x819bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.058] wcscat (in: _Dest=0x819bdd8, _Source="J0107492.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" [0226.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0226.059] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0226.059] wcscmp (_String1="J0107494.WMF", _String2=".") returned 1 [0226.059] wcscmp (_String1="J0107494.WMF", _String2="..") returned 1 [0226.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819be60 [0226.060] wcscpy (in: _Dest=0x819be60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.060] wcscat (in: _Dest=0x819be60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.060] wcscat (in: _Dest=0x819be60, _Source="J0107494.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" [0226.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819be60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0226.061] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0226.061] wcscmp (_String1="J0107496.WMF", _String2=".") returned 1 [0226.061] wcscmp (_String1="J0107496.WMF", _String2="..") returned 1 [0226.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bee8 [0226.061] wcscpy (in: _Dest=0x819bee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.061] wcscat (in: _Dest=0x819bee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.061] wcscat (in: _Dest=0x819bee8, _Source="J0107496.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" [0226.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0226.062] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0226.062] wcscmp (_String1="J0107500.WMF", _String2=".") returned 1 [0226.062] wcscmp (_String1="J0107500.WMF", _String2="..") returned 1 [0226.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bf70 [0226.062] wcscpy (in: _Dest=0x819bf70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.062] wcscat (in: _Dest=0x819bf70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.062] wcscat (in: _Dest=0x819bf70, _Source="J0107500.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" [0226.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bf70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0226.063] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0226.063] wcscmp (_String1="J0107502.WMF", _String2=".") returned 1 [0226.063] wcscmp (_String1="J0107502.WMF", _String2="..") returned 1 [0226.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bff8 [0226.063] wcscpy (in: _Dest=0x819bff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.063] wcscat (in: _Dest=0x819bff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.063] wcscat (in: _Dest=0x819bff8, _Source="J0107502.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" [0226.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0226.064] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0226.064] wcscmp (_String1="J0107512.WMF", _String2=".") returned 1 [0226.064] wcscmp (_String1="J0107512.WMF", _String2="..") returned 1 [0226.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c080 [0226.064] wcscpy (in: _Dest=0x819c080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.064] wcscat (in: _Dest=0x819c080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.064] wcscat (in: _Dest=0x819c080, _Source="J0107512.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" [0226.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0226.065] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0226.065] wcscmp (_String1="J0107514.WMF", _String2=".") returned 1 [0226.065] wcscmp (_String1="J0107514.WMF", _String2="..") returned 1 [0226.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c108 [0226.065] wcscpy (in: _Dest=0x819c108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.065] wcscat (in: _Dest=0x819c108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.065] wcscat (in: _Dest=0x819c108, _Source="J0107514.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" [0226.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0226.066] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0226.066] wcscmp (_String1="J0107516.WMF", _String2=".") returned 1 [0226.066] wcscmp (_String1="J0107516.WMF", _String2="..") returned 1 [0226.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c190 [0226.066] wcscpy (in: _Dest=0x819c190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.066] wcscat (in: _Dest=0x819c190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.067] wcscat (in: _Dest=0x819c190, _Source="J0107516.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" [0226.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ec [0226.067] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0226.067] wcscmp (_String1="J0107526.WMF", _String2=".") returned 1 [0226.068] wcscmp (_String1="J0107526.WMF", _String2="..") returned 1 [0226.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c218 [0226.068] wcscpy (in: _Dest=0x819c218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.068] wcscat (in: _Dest=0x819c218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.068] wcscat (in: _Dest=0x819c218, _Source="J0107526.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" [0226.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0226.069] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0226.069] wcscmp (_String1="J0107528.WMF", _String2=".") returned 1 [0226.069] wcscmp (_String1="J0107528.WMF", _String2="..") returned 1 [0226.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c2a0 [0226.069] wcscpy (in: _Dest=0x819c2a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.069] wcscat (in: _Dest=0x819c2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.069] wcscat (in: _Dest=0x819c2a0, _Source="J0107528.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" [0226.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0226.070] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0226.070] wcscmp (_String1="J0107544.WMF", _String2=".") returned 1 [0226.070] wcscmp (_String1="J0107544.WMF", _String2="..") returned 1 [0226.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c328 [0226.070] wcscpy (in: _Dest=0x819c328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.070] wcscat (in: _Dest=0x819c328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.070] wcscat (in: _Dest=0x819c328, _Source="J0107544.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" [0226.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0226.239] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0226.239] wcscmp (_String1="J0107658.WMF", _String2=".") returned 1 [0226.239] wcscmp (_String1="J0107658.WMF", _String2="..") returned 1 [0226.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c3b0 [0226.239] wcscpy (in: _Dest=0x819c3b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.239] wcscat (in: _Dest=0x819c3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.239] wcscat (in: _Dest=0x819c3b0, _Source="J0107658.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" [0226.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0226.296] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0226.296] wcscmp (_String1="J0107708.WMF", _String2=".") returned 1 [0226.296] wcscmp (_String1="J0107708.WMF", _String2="..") returned 1 [0226.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fda8 [0226.296] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.296] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.296] wcscat (in: _Dest=0x3f2fda8, _Source="J0107708.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" [0226.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0226.297] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0226.297] wcscmp (_String1="J0107712.WMF", _String2=".") returned 1 [0226.297] wcscmp (_String1="J0107712.WMF", _String2="..") returned 1 [0226.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332930 [0226.297] wcscpy (in: _Dest=0x8332930, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.297] wcscat (in: _Dest=0x8332930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.297] wcscat (in: _Dest=0x8332930, _Source="J0107712.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" [0226.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0226.298] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0226.298] wcscmp (_String1="J0107718.WMF", _String2=".") returned 1 [0226.299] wcscmp (_String1="J0107718.WMF", _String2="..") returned 1 [0226.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83329b8 [0226.299] wcscpy (in: _Dest=0x83329b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.299] wcscat (in: _Dest=0x83329b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.299] wcscat (in: _Dest=0x83329b8, _Source="J0107718.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" [0226.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83329b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0226.300] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0226.309] wcscmp (_String1="J0107722.WMF", _String2=".") returned 1 [0226.309] wcscmp (_String1="J0107722.WMF", _String2="..") returned 1 [0226.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332a40 [0226.309] wcscpy (in: _Dest=0x8332a40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.309] wcscat (in: _Dest=0x8332a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.309] wcscat (in: _Dest=0x8332a40, _Source="J0107722.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" [0226.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2798 [0226.310] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0226.310] wcscmp (_String1="J0107724.WMF", _String2=".") returned 1 [0226.310] wcscmp (_String1="J0107724.WMF", _String2="..") returned 1 [0226.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332ac8 [0226.310] wcscpy (in: _Dest=0x8332ac8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.310] wcscat (in: _Dest=0x8332ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.310] wcscat (in: _Dest=0x8332ac8, _Source="J0107724.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" [0226.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0226.311] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0226.311] wcscmp (_String1="J0107728.WMF", _String2=".") returned 1 [0226.311] wcscmp (_String1="J0107728.WMF", _String2="..") returned 1 [0226.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332b50 [0226.312] wcscpy (in: _Dest=0x8332b50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.312] wcscat (in: _Dest=0x8332b50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.312] wcscat (in: _Dest=0x8332b50, _Source="J0107728.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" [0226.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0226.313] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0226.313] wcscmp (_String1="J0107730.WMF", _String2=".") returned 1 [0226.313] wcscmp (_String1="J0107730.WMF", _String2="..") returned 1 [0226.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332bd8 [0226.313] wcscpy (in: _Dest=0x8332bd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.313] wcscat (in: _Dest=0x8332bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.313] wcscat (in: _Dest=0x8332bd8, _Source="J0107730.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" [0226.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0226.314] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0226.314] wcscmp (_String1="J0107734.WMF", _String2=".") returned 1 [0226.314] wcscmp (_String1="J0107734.WMF", _String2="..") returned 1 [0226.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332c60 [0226.314] wcscpy (in: _Dest=0x8332c60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.314] wcscat (in: _Dest=0x8332c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.314] wcscat (in: _Dest=0x8332c60, _Source="J0107734.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" [0226.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0226.315] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0226.315] wcscmp (_String1="J0107742.WMF", _String2=".") returned 1 [0226.315] wcscmp (_String1="J0107742.WMF", _String2="..") returned 1 [0226.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332ce8 [0226.315] wcscpy (in: _Dest=0x8332ce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.315] wcscat (in: _Dest=0x8332ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.315] wcscat (in: _Dest=0x8332ce8, _Source="J0107742.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" [0226.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0226.316] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0226.316] wcscmp (_String1="J0107744.WMF", _String2=".") returned 1 [0226.316] wcscmp (_String1="J0107744.WMF", _String2="..") returned 1 [0226.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332d70 [0226.316] wcscpy (in: _Dest=0x8332d70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.316] wcscat (in: _Dest=0x8332d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.316] wcscat (in: _Dest=0x8332d70, _Source="J0107744.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" [0226.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0226.317] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0226.317] wcscmp (_String1="J0107746.WMF", _String2=".") returned 1 [0226.317] wcscmp (_String1="J0107746.WMF", _String2="..") returned 1 [0226.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332df8 [0226.317] wcscpy (in: _Dest=0x8332df8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.317] wcscat (in: _Dest=0x8332df8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.317] wcscat (in: _Dest=0x8332df8, _Source="J0107746.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" [0226.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332df8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0226.318] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0226.318] wcscmp (_String1="J0107748.WMF", _String2=".") returned 1 [0226.318] wcscmp (_String1="J0107748.WMF", _String2="..") returned 1 [0226.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332e80 [0226.318] wcscpy (in: _Dest=0x8332e80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.318] wcscat (in: _Dest=0x8332e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.318] wcscat (in: _Dest=0x8332e80, _Source="J0107748.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" [0226.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0226.319] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0226.319] wcscmp (_String1="J0107750.WMF", _String2=".") returned 1 [0226.319] wcscmp (_String1="J0107750.WMF", _String2="..") returned 1 [0226.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332f08 [0226.319] wcscpy (in: _Dest=0x8332f08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.319] wcscat (in: _Dest=0x8332f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.319] wcscat (in: _Dest=0x8332f08, _Source="J0107750.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" [0226.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0226.320] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0226.320] wcscmp (_String1="J0136865.WMF", _String2=".") returned 1 [0226.320] wcscmp (_String1="J0136865.WMF", _String2="..") returned 1 [0226.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332f90 [0226.320] wcscpy (in: _Dest=0x8332f90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.320] wcscat (in: _Dest=0x8332f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.320] wcscat (in: _Dest=0x8332f90, _Source="J0136865.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" [0226.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0226.321] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb202900, ftCreationTime.dwHighDateTime=0x1bdbfd3, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb202900, ftLastWriteTime.dwHighDateTime=0x1bdbfd3, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0226.321] wcscmp (_String1="J0144773.JPG", _String2=".") returned 1 [0226.321] wcscmp (_String1="J0144773.JPG", _String2="..") returned 1 [0226.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333018 [0226.321] wcscpy (in: _Dest=0x8333018, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.321] wcscat (in: _Dest=0x8333018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.321] wcscat (in: _Dest=0x8333018, _Source="J0144773.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" [0226.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0226.322] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0226.322] wcscmp (_String1="J0145168.JPG", _String2=".") returned 1 [0226.322] wcscmp (_String1="J0145168.JPG", _String2="..") returned 1 [0226.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83330a0 [0226.322] wcscpy (in: _Dest=0x83330a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.323] wcscat (in: _Dest=0x83330a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.323] wcscat (in: _Dest=0x83330a0, _Source="J0145168.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" [0226.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83330a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0226.323] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0226.324] wcscmp (_String1="J0145212.JPG", _String2=".") returned 1 [0226.324] wcscmp (_String1="J0145212.JPG", _String2="..") returned 1 [0226.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333128 [0226.324] wcscpy (in: _Dest=0x8333128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.324] wcscat (in: _Dest=0x8333128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.324] wcscat (in: _Dest=0x8333128, _Source="J0145212.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" [0226.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a04 [0226.325] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0226.325] wcscmp (_String1="J0145272.JPG", _String2=".") returned 1 [0226.325] wcscmp (_String1="J0145272.JPG", _String2="..") returned 1 [0226.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83331b0 [0226.325] wcscpy (in: _Dest=0x83331b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.325] wcscat (in: _Dest=0x83331b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.325] wcscat (in: _Dest=0x83331b0, _Source="J0145272.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" [0226.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83331b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0226.326] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0226.326] wcscmp (_String1="J0145361.JPG", _String2=".") returned 1 [0226.326] wcscmp (_String1="J0145361.JPG", _String2="..") returned 1 [0226.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333238 [0226.326] wcscpy (in: _Dest=0x8333238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.326] wcscat (in: _Dest=0x8333238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.326] wcscat (in: _Dest=0x8333238, _Source="J0145361.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" [0226.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0226.327] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6afac300, ftCreationTime.dwHighDateTime=0x1bdbfd5, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6afac300, ftLastWriteTime.dwHighDateTime=0x1bdbfd5, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0226.327] wcscmp (_String1="J0145373.JPG", _String2=".") returned 1 [0226.327] wcscmp (_String1="J0145373.JPG", _String2="..") returned 1 [0226.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83332c0 [0226.327] wcscpy (in: _Dest=0x83332c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.327] wcscat (in: _Dest=0x83332c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.327] wcscat (in: _Dest=0x83332c0, _Source="J0145373.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" [0226.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83332c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca8 [0226.328] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd83900, ftCreationTime.dwHighDateTime=0x1bdbfd6, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacd83900, ftLastWriteTime.dwHighDateTime=0x1bdbfd6, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0226.328] wcscmp (_String1="J0145669.JPG", _String2=".") returned 1 [0226.328] wcscmp (_String1="J0145669.JPG", _String2="..") returned 1 [0226.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333348 [0226.328] wcscpy (in: _Dest=0x8333348, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.328] wcscat (in: _Dest=0x8333348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.328] wcscat (in: _Dest=0x8333348, _Source="J0145669.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" [0226.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0226.329] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3a9300, ftCreationTime.dwHighDateTime=0x1bdbfd6, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf3a9300, ftLastWriteTime.dwHighDateTime=0x1bdbfd6, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0226.329] wcscmp (_String1="J0145707.JPG", _String2=".") returned 1 [0226.329] wcscmp (_String1="J0145707.JPG", _String2="..") returned 1 [0226.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83333d0 [0226.329] wcscpy (in: _Dest=0x83333d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.329] wcscat (in: _Dest=0x83333d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.329] wcscat (in: _Dest=0x83333d0, _Source="J0145707.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" [0226.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83333d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c [0226.330] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe610a900, ftCreationTime.dwHighDateTime=0x1bdbfd6, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe610a900, ftLastWriteTime.dwHighDateTime=0x1bdbfd6, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0226.330] wcscmp (_String1="J0145810.JPG", _String2=".") returned 1 [0226.330] wcscmp (_String1="J0145810.JPG", _String2="..") returned 1 [0226.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333458 [0226.330] wcscpy (in: _Dest=0x8333458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.330] wcscat (in: _Dest=0x8333458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.330] wcscat (in: _Dest=0x8333458, _Source="J0145810.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" [0226.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0226.331] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0d2e00, ftCreationTime.dwHighDateTime=0x1c0271b, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b0d2e00, ftLastWriteTime.dwHighDateTime=0x1c0271b, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0226.331] wcscmp (_String1="J0145879.JPG", _String2=".") returned 1 [0226.331] wcscmp (_String1="J0145879.JPG", _String2="..") returned 1 [0226.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83334e0 [0226.331] wcscpy (in: _Dest=0x83334e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.331] wcscat (in: _Dest=0x83334e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.331] wcscat (in: _Dest=0x83334e0, _Source="J0145879.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" [0226.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83334e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c7c [0226.332] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccb0500, ftCreationTime.dwHighDateTime=0x1c03dee, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ccb0500, ftLastWriteTime.dwHighDateTime=0x1c03dee, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0226.332] wcscmp (_String1="J0145895.JPG", _String2=".") returned 1 [0226.332] wcscmp (_String1="J0145895.JPG", _String2="..") returned 1 [0226.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333568 [0226.332] wcscpy (in: _Dest=0x8333568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.332] wcscat (in: _Dest=0x8333568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.332] wcscat (in: _Dest=0x8333568, _Source="J0145895.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" [0226.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0226.333] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e47ab00, ftCreationTime.dwHighDateTime=0x1bdbfd7, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e47ab00, ftLastWriteTime.dwHighDateTime=0x1bdbfd7, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0226.333] wcscmp (_String1="J0145904.JPG", _String2=".") returned 1 [0226.333] wcscmp (_String1="J0145904.JPG", _String2="..") returned 1 [0226.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83335f0 [0226.334] wcscpy (in: _Dest=0x83335f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.334] wcscat (in: _Dest=0x83335f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.334] wcscat (in: _Dest=0x83335f0, _Source="J0145904.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" [0226.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83335f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0226.334] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0226.334] wcscmp (_String1="J0146142.JPG", _String2=".") returned 1 [0226.335] wcscmp (_String1="J0146142.JPG", _String2="..") returned 1 [0226.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333678 [0226.335] wcscpy (in: _Dest=0x8333678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.335] wcscat (in: _Dest=0x8333678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.335] wcscat (in: _Dest=0x8333678, _Source="J0146142.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" [0226.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0226.335] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0226.336] wcscmp (_String1="J0148309.JPG", _String2=".") returned 1 [0226.336] wcscmp (_String1="J0148309.JPG", _String2="..") returned 1 [0226.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333700 [0226.336] wcscpy (in: _Dest=0x8333700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.336] wcscat (in: _Dest=0x8333700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.336] wcscat (in: _Dest=0x8333700, _Source="J0148309.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" [0226.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0226.337] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0226.337] wcscmp (_String1="J0148757.JPG", _String2=".") returned 1 [0226.337] wcscmp (_String1="J0148757.JPG", _String2="..") returned 1 [0226.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333788 [0226.337] wcscpy (in: _Dest=0x8333788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.337] wcscat (in: _Dest=0x8333788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.337] wcscat (in: _Dest=0x8333788, _Source="J0148757.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" [0226.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0226.338] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0226.338] wcscmp (_String1="J0148798.JPG", _String2=".") returned 1 [0226.338] wcscmp (_String1="J0148798.JPG", _String2="..") returned 1 [0226.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333810 [0226.338] wcscpy (in: _Dest=0x8333810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.338] wcscat (in: _Dest=0x8333810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.338] wcscat (in: _Dest=0x8333810, _Source="J0148798.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" [0226.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0226.339] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0226.339] wcscmp (_String1="J0149018.JPG", _String2=".") returned 1 [0226.339] wcscmp (_String1="J0149018.JPG", _String2="..") returned 1 [0226.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333898 [0226.339] wcscpy (in: _Dest=0x8333898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.339] wcscat (in: _Dest=0x8333898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.339] wcscat (in: _Dest=0x8333898, _Source="J0149018.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" [0226.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a98 [0226.481] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0226.482] wcscmp (_String1="J0149118.JPG", _String2=".") returned 1 [0226.482] wcscmp (_String1="J0149118.JPG", _String2="..") returned 1 [0226.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30e20 [0226.482] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.482] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.482] wcscat (in: _Dest=0x3f30e20, _Source="J0149118.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" [0226.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29fc [0226.483] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0226.483] wcscmp (_String1="J0150150.WMF", _String2=".") returned 1 [0226.483] wcscmp (_String1="J0150150.WMF", _String2="..") returned 1 [0226.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f8e0 [0226.483] wcscpy (in: _Dest=0x3f2f8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.483] wcscat (in: _Dest=0x3f2f8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.483] wcscat (in: _Dest=0x3f2f8e0, _Source="J0150150.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" [0226.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0226.485] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0226.485] wcscmp (_String1="J0150861.WMF", _String2=".") returned 1 [0226.485] wcscmp (_String1="J0150861.WMF", _String2="..") returned 1 [0226.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333920 [0226.485] wcscpy (in: _Dest=0x8333920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.485] wcscat (in: _Dest=0x8333920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.485] wcscat (in: _Dest=0x8333920, _Source="J0150861.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" [0226.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0226.486] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0226.486] wcscmp (_String1="J0151041.WMF", _String2=".") returned 1 [0226.486] wcscmp (_String1="J0151041.WMF", _String2="..") returned 1 [0226.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83339a8 [0226.487] wcscpy (in: _Dest=0x83339a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.487] wcscat (in: _Dest=0x83339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.487] wcscat (in: _Dest=0x83339a8, _Source="J0151041.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" [0226.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0 [0226.487] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0226.488] wcscmp (_String1="J0151045.WMF", _String2=".") returned 1 [0226.488] wcscmp (_String1="J0151045.WMF", _String2="..") returned 1 [0226.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333a30 [0226.488] wcscpy (in: _Dest=0x8333a30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.488] wcscat (in: _Dest=0x8333a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.488] wcscat (in: _Dest=0x8333a30, _Source="J0151045.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" [0226.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0226.489] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0226.489] wcscmp (_String1="J0151047.WMF", _String2=".") returned 1 [0226.489] wcscmp (_String1="J0151047.WMF", _String2="..") returned 1 [0226.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333ab8 [0226.489] wcscpy (in: _Dest=0x8333ab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.489] wcscat (in: _Dest=0x8333ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.489] wcscat (in: _Dest=0x8333ab8, _Source="J0151047.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" [0226.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0226.493] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0226.661] wcscmp (_String1="J0151055.WMF", _String2=".") returned 1 [0226.661] wcscmp (_String1="J0151055.WMF", _String2="..") returned 1 [0226.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31040 [0226.661] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.661] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.661] wcscat (in: _Dest=0x3f31040, _Source="J0151055.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" [0226.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0226.775] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0226.775] wcscmp (_String1="J0151061.WMF", _String2=".") returned 1 [0226.775] wcscmp (_String1="J0151061.WMF", _String2="..") returned 1 [0226.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333b40 [0226.775] wcscpy (in: _Dest=0x8333b40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.775] wcscat (in: _Dest=0x8333b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.775] wcscat (in: _Dest=0x8333b40, _Source="J0151061.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" [0226.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0226.776] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0226.776] wcscmp (_String1="J0151063.WMF", _String2=".") returned 1 [0226.776] wcscmp (_String1="J0151063.WMF", _String2="..") returned 1 [0226.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333bc8 [0226.777] wcscpy (in: _Dest=0x8333bc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.777] wcscat (in: _Dest=0x8333bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.777] wcscat (in: _Dest=0x8333bc8, _Source="J0151063.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" [0226.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0226.778] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0226.778] wcscmp (_String1="J0151067.WMF", _String2=".") returned 1 [0226.778] wcscmp (_String1="J0151067.WMF", _String2="..") returned 1 [0226.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333c50 [0226.778] wcscpy (in: _Dest=0x8333c50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.778] wcscat (in: _Dest=0x8333c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.778] wcscat (in: _Dest=0x8333c50, _Source="J0151067.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" [0226.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0226.779] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0226.779] wcscmp (_String1="J0151073.WMF", _String2=".") returned 1 [0226.779] wcscmp (_String1="J0151073.WMF", _String2="..") returned 1 [0226.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333cd8 [0226.779] wcscpy (in: _Dest=0x8333cd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.779] wcscat (in: _Dest=0x8333cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.779] wcscat (in: _Dest=0x8333cd8, _Source="J0151073.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" [0226.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0226.780] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0226.780] wcscmp (_String1="J0151581.WMF", _String2=".") returned 1 [0226.780] wcscmp (_String1="J0151581.WMF", _String2="..") returned 1 [0226.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333d60 [0226.780] wcscpy (in: _Dest=0x8333d60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.781] wcscat (in: _Dest=0x8333d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.781] wcscat (in: _Dest=0x8333d60, _Source="J0151581.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" [0226.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0226.782] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0226.782] wcscmp (_String1="J0152414.WMF", _String2=".") returned 1 [0226.782] wcscmp (_String1="J0152414.WMF", _String2="..") returned 1 [0226.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333de8 [0226.782] wcscpy (in: _Dest=0x8333de8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.782] wcscat (in: _Dest=0x8333de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.782] wcscat (in: _Dest=0x8333de8, _Source="J0152414.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" [0226.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0226.783] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0226.783] wcscmp (_String1="J0152430.WMF", _String2=".") returned 1 [0226.783] wcscmp (_String1="J0152430.WMF", _String2="..") returned 1 [0226.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333e70 [0226.783] wcscpy (in: _Dest=0x8333e70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.783] wcscat (in: _Dest=0x8333e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.783] wcscat (in: _Dest=0x8333e70, _Source="J0152430.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" [0226.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0226.784] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0226.784] wcscmp (_String1="J0152432.WMF", _String2=".") returned 1 [0226.784] wcscmp (_String1="J0152432.WMF", _String2="..") returned 1 [0226.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333ef8 [0226.784] wcscpy (in: _Dest=0x8333ef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.784] wcscat (in: _Dest=0x8333ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.785] wcscat (in: _Dest=0x8333ef8, _Source="J0152432.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" [0226.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a64 [0226.786] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0226.786] wcscmp (_String1="J0152436.WMF", _String2=".") returned 1 [0226.786] wcscmp (_String1="J0152436.WMF", _String2="..") returned 1 [0226.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333f80 [0226.786] wcscpy (in: _Dest=0x8333f80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.786] wcscat (in: _Dest=0x8333f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.786] wcscat (in: _Dest=0x8333f80, _Source="J0152436.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" [0226.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d00 [0226.787] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0226.787] wcscmp (_String1="J0152556.WMF", _String2=".") returned 1 [0226.787] wcscmp (_String1="J0152556.WMF", _String2="..") returned 1 [0226.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334008 [0226.787] wcscpy (in: _Dest=0x8334008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.787] wcscat (in: _Dest=0x8334008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.787] wcscat (in: _Dest=0x8334008, _Source="J0152556.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" [0226.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0226.788] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0226.788] wcscmp (_String1="J0152558.WMF", _String2=".") returned 1 [0226.788] wcscmp (_String1="J0152558.WMF", _String2="..") returned 1 [0226.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334090 [0226.788] wcscpy (in: _Dest=0x8334090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.788] wcscat (in: _Dest=0x8334090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.788] wcscat (in: _Dest=0x8334090, _Source="J0152558.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" [0226.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0226.789] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0226.789] wcscmp (_String1="J0152560.WMF", _String2=".") returned 1 [0226.789] wcscmp (_String1="J0152560.WMF", _String2="..") returned 1 [0226.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334118 [0226.789] wcscpy (in: _Dest=0x8334118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.789] wcscat (in: _Dest=0x8334118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.789] wcscat (in: _Dest=0x8334118, _Source="J0152560.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" [0226.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0226.790] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0226.790] wcscmp (_String1="J0152568.WMF", _String2=".") returned 1 [0226.790] wcscmp (_String1="J0152568.WMF", _String2="..") returned 1 [0226.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83341a0 [0226.790] wcscpy (in: _Dest=0x83341a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.790] wcscat (in: _Dest=0x83341a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.791] wcscat (in: _Dest=0x83341a0, _Source="J0152568.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" [0226.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83341a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0226.791] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0226.792] wcscmp (_String1="J0152570.WMF", _String2=".") returned 1 [0226.792] wcscmp (_String1="J0152570.WMF", _String2="..") returned 1 [0226.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334228 [0226.792] wcscpy (in: _Dest=0x8334228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.792] wcscat (in: _Dest=0x8334228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.792] wcscat (in: _Dest=0x8334228, _Source="J0152570.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" [0226.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0226.793] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0226.793] wcscmp (_String1="J0152590.WMF", _String2=".") returned 1 [0226.793] wcscmp (_String1="J0152590.WMF", _String2="..") returned 1 [0226.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83342b0 [0226.793] wcscpy (in: _Dest=0x83342b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.793] wcscat (in: _Dest=0x83342b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.793] wcscat (in: _Dest=0x83342b0, _Source="J0152590.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" [0226.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83342b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0226.794] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0226.794] wcscmp (_String1="J0152594.WMF", _String2=".") returned 1 [0226.794] wcscmp (_String1="J0152594.WMF", _String2="..") returned 1 [0226.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334338 [0226.794] wcscpy (in: _Dest=0x8334338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.794] wcscat (in: _Dest=0x8334338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.794] wcscat (in: _Dest=0x8334338, _Source="J0152594.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" [0226.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a50 [0226.795] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0226.795] wcscmp (_String1="J0152600.WMF", _String2=".") returned 1 [0226.795] wcscmp (_String1="J0152600.WMF", _String2="..") returned 1 [0226.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83343c0 [0226.796] wcscpy (in: _Dest=0x83343c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.796] wcscat (in: _Dest=0x83343c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.796] wcscat (in: _Dest=0x83343c0, _Source="J0152600.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" [0226.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83343c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0226.797] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0226.797] wcscmp (_String1="J0152602.WMF", _String2=".") returned 1 [0226.797] wcscmp (_String1="J0152602.WMF", _String2="..") returned 1 [0226.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334448 [0226.797] wcscpy (in: _Dest=0x8334448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.797] wcscat (in: _Dest=0x8334448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.797] wcscat (in: _Dest=0x8334448, _Source="J0152602.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" [0226.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c68 [0226.798] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0226.798] wcscmp (_String1="J0152606.WMF", _String2=".") returned 1 [0226.798] wcscmp (_String1="J0152606.WMF", _String2="..") returned 1 [0226.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83344d0 [0226.798] wcscpy (in: _Dest=0x83344d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.798] wcscat (in: _Dest=0x83344d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.798] wcscat (in: _Dest=0x83344d0, _Source="J0152606.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" [0226.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83344d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0226.800] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0226.800] wcscmp (_String1="J0152608.WMF", _String2=".") returned 1 [0226.800] wcscmp (_String1="J0152608.WMF", _String2="..") returned 1 [0226.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334558 [0226.800] wcscpy (in: _Dest=0x8334558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.800] wcscat (in: _Dest=0x8334558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.800] wcscat (in: _Dest=0x8334558, _Source="J0152608.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" [0226.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0226.801] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0226.801] wcscmp (_String1="J0152610.WMF", _String2=".") returned 1 [0226.801] wcscmp (_String1="J0152610.WMF", _String2="..") returned 1 [0226.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83345e0 [0226.801] wcscpy (in: _Dest=0x83345e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.801] wcscat (in: _Dest=0x83345e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.801] wcscat (in: _Dest=0x83345e0, _Source="J0152610.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" [0226.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83345e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0226.802] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0226.802] wcscmp (_String1="J0152622.WMF", _String2=".") returned 1 [0226.802] wcscmp (_String1="J0152622.WMF", _String2="..") returned 1 [0226.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334668 [0226.803] wcscpy (in: _Dest=0x8334668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.803] wcscat (in: _Dest=0x8334668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.803] wcscat (in: _Dest=0x8334668, _Source="J0152622.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" [0226.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0226.804] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0226.804] wcscmp (_String1="J0152626.WMF", _String2=".") returned 1 [0226.804] wcscmp (_String1="J0152626.WMF", _String2="..") returned 1 [0226.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83346f0 [0226.804] wcscpy (in: _Dest=0x83346f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.804] wcscat (in: _Dest=0x83346f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.804] wcscat (in: _Dest=0x83346f0, _Source="J0152626.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" [0226.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83346f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0226.805] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0226.805] wcscmp (_String1="J0152628.WMF", _String2=".") returned 1 [0226.805] wcscmp (_String1="J0152628.WMF", _String2="..") returned 1 [0226.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334778 [0226.805] wcscpy (in: _Dest=0x8334778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.805] wcscat (in: _Dest=0x8334778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.805] wcscat (in: _Dest=0x8334778, _Source="J0152628.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" [0226.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0226.806] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0226.806] wcscmp (_String1="J0152688.WMF", _String2=".") returned 1 [0226.806] wcscmp (_String1="J0152688.WMF", _String2="..") returned 1 [0226.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334800 [0226.806] wcscpy (in: _Dest=0x8334800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.806] wcscat (in: _Dest=0x8334800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.806] wcscat (in: _Dest=0x8334800, _Source="J0152688.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" [0226.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0226.807] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0226.807] wcscmp (_String1="J0152690.WMF", _String2=".") returned 1 [0226.807] wcscmp (_String1="J0152690.WMF", _String2="..") returned 1 [0226.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8334888 [0226.807] wcscpy (in: _Dest=0x8334888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.807] wcscat (in: _Dest=0x8334888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.807] wcscat (in: _Dest=0x8334888, _Source="J0152690.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" [0226.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0226.809] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0226.809] wcscmp (_String1="J0152694.WMF", _String2=".") returned 1 [0226.809] wcscmp (_String1="J0152694.WMF", _String2="..") returned 1 [0226.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eb648 [0226.809] wcscpy (in: _Dest=0x81eb648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.809] wcscat (in: _Dest=0x81eb648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.809] wcscat (in: _Dest=0x81eb648, _Source="J0152694.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" [0226.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0227.336] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0227.336] wcscmp (_String1="J0152696.WMF", _String2=".") returned 1 [0227.336] wcscmp (_String1="J0152696.WMF", _String2="..") returned 1 [0227.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f968 [0227.336] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.336] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.337] wcscat (in: _Dest=0x3f2f968, _Source="J0152696.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" [0227.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0227.415] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0227.416] wcscmp (_String1="J0152698.WMF", _String2=".") returned 1 [0227.416] wcscmp (_String1="J0152698.WMF", _String2="..") returned 1 [0227.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eb6d0 [0227.416] wcscpy (in: _Dest=0x81eb6d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.416] wcscat (in: _Dest=0x81eb6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.416] wcscat (in: _Dest=0x81eb6d0, _Source="J0152698.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" [0227.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0227.417] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0227.417] wcscmp (_String1="J0152702.WMF", _String2=".") returned 1 [0227.417] wcscmp (_String1="J0152702.WMF", _String2="..") returned 1 [0227.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eb758 [0227.417] wcscpy (in: _Dest=0x81eb758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.417] wcscat (in: _Dest=0x81eb758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.417] wcscat (in: _Dest=0x81eb758, _Source="J0152702.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" [0227.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0227.419] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0227.419] wcscmp (_String1="J0152704.WMF", _String2=".") returned 1 [0227.419] wcscmp (_String1="J0152704.WMF", _String2="..") returned 1 [0227.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eb7e0 [0227.419] wcscpy (in: _Dest=0x81eb7e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.419] wcscat (in: _Dest=0x81eb7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.419] wcscat (in: _Dest=0x81eb7e0, _Source="J0152704.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" [0227.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0227.420] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0227.420] wcscmp (_String1="J0152708.WMF", _String2=".") returned 1 [0227.420] wcscmp (_String1="J0152708.WMF", _String2="..") returned 1 [0227.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eb868 [0227.420] wcscpy (in: _Dest=0x81eb868, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.420] wcscat (in: _Dest=0x81eb868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.420] wcscat (in: _Dest=0x81eb868, _Source="J0152708.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" [0227.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27dc [0227.422] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0227.422] wcscmp (_String1="J0152716.WMF", _String2=".") returned 1 [0227.422] wcscmp (_String1="J0152716.WMF", _String2="..") returned 1 [0227.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eb8f0 [0227.422] wcscpy (in: _Dest=0x81eb8f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.422] wcscat (in: _Dest=0x81eb8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.422] wcscat (in: _Dest=0x81eb8f0, _Source="J0152716.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" [0227.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c [0227.423] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0227.578] wcscmp (_String1="J0152722.WMF", _String2=".") returned 1 [0227.578] wcscmp (_String1="J0152722.WMF", _String2="..") returned 1 [0227.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f311d8 [0227.581] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.581] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.586] wcscat (in: _Dest=0x3f311d8, _Source="J0152722.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" [0227.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c74 [0228.296] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0228.296] wcscmp (_String1="J0152876.WMF", _String2=".") returned 1 [0228.296] wcscmp (_String1="J0152876.WMF", _String2="..") returned 1 [0228.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f306b0 [0228.304] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.304] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.311] wcscat (in: _Dest=0x3f306b0, _Source="J0152876.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" [0228.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0228.322] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0228.323] wcscmp (_String1="J0152878.WMF", _String2=".") returned 1 [0228.323] wcscmp (_String1="J0152878.WMF", _String2="..") returned 1 [0228.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eb978 [0228.323] wcscpy (in: _Dest=0x81eb978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.323] wcscat (in: _Dest=0x81eb978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.323] wcscat (in: _Dest=0x81eb978, _Source="J0152878.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" [0228.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0228.324] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0228.324] wcscmp (_String1="J0152882.WMF", _String2=".") returned 1 [0228.324] wcscmp (_String1="J0152882.WMF", _String2="..") returned 1 [0228.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eba00 [0228.324] wcscpy (in: _Dest=0x81eba00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.324] wcscat (in: _Dest=0x81eba00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.324] wcscat (in: _Dest=0x81eba00, _Source="J0152882.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" [0228.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eba00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0228.325] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0228.325] wcscmp (_String1="J0152884.WMF", _String2=".") returned 1 [0228.325] wcscmp (_String1="J0152884.WMF", _String2="..") returned 1 [0228.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eba88 [0228.325] wcscpy (in: _Dest=0x81eba88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.325] wcscat (in: _Dest=0x81eba88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.325] wcscat (in: _Dest=0x81eba88, _Source="J0152884.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" [0228.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eba88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c00 [0228.326] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0228.327] wcscmp (_String1="J0152890.WMF", _String2=".") returned 1 [0228.327] wcscmp (_String1="J0152890.WMF", _String2="..") returned 1 [0228.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebb10 [0228.327] wcscpy (in: _Dest=0x81ebb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.327] wcscat (in: _Dest=0x81ebb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.327] wcscat (in: _Dest=0x81ebb10, _Source="J0152890.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" [0228.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x624 [0228.328] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0228.328] wcscmp (_String1="J0152892.WMF", _String2=".") returned 1 [0228.328] wcscmp (_String1="J0152892.WMF", _String2="..") returned 1 [0228.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebb98 [0228.328] wcscpy (in: _Dest=0x81ebb98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.328] wcscat (in: _Dest=0x81ebb98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.328] wcscat (in: _Dest=0x81ebb98, _Source="J0152892.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" [0228.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebb98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0228.330] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0228.330] wcscmp (_String1="J0152894.WMF", _String2=".") returned 1 [0228.330] wcscmp (_String1="J0152894.WMF", _String2="..") returned 1 [0228.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebc20 [0228.330] wcscpy (in: _Dest=0x81ebc20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.330] wcscat (in: _Dest=0x81ebc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.330] wcscat (in: _Dest=0x81ebc20, _Source="J0152894.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" [0228.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af4 [0228.332] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0228.332] wcscmp (_String1="J0152898.WMF", _String2=".") returned 1 [0228.332] wcscmp (_String1="J0152898.WMF", _String2="..") returned 1 [0228.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebca8 [0228.332] wcscpy (in: _Dest=0x81ebca8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.333] wcscat (in: _Dest=0x81ebca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.333] wcscat (in: _Dest=0x81ebca8, _Source="J0152898.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" [0228.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0228.334] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0228.334] wcscmp (_String1="J0153047.WMF", _String2=".") returned 1 [0228.334] wcscmp (_String1="J0153047.WMF", _String2="..") returned 1 [0228.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebd30 [0228.334] wcscpy (in: _Dest=0x81ebd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.335] wcscat (in: _Dest=0x81ebd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.335] wcscat (in: _Dest=0x81ebd30, _Source="J0153047.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" [0228.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0228.336] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0228.336] wcscmp (_String1="J0153087.WMF", _String2=".") returned 1 [0228.336] wcscmp (_String1="J0153087.WMF", _String2="..") returned 1 [0228.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebdb8 [0228.336] wcscpy (in: _Dest=0x81ebdb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.337] wcscat (in: _Dest=0x81ebdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.337] wcscat (in: _Dest=0x81ebdb8, _Source="J0153087.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" [0228.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0228.338] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0228.338] wcscmp (_String1="J0153089.WMF", _String2=".") returned 1 [0228.338] wcscmp (_String1="J0153089.WMF", _String2="..") returned 1 [0228.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebe40 [0228.338] wcscpy (in: _Dest=0x81ebe40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.338] wcscat (in: _Dest=0x81ebe40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.338] wcscat (in: _Dest=0x81ebe40, _Source="J0153089.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" [0228.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebe40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0228.340] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0228.340] wcscmp (_String1="J0153091.WMF", _String2=".") returned 1 [0228.340] wcscmp (_String1="J0153091.WMF", _String2="..") returned 1 [0228.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebec8 [0228.340] wcscpy (in: _Dest=0x81ebec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.340] wcscat (in: _Dest=0x81ebec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.340] wcscat (in: _Dest=0x81ebec8, _Source="J0153091.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" [0228.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0228.341] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0228.341] wcscmp (_String1="J0153093.WMF", _String2=".") returned 1 [0228.341] wcscmp (_String1="J0153093.WMF", _String2="..") returned 1 [0228.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebf50 [0228.342] wcscpy (in: _Dest=0x81ebf50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.342] wcscat (in: _Dest=0x81ebf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.342] wcscat (in: _Dest=0x81ebf50, _Source="J0153093.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" [0228.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0228.343] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0228.343] wcscmp (_String1="J0153095.WMF", _String2=".") returned 1 [0228.343] wcscmp (_String1="J0153095.WMF", _String2="..") returned 1 [0228.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ebfd8 [0228.343] wcscpy (in: _Dest=0x81ebfd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.343] wcscat (in: _Dest=0x81ebfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.343] wcscat (in: _Dest=0x81ebfd8, _Source="J0153095.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" [0228.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebfd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0228.344] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0228.345] wcscmp (_String1="J0153265.WMF", _String2=".") returned 1 [0228.345] wcscmp (_String1="J0153265.WMF", _String2="..") returned 1 [0228.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec060 [0228.345] wcscpy (in: _Dest=0x81ec060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.345] wcscat (in: _Dest=0x81ec060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.345] wcscat (in: _Dest=0x81ec060, _Source="J0153265.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" [0228.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0228.346] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0228.346] wcscmp (_String1="J0153273.WMF", _String2=".") returned 1 [0228.346] wcscmp (_String1="J0153273.WMF", _String2="..") returned 1 [0228.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec0e8 [0228.346] wcscpy (in: _Dest=0x81ec0e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.346] wcscat (in: _Dest=0x81ec0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.346] wcscat (in: _Dest=0x81ec0e8, _Source="J0153273.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" [0228.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d14 [0228.347] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0228.347] wcscmp (_String1="J0153299.WMF", _String2=".") returned 1 [0228.347] wcscmp (_String1="J0153299.WMF", _String2="..") returned 1 [0228.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec170 [0228.347] wcscpy (in: _Dest=0x81ec170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.347] wcscat (in: _Dest=0x81ec170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.347] wcscat (in: _Dest=0x81ec170, _Source="J0153299.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" [0228.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0228.349] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0228.349] wcscmp (_String1="J0153302.WMF", _String2=".") returned 1 [0228.349] wcscmp (_String1="J0153302.WMF", _String2="..") returned 1 [0228.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec1f8 [0228.349] wcscpy (in: _Dest=0x81ec1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.349] wcscat (in: _Dest=0x81ec1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.349] wcscat (in: _Dest=0x81ec1f8, _Source="J0153302.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" [0228.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0228.350] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0228.350] wcscmp (_String1="J0153305.WMF", _String2=".") returned 1 [0228.350] wcscmp (_String1="J0153305.WMF", _String2="..") returned 1 [0228.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec280 [0228.350] wcscpy (in: _Dest=0x81ec280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.350] wcscat (in: _Dest=0x81ec280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.351] wcscat (in: _Dest=0x81ec280, _Source="J0153305.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" [0228.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0228.460] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0228.460] wcscmp (_String1="J0153307.WMF", _String2=".") returned 1 [0228.460] wcscmp (_String1="J0153307.WMF", _String2="..") returned 1 [0228.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c88 [0228.461] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.461] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.461] wcscat (in: _Dest=0x3f30c88, _Source="J0153307.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" [0228.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0228.464] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0228.464] wcscmp (_String1="J0153313.WMF", _String2=".") returned 1 [0228.464] wcscmp (_String1="J0153313.WMF", _String2="..") returned 1 [0228.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec308 [0228.464] wcscpy (in: _Dest=0x81ec308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.464] wcscat (in: _Dest=0x81ec308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.464] wcscat (in: _Dest=0x81ec308, _Source="J0153313.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" [0228.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0228.466] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0228.466] wcscmp (_String1="J0153398.WMF", _String2=".") returned 1 [0228.466] wcscmp (_String1="J0153398.WMF", _String2="..") returned 1 [0228.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec390 [0228.466] wcscpy (in: _Dest=0x81ec390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.466] wcscat (in: _Dest=0x81ec390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.466] wcscat (in: _Dest=0x81ec390, _Source="J0153398.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" [0228.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0228.467] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0228.467] wcscmp (_String1="J0153508.WMF", _String2=".") returned 1 [0228.468] wcscmp (_String1="J0153508.WMF", _String2="..") returned 1 [0228.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec418 [0228.468] wcscpy (in: _Dest=0x81ec418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.468] wcscat (in: _Dest=0x81ec418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.468] wcscat (in: _Dest=0x81ec418, _Source="J0153508.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" [0228.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0228.469] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0228.469] wcscmp (_String1="J0153514.WMF", _String2=".") returned 1 [0228.469] wcscmp (_String1="J0153514.WMF", _String2="..") returned 1 [0228.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec4a0 [0228.469] wcscpy (in: _Dest=0x81ec4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.469] wcscat (in: _Dest=0x81ec4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.469] wcscat (in: _Dest=0x81ec4a0, _Source="J0153514.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" [0228.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0228.470] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0228.470] wcscmp (_String1="J0153516.WMF", _String2=".") returned 1 [0228.470] wcscmp (_String1="J0153516.WMF", _String2="..") returned 1 [0228.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec528 [0228.470] wcscpy (in: _Dest=0x81ec528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.470] wcscat (in: _Dest=0x81ec528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.470] wcscat (in: _Dest=0x81ec528, _Source="J0153516.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" [0228.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d18 [0228.471] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0228.471] wcscmp (_String1="J0153518.WMF", _String2=".") returned 1 [0228.471] wcscmp (_String1="J0153518.WMF", _String2="..") returned 1 [0228.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec5b0 [0228.471] wcscpy (in: _Dest=0x81ec5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.471] wcscat (in: _Dest=0x81ec5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.471] wcscat (in: _Dest=0x81ec5b0, _Source="J0153518.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" [0228.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0228.473] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0228.473] wcscmp (_String1="J0156537.WMF", _String2=".") returned 1 [0228.473] wcscmp (_String1="J0156537.WMF", _String2="..") returned 1 [0228.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec638 [0228.473] wcscpy (in: _Dest=0x81ec638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.473] wcscat (in: _Dest=0x81ec638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.473] wcscat (in: _Dest=0x81ec638, _Source="J0156537.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" [0228.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0228.481] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0228.481] wcscmp (_String1="J0157167.WMF", _String2=".") returned 1 [0228.481] wcscmp (_String1="J0157167.WMF", _String2="..") returned 1 [0228.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec6c0 [0228.481] wcscpy (in: _Dest=0x81ec6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.481] wcscat (in: _Dest=0x81ec6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.481] wcscat (in: _Dest=0x81ec6c0, _Source="J0157167.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" [0228.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0228.482] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0228.482] wcscmp (_String1="J0157177.WMF", _String2=".") returned 1 [0228.482] wcscmp (_String1="J0157177.WMF", _String2="..") returned 1 [0228.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec748 [0228.482] wcscpy (in: _Dest=0x81ec748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.482] wcscat (in: _Dest=0x81ec748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.482] wcscat (in: _Dest=0x81ec748, _Source="J0157177.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" [0228.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0228.483] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0228.483] wcscmp (_String1="J0157191.WMF", _String2=".") returned 1 [0228.483] wcscmp (_String1="J0157191.WMF", _String2="..") returned 1 [0228.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec7d0 [0228.483] wcscpy (in: _Dest=0x81ec7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.483] wcscat (in: _Dest=0x81ec7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.483] wcscat (in: _Dest=0x81ec7d0, _Source="J0157191.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" [0228.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d4 [0228.484] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0228.484] wcscmp (_String1="J0157831.WMF", _String2=".") returned 1 [0228.484] wcscmp (_String1="J0157831.WMF", _String2="..") returned 1 [0228.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec858 [0228.484] wcscpy (in: _Dest=0x81ec858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.484] wcscat (in: _Dest=0x81ec858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.485] wcscat (in: _Dest=0x81ec858, _Source="J0157831.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" [0228.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba8 [0228.486] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0228.486] wcscmp (_String1="J0158071.WMF", _String2=".") returned 1 [0228.486] wcscmp (_String1="J0158071.WMF", _String2="..") returned 1 [0228.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec8e0 [0228.486] wcscpy (in: _Dest=0x81ec8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.486] wcscat (in: _Dest=0x81ec8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.486] wcscat (in: _Dest=0x81ec8e0, _Source="J0158071.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" [0228.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0228.487] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0228.487] wcscmp (_String1="J0158477.WMF", _String2=".") returned 1 [0228.487] wcscmp (_String1="J0158477.WMF", _String2="..") returned 1 [0228.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec968 [0228.487] wcscpy (in: _Dest=0x81ec968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.487] wcscat (in: _Dest=0x81ec968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.488] wcscat (in: _Dest=0x81ec968, _Source="J0158477.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" [0228.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0228.489] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0228.490] wcscmp (_String1="J0160590.WMF", _String2=".") returned 1 [0228.490] wcscmp (_String1="J0160590.WMF", _String2="..") returned 1 [0228.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ec9f0 [0228.490] wcscpy (in: _Dest=0x81ec9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.490] wcscat (in: _Dest=0x81ec9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.490] wcscat (in: _Dest=0x81ec9f0, _Source="J0160590.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" [0228.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0228.491] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0228.491] wcscmp (_String1="J0164153.JPG", _String2=".") returned 1 [0228.491] wcscmp (_String1="J0164153.JPG", _String2="..") returned 1 [0228.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eca78 [0228.491] wcscpy (in: _Dest=0x81eca78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.491] wcscat (in: _Dest=0x81eca78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.491] wcscat (in: _Dest=0x81eca78, _Source="J0164153.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" [0228.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eca78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0228.492] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0228.492] wcscmp (_String1="J0168644.WMF", _String2=".") returned 1 [0228.492] wcscmp (_String1="J0168644.WMF", _String2="..") returned 1 [0228.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ecb00 [0228.492] wcscpy (in: _Dest=0x81ecb00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.492] wcscat (in: _Dest=0x81ecb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.492] wcscat (in: _Dest=0x81ecb00, _Source="J0168644.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" [0228.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0228.493] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0228.494] wcscmp (_String1="J0171685.WMF", _String2=".") returned 1 [0228.494] wcscmp (_String1="J0171685.WMF", _String2="..") returned 1 [0228.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ecb88 [0228.494] wcscpy (in: _Dest=0x81ecb88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.494] wcscat (in: _Dest=0x81ecb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.494] wcscat (in: _Dest=0x81ecb88, _Source="J0171685.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" [0228.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0228.495] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0228.495] wcscmp (_String1="J0171847.WMF", _String2=".") returned 1 [0228.495] wcscmp (_String1="J0171847.WMF", _String2="..") returned 1 [0228.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ecc10 [0228.495] wcscpy (in: _Dest=0x81ecc10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.495] wcscat (in: _Dest=0x81ecc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.495] wcscat (in: _Dest=0x81ecc10, _Source="J0171847.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" [0228.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a8 [0228.496] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0228.496] wcscmp (_String1="J0172035.WMF", _String2=".") returned 1 [0228.496] wcscmp (_String1="J0172035.WMF", _String2="..") returned 1 [0228.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ecc98 [0228.496] wcscpy (in: _Dest=0x81ecc98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.496] wcscat (in: _Dest=0x81ecc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.496] wcscat (in: _Dest=0x81ecc98, _Source="J0172035.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" [0228.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0228.497] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0228.497] wcscmp (_String1="J0172067.WMF", _String2=".") returned 1 [0228.497] wcscmp (_String1="J0172067.WMF", _String2="..") returned 1 [0228.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ecd20 [0228.497] wcscpy (in: _Dest=0x81ecd20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.497] wcscat (in: _Dest=0x81ecd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.497] wcscat (in: _Dest=0x81ecd20, _Source="J0172067.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" [0228.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0228.498] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0228.498] wcscmp (_String1="J0172193.WMF", _String2=".") returned 1 [0228.498] wcscmp (_String1="J0172193.WMF", _String2="..") returned 1 [0228.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ecda8 [0228.498] wcscpy (in: _Dest=0x81ecda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.498] wcscat (in: _Dest=0x81ecda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.498] wcscat (in: _Dest=0x81ecda8, _Source="J0172193.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" [0228.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0228.500] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0228.500] wcscmp (_String1="J0174315.WMF", _String2=".") returned 1 [0228.500] wcscmp (_String1="J0174315.WMF", _String2="..") returned 1 [0228.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ece30 [0228.500] wcscpy (in: _Dest=0x81ece30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.500] wcscat (in: _Dest=0x81ece30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.500] wcscat (in: _Dest=0x81ece30, _Source="J0174315.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" [0228.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ece30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0228.501] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0228.501] wcscmp (_String1="J0174635.WMF", _String2=".") returned 1 [0228.501] wcscmp (_String1="J0174635.WMF", _String2="..") returned 1 [0228.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81eceb8 [0228.501] wcscpy (in: _Dest=0x81eceb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.501] wcscat (in: _Dest=0x81eceb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.501] wcscat (in: _Dest=0x81eceb8, _Source="J0174635.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" [0228.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eceb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0228.502] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0228.502] wcscmp (_String1="J0174639.WMF", _String2=".") returned 1 [0228.502] wcscmp (_String1="J0174639.WMF", _String2="..") returned 1 [0228.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ecf40 [0228.503] wcscpy (in: _Dest=0x81ecf40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.503] wcscat (in: _Dest=0x81ecf40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.503] wcscat (in: _Dest=0x81ecf40, _Source="J0174639.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" [0228.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecf40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0228.504] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0228.504] wcscmp (_String1="J0174952.JPG", _String2=".") returned 1 [0228.504] wcscmp (_String1="J0174952.JPG", _String2="..") returned 1 [0228.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ecfc8 [0228.504] wcscpy (in: _Dest=0x81ecfc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.504] wcscat (in: _Dest=0x81ecfc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.504] wcscat (in: _Dest=0x81ecfc8, _Source="J0174952.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" [0228.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecfc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc4 [0228.580] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0228.580] wcscmp (_String1="J0175361.JPG", _String2=".") returned 1 [0228.580] wcscmp (_String1="J0175361.JPG", _String2="..") returned 1 [0228.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30a68 [0228.580] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.580] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.580] wcscat (in: _Dest=0x3f30a68, _Source="J0175361.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" [0228.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0228.581] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0228.581] wcscmp (_String1="J0175428.JPG", _String2=".") returned 1 [0228.582] wcscmp (_String1="J0175428.JPG", _String2="..") returned 1 [0228.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed050 [0228.582] wcscpy (in: _Dest=0x81ed050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.582] wcscat (in: _Dest=0x81ed050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.582] wcscat (in: _Dest=0x81ed050, _Source="J0175428.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" [0228.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0228.583] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0228.583] wcscmp (_String1="J0177257.JPG", _String2=".") returned 1 [0228.583] wcscmp (_String1="J0177257.JPG", _String2="..") returned 1 [0228.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed0d8 [0228.583] wcscpy (in: _Dest=0x81ed0d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.583] wcscat (in: _Dest=0x81ed0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.583] wcscat (in: _Dest=0x81ed0d8, _Source="J0177257.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" [0228.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0228.585] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0228.585] wcscmp (_String1="J0177806.JPG", _String2=".") returned 1 [0228.585] wcscmp (_String1="J0177806.JPG", _String2="..") returned 1 [0228.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed160 [0228.585] wcscpy (in: _Dest=0x81ed160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.585] wcscat (in: _Dest=0x81ed160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.585] wcscat (in: _Dest=0x81ed160, _Source="J0177806.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" [0228.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0228.586] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0228.586] wcscmp (_String1="J0178348.JPG", _String2=".") returned 1 [0228.586] wcscmp (_String1="J0178348.JPG", _String2="..") returned 1 [0228.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed1e8 [0228.586] wcscpy (in: _Dest=0x81ed1e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.586] wcscat (in: _Dest=0x81ed1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.586] wcscat (in: _Dest=0x81ed1e8, _Source="J0178348.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" [0228.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0228.588] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0228.588] wcscmp (_String1="J0178459.JPG", _String2=".") returned 1 [0228.588] wcscmp (_String1="J0178459.JPG", _String2="..") returned 1 [0228.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed270 [0228.588] wcscpy (in: _Dest=0x81ed270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.588] wcscat (in: _Dest=0x81ed270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.588] wcscat (in: _Dest=0x81ed270, _Source="J0178459.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" [0228.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0228.590] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x352e7200, ftCreationTime.dwHighDateTime=0x1c97c1a, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352e7200, ftLastWriteTime.dwHighDateTime=0x1c97c1a, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0228.590] wcscmp (_String1="J0178460.JPG", _String2=".") returned 1 [0228.590] wcscmp (_String1="J0178460.JPG", _String2="..") returned 1 [0228.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed2f8 [0228.590] wcscpy (in: _Dest=0x81ed2f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.590] wcscat (in: _Dest=0x81ed2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.590] wcscat (in: _Dest=0x81ed2f8, _Source="J0178460.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" [0228.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0228.591] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0228.591] wcscmp (_String1="J0178523.JPG", _String2=".") returned 1 [0228.591] wcscmp (_String1="J0178523.JPG", _String2="..") returned 1 [0228.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed380 [0228.591] wcscpy (in: _Dest=0x81ed380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.591] wcscat (in: _Dest=0x81ed380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.592] wcscat (in: _Dest=0x81ed380, _Source="J0178523.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" [0228.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0228.593] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0228.593] wcscmp (_String1="J0178632.JPG", _String2=".") returned 1 [0228.593] wcscmp (_String1="J0178632.JPG", _String2="..") returned 1 [0228.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed408 [0228.593] wcscpy (in: _Dest=0x81ed408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.593] wcscat (in: _Dest=0x81ed408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.593] wcscat (in: _Dest=0x81ed408, _Source="J0178632.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" [0228.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0228.594] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0228.594] wcscmp (_String1="J0178639.JPG", _String2=".") returned 1 [0228.594] wcscmp (_String1="J0178639.JPG", _String2="..") returned 1 [0228.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed490 [0228.594] wcscpy (in: _Dest=0x81ed490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.594] wcscat (in: _Dest=0x81ed490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.594] wcscat (in: _Dest=0x81ed490, _Source="J0178639.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" [0228.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0228.596] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0228.596] wcscmp (_String1="J0178932.JPG", _String2=".") returned 1 [0228.596] wcscmp (_String1="J0178932.JPG", _String2="..") returned 1 [0228.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed518 [0228.596] wcscpy (in: _Dest=0x81ed518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.596] wcscat (in: _Dest=0x81ed518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.596] wcscat (in: _Dest=0x81ed518, _Source="J0178932.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" [0228.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac0 [0228.597] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0228.597] wcscmp (_String1="J0179963.JPG", _String2=".") returned 1 [0228.597] wcscmp (_String1="J0179963.JPG", _String2="..") returned 1 [0228.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81ed5a0 [0228.597] wcscpy (in: _Dest=0x81ed5a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.597] wcscat (in: _Dest=0x81ed5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.597] wcscat (in: _Dest=0x81ed5a0, _Source="J0179963.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" [0228.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0228.598] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0228.598] wcscmp (_String1="J0182689.JPG", _String2=".") returned 1 [0228.598] wcscmp (_String1="J0182689.JPG", _String2="..") returned 1 [0228.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403930 [0228.599] wcscpy (in: _Dest=0x8403930, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.599] wcscat (in: _Dest=0x8403930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.599] wcscat (in: _Dest=0x8403930, _Source="J0182689.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" [0228.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0228.600] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0228.601] wcscmp (_String1="J0182888.WMF", _String2=".") returned 1 [0228.601] wcscmp (_String1="J0182888.WMF", _String2="..") returned 1 [0228.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84039b8 [0228.601] wcscpy (in: _Dest=0x84039b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.601] wcscat (in: _Dest=0x84039b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.601] wcscat (in: _Dest=0x84039b8, _Source="J0182888.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" [0228.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84039b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0228.602] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0228.602] wcscmp (_String1="J0182898.WMF", _String2=".") returned 1 [0228.602] wcscmp (_String1="J0182898.WMF", _String2="..") returned 1 [0228.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403a40 [0228.602] wcscpy (in: _Dest=0x8403a40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.602] wcscat (in: _Dest=0x8403a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.602] wcscat (in: _Dest=0x8403a40, _Source="J0182898.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" [0228.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0228.603] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0228.603] wcscmp (_String1="J0182902.WMF", _String2=".") returned 1 [0228.603] wcscmp (_String1="J0182902.WMF", _String2="..") returned 1 [0228.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403ac8 [0228.604] wcscpy (in: _Dest=0x8403ac8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.604] wcscat (in: _Dest=0x8403ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.604] wcscat (in: _Dest=0x8403ac8, _Source="J0182902.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" [0228.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0228.605] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65dea00, ftCreationTime.dwHighDateTime=0x1bdf759, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb65dea00, ftLastWriteTime.dwHighDateTime=0x1bdf759, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0228.605] wcscmp (_String1="J0182946.WMF", _String2=".") returned 1 [0228.605] wcscmp (_String1="J0182946.WMF", _String2="..") returned 1 [0228.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403b50 [0228.605] wcscpy (in: _Dest=0x8403b50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.605] wcscat (in: _Dest=0x8403b50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.605] wcscat (in: _Dest=0x8403b50, _Source="J0182946.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" [0228.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0228.606] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0228.606] wcscmp (_String1="J0183172.WMF", _String2=".") returned 1 [0228.606] wcscmp (_String1="J0183172.WMF", _String2="..") returned 1 [0228.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403bd8 [0228.606] wcscpy (in: _Dest=0x8403bd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.606] wcscat (in: _Dest=0x8403bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.606] wcscat (in: _Dest=0x8403bd8, _Source="J0183172.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" [0228.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0228.607] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0228.607] wcscmp (_String1="J0183174.WMF", _String2=".") returned 1 [0228.607] wcscmp (_String1="J0183174.WMF", _String2="..") returned 1 [0228.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403c60 [0228.607] wcscpy (in: _Dest=0x8403c60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.607] wcscat (in: _Dest=0x8403c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.608] wcscat (in: _Dest=0x8403c60, _Source="J0183174.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" [0228.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0228.609] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0228.609] wcscmp (_String1="J0183198.WMF", _String2=".") returned 1 [0228.609] wcscmp (_String1="J0183198.WMF", _String2="..") returned 1 [0228.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403ce8 [0228.609] wcscpy (in: _Dest=0x8403ce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.609] wcscat (in: _Dest=0x8403ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.609] wcscat (in: _Dest=0x8403ce8, _Source="J0183198.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" [0228.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0228.610] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0228.610] wcscmp (_String1="J0183574.WMF", _String2=".") returned 1 [0228.610] wcscmp (_String1="J0183574.WMF", _String2="..") returned 1 [0228.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403d70 [0228.610] wcscpy (in: _Dest=0x8403d70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.610] wcscat (in: _Dest=0x8403d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.610] wcscat (in: _Dest=0x8403d70, _Source="J0183574.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" [0228.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34 [0228.611] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0228.611] wcscmp (_String1="J0185670.WMF", _String2=".") returned 1 [0228.611] wcscmp (_String1="J0185670.WMF", _String2="..") returned 1 [0228.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403df8 [0228.611] wcscpy (in: _Dest=0x8403df8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.611] wcscat (in: _Dest=0x8403df8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.611] wcscat (in: _Dest=0x8403df8, _Source="J0185670.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" [0228.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403df8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08 [0228.612] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0229.012] wcscmp (_String1="J0185774.WMF", _String2=".") returned 1 [0229.012] wcscmp (_String1="J0185774.WMF", _String2="..") returned 1 [0229.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30380 [0229.012] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.012] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.012] wcscat (in: _Dest=0x3f30380, _Source="J0185774.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" [0229.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0229.013] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0229.013] wcscmp (_String1="J0185776.WMF", _String2=".") returned 1 [0229.013] wcscmp (_String1="J0185776.WMF", _String2="..") returned 1 [0229.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fb00 [0229.013] wcscpy (in: _Dest=0x3f2fb00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.013] wcscat (in: _Dest=0x3f2fb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.013] wcscat (in: _Dest=0x3f2fb00, _Source="J0185776.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" [0229.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0229.014] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0229.014] wcscmp (_String1="J0185778.WMF", _String2=".") returned 1 [0229.015] wcscmp (_String1="J0185778.WMF", _String2="..") returned 1 [0229.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403e80 [0229.015] wcscpy (in: _Dest=0x8403e80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.015] wcscat (in: _Dest=0x8403e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.015] wcscat (in: _Dest=0x8403e80, _Source="J0185778.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" [0229.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0229.016] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0229.016] wcscmp (_String1="J0185780.WMF", _String2=".") returned 1 [0229.016] wcscmp (_String1="J0185780.WMF", _String2="..") returned 1 [0229.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403f08 [0229.016] wcscpy (in: _Dest=0x8403f08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.016] wcscat (in: _Dest=0x8403f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.016] wcscat (in: _Dest=0x8403f08, _Source="J0185780.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" [0229.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0229.017] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0229.017] wcscmp (_String1="J0185786.WMF", _String2=".") returned 1 [0229.017] wcscmp (_String1="J0185786.WMF", _String2="..") returned 1 [0229.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8403f90 [0229.018] wcscpy (in: _Dest=0x8403f90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.018] wcscat (in: _Dest=0x8403f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.018] wcscat (in: _Dest=0x8403f90, _Source="J0185786.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" [0229.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0229.019] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0229.019] wcscmp (_String1="J0185790.WMF", _String2=".") returned 1 [0229.019] wcscmp (_String1="J0185790.WMF", _String2="..") returned 1 [0229.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404018 [0229.019] wcscpy (in: _Dest=0x8404018, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.019] wcscat (in: _Dest=0x8404018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.019] wcscat (in: _Dest=0x8404018, _Source="J0185790.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" [0229.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0229.020] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0229.020] wcscmp (_String1="J0185796.WMF", _String2=".") returned 1 [0229.020] wcscmp (_String1="J0185796.WMF", _String2="..") returned 1 [0229.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84040a0 [0229.020] wcscpy (in: _Dest=0x84040a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.020] wcscat (in: _Dest=0x84040a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.021] wcscat (in: _Dest=0x84040a0, _Source="J0185796.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" [0229.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84040a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a60 [0229.022] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0229.022] wcscmp (_String1="J0185798.WMF", _String2=".") returned 1 [0229.022] wcscmp (_String1="J0185798.WMF", _String2="..") returned 1 [0229.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404128 [0229.022] wcscpy (in: _Dest=0x8404128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.022] wcscat (in: _Dest=0x8404128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.022] wcscat (in: _Dest=0x8404128, _Source="J0185798.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" [0229.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0229.023] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0229.023] wcscmp (_String1="J0185800.WMF", _String2=".") returned 1 [0229.024] wcscmp (_String1="J0185800.WMF", _String2="..") returned 1 [0229.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84041b0 [0229.024] wcscpy (in: _Dest=0x84041b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.024] wcscat (in: _Dest=0x84041b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.024] wcscat (in: _Dest=0x84041b0, _Source="J0185800.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" [0229.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84041b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0229.025] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0229.025] wcscmp (_String1="J0185806.WMF", _String2=".") returned 1 [0229.025] wcscmp (_String1="J0185806.WMF", _String2="..") returned 1 [0229.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404238 [0229.025] wcscpy (in: _Dest=0x8404238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.025] wcscat (in: _Dest=0x8404238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.025] wcscat (in: _Dest=0x8404238, _Source="J0185806.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" [0229.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0229.026] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0229.026] wcscmp (_String1="J0185818.WMF", _String2=".") returned 1 [0229.026] wcscmp (_String1="J0185818.WMF", _String2="..") returned 1 [0229.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84042c0 [0229.027] wcscpy (in: _Dest=0x84042c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.027] wcscat (in: _Dest=0x84042c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.027] wcscat (in: _Dest=0x84042c0, _Source="J0185818.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" [0229.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84042c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0229.031] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0229.031] wcscmp (_String1="J0185828.WMF", _String2=".") returned 1 [0229.031] wcscmp (_String1="J0185828.WMF", _String2="..") returned 1 [0229.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404348 [0229.032] wcscpy (in: _Dest=0x8404348, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.032] wcscat (in: _Dest=0x8404348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.032] wcscat (in: _Dest=0x8404348, _Source="J0185828.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" [0229.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d4 [0229.035] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0229.035] wcscmp (_String1="J0185834.WMF", _String2=".") returned 1 [0229.035] wcscmp (_String1="J0185834.WMF", _String2="..") returned 1 [0229.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84043d0 [0229.036] wcscpy (in: _Dest=0x84043d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.036] wcscat (in: _Dest=0x84043d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.036] wcscat (in: _Dest=0x84043d0, _Source="J0185834.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" [0229.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84043d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a8 [0229.042] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0229.042] wcscmp (_String1="J0185842.WMF", _String2=".") returned 1 [0229.042] wcscmp (_String1="J0185842.WMF", _String2="..") returned 1 [0229.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404458 [0229.042] wcscpy (in: _Dest=0x8404458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.042] wcscat (in: _Dest=0x8404458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.042] wcscat (in: _Dest=0x8404458, _Source="J0185842.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" [0229.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0229.045] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0229.045] wcscmp (_String1="J0186346.WMF", _String2=".") returned 1 [0229.045] wcscmp (_String1="J0186346.WMF", _String2="..") returned 1 [0229.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84044e0 [0229.046] wcscpy (in: _Dest=0x84044e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.046] wcscat (in: _Dest=0x84044e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.046] wcscat (in: _Dest=0x84044e0, _Source="J0186346.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" [0229.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84044e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0229.054] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0229.054] wcscmp (_String1="J0186360.WMF", _String2=".") returned 1 [0229.054] wcscmp (_String1="J0186360.WMF", _String2="..") returned 1 [0229.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404568 [0229.054] wcscpy (in: _Dest=0x8404568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.054] wcscat (in: _Dest=0x8404568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.054] wcscat (in: _Dest=0x8404568, _Source="J0186360.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" [0229.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0229.056] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0229.056] wcscmp (_String1="J0186362.WMF", _String2=".") returned 1 [0229.057] wcscmp (_String1="J0186362.WMF", _String2="..") returned 1 [0229.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84045f0 [0229.057] wcscpy (in: _Dest=0x84045f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.057] wcscat (in: _Dest=0x84045f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.057] wcscat (in: _Dest=0x84045f0, _Source="J0186362.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" [0229.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84045f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0229.064] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0229.064] wcscmp (_String1="J0186364.WMF", _String2=".") returned 1 [0229.064] wcscmp (_String1="J0186364.WMF", _String2="..") returned 1 [0229.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404678 [0229.064] wcscpy (in: _Dest=0x8404678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.064] wcscat (in: _Dest=0x8404678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.064] wcscat (in: _Dest=0x8404678, _Source="J0186364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" [0229.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0229.065] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0229.065] wcscmp (_String1="J0187647.WMF", _String2=".") returned 1 [0229.065] wcscmp (_String1="J0187647.WMF", _String2="..") returned 1 [0229.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404700 [0229.065] wcscpy (in: _Dest=0x8404700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.065] wcscat (in: _Dest=0x8404700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.065] wcscat (in: _Dest=0x8404700, _Source="J0187647.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" [0229.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0229.066] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0229.066] wcscmp (_String1="J0187815.WMF", _String2=".") returned 1 [0229.066] wcscmp (_String1="J0187815.WMF", _String2="..") returned 1 [0229.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404788 [0229.066] wcscpy (in: _Dest=0x8404788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.067] wcscat (in: _Dest=0x8404788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.067] wcscat (in: _Dest=0x8404788, _Source="J0187815.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" [0229.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0229.068] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0229.068] wcscmp (_String1="J0187817.WMF", _String2=".") returned 1 [0229.068] wcscmp (_String1="J0187817.WMF", _String2="..") returned 1 [0229.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404810 [0229.068] wcscpy (in: _Dest=0x8404810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.068] wcscat (in: _Dest=0x8404810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.068] wcscat (in: _Dest=0x8404810, _Source="J0187817.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" [0229.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0229.069] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0229.069] wcscmp (_String1="J0187819.WMF", _String2=".") returned 1 [0229.069] wcscmp (_String1="J0187819.WMF", _String2="..") returned 1 [0229.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404898 [0229.069] wcscpy (in: _Dest=0x8404898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.069] wcscat (in: _Dest=0x8404898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.069] wcscat (in: _Dest=0x8404898, _Source="J0187819.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" [0229.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0229.070] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0229.070] wcscmp (_String1="J0187825.WMF", _String2=".") returned 1 [0229.070] wcscmp (_String1="J0187825.WMF", _String2="..") returned 1 [0229.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404920 [0229.070] wcscpy (in: _Dest=0x8404920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.070] wcscat (in: _Dest=0x8404920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.070] wcscat (in: _Dest=0x8404920, _Source="J0187825.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" [0229.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0229.071] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0229.071] wcscmp (_String1="J0187829.WMF", _String2=".") returned 1 [0229.071] wcscmp (_String1="J0187829.WMF", _String2="..") returned 1 [0229.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84049a8 [0229.071] wcscpy (in: _Dest=0x84049a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.071] wcscat (in: _Dest=0x84049a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.071] wcscat (in: _Dest=0x84049a8, _Source="J0187829.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" [0229.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84049a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0 [0229.072] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0229.072] wcscmp (_String1="J0187835.WMF", _String2=".") returned 1 [0229.073] wcscmp (_String1="J0187835.WMF", _String2="..") returned 1 [0229.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404a30 [0229.073] wcscpy (in: _Dest=0x8404a30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.073] wcscat (in: _Dest=0x8404a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.073] wcscat (in: _Dest=0x8404a30, _Source="J0187835.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" [0229.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0229.074] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0229.074] wcscmp (_String1="J0187837.WMF", _String2=".") returned 1 [0229.074] wcscmp (_String1="J0187837.WMF", _String2="..") returned 1 [0229.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404ab8 [0229.074] wcscpy (in: _Dest=0x8404ab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.074] wcscat (in: _Dest=0x8404ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.074] wcscat (in: _Dest=0x8404ab8, _Source="J0187837.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" [0229.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a18 [0229.075] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0229.075] wcscmp (_String1="J0187839.WMF", _String2=".") returned 1 [0229.075] wcscmp (_String1="J0187839.WMF", _String2="..") returned 1 [0229.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404b40 [0229.075] wcscpy (in: _Dest=0x8404b40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.075] wcscat (in: _Dest=0x8404b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.075] wcscat (in: _Dest=0x8404b40, _Source="J0187839.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" [0229.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0229.076] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0229.076] wcscmp (_String1="J0187847.WMF", _String2=".") returned 1 [0229.076] wcscmp (_String1="J0187847.WMF", _String2="..") returned 1 [0229.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404bc8 [0229.076] wcscpy (in: _Dest=0x8404bc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.076] wcscat (in: _Dest=0x8404bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.076] wcscat (in: _Dest=0x8404bc8, _Source="J0187847.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" [0229.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0229.166] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0229.166] wcscmp (_String1="J0187849.WMF", _String2=".") returned 1 [0229.166] wcscmp (_String1="J0187849.WMF", _String2="..") returned 1 [0229.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404c50 [0229.166] wcscpy (in: _Dest=0x8404c50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.166] wcscat (in: _Dest=0x8404c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.167] wcscat (in: _Dest=0x8404c50, _Source="J0187849.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" [0229.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0229.167] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0229.167] wcscmp (_String1="J0187851.WMF", _String2=".") returned 1 [0229.167] wcscmp (_String1="J0187851.WMF", _String2="..") returned 1 [0229.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404cd8 [0229.168] wcscpy (in: _Dest=0x8404cd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.168] wcscat (in: _Dest=0x8404cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.168] wcscat (in: _Dest=0x8404cd8, _Source="J0187851.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" [0229.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0229.168] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0229.168] wcscmp (_String1="J0187859.WMF", _String2=".") returned 1 [0229.168] wcscmp (_String1="J0187859.WMF", _String2="..") returned 1 [0229.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404d60 [0229.169] wcscpy (in: _Dest=0x8404d60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.169] wcscat (in: _Dest=0x8404d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.169] wcscat (in: _Dest=0x8404d60, _Source="J0187859.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" [0229.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0229.169] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0229.170] wcscmp (_String1="J0187861.WMF", _String2=".") returned 1 [0229.170] wcscmp (_String1="J0187861.WMF", _String2="..") returned 1 [0229.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404de8 [0229.170] wcscpy (in: _Dest=0x8404de8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.170] wcscat (in: _Dest=0x8404de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.170] wcscat (in: _Dest=0x8404de8, _Source="J0187861.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" [0229.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0229.172] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0229.172] wcscmp (_String1="J0187863.WMF", _String2=".") returned 1 [0229.172] wcscmp (_String1="J0187863.WMF", _String2="..") returned 1 [0229.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404e70 [0229.172] wcscpy (in: _Dest=0x8404e70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.172] wcscat (in: _Dest=0x8404e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.172] wcscat (in: _Dest=0x8404e70, _Source="J0187863.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" [0229.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0229.173] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0229.173] wcscmp (_String1="J0187881.WMF", _String2=".") returned 1 [0229.173] wcscmp (_String1="J0187881.WMF", _String2="..") returned 1 [0229.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404ef8 [0229.173] wcscpy (in: _Dest=0x8404ef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.173] wcscat (in: _Dest=0x8404ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.173] wcscat (in: _Dest=0x8404ef8, _Source="J0187881.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" [0229.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x266c [0229.174] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0229.242] wcscmp (_String1="J0187883.WMF", _String2=".") returned 1 [0229.242] wcscmp (_String1="J0187883.WMF", _String2="..") returned 1 [0229.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ff70 [0229.243] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.243] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.243] wcscat (in: _Dest=0x3e1ff70, _Source="J0187883.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" [0229.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0229.244] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0229.244] wcscmp (_String1="J0187893.WMF", _String2=".") returned 1 [0229.244] wcscmp (_String1="J0187893.WMF", _String2="..") returned 1 [0229.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f008 [0229.244] wcscpy (in: _Dest=0x3e1f008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.244] wcscat (in: _Dest=0x3e1f008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.244] wcscat (in: _Dest=0x3e1f008, _Source="J0187893.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" [0229.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0229.245] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0229.245] wcscmp (_String1="J0187895.WMF", _String2=".") returned 1 [0229.245] wcscmp (_String1="J0187895.WMF", _String2="..") returned 1 [0229.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f558 [0229.245] wcscpy (in: _Dest=0x3e1f558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.245] wcscat (in: _Dest=0x3e1f558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.245] wcscat (in: _Dest=0x3e1f558, _Source="J0187895.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" [0229.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0229.248] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0229.248] wcscmp (_String1="J0187921.WMF", _String2=".") returned 1 [0229.248] wcscmp (_String1="J0187921.WMF", _String2="..") returned 1 [0229.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8404f80 [0229.248] wcscpy (in: _Dest=0x8404f80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.248] wcscat (in: _Dest=0x8404f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.248] wcscat (in: _Dest=0x8404f80, _Source="J0187921.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" [0229.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0229.250] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0229.250] wcscmp (_String1="J0188511.WMF", _String2=".") returned 1 [0229.250] wcscmp (_String1="J0188511.WMF", _String2="..") returned 1 [0229.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405008 [0229.250] wcscpy (in: _Dest=0x8405008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.250] wcscat (in: _Dest=0x8405008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.250] wcscat (in: _Dest=0x8405008, _Source="J0188511.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" [0229.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0229.251] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0229.251] wcscmp (_String1="J0188513.WMF", _String2=".") returned 1 [0229.251] wcscmp (_String1="J0188513.WMF", _String2="..") returned 1 [0229.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405090 [0229.251] wcscpy (in: _Dest=0x8405090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.251] wcscat (in: _Dest=0x8405090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.251] wcscat (in: _Dest=0x8405090, _Source="J0188513.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" [0229.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b34 [0229.252] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0229.252] wcscmp (_String1="J0188519.WMF", _String2=".") returned 1 [0229.252] wcscmp (_String1="J0188519.WMF", _String2="..") returned 1 [0229.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405118 [0229.252] wcscpy (in: _Dest=0x8405118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.252] wcscat (in: _Dest=0x8405118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.252] wcscat (in: _Dest=0x8405118, _Source="J0188519.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" [0229.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x269c [0229.253] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0229.253] wcscmp (_String1="J0188587.WMF", _String2=".") returned 1 [0229.253] wcscmp (_String1="J0188587.WMF", _String2="..") returned 1 [0229.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84051a0 [0229.254] wcscpy (in: _Dest=0x84051a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.254] wcscat (in: _Dest=0x84051a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.254] wcscat (in: _Dest=0x84051a0, _Source="J0188587.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" [0229.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84051a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0229.254] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0229.254] wcscmp (_String1="J0188667.WMF", _String2=".") returned 1 [0229.254] wcscmp (_String1="J0188667.WMF", _String2="..") returned 1 [0229.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405228 [0229.255] wcscpy (in: _Dest=0x8405228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.255] wcscat (in: _Dest=0x8405228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.255] wcscat (in: _Dest=0x8405228, _Source="J0188667.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" [0229.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0229.258] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0229.258] wcscmp (_String1="J0188669.WMF", _String2=".") returned 1 [0229.258] wcscmp (_String1="J0188669.WMF", _String2="..") returned 1 [0229.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84052b0 [0229.259] wcscpy (in: _Dest=0x84052b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.259] wcscat (in: _Dest=0x84052b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.259] wcscat (in: _Dest=0x84052b0, _Source="J0188669.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" [0229.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84052b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c [0229.260] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0229.260] wcscmp (_String1="J0188679.WMF", _String2=".") returned 1 [0229.260] wcscmp (_String1="J0188679.WMF", _String2="..") returned 1 [0229.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405338 [0229.260] wcscpy (in: _Dest=0x8405338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.260] wcscat (in: _Dest=0x8405338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.260] wcscat (in: _Dest=0x8405338, _Source="J0188679.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" [0229.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec [0229.261] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0229.261] wcscmp (_String1="J0195248.WMF", _String2=".") returned 1 [0229.261] wcscmp (_String1="J0195248.WMF", _String2="..") returned 1 [0229.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84053c0 [0229.261] wcscpy (in: _Dest=0x84053c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.261] wcscat (in: _Dest=0x84053c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.261] wcscat (in: _Dest=0x84053c0, _Source="J0195248.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" [0229.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84053c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b04 [0229.262] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17119f00, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17119f00, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0229.262] wcscmp (_String1="J0195254.WMF", _String2=".") returned 1 [0229.262] wcscmp (_String1="J0195254.WMF", _String2="..") returned 1 [0229.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405448 [0229.262] wcscpy (in: _Dest=0x8405448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.262] wcscat (in: _Dest=0x8405448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.262] wcscat (in: _Dest=0x8405448, _Source="J0195254.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" [0229.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2548 [0229.264] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aa52600, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aa52600, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0229.264] wcscmp (_String1="J0195260.WMF", _String2=".") returned 1 [0229.264] wcscmp (_String1="J0195260.WMF", _String2="..") returned 1 [0229.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84054d0 [0229.264] wcscpy (in: _Dest=0x84054d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.264] wcscat (in: _Dest=0x84054d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.264] wcscat (in: _Dest=0x84054d0, _Source="J0195260.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" [0229.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84054d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d4 [0229.268] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db7f600, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2db7f600, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0229.269] wcscmp (_String1="J0195320.WMF", _String2=".") returned 1 [0229.269] wcscmp (_String1="J0195320.WMF", _String2="..") returned 1 [0229.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405558 [0229.269] wcscpy (in: _Dest=0x8405558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.269] wcscat (in: _Dest=0x8405558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.269] wcscat (in: _Dest=0x8405558, _Source="J0195320.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" [0229.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0229.276] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e686c00, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e686c00, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0229.276] wcscmp (_String1="J0195342.WMF", _String2=".") returned 1 [0229.276] wcscmp (_String1="J0195342.WMF", _String2="..") returned 1 [0229.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84055e0 [0229.276] wcscpy (in: _Dest=0x84055e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.276] wcscat (in: _Dest=0x84055e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.276] wcscat (in: _Dest=0x84055e0, _Source="J0195342.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" [0229.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84055e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0229.277] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0229.277] wcscmp (_String1="J0195428.WMF", _String2=".") returned 1 [0229.277] wcscmp (_String1="J0195428.WMF", _String2="..") returned 1 [0229.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405668 [0229.277] wcscpy (in: _Dest=0x8405668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.277] wcscat (in: _Dest=0x8405668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.277] wcscat (in: _Dest=0x8405668, _Source="J0195428.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" [0229.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0229.279] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0229.279] wcscmp (_String1="J0195772.WMF", _String2=".") returned 1 [0229.279] wcscmp (_String1="J0195772.WMF", _String2="..") returned 1 [0229.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x84056f0 [0229.279] wcscpy (in: _Dest=0x84056f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.279] wcscat (in: _Dest=0x84056f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.279] wcscat (in: _Dest=0x84056f0, _Source="J0195772.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" [0229.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84056f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0229.281] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0229.281] wcscmp (_String1="J0195788.WMF", _String2=".") returned 1 [0229.281] wcscmp (_String1="J0195788.WMF", _String2="..") returned 1 [0229.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405778 [0229.281] wcscpy (in: _Dest=0x8405778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.281] wcscat (in: _Dest=0x8405778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.281] wcscat (in: _Dest=0x8405778, _Source="J0195788.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" [0229.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0229.282] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0229.282] wcscmp (_String1="J0196060.WMF", _String2=".") returned 1 [0229.282] wcscmp (_String1="J0196060.WMF", _String2="..") returned 1 [0229.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405800 [0229.282] wcscpy (in: _Dest=0x8405800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.282] wcscat (in: _Dest=0x8405800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.282] wcscat (in: _Dest=0x8405800, _Source="J0196060.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" [0229.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0229.283] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0229.283] wcscmp (_String1="J0196110.WMF", _String2=".") returned 1 [0229.283] wcscmp (_String1="J0196110.WMF", _String2="..") returned 1 [0229.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8405888 [0229.284] wcscpy (in: _Dest=0x8405888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.284] wcscat (in: _Dest=0x8405888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.284] wcscat (in: _Dest=0x8405888, _Source="J0196110.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" [0229.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0229.285] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0229.285] wcscmp (_String1="J0196142.WMF", _String2=".") returned 1 [0229.285] wcscmp (_String1="J0196142.WMF", _String2="..") returned 1 [0229.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053418 [0229.285] wcscpy (in: _Dest=0x8053418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.285] wcscat (in: _Dest=0x8053418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.285] wcscat (in: _Dest=0x8053418, _Source="J0196142.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" [0229.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0229.286] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d32f00, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d32f00, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0229.286] wcscmp (_String1="J0196354.WMF", _String2=".") returned 1 [0229.286] wcscmp (_String1="J0196354.WMF", _String2="..") returned 1 [0229.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db648 [0229.286] wcscpy (in: _Dest=0x81db648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.286] wcscat (in: _Dest=0x81db648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.286] wcscat (in: _Dest=0x81db648, _Source="J0196354.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" [0229.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0229.287] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa045c00, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa045c00, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0229.287] wcscmp (_String1="J0196358.WMF", _String2=".") returned 1 [0229.287] wcscmp (_String1="J0196358.WMF", _String2="..") returned 1 [0229.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db6d0 [0229.287] wcscpy (in: _Dest=0x81db6d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.287] wcscat (in: _Dest=0x81db6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.287] wcscat (in: _Dest=0x81db6d0, _Source="J0196358.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" [0229.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0229.288] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd97e300, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd97e300, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0229.288] wcscmp (_String1="J0196364.WMF", _String2=".") returned 1 [0229.288] wcscmp (_String1="J0196364.WMF", _String2="..") returned 1 [0229.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db758 [0229.288] wcscpy (in: _Dest=0x81db758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.288] wcscat (in: _Dest=0x81db758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.288] wcscat (in: _Dest=0x81db758, _Source="J0196364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" [0229.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0229.298] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0229.298] wcscmp (_String1="J0197979.WMF", _String2=".") returned 1 [0229.298] wcscmp (_String1="J0197979.WMF", _String2="..") returned 1 [0229.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db7e0 [0229.298] wcscpy (in: _Dest=0x81db7e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.298] wcscat (in: _Dest=0x81db7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.298] wcscat (in: _Dest=0x81db7e0, _Source="J0197979.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" [0229.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0229.299] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb922a800, ftCreationTime.dwHighDateTime=0x1be3d65, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb922a800, ftLastWriteTime.dwHighDateTime=0x1be3d65, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0229.299] wcscmp (_String1="J0197983.WMF", _String2=".") returned 1 [0229.299] wcscmp (_String1="J0197983.WMF", _String2="..") returned 1 [0229.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db868 [0229.299] wcscpy (in: _Dest=0x81db868, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.299] wcscat (in: _Dest=0x81db868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.300] wcscat (in: _Dest=0x81db868, _Source="J0197983.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" [0229.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0229.300] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f334800, ftCreationTime.dwHighDateTime=0x1c032a1, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f334800, ftLastWriteTime.dwHighDateTime=0x1c032a1, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0229.300] wcscmp (_String1="J0198016.WMF", _String2=".") returned 1 [0229.300] wcscmp (_String1="J0198016.WMF", _String2="..") returned 1 [0229.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db8f0 [0229.301] wcscpy (in: _Dest=0x81db8f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.301] wcscat (in: _Dest=0x81db8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.301] wcscat (in: _Dest=0x81db8f0, _Source="J0198016.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" [0229.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0229.309] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e2700, ftCreationTime.dwHighDateTime=0x1bd84c9, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72e2700, ftLastWriteTime.dwHighDateTime=0x1bd84c9, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0229.309] wcscmp (_String1="J0198020.WMF", _String2=".") returned 1 [0229.309] wcscmp (_String1="J0198020.WMF", _String2="..") returned 1 [0229.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db978 [0229.309] wcscpy (in: _Dest=0x81db978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.309] wcscat (in: _Dest=0x81db978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.309] wcscat (in: _Dest=0x81db978, _Source="J0198020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" [0229.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0229.311] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9908100, ftCreationTime.dwHighDateTime=0x1bd84c9, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9908100, ftLastWriteTime.dwHighDateTime=0x1bd84c9, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0229.311] wcscmp (_String1="J0198021.WMF", _String2=".") returned 1 [0229.311] wcscmp (_String1="J0198021.WMF", _String2="..") returned 1 [0229.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dba00 [0229.311] wcscpy (in: _Dest=0x81dba00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.311] wcscat (in: _Dest=0x81dba00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.311] wcscat (in: _Dest=0x81dba00, _Source="J0198021.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" [0229.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dba00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0229.317] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae31da00, ftCreationTime.dwHighDateTime=0x1c032a1, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae31da00, ftLastWriteTime.dwHighDateTime=0x1c032a1, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0229.317] wcscmp (_String1="J0198022.WMF", _String2=".") returned 1 [0229.317] wcscmp (_String1="J0198022.WMF", _String2="..") returned 1 [0229.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dba88 [0229.317] wcscpy (in: _Dest=0x81dba88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.317] wcscat (in: _Dest=0x81dba88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.317] wcscat (in: _Dest=0x81dba88, _Source="J0198022.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" [0229.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dba88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0229.365] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1319e900, ftCreationTime.dwHighDateTime=0x1bd84c9, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1319e900, ftLastWriteTime.dwHighDateTime=0x1bd84c9, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0229.365] wcscmp (_String1="J0198025.WMF", _String2=".") returned 1 [0229.365] wcscmp (_String1="J0198025.WMF", _String2="..") returned 1 [0229.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f228 [0229.365] wcscpy (in: _Dest=0x3e1f228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.365] wcscat (in: _Dest=0x3e1f228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.366] wcscat (in: _Dest=0x3e1f228, _Source="J0198025.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" [0229.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0229.368] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x608be900, ftCreationTime.dwHighDateTime=0x1bd9f94, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x608be900, ftLastWriteTime.dwHighDateTime=0x1bd9f94, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0229.368] wcscmp (_String1="J0198102.WMF", _String2=".") returned 1 [0229.368] wcscmp (_String1="J0198102.WMF", _String2="..") returned 1 [0229.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbb10 [0229.368] wcscpy (in: _Dest=0x81dbb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.368] wcscat (in: _Dest=0x81dbb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.368] wcscat (in: _Dest=0x81dbb10, _Source="J0198102.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" [0229.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0229.369] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6214ea00, ftCreationTime.dwHighDateTime=0x1bda044, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6214ea00, ftLastWriteTime.dwHighDateTime=0x1bda044, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0229.369] wcscmp (_String1="J0198113.WMF", _String2=".") returned 1 [0229.369] wcscmp (_String1="J0198113.WMF", _String2="..") returned 1 [0229.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbb98 [0229.369] wcscpy (in: _Dest=0x81dbb98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.370] wcscat (in: _Dest=0x81dbb98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.370] wcscat (in: _Dest=0x81dbb98, _Source="J0198113.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" [0229.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbb98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0229.371] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0229.376] wcscmp (_String1="J0198226.WMF", _String2=".") returned 1 [0229.376] wcscmp (_String1="J0198226.WMF", _String2="..") returned 1 [0229.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbc20 [0229.377] wcscpy (in: _Dest=0x81dbc20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.377] wcscat (in: _Dest=0x81dbc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.377] wcscat (in: _Dest=0x81dbc20, _Source="J0198226.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" [0229.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0229.377] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0229.378] wcscmp (_String1="J0198234.WMF", _String2=".") returned 1 [0229.378] wcscmp (_String1="J0198234.WMF", _String2="..") returned 1 [0229.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbca8 [0229.378] wcscpy (in: _Dest=0x81dbca8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.378] wcscat (in: _Dest=0x81dbca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.378] wcscat (in: _Dest=0x81dbca8, _Source="J0198234.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" [0229.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0229.379] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0229.379] wcscmp (_String1="J0198372.WMF", _String2=".") returned 1 [0229.379] wcscmp (_String1="J0198372.WMF", _String2="..") returned 1 [0229.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbd30 [0229.379] wcscpy (in: _Dest=0x81dbd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.379] wcscat (in: _Dest=0x81dbd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.379] wcscat (in: _Dest=0x81dbd30, _Source="J0198372.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" [0229.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0229.380] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c73100, ftCreationTime.dwHighDateTime=0x1be3a6d, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c73100, ftLastWriteTime.dwHighDateTime=0x1be3a6d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0229.380] wcscmp (_String1="J0198377.WMF", _String2=".") returned 1 [0229.380] wcscmp (_String1="J0198377.WMF", _String2="..") returned 1 [0229.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbdb8 [0229.380] wcscpy (in: _Dest=0x81dbdb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.380] wcscat (in: _Dest=0x81dbdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.380] wcscat (in: _Dest=0x81dbdb8, _Source="J0198377.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" [0229.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0229.381] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0229.381] wcscmp (_String1="J0198447.WMF", _String2=".") returned 1 [0229.381] wcscmp (_String1="J0198447.WMF", _String2="..") returned 1 [0229.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbe40 [0229.381] wcscpy (in: _Dest=0x81dbe40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.381] wcscat (in: _Dest=0x81dbe40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.381] wcscat (in: _Dest=0x81dbe40, _Source="J0198447.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" [0229.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbe40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0229.382] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0229.382] wcscmp (_String1="J0198494.WMF", _String2=".") returned 1 [0229.382] wcscmp (_String1="J0198494.WMF", _String2="..") returned 1 [0229.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbec8 [0229.382] wcscpy (in: _Dest=0x81dbec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.382] wcscat (in: _Dest=0x81dbec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.382] wcscat (in: _Dest=0x81dbec8, _Source="J0198494.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" [0229.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0229.383] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0229.383] wcscmp (_String1="J0198712.WMF", _String2=".") returned 1 [0229.383] wcscmp (_String1="J0198712.WMF", _String2="..") returned 1 [0229.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbf50 [0229.383] wcscpy (in: _Dest=0x81dbf50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.383] wcscat (in: _Dest=0x81dbf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.383] wcscat (in: _Dest=0x81dbf50, _Source="J0198712.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" [0229.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc4 [0229.384] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0229.384] wcscmp (_String1="J0199279.WMF", _String2=".") returned 1 [0229.384] wcscmp (_String1="J0199279.WMF", _String2="..") returned 1 [0229.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dbfd8 [0229.384] wcscpy (in: _Dest=0x81dbfd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.384] wcscat (in: _Dest=0x81dbfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.384] wcscat (in: _Dest=0x81dbfd8, _Source="J0199279.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" [0229.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbfd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a94 [0229.385] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0229.385] wcscmp (_String1="J0199303.WMF", _String2=".") returned 1 [0229.385] wcscmp (_String1="J0199303.WMF", _String2="..") returned 1 [0229.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc060 [0229.385] wcscpy (in: _Dest=0x81dc060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.385] wcscat (in: _Dest=0x81dc060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.385] wcscat (in: _Dest=0x81dc060, _Source="J0199303.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" [0229.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0229.386] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0229.386] wcscmp (_String1="J0199307.WMF", _String2=".") returned 1 [0229.386] wcscmp (_String1="J0199307.WMF", _String2="..") returned 1 [0229.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc0e8 [0229.386] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.386] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.386] wcscat (in: _Dest=0x81dc0e8, _Source="J0199307.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" [0229.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0229.387] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0229.387] wcscmp (_String1="J0199423.WMF", _String2=".") returned 1 [0229.387] wcscmp (_String1="J0199423.WMF", _String2="..") returned 1 [0229.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc170 [0229.387] wcscpy (in: _Dest=0x81dc170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.387] wcscat (in: _Dest=0x81dc170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.387] wcscat (in: _Dest=0x81dc170, _Source="J0199423.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" [0229.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0229.388] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0229.388] wcscmp (_String1="J0199429.WMF", _String2=".") returned 1 [0229.388] wcscmp (_String1="J0199429.WMF", _String2="..") returned 1 [0229.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc1f8 [0229.388] wcscpy (in: _Dest=0x81dc1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.388] wcscat (in: _Dest=0x81dc1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.389] wcscat (in: _Dest=0x81dc1f8, _Source="J0199429.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" [0229.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0229.390] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0229.390] wcscmp (_String1="J0199465.WMF", _String2=".") returned 1 [0229.390] wcscmp (_String1="J0199465.WMF", _String2="..") returned 1 [0229.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc280 [0229.390] wcscpy (in: _Dest=0x81dc280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.390] wcscat (in: _Dest=0x81dc280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.390] wcscat (in: _Dest=0x81dc280, _Source="J0199465.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" [0229.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0229.391] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0229.391] wcscmp (_String1="J0199469.WMF", _String2=".") returned 1 [0229.391] wcscmp (_String1="J0199469.WMF", _String2="..") returned 1 [0229.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc308 [0229.391] wcscpy (in: _Dest=0x81dc308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.391] wcscat (in: _Dest=0x81dc308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.391] wcscat (in: _Dest=0x81dc308, _Source="J0199469.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" [0229.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b5c [0229.392] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0229.392] wcscmp (_String1="J0199473.WMF", _String2=".") returned 1 [0229.393] wcscmp (_String1="J0199473.WMF", _String2="..") returned 1 [0229.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc390 [0229.393] wcscpy (in: _Dest=0x81dc390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.393] wcscat (in: _Dest=0x81dc390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.393] wcscat (in: _Dest=0x81dc390, _Source="J0199473.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" [0229.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0229.394] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0229.394] wcscmp (_String1="J0199475.WMF", _String2=".") returned 1 [0229.394] wcscmp (_String1="J0199475.WMF", _String2="..") returned 1 [0229.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc418 [0229.394] wcscpy (in: _Dest=0x81dc418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.394] wcscat (in: _Dest=0x81dc418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.394] wcscat (in: _Dest=0x81dc418, _Source="J0199475.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" [0229.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0229.395] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0229.395] wcscmp (_String1="J0199483.WMF", _String2=".") returned 1 [0229.395] wcscmp (_String1="J0199483.WMF", _String2="..") returned 1 [0229.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc4a0 [0229.395] wcscpy (in: _Dest=0x81dc4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.395] wcscat (in: _Dest=0x81dc4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.395] wcscat (in: _Dest=0x81dc4a0, _Source="J0199483.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" [0229.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0229.396] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2c600, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f2c600, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0229.396] wcscmp (_String1="J0199609.WMF", _String2=".") returned 1 [0229.396] wcscmp (_String1="J0199609.WMF", _String2="..") returned 1 [0229.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc528 [0229.396] wcscpy (in: _Dest=0x81dc528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.397] wcscat (in: _Dest=0x81dc528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.397] wcscat (in: _Dest=0x81dc528, _Source="J0199609.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" [0229.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0229.398] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0229.398] wcscmp (_String1="J0200151.WMF", _String2=".") returned 1 [0229.398] wcscmp (_String1="J0200151.WMF", _String2="..") returned 1 [0229.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc5b0 [0229.398] wcscpy (in: _Dest=0x81dc5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.398] wcscat (in: _Dest=0x81dc5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.398] wcscat (in: _Dest=0x81dc5b0, _Source="J0200151.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" [0229.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0229.399] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0229.399] wcscmp (_String1="J0200163.WMF", _String2=".") returned 1 [0229.400] wcscmp (_String1="J0200163.WMF", _String2="..") returned 1 [0229.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc638 [0229.400] wcscpy (in: _Dest=0x81dc638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.400] wcscat (in: _Dest=0x81dc638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.400] wcscat (in: _Dest=0x81dc638, _Source="J0200163.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" [0229.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0229.401] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0229.401] wcscmp (_String1="J0200183.WMF", _String2=".") returned 1 [0229.401] wcscmp (_String1="J0200183.WMF", _String2="..") returned 1 [0229.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc6c0 [0229.401] wcscpy (in: _Dest=0x81dc6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.401] wcscat (in: _Dest=0x81dc6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.401] wcscat (in: _Dest=0x81dc6c0, _Source="J0200183.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" [0229.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x279c [0229.402] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0229.402] wcscmp (_String1="J0200189.WMF", _String2=".") returned 1 [0229.402] wcscmp (_String1="J0200189.WMF", _String2="..") returned 1 [0229.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc748 [0229.403] wcscpy (in: _Dest=0x81dc748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.403] wcscat (in: _Dest=0x81dc748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.403] wcscat (in: _Dest=0x81dc748, _Source="J0200189.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" [0229.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0229.404] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b91a000, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b91a000, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0229.404] wcscmp (_String1="J0200273.WMF", _String2=".") returned 1 [0229.404] wcscmp (_String1="J0200273.WMF", _String2="..") returned 1 [0229.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc7d0 [0229.404] wcscpy (in: _Dest=0x81dc7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.404] wcscat (in: _Dest=0x81dc7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.404] wcscat (in: _Dest=0x81dc7d0, _Source="J0200273.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" [0229.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0229.405] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f252700, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f252700, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0229.405] wcscmp (_String1="J0200279.WMF", _String2=".") returned 1 [0229.405] wcscmp (_String1="J0200279.WMF", _String2="..") returned 1 [0229.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc858 [0229.406] wcscpy (in: _Dest=0x81dc858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.406] wcscat (in: _Dest=0x81dc858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.406] wcscat (in: _Dest=0x81dc858, _Source="J0200279.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" [0229.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0229.407] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ae8f00, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ae8f00, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0229.407] wcscmp (_String1="J0200289.WMF", _String2=".") returned 1 [0229.407] wcscmp (_String1="J0200289.WMF", _String2="..") returned 1 [0229.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc8e0 [0229.407] wcscpy (in: _Dest=0x81dc8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.407] wcscat (in: _Dest=0x81dc8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.408] wcscat (in: _Dest=0x81dc8e0, _Source="J0200289.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" [0229.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4 [0229.545] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f86100, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3f86100, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0229.545] wcscmp (_String1="J0200377.WMF", _String2=".") returned 1 [0229.545] wcscmp (_String1="J0200377.WMF", _String2="..") returned 1 [0229.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0229.545] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.545] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.545] wcscat (in: _Dest=0x81c0190, _Source="J0200377.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" [0229.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0229.546] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0229.546] wcscmp (_String1="J0200383.WMF", _String2=".") returned 1 [0229.546] wcscmp (_String1="J0200383.WMF", _String2="..") returned 1 [0229.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc968 [0229.546] wcscpy (in: _Dest=0x81dc968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.546] wcscat (in: _Dest=0x81dc968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.546] wcscat (in: _Dest=0x81dc968, _Source="J0200383.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" [0229.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0229.559] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0229.559] wcscmp (_String1="J0200467.WMF", _String2=".") returned 1 [0229.559] wcscmp (_String1="J0200467.WMF", _String2="..") returned 1 [0229.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dc9f0 [0229.559] wcscpy (in: _Dest=0x81dc9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.559] wcscat (in: _Dest=0x81dc9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.559] wcscat (in: _Dest=0x81dc9f0, _Source="J0200467.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" [0229.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0229.560] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0229.560] wcscmp (_String1="J0200521.WMF", _String2=".") returned 1 [0229.560] wcscmp (_String1="J0200521.WMF", _String2="..") returned 1 [0229.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dca78 [0229.560] wcscpy (in: _Dest=0x81dca78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.560] wcscat (in: _Dest=0x81dca78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.560] wcscat (in: _Dest=0x81dca78, _Source="J0200521.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" [0229.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dca78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b54 [0229.561] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0229.562] wcscmp (_String1="J0200611.WMF", _String2=".") returned 1 [0229.562] wcscmp (_String1="J0200611.WMF", _String2="..") returned 1 [0229.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dcb00 [0229.562] wcscpy (in: _Dest=0x81dcb00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.562] wcscat (in: _Dest=0x81dcb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.562] wcscat (in: _Dest=0x81dcb00, _Source="J0200611.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" [0229.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0229.563] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0229.563] wcscmp (_String1="J0202045.JPG", _String2=".") returned 1 [0229.563] wcscmp (_String1="J0202045.JPG", _String2="..") returned 1 [0229.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dcb88 [0229.563] wcscpy (in: _Dest=0x81dcb88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.563] wcscat (in: _Dest=0x81dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.563] wcscat (in: _Dest=0x81dcb88, _Source="J0202045.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" [0229.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0229.564] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5eb0300, ftCreationTime.dwHighDateTime=0x1be5673, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf5eb0300, ftLastWriteTime.dwHighDateTime=0x1be5673, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0229.564] wcscmp (_String1="J0211981.WMF", _String2=".") returned 1 [0229.564] wcscmp (_String1="J0211981.WMF", _String2="..") returned 1 [0229.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dcc10 [0229.564] wcscpy (in: _Dest=0x81dcc10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.564] wcscat (in: _Dest=0x81dcc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.564] wcscat (in: _Dest=0x81dcc10, _Source="J0211981.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" [0229.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0229.565] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0229.565] wcscmp (_String1="J0212299.WMF", _String2=".") returned 1 [0229.565] wcscmp (_String1="J0212299.WMF", _String2="..") returned 1 [0229.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dcc98 [0229.565] wcscpy (in: _Dest=0x81dcc98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.565] wcscat (in: _Dest=0x81dcc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.566] wcscat (in: _Dest=0x81dcc98, _Source="J0212299.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" [0229.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0229.566] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0229.566] wcscmp (_String1="J0212601.WMF", _String2=".") returned 1 [0229.566] wcscmp (_String1="J0212601.WMF", _String2="..") returned 1 [0229.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dcd20 [0229.567] wcscpy (in: _Dest=0x81dcd20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.567] wcscat (in: _Dest=0x81dcd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.567] wcscat (in: _Dest=0x81dcd20, _Source="J0212601.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" [0229.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0229.568] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0229.572] wcscmp (_String1="J0212685.WMF", _String2=".") returned 1 [0229.572] wcscmp (_String1="J0212685.WMF", _String2="..") returned 1 [0229.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dcda8 [0229.572] wcscpy (in: _Dest=0x81dcda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.572] wcscat (in: _Dest=0x81dcda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.572] wcscat (in: _Dest=0x81dcda8, _Source="J0212685.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" [0229.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0229.573] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0229.573] wcscmp (_String1="J0212751.WMF", _String2=".") returned 1 [0229.574] wcscmp (_String1="J0212751.WMF", _String2="..") returned 1 [0229.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dce30 [0229.574] wcscpy (in: _Dest=0x81dce30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.574] wcscat (in: _Dest=0x81dce30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.574] wcscat (in: _Dest=0x81dce30, _Source="J0212751.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" [0229.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bbc [0229.575] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0229.575] wcscmp (_String1="J0212953.WMF", _String2=".") returned 1 [0229.575] wcscmp (_String1="J0212953.WMF", _String2="..") returned 1 [0229.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dceb8 [0229.575] wcscpy (in: _Dest=0x81dceb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.575] wcscat (in: _Dest=0x81dceb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.575] wcscat (in: _Dest=0x81dceb8, _Source="J0212953.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" [0229.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dceb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0229.576] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0229.576] wcscmp (_String1="J0213243.WMF", _String2=".") returned 1 [0229.576] wcscmp (_String1="J0213243.WMF", _String2="..") returned 1 [0229.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dcf40 [0229.576] wcscpy (in: _Dest=0x81dcf40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.576] wcscat (in: _Dest=0x81dcf40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.576] wcscat (in: _Dest=0x81dcf40, _Source="J0213243.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" [0229.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcf40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2680 [0229.577] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0229.577] wcscmp (_String1="J0213449.WMF", _String2=".") returned 1 [0229.577] wcscmp (_String1="J0213449.WMF", _String2="..") returned 1 [0229.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dcfc8 [0229.577] wcscpy (in: _Dest=0x81dcfc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.577] wcscat (in: _Dest=0x81dcfc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.577] wcscat (in: _Dest=0x81dcfc8, _Source="J0213449.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" [0229.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcfc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0229.578] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0229.578] wcscmp (_String1="J0214934.WMF", _String2=".") returned 1 [0229.578] wcscmp (_String1="J0214934.WMF", _String2="..") returned 1 [0229.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd050 [0229.578] wcscpy (in: _Dest=0x81dd050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.578] wcscat (in: _Dest=0x81dd050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.578] wcscat (in: _Dest=0x81dd050, _Source="J0214934.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" [0229.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0229.579] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0229.579] wcscmp (_String1="J0214948.WMF", _String2=".") returned 1 [0229.579] wcscmp (_String1="J0214948.WMF", _String2="..") returned 1 [0229.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd0d8 [0229.579] wcscpy (in: _Dest=0x81dd0d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.579] wcscat (in: _Dest=0x81dd0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.579] wcscat (in: _Dest=0x81dd0d8, _Source="J0214948.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" [0229.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0229.580] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb575e00, ftCreationTime.dwHighDateTime=0x1be54ed, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb575e00, ftLastWriteTime.dwHighDateTime=0x1be54ed, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0229.580] wcscmp (_String1="J0215070.WMF", _String2=".") returned 1 [0229.580] wcscmp (_String1="J0215070.WMF", _String2="..") returned 1 [0229.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd160 [0229.580] wcscpy (in: _Dest=0x81dd160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.580] wcscat (in: _Dest=0x81dd160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.580] wcscat (in: _Dest=0x81dd160, _Source="J0215070.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" [0229.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0229.581] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73ec400, ftCreationTime.dwHighDateTime=0x1be1bbf, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb73ec400, ftLastWriteTime.dwHighDateTime=0x1be1bbf, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0229.581] wcscmp (_String1="J0215076.WMF", _String2=".") returned 1 [0229.581] wcscmp (_String1="J0215076.WMF", _String2="..") returned 1 [0229.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd1e8 [0229.581] wcscpy (in: _Dest=0x81dd1e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.581] wcscat (in: _Dest=0x81dd1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.581] wcscat (in: _Dest=0x81dd1e8, _Source="J0215076.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" [0229.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0229.582] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0229.582] wcscmp (_String1="J0215210.WMF", _String2=".") returned 1 [0229.582] wcscmp (_String1="J0215210.WMF", _String2="..") returned 1 [0229.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd270 [0229.582] wcscpy (in: _Dest=0x81dd270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.582] wcscat (in: _Dest=0x81dd270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.582] wcscat (in: _Dest=0x81dd270, _Source="J0215210.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" [0229.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0229.583] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a649100, ftCreationTime.dwHighDateTime=0x1be498c, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a649100, ftLastWriteTime.dwHighDateTime=0x1be498c, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0229.583] wcscmp (_String1="J0215709.WMF", _String2=".") returned 1 [0229.583] wcscmp (_String1="J0215709.WMF", _String2="..") returned 1 [0229.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd2f8 [0229.583] wcscpy (in: _Dest=0x81dd2f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.583] wcscat (in: _Dest=0x81dd2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.583] wcscat (in: _Dest=0x81dd2f8, _Source="J0215709.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" [0229.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0229.584] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc6eb00, ftCreationTime.dwHighDateTime=0x1be498c, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1cc6eb00, ftLastWriteTime.dwHighDateTime=0x1be498c, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0229.584] wcscmp (_String1="J0215710.WMF", _String2=".") returned 1 [0229.584] wcscmp (_String1="J0215710.WMF", _String2="..") returned 1 [0229.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd380 [0229.584] wcscpy (in: _Dest=0x81dd380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.584] wcscat (in: _Dest=0x81dd380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.584] wcscat (in: _Dest=0x81dd380, _Source="J0215710.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" [0229.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0229.585] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b150700, ftCreationTime.dwHighDateTime=0x1be498c, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b150700, ftLastWriteTime.dwHighDateTime=0x1be498c, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0229.585] wcscmp (_String1="J0215718.WMF", _String2=".") returned 1 [0229.585] wcscmp (_String1="J0215718.WMF", _String2="..") returned 1 [0229.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd408 [0229.585] wcscpy (in: _Dest=0x81dd408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.585] wcscat (in: _Dest=0x81dd408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.585] wcscat (in: _Dest=0x81dd408, _Source="J0215718.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" [0229.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0229.586] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0229.586] wcscmp (_String1="J0216112.JPG", _String2=".") returned 1 [0229.586] wcscmp (_String1="J0216112.JPG", _String2="..") returned 1 [0229.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd490 [0229.586] wcscpy (in: _Dest=0x81dd490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.586] wcscat (in: _Dest=0x81dd490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.586] wcscat (in: _Dest=0x81dd490, _Source="J0216112.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" [0229.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0229.587] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0229.587] wcscmp (_String1="J0216153.JPG", _String2=".") returned 1 [0229.587] wcscmp (_String1="J0216153.JPG", _String2="..") returned 1 [0229.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd518 [0229.587] wcscpy (in: _Dest=0x81dd518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.588] wcscat (in: _Dest=0x81dd518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.588] wcscat (in: _Dest=0x81dd518, _Source="J0216153.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" [0229.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0229.589] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0229.589] wcscmp (_String1="J0216540.WMF", _String2=".") returned 1 [0229.589] wcscmp (_String1="J0216540.WMF", _String2="..") returned 1 [0229.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dd5a0 [0229.589] wcscpy (in: _Dest=0x81dd5a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.589] wcscat (in: _Dest=0x81dd5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.589] wcscat (in: _Dest=0x81dd5a0, _Source="J0216540.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" [0229.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0229.590] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0229.590] wcscmp (_String1="J0216570.WMF", _String2=".") returned 1 [0229.590] wcscmp (_String1="J0216570.WMF", _String2="..") returned 1 [0229.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40060 [0229.590] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.590] wcscat (in: _Dest=0x3d40060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.590] wcscat (in: _Dest=0x3d40060, _Source="J0216570.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" [0229.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0229.591] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0229.591] wcscmp (_String1="J0216600.WMF", _String2=".") returned 1 [0229.591] wcscmp (_String1="J0216600.WMF", _String2="..") returned 1 [0229.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d400e8 [0229.591] wcscpy (in: _Dest=0x3d400e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.591] wcscat (in: _Dest=0x3d400e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.591] wcscat (in: _Dest=0x3d400e8, _Source="J0216600.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" [0229.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d400e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0229.592] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0229.592] wcscmp (_String1="J0216612.WMF", _String2=".") returned 1 [0229.592] wcscmp (_String1="J0216612.WMF", _String2="..") returned 1 [0229.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40170 [0229.592] wcscpy (in: _Dest=0x3d40170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.592] wcscat (in: _Dest=0x3d40170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.592] wcscat (in: _Dest=0x3d40170, _Source="J0216612.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" [0229.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0229.593] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0229.593] wcscmp (_String1="J0216874.WMF", _String2=".") returned 1 [0229.593] wcscmp (_String1="J0216874.WMF", _String2="..") returned 1 [0229.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d401f8 [0229.593] wcscpy (in: _Dest=0x3d401f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.593] wcscat (in: _Dest=0x3d401f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.593] wcscat (in: _Dest=0x3d401f8, _Source="J0216874.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" [0229.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d401f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0229.594] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0229.594] wcscmp (_String1="J0217262.WMF", _String2=".") returned 1 [0229.595] wcscmp (_String1="J0217262.WMF", _String2="..") returned 1 [0229.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40280 [0229.595] wcscpy (in: _Dest=0x3d40280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.595] wcscat (in: _Dest=0x3d40280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.595] wcscat (in: _Dest=0x3d40280, _Source="J0217262.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" [0229.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0229.596] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0229.596] wcscmp (_String1="J0217302.WMF", _String2=".") returned 1 [0229.596] wcscmp (_String1="J0217302.WMF", _String2="..") returned 1 [0229.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40308 [0229.596] wcscpy (in: _Dest=0x3d40308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.596] wcscat (in: _Dest=0x3d40308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.596] wcscat (in: _Dest=0x3d40308, _Source="J0217302.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" [0229.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0229.833] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0229.833] wcscmp (_String1="J0217872.WMF", _String2=".") returned 1 [0229.833] wcscmp (_String1="J0217872.WMF", _String2="..") returned 1 [0229.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf5e0 [0229.834] wcscpy (in: _Dest=0x81bf5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.834] wcscat (in: _Dest=0x81bf5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.834] wcscat (in: _Dest=0x81bf5e0, _Source="J0217872.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" [0229.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0229.835] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0229.835] wcscmp (_String1="J0227419.JPG", _String2=".") returned 1 [0229.835] wcscmp (_String1="J0227419.JPG", _String2="..") returned 1 [0229.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40390 [0229.835] wcscpy (in: _Dest=0x3d40390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.835] wcscat (in: _Dest=0x3d40390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.835] wcscat (in: _Dest=0x3d40390, _Source="J0227419.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" [0229.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0229.838] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0229.838] wcscmp (_String1="J0227558.JPG", _String2=".") returned 1 [0229.838] wcscmp (_String1="J0227558.JPG", _String2="..") returned 1 [0229.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40418 [0229.839] wcscpy (in: _Dest=0x3d40418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.839] wcscat (in: _Dest=0x3d40418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.839] wcscat (in: _Dest=0x3d40418, _Source="J0227558.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" [0229.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0229.840] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41fff700, ftCreationTime.dwHighDateTime=0x1be8667, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41fff700, ftLastWriteTime.dwHighDateTime=0x1be8667, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0229.840] wcscmp (_String1="J0228823.WMF", _String2=".") returned 1 [0229.840] wcscmp (_String1="J0228823.WMF", _String2="..") returned 1 [0229.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d404a0 [0229.840] wcscpy (in: _Dest=0x3d404a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.840] wcscat (in: _Dest=0x3d404a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.840] wcscat (in: _Dest=0x3d404a0, _Source="J0228823.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" [0229.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d404a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0229.841] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0229.841] wcscmp (_String1="J0228959.WMF", _String2=".") returned 1 [0229.841] wcscmp (_String1="J0228959.WMF", _String2="..") returned 1 [0229.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40528 [0229.841] wcscpy (in: _Dest=0x3d40528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.841] wcscat (in: _Dest=0x3d40528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.841] wcscat (in: _Dest=0x3d40528, _Source="J0228959.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" [0229.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0229.843] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0229.843] wcscmp (_String1="J0230553.WMF", _String2=".") returned 1 [0229.843] wcscmp (_String1="J0230553.WMF", _String2="..") returned 1 [0229.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d405b0 [0229.843] wcscpy (in: _Dest=0x3d405b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.843] wcscat (in: _Dest=0x3d405b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.843] wcscat (in: _Dest=0x3d405b0, _Source="J0230553.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" [0229.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d405b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0229.844] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0229.844] wcscmp (_String1="J0230558.WMF", _String2=".") returned 1 [0229.844] wcscmp (_String1="J0230558.WMF", _String2="..") returned 1 [0229.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40638 [0229.844] wcscpy (in: _Dest=0x3d40638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.844] wcscat (in: _Dest=0x3d40638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.844] wcscat (in: _Dest=0x3d40638, _Source="J0230558.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" [0229.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0229.845] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0229.845] wcscmp (_String1="J0232171.WMF", _String2=".") returned 1 [0229.845] wcscmp (_String1="J0232171.WMF", _String2="..") returned 1 [0229.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d406c0 [0229.845] wcscpy (in: _Dest=0x3d406c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.845] wcscat (in: _Dest=0x3d406c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.846] wcscat (in: _Dest=0x3d406c0, _Source="J0232171.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" [0229.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d406c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0229.847] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80da500, ftCreationTime.dwHighDateTime=0x1be205a, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb80da500, ftLastWriteTime.dwHighDateTime=0x1be205a, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0229.847] wcscmp (_String1="J0232393.WMF", _String2=".") returned 1 [0229.847] wcscmp (_String1="J0232393.WMF", _String2="..") returned 1 [0229.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40748 [0229.847] wcscpy (in: _Dest=0x3d40748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.847] wcscat (in: _Dest=0x3d40748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.847] wcscat (in: _Dest=0x3d40748, _Source="J0232393.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" [0229.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0229.861] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd6a300, ftCreationTime.dwHighDateTime=0x1be205a, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5fd6a300, ftLastWriteTime.dwHighDateTime=0x1be205a, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0229.861] wcscmp (_String1="J0232395.WMF", _String2=".") returned 1 [0229.861] wcscmp (_String1="J0232395.WMF", _String2="..") returned 1 [0229.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d407d0 [0229.861] wcscpy (in: _Dest=0x3d407d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.861] wcscat (in: _Dest=0x3d407d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.861] wcscat (in: _Dest=0x3d407d0, _Source="J0232395.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" [0229.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d407d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0229.867] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aac7c00, ftCreationTime.dwHighDateTime=0x1be0653, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9aac7c00, ftLastWriteTime.dwHighDateTime=0x1be0653, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0229.867] wcscmp (_String1="J0232795.WMF", _String2=".") returned 1 [0229.867] wcscmp (_String1="J0232795.WMF", _String2="..") returned 1 [0229.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40858 [0229.867] wcscpy (in: _Dest=0x3d40858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.867] wcscat (in: _Dest=0x3d40858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.867] wcscat (in: _Dest=0x3d40858, _Source="J0232795.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" [0229.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc [0229.882] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0a25d00, ftCreationTime.dwHighDateTime=0x1be0653, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0a25d00, ftLastWriteTime.dwHighDateTime=0x1be0653, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0229.882] wcscmp (_String1="J0232797.WMF", _String2=".") returned 1 [0229.883] wcscmp (_String1="J0232797.WMF", _String2="..") returned 1 [0229.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d408e0 [0229.883] wcscpy (in: _Dest=0x3d408e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.883] wcscat (in: _Dest=0x3d408e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.883] wcscat (in: _Dest=0x3d408e0, _Source="J0232797.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" [0229.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d408e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0229.890] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b52d00, ftCreationTime.dwHighDateTime=0x1be0653, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3b52d00, ftLastWriteTime.dwHighDateTime=0x1be0653, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0229.914] wcscmp (_String1="J0232803.WMF", _String2=".") returned 1 [0229.914] wcscmp (_String1="J0232803.WMF", _String2="..") returned 1 [0229.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40968 [0229.914] wcscpy (in: _Dest=0x3d40968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.914] wcscat (in: _Dest=0x3d40968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.914] wcscat (in: _Dest=0x3d40968, _Source="J0232803.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" [0229.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b8 [0229.916] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0229.916] wcscmp (_String1="J0233512.WMF", _String2=".") returned 1 [0229.916] wcscmp (_String1="J0233512.WMF", _String2="..") returned 1 [0229.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d409f0 [0229.917] wcscpy (in: _Dest=0x3d409f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.917] wcscat (in: _Dest=0x3d409f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.917] wcscat (in: _Dest=0x3d409f0, _Source="J0233512.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" [0229.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d409f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0229.919] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0229.919] wcscmp (_String1="J0233665.WMF", _String2=".") returned 1 [0229.919] wcscmp (_String1="J0233665.WMF", _String2="..") returned 1 [0229.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40a78 [0229.920] wcscpy (in: _Dest=0x3d40a78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.920] wcscat (in: _Dest=0x3d40a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.920] wcscat (in: _Dest=0x3d40a78, _Source="J0233665.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" [0229.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0229.925] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa291f00, ftCreationTime.dwHighDateTime=0x1be80fe, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa291f00, ftLastWriteTime.dwHighDateTime=0x1be80fe, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0229.925] wcscmp (_String1="J0233992.WMF", _String2=".") returned 1 [0229.925] wcscmp (_String1="J0233992.WMF", _String2="..") returned 1 [0229.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40b00 [0229.925] wcscpy (in: _Dest=0x3d40b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.925] wcscat (in: _Dest=0x3d40b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.925] wcscat (in: _Dest=0x3d40b00, _Source="J0233992.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" [0229.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0229.932] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a75e00, ftCreationTime.dwHighDateTime=0x1be7bbf, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4a75e00, ftLastWriteTime.dwHighDateTime=0x1be7bbf, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0229.933] wcscmp (_String1="J0234000.WMF", _String2=".") returned 1 [0229.933] wcscmp (_String1="J0234000.WMF", _String2="..") returned 1 [0229.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40b88 [0229.933] wcscpy (in: _Dest=0x3d40b88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.933] wcscat (in: _Dest=0x3d40b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.933] wcscat (in: _Dest=0x3d40b88, _Source="J0234000.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" [0229.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0229.934] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d315700, ftCreationTime.dwHighDateTime=0x1be7bc3, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d315700, ftLastWriteTime.dwHighDateTime=0x1be7bc3, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0229.934] wcscmp (_String1="J0234001.WMF", _String2=".") returned 1 [0229.934] wcscmp (_String1="J0234001.WMF", _String2="..") returned 1 [0229.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40c10 [0229.934] wcscpy (in: _Dest=0x3d40c10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.935] wcscat (in: _Dest=0x3d40c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.935] wcscat (in: _Dest=0x3d40c10, _Source="J0234001.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" [0229.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0229.936] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0229.936] wcscmp (_String1="J0234376.WMF", _String2=".") returned 1 [0229.936] wcscmp (_String1="J0234376.WMF", _String2="..") returned 1 [0229.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40c98 [0229.936] wcscpy (in: _Dest=0x3d40c98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.936] wcscat (in: _Dest=0x3d40c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.936] wcscat (in: _Dest=0x3d40c98, _Source="J0234376.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" [0229.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0229.958] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0229.958] wcscmp (_String1="J0237225.WMF", _String2=".") returned 1 [0229.958] wcscmp (_String1="J0237225.WMF", _String2="..") returned 1 [0229.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40d20 [0229.958] wcscpy (in: _Dest=0x3d40d20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.958] wcscat (in: _Dest=0x3d40d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.958] wcscat (in: _Dest=0x3d40d20, _Source="J0237225.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" [0229.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0229.992] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9973400, ftCreationTime.dwHighDateTime=0x1be9020, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9973400, ftLastWriteTime.dwHighDateTime=0x1be9020, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0229.992] wcscmp (_String1="J0237228.WMF", _String2=".") returned 1 [0229.992] wcscmp (_String1="J0237228.WMF", _String2="..") returned 1 [0229.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40da8 [0229.993] wcscpy (in: _Dest=0x3d40da8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.993] wcscat (in: _Dest=0x3d40da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.993] wcscat (in: _Dest=0x3d40da8, _Source="J0237228.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" [0229.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0229.994] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0229.994] wcscmp (_String1="J0237336.WMF", _String2=".") returned 1 [0229.994] wcscmp (_String1="J0237336.WMF", _String2="..") returned 1 [0229.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40e30 [0229.994] wcscpy (in: _Dest=0x3d40e30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.994] wcscat (in: _Dest=0x3d40e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.994] wcscat (in: _Dest=0x3d40e30, _Source="J0237336.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" [0229.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0230.097] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0230.097] wcscmp (_String1="J0237759.WMF", _String2=".") returned 1 [0230.098] wcscmp (_String1="J0237759.WMF", _String2="..") returned 1 [0230.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ede8 [0230.098] wcscpy (in: _Dest=0x3e1ede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.098] wcscat (in: _Dest=0x3e1ede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.098] wcscat (in: _Dest=0x3e1ede8, _Source="J0237759.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" [0230.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0230.099] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0230.099] wcscmp (_String1="J0238333.WMF", _String2=".") returned 1 [0230.099] wcscmp (_String1="J0238333.WMF", _String2="..") returned 1 [0230.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40eb8 [0230.099] wcscpy (in: _Dest=0x3d40eb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.099] wcscat (in: _Dest=0x3d40eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.099] wcscat (in: _Dest=0x3d40eb8, _Source="J0238333.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" [0230.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0230.101] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0230.101] wcscmp (_String1="J0238927.WMF", _String2=".") returned 1 [0230.101] wcscmp (_String1="J0238927.WMF", _String2="..") returned 1 [0230.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40f40 [0230.102] wcscpy (in: _Dest=0x3d40f40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.102] wcscat (in: _Dest=0x3d40f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.102] wcscat (in: _Dest=0x3d40f40, _Source="J0238927.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" [0230.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0230.103] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0230.103] wcscmp (_String1="J0238959.WMF", _String2=".") returned 1 [0230.103] wcscmp (_String1="J0238959.WMF", _String2="..") returned 1 [0230.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d40fc8 [0230.103] wcscpy (in: _Dest=0x3d40fc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.103] wcscat (in: _Dest=0x3d40fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.103] wcscat (in: _Dest=0x3d40fc8, _Source="J0238959.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" [0230.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0230.105] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0230.105] wcscmp (_String1="J0238983.WMF", _String2=".") returned 1 [0230.105] wcscmp (_String1="J0238983.WMF", _String2="..") returned 1 [0230.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41050 [0230.105] wcscpy (in: _Dest=0x3d41050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.105] wcscat (in: _Dest=0x3d41050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.105] wcscat (in: _Dest=0x3d41050, _Source="J0238983.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" [0230.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0230.106] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0230.106] wcscmp (_String1="J0239057.WMF", _String2=".") returned 1 [0230.107] wcscmp (_String1="J0239057.WMF", _String2="..") returned 1 [0230.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d410d8 [0230.107] wcscpy (in: _Dest=0x3d410d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.107] wcscat (in: _Dest=0x3d410d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.107] wcscat (in: _Dest=0x3d410d8, _Source="J0239057.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" [0230.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d410d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0230.108] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0230.108] wcscmp (_String1="J0239063.WMF", _String2=".") returned 1 [0230.108] wcscmp (_String1="J0239063.WMF", _String2="..") returned 1 [0230.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41160 [0230.108] wcscpy (in: _Dest=0x3d41160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.108] wcscat (in: _Dest=0x3d41160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.108] wcscat (in: _Dest=0x3d41160, _Source="J0239063.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" [0230.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0230.110] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0230.110] wcscmp (_String1="J0239079.WMF", _String2=".") returned 1 [0230.110] wcscmp (_String1="J0239079.WMF", _String2="..") returned 1 [0230.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d411e8 [0230.110] wcscpy (in: _Dest=0x3d411e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.110] wcscat (in: _Dest=0x3d411e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.110] wcscat (in: _Dest=0x3d411e8, _Source="J0239079.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" [0230.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d411e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0230.111] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0230.111] wcscmp (_String1="J0239191.WMF", _String2=".") returned 1 [0230.111] wcscmp (_String1="J0239191.WMF", _String2="..") returned 1 [0230.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41270 [0230.112] wcscpy (in: _Dest=0x3d41270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.112] wcscat (in: _Dest=0x3d41270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.112] wcscat (in: _Dest=0x3d41270, _Source="J0239191.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" [0230.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0230.113] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0230.113] wcscmp (_String1="J0239611.WMF", _String2=".") returned 1 [0230.113] wcscmp (_String1="J0239611.WMF", _String2="..") returned 1 [0230.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d412f8 [0230.113] wcscpy (in: _Dest=0x3d412f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.113] wcscat (in: _Dest=0x3d412f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.113] wcscat (in: _Dest=0x3d412f8, _Source="J0239611.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" [0230.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d412f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0230.115] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0230.115] wcscmp (_String1="J0239935.WMF", _String2=".") returned 1 [0230.115] wcscmp (_String1="J0239935.WMF", _String2="..") returned 1 [0230.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41380 [0230.115] wcscpy (in: _Dest=0x3d41380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.115] wcscat (in: _Dest=0x3d41380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.115] wcscat (in: _Dest=0x3d41380, _Source="J0239935.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" [0230.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0230.140] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0230.140] wcscmp (_String1="J0239941.WMF", _String2=".") returned 1 [0230.140] wcscmp (_String1="J0239941.WMF", _String2="..") returned 1 [0230.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41408 [0230.140] wcscpy (in: _Dest=0x3d41408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.140] wcscat (in: _Dest=0x3d41408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.140] wcscat (in: _Dest=0x3d41408, _Source="J0239941.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" [0230.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0230.142] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0230.142] wcscmp (_String1="J0239943.WMF", _String2=".") returned 1 [0230.142] wcscmp (_String1="J0239943.WMF", _String2="..") returned 1 [0230.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41490 [0230.142] wcscpy (in: _Dest=0x3d41490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.142] wcscat (in: _Dest=0x3d41490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.142] wcscat (in: _Dest=0x3d41490, _Source="J0239943.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" [0230.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0230.143] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0230.143] wcscmp (_String1="J0239951.WMF", _String2=".") returned 1 [0230.143] wcscmp (_String1="J0239951.WMF", _String2="..") returned 1 [0230.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41518 [0230.144] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.144] wcscat (in: _Dest=0x3d41518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.144] wcscat (in: _Dest=0x3d41518, _Source="J0239951.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" [0230.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0230.145] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0230.145] wcscmp (_String1="J0239953.WMF", _String2=".") returned 1 [0230.145] wcscmp (_String1="J0239953.WMF", _String2="..") returned 1 [0230.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d415a0 [0230.145] wcscpy (in: _Dest=0x3d415a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.145] wcscat (in: _Dest=0x3d415a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.145] wcscat (in: _Dest=0x3d415a0, _Source="J0239953.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" [0230.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d415a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0230.147] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0230.147] wcscmp (_String1="J0239955.WMF", _String2=".") returned 1 [0230.147] wcscmp (_String1="J0239955.WMF", _String2="..") returned 1 [0230.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41628 [0230.147] wcscpy (in: _Dest=0x3d41628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.147] wcscat (in: _Dest=0x3d41628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.147] wcscat (in: _Dest=0x3d41628, _Source="J0239955.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" [0230.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0230.148] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0230.148] wcscmp (_String1="J0239965.WMF", _String2=".") returned 1 [0230.148] wcscmp (_String1="J0239965.WMF", _String2="..") returned 1 [0230.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d416b0 [0230.148] wcscpy (in: _Dest=0x3d416b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.148] wcscat (in: _Dest=0x3d416b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.148] wcscat (in: _Dest=0x3d416b0, _Source="J0239965.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" [0230.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d416b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b64 [0230.150] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0230.150] wcscmp (_String1="J0239967.WMF", _String2=".") returned 1 [0230.150] wcscmp (_String1="J0239967.WMF", _String2="..") returned 1 [0230.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41738 [0230.150] wcscpy (in: _Dest=0x3d41738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.150] wcscat (in: _Dest=0x3d41738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.150] wcscat (in: _Dest=0x3d41738, _Source="J0239967.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" [0230.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2690 [0230.151] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0230.151] wcscmp (_String1="J0239973.WMF", _String2=".") returned 1 [0230.151] wcscmp (_String1="J0239973.WMF", _String2="..") returned 1 [0230.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d417c0 [0230.151] wcscpy (in: _Dest=0x3d417c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.151] wcscat (in: _Dest=0x3d417c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.151] wcscat (in: _Dest=0x3d417c0, _Source="J0239973.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" [0230.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d417c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2694 [0230.152] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0230.152] wcscmp (_String1="J0239975.WMF", _String2=".") returned 1 [0230.152] wcscmp (_String1="J0239975.WMF", _String2="..") returned 1 [0230.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41848 [0230.153] wcscpy (in: _Dest=0x3d41848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.153] wcscat (in: _Dest=0x3d41848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.153] wcscat (in: _Dest=0x3d41848, _Source="J0239975.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" [0230.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2698 [0230.154] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0230.154] wcscmp (_String1="J0239997.WMF", _String2=".") returned 1 [0230.154] wcscmp (_String1="J0239997.WMF", _String2="..") returned 1 [0230.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d418d0 [0230.154] wcscpy (in: _Dest=0x3d418d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.154] wcscat (in: _Dest=0x3d418d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.154] wcscat (in: _Dest=0x3d418d0, _Source="J0239997.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" [0230.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d418d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a0 [0230.156] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0230.156] wcscmp (_String1="J0240157.WMF", _String2=".") returned 1 [0230.156] wcscmp (_String1="J0240157.WMF", _String2="..") returned 1 [0230.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41958 [0230.156] wcscpy (in: _Dest=0x3d41958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.156] wcscat (in: _Dest=0x3d41958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.156] wcscat (in: _Dest=0x3d41958, _Source="J0240157.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" [0230.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b4 [0230.201] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0230.201] wcscmp (_String1="J0240175.WMF", _String2=".") returned 1 [0230.201] wcscmp (_String1="J0240175.WMF", _String2="..") returned 1 [0230.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d419e0 [0230.202] wcscpy (in: _Dest=0x3d419e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.202] wcscat (in: _Dest=0x3d419e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.202] wcscat (in: _Dest=0x3d419e0, _Source="J0240175.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" [0230.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d419e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf8 [0230.203] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0230.203] wcscmp (_String1="J0240189.WMF", _String2=".") returned 1 [0230.203] wcscmp (_String1="J0240189.WMF", _String2="..") returned 1 [0230.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41a68 [0230.203] wcscpy (in: _Dest=0x3d41a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.203] wcscat (in: _Dest=0x3d41a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.203] wcscat (in: _Dest=0x3d41a68, _Source="J0240189.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" [0230.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0230.205] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0230.701] wcscmp (_String1="J0240291.WMF", _String2=".") returned 1 [0230.701] wcscmp (_String1="J0240291.WMF", _String2="..") returned 1 [0230.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c02a0 [0230.701] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.701] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.701] wcscat (in: _Dest=0x81c02a0, _Source="J0240291.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" [0230.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0230.702] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x260f7400, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x260f7400, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0230.702] wcscmp (_String1="J0241019.WMF", _String2=".") returned 1 [0230.702] wcscmp (_String1="J0241019.WMF", _String2="..") returned 1 [0230.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be678 [0230.702] wcscpy (in: _Dest=0x81be678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.703] wcscat (in: _Dest=0x81be678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.703] wcscat (in: _Dest=0x81be678, _Source="J0241019.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" [0230.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0230.704] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31fb3600, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31fb3600, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0230.704] wcscmp (_String1="J0241037.WMF", _String2=".") returned 1 [0230.704] wcscmp (_String1="J0241037.WMF", _String2="..") returned 1 [0230.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41af0 [0230.704] wcscpy (in: _Dest=0x3d41af0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.704] wcscat (in: _Dest=0x3d41af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.704] wcscat (in: _Dest=0x3d41af0, _Source="J0241037.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" [0230.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0230.705] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x358ebd00, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x358ebd00, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0230.705] wcscmp (_String1="J0241041.WMF", _String2=".") returned 1 [0230.705] wcscmp (_String1="J0241041.WMF", _String2="..") returned 1 [0230.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41b78 [0230.705] wcscpy (in: _Dest=0x3d41b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.705] wcscat (in: _Dest=0x3d41b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.705] wcscat (in: _Dest=0x3d41b78, _Source="J0241041.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" [0230.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0230.706] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36bfea00, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36bfea00, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0230.706] wcscmp (_String1="J0241043.WMF", _String2=".") returned 1 [0230.706] wcscmp (_String1="J0241043.WMF", _String2="..") returned 1 [0230.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41c00 [0230.706] wcscpy (in: _Dest=0x3d41c00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.706] wcscat (in: _Dest=0x3d41c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.706] wcscat (in: _Dest=0x3d41c00, _Source="J0241043.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" [0230.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd8 [0230.708] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d2ba00, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49d2ba00, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0230.708] wcscmp (_String1="J0241077.WMF", _String2=".") returned 1 [0230.708] wcscmp (_String1="J0241077.WMF", _String2="..") returned 1 [0230.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41c88 [0230.708] wcscpy (in: _Dest=0x3d41c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.708] wcscat (in: _Dest=0x3d41c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.708] wcscat (in: _Dest=0x3d41c88, _Source="J0241077.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" [0230.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0230.709] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfe6900, ftCreationTime.dwHighDateTime=0x1be9d41, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cfe6900, ftLastWriteTime.dwHighDateTime=0x1be9d41, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0230.710] wcscmp (_String1="J0241773.WMF", _String2=".") returned 1 [0230.710] wcscmp (_String1="J0241773.WMF", _String2="..") returned 1 [0230.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41d10 [0230.710] wcscpy (in: _Dest=0x3d41d10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.710] wcscat (in: _Dest=0x3d41d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.710] wcscat (in: _Dest=0x3d41d10, _Source="J0241773.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" [0230.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d04 [0230.711] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091f000, ftCreationTime.dwHighDateTime=0x1be9d41, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7091f000, ftLastWriteTime.dwHighDateTime=0x1be9d41, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0230.711] wcscmp (_String1="J0241781.WMF", _String2=".") returned 1 [0230.711] wcscmp (_String1="J0241781.WMF", _String2="..") returned 1 [0230.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41d98 [0230.711] wcscpy (in: _Dest=0x3d41d98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.711] wcscat (in: _Dest=0x3d41d98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.711] wcscat (in: _Dest=0x3d41d98, _Source="J0241781.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" [0230.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0230.713] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0230.713] wcscmp (_String1="J0250504.WMF", _String2=".") returned 1 [0230.713] wcscmp (_String1="J0250504.WMF", _String2="..") returned 1 [0230.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41e20 [0230.713] wcscpy (in: _Dest=0x3d41e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.713] wcscat (in: _Dest=0x3d41e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.713] wcscat (in: _Dest=0x3d41e20, _Source="J0250504.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" [0230.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0230.714] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0230.714] wcscmp (_String1="J0250997.WMF", _String2=".") returned 1 [0230.714] wcscmp (_String1="J0250997.WMF", _String2="..") returned 1 [0230.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41ea8 [0230.714] wcscpy (in: _Dest=0x3d41ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.714] wcscat (in: _Dest=0x3d41ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.714] wcscat (in: _Dest=0x3d41ea8, _Source="J0250997.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" [0230.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0230.716] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0230.716] wcscmp (_String1="J0251007.WMF", _String2=".") returned 1 [0230.716] wcscmp (_String1="J0251007.WMF", _String2="..") returned 1 [0230.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41f30 [0230.716] wcscpy (in: _Dest=0x3d41f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.716] wcscat (in: _Dest=0x3d41f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.716] wcscat (in: _Dest=0x3d41f30, _Source="J0251007.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" [0230.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0230.717] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4522200, ftCreationTime.dwHighDateTime=0x1beb35d, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4522200, ftLastWriteTime.dwHighDateTime=0x1beb35d, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0230.717] wcscmp (_String1="J0252629.WMF", _String2=".") returned 1 [0230.717] wcscmp (_String1="J0252629.WMF", _String2="..") returned 1 [0230.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d41fb8 [0230.718] wcscpy (in: _Dest=0x3d41fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.718] wcscat (in: _Dest=0x3d41fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.718] wcscat (in: _Dest=0x3d41fb8, _Source="J0252629.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" [0230.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0230.719] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc29a600, ftCreationTime.dwHighDateTime=0x1beb35d, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc29a600, ftLastWriteTime.dwHighDateTime=0x1beb35d, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0230.719] wcscmp (_String1="J0252669.WMF", _String2=".") returned 1 [0230.719] wcscmp (_String1="J0252669.WMF", _String2="..") returned 1 [0230.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9648 [0230.719] wcscpy (in: _Dest=0x81d9648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.719] wcscat (in: _Dest=0x81d9648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.719] wcscat (in: _Dest=0x81d9648, _Source="J0252669.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" [0230.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0230.721] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd03600, ftCreationTime.dwHighDateTime=0x1bec159, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dd03600, ftLastWriteTime.dwHighDateTime=0x1bec159, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0230.721] wcscmp (_String1="J0278702.WMF", _String2=".") returned 1 [0230.721] wcscmp (_String1="J0278702.WMF", _String2="..") returned 1 [0230.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d96d0 [0230.721] wcscpy (in: _Dest=0x81d96d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.721] wcscat (in: _Dest=0x81d96d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.721] wcscat (in: _Dest=0x81d96d0, _Source="J0278702.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" [0230.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d96d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c [0230.722] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0230.722] wcscmp (_String1="J0279644.WMF", _String2=".") returned 1 [0230.722] wcscmp (_String1="J0279644.WMF", _String2="..") returned 1 [0230.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9758 [0230.722] wcscpy (in: _Dest=0x81d9758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.722] wcscat (in: _Dest=0x81d9758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.723] wcscat (in: _Dest=0x81d9758, _Source="J0279644.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" [0230.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0230.724] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0230.724] wcscmp (_String1="J0280468.WMF", _String2=".") returned 1 [0230.724] wcscmp (_String1="J0280468.WMF", _String2="..") returned 1 [0230.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d97e0 [0230.724] wcscpy (in: _Dest=0x81d97e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.724] wcscat (in: _Dest=0x81d97e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.724] wcscat (in: _Dest=0x81d97e0, _Source="J0280468.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" [0230.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d97e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0230.725] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56e6a00, ftCreationTime.dwHighDateTime=0x1bed373, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc56e6a00, ftLastWriteTime.dwHighDateTime=0x1bed373, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0230.725] wcscmp (_String1="J0281008.WMF", _String2=".") returned 1 [0230.725] wcscmp (_String1="J0281008.WMF", _String2="..") returned 1 [0230.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9868 [0230.726] wcscpy (in: _Dest=0x81d9868, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.726] wcscat (in: _Dest=0x81d9868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.726] wcscat (in: _Dest=0x81d9868, _Source="J0281008.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" [0230.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0230.727] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7275df00, ftCreationTime.dwHighDateTime=0x1bed467, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7275df00, ftLastWriteTime.dwHighDateTime=0x1bed467, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0230.727] wcscmp (_String1="J0281243.WMF", _String2=".") returned 1 [0230.727] wcscmp (_String1="J0281243.WMF", _String2="..") returned 1 [0230.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d98f0 [0230.727] wcscpy (in: _Dest=0x81d98f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.727] wcscat (in: _Dest=0x81d98f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.727] wcscat (in: _Dest=0x81d98f0, _Source="J0281243.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" [0230.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0230.728] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11aa5700, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11aa5700, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0230.728] wcscmp (_String1="J0281630.WMF", _String2=".") returned 1 [0230.729] wcscmp (_String1="J0281630.WMF", _String2="..") returned 1 [0230.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9978 [0230.729] wcscpy (in: _Dest=0x81d9978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.729] wcscat (in: _Dest=0x81d9978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.729] wcscat (in: _Dest=0x81d9978, _Source="J0281630.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" [0230.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0230.730] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12db8400, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12db8400, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0230.730] wcscmp (_String1="J0281632.WMF", _String2=".") returned 1 [0230.730] wcscmp (_String1="J0281632.WMF", _String2="..") returned 1 [0230.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9a00 [0230.730] wcscpy (in: _Dest=0x81d9a00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.730] wcscat (in: _Dest=0x81d9a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.730] wcscat (in: _Dest=0x81d9a00, _Source="J0281632.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" [0230.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0230.731] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c64ec00, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c64ec00, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0230.731] wcscmp (_String1="J0281638.WMF", _String2=".") returned 1 [0230.732] wcscmp (_String1="J0281638.WMF", _String2="..") returned 1 [0230.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9a88 [0230.732] wcscpy (in: _Dest=0x81d9a88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.732] wcscat (in: _Dest=0x81d9a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.732] wcscat (in: _Dest=0x81d9a88, _Source="J0281638.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" [0230.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0230.733] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d961900, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d961900, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0230.733] wcscmp (_String1="J0281640.WMF", _String2=".") returned 1 [0230.733] wcscmp (_String1="J0281640.WMF", _String2="..") returned 1 [0230.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9b10 [0230.733] wcscpy (in: _Dest=0x81d9b10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.733] wcscat (in: _Dest=0x81d9b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.733] wcscat (in: _Dest=0x81d9b10, _Source="J0281640.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" [0230.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0230.734] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc43800, ftCreationTime.dwHighDateTime=0x1beed3d, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4fc43800, ftLastWriteTime.dwHighDateTime=0x1beed3d, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0230.734] wcscmp (_String1="J0282126.WMF", _String2=".") returned 1 [0230.734] wcscmp (_String1="J0282126.WMF", _String2="..") returned 1 [0230.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9b98 [0230.735] wcscpy (in: _Dest=0x81d9b98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.735] wcscat (in: _Dest=0x81d9b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.735] wcscat (in: _Dest=0x81d9b98, _Source="J0282126.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" [0230.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0230.820] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0230.820] wcscmp (_String1="J0282928.WMF", _String2=".") returned 1 [0230.820] wcscmp (_String1="J0282928.WMF", _String2="..") returned 1 [0230.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9c20 [0230.820] wcscpy (in: _Dest=0x81d9c20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.820] wcscat (in: _Dest=0x81d9c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.820] wcscat (in: _Dest=0x81d9c20, _Source="J0282928.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" [0230.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0230.822] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0230.822] wcscmp (_String1="J0282932.WMF", _String2=".") returned 1 [0230.822] wcscmp (_String1="J0282932.WMF", _String2="..") returned 1 [0230.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9ca8 [0230.822] wcscpy (in: _Dest=0x81d9ca8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.822] wcscat (in: _Dest=0x81d9ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.822] wcscat (in: _Dest=0x81d9ca8, _Source="J0282932.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" [0230.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0230.823] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0230.823] wcscmp (_String1="J0285462.WMF", _String2=".") returned 1 [0230.824] wcscmp (_String1="J0285462.WMF", _String2="..") returned 1 [0230.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9d30 [0230.824] wcscpy (in: _Dest=0x81d9d30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.824] wcscat (in: _Dest=0x81d9d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.824] wcscat (in: _Dest=0x81d9d30, _Source="J0285462.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" [0230.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0230.825] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0230.825] wcscmp (_String1="J0285484.WMF", _String2=".") returned 1 [0230.825] wcscmp (_String1="J0285484.WMF", _String2="..") returned 1 [0230.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9db8 [0230.825] wcscpy (in: _Dest=0x81d9db8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.825] wcscat (in: _Dest=0x81d9db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.825] wcscat (in: _Dest=0x81d9db8, _Source="J0285484.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" [0230.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0230.826] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0230.826] wcscmp (_String1="J0285780.WMF", _String2=".") returned 1 [0230.826] wcscmp (_String1="J0285780.WMF", _String2="..") returned 1 [0230.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9e40 [0230.827] wcscpy (in: _Dest=0x81d9e40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.827] wcscat (in: _Dest=0x81d9e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.827] wcscat (in: _Dest=0x81d9e40, _Source="J0285780.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" [0230.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0230.828] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0230.828] wcscmp (_String1="J0285782.WMF", _String2=".") returned 1 [0230.828] wcscmp (_String1="J0285782.WMF", _String2="..") returned 1 [0230.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9ec8 [0230.828] wcscpy (in: _Dest=0x81d9ec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.828] wcscat (in: _Dest=0x81d9ec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.828] wcscat (in: _Dest=0x81d9ec8, _Source="J0285782.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" [0230.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0230.829] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0230.829] wcscmp (_String1="J0285792.WMF", _String2=".") returned 1 [0230.829] wcscmp (_String1="J0285792.WMF", _String2="..") returned 1 [0230.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9f50 [0230.829] wcscpy (in: _Dest=0x81d9f50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.830] wcscat (in: _Dest=0x81d9f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.830] wcscat (in: _Dest=0x81d9f50, _Source="J0285792.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" [0230.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0230.831] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0230.831] wcscmp (_String1="J0285796.WMF", _String2=".") returned 1 [0230.831] wcscmp (_String1="J0285796.WMF", _String2="..") returned 1 [0230.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9fd8 [0230.831] wcscpy (in: _Dest=0x81d9fd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.831] wcscat (in: _Dest=0x81d9fd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.831] wcscat (in: _Dest=0x81d9fd8, _Source="J0285796.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" [0230.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0230.832] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0230.832] wcscmp (_String1="J0285808.WMF", _String2=".") returned 1 [0230.832] wcscmp (_String1="J0285808.WMF", _String2="..") returned 1 [0230.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da060 [0230.832] wcscpy (in: _Dest=0x81da060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.832] wcscat (in: _Dest=0x81da060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.833] wcscat (in: _Dest=0x81da060, _Source="J0285808.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" [0230.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0230.834] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0230.834] wcscmp (_String1="J0285820.WMF", _String2=".") returned 1 [0230.834] wcscmp (_String1="J0285820.WMF", _String2="..") returned 1 [0230.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da0e8 [0230.834] wcscpy (in: _Dest=0x81da0e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.834] wcscat (in: _Dest=0x81da0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.834] wcscat (in: _Dest=0x81da0e8, _Source="J0285820.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" [0230.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0230.835] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0230.835] wcscmp (_String1="J0285822.WMF", _String2=".") returned 1 [0230.836] wcscmp (_String1="J0285822.WMF", _String2="..") returned 1 [0230.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da170 [0230.836] wcscpy (in: _Dest=0x81da170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.836] wcscat (in: _Dest=0x81da170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.836] wcscat (in: _Dest=0x81da170, _Source="J0285822.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" [0230.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aac [0230.837] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0230.839] wcscmp (_String1="J0287018.WMF", _String2=".") returned 1 [0230.839] wcscmp (_String1="J0287018.WMF", _String2="..") returned 1 [0230.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da1f8 [0230.840] wcscpy (in: _Dest=0x81da1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.840] wcscat (in: _Dest=0x81da1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.840] wcscat (in: _Dest=0x81da1f8, _Source="J0287018.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" [0230.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0230.841] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0230.841] wcscmp (_String1="J0287019.WMF", _String2=".") returned 1 [0230.841] wcscmp (_String1="J0287019.WMF", _String2="..") returned 1 [0230.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da280 [0230.841] wcscpy (in: _Dest=0x81da280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.841] wcscat (in: _Dest=0x81da280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.841] wcscat (in: _Dest=0x81da280, _Source="J0287019.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" [0230.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0230.842] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0230.842] wcscmp (_String1="J0287020.WMF", _String2=".") returned 1 [0230.842] wcscmp (_String1="J0287020.WMF", _String2="..") returned 1 [0230.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da308 [0230.842] wcscpy (in: _Dest=0x81da308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.842] wcscat (in: _Dest=0x81da308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.842] wcscat (in: _Dest=0x81da308, _Source="J0287020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" [0230.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0230.843] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0230.843] wcscmp (_String1="J0287024.WMF", _String2=".") returned 1 [0230.843] wcscmp (_String1="J0287024.WMF", _String2="..") returned 1 [0230.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da390 [0230.844] wcscpy (in: _Dest=0x81da390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.844] wcscat (in: _Dest=0x81da390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.844] wcscat (in: _Dest=0x81da390, _Source="J0287024.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" [0230.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2534 [0230.845] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0230.845] wcscmp (_String1="J0287408.WMF", _String2=".") returned 1 [0230.845] wcscmp (_String1="J0287408.WMF", _String2="..") returned 1 [0230.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da418 [0230.846] wcscpy (in: _Dest=0x81da418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.846] wcscat (in: _Dest=0x81da418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.846] wcscat (in: _Dest=0x81da418, _Source="J0287408.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" [0230.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0230.847] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0230.847] wcscmp (_String1="J0287415.WMF", _String2=".") returned 1 [0230.847] wcscmp (_String1="J0287415.WMF", _String2="..") returned 1 [0230.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da4a0 [0230.847] wcscpy (in: _Dest=0x81da4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.847] wcscat (in: _Dest=0x81da4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.847] wcscat (in: _Dest=0x81da4a0, _Source="J0287415.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" [0230.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0230.849] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0230.849] wcscmp (_String1="J0287417.WMF", _String2=".") returned 1 [0230.849] wcscmp (_String1="J0287417.WMF", _String2="..") returned 1 [0230.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da528 [0230.849] wcscpy (in: _Dest=0x81da528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.849] wcscat (in: _Dest=0x81da528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.849] wcscat (in: _Dest=0x81da528, _Source="J0287417.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" [0230.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29cc [0230.850] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x176b7200, ftCreationTime.dwHighDateTime=0x1bf594b, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x176b7200, ftLastWriteTime.dwHighDateTime=0x1bf594b, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0230.851] wcscmp (_String1="J0287641.JPG", _String2=".") returned 1 [0230.851] wcscmp (_String1="J0287641.JPG", _String2="..") returned 1 [0230.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da5b0 [0230.851] wcscpy (in: _Dest=0x81da5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.851] wcscat (in: _Dest=0x81da5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.851] wcscat (in: _Dest=0x81da5b0, _Source="J0287641.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" [0230.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0230.852] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c08f000, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c08f000, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0230.852] wcscmp (_String1="J0287642.JPG", _String2=".") returned 1 [0230.852] wcscmp (_String1="J0287642.JPG", _String2="..") returned 1 [0230.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da638 [0230.852] wcscpy (in: _Dest=0x81da638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.852] wcscat (in: _Dest=0x81da638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.852] wcscat (in: _Dest=0x81da638, _Source="J0287642.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" [0230.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0230.853] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad7c300, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ad7c300, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0230.853] wcscmp (_String1="J0287643.JPG", _String2=".") returned 1 [0230.853] wcscmp (_String1="J0287643.JPG", _String2="..") returned 1 [0230.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da6c0 [0230.853] wcscpy (in: _Dest=0x81da6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.853] wcscat (in: _Dest=0x81da6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.853] wcscat (in: _Dest=0x81da6c0, _Source="J0287643.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" [0230.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0230.854] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad7c300, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ad7c300, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0230.854] wcscmp (_String1="J0287644.JPG", _String2=".") returned 1 [0230.854] wcscmp (_String1="J0287644.JPG", _String2="..") returned 1 [0230.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da748 [0230.854] wcscpy (in: _Dest=0x81da748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.855] wcscat (in: _Dest=0x81da748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.855] wcscat (in: _Dest=0x81da748, _Source="J0287644.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" [0230.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0230.856] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad7c300, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ad7c300, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0230.856] wcscmp (_String1="J0287645.JPG", _String2=".") returned 1 [0230.856] wcscmp (_String1="J0287645.JPG", _String2="..") returned 1 [0230.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da7d0 [0230.856] wcscpy (in: _Dest=0x81da7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.856] wcscat (in: _Dest=0x81da7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.856] wcscat (in: _Dest=0x81da7d0, _Source="J0287645.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" [0230.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0230.880] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0230.880] wcscmp (_String1="J0289430.JPG", _String2=".") returned 1 [0230.880] wcscmp (_String1="J0289430.JPG", _String2="..") returned 1 [0230.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be568 [0230.881] wcscpy (in: _Dest=0x81be568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.881] wcscat (in: _Dest=0x81be568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.881] wcscat (in: _Dest=0x81be568, _Source="J0289430.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" [0230.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0230.882] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0230.882] wcscmp (_String1="J0290548.WMF", _String2=".") returned 1 [0230.882] wcscmp (_String1="J0290548.WMF", _String2="..") returned 1 [0230.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da858 [0230.882] wcscpy (in: _Dest=0x81da858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.882] wcscat (in: _Dest=0x81da858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.882] wcscat (in: _Dest=0x81da858, _Source="J0290548.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" [0230.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0230.883] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0230.883] wcscmp (_String1="J0291794.WMF", _String2=".") returned 1 [0230.883] wcscmp (_String1="J0291794.WMF", _String2="..") returned 1 [0230.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da8e0 [0230.883] wcscpy (in: _Dest=0x81da8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.883] wcscat (in: _Dest=0x81da8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.883] wcscat (in: _Dest=0x81da8e0, _Source="J0291794.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" [0230.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0230.884] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0230.884] wcscmp (_String1="J0292248.WMF", _String2=".") returned 1 [0230.884] wcscmp (_String1="J0292248.WMF", _String2="..") returned 1 [0230.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da968 [0230.885] wcscpy (in: _Dest=0x81da968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.885] wcscat (in: _Dest=0x81da968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.885] wcscat (in: _Dest=0x81da968, _Source="J0292248.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" [0230.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0230.885] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1 [0230.886] wcscmp (_String1="J0292270.WMF", _String2=".") returned 1 [0230.886] wcscmp (_String1="J0292270.WMF", _String2="..") returned 1 [0230.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da9f0 [0230.886] wcscpy (in: _Dest=0x81da9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.886] wcscat (in: _Dest=0x81da9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.886] wcscat (in: _Dest=0x81da9f0, _Source="J0292270.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" [0230.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0230.887] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1 [0230.887] wcscmp (_String1="J0292272.WMF", _String2=".") returned 1 [0230.887] wcscmp (_String1="J0292272.WMF", _String2="..") returned 1 [0230.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81daa78 [0230.887] wcscpy (in: _Dest=0x81daa78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.887] wcscat (in: _Dest=0x81daa78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.887] wcscat (in: _Dest=0x81daa78, _Source="J0292272.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" [0230.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daa78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0230.888] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1 [0230.888] wcscmp (_String1="J0292278.WMF", _String2=".") returned 1 [0230.888] wcscmp (_String1="J0292278.WMF", _String2="..") returned 1 [0230.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dab00 [0230.888] wcscpy (in: _Dest=0x81dab00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.888] wcscat (in: _Dest=0x81dab00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.888] wcscat (in: _Dest=0x81dab00, _Source="J0292278.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" [0230.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0230.889] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1 [0230.889] wcscmp (_String1="J0292286.WMF", _String2=".") returned 1 [0230.889] wcscmp (_String1="J0292286.WMF", _String2="..") returned 1 [0230.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dab88 [0230.889] wcscpy (in: _Dest=0x81dab88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.889] wcscat (in: _Dest=0x81dab88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.889] wcscat (in: _Dest=0x81dab88, _Source="J0292286.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" [0230.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dab88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0230.890] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1 [0230.890] wcscmp (_String1="J0293800.WMF", _String2=".") returned 1 [0230.890] wcscmp (_String1="J0293800.WMF", _String2="..") returned 1 [0230.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dac10 [0230.890] wcscpy (in: _Dest=0x81dac10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.890] wcscat (in: _Dest=0x81dac10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.890] wcscat (in: _Dest=0x81dac10, _Source="J0293800.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" [0230.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dac10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a28 [0230.891] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1 [0230.891] wcscmp (_String1="J0293832.WMF", _String2=".") returned 1 [0230.891] wcscmp (_String1="J0293832.WMF", _String2="..") returned 1 [0230.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dac98 [0230.891] wcscpy (in: _Dest=0x81dac98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.891] wcscat (in: _Dest=0x81dac98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.891] wcscat (in: _Dest=0x81dac98, _Source="J0293832.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" [0230.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dac98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb8 [0230.893] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1 [0230.893] wcscmp (_String1="J0294989.WMF", _String2=".") returned 1 [0230.893] wcscmp (_String1="J0294989.WMF", _String2="..") returned 1 [0230.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dad20 [0230.893] wcscpy (in: _Dest=0x81dad20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.893] wcscat (in: _Dest=0x81dad20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.893] wcscat (in: _Dest=0x81dad20, _Source="J0294989.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" [0230.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dad20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28cc [0230.894] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1 [0230.894] wcscmp (_String1="J0294991.WMF", _String2=".") returned 1 [0230.894] wcscmp (_String1="J0294991.WMF", _String2="..") returned 1 [0230.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dada8 [0230.894] wcscpy (in: _Dest=0x81dada8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.894] wcscat (in: _Dest=0x81dada8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.894] wcscat (in: _Dest=0x81dada8, _Source="J0294991.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" [0230.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dada8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2678 [0230.895] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1 [0230.895] wcscmp (_String1="J0295069.WMF", _String2=".") returned 1 [0230.895] wcscmp (_String1="J0295069.WMF", _String2="..") returned 1 [0230.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dae30 [0230.895] wcscpy (in: _Dest=0x81dae30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.895] wcscat (in: _Dest=0x81dae30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.895] wcscat (in: _Dest=0x81dae30, _Source="J0295069.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" [0230.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dae30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2668 [0230.897] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1 [0230.897] wcscmp (_String1="J0296277.WMF", _String2=".") returned 1 [0230.897] wcscmp (_String1="J0296277.WMF", _String2="..") returned 1 [0230.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81daeb8 [0230.897] wcscpy (in: _Dest=0x81daeb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.897] wcscat (in: _Dest=0x81daeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.897] wcscat (in: _Dest=0x81daeb8, _Source="J0296277.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" [0230.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0230.898] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1 [0230.898] wcscmp (_String1="J0296279.WMF", _String2=".") returned 1 [0230.898] wcscmp (_String1="J0296279.WMF", _String2="..") returned 1 [0230.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81daf40 [0230.898] wcscpy (in: _Dest=0x81daf40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.898] wcscat (in: _Dest=0x81daf40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.898] wcscat (in: _Dest=0x81daf40, _Source="J0296279.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" [0230.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daf40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f8 [0230.899] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1 [0230.899] wcscmp (_String1="J0296288.WMF", _String2=".") returned 1 [0230.899] wcscmp (_String1="J0296288.WMF", _String2="..") returned 1 [0230.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dafc8 [0230.900] wcscpy (in: _Dest=0x81dafc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.900] wcscat (in: _Dest=0x81dafc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.900] wcscat (in: _Dest=0x81dafc8, _Source="J0296288.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" [0230.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dafc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0230.901] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1 [0230.901] wcscmp (_String1="J0297229.WMF", _String2=".") returned 1 [0230.901] wcscmp (_String1="J0297229.WMF", _String2="..") returned 1 [0230.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db050 [0230.901] wcscpy (in: _Dest=0x81db050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.901] wcscat (in: _Dest=0x81db050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.901] wcscat (in: _Dest=0x81db050, _Source="J0297229.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" [0230.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0230.902] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1 [0230.902] wcscmp (_String1="J0297269.WMF", _String2=".") returned 1 [0230.902] wcscmp (_String1="J0297269.WMF", _String2="..") returned 1 [0230.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db0d8 [0230.903] wcscpy (in: _Dest=0x81db0d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.903] wcscat (in: _Dest=0x81db0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.903] wcscat (in: _Dest=0x81db0d8, _Source="J0297269.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" [0230.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0230.904] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1 [0230.904] wcscmp (_String1="J0297725.WMF", _String2=".") returned 1 [0230.904] wcscmp (_String1="J0297725.WMF", _String2="..") returned 1 [0230.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db160 [0230.904] wcscpy (in: _Dest=0x81db160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.904] wcscat (in: _Dest=0x81db160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.904] wcscat (in: _Dest=0x81db160, _Source="J0297725.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" [0230.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0230.905] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1 [0230.905] wcscmp (_String1="J0297727.WMF", _String2=".") returned 1 [0230.905] wcscmp (_String1="J0297727.WMF", _String2="..") returned 1 [0230.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db1e8 [0230.905] wcscpy (in: _Dest=0x81db1e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.905] wcscat (in: _Dest=0x81db1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.905] wcscat (in: _Dest=0x81db1e8, _Source="J0297727.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" [0230.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0230.906] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1 [0230.906] wcscmp (_String1="J0297757.WMF", _String2=".") returned 1 [0230.906] wcscmp (_String1="J0297757.WMF", _String2="..") returned 1 [0230.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db270 [0230.907] wcscpy (in: _Dest=0x81db270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.907] wcscat (in: _Dest=0x81db270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.907] wcscat (in: _Dest=0x81db270, _Source="J0297757.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" [0230.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0230.908] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1 [0230.908] wcscmp (_String1="J0297759.WMF", _String2=".") returned 1 [0230.908] wcscmp (_String1="J0297759.WMF", _String2="..") returned 1 [0230.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db2f8 [0230.908] wcscpy (in: _Dest=0x81db2f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.908] wcscat (in: _Dest=0x81db2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.908] wcscat (in: _Dest=0x81db2f8, _Source="J0297759.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" [0230.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0230.909] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1 [0230.926] wcscmp (_String1="J0300862.WMF", _String2=".") returned 1 [0230.926] wcscmp (_String1="J0300862.WMF", _String2="..") returned 1 [0230.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db380 [0230.926] wcscpy (in: _Dest=0x81db380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.926] wcscat (in: _Dest=0x81db380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.926] wcscat (in: _Dest=0x81db380, _Source="J0300862.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" [0230.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0230.927] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba43700, ftCreationTime.dwHighDateTime=0x1bf4592, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba43700, ftLastWriteTime.dwHighDateTime=0x1bf4592, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1 [0230.927] wcscmp (_String1="J0301044.WMF", _String2=".") returned 1 [0230.927] wcscmp (_String1="J0301044.WMF", _String2="..") returned 1 [0230.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db408 [0230.927] wcscpy (in: _Dest=0x81db408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.927] wcscat (in: _Dest=0x81db408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.927] wcscat (in: _Dest=0x81db408, _Source="J0301044.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" [0230.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80 [0230.929] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e05300, ftCreationTime.dwHighDateTime=0x1bf4ad0, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5e05300, ftLastWriteTime.dwHighDateTime=0x1bf4ad0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1 [0230.929] wcscmp (_String1="J0301052.WMF", _String2=".") returned 1 [0230.929] wcscmp (_String1="J0301052.WMF", _String2="..") returned 1 [0230.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db490 [0230.929] wcscpy (in: _Dest=0x81db490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.929] wcscat (in: _Dest=0x81db490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.929] wcscat (in: _Dest=0x81db490, _Source="J0301052.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" [0230.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e4 [0230.930] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1 [0230.930] wcscmp (_String1="J0301418.WMF", _String2=".") returned 1 [0230.930] wcscmp (_String1="J0301418.WMF", _String2="..") returned 1 [0230.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db518 [0230.930] wcscpy (in: _Dest=0x81db518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.930] wcscat (in: _Dest=0x81db518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.930] wcscat (in: _Dest=0x81db518, _Source="J0301418.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" [0230.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0231.354] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1 [0231.354] wcscmp (_String1="J0301432.WMF", _String2=".") returned 1 [0231.354] wcscmp (_String1="J0301432.WMF", _String2="..") returned 1 [0231.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db5a0 [0231.355] wcscpy (in: _Dest=0x81db5a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.355] wcscat (in: _Dest=0x81db5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.355] wcscat (in: _Dest=0x81db5a0, _Source="J0301432.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" [0231.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b14 [0231.356] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1 [0231.356] wcscmp (_String1="J0304371.WMF", _String2=".") returned 1 [0231.356] wcscmp (_String1="J0304371.WMF", _String2="..") returned 1 [0231.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff370 [0231.356] wcscpy (in: _Dest=0x3eff370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.357] wcscat (in: _Dest=0x3eff370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.357] wcscat (in: _Dest=0x3eff370, _Source="J0304371.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" [0231.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0231.358] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1 [0231.358] wcscmp (_String1="J0304405.WMF", _String2=".") returned 1 [0231.358] wcscmp (_String1="J0304405.WMF", _String2="..") returned 1 [0231.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff3f8 [0231.358] wcscpy (in: _Dest=0x3eff3f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.358] wcscat (in: _Dest=0x3eff3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.358] wcscat (in: _Dest=0x3eff3f8, _Source="J0304405.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" [0231.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2598 [0231.360] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1 [0231.360] wcscmp (_String1="J0304853.WMF", _String2=".") returned 1 [0231.360] wcscmp (_String1="J0304853.WMF", _String2="..") returned 1 [0231.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff480 [0231.360] wcscpy (in: _Dest=0x3eff480, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.360] wcscat (in: _Dest=0x3eff480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.360] wcscat (in: _Dest=0x3eff480, _Source="J0304853.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" [0231.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c0 [0231.361] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1 [0231.361] wcscmp (_String1="J0304861.WMF", _String2=".") returned 1 [0231.361] wcscmp (_String1="J0304861.WMF", _String2="..") returned 1 [0231.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff508 [0231.361] wcscpy (in: _Dest=0x3eff508, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.362] wcscat (in: _Dest=0x3eff508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.362] wcscat (in: _Dest=0x3eff508, _Source="J0304861.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" [0231.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ac [0231.363] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1 [0231.363] wcscmp (_String1="J0304875.WMF", _String2=".") returned 1 [0231.363] wcscmp (_String1="J0304875.WMF", _String2="..") returned 1 [0231.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff590 [0231.363] wcscpy (in: _Dest=0x3eff590, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.363] wcscat (in: _Dest=0x3eff590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.364] wcscat (in: _Dest=0x3eff590, _Source="J0304875.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" [0231.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0231.365] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1 [0231.365] wcscmp (_String1="J0309480.JPG", _String2=".") returned 1 [0231.365] wcscmp (_String1="J0309480.JPG", _String2="..") returned 1 [0231.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff618 [0231.365] wcscpy (in: _Dest=0x3eff618, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.365] wcscat (in: _Dest=0x3eff618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.366] wcscat (in: _Dest=0x3eff618, _Source="J0309480.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" [0231.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0231.367] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1 [0231.367] wcscmp (_String1="J0309567.JPG", _String2=".") returned 1 [0231.367] wcscmp (_String1="J0309567.JPG", _String2="..") returned 1 [0231.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff6a0 [0231.367] wcscpy (in: _Dest=0x3eff6a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.367] wcscat (in: _Dest=0x3eff6a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.367] wcscat (in: _Dest=0x3eff6a0, _Source="J0309567.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" [0231.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff6a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0231.369] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1 [0231.369] wcscmp (_String1="J0309585.JPG", _String2=".") returned 1 [0231.369] wcscmp (_String1="J0309585.JPG", _String2="..") returned 1 [0231.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff728 [0231.369] wcscpy (in: _Dest=0x3eff728, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.369] wcscat (in: _Dest=0x3eff728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.369] wcscat (in: _Dest=0x3eff728, _Source="J0309585.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" [0231.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0231.370] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1 [0231.370] wcscmp (_String1="J0309598.JPG", _String2=".") returned 1 [0231.370] wcscmp (_String1="J0309598.JPG", _String2="..") returned 1 [0231.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff7b0 [0231.371] wcscpy (in: _Dest=0x3eff7b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.371] wcscat (in: _Dest=0x3eff7b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.371] wcscat (in: _Dest=0x3eff7b0, _Source="J0309598.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" [0231.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0231.372] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1 [0231.372] wcscmp (_String1="J0309664.JPG", _String2=".") returned 1 [0231.372] wcscmp (_String1="J0309664.JPG", _String2="..") returned 1 [0231.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff838 [0231.372] wcscpy (in: _Dest=0x3eff838, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.372] wcscat (in: _Dest=0x3eff838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.372] wcscat (in: _Dest=0x3eff838, _Source="J0309664.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" [0231.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0231.373] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1 [0231.730] wcscmp (_String1="J0309705.JPG", _String2=".") returned 1 [0231.730] wcscmp (_String1="J0309705.JPG", _String2="..") returned 1 [0231.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff8c0 [0231.730] wcscpy (in: _Dest=0x3eff8c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.730] wcscat (in: _Dest=0x3eff8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.730] wcscat (in: _Dest=0x3eff8c0, _Source="J0309705.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" [0231.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0231.731] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ca8400, ftCreationTime.dwHighDateTime=0x1bf5d1a, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0ca8400, ftLastWriteTime.dwHighDateTime=0x1bf5d1a, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1 [0231.731] wcscmp (_String1="J0309902.WMF", _String2=".") returned 1 [0231.731] wcscmp (_String1="J0309902.WMF", _String2="..") returned 1 [0231.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff948 [0231.731] wcscpy (in: _Dest=0x3eff948, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.731] wcscat (in: _Dest=0x3eff948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.731] wcscat (in: _Dest=0x3eff948, _Source="J0309902.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" [0231.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0231.733] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1fbb100, ftCreationTime.dwHighDateTime=0x1bf5d1a, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1fbb100, ftLastWriteTime.dwHighDateTime=0x1bf5d1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1 [0231.733] wcscmp (_String1="J0309904.WMF", _String2=".") returned 1 [0231.733] wcscmp (_String1="J0309904.WMF", _String2="..") returned 1 [0231.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eff9d0 [0231.733] wcscpy (in: _Dest=0x3eff9d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.733] wcscat (in: _Dest=0x3eff9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.733] wcscat (in: _Dest=0x3eff9d0, _Source="J0309904.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" [0231.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eff9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0231.734] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd5400, ftCreationTime.dwHighDateTime=0x1bf5d1b, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dd5400, ftLastWriteTime.dwHighDateTime=0x1bf5d1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1 [0231.734] wcscmp (_String1="J0309920.WMF", _String2=".") returned 1 [0231.734] wcscmp (_String1="J0309920.WMF", _String2="..") returned 1 [0231.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3effa58 [0231.734] wcscpy (in: _Dest=0x3effa58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.734] wcscat (in: _Dest=0x3effa58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.734] wcscat (in: _Dest=0x3effa58, _Source="J0309920.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" [0231.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3effa58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0231.735] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f389100, ftCreationTime.dwHighDateTime=0x1c97c1a, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f389100, ftLastWriteTime.dwHighDateTime=0x1c97c1a, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1 [0231.735] wcscmp (_String1="J0313896.JPG", _String2=".") returned 1 [0231.735] wcscmp (_String1="J0313896.JPG", _String2="..") returned 1 [0231.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3effae0 [0231.735] wcscpy (in: _Dest=0x3effae0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.735] wcscat (in: _Dest=0x3effae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.735] wcscat (in: _Dest=0x3effae0, _Source="J0313896.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" [0231.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3effae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e4 [0231.736] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b09700, ftCreationTime.dwHighDateTime=0x1c97c1a, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b09700, ftLastWriteTime.dwHighDateTime=0x1c97c1a, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1 [0231.736] wcscmp (_String1="J0313965.JPG", _String2=".") returned 1 [0231.736] wcscmp (_String1="J0313965.JPG", _String2="..") returned 1 [0231.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3effb68 [0231.737] wcscpy (in: _Dest=0x3effb68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.737] wcscat (in: _Dest=0x3effb68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.737] wcscat (in: _Dest=0x3effb68, _Source="J0313965.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" [0231.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3effb68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0231.738] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b20500, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7b20500, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1 [0231.738] wcscmp (_String1="J0313970.JPG", _String2=".") returned 1 [0231.738] wcscmp (_String1="J0313970.JPG", _String2="..") returned 1 [0231.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3effbf0 [0231.738] wcscpy (in: _Dest=0x3effbf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.738] wcscat (in: _Dest=0x3effbf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.738] wcscat (in: _Dest=0x3effbf0, _Source="J0313970.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" [0231.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3effbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0231.739] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23cdb00, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd23cdb00, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1 [0231.739] wcscmp (_String1="J0313974.JPG", _String2=".") returned 1 [0231.739] wcscmp (_String1="J0313974.JPG", _String2="..") returned 1 [0231.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3effc78 [0231.739] wcscpy (in: _Dest=0x3effc78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.739] wcscat (in: _Dest=0x3effc78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.739] wcscat (in: _Dest=0x3effc78, _Source="J0313974.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" [0231.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3effc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0231.740] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51fec00, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc51fec00, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1 [0231.740] wcscmp (_String1="J0314068.JPG", _String2=".") returned 1 [0231.740] wcscmp (_String1="J0314068.JPG", _String2="..") returned 1 [0231.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3effd00 [0231.740] wcscpy (in: _Dest=0x3effd00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.740] wcscat (in: _Dest=0x3effd00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.740] wcscat (in: _Dest=0x3effd00, _Source="J0314068.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" [0231.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3effd00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0231.741] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1 [0231.742] wcscmp (_String1="J0315580.JPG", _String2=".") returned 1 [0231.742] wcscmp (_String1="J0315580.JPG", _String2="..") returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3effd88 [0231.742] wcscpy (in: _Dest=0x3effd88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.742] wcscat (in: _Dest=0x3effd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.742] wcscat (in: _Dest=0x3effd88, _Source="J0315580.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" [0231.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3effd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0231.743] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1 [0231.743] wcscmp (_String1="J0315612.JPG", _String2=".") returned 1 [0231.743] wcscmp (_String1="J0315612.JPG", _String2="..") returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3effe10 [0231.743] wcscpy (in: _Dest=0x3effe10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.743] wcscat (in: _Dest=0x3effe10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.743] wcscat (in: _Dest=0x3effe10, _Source="J0315612.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" [0231.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3effe10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0231.745] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1 [0231.745] wcscmp (_String1="J0318448.WMF", _String2=".") returned 1 [0231.745] wcscmp (_String1="J0318448.WMF", _String2="..") returned 1 [0231.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3effe98 [0231.745] wcscpy (in: _Dest=0x3effe98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.745] wcscat (in: _Dest=0x3effe98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.745] wcscat (in: _Dest=0x3effe98, _Source="J0318448.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" [0231.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3effe98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a3c [0231.846] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1 [0231.846] wcscmp (_String1="J0318804.WMF", _String2=".") returned 1 [0231.846] wcscmp (_String1="J0318804.WMF", _String2="..") returned 1 [0231.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3efff20 [0231.847] wcscpy (in: _Dest=0x3efff20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.847] wcscat (in: _Dest=0x3efff20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.847] wcscat (in: _Dest=0x3efff20, _Source="J0318804.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" [0231.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3efff20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x287c [0231.848] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1 [0231.848] wcscmp (_String1="J0318810.WMF", _String2=".") returned 1 [0231.848] wcscmp (_String1="J0318810.WMF", _String2="..") returned 1 [0231.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3efffa8 [0231.849] wcscpy (in: _Dest=0x3efffa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.849] wcscat (in: _Dest=0x3efffa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.849] wcscat (in: _Dest=0x3efffa8, _Source="J0318810.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" [0231.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3efffa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27fc [0231.850] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1 [0231.850] wcscmp (_String1="J0321179.JPG", _String2=".") returned 1 [0231.850] wcscmp (_String1="J0321179.JPG", _String2="..") returned 1 [0231.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00030 [0231.850] wcscpy (in: _Dest=0x3f00030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.850] wcscat (in: _Dest=0x3f00030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.850] wcscat (in: _Dest=0x3f00030, _Source="J0321179.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" [0231.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be8 [0231.851] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1 [0231.851] wcscmp (_String1="J0324694.WMF", _String2=".") returned 1 [0231.851] wcscmp (_String1="J0324694.WMF", _String2="..") returned 1 [0231.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f000b8 [0231.851] wcscpy (in: _Dest=0x3f000b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.851] wcscat (in: _Dest=0x3f000b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.851] wcscat (in: _Dest=0x3f000b8, _Source="J0324694.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" [0231.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f000b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b6c [0231.853] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1 [0231.853] wcscmp (_String1="J0324704.WMF", _String2=".") returned 1 [0231.853] wcscmp (_String1="J0324704.WMF", _String2="..") returned 1 [0231.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00140 [0231.853] wcscpy (in: _Dest=0x3f00140, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.853] wcscat (in: _Dest=0x3f00140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.853] wcscat (in: _Dest=0x3f00140, _Source="J0324704.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" [0231.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be4 [0231.854] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1 [0231.854] wcscmp (_String1="J0337280.JPG", _String2=".") returned 1 [0231.854] wcscmp (_String1="J0337280.JPG", _String2="..") returned 1 [0231.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f001c8 [0231.854] wcscpy (in: _Dest=0x3f001c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.854] wcscat (in: _Dest=0x3f001c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.854] wcscat (in: _Dest=0x3f001c8, _Source="J0337280.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" [0231.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f001c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0231.855] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1 [0231.855] wcscmp (_String1="J0341328.JPG", _String2=".") returned 1 [0231.855] wcscmp (_String1="J0341328.JPG", _String2="..") returned 1 [0231.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00250 [0231.855] wcscpy (in: _Dest=0x3f00250, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.855] wcscat (in: _Dest=0x3f00250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.855] wcscat (in: _Dest=0x3f00250, _Source="J0341328.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" [0231.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8c [0231.856] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1 [0232.057] wcscmp (_String1="J0341344.JPG", _String2=".") returned 1 [0232.057] wcscmp (_String1="J0341344.JPG", _String2="..") returned 1 [0232.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f002d8 [0232.057] wcscpy (in: _Dest=0x3f002d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.057] wcscat (in: _Dest=0x3f002d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.057] wcscat (in: _Dest=0x3f002d8, _Source="J0341344.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" [0232.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f002d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0232.058] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1 [0232.058] wcscmp (_String1="J0341439.JPG", _String2=".") returned 1 [0232.058] wcscmp (_String1="J0341439.JPG", _String2="..") returned 1 [0232.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00360 [0232.058] wcscpy (in: _Dest=0x3f00360, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.058] wcscat (in: _Dest=0x3f00360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.058] wcscat (in: _Dest=0x3f00360, _Source="J0341439.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" [0232.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc [0232.059] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1 [0232.059] wcscmp (_String1="J0341447.JPG", _String2=".") returned 1 [0232.059] wcscmp (_String1="J0341447.JPG", _String2="..") returned 1 [0232.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f003e8 [0232.059] wcscpy (in: _Dest=0x3f003e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.059] wcscat (in: _Dest=0x3f003e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.059] wcscat (in: _Dest=0x3f003e8, _Source="J0341447.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" [0232.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f003e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0232.060] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1 [0232.060] wcscmp (_String1="J0341448.JPG", _String2=".") returned 1 [0232.060] wcscmp (_String1="J0341448.JPG", _String2="..") returned 1 [0232.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00470 [0232.060] wcscpy (in: _Dest=0x3f00470, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.060] wcscat (in: _Dest=0x3f00470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.060] wcscat (in: _Dest=0x3f00470, _Source="J0341448.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" [0232.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0232.061] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1 [0232.061] wcscmp (_String1="J0341455.JPG", _String2=".") returned 1 [0232.061] wcscmp (_String1="J0341455.JPG", _String2="..") returned 1 [0232.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f004f8 [0232.062] wcscpy (in: _Dest=0x3f004f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.062] wcscat (in: _Dest=0x3f004f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.062] wcscat (in: _Dest=0x3f004f8, _Source="J0341455.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" [0232.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f004f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0232.063] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1 [0232.063] wcscmp (_String1="J0341475.JPG", _String2=".") returned 1 [0232.063] wcscmp (_String1="J0341475.JPG", _String2="..") returned 1 [0232.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00580 [0232.063] wcscpy (in: _Dest=0x3f00580, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.063] wcscat (in: _Dest=0x3f00580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.063] wcscat (in: _Dest=0x3f00580, _Source="J0341475.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" [0232.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0232.064] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1 [0232.064] wcscmp (_String1="J0341499.JPG", _String2=".") returned 1 [0232.064] wcscmp (_String1="J0341499.JPG", _String2="..") returned 1 [0232.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00608 [0232.064] wcscpy (in: _Dest=0x3f00608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.064] wcscat (in: _Dest=0x3f00608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.064] wcscat (in: _Dest=0x3f00608, _Source="J0341499.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" [0232.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f0 [0232.066] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1 [0232.066] wcscmp (_String1="J0341534.JPG", _String2=".") returned 1 [0232.066] wcscmp (_String1="J0341534.JPG", _String2="..") returned 1 [0232.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00690 [0232.066] wcscpy (in: _Dest=0x3f00690, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.066] wcscat (in: _Dest=0x3f00690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.066] wcscat (in: _Dest=0x3f00690, _Source="J0341534.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" [0232.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0232.067] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1 [0232.067] wcscmp (_String1="J0341551.JPG", _String2=".") returned 1 [0232.067] wcscmp (_String1="J0341551.JPG", _String2="..") returned 1 [0232.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00718 [0232.067] wcscpy (in: _Dest=0x3f00718, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.067] wcscat (in: _Dest=0x3f00718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.067] wcscat (in: _Dest=0x3f00718, _Source="J0341551.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" [0232.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0232.068] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1 [0232.068] wcscmp (_String1="J0341554.JPG", _String2=".") returned 1 [0232.068] wcscmp (_String1="J0341554.JPG", _String2="..") returned 1 [0232.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f007a0 [0232.068] wcscpy (in: _Dest=0x3f007a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.068] wcscat (in: _Dest=0x3f007a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.068] wcscat (in: _Dest=0x3f007a0, _Source="J0341554.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" [0232.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f007a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0232.069] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1 [0232.069] wcscmp (_String1="J0341557.JPG", _String2=".") returned 1 [0232.069] wcscmp (_String1="J0341557.JPG", _String2="..") returned 1 [0232.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00828 [0232.070] wcscpy (in: _Dest=0x3f00828, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.070] wcscat (in: _Dest=0x3f00828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.070] wcscat (in: _Dest=0x3f00828, _Source="J0341557.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" [0232.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0232.071] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1 [0232.071] wcscmp (_String1="J0341559.JPG", _String2=".") returned 1 [0232.071] wcscmp (_String1="J0341559.JPG", _String2="..") returned 1 [0232.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f008b0 [0232.071] wcscpy (in: _Dest=0x3f008b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.071] wcscat (in: _Dest=0x3f008b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.071] wcscat (in: _Dest=0x3f008b0, _Source="J0341559.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" [0232.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f008b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0232.072] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1 [0232.072] wcscmp (_String1="J0341561.JPG", _String2=".") returned 1 [0232.072] wcscmp (_String1="J0341561.JPG", _String2="..") returned 1 [0232.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00938 [0232.072] wcscpy (in: _Dest=0x3f00938, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.072] wcscat (in: _Dest=0x3f00938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.072] wcscat (in: _Dest=0x3f00938, _Source="J0341561.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" [0232.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0232.073] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1 [0232.073] wcscmp (_String1="J0341634.JPG", _String2=".") returned 1 [0232.073] wcscmp (_String1="J0341634.JPG", _String2="..") returned 1 [0232.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f009c0 [0232.073] wcscpy (in: _Dest=0x3f009c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.073] wcscat (in: _Dest=0x3f009c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.073] wcscat (in: _Dest=0x3f009c0, _Source="J0341634.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" [0232.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f009c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca4 [0232.074] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1 [0232.074] wcscmp (_String1="J0341636.JPG", _String2=".") returned 1 [0232.074] wcscmp (_String1="J0341636.JPG", _String2="..") returned 1 [0232.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00a48 [0232.074] wcscpy (in: _Dest=0x3f00a48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.074] wcscat (in: _Dest=0x3f00a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.074] wcscat (in: _Dest=0x3f00a48, _Source="J0341636.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" [0232.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a24 [0232.075] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1 [0232.075] wcscmp (_String1="J0341645.JPG", _String2=".") returned 1 [0232.075] wcscmp (_String1="J0341645.JPG", _String2="..") returned 1 [0232.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00ad0 [0232.076] wcscpy (in: _Dest=0x3f00ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.076] wcscat (in: _Dest=0x3f00ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.076] wcscat (in: _Dest=0x3f00ad0, _Source="J0341645.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" [0232.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0232.077] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1 [0232.077] wcscmp (_String1="J0341653.JPG", _String2=".") returned 1 [0232.077] wcscmp (_String1="J0341653.JPG", _String2="..") returned 1 [0232.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00b58 [0232.077] wcscpy (in: _Dest=0x3f00b58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.077] wcscat (in: _Dest=0x3f00b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.077] wcscat (in: _Dest=0x3f00b58, _Source="J0341653.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" [0232.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0232.078] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1 [0232.078] wcscmp (_String1="J0341654.JPG", _String2=".") returned 1 [0232.078] wcscmp (_String1="J0341654.JPG", _String2="..") returned 1 [0232.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00be0 [0232.078] wcscpy (in: _Dest=0x3f00be0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.078] wcscat (in: _Dest=0x3f00be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.078] wcscat (in: _Dest=0x3f00be0, _Source="J0341654.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" [0232.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0232.079] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1 [0232.079] wcscmp (_String1="J0341738.JPG", _String2=".") returned 1 [0232.079] wcscmp (_String1="J0341738.JPG", _String2="..") returned 1 [0232.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00c68 [0232.079] wcscpy (in: _Dest=0x3f00c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.079] wcscat (in: _Dest=0x3f00c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.079] wcscat (in: _Dest=0x3f00c68, _Source="J0341738.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" [0232.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0232.080] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1 [0232.080] wcscmp (_String1="J0341742.JPG", _String2=".") returned 1 [0232.080] wcscmp (_String1="J0341742.JPG", _String2="..") returned 1 [0232.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00cf0 [0232.080] wcscpy (in: _Dest=0x3f00cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.080] wcscat (in: _Dest=0x3f00cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.080] wcscat (in: _Dest=0x3f00cf0, _Source="J0341742.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" [0232.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c98 [0232.081] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1 [0232.081] wcscmp (_String1="J0382836.JPG", _String2=".") returned 1 [0232.081] wcscmp (_String1="J0382836.JPG", _String2="..") returned 1 [0232.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00d78 [0232.082] wcscpy (in: _Dest=0x3f00d78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.082] wcscat (in: _Dest=0x3f00d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.082] wcscat (in: _Dest=0x3f00d78, _Source="J0382836.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" [0232.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0232.083] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1 [0232.083] wcscmp (_String1="J0382925.JPG", _String2=".") returned 1 [0232.083] wcscmp (_String1="J0382925.JPG", _String2="..") returned 1 [0232.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00e00 [0232.083] wcscpy (in: _Dest=0x3f00e00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.083] wcscat (in: _Dest=0x3f00e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.083] wcscat (in: _Dest=0x3f00e00, _Source="J0382925.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" [0232.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0232.084] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1 [0232.084] wcscmp (_String1="J0382926.JPG", _String2=".") returned 1 [0232.084] wcscmp (_String1="J0382926.JPG", _String2="..") returned 1 [0232.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00e88 [0232.084] wcscpy (in: _Dest=0x3f00e88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.084] wcscat (in: _Dest=0x3f00e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.084] wcscat (in: _Dest=0x3f00e88, _Source="J0382926.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" [0232.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0232.086] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1 [0232.086] wcscmp (_String1="J0382927.JPG", _String2=".") returned 1 [0232.086] wcscmp (_String1="J0382927.JPG", _String2="..") returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00f10 [0232.086] wcscpy (in: _Dest=0x3f00f10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.086] wcscat (in: _Dest=0x3f00f10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.086] wcscat (in: _Dest=0x3f00f10, _Source="J0382927.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" [0232.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0232.087] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1 [0232.087] wcscmp (_String1="J0382930.JPG", _String2=".") returned 1 [0232.087] wcscmp (_String1="J0382930.JPG", _String2="..") returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f00f98 [0232.087] wcscpy (in: _Dest=0x3f00f98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.087] wcscat (in: _Dest=0x3f00f98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.087] wcscat (in: _Dest=0x3f00f98, _Source="J0382930.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" [0232.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f00f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0232.088] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1 [0232.088] wcscmp (_String1="J0382931.JPG", _String2=".") returned 1 [0232.088] wcscmp (_String1="J0382931.JPG", _String2="..") returned 1 [0232.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01020 [0232.088] wcscpy (in: _Dest=0x3f01020, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.088] wcscat (in: _Dest=0x3f01020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.088] wcscat (in: _Dest=0x3f01020, _Source="J0382931.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" [0232.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0232.089] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1 [0232.089] wcscmp (_String1="J0382938.JPG", _String2=".") returned 1 [0232.089] wcscmp (_String1="J0382938.JPG", _String2="..") returned 1 [0232.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f010a8 [0232.089] wcscpy (in: _Dest=0x3f010a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.090] wcscat (in: _Dest=0x3f010a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.090] wcscat (in: _Dest=0x3f010a8, _Source="J0382938.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" [0232.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f010a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0232.190] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1 [0232.190] wcscmp (_String1="J0382939.JPG", _String2=".") returned 1 [0232.190] wcscmp (_String1="J0382939.JPG", _String2="..") returned 1 [0232.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ec50 [0232.190] wcscpy (in: _Dest=0x3e1ec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.190] wcscat (in: _Dest=0x3e1ec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.191] wcscat (in: _Dest=0x3e1ec50, _Source="J0382939.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" [0232.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0232.191] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1 [0232.191] wcscmp (_String1="J0382942.JPG", _String2=".") returned 1 [0232.191] wcscmp (_String1="J0382942.JPG", _String2="..") returned 1 [0232.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f118 [0232.192] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.192] wcscat (in: _Dest=0x3e1f118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.192] wcscat (in: _Dest=0x3e1f118, _Source="J0382942.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" [0232.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0232.193] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1 [0232.193] wcscmp (_String1="J0382944.JPG", _String2=".") returned 1 [0232.193] wcscmp (_String1="J0382944.JPG", _String2="..") returned 1 [0232.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fc40 [0232.193] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.193] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.193] wcscat (in: _Dest=0x3e1fc40, _Source="J0382944.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" [0232.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0232.194] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1 [0232.194] wcscmp (_String1="J0382947.JPG", _String2=".") returned 1 [0232.194] wcscmp (_String1="J0382947.JPG", _String2="..") returned 1 [0232.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f4d0 [0232.194] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.194] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.194] wcscat (in: _Dest=0x3e1f4d0, _Source="J0382947.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" [0232.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0232.195] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1 [0232.195] wcscmp (_String1="J0382948.JPG", _String2=".") returned 1 [0232.195] wcscmp (_String1="J0382948.JPG", _String2="..") returned 1 [0232.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f2b0 [0232.195] wcscpy (in: _Dest=0x3e1f2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.195] wcscat (in: _Dest=0x3e1f2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.195] wcscat (in: _Dest=0x3e1f2b0, _Source="J0382948.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" [0232.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0232.196] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1 [0232.196] wcscmp (_String1="J0382950.JPG", _String2=".") returned 1 [0232.196] wcscmp (_String1="J0382950.JPG", _String2="..") returned 1 [0232.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f448 [0232.196] wcscpy (in: _Dest=0x3e1f448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.196] wcscat (in: _Dest=0x3e1f448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.196] wcscat (in: _Dest=0x3e1f448, _Source="J0382950.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" [0232.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0232.197] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1 [0232.197] wcscmp (_String1="J0382952.JPG", _String2=".") returned 1 [0232.197] wcscmp (_String1="J0382952.JPG", _String2="..") returned 1 [0232.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e202a0 [0232.197] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.197] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.197] wcscat (in: _Dest=0x3e202a0, _Source="J0382952.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" [0232.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0232.198] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1 [0232.257] wcscmp (_String1="J0382954.JPG", _String2=".") returned 1 [0232.257] wcscmp (_String1="J0382954.JPG", _String2="..") returned 1 [0232.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f998 [0232.257] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.257] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.257] wcscat (in: _Dest=0x3e1f998, _Source="J0382954.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" [0232.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0232.258] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1 [0232.259] wcscmp (_String1="J0382955.JPG", _String2=".") returned 1 [0232.259] wcscmp (_String1="J0382955.JPG", _String2="..") returned 1 [0232.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ecd8 [0232.259] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.259] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.259] wcscat (in: _Dest=0x3e1ecd8, _Source="J0382955.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" [0232.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0232.260] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1 [0232.260] wcscmp (_String1="J0382957.JPG", _String2=".") returned 1 [0232.260] wcscmp (_String1="J0382957.JPG", _String2="..") returned 1 [0232.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f6f0 [0232.260] wcscpy (in: _Dest=0x3e1f6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.260] wcscat (in: _Dest=0x3e1f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.260] wcscat (in: _Dest=0x3e1f6f0, _Source="J0382957.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" [0232.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0232.261] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1 [0232.261] wcscmp (_String1="J0382958.JPG", _String2=".") returned 1 [0232.261] wcscmp (_String1="J0382958.JPG", _String2="..") returned 1 [0232.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ed60 [0232.261] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.261] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.261] wcscat (in: _Dest=0x3e1ed60, _Source="J0382958.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" [0232.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0232.262] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1 [0232.262] wcscmp (_String1="J0382959.JPG", _String2=".") returned 1 [0232.262] wcscmp (_String1="J0382959.JPG", _String2="..") returned 1 [0232.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f778 [0232.262] wcscpy (in: _Dest=0x3e1f778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.262] wcscat (in: _Dest=0x3e1f778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.262] wcscat (in: _Dest=0x3e1f778, _Source="J0382959.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" [0232.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0232.263] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1 [0232.263] wcscmp (_String1="J0382960.JPG", _String2=".") returned 1 [0232.263] wcscmp (_String1="J0382960.JPG", _String2="..") returned 1 [0232.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f668 [0232.263] wcscpy (in: _Dest=0x3e1f668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.263] wcscat (in: _Dest=0x3e1f668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.263] wcscat (in: _Dest=0x3e1f668, _Source="J0382960.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" [0232.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0232.264] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1 [0232.264] wcscmp (_String1="J0382961.JPG", _String2=".") returned 1 [0232.264] wcscmp (_String1="J0382961.JPG", _String2="..") returned 1 [0232.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eb40 [0232.264] wcscpy (in: _Dest=0x3e1eb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.264] wcscat (in: _Dest=0x3e1eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.264] wcscat (in: _Dest=0x3e1eb40, _Source="J0382961.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" [0232.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b7c [0232.265] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1 [0232.265] wcscmp (_String1="J0382962.JPG", _String2=".") returned 1 [0232.265] wcscmp (_String1="J0382962.JPG", _String2="..") returned 1 [0232.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f090 [0232.265] wcscpy (in: _Dest=0x3e1f090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.265] wcscat (in: _Dest=0x3e1f090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.266] wcscat (in: _Dest=0x3e1f090, _Source="J0382962.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" [0232.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0232.266] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1 [0232.266] wcscmp (_String1="J0382963.JPG", _String2=".") returned 1 [0232.267] wcscmp (_String1="J0382963.JPG", _String2="..") returned 1 [0232.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f3c0 [0232.267] wcscpy (in: _Dest=0x3e1f3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.267] wcscat (in: _Dest=0x3e1f3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.267] wcscat (in: _Dest=0x3e1f3c0, _Source="J0382963.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" [0232.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0232.268] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1 [0232.268] wcscmp (_String1="J0382965.JPG", _String2=".") returned 1 [0232.268] wcscmp (_String1="J0382965.JPG", _String2="..") returned 1 [0232.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ef80 [0232.268] wcscpy (in: _Dest=0x3e1ef80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.268] wcscat (in: _Dest=0x3e1ef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.268] wcscat (in: _Dest=0x3e1ef80, _Source="J0382965.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" [0232.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0232.280] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1 [0232.280] wcscmp (_String1="J0382966.JPG", _String2=".") returned 1 [0232.280] wcscmp (_String1="J0382966.JPG", _String2="..") returned 1 [0232.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fbb8 [0232.280] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.280] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.280] wcscat (in: _Dest=0x3e1fbb8, _Source="J0382966.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" [0232.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0232.286] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1 [0232.286] wcscmp (_String1="J0382967.JPG", _String2=".") returned 1 [0232.286] wcscmp (_String1="J0382967.JPG", _String2="..") returned 1 [0232.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01130 [0232.286] wcscpy (in: _Dest=0x3f01130, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.286] wcscat (in: _Dest=0x3f01130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.286] wcscat (in: _Dest=0x3f01130, _Source="J0382967.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" [0232.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0232.287] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1 [0232.287] wcscmp (_String1="J0382968.JPG", _String2=".") returned 1 [0232.287] wcscmp (_String1="J0382968.JPG", _String2="..") returned 1 [0232.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f011b8 [0232.287] wcscpy (in: _Dest=0x3f011b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.287] wcscat (in: _Dest=0x3f011b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.287] wcscat (in: _Dest=0x3f011b8, _Source="J0382968.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" [0232.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f011b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0232.288] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1 [0232.288] wcscmp (_String1="J0382969.JPG", _String2=".") returned 1 [0232.288] wcscmp (_String1="J0382969.JPG", _String2="..") returned 1 [0232.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01240 [0232.288] wcscpy (in: _Dest=0x3f01240, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.288] wcscat (in: _Dest=0x3f01240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.288] wcscat (in: _Dest=0x3f01240, _Source="J0382969.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" [0232.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28fc [0232.289] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1 [0232.290] wcscmp (_String1="J0382970.JPG", _String2=".") returned 1 [0232.290] wcscmp (_String1="J0382970.JPG", _String2="..") returned 1 [0232.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f012c8 [0232.290] wcscpy (in: _Dest=0x3f012c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.290] wcscat (in: _Dest=0x3f012c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.290] wcscat (in: _Dest=0x3f012c8, _Source="J0382970.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" [0232.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f012c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0232.291] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1 [0232.291] wcscmp (_String1="J0384862.JPG", _String2=".") returned 1 [0232.291] wcscmp (_String1="J0384862.JPG", _String2="..") returned 1 [0232.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01350 [0232.291] wcscpy (in: _Dest=0x3f01350, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.291] wcscat (in: _Dest=0x3f01350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.291] wcscat (in: _Dest=0x3f01350, _Source="J0384862.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" [0232.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0232.292] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1 [0232.292] wcscmp (_String1="J0384885.JPG", _String2=".") returned 1 [0232.292] wcscmp (_String1="J0384885.JPG", _String2="..") returned 1 [0232.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f013d8 [0232.292] wcscpy (in: _Dest=0x3f013d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.292] wcscat (in: _Dest=0x3f013d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.292] wcscat (in: _Dest=0x3f013d8, _Source="J0384885.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" [0232.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f013d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0232.299] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1 [0232.299] wcscmp (_String1="J0384888.JPG", _String2=".") returned 1 [0232.299] wcscmp (_String1="J0384888.JPG", _String2="..") returned 1 [0232.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01460 [0232.299] wcscpy (in: _Dest=0x3f01460, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.299] wcscat (in: _Dest=0x3f01460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.299] wcscat (in: _Dest=0x3f01460, _Source="J0384888.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" [0232.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0232.311] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1 [0232.311] wcscmp (_String1="J0384895.JPG", _String2=".") returned 1 [0232.311] wcscmp (_String1="J0384895.JPG", _String2="..") returned 1 [0232.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f014e8 [0232.311] wcscpy (in: _Dest=0x3f014e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.311] wcscat (in: _Dest=0x3f014e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.311] wcscat (in: _Dest=0x3f014e8, _Source="J0384895.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" [0232.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f014e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f4 [0232.316] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1 [0232.316] wcscmp (_String1="J0384900.JPG", _String2=".") returned 1 [0232.316] wcscmp (_String1="J0384900.JPG", _String2="..") returned 1 [0232.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01570 [0232.316] wcscpy (in: _Dest=0x3f01570, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.316] wcscat (in: _Dest=0x3f01570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.316] wcscat (in: _Dest=0x3f01570, _Source="J0384900.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" [0232.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0232.317] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1 [0232.317] wcscmp (_String1="J0386120.JPG", _String2=".") returned 1 [0232.317] wcscmp (_String1="J0386120.JPG", _String2="..") returned 1 [0232.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f015f8 [0232.317] wcscpy (in: _Dest=0x3f015f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.317] wcscat (in: _Dest=0x3f015f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.317] wcscat (in: _Dest=0x3f015f8, _Source="J0386120.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" [0232.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f015f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0232.318] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1 [0232.318] wcscmp (_String1="J0386267.JPG", _String2=".") returned 1 [0232.318] wcscmp (_String1="J0386267.JPG", _String2="..") returned 1 [0232.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01680 [0232.319] wcscpy (in: _Dest=0x3f01680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.319] wcscat (in: _Dest=0x3f01680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.319] wcscat (in: _Dest=0x3f01680, _Source="J0386267.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" [0232.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0232.320] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1 [0232.320] wcscmp (_String1="J0386270.JPG", _String2=".") returned 1 [0232.320] wcscmp (_String1="J0386270.JPG", _String2="..") returned 1 [0232.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01708 [0232.320] wcscpy (in: _Dest=0x3f01708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.320] wcscat (in: _Dest=0x3f01708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.320] wcscat (in: _Dest=0x3f01708, _Source="J0386270.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" [0232.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0232.321] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1 [0232.321] wcscmp (_String1="J0386485.JPG", _String2=".") returned 1 [0232.321] wcscmp (_String1="J0386485.JPG", _String2="..") returned 1 [0232.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01790 [0232.321] wcscpy (in: _Dest=0x3f01790, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.321] wcscat (in: _Dest=0x3f01790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.321] wcscat (in: _Dest=0x3f01790, _Source="J0386485.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" [0232.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0232.336] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1 [0232.336] wcscmp (_String1="J0386764.JPG", _String2=".") returned 1 [0232.336] wcscmp (_String1="J0386764.JPG", _String2="..") returned 1 [0232.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01818 [0232.336] wcscpy (in: _Dest=0x3f01818, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.336] wcscat (in: _Dest=0x3f01818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.336] wcscat (in: _Dest=0x3f01818, _Source="J0386764.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" [0232.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0232.343] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1 [0232.343] wcscmp (_String1="J0387337.JPG", _String2=".") returned 1 [0232.343] wcscmp (_String1="J0387337.JPG", _String2="..") returned 1 [0232.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f018a0 [0232.343] wcscpy (in: _Dest=0x3f018a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.343] wcscat (in: _Dest=0x3f018a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.343] wcscat (in: _Dest=0x3f018a0, _Source="J0387337.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" [0232.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b98 [0232.344] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1 [0232.344] wcscmp (_String1="J0387578.JPG", _String2=".") returned 1 [0232.345] wcscmp (_String1="J0387578.JPG", _String2="..") returned 1 [0232.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01928 [0232.345] wcscpy (in: _Dest=0x3f01928, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.345] wcscat (in: _Dest=0x3f01928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.345] wcscat (in: _Dest=0x3f01928, _Source="J0387578.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" [0232.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0232.346] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1 [0232.346] wcscmp (_String1="J0387591.JPG", _String2=".") returned 1 [0232.346] wcscmp (_String1="J0387591.JPG", _String2="..") returned 1 [0232.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f019b0 [0232.346] wcscpy (in: _Dest=0x3f019b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.346] wcscat (in: _Dest=0x3f019b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.346] wcscat (in: _Dest=0x3f019b0, _Source="J0387591.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" [0232.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f019b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0232.347] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1 [0232.347] wcscmp (_String1="J0387604.JPG", _String2=".") returned 1 [0232.347] wcscmp (_String1="J0387604.JPG", _String2="..") returned 1 [0232.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01a38 [0232.347] wcscpy (in: _Dest=0x3f01a38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.347] wcscat (in: _Dest=0x3f01a38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.347] wcscat (in: _Dest=0x3f01a38, _Source="J0387604.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" [0232.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0232.400] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1 [0232.400] wcscmp (_String1="J0387882.JPG", _String2=".") returned 1 [0232.400] wcscmp (_String1="J0387882.JPG", _String2="..") returned 1 [0232.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01ac0 [0232.400] wcscpy (in: _Dest=0x3f01ac0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.400] wcscat (in: _Dest=0x3f01ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.400] wcscat (in: _Dest=0x3f01ac0, _Source="J0387882.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" [0232.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0232.401] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1 [0232.401] wcscmp (_String1="J0387895.JPG", _String2=".") returned 1 [0232.401] wcscmp (_String1="J0387895.JPG", _String2="..") returned 1 [0232.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01b48 [0232.401] wcscpy (in: _Dest=0x3f01b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.402] wcscat (in: _Dest=0x3f01b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.402] wcscat (in: _Dest=0x3f01b48, _Source="J0387895.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" [0232.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b90 [0232.402] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed91300, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeed91300, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1 [0232.402] wcscmp (_String1="J0390072.JPG", _String2=".") returned 1 [0232.402] wcscmp (_String1="J0390072.JPG", _String2="..") returned 1 [0232.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01bd0 [0232.403] wcscpy (in: _Dest=0x3f01bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.403] wcscat (in: _Dest=0x3f01bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.403] wcscat (in: _Dest=0x3f01bd0, _Source="J0390072.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" [0232.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0232.404] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2a3f00, ftCreationTime.dwHighDateTime=0x1c98d34, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb2a3f00, ftLastWriteTime.dwHighDateTime=0x1c98d34, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1 [0232.404] wcscmp (_String1="J0400001.PNG", _String2=".") returned 1 [0232.404] wcscmp (_String1="J0400001.PNG", _String2="..") returned 1 [0232.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01c58 [0232.404] wcscpy (in: _Dest=0x3f01c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.404] wcscat (in: _Dest=0x3f01c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.404] wcscat (in: _Dest=0x3f01c58, _Source="J0400001.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" [0232.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0232.405] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f48d600, ftCreationTime.dwHighDateTime=0x1c98d36, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7f48d600, ftLastWriteTime.dwHighDateTime=0x1c98d36, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1 [0232.405] wcscmp (_String1="J0400002.PNG", _String2=".") returned 1 [0232.405] wcscmp (_String1="J0400002.PNG", _String2="..") returned 1 [0232.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01ce0 [0232.405] wcscpy (in: _Dest=0x3f01ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.405] wcscat (in: _Dest=0x3f01ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.405] wcscat (in: _Dest=0x3f01ce0, _Source="J0400002.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" [0232.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0232.406] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8814600, ftCreationTime.dwHighDateTime=0x1c98d36, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8814600, ftLastWriteTime.dwHighDateTime=0x1c98d36, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1 [0232.419] wcscmp (_String1="J0400003.PNG", _String2=".") returned 1 [0232.419] wcscmp (_String1="J0400003.PNG", _String2="..") returned 1 [0232.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01d68 [0232.419] wcscpy (in: _Dest=0x3f01d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.419] wcscat (in: _Dest=0x3f01d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.419] wcscat (in: _Dest=0x3f01d68, _Source="J0400003.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" [0232.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0232.420] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf279d00, ftCreationTime.dwHighDateTime=0x1c98d36, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf279d00, ftLastWriteTime.dwHighDateTime=0x1c98d36, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1 [0232.420] wcscmp (_String1="J0400004.PNG", _String2=".") returned 1 [0232.420] wcscmp (_String1="J0400004.PNG", _String2="..") returned 1 [0232.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01df0 [0232.420] wcscpy (in: _Dest=0x3f01df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.420] wcscat (in: _Dest=0x3f01df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.420] wcscat (in: _Dest=0x3f01df0, _Source="J0400004.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" [0232.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2974 [0232.421] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17df5600, ftCreationTime.dwHighDateTime=0x1c98d37, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17df5600, ftLastWriteTime.dwHighDateTime=0x1c98d37, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1 [0232.421] wcscmp (_String1="J0400005.PNG", _String2=".") returned 1 [0232.421] wcscmp (_String1="J0400005.PNG", _String2="..") returned 1 [0232.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01e78 [0232.421] wcscpy (in: _Dest=0x3f01e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.421] wcscat (in: _Dest=0x3f01e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.421] wcscat (in: _Dest=0x3f01e78, _Source="J0400005.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" [0232.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0232.422] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1 [0232.422] wcscmp (_String1="JAVA_01.MID", _String2=".") returned 1 [0232.422] wcscmp (_String1="JAVA_01.MID", _String2="..") returned 1 [0232.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f01f00 [0232.423] wcscpy (in: _Dest=0x3f01f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.423] wcscat (in: _Dest=0x3f01f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.423] wcscat (in: _Dest=0x3f01f00, _Source="JAVA_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" [0232.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0232.423] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1 [0232.423] wcscmp (_String1="JNGLE_01.MID", _String2=".") returned 1 [0232.423] wcscmp (_String1="JNGLE_01.MID", _String2="..") returned 1 [0232.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f01f88 [0232.424] wcscpy (in: _Dest=0x3f01f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.424] wcscat (in: _Dest=0x3f01f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.424] wcscat (in: _Dest=0x3f01f88, _Source="JNGLE_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" [0232.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f01f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0232.425] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bc06700, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x807f7d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bc06700, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1 [0232.425] wcscmp (_String1="MP00021_.WMF", _String2=".") returned 1 [0232.425] wcscmp (_String1="MP00021_.WMF", _String2="..") returned 1 [0232.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02010 [0232.425] wcscpy (in: _Dest=0x3f02010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.425] wcscat (in: _Dest=0x3f02010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.425] wcscat (in: _Dest=0x3f02010, _Source="MP00021_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" [0232.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d0 [0232.426] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaee1bd00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8081de70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaee1bd00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1 [0232.426] wcscmp (_String1="MP00132_.WMF", _String2=".") returned 1 [0232.426] wcscmp (_String1="MP00132_.WMF", _String2="..") returned 1 [0232.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02098 [0232.426] wcscpy (in: _Dest=0x3f02098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.426] wcscat (in: _Dest=0x3f02098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.426] wcscat (in: _Dest=0x3f02098, _Source="MP00132_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" [0232.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25cc [0232.427] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb04bdc00, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x8d3574b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb04bdc00, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1 [0232.427] wcscmp (_String1="MP00646_.WMF", _String2=".") returned 1 [0232.427] wcscmp (_String1="MP00646_.WMF", _String2="..") returned 1 [0232.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02120 [0232.427] wcscpy (in: _Dest=0x3f02120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.427] wcscat (in: _Dest=0x3f02120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.427] wcscat (in: _Dest=0x3f02120, _Source="MP00646_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" [0232.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a8 [0232.428] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1 [0232.428] wcscmp (_String1="MUSIC_01.MID", _String2=".") returned 1 [0232.428] wcscmp (_String1="MUSIC_01.MID", _String2="..") returned 1 [0232.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f021a8 [0232.428] wcscpy (in: _Dest=0x3f021a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.428] wcscat (in: _Dest=0x3f021a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.428] wcscat (in: _Dest=0x3f021a8, _Source="MUSIC_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" [0232.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f021a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d30 [0232.429] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a5a700, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25a5a700, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1 [0232.429] wcscmp (_String1="NA00042_.WMF", _String2=".") returned 1 [0232.429] wcscmp (_String1="NA00042_.WMF", _String2="..") returned 1 [0232.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02230 [0232.429] wcscpy (in: _Dest=0x3f02230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.430] wcscat (in: _Dest=0x3f02230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.430] wcscat (in: _Dest=0x3f02230, _Source="NA00042_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" [0232.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0232.431] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc07e9100, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc07e9100, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1 [0232.431] wcscmp (_String1="NA00057_.WMF", _String2=".") returned 1 [0232.431] wcscmp (_String1="NA00057_.WMF", _String2="..") returned 1 [0232.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f022b8 [0232.431] wcscpy (in: _Dest=0x3f022b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.431] wcscat (in: _Dest=0x3f022b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.431] wcscat (in: _Dest=0x3f022b8, _Source="NA00057_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" [0232.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f022b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0232.432] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f52900, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6f52900, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1 [0232.432] wcscmp (_String1="NA00058_.WMF", _String2=".") returned 1 [0232.432] wcscmp (_String1="NA00058_.WMF", _String2="..") returned 1 [0232.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02340 [0232.432] wcscpy (in: _Dest=0x3f02340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.432] wcscat (in: _Dest=0x3f02340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.432] wcscat (in: _Dest=0x3f02340, _Source="NA00058_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" [0232.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0232.433] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750fb700, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x750fb700, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1 [0232.433] wcscmp (_String1="NA00068_.WMF", _String2=".") returned 1 [0232.433] wcscmp (_String1="NA00068_.WMF", _String2="..") returned 1 [0232.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f023c8 [0232.434] wcscpy (in: _Dest=0x3f023c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.434] wcscat (in: _Dest=0x3f023c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.434] wcscat (in: _Dest=0x3f023c8, _Source="NA00068_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" [0232.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f023c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0232.435] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8d7d00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e8d7d00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1 [0232.435] wcscmp (_String1="NA00238_.WMF", _String2=".") returned 1 [0232.435] wcscmp (_String1="NA00238_.WMF", _String2="..") returned 1 [0232.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02450 [0232.435] wcscpy (in: _Dest=0x3f02450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.435] wcscat (in: _Dest=0x3f02450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.435] wcscat (in: _Dest=0x3f02450, _Source="NA00238_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" [0232.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0232.436] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5548b500, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5548b500, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1 [0232.436] wcscmp (_String1="NA00330_.WMF", _String2=".") returned 1 [0232.436] wcscmp (_String1="NA00330_.WMF", _String2="..") returned 1 [0232.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f024d8 [0232.436] wcscpy (in: _Dest=0x3f024d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.436] wcscat (in: _Dest=0x3f024d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.436] wcscat (in: _Dest=0x3f024d8, _Source="NA00330_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" [0232.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f024d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0232.438] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed43a000, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed43a000, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1 [0232.438] wcscmp (_String1="NA00388_.WMF", _String2=".") returned 1 [0232.438] wcscmp (_String1="NA00388_.WMF", _String2="..") returned 1 [0232.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02560 [0232.438] wcscpy (in: _Dest=0x3f02560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.438] wcscat (in: _Dest=0x3f02560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.438] wcscat (in: _Dest=0x3f02560, _Source="NA00388_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" [0232.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0232.439] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15ac800, ftCreationTime.dwHighDateTime=0x1bd4b4f, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf15ac800, ftLastWriteTime.dwHighDateTime=0x1bd4b4f, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1 [0232.439] wcscmp (_String1="NA00389_.WMF", _String2=".") returned 1 [0232.439] wcscmp (_String1="NA00389_.WMF", _String2="..") returned 1 [0232.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f025e8 [0232.439] wcscpy (in: _Dest=0x3f025e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.439] wcscat (in: _Dest=0x3f025e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.439] wcscat (in: _Dest=0x3f025e8, _Source="NA00389_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" [0232.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f025e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0232.440] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0299b00, ftCreationTime.dwHighDateTime=0x1bd4b4f, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0299b00, ftLastWriteTime.dwHighDateTime=0x1bd4b4f, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1 [0232.440] wcscmp (_String1="NA00390_.WMF", _String2=".") returned 1 [0232.440] wcscmp (_String1="NA00390_.WMF", _String2="..") returned 1 [0232.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02670 [0232.440] wcscpy (in: _Dest=0x3f02670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.440] wcscat (in: _Dest=0x3f02670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.440] wcscat (in: _Dest=0x3f02670, _Source="NA00390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" [0232.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0232.441] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734af100, ftCreationTime.dwHighDateTime=0x1bd4b50, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x734af100, ftLastWriteTime.dwHighDateTime=0x1bd4b50, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1 [0232.441] wcscmp (_String1="NA00391_.WMF", _String2=".") returned 1 [0232.441] wcscmp (_String1="NA00391_.WMF", _String2="..") returned 1 [0232.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f026f8 [0232.441] wcscpy (in: _Dest=0x3f026f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.441] wcscat (in: _Dest=0x3f026f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.441] wcscat (in: _Dest=0x3f026f8, _Source="NA00391_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" [0232.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f026f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0232.442] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1b0400, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba1b0400, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1 [0232.442] wcscmp (_String1="NA00394_.WMF", _String2=".") returned 1 [0232.442] wcscmp (_String1="NA00394_.WMF", _String2="..") returned 1 [0232.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02780 [0232.443] wcscpy (in: _Dest=0x3f02780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.443] wcscat (in: _Dest=0x3f02780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.443] wcscat (in: _Dest=0x3f02780, _Source="NA00394_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" [0232.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2658 [0232.443] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe157de00, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe157de00, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1 [0232.444] wcscmp (_String1="NA00395_.WMF", _String2=".") returned 1 [0232.444] wcscmp (_String1="NA00395_.WMF", _String2="..") returned 1 [0232.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02808 [0232.444] wcscpy (in: _Dest=0x3f02808, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.444] wcscat (in: _Dest=0x3f02808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.444] wcscat (in: _Dest=0x3f02808, _Source="NA00395_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" [0232.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0232.445] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe026b100, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe026b100, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1 [0232.445] wcscmp (_String1="NA00396_.WMF", _String2=".") returned 1 [0232.445] wcscmp (_String1="NA00396_.WMF", _String2="..") returned 1 [0232.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02890 [0232.445] wcscpy (in: _Dest=0x3f02890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.445] wcscat (in: _Dest=0x3f02890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.445] wcscat (in: _Dest=0x3f02890, _Source="NA00396_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" [0232.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0232.446] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cfe400, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8cfe400, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1 [0232.446] wcscmp (_String1="NA00417_.WMF", _String2=".") returned 1 [0232.446] wcscmp (_String1="NA00417_.WMF", _String2="..") returned 1 [0232.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02918 [0232.446] wcscpy (in: _Dest=0x3f02918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.446] wcscat (in: _Dest=0x3f02918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.446] wcscat (in: _Dest=0x3f02918, _Source="NA00417_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" [0232.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0232.447] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6707400, ftCreationTime.dwHighDateTime=0x1bd4b4f, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc6707400, ftLastWriteTime.dwHighDateTime=0x1bd4b4f, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1 [0232.447] wcscmp (_String1="NA00433_.WMF", _String2=".") returned 1 [0232.447] wcscmp (_String1="NA00433_.WMF", _String2="..") returned 1 [0232.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f029a0 [0232.447] wcscpy (in: _Dest=0x3f029a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.447] wcscat (in: _Dest=0x3f029a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.447] wcscat (in: _Dest=0x3f029a0, _Source="NA00433_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" [0232.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f029a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0232.483] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de8a00, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73de8a00, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1 [0232.483] wcscmp (_String1="NA00438_.WMF", _String2=".") returned 1 [0232.483] wcscmp (_String1="NA00438_.WMF", _String2="..") returned 1 [0232.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02a28 [0232.483] wcscpy (in: _Dest=0x3f02a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.483] wcscat (in: _Dest=0x3f02a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.483] wcscat (in: _Dest=0x3f02a28, _Source="NA00438_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" [0232.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0232.484] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb465f400, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb465f400, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x14bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00452_.WMF", cAlternateFileName="")) returned 1 [0232.484] wcscmp (_String1="NA00452_.WMF", _String2=".") returned 1 [0232.484] wcscmp (_String1="NA00452_.WMF", _String2="..") returned 1 [0232.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02ab0 [0232.484] wcscpy (in: _Dest=0x3f02ab0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.484] wcscat (in: _Dest=0x3f02ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.484] wcscat (in: _Dest=0x3f02ab0, _Source="NA00452_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" [0232.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0232.485] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2039a00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2039a00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00454_.WMF", cAlternateFileName="")) returned 1 [0232.485] wcscmp (_String1="NA00454_.WMF", _String2=".") returned 1 [0232.485] wcscmp (_String1="NA00454_.WMF", _String2="..") returned 1 [0232.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02b38 [0232.486] wcscpy (in: _Dest=0x3f02b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.486] wcscat (in: _Dest=0x3f02b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.486] wcscat (in: _Dest=0x3f02b38, _Source="NA00454_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" [0232.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e8 [0232.487] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc25c00, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8cc25c00, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00458_.WMF", cAlternateFileName="")) returned 1 [0232.487] wcscmp (_String1="NA00458_.WMF", _String2=".") returned 1 [0232.487] wcscmp (_String1="NA00458_.WMF", _String2="..") returned 1 [0232.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02bc0 [0232.487] wcscpy (in: _Dest=0x3f02bc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.487] wcscat (in: _Dest=0x3f02bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.487] wcscat (in: _Dest=0x3f02bc0, _Source="NA00458_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" [0232.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0232.488] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d431300, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d431300, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00462_.WMF", cAlternateFileName="")) returned 1 [0232.488] wcscmp (_String1="NA00462_.WMF", _String2=".") returned 1 [0232.488] wcscmp (_String1="NA00462_.WMF", _String2="..") returned 1 [0232.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02c48 [0232.488] wcscpy (in: _Dest=0x3f02c48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.488] wcscat (in: _Dest=0x3f02c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.488] wcscat (in: _Dest=0x3f02c48, _Source="NA00462_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" [0232.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0232.489] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a83300, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95a83300, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00487_.WMF", cAlternateFileName="")) returned 1 [0232.489] wcscmp (_String1="NA00487_.WMF", _String2=".") returned 1 [0232.489] wcscmp (_String1="NA00487_.WMF", _String2="..") returned 1 [0232.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02cd0 [0232.490] wcscpy (in: _Dest=0x3f02cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.490] wcscat (in: _Dest=0x3f02cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.490] wcscat (in: _Dest=0x3f02cd0, _Source="NA00487_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" [0232.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0232.491] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a8f3a00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a8f3a00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00494_.WMF", cAlternateFileName="")) returned 1 [0232.491] wcscmp (_String1="NA00494_.WMF", _String2=".") returned 1 [0232.491] wcscmp (_String1="NA00494_.WMF", _String2="..") returned 1 [0232.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02d58 [0232.491] wcscpy (in: _Dest=0x3f02d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.491] wcscat (in: _Dest=0x3f02d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.491] wcscat (in: _Dest=0x3f02d58, _Source="NA00494_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" [0232.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0232.492] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1281f00, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1281f00, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00512_.WMF", cAlternateFileName="")) returned 1 [0232.492] wcscmp (_String1="NA00512_.WMF", _String2=".") returned 1 [0232.492] wcscmp (_String1="NA00512_.WMF", _String2="..") returned 1 [0232.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02de0 [0232.492] wcscpy (in: _Dest=0x3f02de0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.492] wcscat (in: _Dest=0x3f02de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.492] wcscat (in: _Dest=0x3f02de0, _Source="NA00512_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" [0232.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0232.493] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d00c00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61d00c00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x6efa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00523_.WMF", cAlternateFileName="")) returned 1 [0232.493] wcscmp (_String1="NA00523_.WMF", _String2=".") returned 1 [0232.494] wcscmp (_String1="NA00523_.WMF", _String2="..") returned 1 [0232.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02e68 [0232.494] wcscpy (in: _Dest=0x3f02e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.494] wcscat (in: _Dest=0x3f02e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.494] wcscat (in: _Dest=0x3f02e68, _Source="NA00523_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" [0232.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0232.495] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bda2b00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5bda2b00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00525_.WMF", cAlternateFileName="")) returned 1 [0232.495] wcscmp (_String1="NA00525_.WMF", _String2=".") returned 1 [0232.495] wcscmp (_String1="NA00525_.WMF", _String2="..") returned 1 [0232.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02ef0 [0232.495] wcscpy (in: _Dest=0x3f02ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.495] wcscat (in: _Dest=0x3f02ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.495] wcscat (in: _Dest=0x3f02ef0, _Source="NA00525_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" [0232.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0232.496] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb312a00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcb312a00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x477c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00530_.WMF", cAlternateFileName="")) returned 1 [0232.930] wcscmp (_String1="NA00530_.WMF", _String2=".") returned 1 [0232.930] wcscmp (_String1="NA00530_.WMF", _String2="..") returned 1 [0232.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f02f78 [0232.930] wcscpy (in: _Dest=0x3f02f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.930] wcscat (in: _Dest=0x3f02f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.930] wcscat (in: _Dest=0x3f02f78, _Source="NA00530_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" [0232.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f02f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0232.931] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00532_.WMF", cAlternateFileName="")) returned 1 [0232.931] wcscmp (_String1="NA00532_.WMF", _String2=".") returned 1 [0232.931] wcscmp (_String1="NA00532_.WMF", _String2="..") returned 1 [0232.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f03000 [0232.932] wcscpy (in: _Dest=0x3f03000, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.932] wcscat (in: _Dest=0x3f03000, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.932] wcscat (in: _Dest=0x3f03000, _Source="NA00532_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" [0232.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f03000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0232.933] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fffd00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9fffd00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x7d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00538_.WMF", cAlternateFileName="")) returned 1 [0232.933] wcscmp (_String1="NA00538_.WMF", _String2=".") returned 1 [0232.933] wcscmp (_String1="NA00538_.WMF", _String2="..") returned 1 [0232.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f03088 [0232.933] wcscpy (in: _Dest=0x3f03088, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.933] wcscat (in: _Dest=0x3f03088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.933] wcscat (in: _Dest=0x3f03088, _Source="NA00538_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" [0232.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f03088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0232.934] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cbe600, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8cbe600, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00641_.WMF", cAlternateFileName="")) returned 1 [0232.934] wcscmp (_String1="NA00641_.WMF", _String2=".") returned 1 [0232.934] wcscmp (_String1="NA00641_.WMF", _String2="..") returned 1 [0232.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f03110 [0232.934] wcscpy (in: _Dest=0x3f03110, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.934] wcscat (in: _Dest=0x3f03110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.934] wcscat (in: _Dest=0x3f03110, _Source="NA00641_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" [0232.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f03110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0232.935] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7658, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00784_.WMF", cAlternateFileName="")) returned 1 [0232.935] wcscmp (_String1="NA00784_.WMF", _String2=".") returned 1 [0232.935] wcscmp (_String1="NA00784_.WMF", _String2="..") returned 1 [0232.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f03198 [0232.935] wcscpy (in: _Dest=0x3f03198, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.935] wcscat (in: _Dest=0x3f03198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.935] wcscat (in: _Dest=0x3f03198, _Source="NA00784_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" [0232.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f03198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0232.936] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8561500, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8561500, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x23f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00798_.WMF", cAlternateFileName="")) returned 1 [0232.936] wcscmp (_String1="NA00798_.WMF", _String2=".") returned 1 [0232.936] wcscmp (_String1="NA00798_.WMF", _String2="..") returned 1 [0232.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f03220 [0232.936] wcscpy (in: _Dest=0x3f03220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.936] wcscat (in: _Dest=0x3f03220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.937] wcscat (in: _Dest=0x3f03220, _Source="NA00798_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" [0232.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f03220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0232.938] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f5d000, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81f5d000, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00806_.WMF", cAlternateFileName="")) returned 1 [0232.938] wcscmp (_String1="NA00806_.WMF", _String2=".") returned 1 [0232.938] wcscmp (_String1="NA00806_.WMF", _String2="..") returned 1 [0232.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f032a8 [0232.938] wcscpy (in: _Dest=0x3f032a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.938] wcscat (in: _Dest=0x3f032a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.938] wcscat (in: _Dest=0x3f032a8, _Source="NA00806_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" [0232.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f032a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0232.940] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c4a300, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c4a300, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0xba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00807_.WMF", cAlternateFileName="")) returned 1 [0232.940] wcscmp (_String1="NA00807_.WMF", _String2=".") returned 1 [0232.940] wcscmp (_String1="NA00807_.WMF", _String2="..") returned 1 [0232.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bede8 [0232.940] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.940] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.940] wcscat (in: _Dest=0x81bede8, _Source="NA00807_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" [0232.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0232.941] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1102e800, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1102e800, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00808_.WMF", cAlternateFileName="")) returned 1 [0232.941] wcscmp (_String1="NA00808_.WMF", _String2=".") returned 1 [0232.941] wcscmp (_String1="NA00808_.WMF", _String2="..") returned 1 [0232.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be810 [0232.941] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.941] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.941] wcscat (in: _Dest=0x81be810, _Source="NA00808_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" [0232.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cbc [0232.942] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e624900, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e624900, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00809_.WMF", cAlternateFileName="")) returned 1 [0232.942] wcscmp (_String1="NA00809_.WMF", _String2=".") returned 1 [0232.942] wcscmp (_String1="NA00809_.WMF", _String2="..") returned 1 [0232.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be9a8 [0232.942] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.942] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.942] wcscat (in: _Dest=0x81be9a8, _Source="NA00809_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" [0232.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0232.943] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00810_.WMF", cAlternateFileName="")) returned 1 [0232.943] wcscmp (_String1="NA00810_.WMF", _String2=".") returned 1 [0232.943] wcscmp (_String1="NA00810_.WMF", _String2="..") returned 1 [0232.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfcc8 [0232.943] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.943] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.943] wcscat (in: _Dest=0x81bfcc8, _Source="NA00810_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" [0232.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c88 [0232.944] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3210, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00932_.WMF", cAlternateFileName="")) returned 1 [0232.944] wcscmp (_String1="NA00932_.WMF", _String2=".") returned 1 [0232.944] wcscmp (_String1="NA00932_.WMF", _String2="..") returned 1 [0232.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf448 [0232.944] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.945] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.945] wcscat (in: _Dest=0x81bf448, _Source="NA00932_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" [0232.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0232.945] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de0d600, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4de0d600, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x7c46, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01064_.WMF", cAlternateFileName="")) returned 1 [0232.945] wcscmp (_String1="NA01064_.WMF", _String2=".") returned 1 [0232.946] wcscmp (_String1="NA01064_.WMF", _String2="..") returned 1 [0232.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c03b0 [0232.946] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.946] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.946] wcscat (in: _Dest=0x81c03b0, _Source="NA01064_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" [0232.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0232.947] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6af6f00, ftCreationTime.dwHighDateTime=0x1bd4b94, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6af6f00, ftLastWriteTime.dwHighDateTime=0x1bd4b94, nFileSizeHigh=0x0, nFileSizeLow=0x54a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01066_.WMF", cAlternateFileName="")) returned 1 [0232.947] wcscmp (_String1="NA01066_.WMF", _String2=".") returned 1 [0232.947] wcscmp (_String1="NA01066_.WMF", _String2="..") returned 1 [0232.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be920 [0232.947] wcscpy (in: _Dest=0x81be920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.947] wcscat (in: _Dest=0x81be920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.947] wcscat (in: _Dest=0x81be920, _Source="NA01066_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" [0232.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0232.948] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460a3d00, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460a3d00, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01069_.WMF", cAlternateFileName="")) returned 1 [0232.948] wcscmp (_String1="NA01069_.WMF", _String2=".") returned 1 [0232.948] wcscmp (_String1="NA01069_.WMF", _String2="..") returned 1 [0232.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfb30 [0232.948] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.948] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.948] wcscat (in: _Dest=0x81bfb30, _Source="NA01069_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" [0232.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0232.949] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ec000, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa34ec000, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01123_.WMF", cAlternateFileName="")) returned 1 [0232.949] wcscmp (_String1="NA01123_.WMF", _String2=".") returned 1 [0232.949] wcscmp (_String1="NA01123_.WMF", _String2="..") returned 1 [0232.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfa20 [0232.949] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.949] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.949] wcscat (in: _Dest=0x81bfa20, _Source="NA01123_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" [0232.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0232.950] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77721100, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77721100, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01126_.WMF", cAlternateFileName="")) returned 1 [0232.950] wcscmp (_String1="NA01126_.WMF", _String2=".") returned 1 [0232.950] wcscmp (_String1="NA01126_.WMF", _String2="..") returned 1 [0232.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0232.951] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.951] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.951] wcscat (in: _Dest=0x81bf1a0, _Source="NA01126_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" [0232.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0232.952] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295e0d00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x295e0d00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x16a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01130_.WMF", cAlternateFileName="")) returned 1 [0232.952] wcscmp (_String1="NA01130_.WMF", _String2=".") returned 1 [0232.952] wcscmp (_String1="NA01130_.WMF", _String2="..") returned 1 [0232.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfdd8 [0232.952] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.952] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.952] wcscat (in: _Dest=0x81bfdd8, _Source="NA01130_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" [0232.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ccc [0232.953] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9762fe00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9762fe00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x16d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01141_.WMF", cAlternateFileName="")) returned 1 [0232.953] wcscmp (_String1="NA01141_.WMF", _String2=".") returned 1 [0232.953] wcscmp (_String1="NA01141_.WMF", _String2="..") returned 1 [0232.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf008 [0232.953] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.953] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.953] wcscat (in: _Dest=0x81bf008, _Source="NA01141_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" [0232.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0232.954] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d1d00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x916d1d00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01148_.WMF", cAlternateFileName="")) returned 1 [0232.954] wcscmp (_String1="NA01148_.WMF", _String2=".") returned 1 [0232.954] wcscmp (_String1="NA01148_.WMF", _String2="..") returned 1 [0232.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf090 [0232.954] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.954] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.954] wcscat (in: _Dest=0x81bf090, _Source="NA01148_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" [0232.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0232.955] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1248, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01149_.WMF", cAlternateFileName="")) returned 1 [0232.955] wcscmp (_String1="NA01149_.WMF", _String2=".") returned 1 [0232.956] wcscmp (_String1="NA01149_.WMF", _String2="..") returned 1 [0232.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfd50 [0232.956] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.956] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.956] wcscat (in: _Dest=0x81bfd50, _Source="NA01149_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" [0232.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2990 [0232.957] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca86900, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ca86900, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x2230, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01152_.WMF", cAlternateFileName="")) returned 1 [0232.957] wcscmp (_String1="NA01152_.WMF", _String2=".") returned 1 [0232.957] wcscmp (_String1="NA01152_.WMF", _String2="..") returned 1 [0232.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81becd8 [0232.957] wcscpy (in: _Dest=0x81becd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.957] wcscat (in: _Dest=0x81becd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.957] wcscat (in: _Dest=0x81becd8, _Source="NA01152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" [0232.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81becd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc8 [0232.958] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b773c00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8b773c00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01154_.WMF", cAlternateFileName="")) returned 1 [0232.958] wcscmp (_String1="NA01154_.WMF", _String2=".") returned 1 [0232.958] wcscmp (_String1="NA01154_.WMF", _String2="..") returned 1 [0232.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf118 [0232.958] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.958] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.958] wcscat (in: _Dest=0x81bf118, _Source="NA01154_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" [0232.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b0 [0232.959] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1858, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01157_.WMF", cAlternateFileName="")) returned 1 [0232.959] wcscmp (_String1="NA01157_.WMF", _String2=".") returned 1 [0232.959] wcscmp (_String1="NA01157_.WMF", _String2="..") returned 1 [0232.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf228 [0232.959] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.959] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.959] wcscat (in: _Dest=0x81bf228, _Source="NA01157_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" [0232.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0232.960] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85815b00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85815b00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x1c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01158_.WMF", cAlternateFileName="")) returned 1 [0232.960] wcscmp (_String1="NA01158_.WMF", _String2=".") returned 1 [0232.960] wcscmp (_String1="NA01158_.WMF", _String2="..") returned 1 [0232.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0232.960] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.960] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.960] wcscat (in: _Dest=0x81bee70, _Source="NA01158_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" [0232.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0232.961] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01161_.WMF", cAlternateFileName="")) returned 1 [0232.961] wcscmp (_String1="NA01161_.WMF", _String2=".") returned 1 [0232.961] wcscmp (_String1="NA01161_.WMF", _String2="..") returned 1 [0232.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bff70 [0232.961] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.961] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.961] wcscat (in: _Dest=0x81bff70, _Source="NA01161_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" [0232.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0232.962] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282ce000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x282ce000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01164_.WMF", cAlternateFileName="")) returned 1 [0232.962] wcscmp (_String1="NA01164_.WMF", _String2=".") returned 1 [0232.963] wcscmp (_String1="NA01164_.WMF", _String2="..") returned 1 [0232.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0232.963] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.963] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.963] wcscat (in: _Dest=0x81be458, _Source="NA01164_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" [0232.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2554 [0232.964] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fbb300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26fbb300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x70f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01293_.WMF", cAlternateFileName="")) returned 1 [0232.964] wcscmp (_String1="NA01293_.WMF", _String2=".") returned 1 [0232.964] wcscmp (_String1="NA01293_.WMF", _String2="..") returned 1 [0232.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf998 [0232.964] wcscpy (in: _Dest=0x81bf998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.964] wcscat (in: _Dest=0x81bf998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.964] wcscat (in: _Dest=0x81bf998, _Source="NA01293_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" [0232.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298c [0232.965] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d3e600, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67d3e600, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x16ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01354_.WMF", cAlternateFileName="")) returned 1 [0232.965] wcscmp (_String1="NA01354_.WMF", _String2=".") returned 1 [0232.965] wcscmp (_String1="NA01354_.WMF", _String2="..") returned 1 [0232.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bed60 [0232.965] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.965] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.965] wcscat (in: _Dest=0x81bed60, _Source="NA01354_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" [0232.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2984 [0233.004] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64405f00, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64405f00, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01356_.WMF", cAlternateFileName="")) returned 1 [0233.004] wcscmp (_String1="NA01356_.WMF", _String2=".") returned 1 [0233.004] wcscmp (_String1="NA01356_.WMF", _String2="..") returned 1 [0233.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0233.004] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.004] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.004] wcscat (in: _Dest=0x81bebc8, _Source="NA01356_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" [0233.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bec [0233.005] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630f3200, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x630f3200, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01357_.WMF", cAlternateFileName="")) returned 1 [0233.005] wcscmp (_String1="NA01357_.WMF", _String2=".") returned 1 [0233.005] wcscmp (_String1="NA01357_.WMF", _String2="..") returned 1 [0233.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beef8 [0233.006] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.006] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.006] wcscat (in: _Dest=0x81beef8, _Source="NA01357_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" [0233.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0233.007] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61de0500, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61de0500, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01358_.WMF", cAlternateFileName="")) returned 1 [0233.007] wcscmp (_String1="NA01358_.WMF", _String2=".") returned 1 [0233.007] wcscmp (_String1="NA01358_.WMF", _String2="..") returned 1 [0233.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beb40 [0233.007] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.007] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.007] wcscat (in: _Dest=0x81beb40, _Source="NA01358_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" [0233.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0233.008] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be82400, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5be82400, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01361_.WMF", cAlternateFileName="")) returned 1 [0233.008] wcscmp (_String1="NA01361_.WMF", _String2=".") returned 1 [0233.008] wcscmp (_String1="NA01361_.WMF", _String2="..") returned 1 [0233.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0218 [0233.009] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.009] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.009] wcscat (in: _Dest=0x81c0218, _Source="NA01361_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" [0233.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac4 [0233.010] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538fe900, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x538fe900, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x40412, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01368_.WMF", cAlternateFileName="")) returned 1 [0233.010] wcscmp (_String1="NA01368_.WMF", _String2=".") returned 1 [0233.010] wcscmp (_String1="NA01368_.WMF", _String2="..") returned 1 [0233.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf800 [0233.010] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.010] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.010] wcscat (in: _Dest=0x81bf800, _Source="NA01368_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" [0233.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2acc [0233.011] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b88a600, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b88a600, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01421_.WMF", cAlternateFileName="")) returned 1 [0233.034] wcscmp (_String1="NA01421_.WMF", _String2=".") returned 1 [0233.034] wcscmp (_String1="NA01421_.WMF", _String2="..") returned 1 [0233.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b6f0 [0233.034] wcscpy (in: _Dest=0x819b6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.034] wcscat (in: _Dest=0x819b6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.034] wcscat (in: _Dest=0x819b6f0, _Source="NA01421_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" [0233.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0233.035] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20783600, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20783600, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01468_.WMF", cAlternateFileName="")) returned 1 [0233.035] wcscmp (_String1="NA01468_.WMF", _String2=".") returned 1 [0233.035] wcscmp (_String1="NA01468_.WMF", _String2="..") returned 1 [0233.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be5f0 [0233.035] wcscpy (in: _Dest=0x81be5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.035] wcscat (in: _Dest=0x81be5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.035] wcscat (in: _Dest=0x81be5f0, _Source="NA01468_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" [0233.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0233.036] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce4af00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ce4af00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01470_.WMF", cAlternateFileName="")) returned 1 [0233.036] wcscmp (_String1="NA01470_.WMF", _String2=".") returned 1 [0233.037] wcscmp (_String1="NA01470_.WMF", _String2="..") returned 1 [0233.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfbb8 [0233.037] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.037] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.037] wcscat (in: _Dest=0x81bfbb8, _Source="NA01470_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" [0233.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0233.038] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19512800, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x19512800, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x2028, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01472_.WMF", cAlternateFileName="")) returned 1 [0233.038] wcscmp (_String1="NA01472_.WMF", _String2=".") returned 1 [0233.038] wcscmp (_String1="NA01472_.WMF", _String2="..") returned 1 [0233.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfaa8 [0233.038] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.038] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.038] wcscat (in: _Dest=0x81bfaa8, _Source="NA01472_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" [0233.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0233.039] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181ffb00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x181ffb00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01473_.WMF", cAlternateFileName="")) returned 1 [0233.039] wcscmp (_String1="NA01473_.WMF", _String2=".") returned 1 [0233.039] wcscmp (_String1="NA01473_.WMF", _String2="..") returned 1 [0233.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf4d0 [0233.039] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.039] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.039] wcscat (in: _Dest=0x81bf4d0, _Source="NA01473_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" [0233.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0233.040] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb492cf00, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb492cf00, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x349c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01474_.WMF", cAlternateFileName="")) returned 1 [0233.040] wcscmp (_String1="NA01474_.WMF", _String2=".") returned 1 [0233.040] wcscmp (_String1="NA01474_.WMF", _String2="..") returned 1 [0233.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beab8 [0233.040] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.040] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.040] wcscat (in: _Dest=0x81beab8, _Source="NA01474_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" [0233.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab8 [0233.041] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ec5a00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0ec5a00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0xce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01627_.WMF", cAlternateFileName="")) returned 1 [0233.041] wcscmp (_String1="NA01627_.WMF", _String2=".") returned 1 [0233.041] wcscmp (_String1="NA01627_.WMF", _String2="..") returned 1 [0233.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf558 [0233.041] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.041] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.041] wcscat (in: _Dest=0x81bf558, _Source="NA01627_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" [0233.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a8 [0233.042] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2436b600, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2436b600, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0xb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01680_.WMF", cAlternateFileName="")) returned 1 [0233.042] wcscmp (_String1="NA01680_.WMF", _String2=".") returned 1 [0233.042] wcscmp (_String1="NA01680_.WMF", _String2="..") returned 1 [0233.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf910 [0233.042] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.042] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.042] wcscat (in: _Dest=0x81bf910, _Source="NA01680_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" [0233.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0233.043] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a32f00, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20a32f00, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0xc88, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01682_.WMF", cAlternateFileName="")) returned 1 [0233.043] wcscmp (_String1="NA01682_.WMF", _String2=".") returned 1 [0233.043] wcscmp (_String1="NA01682_.WMF", _String2="..") returned 1 [0233.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf338 [0233.044] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.044] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.044] wcscat (in: _Dest=0x81bf338, _Source="NA01682_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" [0233.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0233.045] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb0f2900, ftCreationTime.dwHighDateTime=0x1bd4c3e, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb0f2900, ftLastWriteTime.dwHighDateTime=0x1bd4c3e, nFileSizeHigh=0x0, nFileSizeLow=0x14c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01701_.WMF", cAlternateFileName="")) returned 1 [0233.045] wcscmp (_String1="NA01701_.WMF", _String2=".") returned 1 [0233.045] wcscmp (_String1="NA01701_.WMF", _String2="..") returned 1 [0233.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be898 [0233.045] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.045] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.045] wcscat (in: _Dest=0x81be898, _Source="NA01701_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" [0233.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0233.046] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01848_.WMF", cAlternateFileName="")) returned 1 [0233.046] wcscmp (_String1="NA01848_.WMF", _String2=".") returned 1 [0233.046] wcscmp (_String1="NA01848_.WMF", _String2="..") returned 1 [0233.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfe60 [0233.046] wcscpy (in: _Dest=0x81bfe60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.046] wcscat (in: _Dest=0x81bfe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.046] wcscat (in: _Dest=0x81bfe60, _Source="NA01848_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" [0233.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0233.047] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01849_.WMF", cAlternateFileName="")) returned 1 [0233.047] wcscmp (_String1="NA01849_.WMF", _String2=".") returned 1 [0233.047] wcscmp (_String1="NA01849_.WMF", _String2="..") returned 1 [0233.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0080 [0233.047] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.047] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.047] wcscat (in: _Dest=0x81c0080, _Source="NA01849_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" [0233.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0233.048] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf398b00, ftCreationTime.dwHighDateTime=0x1bd4c61, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf398b00, ftLastWriteTime.dwHighDateTime=0x1bd4c61, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01852_.WMF", cAlternateFileName="")) returned 1 [0233.048] wcscmp (_String1="NA01852_.WMF", _String2=".") returned 1 [0233.048] wcscmp (_String1="NA01852_.WMF", _String2="..") returned 1 [0233.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfff8 [0233.049] wcscpy (in: _Dest=0x81bfff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.049] wcscat (in: _Dest=0x81bfff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.049] wcscat (in: _Dest=0x81bfff8, _Source="NA01852_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" [0233.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0233.050] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01858_.WMF", cAlternateFileName="")) returned 1 [0233.050] wcscmp (_String1="NA01858_.WMF", _String2=".") returned 1 [0233.050] wcscmp (_String1="NA01858_.WMF", _String2="..") returned 1 [0233.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0328 [0233.050] wcscpy (in: _Dest=0x81c0328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.050] wcscat (in: _Dest=0x81c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.050] wcscat (in: _Dest=0x81c0328, _Source="NA01858_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" [0233.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0233.051] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f8a8300, ftCreationTime.dwHighDateTime=0x1bd4c61, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f8a8300, ftLastWriteTime.dwHighDateTime=0x1bd4c61, nFileSizeHigh=0x0, nFileSizeLow=0xdb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01866_.WMF", cAlternateFileName="")) returned 1 [0233.051] wcscmp (_String1="NA01866_.WMF", _String2=".") returned 1 [0233.051] wcscmp (_String1="NA01866_.WMF", _String2="..") returned 1 [0233.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053a78 [0233.051] wcscpy (in: _Dest=0x8053a78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.051] wcscat (in: _Dest=0x8053a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.051] wcscat (in: _Dest=0x8053a78, _Source="NA01866_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" [0233.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0233.053] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02009_.WMF", cAlternateFileName="")) returned 1 [0233.053] wcscmp (_String1="NA02009_.WMF", _String2=".") returned 1 [0233.053] wcscmp (_String1="NA02009_.WMF", _String2="..") returned 1 [0233.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80540d8 [0233.053] wcscpy (in: _Dest=0x80540d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.053] wcscat (in: _Dest=0x80540d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.053] wcscat (in: _Dest=0x80540d8, _Source="NA02009_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" [0233.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80540d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0233.054] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf742cd00, ftCreationTime.dwHighDateTime=0x1bd4c65, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf742cd00, ftLastWriteTime.dwHighDateTime=0x1bd4c65, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02041_.WMF", cAlternateFileName="")) returned 1 [0233.054] wcscmp (_String1="NA02041_.WMF", _String2=".") returned 1 [0233.054] wcscmp (_String1="NA02041_.WMF", _String2="..") returned 1 [0233.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053390 [0233.054] wcscpy (in: _Dest=0x8053390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.054] wcscat (in: _Dest=0x8053390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.054] wcscat (in: _Dest=0x8053390, _Source="NA02041_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" [0233.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0233.056] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d624100, ftCreationTime.dwHighDateTime=0x1bd4c63, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d624100, ftLastWriteTime.dwHighDateTime=0x1bd4c63, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02066_.WMF", cAlternateFileName="")) returned 1 [0233.056] wcscmp (_String1="NA02066_.WMF", _String2=".") returned 1 [0233.056] wcscmp (_String1="NA02066_.WMF", _String2="..") returned 1 [0233.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053968 [0233.056] wcscpy (in: _Dest=0x8053968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.056] wcscat (in: _Dest=0x8053968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.056] wcscat (in: _Dest=0x8053968, _Source="NA02066_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" [0233.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0233.057] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca87b900, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca87b900, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02091_.WMF", cAlternateFileName="")) returned 1 [0233.057] wcscmp (_String1="NA02091_.WMF", _String2=".") returned 1 [0233.057] wcscmp (_String1="NA02091_.WMF", _String2="..") returned 1 [0233.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053d20 [0233.057] wcscpy (in: _Dest=0x8053d20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.057] wcscat (in: _Dest=0x8053d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.057] wcscat (in: _Dest=0x8053d20, _Source="NA02091_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" [0233.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0233.058] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce1b4000, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce1b4000, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02092_.WMF", cAlternateFileName="")) returned 1 [0233.058] wcscmp (_String1="NA02092_.WMF", _String2=".") returned 1 [0233.058] wcscmp (_String1="NA02092_.WMF", _String2="..") returned 1 [0233.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054628 [0233.058] wcscpy (in: _Dest=0x8054628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.059] wcscat (in: _Dest=0x8054628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.059] wcscat (in: _Dest=0x8054628, _Source="NA02092_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" [0233.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0233.060] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c30500, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5c30500, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02093_.WMF", cAlternateFileName="")) returned 1 [0233.060] wcscmp (_String1="NA02093_.WMF", _String2=".") returned 1 [0233.060] wcscmp (_String1="NA02093_.WMF", _String2="..") returned 1 [0233.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80538e0 [0233.060] wcscpy (in: _Dest=0x80538e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.060] wcscat (in: _Dest=0x80538e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.060] wcscat (in: _Dest=0x80538e0, _Source="NA02093_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" [0233.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80538e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0233.142] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe99f800, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe99f800, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02124_.WMF", cAlternateFileName="")) returned 1 [0233.142] wcscmp (_String1="NA02124_.WMF", _String2=".") returned 1 [0233.142] wcscmp (_String1="NA02124_.WMF", _String2="..") returned 1 [0233.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f312e8 [0233.142] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.142] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.142] wcscat (in: _Dest=0x3f312e8, _Source="NA02124_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" [0233.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0233.143] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62d9800, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe62d9800, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x4816, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02125_.WMF", cAlternateFileName="")) returned 1 [0233.143] wcscmp (_String1="NA02125_.WMF", _String2=".") returned 1 [0233.144] wcscmp (_String1="NA02125_.WMF", _String2="..") returned 1 [0233.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc10 [0233.144] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.144] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.144] wcscat (in: _Dest=0x3f2fc10, _Source="NA02125_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" [0233.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0233.145] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16d0fa00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16d0fa00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x7c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02126_.WMF", cAlternateFileName="")) returned 1 [0233.145] wcscmp (_String1="NA02126_.WMF", _String2=".") returned 1 [0233.145] wcscmp (_String1="NA02126_.WMF", _String2="..") returned 1 [0233.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0233.145] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.145] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.145] wcscat (in: _Dest=0x3f2f528, _Source="NA02126_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" [0233.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0233.146] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e6a3900, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9e6a3900, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0xfe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02127_.WMF", cAlternateFileName="")) returned 1 [0233.146] wcscmp (_String1="NA02127_.WMF", _String2=".") returned 1 [0233.146] wcscmp (_String1="NA02127_.WMF", _String2="..") returned 1 [0233.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e7d0 [0233.146] wcscpy (in: _Dest=0x803e7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.146] wcscat (in: _Dest=0x803e7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.146] wcscat (in: _Dest=0x803e7d0, _Source="NA02127_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" [0233.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0233.147] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02262_.WMF", cAlternateFileName="")) returned 1 [0233.147] wcscmp (_String1="NA02262_.WMF", _String2=".") returned 1 [0233.147] wcscmp (_String1="NA02262_.WMF", _String2="..") returned 1 [0233.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e858 [0233.147] wcscpy (in: _Dest=0x803e858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.148] wcscat (in: _Dest=0x803e858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.148] wcscat (in: _Dest=0x803e858, _Source="NA02262_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" [0233.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0233.149] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02264_.WMF", cAlternateFileName="")) returned 1 [0233.149] wcscmp (_String1="NA02264_.WMF", _String2=".") returned 1 [0233.149] wcscmp (_String1="NA02264_.WMF", _String2="..") returned 1 [0233.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e8e0 [0233.149] wcscpy (in: _Dest=0x803e8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.149] wcscat (in: _Dest=0x803e8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.149] wcscat (in: _Dest=0x803e8e0, _Source="NA02264_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" [0233.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0233.164] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02356_.WMF", cAlternateFileName="")) returned 1 [0233.164] wcscmp (_String1="NA02356_.WMF", _String2=".") returned 1 [0233.164] wcscmp (_String1="NA02356_.WMF", _String2="..") returned 1 [0233.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e968 [0233.164] wcscpy (in: _Dest=0x803e968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.164] wcscat (in: _Dest=0x803e968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.164] wcscat (in: _Dest=0x803e968, _Source="NA02356_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" [0233.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0233.166] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02361_.WMF", cAlternateFileName="")) returned 1 [0233.166] wcscmp (_String1="NA02361_.WMF", _String2=".") returned 1 [0233.166] wcscmp (_String1="NA02361_.WMF", _String2="..") returned 1 [0233.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e9f0 [0233.167] wcscpy (in: _Dest=0x803e9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.167] wcscat (in: _Dest=0x803e9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.167] wcscat (in: _Dest=0x803e9f0, _Source="NA02361_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" [0233.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0233.168] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02368_.WMF", cAlternateFileName="")) returned 1 [0233.168] wcscmp (_String1="NA02368_.WMF", _String2=".") returned 1 [0233.168] wcscmp (_String1="NA02368_.WMF", _String2="..") returned 1 [0233.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ea78 [0233.169] wcscpy (in: _Dest=0x803ea78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.169] wcscat (in: _Dest=0x803ea78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.169] wcscat (in: _Dest=0x803ea78, _Source="NA02368_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" [0233.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ea78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0233.170] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02371_.WMF", cAlternateFileName="")) returned 1 [0233.170] wcscmp (_String1="NA02371_.WMF", _String2=".") returned 1 [0233.170] wcscmp (_String1="NA02371_.WMF", _String2="..") returned 1 [0233.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803eb00 [0233.170] wcscpy (in: _Dest=0x803eb00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.170] wcscat (in: _Dest=0x803eb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.170] wcscat (in: _Dest=0x803eb00, _Source="NA02371_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" [0233.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803eb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f0 [0233.171] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02373_.WMF", cAlternateFileName="")) returned 1 [0233.171] wcscmp (_String1="NA02373_.WMF", _String2=".") returned 1 [0233.172] wcscmp (_String1="NA02373_.WMF", _String2="..") returned 1 [0233.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803eb88 [0233.172] wcscpy (in: _Dest=0x803eb88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.172] wcscat (in: _Dest=0x803eb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.172] wcscat (in: _Dest=0x803eb88, _Source="NA02373_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" [0233.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803eb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0233.173] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02384_.WMF", cAlternateFileName="")) returned 1 [0233.173] wcscmp (_String1="NA02384_.WMF", _String2=".") returned 1 [0233.173] wcscmp (_String1="NA02384_.WMF", _String2="..") returned 1 [0233.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ec10 [0233.173] wcscpy (in: _Dest=0x803ec10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.173] wcscat (in: _Dest=0x803ec10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.173] wcscat (in: _Dest=0x803ec10, _Source="NA02384_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" [0233.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ec10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b94 [0233.174] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02386_.WMF", cAlternateFileName="")) returned 1 [0233.174] wcscmp (_String1="NA02386_.WMF", _String2=".") returned 1 [0233.174] wcscmp (_String1="NA02386_.WMF", _String2="..") returned 1 [0233.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ec98 [0233.174] wcscpy (in: _Dest=0x803ec98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.174] wcscat (in: _Dest=0x803ec98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.174] wcscat (in: _Dest=0x803ec98, _Source="NA02386_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" [0233.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ec98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0233.175] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc84, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02388_.WMF", cAlternateFileName="")) returned 1 [0234.022] wcscmp (_String1="NA02388_.WMF", _String2=".") returned 1 [0234.022] wcscmp (_String1="NA02388_.WMF", _String2="..") returned 1 [0234.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beab8 [0234.022] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.022] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.022] wcscat (in: _Dest=0x81beab8, _Source="NA02388_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" [0234.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0234.023] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02389_.WMF", cAlternateFileName="")) returned 1 [0234.024] wcscmp (_String1="NA02389_.WMF", _String2=".") returned 1 [0234.024] wcscmp (_String1="NA02389_.WMF", _String2="..") returned 1 [0234.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf800 [0234.024] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.024] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.024] wcscat (in: _Dest=0x81bf800, _Source="NA02389_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" [0234.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0234.025] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe64, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02390_.WMF", cAlternateFileName="")) returned 1 [0234.025] wcscmp (_String1="NA02390_.WMF", _String2=".") returned 1 [0234.025] wcscmp (_String1="NA02390_.WMF", _String2="..") returned 1 [0234.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ed20 [0234.025] wcscpy (in: _Dest=0x803ed20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.025] wcscat (in: _Dest=0x803ed20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.025] wcscat (in: _Dest=0x803ed20, _Source="NA02390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" [0234.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ed20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0234.026] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02398_.WMF", cAlternateFileName="")) returned 1 [0234.026] wcscmp (_String1="NA02398_.WMF", _String2=".") returned 1 [0234.026] wcscmp (_String1="NA02398_.WMF", _String2="..") returned 1 [0234.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803eda8 [0234.026] wcscpy (in: _Dest=0x803eda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.026] wcscat (in: _Dest=0x803eda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.026] wcscat (in: _Dest=0x803eda8, _Source="NA02398_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" [0234.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803eda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0234.027] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02400_.WMF", cAlternateFileName="")) returned 1 [0234.027] wcscmp (_String1="NA02400_.WMF", _String2=".") returned 1 [0234.027] wcscmp (_String1="NA02400_.WMF", _String2="..") returned 1 [0234.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ee30 [0234.028] wcscpy (in: _Dest=0x803ee30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.028] wcscat (in: _Dest=0x803ee30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.028] wcscat (in: _Dest=0x803ee30, _Source="NA02400_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" [0234.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ee30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0234.029] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2120, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02404_.WMF", cAlternateFileName="")) returned 1 [0234.029] wcscmp (_String1="NA02404_.WMF", _String2=".") returned 1 [0234.029] wcscmp (_String1="NA02404_.WMF", _String2="..") returned 1 [0234.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803eeb8 [0234.029] wcscpy (in: _Dest=0x803eeb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.029] wcscat (in: _Dest=0x803eeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.029] wcscat (in: _Dest=0x803eeb8, _Source="NA02404_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" [0234.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803eeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2578 [0234.030] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02405_.WMF", cAlternateFileName="")) returned 1 [0234.030] wcscmp (_String1="NA02405_.WMF", _String2=".") returned 1 [0234.030] wcscmp (_String1="NA02405_.WMF", _String2="..") returned 1 [0234.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ef40 [0234.030] wcscpy (in: _Dest=0x803ef40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.030] wcscat (in: _Dest=0x803ef40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.030] wcscat (in: _Dest=0x803ef40, _Source="NA02405_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" [0234.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ef40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0234.031] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02407_.WMF", cAlternateFileName="")) returned 1 [0234.031] wcscmp (_String1="NA02407_.WMF", _String2=".") returned 1 [0234.031] wcscmp (_String1="NA02407_.WMF", _String2="..") returned 1 [0234.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803efc8 [0234.031] wcscpy (in: _Dest=0x803efc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.031] wcscat (in: _Dest=0x803efc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.031] wcscat (in: _Dest=0x803efc8, _Source="NA02407_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" [0234.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803efc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2574 [0234.032] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x28ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02413_.WMF", cAlternateFileName="")) returned 1 [0234.033] wcscmp (_String1="NA02413_.WMF", _String2=".") returned 1 [0234.033] wcscmp (_String1="NA02413_.WMF", _String2="..") returned 1 [0234.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f050 [0234.033] wcscpy (in: _Dest=0x803f050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.033] wcscat (in: _Dest=0x803f050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.033] wcscat (in: _Dest=0x803f050, _Source="NA02413_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" [0234.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0234.034] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02417_.WMF", cAlternateFileName="")) returned 1 [0234.034] wcscmp (_String1="NA02417_.WMF", _String2=".") returned 1 [0234.034] wcscmp (_String1="NA02417_.WMF", _String2="..") returned 1 [0234.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f0d8 [0234.034] wcscpy (in: _Dest=0x803f0d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.034] wcscat (in: _Dest=0x803f0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.034] wcscat (in: _Dest=0x803f0d8, _Source="NA02417_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" [0234.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0234.035] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02423_.WMF", cAlternateFileName="")) returned 1 [0234.035] wcscmp (_String1="NA02423_.WMF", _String2=".") returned 1 [0234.035] wcscmp (_String1="NA02423_.WMF", _String2="..") returned 1 [0234.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f160 [0234.035] wcscpy (in: _Dest=0x803f160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.035] wcscat (in: _Dest=0x803f160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.035] wcscat (in: _Dest=0x803f160, _Source="NA02423_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" [0234.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0234.036] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02424_.WMF", cAlternateFileName="")) returned 1 [0234.036] wcscmp (_String1="NA02424_.WMF", _String2=".") returned 1 [0234.036] wcscmp (_String1="NA02424_.WMF", _String2="..") returned 1 [0234.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f1e8 [0234.036] wcscpy (in: _Dest=0x803f1e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.037] wcscat (in: _Dest=0x803f1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.037] wcscat (in: _Dest=0x803f1e8, _Source="NA02424_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" [0234.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0234.038] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02426_.WMF", cAlternateFileName="")) returned 1 [0234.038] wcscmp (_String1="NA02426_.WMF", _String2=".") returned 1 [0234.038] wcscmp (_String1="NA02426_.WMF", _String2="..") returned 1 [0234.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f270 [0234.038] wcscpy (in: _Dest=0x803f270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.038] wcscat (in: _Dest=0x803f270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.038] wcscat (in: _Dest=0x803f270, _Source="NA02426_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" [0234.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0234.039] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02431_.WMF", cAlternateFileName="")) returned 1 [0234.039] wcscmp (_String1="NA02431_.WMF", _String2=".") returned 1 [0234.040] wcscmp (_String1="NA02431_.WMF", _String2="..") returned 1 [0234.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f2f8 [0234.040] wcscpy (in: _Dest=0x803f2f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.040] wcscat (in: _Dest=0x803f2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.040] wcscat (in: _Dest=0x803f2f8, _Source="NA02431_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" [0234.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0234.041] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02435_.WMF", cAlternateFileName="")) returned 1 [0234.041] wcscmp (_String1="NA02435_.WMF", _String2=".") returned 1 [0234.041] wcscmp (_String1="NA02435_.WMF", _String2="..") returned 1 [0234.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f380 [0234.041] wcscpy (in: _Dest=0x803f380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.041] wcscat (in: _Dest=0x803f380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.041] wcscat (in: _Dest=0x803f380, _Source="NA02435_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" [0234.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0234.042] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02439_.WMF", cAlternateFileName="")) returned 1 [0234.042] wcscmp (_String1="NA02439_.WMF", _String2=".") returned 1 [0234.043] wcscmp (_String1="NA02439_.WMF", _String2="..") returned 1 [0234.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f408 [0234.043] wcscpy (in: _Dest=0x803f408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.043] wcscat (in: _Dest=0x803f408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.043] wcscat (in: _Dest=0x803f408, _Source="NA02439_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" [0234.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f4 [0234.044] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3218, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02441_.WMF", cAlternateFileName="")) returned 1 [0234.044] wcscmp (_String1="NA02441_.WMF", _String2=".") returned 1 [0234.044] wcscmp (_String1="NA02441_.WMF", _String2="..") returned 1 [0234.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f490 [0234.044] wcscpy (in: _Dest=0x803f490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.044] wcscat (in: _Dest=0x803f490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.044] wcscat (in: _Dest=0x803f490, _Source="NA02441_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" [0234.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0234.045] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02443_.WMF", cAlternateFileName="")) returned 1 [0234.045] wcscmp (_String1="NA02443_.WMF", _String2=".") returned 1 [0234.045] wcscmp (_String1="NA02443_.WMF", _String2="..") returned 1 [0234.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f518 [0234.045] wcscpy (in: _Dest=0x803f518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.045] wcscat (in: _Dest=0x803f518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.045] wcscat (in: _Dest=0x803f518, _Source="NA02443_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" [0234.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0234.046] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02444_.WMF", cAlternateFileName="")) returned 1 [0234.046] wcscmp (_String1="NA02444_.WMF", _String2=".") returned 1 [0234.046] wcscmp (_String1="NA02444_.WMF", _String2="..") returned 1 [0234.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f5a0 [0234.046] wcscpy (in: _Dest=0x803f5a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.046] wcscat (in: _Dest=0x803f5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.046] wcscat (in: _Dest=0x803f5a0, _Source="NA02444_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" [0234.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0234.048] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02446_.WMF", cAlternateFileName="")) returned 1 [0234.048] wcscmp (_String1="NA02446_.WMF", _String2=".") returned 1 [0234.048] wcscmp (_String1="NA02446_.WMF", _String2="..") returned 1 [0234.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f628 [0234.048] wcscpy (in: _Dest=0x803f628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.048] wcscat (in: _Dest=0x803f628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.048] wcscat (in: _Dest=0x803f628, _Source="NA02446_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" [0234.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0234.049] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02448_.WMF", cAlternateFileName="")) returned 1 [0234.049] wcscmp (_String1="NA02448_.WMF", _String2=".") returned 1 [0234.049] wcscmp (_String1="NA02448_.WMF", _String2="..") returned 1 [0234.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f6b0 [0234.049] wcscpy (in: _Dest=0x803f6b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.049] wcscat (in: _Dest=0x803f6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.049] wcscat (in: _Dest=0x803f6b0, _Source="NA02448_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" [0234.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a20 [0234.050] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02450_.WMF", cAlternateFileName="")) returned 1 [0234.050] wcscmp (_String1="NA02450_.WMF", _String2=".") returned 1 [0234.050] wcscmp (_String1="NA02450_.WMF", _String2="..") returned 1 [0234.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f738 [0234.050] wcscpy (in: _Dest=0x803f738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.050] wcscat (in: _Dest=0x803f738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.050] wcscat (in: _Dest=0x803f738, _Source="NA02450_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" [0234.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0234.051] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02451_.WMF", cAlternateFileName="")) returned 1 [0234.051] wcscmp (_String1="NA02451_.WMF", _String2=".") returned 1 [0234.051] wcscmp (_String1="NA02451_.WMF", _String2="..") returned 1 [0234.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f7c0 [0234.051] wcscpy (in: _Dest=0x803f7c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.051] wcscat (in: _Dest=0x803f7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.051] wcscat (in: _Dest=0x803f7c0, _Source="NA02451_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" [0234.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0234.052] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02453_.WMF", cAlternateFileName="")) returned 1 [0234.052] wcscmp (_String1="NA02453_.WMF", _String2=".") returned 1 [0234.052] wcscmp (_String1="NA02453_.WMF", _String2="..") returned 1 [0234.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f848 [0234.053] wcscpy (in: _Dest=0x803f848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.053] wcscat (in: _Dest=0x803f848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.053] wcscat (in: _Dest=0x803f848, _Source="NA02453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" [0234.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0234.054] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1750, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBOOK_01.MID", cAlternateFileName="")) returned 1 [0234.054] wcscmp (_String1="NBOOK_01.MID", _String2=".") returned 1 [0234.054] wcscmp (_String1="NBOOK_01.MID", _String2="..") returned 1 [0234.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f8d0 [0234.054] wcscpy (in: _Dest=0x803f8d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.054] wcscat (in: _Dest=0x803f8d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.054] wcscat (in: _Dest=0x803f8d0, _Source="NBOOK_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" [0234.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0234.055] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCEAN_01.MID", cAlternateFileName="")) returned 1 [0234.055] wcscmp (_String1="OCEAN_01.MID", _String2=".") returned 1 [0234.055] wcscmp (_String1="OCEAN_01.MID", _String2="..") returned 1 [0234.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f958 [0234.055] wcscpy (in: _Dest=0x803f958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.055] wcscat (in: _Dest=0x803f958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.055] wcscat (in: _Dest=0x803f958, _Source="OCEAN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" [0234.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0234.058] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x19f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTDR_01.MID", cAlternateFileName="")) returned 1 [0234.058] wcscmp (_String1="OUTDR_01.MID", _String2=".") returned 1 [0234.058] wcscmp (_String1="OUTDR_01.MID", _String2="..") returned 1 [0234.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f9e0 [0234.058] wcscpy (in: _Dest=0x803f9e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.058] wcscat (in: _Dest=0x803f9e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.058] wcscat (in: _Dest=0x803f9e0, _Source="OUTDR_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" [0234.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0236.262] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPER_01.MID", cAlternateFileName="")) returned 1 [0236.263] wcscmp (_String1="PAPER_01.MID", _String2=".") returned 1 [0236.263] wcscmp (_String1="PAPER_01.MID", _String2="..") returned 1 [0236.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf800 [0236.263] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.263] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.263] wcscat (in: _Dest=0x81bf800, _Source="PAPER_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" [0236.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0236.275] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x195b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_01.MID", cAlternateFileName="")) returned 1 [0236.275] wcscmp (_String1="PARNT_01.MID", _String2=".") returned 1 [0236.275] wcscmp (_String1="PARNT_01.MID", _String2="..") returned 1 [0236.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beab8 [0236.275] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.275] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.276] wcscat (in: _Dest=0x81beab8, _Source="PARNT_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" [0236.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0236.276] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_02.MID", cAlternateFileName="")) returned 1 [0236.277] wcscmp (_String1="PARNT_02.MID", _String2=".") returned 1 [0236.277] wcscmp (_String1="PARNT_02.MID", _String2="..") returned 1 [0236.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf558 [0236.277] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.277] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.277] wcscat (in: _Dest=0x81bf558, _Source="PARNT_02.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" [0236.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b94 [0236.278] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x215a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_03.MID", cAlternateFileName="")) returned 1 [0236.278] wcscmp (_String1="PARNT_03.MID", _String2=".") returned 1 [0236.278] wcscmp (_String1="PARNT_03.MID", _String2="..") returned 1 [0236.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf910 [0236.278] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.278] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.278] wcscat (in: _Dest=0x81bf910, _Source="PARNT_03.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" [0236.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0236.279] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x17b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_04.MID", cAlternateFileName="")) returned 1 [0236.279] wcscmp (_String1="PARNT_04.MID", _String2=".") returned 1 [0236.279] wcscmp (_String1="PARNT_04.MID", _String2="..") returned 1 [0236.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be898 [0236.279] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.279] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.279] wcscat (in: _Dest=0x81be898, _Source="PARNT_04.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" [0236.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f0 [0236.280] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1784, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_05.MID", cAlternateFileName="")) returned 1 [0236.280] wcscmp (_String1="PARNT_05.MID", _String2=".") returned 1 [0236.280] wcscmp (_String1="PARNT_05.MID", _String2="..") returned 1 [0236.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0080 [0236.280] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.280] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.280] wcscat (in: _Dest=0x81c0080, _Source="PARNT_05.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" [0236.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0236.281] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_06.MID", cAlternateFileName="")) returned 1 [0236.281] wcscmp (_String1="PARNT_06.MID", _String2=".") returned 1 [0236.281] wcscmp (_String1="PARNT_06.MID", _String2="..") returned 1 [0236.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfff8 [0236.282] wcscpy (in: _Dest=0x81bfff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.282] wcscat (in: _Dest=0x81bfff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.282] wcscat (in: _Dest=0x81bfff8, _Source="PARNT_06.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" [0236.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0236.283] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_07.MID", cAlternateFileName="")) returned 1 [0236.300] wcscmp (_String1="PARNT_07.MID", _String2=".") returned 1 [0236.300] wcscmp (_String1="PARNT_07.MID", _String2="..") returned 1 [0236.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0328 [0236.300] wcscpy (in: _Dest=0x81c0328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.300] wcscat (in: _Dest=0x81c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.300] wcscat (in: _Dest=0x81c0328, _Source="PARNT_07.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" [0236.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0236.310] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_08.MID", cAlternateFileName="")) returned 1 [0236.310] wcscmp (_String1="PARNT_08.MID", _String2=".") returned 1 [0236.310] wcscmp (_String1="PARNT_08.MID", _String2="..") returned 1 [0236.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf338 [0236.310] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.310] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.310] wcscat (in: _Dest=0x81bf338, _Source="PARNT_08.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" [0236.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0236.328] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_09.MID", cAlternateFileName="")) returned 1 [0236.328] wcscmp (_String1="PARNT_09.MID", _String2=".") returned 1 [0236.329] wcscmp (_String1="PARNT_09.MID", _String2="..") returned 1 [0236.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfe60 [0236.329] wcscpy (in: _Dest=0x81bfe60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.329] wcscat (in: _Dest=0x81bfe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.329] wcscat (in: _Dest=0x81bfe60, _Source="PARNT_09.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" [0236.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0236.330] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_10.MID", cAlternateFileName="")) returned 1 [0236.330] wcscmp (_String1="PARNT_10.MID", _String2=".") returned 1 [0236.330] wcscmp (_String1="PARNT_10.MID", _String2="..") returned 1 [0236.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf4d0 [0236.330] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.330] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.330] wcscat (in: _Dest=0x81bf4d0, _Source="PARNT_10.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" [0236.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0236.331] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b5b800, ftCreationTime.dwHighDateTime=0x1bd4b98, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49b5b800, ftLastWriteTime.dwHighDateTime=0x1bd4b98, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00013_.WMF", cAlternateFileName="")) returned 1 [0236.331] wcscmp (_String1="PE00013_.WMF", _String2=".") returned 1 [0236.331] wcscmp (_String1="PE00013_.WMF", _String2="..") returned 1 [0236.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfaa8 [0236.331] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.331] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.331] wcscat (in: _Dest=0x81bfaa8, _Source="PE00013_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" [0236.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0236.332] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46223100, ftCreationTime.dwHighDateTime=0x1bd4b98, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46223100, ftLastWriteTime.dwHighDateTime=0x1bd4b98, nFileSizeHigh=0x0, nFileSizeLow=0x411a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00014_.WMF", cAlternateFileName="")) returned 1 [0236.332] wcscmp (_String1="PE00014_.WMF", _String2=".") returned 1 [0236.332] wcscmp (_String1="PE00014_.WMF", _String2="..") returned 1 [0236.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfbb8 [0236.332] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.332] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.332] wcscat (in: _Dest=0x81bfbb8, _Source="PE00014_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" [0236.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0236.333] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00034_.WMF", cAlternateFileName="")) returned 1 [0236.333] wcscmp (_String1="PE00034_.WMF", _String2=".") returned 1 [0236.333] wcscmp (_String1="PE00034_.WMF", _String2="..") returned 1 [0236.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be5f0 [0236.334] wcscpy (in: _Dest=0x81be5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.334] wcscat (in: _Dest=0x81be5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.334] wcscat (in: _Dest=0x81be5f0, _Source="PE00034_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" [0236.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0236.335] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24995900, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24995900, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00049_.WMF", cAlternateFileName="")) returned 1 [0236.335] wcscmp (_String1="PE00049_.WMF", _String2=".") returned 1 [0236.335] wcscmp (_String1="PE00049_.WMF", _String2="..") returned 1 [0236.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be9a8 [0236.335] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.335] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.335] wcscat (in: _Dest=0x81be9a8, _Source="PE00049_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" [0236.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0236.336] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23682c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23682c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x4d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00050_.WMF", cAlternateFileName="")) returned 1 [0236.336] wcscmp (_String1="PE00050_.WMF", _String2=".") returned 1 [0236.336] wcscmp (_String1="PE00050_.WMF", _String2="..") returned 1 [0236.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfcc8 [0236.337] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.337] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.337] wcscat (in: _Dest=0x81bfcc8, _Source="PE00050_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" [0236.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0236.338] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2236ff00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2236ff00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x47ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00052_.WMF", cAlternateFileName="")) returned 1 [0236.338] wcscmp (_String1="PE00052_.WMF", _String2=".") returned 1 [0236.338] wcscmp (_String1="PE00052_.WMF", _String2="..") returned 1 [0236.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bede8 [0236.338] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.338] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.338] wcscat (in: _Dest=0x81bede8, _Source="PE00052_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" [0236.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0236.339] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00231_.WMF", cAlternateFileName="")) returned 1 [0236.339] wcscmp (_String1="PE00231_.WMF", _String2=".") returned 1 [0236.339] wcscmp (_String1="PE00231_.WMF", _String2="..") returned 1 [0236.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be810 [0236.339] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.339] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.339] wcscat (in: _Dest=0x81be810, _Source="PE00231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" [0236.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0236.341] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00272_.WMF", cAlternateFileName="")) returned 1 [0236.341] wcscmp (_String1="PE00272_.WMF", _String2=".") returned 1 [0236.341] wcscmp (_String1="PE00272_.WMF", _String2="..") returned 1 [0236.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf448 [0236.341] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.341] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.341] wcscat (in: _Dest=0x81bf448, _Source="PE00272_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" [0236.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0236.342] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fe9200, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fe9200, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00468_.WMF", cAlternateFileName="")) returned 1 [0236.342] wcscmp (_String1="PE00468_.WMF", _String2=".") returned 1 [0236.342] wcscmp (_String1="PE00468_.WMF", _String2="..") returned 1 [0236.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c03b0 [0236.342] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.342] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.342] wcscat (in: _Dest=0x81c03b0, _Source="PE00468_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" [0236.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0236.343] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2266e700, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2266e700, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00478_.WMF", cAlternateFileName="")) returned 1 [0236.343] wcscmp (_String1="PE00478_.WMF", _String2=".") returned 1 [0236.343] wcscmp (_String1="PE00478_.WMF", _String2="..") returned 1 [0236.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be920 [0236.343] wcscpy (in: _Dest=0x81be920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.343] wcscat (in: _Dest=0x81be920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.344] wcscat (in: _Dest=0x81be920, _Source="PE00478_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" [0236.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0236.344] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4860ec00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4860ec00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00485_.WMF", cAlternateFileName="")) returned 1 [0236.344] wcscmp (_String1="PE00485_.WMF", _String2=".") returned 1 [0236.345] wcscmp (_String1="PE00485_.WMF", _String2="..") returned 1 [0236.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfb30 [0236.345] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.345] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.345] wcscat (in: _Dest=0x81bfb30, _Source="PE00485_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" [0236.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0236.346] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2975000, ftCreationTime.dwHighDateTime=0x1bd9909, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf2975000, ftLastWriteTime.dwHighDateTime=0x1bd9909, nFileSizeHigh=0x0, nFileSizeLow=0x1402c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00489_.WMF", cAlternateFileName="")) returned 1 [0236.346] wcscmp (_String1="PE00489_.WMF", _String2=".") returned 1 [0236.346] wcscmp (_String1="PE00489_.WMF", _String2="..") returned 1 [0236.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfa20 [0236.346] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.346] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.346] wcscat (in: _Dest=0x81bfa20, _Source="PE00489_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" [0236.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0236.353] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4860ec00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4860ec00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00531_.WMF", cAlternateFileName="")) returned 1 [0236.353] wcscmp (_String1="PE00531_.WMF", _String2=".") returned 1 [0236.353] wcscmp (_String1="PE00531_.WMF", _String2="..") returned 1 [0236.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0236.353] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.353] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.353] wcscat (in: _Dest=0x81bf1a0, _Source="PE00531_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" [0236.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0236.354] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc88d3700, ftCreationTime.dwHighDateTime=0x1bf3c3e, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc88d3700, ftLastWriteTime.dwHighDateTime=0x1bf3c3e, nFileSizeHigh=0x0, nFileSizeLow=0x8da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00542_.WMF", cAlternateFileName="")) returned 1 [0236.355] wcscmp (_String1="PE00542_.WMF", _String2=".") returned 1 [0236.355] wcscmp (_String1="PE00542_.WMF", _String2="..") returned 1 [0236.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfdd8 [0236.355] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.355] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.355] wcscat (in: _Dest=0x81bfdd8, _Source="PE00542_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" [0236.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0236.356] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ba1b00, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10ba1b00, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x140c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00555_.WMF", cAlternateFileName="")) returned 1 [0236.356] wcscmp (_String1="PE00555_.WMF", _String2=".") returned 1 [0236.356] wcscmp (_String1="PE00555_.WMF", _String2="..") returned 1 [0236.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf008 [0236.356] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.356] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.356] wcscat (in: _Dest=0x81bf008, _Source="PE00555_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" [0236.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0236.357] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53b4900, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc53b4900, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00559_.WMF", cAlternateFileName="")) returned 1 [0236.357] wcscmp (_String1="PE00559_.WMF", _String2=".") returned 1 [0236.357] wcscmp (_String1="PE00559_.WMF", _String2="..") returned 1 [0236.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf090 [0236.358] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.358] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.358] wcscat (in: _Dest=0x81bf090, _Source="PE00559_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" [0236.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0236.359] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf41a00, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacf41a00, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x5670, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00563_.WMF", cAlternateFileName="")) returned 1 [0236.359] wcscmp (_String1="PE00563_.WMF", _String2=".") returned 1 [0236.359] wcscmp (_String1="PE00563_.WMF", _String2="..") returned 1 [0236.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfd50 [0236.359] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.359] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.359] wcscat (in: _Dest=0x81bfd50, _Source="PE00563_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" [0236.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0236.360] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00578_.WMF", cAlternateFileName="")) returned 1 [0236.360] wcscmp (_String1="PE00578_.WMF", _String2=".") returned 1 [0236.360] wcscmp (_String1="PE00578_.WMF", _String2="..") returned 1 [0236.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81becd8 [0236.360] wcscpy (in: _Dest=0x81becd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.360] wcscat (in: _Dest=0x81becd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.360] wcscat (in: _Dest=0x81becd8, _Source="PE00578_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" [0236.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81becd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a8 [0236.390] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ea37800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ea37800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00608_.WMF", cAlternateFileName="")) returned 1 [0236.390] wcscmp (_String1="PE00608_.WMF", _String2=".") returned 1 [0236.390] wcscmp (_String1="PE00608_.WMF", _String2="..") returned 1 [0236.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf118 [0236.390] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.391] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.391] wcscat (in: _Dest=0x81bf118, _Source="PE00608_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" [0236.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab8 [0236.391] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb16a0400, ftCreationTime.dwHighDateTime=0x1bd4b94, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb16a0400, ftLastWriteTime.dwHighDateTime=0x1bd4b94, nFileSizeHigh=0x0, nFileSizeLow=0x4cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00633_.WMF", cAlternateFileName="")) returned 1 [0236.391] wcscmp (_String1="PE00633_.WMF", _String2=".") returned 1 [0236.392] wcscmp (_String1="PE00633_.WMF", _String2="..") returned 1 [0236.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf228 [0236.392] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.392] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.392] wcscat (in: _Dest=0x81bf228, _Source="PE00633_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" [0236.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0236.393] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2105d200, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2105d200, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xb12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00640_.WMF", cAlternateFileName="")) returned 1 [0236.393] wcscmp (_String1="PE00640_.WMF", _String2=".") returned 1 [0236.393] wcscmp (_String1="PE00640_.WMF", _String2="..") returned 1 [0236.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0236.393] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.393] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.393] wcscat (in: _Dest=0x81bee70, _Source="PE00640_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" [0236.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0236.394] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d724b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d724b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x6028, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00668_.WMF", cAlternateFileName="")) returned 1 [0236.394] wcscmp (_String1="PE00668_.WMF", _String2=".") returned 1 [0236.394] wcscmp (_String1="PE00668_.WMF", _String2="..") returned 1 [0236.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bff70 [0236.394] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.394] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.394] wcscat (in: _Dest=0x81bff70, _Source="PE00668_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" [0236.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0236.395] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfd0ff00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfd0ff00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00685_.WMF", cAlternateFileName="")) returned 1 [0236.395] wcscmp (_String1="PE00685_.WMF", _String2=".") returned 1 [0236.395] wcscmp (_String1="PE00685_.WMF", _String2="..") returned 1 [0236.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0236.395] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.395] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.395] wcscat (in: _Dest=0x81be458, _Source="PE00685_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" [0236.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0236.396] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7dea00, ftCreationTime.dwHighDateTime=0x1bf0b78, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7dea00, ftLastWriteTime.dwHighDateTime=0x1bf0b78, nFileSizeHigh=0x0, nFileSizeLow=0x112e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00686_.WMF", cAlternateFileName="")) returned 1 [0236.396] wcscmp (_String1="PE00686_.WMF", _String2=".") returned 1 [0236.397] wcscmp (_String1="PE00686_.WMF", _String2="..") returned 1 [0236.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf998 [0236.397] wcscpy (in: _Dest=0x81bf998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.397] wcscat (in: _Dest=0x81bf998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.397] wcscat (in: _Dest=0x81bf998, _Source="PE00686_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" [0236.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2acc [0236.397] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49921900, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49921900, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00693_.WMF", cAlternateFileName="")) returned 1 [0236.397] wcscmp (_String1="PE00693_.WMF", _String2=".") returned 1 [0236.398] wcscmp (_String1="PE00693_.WMF", _String2="..") returned 1 [0236.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bed60 [0236.398] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.398] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.398] wcscat (in: _Dest=0x81bed60, _Source="PE00693_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" [0236.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac4 [0236.398] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf017e00, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf017e00, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00720_.WMF", cAlternateFileName="")) returned 1 [0236.398] wcscmp (_String1="PE00720_.WMF", _String2=".") returned 1 [0236.398] wcscmp (_String1="PE00720_.WMF", _String2="..") returned 1 [0236.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0236.399] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.399] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.399] wcscat (in: _Dest=0x81bebc8, _Source="PE00720_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" [0236.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0236.399] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d411400, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d411400, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x1afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00723_.WMF", cAlternateFileName="")) returned 1 [0236.399] wcscmp (_String1="PE00723_.WMF", _String2=".") returned 1 [0236.399] wcscmp (_String1="PE00723_.WMF", _String2="..") returned 1 [0236.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beef8 [0236.399] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.400] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.400] wcscat (in: _Dest=0x81beef8, _Source="PE00723_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" [0236.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0236.401] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2379300, ftCreationTime.dwHighDateTime=0x1c04274, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2379300, ftLastWriteTime.dwHighDateTime=0x1c04274, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00726_.WMF", cAlternateFileName="")) returned 1 [0236.401] wcscmp (_String1="PE00726_.WMF", _String2=".") returned 1 [0236.401] wcscmp (_String1="PE00726_.WMF", _String2="..") returned 1 [0236.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beb40 [0236.401] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.401] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.401] wcscat (in: _Dest=0x81beb40, _Source="PE00726_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" [0236.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bec [0236.401] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94323700, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94323700, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00737_.WMF", cAlternateFileName="")) returned 1 [0236.402] wcscmp (_String1="PE00737_.WMF", _String2=".") returned 1 [0236.402] wcscmp (_String1="PE00737_.WMF", _String2="..") returned 1 [0236.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0218 [0236.402] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.402] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.402] wcscat (in: _Dest=0x81c0218, _Source="PE00737_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" [0236.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2984 [0236.413] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bedc00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77bedc00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00833_.WMF", cAlternateFileName="")) returned 1 [0236.413] wcscmp (_String1="PE00833_.WMF", _String2=".") returned 1 [0236.413] wcscmp (_String1="PE00833_.WMF", _String2="..") returned 1 [0236.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf5e0 [0236.414] wcscpy (in: _Dest=0x81bf5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.414] wcscat (in: _Dest=0x81bf5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.414] wcscat (in: _Dest=0x81bf5e0, _Source="PE00833_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" [0236.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298c [0236.415] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c411e00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c411e00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1908, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00898_.WMF", cAlternateFileName="")) returned 1 [0236.427] wcscmp (_String1="PE00898_.WMF", _String2=".") returned 1 [0236.427] wcscmp (_String1="PE00898_.WMF", _String2="..") returned 1 [0236.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0236.427] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.427] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.427] wcscat (in: _Dest=0x81c0190, _Source="PE00898_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" [0236.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2554 [0236.428] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30edd800, ftCreationTime.dwHighDateTime=0x1bd4b81, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30edd800, ftLastWriteTime.dwHighDateTime=0x1bd4b81, nFileSizeHigh=0x0, nFileSizeLow=0x3100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00934_.WMF", cAlternateFileName="")) returned 1 [0236.428] wcscmp (_String1="PE00934_.WMF", _String2=".") returned 1 [0236.428] wcscmp (_String1="PE00934_.WMF", _String2="..") returned 1 [0236.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be678 [0236.428] wcscpy (in: _Dest=0x81be678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.428] wcscat (in: _Dest=0x81be678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.428] wcscat (in: _Dest=0x81be678, _Source="PE00934_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" [0236.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0236.429] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ff1200, ftCreationTime.dwHighDateTime=0x1bd4b75, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9ff1200, ftLastWriteTime.dwHighDateTime=0x1bd4b75, nFileSizeHigh=0x0, nFileSizeLow=0x2904, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00998_.WMF", cAlternateFileName="")) returned 1 [0236.429] wcscmp (_String1="PE00998_.WMF", _String2=".") returned 1 [0236.429] wcscmp (_String1="PE00998_.WMF", _String2="..") returned 1 [0236.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c02a0 [0236.429] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.429] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.429] wcscat (in: _Dest=0x81c02a0, _Source="PE00998_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" [0236.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0236.430] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1cca200, ftCreationTime.dwHighDateTime=0x1bf117c, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1cca200, ftLastWriteTime.dwHighDateTime=0x1bf117c, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01160_.WMF", cAlternateFileName="")) returned 1 [0236.430] wcscmp (_String1="PE01160_.WMF", _String2=".") returned 1 [0236.430] wcscmp (_String1="PE01160_.WMF", _String2="..") returned 1 [0236.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be568 [0236.430] wcscpy (in: _Dest=0x81be568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.430] wcscat (in: _Dest=0x81be568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.430] wcscat (in: _Dest=0x81be568, _Source="PE01160_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" [0236.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0236.431] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42efc00, ftCreationTime.dwHighDateTime=0x1bf117c, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf42efc00, ftLastWriteTime.dwHighDateTime=0x1bf117c, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01172_.WMF", cAlternateFileName="")) returned 1 [0236.431] wcscmp (_String1="PE01172_.WMF", _String2=".") returned 1 [0236.431] wcscmp (_String1="PE01172_.WMF", _String2="..") returned 1 [0236.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf668 [0236.431] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.431] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.431] wcscat (in: _Dest=0x81bf668, _Source="PE01172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" [0236.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b0 [0236.432] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac34600, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ac34600, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01191_.WMF", cAlternateFileName="")) returned 1 [0236.432] wcscmp (_String1="PE01191_.WMF", _String2=".") returned 1 [0236.432] wcscmp (_String1="PE01191_.WMF", _String2="..") returned 1 [0236.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf888 [0236.432] wcscpy (in: _Dest=0x81bf888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.432] wcscat (in: _Dest=0x81bf888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.432] wcscat (in: _Dest=0x81bf888, _Source="PE01191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" [0236.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc8 [0236.433] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f937600, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7f937600, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01661_.WMF", cAlternateFileName="")) returned 1 [0236.433] wcscmp (_String1="PE01661_.WMF", _String2=".") returned 1 [0236.433] wcscmp (_String1="PE01661_.WMF", _String2="..") returned 1 [0236.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf2b0 [0236.433] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.434] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.434] wcscat (in: _Dest=0x81bf2b0, _Source="PE01661_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" [0236.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2990 [0236.435] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01797_.WMF", cAlternateFileName="")) returned 1 [0236.435] wcscmp (_String1="PE01797_.WMF", _String2=".") returned 1 [0236.435] wcscmp (_String1="PE01797_.WMF", _String2="..") returned 1 [0236.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf778 [0236.435] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.435] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.435] wcscat (in: _Dest=0x81bf778, _Source="PE01797_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" [0236.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0236.436] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02120_.WMF", cAlternateFileName="")) returned 1 [0236.436] wcscmp (_String1="PE02120_.WMF", _String2=".") returned 1 [0236.436] wcscmp (_String1="PE02120_.WMF", _String2="..") returned 1 [0236.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bef80 [0236.436] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.436] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.436] wcscat (in: _Dest=0x81bef80, _Source="PE02120_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" [0236.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0236.437] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02169_.WMF", cAlternateFileName="")) returned 1 [0236.437] wcscmp (_String1="PE02169_.WMF", _String2=".") returned 1 [0236.437] wcscmp (_String1="PE02169_.WMF", _String2="..") returned 1 [0236.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf6f0 [0236.437] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.437] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.437] wcscat (in: _Dest=0x81bf6f0, _Source="PE02169_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" [0236.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ccc [0236.438] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18ad9700, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18ad9700, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x75e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02262_.WMF", cAlternateFileName="")) returned 1 [0236.438] wcscmp (_String1="PE02262_.WMF", _String2=".") returned 1 [0236.438] wcscmp (_String1="PE02262_.WMF", _String2="..") returned 1 [0236.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfc40 [0236.439] wcscpy (in: _Dest=0x81bfc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.439] wcscat (in: _Dest=0x81bfc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.439] wcscat (in: _Dest=0x81bfc40, _Source="PE02262_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" [0236.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0236.440] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb8b700, ftCreationTime.dwHighDateTime=0x1bf14f3, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4eb8b700, ftLastWriteTime.dwHighDateTime=0x1bf14f3, nFileSizeHigh=0x0, nFileSizeLow=0x824e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02263_.WMF", cAlternateFileName="")) returned 1 [0236.440] wcscmp (_String1="PE02263_.WMF", _String2=".") returned 1 [0236.440] wcscmp (_String1="PE02263_.WMF", _String2="..") returned 1 [0236.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0108 [0236.440] wcscpy (in: _Dest=0x81c0108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.440] wcscat (in: _Dest=0x81c0108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.440] wcscat (in: _Dest=0x81c0108, _Source="PE02263_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" [0236.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0236.441] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c88d100, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c88d100, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x62b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02265_.WMF", cAlternateFileName="")) returned 1 [0236.441] wcscmp (_String1="PE02265_.WMF", _String2=".") returned 1 [0236.441] wcscmp (_String1="PE02265_.WMF", _String2="..") returned 1 [0236.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be4e0 [0236.441] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.441] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.441] wcscat (in: _Dest=0x81be4e0, _Source="PE02265_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" [0236.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0236.442] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59250900, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59250900, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x78e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02267_.WMF", cAlternateFileName="")) returned 1 [0236.442] wcscmp (_String1="PE02267_.WMF", _String2=".") returned 1 [0236.442] wcscmp (_String1="PE02267_.WMF", _String2="..") returned 1 [0236.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bea30 [0236.442] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.442] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.442] wcscat (in: _Dest=0x81bea30, _Source="PE02267_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" [0236.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0236.443] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x151a1000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x151a1000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02270_.WMF", cAlternateFileName="")) returned 1 [0236.443] wcscmp (_String1="PE02270_.WMF", _String2=".") returned 1 [0236.443] wcscmp (_String1="PE02270_.WMF", _String2="..") returned 1 [0236.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bec50 [0236.443] wcscpy (in: _Dest=0x81bec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.443] wcscat (in: _Dest=0x81bec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.444] wcscat (in: _Dest=0x81bec50, _Source="PE02270_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" [0236.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0236.445] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d39d00, ftCreationTime.dwHighDateTime=0x1c003a3, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4d39d00, ftLastWriteTime.dwHighDateTime=0x1c003a3, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02278_.WMF", cAlternateFileName="")) returned 1 [0236.445] wcscmp (_String1="PE02278_.WMF", _String2=".") returned 1 [0236.445] wcscmp (_String1="PE02278_.WMF", _String2="..") returned 1 [0236.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ec98 [0236.445] wcscpy (in: _Dest=0x803ec98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.445] wcscat (in: _Dest=0x803ec98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.445] wcscat (in: _Dest=0x803ec98, _Source="PE02278_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" [0236.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ec98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0236.446] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47456500, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47456500, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0x6928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02280_.WMF", cAlternateFileName="")) returned 1 [0236.446] wcscmp (_String1="PE02280_.WMF", _String2=".") returned 1 [0236.446] wcscmp (_String1="PE02280_.WMF", _String2="..") returned 1 [0236.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ec10 [0236.446] wcscpy (in: _Dest=0x803ec10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.446] wcscat (in: _Dest=0x803ec10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.446] wcscat (in: _Dest=0x803ec10, _Source="PE02280_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" [0236.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ec10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c88 [0236.447] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7864bb00, ftCreationTime.dwHighDateTime=0x1bf32b5, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7864bb00, ftLastWriteTime.dwHighDateTime=0x1bf32b5, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02282_.WMF", cAlternateFileName="")) returned 1 [0236.447] wcscmp (_String1="PE02282_.WMF", _String2=".") returned 1 [0236.447] wcscmp (_String1="PE02282_.WMF", _String2="..") returned 1 [0236.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803eb88 [0236.447] wcscpy (in: _Dest=0x803eb88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.447] wcscat (in: _Dest=0x803eb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.447] wcscat (in: _Dest=0x803eb88, _Source="PE02282_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" [0236.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803eb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0236.448] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94eb3800, ftCreationTime.dwHighDateTime=0x1bf34ed, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94eb3800, ftLastWriteTime.dwHighDateTime=0x1bf34ed, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02285_.WMF", cAlternateFileName="")) returned 1 [0236.448] wcscmp (_String1="PE02285_.WMF", _String2=".") returned 1 [0236.448] wcscmp (_String1="PE02285_.WMF", _String2="..") returned 1 [0236.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803eb00 [0236.449] wcscpy (in: _Dest=0x803eb00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.449] wcscat (in: _Dest=0x803eb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.449] wcscat (in: _Dest=0x803eb00, _Source="PE02285_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" [0236.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803eb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cbc [0236.484] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf47300, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bf47300, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02287_.WMF", cAlternateFileName="")) returned 1 [0236.484] wcscmp (_String1="PE02287_.WMF", _String2=".") returned 1 [0236.484] wcscmp (_String1="PE02287_.WMF", _String2="..") returned 1 [0236.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ea78 [0236.484] wcscpy (in: _Dest=0x803ea78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.484] wcscat (in: _Dest=0x803ea78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.484] wcscat (in: _Dest=0x803ea78, _Source="PE02287_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" [0236.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ea78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0236.485] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d25a000, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d25a000, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x76e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02288_.WMF", cAlternateFileName="")) returned 1 [0236.485] wcscmp (_String1="PE02288_.WMF", _String2=".") returned 1 [0236.485] wcscmp (_String1="PE02288_.WMF", _String2="..") returned 1 [0236.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e9f0 [0236.485] wcscpy (in: _Dest=0x803e9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.485] wcscat (in: _Dest=0x803e9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.485] wcscat (in: _Dest=0x803e9f0, _Source="PE02288_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" [0236.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0236.486] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d25a000, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d25a000, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x5850, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02293_.WMF", cAlternateFileName="")) returned 1 [0236.486] wcscmp (_String1="PE02293_.WMF", _String2=".") returned 1 [0236.486] wcscmp (_String1="PE02293_.WMF", _String2="..") returned 1 [0236.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e968 [0236.486] wcscpy (in: _Dest=0x803e968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.486] wcscat (in: _Dest=0x803e968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.486] wcscat (in: _Dest=0x803e968, _Source="PE02293_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" [0236.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0236.488] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993bc600, ftCreationTime.dwHighDateTime=0x1bf3a96, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x993bc600, ftLastWriteTime.dwHighDateTime=0x1bf3a96, nFileSizeHigh=0x0, nFileSizeLow=0x5328, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02296_.WMF", cAlternateFileName="")) returned 1 [0236.488] wcscmp (_String1="PE02296_.WMF", _String2=".") returned 1 [0236.488] wcscmp (_String1="PE02296_.WMF", _String2="..") returned 1 [0236.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e8e0 [0236.488] wcscpy (in: _Dest=0x803e8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.488] wcscat (in: _Dest=0x803e8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.488] wcscat (in: _Dest=0x803e8e0, _Source="PE02296_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" [0236.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0236.489] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64c5ff00, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64c5ff00, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02369_.WMF", cAlternateFileName="")) returned 1 [0236.489] wcscmp (_String1="PE02369_.WMF", _String2=".") returned 1 [0236.489] wcscmp (_String1="PE02369_.WMF", _String2="..") returned 1 [0236.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e858 [0236.489] wcscpy (in: _Dest=0x803e858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.489] wcscat (in: _Dest=0x803e858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.489] wcscat (in: _Dest=0x803e858, _Source="PE02369_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" [0236.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0236.490] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c9b400, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x39c9b400, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x39f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02522_.WMF", cAlternateFileName="")) returned 1 [0236.490] wcscmp (_String1="PE02522_.WMF", _String2=".") returned 1 [0236.490] wcscmp (_String1="PE02522_.WMF", _String2="..") returned 1 [0236.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803e7d0 [0236.490] wcscpy (in: _Dest=0x803e7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.490] wcscat (in: _Dest=0x803e7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.490] wcscat (in: _Dest=0x803e7d0, _Source="PE02522_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" [0236.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803e7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0236.491] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02950_.WMF", cAlternateFileName="")) returned 1 [0236.491] wcscmp (_String1="PE02950_.WMF", _String2=".") returned 1 [0236.491] wcscmp (_String1="PE02950_.WMF", _String2="..") returned 1 [0236.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803fa68 [0236.491] wcscpy (in: _Dest=0x803fa68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.491] wcscat (in: _Dest=0x803fa68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.491] wcscat (in: _Dest=0x803fa68, _Source="PE02950_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" [0236.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803fa68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0236.492] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02957_.WMF", cAlternateFileName="")) returned 1 [0236.492] wcscmp (_String1="PE02957_.WMF", _String2=".") returned 1 [0236.492] wcscmp (_String1="PE02957_.WMF", _String2="..") returned 1 [0236.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803faf0 [0236.492] wcscpy (in: _Dest=0x803faf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.492] wcscat (in: _Dest=0x803faf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.492] wcscat (in: _Dest=0x803faf0, _Source="PE02957_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" [0236.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803faf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0236.493] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04ca400, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd04ca400, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03236_.WMF", cAlternateFileName="")) returned 1 [0236.493] wcscmp (_String1="PE03236_.WMF", _String2=".") returned 1 [0236.493] wcscmp (_String1="PE03236_.WMF", _String2="..") returned 1 [0236.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803fb78 [0236.494] wcscpy (in: _Dest=0x803fb78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.494] wcscat (in: _Dest=0x803fb78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.494] wcscat (in: _Dest=0x803fb78, _Source="PE03236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" [0236.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803fb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0236.495] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc035c400, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc035c400, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03241_.WMF", cAlternateFileName="")) returned 1 [0236.495] wcscmp (_String1="PE03241_.WMF", _String2=".") returned 1 [0236.495] wcscmp (_String1="PE03241_.WMF", _String2="..") returned 1 [0236.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803fc00 [0236.495] wcscpy (in: _Dest=0x803fc00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.495] wcscat (in: _Dest=0x803fc00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.495] wcscat (in: _Dest=0x803fc00, _Source="PE03241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" [0236.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803fc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0236.497] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e56cd00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e56cd00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03257_.WMF", cAlternateFileName="")) returned 1 [0236.497] wcscmp (_String1="PE03257_.WMF", _String2=".") returned 1 [0236.497] wcscmp (_String1="PE03257_.WMF", _String2="..") returned 1 [0236.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803fc88 [0236.497] wcscpy (in: _Dest=0x803fc88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.497] wcscat (in: _Dest=0x803fc88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.497] wcscat (in: _Dest=0x803fc88, _Source="PE03257_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" [0236.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803fc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0236.498] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc66c7600, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc66c7600, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03331_.WMF", cAlternateFileName="")) returned 1 [0236.498] wcscmp (_String1="PE03331_.WMF", _String2=".") returned 1 [0236.498] wcscmp (_String1="PE03331_.WMF", _String2="..") returned 1 [0236.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803fd10 [0236.498] wcscpy (in: _Dest=0x803fd10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.498] wcscat (in: _Dest=0x803fd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.498] wcscat (in: _Dest=0x803fd10, _Source="PE03331_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" [0236.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803fd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0236.499] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7695ab00, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7695ab00, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03339_.WMF", cAlternateFileName="")) returned 1 [0236.499] wcscmp (_String1="PE03339_.WMF", _String2=".") returned 1 [0236.499] wcscmp (_String1="PE03339_.WMF", _String2="..") returned 1 [0236.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803fd98 [0236.500] wcscpy (in: _Dest=0x803fd98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.500] wcscat (in: _Dest=0x803fd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.500] wcscat (in: _Dest=0x803fd98, _Source="PE03339_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" [0236.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803fd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0236.501] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2108, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03451_.WMF", cAlternateFileName="")) returned 1 [0236.501] wcscmp (_String1="PE03451_.WMF", _String2=".") returned 1 [0236.501] wcscmp (_String1="PE03451_.WMF", _String2="..") returned 1 [0236.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803fe20 [0236.501] wcscpy (in: _Dest=0x803fe20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.501] wcscat (in: _Dest=0x803fe20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.501] wcscat (in: _Dest=0x803fe20, _Source="PE03451_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" [0236.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803fe20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0236.502] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb29e3e00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb29e3e00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x1f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03453_.WMF", cAlternateFileName="")) returned 1 [0236.502] wcscmp (_String1="PE03453_.WMF", _String2=".") returned 1 [0236.502] wcscmp (_String1="PE03453_.WMF", _String2="..") returned 1 [0236.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803fea8 [0236.502] wcscpy (in: _Dest=0x803fea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.502] wcscat (in: _Dest=0x803fea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.502] wcscat (in: _Dest=0x803fea8, _Source="PE03453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" [0236.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803fea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0236.503] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03459_.WMF", cAlternateFileName="")) returned 1 [0236.567] wcscmp (_String1="PE03459_.WMF", _String2=".") returned 1 [0236.567] wcscmp (_String1="PE03459_.WMF", _String2="..") returned 1 [0236.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ff30 [0236.567] wcscpy (in: _Dest=0x803ff30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.567] wcscat (in: _Dest=0x803ff30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.567] wcscat (in: _Dest=0x803ff30, _Source="PE03459_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" [0236.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ff30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0236.568] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03464_.WMF", cAlternateFileName="")) returned 1 [0236.568] wcscmp (_String1="PE03464_.WMF", _String2=".") returned 1 [0236.568] wcscmp (_String1="PE03464_.WMF", _String2="..") returned 1 [0236.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ffb8 [0236.568] wcscpy (in: _Dest=0x803ffb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.568] wcscat (in: _Dest=0x803ffb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.568] wcscat (in: _Dest=0x803ffb8, _Source="PE03464_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" [0236.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ffb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0236.569] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03466_.WMF", cAlternateFileName="")) returned 1 [0236.569] wcscmp (_String1="PE03466_.WMF", _String2=".") returned 1 [0236.569] wcscmp (_String1="PE03466_.WMF", _String2="..") returned 1 [0236.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040040 [0236.569] wcscpy (in: _Dest=0x8040040, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.569] wcscat (in: _Dest=0x8040040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.569] wcscat (in: _Dest=0x8040040, _Source="PE03466_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" [0236.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0236.570] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03470_.WMF", cAlternateFileName="")) returned 1 [0236.570] wcscmp (_String1="PE03470_.WMF", _String2=".") returned 1 [0236.570] wcscmp (_String1="PE03470_.WMF", _String2="..") returned 1 [0236.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80400c8 [0236.570] wcscpy (in: _Dest=0x80400c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.570] wcscat (in: _Dest=0x80400c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.570] wcscat (in: _Dest=0x80400c8, _Source="PE03470_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" [0236.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80400c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0236.571] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a64500, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88a64500, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03513_.WMF", cAlternateFileName="")) returned 1 [0236.571] wcscmp (_String1="PE03513_.WMF", _String2=".") returned 1 [0236.571] wcscmp (_String1="PE03513_.WMF", _String2="..") returned 1 [0236.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040150 [0236.571] wcscpy (in: _Dest=0x8040150, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.571] wcscat (in: _Dest=0x8040150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.571] wcscat (in: _Dest=0x8040150, _Source="PE03513_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" [0236.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0236.572] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc73b0000, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc73b0000, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03668_.WMF", cAlternateFileName="")) returned 1 [0236.572] wcscmp (_String1="PE03668_.WMF", _String2=".") returned 1 [0236.572] wcscmp (_String1="PE03668_.WMF", _String2="..") returned 1 [0236.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80401d8 [0236.572] wcscpy (in: _Dest=0x80401d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.572] wcscat (in: _Dest=0x80401d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.572] wcscat (in: _Dest=0x80401d8, _Source="PE03668_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" [0236.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80401d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0236.573] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064ea00, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9064ea00, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03731_.WMF", cAlternateFileName="")) returned 1 [0236.573] wcscmp (_String1="PE03731_.WMF", _String2=".") returned 1 [0236.573] wcscmp (_String1="PE03731_.WMF", _String2="..") returned 1 [0236.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040260 [0236.573] wcscpy (in: _Dest=0x8040260, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.573] wcscat (in: _Dest=0x8040260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.573] wcscat (in: _Dest=0x8040260, _Source="PE03731_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" [0236.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0236.575] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66abc300, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66abc300, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03795_.WMF", cAlternateFileName="")) returned 1 [0236.575] wcscmp (_String1="PE03795_.WMF", _String2=".") returned 1 [0236.575] wcscmp (_String1="PE03795_.WMF", _String2="..") returned 1 [0236.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80402e8 [0236.575] wcscpy (in: _Dest=0x80402e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.575] wcscat (in: _Dest=0x80402e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.575] wcscat (in: _Dest=0x80402e8, _Source="PE03795_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" [0236.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80402e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c98 [0236.576] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9c85f00, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9c85f00, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE04050_.WMF", cAlternateFileName="")) returned 1 [0236.576] wcscmp (_String1="PE04050_.WMF", _String2=".") returned 1 [0236.576] wcscmp (_String1="PE04050_.WMF", _String2="..") returned 1 [0236.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040370 [0236.576] wcscpy (in: _Dest=0x8040370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.576] wcscat (in: _Dest=0x8040370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.576] wcscat (in: _Dest=0x8040370, _Source="PE04050_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" [0236.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0236.577] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x37f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05665_.WMF", cAlternateFileName="")) returned 1 [0236.577] wcscmp (_String1="PE05665_.WMF", _String2=".") returned 1 [0236.577] wcscmp (_String1="PE05665_.WMF", _String2="..") returned 1 [0236.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80403f8 [0236.577] wcscpy (in: _Dest=0x80403f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.577] wcscat (in: _Dest=0x80403f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.577] wcscat (in: _Dest=0x80403f8, _Source="PE05665_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" [0236.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80403f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0236.578] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459bf00, ftCreationTime.dwHighDateTime=0x1bd4c5a, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x459bf00, ftLastWriteTime.dwHighDateTime=0x1bd4c5a, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05710_.WMF", cAlternateFileName="")) returned 1 [0236.578] wcscmp (_String1="PE05710_.WMF", _String2=".") returned 1 [0236.578] wcscmp (_String1="PE05710_.WMF", _String2="..") returned 1 [0236.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040480 [0236.578] wcscpy (in: _Dest=0x8040480, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.578] wcscat (in: _Dest=0x8040480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.578] wcscat (in: _Dest=0x8040480, _Source="PE05710_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" [0236.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0236.579] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3c1b00, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde3c1b00, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05869_.WMF", cAlternateFileName="")) returned 1 [0236.579] wcscmp (_String1="PE05869_.WMF", _String2=".") returned 1 [0236.579] wcscmp (_String1="PE05869_.WMF", _String2="..") returned 1 [0236.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040508 [0236.579] wcscpy (in: _Dest=0x8040508, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.579] wcscat (in: _Dest=0x8040508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.579] wcscat (in: _Dest=0x8040508, _Source="PE05869_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" [0236.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0236.580] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9776700, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd9776700, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05870_.WMF", cAlternateFileName="")) returned 1 [0236.580] wcscmp (_String1="PE05870_.WMF", _String2=".") returned 1 [0236.580] wcscmp (_String1="PE05870_.WMF", _String2="..") returned 1 [0236.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040590 [0236.580] wcscpy (in: _Dest=0x8040590, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.580] wcscat (in: _Dest=0x8040590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.580] wcscat (in: _Dest=0x8040590, _Source="PE05870_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" [0236.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a24 [0236.581] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc504e00, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc504e00, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x7fce, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05930_.WMF", cAlternateFileName="")) returned 1 [0236.581] wcscmp (_String1="PE05930_.WMF", _String2=".") returned 1 [0236.581] wcscmp (_String1="PE05930_.WMF", _String2="..") returned 1 [0236.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040618 [0236.581] wcscpy (in: _Dest=0x8040618, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.581] wcscat (in: _Dest=0x8040618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.581] wcscat (in: _Dest=0x8040618, _Source="PE05930_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" [0236.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca4 [0236.582] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54388600, ftCreationTime.dwHighDateTime=0x1bd4c5a, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54388600, ftLastWriteTime.dwHighDateTime=0x1bd4c5a, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06049_.WMF", cAlternateFileName="")) returned 1 [0236.582] wcscmp (_String1="PE06049_.WMF", _String2=".") returned 1 [0236.582] wcscmp (_String1="PE06049_.WMF", _String2="..") returned 1 [0236.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80406a0 [0236.582] wcscpy (in: _Dest=0x80406a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.582] wcscat (in: _Dest=0x80406a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.582] wcscat (in: _Dest=0x80406a0, _Source="PE06049_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" [0236.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80406a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0236.583] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06450_.WMF", cAlternateFileName="")) returned 1 [0236.583] wcscmp (_String1="PE06450_.WMF", _String2=".") returned 1 [0236.583] wcscmp (_String1="PE06450_.WMF", _String2="..") returned 1 [0236.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040728 [0236.583] wcscpy (in: _Dest=0x8040728, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.583] wcscat (in: _Dest=0x8040728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.583] wcscat (in: _Dest=0x8040728, _Source="PE06450_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" [0236.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0236.584] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868ef100, ftCreationTime.dwHighDateTime=0x1bd4eaf, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x868ef100, ftLastWriteTime.dwHighDateTime=0x1bd4eaf, nFileSizeHigh=0x0, nFileSizeLow=0x629, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00601G.GIF", cAlternateFileName="")) returned 1 [0236.584] wcscmp (_String1="PH00601G.GIF", _String2=".") returned 1 [0236.584] wcscmp (_String1="PH00601G.GIF", _String2="..") returned 1 [0236.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80407b0 [0236.584] wcscpy (in: _Dest=0x80407b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.584] wcscat (in: _Dest=0x80407b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.584] wcscat (in: _Dest=0x80407b0, _Source="PH00601G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" [0236.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80407b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0236.585] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da31d00, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7da31d00, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x8628, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00780U.BMP", cAlternateFileName="")) returned 1 [0236.585] wcscmp (_String1="PH00780U.BMP", _String2=".") returned 1 [0236.585] wcscmp (_String1="PH00780U.BMP", _String2="..") returned 1 [0236.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040838 [0236.585] wcscpy (in: _Dest=0x8040838, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.585] wcscat (in: _Dest=0x8040838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.585] wcscat (in: _Dest=0x8040838, _Source="PH00780U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" [0236.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0236.586] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957aa100, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x957aa100, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01035U.BMP", cAlternateFileName="")) returned 1 [0236.586] wcscmp (_String1="PH01035U.BMP", _String2=".") returned 1 [0236.586] wcscmp (_String1="PH01035U.BMP", _String2="..") returned 1 [0236.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80408c0 [0236.586] wcscpy (in: _Dest=0x80408c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.586] wcscat (in: _Dest=0x80408c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.586] wcscat (in: _Dest=0x80408c0, _Source="PH01035U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" [0236.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80408c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0236.588] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x211bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01046J.JPG", cAlternateFileName="")) returned 1 [0236.588] wcscmp (_String1="PH01046J.JPG", _String2=".") returned 1 [0236.588] wcscmp (_String1="PH01046J.JPG", _String2="..") returned 1 [0236.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040948 [0236.588] wcscpy (in: _Dest=0x8040948, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.588] wcscat (in: _Dest=0x8040948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.588] wcscat (in: _Dest=0x8040948, _Source="PH01046J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" [0236.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0236.589] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x627f1a00, ftCreationTime.dwHighDateTime=0x1bd5112, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x627f1a00, ftLastWriteTime.dwHighDateTime=0x1bd5112, nFileSizeHigh=0x0, nFileSizeLow=0xa202, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01179J.JPG", cAlternateFileName="")) returned 1 [0236.589] wcscmp (_String1="PH01179J.JPG", _String2=".") returned 1 [0236.589] wcscmp (_String1="PH01179J.JPG", _String2="..") returned 1 [0236.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80409d0 [0236.589] wcscpy (in: _Dest=0x80409d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.589] wcscat (in: _Dest=0x80409d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.589] wcscat (in: _Dest=0x80409d0, _Source="PH01179J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" [0236.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80409d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f0 [0236.592] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01213K.JPG", cAlternateFileName="")) returned 1 [0236.592] wcscmp (_String1="PH01213K.JPG", _String2=".") returned 1 [0236.592] wcscmp (_String1="PH01213K.JPG", _String2="..") returned 1 [0236.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040a58 [0236.592] wcscpy (in: _Dest=0x8040a58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.592] wcscat (in: _Dest=0x8040a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.592] wcscat (in: _Dest=0x8040a58, _Source="PH01213K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" [0236.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0236.593] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c94, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01221K.JPG", cAlternateFileName="")) returned 1 [0236.593] wcscmp (_String1="PH01221K.JPG", _String2=".") returned 1 [0236.593] wcscmp (_String1="PH01221K.JPG", _String2="..") returned 1 [0236.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040ae0 [0236.594] wcscpy (in: _Dest=0x8040ae0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.594] wcscat (in: _Dest=0x8040ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.594] wcscat (in: _Dest=0x8040ae0, _Source="PH01221K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" [0236.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0236.594] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce84e00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcce84e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01235U.BMP", cAlternateFileName="")) returned 1 [0236.595] wcscmp (_String1="PH01235U.BMP", _String2=".") returned 1 [0236.595] wcscmp (_String1="PH01235U.BMP", _String2="..") returned 1 [0236.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040b68 [0236.595] wcscpy (in: _Dest=0x8040b68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.595] wcscat (in: _Dest=0x8040b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.595] wcscat (in: _Dest=0x8040b68, _Source="PH01235U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" [0236.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0236.596] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d735e00, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d735e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01236U.BMP", cAlternateFileName="")) returned 1 [0236.596] wcscmp (_String1="PH01236U.BMP", _String2=".") returned 1 [0236.596] wcscmp (_String1="PH01236U.BMP", _String2="..") returned 1 [0236.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040bf0 [0236.596] wcscpy (in: _Dest=0x8040bf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.596] wcscat (in: _Dest=0x8040bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.596] wcscat (in: _Dest=0x8040bf0, _Source="PH01236U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" [0236.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0236.597] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01239K.JPG", cAlternateFileName="")) returned 1 [0236.597] wcscmp (_String1="PH01239K.JPG", _String2=".") returned 1 [0236.597] wcscmp (_String1="PH01239K.JPG", _String2="..") returned 1 [0236.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040c78 [0236.597] wcscpy (in: _Dest=0x8040c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.597] wcscat (in: _Dest=0x8040c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.597] wcscat (in: _Dest=0x8040c78, _Source="PH01239K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" [0236.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc [0236.598] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e9f600, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53e9f600, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01247U.BMP", cAlternateFileName="")) returned 1 [0236.598] wcscmp (_String1="PH01247U.BMP", _String2=".") returned 1 [0236.598] wcscmp (_String1="PH01247U.BMP", _String2="..") returned 1 [0236.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040d00 [0236.598] wcscpy (in: _Dest=0x8040d00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.598] wcscat (in: _Dest=0x8040d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.598] wcscat (in: _Dest=0x8040d00, _Source="PH01247U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" [0236.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0236.599] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757e800, ftCreationTime.dwHighDateTime=0x1bd4ec4, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x757e800, ftLastWriteTime.dwHighDateTime=0x1bd4ec4, nFileSizeHigh=0x0, nFileSizeLow=0x1e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01255G.GIF", cAlternateFileName="")) returned 1 [0236.599] wcscmp (_String1="PH01255G.GIF", _String2=".") returned 1 [0236.599] wcscmp (_String1="PH01255G.GIF", _String2="..") returned 1 [0236.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040d88 [0236.599] wcscpy (in: _Dest=0x8040d88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.599] wcscat (in: _Dest=0x8040d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.599] wcscat (in: _Dest=0x8040d88, _Source="PH01255G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" [0236.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8c [0236.600] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ae7000, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2ae7000, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01265U.BMP", cAlternateFileName="")) returned 1 [0236.600] wcscmp (_String1="PH01265U.BMP", _String2=".") returned 1 [0236.600] wcscmp (_String1="PH01265U.BMP", _String2="..") returned 1 [0236.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040e10 [0236.600] wcscpy (in: _Dest=0x8040e10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.600] wcscat (in: _Dest=0x8040e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.600] wcscat (in: _Dest=0x8040e10, _Source="PH01265U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" [0236.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0236.601] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4df41500, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4df41500, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01332U.BMP", cAlternateFileName="")) returned 1 [0236.601] wcscmp (_String1="PH01332U.BMP", _String2=".") returned 1 [0236.601] wcscmp (_String1="PH01332U.BMP", _String2="..") returned 1 [0236.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040e98 [0236.601] wcscpy (in: _Dest=0x8040e98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.601] wcscat (in: _Dest=0x8040e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.601] wcscat (in: _Dest=0x8040e98, _Source="PH01332U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" [0236.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be4 [0236.602] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa5f900, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3fa5f900, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01478U.BMP", cAlternateFileName="")) returned 1 [0236.602] wcscmp (_String1="PH01478U.BMP", _String2=".") returned 1 [0236.602] wcscmp (_String1="PH01478U.BMP", _String2="..") returned 1 [0236.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040f20 [0236.603] wcscpy (in: _Dest=0x8040f20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.603] wcscat (in: _Dest=0x8040f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.603] wcscat (in: _Dest=0x8040f20, _Source="PH01478U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" [0236.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b6c [0236.603] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b01800, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x39b01800, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01562U.BMP", cAlternateFileName="")) returned 1 [0236.604] wcscmp (_String1="PH01562U.BMP", _String2=".") returned 1 [0236.604] wcscmp (_String1="PH01562U.BMP", _String2="..") returned 1 [0236.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8040fa8 [0236.604] wcscpy (in: _Dest=0x8040fa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.604] wcscat (in: _Dest=0x8040fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.604] wcscat (in: _Dest=0x8040fa8, _Source="PH01562U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" [0236.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8040fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be8 [0236.605] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34eb6400, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34eb6400, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01607U.BMP", cAlternateFileName="")) returned 1 [0236.605] wcscmp (_String1="PH01607U.BMP", _String2=".") returned 1 [0236.605] wcscmp (_String1="PH01607U.BMP", _String2="..") returned 1 [0236.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041030 [0236.605] wcscpy (in: _Dest=0x8041030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.605] wcscat (in: _Dest=0x8041030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.605] wcscat (in: _Dest=0x8041030, _Source="PH01607U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" [0236.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27fc [0236.635] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad8bc00, ftCreationTime.dwHighDateTime=0x1bd4ec4, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcad8bc00, ftLastWriteTime.dwHighDateTime=0x1bd4ec4, nFileSizeHigh=0x0, nFileSizeLow=0x9abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01931J.JPG", cAlternateFileName="")) returned 1 [0236.635] wcscmp (_String1="PH01931J.JPG", _String2=".") returned 1 [0236.635] wcscmp (_String1="PH01931J.JPG", _String2="..") returned 1 [0236.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80410b8 [0236.635] wcscpy (in: _Dest=0x80410b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.635] wcscat (in: _Dest=0x80410b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.635] wcscat (in: _Dest=0x80410b8, _Source="PH01931J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" [0236.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80410b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x287c [0236.636] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x451e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02028K.JPG", cAlternateFileName="")) returned 1 [0236.648] wcscmp (_String1="PH02028K.JPG", _String2=".") returned 1 [0236.648] wcscmp (_String1="PH02028K.JPG", _String2="..") returned 1 [0236.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041140 [0236.648] wcscpy (in: _Dest=0x8041140, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.648] wcscat (in: _Dest=0x8041140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.648] wcscat (in: _Dest=0x8041140, _Source="PH02028K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" [0236.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a3c [0236.649] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f763a00, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f763a00, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02039U.BMP", cAlternateFileName="")) returned 1 [0236.649] wcscmp (_String1="PH02039U.BMP", _String2=".") returned 1 [0236.649] wcscmp (_String1="PH02039U.BMP", _String2="..") returned 1 [0236.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80411c8 [0236.649] wcscpy (in: _Dest=0x80411c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.649] wcscat (in: _Dest=0x80411c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.649] wcscat (in: _Dest=0x80411c8, _Source="PH02039U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" [0236.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80411c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0236.650] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ab18600, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ab18600, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02040U.BMP", cAlternateFileName="")) returned 1 [0236.650] wcscmp (_String1="PH02040U.BMP", _String2=".") returned 1 [0236.650] wcscmp (_String1="PH02040U.BMP", _String2="..") returned 1 [0236.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041250 [0236.651] wcscpy (in: _Dest=0x8041250, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.651] wcscat (in: _Dest=0x8041250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.651] wcscat (in: _Dest=0x8041250, _Source="PH02040U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" [0236.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0236.652] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8861b000, ftCreationTime.dwHighDateTime=0x1bd4ec1, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8861b000, ftLastWriteTime.dwHighDateTime=0x1bd4ec1, nFileSizeHigh=0x0, nFileSizeLow=0x6afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02053J.JPG", cAlternateFileName="")) returned 1 [0236.652] wcscmp (_String1="PH02053J.JPG", _String2=".") returned 1 [0236.652] wcscmp (_String1="PH02053J.JPG", _String2="..") returned 1 [0236.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80412d8 [0236.652] wcscpy (in: _Dest=0x80412d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.652] wcscat (in: _Dest=0x80412d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.652] wcscat (in: _Dest=0x80412d8, _Source="PH02053J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" [0236.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80412d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0236.654] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ecd200, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15ecd200, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02058U.BMP", cAlternateFileName="")) returned 1 [0236.654] wcscmp (_String1="PH02058U.BMP", _String2=".") returned 1 [0236.654] wcscmp (_String1="PH02058U.BMP", _String2="..") returned 1 [0236.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041360 [0236.654] wcscpy (in: _Dest=0x8041360, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.654] wcscat (in: _Dest=0x8041360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.654] wcscat (in: _Dest=0x8041360, _Source="PH02058U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" [0236.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0236.655] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d500, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a8d500, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02062U.BMP", cAlternateFileName="")) returned 1 [0236.655] wcscmp (_String1="PH02062U.BMP", _String2=".") returned 1 [0236.655] wcscmp (_String1="PH02062U.BMP", _String2="..") returned 1 [0236.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80413e8 [0236.656] wcscpy (in: _Dest=0x80413e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.656] wcscat (in: _Dest=0x80413e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.656] wcscat (in: _Dest=0x80413e8, _Source="PH02062U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" [0236.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80413e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0236.657] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e78ca00, ftCreationTime.dwHighDateTime=0x1bd4ec1, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e78ca00, ftLastWriteTime.dwHighDateTime=0x1bd4ec1, nFileSizeHigh=0x0, nFileSizeLow=0x7297, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02069J.JPG", cAlternateFileName="")) returned 1 [0236.657] wcscmp (_String1="PH02069J.JPG", _String2=".") returned 1 [0236.657] wcscmp (_String1="PH02069J.JPG", _String2="..") returned 1 [0236.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041470 [0236.657] wcscpy (in: _Dest=0x8041470, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.657] wcscat (in: _Dest=0x8041470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.657] wcscat (in: _Dest=0x8041470, _Source="PH02069J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" [0236.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0236.659] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce42100, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfce42100, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02071U.BMP", cAlternateFileName="")) returned 1 [0236.659] wcscmp (_String1="PH02071U.BMP", _String2=".") returned 1 [0236.659] wcscmp (_String1="PH02071U.BMP", _String2="..") returned 1 [0236.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80414f8 [0236.659] wcscpy (in: _Dest=0x80414f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.659] wcscat (in: _Dest=0x80414f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.659] wcscat (in: _Dest=0x80414f8, _Source="PH02071U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" [0236.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80414f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e4 [0236.661] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb027e00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb027e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02074U.BMP", cAlternateFileName="")) returned 1 [0236.661] wcscmp (_String1="PH02074U.BMP", _String2=".") returned 1 [0236.661] wcscmp (_String1="PH02074U.BMP", _String2="..") returned 1 [0236.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041580 [0236.661] wcscpy (in: _Dest=0x8041580, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.661] wcscat (in: _Dest=0x8041580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.661] wcscat (in: _Dest=0x8041580, _Source="PH02074U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" [0236.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0236.662] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1791600, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1791600, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02208U.BMP", cAlternateFileName="")) returned 1 [0236.662] wcscmp (_String1="PH02208U.BMP", _String2=".") returned 1 [0236.662] wcscmp (_String1="PH02208U.BMP", _String2="..") returned 1 [0236.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041608 [0236.663] wcscpy (in: _Dest=0x8041608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.663] wcscat (in: _Dest=0x8041608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.663] wcscat (in: _Dest=0x8041608, _Source="PH02208U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" [0236.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0236.664] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe341da00, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe341da00, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02223U.BMP", cAlternateFileName="")) returned 1 [0236.664] wcscmp (_String1="PH02223U.BMP", _String2=".") returned 1 [0236.664] wcscmp (_String1="PH02223U.BMP", _String2="..") returned 1 [0236.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041690 [0236.664] wcscpy (in: _Dest=0x8041690, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.664] wcscat (in: _Dest=0x8041690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.664] wcscat (in: _Dest=0x8041690, _Source="PH02223U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" [0236.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0236.666] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60e0b00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc60e0b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02291U.BMP", cAlternateFileName="")) returned 1 [0236.666] wcscmp (_String1="PH02291U.BMP", _String2=".") returned 1 [0236.666] wcscmp (_String1="PH02291U.BMP", _String2="..") returned 1 [0236.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041718 [0236.666] wcscpy (in: _Dest=0x8041718, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.666] wcscat (in: _Dest=0x8041718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.666] wcscat (in: _Dest=0x8041718, _Source="PH02291U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" [0236.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0236.667] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb5d000, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdb5d000, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02398U.BMP", cAlternateFileName="")) returned 1 [0236.667] wcscmp (_String1="PH02398U.BMP", _String2=".") returned 1 [0236.668] wcscmp (_String1="PH02398U.BMP", _String2="..") returned 1 [0236.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80417a0 [0236.668] wcscpy (in: _Dest=0x80417a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.668] wcscat (in: _Dest=0x80417a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.668] wcscat (in: _Dest=0x80417a0, _Source="PH02398U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" [0236.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80417a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0236.669] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02412K.JPG", cAlternateFileName="")) returned 1 [0236.669] wcscmp (_String1="PH02412K.JPG", _String2=".") returned 1 [0236.669] wcscmp (_String1="PH02412K.JPG", _String2="..") returned 1 [0236.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041828 [0236.669] wcscpy (in: _Dest=0x8041828, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.669] wcscat (in: _Dest=0x8041828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.669] wcscat (in: _Dest=0x8041828, _Source="PH02412K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" [0236.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0236.671] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa30000, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa30000, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02417U.BMP", cAlternateFileName="")) returned 1 [0236.671] wcscmp (_String1="PH02417U.BMP", _String2=".") returned 1 [0236.671] wcscmp (_String1="PH02417U.BMP", _String2="..") returned 1 [0236.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80418b0 [0236.671] wcscpy (in: _Dest=0x80418b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.671] wcscat (in: _Dest=0x80418b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.671] wcscat (in: _Dest=0x80418b0, _Source="PH02417U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" [0236.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80418b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0236.672] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ad1f00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4ad1f00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02466U.BMP", cAlternateFileName="")) returned 1 [0236.672] wcscmp (_String1="PH02466U.BMP", _String2=".") returned 1 [0236.672] wcscmp (_String1="PH02466U.BMP", _String2="..") returned 1 [0236.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041938 [0236.672] wcscpy (in: _Dest=0x8041938, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.672] wcscat (in: _Dest=0x8041938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.672] wcscat (in: _Dest=0x8041938, _Source="PH02466U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" [0236.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0236.674] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd867700, ftCreationTime.dwHighDateTime=0x1bf1182, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd867700, ftLastWriteTime.dwHighDateTime=0x1bf1182, nFileSizeHigh=0x0, nFileSizeLow=0x48fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02470U.BMP", cAlternateFileName="")) returned 1 [0236.674] wcscmp (_String1="PH02470U.BMP", _String2=".") returned 1 [0236.674] wcscmp (_String1="PH02470U.BMP", _String2="..") returned 1 [0236.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80419c0 [0236.674] wcscpy (in: _Dest=0x80419c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.674] wcscat (in: _Dest=0x80419c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.674] wcscat (in: _Dest=0x80419c0, _Source="PH02470U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" [0236.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80419c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0236.675] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd59b00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8cd59b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02503U.BMP", cAlternateFileName="")) returned 1 [0236.675] wcscmp (_String1="PH02503U.BMP", _String2=".") returned 1 [0236.675] wcscmp (_String1="PH02503U.BMP", _String2="..") returned 1 [0236.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041a48 [0236.675] wcscpy (in: _Dest=0x8041a48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.675] wcscat (in: _Dest=0x8041a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.675] wcscat (in: _Dest=0x8041a48, _Source="PH02503U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" [0236.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0236.677] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18e6c300, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18e6c300, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x8499, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02567J.JPG", cAlternateFileName="")) returned 1 [0236.677] wcscmp (_String1="PH02567J.JPG", _String2=".") returned 1 [0236.677] wcscmp (_String1="PH02567J.JPG", _String2="..") returned 1 [0236.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041ad0 [0236.677] wcscpy (in: _Dest=0x8041ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.677] wcscat (in: _Dest=0x8041ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.677] wcscat (in: _Dest=0x8041ad0, _Source="PH02567J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" [0236.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ac [0236.678] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c77e00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92c77e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x639b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736G.GIF", cAlternateFileName="")) returned 1 [0236.678] wcscmp (_String1="PH02736G.GIF", _String2=".") returned 1 [0236.678] wcscmp (_String1="PH02736G.GIF", _String2="..") returned 1 [0236.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041b58 [0236.679] wcscpy (in: _Dest=0x8041b58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.679] wcscat (in: _Dest=0x8041b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.679] wcscat (in: _Dest=0x8041b58, _Source="PH02736G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" [0236.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c0 [0236.680] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2781aa00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2781aa00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736U.BMP", cAlternateFileName="")) returned 1 [0236.680] wcscmp (_String1="PH02736U.BMP", _String2=".") returned 1 [0236.680] wcscmp (_String1="PH02736U.BMP", _String2="..") returned 1 [0236.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041be0 [0236.680] wcscpy (in: _Dest=0x8041be0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.680] wcscat (in: _Dest=0x8041be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.680] wcscat (in: _Dest=0x8041be0, _Source="PH02736U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" [0236.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2598 [0237.124] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df84200, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1df84200, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02738U.BMP", cAlternateFileName="")) returned 1 [0237.125] wcscmp (_String1="PH02738U.BMP", _String2=".") returned 1 [0237.125] wcscmp (_String1="PH02738U.BMP", _String2="..") returned 1 [0237.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041c68 [0237.125] wcscpy (in: _Dest=0x8041c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.125] wcscat (in: _Dest=0x8041c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.125] wcscat (in: _Dest=0x8041c68, _Source="PH02738U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" [0237.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0237.128] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33f700, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f33f700, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x5f2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740G.GIF", cAlternateFileName="")) returned 1 [0237.128] wcscmp (_String1="PH02740G.GIF", _String2=".") returned 1 [0237.128] wcscmp (_String1="PH02740G.GIF", _String2="..") returned 1 [0237.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041cf0 [0237.128] wcscpy (in: _Dest=0x8041cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.128] wcscat (in: _Dest=0x8041cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.128] wcscat (in: _Dest=0x8041cf0, _Source="PH02740G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" [0237.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b14 [0237.130] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b44500, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b44500, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740U.BMP", cAlternateFileName="")) returned 1 [0237.130] wcscmp (_String1="PH02740U.BMP", _String2=".") returned 1 [0237.130] wcscmp (_String1="PH02740U.BMP", _String2="..") returned 1 [0237.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041d78 [0237.130] wcscpy (in: _Dest=0x8041d78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.130] wcscat (in: _Dest=0x8041d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.130] wcscat (in: _Dest=0x8041d78, _Source="PH02740U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" [0237.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0237.131] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6f4300, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a6f4300, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x50a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742G.GIF", cAlternateFileName="")) returned 1 [0237.131] wcscmp (_String1="PH02742G.GIF", _String2=".") returned 1 [0237.131] wcscmp (_String1="PH02742G.GIF", _String2="..") returned 1 [0237.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041e00 [0237.131] wcscpy (in: _Dest=0x8041e00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.131] wcscat (in: _Dest=0x8041e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.131] wcscat (in: _Dest=0x8041e00, _Source="PH02742G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" [0237.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e4 [0237.132] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d3700, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28d3700, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742U.BMP", cAlternateFileName="")) returned 1 [0237.132] wcscmp (_String1="PH02742U.BMP", _String2=".") returned 1 [0237.132] wcscmp (_String1="PH02742U.BMP", _String2="..") returned 1 [0237.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041e88 [0237.133] wcscpy (in: _Dest=0x8041e88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.133] wcscat (in: _Dest=0x8041e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.133] wcscat (in: _Dest=0x8041e88, _Source="PH02742U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" [0237.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80 [0237.134] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbbc00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86dbbc00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x6d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02743G.GIF", cAlternateFileName="")) returned 1 [0237.134] wcscmp (_String1="PH02743G.GIF", _String2=".") returned 1 [0237.134] wcscmp (_String1="PH02743G.GIF", _String2="..") returned 1 [0237.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041f10 [0237.134] wcscpy (in: _Dest=0x8041f10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.134] wcscat (in: _Dest=0x8041f10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.134] wcscat (in: _Dest=0x8041f10, _Source="PH02743G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" [0237.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0237.135] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79becd00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79becd00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x5e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746G.GIF", cAlternateFileName="")) returned 1 [0237.135] wcscmp (_String1="PH02746G.GIF", _String2=".") returned 1 [0237.135] wcscmp (_String1="PH02746G.GIF", _String2="..") returned 1 [0237.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8041f98 [0237.135] wcscpy (in: _Dest=0x8041f98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.135] wcscat (in: _Dest=0x8041f98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.135] wcscat (in: _Dest=0x8041f98, _Source="PH02746G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" [0237.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8041f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0237.137] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa34fc00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa34fc00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746U.BMP", cAlternateFileName="")) returned 1 [0237.137] wcscmp (_String1="PH02746U.BMP", _String2=".") returned 1 [0237.137] wcscmp (_String1="PH02746U.BMP", _String2="..") returned 1 [0237.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8042020 [0237.137] wcscpy (in: _Dest=0x8042020, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.137] wcscat (in: _Dest=0x8042020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.137] wcscat (in: _Dest=0x8042020, _Source="PH02746U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" [0237.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8042020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0237.138] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7297bf00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7297bf00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x6090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748G.GIF", cAlternateFileName="")) returned 1 [0237.138] wcscmp (_String1="PH02748G.GIF", _String2=".") returned 1 [0237.138] wcscmp (_String1="PH02748G.GIF", _String2="..") returned 1 [0237.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80420a8 [0237.138] wcscpy (in: _Dest=0x80420a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.138] wcscat (in: _Dest=0x80420a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.139] wcscat (in: _Dest=0x80420a8, _Source="PH02748G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" [0237.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80420a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0237.140] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1dcc100, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1dcc100, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748U.BMP", cAlternateFileName="")) returned 1 [0237.140] wcscmp (_String1="PH02748U.BMP", _String2=".") returned 1 [0237.140] wcscmp (_String1="PH02748U.BMP", _String2="..") returned 1 [0237.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8042130 [0237.140] wcscpy (in: _Dest=0x8042130, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.140] wcscat (in: _Dest=0x8042130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.140] wcscat (in: _Dest=0x8042130, _Source="PH02748U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" [0237.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8042130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0237.141] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x690e5700, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x690e5700, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x8795, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749G.GIF", cAlternateFileName="")) returned 1 [0237.141] wcscmp (_String1="PH02749G.GIF", _String2=".") returned 1 [0237.141] wcscmp (_String1="PH02749G.GIF", _String2="..") returned 1 [0237.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80421b8 [0237.141] wcscpy (in: _Dest=0x80421b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.141] wcscat (in: _Dest=0x80421b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.141] wcscat (in: _Dest=0x80421b8, _Source="PH02749G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" [0237.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80421b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0237.142] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb366a00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb366a00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749U.BMP", cAlternateFileName="")) returned 1 [0237.142] wcscmp (_String1="PH02749U.BMP", _String2=".") returned 1 [0237.142] wcscmp (_String1="PH02749U.BMP", _String2="..") returned 1 [0237.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8042240 [0237.142] wcscpy (in: _Dest=0x8042240, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.142] wcscat (in: _Dest=0x8042240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.142] wcscat (in: _Dest=0x8042240, _Source="PH02749U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" [0237.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8042240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0237.143] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x657ad000, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x657ad000, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x64c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750G.GIF", cAlternateFileName="")) returned 1 [0237.143] wcscmp (_String1="PH02750G.GIF", _String2=".") returned 1 [0237.143] wcscmp (_String1="PH02750G.GIF", _String2="..") returned 1 [0237.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80422c8 [0237.143] wcscpy (in: _Dest=0x80422c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.143] wcscat (in: _Dest=0x80422c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.143] wcscat (in: _Dest=0x80422c8, _Source="PH02750G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" [0237.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80422c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0237.147] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5918100, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5918100, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x16f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750U.BMP", cAlternateFileName="")) returned 1 [0237.231] wcscmp (_String1="PH02750U.BMP", _String2=".") returned 1 [0237.231] wcscmp (_String1="PH02750U.BMP", _String2="..") returned 1 [0237.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8042350 [0237.231] wcscpy (in: _Dest=0x8042350, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.231] wcscat (in: _Dest=0x8042350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.231] wcscat (in: _Dest=0x8042350, _Source="PH02750U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" [0237.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8042350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f8 [0237.232] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f84ef00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f84ef00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0xc382, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752G.GIF", cAlternateFileName="")) returned 1 [0237.232] wcscmp (_String1="PH02752G.GIF", _String2=".") returned 1 [0237.232] wcscmp (_String1="PH02752G.GIF", _String2="..") returned 1 [0237.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80423d8 [0237.232] wcscpy (in: _Dest=0x80423d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.232] wcscat (in: _Dest=0x80423d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.232] wcscat (in: _Dest=0x80423d8, _Source="PH02752G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" [0237.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80423d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0237.233] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dab7700, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1dab7700, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752U.BMP", cAlternateFileName="")) returned 1 [0237.233] wcscmp (_String1="PH02752U.BMP", _String2=".") returned 1 [0237.233] wcscmp (_String1="PH02752U.BMP", _String2="..") returned 1 [0237.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8042460 [0237.233] wcscpy (in: _Dest=0x8042460, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.233] wcscat (in: _Dest=0x8042460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.233] wcscat (in: _Dest=0x8042460, _Source="PH02752U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" [0237.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8042460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2668 [0237.234] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821b0600, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x821b0600, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02753U.BMP", cAlternateFileName="")) returned 1 [0237.234] wcscmp (_String1="PH02753U.BMP", _String2=".") returned 1 [0237.234] wcscmp (_String1="PH02753U.BMP", _String2="..") returned 1 [0237.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80424e8 [0237.234] wcscpy (in: _Dest=0x80424e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.234] wcscat (in: _Dest=0x80424e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.234] wcscat (in: _Dest=0x80424e8, _Source="PH02753U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" [0237.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80424e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2678 [0237.235] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c2cb00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79c2cb00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02754U.BMP", cAlternateFileName="")) returned 1 [0237.235] wcscmp (_String1="PH02754U.BMP", _String2=".") returned 1 [0237.235] wcscmp (_String1="PH02754U.BMP", _String2="..") returned 1 [0237.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8042570 [0237.235] wcscpy (in: _Dest=0x8042570, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.235] wcscat (in: _Dest=0x8042570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.236] wcscat (in: _Dest=0x8042570, _Source="PH02754U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" [0237.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8042570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28cc [0237.237] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a438200, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a438200, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02755U.BMP", cAlternateFileName="")) returned 1 [0237.237] wcscmp (_String1="PH02755U.BMP", _String2=".") returned 1 [0237.237] wcscmp (_String1="PH02755U.BMP", _String2="..") returned 1 [0237.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80425f8 [0237.237] wcscpy (in: _Dest=0x80425f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.237] wcscat (in: _Dest=0x80425f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.237] wcscat (in: _Dest=0x80425f8, _Source="PH02755U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" [0237.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80425f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb8 [0237.238] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60ba1a00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60ba1a00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02756U.BMP", cAlternateFileName="")) returned 1 [0237.238] wcscmp (_String1="PH02756U.BMP", _String2=".") returned 1 [0237.238] wcscmp (_String1="PH02756U.BMP", _String2="..") returned 1 [0237.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8042680 [0237.238] wcscpy (in: _Dest=0x8042680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.238] wcscat (in: _Dest=0x8042680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.238] wcscat (in: _Dest=0x8042680, _Source="PH02756U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" [0237.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8042680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a28 [0237.239] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x539d2b00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x539d2b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02757U.BMP", cAlternateFileName="")) returned 1 [0237.239] wcscmp (_String1="PH02757U.BMP", _String2=".") returned 1 [0237.239] wcscmp (_String1="PH02757U.BMP", _String2="..") returned 1 [0237.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8042708 [0237.239] wcscpy (in: _Dest=0x8042708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.239] wcscat (in: _Dest=0x8042708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.239] wcscat (in: _Dest=0x8042708, _Source="PH02757U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" [0237.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8042708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0237.240] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf6d400, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3cf6d400, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x307f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02758U.BMP", cAlternateFileName="")) returned 1 [0237.240] wcscmp (_String1="PH02758U.BMP", _String2=".") returned 1 [0237.240] wcscmp (_String1="PH02758U.BMP", _String2="..") returned 1 [0237.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0237.240] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.240] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.240] wcscat (in: _Dest=0x3f2f528, _Source="PH02758U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" [0237.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0237.241] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8578600, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8578600, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0xa0d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02759J.JPG", cAlternateFileName="")) returned 1 [0237.241] wcscmp (_String1="PH02759J.JPG", _String2=".") returned 1 [0237.241] wcscmp (_String1="PH02759J.JPG", _String2="..") returned 1 [0237.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc10 [0237.241] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.241] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.241] wcscat (in: _Dest=0x3f2fc10, _Source="PH02759J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" [0237.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0237.242] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e51b00, ftCreationTime.dwHighDateTime=0x1bd4eb5, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91e51b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb5, nFileSizeHigh=0x0, nFileSizeLow=0xc5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02810J.JPG", cAlternateFileName="")) returned 1 [0237.242] wcscmp (_String1="PH02810J.JPG", _String2=".") returned 1 [0237.242] wcscmp (_String1="PH02810J.JPG", _String2="..") returned 1 [0237.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f312e8 [0237.243] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.243] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.243] wcscat (in: _Dest=0x3f312e8, _Source="PH02810J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" [0237.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0237.244] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164d5900, ftCreationTime.dwHighDateTime=0x1bd4c7e, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x164d5900, ftLastWriteTime.dwHighDateTime=0x1bd4c7e, nFileSizeHigh=0x0, nFileSizeLow=0xf438, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02829J.JPG", cAlternateFileName="")) returned 1 [0237.244] wcscmp (_String1="PH02829J.JPG", _String2=".") returned 1 [0237.244] wcscmp (_String1="PH02829J.JPG", _String2="..") returned 1 [0237.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f8e0 [0237.244] wcscpy (in: _Dest=0x3f2f8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.244] wcscat (in: _Dest=0x3f2f8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.244] wcscat (in: _Dest=0x3f2f8e0, _Source="PH02829J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" [0237.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0237.247] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6c2600, ftCreationTime.dwHighDateTime=0x1bd4ec3, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb6c2600, ftLastWriteTime.dwHighDateTime=0x1bd4ec3, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02845G.GIF", cAlternateFileName="")) returned 1 [0237.247] wcscmp (_String1="PH02845G.GIF", _String2=".") returned 1 [0237.247] wcscmp (_String1="PH02845G.GIF", _String2="..") returned 1 [0237.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f306b0 [0237.248] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.248] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.248] wcscat (in: _Dest=0x3f306b0, _Source="PH02845G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" [0237.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0237.249] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02897J.JPG", cAlternateFileName="")) returned 1 [0237.249] wcscmp (_String1="PH02897J.JPG", _String2=".") returned 1 [0237.249] wcscmp (_String1="PH02897J.JPG", _String2="..") returned 1 [0237.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f968 [0237.249] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.249] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.249] wcscat (in: _Dest=0x3f2f968, _Source="PH02897J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" [0237.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0237.250] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762b4600, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762b4600, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x3c76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03011U.BMP", cAlternateFileName="")) returned 1 [0237.250] wcscmp (_String1="PH03011U.BMP", _String2=".") returned 1 [0237.250] wcscmp (_String1="PH03011U.BMP", _String2="..") returned 1 [0237.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f311d8 [0237.250] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.250] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.250] wcscat (in: _Dest=0x3f311d8, _Source="PH03011U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" [0237.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0237.251] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a907c00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a907c00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03012U.BMP", cAlternateFileName="")) returned 1 [0237.251] wcscmp (_String1="PH03012U.BMP", _String2=".") returned 1 [0237.251] wcscmp (_String1="PH03012U.BMP", _String2="..") returned 1 [0237.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31040 [0237.251] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.251] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.251] wcscat (in: _Dest=0x3f31040, _Source="PH03012U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" [0237.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0237.252] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5982da00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5982da00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x49d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03014_.GIF", cAlternateFileName="")) returned 1 [0237.252] wcscmp (_String1="PH03014_.GIF", _String2=".") returned 1 [0237.252] wcscmp (_String1="PH03014_.GIF", _String2="..") returned 1 [0237.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30e20 [0237.252] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.252] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.252] wcscat (in: _Dest=0x3f30e20, _Source="PH03014_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" [0237.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0237.253] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x78af, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03041I.JPG", cAlternateFileName="")) returned 1 [0237.253] wcscmp (_String1="PH03041I.JPG", _String2=".") returned 1 [0237.253] wcscmp (_String1="PH03041I.JPG", _String2="..") returned 1 [0237.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30a68 [0237.253] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.254] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.254] wcscat (in: _Dest=0x3f30a68, _Source="PH03041I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" [0237.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0237.254] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7450, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03143I.JPG", cAlternateFileName="")) returned 1 [0237.254] wcscmp (_String1="PH03143I.JPG", _String2=".") returned 1 [0237.254] wcscmp (_String1="PH03143I.JPG", _String2="..") returned 1 [0237.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c88 [0237.255] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.255] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.255] wcscat (in: _Dest=0x3f30c88, _Source="PH03143I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" [0237.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0237.256] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa343, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03205I.JPG", cAlternateFileName="")) returned 1 [0237.256] wcscmp (_String1="PH03205I.JPG", _String2=".") returned 1 [0237.256] wcscmp (_String1="PH03205I.JPG", _String2="..") returned 1 [0237.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fb00 [0237.256] wcscpy (in: _Dest=0x3f2fb00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.256] wcscat (in: _Dest=0x3f2fb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.256] wcscat (in: _Dest=0x3f2fb00, _Source="PH03205I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" [0237.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29cc [0237.257] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa445, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03224I.JPG", cAlternateFileName="")) returned 1 [0237.257] wcscmp (_String1="PH03224I.JPG", _String2=".") returned 1 [0237.257] wcscmp (_String1="PH03224I.JPG", _String2="..") returned 1 [0237.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30380 [0237.257] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.257] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.257] wcscat (in: _Dest=0x3f30380, _Source="PH03224I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" [0237.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0237.258] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03379I.JPG", cAlternateFileName="")) returned 1 [0237.258] wcscmp (_String1="PH03379I.JPG", _String2=".") returned 1 [0237.258] wcscmp (_String1="PH03379I.JPG", _String2="..") returned 1 [0237.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f300d8 [0237.258] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.258] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.258] wcscat (in: _Dest=0x3f300d8, _Source="PH03379I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" [0237.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0237.259] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x321f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03380I.JPG", cAlternateFileName="")) returned 1 [0237.259] wcscmp (_String1="PH03380I.JPG", _String2=".") returned 1 [0237.259] wcscmp (_String1="PH03380I.JPG", _String2="..") returned 1 [0237.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fda8 [0237.259] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.260] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.260] wcscat (in: _Dest=0x3f2fda8, _Source="PH03380I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" [0237.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2534 [0237.261] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbdae, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03425I.JPG", cAlternateFileName="")) returned 1 [0237.261] wcscmp (_String1="PH03425I.JPG", _String2=".") returned 1 [0237.261] wcscmp (_String1="PH03425I.JPG", _String2="..") returned 1 [0237.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c00 [0237.261] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.261] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.261] wcscat (in: _Dest=0x3f30c00, _Source="PH03425I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" [0237.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0237.262] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRT.WMF", cAlternateFileName="")) returned 1 [0237.262] wcscmp (_String1="PRRT.WMF", _String2=".") returned 1 [0237.262] wcscmp (_String1="PRRT.WMF", _String2="..") returned 1 [0237.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4488 [0237.262] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.262] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.262] wcscat (in: _Dest=0x3dc4488, _Source="PRRT.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" [0237.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0237.263] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0x7aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRTINST.WMF", cAlternateFileName="")) returned 1 [0237.263] wcscmp (_String1="PRRTINST.WMF", _String2=".") returned 1 [0237.263] wcscmp (_String1="PRRTINST.WMF", _String2="..") returned 1 [0237.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30b78 [0237.263] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.263] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.263] wcscat (in: _Dest=0x3f30b78, _Source="PRRTINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" [0237.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0237.264] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRETRO.WMF", cAlternateFileName="")) returned 1 [0237.265] wcscmp (_String1="PSRETRO.WMF", _String2=".") returned 1 [0237.265] wcscmp (_String1="PSRETRO.WMF", _String2="..") returned 1 [0237.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f4a0 [0237.265] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.265] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.265] wcscat (in: _Dest=0x3f2f4a0, _Source="PSRETRO.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" [0237.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aac [0237.266] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETLG.WMF", cAlternateFileName="")) returned 1 [0237.266] wcscmp (_String1="PSSKETLG.WMF", _String2=".") returned 1 [0237.266] wcscmp (_String1="PSSKETLG.WMF", _String2="..") returned 1 [0237.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fd20 [0237.266] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.266] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.266] wcscat (in: _Dest=0x3f2fd20, _Source="PSSKETLG.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" [0237.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0237.267] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x776, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETSM.WMF", cAlternateFileName="")) returned 1 [0237.267] wcscmp (_String1="PSSKETSM.WMF", _String2=".") returned 1 [0237.267] wcscmp (_String1="PSSKETSM.WMF", _String2="..") returned 1 [0237.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f301e8 [0237.267] wcscpy (in: _Dest=0x3f301e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.267] wcscat (in: _Dest=0x3f301e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.267] wcscat (in: _Dest=0x3f301e8, _Source="PSSKETSM.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" [0237.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f301e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0237.290] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb12, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSWAVY.WMF", cAlternateFileName="")) returned 1 [0237.290] wcscmp (_String1="PSWAVY.WMF", _String2=".") returned 1 [0237.290] wcscmp (_String1="PSWAVY.WMF", _String2="..") returned 1 [0237.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2feb8 [0237.291] wcscpy (in: _Dest=0x3f2feb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.291] wcscat (in: _Dest=0x3f2feb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.291] wcscat (in: _Dest=0x3f2feb8, _Source="PSWAVY.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" [0237.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2feb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0237.292] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="RE00006_.WMF", cAlternateFileName="")) returned 1 [0237.292] wcscmp (_String1="RE00006_.WMF", _String2=".") returned 1 [0237.292] wcscmp (_String1="RE00006_.WMF", _String2="..") returned 1 [0237.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30160 [0237.292] wcscpy (in: _Dest=0x3f30160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.292] wcscat (in: _Dest=0x3f30160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.292] wcscat (in: _Dest=0x3f30160, _Source="RE00006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" [0237.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0237.293] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECYCLE.WMF", cAlternateFileName="")) returned 1 [0237.293] wcscmp (_String1="RECYCLE.WMF", _String2=".") returned 1 [0237.293] wcscmp (_String1="RECYCLE.WMF", _String2="..") returned 1 [0237.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f5b0 [0237.293] wcscpy (in: _Dest=0x3f2f5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.293] wcscat (in: _Dest=0x3f2f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.293] wcscat (in: _Dest=0x3f2f5b0, _Source="RECYCLE.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" [0237.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0237.294] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x175f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_01.MID", cAlternateFileName="")) returned 1 [0237.294] wcscmp (_String1="ROAD_01.MID", _String2=".") returned 1 [0237.294] wcscmp (_String1="ROAD_01.MID", _String2="..") returned 1 [0237.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f638 [0237.294] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.294] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.294] wcscat (in: _Dest=0x3f2f638, _Source="ROAD_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" [0237.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0237.296] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x278a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAFRI_01.MID", cAlternateFileName="")) returned 1 [0237.296] wcscmp (_String1="SAFRI_01.MID", _String2=".") returned 1 [0237.296] wcscmp (_String1="SAFRI_01.MID", _String2="..") returned 1 [0237.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f308d0 [0237.296] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.296] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.296] wcscat (in: _Dest=0x3f308d0, _Source="SAFRI_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" [0237.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0237.297] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x13c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHOL_02.MID", cAlternateFileName="")) returned 1 [0238.145] wcscmp (_String1="SCHOL_02.MID", _String2=".") returned 1 [0238.145] wcscmp (_String1="SCHOL_02.MID", _String2="..") returned 1 [0238.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ffc8 [0238.145] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.145] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.145] wcscat (in: _Dest=0x3f2ffc8, _Source="SCHOL_02.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" [0238.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0238.146] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x18f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOW_01.MID", cAlternateFileName="")) returned 1 [0238.146] wcscmp (_String1="SHOW_01.MID", _String2=".") returned 1 [0238.146] wcscmp (_String1="SHOW_01.MID", _String2="..") returned 1 [0238.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30270 [0238.146] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.146] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.146] wcscat (in: _Dest=0x3f30270, _Source="SHOW_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" [0238.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0238.147] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c7200, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d0c7200, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x2a0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00256_.WMF", cAlternateFileName="")) returned 1 [0238.147] wcscmp (_String1="SL00256_.WMF", _String2=".") returned 1 [0238.147] wcscmp (_String1="SL00256_.WMF", _String2="..") returned 1 [0238.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f858 [0238.147] wcscpy (in: _Dest=0x3f2f858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.147] wcscat (in: _Dest=0x3f2f858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.147] wcscat (in: _Dest=0x3f2f858, _Source="SL00256_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" [0238.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0238.148] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3978eb00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3978eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x7ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00260_.WMF", cAlternateFileName="")) returned 1 [0238.148] wcscmp (_String1="SL00260_.WMF", _String2=".") returned 1 [0238.148] wcscmp (_String1="SL00260_.WMF", _String2="..") returned 1 [0238.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30738 [0238.148] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.148] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.148] wcscat (in: _Dest=0x3f30738, _Source="SL00260_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" [0238.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0238.149] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91b9b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc91b9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00268_.WMF", cAlternateFileName="")) returned 1 [0238.149] wcscmp (_String1="SL00268_.WMF", _String2=".") returned 1 [0238.149] wcscmp (_String1="SL00268_.WMF", _String2="..") returned 1 [0238.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30408 [0238.149] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.149] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.149] wcscat (in: _Dest=0x3f30408, _Source="SL00268_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" [0238.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0238.150] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfa7500, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4cfa7500, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x1dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00286_.WMF", cAlternateFileName="")) returned 1 [0238.150] wcscmp (_String1="SL00286_.WMF", _String2=".") returned 1 [0238.150] wcscmp (_String1="SL00286_.WMF", _String2="..") returned 1 [0238.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f307c0 [0238.151] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.151] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.151] wcscat (in: _Dest=0x3f307c0, _Source="SL00286_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" [0238.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0238.151] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde04f00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcde04f00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1268, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00298_.WMF", cAlternateFileName="")) returned 1 [0238.152] wcscmp (_String1="SL00298_.WMF", _String2=".") returned 1 [0238.152] wcscmp (_String1="SL00298_.WMF", _String2="..") returned 1 [0238.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30848 [0238.152] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.152] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.152] wcscat (in: _Dest=0x3f30848, _Source="SL00298_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" [0238.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0238.153] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd0af00, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dd0af00, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x20e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00308_.WMF", cAlternateFileName="")) returned 1 [0238.153] wcscmp (_String1="SL00308_.WMF", _String2=".") returned 1 [0238.153] wcscmp (_String1="SL00308_.WMF", _String2="..") returned 1 [0238.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f748 [0238.153] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.153] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.153] wcscat (in: _Dest=0x3f2f748, _Source="SL00308_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" [0238.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0238.154] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164b3d00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x164b3d00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00345_.WMF", cAlternateFileName="")) returned 1 [0238.154] wcscmp (_String1="SL00345_.WMF", _String2=".") returned 1 [0238.154] wcscmp (_String1="SL00345_.WMF", _String2="..") returned 1 [0238.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30ea8 [0238.154] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.154] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.154] wcscat (in: _Dest=0x3f30ea8, _Source="SL00345_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" [0238.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0238.155] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe0ce00, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefe0ce00, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00452_.WMF", cAlternateFileName="")) returned 1 [0238.155] wcscmp (_String1="SL00452_.WMF", _String2=".") returned 1 [0238.155] wcscmp (_String1="SL00452_.WMF", _String2="..") returned 1 [0238.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fe30 [0238.155] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.155] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.155] wcscat (in: _Dest=0x3f2fe30, _Source="SL00452_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" [0238.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0238.156] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5263900, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5263900, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x1db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00712_.WMF", cAlternateFileName="")) returned 1 [0238.156] wcscmp (_String1="SL00712_.WMF", _String2=".") returned 1 [0238.156] wcscmp (_String1="SL00712_.WMF", _String2="..") returned 1 [0238.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f302f8 [0238.157] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.157] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.157] wcscat (in: _Dest=0x3f302f8, _Source="SL00712_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" [0238.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0238.158] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0b1d00, ftCreationTime.dwHighDateTime=0x1bd4c60, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad0b1d00, ftLastWriteTime.dwHighDateTime=0x1bd4c60, nFileSizeHigh=0x0, nFileSizeLow=0xcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01040_.WMF", cAlternateFileName="")) returned 1 [0238.158] wcscmp (_String1="SL01040_.WMF", _String2=".") returned 1 [0238.158] wcscmp (_String1="SL01040_.WMF", _String2="..") returned 1 [0238.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f305a0 [0238.158] wcscpy (in: _Dest=0x3f305a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.158] wcscat (in: _Dest=0x3f305a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.158] wcscat (in: _Dest=0x3f305a0, _Source="SL01040_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" [0238.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f305a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0238.159] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa8c300, ftCreationTime.dwHighDateTime=0x1bd4c60, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa8c300, ftLastWriteTime.dwHighDateTime=0x1bd4c60, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01041_.WMF", cAlternateFileName="")) returned 1 [0238.159] wcscmp (_String1="SL01041_.WMF", _String2=".") returned 1 [0238.159] wcscmp (_String1="SL01041_.WMF", _String2="..") returned 1 [0238.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30490 [0238.159] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.159] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.159] wcscat (in: _Dest=0x3f30490, _Source="SL01041_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" [0238.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c [0238.162] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120c4600, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x120c4600, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x1b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01394_.WMF", cAlternateFileName="")) returned 1 [0238.162] wcscmp (_String1="SL01394_.WMF", _String2=".") returned 1 [0238.162] wcscmp (_String1="SL01394_.WMF", _String2="..") returned 1 [0238.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f9f0 [0238.162] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.162] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.162] wcscat (in: _Dest=0x3f2f9f0, _Source="SL01394_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" [0238.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0238.163] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b40b00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b40b00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01395_.WMF", cAlternateFileName="")) returned 1 [0238.163] wcscmp (_String1="SL01395_.WMF", _String2=".") returned 1 [0238.163] wcscmp (_String1="SL01395_.WMF", _String2="..") returned 1 [0238.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30518 [0238.163] wcscpy (in: _Dest=0x3f30518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.163] wcscat (in: _Dest=0x3f30518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.163] wcscat (in: _Dest=0x3f30518, _Source="SL01395_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" [0238.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0238.164] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01565_.WMF", cAlternateFileName="")) returned 1 [0238.164] wcscmp (_String1="SL01565_.WMF", _String2=".") returned 1 [0238.164] wcscmp (_String1="SL01565_.WMF", _String2="..") returned 1 [0238.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30f30 [0238.165] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.165] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.165] wcscat (in: _Dest=0x3f30f30, _Source="SL01565_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" [0238.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0238.166] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ddbc400, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5ddbc400, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x36aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00017_.WMF", cAlternateFileName="")) returned 1 [0238.166] wcscmp (_String1="SO00017_.WMF", _String2=".") returned 1 [0238.166] wcscmp (_String1="SO00017_.WMF", _String2="..") returned 1 [0238.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f7d0 [0238.166] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.166] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.166] wcscat (in: _Dest=0x3f2f7d0, _Source="SO00017_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" [0238.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0238.167] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5caa9700, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5caa9700, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x32f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00018_.WMF", cAlternateFileName="")) returned 1 [0238.167] wcscmp (_String1="SO00018_.WMF", _String2=".") returned 1 [0238.167] wcscmp (_String1="SO00018_.WMF", _String2="..") returned 1 [0238.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f418 [0238.167] wcscpy (in: _Dest=0x3f2f418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.167] wcscat (in: _Dest=0x3f2f418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.167] wcscat (in: _Dest=0x3f2f418, _Source="SO00018_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" [0238.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0238.168] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d41f00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6d41f00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x7a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00152_.WMF", cAlternateFileName="")) returned 1 [0238.168] wcscmp (_String1="SO00152_.WMF", _String2=".") returned 1 [0238.168] wcscmp (_String1="SO00152_.WMF", _String2="..") returned 1 [0238.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30958 [0238.168] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.168] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.168] wcscat (in: _Dest=0x3f30958, _Source="SO00152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" [0238.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0238.169] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaef9100, ftCreationTime.dwHighDateTime=0x1bf3c3e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaef9100, ftLastWriteTime.dwHighDateTime=0x1bf3c3e, nFileSizeHigh=0x0, nFileSizeLow=0x4754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00157_.WMF", cAlternateFileName="")) returned 1 [0238.169] wcscmp (_String1="SO00157_.WMF", _String2=".") returned 1 [0238.169] wcscmp (_String1="SO00157_.WMF", _String2="..") returned 1 [0238.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc98 [0238.170] wcscpy (in: _Dest=0x3f2fc98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.170] wcscat (in: _Dest=0x3f2fc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.170] wcscat (in: _Dest=0x3f2fc98, _Source="SO00157_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" [0238.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d04 [0238.171] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe36d6d00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe36d6d00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00159_.WMF", cAlternateFileName="")) returned 1 [0238.171] wcscmp (_String1="SO00159_.WMF", _String2=".") returned 1 [0238.171] wcscmp (_String1="SO00159_.WMF", _String2="..") returned 1 [0238.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30fb8 [0238.171] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.171] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.171] wcscat (in: _Dest=0x3f30fb8, _Source="SO00159_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" [0238.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0238.172] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4ab700, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd4ab700, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x35b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00166_.WMF", cAlternateFileName="")) returned 1 [0238.172] wcscmp (_String1="SO00166_.WMF", _String2=".") returned 1 [0238.172] wcscmp (_String1="SO00166_.WMF", _String2="..") returned 1 [0238.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30628 [0238.172] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.172] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.172] wcscat (in: _Dest=0x3f30628, _Source="SO00166_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" [0238.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd8 [0238.173] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcae85d00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcae85d00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00168_.WMF", cAlternateFileName="")) returned 1 [0238.173] wcscmp (_String1="SO00168_.WMF", _String2=".") returned 1 [0238.173] wcscmp (_String1="SO00168_.WMF", _String2="..") returned 1 [0238.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31370 [0238.174] wcscpy (in: _Dest=0x3f31370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.174] wcscat (in: _Dest=0x3f31370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.174] wcscat (in: _Dest=0x3f31370, _Source="SO00168_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" [0238.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0238.175] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9b73000, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9b73000, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x2242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00170_.WMF", cAlternateFileName="")) returned 1 [0238.175] wcscmp (_String1="SO00170_.WMF", _String2=".") returned 1 [0238.175] wcscmp (_String1="SO00170_.WMF", _String2="..") returned 1 [0238.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ff40 [0238.175] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.175] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.175] wcscat (in: _Dest=0x3f2ff40, _Source="SO00170_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" [0238.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0238.176] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02dc800, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc02dc800, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x8f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00177_.WMF", cAlternateFileName="")) returned 1 [0238.176] wcscmp (_String1="SO00177_.WMF", _String2=".") returned 1 [0238.176] wcscmp (_String1="SO00177_.WMF", _String2="..") returned 1 [0238.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30050 [0238.176] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.176] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.176] wcscat (in: _Dest=0x3f30050, _Source="SO00177_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" [0238.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0238.177] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x283c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00183_.WMF", cAlternateFileName="")) returned 1 [0238.177] wcscmp (_String1="SO00183_.WMF", _String2=".") returned 1 [0238.177] wcscmp (_String1="SO00183_.WMF", _String2="..") returned 1 [0238.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0238.177] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.177] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.177] wcscat (in: _Dest=0x3f310c8, _Source="SO00183_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" [0238.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0238.178] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7d58d00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7d58d00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x514c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00190_.WMF", cAlternateFileName="")) returned 1 [0238.178] wcscmp (_String1="SO00190_.WMF", _String2=".") returned 1 [0238.178] wcscmp (_String1="SO00190_.WMF", _String2="..") returned 1 [0238.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f998 [0238.178] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.178] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.178] wcscat (in: _Dest=0x3e1f998, _Source="SO00190_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" [0238.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf8 [0238.179] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2090, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00191_.WMF", cAlternateFileName="")) returned 1 [0238.179] wcscmp (_String1="SO00191_.WMF", _String2=".") returned 1 [0238.180] wcscmp (_String1="SO00191_.WMF", _String2="..") returned 1 [0238.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ecd8 [0238.180] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.180] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.180] wcscat (in: _Dest=0x3e1ecd8, _Source="SO00191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" [0238.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b4 [0238.181] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00192_.WMF", cAlternateFileName="")) returned 1 [0238.181] wcscmp (_String1="SO00192_.WMF", _String2=".") returned 1 [0238.181] wcscmp (_String1="SO00192_.WMF", _String2="..") returned 1 [0238.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f668 [0238.181] wcscpy (in: _Dest=0x3e1f668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.181] wcscat (in: _Dest=0x3e1f668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.181] wcscat (in: _Dest=0x3e1f668, _Source="SO00192_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" [0238.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a0 [0238.182] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4420600, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4420600, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x27c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00194_.WMF", cAlternateFileName="")) returned 1 [0238.182] wcscmp (_String1="SO00194_.WMF", _String2=".") returned 1 [0238.182] wcscmp (_String1="SO00194_.WMF", _String2="..") returned 1 [0238.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eb40 [0238.182] wcscpy (in: _Dest=0x3e1eb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.182] wcscat (in: _Dest=0x3e1eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.182] wcscat (in: _Dest=0x3e1eb40, _Source="SO00194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" [0238.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2698 [0238.183] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x238c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00197_.WMF", cAlternateFileName="")) returned 1 [0238.183] wcscmp (_String1="SO00197_.WMF", _String2=".") returned 1 [0238.183] wcscmp (_String1="SO00197_.WMF", _String2="..") returned 1 [0238.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f090 [0238.184] wcscpy (in: _Dest=0x3e1f090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.184] wcscat (in: _Dest=0x3e1f090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.184] wcscat (in: _Dest=0x3e1f090, _Source="SO00197_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" [0238.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2694 [0238.185] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4c2500, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae4c2500, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x15fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00199_.WMF", cAlternateFileName="")) returned 1 [0238.185] wcscmp (_String1="SO00199_.WMF", _String2=".") returned 1 [0238.185] wcscmp (_String1="SO00199_.WMF", _String2="..") returned 1 [0238.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f3c0 [0238.185] wcscpy (in: _Dest=0x3e1f3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.185] wcscat (in: _Dest=0x3e1f3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.185] wcscat (in: _Dest=0x3e1f3c0, _Source="SO00199_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" [0238.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2690 [0238.186] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe9cb00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabe9cb00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x2926, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00200_.WMF", cAlternateFileName="")) returned 1 [0238.186] wcscmp (_String1="SO00200_.WMF", _String2=".") returned 1 [0238.186] wcscmp (_String1="SO00200_.WMF", _String2="..") returned 1 [0238.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ef80 [0238.186] wcscpy (in: _Dest=0x3e1ef80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.186] wcscat (in: _Dest=0x3e1ef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.186] wcscat (in: _Dest=0x3e1ef80, _Source="SO00200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" [0238.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b64 [0238.187] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30def00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa30def00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00208_.WMF", cAlternateFileName="")) returned 1 [0238.187] wcscmp (_String1="SO00208_.WMF", _String2=".") returned 1 [0238.187] wcscmp (_String1="SO00208_.WMF", _String2="..") returned 1 [0238.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fbb8 [0238.187] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.187] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.187] wcscat (in: _Dest=0x3e1fbb8, _Source="SO00208_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" [0238.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0238.188] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be6e100, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9be6e100, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x4f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00212_.WMF", cAlternateFileName="")) returned 1 [0238.197] wcscmp (_String1="SO00212_.WMF", _String2=".") returned 1 [0238.198] wcscmp (_String1="SO00212_.WMF", _String2="..") returned 1 [0238.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f6f0 [0238.198] wcscpy (in: _Dest=0x3e1f6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.198] wcscat (in: _Dest=0x3e1f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.198] wcscat (in: _Dest=0x3e1f6f0, _Source="SO00212_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" [0238.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0238.198] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00221_.WMF", cAlternateFileName="")) returned 1 [0238.198] wcscmp (_String1="SO00221_.WMF", _String2=".") returned 1 [0238.199] wcscmp (_String1="SO00221_.WMF", _String2="..") returned 1 [0238.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ed60 [0238.199] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.199] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.199] wcscat (in: _Dest=0x3e1ed60, _Source="SO00221_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" [0238.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0238.200] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00222_.WMF", cAlternateFileName="")) returned 1 [0238.200] wcscmp (_String1="SO00222_.WMF", _String2=".") returned 1 [0238.200] wcscmp (_String1="SO00222_.WMF", _String2="..") returned 1 [0238.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f778 [0238.200] wcscpy (in: _Dest=0x3e1f778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.200] wcscat (in: _Dest=0x3e1f778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.200] wcscat (in: _Dest=0x3e1f778, _Source="SO00222_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" [0238.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0238.201] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3642, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00223_.WMF", cAlternateFileName="")) returned 1 [0238.201] wcscmp (_String1="SO00223_.WMF", _String2=".") returned 1 [0238.201] wcscmp (_String1="SO00223_.WMF", _String2="..") returned 1 [0238.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ec50 [0238.201] wcscpy (in: _Dest=0x3e1ec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.201] wcscat (in: _Dest=0x3e1ec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.201] wcscat (in: _Dest=0x3e1ec50, _Source="SO00223_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" [0238.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0238.202] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a88df00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a88df00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x476e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00257_.WMF", cAlternateFileName="")) returned 1 [0238.202] wcscmp (_String1="SO00257_.WMF", _String2=".") returned 1 [0238.202] wcscmp (_String1="SO00257_.WMF", _String2="..") returned 1 [0238.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fc40 [0238.202] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.202] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.202] wcscat (in: _Dest=0x3e1fc40, _Source="SO00257_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" [0238.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0238.203] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b14d00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24b14d00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0xd8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00289_.WMF", cAlternateFileName="")) returned 1 [0238.203] wcscmp (_String1="SO00289_.WMF", _String2=".") returned 1 [0238.203] wcscmp (_String1="SO00289_.WMF", _String2="..") returned 1 [0238.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f4d0 [0238.204] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.204] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.204] wcscat (in: _Dest=0x3e1f4d0, _Source="SO00289_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" [0238.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0238.204] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f87fa00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f87fa00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x10cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00299_.WMF", cAlternateFileName="")) returned 1 [0238.204] wcscmp (_String1="SO00299_.WMF", _String2=".") returned 1 [0238.204] wcscmp (_String1="SO00299_.WMF", _String2="..") returned 1 [0238.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f448 [0238.205] wcscpy (in: _Dest=0x3e1f448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.205] wcscat (in: _Dest=0x3e1f448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.205] wcscat (in: _Dest=0x3e1f448, _Source="SO00299_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" [0238.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0238.205] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12b7b600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12b7b600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x7a04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00305_.WMF", cAlternateFileName="")) returned 1 [0238.205] wcscmp (_String1="SO00305_.WMF", _String2=".") returned 1 [0238.205] wcscmp (_String1="SO00305_.WMF", _String2="..") returned 1 [0238.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e202a0 [0238.206] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.206] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.206] wcscat (in: _Dest=0x3e202a0, _Source="SO00305_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" [0238.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0238.206] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10555c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10555c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xee4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00333_.WMF", cAlternateFileName="")) returned 1 [0238.206] wcscmp (_String1="SO00333_.WMF", _String2=".") returned 1 [0238.206] wcscmp (_String1="SO00333_.WMF", _String2="..") returned 1 [0238.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f118 [0238.207] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.207] wcscat (in: _Dest=0x3e1f118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.207] wcscat (in: _Dest=0x3e1f118, _Source="SO00333_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" [0238.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0238.207] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56152300, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56152300, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x8b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00345_.WMF", cAlternateFileName="")) returned 1 [0238.207] wcscmp (_String1="SO00345_.WMF", _String2=".") returned 1 [0238.208] wcscmp (_String1="SO00345_.WMF", _String2="..") returned 1 [0238.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f2b0 [0238.208] wcscpy (in: _Dest=0x3e1f2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.208] wcscat (in: _Dest=0x3e1f2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.208] wcscat (in: _Dest=0x3e1f2b0, _Source="SO00345_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" [0238.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0238.208] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b92700, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50b92700, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0xbbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00350_.WMF", cAlternateFileName="")) returned 1 [0238.209] wcscmp (_String1="SO00350_.WMF", _String2=".") returned 1 [0238.209] wcscmp (_String1="SO00350_.WMF", _String2="..") returned 1 [0238.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f558 [0238.209] wcscpy (in: _Dest=0x3e1f558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.209] wcscat (in: _Dest=0x3e1f558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.209] wcscat (in: _Dest=0x3e1f558, _Source="SO00350_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" [0238.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08 [0238.210] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b92700, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50b92700, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x934c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00352_.WMF", cAlternateFileName="")) returned 1 [0238.210] wcscmp (_String1="SO00352_.WMF", _String2=".") returned 1 [0238.210] wcscmp (_String1="SO00352_.WMF", _String2="..") returned 1 [0238.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f008 [0238.210] wcscpy (in: _Dest=0x3e1f008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.210] wcscat (in: _Dest=0x3e1f008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.210] wcscat (in: _Dest=0x3e1f008, _Source="SO00352_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" [0238.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34 [0238.211] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5881400, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5881400, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00364_.WMF", cAlternateFileName="")) returned 1 [0238.211] wcscmp (_String1="SO00364_.WMF", _String2=".") returned 1 [0238.211] wcscmp (_String1="SO00364_.WMF", _String2="..") returned 1 [0238.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ff70 [0238.211] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.211] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.211] wcscat (in: _Dest=0x3e1ff70, _Source="SO00364_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" [0238.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0238.212] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b94100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc6b94100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x51ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00367_.WMF", cAlternateFileName="")) returned 1 [0238.212] wcscmp (_String1="SO00367_.WMF", _String2=".") returned 1 [0238.212] wcscmp (_String1="SO00367_.WMF", _String2="..") returned 1 [0238.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f228 [0238.212] wcscpy (in: _Dest=0x3e1f228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.212] wcscat (in: _Dest=0x3e1f228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.212] wcscat (in: _Dest=0x3e1f228, _Source="SO00367_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" [0238.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0238.213] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3308, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00373_.WMF", cAlternateFileName="")) returned 1 [0238.213] wcscmp (_String1="SO00373_.WMF", _String2=".") returned 1 [0238.213] wcscmp (_String1="SO00373_.WMF", _String2="..") returned 1 [0238.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ede8 [0238.213] wcscpy (in: _Dest=0x3e1ede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.214] wcscat (in: _Dest=0x3e1ede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.214] wcscat (in: _Dest=0x3e1ede8, _Source="SO00373_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" [0238.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0238.215] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ea6e00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7ea6e00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x27f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00382_.WMF", cAlternateFileName="")) returned 1 [0238.215] wcscmp (_String1="SO00382_.WMF", _String2=".") returned 1 [0238.215] wcscmp (_String1="SO00382_.WMF", _String2="..") returned 1 [0238.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f1a0 [0238.215] wcscpy (in: _Dest=0x3e1f1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.215] wcscat (in: _Dest=0x3e1f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.215] wcscat (in: _Dest=0x3e1f1a0, _Source="SO00382_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" [0238.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0238.216] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbe2f00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbcbe2f00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00390_.WMF", cAlternateFileName="")) returned 1 [0238.216] wcscmp (_String1="SO00390_.WMF", _String2=".") returned 1 [0238.216] wcscmp (_String1="SO00390_.WMF", _String2="..") returned 1 [0238.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f800 [0238.216] wcscpy (in: _Dest=0x3e1f800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.216] wcscat (in: _Dest=0x3e1f800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.216] wcscat (in: _Dest=0x3e1f800, _Source="SO00390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" [0238.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0238.217] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f97b00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7f97b00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00391_.WMF", cAlternateFileName="")) returned 1 [0238.217] wcscmp (_String1="SO00391_.WMF", _String2=".") returned 1 [0238.217] wcscmp (_String1="SO00391_.WMF", _String2="..") returned 1 [0238.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fff8 [0238.217] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.217] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.217] wcscat (in: _Dest=0x3e1fff8, _Source="SO00391_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" [0238.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0238.218] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1a5d00, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef1a5d00, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x704e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00416_.WMF", cAlternateFileName="")) returned 1 [0238.218] wcscmp (_String1="SO00416_.WMF", _String2=".") returned 1 [0238.218] wcscmp (_String1="SO00416_.WMF", _String2="..") returned 1 [0238.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eef8 [0238.218] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.218] wcscat (in: _Dest=0x3e1eef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.218] wcscat (in: _Dest=0x3e1eef8, _Source="SO00416_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" [0238.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0238.219] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb7df500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcb7df500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x143c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00423_.WMF", cAlternateFileName="")) returned 1 [0238.219] wcscmp (_String1="SO00423_.WMF", _String2=".") returned 1 [0238.219] wcscmp (_String1="SO00423_.WMF", _String2="..") returned 1 [0238.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f338 [0238.219] wcscpy (in: _Dest=0x3e1f338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.219] wcscat (in: _Dest=0x3e1f338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.219] wcscat (in: _Dest=0x3e1f338, _Source="SO00423_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" [0238.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0238.220] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf242f00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf242f00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1544, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00444_.WMF", cAlternateFileName="")) returned 1 [0238.220] wcscmp (_String1="SO00444_.WMF", _String2=".") returned 1 [0238.220] wcscmp (_String1="SO00444_.WMF", _String2="..") returned 1 [0238.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ebc8 [0238.220] wcscpy (in: _Dest=0x3e1ebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.220] wcscat (in: _Dest=0x3e1ebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.220] wcscat (in: _Dest=0x3e1ebc8, _Source="SO00444_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" [0238.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0238.221] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa497e100, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa497e100, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00452_.WMF", cAlternateFileName="")) returned 1 [0238.221] wcscmp (_String1="SO00452_.WMF", _String2=".") returned 1 [0238.221] wcscmp (_String1="SO00452_.WMF", _String2="..") returned 1 [0238.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f5e0 [0238.221] wcscpy (in: _Dest=0x3e1f5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.221] wcscat (in: _Dest=0x3e1f5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.221] wcscat (in: _Dest=0x3e1f5e0, _Source="SO00452_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" [0238.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac0 [0238.222] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ea20000, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9ea20000, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x59ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00453_.WMF", cAlternateFileName="")) returned 1 [0238.222] wcscmp (_String1="SO00453_.WMF", _String2=".") returned 1 [0238.222] wcscmp (_String1="SO00453_.WMF", _String2="..") returned 1 [0238.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053a78 [0238.222] wcscpy (in: _Dest=0x8053a78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.222] wcscat (in: _Dest=0x8053a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.222] wcscat (in: _Dest=0x8053a78, _Source="SO00453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" [0238.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0238.223] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3582fb00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3582fb00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0xb6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00454_.WMF", cAlternateFileName="")) returned 1 [0238.223] wcscmp (_String1="SO00454_.WMF", _String2=".") returned 1 [0238.223] wcscmp (_String1="SO00454_.WMF", _String2="..") returned 1 [0238.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80540d8 [0238.223] wcscpy (in: _Dest=0x80540d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.223] wcscat (in: _Dest=0x80540d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.223] wcscat (in: _Dest=0x80540d8, _Source="SO00454_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" [0238.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80540d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0238.317] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00466_.WMF", cAlternateFileName="")) returned 1 [0238.317] wcscmp (_String1="SO00466_.WMF", _String2=".") returned 1 [0238.317] wcscmp (_String1="SO00466_.WMF", _String2="..") returned 1 [0238.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053968 [0238.317] wcscpy (in: _Dest=0x8053968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.318] wcscat (in: _Dest=0x8053968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.318] wcscat (in: _Dest=0x8053968, _Source="SO00466_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" [0238.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0238.318] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf30200, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf30200, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00476_.WMF", cAlternateFileName="")) returned 1 [0238.319] wcscmp (_String1="SO00476_.WMF", _String2=".") returned 1 [0238.319] wcscmp (_String1="SO00476_.WMF", _String2="..") returned 1 [0238.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054628 [0238.319] wcscpy (in: _Dest=0x8054628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.319] wcscat (in: _Dest=0x8054628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.319] wcscat (in: _Dest=0x8054628, _Source="SO00476_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" [0238.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0238.320] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd173d600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd173d600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x5b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00479_.WMF", cAlternateFileName="")) returned 1 [0238.320] wcscmp (_String1="SO00479_.WMF", _String2=".") returned 1 [0238.320] wcscmp (_String1="SO00479_.WMF", _String2="..") returned 1 [0238.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053390 [0238.320] wcscpy (in: _Dest=0x8053390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.320] wcscat (in: _Dest=0x8053390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.320] wcscat (in: _Dest=0x8053390, _Source="SO00479_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" [0238.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0238.321] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1d500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc1d500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00483_.WMF", cAlternateFileName="")) returned 1 [0238.321] wcscmp (_String1="SO00483_.WMF", _String2=".") returned 1 [0238.321] wcscmp (_String1="SO00483_.WMF", _String2="..") returned 1 [0238.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053d20 [0238.321] wcscpy (in: _Dest=0x8053d20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.321] wcscat (in: _Dest=0x8053d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.321] wcscat (in: _Dest=0x8053d20, _Source="SO00483_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" [0238.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0238.322] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30057800, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30057800, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00486_.WMF", cAlternateFileName="")) returned 1 [0238.322] wcscmp (_String1="SO00486_.WMF", _String2=".") returned 1 [0238.322] wcscmp (_String1="SO00486_.WMF", _String2="..") returned 1 [0238.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80538e0 [0238.323] wcscpy (in: _Dest=0x80538e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.323] wcscat (in: _Dest=0x80538e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.323] wcscat (in: _Dest=0x80538e0, _Source="SO00486_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" [0238.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80538e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0238.324] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f88800, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49f88800, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0xaa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00505_.WMF", cAlternateFileName="")) returned 1 [0238.324] wcscmp (_String1="SO00505_.WMF", _String2=".") returned 1 [0238.324] wcscmp (_String1="SO00505_.WMF", _String2="..") returned 1 [0238.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053da8 [0238.324] wcscpy (in: _Dest=0x8053da8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.324] wcscat (in: _Dest=0x8053da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.324] wcscat (in: _Dest=0x8053da8, _Source="SO00505_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" [0238.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0238.325] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90a800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb90a800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00513_.WMF", cAlternateFileName="")) returned 1 [0238.325] wcscmp (_String1="SO00513_.WMF", _String2=".") returned 1 [0238.325] wcscmp (_String1="SO00513_.WMF", _String2="..") returned 1 [0238.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053418 [0238.325] wcscpy (in: _Dest=0x8053418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.325] wcscat (in: _Dest=0x8053418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.325] wcscat (in: _Dest=0x8053418, _Source="SO00513_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" [0238.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0238.326] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2602, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00555_.WMF", cAlternateFileName="")) returned 1 [0238.326] wcscmp (_String1="SO00555_.WMF", _String2=".") returned 1 [0238.326] wcscmp (_String1="SO00555_.WMF", _String2="..") returned 1 [0238.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053280 [0238.326] wcscpy (in: _Dest=0x8053280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.326] wcscat (in: _Dest=0x8053280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.326] wcscat (in: _Dest=0x8053280, _Source="SO00555_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" [0238.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc4 [0238.327] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bc7c00, ftCreationTime.dwHighDateTime=0x1c01cc1, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8bc7c00, ftLastWriteTime.dwHighDateTime=0x1c01cc1, nFileSizeHigh=0x0, nFileSizeLow=0x6260, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00603_.WMF", cAlternateFileName="")) returned 1 [0238.327] wcscmp (_String1="SO00603_.WMF", _String2=".") returned 1 [0238.327] wcscmp (_String1="SO00603_.WMF", _String2="..") returned 1 [0238.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053c10 [0238.327] wcscpy (in: _Dest=0x8053c10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.328] wcscat (in: _Dest=0x8053c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.328] wcscat (in: _Dest=0x8053c10, _Source="SO00603_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" [0238.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0238.329] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8683b00, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8683b00, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0x9c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00610_.WMF", cAlternateFileName="")) returned 1 [0238.329] wcscmp (_String1="SO00610_.WMF", _String2=".") returned 1 [0238.329] wcscmp (_String1="SO00610_.WMF", _String2="..") returned 1 [0238.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054490 [0238.329] wcscpy (in: _Dest=0x8054490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.329] wcscat (in: _Dest=0x8054490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.329] wcscat (in: _Dest=0x8054490, _Source="SO00610_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" [0238.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0238.330] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c1e400, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91c1e400, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00629_.WMF", cAlternateFileName="")) returned 1 [0238.395] wcscmp (_String1="SO00629_.WMF", _String2=".") returned 1 [0238.395] wcscmp (_String1="SO00629_.WMF", _String2="..") returned 1 [0238.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ea78 [0238.395] wcscpy (in: _Dest=0x803ea78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.395] wcscat (in: _Dest=0x803ea78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.395] wcscat (in: _Dest=0x803ea78, _Source="SO00629_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" [0238.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ea78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0238.396] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f7b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5f7b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x5006, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00633_.WMF", cAlternateFileName="")) returned 1 [0238.396] wcscmp (_String1="SO00633_.WMF", _String2=".") returned 1 [0238.396] wcscmp (_String1="SO00633_.WMF", _String2="..") returned 1 [0238.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054408 [0238.396] wcscpy (in: _Dest=0x8054408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.397] wcscat (in: _Dest=0x8054408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.397] wcscat (in: _Dest=0x8054408, _Source="SO00633_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" [0238.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0238.398] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88387c00, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88387c00, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0x1aba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00638_.WMF", cAlternateFileName="")) returned 1 [0238.398] wcscmp (_String1="SO00638_.WMF", _String2=".") returned 1 [0238.398] wcscmp (_String1="SO00638_.WMF", _String2="..") returned 1 [0238.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053638 [0238.398] wcscpy (in: _Dest=0x8053638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.398] wcscat (in: _Dest=0x8053638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.398] wcscat (in: _Dest=0x8053638, _Source="SO00638_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" [0238.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0238.399] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84a1500, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe84a1500, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00656_.WMF", cAlternateFileName="")) returned 1 [0238.399] wcscmp (_String1="SO00656_.WMF", _String2=".") returned 1 [0238.399] wcscmp (_String1="SO00656_.WMF", _String2="..") returned 1 [0238.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80536c0 [0238.399] wcscpy (in: _Dest=0x80536c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.399] wcscat (in: _Dest=0x80536c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.399] wcscat (in: _Dest=0x80536c0, _Source="SO00656_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" [0238.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80536c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0238.400] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00668_.WMF", cAlternateFileName="")) returned 1 [0238.400] wcscmp (_String1="SO00668_.WMF", _String2=".") returned 1 [0238.400] wcscmp (_String1="SO00668_.WMF", _String2="..") returned 1 [0238.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053b88 [0238.400] wcscpy (in: _Dest=0x8053b88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.400] wcscat (in: _Dest=0x8053b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.400] wcscat (in: _Dest=0x8053b88, _Source="SO00668_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" [0238.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0238.402] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00670_.WMF", cAlternateFileName="")) returned 1 [0238.402] wcscmp (_String1="SO00670_.WMF", _String2=".") returned 1 [0238.402] wcscmp (_String1="SO00670_.WMF", _String2="..") returned 1 [0238.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80535b0 [0238.402] wcscpy (in: _Dest=0x80535b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.402] wcscat (in: _Dest=0x80535b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.402] wcscat (in: _Dest=0x80535b0, _Source="SO00670_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" [0238.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80535b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a8 [0238.403] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00671_.WMF", cAlternateFileName="")) returned 1 [0238.404] wcscmp (_String1="SO00671_.WMF", _String2=".") returned 1 [0238.404] wcscmp (_String1="SO00671_.WMF", _String2="..") returned 1 [0238.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053528 [0238.404] wcscpy (in: _Dest=0x8053528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.404] wcscat (in: _Dest=0x8053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.404] wcscat (in: _Dest=0x8053528, _Source="SO00671_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" [0238.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0238.405] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1449a400, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1449a400, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x62b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00683_.WMF", cAlternateFileName="")) returned 1 [0238.405] wcscmp (_String1="SO00683_.WMF", _String2=".") returned 1 [0238.405] wcscmp (_String1="SO00683_.WMF", _String2="..") returned 1 [0238.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053748 [0238.405] wcscpy (in: _Dest=0x8053748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.405] wcscat (in: _Dest=0x8053748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.405] wcscat (in: _Dest=0x8053748, _Source="SO00683_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" [0238.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0238.407] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00694_.WMF", cAlternateFileName="")) returned 1 [0238.407] wcscmp (_String1="SO00694_.WMF", _String2=".") returned 1 [0238.407] wcscmp (_String1="SO00694_.WMF", _String2="..") returned 1 [0238.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80537d0 [0238.407] wcscpy (in: _Dest=0x80537d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.407] wcscat (in: _Dest=0x80537d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.407] wcscat (in: _Dest=0x80537d0, _Source="SO00694_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" [0238.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80537d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0238.408] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3636, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00704_.WMF", cAlternateFileName="")) returned 1 [0238.408] wcscmp (_String1="SO00704_.WMF", _String2=".") returned 1 [0238.408] wcscmp (_String1="SO00704_.WMF", _String2="..") returned 1 [0238.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054160 [0238.408] wcscpy (in: _Dest=0x8054160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.408] wcscat (in: _Dest=0x8054160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.408] wcscat (in: _Dest=0x8054160, _Source="SO00704_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" [0238.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0238.409] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbcc9000, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfbcc9000, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x16478, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00726_.WMF", cAlternateFileName="")) returned 1 [0238.409] wcscmp (_String1="SO00726_.WMF", _String2=".") returned 1 [0238.409] wcscmp (_String1="SO00726_.WMF", _String2="..") returned 1 [0238.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8052f50 [0238.409] wcscpy (in: _Dest=0x8052f50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.409] wcscat (in: _Dest=0x8052f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.410] wcscat (in: _Dest=0x8052f50, _Source="SO00726_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" [0238.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8052f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0238.411] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2543400, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2543400, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x1758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00728_.WMF", cAlternateFileName="")) returned 1 [0238.411] wcscmp (_String1="SO00728_.WMF", _String2=".") returned 1 [0238.411] wcscmp (_String1="SO00728_.WMF", _String2="..") returned 1 [0238.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053b00 [0238.411] wcscpy (in: _Dest=0x8053b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.411] wcscat (in: _Dest=0x8053b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.411] wcscat (in: _Dest=0x8053b00, _Source="SO00728_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" [0238.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0238.412] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cbc900, ftCreationTime.dwHighDateTime=0x1bd4b70, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5cbc900, ftLastWriteTime.dwHighDateTime=0x1bd4b70, nFileSizeHigh=0x0, nFileSizeLow=0x13fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00732_.WMF", cAlternateFileName="")) returned 1 [0238.412] wcscmp (_String1="SO00732_.WMF", _String2=".") returned 1 [0238.412] wcscmp (_String1="SO00732_.WMF", _String2="..") returned 1 [0238.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053858 [0238.412] wcscpy (in: _Dest=0x8053858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.412] wcscat (in: _Dest=0x8053858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.412] wcscat (in: _Dest=0x8053858, _Source="SO00732_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" [0238.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba8 [0238.413] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3696f00, ftCreationTime.dwHighDateTime=0x1bd4b70, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3696f00, ftLastWriteTime.dwHighDateTime=0x1bd4b70, nFileSizeHigh=0x0, nFileSizeLow=0x660, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00734_.WMF", cAlternateFileName="")) returned 1 [0238.413] wcscmp (_String1="SO00734_.WMF", _String2=".") returned 1 [0238.413] wcscmp (_String1="SO00734_.WMF", _String2="..") returned 1 [0238.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80539f0 [0238.414] wcscpy (in: _Dest=0x80539f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.414] wcscat (in: _Dest=0x80539f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.414] wcscat (in: _Dest=0x80539f0, _Source="SO00734_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" [0238.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80539f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d4 [0238.415] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2384200, ftCreationTime.dwHighDateTime=0x1bd4b70, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2384200, ftLastWriteTime.dwHighDateTime=0x1bd4b70, nFileSizeHigh=0x0, nFileSizeLow=0x5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00735_.WMF", cAlternateFileName="")) returned 1 [0238.415] wcscmp (_String1="SO00735_.WMF", _String2=".") returned 1 [0238.415] wcscmp (_String1="SO00735_.WMF", _String2="..") returned 1 [0238.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053fc8 [0238.415] wcscpy (in: _Dest=0x8053fc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.415] wcscat (in: _Dest=0x8053fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.415] wcscat (in: _Dest=0x8053fc8, _Source="SO00735_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" [0238.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0238.417] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec0ad00, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdec0ad00, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x184c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00736_.WMF", cAlternateFileName="")) returned 1 [0238.417] wcscmp (_String1="SO00736_.WMF", _String2=".") returned 1 [0238.417] wcscmp (_String1="SO00736_.WMF", _String2="..") returned 1 [0238.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053eb8 [0238.417] wcscpy (in: _Dest=0x8053eb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.417] wcscat (in: _Dest=0x8053eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.417] wcscat (in: _Dest=0x8053eb8, _Source="SO00736_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" [0238.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0238.418] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e4e00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92e4e00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x543a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00768_.WMF", cAlternateFileName="")) returned 1 [0238.418] wcscmp (_String1="SO00768_.WMF", _String2=".") returned 1 [0238.418] wcscmp (_String1="SO00768_.WMF", _String2="..") returned 1 [0238.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80534a0 [0238.418] wcscpy (in: _Dest=0x80534a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.419] wcscat (in: _Dest=0x80534a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.419] wcscat (in: _Dest=0x80534a0, _Source="SO00768_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" [0238.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80534a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0238.420] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ebfa00, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2ebfa00, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x16ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00783_.WMF", cAlternateFileName="")) returned 1 [0238.420] wcscmp (_String1="SO00783_.WMF", _String2=".") returned 1 [0238.420] wcscmp (_String1="SO00783_.WMF", _String2="..") returned 1 [0238.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ead8 [0238.420] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.420] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.420] wcscat (in: _Dest=0x36ead8, _Source="SO00783_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" [0238.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0238.422] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8444700, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8444700, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00820_.WMF", cAlternateFileName="")) returned 1 [0238.422] wcscmp (_String1="SO00820_.WMF", _String2=".") returned 1 [0238.422] wcscmp (_String1="SO00820_.WMF", _String2="..") returned 1 [0238.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0238.422] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.422] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.422] wcscat (in: _Dest=0x36ecf8, _Source="SO00820_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" [0238.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d18 [0238.423] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x816e3100, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x816e3100, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00828_.WMF", cAlternateFileName="")) returned 1 [0238.423] wcscmp (_String1="SO00828_.WMF", _String2=".") returned 1 [0238.423] wcscmp (_String1="SO00828_.WMF", _String2="..") returned 1 [0238.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36fc60 [0238.423] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.423] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.423] wcscat (in: _Dest=0x36fc60, _Source="SO00828_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" [0238.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0238.425] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63a0cc00, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63a0cc00, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x36da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00834_.WMF", cAlternateFileName="")) returned 1 [0238.425] wcscmp (_String1="SO00834_.WMF", _String2=".") returned 1 [0238.425] wcscmp (_String1="SO00834_.WMF", _String2="..") returned 1 [0238.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e830 [0238.425] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.425] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.425] wcscat (in: _Dest=0x36e830, _Source="SO00834_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" [0238.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0238.426] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b489100, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b489100, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x3fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00837_.WMF", cAlternateFileName="")) returned 1 [0238.426] wcscmp (_String1="SO00837_.WMF", _String2=".") returned 1 [0238.426] wcscmp (_String1="SO00837_.WMF", _String2="..") returned 1 [0238.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0238.426] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.426] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.426] wcscat (in: _Dest=0x36e500, _Source="SO00837_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" [0238.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0238.427] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1898, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00910_.WMF", cAlternateFileName="")) returned 1 [0238.427] wcscmp (_String1="SO00910_.WMF", _String2=".") returned 1 [0238.428] wcscmp (_String1="SO00910_.WMF", _String2="..") returned 1 [0238.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0238.428] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.428] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.428] wcscat (in: _Dest=0x36e478, _Source="SO00910_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" [0238.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0238.429] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00911_.WMF", cAlternateFileName="")) returned 1 [0238.429] wcscmp (_String1="SO00911_.WMF", _String2=".") returned 1 [0238.429] wcscmp (_String1="SO00911_.WMF", _String2="..") returned 1 [0238.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e588 [0238.429] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.429] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.429] wcscat (in: _Dest=0x36e588, _Source="SO00911_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" [0238.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0238.494] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x28b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00913_.WMF", cAlternateFileName="")) returned 1 [0238.494] wcscmp (_String1="SO00913_.WMF", _String2=".") returned 1 [0238.494] wcscmp (_String1="SO00913_.WMF", _String2="..") returned 1 [0238.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36f3e0 [0238.494] wcscpy (in: _Dest=0x36f3e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.494] wcscat (in: _Dest=0x36f3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.494] wcscat (in: _Dest=0x36f3e0, _Source="SO00913_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" [0238.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0238.495] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00914_.WMF", cAlternateFileName="")) returned 1 [0238.495] wcscmp (_String1="SO00914_.WMF", _String2=".") returned 1 [0238.495] wcscmp (_String1="SO00914_.WMF", _String2="..") returned 1 [0238.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a708 [0238.495] wcscpy (in: _Dest=0x309a708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.495] wcscat (in: _Dest=0x309a708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.495] wcscat (in: _Dest=0x309a708, _Source="SO00914_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" [0238.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0238.496] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00915_.WMF", cAlternateFileName="")) returned 1 [0238.496] wcscmp (_String1="SO00915_.WMF", _String2=".") returned 1 [0238.496] wcscmp (_String1="SO00915_.WMF", _String2="..") returned 1 [0238.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a680 [0238.496] wcscpy (in: _Dest=0x309a680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.496] wcscat (in: _Dest=0x309a680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.496] wcscat (in: _Dest=0x309a680, _Source="SO00915_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" [0238.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d14 [0238.497] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00916_.WMF", cAlternateFileName="")) returned 1 [0238.497] wcscmp (_String1="SO00916_.WMF", _String2=".") returned 1 [0238.497] wcscmp (_String1="SO00916_.WMF", _String2="..") returned 1 [0238.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a5f8 [0238.497] wcscpy (in: _Dest=0x309a5f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.497] wcscat (in: _Dest=0x309a5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.497] wcscat (in: _Dest=0x309a5f8, _Source="SO00916_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" [0238.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0238.498] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00917_.WMF", cAlternateFileName="")) returned 1 [0238.498] wcscmp (_String1="SO00917_.WMF", _String2=".") returned 1 [0238.499] wcscmp (_String1="SO00917_.WMF", _String2="..") returned 1 [0238.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30633a0 [0238.499] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.499] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.499] wcscat (in: _Dest=0x30633a0, _Source="SO00917_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" [0238.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x30633a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0238.500] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00918_.WMF", cAlternateFileName="")) returned 1 [0238.500] wcscmp (_String1="SO00918_.WMF", _String2=".") returned 1 [0238.500] wcscmp (_String1="SO00918_.WMF", _String2="..") returned 1 [0238.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062c30 [0238.500] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.500] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.500] wcscat (in: _Dest=0x3062c30, _Source="SO00918_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" [0238.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0238.501] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2944, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00935_.WMF", cAlternateFileName="")) returned 1 [0238.501] wcscmp (_String1="SO00935_.WMF", _String2=".") returned 1 [0238.501] wcscmp (_String1="SO00935_.WMF", _String2="..") returned 1 [0238.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e678c8 [0238.501] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.501] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.501] wcscat (in: _Dest=0x3e678c8, _Source="SO00935_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" [0238.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0238.502] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1960, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00938_.WMF", cAlternateFileName="")) returned 1 [0238.502] wcscmp (_String1="SO00938_.WMF", _String2=".") returned 1 [0238.502] wcscmp (_String1="SO00938_.WMF", _String2="..") returned 1 [0238.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a458 [0238.502] wcscpy (in: _Dest=0x819a458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.502] wcscat (in: _Dest=0x819a458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.502] wcscat (in: _Dest=0x819a458, _Source="SO00938_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" [0238.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0238.503] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1708, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00941_.WMF", cAlternateFileName="")) returned 1 [0238.503] wcscmp (_String1="SO00941_.WMF", _String2=".") returned 1 [0238.503] wcscmp (_String1="SO00941_.WMF", _String2="..") returned 1 [0238.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a4e0 [0238.503] wcscpy (in: _Dest=0x819a4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.503] wcscat (in: _Dest=0x819a4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.503] wcscat (in: _Dest=0x819a4e0, _Source="SO00941_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" [0238.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0238.504] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00942_.WMF", cAlternateFileName="")) returned 1 [0238.504] wcscmp (_String1="SO00942_.WMF", _String2=".") returned 1 [0238.505] wcscmp (_String1="SO00942_.WMF", _String2="..") returned 1 [0238.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a568 [0238.505] wcscpy (in: _Dest=0x819a568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.505] wcscat (in: _Dest=0x819a568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.505] wcscat (in: _Dest=0x819a568, _Source="SO00942_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" [0238.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0238.506] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00943_.WMF", cAlternateFileName="")) returned 1 [0238.507] wcscmp (_String1="SO00943_.WMF", _String2=".") returned 1 [0238.507] wcscmp (_String1="SO00943_.WMF", _String2="..") returned 1 [0238.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a5f0 [0238.507] wcscpy (in: _Dest=0x819a5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.507] wcscat (in: _Dest=0x819a5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.507] wcscat (in: _Dest=0x819a5f0, _Source="SO00943_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" [0238.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0238.508] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a853900, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a853900, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0xae1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01044_.WMF", cAlternateFileName="")) returned 1 [0238.508] wcscmp (_String1="SO01044_.WMF", _String2=".") returned 1 [0238.508] wcscmp (_String1="SO01044_.WMF", _String2="..") returned 1 [0238.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a678 [0238.508] wcscpy (in: _Dest=0x819a678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.508] wcscat (in: _Dest=0x819a678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.508] wcscat (in: _Dest=0x819a678, _Source="SO01044_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" [0238.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af4 [0238.509] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d684a00, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d684a00, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x5b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01063_.WMF", cAlternateFileName="")) returned 1 [0238.509] wcscmp (_String1="SO01063_.WMF", _String2=".") returned 1 [0238.509] wcscmp (_String1="SO01063_.WMF", _String2="..") returned 1 [0238.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a700 [0238.509] wcscpy (in: _Dest=0x819a700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.509] wcscat (in: _Dest=0x819a700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.509] wcscat (in: _Dest=0x819a700, _Source="SO01063_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" [0238.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0238.510] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01236_.WMF", cAlternateFileName="")) returned 1 [0238.510] wcscmp (_String1="SO01236_.WMF", _String2=".") returned 1 [0238.510] wcscmp (_String1="SO01236_.WMF", _String2="..") returned 1 [0238.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a788 [0238.510] wcscpy (in: _Dest=0x819a788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.510] wcscat (in: _Dest=0x819a788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.511] wcscat (in: _Dest=0x819a788, _Source="SO01236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" [0238.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x624 [0238.512] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e197c00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e197c00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x43b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01560_.WMF", cAlternateFileName="")) returned 1 [0238.512] wcscmp (_String1="SO01560_.WMF", _String2=".") returned 1 [0238.512] wcscmp (_String1="SO01560_.WMF", _String2="..") returned 1 [0238.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a810 [0238.512] wcscpy (in: _Dest=0x819a810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.512] wcscat (in: _Dest=0x819a810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.512] wcscat (in: _Dest=0x819a810, _Source="SO01560_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" [0238.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c00 [0238.513] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57e5e300, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57e5e300, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x59d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01561_.WMF", cAlternateFileName="")) returned 1 [0238.513] wcscmp (_String1="SO01561_.WMF", _String2=".") returned 1 [0238.513] wcscmp (_String1="SO01561_.WMF", _String2="..") returned 1 [0238.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a898 [0238.513] wcscpy (in: _Dest=0x819a898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.513] wcscat (in: _Dest=0x819a898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.513] wcscat (in: _Dest=0x819a898, _Source="SO01561_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" [0238.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0238.514] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55838900, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55838900, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x75ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01563_.WMF", cAlternateFileName="")) returned 1 [0238.514] wcscmp (_String1="SO01563_.WMF", _String2=".") returned 1 [0238.514] wcscmp (_String1="SO01563_.WMF", _String2="..") returned 1 [0238.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a920 [0238.514] wcscpy (in: _Dest=0x819a920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.514] wcscat (in: _Dest=0x819a920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.514] wcscat (in: _Dest=0x819a920, _Source="SO01563_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" [0238.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0238.515] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f00200, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f00200, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x51a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01566_.WMF", cAlternateFileName="")) returned 1 [0238.516] wcscmp (_String1="SO01566_.WMF", _String2=".") returned 1 [0238.516] wcscmp (_String1="SO01566_.WMF", _String2="..") returned 1 [0238.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819a9a8 [0238.516] wcscpy (in: _Dest=0x819a9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.516] wcscat (in: _Dest=0x819a9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.516] wcscat (in: _Dest=0x819a9a8, _Source="SO01566_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" [0238.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0238.517] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f05200, ftCreationTime.dwHighDateTime=0x1bd4b73, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3f05200, ftLastWriteTime.dwHighDateTime=0x1bd4b73, nFileSizeHigh=0x0, nFileSizeLow=0x54b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01568_.WMF", cAlternateFileName="")) returned 1 [0238.517] wcscmp (_String1="SO01568_.WMF", _String2=".") returned 1 [0238.517] wcscmp (_String1="SO01568_.WMF", _String2="..") returned 1 [0238.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819aa30 [0238.517] wcscpy (in: _Dest=0x819aa30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.517] wcscat (in: _Dest=0x819aa30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.517] wcscat (in: _Dest=0x819aa30, _Source="SO01568_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" [0238.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aa30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0238.518] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ea5400, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51ea5400, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01569_.WMF", cAlternateFileName="")) returned 1 [0238.518] wcscmp (_String1="SO01569_.WMF", _String2=".") returned 1 [0238.518] wcscmp (_String1="SO01569_.WMF", _String2="..") returned 1 [0238.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819aab8 [0238.518] wcscpy (in: _Dest=0x819aab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.518] wcscat (in: _Dest=0x819aab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.518] wcscat (in: _Dest=0x819aab8, _Source="SO01569_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" [0238.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0238.519] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62947e00, ftCreationTime.dwHighDateTime=0x1bd4b44, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62947e00, ftLastWriteTime.dwHighDateTime=0x1bd4b44, nFileSizeHigh=0x0, nFileSizeLow=0xa8a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01575_.WMF", cAlternateFileName="")) returned 1 [0238.519] wcscmp (_String1="SO01575_.WMF", _String2=".") returned 1 [0238.519] wcscmp (_String1="SO01575_.WMF", _String2="..") returned 1 [0238.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ab40 [0238.519] wcscpy (in: _Dest=0x819ab40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.520] wcscat (in: _Dest=0x819ab40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.520] wcscat (in: _Dest=0x819ab40, _Source="SO01575_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" [0238.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ab40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0238.520] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc7c800, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6dc7c800, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x2566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01777_.WMF", cAlternateFileName="")) returned 1 [0238.520] wcscmp (_String1="SO01777_.WMF", _String2=".") returned 1 [0238.521] wcscmp (_String1="SO01777_.WMF", _String2="..") returned 1 [0238.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819abc8 [0238.521] wcscpy (in: _Dest=0x819abc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.521] wcscat (in: _Dest=0x819abc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.521] wcscat (in: _Dest=0x819abc8, _Source="SO01777_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" [0238.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819abc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0238.522] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01785_.WMF", cAlternateFileName="")) returned 1 [0238.522] wcscmp (_String1="SO01785_.WMF", _String2=".") returned 1 [0238.522] wcscmp (_String1="SO01785_.WMF", _String2="..") returned 1 [0238.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ac50 [0238.522] wcscpy (in: _Dest=0x819ac50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.522] wcscat (in: _Dest=0x819ac50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.522] wcscat (in: _Dest=0x819ac50, _Source="SO01785_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" [0238.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ac50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0238.523] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d980900, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d980900, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x1088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01805_.WMF", cAlternateFileName="")) returned 1 [0238.523] wcscmp (_String1="SO01805_.WMF", _String2=".") returned 1 [0238.523] wcscmp (_String1="SO01805_.WMF", _String2="..") returned 1 [0238.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819acd8 [0238.523] wcscpy (in: _Dest=0x819acd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.523] wcscat (in: _Dest=0x819acd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.523] wcscat (in: _Dest=0x819acd8, _Source="SO01805_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" [0238.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819acd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0238.524] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78626d00, ftCreationTime.dwHighDateTime=0x1bd4b5d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78626d00, ftLastWriteTime.dwHighDateTime=0x1bd4b5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01905_.WMF", cAlternateFileName="")) returned 1 [0238.524] wcscmp (_String1="SO01905_.WMF", _String2=".") returned 1 [0238.524] wcscmp (_String1="SO01905_.WMF", _String2="..") returned 1 [0238.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ad60 [0238.525] wcscpy (in: _Dest=0x819ad60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.525] wcscat (in: _Dest=0x819ad60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.525] wcscat (in: _Dest=0x819ad60, _Source="SO01905_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" [0238.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ad60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0238.526] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3086, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01954_.WMF", cAlternateFileName="")) returned 1 [0238.526] wcscmp (_String1="SO01954_.WMF", _String2=".") returned 1 [0238.526] wcscmp (_String1="SO01954_.WMF", _String2="..") returned 1 [0238.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ade8 [0238.526] wcscpy (in: _Dest=0x819ade8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.526] wcscat (in: _Dest=0x819ade8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.526] wcscat (in: _Dest=0x819ade8, _Source="SO01954_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" [0238.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ade8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0238.527] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02009_.WMF", cAlternateFileName="")) returned 1 [0238.527] wcscmp (_String1="SO02009_.WMF", _String2=".") returned 1 [0238.527] wcscmp (_String1="SO02009_.WMF", _String2="..") returned 1 [0238.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ae70 [0238.527] wcscpy (in: _Dest=0x819ae70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.527] wcscat (in: _Dest=0x819ae70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.527] wcscat (in: _Dest=0x819ae70, _Source="SO02009_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" [0238.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ae70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0238.528] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02022_.WMF", cAlternateFileName="")) returned 1 [0238.528] wcscmp (_String1="SO02022_.WMF", _String2=".") returned 1 [0238.528] wcscmp (_String1="SO02022_.WMF", _String2="..") returned 1 [0238.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819aef8 [0238.528] wcscpy (in: _Dest=0x819aef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.528] wcscat (in: _Dest=0x819aef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.528] wcscat (in: _Dest=0x819aef8, _Source="SO02022_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" [0238.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0238.585] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x23a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02024_.WMF", cAlternateFileName="")) returned 1 [0238.585] wcscmp (_String1="SO02024_.WMF", _String2=".") returned 1 [0238.585] wcscmp (_String1="SO02024_.WMF", _String2="..") returned 1 [0238.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803eeb8 [0238.585] wcscpy (in: _Dest=0x803eeb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.585] wcscat (in: _Dest=0x803eeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.585] wcscat (in: _Dest=0x803eeb8, _Source="SO02024_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" [0238.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803eeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2578 [0238.587] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2016, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02025_.WMF", cAlternateFileName="")) returned 1 [0238.587] wcscmp (_String1="SO02025_.WMF", _String2=".") returned 1 [0238.587] wcscmp (_String1="SO02025_.WMF", _String2="..") returned 1 [0238.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ee30 [0238.587] wcscpy (in: _Dest=0x803ee30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.587] wcscat (in: _Dest=0x803ee30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.587] wcscat (in: _Dest=0x803ee30, _Source="SO02025_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" [0238.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ee30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0238.588] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02028_.WMF", cAlternateFileName="")) returned 1 [0238.588] wcscmp (_String1="SO02028_.WMF", _String2=".") returned 1 [0238.588] wcscmp (_String1="SO02028_.WMF", _String2="..") returned 1 [0238.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819af80 [0238.588] wcscpy (in: _Dest=0x819af80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.588] wcscat (in: _Dest=0x819af80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.588] wcscat (in: _Dest=0x819af80, _Source="SO02028_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" [0238.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819af80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0238.589] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x266c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02045_.WMF", cAlternateFileName="")) returned 1 [0238.590] wcscmp (_String1="SO02045_.WMF", _String2=".") returned 1 [0238.590] wcscmp (_String1="SO02045_.WMF", _String2="..") returned 1 [0238.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b008 [0238.590] wcscpy (in: _Dest=0x819b008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.590] wcscat (in: _Dest=0x819b008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.590] wcscat (in: _Dest=0x819b008, _Source="SO02045_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" [0238.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0238.591] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02048_.WMF", cAlternateFileName="")) returned 1 [0238.591] wcscmp (_String1="SO02048_.WMF", _String2=".") returned 1 [0238.591] wcscmp (_String1="SO02048_.WMF", _String2="..") returned 1 [0238.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b090 [0238.591] wcscpy (in: _Dest=0x819b090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.591] wcscat (in: _Dest=0x819b090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.591] wcscat (in: _Dest=0x819b090, _Source="SO02048_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" [0238.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b8 [0238.592] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02051_.WMF", cAlternateFileName="")) returned 1 [0238.592] wcscmp (_String1="SO02051_.WMF", _String2=".") returned 1 [0238.592] wcscmp (_String1="SO02051_.WMF", _String2="..") returned 1 [0238.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b118 [0238.592] wcscpy (in: _Dest=0x819b118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.592] wcscat (in: _Dest=0x819b118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.592] wcscat (in: _Dest=0x819b118, _Source="SO02051_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" [0238.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0238.593] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23525400, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23525400, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x30ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02054_.WMF", cAlternateFileName="")) returned 1 [0238.593] wcscmp (_String1="SO02054_.WMF", _String2=".") returned 1 [0238.593] wcscmp (_String1="SO02054_.WMF", _String2="..") returned 1 [0238.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b1a0 [0238.593] wcscpy (in: _Dest=0x819b1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.593] wcscat (in: _Dest=0x819b1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.593] wcscat (in: _Dest=0x819b1a0, _Source="SO02054_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" [0238.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc [0238.595] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22212700, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x22212700, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02055_.WMF", cAlternateFileName="")) returned 1 [0238.595] wcscmp (_String1="SO02055_.WMF", _String2=".") returned 1 [0238.595] wcscmp (_String1="SO02055_.WMF", _String2="..") returned 1 [0238.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b228 [0238.595] wcscpy (in: _Dest=0x819b228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.595] wcscat (in: _Dest=0x819b228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.595] wcscat (in: _Dest=0x819b228, _Source="SO02055_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" [0238.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0238.596] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1897bf00, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1897bf00, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x382a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02067_.WMF", cAlternateFileName="")) returned 1 [0238.596] wcscmp (_String1="SO02067_.WMF", _String2=".") returned 1 [0238.596] wcscmp (_String1="SO02067_.WMF", _String2="..") returned 1 [0238.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b2b0 [0238.596] wcscpy (in: _Dest=0x819b2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.596] wcscat (in: _Dest=0x819b2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.596] wcscat (in: _Dest=0x819b2b0, _Source="SO02067_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" [0238.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0238.597] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8680000, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8680000, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0x1b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02094_.WMF", cAlternateFileName="")) returned 1 [0238.597] wcscmp (_String1="SO02094_.WMF", _String2=".") returned 1 [0238.597] wcscmp (_String1="SO02094_.WMF", _String2="..") returned 1 [0238.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b338 [0238.597] wcscpy (in: _Dest=0x819b338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.597] wcscat (in: _Dest=0x819b338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.597] wcscat (in: _Dest=0x819b338, _Source="SO02094_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" [0238.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0238.598] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b04ff00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b04ff00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02227_.WMF", cAlternateFileName="")) returned 1 [0238.598] wcscmp (_String1="SO02227_.WMF", _String2=".") returned 1 [0238.598] wcscmp (_String1="SO02227_.WMF", _String2="..") returned 1 [0238.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b3c0 [0238.598] wcscpy (in: _Dest=0x819b3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.598] wcscat (in: _Dest=0x819b3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.599] wcscat (in: _Dest=0x819b3c0, _Source="SO02227_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" [0238.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0238.599] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d72f500, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d72f500, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02228_.WMF", cAlternateFileName="")) returned 1 [0238.600] wcscmp (_String1="SO02228_.WMF", _String2=".") returned 1 [0238.600] wcscmp (_String1="SO02228_.WMF", _String2="..") returned 1 [0238.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b448 [0238.600] wcscpy (in: _Dest=0x819b448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.600] wcscat (in: _Dest=0x819b448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.600] wcscat (in: _Dest=0x819b448, _Source="SO02228_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" [0238.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0238.601] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7207ea00, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7207ea00, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02233_.WMF", cAlternateFileName="")) returned 1 [0238.601] wcscmp (_String1="SO02233_.WMF", _String2=".") returned 1 [0238.601] wcscmp (_String1="SO02233_.WMF", _String2="..") returned 1 [0238.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b4d0 [0238.601] wcscpy (in: _Dest=0x819b4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.601] wcscat (in: _Dest=0x819b4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.601] wcscat (in: _Dest=0x819b4d0, _Source="SO02233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" [0238.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0238.602] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9207200, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9207200, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0xe88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02252_.WMF", cAlternateFileName="")) returned 1 [0238.602] wcscmp (_String1="SO02252_.WMF", _String2=".") returned 1 [0238.602] wcscmp (_String1="SO02252_.WMF", _String2="..") returned 1 [0238.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b558 [0238.602] wcscpy (in: _Dest=0x819b558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.602] wcscat (in: _Dest=0x819b558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.602] wcscat (in: _Dest=0x819b558, _Source="SO02252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" [0238.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0238.603] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45bbe00, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45bbe00, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02253_.WMF", cAlternateFileName="")) returned 1 [0238.603] wcscmp (_String1="SO02253_.WMF", _String2=".") returned 1 [0238.603] wcscmp (_String1="SO02253_.WMF", _String2="..") returned 1 [0238.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b5e0 [0238.603] wcscpy (in: _Dest=0x819b5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.603] wcscat (in: _Dest=0x819b5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.603] wcscat (in: _Dest=0x819b5e0, _Source="SO02253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" [0238.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0238.604] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96b9c00, ftCreationTime.dwHighDateTime=0x1bd4c48, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa96b9c00, ftLastWriteTime.dwHighDateTime=0x1bd4c48, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02261_.WMF", cAlternateFileName="")) returned 1 [0238.604] wcscmp (_String1="SO02261_.WMF", _String2=".") returned 1 [0238.605] wcscmp (_String1="SO02261_.WMF", _String2="..") returned 1 [0238.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b668 [0238.605] wcscpy (in: _Dest=0x819b668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.605] wcscat (in: _Dest=0x819b668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.605] wcscat (in: _Dest=0x819b668, _Source="SO02261_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" [0238.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0238.606] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1192f00, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd1192f00, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0xa94, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02263_.WMF", cAlternateFileName="")) returned 1 [0238.615] wcscmp (_String1="SO02263_.WMF", _String2=".") returned 1 [0238.615] wcscmp (_String1="SO02263_.WMF", _String2="..") returned 1 [0238.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b6f0 [0238.615] wcscpy (in: _Dest=0x819b6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.616] wcscat (in: _Dest=0x819b6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.616] wcscat (in: _Dest=0x819b6f0, _Source="SO02263_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" [0238.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0238.617] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78fc700, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc78fc700, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02265_.WMF", cAlternateFileName="")) returned 1 [0238.617] wcscmp (_String1="SO02265_.WMF", _String2=".") returned 1 [0238.617] wcscmp (_String1="SO02265_.WMF", _String2="..") returned 1 [0238.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b778 [0238.617] wcscpy (in: _Dest=0x819b778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.617] wcscat (in: _Dest=0x819b778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.617] wcscat (in: _Dest=0x819b778, _Source="SO02265_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" [0238.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0238.618] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34bca00, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb34bca00, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02268_.WMF", cAlternateFileName="")) returned 1 [0238.618] wcscmp (_String1="SO02268_.WMF", _String2=".") returned 1 [0238.618] wcscmp (_String1="SO02268_.WMF", _String2="..") returned 1 [0238.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b800 [0238.618] wcscpy (in: _Dest=0x819b800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.618] wcscat (in: _Dest=0x819b800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.618] wcscat (in: _Dest=0x819b800, _Source="SO02268_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" [0238.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0238.619] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb84300, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafb84300, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02269_.WMF", cAlternateFileName="")) returned 1 [0238.619] wcscmp (_String1="SO02269_.WMF", _String2=".") returned 1 [0238.619] wcscmp (_String1="SO02269_.WMF", _String2="..") returned 1 [0238.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b888 [0238.619] wcscpy (in: _Dest=0x819b888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.620] wcscat (in: _Dest=0x819b888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.620] wcscat (in: _Dest=0x819b888, _Source="SO02269_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" [0238.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0238.620] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac24bc00, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac24bc00, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0xa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02270_.WMF", cAlternateFileName="")) returned 1 [0238.621] wcscmp (_String1="SO02270_.WMF", _String2=".") returned 1 [0238.621] wcscmp (_String1="SO02270_.WMF", _String2="..") returned 1 [0238.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b910 [0238.621] wcscpy (in: _Dest=0x819b910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.621] wcscat (in: _Dest=0x819b910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.621] wcscat (in: _Dest=0x819b910, _Source="SO02270_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" [0238.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0238.622] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98cb1e00, ftCreationTime.dwHighDateTime=0x1bd4c68, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x98cb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4c68, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02276_.WMF", cAlternateFileName="")) returned 1 [0238.622] wcscmp (_String1="SO02276_.WMF", _String2=".") returned 1 [0238.622] wcscmp (_String1="SO02276_.WMF", _String2="..") returned 1 [0238.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819b998 [0238.622] wcscpy (in: _Dest=0x819b998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.622] wcscat (in: _Dest=0x819b998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.622] wcscat (in: _Dest=0x819b998, _Source="SO02276_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" [0238.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0238.623] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3b25f00, ftCreationTime.dwHighDateTime=0x1bd4c32, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd3b25f00, ftLastWriteTime.dwHighDateTime=0x1bd4c32, nFileSizeHigh=0x0, nFileSizeLow=0x17a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02413_.WMF", cAlternateFileName="")) returned 1 [0238.623] wcscmp (_String1="SO02413_.WMF", _String2=".") returned 1 [0238.623] wcscmp (_String1="SO02413_.WMF", _String2="..") returned 1 [0238.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819ba20 [0238.623] wcscpy (in: _Dest=0x819ba20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.623] wcscat (in: _Dest=0x819ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.623] wcscat (in: _Dest=0x819ba20, _Source="SO02413_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" [0238.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0238.624] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a389100, ftCreationTime.dwHighDateTime=0x1bd4c65, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a389100, ftLastWriteTime.dwHighDateTime=0x1bd4c65, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02431_.WMF", cAlternateFileName="")) returned 1 [0238.624] wcscmp (_String1="SO02431_.WMF", _String2=".") returned 1 [0238.624] wcscmp (_String1="SO02431_.WMF", _String2="..") returned 1 [0238.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819baa8 [0238.625] wcscpy (in: _Dest=0x819baa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.625] wcscat (in: _Dest=0x819baa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.625] wcscat (in: _Dest=0x819baa8, _Source="SO02431_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" [0238.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819baa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0238.626] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b49c00, ftCreationTime.dwHighDateTime=0x1bd4c58, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28b49c00, ftLastWriteTime.dwHighDateTime=0x1bd4c58, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02437_.WMF", cAlternateFileName="")) returned 1 [0238.626] wcscmp (_String1="SO02437_.WMF", _String2=".") returned 1 [0238.626] wcscmp (_String1="SO02437_.WMF", _String2="..") returned 1 [0238.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bb30 [0238.626] wcscpy (in: _Dest=0x819bb30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.626] wcscat (in: _Dest=0x819bb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.626] wcscat (in: _Dest=0x819bb30, _Source="SO02437_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" [0238.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c [0238.627] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc8da00, ftCreationTime.dwHighDateTime=0x1bd4c58, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1cc8da00, ftLastWriteTime.dwHighDateTime=0x1bd4c58, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02439_.WMF", cAlternateFileName="")) returned 1 [0238.627] wcscmp (_String1="SO02439_.WMF", _String2=".") returned 1 [0238.627] wcscmp (_String1="SO02439_.WMF", _String2="..") returned 1 [0238.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bbb8 [0238.627] wcscpy (in: _Dest=0x819bbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.627] wcscat (in: _Dest=0x819bbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.627] wcscat (in: _Dest=0x819bbb8, _Source="SO02439_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" [0238.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27dc [0238.628] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02464_.WMF", cAlternateFileName="")) returned 1 [0238.628] wcscmp (_String1="SO02464_.WMF", _String2=".") returned 1 [0238.628] wcscmp (_String1="SO02464_.WMF", _String2="..") returned 1 [0238.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bc40 [0238.628] wcscpy (in: _Dest=0x819bc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.628] wcscat (in: _Dest=0x819bc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.628] wcscat (in: _Dest=0x819bc40, _Source="SO02464_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" [0238.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0238.675] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78816c00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78816c00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x574, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02465_.WMF", cAlternateFileName="")) returned 1 [0238.675] wcscmp (_String1="SO02465_.WMF", _String2=".") returned 1 [0238.675] wcscmp (_String1="SO02465_.WMF", _String2="..") returned 1 [0238.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bcc8 [0238.676] wcscpy (in: _Dest=0x819bcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.676] wcscat (in: _Dest=0x819bcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.676] wcscat (in: _Dest=0x819bcc8, _Source="SO02465_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" [0238.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0238.677] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02578_.WMF", cAlternateFileName="")) returned 1 [0238.677] wcscmp (_String1="SO02578_.WMF", _String2=".") returned 1 [0238.677] wcscmp (_String1="SO02578_.WMF", _String2="..") returned 1 [0238.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bd50 [0238.677] wcscpy (in: _Dest=0x819bd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.677] wcscat (in: _Dest=0x819bd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.677] wcscat (in: _Dest=0x819bd50, _Source="SO02578_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" [0238.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0238.678] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c080800, ftCreationTime.dwHighDateTime=0x1bd4cb3, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c080800, ftLastWriteTime.dwHighDateTime=0x1bd4cb3, nFileSizeHigh=0x0, nFileSizeLow=0x5fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02617_.WMF", cAlternateFileName="")) returned 1 [0238.678] wcscmp (_String1="SO02617_.WMF", _String2=".") returned 1 [0238.678] wcscmp (_String1="SO02617_.WMF", _String2="..") returned 1 [0238.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bdd8 [0238.678] wcscpy (in: _Dest=0x819bdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.678] wcscat (in: _Dest=0x819bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.678] wcscat (in: _Dest=0x819bdd8, _Source="SO02617_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" [0238.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0238.679] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7f4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02790_.WMF", cAlternateFileName="")) returned 1 [0238.679] wcscmp (_String1="SO02790_.WMF", _String2=".") returned 1 [0238.679] wcscmp (_String1="SO02790_.WMF", _String2="..") returned 1 [0238.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819be60 [0238.679] wcscpy (in: _Dest=0x819be60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.679] wcscat (in: _Dest=0x819be60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.679] wcscat (in: _Dest=0x819be60, _Source="SO02790_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" [0238.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819be60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0238.681] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x430c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02791_.WMF", cAlternateFileName="")) returned 1 [0238.681] wcscmp (_String1="SO02791_.WMF", _String2=".") returned 1 [0238.681] wcscmp (_String1="SO02791_.WMF", _String2="..") returned 1 [0238.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bee8 [0238.681] wcscpy (in: _Dest=0x819bee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.681] wcscat (in: _Dest=0x819bee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.681] wcscat (in: _Dest=0x819bee8, _Source="SO02791_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" [0238.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0238.682] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02793_.WMF", cAlternateFileName="")) returned 1 [0238.682] wcscmp (_String1="SO02793_.WMF", _String2=".") returned 1 [0238.682] wcscmp (_String1="SO02793_.WMF", _String2="..") returned 1 [0238.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bf70 [0238.683] wcscpy (in: _Dest=0x819bf70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.683] wcscat (in: _Dest=0x819bf70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.683] wcscat (in: _Dest=0x819bf70, _Source="SO02793_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" [0238.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bf70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0238.684] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02794_.WMF", cAlternateFileName="")) returned 1 [0238.684] wcscmp (_String1="SO02794_.WMF", _String2=".") returned 1 [0238.684] wcscmp (_String1="SO02794_.WMF", _String2="..") returned 1 [0238.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819bff8 [0238.684] wcscpy (in: _Dest=0x819bff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.684] wcscat (in: _Dest=0x819bff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.684] wcscat (in: _Dest=0x819bff8, _Source="SO02794_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" [0238.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0238.685] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1262e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02862_.WMF", cAlternateFileName="")) returned 1 [0238.686] wcscmp (_String1="SO02862_.WMF", _String2=".") returned 1 [0238.686] wcscmp (_String1="SO02862_.WMF", _String2="..") returned 1 [0238.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c080 [0238.686] wcscpy (in: _Dest=0x819c080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.686] wcscat (in: _Dest=0x819c080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.686] wcscat (in: _Dest=0x819c080, _Source="SO02862_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" [0238.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0238.687] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x967a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02886_.WMF", cAlternateFileName="")) returned 1 [0238.687] wcscmp (_String1="SO02886_.WMF", _String2=".") returned 1 [0238.687] wcscmp (_String1="SO02886_.WMF", _String2="..") returned 1 [0238.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c108 [0238.687] wcscpy (in: _Dest=0x819c108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.687] wcscat (in: _Dest=0x819c108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.687] wcscat (in: _Dest=0x819c108, _Source="SO02886_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" [0238.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0238.689] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x22f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02958_.WMF", cAlternateFileName="")) returned 1 [0238.689] wcscmp (_String1="SO02958_.WMF", _String2=".") returned 1 [0238.689] wcscmp (_String1="SO02958_.WMF", _String2="..") returned 1 [0238.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c190 [0238.689] wcscpy (in: _Dest=0x819c190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.689] wcscat (in: _Dest=0x819c190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.689] wcscat (in: _Dest=0x819c190, _Source="SO02958_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" [0238.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2680 [0238.690] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x107b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE_01.MID", cAlternateFileName="")) returned 1 [0238.690] wcscmp (_String1="SPACE_01.MID", _String2=".") returned 1 [0238.690] wcscmp (_String1="SPACE_01.MID", _String2="..") returned 1 [0238.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c218 [0238.690] wcscpy (in: _Dest=0x819c218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.690] wcscat (in: _Dest=0x819c218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.690] wcscat (in: _Dest=0x819c218, _Source="SPACE_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" [0238.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0238.692] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRNG_01.MID", cAlternateFileName="")) returned 1 [0238.692] wcscmp (_String1="SPRNG_01.MID", _String2=".") returned 1 [0238.692] wcscmp (_String1="SPRNG_01.MID", _String2="..") returned 1 [0238.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x819c2a0 [0238.692] wcscpy (in: _Dest=0x819c2a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.692] wcscat (in: _Dest=0x819c2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.692] wcscat (in: _Dest=0x819c2a0, _Source="SPRNG_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" [0238.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bbc [0238.693] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUBBY1.WMF", cAlternateFileName="")) returned 1 [0238.693] wcscmp (_String1="STUBBY1.WMF", _String2=".") returned 1 [0238.693] wcscmp (_String1="STUBBY1.WMF", _String2="..") returned 1 [0238.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x819c328 [0238.693] wcscpy (in: _Dest=0x819c328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.694] wcscat (in: _Dest=0x819c328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.694] wcscat (in: _Dest=0x819c328, _Source="STUBBY1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" [0238.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0238.695] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUBBY2.WMF", cAlternateFileName="")) returned 1 [0238.695] wcscmp (_String1="STUBBY2.WMF", _String2=".") returned 1 [0238.695] wcscmp (_String1="STUBBY2.WMF", _String2="..") returned 1 [0238.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x819c3b0 [0238.695] wcscpy (in: _Dest=0x819c3b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.695] wcscat (in: _Dest=0x819c3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.695] wcscat (in: _Dest=0x819c3b0, _Source="STUBBY2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" [0238.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0238.696] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x36dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMER_01.MID", cAlternateFileName="")) returned 1 [0238.697] wcscmp (_String1="SUMER_01.MID", _String2=".") returned 1 [0238.697] wcscmp (_String1="SUMER_01.MID", _String2="..") returned 1 [0238.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9648 [0238.697] wcscpy (in: _Dest=0x81d9648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.697] wcscat (in: _Dest=0x81d9648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.697] wcscat (in: _Dest=0x81d9648, _Source="SUMER_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" [0238.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0238.698] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2135, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWEST_01.MID", cAlternateFileName="")) returned 1 [0238.698] wcscmp (_String1="SWEST_01.MID", _String2=".") returned 1 [0238.698] wcscmp (_String1="SWEST_01.MID", _String2="..") returned 1 [0238.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d96d0 [0238.698] wcscpy (in: _Dest=0x81d96d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.698] wcscat (in: _Dest=0x81d96d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.698] wcscat (in: _Dest=0x81d96d0, _Source="SWEST_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" [0238.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d96d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0238.700] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59ac700, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ac700, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00110_.WMF", cAlternateFileName="")) returned 1 [0238.700] wcscmp (_String1="SY00110_.WMF", _String2=".") returned 1 [0238.700] wcscmp (_String1="SY00110_.WMF", _String2="..") returned 1 [0238.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9758 [0238.700] wcscpy (in: _Dest=0x81d9758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.700] wcscat (in: _Dest=0x81d9758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.700] wcscat (in: _Dest=0x81d9758, _Source="SY00110_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" [0238.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0238.701] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca3af00, ftCreationTime.dwHighDateTime=0x1bd4b7e, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ca3af00, ftLastWriteTime.dwHighDateTime=0x1bd4b7e, nFileSizeHigh=0x0, nFileSizeLow=0x1844, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00127_.WMF", cAlternateFileName="")) returned 1 [0238.701] wcscmp (_String1="SY00127_.WMF", _String2=".") returned 1 [0238.701] wcscmp (_String1="SY00127_.WMF", _String2="..") returned 1 [0238.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d97e0 [0238.701] wcscpy (in: _Dest=0x81d97e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.701] wcscat (in: _Dest=0x81d97e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.701] wcscat (in: _Dest=0x81d97e0, _Source="SY00127_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" [0238.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d97e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0238.702] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7097ce00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7097ce00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00132_.WMF", cAlternateFileName="")) returned 1 [0238.702] wcscmp (_String1="SY00132_.WMF", _String2=".") returned 1 [0238.702] wcscmp (_String1="SY00132_.WMF", _String2="..") returned 1 [0238.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9868 [0238.703] wcscpy (in: _Dest=0x81d9868, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.703] wcscat (in: _Dest=0x81d9868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.703] wcscat (in: _Dest=0x81d9868, _Source="SY00132_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" [0238.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0238.704] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4699a00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4699a00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00170_.WMF", cAlternateFileName="")) returned 1 [0238.704] wcscmp (_String1="SY00170_.WMF", _String2=".") returned 1 [0238.704] wcscmp (_String1="SY00170_.WMF", _String2="..") returned 1 [0238.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d98f0 [0238.704] wcscpy (in: _Dest=0x81d98f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.704] wcscat (in: _Dest=0x81d98f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.704] wcscat (in: _Dest=0x81d98f0, _Source="SY00170_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" [0238.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0238.705] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a50300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd2a50300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x50c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00560_.WMF", cAlternateFileName="")) returned 1 [0238.705] wcscmp (_String1="SY00560_.WMF", _String2=".") returned 1 [0238.705] wcscmp (_String1="SY00560_.WMF", _String2="..") returned 1 [0238.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9978 [0238.705] wcscpy (in: _Dest=0x81d9978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.705] wcscat (in: _Dest=0x81d9978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.705] wcscat (in: _Dest=0x81d9978, _Source="SY00560_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" [0238.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0238.706] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c99700, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66c99700, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00642_.WMF", cAlternateFileName="")) returned 1 [0238.706] wcscmp (_String1="SY00642_.WMF", _String2=".") returned 1 [0238.706] wcscmp (_String1="SY00642_.WMF", _String2="..") returned 1 [0238.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9a00 [0238.706] wcscpy (in: _Dest=0x81d9a00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.706] wcscat (in: _Dest=0x81d9a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.706] wcscat (in: _Dest=0x81d9a00, _Source="SY00642_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" [0238.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0238.707] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00788_.WMF", cAlternateFileName="")) returned 1 [0238.707] wcscmp (_String1="SY00788_.WMF", _String2=".") returned 1 [0238.707] wcscmp (_String1="SY00788_.WMF", _String2="..") returned 1 [0238.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9a88 [0238.708] wcscpy (in: _Dest=0x81d9a88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.708] wcscat (in: _Dest=0x81d9a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.708] wcscat (in: _Dest=0x81d9a88, _Source="SY00788_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" [0238.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0238.709] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00792_.WMF", cAlternateFileName="")) returned 1 [0238.723] wcscmp (_String1="SY00792_.WMF", _String2=".") returned 1 [0238.723] wcscmp (_String1="SY00792_.WMF", _String2="..") returned 1 [0238.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9b10 [0238.723] wcscpy (in: _Dest=0x81d9b10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.723] wcscat (in: _Dest=0x81d9b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.723] wcscat (in: _Dest=0x81d9b10, _Source="SY00792_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" [0238.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0238.760] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2764, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00795_.WMF", cAlternateFileName="")) returned 1 [0238.760] wcscmp (_String1="SY00795_.WMF", _String2=".") returned 1 [0238.760] wcscmp (_String1="SY00795_.WMF", _String2="..") returned 1 [0238.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803eda8 [0238.760] wcscpy (in: _Dest=0x803eda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.760] wcscat (in: _Dest=0x803eda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.760] wcscat (in: _Dest=0x803eda8, _Source="SY00795_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" [0238.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803eda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0238.761] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa093a100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa093a100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00882_.WMF", cAlternateFileName="")) returned 1 [0238.761] wcscmp (_String1="SY00882_.WMF", _String2=".") returned 1 [0238.761] wcscmp (_String1="SY00882_.WMF", _String2="..") returned 1 [0238.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803ed20 [0238.762] wcscpy (in: _Dest=0x803ed20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.762] wcscat (in: _Dest=0x803ed20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.762] wcscat (in: _Dest=0x803ed20, _Source="SY00882_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" [0238.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803ed20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0238.762] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01006_.WMF", cAlternateFileName="")) returned 1 [0238.762] wcscmp (_String1="SY01006_.WMF", _String2=".") returned 1 [0238.762] wcscmp (_String1="SY01006_.WMF", _String2="..") returned 1 [0238.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9b98 [0238.763] wcscpy (in: _Dest=0x81d9b98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.763] wcscat (in: _Dest=0x81d9b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.763] wcscat (in: _Dest=0x81d9b98, _Source="SY01006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" [0238.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0238.764] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b91b000, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b91b000, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x2734, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01252_.WMF", cAlternateFileName="")) returned 1 [0238.764] wcscmp (_String1="SY01252_.WMF", _String2=".") returned 1 [0238.764] wcscmp (_String1="SY01252_.WMF", _String2="..") returned 1 [0238.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9c20 [0238.764] wcscpy (in: _Dest=0x81d9c20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.764] wcscat (in: _Dest=0x81d9c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.764] wcscat (in: _Dest=0x81d9c20, _Source="SY01252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" [0238.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0238.765] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a608300, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a608300, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01253_.WMF", cAlternateFileName="")) returned 1 [0238.765] wcscmp (_String1="SY01253_.WMF", _String2=".") returned 1 [0238.765] wcscmp (_String1="SY01253_.WMF", _String2="..") returned 1 [0238.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9ca8 [0238.765] wcscpy (in: _Dest=0x81d9ca8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.765] wcscat (in: _Dest=0x81d9ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.765] wcscat (in: _Dest=0x81d9ca8, _Source="SY01253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" [0238.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0238.766] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8996a100, ftCreationTime.dwHighDateTime=0x1bd4c65, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8996a100, ftLastWriteTime.dwHighDateTime=0x1bd4c65, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01462_.WMF", cAlternateFileName="")) returned 1 [0238.766] wcscmp (_String1="SY01462_.WMF", _String2=".") returned 1 [0238.766] wcscmp (_String1="SY01462_.WMF", _String2="..") returned 1 [0238.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9d30 [0238.766] wcscpy (in: _Dest=0x81d9d30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.766] wcscat (in: _Dest=0x81d9d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.766] wcscat (in: _Dest=0x81d9d30, _Source="SY01462_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" [0238.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c68 [0238.767] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c163600, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c163600, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01491_.WMF", cAlternateFileName="")) returned 1 [0238.767] wcscmp (_String1="SY01491_.WMF", _String2=".") returned 1 [0238.767] wcscmp (_String1="SY01491_.WMF", _String2="..") returned 1 [0238.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9db8 [0238.767] wcscpy (in: _Dest=0x81d9db8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.767] wcscat (in: _Dest=0x81d9db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.767] wcscat (in: _Dest=0x81d9db8, _Source="SY01491_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" [0238.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0238.768] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad96d00, ftCreationTime.dwHighDateTime=0x1bd4c32, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdad96d00, ftLastWriteTime.dwHighDateTime=0x1bd4c32, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01563_.WMF", cAlternateFileName="")) returned 1 [0238.768] wcscmp (_String1="SY01563_.WMF", _String2=".") returned 1 [0238.768] wcscmp (_String1="SY01563_.WMF", _String2="..") returned 1 [0238.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9e40 [0238.768] wcscpy (in: _Dest=0x81d9e40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.768] wcscat (in: _Dest=0x81d9e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.768] wcscat (in: _Dest=0x81d9e40, _Source="SY01563_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" [0238.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a50 [0238.769] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146ea000, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x146ea000, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01572_.WMF", cAlternateFileName="")) returned 1 [0238.769] wcscmp (_String1="SY01572_.WMF", _String2=".") returned 1 [0238.769] wcscmp (_String1="SY01572_.WMF", _String2="..") returned 1 [0238.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9ec8 [0238.770] wcscpy (in: _Dest=0x81d9ec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.770] wcscat (in: _Dest=0x81d9ec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.770] wcscat (in: _Dest=0x81d9ec8, _Source="SY01572_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" [0238.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0238.771] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcf7b00, ftCreationTime.dwHighDateTime=0x1bd4cb2, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6fcf7b00, ftLastWriteTime.dwHighDateTime=0x1bd4cb2, nFileSizeHigh=0x0, nFileSizeLow=0x338e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01590_.WMF", cAlternateFileName="")) returned 1 [0238.771] wcscmp (_String1="SY01590_.WMF", _String2=".") returned 1 [0238.771] wcscmp (_String1="SY01590_.WMF", _String2="..") returned 1 [0238.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9f50 [0238.771] wcscpy (in: _Dest=0x81d9f50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.771] wcscat (in: _Dest=0x81d9f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.771] wcscat (in: _Dest=0x81d9f50, _Source="SY01590_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" [0238.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0238.772] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAIL.WMF", cAlternateFileName="")) returned 1 [0238.772] wcscmp (_String1="TAIL.WMF", _String2=".") returned 1 [0238.772] wcscmp (_String1="TAIL.WMF", _String2="..") returned 1 [0238.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5008 [0238.772] wcscpy (in: _Dest=0x3dc5008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.772] wcscat (in: _Dest=0x3dc5008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.772] wcscat (in: _Dest=0x3dc5008, _Source="TAIL.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" [0238.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0238.773] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e8d1f00, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e8d1f00, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0xbde2, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00011_.WMF", cAlternateFileName="")) returned 1 [0238.773] wcscmp (_String1="TN00011_.WMF", _String2=".") returned 1 [0238.773] wcscmp (_String1="TN00011_.WMF", _String2="..") returned 1 [0238.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d9fd8 [0238.774] wcscpy (in: _Dest=0x81d9fd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.774] wcscat (in: _Dest=0x81d9fd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.774] wcscat (in: _Dest=0x81d9fd8, _Source="TN00011_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" [0238.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0238.775] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00014_.WMF", cAlternateFileName="")) returned 1 [0238.775] wcscmp (_String1="TN00014_.WMF", _String2=".") returned 1 [0238.775] wcscmp (_String1="TN00014_.WMF", _String2="..") returned 1 [0238.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da060 [0238.775] wcscpy (in: _Dest=0x81da060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.775] wcscat (in: _Dest=0x81da060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.775] wcscat (in: _Dest=0x81da060, _Source="TN00014_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" [0238.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0238.776] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x243c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00018_.WMF", cAlternateFileName="")) returned 1 [0238.776] wcscmp (_String1="TN00018_.WMF", _String2=".") returned 1 [0238.777] wcscmp (_String1="TN00018_.WMF", _String2="..") returned 1 [0238.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da0e8 [0238.777] wcscpy (in: _Dest=0x81da0e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.777] wcscat (in: _Dest=0x81da0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.777] wcscat (in: _Dest=0x81da0e8, _Source="TN00018_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" [0238.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0238.778] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x175a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00095_.WMF", cAlternateFileName="")) returned 1 [0238.778] wcscmp (_String1="TN00095_.WMF", _String2=".") returned 1 [0238.778] wcscmp (_String1="TN00095_.WMF", _String2="..") returned 1 [0238.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da170 [0238.778] wcscpy (in: _Dest=0x81da170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.778] wcscat (in: _Dest=0x81da170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.778] wcscat (in: _Dest=0x81da170, _Source="TN00095_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" [0238.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d00 [0238.779] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fe8f00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8fe8f00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x1c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00211_.WMF", cAlternateFileName="")) returned 1 [0238.779] wcscmp (_String1="TN00211_.WMF", _String2=".") returned 1 [0238.779] wcscmp (_String1="TN00211_.WMF", _String2="..") returned 1 [0238.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da1f8 [0238.779] wcscpy (in: _Dest=0x81da1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.779] wcscat (in: _Dest=0x81da1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.779] wcscat (in: _Dest=0x81da1f8, _Source="TN00211_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" [0238.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a64 [0238.780] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e98700, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66e98700, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x1224, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00217_.WMF", cAlternateFileName="")) returned 1 [0238.780] wcscmp (_String1="TN00217_.WMF", _String2=".") returned 1 [0238.780] wcscmp (_String1="TN00217_.WMF", _String2="..") returned 1 [0238.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da280 [0238.780] wcscpy (in: _Dest=0x81da280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.781] wcscat (in: _Dest=0x81da280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.781] wcscat (in: _Dest=0x81da280, _Source="TN00217_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" [0238.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0238.781] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a517c00, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a517c00, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x1bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00218_.WMF", cAlternateFileName="")) returned 1 [0238.781] wcscmp (_String1="TN00218_.WMF", _String2=".") returned 1 [0238.782] wcscmp (_String1="TN00218_.WMF", _String2="..") returned 1 [0238.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da308 [0238.782] wcscpy (in: _Dest=0x81da308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.782] wcscat (in: _Dest=0x81da308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.782] wcscat (in: _Dest=0x81da308, _Source="TN00218_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" [0238.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0238.783] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ced000, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8ced000, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00231_.WMF", cAlternateFileName="")) returned 1 [0238.783] wcscmp (_String1="TN00231_.WMF", _String2=".") returned 1 [0238.783] wcscmp (_String1="TN00231_.WMF", _String2="..") returned 1 [0238.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da390 [0238.783] wcscpy (in: _Dest=0x81da390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.783] wcscat (in: _Dest=0x81da390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.783] wcscat (in: _Dest=0x81da390, _Source="TN00231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" [0238.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0238.784] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaad5a00, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfaad5a00, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0xc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00234_.WMF", cAlternateFileName="")) returned 1 [0238.784] wcscmp (_String1="TN00234_.WMF", _String2=".") returned 1 [0238.785] wcscmp (_String1="TN00234_.WMF", _String2="..") returned 1 [0238.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da418 [0238.785] wcscpy (in: _Dest=0x81da418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.785] wcscat (in: _Dest=0x81da418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.785] wcscat (in: _Dest=0x81da418, _Source="TN00234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" [0238.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0238.786] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d8b200, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4d8b200, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00241_.WMF", cAlternateFileName="")) returned 1 [0238.786] wcscmp (_String1="TN00241_.WMF", _String2=".") returned 1 [0238.786] wcscmp (_String1="TN00241_.WMF", _String2="..") returned 1 [0238.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da4a0 [0238.786] wcscpy (in: _Dest=0x81da4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.786] wcscat (in: _Dest=0x81da4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.786] wcscat (in: _Dest=0x81da4a0, _Source="TN00241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" [0238.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0238.787] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3386d00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3386d00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00246_.WMF", cAlternateFileName="")) returned 1 [0238.787] wcscmp (_String1="TN00246_.WMF", _String2=".") returned 1 [0238.787] wcscmp (_String1="TN00246_.WMF", _String2="..") returned 1 [0238.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da528 [0238.787] wcscpy (in: _Dest=0x81da528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.787] wcscat (in: _Dest=0x81da528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.787] wcscat (in: _Dest=0x81da528, _Source="TN00246_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" [0238.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0238.788] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2074000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2074000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00253_.WMF", cAlternateFileName="")) returned 1 [0238.788] wcscmp (_String1="TN00253_.WMF", _String2=".") returned 1 [0238.788] wcscmp (_String1="TN00253_.WMF", _String2="..") returned 1 [0238.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da5b0 [0238.789] wcscpy (in: _Dest=0x81da5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.789] wcscat (in: _Dest=0x81da5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.789] wcscat (in: _Dest=0x81da5b0, _Source="TN00253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" [0238.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0238.790] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b822200, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b822200, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x1da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00255_.WMF", cAlternateFileName="")) returned 1 [0238.790] wcscmp (_String1="TN00255_.WMF", _String2=".") returned 1 [0238.790] wcscmp (_String1="TN00255_.WMF", _String2="..") returned 1 [0238.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da638 [0238.790] wcscpy (in: _Dest=0x81da638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.790] wcscat (in: _Dest=0x81da638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.790] wcscat (in: _Dest=0x81da638, _Source="TN00255_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" [0238.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b54 [0238.791] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x194d2a00, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x194d2a00, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00330_.WMF", cAlternateFileName="")) returned 1 [0238.791] wcscmp (_String1="TN00330_.WMF", _String2=".") returned 1 [0238.791] wcscmp (_String1="TN00330_.WMF", _String2="..") returned 1 [0238.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da6c0 [0238.791] wcscpy (in: _Dest=0x81da6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.791] wcscat (in: _Dest=0x81da6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.791] wcscat (in: _Dest=0x81da6c0, _Source="TN00330_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" [0238.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0238.792] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00411_.WMF", cAlternateFileName="")) returned 1 [0238.792] wcscmp (_String1="TN00411_.WMF", _String2=".") returned 1 [0238.792] wcscmp (_String1="TN00411_.WMF", _String2="..") returned 1 [0238.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da748 [0238.792] wcscpy (in: _Dest=0x81da748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.792] wcscat (in: _Dest=0x81da748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.792] wcscat (in: _Dest=0x81da748, _Source="TN00411_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" [0238.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0238.794] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d36900, ftCreationTime.dwHighDateTime=0x1bd4c3b, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3d36900, ftLastWriteTime.dwHighDateTime=0x1bd4c3b, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00687_.WMF", cAlternateFileName="")) returned 1 [0238.794] wcscmp (_String1="TN00687_.WMF", _String2=".") returned 1 [0238.794] wcscmp (_String1="TN00687_.WMF", _String2="..") returned 1 [0238.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da7d0 [0238.794] wcscpy (in: _Dest=0x81da7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.794] wcscat (in: _Dest=0x81da7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.794] wcscat (in: _Dest=0x81da7d0, _Source="TN00687_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" [0238.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0238.993] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c58d700, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c58d700, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01164_.WMF", cAlternateFileName="")) returned 1 [0238.993] wcscmp (_String1="TN01164_.WMF", _String2=".") returned 1 [0238.993] wcscmp (_String1="TN01164_.WMF", _String2="..") returned 1 [0238.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da858 [0238.993] wcscpy (in: _Dest=0x81da858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.994] wcscat (in: _Dest=0x81da858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.994] wcscat (in: _Dest=0x81da858, _Source="TN01164_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" [0238.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4 [0238.995] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef5700, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ef5700, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01165_.WMF", cAlternateFileName="")) returned 1 [0238.995] wcscmp (_String1="TN01165_.WMF", _String2=".") returned 1 [0238.995] wcscmp (_String1="TN01165_.WMF", _String2="..") returned 1 [0238.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da8e0 [0238.995] wcscpy (in: _Dest=0x81da8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.995] wcscat (in: _Dest=0x81da8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.995] wcscat (in: _Dest=0x81da8e0, _Source="TN01165_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" [0238.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0238.996] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01308_.WMF", cAlternateFileName="")) returned 1 [0238.996] wcscmp (_String1="TN01308_.WMF", _String2=".") returned 1 [0238.997] wcscmp (_String1="TN01308_.WMF", _String2="..") returned 1 [0238.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da968 [0238.997] wcscpy (in: _Dest=0x81da968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.997] wcscat (in: _Dest=0x81da968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.997] wcscat (in: _Dest=0x81da968, _Source="TN01308_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" [0238.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0238.998] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec238c00, ftCreationTime.dwHighDateTime=0x1bf117d, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec238c00, ftLastWriteTime.dwHighDateTime=0x1bf117d, nFileSizeHigh=0x0, nFileSizeLow=0x276a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00006_.WMF", cAlternateFileName="")) returned 1 [0238.998] wcscmp (_String1="TR00006_.WMF", _String2=".") returned 1 [0238.998] wcscmp (_String1="TR00006_.WMF", _String2="..") returned 1 [0238.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81da9f0 [0238.998] wcscpy (in: _Dest=0x81da9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.998] wcscat (in: _Dest=0x81da9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.998] wcscat (in: _Dest=0x81da9f0, _Source="TR00006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" [0238.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0239.000] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c28c600, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8c28c600, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x228c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00095_.WMF", cAlternateFileName="")) returned 1 [0239.000] wcscmp (_String1="TR00095_.WMF", _String2=".") returned 1 [0239.000] wcscmp (_String1="TR00095_.WMF", _String2="..") returned 1 [0239.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81daa78 [0239.000] wcscpy (in: _Dest=0x81daa78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.000] wcscat (in: _Dest=0x81daa78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.000] wcscat (in: _Dest=0x81daa78, _Source="TR00095_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" [0239.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daa78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x279c [0239.001] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd61300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00097_.WMF", cAlternateFileName="")) returned 1 [0239.001] wcscmp (_String1="TR00097_.WMF", _String2=".") returned 1 [0239.001] wcscmp (_String1="TR00097_.WMF", _String2="..") returned 1 [0239.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dab00 [0239.001] wcscpy (in: _Dest=0x81dab00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.001] wcscat (in: _Dest=0x81dab00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.001] wcscat (in: _Dest=0x81dab00, _Source="TR00097_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" [0239.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0239.003] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d565300, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d565300, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x25bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00116_.WMF", cAlternateFileName="")) returned 1 [0239.569] wcscmp (_String1="TR00116_.WMF", _String2=".") returned 1 [0239.569] wcscmp (_String1="TR00116_.WMF", _String2="..") returned 1 [0239.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x803f958 [0239.569] wcscpy (in: _Dest=0x803f958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.569] wcscat (in: _Dest=0x803f958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.569] wcscat (in: _Dest=0x803f958, _Source="TR00116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" [0239.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x803f958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0239.572] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc20be00, ftCreationTime.dwHighDateTime=0x1bf3c3e, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc20be00, ftLastWriteTime.dwHighDateTime=0x1bf3c3e, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00126_.WMF", cAlternateFileName="")) returned 1 [0239.572] wcscmp (_String1="TR00126_.WMF", _String2=".") returned 1 [0239.572] wcscmp (_String1="TR00126_.WMF", _String2="..") returned 1 [0239.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dab88 [0239.572] wcscpy (in: _Dest=0x81dab88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.572] wcscat (in: _Dest=0x81dab88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.572] wcscat (in: _Dest=0x81dab88, _Source="TR00126_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" [0239.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dab88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0239.573] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc724f00, ftCreationTime.dwHighDateTime=0x1bd4b67, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc724f00, ftLastWriteTime.dwHighDateTime=0x1bd4b67, nFileSizeHigh=0x0, nFileSizeLow=0x235c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00172_.WMF", cAlternateFileName="")) returned 1 [0239.573] wcscmp (_String1="TR00172_.WMF", _String2=".") returned 1 [0239.573] wcscmp (_String1="TR00172_.WMF", _String2="..") returned 1 [0239.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dac10 [0239.573] wcscpy (in: _Dest=0x81dac10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.574] wcscat (in: _Dest=0x81dac10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.574] wcscat (in: _Dest=0x81dac10, _Source="TR00172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" [0239.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dac10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0239.575] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff0e00, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaff0e00, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x2142, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00178_.WMF", cAlternateFileName="")) returned 1 [0239.575] wcscmp (_String1="TR00178_.WMF", _String2=".") returned 1 [0239.575] wcscmp (_String1="TR00178_.WMF", _String2="..") returned 1 [0239.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dac98 [0239.575] wcscpy (in: _Dest=0x81dac98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.575] wcscat (in: _Dest=0x81dac98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.575] wcscat (in: _Dest=0x81dac98, _Source="TR00178_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" [0239.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dac98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0239.576] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4317200, ftCreationTime.dwHighDateTime=0x1bf32b0, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4317200, ftLastWriteTime.dwHighDateTime=0x1bf32b0, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00232_.WMF", cAlternateFileName="")) returned 1 [0239.576] wcscmp (_String1="TR00232_.WMF", _String2=".") returned 1 [0239.576] wcscmp (_String1="TR00232_.WMF", _String2="..") returned 1 [0239.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dad20 [0239.576] wcscpy (in: _Dest=0x81dad20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.576] wcscat (in: _Dest=0x81dad20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.576] wcscat (in: _Dest=0x81dad20, _Source="TR00232_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" [0239.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dad20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0239.577] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d78500, ftCreationTime.dwHighDateTime=0x1bd4b67, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90d78500, ftLastWriteTime.dwHighDateTime=0x1bd4b67, nFileSizeHigh=0x0, nFileSizeLow=0x7c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00233_.WMF", cAlternateFileName="")) returned 1 [0239.577] wcscmp (_String1="TR00233_.WMF", _String2=".") returned 1 [0239.577] wcscmp (_String1="TR00233_.WMF", _String2="..") returned 1 [0239.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dada8 [0239.577] wcscpy (in: _Dest=0x81dada8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.577] wcscat (in: _Dest=0x81dada8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.577] wcscat (in: _Dest=0x81dada8, _Source="TR00233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" [0239.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dada8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0239.578] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00402_.WMF", cAlternateFileName="")) returned 1 [0239.578] wcscmp (_String1="TR00402_.WMF", _String2=".") returned 1 [0239.578] wcscmp (_String1="TR00402_.WMF", _String2="..") returned 1 [0239.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dae30 [0239.578] wcscpy (in: _Dest=0x81dae30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.578] wcscat (in: _Dest=0x81dae30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.578] wcscat (in: _Dest=0x81dae30, _Source="TR00402_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" [0239.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dae30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0239.579] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746e4200, ftCreationTime.dwHighDateTime=0x1bd4c66, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x746e4200, ftLastWriteTime.dwHighDateTime=0x1bd4c66, nFileSizeHigh=0x0, nFileSizeLow=0x2054, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00482_.WMF", cAlternateFileName="")) returned 1 [0239.579] wcscmp (_String1="TR00482_.WMF", _String2=".") returned 1 [0239.579] wcscmp (_String1="TR00482_.WMF", _String2="..") returned 1 [0239.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81daeb8 [0239.579] wcscpy (in: _Dest=0x81daeb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.579] wcscat (in: _Dest=0x81daeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.579] wcscat (in: _Dest=0x81daeb8, _Source="TR00482_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" [0239.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0239.580] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a921200, ftCreationTime.dwHighDateTime=0x1bd4c59, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a921200, ftLastWriteTime.dwHighDateTime=0x1bd4c59, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00494_.WMF", cAlternateFileName="")) returned 1 [0239.580] wcscmp (_String1="TR00494_.WMF", _String2=".") returned 1 [0239.580] wcscmp (_String1="TR00494_.WMF", _String2="..") returned 1 [0239.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81daf40 [0239.580] wcscpy (in: _Dest=0x81daf40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.580] wcscat (in: _Dest=0x81daf40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.580] wcscat (in: _Dest=0x81daf40, _Source="TR00494_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" [0239.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daf40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0239.581] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x921e4ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x342e, dwReserved0=0x0, dwReserved1=0x0, cFileName="URBAN_01.MID", cAlternateFileName="")) returned 1 [0239.581] wcscmp (_String1="URBAN_01.MID", _String2=".") returned 1 [0239.581] wcscmp (_String1="URBAN_01.MID", _String2="..") returned 1 [0239.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81dafc8 [0239.581] wcscpy (in: _Dest=0x81dafc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.581] wcscat (in: _Dest=0x81dafc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.581] wcscat (in: _Dest=0x81dafc8, _Source="URBAN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" [0239.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dafc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0239.582] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="VCTRN_01.MID", cAlternateFileName="")) returned 1 [0239.582] wcscmp (_String1="VCTRN_01.MID", _String2=".") returned 1 [0239.582] wcscmp (_String1="VCTRN_01.MID", _String2="..") returned 1 [0239.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db050 [0239.582] wcscpy (in: _Dest=0x81db050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.582] wcscat (in: _Dest=0x81db050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.582] wcscat (in: _Dest=0x81db050, _Source="VCTRN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" [0239.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0239.583] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb216d900, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb216d900, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01219_.GIF", cAlternateFileName="")) returned 1 [0239.583] wcscmp (_String1="WB01219_.GIF", _String2=".") returned 1 [0239.583] wcscmp (_String1="WB01219_.GIF", _String2="..") returned 1 [0239.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db0d8 [0239.583] wcscpy (in: _Dest=0x81db0d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.583] wcscat (in: _Dest=0x81db0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.584] wcscat (in: _Dest=0x81db0d8, _Source="WB01219_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" [0239.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0239.584] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9539d000, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9539d000, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01237_.GIF", cAlternateFileName="")) returned 1 [0239.585] wcscmp (_String1="WB01237_.GIF", _String2=".") returned 1 [0239.585] wcscmp (_String1="WB01237_.GIF", _String2="..") returned 1 [0239.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db160 [0239.585] wcscpy (in: _Dest=0x81db160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.585] wcscat (in: _Dest=0x81db160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.585] wcscat (in: _Dest=0x81db160, _Source="WB01237_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" [0239.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0239.586] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789d9800, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x789d9800, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x167, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01238_.GIF", cAlternateFileName="")) returned 1 [0239.586] wcscmp (_String1="WB01238_.GIF", _String2=".") returned 1 [0239.586] wcscmp (_String1="WB01238_.GIF", _String2="..") returned 1 [0239.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db1e8 [0239.586] wcscpy (in: _Dest=0x81db1e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.586] wcscat (in: _Dest=0x81db1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.586] wcscat (in: _Dest=0x81db1e8, _Source="WB01238_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" [0239.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0239.587] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54da5200, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54da5200, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01239_.GIF", cAlternateFileName="")) returned 1 [0239.587] wcscmp (_String1="WB01239_.GIF", _String2=".") returned 1 [0239.587] wcscmp (_String1="WB01239_.GIF", _String2="..") returned 1 [0239.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db270 [0239.587] wcscpy (in: _Dest=0x81db270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.587] wcscat (in: _Dest=0x81db270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.587] wcscat (in: _Dest=0x81db270, _Source="WB01239_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" [0239.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0239.588] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x370ced00, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x370ced00, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01240_.GIF", cAlternateFileName="")) returned 1 [0239.588] wcscmp (_String1="WB01240_.GIF", _String2=".") returned 1 [0239.588] wcscmp (_String1="WB01240_.GIF", _String2="..") returned 1 [0239.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db2f8 [0239.589] wcscpy (in: _Dest=0x81db2f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.589] wcscat (in: _Dest=0x81db2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.589] wcscat (in: _Dest=0x81db2f8, _Source="WB01240_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" [0239.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0239.590] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba1e200, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ba1e200, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01241_.GIF", cAlternateFileName="")) returned 1 [0239.590] wcscmp (_String1="WB01241_.GIF", _String2=".") returned 1 [0239.590] wcscmp (_String1="WB01241_.GIF", _String2="..") returned 1 [0239.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db380 [0239.590] wcscpy (in: _Dest=0x81db380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.590] wcscat (in: _Dest=0x81db380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.590] wcscat (in: _Dest=0x81db380, _Source="WB01241_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" [0239.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0239.591] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1349a700, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1349a700, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01242_.GIF", cAlternateFileName="")) returned 1 [0239.591] wcscmp (_String1="WB01242_.GIF", _String2=".") returned 1 [0239.591] wcscmp (_String1="WB01242_.GIF", _String2="..") returned 1 [0239.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db408 [0239.591] wcscpy (in: _Dest=0x81db408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.591] wcscat (in: _Dest=0x81db408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.591] wcscat (in: _Dest=0x81db408, _Source="WB01242_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" [0239.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0239.592] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d700, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36d700, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01243_.GIF", cAlternateFileName="")) returned 1 [0239.592] wcscmp (_String1="WB01243_.GIF", _String2=".") returned 1 [0239.592] wcscmp (_String1="WB01243_.GIF", _String2="..") returned 1 [0239.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db490 [0239.592] wcscpy (in: _Dest=0x81db490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.592] wcscat (in: _Dest=0x81db490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.592] wcscat (in: _Dest=0x81db490, _Source="WB01243_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" [0239.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0239.593] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b78e00, ftCreationTime.dwHighDateTime=0x1bd4ecf, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0b78e00, ftLastWriteTime.dwHighDateTime=0x1bd4ecf, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01244_.GIF", cAlternateFileName="")) returned 1 [0239.593] wcscmp (_String1="WB01244_.GIF", _String2=".") returned 1 [0239.593] wcscmp (_String1="WB01244_.GIF", _String2="..") returned 1 [0239.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db518 [0239.593] wcscpy (in: _Dest=0x81db518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.593] wcscat (in: _Dest=0x81db518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.593] wcscat (in: _Dest=0x81db518, _Source="WB01244_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" [0239.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0239.594] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9908000, ftCreationTime.dwHighDateTime=0x1bd4ecf, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9908000, ftLastWriteTime.dwHighDateTime=0x1bd4ecf, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01245_.GIF", cAlternateFileName="")) returned 1 [0239.594] wcscmp (_String1="WB01245_.GIF", _String2=".") returned 1 [0239.594] wcscmp (_String1="WB01245_.GIF", _String2="..") returned 1 [0239.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81db5a0 [0239.594] wcscpy (in: _Dest=0x81db5a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.594] wcscat (in: _Dest=0x81db5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.594] wcscat (in: _Dest=0x81db5a0, _Source="WB01245_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" [0239.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0239.595] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda4be00, ftCreationTime.dwHighDateTime=0x1bd4ecf, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdda4be00, ftLastWriteTime.dwHighDateTime=0x1bd4ecf, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01246_.GIF", cAlternateFileName="")) returned 1 [0239.595] wcscmp (_String1="WB01246_.GIF", _String2=".") returned 1 [0239.595] wcscmp (_String1="WB01246_.GIF", _String2="..") returned 1 [0239.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332930 [0239.595] wcscpy (in: _Dest=0x8332930, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.595] wcscat (in: _Dest=0x8332930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.595] wcscat (in: _Dest=0x8332930, _Source="WB01246_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" [0239.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0239.596] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b43e00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2b43e00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0xff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01253_.GIF", cAlternateFileName="")) returned 1 [0239.596] wcscmp (_String1="WB01253_.GIF", _String2=".") returned 1 [0239.596] wcscmp (_String1="WB01253_.GIF", _String2="..") returned 1 [0239.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83329b8 [0239.596] wcscpy (in: _Dest=0x83329b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.596] wcscat (in: _Dest=0x83329b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.596] wcscat (in: _Dest=0x83329b8, _Source="WB01253_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" [0239.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83329b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0239.597] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a859600, ftCreationTime.dwHighDateTime=0x1bd4eca, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a859600, ftLastWriteTime.dwHighDateTime=0x1bd4eca, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01268_.GIF", cAlternateFileName="")) returned 1 [0239.597] wcscmp (_String1="WB01268_.GIF", _String2=".") returned 1 [0239.597] wcscmp (_String1="WB01268_.GIF", _String2="..") returned 1 [0239.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332a40 [0239.598] wcscpy (in: _Dest=0x8332a40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.598] wcscat (in: _Dest=0x8332a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.598] wcscat (in: _Dest=0x8332a40, _Source="WB01268_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" [0239.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098 [0239.599] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586bda00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x586bda00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01292_.GIF", cAlternateFileName="")) returned 1 [0239.599] wcscmp (_String1="WB01292_.GIF", _String2=".") returned 1 [0239.599] wcscmp (_String1="WB01292_.GIF", _String2="..") returned 1 [0239.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332ac8 [0239.599] wcscpy (in: _Dest=0x8332ac8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.599] wcscat (in: _Dest=0x8332ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.599] wcscat (in: _Dest=0x8332ac8, _Source="WB01292_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" [0239.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0239.600] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5144cc00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5144cc00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01293_.GIF", cAlternateFileName="")) returned 1 [0239.600] wcscmp (_String1="WB01293_.GIF", _String2=".") returned 1 [0239.600] wcscmp (_String1="WB01293_.GIF", _String2="..") returned 1 [0239.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332b50 [0239.600] wcscpy (in: _Dest=0x8332b50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.600] wcscat (in: _Dest=0x8332b50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.600] wcscat (in: _Dest=0x8332b50, _Source="WB01293_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" [0239.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680 [0239.601] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45590a00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45590a00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01294_.GIF", cAlternateFileName="")) returned 1 [0239.601] wcscmp (_String1="WB01294_.GIF", _String2=".") returned 1 [0239.601] wcscmp (_String1="WB01294_.GIF", _String2="..") returned 1 [0239.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332bd8 [0239.601] wcscpy (in: _Dest=0x8332bd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.601] wcscat (in: _Dest=0x8332bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.601] wcscat (in: _Dest=0x8332bd8, _Source="WB01294_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" [0239.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0239.602] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5ab200, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc5ab200, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01295_.GIF", cAlternateFileName="")) returned 1 [0239.602] wcscmp (_String1="WB01295_.GIF", _String2=".") returned 1 [0239.602] wcscmp (_String1="WB01295_.GIF", _String2="..") returned 1 [0239.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332c60 [0239.602] wcscpy (in: _Dest=0x8332c60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.602] wcscat (in: _Dest=0x8332c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.602] wcscat (in: _Dest=0x8332c60, _Source="WB01295_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" [0239.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0239.603] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eb2b300, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2eb2b300, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x1ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01296_.GIF", cAlternateFileName="")) returned 1 [0239.603] wcscmp (_String1="WB01296_.GIF", _String2=".") returned 1 [0239.603] wcscmp (_String1="WB01296_.GIF", _String2="..") returned 1 [0239.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332ce8 [0239.604] wcscpy (in: _Dest=0x8332ce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.604] wcscat (in: _Dest=0x8332ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.604] wcscat (in: _Dest=0x8332ce8, _Source="WB01296_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" [0239.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0239.604] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bcd200, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28bcd200, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01297_.GIF", cAlternateFileName="")) returned 1 [0239.605] wcscmp (_String1="WB01297_.GIF", _String2=".") returned 1 [0239.605] wcscmp (_String1="WB01297_.GIF", _String2="..") returned 1 [0239.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332d70 [0239.605] wcscpy (in: _Dest=0x8332d70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.605] wcscat (in: _Dest=0x8332d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.605] wcscat (in: _Dest=0x8332d70, _Source="WB01297_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" [0239.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0239.657] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c6f100, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x22c6f100, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01298_.GIF", cAlternateFileName="")) returned 1 [0239.657] wcscmp (_String1="WB01298_.GIF", _String2=".") returned 1 [0239.657] wcscmp (_String1="WB01298_.GIF", _String2="..") returned 1 [0239.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332df8 [0239.658] wcscpy (in: _Dest=0x8332df8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.658] wcscat (in: _Dest=0x8332df8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.658] wcscat (in: _Dest=0x8332df8, _Source="WB01298_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" [0239.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332df8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0239.659] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x180c5c00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x180c5c00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01299_.GIF", cAlternateFileName="")) returned 1 [0239.659] wcscmp (_String1="WB01299_.GIF", _String2=".") returned 1 [0239.659] wcscmp (_String1="WB01299_.GIF", _String2="..") returned 1 [0239.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332e80 [0239.659] wcscpy (in: _Dest=0x8332e80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.659] wcscat (in: _Dest=0x8332e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.659] wcscat (in: _Dest=0x8332e80, _Source="WB01299_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" [0239.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0239.660] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82f400, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe82f400, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01300_.GIF", cAlternateFileName="")) returned 1 [0239.660] wcscmp (_String1="WB01300_.GIF", _String2=".") returned 1 [0239.660] wcscmp (_String1="WB01300_.GIF", _String2="..") returned 1 [0239.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332f08 [0239.660] wcscpy (in: _Dest=0x8332f08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.660] wcscat (in: _Dest=0x8332f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.660] wcscat (in: _Dest=0x8332f08, _Source="WB01300_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" [0239.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0239.661] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be4000, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9be4000, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01301_.GIF", cAlternateFileName="")) returned 1 [0239.661] wcscmp (_String1="WB01301_.GIF", _String2=".") returned 1 [0239.661] wcscmp (_String1="WB01301_.GIF", _String2="..") returned 1 [0239.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8332f90 [0239.661] wcscpy (in: _Dest=0x8332f90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.661] wcscat (in: _Dest=0x8332f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.661] wcscat (in: _Dest=0x8332f90, _Source="WB01301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" [0239.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b5c [0239.662] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd5ca00, ftCreationTime.dwHighDateTime=0x1bd4eaf, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5cd5ca00, ftLastWriteTime.dwHighDateTime=0x1bd4eaf, nFileSizeHigh=0x0, nFileSizeLow=0x2076, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01304G.GIF", cAlternateFileName="")) returned 1 [0239.751] wcscmp (_String1="WB01304G.GIF", _String2=".") returned 1 [0239.751] wcscmp (_String1="WB01304G.GIF", _String2="..") returned 1 [0239.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333018 [0239.751] wcscpy (in: _Dest=0x8333018, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.752] wcscat (in: _Dest=0x8333018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.752] wcscat (in: _Dest=0x8333018, _Source="WB01304G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" [0239.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0239.752] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69feb300, ftCreationTime.dwHighDateTime=0x1bd4ec7, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69feb300, ftLastWriteTime.dwHighDateTime=0x1bd4ec7, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01330_.GIF", cAlternateFileName="")) returned 1 [0239.753] wcscmp (_String1="WB01330_.GIF", _String2=".") returned 1 [0239.753] wcscmp (_String1="WB01330_.GIF", _String2="..") returned 1 [0239.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83330a0 [0239.753] wcscpy (in: _Dest=0x83330a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.753] wcscat (in: _Dest=0x83330a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.753] wcscat (in: _Dest=0x83330a0, _Source="WB01330_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" [0239.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83330a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0239.754] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c9f2300, ftCreationTime.dwHighDateTime=0x1bd4ed1, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c9f2300, ftLastWriteTime.dwHighDateTime=0x1bd4ed1, nFileSizeHigh=0x0, nFileSizeLow=0x899, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01734_.GIF", cAlternateFileName="")) returned 1 [0239.755] wcscmp (_String1="WB01734_.GIF", _String2=".") returned 1 [0239.755] wcscmp (_String1="WB01734_.GIF", _String2="..") returned 1 [0239.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333128 [0239.755] wcscpy (in: _Dest=0x8333128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.755] wcscat (in: _Dest=0x8333128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.755] wcscat (in: _Dest=0x8333128, _Source="WB01734_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" [0239.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0239.757] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x104db700, ftCreationTime.dwHighDateTime=0x1bd4ece, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x104db700, ftLastWriteTime.dwHighDateTime=0x1bd4ece, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01740_.GIF", cAlternateFileName="")) returned 1 [0239.757] wcscmp (_String1="WB01740_.GIF", _String2=".") returned 1 [0239.757] wcscmp (_String1="WB01740_.GIF", _String2="..") returned 1 [0239.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83331b0 [0239.757] wcscpy (in: _Dest=0x83331b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.757] wcscat (in: _Dest=0x83331b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.757] wcscat (in: _Dest=0x83331b0, _Source="WB01740_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" [0239.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83331b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0239.758] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3c5500, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde3c5500, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01742_.GIF", cAlternateFileName="")) returned 1 [0239.758] wcscmp (_String1="WB01742_.GIF", _String2=".") returned 1 [0239.758] wcscmp (_String1="WB01742_.GIF", _String2="..") returned 1 [0239.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333238 [0239.758] wcscpy (in: _Dest=0x8333238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.758] wcscat (in: _Dest=0x8333238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.758] wcscat (in: _Dest=0x8333238, _Source="WB01742_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" [0239.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0239.759] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0b2800, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd0b2800, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01743_.GIF", cAlternateFileName="")) returned 1 [0239.759] wcscmp (_String1="WB01743_.GIF", _String2=".") returned 1 [0239.759] wcscmp (_String1="WB01743_.GIF", _String2="..") returned 1 [0239.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83332c0 [0239.759] wcscpy (in: _Dest=0x83332c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.760] wcscat (in: _Dest=0x83332c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.760] wcscat (in: _Dest=0x83332c0, _Source="WB01743_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" [0239.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83332c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a94 [0239.760] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e6a7300, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9e6a7300, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x31f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01744_.GIF", cAlternateFileName="")) returned 1 [0239.761] wcscmp (_String1="WB01744_.GIF", _String2=".") returned 1 [0239.761] wcscmp (_String1="WB01744_.GIF", _String2="..") returned 1 [0239.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333348 [0239.761] wcscpy (in: _Dest=0x8333348, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.761] wcscat (in: _Dest=0x8333348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.761] wcscat (in: _Dest=0x8333348, _Source="WB01744_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" [0239.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc4 [0239.762] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8467400, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8467400, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01745_.GIF", cAlternateFileName="")) returned 1 [0239.762] wcscmp (_String1="WB01745_.GIF", _String2=".") returned 1 [0239.762] wcscmp (_String1="WB01745_.GIF", _String2="..") returned 1 [0239.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83333d0 [0239.762] wcscpy (in: _Dest=0x83333d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.762] wcscat (in: _Dest=0x83333d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.762] wcscat (in: _Dest=0x83333d0, _Source="WB01745_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" [0239.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83333d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0239.763] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfee3900, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfee3900, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01746_.GIF", cAlternateFileName="")) returned 1 [0239.763] wcscmp (_String1="WB01746_.GIF", _String2=".") returned 1 [0239.763] wcscmp (_String1="WB01746_.GIF", _String2="..") returned 1 [0239.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333458 [0239.763] wcscpy (in: _Dest=0x8333458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.763] wcscat (in: _Dest=0x8333458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.763] wcscat (in: _Dest=0x8333458, _Source="WB01746_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" [0239.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0239.764] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f85800, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9f85800, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01747_.GIF", cAlternateFileName="")) returned 1 [0239.764] wcscmp (_String1="WB01747_.GIF", _String2=".") returned 1 [0239.764] wcscmp (_String1="WB01747_.GIF", _String2="..") returned 1 [0239.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83334e0 [0239.764] wcscpy (in: _Dest=0x83334e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.764] wcscat (in: _Dest=0x83334e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.764] wcscat (in: _Dest=0x83334e0, _Source="WB01747_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" [0239.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83334e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0239.765] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d14a00, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc2d14a00, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01748_.GIF", cAlternateFileName="")) returned 1 [0239.765] wcscmp (_String1="WB01748_.GIF", _String2=".") returned 1 [0239.765] wcscmp (_String1="WB01748_.GIF", _String2="..") returned 1 [0239.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333568 [0239.765] wcscpy (in: _Dest=0x8333568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.765] wcscat (in: _Dest=0x8333568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.765] wcscat (in: _Dest=0x8333568, _Source="WB01748_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" [0239.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0239.766] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe0c9600, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe0c9600, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x3b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01749_.GIF", cAlternateFileName="")) returned 1 [0239.766] wcscmp (_String1="WB01749_.GIF", _String2=".") returned 1 [0239.766] wcscmp (_String1="WB01749_.GIF", _String2="..") returned 1 [0239.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83335f0 [0239.766] wcscpy (in: _Dest=0x83335f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.766] wcscat (in: _Dest=0x83335f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.766] wcscat (in: _Dest=0x83335f0, _Source="WB01749_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" [0239.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83335f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0239.767] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b45b00, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5b45b00, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01750_.GIF", cAlternateFileName="")) returned 1 [0239.767] wcscmp (_String1="WB01750_.GIF", _String2=".") returned 1 [0239.767] wcscmp (_String1="WB01750_.GIF", _String2="..") returned 1 [0239.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333678 [0239.767] wcscpy (in: _Dest=0x8333678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.767] wcscat (in: _Dest=0x8333678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.767] wcscat (in: _Dest=0x8333678, _Source="WB01750_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" [0239.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0239.768] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb220d400, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb220d400, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01751_.GIF", cAlternateFileName="")) returned 1 [0239.768] wcscmp (_String1="WB01751_.GIF", _String2=".") returned 1 [0239.768] wcscmp (_String1="WB01751_.GIF", _String2="..") returned 1 [0239.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333700 [0239.768] wcscpy (in: _Dest=0x8333700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.768] wcscat (in: _Dest=0x8333700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.768] wcscat (in: _Dest=0x8333700, _Source="WB01751_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" [0239.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0 [0239.769] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79313100, ftCreationTime.dwHighDateTime=0x1bd4ec6, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79313100, ftLastWriteTime.dwHighDateTime=0x1bd4ec6, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01770_.GIF", cAlternateFileName="")) returned 1 [0239.769] wcscmp (_String1="WB01770_.GIF", _String2=".") returned 1 [0239.769] wcscmp (_String1="WB01770_.GIF", _String2="..") returned 1 [0239.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333788 [0239.769] wcscpy (in: _Dest=0x8333788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.769] wcscat (in: _Dest=0x8333788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.769] wcscat (in: _Dest=0x8333788, _Source="WB01770_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" [0239.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0239.770] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395f4f00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x395f4f00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0xe44, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01838_.GIF", cAlternateFileName="")) returned 1 [0239.770] wcscmp (_String1="WB01838_.GIF", _String2=".") returned 1 [0239.770] wcscmp (_String1="WB01838_.GIF", _String2="..") returned 1 [0239.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333810 [0239.770] wcscpy (in: _Dest=0x8333810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.770] wcscat (in: _Dest=0x8333810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.770] wcscat (in: _Dest=0x8333810, _Source="WB01838_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" [0239.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a98 [0239.771] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fcf500, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36fcf500, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01839_.GIF", cAlternateFileName="")) returned 1 [0239.771] wcscmp (_String1="WB01839_.GIF", _String2=".") returned 1 [0239.771] wcscmp (_String1="WB01839_.GIF", _String2="..") returned 1 [0239.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333898 [0239.771] wcscpy (in: _Dest=0x8333898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.771] wcscat (in: _Dest=0x8333898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.771] wcscat (in: _Dest=0x8333898, _Source="WB01839_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" [0239.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0239.772] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x990e2800, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x990e2800, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01840_.GIF", cAlternateFileName="")) returned 1 [0239.772] wcscmp (_String1="WB01840_.GIF", _String2=".") returned 1 [0239.772] wcscmp (_String1="WB01840_.GIF", _String2="..") returned 1 [0239.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333920 [0239.772] wcscpy (in: _Dest=0x8333920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.772] wcscat (in: _Dest=0x8333920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.773] wcscat (in: _Dest=0x8333920, _Source="WB01840_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" [0239.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0239.773] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d738d00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d738d00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01842_.GIF", cAlternateFileName="")) returned 1 [0239.773] wcscmp (_String1="WB01842_.GIF", _String2=".") returned 1 [0239.773] wcscmp (_String1="WB01842_.GIF", _String2="..") returned 1 [0239.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x83339a8 [0239.773] wcscpy (in: _Dest=0x83339a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.773] wcscat (in: _Dest=0x83339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.773] wcscat (in: _Dest=0x83339a8, _Source="WB01842_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" [0239.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0239.774] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c426000, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c426000, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01843_.GIF", cAlternateFileName="")) returned 1 [0239.774] wcscmp (_String1="WB01843_.GIF", _String2=".") returned 1 [0239.775] wcscmp (_String1="WB01843_.GIF", _String2="..") returned 1 [0239.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333a30 [0239.775] wcscpy (in: _Dest=0x8333a30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.775] wcscat (in: _Dest=0x8333a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.775] wcscat (in: _Dest=0x8333a30, _Source="WB01843_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" [0239.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0239.776] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60695100, ftCreationTime.dwHighDateTime=0x1bd4eaf, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60695100, ftLastWriteTime.dwHighDateTime=0x1bd4eaf, nFileSizeHigh=0x0, nFileSizeLow=0x102b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02229_.GIF", cAlternateFileName="")) returned 1 [0239.776] wcscmp (_String1="WB02229_.GIF", _String2=".") returned 1 [0239.776] wcscmp (_String1="WB02229_.GIF", _String2="..") returned 1 [0239.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333ab8 [0239.776] wcscpy (in: _Dest=0x8333ab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.776] wcscat (in: _Dest=0x8333ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.776] wcscat (in: _Dest=0x8333ab8, _Source="WB02229_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" [0239.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0239.777] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHIRL1.WMF", cAlternateFileName="")) returned 1 [0239.777] wcscmp (_String1="WHIRL1.WMF", _String2=".") returned 1 [0239.777] wcscmp (_String1="WHIRL1.WMF", _String2="..") returned 1 [0239.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8333b40 [0239.777] wcscpy (in: _Dest=0x8333b40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.777] wcscat (in: _Dest=0x8333b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.777] wcscat (in: _Dest=0x8333b40, _Source="WHIRL1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" [0239.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0239.778] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHIRL2.WMF", cAlternateFileName="")) returned 1 [0239.778] wcscmp (_String1="WHIRL2.WMF", _String2=".") returned 1 [0239.778] wcscmp (_String1="WHIRL2.WMF", _String2="..") returned 1 [0239.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8333bc8 [0239.778] wcscpy (in: _Dest=0x8333bc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.778] wcscat (in: _Dest=0x8333bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.778] wcscat (in: _Dest=0x8333bc8, _Source="WHIRL2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" [0239.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c7c [0239.779] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="WING1.WMF", cAlternateFileName="")) returned 1 [0239.779] wcscmp (_String1="WING1.WMF", _String2=".") returned 1 [0239.779] wcscmp (_String1="WING1.WMF", _String2="..") returned 1 [0239.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8333c50 [0239.779] wcscpy (in: _Dest=0x8333c50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.779] wcscat (in: _Dest=0x8333c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.779] wcscat (in: _Dest=0x8333c50, _Source="WING1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" [0239.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0239.780] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="WING2.WMF", cAlternateFileName="")) returned 1 [0239.780] wcscmp (_String1="WING2.WMF", _String2=".") returned 1 [0239.780] wcscmp (_String1="WING2.WMF", _String2="..") returned 1 [0239.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8333cd8 [0239.780] wcscpy (in: _Dest=0x8333cd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.780] wcscat (in: _Dest=0x8333cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.780] wcscat (in: _Dest=0x8333cd8, _Source="WING2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" [0239.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c [0239.781] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNTER_01.MID", cAlternateFileName="")) returned 1 [0239.781] wcscmp (_String1="WNTER_01.MID", _String2=".") returned 1 [0239.781] wcscmp (_String1="WNTER_01.MID", _String2="..") returned 1 [0239.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8333d60 [0239.781] wcscpy (in: _Dest=0x8333d60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.781] wcscat (in: _Dest=0x8333d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.781] wcscat (in: _Dest=0x8333d60, _Source="WNTER_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" [0239.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0239.782] FindNextFileW (in: hFindFile=0x3f380d8, lpFindFileData=0x8049a58 | out: lpFindFileData=0x8049a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNTER_01.MID", cAlternateFileName="")) returned 0 [0239.785] FindClose (in: hFindFile=0x3f380d8 | out: hFindFile=0x3f380d8) returned 1 [0241.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049a58) returned 1 [0241.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015670) returned 1 [0241.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5e80) returned 1 Thread: id = 300 os_tid = 0x95c [0131.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32430 [0131.655] wcscpy (in: _Dest=0x3f32430, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" [0131.655] wcscat (in: _Dest=0x3f32430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\" [0131.655] wcscat (in: _Dest=0x3f32430, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*" [0131.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049cc0 [0131.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0132.006] wcscmp (_String1=".", _String2=".") returned 0 [0132.006] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.006] wcscmp (_String1="..", _String2=".") returned 1 [0132.006] wcscmp (_String1="..", _String2="..") returned 0 [0132.006] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1 [0132.006] wcscmp (_String1="Backgrounds", _String2=".") returned 1 [0132.006] wcscmp (_String1="Backgrounds", _String2="..") returned 1 [0132.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fff8 [0132.007] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" [0132.007] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\" [0132.007] wcscat (in: _Dest=0x3e1fff8, _Source="Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0133.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0133.774] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0 [0133.774] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0133.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049cc0) returned 1 [0133.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0133.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1b78) returned 1 Thread: id = 301 os_tid = 0x96c [0131.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4488 [0131.661] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0131.661] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0131.661] wcscat (in: _Dest=0x3dc4488, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\*" [0131.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049f28 [0131.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7788cf90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0131.661] wcscmp (_String1=".", _String2=".") returned 0 [0131.661] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7788cf90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.662] wcscmp (_String1="..", _String2=".") returned 1 [0131.662] wcscmp (_String1="..", _String2="..") returned 0 [0131.662] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77651af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivateAssemblies", cAlternateFileName="PRIVAT~1")) returned 1 [0131.662] wcscmp (_String1="PrivateAssemblies", _String2=".") returned 1 [0131.662] wcscmp (_String1="PrivateAssemblies", _String2="..") returned 1 [0131.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7378 [0131.662] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0131.662] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0131.662] wcscat (in: _Dest=0x2c7378, _Source="PrivateAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" [0131.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0131.849] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7788cf90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87d599f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1 [0131.849] wcscmp (_String1="PublicAssemblies", _String2=".") returned 1 [0131.849] wcscmp (_String1="PublicAssemblies", _String2="..") returned 1 [0131.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2a2d8 [0131.849] wcscpy (in: _Dest=0x3e2a2d8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0131.849] wcscat (in: _Dest=0x3e2a2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0131.849] wcscat (in: _Dest=0x3e2a2d8, _Source="PublicAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" [0131.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2a2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0131.850] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0131.850] wcscmp (_String1="VSTA", _String2=".") returned 1 [0131.850] wcscmp (_String1="VSTA", _String2="..") returned 1 [0131.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc3e88 [0131.850] wcscpy (in: _Dest=0x3dc3e88, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0131.850] wcscat (in: _Dest=0x3dc3e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0131.850] wcscat (in: _Dest=0x3dc3e88, _Source="VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" [0131.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc3e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0131.852] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0 [0131.852] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0131.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049f28) returned 1 [0131.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 [0131.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 Thread: id = 302 os_tid = 0x97c [0131.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f998 [0131.662] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" [0131.663] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\" [0131.663] wcscat (in: _Dest=0x3e1f998, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\*" [0131.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a190 [0131.663] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f375d8 [0132.008] wcscmp (_String1=".", _String2=".") returned 0 [0132.008] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.008] wcscmp (_String1="..", _String2=".") returned 1 [0132.008] wcscmp (_String1="..", _String2="..") returned 0 [0132.008] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1 [0132.008] wcscmp (_String1="Debugger", _String2=".") returned 1 [0132.008] wcscmp (_String1="Debugger", _String2="..") returned 1 [0132.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2be28 [0132.008] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" [0132.008] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\" [0132.008] wcscat (in: _Dest=0x3e2be28, _Source="Debugger" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" [0133.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2be28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0133.776] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0 [0133.776] FindClose (in: hFindFile=0x3f375d8 | out: hFindFile=0x3f375d8) returned 1 [0133.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a190) returned 1 [0133.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 [0133.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4608) returned 1 Thread: id = 303 os_tid = 0x98c [0131.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e581a8 [0131.673] wcscpy (in: _Dest=0x3e581a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.673] wcscat (in: _Dest=0x3e581a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.673] wcscat (in: _Dest=0x3e581a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\*" [0131.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a3f8 [0131.673] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\*", lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0131.673] wcscmp (_String1=".", _String2=".") returned 0 [0131.673] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.673] wcscmp (_String1="..", _String2=".") returned 1 [0131.673] wcscmp (_String1="..", _String2="..") returned 0 [0131.673] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0131.673] wcscmp (_String1="Adobe", _String2=".") returned 1 [0131.673] wcscmp (_String1="Adobe", _String2="..") returned 1 [0131.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6ecd0 [0131.674] wcscpy (in: _Dest=0x3e6ecd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.674] wcscat (in: _Dest=0x3e6ecd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.674] wcscat (in: _Dest=0x3e6ecd0, _Source="Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0131.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ecd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148 [0131.774] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0131.774] wcscmp (_String1="Application Data", _String2=".") returned 1 [0131.774] wcscmp (_String1="Application Data", _String2="..") returned 1 [0131.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e418 [0131.775] wcscpy (in: _Dest=0x3d8e418, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.775] wcscat (in: _Dest=0x3d8e418, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.775] wcscat (in: _Dest=0x3d8e418, _Source="Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data" [0131.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098 [0131.776] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7756010, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0131.776] wcscmp (_String1="GDIPFONTCACHEV1.DAT", _String2=".") returned 1 [0131.776] wcscmp (_String1="GDIPFONTCACHEV1.DAT", _String2="..") returned 1 [0131.776] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0131.776] wcscmp (_String1="Google", _String2=".") returned 1 [0131.776] wcscmp (_String1="Google", _String2="..") returned 1 [0131.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6f1a0 [0131.776] wcscpy (in: _Dest=0x3e6f1a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.776] wcscat (in: _Dest=0x3e6f1a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.776] wcscat (in: _Dest=0x3e6f1a0, _Source="Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0131.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0131.778] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0131.778] wcscmp (_String1="History", _String2=".") returned 1 [0131.778] wcscmp (_String1="History", _String2="..") returned 1 [0131.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e22d50 [0131.778] wcscpy (in: _Dest=0x3e22d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.778] wcscat (in: _Dest=0x3e22d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.778] wcscat (in: _Dest=0x3e22d50, _Source="History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History" [0131.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0131.780] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x90d3ed0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x90d3ed0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x49056c20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0xf541a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0131.780] wcscmp (_String1="IconCache.db", _String2=".") returned 1 [0131.780] wcscmp (_String1="IconCache.db", _String2="..") returned 1 [0131.780] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x3b4a6850, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3b4a6850, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0131.780] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0131.780] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0131.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe68a8 [0131.780] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.780] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.780] wcscat (in: _Dest=0x2fe68a8, _Source="Microsoft" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft" [0131.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 [0131.780] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0131.780] wcscmp (_String1="Microsoft Help", _String2=".") returned 1 [0131.780] wcscmp (_String1="Microsoft Help", _String2="..") returned 1 [0131.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e3b0 [0131.781] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.781] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.781] wcscat (in: _Dest=0x3d8e3b0, _Source="Microsoft Help" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help" [0131.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0131.782] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b774d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x887736a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x887736a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0131.782] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0131.782] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0131.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e234e0 [0131.782] wcscpy (in: _Dest=0x3e234e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.782] wcscat (in: _Dest=0x3e234e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.782] wcscat (in: _Dest=0x3e234e0, _Source="Mozilla" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Mozilla") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Mozilla" [0131.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e234e0) returned 1 [0131.782] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xe39f0240, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xe39f0240, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0131.782] wcscmp (_String1="Temp", _String2=".") returned 1 [0131.782] wcscmp (_String1="Temp", _String2="..") returned 1 [0131.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e572a8 [0131.782] wcscpy (in: _Dest=0x3e572a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.783] wcscat (in: _Dest=0x3e572a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.783] wcscat (in: _Dest=0x3e572a8, _Source="Temp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp" [0131.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e572a8) returned 1 [0131.783] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0131.783] wcscmp (_String1="Temporary Internet Files", _String2=".") returned 1 [0131.783] wcscmp (_String1="Temporary Internet Files", _String2="..") returned 1 [0131.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0131.783] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.783] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.783] wcscat (in: _Dest=0x3f32598, _Source="Temporary Internet Files" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Temporary Internet Files" [0131.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0131.783] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0131.783] wcscmp (_String1="VirtualStore", _String2=".") returned 1 [0131.783] wcscmp (_String1="VirtualStore", _String2="..") returned 1 [0131.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe68a8 [0131.783] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0131.783] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0131.783] wcscat (in: _Dest=0x2fe68a8, _Source="VirtualStore" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore" [0131.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0 [0131.785] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0131.785] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0131.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a3f8) returned 1 [0131.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e581a8) returned 1 [0131.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 Thread: id = 304 os_tid = 0x99c [0131.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e57348 [0131.674] wcscpy (in: _Dest=0x3e57348, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0131.674] wcscat (in: _Dest=0x3e57348, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0131.674] wcscat (in: _Dest=0x3e57348, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\*" [0131.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cd58 [0131.674] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\*", lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0131.674] wcscmp (_String1=".", _String2=".") returned 0 [0131.674] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.675] wcscmp (_String1="..", _String2=".") returned 1 [0131.675] wcscmp (_String1="..", _String2="..") returned 0 [0131.675] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0131.675] wcscmp (_String1="Adobe", _String2=".") returned 1 [0131.675] wcscmp (_String1="Adobe", _String2="..") returned 1 [0131.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6f040 [0131.675] wcscpy (in: _Dest=0x3e6f040, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0131.675] wcscat (in: _Dest=0x3e6f040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0131.675] wcscat (in: _Dest=0x3e6f040, _Source="Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0133.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6f040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0133.738] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc0b07b20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77142c30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0133.738] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0133.738] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0133.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe69c8 [0133.738] wcscpy (in: _Dest=0x2fe69c8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0133.738] wcscat (in: _Dest=0x2fe69c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0133.738] wcscat (in: _Dest=0x2fe69c8, _Source="Microsoft" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Microsoft") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Microsoft" [0133.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 [0133.738] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0133.738] wcscmp (_String1="Sun", _String2=".") returned 1 [0133.738] wcscmp (_String1="Sun", _String2="..") returned 1 [0133.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0ecf0 [0133.738] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0133.738] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0133.738] wcscat (in: _Dest=0x3e0ecf0, _Source="Sun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" [0133.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0133.745] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0133.745] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0133.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd58) returned 1 [0133.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57348) returned 1 [0133.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6658) returned 1 Thread: id = 305 os_tid = 0x9ac [0131.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e57398 [0131.675] wcscpy (in: _Dest=0x3e57398, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.675] wcscat (in: _Dest=0x3e57398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.675] wcscat (in: _Dest=0x3e57398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\*" [0131.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3e098 [0131.676] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\*", lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ef6a280, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ef6a280, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0131.676] wcscmp (_String1=".", _String2=".") returned 0 [0131.676] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ef6a280, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ef6a280, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.676] wcscmp (_String1="..", _String2=".") returned 1 [0131.676] wcscmp (_String1="..", _String2="..") returned 0 [0131.676] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ffddef0, ftCreationTime.dwHighDateTime=0x1d5e580, ftLastAccessTime.dwLowDateTime=0x34d0af20, ftLastAccessTime.dwHighDateTime=0x1d5e3f2, ftLastWriteTime.dwLowDateTime=0x34d0af20, ftLastWriteTime.dwHighDateTime=0x1d5e3f2, nFileSizeHigh=0x0, nFileSizeLow=0x13e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="-cgGSDLcmOSR5ujxdn.avi", cAlternateFileName="-CGGSD~1.AVI")) returned 1 [0131.676] wcscmp (_String1="-cgGSDLcmOSR5ujxdn.avi", _String2=".") returned -1 [0131.676] wcscmp (_String1="-cgGSDLcmOSR5ujxdn.avi", _String2="..") returned -1 [0131.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f324a8 [0131.676] wcscpy (in: _Dest=0x3f324a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.676] wcscat (in: _Dest=0x3f324a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.676] wcscat (in: _Dest=0x3f324a8, _Source="-cgGSDLcmOSR5ujxdn.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi" [0131.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f324a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0131.921] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x855ee7f0, ftCreationTime.dwHighDateTime=0x1d5ddbb, ftLastAccessTime.dwLowDateTime=0x8244c630, ftLastAccessTime.dwHighDateTime=0x1d5e6fc, ftLastWriteTime.dwLowDateTime=0x8244c630, ftLastWriteTime.dwHighDateTime=0x1d5e6fc, nFileSizeHigh=0x0, nFileSizeLow=0xc7bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="353APe3jdQdaMyJwPACo.flv", cAlternateFileName="353APE~1.FLV")) returned 1 [0131.921] wcscmp (_String1="353APe3jdQdaMyJwPACo.flv", _String2=".") returned 1 [0131.921] wcscmp (_String1="353APe3jdQdaMyJwPACo.flv", _String2="..") returned 1 [0131.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5108 [0131.921] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.921] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.921] wcscat (in: _Dest=0x3dc5108, _Source="353APe3jdQdaMyJwPACo.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv" [0131.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc [0131.922] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab521d70, ftCreationTime.dwHighDateTime=0x1d5df54, ftLastAccessTime.dwLowDateTime=0x1d7e6120, ftLastAccessTime.dwHighDateTime=0x1d5d9b4, ftLastWriteTime.dwLowDateTime=0x1d7e6120, ftLastWriteTime.dwHighDateTime=0x1d5d9b4, nFileSizeHigh=0x0, nFileSizeLow=0xa373, dwReserved0=0x0, dwReserved1=0x0, cFileName="3e5PENkyO.pps", cAlternateFileName="3E5PEN~1.PPS")) returned 1 [0131.922] wcscmp (_String1="3e5PENkyO.pps", _String2=".") returned 1 [0131.922] wcscmp (_String1="3e5PENkyO.pps", _String2="..") returned 1 [0131.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e2e0 [0131.923] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.923] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.923] wcscat (in: _Dest=0x3d8e2e0, _Source="3e5PENkyO.pps" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps" [0131.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0131.925] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x440a5ae0, ftCreationTime.dwHighDateTime=0x1d5ded4, ftLastAccessTime.dwLowDateTime=0xc247b5b0, ftLastAccessTime.dwHighDateTime=0x1d5e0f0, ftLastWriteTime.dwLowDateTime=0xc247b5b0, ftLastWriteTime.dwHighDateTime=0x1d5e0f0, nFileSizeHigh=0x0, nFileSizeLow=0xd104, dwReserved0=0x0, dwReserved1=0x0, cFileName="5fFZe_UCJNp.jpg", cAlternateFileName="5FFZE_~1.JPG")) returned 1 [0131.925] wcscmp (_String1="5fFZe_UCJNp.jpg", _String2=".") returned 1 [0131.925] wcscmp (_String1="5fFZe_UCJNp.jpg", _String2="..") returned 1 [0131.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db16a8 [0131.926] wcscpy (in: _Dest=0x3db16a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.926] wcscat (in: _Dest=0x3db16a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.926] wcscat (in: _Dest=0x3db16a8, _Source="5fFZe_UCJNp.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg" [0131.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db16a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0131.927] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46c8e9d0, ftCreationTime.dwHighDateTime=0x1d5e844, ftLastAccessTime.dwLowDateTime=0x13cf3ef0, ftLastAccessTime.dwHighDateTime=0x1d5d983, ftLastWriteTime.dwLowDateTime=0x13cf3ef0, ftLastWriteTime.dwHighDateTime=0x1d5d983, nFileSizeHigh=0x0, nFileSizeLow=0x641, dwReserved0=0x0, dwReserved1=0x0, cFileName="8YPeS3yM6Zcb8WN.bmp", cAlternateFileName="8YPES3~1.BMP")) returned 1 [0131.927] wcscmp (_String1="8YPeS3yM6Zcb8WN.bmp", _String2=".") returned 1 [0131.927] wcscmp (_String1="8YPeS3yM6Zcb8WN.bmp", _String2="..") returned 1 [0131.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f328e0 [0131.927] wcscpy (in: _Dest=0x3f328e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.927] wcscat (in: _Dest=0x3f328e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.927] wcscat (in: _Dest=0x3f328e0, _Source="8YPeS3yM6Zcb8WN.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp" [0131.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f328e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0131.929] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x133d2120, ftCreationTime.dwHighDateTime=0x1d5e444, ftLastAccessTime.dwLowDateTime=0xdf202a50, ftLastAccessTime.dwHighDateTime=0x1d5dfa6, ftLastWriteTime.dwLowDateTime=0xdf202a50, ftLastWriteTime.dwHighDateTime=0x1d5dfa6, nFileSizeHigh=0x0, nFileSizeLow=0x10d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9kQQzDXnhp5_4p__jT.flv", cAlternateFileName="9KQQZD~1.FLV")) returned 1 [0131.929] wcscmp (_String1="9kQQzDXnhp5_4p__jT.flv", _String2=".") returned 1 [0131.929] wcscmp (_String1="9kQQzDXnhp5_4p__jT.flv", _String2="..") returned 1 [0131.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32958 [0131.929] wcscpy (in: _Dest=0x3f32958, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.929] wcscat (in: _Dest=0x3f32958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.929] wcscat (in: _Dest=0x3f32958, _Source="9kQQzDXnhp5_4p__jT.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv" [0131.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0131.930] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0131.930] wcscmp (_String1="Adobe", _String2=".") returned 1 [0131.931] wcscmp (_String1="Adobe", _String2="..") returned 1 [0131.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e23118 [0131.931] wcscpy (in: _Dest=0x3e23118, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.931] wcscat (in: _Dest=0x3e23118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.931] wcscat (in: _Dest=0x3e23118, _Source="Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0131.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e23118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0131.933] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53671c60, ftCreationTime.dwHighDateTime=0x1d5e656, ftLastAccessTime.dwLowDateTime=0x9c7acd50, ftLastAccessTime.dwHighDateTime=0x1d5e14e, ftLastWriteTime.dwLowDateTime=0x9c7acd50, ftLastWriteTime.dwHighDateTime=0x1d5e14e, nFileSizeHigh=0x0, nFileSizeLow=0x15ad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AVhuqzQrhKN hDmFLbpE.pptx", cAlternateFileName="AVHUQZ~1.PPT")) returned 1 [0131.933] wcscmp (_String1="AVhuqzQrhKN hDmFLbpE.pptx", _String2=".") returned 1 [0131.933] wcscmp (_String1="AVhuqzQrhKN hDmFLbpE.pptx", _String2="..") returned 1 [0131.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5508 [0131.933] wcscpy (in: _Dest=0x3dc5508, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.933] wcscat (in: _Dest=0x3dc5508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.933] wcscat (in: _Dest=0x3dc5508, _Source="AVhuqzQrhKN hDmFLbpE.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx" [0131.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0131.934] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc04cad70, ftCreationTime.dwHighDateTime=0x1d5e79d, ftLastAccessTime.dwLowDateTime=0xde6a9320, ftLastAccessTime.dwHighDateTime=0x1d5dd7b, ftLastWriteTime.dwLowDateTime=0xde6a9320, ftLastWriteTime.dwHighDateTime=0x1d5dd7b, nFileSizeHigh=0x0, nFileSizeLow=0x7ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="D0yko5.avi", cAlternateFileName="")) returned 1 [0131.934] wcscmp (_String1="D0yko5.avi", _String2=".") returned 1 [0131.934] wcscmp (_String1="D0yko5.avi", _String2="..") returned 1 [0131.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a28 [0131.935] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.935] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.935] wcscat (in: _Dest=0x2fe6a28, _Source="D0yko5.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi" [0131.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0131.936] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd225d0e0, ftCreationTime.dwHighDateTime=0x1d5e2fb, ftLastAccessTime.dwLowDateTime=0x34c85440, ftLastAccessTime.dwHighDateTime=0x1d5e3fe, ftLastWriteTime.dwLowDateTime=0x34c85440, ftLastWriteTime.dwHighDateTime=0x1d5e3fe, nFileSizeHigh=0x0, nFileSizeLow=0x14147, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3aDB9cHv3.mp3", cAlternateFileName="D3ADB9~1.MP3")) returned 1 [0131.936] wcscmp (_String1="D3aDB9cHv3.mp3", _String2=".") returned 1 [0131.936] wcscmp (_String1="D3aDB9cHv3.mp3", _String2="..") returned 1 [0131.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e278 [0131.936] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.936] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.936] wcscat (in: _Dest=0x3d8e278, _Source="D3aDB9cHv3.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3" [0131.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0131.937] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ab2c000, ftCreationTime.dwHighDateTime=0x1d5e1db, ftLastAccessTime.dwLowDateTime=0x63045240, ftLastAccessTime.dwHighDateTime=0x1d5d9a0, ftLastWriteTime.dwLowDateTime=0x63045240, ftLastWriteTime.dwHighDateTime=0x1d5d9a0, nFileSizeHigh=0x0, nFileSizeLow=0x2d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWOs46lkxbsBnSi.flv", cAlternateFileName="GWOS46~1.FLV")) returned 1 [0131.937] wcscmp (_String1="GWOs46lkxbsBnSi.flv", _String2=".") returned 1 [0131.938] wcscmp (_String1="GWOs46lkxbsBnSi.flv", _String2="..") returned 1 [0131.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f329d0 [0131.938] wcscpy (in: _Dest=0x3f329d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.938] wcscat (in: _Dest=0x3f329d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.938] wcscat (in: _Dest=0x3f329d0, _Source="GWOs46lkxbsBnSi.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv" [0131.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f329d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0131.939] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8bdc8240, ftCreationTime.dwHighDateTime=0x1d5d8a7, ftLastAccessTime.dwLowDateTime=0xd9339280, ftLastAccessTime.dwHighDateTime=0x1d5e785, ftLastWriteTime.dwLowDateTime=0xd9339280, ftLastWriteTime.dwHighDateTime=0x1d5e785, nFileSizeHigh=0x0, nFileSizeLow=0x15330, dwReserved0=0x0, dwReserved1=0x0, cFileName="H2 pRsNbthAxU3iY MA.wav", cAlternateFileName="H2PRSN~1.WAV")) returned 1 [0131.939] wcscmp (_String1="H2 pRsNbthAxU3iY MA.wav", _String2=".") returned 1 [0131.939] wcscmp (_String1="H2 pRsNbthAxU3iY MA.wav", _String2="..") returned 1 [0131.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4488 [0131.939] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.939] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.939] wcscat (in: _Dest=0x3dc4488, _Source="H2 pRsNbthAxU3iY MA.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav" [0131.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0131.940] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeeaf490, ftCreationTime.dwHighDateTime=0x1d5dedf, ftLastAccessTime.dwLowDateTime=0x9925cb80, ftLastAccessTime.dwHighDateTime=0x1d5e236, ftLastWriteTime.dwLowDateTime=0x9925cb80, ftLastWriteTime.dwHighDateTime=0x1d5e236, nFileSizeHigh=0x0, nFileSizeLow=0xa916, dwReserved0=0x0, dwReserved1=0x0, cFileName="HBbGHQLYwoGtyOXe.mp4", cAlternateFileName="HBBGHQ~1.MP4")) returned 1 [0131.941] wcscmp (_String1="HBbGHQLYwoGtyOXe.mp4", _String2=".") returned 1 [0131.941] wcscmp (_String1="HBbGHQLYwoGtyOXe.mp4", _String2="..") returned 1 [0131.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32a48 [0131.941] wcscpy (in: _Dest=0x3f32a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.941] wcscat (in: _Dest=0x3f32a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.941] wcscat (in: _Dest=0x3f32a48, _Source="HBbGHQLYwoGtyOXe.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4" [0131.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0131.942] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x938241e0, ftCreationTime.dwHighDateTime=0x1d5db33, ftLastAccessTime.dwLowDateTime=0xd6763cb0, ftLastAccessTime.dwHighDateTime=0x1d5ddc0, ftLastWriteTime.dwLowDateTime=0xd6763cb0, ftLastWriteTime.dwHighDateTime=0x1d5ddc0, nFileSizeHigh=0x0, nFileSizeLow=0xd0fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="hJncbIh.jpg", cAlternateFileName="")) returned 1 [0131.942] wcscmp (_String1="hJncbIh.jpg", _String2=".") returned 1 [0131.942] wcscmp (_String1="hJncbIh.jpg", _String2="..") returned 1 [0131.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e140 [0131.942] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.942] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.942] wcscat (in: _Dest=0x3d8e140, _Source="hJncbIh.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg" [0131.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0131.943] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76917db0, ftCreationTime.dwHighDateTime=0x1d5dfc7, ftLastAccessTime.dwLowDateTime=0x70eb420, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x70eb420, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x12847, dwReserved0=0x0, dwReserved1=0x0, cFileName="IAY0lvm6M7YGEpq3hMc.gif", cAlternateFileName="IAY0LV~1.GIF")) returned 1 [0131.943] wcscmp (_String1="IAY0lvm6M7YGEpq3hMc.gif", _String2=".") returned 1 [0131.943] wcscmp (_String1="IAY0lvm6M7YGEpq3hMc.gif", _String2="..") returned 1 [0131.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5888 [0131.943] wcscpy (in: _Dest=0x3dc5888, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.943] wcscat (in: _Dest=0x3dc5888, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.943] wcscat (in: _Dest=0x3dc5888, _Source="IAY0lvm6M7YGEpq3hMc.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif" [0131.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0131.945] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0131.945] wcscmp (_String1="Identities", _String2=".") returned 1 [0131.945] wcscmp (_String1="Identities", _String2="..") returned 1 [0131.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a88 [0131.945] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.945] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.945] wcscat (in: _Dest=0x2fe6a88, _Source="Identities" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" [0131.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0131.947] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9f89f30, ftCreationTime.dwHighDateTime=0x1d5e496, ftLastAccessTime.dwLowDateTime=0x324db8e0, ftLastAccessTime.dwHighDateTime=0x1d5d82d, ftLastWriteTime.dwLowDateTime=0x324db8e0, ftLastWriteTime.dwHighDateTime=0x1d5d82d, nFileSizeHigh=0x0, nFileSizeLow=0xf922, dwReserved0=0x0, dwReserved1=0x0, cFileName="INo-ei.rtf", cAlternateFileName="")) returned 1 [0131.947] wcscmp (_String1="INo-ei.rtf", _String2=".") returned 1 [0131.947] wcscmp (_String1="INo-ei.rtf", _String2="..") returned 1 [0131.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ae8 [0131.947] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.947] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.947] wcscat (in: _Dest=0x2fe6ae8, _Source="INo-ei.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf" [0131.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0131.948] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34207450, ftCreationTime.dwHighDateTime=0x1d5e697, ftLastAccessTime.dwLowDateTime=0xd78c5b70, ftLastAccessTime.dwHighDateTime=0x1d5e301, ftLastWriteTime.dwLowDateTime=0xd78c5b70, ftLastWriteTime.dwHighDateTime=0x1d5e301, nFileSizeHigh=0x0, nFileSizeLow=0x179b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jf9rBNZBWrAMlupfNHL.mp3", cAlternateFileName="JF9RBN~1.MP3")) returned 1 [0131.948] wcscmp (_String1="Jf9rBNZBWrAMlupfNHL.mp3", _String2=".") returned 1 [0131.948] wcscmp (_String1="Jf9rBNZBWrAMlupfNHL.mp3", _String2="..") returned 1 [0131.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4d08 [0131.948] wcscpy (in: _Dest=0x3dc4d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.948] wcscat (in: _Dest=0x3dc4d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.948] wcscat (in: _Dest=0x3dc4d08, _Source="Jf9rBNZBWrAMlupfNHL.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3" [0131.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074 [0131.952] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb60a8090, ftCreationTime.dwHighDateTime=0x1d5d8a6, ftLastAccessTime.dwLowDateTime=0x81209fd0, ftLastAccessTime.dwHighDateTime=0x1d5e28e, ftLastWriteTime.dwLowDateTime=0x81209fd0, ftLastWriteTime.dwHighDateTime=0x1d5e28e, nFileSizeHigh=0x0, nFileSizeLow=0x16115, dwReserved0=0x0, dwReserved1=0x0, cFileName="lh8AETZbtcvwQ2K.png", cAlternateFileName="LH8AET~1.PNG")) returned 1 [0131.952] wcscmp (_String1="lh8AETZbtcvwQ2K.png", _String2=".") returned 1 [0131.952] wcscmp (_String1="lh8AETZbtcvwQ2K.png", _String2="..") returned 1 [0131.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32ac0 [0131.952] wcscpy (in: _Dest=0x3f32ac0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.952] wcscat (in: _Dest=0x3f32ac0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.952] wcscat (in: _Dest=0x3f32ac0, _Source="lh8AETZbtcvwQ2K.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png" [0131.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0131.953] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0131.953] wcscmp (_String1="Macromedia", _String2=".") returned 1 [0131.953] wcscmp (_String1="Macromedia", _String2="..") returned 1 [0131.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6b48 [0131.953] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.954] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.954] wcscat (in: _Dest=0x2fe6b48, _Source="Macromedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" [0131.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0131.955] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x87b9a590, ftLastAccessTime.dwHighDateTime=0x1d30234, ftLastWriteTime.dwLowDateTime=0x87b9a590, ftLastWriteTime.dwHighDateTime=0x1d30234, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0131.955] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0131.955] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0131.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6ba8 [0131.955] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.955] wcscat (in: _Dest=0x2fe6ba8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.955] wcscat (in: _Dest=0x2fe6ba8, _Source="Microsoft" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Microsoft" [0131.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0131.955] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b774d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x7e0ad140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7e0ad140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0131.955] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0131.955] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0131.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6ba8 [0131.955] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.955] wcscat (in: _Dest=0x2fe6ba8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.955] wcscat (in: _Dest=0x2fe6ba8, _Source="Mozilla" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Mozilla") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Mozilla" [0131.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0131.956] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48b06c80, ftCreationTime.dwHighDateTime=0x1d5e378, ftLastAccessTime.dwLowDateTime=0x89189c50, ftLastAccessTime.dwHighDateTime=0x1d5de02, ftLastWriteTime.dwLowDateTime=0x89189c50, ftLastWriteTime.dwHighDateTime=0x1d5de02, nFileSizeHigh=0x0, nFileSizeLow=0x134e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="N2BV74PExgnC_vrF3p.gif", cAlternateFileName="N2BV74~1.GIF")) returned 1 [0131.956] wcscmp (_String1="N2BV74PExgnC_vrF3p.gif", _String2=".") returned 1 [0131.956] wcscmp (_String1="N2BV74PExgnC_vrF3p.gif", _String2="..") returned 1 [0131.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32b38 [0131.956] wcscpy (in: _Dest=0x3f32b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.956] wcscat (in: _Dest=0x3f32b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.956] wcscat (in: _Dest=0x3f32b38, _Source="N2BV74PExgnC_vrF3p.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif" [0131.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0131.957] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63390050, ftCreationTime.dwHighDateTime=0x1d5da70, ftLastAccessTime.dwLowDateTime=0xa50a5070, ftLastAccessTime.dwHighDateTime=0x1d5df97, ftLastWriteTime.dwLowDateTime=0xa50a5070, ftLastWriteTime.dwHighDateTime=0x1d5df97, nFileSizeHigh=0x0, nFileSizeLow=0x11107, dwReserved0=0x0, dwReserved1=0x0, cFileName="nLdjf3.ots", cAlternateFileName="")) returned 1 [0131.957] wcscmp (_String1="nLdjf3.ots", _String2=".") returned 1 [0131.957] wcscmp (_String1="nLdjf3.ots", _String2="..") returned 1 [0131.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ba8 [0131.957] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.957] wcscat (in: _Dest=0x2fe6ba8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.957] wcscat (in: _Dest=0x2fe6ba8, _Source="nLdjf3.ots" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots" [0131.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0131.959] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb48c910, ftCreationTime.dwHighDateTime=0x1d5e202, ftLastAccessTime.dwLowDateTime=0x665e7140, ftLastAccessTime.dwHighDateTime=0x1d5e76b, ftLastWriteTime.dwLowDateTime=0x665e7140, ftLastWriteTime.dwHighDateTime=0x1d5e76b, nFileSizeHigh=0x0, nFileSizeLow=0x39a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NptmXAz.avi", cAlternateFileName="")) returned 1 [0131.959] wcscmp (_String1="NptmXAz.avi", _String2=".") returned 1 [0131.959] wcscmp (_String1="NptmXAz.avi", _String2="..") returned 1 [0131.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e0d8 [0131.959] wcscpy (in: _Dest=0x3d8e0d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0131.959] wcscat (in: _Dest=0x3d8e0d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0131.959] wcscat (in: _Dest=0x3d8e0d8, _Source="NptmXAz.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi" [0131.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0132.413] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9406b360, ftCreationTime.dwHighDateTime=0x1d5df81, ftLastAccessTime.dwLowDateTime=0xcff4cbc0, ftLastAccessTime.dwHighDateTime=0x1d5def8, ftLastWriteTime.dwLowDateTime=0xcff4cbc0, ftLastWriteTime.dwHighDateTime=0x1d5def8, nFileSizeHigh=0x0, nFileSizeLow=0x18291, dwReserved0=0x0, dwReserved1=0x0, cFileName="oJT5aObizbJhTOURPx-.flv", cAlternateFileName="OJT5AO~1.FLV")) returned 1 [0132.413] wcscmp (_String1="oJT5aObizbJhTOURPx-.flv", _String2=".") returned 1 [0132.413] wcscmp (_String1="oJT5aObizbJhTOURPx-.flv", _String2="..") returned 1 [0132.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5a08 [0132.413] wcscpy (in: _Dest=0x3dc5a08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.413] wcscat (in: _Dest=0x3dc5a08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.413] wcscat (in: _Dest=0x3dc5a08, _Source="oJT5aObizbJhTOURPx-.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv" [0133.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0133.816] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1869560, ftCreationTime.dwHighDateTime=0x1d5de68, ftLastAccessTime.dwLowDateTime=0x998d8f20, ftLastAccessTime.dwHighDateTime=0x1d5e585, ftLastWriteTime.dwLowDateTime=0x998d8f20, ftLastWriteTime.dwHighDateTime=0x1d5e585, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omckjiwpUWgBI_2izO.docx", cAlternateFileName="OMCKJI~1.DOC")) returned 1 [0133.816] wcscmp (_String1="omckjiwpUWgBI_2izO.docx", _String2=".") returned 1 [0133.816] wcscmp (_String1="omckjiwpUWgBI_2izO.docx", _String2="..") returned 1 [0133.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4688 [0133.816] wcscpy (in: _Dest=0x3dc4688, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.816] wcscat (in: _Dest=0x3dc4688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.816] wcscat (in: _Dest=0x3dc4688, _Source="omckjiwpUWgBI_2izO.docx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx" [0133.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0133.818] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51eba90, ftCreationTime.dwHighDateTime=0x1d5e179, ftLastAccessTime.dwLowDateTime=0x442890c0, ftLastAccessTime.dwHighDateTime=0x1d5e765, ftLastWriteTime.dwLowDateTime=0x442890c0, ftLastWriteTime.dwHighDateTime=0x1d5e765, nFileSizeHigh=0x0, nFileSizeLow=0x8b57, dwReserved0=0x0, dwReserved1=0x0, cFileName="OosJPPtF7ixbagj4.docx", cAlternateFileName="OOSJPP~1.DOC")) returned 1 [0133.818] wcscmp (_String1="OosJPPtF7ixbagj4.docx", _String2=".") returned 1 [0133.818] wcscmp (_String1="OosJPPtF7ixbagj4.docx", _String2="..") returned 1 [0133.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32520 [0133.818] wcscpy (in: _Dest=0x3f32520, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.818] wcscat (in: _Dest=0x3f32520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.818] wcscat (in: _Dest=0x3f32520, _Source="OosJPPtF7ixbagj4.docx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx" [0133.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0133.819] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51c279b0, ftCreationTime.dwHighDateTime=0x1d5d948, ftLastAccessTime.dwLowDateTime=0x3dc950f0, ftLastAccessTime.dwHighDateTime=0x1d5e6f4, ftLastWriteTime.dwLowDateTime=0x3dc950f0, ftLastWriteTime.dwHighDateTime=0x1d5e6f4, nFileSizeHigh=0x0, nFileSizeLow=0x16ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tssx5lzSsU4rbRBI.gif", cAlternateFileName="TSSX5L~1.GIF")) returned 1 [0133.819] wcscmp (_String1="tssx5lzSsU4rbRBI.gif", _String2=".") returned 1 [0133.819] wcscmp (_String1="tssx5lzSsU4rbRBI.gif", _String2="..") returned 1 [0133.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68060 [0133.819] wcscpy (in: _Dest=0x3e68060, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.819] wcscat (in: _Dest=0x3e68060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.819] wcscat (in: _Dest=0x3e68060, _Source="tssx5lzSsU4rbRBI.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif" [0133.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0133.821] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdd897e00, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0x1ad51c30, ftLastAccessTime.dwHighDateTime=0x1d5dcab, ftLastWriteTime.dwLowDateTime=0x1ad51c30, ftLastWriteTime.dwHighDateTime=0x1d5dcab, nFileSizeHigh=0x0, nFileSizeLow=0x8cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWtlxAik2SM.gif", cAlternateFileName="TWTLXA~1.GIF")) returned 1 [0133.821] wcscmp (_String1="TWtlxAik2SM.gif", _String2=".") returned 1 [0133.821] wcscmp (_String1="TWtlxAik2SM.gif", _String2="..") returned 1 [0133.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39e78 [0133.821] wcscpy (in: _Dest=0x3f39e78, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.821] wcscat (in: _Dest=0x3f39e78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.821] wcscat (in: _Dest=0x3f39e78, _Source="TWtlxAik2SM.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif" [0133.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0133.823] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b41fdf0, ftCreationTime.dwHighDateTime=0x1d5e1aa, ftLastAccessTime.dwLowDateTime=0x5b6b2d0, ftLastAccessTime.dwHighDateTime=0x1d5e400, ftLastWriteTime.dwLowDateTime=0x5b6b2d0, ftLastWriteTime.dwHighDateTime=0x1d5e400, nFileSizeHigh=0x0, nFileSizeLow=0x127ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="us4x5.ppt", cAlternateFileName="")) returned 1 [0133.823] wcscmp (_String1="us4x5.ppt", _String2=".") returned 1 [0133.823] wcscmp (_String1="us4x5.ppt", _String2="..") returned 1 [0133.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6848 [0133.823] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.823] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.823] wcscat (in: _Dest=0x2fe6848, _Source="us4x5.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt" [0133.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0133.824] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x240e8e60, ftCreationTime.dwHighDateTime=0x1d5dfeb, ftLastAccessTime.dwLowDateTime=0xe019de10, ftLastAccessTime.dwHighDateTime=0x1d5d8cb, ftLastWriteTime.dwLowDateTime=0xe019de10, ftLastWriteTime.dwHighDateTime=0x1d5d8cb, nFileSizeHigh=0x0, nFileSizeLow=0x5e25, dwReserved0=0x0, dwReserved1=0x0, cFileName="UYPmhWc3vn KO.docx", cAlternateFileName="UYPMHW~1.DOC")) returned 1 [0133.824] wcscmp (_String1="UYPmhWc3vn KO.docx", _String2=".") returned 1 [0133.824] wcscmp (_String1="UYPmhWc3vn KO.docx", _String2="..") returned 1 [0133.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39ee8 [0133.824] wcscpy (in: _Dest=0x3f39ee8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.824] wcscat (in: _Dest=0x3f39ee8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.824] wcscat (in: _Dest=0x3f39ee8, _Source="UYPmhWc3vn KO.docx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx" [0133.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0133.826] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8fcfaf70, ftCreationTime.dwHighDateTime=0x1d5e51e, ftLastAccessTime.dwLowDateTime=0xc5a7a7b0, ftLastAccessTime.dwHighDateTime=0x1d5e460, ftLastWriteTime.dwLowDateTime=0xc5a7a7b0, ftLastWriteTime.dwHighDateTime=0x1d5e460, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="vC9utfeKIzuJGViZ4.png", cAlternateFileName="VC9UTF~1.PNG")) returned 1 [0133.826] wcscmp (_String1="vC9utfeKIzuJGViZ4.png", _String2=".") returned 1 [0133.826] wcscmp (_String1="vC9utfeKIzuJGViZ4.png", _String2="..") returned 1 [0133.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67fe8 [0133.826] wcscpy (in: _Dest=0x3e67fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.826] wcscat (in: _Dest=0x3e67fe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.826] wcscat (in: _Dest=0x3e67fe8, _Source="vC9utfeKIzuJGViZ4.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png" [0133.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0133.827] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x37277ef0, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0x5ba7a40, ftLastAccessTime.dwHighDateTime=0x1d5e5eb, ftLastWriteTime.dwLowDateTime=0x5ba7a40, ftLastWriteTime.dwHighDateTime=0x1d5e5eb, nFileSizeHigh=0x0, nFileSizeLow=0x13e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YkWwgZaqeSiH 0NF.ods", cAlternateFileName="YKWWGZ~1.ODS")) returned 1 [0133.827] wcscmp (_String1="YkWwgZaqeSiH 0NF.ods", _String2=".") returned 1 [0133.827] wcscmp (_String1="YkWwgZaqeSiH 0NF.ods", _String2="..") returned 1 [0133.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e680d8 [0133.827] wcscpy (in: _Dest=0x3e680d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.827] wcscat (in: _Dest=0x3e680d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.827] wcscat (in: _Dest=0x3e680d8, _Source="YkWwgZaqeSiH 0NF.ods" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods" [0133.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e680d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0133.829] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x306f31d0, ftCreationTime.dwHighDateTime=0x1d5d912, ftLastAccessTime.dwLowDateTime=0x27b73e20, ftLastAccessTime.dwHighDateTime=0x1d5dad4, ftLastWriteTime.dwLowDateTime=0x27b73e20, ftLastWriteTime.dwHighDateTime=0x1d5dad4, nFileSizeHigh=0x0, nFileSizeLow=0xea64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z hjB53yRT9fJgHE3.m4a", cAlternateFileName="ZHJB53~1.M4A")) returned 1 [0133.829] wcscmp (_String1="Z hjB53yRT9fJgHE3.m4a", _String2=".") returned 1 [0133.829] wcscmp (_String1="Z hjB53yRT9fJgHE3.m4a", _String2="..") returned 1 [0133.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68150 [0133.829] wcscpy (in: _Dest=0x3e68150, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.829] wcscat (in: _Dest=0x3e68150, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.829] wcscat (in: _Dest=0x3e68150, _Source="Z hjB53yRT9fJgHE3.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a" [0133.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0133.830] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77a03240, ftCreationTime.dwHighDateTime=0x1d5d9ab, ftLastAccessTime.dwLowDateTime=0x8fc992f0, ftLastAccessTime.dwHighDateTime=0x1d5d8ff, ftLastWriteTime.dwLowDateTime=0x8fc992f0, ftLastWriteTime.dwHighDateTime=0x1d5d8ff, nFileSizeHigh=0x0, nFileSizeLow=0x25ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZGsPllrXhu.wav", cAlternateFileName="ZGSPLL~1.WAV")) returned 1 [0133.830] wcscmp (_String1="ZGsPllrXhu.wav", _String2=".") returned 1 [0133.830] wcscmp (_String1="ZGsPllrXhu.wav", _String2="..") returned 1 [0133.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e480 [0133.830] wcscpy (in: _Dest=0x3d8e480, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.830] wcscat (in: _Dest=0x3d8e480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.830] wcscat (in: _Dest=0x3d8e480, _Source="ZGsPllrXhu.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav" [0133.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0133.832] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x185a3d00, ftCreationTime.dwHighDateTime=0x1d5e020, ftLastAccessTime.dwLowDateTime=0xdbaa0f0, ftLastAccessTime.dwHighDateTime=0x1d5d847, ftLastWriteTime.dwLowDateTime=0xdbaa0f0, ftLastWriteTime.dwHighDateTime=0x1d5d847, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="zVEkrYytrwwtE.mp4", cAlternateFileName="ZVEKRY~1.MP4")) returned 1 [0133.832] wcscmp (_String1="zVEkrYytrwwtE.mp4", _String2=".") returned 1 [0133.832] wcscmp (_String1="zVEkrYytrwwtE.mp4", _String2="..") returned 1 [0133.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39f58 [0133.832] wcscpy (in: _Dest=0x3f39f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0133.832] wcscat (in: _Dest=0x3f39f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0133.832] wcscat (in: _Dest=0x3f39f58, _Source="zVEkrYytrwwtE.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4" [0133.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd4 [0133.833] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x185a3d00, ftCreationTime.dwHighDateTime=0x1d5e020, ftLastAccessTime.dwLowDateTime=0xdbaa0f0, ftLastAccessTime.dwHighDateTime=0x1d5d847, ftLastWriteTime.dwLowDateTime=0xdbaa0f0, ftLastWriteTime.dwHighDateTime=0x1d5d847, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="zVEkrYytrwwtE.mp4", cAlternateFileName="ZVEKRY~1.MP4")) returned 0 [0133.833] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0135.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e098) returned 1 [0135.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57398) returned 1 [0135.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6a68) returned 1 Thread: id = 306 os_tid = 0x9bc [0131.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e57f78 [0131.677] wcscpy (in: _Dest=0x3e57f78, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0131.677] wcscat (in: _Dest=0x3e57f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0131.677] wcscat (in: _Dest=0x3e57f78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\*" [0131.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0131.677] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0131.677] wcscmp (_String1=".", _String2=".") returned 0 [0131.677] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.677] wcscmp (_String1="..", _String2=".") returned 1 [0131.677] wcscmp (_String1="..", _String2="..") returned 0 [0131.677] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.677] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.677] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.677] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfe16b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d3737b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0131.678] wcscmp (_String1="Suggested Sites.url", _String2=".") returned 1 [0131.678] wcscmp (_String1="Suggested Sites.url", _String2="..") returned 1 [0131.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32520 [0131.678] wcscpy (in: _Dest=0x3f32520, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0131.678] wcscat (in: _Dest=0x3f32520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0131.678] wcscat (in: _Dest=0x3f32520, _Source="Suggested Sites.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" [0131.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0131.854] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3a0830, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0131.854] wcscmp (_String1="Web Slice Gallery.url", _String2=".") returned 1 [0131.854] wcscmp (_String1="Web Slice Gallery.url", _String2="..") returned 1 [0131.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df9438 [0131.854] wcscpy (in: _Dest=0x3df9438, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0131.854] wcscat (in: _Dest=0x3df9438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0131.854] wcscat (in: _Dest=0x3df9438, _Source="Web Slice Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" [0131.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df9438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0131.859] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3a0830, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0131.859] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0131.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0131.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57f78) returned 1 [0131.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5f78) returned 1 Thread: id = 307 os_tid = 0x9cc [0131.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e688 [0131.678] wcscpy (in: _Dest=0x3d8e688, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0131.678] wcscat (in: _Dest=0x3d8e688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0131.678] wcscat (in: _Dest=0x3d8e688, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\*" [0131.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0131.678] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0132.551] wcscmp (_String1=".", _String2=".") returned 0 [0132.551] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.551] wcscmp (_String1="..", _String2=".") returned 1 [0132.551] wcscmp (_String1="..", _String2="..") returned 0 [0132.551] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2bbff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0132.551] wcscmp (_String1="IE Add-on site.url", _String2=".") returned 1 [0132.551] wcscmp (_String1="IE Add-on site.url", _String2="..") returned 1 [0132.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f344d0 [0132.551] wcscpy (in: _Dest=0x3f344d0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0132.551] wcscat (in: _Dest=0x3f344d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0132.551] wcscat (in: _Dest=0x3f344d0, _Source="IE Add-on site.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0133.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f344d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0133.689] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2bbff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0133.689] wcscmp (_String1="IE site on Microsoft.com.url", _String2=".") returned 1 [0133.689] wcscmp (_String1="IE site on Microsoft.com.url", _String2="..") returned 1 [0133.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7378 [0133.689] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0133.689] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0133.689] wcscat (in: _Dest=0x2c7378, _Source="IE site on Microsoft.com.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0133.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0133.690] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903b950, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2bbff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0133.690] wcscmp (_String1="Microsoft At Home.url", _String2=".") returned 1 [0133.691] wcscmp (_String1="Microsoft At Home.url", _String2="..") returned 1 [0133.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2888 [0133.691] wcscpy (in: _Dest=0x3df2888, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0133.691] wcscat (in: _Dest=0x3df2888, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0133.691] wcscat (in: _Dest=0x3df2888, _Source="Microsoft At Home.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0133.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0133.692] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0133.692] wcscmp (_String1="Microsoft At Work.url", _String2=".") returned 1 [0133.692] wcscmp (_String1="Microsoft At Work.url", _String2="..") returned 1 [0133.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1d48 [0133.692] wcscpy (in: _Dest=0x3df1d48, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0133.693] wcscat (in: _Dest=0x3df1d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0133.693] wcscat (in: _Dest=0x3df1d48, _Source="Microsoft At Work.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0133.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0133.694] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0133.694] wcscmp (_String1="Microsoft Store.url", _String2=".") returned 1 [0133.694] wcscmp (_String1="Microsoft Store.url", _String2="..") returned 1 [0133.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2408 [0133.694] wcscpy (in: _Dest=0x3df2408, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0133.694] wcscat (in: _Dest=0x3df2408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0133.694] wcscat (in: _Dest=0x3df2408, _Source="Microsoft Store.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0133.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0133.696] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0133.696] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0133.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0133.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e688) returned 1 [0133.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c8e0) returned 1 Thread: id = 308 os_tid = 0x9dc [0131.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6548 [0131.683] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0131.683] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0131.683] wcscat (in: _Dest=0x2fe6548, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\*" [0131.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d228 [0131.683] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\*", lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f57110, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0132.551] wcscmp (_String1=".", _String2=".") returned 0 [0132.551] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f57110, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.552] wcscmp (_String1="..", _String2=".") returned 1 [0132.552] wcscmp (_String1="..", _String2="..") returned 0 [0132.552] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0132.552] wcscmp (_String1="MSN Autos.url", _String2=".") returned 1 [0132.552] wcscmp (_String1="MSN Autos.url", _String2="..") returned 1 [0132.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32fe8 [0132.552] wcscpy (in: _Dest=0x3f32fe8, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0132.552] wcscat (in: _Dest=0x3f32fe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0132.552] wcscat (in: _Dest=0x3f32fe8, _Source="MSN Autos.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" [0134.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0134.171] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0134.171] wcscmp (_String1="MSN Entertainment.url", _String2=".") returned 1 [0134.171] wcscmp (_String1="MSN Entertainment.url", _String2="..") returned 1 [0134.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f6c0 [0134.171] wcscpy (in: _Dest=0x3f2f6c0, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0134.171] wcscat (in: _Dest=0x3f2f6c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0134.171] wcscat (in: _Dest=0x3f2f6c0, _Source="MSN Entertainment.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" [0134.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0134.172] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0134.172] wcscmp (_String1="MSN Money.url", _String2=".") returned 1 [0134.172] wcscmp (_String1="MSN Money.url", _String2="..") returned 1 [0134.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68510 [0134.172] wcscpy (in: _Dest=0x3e68510, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0134.172] wcscat (in: _Dest=0x3e68510, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0134.172] wcscat (in: _Dest=0x3e68510, _Source="MSN Money.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" [0134.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0134.173] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0134.173] wcscmp (_String1="MSN Sports.url", _String2=".") returned 1 [0134.173] wcscmp (_String1="MSN Sports.url", _String2="..") returned 1 [0134.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68588 [0134.173] wcscpy (in: _Dest=0x3e68588, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0134.173] wcscat (in: _Dest=0x3e68588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0134.174] wcscat (in: _Dest=0x3e68588, _Source="MSN Sports.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" [0134.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0134.175] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0134.175] wcscmp (_String1="MSN.url", _String2=".") returned 1 [0134.175] wcscmp (_String1="MSN.url", _String2="..") returned 1 [0134.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd478 [0134.175] wcscpy (in: _Dest=0x3ecd478, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0134.175] wcscat (in: _Dest=0x3ecd478, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0134.175] wcscat (in: _Dest=0x3ecd478, _Source="MSN.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" [0134.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ecd478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0134.176] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0134.176] wcscmp (_String1="MSNBC News.url", _String2=".") returned 1 [0134.176] wcscmp (_String1="MSNBC News.url", _String2="..") returned 1 [0134.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68600 [0134.176] wcscpy (in: _Dest=0x3e68600, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0134.176] wcscat (in: _Dest=0x3e68600, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0134.176] wcscat (in: _Dest=0x3e68600, _Source="MSNBC News.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" [0134.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0134.177] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0134.177] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0134.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d228) returned 1 [0134.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0134.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ee30) returned 1 Thread: id = 309 os_tid = 0x9ec [0131.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe5b88 [0131.689] wcscpy (in: _Dest=0x2fe5b88, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0131.689] wcscat (in: _Dest=0x2fe5b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0131.689] wcscat (in: _Dest=0x2fe5b88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\*" [0131.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0131.689] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38058 [0132.555] wcscmp (_String1=".", _String2=".") returned 0 [0132.555] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.555] wcscmp (_String1="..", _String2=".") returned 1 [0132.555] wcscmp (_String1="..", _String2="..") returned 0 [0132.555] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0132.556] wcscmp (_String1="Get Windows Live.url", _String2=".") returned 1 [0132.556] wcscmp (_String1="Get Windows Live.url", _String2="..") returned 1 [0132.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e202a0 [0132.556] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0132.556] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0132.556] wcscat (in: _Dest=0x3e202a0, _Source="Get Windows Live.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" [0138.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0138.960] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0138.960] wcscmp (_String1="Windows Live Gallery.url", _String2=".") returned 1 [0138.960] wcscmp (_String1="Windows Live Gallery.url", _String2="..") returned 1 [0138.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f345f0 [0138.961] wcscpy (in: _Dest=0x3f345f0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0138.961] wcscat (in: _Dest=0x3f345f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0138.961] wcscat (in: _Dest=0x3f345f0, _Source="Windows Live Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" [0138.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f345f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0138.962] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0138.962] wcscmp (_String1="Windows Live Mail.url", _String2=".") returned 1 [0138.962] wcscmp (_String1="Windows Live Mail.url", _String2="..") returned 1 [0138.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f31370 [0138.962] wcscpy (in: _Dest=0x3f31370, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0138.962] wcscat (in: _Dest=0x3f31370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0138.962] wcscat (in: _Dest=0x3f31370, _Source="Windows Live Mail.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" [0138.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40 [0138.964] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0138.964] wcscmp (_String1="Windows Live Spaces.url", _String2=".") returned 1 [0138.964] wcscmp (_String1="Windows Live Spaces.url", _String2="..") returned 1 [0138.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fb88 [0138.964] wcscpy (in: _Dest=0x3f2fb88, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0138.964] wcscat (in: _Dest=0x3f2fb88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0138.964] wcscat (in: _Dest=0x3f2fb88, _Source="Windows Live Spaces.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" [0138.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28 [0138.966] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0138.966] FindClose (in: hFindFile=0x3f38058 | out: hFindFile=0x3f38058) returned 1 [0138.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0138.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5b88) returned 1 [0138.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ee88) returned 1 Thread: id = 310 os_tid = 0x9fc [0131.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\benioku.htm")) returned 0x20 [0134.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm", dwFileAttributes=0x20) returned 0 [0134.318] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\benioku.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.318] GetLastError () returned 0x5 [0134.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm", dwFileAttributes=0x20) returned 0 [0134.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccd28) returned 1 Thread: id = 311 os_tid = 0xa0c [0131.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\berime.htm")) returned 0x20 [0134.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm", dwFileAttributes=0x20) returned 0 [0134.314] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\berime.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.315] GetLastError () returned 0x5 [0134.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm", dwFileAttributes=0x20) returned 0 [0134.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 Thread: id = 312 os_tid = 0xa1c [0131.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe5ac8 [0131.695] wcscpy (in: _Dest=0x2fe5ac8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Esl" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl" [0131.695] wcscat (in: _Dest=0x2fe5ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\" [0131.695] wcscat (in: _Dest=0x2fe5ac8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\*" [0131.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3caf0 [0131.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b18 [0135.686] wcscmp (_String1=".", _String2=".") returned 0 [0135.686] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.686] wcscmp (_String1="..", _String2=".") returned 1 [0135.686] wcscmp (_String1="..", _String2="..") returned 0 [0135.686] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0135.686] wcscmp (_String1="AiodLite.dll", _String2=".") returned 1 [0135.686] wcscmp (_String1="AiodLite.dll", _String2="..") returned 1 [0135.686] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0135.687] FindClose (in: hFindFile=0x3f37b18 | out: hFindFile=0x3f37b18) returned 1 [0135.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3caf0) returned 1 [0135.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5ac8) returned 1 [0135.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6eee0) returned 1 Thread: id = 313 os_tid = 0xa2c [0131.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\irakhau.htm")) returned 0x20 [0135.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm", dwFileAttributes=0x20) returned 0 [0135.684] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\irakhau.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.685] GetLastError () returned 0x5 [0135.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm", dwFileAttributes=0x20) returned 0 [0135.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8db90) returned 1 Thread: id = 314 os_tid = 0xa3c [0131.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leame.htm")) returned 0x20 [0135.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm", dwFileAttributes=0x20) returned 0 [0135.683] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leame.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.683] GetLastError () returned 0x5 [0135.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm", dwFileAttributes=0x20) returned 0 [0135.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dd30) returned 1 Thread: id = 315 os_tid = 0xa4c [0131.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leesmij.htm")) returned 0x20 [0135.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm", dwFileAttributes=0x20) returned 0 [0135.654] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leesmij.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.654] GetLastError () returned 0x5 [0135.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm", dwFileAttributes=0x20) returned 0 [0135.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dc60) returned 1 Thread: id = 316 os_tid = 0xa5c [0131.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leggimi.htm")) returned 0x20 [0135.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm", dwFileAttributes=0x20) returned 0 [0135.681] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leggimi.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.681] GetLastError () returned 0x5 [0135.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm", dwFileAttributes=0x20) returned 0 [0135.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 Thread: id = 317 os_tid = 0xa6c [0131.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leiame.htm")) returned 0x20 [0135.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm", dwFileAttributes=0x20) returned 0 [0135.640] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leiame.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.640] GetLastError () returned 0x5 [0135.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm", dwFileAttributes=0x20) returned 0 [0135.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cbb8) returned 1 Thread: id = 318 os_tid = 0xa7c [0131.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\liesmich.htm")) returned 0x20 [0135.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm", dwFileAttributes=0x20) returned 0 [0135.679] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\liesmich.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.679] GetLastError () returned 0x5 [0135.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm", dwFileAttributes=0x20) returned 0 [0135.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8eb00) returned 1 Thread: id = 319 os_tid = 0xa8c [0131.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lisezmoi.htm")) returned 0x20 [0135.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm", dwFileAttributes=0x20) returned 0 [0135.677] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lisezmoi.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.677] GetLastError () returned 0x5 [0135.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm", dwFileAttributes=0x20) returned 0 [0135.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea98) returned 1 Thread: id = 320 os_tid = 0xa9c [0131.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\llegiu-me.htm")) returned 0x20 [0134.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm", dwFileAttributes=0x20) returned 0 [0134.319] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\llegiu-me.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.320] GetLastError () returned 0x5 [0134.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm", dwFileAttributes=0x20) returned 0 [0134.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5080) returned 1 Thread: id = 321 os_tid = 0xaac [0131.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lueminut.htm")) returned 0x20 [0135.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm", dwFileAttributes=0x20) returned 0 [0135.675] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lueminut.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.676] GetLastError () returned 0x5 [0135.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm", dwFileAttributes=0x20) returned 0 [0135.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 Thread: id = 322 os_tid = 0xabc [0131.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6728 [0131.712] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0131.712] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0131.712] wcscat (in: _Dest=0x2fe6728, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\*" [0131.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0131.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e43ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0131.712] wcscmp (_String1=".", _String2=".") returned 0 [0131.712] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e43ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.713] wcscmp (_String1="..", _String2=".") returned 1 [0131.713] wcscmp (_String1="..", _String2="..") returned 0 [0131.713] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0131.713] wcscmp (_String1="A3DUtils.dll", _String2=".") returned 1 [0131.713] wcscmp (_String1="A3DUtils.dll", _String2="..") returned 1 [0131.713] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca81680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc7d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0131.713] wcscmp (_String1="ACE.dll", _String2=".") returned 1 [0131.713] wcscmp (_String1="ACE.dll", _String2="..") returned 1 [0131.713] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x47f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0131.713] wcscmp (_String1="AcroBroker.exe", _String2=".") returned 1 [0131.713] wcscmp (_String1="AcroBroker.exe", _String2="..") returned 1 [0131.713] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0131.713] wcscmp (_String1="Acrofx32.dll", _String2=".") returned 1 [0131.713] wcscmp (_String1="Acrofx32.dll", _String2="..") returned 1 [0131.713] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd550a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16a0398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0131.713] wcscmp (_String1="AcroRd32.dll", _String2=".") returned 1 [0131.713] wcscmp (_String1="AcroRd32.dll", _String2="..") returned 1 [0131.713] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0131.713] wcscmp (_String1="AcroRd32.exe", _String2=".") returned 1 [0131.713] wcscmp (_String1="AcroRd32.exe", _String2="..") returned 1 [0131.713] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca81680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0131.714] wcscmp (_String1="AcroRd32Info.exe", _String2=".") returned 1 [0131.714] wcscmp (_String1="AcroRd32Info.exe", _String2="..") returned 1 [0131.714] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd406e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0131.714] wcscmp (_String1="AcroTextExtractor.exe", _String2=".") returned 1 [0131.714] wcscmp (_String1="AcroTextExtractor.exe", _String2="..") returned 1 [0131.714] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7e5240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0131.714] wcscmp (_String1="Adobe.Reader.Dependencies.manifest", _String2=".") returned 1 [0131.714] wcscmp (_String1="Adobe.Reader.Dependencies.manifest", _String2="..") returned 1 [0131.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d338 [0131.714] wcscpy (in: _Dest=0x3e2d338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0131.714] wcscat (in: _Dest=0x3e2d338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0131.714] wcscat (in: _Dest=0x3e2d338, _Source="Adobe.Reader.Dependencies.manifest" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" [0136.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0136.153] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcda1360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x128fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0136.153] wcscmp (_String1="AdobeCollabSync.exe", _String2=".") returned 1 [0136.153] wcscmp (_String1="AdobeCollabSync.exe", _String2="..") returned 1 [0136.153] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0136.153] wcscmp (_String1="AdobeLinguistic.dll", _String2=".") returned 1 [0136.153] wcscmp (_String1="AdobeLinguistic.dll", _String2="..") returned 1 [0136.153] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37398, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0136.153] wcscmp (_String1="adoberfp.dll", _String2=".") returned 1 [0136.153] wcscmp (_String1="adoberfp.dll", _String2="..") returned 1 [0136.153] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca81680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a598, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0136.153] wcscmp (_String1="AdobeXMP.dll", _String2=".") returned 1 [0136.153] wcscmp (_String1="AdobeXMP.dll", _String2="..") returned 1 [0136.153] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0136.153] wcscmp (_String1="AGM.dll", _String2=".") returned 1 [0136.153] wcscmp (_String1="AGM.dll", _String2="..") returned 1 [0136.153] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0136.153] wcscmp (_String1="AGMGPUOptIn.ini", _String2=".") returned 1 [0136.153] wcscmp (_String1="AGMGPUOptIn.ini", _String2="..") returned 1 [0136.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e244c0 [0136.154] wcscpy (in: _Dest=0x3e244c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.154] wcscat (in: _Dest=0x3e244c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.154] wcscat (in: _Dest=0x3e244c0, _Source="AGMGPUOptIn.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" [0136.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e244c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0136.155] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x366c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0136.155] wcscmp (_String1="ahclient.dll", _String2=".") returned 1 [0136.155] wcscmp (_String1="ahclient.dll", _String2="..") returned 1 [0136.155] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca353c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0136.155] wcscmp (_String1="AIR", _String2=".") returned 1 [0136.155] wcscmp (_String1="AIR", _String2="..") returned 1 [0136.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd068 [0136.155] wcscpy (in: _Dest=0x3ecd068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.155] wcscat (in: _Dest=0x3ecd068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.155] wcscat (in: _Dest=0x3ecd068, _Source="AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0136.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0136.157] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3e0d20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5ef398, dwReserved0=0x0, dwReserved1=0x0, cFileName="authplay.dll", cAlternateFileName="")) returned 1 [0136.157] wcscmp (_String1="authplay.dll", _String2=".") returned 1 [0136.157] wcscmp (_String1="authplay.dll", _String2="..") returned 1 [0136.157] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0136.157] wcscmp (_String1="AXE8SharedExpat.dll", _String2=".") returned 1 [0136.157] wcscmp (_String1="AXE8SharedExpat.dll", _String2="..") returned 1 [0136.157] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x91590, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0136.157] wcscmp (_String1="AXSLE.dll", _String2=".") returned 1 [0136.157] wcscmp (_String1="AXSLE.dll", _String2="..") returned 1 [0136.157] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1af88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0136.157] wcscmp (_String1="BIB.dll", _String2=".") returned 1 [0136.157] wcscmp (_String1="BIB.dll", _String2="..") returned 1 [0136.158] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0136.158] wcscmp (_String1="BIBUtils.dll", _String2=".") returned 1 [0136.158] wcscmp (_String1="BIBUtils.dll", _String2="..") returned 1 [0136.158] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda5e8440, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0136.158] wcscmp (_String1="Browser", _String2=".") returned 1 [0136.158] wcscmp (_String1="Browser", _String2="..") returned 1 [0136.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8054bd0 [0136.158] wcscpy (in: _Dest=0x8054bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.158] wcscat (in: _Dest=0x8054bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.158] wcscat (in: _Dest=0x8054bd0, _Source="Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0136.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0136.159] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0136.159] wcscmp (_String1="ccme_base.dll", _String2=".") returned 1 [0136.160] wcscmp (_String1="ccme_base.dll", _String2="..") returned 1 [0136.160] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc60ad40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2aa998, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0136.160] wcscmp (_String1="CoolType.dll", _String2=".") returned 1 [0136.160] wcscmp (_String1="CoolType.dll", _String2="..") returned 1 [0136.160] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9e9100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0136.160] wcscmp (_String1="cryptocme2.dll", _String2=".") returned 1 [0136.160] wcscmp (_String1="cryptocme2.dll", _String2="..") returned 1 [0136.160] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x647, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0136.160] wcscmp (_String1="cryptocme2.sig", _String2=".") returned 1 [0136.160] wcscmp (_String1="cryptocme2.sig", _String2="..") returned 1 [0136.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e243c0 [0136.160] wcscpy (in: _Dest=0x3e243c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.160] wcscat (in: _Dest=0x3e243c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.160] wcscat (in: _Dest=0x3e243c0, _Source="cryptocme2.sig" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" [0136.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e243c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0136.161] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0136.161] wcscmp (_String1="Eula.exe", _String2=".") returned 1 [0136.162] wcscmp (_String1="Eula.exe", _String2="..") returned 1 [0136.162] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7e5240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0136.162] wcscmp (_String1="ExtendScript.dll", _String2=".") returned 1 [0136.162] wcscmp (_String1="ExtendScript.dll", _String2="..") returned 1 [0136.162] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb03a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0136.162] wcscmp (_String1="icucnv40.dll", _String2=".") returned 1 [0136.162] wcscmp (_String1="icucnv40.dll", _String2="..") returned 1 [0136.162] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17790, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0136.162] wcscmp (_String1="icudt40.dll", _String2=".") returned 1 [0136.162] wcscmp (_String1="icudt40.dll", _String2="..") returned 1 [0136.162] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd46fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40_full.dll", cAlternateFileName="ICUDT4~1.DLL")) returned 1 [0136.162] wcscmp (_String1="icudt40_full.dll", _String2=".") returned 1 [0136.162] wcscmp (_String1="icudt40_full.dll", _String2="..") returned 1 [0136.162] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1131a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icuuc40.dll", cAlternateFileName="")) returned 1 [0136.162] wcscmp (_String1="icuuc40.dll", _String2=".") returned 1 [0136.162] wcscmp (_String1="icuuc40.dll", _String2="..") returned 1 [0136.162] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0136.162] wcscmp (_String1="IDTemplates", _String2=".") returned 1 [0136.162] wcscmp (_String1="IDTemplates", _String2="..") returned 1 [0136.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0b988 [0136.162] wcscpy (in: _Dest=0x3f0b988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.163] wcscat (in: _Dest=0x3f0b988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.163] wcscat (in: _Dest=0x3f0b988, _Source="IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0136.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0b988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454 [0136.164] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0136.164] wcscmp (_String1="Javascripts", _String2=".") returned 1 [0136.164] wcscmp (_String1="Javascripts", _String2="..") returned 1 [0136.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0ba00 [0136.164] wcscpy (in: _Dest=0x3f0ba00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.164] wcscat (in: _Dest=0x3f0ba00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.164] wcscat (in: _Dest=0x3f0ba00, _Source="Javascripts" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" [0136.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0ba00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0136.166] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0136.166] wcscmp (_String1="JP2KLib.dll", _String2=".") returned 1 [0136.166] wcscmp (_String1="JP2KLib.dll", _String2="..") returned 1 [0136.166] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0136.166] wcscmp (_String1="Legal", _String2=".") returned 1 [0136.166] wcscmp (_String1="Legal", _String2="..") returned 1 [0136.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd208 [0136.166] wcscpy (in: _Dest=0x3ecd208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.166] wcscat (in: _Dest=0x3ecd208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.166] wcscat (in: _Dest=0x3ecd208, _Source="Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0136.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0136.168] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0136.168] wcscmp (_String1="Locale", _String2=".") returned 1 [0136.168] wcscmp (_String1="Locale", _String2="..") returned 1 [0136.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8054c40 [0136.168] wcscpy (in: _Dest=0x8054c40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.168] wcscat (in: _Dest=0x8054c40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.168] wcscat (in: _Dest=0x8054c40, _Source="Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0136.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0136.532] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd36e900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0136.532] wcscmp (_String1="logsession.dll", _String2=".") returned 1 [0136.532] wcscmp (_String1="logsession.dll", _String2="..") returned 1 [0136.532] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0136.532] wcscmp (_String1="LogTransport2.exe", _String2=".") returned 1 [0136.532] wcscmp (_String1="LogTransport2.exe", _String2="..") returned 1 [0136.532] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9884880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0136.532] wcscmp (_String1="Onix32.dll", _String2=".") returned 1 [0136.532] wcscmp (_String1="Onix32.dll", _String2="..") returned 1 [0136.532] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0136.532] wcscmp (_String1="PDFPrevHndlr.dll", _String2=".") returned 1 [0136.532] wcscmp (_String1="PDFPrevHndlr.dll", _String2="..") returned 1 [0136.532] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0136.532] wcscmp (_String1="PDFSigQFormalRep.pdf", _String2=".") returned 1 [0136.532] wcscmp (_String1="PDFSigQFormalRep.pdf", _String2="..") returned 1 [0136.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f309e0 [0136.927] wcscpy (in: _Dest=0x3f309e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.927] wcscat (in: _Dest=0x3f309e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.927] wcscat (in: _Dest=0x3f309e0, _Source="PDFSigQFormalRep.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" [0136.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f309e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0136.935] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0136.935] wcscmp (_String1="pe.dll", _String2=".") returned 1 [0136.935] wcscmp (_String1="pe.dll", _String2="..") returned 1 [0136.935] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="PIAGLB~1.DLL")) returned 1 [0136.935] wcscmp (_String1="piaglbreakfinder.dll", _String2=".") returned 1 [0136.935] wcscmp (_String1="piaglbreakfinder.dll", _String2="..") returned 1 [0136.935] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15eefa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0136.935] wcscmp (_String1="plug_ins", _String2=".") returned 1 [0136.935] wcscmp (_String1="plug_ins", _String2="..") returned 1 [0136.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8054e00 [0136.935] wcscpy (in: _Dest=0x8054e00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.935] wcscat (in: _Dest=0x8054e00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.935] wcscat (in: _Dest=0x8054e00, _Source="plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0136.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0136.937] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab435c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac9a220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0136.937] wcscmp (_String1="plug_ins3d", _String2=".") returned 1 [0136.937] wcscmp (_String1="plug_ins3d", _String2="..") returned 1 [0136.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0baf0 [0136.937] wcscpy (in: _Dest=0x3f0baf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.937] wcscat (in: _Dest=0x3f0baf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.937] wcscat (in: _Dest=0x3f0baf0, _Source="plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0136.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0baf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0136.938] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0136.938] wcscmp (_String1="pmd.cer", _String2=".") returned 1 [0136.938] wcscmp (_String1="pmd.cer", _String2="..") returned 1 [0136.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8054ee0 [0136.938] wcscpy (in: _Dest=0x8054ee0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.938] wcscat (in: _Dest=0x8054ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.938] wcscat (in: _Dest=0x8054ee0, _Source="pmd.cer" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer" [0136.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0136.939] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0136.939] wcscmp (_String1="reader_sl.exe", _String2=".") returned 1 [0136.939] wcscmp (_String1="reader_sl.exe", _String2="..") returned 1 [0136.940] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0136.940] wcscmp (_String1="rt3d.dll", _String2=".") returned 1 [0136.940] wcscmp (_String1="rt3d.dll", _String2="..") returned 1 [0136.940] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0136.940] wcscmp (_String1="RTC.der", _String2=".") returned 1 [0136.940] wcscmp (_String1="RTC.der", _String2="..") returned 1 [0136.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8054d20 [0136.940] wcscpy (in: _Dest=0x8054d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.940] wcscat (in: _Dest=0x8054d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.940] wcscat (in: _Dest=0x8054d20, _Source="RTC.der" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der" [0136.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0136.941] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7e5240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0136.941] wcscmp (_String1="ScCore.dll", _String2=".") returned 1 [0136.941] wcscmp (_String1="ScCore.dll", _String2="..") returned 1 [0136.941] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd80b3a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd80b3a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0136.942] wcscmp (_String1="Services", _String2=".") returned 1 [0136.942] wcscmp (_String1="Services", _String2="..") returned 1 [0136.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8054f50 [0136.942] wcscpy (in: _Dest=0x8054f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.942] wcscat (in: _Dest=0x8054f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.942] wcscat (in: _Dest=0x8054f50, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0136.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0136.948] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc630ea0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc630ea0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPlugins", cAlternateFileName="SPPLUG~1")) returned 1 [0136.948] wcscmp (_String1="SPPlugins", _String2=".") returned 1 [0136.948] wcscmp (_String1="SPPlugins", _String2="..") returned 1 [0136.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054fc0 [0136.948] wcscpy (in: _Dest=0x8054fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0136.948] wcscat (in: _Dest=0x8054fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0136.948] wcscat (in: _Dest=0x8054fc0, _Source="SPPlugins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" [0137.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08 [0137.038] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0137.038] wcscmp (_String1="sqlite.dll", _String2=".") returned 1 [0137.038] wcscmp (_String1="sqlite.dll", _String2="..") returned 1 [0137.039] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc92aa20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc9c2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0137.039] wcscmp (_String1="Tracker", _String2=".") returned 1 [0137.039] wcscmp (_String1="Tracker", _String2="..") returned 1 [0137.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39468 [0137.039] wcscpy (in: _Dest=0x3f39468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0137.039] wcscat (in: _Dest=0x3f39468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0137.039] wcscat (in: _Dest=0x3f39468, _Source="Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0137.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0137.040] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1 [0137.040] wcscmp (_String1="ViewerPS.dll", _String2=".") returned 1 [0137.040] wcscmp (_String1="ViewerPS.dll", _String2="..") returned 1 [0137.040] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 0 [0137.040] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0137.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0137.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0137.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 Thread: id = 323 os_tid = 0xac0 [0131.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readme.htm")) returned 0x20 [0135.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm", dwFileAttributes=0x20) returned 0 [0135.674] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readme.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.674] GetLastError () returned 0x5 [0135.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm", dwFileAttributes=0x20) returned 0 [0135.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 Thread: id = 324 os_tid = 0xacc [0131.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecs.htm")) returned 0x20 [0135.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm", dwFileAttributes=0x20) returned 0 [0135.672] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecs.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.672] GetLastError () returned 0x5 [0135.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm", dwFileAttributes=0x20) returned 0 [0135.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 325 os_tid = 0xb58 [0131.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmect.htm")) returned 0x20 [0135.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm", dwFileAttributes=0x20) returned 0 [0135.663] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmect.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.663] GetLastError () returned 0x5 [0135.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm", dwFileAttributes=0x20) returned 0 [0135.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e8f8) returned 1 Thread: id = 326 os_tid = 0x43c [0131.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecze.htm")) returned 0x20 [0135.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm", dwFileAttributes=0x20) returned 0 [0135.646] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecze.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.646] GetLastError () returned 0x5 [0135.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm", dwFileAttributes=0x20) returned 0 [0135.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1638) returned 1 Thread: id = 327 os_tid = 0xdb4 [0131.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehrv.htm")) returned 0x20 [0135.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm", dwFileAttributes=0x20) returned 0 [0135.648] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehrv.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.648] GetLastError () returned 0x5 [0135.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm", dwFileAttributes=0x20) returned 0 [0135.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1b08) returned 1 Thread: id = 328 os_tid = 0xdf0 [0131.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehun.htm")) returned 0x20 [0135.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm", dwFileAttributes=0x20) returned 0 [0135.649] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehun.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.649] GetLastError () returned 0x5 [0135.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm", dwFileAttributes=0x20) returned 0 [0135.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1be8) returned 1 Thread: id = 329 os_tid = 0xde8 [0131.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmej.htm")) returned 0x20 [0135.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm", dwFileAttributes=0x20) returned 0 [0135.642] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmej.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.642] GetLastError () returned 0x5 [0135.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm", dwFileAttributes=0x20) returned 0 [0135.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e890) returned 1 Thread: id = 330 os_tid = 0x68c [0132.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmek.htm")) returned 0x20 [0135.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm", dwFileAttributes=0x20) returned 0 [0135.665] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmek.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.665] GetLastError () returned 0x5 [0135.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm", dwFileAttributes=0x20) returned 0 [0135.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 Thread: id = 331 os_tid = 0xe98 [0132.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmepol.htm")) returned 0x20 [0135.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm", dwFileAttributes=0x20) returned 0 [0135.660] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmepol.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.660] GetLastError () returned 0x5 [0135.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm", dwFileAttributes=0x20) returned 0 [0135.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1718) returned 1 Thread: id = 332 os_tid = 0xe9c [0132.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerum.htm")) returned 0x20 [0135.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm", dwFileAttributes=0x20) returned 0 [0135.658] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerum.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.658] GetLastError () returned 0x5 [0135.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm", dwFileAttributes=0x20) returned 0 [0135.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1cc8) returned 1 Thread: id = 333 os_tid = 0xeb0 [0132.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerus.htm")) returned 0x20 [0135.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm", dwFileAttributes=0x20) returned 0 [0135.656] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerus.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.656] GetLastError () returned 0x5 [0135.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm", dwFileAttributes=0x20) returned 0 [0135.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ccd8) returned 1 Thread: id = 334 os_tid = 0xeac [0132.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmesky.htm")) returned 0x20 [0135.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm", dwFileAttributes=0x20) returned 0 [0135.653] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmesky.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.653] GetLastError () returned 0x5 [0135.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm", dwFileAttributes=0x20) returned 0 [0135.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364a80) returned 1 Thread: id = 335 os_tid = 0xea8 [0132.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmeukr.htm")) returned 0x20 [0135.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm", dwFileAttributes=0x20) returned 0 [0135.651] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmeukr.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.651] GetLastError () returned 0x5 [0135.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm", dwFileAttributes=0x20) returned 0 [0135.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3519c0) returned 1 Thread: id = 336 os_tid = 0xea0 [0132.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3eccc58 [0132.032] wcscpy (in: _Dest=0x3eccc58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0132.033] wcscat (in: _Dest=0x3eccc58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0132.033] wcscat (in: _Dest=0x3eccc58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\*" [0132.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0132.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37558 [0138.688] wcscmp (_String1=".", _String2=".") returned 0 [0138.688] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.688] wcscmp (_String1="..", _String2=".") returned 1 [0138.688] wcscmp (_String1="..", _String2="..") returned 0 [0138.688] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb80ec00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc86c340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc86c340, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIDFont", cAlternateFileName="")) returned 1 [0138.688] wcscmp (_String1="CIDFont", _String2=".") returned 1 [0138.688] wcscmp (_String1="CIDFont", _String2="..") returned 1 [0138.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39628 [0138.688] wcscpy (in: _Dest=0x3f39628, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0138.688] wcscat (in: _Dest=0x3f39628, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0138.688] wcscat (in: _Dest=0x3f39628, _Source="CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0145.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0145.661] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc7619a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0145.661] wcscmp (_String1="CMap", _String2=".") returned 1 [0145.661] wcscmp (_String1="CMap", _String2="..") returned 1 [0145.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33cf8 [0145.661] wcscpy (in: _Dest=0x3f33cf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0145.661] wcscat (in: _Dest=0x3f33cf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0145.661] wcscat (in: _Dest=0x3f33cf8, _Source="CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0145.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33cf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0145.663] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1 [0145.663] wcscmp (_String1="ENUtxt.pdf", _String2=".") returned 1 [0145.663] wcscmp (_String1="ENUtxt.pdf", _String2="..") returned 1 [0145.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0c180 [0145.663] wcscpy (in: _Dest=0x3f0c180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0145.663] wcscat (in: _Dest=0x3f0c180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0145.663] wcscat (in: _Dest=0x3f0c180, _Source="ENUtxt.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" [0145.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0145.665] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0145.665] wcscmp (_String1="Font", _String2=".") returned 1 [0145.665] wcscmp (_String1="Font", _String2="..") returned 1 [0145.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f335f8 [0145.665] wcscpy (in: _Dest=0x3f335f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0145.665] wcscat (in: _Dest=0x3f335f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0145.665] wcscat (in: _Dest=0x3f335f8, _Source="Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0145.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f335f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0145.667] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdadcad20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0145.667] wcscmp (_String1="Linguistics", _String2=".") returned 1 [0145.667] wcscmp (_String1="Linguistics", _String2="..") returned 1 [0145.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b6b8 [0145.667] wcscpy (in: _Dest=0x3f0b6b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0145.668] wcscat (in: _Dest=0x3f0b6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0145.668] wcscat (in: _Dest=0x3f0b6b8, _Source="Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0145.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0b6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0145.669] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1 [0145.670] wcscmp (_String1="SaslPrep", _String2=".") returned 1 [0145.670] wcscmp (_String1="SaslPrep", _String2="..") returned 1 [0145.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0be38 [0145.670] wcscpy (in: _Dest=0x3f0be38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0145.670] wcscat (in: _Dest=0x3f0be38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0145.670] wcscat (in: _Dest=0x3f0be38, _Source="SaslPrep" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" [0145.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0be38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0145.671] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1 [0145.672] wcscmp (_String1="TypeSupport", _String2=".") returned 1 [0145.672] wcscmp (_String1="TypeSupport", _String2="..") returned 1 [0145.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0145.672] wcscpy (in: _Dest=0x3d51200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0145.672] wcscat (in: _Dest=0x3d51200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0145.672] wcscat (in: _Dest=0x3d51200, _Source="TypeSupport" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" [0145.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d51200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0147.346] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0 [0147.346] FindClose (in: hFindFile=0x3f37558 | out: hFindFile=0x3f37558) returned 1 [0147.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0147.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccc58) returned 1 [0147.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4b08) returned 1 Thread: id = 337 os_tid = 0xe94 [0132.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f394d8 [0132.033] wcscpy (in: _Dest=0x3f394d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" [0132.033] wcscat (in: _Dest=0x3f394d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\" [0132.033] wcscat (in: _Dest=0x3f394d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\*" [0132.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0132.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9009a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9009a20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0135.662] wcscmp (_String1=".", _String2=".") returned 0 [0135.662] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9009a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9009a20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.662] wcscmp (_String1="..", _String2=".") returned 1 [0135.662] wcscmp (_String1="..", _String2="..") returned 0 [0135.662] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 1 [0135.662] wcscmp (_String1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", _String2=".") returned 1 [0135.662] wcscmp (_String1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", _String2="..") returned 1 [0135.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6d00 [0135.662] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" [0135.662] wcscat (in: _Dest=0x2ff6d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\" [0135.662] wcscat (in: _Dest=0x2ff6d00, _Source="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0145.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff6d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0145.009] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 0 [0145.009] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0145.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0145.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f394d8) returned 1 [0145.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e620) returned 1 Thread: id = 338 os_tid = 0xeb4 [0132.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\vigtigt.htm")) returned 0x20 [0135.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm", dwFileAttributes=0x20) returned 0 [0135.666] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\vigtigt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.667] GetLastError () returned 0x5 [0135.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm", dwFileAttributes=0x20) returned 0 [0135.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e5b8) returned 1 Thread: id = 339 os_tid = 0xeb8 [0132.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktig.htm")) returned 0x20 [0135.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm", dwFileAttributes=0x20) returned 0 [0135.668] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktig.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.668] GetLastError () returned 0x5 [0135.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm", dwFileAttributes=0x20) returned 0 [0135.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 Thread: id = 340 os_tid = 0xebc [0132.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktigt.htm")) returned 0x20 [0135.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm", dwFileAttributes=0x20) returned 0 [0135.670] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktigt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.670] GetLastError () returned 0x5 [0135.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm", dwFileAttributes=0x20) returned 0 [0135.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e4e8) returned 1 Thread: id = 341 os_tid = 0xe8c [0132.035] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png" (normalized: "c:\\users\\eebsym5\\pictures\\6eiz_-qhglnnk4hv7 fa.png")) returned 0x20 [0132.035] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png", dwFileAttributes=0x20) returned 1 [0132.035] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png" (normalized: "c:\\users\\eebsym5\\pictures\\6eiz_-qhglnnk4hv7 fa.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe58 [0132.035] GetFileSizeEx (in: hFile=0xe58, lpFileSize=0xa02fee0 | out: lpFileSize=0xa02fee0*=69960) returned 1 [0132.035] SetFilePointerEx (in: hFile=0xe58, liDistanceToMove=0x11144, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.035] ReadFile (in: hFile=0xe58, lpBuffer=0xa02feec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa02fec8, lpOverlapped=0x0 | out: lpBuffer=0xa02feec*, lpNumberOfBytesRead=0xa02fec8*=0x4, lpOverlapped=0x0) returned 1 [0132.037] SetFilePointerEx (in: hFile=0xe58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3228 [0132.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef15e0 [0132.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0132.037] NtQuerySystemTime (in: CurrentTime=0xa02fe68 | out: CurrentTime=0xa02fe68*=132471540007152000) returned 0x0 [0132.037] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x1a551f3d [0132.037] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x72be9066 [0132.037] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x4cc261ce [0132.037] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x3461f34b [0132.037] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x4facbc02 [0132.037] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x4d2d8192 [0132.037] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x2b7a7e36 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x6b79c013 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x3b7729b3 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0xa01aa14 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x516ef349 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x5857e43d [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x42d0cb1e [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x4b4fe43f [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x125ff413 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x3799b913 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x4155d679 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x204d562b [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x77515c14 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x54da890d [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x41883fda [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x4a320f4c [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x1b6da946 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x6ab4bf5b [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x67b55bd6 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x4c9e1b93 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x40ec5cfa [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x52eaf8f9 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x7fa20875 [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x1fed024b [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x787092ad [0132.038] RtlRandomEx (in: Seed=0xa02fe60 | out: Seed=0xa02fe60) returned 0x46c1c08 [0132.047] SetFilePointerEx (in: hFile=0xe58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.047] ReadFile (in: hFile=0xe58, lpBuffer=0x805dfc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa02fe68, lpOverlapped=0x0 | out: lpBuffer=0x805dfc8*, lpNumberOfBytesRead=0xa02fe68*=0x3c00, lpOverlapped=0x0) returned 1 [0132.047] SetFilePointerEx (in: hFile=0xe58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4500 [0132.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0132.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3228 [0132.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3228) returned 1 [0132.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8061bd0 [0132.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3228 [0132.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0132.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0132.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4500) returned 1 [0132.048] WriteFile (in: hFile=0xe58, lpBuffer=0x8061bd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa02fe68, lpOverlapped=0x0 | out: lpBuffer=0x8061bd0*, lpNumberOfBytesWritten=0xa02fe68*=0x3c00, lpOverlapped=0x0) returned 1 [0133.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061bd0) returned 1 [0133.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805dfc8) returned 1 [0133.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e50f08 [0133.903] SetFilePointerEx (in: hFile=0xe58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.903] WriteFile (in: hFile=0xe58, lpBuffer=0x3ef7fd8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xa02fed4, lpOverlapped=0x0 | out: lpBuffer=0x3ef7fd8*, lpNumberOfBytesWritten=0xa02fed4*=0x122, lpOverlapped=0x0) returned 1 [0136.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7fd8) returned 1 [0136.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ca28) returned 1 [0136.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e60) returned 1 [0136.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0136.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3228) returned 1 [0136.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef15e0) returned 1 [0136.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef31d8) returned 1 [0136.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2f58) returned 1 [0136.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24140 [0136.292] wcscpy (in: _Dest=0x3e24140, _Source="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png") returned="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png" [0136.292] wcscat (in: _Dest=0x3e24140, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png.f0dbec" [0136.292] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png.f0dbec", NtPathName=0xa02fe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\6EiZ_-qhGlnnk4hV7 FA.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a240 [0136.544] FlushFileBuffers (hFile=0xe58) returned 1 [0136.546] CloseHandle (hObject=0xe58) returned 1 [0136.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecdb60 [0136.558] wcscpy (in: _Dest=0x3ecdb60, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0136.558] wcscat (in: _Dest=0x3ecdb60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" [0136.558] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\f0dbec-readme.txt")) returned 0x20 [0136.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdb60) returned 1 [0136.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5320) returned 1 Thread: id = 342 os_tid = 0xedc [0132.048] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png" (normalized: "c:\\users\\eebsym5\\pictures\\akohtk.png")) returned 0x20 [0132.048] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png", dwFileAttributes=0x20) returned 1 [0132.049] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png" (normalized: "c:\\users\\eebsym5\\pictures\\akohtk.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1034 [0132.049] GetFileSizeEx (in: hFile=0x1034, lpFileSize=0x7acfbe8 | out: lpFileSize=0x7acfbe8*=55080) returned 1 [0132.049] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0xd724, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.049] ReadFile (in: hFile=0x1034, lpBuffer=0x7acfbf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7acfbd0, lpOverlapped=0x0 | out: lpBuffer=0x7acfbf4*, lpNumberOfBytesRead=0x7acfbd0*=0x4, lpOverlapped=0x0) returned 1 [0132.051] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0132.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1860 [0132.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1608 [0132.051] NtQuerySystemTime (in: CurrentTime=0x7acfb70 | out: CurrentTime=0x7acfb70*=132471540007308000) returned 0x0 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x5d79ae50 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x40716e50 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x20f523b2 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x1cd00db4 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x6babad96 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x2cdf66c [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x2d980187 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0xd56b21e [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x511ce476 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x2a82c7a1 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x415968d9 [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x6db81aaa [0132.051] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x4d84ac2b [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x5e8e4094 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x7a61d572 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x4e00a228 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x3227cede [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x36ca40d9 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x2511e830 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x6a4e8fe9 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x67507b97 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x1ee0d9f2 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x7f00e8ad [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x1afa863c [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x5acaefa3 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x28e5a806 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x5023e814 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x55b6f8c1 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x3d268031 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x1a628f88 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x2b25b108 [0132.052] RtlRandomEx (in: Seed=0x7acfb68 | out: Seed=0x7acfb68) returned 0x79228225 [0132.061] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.061] ReadFile (in: hFile=0x1034, lpBuffer=0x80657d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7acfb70, lpOverlapped=0x0 | out: lpBuffer=0x80657d8*, lpNumberOfBytesRead=0x7acfb70*=0x3c00, lpOverlapped=0x0) returned 1 [0132.062] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3e88 [0132.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0132.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0132.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0132.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80693e0 [0132.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0132.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1608 [0132.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1608) returned 1 [0132.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0132.062] WriteFile (in: hFile=0x1034, lpBuffer=0x80693e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7acfb70, lpOverlapped=0x0 | out: lpBuffer=0x80693e0*, lpNumberOfBytesWritten=0x7acfb70*=0x3c00, lpOverlapped=0x0) returned 1 [0132.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80693e0) returned 1 [0132.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80657d8) returned 1 [0132.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df3908 [0132.630] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.631] WriteFile (in: hFile=0x1034, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x7acfbdc, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x7acfbdc*=0x106, lpOverlapped=0x0) returned 1 [0133.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0133.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3ed8) returned 1 [0133.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0133.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3908) returned 1 [0133.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0133.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1860) returned 1 [0133.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0133.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1658) returned 1 [0133.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe71a8 [0133.010] wcscpy (in: _Dest=0x2fe71a8, _Source="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png") returned="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png" [0133.010] wcscat (in: _Dest=0x2fe71a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png.f0dbec" [0133.010] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png.f0dbec", NtPathName=0x7acfb60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\AKOhtk.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f330d8 [0133.216] FlushFileBuffers (hFile=0x1034) returned 1 [0133.221] CloseHandle (hObject=0x1034) returned 1 [0133.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e210 [0133.222] wcscpy (in: _Dest=0x3d8e210, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0133.222] wcscat (in: _Dest=0x3d8e210, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" [0133.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\f0dbec-readme.txt")) returned 0x20 [0133.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 [0133.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f098) returned 1 Thread: id = 343 os_tid = 0xe80 [0132.063] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\l8xsjdn7qrs.bmp")) returned 0x20 [0132.063] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp", dwFileAttributes=0x20) returned 1 [0132.063] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\l8xsjdn7qrs.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1048 [0132.063] GetFileSizeEx (in: hFile=0x1048, lpFileSize=0xa16fdc8 | out: lpFileSize=0xa16fdc8*=10569) returned 1 [0132.063] SetFilePointerEx (in: hFile=0x1048, liDistanceToMove=0x2945, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.063] ReadFile (in: hFile=0x1048, lpBuffer=0xa16fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa16fdb0, lpOverlapped=0x0 | out: lpBuffer=0xa16fdd4*, lpNumberOfBytesRead=0xa16fdb0*=0x4, lpOverlapped=0x0) returned 1 [0132.065] SetFilePointerEx (in: hFile=0x1048, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1608 [0132.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16a8 [0132.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0132.065] NtQuerySystemTime (in: CurrentTime=0xa16fd50 | out: CurrentTime=0xa16fd50*=132471540007464000) returned 0x0 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x61e112b9 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x1611db85 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x6e99d887 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x518451 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x3b932f77 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x41212102 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x3c818b62 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x729ca2d6 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x64bdac5e [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x1481b7e3 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0xb6e27ed [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x12cce375 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x3db26320 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x6efdc9d3 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x743ed9bf [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x37b46652 [0132.065] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0xe2bf3 [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x660f63ee [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x6249639a [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x61489318 [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x482f1c23 [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x22d9445a [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x5394b045 [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x405ae98 [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x2980f1af [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x2a9c8d4c [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x651efdae [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0xee111cb [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x76297479 [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x540da7f2 [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x56473be2 [0132.066] RtlRandomEx (in: Seed=0xa16fd48 | out: Seed=0xa16fd48) returned 0x6e22d897 [0132.075] ReadFile (in: hFile=0x1048, lpBuffer=0x806cfe8, nNumberOfBytesToRead=0x2949, lpNumberOfBytesRead=0xa16fd44, lpOverlapped=0x0 | out: lpBuffer=0x806cfe8*, lpNumberOfBytesRead=0xa16fd44*=0x2949, lpOverlapped=0x0) returned 1 [0132.075] SetFilePointerEx (in: hFile=0x1048, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.075] WriteFile (in: hFile=0x1048, lpBuffer=0x8070bf0*, nNumberOfBytesToWrite=0x2949, lpNumberOfBytesWritten=0xa16fd48, lpOverlapped=0x0 | out: lpBuffer=0x8070bf0*, lpNumberOfBytesWritten=0xa16fd48*=0x2949, lpOverlapped=0x0) returned 1 [0132.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3340 [0132.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0132.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0132.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8070bf0) returned 1 [0132.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x806cfe8) returned 1 [0132.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0132.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df78a8 [0132.628] SetFilePointerEx (in: hFile=0x1048, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.628] WriteFile (in: hFile=0x1048, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa16fdbc, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0xa16fdbc*=0x110, lpOverlapped=0x0) returned 1 [0133.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0133.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79f8) returned 1 [0133.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0133.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78a8) returned 1 [0133.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3340) returned 1 [0133.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16a8) returned 1 [0133.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1810) returned 1 [0133.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1748) returned 1 [0133.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39938 [0133.008] wcscpy (in: _Dest=0x3f39938, _Source="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp" [0133.008] wcscat (in: _Dest=0x3f39938, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp.f0dbec" [0133.008] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp.f0dbec", NtPathName=0xa16fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\l8xsjdN7qrS.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5008 [0133.212] FlushFileBuffers (hFile=0x1048) returned 1 [0133.219] CloseHandle (hObject=0x1048) returned 1 [0133.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e210 [0133.220] wcscpy (in: _Dest=0x3d8e210, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0133.220] wcscat (in: _Dest=0x3d8e210, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" [0133.220] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\f0dbec-readme.txt")) returned 0x20 [0133.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 [0133.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 344 os_tid = 0xe6c [0132.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd000 [0132.076] wcscpy (in: _Dest=0x3ecd000, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" [0132.076] wcscat (in: _Dest=0x3ecd000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0132.076] wcscat (in: _Dest=0x3ecd000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\*" [0132.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0132.076] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x286b7540, ftCreationTime.dwHighDateTime=0x1d5dbcc, ftLastAccessTime.dwLowDateTime=0x62eaff60, ftLastAccessTime.dwHighDateTime=0x1d5dd39, ftLastWriteTime.dwLowDateTime=0x62eaff60, ftLastWriteTime.dwHighDateTime=0x1d5dd39, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a08 [0132.076] wcscmp (_String1=".", _String2=".") returned 0 [0132.076] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x286b7540, ftCreationTime.dwHighDateTime=0x1d5dbcc, ftLastAccessTime.dwLowDateTime=0x62eaff60, ftLastAccessTime.dwHighDateTime=0x1d5dd39, ftLastWriteTime.dwLowDateTime=0x62eaff60, ftLastWriteTime.dwHighDateTime=0x1d5dd39, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.076] wcscmp (_String1="..", _String2=".") returned 1 [0132.076] wcscmp (_String1="..", _String2="..") returned 0 [0132.076] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff7c0a40, ftCreationTime.dwHighDateTime=0x1d5dbf4, ftLastAccessTime.dwLowDateTime=0xfd57a110, ftLastAccessTime.dwHighDateTime=0x1d5e07d, ftLastWriteTime.dwLowDateTime=0xfd57a110, ftLastWriteTime.dwHighDateTime=0x1d5e07d, nFileSizeHigh=0x0, nFileSizeLow=0x93b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EWtjn5BMIzjUl2l2.gif", cAlternateFileName="EWTJN5~1.GIF")) returned 1 [0132.076] wcscmp (_String1="EWtjn5BMIzjUl2l2.gif", _String2=".") returned 1 [0132.076] wcscmp (_String1="EWtjn5BMIzjUl2l2.gif", _String2="..") returned 1 [0132.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x354fc0 [0132.076] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" [0132.076] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0132.076] wcscat (in: _Dest=0x354fc0, _Source="EWtjn5BMIzjUl2l2.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif" [0133.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0133.778] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94dc9a0, ftCreationTime.dwHighDateTime=0x1d5d933, ftLastAccessTime.dwLowDateTime=0xe39e34b0, ftLastAccessTime.dwHighDateTime=0x1d5e0e0, ftLastWriteTime.dwLowDateTime=0xe39e34b0, ftLastWriteTime.dwHighDateTime=0x1d5e0e0, nFileSizeHigh=0x0, nFileSizeLow=0x778a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JYbBgPJvn9M_GiyroSgD.jpg", cAlternateFileName="JYBBGP~1.JPG")) returned 1 [0133.778] wcscmp (_String1="JYbBgPJvn9M_GiyroSgD.jpg", _String2=".") returned 1 [0133.778] wcscmp (_String1="JYbBgPJvn9M_GiyroSgD.jpg", _String2="..") returned 1 [0133.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2b1b0 [0133.779] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" [0133.779] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0133.779] wcscat (in: _Dest=0x3e2b1b0, _Source="JYbBgPJvn9M_GiyroSgD.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg" [0133.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0133.780] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a7e6fd0, ftCreationTime.dwHighDateTime=0x1d5e148, ftLastAccessTime.dwLowDateTime=0xecfb46b0, ftLastAccessTime.dwHighDateTime=0x1d5e04a, ftLastWriteTime.dwLowDateTime=0xecfb46b0, ftLastWriteTime.dwHighDateTime=0x1d5e04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LY SzQON188wz", cAlternateFileName="LYSZQO~1")) returned 1 [0133.780] wcscmp (_String1="LY SzQON188wz", _String2=".") returned 1 [0133.780] wcscmp (_String1="LY SzQON188wz", _String2="..") returned 1 [0133.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4608 [0133.780] wcscpy (in: _Dest=0x3dc4608, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" [0133.780] wcscat (in: _Dest=0x3dc4608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0133.780] wcscat (in: _Dest=0x3dc4608, _Source="LY SzQON188wz" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" [0133.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0133.782] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6249a090, ftCreationTime.dwHighDateTime=0x1d5db1b, ftLastAccessTime.dwLowDateTime=0x7de1aa0, ftLastAccessTime.dwHighDateTime=0x1d5e548, ftLastWriteTime.dwLowDateTime=0x7de1aa0, ftLastWriteTime.dwHighDateTime=0x1d5e548, nFileSizeHigh=0x0, nFileSizeLow=0x3539, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEWg-7YEq9Oqv.jpg", cAlternateFileName="WEWG-7~1.JPG")) returned 1 [0133.782] wcscmp (_String1="WEWg-7YEq9Oqv.jpg", _String2=".") returned 1 [0133.782] wcscmp (_String1="WEWg-7YEq9Oqv.jpg", _String2="..") returned 1 [0133.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f998 [0133.782] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" [0133.782] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0133.782] wcscat (in: _Dest=0x3e1f998, _Source="WEWg-7YEq9Oqv.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg" [0133.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0133.783] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0215230, ftCreationTime.dwHighDateTime=0x1d5e67a, ftLastAccessTime.dwLowDateTime=0x45592cb0, ftLastAccessTime.dwHighDateTime=0x1d5e22f, ftLastWriteTime.dwLowDateTime=0x45592cb0, ftLastWriteTime.dwHighDateTime=0x1d5e22f, nFileSizeHigh=0x0, nFileSizeLow=0x17e2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xEOc1oL.png", cAlternateFileName="")) returned 1 [0133.783] wcscmp (_String1="xEOc1oL.png", _String2=".") returned 1 [0133.783] wcscmp (_String1="xEOc1oL.png", _String2="..") returned 1 [0133.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4088 [0133.783] wcscpy (in: _Dest=0x3dc4088, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" [0133.783] wcscat (in: _Dest=0x3dc4088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0133.783] wcscat (in: _Dest=0x3dc4088, _Source="xEOc1oL.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png" [0133.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0133.785] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb6b2310, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x2dfc6630, ftLastAccessTime.dwHighDateTime=0x1d5d998, ftLastWriteTime.dwLowDateTime=0x2dfc6630, ftLastWriteTime.dwHighDateTime=0x1d5d998, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPw2V73hAmPjXt", cAlternateFileName="ZPW2V7~1")) returned 1 [0133.785] wcscmp (_String1="ZPw2V73hAmPjXt", _String2=".") returned 1 [0133.785] wcscmp (_String1="ZPw2V73hAmPjXt", _String2="..") returned 1 [0133.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fbb8 [0133.785] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" [0133.785] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0133.785] wcscat (in: _Dest=0x3e1fbb8, _Source="ZPw2V73hAmPjXt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" [0133.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28 [0133.787] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e093290, ftCreationTime.dwHighDateTime=0x1d5e73b, ftLastAccessTime.dwLowDateTime=0x23e1440, ftLastAccessTime.dwHighDateTime=0x1d5e7d9, ftLastWriteTime.dwLowDateTime=0x23e1440, ftLastWriteTime.dwHighDateTime=0x1d5e7d9, nFileSizeHigh=0x0, nFileSizeLow=0x143bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="z_7q5s7Sgj37_Z4SLROi.png", cAlternateFileName="Z_7Q5S~1.PNG")) returned 1 [0133.787] wcscmp (_String1="z_7q5s7Sgj37_Z4SLROi.png", _String2=".") returned 1 [0133.787] wcscmp (_String1="z_7q5s7Sgj37_Z4SLROi.png", _String2="..") returned 1 [0133.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2ac58 [0133.787] wcscpy (in: _Dest=0x3e2ac58, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU" [0133.787] wcscat (in: _Dest=0x3e2ac58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0133.788] wcscat (in: _Dest=0x3e2ac58, _Source="z_7q5s7Sgj37_Z4SLROi.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png" [0133.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ac58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0133.789] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e093290, ftCreationTime.dwHighDateTime=0x1d5e73b, ftLastAccessTime.dwLowDateTime=0x23e1440, ftLastAccessTime.dwHighDateTime=0x1d5e7d9, ftLastWriteTime.dwLowDateTime=0x23e1440, ftLastWriteTime.dwHighDateTime=0x1d5e7d9, nFileSizeHigh=0x0, nFileSizeLow=0x143bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="z_7q5s7Sgj37_Z4SLROi.png", cAlternateFileName="Z_7Q5S~1.PNG")) returned 0 [0133.789] FindClose (in: hFindFile=0x3e54a08 | out: hFindFile=0x3e54a08) returned 1 [0133.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0133.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd000) returned 1 [0133.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e480) returned 1 Thread: id = 345 os_tid = 0xe70 [0132.077] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\oqkz.bmp")) returned 0x20 [0132.077] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp", dwFileAttributes=0x20) returned 1 [0132.077] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\oqkz.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1044 [0132.077] GetFileSizeEx (in: hFile=0x1044, lpFileSize=0xa06f840 | out: lpFileSize=0xa06f840*=12989) returned 1 [0132.077] SetFilePointerEx (in: hFile=0x1044, liDistanceToMove=0x32b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.077] ReadFile (in: hFile=0x1044, lpBuffer=0xa06f84c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa06f828, lpOverlapped=0x0 | out: lpBuffer=0xa06f84c*, lpNumberOfBytesRead=0xa06f828*=0x4, lpOverlapped=0x0) returned 1 [0132.079] SetFilePointerEx (in: hFile=0x1044, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1608 [0132.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0132.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1770 [0132.079] NtQuerySystemTime (in: CurrentTime=0xa06f7c8 | out: CurrentTime=0xa06f7c8*=132471540007620000) returned 0x0 [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0xd9aa17d [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x1c32e1fc [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x6cb00543 [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x4ad7dac5 [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0xe3e1bf6 [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x5430acbb [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x29199e19 [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x47279b07 [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x6d71be16 [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x706350e2 [0132.079] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x75e033b4 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x6bfa8c53 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x31e0b828 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x45b328dd [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x795f0917 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x798edd82 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x1be9eb2c [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x70387822 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x6171d18 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x393b9562 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x6f691494 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x4004434d [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x3ef162b5 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x561c6322 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0xd11c3d1 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x53bb8d72 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x4aaa6e06 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x70db6dca [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x4787f7d6 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x16889239 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x30660733 [0132.080] RtlRandomEx (in: Seed=0xa06f7c0 | out: Seed=0xa06f7c0) returned 0x70fc8ca7 [0132.091] ReadFile (in: hFile=0x1044, lpBuffer=0x80747f8, nNumberOfBytesToRead=0x32bd, lpNumberOfBytesRead=0xa06f7bc, lpOverlapped=0x0 | out: lpBuffer=0x80747f8*, lpNumberOfBytesRead=0xa06f7bc*=0x32bd, lpOverlapped=0x0) returned 1 [0132.091] SetFilePointerEx (in: hFile=0x1044, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.091] WriteFile (in: hFile=0x1044, lpBuffer=0x8078400*, nNumberOfBytesToWrite=0x32bd, lpNumberOfBytesWritten=0xa06f7c0, lpOverlapped=0x0 | out: lpBuffer=0x8078400*, lpNumberOfBytesWritten=0xa06f7c0*=0x32bd, lpOverlapped=0x0) returned 1 [0132.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32a0 [0132.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32c8 [0132.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32c8) returned 1 [0132.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8078400) returned 1 [0132.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80747f8) returned 1 [0132.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0132.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd42c0) returned 1 [0132.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef32c8 [0132.622] SetFilePointerEx (in: hFile=0x1044, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.626] WriteFile (in: hFile=0x1044, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xa06f834, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xa06f834*=0x102, lpOverlapped=0x0) returned 1 [0133.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0133.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f0) returned 1 [0133.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3318) returned 1 [0133.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32c8) returned 1 [0133.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32a0) returned 1 [0133.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0133.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1798) returned 1 [0133.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17c0) returned 1 [0133.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6fc8 [0133.007] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp" [0133.007] wcscat (in: _Dest=0x2fe6fc8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp.f0dbec" [0133.007] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp.f0dbec", NtPathName=0xa06f7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\oQKZ.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f33060 [0133.208] FlushFileBuffers (hFile=0x1044) returned 1 [0133.216] CloseHandle (hObject=0x1044) returned 1 [0133.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e210 [0133.218] wcscpy (in: _Dest=0x3d8e210, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0133.218] wcscat (in: _Dest=0x3d8e210, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" [0133.218] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\f0dbec-readme.txt")) returned 0x20 [0133.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 [0133.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58108) returned 1 Thread: id = 346 os_tid = 0xee0 [0132.091] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\qwu--fmlq1il.bmp")) returned 0x20 [0132.092] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp", dwFileAttributes=0x20) returned 1 [0132.092] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\qwu--fmlq1il.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1030 [0132.092] GetFileSizeEx (in: hFile=0x1030, lpFileSize=0x5d2f7b8 | out: lpFileSize=0x5d2f7b8*=64834) returned 1 [0132.092] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0xfd3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.092] ReadFile (in: hFile=0x1030, lpBuffer=0x5d2f7c4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d2f7a0, lpOverlapped=0x0 | out: lpBuffer=0x5d2f7c4*, lpNumberOfBytesRead=0x5d2f7a0*=0x4, lpOverlapped=0x0) returned 1 [0132.094] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1608 [0132.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1770 [0132.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0132.094] NtQuerySystemTime (in: CurrentTime=0x5d2f740 | out: CurrentTime=0x5d2f740*=132471540007776000) returned 0x0 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x32413118 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x707c0c2 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x2ec37d3b [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x55f18a62 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0xcabe4b3 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x2069171a [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x815af89 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x697cbe3e [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x75c8b3b5 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x67e69e13 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x5d9eac40 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x541362d1 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x1a8226db [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0xfe1066 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x7f37193b [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x2aa0a266 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x67e69e13 [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x608190bc [0132.094] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x6980f637 [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x44be2fda [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x5e31b0d5 [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x64506bff [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x7bbc4fe2 [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x18d37e27 [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x75e033b4 [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x64ba429a [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x19672030 [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x4c61a591 [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x750444d3 [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x25c7707a [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x1ee27a7f [0132.095] RtlRandomEx (in: Seed=0x5d2f738 | out: Seed=0x5d2f738) returned 0x98d76a8 [0132.104] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.104] ReadFile (in: hFile=0x1030, lpBuffer=0x807c008, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d2f740, lpOverlapped=0x0 | out: lpBuffer=0x807c008*, lpNumberOfBytesRead=0x5d2f740*=0x3c00, lpOverlapped=0x0) returned 1 [0132.105] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4350 [0132.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0132.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1608 [0132.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1608) returned 1 [0132.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x807fc10 [0132.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1608 [0132.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0132.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0132.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0132.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0132.105] WriteFile (in: hFile=0x1030, lpBuffer=0x807fc10*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d2f740, lpOverlapped=0x0 | out: lpBuffer=0x807fc10*, lpNumberOfBytesWritten=0x5d2f740*=0x3c00, lpOverlapped=0x0) returned 1 [0132.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x807fc10) returned 1 [0132.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x807c008) returned 1 [0132.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df8210 [0132.432] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.432] WriteFile (in: hFile=0x1030, lpBuffer=0x3041720*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x5d2f7ac, lpOverlapped=0x0 | out: lpBuffer=0x3041720*, lpNumberOfBytesWritten=0x5d2f7ac*=0x112, lpOverlapped=0x0) returned 1 [0132.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0132.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0132.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1680) returned 1 [0132.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8210) returned 1 [0132.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1608) returned 1 [0132.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0132.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0132.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16d0) returned 1 [0132.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f398c8 [0132.447] wcscpy (in: _Dest=0x3f398c8, _Source="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp" [0132.447] wcscat (in: _Dest=0x3f398c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp.f0dbec" [0132.447] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp.f0dbec", NtPathName=0x5d2f730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\QWU--FMlQ1il.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e202a0 [0132.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 [0132.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5aec8) returned 1 [0132.464] NtQueryInformationFile (in: FileHandle=0x1030, IoStatusBlock=0x5d2f708, FileInformation=0x5d2f710, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5d2f708, FileInformation=0x5d2f710) returned 0x0 [0132.464] NtSetInformationFile (FileHandle=0x1030, IoStatusBlock=0x5d2f708, FileInformation=0x5d2f710, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f398c8) returned 1 [0132.466] FlushFileBuffers (hFile=0x1030) returned 1 [0132.621] CloseHandle (hObject=0x1030) returned 1 [0132.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bf88 [0132.995] wcscpy (in: _Dest=0x3d8bf88, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.995] wcscat (in: _Dest=0x3d8bf88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" [0132.996] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\f0dbec-readme.txt")) returned 0xffffffff [0132.996] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x101c [0133.227] WriteFile (in: hFile=0x101c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x5d2f754, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x5d2f754*=0x70c, lpOverlapped=0x0) returned 1 [0133.229] CloseHandle (hObject=0x101c) returned 1 [0133.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf88) returned 1 [0133.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 Thread: id = 347 os_tid = 0xe74 [0132.106] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wnve3qtbjyo.bmp")) returned 0x20 [0132.106] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp", dwFileAttributes=0x20) returned 1 [0132.106] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wnve3qtbjyo.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1040 [0132.106] GetFileSizeEx (in: hFile=0x1040, lpFileSize=0xa12f7b8 | out: lpFileSize=0xa12f7b8*=25626) returned 1 [0132.106] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x6416, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.106] ReadFile (in: hFile=0x1040, lpBuffer=0xa12f7c4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa12f7a0, lpOverlapped=0x0 | out: lpBuffer=0xa12f7c4*, lpNumberOfBytesRead=0xa12f7a0*=0x4, lpOverlapped=0x0) returned 1 [0132.108] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0132.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1518 [0132.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14f0 [0132.108] NtQuerySystemTime (in: CurrentTime=0xa12f740 | out: CurrentTime=0xa12f740*=132471540007932000) returned 0x0 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x1f9a3e7c [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x4d7f0354 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x567214a2 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x5890c8e9 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x4b39b334 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x1ece3cc8 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x2c09c03b [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x78078253 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x265c7fcd [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x60c8d94f [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x7cd205e8 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x45d1df55 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x7e16904c [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x334afc49 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x456651f1 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x569df74d [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x153a9f59 [0132.108] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x170a30b4 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x63d22979 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x71631ff1 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x68891554 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x734d8d7f [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x731da34d [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x42a8abfb [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x6ad7e336 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x3c701c0 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x2603cd76 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x67ea8449 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x3c01e043 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x1550cdf8 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x36413197 [0132.109] RtlRandomEx (in: Seed=0xa12f738 | out: Seed=0xa12f738) returned 0x14c03b10 [0132.119] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.119] ReadFile (in: hFile=0x1040, lpBuffer=0x8083818, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa12f740, lpOverlapped=0x0 | out: lpBuffer=0x8083818*, lpNumberOfBytesRead=0xa12f740*=0x3c00, lpOverlapped=0x0) returned 1 [0132.119] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50fe0 [0132.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0132.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0132.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0132.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8087420 [0132.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0132.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14f0 [0132.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14f0) returned 1 [0132.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0132.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50fe0) returned 1 [0132.120] WriteFile (in: hFile=0x1040, lpBuffer=0x8087420*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa12f740, lpOverlapped=0x0 | out: lpBuffer=0x8087420*, lpNumberOfBytesWritten=0xa12f740*=0x3c00, lpOverlapped=0x0) returned 1 [0132.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8087420) returned 1 [0132.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8083818) returned 1 [0132.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df7e90 [0132.434] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.434] WriteFile (in: hFile=0x1040, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa12f7ac, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0xa12f7ac*=0x110, lpOverlapped=0x0) returned 1 [0132.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0132.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7988) returned 1 [0132.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0132.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0132.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0132.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0132.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14c8) returned 1 [0132.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14a0) returned 1 [0132.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39938 [0132.449] wcscpy (in: _Dest=0x3f39938, _Source="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp" [0132.449] wcscat (in: _Dest=0x3f39938, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp.f0dbec" [0132.449] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp.f0dbec", NtPathName=0xa12f730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\WNvE3qtbjyO.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5908 [0132.625] FlushFileBuffers (hFile=0x1040) returned 1 [0132.626] CloseHandle (hObject=0x1040) returned 1 [0133.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e210 [0133.005] wcscpy (in: _Dest=0x3d8e210, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0133.005] wcscat (in: _Dest=0x3d8e210, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" [0133.005] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\f0dbec-readme.txt")) returned 0x20 [0133.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 [0133.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 Thread: id = 348 os_tid = 0xe78 [0132.120] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif" (normalized: "c:\\users\\eebsym5\\pictures\\xjit1jhddan0vdcs t.gif")) returned 0x20 [0132.120] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif", dwFileAttributes=0x20) returned 1 [0132.120] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif" (normalized: "c:\\users\\eebsym5\\pictures\\xjit1jhddan0vdcs t.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1038 [0132.120] GetFileSizeEx (in: hFile=0x1038, lpFileSize=0xa1bf950 | out: lpFileSize=0xa1bf950*=6078) returned 1 [0132.120] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x17ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.121] ReadFile (in: hFile=0x1038, lpBuffer=0xa1bf95c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa1bf938, lpOverlapped=0x0 | out: lpBuffer=0xa1bf95c*, lpNumberOfBytesRead=0xa1bf938*=0x4, lpOverlapped=0x0) returned 1 [0132.122] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14f0 [0132.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1478 [0132.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0132.122] NtQuerySystemTime (in: CurrentTime=0xa1bf8d8 | out: CurrentTime=0xa1bf8d8*=132471540008088000) returned 0x0 [0132.122] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0xdf85e3b [0132.122] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x35a70650 [0132.122] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x3115cf31 [0132.122] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x672b7a80 [0132.122] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x9b4a247 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x641a242e [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x173e4bc0 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x7e330cec [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x67b4aeee [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x148ea56b [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x57ca4796 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x2684c0fc [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x10cf2b5c [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x3ddd0577 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x679e153 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x5b7a7607 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x13070f01 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x6dedcb28 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x4349c431 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x7d0d73c [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x23042fdc [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x494d4a28 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x5760733b [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x579aaaf7 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x2118c455 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x593e82dc [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x4478dd7c [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x6b93838a [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x168b8a64 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x389c5feb [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x6a3044b8 [0132.123] RtlRandomEx (in: Seed=0xa1bf8d0 | out: Seed=0xa1bf8d0) returned 0x26759d5d [0132.133] ReadFile (in: hFile=0x1038, lpBuffer=0x808b028, nNumberOfBytesToRead=0x17be, lpNumberOfBytesRead=0xa1bf8cc, lpOverlapped=0x0 | out: lpBuffer=0x808b028*, lpNumberOfBytesRead=0xa1bf8cc*=0x17be, lpOverlapped=0x0) returned 1 [0132.134] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.134] WriteFile (in: hFile=0x1038, lpBuffer=0x808ec30*, nNumberOfBytesToWrite=0x17be, lpNumberOfBytesWritten=0xa1bf8d0, lpOverlapped=0x0 | out: lpBuffer=0x808ec30*, lpNumberOfBytesWritten=0xa1bf8d0*=0x17be, lpOverlapped=0x0) returned 1 [0132.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12c0 [0132.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c58 [0132.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c58) returned 1 [0132.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ec30) returned 1 [0132.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808b028) returned 1 [0132.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0132.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f50) returned 1 [0132.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e50f50 [0132.435] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.436] WriteFile (in: hFile=0x1038, lpBuffer=0x3042500*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xa1bf944, lpOverlapped=0x0 | out: lpBuffer=0x3042500*, lpNumberOfBytesWritten=0xa1bf944*=0x11e, lpOverlapped=0x0) returned 1 [0132.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0132.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38fe8) returned 1 [0132.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c58) returned 1 [0132.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f50) returned 1 [0132.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12c0) returned 1 [0132.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1478) returned 1 [0132.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1428) returned 1 [0132.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1400) returned 1 [0132.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f327f0 [0132.450] wcscpy (in: _Dest=0x3f327f0, _Source="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif" [0132.450] wcscat (in: _Dest=0x3f327f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif.f0dbec" [0132.450] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif.f0dbec", NtPathName=0xa1bf8c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\xjiT1jHDdAN0VDCS T.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f344d0 [0133.223] FlushFileBuffers (hFile=0x1038) returned 1 [0133.235] CloseHandle (hObject=0x1038) returned 1 [0133.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bf88 [0133.237] wcscpy (in: _Dest=0x3d8bf88, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0133.237] wcscat (in: _Dest=0x3d8bf88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" [0133.237] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\f0dbec-readme.txt")) returned 0x20 [0133.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf88) returned 1 [0133.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39468) returned 1 Thread: id = 349 os_tid = 0xe84 [0132.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6edd8 [0132.134] wcscpy (in: _Dest=0x3e6edd8, _Source="C:\\ProgramData\\Microsoft\\RAC\\Outbound" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound" [0132.134] wcscat (in: _Dest=0x3e6edd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\" [0132.134] wcscat (in: _Dest=0x3e6edd8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*" [0132.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0132.135] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54c88 [0132.135] wcscmp (_String1=".", _String2=".") returned 0 [0132.135] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.135] wcscmp (_String1="..", _String2=".") returned 1 [0132.135] wcscmp (_String1="..", _String2="..") returned 0 [0132.135] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.135] FindClose (in: hFindFile=0x3e54c88 | out: hFindFile=0x3e54c88) returned 1 [0132.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0132.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6edd8) returned 1 [0132.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ef38) returned 1 Thread: id = 350 os_tid = 0xe7c [0132.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd3a8 [0132.137] wcscpy (in: _Dest=0x3ecd3a8, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0132.137] wcscat (in: _Dest=0x3ecd3a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\" [0132.137] wcscat (in: _Dest=0x3ecd3a8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*" [0132.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0132.137] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54ac8 [0132.137] wcscmp (_String1=".", _String2=".") returned 0 [0132.137] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.137] wcscmp (_String1="..", _String2=".") returned 1 [0132.137] wcscmp (_String1="..", _String2="..") returned 0 [0132.137] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xea2144c0, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0132.137] wcscmp (_String1="RacWmiDatabase.sdf", _String2=".") returned 1 [0132.138] wcscmp (_String1="RacWmiDatabase.sdf", _String2="..") returned 1 [0132.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f418 [0132.138] wcscpy (in: _Dest=0x3f2f418, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0132.138] wcscat (in: _Dest=0x3f2f418, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\" [0132.138] wcscat (in: _Dest=0x3f2f418, _Source="RacWmiDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0138.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0138.993] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xea2144c0, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0 [0138.994] FindClose (in: hFindFile=0x3e54ac8 | out: hFindFile=0x3e54ac8) returned 1 [0138.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0138.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd3a8) returned 1 [0138.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 Thread: id = 351 os_tid = 0xe68 [0132.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c08 [0132.138] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0132.138] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\" [0132.138] wcscat (in: _Dest=0x2fe6c08, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*" [0132.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0132.138] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b88 [0132.138] wcscmp (_String1=".", _String2=".") returned 0 [0132.138] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.138] wcscmp (_String1="..", _String2=".") returned 1 [0132.139] wcscmp (_String1="..", _String2="..") returned 0 [0132.139] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5093060, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5093060, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xe7e5fac0, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0132.139] wcscmp (_String1="RacDatabase.sdf", _String2=".") returned 1 [0132.139] wcscmp (_String1="RacDatabase.sdf", _String2="..") returned 1 [0132.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32d18 [0132.139] wcscpy (in: _Dest=0x3f32d18, _Source="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0132.139] wcscat (in: _Dest=0x3f32d18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\" [0132.139] wcscat (in: _Dest=0x3f32d18, _Source="RacDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" [0138.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0138.996] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0138.996] wcscmp (_String1="RacMetaData.dat", _String2=".") returned 1 [0138.996] wcscmp (_String1="RacMetaData.dat", _String2="..") returned 1 [0138.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67ca0 [0138.997] wcscpy (in: _Dest=0x3e67ca0, _Source="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0138.997] wcscat (in: _Dest=0x3e67ca0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\" [0138.997] wcscat (in: _Dest=0x3e67ca0, _Source="RacMetaData.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" [0138.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0138.998] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0 [0138.998] FindClose (in: hFindFile=0x3e54b88 | out: hFindFile=0x3e54b88) returned 1 [0141.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0141.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0141.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f0f0) returned 1 Thread: id = 352 os_tid = 0xe64 [0132.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de69c8 [0132.139] wcscpy (in: _Dest=0x3de69c8, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0132.139] wcscat (in: _Dest=0x3de69c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\" [0132.139] wcscat (in: _Dest=0x3de69c8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*" [0132.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0132.139] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc4b83e00, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc4b83e00, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55008 [0132.139] wcscmp (_String1=".", _String2=".") returned 0 [0132.139] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc4b83e00, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc4b83e00, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.140] wcscmp (_String1="..", _String2=".") returned 1 [0132.140] wcscmp (_String1="..", _String2="..") returned 0 [0132.140] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4308fa0, ftCreationTime.dwHighDateTime=0x1d6a229, ftLastAccessTime.dwLowDateTime=0xc4308fa0, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc4308fa0, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql8AC1.tmp", cAlternateFileName="")) returned 1 [0132.140] wcscmp (_String1="sql8AC1.tmp", _String2=".") returned 1 [0132.140] wcscmp (_String1="sql8AC1.tmp", _String2="..") returned 1 [0132.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3eccf98 [0132.140] wcscpy (in: _Dest=0x3eccf98, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0132.140] wcscat (in: _Dest=0x3eccf98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\" [0132.140] wcscat (in: _Dest=0x3eccf98, _Source="sql8AC1.tmp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8AC1.tmp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8AC1.tmp" [0134.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eccf98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0134.130] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4b83e00, ftCreationTime.dwHighDateTime=0x1d6a229, ftLastAccessTime.dwLowDateTime=0xc4b83e00, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc4b83e00, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql8E3B.tmp", cAlternateFileName="")) returned 1 [0134.130] wcscmp (_String1="sql8E3B.tmp", _String2=".") returned 1 [0134.130] wcscmp (_String1="sql8E3B.tmp", _String2="..") returned 1 [0134.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c5a0 [0134.130] wcscpy (in: _Dest=0x3d8c5a0, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0134.130] wcscat (in: _Dest=0x3d8c5a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\" [0134.130] wcscat (in: _Dest=0x3d8c5a0, _Source="sql8E3B.tmp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp" [0134.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0134.131] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4b83e00, ftCreationTime.dwHighDateTime=0x1d6a229, ftLastAccessTime.dwLowDateTime=0xc4b83e00, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc4b83e00, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql8E3B.tmp", cAlternateFileName="")) returned 0 [0134.131] FindClose (in: hFindFile=0x3e55008 | out: hFindFile=0x3e55008) returned 1 [0134.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0134.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de69c8) returned 1 [0134.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58068) returned 1 Thread: id = 353 os_tid = 0xf00 [0132.140] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets")) returned 0x20 [0132.503] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0132.503] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.503] GetLastError () returned 0x5 [0132.503] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0132.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6688) returned 1 Thread: id = 354 os_tid = 0xe50 [0132.147] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets")) returned 0x20 [0132.504] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0132.504] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.504] GetLastError () returned 0x5 [0132.504] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0132.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b558) returned 1 Thread: id = 355 os_tid = 0xe58 [0132.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39548 [0132.148] wcscpy (in: _Dest=0x3f39548, _Source="C:\\Users\\Default\\AppData\\Local\\Application Data" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data" [0132.149] wcscat (in: _Dest=0x3f39548, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data\\") returned="C:\\Users\\Default\\AppData\\Local\\Application Data\\" [0132.149] wcscat (in: _Dest=0x3f39548, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data\\*") returned="C:\\Users\\Default\\AppData\\Local\\Application Data\\*" [0132.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d863b0 [0132.149] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d863b0) returned 1 [0132.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39548) returned 1 [0132.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e6f0) returned 1 Thread: id = 356 os_tid = 0xf10 [0132.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c68 [0132.162] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\Default\\AppData\\Local\\History" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History" [0132.162] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History\\") returned="C:\\Users\\Default\\AppData\\Local\\History\\" [0132.162] wcscat (in: _Dest=0x2fe6c68, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History\\*") returned="C:\\Users\\Default\\AppData\\Local\\History\\*" [0132.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d863b0 [0132.162] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d863b0) returned 1 [0132.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0132.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f148) returned 1 Thread: id = 357 os_tid = 0xe20 [0132.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6f148 [0132.170] wcscpy (in: _Dest=0x3e6f148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0132.170] wcscat (in: _Dest=0x3e6f148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\" [0132.170] wcscat (in: _Dest=0x3e6f148, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\*" [0132.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d863b0 [0132.170] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\*", lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54cc8 [0132.170] wcscmp (_String1=".", _String2=".") returned 0 [0132.170] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.170] wcscmp (_String1="..", _String2=".") returned 1 [0132.170] wcscmp (_String1="..", _String2="..") returned 0 [0132.170] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0132.170] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0132.170] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0132.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e6f0 [0132.170] wcscpy (in: _Dest=0x3d8e6f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0132.170] wcscat (in: _Dest=0x3d8e6f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\" [0132.170] wcscat (in: _Dest=0x3d8e6f0, _Source="Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" [0143.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0143.494] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0143.494] wcscmp (_String1="Color", _String2=".") returned 1 [0143.494] wcscmp (_String1="Color", _String2="..") returned 1 [0143.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe71a8 [0143.494] wcscpy (in: _Dest=0x2fe71a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0143.494] wcscat (in: _Dest=0x2fe71a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\" [0143.494] wcscat (in: _Dest=0x2fe71a8, _Source="Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0143.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe71a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0143.495] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x3d863b0 | out: lpFindFileData=0x3d863b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0143.495] FindClose (in: hFindFile=0x3e54cc8 | out: hFindFile=0x3e54cc8) returned 1 [0143.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d863b0) returned 1 [0143.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f148) returned 1 [0143.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ecd0) returned 1 Thread: id = 358 os_tid = 0x150 [0132.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39548 [0132.171] wcscpy (in: _Dest=0x3f39548, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data" [0132.171] wcscat (in: _Dest=0x3f39548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\" [0132.171] wcscat (in: _Dest=0x3f39548, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\*" [0132.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85ee0 [0132.171] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\*", lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ee0) returned 1 [0132.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39548) returned 1 [0132.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e418) returned 1 Thread: id = 359 os_tid = 0x11c [0132.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ef38 [0132.172] wcscpy (in: _Dest=0x3e6ef38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0132.172] wcscat (in: _Dest=0x3e6ef38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\" [0132.172] wcscat (in: _Dest=0x3e6ef38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\*" [0132.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85ee0 [0132.172] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\*", lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d08 [0132.173] wcscmp (_String1=".", _String2=".") returned 0 [0132.173] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.173] wcscmp (_String1="..", _String2=".") returned 1 [0132.173] wcscmp (_String1="..", _String2="..") returned 0 [0132.173] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0132.173] wcscmp (_String1="Chrome", _String2=".") returned 1 [0132.173] wcscmp (_String1="Chrome", _String2="..") returned 1 [0132.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e418 [0132.173] wcscpy (in: _Dest=0x3d8e418, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0132.173] wcscat (in: _Dest=0x3d8e418, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\" [0132.173] wcscat (in: _Dest=0x3d8e418, _Source="Chrome" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" [0134.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0134.133] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0134.133] wcscmp (_String1="CrashReports", _String2=".") returned 1 [0134.133] wcscmp (_String1="CrashReports", _String2="..") returned 1 [0134.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39cb8 [0134.133] wcscpy (in: _Dest=0x3f39cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0134.134] wcscat (in: _Dest=0x3f39cb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\" [0134.134] wcscat (in: _Dest=0x3f39cb8, _Source="CrashReports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports" [0134.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454 [0134.135] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0134.135] FindClose (in: hFindFile=0x3e54d08 | out: hFindFile=0x3e54d08) returned 1 [0134.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ee0) returned 1 [0134.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ef38) returned 1 [0134.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f1a0) returned 1 Thread: id = 360 os_tid = 0xf34 [0132.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c68 [0132.174] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History" [0132.174] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\" [0132.174] wcscat (in: _Dest=0x2fe6c68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\*" [0132.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0132.174] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0132.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0132.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22d50) returned 1 Thread: id = 361 os_tid = 0xe10 [0132.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e008 [0132.175] wcscpy (in: _Dest=0x3d8e008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help" [0132.175] wcscat (in: _Dest=0x3d8e008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\" [0132.175] wcscat (in: _Dest=0x3d8e008, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\*" [0132.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0132.175] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0132.176] wcscmp (_String1=".", _String2=".") returned 0 [0132.176] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.176] wcscmp (_String1="..", _String2=".") returned 1 [0132.176] wcscmp (_String1="..", _String2="..") returned 0 [0132.176] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.176] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0132.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0132.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e008) returned 1 [0132.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 Thread: id = 362 os_tid = 0xe24 [0132.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e3b0 [0132.177] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore" [0132.177] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\" [0132.177] wcscat (in: _Dest=0x3d8e3b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\*" [0132.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0132.177] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0132.178] wcscmp (_String1=".", _String2=".") returned 0 [0132.178] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.178] wcscmp (_String1="..", _String2=".") returned 1 [0132.178] wcscmp (_String1="..", _String2="..") returned 0 [0132.178] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.178] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0132.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0132.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 [0132.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 Thread: id = 363 os_tid = 0xe1c [0132.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32d90 [0132.179] wcscpy (in: _Dest=0x3f32d90, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" [0132.179] wcscat (in: _Dest=0x3f32d90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\" [0132.179] wcscat (in: _Dest=0x3f32d90, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\*" [0132.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0132.179] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0132.506] wcscmp (_String1=".", _String2=".") returned 0 [0132.506] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.506] wcscmp (_String1="..", _String2=".") returned 1 [0132.506] wcscmp (_String1="..", _String2="..") returned 0 [0132.506] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592fd430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0132.506] wcscmp (_String1="1033", _String2=".") returned 1 [0132.506] wcscmp (_String1="1033", _String2="..") returned 1 [0132.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5908 [0132.506] wcscpy (in: _Dest=0x3dc5908, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" [0132.506] wcscat (in: _Dest=0x3dc5908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\" [0132.506] wcscat (in: _Dest=0x3dc5908, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" [0133.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0133.646] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaaee300, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x8834d0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaaee300, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0133.646] wcscmp (_String1="VSTAClientPkg.dll", _String2=".") returned 1 [0133.646] wcscmp (_String1="VSTAClientPkg.dll", _String2="..") returned 1 [0133.646] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe71b5c00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe71b5c00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0133.646] wcscmp (_String1="VSTAProject.dll", _String2=".") returned 1 [0133.646] wcscmp (_String1="VSTAProject.dll", _String2="..") returned 1 [0133.646] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe71b5c00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe71b5c00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0133.646] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0133.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0133.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0133.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5010) returned 1 Thread: id = 364 os_tid = 0xe0c [0132.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp")) returned 0x20 [0134.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp", dwFileAttributes=0x20) returned 0 [0134.287] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.287] GetLastError () returned 0x5 [0134.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp", dwFileAttributes=0x20) returned 0 [0134.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 Thread: id = 365 os_tid = 0xe14 [0132.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp")) returned 0x20 [0134.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp", dwFileAttributes=0x20) returned 0 [0134.285] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.285] GetLastError () returned 0x5 [0134.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp", dwFileAttributes=0x20) returned 0 [0134.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4588) returned 1 Thread: id = 366 os_tid = 0xe18 [0132.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp")) returned 0x20 [0133.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp", dwFileAttributes=0x20) returned 0 [0133.911] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0133.911] GetLastError () returned 0x5 [0133.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp", dwFileAttributes=0x20) returned 0 [0133.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 Thread: id = 367 os_tid = 0xe60 [0132.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp")) returned 0x20 [0133.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp", dwFileAttributes=0x20) returned 0 [0133.909] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0133.910] GetLastError () returned 0x5 [0133.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp", dwFileAttributes=0x20) returned 0 [0133.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32610) returned 1 Thread: id = 368 os_tid = 0x4e4 [0132.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp")) returned 0x20 [0134.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp", dwFileAttributes=0x20) returned 0 [0134.297] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.297] GetLastError () returned 0x5 [0134.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp", dwFileAttributes=0x20) returned 0 [0134.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 Thread: id = 369 os_tid = 0xed8 [0132.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp")) returned 0x20 [0134.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp", dwFileAttributes=0x20) returned 0 [0134.296] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.296] GetLastError () returned 0x5 [0134.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp", dwFileAttributes=0x20) returned 0 [0134.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5160) returned 1 Thread: id = 370 os_tid = 0xf38 [0132.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp")) returned 0x20 [0134.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp", dwFileAttributes=0x20) returned 0 [0134.294] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.294] GetLastError () returned 0x5 [0134.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp", dwFileAttributes=0x20) returned 0 [0134.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 371 os_tid = 0xed4 [0132.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp")) returned 0x20 [0134.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp", dwFileAttributes=0x20) returned 0 [0134.292] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.292] GetLastError () returned 0x5 [0134.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp", dwFileAttributes=0x20) returned 0 [0134.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 Thread: id = 372 os_tid = 0xefc [0132.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp")) returned 0x20 [0134.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp", dwFileAttributes=0x20) returned 0 [0134.290] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.291] GetLastError () returned 0x5 [0134.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp", dwFileAttributes=0x20) returned 0 [0134.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 Thread: id = 373 os_tid = 0xec8 [0132.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp")) returned 0x20 [0134.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp", dwFileAttributes=0x20) returned 0 [0134.289] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.289] GetLastError () returned 0x5 [0134.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp", dwFileAttributes=0x20) returned 0 [0134.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5688) returned 1 Thread: id = 374 os_tid = 0xecc [0132.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp")) returned 0x20 [0134.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp", dwFileAttributes=0x20) returned 0 [0134.288] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.288] GetLastError () returned 0x5 [0134.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp", dwFileAttributes=0x20) returned 0 [0134.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5308) returned 1 Thread: id = 375 os_tid = 0xed0 [0132.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39548 [0132.192] wcscpy (in: _Dest=0x3f39548, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0132.192] wcscat (in: _Dest=0x3f39548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0132.192] wcscat (in: _Dest=0x3f39548, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*" [0132.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86618 [0132.192] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x997722f0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37bd8 [0135.639] wcscmp (_String1=".", _String2=".") returned 0 [0135.639] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x997722f0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.200] wcscmp (_String1="..", _String2=".") returned 1 [0139.200] wcscmp (_String1="..", _String2="..") returned 0 [0139.200] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4f9290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0139.200] wcscmp (_String1="Access", _String2=".") returned 1 [0139.200] wcscmp (_String1="Access", _String2="..") returned 1 [0139.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c018 [0139.201] wcscpy (in: _Dest=0x3f0c018, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0139.201] wcscat (in: _Dest=0x3f0c018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0139.201] wcscat (in: _Dest=0x3f0c018, _Source="Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0142.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0142.954] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cb86f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x329e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1 [0142.954] wcscmp (_String1="AdjacencyLetter.dotx", _String2=".") returned 1 [0142.954] wcscmp (_String1="AdjacencyLetter.dotx", _String2="..") returned 1 [0142.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c1b0 [0142.954] wcscpy (in: _Dest=0x3e3c1b0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.955] wcscat (in: _Dest=0x3e3c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.955] wcscat (in: _Dest=0x3e3c1b0, _Source="AdjacencyLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" [0142.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15cc [0142.956] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cb86f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x33b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyMergeLetter.dotx", cAlternateFileName="ADJACE~2.DOT")) returned 1 [0142.956] wcscmp (_String1="AdjacencyMergeLetter.dotx", _String2=".") returned 1 [0142.956] wcscmp (_String1="AdjacencyMergeLetter.dotx", _String2="..") returned 1 [0142.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11968 [0142.956] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.956] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.956] wcscat (in: _Dest=0x3e11968, _Source="AdjacencyMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" [0142.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0142.958] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x36f0b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyReport.dotx", cAlternateFileName="ADJACE~3.DOT")) returned 1 [0142.958] wcscmp (_String1="AdjacencyReport.dotx", _String2=".") returned 1 [0142.958] wcscmp (_String1="AdjacencyReport.dotx", _String2="..") returned 1 [0142.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c248 [0142.958] wcscpy (in: _Dest=0x3e3c248, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.958] wcscat (in: _Dest=0x3e3c248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.958] wcscat (in: _Dest=0x3e3c248, _Source="AdjacencyReport.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" [0142.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0142.960] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3bcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyResume.dotx", cAlternateFileName="ADJACE~4.DOT")) returned 1 [0142.960] wcscmp (_String1="AdjacencyResume.dotx", _String2=".") returned 1 [0142.960] wcscmp (_String1="AdjacencyResume.dotx", _String2="..") returned 1 [0142.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c4a8 [0142.960] wcscpy (in: _Dest=0x3e3c4a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.960] wcscat (in: _Dest=0x3e3c4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.961] wcscat (in: _Dest=0x3e3c4a8, _Source="AdjacencyResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" [0142.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0142.962] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1 [0142.962] wcscmp (_String1="ADR1.XLT", _String2=".") returned 1 [0142.963] wcscmp (_String1="ADR1.XLT", _String2="..") returned 1 [0142.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24040 [0142.963] wcscpy (in: _Dest=0x3e24040, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.963] wcscat (in: _Dest=0x3e24040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.963] wcscat (in: _Dest=0x3e24040, _Source="ADR1.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" [0142.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0142.965] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1 [0142.965] wcscmp (_String1="ADR10.XLT", _String2=".") returned 1 [0142.965] wcscmp (_String1="ADR10.XLT", _String2="..") returned 1 [0142.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24940 [0142.965] wcscpy (in: _Dest=0x3e24940, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.965] wcscat (in: _Dest=0x3e24940, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.965] wcscat (in: _Dest=0x3e24940, _Source="ADR10.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" [0142.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0142.967] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1 [0142.967] wcscmp (_String1="ADR2.XLT", _String2=".") returned 1 [0142.967] wcscmp (_String1="ADR2.XLT", _String2="..") returned 1 [0142.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e249c0 [0142.967] wcscpy (in: _Dest=0x3e249c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.967] wcscat (in: _Dest=0x3e249c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.967] wcscat (in: _Dest=0x3e249c0, _Source="ADR2.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" [0142.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e249c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0142.969] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1 [0142.969] wcscmp (_String1="ADR3.XLT", _String2=".") returned 1 [0142.969] wcscmp (_String1="ADR3.XLT", _String2="..") returned 1 [0142.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e242c0 [0142.969] wcscpy (in: _Dest=0x3e242c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.969] wcscat (in: _Dest=0x3e242c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.969] wcscat (in: _Dest=0x3e242c0, _Source="ADR3.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" [0142.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e242c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0142.971] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1 [0142.971] wcscmp (_String1="ADR4.XLT", _String2=".") returned 1 [0142.971] wcscmp (_String1="ADR4.XLT", _String2="..") returned 1 [0142.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24740 [0142.971] wcscpy (in: _Dest=0x3e24740, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.972] wcscat (in: _Dest=0x3e24740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.972] wcscat (in: _Dest=0x3e24740, _Source="ADR4.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" [0142.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0142.973] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1 [0142.973] wcscmp (_String1="ADR5.XLT", _String2=".") returned 1 [0142.973] wcscmp (_String1="ADR5.XLT", _String2="..") returned 1 [0142.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24640 [0142.974] wcscpy (in: _Dest=0x3e24640, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.974] wcscat (in: _Dest=0x3e24640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.974] wcscat (in: _Dest=0x3e24640, _Source="ADR5.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" [0142.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0142.975] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1 [0142.975] wcscmp (_String1="ADR6.XLT", _String2=".") returned 1 [0142.976] wcscmp (_String1="ADR6.XLT", _String2="..") returned 1 [0142.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24240 [0142.976] wcscpy (in: _Dest=0x3e24240, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.976] wcscat (in: _Dest=0x3e24240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.976] wcscat (in: _Dest=0x3e24240, _Source="ADR6.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" [0142.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0142.977] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2870bc00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2870bc00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1 [0142.978] wcscmp (_String1="ADR7.XLT", _String2=".") returned 1 [0142.978] wcscmp (_String1="ADR7.XLT", _String2="..") returned 1 [0142.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e23e40 [0142.978] wcscpy (in: _Dest=0x3e23e40, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.978] wcscat (in: _Dest=0x3e23e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.978] wcscat (in: _Dest=0x3e23e40, _Source="ADR7.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" [0142.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0142.979] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2870bc00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2870bc00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1 [0142.980] wcscmp (_String1="ADR8.XLT", _String2=".") returned 1 [0142.980] wcscmp (_String1="ADR8.XLT", _String2="..") returned 1 [0142.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e23fc0 [0142.980] wcscpy (in: _Dest=0x3e23fc0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.980] wcscat (in: _Dest=0x3e23fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.980] wcscat (in: _Dest=0x3e23fc0, _Source="ADR8.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" [0142.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0142.981] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2870bc00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2870bc00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1 [0142.982] wcscmp (_String1="ADR9.XLT", _String2=".") returned 1 [0142.982] wcscmp (_String1="ADR9.XLT", _String2="..") returned 1 [0142.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e23cc0 [0142.982] wcscpy (in: _Dest=0x3e23cc0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.982] wcscat (in: _Dest=0x3e23cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.982] wcscat (in: _Dest=0x3e23cc0, _Source="ADR9.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" [0142.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0142.983] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2941e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="APOTHE~1.DOT")) returned 1 [0142.983] wcscmp (_String1="ApothecaryLetter.dotx", _String2=".") returned 1 [0142.984] wcscmp (_String1="ApothecaryLetter.dotx", _String2="..") returned 1 [0142.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c410 [0142.984] wcscpy (in: _Dest=0x3e3c410, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.984] wcscat (in: _Dest=0x3e3c410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.984] wcscat (in: _Dest=0x3e3c410, _Source="ApothecaryLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" [0142.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0142.986] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2f0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryMergeLetter.dotx", cAlternateFileName="APOTHE~2.DOT")) returned 1 [0142.986] wcscmp (_String1="ApothecaryMergeLetter.dotx", _String2=".") returned 1 [0142.986] wcscmp (_String1="ApothecaryMergeLetter.dotx", _String2="..") returned 1 [0142.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e116e8 [0142.986] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.986] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.986] wcscat (in: _Dest=0x3e116e8, _Source="ApothecaryMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" [0142.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0142.988] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3462a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="APOTHE~3.DOT")) returned 1 [0142.988] wcscmp (_String1="ApothecaryNewsletter.dotx", _String2=".") returned 1 [0142.988] wcscmp (_String1="ApothecaryNewsletter.dotx", _String2="..") returned 1 [0142.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e111e8 [0142.988] wcscpy (in: _Dest=0x3e111e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.989] wcscat (in: _Dest=0x3e111e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.989] wcscat (in: _Dest=0x3e111e8, _Source="ApothecaryNewsletter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" [0142.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e111e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0142.991] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x37879, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryResume.dotx", cAlternateFileName="APOTHE~4.DOT")) returned 1 [0142.991] wcscmp (_String1="ApothecaryResume.dotx", _String2=".") returned 1 [0142.991] wcscmp (_String1="ApothecaryResume.dotx", _String2="..") returned 1 [0142.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0142.991] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.991] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.991] wcscat (in: _Dest=0x3e3c540, _Source="ApothecaryResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" [0142.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0143.540] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24d7400, ftCreationTime.dwHighDateTime=0x1c6d8d2, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24d7400, ftLastWriteTime.dwHighDateTime=0x1c6d8d2, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BillingStatement.xltx", cAlternateFileName="BILLIN~1.XLT")) returned 1 [0143.540] wcscmp (_String1="BillingStatement.xltx", _String2=".") returned 1 [0143.541] wcscmp (_String1="BillingStatement.xltx", _String2="..") returned 1 [0143.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2bbc8 [0143.541] wcscpy (in: _Dest=0x3e2bbc8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0143.541] wcscat (in: _Dest=0x3e2bbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0143.541] wcscat (in: _Dest=0x3e2bbc8, _Source="BillingStatement.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" [0144.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8 [0144.302] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63d50c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x5d23e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieLetter.dotx", cAlternateFileName="BLACKT~1.DOT")) returned 1 [0144.302] wcscmp (_String1="BlackTieLetter.dotx", _String2=".") returned 1 [0144.302] wcscmp (_String1="BlackTieLetter.dotx", _String2="..") returned 1 [0144.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ca88 [0144.302] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.302] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.302] wcscat (in: _Dest=0x32ca88, _Source="BlackTieLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" [0144.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0144.304] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63dc3090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x5d2119, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieMergeLetter.dotx", cAlternateFileName="BLACKT~2.DOT")) returned 1 [0144.304] wcscmp (_String1="BlackTieMergeLetter.dotx", _String2=".") returned 1 [0144.304] wcscmp (_String1="BlackTieMergeLetter.dotx", _String2="..") returned 1 [0144.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7558 [0144.304] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.304] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.304] wcscat (in: _Dest=0x2c7558, _Source="BlackTieMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" [0144.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c [0144.306] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63e5b610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x96f4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieNewsletter.dotx", cAlternateFileName="BLACKT~3.DOT")) returned 1 [0144.306] wcscmp (_String1="BlackTieNewsletter.dotx", _String2=".") returned 1 [0144.306] wcscmp (_String1="BlackTieNewsletter.dotx", _String2="..") returned 1 [0144.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e12228 [0144.306] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.306] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.306] wcscat (in: _Dest=0x3e12228, _Source="BlackTieNewsletter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" [0144.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0144.308] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x6724a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieResume.dotx", cAlternateFileName="BLACKT~4.DOT")) returned 1 [0144.308] wcscmp (_String1="BlackTieResume.dotx", _String2=".") returned 1 [0144.308] wcscmp (_String1="BlackTieResume.dotx", _String2="..") returned 1 [0144.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0144.308] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.308] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.308] wcscat (in: _Dest=0x32cf48, _Source="BlackTieResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" [0144.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0144.309] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37e2000, ftCreationTime.dwHighDateTime=0x1ca588f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37e2000, ftLastWriteTime.dwHighDateTime=0x1ca588f, nFileSizeHigh=0x0, nFileSizeLow=0x4352, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blog.dotx", cAlternateFileName="BLOG~1.DOT")) returned 1 [0144.310] wcscmp (_String1="Blog.dotx", _String2=".") returned 1 [0144.310] wcscmp (_String1="Blog.dotx", _String2="..") returned 1 [0144.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5ff0 [0144.310] wcscpy (in: _Dest=0x3da5ff0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.310] wcscat (in: _Dest=0x3da5ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.310] wcscat (in: _Dest=0x3da5ff0, _Source="Blog.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" [0144.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3da5ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0144.311] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1674200, ftCreationTime.dwHighDateTime=0x1c6d8c5, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd1674200, ftLastWriteTime.dwHighDateTime=0x1c6d8c5, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="BLOODP~1.XLT")) returned 1 [0144.311] wcscmp (_String1="BloodPressureTracker.xltx", _String2=".") returned 1 [0144.311] wcscmp (_String1="BloodPressureTracker.xltx", _String2="..") returned 1 [0144.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e120e8 [0144.311] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.312] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.312] wcscat (in: _Dest=0x3e120e8, _Source="BloodPressureTracker.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" [0144.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0144.313] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec0000, ftCreationTime.dwHighDateTime=0x1c9d583, ftLastAccessTime.dwLowDateTime=0x3d96e330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ec0000, ftLastWriteTime.dwHighDateTime=0x1c9d583, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="CLASSI~1.POT")) returned 1 [0144.313] wcscmp (_String1="ClassicPhotoAlbum.potx", _String2=".") returned 1 [0144.313] wcscmp (_String1="ClassicPhotoAlbum.potx", _String2="..") returned 1 [0144.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d408 [0144.313] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.313] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.314] wcscat (in: _Dest=0x32d408, _Source="ClassicPhotoAlbum.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" [0144.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40 [0144.315] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20883800, ftCreationTime.dwHighDateTime=0x1c9d583, ftLastAccessTime.dwLowDateTime=0x3d96e330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20883800, ftLastWriteTime.dwHighDateTime=0x1c9d583, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="CONTEM~1.POT")) returned 1 [0144.315] wcscmp (_String1="ContemporaryPhotoAlbum.potx", _String2=".") returned 1 [0144.315] wcscmp (_String1="ContemporaryPhotoAlbum.potx", _String2="..") returned 1 [0144.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187760 [0144.315] wcscpy (in: _Dest=0x8187760, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.315] wcscat (in: _Dest=0x8187760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.315] wcscat (in: _Dest=0x8187760, _Source="ContemporaryPhotoAlbum.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" [0144.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0144.317] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x26022, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityLetter.Dotx", cAlternateFileName="EQUITY~1.DOT")) returned 1 [0144.317] wcscmp (_String1="EquityLetter.Dotx", _String2=".") returned 1 [0144.317] wcscmp (_String1="EquityLetter.Dotx", _String2="..") returned 1 [0144.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x355dd0 [0144.317] wcscpy (in: _Dest=0x355dd0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.317] wcscat (in: _Dest=0x355dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.317] wcscat (in: _Dest=0x355dd0, _Source="EquityLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" [0144.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50 [0144.319] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x145ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeFax.Dotx", cAlternateFileName="EQUITY~2.DOT")) returned 1 [0144.319] wcscmp (_String1="EquityMergeFax.Dotx", _String2=".") returned 1 [0144.319] wcscmp (_String1="EquityMergeFax.Dotx", _String2="..") returned 1 [0144.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d5d0 [0144.319] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0144.319] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0144.320] wcscat (in: _Dest=0x32d5d0, _Source="EquityMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" [0144.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0144.321] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x25ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeLetter.Dotx", cAlternateFileName="EQUITY~3.DOT")) returned 1 [0145.288] wcscmp (_String1="EquityMergeLetter.Dotx", _String2=".") returned 1 [0145.288] wcscmp (_String1="EquityMergeLetter.Dotx", _String2="..") returned 1 [0145.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c8d0 [0145.288] wcscpy (in: _Dest=0x3e3c8d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0145.288] wcscat (in: _Dest=0x3e3c8d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0145.288] wcscat (in: _Dest=0x3e3c8d0, _Source="EquityMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" [0148.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0148.890] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1bec38, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityReport.Dotx", cAlternateFileName="EQUITY~4.DOT")) returned 1 [0148.890] wcscmp (_String1="EquityReport.Dotx", _String2=".") returned 1 [0148.890] wcscmp (_String1="EquityReport.Dotx", _String2="..") returned 1 [0148.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3550e0 [0148.890] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.890] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.890] wcscat (in: _Dest=0x3550e0, _Source="EquityReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" [0148.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0148.892] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x45054, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityResume.Dotx", cAlternateFileName="EQD69A~1.DOT")) returned 1 [0148.892] wcscmp (_String1="EquityResume.Dotx", _String2=".") returned 1 [0148.892] wcscmp (_String1="EquityResume.Dotx", _String2="..") returned 1 [0148.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x354ab0 [0148.892] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.892] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.892] wcscat (in: _Dest=0x354ab0, _Source="EquityResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" [0148.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0148.893] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1f0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialLetter.dotx", cAlternateFileName="ESSENT~1.DOT")) returned 1 [0148.893] wcscmp (_String1="EssentialLetter.dotx", _String2=".") returned 1 [0148.893] wcscmp (_String1="EssentialLetter.dotx", _String2="..") returned 1 [0148.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c248 [0148.893] wcscpy (in: _Dest=0x3e3c248, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.893] wcscat (in: _Dest=0x3e3c248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.893] wcscat (in: _Dest=0x3e3c248, _Source="EssentialLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" [0148.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0148.895] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1ea93, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialMergeLetter.dotx", cAlternateFileName="ESSENT~2.DOT")) returned 1 [0148.895] wcscmp (_String1="EssentialMergeLetter.dotx", _String2=".") returned 1 [0148.895] wcscmp (_String1="EssentialMergeLetter.dotx", _String2="..") returned 1 [0148.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c70f8 [0148.895] wcscpy (in: _Dest=0x2c70f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.895] wcscat (in: _Dest=0x2c70f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.895] wcscat (in: _Dest=0x2c70f8, _Source="EssentialMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" [0148.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c70f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0148.896] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xbc195, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialReport.dotx", cAlternateFileName="ESSENT~3.DOT")) returned 1 [0148.896] wcscmp (_String1="EssentialReport.dotx", _String2=".") returned 1 [0148.896] wcscmp (_String1="EssentialReport.dotx", _String2="..") returned 1 [0148.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3ca00 [0148.896] wcscpy (in: _Dest=0x3e3ca00, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.896] wcscat (in: _Dest=0x3e3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.896] wcscat (in: _Dest=0x3e3ca00, _Source="EssentialReport.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" [0148.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0148.897] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x47014, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialResume.dotx", cAlternateFileName="ESSENT~4.DOT")) returned 1 [0148.897] wcscmp (_String1="EssentialResume.dotx", _String2=".") returned 1 [0148.898] wcscmp (_String1="EssentialResume.dotx", _String2="..") returned 1 [0148.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c5d8 [0148.898] wcscpy (in: _Dest=0x3e3c5d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.898] wcscat (in: _Dest=0x3e3c5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.898] wcscat (in: _Dest=0x3e3c5d8, _Source="EssentialResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" [0148.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0148.899] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x11d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveLetter.dotx", cAlternateFileName="EXECUT~1.DOT")) returned 1 [0148.899] wcscmp (_String1="ExecutiveLetter.dotx", _String2=".") returned 1 [0148.899] wcscmp (_String1="ExecutiveLetter.dotx", _String2="..") returned 1 [0148.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c2e0 [0148.899] wcscpy (in: _Dest=0x3e3c2e0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.899] wcscat (in: _Dest=0x3e3c2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.899] wcscat (in: _Dest=0x3e3c2e0, _Source="ExecutiveLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" [0148.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0148.900] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x12042, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveMergeLetter.dotx", cAlternateFileName="EXECUT~2.DOT")) returned 1 [0148.900] wcscmp (_String1="ExecutiveMergeLetter.dotx", _String2=".") returned 1 [0148.900] wcscmp (_String1="ExecutiveMergeLetter.dotx", _String2="..") returned 1 [0148.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7378 [0148.901] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.901] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.901] wcscat (in: _Dest=0x2c7378, _Source="ExecutiveMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" [0148.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0148.902] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3d49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveNewsletter.dotx", cAlternateFileName="EXECUT~3.DOT")) returned 1 [0148.902] wcscmp (_String1="ExecutiveNewsletter.dotx", _String2=".") returned 1 [0148.902] wcscmp (_String1="ExecutiveNewsletter.dotx", _String2="..") returned 1 [0148.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c72d8 [0148.903] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.903] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.903] wcscat (in: _Dest=0x2c72d8, _Source="ExecutiveNewsletter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" [0148.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0148.904] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xcb42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveReport.dotx", cAlternateFileName="EXECUT~4.DOT")) returned 1 [0148.904] wcscmp (_String1="ExecutiveReport.dotx", _String2=".") returned 1 [0148.904] wcscmp (_String1="ExecutiveReport.dotx", _String2="..") returned 1 [0148.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c968 [0148.904] wcscpy (in: _Dest=0x3e3c968, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.904] wcscat (in: _Dest=0x3e3c968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.904] wcscat (in: _Dest=0x3e3c968, _Source="ExecutiveReport.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" [0148.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0148.905] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1b00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveResume.dotx", cAlternateFileName="EX9D69~1.DOT")) returned 1 [0148.906] wcscmp (_String1="ExecutiveResume.dotx", _String2=".") returned 1 [0148.906] wcscmp (_String1="ExecutiveResume.dotx", _String2="..") returned 1 [0148.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cbc8 [0148.906] wcscpy (in: _Dest=0x3e3cbc8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.906] wcscat (in: _Dest=0x3e3cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.906] wcscat (in: _Dest=0x3e3cbc8, _Source="ExecutiveResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" [0148.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0148.907] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666a3b00, ftCreationTime.dwHighDateTime=0x1c6d8c6, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x666a3b00, ftLastWriteTime.dwHighDateTime=0x1c6d8c6, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExpenseReport.xltx", cAlternateFileName="EXPENS~1.XLT")) returned 1 [0148.907] wcscmp (_String1="ExpenseReport.xltx", _String2=".") returned 1 [0148.907] wcscmp (_String1="ExpenseReport.xltx", _String2="..") returned 1 [0148.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355170 [0148.907] wcscpy (in: _Dest=0x355170, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.907] wcscat (in: _Dest=0x355170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.907] wcscat (in: _Dest=0x355170, _Source="ExpenseReport.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" [0148.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0148.909] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f8c110, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAX", cAlternateFileName="")) returned 1 [0148.909] wcscmp (_String1="FAX", _String2=".") returned 1 [0148.909] wcscmp (_String1="FAX", _String2="..") returned 1 [0148.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0c1f8 [0148.909] wcscpy (in: _Dest=0x3f0c1f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.909] wcscat (in: _Dest=0x3f0c1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.909] wcscat (in: _Dest=0x3f0c1f8, _Source="FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0148.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0c1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0148.910] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d2f900, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3dd4c6f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6d2f900, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x1fa5cb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiveRules.potx", cAlternateFileName="FIVERU~1.POT")) returned 1 [0148.910] wcscmp (_String1="FiveRules.potx", _String2=".") returned 1 [0148.910] wcscmp (_String1="FiveRules.potx", _String2="..") returned 1 [0148.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30ea8 [0148.910] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.910] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.911] wcscat (in: _Dest=0x3f30ea8, _Source="FiveRules.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" [0148.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0148.912] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0dd1800, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3daeb0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0dd1800, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x10b563f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntroducingPowerPoint2010.potx", cAlternateFileName="INTROD~1.POT")) returned 1 [0148.912] wcscmp (_String1="IntroducingPowerPoint2010.potx", _String2=".") returned 1 [0148.912] wcscmp (_String1="IntroducingPowerPoint2010.potx", _String2="..") returned 1 [0148.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81878b0 [0148.912] wcscpy (in: _Dest=0x81878b0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.912] wcscat (in: _Dest=0x81878b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.912] wcscat (in: _Dest=0x81878b0, _Source="IntroducingPowerPoint2010.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" [0148.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81878b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0148.913] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe880000, ftCreationTime.dwHighDateTime=0x1c6d8d7, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe880000, ftLastWriteTime.dwHighDateTime=0x1c6d8d7, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1 [0148.914] wcscmp (_String1="LoanAmortization.xltx", _String2=".") returned 1 [0148.914] wcscmp (_String1="LoanAmortization.xltx", _String2="..") returned 1 [0148.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cc60 [0148.914] wcscpy (in: _Dest=0x3e3cc60, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.914] wcscat (in: _Dest=0x3e3cc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.914] wcscat (in: _Dest=0x3e3cc60, _Source="LoanAmortization.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" [0148.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0148.915] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1cbba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianLetter.Dotx", cAlternateFileName="MEDIAN~1.DOT")) returned 1 [0148.915] wcscmp (_String1="MedianLetter.Dotx", _String2=".") returned 1 [0148.915] wcscmp (_String1="MedianLetter.Dotx", _String2="..") returned 1 [0148.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f352e0 [0148.915] wcscpy (in: _Dest=0x3f352e0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.915] wcscat (in: _Dest=0x3f352e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.915] wcscat (in: _Dest=0x3f352e0, _Source="MedianLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" [0148.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f352e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x186c [0148.916] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1955a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeFax.Dotx", cAlternateFileName="MEDIAN~2.DOT")) returned 1 [0148.916] wcscmp (_String1="MedianMergeFax.Dotx", _String2=".") returned 1 [0148.916] wcscmp (_String1="MedianMergeFax.Dotx", _String2="..") returned 1 [0148.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3ccf8 [0148.917] wcscpy (in: _Dest=0x3e3ccf8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.917] wcscat (in: _Dest=0x3e3ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.917] wcscat (in: _Dest=0x3e3ccf8, _Source="MedianMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" [0148.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0148.919] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1cd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeLetter.Dotx", cAlternateFileName="MEDIAN~3.DOT")) returned 1 [0148.919] wcscmp (_String1="MedianMergeLetter.Dotx", _String2=".") returned 1 [0148.919] wcscmp (_String1="MedianMergeLetter.Dotx", _String2="..") returned 1 [0148.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3cd90 [0148.919] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.919] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.919] wcscat (in: _Dest=0x3e3cd90, _Source="MedianMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" [0148.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0148.921] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x48355, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianReport.Dotx", cAlternateFileName="MEDIAN~4.DOT")) returned 1 [0148.921] wcscmp (_String1="MedianReport.Dotx", _String2=".") returned 1 [0148.921] wcscmp (_String1="MedianReport.Dotx", _String2="..") returned 1 [0148.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34ef0 [0148.921] wcscpy (in: _Dest=0x3f34ef0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.921] wcscat (in: _Dest=0x3f34ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.921] wcscat (in: _Dest=0x3f34ef0, _Source="MedianReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" [0148.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0148.922] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x290e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianResume.Dotx", cAlternateFileName="ME105B~1.DOT")) returned 1 [0148.922] wcscmp (_String1="MedianResume.Dotx", _String2=".") returned 1 [0148.922] wcscmp (_String1="MedianResume.Dotx", _String2="..") returned 1 [0148.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35520 [0148.922] wcscpy (in: _Dest=0x3f35520, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.922] wcscat (in: _Dest=0x3f35520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.922] wcscat (in: _Dest=0x3f35520, _Source="MedianResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" [0148.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0148.924] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xab82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="OFFICE~1.DOT")) returned 1 [0148.924] wcscmp (_String1="Office Word 2003 Look.dotx", _String2=".") returned 1 [0148.924] wcscmp (_String1="Office Word 2003 Look.dotx", _String2="..") returned 1 [0148.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7698 [0148.924] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.924] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.924] wcscat (in: _Dest=0x2c7698, _Source="Office Word 2003 Look.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" [0148.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0148.925] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x553507b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x553507b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE", cAlternateFileName="")) returned 1 [0148.925] wcscmp (_String1="ONENOTE", _String2=".") returned 1 [0148.925] wcscmp (_String1="ONENOTE", _String2="..") returned 1 [0148.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da61f0 [0148.925] wcscpy (in: _Dest=0x3da61f0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0148.925] wcscat (in: _Dest=0x3da61f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0148.925] wcscat (in: _Dest=0x3da61f0, _Source="ONENOTE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" [0148.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3da61f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0149.245] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2db52, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielLetter.Dotx", cAlternateFileName="ORIELL~1.DOT")) returned 1 [0149.245] wcscmp (_String1="OrielLetter.Dotx", _String2=".") returned 1 [0149.245] wcscmp (_String1="OrielLetter.Dotx", _String2="..") returned 1 [0149.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb2038 [0149.245] wcscpy (in: _Dest=0x3eb2038, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0149.245] wcscat (in: _Dest=0x3eb2038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0149.245] wcscat (in: _Dest=0x3eb2038, _Source="OrielLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" [0154.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4 [0154.168] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1b29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeFax.Dotx", cAlternateFileName="ORIELM~1.DOT")) returned 1 [0154.168] wcscmp (_String1="OrielMergeFax.Dotx", _String2=".") returned 1 [0154.168] wcscmp (_String1="OrielMergeFax.Dotx", _String2="..") returned 1 [0154.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355dd0 [0154.168] wcscpy (in: _Dest=0x355dd0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0154.168] wcscat (in: _Dest=0x355dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0154.169] wcscat (in: _Dest=0x355dd0, _Source="OrielMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" [0154.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0154.170] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2b308, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeLetter.Dotx", cAlternateFileName="ORIELM~2.DOT")) returned 1 [0154.170] wcscmp (_String1="OrielMergeLetter.Dotx", _String2=".") returned 1 [0154.170] wcscmp (_String1="OrielMergeLetter.Dotx", _String2="..") returned 1 [0154.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d19b8 [0154.170] wcscpy (in: _Dest=0x81d19b8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0154.170] wcscat (in: _Dest=0x81d19b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0154.170] wcscat (in: _Dest=0x81d19b8, _Source="OrielMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" [0154.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d19b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0154.172] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x82b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielReport.Dotx", cAlternateFileName="ORIELR~1.DOT")) returned 1 [0154.172] wcscmp (_String1="OrielReport.Dotx", _String2=".") returned 1 [0154.172] wcscmp (_String1="OrielReport.Dotx", _String2="..") returned 1 [0154.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355290 [0154.172] wcscpy (in: _Dest=0x355290, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0154.172] wcscat (in: _Dest=0x355290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0154.172] wcscat (in: _Dest=0x355290, _Source="OrielReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" [0154.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0154.173] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x4ab41, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielResume.Dotx", cAlternateFileName="ORIELR~2.DOT")) returned 1 [0154.174] wcscmp (_String1="OrielResume.Dotx", _String2=".") returned 1 [0154.174] wcscmp (_String1="OrielResume.Dotx", _String2="..") returned 1 [0154.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x354ab0 [0154.174] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0154.174] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0154.174] wcscat (in: _Dest=0x354ab0, _Source="OrielResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" [0154.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0154.176] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1f56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0154.176] wcscmp (_String1="OriginLetter.Dotx", _String2=".") returned 1 [0154.176] wcscmp (_String1="OriginLetter.Dotx", _String2="..") returned 1 [0154.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x355170 [0154.176] wcscpy (in: _Dest=0x355170, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0154.176] wcscat (in: _Dest=0x355170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0154.176] wcscat (in: _Dest=0x355170, _Source="OriginLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" [0154.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0154.177] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x172e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeFax.Dotx", cAlternateFileName="ORIGIN~2.DOT")) returned 1 [0154.180] wcscmp (_String1="OriginMergeFax.Dotx", _String2=".") returned 1 [0154.180] wcscmp (_String1="OriginMergeFax.Dotx", _String2="..") returned 1 [0154.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d0f08 [0154.180] wcscpy (in: _Dest=0x81d0f08, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0154.180] wcscat (in: _Dest=0x81d0f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0154.180] wcscat (in: _Dest=0x81d0f08, _Source="OriginMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" [0156.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0156.445] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1f314, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1 [0156.445] wcscmp (_String1="OriginMergeLetter.Dotx", _String2=".") returned 1 [0156.445] wcscmp (_String1="OriginMergeLetter.Dotx", _String2="..") returned 1 [0156.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1c18 [0156.445] wcscpy (in: _Dest=0x81d1c18, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.446] wcscat (in: _Dest=0x81d1c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.446] wcscat (in: _Dest=0x81d1c18, _Source="OriginMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" [0156.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29cc [0156.447] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x5b011, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="ORIGIN~4.DOT")) returned 1 [0156.447] wcscmp (_String1="OriginReport.Dotx", _String2=".") returned 1 [0156.447] wcscmp (_String1="OriginReport.Dotx", _String2="..") returned 1 [0156.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dd768 [0156.447] wcscpy (in: _Dest=0x81dd768, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.447] wcscat (in: _Dest=0x81dd768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.447] wcscat (in: _Dest=0x81dd768, _Source="OriginReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" [0156.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d0 [0156.449] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x23247, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="ORAE40~1.DOT")) returned 1 [0156.449] wcscmp (_String1="OriginResume.Dotx", _String2=".") returned 1 [0156.449] wcscmp (_String1="OriginResume.Dotx", _String2="..") returned 1 [0156.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dd7f8 [0156.449] wcscpy (in: _Dest=0x81dd7f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.449] wcscat (in: _Dest=0x81dd7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.449] wcscat (in: _Dest=0x81dd7f8, _Source="OriginResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" [0156.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d4 [0156.451] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11c4700, ftCreationTime.dwHighDateTime=0x1c6d8d2, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11c4700, ftLastWriteTime.dwHighDateTime=0x1c6d8d2, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="PERSON~1.XLT")) returned 1 [0156.451] wcscmp (_String1="PersonalMonthlyBudget.xltx", _String2=".") returned 1 [0156.451] wcscmp (_String1="PersonalMonthlyBudget.xltx", _String2="..") returned 1 [0156.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819ac78 [0156.451] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.451] wcscat (in: _Dest=0x819ac78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.451] wcscat (in: _Dest=0x819ac78, _Source="PersonalMonthlyBudget.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" [0156.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d8 [0156.452] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46628100, ftCreationTime.dwHighDateTime=0x1c69afa, ftLastAccessTime.dwLowDateTime=0x3dd989b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46628100, ftLastWriteTime.dwHighDateTime=0x1c69afa, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="PITCHB~1.POT")) returned 1 [0156.452] wcscmp (_String1="Pitchbook.potx", _String2=".") returned 1 [0156.453] wcscmp (_String1="Pitchbook.potx", _String2="..") returned 1 [0156.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f5b0 [0156.453] wcscpy (in: _Dest=0x3f2f5b0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.453] wcscat (in: _Dest=0x3f2f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.453] wcscat (in: _Dest=0x3f2f5b0, _Source="Pitchbook.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" [0156.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc [0156.454] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8042600, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8042600, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusReport.potx", cAlternateFileName="PROJEC~1.POT")) returned 1 [0156.454] wcscmp (_String1="ProjectStatusReport.potx", _String2=".") returned 1 [0156.454] wcscmp (_String1="ProjectStatusReport.potx", _String2="..") returned 1 [0156.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819bc18 [0156.455] wcscpy (in: _Dest=0x819bc18, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.455] wcscat (in: _Dest=0x819bc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.455] wcscat (in: _Dest=0x819bc18, _Source="ProjectStatusReport.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" [0156.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e0 [0156.456] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x801f000, ftCreationTime.dwHighDateTime=0x1c99e65, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x801f000, ftLastWriteTime.dwHighDateTime=0x1c99e65, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="PROJPL~1.XLT")) returned 1 [0156.456] wcscmp (_String1="PROJPLAN.XLTX", _String2=".") returned 1 [0156.456] wcscmp (_String1="PROJPLAN.XLTX", _String2="..") returned 1 [0156.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f748 [0156.456] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.456] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.456] wcscat (in: _Dest=0x3f2f748, _Source="PROJPLAN.XLTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" [0156.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e4 [0156.457] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x740ee600, ftCreationTime.dwHighDateTime=0x1c6d9d6, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x740ee600, ftLastWriteTime.dwHighDateTime=0x1c6d9d6, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="QUIZSH~1.POT")) returned 1 [0156.457] wcscmp (_String1="QuizShow.potx", _String2=".") returned 1 [0156.457] wcscmp (_String1="QuizShow.potx", _String2="..") returned 1 [0156.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f528 [0156.457] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.457] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.457] wcscat (in: _Dest=0x3f2f528, _Source="QuizShow.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" [0156.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e8 [0156.459] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11c4700, ftCreationTime.dwHighDateTime=0x1c6d8d2, ftLastAccessTime.dwLowDateTime=0x43004370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11c4700, ftLastWriteTime.dwHighDateTime=0x1c6d8d2, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="SALESR~1.XLT")) returned 1 [0156.459] wcscmp (_String1="SalesReport.xltx", _String2=".") returned 1 [0156.459] wcscmp (_String1="SalesReport.xltx", _String2="..") returned 1 [0156.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dd888 [0156.459] wcscpy (in: _Dest=0x81dd888, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.459] wcscat (in: _Dest=0x81dd888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.459] wcscat (in: _Dest=0x81dd888, _Source="SalesReport.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" [0156.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec [0156.460] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d771a00, ftCreationTime.dwHighDateTime=0x1c99e65, ftLastAccessTime.dwLowDateTime=0x99798450, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x1d771a00, ftLastWriteTime.dwHighDateTime=0x1c99e65, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="TASKLI~1.XLT")) returned 1 [0156.460] wcscmp (_String1="TASKLIST.XLTX", _String2=".") returned 1 [0156.460] wcscmp (_String1="TASKLIST.XLTX", _String2="..") returned 1 [0156.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2fd20 [0156.460] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.460] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.461] wcscat (in: _Dest=0x3f2fd20, _Source="TASKLIST.XLTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" [0156.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f0 [0156.462] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e95500, ftCreationTime.dwHighDateTime=0x1c6d8cf, ftLastAccessTime.dwLowDateTime=0x4309c8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5e95500, ftLastWriteTime.dwHighDateTime=0x1c6d8cf, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="TIMECA~1.XLT")) returned 1 [0156.462] wcscmp (_String1="TimeCard.xltx", _String2=".") returned 1 [0156.462] wcscmp (_String1="TimeCard.xltx", _String2="..") returned 1 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81d2b40 [0156.462] wcscpy (in: _Dest=0x81d2b40, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.462] wcscat (in: _Dest=0x81d2b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.462] wcscat (in: _Dest=0x81d2b40, _Source="TimeCard.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" [0156.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f4 [0156.463] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8042600, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8042600, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="TRAINI~1.POT")) returned 1 [0156.463] wcscmp (_String1="Training.potx", _String2=".") returned 1 [0156.464] wcscmp (_String1="Training.potx", _String2="..") returned 1 [0156.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81d33c0 [0156.464] wcscpy (in: _Dest=0x81d33c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.464] wcscat (in: _Dest=0x81d33c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.464] wcscat (in: _Dest=0x81d33c0, _Source="Training.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" [0156.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d33c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f8 [0156.465] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanLetter.Dotx", cAlternateFileName="URBANL~1.DOT")) returned 1 [0156.465] wcscmp (_String1="UrbanLetter.Dotx", _String2=".") returned 1 [0156.465] wcscmp (_String1="UrbanLetter.Dotx", _String2="..") returned 1 [0156.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dd918 [0156.465] wcscpy (in: _Dest=0x81dd918, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.465] wcscat (in: _Dest=0x81dd918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.465] wcscat (in: _Dest=0x81dd918, _Source="UrbanLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" [0156.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29fc [0156.467] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x138a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeFax.Dotx", cAlternateFileName="URBANM~1.DOT")) returned 1 [0156.467] wcscmp (_String1="UrbanMergeFax.Dotx", _String2=".") returned 1 [0156.467] wcscmp (_String1="UrbanMergeFax.Dotx", _String2="..") returned 1 [0156.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dd9a8 [0156.467] wcscpy (in: _Dest=0x81dd9a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.467] wcscat (in: _Dest=0x81dd9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.467] wcscat (in: _Dest=0x81dd9a8, _Source="UrbanMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" [0156.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a00 [0156.468] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1c1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeLetter.Dotx", cAlternateFileName="URBANM~2.DOT")) returned 1 [0156.468] wcscmp (_String1="UrbanMergeLetter.Dotx", _String2=".") returned 1 [0156.468] wcscmp (_String1="UrbanMergeLetter.Dotx", _String2="..") returned 1 [0156.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d2338 [0156.469] wcscpy (in: _Dest=0x81d2338, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.469] wcscat (in: _Dest=0x81d2338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.469] wcscat (in: _Dest=0x81d2338, _Source="UrbanMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" [0156.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a04 [0156.470] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d2f900, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3dd989b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6d2f900, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x40d6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanPhotoAlbum.potx", cAlternateFileName="URBANP~1.POT")) returned 1 [0156.470] wcscmp (_String1="UrbanPhotoAlbum.potx", _String2=".") returned 1 [0156.470] wcscmp (_String1="UrbanPhotoAlbum.potx", _String2="..") returned 1 [0156.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d22a0 [0156.470] wcscpy (in: _Dest=0x81d22a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.470] wcscat (in: _Dest=0x81d22a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.470] wcscat (in: _Dest=0x81d22a0, _Source="UrbanPhotoAlbum.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" [0156.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d22a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a08 [0156.477] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xd0fbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanReport.Dotx", cAlternateFileName="URBANR~1.DOT")) returned 1 [0156.477] wcscmp (_String1="UrbanReport.Dotx", _String2=".") returned 1 [0156.477] wcscmp (_String1="UrbanReport.Dotx", _String2="..") returned 1 [0156.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dda38 [0156.477] wcscpy (in: _Dest=0x81dda38, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.477] wcscat (in: _Dest=0x81dda38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.477] wcscat (in: _Dest=0x81dda38, _Source="UrbanReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" [0156.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dda38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a0c [0156.478] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1ed1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanResume.Dotx", cAlternateFileName="URBANR~2.DOT")) returned 1 [0156.478] wcscmp (_String1="UrbanResume.Dotx", _String2=".") returned 1 [0156.478] wcscmp (_String1="UrbanResume.Dotx", _String2="..") returned 1 [0156.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ddac8 [0156.478] wcscpy (in: _Dest=0x81ddac8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.479] wcscat (in: _Dest=0x81ddac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.479] wcscat (in: _Dest=0x81ddac8, _Source="UrbanResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" [0156.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a10 [0156.480] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d22c00, ftCreationTime.dwHighDateTime=0x1c6d9d6, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97d22c00, ftLastWriteTime.dwHighDateTime=0x1c6d9d6, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 1 [0156.480] wcscmp (_String1="WidescreenPresentation.potx", _String2=".") returned 1 [0156.480] wcscmp (_String1="WidescreenPresentation.potx", _String2="..") returned 1 [0156.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187ca0 [0156.480] wcscpy (in: _Dest=0x8187ca0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0156.480] wcscat (in: _Dest=0x8187ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0156.480] wcscat (in: _Dest=0x8187ca0, _Source="WidescreenPresentation.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" [0156.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a14 [0156.481] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d22c00, ftCreationTime.dwHighDateTime=0x1c6d9d6, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97d22c00, ftLastWriteTime.dwHighDateTime=0x1c6d9d6, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 0 [0156.481] FindClose (in: hFindFile=0x3f37bd8 | out: hFindFile=0x3f37bd8) returned 1 [0156.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86618) returned 1 [0156.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39548) returned 1 [0156.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff51d0) returned 1 Thread: id = 376 os_tid = 0xec4 [0132.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x354ab0 [0132.193] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" [0132.193] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\" [0132.193] wcscat (in: _Dest=0x354ab0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*" [0132.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85070 [0132.193] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f374d8 [0133.944] wcscmp (_String1=".", _String2=".") returned 0 [0133.945] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.945] wcscmp (_String1="..", _String2=".") returned 1 [0133.945] wcscmp (_String1="..", _String2="..") returned 0 [0133.945] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4baef600, ftCreationTime.dwHighDateTime=0x1c65295, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4baef600, ftLastWriteTime.dwHighDateTime=0x1c65295, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1 [0133.945] wcscmp (_String1="Maple.gif", _String2=".") returned 1 [0133.945] wcscmp (_String1="Maple.gif", _String2="..") returned 1 [0133.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c72d8 [0133.945] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" [0133.945] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\" [0133.945] wcscat (in: _Dest=0x2c72d8, _Source="Maple.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" [0143.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x121c [0143.503] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4baef600, ftCreationTime.dwHighDateTime=0x1c65295, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4baef600, ftLastWriteTime.dwHighDateTime=0x1c65295, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 0 [0143.503] FindClose (in: hFindFile=0x3f374d8 | out: hFindFile=0x3f374d8) returned 1 [0143.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85070) returned 1 [0143.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 [0143.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 377 os_tid = 0xec0 [0132.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e3b0 [0132.193] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0" [0132.193] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\" [0132.193] wcscat (in: _Dest=0x3d8e3b0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\*") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\*" [0132.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0132.194] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0132.194] wcscmp (_String1=".", _String2=".") returned 0 [0132.194] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.196] wcscmp (_String1="..", _String2=".") returned 1 [0132.196] wcscmp (_String1="..", _String2="..") returned 0 [0132.196] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcrobatUpdater.exe", cAlternateFileName="ACROBA~1.EXE")) returned 1 [0132.196] wcscmp (_String1="AcrobatUpdater.exe", _String2=".") returned 1 [0132.196] wcscmp (_String1="AcrobatUpdater.exe", _String2="..") returned 1 [0132.196] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe39c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.exe", cAlternateFileName="")) returned 1 [0132.196] wcscmp (_String1="AdobeARM.exe", _String2=".") returned 1 [0132.196] wcscmp (_String1="AdobeARM.exe", _String2="..") returned 1 [0132.196] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeExtractFiles.dll", cAlternateFileName="ADOBEE~1.DLL")) returned 1 [0132.196] wcscmp (_String1="AdobeExtractFiles.dll", _String2=".") returned 1 [0132.196] wcscmp (_String1="AdobeExtractFiles.dll", _String2="..") returned 1 [0132.196] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0132.196] wcscmp (_String1="ReaderUpdater.exe", _String2=".") returned 1 [0132.197] wcscmp (_String1="ReaderUpdater.exe", _String2="..") returned 1 [0132.197] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 0 [0132.197] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0132.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0132.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 [0132.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 378 os_tid = 0xf3c [0132.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34440 [0132.198] wcscpy (in: _Dest=0x3f34440, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.198] wcscat (in: _Dest=0x3f34440, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.198] wcscat (in: _Dest=0x3f34440, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*" [0132.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0132.198] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0132.546] wcscmp (_String1=".", _String2=".") returned 0 [0132.546] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.546] wcscmp (_String1="..", _String2=".") returned 1 [0132.546] wcscmp (_String1="..", _String2="..") returned 0 [0132.546] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf171085c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0132.546] wcscmp (_String1="usertile10.bmp", _String2=".") returned 1 [0132.546] wcscmp (_String1="usertile10.bmp", _String2="..") returned 1 [0132.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d728 [0132.546] wcscpy (in: _Dest=0x3e2d728, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.547] wcscat (in: _Dest=0x3e2d728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.547] wcscat (in: _Dest=0x3e2d728, _Source="usertile10.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" [0133.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0133.840] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf17369bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0133.840] wcscmp (_String1="usertile11.bmp", _String2=".") returned 1 [0133.840] wcscmp (_String1="usertile11.bmp", _String2="..") returned 1 [0133.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d1e8 [0133.840] wcscpy (in: _Dest=0x3e2d1e8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.840] wcscat (in: _Dest=0x3e2d1e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.841] wcscat (in: _Dest=0x3e2d1e8, _Source="usertile11.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" [0133.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc8 [0133.842] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52733076, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52733076, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0133.842] wcscmp (_String1="usertile12.bmp", _String2=".") returned 1 [0133.842] wcscmp (_String1="usertile12.bmp", _String2="..") returned 1 [0133.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2cff0 [0133.842] wcscpy (in: _Dest=0x3e2cff0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.842] wcscat (in: _Dest=0x3e2cff0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.842] wcscat (in: _Dest=0x3e2cff0, _Source="usertile12.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" [0133.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc [0133.843] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0133.843] wcscmp (_String1="usertile13.bmp", _String2=".") returned 1 [0133.843] wcscmp (_String1="usertile13.bmp", _String2="..") returned 1 [0133.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d140 [0133.843] wcscpy (in: _Dest=0x3e2d140, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.844] wcscat (in: _Dest=0x3e2d140, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.844] wcscat (in: _Dest=0x3e2d140, _Source="usertile13.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" [0133.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0133.845] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e5abbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0133.845] wcscmp (_String1="usertile14.bmp", _String2=".") returned 1 [0133.845] wcscmp (_String1="usertile14.bmp", _String2="..") returned 1 [0133.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d7d0 [0133.845] wcscpy (in: _Dest=0x3e2d7d0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.845] wcscat (in: _Dest=0x3e2d7d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.845] wcscat (in: _Dest=0x3e2d7d0, _Source="usertile14.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" [0133.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0133.846] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5277f346, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5277f346, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e80d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0133.846] wcscmp (_String1="usertile15.bmp", _String2=".") returned 1 [0133.846] wcscmp (_String1="usertile15.bmp", _String2="..") returned 1 [0133.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d878 [0133.846] wcscpy (in: _Dest=0x3e2d878, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.846] wcscat (in: _Dest=0x3e2d878, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.847] wcscat (in: _Dest=0x3e2d878, _Source="usertile15.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" [0133.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0133.848] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527a54ae, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527a54ae, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0133.848] wcscmp (_String1="usertile16.bmp", _String2=".") returned 1 [0133.848] wcscmp (_String1="usertile16.bmp", _String2="..") returned 1 [0133.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d920 [0133.848] wcscpy (in: _Dest=0x3e2d920, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.848] wcscat (in: _Dest=0x3e2d920, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.848] wcscat (in: _Dest=0x3e2d920, _Source="usertile16.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" [0133.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0133.850] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0133.850] wcscmp (_String1="usertile17.bmp", _String2=".") returned 1 [0133.850] wcscmp (_String1="usertile17.bmp", _String2="..") returned 1 [0133.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d9c8 [0133.850] wcscpy (in: _Dest=0x3e2d9c8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.850] wcscat (in: _Dest=0x3e2d9c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.850] wcscat (in: _Dest=0x3e2d9c8, _Source="usertile17.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" [0133.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0133.851] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1eccfdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0133.851] wcscmp (_String1="usertile18.bmp", _String2=".") returned 1 [0133.851] wcscmp (_String1="usertile18.bmp", _String2="..") returned 1 [0133.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2da70 [0133.851] wcscpy (in: _Dest=0x3e2da70, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.852] wcscat (in: _Dest=0x3e2da70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.852] wcscat (in: _Dest=0x3e2da70, _Source="usertile18.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" [0133.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2da70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0133.853] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ef313c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0133.853] wcscmp (_String1="usertile19.bmp", _String2=".") returned 1 [0133.853] wcscmp (_String1="usertile19.bmp", _String2="..") returned 1 [0133.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2db18 [0133.853] wcscpy (in: _Dest=0x3e2db18, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.853] wcscat (in: _Dest=0x3e2db18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.853] wcscat (in: _Dest=0x3e2db18, _Source="usertile19.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" [0133.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2db18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0133.854] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0133.854] wcscmp (_String1="usertile20.bmp", _String2=".") returned 1 [0133.854] wcscmp (_String1="usertile20.bmp", _String2="..") returned 1 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dbc0 [0133.855] wcscpy (in: _Dest=0x3e2dbc0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.855] wcscat (in: _Dest=0x3e2dbc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.855] wcscat (in: _Dest=0x3e2dbc0, _Source="usertile20.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" [0133.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dbc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0133.856] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528178e6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528178e6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0133.856] wcscmp (_String1="usertile21.bmp", _String2=".") returned 1 [0133.856] wcscmp (_String1="usertile21.bmp", _String2="..") returned 1 [0133.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dc68 [0133.856] wcscpy (in: _Dest=0x3e2dc68, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.856] wcscat (in: _Dest=0x3e2dc68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.856] wcscat (in: _Dest=0x3e2dc68, _Source="usertile21.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" [0133.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0133.857] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5283da4e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5283da4e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f3f3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0133.857] wcscmp (_String1="usertile22.bmp", _String2=".") returned 1 [0133.858] wcscmp (_String1="usertile22.bmp", _String2="..") returned 1 [0133.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dd10 [0133.858] wcscpy (in: _Dest=0x3e2dd10, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.858] wcscat (in: _Dest=0x3e2dd10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.858] wcscat (in: _Dest=0x3e2dd10, _Source="usertile22.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" [0133.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0133.859] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52863bb6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52863bb6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f6555c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0133.859] wcscmp (_String1="usertile23.bmp", _String2=".") returned 1 [0133.859] wcscmp (_String1="usertile23.bmp", _String2="..") returned 1 [0133.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2ddb8 [0133.859] wcscpy (in: _Dest=0x3e2ddb8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.859] wcscat (in: _Dest=0x3e2ddb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.859] wcscat (in: _Dest=0x3e2ddb8, _Source="usertile23.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" [0133.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ddb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0133.861] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528afe86, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528afe86, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2238f7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0133.861] wcscmp (_String1="usertile24.bmp", _String2=".") returned 1 [0133.861] wcscmp (_String1="usertile24.bmp", _String2="..") returned 1 [0133.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2de60 [0133.861] wcscpy (in: _Dest=0x3e2de60, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.861] wcscat (in: _Dest=0x3e2de60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.861] wcscat (in: _Dest=0x3e2de60, _Source="usertile24.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" [0133.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2de60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0133.863] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf225f0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0133.863] wcscmp (_String1="usertile25.bmp", _String2=".") returned 1 [0133.863] wcscmp (_String1="usertile25.bmp", _String2="..") returned 1 [0133.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186458 [0133.863] wcscpy (in: _Dest=0x8186458, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.863] wcscat (in: _Dest=0x8186458, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.863] wcscat (in: _Dest=0x8186458, _Source="usertile25.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" [0133.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0133.866] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf228523c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0133.866] wcscmp (_String1="usertile26.bmp", _String2=".") returned 1 [0133.866] wcscmp (_String1="usertile26.bmp", _String2="..") returned 1 [0133.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186500 [0133.866] wcscpy (in: _Dest=0x8186500, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.866] wcscat (in: _Dest=0x8186500, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.866] wcscat (in: _Dest=0x8186500, _Source="usertile26.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" [0133.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0133.867] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529222be, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529222be, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0133.867] wcscmp (_String1="usertile27.bmp", _String2=".") returned 1 [0133.867] wcscmp (_String1="usertile27.bmp", _String2="..") returned 1 [0133.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81865a8 [0133.867] wcscpy (in: _Dest=0x81865a8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.868] wcscat (in: _Dest=0x81865a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.868] wcscat (in: _Dest=0x81865a8, _Source="usertile27.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" [0133.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81865a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0133.869] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52948426, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52948426, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0133.869] wcscmp (_String1="usertile28.bmp", _String2=".") returned 1 [0133.869] wcscmp (_String1="usertile28.bmp", _String2="..") returned 1 [0133.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186650 [0133.869] wcscpy (in: _Dest=0x8186650, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.869] wcscat (in: _Dest=0x8186650, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.869] wcscat (in: _Dest=0x8186650, _Source="usertile28.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" [0133.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb80 [0133.871] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296e58e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5296e58e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22d14fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0133.871] wcscmp (_String1="usertile29.bmp", _String2=".") returned 1 [0133.871] wcscmp (_String1="usertile29.bmp", _String2="..") returned 1 [0133.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81866f8 [0133.871] wcscpy (in: _Dest=0x81866f8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.871] wcscat (in: _Dest=0x81866f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.871] wcscat (in: _Dest=0x81866f8, _Source="usertile29.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" [0133.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81866f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb54 [0133.872] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529946f6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529946f6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0133.872] wcscmp (_String1="usertile30.bmp", _String2=".") returned 1 [0133.872] wcscmp (_String1="usertile30.bmp", _String2="..") returned 1 [0133.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81867a0 [0133.873] wcscpy (in: _Dest=0x81867a0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.873] wcscat (in: _Dest=0x81867a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.873] wcscat (in: _Dest=0x81867a0, _Source="usertile30.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" [0133.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81867a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78 [0133.874] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529ba85e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529ba85e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0133.874] wcscmp (_String1="usertile31.bmp", _String2=".") returned 1 [0133.874] wcscmp (_String1="usertile31.bmp", _String2="..") returned 1 [0133.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186848 [0133.874] wcscpy (in: _Dest=0x8186848, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.874] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.874] wcscat (in: _Dest=0x8186848, _Source="usertile31.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" [0133.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0134.253] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a06b2e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a06b2e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0134.253] wcscmp (_String1="usertile32.bmp", _String2=".") returned 1 [0134.253] wcscmp (_String1="usertile32.bmp", _String2="..") returned 1 [0134.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d728 [0134.253] wcscpy (in: _Dest=0x3e2d728, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0134.253] wcscat (in: _Dest=0x3e2d728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0134.253] wcscat (in: _Dest=0x3e2d728, _Source="usertile32.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" [0135.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0135.954] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a52dfe, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a52dfe, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0135.954] wcscmp (_String1="usertile33.bmp", _String2=".") returned 1 [0135.954] wcscmp (_String1="usertile33.bmp", _String2="..") returned 1 [0135.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186ed8 [0135.954] wcscpy (in: _Dest=0x8186ed8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.954] wcscat (in: _Dest=0x8186ed8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.954] wcscat (in: _Dest=0x8186ed8, _Source="usertile33.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" [0135.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0135.956] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a78f66, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a78f66, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23b5d3c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0135.956] wcscmp (_String1="usertile34.bmp", _String2=".") returned 1 [0135.956] wcscmp (_String1="usertile34.bmp", _String2="..") returned 1 [0135.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186f80 [0135.956] wcscpy (in: _Dest=0x8186f80, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.956] wcscat (in: _Dest=0x8186f80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.956] wcscat (in: _Dest=0x8186f80, _Source="usertile34.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" [0135.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0135.958] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a9f0ce, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a9f0ce, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23dbe9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0135.958] wcscmp (_String1="usertile35.bmp", _String2=".") returned 1 [0135.958] wcscmp (_String1="usertile35.bmp", _String2="..") returned 1 [0135.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187028 [0135.958] wcscpy (in: _Dest=0x8187028, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.958] wcscat (in: _Dest=0x8187028, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.958] wcscat (in: _Dest=0x8187028, _Source="usertile35.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" [0135.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0135.959] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2401ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0135.959] wcscmp (_String1="usertile36.bmp", _String2=".") returned 1 [0135.960] wcscmp (_String1="usertile36.bmp", _String2="..") returned 1 [0135.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81870d0 [0135.960] wcscpy (in: _Dest=0x81870d0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.960] wcscat (in: _Dest=0x81870d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.960] wcscat (in: _Dest=0x81870d0, _Source="usertile36.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" [0135.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81870d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0135.961] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf242815c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0135.961] wcscmp (_String1="usertile37.bmp", _String2=".") returned 1 [0135.961] wcscmp (_String1="usertile37.bmp", _String2="..") returned 1 [0135.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187178 [0135.961] wcscpy (in: _Dest=0x8187178, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.961] wcscat (in: _Dest=0x8187178, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.961] wcscat (in: _Dest=0x8187178, _Source="usertile37.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" [0135.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0135.963] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b3766e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b3766e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf244e2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0135.963] wcscmp (_String1="usertile38.bmp", _String2=".") returned 1 [0135.963] wcscmp (_String1="usertile38.bmp", _String2="..") returned 1 [0135.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187220 [0135.963] wcscpy (in: _Dest=0x8187220, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.963] wcscat (in: _Dest=0x8187220, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.963] wcscat (in: _Dest=0x8187220, _Source="usertile38.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" [0135.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0135.964] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b5d7d6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b5d7d6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf247441c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0135.964] wcscmp (_String1="usertile39.bmp", _String2=".") returned 1 [0135.964] wcscmp (_String1="usertile39.bmp", _String2="..") returned 1 [0135.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81872c8 [0135.964] wcscpy (in: _Dest=0x81872c8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.965] wcscat (in: _Dest=0x81872c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.965] wcscat (in: _Dest=0x81872c8, _Source="usertile39.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" [0135.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81872c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0135.971] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b8393e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b8393e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0135.971] wcscmp (_String1="usertile40.bmp", _String2=".") returned 1 [0135.971] wcscmp (_String1="usertile40.bmp", _String2="..") returned 1 [0135.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187370 [0135.971] wcscpy (in: _Dest=0x8187370, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.971] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.971] wcscat (in: _Dest=0x8187370, _Source="usertile40.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" [0135.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0135.972] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ba9aa6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52ba9aa6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0138.709] wcscmp (_String1="usertile41.bmp", _String2=".") returned 1 [0138.709] wcscmp (_String1="usertile41.bmp", _String2="..") returned 1 [0138.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186ae8 [0138.710] wcscpy (in: _Dest=0x8186ae8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0138.710] wcscat (in: _Dest=0x8186ae8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0138.710] wcscat (in: _Dest=0x8186ae8, _Source="usertile41.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" [0139.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0139.629] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bcfc0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bcfc0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf257edbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0139.629] wcscmp (_String1="usertile42.bmp", _String2=".") returned 1 [0139.629] wcscmp (_String1="usertile42.bmp", _String2="..") returned 1 [0139.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d680 [0139.629] wcscpy (in: _Dest=0x3e2d680, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.629] wcscat (in: _Dest=0x3e2d680, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.629] wcscat (in: _Dest=0x3e2d680, _Source="usertile42.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" [0139.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0139.630] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bf5d76, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bf5d76, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25a4f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0139.630] wcscmp (_String1="usertile43.bmp", _String2=".") returned 1 [0139.630] wcscmp (_String1="usertile43.bmp", _String2="..") returned 1 [0139.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d5d8 [0139.630] wcscpy (in: _Dest=0x3e2d5d8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.630] wcscat (in: _Dest=0x3e2d5d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.630] wcscat (in: _Dest=0x3e2d5d8, _Source="usertile43.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" [0139.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0139.632] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0139.632] wcscmp (_String1="usertile44.bmp", _String2=".") returned 1 [0139.632] wcscmp (_String1="usertile44.bmp", _String2="..") returned 1 [0139.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186ce0 [0139.632] wcscpy (in: _Dest=0x8186ce0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.632] wcscat (in: _Dest=0x8186ce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.632] wcscat (in: _Dest=0x8186ce0, _Source="usertile44.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" [0139.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0139.633] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0140.887] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0142.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0142.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34440) returned 1 [0142.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20a98) returned 1 Thread: id = 379 os_tid = 0xef8 [0132.200] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\eebsym5.dat")) returned 0x2020 [0132.201] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x20) returned 1 [0133.299] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\eebsym5.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfd8 [0133.299] GetFileSizeEx (in: hFile=0xfd8, lpFileSize=0xa70fef0 | out: lpFileSize=0xa70fef0*=0) returned 1 [0133.299] FlushFileBuffers (hFile=0xfd8) returned 1 [0133.877] CloseHandle (hObject=0xfd8) returned 1 [0133.877] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x2020) returned 1 [0142.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e08) returned 1 Thread: id = 380 os_tid = 0xeec [0132.201] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp")) returned 0x20 [0132.202] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0132.202] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.202] GetLastError () returned 0x5 [0132.202] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0132.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d88) returned 1 Thread: id = 381 os_tid = 0xef0 [0132.203] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp")) returned 0x20 [0132.203] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0132.203] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.203] GetLastError () returned 0x5 [0132.204] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0132.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 Thread: id = 382 os_tid = 0xef4 [0132.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7198 [0132.205] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" [0132.205] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\" [0132.205] wcscat (in: _Dest=0x2c7198, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*" [0132.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84e08 [0132.205] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77651af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0132.205] wcscmp (_String1=".", _String2=".") returned 0 [0132.205] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77651af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.205] wcscmp (_String1="..", _String2=".") returned 1 [0132.205] wcscmp (_String1="..", _String2="..") returned 0 [0132.205] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef739700, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef739700, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0132.205] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Project.dll", _String2=".") returned 1 [0132.205] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Project.dll", _String2="..") returned 1 [0132.205] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef739700, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef739700, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0132.205] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0132.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e08) returned 1 [0132.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 [0132.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 383 os_tid = 0xee8 [0132.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7378 [0132.207] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" [0132.207] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\" [0132.207] wcscat (in: _Dest=0x2c7378, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*" [0132.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84e08 [0132.207] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7788cf90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87d599f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0133.545] wcscmp (_String1=".", _String2=".") returned 0 [0133.545] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7788cf90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87d599f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.545] wcscmp (_String1="..", _String2=".") returned 1 [0133.545] wcscmp (_String1="..", _String2="..") returned 0 [0133.545] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b90200, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4b90200, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x337a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0133.545] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", _String2=".") returned 1 [0133.545] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", _String2="..") returned 1 [0133.545] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ea2f00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5ea2f00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0133.545] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", _String2=".") returned 1 [0133.545] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", _String2="..") returned 1 [0133.546] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed113d00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x778b30f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed113d00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x97b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0133.546] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", _String2=".") returned 1 [0133.546] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", _String2="..") returned 1 [0133.546] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee426a00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xee426a00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x117a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0133.546] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", _String2=".") returned 1 [0133.546] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", _String2="..") returned 1 [0133.546] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe01000, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77c451f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xebe01000, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0133.546] wcscmp (_String1="System.AddIn.dll", _String2=".") returned 1 [0133.546] wcscmp (_String1="System.AddIn.dll", _String2="..") returned 1 [0133.546] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe01000, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77c451f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xebe01000, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 0 [0133.546] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0133.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e08) returned 1 [0133.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 [0133.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a2d8) returned 1 Thread: id = 384 os_tid = 0xee4 [0132.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f4a0 [0132.208] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" [0132.208] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\" [0132.208] wcscat (in: _Dest=0x3f2f4a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*" [0132.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049588 [0132.208] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0132.547] wcscmp (_String1=".", _String2=".") returned 0 [0132.547] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.547] wcscmp (_String1="..", _String2=".") returned 1 [0132.547] wcscmp (_String1="..", _String2="..") returned 0 [0132.547] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 1 [0132.547] wcscmp (_String1="ItemTemplates", _String2=".") returned 1 [0132.547] wcscmp (_String1="ItemTemplates", _String2="..") returned 1 [0132.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7198 [0132.548] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" [0132.548] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\" [0132.548] wcscat (in: _Dest=0x2c7198, _Source="ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0133.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0133.686] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 0 [0133.686] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0133.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049588) returned 1 [0133.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 [0133.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e88) returned 1 Thread: id = 385 os_tid = 0x530 [0132.208] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\suggested sites.url")) returned 0x20 [0132.208] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url", dwFileAttributes=0x20) returned 1 [0132.209] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x101c [0132.209] GetFileSizeEx (in: hFile=0x101c, lpFileSize=0xa7ffcc0 | out: lpFileSize=0xa7ffcc0*=236) returned 1 [0132.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0132.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0132.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0132.209] NtQuerySystemTime (in: CurrentTime=0xa7ffc48 | out: CurrentTime=0xa7ffc48*=132471540008868000) returned 0x0 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x2647e8ad [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x55fc821c [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x63587fe3 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x2f88e7a [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0xb20a4f8 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x43231ce2 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x549ac462 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x5014136 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x1fda2f52 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x559bd8e2 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x123e718 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x55c6b1a2 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x5b9fa0fe [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x7bed7bdd [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x5653212 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x79e9a42d [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x7607c65b [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x241bc146 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x3182b293 [0132.209] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x760c68d2 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x28375816 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x65af95e7 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x73027f50 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x4860593a [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0xd1e30d4 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x3e45679f [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x6939b9a5 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x73ce87a6 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x4ef1a394 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x72010753 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x79337420 [0132.210] RtlRandomEx (in: Seed=0xa7ffc40 | out: Seed=0xa7ffc40) returned 0x354bb2f9 [0132.223] ReadFile (in: hFile=0x101c, lpBuffer=0x8096838, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0xa7ffc3c, lpOverlapped=0x0 | out: lpBuffer=0x8096838*, lpNumberOfBytesRead=0xa7ffc3c*=0xec, lpOverlapped=0x0) returned 1 [0132.226] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.226] WriteFile (in: hFile=0x101c, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xa7ffc40, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0xa7ffc40*=0xec, lpOverlapped=0x0) returned 1 [0132.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c80 [0132.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0f00 [0132.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f00) returned 1 [0132.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0132.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8096838) returned 1 [0132.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0132.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30314b0) returned 1 [0132.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f37998 [0132.439] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.439] WriteFile (in: hFile=0x101c, lpBuffer=0x3d56dd8*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xa7ffcb4, lpOverlapped=0x0 | out: lpBuffer=0x3d56dd8*, lpNumberOfBytesWritten=0xa7ffcb4*=0x118, lpOverlapped=0x0) returned 1 [0132.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56dd8) returned 1 [0132.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f379d8) returned 1 [0132.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f00) returned 1 [0132.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37998) returned 1 [0132.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0132.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0132.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1248) returned 1 [0132.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0132.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5288 [0132.455] wcscpy (in: _Dest=0x3dc5288, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" [0132.455] wcscat (in: _Dest=0x3dc5288, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url.f0dbec" [0132.455] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url.f0dbec", NtPathName=0xa7ffc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2b968 [0133.061] FlushFileBuffers (hFile=0x101c) returned 1 [0133.071] CloseHandle (hObject=0x101c) returned 1 [0133.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39a18 [0133.110] wcscpy (in: _Dest=0x3f39a18, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0133.110] wcscat (in: _Dest=0x3f39a18, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\F0DBEC-Readme.txt" [0133.110] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\links\\f0dbec-readme.txt")) returned 0xffffffff [0133.110] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\links\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x101c [0133.116] WriteFile (in: hFile=0x101c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa7ffc5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa7ffc5c*=0x70c, lpOverlapped=0x0) returned 1 [0133.118] CloseHandle (hObject=0x101c) returned 1 [0133.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a18) returned 1 [0133.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 Thread: id = 386 os_tid = 0x608 [0132.226] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\web slice gallery.url")) returned 0x20 [0133.553] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url", dwFileAttributes=0x20) returned 1 [0134.377] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda8 [0134.377] GetFileSizeEx (in: hFile=0xda8, lpFileSize=0xa7bf7d8 | out: lpFileSize=0xa7bf7d8*=226) returned 1 [0134.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4afc8 [0134.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8c0 [0134.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0134.378] NtQuerySystemTime (in: CurrentTime=0xa7bf760 | out: CurrentTime=0xa7bf760*=132471540030552000) returned 0x0 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x549ce70b [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x473cde04 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x1e55fa2d [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x7656e221 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x64d0a53c [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x463b6e74 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x1f0c88f2 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x3519a959 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x4f1bf91b [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x1825acf6 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x604ac3b1 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x125dcae [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x7fd4f488 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x300f62f9 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0xadfc2b2 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x1c836f8a [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x2b340fde [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x396eaa2b [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x16e36d31 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x7ed2cb4e [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x51c21c73 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x3d571422 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x454ea798 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x2e0a83aa [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x6fbec26a [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x915bded [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x12a29f2b [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x4abcbadf [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x2178f6f6 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x25c5fc97 [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x6954617d [0134.378] RtlRandomEx (in: Seed=0xa7bf758 | out: Seed=0xa7bf758) returned 0x5f4c8d0e [0134.387] ReadFile (in: hFile=0xda8, lpBuffer=0x809e060, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xa7bf754, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0xa7bf754*=0xe2, lpOverlapped=0x0) returned 1 [0134.389] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.389] WriteFile (in: hFile=0xda8, lpBuffer=0x80bc0a0*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xa7bf758, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesWritten=0xa7bf758*=0xe2, lpOverlapped=0x0) returned 1 [0136.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0136.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c78 [0136.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0136.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0136.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0136.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0136.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d8c8) returned 1 [0136.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f37d58 [0136.200] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.200] WriteFile (in: hFile=0xda8, lpBuffer=0x3041720*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xa7bf7cc, lpOverlapped=0x0 | out: lpBuffer=0x3041720*, lpNumberOfBytesWritten=0xa7bf7cc*=0x11c, lpOverlapped=0x0) returned 1 [0136.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0136.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f381d8) returned 1 [0136.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0136.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37d58) returned 1 [0136.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0136.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8c0) returned 1 [0136.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49880) returned 1 [0136.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f50) returned 1 [0136.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f309e0 [0136.394] wcscpy (in: _Dest=0x3f309e0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" [0136.394] wcscat (in: _Dest=0x3f309e0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url.f0dbec" [0136.394] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url.f0dbec", NtPathName=0xa7bf750, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11d28 [0136.489] FlushFileBuffers (hFile=0xda8) returned 1 [0136.494] CloseHandle (hObject=0xda8) returned 1 [0136.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054f50 [0136.536] wcscpy (in: _Dest=0x8054f50, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0136.536] wcscat (in: _Dest=0x8054f50, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\F0DBEC-Readme.txt" [0136.536] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\links\\f0dbec-readme.txt")) returned 0x20 [0136.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054f50) returned 1 [0136.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 Thread: id = 387 os_tid = 0x5c8 [0132.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2b968 [0132.227] wcscpy (in: _Dest=0x3e2b968, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" [0132.227] wcscat (in: _Dest=0x3e2b968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\" [0132.227] wcscat (in: _Dest=0x3e2b968, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*" [0132.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0132.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0132.229] wcscmp (_String1=".", _String2=".") returned 0 [0132.229] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.229] wcscmp (_String1="..", _String2=".") returned 1 [0132.229] wcscmp (_String1="..", _String2="..") returned 0 [0132.229] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.229] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0132.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0132.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b968) returned 1 [0132.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2be8) returned 1 Thread: id = 388 os_tid = 0x7ec [0132.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2be8 [0132.230] wcscpy (in: _Dest=0x3df2be8, _Source="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" [0132.230] wcscat (in: _Dest=0x3df2be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\" [0132.230] wcscat (in: _Dest=0x3df2be8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*" [0132.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0132.230] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0133.532] wcscmp (_String1=".", _String2=".") returned 0 [0133.532] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.532] wcscmp (_String1="..", _String2=".") returned 1 [0133.532] wcscmp (_String1="..", _String2="..") returned 0 [0133.532] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a500, ftCreationTime.dwHighDateTime=0x1c8bd71, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7a500, ftLastWriteTime.dwHighDateTime=0x1c8bd71, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0133.532] wcscmp (_String1="Microsoft.Synchronization.Data.dll", _String2=".") returned 1 [0133.532] wcscmp (_String1="Microsoft.Synchronization.Data.dll", _String2="..") returned 1 [0133.532] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a500, ftCreationTime.dwHighDateTime=0x1c8bd71, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7a500, ftLastWriteTime.dwHighDateTime=0x1c8bd71, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.Server.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0133.532] wcscmp (_String1="Microsoft.Synchronization.Data.Server.dll", _String2=".") returned 1 [0133.532] wcscmp (_String1="Microsoft.Synchronization.Data.Server.dll", _String2="..") returned 1 [0133.532] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5500700, ftCreationTime.dwHighDateTime=0x1c8d6dc, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5500700, ftLastWriteTime.dwHighDateTime=0x1c8d6dc, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0133.532] wcscmp (_String1="Microsoft.Synchronization.Data.SqlServerCe.dll", _String2=".") returned 1 [0133.532] wcscmp (_String1="Microsoft.Synchronization.Data.SqlServerCe.dll", _String2="..") returned 1 [0133.532] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5500700, ftCreationTime.dwHighDateTime=0x1c8d6dc, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5500700, ftLastWriteTime.dwHighDateTime=0x1c8d6dc, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0133.533] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0133.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0133.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2be8) returned 1 [0133.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1f88) returned 1 Thread: id = 389 os_tid = 0x14c [0132.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e54848 [0132.232] wcscpy (in: _Dest=0x3e54848, _Source="C:\\Users\\Public\\Desktop" | out: _Dest="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop" [0132.232] wcscat (in: _Dest=0x3e54848, _Source="\\" | out: _Dest="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\" [0132.233] wcscat (in: _Dest=0x3e54848, _Source="*" | out: _Dest="C:\\Users\\Public\\Desktop\\*") returned="C:\\Users\\Public\\Desktop\\*" [0132.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80467d0 [0132.233] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0132.235] wcscmp (_String1=".", _String2=".") returned 0 [0132.235] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.235] wcscmp (_String1="..", _String2=".") returned 1 [0132.235] wcscmp (_String1="..", _String2="..") returned 0 [0132.235] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f02380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1f02380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1f284e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x7cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0132.235] wcscmp (_String1="Adobe Reader X.lnk", _String2=".") returned 1 [0132.235] wcscmp (_String1="Adobe Reader X.lnk", _String2="..") returned 1 [0132.235] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b365a97, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b365a97, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b365a97, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.235] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.235] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.235] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe218dc90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x897, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0132.235] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1 [0132.235] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1 [0132.235] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77057c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x7707dd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7707dd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x457, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0132.235] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1 [0132.235] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1 [0132.236] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77057c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x7707dd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7707dd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x457, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0132.236] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0132.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80467d0) returned 1 [0132.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 [0132.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7838) returned 1 Thread: id = 390 os_tid = 0x4f8 [0132.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e54848 [0132.239] wcscpy (in: _Dest=0x3e54848, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0132.239] wcscat (in: _Dest=0x3e54848, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0132.239] wcscat (in: _Dest=0x3e54848, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\*") returned="C:\\Users\\Public\\Documents\\*" [0132.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80467d0 [0132.239] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1771d97e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1771d97e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0132.239] wcscmp (_String1=".", _String2=".") returned 0 [0132.239] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1771d97e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1771d97e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.239] wcscmp (_String1="..", _String2=".") returned 1 [0132.239] wcscmp (_String1="..", _String2="..") returned 0 [0132.240] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b5ed1fc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.240] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.240] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.240] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0132.240] wcscmp (_String1="My Music", _String2=".") returned 1 [0132.240] wcscmp (_String1="My Music", _String2="..") returned 1 [0132.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5e88 [0132.240] wcscpy (in: _Dest=0x3de5e88, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0132.240] wcscat (in: _Dest=0x3de5e88, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0132.240] wcscat (in: _Dest=0x3de5e88, _Source="My Music" | out: _Dest="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music" [0133.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0133.613] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0133.614] wcscmp (_String1="My Pictures", _String2=".") returned 1 [0133.614] wcscmp (_String1="My Pictures", _String2="..") returned 1 [0133.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e22cf8 [0133.614] wcscpy (in: _Dest=0x3e22cf8, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0133.614] wcscat (in: _Dest=0x3e22cf8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0133.614] wcscat (in: _Dest=0x3e22cf8, _Source="My Pictures" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures" [0133.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22cf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0133.615] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0133.615] wcscmp (_String1="My Videos", _String2=".") returned 1 [0133.615] wcscmp (_String1="My Videos", _String2="..") returned 1 [0133.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e58108 [0133.615] wcscpy (in: _Dest=0x3e58108, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0133.615] wcscat (in: _Dest=0x3e58108, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0133.616] wcscat (in: _Dest=0x3e58108, _Source="My Videos" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos" [0133.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e58108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0133.617] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0133.617] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0133.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80467d0) returned 1 [0133.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54848) returned 1 [0133.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067080) returned 1 Thread: id = 391 os_tid = 0x754 [0132.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f37618 [0132.240] wcscpy (in: _Dest=0x3f37618, _Source="C:\\Users\\Public\\Downloads" | out: _Dest="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads" [0132.240] wcscat (in: _Dest=0x3f37618, _Source="\\" | out: _Dest="C:\\Users\\Public\\Downloads\\") returned="C:\\Users\\Public\\Downloads\\" [0132.240] wcscat (in: _Dest=0x3f37618, _Source="*" | out: _Dest="C:\\Users\\Public\\Downloads\\*") returned="C:\\Users\\Public\\Downloads\\*" [0132.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047640 [0132.240] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0132.241] wcscmp (_String1=".", _String2=".") returned 0 [0132.241] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.241] wcscmp (_String1="..", _String2=".") returned 1 [0132.241] wcscmp (_String1="..", _String2="..") returned 0 [0132.241] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.241] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.241] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.241] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0132.241] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0132.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047640) returned 1 [0132.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37618) returned 1 [0132.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f80) returned 1 Thread: id = 392 os_tid = 0x248 [0132.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066f80 [0132.242] wcscpy (in: _Dest=0x3066f80, _Source="C:\\Users\\Public\\Favorites" | out: _Dest="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites" [0132.242] wcscat (in: _Dest=0x3066f80, _Source="\\" | out: _Dest="C:\\Users\\Public\\Favorites\\") returned="C:\\Users\\Public\\Favorites\\" [0132.242] wcscat (in: _Dest=0x3066f80, _Source="*" | out: _Dest="C:\\Users\\Public\\Favorites\\*") returned="C:\\Users\\Public\\Favorites\\*" [0132.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047640 [0132.243] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0132.243] wcscmp (_String1=".", _String2=".") returned 0 [0132.243] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.243] wcscmp (_String1="..", _String2=".") returned 1 [0132.243] wcscmp (_String1="..", _String2="..") returned 0 [0132.243] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.243] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0132.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047640) returned 1 [0132.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f80) returned 1 [0132.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066500) returned 1 Thread: id = 393 os_tid = 0x644 [0132.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066500 [0132.254] wcscpy (in: _Dest=0x3066500, _Source="C:\\Users\\Public\\Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries" [0132.255] wcscat (in: _Dest=0x3066500, _Source="\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\" [0132.255] wcscat (in: _Dest=0x3066500, _Source="*" | out: _Dest="C:\\Users\\Public\\Libraries\\*") returned="C:\\Users\\Public\\Libraries\\*" [0132.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047640 [0132.255] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0132.255] wcscmp (_String1=".", _String2=".") returned 0 [0132.255] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.255] wcscmp (_String1="..", _String2=".") returned 1 [0132.255] wcscmp (_String1="..", _String2="..") returned 0 [0132.255] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b424179, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b424179, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b424179, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.255] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.255] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.255] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b5c709c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0132.255] wcscmp (_String1="RecordedTV.library-ms", _String2=".") returned 1 [0132.255] wcscmp (_String1="RecordedTV.library-ms", _String2="..") returned 1 [0132.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e3b0 [0132.256] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\Users\\Public\\Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries" [0132.256] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\" [0132.256] wcscat (in: _Dest=0x3d8e3b0, _Source="RecordedTV.library-ms" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" [0136.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0136.136] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b5c709c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0136.136] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0136.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047640) returned 1 [0136.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066500) returned 1 [0136.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f00) returned 1 Thread: id = 394 os_tid = 0x4b8 [0132.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df7838 [0132.256] wcscpy (in: _Dest=0x3df7838, _Source="C:\\Users\\Public\\Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music" [0132.256] wcscat (in: _Dest=0x3df7838, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\") returned="C:\\Users\\Public\\Music\\" [0132.256] wcscat (in: _Dest=0x3df7838, _Source="*" | out: _Dest="C:\\Users\\Public\\Music\\*") returned="C:\\Users\\Public\\Music\\*" [0132.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049f28 [0132.256] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0132.256] wcscmp (_String1=".", _String2=".") returned 0 [0132.256] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.256] wcscmp (_String1="..", _String2=".") returned 1 [0132.256] wcscmp (_String1="..", _String2="..") returned 0 [0132.257] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3b1d58, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.257] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.257] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.257] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0132.257] wcscmp (_String1="Sample Music", _String2=".") returned 1 [0132.257] wcscmp (_String1="Sample Music", _String2="..") returned 1 [0132.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de64c8 [0132.257] wcscpy (in: _Dest=0x3de64c8, _Source="C:\\Users\\Public\\Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music" [0132.257] wcscat (in: _Dest=0x3de64c8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\") returned="C:\\Users\\Public\\Music\\" [0132.257] wcscat (in: _Dest=0x3de64c8, _Source="Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0134.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3de64c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0134.181] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0 [0134.181] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0134.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049f28) returned 1 [0134.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7838) returned 1 [0134.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77980) returned 1 Thread: id = 395 os_tid = 0x3c4 [0132.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37658 [0132.257] wcscpy (in: _Dest=0x3f37658, _Source="C:\\Users\\Public\\Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures" [0132.257] wcscat (in: _Dest=0x3f37658, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\") returned="C:\\Users\\Public\\Pictures\\" [0132.257] wcscat (in: _Dest=0x3f37658, _Source="*" | out: _Dest="C:\\Users\\Public\\Pictures\\*") returned="C:\\Users\\Public\\Pictures\\*" [0132.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046f08 [0132.257] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37498 [0132.258] wcscmp (_String1=".", _String2=".") returned 0 [0132.258] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.261] wcscmp (_String1="..", _String2=".") returned 1 [0132.261] wcscmp (_String1="..", _String2="..") returned 0 [0132.261] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b38bbf8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.261] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.261] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.262] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0132.262] wcscmp (_String1="Sample Pictures", _String2=".") returned 1 [0132.262] wcscmp (_String1="Sample Pictures", _String2="..") returned 1 [0132.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1d48 [0132.262] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Users\\Public\\Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures" [0132.262] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\") returned="C:\\Users\\Public\\Pictures\\" [0132.262] wcscat (in: _Dest=0x2fe1d48, _Source="Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0134.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004 [0134.183] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0 [0134.183] FindClose (in: hFindFile=0x3f37498 | out: hFindFile=0x3f37498) returned 1 [0134.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046f08) returned 1 [0134.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37658) returned 1 [0134.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f40) returned 1 Thread: id = 396 os_tid = 0x7cc [0132.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3f38460 [0132.262] wcscpy (in: _Dest=0x3f38460, _Source="C:\\Users\\Public\\Recorded TV" | out: _Dest="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV" [0132.262] wcscat (in: _Dest=0x3f38460, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\") returned="C:\\Users\\Public\\Recorded TV\\" [0132.262] wcscat (in: _Dest=0x3f38460, _Source="*" | out: _Dest="C:\\Users\\Public\\Recorded TV\\*") returned="C:\\Users\\Public\\Recorded TV\\*" [0132.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a3f8 [0132.262] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f374d8 [0132.263] wcscmp (_String1=".", _String2=".") returned 0 [0132.263] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.263] wcscmp (_String1="..", _String2=".") returned 1 [0132.263] wcscmp (_String1="..", _String2="..") returned 0 [0132.263] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x8426788a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x8426788a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.263] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.263] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.263] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0132.263] wcscmp (_String1="Sample Media", _String2=".") returned 1 [0132.263] wcscmp (_String1="Sample Media", _String2="..") returned 1 [0132.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe68a8 [0132.263] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Users\\Public\\Recorded TV" | out: _Dest="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV" [0132.263] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\") returned="C:\\Users\\Public\\Recorded TV\\" [0132.263] wcscat (in: _Dest=0x2fe68a8, _Source="Sample Media" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media" [0133.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0133.159] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0 [0133.159] FindClose (in: hFindFile=0x3f374d8 | out: hFindFile=0x3f374d8) returned 1 [0133.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a3f8) returned 1 [0133.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38460) returned 1 [0133.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b80) returned 1 Thread: id = 397 os_tid = 0x7e0 [0132.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f37698 [0132.264] wcscpy (in: _Dest=0x3f37698, _Source="C:\\Users\\Public\\Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos" [0132.264] wcscat (in: _Dest=0x3f37698, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\") returned="C:\\Users\\Public\\Videos\\" [0132.264] wcscat (in: _Dest=0x3f37698, _Source="*" | out: _Dest="C:\\Users\\Public\\Videos\\*") returned="C:\\Users\\Public\\Videos\\*" [0132.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049320 [0132.264] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0132.264] wcscmp (_String1=".", _String2=".") returned 0 [0132.264] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.264] wcscmp (_String1="..", _String2=".") returned 1 [0132.264] wcscmp (_String1="..", _String2="..") returned 0 [0132.264] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b38bbf8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.264] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.264] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.264] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0132.264] wcscmp (_String1="Sample Videos", _String2=".") returned 1 [0132.264] wcscmp (_String1="Sample Videos", _String2="..") returned 1 [0132.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e22d50 [0132.265] wcscpy (in: _Dest=0x3e22d50, _Source="C:\\Users\\Public\\Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos" [0132.265] wcscat (in: _Dest=0x3e22d50, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\") returned="C:\\Users\\Public\\Videos\\" [0132.265] wcscat (in: _Dest=0x3e22d50, _Source="Sample Videos" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos" [0133.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0133.161] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0 [0133.162] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0133.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049320) returned 1 [0133.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37698) returned 1 [0133.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77a98) returned 1 Thread: id = 398 os_tid = 0x578 [0132.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3f38538 [0132.265] wcscpy (in: _Dest=0x3f38538, _Source="C:\\Users\\EEBsYm5\\Templates" | out: _Dest="C:\\Users\\EEBsYm5\\Templates") returned="C:\\Users\\EEBsYm5\\Templates" [0132.265] wcscat (in: _Dest=0x3f38538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Templates\\") returned="C:\\Users\\EEBsYm5\\Templates\\" [0132.265] wcscat (in: _Dest=0x3f38538, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Templates\\*") returned="C:\\Users\\EEBsYm5\\Templates\\*" [0132.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048980 [0132.265] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Templates\\*", lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048980) returned 1 [0132.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38538) returned 1 [0132.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe10) returned 1 Thread: id = 399 os_tid = 0x32c [0132.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfe10 [0132.273] wcscpy (in: _Dest=0x3dcfe10, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0132.273] wcscat (in: _Dest=0x3dcfe10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0132.273] wcscat (in: _Dest=0x3dcfe10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\*") returned="C:\\Users\\EEBsYm5\\Videos\\*" [0132.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048980 [0132.273] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\*", lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ece2b20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ece2b20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0132.273] wcscmp (_String1=".", _String2=".") returned 0 [0132.273] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ece2b20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ece2b20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.273] wcscmp (_String1="..", _String2=".") returned 1 [0132.273] wcscmp (_String1="..", _String2="..") returned 0 [0132.273] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72f2ac10, ftCreationTime.dwHighDateTime=0x1d5dfc7, ftLastAccessTime.dwLowDateTime=0x34862dc0, ftLastAccessTime.dwHighDateTime=0x1d5d91f, ftLastWriteTime.dwLowDateTime=0x34862dc0, ftLastWriteTime.dwHighDateTime=0x1d5d91f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-hR0u", cAlternateFileName="")) returned 1 [0132.273] wcscmp (_String1="-hR0u", _String2=".") returned -1 [0132.273] wcscmp (_String1="-hR0u", _String2="..") returned -1 [0132.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3f38538 [0132.273] wcscpy (in: _Dest=0x3f38538, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0132.273] wcscat (in: _Dest=0x3f38538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0132.274] wcscat (in: _Dest=0x3f38538, _Source="-hR0u" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u" [0133.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f38538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0133.164] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7709e40, ftCreationTime.dwHighDateTime=0x1d5dbf1, ftLastAccessTime.dwLowDateTime=0x11edc870, ftLastAccessTime.dwHighDateTime=0x1d5e04c, ftLastWriteTime.dwLowDateTime=0x11edc870, ftLastWriteTime.dwHighDateTime=0x1d5e04c, nFileSizeHigh=0x0, nFileSizeLow=0xbfe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="a74pc.mkv", cAlternateFileName="")) returned 1 [0133.164] wcscmp (_String1="a74pc.mkv", _String2=".") returned 1 [0133.164] wcscmp (_String1="a74pc.mkv", _String2="..") returned 1 [0133.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3dc6438 [0133.164] wcscpy (in: _Dest=0x3dc6438, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0133.164] wcscat (in: _Dest=0x3dc6438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0133.164] wcscat (in: _Dest=0x3dc6438, _Source="a74pc.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv" [0133.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc6438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0133.165] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf933d2f0, ftCreationTime.dwHighDateTime=0x1d5e70a, ftLastAccessTime.dwLowDateTime=0x43fae500, ftLastAccessTime.dwHighDateTime=0x1d5dee9, ftLastWriteTime.dwLowDateTime=0x43fae500, ftLastWriteTime.dwHighDateTime=0x1d5dee9, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DA6mvVc.avi", cAlternateFileName="")) returned 1 [0133.165] wcscmp (_String1="DA6mvVc.avi", _String2=".") returned 1 [0133.165] wcscmp (_String1="DA6mvVc.avi", _String2="..") returned 1 [0133.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3dc6488 [0133.166] wcscpy (in: _Dest=0x3dc6488, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0133.166] wcscat (in: _Dest=0x3dc6488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0133.166] wcscat (in: _Dest=0x3dc6488, _Source="DA6mvVc.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi") returned="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi" [0133.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc6488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0133.167] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.167] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.167] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.167] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fa3d90, ftCreationTime.dwHighDateTime=0x1d5e479, ftLastAccessTime.dwLowDateTime=0x8a745b80, ftLastAccessTime.dwHighDateTime=0x1d5e112, ftLastWriteTime.dwLowDateTime=0x8a745b80, ftLastWriteTime.dwHighDateTime=0x1d5e112, nFileSizeHigh=0x0, nFileSizeLow=0x58e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="hF-OsC-WhMj10PcFdt.mkv", cAlternateFileName="HF-OSC~1.MKV")) returned 1 [0133.167] wcscmp (_String1="hF-OsC-WhMj10PcFdt.mkv", _String2=".") returned 1 [0133.167] wcscmp (_String1="hF-OsC-WhMj10PcFdt.mkv", _String2="..") returned 1 [0133.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8baa8 [0133.167] wcscpy (in: _Dest=0x3d8baa8, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0133.167] wcscat (in: _Dest=0x3d8baa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0133.167] wcscat (in: _Dest=0x3d8baa8, _Source="hF-OsC-WhMj10PcFdt.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv" [0133.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8baa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0133.168] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e21770, ftCreationTime.dwHighDateTime=0x1d5e500, ftLastAccessTime.dwLowDateTime=0x7fed7710, ftLastAccessTime.dwHighDateTime=0x1d5e1ca, ftLastWriteTime.dwLowDateTime=0x7fed7710, ftLastWriteTime.dwHighDateTime=0x1d5e1ca, nFileSizeHigh=0x0, nFileSizeLow=0x7c25, dwReserved0=0x0, dwReserved1=0x0, cFileName="hsKxMkB9q-Vvso.mkv", cAlternateFileName="HSKXMK~1.MKV")) returned 1 [0133.168] wcscmp (_String1="hsKxMkB9q-Vvso.mkv", _String2=".") returned 1 [0133.168] wcscmp (_String1="hsKxMkB9q-Vvso.mkv", _String2="..") returned 1 [0133.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe72c8 [0133.169] wcscpy (in: _Dest=0x2fe72c8, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0133.169] wcscat (in: _Dest=0x2fe72c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0133.169] wcscat (in: _Dest=0x2fe72c8, _Source="hsKxMkB9q-Vvso.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv" [0133.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe72c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0133.170] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e21770, ftCreationTime.dwHighDateTime=0x1d5e500, ftLastAccessTime.dwLowDateTime=0x7fed7710, ftLastAccessTime.dwHighDateTime=0x1d5e1ca, ftLastWriteTime.dwLowDateTime=0x7fed7710, ftLastWriteTime.dwHighDateTime=0x1d5e1ca, nFileSizeHigh=0x0, nFileSizeLow=0x7c25, dwReserved0=0x0, dwReserved1=0x0, cFileName="hsKxMkB9q-Vvso.mkv", cAlternateFileName="HSKXMK~1.MKV")) returned 0 [0133.170] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0133.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048980) returned 1 [0133.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe10) returned 1 [0133.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77ad0) returned 1 Thread: id = 400 os_tid = 0x5f4 [0132.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e23640 [0132.274] wcscpy (in: _Dest=0x3e23640, _Source="C:\\ProgramData\\Microsoft\\Windows\\AIT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT" [0132.274] wcscat (in: _Dest=0x3e23640, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT\\" [0132.274] wcscat (in: _Dest=0x3e23640, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*" [0132.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0132.275] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf390 [0132.275] wcscmp (_String1=".", _String2=".") returned 0 [0132.275] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.275] wcscmp (_String1="..", _String2=".") returned 1 [0132.275] wcscmp (_String1="..", _String2="..") returned 0 [0132.275] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.275] FindClose (in: hFindFile=0x3dcf390 | out: hFindFile=0x3dcf390) returned 1 [0132.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0132.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23640) returned 1 [0132.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ef90) returned 1 Thread: id = 401 os_tid = 0x5d8 [0132.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32e08 [0132.276] wcscpy (in: _Dest=0x3f32e08, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0132.276] wcscat (in: _Dest=0x3f32e08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\" [0132.276] wcscat (in: _Dest=0x3f32e08, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*" [0132.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0132.277] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf390 [0132.277] wcscmp (_String1=".", _String2=".") returned 0 [0132.277] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.277] wcscmp (_String1="..", _String2=".") returned 1 [0132.277] wcscmp (_String1="..", _String2="..") returned 0 [0132.277] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0132.277] wcscmp (_String1="en-US", _String2=".") returned 1 [0132.277] wcscmp (_String1="en-US", _String2="..") returned 1 [0132.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3d88 [0132.277] wcscpy (in: _Dest=0x3dc3d88, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0132.277] wcscat (in: _Dest=0x3dc3d88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\" [0132.277] wcscat (in: _Dest=0x3dc3d88, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0134.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc3d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0134.184] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0134.184] FindClose (in: hFindFile=0x3dcf390 | out: hFindFile=0x3dcf390) returned 1 [0134.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0134.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e08) returned 1 [0134.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32868) returned 1 Thread: id = 402 os_tid = 0xf30 [0132.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6ef90 [0132.278] wcscpy (in: _Dest=0x3e6ef90, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0132.278] wcscat (in: _Dest=0x3e6ef90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0132.278] wcscat (in: _Dest=0x3e6ef90, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*" [0132.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0132.278] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0135.636] wcscmp (_String1=".", _String2=".") returned 0 [0135.636] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.636] wcscmp (_String1="..", _String2=".") returned 1 [0135.636] wcscmp (_String1="..", _String2="..") returned 0 [0135.636] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbox.bin", cAlternateFileName="")) returned 1 [0135.636] wcscmp (_String1="blackbox.bin", _String2=".") returned 1 [0135.636] wcscmp (_String1="blackbox.bin", _String2="..") returned 1 [0135.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f341c8 [0135.636] wcscpy (in: _Dest=0x3f341c8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0135.636] wcscat (in: _Dest=0x3f341c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0135.636] wcscat (in: _Dest=0x3f341c8, _Source="blackbox.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" [0137.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f341c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0137.043] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0137.043] wcscmp (_String1="Cache", _String2=".") returned 1 [0137.043] wcscmp (_String1="Cache", _String2="..") returned 1 [0137.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1508 [0137.043] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0137.043] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0137.043] wcscat (in: _Dest=0x2fe1508, _Source="Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache" [0137.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0137.045] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1221c4f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x1221c4f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x18f04190, ftLastWriteTime.dwHighDateTime=0x1d2fc8b, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="drmstore.hds", cAlternateFileName="")) returned 1 [0137.045] wcscmp (_String1="drmstore.hds", _String2=".") returned 1 [0137.045] wcscmp (_String1="drmstore.hds", _String2="..") returned 1 [0137.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39938 [0137.045] wcscpy (in: _Dest=0x3f39938, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0137.045] wcscat (in: _Dest=0x3f39938, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0137.045] wcscat (in: _Dest=0x3f39938, _Source="drmstore.hds" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" [0137.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860 [0137.046] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.bla", cAlternateFileName="")) returned 1 [0137.046] wcscmp (_String1="v3ks.bla", _String2=".") returned 1 [0137.046] wcscmp (_String1="v3ks.bla", _String2="..") returned 1 [0137.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bbe0 [0137.047] wcscpy (in: _Dest=0x3d8bbe0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0137.047] wcscat (in: _Dest=0x3d8bbe0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0137.047] wcscat (in: _Dest=0x3d8bbe0, _Source="v3ks.bla" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" [0137.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8bbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0137.048] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 1 [0137.048] wcscmp (_String1="v3ks.sec", _String2=".") returned 1 [0137.048] wcscmp (_String1="v3ks.sec", _String2="..") returned 1 [0137.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8b970 [0137.048] wcscpy (in: _Dest=0x3d8b970, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0137.048] wcscat (in: _Dest=0x3d8b970, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0137.048] wcscat (in: _Dest=0x3d8b970, _Source="v3ks.sec" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" [0137.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8b970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0137.049] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 0 [0137.049] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0137.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0137.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ef90) returned 1 [0137.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ec78) returned 1 Thread: id = 403 os_tid = 0xf54 [0132.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e008 [0132.279] wcscpy (in: _Dest=0x3d8e008, _Source="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" [0132.279] wcscat (in: _Dest=0x3d8e008, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\" [0132.279] wcscat (in: _Dest=0x3d8e008, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*" [0132.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0132.279] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0135.634] wcscmp (_String1=".", _String2=".") returned 0 [0135.634] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.634] wcscmp (_String1="..", _String2=".") returned 1 [0135.634] wcscmp (_String1="..", _String2="..") returned 0 [0135.634] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.634] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0135.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0135.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e008) returned 1 [0135.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c810) returned 1 Thread: id = 404 os_tid = 0xf50 [0132.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0132.280] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0132.280] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\" [0132.280] wcscat (in: _Dest=0x3f2f528, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*" [0132.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0132.280] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0132.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 [0132.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 405 os_tid = 0xf48 [0132.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8dfa0 [0132.281] wcscpy (in: _Dest=0x3d8dfa0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0132.281] wcscat (in: _Dest=0x3d8dfa0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0132.281] wcscat (in: _Dest=0x3d8dfa0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*" [0132.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0132.281] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c18 [0135.638] wcscmp (_String1=".", _String2=".") returned 0 [0135.638] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.638] wcscmp (_String1="..", _String2=".") returned 1 [0135.639] wcscmp (_String1="..", _String2="..") returned 0 [0135.639] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.639] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0135.639] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0135.639] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0135.639] wcscmp (_String1="Ringtone 01.wma", _String2=".") returned 1 [0135.639] wcscmp (_String1="Ringtone 01.wma", _String2="..") returned 1 [0135.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4188 [0135.639] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0135.639] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0135.639] wcscat (in: _Dest=0x3dc4188, _Source="Ringtone 01.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" [0149.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0149.167] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0149.167] wcscmp (_String1="Ringtone 02.wma", _String2=".") returned 1 [0149.167] wcscmp (_String1="Ringtone 02.wma", _String2="..") returned 1 [0149.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4488 [0149.167] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0149.167] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0149.167] wcscat (in: _Dest=0x3dc4488, _Source="Ringtone 02.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" [0149.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0149.177] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0149.177] wcscmp (_String1="Ringtone 03.wma", _String2=".") returned 1 [0149.177] wcscmp (_String1="Ringtone 03.wma", _String2="..") returned 1 [0149.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4b88 [0149.177] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0149.177] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0149.177] wcscat (in: _Dest=0x3dc4b88, _Source="Ringtone 03.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" [0149.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0149.178] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0149.178] wcscmp (_String1="Ringtone 04.wma", _String2=".") returned 1 [0149.178] wcscmp (_String1="Ringtone 04.wma", _String2="..") returned 1 [0149.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3e08 [0149.179] wcscpy (in: _Dest=0x3dc3e08, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0149.179] wcscat (in: _Dest=0x3dc3e08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0149.179] wcscat (in: _Dest=0x3dc3e08, _Source="Ringtone 04.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" [0149.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0149.180] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0149.180] wcscmp (_String1="Ringtone 05.wma", _String2=".") returned 1 [0149.180] wcscmp (_String1="Ringtone 05.wma", _String2="..") returned 1 [0149.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5288 [0149.180] wcscpy (in: _Dest=0x3dc5288, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0149.180] wcscat (in: _Dest=0x3dc5288, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0149.180] wcscat (in: _Dest=0x3dc5288, _Source="Ringtone 05.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" [0149.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0149.181] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0149.181] wcscmp (_String1="Ringtone 06.wma", _String2=".") returned 1 [0149.181] wcscmp (_String1="Ringtone 06.wma", _String2="..") returned 1 [0149.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5808 [0149.181] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0149.181] wcscat (in: _Dest=0x3dc5808, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0149.181] wcscat (in: _Dest=0x3dc5808, _Source="Ringtone 06.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" [0149.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0149.183] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0149.183] wcscmp (_String1="Ringtone 07.wma", _String2=".") returned 1 [0149.183] wcscmp (_String1="Ringtone 07.wma", _String2="..") returned 1 [0149.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5308 [0149.183] wcscpy (in: _Dest=0x3dc5308, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0149.183] wcscat (in: _Dest=0x3dc5308, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0149.183] wcscat (in: _Dest=0x3dc5308, _Source="Ringtone 07.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" [0149.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0149.184] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0149.184] wcscmp (_String1="Ringtone 08.wma", _String2=".") returned 1 [0149.184] wcscmp (_String1="Ringtone 08.wma", _String2="..") returned 1 [0149.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4d08 [0149.184] wcscpy (in: _Dest=0x3dc4d08, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0149.184] wcscat (in: _Dest=0x3dc4d08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0149.184] wcscat (in: _Dest=0x3dc4d08, _Source="Ringtone 08.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" [0149.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0149.186] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0149.186] wcscmp (_String1="Ringtone 09.wma", _String2=".") returned 1 [0149.186] wcscmp (_String1="Ringtone 09.wma", _String2="..") returned 1 [0149.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5988 [0149.186] wcscpy (in: _Dest=0x3dc5988, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0149.186] wcscat (in: _Dest=0x3dc5988, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0149.186] wcscat (in: _Dest=0x3dc5988, _Source="Ringtone 09.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" [0149.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0149.187] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0149.187] wcscmp (_String1="Ringtone 10.wma", _String2=".") returned 1 [0149.187] wcscmp (_String1="Ringtone 10.wma", _String2="..") returned 1 [0149.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3d08 [0149.187] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0149.187] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0149.187] wcscat (in: _Dest=0x3dc3d08, _Source="Ringtone 10.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" [0149.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0149.188] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 0 [0149.189] FindClose (in: hFindFile=0x3f37c18 | out: hFindFile=0x3f37c18) returned 1 [0149.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0149.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dfa0) returned 1 [0149.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 Thread: id = 406 os_tid = 0xf44 [0132.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6edd8 [0132.281] wcscpy (in: _Dest=0x3e6edd8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0132.282] wcscat (in: _Dest=0x3e6edd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0132.282] wcscat (in: _Dest=0x3e6edd8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*" [0132.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0132.282] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0134.299] wcscmp (_String1=".", _String2=".") returned 0 [0134.299] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.299] wcscmp (_String1="..", _String2=".") returned 1 [0134.299] wcscmp (_String1="..", _String2="..") returned 0 [0134.299] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0134.299] wcscmp (_String1="Manifest", _String2=".") returned 1 [0134.299] wcscmp (_String1="Manifest", _String2="..") returned 1 [0134.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd5b0 [0134.299] wcscpy (in: _Dest=0x3ecd5b0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0134.299] wcscat (in: _Dest=0x3ecd5b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0134.299] wcscat (in: _Dest=0x3ecd5b0, _Source="Manifest" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest" [0137.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0137.067] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0137.068] wcscmp (_String1="Sessions", _String2=".") returned 1 [0137.068] wcscmp (_String1="Sessions", _String2="..") returned 1 [0137.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8baa8 [0137.068] wcscpy (in: _Dest=0x3d8baa8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0137.068] wcscat (in: _Dest=0x3d8baa8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0137.068] wcscat (in: _Dest=0x3d8baa8, _Source="Sessions" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions" [0137.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8baa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e0 [0137.069] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0137.069] wcscmp (_String1="Upload", _String2=".") returned 1 [0137.069] wcscmp (_String1="Upload", _String2="..") returned 1 [0137.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6728 [0137.069] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0137.069] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0137.069] wcscat (in: _Dest=0x2fe6728, _Source="Upload" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload" [0137.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0137.070] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0137.070] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0137.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0137.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6edd8) returned 1 [0137.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e234e0) returned 1 Thread: id = 407 os_tid = 0x650 [0132.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d1d0 [0132.282] wcscpy (in: _Dest=0x3d8d1d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0132.282] wcscat (in: _Dest=0x3d8d1d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\" [0132.282] wcscat (in: _Dest=0x3d8d1d0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*" [0132.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0132.282] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0132.282] wcscmp (_String1=".", _String2=".") returned 0 [0132.282] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.282] wcscmp (_String1="..", _String2=".") returned 1 [0132.282] wcscmp (_String1="..", _String2="..") returned 0 [0132.283] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x112b4ab2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x112b4ab2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0132.283] wcscmp (_String1="Default Programs.lnk", _String2=".") returned 1 [0132.283] wcscmp (_String1="Default Programs.lnk", _String2="..") returned 1 [0132.283] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd42927e2, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd42927e2, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.283] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.283] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.283] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0132.283] wcscmp (_String1="Programs", _String2=".") returned 1 [0132.283] wcscmp (_String1="Programs", _String2="..") returned 1 [0132.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32e80 [0132.283] wcscpy (in: _Dest=0x3f32e80, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0132.283] wcscat (in: _Dest=0x3f32e80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\" [0132.283] wcscat (in: _Dest=0x3f32e80, _Source="Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0133.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0133.712] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0133.712] wcscmp (_String1="Windows Update.lnk", _String2=".") returned 1 [0133.712] wcscmp (_String1="Windows Update.lnk", _String2="..") returned 1 [0133.712] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0133.712] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0133.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0133.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d1d0) returned 1 [0133.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6608) returned 1 Thread: id = 408 os_tid = 0x670 [0132.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d370 [0132.283] wcscpy (in: _Dest=0x3d8d370, _Source="C:\\ProgramData\\Microsoft\\Windows\\Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates" [0132.283] wcscat (in: _Dest=0x3d8d370, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\" [0132.283] wcscat (in: _Dest=0x3d8d370, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*" [0132.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0132.286] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c18 [0135.637] wcscmp (_String1=".", _String2=".") returned 0 [0135.637] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.637] wcscmp (_String1="..", _String2=".") returned 1 [0135.637] wcscmp (_String1="..", _String2="..") returned 0 [0135.637] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.637] FindClose (in: hFindFile=0x3f37c18 | out: hFindFile=0x3f37c18) returned 1 [0135.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0135.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d370) returned 1 [0135.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 409 os_tid = 0x330 [0132.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e23640 [0132.286] wcscpy (in: _Dest=0x3e23640, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0132.286] wcscat (in: _Dest=0x3e23640, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\" [0132.286] wcscat (in: _Dest=0x3e23640, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\*" [0132.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe6c0 [0132.286] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0134.300] wcscmp (_String1=".", _String2=".") returned 0 [0134.300] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.300] wcscmp (_String1="..", _String2=".") returned 1 [0134.300] wcscmp (_String1="..", _String2="..") returned 0 [0134.300] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0134.300] wcscmp (_String1="ReportArchive", _String2=".") returned 1 [0134.300] wcscmp (_String1="ReportArchive", _String2="..") returned 1 [0134.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x2ff5160 [0134.300] wcscpy (in: _Dest=0x2ff5160, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0134.301] wcscat (in: _Dest=0x2ff5160, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\" [0134.301] wcscat (in: _Dest=0x2ff5160, _Source="ReportArchive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive" [0142.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0142.471] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0142.472] wcscmp (_String1="ReportQueue", _String2=".") returned 1 [0142.472] wcscmp (_String1="ReportQueue", _String2="..") returned 1 [0142.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39a88 [0142.472] wcscpy (in: _Dest=0x3f39a88, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0142.472] wcscat (in: _Dest=0x3f39a88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\" [0142.472] wcscat (in: _Dest=0x3f39a88, _Source="ReportQueue" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue" [0142.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0142.473] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 0 [0142.473] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0142.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe6c0) returned 1 [0142.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23640) returned 1 [0142.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22fb8) returned 1 Thread: id = 410 os_tid = 0x7c4 [0132.286] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3" (normalized: "c:\\users\\eebsym5\\music\\-jz1abkpz9v.mp3")) returned 0x20 [0132.287] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3", dwFileAttributes=0x20) returned 1 [0132.287] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3" (normalized: "c:\\users\\eebsym5\\music\\-jz1abkpz9v.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfe4 [0132.287] GetFileSizeEx (in: hFile=0xfe4, lpFileSize=0xafdf970 | out: lpFileSize=0xafdf970*=75002) returned 1 [0132.287] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x124f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.287] ReadFile (in: hFile=0xfe4, lpBuffer=0xafdf97c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xafdf958, lpOverlapped=0x0 | out: lpBuffer=0xafdf97c*, lpNumberOfBytesRead=0xafdf958*=0x4, lpOverlapped=0x0) returned 1 [0132.289] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1108 [0132.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0132.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0132.289] NtQuerySystemTime (in: CurrentTime=0xafdf8f8 | out: CurrentTime=0xafdf8f8*=132471540009804000) returned 0x0 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x4d7732ba [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x10924780 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x1f31a1d4 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x58b4ca6b [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x2632829f [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x22ed84c [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x296a0685 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x54f26e69 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x71195e9b [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x7b92d918 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x62df0ebe [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0xc3758ce [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x4cf7167 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x4547b6e4 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0xc776e4b [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x1050d082 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x17822fca [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x3a418e1c [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x36bfbc60 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x4fd729d5 [0132.289] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x6d927488 [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x4895f9c [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x89b2ac5 [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x268e4d22 [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x33688bb1 [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x5399afe2 [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x7c64a57c [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x13e090da [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x4d1c60e5 [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x3320a0ef [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x2e5746cb [0132.290] RtlRandomEx (in: Seed=0xafdf8f0 | out: Seed=0xafdf8f0) returned 0x47730516 [0132.298] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.298] ReadFile (in: hFile=0xfe4, lpBuffer=0x809e060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xafdf8f8, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0xafdf8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.299] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f38808 [0132.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ef8 [0132.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1108 [0132.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1108) returned 1 [0132.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a1c68 [0132.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1108 [0132.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0132.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10b8) returned 1 [0132.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 [0132.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38808) returned 1 [0132.299] WriteFile (in: hFile=0xfe4, lpBuffer=0x80a1c68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xafdf8f8, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesWritten=0xafdf8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0132.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0132.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df79f8 [0132.441] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.441] WriteFile (in: hFile=0xfe4, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xafdf964, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xafdf964*=0x110, lpOverlapped=0x0) returned 1 [0132.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0132.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8088) returned 1 [0132.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e60) returned 1 [0132.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79f8) returned 1 [0132.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1108) returned 1 [0132.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0132.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0132.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1068) returned 1 [0132.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bf88 [0132.453] wcscpy (in: _Dest=0x3d8bf88, _Source="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3") returned="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3" [0132.453] wcscat (in: _Dest=0x3d8bf88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3.f0dbec" [0132.453] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3.f0dbec", NtPathName=0xafdf8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\-jZ1AbKpz9V.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5008 [0132.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5008) returned 1 [0132.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8105818) returned 1 [0132.464] NtQueryInformationFile (in: FileHandle=0xfe4, IoStatusBlock=0xafdf8c0, FileInformation=0xafdf8c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xafdf8c0, FileInformation=0xafdf8c8) returned 0x0 [0132.464] NtSetInformationFile (FileHandle=0xfe4, IoStatusBlock=0xafdf8c0, FileInformation=0xafdf8c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf88) returned 1 [0132.620] FlushFileBuffers (hFile=0xfe4) returned 1 [0132.625] CloseHandle (hObject=0xfe4) returned 1 [0133.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7028 [0133.000] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0133.000] wcscat (in: _Dest=0x2fe7028, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt" [0133.000] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\f0dbec-readme.txt")) returned 0xffffffff [0133.000] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x101c [0133.128] WriteFile (in: hFile=0x101c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xafdf90c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xafdf90c*=0x70c, lpOverlapped=0x0) returned 1 [0133.226] CloseHandle (hObject=0x101c) returned 1 [0133.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 [0133.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f5e0) returned 1 Thread: id = 411 os_tid = 0x7b0 [0132.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav" (normalized: "c:\\users\\eebsym5\\music\\7gjnlrs6k.wav")) returned 0x20 [0132.300] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav", dwFileAttributes=0x20) returned 1 [0132.300] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav" (normalized: "c:\\users\\eebsym5\\music\\7gjnlrs6k.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfe8 [0132.300] GetFileSizeEx (in: hFile=0xfe8, lpFileSize=0x769fe58 | out: lpFileSize=0x769fe58*=17444) returned 1 [0132.300] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x4420, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.300] ReadFile (in: hFile=0xfe8, lpBuffer=0x769fe64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x769fe40, lpOverlapped=0x0 | out: lpBuffer=0x769fe64*, lpNumberOfBytesRead=0x769fe40*=0x4, lpOverlapped=0x0) returned 1 [0132.302] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0132.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1040 [0132.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1018 [0132.302] NtQuerySystemTime (in: CurrentTime=0x769fde0 | out: CurrentTime=0x769fde0*=132471540009804000) returned 0x0 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x7d719c50 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x6516fde8 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x2f6a831e [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x43c9da79 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x489d65f0 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x59ff754e [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x67cf8672 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x61d71052 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0xf8fa1df [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x566ca901 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x4bbaef34 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x23b293bf [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x3bcea338 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x418cc516 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x16a30d06 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x1bbf3ea [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x1e7199ed [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x5d510cde [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x44d03448 [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x7c6d43d [0132.302] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x7d04f169 [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x14012f9f [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x48959a7 [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x6e2719db [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x2e57b205 [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x6fa0c000 [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x5c032d15 [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x7ad0d49a [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x224ead6e [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0xa7bd8a1 [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x21928600 [0132.303] RtlRandomEx (in: Seed=0x769fdd8 | out: Seed=0x769fdd8) returned 0x6c5c1da5 [0132.311] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.311] ReadFile (in: hFile=0xfe8, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x769fde0, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0x769fde0*=0x3c00, lpOverlapped=0x0) returned 1 [0132.311] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f38850 [0132.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ef8 [0132.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0132.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10b8) returned 1 [0132.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0132.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0132.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1018 [0132.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1018) returned 1 [0132.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 [0132.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38850) returned 1 [0132.312] WriteFile (in: hFile=0xfe8, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x769fde0, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0x769fde0*=0x3c00, lpOverlapped=0x0) returned 1 [0132.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0132.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0132.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df3f38 [0132.443] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.443] WriteFile (in: hFile=0xfe8, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x769fe4c, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0x769fe4c*=0x10c, lpOverlapped=0x0) returned 1 [0132.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0132.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42c8) returned 1 [0132.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0dc0) returned 1 [0132.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3f38) returned 1 [0132.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10b8) returned 1 [0132.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0132.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ff0) returned 1 [0132.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fc8) returned 1 [0132.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6fc8 [0132.454] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav") returned="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav" [0132.454] wcscat (in: _Dest=0x2fe6fc8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav.f0dbec" [0132.454] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav.f0dbec", NtPathName=0x769fdd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\7gjnLrS6K.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32ca0 [0132.982] FlushFileBuffers (hFile=0xfe8) returned 1 [0132.996] CloseHandle (hObject=0xfe8) returned 1 [0133.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7208 [0133.075] wcscpy (in: _Dest=0x2fe7208, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0133.075] wcscat (in: _Dest=0x2fe7208, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt" [0133.075] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\f0dbec-readme.txt")) returned 0x20 [0133.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7208) returned 1 [0133.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23488) returned 1 Thread: id = 412 os_tid = 0xb44 [0132.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ded0 [0132.313] wcscpy (in: _Dest=0x3d8ded0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" [0132.313] wcscat (in: _Dest=0x3d8ded0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0132.313] wcscat (in: _Dest=0x3d8ded0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\*") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\*" [0132.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe928 [0132.313] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\*", lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8e1d750, ftCreationTime.dwHighDateTime=0x1d5e2a2, ftLastAccessTime.dwLowDateTime=0xaa44c460, ftLastAccessTime.dwHighDateTime=0x1d5df0d, ftLastWriteTime.dwLowDateTime=0xaa44c460, ftLastWriteTime.dwHighDateTime=0x1d5df0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd00d0 [0132.313] wcscmp (_String1=".", _String2=".") returned 0 [0132.313] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8e1d750, ftCreationTime.dwHighDateTime=0x1d5e2a2, ftLastAccessTime.dwLowDateTime=0xaa44c460, ftLastAccessTime.dwHighDateTime=0x1d5df0d, ftLastWriteTime.dwLowDateTime=0xaa44c460, ftLastWriteTime.dwHighDateTime=0x1d5df0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.314] wcscmp (_String1="..", _String2=".") returned 1 [0132.314] wcscmp (_String1="..", _String2="..") returned 0 [0132.314] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacd39b10, ftCreationTime.dwHighDateTime=0x1d5e6ac, ftLastAccessTime.dwLowDateTime=0x448ee880, ftLastAccessTime.dwHighDateTime=0x1d5d913, ftLastWriteTime.dwLowDateTime=0x448ee880, ftLastWriteTime.dwHighDateTime=0x1d5d913, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="h-zordla6pU", cAlternateFileName="H-ZORD~1")) returned 1 [0132.314] wcscmp (_String1="h-zordla6pU", _String2=".") returned 1 [0132.314] wcscmp (_String1="h-zordla6pU", _String2="..") returned 1 [0132.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32ef8 [0132.314] wcscpy (in: _Dest=0x3f32ef8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" [0132.314] wcscat (in: _Dest=0x3f32ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0132.314] wcscat (in: _Dest=0x3f32ef8, _Source="h-zordla6pU" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" [0133.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0133.714] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa884d2b0, ftCreationTime.dwHighDateTime=0x1d5e330, ftLastAccessTime.dwLowDateTime=0xdcaa8590, ftLastAccessTime.dwHighDateTime=0x1d5dc68, ftLastWriteTime.dwLowDateTime=0xdcaa8590, ftLastWriteTime.dwHighDateTime=0x1d5dc68, nFileSizeHigh=0x0, nFileSizeLow=0x137bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HesoI.mp3", cAlternateFileName="")) returned 1 [0133.714] wcscmp (_String1="HesoI.mp3", _String2=".") returned 1 [0133.714] wcscmp (_String1="HesoI.mp3", _String2="..") returned 1 [0133.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32d90 [0133.714] wcscpy (in: _Dest=0x3f32d90, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" [0133.714] wcscat (in: _Dest=0x3f32d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0133.714] wcscat (in: _Dest=0x3f32d90, _Source="HesoI.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3" [0133.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc5c [0133.716] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f72d70, ftCreationTime.dwHighDateTime=0x1d5db45, ftLastAccessTime.dwLowDateTime=0xb2f04cb0, ftLastAccessTime.dwHighDateTime=0x1d5e6a6, ftLastWriteTime.dwLowDateTime=0xb2f04cb0, ftLastWriteTime.dwHighDateTime=0x1d5e6a6, nFileSizeHigh=0x0, nFileSizeLow=0x1176a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MNkhdjux 74YyohEpGQ2.m4a", cAlternateFileName="MNKHDJ~1.M4A")) returned 1 [0133.716] wcscmp (_String1="MNkhdjux 74YyohEpGQ2.m4a", _String2=".") returned 1 [0133.716] wcscmp (_String1="MNkhdjux 74YyohEpGQ2.m4a", _String2="..") returned 1 [0133.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1f88 [0133.716] wcscpy (in: _Dest=0x3df1f88, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" [0133.716] wcscat (in: _Dest=0x3df1f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0133.716] wcscat (in: _Dest=0x3df1f88, _Source="MNkhdjux 74YyohEpGQ2.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a" [0133.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df1f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0133.729] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c71fc90, ftCreationTime.dwHighDateTime=0x1d5df66, ftLastAccessTime.dwLowDateTime=0x98fe21c0, ftLastAccessTime.dwHighDateTime=0x1d5e353, ftLastWriteTime.dwLowDateTime=0x98fe21c0, ftLastWriteTime.dwHighDateTime=0x1d5e353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="niLM", cAlternateFileName="")) returned 1 [0133.729] wcscmp (_String1="niLM", _String2=".") returned 1 [0133.729] wcscmp (_String1="niLM", _String2="..") returned 1 [0133.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d1d0 [0133.730] wcscpy (in: _Dest=0x3d8d1d0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" [0133.730] wcscat (in: _Dest=0x3d8d1d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0133.730] wcscat (in: _Dest=0x3d8d1d0, _Source="niLM" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM" [0133.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8d1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0133.731] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f123670, ftCreationTime.dwHighDateTime=0x1d5deb6, ftLastAccessTime.dwLowDateTime=0x37305520, ftLastAccessTime.dwHighDateTime=0x1d5d82d, ftLastWriteTime.dwLowDateTime=0x37305520, ftLastWriteTime.dwHighDateTime=0x1d5d82d, nFileSizeHigh=0x0, nFileSizeLow=0xed97, dwReserved0=0x0, dwReserved1=0x0, cFileName="N_feNVH_ItYnyQ27heK.m4a", cAlternateFileName="N_FENV~1.M4A")) returned 1 [0133.731] wcscmp (_String1="N_feNVH_ItYnyQ27heK.m4a", _String2=".") returned 1 [0133.731] wcscmp (_String1="N_feNVH_ItYnyQ27heK.m4a", _String2="..") returned 1 [0133.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2be8 [0133.731] wcscpy (in: _Dest=0x3df2be8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" [0133.731] wcscat (in: _Dest=0x3df2be8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0133.731] wcscat (in: _Dest=0x3df2be8, _Source="N_feNVH_ItYnyQ27heK.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a" [0133.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0133.733] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc86040d0, ftCreationTime.dwHighDateTime=0x1d5e3d8, ftLastAccessTime.dwLowDateTime=0xfea1280, ftLastAccessTime.dwHighDateTime=0x1d5e0f7, ftLastWriteTime.dwLowDateTime=0xfea1280, ftLastWriteTime.dwHighDateTime=0x1d5e0f7, nFileSizeHigh=0x0, nFileSizeLow=0xde83, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9x145hUCkGVz.m4a", cAlternateFileName="X9X145~1.M4A")) returned 1 [0133.733] wcscmp (_String1="X9x145hUCkGVz.m4a", _String2=".") returned 1 [0133.733] wcscmp (_String1="X9x145hUCkGVz.m4a", _String2="..") returned 1 [0133.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2f4a0 [0133.733] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg" [0133.733] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0133.733] wcscat (in: _Dest=0x3f2f4a0, _Source="X9x145hUCkGVz.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a" [0133.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0133.734] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc86040d0, ftCreationTime.dwHighDateTime=0x1d5e3d8, ftLastAccessTime.dwLowDateTime=0xfea1280, ftLastAccessTime.dwHighDateTime=0x1d5e0f7, ftLastWriteTime.dwLowDateTime=0xfea1280, ftLastWriteTime.dwHighDateTime=0x1d5e0f7, nFileSizeHigh=0x0, nFileSizeLow=0xde83, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9x145hUCkGVz.m4a", cAlternateFileName="X9X145~1.M4A")) returned 0 [0133.735] FindClose (in: hFindFile=0x3dd00d0 | out: hFindFile=0x3dd00d0) returned 1 [0133.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe928) returned 1 [0133.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ded0) returned 1 [0133.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 Thread: id = 413 os_tid = 0x728 [0132.314] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a" (normalized: "c:\\users\\eebsym5\\music\\mq5ej2nj3.m4a")) returned 0x20 [0132.314] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a", dwFileAttributes=0x20) returned 1 [0132.315] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a" (normalized: "c:\\users\\eebsym5\\music\\mq5ej2nj3.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf98 [0132.315] GetFileSizeEx (in: hFile=0xf98, lpFileSize=0xad3fda0 | out: lpFileSize=0xad3fda0*=76743) returned 1 [0132.315] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x12bc3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.315] ReadFile (in: hFile=0xf98, lpBuffer=0xad3fdac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad3fd88, lpOverlapped=0x0 | out: lpBuffer=0xad3fdac*, lpNumberOfBytesRead=0xad3fd88*=0x4, lpOverlapped=0x0) returned 1 [0132.316] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fa0 [0132.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0f78 [0132.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0f50 [0132.316] NtQuerySystemTime (in: CurrentTime=0xad3fd28 | out: CurrentTime=0xad3fd28*=132471540009960000) returned 0x0 [0132.316] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x3bcea338 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x4b7885cb [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0xd9e6ea5 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x55710022 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x40ad6a3a [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x660b8039 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x4c87e936 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x1f1eb68d [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x536ed722 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x2c1bce32 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x48959a7 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x6c5c1da5 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x5a51569d [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x4e007026 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x7e0dfd53 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x776a8c0c [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0xf78d5dd [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x5a923fcd [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x648c0cc5 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x17eaa693 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x676401c3 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x704d181a [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x1f8b9ade [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x19f0f21b [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x62a62d4a [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x514c96c4 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x4aeaaaa2 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x3b800055 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x6e7b9244 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x56e506da [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x9650dd4 [0132.317] RtlRandomEx (in: Seed=0xad3fd20 | out: Seed=0xad3fd20) returned 0x1163b339 [0132.327] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.328] ReadFile (in: hFile=0xf98, lpBuffer=0x80ad080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad3fd28, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesRead=0xad3fd28*=0x3c00, lpOverlapped=0x0) returned 1 [0132.328] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f388e0 [0132.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32f70 [0132.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fa0 [0132.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fa0) returned 1 [0132.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b0c88 [0132.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fa0 [0132.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0f50 [0132.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f50) returned 1 [0132.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 [0132.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f388e0) returned 1 [0132.329] WriteFile (in: hFile=0xf98, lpBuffer=0x80b0c88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad3fd28, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesWritten=0xad3fd28*=0x3c00, lpOverlapped=0x0) returned 1 [0132.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0132.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0132.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df3908 [0132.443] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.444] WriteFile (in: hFile=0xf98, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xad3fd94, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xad3fd94*=0x10c, lpOverlapped=0x0) returned 1 [0132.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0132.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3ed8) returned 1 [0132.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0132.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3908) returned 1 [0132.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fa0) returned 1 [0132.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f78) returned 1 [0132.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f28) returned 1 [0132.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e88) returned 1 [0132.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7028 [0132.456] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a") returned="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a" [0132.456] wcscat (in: _Dest=0x2fe7028, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a.f0dbec" [0132.456] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a.f0dbec", NtPathName=0xad3fd18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\MQ5Ej2nj3.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32f70 [0132.998] FlushFileBuffers (hFile=0xf98) returned 1 [0133.003] CloseHandle (hObject=0xf98) returned 1 [0133.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe72c8 [0133.082] wcscpy (in: _Dest=0x2fe72c8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0133.082] wcscat (in: _Dest=0x2fe72c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt" [0133.082] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\f0dbec-readme.txt")) returned 0x20 [0133.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe72c8) returned 1 [0133.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23ab8) returned 1 Thread: id = 414 os_tid = 0x3ec [0132.329] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets")) returned 0x20 [0132.554] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0132.554] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.554] GetLastError () returned 0x5 [0132.554] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0132.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6a20) returned 1 Thread: id = 415 os_tid = 0x300 [0132.336] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets")) returned 0x20 [0132.552] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0132.552] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.552] GetLastError () returned 0x5 [0132.553] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0132.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1aed8) returned 1 Thread: id = 416 os_tid = 0xf7c [0132.352] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\-cggsdlcmosr5ujxdn.avi")) returned 0x2020 [0132.355] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi", dwFileAttributes=0x20) returned 1 [0133.301] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\-cggsdlcmosr5ujxdn.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfd4 [0133.301] GetFileSizeEx (in: hFile=0xfd4, lpFileSize=0xb23fb98 | out: lpFileSize=0xb23fb98*=81558) returned 1 [0133.301] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x13e92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.301] ReadFile (in: hFile=0xfd4, lpBuffer=0xb23fba4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb23fb80, lpOverlapped=0x0 | out: lpBuffer=0xb23fba4*, lpNumberOfBytesRead=0xb23fb80*=0x4, lpOverlapped=0x0) returned 1 [0133.303] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49bc8 [0133.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0133.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b798 [0133.303] NtQuerySystemTime (in: CurrentTime=0xb23fb20 | out: CurrentTime=0xb23fb20*=132471540019944000) returned 0x0 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x14b5387a [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x1b148318 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x29ddb18a [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x5ea699bc [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0xfb0820a [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x4f65bb10 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x5849307e [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x4c4d709e [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x4bdd5692 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x4524beee [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x6f663b63 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x51182465 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x66197c41 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x78634dcc [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x44c90458 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x5b6498cb [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x7c37de19 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x6f27c7e2 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x32156428 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x63c401de [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x6e2a0736 [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x45af792f [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x246606fa [0133.304] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x757f49fd [0133.305] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x2e80e0ad [0133.305] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x41da4cc7 [0133.305] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x315744b1 [0133.305] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x3dbe0fb3 [0133.305] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x3af03393 [0133.305] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0xe233175 [0133.305] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x36b51cda [0133.305] RtlRandomEx (in: Seed=0xb23fb18 | out: Seed=0xb23fb18) returned 0x5836fc5a [0133.315] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.316] ReadFile (in: hFile=0xfd4, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb23fb20, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xb23fb20*=0x3c00, lpOverlapped=0x0) returned 1 [0133.316] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e51190 [0133.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0133.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49bc8 [0133.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0133.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0133.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49bc8 [0133.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b798 [0133.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b798) returned 1 [0133.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0133.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0133.317] WriteFile (in: hFile=0xfd4, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb23fb20, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xb23fb20*=0x3c00, lpOverlapped=0x0) returned 1 [0133.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0133.878] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.878] ReadFile (in: hFile=0xfd4, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb23fb20, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xb23fb20*=0x3c00, lpOverlapped=0x0) returned 1 [0133.878] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50fe0 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f330d8 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0133.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0133.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0133.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f330d8) returned 1 [0133.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50fe0) returned 1 [0133.880] WriteFile (in: hFile=0xfd4, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb23fb20, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xb23fb20*=0x3c00, lpOverlapped=0x0) returned 1 [0134.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0134.254] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x10296, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.254] ReadFile (in: hFile=0xfd4, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb23fb20, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xb23fb20*=0x3c00, lpOverlapped=0x0) returned 1 [0134.255] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x10296, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9b20 [0134.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68858 [0134.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bbd0 [0134.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0134.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0134.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bbd0 [0134.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0134.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0134.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0134.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9b20) returned 1 [0134.256] WriteFile (in: hFile=0xfd4, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb23fb20, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xb23fb20*=0x3c00, lpOverlapped=0x0) returned 1 [0135.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0135.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8dbf8 [0135.628] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.628] WriteFile (in: hFile=0xfd4, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0xb23fb8c, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0xb23fb8c*=0x15e, lpOverlapped=0x0) returned 1 [0137.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0137.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a860) returned 1 [0137.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0137.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a7d0) returned 1 [0137.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 [0137.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf90) returned 1 [0137.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ac80) returned 1 [0137.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0137.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x80528f0 [0137.663] wcscpy (in: _Dest=0x80528f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi" [0137.663] wcscat (in: _Dest=0x80528f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi.f0dbec" [0137.664] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi.f0dbec", NtPathName=0xb23fb10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\-cgGSDLcmOSR5ujxdn.avi.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7378 [0137.855] FlushFileBuffers (hFile=0xfd4) returned 1 [0137.859] CloseHandle (hObject=0xfd4) returned 1 [0137.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054d90 [0137.865] wcscpy (in: _Dest=0x8054d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0137.865] wcscat (in: _Dest=0x8054d90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0137.865] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0137.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054d90) returned 1 [0137.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 Thread: id = 417 os_tid = 0xf78 [0132.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\353ape3jdqdamyjwpaco.flv")) returned 0x2020 [0132.356] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv", dwFileAttributes=0x20) returned 1 [0133.322] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\353ape3jdqdamyjwpaco.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfcc [0133.323] GetFileSizeEx (in: hFile=0xfcc, lpFileSize=0x8b8fa68 | out: lpFileSize=0x8b8fa68*=51135) returned 1 [0133.323] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0xc7bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.323] ReadFile (in: hFile=0xfcc, lpBuffer=0x8b8fa74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b8fa50, lpOverlapped=0x0 | out: lpBuffer=0x8b8fa74*, lpNumberOfBytesRead=0x8b8fa50*=0x4, lpOverlapped=0x0) returned 1 [0133.325] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b798 [0133.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0133.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0133.325] NtQuerySystemTime (in: CurrentTime=0x8b8f9f0 | out: CurrentTime=0x8b8f9f0*=132471540020100000) returned 0x0 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x6492f634 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x1721fff [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x2ec06fc4 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x464207c4 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x410b7de8 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x3e72edad [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x59cbefbe [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x8adffe2 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x3f6db586 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x65f9bfd5 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x232ae4b1 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x312c807b [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x217a0292 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x48b8a722 [0133.325] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x3ee06a40 [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x7db86371 [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x8418a83 [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x3186b7fd [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x26a15e20 [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x94aa0da [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x236a92fe [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x2e4ef2c8 [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x6b91d8bd [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x3978eda7 [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x488dce62 [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x23ab041c [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x6d6e133e [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x62fa951e [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x7a7ef4ec [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x119977a3 [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x3c52a024 [0133.326] RtlRandomEx (in: Seed=0x8b8f9e8 | out: Seed=0x8b8f9e8) returned 0x2c1b074e [0133.385] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.385] ReadFile (in: hFile=0xfcc, lpBuffer=0x80d28d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8b8f9f0, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesRead=0x8b8f9f0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.386] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e51190 [0133.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0133.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b798 [0133.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b798) returned 1 [0133.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0133.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b798 [0133.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0133.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0133.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0133.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0133.387] WriteFile (in: hFile=0xfcc, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8b8f9f0, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x8b8f9f0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0133.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0133.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e50fe0 [0133.894] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.894] WriteFile (in: hFile=0xfcc, lpBuffer=0x3ef7ea0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x8b8fa5c, lpOverlapped=0x0 | out: lpBuffer=0x3ef7ea0*, lpNumberOfBytesWritten=0x8b8fa5c*=0x122, lpOverlapped=0x0) returned 1 [0136.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7ea0) returned 1 [0136.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50c38) returned 1 [0136.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0136.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50fe0) returned 1 [0136.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b798) returned 1 [0136.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0136.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a190) returned 1 [0136.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb70) returned 1 [0136.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35520 [0136.184] wcscpy (in: _Dest=0x3f35520, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv" [0136.184] wcscat (in: _Dest=0x3f35520, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv.f0dbec" [0136.184] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv.f0dbec", NtPathName=0x8b8f9e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\353APe3jdQdaMyJwPACo.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e10608 [0136.479] FlushFileBuffers (hFile=0xfcc) returned 1 [0136.483] CloseHandle (hObject=0xfcc) returned 1 [0136.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054ee0 [0136.496] wcscpy (in: _Dest=0x8054ee0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0136.496] wcscat (in: _Dest=0x8054ee0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0136.496] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0xffffffff [0136.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd44 [0136.729] WriteFile (in: hFile=0xd44, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8b8fa04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8b8fa04*=0x70c, lpOverlapped=0x0) returned 1 [0136.732] CloseHandle (hObject=0xd44) returned 1 [0136.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054ee0) returned 1 [0136.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 Thread: id = 418 os_tid = 0xf74 [0132.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\3e5penkyo.pps")) returned 0x2020 [0132.357] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps", dwFileAttributes=0x20) returned 1 [0133.388] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\3e5penkyo.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfd0 [0133.389] GetFileSizeEx (in: hFile=0xfd0, lpFileSize=0xb10fc80 | out: lpFileSize=0xb10fc80*=41843) returned 1 [0133.389] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0xa36f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.389] ReadFile (in: hFile=0xfd0, lpBuffer=0xb10fc8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb10fc68, lpOverlapped=0x0 | out: lpBuffer=0xb10fc8c*, lpNumberOfBytesRead=0xb10fc68*=0x4, lpOverlapped=0x0) returned 1 [0133.391] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0133.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b8b0 [0133.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0133.391] NtQuerySystemTime (in: CurrentTime=0xb10fc08 | out: CurrentTime=0xb10fc08*=132471540020724000) returned 0x0 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x281a9e3 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x32335f38 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x3362fee7 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x4b3a193d [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x3bd21b07 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x347a5926 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x54104189 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x5c752406 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x5adaacad [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x63043f55 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0xa51ed6d [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x52e20dcd [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0xb93dc68 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x2f06bce0 [0133.391] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x47986127 [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x12028cb5 [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x1fe3dd4c [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x5dae7b5c [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x6596db0d [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x1a4c5e50 [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x256bd17b [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x54b5590a [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x2b5165cf [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x5b1c5f65 [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x904875b [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x32b6adc5 [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0xadef717 [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x53df5014 [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x5104fe59 [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x5acd1eae [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x77492afb [0133.392] RtlRandomEx (in: Seed=0xb10fc00 | out: Seed=0xb10fc00) returned 0x5b726fd4 [0133.403] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.403] ReadFile (in: hFile=0xfd0, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb10fc08, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0xb10fc08*=0x3c00, lpOverlapped=0x0) returned 1 [0133.403] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e51190 [0133.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0133.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0133.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0133.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bfca8 [0133.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0133.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0133.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0133.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0133.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0133.404] WriteFile (in: hFile=0xfd0, lpBuffer=0x80bfca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb10fc08, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesWritten=0xb10fc08*=0x3c00, lpOverlapped=0x0) returned 1 [0133.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0133.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0133.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df41d8 [0133.895] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.895] WriteFile (in: hFile=0xfd0, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb10fc74, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0xb10fc74*=0x10c, lpOverlapped=0x0) returned 1 [0136.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0136.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4328) returned 1 [0136.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1018) returned 1 [0136.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41d8) returned 1 [0136.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0136.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b8b0) returned 1 [0136.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0136.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b360) returned 1 [0136.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0ba78 [0136.187] wcscpy (in: _Dest=0x3f0ba78, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps" [0136.187] wcscat (in: _Dest=0x3f0ba78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps.f0dbec" [0136.187] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps.f0dbec", NtPathName=0xb10fbf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\3e5PENkyO.pps.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f355b0 [0136.691] FlushFileBuffers (hFile=0xfd0) returned 1 [0136.749] CloseHandle (hObject=0xfd0) returned 1 [0136.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db16a8 [0136.773] wcscpy (in: _Dest=0x3db16a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0136.773] wcscat (in: _Dest=0x3db16a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0136.773] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0136.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db16a8) returned 1 [0136.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 419 os_tid = 0xaf0 [0132.357] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\5ffze_ucjnp.jpg")) returned 0x2020 [0132.357] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg", dwFileAttributes=0x20) returned 1 [0133.406] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\5ffze_ucjnp.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfc8 [0133.406] GetFileSizeEx (in: hFile=0xfc8, lpFileSize=0x775fe30 | out: lpFileSize=0x775fe30*=53508) returned 1 [0133.406] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0xd100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.406] ReadFile (in: hFile=0xfc8, lpBuffer=0x775fe3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x775fe18, lpOverlapped=0x0 | out: lpBuffer=0x775fe3c*, lpNumberOfBytesRead=0x775fe18*=0x4, lpOverlapped=0x0) returned 1 [0133.408] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0133.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5e0 [0133.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0133.409] NtQuerySystemTime (in: CurrentTime=0x775fdb8 | out: CurrentTime=0x775fdb8*=132471540020880000) returned 0x0 [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x7d38c08e [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x5e6b4518 [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x3bf5b2eb [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x1d1a1b4f [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x4335964b [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x62f675ff [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x23b6aad8 [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x7d632e61 [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x63f95e47 [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x5d91cf66 [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x51602c8a [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x6312c71a [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x3a72256a [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x537938bb [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x247137c6 [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x66077cd5 [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x427397fb [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x1f0df1db [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x48a7617e [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x61e15ab0 [0133.409] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x789a6ad5 [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x4fa2f56f [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x6d7f5c31 [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0xb3fbd04 [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x19a97a6c [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0xa61839a [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x648a9c33 [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x5e42dbb4 [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x5cfdc455 [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x7eda45cb [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x47bcdcd4 [0133.410] RtlRandomEx (in: Seed=0x775fdb0 | out: Seed=0x775fdb0) returned 0x3c70b500 [0133.421] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.421] ReadFile (in: hFile=0xfc8, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x775fdb8, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0x775fdb8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.421] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e51190 [0133.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0133.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0133.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0133.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0133.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0133.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0133.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0133.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0133.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0133.422] WriteFile (in: hFile=0xfc8, lpBuffer=0x80b8498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x775fdb8, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesWritten=0x775fdb8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0133.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0133.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df79c0 [0133.896] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.896] WriteFile (in: hFile=0xfc8, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x775fe24, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x775fe24*=0x110, lpOverlapped=0x0) returned 1 [0136.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0136.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7988) returned 1 [0136.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1130) returned 1 [0136.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0136.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0136.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5e0) returned 1 [0136.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0136.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0136.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0baf0 [0136.188] wcscpy (in: _Dest=0x3f0baf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg" [0136.188] wcscat (in: _Dest=0x3f0baf0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg.f0dbec" [0136.188] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg.f0dbec", NtPathName=0x775fda8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\5fFZe_UCJNp.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35640 [0136.694] FlushFileBuffers (hFile=0xfc8) returned 1 [0136.750] CloseHandle (hObject=0xfc8) returned 1 [0136.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5010 [0136.753] wcscpy (in: _Dest=0x2ff5010, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0136.753] wcscat (in: _Dest=0x2ff5010, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0136.753] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0136.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5010) returned 1 [0136.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db16a8) returned 1 Thread: id = 420 os_tid = 0xf70 [0132.358] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\8ypes3ym6zcb8wn.bmp")) returned 0x2020 [0132.358] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp", dwFileAttributes=0x20) returned 1 [0133.424] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\8ypes3ym6zcb8wn.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfc4 [0133.425] GetFileSizeEx (in: hFile=0xfc4, lpFileSize=0xb2efce8 | out: lpFileSize=0xb2efce8*=1601) returned 1 [0133.425] SetFilePointerEx (in: hFile=0xfc4, liDistanceToMove=0x63d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.425] ReadFile (in: hFile=0xfc4, lpBuffer=0xb2efcf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb2efcd0, lpOverlapped=0x0 | out: lpBuffer=0xb2efcf4*, lpNumberOfBytesRead=0xb2efcd0*=0x4, lpOverlapped=0x0) returned 1 [0133.427] SetFilePointerEx (in: hFile=0xfc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0133.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3db8 [0133.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3de0 [0133.427] NtQuerySystemTime (in: CurrentTime=0xb2efc70 | out: CurrentTime=0xb2efc70*=132471540021192000) returned 0x0 [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x421bf877 [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x3584b57a [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x79a5a7f1 [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x1ce28aa5 [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0xeb77d19 [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x3f8a94bc [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x39f4c70c [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x14f8d37 [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x16592eec [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x6dbab328 [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x1e279f56 [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x4419c7e [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x38b479ba [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x18014a9d [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x725a30c0 [0133.427] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x178b2adb [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x61368ec [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x7745a922 [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x6b567b87 [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x7c5692cc [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x669ba8f0 [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x51a2aac5 [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x7a8fecb9 [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x4c9e14ba [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x1cdafa0d [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0xf9d629f [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x47b792a2 [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x4bb0c241 [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x6c8a8200 [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x68cd621c [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x686811e5 [0133.428] RtlRandomEx (in: Seed=0xb2efc68 | out: Seed=0xb2efc68) returned 0x1d5de03e [0133.439] ReadFile (in: hFile=0xfc4, lpBuffer=0x80bc0a0, nNumberOfBytesToRead=0x641, lpNumberOfBytesRead=0xb2efc64, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesRead=0xb2efc64*=0x641, lpOverlapped=0x0) returned 1 [0133.439] SetFilePointerEx (in: hFile=0xfc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.439] WriteFile (in: hFile=0xfc4, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x641, lpNumberOfBytesWritten=0xb2efc68, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0xb2efc68*=0x641, lpOverlapped=0x0) returned 1 [0133.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38e0 [0133.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c58 [0133.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c58) returned 1 [0133.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0133.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0133.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0133.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0133.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f37d58 [0133.898] SetFilePointerEx (in: hFile=0xfc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.898] WriteFile (in: hFile=0xfc4, lpBuffer=0x3042500*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xb2efcdc, lpOverlapped=0x0 | out: lpBuffer=0x3042500*, lpNumberOfBytesWritten=0xb2efcdc*=0x118, lpOverlapped=0x0) returned 1 [0136.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0136.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f381d8) returned 1 [0136.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c58) returned 1 [0136.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37d58) returned 1 [0136.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38e0) returned 1 [0136.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3db8) returned 1 [0136.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0136.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0136.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e23ec0 [0136.190] wcscpy (in: _Dest=0x3e23ec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp" [0136.190] wcscat (in: _Dest=0x3e23ec0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp.f0dbec" [0136.190] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp.f0dbec", NtPathName=0xb2efc60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\8YPeS3yM6Zcb8WN.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2af50 [0136.698] FlushFileBuffers (hFile=0xfc4) returned 1 [0136.751] CloseHandle (hObject=0xfc4) returned 1 [0136.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db16a8 [0136.755] wcscpy (in: _Dest=0x3db16a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0136.755] wcscat (in: _Dest=0x3db16a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0136.755] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0136.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db16a8) returned 1 [0136.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 Thread: id = 421 os_tid = 0x518 [0132.358] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\9kqqzdxnhp5_4p__jt.flv")) returned 0x2020 [0132.358] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv", dwFileAttributes=0x20) returned 1 [0133.441] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\9kqqzdxnhp5_4p__jt.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfb8 [0133.441] GetFileSizeEx (in: hFile=0xfb8, lpFileSize=0xb2afc28 | out: lpFileSize=0xb2afc28*=68990) returned 1 [0133.441] SetFilePointerEx (in: hFile=0xfb8, liDistanceToMove=0x10d7a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.441] ReadFile (in: hFile=0xfb8, lpBuffer=0xb2afc34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb2afc10, lpOverlapped=0x0 | out: lpBuffer=0xb2afc34*, lpNumberOfBytesRead=0xb2afc10*=0x4, lpOverlapped=0x0) returned 1 [0133.443] SetFilePointerEx (in: hFile=0xfb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0133.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3de0 [0133.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0133.444] NtQuerySystemTime (in: CurrentTime=0xb2afbb0 | out: CurrentTime=0xb2afbb0*=132471540021348000) returned 0x0 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x4f82cfde [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x9ce10e2 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x58c0b06e [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x320667ff [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x3d38886e [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x6a5ab28b [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x4ee03267 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x3090cebb [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x2743f868 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x4761e122 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x203a57c5 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x7b8cafce [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x7cc28fd5 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x5892b224 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x7e2168d5 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x3f91190c [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x4690ff0c [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x7ec2280b [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x743c747a [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x34f70a8 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x66ef1093 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x74b878d1 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x58c58ea0 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x78124025 [0133.444] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x57e0f3b8 [0133.445] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x2293eb1e [0133.445] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x7cc0c504 [0133.445] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x61a272ec [0133.445] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x69bb533e [0133.445] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x643b24dd [0133.445] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x228e149d [0133.445] RtlRandomEx (in: Seed=0xb2afba8 | out: Seed=0xb2afba8) returned 0x57af20e6 [0133.454] SetFilePointerEx (in: hFile=0xfb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.454] ReadFile (in: hFile=0xfb8, lpBuffer=0x80b4890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb2afbb0, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesRead=0xb2afbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.455] SetFilePointerEx (in: hFile=0xfb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0133.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32520 [0133.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0133.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0133.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809e060 [0133.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0133.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0133.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0133.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 [0133.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0133.456] WriteFile (in: hFile=0xfb8, lpBuffer=0x809e060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb2afbb0, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesWritten=0xb2afbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0133.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0133.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e51190 [0133.899] SetFilePointerEx (in: hFile=0xfb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.899] WriteFile (in: hFile=0xfb8, lpBuffer=0x3041720*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xb2afc1c, lpOverlapped=0x0 | out: lpBuffer=0x3041720*, lpNumberOfBytesWritten=0xb2afc1c*=0x11e, lpOverlapped=0x0) returned 1 [0136.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0136.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50cc8) returned 1 [0136.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12c0) returned 1 [0136.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0136.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0136.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3de0) returned 1 [0136.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0136.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0136.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f308d0 [0136.193] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv" [0136.193] wcscat (in: _Dest=0x3f308d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv.f0dbec" [0136.193] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv.f0dbec", NtPathName=0xb2afba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\9kQQzDXnhp5_4p__jT.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11328 [0136.705] FlushFileBuffers (hFile=0xfb8) returned 1 [0136.751] CloseHandle (hObject=0xfb8) returned 1 [0136.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db16a8 [0136.762] wcscpy (in: _Dest=0x3db16a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0136.762] wcscat (in: _Dest=0x3db16a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0136.762] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0136.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db16a8) returned 1 [0136.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 Thread: id = 422 os_tid = 0x534 [0132.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c68 [0132.359] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0132.359] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0132.359] wcscat (in: _Dest=0x2fe6c68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\*" [0132.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80feb90 [0132.359] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0133.539] wcscmp (_String1=".", _String2=".") returned 0 [0133.539] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.539] wcscmp (_String1="..", _String2=".") returned 1 [0133.539] wcscmp (_String1="..", _String2="..") returned 0 [0133.539] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0133.539] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0133.539] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0133.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e210 [0133.540] wcscpy (in: _Dest=0x3d8e210, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0133.540] wcscat (in: _Dest=0x3d8e210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0133.540] wcscat (in: _Dest=0x3d8e210, _Source="Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" [0133.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0133.792] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0133.792] wcscmp (_String1="Flash Player", _String2=".") returned 1 [0133.792] wcscmp (_String1="Flash Player", _String2="..") returned 1 [0133.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1b78 [0133.792] wcscpy (in: _Dest=0x3db1b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0133.792] wcscat (in: _Dest=0x3db1b78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0133.792] wcscat (in: _Dest=0x3db1b78, _Source="Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" [0133.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3db1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0133.793] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0133.793] wcscmp (_String1="Headlights", _String2=".") returned 1 [0133.793] wcscmp (_String1="Headlights", _String2="..") returned 1 [0133.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39d98 [0133.793] wcscpy (in: _Dest=0x3f39d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0133.793] wcscat (in: _Dest=0x3f39d98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0133.793] wcscat (in: _Dest=0x3f39d98, _Source="Headlights" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights" [0133.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0133.795] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0133.795] wcscmp (_String1="Linguistics", _String2=".") returned 1 [0133.795] wcscmp (_String1="Linguistics", _String2="..") returned 1 [0133.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39e08 [0133.795] wcscpy (in: _Dest=0x3f39e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0133.795] wcscat (in: _Dest=0x3f39e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0133.795] wcscat (in: _Dest=0x3f39e08, _Source="Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" [0133.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0133.796] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0133.797] wcscmp (_String1="LogTransport2", _String2=".") returned 1 [0133.797] wcscmp (_String1="LogTransport2", _String2="..") returned 1 [0133.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32430 [0133.797] wcscpy (in: _Dest=0x3f32430, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0133.797] wcscat (in: _Dest=0x3f32430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0133.797] wcscat (in: _Dest=0x3f32430, _Source="LogTransport2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2" [0133.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0133.798] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0 [0133.798] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0133.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80feb90) returned 1 [0133.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0133.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23118) returned 1 Thread: id = 423 os_tid = 0x74c [0132.361] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\avhuqzqrhkn hdmflbpe.pptx")) returned 0x2020 [0132.361] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx", dwFileAttributes=0x20) returned 1 [0133.461] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\avhuqzqrhkn hdmflbpe.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa8 [0133.461] GetFileSizeEx (in: hFile=0xfa8, lpFileSize=0xb4cfb10 | out: lpFileSize=0xb4cfb10*=88787) returned 1 [0133.461] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0x15acf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.461] ReadFile (in: hFile=0xfa8, lpBuffer=0xb4cfb1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb4cfaf8, lpOverlapped=0x0 | out: lpBuffer=0xb4cfb1c*, lpNumberOfBytesRead=0xb4cfaf8*=0x4, lpOverlapped=0x0) returned 1 [0133.463] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c00 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0133.463] NtQuerySystemTime (in: CurrentTime=0xb4cfa98 | out: CurrentTime=0xb4cfa98*=132471540021504000) returned 0x0 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x4a3ea541 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x21b8ed5e [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x47e26b62 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x1ee2a703 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x41e9ad5a [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x2a9a5748 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x53bfcf1f [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x17bd0943 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x12f02fb1 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x734a1ce5 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x69590db1 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x762831bc [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x2a25ad20 [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x77fc602f [0133.463] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x355b7e98 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x6a4565e0 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x7fc3774a [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x199ca899 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x31d7d83f [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0xf5b73f2 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x51e0261e [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x751260a7 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x6fc46047 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x7489def2 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x4870ff3 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x492a5c29 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x470c2fa2 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x7b1e2b55 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x5b0584d7 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x4fe8c0b6 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x7fd95ec7 [0133.464] RtlRandomEx (in: Seed=0xb4cfa90 | out: Seed=0xb4cfa90) returned 0x57f1225 [0133.474] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.474] ReadFile (in: hFile=0xfa8, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb4cfa98, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0xb4cfa98*=0x3c00, lpOverlapped=0x0) returned 1 [0133.474] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0133.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32520 [0133.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0133.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0133.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0133.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0133.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0133.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0133.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 [0133.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0133.475] WriteFile (in: hFile=0xfa8, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb4cfa98, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0xb4cfa98*=0x3c00, lpOverlapped=0x0) returned 1 [0133.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0133.900] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.900] ReadFile (in: hFile=0xfa8, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb4cfa98, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0xb4cfa98*=0x3c00, lpOverlapped=0x0) returned 1 [0133.900] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0133.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0133.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1428 [0133.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1428) returned 1 [0133.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0133.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1428 [0133.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e60 [0133.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e60) returned 1 [0133.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0133.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0133.901] WriteFile (in: hFile=0xfa8, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb4cfa98, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0xb4cfa98*=0x3c00, lpOverlapped=0x0) returned 1 [0134.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0134.262] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0x11ed3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.262] ReadFile (in: hFile=0xfa8, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb4cfa98, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0xb4cfa98*=0x3c00, lpOverlapped=0x0) returned 1 [0134.262] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0x11ed3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9b20 [0134.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68858 [0134.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0134.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0134.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0134.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0134.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b310 [0134.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b310) returned 1 [0134.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0134.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9b20) returned 1 [0134.263] WriteFile (in: hFile=0xfa8, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb4cfa98, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0xb4cfa98*=0x3c00, lpOverlapped=0x0) returned 1 [0135.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0135.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd958 [0135.629] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.629] WriteFile (in: hFile=0xfa8, lpBuffer=0x3e396f8*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0xb4cfb04, lpOverlapped=0x0 | out: lpBuffer=0x3e396f8*, lpNumberOfBytesWritten=0xb4cfb04*=0x164, lpOverlapped=0x0) returned 1 [0137.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e396f8) returned 1 [0137.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a230) returned 1 [0137.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0137.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aa10) returned 1 [0137.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd958) returned 1 [0137.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c00) returned 1 [0137.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e58) returned 1 [0137.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bd8) returned 1 [0137.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f348c0 [0137.667] wcscpy (in: _Dest=0x3f348c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx" [0137.667] wcscat (in: _Dest=0x3f348c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx.f0dbec" [0137.667] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx.f0dbec", NtPathName=0xb4cfa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\AVhuqzQrhKN hDmFLbpE.pptx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81868f0 [0137.909] FlushFileBuffers (hFile=0xfa8) returned 1 [0137.911] CloseHandle (hObject=0xfa8) returned 1 [0137.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5390 [0137.912] wcscpy (in: _Dest=0x2ff5390, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0137.912] wcscat (in: _Dest=0x2ff5390, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0137.912] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0137.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5390) returned 1 [0137.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5508) returned 1 Thread: id = 424 os_tid = 0x2a8 [0132.362] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\d0yko5.avi")) returned 0x2020 [0132.362] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi", dwFileAttributes=0x20) returned 1 [0133.481] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\d0yko5.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfb4 [0133.481] GetFileSizeEx (in: hFile=0xfb4, lpFileSize=0xb35fc88 | out: lpFileSize=0xb35fc88*=31976) returned 1 [0133.481] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0x7ce4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.481] ReadFile (in: hFile=0xfb4, lpBuffer=0xb35fc94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb35fc70, lpOverlapped=0x0 | out: lpBuffer=0xb35fc94*, lpNumberOfBytesRead=0xb35fc70*=0x4, lpOverlapped=0x0) returned 1 [0133.483] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0133.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0133.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0133.484] NtQuerySystemTime (in: CurrentTime=0xb35fc10 | out: CurrentTime=0xb35fc10*=132471540021660000) returned 0x0 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x35ea396f [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x9b38bbc [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x15d17697 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x727be1ef [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x77d63639 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x24313ab6 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x1d3201a8 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x3fed5bb2 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x31fb30b8 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x3ebadc0b [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x4330d55f [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x5e9fb0f3 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x445599b9 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x57bb5dca [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x721472d5 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x1f674af0 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x55afaf8b [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x4e4e52af [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x726288d6 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x53e609af [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x74d2fadd [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x5e0e85ec [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x35ada4a1 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x46e156e2 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x2f24464c [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x75e82181 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x6b6c4db7 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x75a89233 [0133.484] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x59745be7 [0133.485] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x43326d5f [0133.485] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x3c444f3e [0133.485] RtlRandomEx (in: Seed=0xb35fc08 | out: Seed=0xb35fc08) returned 0x522edcc7 [0133.494] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.494] ReadFile (in: hFile=0xfb4, lpBuffer=0x80b0c88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb35fc10, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesRead=0xb35fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0133.494] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0133.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32520 [0133.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0133.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0133.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0133.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0133.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0133.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0133.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 [0133.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0133.495] WriteFile (in: hFile=0xfb4, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb35fc10, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0xb35fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0134.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0134.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0134.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df3908 [0134.265] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.265] WriteFile (in: hFile=0xfb4, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xb35fc7c, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xb35fc7c*=0x106, lpOverlapped=0x0) returned 1 [0137.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0137.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0137.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b310) returned 1 [0137.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3908) returned 1 [0137.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0137.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0137.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0137.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0137.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x80552d0 [0137.716] wcscpy (in: _Dest=0x80552d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi" [0137.716] wcscat (in: _Dest=0x80552d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi.f0dbec" [0137.716] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi.f0dbec", NtPathName=0xb35fc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\D0yko5.avi.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8052a88 [0137.914] FlushFileBuffers (hFile=0xfb4) returned 1 [0137.917] CloseHandle (hObject=0xfb4) returned 1 [0137.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80552d0 [0137.919] wcscpy (in: _Dest=0x80552d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0137.919] wcscat (in: _Dest=0x80552d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0137.919] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0137.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80552d0) returned 1 [0137.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 Thread: id = 425 os_tid = 0x368 [0132.362] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\d3adb9chv3.mp3")) returned 0x2020 [0132.362] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3", dwFileAttributes=0x20) returned 1 [0138.689] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\d3adb9chv3.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd38 [0138.689] GetFileSizeEx (in: hFile=0xd38, lpFileSize=0xb43fb38 | out: lpFileSize=0xb43fb38*=82247) returned 1 [0138.689] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x14143, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.689] ReadFile (in: hFile=0xd38, lpBuffer=0xb43fb44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb43fb20, lpOverlapped=0x0 | out: lpBuffer=0xb43fb44*, lpNumberOfBytesRead=0xb43fb20*=0x4, lpOverlapped=0x0) returned 1 [0138.691] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0138.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0138.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0138.691] NtQuerySystemTime (in: CurrentTime=0xb43fac0 | out: CurrentTime=0xb43fac0*=132471540073608000) returned 0x0 [0138.691] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x5706c42b [0138.691] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x4706a2b3 [0138.691] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x7f9aeb3a [0138.691] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x28463c10 [0138.691] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x22a0a0c7 [0138.691] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x37eee360 [0138.691] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x3609b8bd [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x21768672 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x36162a88 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x6a80fcb7 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x74a68740 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x24904b44 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x7ea2a8c9 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x2fd99cea [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x8cd0c6a [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x2b54032a [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x3f1507a6 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x70b1f52c [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x22c33223 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x7a41146a [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x5a022c98 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x234ab608 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x442aa63d [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x6b8e404a [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x5f43c241 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x4257105a [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x363eaee0 [0138.692] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x53c34a7e [0138.693] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x18a4e856 [0138.693] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x3bffcf64 [0138.693] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x676c903e [0138.693] RtlRandomEx (in: Seed=0xb43fab8 | out: Seed=0xb43fab8) returned 0x622fba30 [0138.706] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.706] ReadFile (in: hFile=0xd38, lpBuffer=0x82b90c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb43fac0, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesRead=0xb43fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.706] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095fc0 [0138.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0138.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0138.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0138.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829ec88 [0138.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0138.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0138.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0138.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0138.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095fc0) returned 1 [0138.707] WriteFile (in: hFile=0xd38, lpBuffer=0x829ec88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb43fac0, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesWritten=0xb43fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0140.963] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.963] ReadFile (in: hFile=0xd38, lpBuffer=0x82b90c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb43fac0, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesRead=0xb43fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.964] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309c88 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e681c8 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0140.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829ec88 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0140.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0140.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e681c8) returned 1 [0140.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309c88) returned 1 [0140.964] WriteFile (in: hFile=0xd38, lpBuffer=0x829ec88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb43fac0, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesWritten=0xb43fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0140.965] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x10547, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.965] ReadFile (in: hFile=0xd38, lpBuffer=0x82b90c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb43fac0, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesRead=0xb43fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.965] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x10547, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309c88 [0140.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e681c8 [0140.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0140.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0140.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829ec88 [0140.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0140.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3c8 [0140.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3c8) returned 1 [0140.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e681c8) returned 1 [0140.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309c88) returned 1 [0140.966] WriteFile (in: hFile=0xd38, lpBuffer=0x829ec88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb43fac0, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesWritten=0xb43fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0140.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3db0 [0140.967] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.968] WriteFile (in: hFile=0xd38, lpBuffer=0x3e17240*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xb43fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3e17240*, lpNumberOfBytesWritten=0xb43fb2c*=0x14e, lpOverlapped=0x0) returned 1 [0141.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17240) returned 1 [0141.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7838) returned 1 [0141.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0141.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78a8) returned 1 [0141.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3db0) returned 1 [0141.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0141.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c270) returned 1 [0141.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0141.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f328e0 [0141.052] wcscpy (in: _Dest=0x3f328e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3" [0141.052] wcscat (in: _Dest=0x3f328e0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3.f0dbec" [0141.052] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3.f0dbec", NtPathName=0xb43fab0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\D3aDB9cHv3.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34d40 [0141.992] FlushFileBuffers (hFile=0xd38) returned 1 [0141.997] CloseHandle (hObject=0xd38) returned 1 [0141.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5400 [0141.998] wcscpy (in: _Dest=0x2ff5400, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0141.998] wcscat (in: _Dest=0x2ff5400, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0141.998] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0141.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5400) returned 1 [0141.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 426 os_tid = 0xb50 [0132.363] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\gwos46lkxbsbnsi.flv")) returned 0x2020 [0132.363] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv", dwFileAttributes=0x20) returned 1 [0137.483] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\gwos46lkxbsbnsi.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10b0 [0137.484] GetFileSizeEx (in: hFile=0x10b0, lpFileSize=0xb3afb98 | out: lpFileSize=0xb3afb98*=11527) returned 1 [0137.484] SetFilePointerEx (in: hFile=0x10b0, liDistanceToMove=0x2d03, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.484] ReadFile (in: hFile=0x10b0, lpBuffer=0xb3afba4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb3afb80, lpOverlapped=0x0 | out: lpBuffer=0xb3afba4*, lpNumberOfBytesRead=0xb3afb80*=0x4, lpOverlapped=0x0) returned 1 [0137.486] SetFilePointerEx (in: hFile=0x10b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3278 [0137.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0137.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef31b0 [0137.486] NtQuerySystemTime (in: CurrentTime=0xb3afb20 | out: CurrentTime=0xb3afb20*=132471540061752000) returned 0x0 [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x59e2fdad [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0xd18cdf4 [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0xe81653f [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x73539bd6 [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x3d979c84 [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x62ebe54e [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x22c6899 [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x44a4a74a [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x403cec4d [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x7c038cb3 [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x450fe2c7 [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x310eb8ff [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x66822057 [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x7e3ce373 [0137.486] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x4f608b4f [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x716f04c5 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x1c3b40ca [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x2f4ed03 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x6791d890 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x7bb76250 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0xb08784 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x2bc3580d [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x7e251a35 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x4a7080cc [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x4f1d554b [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x62e7ac81 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x171af052 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x71133106 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x62dbd140 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x2e196649 [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0x4d5d80cf [0137.487] RtlRandomEx (in: Seed=0xb3afb18 | out: Seed=0xb3afb18) returned 0xf6cf12b [0137.496] ReadFile (in: hFile=0x10b0, lpBuffer=0x809e060, nNumberOfBytesToRead=0x2d07, lpNumberOfBytesRead=0xb3afb14, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0xb3afb14*=0x2d07, lpOverlapped=0x0) returned 1 [0137.496] SetFilePointerEx (in: hFile=0x10b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.496] WriteFile (in: hFile=0x10b0, lpBuffer=0x80bc0a0*, nNumberOfBytesToWrite=0x2d07, lpNumberOfBytesWritten=0xb3afb18, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesWritten=0xb3afb18*=0x2d07, lpOverlapped=0x0) returned 1 [0137.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1810 [0137.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0137.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0137.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0137.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0137.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0137.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308c80) returned 1 [0137.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f37fd8 [0137.726] SetFilePointerEx (in: hFile=0x10b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.726] WriteFile (in: hFile=0x10b0, lpBuffer=0x3d56f00*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xb3afb8c, lpOverlapped=0x0 | out: lpBuffer=0x3d56f00*, lpNumberOfBytesWritten=0xb3afb8c*=0x118, lpOverlapped=0x0) returned 1 [0137.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 [0137.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37598) returned 1 [0137.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0137.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37fd8) returned 1 [0137.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1810) returned 1 [0137.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0137.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1608) returned 1 [0137.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16d0) returned 1 [0137.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dafa88 [0137.804] wcscpy (in: _Dest=0x3dafa88, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv" [0137.804] wcscat (in: _Dest=0x3dafa88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv.f0dbec" [0137.804] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv.f0dbec", NtPathName=0xb3afb10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\GWOs46lkxbsBnSi.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2a078 [0138.182] FlushFileBuffers (hFile=0x10b0) returned 1 [0138.183] CloseHandle (hObject=0x10b0) returned 1 [0138.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0138.184] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0138.184] wcscat (in: _Dest=0x3f39d28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0138.184] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0138.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0138.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f329d0) returned 1 Thread: id = 427 os_tid = 0x2ac [0132.363] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\h2 prsnbthaxu3iy ma.wav")) returned 0x2020 [0132.363] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav", dwFileAttributes=0x20) returned 1 [0137.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\h2 prsnbthaxu3iy ma.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1084 [0137.497] GetFileSizeEx (in: hFile=0x1084, lpFileSize=0xb14fb10 | out: lpFileSize=0xb14fb10*=86832) returned 1 [0137.497] SetFilePointerEx (in: hFile=0x1084, liDistanceToMove=0x1532c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.497] ReadFile (in: hFile=0x1084, lpBuffer=0xb14fb1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb14faf8, lpOverlapped=0x0 | out: lpBuffer=0xb14fb1c*, lpNumberOfBytesRead=0xb14faf8*=0x4, lpOverlapped=0x0) returned 1 [0137.499] SetFilePointerEx (in: hFile=0x1084, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3278 [0137.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef31b0 [0137.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0137.500] NtQuerySystemTime (in: CurrentTime=0xb14fa98 | out: CurrentTime=0xb14fa98*=132471540061908000) returned 0x0 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x7f41df45 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x38fc9e04 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x5343f0be [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x2bc0955f [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x208f55f6 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x47c01b1c [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x39d26dd3 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x1c4a10b2 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x4c7e17fb [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x31a905ba [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x403465a5 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x4250a972 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0xe6a544a [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x582578d4 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x162999b5 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x33103b10 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x1fb8019c [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x72eab694 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x19af7fab [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x7c86128d [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0xa02994d [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x5d3806db [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x4236ce9b [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x85d4a43 [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x6a570abb [0137.500] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x676d5c56 [0137.501] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x5a23b935 [0137.501] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x7e8dca3 [0137.501] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x1697b211 [0137.501] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x44ed4ed7 [0137.501] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x2c6c3c86 [0137.501] RtlRandomEx (in: Seed=0xb14fa90 | out: Seed=0xb14fa90) returned 0x363e2a75 [0137.510] SetFilePointerEx (in: hFile=0x1084, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.510] ReadFile (in: hFile=0x1084, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb14fa98, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xb14fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0137.511] SetFilePointerEx (in: hFile=0x1084, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308cc8 [0137.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32430 [0137.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3278 [0137.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3278) returned 1 [0137.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0137.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3278 [0137.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0137.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3458) returned 1 [0137.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0137.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308cc8) returned 1 [0137.512] WriteFile (in: hFile=0x1084, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb14fa98, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xb14fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0137.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0137.729] SetFilePointerEx (in: hFile=0x1084, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.729] ReadFile (in: hFile=0x1084, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb14fa98, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xb14fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0137.730] SetFilePointerEx (in: hFile=0x1084, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308c80 [0137.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32778 [0137.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0137.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0137.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0137.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0137.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0137.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0137.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0137.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308c80) returned 1 [0137.731] WriteFile (in: hFile=0x1084, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb14fa98, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xb14fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0137.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0137.741] SetFilePointerEx (in: hFile=0x1084, liDistanceToMove=0x11730, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.741] ReadFile (in: hFile=0x1084, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb14fa98, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xb14fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0137.741] SetFilePointerEx (in: hFile=0x1084, liDistanceToMove=0x11730, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308c80 [0137.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32778 [0137.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0137.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0137.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0137.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0137.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0137.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0137.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0137.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308c80) returned 1 [0137.742] WriteFile (in: hFile=0x1084, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb14fa98, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xb14fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0137.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0137.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd7b8 [0137.746] SetFilePointerEx (in: hFile=0x1084, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.746] WriteFile (in: hFile=0x1084, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0xb14fb04, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xb14fb04*=0x160, lpOverlapped=0x0) returned 1 [0137.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0137.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f50) returned 1 [0137.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3278) returned 1 [0137.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308c80) returned 1 [0137.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd7b8) returned 1 [0137.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef31b0) returned 1 [0137.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1860) returned 1 [0137.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef33e0) returned 1 [0137.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8052d30 [0137.842] wcscpy (in: _Dest=0x8052d30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav" [0137.842] wcscat (in: _Dest=0x8052d30, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav.f0dbec" [0137.842] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav.f0dbec", NtPathName=0xb14fa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\H2 pRsNbthAxU3iY MA.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11328 [0138.132] FlushFileBuffers (hFile=0x1084) returned 1 [0138.174] CloseHandle (hObject=0x1084) returned 1 [0138.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0138.175] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0138.175] wcscat (in: _Dest=0x3f39d28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0138.175] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0138.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0138.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 Thread: id = 428 os_tid = 0xb34 [0132.365] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\hbbghqlywogtyoxe.mp4")) returned 0x2020 [0132.365] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4", dwFileAttributes=0x20) returned 1 [0137.512] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\hbbghqlywogtyoxe.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1244 [0137.512] GetFileSizeEx (in: hFile=0x1244, lpFileSize=0x981fbe8 | out: lpFileSize=0x981fbe8*=43286) returned 1 [0137.512] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0xa912, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.512] ReadFile (in: hFile=0x1244, lpBuffer=0x981fbf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x981fbd0, lpOverlapped=0x0 | out: lpBuffer=0x981fbf4*, lpNumberOfBytesRead=0x981fbd0*=0x4, lpOverlapped=0x0) returned 1 [0137.514] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0137.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3250 [0137.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0137.515] NtQuerySystemTime (in: CurrentTime=0x981fb70 | out: CurrentTime=0x981fb70*=132471540062064000) returned 0x0 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x3e92b1c8 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x5554c225 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x22ebd717 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x6ce8287f [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x542e4e5b [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x1e34d9f6 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x16a22734 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x3afe03eb [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x8b35bf3 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x1d09ab62 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x106f1c5c [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x14961b42 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x3608660e [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x1d348422 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x48812801 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x59eb43e1 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x6b36342a [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x649a48a1 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x224ce7df [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x672d6c51 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x6ec6a4fb [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x3568cfa6 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x8670b11 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x1bddbe22 [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x7855305b [0137.515] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x157d1b85 [0137.516] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x4dbd258b [0137.516] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x1cded2a2 [0137.516] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x65152800 [0137.516] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x7a8d3cd3 [0137.516] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x43ef0d9b [0137.516] RtlRandomEx (in: Seed=0x981fb68 | out: Seed=0x981fb68) returned 0x262f5562 [0137.525] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.525] ReadFile (in: hFile=0x1244, lpBuffer=0x824fc68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x981fb70, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesRead=0x981fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0137.526] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308cc8 [0137.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32430 [0137.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0137.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3458) returned 1 [0137.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8253870 [0137.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0137.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0137.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0137.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0137.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308cc8) returned 1 [0137.527] WriteFile (in: hFile=0x1244, lpBuffer=0x8253870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x981fb70, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesWritten=0x981fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0137.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0137.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0137.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37818 [0137.740] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.740] WriteFile (in: hFile=0x1244, lpBuffer=0x3d57028*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x981fbdc, lpOverlapped=0x0 | out: lpBuffer=0x3d57028*, lpNumberOfBytesWritten=0x981fbdc*=0x11a, lpOverlapped=0x0) returned 1 [0137.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57028) returned 1 [0137.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37f18) returned 1 [0137.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0137.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37818) returned 1 [0137.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3458) returned 1 [0137.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3250) returned 1 [0137.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0137.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1658) returned 1 [0137.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8052ca8 [0137.808] wcscpy (in: _Dest=0x8052ca8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4" [0137.808] wcscat (in: _Dest=0x8052ca8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4.f0dbec" [0137.808] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4.f0dbec", NtPathName=0x981fb60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\HBbGHQLYwoGtyOXe.mp4.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2a798 [0137.951] FlushFileBuffers (hFile=0x1244) returned 1 [0137.962] CloseHandle (hObject=0x1244) returned 1 [0137.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80550a0 [0137.986] wcscpy (in: _Dest=0x80550a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0137.986] wcscat (in: _Dest=0x80550a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0137.986] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0137.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80550a0) returned 1 [0137.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 Thread: id = 429 os_tid = 0xf6c [0132.365] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\hjncbih.jpg")) returned 0x2020 [0132.366] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg", dwFileAttributes=0x20) returned 1 [0137.527] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\hjncbih.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xff4 [0137.527] GetFileSizeEx (in: hFile=0xff4, lpFileSize=0xa0afde0 | out: lpFileSize=0xa0afde0*=53500) returned 1 [0137.527] SetFilePointerEx (in: hFile=0xff4, liDistanceToMove=0xd0f8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.527] ReadFile (in: hFile=0xff4, lpBuffer=0xa0afdec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa0afdc8, lpOverlapped=0x0 | out: lpBuffer=0xa0afdec*, lpNumberOfBytesRead=0xa0afdc8*=0x4, lpOverlapped=0x0) returned 1 [0137.529] SetFilePointerEx (in: hFile=0xff4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0137.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0137.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0137.532] NtQuerySystemTime (in: CurrentTime=0xa0afd68 | out: CurrentTime=0xa0afd68*=132471540062220000) returned 0x0 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x62a12e3c [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x6d26e463 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x3ece6203 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x35dc0976 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x633e81db [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x4e2546a4 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x74cb541b [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x3c57ccc6 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0xc96936e [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x2539125c [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x10aabf7e [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x68993e18 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x58e0a501 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x35ebf473 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x2b4a0989 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0xcf6fdcf [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x3368d2c0 [0137.532] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x64832fb5 [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x5bfa467b [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x462bcd2 [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x3e9b9237 [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x3c79bdaf [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x3d78cf05 [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x1d0b3869 [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x7a626151 [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x10820e6f [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x6ff00072 [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x681b0886 [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x181a5f9e [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x5f1f2f2c [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x137259dc [0137.533] RtlRandomEx (in: Seed=0xa0afd60 | out: Seed=0xa0afd60) returned 0x7af098b5 [0137.544] SetFilePointerEx (in: hFile=0xff4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.544] ReadFile (in: hFile=0xff4, lpBuffer=0x8257478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa0afd68, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xa0afd68*=0x3c00, lpOverlapped=0x0) returned 1 [0137.544] SetFilePointerEx (in: hFile=0xff4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308cc8 [0137.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32430 [0137.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0137.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0137.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0137.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0137.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0137.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0137.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0137.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308cc8) returned 1 [0137.547] WriteFile (in: hFile=0xff4, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa0afd68, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xa0afd68*=0x3c00, lpOverlapped=0x0) returned 1 [0137.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0137.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0137.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df3908 [0137.777] SetFilePointerEx (in: hFile=0xff4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.777] WriteFile (in: hFile=0xff4, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xa0afdd4, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xa0afdd4*=0x108, lpOverlapped=0x0) returned 1 [0137.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0137.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0137.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0137.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3908) returned 1 [0137.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0137.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0137.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0137.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0137.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0137.850] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg" [0137.850] wcscat (in: _Dest=0x3f39d28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg.f0dbec" [0137.850] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg.f0dbec", NtPathName=0xa0afd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\hJncbIh.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8052db8 [0138.157] FlushFileBuffers (hFile=0xff4) returned 1 [0138.176] CloseHandle (hObject=0xff4) returned 1 [0138.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0138.177] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0138.177] wcscat (in: _Dest=0x3f39d28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0138.177] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0138.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0138.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 Thread: id = 430 os_tid = 0x3c8 [0132.366] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\iay0lvm6m7ygepq3hmc.gif")) returned 0x2020 [0132.366] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif", dwFileAttributes=0x20) returned 1 [0137.547] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\iay0lvm6m7ygepq3hmc.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10f8 [0137.548] GetFileSizeEx (in: hFile=0x10f8, lpFileSize=0xb5cfa30 | out: lpFileSize=0xb5cfa30*=75847) returned 1 [0137.548] SetFilePointerEx (in: hFile=0x10f8, liDistanceToMove=0x12843, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.548] ReadFile (in: hFile=0x10f8, lpBuffer=0xb5cfa3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb5cfa18, lpOverlapped=0x0 | out: lpBuffer=0xb5cfa3c*, lpNumberOfBytesRead=0xb5cfa18*=0x4, lpOverlapped=0x0) returned 1 [0137.825] SetFilePointerEx (in: hFile=0x10f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0137.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c158 [0137.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0137.825] NtQuerySystemTime (in: CurrentTime=0xb5cf9b8 | out: CurrentTime=0xb5cf9b8*=132471540065028000) returned 0x0 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x5320c62a [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x7a5a5366 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x5e4f16a4 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x1f93041f [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x430ddad8 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x1a3146a2 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x7085e5c0 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x68f3e263 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x643df23 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x1017f2a0 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x2a746e0c [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x6c5e235c [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x4d6e98d2 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x57c13542 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x297cf9fd [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x336590ce [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0xc57a79e [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x311643e7 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x79ee4aea [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x5c18ac7a [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x1daf6b71 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x67f08a6f [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x6de66c57 [0137.825] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x361bb33a [0137.826] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x3d042e6 [0137.826] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x7b0ed9ec [0137.826] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x6970c70c [0137.826] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x569db032 [0137.826] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x3482646 [0137.826] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x49acacdc [0137.826] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x1859f662 [0137.826] RtlRandomEx (in: Seed=0xb5cf9b0 | out: Seed=0xb5cf9b0) returned 0x7f8393ec [0137.836] SetFilePointerEx (in: hFile=0x10f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.836] ReadFile (in: hFile=0x10f8, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb5cf9b8, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0xb5cf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.836] SetFilePointerEx (in: hFile=0x10f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31c88 [0137.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bd48 [0137.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0137.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0137.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0137.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0137.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0137.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0137.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bd48) returned 1 [0137.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31c88) returned 1 [0137.837] WriteFile (in: hFile=0x10f8, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb5cf9b8, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xb5cf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0137.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0137.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3f38970 [0137.867] SetFilePointerEx (in: hFile=0x10f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.867] WriteFile (in: hFile=0x10f8, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xb5cfa24, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0xb5cfa24*=0x120, lpOverlapped=0x0) returned 1 [0137.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0137.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f385c8) returned 1 [0137.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0137.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38970) returned 1 [0137.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0137.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0137.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0137.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0137.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8052b98 [0137.878] wcscpy (in: _Dest=0x8052b98, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif" [0137.878] wcscat (in: _Dest=0x8052b98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif.f0dbec" [0137.878] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif.f0dbec", NtPathName=0xb5cf9a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\IAY0lvm6M7YGEpq3hMc.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12408 [0137.917] FlushFileBuffers (hFile=0x10f8) returned 1 [0137.921] CloseHandle (hObject=0x10f8) returned 1 [0137.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80552d0 [0137.922] wcscpy (in: _Dest=0x80552d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0137.922] wcscat (in: _Dest=0x80552d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0137.922] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0137.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80552d0) returned 1 [0137.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5888) returned 1 Thread: id = 431 os_tid = 0xf9c [0132.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c468 [0132.367] wcscpy (in: _Dest=0x3d8c468, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" [0132.367] wcscat (in: _Dest=0x3d8c468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\" [0132.367] wcscat (in: _Dest=0x3d8c468, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\*" [0132.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fedf8 [0132.367] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd10 [0132.368] wcscmp (_String1=".", _String2=".") returned 0 [0132.368] FindNextFileW (in: hFindFile=0x3dcfd10, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.368] wcscmp (_String1="..", _String2=".") returned 1 [0132.368] wcscmp (_String1="..", _String2="..") returned 0 [0132.368] FindNextFileW (in: hFindFile=0x3dcfd10, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 1 [0132.368] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2=".") returned 1 [0132.369] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2="..") returned 1 [0132.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bf58 [0132.369] wcscpy (in: _Dest=0x35bf58, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" [0132.369] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\" [0132.369] wcscat (in: _Dest=0x35bf58, _Source="{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0134.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35bf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0134.186] FindNextFileW (in: hFindFile=0x3dcfd10, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 0 [0134.186] FindClose (in: hFindFile=0x3dcfd10 | out: hFindFile=0x3dcfd10) returned 1 [0134.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fedf8) returned 1 [0134.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c468) returned 1 [0134.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 Thread: id = 432 os_tid = 0xfb0 [0132.369] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ino-ei.rtf")) returned 0x2020 [0132.369] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf", dwFileAttributes=0x20) returned 1 [0137.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ino-ei.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5d4 [0137.837] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xa54f978 | out: lpFileSize=0xa54f978*=63778) returned 1 [0137.837] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0xf91e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.837] ReadFile (in: hFile=0x5d4, lpBuffer=0xa54f984, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa54f960, lpOverlapped=0x0 | out: lpBuffer=0xa54f984*, lpNumberOfBytesRead=0xa54f960*=0x4, lpOverlapped=0x0) returned 1 [0137.839] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0137.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0137.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0137.839] NtQuerySystemTime (in: CurrentTime=0xa54f900 | out: CurrentTime=0xa54f900*=132471540065184000) returned 0x0 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x1f8bafae [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x300639e [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x24e20dbc [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x7afa01d5 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x5a7c6a10 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x3e8acb26 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x4d0f1f15 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x47eb9c2a [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x6cca5c83 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0xc64cb3 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0xea4a12e [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x358b0266 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x7b0ed9ec [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x2472b900 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x2a79298f [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x7551f2db [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x1cc1a53f [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x3811f0c [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x1441849a [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x27a920b2 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x507f22f5 [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x25f4a21d [0137.839] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x58f4ad1a [0137.840] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x1cb9be9d [0137.840] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0xfea3b07 [0137.840] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x1bc23dc9 [0137.840] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x49683ed4 [0137.840] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x1a5c1f62 [0137.840] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x61fc72a6 [0137.840] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0xed6a6d0 [0137.840] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x76113b87 [0137.840] RtlRandomEx (in: Seed=0xa54f8f8 | out: Seed=0xa54f8f8) returned 0x6187d943 [0138.023] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.024] ReadFile (in: hFile=0x5d4, lpBuffer=0x82718b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa54f900, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesRead=0xa54f900*=0x3c00, lpOverlapped=0x0) returned 1 [0138.024] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0138.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0138.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82754b8 [0138.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0138.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0138.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0138.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.025] WriteFile (in: hFile=0x5d4, lpBuffer=0x82754b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa54f900, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesWritten=0xa54f900*=0x3c00, lpOverlapped=0x0) returned 1 [0138.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0138.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0138.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df42f8 [0138.096] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.096] WriteFile (in: hFile=0x5d4, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xa54f96c, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xa54f96c*=0x106, lpOverlapped=0x0) returned 1 [0138.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0138.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4298) returned 1 [0138.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c860) returned 1 [0138.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0138.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0138.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0138.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0138.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0138.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8054b60 [0138.124] wcscpy (in: _Dest=0x8054b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf" [0138.124] wcscat (in: _Dest=0x8054b60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf.f0dbec" [0138.124] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf.f0dbec", NtPathName=0xa54f8f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\INo-ei.rtf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8052db8 [0138.148] FlushFileBuffers (hFile=0x5d4) returned 1 [0138.161] CloseHandle (hObject=0x5d4) returned 1 [0138.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0138.162] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0138.162] wcscat (in: _Dest=0x3f39d28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0138.162] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0138.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0138.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 Thread: id = 433 os_tid = 0xff4 [0132.370] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\jf9rbnzbwramlupfnhl.mp3")) returned 0x2020 [0132.370] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3", dwFileAttributes=0x20) returned 1 [0138.025] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\jf9rbnzbwramlupfnhl.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe60 [0138.025] GetFileSizeEx (in: hFile=0xe60, lpFileSize=0xb1ffd80 | out: lpFileSize=0xb1ffd80*=96693) returned 1 [0138.025] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x179b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.025] ReadFile (in: hFile=0xe60, lpBuffer=0xb1ffd8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb1ffd68, lpOverlapped=0x0 | out: lpBuffer=0xb1ffd8c*, lpNumberOfBytesRead=0xb1ffd68*=0x4, lpOverlapped=0x0) returned 1 [0138.027] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0138.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0138.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.027] NtQuerySystemTime (in: CurrentTime=0xb1ffd08 | out: CurrentTime=0xb1ffd08*=132471540067056000) returned 0x0 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x1c3ff00a [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x4d41b182 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x15a1adcd [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x154a510f [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x182f1da2 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x70d6cc5c [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x7f6bd0bb [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x320d65a8 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x2cad33c [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x2d92a143 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x3e8acb26 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x15a5a605 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x1ab1d0e2 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x85c0259 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x5394af1d [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x23408a97 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x1ef02813 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x2466629a [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x21d636a6 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x1c7c125c [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0xb6ae021 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x3d042e6 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x5d88fe05 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x47ab2361 [0138.027] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x3327de2d [0138.028] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x2585cadc [0138.028] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x6161833c [0138.028] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x5e1ca448 [0138.028] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x3f6a1ce2 [0138.028] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x1194cf40 [0138.028] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x1f8bafae [0138.028] RtlRandomEx (in: Seed=0xb1ffd00 | out: Seed=0xb1ffd00) returned 0x64d601a1 [0138.038] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.038] ReadFile (in: hFile=0xe60, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb1ffd08, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0xb1ffd08*=0x3c00, lpOverlapped=0x0) returned 1 [0138.039] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0138.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0138.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0138.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0138.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0138.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.039] WriteFile (in: hFile=0xe60, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb1ffd08, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xb1ffd08*=0x3c00, lpOverlapped=0x0) returned 1 [0138.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0138.099] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.099] ReadFile (in: hFile=0xe60, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb1ffd08, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0xb1ffd08*=0x3c00, lpOverlapped=0x0) returned 1 [0138.099] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0138.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0138.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0138.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0138.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8d8 [0138.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8d8) returned 1 [0138.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.100] WriteFile (in: hFile=0xe60, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb1ffd08, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xb1ffd08*=0x3c00, lpOverlapped=0x0) returned 1 [0138.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0138.105] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x13db5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.105] ReadFile (in: hFile=0xe60, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb1ffd08, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0xb1ffd08*=0x3c00, lpOverlapped=0x0) returned 1 [0138.106] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x13db5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0138.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0138.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0138.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0138.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.107] WriteFile (in: hFile=0xe60, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb1ffd08, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xb1ffd08*=0x3c00, lpOverlapped=0x0) returned 1 [0138.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0138.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e3b0 [0138.116] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.116] WriteFile (in: hFile=0xe60, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0xb1ffd74, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xb1ffd74*=0x160, lpOverlapped=0x0) returned 1 [0138.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0138.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308848) returned 1 [0138.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0138.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 [0138.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0138.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0138.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0138.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8052868 [0138.127] wcscpy (in: _Dest=0x8052868, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3" [0138.127] wcscat (in: _Dest=0x8052868, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3.f0dbec" [0138.127] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3.f0dbec", NtPathName=0xb1ffcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Jf9rBNZBWrAMlupfNHL.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11328 [0138.150] FlushFileBuffers (hFile=0xe60) returned 1 [0138.164] CloseHandle (hObject=0xe60) returned 1 [0138.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0138.165] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0138.165] wcscat (in: _Dest=0x3f39d28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0138.166] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0138.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0138.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4d08) returned 1 Thread: id = 434 os_tid = 0x3f4 [0132.370] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\lh8aetzbtcvwq2k.png")) returned 0x2020 [0132.370] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png", dwFileAttributes=0x20) returned 1 [0138.040] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\lh8aetzbtcvwq2k.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdc8 [0138.040] GetFileSizeEx (in: hFile=0xdc8, lpFileSize=0xb63ff48 | out: lpFileSize=0xb63ff48*=90389) returned 1 [0138.040] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x16111, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.041] ReadFile (in: hFile=0xdc8, lpBuffer=0xb63ff54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb63ff30, lpOverlapped=0x0 | out: lpBuffer=0xb63ff54*, lpNumberOfBytesRead=0xb63ff30*=0x4, lpOverlapped=0x0) returned 1 [0138.042] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0138.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0138.042] NtQuerySystemTime (in: CurrentTime=0xb63fed0 | out: CurrentTime=0xb63fed0*=132471540067212000) returned 0x0 [0138.042] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x68f3e263 [0138.042] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x69aa71cd [0138.042] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x3811f0c [0138.042] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x4a7a8308 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x4724ad47 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x52d9ad73 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x55d345cb [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x786caa85 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0xe3940f5 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x1a04474 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x6a2bdea6 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x4fdaa989 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x7200df83 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x15ab19c5 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x2b491706 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x5764121 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x49069c8a [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0xe77ec3b [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x4cafea5c [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x287d1bb2 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x51dbd841 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x4f7c11fd [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x1f23c619 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x6987d580 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x2ccf0ad4 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x1610831 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x162cf4a2 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x51dbd841 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x27a920b2 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x636388ac [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0x3498cb75 [0138.043] RtlRandomEx (in: Seed=0xb63fec8 | out: Seed=0xb63fec8) returned 0xa6b528c [0138.052] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.052] ReadFile (in: hFile=0xdc8, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb63fed0, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xb63fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.052] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0138.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0138.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0138.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0138.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.053] WriteFile (in: hFile=0xdc8, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb63fed0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xb63fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0138.102] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.103] ReadFile (in: hFile=0xdc8, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb63fed0, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xb63fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.103] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8d8 [0138.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8d8) returned 1 [0138.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0138.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8d8 [0138.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0138.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.104] WriteFile (in: hFile=0xdc8, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb63fed0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xb63fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0138.112] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x12515, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.113] ReadFile (in: hFile=0xdc8, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb63fed0, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xb63fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.113] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x12515, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0138.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0138.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0138.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0138.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0138.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c928) returned 1 [0138.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.114] WriteFile (in: hFile=0xdc8, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb63fed0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xb63fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0138.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bd80 [0138.121] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.121] WriteFile (in: hFile=0xdc8, lpBuffer=0x3dcd898*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0xb63ff3c, lpOverlapped=0x0 | out: lpBuffer=0x3dcd898*, lpNumberOfBytesWritten=0xb63ff3c*=0x158, lpOverlapped=0x0) returned 1 [0138.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd898) returned 1 [0138.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37f18) returned 1 [0138.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0138.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37818) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd80) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0138.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24640 [0138.130] wcscpy (in: _Dest=0x3e24640, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png" [0138.130] wcscat (in: _Dest=0x3e24640, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png.f0dbec" [0138.130] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png.f0dbec", NtPathName=0xb63fec0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\lh8AETZbtcvwQ2K.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2bc60 [0138.156] FlushFileBuffers (hFile=0xdc8) returned 1 [0138.171] CloseHandle (hObject=0xdc8) returned 1 [0138.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0138.172] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0138.172] wcscat (in: _Dest=0x3f39d28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0138.172] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0138.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0138.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 Thread: id = 435 os_tid = 0x5f8 [0132.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d4a8 [0132.371] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" [0132.371] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\" [0132.371] wcscat (in: _Dest=0x3d8d4a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\*" [0132.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff060 [0132.371] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfdd0 [0132.372] wcscmp (_String1=".", _String2=".") returned 0 [0132.372] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.372] wcscmp (_String1="..", _String2=".") returned 1 [0132.372] wcscmp (_String1="..", _String2="..") returned 0 [0132.372] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0132.372] wcscmp (_String1="Flash Player", _String2=".") returned 1 [0132.372] wcscmp (_String1="Flash Player", _String2="..") returned 1 [0132.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4108 [0132.373] wcscpy (in: _Dest=0x3dc4108, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" [0132.373] wcscat (in: _Dest=0x3dc4108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\" [0132.373] wcscat (in: _Dest=0x3dc4108, _Source="Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" [0133.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0133.172] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0133.173] FindClose (in: hFindFile=0x3dcfdd0 | out: hFindFile=0x3dcfdd0) returned 1 [0133.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff060) returned 1 [0133.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 [0133.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 Thread: id = 436 os_tid = 0x640 [0132.373] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\n2bv74pexgnc_vrf3p.gif")) returned 0x2020 [0132.373] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif", dwFileAttributes=0x20) returned 1 [0138.053] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\n2bv74pexgnc_vrf3p.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc8c [0138.054] GetFileSizeEx (in: hFile=0xc8c, lpFileSize=0xb73f9c8 | out: lpFileSize=0xb73f9c8*=79074) returned 1 [0138.054] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x134de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.054] ReadFile (in: hFile=0xc8c, lpBuffer=0xb73f9d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb73f9b0, lpOverlapped=0x0 | out: lpBuffer=0xb73f9d4*, lpNumberOfBytesRead=0xb73f9b0*=0x4, lpOverlapped=0x0) returned 1 [0138.055] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0138.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0138.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0138.056] NtQuerySystemTime (in: CurrentTime=0xb73f950 | out: CurrentTime=0xb73f950*=132471540067368000) returned 0x0 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x8bf991a [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x4b95f197 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x77e9cda7 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x64d601a1 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x6631d360 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x66eb2fa7 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x15d74322 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x3b5b4b97 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x59713cd5 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x65a62286 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x79f82fe6 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x67326092 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x482da583 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x3d85de3e [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x491ae6e8 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x2a746e0c [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x74e84521 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x3e5303e4 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x5e1ca448 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x59944382 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x5394af1d [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x482da583 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x6e50b8a8 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x700e5598 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x132355c9 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x33e98a75 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x37b13b0 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x1d69a206 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x7ff96e87 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x4d6b1d87 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x1ba18541 [0138.056] RtlRandomEx (in: Seed=0xb73f948 | out: Seed=0xb73f948) returned 0x7bf0487d [0138.065] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.065] ReadFile (in: hFile=0xc8c, lpBuffer=0x8257478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb73f950, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xb73f950*=0x3c00, lpOverlapped=0x0) returned 1 [0138.065] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0138.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0138.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0138.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0138.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0138.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0138.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.066] WriteFile (in: hFile=0xc8c, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb73f950, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xb73f950*=0x3c00, lpOverlapped=0x0) returned 1 [0138.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0138.110] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.110] ReadFile (in: hFile=0xc8c, lpBuffer=0x8257478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb73f950, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xb73f950*=0x3c00, lpOverlapped=0x0) returned 1 [0138.110] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0138.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0138.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0138.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0138.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0138.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0138.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.111] WriteFile (in: hFile=0xc8c, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb73f950, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xb73f950*=0x3c00, lpOverlapped=0x0) returned 1 [0138.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0138.118] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0xf8e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.118] ReadFile (in: hFile=0xc8c, lpBuffer=0x8257478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb73f950, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xb73f950*=0x3c00, lpOverlapped=0x0) returned 1 [0138.119] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0xf8e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308770 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c928) returned 1 [0138.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308770) returned 1 [0138.120] WriteFile (in: hFile=0xc8c, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb73f950, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xb73f950*=0x3c00, lpOverlapped=0x0) returned 1 [0138.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0138.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ce28 [0138.125] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.125] WriteFile (in: hFile=0xc8c, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0xb73f9bc, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0xb73f9bc*=0x15e, lpOverlapped=0x0) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308800) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308770) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ce28) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0138.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x80527e0 [0138.132] wcscpy (in: _Dest=0x80527e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif" [0138.132] wcscat (in: _Dest=0x80527e0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif.f0dbec" [0138.132] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif.f0dbec", NtPathName=0xb73f940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\N2BV74PExgnC_vrF3p.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11968 [0138.155] FlushFileBuffers (hFile=0xc8c) returned 1 [0138.169] CloseHandle (hObject=0xc8c) returned 1 [0138.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0138.170] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0138.170] wcscat (in: _Dest=0x3f39d28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0138.170] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0138.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0138.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 Thread: id = 437 os_tid = 0x434 [0132.374] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\nldjf3.ots")) returned 0x2020 [0132.374] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots", dwFileAttributes=0x20) returned 1 [0138.070] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\nldjf3.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc78 [0138.070] GetFileSizeEx (in: hFile=0xc78, lpFileSize=0xb7af9c0 | out: lpFileSize=0xb7af9c0*=69895) returned 1 [0138.070] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x11103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.070] ReadFile (in: hFile=0xc78, lpBuffer=0xb7af9cc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb7af9a8, lpOverlapped=0x0 | out: lpBuffer=0xb7af9cc*, lpNumberOfBytesRead=0xb7af9a8*=0x4, lpOverlapped=0x0) returned 1 [0138.071] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0138.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0138.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0138.072] NtQuerySystemTime (in: CurrentTime=0xb7af948 | out: CurrentTime=0xb7af948*=132471540067524000) returned 0x0 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x1a9deab4 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x98eaf32 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x1017f2a0 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x301d1adb [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x15ab19c5 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x2783f79f [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x3ecbd3e3 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x20e57f18 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x2fdd100f [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x73006e71 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x48c4eb8f [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x62276fab [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x4362c929 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x727ff9d9 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x2b1dad73 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x361bb33a [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x52245977 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x67f08a6f [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x6c8ca186 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x717177d0 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x3b5b4b97 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x34039abd [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x499e92cb [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x32c5b11a [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x1472fcb5 [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x139ba85b [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x1be9d9cf [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x29301d9d [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x10e5a13c [0138.072] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x68457659 [0138.073] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x3136114e [0138.073] RtlRandomEx (in: Seed=0xb7af940 | out: Seed=0xb7af940) returned 0x5385dfe5 [0138.081] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.081] ReadFile (in: hFile=0xc78, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb7af948, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0xb7af948*=0x3c00, lpOverlapped=0x0) returned 1 [0138.082] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308968 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0138.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0138.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0138.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0138.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308968) returned 1 [0138.083] WriteFile (in: hFile=0xc78, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb7af948, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0xb7af948*=0x3c00, lpOverlapped=0x0) returned 1 [0138.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0138.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0138.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df41d8 [0138.117] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.117] WriteFile (in: hFile=0xc78, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xb7af9b4, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xb7af9b4*=0x106, lpOverlapped=0x0) returned 1 [0138.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0138.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4328) returned 1 [0138.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0138.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41d8) returned 1 [0138.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0138.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0138.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0138.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0138.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x80550a0 [0138.128] wcscpy (in: _Dest=0x80550a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots" [0138.128] wcscat (in: _Dest=0x80550a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots.f0dbec" [0138.128] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots.f0dbec", NtPathName=0xb7af938, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\nLdjf3.ots.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8052978 [0138.153] FlushFileBuffers (hFile=0xc78) returned 1 [0138.167] CloseHandle (hObject=0xc78) returned 1 [0138.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0138.167] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0138.168] wcscat (in: _Dest=0x3f39d28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0138.168] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0138.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0138.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 Thread: id = 438 os_tid = 0x72c [0132.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\nptmxaz.avi")) returned 0x2020 [0132.561] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi", dwFileAttributes=0x20) returned 1 [0138.083] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\nptmxaz.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf8c [0138.083] GetFileSizeEx (in: hFile=0xf8c, lpFileSize=0xb6af888 | out: lpFileSize=0xb6af888*=14756) returned 1 [0138.083] SetFilePointerEx (in: hFile=0xf8c, liDistanceToMove=0x39a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.083] ReadFile (in: hFile=0xf8c, lpBuffer=0xb6af894, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb6af870, lpOverlapped=0x0 | out: lpBuffer=0xb6af894*, lpNumberOfBytesRead=0xb6af870*=0x4, lpOverlapped=0x0) returned 1 [0138.085] SetFilePointerEx (in: hFile=0xf8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0138.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0138.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0138.085] NtQuerySystemTime (in: CurrentTime=0xb6af810 | out: CurrentTime=0xb6af810*=132471540067680000) returned 0x0 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x11eb10ee [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x3971b55a [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x1a3db70f [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x542ae43e [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x320d65a8 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x60c4255 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x529970cd [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x4dec5b76 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x4bb0be23 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0xa89f7d7 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x6f6b4f34 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x2ee08703 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x67c4eec4 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x6feefdbe [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x76dd475c [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x1ff47f91 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0xa32c841 [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x10be962a [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x1895bf5c [0138.085] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x648e349 [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x561916d [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x59c57e7e [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x59c57e7e [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x7ce3c25c [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x941aa17 [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x5c1bc369 [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x5cb4b682 [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x743fac6f [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0xea52b56 [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x1e29b9b3 [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x32d73b1e [0138.086] RtlRandomEx (in: Seed=0xb6af808 | out: Seed=0xb6af808) returned 0x69f83bc1 [0138.431] ReadFile (in: hFile=0xf8c, lpBuffer=0x8257478, nNumberOfBytesToRead=0x39a4, lpNumberOfBytesRead=0xb6af804, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xb6af804*=0x39a4, lpOverlapped=0x0) returned 1 [0138.432] SetFilePointerEx (in: hFile=0xf8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.432] WriteFile (in: hFile=0xf8c, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x39a4, lpNumberOfBytesWritten=0xb6af808, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xb6af808*=0x39a4, lpOverlapped=0x0) returned 1 [0139.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0139.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0139.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0139.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0139.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0139.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0139.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd42c0) returned 1 [0139.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df4328 [0139.296] SetFilePointerEx (in: hFile=0xf8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.296] WriteFile (in: hFile=0xf8c, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xb6af87c, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xb6af87c*=0x108, lpOverlapped=0x0) returned 1 [0141.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0141.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41d8) returned 1 [0141.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0141.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4328) returned 1 [0141.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0141.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0141.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0141.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0141.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a2d8 [0141.642] wcscpy (in: _Dest=0x3f3a2d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi" [0141.642] wcscat (in: _Dest=0x3f3a2d8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi.f0dbec" [0141.642] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi.f0dbec", NtPathName=0xb6af800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\NptmXAz.avi.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053418 [0142.005] FlushFileBuffers (hFile=0xf8c) returned 1 [0142.061] CloseHandle (hObject=0xf8c) returned 1 [0142.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39f58 [0142.094] wcscpy (in: _Dest=0x3f39f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.094] wcscat (in: _Dest=0x3f39f58, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.094] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39f58) returned 1 [0142.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e0d8) returned 1 Thread: id = 439 os_tid = 0xb20 [0132.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif" (normalized: "c:\\users\\eebsym5\\desktop\\08gmeeogw.gif")) returned 0x20 [0132.562] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif", dwFileAttributes=0x20) returned 1 [0132.564] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif" (normalized: "c:\\users\\eebsym5\\desktop\\08gmeeogw.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde4 [0132.564] GetFileSizeEx (in: hFile=0xde4, lpFileSize=0x914fdc8 | out: lpFileSize=0x914fdc8*=22690) returned 1 [0132.565] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x589e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.565] ReadFile (in: hFile=0xde4, lpBuffer=0x914fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x914fdb0, lpOverlapped=0x0 | out: lpBuffer=0x914fdd4*, lpNumberOfBytesRead=0x914fdb0*=0x4, lpOverlapped=0x0) returned 1 [0132.566] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0132.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0132.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16d0 [0132.567] NtQuerySystemTime (in: CurrentTime=0x914fd50 | out: CurrentTime=0x914fd50*=132471540012456000) returned 0x0 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x2ba1198f [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x64eed4d9 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x74051378 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x6f43c56 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x388df4d9 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x5268b754 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x23b293bf [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x3b4fb6ec [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x21928600 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x644067c [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x13a9e72f [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x18484bd7 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0xcb9316b [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x2d0ef9da [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x6eac33af [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x31869773 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x43c9da79 [0132.567] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x566ca901 [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x44fa1933 [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x49fe935a [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x2cdb2e11 [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x5c2e142d [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x6d0a61e2 [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x5d510cde [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x6185ea1a [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x399acc3f [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x2ccbfd4f [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x77b47715 [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x424bfe0e [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x3d0639a1 [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x34a31bd0 [0132.568] RtlRandomEx (in: Seed=0x914fd48 | out: Seed=0x914fd48) returned 0x33740d4d [0132.582] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.582] ReadFile (in: hFile=0xde4, lpBuffer=0x80ad080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x914fd50, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesRead=0x914fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0132.582] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f38fe8 [0132.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0132.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0132.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0132.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b0c88 [0132.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0132.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16d0 [0132.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16d0) returned 1 [0132.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0132.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38fe8) returned 1 [0132.584] WriteFile (in: hFile=0xde4, lpBuffer=0x80b0c88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x914fd50, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesWritten=0x914fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0132.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0132.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0132.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df3f38 [0132.980] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.980] WriteFile (in: hFile=0xde4, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x914fdbc, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x914fdbc*=0x10c, lpOverlapped=0x0) returned 1 [0133.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0133.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42c8) returned 1 [0133.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0133.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3f38) returned 1 [0133.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0133.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0133.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0133.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0133.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d100 [0133.065] wcscpy (in: _Dest=0x3d8d100, _Source="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif" [0133.065] wcscat (in: _Dest=0x3d8d100, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif.f0dbec" [0133.065] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif.f0dbec", NtPathName=0x914fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\08gmEEOGW.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5288 [0138.373] FlushFileBuffers (hFile=0xde4) returned 1 [0138.413] CloseHandle (hObject=0xde4) returned 1 [0138.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0138.414] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.414] wcscat (in: _Dest=0x2fe6d88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0138.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0efb0) returned 1 Thread: id = 440 os_tid = 0x570 [0132.584] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\0wivz.bmp")) returned 0x20 [0132.584] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp", dwFileAttributes=0x20) returned 1 [0132.585] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\0wivz.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf4 [0132.585] GetFileSizeEx (in: hFile=0xdf4, lpFileSize=0x8cafa20 | out: lpFileSize=0x8cafa20*=72504) returned 1 [0132.585] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x11b34, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.586] ReadFile (in: hFile=0xdf4, lpBuffer=0x8cafa2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8cafa08, lpOverlapped=0x0 | out: lpBuffer=0x8cafa2c*, lpNumberOfBytesRead=0x8cafa08*=0x4, lpOverlapped=0x0) returned 1 [0132.587] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16d0 [0132.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1608 [0132.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0132.588] NtQuerySystemTime (in: CurrentTime=0x8caf9a8 | out: CurrentTime=0x8caf9a8*=132471540012768000) returned 0x0 [0132.588] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x7fb34450 [0132.588] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x6fb37927 [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x5b9aa0c1 [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x50007d1d [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x44fad644 [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x205a1b9 [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x5ff733ae [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x506b99a2 [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x7eb87e69 [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x56a822be [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x1e7199ed [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x5180496a [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x5c032d15 [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x50fff9c1 [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x682d8e5b [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x63089ba9 [0132.589] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x265ceef2 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x75f95f [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x74dd6d26 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x2d3c1b7 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x44fa1933 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x4c880b1c [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x482e75cf [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0xb49492 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x57a4a143 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x7b0abfd3 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x11f16e90 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x74051378 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x7788dc1d [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x3dd57b63 [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0xd347f4b [0132.590] RtlRandomEx (in: Seed=0x8caf9a0 | out: Seed=0x8caf9a0) returned 0x11efa388 [0132.603] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.603] ReadFile (in: hFile=0xdf4, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8caf9a8, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0x8caf9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.604] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f38fa0 [0132.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0132.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16d0 [0132.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16d0) returned 1 [0132.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0132.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16d0 [0132.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1680) returned 1 [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38fa0) returned 1 [0132.605] WriteFile (in: hFile=0xdf4, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8caf9a8, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0x8caf9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0132.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0132.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0132.984] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.984] WriteFile (in: hFile=0xdf4, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x8cafa14, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x8cafa14*=0x104, lpOverlapped=0x0) returned 1 [0133.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0133.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0133.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0133.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0133.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16d0) returned 1 [0133.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1608) returned 1 [0133.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0133.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef31b0) returned 1 [0133.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7268 [0133.078] wcscpy (in: _Dest=0x2fe7268, _Source="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp" [0133.079] wcscat (in: _Dest=0x2fe7268, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp.f0dbec" [0133.079] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp.f0dbec", NtPathName=0x8caf998, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0wivz.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32f70 [0138.286] FlushFileBuffers (hFile=0xdf4) returned 1 [0138.337] CloseHandle (hObject=0xdf4) returned 1 [0138.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7448 [0138.339] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.339] wcscat (in: _Dest=0x2fe7448, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.339] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 [0138.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5f78) returned 1 Thread: id = 441 os_tid = 0xbf4 [0132.608] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif" (normalized: "c:\\users\\eebsym5\\desktop\\1dqknauj.gif")) returned 0x20 [0132.608] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif", dwFileAttributes=0x20) returned 1 [0132.609] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif" (normalized: "c:\\users\\eebsym5\\desktop\\1dqknauj.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf0 [0132.609] GetFileSizeEx (in: hFile=0xdf0, lpFileSize=0xa23fab0 | out: lpFileSize=0xa23fab0*=4751) returned 1 [0132.609] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x128b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.609] ReadFile (in: hFile=0xdf0, lpBuffer=0xa23fabc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa23fa98, lpOverlapped=0x0 | out: lpBuffer=0xa23fabc*, lpNumberOfBytesRead=0xa23fa98*=0x4, lpOverlapped=0x0) returned 1 [0132.611] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0132.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3250 [0132.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3278 [0132.611] NtQuerySystemTime (in: CurrentTime=0xa23fa38 | out: CurrentTime=0xa23fa38*=132471540012924000) returned 0x0 [0132.611] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x39660335 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x14998723 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0xc50f65a [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x50c14b22 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x2a518dd9 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x36711f09 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x59a8302f [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x7ad0d49a [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x1bb41289 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x186085a9 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x493699de [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x8724735 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x5399afe2 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x2e57b205 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x1677ce03 [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x6be0bf6a [0132.612] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x1a35d06d [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x7c6d43d [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x205de35d [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x2d5b8131 [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x1d93d77b [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x37e45d66 [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x1f0ce852 [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x704d181a [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x2269da5a [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x4bb3ce24 [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x589cc5b2 [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x514ffb07 [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x38fc1225 [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x4f5fa3b2 [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x1ce74b85 [0132.613] RtlRandomEx (in: Seed=0xa23fa30 | out: Seed=0xa23fa30) returned 0x154fa039 [0132.642] ReadFile (in: hFile=0xdf0, lpBuffer=0x809e060, nNumberOfBytesToRead=0x128f, lpNumberOfBytesRead=0xa23fa2c, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0xa23fa2c*=0x128f, lpOverlapped=0x0) returned 1 [0132.643] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.643] WriteFile (in: hFile=0xdf0, lpBuffer=0x80a1c68*, nNumberOfBytesToWrite=0x128f, lpNumberOfBytesWritten=0xa23fa30, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesWritten=0xa23fa30*=0x128f, lpOverlapped=0x0) returned 1 [0133.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0133.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0133.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0133.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0133.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0133.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0133.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0133.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3df3908 [0133.019] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.019] WriteFile (in: hFile=0xdf0, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xa23faa4, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xa23faa4*=0x10a, lpOverlapped=0x0) returned 1 [0133.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0133.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3ed8) returned 1 [0133.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0133.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3908) returned 1 [0133.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1658) returned 1 [0133.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3250) returned 1 [0133.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef33e0) returned 1 [0133.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0133.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8b490 [0133.083] wcscpy (in: _Dest=0x3d8b490, _Source="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif" [0133.083] wcscat (in: _Dest=0x3d8b490, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif.f0dbec" [0133.083] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif.f0dbec", NtPathName=0xa23fa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\1DQknaUj.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32c28 [0138.376] FlushFileBuffers (hFile=0xdf0) returned 1 [0138.415] CloseHandle (hObject=0xdf0) returned 1 [0138.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0138.416] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.416] wcscat (in: _Dest=0x2fe6d88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.416] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0138.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e232d0) returned 1 Thread: id = 442 os_tid = 0x584 [0132.643] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav" (normalized: "c:\\users\\eebsym5\\desktop\\1omcwik9hed.wav")) returned 0x20 [0132.643] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav", dwFileAttributes=0x20) returned 1 [0132.644] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav" (normalized: "c:\\users\\eebsym5\\desktop\\1omcwik9hed.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1040 [0132.644] GetFileSizeEx (in: hFile=0x1040, lpFileSize=0xa50fc40 | out: lpFileSize=0xa50fc40*=33689) returned 1 [0132.644] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x8395, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.644] ReadFile (in: hFile=0x1040, lpBuffer=0xa50fc4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa50fc28, lpOverlapped=0x0 | out: lpBuffer=0xa50fc4c*, lpNumberOfBytesRead=0xa50fc28*=0x4, lpOverlapped=0x0) returned 1 [0132.646] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0132.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3278 [0132.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3430 [0132.646] NtQuerySystemTime (in: CurrentTime=0xa50fbc8 | out: CurrentTime=0xa50fbc8*=132471540013236000) returned 0x0 [0132.646] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x295c52aa [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x3dd57b63 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x589cc5b2 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x1c1e6194 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x6e1838fb [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x6f1cbbf2 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x322c9c69 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x16738393 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x30a22325 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x124f0c7c [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x42302de4 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x79dcb0bf [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x4feb0f62 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x2179e77d [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0xf20b225 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x76d3c601 [0132.648] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x78c6cc55 [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x6185ea1a [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x1e2caeb4 [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x4e829ed7 [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x1e6f37c1 [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x5df3fed [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x5896c28b [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x21b7834d [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x2bc5960e [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x4e829ed7 [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x3af7dfff [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x67f6fe08 [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x4f90ea4b [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x6e8cebfe [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0x5a292e1d [0132.649] RtlRandomEx (in: Seed=0xa50fbc0 | out: Seed=0xa50fbc0) returned 0xf378b0b [0132.663] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.663] ReadFile (in: hFile=0x1040, lpBuffer=0x809a458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa50fbc8, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0xa50fbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.663] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f39030 [0132.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32c28 [0132.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0132.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1680) returned 1 [0132.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0132.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0132.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3430 [0132.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3430) returned 1 [0132.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0132.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39030) returned 1 [0132.665] WriteFile (in: hFile=0x1040, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa50fbc8, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0xa50fbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0133.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0133.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df78a8 [0133.021] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.021] WriteFile (in: hFile=0x1040, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa50fc34, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0xa50fc34*=0x110, lpOverlapped=0x0) returned 1 [0133.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0133.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79f8) returned 1 [0133.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1860) returned 1 [0133.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78a8) returned 1 [0133.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1680) returned 1 [0133.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3278) returned 1 [0133.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3458) returned 1 [0133.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0133.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d098 [0133.085] wcscpy (in: _Dest=0x3d8d098, _Source="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav" [0133.085] wcscat (in: _Dest=0x3d8d098, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav.f0dbec" [0133.085] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav.f0dbec", NtPathName=0xa50fbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\1OmcWiK9Hed.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4b08 [0138.381] FlushFileBuffers (hFile=0x1040) returned 1 [0138.423] CloseHandle (hObject=0x1040) returned 1 [0138.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0138.424] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.424] wcscat (in: _Dest=0x2fe6d88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.424] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0138.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 443 os_tid = 0xc14 [0132.666] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav" (normalized: "c:\\users\\eebsym5\\desktop\\6zbodw8hn 01mzruwex.wav")) returned 0x20 [0132.666] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav", dwFileAttributes=0x20) returned 1 [0132.667] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav" (normalized: "c:\\users\\eebsym5\\desktop\\6zbodw8hn 01mzruwex.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfe4 [0132.667] GetFileSizeEx (in: hFile=0xfe4, lpFileSize=0xa45fa70 | out: lpFileSize=0xa45fa70*=3341) returned 1 [0132.667] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0xd09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.667] ReadFile (in: hFile=0xfe4, lpBuffer=0xa45fa7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa45fa58, lpOverlapped=0x0 | out: lpBuffer=0xa45fa7c*, lpNumberOfBytesRead=0xa45fa58*=0x4, lpOverlapped=0x0) returned 1 [0132.669] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3430 [0132.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef34a8 [0132.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef34d0 [0132.669] NtQuerySystemTime (in: CurrentTime=0xa45f9f8 | out: CurrentTime=0xa45f9f8*=132471540013548000) returned 0x0 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x1dcc3686 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x1a944de0 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x256db8f5 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x21f32675 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x11197824 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x266a3a24 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x1e0dbe73 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x25617af6 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x486e5307 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x52082221 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x7d719c50 [0132.670] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x4c560c12 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x5b18af32 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x28f10f86 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x42bacba5 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x31869773 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x7d3ce551 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x546223fa [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x26fd52c5 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x1f06fb60 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x1887ac0a [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x2234df54 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x35a87cc5 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x42302de4 [0132.671] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x5ede1a6e [0132.672] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x7a44b211 [0132.672] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x557fb9af [0132.672] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x4f955de2 [0132.672] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x7e46b921 [0132.672] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x5330fbb3 [0132.672] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0x67350873 [0132.672] RtlRandomEx (in: Seed=0xa45f9f0 | out: Seed=0xa45f9f0) returned 0xba19f1f [0132.689] ReadFile (in: hFile=0xfe4, lpBuffer=0x80b8498, nNumberOfBytesToRead=0xd0d, lpNumberOfBytesRead=0xa45f9ec, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesRead=0xa45f9ec*=0xd0d, lpOverlapped=0x0) returned 1 [0132.690] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.690] WriteFile (in: hFile=0xfe4, lpBuffer=0x80bc0a0*, nNumberOfBytesToWrite=0xd0d, lpNumberOfBytesWritten=0xa45f9f0, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesWritten=0xa45f9f0*=0xd0d, lpOverlapped=0x0) returned 1 [0133.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0133.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3390 [0133.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0133.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0133.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0133.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0133.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39078) returned 1 [0133.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3f39078 [0133.025] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.025] WriteFile (in: hFile=0xfe4, lpBuffer=0x3d56498*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xa45fa64, lpOverlapped=0x0 | out: lpBuffer=0x3d56498*, lpNumberOfBytesWritten=0xa45fa64*=0x120, lpOverlapped=0x0) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cee0) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39078) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef34a8) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef34f8) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0133.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33150 [0133.086] wcscpy (in: _Dest=0x3f33150, _Source="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav" [0133.086] wcscat (in: _Dest=0x3f33150, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav.f0dbec" [0133.086] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav.f0dbec", NtPathName=0xa45f9e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\6zBoDw8HN 01mZRUWEX.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34560 [0138.293] FlushFileBuffers (hFile=0xfe4) returned 1 [0138.387] CloseHandle (hObject=0xfe4) returned 1 [0138.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7448 [0138.388] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.388] wcscat (in: _Dest=0x2fe7448, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.388] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 [0138.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f395b8) returned 1 Thread: id = 444 os_tid = 0x6fc [0132.690] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods" (normalized: "c:\\users\\eebsym5\\desktop\\7uwsl0.ods")) returned 0x20 [0132.690] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods", dwFileAttributes=0x20) returned 1 [0132.691] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods" (normalized: "c:\\users\\eebsym5\\desktop\\7uwsl0.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1030 [0132.691] GetFileSizeEx (in: hFile=0x1030, lpFileSize=0xa66f8b8 | out: lpFileSize=0xa66f8b8*=8382) returned 1 [0132.691] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x20ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.692] ReadFile (in: hFile=0x1030, lpBuffer=0xa66f8c4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa66f8a0, lpOverlapped=0x0 | out: lpBuffer=0xa66f8c4*, lpNumberOfBytesRead=0xa66f8a0*=0x4, lpOverlapped=0x0) returned 1 [0132.694] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3430 [0132.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef34d0 [0132.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3548 [0132.694] NtQuerySystemTime (in: CurrentTime=0xa66f840 | out: CurrentTime=0xa66f840*=132471540013860000) returned 0x0 [0132.694] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x6178ead4 [0132.694] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x409e5d7a [0132.694] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x50906543 [0132.694] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x6ae750e1 [0132.694] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0xacf44ff [0132.694] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x4c87e936 [0132.694] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x434ac470 [0132.694] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x59f71ef [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x54652323 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x7559f912 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x79a59273 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x66bbbf [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x5040c0e2 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x2c4231c5 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x79cf7ed7 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x266a3a24 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x78dd005a [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x2d386fde [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x524b368f [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x1ac9fcf5 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x3c840cf2 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x3e23e4e7 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x3fac7c6f [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x42cf9383 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x3786af51 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x737a2a3 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x388d6755 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x5072d090 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x291ac1ad [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x46fd65bf [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0xbb5c0e2 [0132.695] RtlRandomEx (in: Seed=0xa66f838 | out: Seed=0xa66f838) returned 0x63a03ef9 [0132.705] ReadFile (in: hFile=0x1030, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x20be, lpNumberOfBytesRead=0xa66f834, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0xa66f834*=0x20be, lpOverlapped=0x0) returned 1 [0132.705] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.705] WriteFile (in: hFile=0x1030, lpBuffer=0x80c38b0*, nNumberOfBytesToWrite=0x20be, lpNumberOfBytesWritten=0xa66f838, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesWritten=0xa66f838*=0x20be, lpOverlapped=0x0) returned 1 [0133.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1748 [0133.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1810 [0133.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1810) returned 1 [0133.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0133.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0133.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 [0133.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39108) returned 1 [0133.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3df42f8 [0133.028] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.028] WriteFile (in: hFile=0x1030, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xa66f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xa66f8ac*=0x106, lpOverlapped=0x0) returned 1 [0133.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0133.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4298) returned 1 [0133.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1810) returned 1 [0133.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df42f8) returned 1 [0133.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1748) returned 1 [0133.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef34d0) returned 1 [0133.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3570) returned 1 [0133.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0133.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7328 [0133.088] wcscpy (in: _Dest=0x2fe7328, _Source="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods") returned="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods" [0133.088] wcscat (in: _Dest=0x2fe7328, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods.f0dbec" [0133.088] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods.f0dbec", NtPathName=0xa66f830, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\7uWSl0.ods.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f331c8 [0138.308] FlushFileBuffers (hFile=0x1030) returned 1 [0138.389] CloseHandle (hObject=0x1030) returned 1 [0138.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7448 [0138.390] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.391] wcscat (in: _Dest=0x2fe7448, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.391] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 [0138.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e572f8) returned 1 Thread: id = 445 os_tid = 0xbf8 [0132.706] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a" (normalized: "c:\\users\\eebsym5\\desktop\\abmxama.m4a")) returned 0x20 [0132.706] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a", dwFileAttributes=0x20) returned 1 [0132.707] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a" (normalized: "c:\\users\\eebsym5\\desktop\\abmxama.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdec [0132.707] GetFileSizeEx (in: hFile=0xdec, lpFileSize=0x845fc10 | out: lpFileSize=0x845fc10*=44487) returned 1 [0132.707] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0xadc3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.707] ReadFile (in: hFile=0xdec, lpBuffer=0x845fc1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x845fbf8, lpOverlapped=0x0 | out: lpBuffer=0x845fc1c*, lpNumberOfBytesRead=0x845fbf8*=0x4, lpOverlapped=0x0) returned 1 [0132.709] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3430 [0132.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3548 [0132.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0132.711] NtQuerySystemTime (in: CurrentTime=0x845fb98 | out: CurrentTime=0x845fb98*=132471540014016000) returned 0x0 [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x686221de [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x7d1de7f0 [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x41402e4e [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x518252ff [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0xec6addb [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x1123fbd [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x2eb3ce47 [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x6c1b72c1 [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x4278030a [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x32610922 [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x78c20a1 [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x677f65d4 [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x36b629aa [0132.711] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x4b7885cb [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x6b467d34 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0xf646ff [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x4c358d39 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x26b27fb4 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x538fc906 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x3e8cbfae [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x3d865571 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x5dd2358 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x7ebb9233 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x750b320c [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x257f7cce [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x3a2739e2 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x16cfb81c [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x3d6d25d4 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x1f3eeb25 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x1a944de0 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x31b7e000 [0132.712] RtlRandomEx (in: Seed=0x845fb90 | out: Seed=0x845fb90) returned 0x631ba65b [0132.723] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.723] ReadFile (in: hFile=0xdec, lpBuffer=0x80c74b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x845fb98, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesRead=0x845fb98*=0x3c00, lpOverlapped=0x0) returned 1 [0132.724] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f39198 [0132.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0132.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3430 [0132.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3430) returned 1 [0132.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0132.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3430 [0132.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0132.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0132.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0132.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39198) returned 1 [0132.733] WriteFile (in: hFile=0xdec, lpBuffer=0x80cb0c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x845fb98, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesWritten=0x845fb98*=0x3c00, lpOverlapped=0x0) returned 1 [0133.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0133.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0133.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df4328 [0133.030] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.030] WriteFile (in: hFile=0xdec, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x845fc04, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x845fc04*=0x108, lpOverlapped=0x0) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f408) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16a8) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4328) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3430) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3548) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0133.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7388 [0133.089] wcscpy (in: _Dest=0x2fe7388, _Source="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a") returned="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a" [0133.090] wcscat (in: _Dest=0x2fe7388, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a.f0dbec" [0133.090] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a.f0dbec", NtPathName=0x845fb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\ABmxaMA.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f33240 [0138.311] FlushFileBuffers (hFile=0xdec) returned 1 [0138.392] CloseHandle (hObject=0xdec) returned 1 [0138.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7448 [0138.393] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.394] wcscat (in: _Dest=0x2fe7448, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.394] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 [0138.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23278) returned 1 Thread: id = 446 os_tid = 0x564 [0132.735] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf" (normalized: "c:\\users\\eebsym5\\desktop\\asxwwko6fg1g-gs3v.pdf")) returned 0x20 [0132.735] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf", dwFileAttributes=0x20) returned 1 [0132.736] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf" (normalized: "c:\\users\\eebsym5\\desktop\\asxwwko6fg1g-gs3v.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdd8 [0132.736] GetFileSizeEx (in: hFile=0xdd8, lpFileSize=0x7a8f960 | out: lpFileSize=0x7a8f960*=44112) returned 1 [0132.736] SetFilePointerEx (in: hFile=0xdd8, liDistanceToMove=0xac4c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.736] ReadFile (in: hFile=0xdd8, lpBuffer=0x7a8f96c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7a8f948, lpOverlapped=0x0 | out: lpBuffer=0x7a8f96c*, lpNumberOfBytesRead=0x7a8f948*=0x4, lpOverlapped=0x0) returned 1 [0132.738] SetFilePointerEx (in: hFile=0xdd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0132.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3638 [0132.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0132.739] NtQuerySystemTime (in: CurrentTime=0x7a8f8e8 | out: CurrentTime=0x7a8f8e8*=132471540014172000) returned 0x0 [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x3bd0e102 [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x2c0bd11a [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x164d8119 [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x5c066ff3 [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x63e58463 [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x725bb39c [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x53e5761c [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x2ea2cf94 [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x255e8fb3 [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x37b1deba [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x4bade2e6 [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x4d937725 [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x1c47864b [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x683e293b [0132.739] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x2aa5a593 [0132.740] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0xfcc6e44 [0132.740] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x59d990f8 [0132.740] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x227c5758 [0132.740] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x19ddb1c0 [0132.740] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x3cd58d33 [0132.740] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x6d8a6768 [0132.740] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x6bb1329b [0132.740] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x2eb16806 [0132.741] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x48132fd3 [0132.741] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x6eaf01d5 [0132.741] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x457112ac [0132.741] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x5179b7d6 [0132.741] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x14bb9899 [0132.741] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x390ad6cd [0132.741] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x33e5b0d2 [0132.741] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x2c8dfdc9 [0132.741] RtlRandomEx (in: Seed=0x7a8f8e0 | out: Seed=0x7a8f8e0) returned 0x41fa7067 [0132.753] SetFilePointerEx (in: hFile=0xdd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.753] ReadFile (in: hFile=0xdd8, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a8f8e8, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0x7a8f8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.753] SetFilePointerEx (in: hFile=0xdd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f391e0 [0132.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0132.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0132.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0132.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0132.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0132.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0132.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3660) returned 1 [0132.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0132.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f391e0) returned 1 [0132.754] WriteFile (in: hFile=0xdd8, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a8f8e8, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x7a8f8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0133.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0133.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f38158 [0133.033] SetFilePointerEx (in: hFile=0xdd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.033] WriteFile (in: hFile=0xdd8, lpBuffer=0x3d56810*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x7a8f954, lpOverlapped=0x0 | out: lpBuffer=0x3d56810*, lpNumberOfBytesWritten=0x7a8f954*=0x11c, lpOverlapped=0x0) returned 1 [0133.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56810) returned 1 [0133.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38198) returned 1 [0133.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3340) returned 1 [0133.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38158) returned 1 [0133.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0133.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3638) returned 1 [0133.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3688) returned 1 [0133.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0133.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f332b8 [0133.092] wcscpy (in: _Dest=0x3f332b8, _Source="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf") returned="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf" [0133.092] wcscat (in: _Dest=0x3f332b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf.f0dbec" [0133.092] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf.f0dbec", NtPathName=0x7a8f8d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\AsxWWkO6fg1g-Gs3v.pdf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f345f0 [0138.315] FlushFileBuffers (hFile=0xdd8) returned 1 [0138.395] CloseHandle (hObject=0xdd8) returned 1 [0138.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7448 [0138.396] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.396] wcscat (in: _Dest=0x2fe7448, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.396] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 [0138.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dd98) returned 1 Thread: id = 447 os_tid = 0x56c [0132.756] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\bixilavbmaw.mp3")) returned 0x20 [0132.757] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3", dwFileAttributes=0x20) returned 1 [0132.757] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\bixilavbmaw.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde8 [0132.757] GetFileSizeEx (in: hFile=0xde8, lpFileSize=0xab8fe98 | out: lpFileSize=0xab8fe98*=37282) returned 1 [0132.757] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x919e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.757] ReadFile (in: hFile=0xde8, lpBuffer=0xab8fea4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xab8fe80, lpOverlapped=0x0 | out: lpBuffer=0xab8fea4*, lpNumberOfBytesRead=0xab8fe80*=0x4, lpOverlapped=0x0) returned 1 [0132.759] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0132.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36d8 [0132.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0132.759] NtQuerySystemTime (in: CurrentTime=0xab8fe20 | out: CurrentTime=0xab8fe20*=132471540014484000) returned 0x0 [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x6d8a70ce [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x1341db8f [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x6611ee22 [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x44d629ca [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x4f14d3a2 [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x5f255a72 [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x73ace4ca [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x70891e54 [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x7b391533 [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x77bcb065 [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x4f3fac62 [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x2e030212 [0132.759] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x586f3254 [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x3f81d0d [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x71d58548 [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x669d2c1b [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x47dac6bf [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x604c87a [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x56d5d181 [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x6e15c6ed [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x6000470d [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x5dd7e97f [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x7f846406 [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x8a50f5c [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x64622565 [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x625cf9d [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x157e56a8 [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x714c29cc [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x693dedd7 [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x5a5b68 [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x4c2948d [0132.760] RtlRandomEx (in: Seed=0xab8fe18 | out: Seed=0xab8fe18) returned 0x70e38e6d [0132.769] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.769] ReadFile (in: hFile=0xde8, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xab8fe20, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xab8fe20*=0x3c00, lpOverlapped=0x0) returned 1 [0132.769] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f39228 [0132.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0132.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0132.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3660) returned 1 [0132.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0132.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0132.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0132.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0132.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0132.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39228) returned 1 [0132.774] WriteFile (in: hFile=0xde8, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xab8fe20, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0xab8fe20*=0x3c00, lpOverlapped=0x0) returned 1 [0133.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0133.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0133.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df8088 [0133.035] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.035] WriteFile (in: hFile=0xde8, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xab8fe8c, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xab8fe8c*=0x110, lpOverlapped=0x0) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8088) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3660) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36d8) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0133.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d7e8 [0133.093] wcscpy (in: _Dest=0x3d8d7e8, _Source="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3" [0133.094] wcscat (in: _Dest=0x3d8d7e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3.f0dbec" [0133.094] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3.f0dbec", NtPathName=0xab8fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\bixILAvbmaW.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5b88 [0138.317] FlushFileBuffers (hFile=0xde8) returned 1 [0138.397] CloseHandle (hObject=0xde8) returned 1 [0138.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7448 [0138.398] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.398] wcscat (in: _Dest=0x2fe7448, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.398] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 [0138.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 Thread: id = 448 os_tid = 0xb48 [0132.774] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods" (normalized: "c:\\users\\eebsym5\\desktop\\c 3b6il45xgd.ods")) returned 0x20 [0132.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods", dwFileAttributes=0x20) returned 1 [0132.775] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods" (normalized: "c:\\users\\eebsym5\\desktop\\c 3b6il45xgd.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde0 [0132.775] GetFileSizeEx (in: hFile=0xde0, lpFileSize=0xac4fcd8 | out: lpFileSize=0xac4fcd8*=61884) returned 1 [0132.775] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0xf1b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.775] ReadFile (in: hFile=0xde0, lpBuffer=0xac4fce4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac4fcc0, lpOverlapped=0x0 | out: lpBuffer=0xac4fce4*, lpNumberOfBytesRead=0xac4fcc0*=0x4, lpOverlapped=0x0) returned 1 [0132.777] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0132.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0132.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0132.777] NtQuerySystemTime (in: CurrentTime=0xac4fc60 | out: CurrentTime=0xac4fc60*=132471540014640000) returned 0x0 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x5117a9fb [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x784dca19 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x273111c8 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x454389a5 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x115766b9 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x66d194c8 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x52bd4151 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x55c2ca17 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x73c6c0e0 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x2ffac8b0 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x6b9ad919 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x1a8f3be4 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x5f59e528 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x7eb0c920 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x7992d6d4 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x320275b6 [0132.777] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x11f422cf [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x297a397f [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x345ccb1b [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x123cb43c [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x6a328a40 [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x1e0cb7f [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x5c64187c [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x4c19a365 [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x3a680d93 [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x31565bc5 [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x57be91bc [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x5c78a518 [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x25f66b4c [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x53db991a [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x3c94fb3d [0132.778] RtlRandomEx (in: Seed=0xac4fc58 | out: Seed=0xac4fc58) returned 0x64069e6c [0132.803] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.803] ReadFile (in: hFile=0xde0, lpBuffer=0x814a060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xac4fc60, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesRead=0xac4fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0132.804] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f39270 [0132.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0132.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0132.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0132.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814dc68 [0132.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0132.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0132.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0132.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0132.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39270) returned 1 [0132.805] WriteFile (in: hFile=0xde0, lpBuffer=0x814dc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xac4fc60, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesWritten=0xac4fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0133.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0133.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0133.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df7988 [0133.038] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.038] WriteFile (in: hFile=0xde0, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xac4fccc, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0xac4fccc*=0x112, lpOverlapped=0x0) returned 1 [0133.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0133.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8210) returned 1 [0133.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17c0) returned 1 [0133.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7988) returned 1 [0133.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0133.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0133.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0133.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0133.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f399a8 [0133.095] wcscpy (in: _Dest=0x3f399a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods") returned="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods" [0133.095] wcscat (in: _Dest=0x3f399a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods.f0dbec" [0133.095] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods.f0dbec", NtPathName=0xac4fc50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\c 3b6IL45xgd.ods.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5988 [0138.320] FlushFileBuffers (hFile=0xde0) returned 1 [0138.399] CloseHandle (hObject=0xde0) returned 1 [0138.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d28 [0138.400] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.400] wcscat (in: _Dest=0x2fe6d28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.400] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0138.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 Thread: id = 449 os_tid = 0x848 [0132.805] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\d88_gvatvihdz_xxx6t_.mp3")) returned 0x20 [0132.805] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3", dwFileAttributes=0x20) returned 1 [0132.806] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\d88_gvatvihdz_xxx6t_.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xddc [0132.806] GetFileSizeEx (in: hFile=0xddc, lpFileSize=0x84afbf8 | out: lpFileSize=0x84afbf8*=88007) returned 1 [0132.806] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x157c3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.806] ReadFile (in: hFile=0xddc, lpBuffer=0x84afc04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x84afbe0, lpOverlapped=0x0 | out: lpBuffer=0x84afc04*, lpNumberOfBytesRead=0x84afbe0*=0x4, lpOverlapped=0x0) returned 1 [0132.808] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0132.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0132.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.808] NtQuerySystemTime (in: CurrentTime=0x84afb80 | out: CurrentTime=0x84afb80*=132471540014952000) returned 0x0 [0132.808] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x53728a9d [0132.808] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x363a1f16 [0132.808] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x60ebbc2 [0132.808] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x79ad06cd [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0xffffc0a [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x1d709161 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x6464eb4a [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x536adeb0 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0xfb9cea2 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x4675e70c [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x4273ccd0 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x292e3611 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x64f744a5 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x752d5b58 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x50fdebc9 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x243c11b7 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x2b2f3c4 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x50aafea5 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x758d5ebb [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x7970ea04 [0132.809] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x46f60ee3 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x37bb5389 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x2e5356d3 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x70e77481 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x1493da92 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x3b84b8f3 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x738c5bd4 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x1843ae33 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x53fa181e [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x15802de9 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x7bd3b8f0 [0132.810] RtlRandomEx (in: Seed=0x84afb78 | out: Seed=0x84afb78) returned 0x4ee9fae2 [0132.832] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.832] ReadFile (in: hFile=0xddc, lpBuffer=0x8151870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84afb80, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesRead=0x84afb80*=0x3c00, lpOverlapped=0x0) returned 1 [0132.832] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f392b8 [0132.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0132.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0132.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0132.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8155478 [0132.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0132.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0132.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0132.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f392b8) returned 1 [0132.833] WriteFile (in: hFile=0xddc, lpBuffer=0x8155478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84afb80, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesWritten=0x84afb80*=0x3c00, lpOverlapped=0x0) returned 1 [0133.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0133.041] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.041] ReadFile (in: hFile=0xddc, lpBuffer=0x8151870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84afb80, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesRead=0x84afb80*=0x3c00, lpOverlapped=0x0) returned 1 [0133.041] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f39108 [0133.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32f70 [0133.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0133.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1798) returned 1 [0133.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8155478 [0133.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0133.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0133.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0133.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 [0133.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39108) returned 1 [0133.042] WriteFile (in: hFile=0xddc, lpBuffer=0x8155478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84afb80, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesWritten=0x84afb80*=0x3c00, lpOverlapped=0x0) returned 1 [0133.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0133.046] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x11bc7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.046] ReadFile (in: hFile=0xddc, lpBuffer=0x8151870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84afb80, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesRead=0x84afb80*=0x3c00, lpOverlapped=0x0) returned 1 [0133.046] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x11bc7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f39108 [0133.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32f70 [0133.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3318 [0133.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3318) returned 1 [0133.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8155478 [0133.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3318 [0133.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32f0 [0133.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f0) returned 1 [0133.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 [0133.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39108) returned 1 [0133.047] WriteFile (in: hFile=0xddc, lpBuffer=0x8155478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84afb80, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesWritten=0x84afb80*=0x3c00, lpOverlapped=0x0) returned 1 [0133.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0133.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e1a8 [0133.051] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.051] WriteFile (in: hFile=0xddc, lpBuffer=0x3e37e00*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x84afbec, lpOverlapped=0x0 | out: lpBuffer=0x3e37e00*, lpNumberOfBytesWritten=0x84afbec*=0x162, lpOverlapped=0x0) returned 1 [0133.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37e00) returned 1 [0133.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0133.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0133.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39108) returned 1 [0133.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e1a8) returned 1 [0133.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0133.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0133.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0133.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5808 [0133.100] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3" [0133.100] wcscat (in: _Dest=0x3dc5808, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3.f0dbec" [0133.100] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3.f0dbec", NtPathName=0x84afb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\d88_gVatVIhdz_XXX6T_.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34680 [0138.328] FlushFileBuffers (hFile=0xddc) returned 1 [0138.406] CloseHandle (hObject=0xddc) returned 1 [0138.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0138.407] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.407] wcscat (in: _Dest=0x2fe6d88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.407] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0138.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39628) returned 1 Thread: id = 450 os_tid = 0x230 [0132.834] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx" (normalized: "c:\\users\\eebsym5\\desktop\\jadf.pptx")) returned 0x20 [0132.834] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx", dwFileAttributes=0x20) returned 1 [0132.835] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx" (normalized: "c:\\users\\eebsym5\\desktop\\jadf.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdc4 [0132.835] GetFileSizeEx (in: hFile=0xdc4, lpFileSize=0xacafbf0 | out: lpFileSize=0xacafbf0*=50964) returned 1 [0132.835] SetFilePointerEx (in: hFile=0xdc4, liDistanceToMove=0xc710, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.835] ReadFile (in: hFile=0xdc4, lpBuffer=0xacafbfc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xacafbd8, lpOverlapped=0x0 | out: lpBuffer=0xacafbfc*, lpNumberOfBytesRead=0xacafbd8*=0x4, lpOverlapped=0x0) returned 1 [0132.837] SetFilePointerEx (in: hFile=0xdc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38b8 [0132.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38e0 [0132.837] NtQuerySystemTime (in: CurrentTime=0xacafb78 | out: CurrentTime=0xacafb78*=132471540015264000) returned 0x0 [0132.837] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x4e13bf22 [0132.837] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x5ee507a5 [0132.837] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x119664fd [0132.837] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x12f6cc1f [0132.837] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x1e0cafa2 [0132.837] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x21405220 [0132.837] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x668a3da9 [0132.837] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x1cf77383 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x65650dc8 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0xeb6b671 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0xbdfd08c [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x7efca0a3 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x54ac7466 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x4d67a084 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x1567f4d0 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x7ed8be3 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x4b1cfed2 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x4e944962 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x13d45502 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x4c44ba64 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x67a42a53 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x80e4d50 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x2df1bf87 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x436ce5f7 [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x1b91164e [0132.838] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x38488bbe [0132.839] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x29c8f55 [0132.839] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x3a1767d8 [0132.839] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x10b28682 [0132.839] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x675c2e99 [0132.839] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x1ac0328c [0132.839] RtlRandomEx (in: Seed=0xacafb70 | out: Seed=0xacafb70) returned 0x218f5c5d [0132.852] SetFilePointerEx (in: hFile=0xdc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.852] ReadFile (in: hFile=0xdc4, lpBuffer=0x8159080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xacafb78, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesRead=0xacafb78*=0x3c00, lpOverlapped=0x0) returned 1 [0132.852] SetFilePointerEx (in: hFile=0xdc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f39300 [0132.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0132.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0132.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0132.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38e0 [0132.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38e0) returned 1 [0132.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0132.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39300) returned 1 [0132.853] WriteFile (in: hFile=0xdc4, lpBuffer=0x815cc88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xacafb78, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesWritten=0xacafb78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0133.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0133.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0133.045] SetFilePointerEx (in: hFile=0xdc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.045] WriteFile (in: hFile=0xdc4, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xacafbe4, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xacafbe4*=0x104, lpOverlapped=0x0) returned 1 [0133.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0133.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32a0) returned 1 [0133.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32c8) returned 1 [0133.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0133.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0133.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0133.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0133.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3930) returned 1 [0133.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe73e8 [0133.097] wcscpy (in: _Dest=0x2fe73e8, _Source="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx") returned="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx" [0133.097] wcscat (in: _Dest=0x2fe73e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx.f0dbec" [0133.097] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx.f0dbec", NtPathName=0xacafb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\JadF.pptx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f33330 [0138.323] FlushFileBuffers (hFile=0xdc4) returned 1 [0138.401] CloseHandle (hObject=0xdc4) returned 1 [0138.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0138.402] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.402] wcscat (in: _Dest=0x2fe6d88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.402] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0138.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57f78) returned 1 Thread: id = 451 os_tid = 0xd1c [0132.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0ecf0 [0132.857] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" [0132.857] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0132.858] wcscat (in: _Dest=0x3e0ecf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\*" [0132.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047170 [0132.858] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\*", lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb3374b0, ftCreationTime.dwHighDateTime=0x1d5e417, ftLastAccessTime.dwLowDateTime=0x38c43680, ftLastAccessTime.dwHighDateTime=0x1d5de0a, ftLastWriteTime.dwLowDateTime=0x38c43680, ftLastWriteTime.dwHighDateTime=0x1d5de0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38118 [0132.858] wcscmp (_String1=".", _String2=".") returned 0 [0132.858] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb3374b0, ftCreationTime.dwHighDateTime=0x1d5e417, ftLastAccessTime.dwLowDateTime=0x38c43680, ftLastAccessTime.dwHighDateTime=0x1d5de0a, ftLastWriteTime.dwLowDateTime=0x38c43680, ftLastWriteTime.dwHighDateTime=0x1d5de0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.858] wcscmp (_String1="..", _String2=".") returned 1 [0132.858] wcscmp (_String1="..", _String2="..") returned 0 [0132.858] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64fbc240, ftCreationTime.dwHighDateTime=0x1d5e792, ftLastAccessTime.dwLowDateTime=0x189b72c0, ftLastAccessTime.dwHighDateTime=0x1d5d9e0, ftLastWriteTime.dwLowDateTime=0x189b72c0, ftLastWriteTime.dwHighDateTime=0x1d5d9e0, nFileSizeHigh=0x0, nFileSizeLow=0xb7db, dwReserved0=0x0, dwReserved1=0x0, cFileName="1uIJE3NJ H1ajW.xlsx", cAlternateFileName="1UIJE3~1.XLS")) returned 1 [0132.858] wcscmp (_String1="1uIJE3NJ H1ajW.xlsx", _String2=".") returned 1 [0132.858] wcscmp (_String1="1uIJE3NJ H1ajW.xlsx", _String2="..") returned 1 [0132.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0132.858] wcscpy (in: _Dest=0x3f32ca0, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" [0132.858] wcscat (in: _Dest=0x3f32ca0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0132.858] wcscat (in: _Dest=0x3f32ca0, _Source="1uIJE3NJ H1ajW.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx" [0133.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0133.700] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67192840, ftCreationTime.dwHighDateTime=0x1d5d821, ftLastAccessTime.dwLowDateTime=0xcc264ab0, ftLastAccessTime.dwHighDateTime=0x1d5e181, ftLastWriteTime.dwLowDateTime=0xcc264ab0, ftLastWriteTime.dwHighDateTime=0x1d5e181, nFileSizeHigh=0x0, nFileSizeLow=0x15343, dwReserved0=0x0, dwReserved1=0x0, cFileName="m68nbXvNhfBCxfOQkj.ots", cAlternateFileName="M68NBX~1.OTS")) returned 1 [0133.700] wcscmp (_String1="m68nbXvNhfBCxfOQkj.ots", _String2=".") returned 1 [0133.701] wcscmp (_String1="m68nbXvNhfBCxfOQkj.ots", _String2="..") returned 1 [0133.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3e88 [0133.701] wcscpy (in: _Dest=0x3dc3e88, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" [0133.701] wcscat (in: _Dest=0x3dc3e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0133.701] wcscat (in: _Dest=0x3dc3e88, _Source="m68nbXvNhfBCxfOQkj.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots" [0133.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0133.702] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3c8590, ftCreationTime.dwHighDateTime=0x1d5e432, ftLastAccessTime.dwLowDateTime=0xb7c20c40, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0xb7c20c40, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0x10d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="p554-.mkv", cAlternateFileName="")) returned 1 [0133.702] wcscmp (_String1="p554-.mkv", _String2=".") returned 1 [0133.702] wcscmp (_String1="p554-.mkv", _String2="..") returned 1 [0133.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c8e0 [0133.702] wcscpy (in: _Dest=0x3d8c8e0, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" [0133.702] wcscat (in: _Dest=0x3d8c8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0133.702] wcscat (in: _Dest=0x3d8c8e0, _Source="p554-.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv" [0133.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0133.704] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaee9f070, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0xa35eeed0, ftLastAccessTime.dwHighDateTime=0x1d5e162, ftLastWriteTime.dwLowDateTime=0xa35eeed0, ftLastWriteTime.dwHighDateTime=0x1d5e162, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RnOGyLr7Z", cAlternateFileName="RNOGYL~1")) returned 1 [0133.704] wcscmp (_String1="RnOGyLr7Z", _String2=".") returned 1 [0133.704] wcscmp (_String1="RnOGyLr7Z", _String2="..") returned 1 [0133.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e688 [0133.704] wcscpy (in: _Dest=0x3d8e688, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" [0133.704] wcscat (in: _Dest=0x3d8e688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0133.704] wcscat (in: _Dest=0x3d8e688, _Source="RnOGyLr7Z" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" [0133.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0133.706] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd970dc0, ftCreationTime.dwHighDateTime=0x1d5e751, ftLastAccessTime.dwLowDateTime=0x2ee81080, ftLastAccessTime.dwHighDateTime=0x1d5e271, ftLastWriteTime.dwLowDateTime=0x2ee81080, ftLastWriteTime.dwHighDateTime=0x1d5e271, nFileSizeHigh=0x0, nFileSizeLow=0x11d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ti3e7tQXB.gif", cAlternateFileName="TI3E7T~1.GIF")) returned 1 [0133.706] wcscmp (_String1="Ti3e7tQXB.gif", _String2=".") returned 1 [0133.706] wcscmp (_String1="Ti3e7tQXB.gif", _String2="..") returned 1 [0133.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5010 [0133.706] wcscpy (in: _Dest=0x2ff5010, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" [0133.706] wcscat (in: _Dest=0x2ff5010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0133.706] wcscat (in: _Dest=0x2ff5010, _Source="Ti3e7tQXB.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif" [0133.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0133.708] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10622b0, ftCreationTime.dwHighDateTime=0x1d5e898, ftLastAccessTime.dwLowDateTime=0xb1fc120, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0xb1fc120, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x87ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YcYXpriLulMQ9E3jJ9.mp4", cAlternateFileName="YCYXPR~1.MP4")) returned 1 [0133.708] wcscmp (_String1="YcYXpriLulMQ9E3jJ9.mp4", _String2=".") returned 1 [0133.708] wcscmp (_String1="YcYXpriLulMQ9E3jJ9.mp4", _String2="..") returned 1 [0133.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5608 [0133.708] wcscpy (in: _Dest=0x3dc5608, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3" [0133.708] wcscat (in: _Dest=0x3dc5608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0133.708] wcscat (in: _Dest=0x3dc5608, _Source="YcYXpriLulMQ9E3jJ9.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4" [0133.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0133.709] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10622b0, ftCreationTime.dwHighDateTime=0x1d5e898, ftLastAccessTime.dwLowDateTime=0xb1fc120, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0xb1fc120, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x87ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YcYXpriLulMQ9E3jJ9.mp4", cAlternateFileName="YCYXPR~1.MP4")) returned 0 [0133.709] FindClose (in: hFindFile=0x3f38118 | out: hFindFile=0x3f38118) returned 1 [0133.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047170) returned 1 [0133.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 [0133.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e581a8) returned 1 Thread: id = 452 os_tid = 0xd08 [0132.859] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt" (normalized: "c:\\users\\eebsym5\\desktop\\k3yuy4.odt")) returned 0x20 [0132.859] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt", dwFileAttributes=0x20) returned 1 [0132.859] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt" (normalized: "c:\\users\\eebsym5\\desktop\\k3yuy4.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdd4 [0132.860] GetFileSizeEx (in: hFile=0xdd4, lpFileSize=0xaa9fdc0 | out: lpFileSize=0xaa9fdc0*=59372) returned 1 [0132.860] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0xe7e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.860] ReadFile (in: hFile=0xdd4, lpBuffer=0xaa9fdcc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaa9fda8, lpOverlapped=0x0 | out: lpBuffer=0xaa9fdcc*, lpNumberOfBytesRead=0xaa9fda8*=0x4, lpOverlapped=0x0) returned 1 [0132.861] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0132.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3980 [0132.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39a8 [0132.862] NtQuerySystemTime (in: CurrentTime=0xaa9fd48 | out: CurrentTime=0xaa9fd48*=132471540015420000) returned 0x0 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x15762cbf [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x59f163 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0xa493c4f [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x165bddcc [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x6cb78479 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x2e030212 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x1b12059d [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x6a7c8812 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x66dae9fe [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x46d9c234 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x33e6e71 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x2dc60b8d [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x4e256b96 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x1beb4991 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x459c3bd1 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x10919f6d [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x3ffb00cc [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x64ef785d [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0xd3076ca [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x5eebd72b [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x8b0f746 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x30ccfa60 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x2d102a78 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x55c91fc6 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x57a4a143 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x42cf1ef4 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x4b05812 [0132.862] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x225cfd80 [0132.863] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x45f5eea0 [0132.863] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x128c3b6d [0132.863] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x7c961454 [0132.863] RtlRandomEx (in: Seed=0xaa9fd40 | out: Seed=0xaa9fd40) returned 0x729e064b [0132.878] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.878] ReadFile (in: hFile=0xdd4, lpBuffer=0x8160890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaa9fd48, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0xaa9fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0132.878] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f39390 [0132.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0132.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0132.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0132.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0132.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0132.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39a8 [0132.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39a8) returned 1 [0132.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0132.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39390) returned 1 [0132.880] WriteFile (in: hFile=0xdd4, lpBuffer=0x8164498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaa9fd48, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesWritten=0xaa9fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0133.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0133.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0133.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e6f6a8 [0133.050] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.050] WriteFile (in: hFile=0xdd4, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xaa9fdb4, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0xaa9fdb4*=0x106, lpOverlapped=0x0) returned 1 [0133.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0133.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f8b8) returned 1 [0133.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f0) returned 1 [0133.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f6a8) returned 1 [0133.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0133.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3980) returned 1 [0133.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0133.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39f8) returned 1 [0133.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7448 [0133.098] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt") returned="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt" [0133.098] wcscat (in: _Dest=0x2fe7448, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt.f0dbec" [0133.098] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt.f0dbec", NtPathName=0xaa9fd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\K3yUy4.odt.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x348f48 [0138.326] FlushFileBuffers (hFile=0xdd4) returned 1 [0138.403] CloseHandle (hObject=0xdd4) returned 1 [0138.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0138.404] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.404] wcscat (in: _Dest=0x2fe6d88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.404] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0138.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e572a8) returned 1 Thread: id = 453 os_tid = 0xd54 [0132.881] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\ml7dlomddabgaltri.bmp")) returned 0x20 [0132.881] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp", dwFileAttributes=0x20) returned 1 [0132.882] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\ml7dlomddabgaltri.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdcc [0132.882] GetFileSizeEx (in: hFile=0xdcc, lpFileSize=0xa5afeb8 | out: lpFileSize=0xa5afeb8*=70427) returned 1 [0132.882] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x11317, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.882] ReadFile (in: hFile=0xdcc, lpBuffer=0xa5afec4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa5afea0, lpOverlapped=0x0 | out: lpBuffer=0xa5afec4*, lpNumberOfBytesRead=0xa5afea0*=0x4, lpOverlapped=0x0) returned 1 [0132.884] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39a8 [0132.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0132.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0132.885] NtQuerySystemTime (in: CurrentTime=0xa5afe40 | out: CurrentTime=0xa5afe40*=132471540015732000) returned 0x0 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x7db0da52 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x4d6fd292 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0xe20398c [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x638e9cd6 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x6cbbb72b [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x15e6f2d [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x14eeafd7 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x2a73addb [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x2a4355ea [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0xbba6fd [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x3f145aaf [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x4e6970a2 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x2fe9d030 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x4c9630cc [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x48868ac8 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x38177311 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x449b8bd9 [0132.885] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x6ea6a2e3 [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x14d4201a [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x974d38e [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0xae62c60 [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0xe59e88a [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x4f6adbfb [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x797b3a1e [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x367505df [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x1f21dc5d [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x4d3d8362 [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x77dbc3cb [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0xa87c9f1 [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x3ca16453 [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x4ada96db [0132.886] RtlRandomEx (in: Seed=0xa5afe38 | out: Seed=0xa5afe38) returned 0x2c37b1ab [0132.900] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.900] ReadFile (in: hFile=0xdcc, lpBuffer=0x81680a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa5afe40, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesRead=0xa5afe40*=0x3c00, lpOverlapped=0x0) returned 1 [0132.900] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f393d8 [0132.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0132.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39a8 [0132.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39a8) returned 1 [0132.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816bca8 [0132.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39a8 [0132.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0132.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0132.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0132.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f393d8) returned 1 [0132.901] WriteFile (in: hFile=0xdcc, lpBuffer=0x816bca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa5afe40, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesWritten=0xa5afe40*=0x3c00, lpOverlapped=0x0) returned 1 [0133.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0133.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0133.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f381d8 [0133.053] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.053] WriteFile (in: hFile=0xdcc, lpBuffer=0x3d56f00*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xa5afeac, lpOverlapped=0x0 | out: lpBuffer=0x3d56f00*, lpNumberOfBytesWritten=0xa5afeac*=0x11c, lpOverlapped=0x0) returned 1 [0133.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 [0133.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38218) returned 1 [0133.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1798) returned 1 [0133.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f381d8) returned 1 [0133.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39a8) returned 1 [0133.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0133.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0133.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0133.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e67ca0 [0133.102] wcscpy (in: _Dest=0x3e67ca0, _Source="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp" [0133.102] wcscat (in: _Dest=0x3e67ca0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp.f0dbec" [0133.102] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp.f0dbec", NtPathName=0xa5afe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\ml7dLOMDDabGAltri.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34710 [0138.335] FlushFileBuffers (hFile=0xdcc) returned 1 [0138.409] CloseHandle (hObject=0xdcc) returned 1 [0138.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0138.409] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.409] wcscat (in: _Dest=0x2fe6d88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.409] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0138.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ca80) returned 1 Thread: id = 454 os_tid = 0x8d0 [0132.901] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\nxo0g2y cgrhavdr.mp3")) returned 0x20 [0132.901] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3", dwFileAttributes=0x20) returned 1 [0132.902] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\nxo0g2y cgrhavdr.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdd0 [0132.902] GetFileSizeEx (in: hFile=0xdd0, lpFileSize=0x889fad8 | out: lpFileSize=0x889fad8*=29922) returned 1 [0132.902] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x74de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.902] ReadFile (in: hFile=0xdd0, lpBuffer=0x889fae4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x889fac0, lpOverlapped=0x0 | out: lpBuffer=0x889fae4*, lpNumberOfBytesRead=0x889fac0*=0x4, lpOverlapped=0x0) returned 1 [0132.904] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0132.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0132.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0132.904] NtQuerySystemTime (in: CurrentTime=0x889fa60 | out: CurrentTime=0x889fa60*=132471540015888000) returned 0x0 [0132.904] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x2336c9c9 [0132.904] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x6f2f7acf [0132.904] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x5b3ffd6f [0132.904] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x21f240ae [0132.904] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x77598d2d [0132.904] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x2e698040 [0132.904] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x2b383095 [0132.904] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x251c13a1 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x7728c913 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x352dfacd [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x4dbe0da2 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x8a30a55 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x7dd2b4b [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x86206d [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x5499c07f [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x641581b7 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0xfc62dae [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x188ec810 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x11acc2d5 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x428ffdde [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x1868588 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x77272bcf [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x55d31142 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x4e316ff6 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x2f9a8072 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x1b03cb08 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x2ea95d26 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x28c1f1e7 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x4b502d97 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x2936847 [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x7dada60d [0132.905] RtlRandomEx (in: Seed=0x889fa58 | out: Seed=0x889fa58) returned 0x6055f4ed [0132.914] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.914] ReadFile (in: hFile=0xdd0, lpBuffer=0x816f8b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x889fa60, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesRead=0x889fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0132.914] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cce8 [0132.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0132.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0132.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0132.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81734b8 [0132.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0132.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0132.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0132.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0132.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cce8) returned 1 [0132.915] WriteFile (in: hFile=0xdd0, lpBuffer=0x81734b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x889fa60, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesWritten=0x889fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0133.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0133.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0133.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f38258 [0133.056] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.056] WriteFile (in: hFile=0xdd0, lpBuffer=0x3d57028*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x889facc, lpOverlapped=0x0 | out: lpBuffer=0x3d57028*, lpNumberOfBytesWritten=0x889facc*=0x11a, lpOverlapped=0x0) returned 1 [0133.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57028) returned 1 [0133.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38298) returned 1 [0133.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3318) returned 1 [0133.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38258) returned 1 [0133.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0133.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0133.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0133.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0133.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67d18 [0133.104] wcscpy (in: _Dest=0x3e67d18, _Source="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3" [0133.104] wcscat (in: _Dest=0x3e67d18, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3.f0dbec" [0133.104] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3.f0dbec", NtPathName=0x889fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\nxo0G2y CGrHAVdR.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f5b0 [0138.333] FlushFileBuffers (hFile=0xdd0) returned 1 [0138.384] CloseHandle (hObject=0xdd0) returned 1 [0138.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7448 [0138.385] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.385] wcscat (in: _Dest=0x2fe7448, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.385] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 [0138.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 Thread: id = 455 os_tid = 0x924 [0132.916] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\nyuv12ih.mp4")) returned 0x20 [0132.916] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4", dwFileAttributes=0x20) returned 1 [0132.916] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\nyuv12ih.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda0 [0132.917] GetFileSizeEx (in: hFile=0xda0, lpFileSize=0xa40f848 | out: lpFileSize=0xa40f848*=69788) returned 1 [0132.917] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x11098, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.917] ReadFile (in: hFile=0xda0, lpBuffer=0xa40f854, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa40f830, lpOverlapped=0x0 | out: lpBuffer=0xa40f854*, lpNumberOfBytesRead=0xa40f830*=0x4, lpOverlapped=0x0) returned 1 [0132.918] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0132.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0132.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0132.918] NtQuerySystemTime (in: CurrentTime=0xa40f7d0 | out: CurrentTime=0xa40f7d0*=132471540016044000) returned 0x0 [0132.918] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x6e5917a5 [0132.918] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x7699e089 [0132.918] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x67ecedf2 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x1e7c71e8 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x29ca52c8 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x760f8b6a [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x42c45d52 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x5d093942 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x331d80fd [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x6d85e0d4 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x3dbc561a [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x367823f5 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x5565a6c6 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x4500883f [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x35a37c7b [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x5cdd74ec [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x72f351dc [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x60218acb [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x6cca00e3 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x7555e996 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x2379a8e0 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x7b1f7f2c [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x6e41041f [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x3ddc658 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x743f54a [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x3d7291ca [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x7272f47c [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x14b00055 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0xadc3828 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x26fd52c5 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x3da43d70 [0132.919] RtlRandomEx (in: Seed=0xa40f7c8 | out: Seed=0xa40f7c8) returned 0x3223d217 [0132.929] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.929] ReadFile (in: hFile=0xda0, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa40f7d0, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0xa40f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0132.929] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cd78 [0132.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0132.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0132.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0132.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817acc8 [0132.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0132.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0132.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0132.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0132.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd78) returned 1 [0132.939] WriteFile (in: hFile=0xda0, lpBuffer=0x817acc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa40f7d0, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesWritten=0xa40f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0133.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0133.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6f798 [0133.059] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.059] WriteFile (in: hFile=0xda0, lpBuffer=0x8096850*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xa40f83c, lpOverlapped=0x0 | out: lpBuffer=0x8096850*, lpNumberOfBytesWritten=0xa40f83c*=0x10a, lpOverlapped=0x0) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8096850) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f828) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f798) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bd8) returned 1 [0133.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e1a8 [0133.105] wcscpy (in: _Dest=0x3d8e1a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4") returned="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4" [0133.106] wcscat (in: _Dest=0x3d8e1a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4.f0dbec" [0133.106] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4.f0dbec", NtPathName=0xa40f7c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\nYUV12ih.mp4.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67d90 [0138.337] FlushFileBuffers (hFile=0xda0) returned 1 [0138.411] CloseHandle (hObject=0xda0) returned 1 [0138.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0138.412] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.412] wcscat (in: _Dest=0x2fe6d88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.412] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0138.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23748) returned 1 Thread: id = 456 os_tid = 0x75c [0132.940] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi" (normalized: "c:\\users\\eebsym5\\desktop\\pizzp02yg-c2y7y8r_16.avi")) returned 0x20 [0132.940] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi", dwFileAttributes=0x20) returned 1 [0132.941] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi" (normalized: "c:\\users\\eebsym5\\desktop\\pizzp02yg-c2y7y8r_16.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd8c [0132.941] GetFileSizeEx (in: hFile=0xd8c, lpFileSize=0xb81f7b0 | out: lpFileSize=0xb81f7b0*=47216) returned 1 [0132.941] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0xb86c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.941] ReadFile (in: hFile=0xd8c, lpBuffer=0xb81f7bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb81f798, lpOverlapped=0x0 | out: lpBuffer=0xb81f7bc*, lpNumberOfBytesRead=0xb81f798*=0x4, lpOverlapped=0x0) returned 1 [0132.943] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0132.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c00 [0132.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0132.943] NtQuerySystemTime (in: CurrentTime=0xb81f738 | out: CurrentTime=0xb81f738*=132471540016356000) returned 0x0 [0132.943] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x4d0b8442 [0132.943] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x72ce41f9 [0132.943] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x1a6c1c0b [0132.943] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x511e5ebb [0132.943] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x19bbb930 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x434a2a69 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x73eacefb [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x7bf39f8e [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x5e65797d [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x3b6d9966 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0xb9ff9c7 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x4f9e8135 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x459b4e09 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x48dec7b6 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x4257d45c [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x847ff97 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x1120d8c0 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x4d9334e2 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x19a54697 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x648945c8 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x547082bb [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x261b7157 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x3c42fda1 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x3a813f16 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x7cfcc55e [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x4a47a9d3 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x7c94b70d [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x1fb042c3 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0xe69840a [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x1016ce92 [0132.944] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x3ff59327 [0132.945] RtlRandomEx (in: Seed=0xb81f730 | out: Seed=0xb81f730) returned 0x1db9b8d5 [0132.956] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.956] ReadFile (in: hFile=0xd8c, lpBuffer=0x817e8d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb81f738, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesRead=0xb81f738*=0x3c00, lpOverlapped=0x0) returned 1 [0132.957] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cd30 [0132.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0132.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0132.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0132.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81824d8 [0132.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0132.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0132.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0132.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0132.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd30) returned 1 [0132.958] WriteFile (in: hFile=0xd8c, lpBuffer=0x81824d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb81f738, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesWritten=0xb81f738*=0x3c00, lpOverlapped=0x0) returned 1 [0133.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0133.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0133.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5ce50 [0133.063] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.063] WriteFile (in: hFile=0xd8c, lpBuffer=0x3ef7d68*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xb81f7a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef7d68*, lpNumberOfBytesWritten=0xb81f7a4*=0x122, lpOverlapped=0x0) returned 1 [0133.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0133.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e510b8) returned 1 [0133.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e58) returned 1 [0133.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce50) returned 1 [0133.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0133.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c00) returned 1 [0133.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0133.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0133.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc3d08 [0133.108] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi" [0133.108] wcscat (in: _Dest=0x3dc3d08, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi.f0dbec" [0133.108] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi.f0dbec", NtPathName=0xb81f728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\pizzp02Yg-c2y7Y8r_16.avi.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f347a0 [0138.379] FlushFileBuffers (hFile=0xd8c) returned 1 [0138.417] CloseHandle (hObject=0xd8c) returned 1 [0138.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0138.422] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.422] wcscat (in: _Dest=0x2fe6d88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.422] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0138.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39698) returned 1 Thread: id = 457 os_tid = 0x8cc [0132.958] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png" (normalized: "c:\\users\\eebsym5\\desktop\\qygvhr1vbsrulzb b0g.png")) returned 0x20 [0132.959] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png", dwFileAttributes=0x20) returned 1 [0132.959] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png" (normalized: "c:\\users\\eebsym5\\desktop\\qygvhr1vbsrulzb b0g.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdbc [0132.960] GetFileSizeEx (in: hFile=0xdbc, lpFileSize=0xabcfa58 | out: lpFileSize=0xabcfa58*=92114) returned 1 [0132.960] SetFilePointerEx (in: hFile=0xdbc, liDistanceToMove=0x167ce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.960] ReadFile (in: hFile=0xdbc, lpBuffer=0xabcfa64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xabcfa40, lpOverlapped=0x0 | out: lpBuffer=0xabcfa64*, lpNumberOfBytesRead=0xabcfa40*=0x4, lpOverlapped=0x0) returned 1 [0132.962] SetFilePointerEx (in: hFile=0xdbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0132.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0132.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cc8 [0132.962] NtQuerySystemTime (in: CurrentTime=0xabcf9e0 | out: CurrentTime=0xabcf9e0*=132471540016512000) returned 0x0 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x6410c985 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x37f614f5 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x2497459 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x4ce7d1e2 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x1530b315 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x1791db72 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x6ae43e3b [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x1a767fc2 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x2b8d7882 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x6729892b [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x521207a0 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x29a85c9e [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x68f100c5 [0132.962] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x4c922062 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x1f31a1d4 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x1297a58e [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x3e3d519c [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x57c90e9a [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x10e38742 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x139e1327 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x23eb8135 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x6af00724 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x51155f7f [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x528b5e40 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x3d8b20c8 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x7691b819 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x259766c3 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x48f2e5cf [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x4d12aaa2 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x700d8699 [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x2fa9245b [0132.963] RtlRandomEx (in: Seed=0xabcf9d8 | out: Seed=0xabcf9d8) returned 0x7df9b5c6 [0132.986] SetFilePointerEx (in: hFile=0xdbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.986] ReadFile (in: hFile=0xdbc, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xabcf9e0, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0xabcf9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0132.987] SetFilePointerEx (in: hFile=0xdbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cca0 [0132.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0132.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0132.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0132.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0132.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0132.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cc8 [0132.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0132.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0132.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0132.987] WriteFile (in: hFile=0xdbc, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xabcf9e0, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0xabcf9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0133.072] SetFilePointerEx (in: hFile=0xdbc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.072] ReadFile (in: hFile=0xdbc, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xabcf9e0, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0xabcf9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.073] SetFilePointerEx (in: hFile=0xdbc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e51340 [0133.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32f70 [0133.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1770 [0133.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0133.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0133.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1770 [0133.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1838 [0133.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0133.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 [0133.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51340) returned 1 [0133.074] WriteFile (in: hFile=0xdbc, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xabcf9e0, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0xabcf9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0133.075] SetFilePointerEx (in: hFile=0xdbc, liDistanceToMove=0x12bd2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.075] ReadFile (in: hFile=0xdbc, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xabcf9e0, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0xabcf9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.076] SetFilePointerEx (in: hFile=0xdbc, liDistanceToMove=0x12bd2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e51340 [0133.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32f70 [0133.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1838 [0133.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0133.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0133.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1838 [0133.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0133.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0133.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 [0133.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51340) returned 1 [0133.077] WriteFile (in: hFile=0xdbc, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xabcf9e0, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0xabcf9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0133.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8baa8 [0133.079] SetFilePointerEx (in: hFile=0xdbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.079] WriteFile (in: hFile=0xdbc, lpBuffer=0x3dcd898*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0xabcfa4c, lpOverlapped=0x0 | out: lpBuffer=0x3dcd898*, lpNumberOfBytesWritten=0xabcfa4c*=0x160, lpOverlapped=0x0) returned 1 [0133.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd898) returned 1 [0133.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f50) returned 1 [0133.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0133.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51340) returned 1 [0133.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8baa8) returned 1 [0133.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0133.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0133.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3db8) returned 1 [0133.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67e08 [0133.113] wcscpy (in: _Dest=0x3e67e08, _Source="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png") returned="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png" [0133.113] wcscat (in: _Dest=0x3e67e08, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png.f0dbec" [0133.113] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png.f0dbec", NtPathName=0xabcf9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\QYGVhr1vbSruLZB b0G.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34830 [0137.010] FlushFileBuffers (hFile=0xdbc) returned 1 [0137.576] CloseHandle (hObject=0xdbc) returned 1 [0137.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6fc8 [0137.778] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0137.778] wcscat (in: _Dest=0x2fe6fc8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0137.778] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0xffffffff [0138.186] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1010 [0138.276] WriteFile (in: hFile=0x1010, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xabcf9f4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xabcf9f4*=0x70c, lpOverlapped=0x0) returned 1 [0138.282] CloseHandle (hObject=0x1010) returned 1 [0138.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 [0138.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39708) returned 1 Thread: id = 458 os_tid = 0x920 [0132.988] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\rczmza6klzadufm.mp4")) returned 0x20 [0132.988] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4", dwFileAttributes=0x20) returned 1 [0132.989] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\rczmza6klzadufm.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdc0 [0132.989] GetFileSizeEx (in: hFile=0xdc0, lpFileSize=0x910fbc8 | out: lpFileSize=0x910fbc8*=58232) returned 1 [0132.989] SetFilePointerEx (in: hFile=0xdc0, liDistanceToMove=0xe374, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.989] ReadFile (in: hFile=0xdc0, lpBuffer=0x910fbd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x910fbb0, lpOverlapped=0x0 | out: lpBuffer=0x910fbd4*, lpNumberOfBytesRead=0x910fbb0*=0x4, lpOverlapped=0x0) returned 1 [0132.991] SetFilePointerEx (in: hFile=0xdc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cc8 [0132.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3de0 [0132.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0132.992] NtQuerySystemTime (in: CurrentTime=0x910fb50 | out: CurrentTime=0x910fb50*=132471540016824000) returned 0x0 [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x6fbeb4d [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x4c6747a2 [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x2722f7b9 [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x14a7176c [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x786dc71e [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x6b64428c [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x4c441138 [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x2b99ce7f [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x2990a5ee [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x767ce0d7 [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x401345bb [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x4e42a558 [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x26c37155 [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x3ca6f1e5 [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x5e48fe84 [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x62e9902f [0132.992] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0xc594822 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x2a6fe975 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x16db6416 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x4da61d76 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x1f4a9af0 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x20ff4f23 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0xc405a29 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x4c7f48ca [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x7f505f88 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x1438873b [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x14067d9b [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x7446d72f [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x4432177a [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x12297ca2 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x7c81c131 [0132.993] RtlRandomEx (in: Seed=0x910fb48 | out: Seed=0x910fb48) returned 0x64af0b65 [0133.139] SetFilePointerEx (in: hFile=0xdc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.139] ReadFile (in: hFile=0xdc0, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x910fb50, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0x910fb50*=0x3c00, lpOverlapped=0x0) returned 1 [0133.139] SetFilePointerEx (in: hFile=0xdc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f38808 [0133.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32520 [0133.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cc8 [0133.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0133.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0133.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cc8 [0133.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0133.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0133.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 [0133.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38808) returned 1 [0133.140] WriteFile (in: hFile=0xdc0, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x910fb50, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0x910fb50*=0x3c00, lpOverlapped=0x0) returned 1 [0133.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0133.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0133.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfdd0 [0133.202] SetFilePointerEx (in: hFile=0xdc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.202] WriteFile (in: hFile=0xdc0, lpBuffer=0x3d57028*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x910fbbc, lpOverlapped=0x0 | out: lpBuffer=0x3d57028*, lpNumberOfBytesWritten=0x910fbbc*=0x118, lpOverlapped=0x0) returned 1 [0133.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57028) returned 1 [0133.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe10) returned 1 [0133.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0133.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfdd0) returned 1 [0133.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0133.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3de0) returned 1 [0133.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3db8) returned 1 [0133.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0133.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39af8 [0133.204] wcscpy (in: _Dest=0x3f39af8, _Source="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4") returned="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4" [0133.204] wcscat (in: _Dest=0x3f39af8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4.f0dbec" [0133.204] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4.f0dbec", NtPathName=0x910fb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\RCZMza6KLZAdUFM.mp4.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f638 [0138.252] FlushFileBuffers (hFile=0xdc0) returned 1 [0138.253] CloseHandle (hObject=0xdc0) returned 1 [0138.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe40e8 [0138.255] wcscpy (in: _Dest=0x2fe40e8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.255] wcscat (in: _Dest=0x2fe40e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.255] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe40e8) returned 1 [0138.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ac08) returned 1 Thread: id = 459 os_tid = 0x7f0 [0133.141] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png" (normalized: "c:\\users\\eebsym5\\desktop\\rzhjjdlrqk9ck95atpq.png")) returned 0x20 [0133.141] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png", dwFileAttributes=0x20) returned 1 [0135.050] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png" (normalized: "c:\\users\\eebsym5\\desktop\\rzhjjdlrqk9ck95atpq.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf98 [0135.050] GetFileSizeEx (in: hFile=0xf98, lpFileSize=0xb48f9a8 | out: lpFileSize=0xb48f9a8*=16842) returned 1 [0135.050] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x41c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.050] ReadFile (in: hFile=0xf98, lpBuffer=0xb48f9b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb48f990, lpOverlapped=0x0 | out: lpBuffer=0xb48f9b4*, lpNumberOfBytesRead=0xb48f990*=0x4, lpOverlapped=0x0) returned 1 [0135.051] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0135.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0135.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0135.051] NtQuerySystemTime (in: CurrentTime=0xb48f930 | out: CurrentTime=0xb48f930*=132471540037416000) returned 0x0 [0135.051] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x7959ee62 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x1d6e6dcf [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x27e163a2 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0xc93f9d9 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x59d14361 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x48e67411 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x401136b8 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x173872a6 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x62732e76 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x3d14bf0f [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x54f57e7 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x4841b321 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x32d34874 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x19da670b [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x2cd94ba3 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x1bf3ef8 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x67c2945e [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x76676afa [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0xcd6f777 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x6b3324b5 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x367a5d62 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x5ae3698f [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x595eca22 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x2ba00b00 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x100e4c2a [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x183b92be [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x10c085de [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x35f9d322 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x3a489860 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x18e29964 [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x6ebf39bd [0135.052] RtlRandomEx (in: Seed=0xb48f928 | out: Seed=0xb48f928) returned 0x654bd107 [0135.061] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.061] ReadFile (in: hFile=0xf98, lpBuffer=0x82a6498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb48f930, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesRead=0xb48f930*=0x3c00, lpOverlapped=0x0) returned 1 [0135.061] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f319b8 [0135.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b460 [0135.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0135.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0135.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82aa0a0 [0135.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0135.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0135.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0135.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b460) returned 1 [0135.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f319b8) returned 1 [0135.062] WriteFile (in: hFile=0xf98, lpBuffer=0x82aa0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb48f930, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesWritten=0xb48f930*=0x3c00, lpOverlapped=0x0) returned 1 [0135.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0135.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0135.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3f31970 [0135.288] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.288] WriteFile (in: hFile=0xf98, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xb48f99c, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0xb48f99c*=0x120, lpOverlapped=0x0) returned 1 [0135.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0135.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f322b8) returned 1 [0135.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0135.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31970) returned 1 [0135.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0135.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0135.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0135.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb58) returned 1 [0135.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b5c8 [0135.391] wcscpy (in: _Dest=0x3f0b5c8, _Source="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png") returned="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png" [0135.391] wcscat (in: _Dest=0x3f0b5c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png.f0dbec" [0135.391] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png.f0dbec", NtPathName=0xb48f920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\rzHjJDlRQK9cK95aTPQ.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34f80 [0138.226] FlushFileBuffers (hFile=0xf98) returned 1 [0138.229] CloseHandle (hObject=0xf98) returned 1 [0138.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0138.230] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.230] wcscat (in: _Dest=0x2fe6c68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.230] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0138.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39778) returned 1 Thread: id = 460 os_tid = 0x8d8 [0133.147] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav" (normalized: "c:\\users\\eebsym5\\desktop\\snoveeucdjpcliz.wav")) returned 0x20 [0133.147] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav", dwFileAttributes=0x20) returned 1 [0135.036] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav" (normalized: "c:\\users\\eebsym5\\desktop\\snoveeucdjpcliz.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfe8 [0135.036] GetFileSizeEx (in: hFile=0xfe8, lpFileSize=0xb8cfc40 | out: lpFileSize=0xb8cfc40*=23113) returned 1 [0135.036] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x5a45, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.036] ReadFile (in: hFile=0xfe8, lpBuffer=0xb8cfc4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb8cfc28, lpOverlapped=0x0 | out: lpBuffer=0xb8cfc4c*, lpNumberOfBytesRead=0xb8cfc28*=0x4, lpOverlapped=0x0) returned 1 [0135.038] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0135.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0135.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0135.038] NtQuerySystemTime (in: CurrentTime=0xb8cfbc8 | out: CurrentTime=0xb8cfbc8*=132471540037260000) returned 0x0 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x2716f0d7 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x5bbb2b20 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x2a051848 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x77d91ce4 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x7740f9e2 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x3b0917 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0xa4fc641 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x1df22797 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x5e07f014 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x39b36f86 [0135.038] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x3a0638ed [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x77ad3cce [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x72de348d [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x4e41d392 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x4b2e9592 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x613a8792 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x364f84a2 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x1c4677c2 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x123c7039 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x4352024e [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x6698e8d [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x72691231 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x5a9b5a51 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x54394770 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x7ec8648c [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x65a70396 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x87530a2 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x3719e5ba [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x7a8555bb [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x75d23b33 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x4572bba4 [0135.039] RtlRandomEx (in: Seed=0xb8cfbc0 | out: Seed=0xb8cfbc0) returned 0x1bf7d7e6 [0135.048] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.048] ReadFile (in: hFile=0xfe8, lpBuffer=0x829ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb8cfbc8, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesRead=0xb8cfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.048] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f319b8 [0135.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b460 [0135.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0135.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0135.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0135.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0135.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0135.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0135.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b460) returned 1 [0135.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f319b8) returned 1 [0135.049] WriteFile (in: hFile=0xfe8, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb8cfbc8, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0xb8cfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0135.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0135.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0110 [0135.285] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.285] WriteFile (in: hFile=0xfe8, lpBuffer=0x3d573a0*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xb8cfc34, lpOverlapped=0x0 | out: lpBuffer=0x3d573a0*, lpNumberOfBytesWritten=0xb8cfc34*=0x118, lpOverlapped=0x0) returned 1 [0135.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d573a0) returned 1 [0135.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcff50) returned 1 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0b8) returned 1 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0110) returned 1 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0135.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33588 [0135.389] wcscpy (in: _Dest=0x3f33588, _Source="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav" [0135.389] wcscat (in: _Dest=0x3f33588, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav.f0dbec" [0135.389] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav.f0dbec", NtPathName=0xb8cfbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\SNoveEUCdjPCLIz.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2fb88 [0138.219] FlushFileBuffers (hFile=0xfe8) returned 1 [0138.227] CloseHandle (hObject=0xfe8) returned 1 [0138.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a28 [0138.228] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.228] wcscat (in: _Dest=0x2fe6a28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.228] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0138.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d5e0) returned 1 Thread: id = 461 os_tid = 0x8ec [0133.148] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf" (normalized: "c:\\users\\eebsym5\\desktop\\u2ad_ffs8tbxmn.swf")) returned 0x20 [0133.148] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf", dwFileAttributes=0x20) returned 1 [0135.003] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf" (normalized: "c:\\users\\eebsym5\\desktop\\u2ad_ffs8tbxmn.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdb4 [0135.003] GetFileSizeEx (in: hFile=0xdb4, lpFileSize=0x7e7f8f0 | out: lpFileSize=0x7e7f8f0*=87942) returned 1 [0135.003] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x15782, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.004] ReadFile (in: hFile=0xdb4, lpBuffer=0x7e7f8fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e7f8d8, lpOverlapped=0x0 | out: lpBuffer=0x7e7f8fc*, lpNumberOfBytesRead=0x7e7f8d8*=0x4, lpOverlapped=0x0) returned 1 [0135.024] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0135.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0135.024] NtQuerySystemTime (in: CurrentTime=0x7e7f878 | out: CurrentTime=0x7e7f878*=132471540037104000) returned 0x0 [0135.024] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x2bcd4d8 [0135.024] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x507e9f7a [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x1e12f1b2 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x2918878e [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x683c23c5 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x6fe01082 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x484d9e76 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x78619040 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x25b3d4c6 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x29e27772 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x68bca850 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x7d0f0c77 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x247af68a [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x20bde3a [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x3ca3e18d [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x33feef6b [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x37509922 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x759f466c [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x2e68ac58 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0xcf6ee5a [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x7162284f [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x417fbc00 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x4e586638 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x623cfb8f [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x25413cc [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x7f5f1f74 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x158d2d8f [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x34f11f54 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x51d80f54 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x7832b22b [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x76fd6562 [0135.025] RtlRandomEx (in: Seed=0x7e7f870 | out: Seed=0x7e7f870) returned 0x68bca850 [0135.035] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.035] ReadFile (in: hFile=0xdb4, lpBuffer=0x8297478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e7f878, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0x7e7f878*=0x3c00, lpOverlapped=0x0) returned 1 [0135.035] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f319b8 [0135.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b460 [0135.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0135.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0135.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0135.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0135.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b460) returned 1 [0135.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f319b8) returned 1 [0135.036] WriteFile (in: hFile=0xdb4, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e7f878, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0x7e7f878*=0x3c00, lpOverlapped=0x0) returned 1 [0135.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0135.281] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.281] ReadFile (in: hFile=0xdb4, lpBuffer=0x8297478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e7f878, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0x7e7f878*=0x3c00, lpOverlapped=0x0) returned 1 [0135.282] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31970 [0135.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b3e8 [0135.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0135.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0135.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0135.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0135.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0135.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0135.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0135.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31970) returned 1 [0135.282] WriteFile (in: hFile=0xdb4, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e7f878, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0x7e7f878*=0x3c00, lpOverlapped=0x0) returned 1 [0135.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0135.286] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x11b86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.286] ReadFile (in: hFile=0xdb4, lpBuffer=0x8297478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e7f878, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0x7e7f878*=0x3c00, lpOverlapped=0x0) returned 1 [0135.286] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x11b86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31970 [0135.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b3e8 [0135.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0135.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0135.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0135.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0135.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0135.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0135.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0135.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31970) returned 1 [0135.287] WriteFile (in: hFile=0xdb4, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e7f878, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0x7e7f878*=0x3c00, lpOverlapped=0x0) returned 1 [0135.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0135.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd9c0 [0135.289] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.289] WriteFile (in: hFile=0xdb4, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x7e7f8e4, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0x7e7f8e4*=0x156, lpOverlapped=0x0) returned 1 [0135.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0135.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0050) returned 1 [0135.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0135.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0010) returned 1 [0135.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd9c0) returned 1 [0135.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0135.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0135.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0135.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f335f8 [0135.392] wcscpy (in: _Dest=0x3f335f8, _Source="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf" [0135.392] wcscat (in: _Dest=0x3f335f8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf.f0dbec" [0135.393] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf.f0dbec", NtPathName=0x7e7f868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\U2Ad_ffs8tBXmn.swf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fc10 [0138.233] FlushFileBuffers (hFile=0xdb4) returned 1 [0138.234] CloseHandle (hObject=0xdb4) returned 1 [0138.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5ac8 [0138.235] wcscpy (in: _Dest=0x2fe5ac8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.235] wcscat (in: _Dest=0x2fe5ac8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.235] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5ac8) returned 1 [0138.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6de8) returned 1 Thread: id = 462 os_tid = 0x92c [0133.148] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv" (normalized: "c:\\users\\eebsym5\\desktop\\uhwesvnlgy4.flv")) returned 0x20 [0133.149] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv", dwFileAttributes=0x20) returned 1 [0134.990] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv" (normalized: "c:\\users\\eebsym5\\desktop\\uhwesvnlgy4.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdb8 [0134.990] GetFileSizeEx (in: hFile=0xdb8, lpFileSize=0x9f9fd38 | out: lpFileSize=0x9f9fd38*=12831) returned 1 [0134.990] SetFilePointerEx (in: hFile=0xdb8, liDistanceToMove=0x321b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.990] ReadFile (in: hFile=0xdb8, lpBuffer=0x9f9fd44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f9fd20, lpOverlapped=0x0 | out: lpBuffer=0x9f9fd44*, lpNumberOfBytesRead=0x9f9fd20*=0x4, lpOverlapped=0x0) returned 1 [0134.992] SetFilePointerEx (in: hFile=0xdb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0134.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0134.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0134.992] NtQuerySystemTime (in: CurrentTime=0x9f9fcc0 | out: CurrentTime=0x9f9fcc0*=132471540036792000) returned 0x0 [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x164ec058 [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x187e6e91 [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x7d610f1e [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x25a3c840 [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x479585a1 [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x37960ce4 [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x56169b6b [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x749cb841 [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x15e8edda [0134.992] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x16a33d6e [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x5877b173 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x62006224 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x3acd0c1b [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x4bcfae64 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x7c12cbb2 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x493a6a09 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x7192a26 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x203999a1 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x28623158 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x73cf32e6 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x7908d47a [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x3725c062 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x24507387 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x7af0e54d [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x5367b74c [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x7a2e6869 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x3d12a1f6 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x63895cf7 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x492f95cb [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x43aaea38 [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x23c920b [0134.993] RtlRandomEx (in: Seed=0x9f9fcb8 | out: Seed=0x9f9fcb8) returned 0x28776376 [0135.003] ReadFile (in: hFile=0xdb8, lpBuffer=0x828c060, nNumberOfBytesToRead=0x321f, lpNumberOfBytesRead=0x9f9fcb4, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesRead=0x9f9fcb4*=0x321f, lpOverlapped=0x0) returned 1 [0135.003] SetFilePointerEx (in: hFile=0xdb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.003] WriteFile (in: hFile=0xdb8, lpBuffer=0x828fc68*, nNumberOfBytesToWrite=0x321f, lpNumberOfBytesWritten=0x9f9fcb8, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesWritten=0x9f9fcb8*=0x321f, lpOverlapped=0x0) returned 1 [0135.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0135.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0135.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0135.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828fc68) returned 1 [0135.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0135.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0135.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31970) returned 1 [0135.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77a98 [0135.278] SetFilePointerEx (in: hFile=0xdb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.278] WriteFile (in: hFile=0xdb8, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x9f9fd2c, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x9f9fd2c*=0x110, lpOverlapped=0x0) returned 1 [0135.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0135.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e777f8) returned 1 [0135.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0135.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77a98) returned 1 [0135.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0135.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0135.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0135.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0135.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd888 [0135.385] wcscpy (in: _Dest=0x3ecd888, _Source="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv" [0135.385] wcscat (in: _Dest=0x3ecd888, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv.f0dbec" [0135.386] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv.f0dbec", NtPathName=0x9f9fcb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\uHwesVNlGy4.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e242c0 [0138.213] FlushFileBuffers (hFile=0xdb8) returned 1 [0138.216] CloseHandle (hObject=0xdb8) returned 1 [0138.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ba8 [0138.217] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.217] wcscat (in: _Dest=0x2fe6ba8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.217] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0138.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 Thread: id = 463 os_tid = 0x940 [0133.149] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav" (normalized: "c:\\users\\eebsym5\\desktop\\updkweg8pdwv.wav")) returned 0x20 [0133.149] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav", dwFileAttributes=0x20) returned 1 [0134.964] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav" (normalized: "c:\\users\\eebsym5\\desktop\\updkweg8pdwv.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdac [0134.964] GetFileSizeEx (in: hFile=0xdac, lpFileSize=0xaf9fc60 | out: lpFileSize=0xaf9fc60*=96768) returned 1 [0134.964] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x179fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.965] ReadFile (in: hFile=0xdac, lpBuffer=0xaf9fc6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf9fc48, lpOverlapped=0x0 | out: lpBuffer=0xaf9fc6c*, lpNumberOfBytesRead=0xaf9fc48*=0x4, lpOverlapped=0x0) returned 1 [0134.966] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0134.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0134.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0134.967] NtQuerySystemTime (in: CurrentTime=0xaf9fbe8 | out: CurrentTime=0xaf9fbe8*=132471540036480000) returned 0x0 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x1e069744 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x5bdf1fa3 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x24b0cc91 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x2aea64b7 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x7de277da [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x1d84bec9 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x24bab990 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x65b12d89 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x6183d93b [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x577658 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x1e840e40 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x7ca78637 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x5cde22a3 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x4cfb0b21 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x1239cafc [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x4bc7808f [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x225bb658 [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x54a8d9ed [0134.967] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x7c9d27e [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x6317aad7 [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x1239cafc [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0xfea73eb [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x406310a0 [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x57bdbafd [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x5b6e6b87 [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x37994ef3 [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x3826d4e2 [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0xf232245 [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0xc20ad0e [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x529fb522 [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x5686064d [0134.968] RtlRandomEx (in: Seed=0xaf9fbe0 | out: Seed=0xaf9fbe0) returned 0x36fae7a2 [0134.982] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.982] ReadFile (in: hFile=0xdac, lpBuffer=0x82844d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf9fbe8, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0xaf9fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.983] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31970 [0134.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b3e8 [0134.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0134.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0134.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8288458 [0134.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0134.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0134.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0134.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0134.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31970) returned 1 [0134.989] WriteFile (in: hFile=0xdac, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf9fbe8, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xaf9fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0135.274] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.274] ReadFile (in: hFile=0xdac, lpBuffer=0x82844d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf9fbe8, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0xaf9fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.274] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f32228 [0135.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0135.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0135.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0b8) returned 1 [0135.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8288458 [0135.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0135.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0135.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0135.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0135.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32228) returned 1 [0135.275] WriteFile (in: hFile=0xdac, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf9fbe8, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xaf9fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0135.279] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x13e00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.279] ReadFile (in: hFile=0xdac, lpBuffer=0x82844d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf9fbe8, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0xaf9fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.279] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x13e00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31970 [0135.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b3e8 [0135.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0135.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0135.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8288458 [0135.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0135.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0135.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0135.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0135.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31970) returned 1 [0135.279] WriteFile (in: hFile=0xdac, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf9fbe8, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xaf9fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0135.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd958 [0135.283] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.283] WriteFile (in: hFile=0xdac, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0xaf9fc54, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xaf9fc54*=0x152, lpOverlapped=0x0) returned 1 [0135.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0135.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77b40) returned 1 [0135.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0135.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77b08) returned 1 [0135.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd958) returned 1 [0135.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0135.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0135.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0135.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33518 [0135.387] wcscpy (in: _Dest=0x3f33518, _Source="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav" [0135.387] wcscat (in: _Dest=0x3f33518, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav.f0dbec" [0135.387] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav.f0dbec", NtPathName=0xaf9fbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\UPdKweg8PDwV.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e249c0 [0138.215] FlushFileBuffers (hFile=0xdac) returned 1 [0138.221] CloseHandle (hObject=0xdac) returned 1 [0138.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ae8 [0138.222] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.222] wcscat (in: _Dest=0x2fe6ae8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 [0138.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 Thread: id = 464 os_tid = 0x8fc [0133.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e510b8 [0133.150] wcscpy (in: _Dest=0x3e510b8, _Source="C:\\ProgramData\\Adobe\\Acrobat" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat" [0133.150] wcscat (in: _Dest=0x3e510b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\" [0133.150] wcscat (in: _Dest=0x3e510b8, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\*" [0133.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80473d8 [0133.150] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0133.150] wcscmp (_String1=".", _String2=".") returned 0 [0133.150] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.150] wcscmp (_String1="..", _String2=".") returned 1 [0133.150] wcscmp (_String1="..", _String2="..") returned 0 [0133.150] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0133.151] wcscmp (_String1="10.0", _String2=".") returned 1 [0133.151] wcscmp (_String1="10.0", _String2="..") returned 1 [0133.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3dc65c8 [0133.151] wcscpy (in: _Dest=0x3dc65c8, _Source="C:\\ProgramData\\Adobe\\Acrobat" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat" [0133.151] wcscat (in: _Dest=0x3dc65c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\" [0133.151] wcscat (in: _Dest=0x3dc65c8, _Source="10.0" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0" [0136.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc65c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0136.133] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0136.133] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0136.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80473d8) returned 1 [0136.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e510b8) returned 1 [0136.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff00a0) returned 1 Thread: id = 465 os_tid = 0x740 [0133.555] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\v0fwqzluayd.jpg")) returned 0x20 [0133.555] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg", dwFileAttributes=0x20) returned 1 [0135.564] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\v0fwqzluayd.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1010 [0135.565] GetFileSizeEx (in: hFile=0x1010, lpFileSize=0xaf5f938 | out: lpFileSize=0xaf5f938*=74218) returned 1 [0135.565] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x121e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.565] ReadFile (in: hFile=0x1010, lpBuffer=0xaf5f944, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf5f920, lpOverlapped=0x0 | out: lpBuffer=0xaf5f944*, lpNumberOfBytesRead=0xaf5f920*=0x4, lpOverlapped=0x0) returned 1 [0135.567] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fc8 [0135.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0135.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.567] NtQuerySystemTime (in: CurrentTime=0xaf5f8c0 | out: CurrentTime=0xaf5f8c0*=132471540042564000) returned 0x0 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x18660091 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x5a97172d [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x5d7c801d [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x6d7934a8 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x47dacd37 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x5b617fc5 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x3df7aec4 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x2c42cc6c [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0xf087fa [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x3f975b77 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x2d965625 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x490354b0 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x4d8066c9 [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x52aa887e [0135.567] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x2765ba37 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x5d8beb57 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0xf19c4ee [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x443bd63e [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x34cde5e2 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x558f05c7 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x7d1fcb75 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x58407346 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x68225088 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x6515df04 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x6f16702f [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x38adf1b4 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x2e3eb3cb [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x50380f39 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x4f8c50d8 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x32450b43 [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x1c8d2e4e [0135.568] RtlRandomEx (in: Seed=0xaf5f8b8 | out: Seed=0xaf5f8b8) returned 0x3a75a258 [0135.597] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.597] ReadFile (in: hFile=0x1010, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf5f8c0, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0xaf5f8c0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.597] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a7d0 [0135.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0135.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fc8 [0135.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fc8) returned 1 [0135.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0135.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fc8 [0135.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0135.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0135.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a7d0) returned 1 [0135.598] WriteFile (in: hFile=0x1010, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf5f8c0, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0xaf5f8c0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0136.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0136.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77788 [0136.368] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.368] WriteFile (in: hFile=0x1010, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xaf5f92c, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xaf5f92c*=0x110, lpOverlapped=0x0) returned 1 [0136.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0136.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e777c0) returned 1 [0136.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0136.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77788) returned 1 [0136.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fc8) returned 1 [0136.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0136.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0136.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0136.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdbc8 [0136.463] wcscpy (in: _Dest=0x3ecdbc8, _Source="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg" [0136.463] wcscat (in: _Dest=0x3ecdbc8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg.f0dbec" [0136.463] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg.f0dbec", NtPathName=0xaf5f8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\v0FWQZluAyd.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da64f0 [0138.246] FlushFileBuffers (hFile=0x1010) returned 1 [0138.250] CloseHandle (hObject=0x1010) returned 1 [0138.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7508 [0138.251] wcscpy (in: _Dest=0x2fe7508, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.251] wcscat (in: _Dest=0x2fe7508, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.251] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7508) returned 1 [0138.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 Thread: id = 466 os_tid = 0x90c [0133.556] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls" (normalized: "c:\\users\\eebsym5\\desktop\\veczb.xls")) returned 0x20 [0133.556] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls", dwFileAttributes=0x20) returned 1 [0135.598] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls" (normalized: "c:\\users\\eebsym5\\desktop\\veczb.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd20 [0135.599] GetFileSizeEx (in: hFile=0xd20, lpFileSize=0x795fde0 | out: lpFileSize=0x795fde0*=63449) returned 1 [0135.599] SetFilePointerEx (in: hFile=0xd20, liDistanceToMove=0xf7d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.599] ReadFile (in: hFile=0xd20, lpBuffer=0x795fdec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x795fdc8, lpOverlapped=0x0 | out: lpBuffer=0x795fdec*, lpNumberOfBytesRead=0x795fdc8*=0x4, lpOverlapped=0x0) returned 1 [0135.601] SetFilePointerEx (in: hFile=0xd20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0135.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0135.601] NtQuerySystemTime (in: CurrentTime=0x795fd68 | out: CurrentTime=0x795fd68*=132471540042876000) returned 0x0 [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x6476516d [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0xf6c9e4a [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x4f7add4f [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x120211e0 [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x132503dd [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x4b6df123 [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x5c32ab32 [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x33665207 [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x10a3a292 [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x42354eea [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x62bd601 [0135.601] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x4fe3fdc2 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x19c6d24d [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x6fae460b [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x2483a437 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x1de08fd9 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x70f1c682 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x7cf1676b [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x700dedff [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x65013b43 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x1fd4c445 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0xf60b6d6 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x32161cfe [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x6a5cde8d [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x5c38bdea [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x2ed72731 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x23bad8fd [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x7b384332 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x3e24687b [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x7ed999ec [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x5c0eedb6 [0135.602] RtlRandomEx (in: Seed=0x795fd60 | out: Seed=0x795fd60) returned 0x7a71f5e0 [0135.613] SetFilePointerEx (in: hFile=0xd20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.613] ReadFile (in: hFile=0xd20, lpBuffer=0x82b54b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x795fd68, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesRead=0x795fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0135.613] SetFilePointerEx (in: hFile=0xd20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a7d0 [0135.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33060 [0135.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0135.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b90c0 [0135.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0135.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0135.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0135.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a7d0) returned 1 [0135.614] WriteFile (in: hFile=0xd20, lpBuffer=0x82b90c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x795fd68, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesWritten=0x795fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0136.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0136.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0136.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4718 [0136.180] SetFilePointerEx (in: hFile=0xd20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.181] WriteFile (in: hFile=0xd20, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x795fdd4, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x795fdd4*=0x104, lpOverlapped=0x0) returned 1 [0136.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0136.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4588) returned 1 [0136.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0136.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4718) returned 1 [0136.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0136.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0136.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0136.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0136.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7568 [0136.387] wcscpy (in: _Dest=0x2fe7568, _Source="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls") returned="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls" [0136.387] wcscat (in: _Dest=0x2fe7568, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls.f0dbec" [0136.387] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls.f0dbec", NtPathName=0x795fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\veCZb.xls.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68948 [0138.236] FlushFileBuffers (hFile=0xd20) returned 1 [0138.237] CloseHandle (hObject=0xd20) returned 1 [0138.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7568 [0138.238] wcscpy (in: _Dest=0x2fe7568, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.238] wcscat (in: _Dest=0x2fe7568, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.238] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7568) returned 1 [0138.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6528) returned 1 Thread: id = 467 os_tid = 0x91c [0133.556] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv" (normalized: "c:\\users\\eebsym5\\desktop\\w9fbbcc5xzklo.flv")) returned 0x20 [0133.556] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv", dwFileAttributes=0x20) returned 1 [0135.924] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv" (normalized: "c:\\users\\eebsym5\\desktop\\w9fbbcc5xzklo.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd3c [0135.924] GetFileSizeEx (in: hFile=0xd3c, lpFileSize=0x855fb20 | out: lpFileSize=0x855fb20*=21115) returned 1 [0135.924] SetFilePointerEx (in: hFile=0xd3c, liDistanceToMove=0x5277, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.925] ReadFile (in: hFile=0xd3c, lpBuffer=0x855fb2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x855fb08, lpOverlapped=0x0 | out: lpBuffer=0x855fb2c*, lpNumberOfBytesRead=0x855fb08*=0x4, lpOverlapped=0x0) returned 1 [0135.927] SetFilePointerEx (in: hFile=0xd3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0135.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0135.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4718 [0135.927] NtQuerySystemTime (in: CurrentTime=0x855faa8 | out: CurrentTime=0x855faa8*=132471540046152000) returned 0x0 [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x435b7730 [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x2f428928 [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x42bbba63 [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x6837214c [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x296d99bd [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x2495083a [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x25bf12ee [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x27c7c5aa [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x54f0afa2 [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x2d9b7da2 [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x611bc53c [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x1f5df48f [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x17b9bd57 [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x65c62933 [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x6c17305d [0135.927] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x319fc756 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x3b518cd3 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x75a51416 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x6185f14e [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x7e12be43 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x1e8369b7 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x22ae9efc [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x2c53e4c4 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0xba4b1c5 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x43919e5a [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x2dc65662 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x9e4ddb [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x3479fc76 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x6f91c258 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x15d29411 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x6a756885 [0135.928] RtlRandomEx (in: Seed=0x855faa0 | out: Seed=0x855faa0) returned 0x4dcb0941 [0135.940] SetFilePointerEx (in: hFile=0xd3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.940] ReadFile (in: hFile=0xd3c, lpBuffer=0x8288458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x855faa8, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesRead=0x855faa8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.940] SetFilePointerEx (in: hFile=0xd3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a350 [0135.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b820 [0135.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0135.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0135.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828c060 [0135.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0135.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4718 [0135.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4718) returned 1 [0135.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b820) returned 1 [0135.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a350) returned 1 [0135.941] WriteFile (in: hFile=0xd3c, lpBuffer=0x828c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x855faa8, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesWritten=0x855faa8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0136.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0136.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df7e20 [0136.332] SetFilePointerEx (in: hFile=0xd3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.332] WriteFile (in: hFile=0xd3c, lpBuffer=0x3d57028*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x855fb14, lpOverlapped=0x0 | out: lpBuffer=0x3d57028*, lpNumberOfBytesWritten=0x855fb14*=0x114, lpOverlapped=0x0) returned 1 [0136.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57028) returned 1 [0136.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0136.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0136.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0136.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0136.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0136.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46a0) returned 1 [0136.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef45b0) returned 1 [0136.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8054e70 [0136.450] wcscpy (in: _Dest=0x8054e70, _Source="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv" [0136.450] wcscat (in: _Dest=0x8054e70, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv.f0dbec" [0136.451] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv.f0dbec", NtPathName=0x855fa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\W9fBbcc5xZKLO.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30d10 [0138.248] FlushFileBuffers (hFile=0xd3c) returned 1 [0138.251] CloseHandle (hObject=0xd3c) returned 1 [0138.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0c68 [0138.252] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.252] wcscat (in: _Dest=0x2fe0c68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.252] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 [0138.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7208) returned 1 Thread: id = 468 os_tid = 0xbe4 [0133.557] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a" (normalized: "c:\\users\\eebsym5\\desktop\\wvmk5 sxek.m4a")) returned 0x20 [0133.557] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a", dwFileAttributes=0x20) returned 1 [0136.369] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a" (normalized: "c:\\users\\eebsym5\\desktop\\wvmk5 sxek.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd38 [0136.369] GetFileSizeEx (in: hFile=0xd38, lpFileSize=0x8def9b0 | out: lpFileSize=0x8def9b0*=78557) returned 1 [0136.369] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x132d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.369] ReadFile (in: hFile=0xd38, lpBuffer=0x8def9bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8def998, lpOverlapped=0x0 | out: lpBuffer=0x8def9bc*, lpNumberOfBytesRead=0x8def998*=0x4, lpOverlapped=0x0) returned 1 [0136.371] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0136.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0136.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0136.371] NtQuerySystemTime (in: CurrentTime=0x8def938 | out: CurrentTime=0x8def938*=132471540050520000) returned 0x0 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x5463301a [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x4c9e6dc0 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x2c3fbb1 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x7335107b [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x32e98947 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x59c092be [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x25280a61 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x6b59457d [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x73b91cea [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x435efb1 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x736d1374 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x3f5a67e3 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x11069de4 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x294e4bb7 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x196b3306 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x3ec9a26d [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x675c936b [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x435e795d [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0xbc27347 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x4b01480e [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x632f44ec [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x44c6e8f [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x13363f9e [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x384b9e64 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x3c83052f [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x402a543 [0136.372] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x3f043459 [0136.373] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x3376b24d [0136.373] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x24be995d [0136.373] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x522e3744 [0136.373] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x15cbe914 [0136.373] RtlRandomEx (in: Seed=0x8def930 | out: Seed=0x8def930) returned 0x6644d70d [0136.383] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.383] ReadFile (in: hFile=0xd38, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8def938, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0x8def938*=0x3c00, lpOverlapped=0x0) returned 1 [0136.383] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50fe0 [0136.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0136.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0136.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0136.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0136.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0136.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0136.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0136.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0136.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50fe0) returned 1 [0136.384] WriteFile (in: hFile=0xd38, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8def938, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0x8def938*=0x3c00, lpOverlapped=0x0) returned 1 [0136.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0136.455] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.455] ReadFile (in: hFile=0xd38, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8def938, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0x8def938*=0x3c00, lpOverlapped=0x0) returned 1 [0136.455] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e51190 [0136.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bd48 [0136.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef45b0 [0136.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef45b0) returned 1 [0136.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0136.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef45b0 [0136.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46a0 [0136.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46a0) returned 1 [0136.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bd48) returned 1 [0136.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0136.456] WriteFile (in: hFile=0xd38, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8def938, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0x8def938*=0x3c00, lpOverlapped=0x0) returned 1 [0136.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0136.457] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0xf6dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.457] ReadFile (in: hFile=0xd38, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8def938, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0x8def938*=0x3c00, lpOverlapped=0x0) returned 1 [0136.457] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0xf6dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e51190 [0136.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bd48 [0136.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46a0 [0136.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46a0) returned 1 [0136.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0136.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46a0 [0136.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0136.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0136.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bd48) returned 1 [0136.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0136.458] WriteFile (in: hFile=0xd38, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8def938, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0x8def938*=0x3c00, lpOverlapped=0x0) returned 1 [0136.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0136.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdc30 [0136.459] SetFilePointerEx (in: hFile=0xd38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.459] WriteFile (in: hFile=0xd38, lpBuffer=0x3e16628*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x8def9a4, lpOverlapped=0x0 | out: lpBuffer=0x3e16628*, lpNumberOfBytesWritten=0x8def9a4*=0x14e, lpOverlapped=0x0) returned 1 [0136.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16628) returned 1 [0136.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0136.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0136.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0136.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdc30) returned 1 [0136.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0136.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0136.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0136.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecdc30 [0136.487] wcscpy (in: _Dest=0x3ecdc30, _Source="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a") returned="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a" [0136.487] wcscat (in: _Dest=0x3ecdc30, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a.f0dbec" [0136.488] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a.f0dbec", NtPathName=0x8def928, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\wVMk5 sXek.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24940 [0138.243] FlushFileBuffers (hFile=0xd38) returned 1 [0138.247] CloseHandle (hObject=0xd38) returned 1 [0138.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1328 [0138.248] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0138.248] wcscat (in: _Dest=0x2fe1328, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0138.248] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0138.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0138.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23488) returned 1 Thread: id = 469 os_tid = 0x7b8 [0133.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe71a8 [0133.557] wcscpy (in: _Dest=0x2fe71a8, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media" [0133.558] wcscat (in: _Dest=0x2fe71a8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\" [0133.558] wcscat (in: _Dest=0x2fe71a8, _Source="*" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\*") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\*" [0133.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0133.558] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0133.558] wcscmp (_String1=".", _String2=".") returned 0 [0133.558] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.558] wcscmp (_String1="..", _String2=".") returned 1 [0133.558] wcscmp (_String1="..", _String2="..") returned 0 [0133.558] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84e06f5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x84e06f5a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.558] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.558] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.559] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84d6e5fa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x84d6e5fa, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0133.559] wcscmp (_String1="win7_scenic-demoshort_raw.wtv", _String2=".") returned 1 [0133.559] wcscmp (_String1="win7_scenic-demoshort_raw.wtv", _String2="..") returned 1 [0133.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2a2d8 [0133.559] wcscpy (in: _Dest=0x3e2a2d8, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media" [0133.559] wcscat (in: _Dest=0x3e2a2d8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\" [0133.559] wcscat (in: _Dest=0x3e2a2d8, _Source="win7_scenic-demoshort_raw.wtv" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" [0134.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x145c [0134.144] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84d6e5fa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x84d6e5fa, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0 [0134.144] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0134.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0134.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe71a8) returned 1 [0134.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 Thread: id = 470 os_tid = 0x950 [0133.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0e718 [0133.559] wcscpy (in: _Dest=0x3e0e718, _Source="C:\\Users\\Public\\Videos\\Sample Videos" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos" [0133.560] wcscat (in: _Dest=0x3e0e718, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\") returned="C:\\Users\\Public\\Videos\\Sample Videos\\" [0133.560] wcscat (in: _Dest=0x3e0e718, _Source="*" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\*") returned="C:\\Users\\Public\\Videos\\Sample Videos\\*" [0133.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0133.560] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0133.560] wcscmp (_String1=".", _String2=".") returned 0 [0133.560] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.560] wcscmp (_String1="..", _String2=".") returned 1 [0133.560] wcscmp (_String1="..", _String2="..") returned 0 [0133.560] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.560] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.560] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.560] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1c496c1, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0133.560] wcscmp (_String1="Wildlife.wmv", _String2=".") returned 1 [0133.560] wcscmp (_String1="Wildlife.wmv", _String2="..") returned 1 [0133.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39bd8 [0133.561] wcscpy (in: _Dest=0x3f39bd8, _Source="C:\\Users\\Public\\Videos\\Sample Videos" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos" [0133.561] wcscat (in: _Dest=0x3f39bd8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\") returned="C:\\Users\\Public\\Videos\\Sample Videos\\" [0133.561] wcscat (in: _Dest=0x3f39bd8, _Source="Wildlife.wmv" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv") returned="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" [0133.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0133.803] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1c496c1, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0133.803] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0133.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0133.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e718) returned 1 [0133.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22d50) returned 1 Thread: id = 471 os_tid = 0x710 [0133.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4500 [0133.561] wcscpy (in: _Dest=0x3dd4500, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u" [0133.561] wcscat (in: _Dest=0x3dd4500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\" [0133.561] wcscat (in: _Dest=0x3dd4500, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\*" [0133.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0133.561] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72f2ac10, ftCreationTime.dwHighDateTime=0x1d5dfc7, ftLastAccessTime.dwLowDateTime=0x34862dc0, ftLastAccessTime.dwHighDateTime=0x1d5d91f, ftLastWriteTime.dwLowDateTime=0x34862dc0, ftLastWriteTime.dwHighDateTime=0x1d5d91f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f374d8 [0133.562] wcscmp (_String1=".", _String2=".") returned 0 [0133.562] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72f2ac10, ftCreationTime.dwHighDateTime=0x1d5dfc7, ftLastAccessTime.dwLowDateTime=0x34862dc0, ftLastAccessTime.dwHighDateTime=0x1d5d91f, ftLastWriteTime.dwLowDateTime=0x34862dc0, ftLastWriteTime.dwHighDateTime=0x1d5d91f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.562] wcscmp (_String1="..", _String2=".") returned 1 [0133.562] wcscmp (_String1="..", _String2="..") returned 0 [0133.562] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49c93410, ftCreationTime.dwHighDateTime=0x1d5d9f7, ftLastAccessTime.dwLowDateTime=0x9db02e30, ftLastAccessTime.dwHighDateTime=0x1d5e2fd, ftLastWriteTime.dwLowDateTime=0x9db02e30, ftLastWriteTime.dwHighDateTime=0x1d5e2fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3nMVVV7rTGG5B", cAlternateFileName="3NMVVV~1")) returned 1 [0133.562] wcscmp (_String1="3nMVVV7rTGG5B", _String2=".") returned 1 [0133.562] wcscmp (_String1="3nMVVV7rTGG5B", _String2="..") returned 1 [0133.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6fc8 [0133.562] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u" [0133.562] wcscat (in: _Dest=0x2fe6fc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\" [0133.562] wcscat (in: _Dest=0x2fe6fc8, _Source="3nMVVV7rTGG5B" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" [0133.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0133.805] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67480aa0, ftCreationTime.dwHighDateTime=0x1d5e40d, ftLastAccessTime.dwLowDateTime=0xe2605880, ftLastAccessTime.dwHighDateTime=0x1d5e86a, ftLastWriteTime.dwLowDateTime=0xe2605880, ftLastWriteTime.dwHighDateTime=0x1d5e86a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="63my8-", cAlternateFileName="")) returned 1 [0133.805] wcscmp (_String1="63my8-", _String2=".") returned 1 [0133.805] wcscmp (_String1="63my8-", _String2="..") returned 1 [0133.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e22d50 [0133.805] wcscpy (in: _Dest=0x3e22d50, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u" [0133.805] wcscat (in: _Dest=0x3e22d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\" [0133.805] wcscat (in: _Dest=0x3e22d50, _Source="63my8-" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" [0133.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0133.806] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0ed570, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x122e3f20, ftLastAccessTime.dwHighDateTime=0x1d5d941, ftLastWriteTime.dwLowDateTime=0x122e3f20, ftLastWriteTime.dwHighDateTime=0x1d5d941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3j2zxFCXAE", cAlternateFileName="A3J2ZX~1")) returned 1 [0133.806] wcscmp (_String1="A3j2zxFCXAE", _String2=".") returned 1 [0133.806] wcscmp (_String1="A3j2zxFCXAE", _String2="..") returned 1 [0133.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c68 [0133.806] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u" [0133.807] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\" [0133.807] wcscat (in: _Dest=0x2fe6c68, _Source="A3j2zxFCXAE" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" [0133.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0133.808] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0ed570, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x122e3f20, ftLastAccessTime.dwHighDateTime=0x1d5d941, ftLastWriteTime.dwLowDateTime=0x122e3f20, ftLastWriteTime.dwHighDateTime=0x1d5d941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3j2zxFCXAE", cAlternateFileName="A3J2ZX~1")) returned 0 [0133.808] FindClose (in: hFindFile=0x3f374d8 | out: hFindFile=0x3f374d8) returned 1 [0133.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0133.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4500) returned 1 [0133.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38538) returned 1 Thread: id = 472 os_tid = 0xc8 [0133.562] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv" (normalized: "c:\\users\\eebsym5\\videos\\a74pc.mkv")) returned 0x20 [0133.563] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv", dwFileAttributes=0x20) returned 1 [0134.390] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv" (normalized: "c:\\users\\eebsym5\\videos\\a74pc.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd30 [0134.390] GetFileSizeEx (in: hFile=0xd30, lpFileSize=0x8fff8b8 | out: lpFileSize=0x8fff8b8*=49127) returned 1 [0134.390] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0xbfe3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.390] ReadFile (in: hFile=0xd30, lpBuffer=0x8fff8c4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8fff8a0, lpOverlapped=0x0 | out: lpBuffer=0x8fff8c4*, lpNumberOfBytesRead=0x8fff8a0*=0x4, lpOverlapped=0x0) returned 1 [0134.391] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4afc8 [0134.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0134.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1158 [0134.392] NtQuerySystemTime (in: CurrentTime=0x8fff840 | out: CurrentTime=0x8fff840*=132471540030708000) returned 0x0 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x4bb5898e [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x64c9f799 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0xbd270e2 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x58143d20 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x306ce22 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x668abdea [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x760c9543 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x28aebd9b [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x33303db6 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x73d7682b [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x2d925727 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x5b69c0a7 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x8f8c59 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x3532f2e [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x7a7ab9cf [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x630a137e [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x71e78da6 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x2d3c53bd [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x45f636eb [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x6bbf6a8a [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x6136cbb3 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x1c9fdb8d [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x2fe09557 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x10d42559 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x799d615a [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x3cab3d28 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x29e8fca3 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x48b96b35 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x1c1909ad [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x763808b5 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x17b33dd5 [0134.392] RtlRandomEx (in: Seed=0x8fff838 | out: Seed=0x8fff838) returned 0x55577ab8 [0134.402] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.402] ReadFile (in: hFile=0xd30, lpBuffer=0x809a458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8fff840, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0x8fff840*=0x3c00, lpOverlapped=0x0) returned 1 [0134.402] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6cc68 [0134.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68858 [0134.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4afc8 [0134.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4afc8) returned 1 [0134.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c38b0 [0134.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4afc8 [0134.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1158 [0134.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1158) returned 1 [0134.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0134.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cc68) returned 1 [0134.403] WriteFile (in: hFile=0xd30, lpBuffer=0x80c38b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8fff840, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesWritten=0x8fff840*=0x3c00, lpOverlapped=0x0) returned 1 [0136.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0136.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0136.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3de0 [0136.202] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.202] WriteFile (in: hFile=0xd30, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x8fff8ac, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x8fff8ac*=0x104, lpOverlapped=0x0) returned 1 [0136.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0136.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12c0) returned 1 [0136.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0136.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3de0) returned 1 [0136.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4afc8) returned 1 [0136.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0136.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11f8) returned 1 [0136.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0136.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe75c8 [0136.415] wcscpy (in: _Dest=0x2fe75c8, _Source="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv" [0136.415] wcscat (in: _Dest=0x2fe75c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv.f0dbec" [0136.415] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv.f0dbec", NtPathName=0x8fff830, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\a74pc.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054d20 [0136.627] FlushFileBuffers (hFile=0xd30) returned 1 [0136.632] CloseHandle (hObject=0xd30) returned 1 [0136.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe72c8 [0136.645] wcscpy (in: _Dest=0x2fe72c8, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0136.645] wcscat (in: _Dest=0x2fe72c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt" [0136.645] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\f0dbec-readme.txt")) returned 0x20 [0136.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe72c8) returned 1 [0136.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6438) returned 1 Thread: id = 473 os_tid = 0x7b4 [0133.563] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi" (normalized: "c:\\users\\eebsym5\\videos\\da6mvvc.avi")) returned 0x20 [0133.563] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi", dwFileAttributes=0x20) returned 1 [0134.403] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi" (normalized: "c:\\users\\eebsym5\\videos\\da6mvvc.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd24 [0134.404] GetFileSizeEx (in: hFile=0xd24, lpFileSize=0x956f8c8 | out: lpFileSize=0x956f8c8*=15518) returned 1 [0134.404] SetFilePointerEx (in: hFile=0xd24, liDistanceToMove=0x3c9a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.404] ReadFile (in: hFile=0xd24, lpBuffer=0x956f8d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x956f8b0, lpOverlapped=0x0 | out: lpBuffer=0x956f8d4*, lpNumberOfBytesRead=0x956f8b0*=0x4, lpOverlapped=0x0) returned 1 [0134.405] SetFilePointerEx (in: hFile=0xd24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1158 [0134.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14a0 [0134.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1400 [0134.405] NtQuerySystemTime (in: CurrentTime=0x956f850 | out: CurrentTime=0x956f850*=132471540030864000) returned 0x0 [0134.405] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x6bfb2c9e [0134.405] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0xca7df12 [0134.405] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x281bdc3a [0134.405] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x3ff80669 [0134.405] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x186a4d9c [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x35f507b0 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x791c9784 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x124a656 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x463d4e18 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x659b45e3 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x3547ba3c [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x35c0d99e [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x72ef275e [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x16414435 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x610464db [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x2568159c [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x71ed5f5 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x635eef24 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x6ec7b872 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x2f730e65 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x46af8a9e [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x6f1ad249 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x10413c65 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x427c5ede [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x5eae7ac6 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x183d0691 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x7517b055 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x35e71057 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x308a98a4 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x3abe3d44 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x47370862 [0134.406] RtlRandomEx (in: Seed=0x956f848 | out: Seed=0x956f848) returned 0x6337cf7d [0134.414] SetFilePointerEx (in: hFile=0xd24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.414] ReadFile (in: hFile=0xd24, lpBuffer=0x80b8498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x956f850, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesRead=0x956f850*=0x3c00, lpOverlapped=0x0) returned 1 [0134.415] SetFilePointerEx (in: hFile=0xd24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6cc68 [0134.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68858 [0134.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1158 [0134.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1158) returned 1 [0134.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0134.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1158 [0134.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1400 [0134.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1400) returned 1 [0134.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0134.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cc68) returned 1 [0134.415] WriteFile (in: hFile=0xd24, lpBuffer=0x80cb0c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x956f850, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesWritten=0x956f850*=0x3c00, lpOverlapped=0x0) returned 1 [0136.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0136.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0136.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df41d8 [0136.204] SetFilePointerEx (in: hFile=0xd24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.204] WriteFile (in: hFile=0xd24, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x956f8bc, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x956f8bc*=0x108, lpOverlapped=0x0) returned 1 [0136.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0136.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4328) returned 1 [0136.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0136.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41d8) returned 1 [0136.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1158) returned 1 [0136.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14a0) returned 1 [0136.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0136.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3930) returned 1 [0136.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6fc8 [0136.396] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi") returned="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi" [0136.396] wcscat (in: _Dest=0x2fe6fc8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi.f0dbec" [0136.396] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi.f0dbec", NtPathName=0x956f840, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\DA6mvVc.avi.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68678 [0136.500] FlushFileBuffers (hFile=0xd24) returned 1 [0136.521] CloseHandle (hObject=0xd24) returned 1 [0136.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6fc8 [0136.541] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0136.541] wcscat (in: _Dest=0x2fe6fc8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt" [0136.541] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\f0dbec-readme.txt")) returned 0xffffffff [0136.547] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1428 [0136.600] WriteFile (in: hFile=0x1428, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x956f864, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x956f864*=0x70c, lpOverlapped=0x0) returned 1 [0136.611] CloseHandle (hObject=0x1428) returned 1 [0136.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 [0136.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6488) returned 1 Thread: id = 474 os_tid = 0x960 [0133.564] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv" (normalized: "c:\\users\\eebsym5\\videos\\hf-osc-whmj10pcfdt.mkv")) returned 0x20 [0133.564] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv", dwFileAttributes=0x20) returned 1 [0134.416] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv" (normalized: "c:\\users\\eebsym5\\videos\\hf-osc-whmj10pcfdt.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd14 [0134.416] GetFileSizeEx (in: hFile=0xd14, lpFileSize=0x76af920 | out: lpFileSize=0x76af920*=22761) returned 1 [0134.416] SetFilePointerEx (in: hFile=0xd14, liDistanceToMove=0x58e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.416] ReadFile (in: hFile=0xd14, lpBuffer=0x76af92c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x76af908, lpOverlapped=0x0 | out: lpBuffer=0x76af92c*, lpNumberOfBytesRead=0x76af908*=0x4, lpOverlapped=0x0) returned 1 [0134.417] SetFilePointerEx (in: hFile=0xd14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1400 [0134.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32f0 [0134.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0134.417] NtQuerySystemTime (in: CurrentTime=0x76af8a8 | out: CurrentTime=0x76af8a8*=132471540031020000) returned 0x0 [0134.417] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x4e23e32f [0134.417] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x2de41961 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x775b3233 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x3a51e2b8 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x5ae22a1d [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x79ac0656 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x3be5d3e5 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x5b8f069e [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x301d3692 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x222fda25 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x498faa1d [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x6a7008f5 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x959d37e [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x4905d441 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x48233089 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x5b1515bf [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x6d869617 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x45f3906 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x2db0e850 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x3870b2a0 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x35cb5b1d [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x7555c6bd [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x2eacb95e [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x129073f9 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x37b397b2 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x39ca6c6a [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x69cc96f3 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x2fade3bb [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x49d719a1 [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x663e0ecb [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0x5e70236b [0134.418] RtlRandomEx (in: Seed=0x76af8a0 | out: Seed=0x76af8a0) returned 0xfb04337 [0134.426] SetFilePointerEx (in: hFile=0xd14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.426] ReadFile (in: hFile=0xd14, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x76af8a8, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0x76af8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.427] SetFilePointerEx (in: hFile=0xd14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6cc68 [0134.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68858 [0134.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1400 [0134.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1400) returned 1 [0134.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0134.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1400 [0134.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0134.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0134.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0134.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cc68) returned 1 [0134.427] WriteFile (in: hFile=0xd14, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x76af8a8, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x76af8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0136.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0136.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e6d8c8 [0136.210] SetFilePointerEx (in: hFile=0xd14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.210] WriteFile (in: hFile=0xd14, lpBuffer=0x3042500*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x76af914, lpOverlapped=0x0 | out: lpBuffer=0x3042500*, lpNumberOfBytesWritten=0x76af914*=0x11e, lpOverlapped=0x0) returned 1 [0136.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0136.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308770) returned 1 [0136.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3db8) returned 1 [0136.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d8c8) returned 1 [0136.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1400) returned 1 [0136.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f0) returned 1 [0136.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3980) returned 1 [0136.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0136.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68330 [0136.398] wcscpy (in: _Dest=0x3e68330, _Source="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv" [0136.398] wcscat (in: _Dest=0x3e68330, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv.f0dbec" [0136.398] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv.f0dbec", NtPathName=0x76af898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\hF-OsC-WhMj10PcFdt.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35010 [0136.701] FlushFileBuffers (hFile=0xd14) returned 1 [0136.751] CloseHandle (hObject=0xd14) returned 1 [0136.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe72c8 [0136.757] wcscpy (in: _Dest=0x2fe72c8, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0136.757] wcscat (in: _Dest=0x2fe72c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt" [0136.757] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\f0dbec-readme.txt")) returned 0x20 [0136.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe72c8) returned 1 [0136.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8baa8) returned 1 Thread: id = 475 os_tid = 0x970 [0133.564] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv" (normalized: "c:\\users\\eebsym5\\videos\\hskxmkb9q-vvso.mkv")) returned 0x20 [0133.564] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv", dwFileAttributes=0x20) returned 1 [0134.428] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv" (normalized: "c:\\users\\eebsym5\\videos\\hskxmkb9q-vvso.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd1c [0134.428] GetFileSizeEx (in: hFile=0xd1c, lpFileSize=0xa0efe38 | out: lpFileSize=0xa0efe38*=31781) returned 1 [0134.428] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0x7c21, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.428] ReadFile (in: hFile=0xd1c, lpBuffer=0xa0efe44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa0efe20, lpOverlapped=0x0 | out: lpBuffer=0xa0efe44*, lpNumberOfBytesRead=0xa0efe20*=0x4, lpOverlapped=0x0) returned 1 [0134.429] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0134.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39f8 [0134.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0134.430] NtQuerySystemTime (in: CurrentTime=0xa0efdc0 | out: CurrentTime=0xa0efdc0*=132471540031176000) returned 0x0 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x5b5ac608 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x4426ae87 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x40f4e784 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x1e047e89 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x7fc1d226 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x5d1893a8 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x4cff0525 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x494c339d [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0xba11222 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x665356eb [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x7f86869d [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x446a13f3 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x7db029ab [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x4634d89c [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x5252dbc [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x41f5e7b [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x5df46895 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x6ea2170a [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x2362c88b [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x181124eb [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x46b7ba00 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x767a5b75 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x394ecbb1 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x34c5755c [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x63af1a1d [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x52e3eba [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x5ecd857 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x389a6100 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x3684557a [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x3c8cca24 [0134.430] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x49e88cf1 [0134.431] RtlRandomEx (in: Seed=0xa0efdb8 | out: Seed=0xa0efdb8) returned 0x4c119622 [0134.439] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.439] ReadFile (in: hFile=0xd1c, lpBuffer=0x80c74b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa0efdc0, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesRead=0xa0efdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.439] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6cc68 [0134.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68858 [0134.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0134.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0134.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0134.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0134.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0134.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0134.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0134.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cc68) returned 1 [0134.440] WriteFile (in: hFile=0xd1c, lpBuffer=0x80a5870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa0efdc0, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesWritten=0xa0efdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0136.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0136.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f38258 [0136.212] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.213] WriteFile (in: hFile=0xd1c, lpBuffer=0x3040a68*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xa0efe2c, lpOverlapped=0x0 | out: lpBuffer=0x3040a68*, lpNumberOfBytesWritten=0xa0efe2c*=0x116, lpOverlapped=0x0) returned 1 [0136.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 [0136.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38218) returned 1 [0136.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38e0) returned 1 [0136.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38258) returned 1 [0136.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0136.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39f8) returned 1 [0136.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0136.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0136.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5080 [0136.403] wcscpy (in: _Dest=0x2ff5080, _Source="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv" [0136.403] wcscat (in: _Dest=0x2ff5080, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv.f0dbec" [0136.403] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv.f0dbec", NtPathName=0xa0efdb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\hsKxMkB9q-Vvso.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30a68 [0136.623] FlushFileBuffers (hFile=0xd1c) returned 1 [0136.628] CloseHandle (hObject=0xd1c) returned 1 [0136.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6fc8 [0136.642] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0136.642] wcscat (in: _Dest=0x2fe6fc8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt" [0136.642] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\f0dbec-readme.txt")) returned 0x20 [0136.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 [0136.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe72c8) returned 1 Thread: id = 476 os_tid = 0x980 [0133.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5008 [0133.565] wcscpy (in: _Dest=0x3dc5008, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" [0133.565] wcscat (in: _Dest=0x3dc5008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\" [0133.565] wcscat (in: _Dest=0x3dc5008, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\*" [0133.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff060 [0133.565] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38118 [0133.996] wcscmp (_String1=".", _String2=".") returned 0 [0133.996] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.996] wcscmp (_String1="..", _String2=".") returned 1 [0133.996] wcscmp (_String1="..", _String2="..") returned 0 [0133.996] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0133.996] wcscmp (_String1="macromedia.com", _String2=".") returned 1 [0133.996] wcscmp (_String1="macromedia.com", _String2="..") returned 1 [0133.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2ab28 [0133.996] wcscpy (in: _Dest=0x3e2ab28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" [0133.996] wcscat (in: _Dest=0x3e2ab28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\" [0133.997] wcscat (in: _Dest=0x3e2ab28, _Source="macromedia.com" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0151.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2ab28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0151.792] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0151.792] FindClose (in: hFindFile=0x3f38118 | out: hFindFile=0x3f38118) returned 1 [0151.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff060) returned 1 [0151.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5008) returned 1 [0151.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4108) returned 1 Thread: id = 477 os_tid = 0x990 [0133.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx" (normalized: "c:\\users\\eebsym5\\documents\\-ajnscdbxjn475.docx")) returned 0x20 [0133.566] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx", dwFileAttributes=0x20) returned 1 [0134.440] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx" (normalized: "c:\\users\\eebsym5\\documents\\-ajnscdbxjn475.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd08 [0134.440] GetFileSizeEx (in: hFile=0xd08, lpFileSize=0x850f840 | out: lpFileSize=0x850f840*=26245) returned 1 [0134.440] SetFilePointerEx (in: hFile=0xd08, liDistanceToMove=0x6681, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.440] ReadFile (in: hFile=0xd08, lpBuffer=0x850f84c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x850f828, lpOverlapped=0x0 | out: lpBuffer=0x850f84c*, lpNumberOfBytesRead=0x850f828*=0x4, lpOverlapped=0x0) returned 1 [0134.442] SetFilePointerEx (in: hFile=0xd08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0134.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3890 [0134.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0134.442] NtQuerySystemTime (in: CurrentTime=0x850f7c8 | out: CurrentTime=0x850f7c8*=132471540031332000) returned 0x0 [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x441261f0 [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x75b2bda4 [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x72dbc53b [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x2ab1fd28 [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x4da616c7 [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x615a7b82 [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x152db436 [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x70087bd2 [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x4342bdc9 [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x14343e4b [0134.442] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x73344244 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x70d3822a [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x72c28792 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x79fa8397 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x18bb9ab6 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x714ebba [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x6ce4617 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x7ee84f63 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x383e29a5 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x4a1dbf44 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x290f4b34 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x775dd0e1 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x35d18979 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0xdef3564 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0xfaeeb91 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x7f7c32ed [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x4ecb673a [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x3ef0c8d7 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x257ea273 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x3e3399e6 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x6c62bf14 [0134.443] RtlRandomEx (in: Seed=0x850f7c0 | out: Seed=0x850f7c0) returned 0x876caf [0134.451] SetFilePointerEx (in: hFile=0xd08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.451] ReadFile (in: hFile=0xd08, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x850f7c8, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0x850f7c8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.451] SetFilePointerEx (in: hFile=0xd08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6cc68 [0134.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68858 [0134.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0134.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0134.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0134.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0134.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0134.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1798) returned 1 [0134.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0134.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cc68) returned 1 [0134.452] WriteFile (in: hFile=0xd08, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x850f7c8, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0x850f7c8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0136.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0136.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f37798 [0136.218] SetFilePointerEx (in: hFile=0xd08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.218] WriteFile (in: hFile=0xd08, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x850f834, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0x850f834*=0x118, lpOverlapped=0x0) returned 1 [0136.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0136.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f377d8) returned 1 [0136.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c58) returned 1 [0136.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37798) returned 1 [0136.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0136.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0136.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39a8) returned 1 [0136.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0136.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68a38 [0136.405] wcscpy (in: _Dest=0x3e68a38, _Source="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx") returned="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx" [0136.405] wcscat (in: _Dest=0x3e68a38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx.f0dbec" [0136.405] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx.f0dbec", NtPathName=0x850f7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-AjNSCDbxjN475.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35760 [0136.798] FlushFileBuffers (hFile=0xd08) returned 1 [0137.014] CloseHandle (hObject=0xd08) returned 1 [0137.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8cb50 [0137.577] wcscpy (in: _Dest=0x3d8cb50, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.577] wcscat (in: _Dest=0x3d8cb50, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.577] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cb50) returned 1 [0138.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b1b8) returned 1 Thread: id = 478 os_tid = 0x9a0 [0133.567] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx" (normalized: "c:\\users\\eebsym5\\documents\\1gtrrw_ijnjt9pm.pptx")) returned 0x20 [0133.567] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx", dwFileAttributes=0x20) returned 1 [0134.612] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx" (normalized: "c:\\users\\eebsym5\\documents\\1gtrrw_ijnjt9pm.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd04 [0134.612] GetFileSizeEx (in: hFile=0xd04, lpFileSize=0x97df7a0 | out: lpFileSize=0x97df7a0*=73772) returned 1 [0134.613] SetFilePointerEx (in: hFile=0xd04, liDistanceToMove=0x12028, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.613] ReadFile (in: hFile=0xd04, lpBuffer=0x97df7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x97df788, lpOverlapped=0x0 | out: lpBuffer=0x97df7ac*, lpNumberOfBytesRead=0x97df788*=0x4, lpOverlapped=0x0) returned 1 [0134.614] SetFilePointerEx (in: hFile=0xd04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0134.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0134.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0134.614] NtQuerySystemTime (in: CurrentTime=0x97df728 | out: CurrentTime=0x97df728*=132471540033048000) returned 0x0 [0134.614] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x57b78c82 [0134.614] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x7704aadb [0134.614] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x21abfc4d [0134.614] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x629c925a [0134.614] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x1f4ea024 [0134.614] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x1651c935 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x3e904f98 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x55181e93 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x7e32565a [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x643dfae8 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x26c08fc3 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x293deb10 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x1146d226 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x81aa591 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x44b3ab11 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x10fdb562 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x6cb18a78 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x36990126 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x52e3982 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x54077757 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x2512db25 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x39b70c60 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x5623b2bb [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x4e293edd [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x6184ac9f [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x7df67211 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x5b844344 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x712120fb [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x58265bd4 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x1417e696 [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x6cb0e07d [0134.615] RtlRandomEx (in: Seed=0x97df720 | out: Seed=0x97df720) returned 0x280547ce [0134.624] SetFilePointerEx (in: hFile=0xd04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.624] ReadFile (in: hFile=0xd04, lpBuffer=0x81cfc68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x97df728, lpOverlapped=0x0 | out: lpBuffer=0x81cfc68*, lpNumberOfBytesRead=0x97df728*=0x3c00, lpOverlapped=0x0) returned 1 [0134.624] SetFilePointerEx (in: hFile=0xd04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0134.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0134.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81d3870 [0134.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0134.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0134.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0134.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.625] WriteFile (in: hFile=0xd04, lpBuffer=0x81d3870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x97df728, lpOverlapped=0x0 | out: lpBuffer=0x81d3870*, lpNumberOfBytesWritten=0x97df728*=0x3c00, lpOverlapped=0x0) returned 1 [0136.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3870) returned 1 [0136.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81cfc68) returned 1 [0136.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f383d8 [0136.273] SetFilePointerEx (in: hFile=0xd04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.273] WriteFile (in: hFile=0xd04, lpBuffer=0x3d57278*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x97df794, lpOverlapped=0x0 | out: lpBuffer=0x3d57278*, lpNumberOfBytesWritten=0x97df794*=0x11a, lpOverlapped=0x0) returned 1 [0136.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 [0136.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf390) returned 1 [0136.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0136.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f383d8) returned 1 [0136.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0136.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0136.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0136.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0136.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0bbe0 [0136.426] wcscpy (in: _Dest=0x3f0bbe0, _Source="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx" [0136.426] wcscat (in: _Dest=0x3f0bbe0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx.f0dbec" [0136.426] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx.f0dbec", NtPathName=0x97df718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\1GtRrw_iJnJt9Pm.pptx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35910 [0136.859] FlushFileBuffers (hFile=0xd04) returned 1 [0136.861] CloseHandle (hObject=0xd04) returned 1 [0136.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d440 [0136.862] wcscpy (in: _Dest=0x3d8d440, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0136.862] wcscat (in: _Dest=0x3d8d440, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0136.862] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0137.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d440) returned 1 [0137.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 Thread: id = 479 os_tid = 0x9b0 [0133.589] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx" (normalized: "c:\\users\\eebsym5\\documents\\aboucnijliyd.pptx")) returned 0x20 [0133.589] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx", dwFileAttributes=0x20) returned 1 [0134.625] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx" (normalized: "c:\\users\\eebsym5\\documents\\aboucnijliyd.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xce4 [0134.626] GetFileSizeEx (in: hFile=0xce4, lpFileSize=0x95df9c0 | out: lpFileSize=0x95df9c0*=10708) returned 1 [0134.626] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x29d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.626] ReadFile (in: hFile=0xce4, lpBuffer=0x95df9cc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x95df9a8, lpOverlapped=0x0 | out: lpBuffer=0x95df9cc*, lpNumberOfBytesRead=0x95df9a8*=0x4, lpOverlapped=0x0) returned 1 [0134.627] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0134.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0134.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0134.627] NtQuerySystemTime (in: CurrentTime=0x95df948 | out: CurrentTime=0x95df948*=132471540033048000) returned 0x0 [0134.627] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x18372ab3 [0134.627] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x495b41ab [0134.627] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x88440da [0134.627] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x3aff39a2 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x3b54eb22 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x2d800dec [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x5b02eba4 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x2d3b4c83 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x22bf96af [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x5a0df257 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x3286b6df [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x24abdc88 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x386a6e29 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x32e3d2d7 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x108c3d2b [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x6719b94b [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x35e8f31f [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0xe40c3eb [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x717d6e91 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x208f50ed [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x3ad460e2 [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x6b338a7e [0134.628] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x2ea4c0fa [0134.629] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x5e719299 [0134.629] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x5d112fd7 [0134.629] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x257777b9 [0134.629] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x47b3e3fc [0134.629] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x579561b3 [0134.629] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0xff1889b [0134.629] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x24640be7 [0134.629] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x7b2e6b01 [0134.629] RtlRandomEx (in: Seed=0x95df940 | out: Seed=0x95df940) returned 0x7364862d [0134.637] ReadFile (in: hFile=0xce4, lpBuffer=0x81d7478, nNumberOfBytesToRead=0x29d4, lpNumberOfBytesRead=0x95df93c, lpOverlapped=0x0 | out: lpBuffer=0x81d7478*, lpNumberOfBytesRead=0x95df93c*=0x29d4, lpOverlapped=0x0) returned 1 [0134.638] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.638] WriteFile (in: hFile=0xce4, lpBuffer=0x81db080*, nNumberOfBytesToWrite=0x29d4, lpNumberOfBytesWritten=0x95df940, lpOverlapped=0x0 | out: lpBuffer=0x81db080*, lpNumberOfBytesWritten=0x95df940*=0x29d4, lpOverlapped=0x0) returned 1 [0136.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0136.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0136.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0136.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db080) returned 1 [0136.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7478) returned 1 [0136.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0136.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0136.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df8088 [0136.275] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.275] WriteFile (in: hFile=0xce4, lpBuffer=0x3d56498*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x95df9b4, lpOverlapped=0x0 | out: lpBuffer=0x3d56498*, lpNumberOfBytesWritten=0x95df9b4*=0x114, lpOverlapped=0x0) returned 1 [0136.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 [0136.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77ad0) returned 1 [0136.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0136.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8088) returned 1 [0136.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0136.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0136.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0136.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ea8) returned 1 [0136.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054e00 [0136.428] wcscpy (in: _Dest=0x8054e00, _Source="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx" [0136.428] wcscat (in: _Dest=0x8054e00, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx.f0dbec" [0136.428] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx.f0dbec", NtPathName=0x95df938, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\ABoUcNiJLIyD.pptx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30c00 [0136.863] FlushFileBuffers (hFile=0xce4) returned 1 [0136.865] CloseHandle (hObject=0xce4) returned 1 [0136.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e2e0 [0136.866] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0136.866] wcscat (in: _Dest=0x3d8e2e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0136.866] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0137.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 [0137.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c128) returned 1 Thread: id = 480 os_tid = 0x9c0 [0133.589] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\bkmm9etf6.xlsx")) returned 0x20 [0133.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx", dwFileAttributes=0x20) returned 1 [0134.471] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\bkmm9etf6.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd00 [0134.471] GetFileSizeEx (in: hFile=0xd00, lpFileSize=0xa2dfa10 | out: lpFileSize=0xa2dfa10*=24183) returned 1 [0134.471] SetFilePointerEx (in: hFile=0xd00, liDistanceToMove=0x5e73, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.471] ReadFile (in: hFile=0xd00, lpBuffer=0xa2dfa1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa2df9f8, lpOverlapped=0x0 | out: lpBuffer=0xa2dfa1c*, lpNumberOfBytesRead=0xa2df9f8*=0x4, lpOverlapped=0x0) returned 1 [0134.473] SetFilePointerEx (in: hFile=0xd00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3318 [0134.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0134.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0134.473] NtQuerySystemTime (in: CurrentTime=0xa2df998 | out: CurrentTime=0xa2df998*=132471540031644000) returned 0x0 [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x6409029a [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x656b8c3d [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x60f3e752 [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x39d497db [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x664263f2 [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x19d3516a [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x3cabb122 [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0xbb1c653 [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x34917704 [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x375b7ebf [0134.473] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x6b2f3b17 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x6856dc98 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0xa5265bb [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x712120fb [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x5d971327 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x472bfb93 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x6e52776f [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x3d2c3b62 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x7b9d091 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x14539e7b [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x22a04ae0 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x205f2d8f [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x1c32507e [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x4c897216 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x366bf563 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x1b674fe1 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x10babbff [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x53794799 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x58a45eaf [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x3007da58 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x269bed58 [0134.474] RtlRandomEx (in: Seed=0xa2df990 | out: Seed=0xa2df990) returned 0x13aa6abc [0134.482] SetFilePointerEx (in: hFile=0xd00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.482] ReadFile (in: hFile=0xd00, lpBuffer=0x814a060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa2df998, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesRead=0xa2df998*=0x3c00, lpOverlapped=0x0) returned 1 [0134.482] SetFilePointerEx (in: hFile=0xd00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3318 [0134.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3318) returned 1 [0134.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814dc68 [0134.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3318 [0134.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0134.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0134.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.483] WriteFile (in: hFile=0xd00, lpBuffer=0x814dc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa2df998, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesWritten=0xa2df998*=0x3c00, lpOverlapped=0x0) returned 1 [0136.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0136.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0136.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df79c0 [0136.220] SetFilePointerEx (in: hFile=0xd00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.220] WriteFile (in: hFile=0xd00, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xa2dfa04, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xa2dfa04*=0x10e, lpOverlapped=0x0) returned 1 [0136.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0136.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7988) returned 1 [0136.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0136.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0136.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3318) returned 1 [0136.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0136.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3688) returned 1 [0136.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3660) returned 1 [0136.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8054cb0 [0136.407] wcscpy (in: _Dest=0x8054cb0, _Source="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx" [0136.407] wcscat (in: _Dest=0x8054cb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx.f0dbec" [0136.408] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx.f0dbec", NtPathName=0xa2df988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\bKMM9eTf6.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e23e40 [0137.738] FlushFileBuffers (hFile=0xd00) returned 1 [0137.745] CloseHandle (hObject=0xd00) returned 1 [0137.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecdaf8 [0137.806] wcscpy (in: _Dest=0x3ecdaf8, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.806] wcscat (in: _Dest=0x3ecdaf8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.807] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdaf8) returned 1 [0138.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 Thread: id = 481 os_tid = 0x9d0 [0133.590] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx" (normalized: "c:\\users\\eebsym5\\documents\\clesylcnhcg _v.docx")) returned 0x20 [0133.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx", dwFileAttributes=0x20) returned 1 [0134.483] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx" (normalized: "c:\\users\\eebsym5\\documents\\clesylcnhcg _v.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcf8 [0134.483] GetFileSizeEx (in: hFile=0xcf8, lpFileSize=0xad9fcb0 | out: lpFileSize=0xad9fcb0*=53656) returned 1 [0134.483] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0xd194, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.483] ReadFile (in: hFile=0xcf8, lpBuffer=0xad9fcbc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad9fc98, lpOverlapped=0x0 | out: lpBuffer=0xad9fcbc*, lpNumberOfBytesRead=0xad9fc98*=0x4, lpOverlapped=0x0) returned 1 [0134.485] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0134.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36d8 [0134.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0134.485] NtQuerySystemTime (in: CurrentTime=0xad9fc38 | out: CurrentTime=0xad9fc38*=132471540031644000) returned 0x0 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x4e93b377 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x8842f9f [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x2af0b8df [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x1f82b1db [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x30de5f9 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x269d3a9c [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x6fc8b46c [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0xfd23b92 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x60a295d1 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x7ca2d84f [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x1cecb616 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x188403e0 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x23f03075 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x44715769 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x61f4ebd9 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x5e25a3ca [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x440c182f [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x7b13000f [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x6c386365 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x1048c4c2 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x3a25b81d [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x9446b08 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x1b96781d [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x20ea8708 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x58a9fea4 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x49094f8e [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x2c953f5 [0134.485] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x5efe31cd [0134.486] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x37264c6c [0134.486] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x61691d77 [0134.486] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x3c2b26e2 [0134.486] RtlRandomEx (in: Seed=0xad9fc30 | out: Seed=0xad9fc30) returned 0x311035ba [0134.493] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.493] ReadFile (in: hFile=0xcf8, lpBuffer=0x8151870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad9fc38, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesRead=0xad9fc38*=0x3c00, lpOverlapped=0x0) returned 1 [0134.493] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0134.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0134.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8155478 [0134.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0134.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0134.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0134.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.494] WriteFile (in: hFile=0xcf8, lpBuffer=0x8155478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad9fc38, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesWritten=0xad9fc38*=0x3c00, lpOverlapped=0x0) returned 1 [0136.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0136.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0136.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f37b18 [0136.224] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.224] WriteFile (in: hFile=0xcf8, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xad9fca4, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0xad9fca4*=0x118, lpOverlapped=0x0) returned 1 [0136.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0136.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37718) returned 1 [0136.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1130) returned 1 [0136.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37b18) returned 1 [0136.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0136.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36d8) returned 1 [0136.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0136.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17c0) returned 1 [0136.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68ba0 [0136.409] wcscpy (in: _Dest=0x3e68ba0, _Source="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx") returned="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx" [0136.409] wcscat (in: _Dest=0x3e68ba0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx.f0dbec" [0136.409] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx.f0dbec", NtPathName=0xad9fc28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\CLesYlcnHCG _v.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f357f0 [0137.745] FlushFileBuffers (hFile=0xcf8) returned 1 [0137.758] CloseHandle (hObject=0xcf8) returned 1 [0137.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd7b8 [0137.843] wcscpy (in: _Dest=0x3ecd7b8, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.843] wcscat (in: _Dest=0x3ecd7b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.843] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd7b8) returned 1 [0138.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c878) returned 1 Thread: id = 482 os_tid = 0x9e0 [0133.591] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx" (normalized: "c:\\users\\eebsym5\\documents\\ettrpq9.pptx")) returned 0x20 [0133.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx", dwFileAttributes=0x20) returned 1 [0134.494] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx" (normalized: "c:\\users\\eebsym5\\documents\\ettrpq9.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcf4 [0134.495] GetFileSizeEx (in: hFile=0xcf4, lpFileSize=0xb6ffd10 | out: lpFileSize=0xb6ffd10*=95934) returned 1 [0134.495] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x176ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.495] ReadFile (in: hFile=0xcf4, lpBuffer=0xb6ffd1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb6ffcf8, lpOverlapped=0x0 | out: lpBuffer=0xb6ffd1c*, lpNumberOfBytesRead=0xb6ffcf8*=0x4, lpOverlapped=0x0) returned 1 [0134.496] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0134.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0134.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0134.496] NtQuerySystemTime (in: CurrentTime=0xb6ffc98 | out: CurrentTime=0xb6ffc98*=132471540031800000) returned 0x0 [0134.496] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x3e19c933 [0134.496] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x52dec7d3 [0134.496] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x5c1d8230 [0134.496] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x39b70c60 [0134.496] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x18847849 [0134.496] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x3cd689e2 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x474c494d [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x38ea4dd7 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x7875ad49 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x22357f9f [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x6c068346 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x2ed9bbf2 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x48cf7e59 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x7b13000f [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x23e3501c [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x1558c9a5 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x3680eeef [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x2f82812f [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x52207f4c [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x2dedc2c6 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x66bf7277 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x48df66e4 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x2ec11d05 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x3bed8b57 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x314dfd57 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x66b4a694 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x3c004e22 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x88a88a8 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x4c78bd37 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x6fc8b46c [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x4689f357 [0134.497] RtlRandomEx (in: Seed=0xb6ffc90 | out: Seed=0xb6ffc90) returned 0x290901c0 [0134.506] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.506] ReadFile (in: hFile=0xcf4, lpBuffer=0x8159080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6ffc98, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesRead=0xb6ffc98*=0x3c00, lpOverlapped=0x0) returned 1 [0134.507] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0134.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0134.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0134.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0134.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0134.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0134.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.507] WriteFile (in: hFile=0xcf4, lpBuffer=0x815cc88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6ffc98, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesWritten=0xb6ffc98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0136.227] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.227] ReadFile (in: hFile=0xcf4, lpBuffer=0x8159080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6ffc98, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesRead=0xb6ffc98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.227] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1018 [0136.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1018) returned 1 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1018 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0136.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0136.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.228] WriteFile (in: hFile=0xcf4, lpBuffer=0x815cc88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6ffc98, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesWritten=0xb6ffc98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0136.234] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x13abe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.234] ReadFile (in: hFile=0xcf4, lpBuffer=0x8159080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6ffc98, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesRead=0xb6ffc98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.234] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x13abe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0136.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0136.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0136.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0136.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0136.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0136.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0136.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.235] WriteFile (in: hFile=0xcf4, lpBuffer=0x815cc88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6ffc98, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesWritten=0xb6ffc98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0136.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd820 [0136.243] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.243] WriteFile (in: hFile=0xcf4, lpBuffer=0x3e16f90*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xb6ffd04, lpOverlapped=0x0 | out: lpBuffer=0x3e16f90*, lpNumberOfBytesWritten=0xb6ffd04*=0x14a, lpOverlapped=0x0) returned 1 [0136.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16f90) returned 1 [0136.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f8b8) returned 1 [0136.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0136.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4298) returned 1 [0136.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd820) returned 1 [0136.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0136.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0136.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0136.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecd820 [0136.411] wcscpy (in: _Dest=0x3ecd820, _Source="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx" [0136.411] wcscat (in: _Dest=0x3ecd820, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx.f0dbec" [0136.411] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx.f0dbec", NtPathName=0xb6ffc88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\ettRpQ9.pptx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da63f0 [0137.755] FlushFileBuffers (hFile=0xcf4) returned 1 [0137.760] CloseHandle (hObject=0xcf4) returned 1 [0137.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecdb60 [0137.844] wcscpy (in: _Dest=0x3ecdb60, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.844] wcscat (in: _Dest=0x3ecdb60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.844] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdb60) returned 1 [0138.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23ab8) returned 1 Thread: id = 483 os_tid = 0x9f0 [0133.591] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\fy0cnpd3sshrjjng.xlsx")) returned 0x20 [0133.592] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx", dwFileAttributes=0x20) returned 1 [0134.508] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\fy0cnpd3sshrjjng.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xce8 [0134.508] GetFileSizeEx (in: hFile=0xce8, lpFileSize=0xaf1f870 | out: lpFileSize=0xaf1f870*=81031) returned 1 [0134.508] SetFilePointerEx (in: hFile=0xce8, liDistanceToMove=0x13c83, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.508] ReadFile (in: hFile=0xce8, lpBuffer=0xaf1f87c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf1f858, lpOverlapped=0x0 | out: lpBuffer=0xaf1f87c*, lpNumberOfBytesRead=0xaf1f858*=0x4, lpOverlapped=0x0) returned 1 [0134.509] SetFilePointerEx (in: hFile=0xce8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0134.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32a0 [0134.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1748 [0134.510] NtQuerySystemTime (in: CurrentTime=0xaf1f7f8 | out: CurrentTime=0xaf1f7f8*=132471540031956000) returned 0x0 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x1cc76a74 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x23e3501c [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x2af0b8df [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x3c80d862 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x577f2121 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x813707c [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x1eeb0a3b [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x52207f4c [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x17b40764 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x2f82812f [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x121edb1b [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x34b0c8b9 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x4c78bd37 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x3120ca4d [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x7a045dc6 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x6f0d5255 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x48f1e0c6 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x49f05bd5 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0xf6b8db6 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x7a045dc6 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x3d2d2544 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x5efe31cd [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x55724efb [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x14f46dd4 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x1386429a [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x74ef5590 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x1f72a58d [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x35ec4f15 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x28be34b7 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x35627042 [0134.510] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0x212b83f0 [0134.511] RtlRandomEx (in: Seed=0xaf1f7f0 | out: Seed=0xaf1f7f0) returned 0xbabae0e [0134.518] SetFilePointerEx (in: hFile=0xce8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.518] ReadFile (in: hFile=0xce8, lpBuffer=0x8160890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf1f7f8, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0xaf1f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.518] SetFilePointerEx (in: hFile=0xce8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0134.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0134.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0134.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0134.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1748 [0134.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1748) returned 1 [0134.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.519] WriteFile (in: hFile=0xce8, lpBuffer=0x8164498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf1f7f8, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesWritten=0xaf1f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0136.231] SetFilePointerEx (in: hFile=0xce8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.231] ReadFile (in: hFile=0xce8, lpBuffer=0x8160890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf1f7f8, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0xaf1f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.232] SetFilePointerEx (in: hFile=0xce8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0136.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0136.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0136.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0136.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0136.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0136.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0136.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.233] WriteFile (in: hFile=0xce8, lpBuffer=0x8164498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf1f7f8, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesWritten=0xaf1f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0136.240] SetFilePointerEx (in: hFile=0xce8, liDistanceToMove=0x10087, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.240] ReadFile (in: hFile=0xce8, lpBuffer=0x8160890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf1f7f8, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0xaf1f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.241] SetFilePointerEx (in: hFile=0xce8, liDistanceToMove=0x10087, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0136.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0136.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0136.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0136.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0136.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0136.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0136.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.241] WriteFile (in: hFile=0xce8, lpBuffer=0x8164498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf1f7f8, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesWritten=0xaf1f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0136.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd7b8 [0136.250] SetFilePointerEx (in: hFile=0xce8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.250] WriteFile (in: hFile=0xce8, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x15c, lpNumberOfBytesWritten=0xaf1f864, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xaf1f864*=0x15c, lpOverlapped=0x0) returned 1 [0136.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0136.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37f18) returned 1 [0136.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0136.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37818) returned 1 [0136.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd7b8) returned 1 [0136.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32a0) returned 1 [0136.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1810) returned 1 [0136.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0136.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68b28 [0136.413] wcscpy (in: _Dest=0x3e68b28, _Source="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx" [0136.413] wcscat (in: _Dest=0x3e68b28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx.f0dbec" [0136.413] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx.f0dbec", NtPathName=0xaf1f7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\fy0CnPd3SShRjJNg.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35880 [0137.757] FlushFileBuffers (hFile=0xce8) returned 1 [0137.764] CloseHandle (hObject=0xce8) returned 1 [0137.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd8f0 [0137.845] wcscpy (in: _Dest=0x3ecd8f0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.845] wcscat (in: _Dest=0x3ecd8f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.845] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd8f0) returned 1 [0138.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a18) returned 1 Thread: id = 484 os_tid = 0xa00 [0133.592] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx" (normalized: "c:\\users\\eebsym5\\documents\\hfr1i51 8epu3xt7za1.docx")) returned 0x20 [0133.592] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx", dwFileAttributes=0x20) returned 1 [0134.519] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx" (normalized: "c:\\users\\eebsym5\\documents\\hfr1i51 8epu3xt7za1.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcec [0134.519] GetFileSizeEx (in: hFile=0xcec, lpFileSize=0xb19fa70 | out: lpFileSize=0xb19fa70*=98342) returned 1 [0134.519] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x18022, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.519] ReadFile (in: hFile=0xcec, lpBuffer=0xb19fa7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb19fa58, lpOverlapped=0x0 | out: lpBuffer=0xb19fa7c*, lpNumberOfBytesRead=0xb19fa58*=0x4, lpOverlapped=0x0) returned 1 [0134.521] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1748 [0134.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef34f8 [0134.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef34a8 [0134.521] NtQuerySystemTime (in: CurrentTime=0xb19f9f8 | out: CurrentTime=0xb19f9f8*=132471540032112000) returned 0x0 [0134.521] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x590fab65 [0134.521] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x4059ffa2 [0134.521] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x21a6a0b8 [0134.521] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x4afdbed7 [0134.521] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x2cf9da5e [0134.521] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x4c9073ea [0134.521] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x24abfa80 [0134.521] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x53fb7333 [0134.521] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x6d046d9 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x3d0162a2 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x39f62c67 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x155f5538 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x6be862be [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x30fc66e1 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x47656e4 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x45484dd1 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x6c8c218d [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x763cfd27 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x1307134a [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x190bb6ce [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x3bd57562 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x566ea521 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x1311e09d [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x37daf721 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x6a9c4348 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x61691d77 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x4822e4d2 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x3c2b26e2 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x5da1fc3f [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x4f54f8b1 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x6bb167c6 [0134.522] RtlRandomEx (in: Seed=0xb19f9f0 | out: Seed=0xb19f9f0) returned 0x45484dd1 [0134.534] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.556] ReadFile (in: hFile=0xcec, lpBuffer=0x81680a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb19f9f8, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesRead=0xb19f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.556] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1748 [0134.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1748) returned 1 [0134.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816bca8 [0134.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1748 [0134.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef34a8 [0134.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef34a8) returned 1 [0134.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.557] WriteFile (in: hFile=0xcec, lpBuffer=0x816bca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb19f9f8, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesWritten=0xb19f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0136.238] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.238] ReadFile (in: hFile=0xcec, lpBuffer=0x81680a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb19f9f8, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesRead=0xb19f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.238] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0136.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0136.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0136.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816bca8 [0136.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0136.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0136.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0136.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.239] WriteFile (in: hFile=0xcec, lpBuffer=0x816bca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb19f9f8, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesWritten=0xb19f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0136.247] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x14426, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.247] ReadFile (in: hFile=0xcec, lpBuffer=0x81680a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb19f9f8, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesRead=0xb19f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.248] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x14426, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0136.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0136.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0136.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816bca8 [0136.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0136.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0136.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0136.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.249] WriteFile (in: hFile=0xcec, lpBuffer=0x816bca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb19f9f8, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesWritten=0xb19f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0136.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecda90 [0136.257] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.257] WriteFile (in: hFile=0xcec, lpBuffer=0x3e380f0*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0xb19fa64, lpOverlapped=0x0 | out: lpBuffer=0x3e380f0*, lpNumberOfBytesWritten=0xb19fa64*=0x162, lpOverlapped=0x0) returned 1 [0136.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e380f0) returned 1 [0136.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308800) returned 1 [0136.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1748) returned 1 [0136.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecda90) returned 1 [0136.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef34f8) returned 1 [0136.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0136.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0136.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da6270 [0136.416] wcscpy (in: _Dest=0x3da6270, _Source="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx") returned="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx" [0136.416] wcscat (in: _Dest=0x3da6270, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx.f0dbec" [0136.416] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx.f0dbec", NtPathName=0xb19f9e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\hfr1I51 8Epu3Xt7zA1.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bbc8 [0137.760] FlushFileBuffers (hFile=0xcec) returned 1 [0137.766] CloseHandle (hObject=0xcec) returned 1 [0137.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd958 [0137.846] wcscpy (in: _Dest=0x3ecd958, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.846] wcscat (in: _Dest=0x3ecd958, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.846] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd958) returned 1 [0138.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a88) returned 1 Thread: id = 485 os_tid = 0xa10 [0133.593] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx" (normalized: "c:\\users\\eebsym5\\documents\\i6td6dsri.pptx")) returned 0x20 [0133.593] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx", dwFileAttributes=0x20) returned 1 [0134.557] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx" (normalized: "c:\\users\\eebsym5\\documents\\i6td6dsri.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xce0 [0134.558] GetFileSizeEx (in: hFile=0xce0, lpFileSize=0xb58fb18 | out: lpFileSize=0xb58fb18*=101002) returned 1 [0134.558] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x18a86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.558] ReadFile (in: hFile=0xce0, lpBuffer=0xb58fb24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb58fb00, lpOverlapped=0x0 | out: lpBuffer=0xb58fb24*, lpNumberOfBytesRead=0xb58fb00*=0x4, lpOverlapped=0x0) returned 1 [0134.560] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef34a8 [0134.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3480 [0134.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0134.560] NtQuerySystemTime (in: CurrentTime=0xb58faa0 | out: CurrentTime=0xb58faa0*=132471540032424000) returned 0x0 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x49094f8e [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x2aef32ee [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x452eff9b [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x42c7a01 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x48cf7e59 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x5d5867bd [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x1f99aeb1 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x4e00fc57 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x12bc61ee [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x6e205b90 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x69258cd5 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x2b1ca54f [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x1851e622 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x3baa9ca2 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x44f743d7 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x678ac4c8 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x269d3a9c [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0xfdc2343 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x48f1e0c6 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x7f4c01d0 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x37264c6c [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x5c03b0f4 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x798b0c31 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x2980a48d [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x6bdd5f2d [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x41b98f94 [0134.560] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x2c68bec6 [0134.561] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x3a28949b [0134.561] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x2dedc2c6 [0134.561] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x73f49390 [0134.561] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x56bc79a0 [0134.561] RtlRandomEx (in: Seed=0xb58fa98 | out: Seed=0xb58fa98) returned 0x29e47d05 [0134.569] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.569] ReadFile (in: hFile=0xce0, lpBuffer=0x816f8b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb58faa0, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesRead=0xb58faa0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.569] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef34a8 [0134.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef34a8) returned 1 [0134.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81734b8 [0134.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef34a8 [0134.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0134.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3458) returned 1 [0134.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.570] WriteFile (in: hFile=0xce0, lpBuffer=0x81734b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb58faa0, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesWritten=0xb58faa0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0136.245] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.245] ReadFile (in: hFile=0xce0, lpBuffer=0x816f8b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb58faa0, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesRead=0xb58faa0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.245] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0136.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1018 [0136.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1018) returned 1 [0136.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81734b8 [0136.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1018 [0136.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0136.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0136.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.246] WriteFile (in: hFile=0xce0, lpBuffer=0x81734b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb58faa0, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesWritten=0xb58faa0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0136.254] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x14e8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.255] ReadFile (in: hFile=0xce0, lpBuffer=0x816f8b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb58faa0, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesRead=0xb58faa0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.255] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x14e8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0136.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0136.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0136.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81734b8 [0136.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0136.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0136.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0136.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.256] WriteFile (in: hFile=0xce0, lpBuffer=0x81734b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb58faa0, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesWritten=0xb58faa0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0136.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdaf8 [0136.263] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.263] WriteFile (in: hFile=0xce0, lpBuffer=0x3e17398*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xb58fb0c, lpOverlapped=0x0 | out: lpBuffer=0x3e17398*, lpNumberOfBytesWritten=0xb58fb0c*=0x14e, lpOverlapped=0x0) returned 1 [0136.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17398) returned 1 [0136.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78a8) returned 1 [0136.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef34a8) returned 1 [0136.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79f8) returned 1 [0136.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdaf8) returned 1 [0136.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0136.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3278) returned 1 [0136.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1680) returned 1 [0136.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8054d90 [0136.421] wcscpy (in: _Dest=0x8054d90, _Source="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx" [0136.421] wcscat (in: _Dest=0x8054d90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx.f0dbec" [0136.421] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx.f0dbec", NtPathName=0xb58fa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\i6tD6dSrI.pptx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da4c70 [0137.765] FlushFileBuffers (hFile=0xce0) returned 1 [0137.772] CloseHandle (hObject=0xce0) returned 1 [0137.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecdd00 [0137.848] wcscpy (in: _Dest=0x3ecdd00, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.848] wcscat (in: _Dest=0x3ecdd00, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.848] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdd00) returned 1 [0138.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe74a8) returned 1 Thread: id = 486 os_tid = 0xa30 [0133.593] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx" (normalized: "c:\\users\\eebsym5\\documents\\jhr8txh lcnre.docx")) returned 0x20 [0133.593] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx", dwFileAttributes=0x20) returned 1 [0134.570] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx" (normalized: "c:\\users\\eebsym5\\documents\\jhr8txh lcnre.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcdc [0134.571] GetFileSizeEx (in: hFile=0xcdc, lpFileSize=0x8c1fc18 | out: lpFileSize=0x8c1fc18*=101787) returned 1 [0134.571] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x18d97, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.571] ReadFile (in: hFile=0xcdc, lpBuffer=0x8c1fc24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c1fc00, lpOverlapped=0x0 | out: lpBuffer=0x8c1fc24*, lpNumberOfBytesRead=0x8c1fc00*=0x4, lpOverlapped=0x0) returned 1 [0134.572] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0134.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1860 [0134.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0134.572] NtQuerySystemTime (in: CurrentTime=0x8c1fba0 | out: CurrentTime=0x8c1fba0*=132471540032580000) returned 0x0 [0134.572] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x69a90e58 [0134.572] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0xcdc38a9 [0134.572] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x22b206d4 [0134.572] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x121cfd85 [0134.572] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x6a6f4e8a [0134.572] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x5386b808 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x4be8710b [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x74459de6 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x4c299e7a [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x55b0481 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x570ab4d7 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x29a80cf3 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x585e7c56 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x62988288 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x3b2a1262 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x1096180b [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x73a45b65 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x58a9fea4 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x9f7f98c [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x2fb632f5 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x3f82ab48 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x2c55f2e2 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x4dd81889 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x14b02334 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x7db80a07 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0xe876771 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0xd3fc3ad [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x74392440 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x3ad3b7c0 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x2b008c44 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0x6b60a6f8 [0134.573] RtlRandomEx (in: Seed=0x8c1fb98 | out: Seed=0x8c1fb98) returned 0xe9f14b4 [0134.582] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.582] ReadFile (in: hFile=0xcdc, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8c1fba0, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0x8c1fba0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.582] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0134.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3458) returned 1 [0134.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817acc8 [0134.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0134.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0134.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0134.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.583] WriteFile (in: hFile=0xcdc, lpBuffer=0x817acc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8c1fba0, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesWritten=0x8c1fba0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0136.252] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.252] ReadFile (in: hFile=0xcdc, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8c1fba0, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0x8c1fba0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.253] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0136.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0136.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0136.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817acc8 [0136.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0136.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0136.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0136.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0136.253] WriteFile (in: hFile=0xcdc, lpBuffer=0x817acc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8c1fba0, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesWritten=0x8c1fba0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0136.261] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x1519b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.261] ReadFile (in: hFile=0xcdc, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8c1fba0, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0x8c1fba0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.261] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x1519b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83087b8 [0136.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0136.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0136.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0136.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817acc8 [0136.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0136.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0136.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0136.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83087b8) returned 1 [0136.262] WriteFile (in: hFile=0xcdc, lpBuffer=0x817acc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8c1fba0, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesWritten=0x8c1fba0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0136.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdb60 [0136.267] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.268] WriteFile (in: hFile=0xcdc, lpBuffer=0x3dcd898*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x8c1fc0c, lpOverlapped=0x0 | out: lpBuffer=0x3dcd898*, lpNumberOfBytesWritten=0x8c1fc0c*=0x156, lpOverlapped=0x0) returned 1 [0136.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd898) returned 1 [0136.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f376d8) returned 1 [0136.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3458) returned 1 [0136.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37558) returned 1 [0136.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdb60) returned 1 [0136.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1860) returned 1 [0136.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef33e0) returned 1 [0136.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3250) returned 1 [0136.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0bb68 [0136.424] wcscpy (in: _Dest=0x3f0bb68, _Source="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx") returned="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx" [0136.424] wcscat (in: _Dest=0x3f0bb68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx.f0dbec" [0136.424] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx.f0dbec", NtPathName=0x8c1fb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\JHR8txH LCnrE.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30b78 [0136.851] FlushFileBuffers (hFile=0xcdc) returned 1 [0136.853] CloseHandle (hObject=0xcdc) returned 1 [0136.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8b970 [0136.854] wcscpy (in: _Dest=0x3d8b970, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0136.854] wcscat (in: _Dest=0x3d8b970, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0136.855] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0137.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b970) returned 1 [0137.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bbe0) returned 1 Thread: id = 487 os_tid = 0xa40 [0133.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e23900 [0133.594] wcscpy (in: _Dest=0x3e23900, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0133.594] wcscat (in: _Dest=0x3e23900, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0133.594] wcscat (in: _Dest=0x3e23900, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\*") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\*" [0133.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0133.594] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a6b2a90, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x5e37dac0, ftLastAccessTime.dwHighDateTime=0x1d5e21f, ftLastWriteTime.dwLowDateTime=0x5e37dac0, ftLastWriteTime.dwHighDateTime=0x1d5e21f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0133.595] wcscmp (_String1=".", _String2=".") returned 0 [0133.595] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a6b2a90, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x5e37dac0, ftLastAccessTime.dwHighDateTime=0x1d5e21f, ftLastWriteTime.dwLowDateTime=0x5e37dac0, ftLastWriteTime.dwHighDateTime=0x1d5e21f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.595] wcscmp (_String1="..", _String2=".") returned 1 [0133.595] wcscmp (_String1="..", _String2="..") returned 0 [0133.595] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x580aff60, ftCreationTime.dwHighDateTime=0x1d5deaa, ftLastAccessTime.dwLowDateTime=0x2b95d280, ftLastAccessTime.dwHighDateTime=0x1d5d850, ftLastWriteTime.dwLowDateTime=0x2b95d280, ftLastWriteTime.dwHighDateTime=0x1d5d850, nFileSizeHigh=0x0, nFileSizeLow=0x1545f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-EKr.pdf", cAlternateFileName="")) returned 1 [0133.595] wcscmp (_String1="-EKr.pdf", _String2=".") returned -1 [0133.595] wcscmp (_String1="-EKr.pdf", _String2="..") returned -1 [0133.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d440 [0133.595] wcscpy (in: _Dest=0x3d8d440, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0133.595] wcscat (in: _Dest=0x3d8d440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0133.595] wcscat (in: _Dest=0x3d8d440, _Source="-EKr.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf" [0134.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0134.146] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf71ddd40, ftCreationTime.dwHighDateTime=0x1d5db6f, ftLastAccessTime.dwLowDateTime=0x88271b30, ftLastAccessTime.dwHighDateTime=0x1d5e4b7, ftLastWriteTime.dwLowDateTime=0x88271b30, ftLastWriteTime.dwHighDateTime=0x1d5e4b7, nFileSizeHigh=0x0, nFileSizeLow=0x83ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="59O4A yl.ods", cAlternateFileName="59O4AY~1.ODS")) returned 1 [0134.147] wcscmp (_String1="59O4A yl.ods", _String2=".") returned 1 [0134.147] wcscmp (_String1="59O4A yl.ods", _String2="..") returned 1 [0134.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39d28 [0134.147] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.147] wcscat (in: _Dest=0x3f39d28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.147] wcscat (in: _Dest=0x3f39d28, _Source="59O4A yl.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods" [0134.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0134.148] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1feaea0, ftCreationTime.dwHighDateTime=0x1d5d8a1, ftLastAccessTime.dwLowDateTime=0xef40b240, ftLastAccessTime.dwHighDateTime=0x1d5e19c, ftLastWriteTime.dwLowDateTime=0xef40b240, ftLastWriteTime.dwHighDateTime=0x1d5e19c, nFileSizeHigh=0x0, nFileSizeLow=0x764c, dwReserved0=0x0, dwReserved1=0x0, cFileName="d9WmOJ5TEE3.pdf", cAlternateFileName="D9WMOJ~1.PDF")) returned 1 [0134.148] wcscmp (_String1="d9WmOJ5TEE3.pdf", _String2=".") returned 1 [0134.148] wcscmp (_String1="d9WmOJ5TEE3.pdf", _String2="..") returned 1 [0134.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67f70 [0134.148] wcscpy (in: _Dest=0x3e67f70, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.148] wcscat (in: _Dest=0x3e67f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.148] wcscat (in: _Dest=0x3e67f70, _Source="d9WmOJ5TEE3.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf" [0134.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0134.150] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x169280e0, ftCreationTime.dwHighDateTime=0x1d5db34, ftLastAccessTime.dwLowDateTime=0xf45fe00, ftLastAccessTime.dwHighDateTime=0x1d5e7c0, ftLastWriteTime.dwLowDateTime=0xf45fe00, ftLastWriteTime.dwHighDateTime=0x1d5e7c0, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="H1GQ1me8G90TP9rOXX.rtf", cAlternateFileName="H1GQ1M~1.RTF")) returned 1 [0134.150] wcscmp (_String1="H1GQ1me8G90TP9rOXX.rtf", _String2=".") returned 1 [0134.150] wcscmp (_String1="H1GQ1me8G90TP9rOXX.rtf", _String2="..") returned 1 [0134.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e23cc0 [0134.150] wcscpy (in: _Dest=0x3e23cc0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.150] wcscat (in: _Dest=0x3e23cc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.150] wcscat (in: _Dest=0x3e23cc0, _Source="H1GQ1me8G90TP9rOXX.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf" [0134.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0134.151] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93cb54a0, ftCreationTime.dwHighDateTime=0x1d5e76f, ftLastAccessTime.dwLowDateTime=0x8dc26270, ftLastAccessTime.dwHighDateTime=0x1d5e70f, ftLastWriteTime.dwLowDateTime=0x8dc26270, ftLastWriteTime.dwHighDateTime=0x1d5e70f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ija-R", cAlternateFileName="")) returned 1 [0134.151] wcscmp (_String1="ija-R", _String2=".") returned 1 [0134.151] wcscmp (_String1="ija-R", _String2="..") returned 1 [0134.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe68a8 [0134.151] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.151] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.151] wcscat (in: _Dest=0x2fe68a8, _Source="ija-R" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R" [0134.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0134.152] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1fb9930, ftCreationTime.dwHighDateTime=0x1d5e1d4, ftLastAccessTime.dwLowDateTime=0x1ca6a0d0, ftLastAccessTime.dwHighDateTime=0x1d5e50f, ftLastWriteTime.dwLowDateTime=0x1ca6a0d0, ftLastWriteTime.dwHighDateTime=0x1d5e50f, nFileSizeHigh=0x0, nFileSizeLow=0xfff, dwReserved0=0x0, dwReserved1=0x0, cFileName="k4iHO.doc", cAlternateFileName="")) returned 1 [0134.152] wcscmp (_String1="k4iHO.doc", _String2=".") returned 1 [0134.152] wcscmp (_String1="k4iHO.doc", _String2="..") returned 1 [0134.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8b970 [0134.152] wcscpy (in: _Dest=0x3d8b970, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.152] wcscat (in: _Dest=0x3d8b970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.152] wcscat (in: _Dest=0x3d8b970, _Source="k4iHO.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc" [0134.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8b970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0134.153] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2569750, ftCreationTime.dwHighDateTime=0x1d5e5da, ftLastAccessTime.dwLowDateTime=0x8aaa3b80, ftLastAccessTime.dwHighDateTime=0x1d5da62, ftLastWriteTime.dwLowDateTime=0x8aaa3b80, ftLastWriteTime.dwHighDateTime=0x1d5da62, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcen0", cAlternateFileName="")) returned 1 [0134.153] wcscmp (_String1="pcen0", _String2=".") returned 1 [0134.153] wcscmp (_String1="pcen0", _String2="..") returned 1 [0134.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe71a8 [0134.154] wcscpy (in: _Dest=0x2fe71a8, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.154] wcscat (in: _Dest=0x2fe71a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.154] wcscat (in: _Dest=0x2fe71a8, _Source="pcen0" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" [0134.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe71a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0134.155] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79c8d80, ftCreationTime.dwHighDateTime=0x1d5e44c, ftLastAccessTime.dwLowDateTime=0x10c6e5f0, ftLastAccessTime.dwHighDateTime=0x1d5dbbd, ftLastWriteTime.dwLowDateTime=0x10c6e5f0, ftLastWriteTime.dwHighDateTime=0x1d5dbbd, nFileSizeHigh=0x0, nFileSizeLow=0x28a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="rA65f ocTJtHOtWII.pdf", cAlternateFileName="RA65FO~1.PDF")) returned 1 [0134.155] wcscmp (_String1="rA65f ocTJtHOtWII.pdf", _String2=".") returned 1 [0134.155] wcscmp (_String1="rA65f ocTJtHOtWII.pdf", _String2="..") returned 1 [0134.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e23fc0 [0134.155] wcscpy (in: _Dest=0x3e23fc0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.155] wcscat (in: _Dest=0x3e23fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.155] wcscat (in: _Dest=0x3e23fc0, _Source="rA65f ocTJtHOtWII.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf" [0134.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0134.156] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf12dd3a0, ftCreationTime.dwHighDateTime=0x1d5e4ba, ftLastAccessTime.dwLowDateTime=0x43512ac0, ftLastAccessTime.dwHighDateTime=0x1d5e3bb, ftLastWriteTime.dwLowDateTime=0x43512ac0, ftLastWriteTime.dwHighDateTime=0x1d5e3bb, nFileSizeHigh=0x0, nFileSizeLow=0x14e65, dwReserved0=0x0, dwReserved1=0x0, cFileName="XQJZI_z8Dkf.xls", cAlternateFileName="XQJZI_~1.XLS")) returned 1 [0134.156] wcscmp (_String1="XQJZI_z8Dkf.xls", _String2=".") returned 1 [0134.156] wcscmp (_String1="XQJZI_z8Dkf.xls", _String2="..") returned 1 [0134.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67e80 [0134.156] wcscpy (in: _Dest=0x3e67e80, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.156] wcscat (in: _Dest=0x3e67e80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.156] wcscat (in: _Dest=0x3e67e80, _Source="XQJZI_z8Dkf.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls" [0134.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0134.157] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2109bf70, ftCreationTime.dwHighDateTime=0x1d5e665, ftLastAccessTime.dwLowDateTime=0xb4dc51f0, ftLastAccessTime.dwHighDateTime=0x1d5da34, ftLastWriteTime.dwLowDateTime=0xb4dc51f0, ftLastWriteTime.dwHighDateTime=0x1d5da34, nFileSizeHigh=0x0, nFileSizeLow=0xbc31, dwReserved0=0x0, dwReserved1=0x0, cFileName="z7L2XZpMSMHbq.docx", cAlternateFileName="Z7L2XZ~1.DOC")) returned 1 [0134.157] wcscmp (_String1="z7L2XZpMSMHbq.docx", _String2=".") returned 1 [0134.157] wcscmp (_String1="z7L2XZpMSMHbq.docx", _String2="..") returned 1 [0134.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67ef8 [0134.157] wcscpy (in: _Dest=0x3e67ef8, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.157] wcscat (in: _Dest=0x3e67ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.157] wcscat (in: _Dest=0x3e67ef8, _Source="z7L2XZpMSMHbq.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx" [0134.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0134.158] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc9fd010, ftCreationTime.dwHighDateTime=0x1d5e5de, ftLastAccessTime.dwLowDateTime=0xdc6081c0, ftLastAccessTime.dwHighDateTime=0x1d5ddbc, ftLastWriteTime.dwLowDateTime=0xdc6081c0, ftLastWriteTime.dwHighDateTime=0x1d5ddbc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zNTEN6tf", cAlternateFileName="")) returned 1 [0134.158] wcscmp (_String1="zNTEN6tf", _String2=".") returned 1 [0134.158] wcscmp (_String1="zNTEN6tf", _String2="..") returned 1 [0134.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8aba0 [0134.159] wcscpy (in: _Dest=0x3d8aba0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU" [0134.159] wcscat (in: _Dest=0x3d8aba0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0134.159] wcscat (in: _Dest=0x3d8aba0, _Source="zNTEN6tf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf" [0134.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8aba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0134.160] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc9fd010, ftCreationTime.dwHighDateTime=0x1d5e5de, ftLastAccessTime.dwLowDateTime=0xdc6081c0, ftLastAccessTime.dwHighDateTime=0x1d5ddbc, ftLastWriteTime.dwLowDateTime=0xdc6081c0, ftLastWriteTime.dwHighDateTime=0x1d5ddbc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zNTEN6tf", cAlternateFileName="")) returned 0 [0134.160] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0134.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0134.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23900) returned 1 [0134.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23328) returned 1 Thread: id = 488 os_tid = 0xa50 [0133.596] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx" (normalized: "c:\\users\\eebsym5\\documents\\lvbxmuz.pptx")) returned 0x20 [0133.596] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx", dwFileAttributes=0x20) returned 1 [0134.583] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx" (normalized: "c:\\users\\eebsym5\\documents\\lvbxmuz.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5cc [0134.584] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x7b4fd78 | out: lpFileSize=0x7b4fd78*=21947) returned 1 [0134.584] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x55b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.584] ReadFile (in: hFile=0x5cc, lpBuffer=0x7b4fd84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7b4fd60, lpOverlapped=0x0 | out: lpBuffer=0x7b4fd84*, lpNumberOfBytesRead=0x7b4fd60*=0x4, lpOverlapped=0x0) returned 1 [0134.585] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0134.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0134.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0134.585] NtQuerySystemTime (in: CurrentTime=0x7b4fd00 | out: CurrentTime=0x7b4fd00*=132471540032736000) returned 0x0 [0134.585] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x9501586 [0134.585] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x47a74741 [0134.585] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x25306a83 [0134.585] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x49053915 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x7c8e87ec [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x1f82b1db [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x1f4ea024 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x79a6bafb [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x4d198abf [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x70f72980 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x69f3f7e5 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x7062e79b [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0xcd8919b [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x4dc5a174 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x359ee78e [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x3ce5f29d [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x398b0ca [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x3532f568 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x11843d98 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x2d349ece [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x418ac761 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x15637f1 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x64ac9724 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x10b344ef [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x28d2ea6f [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0xbabae0e [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x1b5c18bb [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x7f72393b [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x78d08b19 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x2b04f599 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x20ea8708 [0134.586] RtlRandomEx (in: Seed=0x7b4fcf8 | out: Seed=0x7b4fcf8) returned 0x35eef25a [0134.595] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.595] ReadFile (in: hFile=0x5cc, lpBuffer=0x817e8d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7b4fd00, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesRead=0x7b4fd00*=0x3c00, lpOverlapped=0x0) returned 1 [0134.595] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0134.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0134.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81824d8 [0134.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0134.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0134.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0134.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.596] WriteFile (in: hFile=0x5cc, lpBuffer=0x81824d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7b4fd00, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesWritten=0x7b4fd00*=0x3c00, lpOverlapped=0x0) returned 1 [0136.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0136.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0136.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6f408 [0136.260] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.260] WriteFile (in: hFile=0x5cc, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x7b4fd6c, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0x7b4fd6c*=0x10a, lpOverlapped=0x0) returned 1 [0136.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0136.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f828) returned 1 [0136.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0136.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f408) returned 1 [0136.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0136.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1658) returned 1 [0136.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0136.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0136.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecda90 [0136.418] wcscpy (in: _Dest=0x3ecda90, _Source="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx" [0136.418] wcscat (in: _Dest=0x3ecda90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx.f0dbec" [0136.418] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx.f0dbec", NtPathName=0x7b4fcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\LvbXmuZ.pptx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5bf0 [0137.763] FlushFileBuffers (hFile=0x5cc) returned 1 [0137.772] CloseHandle (hObject=0x5cc) returned 1 [0137.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd820 [0137.847] wcscpy (in: _Dest=0x3ecd820, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.847] wcscat (in: _Dest=0x3ecd820, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.847] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd820) returned 1 [0138.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23430) returned 1 Thread: id = 489 os_tid = 0xa60 [0133.597] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\m kagzng2m9iv.xlsx")) returned 0x20 [0133.597] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx", dwFileAttributes=0x20) returned 1 [0134.597] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\m kagzng2m9iv.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5d4 [0134.597] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xa1ff908 | out: lpFileSize=0xa1ff908*=39777) returned 1 [0134.597] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x9b5d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.597] ReadFile (in: hFile=0x5d4, lpBuffer=0xa1ff914, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa1ff8f0, lpOverlapped=0x0 | out: lpBuffer=0xa1ff914*, lpNumberOfBytesRead=0xa1ff8f0*=0x4, lpOverlapped=0x0) returned 1 [0134.598] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0134.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef31b0 [0134.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0134.599] NtQuerySystemTime (in: CurrentTime=0xa1ff890 | out: CurrentTime=0xa1ff890*=132471540032892000) returned 0x0 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x32d360f3 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x28d2ea6f [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x6d232ea6 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x21e84255 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x5a4aa2aa [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x6d8be8f5 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0xbb5f72a [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x6c339475 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x74abf9b4 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x4697feca [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x393f62dd [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x6c4ca285 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x6285850b [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x20870f28 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x524cd541 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x2b5df888 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x59730eec [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x1dd7d945 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x8cff4ab [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x7bd8e8f [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x74caa298 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x3e81dee2 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x17799b9a [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x7309a6d5 [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x162205c [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x18c5c2dc [0134.599] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x1dab55c5 [0134.600] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x129ca4f0 [0134.600] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x4030f86f [0134.600] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x9f51ce7 [0134.600] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x79f622f5 [0134.600] RtlRandomEx (in: Seed=0xa1ff888 | out: Seed=0xa1ff888) returned 0x4cc3f784 [0134.609] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.610] ReadFile (in: hFile=0x5d4, lpBuffer=0x81c8458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa1ff890, lpOverlapped=0x0 | out: lpBuffer=0x81c8458*, lpNumberOfBytesRead=0xa1ff890*=0x3c00, lpOverlapped=0x0) returned 1 [0134.610] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4398 [0134.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0134.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0134.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0134.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81cc060 [0134.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0134.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0134.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0134.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0134.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0134.611] WriteFile (in: hFile=0x5d4, lpBuffer=0x81cc060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa1ff890, lpOverlapped=0x0 | out: lpBuffer=0x81cc060*, lpNumberOfBytesWritten=0xa1ff890*=0x3c00, lpOverlapped=0x0) returned 1 [0136.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81cc060) returned 1 [0136.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c8458) returned 1 [0136.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f37fd8 [0136.266] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.266] WriteFile (in: hFile=0x5d4, lpBuffer=0x3d573a0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xa1ff8fc, lpOverlapped=0x0 | out: lpBuffer=0x3d573a0*, lpNumberOfBytesWritten=0xa1ff8fc*=0x116, lpOverlapped=0x0) returned 1 [0136.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d573a0) returned 1 [0136.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37598) returned 1 [0136.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1018) returned 1 [0136.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37fd8) returned 1 [0136.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0136.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef31b0) returned 1 [0136.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1608) returned 1 [0136.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16d0) returned 1 [0136.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68ab0 [0136.422] wcscpy (in: _Dest=0x3e68ab0, _Source="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx" [0136.422] wcscat (in: _Dest=0x3e68ab0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx.f0dbec" [0136.422] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx.f0dbec", NtPathName=0xa1ff880, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\M kAGzng2M9iV.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30af0 [0137.771] FlushFileBuffers (hFile=0x5d4) returned 1 [0137.775] CloseHandle (hObject=0x5d4) returned 1 [0137.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecdd68 [0137.849] wcscpy (in: _Dest=0x3ecdd68, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.849] wcscat (in: _Dest=0x3ecdd68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.849] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdd68) returned 1 [0138.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf88) returned 1 Thread: id = 490 os_tid = 0xaa0 [0133.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e22da8 [0133.597] wcscpy (in: _Dest=0x3e22da8, _Source="C:\\Users\\EEBsYm5\\Documents\\My Music" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music") returned="C:\\Users\\EEBsYm5\\Documents\\My Music" [0133.598] wcscat (in: _Dest=0x3e22da8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Music\\" [0133.598] wcscat (in: _Dest=0x3e22da8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Music\\*" [0133.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0133.598] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Music\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0133.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22da8) returned 1 [0133.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58108) returned 1 Thread: id = 491 os_tid = 0x6f0 [0133.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe7508 [0133.599] wcscpy (in: _Dest=0x2fe7508, _Source="C:\\Users\\EEBsYm5\\Documents\\My Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures" [0133.599] wcscat (in: _Dest=0x2fe7508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\" [0133.599] wcscat (in: _Dest=0x2fe7508, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\*" [0133.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0133.600] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0133.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7508) returned 1 [0133.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f5e0) returned 1 Thread: id = 492 os_tid = 0x154 [0133.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f5e0 [0133.601] wcscpy (in: _Dest=0x3e0f5e0, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0133.601] wcscat (in: _Dest=0x3e0f5e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\" [0133.601] wcscat (in: _Dest=0x3e0f5e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\*" [0133.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0133.601] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0133.950] wcscmp (_String1=".", _String2=".") returned 0 [0133.950] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.950] wcscmp (_String1="..", _String2=".") returned 1 [0133.951] wcscmp (_String1="..", _String2="..") returned 0 [0133.951] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.951] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.951] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.951] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0133.951] wcscmp (_String1="Favorites.vss", _String2=".") returned 1 [0133.951] wcscmp (_String1="Favorites.vss", _String2="..") returned 1 [0133.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39fc8 [0133.951] wcscpy (in: _Dest=0x3f39fc8, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0133.951] wcscat (in: _Dest=0x3f39fc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\" [0133.951] wcscat (in: _Dest=0x3f39fc8, _Source="Favorites.vss" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss" [0138.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0139.000] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0139.000] wcscmp (_String1="_private", _String2=".") returned 1 [0139.000] wcscmp (_String1="_private", _String2="..") returned 1 [0139.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd3a8 [0139.000] wcscpy (in: _Dest=0x3ecd3a8, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0139.000] wcscat (in: _Dest=0x3ecd3a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\" [0139.000] wcscat (in: _Dest=0x3ecd3a8, _Source="_private" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private" [0139.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0139.006] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0139.006] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0139.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0139.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f5e0) returned 1 [0139.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b8) returned 1 Thread: id = 493 os_tid = 0x714 [0133.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e22da8 [0133.602] wcscpy (in: _Dest=0x3e22da8, _Source="C:\\Users\\EEBsYm5\\Documents\\My Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos" [0133.602] wcscat (in: _Dest=0x3e22da8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos\\" [0133.602] wcscat (in: _Dest=0x3e22da8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos\\*" [0133.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0133.603] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Videos\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0133.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22da8) returned 1 [0133.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22cf8) returned 1 Thread: id = 494 os_tid = 0x6b0 [0133.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7508 [0133.604] wcscpy (in: _Dest=0x2fe7508, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0133.604] wcscat (in: _Dest=0x2fe7508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0133.604] wcscat (in: _Dest=0x2fe7508, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\*") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\*" [0133.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0133.604] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x448c76c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0133.607] wcscmp (_String1=".", _String2=".") returned 0 [0133.607] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x448c76c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.607] wcscmp (_String1="..", _String2=".") returned 1 [0133.607] wcscmp (_String1="..", _String2="..") returned 0 [0133.607] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74e91a80, ftCreationTime.dwHighDateTime=0x1d2fb32, ftLastAccessTime.dwLowDateTime=0x74e91a80, ftLastAccessTime.dwHighDateTime=0x1d2fb32, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="feasf@efw.com.pst", cAlternateFileName="FEASF@~1.PST")) returned 1 [0133.607] wcscmp (_String1="feasf@efw.com.pst", _String2=".") returned 1 [0133.607] wcscmp (_String1="feasf@efw.com.pst", _String2="..") returned 1 [0133.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4b88 [0133.607] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0133.607] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0133.607] wcscat (in: _Dest=0x3dc4b88, _Source="feasf@efw.com.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" [0133.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c [0133.810] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0xf60f53c0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0xf61d9c00, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Data File - mail.pst", cAlternateFileName="OUTLOO~1.PST")) returned 1 [0133.810] wcscmp (_String1="Outlook Data File - mail.pst", _String2=".") returned 1 [0133.810] wcscmp (_String1="Outlook Data File - mail.pst", _String2="..") returned 1 [0133.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b378 [0133.811] wcscpy (in: _Dest=0x3e2b378, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0133.811] wcscat (in: _Dest=0x3e2b378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0133.811] wcscat (in: _Dest=0x3e2b378, _Source="Outlook Data File - mail.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" [0133.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0133.812] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0xf60f53c0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0xf61d9c00, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Data File - mail.pst", cAlternateFileName="OUTLOO~1.PST")) returned 0 [0133.812] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0133.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0133.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7508) returned 1 [0133.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 Thread: id = 495 os_tid = 0xb6c [0133.607] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\pgjyduw8m0uxfizb.xlsx")) returned 0x20 [0133.608] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx", dwFileAttributes=0x20) returned 1 [0134.638] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\pgjyduw8m0uxfizb.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcc4 [0134.638] GetFileSizeEx (in: hFile=0xcc4, lpFileSize=0xad4f8e8 | out: lpFileSize=0xad4f8e8*=29308) returned 1 [0134.638] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x7278, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.638] ReadFile (in: hFile=0xcc4, lpBuffer=0xad4f8f4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad4f8d0, lpOverlapped=0x0 | out: lpBuffer=0xad4f8f4*, lpNumberOfBytesRead=0xad4f8d0*=0x4, lpOverlapped=0x0) returned 1 [0134.640] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0134.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0134.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0134.640] NtQuerySystemTime (in: CurrentTime=0xad4f870 | out: CurrentTime=0xad4f870*=132471540033204000) returned 0x0 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x2fb24072 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x47fa8157 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x5623b2bb [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x325d84a4 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x756cac34 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x19da670b [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x6ac45085 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x22bff49f [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x1ade53d7 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x7b1a5037 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x695244b9 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x4c443603 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x6e3fda06 [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x440c182f [0134.640] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x7af19d8f [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x3dcd40f1 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x16dbddf9 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x4731b74d [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x3f0cda3a [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x6e44f359 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x19cb6e2f [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x212b83f0 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x3e904f98 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x66b3706e [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x2fb24072 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x6bea7e2e [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0xcd3b471 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x648a643e [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x60146d57 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x38b067f1 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x766042d8 [0134.641] RtlRandomEx (in: Seed=0xad4f868 | out: Seed=0xad4f868) returned 0x34df6bb1 [0134.650] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.650] ReadFile (in: hFile=0xcc4, lpBuffer=0x81dec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad4f870, lpOverlapped=0x0 | out: lpBuffer=0x81dec88*, lpNumberOfBytesRead=0xad4f870*=0x3c00, lpOverlapped=0x0) returned 1 [0134.650] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31850 [0134.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e689c0 [0134.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0134.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0134.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81e2890 [0134.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0134.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0134.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0134.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 [0134.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31850) returned 1 [0134.651] WriteFile (in: hFile=0xcc4, lpBuffer=0x81e2890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad4f870, lpOverlapped=0x0 | out: lpBuffer=0x81e2890*, lpNumberOfBytesWritten=0xad4f870*=0x3c00, lpOverlapped=0x0) returned 1 [0136.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2890) returned 1 [0136.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec88) returned 1 [0136.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd00d0 [0136.278] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.279] WriteFile (in: hFile=0xcc4, lpBuffer=0x3d56810*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xad4f8dc, lpOverlapped=0x0 | out: lpBuffer=0x3d56810*, lpNumberOfBytesWritten=0xad4f8dc*=0x11c, lpOverlapped=0x0) returned 1 [0136.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56810) returned 1 [0136.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcff90) returned 1 [0136.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0136.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd00d0) returned 1 [0136.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0136.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0136.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ef8) returned 1 [0136.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0136.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bc58 [0136.429] wcscpy (in: _Dest=0x3f0bc58, _Source="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx" [0136.429] wcscat (in: _Dest=0x3f0bc58, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx.f0dbec" [0136.429] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx.f0dbec", NtPathName=0xad4f860, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\pGJYduW8M0uxfizB.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f359a0 [0136.868] FlushFileBuffers (hFile=0xcc4) returned 1 [0136.870] CloseHandle (hObject=0xcc4) returned 1 [0136.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8baa8 [0136.870] wcscpy (in: _Dest=0x3d8baa8, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0136.870] wcscat (in: _Dest=0x3d8baa8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0136.870] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0137.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8baa8) returned 1 [0137.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39468) returned 1 Thread: id = 496 os_tid = 0xb60 [0133.609] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ruxauuhy81yxf8di4jh.xlsx")) returned 0x20 [0133.609] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx", dwFileAttributes=0x20) returned 1 [0134.651] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ruxauuhy81yxf8di4jh.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd4 [0134.652] GetFileSizeEx (in: hFile=0xcd4, lpFileSize=0xa19fb08 | out: lpFileSize=0xa19fb08*=7508) returned 1 [0134.652] SetFilePointerEx (in: hFile=0xcd4, liDistanceToMove=0x1d50, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.652] ReadFile (in: hFile=0xcd4, lpBuffer=0xa19fb14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa19faf0, lpOverlapped=0x0 | out: lpBuffer=0xa19fb14*, lpNumberOfBytesRead=0xa19faf0*=0x4, lpOverlapped=0x0) returned 1 [0134.653] SetFilePointerEx (in: hFile=0xcd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0134.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0134.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0134.653] NtQuerySystemTime (in: CurrentTime=0xa19fa90 | out: CurrentTime=0xa19fa90*=132471540033360000) returned 0x0 [0134.653] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0xdb2a182 [0134.653] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x27a35092 [0134.653] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x119942f [0134.653] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x1118a7a7 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x3ab8a45c [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x62ee9089 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x7eb48309 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x3a7eaf62 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x3ad7c61 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x1118a7a7 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x613f4899 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x3f26e372 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x6dc52c29 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x19cb6e2f [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x386a6e29 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x1611a31f [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x573af5e4 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x717d6e91 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x6d37e0e3 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x7287240e [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x5075cd83 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x257777b9 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x727f76b7 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x79d03176 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0xe80cc91 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x5f002e0d [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x5f047143 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x2fa0f342 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x7b1a5037 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x298ce4f4 [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x4d4d8acf [0134.654] RtlRandomEx (in: Seed=0xa19fa88 | out: Seed=0xa19fa88) returned 0x5ddab5af [0134.665] ReadFile (in: hFile=0xcd4, lpBuffer=0x81e6498, nNumberOfBytesToRead=0x1d54, lpNumberOfBytesRead=0xa19fa84, lpOverlapped=0x0 | out: lpBuffer=0x81e6498*, lpNumberOfBytesRead=0xa19fa84*=0x1d54, lpOverlapped=0x0) returned 1 [0134.665] SetFilePointerEx (in: hFile=0xcd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.665] WriteFile (in: hFile=0xcd4, lpBuffer=0x81ea0a0*, nNumberOfBytesToWrite=0x1d54, lpNumberOfBytesWritten=0xa19fa88, lpOverlapped=0x0 | out: lpBuffer=0x81ea0a0*, lpNumberOfBytesWritten=0xa19fa88*=0x1d54, lpOverlapped=0x0) returned 1 [0136.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0136.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0136.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0136.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea0a0) returned 1 [0136.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6498) returned 1 [0136.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 [0136.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31850) returned 1 [0136.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3f31850 [0136.282] SetFilePointerEx (in: hFile=0xcd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.283] WriteFile (in: hFile=0xcd4, lpBuffer=0x3ef7ea0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xa19fafc, lpOverlapped=0x0 | out: lpBuffer=0x3ef7ea0*, lpNumberOfBytesWritten=0xa19fafc*=0x122, lpOverlapped=0x0) returned 1 [0136.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7ea0) returned 1 [0136.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308848) returned 1 [0136.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0136.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31850) returned 1 [0136.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0136.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0136.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0136.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fc0) returned 1 [0136.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da66f0 [0136.431] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx" [0136.431] wcscat (in: _Dest=0x3da66f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx.f0dbec" [0136.431] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx.f0dbec", NtPathName=0xa19fa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\ruXaUUhy81Yxf8di4jH.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e29fe0 [0136.871] FlushFileBuffers (hFile=0xcd4) returned 1 [0136.873] CloseHandle (hObject=0xcd4) returned 1 [0136.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c8e0 [0136.874] wcscpy (in: _Dest=0x3d8c8e0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0136.874] wcscat (in: _Dest=0x3d8c8e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0136.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0137.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c8e0) returned 1 [0137.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39938) returned 1 Thread: id = 497 os_tid = 0xb5c [0133.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe7568 [0133.610] wcscpy (in: _Dest=0x2fe7568, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" [0133.610] wcscat (in: _Dest=0x2fe7568, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0133.610] wcscat (in: _Dest=0x2fe7568, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\*") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\*" [0133.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0133.610] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb057d660, ftCreationTime.dwHighDateTime=0x1d5e2a7, ftLastAccessTime.dwLowDateTime=0x2a099ae0, ftLastAccessTime.dwHighDateTime=0x1d5e2dd, ftLastWriteTime.dwLowDateTime=0x2a099ae0, ftLastWriteTime.dwHighDateTime=0x1d5e2dd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38218 [0133.610] wcscmp (_String1=".", _String2=".") returned 0 [0133.610] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb057d660, ftCreationTime.dwHighDateTime=0x1d5e2a7, ftLastAccessTime.dwLowDateTime=0x2a099ae0, ftLastAccessTime.dwHighDateTime=0x1d5e2dd, ftLastWriteTime.dwLowDateTime=0x2a099ae0, ftLastWriteTime.dwHighDateTime=0x1d5e2dd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.610] wcscmp (_String1="..", _String2=".") returned 1 [0133.610] wcscmp (_String1="..", _String2="..") returned 0 [0133.610] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292ad640, ftCreationTime.dwHighDateTime=0x1d5dd90, ftLastAccessTime.dwLowDateTime=0x51014e40, ftLastAccessTime.dwHighDateTime=0x1d5df77, ftLastWriteTime.dwLowDateTime=0x51014e40, ftLastWriteTime.dwHighDateTime=0x1d5df77, nFileSizeHigh=0x0, nFileSizeLow=0x14cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bElKBgBC wtXKQ8cPya.pdf", cAlternateFileName="BELKBG~1.PDF")) returned 1 [0133.610] wcscmp (_String1="bElKBgBC wtXKQ8cPya.pdf", _String2=".") returned 1 [0133.610] wcscmp (_String1="bElKBgBC wtXKQ8cPya.pdf", _String2="..") returned 1 [0133.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f748 [0133.611] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" [0133.611] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0133.611] wcscat (in: _Dest=0x3f2f748, _Source="bElKBgBC wtXKQ8cPya.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf" [0136.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1400 [0136.121] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cb361e0, ftCreationTime.dwHighDateTime=0x1d5e350, ftLastAccessTime.dwLowDateTime=0x106eaa40, ftLastAccessTime.dwHighDateTime=0x1d5e7e6, ftLastWriteTime.dwLowDateTime=0x106eaa40, ftLastWriteTime.dwHighDateTime=0x1d5e7e6, nFileSizeHigh=0x0, nFileSizeLow=0x790b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ldjD_KZ.odt", cAlternateFileName="")) returned 1 [0136.121] wcscmp (_String1="ldjD_KZ.odt", _String2=".") returned 1 [0136.121] wcscmp (_String1="ldjD_KZ.odt", _String2="..") returned 1 [0136.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a1f8 [0136.122] wcscpy (in: _Dest=0x3f3a1f8, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" [0136.122] wcscat (in: _Dest=0x3f3a1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0136.122] wcscat (in: _Dest=0x3f3a1f8, _Source="ldjD_KZ.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt" [0136.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0136.123] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5db06b20, ftCreationTime.dwHighDateTime=0x1d5e7d9, ftLastAccessTime.dwLowDateTime=0x423d5a90, ftLastAccessTime.dwHighDateTime=0x1d5d917, ftLastWriteTime.dwLowDateTime=0x423d5a90, ftLastWriteTime.dwHighDateTime=0x1d5d917, nFileSizeHigh=0x0, nFileSizeLow=0x1863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="pII2rlGGaVRUWasL.odt", cAlternateFileName="PII2RL~1.ODT")) returned 1 [0136.123] wcscmp (_String1="pII2rlGGaVRUWasL.odt", _String2=".") returned 1 [0136.123] wcscmp (_String1="pII2rlGGaVRUWasL.odt", _String2="..") returned 1 [0136.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24240 [0136.123] wcscpy (in: _Dest=0x3e24240, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" [0136.123] wcscat (in: _Dest=0x3e24240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0136.123] wcscat (in: _Dest=0x3e24240, _Source="pII2rlGGaVRUWasL.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt" [0136.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0136.125] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d70060, ftCreationTime.dwHighDateTime=0x1d5e87f, ftLastAccessTime.dwLowDateTime=0x48bf8d90, ftLastAccessTime.dwHighDateTime=0x1d5e4be, ftLastWriteTime.dwLowDateTime=0x48bf8d90, ftLastWriteTime.dwHighDateTime=0x1d5e4be, nFileSizeHigh=0x0, nFileSizeLow=0xd02e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rc9OYtb frWLsH4ji.docx", cAlternateFileName="RC9OYT~1.DOC")) returned 1 [0136.125] wcscmp (_String1="Rc9OYtb frWLsH4ji.docx", _String2=".") returned 1 [0136.125] wcscmp (_String1="Rc9OYtb frWLsH4ji.docx", _String2="..") returned 1 [0136.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fa78 [0136.125] wcscpy (in: _Dest=0x3f2fa78, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" [0136.125] wcscat (in: _Dest=0x3f2fa78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0136.125] wcscat (in: _Dest=0x3f2fa78, _Source="Rc9OYtb frWLsH4ji.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx" [0136.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fa78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0136.127] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596c7fa0, ftCreationTime.dwHighDateTime=0x1d5deb4, ftLastAccessTime.dwLowDateTime=0x1ee3f540, ftLastAccessTime.dwHighDateTime=0x1d5df3e, ftLastWriteTime.dwLowDateTime=0x1ee3f540, ftLastWriteTime.dwHighDateTime=0x1d5df3e, nFileSizeHigh=0x0, nFileSizeLow=0x18b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="rFibO.pdf", cAlternateFileName="")) returned 1 [0136.127] wcscmp (_String1="rFibO.pdf", _String2=".") returned 1 [0136.127] wcscmp (_String1="rFibO.pdf", _String2="..") returned 1 [0136.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8054b60 [0136.127] wcscpy (in: _Dest=0x8054b60, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" [0136.127] wcscat (in: _Dest=0x8054b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0136.127] wcscat (in: _Dest=0x8054b60, _Source="rFibO.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf" [0136.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0136.128] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6ae9d0, ftCreationTime.dwHighDateTime=0x1d5e110, ftLastAccessTime.dwLowDateTime=0x349927e0, ftLastAccessTime.dwHighDateTime=0x1d5e022, ftLastWriteTime.dwLowDateTime=0x349927e0, ftLastWriteTime.dwHighDateTime=0x1d5e022, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YH8ZX", cAlternateFileName="")) returned 1 [0136.129] wcscmp (_String1="YH8ZX", _String2=".") returned 1 [0136.129] wcscmp (_String1="YH8ZX", _String2="..") returned 1 [0136.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd000 [0136.129] wcscpy (in: _Dest=0x3ecd000, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk" [0136.129] wcscat (in: _Dest=0x3ecd000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0136.129] wcscat (in: _Dest=0x3ecd000, _Source="YH8ZX" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" [0136.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0136.130] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6ae9d0, ftCreationTime.dwHighDateTime=0x1d5e110, ftLastAccessTime.dwLowDateTime=0x349927e0, ftLastAccessTime.dwHighDateTime=0x1d5e022, ftLastWriteTime.dwLowDateTime=0x349927e0, ftLastWriteTime.dwHighDateTime=0x1d5e022, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YH8ZX", cAlternateFileName="")) returned 0 [0136.130] FindClose (in: hFindFile=0x3f38218 | out: hFindFile=0x3f38218) returned 1 [0136.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0136.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7568) returned 1 [0136.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22eb0) returned 1 Thread: id = 498 os_tid = 0xbac [0133.611] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx" (normalized: "c:\\users\\eebsym5\\documents\\uf56kttapabf2_1ij.docx")) returned 0x20 [0133.611] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx", dwFileAttributes=0x20) returned 1 [0134.665] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx" (normalized: "c:\\users\\eebsym5\\documents\\uf56kttapabf2_1ij.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd0 [0134.665] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0xb9efbe0 | out: lpFileSize=0xb9efbe0*=43555) returned 1 [0134.665] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0xaa1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.665] ReadFile (in: hFile=0xcd0, lpBuffer=0xb9efbec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb9efbc8, lpOverlapped=0x0 | out: lpBuffer=0xb9efbec*, lpNumberOfBytesRead=0xb9efbc8*=0x4, lpOverlapped=0x0) returned 1 [0134.667] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0134.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0134.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0134.667] NtQuerySystemTime (in: CurrentTime=0xb9efb68 | out: CurrentTime=0xb9efb68*=132471540033516000) returned 0x0 [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x66b3706e [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x51fcc2cc [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x2374260e [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x5d9994bc [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0xb39d614 [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0xa4ce39c [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x180b30f2 [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x23343383 [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x4c443603 [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x191d4fd0 [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x26aee519 [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x410caab4 [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x6fccfa53 [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x4c1eff2a [0134.667] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x43e68efb [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x48cdf665 [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0xde43595 [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x3a0e131a [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x6bb167c6 [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x52e3982 [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x3c3a4d60 [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x476217f9 [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x49c09103 [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x2ea4c0fa [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x5d9994bc [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x3dfa711a [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x63a267f [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0xa27e922 [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x51b00900 [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x423917f [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x970a49e [0134.668] RtlRandomEx (in: Seed=0xb9efb60 | out: Seed=0xb9efb60) returned 0x18916ace [0134.677] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.677] ReadFile (in: hFile=0xcd0, lpBuffer=0x81edca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb9efb68, lpOverlapped=0x0 | out: lpBuffer=0x81edca8*, lpNumberOfBytesRead=0xb9efb68*=0x3c00, lpOverlapped=0x0) returned 1 [0134.677] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31898 [0134.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68a38 [0134.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0134.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0134.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81f18b0 [0134.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0134.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0134.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0134.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 [0134.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31898) returned 1 [0134.678] WriteFile (in: hFile=0xcd0, lpBuffer=0x81f18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb9efb68, lpOverlapped=0x0 | out: lpBuffer=0x81f18b0*, lpNumberOfBytesWritten=0xb9efb68*=0x3c00, lpOverlapped=0x0) returned 1 [0136.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f18b0) returned 1 [0136.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81edca8) returned 1 [0136.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x83087b8 [0136.285] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.285] WriteFile (in: hFile=0xcd0, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xb9efbd4, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0xb9efbd4*=0x11e, lpOverlapped=0x0) returned 1 [0136.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0136.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83088d8) returned 1 [0136.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4628) returned 1 [0136.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83087b8) returned 1 [0136.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0136.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0136.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4010) returned 1 [0136.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4038) returned 1 [0136.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6470 [0136.433] wcscpy (in: _Dest=0x3da6470, _Source="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx") returned="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx" [0136.434] wcscat (in: _Dest=0x3da6470, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx.f0dbec" [0136.434] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx.f0dbec", NtPathName=0xb9efb58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\Uf56KTtaPabF2_1IJ.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35a30 [0136.876] FlushFileBuffers (hFile=0xcd0) returned 1 [0136.916] CloseHandle (hObject=0xcd0) returned 1 [0136.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bd80 [0136.917] wcscpy (in: _Dest=0x3d8bd80, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0136.917] wcscat (in: _Dest=0x3d8bd80, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0136.917] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0137.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd80) returned 1 [0137.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39b68) returned 1 Thread: id = 499 os_tid = 0xbc0 [0133.612] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\xd73.xlsx")) returned 0x20 [0133.612] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx", dwFileAttributes=0x20) returned 1 [0134.678] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\xd73.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcb0 [0134.678] GetFileSizeEx (in: hFile=0xcb0, lpFileSize=0xba5f970 | out: lpFileSize=0xba5f970*=34565) returned 1 [0134.678] SetFilePointerEx (in: hFile=0xcb0, liDistanceToMove=0x8701, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.679] ReadFile (in: hFile=0xcb0, lpBuffer=0xba5f97c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xba5f958, lpOverlapped=0x0 | out: lpBuffer=0xba5f97c*, lpNumberOfBytesRead=0xba5f958*=0x4, lpOverlapped=0x0) returned 1 [0134.680] SetFilePointerEx (in: hFile=0xcb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0134.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0134.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0134.680] NtQuerySystemTime (in: CurrentTime=0xba5f8f8 | out: CurrentTime=0xba5f8f8*=132471540033672000) returned 0x0 [0134.680] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x37e8ca05 [0134.680] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x239665de [0134.680] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x766042d8 [0134.680] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x6160cbbc [0134.680] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x610e904c [0134.680] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x5a83131d [0134.680] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x5341541e [0134.680] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x1d552c3 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x669f3968 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x72905c0b [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x58265bd4 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x25d20ec5 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x27916ec9 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x63d5196 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x5b02eba4 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x37c6359c [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x2342b9b8 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x39dcf188 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x6f72c2f [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x42184c48 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x3a53d6a2 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x378c210b [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x29ee475 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x5bcbd01a [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x22c8a7ad [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x6b338a7e [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x5b9036ea [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x4ea14b7f [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x78a8b0ca [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x108c3d2b [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x7f6cd622 [0134.681] RtlRandomEx (in: Seed=0xba5f8f0 | out: Seed=0xba5f8f0) returned 0x2f18a07e [0134.692] SetFilePointerEx (in: hFile=0xcb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.692] ReadFile (in: hFile=0xcb0, lpBuffer=0x81f54b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba5f8f8, lpOverlapped=0x0 | out: lpBuffer=0x81f54b8*, lpNumberOfBytesRead=0xba5f8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.693] SetFilePointerEx (in: hFile=0xcb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31898 [0134.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68a38 [0134.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0134.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0134.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81f90c0 [0134.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0134.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0134.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0134.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 [0134.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31898) returned 1 [0134.693] WriteFile (in: hFile=0xcb0, lpBuffer=0x81f90c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba5f8f8, lpOverlapped=0x0 | out: lpBuffer=0x81f90c0*, lpNumberOfBytesWritten=0xba5f8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f90c0) returned 1 [0136.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f54b8) returned 1 [0136.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef45d8 [0136.287] SetFilePointerEx (in: hFile=0xcb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.288] WriteFile (in: hFile=0xcb0, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xba5f964, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xba5f964*=0x104, lpOverlapped=0x0) returned 1 [0136.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0136.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4560) returned 1 [0136.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0136.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef45d8) returned 1 [0136.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0136.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0136.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40b0) returned 1 [0136.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0136.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe4a48 [0136.436] wcscpy (in: _Dest=0x2fe4a48, _Source="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx" [0136.436] wcscat (in: _Dest=0x2fe4a48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx.f0dbec" [0136.436] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx.f0dbec", NtPathName=0xba5f8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\XD73.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0bcd0 [0137.001] FlushFileBuffers (hFile=0xcb0) returned 1 [0137.576] CloseHandle (hObject=0xcb0) returned 1 [0137.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecda90 [0137.780] wcscpy (in: _Dest=0x3ecda90, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0137.780] wcscat (in: _Dest=0x3ecda90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0137.780] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0x20 [0138.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecda90) returned 1 [0138.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e235e8) returned 1 Thread: id = 500 os_tid = 0xbbc [0133.953] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx" (normalized: "c:\\users\\eebsym5\\documents\\zpaobisn08.pptx")) returned 0x20 [0133.953] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx", dwFileAttributes=0x20) returned 1 [0134.699] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx" (normalized: "c:\\users\\eebsym5\\documents\\zpaobisn08.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb68 [0134.699] GetFileSizeEx (in: hFile=0xb68, lpFileSize=0xbbcfd60 | out: lpFileSize=0xbbcfd60*=46047) returned 1 [0134.699] SetFilePointerEx (in: hFile=0xb68, liDistanceToMove=0xb3db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.699] ReadFile (in: hFile=0xb68, lpBuffer=0xbbcfd6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbbcfd48, lpOverlapped=0x0 | out: lpBuffer=0xbbcfd6c*, lpNumberOfBytesRead=0xbbcfd48*=0x4, lpOverlapped=0x0) returned 1 [0134.700] SetFilePointerEx (in: hFile=0xb68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0134.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ab90 [0134.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0134.701] NtQuerySystemTime (in: CurrentTime=0xbbcfce8 | out: CurrentTime=0xbbcfce8*=132471540033828000) returned 0x0 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x365d1ab6 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0xc40a88a [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x429fb2dd [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x661ae857 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x5a34d290 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x280cdaa0 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x4c3b2e2c [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x5d1d143b [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x4d4d8acf [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x3bf06320 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x6d1bff12 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x3d0428c2 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x14103ac4 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x71d986ed [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x88440da [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x1a389871 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x56146ca6 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x4675e408 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x39fe2522 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x60146d57 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x45bf0846 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x44dd962 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x521e6458 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x332d35fc [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x62cb68ca [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x66d23404 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x3b35f4c4 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x2c559b96 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x58cd9f93 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0xe80cc91 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x1acf9c62 [0134.701] RtlRandomEx (in: Seed=0xbbcfce0 | out: Seed=0xbbcfce0) returned 0x7ae6746c [0134.711] SetFilePointerEx (in: hFile=0xb68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.711] ReadFile (in: hFile=0xb68, lpBuffer=0x81fccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbbcfce8, lpOverlapped=0x0 | out: lpBuffer=0x81fccc8*, lpNumberOfBytesRead=0xbbcfce8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.711] SetFilePointerEx (in: hFile=0xb68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31898 [0134.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68ab0 [0134.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0134.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0134.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82008d0 [0134.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0134.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0134.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf40) returned 1 [0134.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 [0134.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31898) returned 1 [0134.712] WriteFile (in: hFile=0xb68, lpBuffer=0x82008d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbbcfce8, lpOverlapped=0x0 | out: lpBuffer=0x82008d0*, lpNumberOfBytesWritten=0xbbcfce8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82008d0) returned 1 [0135.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fccc8) returned 1 [0135.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df78a8 [0135.208] SetFilePointerEx (in: hFile=0xb68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.209] WriteFile (in: hFile=0xb68, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xbbcfd54, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xbbcfd54*=0x110, lpOverlapped=0x0) returned 1 [0135.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0135.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8088) returned 1 [0135.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0135.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78a8) returned 1 [0135.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0135.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0135.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e88) returned 1 [0135.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f28) returned 1 [0135.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5080 [0135.323] wcscpy (in: _Dest=0x2ff5080, _Source="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx" [0135.323] wcscat (in: _Dest=0x2ff5080, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx.f0dbec" [0135.323] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx.f0dbec", NtPathName=0xbbcfcd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\zPAObiSn08.pptx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2fa78 [0136.340] FlushFileBuffers (hFile=0xb68) returned 1 [0136.363] CloseHandle (hObject=0xb68) returned 1 [0136.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecdc98 [0136.452] wcscpy (in: _Dest=0x3ecdc98, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0136.452] wcscat (in: _Dest=0x3ecdc98, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" [0136.452] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt")) returned 0xffffffff [0136.525] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xae8 [0137.000] WriteFile (in: hFile=0xae8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbbcfcfc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbbcfcfc*=0x70c, lpOverlapped=0x0) returned 1 [0137.038] CloseHandle (hObject=0xae8) returned 1 [0139.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdc98) returned 1 [0139.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 Thread: id = 501 os_tid = 0xc78 [0133.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e22da8 [0133.953] wcscpy (in: _Dest=0x3e22da8, _Source="C:\\Users\\Public\\Documents\\My Music" | out: _Dest="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music" [0133.953] wcscat (in: _Dest=0x3e22da8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Music\\") returned="C:\\Users\\Public\\Documents\\My Music\\" [0133.954] wcscat (in: _Dest=0x3e22da8, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Music\\*") returned="C:\\Users\\Public\\Documents\\My Music\\*" [0133.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0133.954] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0133.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22da8) returned 1 [0133.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5e88) returned 1 Thread: id = 502 os_tid = 0xc6c [0133.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e22da8 [0133.955] wcscpy (in: _Dest=0x3e22da8, _Source="C:\\Users\\Public\\Documents\\My Pictures" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures" [0133.956] wcscat (in: _Dest=0x3e22da8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures\\") returned="C:\\Users\\Public\\Documents\\My Pictures\\" [0133.956] wcscat (in: _Dest=0x3e22da8, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures\\*") returned="C:\\Users\\Public\\Documents\\My Pictures\\*" [0133.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0133.956] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0133.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22da8) returned 1 [0133.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22cf8) returned 1 Thread: id = 503 os_tid = 0xc7c [0133.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e22cf8 [0133.957] wcscpy (in: _Dest=0x3e22cf8, _Source="C:\\Users\\Public\\Documents\\My Videos" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos" [0133.957] wcscat (in: _Dest=0x3e22cf8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos\\") returned="C:\\Users\\Public\\Documents\\My Videos\\" [0133.958] wcscat (in: _Dest=0x3e22cf8, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos\\*") returned="C:\\Users\\Public\\Documents\\My Videos\\*" [0133.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0133.958] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0133.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22cf8) returned 1 [0133.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58108) returned 1 Thread: id = 504 os_tid = 0xb1c [0133.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32598 [0133.959] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0133.959] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0133.959] wcscat (in: _Dest=0x3f32598, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\*") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\*" [0133.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0133.960] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0133.961] wcscmp (_String1=".", _String2=".") returned 0 [0133.961] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.326] wcscmp (_String1="..", _String2=".") returned 1 [0134.326] wcscmp (_String1="..", _String2="..") returned 0 [0134.326] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelper.dll", cAlternateFileName="ACROIE~1.DLL")) returned 1 [0134.326] wcscmp (_String1="AcroIEHelper.dll", _String2=".") returned 1 [0134.326] wcscmp (_String1="AcroIEHelper.dll", _String2="..") returned 1 [0134.326] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelperShim.dll", cAlternateFileName="ACROIE~2.DLL")) returned 1 [0134.326] wcscmp (_String1="AcroIEHelperShim.dll", _String2=".") returned 1 [0134.326] wcscmp (_String1="AcroIEHelperShim.dll", _String2="..") returned 1 [0134.326] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CAT", cAlternateFileName="")) returned 1 [0134.326] wcscmp (_String1="AcroPDF.CAT", _String2=".") returned 1 [0134.326] wcscmp (_String1="AcroPDF.CAT", _String2="..") returned 1 [0134.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e678c8 [0134.326] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0134.326] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0134.326] wcscat (in: _Dest=0x3e678c8, _Source="AcroPDF.CAT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" [0137.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0137.075] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda54fec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1 [0137.075] wcscmp (_String1="AcroPDF.CHS", _String2=".") returned 1 [0137.075] wcscmp (_String1="AcroPDF.CHS", _String2="..") returned 1 [0137.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e20438 [0137.075] wcscpy (in: _Dest=0x3e20438, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.075] wcscat (in: _Dest=0x3e20438, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.075] wcscat (in: _Dest=0x3e20438, _Source="AcroPDF.CHS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" [0137.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e20438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0137.076] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda54fec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1 [0137.076] wcscmp (_String1="AcroPDF.CHT", _String2=".") returned 1 [0137.076] wcscmp (_String1="AcroPDF.CHT", _String2="..") returned 1 [0137.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f998 [0137.076] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.076] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.076] wcscat (in: _Dest=0x3e1f998, _Source="AcroPDF.CHT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" [0137.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0137.078] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CZE", cAlternateFileName="")) returned 1 [0137.078] wcscmp (_String1="AcroPDF.CZE", _String2=".") returned 1 [0137.078] wcscmp (_String1="AcroPDF.CZE", _String2="..") returned 1 [0137.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30af0 [0137.078] wcscpy (in: _Dest=0x3f30af0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.078] wcscat (in: _Dest=0x3f30af0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.078] wcscat (in: _Dest=0x3f30af0, _Source="AcroPDF.CZE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" [0137.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc [0137.079] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DAN", cAlternateFileName="")) returned 1 [0137.079] wcscmp (_String1="AcroPDF.DAN", _String2=".") returned 1 [0137.079] wcscmp (_String1="AcroPDF.DAN", _String2="..") returned 1 [0137.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30b78 [0137.079] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.079] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.079] wcscat (in: _Dest=0x3f30b78, _Source="AcroPDF.DAN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" [0137.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd14 [0137.081] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DEU", cAlternateFileName="")) returned 1 [0137.081] wcscmp (_String1="AcroPDF.DEU", _String2=".") returned 1 [0137.081] wcscmp (_String1="AcroPDF.DEU", _String2="..") returned 1 [0137.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30d98 [0137.081] wcscpy (in: _Dest=0x3f30d98, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.081] wcscat (in: _Dest=0x3f30d98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.081] wcscat (in: _Dest=0x3f30d98, _Source="AcroPDF.DEU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" [0137.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0137.082] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda54fec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xab790, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0137.082] wcscmp (_String1="AcroPDF.dll", _String2=".") returned 1 [0137.082] wcscmp (_String1="AcroPDF.dll", _String2="..") returned 1 [0137.082] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ESP", cAlternateFileName="")) returned 1 [0137.082] wcscmp (_String1="AcroPDF.ESP", _String2=".") returned 1 [0137.082] wcscmp (_String1="AcroPDF.ESP", _String2="..") returned 1 [0137.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c00 [0137.082] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.082] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.082] wcscat (in: _Dest=0x3f30c00, _Source="AcroPDF.ESP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" [0137.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0137.084] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.EUQ", cAlternateFileName="")) returned 1 [0137.084] wcscmp (_String1="AcroPDF.EUQ", _String2=".") returned 1 [0137.084] wcscmp (_String1="AcroPDF.EUQ", _String2="..") returned 1 [0137.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc98 [0137.084] wcscpy (in: _Dest=0x3f2fc98, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.084] wcscat (in: _Dest=0x3f2fc98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.084] wcscat (in: _Dest=0x3f2fc98, _Source="AcroPDF.EUQ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" [0137.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0137.085] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.FRA", cAlternateFileName="")) returned 1 [0137.085] wcscmp (_String1="AcroPDF.FRA", _String2=".") returned 1 [0137.085] wcscmp (_String1="AcroPDF.FRA", _String2="..") returned 1 [0137.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30958 [0137.086] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.086] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.086] wcscat (in: _Dest=0x3f30958, _Source="AcroPDF.FRA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" [0137.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x940 [0137.087] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HRV", cAlternateFileName="")) returned 1 [0137.087] wcscmp (_String1="AcroPDF.HRV", _String2=".") returned 1 [0137.087] wcscmp (_String1="AcroPDF.HRV", _String2="..") returned 1 [0137.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f308d0 [0137.087] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.087] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.087] wcscat (in: _Dest=0x3f308d0, _Source="AcroPDF.HRV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" [0137.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0137.089] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HUN", cAlternateFileName="")) returned 1 [0137.089] wcscmp (_String1="AcroPDF.HUN", _String2=".") returned 1 [0137.089] wcscmp (_String1="AcroPDF.HUN", _String2="..") returned 1 [0137.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fb00 [0137.089] wcscpy (in: _Dest=0x3f2fb00, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.089] wcscat (in: _Dest=0x3f2fb00, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.089] wcscat (in: _Dest=0x3f2fb00, _Source="AcroPDF.HUN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" [0137.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc [0137.090] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ITA", cAlternateFileName="")) returned 1 [0137.090] wcscmp (_String1="AcroPDF.ITA", _String2=".") returned 1 [0137.090] wcscmp (_String1="AcroPDF.ITA", _String2="..") returned 1 [0137.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f4a0 [0137.090] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.090] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.091] wcscat (in: _Dest=0x3f2f4a0, _Source="AcroPDF.ITA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" [0137.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650 [0137.092] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.JPN", cAlternateFileName="")) returned 1 [0137.092] wcscmp (_String1="AcroPDF.JPN", _String2=".") returned 1 [0137.092] wcscmp (_String1="AcroPDF.JPN", _String2="..") returned 1 [0137.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30c88 [0137.092] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.092] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.092] wcscat (in: _Dest=0x3f30c88, _Source="AcroPDF.JPN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" [0137.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0137.094] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.KOR", cAlternateFileName="")) returned 1 [0137.094] wcscmp (_String1="AcroPDF.KOR", _String2=".") returned 1 [0137.094] wcscmp (_String1="AcroPDF.KOR", _String2="..") returned 1 [0137.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30a68 [0137.094] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.094] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.094] wcscat (in: _Dest=0x3f30a68, _Source="AcroPDF.KOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" [0137.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0137.095] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NLD", cAlternateFileName="")) returned 1 [0137.095] wcscmp (_String1="AcroPDF.NLD", _String2=".") returned 1 [0137.095] wcscmp (_String1="AcroPDF.NLD", _String2="..") returned 1 [0137.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f968 [0137.095] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.095] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.096] wcscat (in: _Dest=0x3f2f968, _Source="AcroPDF.NLD" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" [0137.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0137.097] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NOR", cAlternateFileName="")) returned 1 [0137.097] wcscmp (_String1="AcroPDF.NOR", _String2=".") returned 1 [0137.097] wcscmp (_String1="AcroPDF.NOR", _String2="..") returned 1 [0137.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30e20 [0137.097] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.097] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.097] wcscat (in: _Dest=0x3f30e20, _Source="AcroPDF.NOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" [0137.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0137.098] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.POL", cAlternateFileName="")) returned 1 [0137.098] wcscmp (_String1="AcroPDF.POL", _String2=".") returned 1 [0137.098] wcscmp (_String1="AcroPDF.POL", _String2="..") returned 1 [0137.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30ea8 [0137.099] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.099] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.099] wcscat (in: _Dest=0x3f30ea8, _Source="AcroPDF.POL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" [0137.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0137.100] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.PTB", cAlternateFileName="")) returned 1 [0137.100] wcscmp (_String1="AcroPDF.PTB", _String2=".") returned 1 [0137.100] wcscmp (_String1="AcroPDF.PTB", _String2="..") returned 1 [0137.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30f30 [0137.100] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.100] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.100] wcscat (in: _Dest=0x3f30f30, _Source="AcroPDF.PTB" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" [0137.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0137.102] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUM", cAlternateFileName="")) returned 1 [0137.102] wcscmp (_String1="AcroPDF.RUM", _String2=".") returned 1 [0137.102] wcscmp (_String1="AcroPDF.RUM", _String2="..") returned 1 [0137.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30fb8 [0137.102] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.102] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.102] wcscat (in: _Dest=0x3f30fb8, _Source="AcroPDF.RUM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" [0137.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0137.103] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUS", cAlternateFileName="")) returned 1 [0137.104] wcscmp (_String1="AcroPDF.RUS", _String2=".") returned 1 [0137.104] wcscmp (_String1="AcroPDF.RUS", _String2="..") returned 1 [0137.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31040 [0137.104] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.104] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.104] wcscat (in: _Dest=0x3f31040, _Source="AcroPDF.RUS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" [0137.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0137.105] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SKY", cAlternateFileName="")) returned 1 [0137.105] wcscmp (_String1="AcroPDF.SKY", _String2=".") returned 1 [0137.105] wcscmp (_String1="AcroPDF.SKY", _String2="..") returned 1 [0137.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0137.105] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.105] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.105] wcscat (in: _Dest=0x3f310c8, _Source="AcroPDF.SKY" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" [0137.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0137.107] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SLV", cAlternateFileName="")) returned 1 [0137.107] wcscmp (_String1="AcroPDF.SLV", _String2=".") returned 1 [0137.107] wcscmp (_String1="AcroPDF.SLV", _String2="..") returned 1 [0137.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31150 [0137.107] wcscpy (in: _Dest=0x3f31150, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.107] wcscat (in: _Dest=0x3f31150, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.107] wcscat (in: _Dest=0x3f31150, _Source="AcroPDF.SLV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" [0137.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0137.108] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SUO", cAlternateFileName="")) returned 1 [0137.108] wcscmp (_String1="AcroPDF.SUO", _String2=".") returned 1 [0137.108] wcscmp (_String1="AcroPDF.SUO", _String2="..") returned 1 [0137.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f311d8 [0137.109] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.109] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.109] wcscat (in: _Dest=0x3f311d8, _Source="AcroPDF.SUO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" [0137.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0137.110] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SVE", cAlternateFileName="")) returned 1 [0137.110] wcscmp (_String1="AcroPDF.SVE", _String2=".") returned 1 [0137.110] wcscmp (_String1="AcroPDF.SVE", _String2="..") returned 1 [0137.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31260 [0137.110] wcscpy (in: _Dest=0x3f31260, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0137.110] wcscat (in: _Dest=0x3f31260, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0137.110] wcscat (in: _Dest=0x3f31260, _Source="AcroPDF.SVE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" [0137.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0139.057] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.TUR", cAlternateFileName="")) returned 1 [0139.057] wcscmp (_String1="AcroPDF.TUR", _String2=".") returned 1 [0139.057] wcscmp (_String1="AcroPDF.TUR", _String2="..") returned 1 [0139.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc10 [0139.058] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0139.058] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0139.058] wcscat (in: _Dest=0x3f2fc10, _Source="AcroPDF.TUR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" [0144.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0144.573] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.UKR", cAlternateFileName="")) returned 1 [0144.573] wcscmp (_String1="AcroPDF.UKR", _String2=".") returned 1 [0144.573] wcscmp (_String1="AcroPDF.UKR", _String2="..") returned 1 [0144.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36fc60 [0144.573] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0144.573] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0144.573] wcscat (in: _Dest=0x36fc60, _Source="AcroPDF.UKR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" [0144.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0144.574] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CAT", cAlternateFileName="")) returned 1 [0144.574] wcscmp (_String1="PDFShell.CAT", _String2=".") returned 1 [0144.574] wcscmp (_String1="PDFShell.CAT", _String2="..") returned 1 [0144.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2378 [0144.574] wcscpy (in: _Dest=0x3df2378, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0144.574] wcscat (in: _Dest=0x3df2378, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0144.574] wcscat (in: _Dest=0x3df2378, _Source="PDFShell.CAT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" [0144.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0144.575] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHS", cAlternateFileName="")) returned 1 [0144.575] wcscmp (_String1="PDFShell.CHS", _String2=".") returned 1 [0144.576] wcscmp (_String1="PDFShell.CHS", _String2="..") returned 1 [0144.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb16a8 [0144.576] wcscpy (in: _Dest=0x3eb16a8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0144.576] wcscat (in: _Dest=0x3eb16a8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0144.576] wcscat (in: _Dest=0x3eb16a8, _Source="PDFShell.CHS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" [0144.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb16a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0144.577] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHT", cAlternateFileName="")) returned 1 [0144.577] wcscmp (_String1="PDFShell.CHT", _String2=".") returned 1 [0144.577] wcscmp (_String1="PDFShell.CHT", _String2="..") returned 1 [0144.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1738 [0144.578] wcscpy (in: _Dest=0x3eb1738, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0144.578] wcscat (in: _Dest=0x3eb1738, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0144.578] wcscat (in: _Dest=0x3eb1738, _Source="PDFShell.CHT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" [0144.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0144.579] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CZE", cAlternateFileName="")) returned 1 [0144.579] wcscmp (_String1="PDFShell.CZE", _String2=".") returned 1 [0144.579] wcscmp (_String1="PDFShell.CZE", _String2="..") returned 1 [0144.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb17c8 [0144.579] wcscpy (in: _Dest=0x3eb17c8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0144.579] wcscat (in: _Dest=0x3eb17c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0144.579] wcscat (in: _Dest=0x3eb17c8, _Source="PDFShell.CZE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" [0144.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb17c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0144.581] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DAN", cAlternateFileName="")) returned 1 [0144.601] wcscmp (_String1="PDFShell.DAN", _String2=".") returned 1 [0144.601] wcscmp (_String1="PDFShell.DAN", _String2="..") returned 1 [0144.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1978 [0144.601] wcscpy (in: _Dest=0x3eb1978, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0144.601] wcscat (in: _Dest=0x3eb1978, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0144.602] wcscat (in: _Dest=0x3eb1978, _Source="PDFShell.DAN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" [0145.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0145.106] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DEU", cAlternateFileName="")) returned 1 [0145.106] wcscmp (_String1="PDFShell.DEU", _String2=".") returned 1 [0145.106] wcscmp (_String1="PDFShell.DEU", _String2="..") returned 1 [0145.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35400 [0145.106] wcscpy (in: _Dest=0x3f35400, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.106] wcscat (in: _Dest=0x3f35400, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.106] wcscat (in: _Dest=0x3f35400, _Source="PDFShell.DEU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" [0145.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0 [0145.421] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdfshell.dll", cAlternateFileName="")) returned 1 [0145.421] wcscmp (_String1="pdfshell.dll", _String2=".") returned 1 [0145.421] wcscmp (_String1="pdfshell.dll", _String2="..") returned 1 [0145.421] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ESP", cAlternateFileName="")) returned 1 [0145.421] wcscmp (_String1="PDFShell.ESP", _String2=".") returned 1 [0145.421] wcscmp (_String1="PDFShell.ESP", _String2="..") returned 1 [0145.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f357f0 [0145.421] wcscpy (in: _Dest=0x3f357f0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.421] wcscat (in: _Dest=0x3f357f0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.421] wcscat (in: _Dest=0x3f357f0, _Source="PDFShell.ESP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" [0145.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f357f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0145.428] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.EUQ", cAlternateFileName="")) returned 1 [0145.428] wcscmp (_String1="PDFShell.EUQ", _String2=".") returned 1 [0145.428] wcscmp (_String1="PDFShell.EUQ", _String2="..") returned 1 [0145.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f348c0 [0145.428] wcscpy (in: _Dest=0x3f348c0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.428] wcscat (in: _Dest=0x3f348c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.428] wcscat (in: _Dest=0x3f348c0, _Source="PDFShell.EUQ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" [0145.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f348c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0145.430] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.FRA", cAlternateFileName="")) returned 1 [0145.430] wcscmp (_String1="PDFShell.FRA", _String2=".") returned 1 [0145.430] wcscmp (_String1="PDFShell.FRA", _String2="..") returned 1 [0145.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f351c0 [0145.430] wcscpy (in: _Dest=0x3f351c0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.430] wcscat (in: _Dest=0x3f351c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.430] wcscat (in: _Dest=0x3f351c0, _Source="PDFShell.FRA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" [0145.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f351c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0145.432] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HRV", cAlternateFileName="")) returned 1 [0145.433] wcscmp (_String1="PDFShell.HRV", _String2=".") returned 1 [0145.433] wcscmp (_String1="PDFShell.HRV", _String2="..") returned 1 [0145.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35ac0 [0145.433] wcscpy (in: _Dest=0x3f35ac0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.433] wcscat (in: _Dest=0x3f35ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.433] wcscat (in: _Dest=0x3f35ac0, _Source="PDFShell.HRV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" [0145.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0145.435] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HUN", cAlternateFileName="")) returned 1 [0145.435] wcscmp (_String1="PDFShell.HUN", _String2=".") returned 1 [0145.435] wcscmp (_String1="PDFShell.HUN", _String2="..") returned 1 [0145.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1bb8 [0145.435] wcscpy (in: _Dest=0x3eb1bb8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.435] wcscat (in: _Dest=0x3eb1bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.435] wcscat (in: _Dest=0x3eb1bb8, _Source="PDFShell.HUN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" [0145.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0145.437] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ITA", cAlternateFileName="")) returned 1 [0145.437] wcscmp (_String1="PDFShell.ITA", _String2=".") returned 1 [0145.437] wcscmp (_String1="PDFShell.ITA", _String2="..") returned 1 [0145.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2158 [0145.437] wcscpy (in: _Dest=0x3eb2158, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.437] wcscat (in: _Dest=0x3eb2158, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.437] wcscat (in: _Dest=0x3eb2158, _Source="PDFShell.ITA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" [0145.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0145.440] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.JPN", cAlternateFileName="")) returned 1 [0145.440] wcscmp (_String1="PDFShell.JPN", _String2=".") returned 1 [0145.441] wcscmp (_String1="PDFShell.JPN", _String2="..") returned 1 [0145.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb21e8 [0145.441] wcscpy (in: _Dest=0x3eb21e8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.441] wcscat (in: _Dest=0x3eb21e8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.441] wcscat (in: _Dest=0x3eb21e8, _Source="PDFShell.JPN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" [0145.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb21e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0145.442] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.KOR", cAlternateFileName="")) returned 1 [0145.442] wcscmp (_String1="PDFShell.KOR", _String2=".") returned 1 [0145.443] wcscmp (_String1="PDFShell.KOR", _String2="..") returned 1 [0145.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2278 [0145.443] wcscpy (in: _Dest=0x3eb2278, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.443] wcscat (in: _Dest=0x3eb2278, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.443] wcscat (in: _Dest=0x3eb2278, _Source="PDFShell.KOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" [0145.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0145.451] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NLD", cAlternateFileName="")) returned 1 [0145.451] wcscmp (_String1="PDFShell.NLD", _String2=".") returned 1 [0145.451] wcscmp (_String1="PDFShell.NLD", _String2="..") returned 1 [0145.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2308 [0145.451] wcscpy (in: _Dest=0x3eb2308, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.451] wcscat (in: _Dest=0x3eb2308, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.451] wcscat (in: _Dest=0x3eb2308, _Source="PDFShell.NLD" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" [0145.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0145.453] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NOR", cAlternateFileName="")) returned 1 [0145.453] wcscmp (_String1="PDFShell.NOR", _String2=".") returned 1 [0145.453] wcscmp (_String1="PDFShell.NOR", _String2="..") returned 1 [0145.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2398 [0145.453] wcscpy (in: _Dest=0x3eb2398, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.453] wcscat (in: _Dest=0x3eb2398, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.453] wcscat (in: _Dest=0x3eb2398, _Source="PDFShell.NOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" [0145.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0145.474] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.POL", cAlternateFileName="")) returned 1 [0145.474] wcscmp (_String1="PDFShell.POL", _String2=".") returned 1 [0145.474] wcscmp (_String1="PDFShell.POL", _String2="..") returned 1 [0145.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2428 [0145.474] wcscpy (in: _Dest=0x3eb2428, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.474] wcscat (in: _Dest=0x3eb2428, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.474] wcscat (in: _Dest=0x3eb2428, _Source="PDFShell.POL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" [0145.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0145.476] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcda1360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.PTB", cAlternateFileName="")) returned 1 [0145.476] wcscmp (_String1="PDFShell.PTB", _String2=".") returned 1 [0145.476] wcscmp (_String1="PDFShell.PTB", _String2="..") returned 1 [0145.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb24b8 [0145.476] wcscpy (in: _Dest=0x3eb24b8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.477] wcscat (in: _Dest=0x3eb24b8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.477] wcscat (in: _Dest=0x3eb24b8, _Source="PDFShell.PTB" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" [0145.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb24b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0145.478] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUM", cAlternateFileName="")) returned 1 [0145.478] wcscmp (_String1="PDFShell.RUM", _String2=".") returned 1 [0145.478] wcscmp (_String1="PDFShell.RUM", _String2="..") returned 1 [0145.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2548 [0145.479] wcscpy (in: _Dest=0x3eb2548, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.479] wcscat (in: _Dest=0x3eb2548, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.479] wcscat (in: _Dest=0x3eb2548, _Source="PDFShell.RUM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" [0145.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0145.481] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUS", cAlternateFileName="")) returned 1 [0145.481] wcscmp (_String1="PDFShell.RUS", _String2=".") returned 1 [0145.481] wcscmp (_String1="PDFShell.RUS", _String2="..") returned 1 [0145.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb25d8 [0145.481] wcscpy (in: _Dest=0x3eb25d8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.481] wcscat (in: _Dest=0x3eb25d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.481] wcscat (in: _Dest=0x3eb25d8, _Source="PDFShell.RUS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" [0145.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb25d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0145.483] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SKY", cAlternateFileName="")) returned 1 [0145.483] wcscmp (_String1="PDFShell.SKY", _String2=".") returned 1 [0145.483] wcscmp (_String1="PDFShell.SKY", _String2="..") returned 1 [0145.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2668 [0145.483] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.484] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.484] wcscat (in: _Dest=0x3eb2668, _Source="PDFShell.SKY" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" [0145.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0145.485] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SLV", cAlternateFileName="")) returned 1 [0145.486] wcscmp (_String1="PDFShell.SLV", _String2=".") returned 1 [0145.486] wcscmp (_String1="PDFShell.SLV", _String2="..") returned 1 [0145.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb26f8 [0145.486] wcscpy (in: _Dest=0x3eb26f8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.486] wcscat (in: _Dest=0x3eb26f8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.486] wcscat (in: _Dest=0x3eb26f8, _Source="PDFShell.SLV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" [0145.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb26f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0145.488] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SUO", cAlternateFileName="")) returned 1 [0145.488] wcscmp (_String1="PDFShell.SUO", _String2=".") returned 1 [0145.488] wcscmp (_String1="PDFShell.SUO", _String2="..") returned 1 [0145.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2788 [0145.488] wcscpy (in: _Dest=0x3eb2788, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.488] wcscat (in: _Dest=0x3eb2788, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.488] wcscat (in: _Dest=0x3eb2788, _Source="PDFShell.SUO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" [0145.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0145.490] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SVE", cAlternateFileName="")) returned 1 [0145.490] wcscmp (_String1="PDFShell.SVE", _String2=".") returned 1 [0145.490] wcscmp (_String1="PDFShell.SVE", _String2="..") returned 1 [0145.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2818 [0145.490] wcscpy (in: _Dest=0x3eb2818, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.490] wcscat (in: _Dest=0x3eb2818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.490] wcscat (in: _Dest=0x3eb2818, _Source="PDFShell.SVE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" [0145.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0145.492] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.TUR", cAlternateFileName="")) returned 1 [0145.492] wcscmp (_String1="PDFShell.TUR", _String2=".") returned 1 [0145.492] wcscmp (_String1="PDFShell.TUR", _String2="..") returned 1 [0145.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb28a8 [0145.492] wcscpy (in: _Dest=0x3eb28a8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.492] wcscat (in: _Dest=0x3eb28a8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.492] wcscat (in: _Dest=0x3eb28a8, _Source="PDFShell.TUR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" [0145.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb28a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0145.494] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 1 [0145.494] wcscmp (_String1="PDFShell.UKR", _String2=".") returned 1 [0145.494] wcscmp (_String1="PDFShell.UKR", _String2="..") returned 1 [0145.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2938 [0145.495] wcscpy (in: _Dest=0x3eb2938, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0145.495] wcscat (in: _Dest=0x3eb2938, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0145.496] wcscat (in: _Dest=0x3eb2938, _Source="PDFShell.UKR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" [0145.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0 [0147.577] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 0 [0148.512] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0149.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0149.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0149.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39858) returned 1 Thread: id = 505 os_tid = 0xb18 [0133.962] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm")) returned 0x20 [0134.321] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0134.321] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.321] GetLastError () returned 0x5 [0134.321] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0134.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d3e0) returned 1 Thread: id = 506 os_tid = 0xb10 [0133.962] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm")) returned 0x20 [0133.963] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0133.963] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0133.963] GetLastError () returned 0x5 [0133.963] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0133.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d488) returned 1 Thread: id = 507 os_tid = 0xb80 [0133.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333468 [0133.965] wcscpy (in: _Dest=0x333468, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0133.965] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0133.965] wcscat (in: _Dest=0x333468, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" [0133.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0133.965] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0133.965] wcscmp (_String1=".", _String2=".") returned 0 [0133.965] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.965] wcscmp (_String1="..", _String2=".") returned 1 [0133.965] wcscmp (_String1="..", _String2="..") returned 0 [0133.965] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0133.965] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0133.965] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0133.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e39b10 [0133.965] wcscpy (in: _Dest=0x3e39b10, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0133.965] wcscat (in: _Dest=0x3e39b10, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0133.965] wcscat (in: _Dest=0x3e39b10, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0139.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e39b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0139.008] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0139.009] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0139.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0139.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 [0139.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 508 os_tid = 0xb70 [0133.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3336a8 [0133.966] wcscpy (in: _Dest=0x3336a8, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0133.966] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0133.966] wcscat (in: _Dest=0x3336a8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*" [0133.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0133.966] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0134.323] wcscmp (_String1=".", _String2=".") returned 0 [0134.323] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.323] wcscmp (_String1="..", _String2=".") returned 1 [0134.323] wcscmp (_String1="..", _String2="..") returned 0 [0134.323] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0134.323] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0134.323] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0134.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e39dc8 [0134.323] wcscpy (in: _Dest=0x3e39dc8, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0134.323] wcscat (in: _Dest=0x3e39dc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0134.323] wcscat (in: _Dest=0x3e39dc8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0143.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e39dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0143.893] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0143.893] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0143.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0143.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 [0143.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 509 os_tid = 0xb78 [0133.967] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm")) returned 0x20 [0134.324] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0134.324] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.324] GetLastError () returned 0x5 [0134.324] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0134.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d530) returned 1 Thread: id = 510 os_tid = 0xb7c [0133.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0133.968] wcscpy (in: _Dest=0x3333a8, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0133.968] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0133.968] wcscat (in: _Dest=0x3333a8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" [0133.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0133.968] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0133.968] wcscmp (_String1=".", _String2=".") returned 0 [0133.968] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.968] wcscmp (_String1="..", _String2=".") returned 1 [0133.968] wcscmp (_String1="..", _String2="..") returned 0 [0133.968] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0133.968] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0133.968] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0133.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a508 [0133.968] wcscpy (in: _Dest=0x3e3a508, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0133.968] wcscat (in: _Dest=0x3e3a508, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0133.968] wcscat (in: _Dest=0x3e3a508, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0139.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e3a508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0139.011] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0139.011] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0139.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0139.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 [0139.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 Thread: id = 511 os_tid = 0xb68 [0133.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333168 [0133.969] wcscpy (in: _Dest=0x333168, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0133.969] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0133.969] wcscat (in: _Dest=0x333168, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*" [0133.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0133.969] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0134.325] wcscmp (_String1=".", _String2=".") returned 0 [0134.325] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.325] wcscmp (_String1="..", _String2=".") returned 1 [0134.325] wcscmp (_String1="..", _String2="..") returned 0 [0134.325] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0134.325] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0134.325] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0134.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ddee38 [0134.326] wcscpy (in: _Dest=0x3ddee38, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0134.326] wcscat (in: _Dest=0x3ddee38, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0134.326] wcscat (in: _Dest=0x3ddee38, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0137.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ddee38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0137.073] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0137.073] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0137.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0137.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 [0137.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 512 os_tid = 0xb64 [0133.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ded0 [0133.970] wcscpy (in: _Dest=0x3d8ded0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client" [0133.970] wcscat (in: _Dest=0x3d8ded0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\" [0133.970] wcscat (in: _Dest=0x3d8ded0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*" [0133.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0133.970] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0133.970] wcscmp (_String1=".", _String2=".") returned 0 [0133.970] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.970] wcscmp (_String1="..", _String2=".") returned 1 [0133.970] wcscmp (_String1="..", _String2="..") returned 0 [0133.970] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0133.970] wcscmp (_String1="1.0", _String2=".") returned 1 [0133.970] wcscmp (_String1="1.0", _String2="..") returned 1 [0133.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e7c0 [0133.970] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client" [0133.970] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\" [0133.970] wcscat (in: _Dest=0x3d8e7c0, _Source="1.0" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" [0139.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0139.014] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0139.014] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0139.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0139.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ded0) returned 1 [0139.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 Thread: id = 513 os_tid = 0xb0c [0133.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2b968 [0133.971] wcscpy (in: _Dest=0x3e2b968, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" [0133.971] wcscat (in: _Dest=0x3e2b968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\" [0133.971] wcscat (in: _Dest=0x3e2b968, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\*" [0133.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0133.971] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0134.371] wcscmp (_String1=".", _String2=".") returned 0 [0134.371] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.371] wcscmp (_String1="..", _String2=".") returned 1 [0134.371] wcscmp (_String1="..", _String2="..") returned 0 [0134.371] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0134.371] wcscmp (_String1="1033", _String2=".") returned 1 [0134.371] wcscmp (_String1="1033", _String2="..") returned 1 [0134.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e10a68 [0134.371] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" [0134.371] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\" [0134.371] wcscat (in: _Dest=0x3e10a68, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" [0135.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0135.980] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0135.980] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0135.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0135.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b968) returned 1 [0135.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2af50) returned 1 Thread: id = 514 os_tid = 0x5d4 [0133.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24a40 [0133.975] wcscpy (in: _Dest=0x3e24a40, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" [0133.975] wcscat (in: _Dest=0x3e24a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\" [0133.975] wcscat (in: _Dest=0x3e24a40, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*" [0133.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0133.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592fd430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0133.976] wcscmp (_String1=".", _String2=".") returned 0 [0133.976] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592fd430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.976] wcscmp (_String1="..", _String2=".") returned 1 [0133.976] wcscmp (_String1="..", _String2="..") returned 0 [0133.976] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257b00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1257b00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0133.976] wcscmp (_String1="VSTAClientPkgUI.dll", _String2=".") returned 1 [0133.976] wcscmp (_String1="VSTAClientPkgUI.dll", _String2="..") returned 1 [0133.976] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec32100, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdec32100, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0133.976] wcscmp (_String1="VSTAProjectUI.dll", _String2=".") returned 1 [0133.976] wcscmp (_String1="VSTAProjectUI.dll", _String2="..") returned 1 [0133.976] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec32100, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdec32100, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0133.976] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0133.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0133.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24a40) returned 1 [0133.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5908) returned 1 Thread: id = 515 os_tid = 0xde0 [0133.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066e40 [0133.977] wcscpy (in: _Dest=0x3066e40, _Source="C:\\Users\\All Users\\Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe" [0133.977] wcscat (in: _Dest=0x3066e40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\") returned="C:\\Users\\All Users\\Adobe\\" [0133.977] wcscat (in: _Dest=0x3066e40, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\*") returned="C:\\Users\\All Users\\Adobe\\*" [0133.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0133.977] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0133.978] wcscmp (_String1=".", _String2=".") returned 0 [0133.978] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.978] wcscmp (_String1="..", _String2=".") returned 1 [0133.978] wcscmp (_String1="..", _String2="..") returned 0 [0133.978] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0133.978] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0133.978] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0133.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e58108 [0133.978] wcscpy (in: _Dest=0x3e58108, _Source="C:\\Users\\All Users\\Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe" [0133.978] wcscat (in: _Dest=0x3e58108, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\") returned="C:\\Users\\All Users\\Adobe\\" [0133.978] wcscat (in: _Dest=0x3e58108, _Source="Acrobat" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat" [0139.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e58108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0139.017] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0139.017] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0139.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0139.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e40) returned 1 [0139.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37a98) returned 1 Thread: id = 516 os_tid = 0xc10 [0133.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e22cf8 [0133.978] wcscpy (in: _Dest=0x3e22cf8, _Source="C:\\Users\\All Users\\Application Data" | out: _Dest="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data" [0133.979] wcscat (in: _Dest=0x3e22cf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Application Data\\") returned="C:\\Users\\All Users\\Application Data\\" [0133.979] wcscat (in: _Dest=0x3e22cf8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Application Data\\*") returned="C:\\Users\\All Users\\Application Data\\*" [0133.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0133.979] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0133.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22cf8) returned 1 [0133.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de62e8) returned 1 Thread: id = 517 os_tid = 0xdfc [0133.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e6ce60 [0133.980] wcscpy (in: _Dest=0x3e6ce60, _Source="C:\\Users\\All Users\\Desktop" | out: _Dest="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop" [0133.980] wcscat (in: _Dest=0x3e6ce60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Desktop\\") returned="C:\\Users\\All Users\\Desktop\\" [0133.980] wcscat (in: _Dest=0x3e6ce60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Desktop\\*") returned="C:\\Users\\All Users\\Desktop\\*" [0133.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0133.980] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0133.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ce60) returned 1 [0133.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37a58) returned 1 Thread: id = 518 os_tid = 0xe00 [0133.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e6ce60 [0133.982] wcscpy (in: _Dest=0x3e6ce60, _Source="C:\\Users\\All Users\\Documents" | out: _Dest="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents" [0133.982] wcscat (in: _Dest=0x3e6ce60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Documents\\") returned="C:\\Users\\All Users\\Documents\\" [0133.982] wcscat (in: _Dest=0x3e6ce60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Documents\\*") returned="C:\\Users\\All Users\\Documents\\*" [0133.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0133.982] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0133.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ce60) returned 1 [0133.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aae8) returned 1 Thread: id = 519 os_tid = 0xe04 [0133.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e6ce60 [0133.983] wcscpy (in: _Dest=0x3e6ce60, _Source="C:\\Users\\All Users\\Favorites" | out: _Dest="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites" [0133.983] wcscat (in: _Dest=0x3e6ce60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Favorites\\") returned="C:\\Users\\All Users\\Favorites\\" [0133.983] wcscat (in: _Dest=0x3e6ce60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Favorites\\*") returned="C:\\Users\\All Users\\Favorites\\*" [0133.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0133.983] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0133.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ce60) returned 1 [0133.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a668) returned 1 Thread: id = 520 os_tid = 0xe48 [0133.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e6ce60 [0133.984] wcscpy (in: _Dest=0x3e6ce60, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0133.984] wcscat (in: _Dest=0x3e6ce60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0133.985] wcscat (in: _Dest=0x3e6ce60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\*") returned="C:\\Users\\All Users\\Microsoft\\*" [0133.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0133.985] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0133.985] wcscmp (_String1=".", _String2=".") returned 0 [0133.985] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.985] wcscmp (_String1="..", _String2=".") returned 1 [0133.985] wcscmp (_String1="..", _String2="..") returned 0 [0133.985] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0133.985] wcscmp (_String1="Assistance", _String2=".") returned 1 [0133.985] wcscmp (_String1="Assistance", _String2="..") returned 1 [0133.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e22cf8 [0133.985] wcscpy (in: _Dest=0x3e22cf8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0133.985] wcscat (in: _Dest=0x3e22cf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0133.985] wcscat (in: _Dest=0x3e22cf8, _Source="Assistance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance" [0139.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22cf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934 [0139.019] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0139.019] wcscmp (_String1="Crypto", _String2=".") returned 1 [0139.019] wcscmp (_String1="Crypto", _String2="..") returned 1 [0139.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3dc6a28 [0139.019] wcscpy (in: _Dest=0x3dc6a28, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.019] wcscat (in: _Dest=0x3dc6a28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.019] wcscat (in: _Dest=0x3dc6a28, _Source="Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0139.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc6a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0139.020] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0139.021] wcscmp (_String1="Device Stage", _String2=".") returned 1 [0139.021] wcscmp (_String1="Device Stage", _String2="..") returned 1 [0139.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6f68 [0139.021] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.021] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.021] wcscat (in: _Dest=0x2fe6f68, _Source="Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0139.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0139.022] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0139.022] wcscmp (_String1="DeviceSync", _String2=".") returned 1 [0139.022] wcscmp (_String1="DeviceSync", _String2="..") returned 1 [0139.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0f0b8 [0139.022] wcscpy (in: _Dest=0x3e0f0b8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.022] wcscat (in: _Dest=0x3e0f0b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.023] wcscat (in: _Dest=0x3e0f0b8, _Source="DeviceSync" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync" [0139.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0139.024] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0139.024] wcscmp (_String1="DRM", _String2=".") returned 1 [0139.024] wcscmp (_String1="DRM", _String2="..") returned 1 [0139.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3dc6398 [0139.024] wcscpy (in: _Dest=0x3dc6398, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.024] wcscat (in: _Dest=0x3dc6398, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.024] wcscat (in: _Dest=0x3dc6398, _Source="DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM" [0139.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc6398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0139.026] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0139.026] wcscmp (_String1="eHome", _String2=".") returned 1 [0139.026] wcscmp (_String1="eHome", _String2="..") returned 1 [0139.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3dc6528 [0139.026] wcscpy (in: _Dest=0x3dc6528, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.026] wcscat (in: _Dest=0x3dc6528, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.026] wcscat (in: _Dest=0x3dc6528, _Source="eHome" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome" [0139.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc6528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0139.028] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0139.028] wcscmp (_String1="Event Viewer", _String2=".") returned 1 [0139.028] wcscmp (_String1="Event Viewer", _String2="..") returned 1 [0139.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6908 [0139.028] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.028] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.028] wcscat (in: _Dest=0x2fe6908, _Source="Event Viewer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer" [0139.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0139.029] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTML Help", cAlternateFileName="HTMLHE~1")) returned 1 [0139.030] wcscmp (_String1="HTML Help", _String2=".") returned 1 [0139.030] wcscmp (_String1="HTML Help", _String2="..") returned 1 [0139.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f5e0 [0139.030] wcscpy (in: _Dest=0x3e0f5e0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.030] wcscat (in: _Dest=0x3e0f5e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.030] wcscat (in: _Dest=0x3e0f5e0, _Source="HTML Help" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help") returned="C:\\Users\\All Users\\Microsoft\\HTML Help" [0139.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0139.031] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0139.031] wcscmp (_String1="IdentityCRL", _String2=".") returned 1 [0139.031] wcscmp (_String1="IdentityCRL", _String2="..") returned 1 [0139.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe5b88 [0139.031] wcscpy (in: _Dest=0x2fe5b88, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.031] wcscat (in: _Dest=0x2fe5b88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.031] wcscat (in: _Dest=0x2fe5b88, _Source="IdentityCRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL" [0139.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0139.033] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x263aa572, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x263aa572, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x263aa572, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0139.033] wcscmp (_String1="Media Player", _String2=".") returned 1 [0139.033] wcscmp (_String1="Media Player", _String2="..") returned 1 [0139.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe0cc8 [0139.033] wcscpy (in: _Dest=0x2fe0cc8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.033] wcscat (in: _Dest=0x2fe0cc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.033] wcscat (in: _Dest=0x2fe0cc8, _Source="Media Player" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Media Player") returned="C:\\Users\\All Users\\Microsoft\\Media Player" [0139.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0cc8) returned 1 [0139.034] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0139.034] wcscmp (_String1="MF", _String2=".") returned 1 [0139.034] wcscmp (_String1="MF", _String2="..") returned 1 [0139.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6cdd0 [0139.034] wcscpy (in: _Dest=0x3e6cdd0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.034] wcscat (in: _Dest=0x3e6cdd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.034] wcscat (in: _Dest=0x3e6cdd0, _Source="MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0139.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6cdd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0139.035] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0139.035] wcscmp (_String1="MSDN", _String2=".") returned 1 [0139.035] wcscmp (_String1="MSDN", _String2="..") returned 1 [0139.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3dc6258 [0139.035] wcscpy (in: _Dest=0x3dc6258, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.035] wcscat (in: _Dest=0x3dc6258, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.035] wcscat (in: _Dest=0x3dc6258, _Source="MSDN" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN" [0139.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc6258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0139.037] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0139.037] wcscmp (_String1="NetFramework", _String2=".") returned 1 [0139.037] wcscmp (_String1="NetFramework", _String2="..") returned 1 [0139.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe0cc8 [0139.037] wcscpy (in: _Dest=0x2fe0cc8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.037] wcscat (in: _Dest=0x2fe0cc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.037] wcscat (in: _Dest=0x2fe0cc8, _Source="NetFramework" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework" [0139.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe0cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0139.038] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0139.038] wcscmp (_String1="Network", _String2=".") returned 1 [0139.038] wcscmp (_String1="Network", _String2="..") returned 1 [0139.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0eea8 [0139.039] wcscpy (in: _Dest=0x3e0eea8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.039] wcscat (in: _Dest=0x3e0eea8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.039] wcscat (in: _Dest=0x3e0eea8, _Source="Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0139.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0eea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0139.040] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0139.040] wcscmp (_String1="OFFICE", _String2=".") returned 1 [0139.040] wcscmp (_String1="OFFICE", _String2="..") returned 1 [0139.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3dc6118 [0139.040] wcscpy (in: _Dest=0x3dc6118, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.040] wcscat (in: _Dest=0x3dc6118, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.040] wcscat (in: _Dest=0x3dc6118, _Source="OFFICE" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE" [0139.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc6118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0139.042] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0139.042] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2=".") returned 1 [0139.042] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2="..") returned 1 [0139.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f748 [0139.042] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.042] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.042] wcscat (in: _Dest=0x3f2f748, _Source="OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0139.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0139.043] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0139.043] wcscmp (_String1="RAC", _String2=".") returned 1 [0139.044] wcscmp (_String1="RAC", _String2="..") returned 1 [0139.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3dc60c8 [0139.044] wcscpy (in: _Dest=0x3dc60c8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.044] wcscat (in: _Dest=0x3dc60c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.044] wcscat (in: _Dest=0x3dc60c8, _Source="RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0139.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc60c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc5c [0139.045] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0139.045] wcscmp (_String1="Search", _String2=".") returned 1 [0139.045] wcscmp (_String1="Search", _String2="..") returned 1 [0139.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3dc5df8 [0139.045] wcscpy (in: _Dest=0x3dc5df8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.045] wcscat (in: _Dest=0x3dc5df8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.045] wcscat (in: _Dest=0x3dc5df8, _Source="Search" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search" [0139.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5df8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0139.047] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0139.047] wcscmp (_String1="User Account Pictures", _String2=".") returned 1 [0139.047] wcscmp (_String1="User Account Pictures", _String2="..") returned 1 [0139.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39778 [0139.047] wcscpy (in: _Dest=0x3f39778, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.047] wcscat (in: _Dest=0x3f39778, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.047] wcscat (in: _Dest=0x3f39778, _Source="User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0139.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0139.050] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0139.050] wcscmp (_String1="Vault", _String2=".") returned 1 [0139.050] wcscmp (_String1="Vault", _String2="..") returned 1 [0139.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3dc6078 [0139.050] wcscpy (in: _Dest=0x3dc6078, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.050] wcscat (in: _Dest=0x3dc6078, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.050] wcscat (in: _Dest=0x3dc6078, _Source="Vault" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault" [0139.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc6078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0139.052] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0139.052] wcscmp (_String1="VISIO", _String2=".") returned 1 [0139.052] wcscmp (_String1="VISIO", _String2="..") returned 1 [0139.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3dc6028 [0139.052] wcscpy (in: _Dest=0x3dc6028, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.052] wcscat (in: _Dest=0x3dc6028, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.052] wcscat (in: _Dest=0x3dc6028, _Source="VISIO" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO" [0139.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc6028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0139.054] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0139.054] wcscmp (_String1="Windows", _String2=".") returned 1 [0139.054] wcscmp (_String1="Windows", _String2="..") returned 1 [0139.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0efb0 [0139.054] wcscpy (in: _Dest=0x3e0efb0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.054] wcscat (in: _Dest=0x3e0efb0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.054] wcscat (in: _Dest=0x3e0efb0, _Source="Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0139.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0efb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0139.055] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x8fa22600, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0x8fa22600, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0139.055] wcscmp (_String1="Windows Defender", _String2=".") returned 1 [0139.055] wcscmp (_String1="Windows Defender", _String2="..") returned 1 [0139.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ded0 [0139.056] wcscpy (in: _Dest=0x3d8ded0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.056] wcscat (in: _Dest=0x3d8ded0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.056] wcscat (in: _Dest=0x3d8ded0, _Source="Windows Defender" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender" [0139.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ded0) returned 1 [0139.056] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0139.056] wcscmp (_String1="Windows NT", _String2=".") returned 1 [0139.056] wcscmp (_String1="Windows NT", _String2="..") returned 1 [0139.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0ecf0 [0139.056] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.056] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.056] wcscat (in: _Dest=0x3e0ecf0, _Source="Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0139.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0139.953] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0139.953] wcscmp (_String1="WwanSvc", _String2=".") returned 1 [0139.953] wcscmp (_String1="WwanSvc", _String2="..") returned 1 [0139.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6ed80 [0139.953] wcscpy (in: _Dest=0x3e6ed80, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0139.953] wcscat (in: _Dest=0x3e6ed80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0139.953] wcscat (in: _Dest=0x3e6ed80, _Source="WwanSvc" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc" [0143.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0143.895] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0143.895] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0143.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0143.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ce60) returned 1 [0143.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a038) returned 1 Thread: id = 521 os_tid = 0xe08 [0133.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de62e8 [0133.986] wcscpy (in: _Dest=0x3de62e8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0133.986] wcscat (in: _Dest=0x3de62e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0133.986] wcscat (in: _Dest=0x3de62e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\*") returned="C:\\Users\\All Users\\Microsoft Help\\*" [0133.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80feb90 [0133.986] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0134.327] wcscmp (_String1=".", _String2=".") returned 0 [0134.327] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.328] wcscmp (_String1="..", _String2=".") returned 1 [0134.328] wcscmp (_String1="..", _String2="..") returned 0 [0134.328] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa5d70f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d70f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0134.328] wcscmp (_String1="Hx.hxn", _String2=".") returned 1 [0134.328] wcscmp (_String1="Hx.hxn", _String2="..") returned 1 [0134.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6a88 [0134.328] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0134.328] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0134.328] wcscat (in: _Dest=0x2fe6a88, _Source="Hx.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" [0142.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0142.475] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1659930, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_K.HxW", cAlternateFileName="HX_103~1.HXW")) returned 1 [0142.475] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2=".") returned 1 [0142.475] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2="..") returned 1 [0142.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68150 [0142.475] wcscpy (in: _Dest=0x3e68150, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.475] wcscat (in: _Dest=0x3e68150, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.475] wcscat (in: _Dest=0x3e68150, _Source="Hx_1033_MKWD_K.HxW" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW" [0142.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0142.476] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1ed4790, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_NamedURL.HxW", cAlternateFileName="HX_103~2.HXW")) returned 1 [0142.476] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2=".") returned 1 [0142.476] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2="..") returned 1 [0142.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5d70 [0142.476] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.477] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.477] wcscat (in: _Dest=0x3da5d70, _Source="Hx_1033_MKWD_NamedURL.HxW" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" [0142.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3da5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0142.477] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0fcdcb0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MTOC_Hx.HxH", cAlternateFileName="HX_103~1.HXH")) returned 1 [0142.477] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2=".") returned 1 [0142.477] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2="..") returned 1 [0142.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68600 [0142.478] wcscpy (in: _Dest=0x3e68600, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.478] wcscat (in: _Dest=0x3e68600, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.478] wcscat (in: _Dest=0x3e68600, _Source="Hx_1033_MTOC_Hx.HxH" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" [0142.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0142.479] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe343ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe343ca50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x25a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.HxD", cAlternateFileName="HX_103~1.HXD")) returned 1 [0142.479] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2=".") returned 1 [0142.479] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2="..") returned 1 [0142.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da4c70 [0142.479] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.479] wcscat (in: _Dest=0x3da4c70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.479] wcscat (in: _Dest=0x3da4c70, _Source="Hx_1033_MValidator.HxD" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD" [0142.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3da4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0142.480] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.Lck", cAlternateFileName="HX_103~1.LCK")) returned 1 [0142.480] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2=".") returned 1 [0142.480] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2="..") returned 1 [0142.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4688 [0142.480] wcscpy (in: _Dest=0x3dc4688, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.480] wcscat (in: _Dest=0x3dc4688, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.480] wcscat (in: _Dest=0x3dc4688, _Source="Hx_1033_MValidator.Lck" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck" [0142.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0142.481] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43513230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43513230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0142.481] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2=".") returned 1 [0142.481] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2="..") returned 1 [0142.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68588 [0142.481] wcscpy (in: _Dest=0x3e68588, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.481] wcscat (in: _Dest=0x3e68588, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.481] wcscat (in: _Dest=0x3e68588, _Source="MS.EXCEL.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" [0142.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0142.482] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43539390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43539390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0142.482] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2=".") returned 1 [0142.482] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2="..") returned 1 [0142.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5a08 [0142.482] wcscpy (in: _Dest=0x3dc5a08, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.482] wcscat (in: _Dest=0x3dc5a08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.482] wcscat (in: _Dest=0x3dc5a08, _Source="MS.EXCEL.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" [0142.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0142.484] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0142.484] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2=".") returned 1 [0142.484] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2="..") returned 1 [0142.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68510 [0142.484] wcscpy (in: _Dest=0x3e68510, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.484] wcscat (in: _Dest=0x3e68510, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.484] wcscat (in: _Dest=0x3e68510, _Source="MS.GRAPH.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" [0142.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0142.485] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x46aa2130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x46aa2130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46bd2c30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0142.485] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2=".") returned 1 [0142.485] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2="..") returned 1 [0142.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68768 [0142.485] wcscpy (in: _Dest=0x3e68768, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.485] wcscat (in: _Dest=0x3e68768, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.485] wcscat (in: _Dest=0x3e68768, _Source="MS.GROOVE.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" [0142.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0142.486] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0142.486] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2=".") returned 1 [0142.486] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2="..") returned 1 [0142.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5b88 [0142.486] wcscpy (in: _Dest=0x3dc5b88, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.486] wcscat (in: _Dest=0x3dc5b88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.486] wcscat (in: _Dest=0x3dc5b88, _Source="MS.INFOPATH.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" [0142.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0142.487] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0142.487] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2=".") returned 1 [0142.487] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2="..") returned 1 [0142.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f968 [0142.487] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.488] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.488] wcscat (in: _Dest=0x3f2f968, _Source="MS.INFOPATHEDITOR.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" [0142.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0142.489] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0142.489] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2=".") returned 1 [0142.489] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2="..") returned 1 [0142.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3d08 [0142.489] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.489] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.489] wcscat (in: _Dest=0x3dc3d08, _Source="MS.MSACCESS.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" [0142.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0142.491] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0142.491] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2=".") returned 1 [0142.491] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2="..") returned 1 [0142.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30a68 [0142.492] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.492] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.492] wcscat (in: _Dest=0x3f30a68, _Source="MS.MSACCESS.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" [0142.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0142.493] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3639a230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3639a230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0142.493] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2=".") returned 1 [0142.493] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2="..") returned 1 [0142.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68420 [0142.493] wcscpy (in: _Dest=0x3e68420, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.493] wcscat (in: _Dest=0x3e68420, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.493] wcscat (in: _Dest=0x3e68420, _Source="MS.MSOUC.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" [0142.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0142.494] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0142.494] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2=".") returned 1 [0142.494] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2="..") returned 1 [0142.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68858 [0142.494] wcscpy (in: _Dest=0x3e68858, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.494] wcscat (in: _Dest=0x3e68858, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.494] wcscat (in: _Dest=0x3e68858, _Source="MS.MSPUB.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" [0142.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0142.495] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0142.495] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2=".") returned 1 [0142.495] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2="..") returned 1 [0142.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5988 [0142.495] wcscpy (in: _Dest=0x3dc5988, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.495] wcscat (in: _Dest=0x3dc5988, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.495] wcscat (in: _Dest=0x3dc5988, _Source="MS.MSPUB.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" [0142.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0142.496] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35f6fbb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35f6fbb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0142.496] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2=".") returned 1 [0142.496] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2="..") returned 1 [0142.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0142.496] wcscpy (in: _Dest=0x3e686f0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.496] wcscat (in: _Dest=0x3e686f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.496] wcscat (in: _Dest=0x3e686f0, _Source="MS.MSTORE.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" [0142.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0142.497] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x362dbb50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x362dbb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0142.497] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2=".") returned 1 [0142.497] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2="..") returned 1 [0142.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68498 [0142.497] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.497] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.497] wcscat (in: _Dest=0x3e68498, _Source="MS.OIS.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" [0142.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0142.499] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x555fe070, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x555fe070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5564a330, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0142.499] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2=".") returned 1 [0142.499] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2="..") returned 1 [0142.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4488 [0142.499] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.499] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.499] wcscat (in: _Dest=0x3dc4488, _Source="MS.ONENOTE.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" [0142.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0142.500] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0142.500] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2=".") returned 1 [0142.500] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2="..") returned 1 [0142.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4d08 [0142.500] wcscpy (in: _Dest=0x3dc4d08, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.500] wcscat (in: _Dest=0x3dc4d08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.500] wcscat (in: _Dest=0x3dc4d08, _Source="MS.OUTLOOK.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" [0142.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0142.501] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0142.501] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2=".") returned 1 [0142.501] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2="..") returned 1 [0142.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2fb00 [0142.501] wcscpy (in: _Dest=0x3f2fb00, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.501] wcscat (in: _Dest=0x3f2fb00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.501] wcscat (in: _Dest=0x3f2fb00, _Source="MS.OUTLOOK.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" [0142.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0142.502] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e281710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0142.502] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2=".") returned 1 [0142.502] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2="..") returned 1 [0142.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5688 [0142.503] wcscpy (in: _Dest=0x3dc5688, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.503] wcscat (in: _Dest=0x3dc5688, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.503] wcscat (in: _Dest=0x3dc5688, _Source="MS.POWERPNT.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" [0142.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0142.504] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ec06f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0142.504] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2=".") returned 1 [0142.504] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2="..") returned 1 [0142.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f308d0 [0142.504] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.504] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.504] wcscat (in: _Dest=0x3f308d0, _Source="MS.POWERPNT.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" [0142.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0142.505] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x36327e10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x36327e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0142.505] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2=".") returned 1 [0142.505] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2="..") returned 1 [0142.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5888 [0142.505] wcscpy (in: _Dest=0x3dc5888, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.505] wcscat (in: _Dest=0x3dc5888, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.505] wcscat (in: _Dest=0x3dc5888, _Source="MS.SETLANG.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" [0142.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0142.506] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa723f470, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa723f470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa75852b0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0142.506] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2=".") returned 1 [0142.506] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2="..") returned 1 [0142.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32520 [0142.506] wcscpy (in: _Dest=0x3f32520, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.506] wcscat (in: _Dest=0x3f32520, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.506] wcscat (in: _Dest=0x3f32520, _Source="MS.VISIO.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" [0142.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0142.507] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa780ca10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0142.508] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2=".") returned 1 [0142.508] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2="..") returned 1 [0142.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5508 [0142.508] wcscpy (in: _Dest=0x3dc5508, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.508] wcscat (in: _Dest=0x3dc5508, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.508] wcscat (in: _Dest=0x3dc5508, _Source="MS.VISIO.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" [0142.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0142.509] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa79fbbf0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0142.509] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2=".") returned 1 [0142.509] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2="..") returned 1 [0142.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f355b0 [0142.509] wcscpy (in: _Dest=0x3f355b0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.509] wcscat (in: _Dest=0x3f355b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.509] wcscat (in: _Dest=0x3f355b0, _Source="MS.VISIO.SHAPESHEET.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" [0142.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f355b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0142.510] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa7a21d50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0142.510] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2=".") returned 1 [0142.510] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2="..") returned 1 [0142.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5708 [0142.510] wcscpy (in: _Dest=0x3dc5708, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.510] wcscat (in: _Dest=0x3dc5708, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.511] wcscat (in: _Dest=0x3dc5708, _Source="MS.VISIO_PRM.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" [0142.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15bc [0142.512] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa77281d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0142.512] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2=".") returned 1 [0142.512] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2="..") returned 1 [0142.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5c08 [0142.512] wcscpy (in: _Dest=0x3dc5c08, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.512] wcscat (in: _Dest=0x3dc5c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.512] wcscat (in: _Dest=0x3dc5c08, _Source="MS.VISIO_STD.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" [0142.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0142.993] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99cf35d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0142.993] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2=".") returned 1 [0142.993] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2="..") returned 1 [0142.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24340 [0142.994] wcscpy (in: _Dest=0x3e24340, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0142.994] wcscat (in: _Dest=0x3e24340, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0142.994] wcscat (in: _Dest=0x3e24340, _Source="MS.WINPROJ.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" [0145.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0145.639] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99d3f890, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0145.639] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2=".") returned 1 [0145.639] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2="..") returned 1 [0145.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81be9a8 [0145.640] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0145.640] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0145.640] wcscat (in: _Dest=0x81be9a8, _Source="MS.WINPROJ.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" [0145.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0145.641] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x649ec510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0145.641] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2=".") returned 1 [0145.642] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2="..") returned 1 [0145.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831acd8 [0145.642] wcscpy (in: _Dest=0x831acd8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0145.642] wcscat (in: _Dest=0x831acd8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0145.642] wcscat (in: _Dest=0x831acd8, _Source="MS.WINWORD.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" [0145.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831acd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0145.644] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64a12670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0145.644] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2=".") returned 1 [0145.644] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2="..") returned 1 [0145.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bea30 [0145.644] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0145.644] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0145.644] wcscat (in: _Dest=0x81bea30, _Source="MS.WINWORD.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" [0145.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0145.646] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0145.646] wcscmp (_String1="nslist.hxl", _String2=".") returned 1 [0145.646] wcscmp (_String1="nslist.hxl", _String2="..") returned 1 [0145.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e890 [0145.646] wcscpy (in: _Dest=0x3d8e890, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0145.646] wcscat (in: _Dest=0x3d8e890, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0145.646] wcscat (in: _Dest=0x3d8e890, _Source="nslist.hxl" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl") returned="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" [0145.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0145.647] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80feb90 | out: lpFindFileData=0x80feb90*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0145.647] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0145.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80feb90) returned 1 [0145.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de62e8) returned 1 [0145.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6338) returned 1 Thread: id = 522 os_tid = 0xdec [0133.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f37558 [0133.986] wcscpy (in: _Dest=0x3f37558, _Source="C:\\Users\\All Users\\Oracle" | out: _Dest="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle" [0133.986] wcscat (in: _Dest=0x3f37558, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\") returned="C:\\Users\\All Users\\Oracle\\" [0133.986] wcscat (in: _Dest=0x3f37558, _Source="*" | out: _Dest="C:\\Users\\All Users\\Oracle\\*") returned="C:\\Users\\All Users\\Oracle\\*" [0133.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe928 [0133.986] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0133.986] wcscmp (_String1=".", _String2=".") returned 0 [0133.986] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.986] wcscmp (_String1="..", _String2=".") returned 1 [0133.987] wcscmp (_String1="..", _String2="..") returned 0 [0133.987] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.987] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0133.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe928) returned 1 [0133.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37558) returned 1 [0133.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37a18) returned 1 Thread: id = 523 os_tid = 0xe54 [0133.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5e88 [0133.988] wcscpy (in: _Dest=0x3de5e88, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0133.988] wcscat (in: _Dest=0x3de5e88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0133.988] wcscat (in: _Dest=0x3de5e88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\*") returned="C:\\Users\\All Users\\Package Cache\\*" [0133.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe928 [0133.988] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0133.989] wcscmp (_String1=".", _String2=".") returned 0 [0133.989] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.989] wcscmp (_String1="..", _String2=".") returned 1 [0133.989] wcscmp (_String1="..", _String2="..") returned 0 [0133.989] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="564F02E6419B9858949B0CD5A65E2C8C0944DD88", cAlternateFileName="564F02~1")) returned 1 [0133.989] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2=".") returned 1 [0133.989] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2="..") returned 1 [0133.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c70f8 [0133.989] wcscpy (in: _Dest=0x2c70f8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0133.989] wcscat (in: _Dest=0x2c70f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0133.989] wcscat (in: _Dest=0x2c70f8, _Source="564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0144.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c70f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0144.253] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D4036846864773E3D647F421DFE7F6CA536E307B", cAlternateFileName="D40368~1")) returned 1 [0144.253] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2=".") returned 1 [0144.253] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2="..") returned 1 [0144.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c72d8 [0144.253] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.253] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.253] wcscat (in: _Dest=0x2c72d8, _Source="D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0144.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0144.255] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0144.255] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2=".") returned 1 [0144.255] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2="..") returned 1 [0144.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c4d8 [0144.255] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.255] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.255] wcscat (in: _Dest=0x35c4d8, _Source="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0144.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x121c [0144.256] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0144.256] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2=".") returned 1 [0144.256] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2="..") returned 1 [0144.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2a240 [0144.257] wcscpy (in: _Dest=0x3e2a240, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.257] wcscat (in: _Dest=0x3e2a240, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.257] wcscat (in: _Dest=0x3e2a240, _Source="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0144.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2a240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0144.258] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0144.258] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2=".") returned 1 [0144.258] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2="..") returned 1 [0144.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bf58 [0144.258] wcscpy (in: _Dest=0x35bf58, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.258] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.258] wcscat (in: _Dest=0x35bf58, _Source="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0144.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35bf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0144.259] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0144.260] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2=".") returned 1 [0144.260] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2="..") returned 1 [0144.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c008 [0144.260] wcscpy (in: _Dest=0x35c008, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.260] wcscat (in: _Dest=0x35c008, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.260] wcscat (in: _Dest=0x35c008, _Source="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0144.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0144.261] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0144.261] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2=".") returned 1 [0144.261] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2="..") returned 1 [0144.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bbe8 [0144.261] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.261] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.261] wcscat (in: _Dest=0x35bbe8, _Source="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0144.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678 [0144.262] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0144.262] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2=".") returned 1 [0144.263] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2="..") returned 1 [0144.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c2c8 [0144.263] wcscpy (in: _Dest=0x35c2c8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.263] wcscat (in: _Dest=0x35c2c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.263] wcscat (in: _Dest=0x35c2c8, _Source="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0144.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0144.264] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0144.264] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2=".") returned 1 [0144.264] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2="..") returned 1 [0144.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2ac58 [0144.264] wcscpy (in: _Dest=0x3e2ac58, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.264] wcscat (in: _Dest=0x3e2ac58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.264] wcscat (in: _Dest=0x3e2ac58, _Source="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0144.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2ac58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0144.265] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0144.266] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2=".") returned 1 [0144.266] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2="..") returned 1 [0144.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2a078 [0144.266] wcscpy (in: _Dest=0x3e2a078, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.266] wcscat (in: _Dest=0x3e2a078, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.266] wcscat (in: _Dest=0x3e2a078, _Source="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0144.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2a078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0144.267] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0144.267] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2=".") returned 1 [0144.267] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2="..") returned 1 [0144.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b718 [0144.267] wcscpy (in: _Dest=0x35b718, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.267] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.267] wcscat (in: _Dest=0x35b718, _Source="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0144.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0144.268] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0144.268] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0144.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe928) returned 1 [0144.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5e88) returned 1 [0144.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6ab8) returned 1 Thread: id = 524 os_tid = 0xad0 [0133.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6cf80 [0133.989] wcscpy (in: _Dest=0x3e6cf80, _Source="C:\\Users\\All Users\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu" [0133.989] wcscat (in: _Dest=0x3e6cf80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Start Menu\\") returned="C:\\Users\\All Users\\Start Menu\\" [0133.989] wcscat (in: _Dest=0x3e6cf80, _Source="*" | out: _Dest="C:\\Users\\All Users\\Start Menu\\*") returned="C:\\Users\\All Users\\Start Menu\\*" [0133.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffc68 [0133.990] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffc68) returned 1 [0133.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cf80) returned 1 [0133.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69fa8) returned 1 Thread: id = 525 os_tid = 0x620 [0133.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f37558 [0133.991] wcscpy (in: _Dest=0x3f37558, _Source="C:\\Users\\All Users\\Sun" | out: _Dest="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun" [0133.991] wcscat (in: _Dest=0x3f37558, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\") returned="C:\\Users\\All Users\\Sun\\" [0133.991] wcscat (in: _Dest=0x3f37558, _Source="*" | out: _Dest="C:\\Users\\All Users\\Sun\\*") returned="C:\\Users\\All Users\\Sun\\*" [0133.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffc68 [0133.991] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0133.991] wcscmp (_String1=".", _String2=".") returned 0 [0133.991] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.991] wcscmp (_String1="..", _String2=".") returned 1 [0133.991] wcscmp (_String1="..", _String2="..") returned 0 [0133.991] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0133.991] wcscmp (_String1="Java", _String2=".") returned 1 [0133.991] wcscmp (_String1="Java", _String2="..") returned 1 [0133.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f375d8 [0133.992] wcscpy (in: _Dest=0x3f375d8, _Source="C:\\Users\\All Users\\Sun" | out: _Dest="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun" [0133.992] wcscat (in: _Dest=0x3f375d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\") returned="C:\\Users\\All Users\\Sun\\" [0133.992] wcscat (in: _Dest=0x3f375d8, _Source="Java" | out: _Dest="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java" [0135.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f375d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0135.473] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0135.473] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0135.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffc68) returned 1 [0135.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37558) returned 1 [0135.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77ad0) returned 1 Thread: id = 526 os_tid = 0x4c0 [0133.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e6cfc8 [0133.992] wcscpy (in: _Dest=0x3e6cfc8, _Source="C:\\Users\\All Users\\Templates" | out: _Dest="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates" [0133.992] wcscat (in: _Dest=0x3e6cfc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Templates\\") returned="C:\\Users\\All Users\\Templates\\" [0133.992] wcscat (in: _Dest=0x3e6cfc8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Templates\\*") returned="C:\\Users\\All Users\\Templates\\*" [0133.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0133.992] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0133.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cfc8) returned 1 [0133.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a0c8) returned 1 Thread: id = 527 os_tid = 0xb54 [0133.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8bff0 [0133.994] wcscpy (in: _Dest=0x3d8bff0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0133.994] wcscat (in: _Dest=0x3d8bff0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\" [0133.994] wcscat (in: _Dest=0x3d8bff0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*" [0133.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0133.994] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0133.994] wcscmp (_String1=".", _String2=".") returned 0 [0133.994] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.994] wcscmp (_String1="..", _String2=".") returned 1 [0133.994] wcscmp (_String1="..", _String2="..") returned 0 [0133.995] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0133.995] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2=".") returned 1 [0133.995] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2="..") returned 1 [0133.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b5b8 [0133.995] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0133.995] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\" [0133.995] wcscat (in: _Dest=0x35b5b8, _Source="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0135.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0135.475] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0135.475] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2=".") returned 1 [0135.475] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2="..") returned 1 [0135.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bf58 [0135.476] wcscpy (in: _Dest=0x35bf58, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0135.476] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\" [0135.476] wcscat (in: _Dest=0x35bf58, _Source="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0135.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35bf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0135.477] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0135.477] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0135.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0135.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bff0) returned 1 [0135.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd18) returned 1 Thread: id = 528 os_tid = 0xb88 [0133.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8c948 [0133.995] wcscpy (in: _Dest=0x3d8c948, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0133.995] wcscat (in: _Dest=0x3d8c948, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\" [0133.995] wcscat (in: _Dest=0x3d8c948, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*" [0133.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0133.995] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0134.329] wcscmp (_String1=".", _String2=".") returned 0 [0134.329] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.330] wcscmp (_String1="..", _String2=".") returned 1 [0134.330] wcscmp (_String1="..", _String2="..") returned 0 [0134.330] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0134.330] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2=".") returned 1 [0134.330] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2="..") returned 1 [0134.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b718 [0134.330] wcscpy (in: _Dest=0x35b718, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0134.330] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\" [0134.330] wcscat (in: _Dest=0x35b718, _Source="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0135.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0135.974] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0135.974] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2=".") returned 1 [0135.974] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2="..") returned 1 [0135.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c588 [0135.974] wcscpy (in: _Dest=0x35c588, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0135.974] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\" [0135.974] wcscat (in: _Dest=0x35c588, _Source="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0135.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0135.975] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0135.976] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0135.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0135.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c948) returned 1 [0135.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4a48) returned 1 Thread: id = 529 os_tid = 0x110 [0133.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e22da8 [0133.997] wcscpy (in: _Dest=0x3e22da8, _Source="C:\\ProgramData\\Microsoft\\eHome\\logs" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs") returned="C:\\ProgramData\\Microsoft\\eHome\\logs" [0133.997] wcscat (in: _Dest=0x3e22da8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs\\") returned="C:\\ProgramData\\Microsoft\\eHome\\logs\\" [0133.997] wcscat (in: _Dest=0x3e22da8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs\\*") returned="C:\\ProgramData\\Microsoft\\eHome\\logs\\*" [0133.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81003a0 [0133.997] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0133.997] wcscmp (_String1=".", _String2=".") returned 0 [0133.997] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.997] wcscmp (_String1="..", _String2=".") returned 1 [0133.997] wcscmp (_String1="..", _String2="..") returned 0 [0133.997] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.998] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0133.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81003a0) returned 1 [0133.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22da8) returned 1 [0133.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e580b8) returned 1 Thread: id = 530 os_tid = 0x730 [0133.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d2a0 [0133.999] wcscpy (in: _Dest=0x3d8d2a0, _Source="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0133.999] wcscat (in: _Dest=0x3d8d2a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\" [0133.999] wcscat (in: _Dest=0x3d8d2a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*" [0133.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81003a0 [0133.999] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37498 [0134.331] wcscmp (_String1=".", _String2=".") returned 0 [0134.331] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.331] wcscmp (_String1="..", _String2=".") returned 1 [0134.331] wcscmp (_String1="..", _String2="..") returned 0 [0134.331] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0134.331] wcscmp (_String1="ApplicationViewsRootNode", _String2=".") returned 1 [0134.331] wcscmp (_String1="ApplicationViewsRootNode", _String2="..") returned 1 [0134.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2be28 [0134.331] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0134.331] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\" [0134.331] wcscat (in: _Dest=0x3e2be28, _Source="ApplicationViewsRootNode" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0145.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2be28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0145.065] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0145.065] FindClose (in: hFindFile=0x3f37498 | out: hFindFile=0x3f37498) returned 1 [0145.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81003a0) returned 1 [0145.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d2a0) returned 1 [0145.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7088) returned 1 Thread: id = 531 os_tid = 0x358 [0134.000] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl")) returned 0x20 [0134.000] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0134.712] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.713] GetLastError () returned 0x5 [0134.713] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0134.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f168) returned 1 Thread: id = 532 os_tid = 0x484 [0134.000] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl")) returned 0x20 [0134.354] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0134.355] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.355] GetLastError () returned 0x5 [0134.355] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0134.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f008) returned 1 Thread: id = 533 os_tid = 0x20c [0134.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7508 [0134.001] wcscpy (in: _Dest=0x2fe7508, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" [0134.001] wcscat (in: _Dest=0x2fe7508, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\" [0134.001] wcscat (in: _Dest=0x2fe7508, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*" [0134.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0134.001] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0134.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0134.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7508) returned 1 [0134.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7148) returned 1 Thread: id = 534 os_tid = 0x264 [0134.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8df38 [0134.003] wcscpy (in: _Dest=0x3d8df38, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0134.003] wcscat (in: _Dest=0x3d8df38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\" [0134.003] wcscat (in: _Dest=0x3d8df38, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*" [0134.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0134.003] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0134.357] wcscmp (_String1=".", _String2=".") returned 0 [0134.357] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.357] wcscmp (_String1="..", _String2=".") returned 1 [0134.357] wcscmp (_String1="..", _String2="..") returned 0 [0134.357] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0134.357] wcscmp (_String1="WelcomeScan.jpg", _String2=".") returned 1 [0134.357] wcscmp (_String1="WelcomeScan.jpg", _String2="..") returned 1 [0134.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5688 [0134.357] wcscpy (in: _Dest=0x3dc5688, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0134.357] wcscat (in: _Dest=0x3dc5688, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\" [0134.357] wcscat (in: _Dest=0x3dc5688, _Source="WelcomeScan.jpg" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" [0135.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0135.978] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0135.978] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0135.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0135.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8df38) returned 1 [0135.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe75c8) returned 1 Thread: id = 535 os_tid = 0xc4 [0134.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7558 [0134.003] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0134.004] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\" [0134.004] wcscat (in: _Dest=0x2c7558, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*" [0134.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100870 [0134.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0134.004] wcscmp (_String1=".", _String2=".") returned 0 [0134.004] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.004] wcscmp (_String1="..", _String2=".") returned 1 [0134.004] wcscmp (_String1="..", _String2="..") returned 0 [0134.004] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSharp", cAlternateFileName="")) returned 1 [0134.004] wcscmp (_String1="CSharp", _String2=".") returned 1 [0134.004] wcscmp (_String1="CSharp", _String2="..") returned 1 [0134.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b7c8 [0134.004] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0134.004] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\" [0134.005] wcscat (in: _Dest=0x35b7c8, _Source="CSharp" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" [0135.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680 [0135.479] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 1 [0135.479] wcscmp (_String1="VisualBasic", _String2=".") returned 1 [0135.479] wcscmp (_String1="VisualBasic", _String2="..") returned 1 [0135.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7d88 [0135.479] wcscpy (in: _Dest=0x2ff7d88, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0135.480] wcscat (in: _Dest=0x2ff7d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\" [0135.480] wcscat (in: _Dest=0x2ff7d88, _Source="VisualBasic" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" [0135.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff7d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098 [0135.481] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 0 [0135.481] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0135.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100870) returned 1 [0135.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 [0135.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 536 os_tid = 0x588 [0134.005] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie add-on site.url")) returned 0x20 [0134.006] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url", dwFileAttributes=0x20) returned 1 [0134.714] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x860 [0134.714] GetFileSizeEx (in: hFile=0x860, lpFileSize=0x43ef9b0 | out: lpFileSize=0x43ef9b0*=133) returned 1 [0134.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0134.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0134.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4100 [0134.714] NtQuerySystemTime (in: CurrentTime=0x43ef938 | out: CurrentTime=0x43ef938*=132471540033984000) returned 0x0 [0134.714] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x69832078 [0134.714] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x67e0bcf7 [0134.714] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x7049cca1 [0134.714] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x3aa98822 [0134.714] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x82eca97 [0134.714] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x52af63ae [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x5c3d7913 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x691e25d7 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x4f368ebc [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x9a0ec3a [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x20731135 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x7af19d8f [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x44f743d7 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x1d89f6f5 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0xa58f14e [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x855fc98 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x1c5e1aa2 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x79325d95 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x2faafd7c [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x39a873a2 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x484a6d4a [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x2b7e9e88 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x419f5db8 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x5a41bf29 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x14c7b745 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x1d6700dc [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x6c216357 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x67ddecfe [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x3ba1b4ae [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x39d34c62 [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x3f0cda3a [0134.715] RtlRandomEx (in: Seed=0x43ef930 | out: Seed=0x43ef930) returned 0x51192816 [0134.727] ReadFile (in: hFile=0x860, lpBuffer=0x82044d8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x43ef92c, lpOverlapped=0x0 | out: lpBuffer=0x82044d8*, lpNumberOfBytesRead=0x43ef92c*=0x85, lpOverlapped=0x0) returned 1 [0134.729] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.729] WriteFile (in: hFile=0x860, lpBuffer=0x8208458*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x43ef930, lpOverlapped=0x0 | out: lpBuffer=0x8208458*, lpNumberOfBytesWritten=0x43ef930*=0x85, lpOverlapped=0x0) returned 1 [0135.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4a0 [0135.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0135.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0135.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8208458) returned 1 [0135.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82044d8) returned 1 [0135.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 [0135.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d058) returned 1 [0135.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f383d8 [0135.211] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.211] WriteFile (in: hFile=0x860, lpBuffer=0x3040a68*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x43ef9a4, lpOverlapped=0x0 | out: lpBuffer=0x3040a68*, lpNumberOfBytesWritten=0x43ef9a4*=0x116, lpOverlapped=0x0) returned 1 [0135.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 [0135.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfd10) returned 1 [0135.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0135.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f383d8) returned 1 [0135.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4a0) returned 1 [0135.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0135.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4128) returned 1 [0135.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0135.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2b7a0 [0135.324] wcscpy (in: _Dest=0x3e2b7a0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0135.324] wcscat (in: _Dest=0x3e2b7a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url.f0dbec" [0135.324] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url.f0dbec", NtPathName=0x43ef928, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c008 [0136.953] FlushFileBuffers (hFile=0x860) returned 1 [0136.960] CloseHandle (hObject=0x860) returned 1 [0136.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35910 [0136.961] wcscpy (in: _Dest=0x3f35910, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0136.961] wcscat (in: _Dest=0x3f35910, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" [0136.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\f0dbec-readme.txt")) returned 0xffffffff [0136.963] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x860 [0136.984] WriteFile (in: hFile=0x860, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x43ef94c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x43ef94c*=0x70c, lpOverlapped=0x0) returned 1 [0136.986] CloseHandle (hObject=0x860) returned 1 [0136.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35910) returned 1 [0136.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f344d0) returned 1 Thread: id = 537 os_tid = 0xab0 [0134.007] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie site on microsoft.com.url")) returned 0x20 [0134.007] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", dwFileAttributes=0x20) returned 1 [0134.729] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xae4 [0134.730] GetFileSizeEx (in: hFile=0xae4, lpFileSize=0x87bff00 | out: lpFileSize=0x87bff00*=133) returned 1 [0134.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0134.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4100 [0134.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4178 [0134.730] NtQuerySystemTime (in: CurrentTime=0x87bfe88 | out: CurrentTime=0x87bfe88*=132471540034140000) returned 0x0 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0xbd54d87 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x63be75c2 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x7ec550f7 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x3ee419b [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x357fc4d5 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x2dc41b81 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x269bed58 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0xf8ff57d [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x5c1936bc [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x58f824c [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x2f6cb096 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x52122fbe [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x2d3b4c83 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x7a756b38 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x14d3d4b3 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x1135719e [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x50c56c30 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x7c9bb811 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x45c67d44 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x176ed7d8 [0134.730] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x70074a7b [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x608d9253 [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x129a9f6a [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x16f7793a [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x27608ed5 [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x2b659179 [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x2df365cc [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x22bff49f [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x786f2d9e [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x23343383 [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x54ef0cf [0134.731] RtlRandomEx (in: Seed=0x87bfe80 | out: Seed=0x87bfe80) returned 0x3aa98822 [0134.739] ReadFile (in: hFile=0xae4, lpBuffer=0x820c060, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x87bfe7c, lpOverlapped=0x0 | out: lpBuffer=0x820c060*, lpNumberOfBytesRead=0x87bfe7c*=0x85, lpOverlapped=0x0) returned 1 [0134.744] SetFilePointerEx (in: hFile=0xae4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.744] WriteFile (in: hFile=0xae4, lpBuffer=0x820fc68*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x87bfe80, lpOverlapped=0x0 | out: lpBuffer=0x820fc68*, lpNumberOfBytesWritten=0x87bfe80*=0x85, lpOverlapped=0x0) returned 1 [0135.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0135.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0135.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0135.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x820fc68) returned 1 [0135.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x820c060) returned 1 [0135.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b28) returned 1 [0135.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cc68) returned 1 [0135.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3dc6168 [0135.212] SetFilePointerEx (in: hFile=0xae4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.212] WriteFile (in: hFile=0xae4, lpBuffer=0x3ef8110*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x87bfef4, lpOverlapped=0x0 | out: lpBuffer=0x3ef8110*, lpNumberOfBytesWritten=0x87bfef4*=0x12a, lpOverlapped=0x0) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8110) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6258) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6168) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4100) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0135.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bea8 [0135.332] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0135.332] wcscat (in: _Dest=0x35bea8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.f0dbec" [0135.332] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.f0dbec", NtPathName=0x87bfe78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e34d08 [0136.982] FlushFileBuffers (hFile=0xae4) returned 1 [0136.993] CloseHandle (hObject=0xae4) returned 1 [0136.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f344d0 [0136.993] wcscpy (in: _Dest=0x3f344d0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0136.994] wcscat (in: _Dest=0x3f344d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" [0136.994] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\f0dbec-readme.txt")) returned 0x20 [0136.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f344d0) returned 1 [0136.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 538 os_tid = 0xad4 [0134.007] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at home.url")) returned 0x20 [0134.008] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url", dwFileAttributes=0x20) returned 1 [0134.745] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xae8 [0134.745] GetFileSizeEx (in: hFile=0xae8, lpFileSize=0xbd8fc08 | out: lpFileSize=0xbd8fc08*=133) returned 1 [0134.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0134.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4178 [0134.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0134.745] NtQuerySystemTime (in: CurrentTime=0xbd8fb90 | out: CurrentTime=0xbd8fb90*=132471540034296000) returned 0x0 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x67f010d1 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x74dff67a [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x6b02a7e7 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x3044b6e1 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x6402524e [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x6cb5c124 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0xfe94ad5 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x23220844 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x5634c9f3 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x38524a82 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x201c5cb0 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x23bab91b [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x23b66032 [0134.745] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x1c58ee44 [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x4dd5d2dd [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x1b2b23eb [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x4528c6a3 [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x49aee2ee [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x51d49e87 [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x51b40afd [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0xf8f68 [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x23d6c0a1 [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x37208557 [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x3fb3b180 [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x7e4d36db [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x476217f9 [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x91b0b2b [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x4587f2ff [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x53596c6b [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x2731ac7e [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x397d9ae2 [0134.746] RtlRandomEx (in: Seed=0xbd8fb88 | out: Seed=0xbd8fb88) returned 0x79e028d4 [0134.755] ReadFile (in: hFile=0xae8, lpBuffer=0x8213870, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xbd8fb84, lpOverlapped=0x0 | out: lpBuffer=0x8213870*, lpNumberOfBytesRead=0xbd8fb84*=0x85, lpOverlapped=0x0) returned 1 [0134.757] SetFilePointerEx (in: hFile=0xae8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.757] WriteFile (in: hFile=0xae8, lpBuffer=0x8217478*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xbd8fb88, lpOverlapped=0x0 | out: lpBuffer=0x8217478*, lpNumberOfBytesWritten=0xbd8fb88*=0x85, lpOverlapped=0x0) returned 1 [0135.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0135.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0135.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0135.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8217478) returned 1 [0135.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8213870) returned 1 [0135.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0135.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31898) returned 1 [0135.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf390 [0135.215] SetFilePointerEx (in: hFile=0xae8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.215] WriteFile (in: hFile=0xae8, lpBuffer=0x3d57028*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xbd8fbfc, lpOverlapped=0x0 | out: lpBuffer=0x3d57028*, lpNumberOfBytesWritten=0xbd8fbfc*=0x11c, lpOverlapped=0x0) returned 1 [0135.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57028) returned 1 [0135.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd00d0) returned 1 [0135.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0135.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf390) returned 1 [0135.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0135.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0135.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4218) returned 1 [0135.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4240) returned 1 [0135.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11788 [0135.333] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0135.333] wcscat (in: _Dest=0x3e11788, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url.f0dbec" [0135.333] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url.f0dbec", NtPathName=0xbd8fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7c18 [0136.991] FlushFileBuffers (hFile=0xae8) returned 1 [0136.996] CloseHandle (hObject=0xae8) returned 1 [0136.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f344d0 [0136.997] wcscpy (in: _Dest=0x3f344d0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0136.997] wcscat (in: _Dest=0x3f344d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" [0136.997] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\f0dbec-readme.txt")) returned 0x20 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f344d0) returned 1 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2888) returned 1 Thread: id = 539 os_tid = 0xac4 [0134.008] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at work.url")) returned 0x20 [0134.358] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url", dwFileAttributes=0x20) returned 1 [0138.753] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf3c [0138.753] GetFileSizeEx (in: hFile=0xf3c, lpFileSize=0xbfdfbd8 | out: lpFileSize=0xbfdfbd8*=133) returned 1 [0138.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0138.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0138.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4a0 [0138.754] NtQuerySystemTime (in: CurrentTime=0xbfdfb60 | out: CurrentTime=0xbfdfb60*=132471540074232000) returned 0x0 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0xfd0c822 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x58743e4e [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x22bd9019 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x4fecd5dc [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x3a7a4ca0 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x9af0f2 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x30b61112 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x347f1ee8 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x731edf93 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x431505cc [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x3312fb2b [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x2ec8dc5e [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x4c4a7d33 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x171bb81c [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x519b46c6 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x8a50a29 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x77300977 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x3f19711 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x43d4f2c [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x604eafdd [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x7ae05116 [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x14cf84d [0138.754] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x5c9b772d [0138.755] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x1332cc79 [0138.755] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x39624939 [0138.755] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x11318484 [0138.755] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x5c3a4c26 [0138.755] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x6f5ee35d [0138.755] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x499e3af4 [0138.755] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x4f0fd36c [0138.755] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x751b0ebf [0138.755] RtlRandomEx (in: Seed=0xbfdfb58 | out: Seed=0xbfdfb58) returned 0x3497adf2 [0138.773] ReadFile (in: hFile=0xf3c, lpBuffer=0x82aa0a0, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xbfdfb54, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesRead=0xbfdfb54*=0x85, lpOverlapped=0x0) returned 1 [0138.777] SetFilePointerEx (in: hFile=0xf3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.777] WriteFile (in: hFile=0xf3c, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xbfdfb58, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xbfdfb58*=0x85, lpOverlapped=0x0) returned 1 [0140.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0140.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0140.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0140.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0140.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0140.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0140.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095fc0) returned 1 [0140.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x80995d0 [0140.978] SetFilePointerEx (in: hFile=0xf3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.978] WriteFile (in: hFile=0xf3c, lpBuffer=0x3d56498*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xbfdfbcc, lpOverlapped=0x0 | out: lpBuffer=0x3d56498*, lpNumberOfBytesWritten=0xbfdfbcc*=0x11c, lpOverlapped=0x0) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099610) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80995d0) returned 1 [0141.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0141.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0141.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0141.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0141.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11468 [0141.057] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0141.057] wcscat (in: _Dest=0x3e11468, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url.f0dbec" [0141.057] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url.f0dbec", NtPathName=0xbfdfb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7710 [0141.777] FlushFileBuffers (hFile=0xf3c) returned 1 [0141.882] CloseHandle (hObject=0xf3c) returned 1 [0141.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34cb0 [0141.939] wcscpy (in: _Dest=0x3f34cb0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0141.939] wcscat (in: _Dest=0x3f34cb0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" [0141.939] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\f0dbec-readme.txt")) returned 0x20 [0141.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34cb0) returned 1 [0141.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1d48) returned 1 Thread: id = 540 os_tid = 0x520 [0134.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft store.url")) returned 0x20 [0134.358] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url", dwFileAttributes=0x20) returned 1 [0134.358] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x108c [0134.359] GetFileSizeEx (in: hFile=0x108c, lpFileSize=0xb90fa70 | out: lpFileSize=0xb90fa70*=134) returned 1 [0134.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c030 [0134.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4acd0 [0134.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4afc8 [0134.359] NtQuerySystemTime (in: CurrentTime=0xb90f9f8 | out: CurrentTime=0xb90f9f8*=132471540030396000) returned 0x0 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x32fc24fe [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x46744f0c [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x44b533f5 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0xaabb3c8 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x3531fab7 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x2cdd57d7 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x2248b2cf [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x771933ff [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x16dc86f5 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x73eb5036 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x922b882 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x3744553a [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x586fd29f [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x4985815f [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x7d27fc8e [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x54d36783 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x2acfd2be [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x2b755b4 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x427e3d6 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x1b20aa3e [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x1d10b929 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x7e7e2f6a [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0xd9e3c48 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x647e8286 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x3d81ece2 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x6f693406 [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x218f19bd [0134.359] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x597d720d [0134.360] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x531ae587 [0134.360] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0xb9d8619 [0134.360] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x2b425880 [0134.360] RtlRandomEx (in: Seed=0xb90f9f0 | out: Seed=0xb90f9f0) returned 0x4d59d674 [0134.369] ReadFile (in: hFile=0x108c, lpBuffer=0x80b0c88, nNumberOfBytesToRead=0x86, lpNumberOfBytesRead=0xb90f9ec, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesRead=0xb90f9ec*=0x86, lpOverlapped=0x0) returned 1 [0134.370] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.370] WriteFile (in: hFile=0x108c, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x86, lpNumberOfBytesWritten=0xb90f9f0, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0xb90f9f0*=0x86, lpOverlapped=0x0) returned 1 [0139.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0139.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0139.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0139.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0139.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0139.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0139.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d0a0) returned 1 [0139.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067040 [0139.191] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.191] WriteFile (in: hFile=0x108c, lpBuffer=0x3041f38*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xb90fa64, lpOverlapped=0x0 | out: lpBuffer=0x3041f38*, lpNumberOfBytesWritten=0xb90fa64*=0x118, lpOverlapped=0x0) returned 1 [0140.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041f38) returned 1 [0140.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b00) returned 1 [0140.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0140.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 [0140.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0140.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4acd0) returned 1 [0140.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0140.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0140.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11788 [0140.985] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0140.985] wcscat (in: _Dest=0x3e11788, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url.f0dbec" [0140.985] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url.f0dbec", NtPathName=0xb90f9e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0140.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c218 [0141.743] FlushFileBuffers (hFile=0x108c) returned 1 [0142.062] CloseHandle (hObject=0x108c) returned 1 [0142.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34440 [0142.107] wcscpy (in: _Dest=0x3f34440, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0142.107] wcscat (in: _Dest=0x3f34440, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" [0142.107] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\f0dbec-readme.txt")) returned 0x20 [0142.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34440) returned 1 [0142.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2408) returned 1 Thread: id = 541 os_tid = 0xb74 [0134.010] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\1uije3nj h1ajw.xlsx")) returned 0x20 [0134.010] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx", dwFileAttributes=0x20) returned 1 [0134.757] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\1uije3nj h1ajw.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xaf0 [0134.758] GetFileSizeEx (in: hFile=0xaf0, lpFileSize=0xc05fc58 | out: lpFileSize=0xc05fc58*=47067) returned 1 [0134.758] SetFilePointerEx (in: hFile=0xaf0, liDistanceToMove=0xb7d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.758] ReadFile (in: hFile=0xaf0, lpBuffer=0xc05fc64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc05fc40, lpOverlapped=0x0 | out: lpBuffer=0xc05fc64*, lpNumberOfBytesRead=0xc05fc40*=0x4, lpOverlapped=0x0) returned 1 [0134.759] SetFilePointerEx (in: hFile=0xaf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0134.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0134.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0134.760] NtQuerySystemTime (in: CurrentTime=0xc05fbe0 | out: CurrentTime=0xc05fbe0*=132471540034452000) returned 0x0 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x44865e96 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x3d0d0e80 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x7b3196d7 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x7118da2d [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x20b364ab [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x17a066b [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x4a5c00b5 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x55d84bb [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x39c9f214 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x483610ab [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x37d4f0b1 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x7cdefbd8 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x630b6cba [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x3e5be40b [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x3232b657 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x1aa91748 [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x1cd64acd [0134.760] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x3f43918f [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x51d49e87 [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x79b6af7 [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x1c70e9cc [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x25fa2d05 [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x4919077b [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x12ebc3ad [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x4840ab1f [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x59b97267 [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x41ed6939 [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x3b5e9668 [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x7246da0c [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x3952c222 [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x71ba7dd8 [0134.761] RtlRandomEx (in: Seed=0xc05fbd8 | out: Seed=0xc05fbd8) returned 0x4a6ce92e [0134.771] SetFilePointerEx (in: hFile=0xaf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.771] ReadFile (in: hFile=0xaf0, lpBuffer=0x821b080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc05fbe0, lpOverlapped=0x0 | out: lpBuffer=0x821b080*, lpNumberOfBytesRead=0xc05fbe0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.771] SetFilePointerEx (in: hFile=0xaf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f318e0 [0134.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9690 [0134.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0134.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf40) returned 1 [0134.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x821ec88 [0134.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0134.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0134.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0134.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0134.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f318e0) returned 1 [0134.772] WriteFile (in: hFile=0xaf0, lpBuffer=0x821ec88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc05fbe0, lpOverlapped=0x0 | out: lpBuffer=0x821ec88*, lpNumberOfBytesWritten=0xc05fbe0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x821ec88) returned 1 [0135.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x821b080) returned 1 [0135.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcff90 [0135.216] SetFilePointerEx (in: hFile=0xaf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.216] WriteFile (in: hFile=0xaf0, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xc05fc4c, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0xc05fc4c*=0x118, lpOverlapped=0x0) returned 1 [0135.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0135.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfdd0) returned 1 [0135.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0135.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcff90) returned 1 [0135.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf40) returned 1 [0135.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0135.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0135.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0135.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f968 [0135.327] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx" [0135.327] wcscat (in: _Dest=0x3f2f968, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx.f0dbec" [0135.327] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx.f0dbec", NtPathName=0xc05fbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\1uIJE3NJ H1ajW.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11d28 [0136.471] FlushFileBuffers (hFile=0xaf0) returned 1 [0136.475] CloseHandle (hObject=0xaf0) returned 1 [0136.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68678 [0136.492] wcscpy (in: _Dest=0x3e68678, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0136.492] wcscat (in: _Dest=0x3e68678, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" [0136.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\f0dbec-readme.txt")) returned 0xffffffff [0136.492] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd44 [0136.675] WriteFile (in: hFile=0xd44, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc05fbf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc05fbf4*=0x70c, lpOverlapped=0x0) returned 1 [0136.677] CloseHandle (hObject=0xd44) returned 1 [0136.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0136.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 Thread: id = 542 os_tid = 0xbb4 [0134.010] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\m68nbxvnhfbcxfoqkj.ots")) returned 0x20 [0134.010] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots", dwFileAttributes=0x20) returned 1 [0134.772] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\m68nbxvnhfbcxfoqkj.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x940 [0134.781] GetFileSizeEx (in: hFile=0x940, lpFileSize=0xc0cfbf0 | out: lpFileSize=0xc0cfbf0*=86851) returned 1 [0134.781] SetFilePointerEx (in: hFile=0x940, liDistanceToMove=0x1533f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.781] ReadFile (in: hFile=0x940, lpBuffer=0xc0cfbfc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc0cfbd8, lpOverlapped=0x0 | out: lpBuffer=0xc0cfbfc*, lpNumberOfBytesRead=0xc0cfbd8*=0x4, lpOverlapped=0x0) returned 1 [0134.783] SetFilePointerEx (in: hFile=0x940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0134.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42e0 [0134.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0134.783] NtQuerySystemTime (in: CurrentTime=0xc0cfb78 | out: CurrentTime=0xc0cfb78*=132471540034608000) returned 0x0 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x5d4e99b8 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x360bb5e0 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x5468d564 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x3a0fba81 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x2b6c3d97 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x326555d9 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x77127a64 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x16204e54 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x74fdf785 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x10a0feb0 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x415739ee [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x35b52217 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x311ed103 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x6d4e4c75 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x752b1bd7 [0134.783] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x31d722f0 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x59e6e203 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x59307932 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0xa36c298 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x5c45bfe1 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0xe510008 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x6f24a0d7 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x116d4978 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0xcbdb795 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x7e34d457 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x2209da10 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x44579a7d [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x56836494 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0xbc25ae6 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x79b08e96 [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0x14483c3a [0134.784] RtlRandomEx (in: Seed=0xc0cfb70 | out: Seed=0xc0cfb70) returned 0xbab5de3 [0134.793] SetFilePointerEx (in: hFile=0x940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.793] ReadFile (in: hFile=0x940, lpBuffer=0x8222890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0cfb78, lpOverlapped=0x0 | out: lpBuffer=0x8222890*, lpNumberOfBytesRead=0xc0cfb78*=0x3c00, lpOverlapped=0x0) returned 1 [0134.793] SetFilePointerEx (in: hFile=0x940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f318e0 [0134.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9690 [0134.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0134.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0134.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8226498 [0134.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0134.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0134.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0134.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0134.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f318e0) returned 1 [0134.794] WriteFile (in: hFile=0x940, lpBuffer=0x8226498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0cfb78, lpOverlapped=0x0 | out: lpBuffer=0x8226498*, lpNumberOfBytesWritten=0xc0cfb78*=0x3c00, lpOverlapped=0x0) returned 1 [0135.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8226498) returned 1 [0135.218] SetFilePointerEx (in: hFile=0x940, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.218] ReadFile (in: hFile=0x940, lpBuffer=0x8222890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0cfb78, lpOverlapped=0x0 | out: lpBuffer=0x8222890*, lpNumberOfBytesRead=0xc0cfb78*=0x3c00, lpOverlapped=0x0) returned 1 [0135.218] SetFilePointerEx (in: hFile=0x940, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31898 [0135.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68ba0 [0135.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0135.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0135.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8226498 [0135.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0135.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0135.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0135.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0135.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31898) returned 1 [0135.219] WriteFile (in: hFile=0x940, lpBuffer=0x8226498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0cfb78, lpOverlapped=0x0 | out: lpBuffer=0x8226498*, lpNumberOfBytesWritten=0xc0cfb78*=0x3c00, lpOverlapped=0x0) returned 1 [0135.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8226498) returned 1 [0135.222] SetFilePointerEx (in: hFile=0x940, liDistanceToMove=0x11743, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.222] ReadFile (in: hFile=0x940, lpBuffer=0x8222890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0cfb78, lpOverlapped=0x0 | out: lpBuffer=0x8222890*, lpNumberOfBytesRead=0xc0cfb78*=0x3c00, lpOverlapped=0x0) returned 1 [0135.222] SetFilePointerEx (in: hFile=0x940, liDistanceToMove=0x11743, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31898 [0135.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68ba0 [0135.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0135.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0135.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8226498 [0135.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0135.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0135.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0135.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0135.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31898) returned 1 [0135.222] WriteFile (in: hFile=0x940, lpBuffer=0x8226498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0cfb78, lpOverlapped=0x0 | out: lpBuffer=0x8226498*, lpNumberOfBytesWritten=0xc0cfb78*=0x3c00, lpOverlapped=0x0) returned 1 [0135.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8226498) returned 1 [0135.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd7b8 [0135.229] SetFilePointerEx (in: hFile=0x940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.230] WriteFile (in: hFile=0x940, lpBuffer=0x3dcd898*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0xc0cfbe4, lpOverlapped=0x0 | out: lpBuffer=0x3dcd898*, lpNumberOfBytesWritten=0xc0cfbe4*=0x15e, lpOverlapped=0x0) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd898) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31fa0) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f318e0) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd7b8) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42e0) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0135.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34d40 [0135.335] wcscpy (in: _Dest=0x3f34d40, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots" [0135.335] wcscat (in: _Dest=0x3f34d40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots.f0dbec" [0135.335] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots.f0dbec", NtPathName=0xc0cfb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\m68nbXvNhfBCxfOQkj.ots.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d3e0 [0136.674] FlushFileBuffers (hFile=0x940) returned 1 [0136.746] CloseHandle (hObject=0x940) returned 1 [0136.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68330 [0136.747] wcscpy (in: _Dest=0x3e68330, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0136.747] wcscat (in: _Dest=0x3e68330, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" [0136.747] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\f0dbec-readme.txt")) returned 0x20 [0136.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68330) returned 1 [0136.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e88) returned 1 Thread: id = 543 os_tid = 0xc64 [0134.017] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\p554-.mkv")) returned 0x20 [0134.017] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv", dwFileAttributes=0x20) returned 1 [0134.794] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\p554-.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x650 [0134.794] GetFileSizeEx (in: hFile=0x650, lpFileSize=0xc13fc30 | out: lpFileSize=0xc13fc30*=68888) returned 1 [0134.795] SetFilePointerEx (in: hFile=0x650, liDistanceToMove=0x10d14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.795] ReadFile (in: hFile=0x650, lpBuffer=0xc13fc3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc13fc18, lpOverlapped=0x0 | out: lpBuffer=0xc13fc3c*, lpNumberOfBytesRead=0xc13fc18*=0x4, lpOverlapped=0x0) returned 1 [0134.796] SetFilePointerEx (in: hFile=0x650, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0134.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4380 [0134.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43a8 [0134.796] NtQuerySystemTime (in: CurrentTime=0xc13fbb8 | out: CurrentTime=0xc13fbb8*=132471540034764000) returned 0x0 [0134.796] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x66d2b8e5 [0134.796] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x3ec7e4e1 [0134.796] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x328fbe4b [0134.796] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x50ab4ef4 [0134.796] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x2078370a [0134.796] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x7e4dff31 [0134.796] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x5c017aaa [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x41cf5933 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x36374ec6 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x44195f2a [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x5961bfb0 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x3927e962 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0xeb4cf3b [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x667a1f63 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x2e38568a [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x4a8f4140 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x78eebd55 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x17f3e2ff [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x19a5789e [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x2e8d592e [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x493a48c3 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x2110edfb [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x13811d8 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0xc8c3802 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x6f5c8566 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x7195f926 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x7f673eac [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x7be80fd2 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x71df440c [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x15f1e7e9 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x6198bcc7 [0134.797] RtlRandomEx (in: Seed=0xc13fbb0 | out: Seed=0xc13fbb0) returned 0x3aa93714 [0134.805] SetFilePointerEx (in: hFile=0x650, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.805] ReadFile (in: hFile=0x650, lpBuffer=0x822a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc13fbb8, lpOverlapped=0x0 | out: lpBuffer=0x822a0a0*, lpNumberOfBytesRead=0xc13fbb8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.806] SetFilePointerEx (in: hFile=0x650, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f318e0 [0134.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9690 [0134.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0134.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0134.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x822dca8 [0134.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0134.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43a8 [0134.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43a8) returned 1 [0134.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0134.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f318e0) returned 1 [0134.806] WriteFile (in: hFile=0x650, lpBuffer=0x822dca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc13fbb8, lpOverlapped=0x0 | out: lpBuffer=0x822dca8*, lpNumberOfBytesWritten=0xc13fbb8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x822dca8) returned 1 [0135.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x822a0a0) returned 1 [0135.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0135.221] SetFilePointerEx (in: hFile=0x650, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.221] WriteFile (in: hFile=0x650, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xc13fc24, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xc13fc24*=0x104, lpOverlapped=0x0) returned 1 [0135.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0135.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0135.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0135.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0135.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0135.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4380) returned 1 [0135.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0135.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0135.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b640 [0135.329] wcscpy (in: _Dest=0x3f0b640, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv" [0135.330] wcscat (in: _Dest=0x3f0b640, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv.f0dbec" [0135.330] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv.f0dbec", NtPathName=0xc13fba8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\p554-.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fb00 [0136.667] FlushFileBuffers (hFile=0x650) returned 1 [0136.739] CloseHandle (hObject=0x650) returned 1 [0136.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68330 [0136.740] wcscpy (in: _Dest=0x3e68330, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0136.740] wcscat (in: _Dest=0x3e68330, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" [0136.740] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\f0dbec-readme.txt")) returned 0x20 [0136.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68330) returned 1 [0136.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c8e0) returned 1 Thread: id = 544 os_tid = 0xc20 [0134.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d238 [0134.018] wcscpy (in: _Dest=0x3d8d238, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" [0134.018] wcscat (in: _Dest=0x3d8d238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0134.018] wcscat (in: _Dest=0x3d8d238, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\*" [0134.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100ad8 [0134.018] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\*", lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaee9f070, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0xa35eeed0, ftLastAccessTime.dwHighDateTime=0x1d5e162, ftLastWriteTime.dwLowDateTime=0xa35eeed0, ftLastWriteTime.dwHighDateTime=0x1d5e162, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0134.018] wcscmp (_String1=".", _String2=".") returned 0 [0134.018] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaee9f070, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0xa35eeed0, ftLastAccessTime.dwHighDateTime=0x1d5e162, ftLastWriteTime.dwLowDateTime=0xa35eeed0, ftLastWriteTime.dwHighDateTime=0x1d5e162, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.018] wcscmp (_String1="..", _String2=".") returned 1 [0134.018] wcscmp (_String1="..", _String2="..") returned 0 [0134.018] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1065e0, ftCreationTime.dwHighDateTime=0x1d5e1ba, ftLastAccessTime.dwLowDateTime=0xc913ca30, ftLastAccessTime.dwHighDateTime=0x1d5e6c9, ftLastWriteTime.dwLowDateTime=0xc913ca30, ftLastWriteTime.dwHighDateTime=0x1d5e6c9, nFileSizeHigh=0x0, nFileSizeLow=0x75e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWI2.gif", cAlternateFileName="")) returned 1 [0134.018] wcscmp (_String1="DWI2.gif", _String2=".") returned 1 [0134.018] wcscmp (_String1="DWI2.gif", _String2="..") returned 1 [0134.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32610 [0134.018] wcscpy (in: _Dest=0x3f32610, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" [0134.018] wcscat (in: _Dest=0x3f32610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0134.018] wcscat (in: _Dest=0x3f32610, _Source="DWI2.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif" [0148.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0148.201] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fcc3c60, ftCreationTime.dwHighDateTime=0x1d5dd70, ftLastAccessTime.dwLowDateTime=0x6bcff270, ftLastAccessTime.dwHighDateTime=0x1d5dc67, ftLastWriteTime.dwLowDateTime=0x6bcff270, ftLastWriteTime.dwHighDateTime=0x1d5dc67, nFileSizeHigh=0x0, nFileSizeLow=0xdd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="is88 kky.gif", cAlternateFileName="IS88KK~1.GIF")) returned 1 [0148.201] wcscmp (_String1="is88 kky.gif", _String2=".") returned 1 [0148.201] wcscmp (_String1="is88 kky.gif", _String2="..") returned 1 [0148.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24540 [0148.201] wcscpy (in: _Dest=0x3e24540, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" [0148.201] wcscat (in: _Dest=0x3e24540, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0148.201] wcscat (in: _Dest=0x3e24540, _Source="is88 kky.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif" [0148.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0148.202] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75d1f960, ftCreationTime.dwHighDateTime=0x1d5d994, ftLastAccessTime.dwLowDateTime=0xe033c130, ftLastAccessTime.dwHighDateTime=0x1d5e6cd, ftLastWriteTime.dwLowDateTime=0xe033c130, ftLastWriteTime.dwHighDateTime=0x1d5e6cd, nFileSizeHigh=0x0, nFileSizeLow=0x16a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quh jAyEGLSR8N2SxSP.avi", cAlternateFileName="QUHJAY~1.AVI")) returned 1 [0148.202] wcscmp (_String1="Quh jAyEGLSR8N2SxSP.avi", _String2=".") returned 1 [0148.202] wcscmp (_String1="Quh jAyEGLSR8N2SxSP.avi", _String2="..") returned 1 [0148.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c7a0 [0148.202] wcscpy (in: _Dest=0x3e3c7a0, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" [0148.202] wcscat (in: _Dest=0x3e3c7a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0148.202] wcscat (in: _Dest=0x3e3c7a0, _Source="Quh jAyEGLSR8N2SxSP.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi" [0148.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0148.204] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad6e0470, ftCreationTime.dwHighDateTime=0x1d5db76, ftLastAccessTime.dwLowDateTime=0x1c0f2ca0, ftLastAccessTime.dwHighDateTime=0x1d5de89, ftLastWriteTime.dwLowDateTime=0x1c0f2ca0, ftLastWriteTime.dwHighDateTime=0x1d5de89, nFileSizeHigh=0x0, nFileSizeLow=0x16531, dwReserved0=0x0, dwReserved1=0x0, cFileName="S0wMUH fSC1tyz.bmp", cAlternateFileName="S0WMUH~1.BMP")) returned 1 [0148.204] wcscmp (_String1="S0wMUH fSC1tyz.bmp", _String2=".") returned 1 [0148.204] wcscmp (_String1="S0wMUH fSC1tyz.bmp", _String2="..") returned 1 [0148.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34b00 [0148.204] wcscpy (in: _Dest=0x3f34b00, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" [0148.204] wcscat (in: _Dest=0x3f34b00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0148.204] wcscat (in: _Dest=0x3f34b00, _Source="S0wMUH fSC1tyz.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp" [0148.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0148.210] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x644b9b0, ftCreationTime.dwHighDateTime=0x1d5e34a, ftLastAccessTime.dwLowDateTime=0x97155f00, ftLastAccessTime.dwHighDateTime=0x1d5de39, ftLastWriteTime.dwLowDateTime=0x97155f00, ftLastWriteTime.dwHighDateTime=0x1d5de39, nFileSizeHigh=0x0, nFileSizeLow=0xa397, dwReserved0=0x0, dwReserved1=0x0, cFileName="WtJI_mQU9.png", cAlternateFileName="WTJI_M~1.PNG")) returned 1 [0148.210] wcscmp (_String1="WtJI_mQU9.png", _String2=".") returned 1 [0148.210] wcscmp (_String1="WtJI_mQU9.png", _String2="..") returned 1 [0148.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e248c0 [0148.210] wcscpy (in: _Dest=0x3e248c0, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" [0148.210] wcscat (in: _Dest=0x3e248c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0148.210] wcscat (in: _Dest=0x3e248c0, _Source="WtJI_mQU9.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png" [0148.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e248c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0148.211] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b8c050, ftCreationTime.dwHighDateTime=0x1d5e338, ftLastAccessTime.dwLowDateTime=0x7acdd660, ftLastAccessTime.dwHighDateTime=0x1d5e47e, ftLastWriteTime.dwLowDateTime=0x7acdd660, ftLastWriteTime.dwHighDateTime=0x1d5e47e, nFileSizeHigh=0x0, nFileSizeLow=0x1a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZgoRDmYi_QzXTSrzsWT.pps", cAlternateFileName="ZGORDM~1.PPS")) returned 1 [0148.211] wcscmp (_String1="ZgoRDmYi_QzXTSrzsWT.pps", _String2=".") returned 1 [0148.211] wcscmp (_String1="ZgoRDmYi_QzXTSrzsWT.pps", _String2="..") returned 1 [0148.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c1b0 [0148.211] wcscpy (in: _Dest=0x3e3c1b0, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z" [0148.211] wcscat (in: _Dest=0x3e3c1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0148.211] wcscat (in: _Dest=0x3e3c1b0, _Source="ZgoRDmYi_QzXTSrzsWT.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps" [0148.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0148.213] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b8c050, ftCreationTime.dwHighDateTime=0x1d5e338, ftLastAccessTime.dwLowDateTime=0x7acdd660, ftLastAccessTime.dwHighDateTime=0x1d5e47e, ftLastWriteTime.dwLowDateTime=0x7acdd660, ftLastWriteTime.dwHighDateTime=0x1d5e47e, nFileSizeHigh=0x0, nFileSizeLow=0x1a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZgoRDmYi_QzXTSrzsWT.pps", cAlternateFileName="ZGORDM~1.PPS")) returned 0 [0148.213] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0148.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100ad8) returned 1 [0148.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d238) returned 1 [0148.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e688) returned 1 Thread: id = 545 os_tid = 0xc1c [0134.019] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\ti3e7tqxb.gif")) returned 0x20 [0134.019] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif", dwFileAttributes=0x20) returned 1 [0134.808] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\ti3e7tqxb.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x6cc [0134.808] GetFileSizeEx (in: hFile=0x6cc, lpFileSize=0xc01fa98 | out: lpFileSize=0xc01fa98*=4565) returned 1 [0134.809] SetFilePointerEx (in: hFile=0x6cc, liDistanceToMove=0x11d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.809] ReadFile (in: hFile=0x6cc, lpBuffer=0xc01faa4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc01fa80, lpOverlapped=0x0 | out: lpBuffer=0xc01faa4*, lpNumberOfBytesRead=0xc01fa80*=0x4, lpOverlapped=0x0) returned 1 [0134.810] SetFilePointerEx (in: hFile=0x6cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43a8 [0134.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0134.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4448 [0134.810] NtQuerySystemTime (in: CurrentTime=0xc01fa20 | out: CurrentTime=0xc01fa20*=132471540034920000) returned 0x0 [0134.810] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x41610310 [0134.810] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x1f7cc30e [0134.810] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x38fd10a2 [0134.810] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x1be8d66b [0134.810] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x48265112 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x71e49e76 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x69f43d12 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x5718c924 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x1eb45d06 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x3eab56ee [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0xe32684 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x5a75a05e [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x74fdb15e [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x9325aa2 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x6743e27a [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x1f6caa9d [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x4b69cabf [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x61fb0f31 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x3747b08 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x25589274 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x5a7beb3e [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x38a75f22 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x5d5867bd [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x3a28fde2 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x7f4d8b18 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x2a5b9531 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x54ae1761 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x521ba997 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x4650d551 [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x7edf8adc [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x71d897ee [0134.811] RtlRandomEx (in: Seed=0xc01fa18 | out: Seed=0xc01fa18) returned 0x3d3a1321 [0134.825] ReadFile (in: hFile=0x6cc, lpBuffer=0x82318b0, nNumberOfBytesToRead=0x11d5, lpNumberOfBytesRead=0xc01fa14, lpOverlapped=0x0 | out: lpBuffer=0x82318b0*, lpNumberOfBytesRead=0xc01fa14*=0x11d5, lpOverlapped=0x0) returned 1 [0134.826] SetFilePointerEx (in: hFile=0x6cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.826] WriteFile (in: hFile=0x6cc, lpBuffer=0x82354b8*, nNumberOfBytesToWrite=0x11d5, lpNumberOfBytesWritten=0xc01fa18, lpOverlapped=0x0 | out: lpBuffer=0x82354b8*, lpNumberOfBytesWritten=0xc01fa18*=0x11d5, lpOverlapped=0x0) returned 1 [0135.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0135.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0135.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c298) returned 1 [0135.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82354b8) returned 1 [0135.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82318b0) returned 1 [0135.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0135.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f318e0) returned 1 [0135.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df4298 [0135.225] SetFilePointerEx (in: hFile=0x6cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.225] WriteFile (in: hFile=0x6cc, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc01fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0xc01fa8c*=0x10c, lpOverlapped=0x0) returned 1 [0135.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0135.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f798) returned 1 [0135.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c298) returned 1 [0135.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4298) returned 1 [0135.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0135.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0135.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4470) returned 1 [0135.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0135.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4588 [0135.332] wcscpy (in: _Dest=0x3dc4588, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif" [0135.332] wcscat (in: _Dest=0x3dc4588, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif.f0dbec" [0135.332] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif.f0dbec", NtPathName=0xc01fa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\Ti3e7tQXB.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34c20 [0136.669] FlushFileBuffers (hFile=0x6cc) returned 1 [0136.742] CloseHandle (hObject=0x6cc) returned 1 [0136.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68330 [0136.743] wcscpy (in: _Dest=0x3e68330, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0136.743] wcscat (in: _Dest=0x3e68330, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" [0136.743] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\f0dbec-readme.txt")) returned 0x20 [0136.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68330) returned 1 [0136.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5010) returned 1 Thread: id = 546 os_tid = 0xb14 [0134.019] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\ycyxprilulmq9e3jj9.mp4")) returned 0x20 [0134.019] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4", dwFileAttributes=0x20) returned 1 [0134.826] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\ycyxprilulmq9e3jj9.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb58 [0134.826] GetFileSizeEx (in: hFile=0xb58, lpFileSize=0x801ff00 | out: lpFileSize=0x801ff00*=34798) returned 1 [0134.826] SetFilePointerEx (in: hFile=0xb58, liDistanceToMove=0x87ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.826] ReadFile (in: hFile=0xb58, lpBuffer=0x801ff0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x801fee8, lpOverlapped=0x0 | out: lpBuffer=0x801ff0c*, lpNumberOfBytesRead=0x801fee8*=0x4, lpOverlapped=0x0) returned 1 [0134.828] SetFilePointerEx (in: hFile=0xb58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43a8 [0134.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4448 [0134.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0134.828] NtQuerySystemTime (in: CurrentTime=0x801fe88 | out: CurrentTime=0x801fe88*=132471540035076000) returned 0x0 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x7e4b5026 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x6041db2f [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x44e2d765 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0xaf6995f [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x3e017b5f [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x20491194 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x596d35fb [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x3768508 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x3514fabb [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x5f43b48 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x7f36afb8 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x6a938e4d [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x4538576d [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x3d1c80e8 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x6caa959d [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x782e5957 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x33d46b93 [0134.828] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x6e29f680 [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x6eff603 [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x5fc5b396 [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x2501fe6d [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x42f80a95 [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x1e8630ac [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x2b2a456e [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x53f47290 [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x601a2053 [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x64f93721 [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x4c8efdc9 [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x7195dc26 [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0xb660a2f [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x62c01e7d [0134.829] RtlRandomEx (in: Seed=0x801fe80 | out: Seed=0x801fe80) returned 0x77496d9b [0134.840] SetFilePointerEx (in: hFile=0xb58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.840] ReadFile (in: hFile=0xb58, lpBuffer=0x82390c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x801fe88, lpOverlapped=0x0 | out: lpBuffer=0x82390c0*, lpNumberOfBytesRead=0x801fe88*=0x3c00, lpOverlapped=0x0) returned 1 [0134.840] SetFilePointerEx (in: hFile=0xb58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0134.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0134.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43a8 [0134.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43a8) returned 1 [0134.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x823ccc8 [0134.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43a8 [0134.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0134.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0134.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0134.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0134.841] WriteFile (in: hFile=0xb58, lpBuffer=0x823ccc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x801fe88, lpOverlapped=0x0 | out: lpBuffer=0x823ccc8*, lpNumberOfBytesWritten=0x801fe88*=0x3c00, lpOverlapped=0x0) returned 1 [0135.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x823ccc8) returned 1 [0135.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82390c0) returned 1 [0135.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3f31898 [0135.231] SetFilePointerEx (in: hFile=0xb58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.231] WriteFile (in: hFile=0xb58, lpBuffer=0x3d56f00*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x801fef4, lpOverlapped=0x0 | out: lpBuffer=0x3d56f00*, lpNumberOfBytesWritten=0x801fef4*=0x11e, lpOverlapped=0x0) returned 1 [0135.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 [0135.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32030) returned 1 [0135.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0135.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31898) returned 1 [0135.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43a8) returned 1 [0135.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4448) returned 1 [0135.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44e8) returned 1 [0135.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0135.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34dd0 [0135.336] wcscpy (in: _Dest=0x3f34dd0, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4" [0135.336] wcscat (in: _Dest=0x3f34dd0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4.f0dbec" [0135.336] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4.f0dbec", NtPathName=0x801fe78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\YcYXpriLulMQ9E3jJ9.mp4.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186998 [0136.672] FlushFileBuffers (hFile=0xb58) returned 1 [0136.744] CloseHandle (hObject=0xb58) returned 1 [0136.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68330 [0136.745] wcscpy (in: _Dest=0x3e68330, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\" [0136.745] wcscat (in: _Dest=0x3e68330, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" [0136.745] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\f0dbec-readme.txt")) returned 0x20 [0136.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68330) returned 1 [0136.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5608) returned 1 Thread: id = 547 os_tid = 0x918 [0134.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f33060 [0134.020] wcscpy (in: _Dest=0x3f33060, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0134.020] wcscat (in: _Dest=0x3f33060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0134.020] wcscat (in: _Dest=0x3f33060, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*" [0134.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100d40 [0134.020] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f18 [0134.020] wcscmp (_String1=".", _String2=".") returned 0 [0134.020] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.020] wcscmp (_String1="..", _String2=".") returned 1 [0134.020] wcscmp (_String1="..", _String2="..") returned 0 [0134.020] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0134.020] wcscmp (_String1="Accessories", _String2=".") returned 1 [0134.020] wcscmp (_String1="Accessories", _String2="..") returned 1 [0134.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34a70 [0134.020] wcscpy (in: _Dest=0x3f34a70, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0134.020] wcscat (in: _Dest=0x3f34a70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0134.020] wcscat (in: _Dest=0x3f34a70, _Source="Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0135.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f34a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0135.483] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0135.483] wcscmp (_String1="Administrative Tools", _String2=".") returned 1 [0135.484] wcscmp (_String1="Administrative Tools", _String2="..") returned 1 [0135.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7198 [0135.484] wcscpy (in: _Dest=0x2c7198, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0135.484] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0135.484] wcscat (in: _Dest=0x2c7198, _Source="Administrative Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0135.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0135.485] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f02380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1f02380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1f02380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0135.485] wcscmp (_String1="Adobe Reader X.lnk", _String2=".") returned 1 [0135.485] wcscmp (_String1="Adobe Reader X.lnk", _String2="..") returned 1 [0135.485] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3b1d58, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.485] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0135.485] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0135.485] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0135.485] wcscmp (_String1="Games", _String2=".") returned 1 [0135.485] wcscmp (_String1="Games", _String2="..") returned 1 [0135.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24240 [0135.485] wcscpy (in: _Dest=0x3e24240, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0135.485] wcscat (in: _Dest=0x3e24240, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0135.485] wcscat (in: _Dest=0x3e24240, _Source="Games" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0135.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e24240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0135.487] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21b3df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21b3df0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21b3df0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0135.487] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1 [0135.487] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1 [0135.487] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0135.487] wcscmp (_String1="Java", _String2=".") returned 1 [0135.487] wcscmp (_String1="Java", _String2="..") returned 1 [0135.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24640 [0135.487] wcscpy (in: _Dest=0x3e24640, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0135.487] wcscat (in: _Dest=0x3e24640, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0135.487] wcscat (in: _Dest=0x3e24640, _Source="Java" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0135.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e24640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0135.489] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0135.489] wcscmp (_String1="Maintenance", _String2=".") returned 1 [0135.489] wcscmp (_String1="Maintenance", _String2="..") returned 1 [0135.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35250 [0135.489] wcscpy (in: _Dest=0x3f35250, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0135.489] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0135.489] wcscat (in: _Dest=0x3f35250, _Source="Maintenance" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0135.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f35250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0135.490] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7b8cc0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed7b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0135.491] wcscmp (_String1="Media Center.lnk", _String2=".") returned 1 [0135.491] wcscmp (_String1="Media Center.lnk", _String2="..") returned 1 [0135.491] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0135.491] wcscmp (_String1="Microsoft Office", _String2=".") returned 1 [0135.491] wcscmp (_String1="Microsoft Office", _String2="..") returned 1 [0135.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bcf8 [0135.491] wcscpy (in: _Dest=0x3e2bcf8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0135.491] wcscat (in: _Dest=0x3e2bcf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0135.491] wcscat (in: _Dest=0x3e2bcf8, _Source="Microsoft Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0135.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2bcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0135.493] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77031ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x77057c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x77057c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0135.493] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1 [0135.493] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1 [0135.493] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0135.493] wcscmp (_String1="SharePoint", _String2=".") returned 1 [0135.493] wcscmp (_String1="SharePoint", _String2="..") returned 1 [0135.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fda8 [0135.493] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0135.493] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0135.493] wcscat (in: _Dest=0x3f2fda8, _Source="SharePoint" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0135.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0135.494] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4ae24a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e4ae24a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e4d43aa, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0135.495] wcscmp (_String1="Sidebar.lnk", _String2=".") returned 1 [0135.495] wcscmp (_String1="Sidebar.lnk", _String2="..") returned 1 [0135.495] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0135.495] wcscmp (_String1="Startup", _String2=".") returned 1 [0135.495] wcscmp (_String1="Startup", _String2="..") returned 1 [0135.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2fe30 [0135.495] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0135.495] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0135.495] wcscat (in: _Dest=0x3f2fe30, _Source="Startup" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0135.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0135.496] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0135.496] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0135.496] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0135.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2feb8 [0135.496] wcscpy (in: _Dest=0x3f2feb8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0135.497] wcscat (in: _Dest=0x3f2feb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0135.497] wcscat (in: _Dest=0x3f2feb8, _Source="Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0135.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f2feb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0135.498] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecb6c98, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ecb6c98, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ecb6c98, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0135.498] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2=".") returned 1 [0135.498] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2="..") returned 1 [0135.498] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea595d60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea595d60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5bbec0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0135.498] wcscmp (_String1="Windows DVD Maker.lnk", _String2=".") returned 1 [0135.498] wcscmp (_String1="Windows DVD Maker.lnk", _String2="..") returned 1 [0135.498] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b74de96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b74de96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b74de96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0135.498] wcscmp (_String1="Windows Fax and Scan.lnk", _String2=".") returned 1 [0135.498] wcscmp (_String1="Windows Fax and Scan.lnk", _String2="..") returned 1 [0135.498] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1172b3fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1172b3fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x27a4769c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0135.498] wcscmp (_String1="Windows Media Player.lnk", _String2=".") returned 1 [0135.498] wcscmp (_String1="Windows Media Player.lnk", _String2="..") returned 1 [0135.499] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0135.499] wcscmp (_String1="XPS Viewer.lnk", _String2=".") returned 1 [0135.499] wcscmp (_String1="XPS Viewer.lnk", _String2="..") returned 1 [0135.499] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 0 [0135.499] FindClose (in: hFindFile=0x3f37f18 | out: hFindFile=0x3f37f18) returned 1 [0135.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100d40) returned 1 [0135.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0135.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e80) returned 1 Thread: id = 548 os_tid = 0xb0 [0134.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5908 [0134.021] wcscpy (in: _Dest=0x3dc5908, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" [0134.021] wcscat (in: _Dest=0x3dc5908, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\" [0134.021] wcscat (in: _Dest=0x3dc5908, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\*") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\*" [0134.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100fa8 [0134.021] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\*", lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacd39b10, ftCreationTime.dwHighDateTime=0x1d5e6ac, ftLastAccessTime.dwLowDateTime=0x448ee880, ftLastAccessTime.dwHighDateTime=0x1d5d913, ftLastWriteTime.dwLowDateTime=0x448ee880, ftLastWriteTime.dwHighDateTime=0x1d5d913, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0134.021] wcscmp (_String1=".", _String2=".") returned 0 [0134.021] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacd39b10, ftCreationTime.dwHighDateTime=0x1d5e6ac, ftLastAccessTime.dwLowDateTime=0x448ee880, ftLastAccessTime.dwHighDateTime=0x1d5d913, ftLastWriteTime.dwLowDateTime=0x448ee880, ftLastWriteTime.dwHighDateTime=0x1d5d913, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.021] wcscmp (_String1="..", _String2=".") returned 1 [0134.021] wcscmp (_String1="..", _String2="..") returned 0 [0134.021] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c1f2340, ftCreationTime.dwHighDateTime=0x1d5df2d, ftLastAccessTime.dwLowDateTime=0xa1837fc0, ftLastAccessTime.dwHighDateTime=0x1d5db1a, ftLastWriteTime.dwLowDateTime=0xa1837fc0, ftLastWriteTime.dwHighDateTime=0x1d5db1a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_sj", cAlternateFileName="")) returned 1 [0134.021] wcscmp (_String1="04_sj", _String2=".") returned 1 [0134.021] wcscmp (_String1="04_sj", _String2="..") returned 1 [0134.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fc40 [0134.022] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" [0134.022] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\" [0134.022] wcscat (in: _Dest=0x3e1fc40, _Source="04_sj" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" [0139.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0 [0139.568] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19ef8db0, ftCreationTime.dwHighDateTime=0x1d5e37b, ftLastAccessTime.dwLowDateTime=0xb859d0d0, ftLastAccessTime.dwHighDateTime=0x1d5e3b4, ftLastWriteTime.dwLowDateTime=0xb859d0d0, ftLastWriteTime.dwHighDateTime=0x1d5e3b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cvWrtGF-hYKsT0u", cAlternateFileName="CVWRTG~1")) returned 1 [0139.568] wcscmp (_String1="cvWrtGF-hYKsT0u", _String2=".") returned 1 [0139.568] wcscmp (_String1="cvWrtGF-hYKsT0u", _String2="..") returned 1 [0139.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32bce0 [0139.568] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" [0139.568] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\" [0139.568] wcscat (in: _Dest=0x32bce0, _Source="cvWrtGF-hYKsT0u" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" [0139.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0139.569] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44468ff0, ftCreationTime.dwHighDateTime=0x1d5e72c, ftLastAccessTime.dwLowDateTime=0xfd4ec7b0, ftLastAccessTime.dwHighDateTime=0x1d5dd6d, ftLastWriteTime.dwLowDateTime=0xfd4ec7b0, ftLastWriteTime.dwHighDateTime=0x1d5dd6d, nFileSizeHigh=0x0, nFileSizeLow=0xdef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DdIaLSs5i5afHEU.mp3", cAlternateFileName="DDIALS~1.MP3")) returned 1 [0139.569] wcscmp (_String1="DdIaLSs5i5afHEU.mp3", _String2=".") returned 1 [0139.569] wcscmp (_String1="DdIaLSs5i5afHEU.mp3", _String2="..") returned 1 [0139.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e120e8 [0139.569] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" [0139.569] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\" [0139.570] wcscat (in: _Dest=0x3e120e8, _Source="DdIaLSs5i5afHEU.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3" [0139.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0139.571] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ac5e60, ftCreationTime.dwHighDateTime=0x1d5d83a, ftLastAccessTime.dwLowDateTime=0x1c90b8e0, ftLastAccessTime.dwHighDateTime=0x1d5e872, ftLastWriteTime.dwLowDateTime=0x1c90b8e0, ftLastWriteTime.dwHighDateTime=0x1d5e872, nFileSizeHigh=0x0, nFileSizeLow=0x13c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JJ0B_ErYvoGlx.m4a", cAlternateFileName="JJ0B_E~1.M4A")) returned 1 [0139.571] wcscmp (_String1="JJ0B_ErYvoGlx.m4a", _String2=".") returned 1 [0139.571] wcscmp (_String1="JJ0B_ErYvoGlx.m4a", _String2="..") returned 1 [0139.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11968 [0139.571] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU" [0139.571] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\" [0139.571] wcscat (in: _Dest=0x3e11968, _Source="JJ0B_ErYvoGlx.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a" [0139.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0139.572] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ac5e60, ftCreationTime.dwHighDateTime=0x1d5d83a, ftLastAccessTime.dwLowDateTime=0x1c90b8e0, ftLastAccessTime.dwHighDateTime=0x1d5e872, ftLastWriteTime.dwLowDateTime=0x1c90b8e0, ftLastWriteTime.dwHighDateTime=0x1d5e872, nFileSizeHigh=0x0, nFileSizeLow=0x13c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JJ0B_ErYvoGlx.m4a", cAlternateFileName="JJ0B_E~1.M4A")) returned 0 [0139.572] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0139.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100fa8) returned 1 [0139.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5908) returned 1 [0139.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 Thread: id = 549 os_tid = 0x1c4 [0134.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\hesoi.mp3")) returned 0x20 [0134.022] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3", dwFileAttributes=0x20) returned 1 [0134.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\hesoi.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xefc [0134.842] GetFileSizeEx (in: hFile=0xefc, lpFileSize=0xc29f7a0 | out: lpFileSize=0xc29f7a0*=79804) returned 1 [0134.842] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x137b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.842] ReadFile (in: hFile=0xefc, lpBuffer=0xc29f7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc29f788, lpOverlapped=0x0 | out: lpBuffer=0xc29f7ac*, lpNumberOfBytesRead=0xc29f788*=0x4, lpOverlapped=0x0) returned 1 [0134.843] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0134.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0134.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0134.843] NtQuerySystemTime (in: CurrentTime=0xc29f728 | out: CurrentTime=0xc29f728*=132471540035232000) returned 0x0 [0134.843] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x50d3ef89 [0134.843] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x1b4eaa9f [0134.843] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x50da09d2 [0134.843] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x3adcc357 [0134.843] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x46298717 [0134.843] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x34d951e9 [0134.843] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x55361178 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x41aaa533 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x629979ac [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x475fc592 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x10344a5 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0xf4401b7 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x217fe3a1 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x77071e01 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x4846dda9 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x2d741ef0 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x586e20b3 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x5a9093a7 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x3f141b18 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x49319b5e [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x78417132 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x14780092 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x48b83d5a [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x4ea707eb [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x75634277 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x2daa0407 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x7326ba76 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x387c8662 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x3851ada2 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x7b269b29 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x6d24e794 [0134.844] RtlRandomEx (in: Seed=0xc29f720 | out: Seed=0xc29f720) returned 0x3d040277 [0134.854] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.854] ReadFile (in: hFile=0xefc, lpBuffer=0x82408d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc29f728, lpOverlapped=0x0 | out: lpBuffer=0x82408d0*, lpNumberOfBytesRead=0xc29f728*=0x3c00, lpOverlapped=0x0) returned 1 [0134.854] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0134.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0134.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0134.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0134.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82444d8 [0134.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0134.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0134.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4560) returned 1 [0134.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0134.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0134.855] WriteFile (in: hFile=0xefc, lpBuffer=0x82444d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc29f728, lpOverlapped=0x0 | out: lpBuffer=0x82444d8*, lpNumberOfBytesWritten=0xc29f728*=0x3c00, lpOverlapped=0x0) returned 1 [0135.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82444d8) returned 1 [0135.234] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.234] ReadFile (in: hFile=0xefc, lpBuffer=0x82408d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc29f728, lpOverlapped=0x0 | out: lpBuffer=0x82408d0*, lpNumberOfBytesRead=0xc29f728*=0x3c00, lpOverlapped=0x0) returned 1 [0135.234] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31fe8 [0135.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9690 [0135.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0135.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0135.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82444d8 [0135.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0135.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c270 [0135.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c270) returned 1 [0135.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0135.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31fe8) returned 1 [0135.235] WriteFile (in: hFile=0xefc, lpBuffer=0x82444d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc29f728, lpOverlapped=0x0 | out: lpBuffer=0x82444d8*, lpNumberOfBytesWritten=0xc29f728*=0x3c00, lpOverlapped=0x0) returned 1 [0135.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82444d8) returned 1 [0135.237] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0xfbbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.237] ReadFile (in: hFile=0xefc, lpBuffer=0x82408d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc29f728, lpOverlapped=0x0 | out: lpBuffer=0x82408d0*, lpNumberOfBytesRead=0xc29f728*=0x3c00, lpOverlapped=0x0) returned 1 [0135.238] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0xfbbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f32078 [0135.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9690 [0135.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0135.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0135.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82444d8 [0135.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0135.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0135.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0135.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0135.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32078) returned 1 [0135.238] WriteFile (in: hFile=0xefc, lpBuffer=0x82444d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc29f728, lpOverlapped=0x0 | out: lpBuffer=0x82444d8*, lpNumberOfBytesWritten=0xc29f728*=0x3c00, lpOverlapped=0x0) returned 1 [0135.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82444d8) returned 1 [0135.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd820 [0135.241] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.241] WriteFile (in: hFile=0xefc, lpBuffer=0x3e17398*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0xc29f794, lpOverlapped=0x0 | out: lpBuffer=0x3e17398*, lpNumberOfBytesWritten=0xc29f794*=0x144, lpOverlapped=0x0) returned 1 [0135.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17398) returned 1 [0135.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0135.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0135.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0135.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd820) returned 1 [0135.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0135.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4588) returned 1 [0135.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef45b0) returned 1 [0135.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e248c0 [0135.340] wcscpy (in: _Dest=0x3e248c0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3" [0135.340] wcscat (in: _Dest=0x3e248c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3.f0dbec" [0135.340] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3.f0dbec", NtPathName=0xc29f718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\HesoI.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2a798 [0136.617] FlushFileBuffers (hFile=0xefc) returned 1 [0136.623] CloseHandle (hObject=0xefc) returned 1 [0136.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30c88 [0136.636] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0136.636] wcscat (in: _Dest=0x3f30c88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt" [0136.637] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\f0dbec-readme.txt")) returned 0x20 [0136.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 [0136.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 Thread: id = 550 os_tid = 0x7fc [0134.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\mnkhdjux 74yyohepgq2.m4a")) returned 0x20 [0134.023] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a", dwFileAttributes=0x20) returned 1 [0134.856] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\mnkhdjux 74yyohepgq2.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb04 [0134.856] GetFileSizeEx (in: hFile=0xb04, lpFileSize=0xbf9f938 | out: lpFileSize=0xbf9f938*=71530) returned 1 [0134.856] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x11766, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.856] ReadFile (in: hFile=0xb04, lpBuffer=0xbf9f944, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbf9f920, lpOverlapped=0x0 | out: lpBuffer=0xbf9f944*, lpNumberOfBytesRead=0xbf9f920*=0x4, lpOverlapped=0x0) returned 1 [0134.857] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0134.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef45d8 [0134.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0134.858] NtQuerySystemTime (in: CurrentTime=0xbf9f8c0 | out: CurrentTime=0xbf9f8c0*=132471540035388000) returned 0x0 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x77d13020 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x7263ab1f [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x13b1839c [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x28f88b81 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x6e77042b [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x18cff198 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x5649df21 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x35b7d35d [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x7d9a1892 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x69aeb014 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x7d803a5a [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x3cc882 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0xbda42fa [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x7e55fc3 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x336504ef [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x643c5612 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x22b51c60 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x6a6f49b8 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x5a6ea2d3 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x5c5cf3c1 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x24388ce1 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x2349755b [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x7227de57 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x7ee7ea73 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x4b2d1d4b [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x19ffe4b [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x5c7a439d [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x4a3dd15c [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x6e3d20ca [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x3588e17e [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x3362ebb9 [0134.858] RtlRandomEx (in: Seed=0xbf9f8b8 | out: Seed=0xbf9f8b8) returned 0x5cf1cbce [0134.868] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.868] ReadFile (in: hFile=0xb04, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbf9f8c0, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xbf9f8c0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.868] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0134.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0134.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0134.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4560) returned 1 [0134.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0134.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0134.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0134.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0134.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0134.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0134.869] WriteFile (in: hFile=0xb04, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbf9f8c0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xbf9f8c0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0135.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0135.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3f31fe8 [0135.237] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.237] WriteFile (in: hFile=0xb04, lpBuffer=0x3ef8248*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xbf9f92c, lpOverlapped=0x0 | out: lpBuffer=0x3ef8248*, lpNumberOfBytesWritten=0xbf9f92c*=0x122, lpOverlapped=0x0) returned 1 [0135.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8248) returned 1 [0135.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f320c0) returned 1 [0135.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c270) returned 1 [0135.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31fe8) returned 1 [0135.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4560) returned 1 [0135.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef45d8) returned 1 [0135.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4628) returned 1 [0135.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0135.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11968 [0135.338] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a" [0135.338] wcscat (in: _Dest=0x3e11968, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a.f0dbec" [0135.338] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a.f0dbec", NtPathName=0xbf9f8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\MNkhdjux 74YyohEpGQ2.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff72c0 [0136.448] FlushFileBuffers (hFile=0xb04) returned 1 [0136.451] CloseHandle (hObject=0xb04) returned 1 [0136.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f968 [0136.485] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0136.485] wcscat (in: _Dest=0x3f2f968, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt" [0136.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\f0dbec-readme.txt")) returned 0xffffffff [0136.485] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xda8 [0136.521] WriteFile (in: hFile=0xda8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbf9f8d4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbf9f8d4*=0x70c, lpOverlapped=0x0) returned 1 [0136.539] CloseHandle (hObject=0xda8) returned 1 [0136.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 [0136.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1f88) returned 1 Thread: id = 551 os_tid = 0xc94 [0134.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a038 [0134.023] wcscpy (in: _Dest=0x3f3a038, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM" [0134.023] wcscat (in: _Dest=0x3f3a038, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" [0134.023] wcscat (in: _Dest=0x3f3a038, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\*") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\*" [0134.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101210 [0134.023] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\*", lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c71fc90, ftCreationTime.dwHighDateTime=0x1d5df66, ftLastAccessTime.dwLowDateTime=0x98fe21c0, ftLastAccessTime.dwHighDateTime=0x1d5e353, ftLastWriteTime.dwLowDateTime=0x98fe21c0, ftLastWriteTime.dwHighDateTime=0x1d5e353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e58 [0134.023] wcscmp (_String1=".", _String2=".") returned 0 [0134.023] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c71fc90, ftCreationTime.dwHighDateTime=0x1d5df66, ftLastAccessTime.dwLowDateTime=0x98fe21c0, ftLastAccessTime.dwHighDateTime=0x1d5e353, ftLastWriteTime.dwLowDateTime=0x98fe21c0, ftLastWriteTime.dwHighDateTime=0x1d5e353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.023] wcscmp (_String1="..", _String2=".") returned 1 [0134.023] wcscmp (_String1="..", _String2="..") returned 0 [0134.024] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f95a0, ftCreationTime.dwHighDateTime=0x1d5d888, ftLastAccessTime.dwLowDateTime=0xc84ca830, ftLastAccessTime.dwHighDateTime=0x1d5e4dd, ftLastWriteTime.dwLowDateTime=0xc84ca830, ftLastWriteTime.dwHighDateTime=0x1d5e4dd, nFileSizeHigh=0x0, nFileSizeLow=0xcb34, dwReserved0=0x0, dwReserved1=0x0, cFileName="cxl1ScVuQp44uI7s.mp3", cAlternateFileName="CXL1SC~1.MP3")) returned 1 [0134.024] wcscmp (_String1="cxl1ScVuQp44uI7s.mp3", _String2=".") returned 1 [0134.024] wcscmp (_String1="cxl1ScVuQp44uI7s.mp3", _String2="..") returned 1 [0134.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a8c8 [0134.024] wcscpy (in: _Dest=0x3e2a8c8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM" [0134.024] wcscat (in: _Dest=0x3e2a8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" [0134.024] wcscat (in: _Dest=0x3e2a8c8, _Source="cxl1ScVuQp44uI7s.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3" [0151.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0151.794] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704b1c40, ftCreationTime.dwHighDateTime=0x1d5e468, ftLastAccessTime.dwLowDateTime=0xff93d380, ftLastAccessTime.dwHighDateTime=0x1d5dfcf, ftLastWriteTime.dwLowDateTime=0xff93d380, ftLastWriteTime.dwHighDateTime=0x1d5dfcf, nFileSizeHigh=0x0, nFileSizeLow=0x2f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="L6ZmeF0HT.m4a", cAlternateFileName="L6ZMEF~1.M4A")) returned 1 [0151.794] wcscmp (_String1="L6ZmeF0HT.m4a", _String2=".") returned 1 [0151.794] wcscmp (_String1="L6ZmeF0HT.m4a", _String2="..") returned 1 [0151.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30e20 [0151.795] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM" [0151.795] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" [0151.795] wcscat (in: _Dest=0x3f30e20, _Source="L6ZmeF0HT.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a" [0151.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0151.796] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3534c0a0, ftCreationTime.dwHighDateTime=0x1d5e09b, ftLastAccessTime.dwLowDateTime=0x61e257d0, ftLastAccessTime.dwHighDateTime=0x1d5db5e, ftLastWriteTime.dwLowDateTime=0x61e257d0, ftLastWriteTime.dwHighDateTime=0x1d5db5e, nFileSizeHigh=0x0, nFileSizeLow=0x7778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_hoxjqAbWoaL2aUq5w.m4a", cAlternateFileName="Y_HOXJ~1.M4A")) returned 1 [0151.796] wcscmp (_String1="Y_hoxjqAbWoaL2aUq5w.m4a", _String2=".") returned 1 [0151.796] wcscmp (_String1="Y_hoxjqAbWoaL2aUq5w.m4a", _String2="..") returned 1 [0151.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2b2e0 [0151.796] wcscpy (in: _Dest=0x3e2b2e0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM" [0151.796] wcscat (in: _Dest=0x3e2b2e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" [0151.796] wcscat (in: _Dest=0x3e2b2e0, _Source="Y_hoxjqAbWoaL2aUq5w.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a" [0151.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0151.797] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3534c0a0, ftCreationTime.dwHighDateTime=0x1d5e09b, ftLastAccessTime.dwLowDateTime=0x61e257d0, ftLastAccessTime.dwHighDateTime=0x1d5db5e, ftLastWriteTime.dwLowDateTime=0x61e257d0, ftLastWriteTime.dwHighDateTime=0x1d5db5e, nFileSizeHigh=0x0, nFileSizeLow=0x7778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_hoxjqAbWoaL2aUq5w.m4a", cAlternateFileName="Y_HOXJ~1.M4A")) returned 0 [0151.797] FindClose (in: hFindFile=0x3f37e58 | out: hFindFile=0x3f37e58) returned 1 [0151.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101210) returned 1 [0151.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a038) returned 1 [0151.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d1d0) returned 1 Thread: id = 552 os_tid = 0x98c [0134.024] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\n_fenvh_itynyq27hek.m4a")) returned 0x20 [0134.024] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a", dwFileAttributes=0x20) returned 1 [0134.869] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\n_fenvh_itynyq27hek.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8bc [0134.869] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0x76efbd8 | out: lpFileSize=0x76efbd8*=60823) returned 1 [0134.869] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0xed93, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.869] ReadFile (in: hFile=0x8bc, lpBuffer=0x76efbe4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x76efbc0, lpOverlapped=0x0 | out: lpBuffer=0x76efbe4*, lpNumberOfBytesRead=0x76efbc0*=0x4, lpOverlapped=0x0) returned 1 [0134.871] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0134.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0134.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46a0 [0134.871] NtQuerySystemTime (in: CurrentTime=0x76efb60 | out: CurrentTime=0x76efb60*=132471540035544000) returned 0x0 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x59e85518 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x23e5530d [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x232c548 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x50a77c04 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x57517553 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x3e29b9e0 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x1e92244c [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0xf8ae18e [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x87c3a84 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x6b73f78b [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x5ab6ff3f [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0xf4400ff [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x1e240f9e [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x11a023c1 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x122f16a8 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x11257292 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x5cdc6517 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x471c398e [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x11b79e4d [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x4cedc884 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x40cd01fa [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x3f055355 [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x1efae43d [0134.871] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x134a9d73 [0134.872] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x413d67fb [0134.872] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x60187f13 [0134.872] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x251917a6 [0134.872] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x3294ada1 [0134.872] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x6ac2ed4f [0134.872] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x55121b29 [0134.872] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x1114801c [0134.872] RtlRandomEx (in: Seed=0x76efb58 | out: Seed=0x76efb58) returned 0x7bb9e69f [0134.879] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.879] ReadFile (in: hFile=0x8bc, lpBuffer=0x824fc68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x76efb60, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesRead=0x76efb60*=0x3c00, lpOverlapped=0x0) returned 1 [0134.880] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0134.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0134.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0134.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0134.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8253870 [0134.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0134.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46a0 [0134.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46a0) returned 1 [0134.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0134.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0134.880] WriteFile (in: hFile=0x8bc, lpBuffer=0x8253870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x76efb60, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesWritten=0x76efb60*=0x3c00, lpOverlapped=0x0) returned 1 [0135.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0135.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0135.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3f32078 [0135.240] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.240] WriteFile (in: hFile=0x8bc, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x76efbcc, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0x76efbcc*=0x120, lpOverlapped=0x0) returned 1 [0135.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0135.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32150) returned 1 [0135.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0135.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32078) returned 1 [0135.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0135.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0135.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0135.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0135.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e12408 [0135.339] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a" [0135.339] wcscat (in: _Dest=0x3e12408, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a.f0dbec" [0135.339] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a.f0dbec", NtPathName=0x76efb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\N_feNVH_ItYnyQ27heK.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7208 [0136.703] FlushFileBuffers (hFile=0x8bc) returned 1 [0136.751] CloseHandle (hObject=0x8bc) returned 1 [0136.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30958 [0136.759] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0136.759] wcscat (in: _Dest=0x3f30958, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt" [0136.759] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\f0dbec-readme.txt")) returned 0x20 [0136.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0136.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2be8) returned 1 Thread: id = 553 os_tid = 0xde4 [0134.025] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\x9x145huckgvz.m4a")) returned 0x20 [0134.025] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a", dwFileAttributes=0x20) returned 1 [0134.881] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\x9x145huckgvz.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13c0 [0134.881] GetFileSizeEx (in: hFile=0x13c0, lpFileSize=0xc37ff30 | out: lpFileSize=0xc37ff30*=56963) returned 1 [0134.881] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0xde7f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.881] ReadFile (in: hFile=0x13c0, lpBuffer=0xc37ff3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc37ff18, lpOverlapped=0x0 | out: lpBuffer=0xc37ff3c*, lpNumberOfBytesRead=0xc37ff18*=0x4, lpOverlapped=0x0) returned 1 [0134.882] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46a0 [0134.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4718 [0134.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0134.883] NtQuerySystemTime (in: CurrentTime=0xc37feb8 | out: CurrentTime=0xc37feb8*=132471540035700000) returned 0x0 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x31881e5 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0xa41ca58 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x3c388fd4 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0xe7ddaec [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x1b94ba91 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x2205f59f [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x4405e2d3 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x37d12362 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x21d59df9 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x707930c6 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x44d12c9 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x42bc440 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x6176e6a3 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x2f8600fd [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x4d5bf59 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x38d237e2 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x1f00d8fb [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x6f727847 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0xabd979a [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x5b392bee [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x1747e671 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x2ccf4419 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x6d37edd3 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x4b94ffee [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x18e23aa7 [0134.883] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x7b84eadf [0134.884] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x73e8cd8 [0134.884] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x51f0be19 [0134.884] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x6b919d8c [0134.884] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x1518299c [0134.884] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x62e5a6ee [0134.884] RtlRandomEx (in: Seed=0xc37feb0 | out: Seed=0xc37feb0) returned 0x2bc57bdb [0134.891] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.892] ReadFile (in: hFile=0x13c0, lpBuffer=0x8257478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc37feb8, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xc37feb8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.892] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0134.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0134.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46a0 [0134.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46a0) returned 1 [0134.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0134.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46a0 [0134.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0134.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0134.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0134.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0134.892] WriteFile (in: hFile=0x13c0, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc37feb8, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xc37feb8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0135.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0135.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df7e90 [0135.243] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.243] WriteFile (in: hFile=0x13c0, lpBuffer=0x3d56810*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xc37ff24, lpOverlapped=0x0 | out: lpBuffer=0x3d56810*, lpNumberOfBytesWritten=0xc37ff24*=0x114, lpOverlapped=0x0) returned 1 [0135.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56810) returned 1 [0135.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79f8) returned 1 [0135.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0135.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0135.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46a0) returned 1 [0135.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4718) returned 1 [0135.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0135.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0135.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34e60 [0135.342] wcscpy (in: _Dest=0x3f34e60, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a" [0135.342] wcscat (in: _Dest=0x3f34e60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a.f0dbec" [0135.342] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a.f0dbec", NtPathName=0xc37fea8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\X9x145hUCkGVz.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186a40 [0136.620] FlushFileBuffers (hFile=0x13c0) returned 1 [0136.625] CloseHandle (hObject=0x13c0) returned 1 [0136.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30c88 [0136.639] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\" [0136.639] wcscat (in: _Dest=0x3f30c88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt" [0136.639] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\f0dbec-readme.txt")) returned 0x20 [0136.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 [0136.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 554 os_tid = 0xdf8 [0134.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7148 [0134.025] wcscpy (in: _Dest=0x2fe7148, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0134.025] wcscat (in: _Dest=0x2fe7148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\" [0134.025] wcscat (in: _Dest=0x2fe7148, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\*" [0134.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101478 [0134.025] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e18 [0134.026] wcscmp (_String1=".", _String2=".") returned 0 [0134.026] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.026] wcscmp (_String1="..", _String2=".") returned 1 [0134.026] wcscmp (_String1="..", _String2="..") returned 0 [0134.026] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0134.026] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0134.026] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0134.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c4d0 [0134.026] wcscpy (in: _Dest=0x3d8c4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0134.026] wcscat (in: _Dest=0x3d8c4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\" [0134.026] wcscat (in: _Dest=0x3d8c4d0, _Source="Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" [0145.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8c4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0145.650] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0145.650] wcscmp (_String1="Linguistics", _String2=".") returned 1 [0145.650] wcscmp (_String1="Linguistics", _String2="..") returned 1 [0145.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33438 [0145.650] wcscpy (in: _Dest=0x3f33438, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0145.650] wcscat (in: _Dest=0x3f33438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\" [0145.650] wcscat (in: _Dest=0x3f33438, _Source="Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" [0145.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0145.651] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0145.652] FindClose (in: hFindFile=0x3f37e18 | out: hFindFile=0x3f37e18) returned 1 [0145.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101478) returned 1 [0145.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7148) returned 1 [0145.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f040) returned 1 Thread: id = 555 os_tid = 0xdf4 [0134.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e22da8 [0134.027] wcscpy (in: _Dest=0x3e22da8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" [0134.027] wcscat (in: _Dest=0x3e22da8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\" [0134.027] wcscat (in: _Dest=0x3e22da8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\*" [0134.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81016e0 [0134.027] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0134.373] wcscmp (_String1=".", _String2=".") returned 0 [0134.373] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.374] wcscmp (_String1="..", _String2=".") returned 1 [0134.374] wcscmp (_String1="..", _String2="..") returned 0 [0134.374] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0134.374] wcscmp (_String1="Java", _String2=".") returned 1 [0134.374] wcscmp (_String1="Java", _String2="..") returned 1 [0134.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6548 [0134.374] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" [0134.374] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\" [0134.374] wcscat (in: _Dest=0x2fe6548, _Source="Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0135.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0135.983] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0135.983] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0135.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81016e0) returned 1 [0135.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22da8) returned 1 [0135.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 556 os_tid = 0xca0 [0134.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a0a8 [0134.028] wcscpy (in: _Dest=0x3f3a0a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0134.028] wcscat (in: _Dest=0x3f3a0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0134.028] wcscat (in: _Dest=0x3f3a0a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*" [0134.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101948 [0134.028] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe30e510, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0134.466] wcscmp (_String1=".", _String2=".") returned 0 [0134.467] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe30e510, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.467] wcscmp (_String1="..", _String2=".") returned 1 [0134.467] wcscmp (_String1="..", _String2="..") returned 0 [0134.467] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352582b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0134.467] wcscmp (_String1="1033", _String2=".") returned 1 [0134.467] wcscmp (_String1="1033", _String2="..") returned 1 [0134.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68858 [0134.467] wcscpy (in: _Dest=0x3e68858, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0134.467] wcscat (in: _Dest=0x3e68858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0134.467] wcscat (in: _Dest=0x3e68858, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" [0135.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e68858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0135.990] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x39a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0135.990] wcscmp (_String1="CAGCAT10.DLL", _String2=".") returned 1 [0135.990] wcscmp (_String1="CAGCAT10.DLL", _String2="..") returned 1 [0135.990] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83ee400, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x76dd6c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa83ee400, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0135.991] wcscmp (_String1="CAGCAT10.MMW", _String2=".") returned 1 [0135.991] wcscmp (_String1="CAGCAT10.MMW", _String2="..") returned 1 [0135.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fe30 [0135.991] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0135.991] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0135.991] wcscat (in: _Dest=0x3f2fe30, _Source="CAGCAT10.MMW" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" [0135.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0135.992] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7213600, ftCreationTime.dwHighDateTime=0x1bd4c78, ftLastAccessTime.dwLowDateTime=0xbdcceb50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa7213600, ftLastWriteTime.dwHighDateTime=0x1bd4c78, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0135.992] wcscmp (_String1="ELPHRG01.WAV", _String2=".") returned 1 [0135.992] wcscmp (_String1="ELPHRG01.WAV", _String2="..") returned 1 [0135.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fda8 [0135.992] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0135.992] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0135.992] wcscat (in: _Dest=0x3f2fda8, _Source="ELPHRG01.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" [0135.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0135.994] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f69400, ftCreationTime.dwHighDateTime=0x1bd21d2, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8f69400, ftLastWriteTime.dwHighDateTime=0x1bd21d2, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0135.994] wcscmp (_String1="J0088542.WMF", _String2=".") returned 1 [0135.994] wcscmp (_String1="J0088542.WMF", _String2="..") returned 1 [0135.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2ff40 [0135.994] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0135.994] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0135.994] wcscat (in: _Dest=0x3f2ff40, _Source="J0088542.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" [0135.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0135.995] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfde24a00, ftCreationTime.dwHighDateTime=0x1bcf8eb, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfde24a00, ftLastWriteTime.dwHighDateTime=0x1bcf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0135.995] wcscmp (_String1="J0090070.WMF", _String2=".") returned 1 [0135.995] wcscmp (_String1="J0090070.WMF", _String2="..") returned 1 [0135.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2ffc8 [0135.996] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0135.996] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0135.996] wcscat (in: _Dest=0x3f2ffc8, _Source="J0090070.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" [0135.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0135.997] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefd6400, ftCreationTime.dwHighDateTime=0x1bd20f2, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeefd6400, ftLastWriteTime.dwHighDateTime=0x1bd20f2, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0135.997] wcscmp (_String1="J0090386.WMF", _String2=".") returned 1 [0135.997] wcscmp (_String1="J0090386.WMF", _String2="..") returned 1 [0135.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30050 [0135.997] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0135.997] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0135.997] wcscat (in: _Dest=0x3f30050, _Source="J0090386.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" [0135.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0135.999] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3680700, ftCreationTime.dwHighDateTime=0x1bd3deb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3680700, ftLastWriteTime.dwHighDateTime=0x1bd3deb, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0135.999] wcscmp (_String1="J0149407.WMF", _String2=".") returned 1 [0135.999] wcscmp (_String1="J0149407.WMF", _String2="..") returned 1 [0135.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f300d8 [0135.999] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0135.999] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0135.999] wcscat (in: _Dest=0x3f300d8, _Source="J0149407.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" [0135.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0136.000] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a323900, ftCreationTime.dwHighDateTime=0x1bd42ad, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a323900, ftLastWriteTime.dwHighDateTime=0x1bd42ad, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0136.000] wcscmp (_String1="J0149481.WMF", _String2=".") returned 1 [0136.001] wcscmp (_String1="J0149481.WMF", _String2="..") returned 1 [0136.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30160 [0136.001] wcscpy (in: _Dest=0x3f30160, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.001] wcscat (in: _Dest=0x3f30160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.001] wcscat (in: _Dest=0x3f30160, _Source="J0149481.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" [0136.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0136.002] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd518d700, ftCreationTime.dwHighDateTime=0x1bd50cb, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd518d700, ftLastWriteTime.dwHighDateTime=0x1bd50cb, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0136.002] wcscmp (_String1="J0149627.WMF", _String2=".") returned 1 [0136.002] wcscmp (_String1="J0149627.WMF", _String2="..") returned 1 [0136.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f301e8 [0136.002] wcscpy (in: _Dest=0x3f301e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.003] wcscat (in: _Dest=0x3f301e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.003] wcscat (in: _Dest=0x3f301e8, _Source="J0149627.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" [0136.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f301e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0136.004] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3307c700, ftCreationTime.dwHighDateTime=0x1bd649e, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3307c700, ftLastWriteTime.dwHighDateTime=0x1bd649e, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0136.004] wcscmp (_String1="J0149887.WMF", _String2=".") returned 1 [0136.004] wcscmp (_String1="J0149887.WMF", _String2="..") returned 1 [0136.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30270 [0136.004] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.004] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.004] wcscat (in: _Dest=0x3f30270, _Source="J0149887.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" [0136.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0136.005] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4fd5200, ftCreationTime.dwHighDateTime=0x1bd7f29, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd4fd5200, ftLastWriteTime.dwHighDateTime=0x1bd7f29, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0136.006] wcscmp (_String1="J0157763.WMF", _String2=".") returned 1 [0136.006] wcscmp (_String1="J0157763.WMF", _String2="..") returned 1 [0136.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f302f8 [0136.006] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.006] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.006] wcscat (in: _Dest=0x3f302f8, _Source="J0157763.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" [0136.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0136.007] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44348900, ftCreationTime.dwHighDateTime=0x1bd955e, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x44348900, ftLastWriteTime.dwHighDateTime=0x1bd955e, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0136.007] wcscmp (_String1="J0157995.WMF", _String2=".") returned 1 [0136.007] wcscmp (_String1="J0157995.WMF", _String2="..") returned 1 [0136.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30380 [0136.007] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.008] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.008] wcscat (in: _Dest=0x3f30380, _Source="J0157995.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" [0136.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0136.009] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eef1e00, ftCreationTime.dwHighDateTime=0x1bd955e, ftLastAccessTime.dwLowDateTime=0xbe060c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4eef1e00, ftLastWriteTime.dwHighDateTime=0x1bd955e, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0136.009] wcscmp (_String1="J0158007.WMF", _String2=".") returned 1 [0136.009] wcscmp (_String1="J0158007.WMF", _String2="..") returned 1 [0136.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30408 [0136.009] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.009] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.009] wcscat (in: _Dest=0x3f30408, _Source="J0158007.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" [0136.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0136.011] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435a800, ftCreationTime.dwHighDateTime=0x1bdf75b, ftLastAccessTime.dwLowDateTime=0xbe060c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7435a800, ftLastWriteTime.dwHighDateTime=0x1bdf75b, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0136.011] wcscmp (_String1="J0183168.WMF", _String2=".") returned 1 [0136.011] wcscmp (_String1="J0183168.WMF", _String2="..") returned 1 [0136.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30490 [0136.011] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.011] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.011] wcscat (in: _Dest=0x3f30490, _Source="J0183168.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" [0136.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0136.012] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0d4900, ftCreationTime.dwHighDateTime=0x1bdf75c, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5f0d4900, ftLastWriteTime.dwHighDateTime=0x1bdf75c, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0136.013] wcscmp (_String1="J0183290.WMF", _String2=".") returned 1 [0136.013] wcscmp (_String1="J0183290.WMF", _String2="..") returned 1 [0136.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30518 [0136.013] wcscpy (in: _Dest=0x3f30518, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.013] wcscat (in: _Dest=0x3f30518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.013] wcscat (in: _Dest=0x3f30518, _Source="J0183290.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" [0136.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0136.014] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b2400, ftCreationTime.dwHighDateTime=0x1bdf75c, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8d8b2400, ftLastWriteTime.dwHighDateTime=0x1bdf75c, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0136.014] wcscmp (_String1="J0183328.WMF", _String2=".") returned 1 [0136.014] wcscmp (_String1="J0183328.WMF", _String2="..") returned 1 [0136.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f305a0 [0136.014] wcscpy (in: _Dest=0x3f305a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.014] wcscat (in: _Dest=0x3f305a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.014] wcscat (in: _Dest=0x3f305a0, _Source="J0183328.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" [0136.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f305a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0136.016] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88cb8700, ftCreationTime.dwHighDateTime=0x1be0d7f, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x88cb8700, ftLastWriteTime.dwHighDateTime=0x1be0d7f, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0136.016] wcscmp (_String1="J0185604.WMF", _String2=".") returned 1 [0136.016] wcscmp (_String1="J0185604.WMF", _String2="..") returned 1 [0136.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30628 [0136.016] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.016] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.016] wcscat (in: _Dest=0x3f30628, _Source="J0185604.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" [0136.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0136.018] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7144cc00, ftCreationTime.dwHighDateTime=0x1be0d88, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7144cc00, ftLastWriteTime.dwHighDateTime=0x1be0d88, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0136.018] wcscmp (_String1="J0186002.WMF", _String2=".") returned 1 [0136.018] wcscmp (_String1="J0186002.WMF", _String2="..") returned 1 [0136.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f306b0 [0136.018] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.018] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.018] wcscat (in: _Dest=0x3f306b0, _Source="J0186002.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" [0136.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0136.019] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80774a00, ftCreationTime.dwHighDateTime=0x1be0d87, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80774a00, ftLastWriteTime.dwHighDateTime=0x1be0d87, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0136.020] wcscmp (_String1="J0186348.WMF", _String2=".") returned 1 [0136.020] wcscmp (_String1="J0186348.WMF", _String2="..") returned 1 [0136.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30738 [0136.020] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.020] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.020] wcscat (in: _Dest=0x3f30738, _Source="J0186348.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" [0136.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0136.021] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0956300, ftCreationTime.dwHighDateTime=0x1be1162, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb0956300, ftLastWriteTime.dwHighDateTime=0x1be1162, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0136.021] wcscmp (_String1="J0187423.WMF", _String2=".") returned 1 [0136.021] wcscmp (_String1="J0187423.WMF", _String2="..") returned 1 [0136.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f307c0 [0136.021] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.021] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.022] wcscat (in: _Dest=0x3f307c0, _Source="J0187423.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" [0136.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0137.111] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a24a00, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58a24a00, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0137.112] wcscmp (_String1="J0195384.WMF", _String2=".") returned 1 [0137.112] wcscmp (_String1="J0195384.WMF", _String2="..") returned 1 [0137.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f312e8 [0137.112] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0137.112] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0137.112] wcscat (in: _Dest=0x3f312e8, _Source="J0195384.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" [0151.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0151.360] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f786000, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f786000, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0151.360] wcscmp (_String1="J0195534.WMF", _String2=".") returned 1 [0151.360] wcscmp (_String1="J0195534.WMF", _String2="..") returned 1 [0151.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f302f8 [0151.360] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.360] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.361] wcscat (in: _Dest=0x3f302f8, _Source="J0195534.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" [0151.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0151.362] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda927300, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xda927300, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0151.362] wcscmp (_String1="J0195812.WMF", _String2=".") returned 1 [0151.362] wcscmp (_String1="J0195812.WMF", _String2="..") returned 1 [0151.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30b78 [0151.362] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.362] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.362] wcscat (in: _Dest=0x3f30b78, _Source="J0195812.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" [0151.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0151.364] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33faa200, ftCreationTime.dwHighDateTime=0x1be276b, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x33faa200, ftLastWriteTime.dwHighDateTime=0x1be276b, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0151.364] wcscmp (_String1="J0196164.WMF", _String2=".") returned 1 [0151.364] wcscmp (_String1="J0196164.WMF", _String2="..") returned 1 [0151.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f7d0 [0151.364] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.365] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.365] wcscat (in: _Dest=0x3f2f7d0, _Source="J0196164.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" [0151.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0151.366] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17214b00, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17214b00, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0151.366] wcscmp (_String1="J0196374.WMF", _String2=".") returned 1 [0151.366] wcscmp (_String1="J0196374.WMF", _String2="..") returned 1 [0151.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30ea8 [0151.366] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.366] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.366] wcscat (in: _Dest=0x3f30ea8, _Source="J0196374.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" [0151.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0 [0151.368] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d1c100, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x27d1c100, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0151.368] wcscmp (_String1="J0196400.WMF", _String2=".") returned 1 [0151.368] wcscmp (_String1="J0196400.WMF", _String2="..") returned 1 [0151.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f308d0 [0151.368] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.368] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.368] wcscat (in: _Dest=0x3f308d0, _Source="J0196400.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" [0151.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0151.369] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c6dc00, ftCreationTime.dwHighDateTime=0x1bdf12a, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95c6dc00, ftLastWriteTime.dwHighDateTime=0x1bdf12a, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0151.369] wcscmp (_String1="J0199036.WMF", _String2=".") returned 1 [0151.369] wcscmp (_String1="J0199036.WMF", _String2="..") returned 1 [0151.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f31040 [0151.370] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.370] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.370] wcscat (in: _Dest=0x3f31040, _Source="J0199036.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" [0151.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0151.371] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x810a3500, ftCreationTime.dwHighDateTime=0x1be0651, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x810a3500, ftLastWriteTime.dwHighDateTime=0x1be0651, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0151.371] wcscmp (_String1="J0199283.WMF", _String2=".") returned 1 [0151.371] wcscmp (_String1="J0199283.WMF", _String2="..") returned 1 [0151.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fc10 [0151.371] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.371] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.371] wcscat (in: _Dest=0x3f2fc10, _Source="J0199283.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" [0151.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0151.372] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ea1500, ftCreationTime.dwHighDateTime=0x1be3efe, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9ea1500, ftLastWriteTime.dwHighDateTime=0x1be3efe, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0151.372] wcscmp (_String1="J0199549.WMF", _String2=".") returned 1 [0151.372] wcscmp (_String1="J0199549.WMF", _String2="..") returned 1 [0151.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f307c0 [0151.373] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.373] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.373] wcscat (in: _Dest=0x3f307c0, _Source="J0199549.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" [0151.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0151.374] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20c02b00, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x20c02b00, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0151.374] wcscmp (_String1="J0199661.WMF", _String2=".") returned 1 [0151.374] wcscmp (_String1="J0199661.WMF", _String2="..") returned 1 [0151.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fe30 [0151.374] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.374] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.374] wcscat (in: _Dest=0x3f2fe30, _Source="J0199661.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" [0151.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0151.375] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e5cb00, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46e5cb00, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0151.375] wcscmp (_String1="J0199727.WMF", _String2=".") returned 1 [0151.375] wcscmp (_String1="J0199727.WMF", _String2="..") returned 1 [0151.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f310c8 [0151.376] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.376] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.376] wcscat (in: _Dest=0x3f310c8, _Source="J0199727.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" [0151.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0151.377] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a06000, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x51a06000, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0151.377] wcscmp (_String1="J0199755.WMF", _String2=".") returned 1 [0151.378] wcscmp (_String1="J0199755.WMF", _String2="..") returned 1 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30490 [0151.378] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.378] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.378] wcscat (in: _Dest=0x3f30490, _Source="J0199755.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" [0151.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0151.379] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6846b700, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6846b700, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0151.384] wcscmp (_String1="J0199805.WMF", _String2=".") returned 1 [0151.384] wcscmp (_String1="J0199805.WMF", _String2="..") returned 1 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30270 [0151.384] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.385] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.385] wcscat (in: _Dest=0x3f30270, _Source="J0199805.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" [0151.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98 [0151.386] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b018b00, ftCreationTime.dwHighDateTime=0x1be4dc3, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b018b00, ftLastWriteTime.dwHighDateTime=0x1be4dc3, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0151.386] wcscmp (_String1="J0205462.WMF", _String2=".") returned 1 [0151.386] wcscmp (_String1="J0205462.WMF", _String2="..") returned 1 [0151.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f301e8 [0151.387] wcscpy (in: _Dest=0x3f301e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.387] wcscat (in: _Dest=0x3f301e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.387] wcscat (in: _Dest=0x3f301e8, _Source="J0205462.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" [0151.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f301e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0151.388] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e951200, ftCreationTime.dwHighDateTime=0x1be4dc3, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e951200, ftLastWriteTime.dwHighDateTime=0x1be4dc3, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0151.388] wcscmp (_String1="J0205466.WMF", _String2=".") returned 1 [0151.389] wcscmp (_String1="J0205466.WMF", _String2="..") returned 1 [0151.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30160 [0151.389] wcscpy (in: _Dest=0x3f30160, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.389] wcscat (in: _Dest=0x3f30160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.389] wcscat (in: _Dest=0x3f30160, _Source="J0205466.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" [0151.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0151.390] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0ea300, ftCreationTime.dwHighDateTime=0x1be4dc3, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaa0ea300, ftLastWriteTime.dwHighDateTime=0x1be4dc3, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0151.390] wcscmp (_String1="J0205582.WMF", _String2=".") returned 1 [0151.390] wcscmp (_String1="J0205582.WMF", _String2="..") returned 1 [0151.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f300d8 [0151.391] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.391] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.391] wcscat (in: _Dest=0x3f300d8, _Source="J0205582.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" [0151.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0151.392] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd358ea00, ftCreationTime.dwHighDateTime=0x1be5673, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd358ea00, ftLastWriteTime.dwHighDateTime=0x1be5673, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0151.392] wcscmp (_String1="J0211949.WMF", _String2=".") returned 1 [0151.392] wcscmp (_String1="J0211949.WMF", _String2="..") returned 1 [0151.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30050 [0151.393] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.393] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.393] wcscat (in: _Dest=0x3f30050, _Source="J0211949.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" [0151.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0151.394] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5875800, ftCreationTime.dwHighDateTime=0x1be5674, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe5875800, ftLastWriteTime.dwHighDateTime=0x1be5674, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0151.394] wcscmp (_String1="J0212219.WMF", _String2=".") returned 1 [0151.394] wcscmp (_String1="J0212219.WMF", _String2="..") returned 1 [0151.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2ff40 [0151.395] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.395] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.395] wcscat (in: _Dest=0x3f2ff40, _Source="J0212219.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" [0151.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4 [0151.396] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebca0400, ftCreationTime.dwHighDateTime=0x1be5675, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xebca0400, ftLastWriteTime.dwHighDateTime=0x1be5675, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0151.396] wcscmp (_String1="J0212661.WMF", _String2=".") returned 1 [0151.396] wcscmp (_String1="J0212661.WMF", _String2="..") returned 1 [0151.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f306b0 [0151.396] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.397] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.397] wcscat (in: _Dest=0x3f306b0, _Source="J0212661.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" [0151.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0151.398] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a18800, ftCreationTime.dwHighDateTime=0x1be5676, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3a18800, ftLastWriteTime.dwHighDateTime=0x1be5676, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0151.398] wcscmp (_String1="J0212701.WMF", _String2=".") returned 1 [0151.398] wcscmp (_String1="J0212701.WMF", _String2="..") returned 1 [0151.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30380 [0151.398] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.398] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.398] wcscat (in: _Dest=0x3f30380, _Source="J0212701.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" [0151.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0151.399] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701c8700, ftCreationTime.dwHighDateTime=0x1be5676, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x701c8700, ftLastWriteTime.dwHighDateTime=0x1be5676, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0151.399] wcscmp (_String1="J0212957.WMF", _String2=".") returned 1 [0151.399] wcscmp (_String1="J0212957.WMF", _String2="..") returned 1 [0151.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f9f0 [0151.399] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.399] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.399] wcscat (in: _Dest=0x3f2f9f0, _Source="J0212957.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" [0151.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0151.400] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c5bc600, ftCreationTime.dwHighDateTime=0x1be5a07, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1c5bc600, ftLastWriteTime.dwHighDateTime=0x1be5a07, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0151.401] wcscmp (_String1="J0214098.WAV", _String2=".") returned 1 [0151.401] wcscmp (_String1="J0214098.WAV", _String2="..") returned 1 [0151.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2feb8 [0151.401] wcscpy (in: _Dest=0x3f2feb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.401] wcscat (in: _Dest=0x3f2feb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.401] wcscat (in: _Dest=0x3f2feb8, _Source="J0214098.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" [0151.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2feb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0151.402] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ef3a00, ftCreationTime.dwHighDateTime=0x1be1bbf, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc7ef3a00, ftLastWriteTime.dwHighDateTime=0x1be1bbf, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0151.402] wcscmp (_String1="J0215086.WMF", _String2=".") returned 1 [0151.402] wcscmp (_String1="J0215086.WMF", _String2="..") returned 1 [0151.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f638 [0151.402] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.402] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.403] wcscat (in: _Dest=0x3f2f638, _Source="J0215086.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" [0151.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0151.956] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaf9cc00, ftCreationTime.dwHighDateTime=0x1be6c7e, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcaf9cc00, ftLastWriteTime.dwHighDateTime=0x1be6c7e, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0151.956] wcscmp (_String1="J0216516.WMF", _String2=".") returned 1 [0151.956] wcscmp (_String1="J0216516.WMF", _String2="..") returned 1 [0151.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053eb8 [0151.957] wcscpy (in: _Dest=0x8053eb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0151.957] wcscat (in: _Dest=0x8053eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0151.957] wcscat (in: _Dest=0x8053eb8, _Source="J0216516.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" [0153.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0153.204] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b18500, ftCreationTime.dwHighDateTime=0x1be6c7f, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13b18500, ftLastWriteTime.dwHighDateTime=0x1be6c7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0153.204] wcscmp (_String1="J0216588.WMF", _String2=".") returned 1 [0153.204] wcscmp (_String1="J0216588.WMF", _String2="..") returned 1 [0153.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1eb40 [0153.204] wcscpy (in: _Dest=0x3e1eb40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.204] wcscat (in: _Dest=0x3e1eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.204] wcscat (in: _Dest=0x3e1eb40, _Source="J0216588.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" [0153.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0153.205] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94708100, ftCreationTime.dwHighDateTime=0x1be6c7f, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x94708100, ftLastWriteTime.dwHighDateTime=0x1be6c7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0153.206] wcscmp (_String1="J0216724.WMF", _String2=".") returned 1 [0153.206] wcscmp (_String1="J0216724.WMF", _String2="..") returned 1 [0153.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f118 [0153.206] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.206] wcscat (in: _Dest=0x3e1f118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.206] wcscat (in: _Dest=0x3e1f118, _Source="J0216724.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" [0153.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0153.207] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1791d700, ftCreationTime.dwHighDateTime=0x1be6c80, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1791d700, ftLastWriteTime.dwHighDateTime=0x1be6c80, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0153.207] wcscmp (_String1="J0216858.WMF", _String2=".") returned 1 [0153.207] wcscmp (_String1="J0216858.WMF", _String2="..") returned 1 [0153.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1eef8 [0153.207] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.207] wcscat (in: _Dest=0x3e1eef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.207] wcscat (in: _Dest=0x3e1eef8, _Source="J0216858.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" [0153.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0153.208] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e001500, ftCreationTime.dwHighDateTime=0x1be6c82, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6e001500, ftLastWriteTime.dwHighDateTime=0x1be6c82, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0153.208] wcscmp (_String1="J0217698.WMF", _String2=".") returned 1 [0153.208] wcscmp (_String1="J0217698.WMF", _String2="..") returned 1 [0153.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ede8 [0153.209] wcscpy (in: _Dest=0x3e1ede8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.209] wcscat (in: _Dest=0x3e1ede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.209] wcscat (in: _Dest=0x3e1ede8, _Source="J0217698.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" [0153.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0153.210] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11329600, ftCreationTime.dwHighDateTime=0x1be7a9b, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x11329600, ftLastWriteTime.dwHighDateTime=0x1be7a9b, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0153.210] wcscmp (_String1="J0221903.WMF", _String2=".") returned 1 [0153.210] wcscmp (_String1="J0221903.WMF", _String2="..") returned 1 [0153.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f090 [0153.210] wcscpy (in: _Dest=0x3e1f090, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.210] wcscat (in: _Dest=0x3e1f090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.210] wcscat (in: _Dest=0x3e1f090, _Source="J0221903.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" [0153.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0153.211] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12b08e00, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x12b08e00, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0153.211] wcscmp (_String1="J0222015.WMF", _String2=".") returned 1 [0153.211] wcscmp (_String1="J0222015.WMF", _String2="..") returned 1 [0153.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f998 [0153.212] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.212] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.212] wcscat (in: _Dest=0x3e1f998, _Source="J0222015.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" [0153.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0153.213] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1512e800, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1512e800, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0153.213] wcscmp (_String1="J0222017.WMF", _String2=".") returned 1 [0153.213] wcscmp (_String1="J0222017.WMF", _String2="..") returned 1 [0153.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ecd8 [0153.214] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.214] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.214] wcscat (in: _Dest=0x3e1ecd8, _Source="J0222017.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" [0153.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0153.215] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17754200, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17754200, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0153.215] wcscmp (_String1="J0222019.WMF", _String2=".") returned 1 [0153.215] wcscmp (_String1="J0222019.WMF", _String2="..") returned 1 [0153.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f6f0 [0153.215] wcscpy (in: _Dest=0x3e1f6f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.215] wcscat (in: _Dest=0x3e1f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.215] wcscat (in: _Dest=0x3e1f6f0, _Source="J0222019.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" [0153.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0153.216] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b08c900, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b08c900, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0153.216] wcscmp (_String1="J0222021.WMF", _String2=".") returned 1 [0153.216] wcscmp (_String1="J0222021.WMF", _String2="..") returned 1 [0153.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f1a0 [0153.216] wcscpy (in: _Dest=0x3e1f1a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.216] wcscat (in: _Dest=0x3e1f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.217] wcscat (in: _Dest=0x3e1f1a0, _Source="J0222021.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" [0153.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0153.218] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f5e00, ftCreationTime.dwHighDateTime=0x1be8670, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x103f5e00, ftLastWriteTime.dwHighDateTime=0x1be8670, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0153.218] wcscmp (_String1="J0229385.WMF", _String2=".") returned 1 [0153.218] wcscmp (_String1="J0229385.WMF", _String2="..") returned 1 [0153.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e202a0 [0153.218] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.218] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.218] wcscat (in: _Dest=0x3e202a0, _Source="J0229385.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" [0153.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0153.219] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11708b00, ftCreationTime.dwHighDateTime=0x1be8670, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x11708b00, ftLastWriteTime.dwHighDateTime=0x1be8670, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0153.219] wcscmp (_String1="J0229389.WMF", _String2=".") returned 1 [0153.219] wcscmp (_String1="J0229389.WMF", _String2="..") returned 1 [0153.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ff70 [0153.219] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.219] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.219] wcscat (in: _Dest=0x3e1ff70, _Source="J0229389.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" [0153.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0153.220] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b2900, ftCreationTime.dwHighDateTime=0x1bc8349, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x50b2900, ftLastWriteTime.dwHighDateTime=0x1bc8349, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0153.220] wcscmp (_String1="J0230876.WMF", _String2=".") returned 1 [0153.220] wcscmp (_String1="J0230876.WMF", _String2="..") returned 1 [0153.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf448 [0153.221] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.221] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.221] wcscat (in: _Dest=0x81bf448, _Source="J0230876.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" [0153.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0153.222] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41169900, ftCreationTime.dwHighDateTime=0x1be51d0, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x41169900, ftLastWriteTime.dwHighDateTime=0x1be51d0, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0153.222] wcscmp (_String1="J0233018.WMF", _String2=".") returned 1 [0153.222] wcscmp (_String1="J0233018.WMF", _String2="..") returned 1 [0153.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf4d0 [0153.222] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.222] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.222] wcscat (in: _Dest=0x81bf4d0, _Source="J0233018.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" [0153.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0153.223] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd178a200, ftCreationTime.dwHighDateTime=0x1be1bbf, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd178a200, ftLastWriteTime.dwHighDateTime=0x1be1bbf, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0153.224] wcscmp (_String1="J0233070.WMF", _String2=".") returned 1 [0153.224] wcscmp (_String1="J0233070.WMF", _String2="..") returned 1 [0153.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf558 [0153.224] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.224] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.224] wcscat (in: _Dest=0x81bf558, _Source="J0233070.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" [0153.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0153.225] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc080e00, ftCreationTime.dwHighDateTime=0x1be5751, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc080e00, ftLastWriteTime.dwHighDateTime=0x1be5751, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0153.225] wcscmp (_String1="J0233312.WMF", _String2=".") returned 1 [0153.225] wcscmp (_String1="J0233312.WMF", _String2="..") returned 1 [0153.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf5e0 [0153.225] wcscpy (in: _Dest=0x81bf5e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.225] wcscat (in: _Dest=0x81bf5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.225] wcscat (in: _Dest=0x81bf5e0, _Source="J0233312.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" [0153.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0153.226] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92e0c00, ftCreationTime.dwHighDateTime=0x1be80f8, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb92e0c00, ftLastWriteTime.dwHighDateTime=0x1be80f8, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0153.227] wcscmp (_String1="J0234131.WMF", _String2=".") returned 1 [0153.227] wcscmp (_String1="J0234131.WMF", _String2="..") returned 1 [0153.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf668 [0153.227] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.227] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.227] wcscat (in: _Dest=0x81bf668, _Source="J0234131.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" [0153.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0153.228] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4aa200, ftCreationTime.dwHighDateTime=0x1be804d, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdf4aa200, ftLastWriteTime.dwHighDateTime=0x1be804d, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0153.228] wcscmp (_String1="J0234266.WMF", _String2=".") returned 1 [0153.228] wcscmp (_String1="J0234266.WMF", _String2="..") returned 1 [0153.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf6f0 [0153.228] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.228] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.228] wcscat (in: _Dest=0x81bf6f0, _Source="J0234266.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" [0153.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0153.229] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96382e00, ftCreationTime.dwHighDateTime=0x1be7609, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96382e00, ftLastWriteTime.dwHighDateTime=0x1be7609, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0153.229] wcscmp (_String1="J0234657.WMF", _String2=".") returned 1 [0153.229] wcscmp (_String1="J0234657.WMF", _String2="..") returned 1 [0153.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf778 [0153.230] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.230] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.230] wcscat (in: _Dest=0x81bf778, _Source="J0234657.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" [0153.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0153.231] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f239500, ftCreationTime.dwHighDateTime=0x1bf2c4b, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5f239500, ftLastWriteTime.dwHighDateTime=0x1bf2c4b, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0153.231] wcscmp (_String1="J0234687.GIF", _String2=".") returned 1 [0153.231] wcscmp (_String1="J0234687.GIF", _String2="..") returned 1 [0153.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf800 [0153.231] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.231] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.231] wcscat (in: _Dest=0x81bf800, _Source="J0234687.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" [0153.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0153.232] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b4d00, ftCreationTime.dwHighDateTime=0x1be9184, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1a8b4d00, ftLastWriteTime.dwHighDateTime=0x1be9184, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0153.232] wcscmp (_String1="J0235241.WMF", _String2=".") returned 1 [0153.232] wcscmp (_String1="J0235241.WMF", _String2="..") returned 1 [0153.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf888 [0153.232] wcscpy (in: _Dest=0x81bf888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.233] wcscat (in: _Dest=0x81bf888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.233] wcscat (in: _Dest=0x81bf888, _Source="J0235241.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" [0153.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0153.234] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99fa4b00, ftCreationTime.dwHighDateTime=0x1c03781, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99fa4b00, ftLastWriteTime.dwHighDateTime=0x1c03781, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0153.234] wcscmp (_String1="J0235319.WMF", _String2=".") returned 1 [0153.234] wcscmp (_String1="J0235319.WMF", _String2="..") returned 1 [0153.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf910 [0153.234] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.234] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.234] wcscat (in: _Dest=0x81bf910, _Source="J0235319.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" [0153.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0153.240] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f26800, ftCreationTime.dwHighDateTime=0x1be9d3e, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x45f26800, ftLastWriteTime.dwHighDateTime=0x1be9d3e, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0153.240] wcscmp (_String1="J0240695.WMF", _String2=".") returned 1 [0153.240] wcscmp (_String1="J0240695.WMF", _String2="..") returned 1 [0153.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf998 [0153.240] wcscpy (in: _Dest=0x81bf998, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.241] wcscat (in: _Dest=0x81bf998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.241] wcscat (in: _Dest=0x81bf998, _Source="J0240695.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" [0153.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0153.242] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a2de00, ftCreationTime.dwHighDateTime=0x1be9d3e, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56a2de00, ftLastWriteTime.dwHighDateTime=0x1be9d3e, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240719.WMF", cAlternateFileName="")) returned 1 [0153.743] wcscmp (_String1="J0240719.WMF", _String2=".") returned 1 [0153.743] wcscmp (_String1="J0240719.WMF", _String2="..") returned 1 [0153.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfa20 [0153.743] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0153.743] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0153.743] wcscat (in: _Dest=0x81bfa20, _Source="J0240719.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" [0154.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2648 [0154.843] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe0d7700, ftCreationTime.dwHighDateTime=0x1beb358, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe0d7700, ftLastWriteTime.dwHighDateTime=0x1beb358, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251301.WMF", cAlternateFileName="")) returned 1 [0154.843] wcscmp (_String1="J0251301.WMF", _String2=".") returned 1 [0154.843] wcscmp (_String1="J0251301.WMF", _String2="..") returned 1 [0154.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053280 [0154.843] wcscpy (in: _Dest=0x8053280, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.843] wcscat (in: _Dest=0x8053280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.843] wcscat (in: _Dest=0x8053280, _Source="J0251301.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" [0154.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264c [0154.844] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa46d2f00, ftCreationTime.dwHighDateTime=0x1beb35a, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa46d2f00, ftLastWriteTime.dwHighDateTime=0x1beb35a, nFileSizeHigh=0x0, nFileSizeLow=0x1232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251871.WMF", cAlternateFileName="")) returned 1 [0154.845] wcscmp (_String1="J0251871.WMF", _String2=".") returned 1 [0154.845] wcscmp (_String1="J0251871.WMF", _String2="..") returned 1 [0154.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053da8 [0154.845] wcscpy (in: _Dest=0x8053da8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.845] wcscat (in: _Dest=0x8053da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.845] wcscat (in: _Dest=0x8053da8, _Source="J0251871.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" [0154.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2650 [0154.846] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2eb0a00, ftCreationTime.dwHighDateTime=0x1beb35a, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2eb0a00, ftLastWriteTime.dwHighDateTime=0x1beb35a, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251925.WMF", cAlternateFileName="")) returned 1 [0154.846] wcscmp (_String1="J0251925.WMF", _String2=".") returned 1 [0154.846] wcscmp (_String1="J0251925.WMF", _String2="..") returned 1 [0154.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053390 [0154.846] wcscpy (in: _Dest=0x8053390, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.846] wcscat (in: _Dest=0x8053390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.846] wcscat (in: _Dest=0x8053390, _Source="J0251925.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" [0154.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2654 [0154.848] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c2c800, ftCreationTime.dwHighDateTime=0x1beb35c, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90c2c800, ftLastWriteTime.dwHighDateTime=0x1beb35c, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252349.WMF", cAlternateFileName="")) returned 1 [0154.848] wcscmp (_String1="J0252349.WMF", _String2=".") returned 1 [0154.848] wcscmp (_String1="J0252349.WMF", _String2="..") returned 1 [0154.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36fc60 [0154.848] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.848] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.848] wcscat (in: _Dest=0x36fc60, _Source="J0252349.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" [0154.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2658 [0154.849] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5140000, ftCreationTime.dwHighDateTime=0x1becd2e, ftLastAccessTime.dwLowDateTime=0xbe1dda10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5140000, ftLastWriteTime.dwHighDateTime=0x1becd2e, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278882.WMF", cAlternateFileName="")) returned 1 [0154.849] wcscmp (_String1="J0278882.WMF", _String2=".") returned 1 [0154.849] wcscmp (_String1="J0278882.WMF", _String2="..") returned 1 [0154.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e588 [0154.849] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.850] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.850] wcscat (in: _Dest=0x36e588, _Source="J0278882.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" [0154.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x265c [0154.851] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8205a800, ftCreationTime.dwHighDateTime=0x1bee4a8, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8205a800, ftLastWriteTime.dwHighDateTime=0x1bee4a8, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281904.WMF", cAlternateFileName="")) returned 1 [0154.851] wcscmp (_String1="J0281904.WMF", _String2=".") returned 1 [0154.851] wcscmp (_String1="J0281904.WMF", _String2="..") returned 1 [0154.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e830 [0154.851] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.851] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.851] wcscat (in: _Dest=0x36e830, _Source="J0281904.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" [0154.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2660 [0154.853] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d9d200, ftCreationTime.dwHighDateTime=0x1bed43e, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76d9d200, ftLastWriteTime.dwHighDateTime=0x1bed43e, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0283209.GIF", cAlternateFileName="")) returned 1 [0154.853] wcscmp (_String1="J0283209.GIF", _String2=".") returned 1 [0154.853] wcscmp (_String1="J0283209.GIF", _String2="..") returned 1 [0154.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e500 [0154.853] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.853] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.853] wcscat (in: _Dest=0x36e500, _Source="J0283209.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" [0154.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2664 [0154.854] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ce31400, ftCreationTime.dwHighDateTime=0x1bea231, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ce31400, ftLastWriteTime.dwHighDateTime=0x1bea231, nFileSizeHigh=0x0, nFileSizeLow=0x62e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0284916.JPG", cAlternateFileName="")) returned 1 [0154.854] wcscmp (_String1="J0284916.JPG", _String2=".") returned 1 [0154.854] wcscmp (_String1="J0284916.JPG", _String2="..") returned 1 [0154.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36ecf8 [0154.854] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.854] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.854] wcscat (in: _Dest=0x36ecf8, _Source="J0284916.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" [0154.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2668 [0154.856] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc0a300, ftCreationTime.dwHighDateTime=0x1befdde, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3bc0a300, ftLastWriteTime.dwHighDateTime=0x1befdde, nFileSizeHigh=0x0, nFileSizeLow=0x7876, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285360.WMF", cAlternateFileName="")) returned 1 [0154.856] wcscmp (_String1="J0285360.WMF", _String2=".") returned 1 [0154.856] wcscmp (_String1="J0285360.WMF", _String2="..") returned 1 [0154.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36ead8 [0154.856] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.856] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.856] wcscat (in: _Dest=0x36ead8, _Source="J0285360.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" [0154.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x266c [0154.857] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6fab00, ftCreationTime.dwHighDateTime=0x1befdde, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b6fab00, ftLastWriteTime.dwHighDateTime=0x1befdde, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285410.WMF", cAlternateFileName="")) returned 1 [0154.857] wcscmp (_String1="J0285410.WMF", _String2=".") returned 1 [0154.857] wcscmp (_String1="J0285410.WMF", _String2="..") returned 1 [0154.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e478 [0154.857] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.858] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.858] wcscat (in: _Dest=0x36e478, _Source="J0285410.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" [0154.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2670 [0154.859] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb23a00, ftCreationTime.dwHighDateTime=0x1befdde, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9eb23a00, ftLastWriteTime.dwHighDateTime=0x1befdde, nFileSizeHigh=0x0, nFileSizeLow=0x2448, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285444.WMF", cAlternateFileName="")) returned 1 [0154.859] wcscmp (_String1="J0285444.WMF", _String2=".") returned 1 [0154.859] wcscmp (_String1="J0285444.WMF", _String2="..") returned 1 [0154.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x309a5f8 [0154.859] wcscpy (in: _Dest=0x309a5f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.859] wcscat (in: _Dest=0x309a5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.859] wcscat (in: _Dest=0x309a5f8, _Source="J0285444.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" [0154.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2674 [0154.860] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2715300, ftCreationTime.dwHighDateTime=0x1befddf, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2715300, ftLastWriteTime.dwHighDateTime=0x1befddf, nFileSizeHigh=0x0, nFileSizeLow=0x2a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285698.WMF", cAlternateFileName="")) returned 1 [0154.860] wcscmp (_String1="J0285698.WMF", _String2=".") returned 1 [0154.860] wcscmp (_String1="J0285698.WMF", _String2="..") returned 1 [0154.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x309a708 [0154.860] wcscpy (in: _Dest=0x309a708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.860] wcscat (in: _Dest=0x309a708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.860] wcscat (in: _Dest=0x309a708, _Source="J0285698.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" [0154.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2678 [0154.862] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3401fe00, ftCreationTime.dwHighDateTime=0x1befde0, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1befde0, nFileSizeHigh=0x0, nFileSizeLow=0x958c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285750.WMF", cAlternateFileName="")) returned 1 [0154.862] wcscmp (_String1="J0285750.WMF", _String2=".") returned 1 [0154.862] wcscmp (_String1="J0285750.WMF", _String2="..") returned 1 [0154.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e678c8 [0154.862] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.862] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.862] wcscat (in: _Dest=0x3e678c8, _Source="J0285750.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" [0154.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x267c [0154.863] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac56100, ftCreationTime.dwHighDateTime=0x1befde1, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2ac56100, ftLastWriteTime.dwHighDateTime=0x1befde1, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285926.WMF", cAlternateFileName="")) returned 1 [0154.863] wcscmp (_String1="J0285926.WMF", _String2=".") returned 1 [0154.863] wcscmp (_String1="J0285926.WMF", _String2="..") returned 1 [0154.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3062c30 [0154.863] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.863] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.863] wcscat (in: _Dest=0x3062c30, _Source="J0285926.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" [0154.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2680 [0154.864] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547e8800, ftCreationTime.dwHighDateTime=0x1befde1, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x547e8800, ftLastWriteTime.dwHighDateTime=0x1befde1, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286034.WMF", cAlternateFileName="")) returned 1 [0154.864] wcscmp (_String1="J0286034.WMF", _String2=".") returned 1 [0154.864] wcscmp (_String1="J0286034.WMF", _String2="..") returned 1 [0154.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d2458 [0154.865] wcscpy (in: _Dest=0x81d2458, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.865] wcscat (in: _Dest=0x81d2458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.865] wcscat (in: _Dest=0x81d2458, _Source="J0286034.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" [0154.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2684 [0154.866] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b24df00, ftCreationTime.dwHighDateTime=0x1befde1, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b24df00, ftLastWriteTime.dwHighDateTime=0x1befde1, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286068.WMF", cAlternateFileName="")) returned 1 [0154.866] wcscmp (_String1="J0286068.WMF", _String2=".") returned 1 [0154.866] wcscmp (_String1="J0286068.WMF", _String2="..") returned 1 [0154.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d24e0 [0154.866] wcscpy (in: _Dest=0x81d24e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.866] wcscat (in: _Dest=0x81d24e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.866] wcscat (in: _Dest=0x81d24e0, _Source="J0286068.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" [0154.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d24e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2688 [0154.867] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f367c00, ftCreationTime.dwHighDateTime=0x1bef5df, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f367c00, ftLastWriteTime.dwHighDateTime=0x1bef5df, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287005.WMF", cAlternateFileName="")) returned 1 [0154.867] wcscmp (_String1="J0287005.WMF", _String2=".") returned 1 [0154.867] wcscmp (_String1="J0287005.WMF", _String2="..") returned 1 [0154.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d2568 [0154.867] wcscpy (in: _Dest=0x81d2568, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.867] wcscat (in: _Dest=0x81d2568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.867] wcscat (in: _Dest=0x81d2568, _Source="J0287005.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" [0154.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x268c [0154.868] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c15400, ftCreationTime.dwHighDateTime=0x1bf1586, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x29c15400, ftLastWriteTime.dwHighDateTime=0x1bf1586, nFileSizeHigh=0x0, nFileSizeLow=0x76ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291984.WMF", cAlternateFileName="")) returned 1 [0154.869] wcscmp (_String1="J0291984.WMF", _String2=".") returned 1 [0154.869] wcscmp (_String1="J0291984.WMF", _String2="..") returned 1 [0154.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d25f0 [0154.869] wcscpy (in: _Dest=0x81d25f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.869] wcscat (in: _Dest=0x81d25f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.869] wcscat (in: _Dest=0x81d25f0, _Source="J0291984.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" [0154.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d25f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2690 [0154.870] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e351000, ftCreationTime.dwHighDateTime=0x1bf1586, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e351000, ftLastWriteTime.dwHighDateTime=0x1bf1586, nFileSizeHigh=0x0, nFileSizeLow=0x7148, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292020.WMF", cAlternateFileName="")) returned 1 [0154.870] wcscmp (_String1="J0292020.WMF", _String2=".") returned 1 [0154.870] wcscmp (_String1="J0292020.WMF", _String2="..") returned 1 [0154.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d2678 [0154.870] wcscpy (in: _Dest=0x81d2678, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.870] wcscat (in: _Dest=0x81d2678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.870] wcscat (in: _Dest=0x81d2678, _Source="J0292020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" [0154.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2694 [0154.871] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0253900, ftCreationTime.dwHighDateTime=0x1bf1586, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe0253900, ftLastWriteTime.dwHighDateTime=0x1bf1586, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292152.WMF", cAlternateFileName="")) returned 1 [0154.871] wcscmp (_String1="J0292152.WMF", _String2=".") returned 1 [0154.871] wcscmp (_String1="J0292152.WMF", _String2="..") returned 1 [0154.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d2700 [0154.871] wcscpy (in: _Dest=0x81d2700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.871] wcscat (in: _Dest=0x81d2700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.871] wcscat (in: _Dest=0x81d2700, _Source="J0292152.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" [0154.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2698 [0154.872] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddeae800, ftCreationTime.dwHighDateTime=0x1bf1708, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xddeae800, ftLastWriteTime.dwHighDateTime=0x1bf1708, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292982.WMF", cAlternateFileName="")) returned 1 [0154.872] wcscmp (_String1="J0292982.WMF", _String2=".") returned 1 [0154.872] wcscmp (_String1="J0292982.WMF", _String2="..") returned 1 [0154.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d2788 [0154.872] wcscpy (in: _Dest=0x81d2788, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.872] wcscat (in: _Dest=0x81d2788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.872] wcscat (in: _Dest=0x81d2788, _Source="J0292982.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" [0154.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x269c [0154.873] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302c0900, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x302c0900, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293234.WMF", cAlternateFileName="")) returned 1 [0154.874] wcscmp (_String1="J0293234.WMF", _String2=".") returned 1 [0154.874] wcscmp (_String1="J0293234.WMF", _String2="..") returned 1 [0154.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d2810 [0154.874] wcscpy (in: _Dest=0x81d2810, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.874] wcscat (in: _Dest=0x81d2810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.874] wcscat (in: _Dest=0x81d2810, _Source="J0293234.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" [0154.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a0 [0154.875] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302c0900, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x302c0900, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293236.WMF", cAlternateFileName="")) returned 1 [0154.875] wcscmp (_String1="J0293236.WMF", _String2=".") returned 1 [0154.875] wcscmp (_String1="J0293236.WMF", _String2="..") returned 1 [0154.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d2898 [0154.875] wcscpy (in: _Dest=0x81d2898, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.875] wcscat (in: _Dest=0x81d2898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.875] wcscat (in: _Dest=0x81d2898, _Source="J0293236.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" [0154.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a4 [0154.876] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302c0900, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x302c0900, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293238.WMF", cAlternateFileName="")) returned 1 [0154.876] wcscmp (_String1="J0293238.WMF", _String2=".") returned 1 [0154.876] wcscmp (_String1="J0293238.WMF", _String2="..") returned 1 [0154.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d2920 [0154.877] wcscpy (in: _Dest=0x81d2920, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.877] wcscat (in: _Dest=0x81d2920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.877] wcscat (in: _Dest=0x81d2920, _Source="J0293238.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" [0154.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a8 [0154.878] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315d3600, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x315d3600, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293240.WMF", cAlternateFileName="")) returned 1 [0154.878] wcscmp (_String1="J0293240.WMF", _String2=".") returned 1 [0154.878] wcscmp (_String1="J0293240.WMF", _String2="..") returned 1 [0154.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d29a8 [0154.878] wcscpy (in: _Dest=0x81d29a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.878] wcscat (in: _Dest=0x81d29a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.878] wcscat (in: _Dest=0x81d29a8, _Source="J0293240.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" [0154.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d29a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26ac [0154.879] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde7d00, ftCreationTime.dwHighDateTime=0x1bf1587, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdcde7d00, ftLastWriteTime.dwHighDateTime=0x1bf1587, nFileSizeHigh=0x0, nFileSizeLow=0x92c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293570.WMF", cAlternateFileName="")) returned 1 [0154.879] wcscmp (_String1="J0293570.WMF", _String2=".") returned 1 [0154.879] wcscmp (_String1="J0293570.WMF", _String2="..") returned 1 [0154.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d2a30 [0154.879] wcscpy (in: _Dest=0x81d2a30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0154.879] wcscat (in: _Dest=0x81d2a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0154.879] wcscat (in: _Dest=0x81d2a30, _Source="J0293570.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" [0154.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26b0 [0155.229] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c5f500, ftCreationTime.dwHighDateTime=0x1bf1588, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x45c5f500, ftLastWriteTime.dwHighDateTime=0x1bf1588, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293828.WMF", cAlternateFileName="")) returned 1 [0155.229] wcscmp (_String1="J0293828.WMF", _String2=".") returned 1 [0155.230] wcscmp (_String1="J0293828.WMF", _String2="..") returned 1 [0155.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf3c0 [0155.230] wcscpy (in: _Dest=0x81bf3c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0155.230] wcscat (in: _Dest=0x81bf3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0155.230] wcscat (in: _Dest=0x81bf3c0, _Source="J0293828.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" [0159.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf")) returned 0x20 [0162.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF", dwFileAttributes=0x20) returned 0 [0162.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.523] GetLastError () returned 0x5 [0162.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF", dwFileAttributes=0x20) returned 0 [0162.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf3c0) returned 1 [0162.523] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ced0300, ftCreationTime.dwHighDateTime=0x1bf1588, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ced0300, ftLastWriteTime.dwHighDateTime=0x1bf1588, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293844.WMF", cAlternateFileName="")) returned 1 [0162.523] wcscmp (_String1="J0293844.WMF", _String2=".") returned 1 [0162.524] wcscmp (_String1="J0293844.WMF", _String2="..") returned 1 [0162.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf3c0 [0162.524] wcscpy (in: _Dest=0x81bf3c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0162.524] wcscat (in: _Dest=0x81bf3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0162.524] wcscat (in: _Dest=0x81bf3c0, _Source="J0293844.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" [0163.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bec [0163.114] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8116d00, ftCreationTime.dwHighDateTime=0x1bf08f6, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8116d00, ftLastWriteTime.dwHighDateTime=0x1bf08f6, nFileSizeHigh=0x0, nFileSizeLow=0x29e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295241.GIF", cAlternateFileName="")) returned 1 [0163.114] wcscmp (_String1="J0295241.GIF", _String2=".") returned 1 [0163.114] wcscmp (_String1="J0295241.GIF", _String2="..") returned 1 [0163.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81c0080 [0163.114] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0163.114] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0163.114] wcscat (in: _Dest=0x81c0080, _Source="J0295241.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" [0163.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b5c [0163.115] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10810400, ftCreationTime.dwHighDateTime=0x1bf2cfa, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10810400, ftLastWriteTime.dwHighDateTime=0x1bf2cfa, nFileSizeHigh=0x0, nFileSizeLow=0xcd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297185.WMF", cAlternateFileName="")) returned 1 [0163.115] wcscmp (_String1="J0297185.WMF", _String2=".") returned 1 [0163.115] wcscmp (_String1="J0297185.WMF", _String2="..") returned 1 [0163.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf2b0 [0163.115] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0163.116] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0163.116] wcscat (in: _Dest=0x81bf2b0, _Source="J0297185.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" [0163.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2678 [0163.117] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f38c00, ftCreationTime.dwHighDateTime=0x1bf2cfc, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9f38c00, ftLastWriteTime.dwHighDateTime=0x1bf2cfc, nFileSizeHigh=0x0, nFileSizeLow=0x6db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297551.WMF", cAlternateFileName="")) returned 1 [0163.117] wcscmp (_String1="J0297551.WMF", _String2=".") returned 1 [0163.117] wcscmp (_String1="J0297551.WMF", _String2="..") returned 1 [0163.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81beef8 [0163.117] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0163.117] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0163.117] wcscat (in: _Dest=0x81beef8, _Source="J0297551.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" [0163.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2674 [0163.118] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54be400, ftCreationTime.dwHighDateTime=0x1bf2cfc, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe54be400, ftLastWriteTime.dwHighDateTime=0x1bf2cfc, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297707.WMF", cAlternateFileName="")) returned 1 [0163.118] wcscmp (_String1="J0297707.WMF", _String2=".") returned 1 [0163.118] wcscmp (_String1="J0297707.WMF", _String2="..") returned 1 [0163.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf1a0 [0163.118] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0163.118] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0163.118] wcscat (in: _Dest=0x81bf1a0, _Source="J0297707.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" [0163.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2670 [0163.119] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bfa000, ftCreationTime.dwHighDateTime=0x1bf2cfd, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19bfa000, ftLastWriteTime.dwHighDateTime=0x1bf2cfd, nFileSizeHigh=0x0, nFileSizeLow=0x27ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297749.WMF", cAlternateFileName="")) returned 1 [0163.119] wcscmp (_String1="J0297749.WMF", _String2=".") returned 1 [0163.119] wcscmp (_String1="J0297749.WMF", _String2="..") returned 1 [0163.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfd50 [0163.119] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0163.119] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0163.119] wcscat (in: _Dest=0x81bfd50, _Source="J0297749.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" [0163.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x266c [0163.120] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4372ca00, ftCreationTime.dwHighDateTime=0x1bf2cf1, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4372ca00, ftLastWriteTime.dwHighDateTime=0x1bf2cf1, nFileSizeHigh=0x0, nFileSizeLow=0x197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298653.WMF", cAlternateFileName="")) returned 1 [0163.122] wcscmp (_String1="J0298653.WMF", _String2=".") returned 1 [0163.122] wcscmp (_String1="J0298653.WMF", _String2="..") returned 1 [0163.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf888 [0163.122] wcscpy (in: _Dest=0x81bf888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0163.122] wcscat (in: _Dest=0x81bf888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0163.122] wcscat (in: _Dest=0x81bf888, _Source="J0298653.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" [0164.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0164.550] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3009900, ftCreationTime.dwHighDateTime=0x1bf2cf1, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc3009900, ftLastWriteTime.dwHighDateTime=0x1bf2cf1, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298897.WMF", cAlternateFileName="")) returned 1 [0164.550] wcscmp (_String1="J0298897.WMF", _String2=".") returned 1 [0164.550] wcscmp (_String1="J0298897.WMF", _String2="..") returned 1 [0164.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf800 [0164.550] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.550] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.550] wcscat (in: _Dest=0x81bf800, _Source="J0298897.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" [0164.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0164.551] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab2f1200, ftCreationTime.dwHighDateTime=0x1bf2cfd, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab2f1200, ftLastWriteTime.dwHighDateTime=0x1bf2cfd, nFileSizeHigh=0x0, nFileSizeLow=0x163c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299125.WMF", cAlternateFileName="")) returned 1 [0164.551] wcscmp (_String1="J0299125.WMF", _String2=".") returned 1 [0164.551] wcscmp (_String1="J0299125.WMF", _String2="..") returned 1 [0164.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be9a8 [0164.551] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.551] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.551] wcscat (in: _Dest=0x81be9a8, _Source="J0299125.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" [0164.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29cc [0164.552] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc8ffe00, ftCreationTime.dwHighDateTime=0x1bf2cfd, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc8ffe00, ftLastWriteTime.dwHighDateTime=0x1bf2cfd, nFileSizeHigh=0x0, nFileSizeLow=0x23b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299171.WMF", cAlternateFileName="")) returned 1 [0164.552] wcscmp (_String1="J0299171.WMF", _String2=".") returned 1 [0164.552] wcscmp (_String1="J0299171.WMF", _String2="..") returned 1 [0164.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bef80 [0164.552] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.552] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.552] wcscat (in: _Dest=0x81bef80, _Source="J0299171.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" [0164.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0164.553] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c44100, ftCreationTime.dwHighDateTime=0x1bf2cff, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35c44100, ftLastWriteTime.dwHighDateTime=0x1bf2cff, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299587.WMF", cAlternateFileName="")) returned 1 [0164.554] wcscmp (_String1="J0299587.WMF", _String2=".") returned 1 [0164.554] wcscmp (_String1="J0299587.WMF", _String2="..") returned 1 [0164.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfcc8 [0164.554] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.554] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.554] wcscat (in: _Dest=0x81bfcc8, _Source="J0299587.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" [0164.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c8 [0164.555] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52607900, ftCreationTime.dwHighDateTime=0x1bf2cff, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52607900, ftLastWriteTime.dwHighDateTime=0x1bf2cff, nFileSizeHigh=0x0, nFileSizeLow=0x1310, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299611.WMF", cAlternateFileName="")) returned 1 [0164.555] wcscmp (_String1="J0299611.WMF", _String2=".") returned 1 [0164.555] wcscmp (_String1="J0299611.WMF", _String2="..") returned 1 [0164.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfc40 [0164.555] wcscpy (in: _Dest=0x81bfc40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.555] wcscat (in: _Dest=0x81bfc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.555] wcscat (in: _Dest=0x81bfc40, _Source="J0299611.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" [0164.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0164.556] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34f3400, ftCreationTime.dwHighDateTime=0x1bf2cff, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf34f3400, ftLastWriteTime.dwHighDateTime=0x1bf2cff, nFileSizeHigh=0x0, nFileSizeLow=0x4322, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299763.WMF", cAlternateFileName="")) returned 1 [0164.556] wcscmp (_String1="J0299763.WMF", _String2=".") returned 1 [0164.556] wcscmp (_String1="J0299763.WMF", _String2="..") returned 1 [0164.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81c03b0 [0164.556] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.556] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.556] wcscat (in: _Dest=0x81c03b0, _Source="J0299763.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" [0164.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0164.557] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85856500, ftCreationTime.dwHighDateTime=0x1bf3a80, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x85856500, ftLastWriteTime.dwHighDateTime=0x1bf3a80, nFileSizeHigh=0x0, nFileSizeLow=0x3465, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300520.GIF", cAlternateFileName="")) returned 1 [0164.557] wcscmp (_String1="J0300520.GIF", _String2=".") returned 1 [0164.557] wcscmp (_String1="J0300520.GIF", _String2="..") returned 1 [0164.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf778 [0164.557] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.558] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.558] wcscat (in: _Dest=0x81bf778, _Source="J0300520.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" [0164.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0164.558] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eeaf300, ftCreationTime.dwHighDateTime=0x1bf4591, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8eeaf300, ftLastWriteTime.dwHighDateTime=0x1bf4591, nFileSizeHigh=0x0, nFileSizeLow=0x239c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300840.WMF", cAlternateFileName="")) returned 1 [0164.559] wcscmp (_String1="J0300840.WMF", _String2=".") returned 1 [0164.559] wcscmp (_String1="J0300840.WMF", _String2="..") returned 1 [0164.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf668 [0164.559] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.559] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.559] wcscat (in: _Dest=0x81bf668, _Source="J0300840.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" [0164.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0164.560] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a13e00, ftCreationTime.dwHighDateTime=0x1bf4591, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf6a13e00, ftLastWriteTime.dwHighDateTime=0x1bf4591, nFileSizeHigh=0x0, nFileSizeLow=0xdafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300912.WMF", cAlternateFileName="")) returned 1 [0164.560] wcscmp (_String1="J0300912.WMF", _String2=".") returned 1 [0164.560] wcscmp (_String1="J0300912.WMF", _String2="..") returned 1 [0164.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf5e0 [0164.560] wcscpy (in: _Dest=0x81bf5e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.560] wcscat (in: _Dest=0x81bf5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.560] wcscat (in: _Dest=0x81bf5e0, _Source="J0300912.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" [0164.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b4 [0164.561] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9068eb00, ftCreationTime.dwHighDateTime=0x1bf4592, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9068eb00, ftLastWriteTime.dwHighDateTime=0x1bf4592, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301050.WMF", cAlternateFileName="")) returned 1 [0164.561] wcscmp (_String1="J0301050.WMF", _String2=".") returned 1 [0164.561] wcscmp (_String1="J0301050.WMF", _String2="..") returned 1 [0164.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf558 [0164.561] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.561] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.561] wcscat (in: _Dest=0x81bf558, _Source="J0301050.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" [0164.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0 [0164.562] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ace800, ftCreationTime.dwHighDateTime=0x1bf4592, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4ace800, ftLastWriteTime.dwHighDateTime=0x1bf4592, nFileSizeHigh=0x0, nFileSizeLow=0x224e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301076.WMF", cAlternateFileName="")) returned 1 [0164.562] wcscmp (_String1="J0301076.WMF", _String2=".") returned 1 [0164.562] wcscmp (_String1="J0301076.WMF", _String2="..") returned 1 [0164.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf448 [0164.562] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.562] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.562] wcscat (in: _Dest=0x81bf448, _Source="J0301076.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" [0164.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0164.563] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e535c00, ftCreationTime.dwHighDateTime=0x1bf4593, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8e535c00, ftLastWriteTime.dwHighDateTime=0x1bf4593, nFileSizeHigh=0x0, nFileSizeLow=0x953a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301252.WMF", cAlternateFileName="")) returned 1 [0164.563] wcscmp (_String1="J0301252.WMF", _String2=".") returned 1 [0164.563] wcscmp (_String1="J0301252.WMF", _String2="..") returned 1 [0164.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfa20 [0164.563] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.563] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.563] wcscat (in: _Dest=0x81bfa20, _Source="J0301252.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" [0164.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ac [0164.564] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8be900, ftCreationTime.dwHighDateTime=0x1bf4594, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a8be900, ftLastWriteTime.dwHighDateTime=0x1bf4594, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301480.WMF", cAlternateFileName="")) returned 1 [0164.564] wcscmp (_String1="J0301480.WMF", _String2=".") returned 1 [0164.564] wcscmp (_String1="J0301480.WMF", _String2="..") returned 1 [0164.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf998 [0164.564] wcscpy (in: _Dest=0x81bf998, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.565] wcscat (in: _Dest=0x81bf998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.565] wcscat (in: _Dest=0x81bf998, _Source="J0301480.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" [0164.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a8 [0164.566] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x640a1d00, ftCreationTime.dwHighDateTime=0x1bf4b04, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x640a1d00, ftLastWriteTime.dwHighDateTime=0x1bf4b04, nFileSizeHigh=0x0, nFileSizeLow=0x5a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302827.JPG", cAlternateFileName="")) returned 1 [0164.566] wcscmp (_String1="J0302827.JPG", _String2=".") returned 1 [0164.566] wcscmp (_String1="J0302827.JPG", _String2="..") returned 1 [0164.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf6f0 [0164.566] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.566] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.566] wcscat (in: _Dest=0x81bf6f0, _Source="J0302827.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" [0164.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0164.567] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8db7b00, ftCreationTime.dwHighDateTime=0x1bf4bc9, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8db7b00, ftLastWriteTime.dwHighDateTime=0x1bf4bc9, nFileSizeHigh=0x0, nFileSizeLow=0x25c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302953.JPG", cAlternateFileName="")) returned 1 [0164.567] wcscmp (_String1="J0302953.JPG", _String2=".") returned 1 [0164.567] wcscmp (_String1="J0302953.JPG", _String2="..") returned 1 [0164.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf4d0 [0164.567] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.567] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.567] wcscat (in: _Dest=0x81bf4d0, _Source="J0302953.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" [0164.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2980 [0164.568] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f39bd00, ftCreationTime.dwHighDateTime=0x1bf4596, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f39bd00, ftLastWriteTime.dwHighDateTime=0x1bf4596, nFileSizeHigh=0x0, nFileSizeLow=0x4d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304933.WMF", cAlternateFileName="")) returned 1 [0164.568] wcscmp (_String1="J0304933.WMF", _String2=".") returned 1 [0164.568] wcscmp (_String1="J0304933.WMF", _String2="..") returned 1 [0164.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfb30 [0164.568] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.568] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.568] wcscat (in: _Dest=0x81bfb30, _Source="J0304933.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" [0164.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x297c [0164.569] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe60600, ftCreationTime.dwHighDateTime=0x1bf4597, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcfe60600, ftLastWriteTime.dwHighDateTime=0x1bf4597, nFileSizeHigh=0x0, nFileSizeLow=0x5af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305257.WMF", cAlternateFileName="")) returned 1 [0164.569] wcscmp (_String1="J0305257.WMF", _String2=".") returned 1 [0164.569] wcscmp (_String1="J0305257.WMF", _String2="..") returned 1 [0164.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf228 [0164.570] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.570] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.570] wcscat (in: _Dest=0x81bf228, _Source="J0305257.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" [0164.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2978 [0164.571] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde80ed00, ftCreationTime.dwHighDateTime=0x1bf4598, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde80ed00, ftLastWriteTime.dwHighDateTime=0x1bf4598, nFileSizeHigh=0x0, nFileSizeLow=0x3372, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305493.WMF", cAlternateFileName="")) returned 1 [0164.571] wcscmp (_String1="J0305493.WMF", _String2=".") returned 1 [0164.571] wcscmp (_String1="J0305493.WMF", _String2="..") returned 1 [0164.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bea30 [0164.571] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.571] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.571] wcscat (in: _Dest=0x81bea30, _Source="J0305493.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" [0164.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2974 [0164.572] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8e6100, ftCreationTime.dwHighDateTime=0x1bf722b, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d8e6100, ftLastWriteTime.dwHighDateTime=0x1bf722b, nFileSizeHigh=0x0, nFileSizeLow=0x60e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315447.JPG", cAlternateFileName="")) returned 1 [0164.572] wcscmp (_String1="J0315447.JPG", _String2=".") returned 1 [0164.572] wcscmp (_String1="J0315447.JPG", _String2="..") returned 1 [0164.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81c02a0 [0164.572] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.572] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.572] wcscat (in: _Dest=0x81c02a0, _Source="J0315447.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" [0164.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2970 [0164.573] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa6fb300, ftCreationTime.dwHighDateTime=0x1bfafbc, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfa6fb300, ftLastWriteTime.dwHighDateTime=0x1bfafbc, nFileSizeHigh=0x0, nFileSizeLow=0x5168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332268.WMF", cAlternateFileName="")) returned 1 [0164.573] wcscmp (_String1="J0332268.WMF", _String2=".") returned 1 [0164.573] wcscmp (_String1="J0332268.WMF", _String2="..") returned 1 [0164.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bee70 [0164.573] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.573] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.573] wcscat (in: _Dest=0x81bee70, _Source="J0332268.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" [0164.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x296c [0164.574] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfba0e000, ftCreationTime.dwHighDateTime=0x1bfafbc, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfba0e000, ftLastWriteTime.dwHighDateTime=0x1bfafbc, nFileSizeHigh=0x0, nFileSizeLow=0x47c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332364.WMF", cAlternateFileName="")) returned 1 [0164.574] wcscmp (_String1="J0332364.WMF", _String2=".") returned 1 [0164.574] wcscmp (_String1="J0332364.WMF", _String2="..") returned 1 [0164.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81beab8 [0164.574] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.574] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.574] wcscat (in: _Dest=0x81beab8, _Source="J0332364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" [0164.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2968 [0164.575] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5afef000, ftCreationTime.dwHighDateTime=0x1bfafbd, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5afef000, ftLastWriteTime.dwHighDateTime=0x1bfafbd, nFileSizeHigh=0x0, nFileSizeLow=0x1f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0335112.WMF", cAlternateFileName="")) returned 1 [0164.575] wcscmp (_String1="J0335112.WMF", _String2=".") returned 1 [0164.575] wcscmp (_String1="J0335112.WMF", _String2="..") returned 1 [0164.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be458 [0164.575] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.576] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.576] wcscat (in: _Dest=0x81be458, _Source="J0335112.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" [0164.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2964 [0164.577] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1394200, ftCreationTime.dwHighDateTime=0x1bfafc0, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1394200, ftLastWriteTime.dwHighDateTime=0x1bfafc0, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 1 [0164.577] wcscmp (_String1="J0336075.WMF", _String2=".") returned 1 [0164.577] wcscmp (_String1="J0336075.WMF", _String2="..") returned 1 [0164.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf910 [0164.577] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0164.577] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0164.577] wcscat (in: _Dest=0x81bf910, _Source="J0336075.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" [0164.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0164.578] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1394200, ftCreationTime.dwHighDateTime=0x1bfafc0, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1394200, ftLastWriteTime.dwHighDateTime=0x1bfafc0, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 0 [0164.578] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0166.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101948) returned 1 [0166.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a0a8) returned 1 [0166.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5240) returned 1 Thread: id = 557 os_tid = 0x614 [0134.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a118 [0134.028] wcscpy (in: _Dest=0x3f3a118, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0134.028] wcscat (in: _Dest=0x3f3a118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0134.029] wcscat (in: _Dest=0x3f3a118, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*" [0134.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101bb0 [0134.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37cd8 [0134.468] wcscmp (_String1=".", _String2=".") returned 0 [0134.468] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.468] wcscmp (_String1="..", _String2=".") returned 1 [0134.468] wcscmp (_String1="..", _String2="..") returned 0 [0134.468] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0134.468] wcscmp (_String1="1033", _String2=".") returned 1 [0134.468] wcscmp (_String1="1033", _String2="..") returned 1 [0134.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e688d0 [0134.468] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0134.468] wcscat (in: _Dest=0x3e688d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0134.468] wcscat (in: _Dest=0x3e688d0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" [0145.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e688d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0145.068] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76b293d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd799b30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP", cAlternateFileName="")) returned 1 [0145.068] wcscmp (_String1="AUTOSHAP", _String2=".") returned 1 [0145.068] wcscmp (_String1="AUTOSHAP", _String2="..") returned 1 [0145.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3db0a88 [0145.068] wcscpy (in: _Dest=0x3db0a88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0145.068] wcscat (in: _Dest=0x3db0a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0145.068] wcscat (in: _Dest=0x3db0a88, _Source="AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0145.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3db0a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0145.069] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS", cAlternateFileName="")) returned 1 [0145.070] wcscmp (_String1="BULLETS", _String2=".") returned 1 [0145.070] wcscmp (_String1="BULLETS", _String2="..") returned 1 [0145.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831a5d8 [0145.070] wcscpy (in: _Dest=0x831a5d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0145.070] wcscat (in: _Dest=0x831a5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0145.070] wcscat (in: _Dest=0x831a5d8, _Source="BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0145.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831a5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0145.071] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES", cAlternateFileName="")) returned 1 [0145.071] wcscmp (_String1="LINES", _String2=".") returned 1 [0145.071] wcscmp (_String1="LINES", _String2="..") returned 1 [0145.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32c28 [0145.072] wcscpy (in: _Dest=0x3f32c28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0145.072] wcscat (in: _Dest=0x3f32c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0145.072] wcscat (in: _Dest=0x3f32c28, _Source="LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0145.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0145.079] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x39a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.DLL", cAlternateFileName="")) returned 1 [0145.079] wcscmp (_String1="OFFICE10.DLL", _String2=".") returned 1 [0145.079] wcscmp (_String1="OFFICE10.DLL", _String2="..") returned 1 [0145.079] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa13e00, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa13e00, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 1 [0145.079] wcscmp (_String1="OFFICE10.MMW", _String2=".") returned 1 [0145.079] wcscmp (_String1="OFFICE10.MMW", _String2="..") returned 1 [0145.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1fbb8 [0145.079] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0145.079] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0145.079] wcscat (in: _Dest=0x3e1fbb8, _Source="OFFICE10.MMW" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" [0145.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0145.081] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa13e00, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa13e00, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 0 [0145.081] FindClose (in: hFindFile=0x3f37cd8 | out: hFindFile=0x3f37cd8) returned 1 [0145.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101bb0) returned 1 [0145.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a118) returned 1 [0145.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39c48) returned 1 Thread: id = 558 os_tid = 0x2c0 [0134.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a188 [0134.029] wcscpy (in: _Dest=0x3f3a188, _Source="C:\\Program Files\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0134.029] wcscat (in: _Dest=0x3f3a188, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\" [0134.029] wcscat (in: _Dest=0x3f3a188, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\*") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\*" [0134.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101e18 [0134.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d98 [0134.031] wcscmp (_String1=".", _String2=".") returned 0 [0134.031] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.031] wcscmp (_String1="..", _String2=".") returned 1 [0134.031] wcscmp (_String1="..", _String2="..") returned 0 [0134.031] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd6dc00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x7022db00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x9fd6dc00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x3cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaucheck.exe", cAlternateFileName="")) returned 1 [0134.031] wcscmp (_String1="jaucheck.exe", _String2=".") returned 1 [0134.031] wcscmp (_String1="jaucheck.exe", _String2="..") returned 1 [0134.031] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d748200, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x7022db00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x9d748200, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureg.exe", cAlternateFileName="")) returned 1 [0134.031] wcscmp (_String1="jaureg.exe", _String2=".") returned 1 [0134.031] wcscmp (_String1="jaureg.exe", _String2="..") returned 1 [0134.031] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b122800, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x9b122800, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x7bd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jucheck.exe", cAlternateFileName="")) returned 1 [0134.031] wcscmp (_String1="jucheck.exe", _String2=".") returned 1 [0134.031] wcscmp (_String1="jucheck.exe", _String2="..") returned 1 [0134.031] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x977ea100, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x977ea100, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x3e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 1 [0134.031] wcscmp (_String1="jusched.exe", _String2=".") returned 1 [0134.031] wcscmp (_String1="jusched.exe", _String2="..") returned 1 [0134.031] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93eb1a00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x93eb1a00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x583, dwReserved0=0x0, dwReserved1=0x0, cFileName="task.xml", cAlternateFileName="")) returned 1 [0134.032] wcscmp (_String1="task.xml", _String2=".") returned 1 [0134.032] wcscmp (_String1="task.xml", _String2="..") returned 1 [0134.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f330d8 [0134.032] wcscpy (in: _Dest=0x3f330d8, _Source="C:\\Program Files\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0134.032] wcscat (in: _Dest=0x3f330d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\" [0134.032] wcscat (in: _Dest=0x3f330d8, _Source="task.xml" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml" [0143.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f330d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0143.469] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93eb1a00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x93eb1a00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 1 [0143.469] wcscmp (_String1="task64.xml", _String2=".") returned 1 [0143.469] wcscmp (_String1="task64.xml", _String2="..") returned 1 [0143.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e241c0 [0143.469] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Program Files\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0143.469] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\" [0143.470] wcscat (in: _Dest=0x3e241c0, _Source="task64.xml" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml" [0143.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e241c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0143.471] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93eb1a00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x93eb1a00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 0 [0143.471] FindClose (in: hFindFile=0x3f37d98 | out: hFindFile=0x3f37d98) returned 1 [0143.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101e18) returned 1 [0143.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a188) returned 1 [0143.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 Thread: id = 559 os_tid = 0x414 [0134.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e681c8 [0134.032] wcscpy (in: _Dest=0x3e681c8, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" [0134.032] wcscat (in: _Dest=0x3e681c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\" [0134.032] wcscat (in: _Dest=0x3e681c8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*" [0134.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8102080 [0134.032] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37958 [0134.033] wcscmp (_String1=".", _String2=".") returned 0 [0134.033] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.033] wcscmp (_String1="..", _String2=".") returned 1 [0134.033] wcscmp (_String1="..", _String2="..") returned 0 [0134.033] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0134.033] wcscmp (_String1="TTS20", _String2=".") returned 1 [0134.033] wcscmp (_String1="TTS20", _String2="..") returned 1 [0134.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24a40 [0134.033] wcscpy (in: _Dest=0x3e24a40, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" [0134.033] wcscat (in: _Dest=0x3e24a40, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\" [0134.033] wcscat (in: _Dest=0x3e24a40, _Source="TTS20" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" [0139.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e24a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0139.575] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0139.575] FindClose (in: hFindFile=0x3f37958 | out: hFindFile=0x3f37958) returned 1 [0139.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8102080) returned 1 [0139.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e681c8) returned 1 [0139.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32bb0) returned 1 Thread: id = 560 os_tid = 0xb08 [0134.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7238 [0134.033] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" [0134.033] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\" [0134.033] wcscat (in: _Dest=0x2c7238, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*" [0134.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0134.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0134.035] wcscmp (_String1=".", _String2=".") returned 0 [0134.035] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.035] wcscmp (_String1="..", _String2=".") returned 1 [0134.035] wcscmp (_String1="..", _String2="..") returned 0 [0134.035] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e3185a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21ca9ab, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21ca9ab, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0134.035] wcscmp (_String1="FrameworkList.xml", _String2=".") returned 1 [0134.036] wcscmp (_String1="FrameworkList.xml", _String2="..") returned 1 [0134.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3330a8 [0134.036] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" [0134.036] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\" [0134.036] wcscat (in: _Dest=0x3330a8, _Source="FrameworkList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" [0139.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0139.577] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e3185a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21ca9ab, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21ca9ab, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0 [0139.577] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0139.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0139.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0139.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c74b8) returned 1 Thread: id = 561 os_tid = 0x7bc [0134.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7738 [0134.036] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" [0134.036] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\" [0134.036] wcscat (in: _Dest=0x2c7738, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*" [0134.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cd58 [0134.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37898 [0134.037] wcscmp (_String1=".", _String2=".") returned 0 [0134.037] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.037] wcscmp (_String1="..", _String2=".") returned 1 [0134.037] wcscmp (_String1="..", _String2="..") returned 0 [0134.037] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0134.037] wcscmp (_String1="Client.xml", _String2=".") returned 1 [0134.037] wcscmp (_String1="Client.xml", _String2="..") returned 1 [0134.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6a20 [0134.037] wcscpy (in: _Dest=0x2ff6a20, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" [0134.037] wcscat (in: _Dest=0x2ff6a20, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\" [0134.037] wcscat (in: _Dest=0x2ff6a20, _Source="Client.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" [0139.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0139.579] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0139.579] FindClose (in: hFindFile=0x3f37898 | out: hFindFile=0x3f37898) returned 1 [0139.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd58) returned 1 [0139.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 [0139.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 562 os_tid = 0x5ec [0134.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 0x20 [0134.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", dwFileAttributes=0x20) returned 0 [0134.374] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.375] GetLastError () returned 0x5 [0134.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", dwFileAttributes=0x20) returned 0 [0134.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d098) returned 1 Thread: id = 563 os_tid = 0x668 [0134.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ba98 [0134.038] wcscpy (in: _Dest=0x3e2ba98, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0134.038] wcscat (in: _Dest=0x3e2ba98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0134.038] wcscat (in: _Dest=0x3e2ba98, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*" [0134.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0134.038] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76724eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85cc4cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38318 [0135.088] wcscmp (_String1=".", _String2=".") returned 0 [0135.089] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76724eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85cc4cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.089] wcscmp (_String1="..", _String2=".") returned 1 [0135.089] wcscmp (_String1="..", _String2="..") returned 0 [0135.089] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x76724eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0135.089] wcscmp (_String1="as80.xsl", _String2=".") returned 1 [0135.089] wcscmp (_String1="as80.xsl", _String2="..") returned 1 [0135.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d530 [0135.089] wcscpy (in: _Dest=0x3e2d530, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0135.089] wcscat (in: _Dest=0x3e2d530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0135.089] wcscat (in: _Dest=0x3e2d530, _Source="as80.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" [0151.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0151.708] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x85c065f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0151.708] wcscmp (_String1="as90.xsl", _String2=".") returned 1 [0151.708] wcscmp (_String1="as90.xsl", _String2="..") returned 1 [0151.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186650 [0151.708] wcscpy (in: _Dest=0x8186650, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0151.708] wcscat (in: _Dest=0x8186650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0151.708] wcscat (in: _Dest=0x8186650, _Source="as90.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" [0151.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0151.709] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54bc00, ftCreationTime.dwHighDateTime=0x1c8dd73, ftLastAccessTime.dwLowDateTime=0x7674b010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d54bc00, ftLastWriteTime.dwHighDateTime=0x1c8dd73, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0151.710] wcscmp (_String1="Informix.xsl", _String2=".") returned 1 [0151.710] wcscmp (_String1="Informix.xsl", _String2="..") returned 1 [0151.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c008 [0151.711] wcscpy (in: _Dest=0x35c008, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0151.711] wcscat (in: _Dest=0x35c008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0151.711] wcscat (in: _Dest=0x35c008, _Source="Informix.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" [0151.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0151.712] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x7674b010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0151.712] wcscmp (_String1="msjet.xsl", _String2=".") returned 1 [0151.712] wcscmp (_String1="msjet.xsl", _String2="..") returned 1 [0151.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187760 [0151.712] wcscpy (in: _Dest=0x8187760, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0151.712] wcscat (in: _Dest=0x8187760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0151.712] wcscat (in: _Dest=0x8187760, _Source="msjet.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" [0151.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0151.714] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0151.714] wcscmp (_String1="sql2000.xsl", _String2=".") returned 1 [0151.714] wcscmp (_String1="sql2000.xsl", _String2="..") returned 1 [0151.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81868f0 [0151.714] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0151.714] wcscat (in: _Dest=0x81868f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0151.714] wcscat (in: _Dest=0x81868f0, _Source="sql2000.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" [0151.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81868f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0151.715] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0151.715] wcscmp (_String1="sql70.xsl", _String2=".") returned 1 [0151.715] wcscmp (_String1="sql70.xsl", _String2="..") returned 1 [0151.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186e30 [0151.715] wcscpy (in: _Dest=0x8186e30, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0151.715] wcscat (in: _Dest=0x8186e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0151.715] wcscat (in: _Dest=0x8186e30, _Source="sql70.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" [0151.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0151.717] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x7674b010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0151.717] wcscmp (_String1="sql90.xsl", _String2=".") returned 1 [0151.717] wcscmp (_String1="sql90.xsl", _String2="..") returned 1 [0151.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186848 [0151.717] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0151.717] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0151.717] wcscat (in: _Dest=0x8186848, _Source="sql90.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" [0151.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0151.718] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54bc00, ftCreationTime.dwHighDateTime=0x1c8dd73, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d54bc00, ftLastWriteTime.dwHighDateTime=0x1c8dd73, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0151.718] wcscmp (_String1="Sybase.xsl", _String2=".") returned 1 [0151.718] wcscmp (_String1="Sybase.xsl", _String2="..") returned 1 [0151.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186b90 [0151.718] wcscpy (in: _Dest=0x8186b90, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0151.718] wcscat (in: _Dest=0x8186b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0151.718] wcscat (in: _Dest=0x8186b90, _Source="Sybase.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" [0151.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0151.719] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54bc00, ftCreationTime.dwHighDateTime=0x1c8dd73, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d54bc00, ftLastWriteTime.dwHighDateTime=0x1c8dd73, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0151.720] FindClose (in: hFindFile=0x3f38318 | out: hFindFile=0x3f38318) returned 1 [0151.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0151.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ba98) returned 1 [0151.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 Thread: id = 564 os_tid = 0x508 [0134.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2bc60 [0134.042] wcscpy (in: _Dest=0x3e2bc60, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" [0134.042] wcscat (in: _Dest=0x3e2bc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\" [0134.042] wcscat (in: _Dest=0x3e2bc60, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*" [0134.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0134.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0134.376] wcscmp (_String1=".", _String2=".") returned 0 [0134.376] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.376] wcscmp (_String1="..", _String2=".") returned 1 [0134.376] wcscmp (_String1="..", _String2="..") returned 0 [0134.376] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0134.376] wcscmp (_String1="1033", _String2=".") returned 1 [0134.376] wcscmp (_String1="1033", _String2="..") returned 1 [0134.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2a700 [0134.376] wcscpy (in: _Dest=0x3e2a700, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" [0134.376] wcscat (in: _Dest=0x3e2a700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\" [0134.376] wcscat (in: _Dest=0x3e2a700, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0135.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2a700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0135.985] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0135.985] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0135.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0135.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bc60) returned 1 [0135.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355dd0) returned 1 Thread: id = 565 os_tid = 0x96c [0134.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34b00 [0134.043] wcscpy (in: _Dest=0x3f34b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0134.043] wcscat (in: _Dest=0x3f34b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0134.043] wcscat (in: _Dest=0x3f34b00, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*" [0134.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3aba8 [0134.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38198 [0135.075] wcscmp (_String1=".", _String2=".") returned 0 [0135.075] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.075] wcscmp (_String1="..", _String2=".") returned 1 [0135.075] wcscmp (_String1="..", _String2="..") returned 0 [0135.075] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4394d00, ftCreationTime.dwHighDateTime=0x1bd9aee, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4394d00, ftLastWriteTime.dwHighDateTime=0x1bd9aee, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0135.075] wcscmp (_String1="J0143743.GIF", _String2=".") returned 1 [0135.075] wcscmp (_String1="J0143743.GIF", _String2="..") returned 1 [0135.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d098 [0135.076] wcscpy (in: _Dest=0x3e2d098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0135.076] wcscat (in: _Dest=0x3e2d098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0135.076] wcscat (in: _Dest=0x3e2d098, _Source="J0143743.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" [0143.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0143.939] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a221400, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a221400, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0143.939] wcscmp (_String1="J0143744.GIF", _String2=".") returned 1 [0143.939] wcscmp (_String1="J0143744.GIF", _String2="..") returned 1 [0143.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186c38 [0143.940] wcscpy (in: _Dest=0x8186c38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.940] wcscat (in: _Dest=0x8186c38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.940] wcscat (in: _Dest=0x8186c38, _Source="J0143744.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" [0143.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0143.941] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41492200, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41492200, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0143.941] wcscmp (_String1="J0143745.GIF", _String2=".") returned 1 [0143.941] wcscmp (_String1="J0143745.GIF", _String2="..") returned 1 [0143.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ae8 [0143.941] wcscpy (in: _Dest=0x8186ae8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.941] wcscat (in: _Dest=0x8186ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.941] wcscat (in: _Dest=0x8186ae8, _Source="J0143745.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" [0143.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0143.943] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd56600, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd56600, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0143.943] wcscmp (_String1="J0143746.GIF", _String2=".") returned 1 [0143.943] wcscmp (_String1="J0143746.GIF", _String2="..") returned 1 [0143.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186650 [0143.943] wcscpy (in: _Dest=0x8186650, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.943] wcscat (in: _Dest=0x8186650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.943] wcscat (in: _Dest=0x8186650, _Source="J0143746.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" [0143.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0143.945] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a00db00, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a00db00, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0143.945] wcscmp (_String1="J0143748.GIF", _String2=".") returned 1 [0143.945] wcscmp (_String1="J0143748.GIF", _String2="..") returned 1 [0143.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81865a8 [0143.945] wcscpy (in: _Dest=0x81865a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.945] wcscat (in: _Dest=0x81865a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.945] wcscat (in: _Dest=0x81865a8, _Source="J0143748.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" [0143.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81865a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0143.946] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342c3300, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x342c3300, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0143.946] wcscmp (_String1="J0143749.GIF", _String2=".") returned 1 [0143.946] wcscmp (_String1="J0143749.GIF", _String2="..") returned 1 [0143.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186500 [0143.947] wcscpy (in: _Dest=0x8186500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.947] wcscat (in: _Dest=0x8186500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.947] wcscat (in: _Dest=0x8186500, _Source="J0143749.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" [0143.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0143.948] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56be4c00, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56be4c00, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0143.948] wcscmp (_String1="J0143750.GIF", _String2=".") returned 1 [0143.948] wcscmp (_String1="J0143750.GIF", _String2="..") returned 1 [0143.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186458 [0143.948] wcscpy (in: _Dest=0x8186458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.948] wcscat (in: _Dest=0x8186458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.948] wcscat (in: _Dest=0x8186458, _Source="J0143750.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" [0143.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0143.949] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e661100, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e661100, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0143.949] wcscmp (_String1="J0143752.GIF", _String2=".") returned 1 [0143.949] wcscmp (_String1="J0143752.GIF", _String2="..") returned 1 [0143.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187370 [0143.949] wcscpy (in: _Dest=0x8187370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.949] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.950] wcscat (in: _Dest=0x8187370, _Source="J0143752.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" [0143.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0143.951] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c337600, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c337600, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0143.951] wcscmp (_String1="J0143753.GIF", _String2=".") returned 1 [0143.951] wcscmp (_String1="J0143753.GIF", _String2="..") returned 1 [0143.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187028 [0143.951] wcscpy (in: _Dest=0x8187028, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.951] wcscat (in: _Dest=0x8187028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.951] wcscat (in: _Dest=0x8187028, _Source="J0143753.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" [0143.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0143.952] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9127e900, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9127e900, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0143.952] wcscmp (_String1="J0143754.GIF", _String2=".") returned 1 [0143.952] wcscmp (_String1="J0143754.GIF", _String2="..") returned 1 [0143.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186f80 [0143.952] wcscpy (in: _Dest=0x8186f80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.952] wcscat (in: _Dest=0x8186f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.952] wcscat (in: _Dest=0x8186f80, _Source="J0143754.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" [0143.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0143.954] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de55a00, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5de55a00, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0143.954] wcscmp (_String1="J0143758.GIF", _String2=".") returned 1 [0143.954] wcscmp (_String1="J0143758.GIF", _String2="..") returned 1 [0143.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ed8 [0143.954] wcscpy (in: _Dest=0x8186ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.954] wcscat (in: _Dest=0x8186ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.954] wcscat (in: _Dest=0x8186ed8, _Source="J0143758.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" [0143.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0143.955] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0143.955] wcscmp (_String1="WB00516L.GIF", _String2=".") returned 1 [0143.955] wcscmp (_String1="WB00516L.GIF", _String2="..") returned 1 [0143.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81867a0 [0143.955] wcscpy (in: _Dest=0x81867a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.955] wcscat (in: _Dest=0x81867a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.956] wcscat (in: _Dest=0x81867a0, _Source="WB00516L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" [0143.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81867a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0143.957] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0143.957] wcscmp (_String1="WB00531L.GIF", _String2=".") returned 1 [0143.957] wcscmp (_String1="WB00531L.GIF", _String2="..") returned 1 [0143.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81866f8 [0143.957] wcscpy (in: _Dest=0x81866f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.957] wcscat (in: _Dest=0x81866f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.957] wcscat (in: _Dest=0x81866f8, _Source="WB00531L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" [0143.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81866f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0143.959] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0143.959] wcscmp (_String1="WB00673L.GIF", _String2=".") returned 1 [0143.959] wcscmp (_String1="WB00673L.GIF", _String2="..") returned 1 [0143.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81872c8 [0143.959] wcscpy (in: _Dest=0x81872c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.959] wcscat (in: _Dest=0x81872c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.959] wcscat (in: _Dest=0x81872c8, _Source="WB00673L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" [0143.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81872c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0143.960] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0143.960] wcscmp (_String1="WB00703L.GIF", _String2=".") returned 1 [0143.960] wcscmp (_String1="WB00703L.GIF", _String2="..") returned 1 [0143.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187220 [0143.960] wcscpy (in: _Dest=0x8187220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.960] wcscat (in: _Dest=0x8187220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.960] wcscat (in: _Dest=0x8187220, _Source="WB00703L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" [0143.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0143.961] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0143.961] wcscmp (_String1="WB00760L.GIF", _String2=".") returned 1 [0143.961] wcscmp (_String1="WB00760L.GIF", _String2="..") returned 1 [0143.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187178 [0143.961] wcscpy (in: _Dest=0x8187178, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.961] wcscat (in: _Dest=0x8187178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.961] wcscat (in: _Dest=0x8187178, _Source="WB00760L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" [0143.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0143.963] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0143.963] wcscmp (_String1="WB00780L.GIF", _String2=".") returned 1 [0143.963] wcscmp (_String1="WB00780L.GIF", _String2="..") returned 1 [0143.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81870d0 [0143.963] wcscpy (in: _Dest=0x81870d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.963] wcscat (in: _Dest=0x81870d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.963] wcscat (in: _Dest=0x81870d0, _Source="WB00780L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" [0143.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81870d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0143.964] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0143.964] wcscmp (_String1="WB01741L.GIF", _String2=".") returned 1 [0143.964] wcscmp (_String1="WB01741L.GIF", _String2="..") returned 1 [0143.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186848 [0143.964] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.964] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.964] wcscat (in: _Dest=0x8186848, _Source="WB01741L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" [0143.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0143.965] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0143.965] wcscmp (_String1="WB02039_.GIF", _String2=".") returned 1 [0143.965] wcscmp (_String1="WB02039_.GIF", _String2="..") returned 1 [0143.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186998 [0143.965] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.965] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.965] wcscat (in: _Dest=0x8186998, _Source="WB02039_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" [0143.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0143.966] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0143.966] wcscmp (_String1="WB02055_.GIF", _String2=".") returned 1 [0143.966] wcscmp (_String1="WB02055_.GIF", _String2="..") returned 1 [0143.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81868f0 [0143.967] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.967] wcscat (in: _Dest=0x81868f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.967] wcscat (in: _Dest=0x81868f0, _Source="WB02055_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" [0143.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81868f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0143.968] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0143.968] wcscmp (_String1="WB02073_.GIF", _String2=".") returned 1 [0143.968] wcscmp (_String1="WB02073_.GIF", _String2="..") returned 1 [0143.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ce0 [0143.968] wcscpy (in: _Dest=0x8186ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.968] wcscat (in: _Dest=0x8186ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.968] wcscat (in: _Dest=0x8186ce0, _Source="WB02073_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" [0143.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0143.969] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0143.969] wcscmp (_String1="WB02074_.GIF", _String2=".") returned 1 [0143.969] wcscmp (_String1="WB02074_.GIF", _String2="..") returned 1 [0143.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186d88 [0143.969] wcscpy (in: _Dest=0x8186d88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.969] wcscat (in: _Dest=0x8186d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.969] wcscat (in: _Dest=0x8186d88, _Source="WB02074_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" [0143.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0143.970] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0143.970] wcscmp (_String1="WB02077_.GIF", _String2=".") returned 1 [0143.970] wcscmp (_String1="WB02077_.GIF", _String2="..") returned 1 [0143.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186a40 [0143.971] wcscpy (in: _Dest=0x8186a40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.971] wcscat (in: _Dest=0x8186a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.971] wcscat (in: _Dest=0x8186a40, _Source="WB02077_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" [0143.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0143.972] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0143.972] wcscmp (_String1="WB02082_.GIF", _String2=".") returned 1 [0143.972] wcscmp (_String1="WB02082_.GIF", _String2="..") returned 1 [0143.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187418 [0143.972] wcscpy (in: _Dest=0x8187418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.972] wcscat (in: _Dest=0x8187418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.972] wcscat (in: _Dest=0x8187418, _Source="WB02082_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" [0143.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0143.973] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0143.973] wcscmp (_String1="WB02085_.GIF", _String2=".") returned 1 [0143.973] wcscmp (_String1="WB02085_.GIF", _String2="..") returned 1 [0143.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81874c0 [0143.974] wcscpy (in: _Dest=0x81874c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.974] wcscat (in: _Dest=0x81874c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.974] wcscat (in: _Dest=0x81874c0, _Source="WB02085_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" [0143.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81874c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0143.975] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0143.975] wcscmp (_String1="WB02097_.GIF", _String2=".") returned 1 [0143.975] wcscmp (_String1="WB02097_.GIF", _String2="..") returned 1 [0143.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187568 [0143.975] wcscpy (in: _Dest=0x8187568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.975] wcscat (in: _Dest=0x8187568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.975] wcscat (in: _Dest=0x8187568, _Source="WB02097_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" [0143.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0143.976] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0143.976] wcscmp (_String1="WB02106_.GIF", _String2=".") returned 1 [0143.976] wcscmp (_String1="WB02106_.GIF", _String2="..") returned 1 [0143.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187610 [0143.976] wcscpy (in: _Dest=0x8187610, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0143.976] wcscat (in: _Dest=0x8187610, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0143.976] wcscat (in: _Dest=0x8187610, _Source="WB02106_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" [0143.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0144.622] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0144.622] wcscmp (_String1="WB02116_.GIF", _String2=".") returned 1 [0144.622] wcscmp (_String1="WB02116_.GIF", _String2="..") returned 1 [0144.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81878b0 [0144.622] wcscpy (in: _Dest=0x81878b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0144.622] wcscat (in: _Dest=0x81878b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0144.622] wcscat (in: _Dest=0x81878b0, _Source="WB02116_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" [0148.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81878b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0148.180] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0148.180] wcscmp (_String1="WB02134_.GIF", _String2=".") returned 1 [0148.180] wcscmp (_String1="WB02134_.GIF", _String2="..") returned 1 [0148.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ed8 [0148.180] wcscpy (in: _Dest=0x8186ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0148.180] wcscat (in: _Dest=0x8186ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0148.180] wcscat (in: _Dest=0x8186ed8, _Source="WB02134_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" [0148.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0148.181] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0148.181] wcscmp (_String1="WB02187_.GIF", _String2=".") returned 1 [0148.181] wcscmp (_String1="WB02187_.GIF", _String2="..") returned 1 [0148.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186848 [0148.181] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0148.181] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0148.181] wcscat (in: _Dest=0x8186848, _Source="WB02187_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" [0148.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0148.183] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0148.183] wcscmp (_String1="WB02198_.GIF", _String2=".") returned 1 [0148.183] wcscmp (_String1="WB02198_.GIF", _String2="..") returned 1 [0148.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186998 [0148.183] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0148.183] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0148.183] wcscat (in: _Dest=0x8186998, _Source="WB02198_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" [0148.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0148.184] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0148.184] wcscmp (_String1="WB02201_.GIF", _String2=".") returned 1 [0148.184] wcscmp (_String1="WB02201_.GIF", _String2="..") returned 1 [0148.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186d88 [0148.184] wcscpy (in: _Dest=0x8186d88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0148.185] wcscat (in: _Dest=0x8186d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0148.185] wcscat (in: _Dest=0x8186d88, _Source="WB02201_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" [0148.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0148.186] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0148.186] wcscmp (_String1="WB02214_.GIF", _String2=".") returned 1 [0148.186] wcscmp (_String1="WB02214_.GIF", _String2="..") returned 1 [0148.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81868f0 [0148.186] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0148.186] wcscat (in: _Dest=0x81868f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0148.186] wcscat (in: _Dest=0x81868f0, _Source="WB02214_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" [0148.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81868f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0148.187] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0148.187] wcscmp (_String1="WB02218_.GIF", _String2=".") returned 1 [0148.187] wcscmp (_String1="WB02218_.GIF", _String2="..") returned 1 [0148.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186a40 [0148.187] wcscpy (in: _Dest=0x8186a40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0148.187] wcscat (in: _Dest=0x8186a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0148.187] wcscat (in: _Dest=0x8186a40, _Source="WB02218_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" [0148.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0148.188] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0148.189] FindClose (in: hFindFile=0x3f38198 | out: hFindFile=0x3f38198) returned 1 [0148.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3aba8) returned 1 [0148.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34b00) returned 1 [0148.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 Thread: id = 566 os_tid = 0x9bc [0134.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2a700 [0134.045] wcscpy (in: _Dest=0x3e2a700, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" [0134.045] wcscat (in: _Dest=0x3e2a700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\" [0134.045] wcscat (in: _Dest=0x3e2a700, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*" [0134.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a470 [0134.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37858 [0134.045] wcscmp (_String1=".", _String2=".") returned 0 [0134.045] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.045] wcscmp (_String1="..", _String2=".") returned 1 [0134.045] wcscmp (_String1="..", _String2="..") returned 0 [0134.045] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.046] FindClose (in: hFindFile=0x3f37858 | out: hFindFile=0x3f37858) returned 1 [0134.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a470) returned 1 [0134.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a700) returned 1 [0134.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 Thread: id = 567 os_tid = 0xe44 [0134.047] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ewtjn5bmizjul2l2.gif")) returned 0x20 [0134.047] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif", dwFileAttributes=0x20) returned 1 [0134.893] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ewtjn5bmizjul2l2.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13dc [0134.893] GetFileSizeEx (in: hFile=0x13dc, lpFileSize=0x98df868 | out: lpFileSize=0x98df868*=37814) returned 1 [0134.893] SetFilePointerEx (in: hFile=0x13dc, liDistanceToMove=0x93b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.893] ReadFile (in: hFile=0x13dc, lpBuffer=0x98df874, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x98df850, lpOverlapped=0x0 | out: lpBuffer=0x98df874*, lpNumberOfBytesRead=0x98df850*=0x4, lpOverlapped=0x0) returned 1 [0134.895] SetFilePointerEx (in: hFile=0x13dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0134.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0134.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47e0 [0134.895] NtQuerySystemTime (in: CurrentTime=0x98df7f0 | out: CurrentTime=0x98df7f0*=132471540035856000) returned 0x0 [0134.895] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x6ece4f65 [0134.895] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x18d82a8b [0134.895] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x2aa74a2e [0134.895] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x1527f16e [0134.895] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x244b6a3c [0134.895] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x6cc2d46d [0134.895] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x10484558 [0134.895] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0xd0ce13b [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x4fe4be3 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x72b28786 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x177a91c8 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x31eaa769 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x5f6bba24 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x34ec3343 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x76ffab3a [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x2694df03 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x30c54354 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x176dc25 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x65dc1c14 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x42cd0c5 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x7880e418 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x6e767990 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x37a64aa2 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x6ec1f047 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x718bca6a [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x1be15697 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x3c6024e0 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x43b4f58 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x72dc183 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x36b97b75 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x2893edf3 [0134.896] RtlRandomEx (in: Seed=0x98df7e8 | out: Seed=0x98df7e8) returned 0x51d80f54 [0134.905] SetFilePointerEx (in: hFile=0x13dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.905] ReadFile (in: hFile=0x13dc, lpBuffer=0x825ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x98df7f0, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0x98df7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.905] SetFilePointerEx (in: hFile=0x13dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0134.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0134.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0134.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0134.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8262890 [0134.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0134.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47e0 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47e0) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0134.906] WriteFile (in: hFile=0x13dc, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x98df7f0, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0x98df7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0135.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0135.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfe10 [0135.245] SetFilePointerEx (in: hFile=0x13dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.245] WriteFile (in: hFile=0x13dc, lpBuffer=0x3d56498*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x98df85c, lpOverlapped=0x0 | out: lpBuffer=0x3d56498*, lpNumberOfBytesWritten=0x98df85c*=0x11a, lpOverlapped=0x0) returned 1 [0135.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 [0135.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf750) returned 1 [0135.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0135.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe10) returned 1 [0135.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0135.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0135.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0135.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4830) returned 1 [0135.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11468 [0135.343] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif" [0135.343] wcscat (in: _Dest=0x3e11468, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif.f0dbec" [0135.343] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif.f0dbec", NtPathName=0x98df7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\EWtjn5BMIzjUl2l2.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7098 [0136.560] FlushFileBuffers (hFile=0x13dc) returned 1 [0136.563] CloseHandle (hObject=0x13dc) returned 1 [0136.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1f88 [0136.571] wcscpy (in: _Dest=0x3df1f88, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0136.571] wcscat (in: _Dest=0x3df1f88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" [0136.571] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\f0dbec-readme.txt")) returned 0xffffffff [0136.576] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd44 [0136.708] WriteFile (in: hFile=0xd44, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x98df804, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x98df804*=0x70c, lpOverlapped=0x0) returned 1 [0136.710] CloseHandle (hObject=0xd44) returned 1 [0136.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1f88) returned 1 [0136.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 568 os_tid = 0x490 [0134.047] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\jybbgpjvn9m_giyrosgd.jpg")) returned 0x20 [0134.047] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg", dwFileAttributes=0x20) returned 1 [0134.906] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\jybbgpjvn9m_giyrosgd.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13e0 [0134.906] GetFileSizeEx (in: hFile=0x13e0, lpFileSize=0xc3ffc48 | out: lpFileSize=0xc3ffc48*=30602) returned 1 [0134.906] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x7786, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.906] ReadFile (in: hFile=0x13e0, lpBuffer=0xc3ffc54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc3ffc30, lpOverlapped=0x0 | out: lpBuffer=0xc3ffc54*, lpNumberOfBytesRead=0xc3ffc30*=0x4, lpOverlapped=0x0) returned 1 [0134.908] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47e0 [0134.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0134.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0134.908] NtQuerySystemTime (in: CurrentTime=0xc3ffbd0 | out: CurrentTime=0xc3ffbd0*=132471540035856000) returned 0x0 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x43988895 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x3310605 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x6fc2ebdc [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x77d409ea [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x3f466540 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x5b0fe048 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x122143d5 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x3bab7394 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x42bd7c2f [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x37a64aa2 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x39a93ac7 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x3acd0c1b [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x164ec058 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x6b0469d7 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x6746e367 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x6e767990 [0134.908] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x4b5df17d [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x357e6a9a [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x5d9525d5 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x1e378726 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x37fbfc22 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x297dc7e8 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x54081070 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x1bf9192e [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x546a4429 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x47b35fd9 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x47646506 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x567e48b5 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x73c1f271 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x7e523f96 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x6ae4e2a9 [0134.909] RtlRandomEx (in: Seed=0xc3ffbc8 | out: Seed=0xc3ffbc8) returned 0x3eceebd0 [0134.918] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.918] ReadFile (in: hFile=0x13e0, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc3ffbd0, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xc3ffbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.918] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47e0 [0134.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47e0) returned 1 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47e0 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0134.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0134.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0134.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0134.919] WriteFile (in: hFile=0x13e0, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc3ffbd0, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0xc3ffbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0135.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0135.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3f32108 [0135.247] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.247] WriteFile (in: hFile=0x13e0, lpBuffer=0x3ef8380*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xc3ffc3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef8380*, lpNumberOfBytesWritten=0xc3ffc3c*=0x122, lpOverlapped=0x0) returned 1 [0135.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8380) returned 1 [0135.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f321e0) returned 1 [0135.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1a8) returned 1 [0135.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32108) returned 1 [0135.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47e0) returned 1 [0135.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0135.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a8) returned 1 [0135.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48d0) returned 1 [0135.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186ae8 [0135.345] wcscpy (in: _Dest=0x8186ae8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg" [0135.345] wcscat (in: _Dest=0x8186ae8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg.f0dbec" [0135.345] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg.f0dbec", NtPathName=0xc3ffbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\JYbBgPJvn9M_GiyroSgD.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3339a8 [0136.722] FlushFileBuffers (hFile=0x13e0) returned 1 [0136.752] CloseHandle (hObject=0x13e0) returned 1 [0136.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2be8 [0136.769] wcscpy (in: _Dest=0x3df2be8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0136.769] wcscat (in: _Dest=0x3df2be8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" [0136.769] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\f0dbec-readme.txt")) returned 0x20 [0136.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2be8) returned 1 [0136.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 Thread: id = 569 os_tid = 0xfc8 [0134.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f7d0 [0134.048] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" [0134.048] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0134.048] wcscat (in: _Dest=0x3f2f7d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\*" [0134.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a470 [0134.048] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\*", lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a7e6fd0, ftCreationTime.dwHighDateTime=0x1d5e148, ftLastAccessTime.dwLowDateTime=0xecfb46b0, ftLastAccessTime.dwHighDateTime=0x1d5e04a, ftLastWriteTime.dwLowDateTime=0xecfb46b0, ftLastWriteTime.dwHighDateTime=0x1d5e04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37858 [0134.048] wcscmp (_String1=".", _String2=".") returned 0 [0134.048] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a7e6fd0, ftCreationTime.dwHighDateTime=0x1d5e148, ftLastAccessTime.dwLowDateTime=0xecfb46b0, ftLastAccessTime.dwHighDateTime=0x1d5e04a, ftLastWriteTime.dwLowDateTime=0xecfb46b0, ftLastWriteTime.dwHighDateTime=0x1d5e04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.048] wcscmp (_String1="..", _String2=".") returned 1 [0134.048] wcscmp (_String1="..", _String2="..") returned 0 [0134.048] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf21b20, ftCreationTime.dwHighDateTime=0x1d5d8ac, ftLastAccessTime.dwLowDateTime=0x16983f50, ftLastAccessTime.dwHighDateTime=0x1d5dd7b, ftLastWriteTime.dwLowDateTime=0x16983f50, ftLastWriteTime.dwHighDateTime=0x1d5dd7b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DMY5JNwmes_Dsak", cAlternateFileName="1DMY5J~1")) returned 1 [0134.048] wcscmp (_String1="1DMY5JNwmes_Dsak", _String2=".") returned 1 [0134.048] wcscmp (_String1="1DMY5JNwmes_Dsak", _String2="..") returned 1 [0134.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d488 [0134.048] wcscpy (in: _Dest=0x3e2d488, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" [0134.049] wcscat (in: _Dest=0x3e2d488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0134.049] wcscat (in: _Dest=0x3e2d488, _Source="1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0139.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0139.582] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5dd10, ftCreationTime.dwHighDateTime=0x1d5df7a, ftLastAccessTime.dwLowDateTime=0x56720b20, ftLastAccessTime.dwHighDateTime=0x1d5d960, ftLastWriteTime.dwLowDateTime=0x56720b20, ftLastWriteTime.dwHighDateTime=0x1d5d960, nFileSizeHigh=0x0, nFileSizeLow=0x7be6, dwReserved0=0x0, dwReserved1=0x0, cFileName="717UfU18cBKV.gif", cAlternateFileName="717UFU~1.GIF")) returned 1 [0139.582] wcscmp (_String1="717UfU18cBKV.gif", _String2=".") returned 1 [0139.582] wcscmp (_String1="717UfU18cBKV.gif", _String2="..") returned 1 [0139.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d3e0 [0139.582] wcscpy (in: _Dest=0x3e2d3e0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" [0139.582] wcscat (in: _Dest=0x3e2d3e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0139.582] wcscat (in: _Dest=0x3e2d3e0, _Source="717UfU18cBKV.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif" [0139.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0139.583] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669ed70, ftCreationTime.dwHighDateTime=0x1d5da4d, ftLastAccessTime.dwLowDateTime=0x5a1c45e0, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x5a1c45e0, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x11083, dwReserved0=0x0, dwReserved1=0x0, cFileName="E 5fe JLr5YfPd834.png", cAlternateFileName="E5FEJL~1.PNG")) returned 1 [0139.583] wcscmp (_String1="E 5fe JLr5YfPd834.png", _String2=".") returned 1 [0139.583] wcscmp (_String1="E 5fe JLr5YfPd834.png", _String2="..") returned 1 [0139.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bbe8 [0139.583] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" [0139.583] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0139.583] wcscat (in: _Dest=0x35bbe8, _Source="E 5fe JLr5YfPd834.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png" [0139.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0139.585] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba9030, ftCreationTime.dwHighDateTime=0x1d5e754, ftLastAccessTime.dwLowDateTime=0x1535a800, ftLastAccessTime.dwHighDateTime=0x1d5ddfd, ftLastWriteTime.dwLowDateTime=0x1535a800, ftLastWriteTime.dwHighDateTime=0x1d5ddfd, nFileSizeHigh=0x0, nFileSizeLow=0xe017, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quvh9hA1oSwabljd.gif", cAlternateFileName="QUVH9H~1.GIF")) returned 1 [0139.585] wcscmp (_String1="Quvh9hA1oSwabljd.gif", _String2=".") returned 1 [0139.585] wcscmp (_String1="Quvh9hA1oSwabljd.gif", _String2="..") returned 1 [0139.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c008 [0139.585] wcscpy (in: _Dest=0x35c008, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" [0139.585] wcscat (in: _Dest=0x35c008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0139.585] wcscat (in: _Dest=0x35c008, _Source="Quvh9hA1oSwabljd.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif" [0139.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0139.586] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca58000, ftCreationTime.dwHighDateTime=0x1d5e4cd, ftLastAccessTime.dwLowDateTime=0x9e511d80, ftLastAccessTime.dwHighDateTime=0x1d5e63c, ftLastWriteTime.dwLowDateTime=0x9e511d80, ftLastWriteTime.dwHighDateTime=0x1d5e63c, nFileSizeHigh=0x0, nFileSizeLow=0x6f1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="XsVz.png", cAlternateFileName="")) returned 1 [0139.586] wcscmp (_String1="XsVz.png", _String2=".") returned 1 [0139.586] wcscmp (_String1="XsVz.png", _String2="..") returned 1 [0139.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c828 [0139.586] wcscpy (in: _Dest=0x32c828, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz" [0139.586] wcscat (in: _Dest=0x32c828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0139.586] wcscat (in: _Dest=0x32c828, _Source="XsVz.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png" [0139.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0 [0139.587] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca58000, ftCreationTime.dwHighDateTime=0x1d5e4cd, ftLastAccessTime.dwLowDateTime=0x9e511d80, ftLastAccessTime.dwHighDateTime=0x1d5e63c, ftLastWriteTime.dwLowDateTime=0x9e511d80, ftLastWriteTime.dwHighDateTime=0x1d5e63c, nFileSizeHigh=0x0, nFileSizeLow=0x6f1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="XsVz.png", cAlternateFileName="")) returned 0 [0139.587] FindClose (in: hFindFile=0x3f37858 | out: hFindFile=0x3f37858) returned 1 [0139.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a470) returned 1 [0139.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 [0139.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4608) returned 1 Thread: id = 570 os_tid = 0xfd0 [0134.049] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\wewg-7yeq9oqv.jpg")) returned 0x20 [0134.049] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg", dwFileAttributes=0x20) returned 1 [0134.919] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\wewg-7yeq9oqv.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13e8 [0134.920] GetFileSizeEx (in: hFile=0x13e8, lpFileSize=0x90cf958 | out: lpFileSize=0x90cf958*=13625) returned 1 [0134.920] SetFilePointerEx (in: hFile=0x13e8, liDistanceToMove=0x3535, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.920] ReadFile (in: hFile=0x13e8, lpBuffer=0x90cf964, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x90cf940, lpOverlapped=0x0 | out: lpBuffer=0x90cf964*, lpNumberOfBytesRead=0x90cf940*=0x4, lpOverlapped=0x0) returned 1 [0134.921] SetFilePointerEx (in: hFile=0x13e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0134.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef48f8 [0134.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0134.921] NtQuerySystemTime (in: CurrentTime=0x90cf8e0 | out: CurrentTime=0x90cf8e0*=132471540036012000) returned 0x0 [0134.921] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x5d9525d5 [0134.921] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x3bab7394 [0134.921] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x320b38d [0134.921] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x6c1d4a57 [0134.921] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x7fb8dc67 [0134.921] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x1fb69f9e [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x7b441b75 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x261ea9cd [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x3f3be [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x598acc13 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x6a0ebe93 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x5b106f66 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x29f38ab6 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x53aa4cea [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x31610375 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x4ba16d6 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x72d8bb4b [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x6eb1cb5c [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x13f8f9d8 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x2613925e [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x2b65bcb1 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0xce03ef2 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x3d9edc78 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x259944a8 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x383c2690 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x39a93ac7 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x5aeb1f91 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x15e8edda [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x4a0bb73f [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x525bf375 [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x15736b1b [0134.922] RtlRandomEx (in: Seed=0x90cf8d8 | out: Seed=0x90cf8d8) returned 0x65a48529 [0134.930] ReadFile (in: hFile=0x13e8, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3539, lpNumberOfBytesRead=0x90cf8d4, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0x90cf8d4*=0x3539, lpOverlapped=0x0) returned 1 [0134.931] SetFilePointerEx (in: hFile=0x13e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.931] WriteFile (in: hFile=0x13e8, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3539, lpNumberOfBytesWritten=0x90cf8d8, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0x90cf8d8*=0x3539, lpOverlapped=0x0) returned 1 [0135.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0135.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0135.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0135.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0135.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0135.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0135.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0135.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3df7e20 [0135.258] SetFilePointerEx (in: hFile=0x13e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.258] WriteFile (in: hFile=0x13e8, lpBuffer=0x3d57278*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x90cf94c, lpOverlapped=0x0 | out: lpBuffer=0x3d57278*, lpNumberOfBytesWritten=0x90cf94c*=0x114, lpOverlapped=0x0) returned 1 [0135.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 [0135.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77980) returned 1 [0135.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0135.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0135.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0135.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48f8) returned 1 [0135.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0135.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0135.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2a830 [0135.374] wcscpy (in: _Dest=0x3e2a830, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg" [0135.374] wcscat (in: _Dest=0x3e2a830, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg.f0dbec" [0135.374] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg.f0dbec", NtPathName=0x90cf8d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\WEWg-7YEq9Oqv.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c848 [0136.728] FlushFileBuffers (hFile=0x13e8) returned 1 [0136.752] CloseHandle (hObject=0x13e8) returned 1 [0136.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2be8 [0136.771] wcscpy (in: _Dest=0x3df2be8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0136.771] wcscat (in: _Dest=0x3df2be8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" [0136.771] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\f0dbec-readme.txt")) returned 0x20 [0136.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2be8) returned 1 [0136.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 571 os_tid = 0xfd4 [0134.049] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\xeoc1ol.png")) returned 0x20 [0134.050] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png", dwFileAttributes=0x20) returned 1 [0134.931] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\xeoc1ol.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13ec [0134.931] GetFileSizeEx (in: hFile=0x13ec, lpFileSize=0xc55f788 | out: lpFileSize=0xc55f788*=97839) returned 1 [0134.931] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x17e2b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.931] ReadFile (in: hFile=0x13ec, lpBuffer=0xc55f794, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc55f770, lpOverlapped=0x0 | out: lpBuffer=0xc55f794*, lpNumberOfBytesRead=0xc55f770*=0x4, lpOverlapped=0x0) returned 1 [0134.933] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0134.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0134.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0134.933] NtQuerySystemTime (in: CurrentTime=0xc55f710 | out: CurrentTime=0xc55f710*=132471540036168000) returned 0x0 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x6b8356bc [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x16593767 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x3eceebd0 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x285c9153 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x553437c6 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x7de277da [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x7219ddbd [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x201d390 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0xec50a45 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0xec50a45 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x529fb522 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x34b09c6f [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x6b8356bc [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x672dc89a [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x343da661 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x13174d3f [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x7ec8648c [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x19056584 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x2613925e [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x1951fdd8 [0134.933] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x2c9e5365 [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x122143d5 [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x923db33 [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x46249859 [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x5b7a962c [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x5a4d100a [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x15736b1b [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x3e471060 [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x4017e002 [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x470bcbd4 [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x6dba1a82 [0134.934] RtlRandomEx (in: Seed=0xc55f708 | out: Seed=0xc55f708) returned 0x49885188 [0134.942] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.943] ReadFile (in: hFile=0x13ec, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc55f710, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0xc55f710*=0x3c00, lpOverlapped=0x0) returned 1 [0134.943] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31970 [0134.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b3e8 [0134.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0134.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0134.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0134.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0134.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4998) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31970) returned 1 [0134.944] WriteFile (in: hFile=0x13ec, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc55f710, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xc55f710*=0x3c00, lpOverlapped=0x0) returned 1 [0135.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0135.260] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.260] ReadFile (in: hFile=0x13ec, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc55f710, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0xc55f710*=0x3c00, lpOverlapped=0x0) returned 1 [0135.260] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0135.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0135.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0135.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0135.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0135.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0135.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0135.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0135.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0135.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0135.261] WriteFile (in: hFile=0x13ec, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc55f710, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xc55f710*=0x3c00, lpOverlapped=0x0) returned 1 [0135.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0135.263] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x1422f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.264] ReadFile (in: hFile=0x13ec, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc55f710, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0xc55f710*=0x3c00, lpOverlapped=0x0) returned 1 [0135.264] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x1422f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0135.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0135.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0135.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0135.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0135.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0135.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0135.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0b8) returned 1 [0135.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0135.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0135.264] WriteFile (in: hFile=0x13ec, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc55f710, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xc55f710*=0x3c00, lpOverlapped=0x0) returned 1 [0135.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0135.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd888 [0135.268] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.268] WriteFile (in: hFile=0x13ec, lpBuffer=0x3e16e38*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0xc55f77c, lpOverlapped=0x0 | out: lpBuffer=0x3e16e38*, lpNumberOfBytesWritten=0xc55f77c*=0x148, lpOverlapped=0x0) returned 1 [0135.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16e38) returned 1 [0135.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f6a8) returned 1 [0135.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0135.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f828) returned 1 [0135.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd888) returned 1 [0135.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0135.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49c0) returned 1 [0135.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0135.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34ef0 [0135.379] wcscpy (in: _Dest=0x3f34ef0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png" [0135.379] wcscat (in: _Dest=0x3f34ef0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png.f0dbec" [0135.379] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png.f0dbec", NtPathName=0xc55f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\xEOc1oL.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11fa8 [0136.707] FlushFileBuffers (hFile=0x13ec) returned 1 [0136.751] CloseHandle (hObject=0x13ec) returned 1 [0136.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2be8 [0136.764] wcscpy (in: _Dest=0x3df2be8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0136.764] wcscat (in: _Dest=0x3df2be8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" [0136.764] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\f0dbec-readme.txt")) returned 0x20 [0136.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2be8) returned 1 [0136.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4088) returned 1 Thread: id = 572 os_tid = 0xfd8 [0134.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f858 [0134.050] wcscpy (in: _Dest=0x3f2f858, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" [0134.050] wcscat (in: _Dest=0x3f2f858, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\" [0134.050] wcscat (in: _Dest=0x3f2f858, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\*" [0134.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0134.050] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb6b2310, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x2dfc6630, ftLastAccessTime.dwHighDateTime=0x1d5d998, ftLastWriteTime.dwLowDateTime=0x2dfc6630, ftLastWriteTime.dwHighDateTime=0x1d5d998, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0134.050] wcscmp (_String1=".", _String2=".") returned 0 [0134.050] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb6b2310, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x2dfc6630, ftLastAccessTime.dwHighDateTime=0x1d5d998, ftLastWriteTime.dwLowDateTime=0x2dfc6630, ftLastWriteTime.dwHighDateTime=0x1d5d998, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.050] wcscmp (_String1="..", _String2=".") returned 1 [0134.050] wcscmp (_String1="..", _String2="..") returned 0 [0134.051] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecca5080, ftCreationTime.dwHighDateTime=0x1d5e67d, ftLastAccessTime.dwLowDateTime=0x67c060, ftLastAccessTime.dwHighDateTime=0x1d5df43, ftLastWriteTime.dwLowDateTime=0x67c060, ftLastWriteTime.dwHighDateTime=0x1d5df43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JXlRQoDrbtH_Adt", cAlternateFileName="JXLRQO~1")) returned 1 [0134.051] wcscmp (_String1="JXlRQoDrbtH_Adt", _String2=".") returned 1 [0134.051] wcscmp (_String1="JXlRQoDrbtH_Adt", _String2="..") returned 1 [0134.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81868f0 [0134.051] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" [0134.051] wcscat (in: _Dest=0x81868f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\" [0134.051] wcscat (in: _Dest=0x81868f0, _Source="JXlRQoDrbtH_Adt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" [0135.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81868f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0135.502] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60f74f10, ftCreationTime.dwHighDateTime=0x1d5d83e, ftLastAccessTime.dwLowDateTime=0x8d3d05e0, ftLastAccessTime.dwHighDateTime=0x1d5e64b, ftLastWriteTime.dwLowDateTime=0x8d3d05e0, ftLastWriteTime.dwHighDateTime=0x1d5e64b, nFileSizeHigh=0x0, nFileSizeLow=0x30d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxk0aY2.png", cAlternateFileName="")) returned 1 [0135.502] wcscmp (_String1="mxk0aY2.png", _String2=".") returned 1 [0135.502] wcscmp (_String1="mxk0aY2.png", _String2="..") returned 1 [0135.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7558 [0135.502] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" [0135.502] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\" [0135.502] wcscat (in: _Dest=0x2c7558, _Source="mxk0aY2.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png" [0135.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0135.503] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2629f0, ftCreationTime.dwHighDateTime=0x1d5e2c2, ftLastAccessTime.dwLowDateTime=0x91320bf0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x91320bf0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x13844, dwReserved0=0x0, dwReserved1=0x0, cFileName="sjow.bmp", cAlternateFileName="")) returned 1 [0135.503] wcscmp (_String1="sjow.bmp", _String2=".") returned 1 [0135.503] wcscmp (_String1="sjow.bmp", _String2="..") returned 1 [0135.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a078 [0135.503] wcscpy (in: _Dest=0x3e2a078, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" [0135.503] wcscat (in: _Dest=0x3e2a078, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\" [0135.503] wcscat (in: _Dest=0x3e2a078, _Source="sjow.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp" [0135.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4 [0135.504] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2abb7d10, ftCreationTime.dwHighDateTime=0x1d5df6c, ftLastAccessTime.dwLowDateTime=0xb8d2e220, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xb8d2e220, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UOnbIJT", cAlternateFileName="")) returned 1 [0135.504] wcscmp (_String1="UOnbIJT", _String2=".") returned 1 [0135.504] wcscmp (_String1="UOnbIJT", _String2="..") returned 1 [0135.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a4a0 [0135.504] wcscpy (in: _Dest=0x3e2a4a0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt" [0135.504] wcscat (in: _Dest=0x3e2a4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\" [0135.505] wcscat (in: _Dest=0x3e2a4a0, _Source="UOnbIJT" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" [0135.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2a4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d0 [0135.506] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2abb7d10, ftCreationTime.dwHighDateTime=0x1d5df6c, ftLastAccessTime.dwLowDateTime=0xb8d2e220, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xb8d2e220, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UOnbIJT", cAlternateFileName="")) returned 0 [0135.506] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0135.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0135.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f858) returned 1 [0135.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 573 os_tid = 0xfdc [0134.051] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\z_7q5s7sgj37_z4slroi.png")) returned 0x20 [0134.051] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png", dwFileAttributes=0x20) returned 1 [0134.944] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\z_7q5s7sgj37_z4slroi.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13f4 [0134.944] GetFileSizeEx (in: hFile=0x13f4, lpFileSize=0xc64fe58 | out: lpFileSize=0xc64fe58*=82879) returned 1 [0134.944] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x143bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.944] ReadFile (in: hFile=0x13f4, lpBuffer=0xc64fe64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc64fe40, lpOverlapped=0x0 | out: lpBuffer=0xc64fe64*, lpNumberOfBytesRead=0xc64fe40*=0x4, lpOverlapped=0x0) returned 1 [0134.946] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0134.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0134.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0134.946] NtQuerySystemTime (in: CurrentTime=0xc64fde0 | out: CurrentTime=0xc64fde0*=132471540036324000) returned 0x0 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x7219ddbd [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x7b4435c6 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x70c3e67c [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x177317b4 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x65f0c596 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x2c20d2ca [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x36d3f073 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x4df1df53 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x108734d6 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x261ea9cd [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x377b71e2 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x574916d0 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x11a1cb62 [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x2ad47f4b [0134.946] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x1c553b58 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x687eb9b7 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x762546e7 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x47261493 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x759f466c [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x6b616767 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x30c54354 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x39132332 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x1f5878d8 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0xa0ba258 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x2113a605 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0xbc5499c [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0xc320ebc [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0xd4507d8 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x2e72bf86 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x36523411 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0x762546e7 [0134.947] RtlRandomEx (in: Seed=0xc64fdd8 | out: Seed=0xc64fdd8) returned 0xba44aae [0134.958] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.958] ReadFile (in: hFile=0x13f4, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc64fde0, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0xc64fde0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.958] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31970 [0134.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b3e8 [0134.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0134.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4998) returned 1 [0134.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0134.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0134.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0134.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0134.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0134.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31970) returned 1 [0134.959] WriteFile (in: hFile=0x13f4, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc64fde0, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0xc64fde0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0135.265] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.265] ReadFile (in: hFile=0x13f4, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc64fde0, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0xc64fde0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.266] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0135.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0135.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0135.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0b8) returned 1 [0135.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0135.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0135.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0135.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0135.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0135.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0135.266] WriteFile (in: hFile=0x13f4, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc64fde0, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0xc64fde0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0135.268] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x107bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.269] ReadFile (in: hFile=0x13f4, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc64fde0, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0xc64fde0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.269] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x107bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31928 [0135.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b370 [0135.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0135.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0135.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0135.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0135.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0135.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0135.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0135.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0135.269] WriteFile (in: hFile=0x13f4, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc64fde0, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0xc64fde0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0135.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd8f0 [0135.270] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.270] WriteFile (in: hFile=0x13f4, lpBuffer=0x3e396f8*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0xc64fe4c, lpOverlapped=0x0 | out: lpBuffer=0x3e396f8*, lpNumberOfBytesWritten=0xc64fe4c*=0x162, lpOverlapped=0x0) returned 1 [0135.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e396f8) returned 1 [0135.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32270) returned 1 [0135.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4998) returned 1 [0135.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31928) returned 1 [0135.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd8f0) returned 1 [0135.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0135.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0135.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0135.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186b90 [0135.383] wcscpy (in: _Dest=0x8186b90, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png" [0135.383] wcscat (in: _Dest=0x8186b90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png.f0dbec" [0135.383] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png.f0dbec", NtPathName=0xc64fdd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\z_7q5s7Sgj37_Z4SLROi.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3338e8 [0136.720] FlushFileBuffers (hFile=0x13f4) returned 1 [0136.751] CloseHandle (hObject=0x13f4) returned 1 [0136.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2be8 [0136.767] wcscpy (in: _Dest=0x3df2be8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\" [0136.767] wcscat (in: _Dest=0x3df2be8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" [0136.767] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\f0dbec-readme.txt")) returned 0x20 [0136.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2be8) returned 1 [0136.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ac58) returned 1 Thread: id = 574 os_tid = 0x1004 [0134.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a1f8 [0134.052] wcscpy (in: _Dest=0x3f3a1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" [0134.052] wcscat (in: _Dest=0x3f3a1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\" [0134.052] wcscat (in: _Dest=0x3f3a1f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\*" [0134.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0134.052] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0134.053] wcscmp (_String1=".", _String2=".") returned 0 [0134.053] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.053] wcscmp (_String1="..", _String2=".") returned 1 [0134.053] wcscmp (_String1="..", _String2="..") returned 0 [0134.053] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0134.054] wcscmp (_String1="10.0", _String2=".") returned 1 [0134.054] wcscmp (_String1="10.0", _String2="..") returned 1 [0134.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a268 [0134.054] wcscpy (in: _Dest=0x3f3a268, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" [0134.054] wcscat (in: _Dest=0x3f3a268, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\" [0134.054] wcscat (in: _Dest=0x3f3a268, _Source="10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0136.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0136.106] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0136.106] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0136.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0136.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a1f8) returned 1 [0136.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 Thread: id = 575 os_tid = 0x1008 [0134.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68240 [0134.054] wcscpy (in: _Dest=0x3e68240, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" [0134.054] wcscat (in: _Dest=0x3e68240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\" [0134.054] wcscat (in: _Dest=0x3e68240, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\*" [0134.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b7b0 [0134.054] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0135.698] wcscmp (_String1=".", _String2=".") returned 0 [0135.698] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.699] wcscmp (_String1="..", _String2=".") returned 1 [0135.699] wcscmp (_String1="..", _String2="..") returned 0 [0135.699] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0135.699] wcscmp (_String1="AssetCache", _String2=".") returned 1 [0135.699] wcscmp (_String1="AssetCache", _String2="..") returned 1 [0135.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f858 [0135.699] wcscpy (in: _Dest=0x3f2f858, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" [0135.699] wcscat (in: _Dest=0x3f2f858, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\" [0135.699] wcscat (in: _Dest=0x3f2f858, _Source="AssetCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" [0145.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f2f858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0145.011] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 0 [0145.012] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0145.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b7b0) returned 1 [0145.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68240) returned 1 [0145.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1b78) returned 1 Thread: id = 576 os_tid = 0x100c [0134.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a2d8 [0134.055] wcscpy (in: _Dest=0x3f3a2d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights" [0134.055] wcscat (in: _Dest=0x3f3a2d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\" [0134.055] wcscat (in: _Dest=0x3f3a2d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\*" [0134.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ba18 [0134.055] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf390 [0135.915] wcscmp (_String1=".", _String2=".") returned 0 [0135.915] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.915] wcscmp (_String1="..", _String2=".") returned 1 [0135.915] wcscmp (_String1="..", _String2="..") returned 0 [0135.915] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.915] FindClose (in: hFindFile=0x3dcf390 | out: hFindFile=0x3dcf390) returned 1 [0135.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ba18) returned 1 [0135.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a2d8) returned 1 [0135.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d98) returned 1 Thread: id = 577 os_tid = 0x1010 [0134.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e682b8 [0134.056] wcscpy (in: _Dest=0x3e682b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" [0134.056] wcscat (in: _Dest=0x3e682b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\" [0134.056] wcscat (in: _Dest=0x3e682b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\*" [0134.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bee8 [0134.056] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0136.029] wcscmp (_String1=".", _String2=".") returned 0 [0136.029] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.029] wcscmp (_String1="..", _String2=".") returned 1 [0136.029] wcscmp (_String1="..", _String2="..") returned 0 [0136.029] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0136.030] wcscmp (_String1="Dictionaries", _String2=".") returned 1 [0136.030] wcscmp (_String1="Dictionaries", _String2="..") returned 1 [0136.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30848 [0136.030] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" [0136.030] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\" [0136.030] wcscat (in: _Dest=0x3f30848, _Source="Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" [0143.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678 [0143.486] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0143.486] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0143.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bee8) returned 1 [0143.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 [0143.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e08) returned 1 Thread: id = 578 os_tid = 0x1014 [0134.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68330 [0134.056] wcscpy (in: _Dest=0x3e68330, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2" [0134.057] wcscat (in: _Dest=0x3e68330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\" [0134.057] wcscat (in: _Dest=0x3e68330, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\*" [0134.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0134.057] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0136.027] wcscmp (_String1=".", _String2=".") returned 0 [0136.027] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.027] wcscmp (_String1="..", _String2=".") returned 1 [0136.027] wcscmp (_String1="..", _String2="..") returned 0 [0136.027] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.028] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0136.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0136.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68330) returned 1 [0136.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 Thread: id = 579 os_tid = 0x1018 [0134.057] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv")) returned 0x20 [0134.057] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", dwFileAttributes=0x20) returned 1 [0134.960] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13fc [0134.960] GetFileSizeEx (in: hFile=0x13fc, lpFileSize=0xc80fbf8 | out: lpFileSize=0xc80fbf8*=26246026) returned 1 [0134.960] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x1907b86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.960] ReadFile (in: hFile=0x13fc, lpBuffer=0xc80fc04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc80fbe0, lpOverlapped=0x0 | out: lpBuffer=0xc80fc04*, lpNumberOfBytesRead=0xc80fbe0*=0x4, lpOverlapped=0x0) returned 1 [0135.010] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0135.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0135.010] NtQuerySystemTime (in: CurrentTime=0xc80fb80 | out: CurrentTime=0xc80fb80*=132471540036948000) returned 0x0 [0135.010] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x49304214 [0135.010] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x36a53622 [0135.010] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x202dd8a8 [0135.010] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x4009ea09 [0135.010] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x6f8796e7 [0135.010] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x777c9a67 [0135.010] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x72dc183 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x70c3e67c [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x6a8adb6d [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x46adad2e [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x46640f30 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x5243cbfa [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x6b8fff11 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x373ba824 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x2cfbe55e [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x3bf3326d [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x6535803b [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x50ce9387 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x2699c36d [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x1b77c785 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x468d9369 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x5b2a5faf [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x31610375 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x6f5aaa0a [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0xff9e990 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x5fcbd687 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x30b941c [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x12baad2 [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x368df06a [0135.011] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x30f5f479 [0135.012] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x1193f866 [0135.012] RtlRandomEx (in: Seed=0xc80fb78 | out: Seed=0xc80fb78) returned 0x7decdb67 [0135.021] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.021] ReadFile (in: hFile=0x13fc, lpBuffer=0x8293870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc80fb80, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesRead=0xc80fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0135.407] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f32228 [0135.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b550 [0135.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0135.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0135.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c44d8 [0135.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0135.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0135.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0135.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b550) returned 1 [0135.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32228) returned 1 [0135.408] WriteFile (in: hFile=0x13fc, lpBuffer=0x82c44d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc80fb80, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesWritten=0xc80fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0139.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0139.227] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0xc86400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.227] ReadFile (in: hFile=0x13fc, lpBuffer=0x8293870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc80fb80, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesRead=0xc80fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0139.230] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0xc86400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095a68 [0139.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c090 [0139.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0139.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1658) returned 1 [0139.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c44d8 [0139.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0139.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0139.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0139.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c090) returned 1 [0139.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095a68) returned 1 [0139.231] WriteFile (in: hFile=0x13fc, lpBuffer=0x82c44d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc80fb80, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesWritten=0xc80fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0141.069] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x1903f8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.070] ReadFile (in: hFile=0x13fc, lpBuffer=0x8293870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc80fb80, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesRead=0xc80fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.227] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x1903f8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83087b8 [0141.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0141.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0141.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0141.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82844d8 [0141.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0141.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0141.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0141.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0141.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83087b8) returned 1 [0141.228] WriteFile (in: hFile=0x13fc, lpBuffer=0x82844d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc80fb80, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesWritten=0xc80fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0142.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82844d8) returned 1 [0142.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd3a8 [0142.549] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.549] WriteFile (in: hFile=0x13fc, lpBuffer=0x3e17398*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xc80fbec, lpOverlapped=0x0 | out: lpBuffer=0x3e17398*, lpNumberOfBytesWritten=0xc80fbec*=0x14a, lpOverlapped=0x0) returned 1 [0142.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17398) returned 1 [0142.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3ed8) returned 1 [0142.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0142.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3f38) returned 1 [0142.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd3a8) returned 1 [0142.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0142.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0142.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0142.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc3e08 [0142.552] wcscpy (in: _Dest=0x3dc3e08, _Source="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv") returned="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" [0142.552] wcscat (in: _Dest=0x3dc3e08, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.f0dbec") returned="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.f0dbec" [0142.552] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.f0dbec", NtPathName=0xc80fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0142.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34d40 [0142.558] FlushFileBuffers (hFile=0x13fc) returned 1 [0143.826] CloseHandle (hObject=0x13fc) returned 1 [0144.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c1f8 [0144.001] wcscpy (in: _Dest=0x3f0c1f8, _Source="C:\\Users\\Public\\Videos\\Sample Videos\\" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\") returned="C:\\Users\\Public\\Videos\\Sample Videos\\" [0144.001] wcscat (in: _Dest=0x3f0c1f8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Videos\\Sample Videos\\F0DBEC-Readme.txt" [0144.001] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\f0dbec-readme.txt")) returned 0xffffffff [0144.001] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1784 [0144.002] WriteFile (in: hFile=0x1784, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc80fb94, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc80fb94*=0x70c, lpOverlapped=0x0) returned 1 [0144.004] CloseHandle (hObject=0x1784) returned 1 [0144.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c1f8) returned 1 [0144.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39bd8) returned 1 Thread: id = 580 os_tid = 0x101c [0134.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd000 [0134.058] wcscpy (in: _Dest=0x3ecd000, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" [0134.058] wcscat (in: _Dest=0x3ecd000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0134.059] wcscat (in: _Dest=0x3ecd000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\*" [0134.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0134.059] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49c93410, ftCreationTime.dwHighDateTime=0x1d5d9f7, ftLastAccessTime.dwLowDateTime=0x9db02e30, ftLastAccessTime.dwHighDateTime=0x1d5e2fd, ftLastWriteTime.dwLowDateTime=0x9db02e30, ftLastWriteTime.dwHighDateTime=0x1d5e2fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0134.059] wcscmp (_String1=".", _String2=".") returned 0 [0134.059] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49c93410, ftCreationTime.dwHighDateTime=0x1d5d9f7, ftLastAccessTime.dwLowDateTime=0x9db02e30, ftLastAccessTime.dwHighDateTime=0x1d5e2fd, ftLastWriteTime.dwLowDateTime=0x9db02e30, ftLastWriteTime.dwHighDateTime=0x1d5e2fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.059] wcscmp (_String1="..", _String2=".") returned 1 [0134.059] wcscmp (_String1="..", _String2="..") returned 0 [0134.059] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e48cf0, ftCreationTime.dwHighDateTime=0x1d5e32a, ftLastAccessTime.dwLowDateTime=0x9ab678b0, ftLastAccessTime.dwHighDateTime=0x1d5e41a, ftLastWriteTime.dwLowDateTime=0x9ab678b0, ftLastWriteTime.dwHighDateTime=0x1d5e41a, nFileSizeHigh=0x0, nFileSizeLow=0x106b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLj4k.swf", cAlternateFileName="")) returned 1 [0134.059] wcscmp (_String1="ATLj4k.swf", _String2=".") returned 1 [0134.059] wcscmp (_String1="ATLj4k.swf", _String2="..") returned 1 [0134.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e683a8 [0134.059] wcscpy (in: _Dest=0x3e683a8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" [0134.059] wcscat (in: _Dest=0x3e683a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0134.059] wcscat (in: _Dest=0x3e683a8, _Source="ATLj4k.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf" [0136.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e683a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0136.108] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f97120, ftCreationTime.dwHighDateTime=0x1d5e37b, ftLastAccessTime.dwLowDateTime=0xaa3b3870, ftLastAccessTime.dwHighDateTime=0x1d5de52, ftLastWriteTime.dwLowDateTime=0xaa3b3870, ftLastWriteTime.dwHighDateTime=0x1d5de52, nFileSizeHigh=0x0, nFileSizeLow=0x13fdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cr5Pvz.swf", cAlternateFileName="")) returned 1 [0136.108] wcscmp (_String1="Cr5Pvz.swf", _String2=".") returned 1 [0136.108] wcscmp (_String1="Cr5Pvz.swf", _String2="..") returned 1 [0136.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b898 [0136.109] wcscpy (in: _Dest=0x3f0b898, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" [0136.109] wcscat (in: _Dest=0x3f0b898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0136.109] wcscat (in: _Dest=0x3f0b898, _Source="Cr5Pvz.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf" [0136.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0136.111] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c1bb730, ftCreationTime.dwHighDateTime=0x1d5e3dc, ftLastAccessTime.dwLowDateTime=0x776a8ea0, ftLastAccessTime.dwHighDateTime=0x1d5d92f, ftLastWriteTime.dwLowDateTime=0x776a8ea0, ftLastWriteTime.dwHighDateTime=0x1d5d92f, nFileSizeHigh=0x0, nFileSizeLow=0x3b97, dwReserved0=0x0, dwReserved1=0x0, cFileName="g3xVgzICw.mkv", cAlternateFileName="G3XVGZ~1.MKV")) returned 1 [0136.111] wcscmp (_String1="g3xVgzICw.mkv", _String2=".") returned 1 [0136.111] wcscmp (_String1="g3xVgzICw.mkv", _String2="..") returned 1 [0136.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5688 [0136.112] wcscpy (in: _Dest=0x3dc5688, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" [0136.112] wcscat (in: _Dest=0x3dc5688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0136.112] wcscat (in: _Dest=0x3dc5688, _Source="g3xVgzICw.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv" [0136.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0136.113] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ebde30, ftCreationTime.dwHighDateTime=0x1d5dde2, ftLastAccessTime.dwLowDateTime=0xbd7c2250, ftLastAccessTime.dwHighDateTime=0x1d5de1b, ftLastWriteTime.dwLowDateTime=0xbd7c2250, ftLastWriteTime.dwHighDateTime=0x1d5de1b, nFileSizeHigh=0x0, nFileSizeLow=0x5dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jn_WSnohV6T3wlQ-6vJ8.mp4", cAlternateFileName="JN_WSN~1.MP4")) returned 1 [0136.113] wcscmp (_String1="Jn_WSnohV6T3wlQ-6vJ8.mp4", _String2=".") returned 1 [0136.113] wcscmp (_String1="Jn_WSnohV6T3wlQ-6vJ8.mp4", _String2="..") returned 1 [0136.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2bc60 [0136.113] wcscpy (in: _Dest=0x3e2bc60, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" [0136.113] wcscat (in: _Dest=0x3e2bc60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0136.114] wcscat (in: _Dest=0x3e2bc60, _Source="Jn_WSnohV6T3wlQ-6vJ8.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4" [0136.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0136.115] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2840f30, ftCreationTime.dwHighDateTime=0x1d5e7b7, ftLastAccessTime.dwLowDateTime=0x4350660, ftLastAccessTime.dwHighDateTime=0x1d5ded2, ftLastWriteTime.dwLowDateTime=0x4350660, ftLastWriteTime.dwHighDateTime=0x1d5ded2, nFileSizeHigh=0x0, nFileSizeLow=0x28d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="pDp8.avi", cAlternateFileName="")) returned 1 [0136.115] wcscmp (_String1="pDp8.avi", _String2=".") returned 1 [0136.115] wcscmp (_String1="pDp8.avi", _String2="..") returned 1 [0136.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b910 [0136.115] wcscpy (in: _Dest=0x3f0b910, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" [0136.115] wcscat (in: _Dest=0x3f0b910, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0136.115] wcscat (in: _Dest=0x3f0b910, _Source="pDp8.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi" [0136.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0136.117] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a139790, ftCreationTime.dwHighDateTime=0x1d5e7c0, ftLastAccessTime.dwLowDateTime=0x91f0f550, ftLastAccessTime.dwHighDateTime=0x1d5e24b, ftLastWriteTime.dwLowDateTime=0x91f0f550, ftLastWriteTime.dwHighDateTime=0x1d5e24b, nFileSizeHigh=0x0, nFileSizeLow=0x1035b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wn L5_lFnT.mkv", cAlternateFileName="WNL5_L~1.MKV")) returned 1 [0136.117] wcscmp (_String1="Wn L5_lFnT.mkv", _String2=".") returned 1 [0136.117] wcscmp (_String1="Wn L5_lFnT.mkv", _String2="..") returned 1 [0136.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24640 [0136.117] wcscpy (in: _Dest=0x3e24640, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B" [0136.117] wcscat (in: _Dest=0x3e24640, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0136.117] wcscat (in: _Dest=0x3e24640, _Source="Wn L5_lFnT.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv" [0136.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0136.119] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a139790, ftCreationTime.dwHighDateTime=0x1d5e7c0, ftLastAccessTime.dwLowDateTime=0x91f0f550, ftLastAccessTime.dwHighDateTime=0x1d5e24b, ftLastWriteTime.dwLowDateTime=0x91f0f550, ftLastWriteTime.dwHighDateTime=0x1d5e24b, nFileSizeHigh=0x0, nFileSizeLow=0x1035b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wn L5_lFnT.mkv", cAlternateFileName="WNL5_L~1.MKV")) returned 0 [0136.119] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0136.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0136.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd000) returned 1 [0136.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 Thread: id = 581 os_tid = 0x1020 [0134.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e22b40 [0134.060] wcscpy (in: _Dest=0x3e22b40, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" [0134.060] wcscat (in: _Dest=0x3e22b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0134.060] wcscat (in: _Dest=0x3e22b40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\*" [0134.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0134.060] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67480aa0, ftCreationTime.dwHighDateTime=0x1d5e40d, ftLastAccessTime.dwLowDateTime=0xe2605880, ftLastAccessTime.dwHighDateTime=0x1d5e86a, ftLastWriteTime.dwLowDateTime=0xe2605880, ftLastWriteTime.dwHighDateTime=0x1d5e86a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0134.060] wcscmp (_String1=".", _String2=".") returned 0 [0134.060] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67480aa0, ftCreationTime.dwHighDateTime=0x1d5e40d, ftLastAccessTime.dwLowDateTime=0xe2605880, ftLastAccessTime.dwHighDateTime=0x1d5e86a, ftLastWriteTime.dwLowDateTime=0xe2605880, ftLastWriteTime.dwHighDateTime=0x1d5e86a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.060] wcscmp (_String1="..", _String2=".") returned 1 [0134.060] wcscmp (_String1="..", _String2="..") returned 0 [0134.060] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6637bb20, ftCreationTime.dwHighDateTime=0x1d5db51, ftLastAccessTime.dwLowDateTime=0x86cda9e0, ftLastAccessTime.dwHighDateTime=0x1d5dfce, ftLastWriteTime.dwLowDateTime=0x86cda9e0, ftLastWriteTime.dwHighDateTime=0x1d5dfce, nFileSizeHigh=0x0, nFileSizeLow=0x165ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="4y_fHn0k2GTe2.swf", cAlternateFileName="4Y_FHN~1.SWF")) returned 1 [0134.060] wcscmp (_String1="4y_fHn0k2GTe2.swf", _String2=".") returned 1 [0134.060] wcscmp (_String1="4y_fHn0k2GTe2.swf", _String2="..") returned 1 [0134.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68420 [0134.060] wcscpy (in: _Dest=0x3e68420, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" [0134.060] wcscat (in: _Dest=0x3e68420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0134.060] wcscat (in: _Dest=0x3e68420, _Source="4y_fHn0k2GTe2.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf" [0138.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0138.943] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1039d0f0, ftCreationTime.dwHighDateTime=0x1d5dfca, ftLastAccessTime.dwLowDateTime=0xbf35a7a0, ftLastAccessTime.dwHighDateTime=0x1d5de67, ftLastWriteTime.dwLowDateTime=0xbf35a7a0, ftLastWriteTime.dwHighDateTime=0x1d5de67, nFileSizeHigh=0x0, nFileSizeLow=0xc449, dwReserved0=0x0, dwReserved1=0x0, cFileName="7iuJalpNQSk.flv", cAlternateFileName="7IUJAL~1.FLV")) returned 1 [0138.943] wcscmp (_String1="7iuJalpNQSk.flv", _String2=".") returned 1 [0138.943] wcscmp (_String1="7iuJalpNQSk.flv", _String2="..") returned 1 [0138.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68858 [0138.943] wcscpy (in: _Dest=0x3e68858, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" [0138.943] wcscat (in: _Dest=0x3e68858, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0138.943] wcscat (in: _Dest=0x3e68858, _Source="7iuJalpNQSk.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv" [0138.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0138.945] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d37e80, ftCreationTime.dwHighDateTime=0x1d5dd7a, ftLastAccessTime.dwLowDateTime=0x653ea220, ftLastAccessTime.dwHighDateTime=0x1d5e857, ftLastWriteTime.dwLowDateTime=0x653ea220, ftLastWriteTime.dwHighDateTime=0x1d5e857, nFileSizeHigh=0x0, nFileSizeLow=0x16168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FmZI.mkv", cAlternateFileName="")) returned 1 [0138.945] wcscmp (_String1="FmZI.mkv", _String2=".") returned 1 [0138.945] wcscmp (_String1="FmZI.mkv", _String2="..") returned 1 [0138.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e758 [0138.945] wcscpy (in: _Dest=0x3d8e758, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" [0138.945] wcscat (in: _Dest=0x3d8e758, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0138.945] wcscat (in: _Dest=0x3d8e758, _Source="FmZI.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv" [0138.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0138.946] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf30be4e0, ftCreationTime.dwHighDateTime=0x1d5dcd7, ftLastAccessTime.dwLowDateTime=0x75af660, ftLastAccessTime.dwHighDateTime=0x1d5d95f, ftLastWriteTime.dwLowDateTime=0x75af660, ftLastWriteTime.dwHighDateTime=0x1d5d95f, nFileSizeHigh=0x0, nFileSizeLow=0x521d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LxPlOAL2b5Z1.mp4", cAlternateFileName="LXPLOA~1.MP4")) returned 1 [0138.946] wcscmp (_String1="LxPlOAL2b5Z1.mp4", _String2=".") returned 1 [0138.946] wcscmp (_String1="LxPlOAL2b5Z1.mp4", _String2="..") returned 1 [0138.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68768 [0138.946] wcscpy (in: _Dest=0x3e68768, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" [0138.947] wcscat (in: _Dest=0x3e68768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0138.947] wcscat (in: _Dest=0x3e68768, _Source="LxPlOAL2b5Z1.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4" [0138.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0138.948] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdb83370, ftCreationTime.dwHighDateTime=0x1d5e084, ftLastAccessTime.dwLowDateTime=0x39577530, ftLastAccessTime.dwHighDateTime=0x1d5dbee, ftLastWriteTime.dwLowDateTime=0x39577530, ftLastWriteTime.dwHighDateTime=0x1d5dbee, nFileSizeHigh=0x0, nFileSizeLow=0xabae, dwReserved0=0x0, dwReserved1=0x0, cFileName="mDUXBrYELe T7frv2t.mp4", cAlternateFileName="MDUXBR~1.MP4")) returned 1 [0138.948] wcscmp (_String1="mDUXBrYELe T7frv2t.mp4", _String2=".") returned 1 [0138.948] wcscmp (_String1="mDUXBrYELe T7frv2t.mp4", _String2="..") returned 1 [0138.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3daf408 [0138.948] wcscpy (in: _Dest=0x3daf408, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-" [0138.948] wcscat (in: _Dest=0x3daf408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0138.948] wcscat (in: _Dest=0x3daf408, _Source="mDUXBrYELe T7frv2t.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4" [0138.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3daf408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0138.950] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdb83370, ftCreationTime.dwHighDateTime=0x1d5e084, ftLastAccessTime.dwLowDateTime=0x39577530, ftLastAccessTime.dwHighDateTime=0x1d5dbee, ftLastWriteTime.dwLowDateTime=0x39577530, ftLastWriteTime.dwHighDateTime=0x1d5dbee, nFileSizeHigh=0x0, nFileSizeLow=0xabae, dwReserved0=0x0, dwReserved1=0x0, cFileName="mDUXBrYELe T7frv2t.mp4", cAlternateFileName="MDUXBR~1.MP4")) returned 0 [0138.950] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0138.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0138.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22b40) returned 1 [0138.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22d50) returned 1 Thread: id = 582 os_tid = 0x1024 [0134.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7508 [0134.061] wcscpy (in: _Dest=0x2fe7508, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" [0134.061] wcscat (in: _Dest=0x2fe7508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" [0134.061] wcscat (in: _Dest=0x2fe7508, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\*" [0134.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a6d8 [0134.061] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\*", lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0ed570, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x122e3f20, ftLastAccessTime.dwHighDateTime=0x1d5d941, ftLastWriteTime.dwLowDateTime=0x122e3f20, ftLastWriteTime.dwHighDateTime=0x1d5d941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0134.061] wcscmp (_String1=".", _String2=".") returned 0 [0134.061] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0ed570, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x122e3f20, ftLastAccessTime.dwHighDateTime=0x1d5d941, ftLastWriteTime.dwLowDateTime=0x122e3f20, ftLastWriteTime.dwHighDateTime=0x1d5d941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.061] wcscmp (_String1="..", _String2=".") returned 1 [0134.061] wcscmp (_String1="..", _String2="..") returned 0 [0134.062] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ebacd0, ftCreationTime.dwHighDateTime=0x1d5dc7e, ftLastAccessTime.dwLowDateTime=0x765a9d60, ftLastAccessTime.dwHighDateTime=0x1d5e1c3, ftLastWriteTime.dwLowDateTime=0x765a9d60, ftLastWriteTime.dwHighDateTime=0x1d5e1c3, nFileSizeHigh=0x0, nFileSizeLow=0x14813, dwReserved0=0x0, dwReserved1=0x0, cFileName="6hGSo6-W.mkv", cAlternateFileName="")) returned 1 [0134.062] wcscmp (_String1="6hGSo6-W.mkv", _String2=".") returned 1 [0134.062] wcscmp (_String1="6hGSo6-W.mkv", _String2="..") returned 1 [0134.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68498 [0134.062] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" [0134.062] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" [0134.062] wcscat (in: _Dest=0x3e68498, _Source="6hGSo6-W.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv" [0135.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0 [0135.508] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b2fe20, ftCreationTime.dwHighDateTime=0x1d5e732, ftLastAccessTime.dwLowDateTime=0x2b5dbf70, ftLastAccessTime.dwHighDateTime=0x1d5dd1a, ftLastWriteTime.dwLowDateTime=0x2b5dbf70, ftLastWriteTime.dwHighDateTime=0x1d5dd1a, nFileSizeHigh=0x0, nFileSizeLow=0x18688, dwReserved0=0x0, dwReserved1=0x0, cFileName="c5VjSy3-6ByPuw-pwZIb.flv", cAlternateFileName="C5VJSY~1.FLV")) returned 1 [0135.508] wcscmp (_String1="c5VjSy3-6ByPuw-pwZIb.flv", _String2=".") returned 1 [0135.508] wcscmp (_String1="c5VjSy3-6ByPuw-pwZIb.flv", _String2="..") returned 1 [0135.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f352e0 [0135.508] wcscpy (in: _Dest=0x3f352e0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" [0135.508] wcscat (in: _Dest=0x3f352e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" [0135.508] wcscat (in: _Dest=0x3f352e0, _Source="c5VjSy3-6ByPuw-pwZIb.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv" [0135.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f352e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0135.509] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74464f50, ftCreationTime.dwHighDateTime=0x1d5dc10, ftLastAccessTime.dwLowDateTime=0x6c20c020, ftLastAccessTime.dwHighDateTime=0x1d5db2b, ftLastWriteTime.dwLowDateTime=0x6c20c020, ftLastWriteTime.dwHighDateTime=0x1d5db2b, nFileSizeHigh=0x0, nFileSizeLow=0x112ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSvOsb9iWjldCO1vCRK.flv", cAlternateFileName="DSVOSB~1.FLV")) returned 1 [0135.509] wcscmp (_String1="DSvOsb9iWjldCO1vCRK.flv", _String2=".") returned 1 [0135.510] wcscmp (_String1="DSvOsb9iWjldCO1vCRK.flv", _String2="..") returned 1 [0135.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35370 [0135.510] wcscpy (in: _Dest=0x3f35370, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" [0135.510] wcscat (in: _Dest=0x3f35370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" [0135.510] wcscat (in: _Dest=0x3f35370, _Source="DSvOsb9iWjldCO1vCRK.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv" [0135.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0135.511] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d13360, ftCreationTime.dwHighDateTime=0x1d5e105, ftLastAccessTime.dwLowDateTime=0xd63d5950, ftLastAccessTime.dwHighDateTime=0x1d5e58a, ftLastWriteTime.dwLowDateTime=0xd63d5950, ftLastWriteTime.dwHighDateTime=0x1d5e58a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Im7reSDxIOq", cAlternateFileName="IM7RES~1")) returned 1 [0135.511] wcscmp (_String1="Im7reSDxIOq", _String2=".") returned 1 [0135.511] wcscmp (_String1="Im7reSDxIOq", _String2="..") returned 1 [0135.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32e80 [0135.511] wcscpy (in: _Dest=0x3f32e80, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" [0135.511] wcscat (in: _Dest=0x3f32e80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" [0135.511] wcscat (in: _Dest=0x3f32e80, _Source="Im7reSDxIOq" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" [0135.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1114 [0135.513] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79648d20, ftCreationTime.dwHighDateTime=0x1d5e715, ftLastAccessTime.dwLowDateTime=0x83c92940, ftLastAccessTime.dwHighDateTime=0x1d5e3fc, ftLastWriteTime.dwLowDateTime=0x83c92940, ftLastWriteTime.dwHighDateTime=0x1d5e3fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="W3sxHAww0gkLkZVGTZ", cAlternateFileName="W3SXHA~1")) returned 1 [0135.513] wcscmp (_String1="W3sxHAww0gkLkZVGTZ", _String2=".") returned 1 [0135.513] wcscmp (_String1="W3sxHAww0gkLkZVGTZ", _String2="..") returned 1 [0135.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fbb8 [0135.513] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE" [0135.513] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" [0135.513] wcscat (in: _Dest=0x3e1fbb8, _Source="W3sxHAww0gkLkZVGTZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" [0135.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0135.514] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79648d20, ftCreationTime.dwHighDateTime=0x1d5e715, ftLastAccessTime.dwLowDateTime=0x83c92940, ftLastAccessTime.dwHighDateTime=0x1d5e3fc, ftLastWriteTime.dwLowDateTime=0x83c92940, ftLastWriteTime.dwHighDateTime=0x1d5e3fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="W3sxHAww0gkLkZVGTZ", cAlternateFileName="W3SXHA~1")) returned 0 [0135.514] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0135.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a6d8) returned 1 [0135.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7508) returned 1 [0135.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 Thread: id = 583 os_tid = 0x1028 [0134.062] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\feasf@efw.com.pst")) returned 0x2020 [0134.064] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst", dwFileAttributes=0x20) returned 1 [0138.433] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\feasf@efw.com.pst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1040 [0138.434] GetFileSizeEx (in: hFile=0x1040, lpFileSize=0xc85fad8 | out: lpFileSize=0xc85fad8*=271360) returned 1 [0138.434] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x423fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.434] ReadFile (in: hFile=0x1040, lpBuffer=0xc85fae4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc85fac0, lpOverlapped=0x0 | out: lpBuffer=0xc85fae4*, lpNumberOfBytesRead=0xc85fac0*=0x4, lpOverlapped=0x0) returned 1 [0138.435] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0138.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0138.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0138.436] NtQuerySystemTime (in: CurrentTime=0xc85fa60 | out: CurrentTime=0xc85fa60*=132471540071268000) returned 0x0 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x7862f3b5 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x5aab4e3b [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x1a3db70f [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x14fbf35c [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x7699c573 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0xee004a1 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x2049f9e7 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x476b8790 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x2724c57e [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x2c965f5f [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x75f782e7 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x3e2b1046 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x58bee030 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0xc6f397f [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x5d6d4b0f [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x553e3512 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x6cddd7a0 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x142d3d5a [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x5a519249 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x6059314 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x1c3ff00a [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x63c06130 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x356f62a3 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x127dc8fa [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x16e71708 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x11084575 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x6110f129 [0138.436] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x5b7f8a59 [0138.437] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x76013f67 [0138.437] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x39aa9e3c [0138.437] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x12baa327 [0138.437] RtlRandomEx (in: Seed=0xc85fa58 | out: Seed=0xc85fa58) returned 0x43e84c87 [0138.445] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.445] ReadFile (in: hFile=0x1040, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc85fa60, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xc85fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0138.447] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4350 [0138.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33330 [0138.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0138.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0138.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0138.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0138.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0138.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0138.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 [0138.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0138.448] WriteFile (in: hFile=0x1040, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc85fa60, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xc85fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0138.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0138.450] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.450] ReadFile (in: hFile=0x1040, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc85fa60, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xc85fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0138.450] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4350 [0138.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33330 [0138.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0138.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0138.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0138.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0138.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0138.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0138.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 [0138.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0138.451] WriteFile (in: hFile=0x1040, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc85fa60, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xc85fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0142.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0142.538] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.538] ReadFile (in: hFile=0x1040, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc85fa60, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xc85fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0142.538] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x2ff0010 [0142.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f324a8 [0142.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2648 [0142.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2648) returned 1 [0142.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0142.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2648 [0142.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0142.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0142.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0142.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff0010) returned 1 [0142.539] WriteFile (in: hFile=0x1040, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc85fa60, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xc85fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0143.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0143.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e070 [0143.585] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.585] WriteFile (in: hFile=0x1040, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xc85facc, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0xc85facc*=0x154, lpOverlapped=0x0) returned 1 [0144.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0144.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7bb8) returned 1 [0144.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0144.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8210) returned 1 [0144.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 [0144.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0144.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0144.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0144.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1bb8 [0144.764] wcscpy (in: _Dest=0x3eb1bb8, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" [0144.764] wcscat (in: _Dest=0x3eb1bb8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst.f0dbec" [0144.764] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst.f0dbec", NtPathName=0xc85fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187958 [0145.272] FlushFileBuffers (hFile=0x1040) returned 1 [0145.299] CloseHandle (hObject=0x1040) returned 1 [0145.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831ab58 [0145.540] wcscpy (in: _Dest=0x831ab58, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0145.540] wcscat (in: _Dest=0x831ab58, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\F0DBEC-Readme.txt" [0145.540] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\f0dbec-readme.txt")) returned 0xffffffff [0146.286] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13e8 [0147.341] WriteFile (in: hFile=0x13e8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc85fa74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc85fa74*=0x70c, lpOverlapped=0x0) returned 1 [0147.344] CloseHandle (hObject=0x13e8) returned 1 [0147.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831ab58) returned 1 [0147.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 584 os_tid = 0x102c [0134.065] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\outlook data file - mail.pst")) returned 0x2020 [0134.377] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst", dwFileAttributes=0x20) returned 1 [0139.223] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\outlook data file - mail.pst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd6c [0139.223] GetFileSizeEx (in: hFile=0xd6c, lpFileSize=0xc94f838 | out: lpFileSize=0xc94f838*=271360) returned 1 [0139.223] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x423fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.223] ReadFile (in: hFile=0xd6c, lpBuffer=0xc94f844, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc94f820, lpOverlapped=0x0 | out: lpBuffer=0xc94f844*, lpNumberOfBytesRead=0xc94f820*=0x4, lpOverlapped=0x0) returned 1 [0139.226] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0139.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0139.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1770 [0139.226] NtQuerySystemTime (in: CurrentTime=0xc94f7c0 | out: CurrentTime=0xc94f7c0*=132471540078912000) returned 0x0 [0139.226] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0xffba0e2 [0139.226] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x6a7c488b [0139.226] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x469bbc69 [0139.226] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x6e179b85 [0139.226] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x65669379 [0139.226] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x38eb934d [0139.227] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x469f4668 [0139.227] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x7ed8ce7f [0139.227] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x5744f75d [0139.227] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x74237372 [0139.229] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x4547204 [0139.229] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x58905b56 [0139.230] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0xdce42b4 [0139.230] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x541f0761 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x534b802f [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x10079974 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x20ab0680 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x5d7c7ee8 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x748cf4cd [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x1aac0780 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x43d49228 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x5bf15f31 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x1360ee2e [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x35e08121 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x5908ff47 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x47d39e3b [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x323586fc [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0xeabddfd [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x1e9f5555 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0xecfb3a2 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0xde7d109 [0139.232] RtlRandomEx (in: Seed=0xc94f7b8 | out: Seed=0xc94f7b8) returned 0x31bf0277 [0139.246] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.246] ReadFile (in: hFile=0xd6c, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc94f7c0, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0xc94f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0139.249] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095a68 [0139.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c1f8 [0139.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0139.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0139.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0139.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0139.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1770 [0139.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0139.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c1f8) returned 1 [0139.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095a68) returned 1 [0139.250] WriteFile (in: hFile=0xd6c, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc94f7c0, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0xc94f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0142.541] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.541] ReadFile (in: hFile=0xd6c, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc94f7c0, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0xc94f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.542] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x2ff0010 [0142.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f324a8 [0142.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0142.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0142.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0142.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0142.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0142.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0142.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0142.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff0010) returned 1 [0142.543] WriteFile (in: hFile=0xd6c, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc94f7c0, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0xc94f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0143.043] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.043] ReadFile (in: hFile=0xd6c, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc94f7c0, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0xc94f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.044] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0143.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0143.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0143.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.045] WriteFile (in: hFile=0xd6c, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc94f7c0, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0xc94f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0144.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e890 [0144.650] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.650] WriteFile (in: hFile=0xd6c, lpBuffer=0x3e39870*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0xc94f82c, lpOverlapped=0x0 | out: lpBuffer=0x3e39870*, lpNumberOfBytesWritten=0xc94f82c*=0x16a, lpOverlapped=0x0) returned 1 [0145.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39870) returned 1 [0145.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de64c8) returned 1 [0145.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0145.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5fc8) returned 1 [0145.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e890) returned 1 [0145.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0145.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0145.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0145.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187d48 [0145.269] wcscpy (in: _Dest=0x8187d48, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" [0145.269] wcscat (in: _Dest=0x8187d48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst.f0dbec" [0145.269] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst.f0dbec", NtPathName=0xc94f7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff67f8 [0146.893] FlushFileBuffers (hFile=0xd6c) returned 1 [0146.913] CloseHandle (hObject=0xd6c) returned 1 [0146.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831aad8 [0146.914] wcscpy (in: _Dest=0x831aad8, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0146.914] wcscat (in: _Dest=0x831aad8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\F0DBEC-Readme.txt" [0146.914] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\f0dbec-readme.txt")) returned 0x20 [0146.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831aad8) returned 1 [0146.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b378) returned 1 Thread: id = 585 os_tid = 0x1030 [0134.066] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ojt5aobizbjhtourpx-.flv")) returned 0x2020 [0134.066] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv", dwFileAttributes=0x20) returned 1 [0138.449] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ojt5aobizbjhtourpx-.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd8c [0138.449] GetFileSizeEx (in: hFile=0xd8c, lpFileSize=0xb50fb90 | out: lpFileSize=0xb50fb90*=98961) returned 1 [0138.449] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x1828d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.452] ReadFile (in: hFile=0xd8c, lpBuffer=0xb50fb9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb50fb78, lpOverlapped=0x0 | out: lpBuffer=0xb50fb9c*, lpNumberOfBytesRead=0xb50fb78*=0x4, lpOverlapped=0x0) returned 1 [0138.454] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0138.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0138.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.454] NtQuerySystemTime (in: CurrentTime=0xb50fb18 | out: CurrentTime=0xb50fb18*=132471540071424000) returned 0x0 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x7b4b2a92 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x3ecbd3e3 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x6946bbee [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x3ccfdf79 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x138a1cc5 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x33934093 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x5b5be1f1 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x14d1af6d [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x4531865d [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x5d3c7640 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x494bfbc2 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x79e084dc [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x485a8d29 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x104201a8 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x7d2cee7a [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x11ecffa7 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x1df41c57 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x58a84c15 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x6cca5c83 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x72871cc5 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x546a4113 [0138.454] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x1efdfb04 [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x51011759 [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x12ae125f [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x11a81862 [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x67274892 [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x7716d9b9 [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x3886bfae [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x5193c19c [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x34368187 [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x45788b48 [0138.455] RtlRandomEx (in: Seed=0xb50fb10 | out: Seed=0xb50fb10) returned 0x447431ea [0138.465] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.465] ReadFile (in: hFile=0xd8c, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb50fb18, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0xb50fb18*=0x3c00, lpOverlapped=0x0) returned 1 [0138.465] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4350 [0138.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33330 [0138.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0138.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0138.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0138.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0138.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0138.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 [0138.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0138.466] WriteFile (in: hFile=0xd8c, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb50fb18, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0xb50fb18*=0x3c00, lpOverlapped=0x0) returned 1 [0139.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0139.297] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.297] ReadFile (in: hFile=0xd8c, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb50fb18, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0xb50fb18*=0x3c00, lpOverlapped=0x0) returned 1 [0139.298] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd42c0 [0139.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32c28 [0139.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0139.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0139.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0139.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0139.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0139.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc08) returned 1 [0139.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0139.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd42c0) returned 1 [0139.299] WriteFile (in: hFile=0xd8c, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb50fb18, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0xb50fb18*=0x3c00, lpOverlapped=0x0) returned 1 [0140.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0140.233] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x14691, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.233] ReadFile (in: hFile=0xd8c, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb50fb18, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0xb50fb18*=0x3c00, lpOverlapped=0x0) returned 1 [0140.234] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x14691, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31a00 [0140.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b820 [0140.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2210 [0140.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2210) returned 1 [0140.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0140.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2210 [0140.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8d0 [0140.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8d0) returned 1 [0140.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b820) returned 1 [0140.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31a00) returned 1 [0140.235] WriteFile (in: hFile=0xd8c, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb50fb18, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0xb50fb18*=0x3c00, lpOverlapped=0x0) returned 1 [0141.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0141.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3db0 [0141.076] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.076] WriteFile (in: hFile=0xd8c, lpBuffer=0x3dce270*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0xb50fb84, lpOverlapped=0x0 | out: lpBuffer=0x3dce270*, lpNumberOfBytesWritten=0xb50fb84*=0x160, lpOverlapped=0x0) returned 1 [0141.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce270) returned 1 [0141.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4118) returned 1 [0141.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0141.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b39c8) returned 1 [0141.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3db0) returned 1 [0141.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0141.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0141.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0141.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054408 [0141.687] wcscpy (in: _Dest=0x8054408, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv" [0141.687] wcscat (in: _Dest=0x8054408, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv.f0dbec" [0141.687] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv.f0dbec", NtPathName=0xb50fb08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\oJT5aObizbJhTOURPx-.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3ef8cf8 [0142.021] FlushFileBuffers (hFile=0xd8c) returned 1 [0142.053] CloseHandle (hObject=0xd8c) returned 1 [0142.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80555e0 [0142.054] wcscpy (in: _Dest=0x80555e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.054] wcscat (in: _Dest=0x80555e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.054] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80555e0) returned 1 [0142.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5a08) returned 1 Thread: id = 586 os_tid = 0x1034 [0134.070] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\omckjiwpuwgbi_2izo.docx")) returned 0x2020 [0134.070] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx", dwFileAttributes=0x20) returned 1 [0138.468] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\omckjiwpuwgbi_2izo.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf0 [0138.468] GetFileSizeEx (in: hFile=0xdf0, lpFileSize=0xc8ff910 | out: lpFileSize=0xc8ff910*=8286) returned 1 [0138.468] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x205a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.468] ReadFile (in: hFile=0xdf0, lpBuffer=0xc8ff91c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc8ff8f8, lpOverlapped=0x0 | out: lpBuffer=0xc8ff91c*, lpNumberOfBytesRead=0xc8ff8f8*=0x4, lpOverlapped=0x0) returned 1 [0138.470] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0138.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0138.470] NtQuerySystemTime (in: CurrentTime=0xc8ff898 | out: CurrentTime=0xc8ff898*=132471540071580000) returned 0x0 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x58f4ad1a [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x39e95960 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x3046b8c9 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x47a9b591 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x2274deaf [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x22848d30 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x745296b3 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x301d1adb [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x62a01416 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x305699c [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x5866d674 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x7582ac75 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x90adcf9 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x16021be2 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x11618495 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x2470fb3b [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x35004f70 [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x54b7016e [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x2096419e [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x502260e [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x371b492f [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x1b07019b [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x4240fa0c [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x64ce80bc [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x1f0e295b [0138.470] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x48632024 [0138.471] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x2014da6e [0138.471] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x6907bd31 [0138.471] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x670cc837 [0138.471] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x61fc72a6 [0138.471] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x439c62c0 [0138.471] RtlRandomEx (in: Seed=0xc8ff890 | out: Seed=0xc8ff890) returned 0x486deb30 [0138.478] ReadFile (in: hFile=0xdf0, lpBuffer=0x8253870, nNumberOfBytesToRead=0x205e, lpNumberOfBytesRead=0xc8ff88c, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0xc8ff88c*=0x205e, lpOverlapped=0x0) returned 1 [0138.478] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.479] WriteFile (in: hFile=0xdf0, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x205e, lpNumberOfBytesWritten=0xc8ff890, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xc8ff890*=0x205e, lpOverlapped=0x0) returned 1 [0139.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0139.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0139.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc58) returned 1 [0139.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0139.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0139.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 [0139.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0139.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3dd4350 [0139.300] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.300] WriteFile (in: hFile=0xdf0, lpBuffer=0x3042500*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xc8ff904, lpOverlapped=0x0 | out: lpBuffer=0x3042500*, lpNumberOfBytesWritten=0xc8ff904*=0x120, lpOverlapped=0x0) returned 1 [0141.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0141.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4428) returned 1 [0141.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc58) returned 1 [0141.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0141.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc08) returned 1 [0141.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0141.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0141.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0141.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053390 [0141.011] wcscpy (in: _Dest=0x8053390, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx" [0141.011] wcscat (in: _Dest=0x8053390, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx.f0dbec" [0141.011] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx.f0dbec", NtPathName=0xc8ff888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\omckjiwpUWgBI_2izO.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12408 [0142.034] FlushFileBuffers (hFile=0xdf0) returned 1 [0142.062] CloseHandle (hObject=0xdf0) returned 1 [0142.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39e78 [0142.104] wcscpy (in: _Dest=0x3f39e78, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.104] wcscat (in: _Dest=0x3f39e78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.104] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e78) returned 1 [0142.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4688) returned 1 Thread: id = 587 os_tid = 0x1038 [0134.073] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\oosjpptf7ixbagj4.docx")) returned 0x2020 [0134.073] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx", dwFileAttributes=0x20) returned 1 [0138.480] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\oosjpptf7ixbagj4.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde4 [0138.480] GetFileSizeEx (in: hFile=0xde4, lpFileSize=0x22bfc70 | out: lpFileSize=0x22bfc70*=35671) returned 1 [0138.480] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x8b53, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.480] ReadFile (in: hFile=0xde4, lpBuffer=0x22bfc7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x22bfc58, lpOverlapped=0x0 | out: lpBuffer=0x22bfc7c*, lpNumberOfBytesRead=0x22bfc58*=0x4, lpOverlapped=0x0) returned 1 [0138.482] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0138.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0138.483] NtQuerySystemTime (in: CurrentTime=0x22bfbf8 | out: CurrentTime=0x22bfbf8*=132471540071736000) returned 0x0 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x117d3fa2 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x1d74b243 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x6c2d6a9c [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x7c792a55 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0xa267200 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x6c209c00 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x65b507b4 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x72ef42c3 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x2c7c3c4e [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x85ade8 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x66102f94 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x6aba9bd4 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0xb21e5fc [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x37fc553a [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x244f4467 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x10809ef7 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x1a647785 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x36875570 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x5da04ca9 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x60538e2e [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x33510272 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x15ac6a62 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x158191a2 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x42943c57 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x27bf4ae1 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x11baa7 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x118f89f5 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x4d3c5724 [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x3a20007a [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x775b209a [0138.483] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x7be82951 [0138.484] RtlRandomEx (in: Seed=0x22bfbf0 | out: Seed=0x22bfbf0) returned 0x5a3c7bd3 [0138.492] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.492] ReadFile (in: hFile=0xde4, lpBuffer=0x82718b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x22bfbf8, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesRead=0x22bfbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.493] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3e88 [0138.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0138.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0138.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82754b8 [0138.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0138.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0138.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0138.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0138.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0138.494] WriteFile (in: hFile=0xde4, lpBuffer=0x82754b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x22bfbf8, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesWritten=0x22bfbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0139.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0139.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067100 [0139.301] SetFilePointerEx (in: hFile=0xde4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.302] WriteFile (in: hFile=0xde4, lpBuffer=0x3041720*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x22bfc64, lpOverlapped=0x0 | out: lpBuffer=0x3041720*, lpNumberOfBytesWritten=0x22bfc64*=0x11c, lpOverlapped=0x0) returned 1 [0141.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0141.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30670c0) returned 1 [0141.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0141.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067100) returned 1 [0141.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0141.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0141.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0141.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0141.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8054270 [0141.644] wcscpy (in: _Dest=0x8054270, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx" [0141.644] wcscat (in: _Dest=0x8054270, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx.f0dbec" [0141.644] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx.f0dbec", NtPathName=0x22bfbe8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\OosJPPtF7ixbagj4.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e12408 [0142.008] FlushFileBuffers (hFile=0xde4) returned 1 [0142.061] CloseHandle (hObject=0xde4) returned 1 [0142.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39f58 [0142.096] wcscpy (in: _Dest=0x3f39f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.096] wcscat (in: _Dest=0x3f39f58, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.096] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39f58) returned 1 [0142.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 Thread: id = 588 os_tid = 0x103c [0134.073] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\tssx5lzssu4rbrbi.gif")) returned 0x2020 [0134.073] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif", dwFileAttributes=0x20) returned 1 [0138.495] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\tssx5lzssu4rbrbi.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda0 [0138.496] GetFileSizeEx (in: hFile=0xda0, lpFileSize=0xca1ff48 | out: lpFileSize=0xca1ff48*=92896) returned 1 [0138.496] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x16adc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.496] ReadFile (in: hFile=0xda0, lpBuffer=0xca1ff54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xca1ff30, lpOverlapped=0x0 | out: lpBuffer=0xca1ff54*, lpNumberOfBytesRead=0xca1ff30*=0x4, lpOverlapped=0x0) returned 1 [0138.498] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0138.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0138.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.498] NtQuerySystemTime (in: CurrentTime=0xca1fed0 | out: CurrentTime=0xca1fed0*=132471540071892000) returned 0x0 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0xa8a9cc3 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x726d3080 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x4e3b3edd [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x3f3ce571 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x795e7e2c [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x59e69651 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x4b96b961 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x4b55220e [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x7ee10acc [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x20f8dacf [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x1df41c57 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x1b835bda [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x52404429 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x6b2d4dfd [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x195648b0 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0xf554812 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x4b38015d [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0xcb19754 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x71bfaf36 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x377b34d6 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x1859f662 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x535a3685 [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0xdf1a88a [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x6c00ee7d [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x34ea98fc [0138.498] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x4119ebd7 [0138.499] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x20d5a34e [0138.499] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x10c38a6c [0138.499] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x379dd40a [0138.499] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x342735ed [0138.499] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x6c8ca186 [0138.499] RtlRandomEx (in: Seed=0xca1fec8 | out: Seed=0xca1fec8) returned 0x16703f58 [0138.507] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.507] ReadFile (in: hFile=0xda0, lpBuffer=0x82844d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xca1fed0, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0xca1fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.507] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3e88 [0138.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0138.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0138.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0138.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a458 [0138.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0138.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0138.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0138.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0138.508] WriteFile (in: hFile=0xda0, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xca1fed0, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0xca1fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0139.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0139.302] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.302] ReadFile (in: hFile=0xda0, lpBuffer=0x82844d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xca1fed0, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0xca1fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0139.303] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd42c0 [0139.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33330 [0139.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0139.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0139.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a458 [0139.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0139.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0139.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0139.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 [0139.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd42c0) returned 1 [0139.304] WriteFile (in: hFile=0xda0, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xca1fed0, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0xca1fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0140.236] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x12ee0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.236] ReadFile (in: hFile=0xda0, lpBuffer=0x82844d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xca1fed0, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0xca1fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.236] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x12ee0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31a00 [0140.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b820 [0140.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8d0 [0140.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8d0) returned 1 [0140.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a458 [0140.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8d0 [0140.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0140.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0140.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b820) returned 1 [0140.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31a00) returned 1 [0140.237] WriteFile (in: hFile=0xda0, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xca1fed0, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0xca1fed0*=0x3c00, lpOverlapped=0x0) returned 1 [0141.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0141.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3d48 [0141.077] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.077] WriteFile (in: hFile=0xda0, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0xca1ff3c, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0xca1ff3c*=0x15a, lpOverlapped=0x0) returned 1 [0141.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0141.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099610) returned 1 [0141.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0141.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80995d0) returned 1 [0141.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3d48) returned 1 [0141.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0141.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0141.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0141.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8054490 [0141.700] wcscpy (in: _Dest=0x8054490, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif" [0141.700] wcscat (in: _Dest=0x8054490, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif.f0dbec" [0141.700] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif.f0dbec", NtPathName=0xca1fec0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\tssx5lzSsU4rbRBI.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c670 [0142.025] FlushFileBuffers (hFile=0xda0) returned 1 [0142.054] CloseHandle (hObject=0xda0) returned 1 [0142.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80555e0 [0142.055] wcscpy (in: _Dest=0x80555e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.055] wcscat (in: _Dest=0x80555e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.056] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80555e0) returned 1 [0142.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 Thread: id = 589 os_tid = 0x1040 [0134.074] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\twtlxaik2sm.gif")) returned 0x2020 [0134.074] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif", dwFileAttributes=0x20) returned 1 [0138.509] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\twtlxaik2sm.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdcc [0138.510] GetFileSizeEx (in: hFile=0xdcc, lpFileSize=0xc8bfb50 | out: lpFileSize=0xc8bfb50*=36080) returned 1 [0138.510] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x8cec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.510] ReadFile (in: hFile=0xdcc, lpBuffer=0xc8bfb5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc8bfb38, lpOverlapped=0x0 | out: lpBuffer=0xc8bfb5c*, lpNumberOfBytesRead=0xc8bfb38*=0x4, lpOverlapped=0x0) returned 1 [0138.512] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0138.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0138.512] NtQuerySystemTime (in: CurrentTime=0xc8bfad8 | out: CurrentTime=0xc8bfad8*=132471540071892000) returned 0x0 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x6868580 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x10fcb562 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x2fb9476 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x5fa57566 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x644dd3b8 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x25d952c7 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x6c4a3a2f [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x49ad1800 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x1b835bda [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x6c1b8b90 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x20dfa063 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x38b89690 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x53f7ae3e [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x5fe6f950 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x47d64363 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x7ec0e005 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x68968a59 [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x155af2eb [0138.512] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x52dca74d [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x600d0dc8 [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x600d0dc8 [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0xdb7ddc9 [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x56b82dc0 [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x23a82a5e [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x576e6ae2 [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x1f962f63 [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x13c85771 [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x57bf1e72 [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x47813e04 [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x171bb81c [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x71b759e [0138.513] RtlRandomEx (in: Seed=0xc8bfad0 | out: Seed=0xc8bfad0) returned 0x2fc2b513 [0138.524] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.524] ReadFile (in: hFile=0xdcc, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc8bfad8, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0xc8bfad8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.524] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3e88 [0138.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0138.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0138.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809e060 [0138.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0138.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0138.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0138.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0138.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0138.525] WriteFile (in: hFile=0xdcc, lpBuffer=0x809e060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc8bfad8, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesWritten=0xc8bfad8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0139.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0139.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df7ad8 [0139.305] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.305] WriteFile (in: hFile=0xdcc, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xc8bfb44, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xc8bfb44*=0x110, lpOverlapped=0x0) returned 1 [0141.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0141.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0141.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0141.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7ad8) returned 1 [0141.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0141.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0141.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c860) returned 1 [0141.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8d8) returned 1 [0141.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0141.645] wcscpy (in: _Dest=0x3015058, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif" [0141.645] wcscat (in: _Dest=0x3015058, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif.f0dbec" [0141.646] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif.f0dbec", NtPathName=0xc8bfac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\TWtlxAik2SM.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f355b0 [0142.012] FlushFileBuffers (hFile=0xdcc) returned 1 [0142.061] CloseHandle (hObject=0xdcc) returned 1 [0142.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39f58 [0142.099] wcscpy (in: _Dest=0x3f39f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.100] wcscat (in: _Dest=0x3f39f58, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.100] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39f58) returned 1 [0142.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e78) returned 1 Thread: id = 590 os_tid = 0x1044 [0134.074] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\us4x5.ppt")) returned 0x2020 [0134.074] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt", dwFileAttributes=0x20) returned 1 [0138.527] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\us4x5.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xddc [0138.527] GetFileSizeEx (in: hFile=0xddc, lpFileSize=0xca9f9d0 | out: lpFileSize=0xca9f9d0*=75706) returned 1 [0138.527] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x127b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.527] ReadFile (in: hFile=0xddc, lpBuffer=0xca9f9dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xca9f9b8, lpOverlapped=0x0 | out: lpBuffer=0xca9f9dc*, lpNumberOfBytesRead=0xca9f9b8*=0x4, lpOverlapped=0x0) returned 1 [0138.529] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0138.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0138.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0138.530] NtQuerySystemTime (in: CurrentTime=0xca9f958 | out: CurrentTime=0xca9f958*=132471540072204000) returned 0x0 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x41c27816 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x377b34d6 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x24ef9866 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x68e96f21 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x1981e2da [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x62bb2f9b [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x23018d8b [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x6ad7665 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x569db2b3 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x79f82fe6 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x4a57ca09 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x45d3cb17 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x11278e22 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x5e871da8 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x41589d63 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x7f6fa451 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x3acc6d81 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x1085760f [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x2cb1cda2 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x2064b0b1 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x34de0c6c [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x7a13fd97 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x5e871da8 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x4834c3dd [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x4dde10a3 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x2f9d9351 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0xde28d22 [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x41593b8b [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x391dc4cd [0138.530] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x7389dbe0 [0138.531] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x6d97b6fb [0138.531] RtlRandomEx (in: Seed=0xca9f950 | out: Seed=0xca9f950) returned 0x3f1507a6 [0138.540] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.540] ReadFile (in: hFile=0xddc, lpBuffer=0x80bc0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xca9f958, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesRead=0xca9f958*=0x3c00, lpOverlapped=0x0) returned 1 [0138.540] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3e88 [0138.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0138.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0138.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0138.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bfca8 [0138.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0138.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0138.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c928) returned 1 [0138.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0138.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0138.541] WriteFile (in: hFile=0xddc, lpBuffer=0x80bfca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xca9f958, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesWritten=0xca9f958*=0x3c00, lpOverlapped=0x0) returned 1 [0139.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0139.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0139.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb40 [0139.306] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.306] WriteFile (in: hFile=0xddc, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xca9f9c4, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0xca9f9c4*=0x104, lpOverlapped=0x0) returned 1 [0141.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0141.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb18) returned 1 [0141.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bac8) returned 1 [0141.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb40) returned 1 [0141.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0141.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0141.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0141.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0141.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39708 [0141.647] wcscpy (in: _Dest=0x3f39708, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt" [0141.647] wcscat (in: _Dest=0x3f39708, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt.f0dbec" [0141.647] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt.f0dbec", NtPathName=0xca9f948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\us4x5.ppt.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x80542f8 [0142.015] FlushFileBuffers (hFile=0xddc) returned 1 [0142.061] CloseHandle (hObject=0xddc) returned 1 [0142.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39e78 [0142.101] wcscpy (in: _Dest=0x3f39e78, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.101] wcscat (in: _Dest=0x3f39e78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.101] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e78) returned 1 [0142.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 Thread: id = 591 os_tid = 0x1048 [0134.075] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\uypmhwc3vn ko.docx")) returned 0x2020 [0134.075] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx", dwFileAttributes=0x20) returned 1 [0138.543] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\uypmhwc3vn ko.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdd4 [0138.544] GetFileSizeEx (in: hFile=0xdd4, lpFileSize=0xb3efa60 | out: lpFileSize=0xb3efa60*=24101) returned 1 [0138.544] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0x5e21, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.544] ReadFile (in: hFile=0xdd4, lpBuffer=0xb3efa6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb3efa48, lpOverlapped=0x0 | out: lpBuffer=0xb3efa6c*, lpNumberOfBytesRead=0xb3efa48*=0x4, lpOverlapped=0x0) returned 1 [0138.546] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0138.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0138.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0138.546] NtQuerySystemTime (in: CurrentTime=0xb3ef9e8 | out: CurrentTime=0xb3ef9e8*=132471540072360000) returned 0x0 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x6a982b14 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0xcb19754 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x69bff727 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x53477af3 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x256a4573 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x7ef636f5 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x76d083ea [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x68968a59 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x5441b9dd [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x604e89f3 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x3e88a403 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x107c2b22 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x63669c7b [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x52404429 [0138.546] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x256a4573 [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x7fd5942e [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x348cbbec [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x21ddb31 [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x23018d8b [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x7349168c [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x2dc96e05 [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x37eee360 [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x2821f49d [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x4af99b15 [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x53796a4b [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x686fe42c [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x32e1be6e [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x10a703e2 [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x5a7fe9e6 [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x25aa8bbb [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x115266e2 [0138.547] RtlRandomEx (in: Seed=0xb3ef9e0 | out: Seed=0xb3ef9e0) returned 0x6dcf5c02 [0138.557] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.557] ReadFile (in: hFile=0xdd4, lpBuffer=0x80d28d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb3ef9e8, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesRead=0xb3ef9e8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.557] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3e88 [0138.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0138.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0138.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c928) returned 1 [0138.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0138.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0138.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0138.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0138.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0138.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0138.558] WriteFile (in: hFile=0xdd4, lpBuffer=0x80b8498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb3ef9e8, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesWritten=0xb3ef9e8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0139.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0139.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e54b48 [0139.308] SetFilePointerEx (in: hFile=0xdd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.308] WriteFile (in: hFile=0xdd4, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xb3efa54, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0xb3efa54*=0x116, lpOverlapped=0x0) returned 1 [0141.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0141.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37518) returned 1 [0141.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0141.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54b48) returned 1 [0141.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c928) returned 1 [0141.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0141.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0141.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb58) returned 1 [0141.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3d08 [0141.013] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx" [0141.013] wcscat (in: _Dest=0x3dc3d08, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx.f0dbec" [0141.013] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx.f0dbec", NtPathName=0xb3ef9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\UYPmhWc3vn KO.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c1b0 [0142.027] FlushFileBuffers (hFile=0xdd4) returned 1 [0142.056] CloseHandle (hObject=0xdd4) returned 1 [0142.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80555e0 [0142.057] wcscpy (in: _Dest=0x80555e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.057] wcscat (in: _Dest=0x80555e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.057] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80555e0) returned 1 [0142.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39ee8) returned 1 Thread: id = 592 os_tid = 0x104c [0134.075] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\vc9utfekizujgviz4.png")) returned 0x2020 [0134.075] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png", dwFileAttributes=0x20) returned 1 [0138.560] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\vc9utfekizujgviz4.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdc4 [0138.560] GetFileSizeEx (in: hFile=0xdc4, lpFileSize=0x79bfa48 | out: lpFileSize=0x79bfa48*=7828) returned 1 [0138.560] SetFilePointerEx (in: hFile=0xdc4, liDistanceToMove=0x1e90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.560] ReadFile (in: hFile=0xdc4, lpBuffer=0x79bfa54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x79bfa30, lpOverlapped=0x0 | out: lpBuffer=0x79bfa54*, lpNumberOfBytesRead=0x79bfa30*=0x4, lpOverlapped=0x0) returned 1 [0138.562] SetFilePointerEx (in: hFile=0xdc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0138.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0138.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0138.562] NtQuerySystemTime (in: CurrentTime=0x79bf9d0 | out: CurrentTime=0x79bf9d0*=132471540072516000) returned 0x0 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x5945750d [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x113402fc [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x569db2b3 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x5231671d [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x4e3b3edd [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x436e76f8 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x2f66f6e7 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x10b4eaef [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x64dc69db [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x62c7e866 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x10c38a6c [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x2fb9476 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x193a25b0 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x48c2091 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x5a7fe9e6 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x2556b93f [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x5a4834dd [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x5d269b2d [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x4a4f8f77 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x12b02278 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x7c0c341b [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x422e48dd [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x35827c1f [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x7f71f761 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x5ca158d [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x472b35d2 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x7d0f6943 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x7a13fd97 [0138.562] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x91267a0 [0138.563] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x8e6231e [0138.563] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0x1e56f124 [0138.563] RtlRandomEx (in: Seed=0x79bf9c8 | out: Seed=0x79bf9c8) returned 0xf6a9c9d [0138.572] ReadFile (in: hFile=0xdc4, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0x1e94, lpNumberOfBytesRead=0x79bf9c4, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0x79bf9c4*=0x1e94, lpOverlapped=0x0) returned 1 [0138.572] SetFilePointerEx (in: hFile=0xdc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.572] WriteFile (in: hFile=0xdc4, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x1e94, lpNumberOfBytesWritten=0x79bf9c8, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0x79bf9c8*=0x1e94, lpOverlapped=0x0) returned 1 [0139.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0139.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0139.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0139.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0139.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0139.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0139.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0139.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f379d8 [0139.310] SetFilePointerEx (in: hFile=0xdc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.310] WriteFile (in: hFile=0xdc4, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x79bfa3c, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0x79bfa3c*=0x11c, lpOverlapped=0x0) returned 1 [0141.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0141.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38298) returned 1 [0141.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0141.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f379d8) returned 1 [0141.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0141.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0141.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0141.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0141.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053308 [0141.014] wcscpy (in: _Dest=0x8053308, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png" [0141.014] wcscat (in: _Dest=0x8053308, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png.f0dbec" [0141.014] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png.f0dbec", NtPathName=0x79bf9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\vC9utfeKIzuJGViZ4.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e116e8 [0142.001] FlushFileBuffers (hFile=0xdc4) returned 1 [0142.032] CloseHandle (hObject=0xdc4) returned 1 [0142.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39708 [0142.033] wcscpy (in: _Dest=0x3f39708, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.033] wcscat (in: _Dest=0x3f39708, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.033] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39708) returned 1 [0142.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67fe8) returned 1 Thread: id = 593 os_tid = 0x1050 [0134.076] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ykwwgzaqesih 0nf.ods")) returned 0x2020 [0134.076] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods", dwFileAttributes=0x20) returned 1 [0138.574] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ykwwgzaqesih 0nf.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde0 [0138.574] GetFileSizeEx (in: hFile=0xde0, lpFileSize=0x87ffa20 | out: lpFileSize=0x87ffa20*=81502) returned 1 [0138.574] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x13e5a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.574] ReadFile (in: hFile=0xde0, lpBuffer=0x87ffa2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x87ffa08, lpOverlapped=0x0 | out: lpBuffer=0x87ffa2c*, lpNumberOfBytesRead=0x87ffa08*=0x4, lpOverlapped=0x0) returned 1 [0138.576] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0138.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0138.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0138.576] NtQuerySystemTime (in: CurrentTime=0x87ff9a8 | out: CurrentTime=0x87ff9a8*=132471540072672000) returned 0x0 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x49336ff6 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x4a4f8f77 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x7e2d0522 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x4e16c949 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x59594b0b [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x1102cba6 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x30fa8443 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x4c3d1c02 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x64310ed4 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x4667e95b [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x1085760f [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x4770aac9 [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x1c44c2dc [0138.576] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x5de30b37 [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x2ac2a37f [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x17ca7bd9 [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x612135e [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x73da09dc [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x4a57ca09 [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x68e96f21 [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x34ef608d [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x46d2ab26 [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x452fb306 [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x26eba40b [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x52ff70e [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x5d4b725d [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x26ec482d [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x102679a2 [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x7d2020f6 [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x4344760a [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x18902190 [0138.577] RtlRandomEx (in: Seed=0x87ff9a0 | out: Seed=0x87ff9a0) returned 0x5fd187a6 [0138.586] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.586] ReadFile (in: hFile=0xde0, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x87ff9a8, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0x87ff9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.587] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd44b8 [0138.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33240 [0138.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0138.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0138.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0138.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0138.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0138.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0138.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0138.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0138.587] WriteFile (in: hFile=0xde0, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x87ff9a8, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x87ff9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0139.311] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.311] ReadFile (in: hFile=0xde0, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x87ff9a8, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0x87ff9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.311] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3e88 [0139.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0139.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0139.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0139.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0139.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0139.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0139.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0139.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0139.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0139.312] WriteFile (in: hFile=0xde0, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x87ff9a8, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x87ff9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0139.313] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x1025e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.313] ReadFile (in: hFile=0xde0, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x87ff9a8, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0x87ff9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.313] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x1025e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3e88 [0139.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0139.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0139.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0139.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0139.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0139.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0139.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0139.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0139.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0139.314] WriteFile (in: hFile=0xde0, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x87ff9a8, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x87ff9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0139.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdc98 [0139.315] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.315] WriteFile (in: hFile=0xde0, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x87ffa14, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0x87ffa14*=0x15a, lpOverlapped=0x0) returned 1 [0141.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0141.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8e48) returned 1 [0141.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0141.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8b08) returned 1 [0141.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdc98) returned 1 [0141.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0141.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0141.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0141.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8054380 [0141.650] wcscpy (in: _Dest=0x8054380, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods" [0141.650] wcscat (in: _Dest=0x8054380, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods.f0dbec" [0141.650] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods.f0dbec", NtPathName=0x87ff998, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\YkWwgZaqeSiH 0NF.ods.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c5d8 [0142.018] FlushFileBuffers (hFile=0xde0) returned 1 [0142.061] CloseHandle (hObject=0xde0) returned 1 [0142.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39e78 [0142.103] wcscpy (in: _Dest=0x3f39e78, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.103] wcscat (in: _Dest=0x3f39e78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.103] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e78) returned 1 [0142.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 Thread: id = 594 os_tid = 0x1054 [0134.076] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\z hjb53yrt9fjghe3.m4a")) returned 0x2020 [0134.076] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a", dwFileAttributes=0x20) returned 1 [0138.589] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\z hjb53yrt9fjghe3.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde8 [0138.589] GetFileSizeEx (in: hFile=0xde8, lpFileSize=0xc9af7c0 | out: lpFileSize=0xc9af7c0*=60004) returned 1 [0138.589] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0xea60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.589] ReadFile (in: hFile=0xde8, lpBuffer=0xc9af7cc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc9af7a8, lpOverlapped=0x0 | out: lpBuffer=0xc9af7cc*, lpNumberOfBytesRead=0xc9af7a8*=0x4, lpOverlapped=0x0) returned 1 [0138.591] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0138.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0138.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0138.591] NtQuerySystemTime (in: CurrentTime=0xc9af748 | out: CurrentTime=0xc9af748*=132471540072828000) returned 0x0 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x213a50c9 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x6465ef3b [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x195648b0 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x5ca9bc90 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x3d560603 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x71ff526c [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x3f1264b6 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x68808e4f [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0xd689a06 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0xd0d130d [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x430b5d52 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x22b2f749 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x1514a8d8 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x5b34d20 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x26f5fe27 [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0xbe0f01d [0138.591] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x24b0fc6a [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x11c1df31 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x24f95aa2 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x40282ba0 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x3f570f17 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x2d9cccb4 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x166a7e7a [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x7f69443f [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x472455cc [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x32a4c48 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x1906c8f9 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x2a2f1db8 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x42b42100 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x2f97b3fc [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x7ff76460 [0138.592] RtlRandomEx (in: Seed=0xc9af740 | out: Seed=0xc9af740) returned 0x6677a05a [0138.602] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.602] ReadFile (in: hFile=0xde8, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc9af748, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0xc9af748*=0x3c00, lpOverlapped=0x0) returned 1 [0138.602] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd44b8 [0138.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33240 [0138.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0138.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0138.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0138.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0138.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0138.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0b8) returned 1 [0138.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0138.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0138.603] WriteFile (in: hFile=0xde8, lpBuffer=0x80d64d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc9af748, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesWritten=0xc9af748*=0x3c00, lpOverlapped=0x0) returned 1 [0139.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0139.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0139.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2fc8688 [0139.316] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.316] WriteFile (in: hFile=0xde8, lpBuffer=0x3d56810*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xc9af7b4, lpOverlapped=0x0 | out: lpBuffer=0x3d56810*, lpNumberOfBytesWritten=0xc9af7b4*=0x11c, lpOverlapped=0x0) returned 1 [0141.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56810) returned 1 [0141.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe50) returned 1 [0141.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0141.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8688) returned 1 [0141.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0141.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0141.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0141.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0141.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8054050 [0141.015] wcscpy (in: _Dest=0x8054050, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a" [0141.015] wcscat (in: _Dest=0x8054050, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a.f0dbec" [0141.015] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a.f0dbec", NtPathName=0xc9af738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z hjB53yRT9fJgHE3.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e12228 [0141.990] FlushFileBuffers (hFile=0xde8) returned 1 [0141.995] CloseHandle (hObject=0xde8) returned 1 [0141.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5400 [0141.996] wcscpy (in: _Dest=0x2ff5400, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0141.996] wcscat (in: _Dest=0x2ff5400, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0141.996] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0141.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5400) returned 1 [0141.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68150) returned 1 Thread: id = 595 os_tid = 0x1058 [0134.077] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\zgspllrxhu.wav")) returned 0x2020 [0134.077] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav", dwFileAttributes=0x20) returned 1 [0138.605] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\zgspllrxhu.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdd8 [0138.605] GetFileSizeEx (in: hFile=0xdd8, lpFileSize=0xcb0fa10 | out: lpFileSize=0xcb0fa10*=9708) returned 1 [0138.605] SetFilePointerEx (in: hFile=0xdd8, liDistanceToMove=0x25e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.605] ReadFile (in: hFile=0xdd8, lpBuffer=0xcb0fa1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcb0f9f8, lpOverlapped=0x0 | out: lpBuffer=0xcb0fa1c*, lpNumberOfBytesRead=0xcb0f9f8*=0x4, lpOverlapped=0x0) returned 1 [0138.607] SetFilePointerEx (in: hFile=0xdd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0138.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0138.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0138.607] NtQuerySystemTime (in: CurrentTime=0xcb0f998 | out: CurrentTime=0xcb0f998*=132471540072984000) returned 0x0 [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x6bf9c8a4 [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x5c39b07b [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x36eda08a [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x40cf078d [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x639698a3 [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x14cf84d [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x48036ab3 [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x6b4c14ea [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x4667e95b [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x662d443 [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x7dc33589 [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x10b4b1c1 [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x1888f24 [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x3f010e3a [0138.607] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x2519b80d [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x9fc9ae0 [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x77f4f1a [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x4b3fdca5 [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x413a64fa [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x63e84b4d [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x40ebd0eb [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x6a982b14 [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x423ba24a [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x59620a24 [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x70d52d8f [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x790c6fee [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x6f6b4f34 [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x6dcb7709 [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x4f55adba [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x79aab44b [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x7d577744 [0138.608] RtlRandomEx (in: Seed=0xcb0f990 | out: Seed=0xcb0f990) returned 0x697af27d [0138.620] ReadFile (in: hFile=0xdd8, lpBuffer=0x828fc68, nNumberOfBytesToRead=0x25ec, lpNumberOfBytesRead=0xcb0f98c, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesRead=0xcb0f98c*=0x25ec, lpOverlapped=0x0) returned 1 [0138.620] SetFilePointerEx (in: hFile=0xdd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.620] WriteFile (in: hFile=0xdd8, lpBuffer=0x82b54b8*, nNumberOfBytesToWrite=0x25ec, lpNumberOfBytesWritten=0xcb0f990, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesWritten=0xcb0f990*=0x25ec, lpOverlapped=0x0) returned 1 [0139.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0139.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0139.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0139.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0139.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828fc68) returned 1 [0139.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0139.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0139.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7e20 [0139.319] SetFilePointerEx (in: hFile=0xdd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.319] WriteFile (in: hFile=0xdd8, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xcb0fa04, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xcb0fa04*=0x10e, lpOverlapped=0x0) returned 1 [0141.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0141.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8088) returned 1 [0141.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0141.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0141.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0141.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0141.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1a8) returned 1 [0141.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0141.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32d90 [0141.016] wcscpy (in: _Dest=0x3f32d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav" [0141.016] wcscat (in: _Dest=0x3f32d90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav.f0dbec" [0141.016] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav.f0dbec", NtPathName=0xcb0f988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\ZGsPllrXhu.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34dd0 [0141.994] FlushFileBuffers (hFile=0xdd8) returned 1 [0141.998] CloseHandle (hObject=0xdd8) returned 1 [0141.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5400 [0141.999] wcscpy (in: _Dest=0x2ff5400, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0141.999] wcscat (in: _Dest=0x2ff5400, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0141.999] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0141.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5400) returned 1 [0141.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e480) returned 1 Thread: id = 596 os_tid = 0x105c [0134.077] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\zvekryytrwwte.mp4")) returned 0x2020 [0134.077] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4", dwFileAttributes=0x20) returned 1 [0141.212] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\zvekryytrwwte.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd90 [0141.212] GetFileSizeEx (in: hFile=0xd90, lpFileSize=0xcbbf7a0 | out: lpFileSize=0xcbbf7a0*=6276) returned 1 [0141.212] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x1880, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.212] ReadFile (in: hFile=0xd90, lpBuffer=0xcbbf7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcbbf788, lpOverlapped=0x0 | out: lpBuffer=0xcbbf7ac*, lpNumberOfBytesRead=0xcbbf788*=0x4, lpOverlapped=0x0) returned 1 [0141.214] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0141.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0141.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0141.214] NtQuerySystemTime (in: CurrentTime=0xcbbf728 | out: CurrentTime=0xcbbf728*=132471540097944000) returned 0x0 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x7b6e770f [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x220526e6 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x60a44648 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x6ef81681 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x7aaad0b2 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x4fe8f810 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x75095021 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x82b2e0f [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x295833cf [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x55964eb4 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x494e6fc0 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x57dc8dd1 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x1ba34393 [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x6516736d [0141.214] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x4ebff54a [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x474573b5 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x37bb67e9 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x1bdf2fec [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x657284e1 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x4f540d8 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x5643b384 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x77e1b4e1 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x6f382110 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x1d41c163 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x75e0eb57 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x183bf341 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x61058a3d [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x5ffd532e [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x1c65facf [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x67ab4951 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x17cc5b30 [0141.215] RtlRandomEx (in: Seed=0xcbbf720 | out: Seed=0xcbbf720) returned 0x47bbc725 [0141.230] ReadFile (in: hFile=0xd90, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x1884, lpNumberOfBytesRead=0xcbbf71c, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0xcbbf71c*=0x1884, lpOverlapped=0x0) returned 1 [0141.230] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.230] WriteFile (in: hFile=0xd90, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x1884, lpNumberOfBytesWritten=0xcbbf720, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0xcbbf720*=0x1884, lpOverlapped=0x0) returned 1 [0141.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9fb8 [0141.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca238 [0141.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca238) returned 1 [0141.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0141.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0141.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0141.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83087b8) returned 1 [0141.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77f68 [0141.640] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.640] WriteFile (in: hFile=0xd90, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xcbbf794, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0xcbbf794*=0x114, lpOverlapped=0x0) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77fa0) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca238) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77f68) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9fb8) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0141.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5b88 [0141.780] wcscpy (in: _Dest=0x3dc5b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4" [0141.780] wcscat (in: _Dest=0x3dc5b88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4.f0dbec" [0141.780] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4.f0dbec", NtPathName=0xcbbf718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\zVEkrYytrwwtE.mp4.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c708 [0142.031] FlushFileBuffers (hFile=0xd90) returned 1 [0142.058] CloseHandle (hObject=0xd90) returned 1 [0142.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39ee8 [0142.059] wcscpy (in: _Dest=0x3f39ee8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0142.059] wcscat (in: _Dest=0x3f39ee8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" [0142.059] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f0dbec-readme.txt")) returned 0x2020 [0142.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39ee8) returned 1 [0142.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39f58) returned 1 Thread: id = 597 os_tid = 0x1060 [0134.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e231c8 [0134.078] wcscpy (in: _Dest=0x3e231c8, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS" [0134.078] wcscat (in: _Dest=0x3e231c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\" [0134.078] wcscat (in: _Dest=0x3e231c8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*" [0134.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a190 [0134.078] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38158 [0134.078] wcscmp (_String1=".", _String2=".") returned 0 [0134.078] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.079] wcscmp (_String1="..", _String2=".") returned 1 [0134.079] wcscmp (_String1="..", _String2="..") returned 0 [0134.079] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0134.079] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0134.079] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0134.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd4e0 [0134.079] wcscpy (in: _Dest=0x3ecd4e0, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS" [0134.079] wcscat (in: _Dest=0x3ecd4e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\" [0134.079] wcscat (in: _Dest=0x3ecd4e0, _Source="MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" [0149.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0149.540] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0149.540] FindClose (in: hFindFile=0x3f38158 | out: hFindFile=0x3f38158) returned 1 [0149.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a190) returned 1 [0149.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e231c8) returned 1 [0149.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6888) returned 1 Thread: id = 598 os_tid = 0x1064 [0134.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e22bf0 [0134.083] wcscpy (in: _Dest=0x3e22bf0, _Source="C:\\ProgramData\\Microsoft\\Crypto\\Keys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys" [0134.083] wcscat (in: _Dest=0x3e22bf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\" [0134.083] wcscat (in: _Dest=0x3e22bf0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*" [0134.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049cc0 [0134.083] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c98 [0134.469] wcscmp (_String1=".", _String2=".") returned 0 [0134.469] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.469] wcscmp (_String1="..", _String2=".") returned 1 [0134.469] wcscmp (_String1="..", _String2="..") returned 0 [0134.469] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.469] FindClose (in: hFindFile=0x3f37c98 | out: hFindFile=0x3f37c98) returned 1 [0134.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049cc0) returned 1 [0134.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22bf0) returned 1 [0134.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23118) returned 1 Thread: id = 599 os_tid = 0x1068 [0134.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e22e00 [0134.088] wcscpy (in: _Dest=0x3e22e00, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0134.088] wcscat (in: _Dest=0x3e22e00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\" [0134.088] wcscat (in: _Dest=0x3e22e00, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*" [0134.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047d78 [0134.088] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c98 [0134.470] wcscmp (_String1=".", _String2=".") returned 0 [0134.470] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.470] wcscmp (_String1="..", _String2=".") returned 1 [0134.470] wcscmp (_String1="..", _String2="..") returned 0 [0134.470] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0134.470] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0134.470] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0134.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eccd28 [0134.470] wcscpy (in: _Dest=0x3eccd28, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0134.470] wcscat (in: _Dest=0x3eccd28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\" [0134.470] wcscat (in: _Dest=0x3eccd28, _Source="MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" [0159.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f395b8 [0159.506] wcscpy (in: _Dest=0x3f395b8, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" [0159.506] wcscat (in: _Dest=0x3f395b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\" [0159.506] wcscat (in: _Dest=0x3f395b8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" [0159.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d852d8 [0159.506] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0159.506] wcscmp (_String1=".", _String2=".") returned 0 [0159.506] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.507] wcscmp (_String1="..", _String2=".") returned 1 [0159.507] wcscmp (_String1="..", _String2="..") returned 0 [0159.507] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0159.507] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0159.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852d8) returned 1 [0159.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f395b8) returned 1 [0159.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccd28) returned 1 [0159.507] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0159.507] wcscmp (_String1="S-1-5-18", _String2=".") returned 1 [0159.507] wcscmp (_String1="S-1-5-18", _String2="..") returned 1 [0159.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3eccd28 [0159.507] wcscpy (in: _Dest=0x3eccd28, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0159.507] wcscat (in: _Dest=0x3eccd28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\" [0159.507] wcscat (in: _Dest=0x3eccd28, _Source="S-1-5-18" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0159.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecd208 [0159.508] wcscpy (in: _Dest=0x3ecd208, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0159.508] wcscat (in: _Dest=0x3ecd208, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\" [0159.508] wcscat (in: _Dest=0x3ecd208, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*" [0159.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d852d8 [0159.508] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0159.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852d8) returned 1 [0159.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd208) returned 1 [0159.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccd28) returned 1 [0159.508] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0159.508] FindClose (in: hFindFile=0x3f37c98 | out: hFindFile=0x3f37c98) returned 1 [0159.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047d78) returned 1 [0159.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22e00) returned 1 [0159.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6478) returned 1 Thread: id = 600 os_tid = 0x106c [0134.090] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp")) returned 0x20 [0134.091] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0134.091] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.091] GetLastError () returned 0x5 [0134.091] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0134.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d728) returned 1 Thread: id = 601 os_tid = 0x1070 [0134.092] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp")) returned 0x20 [0139.128] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0139.128] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.230] GetLastError () returned 0x5 [0141.230] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0141.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d1e8) returned 1 Thread: id = 602 os_tid = 0x1074 [0134.093] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp")) returned 0x20 [0142.137] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0142.137] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.137] GetLastError () returned 0x5 [0142.137] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0142.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cff0) returned 1 Thread: id = 603 os_tid = 0x1078 [0134.094] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp")) returned 0x20 [0142.139] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0142.139] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.139] GetLastError () returned 0x5 [0142.139] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0142.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d140) returned 1 Thread: id = 604 os_tid = 0x107c [0134.095] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp")) returned 0x20 [0142.140] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0142.140] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.140] GetLastError () returned 0x5 [0142.140] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0142.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d7d0) returned 1 Thread: id = 605 os_tid = 0x1080 [0134.116] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp")) returned 0x20 [0142.119] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0142.119] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.119] GetLastError () returned 0x5 [0142.119] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0142.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d878) returned 1 Thread: id = 606 os_tid = 0x1084 [0134.117] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp")) returned 0x20 [0142.120] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0142.120] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.120] GetLastError () returned 0x5 [0142.120] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0142.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d920) returned 1 Thread: id = 607 os_tid = 0x1088 [0134.119] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp")) returned 0x20 [0142.121] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0142.121] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.121] GetLastError () returned 0x5 [0142.121] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0142.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d9c8) returned 1 Thread: id = 608 os_tid = 0x108c [0134.120] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp")) returned 0x20 [0142.122] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0142.123] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.123] GetLastError () returned 0x5 [0142.123] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0142.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2da70) returned 1 Thread: id = 609 os_tid = 0x1090 [0134.121] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp")) returned 0x20 [0142.124] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0142.124] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.124] GetLastError () returned 0x5 [0142.124] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0142.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2db18) returned 1 Thread: id = 610 os_tid = 0x1094 [0134.122] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp")) returned 0x20 [0142.125] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0142.125] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.125] GetLastError () returned 0x5 [0142.125] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0142.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dbc0) returned 1 Thread: id = 611 os_tid = 0x1098 [0134.123] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp")) returned 0x20 [0142.127] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0142.127] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.127] GetLastError () returned 0x5 [0142.127] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0142.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dc68) returned 1 Thread: id = 612 os_tid = 0x109c [0134.123] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp")) returned 0x20 [0142.128] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0142.128] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.128] GetLastError () returned 0x5 [0142.128] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0142.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dd10) returned 1 Thread: id = 613 os_tid = 0x10a0 [0134.124] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp")) returned 0x20 [0142.129] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0142.129] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.129] GetLastError () returned 0x5 [0142.129] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0142.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ddb8) returned 1 Thread: id = 614 os_tid = 0x10a4 [0134.124] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp")) returned 0x20 [0142.141] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0142.141] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.141] GetLastError () returned 0x5 [0142.141] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0142.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2de60) returned 1 Thread: id = 615 os_tid = 0x10a8 [0134.125] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp")) returned 0x20 [0142.143] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0142.143] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.143] GetLastError () returned 0x5 [0142.143] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0142.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186458) returned 1 Thread: id = 616 os_tid = 0x10ac [0134.126] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp")) returned 0x20 [0142.144] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0142.144] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.144] GetLastError () returned 0x5 [0142.144] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0142.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186500) returned 1 Thread: id = 617 os_tid = 0x10b0 [0134.126] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp")) returned 0x20 [0142.145] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0142.145] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.145] GetLastError () returned 0x5 [0142.146] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0142.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81865a8) returned 1 Thread: id = 618 os_tid = 0x10b4 [0134.127] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp")) returned 0x20 [0142.147] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0142.147] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.147] GetLastError () returned 0x5 [0142.147] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0142.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186650) returned 1 Thread: id = 619 os_tid = 0x10b8 [0134.128] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp")) returned 0x20 [0142.116] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0142.116] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.116] GetLastError () returned 0x5 [0142.116] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0142.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81866f8) returned 1 Thread: id = 620 os_tid = 0x10bc [0134.128] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp")) returned 0x20 [0142.117] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0142.117] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.117] GetLastError () returned 0x5 [0142.118] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0142.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81867a0) returned 1 Thread: id = 621 os_tid = 0x10c0 [0135.072] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp")) returned 0x20 [0142.086] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0142.086] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.087] GetLastError () returned 0x5 [0142.087] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0142.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 Thread: id = 622 os_tid = 0x10c4 [0135.072] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8AC1.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql8ac1.tmp")) returned 0x2020 [0135.072] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8AC1.tmp", dwFileAttributes=0x20) returned 0 [0135.072] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8AC1.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql8ac1.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.073] GetLastError () returned 0x5 [0135.073] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8AC1.tmp", dwFileAttributes=0x2020) returned 0 [0135.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccf98) returned 1 Thread: id = 623 os_tid = 0x10c8 [0135.074] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql8e3b.tmp")) returned 0x2020 [0135.074] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp", dwFileAttributes=0x20) returned 1 [0135.703] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql8e3b.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.703] GetLastError () returned 0x20 [0135.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3de2610 [0135.703] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0135.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de2610) returned 1 [0135.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3de2610 [0135.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8db90 [0135.704] wcscpy (in: _Dest=0x3d8db90, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp" [0135.704] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp", dwFileAttributes=0x2020) returned 1 [0135.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c5a0) returned 1 Thread: id = 624 os_tid = 0x10cc [0135.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eccf98 [0135.074] wcscpy (in: _Dest=0x3eccf98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" [0135.074] wcscat (in: _Dest=0x3eccf98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\" [0135.074] wcscat (in: _Dest=0x3eccf98, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\*" [0135.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0135.075] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0136.036] wcscmp (_String1=".", _String2=".") returned 0 [0136.036] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.036] wcscmp (_String1="..", _String2=".") returned 1 [0136.036] wcscmp (_String1="..", _String2="..") returned 0 [0136.036] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0136.036] wcscmp (_String1="User Data", _String2=".") returned 1 [0136.036] wcscmp (_String1="User Data", _String2="..") returned 1 [0136.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b4d8 [0136.036] wcscpy (in: _Dest=0x3f0b4d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" [0136.036] wcscat (in: _Dest=0x3f0b4d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\" [0136.036] wcscat (in: _Dest=0x3f0b4d8, _Source="User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0143.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0143.488] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0143.488] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0143.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0143.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccf98) returned 1 [0143.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e418) returned 1 Thread: id = 625 os_tid = 0x10d0 [0135.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b4d8 [0135.087] wcscpy (in: _Dest=0x3f0b4d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports" [0135.087] wcscat (in: _Dest=0x3f0b4d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\" [0135.087] wcscat (in: _Dest=0x3f0b4d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\*" [0135.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049cc0 [0135.087] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0136.034] wcscmp (_String1=".", _String2=".") returned 0 [0136.034] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.034] wcscmp (_String1="..", _String2=".") returned 1 [0136.034] wcscmp (_String1="..", _String2="..") returned 0 [0136.034] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.034] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0136.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049cc0) returned 1 [0136.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b4d8) returned 1 [0136.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39cb8) returned 1 Thread: id = 626 os_tid = 0x10d4 [0135.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0e718 [0135.088] wcscpy (in: _Dest=0x3e0e718, _Source="C:\\Program Files\\Java\\jre7\\bin\\client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0135.088] wcscat (in: _Dest=0x3e0e718, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\" [0135.088] wcscat (in: _Dest=0x3e0e718, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\*" [0135.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046f08 [0135.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a8ea200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0138.681] wcscmp (_String1=".", _String2=".") returned 0 [0138.681] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a8ea200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.681] wcscmp (_String1="..", _String2=".") returned 1 [0138.681] wcscmp (_String1="..", _String2="..") returned 0 [0138.681] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6a8ea200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a910360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0138.681] wcscmp (_String1="classes.jsa", _String2=".") returned 1 [0138.681] wcscmp (_String1="classes.jsa", _String2="..") returned 1 [0138.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39698 [0138.681] wcscpy (in: _Dest=0x3f39698, _Source="C:\\Program Files\\Java\\jre7\\bin\\client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0138.681] wcscat (in: _Dest=0x3f39698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\" [0138.681] wcscat (in: _Dest=0x3f39698, _Source="classes.jsa" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa" [0141.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0141.442] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0141.443] wcscmp (_String1="jvm.dll", _String2=".") returned 1 [0141.443] wcscmp (_String1="jvm.dll", _String2="..") returned 1 [0141.443] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0141.443] wcscmp (_String1="Xusage.txt", _String2=".") returned 1 [0141.443] wcscmp (_String1="Xusage.txt", _String2="..") returned 1 [0141.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a268 [0141.443] wcscpy (in: _Dest=0x3f3a268, _Source="C:\\Program Files\\Java\\jre7\\bin\\client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0141.443] wcscat (in: _Dest=0x3f3a268, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\" [0141.443] wcscat (in: _Dest=0x3f3a268, _Source="Xusage.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt" [0141.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0141.444] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0141.444] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0141.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046f08) returned 1 [0141.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e718) returned 1 [0141.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e233d8) returned 1 Thread: id = 627 os_tid = 0x10d8 [0135.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6968 [0135.092] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Program Files\\Java\\jre7\\bin\\dtplugin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin" [0135.092] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\" [0135.092] wcscat (in: _Dest=0x2fe6968, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\*" [0135.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049f28 [0135.093] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0139.328] wcscmp (_String1=".", _String2=".") returned 0 [0139.328] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.328] wcscmp (_String1="..", _String2=".") returned 1 [0139.328] wcscmp (_String1="..", _String2="..") returned 0 [0139.328] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0139.328] wcscmp (_String1="deployJava1.dll", _String2=".") returned 1 [0139.328] wcscmp (_String1="deployJava1.dll", _String2="..") returned 1 [0139.328] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0139.328] wcscmp (_String1="npdeployJava1.dll", _String2=".") returned 1 [0139.328] wcscmp (_String1="npdeployJava1.dll", _String2="..") returned 1 [0139.328] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0139.328] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0139.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049f28) returned 1 [0139.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 [0139.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f1a0) returned 1 Thread: id = 628 os_tid = 0x10dc [0135.093] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv")) returned 0x20 [0137.130] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", dwFileAttributes=0x20) returned 1 [0137.131] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda8 [0137.131] GetFileSizeEx (in: hFile=0xda8, lpFileSize=0xbccf7f0 | out: lpFileSize=0xbccf7f0*=9699328) returned 1 [0137.131] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x93fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.131] ReadFile (in: hFile=0xda8, lpBuffer=0xbccf7fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbccf7d8, lpOverlapped=0x0 | out: lpBuffer=0xbccf7fc*, lpNumberOfBytesRead=0xbccf7d8*=0x4, lpOverlapped=0x0) returned 1 [0137.598] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0137.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312f68 [0137.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0137.598] NtQuerySystemTime (in: CurrentTime=0xbccf778 | out: CurrentTime=0xbccf778*=132471540062844000) returned 0x0 [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x6de66c57 [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x7d341066 [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x3e182bfe [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x643df23 [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x157d731a [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x75e4c650 [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x3ce51236 [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x1bb2e562 [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0xc6f397f [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x2750749c [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x5b1542f8 [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x655a296d [0137.598] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x570f8a7e [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x73ac6690 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x5c18ac7a [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x4c9fe895 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x61fcb546 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x2f75031b [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x99d3110 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x52f28ca2 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x4a046733 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x5a6bdeb8 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x2fab4c50 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x4d1b1612 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x2d817161 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x37bec595 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x2d92a143 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x45cc6196 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x4ce606eb [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x59b413a1 [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x6211b8dc [0137.599] RtlRandomEx (in: Seed=0xbccf770 | out: Seed=0xbccf770) returned 0x29c5c7d7 [0137.608] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.608] ReadFile (in: hFile=0xda8, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbccf778, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0xbccf778*=0x3c00, lpOverlapped=0x0) returned 1 [0137.822] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308e78 [0137.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67e08 [0137.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0137.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b30) returned 1 [0137.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0137.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0137.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0137.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0137.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e08) returned 1 [0137.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308e78) returned 1 [0137.823] WriteFile (in: hFile=0xda8, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbccf778, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0xbccf778*=0x3c00, lpOverlapped=0x0) returned 1 [0140.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0140.024] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x4a1000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.024] ReadFile (in: hFile=0xda8, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbccf778, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0xbccf778*=0x3c00, lpOverlapped=0x0) returned 1 [0140.027] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x4a1000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308a40 [0140.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0140.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0140.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0140.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0140.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0140.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ef8 [0140.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ef8) returned 1 [0140.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0140.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308a40) returned 1 [0140.028] WriteFile (in: hFile=0xda8, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbccf778, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0xbccf778*=0x3c00, lpOverlapped=0x0) returned 1 [0141.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0141.628] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x93c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.628] ReadFile (in: hFile=0xda8, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbccf778, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0xbccf778*=0x3c00, lpOverlapped=0x0) returned 1 [0141.712] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x93c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b39c8 [0141.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e681c8 [0141.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0141.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0141.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c44d8 [0141.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0141.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0141.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0141.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e681c8) returned 1 [0141.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b39c8) returned 1 [0141.712] WriteFile (in: hFile=0xda8, lpBuffer=0x82c44d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbccf778, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesWritten=0xbccf778*=0x3c00, lpOverlapped=0x0) returned 1 [0142.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0142.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd3a8 [0142.571] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.571] WriteFile (in: hFile=0xda8, lpBuffer=0x3e39870*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0xbccf7e4, lpOverlapped=0x0 | out: lpBuffer=0x3e39870*, lpNumberOfBytesWritten=0xbccf7e4*=0x16c, lpOverlapped=0x0) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39870) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6528) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b30) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d58) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd3a8) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312f68) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0142.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2de60 [0142.592] wcscpy (in: _Dest=0x3e2de60, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" [0142.592] wcscat (in: _Dest=0x3e2de60, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.f0dbec") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.f0dbec" [0142.593] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.f0dbec", NtPathName=0xbccf768, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0142.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333768 [0142.596] FlushFileBuffers (hFile=0xda8) returned 1 [0143.825] CloseHandle (hObject=0xda8) returned 1 [0144.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0a08 [0144.009] wcscpy (in: _Dest=0x3db0a08, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\" [0144.009] wcscat (in: _Dest=0x3db0a08, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\F0DBEC-Readme.txt" [0144.009] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\f0dbec-readme.txt")) returned 0xffffffff [0144.009] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1784 [0144.013] WriteFile (in: hFile=0x1784, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbccf78c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbccf78c*=0x70c, lpOverlapped=0x0) returned 1 [0144.015] CloseHandle (hObject=0x1784) returned 1 [0144.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0a08) returned 1 [0144.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a2d8) returned 1 Thread: id = 629 os_tid = 0x10e0 [0135.094] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\-ekr.pdf")) returned 0x20 [0135.094] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf", dwFileAttributes=0x20) returned 1 [0135.094] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\-ekr.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa4 [0135.094] GetFileSizeEx (in: hFile=0xfa4, lpFileSize=0xac0f868 | out: lpFileSize=0xac0f868*=87135) returned 1 [0135.095] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x1545b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.095] ReadFile (in: hFile=0xfa4, lpBuffer=0xac0f874, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac0f850, lpOverlapped=0x0 | out: lpBuffer=0xac0f874*, lpNumberOfBytesRead=0xac0f850*=0x4, lpOverlapped=0x0) returned 1 [0135.096] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0135.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0135.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0135.097] NtQuerySystemTime (in: CurrentTime=0xac0f7f0 | out: CurrentTime=0xac0f7f0*=132471540037728000) returned 0x0 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x50fb16c0 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x5e160ba0 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x892d194 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x2858008d [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x7342e626 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x606d93a1 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x58cdbe8c [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x57879292 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x6aedfcff [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x52769625 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x3fb47b1a [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x2f4942e5 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x552e65f0 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x253ce63f [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x346f2758 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x5efea4cd [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x5aa77773 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x2f2cef96 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x3917790a [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x49bc96b8 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x279b0172 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x6e3c4731 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x5a0ccc63 [0135.097] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x22bc2a15 [0135.098] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x22abdd1a [0135.098] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x7c55ce7c [0135.098] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x6b1ee2fd [0135.098] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x66e548fb [0135.098] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x33f491d8 [0135.098] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x5cadcfe0 [0135.098] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x29575a72 [0135.098] RtlRandomEx (in: Seed=0xac0f7e8 | out: Seed=0xac0f7e8) returned 0x79d9ad93 [0135.106] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.106] ReadFile (in: hFile=0xfa4, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xac0f7f0, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xac0f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.107] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31c88 [0135.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b550 [0135.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0135.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0135.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0135.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0135.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0135.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0135.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b550) returned 1 [0135.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31c88) returned 1 [0135.108] WriteFile (in: hFile=0xfa4, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xac0f7f0, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xac0f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0135.295] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.296] ReadFile (in: hFile=0xfa4, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xac0f7f0, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xac0f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.296] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f32228 [0135.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b3e8 [0135.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0135.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0135.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0135.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0135.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0135.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0135.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0135.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32228) returned 1 [0135.297] WriteFile (in: hFile=0xfa4, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xac0f7f0, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xac0f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0135.300] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x1185f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.301] ReadFile (in: hFile=0xfa4, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xac0f7f0, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xac0f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.301] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x1185f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f32228 [0135.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b3e8 [0135.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0135.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0135.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0135.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0135.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0135.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0135.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0135.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32228) returned 1 [0135.302] WriteFile (in: hFile=0xfa4, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xac0f7f0, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xac0f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0135.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecda28 [0135.306] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.306] WriteFile (in: hFile=0xfa4, lpBuffer=0x3e16f90*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0xac0f85c, lpOverlapped=0x0 | out: lpBuffer=0x3e16f90*, lpNumberOfBytesWritten=0xac0f85c*=0x142, lpOverlapped=0x0) returned 1 [0135.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16f90) returned 1 [0135.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0135.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0135.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0135.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecda28) returned 1 [0135.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0135.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0135.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0135.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b3e8 [0135.398] wcscpy (in: _Dest=0x3f0b3e8, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf" [0135.398] wcscat (in: _Dest=0x3f0b3e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf.f0dbec" [0135.398] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf.f0dbec", NtPathName=0xac0f7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\-EKr.pdf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fc98 [0136.807] FlushFileBuffers (hFile=0xfa4) returned 1 [0136.812] CloseHandle (hObject=0xfa4) returned 1 [0136.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67f70 [0136.825] wcscpy (in: _Dest=0x3e67f70, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0136.825] wcscat (in: _Dest=0x3e67f70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" [0136.825] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\f0dbec-readme.txt")) returned 0x20 [0136.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0136.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d440) returned 1 Thread: id = 630 os_tid = 0x10e4 [0135.108] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\59o4a yl.ods")) returned 0x20 [0135.108] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods", dwFileAttributes=0x20) returned 1 [0135.109] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\59o4a yl.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa0 [0135.109] GetFileSizeEx (in: hFile=0xfa0, lpFileSize=0xa6bfb70 | out: lpFileSize=0xa6bfb70*=33710) returned 1 [0135.109] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x83aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.109] ReadFile (in: hFile=0xfa0, lpBuffer=0xa6bfb7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa6bfb58, lpOverlapped=0x0 | out: lpBuffer=0xa6bfb7c*, lpNumberOfBytesRead=0xa6bfb58*=0x4, lpOverlapped=0x0) returned 1 [0135.111] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0135.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0135.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0135.111] NtQuerySystemTime (in: CurrentTime=0xa6bfaf8 | out: CurrentTime=0xa6bfaf8*=132471540037884000) returned 0x0 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x20298398 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x3463d40e [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x1794e99f [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x1c0293a9 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x1deece32 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x783b34b1 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x64652e0c [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x61a11e5e [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x223ed690 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x7b37425d [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x63711e4e [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0xc6f78ad [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x4eb90893 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x34519119 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x2aeeb530 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x1d986e80 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x1157665d [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x3624abe2 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x4303beb9 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x65a9f4a1 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x3d78dfd8 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x134b82d8 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x561d5528 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x57859cb [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x4df2da24 [0135.111] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x147e0c4e [0135.112] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x4ead446c [0135.112] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0xd60dfb4 [0135.112] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x6c604dc9 [0135.112] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x61424212 [0135.112] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x275c1a51 [0135.112] RtlRandomEx (in: Seed=0xa6bfaf0 | out: Seed=0xa6bfaf0) returned 0x502f3b8c [0135.120] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.120] ReadFile (in: hFile=0xfa0, lpBuffer=0x82b54b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa6bfaf8, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesRead=0xa6bfaf8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.120] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31cd0 [0135.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b550 [0135.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0135.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0135.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b90c0 [0135.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0135.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0135.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0135.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b550) returned 1 [0135.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31cd0) returned 1 [0135.121] WriteFile (in: hFile=0xfa0, lpBuffer=0x82b90c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa6bfaf8, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesWritten=0xa6bfaf8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0135.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0135.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6f8b8 [0135.300] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.300] WriteFile (in: hFile=0xfa0, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xa6bfb64, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xa6bfb64*=0x10a, lpOverlapped=0x0) returned 1 [0135.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0135.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f408) returned 1 [0135.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0135.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f8b8) returned 1 [0135.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0135.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0135.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c928) returned 1 [0135.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0135.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24940 [0135.395] wcscpy (in: _Dest=0x3e24940, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods" [0135.395] wcscat (in: _Dest=0x3e24940, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods.f0dbec" [0135.395] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods.f0dbec", NtPathName=0xa6bfae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\59O4A yl.ods.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35010 [0136.473] FlushFileBuffers (hFile=0xfa0) returned 1 [0136.479] CloseHandle (hObject=0xfa0) returned 1 [0136.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bd48 [0136.495] wcscpy (in: _Dest=0x3f0bd48, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0136.495] wcscat (in: _Dest=0x3f0bd48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" [0136.495] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\f0dbec-readme.txt")) returned 0xffffffff [0136.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1160 [0136.799] WriteFile (in: hFile=0x1160, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa6bfb0c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa6bfb0c*=0x70c, lpOverlapped=0x0) returned 1 [0137.020] CloseHandle (hObject=0x1160) returned 1 [0137.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bd48) returned 1 [0137.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 Thread: id = 631 os_tid = 0x10e8 [0135.123] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\d9wmoj5tee3.pdf")) returned 0x20 [0135.123] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf", dwFileAttributes=0x20) returned 1 [0135.124] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\d9wmoj5tee3.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf94 [0135.124] GetFileSizeEx (in: hFile=0xf94, lpFileSize=0x998f918 | out: lpFileSize=0x998f918*=30284) returned 1 [0135.124] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x7648, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.124] ReadFile (in: hFile=0xf94, lpBuffer=0x998f924, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x998f900, lpOverlapped=0x0 | out: lpBuffer=0x998f924*, lpNumberOfBytesRead=0x998f900*=0x4, lpOverlapped=0x0) returned 1 [0135.125] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0135.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8d8 [0135.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0135.125] NtQuerySystemTime (in: CurrentTime=0x998f8a0 | out: CurrentTime=0x998f8a0*=132471540038040000) returned 0x0 [0135.125] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x4698c94d [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x63ba958b [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x5100bafa [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x7c597d07 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x65ad435a [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x7eca26ca [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x31fb3ba0 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x15c9457e [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x6e13c15a [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x3f697b09 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x2b656ed8 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x62ab013b [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x5e977fda [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x6c51a8f5 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x6885ae04 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x58132a36 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x193d2475 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x3737d61d [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x24c0edab [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x729d91db [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x6504c7ba [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x34df3e4b [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x7f528d63 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x135fcbf2 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x3755c953 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x629ff88c [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x13b4b3cb [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x62421e7a [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0xbd64b41 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x3b86260c [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x760889a6 [0135.126] RtlRandomEx (in: Seed=0x998f898 | out: Seed=0x998f898) returned 0x59590262 [0135.136] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.136] ReadFile (in: hFile=0xf94, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x998f8a0, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0x998f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.136] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31d18 [0135.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b550 [0135.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0135.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0135.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0135.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0135.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0135.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0135.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b550) returned 1 [0135.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31d18) returned 1 [0135.137] WriteFile (in: hFile=0xf94, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x998f8a0, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0x998f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0135.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0135.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77b78 [0135.305] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.305] WriteFile (in: hFile=0xf94, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x998f90c, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x998f90c*=0x110, lpOverlapped=0x0) returned 1 [0135.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0135.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77bb0) returned 1 [0135.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0135.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77b78) returned 1 [0135.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0135.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8d8) returned 1 [0135.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0135.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c860) returned 1 [0135.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e241c0 [0135.396] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf" [0135.396] wcscat (in: _Dest=0x3e241c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf.f0dbec" [0135.396] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf.f0dbec", NtPathName=0x998f890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\d9WmOJ5TEE3.pdf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2bd90 [0136.804] FlushFileBuffers (hFile=0xf94) returned 1 [0136.810] CloseHandle (hObject=0xf94) returned 1 [0136.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67ef8 [0136.823] wcscpy (in: _Dest=0x3e67ef8, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0136.823] wcscat (in: _Dest=0x3e67ef8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" [0136.823] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\f0dbec-readme.txt")) returned 0x20 [0136.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 [0136.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 Thread: id = 632 os_tid = 0x10ec [0135.138] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\h1gq1me8g90tp9roxx.rtf")) returned 0x20 [0135.138] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf", dwFileAttributes=0x20) returned 1 [0135.138] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\h1gq1me8g90tp9roxx.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf9c [0135.138] GetFileSizeEx (in: hFile=0xf9c, lpFileSize=0x877f808 | out: lpFileSize=0x877f808*=34163) returned 1 [0135.138] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x856f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.138] ReadFile (in: hFile=0xf9c, lpBuffer=0x877f814, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x877f7f0, lpOverlapped=0x0 | out: lpBuffer=0x877f814*, lpNumberOfBytesRead=0x877f7f0*=0x4, lpOverlapped=0x0) returned 1 [0135.140] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0135.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0135.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0135.140] NtQuerySystemTime (in: CurrentTime=0x877f790 | out: CurrentTime=0x877f790*=132471540038196000) returned 0x0 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x30053656 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x70e2c2dd [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x63fcb5f2 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x2b19a0c1 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x3c25ec5b [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x4eca931 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x41b53534 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x2cba7a1f [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x77ecec13 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x7d37a90a [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x3c7a23d1 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x410b9c8a [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x348a90ad [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x7bc761f6 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x43e0de0f [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x37bdd4d3 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x1fa22db1 [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x3cc6c3ef [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x72a9e48a [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x400f343f [0135.140] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x1fff27c0 [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0xaaedcb4 [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x33caef5e [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x37c01bbf [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x6e9b23ed [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x316be9d8 [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x58b8ae47 [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x407c1d58 [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x528e7cac [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x13e6bb6a [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0xb4fc98a [0135.141] RtlRandomEx (in: Seed=0x877f788 | out: Seed=0x877f788) returned 0x3a3062ac [0135.148] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.148] ReadFile (in: hFile=0xf9c, lpBuffer=0x82c44d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x877f790, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesRead=0x877f790*=0x3c00, lpOverlapped=0x0) returned 1 [0135.149] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31d60 [0135.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b550 [0135.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0135.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0135.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c8458 [0135.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0135.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0135.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0135.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b550) returned 1 [0135.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31d60) returned 1 [0135.154] WriteFile (in: hFile=0xf9c, lpBuffer=0x82c8458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x877f790, lpOverlapped=0x0 | out: lpBuffer=0x82c8458*, lpNumberOfBytesWritten=0x877f790*=0x3c00, lpOverlapped=0x0) returned 1 [0135.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c8458) returned 1 [0135.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0135.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3f32228 [0135.308] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.309] WriteFile (in: hFile=0xf9c, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x877f7fc, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0x877f7fc*=0x11e, lpOverlapped=0x0) returned 1 [0135.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0135.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32348) returned 1 [0135.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0135.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32228) returned 1 [0135.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0135.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0135.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0135.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0135.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f350a0 [0135.400] wcscpy (in: _Dest=0x3f350a0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf" [0135.400] wcscat (in: _Dest=0x3f350a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf.f0dbec" [0135.400] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf.f0dbec", NtPathName=0x877f780, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\H1GQ1me8G90TP9rOXX.rtf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186c38 [0136.810] FlushFileBuffers (hFile=0xf9c) returned 1 [0136.816] CloseHandle (hObject=0xf9c) returned 1 [0136.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67f70 [0136.827] wcscpy (in: _Dest=0x3e67f70, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0136.827] wcscat (in: _Dest=0x3e67f70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" [0136.827] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\f0dbec-readme.txt")) returned 0x20 [0136.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0136.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23cc0) returned 1 Thread: id = 633 os_tid = 0x10f0 [0135.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd680 [0135.157] wcscpy (in: _Dest=0x3ecd680, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R" [0135.157] wcscat (in: _Dest=0x3ecd680, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\" [0135.157] wcscat (in: _Dest=0x3ecd680, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\*") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\*" [0135.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047b10 [0135.157] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\*", lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93cb54a0, ftCreationTime.dwHighDateTime=0x1d5e76f, ftLastAccessTime.dwLowDateTime=0x8dc26270, ftLastAccessTime.dwHighDateTime=0x1d5e70f, ftLastWriteTime.dwLowDateTime=0x8dc26270, ftLastWriteTime.dwHighDateTime=0x1d5e70f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38358 [0135.157] wcscmp (_String1=".", _String2=".") returned 0 [0135.157] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93cb54a0, ftCreationTime.dwHighDateTime=0x1d5e76f, ftLastAccessTime.dwLowDateTime=0x8dc26270, ftLastAccessTime.dwHighDateTime=0x1d5e70f, ftLastWriteTime.dwLowDateTime=0x8dc26270, ftLastWriteTime.dwHighDateTime=0x1d5e70f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.157] wcscmp (_String1="..", _String2=".") returned 1 [0135.157] wcscmp (_String1="..", _String2="..") returned 0 [0135.157] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ddd950, ftCreationTime.dwHighDateTime=0x1d5e487, ftLastAccessTime.dwLowDateTime=0xe3f831c0, ftLastAccessTime.dwHighDateTime=0x1d5df02, ftLastWriteTime.dwLowDateTime=0xe3f831c0, ftLastWriteTime.dwHighDateTime=0x1d5df02, nFileSizeHigh=0x0, nFileSizeLow=0x11316, dwReserved0=0x0, dwReserved1=0x0, cFileName="-jc 5zF fFKRVztp-S.odp", cAlternateFileName="-JC5ZF~1.ODP")) returned 1 [0135.157] wcscmp (_String1="-jc 5zF fFKRVztp-S.odp", _String2=".") returned -1 [0135.157] wcscmp (_String1="-jc 5zF fFKRVztp-S.odp", _String2="..") returned -1 [0135.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34cb0 [0135.157] wcscpy (in: _Dest=0x3f34cb0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R" [0135.157] wcscat (in: _Dest=0x3f34cb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\" [0135.157] wcscat (in: _Dest=0x3f34cb0, _Source="-jc 5zF fFKRVztp-S.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp" [0139.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0139.553] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde14e570, ftCreationTime.dwHighDateTime=0x1d5d9bf, ftLastAccessTime.dwLowDateTime=0x1cf9e560, ftLastAccessTime.dwHighDateTime=0x1d5db55, ftLastWriteTime.dwLowDateTime=0x1cf9e560, ftLastWriteTime.dwHighDateTime=0x1d5db55, nFileSizeHigh=0x0, nFileSizeLow=0x155f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOh_vIZQav.pps", cAlternateFileName="KOH_VI~1.PPS")) returned 1 [0139.553] wcscmp (_String1="KOh_vIZQav.pps", _String2=".") returned 1 [0139.553] wcscmp (_String1="KOh_vIZQav.pps", _String2="..") returned 1 [0139.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3db0088 [0139.553] wcscpy (in: _Dest=0x3db0088, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R" [0139.553] wcscat (in: _Dest=0x3db0088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\" [0139.553] wcscat (in: _Dest=0x3db0088, _Source="KOh_vIZQav.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps" [0139.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db0088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0139.554] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde14e570, ftCreationTime.dwHighDateTime=0x1d5d9bf, ftLastAccessTime.dwLowDateTime=0x1cf9e560, ftLastAccessTime.dwHighDateTime=0x1d5db55, ftLastWriteTime.dwLowDateTime=0x1cf9e560, ftLastWriteTime.dwHighDateTime=0x1d5db55, nFileSizeHigh=0x0, nFileSizeLow=0x155f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOh_vIZQav.pps", cAlternateFileName="KOH_VI~1.PPS")) returned 0 [0139.554] FindClose (in: hFindFile=0x3f38358 | out: hFindFile=0x3f38358) returned 1 [0139.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047b10) returned 1 [0139.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd680) returned 1 [0139.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 Thread: id = 634 os_tid = 0x10f4 [0135.158] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\k4iho.doc")) returned 0x20 [0135.158] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc", dwFileAttributes=0x20) returned 1 [0135.158] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\k4iho.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfac [0135.158] GetFileSizeEx (in: hFile=0xfac, lpFileSize=0xbd1f998 | out: lpFileSize=0xbd1f998*=4095) returned 1 [0135.158] SetFilePointerEx (in: hFile=0xfac, liDistanceToMove=0xffb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.158] ReadFile (in: hFile=0xfac, lpBuffer=0xbd1f9a4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd1f980, lpOverlapped=0x0 | out: lpBuffer=0xbd1f9a4*, lpNumberOfBytesRead=0xbd1f980*=0x4, lpOverlapped=0x0) returned 1 [0135.160] SetFilePointerEx (in: hFile=0xfac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c748 [0135.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0135.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0135.160] NtQuerySystemTime (in: CurrentTime=0xbd1f920 | out: CurrentTime=0xbd1f920*=132471540038508000) returned 0x0 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x33d688c8 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x70ebbe4d [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x1c9d415a [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x1d4b5b7b [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x437f5ad8 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x4ec6a301 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x476a5ec7 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x357948e2 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x16130183 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0xd62aa16 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x33c3b178 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x382548e4 [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x1d1527ff [0135.160] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x2186e8a4 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0xd7fd55a [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x79421d68 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x5716a907 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x71f002e7 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x3706ba2c [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x4d7a4be4 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0xf30451a [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0xec81150 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0xe1399ba [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x74832fd1 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x6d2efe06 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x5aea61ac [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x6b483abf [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x62ce3b3e [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x3cab7a05 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x595b09d2 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x490672e9 [0135.161] RtlRandomEx (in: Seed=0xbd1f918 | out: Seed=0xbd1f918) returned 0x29cff5d4 [0135.183] ReadFile (in: hFile=0xfac, lpBuffer=0x82d3870, nNumberOfBytesToRead=0xfff, lpNumberOfBytesRead=0xbd1f914, lpOverlapped=0x0 | out: lpBuffer=0x82d3870*, lpNumberOfBytesRead=0xbd1f914*=0xfff, lpOverlapped=0x0) returned 1 [0135.184] SetFilePointerEx (in: hFile=0xfac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.184] WriteFile (in: hFile=0xfac, lpBuffer=0x82d7478*, nNumberOfBytesToWrite=0xfff, lpNumberOfBytesWritten=0xbd1f918, lpOverlapped=0x0 | out: lpBuffer=0x82d7478*, lpNumberOfBytesWritten=0xbd1f918*=0xfff, lpOverlapped=0x0) returned 1 [0135.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0135.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0135.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0135.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82d7478) returned 1 [0135.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82d3870) returned 1 [0135.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b5c8) returned 1 [0135.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31e38) returned 1 [0135.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0135.312] SetFilePointerEx (in: hFile=0xfac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.313] WriteFile (in: hFile=0xfac, lpBuffer=0x80527e0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xbd1f98c, lpOverlapped=0x0 | out: lpBuffer=0x80527e0*, lpNumberOfBytesWritten=0xbd1f98c*=0x104, lpOverlapped=0x0) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80527e0) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0136.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e689c0 [0136.301] wcscpy (in: _Dest=0x3e689c0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc" [0136.301] wcscat (in: _Dest=0x3e689c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc.f0dbec" [0136.301] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc.f0dbec", NtPathName=0xbd1f910, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\k4iHO.doc.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f348c0 [0136.815] FlushFileBuffers (hFile=0xfac) returned 1 [0136.819] CloseHandle (hObject=0xfac) returned 1 [0136.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67f70 [0136.832] wcscpy (in: _Dest=0x3e67f70, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0136.832] wcscat (in: _Dest=0x3e67f70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" [0136.832] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\f0dbec-readme.txt")) returned 0x20 [0136.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0136.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b970) returned 1 Thread: id = 635 os_tid = 0x10f8 [0135.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd750 [0135.185] wcscpy (in: _Dest=0x3ecd750, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" [0135.185] wcscat (in: _Dest=0x3ecd750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0135.185] wcscat (in: _Dest=0x3ecd750, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\*") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\*" [0135.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0135.185] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2569750, ftCreationTime.dwHighDateTime=0x1d5e5da, ftLastAccessTime.dwLowDateTime=0x8aaa3b80, ftLastAccessTime.dwHighDateTime=0x1d5da62, ftLastWriteTime.dwLowDateTime=0x8aaa3b80, ftLastWriteTime.dwHighDateTime=0x1d5da62, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38398 [0135.185] wcscmp (_String1=".", _String2=".") returned 0 [0135.185] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2569750, ftCreationTime.dwHighDateTime=0x1d5e5da, ftLastAccessTime.dwLowDateTime=0x8aaa3b80, ftLastAccessTime.dwHighDateTime=0x1d5da62, ftLastWriteTime.dwLowDateTime=0x8aaa3b80, ftLastWriteTime.dwHighDateTime=0x1d5da62, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.185] wcscmp (_String1="..", _String2=".") returned 1 [0135.185] wcscmp (_String1="..", _String2="..") returned 0 [0135.185] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ec7110, ftCreationTime.dwHighDateTime=0x1d5dd59, ftLastAccessTime.dwLowDateTime=0xbe41f220, ftLastAccessTime.dwHighDateTime=0x1d5d86f, ftLastWriteTime.dwLowDateTime=0xbe41f220, ftLastWriteTime.dwHighDateTime=0x1d5d86f, nFileSizeHigh=0x0, nFileSizeLow=0x14a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="c6XVIS sVu.doc", cAlternateFileName="C6XVIS~1.DOC")) returned 1 [0135.185] wcscmp (_String1="c6XVIS sVu.doc", _String2=".") returned 1 [0135.185] wcscmp (_String1="c6XVIS sVu.doc", _String2="..") returned 1 [0135.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5308 [0135.185] wcscpy (in: _Dest=0x3dc5308, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" [0135.185] wcscat (in: _Dest=0x3dc5308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0135.185] wcscat (in: _Dest=0x3dc5308, _Source="c6XVIS sVu.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc" [0143.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0143.430] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2673e750, ftCreationTime.dwHighDateTime=0x1d5e6ca, ftLastAccessTime.dwLowDateTime=0x920b3650, ftLastAccessTime.dwHighDateTime=0x1d5dcb4, ftLastWriteTime.dwLowDateTime=0x920b3650, ftLastWriteTime.dwHighDateTime=0x1d5dcb4, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEw1NLW2IK9H.pps", cAlternateFileName="HEW1NL~1.PPS")) returned 1 [0143.430] wcscmp (_String1="HEw1NLW2IK9H.pps", _String2=".") returned 1 [0143.430] wcscmp (_String1="HEw1NLW2IK9H.pps", _String2="..") returned 1 [0143.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcaa88 [0143.431] wcscpy (in: _Dest=0x2fcaa88, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" [0143.431] wcscat (in: _Dest=0x2fcaa88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0143.431] wcscat (in: _Dest=0x2fcaa88, _Source="HEw1NLW2IK9H.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps" [0143.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fcaa88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0143.432] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x331b4450, ftCreationTime.dwHighDateTime=0x1d5e61e, ftLastAccessTime.dwLowDateTime=0x6dcbaef0, ftLastAccessTime.dwHighDateTime=0x1d5e0e7, ftLastWriteTime.dwLowDateTime=0x6dcbaef0, ftLastWriteTime.dwHighDateTime=0x1d5e0e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J477fNs", cAlternateFileName="")) returned 1 [0143.432] wcscmp (_String1="J477fNs", _String2=".") returned 1 [0143.432] wcscmp (_String1="J477fNs", _String2="..") returned 1 [0143.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8055260 [0143.432] wcscpy (in: _Dest=0x8055260, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" [0143.432] wcscat (in: _Dest=0x8055260, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0143.432] wcscat (in: _Dest=0x8055260, _Source="J477fNs" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs" [0143.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0143.433] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8c41b0, ftCreationTime.dwHighDateTime=0x1d5de8b, ftLastAccessTime.dwLowDateTime=0x687569f0, ftLastAccessTime.dwHighDateTime=0x1d5dbb0, ftLastWriteTime.dwLowDateTime=0x687569f0, ftLastWriteTime.dwHighDateTime=0x1d5dbb0, nFileSizeHigh=0x0, nFileSizeLow=0xeb35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ng6C_lljWL84LiEBO1E.pps", cAlternateFileName="NG6C_L~1.PPS")) returned 1 [0143.433] wcscmp (_String1="Ng6C_lljWL84LiEBO1E.pps", _String2=".") returned 1 [0143.433] wcscmp (_String1="Ng6C_lljWL84LiEBO1E.pps", _String2="..") returned 1 [0143.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35d90 [0143.433] wcscpy (in: _Dest=0x3f35d90, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" [0143.433] wcscat (in: _Dest=0x3f35d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0143.433] wcscat (in: _Dest=0x3f35d90, _Source="Ng6C_lljWL84LiEBO1E.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps" [0143.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0143.434] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4ac80, ftCreationTime.dwHighDateTime=0x1d5e7e7, ftLastAccessTime.dwLowDateTime=0x54594e40, ftLastAccessTime.dwHighDateTime=0x1d5e4da, ftLastWriteTime.dwLowDateTime=0x54594e40, ftLastWriteTime.dwHighDateTime=0x1d5e4da, nFileSizeHigh=0x0, nFileSizeLow=0x15826, dwReserved0=0x0, dwReserved1=0x0, cFileName="X8e2.pps", cAlternateFileName="")) returned 1 [0143.434] wcscmp (_String1="X8e2.pps", _String2=".") returned 1 [0143.434] wcscmp (_String1="X8e2.pps", _String2="..") returned 1 [0143.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80555e0 [0143.434] wcscpy (in: _Dest=0x80555e0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" [0143.434] wcscat (in: _Dest=0x80555e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0143.434] wcscat (in: _Dest=0x80555e0, _Source="X8e2.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps" [0143.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80555e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0143.465] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78499530, ftCreationTime.dwHighDateTime=0x1d5dedb, ftLastAccessTime.dwLowDateTime=0x4b33adb0, ftLastAccessTime.dwHighDateTime=0x1d5de22, ftLastWriteTime.dwLowDateTime=0x4b33adb0, ftLastWriteTime.dwHighDateTime=0x1d5de22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZeH7wI2", cAlternateFileName="")) returned 1 [0143.465] wcscmp (_String1="ZeH7wI2", _String2=".") returned 1 [0143.465] wcscmp (_String1="ZeH7wI2", _String2="..") returned 1 [0143.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8054a80 [0143.465] wcscpy (in: _Dest=0x8054a80, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0" [0143.465] wcscat (in: _Dest=0x8054a80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0143.465] wcscat (in: _Dest=0x8054a80, _Source="ZeH7wI2" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2" [0143.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0143.466] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78499530, ftCreationTime.dwHighDateTime=0x1d5dedb, ftLastAccessTime.dwLowDateTime=0x4b33adb0, ftLastAccessTime.dwHighDateTime=0x1d5de22, ftLastWriteTime.dwLowDateTime=0x4b33adb0, ftLastWriteTime.dwHighDateTime=0x1d5de22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZeH7wI2", cAlternateFileName="")) returned 0 [0143.467] FindClose (in: hFindFile=0x3f38398 | out: hFindFile=0x3f38398) returned 1 [0143.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0143.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd750) returned 1 [0143.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe71a8) returned 1 Thread: id = 636 os_tid = 0x10fc [0135.186] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\ra65f octjthotwii.pdf")) returned 0x20 [0135.186] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf", dwFileAttributes=0x20) returned 1 [0135.186] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\ra65f octjthotwii.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1210 [0135.186] GetFileSizeEx (in: hFile=0x1210, lpFileSize=0xa38f9b0 | out: lpFileSize=0xa38f9b0*=10409) returned 1 [0135.186] SetFilePointerEx (in: hFile=0x1210, liDistanceToMove=0x28a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.186] ReadFile (in: hFile=0x1210, lpBuffer=0xa38f9bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa38f998, lpOverlapped=0x0 | out: lpBuffer=0xa38f9bc*, lpNumberOfBytesRead=0xa38f998*=0x4, lpOverlapped=0x0) returned 1 [0135.188] SetFilePointerEx (in: hFile=0x1210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0135.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0135.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0135.188] NtQuerySystemTime (in: CurrentTime=0xa38f938 | out: CurrentTime=0xa38f938*=132471540038664000) returned 0x0 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0xf100a36 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x21a19389 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x273959d5 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x4b77e4cb [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x354e7022 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x29f30ae [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x3535ed61 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x55c82bc2 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x74ebde46 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x4985d5d8 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x77cb4b54 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x42a9cae2 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x5ee4caac [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x363bbfa7 [0135.188] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x60681d39 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x5c995a26 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x386b4465 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x6476516d [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x7d19dde [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x68990fa3 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x5496f689 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x6d7934a8 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x7eee534c [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x6c297398 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x75eec821 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x547e917d [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x22bc2a15 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0xdb95b3f [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x6e243c0c [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x3c50114 [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0xb66d3ed [0135.189] RtlRandomEx (in: Seed=0xa38f930 | out: Seed=0xa38f930) returned 0x1e5ca389 [0135.197] ReadFile (in: hFile=0x1210, lpBuffer=0x82db080, nNumberOfBytesToRead=0x28a9, lpNumberOfBytesRead=0xa38f92c, lpOverlapped=0x0 | out: lpBuffer=0x82db080*, lpNumberOfBytesRead=0xa38f92c*=0x28a9, lpOverlapped=0x0) returned 1 [0135.198] SetFilePointerEx (in: hFile=0x1210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.198] WriteFile (in: hFile=0x1210, lpBuffer=0x82dec88*, nNumberOfBytesToWrite=0x28a9, lpNumberOfBytesWritten=0xa38f930, lpOverlapped=0x0 | out: lpBuffer=0x82dec88*, lpNumberOfBytesWritten=0xa38f930*=0x28a9, lpOverlapped=0x0) returned 1 [0135.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0135.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0135.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0135.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82dec88) returned 1 [0135.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82db080) returned 1 [0135.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b640) returned 1 [0135.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31f10) returned 1 [0135.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e54d08 [0135.315] SetFilePointerEx (in: hFile=0x1210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.315] WriteFile (in: hFile=0x1210, lpBuffer=0x3d57718*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xa38f9a4, lpOverlapped=0x0 | out: lpBuffer=0x3d57718*, lpNumberOfBytesWritten=0xa38f9a4*=0x11c, lpOverlapped=0x0) returned 1 [0135.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57718) returned 1 [0135.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55008) returned 1 [0135.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0135.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54d08) returned 1 [0135.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0135.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0135.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0135.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0135.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35130 [0135.404] wcscpy (in: _Dest=0x3f35130, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf" [0135.404] wcscat (in: _Dest=0x3f35130, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf.f0dbec" [0135.404] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf.f0dbec", NtPathName=0xa38f928, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\rA65f ocTJtHOtWII.pdf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ce0 [0136.812] FlushFileBuffers (hFile=0x1210) returned 1 [0136.818] CloseHandle (hObject=0x1210) returned 1 [0136.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67f70 [0136.829] wcscpy (in: _Dest=0x3e67f70, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0136.829] wcscat (in: _Dest=0x3e67f70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" [0136.829] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\f0dbec-readme.txt")) returned 0x20 [0136.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0136.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23fc0) returned 1 Thread: id = 637 os_tid = 0x1100 [0135.198] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\xqjzi_z8dkf.xls")) returned 0x20 [0135.198] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls", dwFileAttributes=0x20) returned 1 [0135.198] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\xqjzi_z8dkf.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1254 [0135.199] GetFileSizeEx (in: hFile=0x1254, lpFileSize=0xcb6f848 | out: lpFileSize=0xcb6f848*=85605) returned 1 [0135.199] SetFilePointerEx (in: hFile=0x1254, liDistanceToMove=0x14e61, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.199] ReadFile (in: hFile=0x1254, lpBuffer=0xcb6f854, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcb6f830, lpOverlapped=0x0 | out: lpBuffer=0xcb6f854*, lpNumberOfBytesRead=0xcb6f830*=0x4, lpOverlapped=0x0) returned 1 [0135.200] SetFilePointerEx (in: hFile=0x1254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0135.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0135.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0135.200] NtQuerySystemTime (in: CurrentTime=0xcb6f7d0 | out: CurrentTime=0xcb6f7d0*=132471540038820000) returned 0x0 [0135.200] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x16543c5b [0135.200] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x21605e8d [0135.200] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x58407346 [0135.200] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x18b45531 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x8f79554 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x6515df04 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x33a9711e [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x3535ed61 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x4d7a4be4 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x3bf16b61 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x70b39119 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x3d4a8f31 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x70302705 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x70df47f5 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x3df7aec4 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x25bf12ee [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x1759db22 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x12bbf7ab [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x5218694c [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x154396f6 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x34783462 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x5687b311 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x5d8beb57 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x49535bf5 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x5823887f [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x6ada1738 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x45ee05d2 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x3cfcae3a [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x52b22348 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x24d8628d [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x4cfb51f7 [0135.201] RtlRandomEx (in: Seed=0xcb6f7c8 | out: Seed=0xcb6f7c8) returned 0x75eec821 [0135.252] SetFilePointerEx (in: hFile=0x1254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.252] ReadFile (in: hFile=0x1254, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcb6f7d0, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xcb6f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.252] SetFilePointerEx (in: hFile=0x1254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f32198 [0135.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9690 [0135.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0135.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0135.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0135.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0135.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0135.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0135.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0135.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32198) returned 1 [0135.253] WriteFile (in: hFile=0x1254, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcb6f7d0, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0xcb6f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0135.374] SetFilePointerEx (in: hFile=0x1254, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.374] ReadFile (in: hFile=0x1254, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcb6f7d0, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xcb6f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.375] SetFilePointerEx (in: hFile=0x1254, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f32108 [0135.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b5c8 [0135.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0135.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0135.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0135.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0135.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0135.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0135.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b5c8) returned 1 [0135.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32108) returned 1 [0135.376] WriteFile (in: hFile=0x1254, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcb6f7d0, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0xcb6f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0135.379] SetFilePointerEx (in: hFile=0x1254, liDistanceToMove=0x11265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.379] ReadFile (in: hFile=0x1254, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcb6f7d0, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xcb6f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.380] SetFilePointerEx (in: hFile=0x1254, liDistanceToMove=0x11265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f32108 [0135.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b5c8 [0135.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0135.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0135.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0135.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0135.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49c0 [0135.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49c0) returned 1 [0135.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b5c8) returned 1 [0135.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32108) returned 1 [0135.381] WriteFile (in: hFile=0x1254, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcb6f7d0, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0xcb6f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0135.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd8f0 [0135.383] SetFilePointerEx (in: hFile=0x1254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.383] WriteFile (in: hFile=0x1254, lpBuffer=0x3e16e38*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0xcb6f83c, lpOverlapped=0x0 | out: lpBuffer=0x3e16e38*, lpNumberOfBytesWritten=0xcb6f83c*=0x150, lpOverlapped=0x0) returned 1 [0136.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16e38) returned 1 [0136.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0136.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0136.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0136.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd8f0) returned 1 [0136.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0136.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0136.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0136.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24340 [0136.326] wcscpy (in: _Dest=0x3e24340, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls" [0136.326] wcscat (in: _Dest=0x3e24340, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls.f0dbec" [0136.326] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls.f0dbec", NtPathName=0xcb6f7c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\XQJZI_z8Dkf.xls.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2acf0 [0136.817] FlushFileBuffers (hFile=0x1254) returned 1 [0136.822] CloseHandle (hObject=0x1254) returned 1 [0136.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67f70 [0136.835] wcscpy (in: _Dest=0x3e67f70, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0136.835] wcscat (in: _Dest=0x3e67f70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" [0136.835] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\f0dbec-readme.txt")) returned 0x20 [0136.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0136.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 Thread: id = 638 os_tid = 0x1104 [0135.253] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\z7l2xzpmsmhbq.docx")) returned 0x20 [0135.254] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx", dwFileAttributes=0x20) returned 1 [0135.254] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\z7l2xzpmsmhbq.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1184 [0135.254] GetFileSizeEx (in: hFile=0x1184, lpFileSize=0xd20fed0 | out: lpFileSize=0xd20fed0*=48177) returned 1 [0135.254] SetFilePointerEx (in: hFile=0x1184, liDistanceToMove=0xbc2d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.254] ReadFile (in: hFile=0x1184, lpBuffer=0xd20fedc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd20feb8, lpOverlapped=0x0 | out: lpBuffer=0xd20fedc*, lpNumberOfBytesRead=0xd20feb8*=0x4, lpOverlapped=0x0) returned 1 [0135.410] SetFilePointerEx (in: hFile=0x1184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0135.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0135.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0135.411] NtQuerySystemTime (in: CurrentTime=0xd20fe58 | out: CurrentTime=0xd20fe58*=132471540041004000) returned 0x0 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x7745ef8a [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x7a2e6869 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x479eb147 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x222edecf [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x125d3e9b [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x16821b24 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x77253506 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x15d1b937 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x490672e9 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0xd66a9b1 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x2974abed [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x94578fe [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x79b9add8 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0xa955919 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x7c1d7170 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x1d89af7d [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x3ad8e7e0 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x470f14e0 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x6d3efdac [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x70df47f5 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x34a30d22 [0135.411] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x48abd1c [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x1e7a9555 [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x104cf07a [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x3bed258b [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x2fcc85fe [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x5cbfb1fb [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x22a3a01d [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x3191e973 [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x104cf07a [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x7dc8cfc8 [0135.412] RtlRandomEx (in: Seed=0xd20fe50 | out: Seed=0xd20fe50) returned 0x2495b5f3 [0135.423] SetFilePointerEx (in: hFile=0x1184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.423] ReadFile (in: hFile=0x1184, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd20fe58, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xd20fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0135.424] SetFilePointerEx (in: hFile=0x1184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f32228 [0135.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b550 [0135.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0135.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0135.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0135.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0135.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0135.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0135.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b550) returned 1 [0135.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32228) returned 1 [0135.424] WriteFile (in: hFile=0x1184, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd20fe58, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xd20fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0136.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0136.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82adca8) returned 1 [0136.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfdd0 [0136.342] SetFilePointerEx (in: hFile=0x1184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.342] WriteFile (in: hFile=0x1184, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xd20fec4, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0xd20fec4*=0x116, lpOverlapped=0x0) returned 1 [0136.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0136.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfd10) returned 1 [0136.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0136.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfdd0) returned 1 [0136.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0136.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0136.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0136.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0136.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30d98 [0136.461] wcscpy (in: _Dest=0x3f30d98, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx" [0136.461] wcscat (in: _Dest=0x3f30d98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx.f0dbec" [0136.461] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx.f0dbec", NtPathName=0xd20fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\z7L2XZpMSMHbq.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11968 [0136.802] FlushFileBuffers (hFile=0x1184) returned 1 [0136.805] CloseHandle (hObject=0x1184) returned 1 [0136.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e689c0 [0136.820] wcscpy (in: _Dest=0x3e689c0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\" [0136.820] wcscat (in: _Dest=0x3e689c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" [0136.820] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\f0dbec-readme.txt")) returned 0x20 [0136.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 [0136.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 Thread: id = 639 os_tid = 0x1108 [0135.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecda28 [0135.426] wcscpy (in: _Dest=0x3ecda28, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf" [0135.426] wcscat (in: _Dest=0x3ecda28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\" [0135.426] wcscat (in: _Dest=0x3ecda28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\*") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\*" [0135.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047170 [0135.426] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\*", lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc9fd010, ftCreationTime.dwHighDateTime=0x1d5e5de, ftLastAccessTime.dwLowDateTime=0xdc6081c0, ftLastAccessTime.dwHighDateTime=0x1d5ddbc, ftLastWriteTime.dwLowDateTime=0xdc6081c0, ftLastWriteTime.dwHighDateTime=0x1d5ddbc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d08 [0135.426] wcscmp (_String1=".", _String2=".") returned 0 [0135.426] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc9fd010, ftCreationTime.dwHighDateTime=0x1d5e5de, ftLastAccessTime.dwLowDateTime=0xdc6081c0, ftLastAccessTime.dwHighDateTime=0x1d5ddbc, ftLastWriteTime.dwLowDateTime=0xdc6081c0, ftLastWriteTime.dwHighDateTime=0x1d5ddbc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.426] wcscmp (_String1="..", _String2=".") returned 1 [0135.426] wcscmp (_String1="..", _String2="..") returned 0 [0135.426] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6528f730, ftCreationTime.dwHighDateTime=0x1d5e6aa, ftLastAccessTime.dwLowDateTime=0xadcffe50, ftLastAccessTime.dwHighDateTime=0x1d5de5a, ftLastWriteTime.dwLowDateTime=0xadcffe50, ftLastWriteTime.dwHighDateTime=0x1d5de5a, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="3tTv-MpanQPyl6Nw.xlsx", cAlternateFileName="3TTV-M~1.XLS")) returned 1 [0135.426] wcscmp (_String1="3tTv-MpanQPyl6Nw.xlsx", _String2=".") returned 1 [0135.426] wcscmp (_String1="3tTv-MpanQPyl6Nw.xlsx", _String2="..") returned 1 [0135.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f351c0 [0135.427] wcscpy (in: _Dest=0x3f351c0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf" [0135.427] wcscat (in: _Dest=0x3f351c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\" [0135.427] wcscat (in: _Dest=0x3f351c0, _Source="3tTv-MpanQPyl6Nw.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx" [0139.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f351c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0139.557] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c0bcae0, ftCreationTime.dwHighDateTime=0x1d5e3ff, ftLastAccessTime.dwLowDateTime=0xd7538030, ftLastAccessTime.dwHighDateTime=0x1d5df27, ftLastWriteTime.dwLowDateTime=0xd7538030, ftLastWriteTime.dwHighDateTime=0x1d5df27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="o8qFYwPp", cAlternateFileName="")) returned 1 [0139.557] wcscmp (_String1="o8qFYwPp", _String2=".") returned 1 [0139.557] wcscmp (_String1="o8qFYwPp", _String2="..") returned 1 [0139.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32c28 [0139.557] wcscpy (in: _Dest=0x3f32c28, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf" [0139.557] wcscat (in: _Dest=0x3f32c28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\" [0139.557] wcscat (in: _Dest=0x3f32c28, _Source="o8qFYwPp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp" [0139.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0139.560] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c0bcae0, ftCreationTime.dwHighDateTime=0x1d5e3ff, ftLastAccessTime.dwLowDateTime=0xd7538030, ftLastAccessTime.dwHighDateTime=0x1d5df27, ftLastWriteTime.dwLowDateTime=0xd7538030, ftLastWriteTime.dwHighDateTime=0x1d5df27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="o8qFYwPp", cAlternateFileName="")) returned 0 [0139.560] FindClose (in: hFindFile=0x3e54d08 | out: hFindFile=0x3e54d08) returned 1 [0139.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047170) returned 1 [0139.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecda28) returned 1 [0139.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8aba0) returned 1 Thread: id = 640 os_tid = 0x110c [0135.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b550 [0135.429] wcscpy (in: _Dest=0x3f0b550, _Source="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0135.429] wcscat (in: _Dest=0x3f0b550, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\" [0135.429] wcscat (in: _Dest=0x3f0b550, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*" [0135.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049588 [0135.429] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049588) returned 1 [0137.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b550) returned 1 [0137.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 Thread: id = 641 os_tid = 0x1110 [0135.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3dc6168 [0135.430] wcscpy (in: _Dest=0x3dc6168, _Source="C:\\ProgramData\\Microsoft\\MSDN\\8.0" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0" [0135.430] wcscat (in: _Dest=0x3dc6168, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\" [0135.430] wcscat (in: _Dest=0x3dc6168, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*" [0135.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0135.431] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55008 [0135.431] wcscmp (_String1=".", _String2=".") returned 0 [0135.431] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.431] wcscmp (_String1="..", _String2=".") returned 1 [0135.431] wcscmp (_String1="..", _String2="..") returned 0 [0135.431] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.431] FindClose (in: hFindFile=0x3e55008 | out: hFindFile=0x3e55008) returned 1 [0135.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0135.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6168) returned 1 [0135.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de68d8) returned 1 Thread: id = 642 os_tid = 0x1114 [0135.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f110 [0135.433] wcscpy (in: _Dest=0x3e0f110, _Source="C:\\ProgramData\\Microsoft\\Search\\Data" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data" [0135.433] wcscat (in: _Dest=0x3e0f110, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\" [0135.433] wcscat (in: _Dest=0x3e0f110, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\*") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\*" [0135.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0135.433] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0135.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f110) returned 1 [0135.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ed80) returned 1 Thread: id = 643 os_tid = 0x1118 [0135.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6ed80 [0135.435] wcscpy (in: _Dest=0x3e6ed80, _Source="C:\\ProgramData\\Microsoft\\DRM\\Server" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server" [0135.435] wcscat (in: _Dest=0x3e6ed80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server\\") returned="C:\\ProgramData\\Microsoft\\DRM\\Server\\" [0135.435] wcscat (in: _Dest=0x3e6ed80, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server\\*") returned="C:\\ProgramData\\Microsoft\\DRM\\Server\\*" [0135.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0135.435] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55008 [0135.435] wcscmp (_String1=".", _String2=".") returned 0 [0135.435] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.435] wcscmp (_String1="..", _String2=".") returned 1 [0135.436] wcscmp (_String1="..", _String2="..") returned 0 [0135.436] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.436] FindClose (in: hFindFile=0x3e55008 | out: hFindFile=0x3e55008) returned 1 [0135.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0135.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ed80) returned 1 [0135.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de61f8) returned 1 Thread: id = 644 os_tid = 0x111c [0135.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0c68 [0135.437] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" [0135.437] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\" [0135.437] wcscat (in: _Dest=0x2fe0c68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*" [0135.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0135.437] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55008 [0135.438] wcscmp (_String1=".", _String2=".") returned 0 [0135.438] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.438] wcscmp (_String1="..", _String2=".") returned 1 [0135.438] wcscmp (_String1="..", _String2="..") returned 0 [0135.438] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.438] FindClose (in: hFindFile=0x3e55008 | out: hFindFile=0x3e55008) returned 1 [0135.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0135.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 [0135.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe70e8) returned 1 Thread: id = 645 os_tid = 0x1120 [0135.440] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn autos.url")) returned 0x20 [0137.151] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url", dwFileAttributes=0x20) returned 1 [0137.151] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfcc [0137.152] GetFileSizeEx (in: hFile=0xfcc, lpFileSize=0x88ef7a8 | out: lpFileSize=0x88ef7a8*=133) returned 1 [0137.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ff0 [0137.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0137.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0137.152] NtQuerySystemTime (in: CurrentTime=0x88ef730 | out: CurrentTime=0x88ef730*=132471540058320000) returned 0x0 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x5fb8b371 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x275d891e [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x61707bf7 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x48976f76 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x7dbc3d9c [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x4ecce4c4 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x6b9458be [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x27eab422 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x5f10c0d4 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x76e13ed0 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x451e1adb [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x69143c4e [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x60f2ef27 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x5d611b05 [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x525ce98e [0137.152] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x8d01753 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x1e516f33 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x52618e57 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x15d70ab8 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x14ea42db [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x3fc2dd66 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x74f7bb04 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x7a1a01d6 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x3acff043 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x6219e9f5 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x51550640 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x4d88e5b9 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x572067cb [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x1e51cfe5 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x48058f38 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x25c31ff2 [0137.153] RtlRandomEx (in: Seed=0x88ef728 | out: Seed=0x88ef728) returned 0x26f5304f [0137.163] ReadFile (in: hFile=0xfcc, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x88ef724, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0x88ef724*=0x85, lpOverlapped=0x0) returned 1 [0137.165] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.165] WriteFile (in: hFile=0xfcc, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x88ef728, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0x88ef728*=0x85, lpOverlapped=0x0) returned 1 [0139.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0139.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0139.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0139.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0139.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0139.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0139.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31f58) returned 1 [0139.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0139.189] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.189] WriteFile (in: hFile=0xfcc, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x88ef79c, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0x88ef79c*=0x10c, lpOverlapped=0x0) returned 1 [0140.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0140.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3908) returned 1 [0140.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0140.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0140.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0140.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0140.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0140.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0140.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053418 [0140.982] wcscpy (in: _Dest=0x8053418, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" [0140.982] wcscat (in: _Dest=0x8053418, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url.f0dbec" [0140.982] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url.f0dbec", NtPathName=0x88ef720, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0140.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c118 [0141.622] FlushFileBuffers (hFile=0xfcc) returned 1 [0141.636] CloseHandle (hObject=0xfcc) returned 1 [0141.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5988 [0141.778] wcscpy (in: _Dest=0x3dc5988, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.778] wcscat (in: _Dest=0x3dc5988, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" [0141.778] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\f0dbec-readme.txt")) returned 0xffffffff [0141.857] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd24 [0141.873] WriteFile (in: hFile=0xd24, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x88ef744, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x88ef744*=0x70c, lpOverlapped=0x0) returned 1 [0141.875] CloseHandle (hObject=0xd24) returned 1 [0141.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5988) returned 1 [0141.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32fe8) returned 1 Thread: id = 646 os_tid = 0x1124 [0135.442] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn entertainment.url")) returned 0x20 [0139.128] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url", dwFileAttributes=0x20) returned 1 [0140.672] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11e4 [0140.672] GetFileSizeEx (in: hFile=0x11e4, lpFileSize=0x8e5faa8 | out: lpFileSize=0x8e5faa8*=133) returned 1 [0140.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0140.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0140.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0140.673] NtQuerySystemTime (in: CurrentTime=0x8e5fa30 | out: CurrentTime=0x8e5fa30*=132471540093264000) returned 0x0 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x351174b [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x327ac0f0 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x762edccd [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0xed31b63 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x62357425 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x3bddc02e [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x61700eeb [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x3edc558 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x1cb06c89 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x3c3486e7 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x705300e0 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x6696da8 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x8b9e63 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x61ed6fe0 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x7c669121 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x2cfcb104 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x38493584 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x1073bf38 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x1a61500a [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x45648f42 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x3ff83e4c [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x603acaa4 [0140.673] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x7379c644 [0140.674] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x1f2ca09b [0140.674] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x450ac31d [0140.674] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x778073a [0140.674] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x3d063acf [0140.674] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x16fd8a9e [0140.674] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x2aae07ac [0140.674] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x6e4a32ce [0140.674] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x4046eeaf [0140.674] RtlRandomEx (in: Seed=0x8e5fa28 | out: Seed=0x8e5fa28) returned 0x7bd9046e [0140.684] ReadFile (in: hFile=0x11e4, lpBuffer=0x812a060, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x8e5fa24, lpOverlapped=0x0 | out: lpBuffer=0x812a060*, lpNumberOfBytesRead=0x8e5fa24*=0x85, lpOverlapped=0x0) returned 1 [0140.687] SetFilePointerEx (in: hFile=0x11e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.687] WriteFile (in: hFile=0x11e4, lpBuffer=0x812dc68*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x8e5fa28, lpOverlapped=0x0 | out: lpBuffer=0x812dc68*, lpNumberOfBytesWritten=0x8e5fa28*=0x85, lpOverlapped=0x0) returned 1 [0141.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0141.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc7f60 [0141.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0141.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x812dc68) returned 1 [0141.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x812a060) returned 1 [0141.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0141.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf28) returned 1 [0141.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x80996d0 [0141.010] SetFilePointerEx (in: hFile=0x11e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.010] WriteFile (in: hFile=0x11e4, lpBuffer=0x3d57278*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x8e5fa9c, lpOverlapped=0x0 | out: lpBuffer=0x3d57278*, lpNumberOfBytesWritten=0x8e5fa9c*=0x11c, lpOverlapped=0x0) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099710) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80996d0) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b708) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0141.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c248 [0141.591] wcscpy (in: _Dest=0x3e3c248, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" [0141.592] wcscat (in: _Dest=0x3e3c248, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url.f0dbec" [0141.592] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url.f0dbec", NtPathName=0x8e5fa20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d5d8 [0141.948] FlushFileBuffers (hFile=0x11e4) returned 1 [0141.960] CloseHandle (hObject=0x11e4) returned 1 [0141.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3daf408 [0141.961] wcscpy (in: _Dest=0x3daf408, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.961] wcscat (in: _Dest=0x3daf408, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" [0141.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\f0dbec-readme.txt")) returned 0x20 [0141.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf408) returned 1 [0141.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f6c0) returned 1 Thread: id = 647 os_tid = 0x1128 [0135.443] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn money.url")) returned 0x20 [0139.127] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url", dwFileAttributes=0x20) returned 1 [0140.636] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf8 [0140.636] GetFileSizeEx (in: hFile=0xdf8, lpFileSize=0xcf8fe70 | out: lpFileSize=0xcf8fe70*=133) returned 1 [0140.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0140.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0140.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0140.637] NtQuerySystemTime (in: CurrentTime=0xcf8fdf8 | out: CurrentTime=0xcf8fdf8*=132471540092952000) returned 0x0 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x6cd02878 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x592ce7b1 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x17d3dcf [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x64f0ad60 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x7c3bb861 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x76787e83 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x70819c73 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x5e8dde4f [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x79016fe4 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x6e359ba7 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x5d50b8d3 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x2b069318 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x68aa56b6 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x413d9f53 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x55e079e0 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x63be955a [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x7a8f40e1 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x3b1a23b2 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x158c2984 [0140.637] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x1a29eff4 [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x41f161b0 [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x7e741780 [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x39481f93 [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x632f8a66 [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x19ab2849 [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x22d2bf1a [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x2a72ca5b [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x6713cef5 [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x752812cb [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x3b48458a [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x341a5d [0140.638] RtlRandomEx (in: Seed=0xcf8fdf0 | out: Seed=0xcf8fdf0) returned 0x1d6eccac [0140.650] ReadFile (in: hFile=0xdf8, lpBuffer=0x8262890, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xcf8fdec, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesRead=0xcf8fdec*=0x85, lpOverlapped=0x0) returned 1 [0140.653] SetFilePointerEx (in: hFile=0xdf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.653] WriteFile (in: hFile=0xdf8, lpBuffer=0x8266498*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xcf8fdf0, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesWritten=0xcf8fdf0*=0x85, lpOverlapped=0x0) returned 1 [0141.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9cc0 [0141.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca1c0 [0141.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca1c0) returned 1 [0141.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0141.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0141.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f331c8) returned 1 [0141.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6abc0) returned 1 [0141.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df35a8 [0141.006] SetFilePointerEx (in: hFile=0xdf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.006] WriteFile (in: hFile=0xdf8, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcf8fe64, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xcf8fe64*=0x10c, lpOverlapped=0x0) returned 1 [0141.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0141.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3908) returned 1 [0141.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca1c0) returned 1 [0141.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0141.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9cc0) returned 1 [0141.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0141.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0141.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0141.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x80545a0 [0141.736] wcscpy (in: _Dest=0x80545a0, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" [0141.736] wcscat (in: _Dest=0x80545a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url.f0dbec" [0141.736] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url.f0dbec", NtPathName=0xcf8fde8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c2e0 [0141.921] FlushFileBuffers (hFile=0xdf8) returned 1 [0141.941] CloseHandle (hObject=0xdf8) returned 1 [0141.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3daf408 [0141.942] wcscpy (in: _Dest=0x3daf408, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.942] wcscat (in: _Dest=0x3daf408, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" [0141.942] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\f0dbec-readme.txt")) returned 0x20 [0141.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf408) returned 1 [0141.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 Thread: id = 648 os_tid = 0x112c [0135.443] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn sports.url")) returned 0x20 [0139.127] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url", dwFileAttributes=0x20) returned 1 [0140.653] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdb0 [0140.653] GetFileSizeEx (in: hFile=0xdb0, lpFileSize=0x86bfad8 | out: lpFileSize=0x86bfad8*=133) returned 1 [0140.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0140.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0140.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0140.654] NtQuerySystemTime (in: CurrentTime=0x86bfa60 | out: CurrentTime=0x86bfa60*=132471540093108000) returned 0x0 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x3be27292 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0xe3a876a [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x409b727b [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x2c3d9574 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x3ffd1af7 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x7512316d [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x441ba18 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x2e25b591 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x6780e720 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x70a512dc [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x3ad7b545 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x1a41af86 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x465143ff [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x1eb90dc7 [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x2ba6852a [0140.654] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x71cfb2fa [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0xb318655 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x3ec86d38 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x3c2a1197 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x5d07215a [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x640a06a4 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x7b985e1d [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x2b8d60e7 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x5e23ccba [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x7f47fa98 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x3360ea13 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x38033a42 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x78edc765 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x299aff14 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0xcf06102 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0x7c562539 [0140.655] RtlRandomEx (in: Seed=0x86bfa58 | out: Seed=0x86bfa58) returned 0xc9649f3 [0140.669] ReadFile (in: hFile=0xdb0, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x86bfa54, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0x86bfa54*=0x85, lpOverlapped=0x0) returned 1 [0140.672] SetFilePointerEx (in: hFile=0xdb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.672] WriteFile (in: hFile=0xdb0, lpBuffer=0x8126458*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x86bfa58, lpOverlapped=0x0 | out: lpBuffer=0x8126458*, lpNumberOfBytesWritten=0x86bfa58*=0x85, lpOverlapped=0x0) returned 1 [0141.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0141.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0141.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0141.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8126458) returned 1 [0141.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0141.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 [0141.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0141.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77e88 [0141.009] SetFilePointerEx (in: hFile=0xdb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.009] WriteFile (in: hFile=0xdb0, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x86bfacc, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x86bfacc*=0x10e, lpOverlapped=0x0) returned 1 [0141.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0141.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77ec0) returned 1 [0141.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0141.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e88) returned 1 [0141.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0141.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b370) returned 1 [0141.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b168) returned 1 [0141.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0141.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f31150 [0141.589] wcscpy (in: _Dest=0x3f31150, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" [0141.589] wcscat (in: _Dest=0x3f31150, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url.f0dbec" [0141.589] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url.f0dbec", NtPathName=0x86bfa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e111e8 [0141.945] FlushFileBuffers (hFile=0xdb0) returned 1 [0141.958] CloseHandle (hObject=0xdb0) returned 1 [0141.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3daf408 [0141.959] wcscpy (in: _Dest=0x3daf408, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.959] wcscat (in: _Dest=0x3daf408, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" [0141.959] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\f0dbec-readme.txt")) returned 0x20 [0141.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf408) returned 1 [0141.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68588) returned 1 Thread: id = 649 os_tid = 0x1130 [0135.443] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn.url")) returned 0x20 [0137.136] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url", dwFileAttributes=0x20) returned 1 [0137.136] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd24 [0137.136] GetFileSizeEx (in: hFile=0xd24, lpFileSize=0x8f5f7e8 | out: lpFileSize=0x8f5f7e8*=133) returned 1 [0137.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ff0 [0137.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0137.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0137.137] NtQuerySystemTime (in: CurrentTime=0x8f5f770 | out: CurrentTime=0x8f5f770*=132471540058164000) returned 0x0 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x45e5d4b9 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x17801cc1 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x1a2d8c7c [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x3a5ff3ba [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x3d36c9a7 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x4b64cdb1 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x69a212d7 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x73258604 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x731c78e0 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x4a395b7 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x23e21c54 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x39e8eebd [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x3009009f [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x27094792 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x5443600a [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x3b7da22f [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x34cde5e2 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x8ea5809 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x2c1fa85d [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x7f05d288 [0137.137] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x17a417cb [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x79df106d [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x4173c6dc [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x79573bf2 [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x14b32d1a [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x27df6dc [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x48967764 [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x6540dca7 [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x7d9c57bd [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x6e50d808 [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x67be9926 [0137.138] RtlRandomEx (in: Seed=0x8f5f768 | out: Seed=0x8f5f768) returned 0x3b6c5ba2 [0137.148] ReadFile (in: hFile=0xd24, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x8f5f764, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0x8f5f764*=0x85, lpOverlapped=0x0) returned 1 [0137.150] SetFilePointerEx (in: hFile=0xd24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.150] WriteFile (in: hFile=0xd24, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x8f5f768, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0x8f5f768*=0x85, lpOverlapped=0x0) returned 1 [0139.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ed8 [0139.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0139.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0139.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0139.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82adca8) returned 1 [0139.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0139.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31970) returned 1 [0139.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef3368 [0139.931] SetFilePointerEx (in: hFile=0xd24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.931] WriteFile (in: hFile=0xd24, lpBuffer=0x2faea0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x8f5f7dc, lpOverlapped=0x0 | out: lpBuffer=0x2faea0*, lpNumberOfBytesWritten=0x8f5f7dc*=0x100, lpOverlapped=0x0) returned 1 [0140.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2faea0) returned 1 [0140.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3638) returned 1 [0140.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0140.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0140.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0140.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0140.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0140.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0140.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68330 [0140.989] wcscpy (in: _Dest=0x3e68330, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" [0140.989] wcscat (in: _Dest=0x3e68330, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url.f0dbec" [0140.989] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url.f0dbec", NtPathName=0x8f5f760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0140.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f355b0 [0141.739] FlushFileBuffers (hFile=0xd24) returned 1 [0141.846] CloseHandle (hObject=0xd24) returned 1 [0141.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3db0188 [0141.850] wcscpy (in: _Dest=0x3db0188, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.850] wcscat (in: _Dest=0x3db0188, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" [0141.850] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\f0dbec-readme.txt")) returned 0xffffffff [0141.876] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd24 [0141.878] WriteFile (in: hFile=0xd24, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8f5f784, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8f5f784*=0x70c, lpOverlapped=0x0) returned 1 [0141.880] CloseHandle (hObject=0xd24) returned 1 [0141.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0188) returned 1 [0141.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd478) returned 1 Thread: id = 650 os_tid = 0x1134 [0135.444] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msnbc news.url")) returned 0x20 [0139.126] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url", dwFileAttributes=0x20) returned 1 [0140.620] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc88 [0140.621] GetFileSizeEx (in: hFile=0xc88, lpFileSize=0xd43ff30 | out: lpFileSize=0xd43ff30*=133) returned 1 [0140.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0140.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0140.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0140.621] NtQuerySystemTime (in: CurrentTime=0xd43feb8 | out: CurrentTime=0xd43feb8*=132471540092796000) returned 0x0 [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x25d1a1be [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x62a72437 [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x148aaf90 [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x6415c011 [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x131a1056 [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x14827e77 [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x32c5ea00 [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x774b882d [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x12b9e13c [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x34fb709a [0140.621] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x15e851cb [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x1f9fee27 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x444c5c7d [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x3341141b [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x19586ba8 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0xd2e8feb [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x533821d3 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x4a13f177 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x8858d64 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x58df9d64 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x70e32220 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x358227c1 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x693dca78 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x421d5ec7 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x2e41bba9 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x6a8bfd8a [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0xeab49ac [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x7e4a17d2 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x6cd721e8 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x5e5d76a9 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x757fa762 [0140.622] RtlRandomEx (in: Seed=0xd43feb0 | out: Seed=0xd43feb0) returned 0x32a17ef0 [0140.633] ReadFile (in: hFile=0xc88, lpBuffer=0x825b080, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xd43feac, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesRead=0xd43feac*=0x85, lpOverlapped=0x0) returned 1 [0140.636] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.636] WriteFile (in: hFile=0xc88, lpBuffer=0x825ec88*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xd43feb0, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesWritten=0xd43feb0*=0x85, lpOverlapped=0x0) returned 1 [0141.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca120 [0141.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f18 [0141.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f18) returned 1 [0141.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0141.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0141.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33150) returned 1 [0141.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a080) returned 1 [0141.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77e18 [0141.005] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.005] WriteFile (in: hFile=0xc88, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xd43ff24, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xd43ff24*=0x10e, lpOverlapped=0x0) returned 1 [0141.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0141.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e50) returned 1 [0141.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f18) returned 1 [0141.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0141.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca120) returned 1 [0141.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0141.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5a0) returned 1 [0141.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0141.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8054518 [0141.735] wcscpy (in: _Dest=0x8054518, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" [0141.735] wcscat (in: _Dest=0x8054518, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url.f0dbec" [0141.735] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url.f0dbec", NtPathName=0xd43fea8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3ef8d98 [0141.951] FlushFileBuffers (hFile=0xc88) returned 1 [0141.962] CloseHandle (hObject=0xc88) returned 1 [0141.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3daf408 [0141.963] wcscpy (in: _Dest=0x3daf408, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.963] wcscat (in: _Dest=0x3daf408, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" [0141.963] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\f0dbec-readme.txt")) returned 0x20 [0141.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf408) returned 1 [0141.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 Thread: id = 651 os_tid = 0x1138 [0135.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6ed80 [0135.444] wcscpy (in: _Dest=0x3e6ed80, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0135.444] wcscat (in: _Dest=0x3e6ed80, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0135.445] wcscat (in: _Dest=0x3e6ed80, _Source="*" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\*") returned="C:\\Users\\Public\\Music\\Sample Music\\*" [0135.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0135.445] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0137.179] wcscmp (_String1=".", _String2=".") returned 0 [0137.179] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.179] wcscmp (_String1="..", _String2=".") returned 1 [0137.179] wcscmp (_String1="..", _String2="..") returned 0 [0137.179] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0137.179] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0137.179] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0137.179] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d54062, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0137.179] wcscmp (_String1="Kalimba.mp3", _String2=".") returned 1 [0137.180] wcscmp (_String1="Kalimba.mp3", _String2="..") returned 1 [0137.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d440 [0137.180] wcscpy (in: _Dest=0x3d8d440, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0137.180] wcscat (in: _Dest=0x3d8d440, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0137.180] wcscat (in: _Dest=0x3d8d440, _Source="Kalimba.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" [0139.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68 [0139.597] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d2df02, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d54062, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0139.597] wcscmp (_String1="Maid with the Flaxen Hair.mp3", _String2=".") returned 1 [0139.597] wcscmp (_String1="Maid with the Flaxen Hair.mp3", _String2="..") returned 1 [0139.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354fc0 [0139.597] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0139.597] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0139.597] wcscat (in: _Dest=0x354fc0, _Source="Maid with the Flaxen Hair.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" [0139.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0139.599] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d2df02, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0139.599] wcscmp (_String1="Sleep Away.mp3", _String2=".") returned 1 [0139.599] wcscmp (_String1="Sleep Away.mp3", _String2="..") returned 1 [0139.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a1f8 [0139.599] wcscpy (in: _Dest=0x3f3a1f8, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0139.599] wcscat (in: _Dest=0x3f3a1f8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0139.599] wcscat (in: _Dest=0x3f3a1f8, _Source="Sleep Away.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" [0139.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0139.600] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d2df02, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0 [0139.600] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0139.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0139.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ed80) returned 1 [0139.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de64c8) returned 1 Thread: id = 652 os_tid = 0x113c [0135.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe70e8 [0135.447] wcscpy (in: _Dest=0x2fe70e8, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0135.447] wcscat (in: _Dest=0x2fe70e8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0135.447] wcscat (in: _Dest=0x2fe70e8, _Source="*" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\*") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\*" [0135.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048718 [0135.448] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0138.708] wcscmp (_String1=".", _String2=".") returned 0 [0138.708] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.709] wcscmp (_String1="..", _String2=".") returned 1 [0138.709] wcscmp (_String1="..", _String2="..") returned 0 [0138.709] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0138.709] wcscmp (_String1="Chrysanthemum.jpg", _String2=".") returned 1 [0138.709] wcscmp (_String1="Chrysanthemum.jpg", _String2="..") returned 1 [0138.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24440 [0138.709] wcscpy (in: _Dest=0x3e24440, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0138.709] wcscat (in: _Dest=0x3e24440, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0138.709] wcscat (in: _Dest=0x3e24440, _Source="Chrysanthemum.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" [0139.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0139.634] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0139.634] wcscmp (_String1="Desert.jpg", _String2=".") returned 1 [0139.634] wcscmp (_String1="Desert.jpg", _String2="..") returned 1 [0139.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33748 [0139.634] wcscpy (in: _Dest=0x3f33748, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0139.634] wcscat (in: _Dest=0x3f33748, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.634] wcscat (in: _Dest=0x3f33748, _Source="Desert.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" [0139.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc [0139.635] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0139.635] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0139.635] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0139.635] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0139.635] wcscmp (_String1="Hydrangeas.jpg", _String2=".") returned 1 [0139.635] wcscmp (_String1="Hydrangeas.jpg", _String2="..") returned 1 [0139.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32868 [0139.636] wcscpy (in: _Dest=0x3f32868, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0139.636] wcscat (in: _Dest=0x3f32868, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.636] wcscat (in: _Dest=0x3f32868, _Source="Hydrangeas.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" [0139.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0139.637] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0139.637] wcscmp (_String1="Jellyfish.jpg", _String2=".") returned 1 [0139.637] wcscmp (_String1="Jellyfish.jpg", _String2="..") returned 1 [0139.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32f70 [0139.637] wcscpy (in: _Dest=0x3f32f70, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0139.637] wcscat (in: _Dest=0x3f32f70, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.637] wcscat (in: _Dest=0x3f32f70, _Source="Jellyfish.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" [0139.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0139.638] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0139.638] wcscmp (_String1="Koala.jpg", _String2=".") returned 1 [0139.638] wcscmp (_String1="Koala.jpg", _String2="..") returned 1 [0139.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f336d8 [0139.639] wcscpy (in: _Dest=0x3f336d8, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0139.639] wcscat (in: _Dest=0x3f336d8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.639] wcscat (in: _Dest=0x3f336d8, _Source="Koala.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" [0139.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f336d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0139.640] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0139.640] wcscmp (_String1="Lighthouse.jpg", _String2=".") returned 1 [0139.640] wcscmp (_String1="Lighthouse.jpg", _String2="..") returned 1 [0139.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f329d0 [0139.640] wcscpy (in: _Dest=0x3f329d0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0139.640] wcscat (in: _Dest=0x3f329d0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.640] wcscat (in: _Dest=0x3f329d0, _Source="Lighthouse.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" [0139.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f329d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0139.641] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0139.641] wcscmp (_String1="Penguins.jpg", _String2=".") returned 1 [0139.641] wcscmp (_String1="Penguins.jpg", _String2="..") returned 1 [0139.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32ac0 [0139.641] wcscpy (in: _Dest=0x3f32ac0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0139.641] wcscat (in: _Dest=0x3f32ac0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.642] wcscat (in: _Dest=0x3f32ac0, _Source="Penguins.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" [0139.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0139.643] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0139.643] wcscmp (_String1="Tulips.jpg", _String2=".") returned 1 [0139.643] wcscmp (_String1="Tulips.jpg", _String2="..") returned 1 [0139.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f335f8 [0139.643] wcscpy (in: _Dest=0x3f335f8, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0139.643] wcscat (in: _Dest=0x3f335f8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.643] wcscat (in: _Dest=0x3f335f8, _Source="Tulips.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" [0139.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f335f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0139.644] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0139.644] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0139.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048718) returned 1 [0139.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe70e8) returned 1 [0139.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 653 os_tid = 0x1140 [0135.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2fd20 [0135.450] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0135.450] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0135.450] wcscat (in: _Dest=0x3f2fd20, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*" [0135.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80467d0 [0135.450] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55008 [0135.451] wcscmp (_String1=".", _String2=".") returned 0 [0135.451] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.451] wcscmp (_String1="..", _String2=".") returned 1 [0135.451] wcscmp (_String1="..", _String2="..") returned 0 [0135.451] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0135.451] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2=".") returned 1 [0135.451] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2="..") returned 1 [0135.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddfa68 [0135.451] wcscpy (in: _Dest=0x3ddfa68, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0135.451] wcscat (in: _Dest=0x3ddfa68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0135.451] wcscat (in: _Dest=0x3ddfa68, _Source="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" [0155.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ddfa68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c8 [0155.764] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0155.764] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2=".") returned 1 [0155.764] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2="..") returned 1 [0155.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x80207e0 [0155.764] wcscpy (in: _Dest=0x80207e0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0155.764] wcscat (in: _Dest=0x80207e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0155.764] wcscat (in: _Dest=0x80207e0, _Source="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" [0155.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80207e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27fc [0155.765] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0155.765] FindClose (in: hFindFile=0x3e55008 | out: hFindFile=0x3e55008) returned 1 [0155.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80467d0) returned 1 [0155.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 [0155.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d88) returned 1 Thread: id = 654 os_tid = 0x1144 [0135.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7d88 [0135.452] wcscpy (in: _Dest=0x2ff7d88, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0135.452] wcscat (in: _Dest=0x2ff7d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\" [0135.452] wcscat (in: _Dest=0x2ff7d88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*" [0135.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0135.452] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a08 [0135.452] wcscmp (_String1=".", _String2=".") returned 0 [0135.452] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.452] wcscmp (_String1="..", _String2=".") returned 1 [0135.452] wcscmp (_String1="..", _String2="..") returned 0 [0135.452] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.452] FindClose (in: hFindFile=0x3e54a08 | out: hFindFile=0x3e54a08) returned 1 [0135.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0135.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 [0135.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 Thread: id = 655 os_tid = 0x1148 [0135.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecd9c0 [0135.454] wcscpy (in: _Dest=0x3ecd9c0, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0135.455] wcscat (in: _Dest=0x3ecd9c0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0135.455] wcscat (in: _Dest=0x3ecd9c0, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\*" [0135.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0135.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a08 [0135.455] wcscmp (_String1=".", _String2=".") returned 0 [0135.455] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.455] wcscmp (_String1="..", _String2=".") returned 1 [0135.455] wcscmp (_String1="..", _String2="..") returned 0 [0135.455] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110", cAlternateFileName="580302~1.110")) returned 1 [0135.455] wcscmp (_String1="58.0.3029.110", _String2=".") returned 1 [0135.455] wcscmp (_String1="58.0.3029.110", _String2="..") returned 1 [0135.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e23dc0 [0135.455] wcscpy (in: _Dest=0x3e23dc0, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0135.455] wcscat (in: _Dest=0x3e23dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0135.455] wcscat (in: _Dest=0x3e23dc0, _Source="58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0139.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e23dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0139.562] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf8c1abb6, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0xee558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0139.562] wcscmp (_String1="chrome.exe", _String2=".") returned 1 [0139.562] wcscmp (_String1="chrome.exe", _String2="..") returned 1 [0139.562] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1 [0139.562] wcscmp (_String1="chrome.VisualElementsManifest.xml", _String2=".") returned 1 [0139.562] wcscmp (_String1="chrome.VisualElementsManifest.xml", _String2="..") returned 1 [0139.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d290 [0139.563] wcscpy (in: _Dest=0x3e2d290, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0139.563] wcscat (in: _Dest=0x3e2d290, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0139.563] wcscat (in: _Dest=0x3e2d290, _Source="chrome.VisualElementsManifest.xml" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml") returned="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" [0139.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0139.564] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1 [0139.564] wcscmp (_String1="SetupMetrics", _String2=".") returned 1 [0139.564] wcscmp (_String1="SetupMetrics", _String2="..") returned 1 [0139.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32700 [0139.564] wcscpy (in: _Dest=0x3f32700, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0139.564] wcscat (in: _Dest=0x3f32700, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0139.564] wcscat (in: _Dest=0x3f32700, _Source="SetupMetrics" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" [0139.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0139.565] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0 [0139.565] FindClose (in: hFindFile=0x3e54a08 | out: hFindFile=0x3e54a08) returned 1 [0139.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0139.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd9c0) returned 1 [0139.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 Thread: id = 656 os_tid = 0x114c [0135.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33668 [0135.456] wcscpy (in: _Dest=0x3f33668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0135.456] wcscat (in: _Dest=0x3f33668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0135.456] wcscat (in: _Dest=0x3f33668, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*" [0135.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048980 [0135.456] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0137.165] wcscmp (_String1=".", _String2=".") returned 0 [0137.165] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.006] wcscmp (_String1="..", _String2=".") returned 1 [0140.006] wcscmp (_String1="..", _String2="..") returned 0 [0140.006] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ac5500, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x5c2e3f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56ac5500, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x53b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSUI.DLL", cAlternateFileName="")) returned 1 [0140.006] wcscmp (_String1="ACCDDSUI.DLL", _String2=".") returned 1 [0140.006] wcscmp (_String1="ACCDDSUI.DLL", _String2="..") returned 1 [0140.006] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32755000, ftCreationTime.dwHighDateTime=0x1ca8d8b, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x32755000, ftLastWriteTime.dwHighDateTime=0x1ca8d8b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1 [0140.006] wcscmp (_String1="ACCESS12.ACC", _String2=".") returned 1 [0140.006] wcscmp (_String1="ACCESS12.ACC", _String2="..") returned 1 [0140.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053d20 [0140.007] wcscpy (in: _Dest=0x8053d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0140.007] wcscat (in: _Dest=0x8053d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0140.007] wcscat (in: _Dest=0x8053d20, _Source="ACCESS12.ACC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" [0143.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0143.898] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x5c51f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x33b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLKI.DLL", cAlternateFileName="")) returned 1 [0143.898] wcscmp (_String1="ACCOLKI.DLL", _String2=".") returned 1 [0143.898] wcscmp (_String1="ACCOLKI.DLL", _String2="..") returned 1 [0143.898] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ac5500, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x5c51f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56ac5500, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x26b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDTUI.DLL", cAlternateFileName="")) returned 1 [0143.898] wcscmp (_String1="ACCVDTUI.DLL", _String2=".") returned 1 [0143.898] wcscmp (_String1="ACCVDTUI.DLL", _String2="..") returned 1 [0143.898] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6ba100, ftCreationTime.dwHighDateTime=0x1c6affe, ftLastAccessTime.dwLowDateTime=0x5c545550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef6ba100, ftLastWriteTime.dwHighDateTime=0x1c6affe, nFileSizeHigh=0x0, nFileSizeLow=0x53de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIP10.HLP", cAlternateFileName="")) returned 1 [0143.898] wcscmp (_String1="ACTIP10.HLP", _String2=".") returned 1 [0143.898] wcscmp (_String1="ACTIP10.HLP", _String2="..") returned 1 [0143.898] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f13f00, ftCreationTime.dwHighDateTime=0x1ca67ab, ftLastAccessTime.dwLowDateTime=0x5c545550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf4f13f00, ftLastWriteTime.dwHighDateTime=0x1ca67ab, nFileSizeHigh=0x0, nFileSizeLow=0x43590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWIZRC.DLL", cAlternateFileName="")) returned 1 [0143.898] wcscmp (_String1="ACWIZRC.DLL", _String2=".") returned 1 [0143.898] wcscmp (_String1="ACWIZRC.DLL", _String2="..") returned 1 [0143.898] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xf778, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.VSL", cAlternateFileName="")) returned 1 [0143.898] wcscmp (_String1="AEC.VSL", _String2=".") returned 1 [0143.898] wcscmp (_String1="AEC.VSL", _String2="..") returned 1 [0143.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f330d8 [0143.898] wcscpy (in: _Dest=0x3f330d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.898] wcscat (in: _Dest=0x3f330d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.898] wcscat (in: _Dest=0x3f330d8, _Source="AEC.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" [0143.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f330d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0143.899] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.VSL", cAlternateFileName="")) returned 1 [0143.899] wcscmp (_String1="AECUTILS.VSL", _String2=".") returned 1 [0143.899] wcscmp (_String1="AECUTILS.VSL", _String2="..") returned 1 [0143.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30848 [0143.900] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.900] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.900] wcscat (in: _Dest=0x3f30848, _Source="AECUTILS.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" [0143.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0143.900] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e65900, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4551530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77e65900, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASSET.VRD", cAlternateFileName="")) returned 1 [0143.901] wcscmp (_String1="ASSET.VRD", _String2=".") returned 1 [0143.901] wcscmp (_String1="ASSET.VRD", _String2="..") returned 1 [0143.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e248c0 [0143.901] wcscpy (in: _Dest=0x3e248c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.901] wcscat (in: _Dest=0x3e248c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.901] wcscat (in: _Dest=0x3e248c0, _Source="ASSET.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" [0143.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e248c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0143.902] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586c3600, ftCreationTime.dwHighDateTime=0x1c2fece, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x586c3600, ftLastWriteTime.dwHighDateTime=0x1c2fece, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC.HTM", cAlternateFileName="")) returned 1 [0143.902] wcscmp (_String1="BASIC.HTM", _String2=".") returned 1 [0143.902] wcscmp (_String1="BASIC.HTM", _String2="..") returned 1 [0143.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5108 [0143.902] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.902] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.902] wcscat (in: _Dest=0x3dc5108, _Source="BASIC.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" [0143.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0143.903] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35902f00, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35902f00, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeRes.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1 [0143.903] wcscmp (_String1="BCSRuntimeRes.dll", _String2=".") returned 1 [0143.903] wcscmp (_String1="BCSRuntimeRes.dll", _String2="..") returned 1 [0143.903] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530ed300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x35232150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x530ed300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2778, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0143.903] wcscmp (_String1="BHOINTL.DLL", _String2=".") returned 1 [0143.903] wcscmp (_String1="BHOINTL.DLL", _String2="..") returned 1 [0143.903] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63d049b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63d049b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0143.903] wcscmp (_String1="Bibliography", _String2=".") returned 1 [0143.903] wcscmp (_String1="Bibliography", _String2="..") returned 1 [0143.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30628 [0143.903] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.904] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.904] wcscat (in: _Dest=0x3f30628, _Source="Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" [0143.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0143.905] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x9f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0143.905] wcscmp (_String1="BSTORM.VSL", _String2=".") returned 1 [0143.905] wcscmp (_String1="BSTORM.VSL", _String2="..") returned 1 [0143.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3e88 [0143.905] wcscpy (in: _Dest=0x3dc3e88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.905] wcscat (in: _Dest=0x3dc3e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.905] wcscat (in: _Dest=0x3dc3e88, _Source="BSTORM.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" [0143.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0143.906] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0143.906] wcscmp (_String1="BW.CSS", _String2=".") returned 1 [0143.906] wcscmp (_String1="BW.CSS", _String2="..") returned 1 [0143.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f331c8 [0143.906] wcscpy (in: _Dest=0x3f331c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.906] wcscat (in: _Dest=0x3f331c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.906] wcscat (in: _Dest=0x3f331c8, _Source="BW.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" [0143.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f331c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0143.907] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803e9400, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x803e9400, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0143.907] wcscmp (_String1="CALEVENT.VRD", _String2=".") returned 1 [0143.907] wcscmp (_String1="CALEVENT.VRD", _String2="..") returned 1 [0143.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30738 [0143.907] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.907] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.907] wcscat (in: _Dest=0x3f30738, _Source="CALEVENT.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" [0143.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0143.908] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b7e900, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x58b7e900, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x2f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0143.908] wcscmp (_String1="CERTINTL.DLL", _String2=".") returned 1 [0143.908] wcscmp (_String1="CERTINTL.DLL", _String2="..") returned 1 [0143.908] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb07a5100, ftCreationTime.dwHighDateTime=0x1cab90d, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb07a5100, ftLastWriteTime.dwHighDateTime=0x1cab90d, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0143.908] wcscmp (_String1="CLVWINTL.DLL", _String2=".") returned 1 [0143.908] wcscmp (_String1="CLVWINTL.DLL", _String2="..") returned 1 [0143.908] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x8990, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAXRES.DLL", cAlternateFileName="")) returned 1 [0143.908] wcscmp (_String1="CMAXRES.DLL", _String2=".") returned 1 [0143.908] wcscmp (_String1="CMAXRES.DLL", _String2="..") returned 1 [0143.908] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0143.909] wcscmp (_String1="COFFEE.CSS", _String2=".") returned 1 [0143.909] wcscmp (_String1="COFFEE.CSS", _String2="..") returned 1 [0143.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4588 [0143.909] wcscpy (in: _Dest=0x3dc4588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.909] wcscat (in: _Dest=0x3dc4588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.909] wcscat (in: _Dest=0x3dc4588, _Source="COFFEE.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" [0143.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0143.911] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f12600, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7f12600, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="COLLEC~1.XSN")) returned 1 [0143.911] wcscmp (_String1="CollectSignatures_Init.xsn", _String2=".") returned 1 [0143.911] wcscmp (_String1="CollectSignatures_Init.xsn", _String2="..") returned 1 [0143.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e10a68 [0143.911] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.911] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.911] wcscat (in: _Dest=0x3e10a68, _Source="CollectSignatures_Init.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" [0143.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0143.912] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x36fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="COLLEC~2.XSN")) returned 1 [0143.912] wcscmp (_String1="CollectSignatures_Sign.xsn", _String2=".") returned 1 [0143.912] wcscmp (_String1="CollectSignatures_Sign.xsn", _String2="..") returned 1 [0143.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11a08 [0143.912] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.912] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.913] wcscat (in: _Dest=0x3e11a08, _Source="CollectSignatures_Sign.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" [0143.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0143.914] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d64600, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46d64600, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPickerIntl.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1 [0143.914] wcscmp (_String1="ContactPickerIntl.dll", _String2=".") returned 1 [0143.914] wcscmp (_String1="ContactPickerIntl.dll", _String2="..") returned 1 [0143.914] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c56200, ftCreationTime.dwHighDateTime=0x1ca7b1a, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8c56200, ftLastWriteTime.dwHighDateTime=0x1ca7b1a, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0143.914] wcscmp (_String1="CT_ROOTS.XML", _String2=".") returned 1 [0143.914] wcscmp (_String1="CT_ROOTS.XML", _String2="..") returned 1 [0143.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f302f8 [0143.914] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.914] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.914] wcscat (in: _Dest=0x3f302f8, _Source="CT_ROOTS.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" [0143.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0143.915] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a4570, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="DATASE~1")) returned 1 [0143.915] wcscmp (_String1="DataServices", _String2=".") returned 1 [0143.915] wcscmp (_String1="DataServices", _String2="..") returned 1 [0143.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2f5b0 [0143.915] wcscpy (in: _Dest=0x3f2f5b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.915] wcscat (in: _Dest=0x3f2f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.915] wcscat (in: _Dest=0x3f2f5b0, _Source="DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0143.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f2f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0143.916] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa49edfd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xbd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.VSL", cAlternateFileName="")) returned 1 [0143.916] wcscmp (_String1="DBENGR.VSL", _String2=".") returned 1 [0143.916] wcscmp (_String1="DBENGR.VSL", _String2="..") returned 1 [0143.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5608 [0143.916] wcscpy (in: _Dest=0x3dc5608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.917] wcscat (in: _Dest=0x3dc5608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.917] wcscat (in: _Dest=0x3dc5608, _Source="DBENGR.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" [0143.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0143.917] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1eea00, ftCreationTime.dwHighDateTime=0x1c321da, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe1eea00, ftLastWriteTime.dwHighDateTime=0x1c321da, nFileSizeHigh=0x0, nFileSizeLow=0x76000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1 [0143.918] wcscmp (_String1="DBSAMPLE.MDB", _String2=".") returned 1 [0143.918] wcscmp (_String1="DBSAMPLE.MDB", _String2="..") returned 1 [0143.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2f4a0 [0143.918] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.918] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.918] wcscat (in: _Dest=0x3f2f4a0, _Source="DBSAMPLE.MDB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" [0143.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0143.919] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x26978, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0143.919] wcscmp (_String1="DBWIZ.VSL", _String2=".") returned 1 [0143.919] wcscmp (_String1="DBWIZ.VSL", _String2="..") returned 1 [0143.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3e08 [0143.919] wcscpy (in: _Dest=0x3dc3e08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.919] wcscat (in: _Dest=0x3dc3e08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.919] wcscat (in: _Dest=0x3dc3e08, _Source="DBWIZ.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" [0143.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0143.920] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0143.920] wcscmp (_String1="DEFAULT.CSS", _String2=".") returned 1 [0143.920] wcscmp (_String1="DEFAULT.CSS", _String2="..") returned 1 [0143.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0088 [0143.921] wcscpy (in: _Dest=0x3db0088, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.921] wcscat (in: _Dest=0x3db0088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.921] wcscat (in: _Dest=0x3db0088, _Source="DEFAULT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" [0143.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db0088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0143.922] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2cf800, ftCreationTime.dwHighDateTime=0x1c91404, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc2cf800, ftLastWriteTime.dwHighDateTime=0x1c91404, nFileSizeHigh=0x0, nFileSizeLow=0x19984, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.gta", cAlternateFileName="DISCUS~1.GTA")) returned 1 [0143.922] wcscmp (_String1="Discussion.gta", _String2=".") returned 1 [0143.922] wcscmp (_String1="Discussion.gta", _String2="..") returned 1 [0143.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30b78 [0143.922] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.923] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.923] wcscat (in: _Dest=0x3f30b78, _Source="Discussion.gta" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" [0143.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710 [0143.923] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae60e00, ftCreationTime.dwHighDateTime=0x1ca9a33, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdae60e00, ftLastWriteTime.dwHighDateTime=0x1ca9a33, nFileSizeHigh=0x0, nFileSizeLow=0x587c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion14.gta", cAlternateFileName="DISCUS~2.GTA")) returned 1 [0143.923] wcscmp (_String1="Discussion14.gta", _String2=".") returned 1 [0143.924] wcscmp (_String1="Discussion14.gta", _String2="..") returned 1 [0143.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35370 [0143.924] wcscpy (in: _Dest=0x3f35370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.924] wcscat (in: _Dest=0x3f35370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.924] wcscat (in: _Dest=0x3f35370, _Source="Discussion14.gta" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" [0143.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0143.936] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0143.936] wcscmp (_String1="DL_RES.DLL", _String2=".") returned 1 [0143.936] wcscmp (_String1="DL_RES.DLL", _String2="..") returned 1 [0143.936] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86347500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x86347500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0143.944] wcscmp (_String1="DOORSCHD.VRD", _String2=".") returned 1 [0143.944] wcscmp (_String1="DOORSCHD.VRD", _String2="..") returned 1 [0143.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30958 [0143.945] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0143.945] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0143.945] wcscat (in: _Dest=0x3f30958, _Source="DOORSCHD.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" [0159.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd")) returned 0x20 [0159.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD", dwFileAttributes=0x20) returned 0 [0159.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.556] GetLastError () returned 0x5 [0159.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD", dwFileAttributes=0x20) returned 0 [0159.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0159.556] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4af8970, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xe568, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0159.557] wcscmp (_String1="DRILLDWN.VSL", _String2=".") returned 1 [0159.557] wcscmp (_String1="DRILLDWN.VSL", _String2="..") returned 1 [0159.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30958 [0159.557] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.557] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.557] wcscat (in: _Dest=0x3f30958, _Source="DRILLDWN.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" [0159.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl")) returned 0x20 [0159.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL", dwFileAttributes=0x20) returned 0 [0159.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.565] GetLastError () returned 0x5 [0159.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL", dwFileAttributes=0x20) returned 0 [0159.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0159.565] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252c8d00, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x252c8d00, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x8360, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0159.565] wcscmp (_String1="DWGCNV.VSL", _String2=".") returned 1 [0159.565] wcscmp (_String1="DWGCNV.VSL", _String2="..") returned 1 [0159.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3db0a88 [0159.565] wcscpy (in: _Dest=0x3db0a88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.565] wcscat (in: _Dest=0x3db0a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.565] wcscat (in: _Dest=0x3db0a88, _Source="DWGCNV.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" [0159.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl")) returned 0x20 [0159.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL", dwFileAttributes=0x20) returned 0 [0159.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.585] GetLastError () returned 0x5 [0159.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL", dwFileAttributes=0x20) returned 0 [0159.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0a88) returned 1 [0159.585] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0159.586] wcscmp (_String1="DWGDPRES.DLL", _String2=".") returned 1 [0159.586] wcscmp (_String1="DWGDPRES.DLL", _String2="..") returned 1 [0159.586] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x388e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="EADOCU~1.XSN")) returned 1 [0159.586] wcscmp (_String1="EADOCUMENTAPPROVAL_INIT.XSN", _String2=".") returned 1 [0159.586] wcscmp (_String1="EADOCUMENTAPPROVAL_INIT.XSN", _String2="..") returned 1 [0159.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bb78 [0159.586] wcscpy (in: _Dest=0x819bb78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.586] wcscat (in: _Dest=0x819bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.586] wcscat (in: _Dest=0x819bb78, _Source="EADOCUMENTAPPROVAL_INIT.XSN" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" [0159.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn")) returned 0x20 [0159.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN", dwFileAttributes=0x20) returned 0 [0159.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.601] GetLastError () returned 0x5 [0159.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN", dwFileAttributes=0x20) returned 0 [0159.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bb78) returned 1 [0159.601] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f12600, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7f12600, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="EADOCU~2.XSN")) returned 1 [0159.602] wcscmp (_String1="EADOCUMENTAPPROVAL_REVIEW.XSN", _String2=".") returned 1 [0159.602] wcscmp (_String1="EADOCUMENTAPPROVAL_REVIEW.XSN", _String2="..") returned 1 [0159.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187808 [0159.602] wcscpy (in: _Dest=0x8187808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.602] wcscat (in: _Dest=0x8187808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.602] wcscat (in: _Dest=0x8187808, _Source="EADOCUMENTAPPROVAL_REVIEW.XSN" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" [0159.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn")) returned 0x20 [0159.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN", dwFileAttributes=0x20) returned 0 [0159.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.603] GetLastError () returned 0x5 [0159.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN", dwFileAttributes=0x20) returned 0 [0159.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187808) returned 1 [0159.604] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1a4300, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b1a4300, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0xc990, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0159.604] wcscmp (_String1="EAWFINTL.DLL", _String2=".") returned 1 [0159.604] wcscmp (_String1="EAWFINTL.DLL", _String2="..") returned 1 [0159.604] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITRES.DLL", cAlternateFileName="")) returned 1 [0159.604] wcscmp (_String1="EDITRES.DLL", _String2=".") returned 1 [0159.604] wcscmp (_String1="EDITRES.DLL", _String2="..") returned 1 [0159.604] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345f0200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x345f0200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0159.604] wcscmp (_String1="EntityPickerIntl.dll", _String2=".") returned 1 [0159.604] wcscmp (_String1="EntityPickerIntl.dll", _String2="..") returned 1 [0159.604] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x4388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0159.604] wcscmp (_String1="ENVELOPR.DLL", _String2=".") returned 1 [0159.604] wcscmp (_String1="ENVELOPR.DLL", _String2="..") returned 1 [0159.604] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.IDX_DLL", cAlternateFileName="ENVELO~1.IDX")) returned 1 [0159.604] wcscmp (_String1="ENVELOPR.DLL.IDX_DLL", _String2=".") returned 1 [0159.604] wcscmp (_String1="ENVELOPR.DLL.IDX_DLL", _String2="..") returned 1 [0159.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c540 [0159.604] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.605] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.605] wcscat (in: _Dest=0x3e3c540, _Source="ENVELOPR.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" [0159.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll")) returned 0x20 [0159.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0159.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.630] GetLastError () returned 0x5 [0159.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0159.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.630] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f167600, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f167600, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0159.630] wcscmp (_String1="EQPLIST.VRD", _String2=".") returned 1 [0159.630] wcscmp (_String1="EQPLIST.VRD", _String2="..") returned 1 [0159.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0a88 [0159.630] wcscpy (in: _Dest=0x3db0a88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.630] wcscat (in: _Dest=0x3db0a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.630] wcscat (in: _Dest=0x3db0a88, _Source="EQPLIST.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" [0159.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd")) returned 0x20 [0159.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD", dwFileAttributes=0x20) returned 0 [0159.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.672] GetLastError () returned 0x5 [0159.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD", dwFileAttributes=0x20) returned 0 [0159.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0a88) returned 1 [0159.673] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f4e5900, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f4e5900, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x6b2dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV.HXS", cAlternateFileName="EXCELD~1.HXS")) returned 1 [0159.673] wcscmp (_String1="EXCEL.DEV.HXS", _String2=".") returned 1 [0159.673] wcscmp (_String1="EXCEL.DEV.HXS", _String2="..") returned 1 [0159.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30958 [0159.673] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.673] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.673] wcscat (in: _Dest=0x3f30958, _Source="EXCEL.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" [0159.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs")) returned 0x20 [0159.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS", dwFileAttributes=0x20) returned 0 [0159.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.674] GetLastError () returned 0x5 [0159.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS", dwFileAttributes=0x20) returned 0 [0159.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0159.674] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXC", cAlternateFileName="EXCELD~1.HXC")) returned 1 [0159.674] wcscmp (_String1="EXCEL.DEV_COL.HXC", _String2=".") returned 1 [0159.674] wcscmp (_String1="EXCEL.DEV_COL.HXC", _String2="..") returned 1 [0159.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35250 [0159.674] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.674] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.674] wcscat (in: _Dest=0x3f35250, _Source="EXCEL.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" [0159.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc")) returned 0x20 [0159.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0159.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.722] GetLastError () returned 0x5 [0159.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0159.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.723] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ae9500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1ae9500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXT", cAlternateFileName="EXCELD~1.HXT")) returned 1 [0159.723] wcscmp (_String1="EXCEL.DEV_COL.HXT", _String2=".") returned 1 [0159.723] wcscmp (_String1="EXCEL.DEV_COL.HXT", _String2="..") returned 1 [0159.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35250 [0159.723] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.723] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.723] wcscat (in: _Dest=0x3f35250, _Source="EXCEL.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" [0159.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt")) returned 0x20 [0159.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0159.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.724] GetLastError () returned 0x5 [0159.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0159.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.724] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ae9500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1ae9500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_F_COL.HXK", cAlternateFileName="EXCELD~1.HXK")) returned 1 [0159.724] wcscmp (_String1="EXCEL.DEV_F_COL.HXK", _String2=".") returned 1 [0159.724] wcscmp (_String1="EXCEL.DEV_F_COL.HXK", _String2="..") returned 1 [0159.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35250 [0159.724] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.724] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.724] wcscat (in: _Dest=0x3f35250, _Source="EXCEL.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" [0159.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk")) returned 0x20 [0159.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0159.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.725] GetLastError () returned 0x5 [0159.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0159.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.725] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ae9500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1ae9500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_K_COL.HXK", cAlternateFileName="EXCELD~2.HXK")) returned 1 [0159.725] wcscmp (_String1="EXCEL.DEV_K_COL.HXK", _String2=".") returned 1 [0159.725] wcscmp (_String1="EXCEL.DEV_K_COL.HXK", _String2="..") returned 1 [0159.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35250 [0159.726] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.726] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.726] wcscat (in: _Dest=0x3f35250, _Source="EXCEL.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" [0159.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk")) returned 0x20 [0159.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0159.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.727] GetLastError () returned 0x5 [0159.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0159.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.727] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x742e7800, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x742e7800, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x7770e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0159.727] wcscmp (_String1="EXCEL.HXS", _String2=".") returned 1 [0159.727] wcscmp (_String1="EXCEL.HXS", _String2="..") returned 1 [0159.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3db0a88 [0159.727] wcscpy (in: _Dest=0x3db0a88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.727] wcscat (in: _Dest=0x3db0a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.727] wcscat (in: _Dest=0x3db0a88, _Source="EXCEL.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" [0159.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs")) returned 0x20 [0159.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS", dwFileAttributes=0x20) returned 0 [0159.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.728] GetLastError () returned 0x5 [0159.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS", dwFileAttributes=0x20) returned 0 [0159.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0a88) returned 1 [0159.728] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="EXCEL_~1.HXC")) returned 1 [0159.728] wcscmp (_String1="EXCEL_COL.HXC", _String2=".") returned 1 [0159.728] wcscmp (_String1="EXCEL_COL.HXC", _String2="..") returned 1 [0159.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30958 [0159.728] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.729] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.729] wcscat (in: _Dest=0x3f30958, _Source="EXCEL_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" [0159.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc")) returned 0x20 [0159.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC", dwFileAttributes=0x20) returned 0 [0159.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.729] GetLastError () returned 0x5 [0159.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC", dwFileAttributes=0x20) returned 0 [0159.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0159.730] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace9e100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace9e100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="EXCEL_~1.HXT")) returned 1 [0159.730] wcscmp (_String1="EXCEL_COL.HXT", _String2=".") returned 1 [0159.730] wcscmp (_String1="EXCEL_COL.HXT", _String2="..") returned 1 [0159.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30958 [0159.730] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.730] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.730] wcscat (in: _Dest=0x3f30958, _Source="EXCEL_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" [0159.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt")) returned 0x20 [0159.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT", dwFileAttributes=0x20) returned 0 [0159.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.731] GetLastError () returned 0x5 [0159.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT", dwFileAttributes=0x20) returned 0 [0159.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0159.731] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace9e100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace9e100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="EXCEL_~1.HXK")) returned 1 [0159.731] wcscmp (_String1="EXCEL_F_COL.HXK", _String2=".") returned 1 [0159.731] wcscmp (_String1="EXCEL_F_COL.HXK", _String2="..") returned 1 [0159.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30958 [0159.731] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.731] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.731] wcscat (in: _Dest=0x3f30958, _Source="EXCEL_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" [0159.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk")) returned 0x20 [0159.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0159.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.732] GetLastError () returned 0x5 [0159.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0159.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0159.732] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace9e100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace9e100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="EXCEL_~2.HXK")) returned 1 [0159.732] wcscmp (_String1="EXCEL_K_COL.HXK", _String2=".") returned 1 [0159.732] wcscmp (_String1="EXCEL_K_COL.HXK", _String2="..") returned 1 [0159.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30958 [0159.732] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.732] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.732] wcscat (in: _Dest=0x3f30958, _Source="EXCEL_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" [0159.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk")) returned 0x20 [0159.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0159.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.733] GetLastError () returned 0x5 [0159.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0159.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0159.734] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x352f0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0159.734] wcscmp (_String1="EXPTOOWS.DLL", _String2=".") returned 1 [0159.734] wcscmp (_String1="EXPTOOWS.DLL", _String2="..") returned 1 [0159.734] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735c500, ftCreationTime.dwHighDateTime=0x1cac800, ftLastAccessTime.dwLowDateTime=0x352f0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x735c500, ftLastWriteTime.dwHighDateTime=0x1cac800, nFileSizeHigh=0x0, nFileSizeLow=0x18a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0159.734] wcscmp (_String1="EXPTOOWS.XLA", _String2=".") returned 1 [0159.734] wcscmp (_String1="EXPTOOWS.XLA", _String2="..") returned 1 [0159.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30958 [0159.734] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.734] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.734] wcscat (in: _Dest=0x3f30958, _Source="EXPTOOWS.XLA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" [0159.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla")) returned 0x20 [0159.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA", dwFileAttributes=0x20) returned 0 [0159.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.746] GetLastError () returned 0x5 [0159.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA", dwFileAttributes=0x20) returned 0 [0159.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0159.746] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x12f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0159.746] wcscmp (_String1="FACILITY.VSL", _String2=".") returned 1 [0159.746] wcscmp (_String1="FACILITY.VSL", _String2="..") returned 1 [0159.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30958 [0159.746] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0159.746] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0159.746] wcscat (in: _Dest=0x3f30958, _Source="FACILITY.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" [0159.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl")) returned 0x20 [0162.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL", dwFileAttributes=0x20) returned 0 [0162.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.241] GetLastError () returned 0x5 [0162.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL", dwFileAttributes=0x20) returned 0 [0162.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 [0162.242] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1868e500, ftCreationTime.dwHighDateTime=0x1c9384b, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1868e500, ftLastWriteTime.dwHighDateTime=0x1c9384b, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0162.242] wcscmp (_String1="FLOCH.VRD", _String2=".") returned 1 [0162.242] wcscmp (_String1="FLOCH.VRD", _String2="..") returned 1 [0162.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b6d8 [0162.242] wcscpy (in: _Dest=0x831b6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0162.242] wcscat (in: _Dest=0x831b6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0162.242] wcscat (in: _Dest=0x831b6d8, _Source="FLOCH.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" [0165.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c [0165.280] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0165.280] wcscmp (_String1="FOREST.CSS", _String2=".") returned 1 [0165.280] wcscmp (_String1="FOREST.CSS", _String2="..") returned 1 [0165.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3db0088 [0165.280] wcscpy (in: _Dest=0x3db0088, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0165.280] wcscat (in: _Dest=0x3db0088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0165.280] wcscat (in: _Dest=0x3db0088, _Source="FOREST.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" [0165.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db0088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0165.281] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0165.282] wcscmp (_String1="GANTT.CSS", _String2=".") returned 1 [0165.282] wcscmp (_String1="GANTT.CSS", _String2="..") returned 1 [0165.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3db0f88 [0165.296] wcscpy (in: _Dest=0x3db0f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0165.296] wcscat (in: _Dest=0x3db0f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0165.296] wcscat (in: _Dest=0x3db0f88, _Source="GANTT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" [0165.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db0f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0165.298] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef0a00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90ef0a00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0165.298] wcscmp (_String1="GANTT.VRD", _String2=".") returned 1 [0165.298] wcscmp (_String1="GANTT.VRD", _String2="..") returned 1 [0165.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3db0a88 [0165.298] wcscpy (in: _Dest=0x3db0a88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0165.298] wcscat (in: _Dest=0x3db0a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0165.298] wcscat (in: _Dest=0x3db0a88, _Source="GANTT.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" [0165.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db0a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0165.299] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x4cd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0165.299] wcscmp (_String1="GANTT.VSL", _String2=".") returned 1 [0165.299] wcscmp (_String1="GANTT.VSL", _String2="..") returned 1 [0165.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3db0108 [0165.299] wcscpy (in: _Dest=0x3db0108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0165.299] wcscat (in: _Dest=0x3db0108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0165.300] wcscat (in: _Dest=0x3db0108, _Source="GANTT.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" [0165.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0165.301] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b1000, ftCreationTime.dwHighDateTime=0x1bbd42b, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0b1000, ftLastWriteTime.dwHighDateTime=0x1bbd42b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0165.301] wcscmp (_String1="GR8GALRY.GRA", _String2=".") returned 1 [0165.301] wcscmp (_String1="GR8GALRY.GRA", _String2="..") returned 1 [0165.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ed60 [0165.301] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0165.301] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0165.301] wcscat (in: _Dest=0x3e1ed60, _Source="GR8GALRY.GRA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" [0165.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0165.303] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf64a0c00, ftCreationTime.dwHighDateTime=0x1c6e65e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf64a0c00, ftLastWriteTime.dwHighDateTime=0x1c6e65e, nFileSizeHigh=0x0, nFileSizeLow=0x94f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0165.385] wcscmp (_String1="GRAPH.HXS", _String2=".") returned 1 [0165.385] wcscmp (_String1="GRAPH.HXS", _String2="..") returned 1 [0165.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3daf208 [0165.385] wcscpy (in: _Dest=0x3daf208, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0165.385] wcscat (in: _Dest=0x3daf208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0165.385] wcscat (in: _Dest=0x3daf208, _Source="GRAPH.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" [0165.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3daf208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0165.386] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="GRAPH_~1.HXC")) returned 1 [0165.386] wcscmp (_String1="GRAPH_COL.HXC", _String2=".") returned 1 [0165.386] wcscmp (_String1="GRAPH_COL.HXC", _String2="..") returned 1 [0165.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1fc40 [0165.386] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0165.386] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0165.386] wcscat (in: _Dest=0x3e1fc40, _Source="GRAPH_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" [0165.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e4 [0165.387] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc692a00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc692a00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="GRAPH_~1.HXT")) returned 1 [0165.389] wcscmp (_String1="GRAPH_COL.HXT", _String2=".") returned 1 [0165.389] wcscmp (_String1="GRAPH_COL.HXT", _String2="..") returned 1 [0165.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f4d0 [0165.389] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0165.389] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0165.389] wcscat (in: _Dest=0x3e1f4d0, _Source="GRAPH_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" [0170.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0170.144] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc692a00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc692a00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="GRAPH_~1.HXK")) returned 1 [0170.144] wcscmp (_String1="GRAPH_F_COL.HXK", _String2=".") returned 1 [0170.144] wcscmp (_String1="GRAPH_F_COL.HXK", _String2="..") returned 1 [0170.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf800 [0170.145] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.145] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.145] wcscat (in: _Dest=0x81bf800, _Source="GRAPH_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" [0170.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2abc [0170.146] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc692a00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc692a00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="GRAPH_~2.HXK")) returned 1 [0170.146] wcscmp (_String1="GRAPH_K_COL.HXK", _String2=".") returned 1 [0170.146] wcscmp (_String1="GRAPH_K_COL.HXK", _String2="..") returned 1 [0170.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf910 [0170.146] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.146] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.146] wcscat (in: _Dest=0x81bf910, _Source="GRAPH_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" [0170.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26ec [0170.147] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba7a700, ftCreationTime.dwHighDateTime=0x1cac246, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba7a700, ftLastWriteTime.dwHighDateTime=0x1cac246, nFileSizeHigh=0x0, nFileSizeLow=0x2cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0170.147] wcscmp (_String1="GRINTL32.DLL", _String2=".") returned 1 [0170.147] wcscmp (_String1="GRINTL32.DLL", _String2="..") returned 1 [0170.147] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42585700, ftCreationTime.dwHighDateTime=0x1cac248, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42585700, ftLastWriteTime.dwHighDateTime=0x1cac248, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.IDX_DLL", cAlternateFileName="GRINTL~1.IDX")) returned 1 [0170.147] wcscmp (_String1="GRINTL32.DLL.IDX_DLL", _String2=".") returned 1 [0170.147] wcscmp (_String1="GRINTL32.DLL.IDX_DLL", _String2="..") returned 1 [0170.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3bf50 [0170.147] wcscpy (in: _Dest=0x3e3bf50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.148] wcscat (in: _Dest=0x3e3bf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.148] wcscat (in: _Dest=0x3e3bf50, _Source="GRINTL32.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" [0170.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3bf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28dc [0170.148] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42585700, ftCreationTime.dwHighDateTime=0x1cac248, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42585700, ftLastWriteTime.dwHighDateTime=0x1cac248, nFileSizeHigh=0x0, nFileSizeLow=0x18780, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.IDX_DLL", cAlternateFileName="GRINTL~2.IDX")) returned 1 [0170.149] wcscmp (_String1="GRINTL32.REST.IDX_DLL", _String2=".") returned 1 [0170.149] wcscmp (_String1="GRINTL32.REST.IDX_DLL", _String2="..") returned 1 [0170.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3daa0 [0170.149] wcscpy (in: _Dest=0x3e3daa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.149] wcscat (in: _Dest=0x3e3daa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.149] wcscat (in: _Dest=0x3e3daa0, _Source="GRINTL32.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" [0170.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3daa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2514 [0170.167] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba7a700, ftCreationTime.dwHighDateTime=0x1cac246, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba7a700, ftLastWriteTime.dwHighDateTime=0x1cac246, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0170.167] wcscmp (_String1="GRLEX.DLL", _String2=".") returned 1 [0170.167] wcscmp (_String1="GRLEX.DLL", _String2="..") returned 1 [0170.167] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd90b0900, ftCreationTime.dwHighDateTime=0x1cacba2, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd90b0900, ftLastWriteTime.dwHighDateTime=0x1cacba2, nFileSizeHigh=0x0, nFileSizeLow=0xbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove Starter Template.xsn", cAlternateFileName="GROOVE~1.XSN")) returned 1 [0170.167] wcscmp (_String1="Groove Starter Template.xsn", _String2=".") returned 1 [0170.167] wcscmp (_String1="Groove Starter Template.xsn", _String2="..") returned 1 [0170.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b7b8 [0170.167] wcscpy (in: _Dest=0x819b7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.167] wcscat (in: _Dest=0x819b7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.167] wcscat (in: _Dest=0x819b7b8, _Source="Groove Starter Template.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" [0170.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26f0 [0170.168] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b0b300, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x46011f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21b0b300, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x22c410, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0170.168] wcscmp (_String1="GROOVE.HXS", _String2=".") returned 1 [0170.168] wcscmp (_String1="GROOVE.HXS", _String2="..") returned 1 [0170.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831b4d8 [0170.169] wcscpy (in: _Dest=0x831b4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.169] wcscat (in: _Dest=0x831b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.169] wcscat (in: _Dest=0x831b4d8, _Source="GROOVE.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" [0170.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26f4 [0170.170] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f79a10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GROOVE~1")) returned 1 [0170.170] wcscmp (_String1="GrooveForms5", _String2=".") returned 1 [0170.170] wcscmp (_String1="GrooveForms5", _String2="..") returned 1 [0170.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81be458 [0170.170] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.170] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.170] wcscat (in: _Dest=0x81be458, _Source="GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0170.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2524 [0170.171] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305fa800, ftCreationTime.dwHighDateTime=0x1cacba8, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x305fa800, ftLastWriteTime.dwHighDateTime=0x1cacba8, nFileSizeHigh=0x0, nFileSizeLow=0x863160, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1 [0170.171] wcscmp (_String1="GrooveIntlResource.dll", _String2=".") returned 1 [0170.171] wcscmp (_String1="GrooveIntlResource.dll", _String2="..") returned 1 [0170.171] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="GROOVE~1.HXC")) returned 1 [0170.171] wcscmp (_String1="GROOVE_COL.HXC", _String2=".") returned 1 [0170.171] wcscmp (_String1="GROOVE_COL.HXC", _String2="..") returned 1 [0170.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81beab8 [0170.171] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.171] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.172] wcscat (in: _Dest=0x81beab8, _Source="GROOVE_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" [0170.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26f8 [0170.173] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b1c9500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b1c9500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="GROOVE~1.HXT")) returned 1 [0170.173] wcscmp (_String1="GROOVE_COL.HXT", _String2=".") returned 1 [0170.173] wcscmp (_String1="GROOVE_COL.HXT", _String2="..") returned 1 [0170.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bee70 [0170.173] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.173] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.173] wcscat (in: _Dest=0x81bee70, _Source="GROOVE_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" [0170.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b0 [0170.174] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b1c9500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b1c9500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="GROOVE~1.HXK")) returned 1 [0170.174] wcscmp (_String1="GROOVE_F_COL.HXK", _String2=".") returned 1 [0170.174] wcscmp (_String1="GROOVE_F_COL.HXK", _String2="..") returned 1 [0170.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df4a8 [0170.174] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.174] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.174] wcscat (in: _Dest=0x81df4a8, _Source="GROOVE_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" [0170.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x252c [0170.175] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b1c9500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b1c9500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="GROOVE~2.HXK")) returned 1 [0170.176] wcscmp (_String1="GROOVE_K_COL.HXK", _String2=".") returned 1 [0170.176] wcscmp (_String1="GROOVE_K_COL.HXK", _String2="..") returned 1 [0170.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de698 [0170.176] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.176] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.176] wcscat (in: _Dest=0x81de698, _Source="GROOVE_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" [0170.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26fc [0170.177] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0170.177] wcscmp (_String1="HVAC.VSL", _String2=".") returned 1 [0170.177] wcscmp (_String1="HVAC.VSL", _String2="..") returned 1 [0170.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831bd58 [0170.177] wcscpy (in: _Dest=0x831bd58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.177] wcscat (in: _Dest=0x831bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.177] wcscat (in: _Dest=0x831bd58, _Source="HVAC.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" [0170.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a0 [0170.178] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b3be00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95b3be00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0170.178] wcscmp (_String1="HVACDIFF.VRD", _String2=".") returned 1 [0170.178] wcscmp (_String1="HVACDIFF.VRD", _String2="..") returned 1 [0170.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c02a0 [0170.178] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.178] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.178] wcscat (in: _Dest=0x81c02a0, _Source="HVACDIFF.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" [0170.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2700 [0170.276] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b3be00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95b3be00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0170.276] wcscmp (_String1="HVACDUCT.VRD", _String2=".") returned 1 [0170.276] wcscmp (_String1="HVACDUCT.VRD", _String2="..") returned 1 [0170.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf228 [0170.276] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.276] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.276] wcscat (in: _Dest=0x81bf228, _Source="HVACDUCT.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" [0170.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0170.277] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x75990, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFINTL.DLL", cAlternateFileName="")) returned 1 [0170.277] wcscmp (_String1="INFINTL.DLL", _String2=".") returned 1 [0170.277] wcscmp (_String1="INFINTL.DLL", _String2="..") returned 1 [0170.277] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9c7500, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d9c7500, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x174d06, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.HXS", cAlternateFileName="")) returned 1 [0170.277] wcscmp (_String1="INFOPATH.HXS", _String2=".") returned 1 [0170.277] wcscmp (_String1="INFOPATH.HXS", _String2="..") returned 1 [0170.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf6f0 [0170.277] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.277] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.277] wcscat (in: _Dest=0x81bf6f0, _Source="INFOPATH.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" [0170.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d58 [0170.278] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9c7500, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d9c7500, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x697e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR.HXS", cAlternateFileName="INFOPA~1.HXS")) returned 1 [0170.278] wcscmp (_String1="INFOPATHEDITOR.HXS", _String2=".") returned 1 [0170.278] wcscmp (_String1="INFOPATHEDITOR.HXS", _String2="..") returned 1 [0170.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de968 [0170.279] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.279] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.279] wcscat (in: _Dest=0x81de968, _Source="INFOPATHEDITOR.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" [0170.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d54 [0170.280] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXC", cAlternateFileName="INFOPA~2.HXC")) returned 1 [0170.280] wcscmp (_String1="INFOPATHEDITOR_COL.HXC", _String2=".") returned 1 [0170.280] wcscmp (_String1="INFOPATHEDITOR_COL.HXC", _String2="..") returned 1 [0170.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3ca00 [0170.280] wcscpy (in: _Dest=0x3e3ca00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.280] wcscat (in: _Dest=0x3e3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.280] wcscat (in: _Dest=0x3e3ca00, _Source="INFOPATHEDITOR_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" [0170.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc0 [0170.281] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f77600, ftCreationTime.dwHighDateTime=0x1c59386, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f77600, ftLastWriteTime.dwHighDateTime=0x1c59386, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXT", cAlternateFileName="INFOPA~2.HXT")) returned 1 [0170.281] wcscmp (_String1="INFOPATHEDITOR_COL.HXT", _String2=".") returned 1 [0170.281] wcscmp (_String1="INFOPATHEDITOR_COL.HXT", _String2="..") returned 1 [0170.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cff0 [0170.281] wcscpy (in: _Dest=0x3e3cff0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.281] wcscat (in: _Dest=0x3e3cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.281] wcscat (in: _Dest=0x3e3cff0, _Source="INFOPATHEDITOR_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" [0170.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0170.282] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f77600, ftCreationTime.dwHighDateTime=0x1c59386, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f77600, ftLastWriteTime.dwHighDateTime=0x1c59386, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_F_COL.HXK", cAlternateFileName="INFOPA~3.HXK")) returned 1 [0170.282] wcscmp (_String1="INFOPATHEDITOR_F_COL.HXK", _String2=".") returned 1 [0170.283] wcscmp (_String1="INFOPATHEDITOR_F_COL.HXK", _String2="..") returned 1 [0170.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819ac78 [0170.283] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.283] wcscat (in: _Dest=0x819ac78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.283] wcscat (in: _Dest=0x819ac78, _Source="INFOPATHEDITOR_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" [0170.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb8 [0170.284] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f77600, ftCreationTime.dwHighDateTime=0x1c59386, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f77600, ftLastWriteTime.dwHighDateTime=0x1c59386, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_K_COL.HXK", cAlternateFileName="INFOPA~4.HXK")) returned 1 [0170.284] wcscmp (_String1="INFOPATHEDITOR_K_COL.HXK", _String2=".") returned 1 [0170.284] wcscmp (_String1="INFOPATHEDITOR_K_COL.HXK", _String2="..") returned 1 [0170.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819bc18 [0170.284] wcscpy (in: _Dest=0x819bc18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.284] wcscat (in: _Dest=0x819bc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.284] wcscat (in: _Dest=0x819bc18, _Source="INFOPATHEDITOR_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" [0170.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0170.286] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXC", cAlternateFileName="INFOPA~1.HXC")) returned 1 [0170.286] wcscmp (_String1="INFOPATH_COL.HXC", _String2=".") returned 1 [0170.286] wcscmp (_String1="INFOPATH_COL.HXC", _String2="..") returned 1 [0170.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de0f8 [0170.286] wcscpy (in: _Dest=0x81de0f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.286] wcscat (in: _Dest=0x81de0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.286] wcscat (in: _Dest=0x81de0f8, _Source="INFOPATH_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" [0170.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0170.287] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c16500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4c16500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXT", cAlternateFileName="INFOPA~1.HXT")) returned 1 [0170.287] wcscmp (_String1="INFOPATH_COL.HXT", _String2=".") returned 1 [0170.287] wcscmp (_String1="INFOPATH_COL.HXT", _String2="..") returned 1 [0170.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de218 [0170.287] wcscpy (in: _Dest=0x81de218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.287] wcscat (in: _Dest=0x81de218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.287] wcscat (in: _Dest=0x81de218, _Source="INFOPATH_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" [0170.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2888 [0170.288] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c16500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4c16500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_F_COL.HXK", cAlternateFileName="INFOPA~1.HXK")) returned 1 [0170.288] wcscmp (_String1="INFOPATH_F_COL.HXK", _String2=".") returned 1 [0170.288] wcscmp (_String1="INFOPATH_F_COL.HXK", _String2="..") returned 1 [0170.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81deb18 [0170.288] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.288] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.289] wcscat (in: _Dest=0x81deb18, _Source="INFOPATH_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" [0170.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81deb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0170.289] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c16500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4c16500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_K_COL.HXK", cAlternateFileName="INFOPA~2.HXK")) returned 1 [0170.289] wcscmp (_String1="INFOPATH_K_COL.HXK", _String2=".") returned 1 [0170.289] wcscmp (_String1="INFOPATH_K_COL.HXK", _String2="..") returned 1 [0170.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dec38 [0170.290] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.290] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.290] wcscat (in: _Dest=0x81dec38, _Source="INFOPATH_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" [0170.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dec38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0170.291] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x963d8400, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x963d8400, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0170.291] wcscmp (_String1="INSTLIST.VRD", _String2=".") returned 1 [0170.291] wcscmp (_String1="INSTLIST.VRD", _String2="..") returned 1 [0170.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfb30 [0170.291] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.291] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.291] wcscat (in: _Dest=0x81bfb30, _Source="INSTLIST.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" [0170.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2998 [0170.292] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd139a00, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd139a00, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0170.292] wcscmp (_String1="INVENTRY.VRD", _String2=".") returned 1 [0170.292] wcscmp (_String1="INVENTRY.VRD", _String2="..") returned 1 [0170.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf4d0 [0170.292] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0170.292] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0170.292] wcscat (in: _Dest=0x81bf4d0, _Source="INVENTRY.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" [0170.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2890 [0170.293] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687dff00, ftCreationTime.dwHighDateTime=0x1ca0fb7, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x687dff00, ftLastWriteTime.dwHighDateTime=0x1ca0fb7, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="INVITE~1.ONE")) returned 1 [0171.921] wcscmp (_String1="Invite or Link.one", _String2=".") returned 1 [0171.921] wcscmp (_String1="Invite or Link.one", _String2="..") returned 1 [0171.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de068 [0171.921] wcscpy (in: _Dest=0x81de068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0171.921] wcscat (in: _Dest=0x81de068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0171.921] wcscat (in: _Dest=0x81de068, _Source="Invite or Link.one" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" [0178.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0178.756] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x5936f850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x22a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDSINTL.DLL", cAlternateFileName="")) returned 1 [0178.756] wcscmp (_String1="IPDSINTL.DLL", _String2=".") returned 1 [0178.756] wcscmp (_String1="IPDSINTL.DLL", _String2="..") returned 1 [0178.756] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0xd7b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDINTL.DLL", cAlternateFileName="")) returned 1 [0178.756] wcscmp (_String1="IPEDINTL.DLL", _String2=".") returned 1 [0178.756] wcscmp (_String1="IPEDINTL.DLL", _String2="..") returned 1 [0178.756] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x593959b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x3e7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLKINTL.DLL", cAlternateFileName="IPOLKI~1.DLL")) returned 1 [0178.756] wcscmp (_String1="IPOLKINTL.DLL", _String2=".") returned 1 [0178.756] wcscmp (_String1="IPOLKINTL.DLL", _String2="..") returned 1 [0178.756] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2cf800, ftCreationTime.dwHighDateTime=0x1c91404, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc2cf800, ftLastWriteTime.dwHighDateTime=0x1c91404, nFileSizeHigh=0x0, nFileSizeLow=0x3cebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issue Tracking.gta", cAlternateFileName="ISSUET~1.GTA")) returned 1 [0178.756] wcscmp (_String1="Issue Tracking.gta", _String2=".") returned 1 [0178.756] wcscmp (_String1="Issue Tracking.gta", _String2="..") returned 1 [0178.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df388 [0178.756] wcscpy (in: _Dest=0x81df388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.756] wcscat (in: _Dest=0x81df388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.756] wcscat (in: _Dest=0x81df388, _Source="Issue Tracking.gta" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" [0178.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0178.761] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0178.761] wcscmp (_String1="JADE.CSS", _String2=".") returned 1 [0178.761] wcscmp (_String1="JADE.CSS", _String2="..") returned 1 [0178.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831a9d8 [0178.761] wcscpy (in: _Dest=0x831a9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.761] wcscat (in: _Dest=0x831a9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.761] wcscat (in: _Dest=0x831a9d8, _Source="JADE.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" [0178.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0178.763] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8180, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0178.763] wcscmp (_String1="LGND.VSL", _String2=".") returned 1 [0178.763] wcscmp (_String1="LGND.VSL", _String2="..") returned 1 [0178.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831b6d8 [0178.763] wcscpy (in: _Dest=0x831b6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.763] wcscat (in: _Dest=0x831b6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.763] wcscat (in: _Dest=0x831b6d8, _Source="LGND.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" [0178.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0178.770] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48c67950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x112970, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0178.770] wcscmp (_String1="MAPIR.DLL", _String2=".") returned 1 [0178.770] wcscmp (_String1="MAPIR.DLL", _String2="..") returned 1 [0178.770] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.IDX_DLL", cAlternateFileName="MAPIRD~1.IDX")) returned 1 [0178.770] wcscmp (_String1="MAPIR.DLL.IDX_DLL", _String2=".") returned 1 [0178.770] wcscmp (_String1="MAPIR.DLL.IDX_DLL", _String2="..") returned 1 [0178.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df538 [0178.770] wcscpy (in: _Dest=0x81df538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.770] wcscat (in: _Dest=0x81df538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.770] wcscat (in: _Dest=0x81df538, _Source="MAPIR.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" [0178.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0178.772] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0178.772] wcscmp (_String1="MAPISHELLR.DLL", _String2=".") returned 1 [0178.772] wcscmp (_String1="MAPISHELLR.DLL", _String2="..") returned 1 [0178.772] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x1009b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MERES.DLL", cAlternateFileName="")) returned 1 [0178.772] wcscmp (_String1="MERES.DLL", _String2=".") returned 1 [0178.772] wcscmp (_String1="MERES.DLL", _String2="..") returned 1 [0178.772] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x6209a310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x6cf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0178.772] wcscmp (_String1="MOR6INT.DLL", _String2=".") returned 1 [0178.772] wcscmp (_String1="MOR6INT.DLL", _String2="..") returned 1 [0178.772] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e81c00, ftCreationTime.dwHighDateTime=0x1cab82f, ftLastAccessTime.dwLowDateTime=0x6209a310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4e81c00, ftLastWriteTime.dwHighDateTime=0x1cab82f, nFileSizeHigh=0x0, nFileSizeLow=0x9b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.IDX_DLL", cAlternateFileName="MOR6IN~1.IDX")) returned 1 [0178.772] wcscmp (_String1="MOR6INT.REST.IDX_DLL", _String2=".") returned 1 [0178.772] wcscmp (_String1="MOR6INT.REST.IDX_DLL", _String2="..") returned 1 [0178.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ce18 [0178.772] wcscpy (in: _Dest=0x32ce18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.773] wcscat (in: _Dest=0x32ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.773] wcscat (in: _Dest=0x32ce18, _Source="MOR6INT.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" [0178.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0178.774] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e4eb00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96e4eb00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0178.774] wcscmp (_String1="MOVE.VRD", _String2=".") returned 1 [0178.774] wcscmp (_String1="MOVE.VRD", _String2="..") returned 1 [0178.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831bd58 [0178.774] wcscpy (in: _Dest=0x831bd58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.774] wcscat (in: _Dest=0x831bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.774] wcscat (in: _Dest=0x831bd58, _Source="MOVE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" [0178.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0178.776] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0178.776] wcscmp (_String1="MPXRES.DLL", _String2=".") returned 1 [0178.776] wcscmp (_String1="MPXRES.DLL", _String2="..") returned 1 [0178.776] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d2c00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e1d2c00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0xa3f874, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV.HXS", cAlternateFileName="MSACCE~1.HXS")) returned 1 [0178.776] wcscmp (_String1="MSACCESS.DEV.HXS", _String2=".") returned 1 [0178.776] wcscmp (_String1="MSACCESS.DEV.HXS", _String2="..") returned 1 [0178.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df148 [0178.776] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.776] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.776] wcscat (in: _Dest=0x81df148, _Source="MSACCESS.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" [0178.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934 [0178.778] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXC", cAlternateFileName="MSACCE~1.HXC")) returned 1 [0178.778] wcscmp (_String1="MSACCESS.DEV_COL.HXC", _String2=".") returned 1 [0178.778] wcscmp (_String1="MSACCESS.DEV_COL.HXC", _String2="..") returned 1 [0178.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0178.778] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.778] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.778] wcscat (in: _Dest=0x32cf48, _Source="MSACCESS.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" [0178.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0178.779] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19a000, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd19a000, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXT", cAlternateFileName="MSACCE~1.HXT")) returned 1 [0178.779] wcscmp (_String1="MSACCESS.DEV_COL.HXT", _String2=".") returned 1 [0178.779] wcscmp (_String1="MSACCESS.DEV_COL.HXT", _String2="..") returned 1 [0178.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c8c0 [0178.780] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.780] wcscat (in: _Dest=0x32c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.780] wcscat (in: _Dest=0x32c8c0, _Source="MSACCESS.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" [0178.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680 [0178.781] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19a000, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd19a000, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_F_COL.HXK", cAlternateFileName="MSACCE~1.HXK")) returned 1 [0178.781] wcscmp (_String1="MSACCESS.DEV_F_COL.HXK", _String2=".") returned 1 [0178.781] wcscmp (_String1="MSACCESS.DEV_F_COL.HXK", _String2="..") returned 1 [0178.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32bd78 [0178.781] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.781] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.781] wcscat (in: _Dest=0x32bd78, _Source="MSACCESS.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" [0178.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0178.783] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19a000, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd19a000, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_K_COL.HXK", cAlternateFileName="MSACCE~2.HXK")) returned 1 [0178.783] wcscmp (_String1="MSACCESS.DEV_K_COL.HXK", _String2=".") returned 1 [0178.783] wcscmp (_String1="MSACCESS.DEV_K_COL.HXK", _String2="..") returned 1 [0178.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32bce0 [0178.783] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.783] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.783] wcscat (in: _Dest=0x32bce0, _Source="MSACCESS.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" [0178.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098 [0178.784] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d2c00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x5c676050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e1d2c00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0178.784] wcscmp (_String1="MSACCESS.HXS", _String2=".") returned 1 [0178.784] wcscmp (_String1="MSACCESS.HXS", _String2="..") returned 1 [0178.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bff70 [0178.785] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.785] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.785] wcscat (in: _Dest=0x81bff70, _Source="MSACCESS.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" [0178.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0178.786] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x5c676050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="MSACCE~2.HXC")) returned 1 [0178.786] wcscmp (_String1="MSACCESS_COL.HXC", _String2=".") returned 1 [0178.786] wcscmp (_String1="MSACCESS_COL.HXC", _String2="..") returned 1 [0178.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0178.786] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.786] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.786] wcscat (in: _Dest=0x81de728, _Source="MSACCESS_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" [0178.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0178.788] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc854ec00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc854ec00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="MSACCE~2.HXT")) returned 1 [0178.788] wcscmp (_String1="MSACCESS_COL.HXT", _String2=".") returned 1 [0178.788] wcscmp (_String1="MSACCESS_COL.HXT", _String2="..") returned 1 [0178.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddc78 [0178.788] wcscpy (in: _Dest=0x81ddc78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.788] wcscat (in: _Dest=0x81ddc78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.788] wcscat (in: _Dest=0x81ddc78, _Source="MSACCESS_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" [0178.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0178.789] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc854ec00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc854ec00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="MSACCE~3.HXK")) returned 1 [0178.789] wcscmp (_String1="MSACCESS_F_COL.HXK", _String2=".") returned 1 [0178.789] wcscmp (_String1="MSACCESS_F_COL.HXK", _String2="..") returned 1 [0178.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dd6d8 [0178.790] wcscpy (in: _Dest=0x81dd6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.790] wcscat (in: _Dest=0x81dd6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.790] wcscat (in: _Dest=0x81dd6d8, _Source="MSACCESS_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" [0178.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0178.791] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc854ec00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc854ec00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="MSACCE~4.HXK")) returned 1 [0178.791] wcscmp (_String1="MSACCESS_K_COL.HXK", _String2=".") returned 1 [0178.791] wcscmp (_String1="MSACCESS_K_COL.HXK", _String2="..") returned 1 [0178.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81decc8 [0178.791] wcscpy (in: _Dest=0x81decc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.791] wcscat (in: _Dest=0x81decc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.791] wcscat (in: _Dest=0x81decc8, _Source="MSACCESS_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" [0178.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81decc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0178.793] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x127f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0178.793] wcscmp (_String1="MSAIN.DLL", _String2=".") returned 1 [0178.793] wcscmp (_String1="MSAIN.DLL", _String2="..") returned 1 [0178.793] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedd2ea00, ftCreationTime.dwHighDateTime=0x1c99288, ftLastAccessTime.dwLowDateTime=0x51781ef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedd2ea00, ftLastWriteTime.dwHighDateTime=0x1c99288, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0178.793] wcscmp (_String1="MSO.ACL", _String2=".") returned 1 [0178.793] wcscmp (_String1="MSO.ACL", _String2="..") returned 1 [0178.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68060 [0178.793] wcscpy (in: _Dest=0x3e68060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.793] wcscat (in: _Dest=0x3e68060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.793] wcscat (in: _Dest=0x3e68060, _Source="MSO.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" [0178.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0178.795] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7690d200, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7690d200, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x69560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0178.795] wcscmp (_String1="MSOUC.HXS", _String2=".") returned 1 [0178.795] wcscmp (_String1="MSOUC.HXS", _String2="..") returned 1 [0178.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b4d8 [0178.795] wcscpy (in: _Dest=0x831b4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.795] wcscat (in: _Dest=0x831b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.795] wcscat (in: _Dest=0x831b4d8, _Source="MSOUC.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" [0178.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0178.797] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="MSOUC_~1.HXC")) returned 1 [0178.797] wcscmp (_String1="MSOUC_COL.HXC", _String2=".") returned 1 [0178.797] wcscmp (_String1="MSOUC_COL.HXC", _String2="..") returned 1 [0178.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be898 [0178.797] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.797] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.797] wcscat (in: _Dest=0x81be898, _Source="MSOUC_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" [0178.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0178.798] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="MSOUC_~1.HXT")) returned 1 [0178.798] wcscmp (_String1="MSOUC_COL.HXT", _String2=".") returned 1 [0178.799] wcscmp (_String1="MSOUC_COL.HXT", _String2="..") returned 1 [0178.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bed60 [0178.799] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.799] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.799] wcscat (in: _Dest=0x81bed60, _Source="MSOUC_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" [0178.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0178.979] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="MSOUC_~1.HXK")) returned 1 [0178.979] wcscmp (_String1="MSOUC_F_COL.HXK", _String2=".") returned 1 [0178.979] wcscmp (_String1="MSOUC_F_COL.HXK", _String2="..") returned 1 [0178.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0178.979] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.979] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.979] wcscat (in: _Dest=0x81bf1a0, _Source="MSOUC_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" [0179.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ec [0179.441] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="MSOUC_~2.HXK")) returned 1 [0179.441] wcscmp (_String1="MSOUC_K_COL.HXK", _String2=".") returned 1 [0179.441] wcscmp (_String1="MSOUC_K_COL.HXK", _String2="..") returned 1 [0179.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f638 [0179.441] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.441] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.441] wcscat (in: _Dest=0x3f2f638, _Source="MSOUC_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" [0179.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0179.442] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26756700, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x6210c730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26756700, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x487dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV.HXS", cAlternateFileName="MSPUBD~1.HXS")) returned 1 [0182.149] wcscmp (_String1="MSPUB.DEV.HXS", _String2=".") returned 1 [0182.149] wcscmp (_String1="MSPUB.DEV.HXS", _String2="..") returned 1 [0182.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f310c8 [0182.149] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.149] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.149] wcscat (in: _Dest=0x3f310c8, _Source="MSPUB.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" [0188.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d0 [0188.093] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x6210c730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXC", cAlternateFileName="MSPUBD~1.HXC")) returned 1 [0188.093] wcscmp (_String1="MSPUB.DEV_COL.HXC", _String2=".") returned 1 [0188.093] wcscmp (_String1="MSPUB.DEV_COL.HXC", _String2="..") returned 1 [0188.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df4a8 [0188.093] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.093] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.093] wcscat (in: _Dest=0x81df4a8, _Source="MSPUB.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" [0188.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0188.094] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30f8100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x6210c730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30f8100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXT", cAlternateFileName="MSPUBD~1.HXT")) returned 1 [0188.094] wcscmp (_String1="MSPUB.DEV_COL.HXT", _String2=".") returned 1 [0188.094] wcscmp (_String1="MSPUB.DEV_COL.HXT", _String2="..") returned 1 [0188.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dec38 [0188.095] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.095] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.095] wcscat (in: _Dest=0x81dec38, _Source="MSPUB.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" [0188.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dec38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0188.096] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30f8100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x62132890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30f8100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_F_COL.HXK", cAlternateFileName="MSPUBD~1.HXK")) returned 1 [0188.096] wcscmp (_String1="MSPUB.DEV_F_COL.HXK", _String2=".") returned 1 [0188.096] wcscmp (_String1="MSPUB.DEV_F_COL.HXK", _String2="..") returned 1 [0188.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0188.097] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.097] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.097] wcscat (in: _Dest=0x81deb18, _Source="MSPUB.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" [0188.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81deb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0188.098] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30f8100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x62132890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30f8100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_K_COL.HXK", cAlternateFileName="MSPUBD~2.HXK")) returned 1 [0188.098] wcscmp (_String1="MSPUB.DEV_K_COL.HXK", _String2=".") returned 1 [0188.098] wcscmp (_String1="MSPUB.DEV_K_COL.HXK", _String2="..") returned 1 [0188.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de218 [0188.098] wcscpy (in: _Dest=0x81de218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.098] wcscat (in: _Dest=0x81de218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.098] wcscat (in: _Dest=0x81de218, _Source="MSPUB.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" [0188.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0188.100] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a69400, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x62132890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27a69400, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cc936, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0188.100] wcscmp (_String1="MSPUB.HXS", _String2=".") returned 1 [0188.100] wcscmp (_String1="MSPUB.HXS", _String2="..") returned 1 [0188.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5108 [0188.100] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.100] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.100] wcscat (in: _Dest=0x3dc5108, _Source="MSPUB.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" [0188.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0188.101] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2517e400, ftCreationTime.dwHighDateTime=0x1c2a219, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2517e400, ftLastWriteTime.dwHighDateTime=0x1c2a219, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0188.101] wcscmp (_String1="MSPUB.OPG", _String2=".") returned 1 [0188.101] wcscmp (_String1="MSPUB.OPG", _String2="..") returned 1 [0188.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5308 [0188.102] wcscpy (in: _Dest=0x3dc5308, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.102] wcscat (in: _Dest=0x3dc5308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.102] wcscat (in: _Dest=0x3dc5308, _Source="MSPUB.OPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" [0188.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0188.103] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="MSPUB_~1.HXC")) returned 1 [0188.103] wcscmp (_String1="MSPUB_COL.HXC", _String2=".") returned 1 [0188.103] wcscmp (_String1="MSPUB_COL.HXC", _String2="..") returned 1 [0188.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ed60 [0188.103] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.103] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.103] wcscat (in: _Dest=0x3e1ed60, _Source="MSPUB_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" [0188.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0188.105] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad2700, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0ad2700, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="MSPUB_~1.HXT")) returned 1 [0188.105] wcscmp (_String1="MSPUB_COL.HXT", _String2=".") returned 1 [0188.105] wcscmp (_String1="MSPUB_COL.HXT", _String2="..") returned 1 [0188.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f448 [0188.105] wcscpy (in: _Dest=0x3e1f448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.105] wcscat (in: _Dest=0x3e1f448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.105] wcscat (in: _Dest=0x3e1f448, _Source="MSPUB_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" [0188.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0188.125] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad2700, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0ad2700, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="MSPUB_~1.HXK")) returned 1 [0188.125] wcscmp (_String1="MSPUB_F_COL.HXK", _String2=".") returned 1 [0188.125] wcscmp (_String1="MSPUB_F_COL.HXK", _String2="..") returned 1 [0188.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f2b0 [0188.125] wcscpy (in: _Dest=0x3e1f2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.125] wcscat (in: _Dest=0x3e1f2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.125] wcscat (in: _Dest=0x3e1f2b0, _Source="MSPUB_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" [0188.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0188.127] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad2700, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0ad2700, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="MSPUB_~2.HXK")) returned 1 [0188.127] wcscmp (_String1="MSPUB_K_COL.HXK", _String2=".") returned 1 [0188.127] wcscmp (_String1="MSPUB_K_COL.HXK", _String2="..") returned 1 [0188.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f228 [0188.127] wcscpy (in: _Dest=0x3e1f228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.127] wcscat (in: _Dest=0x3e1f228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.127] wcscat (in: _Dest=0x3e1f228, _Source="MSPUB_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" [0188.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0188.129] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d875700, ftCreationTime.dwHighDateTime=0x1c33b04, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6d875700, ftLastWriteTime.dwHighDateTime=0x1c33b04, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0188.129] wcscmp (_String1="MSQRY32.CHM", _String2=".") returned 1 [0188.129] wcscmp (_String1="MSQRY32.CHM", _String2="..") returned 1 [0188.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4488 [0188.129] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.129] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.129] wcscat (in: _Dest=0x3dc4488, _Source="MSQRY32.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" [0188.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c [0188.131] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTINTL.DLL", cAlternateFileName="")) returned 1 [0188.131] wcscmp (_String1="MSTINTL.DLL", _String2=".") returned 1 [0188.131] wcscmp (_String1="MSTINTL.DLL", _String2="..") returned 1 [0188.131] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d2c00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e1d2c00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x5f254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.HXS", cAlternateFileName="")) returned 1 [0188.131] wcscmp (_String1="MSTORE.HXS", _String2=".") returned 1 [0188.131] wcscmp (_String1="MSTORE.HXS", _String2="..") returned 1 [0188.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4608 [0188.131] wcscpy (in: _Dest=0x3dc4608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.131] wcscat (in: _Dest=0x3dc4608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.131] wcscat (in: _Dest=0x3dc4608, _Source="MSTORE.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" [0188.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0188.133] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXC", cAlternateFileName="MSTORE~1.HXC")) returned 1 [0188.133] wcscmp (_String1="MSTORE_COL.HXC", _String2=".") returned 1 [0188.133] wcscmp (_String1="MSTORE_COL.HXC", _String2="..") returned 1 [0188.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f800 [0188.133] wcscpy (in: _Dest=0x3e1f800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.133] wcscat (in: _Dest=0x3e1f800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.133] wcscat (in: _Dest=0x3e1f800, _Source="MSTORE_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" [0188.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0188.134] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a30800, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6a30800, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXT", cAlternateFileName="MSTORE~1.HXT")) returned 1 [0188.135] wcscmp (_String1="MSTORE_COL.HXT", _String2=".") returned 1 [0188.135] wcscmp (_String1="MSTORE_COL.HXT", _String2="..") returned 1 [0188.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f4d0 [0188.135] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.135] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.135] wcscat (in: _Dest=0x3e1f4d0, _Source="MSTORE_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" [0188.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0188.136] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a30800, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6a30800, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_F_COL.HXK", cAlternateFileName="MSTORE~1.HXK")) returned 1 [0188.136] wcscmp (_String1="MSTORE_F_COL.HXK", _String2=".") returned 1 [0188.136] wcscmp (_String1="MSTORE_F_COL.HXK", _String2="..") returned 1 [0188.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de968 [0188.137] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.137] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.137] wcscat (in: _Dest=0x81de968, _Source="MSTORE_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" [0188.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0188.138] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a30800, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6a30800, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_K_COL.HXK", cAlternateFileName="MSTORE~2.HXK")) returned 1 [0188.138] wcscmp (_String1="MSTORE_K_COL.HXK", _String2=".") returned 1 [0188.138] wcscmp (_String1="MSTORE_K_COL.HXK", _String2="..") returned 1 [0188.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81def98 [0188.138] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.138] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.138] wcscat (in: _Dest=0x81def98, _Source="MSTORE_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" [0188.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0188.140] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0188.140] wcscmp (_String1="NETWORK.CSS", _String2=".") returned 1 [0188.140] wcscmp (_String1="NETWORK.CSS", _String2="..") returned 1 [0188.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5708 [0188.140] wcscpy (in: _Dest=0x3dc5708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.140] wcscat (in: _Dest=0x3dc5708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.140] wcscat (in: _Dest=0x3dc5708, _Source="NETWORK.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" [0188.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0188.142] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99474500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99474500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0188.142] wcscmp (_String1="NETWORK1.VRD", _String2=".") returned 1 [0188.142] wcscmp (_String1="NETWORK1.VRD", _String2="..") returned 1 [0188.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fc40 [0188.142] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.142] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.142] wcscat (in: _Dest=0x3e1fc40, _Source="NETWORK1.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" [0188.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0188.144] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99474500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99474500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0188.144] wcscmp (_String1="NETWORK2.VRD", _String2=".") returned 1 [0188.144] wcscmp (_String1="NETWORK2.VRD", _String2="..") returned 1 [0188.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1f1a0 [0188.144] wcscpy (in: _Dest=0x3e1f1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.144] wcscat (in: _Dest=0x3e1f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.144] wcscat (in: _Dest=0x3e1f1a0, _Source="NETWORK2.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" [0188.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0188.146] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99474500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99474500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0188.146] wcscmp (_String1="NETWORK3.VRD", _String2=".") returned 1 [0188.146] wcscmp (_String1="NETWORK3.VRD", _String2="..") returned 1 [0188.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ff70 [0188.146] wcscpy (in: _Dest=0x3e1ff70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.146] wcscat (in: _Dest=0x3e1ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.146] wcscat (in: _Dest=0x3e1ff70, _Source="NETWORK3.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" [0188.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0188.415] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8023dd00, ftCreationTime.dwHighDateTime=0x1c2c0db, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8023dd00, ftLastWriteTime.dwHighDateTime=0x1c2c0db, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0188.415] wcscmp (_String1="OCCMPVRD.XML", _String2=".") returned 1 [0188.415] wcscmp (_String1="OCCMPVRD.XML", _String2="..") returned 1 [0188.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1eef8 [0188.415] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.415] wcscat (in: _Dest=0x3e1eef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.415] wcscat (in: _Dest=0x3e1eef8, _Source="OCCMPVRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" [0188.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0188.417] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x19f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCLTINT.DLL", cAlternateFileName="")) returned 1 [0188.417] wcscmp (_String1="OCLTINT.DLL", _String2=".") returned 1 [0188.417] wcscmp (_String1="OCLTINT.DLL", _String2="..") returned 1 [0188.417] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09c3400, ftCreationTime.dwHighDateTime=0x1c2c146, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe09c3400, ftLastWriteTime.dwHighDateTime=0x1c2c146, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0188.417] wcscmp (_String1="OCMODVRD.XML", _String2=".") returned 1 [0188.417] wcscmp (_String1="OCMODVRD.XML", _String2="..") returned 1 [0188.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fff8 [0188.417] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.417] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.417] wcscat (in: _Dest=0x3e1fff8, _Source="OCMODVRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" [0188.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0188.424] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34104100, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34104100, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1 [0188.424] wcscmp (_String1="OFFOWCI.DLL", _String2=".") returned 1 [0188.424] wcscmp (_String1="OFFOWCI.DLL", _String2="..") returned 1 [0188.425] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b0b300, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21b0b300, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.HXS", cAlternateFileName="")) returned 1 [0188.425] wcscmp (_String1="OIS.HXS", _String2=".") returned 1 [0188.425] wcscmp (_String1="OIS.HXS", _String2="..") returned 1 [0188.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67fe8 [0188.425] wcscpy (in: _Dest=0x3e67fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.425] wcscat (in: _Dest=0x3e67fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.425] wcscat (in: _Dest=0x3e67fe8, _Source="OIS.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" [0188.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0188.426] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df92700, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7df92700, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISINTL.DLL", cAlternateFileName="")) returned 1 [0188.427] wcscmp (_String1="OISINTL.DLL", _String2=".") returned 1 [0188.427] wcscmp (_String1="OISINTL.DLL", _String2="..") returned 1 [0188.427] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXC", cAlternateFileName="")) returned 1 [0188.427] wcscmp (_String1="OIS_COL.HXC", _String2=".") returned 1 [0188.427] wcscmp (_String1="OIS_COL.HXC", _String2="..") returned 1 [0188.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5108 [0188.427] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.427] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.427] wcscat (in: _Dest=0x3dc5108, _Source="OIS_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" [0188.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0188.432] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda368f00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda368f00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXT", cAlternateFileName="")) returned 1 [0188.432] wcscmp (_String1="OIS_COL.HXT", _String2=".") returned 1 [0188.432] wcscmp (_String1="OIS_COL.HXT", _String2="..") returned 1 [0188.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5508 [0188.433] wcscpy (in: _Dest=0x3dc5508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.433] wcscat (in: _Dest=0x3dc5508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.433] wcscat (in: _Dest=0x3dc5508, _Source="OIS_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" [0188.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0188.436] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda368f00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda368f00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_F_COL.HXK", cAlternateFileName="OIS_F_~1.HXK")) returned 1 [0188.436] wcscmp (_String1="OIS_F_COL.HXK", _String2=".") returned 1 [0188.436] wcscmp (_String1="OIS_F_COL.HXK", _String2="..") returned 1 [0188.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ebc8 [0188.436] wcscpy (in: _Dest=0x3e1ebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.436] wcscat (in: _Dest=0x3e1ebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.436] wcscat (in: _Dest=0x3e1ebc8, _Source="OIS_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" [0188.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d8 [0188.437] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda368f00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda368f00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_K_COL.HXK", cAlternateFileName="OIS_K_~1.HXK")) returned 1 [0188.438] wcscmp (_String1="OIS_K_COL.HXK", _String2=".") returned 1 [0188.438] wcscmp (_String1="OIS_K_COL.HXK", _String2="..") returned 1 [0188.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f008 [0188.438] wcscpy (in: _Dest=0x3e1f008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0188.438] wcscat (in: _Dest=0x3e1f008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0188.438] wcscat (in: _Dest=0x3e1f008, _Source="OIS_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" [0188.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc [0188.446] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde5e9600, ftCreationTime.dwHighDateTime=0x1cab90b, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde5e9600, ftLastWriteTime.dwHighDateTime=0x1cab90b, nFileSizeHigh=0x0, nFileSizeLow=0x62180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0188.446] wcscmp (_String1="OMSINTL.DLL", _String2=".") returned 1 [0188.446] wcscmp (_String1="OMSINTL.DLL", _String2="..") returned 1 [0188.446] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b30f400, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b30f400, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.IDX_DLL", cAlternateFileName="OMSINT~1.IDX")) returned 1 [0189.301] wcscmp (_String1="OMSINTL.DLL.IDX_DLL", _String2=".") returned 1 [0189.301] wcscmp (_String1="OMSINTL.DLL.IDX_DLL", _String2="..") returned 1 [0189.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df2f8 [0189.301] wcscpy (in: _Dest=0x81df2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0189.301] wcscat (in: _Dest=0x81df2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0189.301] wcscat (in: _Dest=0x81df2f8, _Source="OMSINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" [0190.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0190.157] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xb388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONELEV.EXE", cAlternateFileName="")) returned 1 [0190.157] wcscmp (_String1="ONELEV.EXE", _String2=".") returned 1 [0190.157] wcscmp (_String1="ONELEV.EXE", _String2="..") returned 1 [0190.157] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b0b300, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21b0b300, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0190.157] wcscmp (_String1="ONENOTE.HXS", _String2=".") returned 1 [0190.157] wcscmp (_String1="ONENOTE.HXS", _String2="..") returned 1 [0190.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b058 [0190.157] wcscpy (in: _Dest=0x831b058, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.157] wcscat (in: _Dest=0x831b058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.157] wcscat (in: _Dest=0x831b058, _Source="ONENOTE.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" [0190.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0190.158] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x412f2f00, ftCreationTime.dwHighDateTime=0x1cab831, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x412f2f00, ftLastWriteTime.dwHighDateTime=0x1cab831, nFileSizeHigh=0x0, nFileSizeLow=0x25e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPCIntl.dll", cAlternateFileName="ONENOT~1.DLL")) returned 1 [0190.158] wcscmp (_String1="OneNoteSyncPCIntl.dll", _String2=".") returned 1 [0190.158] wcscmp (_String1="OneNoteSyncPCIntl.dll", _String2="..") returned 1 [0190.158] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="ONENOT~1.HXC")) returned 1 [0190.158] wcscmp (_String1="ONENOTE_COL.HXC", _String2=".") returned 1 [0190.159] wcscmp (_String1="ONENOTE_COL.HXC", _String2="..") returned 1 [0190.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30a68 [0190.159] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.159] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.159] wcscat (in: _Dest=0x3f30a68, _Source="ONENOTE_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" [0190.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a68 [0190.160] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddca1600, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddca1600, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="ONENOT~1.HXT")) returned 1 [0190.160] wcscmp (_String1="ONENOTE_COL.HXT", _String2=".") returned 1 [0190.160] wcscmp (_String1="ONENOTE_COL.HXT", _String2="..") returned 1 [0190.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f968 [0190.160] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.160] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.160] wcscat (in: _Dest=0x3f2f968, _Source="ONENOTE_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" [0190.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a60 [0190.161] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddca1600, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddca1600, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="ONENOT~1.HXK")) returned 1 [0190.161] wcscmp (_String1="ONENOTE_F_COL.HXK", _String2=".") returned 1 [0190.161] wcscmp (_String1="ONENOTE_F_COL.HXK", _String2="..") returned 1 [0190.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de0f8 [0190.161] wcscpy (in: _Dest=0x81de0f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.162] wcscat (in: _Dest=0x81de0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.162] wcscat (in: _Dest=0x81de0f8, _Source="ONENOTE_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" [0190.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a5c [0190.163] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddca1600, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddca1600, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="ONENOT~2.HXK")) returned 1 [0190.163] wcscmp (_String1="ONENOTE_K_COL.HXK", _String2=".") returned 1 [0190.163] wcscmp (_String1="ONENOTE_K_COL.HXK", _String2="..") returned 1 [0190.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de458 [0190.163] wcscpy (in: _Dest=0x81de458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.163] wcscat (in: _Dest=0x81de458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.163] wcscat (in: _Dest=0x81de458, _Source="ONENOTE_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" [0190.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a58 [0190.164] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa429f800, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554812b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa429f800, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x148d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="ONGUID~1.ONE")) returned 1 [0190.164] wcscmp (_String1="ONGuide.onepkg", _String2=".") returned 1 [0190.164] wcscmp (_String1="ONGuide.onepkg", _String2="..") returned 1 [0190.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f8e0 [0190.165] wcscpy (in: _Dest=0x3f2f8e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.165] wcscat (in: _Dest=0x3f2f8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.165] wcscat (in: _Dest=0x3f2f8e0, _Source="ONGuide.onepkg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" [0190.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2884 [0190.166] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x341f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0190.166] wcscmp (_String1="ONINTL.DLL", _String2=".") returned 1 [0190.166] wcscmp (_String1="ONINTL.DLL", _String2="..") returned 1 [0190.166] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3584900, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554812b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3584900, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x3b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.IDX_DLL", cAlternateFileName="ONINTL~1.IDX")) returned 1 [0190.166] wcscmp (_String1="ONINTL.DLL.IDX_DLL", _String2=".") returned 1 [0190.166] wcscmp (_String1="ONINTL.DLL.IDX_DLL", _String2="..") returned 1 [0190.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de4e8 [0190.166] wcscpy (in: _Dest=0x81de4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.166] wcscat (in: _Dest=0x81de4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.166] wcscat (in: _Dest=0x81de4e8, _Source="ONINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" [0190.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0190.167] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3584900, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3584900, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x1bf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.IDX_DLL", cAlternateFileName="ONINTL~2.IDX")) returned 1 [0190.167] wcscmp (_String1="ONINTL.REST.IDX_DLL", _String2=".") returned 1 [0190.167] wcscmp (_String1="ONINTL.REST.IDX_DLL", _String2="..") returned 1 [0190.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0190.167] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.167] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.167] wcscat (in: _Dest=0x81de8d8, _Source="ONINTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" [0190.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0190.168] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a787200, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a787200, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0190.168] wcscmp (_String1="ORGCH.VRD", _String2=".") returned 1 [0190.168] wcscmp (_String1="ORGCH.VRD", _String2="..") returned 1 [0190.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b8d8 [0190.169] wcscpy (in: _Dest=0x831b8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.169] wcscat (in: _Dest=0x831b8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.169] wcscat (in: _Dest=0x831b8d8, _Source="ORGCH.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" [0190.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa8 [0190.170] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xc9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0190.170] wcscmp (_String1="ORGCHART.VSL", _String2=".") returned 1 [0190.170] wcscmp (_String1="ORGCHART.VSL", _String2="..") returned 1 [0190.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2fda8 [0190.170] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.170] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.170] wcscat (in: _Dest=0x3f2fda8, _Source="ORGCHART.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" [0190.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa4 [0190.171] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a787200, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a787200, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0190.171] wcscmp (_String1="ORGPOS.VRD", _String2=".") returned 1 [0190.171] wcscmp (_String1="ORGPOS.VRD", _String2="..") returned 1 [0190.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831aed8 [0190.171] wcscpy (in: _Dest=0x831aed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.171] wcscat (in: _Dest=0x831aed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.171] wcscat (in: _Dest=0x831aed8, _Source="ORGPOS.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" [0190.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831aed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a30 [0190.190] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xedb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0190.190] wcscmp (_String1="ORGWIZ.VSL", _String2=".") returned 1 [0190.190] wcscmp (_String1="ORGWIZ.VSL", _String2="..") returned 1 [0190.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831b9d8 [0190.191] wcscpy (in: _Dest=0x831b9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.191] wcscat (in: _Dest=0x831b9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.191] wcscat (in: _Dest=0x831b9d8, _Source="ORGWIZ.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" [0190.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a90 [0191.191] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c42600, ftCreationTime.dwHighDateTime=0x1cac4c5, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55c42600, ftLastWriteTime.dwHighDateTime=0x1cac4c5, nFileSizeHigh=0x0, nFileSizeLow=0x4790, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0191.191] wcscmp (_String1="ospintl.dll", _String2=".") returned 1 [0191.191] wcscmp (_String1="ospintl.dll", _String2="..") returned 1 [0191.191] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c12100, ftCreationTime.dwHighDateTime=0x1c67f3f, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82c12100, ftLastWriteTime.dwHighDateTime=0x1c67f3f, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0191.191] wcscmp (_String1="OUTFORM.DAT", _String2=".") returned 1 [0191.191] wcscmp (_String1="OUTFORM.DAT", _String2="..") returned 1 [0191.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b3d8 [0191.191] wcscpy (in: _Dest=0x831b3d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.191] wcscat (in: _Dest=0x831b3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.191] wcscat (in: _Dest=0x831b3d8, _Source="OUTFORM.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" [0192.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae0 [0192.944] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f584200, ftCreationTime.dwHighDateTime=0x1ca0fb6, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f584200, ftLastWriteTime.dwHighDateTime=0x1ca0fb6, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLBAR.INF", cAlternateFileName="")) returned 1 [0192.944] wcscmp (_String1="OUTLBAR.INF", _String2=".") returned 1 [0192.944] wcscmp (_String1="OUTLBAR.INF", _String2="..") returned 1 [0192.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bd58 [0192.944] wcscpy (in: _Dest=0x831bd58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.944] wcscat (in: _Dest=0x831bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.944] wcscat (in: _Dest=0x831bd58, _Source="OUTLBAR.INF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" [0192.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0192.945] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48d4c190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x645d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0192.945] wcscmp (_String1="OUTLLIBR.DLL", _String2=".") returned 1 [0192.945] wcscmp (_String1="OUTLLIBR.DLL", _String2="..") returned 1 [0192.945] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48cffed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x1d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.IDX_DLL", cAlternateFileName="OUTLLI~1.IDX")) returned 1 [0192.945] wcscmp (_String1="OUTLLIBR.DLL.IDX_DLL", _String2=".") returned 1 [0192.945] wcscmp (_String1="OUTLLIBR.DLL.IDX_DLL", _String2="..") returned 1 [0192.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2ae20 [0192.945] wcscpy (in: _Dest=0x3e2ae20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.946] wcscat (in: _Dest=0x3e2ae20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.946] wcscat (in: _Dest=0x3e2ae20, _Source="OUTLLIBR.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" [0192.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ae20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c88 [0192.947] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48d722f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x46f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.IDX_DLL", cAlternateFileName="OUTLLI~2.IDX")) returned 1 [0192.947] wcscmp (_String1="OUTLLIBR.REST.IDX_DLL", _String2=".") returned 1 [0192.947] wcscmp (_String1="OUTLLIBR.REST.IDX_DLL", _String2="..") returned 1 [0192.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b968 [0192.947] wcscpy (in: _Dest=0x3e2b968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.947] wcscat (in: _Dest=0x3e2b968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.947] wcscat (in: _Dest=0x3e2b968, _Source="OUTLLIBR.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" [0192.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8c [0192.948] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d430700, ftCreationTime.dwHighDateTime=0x1ca8f7c, ftLastAccessTime.dwLowDateTime=0x48de4710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d430700, ftLastWriteTime.dwHighDateTime=0x1ca8f7c, nFileSizeHigh=0x0, nFileSizeLow=0x6aa3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV.HXS", cAlternateFileName="OUTLOO~1.HXS")) returned 1 [0192.949] wcscmp (_String1="OUTLOOK.DEV.HXS", _String2=".") returned 1 [0192.949] wcscmp (_String1="OUTLOOK.DEV.HXS", _String2="..") returned 1 [0192.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f968 [0192.949] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.949] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.949] wcscat (in: _Dest=0x3f2f968, _Source="OUTLOOK.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" [0192.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a20 [0192.950] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXC", cAlternateFileName="OUTLOO~1.HXC")) returned 1 [0192.950] wcscmp (_String1="OUTLOOK.DEV_COL.HXC", _String2=".") returned 1 [0192.950] wcscmp (_String1="OUTLOOK.DEV_COL.HXC", _String2="..") returned 1 [0192.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de698 [0192.950] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.950] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.950] wcscat (in: _Dest=0x81de698, _Source="OUTLOOK.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" [0192.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0192.952] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f12400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4f12400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXT", cAlternateFileName="OUTLOO~1.HXT")) returned 1 [0192.952] wcscmp (_String1="OUTLOOK.DEV_COL.HXT", _String2=".") returned 1 [0192.952] wcscmp (_String1="OUTLOOK.DEV_COL.HXT", _String2="..") returned 1 [0192.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def98 [0192.952] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.952] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.952] wcscat (in: _Dest=0x81def98, _Source="OUTLOOK.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" [0192.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0192.953] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f12400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4f12400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_F_COL.HXK", cAlternateFileName="OUTLOO~1.HXK")) returned 1 [0192.953] wcscmp (_String1="OUTLOOK.DEV_F_COL.HXK", _String2=".") returned 1 [0192.953] wcscmp (_String1="OUTLOOK.DEV_F_COL.HXK", _String2="..") returned 1 [0192.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b7a0 [0192.953] wcscpy (in: _Dest=0x3e2b7a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.953] wcscat (in: _Dest=0x3e2b7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.954] wcscat (in: _Dest=0x3e2b7a0, _Source="OUTLOOK.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" [0192.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0192.955] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f12400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4f12400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_K_COL.HXK", cAlternateFileName="OUTLOO~2.HXK")) returned 1 [0192.955] wcscmp (_String1="OUTLOOK.DEV_K_COL.HXK", _String2=".") returned 1 [0192.955] wcscmp (_String1="OUTLOOK.DEV_K_COL.HXK", _String2="..") returned 1 [0192.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a078 [0192.955] wcscpy (in: _Dest=0x3e2a078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.955] wcscat (in: _Dest=0x3e2a078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.955] wcscat (in: _Dest=0x3e2a078, _Source="OUTLOOK.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" [0192.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0192.957] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9aa9500, ftCreationTime.dwHighDateTime=0x1ca9620, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9aa9500, ftLastWriteTime.dwHighDateTime=0x1ca9620, nFileSizeHigh=0x0, nFileSizeLow=0x13a57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0192.957] wcscmp (_String1="OUTLOOK.HOL", _String2=".") returned 1 [0192.957] wcscmp (_String1="OUTLOOK.HOL", _String2="..") returned 1 [0192.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b4d8 [0192.957] wcscpy (in: _Dest=0x831b4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.957] wcscat (in: _Dest=0x831b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.957] wcscat (in: _Dest=0x831b4d8, _Source="OUTLOOK.HOL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" [0192.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2578 [0192.958] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24130d00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24130d00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0192.958] wcscmp (_String1="OUTLOOK.HXS", _String2=".") returned 1 [0192.958] wcscmp (_String1="OUTLOOK.HXS", _String2="..") returned 1 [0192.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bdd8 [0192.958] wcscpy (in: _Dest=0x831bdd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.958] wcscat (in: _Dest=0x831bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.958] wcscat (in: _Dest=0x831bdd8, _Source="OUTLOOK.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" [0192.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0192.960] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="OUTLOO~2.HXC")) returned 1 [0192.960] wcscmp (_String1="OUTLOOK_COL.HXC", _String2=".") returned 1 [0192.960] wcscmp (_String1="OUTLOOK_COL.HXC", _String2="..") returned 1 [0192.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0192.960] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.960] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.960] wcscat (in: _Dest=0x3f310c8, _Source="OUTLOOK_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" [0192.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca4 [0192.961] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15d9d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe15d9d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="OUTLOO~2.HXT")) returned 1 [0192.961] wcscmp (_String1="OUTLOOK_COL.HXT", _String2=".") returned 1 [0192.962] wcscmp (_String1="OUTLOOK_COL.HXT", _String2="..") returned 1 [0192.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f306b0 [0192.962] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.962] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.962] wcscat (in: _Dest=0x3f306b0, _Source="OUTLOOK_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" [0192.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a24 [0192.963] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15d9d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe15d9d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="OUTLOO~3.HXK")) returned 1 [0192.963] wcscmp (_String1="OUTLOOK_F_COL.HXK", _String2=".") returned 1 [0192.963] wcscmp (_String1="OUTLOOK_F_COL.HXK", _String2="..") returned 1 [0192.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0192.963] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.963] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.963] wcscat (in: _Dest=0x81de968, _Source="OUTLOOK_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" [0192.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0192.965] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15d9d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe15d9d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="OUTLOO~4.HXK")) returned 1 [0192.985] wcscmp (_String1="OUTLOOK_K_COL.HXK", _String2=".") returned 1 [0192.985] wcscmp (_String1="OUTLOOK_K_COL.HXK", _String2="..") returned 1 [0192.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df268 [0192.986] wcscpy (in: _Dest=0x81df268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.986] wcscat (in: _Dest=0x81df268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.986] wcscat (in: _Dest=0x81df268, _Source="OUTLOOK_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" [0192.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0192.987] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dcf2c00, ftCreationTime.dwHighDateTime=0x1c5b4a9, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9dcf2c00, ftLastWriteTime.dwHighDateTime=0x1c5b4a9, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0192.987] wcscmp (_String1="OUTLPERF.H", _String2=".") returned 1 [0192.987] wcscmp (_String1="OUTLPERF.H", _String2="..") returned 1 [0192.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831b258 [0192.987] wcscpy (in: _Dest=0x831b258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.987] wcscat (in: _Dest=0x831b258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.987] wcscat (in: _Dest=0x831b258, _Source="OUTLPERF.H" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" [0192.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c98 [0192.989] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dcf2c00, ftCreationTime.dwHighDateTime=0x1c5b4a9, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9dcf2c00, ftLastWriteTime.dwHighDateTime=0x1c5b4a9, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0192.989] wcscmp (_String1="OUTLPERF.INI", _String2=".") returned 1 [0192.989] wcscmp (_String1="OUTLPERF.INI", _String2="..") returned 1 [0192.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f311d8 [0192.989] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.989] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.989] wcscat (in: _Dest=0x3f311d8, _Source="OUTLPERF.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" [0192.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0192.990] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x1f360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0192.990] wcscmp (_String1="OUTLWVW.DLL", _String2=".") returned 1 [0192.991] wcscmp (_String1="OUTLWVW.DLL", _String2="..") returned 1 [0192.991] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19894c00, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x19894c00, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.IDX_DLL", cAlternateFileName="OUTLWV~1.IDX")) returned 1 [0192.991] wcscmp (_String1="OUTLWVW.DLL.IDX_DLL", _String2=".") returned 1 [0192.991] wcscmp (_String1="OUTLWVW.DLL.IDX_DLL", _String2="..") returned 1 [0192.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df388 [0192.991] wcscpy (in: _Dest=0x81df388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.991] wcscat (in: _Dest=0x81df388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.991] wcscat (in: _Dest=0x81df388, _Source="OUTLWVW.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" [0192.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0192.993] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d708c00, ftCreationTime.dwHighDateTime=0x1c65123, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d708c00, ftLastWriteTime.dwHighDateTime=0x1c65123, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSHLP10.CHM", cAlternateFileName="")) returned 1 [0192.993] wcscmp (_String1="OWSHLP10.CHM", _String2=".") returned 1 [0192.993] wcscmp (_String1="OWSHLP10.CHM", _String2="..") returned 1 [0192.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30e20 [0192.993] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.993] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.993] wcscat (in: _Dest=0x3f30e20, _Source="OWSHLP10.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" [0192.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0192.994] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0192.994] wcscmp (_String1="PASSPORT.CSS", _String2=".") returned 1 [0192.994] wcscmp (_String1="PASSPORT.CSS", _String2="..") returned 1 [0192.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2fe30 [0192.995] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.995] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.995] wcscat (in: _Dest=0x3f2fe30, _Source="PASSPORT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" [0192.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0192.997] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0192.997] wcscmp (_String1="PASTEL.CSS", _String2=".") returned 1 [0192.997] wcscmp (_String1="PASTEL.CSS", _String2="..") returned 1 [0192.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831bc58 [0192.997] wcscpy (in: _Dest=0x831bc58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.997] wcscat (in: _Dest=0x831bc58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.997] wcscat (in: _Dest=0x831bc58, _Source="PASTEL.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" [0192.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0194.089] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0194.089] wcscmp (_String1="PE.VSL", _String2=".") returned 1 [0194.090] wcscmp (_String1="PE.VSL", _String2="..") returned 1 [0194.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68768 [0194.090] wcscpy (in: _Dest=0x3e68768, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0194.090] wcscat (in: _Dest=0x3e68768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0194.090] wcscat (in: _Dest=0x3e68768, _Source="PE.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" [0195.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0195.706] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b023800, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa51aa750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9b023800, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0195.706] wcscmp (_String1="PIPELINE.VRD", _String2=".") returned 1 [0195.706] wcscmp (_String1="PIPELINE.VRD", _String2="..") returned 1 [0195.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf228 [0195.706] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.706] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.706] wcscat (in: _Dest=0x81bf228, _Source="PIPELINE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" [0195.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0195.707] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb53c9e00, ftCreationTime.dwHighDateTime=0x1cb722b, ftLastAccessTime.dwLowDateTime=0xeb649610, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb53c9e00, ftLastWriteTime.dwHighDateTime=0x1cb722b, nFileSizeHigh=0x0, nFileSizeLow=0x33a380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0195.707] wcscmp (_String1="PJINTL.DLL", _String2=".") returned 1 [0195.707] wcscmp (_String1="PJINTL.DLL", _String2="..") returned 1 [0195.707] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f29f800, ftCreationTime.dwHighDateTime=0x1cb707d, ftLastAccessTime.dwLowDateTime=0xeb5fd350, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x5f29f800, ftLastWriteTime.dwHighDateTime=0x1cb707d, nFileSizeHigh=0x0, nFileSizeLow=0x25780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTLC.DLL", cAlternateFileName="")) returned 1 [0195.707] wcscmp (_String1="PJINTLC.DLL", _String2=".") returned 1 [0195.707] wcscmp (_String1="PJINTLC.DLL", _String2="..") returned 1 [0195.707] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0195.707] wcscmp (_String1="PMENURES.DLL", _String2=".") returned 1 [0195.708] wcscmp (_String1="PMENURES.DLL", _String2="..") returned 1 [0195.708] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25443a00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25443a00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x4cf264, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV.HXS", cAlternateFileName="POWERP~1.HXS")) returned 1 [0195.708] wcscmp (_String1="POWERPNT.DEV.HXS", _String2=".") returned 1 [0195.708] wcscmp (_String1="POWERPNT.DEV.HXS", _String2="..") returned 1 [0195.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f345f0 [0195.708] wcscpy (in: _Dest=0x3f345f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.708] wcscat (in: _Dest=0x3f345f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.708] wcscat (in: _Dest=0x3f345f0, _Source="POWERPNT.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" [0195.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f345f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0195.709] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXC", cAlternateFileName="POWERP~1.HXC")) returned 1 [0195.709] wcscmp (_String1="POWERPNT.DEV_COL.HXC", _String2=".") returned 1 [0195.709] wcscmp (_String1="POWERPNT.DEV_COL.HXC", _String2="..") returned 1 [0195.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a078 [0195.709] wcscpy (in: _Dest=0x3e2a078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.709] wcscat (in: _Dest=0x3e2a078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.709] wcscat (in: _Dest=0x3e2a078, _Source="POWERPNT.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" [0195.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2960 [0195.710] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec183200, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec183200, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXT", cAlternateFileName="POWERP~1.HXT")) returned 1 [0195.710] wcscmp (_String1="POWERPNT.DEV_COL.HXT", _String2=".") returned 1 [0195.710] wcscmp (_String1="POWERPNT.DEV_COL.HXT", _String2="..") returned 1 [0195.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2b7a0 [0195.710] wcscpy (in: _Dest=0x3e2b7a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.710] wcscat (in: _Dest=0x3e2b7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.710] wcscat (in: _Dest=0x3e2b7a0, _Source="POWERPNT.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" [0195.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0195.711] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec183200, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec183200, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_F_COL.HXK", cAlternateFileName="POWERP~1.HXK")) returned 1 [0195.711] wcscmp (_String1="POWERPNT.DEV_F_COL.HXK", _String2=".") returned 1 [0195.711] wcscmp (_String1="POWERPNT.DEV_F_COL.HXK", _String2="..") returned 1 [0195.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2b968 [0195.711] wcscpy (in: _Dest=0x3e2b968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.711] wcscat (in: _Dest=0x3e2b968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.711] wcscat (in: _Dest=0x3e2b968, _Source="POWERPNT.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" [0195.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0195.712] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec183200, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec183200, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_K_COL.HXK", cAlternateFileName="POWERP~2.HXK")) returned 1 [0195.712] wcscmp (_String1="POWERPNT.DEV_K_COL.HXK", _String2=".") returned 1 [0195.712] wcscmp (_String1="POWERPNT.DEV_K_COL.HXK", _String2="..") returned 1 [0195.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2ae20 [0195.712] wcscpy (in: _Dest=0x3e2ae20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.712] wcscat (in: _Dest=0x3e2ae20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.713] wcscat (in: _Dest=0x3e2ae20, _Source="POWERPNT.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" [0195.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ae20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2904 [0195.713] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x755fa500, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x755fa500, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x68013d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0195.713] wcscmp (_String1="POWERPNT.HXS", _String2=".") returned 1 [0195.713] wcscmp (_String1="POWERPNT.HXS", _String2="..") returned 1 [0195.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81beab8 [0195.714] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.714] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.714] wcscat (in: _Dest=0x81beab8, _Source="POWERPNT.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" [0195.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2908 [0195.715] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="POWERP~2.HXC")) returned 1 [0195.715] wcscmp (_String1="POWERPNT_COL.HXC", _String2=".") returned 1 [0195.715] wcscmp (_String1="POWERPNT_COL.HXC", _String2="..") returned 1 [0195.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35130 [0195.715] wcscpy (in: _Dest=0x3f35130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.715] wcscat (in: _Dest=0x3f35130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.715] wcscat (in: _Dest=0x3f35130, _Source="POWERPNT_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" [0195.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f8 [0195.716] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe884ab00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe884ab00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="POWERP~2.HXT")) returned 1 [0195.716] wcscmp (_String1="POWERPNT_COL.HXT", _String2=".") returned 1 [0195.716] wcscmp (_String1="POWERPNT_COL.HXT", _String2="..") returned 1 [0195.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34950 [0195.716] wcscpy (in: _Dest=0x3f34950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.716] wcscat (in: _Dest=0x3f34950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.717] wcscat (in: _Dest=0x3f34950, _Source="POWERPNT_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" [0195.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650 [0195.718] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe884ab00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe884ab00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="POWERP~3.HXK")) returned 1 [0195.718] wcscmp (_String1="POWERPNT_F_COL.HXK", _String2=".") returned 1 [0195.718] wcscmp (_String1="POWERPNT_F_COL.HXK", _String2="..") returned 1 [0195.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34f80 [0195.718] wcscpy (in: _Dest=0x3f34f80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.718] wcscat (in: _Dest=0x3f34f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.718] wcscat (in: _Dest=0x3f34f80, _Source="POWERPNT_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" [0195.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0195.719] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe884ab00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe884ab00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="POWERP~4.HXK")) returned 1 [0195.719] wcscmp (_String1="POWERPNT_K_COL.HXK", _String2=".") returned 1 [0195.719] wcscmp (_String1="POWERPNT_K_COL.HXK", _String2="..") returned 1 [0195.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34680 [0195.719] wcscpy (in: _Dest=0x3f34680, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.720] wcscat (in: _Dest=0x3f34680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.720] wcscat (in: _Dest=0x3f34680, _Source="POWERPNT_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" [0195.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a90 [0195.721] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a76e00, ftCreationTime.dwHighDateTime=0x1cabf05, ftLastAccessTime.dwLowDateTime=0x3df15770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95a76e00, ftLastWriteTime.dwHighDateTime=0x1cabf05, nFileSizeHigh=0x0, nFileSizeLow=0x139968, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0195.721] wcscmp (_String1="PPINTL.DLL", _String2=".") returned 1 [0195.721] wcscmp (_String1="PPINTL.DLL", _String2="..") returned 1 [0195.721] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46157200, ftCreationTime.dwHighDateTime=0x1cabf06, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46157200, ftLastWriteTime.dwHighDateTime=0x1cabf06, nFileSizeHigh=0x0, nFileSizeLow=0x9580, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.IDX_DLL", cAlternateFileName="PPINTL~1.IDX")) returned 1 [0195.721] wcscmp (_String1="PPINTL.DLL.IDX_DLL", _String2=".") returned 1 [0195.721] wcscmp (_String1="PPINTL.DLL.IDX_DLL", _String2="..") returned 1 [0195.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34710 [0195.721] wcscpy (in: _Dest=0x3f34710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.721] wcscat (in: _Dest=0x3f34710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.721] wcscat (in: _Dest=0x3f34710, _Source="PPINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" [0195.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a30 [0195.722] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46157200, ftCreationTime.dwHighDateTime=0x1cabf06, ftLastAccessTime.dwLowDateTime=0x3df15770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46157200, ftLastWriteTime.dwHighDateTime=0x1cabf06, nFileSizeHigh=0x0, nFileSizeLow=0x22180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.IDX_DLL", cAlternateFileName="PPINTL~2.IDX")) returned 1 [0195.722] wcscmp (_String1="PPINTL.REST.IDX_DLL", _String2=".") returned 1 [0195.722] wcscmp (_String1="PPINTL.REST.IDX_DLL", _String2="..") returned 1 [0195.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34560 [0195.722] wcscpy (in: _Dest=0x3f34560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.722] wcscat (in: _Dest=0x3f34560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.722] wcscat (in: _Dest=0x3f34560, _Source="PPINTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" [0195.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa4 [0195.723] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0195.723] wcscmp (_String1="PRIMARY.CSS", _String2=".") returned 1 [0195.723] wcscmp (_String1="PRIMARY.CSS", _String2="..") returned 1 [0195.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831acd8 [0195.723] wcscpy (in: _Dest=0x831acd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.723] wcscat (in: _Dest=0x831acd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.723] wcscat (in: _Dest=0x831acd8, _Source="PRIMARY.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" [0195.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831acd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa8 [0195.725] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x1ff88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0195.725] wcscmp (_String1="PROPRPT.VSL", _String2=".") returned 1 [0195.725] wcscmp (_String1="PROPRPT.VSL", _String2="..") returned 1 [0195.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831afd8 [0195.725] wcscpy (in: _Dest=0x831afd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.725] wcscat (in: _Dest=0x831afd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.725] wcscat (in: _Dest=0x831afd8, _Source="PROPRPT.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" [0195.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831afd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0195.726] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b7eb00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13b7eb00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSS", cAlternateFileName="")) returned 1 [0195.726] wcscmp (_String1="PROPRPT.VSS", _String2=".") returned 1 [0195.726] wcscmp (_String1="PROPRPT.VSS", _String2="..") returned 1 [0195.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b558 [0195.726] wcscpy (in: _Dest=0x831b558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.726] wcscat (in: _Dest=0x831b558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.726] wcscat (in: _Dest=0x831b558, _Source="PROPRPT.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" [0195.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0195.727] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc57b700, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x43004370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc57b700, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0195.727] wcscmp (_String1="PROTTPLN.DOC", _String2=".") returned 1 [0195.727] wcscmp (_String1="PROTTPLN.DOC", _String2="..") returned 1 [0195.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bebc8 [0195.727] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.727] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.727] wcscat (in: _Dest=0x81bebc8, _Source="PROTTPLN.DOC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" [0195.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2884 [0195.728] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c79b100, ftCreationTime.dwHighDateTime=0x1c7e414, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c79b100, ftLastWriteTime.dwHighDateTime=0x1c7e414, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0195.728] wcscmp (_String1="PROTTPLN.PPT", _String2=".") returned 1 [0195.728] wcscmp (_String1="PROTTPLN.PPT", _String2="..") returned 1 [0195.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81beef8 [0195.728] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.728] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.728] wcscat (in: _Dest=0x81beef8, _Source="PROTTPLN.PPT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" [0195.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a58 [0195.729] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7124c00, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7124c00, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0195.729] wcscmp (_String1="PROTTPLN.XLS", _String2=".") returned 1 [0195.729] wcscmp (_String1="PROTTPLN.XLS", _String2="..") returned 1 [0195.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81beb40 [0195.729] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.730] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.730] wcscat (in: _Dest=0x81beb40, _Source="PROTTPLN.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" [0195.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a5c [0195.731] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb268a00, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x43004370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb268a00, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0201.762] wcscmp (_String1="PROTTPLV.DOC", _String2=".") returned 1 [0201.762] wcscmp (_String1="PROTTPLV.DOC", _String2="..") returned 1 [0201.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f308d0 [0201.762] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.762] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.762] wcscat (in: _Dest=0x3f308d0, _Source="PROTTPLV.DOC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" [0202.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cfc [0202.900] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c79b100, ftCreationTime.dwHighDateTime=0x1c7e414, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c79b100, ftLastWriteTime.dwHighDateTime=0x1c7e414, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0202.900] wcscmp (_String1="PROTTPLV.PPT", _String2=".") returned 1 [0202.900] wcscmp (_String1="PROTTPLV.PPT", _String2="..") returned 1 [0202.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ec50 [0202.900] wcscpy (in: _Dest=0x3e1ec50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.900] wcscat (in: _Dest=0x3e1ec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.900] wcscat (in: _Dest=0x3e1ec50, _Source="PROTTPLV.PPT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" [0202.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x289c [0202.901] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24d9800, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe24d9800, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0202.901] wcscmp (_String1="PROTTPLV.XLS", _String2=".") returned 1 [0202.901] wcscmp (_String1="PROTTPLV.XLS", _String2="..") returned 1 [0202.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fbb8 [0202.901] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.901] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.901] wcscat (in: _Dest=0x3e1fbb8, _Source="PROTTPLV.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" [0202.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b58 [0202.902] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1cba00, ftCreationTime.dwHighDateTime=0x1c5c9e6, ftLastAccessTime.dwLowDateTime=0x554f36d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f1cba00, ftLastWriteTime.dwHighDateTime=0x1c5c9e6, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0202.902] wcscmp (_String1="PSRCHKEY.DAT", _String2=".") returned 1 [0202.902] wcscmp (_String1="PSRCHKEY.DAT", _String2="..") returned 1 [0202.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ef80 [0202.903] wcscpy (in: _Dest=0x3e1ef80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.903] wcscat (in: _Dest=0x3e1ef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.903] wcscat (in: _Dest=0x3e1ef80, _Source="PSRCHKEY.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" [0202.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26bc [0202.904] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8381d00, ftCreationTime.dwHighDateTime=0x1c56dc6, ftLastAccessTime.dwLowDateTime=0x55519830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8381d00, ftLastWriteTime.dwHighDateTime=0x1c56dc6, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0202.904] wcscmp (_String1="PSRCHLEX.DAT", _String2=".") returned 1 [0202.904] wcscmp (_String1="PSRCHLEX.DAT", _String2="..") returned 1 [0202.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1f228 [0202.904] wcscpy (in: _Dest=0x3e1f228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.904] wcscat (in: _Dest=0x3e1f228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.904] wcscat (in: _Dest=0x3e1f228, _Source="PSRCHLEX.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" [0202.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0202.905] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8381d00, ftCreationTime.dwHighDateTime=0x1c56dc6, ftLastAccessTime.dwLowDateTime=0x55519830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8381d00, ftLastWriteTime.dwHighDateTime=0x1c56dc6, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0202.905] wcscmp (_String1="PSRCHLTS.DAT", _String2=".") returned 1 [0202.905] wcscmp (_String1="PSRCHLTS.DAT", _String2="..") returned 1 [0202.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bee70 [0202.905] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.905] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.905] wcscat (in: _Dest=0x81bee70, _Source="PSRCHLTS.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" [0202.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0202.906] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8381d00, ftCreationTime.dwHighDateTime=0x1c56dc6, ftLastAccessTime.dwLowDateTime=0x55519830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8381d00, ftLastWriteTime.dwHighDateTime=0x1c56dc6, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0202.906] wcscmp (_String1="PSRCHPHN.DAT", _String2=".") returned 1 [0202.906] wcscmp (_String1="PSRCHPHN.DAT", _String2="..") returned 1 [0202.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfd50 [0202.906] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.906] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.907] wcscat (in: _Dest=0x81bfd50, _Source="PSRCHPHN.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" [0202.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0202.907] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304de700, ftCreationTime.dwHighDateTime=0x1c5c9e6, ftLastAccessTime.dwLowDateTime=0x555b1db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x304de700, ftLastWriteTime.dwHighDateTime=0x1c5c9e6, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0202.908] wcscmp (_String1="PSRCHSRN.DAT", _String2=".") returned 1 [0202.908] wcscmp (_String1="PSRCHSRN.DAT", _String2="..") returned 1 [0202.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfcc8 [0202.908] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.908] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.908] wcscat (in: _Dest=0x81bfcc8, _Source="PSRCHSRN.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" [0202.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0202.909] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x6a6568, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0202.909] wcscmp (_String1="PUB6INTL.DLL", _String2=".") returned 1 [0202.909] wcscmp (_String1="PUB6INTL.DLL", _String2="..") returned 1 [0202.909] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e81c00, ftCreationTime.dwHighDateTime=0x1cab82f, ftLastAccessTime.dwLowDateTime=0x6223d230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4e81c00, ftLastWriteTime.dwHighDateTime=0x1cab82f, nFileSizeHigh=0x0, nFileSizeLow=0x10980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.IDX_DLL", cAlternateFileName="PUB6IN~1.IDX")) returned 1 [0202.909] wcscmp (_String1="PUB6INTL.DLL.IDX_DLL", _String2=".") returned 1 [0202.909] wcscmp (_String1="PUB6INTL.DLL.IDX_DLL", _String2="..") returned 1 [0202.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e29f48 [0202.909] wcscpy (in: _Dest=0x3e29f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.909] wcscat (in: _Dest=0x3e29f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.909] wcscat (in: _Dest=0x3e29f48, _Source="PUB6INTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" [0202.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e29f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0202.910] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6194900, ftCreationTime.dwHighDateTime=0x1cab82f, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc6194900, ftLastWriteTime.dwHighDateTime=0x1cab82f, nFileSizeHigh=0x0, nFileSizeLow=0x41b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.IDX_DLL", cAlternateFileName="PUB6IN~2.IDX")) returned 1 [0202.911] wcscmp (_String1="PUB6INTL.REST.IDX_DLL", _String2=".") returned 1 [0202.911] wcscmp (_String1="PUB6INTL.REST.IDX_DLL", _String2="..") returned 1 [0202.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bcf8 [0202.911] wcscpy (in: _Dest=0x3e2bcf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.911] wcscat (in: _Dest=0x3e2bcf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.911] wcscat (in: _Dest=0x3e2bcf8, _Source="PUB6INTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" [0202.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0202.912] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c73f00, ftCreationTime.dwHighDateTime=0x1c92e11, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c73f00, ftLastWriteTime.dwHighDateTime=0x1c92e11, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0202.912] wcscmp (_String1="PUBCOLOR.SCM", _String2=".") returned 1 [0202.912] wcscmp (_String1="PUBCOLOR.SCM", _String2="..") returned 1 [0202.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfbb8 [0202.912] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.912] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.912] wcscat (in: _Dest=0x81bfbb8, _Source="PUBCOLOR.SCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" [0202.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0202.913] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620741b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62347bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0202.913] wcscmp (_String1="PUBFTSCM", _String2=".") returned 1 [0202.913] wcscmp (_String1="PUBFTSCM", _String2="..") returned 1 [0202.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5308 [0202.913] wcscpy (in: _Dest=0x3dc5308, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.913] wcscat (in: _Dest=0x3dc5308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.913] wcscat (in: _Dest=0x3dc5308, _Source="PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0202.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0202.914] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x621589f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x624062b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1 [0202.914] wcscmp (_String1="PUBSPAPR", _String2=".") returned 1 [0202.915] wcscmp (_String1="PUBSPAPR", _String2="..") returned 1 [0202.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4488 [0202.915] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.915] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.915] wcscat (in: _Dest=0x3dc4488, _Source="PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0202.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0202.916] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb05b00, ftCreationTime.dwHighDateTime=0x1ca9bec, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7cb05b00, ftLastWriteTime.dwHighDateTime=0x1ca9bec, nFileSizeHigh=0x0, nFileSizeLow=0x29d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1 [0202.916] wcscmp (_String1="PUBWZINT.DLL", _String2=".") returned 1 [0202.916] wcscmp (_String1="PUBWZINT.DLL", _String2="..") returned 1 [0202.916] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e1a500, ftCreationTime.dwHighDateTime=0x1ca9bed, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50e1a500, ftLastWriteTime.dwHighDateTime=0x1ca9bed, nFileSizeHigh=0x0, nFileSizeLow=0x2a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.IDX_DLL", cAlternateFileName="PUBWZI~1.IDX")) returned 1 [0202.916] wcscmp (_String1="PUBWZINT.REST.IDX_DLL", _String2=".") returned 1 [0202.916] wcscmp (_String1="PUBWZINT.REST.IDX_DLL", _String2="..") returned 1 [0202.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b1b0 [0202.916] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.916] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.916] wcscat (in: _Dest=0x3e2b1b0, _Source="PUBWZINT.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" [0202.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1adc [0202.918] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b67b00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b67b00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x14560, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRYINT32.DLL", cAlternateFileName="")) returned 1 [0202.918] wcscmp (_String1="QRYINT32.DLL", _String2=".") returned 1 [0202.918] wcscmp (_String1="QRYINT32.DLL", _String2="..") returned 1 [0202.918] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63ef3b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickStyles", cAlternateFileName="QUICKS~1")) returned 1 [0202.918] wcscmp (_String1="QuickStyles", _String2=".") returned 1 [0202.918] wcscmp (_String1="QuickStyles", _String2="..") returned 1 [0202.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4b88 [0202.918] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.918] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.918] wcscat (in: _Dest=0x3dc4b88, _Source="QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0202.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0202.919] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1 [0202.919] wcscmp (_String1="ReviewRouting_Init.xsn", _String2=".") returned 1 [0202.919] wcscmp (_String1="ReviewRouting_Init.xsn", _String2="..") returned 1 [0202.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2b378 [0202.919] wcscpy (in: _Dest=0x3e2b378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.919] wcscat (in: _Dest=0x3e2b378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.920] wcscat (in: _Dest=0x3e2b378, _Source="ReviewRouting_Init.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" [0202.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0202.921] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x482d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="REVIEW~2.XSN")) returned 1 [0202.921] wcscmp (_String1="ReviewRouting_Review.xsn", _String2=".") returned 1 [0202.921] wcscmp (_String1="ReviewRouting_Review.xsn", _String2="..") returned 1 [0202.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dccc8 [0202.921] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.921] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.921] wcscat (in: _Dest=0x81dccc8, _Source="ReviewRouting_Review.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" [0202.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0202.922] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1 [0202.922] wcscmp (_String1="ROSE.CSS", _String2=".") returned 1 [0202.922] wcscmp (_String1="ROSE.CSS", _String2="..") returned 1 [0202.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc3f88 [0202.923] wcscpy (in: _Dest=0x3dc3f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.923] wcscat (in: _Dest=0x3dc3f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.923] wcscat (in: _Dest=0x3dc3f88, _Source="ROSE.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" [0202.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0202.924] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57088600, ftCreationTime.dwHighDateTime=0x1be1e3c, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57088600, ftLastWriteTime.dwHighDateTime=0x1be1e3c, nFileSizeHigh=0x0, nFileSizeLow=0xc06d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPLBRF35.CHM", cAlternateFileName="")) returned 1 [0202.924] wcscmp (_String1="RPLBRF35.CHM", _String2=".") returned 1 [0202.924] wcscmp (_String1="RPLBRF35.CHM", _String2="..") returned 1 [0202.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf118 [0202.924] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.924] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.924] wcscat (in: _Dest=0x81bf118, _Source="RPLBRF35.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" [0202.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2654 [0202.925] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xa568, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1 [0202.925] wcscmp (_String1="SAVASWEB.VSL", _String2=".") returned 1 [0202.925] wcscmp (_String1="SAVASWEB.VSL", _String2="..") returned 1 [0202.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0080 [0202.925] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.925] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.925] wcscat (in: _Dest=0x81c0080, _Source="SAVASWEB.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" [0202.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0202.926] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a69400, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27a69400, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x61204, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1 [0202.927] wcscmp (_String1="SETLANG.HXS", _String2=".") returned 1 [0202.927] wcscmp (_String1="SETLANG.HXS", _String2="..") returned 1 [0202.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5a08 [0202.927] wcscpy (in: _Dest=0x3dc5a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.927] wcscat (in: _Dest=0x3dc5a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.927] wcscat (in: _Dest=0x3dc5a08, _Source="SETLANG.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" [0202.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0202.928] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="SETLAN~1.HXC")) returned 1 [0202.928] wcscmp (_String1="SETLANG_COL.HXC", _String2=".") returned 1 [0202.928] wcscmp (_String1="SETLANG_COL.HXC", _String2="..") returned 1 [0202.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf910 [0202.928] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.928] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.928] wcscat (in: _Dest=0x81bf910, _Source="SETLANG_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" [0202.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a38 [0202.929] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefabb900, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefabb900, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXT", cAlternateFileName="SETLAN~1.HXT")) returned 1 [0202.929] wcscmp (_String1="SETLANG_COL.HXT", _String2=".") returned 1 [0202.929] wcscmp (_String1="SETLANG_COL.HXT", _String2="..") returned 1 [0202.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfe60 [0202.929] wcscpy (in: _Dest=0x81bfe60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.929] wcscat (in: _Dest=0x81bfe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.929] wcscat (in: _Dest=0x81bfe60, _Source="SETLANG_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" [0202.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba0 [0202.930] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefabb900, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefabb900, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_F_COL.HXK", cAlternateFileName="SETLAN~1.HXK")) returned 1 [0202.930] wcscmp (_String1="SETLANG_F_COL.HXK", _String2=".") returned 1 [0202.930] wcscmp (_String1="SETLANG_F_COL.HXK", _String2="..") returned 1 [0202.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0202.930] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.931] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.931] wcscat (in: _Dest=0x81de7b8, _Source="SETLANG_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" [0202.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0202.932] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefabb900, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefabb900, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_K_COL.HXK", cAlternateFileName="SETLAN~2.HXK")) returned 1 [0202.932] wcscmp (_String1="SETLANG_K_COL.HXK", _String2=".") returned 1 [0202.932] wcscmp (_String1="SETLANG_K_COL.HXK", _String2="..") returned 1 [0202.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df2f8 [0202.932] wcscpy (in: _Dest=0x81df2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.932] wcscat (in: _Dest=0x81df2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.932] wcscat (in: _Dest=0x81df2f8, _Source="SETLANG_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" [0202.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b8 [0202.933] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x10d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL", cAlternateFileName="")) returned 1 [0202.933] wcscmp (_String1="SGRES.DLL", _String2=".") returned 1 [0202.933] wcscmp (_String1="SGRES.DLL", _String2="..") returned 1 [0202.933] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe948f600, ftCreationTime.dwHighDateTime=0x1cab839, ftLastAccessTime.dwLowDateTime=0xa5431eb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe948f600, ftLastWriteTime.dwHighDateTime=0x1cab839, nFileSizeHigh=0x0, nFileSizeLow=0x2d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.IDX_DLL", cAlternateFileName="SGRESD~1.IDX")) returned 1 [0202.933] wcscmp (_String1="SGRES.DLL.IDX_DLL", _String2=".") returned 1 [0202.933] wcscmp (_String1="SGRES.DLL.IDX_DLL", _String2="..") returned 1 [0202.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df388 [0202.933] wcscpy (in: _Dest=0x81df388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.933] wcscat (in: _Dest=0x81df388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.933] wcscat (in: _Dest=0x81df388, _Source="SGRES.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" [0202.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0202.934] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x8d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.VSL", cAlternateFileName="")) returned 1 [0202.934] wcscmp (_String1="SHAPNUM.VSL", _String2=".") returned 1 [0202.934] wcscmp (_String1="SHAPNUM.VSL", _String2="..") returned 1 [0202.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5808 [0202.934] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.934] wcscat (in: _Dest=0x3dc5808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.934] wcscat (in: _Dest=0x3dc5808, _Source="SHAPNUM.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" [0202.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0202.936] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.CSS", cAlternateFileName="")) returned 1 [0202.936] wcscmp (_String1="SKY.CSS", _String2=".") returned 1 [0202.936] wcscmp (_String1="SKY.CSS", _String2="..") returned 1 [0202.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32430 [0202.936] wcscpy (in: _Dest=0x3f32430, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0202.936] wcscat (in: _Dest=0x3f32430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0202.936] wcscat (in: _Dest=0x3f32430, _Source="SKY.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" [0202.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0203.102] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3756fd00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3756fd00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x2380, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLINTL.DLL", cAlternateFileName="")) returned 1 [0203.102] wcscmp (_String1="SLINTL.DLL", _String2=".") returned 1 [0203.102] wcscmp (_String1="SLINTL.DLL", _String2="..") returned 1 [0203.102] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e700, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x931e700, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.VSL", cAlternateFileName="")) returned 1 [0205.703] wcscmp (_String1="SMIGRATE.VSL", _String2=".") returned 1 [0205.703] wcscmp (_String1="SMIGRATE.VSL", _String2="..") returned 1 [0205.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30958 [0205.704] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.704] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.704] wcscat (in: _Dest=0x3f30958, _Source="SMIGRATE.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" [0206.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0206.104] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1dc100, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff1dc100, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x4e5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTORRES.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1 [0206.104] wcscmp (_String1="SOCIALCONNECTORRES.DLL", _String2=".") returned 1 [0206.104] wcscmp (_String1="SOCIALCONNECTORRES.DLL", _String2="..") returned 1 [0206.104] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5330700, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5330700, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x644, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE.VRD", cAlternateFileName="")) returned 1 [0206.104] wcscmp (_String1="SPACE.VRD", _String2=".") returned 1 [0206.104] wcscmp (_String1="SPACE.VRD", _String2="..") returned 1 [0206.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3e88 [0206.104] wcscpy (in: _Dest=0x3dc3e88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.104] wcscat (in: _Dest=0x3dc3e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.104] wcscat (in: _Dest=0x3dc3e88, _Source="SPACE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" [0206.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0206.105] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.CSS", cAlternateFileName="")) returned 1 [0206.105] wcscmp (_String1="SPRING.CSS", _String2=".") returned 1 [0206.105] wcscmp (_String1="SPRING.CSS", _String2="..") returned 1 [0206.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4188 [0206.105] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.105] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.106] wcscat (in: _Dest=0x3dc4188, _Source="SPRING.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" [0206.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0206.106] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPS.CSS", cAlternateFileName="")) returned 1 [0206.106] wcscmp (_String1="SPS.CSS", _String2=".") returned 1 [0206.107] wcscmp (_String1="SPS.CSS", _String2="..") returned 1 [0206.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68768 [0206.107] wcscpy (in: _Dest=0x3e68768, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.107] wcscat (in: _Dest=0x3e68768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.107] wcscat (in: _Dest=0x3e68768, _Source="SPS.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" [0206.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0206.108] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STEEL.CSS", cAlternateFileName="")) returned 1 [0206.108] wcscmp (_String1="STEEL.CSS", _String2=".") returned 1 [0206.108] wcscmp (_String1="STEEL.CSS", _String2="..") returned 1 [0206.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5808 [0206.108] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.108] wcscat (in: _Dest=0x3dc5808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.108] wcscat (in: _Dest=0x3dc5808, _Source="STEEL.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" [0206.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0206.109] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc836ff00, ftCreationTime.dwHighDateTime=0x1ca65d4, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc836ff00, ftLastWriteTime.dwHighDateTime=0x1ca65d4, nFileSizeHigh=0x0, nFileSizeLow=0x69d1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.CHM", cAlternateFileName="")) returned 1 [0206.109] wcscmp (_String1="STSLIST.CHM", _String2=".") returned 1 [0206.109] wcscmp (_String1="STSLIST.CHM", _String2="..") returned 1 [0206.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5a08 [0206.109] wcscpy (in: _Dest=0x3dc5a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.109] wcscat (in: _Dest=0x3dc5a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.109] wcscat (in: _Dest=0x3dc5a08, _Source="STSLIST.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" [0206.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0206.110] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47b600, ftCreationTime.dwHighDateTime=0x1cab90d, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce47b600, ftLastWriteTime.dwHighDateTime=0x1cab90d, nFileSizeHigh=0x0, nFileSizeLow=0x15990, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLISTI.DLL", cAlternateFileName="")) returned 1 [0206.110] wcscmp (_String1="STSLISTI.DLL", _String2=".") returned 1 [0206.110] wcscmp (_String1="STSLISTI.DLL", _String2="..") returned 1 [0206.110] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x37b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUCRES.DLL", cAlternateFileName="")) returned 1 [0206.110] wcscmp (_String1="STSUCRES.DLL", _String2=".") returned 1 [0206.110] wcscmp (_String1="STSUCRES.DLL", _String2="..") returned 1 [0206.110] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69941a00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69941a00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.INTL.DLL", cAlternateFileName="STSUPL~1.DLL")) returned 1 [0206.110] wcscmp (_String1="STSUPLD.INTL.DLL", _String2=".") returned 1 [0206.110] wcscmp (_String1="STSUPLD.INTL.DLL", _String2="..") returned 1 [0206.110] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNNY.CSS", cAlternateFileName="")) returned 1 [0206.110] wcscmp (_String1="SUNNY.CSS", _String2=".") returned 1 [0206.110] wcscmp (_String1="SUNNY.CSS", _String2="..") returned 1 [0206.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3f88 [0206.111] wcscpy (in: _Dest=0x3dc3f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.111] wcscat (in: _Dest=0x3dc3f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.111] wcscat (in: _Dest=0x3dc3f88, _Source="SUNNY.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" [0206.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0206.112] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNSET.CSS", cAlternateFileName="")) returned 1 [0206.112] wcscmp (_String1="SUNSET.CSS", _String2=".") returned 1 [0206.112] wcscmp (_String1="SUNSET.CSS", _String2="..") returned 1 [0206.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5288 [0206.112] wcscpy (in: _Dest=0x3dc5288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.112] wcscat (in: _Dest=0x3dc5288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.112] wcscat (in: _Dest=0x3dc5288, _Source="SUNSET.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" [0206.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0206.113] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TERRCOTT.CSS", cAlternateFileName="")) returned 1 [0206.113] wcscmp (_String1="TERRCOTT.CSS", _String2=".") returned 1 [0206.113] wcscmp (_String1="TERRCOTT.CSS", _String2="..") returned 1 [0206.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfd50 [0206.113] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.113] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.113] wcscat (in: _Dest=0x81bfd50, _Source="TERRCOTT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" [0206.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0206.114] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x43768, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.VSL", cAlternateFileName="")) returned 1 [0206.114] wcscmp (_String1="TIMESOLN.VSL", _String2=".") returned 1 [0206.114] wcscmp (_String1="TIMESOLN.VSL", _String2="..") returned 1 [0206.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bee70 [0206.114] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.114] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.114] wcscat (in: _Dest=0x81bee70, _Source="TIMESOLN.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" [0206.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0206.115] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x5eb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.VSL", cAlternateFileName="")) returned 1 [0206.115] wcscmp (_String1="UML.VSL", _String2=".") returned 1 [0206.115] wcscmp (_String1="UML.VSL", _String2="..") returned 1 [0206.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e689c0 [0206.115] wcscpy (in: _Dest=0x3e689c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.115] wcscat (in: _Dest=0x3e689c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.115] wcscat (in: _Dest=0x3e689c0, _Source="UML.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" [0206.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e689c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0206.116] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x5f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVBRES.DLL", cAlternateFileName="")) returned 1 [0206.116] wcscmp (_String1="UMLVBRES.DLL", _String2=".") returned 1 [0206.116] wcscmp (_String1="UMLVBRES.DLL", _String2="..") returned 1 [0206.116] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x6980, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60R.DLL", cAlternateFileName="")) returned 1 [0206.117] wcscmp (_String1="UMLVC60R.DLL", _String2=".") returned 1 [0206.117] wcscmp (_String1="UMLVC60R.DLL", _String2="..") returned 1 [0206.117] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVSUI.DLL", cAlternateFileName="")) returned 1 [0206.117] wcscmp (_String1="UMLVSUI.DLL", _String2=".") returned 1 [0206.117] wcscmp (_String1="UMLVSUI.DLL", _String2="..") returned 1 [0206.117] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc12ac700, ftCreationTime.dwHighDateTime=0x1cab90d, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc12ac700, ftLastWriteTime.dwHighDateTime=0x1cab90d, nFileSizeHigh=0x0, nFileSizeLow=0xe780, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookStrings.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1 [0206.117] wcscmp (_String1="UmOutlookStrings.dll", _String2=".") returned 1 [0206.117] wcscmp (_String1="UmOutlookStrings.dll", _String2="..") returned 1 [0206.117] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e95bf00, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e95bf00, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE.VRD", cAlternateFileName="")) returned 1 [0206.117] wcscmp (_String1="VALVE.VRD", _String2=".") returned 1 [0206.117] wcscmp (_String1="VALVE.VRD", _String2="..") returned 1 [0206.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4688 [0206.117] wcscpy (in: _Dest=0x3dc4688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.117] wcscat (in: _Dest=0x3dc4688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.117] wcscat (in: _Dest=0x3dc4688, _Source="VALVE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" [0206.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0206.118] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34395000, ftCreationTime.dwHighDateTime=0x1c314a0, ftLastAccessTime.dwLowDateTime=0x35636670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34395000, ftLastWriteTime.dwHighDateTime=0x1c314a0, nFileSizeHigh=0x0, nFileSizeLow=0x411f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAOWS10.CHM", cAlternateFileName="")) returned 1 [0206.118] wcscmp (_String1="VBAOWS10.CHM", _String2=".") returned 1 [0206.118] wcscmp (_String1="VBAOWS10.CHM", _String2="..") returned 1 [0206.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0080 [0206.118] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.118] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.118] wcscat (in: _Dest=0x81c0080, _Source="VBAOWS10.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" [0206.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0206.119] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x265dba00, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x265dba00, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x8d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL", cAlternateFileName="")) returned 1 [0206.119] wcscmp (_String1="VISBRRES.DLL", _String2=".") returned 1 [0206.119] wcscmp (_String1="VISBRRES.DLL", _String2="..") returned 1 [0206.119] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b30f400, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9b30f400, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.IDX_DLL", cAlternateFileName="VISBRR~1.IDX")) returned 1 [0206.119] wcscmp (_String1="VISBRRES.DLL.IDX_DLL", _String2=".") returned 1 [0206.119] wcscmp (_String1="VISBRRES.DLL.IDX_DLL", _String2="..") returned 1 [0206.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2b1b0 [0206.119] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.119] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.119] wcscat (in: _Dest=0x3e2b1b0, _Source="VISBRRES.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" [0206.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0206.120] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x9180, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.VSL", cAlternateFileName="")) returned 1 [0206.120] wcscmp (_String1="VISCOLOR.VSL", _String2=".") returned 1 [0206.120] wcscmp (_String1="VISCOLOR.VSL", _String2="..") returned 1 [0206.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf228 [0206.121] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.121] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.121] wcscat (in: _Dest=0x81bf228, _Source="VISCOLOR.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" [0206.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0206.122] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ba8200, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0xa5621090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x74ba8200, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0xb9378, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL", cAlternateFileName="")) returned 1 [0206.122] wcscmp (_String1="VISINTL.DLL", _String2=".") returned 1 [0206.122] wcscmp (_String1="VISINTL.DLL", _String2="..") returned 1 [0206.122] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c838000, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0xa5621090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1c838000, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0x3a980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.IDX_DLL", cAlternateFileName="VISINT~1.IDX")) returned 1 [0206.122] wcscmp (_String1="VISINTL.DLL.IDX_DLL", _String2=".") returned 1 [0206.122] wcscmp (_String1="VISINTL.DLL.IDX_DLL", _String2="..") returned 1 [0206.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df2f8 [0206.122] wcscpy (in: _Dest=0x81df2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.122] wcscat (in: _Dest=0x81df2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.122] wcscat (in: _Dest=0x81df2f8, _Source="VISINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" [0206.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0206.123] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa5621090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.CSS", cAlternateFileName="")) returned 1 [0206.123] wcscmp (_String1="VISIO.CSS", _String2=".") returned 1 [0206.123] wcscmp (_String1="VISIO.CSS", _String2="..") returned 1 [0206.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5b88 [0206.123] wcscpy (in: _Dest=0x3dc5b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.123] wcscat (in: _Dest=0x3dc5b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.123] wcscat (in: _Dest=0x3dc5b88, _Source="VISIO.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" [0206.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0206.124] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a08ee00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0xa566d350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2a08ee00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x588a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV.HXS", cAlternateFileName="VISIOD~1.HXS")) returned 1 [0206.124] wcscmp (_String1="VISIO.DEV.HXS", _String2=".") returned 1 [0206.124] wcscmp (_String1="VISIO.DEV.HXS", _String2="..") returned 1 [0206.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81beab8 [0206.125] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.125] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.125] wcscat (in: _Dest=0x81beab8, _Source="VISIO.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" [0206.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0206.125] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa566d350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXC", cAlternateFileName="VISIOD~1.HXC")) returned 1 [0206.126] wcscmp (_String1="VISIO.DEV_COL.HXC", _String2=".") returned 1 [0206.126] wcscmp (_String1="VISIO.DEV_COL.HXC", _String2="..") returned 1 [0206.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0206.126] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.126] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.126] wcscat (in: _Dest=0x81de7b8, _Source="VISIO.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" [0206.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0206.127] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf803f400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf803f400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXT", cAlternateFileName="VISIOD~1.HXT")) returned 1 [0206.127] wcscmp (_String1="VISIO.DEV_COL.HXT", _String2=".") returned 1 [0206.127] wcscmp (_String1="VISIO.DEV_COL.HXT", _String2="..") returned 1 [0206.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df388 [0206.127] wcscpy (in: _Dest=0x81df388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.127] wcscat (in: _Dest=0x81df388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.127] wcscat (in: _Dest=0x81df388, _Source="VISIO.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" [0206.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0206.128] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf803f400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf803f400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_F_COL.HXK", cAlternateFileName="VISIOD~1.HXK")) returned 1 [0206.128] wcscmp (_String1="VISIO.DEV_F_COL.HXK", _String2=".") returned 1 [0206.128] wcscmp (_String1="VISIO.DEV_F_COL.HXK", _String2="..") returned 1 [0206.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df268 [0206.128] wcscpy (in: _Dest=0x81df268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.128] wcscat (in: _Dest=0x81df268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.128] wcscat (in: _Dest=0x81df268, _Source="VISIO.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" [0206.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f8 [0206.129] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf803f400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf803f400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_K_COL.HXK", cAlternateFileName="VISIOD~2.HXK")) returned 1 [0206.129] wcscmp (_String1="VISIO.DEV_K_COL.HXK", _String2=".") returned 1 [0206.129] wcscmp (_String1="VISIO.DEV_K_COL.HXK", _String2="..") returned 1 [0206.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0206.130] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.130] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.130] wcscat (in: _Dest=0x81de968, _Source="VISIO.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" [0206.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd8 [0206.131] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3a1b00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b3a1b00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x2b532a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.HXS", cAlternateFileName="")) returned 1 [0206.131] wcscmp (_String1="VISIO.HXS", _String2=".") returned 1 [0206.131] wcscmp (_String1="VISIO.HXS", _String2="..") returned 1 [0206.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5708 [0206.131] wcscpy (in: _Dest=0x3dc5708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.131] wcscat (in: _Dest=0x3dc5708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.131] wcscat (in: _Dest=0x3dc5708, _Source="VISIO.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" [0206.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0206.132] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a182500, ftCreationTime.dwHighDateTime=0x1ca9159, ftLastAccessTime.dwLowDateTime=0xa5882690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a182500, ftLastWriteTime.dwHighDateTime=0x1ca9159, nFileSizeHigh=0x0, nFileSizeLow=0xd6cc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET.HXS", cAlternateFileName="VISIOS~1.HXS")) returned 1 [0211.713] wcscmp (_String1="VISIO.SHAPESHEET.HXS", _String2=".") returned 1 [0211.713] wcscmp (_String1="VISIO.SHAPESHEET.HXS", _String2="..") returned 1 [0211.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2b7a0 [0211.713] wcscpy (in: _Dest=0x3e2b7a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.713] wcscat (in: _Dest=0x3e2b7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.713] wcscat (in: _Dest=0x3e2b7a0, _Source="VISIO.SHAPESHEET.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" [0212.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0212.271] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa5882690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXC", cAlternateFileName="VISIOS~1.HXC")) returned 1 [0212.271] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXC", _String2=".") returned 1 [0212.271] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXC", _String2="..") returned 1 [0212.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819b858 [0212.271] wcscpy (in: _Dest=0x819b858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.271] wcscat (in: _Dest=0x819b858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.271] wcscat (in: _Dest=0x819b858, _Source="VISIO.SHAPESHEET_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" [0212.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0212.272] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f88d300, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f88d300, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXT", cAlternateFileName="VISIOS~1.HXT")) returned 1 [0212.272] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXT", _String2=".") returned 1 [0212.272] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXT", _String2="..") returned 1 [0212.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819b8f8 [0212.272] wcscpy (in: _Dest=0x819b8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.273] wcscat (in: _Dest=0x819b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.273] wcscat (in: _Dest=0x819b8f8, _Source="VISIO.SHAPESHEET_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" [0212.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0212.274] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f88d300, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f88d300, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_F_COL.HXK", cAlternateFileName="VISIOS~1.HXK")) returned 1 [0212.274] wcscmp (_String1="VISIO.SHAPESHEET_F_COL.HXK", _String2=".") returned 1 [0212.274] wcscmp (_String1="VISIO.SHAPESHEET_F_COL.HXK", _String2="..") returned 1 [0212.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c258 [0212.274] wcscpy (in: _Dest=0x819c258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.274] wcscat (in: _Dest=0x819c258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.274] wcscat (in: _Dest=0x819c258, _Source="VISIO.SHAPESHEET_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" [0212.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0212.275] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f88d300, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f88d300, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_K_COL.HXK", cAlternateFileName="VISIOS~2.HXK")) returned 1 [0212.275] wcscmp (_String1="VISIO.SHAPESHEET_K_COL.HXK", _String2=".") returned 1 [0212.275] wcscmp (_String1="VISIO.SHAPESHEET_K_COL.HXK", _String2="..") returned 1 [0212.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ac78 [0212.275] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.275] wcscat (in: _Dest=0x819ac78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.275] wcscat (in: _Dest=0x819ac78, _Source="VISIO.SHAPESHEET_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" [0212.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0212.277] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXC", cAlternateFileName="VISIO_~1.HXC")) returned 1 [0212.277] wcscmp (_String1="VISIO_COL.HXC", _String2=".") returned 1 [0212.277] wcscmp (_String1="VISIO_COL.HXC", _String2="..") returned 1 [0212.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30958 [0212.277] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.277] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.277] wcscat (in: _Dest=0x3f30958, _Source="VISIO_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" [0212.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0212.278] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4706d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4706d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXT", cAlternateFileName="VISIO_~1.HXT")) returned 1 [0212.278] wcscmp (_String1="VISIO_COL.HXT", _String2=".") returned 1 [0212.278] wcscmp (_String1="VISIO_COL.HXT", _String2="..") returned 1 [0212.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fc98 [0212.278] wcscpy (in: _Dest=0x3f2fc98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.278] wcscat (in: _Dest=0x3f2fc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.278] wcscat (in: _Dest=0x3f2fc98, _Source="VISIO_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" [0212.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0212.279] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4706d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4706d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_F_COL.HXK", cAlternateFileName="VISIO_~1.HXK")) returned 1 [0212.279] wcscmp (_String1="VISIO_F_COL.HXK", _String2=".") returned 1 [0212.279] wcscmp (_String1="VISIO_F_COL.HXK", _String2="..") returned 1 [0212.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f308d0 [0212.279] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.279] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.279] wcscat (in: _Dest=0x3f308d0, _Source="VISIO_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" [0212.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2658 [0212.281] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4706d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4706d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_K_COL.HXK", cAlternateFileName="VISIO_~2.HXK")) returned 1 [0212.281] wcscmp (_String1="VISIO_K_COL.HXK", _String2=".") returned 1 [0212.281] wcscmp (_String1="VISIO_K_COL.HXK", _String2="..") returned 1 [0212.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ffc8 [0212.281] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.281] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.281] wcscat (in: _Dest=0x3f2ffc8, _Source="VISIO_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" [0212.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0212.282] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b601700, ftCreationTime.dwHighDateTime=0x1ca506e, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7b601700, ftLastWriteTime.dwHighDateTime=0x1ca506e, nFileSizeHigh=0x0, nFileSizeLow=0x22e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM.HXS", cAlternateFileName="VISIO_~1.HXS")) returned 1 [0212.282] wcscmp (_String1="VISIO_PRM.HXS", _String2=".") returned 1 [0212.282] wcscmp (_String1="VISIO_PRM.HXS", _String2="..") returned 1 [0212.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30270 [0212.282] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.282] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.282] wcscat (in: _Dest=0x3f30270, _Source="VISIO_PRM.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" [0212.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0212.283] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaa57000, ftCreationTime.dwHighDateTime=0x1ca540b, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfaa57000, ftLastWriteTime.dwHighDateTime=0x1ca540b, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXC", cAlternateFileName="VISIO_~2.HXC")) returned 1 [0212.284] wcscmp (_String1="VISIO_PRM_COL.HXC", _String2=".") returned 1 [0212.284] wcscmp (_String1="VISIO_PRM_COL.HXC", _String2="..") returned 1 [0212.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de4e8 [0212.284] wcscpy (in: _Dest=0x81de4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.284] wcscat (in: _Dest=0x81de4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.284] wcscat (in: _Dest=0x81de4e8, _Source="VISIO_PRM_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" [0212.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0212.285] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf11c0800, ftCreationTime.dwHighDateTime=0x1ca540b, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf11c0800, ftLastWriteTime.dwHighDateTime=0x1ca540b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXT", cAlternateFileName="VISIO_~2.HXT")) returned 1 [0212.285] wcscmp (_String1="VISIO_PRM_COL.HXT", _String2=".") returned 1 [0212.285] wcscmp (_String1="VISIO_PRM_COL.HXT", _String2="..") returned 1 [0212.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de458 [0212.286] wcscpy (in: _Dest=0x81de458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.286] wcscat (in: _Dest=0x81de458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.286] wcscat (in: _Dest=0x81de458, _Source="VISIO_PRM_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" [0212.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0212.287] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c59b200, ftCreationTime.dwHighDateTime=0x1ca50be, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c59b200, ftLastWriteTime.dwHighDateTime=0x1ca50be, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_F_COL.HXK", cAlternateFileName="VISIO_~3.HXK")) returned 1 [0212.287] wcscmp (_String1="VISIO_PRM_F_COL.HXK", _String2=".") returned 1 [0212.287] wcscmp (_String1="VISIO_PRM_F_COL.HXK", _String2="..") returned 1 [0212.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de0f8 [0212.287] wcscpy (in: _Dest=0x81de0f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.287] wcscat (in: _Dest=0x81de0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.287] wcscat (in: _Dest=0x81de0f8, _Source="VISIO_PRM_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" [0212.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0212.288] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c59b200, ftCreationTime.dwHighDateTime=0x1ca50be, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c59b200, ftLastWriteTime.dwHighDateTime=0x1ca50be, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_K_COL.HXK", cAlternateFileName="VISIO_~4.HXK")) returned 1 [0212.288] wcscmp (_String1="VISIO_PRM_K_COL.HXK", _String2=".") returned 1 [0212.288] wcscmp (_String1="VISIO_PRM_K_COL.HXK", _String2="..") returned 1 [0212.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ddd98 [0212.288] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.288] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.288] wcscat (in: _Dest=0x81ddd98, _Source="VISIO_PRM_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" [0212.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0212.289] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a08ee00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2a08ee00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x26745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD.HXS", cAlternateFileName="VISIO_~2.HXS")) returned 1 [0212.289] wcscmp (_String1="VISIO_STD.HXS", _String2=".") returned 1 [0212.289] wcscmp (_String1="VISIO_STD.HXS", _String2="..") returned 1 [0212.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f302f8 [0212.290] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.290] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.290] wcscat (in: _Dest=0x3f302f8, _Source="VISIO_STD.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" [0212.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0212.291] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXC", cAlternateFileName="VISIO_~3.HXC")) returned 1 [0212.291] wcscmp (_String1="VISIO_STD_COL.HXC", _String2=".") returned 1 [0212.291] wcscmp (_String1="VISIO_STD_COL.HXC", _String2="..") returned 1 [0212.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ddeb8 [0212.291] wcscpy (in: _Dest=0x81ddeb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.291] wcscat (in: _Dest=0x81ddeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.291] wcscat (in: _Dest=0x81ddeb8, _Source="VISIO_STD_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" [0212.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0212.292] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5c200, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca5c200, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXT", cAlternateFileName="VISIO_~3.HXT")) returned 1 [0212.292] wcscmp (_String1="VISIO_STD_COL.HXT", _String2=".") returned 1 [0212.292] wcscmp (_String1="VISIO_STD_COL.HXT", _String2="..") returned 1 [0212.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de218 [0212.292] wcscpy (in: _Dest=0x81de218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.292] wcscat (in: _Dest=0x81de218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.292] wcscat (in: _Dest=0x81de218, _Source="VISIO_STD_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" [0212.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0212.294] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5c200, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca5c200, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_F_COL.HXK", cAlternateFileName="VIB8A9~1.HXK")) returned 1 [0212.294] wcscmp (_String1="VISIO_STD_F_COL.HXK", _String2=".") returned 1 [0212.294] wcscmp (_String1="VISIO_STD_F_COL.HXK", _String2="..") returned 1 [0212.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0212.294] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.294] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.294] wcscat (in: _Dest=0x81deb18, _Source="VISIO_STD_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" [0212.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81deb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0212.295] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5c200, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca5c200, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_K_COL.HXK", cAlternateFileName="VI5545~1.HXK")) returned 1 [0212.295] wcscmp (_String1="VISIO_STD_K_COL.HXK", _String2=".") returned 1 [0212.295] wcscmp (_String1="VISIO_STD_K_COL.HXK", _String2="..") returned 1 [0212.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dec38 [0212.295] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.295] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.295] wcscat (in: _Dest=0x81dec38, _Source="VISIO_STD_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" [0212.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dec38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0212.297] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xad70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.VSL", cAlternateFileName="")) returned 1 [0212.297] wcscmp (_String1="VISUTILS.VSL", _String2=".") returned 1 [0212.297] wcscmp (_String1="VISUTILS.VSL", _String2="..") returned 1 [0212.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30f30 [0212.297] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.297] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.297] wcscat (in: _Dest=0x3f30f30, _Source="VISUTILS.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" [0212.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0212.298] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xf588, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.VSL", cAlternateFileName="")) returned 1 [0212.298] wcscmp (_String1="VISWEB.VSL", _String2=".") returned 1 [0212.298] wcscmp (_String1="VISWEB.VSL", _String2="..") returned 1 [0212.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5a08 [0212.298] wcscpy (in: _Dest=0x3dc5a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.298] wcscat (in: _Dest=0x3dc5a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.298] wcscat (in: _Dest=0x3dc5a08, _Source="VISWEB.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" [0212.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0212.299] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa55faf30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vsdir", cAlternateFileName="")) returned 1 [0212.299] wcscmp (_String1="Vsdir", _String2=".") returned 1 [0212.299] wcscmp (_String1="Vsdir", _String2="..") returned 1 [0212.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x8403308 [0212.299] wcscpy (in: _Dest=0x8403308, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.299] wcscat (in: _Dest=0x8403308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.300] wcscat (in: _Dest=0x8403308, _Source="Vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" [0212.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8403308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0212.350] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x35682930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0xa2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0212.350] wcscmp (_String1="VVIEWRES.DLL", _String2=".") returned 1 [0212.350] wcscmp (_String1="VVIEWRES.DLL", _String2="..") returned 1 [0212.350] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab28e800, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab28e800, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDALLLNK.VRD", cAlternateFileName="")) returned 1 [0212.350] wcscmp (_String1="WDALLLNK.VRD", _String2=".") returned 1 [0212.350] wcscmp (_String1="WDALLLNK.VRD", _String2="..") returned 1 [0212.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f31040 [0212.350] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.351] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.351] wcscat (in: _Dest=0x3f31040, _Source="WDALLLNK.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" [0212.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0212.352] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69727b00, ftCreationTime.dwHighDateTime=0x1c2a085, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x69727b00, ftLastWriteTime.dwHighDateTime=0x1c2a085, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDCMPVRD.XML", cAlternateFileName="")) returned 1 [0212.352] wcscmp (_String1="WDCMPVRD.XML", _String2=".") returned 1 [0212.352] wcscmp (_String1="WDCMPVRD.XML", _String2="..") returned 1 [0212.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30490 [0212.352] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.352] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.352] wcscat (in: _Dest=0x3f30490, _Source="WDCMPVRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" [0212.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0212.353] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab28e800, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab28e800, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDERRLNK.VRD", cAlternateFileName="")) returned 1 [0212.353] wcscmp (_String1="WDERRLNK.VRD", _String2=".") returned 1 [0212.353] wcscmp (_String1="WDERRLNK.VRD", _String2="..") returned 1 [0212.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30380 [0212.353] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.353] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.353] wcscat (in: _Dest=0x3f30380, _Source="WDERRLNK.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" [0212.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0212.355] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25443a00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x997be5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x25443a00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x4b425a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV.HXS", cAlternateFileName="WINPRO~1.HXS")) returned 1 [0212.355] wcscmp (_String1="WINPROJ.DEV.HXS", _String2=".") returned 1 [0212.355] wcscmp (_String1="WINPROJ.DEV.HXS", _String2="..") returned 1 [0212.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f638 [0212.355] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.355] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.355] wcscat (in: _Dest=0x3f2f638, _Source="WINPROJ.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" [0212.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0212.356] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x997be5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXC", cAlternateFileName="WINPRO~1.HXC")) returned 1 [0212.356] wcscmp (_String1="WINPROJ.DEV_COL.HXC", _String2=".") returned 1 [0212.356] wcscmp (_String1="WINPROJ.DEV_COL.HXC", _String2="..") returned 1 [0212.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df4a8 [0212.356] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.356] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.356] wcscat (in: _Dest=0x81df4a8, _Source="WINPROJ.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" [0212.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0212.615] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6521000, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x997be5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6521000, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXT", cAlternateFileName="WINPRO~1.HXT")) returned 1 [0212.615] wcscmp (_String1="WINPROJ.DEV_COL.HXT", _String2=".") returned 1 [0212.615] wcscmp (_String1="WINPROJ.DEV_COL.HXT", _String2="..") returned 1 [0212.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dec38 [0212.615] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.615] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.615] wcscat (in: _Dest=0x81dec38, _Source="WINPROJ.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" [0212.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dec38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0212.930] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6521000, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6521000, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_F_COL.HXK", cAlternateFileName="WINPRO~1.HXK")) returned 1 [0212.930] wcscmp (_String1="WINPROJ.DEV_F_COL.HXK", _String2=".") returned 1 [0212.930] wcscmp (_String1="WINPROJ.DEV_F_COL.HXK", _String2="..") returned 1 [0212.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d40b10 [0212.931] wcscpy (in: _Dest=0x3d40b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.931] wcscat (in: _Dest=0x3d40b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.931] wcscat (in: _Dest=0x3d40b10, _Source="WINPROJ.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" [0212.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0212.932] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6521000, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6521000, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_K_COL.HXK", cAlternateFileName="WINPRO~2.HXK")) returned 1 [0212.932] wcscmp (_String1="WINPROJ.DEV_K_COL.HXK", _String2=".") returned 1 [0212.932] wcscmp (_String1="WINPROJ.DEV_K_COL.HXK", _String2="..") returned 1 [0212.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d40ba8 [0212.932] wcscpy (in: _Dest=0x3d40ba8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.932] wcscat (in: _Dest=0x3d40ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.932] wcscat (in: _Dest=0x3d40ba8, _Source="WINPROJ.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" [0212.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0212.933] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26756700, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x26756700, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x168406, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.HXS", cAlternateFileName="")) returned 1 [0212.945] wcscmp (_String1="WINPROJ.HXS", _String2=".") returned 1 [0212.945] wcscmp (_String1="WINPROJ.HXS", _String2="..") returned 1 [0212.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4188 [0212.945] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.945] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.945] wcscat (in: _Dest=0x3dc4188, _Source="WINPROJ.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" [0212.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d4 [0212.946] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXC", cAlternateFileName="WINPRO~2.HXC")) returned 1 [0212.946] wcscmp (_String1="WINPROJ_COL.HXC", _String2=".") returned 1 [0212.946] wcscmp (_String1="WINPROJ_COL.HXC", _String2="..") returned 1 [0212.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf118 [0212.946] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.946] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.946] wcscat (in: _Dest=0x81bf118, _Source="WINPROJ_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" [0212.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0212.948] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be8900, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x9980a870, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2be8900, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXT", cAlternateFileName="WINPRO~2.HXT")) returned 1 [0212.948] wcscmp (_String1="WINPROJ_COL.HXT", _String2=".") returned 1 [0212.948] wcscmp (_String1="WINPROJ_COL.HXT", _String2="..") returned 1 [0212.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfe60 [0212.948] wcscpy (in: _Dest=0x81bfe60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.948] wcscat (in: _Dest=0x81bfe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.948] wcscat (in: _Dest=0x81bfe60, _Source="WINPROJ_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" [0212.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0212.949] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be8900, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x9980a870, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2be8900, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_F_COL.HXK", cAlternateFileName="WINPRO~3.HXK")) returned 1 [0212.949] wcscmp (_String1="WINPROJ_F_COL.HXK", _String2=".") returned 1 [0212.949] wcscmp (_String1="WINPROJ_F_COL.HXK", _String2="..") returned 1 [0212.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de0f8 [0212.949] wcscpy (in: _Dest=0x81de0f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.949] wcscat (in: _Dest=0x81de0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.949] wcscat (in: _Dest=0x81de0f8, _Source="WINPROJ_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" [0212.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0212.950] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be8900, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x998309d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2be8900, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_K_COL.HXK", cAlternateFileName="WINPRO~4.HXK")) returned 1 [0212.950] wcscmp (_String1="WINPROJ_K_COL.HXK", _String2=".") returned 1 [0212.950] wcscmp (_String1="WINPROJ_K_COL.HXK", _String2="..") returned 1 [0212.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de458 [0212.950] wcscpy (in: _Dest=0x81de458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.950] wcscat (in: _Dest=0x81de458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.950] wcscat (in: _Dest=0x81de458, _Source="WINPROJ_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" [0212.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d30 [0212.952] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac5a1500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa5cd2e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xac5a1500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINSCHD.VRD", cAlternateFileName="")) returned 1 [0212.952] wcscmp (_String1="WINSCHD.VRD", _String2=".") returned 1 [0212.952] wcscmp (_String1="WINSCHD.VRD", _String2="..") returned 1 [0212.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5808 [0212.952] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.952] wcscat (in: _Dest=0x3dc5808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.952] wcscat (in: _Dest=0x3dc5808, _Source="WINSCHD.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" [0212.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0212.953] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6b4800, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c6b4800, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x718092, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV.HXS", cAlternateFileName="WINWOR~1.HXS")) returned 1 [0212.953] wcscmp (_String1="WINWORD.DEV.HXS", _String2=".") returned 1 [0212.953] wcscmp (_String1="WINWORD.DEV.HXS", _String2="..") returned 1 [0212.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be898 [0212.953] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.953] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.953] wcscat (in: _Dest=0x81be898, _Source="WINWORD.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" [0212.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0212.954] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXC", cAlternateFileName="WINWOR~1.HXC")) returned 1 [0212.954] wcscmp (_String1="WINWORD.DEV_COL.HXC", _String2=".") returned 1 [0212.954] wcscmp (_String1="WINWORD.DEV_COL.HXC", _String2="..") returned 1 [0212.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de4e8 [0212.954] wcscpy (in: _Dest=0x81de4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.954] wcscat (in: _Dest=0x81de4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.954] wcscat (in: _Dest=0x81de4e8, _Source="WINWORD.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" [0212.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0212.956] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136eff00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x136eff00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXT", cAlternateFileName="WINWOR~1.HXT")) returned 1 [0212.956] wcscmp (_String1="WINWORD.DEV_COL.HXT", _String2=".") returned 1 [0212.956] wcscmp (_String1="WINWORD.DEV_COL.HXT", _String2="..") returned 1 [0212.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df2f8 [0212.957] wcscpy (in: _Dest=0x81df2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.957] wcscat (in: _Dest=0x81df2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.957] wcscat (in: _Dest=0x81df2f8, _Source="WINWORD.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" [0212.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2658 [0212.958] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136eff00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x136eff00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_F_COL.HXK", cAlternateFileName="WINWOR~1.HXK")) returned 1 [0212.958] wcscmp (_String1="WINWORD.DEV_F_COL.HXK", _String2=".") returned 1 [0212.958] wcscmp (_String1="WINWORD.DEV_F_COL.HXK", _String2="..") returned 1 [0212.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d40c40 [0212.958] wcscpy (in: _Dest=0x3d40c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.958] wcscat (in: _Dest=0x3d40c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.958] wcscat (in: _Dest=0x3d40c40, _Source="WINWORD.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" [0212.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0212.959] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136eff00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x136eff00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_K_COL.HXK", cAlternateFileName="WINWOR~2.HXK")) returned 1 [0212.959] wcscmp (_String1="WINWORD.DEV_K_COL.HXK", _String2=".") returned 1 [0212.959] wcscmp (_String1="WINWORD.DEV_K_COL.HXK", _String2="..") returned 1 [0212.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d40cd8 [0212.959] wcscpy (in: _Dest=0x3d40cd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.959] wcscat (in: _Dest=0x3d40cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.959] wcscat (in: _Dest=0x3d40cd8, _Source="WINWORD.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" [0212.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0212.960] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x755fa500, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x755fa500, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x4ff5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.HXS", cAlternateFileName="")) returned 1 [0212.960] wcscmp (_String1="WINWORD.HXS", _String2=".") returned 1 [0212.960] wcscmp (_String1="WINWORD.HXS", _String2="..") returned 1 [0212.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5288 [0212.960] wcscpy (in: _Dest=0x3dc5288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.961] wcscat (in: _Dest=0x3dc5288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.961] wcscat (in: _Dest=0x3dc5288, _Source="WINWORD.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" [0212.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0212.962] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXC", cAlternateFileName="WINWOR~2.HXC")) returned 1 [0212.962] wcscmp (_String1="WINWORD_COL.HXC", _String2=".") returned 1 [0212.962] wcscmp (_String1="WINWORD_COL.HXC", _String2="..") returned 1 [0212.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81becd8 [0212.962] wcscpy (in: _Dest=0x81becd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.962] wcscat (in: _Dest=0x81becd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.962] wcscat (in: _Dest=0x81becd8, _Source="WINWORD_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" [0212.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81becd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0212.963] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa4b00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa4b00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXT", cAlternateFileName="WINWOR~2.HXT")) returned 1 [0212.963] wcscmp (_String1="WINWORD_COL.HXT", _String2=".") returned 1 [0212.964] wcscmp (_String1="WINWORD_COL.HXT", _String2="..") returned 1 [0212.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfd50 [0212.964] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.964] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.964] wcscat (in: _Dest=0x81bfd50, _Source="WINWORD_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" [0212.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0212.965] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa4b00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa4b00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_F_COL.HXK", cAlternateFileName="WINWOR~3.HXK")) returned 1 [0212.965] wcscmp (_String1="WINWORD_F_COL.HXK", _String2=".") returned 1 [0212.965] wcscmp (_String1="WINWORD_F_COL.HXK", _String2="..") returned 1 [0212.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df388 [0212.965] wcscpy (in: _Dest=0x81df388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.965] wcscat (in: _Dest=0x81df388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.965] wcscat (in: _Dest=0x81df388, _Source="WINWORD_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" [0212.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0212.967] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa4b00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa4b00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_K_COL.HXK", cAlternateFileName="WINWOR~4.HXK")) returned 1 [0212.967] wcscmp (_String1="WINWORD_K_COL.HXK", _String2=".") returned 1 [0212.967] wcscmp (_String1="WINWORD_K_COL.HXK", _String2="..") returned 1 [0212.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df268 [0212.967] wcscpy (in: _Dest=0x81df268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.967] wcscat (in: _Dest=0x81df268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.967] wcscat (in: _Dest=0x81df268, _Source="WINWORD_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" [0212.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0212.968] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa5cf8fd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORKFLOW.VSL", cAlternateFileName="")) returned 1 [0212.968] wcscmp (_String1="WORKFLOW.VSL", _String2=".") returned 1 [0212.968] wcscmp (_String1="WORKFLOW.VSL", _String2="..") returned 1 [0212.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bee70 [0212.968] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.968] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.968] wcscat (in: _Dest=0x81bee70, _Source="WORKFLOW.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" [0212.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0212.970] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d1200, ftCreationTime.dwHighDateTime=0x1cacd99, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6d1200, ftLastWriteTime.dwHighDateTime=0x1cacd99, nFileSizeHigh=0x0, nFileSizeLow=0xc8958, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL", cAlternateFileName="")) returned 1 [0212.970] wcscmp (_String1="WWINTL.DLL", _String2=".") returned 1 [0212.970] wcscmp (_String1="WWINTL.DLL", _String2="..") returned 1 [0212.970] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa62400, ftCreationTime.dwHighDateTime=0x1cacd3f, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaa62400, ftLastWriteTime.dwHighDateTime=0x1cacd3f, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.IDX_DLL", cAlternateFileName="WWINTL~1.IDX")) returned 1 [0212.970] wcscmp (_String1="WWINTL.DLL.IDX_DLL", _String2=".") returned 1 [0212.970] wcscmp (_String1="WWINTL.DLL.IDX_DLL", _String2="..") returned 1 [0212.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de968 [0212.970] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.970] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.970] wcscat (in: _Dest=0x81de968, _Source="WWINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" [0212.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0212.971] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa62400, ftCreationTime.dwHighDateTime=0x1cacd3f, ftLastAccessTime.dwLowDateTime=0x48f614d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaa62400, ftLastWriteTime.dwHighDateTime=0x1cacd3f, nFileSizeHigh=0x0, nFileSizeLow=0x96180, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.IDX_DLL", cAlternateFileName="WWINTL~2.IDX")) returned 1 [0212.971] wcscmp (_String1="WWINTL.REST.IDX_DLL", _String2=".") returned 1 [0212.971] wcscmp (_String1="WWINTL.REST.IDX_DLL", _String2="..") returned 1 [0212.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0212.972] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.972] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.972] wcscat (in: _Dest=0x81de7b8, _Source="WWINTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" [0212.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0212.973] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c42600, ftCreationTime.dwHighDateTime=0x1cac4c5, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55c42600, ftLastWriteTime.dwHighDateTime=0x1cac4c5, nFileSizeHigh=0x0, nFileSizeLow=0x4188, dwReserved0=0x0, dwReserved1=0x0, cFileName="wxpr.dll", cAlternateFileName="")) returned 1 [0212.973] wcscmp (_String1="wxpr.dll", _String2=".") returned 1 [0212.973] wcscmp (_String1="wxpr.dll", _String2="..") returned 1 [0212.973] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5346a00, ftCreationTime.dwHighDateTime=0x1bdfffe, ftLastAccessTime.dwLowDateTime=0x5c6e8470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5346a00, ftLastWriteTime.dwHighDateTime=0x1bdfffe, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WZCNFLCT.CHM", cAlternateFileName="")) returned 1 [0212.974] wcscmp (_String1="WZCNFLCT.CHM", _String2=".") returned 1 [0212.974] wcscmp (_String1="WZCNFLCT.CHM", _String2="..") returned 1 [0212.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf228 [0212.980] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.980] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.980] wcscat (in: _Dest=0x81bf228, _Source="WZCNFLCT.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" [0212.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0212.981] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xb590, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC.VSL", cAlternateFileName="")) returned 1 [0212.981] wcscmp (_String1="XFUNC.VSL", _String2=".") returned 1 [0212.981] wcscmp (_String1="XFUNC.VSL", _String2="..") returned 1 [0212.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3f88 [0212.981] wcscpy (in: _Dest=0x3dc3f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.981] wcscat (in: _Dest=0x3dc3f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.981] wcscat (in: _Dest=0x3dc3f88, _Source="XFUNC.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" [0212.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0213.039] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x3283, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Complete.xsn", cAlternateFileName="XLATE_~1.XSN")) returned 1 [0213.039] wcscmp (_String1="Xlate_Complete.xsn", _String2=".") returned 1 [0213.039] wcscmp (_String1="Xlate_Complete.xsn", _String2="..") returned 1 [0213.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dec38 [0213.040] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0213.040] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0213.040] wcscat (in: _Dest=0x81dec38, _Source="Xlate_Complete.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" [0213.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dec38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0213.041] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x2d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Init.xsn", cAlternateFileName="XLATE_~2.XSN")) returned 1 [0213.041] wcscmp (_String1="Xlate_Init.xsn", _String2=".") returned 1 [0213.041] wcscmp (_String1="Xlate_Init.xsn", _String2="..") returned 1 [0213.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30380 [0213.041] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0213.041] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0213.041] wcscat (in: _Dest=0x3f30380, _Source="Xlate_Init.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" [0213.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0213.042] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74be8000, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3df87b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74be8000, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x231980, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL", cAlternateFileName="")) returned 1 [0213.042] wcscmp (_String1="XLINTL32.DLL", _String2=".") returned 1 [0213.042] wcscmp (_String1="XLINTL32.DLL", _String2="..") returned 1 [0213.042] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd89300, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd89300, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x18380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.IDX_DLL", cAlternateFileName="XLINTL~1.IDX")) returned 1 [0213.042] wcscmp (_String1="XLINTL32.DLL.IDX_DLL", _String2=".") returned 1 [0213.042] wcscmp (_String1="XLINTL32.DLL.IDX_DLL", _String2="..") returned 1 [0213.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40ba8 [0213.042] wcscpy (in: _Dest=0x3d40ba8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0213.042] wcscat (in: _Dest=0x3d40ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0213.042] wcscat (in: _Dest=0x3d40ba8, _Source="XLINTL32.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" [0213.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0213.043] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd89300, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3dfadcf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd89300, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x5db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.IDX_DLL", cAlternateFileName="XLINTL~2.IDX")) returned 1 [0213.043] wcscmp (_String1="XLINTL32.REST.IDX_DLL", _String2=".") returned 1 [0213.043] wcscmp (_String1="XLINTL32.REST.IDX_DLL", _String2="..") returned 1 [0213.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d40b10 [0213.043] wcscpy (in: _Dest=0x3d40b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0213.043] wcscat (in: _Dest=0x3d40b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0213.043] wcscat (in: _Dest=0x3d40b10, _Source="XLINTL32.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" [0213.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0213.044] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74be8000, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3dfadcf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74be8000, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLLEX.DLL", cAlternateFileName="")) returned 1 [0213.044] wcscmp (_String1="XLLEX.DLL", _String2=".") returned 1 [0213.044] wcscmp (_String1="XLLEX.DLL", _String2="..") returned 1 [0213.045] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433e4500, ftCreationTime.dwHighDateTime=0x1c30db2, ftLastAccessTime.dwLowDateTime=0x430c2a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x433e4500, ftLastWriteTime.dwHighDateTime=0x1c30db2, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLMACRO.CHM", cAlternateFileName="")) returned 1 [0213.045] wcscmp (_String1="XLMACRO.CHM", _String2=".") returned 1 [0213.045] wcscmp (_String1="XLMACRO.CHM", _String2="..") returned 1 [0213.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4688 [0213.045] wcscpy (in: _Dest=0x3dc4688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0213.045] wcscat (in: _Dest=0x3dc4688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0213.045] wcscat (in: _Dest=0x3dc4688, _Source="XLMACRO.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" [0213.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0213.046] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x430e8bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x24780, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL", cAlternateFileName="")) returned 1 [0213.046] wcscmp (_String1="XLSLICER.DLL", _String2=".") returned 1 [0213.046] wcscmp (_String1="XLSLICER.DLL", _String2="..") returned 1 [0213.046] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b1dc00, ftCreationTime.dwHighDateTime=0x1cac25c, ftLastAccessTime.dwLowDateTime=0x430c2a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31b1dc00, ftLastWriteTime.dwHighDateTime=0x1cac25c, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.IDX_DLL", cAlternateFileName="XLSLIC~1.IDX")) returned 1 [0213.046] wcscmp (_String1="XLSLICER.DLL.IDX_DLL", _String2=".") returned 1 [0213.046] wcscmp (_String1="XLSLICER.DLL.IDX_DLL", _String2="..") returned 1 [0213.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40d70 [0213.046] wcscpy (in: _Dest=0x3d40d70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0213.046] wcscat (in: _Dest=0x3d40d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0213.046] wcscat (in: _Dest=0x3d40d70, _Source="XLSLICER.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" [0213.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0213.048] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c9d400, ftCreationTime.dwHighDateTime=0x1c55713, ftLastAccessTime.dwLowDateTime=0x593e1c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c9d400, ftLastWriteTime.dwHighDateTime=0x1c55713, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 1 [0213.541] wcscmp (_String1="XMLSDK5.CHM", _String2=".") returned 1 [0213.541] wcscmp (_String1="XMLSDK5.CHM", _String2="..") returned 1 [0213.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4b88 [0213.542] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0213.542] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0213.542] wcscat (in: _Dest=0x3dc4b88, _Source="XMLSDK5.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" [0213.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c [0213.812] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x8048980 | out: lpFindFileData=0x8048980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c9d400, ftCreationTime.dwHighDateTime=0x1c55713, ftLastAccessTime.dwLowDateTime=0x593e1c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c9d400, ftLastWriteTime.dwHighDateTime=0x1c55713, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 0 [0214.142] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0214.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048980) returned 1 [0214.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33668) returned 1 [0214.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd410) returned 1 Thread: id = 657 os_tid = 0x1150 [0135.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f336d8 [0135.457] wcscpy (in: _Dest=0x3f336d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036" [0135.457] wcscat (in: _Dest=0x3f336d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\" [0135.457] wcscat (in: _Dest=0x3f336d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*" [0135.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049320 [0135.457] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e395f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e395f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0138.656] wcscmp (_String1=".", _String2=".") returned 0 [0138.656] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e395f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e395f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.656] wcscmp (_String1="..", _String2=".") returned 1 [0138.656] wcscmp (_String1="..", _String2="..") returned 0 [0138.656] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc03b7000, ftCreationTime.dwHighDateTime=0x1c9928b, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc03b7000, ftLastWriteTime.dwHighDateTime=0x1c9928b, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0138.656] wcscmp (_String1="MSO.ACL", _String2=".") returned 1 [0138.656] wcscmp (_String1="MSO.ACL", _String2="..") returned 1 [0138.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f331c8 [0138.656] wcscpy (in: _Dest=0x3f331c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036" [0138.656] wcscat (in: _Dest=0x3f331c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\" [0138.656] wcscat (in: _Dest=0x3f331c8, _Source="MSO.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" [0139.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f331c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0139.617] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc03b7000, ftCreationTime.dwHighDateTime=0x1c9928b, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc03b7000, ftLastWriteTime.dwHighDateTime=0x1c9928b, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0139.617] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0139.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049320) returned 1 [0139.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f336d8) returned 1 [0139.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c468) returned 1 Thread: id = 658 os_tid = 0x1154 [0135.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33748 [0135.458] wcscpy (in: _Dest=0x3f33748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082" [0135.458] wcscat (in: _Dest=0x3f33748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\" [0135.458] wcscat (in: _Dest=0x3f33748, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*" [0135.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a3f8 [0135.458] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba86390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ba86390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f18 [0138.657] wcscmp (_String1=".", _String2=".") returned 0 [0138.657] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba86390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ba86390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.657] wcscmp (_String1="..", _String2=".") returned 1 [0138.657] wcscmp (_String1="..", _String2="..") returned 0 [0138.657] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc29fc900, ftCreationTime.dwHighDateTime=0x1c9928f, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc29fc900, ftLastWriteTime.dwHighDateTime=0x1c9928f, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0138.657] wcscmp (_String1="MSO.ACL", _String2=".") returned 1 [0138.657] wcscmp (_String1="MSO.ACL", _String2="..") returned 1 [0138.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33150 [0138.657] wcscpy (in: _Dest=0x3f33150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082" [0138.657] wcscat (in: _Dest=0x3f33150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\" [0138.657] wcscat (in: _Dest=0x3f33150, _Source="MSO.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" [0139.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0139.620] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc29fc900, ftCreationTime.dwHighDateTime=0x1c9928f, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc29fc900, ftLastWriteTime.dwHighDateTime=0x1c9928f, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0139.620] FindClose (in: hFindFile=0x3f37f18 | out: hFindFile=0x3f37f18) returned 1 [0139.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a3f8) returned 1 [0139.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33748) returned 1 [0139.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd548) returned 1 Thread: id = 659 os_tid = 0x1158 [0135.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b370 [0135.459] wcscpy (in: _Dest=0x3f0b370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0135.459] wcscat (in: _Dest=0x3f0b370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0135.459] wcscat (in: _Dest=0x3f0b370, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*" [0135.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0135.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c3dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0138.658] wcscmp (_String1=".", _String2=".") returned 0 [0138.658] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c3dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.658] wcscmp (_String1="..", _String2=".") returned 1 [0138.658] wcscmp (_String1="..", _String2="..") returned 0 [0138.658] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d93600, ftCreationTime.dwHighDateTime=0x1c90e05, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85d93600, ftLastWriteTime.dwHighDateTime=0x1c90e05, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1 [0138.658] wcscmp (_String1="CLNTWRAP.HTM", _String2=".") returned 1 [0138.658] wcscmp (_String1="CLNTWRAP.HTM", _String2="..") returned 1 [0138.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f347a0 [0138.658] wcscpy (in: _Dest=0x3f347a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0138.658] wcscat (in: _Dest=0x3f347a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0138.658] wcscat (in: _Dest=0x3f347a0, _Source="CLNTWRAP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" [0139.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f347a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0139.622] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387b000, ftCreationTime.dwHighDateTime=0x1ca107c, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3387b000, ftLastWriteTime.dwHighDateTime=0x1ca107c, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1 [0139.622] wcscmp (_String1="RPT2HTM4.XSL", _String2=".") returned 1 [0139.622] wcscmp (_String1="RPT2HTM4.XSL", _String2="..") returned 1 [0139.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f359a0 [0139.622] wcscpy (in: _Dest=0x3f359a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0139.622] wcscat (in: _Dest=0x3f359a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0139.622] wcscat (in: _Dest=0x3f359a0, _Source="RPT2HTM4.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" [0139.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f359a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0139.624] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d87d00, ftCreationTime.dwHighDateTime=0x1c89f18, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64d87d00, ftLastWriteTime.dwHighDateTime=0x1c89f18, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1 [0139.624] wcscmp (_String1="SERVWRAP.ASP", _String2=".") returned 1 [0139.624] wcscmp (_String1="SERVWRAP.ASP", _String2="..") returned 1 [0139.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34950 [0139.624] wcscpy (in: _Dest=0x3f34950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0139.624] wcscat (in: _Dest=0x3f34950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0139.624] wcscat (in: _Dest=0x3f34950, _Source="SERVWRAP.ASP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" [0139.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0139.625] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d87d00, ftCreationTime.dwHighDateTime=0x1c89f18, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64d87d00, ftLastWriteTime.dwHighDateTime=0x1c89f18, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0 [0139.625] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0139.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0139.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0139.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32868) returned 1 Thread: id = 660 os_tid = 0x115c [0135.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f337b8 [0135.461] wcscpy (in: _Dest=0x3f337b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0135.461] wcscat (in: _Dest=0x3f337b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0135.461] wcscat (in: _Dest=0x3f337b8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*" [0135.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0135.461] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85769b50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098850 [0139.324] wcscmp (_String1=".", _String2=".") returned 0 [0139.324] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85769b50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.325] wcscmp (_String1="..", _String2=".") returned 1 [0139.325] wcscmp (_String1="..", _String2="..") returned 0 [0139.325] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80dd7a00, ftCreationTime.dwHighDateTime=0x1cabb95, ftLastAccessTime.dwLowDateTime=0x856d15d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80dd7a00, ftLastWriteTime.dwHighDateTime=0x1cabb95, nFileSizeHigh=0x0, nFileSizeLow=0x5f6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="ACWZDA~1.ACC")) returned 1 [0139.325] wcscmp (_String1="ACWZDAT12.ACCDU", _String2=".") returned 1 [0139.325] wcscmp (_String1="ACWZDAT12.ACCDU", _String2="..") returned 1 [0139.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34b90 [0139.325] wcscpy (in: _Dest=0x3f34b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0139.325] wcscat (in: _Dest=0x3f34b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0139.325] wcscat (in: _Dest=0x3f34b90, _Source="ACWZDAT12.ACCDU" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" [0161.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu")) returned 0x20 [0161.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", dwFileAttributes=0x20) returned 0 [0161.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.223] GetLastError () returned 0x5 [0161.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", dwFileAttributes=0x20) returned 0 [0161.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34b90) returned 1 [0161.223] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a767200, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x856f7730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a767200, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="ACWZLI~1.ACC")) returned 1 [0161.223] wcscmp (_String1="ACWZLIB.ACCDE", _String2=".") returned 1 [0161.223] wcscmp (_String1="ACWZLIB.ACCDE", _String2="..") returned 1 [0161.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3338 [0161.224] wcscpy (in: _Dest=0x81d3338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0161.224] wcscat (in: _Dest=0x81d3338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0161.224] wcscat (in: _Dest=0x81d3338, _Source="ACWZLIB.ACCDE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" [0161.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde")) returned 0x20 [0161.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", dwFileAttributes=0x20) returned 0 [0161.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.224] GetLastError () returned 0x5 [0161.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", dwFileAttributes=0x20) returned 0 [0161.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3338) returned 1 [0161.225] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a767200, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a767200, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0x7e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="ACWZMA~1.ACC")) returned 1 [0161.225] wcscmp (_String1="ACWZMAIN.ACCDE", _String2=".") returned 1 [0161.225] wcscmp (_String1="ACWZMAIN.ACCDE", _String2="..") returned 1 [0161.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34b90 [0161.225] wcscpy (in: _Dest=0x3f34b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0161.225] wcscat (in: _Dest=0x3f34b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0161.225] wcscat (in: _Dest=0x3f34b90, _Source="ACWZMAIN.ACCDE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" [0161.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde")) returned 0x20 [0161.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", dwFileAttributes=0x20) returned 0 [0161.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.231] GetLastError () returned 0x5 [0161.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", dwFileAttributes=0x20) returned 0 [0161.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34b90) returned 1 [0161.231] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba79f00, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ba79f00, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0x964000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="ACWZTO~1.ACC")) returned 1 [0161.231] wcscmp (_String1="ACWZTOOL.ACCDE", _String2=".") returned 1 [0161.231] wcscmp (_String1="ACWZTOOL.ACCDE", _String2="..") returned 1 [0161.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34b90 [0161.231] wcscpy (in: _Dest=0x3f34b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0161.231] wcscat (in: _Dest=0x3f34b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0161.231] wcscat (in: _Dest=0x3f34b90, _Source="ACWZTOOL.ACCDE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" [0164.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24dc [0164.632] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80dd7a00, ftCreationTime.dwHighDateTime=0x1cabb95, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80dd7a00, ftLastWriteTime.dwHighDateTime=0x1cabb95, nFileSizeHigh=0x0, nFileSizeLow=0x348000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="ACWZUS~1.ACC")) returned 1 [0164.632] wcscmp (_String1="ACWZUSR12.ACCDU", _String2=".") returned 1 [0164.632] wcscmp (_String1="ACWZUSR12.ACCDU", _String2="..") returned 1 [0164.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de068 [0164.632] wcscpy (in: _Dest=0x81de068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0164.632] wcscat (in: _Dest=0x81de068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0164.632] wcscat (in: _Dest=0x81de068, _Source="ACWZUSR12.ACCDU" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" [0164.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x283c [0164.633] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba79f00, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x8512a190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ba79f00, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 1 [0164.633] wcscmp (_String1="UTILITY.ACCDA", _String2=".") returned 1 [0164.633] wcscmp (_String1="UTILITY.ACCDA", _String2="..") returned 1 [0164.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0164.633] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0164.633] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0164.633] wcscat (in: _Dest=0x81c0190, _Source="UTILITY.ACCDA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" [0164.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2838 [0164.634] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba79f00, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x8512a190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ba79f00, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 0 [0164.634] FindClose (in: hFindFile=0x8098850 | out: hFindFile=0x8098850) returned 1 [0164.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0164.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f337b8) returned 1 [0164.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a348) returned 1 Thread: id = 661 os_tid = 0x1160 [0135.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33828 [0135.462] wcscpy (in: _Dest=0x3f33828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0135.462] wcscat (in: _Dest=0x3f33828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0135.462] wcscat (in: _Dest=0x3f33828, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*" [0135.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0135.462] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x882688b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54ac8 [0139.204] wcscmp (_String1=".", _String2=".") returned 0 [0139.204] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x882688b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.204] wcscmp (_String1="..", _String2=".") returned 1 [0139.204] wcscmp (_String1="..", _String2="..") returned 0 [0139.204] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x76392db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x16d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0139.204] wcscmp (_String1="ACCOLK.DLL", _String2=".") returned 1 [0139.204] wcscmp (_String1="ACCOLK.DLL", _String2="..") returned 1 [0139.204] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x7f1f3190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd587a000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x25380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAddin.dll", cAlternateFileName="")) returned 1 [0139.204] wcscmp (_String1="BCSAddin.dll", _String2=".") returned 1 [0139.204] wcscmp (_String1="BCSAddin.dll", _String2="..") returned 1 [0139.204] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28734900, ftCreationTime.dwHighDateTime=0x1cab832, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28734900, ftLastWriteTime.dwHighDateTime=0x1cab832, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="COLLEA~1.DLL")) returned 1 [0139.205] wcscmp (_String1="ColleagueImport.dll", _String2=".") returned 1 [0139.205] wcscmp (_String1="ColleagueImport.dll", _String2="..") returned 1 [0139.205] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a73100, ftCreationTime.dwHighDateTime=0x1bdbc83, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a73100, ftLastWriteTime.dwHighDateTime=0x1bdbc83, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0139.205] wcscmp (_String1="FAXEXT.ECF", _String2=".") returned 1 [0139.205] wcscmp (_String1="FAXEXT.ECF", _String2="..") returned 1 [0139.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30d10 [0139.205] wcscpy (in: _Dest=0x3f30d10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0139.205] wcscat (in: _Dest=0x3f30d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0139.205] wcscat (in: _Dest=0x3f30d10, _Source="FAXEXT.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" [0141.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0141.351] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69984400, ftCreationTime.dwHighDateTime=0x1c52bc7, ftLastAccessTime.dwLowDateTime=0x77b609b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69984400, ftLastWriteTime.dwHighDateTime=0x1c52bc7, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0141.351] wcscmp (_String1="MSOSEC.DLL", _String2=".") returned 1 [0141.351] wcscmp (_String1="MSOSEC.DLL", _String2="..") returned 1 [0141.351] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2c7900, ftCreationTime.dwHighDateTime=0x1c51fe0, ftLastAccessTime.dwLowDateTime=0x881d0330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9d2c7900, ftLastWriteTime.dwHighDateTime=0x1c51fe0, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0141.351] wcscmp (_String1="MSOSEC.XML", _String2=".") returned 1 [0141.351] wcscmp (_String1="MSOSEC.XML", _String2="..") returned 1 [0141.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30738 [0141.351] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0141.351] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0141.351] wcscat (in: _Dest=0x3f30738, _Source="MSOSEC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" [0141.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0141.352] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711f5100, ftCreationTime.dwHighDateTime=0x1bdf25d, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x711f5100, ftLastWriteTime.dwHighDateTime=0x1bdf25d, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0141.352] wcscmp (_String1="MSSPC.ECF", _String2=".") returned 1 [0141.352] wcscmp (_String1="MSSPC.ECF", _String2="..") returned 1 [0141.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6570 [0141.353] wcscpy (in: _Dest=0x3da6570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0141.353] wcscat (in: _Dest=0x3da6570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0141.353] wcscat (in: _Dest=0x3da6570, _Source="MSSPC.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" [0141.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3da6570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0141.354] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde238e00, ftCreationTime.dwHighDateTime=0x1c51fde, ftLastAccessTime.dwLowDateTime=0x77bd2dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde238e00, ftLastWriteTime.dwHighDateTime=0x1c51fde, nFileSizeHigh=0x0, nFileSizeLow=0x54000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSVCR71.DLL", cAlternateFileName="")) returned 1 [0141.354] wcscmp (_String1="MSVCR71.DLL", _String2=".") returned 1 [0141.354] wcscmp (_String1="MSVCR71.DLL", _String2="..") returned 1 [0141.354] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdb2dd00, ftCreationTime.dwHighDateTime=0x1c52bc0, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdb2dd00, ftLastWriteTime.dwHighDateTime=0x1c52bc0, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTKLOADR.DLL", cAlternateFileName="")) returned 1 [0141.354] wcscmp (_String1="OTKLOADR.DLL", _String2=".") returned 1 [0141.354] wcscmp (_String1="OTKLOADR.DLL", _String2="..") returned 1 [0141.354] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5cc500, ftCreationTime.dwHighDateTime=0x1c859e3, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfe5cc500, ftLastWriteTime.dwHighDateTime=0x1c859e3, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0141.354] wcscmp (_String1="OUTEX.ECF", _String2=".") returned 1 [0141.354] wcscmp (_String1="OUTEX.ECF", _String2="..") returned 1 [0141.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6770 [0141.354] wcscpy (in: _Dest=0x3da6770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0141.354] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0141.354] wcscat (in: _Dest=0x3da6770, _Source="OUTEX.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" [0141.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3da6770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0141.355] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583d300, ftCreationTime.dwHighDateTime=0x1c859e4, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x583d300, ftLastWriteTime.dwHighDateTime=0x1c859e4, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0141.355] wcscmp (_String1="OUTEX2.ECF", _String2=".") returned 1 [0141.355] wcscmp (_String1="OUTEX2.ECF", _String2="..") returned 1 [0141.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f302f8 [0141.356] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0141.356] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0141.356] wcscat (in: _Dest=0x3f302f8, _Source="OUTEX2.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" [0141.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0141.357] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x81dfc890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0xe578, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0141.357] wcscmp (_String1="OUTLVBA.DLL", _String2=".") returned 1 [0141.357] wcscmp (_String1="OUTLVBA.DLL", _String2="..") returned 1 [0141.357] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a280200, ftCreationTime.dwHighDateTime=0x1bdf25d, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a280200, ftLastWriteTime.dwHighDateTime=0x1bdf25d, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0141.357] wcscmp (_String1="PMAILEXT.ECF", _String2=".") returned 1 [0141.357] wcscmp (_String1="PMAILEXT.ECF", _String2="..") returned 1 [0141.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30628 [0141.357] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0141.357] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0141.357] wcscat (in: _Dest=0x3f30628, _Source="PMAILEXT.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" [0141.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0141.358] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4771db00, ftCreationTime.dwHighDateTime=0x1cab832, ftLastAccessTime.dwLowDateTime=0x85104030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4771db00, ftLastWriteTime.dwHighDateTime=0x1cab832, nFileSizeHigh=0x0, nFileSizeLow=0xfe160, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1 [0141.358] wcscmp (_String1="UmOutlookAddin.dll", _String2=".") returned 1 [0141.358] wcscmp (_String1="UmOutlookAddin.dll", _String2="..") returned 1 [0141.358] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4771db00, ftCreationTime.dwHighDateTime=0x1cab832, ftLastAccessTime.dwLowDateTime=0x85104030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4771db00, ftLastWriteTime.dwHighDateTime=0x1cab832, nFileSizeHigh=0x0, nFileSizeLow=0xfe160, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 0 [0141.358] FindClose (in: hFindFile=0x3e54ac8 | out: hFindFile=0x3e54ac8) returned 1 [0141.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0141.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33828) returned 1 [0141.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a3b8) returned 1 Thread: id = 662 os_tid = 0x1164 [0135.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic")) returned 0x20 [0137.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC", dwFileAttributes=0x20) returned 0 [0137.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.185] GetLastError () returned 0x5 [0137.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC", dwFileAttributes=0x20) returned 0 [0137.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e08) returned 1 Thread: id = 663 os_tid = 0x1168 [0135.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic")) returned 0x20 [0136.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC", dwFileAttributes=0x20) returned 0 [0136.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.216] GetLastError () returned 0x5 [0136.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC", dwFileAttributes=0x20) returned 0 [0136.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 Thread: id = 664 os_tid = 0x116c [0135.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic")) returned 0x20 [0138.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC", dwFileAttributes=0x20) returned 0 [0138.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.677] GetLastError () returned 0x5 [0138.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC", dwFileAttributes=0x20) returned 0 [0138.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 Thread: id = 665 os_tid = 0x1170 [0135.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng")) returned 0x20 [0138.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG", dwFileAttributes=0x20) returned 0 [0138.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.675] GetLastError () returned 0x5 [0138.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG", dwFileAttributes=0x20) returned 0 [0138.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 Thread: id = 666 os_tid = 0x1174 [0135.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man")) returned 0x20 [0138.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man", dwFileAttributes=0x20) returned 0 [0138.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.673] GetLastError () returned 0x5 [0138.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man", dwFileAttributes=0x20) returned 0 [0138.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34950) returned 1 Thread: id = 667 os_tid = 0x1178 [0135.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man")) returned 0x20 [0138.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man", dwFileAttributes=0x20) returned 0 [0138.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.671] GetLastError () returned 0x5 [0138.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man", dwFileAttributes=0x20) returned 0 [0138.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24040) returned 1 Thread: id = 668 os_tid = 0x117c [0135.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd")) returned 0x20 [0138.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd", dwFileAttributes=0x20) returned 0 [0138.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.669] GetLastError () returned 0x5 [0138.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd", dwFileAttributes=0x20) returned 0 [0138.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24740) returned 1 Thread: id = 669 os_tid = 0x1180 [0135.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd")) returned 0x20 [0138.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd", dwFileAttributes=0x20) returned 0 [0138.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.667] GetLastError () returned 0x5 [0138.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd", dwFileAttributes=0x20) returned 0 [0138.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34b90) returned 1 Thread: id = 670 os_tid = 0x1184 [0135.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24540 [0135.469] wcscpy (in: _Dest=0x3e24540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0135.469] wcscat (in: _Dest=0x3e24540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0135.469] wcscat (in: _Dest=0x3e24540, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*" [0135.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0135.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85da9510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80988d0 [0139.326] wcscmp (_String1=".", _String2=".") returned 0 [0139.326] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85da9510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.326] wcscmp (_String1="..", _String2=".") returned 1 [0139.326] wcscmp (_String1="..", _String2="..") returned 0 [0139.326] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64cf300, ftCreationTime.dwHighDateTime=0x1c6a3a7, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb64cf300, ftLastWriteTime.dwHighDateTime=0x1c6a3a7, nFileSizeHigh=0x0, nFileSizeLow=0x7925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2String.XSL", cAlternateFileName="AUTHOR~1.XSL")) returned 1 [0139.326] wcscmp (_String1="Author2String.XSL", _String2=".") returned 1 [0139.326] wcscmp (_String1="Author2String.XSL", _String2="..") returned 1 [0139.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11328 [0139.327] wcscpy (in: _Dest=0x3e11328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0139.327] wcscat (in: _Dest=0x3e11328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0139.327] wcscat (in: _Dest=0x3e11328, _Source="Author2String.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" [0148.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0148.191] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64cf300, ftCreationTime.dwHighDateTime=0x1c6a3a7, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb64cf300, ftLastWriteTime.dwHighDateTime=0x1c6a3a7, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2XML.XSL", cAlternateFileName="AUTHOR~2.XSL")) returned 1 [0148.191] wcscmp (_String1="Author2XML.XSL", _String2=".") returned 1 [0148.191] wcscmp (_String1="Author2XML.XSL", _String2="..") returned 1 [0148.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c838 [0148.191] wcscpy (in: _Dest=0x3e3c838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0148.191] wcscat (in: _Dest=0x3e3c838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0148.191] wcscat (in: _Dest=0x3e3c838, _Source="Author2XML.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" [0148.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0148.192] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sort", cAlternateFileName="")) returned 1 [0148.192] wcscmp (_String1="Sort", _String2=".") returned 1 [0148.192] wcscmp (_String1="Sort", _String2="..") returned 1 [0148.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fff8 [0148.192] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0148.192] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0148.192] wcscat (in: _Dest=0x3e1fff8, _Source="Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0148.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0148.194] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0148.194] wcscmp (_String1="Style", _String2=".") returned 1 [0148.194] wcscmp (_String1="Style", _String2="..") returned 1 [0148.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ebc8 [0148.194] wcscpy (in: _Dest=0x3e1ebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0148.194] wcscat (in: _Dest=0x3e1ebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0148.194] wcscat (in: _Dest=0x3e1ebc8, _Source="Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0148.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1ebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0148.197] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0148.197] FindClose (in: hFindFile=0x80988d0 | out: hFindFile=0x80988d0) returned 1 [0148.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0148.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24540) returned 1 [0148.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687e0) returned 1 Thread: id = 671 os_tid = 0x1188 [0135.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b6b8 [0135.470] wcscpy (in: _Dest=0x3f0b6b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0135.470] wcscat (in: _Dest=0x3f0b6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0135.470] wcscat (in: _Dest=0x3f0b6b8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*" [0135.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0135.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d4fa3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098890 [0139.325] wcscmp (_String1=".", _String2=".") returned 0 [0139.325] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d4fa3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.325] wcscmp (_String1="..", _String2=".") returned 1 [0139.325] wcscmp (_String1="..", _String2="..") returned 0 [0139.326] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1 [0139.326] wcscmp (_String1="MSART1.BDR", _String2=".") returned 1 [0139.326] wcscmp (_String1="MSART1.BDR", _String2="..") returned 1 [0139.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053280 [0139.326] wcscpy (in: _Dest=0x8053280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0139.326] wcscat (in: _Dest=0x8053280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0139.326] wcscat (in: _Dest=0x8053280, _Source="MSART1.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" [0144.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0144.982] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1 [0144.982] wcscmp (_String1="MSART10.BDR", _String2=".") returned 1 [0144.982] wcscmp (_String1="MSART10.BDR", _String2="..") returned 1 [0144.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30c00 [0144.983] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.983] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.983] wcscat (in: _Dest=0x3f30c00, _Source="MSART10.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" [0144.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0144.984] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1 [0144.984] wcscmp (_String1="MSART11.BDR", _String2=".") returned 1 [0144.984] wcscmp (_String1="MSART11.BDR", _String2="..") returned 1 [0144.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f9f0 [0144.984] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.985] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.985] wcscat (in: _Dest=0x3f2f9f0, _Source="MSART11.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" [0144.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0144.986] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1 [0144.986] wcscmp (_String1="MSART12.BDR", _String2=".") returned 1 [0144.986] wcscmp (_String1="MSART12.BDR", _String2="..") returned 1 [0144.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f311d8 [0144.986] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.986] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.986] wcscat (in: _Dest=0x3f311d8, _Source="MSART12.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" [0144.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0144.988] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1 [0144.988] wcscmp (_String1="MSART13.BDR", _String2=".") returned 1 [0144.988] wcscmp (_String1="MSART13.BDR", _String2="..") returned 1 [0144.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36e588 [0144.988] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.988] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.988] wcscat (in: _Dest=0x36e588, _Source="MSART13.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" [0144.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0144.989] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1 [0144.989] wcscmp (_String1="MSART14.BDR", _String2=".") returned 1 [0144.989] wcscmp (_String1="MSART14.BDR", _String2="..") returned 1 [0144.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36e830 [0144.990] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.990] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.990] wcscat (in: _Dest=0x36e830, _Source="MSART14.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" [0144.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0144.991] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1 [0144.991] wcscmp (_String1="MSART15.BDR", _String2=".") returned 1 [0144.991] wcscmp (_String1="MSART15.BDR", _String2="..") returned 1 [0144.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36ead8 [0144.991] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.991] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.991] wcscat (in: _Dest=0x36ead8, _Source="MSART15.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" [0144.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0144.992] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1 [0144.992] wcscmp (_String1="MSART2.BDR", _String2=".") returned 1 [0144.992] wcscmp (_String1="MSART2.BDR", _String2="..") returned 1 [0144.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3062c30 [0144.992] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.992] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.992] wcscat (in: _Dest=0x3062c30, _Source="MSART2.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" [0144.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc [0144.993] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1 [0144.993] wcscmp (_String1="MSART3.BDR", _String2=".") returned 1 [0144.993] wcscmp (_String1="MSART3.BDR", _String2="..") returned 1 [0144.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e678c8 [0144.994] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.994] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.994] wcscat (in: _Dest=0x3e678c8, _Source="MSART3.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" [0144.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8 [0144.995] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1 [0144.995] wcscmp (_String1="MSART4.BDR", _String2=".") returned 1 [0144.995] wcscmp (_String1="MSART4.BDR", _String2="..") returned 1 [0144.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x309a5f8 [0144.995] wcscpy (in: _Dest=0x309a5f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.995] wcscat (in: _Dest=0x309a5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.995] wcscat (in: _Dest=0x309a5f8, _Source="MSART4.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" [0144.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0144.996] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1 [0144.996] wcscmp (_String1="MSART5.BDR", _String2=".") returned 1 [0144.996] wcscmp (_String1="MSART5.BDR", _String2="..") returned 1 [0144.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be458 [0144.997] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.997] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.997] wcscat (in: _Dest=0x81be458, _Source="MSART5.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" [0144.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0144.998] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x808b63f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1 [0144.998] wcscmp (_String1="MSART6.BDR", _String2=".") returned 1 [0144.998] wcscmp (_String1="MSART6.BDR", _String2="..") returned 1 [0144.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be4e0 [0144.998] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0144.998] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0144.998] wcscat (in: _Dest=0x81be4e0, _Source="MSART6.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" [0144.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0145.000] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1 [0145.000] wcscmp (_String1="MSART7.BDR", _String2=".") returned 1 [0145.000] wcscmp (_String1="MSART7.BDR", _String2="..") returned 1 [0145.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be568 [0145.000] wcscpy (in: _Dest=0x81be568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0145.000] wcscat (in: _Dest=0x81be568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0145.000] wcscat (in: _Dest=0x81be568, _Source="MSART7.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" [0145.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0145.002] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1 [0145.002] wcscmp (_String1="MSART8.BDR", _String2=".") returned 1 [0145.002] wcscmp (_String1="MSART8.BDR", _String2="..") returned 1 [0145.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be5f0 [0145.002] wcscpy (in: _Dest=0x81be5f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0145.002] wcscat (in: _Dest=0x81be5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0145.002] wcscat (in: _Dest=0x81be5f0, _Source="MSART8.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" [0145.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0145.003] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1 [0145.003] wcscmp (_String1="MSART9.BDR", _String2=".") returned 1 [0145.004] wcscmp (_String1="MSART9.BDR", _String2="..") returned 1 [0145.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be678 [0145.004] wcscpy (in: _Dest=0x81be678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0145.004] wcscat (in: _Dest=0x81be678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0145.004] wcscat (in: _Dest=0x81be678, _Source="MSART9.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" [0145.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0145.005] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0 [0145.005] FindClose (in: hFindFile=0x8098890 | out: hFindFile=0x8098890) returned 1 [0145.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0145.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b6b8) returned 1 [0145.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33438) returned 1 Thread: id = 672 os_tid = 0x118c [0135.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr")) returned 0x20 [0138.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr", dwFileAttributes=0x20) returned 0 [0138.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.678] GetLastError () returned 0x5 [0138.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr", dwFileAttributes=0x20) returned 0 [0138.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24440) returned 1 Thread: id = 673 os_tid = 0x1190 [0135.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f33060 [0135.710] wcscpy (in: _Dest=0x3f33060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0135.710] wcscat (in: _Dest=0x3f33060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0135.710] wcscat (in: _Dest=0x3f33060, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*" [0135.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3e098 [0135.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x907b58b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfe90 [0139.320] wcscmp (_String1=".", _String2=".") returned 0 [0139.320] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x907b58b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.320] wcscmp (_String1="..", _String2=".") returned 1 [0139.320] wcscmp (_String1="..", _String2="..") returned 0 [0139.320] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0139.320] wcscmp (_String1="1033", _String2=".") returned 1 [0139.320] wcscmp (_String1="1033", _String2="..") returned 1 [0139.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33240 [0139.321] wcscpy (in: _Dest=0x3f33240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0139.321] wcscat (in: _Dest=0x3f33240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0139.321] wcscat (in: _Dest=0x3f33240, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0157.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0158.008] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xfb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3.SAM", cAlternateFileName="")) returned 1 [0158.008] wcscmp (_String1="ACT3.SAM", _String2=".") returned 1 [0158.008] wcscmp (_String1="ACT3.SAM", _String2="..") returned 1 [0158.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5888 [0158.009] wcscpy (in: _Dest=0x3dc5888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.009] wcscat (in: _Dest=0x3dc5888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.009] wcscat (in: _Dest=0x3dc5888, _Source="ACT3.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" [0158.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80 [0158.010] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x6390, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMDOS.FAE", cAlternateFileName="")) returned 1 [0158.010] wcscmp (_String1="DELIMDOS.FAE", _String2=".") returned 1 [0158.010] wcscmp (_String1="DELIMDOS.FAE", _String2="..") returned 1 [0158.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf118 [0158.010] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.010] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.010] wcscat (in: _Dest=0x81bf118, _Source="DELIMDOS.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" [0158.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b84 [0158.011] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1 [0158.011] wcscmp (_String1="DELIMWIN.FAE", _String2=".") returned 1 [0158.011] wcscmp (_String1="DELIMWIN.FAE", _String2="..") returned 1 [0158.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bede8 [0158.011] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.011] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.011] wcscat (in: _Dest=0x81bede8, _Source="DELIMWIN.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" [0158.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b88 [0158.012] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x771b5050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x4d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1 [0158.012] wcscmp (_String1="DESKSAM.SAM", _String2=".") returned 1 [0158.013] wcscmp (_String1="DESKSAM.SAM", _String2="..") returned 1 [0158.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81beb40 [0158.013] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.013] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.013] wcscat (in: _Dest=0x81beb40, _Source="DESKSAM.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" [0158.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b8c [0158.014] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x812ae010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xc178, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC.SAM", cAlternateFileName="")) returned 1 [0158.014] wcscmp (_String1="ODBC.SAM", _String2=".") returned 1 [0158.014] wcscmp (_String1="ODBC.SAM", _String2="..") returned 1 [0158.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5a08 [0158.014] wcscpy (in: _Dest=0x3dc5a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.014] wcscat (in: _Dest=0x3dc5a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.014] wcscat (in: _Dest=0x3dc5a08, _Source="ODBC.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" [0158.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b90 [0158.015] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x5980, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1 [0158.015] wcscmp (_String1="OL.SAM", _String2=".") returned 1 [0158.015] wcscmp (_String1="OL.SAM", _String2="..") returned 1 [0158.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3f88 [0158.015] wcscpy (in: _Dest=0x3dc3f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.015] wcscat (in: _Dest=0x3dc3f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.015] wcscat (in: _Dest=0x3dc3f88, _Source="OL.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" [0158.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b94 [0158.016] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x81581a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x16da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1 [0158.016] wcscmp (_String1="OLADD.FAE", _String2=".") returned 1 [0158.016] wcscmp (_String1="OLADD.FAE", _String2="..") returned 1 [0158.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81becd8 [0158.016] wcscpy (in: _Dest=0x81becd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.016] wcscat (in: _Dest=0x81becd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.016] wcscat (in: _Dest=0x81becd8, _Source="OLADD.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" [0158.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81becd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b98 [0158.017] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x155a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1 [0158.017] wcscmp (_String1="OLAPPT.FAE", _String2=".") returned 1 [0158.017] wcscmp (_String1="OLAPPT.FAE", _String2="..") returned 1 [0158.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be810 [0158.018] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.018] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.018] wcscat (in: _Dest=0x81be810, _Source="OLAPPT.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" [0158.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b9c [0158.019] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x81619fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1 [0158.019] wcscmp (_String1="OLJRNL.FAE", _String2=".") returned 1 [0158.019] wcscmp (_String1="OLJRNL.FAE", _String2="..") returned 1 [0158.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bed60 [0158.019] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.019] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.019] wcscat (in: _Dest=0x81bed60, _Source="OLJRNL.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" [0158.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba0 [0158.020] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xb998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1 [0158.020] wcscmp (_String1="OLMAIL.FAE", _String2=".") returned 1 [0158.020] wcscmp (_String1="OLMAIL.FAE", _String2="..") returned 1 [0158.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be898 [0158.020] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.020] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.020] wcscat (in: _Dest=0x81be898, _Source="OLMAIL.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" [0158.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba4 [0158.021] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x9798, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1 [0158.021] wcscmp (_String1="OLNOTE.FAE", _String2=".") returned 1 [0158.021] wcscmp (_String1="OLNOTE.FAE", _String2="..") returned 1 [0158.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be678 [0158.021] wcscpy (in: _Dest=0x81be678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.021] wcscat (in: _Dest=0x81be678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.021] wcscat (in: _Dest=0x81be678, _Source="OLNOTE.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" [0158.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba8 [0158.022] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e5319b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x14198, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1 [0158.023] wcscmp (_String1="OLTASK.FAE", _String2=".") returned 1 [0158.023] wcscmp (_String1="OLTASK.FAE", _String2="..") returned 1 [0158.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be568 [0158.023] wcscpy (in: _Dest=0x81be568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.023] wcscat (in: _Dest=0x81be568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.023] wcscat (in: _Dest=0x81be568, _Source="OLTASK.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" [0158.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bac [0158.024] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x81a1e4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xa988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97.SAM", cAlternateFileName="")) returned 1 [0158.024] wcscmp (_String1="ORG97.SAM", _String2=".") returned 1 [0158.024] wcscmp (_String1="ORG97.SAM", _String2="..") returned 1 [0158.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81be5f0 [0158.024] wcscpy (in: _Dest=0x81be5f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.024] wcscat (in: _Dest=0x81be5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.024] wcscat (in: _Dest=0x81be5f0, _Source="ORG97.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" [0158.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb0 [0158.025] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8f8aedd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xb778, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAB.SAM", cAlternateFileName="")) returned 1 [0158.025] wcscmp (_String1="PAB.SAM", _String2=".") returned 1 [0158.025] wcscmp (_String1="PAB.SAM", _String2="..") returned 1 [0158.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5808 [0158.025] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0158.025] wcscat (in: _Dest=0x3dc5808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0158.025] wcscat (in: _Dest=0x3dc5808, _Source="PAB.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" [0158.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb4 [0158.026] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x13168, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1 [0158.026] wcscmp (_String1="RM.DLL", _String2=".") returned 1 [0158.026] wcscmp (_String1="RM.DLL", _String2="..") returned 1 [0158.026] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1 [0158.026] wcscmp (_String1="TRANSMGR.DLL", _String2=".") returned 1 [0158.026] wcscmp (_String1="TRANSMGR.DLL", _String2="..") returned 1 [0158.027] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0 [0158.027] FindClose (in: hFindFile=0x3dcfe90 | out: hFindFile=0x3dcfe90) returned 1 [0158.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e098) returned 1 [0158.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0158.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f334a8) returned 1 Thread: id = 674 os_tid = 0x1194 [0135.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e6a9c8 [0135.712] wcscpy (in: _Dest=0x3e6a9c8, _Source="C:\\Users\\All Users\\Sun\\Java" | out: _Dest="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java" [0135.712] wcscat (in: _Dest=0x3e6a9c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\") returned="C:\\Users\\All Users\\Sun\\Java\\" [0135.712] wcscat (in: _Dest=0x3e6a9c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\*") returned="C:\\Users\\All Users\\Sun\\Java\\*" [0135.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3caf0 [0135.712] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f383d8 [0137.460] wcscmp (_String1=".", _String2=".") returned 0 [0137.460] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.460] wcscmp (_String1="..", _String2=".") returned 1 [0137.460] wcscmp (_String1="..", _String2="..") returned 0 [0137.460] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0137.460] wcscmp (_String1="Java Update", _String2=".") returned 1 [0137.460] wcscmp (_String1="Java Update", _String2="..") returned 1 [0137.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e234e0 [0137.461] wcscpy (in: _Dest=0x3e234e0, _Source="C:\\Users\\All Users\\Sun\\Java" | out: _Dest="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java" [0137.461] wcscat (in: _Dest=0x3e234e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\") returned="C:\\Users\\All Users\\Sun\\Java\\" [0137.461] wcscat (in: _Dest=0x3e234e0, _Source="Java Update" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update" [0149.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e234e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0149.538] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0149.538] FindClose (in: hFindFile=0x3f383d8 | out: hFindFile=0x3f383d8) returned 1 [0149.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3caf0) returned 1 [0149.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a9c8) returned 1 [0149.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f375d8) returned 1 Thread: id = 675 os_tid = 0x1198 [0135.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7880 [0135.713] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0135.713] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0135.713] wcscat (in: _Dest=0x2ff7880, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" [0135.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b2e0 [0135.713] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0137.167] wcscmp (_String1=".", _String2=".") returned 0 [0137.167] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.167] wcscmp (_String1="..", _String2=".") returned 1 [0137.167] wcscmp (_String1="..", _String2="..") returned 0 [0137.167] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa825f5e7, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa825f5e7, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7b99dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0137.167] wcscmp (_String1="background.png", _String2=".") returned 1 [0137.167] wcscmp (_String1="background.png", _String2="..") returned 1 [0137.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1c3f8 [0137.167] wcscpy (in: _Dest=0x3e1c3f8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0137.167] wcscat (in: _Dest=0x3e1c3f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0137.167] wcscat (in: _Dest=0x3e1c3f8, _Source="background.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" [0143.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0143.475] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dad96bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1dad96bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1dad96bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0143.475] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0143.475] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0143.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1ad38 [0143.475] wcscpy (in: _Dest=0x3e1ad38, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0143.475] wcscat (in: _Dest=0x3e1ad38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0143.475] wcscat (in: _Dest=0x3e1ad38, _Source="behavior.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" [0143.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ad38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0143.477] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8285746, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8285746, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7dfb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0143.477] wcscmp (_String1="device.png", _String2=".") returned 1 [0143.477] wcscmp (_String1="device.png", _String2="..") returned 1 [0143.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e34088 [0143.477] wcscpy (in: _Dest=0x3e34088, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0143.477] wcscat (in: _Dest=0x3e34088, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0143.477] wcscat (in: _Dest=0x3e34088, _Source="device.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" [0143.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0143.479] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82ab8a5, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82ab8a5, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0143.479] wcscmp (_String1="overlay.png", _String2=".") returned 1 [0143.479] wcscmp (_String1="overlay.png", _String2="..") returned 1 [0143.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e35348 [0143.479] wcscpy (in: _Dest=0x3e35348, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0143.479] wcscat (in: _Dest=0x3e35348, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0143.479] wcscat (in: _Dest=0x3e35348, _Source="overlay.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" [0143.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0143.480] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0143.480] wcscmp (_String1="superbar.png", _String2=".") returned 1 [0143.481] wcscmp (_String1="superbar.png", _String2="..") returned 1 [0143.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1b218 [0143.481] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0143.481] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0143.481] wcscat (in: _Dest=0x3e1b218, _Source="superbar.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" [0143.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0143.482] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0143.482] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0143.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b2e0) returned 1 [0143.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 [0143.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 676 os_tid = 0x119c [0135.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6f28 [0135.716] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0135.716] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0135.716] wcscat (in: _Dest=0x2ff6f28, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" [0135.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a6d8 [0135.716] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0135.716] wcscmp (_String1=".", _String2=".") returned 0 [0135.717] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.717] wcscmp (_String1="..", _String2=".") returned 1 [0135.717] wcscmp (_String1="..", _String2="..") returned 0 [0135.717] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a06b8bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2a06b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0135.717] wcscmp (_String1="background.png", _String2=".") returned 1 [0135.717] wcscmp (_String1="background.png", _String2="..") returned 1 [0135.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b218 [0135.717] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0135.717] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0135.717] wcscat (in: _Dest=0x3e1b218, _Source="background.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" [0137.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0137.051] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64cf1c24, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64cf1c24, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0137.051] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0137.051] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0137.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c598 [0137.052] wcscpy (in: _Dest=0x3e1c598, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0137.052] wcscat (in: _Dest=0x3e1c598, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0137.052] wcscat (in: _Dest=0x3e1c598, _Source="behavior.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" [0137.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0137.053] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0137.053] wcscmp (_String1="watermark.png", _String2=".") returned 1 [0137.053] wcscmp (_String1="watermark.png", _String2="..") returned 1 [0137.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1ad38 [0137.053] wcscpy (in: _Dest=0x3e1ad38, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0137.053] wcscat (in: _Dest=0x3e1ad38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0137.053] wcscat (in: _Dest=0x3e1ad38, _Source="watermark.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" [0137.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ad38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0137.054] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0137.054] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0137.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a6d8) returned 1 [0137.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 [0137.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 Thread: id = 677 os_tid = 0x11a0 [0135.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c2c8 [0135.718] wcscpy (in: _Dest=0x35c2c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" [0135.718] wcscat (in: _Dest=0x35c2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\" [0135.718] wcscat (in: _Dest=0x35c2c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*" [0135.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0135.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0137.168] wcscmp (_String1=".", _String2=".") returned 0 [0137.168] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.168] wcscmp (_String1="..", _String2=".") returned 1 [0137.168] wcscmp (_String1="..", _String2="..") returned 0 [0137.168] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0137.168] wcscmp (_String1="1033", _String2=".") returned 1 [0137.168] wcscmp (_String1="1033", _String2="..") returned 1 [0137.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff79f0 [0137.168] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" [0137.168] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\" [0137.169] wcscat (in: _Dest=0x2ff79f0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0141.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0141.426] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0141.426] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0141.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0141.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c2c8) returned 1 [0141.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 678 os_tid = 0x11a4 [0135.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6b90 [0135.719] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" [0135.719] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\" [0135.719] wcscat (in: _Dest=0x2ff6b90, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*" [0135.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d228 [0135.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0137.169] wcscmp (_String1=".", _String2=".") returned 0 [0137.169] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.169] wcscmp (_String1="..", _String2=".") returned 1 [0137.169] wcscmp (_String1="..", _String2="..") returned 0 [0137.169] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0137.169] wcscmp (_String1="1033", _String2=".") returned 1 [0137.169] wcscmp (_String1="1033", _String2="..") returned 1 [0137.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3329e8 [0137.169] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" [0137.169] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\" [0137.169] wcscat (in: _Dest=0x3329e8, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0141.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0141.428] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0141.428] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0141.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d228) returned 1 [0141.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0141.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 Thread: id = 679 os_tid = 0x11a8 [0135.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35400 [0135.720] wcscpy (in: _Dest=0x3f35400, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0135.720] wcscat (in: _Dest=0x3f35400, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0135.720] wcscat (in: _Dest=0x3f35400, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*" [0135.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ae10 [0135.720] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0135.720] wcscmp (_String1=".", _String2=".") returned 0 [0135.720] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.720] wcscmp (_String1="..", _String2=".") returned 1 [0135.720] wcscmp (_String1="..", _String2="..") returned 0 [0135.720] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0135.720] wcscmp (_String1="Accessibility", _String2=".") returned 1 [0135.720] wcscmp (_String1="Accessibility", _String2="..") returned 1 [0135.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2cf48 [0135.721] wcscpy (in: _Dest=0x3e2cf48, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0135.721] wcscat (in: _Dest=0x3e2cf48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0135.721] wcscat (in: _Dest=0x3e2cf48, _Source="Accessibility" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0145.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0145.014] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8b5f96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c8b5f96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c8b5f96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0145.015] wcscmp (_String1="Calculator.lnk", _String2=".") returned 1 [0145.015] wcscmp (_String1="Calculator.lnk", _String2="..") returned 1 [0145.015] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9350cc63, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9350cc63, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0145.015] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0145.015] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0145.015] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b19ca14, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b19ca14, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b19ca14, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0145.015] wcscmp (_String1="displayswitch.lnk", _String2=".") returned 1 [0145.015] wcscmp (_String1="displayswitch.lnk", _String2="..") returned 1 [0145.015] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea56fc00, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea56fc00, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea56fc00, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0145.015] wcscmp (_String1="Math Input Panel.lnk", _String2=".") returned 1 [0145.015] wcscmp (_String1="Math Input Panel.lnk", _String2="..") returned 1 [0145.016] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9479f40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe9479f40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe9479f40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0145.016] wcscmp (_String1="Mobility Center.lnk", _String2=".") returned 1 [0145.016] wcscmp (_String1="Mobility Center.lnk", _String2="..") returned 1 [0145.016] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a13760, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe6a13760, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe6a398c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0145.016] wcscmp (_String1="NetworkProjection.lnk", _String2=".") returned 1 [0145.016] wcscmp (_String1="NetworkProjection.lnk", _String2="..") returned 1 [0145.016] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f821656, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6f821656, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6f821656, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0145.016] wcscmp (_String1="Paint.lnk", _String2=".") returned 1 [0145.016] wcscmp (_String1="Paint.lnk", _String2="..") returned 1 [0145.016] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6c09bc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5f6c09bc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5f6c09bc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0145.016] wcscmp (_String1="Remote Desktop Connection.lnk", _String2=".") returned 1 [0145.016] wcscmp (_String1="Remote Desktop Connection.lnk", _String2="..") returned 1 [0145.016] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e2020, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5e2020, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0145.016] wcscmp (_String1="Snipping Tool.lnk", _String2=".") returned 1 [0145.016] wcscmp (_String1="Snipping Tool.lnk", _String2="..") returned 1 [0145.017] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e52066a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e52066a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e52066a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0145.017] wcscmp (_String1="Sound Recorder.lnk", _String2=".") returned 1 [0145.017] wcscmp (_String1="Sound Recorder.lnk", _String2="..") returned 1 [0145.017] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4fd7e0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea4fd7e0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea4fd7e0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0145.017] wcscmp (_String1="Sticky Notes.lnk", _String2=".") returned 1 [0145.017] wcscmp (_String1="Sticky Notes.lnk", _String2="..") returned 1 [0145.017] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae14945, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ae14945, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ae14945, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0145.017] wcscmp (_String1="Sync Center.lnk", _String2=".") returned 1 [0145.017] wcscmp (_String1="Sync Center.lnk", _String2="..") returned 1 [0145.017] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0145.018] wcscmp (_String1="System Tools", _String2=".") returned 1 [0145.018] wcscmp (_String1="System Tools", _String2="..") returned 1 [0145.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187aa8 [0145.018] wcscpy (in: _Dest=0x8187aa8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0145.018] wcscat (in: _Dest=0x8187aa8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0145.018] wcscat (in: _Dest=0x8187aa8, _Source="System Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0145.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8187aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0145.020] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0145.020] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0145.020] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0145.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a6d8 [0145.020] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0145.020] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0145.020] wcscat (in: _Dest=0x819a6d8, _Source="Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0145.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0145.021] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec6a9d8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ec6a9d8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ec6a9d8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0145.021] wcscmp (_String1="Welcome Center.lnk", _String2=".") returned 1 [0145.022] wcscmp (_String1="Welcome Center.lnk", _String2="..") returned 1 [0145.022] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0145.022] wcscmp (_String1="Windows PowerShell", _String2=".") returned 1 [0145.022] wcscmp (_String1="Windows PowerShell", _String2="..") returned 1 [0145.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b878 [0145.022] wcscpy (in: _Dest=0x35b878, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0145.022] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0145.022] wcscat (in: _Dest=0x35b878, _Source="Windows PowerShell" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0145.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0145.024] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0145.024] wcscmp (_String1="Wordpad.lnk", _String2=".") returned 1 [0145.024] wcscmp (_String1="Wordpad.lnk", _String2="..") returned 1 [0145.024] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0145.024] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0145.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ae10) returned 1 [0145.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35400) returned 1 [0145.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34a70) returned 1 Thread: id = 680 os_tid = 0x11ac [0135.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e120e8 [0135.721] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0135.721] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\" [0135.721] wcscat (in: _Dest=0x3e120e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*" [0135.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0135.721] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0135.722] wcscmp (_String1=".", _String2=".") returned 0 [0135.722] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.722] wcscmp (_String1="..", _String2=".") returned 1 [0135.722] wcscmp (_String1="..", _String2="..") returned 0 [0135.722] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11bc7ea2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11bc7ea2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x11bc7ea2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0135.722] wcscmp (_String1="Component Services.lnk", _String2=".") returned 1 [0135.722] wcscmp (_String1="Component Services.lnk", _String2="..") returned 1 [0135.722] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ecb7b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a3ecb7b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a412cdb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0135.722] wcscmp (_String1="Computer Management.lnk", _String2=".") returned 1 [0135.722] wcscmp (_String1="Computer Management.lnk", _String2="..") returned 1 [0135.722] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffd732, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5dffd732, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5dffd732, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0135.722] wcscmp (_String1="Data Sources (ODBC).lnk", _String2=".") returned 1 [0135.722] wcscmp (_String1="Data Sources (ODBC).lnk", _String2="..") returned 1 [0135.722] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5571e536, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5571e536, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.722] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0135.722] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0135.722] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6de18586, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6de18586, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6de18586, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0135.722] wcscmp (_String1="Event Viewer.lnk", _String2=".") returned 1 [0135.722] wcscmp (_String1="Event Viewer.lnk", _String2="..") returned 1 [0135.723] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a77ec81, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a77ec81, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a77ec81, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0135.723] wcscmp (_String1="iSCSI Initiator.lnk", _String2=".") returned 1 [0135.723] wcscmp (_String1="iSCSI Initiator.lnk", _String2="..") returned 1 [0135.723] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556f83d6, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x556f83d6, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x556f83d6, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0135.723] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2=".") returned 1 [0135.723] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2="..") returned 1 [0135.723] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d227738, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d227738, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d227738, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0135.723] wcscmp (_String1="Performance Monitor.lnk", _String2=".") returned 1 [0135.723] wcscmp (_String1="Performance Monitor.lnk", _String2="..") returned 1 [0135.723] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a63280, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe4a63280, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe4a63280, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0135.723] wcscmp (_String1="Print Management.lnk", _String2=".") returned 1 [0135.723] wcscmp (_String1="Print Management.lnk", _String2="..") returned 1 [0135.723] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed792b60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed792b60, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0135.723] wcscmp (_String1="Security Configuration Management.lnk", _String2=".") returned 1 [0135.723] wcscmp (_String1="Security Configuration Management.lnk", _String2="..") returned 1 [0135.723] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645e65ce, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x645e65ce, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6460c72e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0135.723] wcscmp (_String1="services.lnk", _String2=".") returned 1 [0135.723] wcscmp (_String1="services.lnk", _String2="..") returned 1 [0135.723] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5590d719, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5590d719, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5593387a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0135.723] wcscmp (_String1="System Configuration.lnk", _String2=".") returned 1 [0135.723] wcscmp (_String1="System Configuration.lnk", _String2="..") returned 1 [0135.723] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6defcdc8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6defcdc8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6defcdc8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0135.724] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0135.724] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0135.724] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x614cdfb3, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x614cdfb3, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x615b27f5, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0135.724] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2=".") returned 1 [0135.724] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2="..") returned 1 [0135.724] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0135.724] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2=".") returned 1 [0135.724] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2="..") returned 1 [0135.724] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0135.724] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0135.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0135.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 [0135.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 681 os_tid = 0x11b0 [0135.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2ff40 [0135.732] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0135.732] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\" [0135.732] wcscat (in: _Dest=0x3f2ff40, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*" [0135.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0135.732] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0135.733] wcscmp (_String1=".", _String2=".") returned 0 [0135.733] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.733] wcscmp (_String1="..", _String2=".") returned 1 [0135.733] wcscmp (_String1="..", _String2="..") returned 0 [0135.733] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x8ecb8f72, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x8ecb8f72, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.733] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0135.733] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0135.733] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0135.733] wcscmp (_String1="GameExplorer.lnk", _String2=".") returned 1 [0135.733] wcscmp (_String1="GameExplorer.lnk", _String2="..") returned 1 [0135.733] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 0 [0135.733] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0135.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0135.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 [0135.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24240) returned 1 Thread: id = 682 os_tid = 0x11b4 [0135.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24240 [0135.735] wcscpy (in: _Dest=0x3e24240, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0135.736] wcscat (in: _Dest=0x3e24240, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\" [0135.736] wcscat (in: _Dest=0x3e24240, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*" [0135.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0135.736] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0135.738] wcscmp (_String1=".", _String2=".") returned 0 [0135.738] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.738] wcscmp (_String1="..", _String2=".") returned 1 [0135.738] wcscmp (_String1="..", _String2="..") returned 0 [0135.738] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0135.738] wcscmp (_String1="About Java.lnk", _String2=".") returned 1 [0135.738] wcscmp (_String1="About Java.lnk", _String2="..") returned 1 [0135.738] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0135.738] wcscmp (_String1="Check For Updates.lnk", _String2=".") returned 1 [0135.738] wcscmp (_String1="Check For Updates.lnk", _String2="..") returned 1 [0135.738] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6ae80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c6ae80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x78d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0135.738] wcscmp (_String1="Configure Java.lnk", _String2=".") returned 1 [0135.738] wcscmp (_String1="Configure Java.lnk", _String2="..") returned 1 [0135.738] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0135.738] wcscmp (_String1="Get Help.lnk", _String2=".") returned 1 [0135.739] wcscmp (_String1="Get Help.lnk", _String2="..") returned 1 [0135.739] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0135.739] wcscmp (_String1="Visit Java.com.lnk", _String2=".") returned 1 [0135.739] wcscmp (_String1="Visit Java.com.lnk", _String2="..") returned 1 [0135.739] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 0 [0135.739] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0135.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0135.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24240) returned 1 [0135.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24640) returned 1 Thread: id = 683 os_tid = 0x11b8 [0135.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35490 [0135.742] wcscpy (in: _Dest=0x3f35490, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0135.742] wcscat (in: _Dest=0x3f35490, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\" [0135.742] wcscat (in: _Dest=0x3f35490, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*" [0135.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0135.743] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0135.743] wcscmp (_String1=".", _String2=".") returned 0 [0135.743] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.743] wcscmp (_String1="..", _String2=".") returned 1 [0135.743] wcscmp (_String1="..", _String2="..") returned 0 [0135.743] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd17c1c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7dd17c1c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7dd17c1c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0135.743] wcscmp (_String1="Backup and Restore Center.lnk", _String2=".") returned 1 [0135.743] wcscmp (_String1="Backup and Restore Center.lnk", _String2="..") returned 1 [0135.743] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f211e22, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0135.743] wcscmp (_String1="Create Recovery Disc.lnk", _String2=".") returned 1 [0135.743] wcscmp (_String1="Create Recovery Disc.lnk", _String2="..") returned 1 [0135.743] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x935a51df, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x935a51df, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0135.743] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0135.743] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0135.743] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0135.743] wcscmp (_String1="Remote Assistance.lnk", _String2=".") returned 1 [0135.743] wcscmp (_String1="Remote Assistance.lnk", _String2="..") returned 1 [0135.744] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 0 [0135.744] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0135.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0135.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35490) returned 1 [0135.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 Thread: id = 684 os_tid = 0x11bc [0135.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e29f48 [0135.745] wcscpy (in: _Dest=0x3e29f48, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0135.745] wcscat (in: _Dest=0x3e29f48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0135.745] wcscat (in: _Dest=0x3e29f48, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*" [0135.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0135.745] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0135.746] wcscmp (_String1=".", _String2=".") returned 0 [0135.746] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.746] wcscmp (_String1="..", _String2=".") returned 1 [0135.746] wcscmp (_String1="..", _String2="..") returned 0 [0135.746] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0135.746] wcscmp (_String1="Microsoft Access 2010.lnk", _String2=".") returned 1 [0135.746] wcscmp (_String1="Microsoft Access 2010.lnk", _String2="..") returned 1 [0135.746] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0135.746] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2=".") returned 1 [0135.746] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2="..") returned 1 [0135.746] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97214fd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0135.746] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2=".") returned 1 [0135.746] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2="..") returned 1 [0135.746] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8dc50b0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8dc50b0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0135.746] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2=".") returned 1 [0135.746] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2="..") returned 1 [0135.746] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0135.746] wcscmp (_String1="Microsoft Office 2010 Tools", _String2=".") returned 1 [0135.746] wcscmp (_String1="Microsoft Office 2010 Tools", _String2="..") returned 1 [0135.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1b558 [0135.747] wcscpy (in: _Dest=0x3e1b558, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0135.747] wcscat (in: _Dest=0x3e1b558, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0135.747] wcscat (in: _Dest=0x3e1b558, _Source="Microsoft Office 2010 Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0148.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c [0148.215] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0148.215] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2=".") returned 1 [0148.215] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2="..") returned 1 [0148.215] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0148.215] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2=".") returned 1 [0148.215] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2="..") returned 1 [0148.216] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0148.216] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2=".") returned 1 [0148.216] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2="..") returned 1 [0148.216] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8fa36d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8fa36d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0148.216] wcscmp (_String1="Microsoft Project 2010.lnk", _String2=".") returned 1 [0148.216] wcscmp (_String1="Microsoft Project 2010.lnk", _String2="..") returned 1 [0148.216] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0148.216] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2=".") returned 1 [0148.216] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2="..") returned 1 [0148.216] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0148.216] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0148.216] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0148.216] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22bb190, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0148.216] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2=".") returned 1 [0148.216] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2="..") returned 1 [0148.216] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0148.216] wcscmp (_String1="Microsoft Word 2010.lnk", _String2=".") returned 1 [0148.216] wcscmp (_String1="Microsoft Word 2010.lnk", _String2="..") returned 1 [0148.216] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 0 [0148.216] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0148.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0148.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e29f48) returned 1 [0148.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bcf8) returned 1 Thread: id = 685 os_tid = 0x11c0 [0135.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35250 [0135.747] wcscpy (in: _Dest=0x3f35250, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0135.747] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\" [0135.747] wcscat (in: _Dest=0x3f35250, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*" [0135.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0135.747] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0135.751] wcscmp (_String1=".", _String2=".") returned 0 [0135.751] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.751] wcscmp (_String1="..", _String2=".") returned 1 [0135.751] wcscmp (_String1="..", _String2="..") returned 0 [0135.751] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0135.751] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0135.751] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0135.751] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0 [0135.751] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0135.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0135.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0135.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 686 os_tid = 0x11c4 [0135.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2fda8 [0135.755] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0135.755] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\" [0135.755] wcscat (in: _Dest=0x3f2fda8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*" [0135.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0135.755] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0135.755] wcscmp (_String1=".", _String2=".") returned 0 [0135.755] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.755] wcscmp (_String1="..", _String2=".") returned 1 [0135.755] wcscmp (_String1="..", _String2="..") returned 0 [0135.755] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.755] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0135.756] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0135.756] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0135.756] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0135.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0135.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 [0135.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 687 os_tid = 0x11c8 [0135.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35250 [0135.757] wcscpy (in: _Dest=0x3f35250, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0135.757] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\" [0135.757] wcscat (in: _Dest=0x3f35250, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*" [0135.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0135.757] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0135.758] wcscmp (_String1=".", _String2=".") returned 0 [0135.758] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.758] wcscmp (_String1="..", _String2=".") returned 1 [0135.758] wcscmp (_String1="..", _String2="..") returned 0 [0135.758] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.758] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0135.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0135.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0135.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2feb8) returned 1 Thread: id = 688 os_tid = 0x11cc [0135.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186d88 [0135.760] wcscpy (in: _Dest=0x8186d88, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" [0135.760] wcscat (in: _Dest=0x8186d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" [0135.760] wcscat (in: _Dest=0x8186d88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\*" [0135.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0135.760] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecca5080, ftCreationTime.dwHighDateTime=0x1d5e67d, ftLastAccessTime.dwLowDateTime=0x67c060, ftLastAccessTime.dwHighDateTime=0x1d5df43, ftLastWriteTime.dwLowDateTime=0x67c060, ftLastWriteTime.dwHighDateTime=0x1d5df43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0135.760] wcscmp (_String1=".", _String2=".") returned 0 [0135.760] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecca5080, ftCreationTime.dwHighDateTime=0x1d5e67d, ftLastAccessTime.dwLowDateTime=0x67c060, ftLastAccessTime.dwHighDateTime=0x1d5df43, ftLastWriteTime.dwLowDateTime=0x67c060, ftLastWriteTime.dwHighDateTime=0x1d5df43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.761] wcscmp (_String1="..", _String2=".") returned 1 [0135.761] wcscmp (_String1="..", _String2="..") returned 0 [0135.761] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5922b730, ftCreationTime.dwHighDateTime=0x1d5e03a, ftLastAccessTime.dwLowDateTime=0x493aead0, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0x493aead0, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0xa653, dwReserved0=0x0, dwReserved1=0x0, cFileName="aV_xpSJ.gif", cAlternateFileName="")) returned 1 [0135.761] wcscmp (_String1="aV_xpSJ.gif", _String2=".") returned 1 [0135.761] wcscmp (_String1="aV_xpSJ.gif", _String2="..") returned 1 [0135.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333a68 [0135.761] wcscpy (in: _Dest=0x333a68, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" [0135.761] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" [0135.761] wcscat (in: _Dest=0x333a68, _Source="aV_xpSJ.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif" [0137.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0137.056] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6e3e380, ftCreationTime.dwHighDateTime=0x1d5e285, ftLastAccessTime.dwLowDateTime=0x17fca820, ftLastAccessTime.dwHighDateTime=0x1d5db48, ftLastWriteTime.dwLowDateTime=0x17fca820, ftLastWriteTime.dwHighDateTime=0x1d5db48, nFileSizeHigh=0x0, nFileSizeLow=0xb379, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ef8GKTmowNKD.png", cAlternateFileName="EF8GKT~1.PNG")) returned 1 [0137.056] wcscmp (_String1="Ef8GKTmowNKD.png", _String2=".") returned 1 [0137.057] wcscmp (_String1="Ef8GKTmowNKD.png", _String2="..") returned 1 [0137.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e34d08 [0137.057] wcscpy (in: _Dest=0x3e34d08, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" [0137.057] wcscat (in: _Dest=0x3e34d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" [0137.057] wcscat (in: _Dest=0x3e34d08, _Source="Ef8GKTmowNKD.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png" [0137.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0137.058] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791d7b50, ftCreationTime.dwHighDateTime=0x1d5e06d, ftLastAccessTime.dwLowDateTime=0x3cac2850, ftLastAccessTime.dwHighDateTime=0x1d5e1ea, ftLastWriteTime.dwLowDateTime=0x3cac2850, ftLastWriteTime.dwHighDateTime=0x1d5e1ea, nFileSizeHigh=0x0, nFileSizeLow=0x16d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWSMJfT 7o17IYREVB.jpg", cAlternateFileName="MWSMJF~1.JPG")) returned 1 [0137.058] wcscmp (_String1="MWSMJfT 7o17IYREVB.jpg", _String2=".") returned 1 [0137.058] wcscmp (_String1="MWSMJfT 7o17IYREVB.jpg", _String2="..") returned 1 [0137.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b3b8 [0137.058] wcscpy (in: _Dest=0x3e1b3b8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" [0137.058] wcscat (in: _Dest=0x3e1b3b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" [0137.058] wcscat (in: _Dest=0x3e1b3b8, _Source="MWSMJfT 7o17IYREVB.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg" [0137.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0137.059] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca41a110, ftCreationTime.dwHighDateTime=0x1d5e5f3, ftLastAccessTime.dwLowDateTime=0xa262f960, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0xa262f960, ftLastWriteTime.dwHighDateTime=0x1d5dff3, nFileSizeHigh=0x0, nFileSizeLow=0x784f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQ5PQk3.bmp", cAlternateFileName="")) returned 1 [0137.059] wcscmp (_String1="SQ5PQk3.bmp", _String2=".") returned 1 [0137.059] wcscmp (_String1="SQ5PQk3.bmp", _String2="..") returned 1 [0137.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333768 [0137.059] wcscpy (in: _Dest=0x333768, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt" [0137.059] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" [0137.060] wcscat (in: _Dest=0x333768, _Source="SQ5PQk3.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp" [0137.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0137.061] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca41a110, ftCreationTime.dwHighDateTime=0x1d5e5f3, ftLastAccessTime.dwLowDateTime=0xa262f960, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0xa262f960, ftLastWriteTime.dwHighDateTime=0x1d5dff3, nFileSizeHigh=0x0, nFileSizeLow=0x784f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQ5PQk3.bmp", cAlternateFileName="")) returned 0 [0137.061] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0137.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0137.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186d88) returned 1 [0137.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f0) returned 1 Thread: id = 689 os_tid = 0x11d0 [0135.761] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\mxk0ay2.png")) returned 0x20 [0135.762] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png", dwFileAttributes=0x20) returned 1 [0135.762] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\mxk0ay2.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x142c [0135.762] GetFileSizeEx (in: hFile=0x142c, lpFileSize=0x8c6fb40 | out: lpFileSize=0x8c6fb40*=12500) returned 1 [0135.762] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x30d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.762] ReadFile (in: hFile=0x142c, lpBuffer=0x8c6fb4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c6fb28, lpOverlapped=0x0 | out: lpBuffer=0x8c6fb4c*, lpNumberOfBytesRead=0x8c6fb28*=0x4, lpOverlapped=0x0) returned 1 [0135.764] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1428 [0135.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0135.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0135.764] NtQuerySystemTime (in: CurrentTime=0x8c6fac8 | out: CurrentTime=0x8c6fac8*=132471540044436000) returned 0x0 [0135.764] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x6fae460b [0135.764] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x7cdcbdf4 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x17dba3ba [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x2fbc85b0 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x43b912c0 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x206bd185 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x4f28e0cb [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x13f6275 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x3c984d5d [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x65e9d4ff [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x430a32e5 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x2a78d5d [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x7caa5dc4 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x560b462e [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0xd8e0c73 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x322059e2 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x58e86e79 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x58fdfa2e [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x71ff41a1 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x357198db [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x2e4df3d [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x32c51918 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x6d11e7ed [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x4b1720c1 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x75ab8312 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x3c00f6d9 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x387aa48a [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x39f0c86f [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x3bdabe01 [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x4b77e4cb [0135.765] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x4b6cc6b6 [0135.766] RtlRandomEx (in: Seed=0x8c6fac0 | out: Seed=0x8c6fac0) returned 0x306c1c66 [0135.777] ReadFile (in: hFile=0x142c, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x30d4, lpNumberOfBytesRead=0x8c6fabc, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0x8c6fabc*=0x30d4, lpOverlapped=0x0) returned 1 [0135.778] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.778] WriteFile (in: hFile=0x142c, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x30d4, lpNumberOfBytesWritten=0x8c6fac0, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0x8c6fac0*=0x30d4, lpOverlapped=0x0) returned 1 [0140.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af38 [0140.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0140.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0140.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0140.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0140.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0140.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d20) returned 1 [0140.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df3f38 [0140.452] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.453] WriteFile (in: hFile=0x142c, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x8c6fb34, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x8c6fb34*=0x108, lpOverlapped=0x0) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3ed8) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3f38) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0141.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186d88 [0141.053] wcscpy (in: _Dest=0x8186d88, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png" [0141.053] wcscat (in: _Dest=0x8186d88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png.f0dbec" [0141.053] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png.f0dbec", NtPathName=0x8c6fab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\mxk0aY2.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3338e8 [0141.706] FlushFileBuffers (hFile=0x142c) returned 1 [0141.707] CloseHandle (hObject=0x142c) returned 1 [0141.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186ce0 [0141.797] wcscpy (in: _Dest=0x8186ce0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\" [0141.797] wcscat (in: _Dest=0x8186ce0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\F0DBEC-Readme.txt" [0141.797] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\f0dbec-readme.txt")) returned 0x20 [0141.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ce0) returned 1 [0141.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 690 os_tid = 0x11d4 [0135.779] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\sjow.bmp")) returned 0x20 [0135.779] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp", dwFileAttributes=0x20) returned 1 [0135.779] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\sjow.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1428 [0135.779] GetFileSizeEx (in: hFile=0x1428, lpFileSize=0xb98fa58 | out: lpFileSize=0xb98fa58*=79940) returned 1 [0135.779] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x13840, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.779] ReadFile (in: hFile=0x1428, lpBuffer=0xb98fa64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb98fa40, lpOverlapped=0x0 | out: lpBuffer=0xb98fa64*, lpNumberOfBytesRead=0xb98fa40*=0x4, lpOverlapped=0x0) returned 1 [0135.781] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1428 [0135.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0135.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0135.782] NtQuerySystemTime (in: CurrentTime=0xb98f9e0 | out: CurrentTime=0xb98f9e0*=132471540044592000) returned 0x0 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x7b8fc738 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x48d3f58e [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x60ee14cf [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x2170a715 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x15ca0a06 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x76d788bb [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x10eaf3b1 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x46ff633 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x273959d5 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0xa082dd6 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x3fa83b35 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0xf100a36 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x239e93e1 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x11b45179 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x3020b02d [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x17b64fa8 [0135.782] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x29aa8d37 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x3073e262 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x6f348eb [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x50359b13 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x4c891358 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x26144045 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x500fbbd6 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x77a99c58 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x5192299c [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x1f624547 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x301e30e2 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x2e71b962 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x30c1ee49 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0xf000a90 [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x665e992a [0135.783] RtlRandomEx (in: Seed=0xb98f9d8 | out: Seed=0xb98f9d8) returned 0x3bea65b [0135.796] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.796] ReadFile (in: hFile=0x1428, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb98f9e0, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xb98f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.796] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a818 [0135.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0135.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1428 [0135.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1428) returned 1 [0135.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0135.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1428 [0135.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0135.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0135.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0135.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a818) returned 1 [0135.797] WriteFile (in: hFile=0x1428, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb98f9e0, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xb98f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0136.296] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.296] ReadFile (in: hFile=0x1428, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb98f9e0, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xb98f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.296] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0136.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e689c0 [0136.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2f58 [0136.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2f58) returned 1 [0136.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0136.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2f58 [0136.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef31d8 [0136.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef31d8) returned 1 [0136.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 [0136.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0136.297] WriteFile (in: hFile=0x1428, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb98f9e0, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xb98f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0136.302] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0xfc44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.302] ReadFile (in: hFile=0x1428, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb98f9e0, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xb98f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.302] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0xfc44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0136.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0136.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0136.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0136.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0136.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0136.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0136.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0136.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0136.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0136.303] WriteFile (in: hFile=0x1428, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb98f9e0, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xb98f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0136.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdbc8 [0136.307] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.307] WriteFile (in: hFile=0x1428, lpBuffer=0x3e16ce0*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0xb98fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3e16ce0*, lpNumberOfBytesWritten=0xb98fa4c*=0x142, lpOverlapped=0x0) returned 1 [0136.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0136.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2f58) returned 1 [0136.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef31d8) returned 1 [0136.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1428) returned 1 [0136.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdbc8) returned 1 [0136.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0136.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0136.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0136.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187418 [0136.439] wcscpy (in: _Dest=0x8187418, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp" [0136.439] wcscat (in: _Dest=0x8187418, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp.f0dbec" [0136.439] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp.f0dbec", NtPathName=0xb98f9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\sjow.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff72c0 [0136.553] FlushFileBuffers (hFile=0x1428) returned 1 [0136.557] CloseHandle (hObject=0x1428) returned 1 [0136.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187418 [0136.568] wcscpy (in: _Dest=0x8187418, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\" [0136.568] wcscat (in: _Dest=0x8187418, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\F0DBEC-Readme.txt" [0136.568] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\f0dbec-readme.txt")) returned 0xffffffff [0136.568] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13dc [0136.576] WriteFile (in: hFile=0x13dc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb98f9f4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb98f9f4*=0x70c, lpOverlapped=0x0) returned 1 [0136.580] CloseHandle (hObject=0x13dc) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187418) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a078) returned 1 Thread: id = 691 os_tid = 0x11d8 [0135.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2ae20 [0135.798] wcscpy (in: _Dest=0x3e2ae20, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" [0135.798] wcscat (in: _Dest=0x3e2ae20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" [0135.798] wcscat (in: _Dest=0x3e2ae20, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\*" [0135.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0135.798] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2abb7d10, ftCreationTime.dwHighDateTime=0x1d5df6c, ftLastAccessTime.dwLowDateTime=0xb8d2e220, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xb8d2e220, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0050 [0135.798] wcscmp (_String1=".", _String2=".") returned 0 [0135.798] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2abb7d10, ftCreationTime.dwHighDateTime=0x1d5df6c, ftLastAccessTime.dwLowDateTime=0xb8d2e220, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xb8d2e220, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.799] wcscmp (_String1="..", _String2=".") returned 1 [0135.799] wcscmp (_String1="..", _String2="..") returned 0 [0135.799] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf44988b0, ftCreationTime.dwHighDateTime=0x1d5e3a0, ftLastAccessTime.dwLowDateTime=0x557ae080, ftLastAccessTime.dwHighDateTime=0x1d5db3a, ftLastWriteTime.dwLowDateTime=0x557ae080, ftLastWriteTime.dwHighDateTime=0x1d5db3a, nFileSizeHigh=0x0, nFileSizeLow=0x1109a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CCJf.gif", cAlternateFileName="")) returned 1 [0135.799] wcscmp (_String1="CCJf.gif", _String2=".") returned 1 [0135.799] wcscmp (_String1="CCJf.gif", _String2="..") returned 1 [0135.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186e30 [0135.799] wcscpy (in: _Dest=0x8186e30, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" [0135.799] wcscat (in: _Dest=0x8186e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" [0135.799] wcscat (in: _Dest=0x8186e30, _Source="CCJf.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif" [0148.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0148.218] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1390da0, ftCreationTime.dwHighDateTime=0x1d5d8ee, ftLastAccessTime.dwLowDateTime=0xa1ba8530, ftLastAccessTime.dwHighDateTime=0x1d5dae1, ftLastWriteTime.dwLowDateTime=0xa1ba8530, ftLastWriteTime.dwHighDateTime=0x1d5dae1, nFileSizeHigh=0x0, nFileSizeLow=0x7439, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fv yNB9csqrY_c7MU.gif", cAlternateFileName="FVYNB9~1.GIF")) returned 1 [0148.219] wcscmp (_String1="Fv yNB9csqrY_c7MU.gif", _String2=".") returned 1 [0148.219] wcscmp (_String1="Fv yNB9csqrY_c7MU.gif", _String2="..") returned 1 [0148.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333768 [0148.219] wcscpy (in: _Dest=0x333768, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" [0148.219] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" [0148.219] wcscat (in: _Dest=0x333768, _Source="Fv yNB9csqrY_c7MU.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif" [0148.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0148.253] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa980580, ftCreationTime.dwHighDateTime=0x1d5dbbb, ftLastAccessTime.dwLowDateTime=0xc602260, ftLastAccessTime.dwHighDateTime=0x1d5dd1b, ftLastWriteTime.dwLowDateTime=0xc602260, ftLastWriteTime.dwHighDateTime=0x1d5dd1b, nFileSizeHigh=0x0, nFileSizeLow=0x17e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="fYsx5JCxc.bmp", cAlternateFileName="FYSX5J~1.BMP")) returned 1 [0148.253] wcscmp (_String1="fYsx5JCxc.bmp", _String2=".") returned 1 [0148.253] wcscmp (_String1="fYsx5JCxc.bmp", _String2="..") returned 1 [0148.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bf58 [0148.253] wcscpy (in: _Dest=0x35bf58, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" [0148.253] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" [0148.253] wcscat (in: _Dest=0x35bf58, _Source="fYsx5JCxc.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp" [0148.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650 [0148.258] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c40790, ftCreationTime.dwHighDateTime=0x1d5dbdc, ftLastAccessTime.dwLowDateTime=0x14b9a100, ftLastAccessTime.dwHighDateTime=0x1d5e4de, ftLastWriteTime.dwLowDateTime=0x14b9a100, ftLastWriteTime.dwHighDateTime=0x1d5e4de, nFileSizeHigh=0x0, nFileSizeLow=0x9138, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xk_jhLz3n9OVJ.bmp", cAlternateFileName="XK_JHL~1.BMP")) returned 1 [0148.258] wcscmp (_String1="Xk_jhLz3n9OVJ.bmp", _String2=".") returned 1 [0148.258] wcscmp (_String1="Xk_jhLz3n9OVJ.bmp", _String2="..") returned 1 [0148.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff72c0 [0148.258] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT" [0148.258] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" [0148.258] wcscat (in: _Dest=0x2ff72c0, _Source="Xk_jhLz3n9OVJ.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp" [0148.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff72c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0148.260] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c40790, ftCreationTime.dwHighDateTime=0x1d5dbdc, ftLastAccessTime.dwLowDateTime=0x14b9a100, ftLastAccessTime.dwHighDateTime=0x1d5e4de, ftLastWriteTime.dwLowDateTime=0x14b9a100, ftLastWriteTime.dwHighDateTime=0x1d5e4de, nFileSizeHigh=0x0, nFileSizeLow=0x9138, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xk_jhLz3n9OVJ.bmp", cAlternateFileName="XK_JHL~1.BMP")) returned 0 [0148.260] FindClose (in: hFindFile=0x3dd0050 | out: hFindFile=0x3dd0050) returned 1 [0148.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0148.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 [0148.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a4a0) returned 1 Thread: id = 692 os_tid = 0x11dc [0135.800] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\6hgso6-w.mkv")) returned 0x20 [0135.800] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv", dwFileAttributes=0x20) returned 1 [0135.800] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\6hgso6-w.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1420 [0135.800] GetFileSizeEx (in: hFile=0x1420, lpFileSize=0xbdcfb08 | out: lpFileSize=0xbdcfb08*=83987) returned 1 [0135.800] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x1480f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.801] ReadFile (in: hFile=0x1420, lpBuffer=0xbdcfb14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbdcfaf0, lpOverlapped=0x0 | out: lpBuffer=0xbdcfb14*, lpNumberOfBytesRead=0xbdcfaf0*=0x4, lpOverlapped=0x0) returned 1 [0135.803] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0135.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0135.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0135.803] NtQuerySystemTime (in: CurrentTime=0xbdcfa90 | out: CurrentTime=0xbdcfa90*=132471540044904000) returned 0x0 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x21dcbecd [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x483799be [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0xeaaa034 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x47eea479 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x40d87dd7 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x17522e53 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x4fe4be3 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x695c702a [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0xaa98d04 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x5484be32 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x164b3074 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x7731968e [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x941d850 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x509152e3 [0135.803] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x1161709f [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x71386f37 [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x5e3f61a5 [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x7c0d6261 [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x25f8a016 [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x4014157a [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x52937ae4 [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0xc031fac [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x591d7de6 [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x37d0610d [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x1b85219f [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x3bd95a7 [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x6d856baa [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0xff2c5f1 [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x7597e9f0 [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x4152453f [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x75b915d [0135.804] RtlRandomEx (in: Seed=0xbdcfa88 | out: Seed=0xbdcfa88) returned 0x3675930 [0135.816] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.816] ReadFile (in: hFile=0x1420, lpBuffer=0x8297478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbdcfa90, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0xbdcfa90*=0x3c00, lpOverlapped=0x0) returned 1 [0135.817] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a110 [0135.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0135.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0135.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0135.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0135.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0135.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0135.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4998) returned 1 [0135.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0135.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a110) returned 1 [0135.818] WriteFile (in: hFile=0x1420, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbdcfa90, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0xbdcfa90*=0x3c00, lpOverlapped=0x0) returned 1 [0136.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0136.305] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.305] ReadFile (in: hFile=0x1420, lpBuffer=0x8297478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbdcfa90, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0xbdcfa90*=0x3c00, lpOverlapped=0x0) returned 1 [0136.305] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0136.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0136.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0136.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0136.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0136.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0136.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0136.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0136.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0136.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0136.306] WriteFile (in: hFile=0x1420, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbdcfa90, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0xbdcfa90*=0x3c00, lpOverlapped=0x0) returned 1 [0136.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0136.309] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x10c13, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.309] ReadFile (in: hFile=0x1420, lpBuffer=0x8297478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbdcfa90, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0xbdcfa90*=0x3c00, lpOverlapped=0x0) returned 1 [0136.309] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x10c13, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0136.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0136.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef15e0 [0136.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef15e0) returned 1 [0136.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0136.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef15e0 [0136.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3228 [0136.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3228) returned 1 [0136.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0136.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0136.310] WriteFile (in: hFile=0x1420, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbdcfa90, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0xbdcfa90*=0x3c00, lpOverlapped=0x0) returned 1 [0136.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0136.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdc30 [0136.313] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.313] WriteFile (in: hFile=0x1420, lpBuffer=0x3e16628*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xbdcfafc, lpOverlapped=0x0 | out: lpBuffer=0x3e16628*, lpNumberOfBytesWritten=0xbdcfafc*=0x14a, lpOverlapped=0x0) returned 1 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16628) returned 1 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f798) returned 1 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f6a8) returned 1 [0136.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdc30) returned 1 [0136.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0136.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49c0) returned 1 [0136.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0136.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30c88 [0136.442] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv" [0136.442] wcscat (in: _Dest=0x3f30c88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv.f0dbec" [0136.442] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv.f0dbec", NtPathName=0xbdcfa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\6hGSo6-W.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e10608 [0136.550] FlushFileBuffers (hFile=0x1420) returned 1 [0136.554] CloseHandle (hObject=0x1420) returned 1 [0136.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30c88 [0136.565] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" [0136.565] wcscat (in: _Dest=0x3f30c88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt" [0136.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\f0dbec-readme.txt")) returned 0xffffffff [0136.567] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13dc [0136.600] WriteFile (in: hFile=0x13dc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbdcfaa4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbdcfaa4*=0x70c, lpOverlapped=0x0) returned 1 [0136.608] CloseHandle (hObject=0x13dc) returned 1 [0136.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 [0136.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 693 os_tid = 0x11e0 [0135.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\c5vjsy3-6bypuw-pwzib.flv")) returned 0x20 [0135.819] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv", dwFileAttributes=0x20) returned 1 [0135.819] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\c5vjsy3-6bypuw-pwzib.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x141c [0135.819] GetFileSizeEx (in: hFile=0x141c, lpFileSize=0xa92f8d8 | out: lpFileSize=0xa92f8d8*=99976) returned 1 [0135.819] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x18684, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.819] ReadFile (in: hFile=0x141c, lpBuffer=0xa92f8e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa92f8c0, lpOverlapped=0x0 | out: lpBuffer=0xa92f8e4*, lpNumberOfBytesRead=0xa92f8c0*=0x4, lpOverlapped=0x0) returned 1 [0135.821] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0135.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0135.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0135.822] NtQuerySystemTime (in: CurrentTime=0xa92f860 | out: CurrentTime=0xa92f860*=132471540045060000) returned 0x0 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x2bf8f5ab [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x13a1e0d [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x5c3b1862 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x2df12f22 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x673d2d7f [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x58111a1f [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x64ee6103 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x69e9e2d9 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x61f82814 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0xe3b9404 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x64ed70fd [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x36766954 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x2e46e0a2 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x35c1fece [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x4a9ea3a9 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x6f055877 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x6635e27d [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0xfb8d207 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x197538f1 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x54bdb10a [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x6a993734 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x51a13bd3 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x7bf197b9 [0135.822] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x4ecc2989 [0135.823] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x5dc40b59 [0135.823] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x4d4bcf81 [0135.823] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x65dc0442 [0135.823] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x548ae98a [0135.823] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x3bf16b61 [0135.823] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x503612eb [0135.823] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x49486ba0 [0135.823] RtlRandomEx (in: Seed=0xa92f858 | out: Seed=0xa92f858) returned 0x7882ebbd [0135.834] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.834] ReadFile (in: hFile=0x141c, lpBuffer=0x82a6498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa92f860, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesRead=0xa92f860*=0x3c00, lpOverlapped=0x0) returned 1 [0135.834] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a158 [0135.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0135.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0135.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4998) returned 1 [0135.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82aa0a0 [0135.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0135.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0135.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0135.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0135.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a158) returned 1 [0135.835] WriteFile (in: hFile=0x141c, lpBuffer=0x82aa0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa92f860, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesWritten=0xa92f860*=0x3c00, lpOverlapped=0x0) returned 1 [0136.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0136.316] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.316] ReadFile (in: hFile=0x141c, lpBuffer=0x82a6498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa92f860, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesRead=0xa92f860*=0x3c00, lpOverlapped=0x0) returned 1 [0136.316] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0136.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0136.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef15e0 [0136.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef15e0) returned 1 [0136.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82aa0a0 [0136.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef15e0 [0136.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3228 [0136.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3228) returned 1 [0136.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0136.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0136.317] WriteFile (in: hFile=0x141c, lpBuffer=0x82aa0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa92f860, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesWritten=0xa92f860*=0x3c00, lpOverlapped=0x0) returned 1 [0136.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0136.319] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x14a88, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.319] ReadFile (in: hFile=0x141c, lpBuffer=0x82a6498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa92f860, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesRead=0xa92f860*=0x3c00, lpOverlapped=0x0) returned 1 [0136.320] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x14a88, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50f08 [0136.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0136.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3228 [0136.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3228) returned 1 [0136.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82aa0a0 [0136.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3228 [0136.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e60 [0136.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e60) returned 1 [0136.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0136.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0136.321] WriteFile (in: hFile=0x141c, lpBuffer=0x82aa0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa92f860, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesWritten=0xa92f860*=0x3c00, lpOverlapped=0x0) returned 1 [0136.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0136.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdc98 [0136.323] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.324] WriteFile (in: hFile=0x141c, lpBuffer=0x3e37c88*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0xa92f8cc, lpOverlapped=0x0 | out: lpBuffer=0x3e37c88*, lpNumberOfBytesWritten=0xa92f8cc*=0x162, lpOverlapped=0x0) returned 1 [0136.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37c88) returned 1 [0136.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50cc8) returned 1 [0136.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4998) returned 1 [0136.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50f08) returned 1 [0136.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdc98) returned 1 [0136.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0136.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48f8) returned 1 [0136.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48d0) returned 1 [0136.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e12228 [0136.443] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv" [0136.443] wcscat (in: _Dest=0x3e12228, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv.f0dbec" [0136.443] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv.f0dbec", NtPathName=0xa92f850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\c5VjSy3-6ByPuw-pwZIb.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6740 [0136.605] FlushFileBuffers (hFile=0x141c) returned 1 [0136.609] CloseHandle (hObject=0x141c) returned 1 [0136.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30c88 [0136.629] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" [0136.629] wcscat (in: _Dest=0x3f30c88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt" [0136.629] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\f0dbec-readme.txt")) returned 0x20 [0136.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 [0136.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f352e0) returned 1 Thread: id = 694 os_tid = 0x11e4 [0135.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\dsvosb9iwjldco1vcrk.flv")) returned 0x20 [0135.837] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv", dwFileAttributes=0x20) returned 1 [0135.838] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\dsvosb9iwjldco1vcrk.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1418 [0135.838] GetFileSizeEx (in: hFile=0x1418, lpFileSize=0xbabf858 | out: lpFileSize=0xbabf858*=70346) returned 1 [0135.838] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x112c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.838] ReadFile (in: hFile=0x1418, lpBuffer=0xbabf864, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbabf840, lpOverlapped=0x0 | out: lpBuffer=0xbabf864*, lpNumberOfBytesRead=0xbabf840*=0x4, lpOverlapped=0x0) returned 1 [0135.840] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0135.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef48a8 [0135.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0135.840] NtQuerySystemTime (in: CurrentTime=0xbabf7e0 | out: CurrentTime=0xbabf7e0*=132471540045216000) returned 0x0 [0135.840] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x634da025 [0135.840] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x53e9bf9e [0135.840] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x28cc1f08 [0135.840] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x385c1540 [0135.840] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x311fdd23 [0135.840] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x986813c [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x41f77afa [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x7e967d26 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x129aac97 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x450aaf59 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x7606e08 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x2d525aed [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x74de865d [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x7800bc19 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x480decd9 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x674e0deb [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x7fcf9779 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0xd66a9b1 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x3a649627 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x51002a9a [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0xa9007 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0xec81150 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x4d593ac1 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x3e034056 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x4dfd00e4 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x3075ae5b [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x23c579af [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0xd5e4cd8 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x6c297398 [0135.841] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x6ddd52d5 [0135.842] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x17da14d9 [0135.842] RtlRandomEx (in: Seed=0xbabf7d8 | out: Seed=0xbabf7d8) returned 0x46702cba [0135.852] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.853] ReadFile (in: hFile=0x1418, lpBuffer=0x829ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbabf7e0, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesRead=0xbabf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.853] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a6b0 [0135.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0135.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0135.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0135.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0135.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0135.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0135.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0135.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0135.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a6b0) returned 1 [0135.854] WriteFile (in: hFile=0x1418, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbabf7e0, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0xbabf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0136.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0136.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e51190 [0136.326] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.326] WriteFile (in: hFile=0x1418, lpBuffer=0x3d56f00*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xbabf84c, lpOverlapped=0x0 | out: lpBuffer=0x3d56f00*, lpNumberOfBytesWritten=0xbabf84c*=0x120, lpOverlapped=0x0) returned 1 [0136.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 [0136.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50c38) returned 1 [0136.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0136.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e51190) returned 1 [0136.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0136.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a8) returned 1 [0136.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47e0) returned 1 [0136.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4830) returned 1 [0136.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e116e8 [0136.445] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv" [0136.445] wcscat (in: _Dest=0x3e116e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv.f0dbec" [0136.445] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv.f0dbec", NtPathName=0xbabf7d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\DSvOsb9iWjldCO1vCRK.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c168 [0136.614] FlushFileBuffers (hFile=0x1418) returned 1 [0136.617] CloseHandle (hObject=0x1418) returned 1 [0136.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30c88 [0136.633] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\" [0136.633] wcscat (in: _Dest=0x3f30c88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt" [0136.633] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\f0dbec-readme.txt")) returned 0x20 [0136.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 [0136.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35370) returned 1 Thread: id = 695 os_tid = 0x11e8 [0135.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0135.855] wcscpy (in: _Dest=0x3f0b7a8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" [0135.855] wcscat (in: _Dest=0x3f0b7a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" [0135.855] wcscat (in: _Dest=0x3f0b7a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\*" [0135.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0135.855] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d13360, ftCreationTime.dwHighDateTime=0x1d5e105, ftLastAccessTime.dwLowDateTime=0xd63d5950, ftLastAccessTime.dwHighDateTime=0x1d5e58a, ftLastWriteTime.dwLowDateTime=0xd63d5950, ftLastWriteTime.dwHighDateTime=0x1d5e58a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0135.855] wcscmp (_String1=".", _String2=".") returned 0 [0135.855] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d13360, ftCreationTime.dwHighDateTime=0x1d5e105, ftLastAccessTime.dwLowDateTime=0xd63d5950, ftLastAccessTime.dwHighDateTime=0x1d5e58a, ftLastWriteTime.dwLowDateTime=0xd63d5950, ftLastWriteTime.dwHighDateTime=0x1d5e58a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.855] wcscmp (_String1="..", _String2=".") returned 1 [0135.855] wcscmp (_String1="..", _String2="..") returned 0 [0135.856] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfac5ac60, ftCreationTime.dwHighDateTime=0x1d5e7a0, ftLastAccessTime.dwLowDateTime=0xf51a1be0, ftLastAccessTime.dwHighDateTime=0x1d5dd0d, ftLastWriteTime.dwLowDateTime=0xf51a1be0, ftLastWriteTime.dwHighDateTime=0x1d5dd0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-Io0UWg7Dr8", cAlternateFileName="-IO0UW~1")) returned 1 [0135.856] wcscmp (_String1="-Io0UWg7Dr8", _String2=".") returned -1 [0135.856] wcscmp (_String1="-Io0UWg7Dr8", _String2="..") returned -1 [0135.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35250 [0135.856] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" [0135.856] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" [0135.856] wcscat (in: _Dest=0x3f35250, _Source="-Io0UWg7Dr8" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8" [0152.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f35250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0152.366] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x807a4b0, ftCreationTime.dwHighDateTime=0x1d5e421, ftLastAccessTime.dwLowDateTime=0x83ebfca0, ftLastAccessTime.dwHighDateTime=0x1d5d84d, ftLastWriteTime.dwLowDateTime=0x83ebfca0, ftLastWriteTime.dwHighDateTime=0x1d5d84d, nFileSizeHigh=0x0, nFileSizeLow=0x1263c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GyDB4bMk.mkv", cAlternateFileName="")) returned 1 [0152.366] wcscmp (_String1="GyDB4bMk.mkv", _String2=".") returned 1 [0152.366] wcscmp (_String1="GyDB4bMk.mkv", _String2="..") returned 1 [0152.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb13d8 [0152.367] wcscpy (in: _Dest=0x3eb13d8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" [0152.367] wcscat (in: _Dest=0x3eb13d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" [0152.367] wcscat (in: _Dest=0x3eb13d8, _Source="GyDB4bMk.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv" [0152.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb13d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0152.368] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd00c82e0, ftCreationTime.dwHighDateTime=0x1d5e521, ftLastAccessTime.dwLowDateTime=0xf017e740, ftLastAccessTime.dwHighDateTime=0x1d5dd9d, ftLastWriteTime.dwLowDateTime=0xf017e740, ftLastWriteTime.dwHighDateTime=0x1d5dd9d, nFileSizeHigh=0x0, nFileSizeLow=0x110ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="KySHcFPs.swf", cAlternateFileName="")) returned 1 [0152.368] wcscmp (_String1="KySHcFPs.swf", _String2=".") returned 1 [0152.368] wcscmp (_String1="KySHcFPs.swf", _String2="..") returned 1 [0152.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2ed8 [0152.369] wcscpy (in: _Dest=0x3eb2ed8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" [0152.369] wcscat (in: _Dest=0x3eb2ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" [0152.369] wcscat (in: _Dest=0x3eb2ed8, _Source="KySHcFPs.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf" [0152.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0152.370] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8665d310, ftCreationTime.dwHighDateTime=0x1d5daba, ftLastAccessTime.dwLowDateTime=0x1d34c20, ftLastAccessTime.dwHighDateTime=0x1d5d891, ftLastWriteTime.dwLowDateTime=0x1d34c20, ftLastWriteTime.dwHighDateTime=0x1d5d891, nFileSizeHigh=0x0, nFileSizeLow=0xa8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVKPW0suiEDwAvu3.mkv", cAlternateFileName="NVKPW0~1.MKV")) returned 1 [0152.370] wcscmp (_String1="NVKPW0suiEDwAvu3.mkv", _String2=".") returned 1 [0152.370] wcscmp (_String1="NVKPW0suiEDwAvu3.mkv", _String2="..") returned 1 [0152.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e111e8 [0152.370] wcscpy (in: _Dest=0x3e111e8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq" [0152.370] wcscat (in: _Dest=0x3e111e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" [0152.370] wcscat (in: _Dest=0x3e111e8, _Source="NVKPW0suiEDwAvu3.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv" [0152.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e111e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0152.371] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8665d310, ftCreationTime.dwHighDateTime=0x1d5daba, ftLastAccessTime.dwLowDateTime=0x1d34c20, ftLastAccessTime.dwHighDateTime=0x1d5d891, ftLastWriteTime.dwLowDateTime=0x1d34c20, ftLastWriteTime.dwHighDateTime=0x1d5d891, nFileSizeHigh=0x0, nFileSizeLow=0xa8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVKPW0suiEDwAvu3.mkv", cAlternateFileName="NVKPW0~1.MKV")) returned 0 [0152.371] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0152.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0152.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0152.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e80) returned 1 Thread: id = 696 os_tid = 0x11ec [0135.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2feb8 [0135.857] wcscpy (in: _Dest=0x3f2feb8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" [0135.857] wcscat (in: _Dest=0x3f2feb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0135.857] wcscat (in: _Dest=0x3f2feb8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\*" [0135.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0135.857] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79648d20, ftCreationTime.dwHighDateTime=0x1d5e715, ftLastAccessTime.dwLowDateTime=0x83c92940, ftLastAccessTime.dwHighDateTime=0x1d5e3fc, ftLastWriteTime.dwLowDateTime=0x83c92940, ftLastWriteTime.dwHighDateTime=0x1d5e3fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff50 [0135.857] wcscmp (_String1=".", _String2=".") returned 0 [0135.857] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79648d20, ftCreationTime.dwHighDateTime=0x1d5e715, ftLastAccessTime.dwLowDateTime=0x83c92940, ftLastAccessTime.dwHighDateTime=0x1d5e3fc, ftLastWriteTime.dwLowDateTime=0x83c92940, ftLastWriteTime.dwHighDateTime=0x1d5e3fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.857] wcscmp (_String1="..", _String2=".") returned 1 [0135.857] wcscmp (_String1="..", _String2="..") returned 0 [0135.857] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72541710, ftCreationTime.dwHighDateTime=0x1d5dc22, ftLastAccessTime.dwLowDateTime=0xdba83010, ftLastAccessTime.dwHighDateTime=0x1d5dd81, ftLastWriteTime.dwLowDateTime=0xdba83010, ftLastWriteTime.dwHighDateTime=0x1d5dd81, nFileSizeHigh=0x0, nFileSizeLow=0x13723, dwReserved0=0x0, dwReserved1=0x0, cFileName="-AnvLp2CiC.avi", cAlternateFileName="-ANVLP~1.AVI")) returned 1 [0135.857] wcscmp (_String1="-AnvLp2CiC.avi", _String2=".") returned -1 [0135.857] wcscmp (_String1="-AnvLp2CiC.avi", _String2="..") returned -1 [0135.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7198 [0135.857] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" [0135.858] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0135.858] wcscat (in: _Dest=0x2c7198, _Source="-AnvLp2CiC.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi" [0145.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0145.026] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcb60c0, ftCreationTime.dwHighDateTime=0x1d5e32d, ftLastAccessTime.dwLowDateTime=0xff4dbfb0, ftLastAccessTime.dwHighDateTime=0x1d5df54, ftLastWriteTime.dwLowDateTime=0xff4dbfb0, ftLastWriteTime.dwHighDateTime=0x1d5df54, nFileSizeHigh=0x0, nFileSizeLow=0x37ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="2jshIdbhr.avi", cAlternateFileName="2JSHID~1.AVI")) returned 1 [0145.027] wcscmp (_String1="2jshIdbhr.avi", _String2=".") returned 1 [0145.027] wcscmp (_String1="2jshIdbhr.avi", _String2="..") returned 1 [0145.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a778 [0145.027] wcscpy (in: _Dest=0x819a778, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" [0145.027] wcscat (in: _Dest=0x819a778, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0145.027] wcscat (in: _Dest=0x819a778, _Source="2jshIdbhr.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi" [0145.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0145.028] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e6af730, ftCreationTime.dwHighDateTime=0x1d5de38, ftLastAccessTime.dwLowDateTime=0xb23c36f0, ftLastAccessTime.dwHighDateTime=0x1d5d858, ftLastWriteTime.dwLowDateTime=0xb23c36f0, ftLastWriteTime.dwHighDateTime=0x1d5d858, nFileSizeHigh=0x0, nFileSizeLow=0x11fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="8apIzw3y.flv", cAlternateFileName="")) returned 1 [0145.028] wcscmp (_String1="8apIzw3y.flv", _String2=".") returned 1 [0145.028] wcscmp (_String1="8apIzw3y.flv", _String2="..") returned 1 [0145.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a818 [0145.028] wcscpy (in: _Dest=0x819a818, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" [0145.028] wcscat (in: _Dest=0x819a818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0145.028] wcscat (in: _Dest=0x819a818, _Source="8apIzw3y.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv" [0145.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0145.030] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11415ea0, ftCreationTime.dwHighDateTime=0x1d5d8b3, ftLastAccessTime.dwLowDateTime=0x545344d0, ftLastAccessTime.dwHighDateTime=0x1d5e5cc, ftLastWriteTime.dwLowDateTime=0x545344d0, ftLastWriteTime.dwHighDateTime=0x1d5e5cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dm3nn0ih_3FqXvPCH.mkv", cAlternateFileName="DM3NN0~1.MKV")) returned 1 [0145.030] wcscmp (_String1="Dm3nn0ih_3FqXvPCH.mkv", _String2=".") returned 1 [0145.030] wcscmp (_String1="Dm3nn0ih_3FqXvPCH.mkv", _String2="..") returned 1 [0145.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bea8 [0145.030] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" [0145.030] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0145.030] wcscat (in: _Dest=0x35bea8, _Source="Dm3nn0ih_3FqXvPCH.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv" [0145.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0145.032] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2b30200, ftCreationTime.dwHighDateTime=0x1d5d9c1, ftLastAccessTime.dwLowDateTime=0x2ea66750, ftLastAccessTime.dwHighDateTime=0x1d5d823, ftLastWriteTime.dwLowDateTime=0x2ea66750, ftLastWriteTime.dwHighDateTime=0x1d5d823, nFileSizeHigh=0x0, nFileSizeLow=0x1203, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuJggLRw7UWDc4jc.mp4", cAlternateFileName="QUJGGL~1.MP4")) returned 1 [0145.032] wcscmp (_String1="QuJggLRw7UWDc4jc.mp4", _String2=".") returned 1 [0145.032] wcscmp (_String1="QuJggLRw7UWDc4jc.mp4", _String2="..") returned 1 [0145.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c848 [0145.032] wcscpy (in: _Dest=0x35c848, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ" [0145.032] wcscat (in: _Dest=0x35c848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0145.032] wcscat (in: _Dest=0x35c848, _Source="QuJggLRw7UWDc4jc.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4" [0145.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0145.033] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2b30200, ftCreationTime.dwHighDateTime=0x1d5d9c1, ftLastAccessTime.dwLowDateTime=0x2ea66750, ftLastAccessTime.dwHighDateTime=0x1d5d823, ftLastWriteTime.dwLowDateTime=0x2ea66750, ftLastWriteTime.dwHighDateTime=0x1d5d823, nFileSizeHigh=0x0, nFileSizeLow=0x1203, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuJggLRw7UWDc4jc.mp4", cAlternateFileName="QUJGGL~1.MP4")) returned 0 [0145.033] FindClose (in: hFindFile=0x3dcff50 | out: hFindFile=0x3dcff50) returned 1 [0145.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0145.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2feb8) returned 1 [0145.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 697 os_tid = 0x11f0 [0135.858] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv" (normalized: "c:\\users\\eebsym5\\desktop\\wwrqwmhzjyfi1gyw45.flv")) returned 0x20 [0135.858] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv", dwFileAttributes=0x20) returned 1 [0136.877] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv" (normalized: "c:\\users\\eebsym5\\desktop\\wwrqwmhzjyfi1gyw45.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x140c [0136.877] GetFileSizeEx (in: hFile=0x140c, lpFileSize=0x969fc00 | out: lpFileSize=0x969fc00*=8797) returned 1 [0136.878] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x2259, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.878] ReadFile (in: hFile=0x140c, lpBuffer=0x969fc0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x969fbe8, lpOverlapped=0x0 | out: lpBuffer=0x969fc0c*, lpNumberOfBytesRead=0x969fbe8*=0x4, lpOverlapped=0x0) returned 1 [0136.880] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0136.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0136.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0136.880] NtQuerySystemTime (in: CurrentTime=0x969fb88 | out: CurrentTime=0x969fb88*=132471540055668000) returned 0x0 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x5b26061 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x70c7269c [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x50bff69 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x253fab78 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x7b95927 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x154c5258 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x2142c2e4 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x988b634 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0xa23591 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x300266dc [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x6d9f3671 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x34352551 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x5324a44b [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x713a654 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x262f86a5 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x5463645c [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x3d848d3 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x544418e5 [0136.880] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x4e384d51 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x67ff7ff3 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x4be84d79 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0xfb9de27 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x5cfbf73f [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x3d80ec15 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x74983b91 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x13433f04 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x325a06ed [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0xc1cdaa6 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x68c911d4 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x25459179 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x38c01cf0 [0136.881] RtlRandomEx (in: Seed=0x969fb80 | out: Seed=0x969fb80) returned 0x4ace2bc2 [0136.891] ReadFile (in: hFile=0x140c, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x225d, lpNumberOfBytesRead=0x969fb7c, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0x969fb7c*=0x225d, lpOverlapped=0x0) returned 1 [0136.891] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.891] WriteFile (in: hFile=0x140c, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x225d, lpNumberOfBytesWritten=0x969fb80, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0x969fb80*=0x225d, lpOverlapped=0x0) returned 1 [0136.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0136.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0136.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0136.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0136.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0136.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bcd0) returned 1 [0136.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31f58) returned 1 [0136.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3f31f58 [0136.909] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.910] WriteFile (in: hFile=0x140c, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x969fbf4, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0x969fbf4*=0x11e, lpOverlapped=0x0) returned 1 [0136.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0136.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31d18) returned 1 [0136.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0136.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31f58) returned 1 [0136.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0136.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0136.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0136.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0136.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0bc58 [0136.913] wcscpy (in: _Dest=0x3f0bc58, _Source="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv" [0136.913] wcscat (in: _Dest=0x3f0bc58, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv.f0dbec" [0136.913] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv.f0dbec", NtPathName=0x969fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\wWrQWmHzjyFI1gyw45.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35a30 [0137.554] FlushFileBuffers (hFile=0x140c) returned 1 [0137.576] CloseHandle (hObject=0x140c) returned 1 [0137.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe75c8 [0137.779] wcscpy (in: _Dest=0x2fe75c8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0137.779] wcscat (in: _Dest=0x2fe75c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0137.779] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0xffffffff [0138.186] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdc0 [0138.262] WriteFile (in: hFile=0xdc0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x969fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x969fb9c*=0x70c, lpOverlapped=0x0) returned 1 [0138.279] CloseHandle (hObject=0xdc0) returned 1 [0138.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe75c8) returned 1 [0138.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d510) returned 1 Thread: id = 698 os_tid = 0x11f4 [0135.859] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv" (normalized: "c:\\users\\eebsym5\\desktop\\yjvzuck9.flv")) returned 0x20 [0135.859] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv", dwFileAttributes=0x20) returned 1 [0136.893] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv" (normalized: "c:\\users\\eebsym5\\desktop\\yjvzuck9.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12c0 [0136.893] GetFileSizeEx (in: hFile=0x12c0, lpFileSize=0xa84fb68 | out: lpFileSize=0xa84fb68*=10251) returned 1 [0136.893] SetFilePointerEx (in: hFile=0x12c0, liDistanceToMove=0x2807, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.893] ReadFile (in: hFile=0x12c0, lpBuffer=0xa84fb74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa84fb50, lpOverlapped=0x0 | out: lpBuffer=0xa84fb74*, lpNumberOfBytesRead=0xa84fb50*=0x4, lpOverlapped=0x0) returned 1 [0136.895] SetFilePointerEx (in: hFile=0x12c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0136.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0136.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0136.895] NtQuerySystemTime (in: CurrentTime=0xa84faf0 | out: CurrentTime=0xa84faf0*=132471540055824000) returned 0x0 [0136.895] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x4f6c3f70 [0136.895] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x27c05584 [0136.895] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x2c9a6922 [0136.895] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x26174858 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x50d270ce [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x1c93c239 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x2ee4f0a3 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x2b56fe73 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x787ca15c [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x276c7272 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x5e462e29 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x28c3aaba [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x5e6f1f43 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x2c0c217e [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x695efd69 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x223dfeaa [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x61a77652 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x317f555a [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x6f9bedc9 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x3e50cf24 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x5004e85 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x400de611 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x25fa7a69 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x31a15bb0 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x3c71016d [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x1cdc4839 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x3191e973 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0xc5fd8b7 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x1267e377 [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x3acae0ed [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x4694d96b [0136.896] RtlRandomEx (in: Seed=0xa84fae8 | out: Seed=0xa84fae8) returned 0x1b99d5e [0136.907] ReadFile (in: hFile=0x12c0, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x280b, lpNumberOfBytesRead=0xa84fae4, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xa84fae4*=0x280b, lpOverlapped=0x0) returned 1 [0136.907] SetFilePointerEx (in: hFile=0x12c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.907] WriteFile (in: hFile=0x12c0, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x280b, lpNumberOfBytesWritten=0xa84fae8, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xa84fae8*=0x280b, lpOverlapped=0x0) returned 1 [0136.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0136.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0136.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0136.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0136.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82adca8) returned 1 [0136.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bc58) returned 1 [0136.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31da8) returned 1 [0136.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6f6a8 [0136.911] SetFilePointerEx (in: hFile=0x12c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.911] WriteFile (in: hFile=0x12c0, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xa84fb5c, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xa84fb5c*=0x10a, lpOverlapped=0x0) returned 1 [0136.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0136.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f798) returned 1 [0136.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0136.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f6a8) returned 1 [0136.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0136.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0136.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0136.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0136.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8cb50 [0136.915] wcscpy (in: _Dest=0x3d8cb50, _Source="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv" [0136.915] wcscat (in: _Dest=0x3d8cb50, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv.f0dbec" [0136.915] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv.f0dbec", NtPathName=0xa84fae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\yjvzuCK9.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bcd0 [0137.574] FlushFileBuffers (hFile=0x12c0) returned 1 [0137.576] CloseHandle (hObject=0x12c0) returned 1 [0137.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe72c8 [0137.776] wcscpy (in: _Dest=0x2fe72c8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0137.776] wcscat (in: _Dest=0x2fe72c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0137.776] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0xffffffff [0138.196] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd3c [0138.263] WriteFile (in: hFile=0xd3c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa84fb04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa84fb04*=0x70c, lpOverlapped=0x0) returned 1 [0138.279] CloseHandle (hObject=0xd3c) returned 1 [0138.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe72c8) returned 1 [0138.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ec20) returned 1 Thread: id = 699 os_tid = 0x11f8 [0135.859] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\ylldculbejguazh15.mp3")) returned 0x20 [0135.860] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3", dwFileAttributes=0x20) returned 1 [0138.738] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\ylldculbejguazh15.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12c8 [0138.738] GetFileSizeEx (in: hFile=0x12c8, lpFileSize=0x8eaff30 | out: lpFileSize=0x8eaff30*=49233) returned 1 [0138.738] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0xc04d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.738] ReadFile (in: hFile=0x12c8, lpBuffer=0x8eaff3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8eaff18, lpOverlapped=0x0 | out: lpBuffer=0x8eaff3c*, lpNumberOfBytesRead=0x8eaff18*=0x4, lpOverlapped=0x0) returned 1 [0138.740] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0138.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0138.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0138.741] NtQuerySystemTime (in: CurrentTime=0x8eafeb8 | out: CurrentTime=0x8eafeb8*=132471540074076000) returned 0x0 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x675c493c [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x2c94923c [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x1fe778c0 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x45d3cb17 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x740dd8a4 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0xf256522 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x105e9843 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x6fff7a80 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x7d119e8c [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x6cdca795 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x309329ed [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x6c831b2c [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x1b97b4df [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x7630b68b [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x4c4acd50 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x45dda3a0 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x34c04e0a [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x3edf5d29 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x1502feca [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x232f4085 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x1f962f63 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x5ec9a133 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x37b8b8f1 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x69e4e626 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x56540591 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x5a62206d [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x10fcb562 [0138.741] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x55d2aa20 [0138.742] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x33f98abf [0138.742] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x41a803dd [0138.742] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x4467a9b4 [0138.742] RtlRandomEx (in: Seed=0x8eafeb0 | out: Seed=0x8eafeb0) returned 0x7f0b789f [0138.751] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.752] ReadFile (in: hFile=0x12c8, lpBuffer=0x829b080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8eafeb8, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesRead=0x8eafeb8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.752] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095fc0 [0138.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0138.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0138.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0138.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a6498 [0138.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0138.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0138.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0138.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0138.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095fc0) returned 1 [0138.753] WriteFile (in: hFile=0x12c8, lpBuffer=0x82a6498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8eafeb8, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesWritten=0x8eafeb8*=0x3c00, lpOverlapped=0x0) returned 1 [0140.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0140.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0140.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x8099550 [0140.974] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.974] WriteFile (in: hFile=0x12c8, lpBuffer=0x3d573a0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x8eaff24, lpOverlapped=0x0 | out: lpBuffer=0x3d573a0*, lpNumberOfBytesWritten=0x8eaff24*=0x11c, lpOverlapped=0x0) returned 1 [0141.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d573a0) returned 1 [0141.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099590) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099550) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c298) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0141.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0141.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f324a8 [0141.056] wcscpy (in: _Dest=0x3f324a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3" [0141.056] wcscat (in: _Dest=0x3f324a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3.f0dbec" [0141.056] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3.f0dbec", NtPathName=0x8eafea8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\YLLdCulbEJgUAzh15.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34c20 [0142.039] FlushFileBuffers (hFile=0x12c8) returned 1 [0142.062] CloseHandle (hObject=0x12c8) returned 1 [0142.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6848 [0142.106] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0142.106] wcscat (in: _Dest=0x2fe6848, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0142.106] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0142.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0142.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd18) returned 1 Thread: id = 700 os_tid = 0x11fc [0135.860] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp" (normalized: "c:\\users\\eebsym5\\desktop\\_vqed17vfz24rkh.odp")) returned 0x20 [0135.860] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp", dwFileAttributes=0x20) returned 1 [0138.722] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp" (normalized: "c:\\users\\eebsym5\\desktop\\_vqed17vfz24rkh.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xabc [0138.722] GetFileSizeEx (in: hFile=0xabc, lpFileSize=0xbb4f7b8 | out: lpFileSize=0xbb4f7b8*=77652) returned 1 [0138.722] SetFilePointerEx (in: hFile=0xabc, liDistanceToMove=0x12f50, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.722] ReadFile (in: hFile=0xabc, lpBuffer=0xbb4f7c4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbb4f7a0, lpOverlapped=0x0 | out: lpBuffer=0xbb4f7c4*, lpNumberOfBytesRead=0xbb4f7a0*=0x4, lpOverlapped=0x0) returned 1 [0138.724] SetFilePointerEx (in: hFile=0xabc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0138.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0138.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0138.725] NtQuerySystemTime (in: CurrentTime=0xbb4f740 | out: CurrentTime=0xbb4f740*=132471540073920000) returned 0x0 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x2b0fc69e [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x5d9837b6 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x2383ba3a [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x15a70d13 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x137cc29c [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x2ee3ad7 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x67b9cff4 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x8afe8ce [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x4770aac9 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x465dbe8a [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x6e36a83a [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x3271022c [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x33bdae66 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x29e6519d [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x77ea63f7 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x51d44fb9 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x7cdaca9 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x360fe72f [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x405e4e4f [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x7417c6c9 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x27555805 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x42abbb37 [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x3a77a22c [0138.725] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x47441da3 [0138.726] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x2f7d5ed3 [0138.726] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x6195204e [0138.726] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x27beaf36 [0138.726] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x292f54e7 [0138.726] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x23b40795 [0138.726] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x6c09185c [0138.726] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x548fdbb3 [0138.726] RtlRandomEx (in: Seed=0xbb4f738 | out: Seed=0xbb4f738) returned 0x41b9823f [0138.736] SetFilePointerEx (in: hFile=0xabc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.736] ReadFile (in: hFile=0xabc, lpBuffer=0x82a2890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbb4f740, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesRead=0xbb4f740*=0x3c00, lpOverlapped=0x0) returned 1 [0138.736] SetFilePointerEx (in: hFile=0xabc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095fc0 [0138.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0138.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0138.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0138.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8297478 [0138.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0138.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0138.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0138.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0138.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095fc0) returned 1 [0138.737] WriteFile (in: hFile=0xabc, lpBuffer=0x8297478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbb4f740, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesWritten=0xbb4f740*=0x3c00, lpOverlapped=0x0) returned 1 [0140.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0140.971] SetFilePointerEx (in: hFile=0xabc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.971] ReadFile (in: hFile=0xabc, lpBuffer=0x82a2890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbb4f740, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesRead=0xbb4f740*=0x3c00, lpOverlapped=0x0) returned 1 [0140.971] SetFilePointerEx (in: hFile=0xabc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309c88 [0140.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e681c8 [0140.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cab8 [0140.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cab8) returned 1 [0140.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8297478 [0140.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cab8 [0140.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0140.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0140.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e681c8) returned 1 [0140.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309c88) returned 1 [0140.972] WriteFile (in: hFile=0xabc, lpBuffer=0x8297478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbb4f740, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesWritten=0xbb4f740*=0x3c00, lpOverlapped=0x0) returned 1 [0140.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0140.975] SetFilePointerEx (in: hFile=0xabc, liDistanceToMove=0xf354, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.975] ReadFile (in: hFile=0xabc, lpBuffer=0x82a2890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbb4f740, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesRead=0xbb4f740*=0x3c00, lpOverlapped=0x0) returned 1 [0140.975] SetFilePointerEx (in: hFile=0xabc, liDistanceToMove=0xf354, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309c88 [0140.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e681c8 [0140.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0140.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbb8) returned 1 [0140.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8297478 [0140.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0140.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0140.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0140.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e681c8) returned 1 [0140.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309c88) returned 1 [0140.975] WriteFile (in: hFile=0xabc, lpBuffer=0x8297478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbb4f740, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesWritten=0xbb4f740*=0x3c00, lpOverlapped=0x0) returned 1 [0140.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0140.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdd00 [0140.978] SetFilePointerEx (in: hFile=0xabc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.978] WriteFile (in: hFile=0xabc, lpBuffer=0x3dcd898*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0xbb4f7ac, lpOverlapped=0x0 | out: lpBuffer=0x3dcd898*, lpNumberOfBytesWritten=0xbb4f7ac*=0x158, lpOverlapped=0x0) returned 1 [0141.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd898) returned 1 [0141.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099690) returned 1 [0141.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0141.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099650) returned 1 [0141.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdd00) returned 1 [0141.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0141.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0141.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0141.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80555e0 [0141.226] wcscpy (in: _Dest=0x80555e0, _Source="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp") returned="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp" [0141.226] wcscat (in: _Dest=0x80555e0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp.f0dbec" [0141.226] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp.f0dbec", NtPathName=0xbb4f730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\_vqEd17vFz24RKh.odp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x80540d8 [0142.038] FlushFileBuffers (hFile=0xabc) returned 1 [0142.060] CloseHandle (hObject=0xabc) returned 1 [0142.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6848 [0142.108] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0142.108] wcscat (in: _Dest=0x2fe6848, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" [0142.108] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\f0dbec-readme.txt")) returned 0x20 [0142.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0142.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bff0) returned 1 Thread: id = 701 os_tid = 0x1200 [0135.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c5a0 [0135.861] wcscpy (in: _Dest=0x3d8c5a0, _Source="C:\\ProgramData\\Microsoft\\Network\\Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections" [0135.861] wcscat (in: _Dest=0x3d8c5a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\" [0135.861] wcscat (in: _Dest=0x3d8c5a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\*" [0135.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0135.861] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfe10 [0135.861] wcscmp (_String1=".", _String2=".") returned 0 [0135.862] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.862] wcscmp (_String1="..", _String2=".") returned 1 [0135.862] wcscmp (_String1="..", _String2="..") returned 0 [0135.862] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.862] FindClose (in: hFindFile=0x3dcfe10 | out: hFindFile=0x3dcfe10) returned 1 [0135.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0135.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c5a0) returned 1 [0135.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 Thread: id = 702 os_tid = 0x1204 [0135.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e348 [0135.863] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\ProgramData\\Microsoft\\Network\\Downloader" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader" [0135.863] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\" [0135.863] wcscat (in: _Dest=0x3d8e348, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*" [0135.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0135.864] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0135.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 [0135.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 Thread: id = 703 os_tid = 0x1208 [0135.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b878 [0135.865] wcscpy (in: _Dest=0x35b878, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0135.865] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0135.865] wcscat (in: _Dest=0x35b878, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*" [0135.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0135.865] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0137.170] wcscmp (_String1=".", _String2=".") returned 0 [0137.170] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.170] wcscmp (_String1="..", _String2=".") returned 1 [0137.170] wcscmp (_String1="..", _String2="..") returned 0 [0137.170] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0137.170] wcscmp (_String1="Patch", _String2=".") returned 1 [0137.170] wcscmp (_String1="Patch", _String2="..") returned 1 [0137.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6f28 [0137.170] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0137.170] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0137.171] wcscat (in: _Dest=0x2ff6f28, _Source="Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0139.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e4 [0139.590] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0139.590] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0139.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0139.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0139.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d5d8) returned 1 Thread: id = 704 os_tid = 0x120c [0135.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c798 [0135.866] wcscpy (in: _Dest=0x35c798, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0135.866] wcscat (in: _Dest=0x35c798, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0135.866] wcscat (in: _Dest=0x35c798, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*" [0135.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0135.866] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf390 [0137.416] wcscmp (_String1=".", _String2=".") returned 0 [0137.416] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.416] wcscmp (_String1="..", _String2=".") returned 1 [0137.416] wcscmp (_String1="..", _String2="..") returned 0 [0137.416] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0137.416] wcscmp (_String1="Patch", _String2=".") returned 1 [0137.416] wcscmp (_String1="Patch", _String2="..") returned 1 [0137.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7c18 [0137.416] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0137.416] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0137.416] wcscat (in: _Dest=0x2ff7c18, _Source="Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0139.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0139.606] FindNextFileW (in: hFindFile=0x3dcf390, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0139.606] FindClose (in: hFindFile=0x3dcf390 | out: hFindFile=0x3dcf390) returned 1 [0139.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0139.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c798) returned 1 [0139.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d680) returned 1 Thread: id = 705 os_tid = 0x1210 [0135.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0135.870] wcscpy (in: _Dest=0x333828, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0135.870] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0135.870] wcscat (in: _Dest=0x333828, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" [0135.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0135.870] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfe10 [0135.870] wcscmp (_String1=".", _String2=".") returned 0 [0135.870] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.871] wcscmp (_String1="..", _String2=".") returned 1 [0135.871] wcscmp (_String1="..", _String2="..") returned 0 [0135.871] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0135.871] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0135.871] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0135.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39ce0 [0135.871] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0135.871] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0135.871] wcscat (in: _Dest=0x3e39ce0, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0137.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e39ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0137.063] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0137.063] FindClose (in: hFindFile=0x3dcfe10 | out: hFindFile=0x3dcfe10) returned 1 [0137.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0137.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0137.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 706 os_tid = 0x1214 [0135.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35490 [0135.872] wcscpy (in: _Dest=0x3f35490, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0135.872] wcscat (in: _Dest=0x3f35490, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0135.872] wcscat (in: _Dest=0x3f35490, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" [0135.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100d40 [0135.872] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0135.872] wcscmp (_String1=".", _String2=".") returned 0 [0135.872] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.872] wcscmp (_String1="..", _String2=".") returned 1 [0135.872] wcscmp (_String1="..", _String2="..") returned 0 [0135.872] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0135.872] wcscmp (_String1="cache.dat", _String2=".") returned 1 [0135.872] wcscmp (_String1="cache.dat", _String2="..") returned 1 [0135.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e120e8 [0135.873] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0135.873] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0135.873] wcscat (in: _Dest=0x3e120e8, _Source="cache.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" [0137.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0137.065] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0137.065] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0137.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100d40) returned 1 [0137.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35490) returned 1 [0137.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20438) returned 1 Thread: id = 707 os_tid = 0x1218 [0135.873] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat")) returned 0x2020 [0135.873] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x20) returned 0 [0135.873] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.874] GetLastError () returned 0x5 [0135.874] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x2020) returned 0 [0135.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a240) returned 1 Thread: id = 708 os_tid = 0x121c [0135.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1718 [0135.875] wcscpy (in: _Dest=0x3db1718, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" [0135.875] wcscat (in: _Dest=0x3db1718, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\" [0135.875] wcscat (in: _Dest=0x3db1718, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*" [0135.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100870 [0135.875] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a98 [0139.128] wcscmp (_String1=".", _String2=".") returned 0 [0139.128] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.128] wcscmp (_String1="..", _String2=".") returned 1 [0139.129] wcscmp (_String1="..", _String2="..") returned 0 [0139.129] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.129] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.129] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a798 [0139.129] wcscpy (in: _Dest=0x3e2a798, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" [0139.129] wcscat (in: _Dest=0x3e2a798, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\" [0139.129] wcscat (in: _Dest=0x3e2a798, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" [0152.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0152.400] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0152.400] FindClose (in: hFindFile=0x3f37a98 | out: hFindFile=0x3f37a98) returned 1 [0152.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100870) returned 1 [0152.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1718) returned 1 [0152.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f398c8) returned 1 Thread: id = 709 os_tid = 0x1220 [0135.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1cc8 [0135.876] wcscpy (in: _Dest=0x3db1cc8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" [0135.876] wcscat (in: _Dest=0x3db1cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\" [0135.876] wcscat (in: _Dest=0x3db1cc8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*" [0135.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0135.877] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0139.144] wcscmp (_String1=".", _String2=".") returned 0 [0139.144] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.144] wcscmp (_String1="..", _String2=".") returned 1 [0139.144] wcscmp (_String1="..", _String2="..") returned 0 [0139.144] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.144] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.144] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cf48 [0139.145] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" [0139.145] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\" [0139.145] wcscat (in: _Dest=0x32cf48, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" [0142.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0142.952] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.952] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0142.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0142.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1cc8) returned 1 [0142.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33898) returned 1 Thread: id = 710 os_tid = 0x1224 [0135.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1be8 [0135.877] wcscpy (in: _Dest=0x3db1be8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" [0135.877] wcscat (in: _Dest=0x3db1be8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\" [0135.877] wcscat (in: _Dest=0x3db1be8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\*" [0135.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffc68 [0135.877] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b58 [0139.130] wcscmp (_String1=".", _String2=".") returned 0 [0139.130] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.130] wcscmp (_String1="..", _String2=".") returned 1 [0139.130] wcscmp (_String1="..", _String2="..") returned 0 [0139.130] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.130] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.130] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b1b0 [0139.130] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" [0139.130] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\" [0139.130] wcscat (in: _Dest=0x3e2b1b0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" [0145.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0145.085] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0145.086] FindClose (in: hFindFile=0x3f37b58 | out: hFindFile=0x3f37b58) returned 1 [0145.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffc68) returned 1 [0145.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1be8) returned 1 [0145.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33908) returned 1 Thread: id = 711 os_tid = 0x1228 [0135.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1b08 [0135.878] wcscpy (in: _Dest=0x3db1b08, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" [0135.878] wcscat (in: _Dest=0x3db1b08, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\" [0135.878] wcscat (in: _Dest=0x3db1b08, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\*" [0135.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fedf8 [0135.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b18 [0139.135] wcscmp (_String1=".", _String2=".") returned 0 [0139.135] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.135] wcscmp (_String1="..", _String2=".") returned 1 [0139.135] wcscmp (_String1="..", _String2="..") returned 0 [0139.135] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.135] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.135] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c8c0 [0139.135] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" [0139.135] wcscat (in: _Dest=0x32c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\" [0139.135] wcscat (in: _Dest=0x32c8c0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" [0142.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50 [0142.922] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.922] FindClose (in: hFindFile=0x3f37b18 | out: hFindFile=0x3f37b18) returned 1 [0142.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fedf8) returned 1 [0142.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1b08) returned 1 [0142.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33978) returned 1 Thread: id = 712 os_tid = 0x122c [0135.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1638 [0135.879] wcscpy (in: _Dest=0x3db1638, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" [0135.879] wcscat (in: _Dest=0x3db1638, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\" [0135.879] wcscat (in: _Dest=0x3db1638, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\*" [0135.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0135.879] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0139.136] wcscmp (_String1=".", _String2=".") returned 0 [0139.136] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.136] wcscmp (_String1="..", _String2=".") returned 1 [0139.136] wcscmp (_String1="..", _String2="..") returned 0 [0139.136] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.136] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.136] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0139.136] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" [0139.136] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\" [0139.136] wcscat (in: _Dest=0x32cc50, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" [0142.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0142.925] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.925] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0142.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0142.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1638) returned 1 [0142.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f339e8) returned 1 Thread: id = 713 os_tid = 0x1230 [0135.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f34238 [0135.901] wcscpy (in: _Dest=0x3f34238, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" [0135.901] wcscat (in: _Dest=0x3f34238, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\" [0135.901] wcscat (in: _Dest=0x3f34238, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\*" [0135.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85ee0 [0135.903] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0139.136] wcscmp (_String1=".", _String2=".") returned 0 [0139.136] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.137] wcscmp (_String1="..", _String2=".") returned 1 [0139.137] wcscmp (_String1="..", _String2="..") returned 0 [0139.137] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.137] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.137] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0139.137] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" [0139.137] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\" [0139.137] wcscat (in: _Dest=0x32cb20, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" [0142.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40 [0142.927] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.927] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0142.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ee0) returned 1 [0142.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34238) returned 1 [0142.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33a58) returned 1 Thread: id = 714 os_tid = 0x1234 [0135.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f342a8 [0135.903] wcscpy (in: _Dest=0x3f342a8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" [0135.903] wcscat (in: _Dest=0x3f342a8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\" [0135.904] wcscat (in: _Dest=0x3f342a8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*" [0135.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0135.904] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0139.139] wcscmp (_String1=".", _String2=".") returned 0 [0139.139] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.139] wcscmp (_String1="..", _String2=".") returned 1 [0139.139] wcscmp (_String1="..", _String2="..") returned 0 [0139.139] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.139] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.140] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0139.140] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" [0139.140] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\" [0139.140] wcscat (in: _Dest=0x32d668, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" [0142.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0142.934] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.934] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0142.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0142.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f342a8) returned 1 [0142.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33ac8) returned 1 Thread: id = 715 os_tid = 0x1238 [0135.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f34318 [0135.904] wcscpy (in: _Dest=0x3f34318, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" [0135.904] wcscat (in: _Dest=0x3f34318, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\" [0135.904] wcscat (in: _Dest=0x3f34318, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*" [0135.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0135.905] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38218 [0139.138] wcscmp (_String1=".", _String2=".") returned 0 [0139.138] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.138] wcscmp (_String1="..", _String2=".") returned 1 [0139.138] wcscmp (_String1="..", _String2="..") returned 0 [0139.138] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.138] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.139] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bd78 [0139.139] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" [0139.139] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\" [0139.139] wcscat (in: _Dest=0x32bd78, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" [0142.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0142.932] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.932] FindClose (in: hFindFile=0x3f38218 | out: hFindFile=0x3f38218) returned 1 [0142.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0142.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34318) returned 1 [0142.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33b38) returned 1 Thread: id = 716 os_tid = 0x123c [0135.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f34388 [0135.905] wcscpy (in: _Dest=0x3f34388, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" [0135.905] wcscat (in: _Dest=0x3f34388, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\" [0135.905] wcscat (in: _Dest=0x3f34388, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*" [0135.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84e08 [0135.905] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38058 [0139.129] wcscmp (_String1=".", _String2=".") returned 0 [0139.129] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.129] wcscmp (_String1="..", _String2=".") returned 1 [0139.129] wcscmp (_String1="..", _String2="..") returned 0 [0139.129] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.129] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.129] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bd90 [0139.129] wcscpy (in: _Dest=0x3e2bd90, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" [0139.129] wcscat (in: _Dest=0x3e2bd90, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\" [0139.130] wcscat (in: _Dest=0x3e2bd90, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" [0145.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0145.083] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0145.083] FindClose (in: hFindFile=0x3f38058 | out: hFindFile=0x3f38058) returned 1 [0145.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e08) returned 1 [0145.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34388) returned 1 [0145.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33ba8) returned 1 Thread: id = 717 os_tid = 0x1240 [0135.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3519c0 [0135.906] wcscpy (in: _Dest=0x3519c0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" [0135.906] wcscat (in: _Dest=0x3519c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\" [0135.906] wcscat (in: _Dest=0x3519c0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*" [0135.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0135.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0137.178] wcscmp (_String1=".", _String2=".") returned 0 [0137.178] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.178] wcscmp (_String1="..", _String2=".") returned 1 [0137.178] wcscmp (_String1="..", _String2="..") returned 0 [0137.178] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0137.178] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0137.178] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0137.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bbc8 [0137.178] wcscpy (in: _Dest=0x3e2bbc8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" [0137.178] wcscat (in: _Dest=0x3e2bbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\" [0137.178] wcscat (in: _Dest=0x3e2bbc8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" [0141.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0141.431] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0141.431] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0141.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0141.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3519c0) returned 1 [0141.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33c18) returned 1 Thread: id = 718 os_tid = 0x1244 [0135.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x364a80 [0135.908] wcscpy (in: _Dest=0x364a80, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" [0135.908] wcscat (in: _Dest=0x364a80, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\" [0135.908] wcscat (in: _Dest=0x364a80, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*" [0135.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0135.908] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0139.143] wcscmp (_String1=".", _String2=".") returned 0 [0139.143] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.143] wcscmp (_String1="..", _String2=".") returned 1 [0139.143] wcscmp (_String1="..", _String2="..") returned 0 [0139.143] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.143] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.143] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0139.144] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" [0139.144] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\" [0139.144] wcscat (in: _Dest=0x32d408, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" [0142.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0142.949] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.949] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0142.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0142.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364a80) returned 1 [0142.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33c88) returned 1 Thread: id = 719 os_tid = 0x1248 [0135.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e2ccd8 [0135.909] wcscpy (in: _Dest=0x3e2ccd8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" [0135.909] wcscat (in: _Dest=0x3e2ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\" [0135.909] wcscat (in: _Dest=0x3e2ccd8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\*" [0135.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0135.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0139.131] wcscmp (_String1=".", _String2=".") returned 0 [0139.132] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.132] wcscmp (_String1="..", _String2=".") returned 1 [0139.132] wcscmp (_String1="..", _String2="..") returned 0 [0139.132] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.132] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.132] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2af50 [0139.132] wcscpy (in: _Dest=0x3e2af50, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" [0139.132] wcscat (in: _Dest=0x3e2af50, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\" [0139.132] wcscat (in: _Dest=0x3e2af50, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" [0144.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2af50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0144.583] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0144.583] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0144.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0144.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ccd8) returned 1 [0144.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33cf8) returned 1 Thread: id = 720 os_tid = 0x124c [0135.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80547e0 [0135.910] wcscpy (in: _Dest=0x80547e0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" [0135.910] wcscat (in: _Dest=0x80547e0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\" [0135.910] wcscat (in: _Dest=0x80547e0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*" [0135.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e060 [0135.910] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0139.134] wcscmp (_String1=".", _String2=".") returned 0 [0139.134] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.134] wcscmp (_String1="..", _String2=".") returned 1 [0139.134] wcscmp (_String1="..", _String2="..") returned 0 [0139.134] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.134] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.134] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b968 [0139.134] wcscpy (in: _Dest=0x3e2b968, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" [0139.134] wcscat (in: _Dest=0x3e2b968, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\" [0139.134] wcscat (in: _Dest=0x3e2b968, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" [0142.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0142.920] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.920] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0142.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e060) returned 1 [0142.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80547e0) returned 1 [0142.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33d68) returned 1 Thread: id = 721 os_tid = 0x1250 [0135.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054850 [0135.911] wcscpy (in: _Dest=0x8054850, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" [0135.911] wcscat (in: _Dest=0x8054850, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\" [0135.911] wcscat (in: _Dest=0x8054850, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*" [0135.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e2c8 [0135.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0139.132] wcscmp (_String1=".", _String2=".") returned 0 [0139.132] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.132] wcscmp (_String1="..", _String2=".") returned 1 [0139.132] wcscmp (_String1="..", _String2="..") returned 0 [0139.132] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.133] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.133] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ac58 [0139.133] wcscpy (in: _Dest=0x3e2ac58, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" [0139.133] wcscat (in: _Dest=0x3e2ac58, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\" [0139.133] wcscat (in: _Dest=0x3e2ac58, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" [0142.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ac58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c4 [0142.915] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.915] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0142.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e2c8) returned 1 [0142.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054850) returned 1 [0142.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33dd8) returned 1 Thread: id = 722 os_tid = 0x1254 [0135.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80548c0 [0135.912] wcscpy (in: _Dest=0x80548c0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" [0135.912] wcscat (in: _Dest=0x80548c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\" [0135.912] wcscat (in: _Dest=0x80548c0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*" [0135.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e530 [0135.912] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38098 [0139.133] wcscmp (_String1=".", _String2=".") returned 0 [0139.133] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.133] wcscmp (_String1="..", _String2=".") returned 1 [0139.133] wcscmp (_String1="..", _String2="..") returned 0 [0139.133] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.133] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.133] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a240 [0139.133] wcscpy (in: _Dest=0x3e2a240, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" [0139.133] wcscat (in: _Dest=0x3e2a240, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\" [0139.133] wcscat (in: _Dest=0x3e2a240, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" [0142.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0142.917] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.917] FindClose (in: hFindFile=0x3f38098 | out: hFindFile=0x3f38098) returned 1 [0142.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e530) returned 1 [0142.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80548c0) returned 1 [0142.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33e48) returned 1 Thread: id = 723 os_tid = 0x1258 [0135.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d98 [0135.942] wcscpy (in: _Dest=0x3f39d98, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" [0135.942] wcscat (in: _Dest=0x3f39d98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\" [0135.942] wcscat (in: _Dest=0x3f39d98, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*" [0135.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ba18 [0135.942] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ad8 [0139.131] wcscmp (_String1=".", _String2=".") returned 0 [0139.131] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.131] wcscmp (_String1="..", _String2=".") returned 1 [0139.131] wcscmp (_String1="..", _String2="..") returned 0 [0139.131] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.131] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.131] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a830 [0139.131] wcscpy (in: _Dest=0x3e2a830, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" [0139.131] wcscat (in: _Dest=0x3e2a830, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\" [0139.131] wcscat (in: _Dest=0x3e2a830, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" [0145.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0145.088] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0145.088] FindClose (in: hFindFile=0x3f37ad8 | out: hFindFile=0x3f37ad8) returned 1 [0145.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ba18) returned 1 [0145.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d98) returned 1 [0145.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33eb8) returned 1 Thread: id = 724 os_tid = 0x125c [0135.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a2d8 [0135.943] wcscpy (in: _Dest=0x3f3a2d8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" [0135.943] wcscat (in: _Dest=0x3f3a2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\" [0135.943] wcscat (in: _Dest=0x3f3a2d8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*" [0135.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e798 [0135.943] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfe10 [0137.178] wcscmp (_String1=".", _String2=".") returned 0 [0137.178] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.179] wcscmp (_String1="..", _String2=".") returned 1 [0137.179] wcscmp (_String1="..", _String2="..") returned 0 [0137.179] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0137.179] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0137.179] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0137.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b7a0 [0137.179] wcscpy (in: _Dest=0x3e2b7a0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" [0137.179] wcscat (in: _Dest=0x3e2b7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\" [0137.179] wcscat (in: _Dest=0x3e2b7a0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" [0141.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0141.433] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0141.433] FindClose (in: hFindFile=0x3dcfe10 | out: hFindFile=0x3dcfe10) returned 1 [0141.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e798) returned 1 [0141.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a2d8) returned 1 [0141.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33f28) returned 1 Thread: id = 725 os_tid = 0x1260 [0135.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054930 [0135.944] wcscpy (in: _Dest=0x8054930, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" [0135.944] wcscat (in: _Dest=0x8054930, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\" [0135.944] wcscat (in: _Dest=0x8054930, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*" [0135.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ea00 [0135.944] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0139.137] wcscmp (_String1=".", _String2=".") returned 0 [0139.137] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.137] wcscmp (_String1="..", _String2=".") returned 1 [0139.138] wcscmp (_String1="..", _String2="..") returned 0 [0139.138] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.138] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.138] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cbb8 [0139.138] wcscpy (in: _Dest=0x32cbb8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" [0139.138] wcscat (in: _Dest=0x32cbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\" [0139.138] wcscat (in: _Dest=0x32cbb8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" [0142.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0142.930] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.930] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0142.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ea00) returned 1 [0142.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054930) returned 1 [0142.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33f98) returned 1 Thread: id = 726 os_tid = 0x1264 [0135.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80549a0 [0135.947] wcscpy (in: _Dest=0x80549a0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" [0135.947] wcscat (in: _Dest=0x80549a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\" [0135.947] wcscat (in: _Dest=0x80549a0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*" [0135.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ec68 [0135.948] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0139.142] wcscmp (_String1=".", _String2=".") returned 0 [0139.142] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.142] wcscmp (_String1="..", _String2=".") returned 1 [0139.142] wcscmp (_String1="..", _String2="..") returned 0 [0139.142] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.142] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.142] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0139.142] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" [0139.142] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\" [0139.142] wcscat (in: _Dest=0x32d700, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" [0142.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0142.942] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.942] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0142.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ec68) returned 1 [0142.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80549a0) returned 1 [0142.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34008) returned 1 Thread: id = 727 os_tid = 0x1268 [0135.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054a10 [0135.951] wcscpy (in: _Dest=0x8054a10, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" [0135.951] wcscat (in: _Dest=0x8054a10, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\" [0135.951] wcscat (in: _Dest=0x8054a10, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*" [0135.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808eed0 [0135.951] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0139.142] wcscmp (_String1=".", _String2=".") returned 0 [0139.142] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.142] wcscmp (_String1="..", _String2=".") returned 1 [0139.142] wcscmp (_String1="..", _String2="..") returned 0 [0139.142] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.142] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.143] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d5d0 [0139.143] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" [0139.143] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\" [0139.143] wcscat (in: _Dest=0x32d5d0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" [0142.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0142.947] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.947] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0142.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808eed0) returned 1 [0142.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a10) returned 1 [0142.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34078) returned 1 Thread: id = 728 os_tid = 0x126c [0135.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054a80 [0135.952] wcscpy (in: _Dest=0x8054a80, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" [0135.952] wcscat (in: _Dest=0x8054a80, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\" [0135.952] wcscat (in: _Dest=0x8054a80, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*" [0135.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f138 [0135.952] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0139.140] wcscmp (_String1=".", _String2=".") returned 0 [0139.140] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.140] wcscmp (_String1="..", _String2=".") returned 1 [0139.140] wcscmp (_String1="..", _String2="..") returned 0 [0139.140] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.140] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.140] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0139.140] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" [0139.141] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\" [0139.141] wcscat (in: _Dest=0x32b820, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" [0142.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0142.937] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.937] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0142.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f138) returned 1 [0142.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a80) returned 1 [0142.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f340e8) returned 1 Thread: id = 729 os_tid = 0x1270 [0136.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39cb8 [0136.037] wcscpy (in: _Dest=0x3f39cb8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" [0136.037] wcscat (in: _Dest=0x3f39cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\" [0136.037] wcscat (in: _Dest=0x3f39cb8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*" [0136.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049cc0 [0136.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0139.141] wcscmp (_String1=".", _String2=".") returned 0 [0139.141] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.141] wcscmp (_String1="..", _String2=".") returned 1 [0139.141] wcscmp (_String1="..", _String2="..") returned 0 [0139.141] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.141] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.141] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bea8 [0139.141] wcscpy (in: _Dest=0x32bea8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" [0139.141] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\" [0139.141] wcscat (in: _Dest=0x32bea8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" [0142.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c [0142.939] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0142.939] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0142.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049cc0) returned 1 [0142.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39cb8) returned 1 [0142.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34158) returned 1 Thread: id = 730 os_tid = 0x1278 [0136.038] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp")) returned 0x20 [0142.130] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0142.130] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.131] GetLastError () returned 0x5 [0142.131] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0142.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d728) returned 1 Thread: id = 731 os_tid = 0x127c [0136.039] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp")) returned 0x20 [0142.132] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0142.132] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.132] GetLastError () returned 0x5 [0142.132] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0142.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ed8) returned 1 Thread: id = 732 os_tid = 0x1280 [0136.040] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp")) returned 0x20 [0142.133] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0142.133] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.133] GetLastError () returned 0x5 [0142.133] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0142.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186f80) returned 1 Thread: id = 733 os_tid = 0x1284 [0136.040] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp")) returned 0x20 [0142.134] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0142.135] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.135] GetLastError () returned 0x5 [0142.135] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0142.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187028) returned 1 Thread: id = 734 os_tid = 0x1288 [0136.041] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp")) returned 0x20 [0142.088] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0142.088] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.088] GetLastError () returned 0x5 [0142.088] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0142.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81870d0) returned 1 Thread: id = 735 os_tid = 0x128c [0136.041] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp")) returned 0x20 [0142.089] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0142.089] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.089] GetLastError () returned 0x5 [0142.089] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0142.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187178) returned 1 Thread: id = 736 os_tid = 0x1290 [0136.043] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp")) returned 0x20 [0142.090] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0142.090] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.091] GetLastError () returned 0x5 [0142.091] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0142.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187220) returned 1 Thread: id = 737 os_tid = 0x1294 [0136.044] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp")) returned 0x20 [0142.115] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0142.115] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.115] GetLastError () returned 0x5 [0142.115] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0142.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81872c8) returned 1 Thread: id = 738 os_tid = 0x1298 [0136.044] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp")) returned 0x20 [0142.136] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0142.136] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.136] GetLastError () returned 0x5 [0142.136] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0142.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 Thread: id = 739 os_tid = 0x129c [0136.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c428 [0136.045] wcscpy (in: _Dest=0x35c428, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0136.045] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0136.045] wcscat (in: _Dest=0x35c428, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" [0136.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f3a0 [0136.045] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0137.417] wcscmp (_String1=".", _String2=".") returned 0 [0137.417] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.417] wcscmp (_String1="..", _String2=".") returned 1 [0137.417] wcscmp (_String1="..", _String2="..") returned 0 [0137.417] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0137.417] wcscmp (_String1="en-US", _String2=".") returned 1 [0137.417] wcscmp (_String1="en-US", _String2="..") returned 1 [0137.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff72c0 [0137.417] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0137.417] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0137.417] wcscat (in: _Dest=0x2ff72c0, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0139.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff72c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0139.608] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0139.608] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0139.609] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0139.609] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0139.609] wcscmp (_String1="netfol.ico", _String2=".") returned 1 [0139.609] wcscmp (_String1="netfol.ico", _String2="..") returned 1 [0139.609] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647e2d64, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647e2d64, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0139.609] wcscmp (_String1="pictures.ico", _String2=".") returned 1 [0139.609] wcscmp (_String1="pictures.ico", _String2="..") returned 1 [0139.609] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0139.609] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0139.609] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0139.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35280 [0139.609] wcscpy (in: _Dest=0x3e35280, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0139.609] wcscat (in: _Dest=0x3e35280, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0139.609] wcscat (in: _Dest=0x3e35280, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" [0139.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0139.611] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0139.611] wcscmp (_String1="ringtones.ico", _String2=".") returned 1 [0139.611] wcscmp (_String1="ringtones.ico", _String2="..") returned 1 [0139.611] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0139.611] wcscmp (_String1="settings.ico", _String2=".") returned 1 [0139.611] wcscmp (_String1="settings.ico", _String2="..") returned 1 [0139.611] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6482f024, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6482f024, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0139.611] wcscmp (_String1="sync.ico", _String2=".") returned 1 [0139.611] wcscmp (_String1="sync.ico", _String2="..") returned 1 [0139.611] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1137e43c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1137e43c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0139.611] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0139.611] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0139.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333468 [0139.611] wcscpy (in: _Dest=0x333468, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0139.611] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0139.611] wcscat (in: _Dest=0x333468, _Source="tasks.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" [0139.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0139.613] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0139.613] wcscmp (_String1="wmp.ico", _String2=".") returned 1 [0139.613] wcscmp (_String1="wmp.ico", _String2="..") returned 1 [0139.613] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0139.613] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0139.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f3a0) returned 1 [0139.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 [0139.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 740 os_tid = 0x12a0 [0136.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0136.048] wcscpy (in: _Dest=0x35c378, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0136.048] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0136.048] wcscat (in: _Dest=0x35c378, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" [0136.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f608 [0136.048] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0137.452] wcscmp (_String1=".", _String2=".") returned 0 [0137.452] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.452] wcscmp (_String1="..", _String2=".") returned 1 [0137.452] wcscmp (_String1="..", _String2="..") returned 0 [0137.452] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0137.452] wcscmp (_String1="en-US", _String2=".") returned 1 [0137.452] wcscmp (_String1="en-US", _String2="..") returned 1 [0137.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6740 [0137.453] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0137.453] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0137.453] wcscat (in: _Dest=0x2ff6740, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0145.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0145.653] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0145.653] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0145.653] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0145.653] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8343e21, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8343e21, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0145.653] wcscmp (_String1="print_pref.ico", _String2=".") returned 1 [0145.653] wcscmp (_String1="print_pref.ico", _String2="..") returned 1 [0145.653] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8369f80, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8369f80, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0145.653] wcscmp (_String1="print_property.ico", _String2=".") returned 1 [0145.653] wcscmp (_String1="print_property.ico", _String2="..") returned 1 [0145.653] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0145.654] wcscmp (_String1="print_queue.ico", _String2=".") returned 1 [0145.654] wcscmp (_String1="print_queue.ico", _String2="..") returned 1 [0145.654] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0145.654] wcscmp (_String1="scan_.ico", _String2=".") returned 1 [0145.654] wcscmp (_String1="scan_.ico", _String2="..") returned 1 [0145.654] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0145.654] wcscmp (_String1="scan_property.ico", _String2=".") returned 1 [0145.654] wcscmp (_String1="scan_property.ico", _String2="..") returned 1 [0145.654] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83dc39d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83dc39d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0145.654] wcscmp (_String1="scan_settings.ico", _String2=".") returned 1 [0145.654] wcscmp (_String1="scan_settings.ico", _String2="..") returned 1 [0145.654] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0145.654] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0145.654] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0145.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333a68 [0145.654] wcscpy (in: _Dest=0x333a68, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0145.654] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0145.654] wcscat (in: _Dest=0x333a68, _Source="tasks.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" [0145.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0145.656] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0145.656] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0145.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f608) returned 1 [0145.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 [0145.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 741 os_tid = 0x12a4 [0136.051] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20 [0136.051] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0136.052] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.052] GetLastError () returned 0x5 [0136.052] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0136.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5688) returned 1 Thread: id = 742 os_tid = 0x12a8 [0136.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11a08 [0136.053] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" [0136.053] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\" [0136.054] wcscat (in: _Dest=0x3e11a08, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\*" [0136.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f870 [0136.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\*", lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0136.054] wcscmp (_String1=".", _String2=".") returned 0 [0136.054] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.054] wcscmp (_String1="..", _String2=".") returned 1 [0136.054] wcscmp (_String1="..", _String2="..") returned 0 [0136.054] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c668700, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c668700, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 1 [0136.054] wcscmp (_String1="Synchronization.rll", _String2=".") returned 1 [0136.054] wcscmp (_String1="Synchronization.rll", _String2="..") returned 1 [0136.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e34c40 [0136.054] wcscpy (in: _Dest=0x3e34c40, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" [0136.054] wcscat (in: _Dest=0x3e34c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\" [0136.054] wcscat (in: _Dest=0x3e34c40, _Source="Synchronization.rll" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll" [0143.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0143.490] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c668700, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c668700, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 0 [0143.490] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0143.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f870) returned 1 [0143.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 [0143.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 743 os_tid = 0x12ac [0136.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8df38 [0136.055] wcscpy (in: _Dest=0x3d8df38, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0136.055] wcscat (in: _Dest=0x3d8df38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0136.055] wcscat (in: _Dest=0x3d8df38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\*" [0136.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fad8 [0136.055] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0137.176] wcscmp (_String1=".", _String2=".") returned 0 [0137.176] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.176] wcscmp (_String1="..", _String2=".") returned 1 [0137.176] wcscmp (_String1="..", _String2="..") returned 0 [0137.176] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0137.176] wcscmp (_String1="AU", _String2=".") returned 1 [0137.176] wcscmp (_String1="AU", _String2="..") returned 1 [0137.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d4a8 [0137.176] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0137.176] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0137.176] wcscat (in: _Dest=0x3d8d4a8, _Source="AU" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU" [0139.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0139.592] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80dd3c10, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0139.592] wcscmp (_String1="Deployment", _String2=".") returned 1 [0139.592] wcscmp (_String1="Deployment", _String2="..") returned 1 [0139.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32bb0 [0139.592] wcscpy (in: _Dest=0x3f32bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0139.592] wcscat (in: _Dest=0x3f32bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0139.592] wcscat (in: _Dest=0x3f32bb0, _Source="Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0139.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4 [0139.594] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0139.594] wcscmp (_String1="jre1.7.0_45", _String2=".") returned 1 [0139.594] wcscmp (_String1="jre1.7.0_45", _String2="..") returned 1 [0139.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32ef8 [0139.594] wcscpy (in: _Dest=0x3f32ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0139.594] wcscat (in: _Dest=0x3f32ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0139.594] wcscat (in: _Dest=0x3f32ef8, _Source="jre1.7.0_45" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" [0139.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0139.595] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0139.595] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0139.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fad8) returned 1 [0139.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8df38) returned 1 [0139.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 Thread: id = 744 os_tid = 0x12b0 [0136.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11148 [0136.056] wcscpy (in: _Dest=0x3e11148, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0136.056] wcscat (in: _Dest=0x3e11148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" [0136.056] wcscat (in: _Dest=0x3e11148, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*" [0136.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fd40 [0136.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0136.056] wcscmp (_String1=".", _String2=".") returned 0 [0136.056] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.056] wcscmp (_String1="..", _String2=".") returned 1 [0136.056] wcscmp (_String1="..", _String2="..") returned 0 [0136.056] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88301400, ftCreationTime.dwHighDateTime=0x1c9b0f8, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88301400, ftLastWriteTime.dwHighDateTime=0x1c9b0f8, nFileSizeHigh=0x0, nFileSizeLow=0xa2d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0136.056] wcscmp (_String1="msmdsrv.rll", _String2=".") returned 1 [0136.057] wcscmp (_String1="msmdsrv.rll", _String2="..") returned 1 [0136.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c4d8 [0136.057] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0136.057] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" [0136.057] wcscat (in: _Dest=0x35c4d8, _Source="msmdsrv.rll" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" [0143.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0143.491] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4c5b00, ftCreationTime.dwHighDateTime=0x1c8e24f, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a4c5b00, ftLastWriteTime.dwHighDateTime=0x1c8e24f, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0143.491] wcscmp (_String1="msolui100.rll", _String2=".") returned 1 [0143.491] wcscmp (_String1="msolui100.rll", _String2="..") returned 1 [0143.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7880 [0143.491] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0143.491] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" [0143.491] wcscat (in: _Dest=0x2ff7880, _Source="msolui100.rll" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" [0143.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0143.493] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4c5b00, ftCreationTime.dwHighDateTime=0x1c8e24f, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a4c5b00, ftLastWriteTime.dwHighDateTime=0x1c8e24f, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0143.493] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0143.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fd40) returned 1 [0143.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11148) returned 1 [0143.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a700) returned 1 Thread: id = 745 os_tid = 0x12b4 [0136.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b820 [0136.057] wcscpy (in: _Dest=0x3f0b820, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" [0136.057] wcscat (in: _Dest=0x3f0b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\" [0136.057] wcscat (in: _Dest=0x3f0b820, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*" [0136.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ffa8 [0136.057] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352582b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0136.058] wcscmp (_String1=".", _String2=".") returned 0 [0136.058] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352582b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.058] wcscmp (_String1="..", _String2=".") returned 1 [0136.058] wcscmp (_String1="..", _String2="..") returned 0 [0136.058] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70db700, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa70db700, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 1 [0136.058] wcscmp (_String1="CAGCAT10.MML", _String2=".") returned 1 [0136.058] wcscmp (_String1="CAGCAT10.MML", _String2="..") returned 1 [0136.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x355dd0 [0136.058] wcscpy (in: _Dest=0x355dd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" [0136.058] wcscat (in: _Dest=0x355dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\" [0136.058] wcscat (in: _Dest=0x355dd0, _Source="CAGCAT10.MML" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" [0138.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0138.940] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70db700, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa70db700, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 0 [0138.941] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0138.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ffa8) returned 1 [0138.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b820) returned 1 [0138.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 Thread: id = 746 os_tid = 0x12b8 [0136.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw")) returned 0x20 [0139.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW", dwFileAttributes=0x20) returned 0 [0139.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.299] GetLastError () returned 0x5 [0141.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW", dwFileAttributes=0x20) returned 0 [0141.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 747 os_tid = 0x12bc [0136.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav")) returned 0x20 [0140.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV", dwFileAttributes=0x20) returned 0 [0140.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.890] GetLastError () returned 0x5 [0140.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV", dwFileAttributes=0x20) returned 0 [0140.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 748 os_tid = 0x12c0 [0136.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf")) returned 0x20 [0141.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF", dwFileAttributes=0x20) returned 0 [0141.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.307] GetLastError () returned 0x5 [0141.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF", dwFileAttributes=0x20) returned 0 [0141.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 Thread: id = 749 os_tid = 0x12c4 [0136.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf")) returned 0x20 [0141.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF", dwFileAttributes=0x20) returned 0 [0141.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.309] GetLastError () returned 0x5 [0141.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF", dwFileAttributes=0x20) returned 0 [0141.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 750 os_tid = 0x12c8 [0136.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf")) returned 0x20 [0141.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF", dwFileAttributes=0x20) returned 0 [0141.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.310] GetLastError () returned 0x5 [0141.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF", dwFileAttributes=0x20) returned 0 [0141.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30050) returned 1 Thread: id = 751 os_tid = 0x12cc [0136.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf")) returned 0x20 [0141.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF", dwFileAttributes=0x20) returned 0 [0141.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.311] GetLastError () returned 0x5 [0141.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF", dwFileAttributes=0x20) returned 0 [0141.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 752 os_tid = 0x12d0 [0136.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf")) returned 0x20 [0141.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF", dwFileAttributes=0x20) returned 0 [0141.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.313] GetLastError () returned 0x5 [0141.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF", dwFileAttributes=0x20) returned 0 [0141.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30160) returned 1 Thread: id = 753 os_tid = 0x12d4 [0136.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf")) returned 0x20 [0141.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF", dwFileAttributes=0x20) returned 0 [0141.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.314] GetLastError () returned 0x5 [0141.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF", dwFileAttributes=0x20) returned 0 [0141.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f301e8) returned 1 Thread: id = 754 os_tid = 0x12d8 [0136.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf")) returned 0x20 [0141.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF", dwFileAttributes=0x20) returned 0 [0141.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.316] GetLastError () returned 0x5 [0141.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF", dwFileAttributes=0x20) returned 0 [0141.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 755 os_tid = 0x12dc [0136.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf")) returned 0x20 [0141.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF", dwFileAttributes=0x20) returned 0 [0141.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.324] GetLastError () returned 0x5 [0141.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF", dwFileAttributes=0x20) returned 0 [0141.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 756 os_tid = 0x12e0 [0136.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf")) returned 0x20 [0141.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF", dwFileAttributes=0x20) returned 0 [0141.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.302] GetLastError () returned 0x5 [0141.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF", dwFileAttributes=0x20) returned 0 [0141.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 757 os_tid = 0x12e4 [0136.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf")) returned 0x20 [0141.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF", dwFileAttributes=0x20) returned 0 [0141.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.317] GetLastError () returned 0x5 [0141.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF", dwFileAttributes=0x20) returned 0 [0141.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30408) returned 1 Thread: id = 758 os_tid = 0x12e8 [0136.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf")) returned 0x20 [0141.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF", dwFileAttributes=0x20) returned 0 [0141.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.318] GetLastError () returned 0x5 [0141.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF", dwFileAttributes=0x20) returned 0 [0141.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 759 os_tid = 0x12ec [0136.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf")) returned 0x20 [0141.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF", dwFileAttributes=0x20) returned 0 [0141.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.320] GetLastError () returned 0x5 [0141.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF", dwFileAttributes=0x20) returned 0 [0141.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30518) returned 1 Thread: id = 760 os_tid = 0x12f0 [0136.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf")) returned 0x20 [0141.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF", dwFileAttributes=0x20) returned 0 [0141.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.321] GetLastError () returned 0x5 [0141.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF", dwFileAttributes=0x20) returned 0 [0141.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f305a0) returned 1 Thread: id = 761 os_tid = 0x12f4 [0136.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf")) returned 0x20 [0141.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF", dwFileAttributes=0x20) returned 0 [0141.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.323] GetLastError () returned 0x5 [0141.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF", dwFileAttributes=0x20) returned 0 [0141.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 762 os_tid = 0x12f8 [0136.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf")) returned 0x20 [0141.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF", dwFileAttributes=0x20) returned 0 [0141.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.306] GetLastError () returned 0x5 [0141.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF", dwFileAttributes=0x20) returned 0 [0141.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 763 os_tid = 0x12fc [0136.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf")) returned 0x20 [0141.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF", dwFileAttributes=0x20) returned 0 [0141.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.326] GetLastError () returned 0x5 [0141.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF", dwFileAttributes=0x20) returned 0 [0141.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 764 os_tid = 0x1300 [0137.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf")) returned 0x20 [0141.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF", dwFileAttributes=0x20) returned 0 [0141.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.300] GetLastError () returned 0x5 [0141.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF", dwFileAttributes=0x20) returned 0 [0141.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f307c0) returned 1 Thread: id = 765 os_tid = 0x1308 [0137.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32e08 [0137.189] wcscpy (in: _Dest=0x3f32e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0137.189] wcscat (in: _Dest=0x3f32e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0137.189] wcscat (in: _Dest=0x3f32e08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*" [0137.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049588 [0137.189] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd10 [0137.190] wcscmp (_String1=".", _String2=".") returned 0 [0137.190] FindNextFileW (in: hFindFile=0x3dcfd10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.190] wcscmp (_String1="..", _String2=".") returned 1 [0137.190] wcscmp (_String1="..", _String2="..") returned 0 [0137.190] FindNextFileW (in: hFindFile=0x3dcfd10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0137.190] wcscmp (_String1="Collab", _String2=".") returned 1 [0137.190] wcscmp (_String1="Collab", _String2="..") returned 1 [0137.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da4c70 [0137.190] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0137.190] wcscat (in: _Dest=0x3da4c70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0137.190] wcscat (in: _Dest=0x3da4c70, _Source="Collab" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" [0141.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3da4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0141.435] FindNextFileW (in: hFindFile=0x3dcfd10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0141.435] wcscmp (_String1="Forms", _String2=".") returned 1 [0141.436] wcscmp (_String1="Forms", _String2="..") returned 1 [0141.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5d70 [0141.436] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0141.436] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0141.436] wcscat (in: _Dest=0x3da5d70, _Source="Forms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" [0141.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3da5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0141.437] FindNextFileW (in: hFindFile=0x3dcfd10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb989790, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1 [0141.437] wcscmp (_String1="JavaScripts", _String2=".") returned 1 [0141.437] wcscmp (_String1="JavaScripts", _String2="..") returned 1 [0141.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f748 [0141.437] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0141.437] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0141.437] wcscat (in: _Dest=0x3f2f748, _Source="JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0141.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0141.438] FindNextFileW (in: hFindFile=0x3dcfd10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0141.439] wcscmp (_String1="Security", _String2=".") returned 1 [0141.439] wcscmp (_String1="Security", _String2="..") returned 1 [0141.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f305a0 [0141.439] wcscpy (in: _Dest=0x3f305a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0141.439] wcscat (in: _Dest=0x3f305a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0141.439] wcscat (in: _Dest=0x3f305a0, _Source="Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0141.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f305a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0141.440] FindNextFileW (in: hFindFile=0x3dcfd10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0141.440] FindClose (in: hFindFile=0x3dcfd10 | out: hFindFile=0x3dcfd10) returned 1 [0141.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049588) returned 1 [0141.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e08) returned 1 [0141.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a268) returned 1 Thread: id = 766 os_tid = 0x130c [0137.191] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\atlj4k.swf")) returned 0x20 [0137.191] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf", dwFileAttributes=0x20) returned 1 [0137.191] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\atlj4k.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x102c [0137.191] GetFileSizeEx (in: hFile=0x102c, lpFileSize=0xa15f948 | out: lpFileSize=0xa15f948*=67249) returned 1 [0137.191] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0x106ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.192] ReadFile (in: hFile=0x102c, lpBuffer=0xa15f954, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa15f930, lpOverlapped=0x0 | out: lpBuffer=0xa15f954*, lpNumberOfBytesRead=0xa15f930*=0x4, lpOverlapped=0x0) returned 1 [0137.193] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ff0 [0137.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0137.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fc8 [0137.194] NtQuerySystemTime (in: CurrentTime=0xa15f8d0 | out: CurrentTime=0xa15f8d0*=132471540058788000) returned 0x0 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x160ca3f0 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x3db2ccc7 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x5ac290e1 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x2bac97d4 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x5f097fa3 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x12f1f167 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x5d8144f2 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x173fedef [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x29078ba [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x2ee6373c [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x2afd0683 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x10ad6156 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x53cf27b5 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x6a6389d8 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x1f8c5ea2 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x1102f140 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x34993b09 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x38bf15b9 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x38c7add6 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x615e5bec [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x691cbf89 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x51d782af [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x512a986d [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x54266d30 [0137.194] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x6c43ced3 [0137.195] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x11eebbe5 [0137.195] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x58e95e32 [0137.195] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x7d33fa7 [0137.195] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x4af472a3 [0137.195] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x4ad0a652 [0137.195] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x38cb0577 [0137.195] RtlRandomEx (in: Seed=0xa15f8c8 | out: Seed=0xa15f8c8) returned 0x6f2c195c [0137.207] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.207] ReadFile (in: hFile=0x102c, lpBuffer=0x8288458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa15f8d0, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesRead=0xa15f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.207] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31ec8 [0137.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32958 [0137.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ff0 [0137.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ff0) returned 1 [0137.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828c060 [0137.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ff0 [0137.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fc8 [0137.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fc8) returned 1 [0137.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0137.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31ec8) returned 1 [0137.208] WriteFile (in: hFile=0x102c, lpBuffer=0x828c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa15f8d0, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesWritten=0xa15f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0137.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0137.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e6f288 [0137.671] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.671] WriteFile (in: hFile=0x102c, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xa15f93c, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xa15f93c*=0x106, lpOverlapped=0x0) returned 1 [0137.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0137.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f588) returned 1 [0137.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bd8) returned 1 [0137.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f288) returned 1 [0137.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ff0) returned 1 [0137.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0137.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef45b0) returned 1 [0137.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46a0) returned 1 [0137.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8052b98 [0137.786] wcscpy (in: _Dest=0x8052b98, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf" [0137.786] wcscat (in: _Dest=0x8052b98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf.f0dbec" [0137.786] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf.f0dbec", NtPathName=0xa15f8c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\ATLj4k.swf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e12408 [0137.871] FlushFileBuffers (hFile=0x102c) returned 1 [0137.873] CloseHandle (hObject=0x102c) returned 1 [0137.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x80528f0 [0137.880] wcscpy (in: _Dest=0x80528f0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0137.880] wcscat (in: _Dest=0x80528f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" [0137.880] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\f0dbec-readme.txt")) returned 0xffffffff [0137.880] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc84 [0137.883] WriteFile (in: hFile=0xc84, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa15f8e4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa15f8e4*=0x70c, lpOverlapped=0x0) returned 1 [0137.886] CloseHandle (hObject=0xc84) returned 1 [0137.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80528f0) returned 1 [0137.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e683a8) returned 1 Thread: id = 767 os_tid = 0x1310 [0137.209] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\cr5pvz.swf")) returned 0x20 [0137.209] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf", dwFileAttributes=0x20) returned 1 [0137.209] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\cr5pvz.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc28 [0137.209] GetFileSizeEx (in: hFile=0xc28, lpFileSize=0xcd4f868 | out: lpFileSize=0xcd4f868*=81883) returned 1 [0137.210] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x13fd7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.210] ReadFile (in: hFile=0xc28, lpBuffer=0xcd4f874, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcd4f850, lpOverlapped=0x0 | out: lpBuffer=0xcd4f874*, lpNumberOfBytesRead=0xcd4f850*=0x4, lpOverlapped=0x0) returned 1 [0137.212] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fc8 [0137.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0137.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0137.212] NtQuerySystemTime (in: CurrentTime=0xcd4f7f0 | out: CurrentTime=0xcd4f7f0*=132471540058944000) returned 0x0 [0137.212] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x3c0567ea [0137.212] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0xa6686c3 [0137.212] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x5815d06 [0137.212] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x5c2fcd00 [0137.212] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0xa9b2ffd [0137.212] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x2b01d468 [0137.212] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x2eeb2ef8 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x140c2acd [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x4821585b [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x16ee39f4 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x656b9ab1 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x4da30ef0 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x50a88824 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0xcf8c597 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x216427f8 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x1ee0fba2 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x1b6f34fe [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x4d39d91a [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x133e245a [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x3f976033 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x13592cd2 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x5134113c [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x2e6b7fe8 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x47e54011 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x4f7822e2 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x6c68c04a [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x576fb7b9 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x41169ff8 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x11973222 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x2356a4 [0137.213] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x7d83e83b [0137.214] RtlRandomEx (in: Seed=0xcd4f7e8 | out: Seed=0xcd4f7e8) returned 0x425eec80 [0137.228] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.228] ReadFile (in: hFile=0xc28, lpBuffer=0x829ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcd4f7f0, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesRead=0xcd4f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.228] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31c40 [0137.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32958 [0137.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fc8 [0137.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fc8) returned 1 [0137.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0137.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fc8 [0137.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0137.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0137.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0137.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31c40) returned 1 [0137.229] WriteFile (in: hFile=0xc28, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcd4f7f0, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0xcd4f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0137.675] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.675] ReadFile (in: hFile=0xc28, lpBuffer=0x829ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcd4f7f0, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesRead=0xcd4f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.675] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6aa10 [0137.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c180 [0137.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e58 [0137.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e58) returned 1 [0137.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0137.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e58 [0137.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c00 [0137.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c00) returned 1 [0137.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c180) returned 1 [0137.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aa10) returned 1 [0137.676] WriteFile (in: hFile=0xc28, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcd4f7f0, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0xcd4f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0137.680] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x103db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.680] ReadFile (in: hFile=0xc28, lpBuffer=0x829ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcd4f7f0, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesRead=0xcd4f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.681] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x103db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31cd0 [0137.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32958 [0137.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1748 [0137.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1748) returned 1 [0137.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0137.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1748 [0137.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0137.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0137.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0137.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31cd0) returned 1 [0137.682] WriteFile (in: hFile=0xc28, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcd4f7f0, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0xcd4f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0137.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd958 [0137.686] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.686] WriteFile (in: hFile=0xc28, lpBuffer=0x3e16628*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0xcd4f85c, lpOverlapped=0x0 | out: lpBuffer=0x3e16628*, lpNumberOfBytesWritten=0xcd4f85c*=0x146, lpOverlapped=0x0) returned 1 [0137.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16628) returned 1 [0137.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f258) returned 1 [0137.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fc8) returned 1 [0137.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f318) returned 1 [0137.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd958) returned 1 [0137.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0137.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4830) returned 1 [0137.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47e0) returned 1 [0137.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8052c20 [0137.793] wcscpy (in: _Dest=0x8052c20, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf" [0137.793] wcscat (in: _Dest=0x8052c20, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf.f0dbec" [0137.793] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf.f0dbec", NtPathName=0xcd4f7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Cr5Pvz.swf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11fa8 [0137.945] FlushFileBuffers (hFile=0xc28) returned 1 [0137.959] CloseHandle (hObject=0xc28) returned 1 [0137.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f748 [0137.980] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0137.980] wcscat (in: _Dest=0x3f2f748, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" [0137.980] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\f0dbec-readme.txt")) returned 0x20 [0137.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 [0137.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b898) returned 1 Thread: id = 768 os_tid = 0x1314 [0137.230] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\g3xvgzicw.mkv")) returned 0x20 [0137.230] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv", dwFileAttributes=0x20) returned 1 [0137.230] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\g3xvgzicw.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc40 [0137.230] GetFileSizeEx (in: hFile=0xc40, lpFileSize=0xd1bfa00 | out: lpFileSize=0xd1bfa00*=15255) returned 1 [0137.230] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x3b93, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.230] ReadFile (in: hFile=0xc40, lpBuffer=0xd1bfa0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd1bf9e8, lpOverlapped=0x0 | out: lpBuffer=0xd1bfa0c*, lpNumberOfBytesRead=0xd1bf9e8*=0x4, lpOverlapped=0x0) returned 1 [0137.232] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0137.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef48a8 [0137.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0137.233] NtQuerySystemTime (in: CurrentTime=0xd1bf988 | out: CurrentTime=0xd1bf988*=132471540059100000) returned 0x0 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x7867c4dd [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x7b0f7ac0 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x2c7f78e5 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x17ed805b [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x57318bdb [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x6725a4e1 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x6bae2123 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x485ad21d [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x29bd7a94 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x55d70a3c [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x76e1477f [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x5847c0ba [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x7b95c528 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x6dc1ab3e [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x2239adf2 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x1724fd57 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x2428f8c5 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x6ce926b2 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x1db39c93 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x17acf132 [0137.233] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x6118bbbd [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x3b707044 [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x3a9c69b4 [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x5ab50604 [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x514cf95a [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x5714fe57 [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x2264c362 [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x140e9cc7 [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x3046039d [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x512b10db [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x699d39af [0137.234] RtlRandomEx (in: Seed=0xd1bf980 | out: Seed=0xd1bf980) returned 0x61009113 [0137.243] ReadFile (in: hFile=0xc40, lpBuffer=0x82a6498, nNumberOfBytesToRead=0x3b97, lpNumberOfBytesRead=0xd1bf97c, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesRead=0xd1bf97c*=0x3b97, lpOverlapped=0x0) returned 1 [0137.244] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.244] WriteFile (in: hFile=0xc40, lpBuffer=0x82aa0a0*, nNumberOfBytesToWrite=0x3b97, lpNumberOfBytesWritten=0xd1bf980, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesWritten=0xd1bf980*=0x3b97, lpOverlapped=0x0) returned 1 [0137.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c00 [0137.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0137.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0137.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0137.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0137.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0137.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31cd0) returned 1 [0137.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f2e8 [0137.679] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.679] WriteFile (in: hFile=0xc40, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd1bf9f4, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xd1bf9f4*=0x10c, lpOverlapped=0x0) returned 1 [0137.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0137.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f468) returned 1 [0137.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0137.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f2e8) returned 1 [0137.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c00) returned 1 [0137.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a8) returned 1 [0137.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48d0) returned 1 [0137.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48f8) returned 1 [0137.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34ef0 [0137.789] wcscpy (in: _Dest=0x3f34ef0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv" [0137.789] wcscat (in: _Dest=0x3f34ef0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv.f0dbec" [0137.789] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv.f0dbec", NtPathName=0xd1bf978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\g3xVgzICw.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11788 [0137.928] FlushFileBuffers (hFile=0xc40) returned 1 [0137.958] CloseHandle (hObject=0xc40) returned 1 [0137.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f748 [0137.974] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0137.974] wcscat (in: _Dest=0x3f2f748, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" [0137.974] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\f0dbec-readme.txt")) returned 0x20 [0137.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 [0137.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5688) returned 1 Thread: id = 769 os_tid = 0x1318 [0137.249] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\jn_wsnohv6t3wlq-6vj8.mp4")) returned 0x20 [0137.250] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4", dwFileAttributes=0x20) returned 1 [0137.250] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\jn_wsnohv6t3wlq-6vj8.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc3c [0137.250] GetFileSizeEx (in: hFile=0xc3c, lpFileSize=0xab0fc28 | out: lpFileSize=0xab0fc28*=24004) returned 1 [0137.250] SetFilePointerEx (in: hFile=0xc3c, liDistanceToMove=0x5dc0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.250] ReadFile (in: hFile=0xc3c, lpBuffer=0xab0fc34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xab0fc10, lpOverlapped=0x0 | out: lpBuffer=0xab0fc34*, lpNumberOfBytesRead=0xab0fc10*=0x4, lpOverlapped=0x0) returned 1 [0137.252] SetFilePointerEx (in: hFile=0xc3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0137.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0137.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0137.252] NtQuerySystemTime (in: CurrentTime=0xab0fbb0 | out: CurrentTime=0xab0fbb0*=132471540059412000) returned 0x0 [0137.252] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x5f8b221c [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x5d249b59 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x4158f77a [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x579b4730 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x76489d48 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x14be7d52 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x5c3d854c [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x8626e6a [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x7ae8b213 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0xbb5dea4 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x75b3c25 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x29648afd [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x275d4f15 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x1eb716aa [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x44b7a0fd [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x1f5c6b0 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x306e410a [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x50abfeda [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x450361c4 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x1afd219d [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x4a56c980 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x408135e0 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x3691eaf4 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x1fb73762 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x633b74de [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x6ad271e [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x2b16adf0 [0137.253] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x11ffeada [0137.254] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x720f8450 [0137.254] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x17f1c4bb [0137.254] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x1e607162 [0137.254] RtlRandomEx (in: Seed=0xab0fba8 | out: Seed=0xab0fba8) returned 0x7a358a87 [0137.263] SetFilePointerEx (in: hFile=0xc3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.264] ReadFile (in: hFile=0xc3c, lpBuffer=0x8297478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xab0fbb0, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0xab0fbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.264] SetFilePointerEx (in: hFile=0xc3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31850 [0137.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f328e0 [0137.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0137.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0137.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0137.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0137.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0137.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0137.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0137.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31850) returned 1 [0137.265] WriteFile (in: hFile=0xc3c, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xab0fbb0, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0xab0fbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0137.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0137.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3f31cd0 [0137.684] SetFilePointerEx (in: hFile=0xc3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.684] WriteFile (in: hFile=0xc3c, lpBuffer=0x3ef7ea0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xab0fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef7ea0*, lpNumberOfBytesWritten=0xab0fc1c*=0x122, lpOverlapped=0x0) returned 1 [0137.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7ea0) returned 1 [0137.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308e30) returned 1 [0137.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0137.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31cd0) returned 1 [0137.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0137.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0137.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4998) returned 1 [0137.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0137.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7378 [0137.792] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4" [0137.792] wcscat (in: _Dest=0x2c7378, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4.f0dbec" [0137.792] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4.f0dbec", NtPathName=0xab0fba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Jn_WSnohV6T3wlQ-6vJ8.mp4.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6180 [0137.947] FlushFileBuffers (hFile=0xc3c) returned 1 [0137.962] CloseHandle (hObject=0xc3c) returned 1 [0137.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f748 [0137.982] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0137.982] wcscat (in: _Dest=0x3f2f748, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" [0137.982] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\f0dbec-readme.txt")) returned 0x20 [0137.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 [0137.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bc60) returned 1 Thread: id = 770 os_tid = 0x131c [0137.267] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\pdp8.avi")) returned 0x20 [0137.267] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi", dwFileAttributes=0x20) returned 1 [0137.268] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\pdp8.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc38 [0137.268] GetFileSizeEx (in: hFile=0xc38, lpFileSize=0xd4af9a8 | out: lpFileSize=0xd4af9a8*=10455) returned 1 [0137.268] SetFilePointerEx (in: hFile=0xc38, liDistanceToMove=0x28d3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.268] ReadFile (in: hFile=0xc38, lpBuffer=0xd4af9b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd4af990, lpOverlapped=0x0 | out: lpBuffer=0xd4af9b4*, lpNumberOfBytesRead=0xd4af990*=0x4, lpOverlapped=0x0) returned 1 [0137.270] SetFilePointerEx (in: hFile=0xc38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0137.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49c0 [0137.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0137.270] NtQuerySystemTime (in: CurrentTime=0xd4af930 | out: CurrentTime=0xd4af930*=132471540059568000) returned 0x0 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x2d36583a [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x5676537a [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x1b13beb3 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x34b20163 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x4ff3b2c1 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x285e8ef4 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x183f6d09 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x5efd6eb1 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x16f8f9c3 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x2df5cc60 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x691ebe2b [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x60dd6e26 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x33e71447 [0137.270] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x37498055 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x14c16a47 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x76ea35fa [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x1f0bd462 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x5f85cf20 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x730c83a4 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x5a2514b5 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x2959f296 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x6f203172 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x5d1c81a [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x3e62eea1 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x698d8bd4 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x2cd5a37d [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0xae8b372 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x385fb227 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x73ca73b [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x683c4234 [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x43daddab [0137.271] RtlRandomEx (in: Seed=0xd4af928 | out: Seed=0xd4af928) returned 0x633fec98 [0137.281] ReadFile (in: hFile=0xc38, lpBuffer=0x82b54b8, nNumberOfBytesToRead=0x28d7, lpNumberOfBytesRead=0xd4af924, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesRead=0xd4af924*=0x28d7, lpOverlapped=0x0) returned 1 [0137.281] SetFilePointerEx (in: hFile=0xc38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.281] WriteFile (in: hFile=0xc38, lpBuffer=0x82b90c0*, nNumberOfBytesToWrite=0x28d7, lpNumberOfBytesWritten=0xd4af928, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesWritten=0xd4af928*=0x28d7, lpOverlapped=0x0) returned 1 [0137.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e58 [0137.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1748 [0137.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1748) returned 1 [0137.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0137.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0137.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0137.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31df0) returned 1 [0137.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1748 [0137.688] SetFilePointerEx (in: hFile=0xc38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.689] WriteFile (in: hFile=0xc38, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xd4af99c, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0xd4af99c*=0x102, lpOverlapped=0x0) returned 1 [0137.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0137.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11f8) returned 1 [0137.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3de0) returned 1 [0137.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1748) returned 1 [0137.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e58) returned 1 [0137.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49c0) returned 1 [0137.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0137.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0137.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6270 [0137.795] wcscpy (in: _Dest=0x3da6270, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi" [0137.795] wcscat (in: _Dest=0x3da6270, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi.f0dbec" [0137.795] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi.f0dbec", NtPathName=0xd4af920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\pDp8.avi.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2b1b0 [0137.944] FlushFileBuffers (hFile=0xc38) returned 1 [0137.959] CloseHandle (hObject=0xc38) returned 1 [0137.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f748 [0137.972] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0137.972] wcscat (in: _Dest=0x3f2f748, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" [0137.972] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\f0dbec-readme.txt")) returned 0x20 [0137.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 [0137.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b910) returned 1 Thread: id = 771 os_tid = 0x1320 [0137.288] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\wn l5_lfnt.mkv")) returned 0x20 [0137.288] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv", dwFileAttributes=0x20) returned 1 [0137.289] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\wn l5_lfnt.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdc8 [0137.289] GetFileSizeEx (in: hFile=0xdc8, lpFileSize=0xa06fc60 | out: lpFileSize=0xa06fc60*=66395) returned 1 [0137.289] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x10357, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.289] ReadFile (in: hFile=0xdc8, lpBuffer=0xa06fc6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa06fc48, lpOverlapped=0x0 | out: lpBuffer=0xa06fc6c*, lpNumberOfBytesRead=0xa06fc48*=0x4, lpOverlapped=0x0) returned 1 [0137.291] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0137.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0137.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0137.291] NtQuerySystemTime (in: CurrentTime=0xa06fbe8 | out: CurrentTime=0xa06fbe8*=132471540059724000) returned 0x0 [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x42c29a30 [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x7536085d [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x5af1efe5 [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x5ba37a5c [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0xa141611 [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x5f662fa2 [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x52181af3 [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x3225d1fd [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x4d1ba1f1 [0137.291] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x2805d19d [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x4a33d7de [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x4e51285a [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x1f099e5 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x4b112a59 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x21109359 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x1801614a [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x58fa80f3 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x357793bc [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x6f3446e5 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x2388341f [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x2239eaa2 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x7874c5b [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x79a81f90 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x5bc427dc [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x1eb2aeab [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x4fe7288c [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x6555bb69 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x3b8ee7d5 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x5d152da9 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x189c972a [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x2cef6641 [0137.292] RtlRandomEx (in: Seed=0xa06fbe0 | out: Seed=0xa06fbe0) returned 0x416bf199 [0137.302] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.302] ReadFile (in: hFile=0xdc8, lpBuffer=0x828fc68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa06fbe8, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesRead=0xa06fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.303] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83087b8 [0137.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0137.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0137.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0137.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0137.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0137.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0137.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0137.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0137.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83087b8) returned 1 [0137.304] WriteFile (in: hFile=0xdc8, lpBuffer=0x80d64d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa06fbe8, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesWritten=0xa06fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0137.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828fc68) returned 1 [0137.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7e20 [0137.691] SetFilePointerEx (in: hFile=0xdc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.692] WriteFile (in: hFile=0xdc8, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xa06fc54, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xa06fc54*=0x10e, lpOverlapped=0x0) returned 1 [0137.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0137.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8088) returned 1 [0137.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0137.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0137.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0137.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0137.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0137.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1428) returned 1 [0137.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35010 [0137.797] wcscpy (in: _Dest=0x3f35010, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv" [0137.797] wcscat (in: _Dest=0x3f35010, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv.f0dbec" [0137.797] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv.f0dbec", NtPathName=0xa06fbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\Wn L5_lFnT.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ae8 [0137.998] FlushFileBuffers (hFile=0xdc8) returned 1 [0138.001] CloseHandle (hObject=0xdc8) returned 1 [0138.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f748 [0138.002] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\" [0138.002] wcscat (in: _Dest=0x3f2f748, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" [0138.002] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\3nMVVV7rTGG5B\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\3nmvvv7rtgg5b\\f0dbec-readme.txt")) returned 0x20 [0138.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 [0138.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24640) returned 1 Thread: id = 772 os_tid = 0x1324 [0137.304] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\belkbgbc wtxkq8cpya.pdf")) returned 0x20 [0137.304] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf", dwFileAttributes=0x20) returned 1 [0137.305] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\belkbgbc wtxkq8cpya.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdfc [0137.305] GetFileSizeEx (in: hFile=0xdfc, lpFileSize=0xdd2fd40 | out: lpFileSize=0xdd2fd40*=85179) returned 1 [0137.305] SetFilePointerEx (in: hFile=0xdfc, liDistanceToMove=0x14cb7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.305] ReadFile (in: hFile=0xdfc, lpBuffer=0xdd2fd4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdd2fd28, lpOverlapped=0x0 | out: lpBuffer=0xdd2fd4c*, lpNumberOfBytesRead=0xdd2fd28*=0x4, lpOverlapped=0x0) returned 1 [0137.307] SetFilePointerEx (in: hFile=0xdfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0137.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef31d8 [0137.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2f58 [0137.307] NtQuerySystemTime (in: CurrentTime=0xdd2fcc8 | out: CurrentTime=0xdd2fcc8*=132471540059880000) returned 0x0 [0137.307] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x5e842a51 [0137.307] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x3f70a96d [0137.307] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x4861f558 [0137.307] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x722dc792 [0137.307] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x5c0268b0 [0137.307] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x522dcba9 [0137.307] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x7906701b [0137.307] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x1b1c5e23 [0137.307] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x2cb9ab8c [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x78c7f76f [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x4b7be6c6 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x1ddfe722 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x7257e040 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x75877572 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x5496f689 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x1bfa8813 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x49111c87 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x3ed8cf6a [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x444530da [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x2c25e75a [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x1cf112ae [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x44fd5ecc [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x7e4b2964 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x3149c5cd [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x1f45936f [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x42336929 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x309a0a33 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x2f9742b4 [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x4ac7558d [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0xd02ff6e [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x24484b2d [0137.308] RtlRandomEx (in: Seed=0xdd2fcc0 | out: Seed=0xdd2fcc0) returned 0x41e9527f [0137.318] SetFilePointerEx (in: hFile=0xdfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.318] ReadFile (in: hFile=0xdfc, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xdd2fcc8, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0xdd2fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.319] SetFilePointerEx (in: hFile=0xdfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83088d8 [0137.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0137.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0137.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0137.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0137.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0137.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2f58 [0137.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2f58) returned 1 [0137.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0137.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83088d8) returned 1 [0137.319] WriteFile (in: hFile=0xdfc, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xdd2fcc8, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0xdd2fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0137.694] SetFilePointerEx (in: hFile=0xdfc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.694] ReadFile (in: hFile=0xdfc, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xdd2fcc8, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0xdd2fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.695] SetFilePointerEx (in: hFile=0xdfc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31df0 [0137.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f328e0 [0137.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12c0 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12c0) returned 1 [0137.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0137.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12c0 [0137.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31df0) returned 1 [0137.695] WriteFile (in: hFile=0xdfc, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xdd2fcc8, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0xdd2fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0137.700] SetFilePointerEx (in: hFile=0xdfc, liDistanceToMove=0x110bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.700] ReadFile (in: hFile=0xdfc, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xdd2fcc8, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0xdd2fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.700] SetFilePointerEx (in: hFile=0xdfc, liDistanceToMove=0x110bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31df0 [0137.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f328e0 [0137.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1810 [0137.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1810) returned 1 [0137.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0137.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1810 [0137.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32a0 [0137.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32a0) returned 1 [0137.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0137.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31df0) returned 1 [0137.701] WriteFile (in: hFile=0xdfc, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xdd2fcc8, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0xdd2fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0137.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd8f0 [0137.708] SetFilePointerEx (in: hFile=0xdfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.708] WriteFile (in: hFile=0xdfc, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0xdd2fd34, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0xdd2fd34*=0x160, lpOverlapped=0x0) returned 1 [0137.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0137.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308e78) returned 1 [0137.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0137.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31df0) returned 1 [0137.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd8f0) returned 1 [0137.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef31d8) returned 1 [0137.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0137.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40b0) returned 1 [0137.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a830 [0137.800] wcscpy (in: _Dest=0x3e2a830, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf" [0137.800] wcscat (in: _Dest=0x3e2a830, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf.f0dbec" [0137.800] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf.f0dbec", NtPathName=0xdd2fcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\bElKBgBC wtXKQ8cPya.pdf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bf58 [0137.937] FlushFileBuffers (hFile=0xdfc) returned 1 [0137.959] CloseHandle (hObject=0xdfc) returned 1 [0137.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da66f0 [0137.970] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0137.970] wcscat (in: _Dest=0x3da66f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" [0137.970] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\f0dbec-readme.txt")) returned 0x20 [0137.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0137.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 773 os_tid = 0x1328 [0137.331] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\ldjd_kz.odt")) returned 0x20 [0137.331] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt", dwFileAttributes=0x20) returned 1 [0137.331] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\ldjd_kz.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc84 [0137.332] GetFileSizeEx (in: hFile=0xc84, lpFileSize=0xab4f8f0 | out: lpFileSize=0xab4f8f0*=30987) returned 1 [0137.332] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x7907, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.332] ReadFile (in: hFile=0xc84, lpBuffer=0xab4f8fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xab4f8d8, lpOverlapped=0x0 | out: lpBuffer=0xab4f8fc*, lpNumberOfBytesRead=0xab4f8d8*=0x4, lpOverlapped=0x0) returned 1 [0137.333] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2f58 [0137.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0137.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0137.334] NtQuerySystemTime (in: CurrentTime=0xab4f878 | out: CurrentTime=0xab4f878*=132471540060192000) returned 0x0 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x1e3598a2 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x3a8159f5 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x1bd6a0af [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x7861fb91 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x5cb80763 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x603b445b [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x60861d99 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x55535eba [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x122e45e4 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x6da7c953 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x751e81e4 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x4b8a551e [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x18a6d29b [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x6b7f294b [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x7482c9d4 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x3d544df5 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x7ae6e153 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x61f29b64 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x57ad26c6 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x4a967290 [0137.334] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x17fd61b9 [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x2c0e26f5 [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0xdfa83b8 [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x3ea16610 [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x4ad9b997 [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x131c1f02 [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x5ccbfe3b [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x5fa9160b [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x7d4a357 [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0xa88f2d9 [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x641f0aa7 [0137.335] RtlRandomEx (in: Seed=0xab4f870 | out: Seed=0xab4f870) returned 0x50754423 [0137.361] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.361] ReadFile (in: hFile=0xc84, lpBuffer=0x80c74b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xab4f878, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesRead=0xab4f878*=0x3c00, lpOverlapped=0x0) returned 1 [0137.361] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308848 [0137.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0137.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2f58 [0137.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2f58) returned 1 [0137.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0137.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2f58 [0137.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0137.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0137.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0137.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308848) returned 1 [0137.362] WriteFile (in: hFile=0xc84, lpBuffer=0x80a5870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xab4f878, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesWritten=0xab4f878*=0x3c00, lpOverlapped=0x0) returned 1 [0137.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0137.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0137.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e6f3a8 [0137.699] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.699] WriteFile (in: hFile=0xc84, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xab4f8e4, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xab4f8e4*=0x108, lpOverlapped=0x0) returned 1 [0137.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0137.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa08) returned 1 [0137.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0137.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f3a8) returned 1 [0137.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2f58) returned 1 [0137.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0137.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef45d8) returned 1 [0137.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0137.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3daf108 [0137.798] wcscpy (in: _Dest=0x3daf108, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt" [0137.798] wcscat (in: _Dest=0x3daf108, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt.f0dbec" [0137.798] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt.f0dbec", NtPathName=0xab4f868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\ldjD_KZ.odt.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2ac58 [0137.875] FlushFileBuffers (hFile=0xc84) returned 1 [0137.876] CloseHandle (hObject=0xc84) returned 1 [0137.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3daf108 [0137.882] wcscpy (in: _Dest=0x3daf108, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0137.882] wcscat (in: _Dest=0x3daf108, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" [0137.882] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\f0dbec-readme.txt")) returned 0xffffffff [0137.882] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x102c [0137.884] WriteFile (in: hFile=0x102c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xab4f88c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xab4f88c*=0x70c, lpOverlapped=0x0) returned 1 [0137.889] CloseHandle (hObject=0x102c) returned 1 [0137.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf108) returned 1 [0137.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a1f8) returned 1 Thread: id = 774 os_tid = 0x132c [0137.363] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\pii2rlggavruwasl.odt")) returned 0x20 [0137.363] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt", dwFileAttributes=0x20) returned 1 [0137.363] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\pii2rlggavruwasl.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc78 [0137.364] GetFileSizeEx (in: hFile=0xc78, lpFileSize=0x85afc18 | out: lpFileSize=0x85afc18*=99902) returned 1 [0137.365] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x1863a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.365] ReadFile (in: hFile=0xc78, lpBuffer=0x85afc24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x85afc00, lpOverlapped=0x0 | out: lpBuffer=0x85afc24*, lpNumberOfBytesRead=0x85afc00*=0x4, lpOverlapped=0x0) returned 1 [0137.366] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0137.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0137.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4038 [0137.367] NtQuerySystemTime (in: CurrentTime=0x85afba0 | out: CurrentTime=0x85afba0*=132471540060504000) returned 0x0 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x666902f8 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x91c4f81 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x2ea8b59a [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0xf5e9892 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x59ade50 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x39f31a2e [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0xd72151d [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x3e5711aa [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x2e0a298d [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x1f6459c1 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x6c5591 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x1ce77557 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x4f225421 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x211ba87d [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x27340d3a [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x724eb55b [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x2e53039a [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x24427754 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x68c13890 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x1eb622e2 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x75d13ff7 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x627e700a [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x33229066 [0137.367] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0xb69e03a [0137.368] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x1d8a35a2 [0137.368] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x6c483a5b [0137.368] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x5f6b870d [0137.368] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x601b19fc [0137.368] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0xc35323f [0137.368] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x61bf25e0 [0137.368] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x76773f4d [0137.368] RtlRandomEx (in: Seed=0x85afb98 | out: Seed=0x85afb98) returned 0x7d6867ac [0137.377] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.377] ReadFile (in: hFile=0xc78, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85afba0, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0x85afba0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.377] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308800 [0137.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0137.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0137.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0137.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0137.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0137.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4038 [0137.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4038) returned 1 [0137.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0137.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308800) returned 1 [0137.378] WriteFile (in: hFile=0xc78, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85afba0, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x85afba0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0137.706] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.706] ReadFile (in: hFile=0xc78, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85afba0, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0x85afba0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.706] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31df0 [0137.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f328e0 [0137.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32a0 [0137.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32a0) returned 1 [0137.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0137.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32a0 [0137.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0137.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0137.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0137.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31df0) returned 1 [0137.707] WriteFile (in: hFile=0xc78, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85afba0, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x85afba0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0137.712] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x14a3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.712] ReadFile (in: hFile=0xc78, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85afba0, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0x85afba0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.712] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x14a3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308ec0 [0137.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f328e0 [0137.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1810 [0137.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1810) returned 1 [0137.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0137.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1810 [0137.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0137.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0137.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0137.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308ec0) returned 1 [0137.713] WriteFile (in: hFile=0xc78, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85afba0, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x85afba0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0137.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdb60 [0137.719] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.719] WriteFile (in: hFile=0xc78, lpBuffer=0x3dcd898*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x85afc0c, lpOverlapped=0x0 | out: lpBuffer=0x3dcd898*, lpNumberOfBytesWritten=0x85afc0c*=0x15a, lpOverlapped=0x0) returned 1 [0137.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd898) returned 1 [0137.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f376d8) returned 1 [0137.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0137.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37558) returned 1 [0137.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdb60) returned 1 [0137.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4560) returned 1 [0137.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4010) returned 1 [0137.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0137.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35640 [0137.802] wcscpy (in: _Dest=0x3f35640, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt" [0137.802] wcscat (in: _Dest=0x3f35640, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt.f0dbec" [0137.802] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt.f0dbec", NtPathName=0x85afb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\pII2rlGGaVRUWasL.odt.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186b90 [0137.955] FlushFileBuffers (hFile=0xc78) returned 1 [0137.963] CloseHandle (hObject=0xc78) returned 1 [0137.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5688 [0137.989] wcscpy (in: _Dest=0x3dc5688, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0137.989] wcscat (in: _Dest=0x3dc5688, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" [0137.989] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\f0dbec-readme.txt")) returned 0x20 [0137.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5688) returned 1 [0137.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24240) returned 1 Thread: id = 775 os_tid = 0x1330 [0137.379] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\rc9oytb frwlsh4ji.docx")) returned 0x20 [0137.379] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx", dwFileAttributes=0x20) returned 1 [0137.380] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\rc9oytb frwlsh4ji.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe1c [0137.380] GetFileSizeEx (in: hFile=0xe1c, lpFileSize=0xde2fd70 | out: lpFileSize=0xde2fd70*=53294) returned 1 [0137.380] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0xd02a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.380] ReadFile (in: hFile=0xe1c, lpBuffer=0xde2fd7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xde2fd58, lpOverlapped=0x0 | out: lpBuffer=0xde2fd7c*, lpNumberOfBytesRead=0xde2fd58*=0x4, lpOverlapped=0x0) returned 1 [0137.382] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4038 [0137.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0137.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4628 [0137.382] NtQuerySystemTime (in: CurrentTime=0xde2fcf8 | out: CurrentTime=0xde2fcf8*=132471540060660000) returned 0x0 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x1cd4f9c2 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x366306e8 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x30128481 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x4e5dc156 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x6f961566 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x3cb0f31b [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x71e17e87 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x1de0c1c7 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0xcf047f8 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0xd85db5a [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x67014283 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x44dc9ae4 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x6ef0e042 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x60a27a80 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x26adc099 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x6cb6c69 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x6641bf5b [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x2d09836c [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x66325fc1 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x5ff8d253 [0137.382] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x31569e65 [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x572acf2b [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x4416f161 [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x3a4e1aa2 [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x38233ae9 [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x763054c0 [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x73e7c601 [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x27727e88 [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x434913d3 [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x461c72f0 [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x77ddc8ae [0137.383] RtlRandomEx (in: Seed=0xde2fcf0 | out: Seed=0xde2fcf0) returned 0x710f186e [0137.392] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.392] ReadFile (in: hFile=0xe1c, lpBuffer=0x80b8498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xde2fcf8, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesRead=0xde2fcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.393] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308770 [0137.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0137.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4038 [0137.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4038) returned 1 [0137.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0137.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4038 [0137.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4628 [0137.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4628) returned 1 [0137.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0137.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308770) returned 1 [0137.393] WriteFile (in: hFile=0xe1c, lpBuffer=0x80cb0c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xde2fcf8, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesWritten=0xde2fcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0137.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0137.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x8308de8 [0137.711] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.711] WriteFile (in: hFile=0xe1c, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xde2fd64, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0xde2fd64*=0x11e, lpOverlapped=0x0) returned 1 [0137.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0137.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f08) returned 1 [0137.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12c0) returned 1 [0137.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308de8) returned 1 [0137.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4038) returned 1 [0137.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0137.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fc0) returned 1 [0137.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0137.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2af50 [0137.801] wcscpy (in: _Dest=0x3e2af50, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx" [0137.801] wcscat (in: _Dest=0x3e2af50, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx.f0dbec" [0137.801] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx.f0dbec", NtPathName=0xde2fce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\Rc9OYtb frWLsH4ji.docx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186d88 [0137.936] FlushFileBuffers (hFile=0xe1c) returned 1 [0137.959] CloseHandle (hObject=0xe1c) returned 1 [0137.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da66f0 [0137.968] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0137.968] wcscat (in: _Dest=0x3da66f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" [0137.968] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\f0dbec-readme.txt")) returned 0x20 [0137.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0137.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fa78) returned 1 Thread: id = 776 os_tid = 0x1334 [0137.394] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\rfibo.pdf")) returned 0x20 [0137.394] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf", dwFileAttributes=0x20) returned 1 [0137.394] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\rfibo.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc8c [0137.394] GetFileSizeEx (in: hFile=0xc8c, lpFileSize=0x9d9fcb0 | out: lpFileSize=0x9d9fcb0*=101253) returned 1 [0137.394] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x18b81, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.395] ReadFile (in: hFile=0xc8c, lpBuffer=0x9d9fcbc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d9fc98, lpOverlapped=0x0 | out: lpBuffer=0x9d9fcbc*, lpNumberOfBytesRead=0x9d9fc98*=0x4, lpOverlapped=0x0) returned 1 [0137.396] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4628 [0137.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0137.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0137.397] NtQuerySystemTime (in: CurrentTime=0x9d9fc38 | out: CurrentTime=0x9d9fc38*=132471540060816000) returned 0x0 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x226a0595 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0xe2f14e7 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x68dbd89c [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x5fbd10a6 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x4ecdcecb [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x71a07c4c [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x2b9d8c49 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x3e29bee9 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x1a33a2b6 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x2fa10382 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x502f20be [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x4b02881b [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x4bd13858 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x7ba5753e [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x770caf83 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x152b4827 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x6c757f0f [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x6eec229b [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0xc8b4936 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0xa591e [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x208ac4bd [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x7f45bba7 [0137.397] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x148b9b45 [0137.398] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x47c874fc [0137.398] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x3dfbfbcf [0137.398] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x3bd53150 [0137.398] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x53e81464 [0137.398] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x747e17c1 [0137.398] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x631a9da [0137.398] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x44b4d40a [0137.398] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x5cafb25c [0137.398] RtlRandomEx (in: Seed=0x9d9fc30 | out: Seed=0x9d9fc30) returned 0x15366bf4 [0137.407] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.408] ReadFile (in: hFile=0xc8c, lpBuffer=0x809a458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9d9fc38, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0x9d9fc38*=0x3c00, lpOverlapped=0x0) returned 1 [0137.408] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308890 [0137.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0137.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4628 [0137.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4628) returned 1 [0137.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c38b0 [0137.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4628 [0137.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0137.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0137.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0137.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308890) returned 1 [0137.409] WriteFile (in: hFile=0xc8c, lpBuffer=0x80c38b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9d9fc38, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesWritten=0x9d9fc38*=0x3c00, lpOverlapped=0x0) returned 1 [0137.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0137.716] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.716] ReadFile (in: hFile=0xc8c, lpBuffer=0x809a458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9d9fc38, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0x9d9fc38*=0x3c00, lpOverlapped=0x0) returned 1 [0137.716] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308ec0 [0137.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f328e0 [0137.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0137.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0137.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c38b0 [0137.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0137.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0137.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0137.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0137.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308ec0) returned 1 [0137.717] WriteFile (in: hFile=0xc8c, lpBuffer=0x80c38b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9d9fc38, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesWritten=0x9d9fc38*=0x3c00, lpOverlapped=0x0) returned 1 [0137.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0137.721] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x14f85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.721] ReadFile (in: hFile=0xc8c, lpBuffer=0x809a458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9d9fc38, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0x9d9fc38*=0x3c00, lpOverlapped=0x0) returned 1 [0137.721] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x14f85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308ec0 [0137.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f328e0 [0137.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32a0 [0137.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32a0) returned 1 [0137.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c38b0 [0137.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32a0 [0137.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1810 [0137.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1810) returned 1 [0137.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0137.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308ec0) returned 1 [0137.722] WriteFile (in: hFile=0xc8c, lpBuffer=0x80c38b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9d9fc38, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesWritten=0x9d9fc38*=0x3c00, lpOverlapped=0x0) returned 1 [0137.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0137.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdaf8 [0137.727] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.727] WriteFile (in: hFile=0xc8c, lpBuffer=0x3e16ce0*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x9d9fca4, lpOverlapped=0x0 | out: lpBuffer=0x3e16ce0*, lpNumberOfBytesWritten=0x9d9fca4*=0x144, lpOverlapped=0x0) returned 1 [0137.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0137.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0137.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32a0) returned 1 [0137.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4628) returned 1 [0137.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdaf8) returned 1 [0137.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0137.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0137.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0137.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68ab0 [0137.805] wcscpy (in: _Dest=0x3e68ab0, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf" [0137.806] wcscat (in: _Dest=0x3e68ab0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf.f0dbec" [0137.806] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf.f0dbec", NtPathName=0x9d9fc28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\rFibO.pdf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f355b0 [0137.977] FlushFileBuffers (hFile=0xc8c) returned 1 [0137.979] CloseHandle (hObject=0xc8c) returned 1 [0137.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24240 [0137.993] wcscpy (in: _Dest=0x3e24240, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\" [0137.993] wcscat (in: _Dest=0x3e24240, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" [0137.993] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\f0dbec-readme.txt")) returned 0x20 [0137.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24240) returned 1 [0137.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054b60) returned 1 Thread: id = 777 os_tid = 0x1338 [0137.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c128 [0137.409] wcscpy (in: _Dest=0x3d8c128, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" [0137.409] wcscat (in: _Dest=0x3d8c128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0137.409] wcscat (in: _Dest=0x3d8c128, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\*") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\*" [0137.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047640 [0137.409] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\*", lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6ae9d0, ftCreationTime.dwHighDateTime=0x1d5e110, ftLastAccessTime.dwLowDateTime=0x349927e0, ftLastAccessTime.dwHighDateTime=0x1d5e022, ftLastWriteTime.dwLowDateTime=0x349927e0, ftLastWriteTime.dwHighDateTime=0x1d5e022, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd00d0 [0137.410] wcscmp (_String1=".", _String2=".") returned 0 [0137.410] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6ae9d0, ftCreationTime.dwHighDateTime=0x1d5e110, ftLastAccessTime.dwLowDateTime=0x349927e0, ftLastAccessTime.dwHighDateTime=0x1d5e022, ftLastWriteTime.dwLowDateTime=0x349927e0, ftLastWriteTime.dwHighDateTime=0x1d5e022, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.410] wcscmp (_String1="..", _String2=".") returned 1 [0137.410] wcscmp (_String1="..", _String2="..") returned 0 [0137.410] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13e85c50, ftCreationTime.dwHighDateTime=0x1d5de51, ftLastAccessTime.dwLowDateTime=0x50542a90, ftLastAccessTime.dwHighDateTime=0x1d5d972, ftLastWriteTime.dwLowDateTime=0x50542a90, ftLastWriteTime.dwHighDateTime=0x1d5d972, nFileSizeHigh=0x0, nFileSizeLow=0x1390f, dwReserved0=0x0, dwReserved1=0x0, cFileName="gbwW VYW3X.pdf", cAlternateFileName="GBWWVY~1.PDF")) returned 1 [0137.410] wcscmp (_String1="gbwW VYW3X.pdf", _String2=".") returned 1 [0137.410] wcscmp (_String1="gbwW VYW3X.pdf", _String2="..") returned 1 [0137.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5bf0 [0137.410] wcscpy (in: _Dest=0x3da5bf0, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" [0137.410] wcscat (in: _Dest=0x3da5bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0137.410] wcscat (in: _Dest=0x3da5bf0, _Source="gbwW VYW3X.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf" [0144.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3da5bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0144.417] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4e0ef00, ftCreationTime.dwHighDateTime=0x1d5df26, ftLastAccessTime.dwLowDateTime=0x7c50e5b0, ftLastAccessTime.dwHighDateTime=0x1d5e346, ftLastWriteTime.dwLowDateTime=0x7c50e5b0, ftLastWriteTime.dwHighDateTime=0x1d5e346, nFileSizeHigh=0x0, nFileSizeLow=0x7be3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HCC4uI6p.xlsx", cAlternateFileName="HCC4UI~1.XLS")) returned 1 [0144.418] wcscmp (_String1="HCC4uI6p.xlsx", _String2=".") returned 1 [0144.418] wcscmp (_String1="HCC4uI6p.xlsx", _String2="..") returned 1 [0144.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e241c0 [0144.418] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" [0144.418] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0144.418] wcscat (in: _Dest=0x3e241c0, _Source="HCC4uI6p.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx" [0144.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e241c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0144.419] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0023c0, ftCreationTime.dwHighDateTime=0x1d5e339, ftLastAccessTime.dwLowDateTime=0x5f5b6d90, ftLastAccessTime.dwHighDateTime=0x1d5e2ab, ftLastWriteTime.dwLowDateTime=0x5f5b6d90, ftLastWriteTime.dwHighDateTime=0x1d5e2ab, nFileSizeHigh=0x0, nFileSizeLow=0x10004, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9SrrFVswnCiuHXMDOFi.pdf", cAlternateFileName="S9SRRF~1.PDF")) returned 1 [0144.419] wcscmp (_String1="s9SrrFVswnCiuHXMDOFi.pdf", _String2=".") returned 1 [0144.419] wcscmp (_String1="s9SrrFVswnCiuHXMDOFi.pdf", _String2="..") returned 1 [0144.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bea8 [0144.419] wcscpy (in: _Dest=0x32bea8, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" [0144.419] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0144.419] wcscat (in: _Dest=0x32bea8, _Source="s9SrrFVswnCiuHXMDOFi.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf" [0144.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0144.420] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e285240, ftCreationTime.dwHighDateTime=0x1d5e328, ftLastAccessTime.dwLowDateTime=0xf8907e90, ftLastAccessTime.dwHighDateTime=0x1d5e40b, ftLastWriteTime.dwLowDateTime=0xf8907e90, ftLastWriteTime.dwHighDateTime=0x1d5e40b, nFileSizeHigh=0x0, nFileSizeLow=0x101ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="sucQYs-9XpEnl8afn8cm.rtf", cAlternateFileName="SUCQYS~1.RTF")) returned 1 [0144.420] wcscmp (_String1="sucQYs-9XpEnl8afn8cm.rtf", _String2=".") returned 1 [0144.420] wcscmp (_String1="sucQYs-9XpEnl8afn8cm.rtf", _String2="..") returned 1 [0144.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0144.420] wcscpy (in: _Dest=0x32b820, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" [0144.421] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0144.421] wcscat (in: _Dest=0x32b820, _Source="sucQYs-9XpEnl8afn8cm.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf" [0144.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0144.422] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecbd70, ftCreationTime.dwHighDateTime=0x1d5e6f9, ftLastAccessTime.dwLowDateTime=0x7a6ff790, ftLastAccessTime.dwHighDateTime=0x1d5e6f2, ftLastWriteTime.dwLowDateTime=0x7a6ff790, ftLastWriteTime.dwHighDateTime=0x1d5e6f2, nFileSizeHigh=0x0, nFileSizeLow=0xfe77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wc25r8KJqgu0druc9 H.odt", cAlternateFileName="WC25R8~1.ODT")) returned 1 [0144.422] wcscmp (_String1="Wc25r8KJqgu0druc9 H.odt", _String2=".") returned 1 [0144.422] wcscmp (_String1="Wc25r8KJqgu0druc9 H.odt", _String2="..") returned 1 [0144.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d668 [0144.422] wcscpy (in: _Dest=0x32d668, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX" [0144.422] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0144.422] wcscat (in: _Dest=0x32d668, _Source="Wc25r8KJqgu0druc9 H.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt" [0144.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0144.423] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecbd70, ftCreationTime.dwHighDateTime=0x1d5e6f9, ftLastAccessTime.dwLowDateTime=0x7a6ff790, ftLastAccessTime.dwHighDateTime=0x1d5e6f2, ftLastWriteTime.dwLowDateTime=0x7a6ff790, ftLastWriteTime.dwHighDateTime=0x1d5e6f2, nFileSizeHigh=0x0, nFileSizeLow=0xfe77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wc25r8KJqgu0druc9 H.odt", cAlternateFileName="WC25R8~1.ODT")) returned 0 [0144.423] FindClose (in: hFindFile=0x3dd00d0 | out: hFindFile=0x3dd00d0) returned 1 [0144.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047640) returned 1 [0144.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c128) returned 1 [0144.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd000) returned 1 Thread: id = 778 os_tid = 0x133c [0137.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3dc6168 [0137.411] wcscpy (in: _Dest=0x3dc6168, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0" [0137.411] wcscat (in: _Dest=0x3dc6168, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\" [0137.411] wcscat (in: _Dest=0x3dc6168, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*" [0137.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80473d8 [0137.411] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0137.411] wcscmp (_String1=".", _String2=".") returned 0 [0137.411] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.411] wcscmp (_String1="..", _String2=".") returned 1 [0137.412] wcscmp (_String1="..", _String2="..") returned 0 [0137.412] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0137.412] wcscmp (_String1="Replicate", _String2=".") returned 1 [0137.412] wcscmp (_String1="Replicate", _String2="..") returned 1 [0137.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe4a48 [0137.412] wcscpy (in: _Dest=0x2fe4a48, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0" [0137.412] wcscat (in: _Dest=0x2fe4a48, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\" [0137.412] wcscat (in: _Dest=0x2fe4a48, _Source="Replicate" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" [0139.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe4a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0139.604] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0139.604] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0139.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80473d8) returned 1 [0139.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6168) returned 1 [0139.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc65c8) returned 1 Thread: id = 779 os_tid = 0x1340 [0137.412] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms")) returned 0x20 [0137.413] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", dwFileAttributes=0x20) returned 1 [0137.413] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe60 [0137.413] GetFileSizeEx (in: hFile=0xe60, lpFileSize=0xc59fec0 | out: lpFileSize=0xc59fec0*=876) returned 1 [0137.413] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.413] ReadFile (in: hFile=0xe60, lpBuffer=0xc59fecc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc59fea8, lpOverlapped=0x0 | out: lpBuffer=0xc59fecc*, lpNumberOfBytesRead=0xc59fea8*=0x4, lpOverlapped=0x0) returned 1 [0137.624] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0137.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0137.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0137.625] NtQuerySystemTime (in: CurrentTime=0xc59fe48 | out: CurrentTime=0xc59fe48*=132471540063156000) returned 0x0 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x49b415cd [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x56ab94d1 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x35ea0e13 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x7d2de7ec [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x5e4f16a4 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x6db318f0 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x7d54c2ca [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x42342964 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x190fb7dd [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x21f5ae49 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x1e0abfe2 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x3256d886 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x53fe88e5 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x490c6247 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x6e198be8 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x56ab8684 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x7af91689 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x3b019c8f [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x300a4d7e [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x45cc6196 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x4d0a17ed [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x5c97bc46 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x1adca9a2 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x4bb0a907 [0137.625] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x5de0c993 [0137.626] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x1ac1003e [0137.626] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x21d98a9 [0137.626] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x2b7425c [0137.626] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0xf3a4f4d [0137.626] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x5e50f081 [0137.626] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x7235b53 [0137.626] RtlRandomEx (in: Seed=0xc59fe40 | out: Seed=0xc59fe40) returned 0x42edabdd [0137.638] ReadFile (in: hFile=0xe60, lpBuffer=0x82718b0, nNumberOfBytesToRead=0x36c, lpNumberOfBytesRead=0xc59fe3c, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesRead=0xc59fe3c*=0x36c, lpOverlapped=0x0) returned 1 [0137.638] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.638] WriteFile (in: hFile=0xe60, lpBuffer=0x82754b8*, nNumberOfBytesToWrite=0x36c, lpNumberOfBytesWritten=0xc59fe40, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesWritten=0xc59fe40*=0x36c, lpOverlapped=0x0) returned 1 [0137.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0137.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0137.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0137.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0137.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0137.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c108) returned 1 [0137.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308da0) returned 1 [0137.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f37818 [0137.924] SetFilePointerEx (in: hFile=0xe60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.924] WriteFile (in: hFile=0xe60, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xc59feb4, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0xc59feb4*=0x11c, lpOverlapped=0x0) returned 1 [0137.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0137.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37f18) returned 1 [0137.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0137.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37818) returned 1 [0137.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0137.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0137.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0137.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0137.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32d90 [0137.966] wcscpy (in: _Dest=0x3f32d90, _Source="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" [0137.966] wcscat (in: _Dest=0x3f32d90, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.f0dbec") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.f0dbec" [0137.966] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.f0dbec", NtPathName=0xc59fe38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35880 [0138.001] FlushFileBuffers (hFile=0xe60) returned 1 [0138.004] CloseHandle (hObject=0xe60) returned 1 [0138.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bd80 [0138.006] wcscpy (in: _Dest=0x3d8bd80, _Source="C:\\Users\\Public\\Libraries\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\" [0138.006] wcscat (in: _Dest=0x3d8bd80, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Libraries\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Libraries\\F0DBEC-Readme.txt" [0138.006] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\libraries\\f0dbec-readme.txt")) returned 0xffffffff [0138.006] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\libraries\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe60 [0138.014] WriteFile (in: hFile=0xe60, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc59fe5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc59fe5c*=0x70c, lpOverlapped=0x0) returned 1 [0138.016] CloseHandle (hObject=0xe60) returned 1 [0138.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd80) returned 1 [0138.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 Thread: id = 780 os_tid = 0x1344 [0137.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39b68 [0137.419] wcscpy (in: _Dest=0x3f39b68, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0137.419] wcscat (in: _Dest=0x3f39b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0137.419] wcscat (in: _Dest=0x3f39b68, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*" [0137.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090210 [0137.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a48 [0139.206] wcscmp (_String1=".", _String2=".") returned 0 [0139.206] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.206] wcscmp (_String1="..", _String2=".") returned 1 [0139.206] wcscmp (_String1="..", _String2="..") returned 0 [0139.206] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1 [0139.206] wcscmp (_String1="CURRENCY.GIF", _String2=".") returned 1 [0139.207] wcscmp (_String1="CURRENCY.GIF", _String2="..") returned 1 [0139.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f638 [0139.207] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0139.207] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0139.207] wcscat (in: _Dest=0x3f2f638, _Source="CURRENCY.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" [0144.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0144.185] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbd4800, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8cbd4800, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.HTM", cAlternateFileName="")) returned 1 [0144.186] wcscmp (_String1="CURRENCY.HTM", _String2=".") returned 1 [0144.186] wcscmp (_String1="CURRENCY.HTM", _String2="..") returned 1 [0144.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053c10 [0144.186] wcscpy (in: _Dest=0x8053c10, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.186] wcscat (in: _Dest=0x8053c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.186] wcscat (in: _Dest=0x8053c10, _Source="CURRENCY.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" [0144.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0144.187] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.GIF", cAlternateFileName="")) returned 1 [0144.187] wcscmp (_String1="DADSHIRT.GIF", _String2=".") returned 1 [0144.187] wcscmp (_String1="DADSHIRT.GIF", _String2="..") returned 1 [0144.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053b88 [0144.187] wcscpy (in: _Dest=0x8053b88, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.187] wcscat (in: _Dest=0x8053b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.187] wcscat (in: _Dest=0x8053b88, _Source="DADSHIRT.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" [0144.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0144.188] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4f6100, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf4f6100, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.HTM", cAlternateFileName="")) returned 1 [0144.189] wcscmp (_String1="DADSHIRT.HTM", _String2=".") returned 1 [0144.189] wcscmp (_String1="DADSHIRT.HTM", _String2="..") returned 1 [0144.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053a78 [0144.189] wcscpy (in: _Dest=0x8053a78, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.189] wcscat (in: _Dest=0x8053a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.189] wcscat (in: _Dest=0x8053a78, _Source="DADSHIRT.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" [0144.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0144.190] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda4a900, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdda4a900, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0xd36, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.GIF", cAlternateFileName="")) returned 1 [0144.190] wcscmp (_String1="JUDGESCH.GIF", _String2=".") returned 1 [0144.190] wcscmp (_String1="JUDGESCH.GIF", _String2="..") returned 1 [0144.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x80539f0 [0144.191] wcscpy (in: _Dest=0x80539f0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.191] wcscat (in: _Dest=0x80539f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.191] wcscat (in: _Dest=0x80539f0, _Source="JUDGESCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" [0144.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80539f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0144.192] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8581200, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8581200, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.HTM", cAlternateFileName="")) returned 1 [0144.192] wcscmp (_String1="JUDGESCH.HTM", _String2=".") returned 1 [0144.192] wcscmp (_String1="JUDGESCH.HTM", _String2="..") returned 1 [0144.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053968 [0144.192] wcscpy (in: _Dest=0x8053968, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.192] wcscat (in: _Dest=0x8053968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.192] wcscat (in: _Dest=0x8053968, _Source="JUDGESCH.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" [0144.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0144.193] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded5d600, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded5d600, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.GIF", cAlternateFileName="")) returned 1 [0144.193] wcscmp (_String1="JUNGLE.GIF", _String2=".") returned 1 [0144.193] wcscmp (_String1="JUNGLE.GIF", _String2="..") returned 1 [0144.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x80538e0 [0144.193] wcscpy (in: _Dest=0x80538e0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.194] wcscat (in: _Dest=0x80538e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.194] wcscat (in: _Dest=0x80538e0, _Source="JUNGLE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" [0144.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80538e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0144.195] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddcd3c00, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddcd3c00, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.HTM", cAlternateFileName="")) returned 1 [0144.195] wcscmp (_String1="JUNGLE.HTM", _String2=".") returned 1 [0144.195] wcscmp (_String1="JUNGLE.HTM", _String2="..") returned 1 [0144.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053858 [0144.195] wcscpy (in: _Dest=0x8053858, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.195] wcscat (in: _Dest=0x8053858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.195] wcscat (in: _Dest=0x8053858, _Source="JUNGLE.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" [0144.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0144.197] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13722500, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x13722500, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.HTM", cAlternateFileName="")) returned 1 [0144.197] wcscmp (_String1="NOTEBOOK.HTM", _String2=".") returned 1 [0144.197] wcscmp (_String1="NOTEBOOK.HTM", _String2="..") returned 1 [0144.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x80537d0 [0144.197] wcscpy (in: _Dest=0x80537d0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.197] wcscat (in: _Dest=0x80537d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.197] wcscat (in: _Dest=0x80537d0, _Source="NOTEBOOK.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" [0144.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80537d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0144.198] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0070300, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0070300, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.JPG", cAlternateFileName="")) returned 1 [0144.198] wcscmp (_String1="NOTEBOOK.JPG", _String2=".") returned 1 [0144.198] wcscmp (_String1="NOTEBOOK.JPG", _String2="..") returned 1 [0144.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053748 [0144.198] wcscpy (in: _Dest=0x8053748, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.198] wcscat (in: _Dest=0x8053748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.198] wcscat (in: _Dest=0x8053748, _Source="NOTEBOOK.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" [0144.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0144.199] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0070300, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0070300, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x1202, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.GIF", cAlternateFileName="")) returned 1 [0144.200] wcscmp (_String1="OFFISUPP.GIF", _String2=".") returned 1 [0144.200] wcscmp (_String1="OFFISUPP.GIF", _String2="..") returned 1 [0144.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x80536c0 [0144.200] wcscpy (in: _Dest=0x80536c0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.200] wcscat (in: _Dest=0x80536c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.200] wcscat (in: _Dest=0x80536c0, _Source="OFFISUPP.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" [0144.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80536c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0144.201] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38669800, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x38669800, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.HTM", cAlternateFileName="")) returned 1 [0144.201] wcscmp (_String1="OFFISUPP.HTM", _String2=".") returned 1 [0144.201] wcscmp (_String1="OFFISUPP.HTM", _String2="..") returned 1 [0144.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053638 [0144.201] wcscpy (in: _Dest=0x8053638, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.201] wcscat (in: _Dest=0x8053638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.201] wcscat (in: _Dest=0x8053638, _Source="OFFISUPP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" [0144.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0144.202] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e1e800, ftCreationTime.dwHighDateTime=0x1bdaf42, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x93e1e800, ftLastWriteTime.dwHighDateTime=0x1bdaf42, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.GIF", cAlternateFileName="")) returned 1 [0144.202] wcscmp (_String1="PAWPRINT.GIF", _String2=".") returned 1 [0144.203] wcscmp (_String1="PAWPRINT.GIF", _String2="..") returned 1 [0144.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053528 [0144.203] wcscpy (in: _Dest=0x8053528, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.203] wcscat (in: _Dest=0x8053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.203] wcscat (in: _Dest=0x8053528, _Source="PAWPRINT.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" [0144.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0144.204] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x516f4900, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x516f4900, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.HTM", cAlternateFileName="")) returned 1 [0144.204] wcscmp (_String1="PAWPRINT.HTM", _String2=".") returned 1 [0144.204] wcscmp (_String1="PAWPRINT.HTM", _String2="..") returned 1 [0144.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x80535b0 [0144.204] wcscpy (in: _Dest=0x80535b0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.204] wcscat (in: _Dest=0x80535b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.204] wcscat (in: _Dest=0x80535b0, _Source="PAWPRINT.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" [0144.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80535b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0144.205] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3800, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e8c3800, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.HTM", cAlternateFileName="")) returned 1 [0144.205] wcscmp (_String1="PINELUMB.HTM", _String2=".") returned 1 [0144.205] wcscmp (_String1="PINELUMB.HTM", _String2="..") returned 1 [0144.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8054628 [0144.205] wcscpy (in: _Dest=0x8054628, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.206] wcscat (in: _Dest=0x8054628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.206] wcscat (in: _Dest=0x8054628, _Source="PINELUMB.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" [0144.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0144.207] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a69c00, ftCreationTime.dwHighDateTime=0x1bdaf42, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x98a69c00, ftLastWriteTime.dwHighDateTime=0x1bdaf42, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.JPG", cAlternateFileName="")) returned 1 [0144.207] wcscmp (_String1="PINELUMB.JPG", _String2=".") returned 1 [0144.207] wcscmp (_String1="PINELUMB.JPG", _String2="..") returned 1 [0144.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053418 [0144.207] wcscpy (in: _Dest=0x8053418, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.207] wcscat (in: _Dest=0x8053418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.207] wcscat (in: _Dest=0x8053418, _Source="PINELUMB.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" [0144.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0144.208] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7794e900, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7794e900, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.HTM", cAlternateFileName="")) returned 1 [0144.208] wcscmp (_String1="SEAMARBL.HTM", _String2=".") returned 1 [0144.208] wcscmp (_String1="SEAMARBL.HTM", _String2="..") returned 1 [0144.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f1a0 [0144.208] wcscpy (in: _Dest=0x3e1f1a0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.208] wcscat (in: _Dest=0x3e1f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.208] wcscat (in: _Dest=0x3e1f1a0, _Source="SEAMARBL.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" [0144.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0144.209] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x1889, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.JPG", cAlternateFileName="")) returned 1 [0144.209] wcscmp (_String1="SEAMARBL.JPG", _String2=".") returned 1 [0144.209] wcscmp (_String1="SEAMARBL.JPG", _String2="..") returned 1 [0144.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f118 [0144.209] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.209] wcscat (in: _Dest=0x3e1f118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.209] wcscat (in: _Dest=0x3e1f118, _Source="SEAMARBL.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" [0144.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0144.211] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc1f900, ftCreationTime.dwHighDateTime=0x1c02f7e, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2fc1f900, ftLastWriteTime.dwHighDateTime=0x1c02f7e, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.GIF", cAlternateFileName="")) returned 1 [0144.211] wcscmp (_String1="TECHTOOL.GIF", _String2=".") returned 1 [0144.211] wcscmp (_String1="TECHTOOL.GIF", _String2="..") returned 1 [0144.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f090 [0144.211] wcscpy (in: _Dest=0x3e1f090, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.211] wcscat (in: _Dest=0x3e1f090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.211] wcscat (in: _Dest=0x3e1f090, _Source="TECHTOOL.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" [0144.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0144.212] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91cec700, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91cec700, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 1 [0144.212] wcscmp (_String1="TECHTOOL.HTM", _String2=".") returned 1 [0144.212] wcscmp (_String1="TECHTOOL.HTM", _String2="..") returned 1 [0144.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f4d0 [0144.212] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0144.212] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0144.213] wcscat (in: _Dest=0x3e1f4d0, _Source="TECHTOOL.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" [0144.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0144.214] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91cec700, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91cec700, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 0 [0144.214] FindClose (in: hFindFile=0x3e54a48 | out: hFindFile=0x3e54a48) returned 1 [0144.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090210) returned 1 [0144.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39b68) returned 1 [0144.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff50f0) returned 1 Thread: id = 781 os_tid = 0x1348 [0137.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest")) returned 0x20 [0140.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", dwFileAttributes=0x20) returned 0 [0140.007] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.008] GetLastError () returned 0x5 [0140.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", dwFileAttributes=0x20) returned 0 [0140.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d338) returned 1 Thread: id = 782 os_tid = 0x134c [0137.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini")) returned 0x20 [0140.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini", dwFileAttributes=0x20) returned 0 [0140.016] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.016] GetLastError () returned 0x5 [0140.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini", dwFileAttributes=0x20) returned 0 [0140.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e244c0) returned 1 Thread: id = 783 os_tid = 0x1350 [0137.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e2e0 [0137.455] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0137.455] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0137.455] wcscat (in: _Dest=0x3d8e2e0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\*" [0137.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090478 [0137.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca353c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099350 [0140.954] wcscmp (_String1=".", _String2=".") returned 0 [0140.954] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca353c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.954] wcscmp (_String1="..", _String2=".") returned 1 [0140.954] wcscmp (_String1="..", _String2="..") returned 0 [0140.954] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0140.954] wcscmp (_String1="nppdf32.CAT", _String2=".") returned 1 [0140.954] wcscmp (_String1="nppdf32.CAT", _String2="..") returned 1 [0140.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4608 [0140.954] wcscpy (in: _Dest=0x3dc4608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0140.954] wcscat (in: _Dest=0x3dc4608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0140.954] wcscat (in: _Dest=0x3dc4608, _Source="nppdf32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" [0149.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0149.614] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0149.614] wcscmp (_String1="nppdf32.CHS", _String2=".") returned 1 [0149.614] wcscmp (_String1="nppdf32.CHS", _String2="..") returned 1 [0149.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e243c0 [0149.614] wcscpy (in: _Dest=0x3e243c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.614] wcscat (in: _Dest=0x3e243c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.614] wcscat (in: _Dest=0x3e243c0, _Source="nppdf32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" [0149.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e243c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0149.616] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0149.616] wcscmp (_String1="nppdf32.CHT", _String2=".") returned 1 [0149.616] wcscmp (_String1="nppdf32.CHT", _String2="..") returned 1 [0149.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e244c0 [0149.616] wcscpy (in: _Dest=0x3e244c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.616] wcscat (in: _Dest=0x3e244c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.616] wcscat (in: _Dest=0x3e244c0, _Source="nppdf32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" [0149.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e244c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0149.618] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0149.618] wcscmp (_String1="nppdf32.CZE", _String2=".") returned 1 [0149.618] wcscmp (_String1="nppdf32.CZE", _String2="..") returned 1 [0149.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a658 [0149.618] wcscpy (in: _Dest=0x831a658, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.618] wcscat (in: _Dest=0x831a658, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.619] wcscat (in: _Dest=0x831a658, _Source="nppdf32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" [0149.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0149.621] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0149.621] wcscmp (_String1="nppdf32.DAN", _String2=".") returned 1 [0149.621] wcscmp (_String1="nppdf32.DAN", _String2="..") returned 1 [0149.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a758 [0149.621] wcscpy (in: _Dest=0x831a758, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.621] wcscat (in: _Dest=0x831a758, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.621] wcscat (in: _Dest=0x831a758, _Source="nppdf32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" [0149.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0149.622] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0149.623] wcscmp (_String1="nppdf32.DEU", _String2=".") returned 1 [0149.623] wcscmp (_String1="nppdf32.DEU", _String2="..") returned 1 [0149.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831ab58 [0149.623] wcscpy (in: _Dest=0x831ab58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.623] wcscat (in: _Dest=0x831ab58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.623] wcscat (in: _Dest=0x831ab58, _Source="nppdf32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" [0149.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831ab58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0149.624] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0149.625] wcscmp (_String1="nppdf32.dll", _String2=".") returned 1 [0149.625] wcscmp (_String1="nppdf32.dll", _String2="..") returned 1 [0149.625] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0149.625] wcscmp (_String1="nppdf32.ESP", _String2=".") returned 1 [0149.625] wcscmp (_String1="nppdf32.ESP", _String2="..") returned 1 [0149.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a458 [0149.625] wcscpy (in: _Dest=0x831a458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.625] wcscat (in: _Dest=0x831a458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.625] wcscat (in: _Dest=0x831a458, _Source="nppdf32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" [0149.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0149.626] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0149.627] wcscmp (_String1="nppdf32.EUQ", _String2=".") returned 1 [0149.627] wcscmp (_String1="nppdf32.EUQ", _String2="..") returned 1 [0149.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a9d8 [0149.627] wcscpy (in: _Dest=0x831a9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.627] wcscat (in: _Dest=0x831a9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.627] wcscat (in: _Dest=0x831a9d8, _Source="nppdf32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" [0149.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0149.628] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0149.628] wcscmp (_String1="nppdf32.FRA", _String2=".") returned 1 [0149.628] wcscmp (_String1="nppdf32.FRA", _String2="..") returned 1 [0149.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a8d8 [0149.628] wcscpy (in: _Dest=0x831a8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.628] wcscat (in: _Dest=0x831a8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.628] wcscat (in: _Dest=0x831a8d8, _Source="nppdf32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" [0149.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0149.629] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0149.629] wcscmp (_String1="nppdf32.HRV", _String2=".") returned 1 [0149.629] wcscmp (_String1="nppdf32.HRV", _String2="..") returned 1 [0149.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b058 [0149.629] wcscpy (in: _Dest=0x831b058, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.629] wcscat (in: _Dest=0x831b058, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.630] wcscat (in: _Dest=0x831b058, _Source="nppdf32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" [0149.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0149.631] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0149.631] wcscmp (_String1="nppdf32.HUN", _String2=".") returned 1 [0149.631] wcscmp (_String1="nppdf32.HUN", _String2="..") returned 1 [0149.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831afd8 [0149.631] wcscpy (in: _Dest=0x831afd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.631] wcscat (in: _Dest=0x831afd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.631] wcscat (in: _Dest=0x831afd8, _Source="nppdf32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" [0149.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831afd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0149.632] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0149.632] wcscmp (_String1="nppdf32.ITA", _String2=".") returned 1 [0149.632] wcscmp (_String1="nppdf32.ITA", _String2="..") returned 1 [0149.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831af58 [0149.632] wcscpy (in: _Dest=0x831af58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.632] wcscat (in: _Dest=0x831af58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.632] wcscat (in: _Dest=0x831af58, _Source="nppdf32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" [0149.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831af58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0149.634] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0149.634] wcscmp (_String1="nppdf32.JPN", _String2=".") returned 1 [0149.634] wcscmp (_String1="nppdf32.JPN", _String2="..") returned 1 [0149.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831aed8 [0149.634] wcscpy (in: _Dest=0x831aed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.634] wcscat (in: _Dest=0x831aed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.634] wcscat (in: _Dest=0x831aed8, _Source="nppdf32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" [0149.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831aed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0149.636] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0149.636] wcscmp (_String1="nppdf32.KOR", _String2=".") returned 1 [0149.636] wcscmp (_String1="nppdf32.KOR", _String2="..") returned 1 [0149.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831ae58 [0149.636] wcscpy (in: _Dest=0x831ae58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.636] wcscat (in: _Dest=0x831ae58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.636] wcscat (in: _Dest=0x831ae58, _Source="nppdf32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" [0149.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831ae58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0149.637] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0149.638] wcscmp (_String1="nppdf32.NLD", _String2=".") returned 1 [0149.638] wcscmp (_String1="nppdf32.NLD", _String2="..") returned 1 [0149.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831add8 [0149.638] wcscpy (in: _Dest=0x831add8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.638] wcscat (in: _Dest=0x831add8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.638] wcscat (in: _Dest=0x831add8, _Source="nppdf32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" [0149.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831add8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0149.639] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0149.639] wcscmp (_String1="nppdf32.NOR", _String2=".") returned 1 [0149.639] wcscmp (_String1="nppdf32.NOR", _String2="..") returned 1 [0149.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831ad58 [0149.639] wcscpy (in: _Dest=0x831ad58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.639] wcscat (in: _Dest=0x831ad58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.639] wcscat (in: _Dest=0x831ad58, _Source="nppdf32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" [0149.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831ad58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0149.641] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0149.641] wcscmp (_String1="nppdf32.POL", _String2=".") returned 1 [0149.641] wcscmp (_String1="nppdf32.POL", _String2="..") returned 1 [0149.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831abd8 [0149.641] wcscpy (in: _Dest=0x831abd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.641] wcscat (in: _Dest=0x831abd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.641] wcscat (in: _Dest=0x831abd8, _Source="nppdf32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" [0149.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831abd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0149.643] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0149.643] wcscmp (_String1="nppdf32.PTB", _String2=".") returned 1 [0149.643] wcscmp (_String1="nppdf32.PTB", _String2="..") returned 1 [0149.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831ac58 [0149.643] wcscpy (in: _Dest=0x831ac58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.643] wcscat (in: _Dest=0x831ac58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.643] wcscat (in: _Dest=0x831ac58, _Source="nppdf32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" [0149.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831ac58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0149.645] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0149.645] wcscmp (_String1="nppdf32.RUM", _String2=".") returned 1 [0149.645] wcscmp (_String1="nppdf32.RUM", _String2="..") returned 1 [0149.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b0d8 [0149.645] wcscpy (in: _Dest=0x831b0d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.645] wcscat (in: _Dest=0x831b0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.645] wcscat (in: _Dest=0x831b0d8, _Source="nppdf32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" [0149.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0149.646] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0149.647] wcscmp (_String1="nppdf32.RUS", _String2=".") returned 1 [0149.647] wcscmp (_String1="nppdf32.RUS", _String2="..") returned 1 [0149.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b158 [0149.647] wcscpy (in: _Dest=0x831b158, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.647] wcscat (in: _Dest=0x831b158, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.647] wcscat (in: _Dest=0x831b158, _Source="nppdf32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" [0149.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0149.648] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0149.648] wcscmp (_String1="nppdf32.SKY", _String2=".") returned 1 [0149.648] wcscmp (_String1="nppdf32.SKY", _String2="..") returned 1 [0149.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b1d8 [0149.648] wcscpy (in: _Dest=0x831b1d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.648] wcscat (in: _Dest=0x831b1d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.649] wcscat (in: _Dest=0x831b1d8, _Source="nppdf32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" [0149.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0149.650] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0149.650] wcscmp (_String1="nppdf32.SLV", _String2=".") returned 1 [0149.650] wcscmp (_String1="nppdf32.SLV", _String2="..") returned 1 [0149.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b258 [0149.650] wcscpy (in: _Dest=0x831b258, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.650] wcscat (in: _Dest=0x831b258, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.650] wcscat (in: _Dest=0x831b258, _Source="nppdf32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" [0149.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0149.653] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0149.653] wcscmp (_String1="nppdf32.SUO", _String2=".") returned 1 [0149.653] wcscmp (_String1="nppdf32.SUO", _String2="..") returned 1 [0149.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b2d8 [0149.653] wcscpy (in: _Dest=0x831b2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0149.653] wcscat (in: _Dest=0x831b2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0149.653] wcscat (in: _Dest=0x831b2d8, _Source="nppdf32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" [0149.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0150.067] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0150.067] wcscmp (_String1="nppdf32.SVE", _String2=".") returned 1 [0150.067] wcscmp (_String1="nppdf32.SVE", _String2="..") returned 1 [0150.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e23dc0 [0150.067] wcscpy (in: _Dest=0x3e23dc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0150.067] wcscat (in: _Dest=0x3e23dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0150.067] wcscat (in: _Dest=0x3e23dc0, _Source="nppdf32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" [0151.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0151.723] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0151.723] wcscmp (_String1="nppdf32.TUR", _String2=".") returned 1 [0151.723] wcscmp (_String1="nppdf32.TUR", _String2="..") returned 1 [0151.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e244c0 [0151.724] wcscpy (in: _Dest=0x3e244c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0151.724] wcscat (in: _Dest=0x3e244c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0151.724] wcscat (in: _Dest=0x3e244c0, _Source="nppdf32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" [0151.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e244c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0151.725] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0151.725] wcscmp (_String1="nppdf32.UKR", _String2=".") returned 1 [0151.725] wcscmp (_String1="nppdf32.UKR", _String2="..") returned 1 [0151.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e248c0 [0151.725] wcscpy (in: _Dest=0x3e248c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0151.725] wcscat (in: _Dest=0x3e248c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0151.725] wcscat (in: _Dest=0x3e248c0, _Source="nppdf32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" [0151.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e248c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0151.726] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0151.726] FindClose (in: hFindFile=0x8099350 | out: hFindFile=0x8099350) returned 1 [0151.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090478) returned 1 [0151.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 [0151.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd068) returned 1 Thread: id = 784 os_tid = 0x1354 [0137.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8055030 [0137.456] wcscpy (in: _Dest=0x8055030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0137.456] wcscat (in: _Dest=0x8055030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0137.456] wcscat (in: _Dest=0x8055030, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\*" [0137.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80906e0 [0137.456] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda5e8440, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099390 [0140.957] wcscmp (_String1=".", _String2=".") returned 0 [0140.957] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda5e8440, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.957] wcscmp (_String1="..", _String2=".") returned 1 [0140.957] wcscmp (_String1="..", _String2="..") returned 0 [0140.957] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0140.957] wcscmp (_String1="nppdf32.CAT", _String2=".") returned 1 [0140.957] wcscmp (_String1="nppdf32.CAT", _String2="..") returned 1 [0140.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f7d0 [0140.957] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0140.957] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0140.957] wcscat (in: _Dest=0x3f2f7d0, _Source="nppdf32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" [0150.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0150.282] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0150.282] wcscmp (_String1="nppdf32.CHS", _String2=".") returned 1 [0150.282] wcscmp (_String1="nppdf32.CHS", _String2="..") returned 1 [0150.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bea30 [0150.282] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.282] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.282] wcscat (in: _Dest=0x81bea30, _Source="nppdf32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" [0150.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0150.284] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0150.284] wcscmp (_String1="nppdf32.CHT", _String2=".") returned 1 [0150.284] wcscmp (_String1="nppdf32.CHT", _String2="..") returned 1 [0150.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be458 [0150.284] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.284] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.284] wcscat (in: _Dest=0x81be458, _Source="nppdf32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" [0150.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0150.285] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0150.285] wcscmp (_String1="nppdf32.CZE", _String2=".") returned 1 [0150.285] wcscmp (_String1="nppdf32.CZE", _String2="..") returned 1 [0150.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be4e0 [0150.285] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.285] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.285] wcscat (in: _Dest=0x81be4e0, _Source="nppdf32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" [0150.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0150.286] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0150.286] wcscmp (_String1="nppdf32.DAN", _String2=".") returned 1 [0150.286] wcscmp (_String1="nppdf32.DAN", _String2="..") returned 1 [0150.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be568 [0150.286] wcscpy (in: _Dest=0x81be568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.286] wcscat (in: _Dest=0x81be568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.286] wcscat (in: _Dest=0x81be568, _Source="nppdf32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" [0150.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0150.287] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0150.287] wcscmp (_String1="nppdf32.DEU", _String2=".") returned 1 [0150.287] wcscmp (_String1="nppdf32.DEU", _String2="..") returned 1 [0150.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be5f0 [0150.288] wcscpy (in: _Dest=0x81be5f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.288] wcscat (in: _Dest=0x81be5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.288] wcscat (in: _Dest=0x81be5f0, _Source="nppdf32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" [0150.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0150.289] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0150.289] wcscmp (_String1="nppdf32.dll", _String2=".") returned 1 [0150.289] wcscmp (_String1="nppdf32.dll", _String2="..") returned 1 [0150.289] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0150.289] wcscmp (_String1="nppdf32.ESP", _String2=".") returned 1 [0150.289] wcscmp (_String1="nppdf32.ESP", _String2="..") returned 1 [0150.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be678 [0150.289] wcscpy (in: _Dest=0x81be678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.289] wcscat (in: _Dest=0x81be678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.289] wcscat (in: _Dest=0x81be678, _Source="nppdf32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" [0150.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0150.291] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0150.292] wcscmp (_String1="nppdf32.EUQ", _String2=".") returned 1 [0150.292] wcscmp (_String1="nppdf32.EUQ", _String2="..") returned 1 [0150.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be898 [0150.292] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.292] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.292] wcscat (in: _Dest=0x81be898, _Source="nppdf32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" [0150.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0150.293] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0150.293] wcscmp (_String1="nppdf32.FRA", _String2=".") returned 1 [0150.293] wcscmp (_String1="nppdf32.FRA", _String2="..") returned 1 [0150.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bed60 [0150.293] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.293] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.293] wcscat (in: _Dest=0x81bed60, _Source="nppdf32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" [0150.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0150.294] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0150.294] wcscmp (_String1="nppdf32.HRV", _String2=".") returned 1 [0150.294] wcscmp (_String1="nppdf32.HRV", _String2="..") returned 1 [0150.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be810 [0150.294] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.294] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.294] wcscat (in: _Dest=0x81be810, _Source="nppdf32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" [0150.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0150.295] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0150.295] wcscmp (_String1="nppdf32.HUN", _String2=".") returned 1 [0150.295] wcscmp (_String1="nppdf32.HUN", _String2="..") returned 1 [0150.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81becd8 [0150.295] wcscpy (in: _Dest=0x81becd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.295] wcscat (in: _Dest=0x81becd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.295] wcscat (in: _Dest=0x81becd8, _Source="nppdf32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" [0150.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81becd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0150.296] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0150.296] wcscmp (_String1="nppdf32.ITA", _String2=".") returned 1 [0150.297] wcscmp (_String1="nppdf32.ITA", _String2="..") returned 1 [0150.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bec50 [0150.297] wcscpy (in: _Dest=0x81bec50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.297] wcscat (in: _Dest=0x81bec50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.297] wcscat (in: _Dest=0x81bec50, _Source="nppdf32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" [0150.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0150.298] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0150.298] wcscmp (_String1="nppdf32.JPN", _String2=".") returned 1 [0150.298] wcscmp (_String1="nppdf32.JPN", _String2="..") returned 1 [0150.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bebc8 [0150.298] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.298] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.298] wcscat (in: _Dest=0x81bebc8, _Source="nppdf32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" [0150.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0150.299] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0150.299] wcscmp (_String1="nppdf32.KOR", _String2=".") returned 1 [0150.299] wcscmp (_String1="nppdf32.KOR", _String2="..") returned 1 [0150.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81beb40 [0150.299] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.299] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.299] wcscat (in: _Dest=0x81beb40, _Source="nppdf32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" [0150.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0150.300] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0150.300] wcscmp (_String1="nppdf32.NLD", _String2=".") returned 1 [0150.300] wcscmp (_String1="nppdf32.NLD", _String2="..") returned 1 [0150.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bede8 [0150.300] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.300] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.300] wcscat (in: _Dest=0x81bede8, _Source="nppdf32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" [0150.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0150.301] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0150.301] wcscmp (_String1="nppdf32.NOR", _String2=".") returned 1 [0150.301] wcscmp (_String1="nppdf32.NOR", _String2="..") returned 1 [0150.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bee70 [0150.301] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.301] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.301] wcscat (in: _Dest=0x81bee70, _Source="nppdf32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" [0150.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0150.302] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0150.302] wcscmp (_String1="nppdf32.POL", _String2=".") returned 1 [0150.302] wcscmp (_String1="nppdf32.POL", _String2="..") returned 1 [0150.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81beef8 [0150.302] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.302] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.302] wcscat (in: _Dest=0x81beef8, _Source="nppdf32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" [0150.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c00 [0150.303] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0150.303] wcscmp (_String1="nppdf32.PTB", _String2=".") returned 1 [0150.303] wcscmp (_String1="nppdf32.PTB", _String2="..") returned 1 [0150.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bef80 [0150.303] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.303] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.303] wcscat (in: _Dest=0x81bef80, _Source="nppdf32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" [0150.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0150.305] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0150.305] wcscmp (_String1="nppdf32.RUM", _String2=".") returned 1 [0150.305] wcscmp (_String1="nppdf32.RUM", _String2="..") returned 1 [0150.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf008 [0150.305] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.305] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.305] wcscat (in: _Dest=0x81bf008, _Source="nppdf32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" [0150.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0150.307] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0150.307] wcscmp (_String1="nppdf32.RUS", _String2=".") returned 1 [0150.307] wcscmp (_String1="nppdf32.RUS", _String2="..") returned 1 [0150.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf090 [0150.307] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.308] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.308] wcscat (in: _Dest=0x81bf090, _Source="nppdf32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" [0150.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c0c [0150.309] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0150.309] wcscmp (_String1="nppdf32.SKY", _String2=".") returned 1 [0150.309] wcscmp (_String1="nppdf32.SKY", _String2="..") returned 1 [0150.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf118 [0150.309] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.309] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.309] wcscat (in: _Dest=0x81bf118, _Source="nppdf32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" [0150.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0150.310] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0150.310] wcscmp (_String1="nppdf32.SLV", _String2=".") returned 1 [0150.310] wcscmp (_String1="nppdf32.SLV", _String2="..") returned 1 [0150.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf1a0 [0150.310] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.310] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.310] wcscat (in: _Dest=0x81bf1a0, _Source="nppdf32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" [0150.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c14 [0150.311] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0150.311] wcscmp (_String1="nppdf32.SUO", _String2=".") returned 1 [0150.311] wcscmp (_String1="nppdf32.SUO", _String2="..") returned 1 [0150.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf228 [0150.312] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.312] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.312] wcscat (in: _Dest=0x81bf228, _Source="nppdf32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" [0150.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0150.312] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0150.313] wcscmp (_String1="nppdf32.SVE", _String2=".") returned 1 [0150.313] wcscmp (_String1="nppdf32.SVE", _String2="..") returned 1 [0150.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf2b0 [0150.313] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.313] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.313] wcscat (in: _Dest=0x81bf2b0, _Source="nppdf32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" [0150.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0150.314] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0150.314] wcscmp (_String1="nppdf32.TUR", _String2=".") returned 1 [0150.314] wcscmp (_String1="nppdf32.TUR", _String2="..") returned 1 [0150.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf338 [0150.314] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.314] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.314] wcscat (in: _Dest=0x81bf338, _Source="nppdf32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" [0150.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0150.315] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0150.315] wcscmp (_String1="nppdf32.UKR", _String2=".") returned 1 [0150.315] wcscmp (_String1="nppdf32.UKR", _String2="..") returned 1 [0150.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf3c0 [0150.315] wcscpy (in: _Dest=0x81bf3c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0150.315] wcscat (in: _Dest=0x81bf3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0150.315] wcscat (in: _Dest=0x81bf3c0, _Source="nppdf32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" [0150.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0150.316] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0150.316] FindClose (in: hFindFile=0x8099390 | out: hFindFile=0x8099390) returned 1 [0150.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80906e0) returned 1 [0150.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055030) returned 1 [0150.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054bd0) returned 1 Thread: id = 785 os_tid = 0x1358 [0137.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\cryptocme2.sig")) returned 0x20 [0140.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig", dwFileAttributes=0x20) returned 0 [0140.039] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\cryptocme2.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.039] GetLastError () returned 0x5 [0140.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig", dwFileAttributes=0x20) returned 0 [0140.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e243c0) returned 1 Thread: id = 786 os_tid = 0x135c [0137.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0137.457] wcscpy (in: _Dest=0x3f32ca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0137.457] wcscat (in: _Dest=0x3f32ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0137.457] wcscat (in: _Dest=0x3f32ca0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*" [0137.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090948 [0137.458] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80993d0 [0140.957] wcscmp (_String1=".", _String2=".") returned 0 [0140.957] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.957] wcscmp (_String1="..", _String2=".") returned 1 [0140.957] wcscmp (_String1="..", _String2="..") returned 0 [0140.957] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0140.957] wcscmp (_String1="CAT", _String2=".") returned 1 [0140.957] wcscmp (_String1="CAT", _String2="..") returned 1 [0140.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5908 [0140.957] wcscpy (in: _Dest=0x3dc5908, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0140.958] wcscat (in: _Dest=0x3dc5908, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0140.958] wcscat (in: _Dest=0x3dc5908, _Source="CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0151.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0151.059] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb65ec0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0151.059] wcscmp (_String1="CHS", _String2=".") returned 1 [0151.059] wcscmp (_String1="CHS", _String2="..") returned 1 [0151.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5b88 [0151.059] wcscpy (in: _Dest=0x3dc5b88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.059] wcscat (in: _Dest=0x3dc5b88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.059] wcscat (in: _Dest=0x3dc5b88, _Source="CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0151.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0151.061] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb3fd60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0151.061] wcscmp (_String1="CHT", _String2=".") returned 1 [0151.061] wcscmp (_String1="CHT", _String2="..") returned 1 [0151.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4d08 [0151.061] wcscpy (in: _Dest=0x3dc4d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.061] wcscat (in: _Dest=0x3dc4d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.061] wcscat (in: _Dest=0x3dc4d08, _Source="CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0151.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0151.062] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0151.062] wcscmp (_String1="CZE", _String2=".") returned 1 [0151.062] wcscmp (_String1="CZE", _String2="..") returned 1 [0151.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5988 [0151.062] wcscpy (in: _Dest=0x3dc5988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.062] wcscat (in: _Dest=0x3dc5988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.062] wcscat (in: _Dest=0x3dc5988, _Source="CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0151.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0151.063] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb19c00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb19c00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0151.063] wcscmp (_String1="DAN", _String2=".") returned 1 [0151.063] wcscmp (_String1="DAN", _String2="..") returned 1 [0151.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5808 [0151.064] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.064] wcscat (in: _Dest=0x3dc5808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.064] wcscat (in: _Dest=0x3dc5808, _Source="DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0151.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0151.065] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0151.065] wcscmp (_String1="DEU", _String2=".") returned 1 [0151.065] wcscmp (_String1="DEU", _String2="..") returned 1 [0151.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3e08 [0151.065] wcscpy (in: _Dest=0x3dc3e08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.065] wcscat (in: _Dest=0x3dc3e08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.065] wcscat (in: _Dest=0x3dc3e08, _Source="DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0151.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc3e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0151.066] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0151.066] wcscmp (_String1="ENU", _String2=".") returned 1 [0151.066] wcscmp (_String1="ENU", _String2="..") returned 1 [0151.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4488 [0151.067] wcscpy (in: _Dest=0x3dc4488, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.067] wcscat (in: _Dest=0x3dc4488, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.067] wcscat (in: _Dest=0x3dc4488, _Source="ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0151.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0151.068] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0151.068] wcscmp (_String1="ESP", _String2=".") returned 1 [0151.068] wcscmp (_String1="ESP", _String2="..") returned 1 [0151.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3f88 [0151.068] wcscpy (in: _Dest=0x3dc3f88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.068] wcscat (in: _Dest=0x3dc3f88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.068] wcscat (in: _Dest=0x3dc3f88, _Source="ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0151.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc3f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0151.069] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0151.069] wcscmp (_String1="EUQ", _String2=".") returned 1 [0151.070] wcscmp (_String1="EUQ", _String2="..") returned 1 [0151.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5508 [0151.070] wcscpy (in: _Dest=0x3dc5508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.070] wcscat (in: _Dest=0x3dc5508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.070] wcscat (in: _Dest=0x3dc5508, _Source="EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" [0151.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0151.071] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0151.071] wcscmp (_String1="FRA", _String2=".") returned 1 [0151.071] wcscmp (_String1="FRA", _String2="..") returned 1 [0151.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5c08 [0151.071] wcscpy (in: _Dest=0x3dc5c08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.071] wcscat (in: _Dest=0x3dc5c08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.072] wcscat (in: _Dest=0x3dc5c08, _Source="FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0151.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0151.073] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0151.073] wcscmp (_String1="HRV", _String2=".") returned 1 [0151.073] wcscmp (_String1="HRV", _String2="..") returned 1 [0151.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5a08 [0151.073] wcscpy (in: _Dest=0x3dc5a08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.073] wcscat (in: _Dest=0x3dc5a08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.073] wcscat (in: _Dest=0x3dc5a08, _Source="HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0151.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0151.074] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0151.074] wcscmp (_String1="HUN", _String2=".") returned 1 [0151.074] wcscmp (_String1="HUN", _String2="..") returned 1 [0151.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4688 [0151.074] wcscpy (in: _Dest=0x3dc4688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.074] wcscat (in: _Dest=0x3dc4688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.074] wcscat (in: _Dest=0x3dc4688, _Source="HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0151.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0151.075] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0151.076] wcscmp (_String1="ITA", _String2=".") returned 1 [0151.076] wcscmp (_String1="ITA", _String2="..") returned 1 [0151.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5888 [0151.076] wcscpy (in: _Dest=0x3dc5888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.076] wcscat (in: _Dest=0x3dc5888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.076] wcscat (in: _Dest=0x3dc5888, _Source="ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0151.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0151.077] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0151.077] wcscmp (_String1="JPN", _String2=".") returned 1 [0151.077] wcscmp (_String1="JPN", _String2="..") returned 1 [0151.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5688 [0151.077] wcscpy (in: _Dest=0x3dc5688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.077] wcscat (in: _Dest=0x3dc5688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.077] wcscat (in: _Dest=0x3dc5688, _Source="JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0151.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0151.079] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0151.079] wcscmp (_String1="KOR", _String2=".") returned 1 [0151.079] wcscmp (_String1="KOR", _String2="..") returned 1 [0151.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc3e88 [0151.079] wcscpy (in: _Dest=0x3dc3e88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.079] wcscat (in: _Dest=0x3dc3e88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.079] wcscat (in: _Dest=0x3dc3e88, _Source="KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0151.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc3e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0151.081] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0151.081] wcscmp (_String1="NLD", _String2=".") returned 1 [0151.081] wcscmp (_String1="NLD", _String2="..") returned 1 [0151.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4088 [0151.081] wcscpy (in: _Dest=0x3dc4088, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.081] wcscat (in: _Dest=0x3dc4088, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.081] wcscat (in: _Dest=0x3dc4088, _Source="NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0151.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0151.082] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0151.083] wcscmp (_String1="NOR", _String2=".") returned 1 [0151.083] wcscmp (_String1="NOR", _String2="..") returned 1 [0151.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831acd8 [0151.083] wcscpy (in: _Dest=0x831acd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.083] wcscat (in: _Dest=0x831acd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.083] wcscat (in: _Dest=0x831acd8, _Source="NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0151.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831acd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0151.084] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0151.084] wcscmp (_String1="POL", _String2=".") returned 1 [0151.084] wcscmp (_String1="POL", _String2="..") returned 1 [0151.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b358 [0151.084] wcscpy (in: _Dest=0x831b358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.084] wcscat (in: _Dest=0x831b358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.084] wcscat (in: _Dest=0x831b358, _Source="POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0151.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831b358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0151.087] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0151.087] wcscmp (_String1="PTB", _String2=".") returned 1 [0151.087] wcscmp (_String1="PTB", _String2="..") returned 1 [0151.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b3d8 [0151.088] wcscpy (in: _Dest=0x831b3d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.088] wcscat (in: _Dest=0x831b3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.088] wcscat (in: _Dest=0x831b3d8, _Source="PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0151.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831b3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0151.089] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0151.089] wcscmp (_String1="RUM", _String2=".") returned 1 [0151.089] wcscmp (_String1="RUM", _String2="..") returned 1 [0151.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b458 [0151.089] wcscpy (in: _Dest=0x831b458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.089] wcscat (in: _Dest=0x831b458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.089] wcscat (in: _Dest=0x831b458, _Source="RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0151.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831b458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0151.091] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0151.091] wcscmp (_String1="RUS", _String2=".") returned 1 [0151.091] wcscmp (_String1="RUS", _String2="..") returned 1 [0151.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b4d8 [0151.091] wcscpy (in: _Dest=0x831b4d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.091] wcscat (in: _Dest=0x831b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.091] wcscat (in: _Dest=0x831b4d8, _Source="RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0151.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0151.092] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0151.092] wcscmp (_String1="SKY", _String2=".") returned 1 [0151.092] wcscmp (_String1="SKY", _String2="..") returned 1 [0151.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b558 [0151.092] wcscpy (in: _Dest=0x831b558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.092] wcscat (in: _Dest=0x831b558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.092] wcscat (in: _Dest=0x831b558, _Source="SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0151.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0151.094] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0151.094] wcscmp (_String1="SLV", _String2=".") returned 1 [0151.094] wcscmp (_String1="SLV", _String2="..") returned 1 [0151.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b5d8 [0151.094] wcscpy (in: _Dest=0x831b5d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.094] wcscat (in: _Dest=0x831b5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.094] wcscat (in: _Dest=0x831b5d8, _Source="SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0151.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831b5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0151.095] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0151.095] wcscmp (_String1="SUO", _String2=".") returned 1 [0151.095] wcscmp (_String1="SUO", _String2="..") returned 1 [0151.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b658 [0151.095] wcscpy (in: _Dest=0x831b658, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.095] wcscat (in: _Dest=0x831b658, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.096] wcscat (in: _Dest=0x831b658, _Source="SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0151.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831b658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0151.097] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce85ba0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0151.097] wcscmp (_String1="SVE", _String2=".") returned 1 [0151.097] wcscmp (_String1="SVE", _String2="..") returned 1 [0151.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b6d8 [0151.097] wcscpy (in: _Dest=0x831b6d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.097] wcscat (in: _Dest=0x831b6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.097] wcscat (in: _Dest=0x831b6d8, _Source="SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0151.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831b6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0151.404] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0151.404] wcscmp (_String1="TUR", _String2=".") returned 1 [0151.404] wcscmp (_String1="TUR", _String2="..") returned 1 [0151.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da61f0 [0151.404] wcscpy (in: _Dest=0x3da61f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.404] wcscat (in: _Dest=0x3da61f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.404] wcscat (in: _Dest=0x3da61f0, _Source="TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0152.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3da61f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bbc [0152.390] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0152.390] wcscmp (_String1="UKR", _String2=".") returned 1 [0152.390] wcscmp (_String1="UKR", _String2="..") returned 1 [0152.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dafa88 [0152.390] wcscpy (in: _Dest=0x3dafa88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0152.391] wcscat (in: _Dest=0x3dafa88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0152.391] wcscat (in: _Dest=0x3dafa88, _Source="UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0152.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dafa88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2014 [0152.392] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0152.935] FindClose (in: hFindFile=0x80993d0 | out: hFindFile=0x80993d0) returned 1 [0154.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090948) returned 1 [0154.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0154.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 Thread: id = 787 os_tid = 0x1360 [0137.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f327f0 [0137.458] wcscpy (in: _Dest=0x3f327f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" [0137.458] wcscat (in: _Dest=0x3f327f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\" [0137.458] wcscat (in: _Dest=0x3f327f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*" [0137.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090bb0 [0137.458] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37918 [0140.032] wcscmp (_String1=".", _String2=".") returned 0 [0140.032] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.033] wcscmp (_String1="..", _String2=".") returned 1 [0140.033] wcscmp (_String1="..", _String2="..") returned 0 [0140.033] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0140.033] wcscmp (_String1="JSByteCodeWin.bin", _String2=".") returned 1 [0140.033] wcscmp (_String1="JSByteCodeWin.bin", _String2="..") returned 1 [0140.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3bf50 [0140.033] wcscpy (in: _Dest=0x3e3bf50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" [0140.033] wcscat (in: _Dest=0x3e3bf50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\" [0140.033] wcscat (in: _Dest=0x3e3bf50, _Source="JSByteCodeWin.bin" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" [0151.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3bf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0151.862] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0 [0151.863] FindClose (in: hFindFile=0x3f37918 | out: hFindFile=0x3f37918) returned 1 [0151.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090bb0) returned 1 [0151.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0151.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0ba00) returned 1 Thread: id = 788 os_tid = 0x1364 [0137.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8055180 [0137.459] wcscpy (in: _Dest=0x8055180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0137.459] wcscat (in: _Dest=0x8055180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0137.459] wcscat (in: _Dest=0x8055180, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\*" [0137.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090e18 [0137.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099450 [0140.958] wcscmp (_String1=".", _String2=".") returned 0 [0140.958] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.959] wcscmp (_String1="..", _String2=".") returned 1 [0140.959] wcscmp (_String1="..", _String2="..") returned 0 [0140.959] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0140.959] wcscmp (_String1="CAT", _String2=".") returned 1 [0140.959] wcscmp (_String1="CAT", _String2="..") returned 1 [0140.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8055570 [0140.959] wcscpy (in: _Dest=0x8055570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.959] wcscat (in: _Dest=0x8055570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.959] wcscat (in: _Dest=0x8055570, _Source="CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0152.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0152.438] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3487a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0152.438] wcscmp (_String1="CHS", _String2=".") returned 1 [0152.438] wcscmp (_String1="CHS", _String2="..") returned 1 [0152.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f398c8 [0152.438] wcscpy (in: _Dest=0x3f398c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.438] wcscat (in: _Dest=0x3f398c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.438] wcscat (in: _Dest=0x3f398c8, _Source="CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0152.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f398c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c [0152.440] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0152.440] wcscmp (_String1="CHT", _String2=".") returned 1 [0152.440] wcscmp (_String1="CHT", _String2="..") returned 1 [0152.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a038 [0152.440] wcscpy (in: _Dest=0x3f3a038, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.440] wcscat (in: _Dest=0x3f3a038, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.440] wcscat (in: _Dest=0x3f3a038, _Source="CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0152.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0152.441] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0152.441] wcscmp (_String1="CZE", _String2=".") returned 1 [0152.441] wcscmp (_String1="CZE", _String2="..") returned 1 [0152.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39a18 [0152.441] wcscpy (in: _Dest=0x3f39a18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.441] wcscat (in: _Dest=0x3f39a18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.441] wcscat (in: _Dest=0x3f39a18, _Source="CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0152.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0152.443] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0152.443] wcscmp (_String1="DAN", _String2=".") returned 1 [0152.443] wcscmp (_String1="DAN", _String2="..") returned 1 [0152.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a1f8 [0152.463] wcscpy (in: _Dest=0x3f3a1f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.463] wcscat (in: _Dest=0x3f3a1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.463] wcscat (in: _Dest=0x3f3a1f8, _Source="DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0152.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0152.465] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0152.465] wcscmp (_String1="DEU", _String2=".") returned 1 [0152.465] wcscmp (_String1="DEU", _String2="..") returned 1 [0152.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39708 [0152.465] wcscpy (in: _Dest=0x3f39708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.465] wcscat (in: _Dest=0x3f39708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.465] wcscat (in: _Dest=0x3f39708, _Source="DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0152.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0152.466] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0152.467] wcscmp (_String1="ENU", _String2=".") returned 1 [0152.467] wcscmp (_String1="ENU", _String2="..") returned 1 [0152.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d98 [0152.467] wcscpy (in: _Dest=0x3f39d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.467] wcscat (in: _Dest=0x3f39d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.467] wcscat (in: _Dest=0x3f39d98, _Source="ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0152.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2070 [0152.474] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0152.474] wcscmp (_String1="ESP", _String2=".") returned 1 [0152.474] wcscmp (_String1="ESP", _String2="..") returned 1 [0152.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39c48 [0152.474] wcscpy (in: _Dest=0x3f39c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.474] wcscat (in: _Dest=0x3f39c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.474] wcscat (in: _Dest=0x3f39c48, _Source="ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0152.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0152.476] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0152.476] wcscmp (_String1="EUQ", _String2=".") returned 1 [0152.476] wcscmp (_String1="EUQ", _String2="..") returned 1 [0152.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a118 [0152.476] wcscpy (in: _Dest=0x3f3a118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.476] wcscat (in: _Dest=0x3f3a118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.476] wcscat (in: _Dest=0x3f3a118, _Source="EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0152.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0152.478] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0152.478] wcscmp (_String1="FRA", _String2=".") returned 1 [0152.478] wcscmp (_String1="FRA", _String2="..") returned 1 [0152.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a268 [0152.478] wcscpy (in: _Dest=0x3f3a268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.478] wcscat (in: _Dest=0x3f3a268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.478] wcscat (in: _Dest=0x3f3a268, _Source="FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0152.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0152.480] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0152.480] wcscmp (_String1="HRV", _String2=".") returned 1 [0152.480] wcscmp (_String1="HRV", _String2="..") returned 1 [0152.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f397e8 [0152.480] wcscpy (in: _Dest=0x3f397e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.480] wcscat (in: _Dest=0x3f397e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.480] wcscat (in: _Dest=0x3f397e8, _Source="HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0152.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f397e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0152.482] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0152.482] wcscmp (_String1="HUN", _String2=".") returned 1 [0152.482] wcscmp (_String1="HUN", _String2="..") returned 1 [0152.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39b68 [0152.482] wcscpy (in: _Dest=0x3f39b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.482] wcscat (in: _Dest=0x3f39b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.482] wcscat (in: _Dest=0x3f39b68, _Source="HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0152.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0152.483] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0152.483] wcscmp (_String1="ITA", _String2=".") returned 1 [0152.483] wcscmp (_String1="ITA", _String2="..") returned 1 [0152.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39e08 [0152.483] wcscpy (in: _Dest=0x3f39e08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.483] wcscat (in: _Dest=0x3f39e08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.484] wcscat (in: _Dest=0x3f39e08, _Source="ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0152.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0152.485] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0152.485] wcscmp (_String1="JPN", _String2=".") returned 1 [0152.485] wcscmp (_String1="JPN", _String2="..") returned 1 [0152.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39698 [0152.485] wcscpy (in: _Dest=0x3f39698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.485] wcscat (in: _Dest=0x3f39698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.485] wcscat (in: _Dest=0x3f39698, _Source="JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0152.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0152.486] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0152.486] wcscmp (_String1="KOR", _String2=".") returned 1 [0152.487] wcscmp (_String1="KOR", _String2="..") returned 1 [0152.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a188 [0152.487] wcscpy (in: _Dest=0x3f3a188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.487] wcscat (in: _Dest=0x3f3a188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.487] wcscat (in: _Dest=0x3f3a188, _Source="KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0152.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0152.488] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0152.488] wcscmp (_String1="NLD", _String2=".") returned 1 [0152.488] wcscmp (_String1="NLD", _String2="..") returned 1 [0152.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39bd8 [0152.488] wcscpy (in: _Dest=0x3f39bd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.488] wcscat (in: _Dest=0x3f39bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.488] wcscat (in: _Dest=0x3f39bd8, _Source="NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0152.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0152.490] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0152.490] wcscmp (_String1="NOR", _String2=".") returned 1 [0152.490] wcscmp (_String1="NOR", _String2="..") returned 1 [0152.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39a88 [0152.490] wcscpy (in: _Dest=0x3f39a88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.490] wcscat (in: _Dest=0x3f39a88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.490] wcscat (in: _Dest=0x3f39a88, _Source="NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0152.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0152.492] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0152.492] wcscmp (_String1="POL", _String2=".") returned 1 [0152.492] wcscmp (_String1="POL", _String2="..") returned 1 [0152.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39cb8 [0152.492] wcscpy (in: _Dest=0x3f39cb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.492] wcscat (in: _Dest=0x3f39cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.492] wcscat (in: _Dest=0x3f39cb8, _Source="POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0152.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0152.493] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0152.493] wcscmp (_String1="PTB", _String2=".") returned 1 [0152.493] wcscmp (_String1="PTB", _String2="..") returned 1 [0152.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8055030 [0152.493] wcscpy (in: _Dest=0x8055030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.494] wcscat (in: _Dest=0x8055030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.494] wcscat (in: _Dest=0x8055030, _Source="PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0152.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0152.495] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0152.495] wcscmp (_String1="RUM", _String2=".") returned 1 [0152.495] wcscmp (_String1="RUM", _String2="..") returned 1 [0152.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054bd0 [0152.495] wcscpy (in: _Dest=0x8054bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.495] wcscat (in: _Dest=0x8054bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.495] wcscat (in: _Dest=0x8054bd0, _Source="RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0152.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0152.497] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0152.497] wcscmp (_String1="RUS", _String2=".") returned 1 [0152.497] wcscmp (_String1="RUS", _String2="..") returned 1 [0152.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80555e0 [0152.497] wcscpy (in: _Dest=0x80555e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.497] wcscat (in: _Dest=0x80555e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.497] wcscat (in: _Dest=0x80555e0, _Source="RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0152.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80555e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0152.498] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0152.498] wcscmp (_String1="SKY", _String2=".") returned 1 [0152.498] wcscmp (_String1="SKY", _String2="..") returned 1 [0152.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054a80 [0152.498] wcscpy (in: _Dest=0x8054a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.499] wcscat (in: _Dest=0x8054a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.499] wcscat (in: _Dest=0x8054a80, _Source="SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0152.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0152.500] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0152.500] wcscmp (_String1="SLV", _String2=".") returned 1 [0152.500] wcscmp (_String1="SLV", _String2="..") returned 1 [0152.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8055420 [0152.500] wcscpy (in: _Dest=0x8055420, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0152.500] wcscat (in: _Dest=0x8055420, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0152.500] wcscat (in: _Dest=0x8055420, _Source="SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0152.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0153.281] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0153.281] wcscmp (_String1="SUO", _String2=".") returned 1 [0153.281] wcscmp (_String1="SUO", _String2="..") returned 1 [0153.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80552d0 [0153.281] wcscpy (in: _Dest=0x80552d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0153.281] wcscat (in: _Dest=0x80552d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0153.281] wcscat (in: _Dest=0x80552d0, _Source="SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0155.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80552d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0155.775] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0155.775] wcscmp (_String1="SVE", _String2=".") returned 1 [0155.775] wcscmp (_String1="SVE", _String2="..") returned 1 [0155.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8055570 [0155.775] wcscpy (in: _Dest=0x8055570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0155.775] wcscat (in: _Dest=0x8055570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0155.775] wcscat (in: _Dest=0x8055570, _Source="SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0155.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2804 [0155.776] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0155.777] wcscmp (_String1="TUR", _String2=".") returned 1 [0155.777] wcscmp (_String1="TUR", _String2="..") returned 1 [0155.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054a80 [0155.777] wcscpy (in: _Dest=0x8054a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0155.777] wcscat (in: _Dest=0x8054a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0155.777] wcscat (in: _Dest=0x8054a80, _Source="TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0155.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2808 [0155.778] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0155.778] wcscmp (_String1="UKR", _String2=".") returned 1 [0155.778] wcscmp (_String1="UKR", _String2="..") returned 1 [0155.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054bd0 [0155.778] wcscpy (in: _Dest=0x8054bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0155.778] wcscat (in: _Dest=0x8054bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0155.778] wcscat (in: _Dest=0x8054bd0, _Source="UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0155.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x280c [0155.780] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0155.780] FindClose (in: hFindFile=0x8099450 | out: hFindFile=0x8099450) returned 1 [0155.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090e18) returned 1 [0155.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055180) returned 1 [0155.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd208) returned 1 Thread: id = 789 os_tid = 0x1368 [0137.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x80551f0 [0137.459] wcscpy (in: _Dest=0x80551f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0137.459] wcscat (in: _Dest=0x80551f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0137.460] wcscat (in: _Dest=0x80551f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\*" [0137.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091080 [0137.460] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099410 [0140.958] wcscmp (_String1=".", _String2=".") returned 0 [0140.958] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.958] wcscmp (_String1="..", _String2=".") returned 1 [0140.958] wcscmp (_String1="..", _String2="..") returned 0 [0140.958] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0140.958] wcscmp (_String1="ca_ES", _String2=".") returned 1 [0140.958] wcscmp (_String1="ca_ES", _String2="..") returned 1 [0140.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67ca0 [0140.958] wcscpy (in: _Dest=0x3e67ca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0140.958] wcscat (in: _Dest=0x3e67ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0140.958] wcscat (in: _Dest=0x3e67ca0, _Source="ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0151.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e67ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0151.919] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0151.919] wcscmp (_String1="cs_CZ", _String2=".") returned 1 [0151.919] wcscmp (_String1="cs_CZ", _String2="..") returned 1 [0151.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0ba00 [0151.919] wcscpy (in: _Dest=0x3f0ba00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.919] wcscat (in: _Dest=0x3f0ba00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.919] wcscat (in: _Dest=0x3f0ba00, _Source="cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0151.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0ba00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0151.920] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9cfb1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0151.920] wcscmp (_String1="da_DK", _String2=".") returned 1 [0151.920] wcscmp (_String1="da_DK", _String2="..") returned 1 [0151.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0bb68 [0151.921] wcscpy (in: _Dest=0x3f0bb68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.921] wcscat (in: _Dest=0x3f0bb68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.921] wcscat (in: _Dest=0x3f0bb68, _Source="da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0151.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0bb68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0151.922] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0151.922] wcscmp (_String1="de_DE", _String2=".") returned 1 [0151.922] wcscmp (_String1="de_DE", _String2="..") returned 1 [0151.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0c018 [0151.922] wcscpy (in: _Dest=0x3f0c018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.922] wcscat (in: _Dest=0x3f0c018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.922] wcscat (in: _Dest=0x3f0c018, _Source="de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0151.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0151.924] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0151.924] wcscmp (_String1="es_ES", _String2=".") returned 1 [0151.924] wcscmp (_String1="es_ES", _String2="..") returned 1 [0151.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0be38 [0151.924] wcscpy (in: _Dest=0x3f0be38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.924] wcscat (in: _Dest=0x3f0be38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.925] wcscat (in: _Dest=0x3f0be38, _Source="es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0151.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0be38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0151.926] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0151.926] wcscmp (_String1="eu_ES", _String2=".") returned 1 [0151.926] wcscmp (_String1="eu_ES", _String2="..") returned 1 [0151.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0c270 [0151.926] wcscpy (in: _Dest=0x3f0c270, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.926] wcscat (in: _Dest=0x3f0c270, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.927] wcscat (in: _Dest=0x3f0c270, _Source="eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0151.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0c270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0151.928] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0151.928] wcscmp (_String1="fi_FI", _String2=".") returned 1 [0151.928] wcscmp (_String1="fi_FI", _String2="..") returned 1 [0151.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0c180 [0151.928] wcscpy (in: _Dest=0x3f0c180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.928] wcscat (in: _Dest=0x3f0c180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.928] wcscat (in: _Dest=0x3f0c180, _Source="fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0151.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0151.929] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0151.929] wcscmp (_String1="fr_FR", _String2=".") returned 1 [0151.929] wcscmp (_String1="fr_FR", _String2="..") returned 1 [0151.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b898 [0151.929] wcscpy (in: _Dest=0x3f0b898, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.929] wcscat (in: _Dest=0x3f0b898, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.929] wcscat (in: _Dest=0x3f0b898, _Source="fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0151.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0b898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0151.931] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0151.931] wcscmp (_String1="hr_HR", _String2=".") returned 1 [0151.931] wcscmp (_String1="hr_HR", _String2="..") returned 1 [0151.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b3e8 [0151.931] wcscpy (in: _Dest=0x3f0b3e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.931] wcscat (in: _Dest=0x3f0b3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.931] wcscat (in: _Dest=0x3f0b3e8, _Source="hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0151.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0b3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0151.932] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0151.932] wcscmp (_String1="hu_HU", _String2=".") returned 1 [0151.932] wcscmp (_String1="hu_HU", _String2="..") returned 1 [0151.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0beb0 [0151.932] wcscpy (in: _Dest=0x3f0beb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.932] wcscat (in: _Dest=0x3f0beb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.932] wcscat (in: _Dest=0x3f0beb0, _Source="hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0151.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0beb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0151.934] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0151.934] wcscmp (_String1="it_IT", _String2=".") returned 1 [0151.934] wcscmp (_String1="it_IT", _String2="..") returned 1 [0151.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df8ad8 [0151.934] wcscpy (in: _Dest=0x3df8ad8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.934] wcscat (in: _Dest=0x3df8ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.934] wcscat (in: _Dest=0x3df8ad8, _Source="it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0151.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df8ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0151.935] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0151.935] wcscmp (_String1="ja_JP", _String2=".") returned 1 [0151.935] wcscmp (_String1="ja_JP", _String2="..") returned 1 [0151.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df8b50 [0151.935] wcscpy (in: _Dest=0x3df8b50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.935] wcscat (in: _Dest=0x3df8b50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.935] wcscat (in: _Dest=0x3df8b50, _Source="ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0151.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df8b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0151.936] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a4d900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0151.936] wcscmp (_String1="ko_KR", _String2=".") returned 1 [0151.936] wcscmp (_String1="ko_KR", _String2="..") returned 1 [0151.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df8a60 [0151.937] wcscpy (in: _Dest=0x3df8a60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.937] wcscat (in: _Dest=0x3df8a60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.937] wcscat (in: _Dest=0x3df8a60, _Source="ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0151.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df8a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0151.938] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0151.938] wcscmp (_String1="nb_NO", _String2=".") returned 1 [0151.938] wcscmp (_String1="nb_NO", _String2="..") returned 1 [0151.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df89e8 [0151.938] wcscpy (in: _Dest=0x3df89e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.938] wcscat (in: _Dest=0x3df89e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.938] wcscat (in: _Dest=0x3df89e8, _Source="nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0151.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df89e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0151.939] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda33ab80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0151.939] wcscmp (_String1="nl_NL", _String2=".") returned 1 [0151.939] wcscmp (_String1="nl_NL", _String2="..") returned 1 [0151.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e687e0 [0151.939] wcscpy (in: _Dest=0x3e687e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.939] wcscat (in: _Dest=0x3e687e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.939] wcscat (in: _Dest=0x3e687e0, _Source="nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0151.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e687e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0151.940] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0151.940] wcscmp (_String1="pl_PL", _String2=".") returned 1 [0151.940] wcscmp (_String1="pl_PL", _String2="..") returned 1 [0151.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68b28 [0151.940] wcscpy (in: _Dest=0x3e68b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.940] wcscat (in: _Dest=0x3e68b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.940] wcscat (in: _Dest=0x3e68b28, _Source="pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0151.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e68b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0151.941] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0151.941] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0151.942] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0151.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e689c0 [0151.942] wcscpy (in: _Dest=0x3e689c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.942] wcscat (in: _Dest=0x3e689c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.942] wcscat (in: _Dest=0x3e689c0, _Source="pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e689c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0151.943] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0151.943] wcscmp (_String1="ro_RO", _String2=".") returned 1 [0151.943] wcscmp (_String1="ro_RO", _String2="..") returned 1 [0151.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67ef8 [0151.943] wcscpy (in: _Dest=0x3e67ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.943] wcscat (in: _Dest=0x3e67ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.943] wcscat (in: _Dest=0x3e67ef8, _Source="ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0151.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e67ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0151.945] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0151.945] wcscmp (_String1="ru_RU", _String2=".") returned 1 [0151.945] wcscmp (_String1="ru_RU", _String2="..") returned 1 [0151.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67f70 [0151.945] wcscpy (in: _Dest=0x3e67f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.945] wcscat (in: _Dest=0x3e67f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.945] wcscat (in: _Dest=0x3e67f70, _Source="ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0151.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e67f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0151.946] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0151.946] wcscmp (_String1="sk_SK", _String2=".") returned 1 [0151.946] wcscmp (_String1="sk_SK", _String2="..") returned 1 [0151.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67e80 [0151.946] wcscpy (in: _Dest=0x3e67e80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.946] wcscat (in: _Dest=0x3e67e80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.946] wcscat (in: _Dest=0x3e67e80, _Source="sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0151.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e67e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0151.947] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0151.947] wcscmp (_String1="sl_SI", _String2=".") returned 1 [0151.947] wcscmp (_String1="sl_SI", _String2="..") returned 1 [0151.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67d90 [0151.947] wcscpy (in: _Dest=0x3e67d90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.948] wcscat (in: _Dest=0x3e67d90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.948] wcscat (in: _Dest=0x3e67d90, _Source="sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0151.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e67d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64 [0151.949] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0151.949] wcscmp (_String1="sv_SE", _String2=".") returned 1 [0151.949] wcscmp (_String1="sv_SE", _String2="..") returned 1 [0151.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68ba0 [0151.949] wcscpy (in: _Dest=0x3e68ba0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.949] wcscat (in: _Dest=0x3e68ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.949] wcscat (in: _Dest=0x3e68ba0, _Source="sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0151.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e68ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0151.950] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0151.950] wcscmp (_String1="tr_TR", _String2=".") returned 1 [0151.950] wcscmp (_String1="tr_TR", _String2="..") returned 1 [0151.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68ab0 [0151.950] wcscpy (in: _Dest=0x3e68ab0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.950] wcscat (in: _Dest=0x3e68ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.950] wcscat (in: _Dest=0x3e68ab0, _Source="tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0151.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e68ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0151.951] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0151.951] wcscmp (_String1="uk_UA", _String2=".") returned 1 [0151.951] wcscmp (_String1="uk_UA", _String2="..") returned 1 [0151.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68240 [0151.952] wcscpy (in: _Dest=0x3e68240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.952] wcscat (in: _Dest=0x3e68240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.952] wcscat (in: _Dest=0x3e68240, _Source="uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0151.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e68240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70 [0151.953] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9942f60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0151.953] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0151.953] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0151.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e682b8 [0151.953] wcscpy (in: _Dest=0x3e682b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.953] wcscat (in: _Dest=0x3e682b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.953] wcscat (in: _Dest=0x3e682b8, _Source="zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0151.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e682b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0151.955] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0151.955] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0151.955] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0151.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e680d8 [0151.955] wcscpy (in: _Dest=0x3e680d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0151.955] wcscat (in: _Dest=0x3e680d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0151.955] wcscat (in: _Dest=0x3e680d8, _Source="zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0151.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e680d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0152.502] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0153.758] FindClose (in: hFindFile=0x8099410 | out: hFindFile=0x8099410) returned 1 [0155.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091080) returned 1 [0155.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80551f0) returned 1 [0155.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054c40) returned 1 Thread: id = 790 os_tid = 0x136c [0138.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf")) returned 0x20 [0140.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", dwFileAttributes=0x20) returned 0 [0140.043] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.043] GetLastError () returned 0x5 [0140.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", dwFileAttributes=0x20) returned 0 [0140.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f309e0) returned 1 Thread: id = 791 os_tid = 0x1370 [0138.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0bb68 [0138.792] wcscpy (in: _Dest=0x3f0bb68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0138.792] wcscat (in: _Dest=0x3f0bb68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0138.792] wcscat (in: _Dest=0x3f0bb68, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*" [0138.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80912e8 [0138.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15eefa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfdd0 [0138.801] wcscmp (_String1=".", _String2=".") returned 0 [0138.801] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15eefa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.812] wcscmp (_String1="..", _String2=".") returned 1 [0138.812] wcscmp (_String1="..", _String2="..") returned 0 [0138.812] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ec63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="ACCESS~1.API")) returned 1 [0138.813] wcscmp (_String1="Accessibility.api", _String2=".") returned 1 [0138.813] wcscmp (_String1="Accessibility.api", _String2="..") returned 1 [0138.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a078 [0138.813] wcscpy (in: _Dest=0x3e2a078, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0138.813] wcscat (in: _Dest=0x3e2a078, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0138.813] wcscat (in: _Dest=0x3e2a078, _Source="Accessibility.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" [0141.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc0 [0141.476] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe138d9a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1425f20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1 [0141.478] wcscmp (_String1="AcroForm", _String2=".") returned 1 [0141.478] wcscmp (_String1="AcroForm", _String2="..") returned 1 [0141.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da61f0 [0141.478] wcscpy (in: _Dest=0x3da61f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.478] wcscat (in: _Dest=0x3da61f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.478] wcscat (in: _Dest=0x3da61f0, _Source="AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0141.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3da61f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0141.480] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe171faa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xae8a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1 [0141.480] wcscmp (_String1="AcroForm.api", _String2=".") returned 1 [0141.480] wcscmp (_String1="AcroForm.api", _String2="..") returned 1 [0141.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30518 [0141.480] wcscpy (in: _Dest=0x3f30518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.480] wcscat (in: _Dest=0x3f30518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.480] wcscat (in: _Dest=0x3f30518, _Source="AcroForm.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" [0141.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0141.481] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13d9c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x217e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSign.prc", cAlternateFileName="")) returned 1 [0141.481] wcscmp (_String1="AcroSign.prc", _String2=".") returned 1 [0141.481] wcscmp (_String1="AcroSign.prc", _String2="..") returned 1 [0141.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30490 [0141.482] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.482] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.482] wcscat (in: _Dest=0x3f30490, _Source="AcroSign.prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" [0141.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0141.483] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="ANNOTA~1")) returned 1 [0141.483] wcscmp (_String1="Annotations", _String2=".") returned 1 [0141.483] wcscmp (_String1="Annotations", _String2="..") returned 1 [0141.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30408 [0141.483] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.483] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.483] wcscat (in: _Dest=0x3f30408, _Source="Annotations" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" [0141.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0141.485] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5dbe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1 [0141.485] wcscmp (_String1="Annots.api", _String2=".") returned 1 [0141.485] wcscmp (_String1="Annots.api", _String2="..") returned 1 [0141.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30270 [0141.485] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.485] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.485] wcscat (in: _Dest=0x3f30270, _Source="Annots.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" [0141.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0141.486] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe150a760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd2463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1 [0141.486] wcscmp (_String1="Checkers.api", _String2=".") returned 1 [0141.486] wcscmp (_String1="Checkers.api", _String2="..") returned 1 [0141.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f301e8 [0141.486] wcscpy (in: _Dest=0x3f301e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.486] wcscat (in: _Dest=0x3f301e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.486] wcscat (in: _Dest=0x3f301e8, _Source="Checkers.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" [0141.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f301e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0141.488] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15de63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1 [0141.488] wcscmp (_String1="DigSig.api", _String2=".") returned 1 [0141.488] wcscmp (_String1="DigSig.api", _String2="..") returned 1 [0141.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30160 [0141.488] wcscpy (in: _Dest=0x3f30160, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.488] wcscat (in: _Dest=0x3f30160, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.488] wcscat (in: _Dest=0x3f30160, _Source="DigSig.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" [0141.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0141.489] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1 [0141.489] wcscmp (_String1="DVA.api", _String2=".") returned 1 [0141.489] wcscmp (_String1="DVA.api", _String2="..") returned 1 [0141.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5288 [0141.489] wcscpy (in: _Dest=0x3dc5288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.489] wcscat (in: _Dest=0x3dc5288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.489] wcscat (in: _Dest=0x3dc5288, _Source="DVA.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" [0141.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0141.490] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd063, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1 [0141.490] wcscmp (_String1="eBook.api", _String2=".") returned 1 [0141.490] wcscmp (_String1="eBook.api", _String2="..") returned 1 [0141.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f300d8 [0141.491] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.491] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.491] wcscat (in: _Dest=0x3f300d8, _Source="eBook.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" [0141.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x157c [0141.492] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13d9c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ab863, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1 [0141.492] wcscmp (_String1="EScript.api", _String2=".") returned 1 [0141.492] wcscmp (_String1="EScript.api", _String2="..") returned 1 [0141.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30050 [0141.492] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.492] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.492] wcscat (in: _Dest=0x3f30050, _Source="EScript.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" [0141.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0141.493] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18463, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1 [0141.493] wcscmp (_String1="IA32.api", _String2=".") returned 1 [0141.493] wcscmp (_String1="IA32.api", _String2="..") returned 1 [0141.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5808 [0141.494] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.494] wcscat (in: _Dest=0x3dc5808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.494] wcscat (in: _Dest=0x3dc5808, _Source="IA32.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" [0141.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1584 [0141.495] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6809c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x234a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="MAKEAC~1.API")) returned 1 [0141.495] wcscmp (_String1="MakeAccessible.api", _String2=".") returned 1 [0141.495] wcscmp (_String1="MakeAccessible.api", _String2="..") returned 1 [0141.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c118 [0141.495] wcscpy (in: _Dest=0x3e3c118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.495] wcscat (in: _Dest=0x3e3c118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.495] wcscat (in: _Dest=0x3e3c118, _Source="MakeAccessible.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" [0141.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1588 [0141.496] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="MULTIM~1")) returned 1 [0141.496] wcscmp (_String1="Multimedia", _String2=".") returned 1 [0141.496] wcscmp (_String1="Multimedia", _String2="..") returned 1 [0141.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2ffc8 [0141.496] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.496] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.496] wcscat (in: _Dest=0x3f2ffc8, _Source="Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0141.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c [0141.498] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98aa9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x174c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1 [0141.498] wcscmp (_String1="Multimedia.api", _String2=".") returned 1 [0141.498] wcscmp (_String1="Multimedia.api", _String2="..") returned 1 [0141.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f352e0 [0141.498] wcscpy (in: _Dest=0x3f352e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.498] wcscat (in: _Dest=0x3f352e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.498] wcscat (in: _Dest=0x3f352e0, _Source="Multimedia.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" [0141.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f352e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0141.499] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1 [0141.499] wcscmp (_String1="PDDom.api", _String2=".") returned 1 [0141.499] wcscmp (_String1="PDDom.api", _String2="..") returned 1 [0141.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2ff40 [0141.499] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.499] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.499] wcscat (in: _Dest=0x3f2ff40, _Source="PDDom.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" [0141.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0141.500] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe150a760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x73f263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.api", cAlternateFileName="")) returned 1 [0141.500] wcscmp (_String1="PPKLite.api", _String2=".") returned 1 [0141.501] wcscmp (_String1="PPKLite.api", _String2="..") returned 1 [0141.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f306b0 [0141.501] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.501] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.501] wcscat (in: _Dest=0x3f306b0, _Source="PPKLite.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" [0141.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598 [0141.502] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe150a760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b663, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.api", cAlternateFileName="READOU~1.API")) returned 1 [0141.502] wcscmp (_String1="ReadOutLoud.api", _String2=".") returned 1 [0141.502] wcscmp (_String1="ReadOutLoud.api", _String2="..") returned 1 [0141.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34e60 [0141.502] wcscpy (in: _Dest=0x3f34e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.502] wcscat (in: _Dest=0x3f34e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.502] wcscat (in: _Dest=0x3f34e60, _Source="ReadOutLoud.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" [0141.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x159c [0141.503] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x54e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.api", cAlternateFileName="")) returned 1 [0141.504] wcscmp (_String1="reflow.api", _String2=".") returned 1 [0141.504] wcscmp (_String1="reflow.api", _String2="..") returned 1 [0141.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30380 [0141.504] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.504] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.504] wcscat (in: _Dest=0x3f30380, _Source="reflow.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" [0141.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0141.505] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63263, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.api", cAlternateFileName="SAVEAS~1.API")) returned 1 [0141.505] wcscmp (_String1="SaveAsRTF.api", _String2=".") returned 1 [0141.505] wcscmp (_String1="SaveAsRTF.api", _String2="..") returned 1 [0141.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35760 [0141.505] wcscpy (in: _Dest=0x3f35760, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.505] wcscat (in: _Dest=0x3f35760, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.505] wcscat (in: _Dest=0x3f35760, _Source="SaveAsRTF.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" [0141.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a4 [0141.506] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9884880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.api", cAlternateFileName="")) returned 1 [0141.506] wcscmp (_String1="Search.api", _String2=".") returned 1 [0141.506] wcscmp (_String1="Search.api", _String2="..") returned 1 [0141.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f307c0 [0141.506] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.506] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.506] wcscat (in: _Dest=0x3f307c0, _Source="Search.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" [0141.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0141.507] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13b3b00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.api", cAlternateFileName="")) returned 1 [0141.507] wcscmp (_String1="SendMail.api", _String2=".") returned 1 [0141.507] wcscmp (_String1="SendMail.api", _String2="..") returned 1 [0141.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fe30 [0141.508] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.508] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.508] wcscat (in: _Dest=0x3f2fe30, _Source="SendMail.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" [0141.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0141.509] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.api", cAlternateFileName="")) returned 1 [0141.509] wcscmp (_String1="Spelling.api", _String2=".") returned 1 [0141.509] wcscmp (_String1="Spelling.api", _String2="..") returned 1 [0141.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0141.509] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.509] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.509] wcscat (in: _Dest=0x3f310c8, _Source="Spelling.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" [0141.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0141.510] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x29463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.api", cAlternateFileName="")) returned 1 [0141.511] wcscmp (_String1="Updater.api", _String2=".") returned 1 [0141.511] wcscmp (_String1="Updater.api", _String2="..") returned 1 [0141.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8052f50 [0141.511] wcscpy (in: _Dest=0x8052f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.511] wcscat (in: _Dest=0x8052f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.511] wcscat (in: _Dest=0x8052f50, _Source="Updater.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" [0141.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8052f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4 [0141.512] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 1 [0141.512] wcscmp (_String1="weblink.api", _String2=".") returned 1 [0141.512] wcscmp (_String1="weblink.api", _String2="..") returned 1 [0141.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8054160 [0141.512] wcscpy (in: _Dest=0x8054160, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0141.512] wcscat (in: _Dest=0x8054160, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0141.512] wcscat (in: _Dest=0x8054160, _Source="weblink.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" [0141.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0142.513] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 0 [0143.411] FindClose (in: hFindFile=0x3dcfdd0 | out: hFindFile=0x3dcfdd0) returned 1 [0144.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80912e8) returned 1 [0144.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bb68) returned 1 [0144.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054e00) returned 1 Thread: id = 792 os_tid = 0x1374 [0138.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b3e8 [0138.814] wcscpy (in: _Dest=0x3f0b3e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0138.814] wcscat (in: _Dest=0x3f0b3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0138.814] wcscat (in: _Dest=0x3f0b3e8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*" [0138.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091550 [0138.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab435c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac9a220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099490 [0140.959] wcscmp (_String1=".", _String2=".") returned 0 [0140.959] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab435c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac9a220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.959] wcscmp (_String1="..", _String2=".") returned 1 [0140.959] wcscmp (_String1="..", _String2="..") returned 0 [0140.959] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac740c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x86988, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0140.959] wcscmp (_String1="2d.x3d", _String2=".") returned 1 [0140.959] wcscmp (_String1="2d.x3d", _String2="..") returned 1 [0140.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4b08 [0140.959] wcscpy (in: _Dest=0x3dc4b08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0140.959] wcscat (in: _Dest=0x3dc4b08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0140.959] wcscat (in: _Dest=0x3dc4b08, _Source="2d.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" [0148.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0148.160] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac4df60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0148.160] wcscmp (_String1="3difr.x3d", _String2=".") returned 1 [0148.160] wcscmp (_String1="3difr.x3d", _String2="..") returned 1 [0148.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8054628 [0148.160] wcscpy (in: _Dest=0x8054628, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0148.160] wcscat (in: _Dest=0x8054628, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0148.160] wcscat (in: _Dest=0x8054628, _Source="3difr.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" [0148.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0148.161] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac4df60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX8.x3d", cAlternateFileName="")) returned 1 [0148.161] wcscmp (_String1="drvDX8.x3d", _String2=".") returned 1 [0148.161] wcscmp (_String1="drvDX8.x3d", _String2="..") returned 1 [0148.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053418 [0148.162] wcscpy (in: _Dest=0x8053418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0148.162] wcscat (in: _Dest=0x8053418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0148.162] wcscat (in: _Dest=0x8053418, _Source="drvDX8.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" [0148.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0148.163] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac27e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc6f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0148.163] wcscmp (_String1="drvDX9.x3d", _String2=".") returned 1 [0148.163] wcscmp (_String1="drvDX9.x3d", _String2="..") returned 1 [0148.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80540d8 [0148.163] wcscpy (in: _Dest=0x80540d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0148.163] wcscat (in: _Dest=0x80540d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0148.163] wcscat (in: _Dest=0x80540d8, _Source="drvDX9.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" [0148.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80540d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0148.164] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x35190, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0148.164] wcscmp (_String1="drvSOFT.x3d", _String2=".") returned 1 [0148.164] wcscmp (_String1="drvSOFT.x3d", _String2="..") returned 1 [0148.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f36210 [0148.164] wcscpy (in: _Dest=0x3f36210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0148.165] wcscat (in: _Dest=0x3f36210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0148.165] wcscat (in: _Dest=0x3f36210, _Source="drvSOFT.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" [0148.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0148.171] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac01ca0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac01ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0148.171] wcscmp (_String1="prc", _String2=".") returned 1 [0148.171] wcscmp (_String1="prc", _String2="..") returned 1 [0148.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5608 [0148.171] wcscpy (in: _Dest=0x3dc5608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0148.171] wcscat (in: _Dest=0x3dc5608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0148.171] wcscat (in: _Dest=0x3dc5608, _Source="prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" [0148.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0148.172] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad0c640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x301190, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0148.173] wcscmp (_String1="prcr.x3d", _String2=".") returned 1 [0148.173] wcscmp (_String1="prcr.x3d", _String2="..") returned 1 [0148.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053c10 [0148.173] wcscpy (in: _Dest=0x8053c10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0148.173] wcscat (in: _Dest=0x8053c10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0148.173] wcscat (in: _Dest=0x8053c10, _Source="prcr.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" [0148.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0148.174] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1 [0148.174] wcscmp (_String1="tesselate.x3d", _String2=".") returned 1 [0148.174] wcscmp (_String1="tesselate.x3d", _String2="..") returned 1 [0148.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f36180 [0148.174] wcscpy (in: _Dest=0x3f36180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0148.174] wcscat (in: _Dest=0x3f36180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0148.174] wcscat (in: _Dest=0x3f36180, _Source="tesselate.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" [0148.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0148.176] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 0 [0148.176] FindClose (in: hFindFile=0x8099490 | out: hFindFile=0x8099490) returned 1 [0148.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091550) returned 1 [0148.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0148.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0baf0) returned 1 Thread: id = 793 os_tid = 0x1378 [0138.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pmd.cer")) returned 0x20 [0140.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer", dwFileAttributes=0x20) returned 0 [0140.036] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pmd.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.036] GetLastError () returned 0x5 [0140.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer", dwFileAttributes=0x20) returned 0 [0140.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054ee0) returned 1 Thread: id = 794 os_tid = 0x137c [0138.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\rtc.der")) returned 0x20 [0139.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der", dwFileAttributes=0x20) returned 0 [0139.221] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\rtc.der"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.222] GetLastError () returned 0x5 [0139.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der", dwFileAttributes=0x20) returned 0 [0139.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054d20) returned 1 Thread: id = 795 os_tid = 0x1380 [0138.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0bbe0 [0138.815] wcscpy (in: _Dest=0x3f0bbe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0138.815] wcscat (in: _Dest=0x3f0bbe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\" [0138.815] wcscat (in: _Dest=0x3f0bbe0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\*" [0138.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80917b8 [0138.816] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd80b3a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd80b3a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0140.037] wcscmp (_String1=".", _String2=".") returned 0 [0140.037] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd80b3a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd80b3a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.038] wcscmp (_String1="..", _String2=".") returned 1 [0140.038] wcscmp (_String1="..", _String2="..") returned 0 [0140.038] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.spi", cAlternateFileName="")) returned 1 [0140.038] wcscmp (_String1="DEXShare.spi", _String2=".") returned 1 [0140.038] wcscmp (_String1="DEXShare.spi", _String2="..") returned 1 [0140.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053da8 [0140.038] wcscpy (in: _Dest=0x8053da8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0140.038] wcscat (in: _Dest=0x8053da8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\" [0140.038] wcscat (in: _Dest=0x8053da8, _Source="DEXShare.spi" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" [0144.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4 [0144.556] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 1 [0144.556] wcscmp (_String1="Services.cfg", _String2=".") returned 1 [0144.556] wcscmp (_String1="Services.cfg", _String2="..") returned 1 [0144.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eb40 [0144.556] wcscpy (in: _Dest=0x3e1eb40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0144.556] wcscat (in: _Dest=0x3e1eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\" [0144.556] wcscat (in: _Dest=0x3e1eb40, _Source="Services.cfg" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" [0144.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0144.557] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 0 [0144.557] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0144.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80917b8) returned 1 [0144.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bbe0) returned 1 [0144.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054f50) returned 1 Thread: id = 796 os_tid = 0x1384 [0138.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0c180 [0138.887] wcscpy (in: _Dest=0x3f0c180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" [0138.887] wcscat (in: _Dest=0x3f0c180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\" [0138.887] wcscat (in: _Dest=0x3f0c180, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*" [0138.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0138.888] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc630ea0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc630ea0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0140.038] wcscmp (_String1=".", _String2=".") returned 0 [0140.038] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc630ea0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc630ea0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.038] wcscmp (_String1="..", _String2=".") returned 1 [0140.038] wcscmp (_String1="..", _String2="..") returned 0 [0140.038] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc657000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 1 [0140.039] wcscmp (_String1="ADMPlugin.apl", _String2=".") returned 1 [0140.039] wcscmp (_String1="ADMPlugin.apl", _String2="..") returned 1 [0140.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355200 [0140.039] wcscpy (in: _Dest=0x355200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" [0140.039] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\" [0140.039] wcscat (in: _Dest=0x355200, _Source="ADMPlugin.apl" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" [0145.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0145.057] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc657000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 0 [0145.057] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0145.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0145.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c180) returned 1 [0145.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054fc0) returned 1 Thread: id = 797 os_tid = 0x1388 [0138.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f399a8 [0138.893] wcscpy (in: _Dest=0x3f399a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0138.893] wcscat (in: _Dest=0x3f399a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0138.893] wcscat (in: _Dest=0x3f399a8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\*" [0138.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0138.893] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc92aa20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc9c2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099310 [0140.954] wcscmp (_String1=".", _String2=".") returned 0 [0140.954] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc92aa20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc9c2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.799] wcscmp (_String1="..", _String2=".") returned 1 [0142.799] wcscmp (_String1="..", _String2="..") returned 0 [0142.799] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1 [0142.799] wcscmp (_String1="add_reviewer.gif", _String2=".") returned 1 [0142.799] wcscmp (_String1="add_reviewer.gif", _String2="..") returned 1 [0142.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34ef0 [0142.799] wcscpy (in: _Dest=0x3f34ef0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.799] wcscat (in: _Dest=0x3f34ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.799] wcscat (in: _Dest=0x3f34ef0, _Source="add_reviewer.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" [0144.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1400 [0144.585] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0144.585] wcscmp (_String1="bl.gif", _String2=".") returned 1 [0144.586] wcscmp (_String1="bl.gif", _String2="..") returned 1 [0144.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x2fcab08 [0144.586] wcscpy (in: _Dest=0x2fcab08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.586] wcscat (in: _Dest=0x2fcab08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.586] wcscat (in: _Dest=0x2fcab08, _Source="bl.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" [0144.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fcab08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48 [0144.587] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0144.587] wcscmp (_String1="br.gif", _String2=".") returned 1 [0144.587] wcscmp (_String1="br.gif", _String2="..") returned 1 [0144.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x290300 [0144.587] wcscpy (in: _Dest=0x290300, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.587] wcscat (in: _Dest=0x290300, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.587] wcscat (in: _Dest=0x290300, _Source="br.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" [0144.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x290300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1070 [0144.589] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="CREATE~1.GIF")) returned 1 [0144.589] wcscmp (_String1="create_form.gif", _String2=".") returned 1 [0144.589] wcscmp (_String1="create_form.gif", _String2="..") returned 1 [0144.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1858 [0144.589] wcscpy (in: _Dest=0x3eb1858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.589] wcscat (in: _Dest=0x3eb1858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.589] wcscat (in: _Dest=0x3eb1858, _Source="create_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" [0144.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0144.591] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="DISTRI~1.GIF")) returned 1 [0144.591] wcscmp (_String1="distribute_form.gif", _String2=".") returned 1 [0144.591] wcscmp (_String1="distribute_form.gif", _String2="..") returned 1 [0144.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bce0 [0144.591] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.591] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.591] wcscat (in: _Dest=0x32bce0, _Source="distribute_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" [0144.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8 [0144.593] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="EMAIL_~2.GIF")) returned 1 [0144.593] wcscmp (_String1="email_all.gif", _String2=".") returned 1 [0144.593] wcscmp (_String1="email_all.gif", _String2="..") returned 1 [0144.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0144.593] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.593] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.593] wcscat (in: _Dest=0x36e500, _Source="email_all.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" [0144.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28 [0144.594] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="EMAIL_~1.GIF")) returned 1 [0144.594] wcscmp (_String1="email_initiator.gif", _String2=".") returned 1 [0144.594] wcscmp (_String1="email_initiator.gif", _String2="..") returned 1 [0144.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bd78 [0144.594] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.594] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.594] wcscat (in: _Dest=0x32bd78, _Source="email_initiator.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" [0144.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0144.596] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="ENDED_~1.GIF")) returned 1 [0144.596] wcscmp (_String1="ended_review_or_form.gif", _String2=".") returned 1 [0144.596] wcscmp (_String1="ended_review_or_form.gif", _String2="..") returned 1 [0144.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7238 [0144.596] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.596] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.596] wcscat (in: _Dest=0x2c7238, _Source="ended_review_or_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" [0144.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40 [0144.597] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="END_RE~1.GIF")) returned 1 [0144.597] wcscmp (_String1="end_review.gif", _String2=".") returned 1 [0144.597] wcscmp (_String1="end_review.gif", _String2="..") returned 1 [0144.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb18e8 [0144.598] wcscpy (in: _Dest=0x3eb18e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.598] wcscat (in: _Dest=0x3eb18e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.598] wcscat (in: _Dest=0x3eb18e8, _Source="end_review.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" [0144.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb18e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0144.600] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="FORMS_~1.GIF")) returned 1 [0144.600] wcscmp (_String1="forms_distributed.gif", _String2=".") returned 1 [0144.600] wcscmp (_String1="forms_distributed.gif", _String2="..") returned 1 [0144.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cbb8 [0144.600] wcscpy (in: _Dest=0x32cbb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.600] wcscat (in: _Dest=0x32cbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.600] wcscat (in: _Dest=0x32cbb8, _Source="forms_distributed.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" [0144.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0144.602] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="FORMS_~3.GIF")) returned 1 [0144.602] wcscmp (_String1="forms_received.gif", _String2=".") returned 1 [0144.602] wcscmp (_String1="forms_received.gif", _String2="..") returned 1 [0144.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cb20 [0144.602] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.602] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.602] wcscat (in: _Dest=0x32cb20, _Source="forms_received.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" [0144.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0144.603] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="FORMS_~2.GIF")) returned 1 [0144.604] wcscmp (_String1="forms_super.gif", _String2=".") returned 1 [0144.604] wcscmp (_String1="forms_super.gif", _String2="..") returned 1 [0144.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1a08 [0144.604] wcscpy (in: _Dest=0x3eb1a08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.604] wcscat (in: _Dest=0x3eb1a08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.604] wcscat (in: _Dest=0x3eb1a08, _Source="forms_super.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" [0144.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0144.605] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="FORM_R~1.GIF")) returned 1 [0144.605] wcscmp (_String1="form_responses.gif", _String2=".") returned 1 [0144.605] wcscmp (_String1="form_responses.gif", _String2="..") returned 1 [0144.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cc50 [0144.605] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.605] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.605] wcscat (in: _Dest=0x32cc50, _Source="form_responses.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" [0144.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0144.607] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0144.607] wcscmp (_String1="info.gif", _String2=".") returned 1 [0144.607] wcscmp (_String1="info.gif", _String2="..") returned 1 [0144.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x30911e0 [0144.607] wcscpy (in: _Dest=0x30911e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.607] wcscat (in: _Dest=0x30911e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.607] wcscat (in: _Dest=0x30911e0, _Source="info.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" [0144.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x30911e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0144.609] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0144.609] wcscmp (_String1="main.css", _String2=".") returned 1 [0144.609] wcscmp (_String1="main.css", _String2="..") returned 1 [0144.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x303290 [0144.609] wcscpy (in: _Dest=0x303290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.609] wcscat (in: _Dest=0x303290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.609] wcscat (in: _Dest=0x303290, _Source="main.css" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" [0144.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x303290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1404 [0144.611] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="OPEN_O~1.GIF")) returned 1 [0144.611] wcscmp (_String1="open_original_form.gif", _String2=".") returned 1 [0144.611] wcscmp (_String1="open_original_form.gif", _String2="..") returned 1 [0144.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7698 [0144.611] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.611] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.611] wcscat (in: _Dest=0x2c7698, _Source="open_original_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" [0144.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0144.612] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0144.612] wcscmp (_String1="pdf.gif", _String2=".") returned 1 [0144.613] wcscmp (_String1="pdf.gif", _String2="..") returned 1 [0144.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a458 [0144.613] wcscpy (in: _Dest=0x831a458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.613] wcscat (in: _Dest=0x831a458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.613] wcscat (in: _Dest=0x831a458, _Source="pdf.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" [0144.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0144.614] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="REVIEW~4.GIF")) returned 1 [0144.614] wcscmp (_String1="reviewers.gif", _String2=".") returned 1 [0144.614] wcscmp (_String1="reviewers.gif", _String2="..") returned 1 [0144.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0144.615] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.615] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.615] wcscat (in: _Dest=0x36ecf8, _Source="reviewers.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" [0144.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0144.616] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="RE99D5~1.GIF")) returned 1 [0144.616] wcscmp (_String1="reviews_joined.gif", _String2=".") returned 1 [0144.616] wcscmp (_String1="reviews_joined.gif", _String2="..") returned 1 [0144.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c8c0 [0144.616] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.616] wcscat (in: _Dest=0x32c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.616] wcscat (in: _Dest=0x32c8c0, _Source="reviews_joined.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" [0144.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0144.618] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="RECDE7~1.GIF")) returned 1 [0144.618] wcscmp (_String1="reviews_sent.gif", _String2=".") returned 1 [0144.618] wcscmp (_String1="reviews_sent.gif", _String2="..") returned 1 [0144.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1a98 [0144.618] wcscpy (in: _Dest=0x3eb1a98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.618] wcscat (in: _Dest=0x3eb1a98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.618] wcscat (in: _Dest=0x3eb1a98, _Source="reviews_sent.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" [0144.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0144.620] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="RE1558~1.GIF")) returned 1 [0144.620] wcscmp (_String1="reviews_super.gif", _String2=".") returned 1 [0144.620] wcscmp (_String1="reviews_super.gif", _String2="..") returned 1 [0144.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1b28 [0144.620] wcscpy (in: _Dest=0x3eb1b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0144.620] wcscat (in: _Dest=0x3eb1b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0144.620] wcscat (in: _Dest=0x3eb1b28, _Source="reviews_super.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" [0144.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0145.107] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="REVIEW~3.GIF")) returned 1 [0145.107] wcscmp (_String1="review_browser.gif", _String2=".") returned 1 [0145.107] wcscmp (_String1="review_browser.gif", _String2="..") returned 1 [0145.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c708 [0145.107] wcscpy (in: _Dest=0x3e3c708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0145.107] wcscat (in: _Dest=0x3e3c708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0145.107] wcscat (in: _Dest=0x3e3c708, _Source="review_browser.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" [0149.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0149.489] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="REVIEW~2.GIF")) returned 1 [0149.489] wcscmp (_String1="review_email.gif", _String2=".") returned 1 [0149.489] wcscmp (_String1="review_email.gif", _String2="..") returned 1 [0149.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2428 [0149.489] wcscpy (in: _Dest=0x3eb2428, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.489] wcscat (in: _Dest=0x3eb2428, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.489] wcscat (in: _Dest=0x3eb2428, _Source="review_email.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" [0149.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0149.490] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="RE78D9~1.GIF")) returned 1 [0149.490] wcscmp (_String1="review_same_reviewers.gif", _String2=".") returned 1 [0149.490] wcscmp (_String1="review_same_reviewers.gif", _String2="..") returned 1 [0149.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e10608 [0149.491] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.491] wcscat (in: _Dest=0x3e10608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.491] wcscat (in: _Dest=0x3e10608, _Source="review_same_reviewers.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" [0149.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0149.492] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="REVIEW~1.GIF")) returned 1 [0149.492] wcscmp (_String1="review_shared.gif", _String2=".") returned 1 [0149.492] wcscmp (_String1="review_shared.gif", _String2="..") returned 1 [0149.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb26f8 [0149.492] wcscpy (in: _Dest=0x3eb26f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.492] wcscat (in: _Dest=0x3eb26f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.492] wcscat (in: _Dest=0x3eb26f8, _Source="review_shared.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" [0149.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb26f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0149.495] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0149.495] wcscmp (_String1="rss.gif", _String2=".") returned 1 [0149.495] wcscmp (_String1="rss.gif", _String2="..") returned 1 [0149.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5988 [0149.495] wcscpy (in: _Dest=0x3dc5988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.495] wcscat (in: _Dest=0x3dc5988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.495] wcscat (in: _Dest=0x3dc5988, _Source="rss.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" [0149.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0149.496] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="SERVER~3.GIF")) returned 1 [0149.496] wcscmp (_String1="server_issue.gif", _String2=".") returned 1 [0149.496] wcscmp (_String1="server_issue.gif", _String2="..") returned 1 [0149.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1978 [0149.496] wcscpy (in: _Dest=0x3eb1978, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.496] wcscat (in: _Dest=0x3eb1978, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.496] wcscat (in: _Dest=0x3eb1978, _Source="server_issue.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" [0149.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0149.497] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="SERVER~1.GIF")) returned 1 [0149.498] wcscmp (_String1="server_lg.gif", _String2=".") returned 1 [0149.498] wcscmp (_String1="server_lg.gif", _String2="..") returned 1 [0149.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fc40 [0149.498] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.498] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.498] wcscat (in: _Dest=0x3e1fc40, _Source="server_lg.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" [0149.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0149.499] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="SERVER~2.GIF")) returned 1 [0149.499] wcscmp (_String1="server_ok.gif", _String2=".") returned 1 [0149.499] wcscmp (_String1="server_ok.gif", _String2="..") returned 1 [0149.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ede8 [0149.499] wcscpy (in: _Dest=0x3e1ede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.499] wcscat (in: _Dest=0x3e1ede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.499] wcscat (in: _Dest=0x3e1ede8, _Source="server_ok.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" [0149.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0149.500] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="STOP_C~1.GIF")) returned 1 [0149.500] wcscmp (_String1="stop_collection_data.gif", _String2=".") returned 1 [0149.500] wcscmp (_String1="stop_collection_data.gif", _String2="..") returned 1 [0149.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11788 [0149.500] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.500] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.500] wcscat (in: _Dest=0x3e11788, _Source="stop_collection_data.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" [0149.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0149.501] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="SUBMIS~1.GIF")) returned 1 [0149.501] wcscmp (_String1="submission_history.gif", _String2=".") returned 1 [0149.501] wcscmp (_String1="submission_history.gif", _String2="..") returned 1 [0149.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11fa8 [0149.501] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.501] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.501] wcscat (in: _Dest=0x3e11fa8, _Source="submission_history.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" [0149.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0149.502] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1 [0149.502] wcscmp (_String1="tl.gif", _String2=".") returned 1 [0149.502] wcscmp (_String1="tl.gif", _String2="..") returned 1 [0149.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4d08 [0149.502] wcscpy (in: _Dest=0x3dc4d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.502] wcscat (in: _Dest=0x3dc4d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.502] wcscat (in: _Dest=0x3dc4d08, _Source="tl.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" [0149.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0149.503] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1 [0149.503] wcscmp (_String1="tr.gif", _String2=".") returned 1 [0149.503] wcscmp (_String1="tr.gif", _String2="..") returned 1 [0149.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5308 [0149.504] wcscpy (in: _Dest=0x3dc5308, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.504] wcscat (in: _Dest=0x3dc5308, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.504] wcscat (in: _Dest=0x3dc5308, _Source="tr.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" [0149.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0149.505] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1 [0149.505] wcscmp (_String1="trash.gif", _String2=".") returned 1 [0149.505] wcscmp (_String1="trash.gif", _String2="..") returned 1 [0149.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5808 [0149.505] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.505] wcscat (in: _Dest=0x3dc5808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.505] wcscat (in: _Dest=0x3dc5808, _Source="trash.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" [0149.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0149.506] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="TURNOF~2.GIF")) returned 1 [0149.506] wcscmp (_String1="turnOffNotificationInAcrobat.gif", _String2=".") returned 1 [0149.506] wcscmp (_String1="turnOffNotificationInAcrobat.gif", _String2="..") returned 1 [0149.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bea8 [0149.506] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.506] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.506] wcscat (in: _Dest=0x35bea8, _Source="turnOffNotificationInAcrobat.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" [0149.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0149.507] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="TURNOF~1.GIF")) returned 1 [0149.507] wcscmp (_String1="turnOffNotificationInTray.gif", _String2=".") returned 1 [0149.507] wcscmp (_String1="turnOffNotificationInTray.gif", _String2="..") returned 1 [0149.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187568 [0149.508] wcscpy (in: _Dest=0x8187568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.508] wcscat (in: _Dest=0x8187568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.508] wcscat (in: _Dest=0x8187568, _Source="turnOffNotificationInTray.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" [0149.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0149.509] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="TURNON~2.GIF")) returned 1 [0149.509] wcscmp (_String1="turnOnNotificationInAcrobat.gif", _String2=".") returned 1 [0149.509] wcscmp (_String1="turnOnNotificationInAcrobat.gif", _String2="..") returned 1 [0149.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c008 [0149.509] wcscpy (in: _Dest=0x35c008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.509] wcscat (in: _Dest=0x35c008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.509] wcscat (in: _Dest=0x35c008, _Source="turnOnNotificationInAcrobat.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" [0149.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0149.510] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="TURNON~1.GIF")) returned 1 [0149.510] wcscmp (_String1="turnOnNotificationInTray.gif", _String2=".") returned 1 [0149.510] wcscmp (_String1="turnOnNotificationInTray.gif", _String2="..") returned 1 [0149.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186650 [0149.510] wcscpy (in: _Dest=0x8186650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.510] wcscat (in: _Dest=0x8186650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.510] wcscat (in: _Dest=0x8186650, _Source="turnOnNotificationInTray.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" [0149.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0149.511] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1 [0149.511] wcscmp (_String1="warning.gif", _String2=".") returned 1 [0149.511] wcscmp (_String1="warning.gif", _String2="..") returned 1 [0149.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1eef8 [0149.512] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0149.512] wcscat (in: _Dest=0x3e1eef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0149.512] wcscat (in: _Dest=0x3e1eef8, _Source="warning.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" [0149.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0149.513] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 0 [0149.513] FindClose (in: hFindFile=0x8099310 | out: hFindFile=0x8099310) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f399a8) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39468) returned 1 Thread: id = 798 os_tid = 0x138c [0138.894] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\blackbox.bin")) returned 0x2026 [0140.946] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin", dwFileAttributes=0x20) returned 1 [0142.800] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\blackbox.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15c8 [0142.800] GetFileSizeEx (in: hFile=0x15c8, lpFileSize=0x95bfa58 | out: lpFileSize=0x95bfa58*=20) returned 1 [0142.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0142.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0142.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0142.800] NtQuerySystemTime (in: CurrentTime=0x95bf9e0 | out: CurrentTime=0x95bf9e0*=132471540113700000) returned 0x0 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x2681e4 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x2b0cd3c4 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x7b095bbf [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x27db0e81 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x56e544c1 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x4c0c002f [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x6c11793e [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x562a83a0 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x99d462c [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x4c23d963 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x6ca0d3f7 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x1e778b5d [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x12923df1 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x729c6363 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x43c76742 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x2f8f4aac [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x1896ae76 [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x6dba225a [0142.800] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x271888d7 [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x43d5fac4 [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x6f256a7c [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x76acb811 [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x69d295e1 [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x7c3c0878 [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0xd88ebae [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x4e758163 [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x7012db9d [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x6ac3e443 [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x2727fc6b [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x710102bd [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x22330efb [0142.801] RtlRandomEx (in: Seed=0x95bf9d8 | out: Seed=0x95bf9d8) returned 0x72af0514 [0142.810] ReadFile (in: hFile=0x15c8, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x14, lpNumberOfBytesRead=0x95bf9d4, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0x95bf9d4*=0x14, lpOverlapped=0x0) returned 1 [0142.812] SetFilePointerEx (in: hFile=0x15c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.812] WriteFile (in: hFile=0x15c8, lpBuffer=0x8253870*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x95bf9d8, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesWritten=0x95bf9d8*=0x14, lpOverlapped=0x0) returned 1 [0143.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0143.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0143.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0143.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0143.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0143.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0143.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a110) returned 1 [0143.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6ff18 [0143.283] SetFilePointerEx (in: hFile=0x15c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.283] WriteFile (in: hFile=0x15c8, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x95bfa4c, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0x95bfa4c*=0x10a, lpOverlapped=0x0) returned 1 [0143.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0143.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff78) returned 1 [0143.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0143.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff18) returned 1 [0143.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0143.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0143.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0143.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb40) returned 1 [0143.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e23ec0 [0143.613] wcscpy (in: _Dest=0x3e23ec0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" [0143.613] wcscat (in: _Dest=0x3e23ec0, _Source=".f0dbec" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin.f0dbec") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin.f0dbec" [0143.613] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin.f0dbec", NtPathName=0x95bf9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1078 [0144.071] FlushFileBuffers (hFile=0x15c8) returned 1 [0144.074] CloseHandle (hObject=0x15c8) returned 1 [0144.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0be38 [0144.077] wcscpy (in: _Dest=0x3f0be38, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0144.077] wcscat (in: _Dest=0x3f0be38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt" [0144.077] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\f0dbec-readme.txt")) returned 0xffffffff [0144.077] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c8 [0144.077] WriteFile (in: hFile=0x15c8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x95bf9f4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x95bf9f4*=0x70c, lpOverlapped=0x0) returned 1 [0144.079] CloseHandle (hObject=0x15c8) returned 1 [0144.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0be38) returned 1 [0144.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f341c8) returned 1 Thread: id = 799 os_tid = 0x1390 [0138.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ecdd68 [0138.895] wcscpy (in: _Dest=0x3ecdd68, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache" [0138.895] wcscat (in: _Dest=0x3ecdd68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\" [0138.895] wcscat (in: _Dest=0x3ecdd68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*" [0138.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0138.895] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0141.078] wcscmp (_String1=".", _String2=".") returned 0 [0141.078] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.078] wcscmp (_String1="..", _String2=".") returned 1 [0141.078] wcscmp (_String1="..", _String2="..") returned 0 [0141.078] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.078] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0141.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0141.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdd68) returned 1 [0141.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 Thread: id = 800 os_tid = 0x1394 [0138.896] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\drmstore.hds")) returned 0x2026 [0141.080] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0x20) returned 1 [0142.782] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\drmstore.hds"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xee8 [0142.782] GetFileSizeEx (in: hFile=0xee8, lpFileSize=0x5d9fc88 | out: lpFileSize=0x5d9fc88*=135168) returned 1 [0142.782] SetFilePointerEx (in: hFile=0xee8, liDistanceToMove=0x20ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.782] ReadFile (in: hFile=0xee8, lpBuffer=0x5d9fc94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d9fc70, lpOverlapped=0x0 | out: lpBuffer=0x5d9fc94*, lpNumberOfBytesRead=0x5d9fc70*=0x4, lpOverlapped=0x0) returned 1 [0142.785] SetFilePointerEx (in: hFile=0xee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0142.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0142.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0142.785] NtQuerySystemTime (in: CurrentTime=0x5d9fc10 | out: CurrentTime=0x5d9fc10*=132471540113544000) returned 0x0 [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x4210ac6e [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x5ad3dffe [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x7013302f [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x2f65e6b [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x3bfabd16 [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x69ce7a6d [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x92f876d [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x7d4addbb [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x11211b60 [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x1d9800ed [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x3345bff4 [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x687e4c24 [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x7a2b091b [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x5191d0b5 [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x5cd94111 [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x7918d792 [0142.785] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x2e7956c1 [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x37d822ef [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x5637d2a4 [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x35357a2 [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x4030267a [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x3cb66f9b [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x134869db [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x5f937ef9 [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x29bfcb23 [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x3dd3f862 [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x7b8c49aa [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x2e60a929 [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x512a9b9f [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x28c6a1b3 [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x139d1fcc [0142.786] RtlRandomEx (in: Seed=0x5d9fc08 | out: Seed=0x5d9fc08) returned 0x74c3ce06 [0142.795] SetFilePointerEx (in: hFile=0xee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.796] ReadFile (in: hFile=0xee8, lpBuffer=0x82790c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d9fc10, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesRead=0x5d9fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0142.796] SetFilePointerEx (in: hFile=0xee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a110 [0142.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8970 [0142.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0142.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0142.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0142.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0142.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0142.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0142.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0142.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a110) returned 1 [0142.797] WriteFile (in: hFile=0xee8, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d9fc10, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x5d9fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0143.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0143.592] SetFilePointerEx (in: hFile=0xee8, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.592] ReadFile (in: hFile=0xee8, lpBuffer=0x82790c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d9fc10, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesRead=0x5d9fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0143.593] SetFilePointerEx (in: hFile=0xee8, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e69db0 [0143.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0143.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0143.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0143.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0143.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0143.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0143.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0143.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0143.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69db0) returned 1 [0143.594] WriteFile (in: hFile=0xee8, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d9fc10, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x5d9fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0143.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0143.608] SetFilePointerEx (in: hFile=0xee8, liDistanceToMove=0x1d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.608] ReadFile (in: hFile=0xee8, lpBuffer=0x82790c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d9fc10, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesRead=0x5d9fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0143.609] SetFilePointerEx (in: hFile=0xee8, liDistanceToMove=0x1d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e69db0 [0143.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0143.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0143.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0143.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0143.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0143.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0143.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0143.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0143.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69db0) returned 1 [0143.610] WriteFile (in: hFile=0xee8, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d9fc10, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x5d9fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0144.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0144.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c128 [0144.632] SetFilePointerEx (in: hFile=0xee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.632] WriteFile (in: hFile=0xee8, lpBuffer=0x3e16ce0*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x5d9fc7c, lpOverlapped=0x0 | out: lpBuffer=0x3e16ce0*, lpNumberOfBytesWritten=0x5d9fc7c*=0x14a, lpOverlapped=0x0) returned 1 [0145.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0145.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d60) returned 1 [0145.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0145.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fe28) returned 1 [0145.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c128) returned 1 [0145.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0145.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0145.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0145.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831a8d8 [0145.270] wcscpy (in: _Dest=0x831a8d8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" [0145.270] wcscat (in: _Dest=0x831a8d8, _Source=".f0dbec" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds.f0dbec") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds.f0dbec" [0145.270] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds.f0dbec", NtPathName=0x5d9fc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34c20 [0146.511] FlushFileBuffers (hFile=0xee8) returned 1 [0146.514] CloseHandle (hObject=0xee8) returned 1 [0146.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.573] wcscpy (in: _Dest=0x3df8ad8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0146.573] wcscat (in: _Dest=0x3df8ad8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt" [0146.573] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\f0dbec-readme.txt")) returned 0x20 [0146.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39938) returned 1 Thread: id = 801 os_tid = 0x1398 [0138.897] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.bla")) returned 0x2026 [0141.078] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0x20) returned 1 [0142.748] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.bla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x598 [0142.749] GetFileSizeEx (in: hFile=0x598, lpFileSize=0x800fbd8 | out: lpFileSize=0x800fbd8*=9506) returned 1 [0142.749] SetFilePointerEx (in: hFile=0x598, liDistanceToMove=0x251e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.749] ReadFile (in: hFile=0x598, lpBuffer=0x800fbe4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x800fbc0, lpOverlapped=0x0 | out: lpBuffer=0x800fbe4*, lpNumberOfBytesRead=0x800fbc0*=0x4, lpOverlapped=0x0) returned 1 [0142.752] SetFilePointerEx (in: hFile=0x598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0142.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0142.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0142.752] NtQuerySystemTime (in: CurrentTime=0x800fb60 | out: CurrentTime=0x800fb60*=132471540113232000) returned 0x0 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x11b02d5 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x75f201c2 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x6e32e0a6 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0xa4f58ae [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x38e16a8c [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x649f8564 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x5733e553 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x488da25 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x7461303a [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x315a8624 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x13095271 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x37eff03e [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x3a7247f0 [0142.752] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x4fa7a57c [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x615febd4 [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x5060039 [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x7a29135 [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x50131cbf [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x5811370e [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x47a11234 [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x5882564f [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x368c1ed [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x6a284761 [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x7a31df4f [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x4aad5c3d [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x4c98ca93 [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x32847fb4 [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x57ddf7cb [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x1537f0e3 [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x3d341adb [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x12cd8aee [0142.753] RtlRandomEx (in: Seed=0x800fb58 | out: Seed=0x800fb58) returned 0x32561c55 [0142.763] ReadFile (in: hFile=0x598, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x2522, lpNumberOfBytesRead=0x800fb54, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0x800fb54*=0x2522, lpOverlapped=0x0) returned 1 [0142.764] SetFilePointerEx (in: hFile=0x598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.764] WriteFile (in: hFile=0x598, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x2522, lpNumberOfBytesWritten=0x800fb58, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0x800fb58*=0x2522, lpOverlapped=0x0) returned 1 [0143.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0143.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c748 [0143.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0143.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0143.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0143.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0143.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69fa8) returned 1 [0143.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x305c748 [0143.590] SetFilePointerEx (in: hFile=0x598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.590] WriteFile (in: hFile=0x598, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x800fbcc, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x800fbcc*=0x102, lpOverlapped=0x0) returned 1 [0144.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0144.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c720) returned 1 [0144.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0144.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0144.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0144.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0144.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0144.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0144.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3df9528 [0144.755] wcscpy (in: _Dest=0x3df9528, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" [0144.755] wcscat (in: _Dest=0x3df9528, _Source=".f0dbec" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla.f0dbec") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla.f0dbec" [0144.755] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla.f0dbec", NtPathName=0x800fb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0144.759] FlushFileBuffers (hFile=0x598) returned 1 [0144.760] CloseHandle (hObject=0x598) returned 1 [0144.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0144.762] wcscpy (in: _Dest=0x3df9528, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0144.762] wcscat (in: _Dest=0x3df9528, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt" [0144.762] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\f0dbec-readme.txt")) returned 0x20 [0144.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0144.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bbe0) returned 1 Thread: id = 802 os_tid = 0x139c [0138.897] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.sec")) returned 0x2026 [0141.080] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec", dwFileAttributes=0x20) returned 1 [0142.764] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.sec"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5a4 [0142.766] GetFileSizeEx (in: hFile=0x5a4, lpFileSize=0x8b9fcb8 | out: lpFileSize=0x8b9fcb8*=740) returned 1 [0142.766] SetFilePointerEx (in: hFile=0x5a4, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.766] ReadFile (in: hFile=0x5a4, lpBuffer=0x8b9fcc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b9fca0, lpOverlapped=0x0 | out: lpBuffer=0x8b9fcc4*, lpNumberOfBytesRead=0x8b9fca0*=0x4, lpOverlapped=0x0) returned 1 [0142.769] SetFilePointerEx (in: hFile=0x5a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0142.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0142.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0142.769] NtQuerySystemTime (in: CurrentTime=0x8b9fc40 | out: CurrentTime=0x8b9fc40*=132471540113388000) returned 0x0 [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x5cd3f402 [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x485eb42f [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x2ecb3117 [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x78b96c84 [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x5d75a8be [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x6c95e863 [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x2582726e [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x475854db [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x12ebfaf2 [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x17a04961 [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x3ec29fbe [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x357aed0c [0142.769] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x2bb28e41 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x219c1149 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x4567bb74 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x3fcf836f [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x6f4f5326 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x713e5fa4 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x404660a0 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0xb83fab6 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x5749437b [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x59124f1e [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0xc6c404e [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x63e12a25 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x1eb4d192 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x392a258e [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x4b010e8a [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x4eca20bb [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x5b983335 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x474a9fd0 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x9e45d39 [0142.770] RtlRandomEx (in: Seed=0x8b9fc38 | out: Seed=0x8b9fc38) returned 0x464a3eae [0142.781] ReadFile (in: hFile=0x5a4, lpBuffer=0x824fc68, nNumberOfBytesToRead=0x2e4, lpNumberOfBytesRead=0x8b9fc34, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesRead=0x8b9fc34*=0x2e4, lpOverlapped=0x0) returned 1 [0142.781] SetFilePointerEx (in: hFile=0x5a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.781] WriteFile (in: hFile=0x5a4, lpBuffer=0x825ec88*, nNumberOfBytesToWrite=0x2e4, lpNumberOfBytesWritten=0x8b9fc38, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesWritten=0x8b9fc38*=0x2e4, lpOverlapped=0x0) returned 1 [0143.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0143.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb08 [0143.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0143.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0143.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0143.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0143.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69db0) returned 1 [0143.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x305cb08 [0143.591] SetFilePointerEx (in: hFile=0x5a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.591] WriteFile (in: hFile=0x5a4, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x8b9fcac, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0x8b9fcac*=0x102, lpOverlapped=0x0) returned 1 [0144.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0144.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0144.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0144.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0144.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0144.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0144.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0144.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0144.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f33150 [0144.001] wcscpy (in: _Dest=0x3f33150, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" [0144.001] wcscat (in: _Dest=0x3f33150, _Source=".f0dbec" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec.f0dbec") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec.f0dbec" [0144.001] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec.f0dbec", NtPathName=0x8b9fc30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f311d8 [0144.082] FlushFileBuffers (hFile=0x5a4) returned 1 [0144.084] CloseHandle (hObject=0x5a4) returned 1 [0144.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33150 [0144.085] wcscpy (in: _Dest=0x3f33150, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0144.085] wcscat (in: _Dest=0x3f33150, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt" [0144.085] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\F0DBEC-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\f0dbec-readme.txt")) returned 0x20 [0144.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33150) returned 1 [0144.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b970) returned 1 Thread: id = 803 os_tid = 0x13a0 [0138.897] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20 [0141.516] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0141.516] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.516] GetLastError () returned 0x5 [0141.516] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0141.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 Thread: id = 804 os_tid = 0x13a4 [0138.899] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20 [0140.947] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0140.947] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.947] GetLastError () returned 0x5 [0140.947] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0140.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c598) returned 1 Thread: id = 805 os_tid = 0x13a8 [0138.899] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20 [0141.514] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0141.515] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.515] GetLastError () returned 0x5 [0141.515] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0141.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ad38) returned 1 Thread: id = 806 os_tid = 0x13ac [0138.900] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\av_xpsj.gif")) returned 0x20 [0138.901] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif", dwFileAttributes=0x20) returned 1 [0140.244] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\av_xpsj.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfe8 [0140.245] GetFileSizeEx (in: hFile=0xfe8, lpFileSize=0x8c2f8d8 | out: lpFileSize=0x8c2f8d8*=42579) returned 1 [0140.245] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0xa64f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.245] ReadFile (in: hFile=0xfe8, lpBuffer=0x8c2f8e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c2f8c0, lpOverlapped=0x0 | out: lpBuffer=0x8c2f8e4*, lpNumberOfBytesRead=0x8c2f8c0*=0x4, lpOverlapped=0x0) returned 1 [0140.247] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0140.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0140.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0140.247] NtQuerySystemTime (in: CurrentTime=0x8c2f860 | out: CurrentTime=0x8c2f860*=132471540089052000) returned 0x0 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x75bf2315 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x783c8204 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x5190a288 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x200962b4 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x796dd697 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x144b72d9 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x7c10bd96 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x5b9681ca [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0xf6adf83 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x3861a650 [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x78689bdd [0140.247] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x427c2c7c [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x675ee918 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x16b39db4 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0xe62b307 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x22a5694e [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x3b82d97d [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x33b06eab [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x113402fc [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x2c42a186 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x45d993ab [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x7d35ea43 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x2ff39385 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0xa993344 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x3636eb6a [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x9074e45 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x3a73183f [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x6350a451 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x78e408a1 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x21322858 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x70e0dff5 [0140.248] RtlRandomEx (in: Seed=0x8c2f858 | out: Seed=0x8c2f858) returned 0x7e9392e1 [0140.259] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.259] ReadFile (in: hFile=0xfe8, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8c2f860, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0x8c2f860*=0x3c00, lpOverlapped=0x0) returned 1 [0140.259] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31a00 [0140.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b820 [0140.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0140.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0140.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0140.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0140.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0140.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0140.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b820) returned 1 [0140.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31a00) returned 1 [0140.261] WriteFile (in: hFile=0xfe8, lpBuffer=0x80d64d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8c2f860, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesWritten=0x8c2f860*=0x3c00, lpOverlapped=0x0) returned 1 [0141.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0141.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0141.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df4328 [0141.654] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.654] WriteFile (in: hFile=0xfe8, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x8c2f8cc, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0x8c2f8cc*=0x108, lpOverlapped=0x0) returned 1 [0141.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0141.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41d8) returned 1 [0141.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0141.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4328) returned 1 [0141.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0141.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0141.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0141.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aad8) returned 1 [0141.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e34088 [0141.781] wcscpy (in: _Dest=0x3e34088, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif" [0141.781] wcscat (in: _Dest=0x3e34088, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif.f0dbec" [0141.781] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif.f0dbec", NtPathName=0x8c2f850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\aV_xpSJ.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8568 [0141.821] FlushFileBuffers (hFile=0xfe8) returned 1 [0141.884] CloseHandle (hObject=0xfe8) returned 1 [0141.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e35348 [0141.892] wcscpy (in: _Dest=0x3e35348, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" [0141.892] wcscat (in: _Dest=0x3e35348, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt" [0141.892] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\f0dbec-readme.txt")) returned 0xffffffff [0141.893] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdac [0141.922] WriteFile (in: hFile=0xdac, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8c2f874, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8c2f874*=0x70c, lpOverlapped=0x0) returned 1 [0141.927] CloseHandle (hObject=0xdac) returned 1 [0141.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35348) returned 1 [0141.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 807 os_tid = 0x13b0 [0138.901] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\ef8gktmownkd.png")) returned 0x20 [0138.901] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png", dwFileAttributes=0x20) returned 1 [0140.261] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\ef8gktmownkd.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdb4 [0140.262] GetFileSizeEx (in: hFile=0xdb4, lpFileSize=0x7acfbc0 | out: lpFileSize=0x7acfbc0*=45945) returned 1 [0140.262] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0xb375, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.262] ReadFile (in: hFile=0xdb4, lpBuffer=0x7acfbcc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7acfba8, lpOverlapped=0x0 | out: lpBuffer=0x7acfbcc*, lpNumberOfBytesRead=0x7acfba8*=0x4, lpOverlapped=0x0) returned 1 [0140.263] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0140.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0140.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0140.264] NtQuerySystemTime (in: CurrentTime=0x7acfb48 | out: CurrentTime=0x7acfb48*=132471540089208000) returned 0x0 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x54d6c525 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x4bf332f [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x7794fd1b [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x3b539c05 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x62823dfb [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x3e2f61c4 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x34c2d9da [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x22c30a1b [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x388f8839 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x608cfd9f [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x7e68ba21 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x74937dc3 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x25285194 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x50ccb4f1 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x52dfda91 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x632a4356 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x6d3f1366 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0xe3fa7a1 [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x5581e1af [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x1d81f6ad [0140.264] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x589473da [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x458fda63 [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x12d7a410 [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x4ad88c52 [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x3ff6a0f4 [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x2405e6e9 [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x7646e914 [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x3f6e2831 [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x20ab1ff3 [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x9749ba2 [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x6351ed5d [0140.265] RtlRandomEx (in: Seed=0x7acfb40 | out: Seed=0x7acfb40) returned 0x25a85db7 [0140.275] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.277] ReadFile (in: hFile=0xdb4, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7acfb48, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0x7acfb48*=0x3c00, lpOverlapped=0x0) returned 1 [0140.277] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31a00 [0140.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b820 [0140.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0140.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0140.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0140.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0140.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0140.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0140.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b820) returned 1 [0140.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31a00) returned 1 [0140.278] WriteFile (in: hFile=0xdb4, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7acfb48, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x7acfb48*=0x3c00, lpOverlapped=0x0) returned 1 [0141.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0141.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0141.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df7ad8 [0141.657] SetFilePointerEx (in: hFile=0xdb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.657] WriteFile (in: hFile=0xdb4, lpBuffer=0x3041720*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x7acfbb4, lpOverlapped=0x0 | out: lpBuffer=0x3041720*, lpNumberOfBytesWritten=0x7acfbb4*=0x112, lpOverlapped=0x0) returned 1 [0141.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0141.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0141.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0141.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7ad8) returned 1 [0141.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0141.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0141.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0141.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0141.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e64438 [0141.783] wcscpy (in: _Dest=0x3e64438, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png" [0141.783] wcscat (in: _Dest=0x3e64438, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png.f0dbec" [0141.783] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png.f0dbec", NtPathName=0x7acfb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\Ef8GKTmowNKD.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a168 [0141.862] FlushFileBuffers (hFile=0xdb4) returned 1 [0142.046] CloseHandle (hObject=0xdb4) returned 1 [0142.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e34088 [0142.046] wcscpy (in: _Dest=0x3e34088, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" [0142.046] wcscat (in: _Dest=0x3e34088, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt" [0142.046] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\f0dbec-readme.txt")) returned 0x20 [0142.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34088) returned 1 [0142.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34d08) returned 1 Thread: id = 808 os_tid = 0x13b4 [0138.902] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\mwsmjft 7o17iyrevb.jpg")) returned 0x20 [0138.902] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg", dwFileAttributes=0x20) returned 1 [0140.278] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\mwsmjft 7o17iyrevb.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdac [0140.278] GetFileSizeEx (in: hFile=0xdac, lpFileSize=0xa02fea8 | out: lpFileSize=0xa02fea8*=93528) returned 1 [0140.278] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x16d54, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.279] ReadFile (in: hFile=0xdac, lpBuffer=0xa02feb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa02fe90, lpOverlapped=0x0 | out: lpBuffer=0xa02feb4*, lpNumberOfBytesRead=0xa02fe90*=0x4, lpOverlapped=0x0) returned 1 [0140.280] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0140.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac18 [0140.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0140.280] NtQuerySystemTime (in: CurrentTime=0xa02fe30 | out: CurrentTime=0xa02fe30*=132471540089364000) returned 0x0 [0140.280] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x14c17ac4 [0140.280] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0xa1069f8 [0140.280] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x10515262 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x504de56 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0xa412c49 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x55e0d966 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x6e158bbc [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x3e6a50b [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x7b6bd95d [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x3a119c81 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0xe7a0222 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x30be05de [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x307f716f [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x7c8b96ff [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x284af33a [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x30aec1a1 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x29169ff7 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x1ca2e960 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x3b0db8ea [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x33f7c0a9 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x1d1f8f4b [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x2c8ff10 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x39c864fd [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x13b6626b [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0xea4dae2 [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x178633cd [0140.281] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x265d897 [0140.282] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x3cc621f5 [0140.282] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0xa655df9 [0140.282] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x30237248 [0140.282] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0xece74a1 [0140.282] RtlRandomEx (in: Seed=0xa02fe28 | out: Seed=0xa02fe28) returned 0x6ac2fea9 [0140.296] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.296] ReadFile (in: hFile=0xdac, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa02fe30, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0xa02fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0140.296] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31a00 [0140.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b820 [0140.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0140.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0140.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0140.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0140.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0140.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0140.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b820) returned 1 [0140.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31a00) returned 1 [0140.297] WriteFile (in: hFile=0xdac, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa02fe30, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xa02fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0141.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0141.659] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.659] ReadFile (in: hFile=0xdac, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa02fe30, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0xa02fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0141.659] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83087b8 [0141.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0141.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0141.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0141.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0141.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0141.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0141.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0141.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0141.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83087b8) returned 1 [0141.660] WriteFile (in: hFile=0xdac, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa02fe30, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xa02fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0141.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0141.664] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x13158, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.664] ReadFile (in: hFile=0xdac, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa02fe30, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0xa02fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0141.664] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x13158, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83087b8 [0141.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0141.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0141.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0141.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0141.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0141.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0141.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0141.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0141.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83087b8) returned 1 [0141.665] WriteFile (in: hFile=0xdac, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa02fe30, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xa02fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0141.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0141.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdc98 [0141.668] SetFilePointerEx (in: hFile=0xdac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.668] WriteFile (in: hFile=0xdac, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0xa02fe9c, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0xa02fe9c*=0x15e, lpOverlapped=0x0) returned 1 [0141.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0141.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309028) returned 1 [0141.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0141.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83087b8) returned 1 [0141.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdc98) returned 1 [0141.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac18) returned 1 [0141.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0141.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0141.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8b88 [0141.786] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg" [0141.786] wcscat (in: _Dest=0x2c8b88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg.f0dbec" [0141.786] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg.f0dbec", NtPathName=0xa02fe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\MWSMJfT 7o17IYREVB.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dad468 [0141.868] FlushFileBuffers (hFile=0xdac) returned 1 [0141.885] CloseHandle (hObject=0xdac) returned 1 [0141.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e34088 [0141.910] wcscpy (in: _Dest=0x3e34088, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" [0141.910] wcscat (in: _Dest=0x3e34088, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt" [0141.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\f0dbec-readme.txt")) returned 0x20 [0141.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34088) returned 1 [0141.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b3b8) returned 1 Thread: id = 809 os_tid = 0x13b8 [0138.902] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\sq5pqk3.bmp")) returned 0x20 [0138.903] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp", dwFileAttributes=0x20) returned 1 [0140.298] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\sq5pqk3.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdb8 [0140.298] GetFileSizeEx (in: hFile=0xdb8, lpFileSize=0x997f8a8 | out: lpFileSize=0x997f8a8*=30799) returned 1 [0140.298] SetFilePointerEx (in: hFile=0xdb8, liDistanceToMove=0x784b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.298] ReadFile (in: hFile=0xdb8, lpBuffer=0x997f8b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x997f890, lpOverlapped=0x0 | out: lpBuffer=0x997f8b4*, lpNumberOfBytesRead=0x997f890*=0x4, lpOverlapped=0x0) returned 1 [0140.300] SetFilePointerEx (in: hFile=0xdb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0140.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ace0 [0140.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad08 [0140.300] NtQuerySystemTime (in: CurrentTime=0x997f830 | out: CurrentTime=0x997f830*=132471540089520000) returned 0x0 [0140.300] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x3cd9342a [0140.300] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x58cbffc5 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x4a84ae79 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x263dff7d [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x757bcc6f [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x7f86366f [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x12a39621 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x2320d8c8 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x1184f855 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x660935d8 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x1eca52ee [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x587c373a [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x1b36c24a [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x1fccb84 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x1143887f [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x7b0c1af [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x12b1ec7f [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x7e3de161 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x4418f645 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x53d2e14 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x4bd35067 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x15d17ae6 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x39036091 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x6346d730 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x614b94f2 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x2dd92304 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x494066d3 [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x214b29be [0140.301] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x669c0eba [0140.302] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x60f4d74c [0140.302] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x1c68c060 [0140.302] RtlRandomEx (in: Seed=0x997f828 | out: Seed=0x997f828) returned 0x72d49399 [0140.313] SetFilePointerEx (in: hFile=0xdb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.313] ReadFile (in: hFile=0xdb8, lpBuffer=0x80d28d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x997f830, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesRead=0x997f830*=0x3c00, lpOverlapped=0x0) returned 1 [0140.313] SetFilePointerEx (in: hFile=0xdb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3f31a00 [0140.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b820 [0140.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0140.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0140.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0140.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0140.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad08 [0140.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad08) returned 1 [0140.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b820) returned 1 [0140.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31a00) returned 1 [0140.314] WriteFile (in: hFile=0xdb8, lpBuffer=0x80b8498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x997f830, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesWritten=0x997f830*=0x3c00, lpOverlapped=0x0) returned 1 [0141.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0141.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0141.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3df3f38 [0141.663] SetFilePointerEx (in: hFile=0xdb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.663] WriteFile (in: hFile=0xdb8, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x997f89c, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x997f89c*=0x108, lpOverlapped=0x0) returned 1 [0141.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0141.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3ed8) returned 1 [0141.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0141.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3f38) returned 1 [0141.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0141.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0141.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0141.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0141.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e35348 [0141.785] wcscpy (in: _Dest=0x3e35348, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp" [0141.785] wcscat (in: _Dest=0x3e35348, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp.f0dbec" [0141.785] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp.f0dbec", NtPathName=0x997f820, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\SQ5PQk3.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0141.865] FlushFileBuffers (hFile=0xdb8) returned 1 [0142.047] CloseHandle (hObject=0xdb8) returned 1 [0142.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e34d08 [0142.048] wcscpy (in: _Dest=0x3e34d08, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\" [0142.049] wcscat (in: _Dest=0x3e34d08, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt" [0142.049] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\JXlRQoDrbtH_Adt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\jxlrqodrbth_adt\\f0dbec-readme.txt")) returned 0x20 [0142.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34d08) returned 1 [0142.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 810 os_tid = 0x13bc [0138.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3a7c0 [0138.903] wcscpy (in: _Dest=0x3e3a7c0, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0138.903] wcscat (in: _Dest=0x3e3a7c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\" [0138.903] wcscat (in: _Dest=0x3e3a7c0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" [0138.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091a20 [0138.903] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0139.459] wcscmp (_String1=".", _String2=".") returned 0 [0139.459] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.459] wcscmp (_String1="..", _String2=".") returned 1 [0139.459] wcscmp (_String1="..", _String2="..") returned 0 [0139.459] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.459] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0139.459] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0139.459] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.459] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0139.459] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0139.460] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.460] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0139.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091a20) returned 1 [0139.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a7c0) returned 1 [0139.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 Thread: id = 811 os_tid = 0x13c0 [0138.904] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat")) returned 0x2020 [0139.465] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x20) returned 0 [0139.465] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.465] GetLastError () returned 0x5 [0139.465] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x2020) returned 0 [0139.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 812 os_tid = 0x13c4 [0138.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdd00 [0138.905] wcscpy (in: _Dest=0x3ecdd00, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest" [0138.905] wcscat (in: _Dest=0x3ecdd00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\" [0138.905] wcscat (in: _Dest=0x3ecdd00, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*" [0138.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100d40 [0138.905] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f382d8 [0140.388] wcscmp (_String1=".", _String2=".") returned 0 [0140.388] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.388] wcscmp (_String1="..", _String2=".") returned 1 [0140.388] wcscmp (_String1="..", _String2="..") returned 0 [0140.388] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.388] FindClose (in: hFindFile=0x3f382d8 | out: hFindFile=0x3f382d8) returned 1 [0140.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100d40) returned 1 [0140.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdd00) returned 1 [0140.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd5b0) returned 1 Thread: id = 813 os_tid = 0x13c8 [0138.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd820 [0138.906] wcscpy (in: _Dest=0x3ecd820, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions" [0138.906] wcscat (in: _Dest=0x3ecd820, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\" [0138.906] wcscat (in: _Dest=0x3ecd820, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*" [0138.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0138.907] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0139.451] wcscmp (_String1=".", _String2=".") returned 0 [0139.451] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.451] wcscmp (_String1="..", _String2=".") returned 1 [0139.451] wcscmp (_String1="..", _String2="..") returned 0 [0139.451] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.451] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0139.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0139.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd820) returned 1 [0139.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8baa8) returned 1 Thread: id = 814 os_tid = 0x13cc [0138.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd958 [0138.908] wcscpy (in: _Dest=0x3ecd958, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload" [0138.908] wcscat (in: _Dest=0x3ecd958, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\" [0138.908] wcscat (in: _Dest=0x3ecd958, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*" [0138.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0138.908] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0139.453] wcscmp (_String1=".", _String2=".") returned 0 [0139.453] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.453] wcscmp (_String1="..", _String2=".") returned 1 [0139.453] wcscmp (_String1="..", _String2="..") returned 0 [0139.453] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.453] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0139.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0139.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd958) returned 1 [0139.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 Thread: id = 815 os_tid = 0x13d0 [0138.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ddf6a8 [0138.909] wcscpy (in: _Dest=0x3ddf6a8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0138.909] wcscat (in: _Dest=0x3ddf6a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\" [0138.909] wcscat (in: _Dest=0x3ddf6a8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*" [0138.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81016e0 [0138.909] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0139.455] wcscmp (_String1=".", _String2=".") returned 0 [0139.455] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.455] wcscmp (_String1="..", _String2=".") returned 1 [0139.455] wcscmp (_String1="..", _String2="..") returned 0 [0139.455] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f5c500, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x68f5c500, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x68f5c500, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.456] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0139.456] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0139.456] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.456] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0139.456] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0139.456] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.456] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0139.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81016e0) returned 1 [0139.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf6a8) returned 1 [0139.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddee38) returned 1 Thread: id = 816 os_tid = 0x13d4 [0138.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cat")) returned 0x20 [0142.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", dwFileAttributes=0x20) returned 0 [0142.288] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.289] GetLastError () returned 0x5 [0142.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", dwFileAttributes=0x20) returned 0 [0142.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 817 os_tid = 0x13d8 [0138.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.chs")) returned 0x20 [0141.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", dwFileAttributes=0x20) returned 0 [0141.570] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.570] GetLastError () returned 0x5 [0141.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", dwFileAttributes=0x20) returned 0 [0141.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20438) returned 1 Thread: id = 818 os_tid = 0x13dc [0138.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cht")) returned 0x20 [0141.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", dwFileAttributes=0x20) returned 0 [0141.571] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.572] GetLastError () returned 0x5 [0141.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", dwFileAttributes=0x20) returned 0 [0141.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 819 os_tid = 0x13e0 [0138.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cze")) returned 0x20 [0141.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", dwFileAttributes=0x20) returned 0 [0141.573] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.574] GetLastError () returned 0x5 [0141.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", dwFileAttributes=0x20) returned 0 [0141.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30af0) returned 1 Thread: id = 820 os_tid = 0x13e4 [0138.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.dan")) returned 0x20 [0141.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", dwFileAttributes=0x20) returned 0 [0141.575] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.575] GetLastError () returned 0x5 [0141.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", dwFileAttributes=0x20) returned 0 [0141.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 821 os_tid = 0x13e8 [0138.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.deu")) returned 0x20 [0141.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", dwFileAttributes=0x20) returned 0 [0141.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.577] GetLastError () returned 0x5 [0141.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", dwFileAttributes=0x20) returned 0 [0141.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30d98) returned 1 Thread: id = 822 os_tid = 0x13ec [0138.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.esp")) returned 0x20 [0142.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", dwFileAttributes=0x20) returned 0 [0142.281] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.281] GetLastError () returned 0x5 [0142.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", dwFileAttributes=0x20) returned 0 [0142.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c00) returned 1 Thread: id = 823 os_tid = 0x13f0 [0138.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.euq")) returned 0x20 [0142.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", dwFileAttributes=0x20) returned 0 [0142.321] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.321] GetLastError () returned 0x5 [0142.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", dwFileAttributes=0x20) returned 0 [0142.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc98) returned 1 Thread: id = 824 os_tid = 0x13f4 [0138.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.fra")) returned 0x20 [0142.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", dwFileAttributes=0x20) returned 0 [0142.286] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.286] GetLastError () returned 0x5 [0142.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", dwFileAttributes=0x20) returned 0 [0142.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 825 os_tid = 0x13f8 [0138.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hrv")) returned 0x20 [0142.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", dwFileAttributes=0x20) returned 0 [0142.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.329] GetLastError () returned 0x5 [0142.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", dwFileAttributes=0x20) returned 0 [0142.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 826 os_tid = 0x13fc [0138.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hun")) returned 0x20 [0142.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", dwFileAttributes=0x20) returned 0 [0142.331] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.331] GetLastError () returned 0x5 [0142.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", dwFileAttributes=0x20) returned 0 [0142.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fb00) returned 1 Thread: id = 827 os_tid = 0x1400 [0138.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ita")) returned 0x20 [0142.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", dwFileAttributes=0x20) returned 0 [0142.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.323] GetLastError () returned 0x5 [0142.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", dwFileAttributes=0x20) returned 0 [0142.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 828 os_tid = 0x1404 [0138.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.jpn")) returned 0x20 [0142.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", dwFileAttributes=0x20) returned 0 [0142.325] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.325] GetLastError () returned 0x5 [0142.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", dwFileAttributes=0x20) returned 0 [0142.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 Thread: id = 829 os_tid = 0x1408 [0138.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.kor")) returned 0x20 [0142.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", dwFileAttributes=0x20) returned 0 [0142.333] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.333] GetLastError () returned 0x5 [0142.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", dwFileAttributes=0x20) returned 0 [0142.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 830 os_tid = 0x140c [0138.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nld")) returned 0x20 [0142.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", dwFileAttributes=0x20) returned 0 [0142.334] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.335] GetLastError () returned 0x5 [0142.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", dwFileAttributes=0x20) returned 0 [0142.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 831 os_tid = 0x1410 [0138.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nor")) returned 0x20 [0142.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", dwFileAttributes=0x20) returned 0 [0142.336] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.337] GetLastError () returned 0x5 [0142.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", dwFileAttributes=0x20) returned 0 [0142.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 832 os_tid = 0x1414 [0138.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.pol")) returned 0x20 [0142.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", dwFileAttributes=0x20) returned 0 [0142.338] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.338] GetLastError () returned 0x5 [0142.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", dwFileAttributes=0x20) returned 0 [0142.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 833 os_tid = 0x1418 [0138.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ptb")) returned 0x20 [0142.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", dwFileAttributes=0x20) returned 0 [0142.340] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.340] GetLastError () returned 0x5 [0142.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", dwFileAttributes=0x20) returned 0 [0142.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 Thread: id = 834 os_tid = 0x141c [0138.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rum")) returned 0x20 [0142.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", dwFileAttributes=0x20) returned 0 [0142.342] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.342] GetLastError () returned 0x5 [0142.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", dwFileAttributes=0x20) returned 0 [0142.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 835 os_tid = 0x1420 [0138.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rus")) returned 0x20 [0142.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", dwFileAttributes=0x20) returned 0 [0142.344] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.344] GetLastError () returned 0x5 [0142.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", dwFileAttributes=0x20) returned 0 [0142.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 836 os_tid = 0x1424 [0138.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sky")) returned 0x20 [0141.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", dwFileAttributes=0x20) returned 0 [0141.297] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.297] GetLastError () returned 0x5 [0141.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", dwFileAttributes=0x20) returned 0 [0141.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 837 os_tid = 0x1428 [0138.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.slv")) returned 0x20 [0141.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", dwFileAttributes=0x20) returned 0 [0141.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.580] GetLastError () returned 0x5 [0141.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", dwFileAttributes=0x20) returned 0 [0141.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31150) returned 1 Thread: id = 838 os_tid = 0x142c [0138.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.suo")) returned 0x20 [0142.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", dwFileAttributes=0x20) returned 0 [0142.327] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.327] GetLastError () returned 0x5 [0142.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", dwFileAttributes=0x20) returned 0 [0142.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 839 os_tid = 0x1430 [0139.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sve")) returned 0x20 [0141.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", dwFileAttributes=0x20) returned 0 [0141.578] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.578] GetLastError () returned 0x5 [0141.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", dwFileAttributes=0x20) returned 0 [0141.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31260) returned 1 Thread: id = 847 os_tid = 0x1434 [0139.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054d20 [0139.468] wcscpy (in: _Dest=0x8054d20, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" [0139.468] wcscat (in: _Dest=0x8054d20, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\" [0139.468] wcscat (in: _Dest=0x8054d20, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*" [0139.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091a20 [0139.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0139.469] wcscmp (_String1=".", _String2=".") returned 0 [0139.469] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.469] wcscmp (_String1="..", _String2=".") returned 1 [0139.469] wcscmp (_String1="..", _String2="..") returned 0 [0139.469] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.469] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.469] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c9f0 [0139.469] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" [0139.469] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\" [0139.469] wcscat (in: _Dest=0x32c9f0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" [0141.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0141.370] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0141.370] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0141.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091a20) returned 1 [0141.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054d20) returned 1 [0141.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054af0) returned 1 Thread: id = 848 os_tid = 0x1438 [0139.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054e70 [0139.470] wcscpy (in: _Dest=0x8054e70, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" [0139.470] wcscat (in: _Dest=0x8054e70, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\" [0139.470] wcscat (in: _Dest=0x8054e70, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*" [0139.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ffa8 [0139.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098950 [0139.471] wcscmp (_String1=".", _String2=".") returned 0 [0139.471] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.471] wcscmp (_String1="..", _String2=".") returned 1 [0139.471] wcscmp (_String1="..", _String2="..") returned 0 [0139.471] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.471] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.471] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ce18 [0139.471] wcscpy (in: _Dest=0x32ce18, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" [0139.471] wcscat (in: _Dest=0x32ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\" [0139.471] wcscat (in: _Dest=0x32ce18, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" [0141.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0141.372] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0141.372] FindClose (in: hFindFile=0x8098950 | out: hFindFile=0x8098950) returned 1 [0141.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ffa8) returned 1 [0141.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054e70) returned 1 [0141.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f395b8) returned 1 Thread: id = 849 os_tid = 0x143c [0139.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x80550a0 [0139.474] wcscpy (in: _Dest=0x80550a0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" [0139.475] wcscat (in: _Dest=0x80550a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\" [0139.475] wcscat (in: _Dest=0x80550a0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*" [0139.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81016e0 [0139.475] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0139.475] wcscmp (_String1=".", _String2=".") returned 0 [0139.475] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.475] wcscmp (_String1="..", _String2=".") returned 1 [0139.475] wcscmp (_String1="..", _String2="..") returned 0 [0139.475] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.475] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.475] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c958 [0139.476] wcscpy (in: _Dest=0x32c958, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" [0139.476] wcscat (in: _Dest=0x32c958, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\" [0139.476] wcscat (in: _Dest=0x32c958, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" [0141.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0141.374] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0141.374] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0141.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81016e0) returned 1 [0141.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80550a0) returned 1 [0141.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a88) returned 1 Thread: id = 850 os_tid = 0x1440 [0139.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054b60 [0139.477] wcscpy (in: _Dest=0x8054b60, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" [0139.477] wcscat (in: _Dest=0x8054b60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\" [0139.477] wcscat (in: _Dest=0x8054b60, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*" [0139.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0139.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80989d0 [0139.477] wcscmp (_String1=".", _String2=".") returned 0 [0139.478] FindNextFileW (in: hFindFile=0x80989d0, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.478] wcscmp (_String1="..", _String2=".") returned 1 [0139.478] wcscmp (_String1="..", _String2="..") returned 0 [0139.478] FindNextFileW (in: hFindFile=0x80989d0, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.478] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.478] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ceb0 [0139.478] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" [0139.478] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\" [0139.478] wcscat (in: _Dest=0x32ceb0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" [0141.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0141.376] FindNextFileW (in: hFindFile=0x80989d0, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0141.376] FindClose (in: hFindFile=0x80989d0 | out: hFindFile=0x80989d0) returned 1 [0141.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0141.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054b60) returned 1 [0141.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a18) returned 1 Thread: id = 851 os_tid = 0x1444 [0139.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8055110 [0139.479] wcscpy (in: _Dest=0x8055110, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" [0139.479] wcscat (in: _Dest=0x8055110, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\" [0139.479] wcscat (in: _Dest=0x8055110, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*" [0139.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0139.479] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098a10 [0139.479] wcscmp (_String1=".", _String2=".") returned 0 [0139.479] FindNextFileW (in: hFindFile=0x8098a10, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.479] wcscmp (_String1="..", _String2=".") returned 1 [0139.480] wcscmp (_String1="..", _String2="..") returned 0 [0139.480] FindNextFileW (in: hFindFile=0x8098a10, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.480] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.480] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ca88 [0139.480] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" [0139.480] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\" [0139.480] wcscat (in: _Dest=0x32ca88, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" [0141.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0141.379] FindNextFileW (in: hFindFile=0x8098a10, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0141.379] FindClose (in: hFindFile=0x8098a10 | out: hFindFile=0x8098a10) returned 1 [0141.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0141.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055110) returned 1 [0141.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39708) returned 1 Thread: id = 852 os_tid = 0x1448 [0139.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml")) returned 0x20 [0139.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML", dwFileAttributes=0x20) returned 0 [0139.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.482] GetLastError () returned 0x5 [0139.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML", dwFileAttributes=0x20) returned 0 [0139.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355dd0) returned 1 Thread: id = 853 os_tid = 0x144c [0139.483] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\4y_fhn0k2gte2.swf")) returned 0x20 [0139.483] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf", dwFileAttributes=0x20) returned 1 [0140.734] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\4y_fhn0k2gte2.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf98 [0140.734] GetFileSizeEx (in: hFile=0xf98, lpFileSize=0x7b4ff08 | out: lpFileSize=0x7b4ff08*=91564) returned 1 [0140.734] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x165a8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.734] ReadFile (in: hFile=0xf98, lpBuffer=0x7b4ff14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7b4fef0, lpOverlapped=0x0 | out: lpBuffer=0x7b4ff14*, lpNumberOfBytesRead=0x7b4fef0*=0x4, lpOverlapped=0x0) returned 1 [0140.736] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0140.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0140.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0140.736] NtQuerySystemTime (in: CurrentTime=0x7b4fe90 | out: CurrentTime=0x7b4fe90*=132471540093888000) returned 0x0 [0140.736] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x1d4e21f6 [0140.736] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x2eee2989 [0140.736] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x6eca7f5c [0140.736] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x1bd658b2 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x44bce84b [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x316fda02 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x6d05580 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x5f40781a [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x4f6a001f [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x563b8d75 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x17192d9e [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x7721c816 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x183dd51c [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x8ee3234 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x7fe7a95 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x16e2ff9e [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x261ef330 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x7a7c1079 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x606fb9fa [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x67f3eae0 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x6fef7981 [0140.737] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x11fda9ad [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x398ecddf [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x2282c01 [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x7a398f61 [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0xf6e54a0 [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x7f248981 [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x68ef4c65 [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x617b9aa2 [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x635c343b [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x4edcb4d9 [0140.738] RtlRandomEx (in: Seed=0x7b4fe88 | out: Seed=0x7b4fe88) returned 0x7a0eb6a1 [0140.752] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.752] ReadFile (in: hFile=0xf98, lpBuffer=0x8131870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7b4fe90, lpOverlapped=0x0 | out: lpBuffer=0x8131870*, lpNumberOfBytesRead=0x7b4fe90*=0x3c00, lpOverlapped=0x0) returned 1 [0140.752] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b41a8 [0140.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32a48 [0140.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0140.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0140.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8135478 [0140.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0140.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0140.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0140.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0140.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0140.753] WriteFile (in: hFile=0xf98, lpBuffer=0x8135478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7b4fe90, lpOverlapped=0x0 | out: lpBuffer=0x8135478*, lpNumberOfBytesWritten=0x7b4fe90*=0x3c00, lpOverlapped=0x0) returned 1 [0141.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8135478) returned 1 [0141.019] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.019] ReadFile (in: hFile=0xf98, lpBuffer=0x8131870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7b4fe90, lpOverlapped=0x0 | out: lpBuffer=0x8131870*, lpNumberOfBytesRead=0x7b4fe90*=0x3c00, lpOverlapped=0x0) returned 1 [0141.019] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4350 [0141.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32b38 [0141.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0141.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0141.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8135478 [0141.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0141.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1a8 [0141.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1a8) returned 1 [0141.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 [0141.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0141.020] WriteFile (in: hFile=0xf98, lpBuffer=0x8135478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7b4fe90, lpOverlapped=0x0 | out: lpBuffer=0x8135478*, lpNumberOfBytesWritten=0x7b4fe90*=0x3c00, lpOverlapped=0x0) returned 1 [0141.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8135478) returned 1 [0141.026] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x129ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.026] ReadFile (in: hFile=0xf98, lpBuffer=0x8131870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7b4fe90, lpOverlapped=0x0 | out: lpBuffer=0x8131870*, lpNumberOfBytesRead=0x7b4fe90*=0x3c00, lpOverlapped=0x0) returned 1 [0141.026] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x129ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4350 [0141.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32b38 [0141.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0141.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0141.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8135478 [0141.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0141.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0141.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0141.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 [0141.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0141.027] WriteFile (in: hFile=0xf98, lpBuffer=0x8135478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7b4fe90, lpOverlapped=0x0 | out: lpBuffer=0x8135478*, lpNumberOfBytesWritten=0x7b4fe90*=0x3c00, lpOverlapped=0x0) returned 1 [0141.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8135478) returned 1 [0141.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3ba8 [0141.031] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.031] WriteFile (in: hFile=0xf98, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x7b4fefc, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x7b4fefc*=0x154, lpOverlapped=0x0) returned 1 [0141.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce108) returned 1 [0141.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77f30) returned 1 [0141.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0141.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77ef8) returned 1 [0141.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3ba8) returned 1 [0141.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0141.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0141.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b230) returned 1 [0141.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f31260 [0141.595] wcscpy (in: _Dest=0x3f31260, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf" [0141.595] wcscat (in: _Dest=0x3f31260, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf.f0dbec" [0141.595] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf.f0dbec", NtPathName=0x7b4fe80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\4y_fHn0k2GTe2.swf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3ef8c58 [0141.871] FlushFileBuffers (hFile=0xf98) returned 1 [0141.885] CloseHandle (hObject=0xf98) returned 1 [0141.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32b38 [0141.911] wcscpy (in: _Dest=0x3f32b38, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0141.911] wcscat (in: _Dest=0x3f32b38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" [0141.911] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\f0dbec-readme.txt")) returned 0x20 [0141.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 [0141.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 Thread: id = 854 os_tid = 0x1450 [0139.483] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\7iujalpnqsk.flv")) returned 0x20 [0139.484] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv", dwFileAttributes=0x20) returned 1 [0140.754] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\7iujalpnqsk.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf38 [0140.754] GetFileSizeEx (in: hFile=0xf38, lpFileSize=0x8e1f9e8 | out: lpFileSize=0x8e1f9e8*=50249) returned 1 [0140.754] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0xc445, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.754] ReadFile (in: hFile=0xf38, lpBuffer=0x8e1f9f4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e1f9d0, lpOverlapped=0x0 | out: lpBuffer=0x8e1f9f4*, lpNumberOfBytesRead=0x8e1f9d0*=0x4, lpOverlapped=0x0) returned 1 [0140.756] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0140.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b3c0 [0140.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b208 [0140.757] NtQuerySystemTime (in: CurrentTime=0x8e1f970 | out: CurrentTime=0x8e1f970*=132471540094044000) returned 0x0 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x76dc477d [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x6a3e0c81 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x5f5b25ed [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x35c30b3c [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x52dd3c60 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x796a795 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x1d87c0e3 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x2a2ba7dd [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x282ad9b5 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x735e6edc [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x59c61a1a [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x69a113da [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x2b87a7eb [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x4d778de2 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x52dcb9c8 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x40b21fa3 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x619ef55e [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x4d1531d9 [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x1dcbd13f [0140.757] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x3ca7bf9a [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x5495eb08 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x2f5c04e1 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x4ba703c8 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x70763137 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x13e2c2f1 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x2ab7aa74 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x2af37fc9 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x58e3b760 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x656c95d6 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x7f160395 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x63a1a146 [0140.758] RtlRandomEx (in: Seed=0x8e1f968 | out: Seed=0x8e1f968) returned 0x4c8955f [0140.769] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.769] ReadFile (in: hFile=0xf38, lpBuffer=0x8139080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8e1f970, lpOverlapped=0x0 | out: lpBuffer=0x8139080*, lpNumberOfBytesRead=0x8e1f970*=0x3c00, lpOverlapped=0x0) returned 1 [0140.769] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b41a8 [0140.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32a48 [0140.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0140.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0140.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x813cc88 [0140.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0140.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b208 [0140.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b208) returned 1 [0140.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0140.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0140.770] WriteFile (in: hFile=0xf38, lpBuffer=0x813cc88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8e1f970, lpOverlapped=0x0 | out: lpBuffer=0x813cc88*, lpNumberOfBytesWritten=0x8e1f970*=0x3c00, lpOverlapped=0x0) returned 1 [0141.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x813cc88) returned 1 [0141.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8139080) returned 1 [0141.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3df7e20 [0141.025] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.025] WriteFile (in: hFile=0xf38, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x8e1f9dc, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x8e1f9dc*=0x110, lpOverlapped=0x0) returned 1 [0141.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0141.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8088) returned 1 [0141.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1a8) returned 1 [0141.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0141.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0141.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0141.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0141.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0141.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0188 [0141.593] wcscpy (in: _Dest=0x3db0188, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv" [0141.594] wcscat (in: _Dest=0x3db0188, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv.f0dbec" [0141.594] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv.f0dbec", NtPathName=0x8e1f960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\7iuJalpNQSk.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c2e0 [0141.802] FlushFileBuffers (hFile=0xf38) returned 1 [0141.883] CloseHandle (hObject=0xf38) returned 1 [0141.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32fe8 [0141.889] wcscpy (in: _Dest=0x3f32fe8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0141.889] wcscat (in: _Dest=0x3f32fe8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" [0141.889] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\f0dbec-readme.txt")) returned 0xffffffff [0141.889] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe74 [0141.928] WriteFile (in: hFile=0xe74, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8e1f984, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8e1f984*=0x70c, lpOverlapped=0x0) returned 1 [0141.934] CloseHandle (hObject=0xe74) returned 1 [0141.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32fe8) returned 1 [0141.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 Thread: id = 855 os_tid = 0x1454 [0139.484] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\fmzi.mkv")) returned 0x20 [0139.484] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv", dwFileAttributes=0x20) returned 1 [0140.771] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\fmzi.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf50 [0140.771] GetFileSizeEx (in: hFile=0xf50, lpFileSize=0x7a7f8b8 | out: lpFileSize=0x7a7f8b8*=90472) returned 1 [0140.771] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x16164, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.771] ReadFile (in: hFile=0xf50, lpBuffer=0x7a7f8c4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7a7f8a0, lpOverlapped=0x0 | out: lpBuffer=0x7a7f8c4*, lpNumberOfBytesRead=0x7a7f8a0*=0x4, lpOverlapped=0x0) returned 1 [0140.773] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b208 [0140.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0140.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0140.773] NtQuerySystemTime (in: CurrentTime=0x7a7f840 | out: CurrentTime=0x7a7f840*=132471540094200000) returned 0x0 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x44a73ecb [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x346765b2 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x69aacbe4 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x7687d84c [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x227366ef [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0xd757928 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x3f60cddb [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x4a99055b [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0xddd1044 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x1a0e4acf [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x4e26aa19 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x77683748 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x118fef01 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x7511f314 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x36848dc8 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x7d0a9960 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x2be52874 [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x1242bbfc [0140.774] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x2c7aefa8 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x796353a1 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x4b97550c [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x6b9d7d74 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x4623d1d3 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0xd9805d5 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x34c8cf86 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x37ceb430 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x21b5dcf3 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x4a687c7f [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x3845390 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x4618bca7 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x7a9f28f4 [0140.775] RtlRandomEx (in: Seed=0x7a7f838 | out: Seed=0x7a7f838) returned 0x692925bc [0140.786] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.786] ReadFile (in: hFile=0xf50, lpBuffer=0x8140890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a7f840, lpOverlapped=0x0 | out: lpBuffer=0x8140890*, lpNumberOfBytesRead=0x7a7f840*=0x3c00, lpOverlapped=0x0) returned 1 [0140.786] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b41a8 [0140.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32a48 [0140.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b208 [0140.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b208) returned 1 [0140.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0140.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b208 [0140.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0140.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0140.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0140.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0140.788] WriteFile (in: hFile=0xf50, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a7f840, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0x7a7f840*=0x3c00, lpOverlapped=0x0) returned 1 [0141.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0141.029] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.029] ReadFile (in: hFile=0xf50, lpBuffer=0x8140890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a7f840, lpOverlapped=0x0 | out: lpBuffer=0x8140890*, lpNumberOfBytesRead=0x7a7f840*=0x3c00, lpOverlapped=0x0) returned 1 [0141.029] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4350 [0141.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32b38 [0141.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0141.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0141.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0141.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0141.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0141.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0141.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 [0141.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0141.030] WriteFile (in: hFile=0xf50, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a7f840, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0x7a7f840*=0x3c00, lpOverlapped=0x0) returned 1 [0141.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0141.034] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x12568, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.034] ReadFile (in: hFile=0xf50, lpBuffer=0x8140890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a7f840, lpOverlapped=0x0 | out: lpBuffer=0x8140890*, lpNumberOfBytesRead=0x7a7f840*=0x3c00, lpOverlapped=0x0) returned 1 [0141.034] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x12568, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4350 [0141.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32b38 [0141.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca170 [0141.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca170) returned 1 [0141.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0141.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca170 [0141.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9680 [0141.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9680) returned 1 [0141.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 [0141.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0141.035] WriteFile (in: hFile=0xf50, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a7f840, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0x7a7f840*=0x3c00, lpOverlapped=0x0) returned 1 [0141.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0141.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3c78 [0141.042] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.042] WriteFile (in: hFile=0xf50, lpBuffer=0x3e17398*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x7a7f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3e17398*, lpNumberOfBytesWritten=0x7a7f8ac*=0x142, lpOverlapped=0x0) returned 1 [0141.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17398) returned 1 [0141.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca170) returned 1 [0141.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c98) returned 1 [0141.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b208) returned 1 [0141.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3c78) returned 1 [0141.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0141.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab78) returned 1 [0141.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0141.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32ef8 [0141.604] wcscpy (in: _Dest=0x3f32ef8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv" [0141.604] wcscat (in: _Dest=0x3f32ef8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv.f0dbec" [0141.604] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv.f0dbec", NtPathName=0x7a7f830, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\FmZI.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30b78 [0141.844] FlushFileBuffers (hFile=0xf50) returned 1 [0141.885] CloseHandle (hObject=0xf50) returned 1 [0141.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d18 [0141.905] wcscpy (in: _Dest=0x3f32d18, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0141.905] wcscat (in: _Dest=0x3f32d18, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" [0141.905] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\f0dbec-readme.txt")) returned 0x20 [0141.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d18) returned 1 [0141.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e758) returned 1 Thread: id = 856 os_tid = 0x1458 [0139.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\lxploal2b5z1.mp4")) returned 0x20 [0139.485] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4", dwFileAttributes=0x20) returned 1 [0140.788] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\lxploal2b5z1.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf4c [0140.789] GetFileSizeEx (in: hFile=0xf4c, lpFileSize=0x89ef838 | out: lpFileSize=0x89ef838*=21021) returned 1 [0140.789] SetFilePointerEx (in: hFile=0xf4c, liDistanceToMove=0x5219, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.789] ReadFile (in: hFile=0xf4c, lpBuffer=0x89ef844, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x89ef820, lpOverlapped=0x0 | out: lpBuffer=0x89ef844*, lpNumberOfBytesRead=0x89ef820*=0x4, lpOverlapped=0x0) returned 1 [0140.791] SetFilePointerEx (in: hFile=0xf4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0140.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0140.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8000 [0140.791] NtQuerySystemTime (in: CurrentTime=0x89ef7c0 | out: CurrentTime=0x89ef7c0*=132471540094512000) returned 0x0 [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x191af986 [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x642daa44 [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x4f54e767 [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0xd676558 [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x56fd07c1 [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x48cc90f1 [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0xb4f96c8 [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x213676a9 [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x37e1d9c [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0xbc89a2f [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x7a725d2c [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x1c75ef1a [0140.791] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x2afebd32 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x10b54883 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x7fb52feb [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x85a9b54 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x619dcec7 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x1377545c [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x2853ffb9 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x5cd540e1 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x6c07ba7a [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x2a1804bc [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x212974a2 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x416a22b8 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x747b4876 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x30d97bf5 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x51d2e65e [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x69e32795 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x3d350ae0 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0xdbd7af2 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0xada3c74 [0140.792] RtlRandomEx (in: Seed=0x89ef7b8 | out: Seed=0x89ef7b8) returned 0x3f2bcd1c [0140.803] SetFilePointerEx (in: hFile=0xf4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.803] ReadFile (in: hFile=0xf4c, lpBuffer=0x814a060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89ef7c0, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesRead=0x89ef7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.803] SetFilePointerEx (in: hFile=0xf4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b41a8 [0140.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32a48 [0140.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0140.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0140.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814dc68 [0140.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0140.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8000 [0140.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc8000) returned 1 [0140.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0140.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0140.804] WriteFile (in: hFile=0xf4c, lpBuffer=0x814dc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89ef7c0, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesWritten=0x89ef7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0141.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0141.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0141.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77f68 [0141.033] SetFilePointerEx (in: hFile=0xf4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.033] WriteFile (in: hFile=0xf4c, lpBuffer=0x3d56810*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x89ef82c, lpOverlapped=0x0 | out: lpBuffer=0x3d56810*, lpNumberOfBytesWritten=0x89ef82c*=0x112, lpOverlapped=0x0) returned 1 [0141.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56810) returned 1 [0141.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77fa0) returned 1 [0141.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e28) returned 1 [0141.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77f68) returned 1 [0141.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0141.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0141.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b08) returned 1 [0141.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ea0) returned 1 [0141.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30d98 [0141.597] wcscpy (in: _Dest=0x3f30d98, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4" [0141.597] wcscat (in: _Dest=0x3f30d98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4.f0dbec" [0141.597] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4.f0dbec", NtPathName=0x89ef7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\LxPlOAL2b5Z1.mp4.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c378 [0141.842] FlushFileBuffers (hFile=0xf4c) returned 1 [0141.885] CloseHandle (hObject=0xf4c) returned 1 [0141.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ef8 [0141.904] wcscpy (in: _Dest=0x3f32ef8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0141.904] wcscat (in: _Dest=0x3f32ef8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" [0141.904] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\f0dbec-readme.txt")) returned 0x20 [0141.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 [0141.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 Thread: id = 857 os_tid = 0x145c [0139.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\mduxbryele t7frv2t.mp4")) returned 0x20 [0139.485] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4", dwFileAttributes=0x20) returned 1 [0140.805] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\mduxbryele t7frv2t.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe74 [0140.805] GetFileSizeEx (in: hFile=0xe74, lpFileSize=0x965fca8 | out: lpFileSize=0x965fca8*=43950) returned 1 [0140.805] SetFilePointerEx (in: hFile=0xe74, liDistanceToMove=0xabaa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.805] ReadFile (in: hFile=0xe74, lpBuffer=0x965fcb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x965fc90, lpOverlapped=0x0 | out: lpBuffer=0x965fcb4*, lpNumberOfBytesRead=0x965fc90*=0x4, lpOverlapped=0x0) returned 1 [0140.807] SetFilePointerEx (in: hFile=0xe74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8000 [0140.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0140.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca328 [0140.808] NtQuerySystemTime (in: CurrentTime=0x965fc30 | out: CurrentTime=0x965fc30*=132471540094668000) returned 0x0 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x43e131af [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x5fd02392 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x4f4961a8 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x63f5729a [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x393ccfb7 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x6e200370 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x278806b8 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x31556af4 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x7a31ea3 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0xebadf92 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x455593b9 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x6a6777b0 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x6774e320 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x12ac9a61 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x7a075be0 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x253e47b0 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x444e837d [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x3352cbdc [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x1ffb9cb8 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x41bfc1d4 [0140.808] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x3c1a7454 [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x7a646821 [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x60cf1e8a [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x31b7a4cf [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x14809f7 [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x61451e1 [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x50bad938 [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x3111461 [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x674dafa [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x43cd08e0 [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x116692f [0140.809] RtlRandomEx (in: Seed=0x965fc28 | out: Seed=0x965fc28) returned 0x254f2052 [0140.822] SetFilePointerEx (in: hFile=0xe74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.822] ReadFile (in: hFile=0xe74, lpBuffer=0x8151870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x965fc30, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesRead=0x965fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0140.822] SetFilePointerEx (in: hFile=0xe74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b41a8 [0140.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32a48 [0140.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8000 [0140.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc8000) returned 1 [0140.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8155478 [0140.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8000 [0140.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca328 [0140.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca328) returned 1 [0140.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0140.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0140.823] WriteFile (in: hFile=0xe74, lpBuffer=0x8155478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x965fc30, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesWritten=0x965fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0141.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0141.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0141.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3dd4350 [0141.037] SetFilePointerEx (in: hFile=0xe74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.037] WriteFile (in: hFile=0xe74, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x965fc9c, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0x965fc9c*=0x11e, lpOverlapped=0x0) returned 1 [0141.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0141.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0141.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9680) returned 1 [0141.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0141.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc8000) returned 1 [0141.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0141.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0141.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0141.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f359a0 [0141.601] wcscpy (in: _Dest=0x3f359a0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4" [0141.601] wcscat (in: _Dest=0x3f359a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4.f0dbec" [0141.601] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4.f0dbec", NtPathName=0x965fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\mDUXBrYELe T7frv2t.mp4.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d1e8 [0141.846] FlushFileBuffers (hFile=0xe74) returned 1 [0141.885] CloseHandle (hObject=0xe74) returned 1 [0141.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32a48 [0141.906] wcscpy (in: _Dest=0x3f32a48, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\" [0141.906] wcscat (in: _Dest=0x3f32a48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" [0141.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\63my8-\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\63my8-\\f0dbec-readme.txt")) returned 0x20 [0141.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0141.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf408) returned 1 Thread: id = 858 os_tid = 0x1460 [0139.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0139.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x20) returned 0 [0139.487] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.487] GetLastError () returned 0x5 [0139.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x20) returned 0 [0139.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f397e8) returned 1 Thread: id = 859 os_tid = 0x1464 [0139.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x8098a50 [0139.489] wcscpy (in: _Dest=0x8098a50, _Source="C:\\ProgramData\\Sun\\Java" | out: _Dest="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java" [0139.489] wcscat (in: _Dest=0x8098a50, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\") returned="C:\\ProgramData\\Sun\\Java\\" [0139.489] wcscat (in: _Dest=0x8098a50, _Source="*" | out: _Dest="C:\\ProgramData\\Sun\\Java\\*") returned="C:\\ProgramData\\Sun\\Java\\*" [0139.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0139.489] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098a90 [0139.489] wcscmp (_String1=".", _String2=".") returned 0 [0139.489] FindNextFileW (in: hFindFile=0x8098a90, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.489] wcscmp (_String1="..", _String2=".") returned 1 [0139.490] wcscmp (_String1="..", _String2="..") returned 0 [0139.490] FindNextFileW (in: hFindFile=0x8098a90, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0139.490] wcscmp (_String1="Java Update", _String2=".") returned 1 [0139.490] wcscmp (_String1="Java Update", _String2="..") returned 1 [0139.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3dc5f38 [0139.490] wcscpy (in: _Dest=0x3dc5f38, _Source="C:\\ProgramData\\Sun\\Java" | out: _Dest="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java" [0139.490] wcscat (in: _Dest=0x3dc5f38, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\") returned="C:\\ProgramData\\Sun\\Java\\" [0139.490] wcscat (in: _Dest=0x3dc5f38, _Source="Java Update" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update" [0141.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0141.381] FindNextFileW (in: hFindFile=0x8098a90, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0141.381] FindClose (in: hFindFile=0x8098a90 | out: hFindFile=0x8098a90) returned 1 [0141.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0141.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8098a50) returned 1 [0141.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78e0) returned 1 Thread: id = 860 os_tid = 0x1468 [0139.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0139.490] wcscpy (in: _Dest=0x3333a8, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0139.491] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0139.491] wcscat (in: _Dest=0x3333a8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*" [0139.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0139.491] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ad0 [0139.491] wcscmp (_String1=".", _String2=".") returned 0 [0139.491] FindNextFileW (in: hFindFile=0x8098ad0, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.491] wcscmp (_String1="..", _String2=".") returned 1 [0139.491] wcscmp (_String1="..", _String2="..") returned 0 [0139.491] FindNextFileW (in: hFindFile=0x8098ad0, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.491] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0139.491] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0139.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e39ce0 [0139.492] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0139.492] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0139.492] wcscat (in: _Dest=0x3e39ce0, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0141.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e39ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0141.383] FindNextFileW (in: hFindFile=0x8098ad0, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0141.383] FindClose (in: hFindFile=0x8098ad0 | out: hFindFile=0x8098ad0) returned 1 [0141.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0141.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 [0141.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6688) returned 1 Thread: id = 861 os_tid = 0x146c [0139.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\get windows live.url")) returned 0x20 [0139.494] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url", dwFileAttributes=0x20) returned 1 [0140.824] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf6c [0140.824] GetFileSizeEx (in: hFile=0xf6c, lpFileSize=0x85af870 | out: lpFileSize=0x85af870*=133) returned 1 [0140.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca328 [0140.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0140.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0140.824] NtQuerySystemTime (in: CurrentTime=0x85af7f8 | out: CurrentTime=0x85af7f8*=132471540094824000) returned 0x0 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x3f6cb867 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x5064e1f1 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x78bdf0e1 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x595d2744 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x6252eefc [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x2cf10134 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x242d0fca [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x68471b3a [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x2b15cc5b [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x55b7197 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x790da221 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x1f920325 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x6eed2d8c [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x362f7395 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x63ab7d95 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x74cbff1f [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x78b7f0a1 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x71504cb0 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x49e16850 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x4f6c3133 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x72b95411 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x1650c45f [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x3fadf9cb [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x75aa3f7a [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x22e775b8 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x49a80f85 [0140.825] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x8288540 [0140.826] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x6e523112 [0140.826] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x523ba0a4 [0140.826] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x13544abb [0140.826] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x4b02fa25 [0140.826] RtlRandomEx (in: Seed=0x85af7f0 | out: Seed=0x85af7f0) returned 0x561225fb [0140.837] ReadFile (in: hFile=0xf6c, lpBuffer=0x8159080, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x85af7ec, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesRead=0x85af7ec*=0x85, lpOverlapped=0x0) returned 1 [0140.840] SetFilePointerEx (in: hFile=0xf6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.840] WriteFile (in: hFile=0xf6c, lpBuffer=0x815cc88*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x85af7f0, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesWritten=0x85af7f0*=0x85, lpOverlapped=0x0) returned 1 [0141.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d88 [0141.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ba8 [0141.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ba8) returned 1 [0141.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0141.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0141.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0141.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0141.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x2fc8688 [0141.044] SetFilePointerEx (in: hFile=0xf6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.044] WriteFile (in: hFile=0xf6c, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x85af864, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0x85af864*=0x11a, lpOverlapped=0x0) returned 1 [0141.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0141.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099750) returned 1 [0141.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ba8) returned 1 [0141.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8688) returned 1 [0141.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d88) returned 1 [0141.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0141.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0141.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0141.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35370 [0141.602] wcscpy (in: _Dest=0x3f35370, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" [0141.602] wcscat (in: _Dest=0x3f35370, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url.f0dbec" [0141.602] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url.f0dbec", NtPathName=0x85af7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81868f0 [0141.804] FlushFileBuffers (hFile=0xf6c) returned 1 [0142.060] CloseHandle (hObject=0xf6c) returned 1 [0142.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5a08 [0142.093] wcscpy (in: _Dest=0x3dc5a08, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0142.093] wcscat (in: _Dest=0x3dc5a08, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt" [0142.093] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\f0dbec-readme.txt")) returned 0x20 [0142.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5a08) returned 1 [0142.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 862 os_tid = 0x1470 [0139.495] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live gallery.url")) returned 0x20 [0139.496] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url", dwFileAttributes=0x20) returned 1 [0140.840] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xebc [0140.840] GetFileSizeEx (in: hFile=0xebc, lpFileSize=0x9f7f878 | out: lpFileSize=0x9f7f878*=133) returned 1 [0140.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca328 [0140.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0140.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ab8 [0140.841] NtQuerySystemTime (in: CurrentTime=0x9f7f800 | out: CurrentTime=0x9f7f800*=132471540094980000) returned 0x0 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x7a16b239 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x58e81cc6 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x3a2a816c [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x140e4d19 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x7fc375a5 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x1ec61a52 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x66898eca [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x30b434b9 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x8ad5abe [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x2150aaab [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x6d26a142 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x2dd25dc3 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x570dea15 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x5ec35991 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x9178f61 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x17b089d6 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x6af72860 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x4896150c [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x3f91c259 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x622ab99 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x788d17e1 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x6902e623 [0140.841] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x78623f21 [0140.842] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x5340e68b [0140.842] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x36b154f2 [0140.842] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x3ffefbfb [0140.842] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x5d6da7d4 [0140.842] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x9224e1c [0140.842] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x301229e3 [0140.842] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x2412be9b [0140.842] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x30a9df42 [0140.842] RtlRandomEx (in: Seed=0x9f7f7f8 | out: Seed=0x9f7f7f8) returned 0x542a12c [0140.853] ReadFile (in: hFile=0xebc, lpBuffer=0x8160890, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x9f7f7f4, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0x9f7f7f4*=0x85, lpOverlapped=0x0) returned 1 [0140.855] SetFilePointerEx (in: hFile=0xebc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.856] WriteFile (in: hFile=0xebc, lpBuffer=0x8164498*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x9f7f7f8, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesWritten=0x9f7f7f8*=0x85, lpOverlapped=0x0) returned 1 [0141.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ce8 [0141.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f68 [0141.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f68) returned 1 [0141.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0141.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0141.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0141.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4088) returned 1 [0141.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x30b4088 [0141.047] SetFilePointerEx (in: hFile=0xebc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.047] WriteFile (in: hFile=0xebc, lpBuffer=0x3ef7ea0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x9f7f86c, lpOverlapped=0x0 | out: lpBuffer=0x3ef7ea0*, lpNumberOfBytesWritten=0x9f7f86c*=0x122, lpOverlapped=0x0) returned 1 [0141.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7ea0) returned 1 [0141.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a10) returned 1 [0141.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f68) returned 1 [0141.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4088) returned 1 [0141.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ce8) returned 1 [0141.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0141.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0141.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0141.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c410 [0141.609] wcscpy (in: _Dest=0x3e3c410, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" [0141.609] wcscat (in: _Dest=0x3e3c410, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url.f0dbec" [0141.609] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url.f0dbec", NtPathName=0x9f7f7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b7c8 [0141.869] FlushFileBuffers (hFile=0xebc) returned 1 [0141.943] CloseHandle (hObject=0xebc) returned 1 [0141.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3daf408 [0141.943] wcscpy (in: _Dest=0x3daf408, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0141.943] wcscat (in: _Dest=0x3daf408, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt" [0141.944] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\f0dbec-readme.txt")) returned 0x20 [0141.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf408) returned 1 [0141.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f345f0) returned 1 Thread: id = 863 os_tid = 0x1474 [0139.496] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live mail.url")) returned 0x20 [0139.497] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url", dwFileAttributes=0x20) returned 1 [0140.857] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf5c [0140.857] GetFileSizeEx (in: hFile=0xf5c, lpFileSize=0x88af828 | out: lpFileSize=0x88af828*=133) returned 1 [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca328 [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ab8 [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcacd8 [0140.857] NtQuerySystemTime (in: CurrentTime=0x88af7b0 | out: CurrentTime=0x88af7b0*=132471540095136000) returned 0x0 [0140.857] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x20061fdb [0140.857] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x47356807 [0140.857] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x2a50fe1 [0140.857] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x985e4b5 [0140.857] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0xeca0f52 [0140.857] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x4a53f581 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x51eb50de [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x188a1ae6 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x65d2c695 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x464a1b94 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x13c945c1 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0xa4faa86 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x79387ae1 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x78376661 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x6c6c9a75 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x3fb3cf02 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x619e8e98 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x622c40a4 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x3e388c70 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x3d74501c [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x780c8da1 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x3323815e [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0xcac7d53 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x19fe47b6 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x5f455ca5 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x4b99555 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x1bd9182f [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x605d237a [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x354136f2 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x273ed811 [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x3d94ce8c [0140.858] RtlRandomEx (in: Seed=0x88af7a8 | out: Seed=0x88af7a8) returned 0x404efacf [0140.870] ReadFile (in: hFile=0xf5c, lpBuffer=0x81680a0, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x88af7a4, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesRead=0x88af7a4*=0x85, lpOverlapped=0x0) returned 1 [0140.872] SetFilePointerEx (in: hFile=0xf5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.872] WriteFile (in: hFile=0xf5c, lpBuffer=0x816bca8*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x88af7a8, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesWritten=0x88af7a8*=0x85, lpOverlapped=0x0) returned 1 [0141.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0141.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0141.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0141.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0141.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0141.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0141.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b39c8) returned 1 [0141.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x8099790 [0141.048] SetFilePointerEx (in: hFile=0xf5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.049] WriteFile (in: hFile=0xf5c, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x88af81c, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0x88af81c*=0x11c, lpOverlapped=0x0) returned 1 [0141.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0141.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80997d0) returned 1 [0141.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0141.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099790) returned 1 [0141.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0141.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0141.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0141.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0141.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c4a8 [0141.611] wcscpy (in: _Dest=0x3e3c4a8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" [0141.611] wcscat (in: _Dest=0x3e3c4a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url.f0dbec" [0141.611] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url.f0dbec", NtPathName=0x88af7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0141.837] FlushFileBuffers (hFile=0xf5c) returned 1 [0141.885] CloseHandle (hObject=0xf5c) returned 1 [0141.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5988 [0141.903] wcscpy (in: _Dest=0x3dc5988, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0141.903] wcscat (in: _Dest=0x3dc5988, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt" [0141.903] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\f0dbec-readme.txt")) returned 0x20 [0141.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5988) returned 1 [0141.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31370) returned 1 Thread: id = 864 os_tid = 0x1478 [0139.498] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live spaces.url")) returned 0x20 [0139.499] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url", dwFileAttributes=0x20) returned 1 [0140.873] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf44 [0140.873] GetFileSizeEx (in: hFile=0xf44, lpFileSize=0x44cfea0 | out: lpFileSize=0x44cfea0*=133) returned 1 [0140.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca328 [0140.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcacd8 [0140.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3a0 [0140.873] NtQuerySystemTime (in: CurrentTime=0x44cfe28 | out: CurrentTime=0x44cfe28*=132471540095292000) returned 0x0 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x124815 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x117b3ee4 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x26c17093 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x7eb6ee49 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x1f97ad8c [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x4ee4951 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x74d4e38a [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x328e6aa2 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x77041e60 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x7bf7a97b [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x2306c89d [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x261d97f0 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x572e093b [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x2c1ef4f4 [0140.873] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x2fdd24ef [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x386f86ce [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x2e0dac94 [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x33e675c4 [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0xbb9b8cf [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x6fe344ef [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x7b03376c [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x5348a910 [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0xcd3d5ae [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x16fe93ff [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x5d6fffcb [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x4309dd55 [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x6a648a22 [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0xabc4c72 [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x3a680244 [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x64f031c0 [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0x24e41c98 [0140.874] RtlRandomEx (in: Seed=0x44cfe20 | out: Seed=0x44cfe20) returned 0xe853f6a [0140.884] ReadFile (in: hFile=0xf44, lpBuffer=0x816f8b0, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x44cfe1c, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesRead=0x44cfe1c*=0x85, lpOverlapped=0x0) returned 1 [0140.887] SetFilePointerEx (in: hFile=0xf44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.887] WriteFile (in: hFile=0xf44, lpBuffer=0x81734b8*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x44cfe20, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesWritten=0x44cfe20*=0x85, lpOverlapped=0x0) returned 1 [0141.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0141.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0141.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0141.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0141.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0141.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0141.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3ed8) returned 1 [0141.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x30b3ed8 [0141.049] SetFilePointerEx (in: hFile=0xf44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.049] WriteFile (in: hFile=0xf44, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x44cfe94, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0x44cfe94*=0x120, lpOverlapped=0x0) returned 1 [0141.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0141.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0141.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0141.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3ed8) returned 1 [0141.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0141.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcacd8) returned 1 [0141.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca238) returned 1 [0141.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9fb8) returned 1 [0141.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0141.613] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" [0141.613] wcscat (in: _Dest=0x3e3c540, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url.f0dbec") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url.f0dbec" [0141.613] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url.f0dbec", NtPathName=0x44cfe18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c2c8 [0141.835] FlushFileBuffers (hFile=0xf44) returned 1 [0141.885] CloseHandle (hObject=0xf44) returned 1 [0141.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3db0188 [0141.902] wcscpy (in: _Dest=0x3db0188, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0141.902] wcscat (in: _Dest=0x3db0188, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt" [0141.902] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\f0dbec-readme.txt")) returned 0xffffffff [0141.902] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdac [0141.928] WriteFile (in: hFile=0xdac, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x44cfe3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x44cfe3c*=0x70c, lpOverlapped=0x0) returned 1 [0141.932] CloseHandle (hObject=0xdac) returned 1 [0141.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0188) returned 1 [0141.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fb88) returned 1 Thread: id = 865 os_tid = 0x147c [0139.499] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms")) returned 0x23 [0139.501] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms", dwFileAttributes=0x20) returned 0 [0139.501] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.501] GetLastError () returned 0x5 [0139.501] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms", dwFileAttributes=0x23) returned 0 [0139.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd0d0) returned 1 Thread: id = 866 os_tid = 0x1480 [0139.503] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms")) returned 0x23 [0140.390] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x20) returned 0 [0140.390] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.390] GetLastError () returned 0x5 [0140.390] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x23) returned 0 [0140.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 Thread: id = 867 os_tid = 0x1484 [0139.504] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0139.504] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0141.567] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.567] GetLastError () returned 0x20 [0141.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x8208050 [0141.568] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0141.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8208050) returned 1 [0141.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de2610, Size=0x10) returned 0x831d978 [0141.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x80541e8 [0141.568] wcscpy (in: _Dest=0x80541e8, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0141.568] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0141.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f418) returned 1 Thread: id = 868 os_tid = 0x1488 [0139.504] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf")) returned 0x2020 [0139.504] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x20) returned 0 [0139.505] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.564] GetLastError () returned 0x5 [0141.564] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x2020) returned 0 [0141.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d18) returned 1 Thread: id = 869 os_tid = 0x148c [0139.505] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat")) returned 0x2020 [0139.505] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x20) returned 0 [0139.505] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.955] GetLastError () returned 0x5 [0140.955] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x2020) returned 0 [0140.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 Thread: id = 870 os_tid = 0x1490 [0139.506] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\eebsym5\\documents\\my shapes\\favorites.vss")) returned 0x20 [0140.392] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss", dwFileAttributes=0x20) returned 1 [0142.346] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\eebsym5\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf34 [0142.346] GetFileSizeEx (in: hFile=0xf34, lpFileSize=0xa15fb00 | out: lpFileSize=0xa15fb00*=0) returned 1 [0142.346] FlushFileBuffers (hFile=0xf34) returned 1 [0142.871] CloseHandle (hObject=0xf34) returned 1 [0142.871] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss", dwFileAttributes=0x20) returned 1 [0142.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39fc8) returned 1 Thread: id = 871 os_tid = 0x1494 [0139.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd0d0 [0139.507] wcscpy (in: _Dest=0x3ecd0d0, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private" [0139.507] wcscat (in: _Dest=0x3ecd0d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\" [0139.507] wcscat (in: _Dest=0x3ecd0d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\*" [0139.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0139.507] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0141.328] wcscmp (_String1=".", _String2=".") returned 0 [0141.328] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.328] wcscmp (_String1="..", _String2=".") returned 1 [0141.328] wcscmp (_String1="..", _String2="..") returned 0 [0141.328] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0141.328] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0141.328] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0141.328] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0141.328] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0141.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0141.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd0d0) returned 1 [0141.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd3a8) returned 1 Thread: id = 872 os_tid = 0x1498 [0139.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddee38 [0139.507] wcscpy (in: _Dest=0x3ddee38, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0139.507] wcscat (in: _Dest=0x3ddee38, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\" [0139.507] wcscat (in: _Dest=0x3ddee38, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" [0139.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0139.508] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098b10 [0139.508] wcscmp (_String1=".", _String2=".") returned 0 [0139.508] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.508] wcscmp (_String1="..", _String2=".") returned 1 [0139.508] wcscmp (_String1="..", _String2="..") returned 0 [0139.508] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe34600, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1fe34600, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1fe34600, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.508] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0139.508] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0139.508] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.508] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0139.508] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0139.508] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.508] FindClose (in: hFindFile=0x8098b10 | out: hFindFile=0x8098b10) returned 1 [0139.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0139.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddee38) returned 1 [0139.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39b10) returned 1 Thread: id = 873 os_tid = 0x149c [0139.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e39b10 [0139.510] wcscpy (in: _Dest=0x3e39b10, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0139.510] wcscat (in: _Dest=0x3e39b10, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\" [0139.510] wcscat (in: _Dest=0x3e39b10, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" [0139.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0139.510] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098b10 [0139.511] wcscmp (_String1=".", _String2=".") returned 0 [0139.511] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.511] wcscmp (_String1="..", _String2=".") returned 1 [0139.511] wcscmp (_String1="..", _String2="..") returned 0 [0139.511] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80ec00, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1d80ec00, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1d80ec00, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.511] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0139.511] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0139.511] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.511] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0139.511] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0139.511] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.511] FindClose (in: hFindFile=0x8098b10 | out: hFindFile=0x8098b10) returned 1 [0139.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0139.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39b10) returned 1 [0139.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a508) returned 1 Thread: id = 874 os_tid = 0x14a0 [0139.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f397e8 [0139.513] wcscpy (in: _Dest=0x3f397e8, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" [0139.513] wcscat (in: _Dest=0x3f397e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\" [0139.513] wcscat (in: _Dest=0x3f397e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*" [0139.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0139.513] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098b10 [0139.513] wcscmp (_String1=".", _String2=".") returned 0 [0139.513] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.513] wcscmp (_String1="..", _String2=".") returned 1 [0139.513] wcscmp (_String1="..", _String2="..") returned 0 [0139.513] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0139.513] wcscmp (_String1="en-US", _String2=".") returned 1 [0139.514] wcscmp (_String1="en-US", _String2="..") returned 1 [0139.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f332b8 [0139.514] wcscpy (in: _Dest=0x3f332b8, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" [0139.514] wcscat (in: _Dest=0x3f332b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\" [0139.514] wcscat (in: _Dest=0x3f332b8, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0141.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f332b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0141.386] FindNextFileW (in: hFindFile=0x8098b10, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0141.386] FindClose (in: hFindFile=0x8098b10 | out: hFindFile=0x8098b10) returned 1 [0141.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0141.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f397e8) returned 1 [0141.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 875 os_tid = 0x14a4 [0139.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3dc5ee8 [0139.514] wcscpy (in: _Dest=0x3dc5ee8, _Source="C:\\Users\\All Users\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat" [0139.514] wcscat (in: _Dest=0x3dc5ee8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\" [0139.514] wcscat (in: _Dest=0x3dc5ee8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\*" [0139.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0139.514] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098b50 [0139.515] wcscmp (_String1=".", _String2=".") returned 0 [0139.515] FindNextFileW (in: hFindFile=0x8098b50, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.515] wcscmp (_String1="..", _String2=".") returned 1 [0139.515] wcscmp (_String1="..", _String2="..") returned 0 [0139.515] FindNextFileW (in: hFindFile=0x8098b50, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0139.515] wcscmp (_String1="10.0", _String2=".") returned 1 [0139.515] wcscmp (_String1="10.0", _String2="..") returned 1 [0139.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6ee88 [0139.515] wcscpy (in: _Dest=0x3e6ee88, _Source="C:\\Users\\All Users\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat" [0139.515] wcscat (in: _Dest=0x3e6ee88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\" [0139.515] wcscat (in: _Dest=0x3e6ee88, _Source="10.0" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" [0141.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6ee88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0141.388] FindNextFileW (in: hFindFile=0x8098b50, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0141.388] FindClose (in: hFindFile=0x8098b50 | out: hFindFile=0x8098b50) returned 1 [0141.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0141.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5ee8) returned 1 [0141.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58108) returned 1 Thread: id = 876 os_tid = 0x14a8 [0139.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6728 [0139.516] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\All Users\\Microsoft\\Assistance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance" [0139.516] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\" [0139.516] wcscat (in: _Dest=0x2fe6728, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\*" [0139.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0139.516] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098b90 [0139.516] wcscmp (_String1=".", _String2=".") returned 0 [0139.516] FindNextFileW (in: hFindFile=0x8098b90, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.516] wcscmp (_String1="..", _String2=".") returned 1 [0139.516] wcscmp (_String1="..", _String2="..") returned 0 [0139.516] FindNextFileW (in: hFindFile=0x8098b90, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0139.516] wcscmp (_String1="Client", _String2=".") returned 1 [0139.516] wcscmp (_String1="Client", _String2="..") returned 1 [0139.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecd958 [0139.516] wcscpy (in: _Dest=0x3ecd958, _Source="C:\\Users\\All Users\\Microsoft\\Assistance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance" [0139.517] wcscat (in: _Dest=0x3ecd958, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\" [0139.517] wcscat (in: _Dest=0x3ecd958, _Source="Client" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" [0141.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0141.390] FindNextFileW (in: hFindFile=0x8098b90, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0141.390] FindClose (in: hFindFile=0x8098b90 | out: hFindFile=0x8098b90) returned 1 [0141.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0141.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0141.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22cf8) returned 1 Thread: id = 877 os_tid = 0x14ac [0139.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6ec20 [0139.517] wcscpy (in: _Dest=0x3e6ec20, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0139.517] wcscat (in: _Dest=0x3e6ec20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0139.517] wcscat (in: _Dest=0x3e6ec20, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\*" [0139.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0139.517] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098bd0 [0139.517] wcscmp (_String1=".", _String2=".") returned 0 [0139.517] FindNextFileW (in: hFindFile=0x8098bd0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.518] wcscmp (_String1="..", _String2=".") returned 1 [0139.518] wcscmp (_String1="..", _String2="..") returned 0 [0139.518] FindNextFileW (in: hFindFile=0x8098bd0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0139.518] wcscmp (_String1="DSS", _String2=".") returned 1 [0139.518] wcscmp (_String1="DSS", _String2="..") returned 1 [0139.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6edd8 [0139.518] wcscpy (in: _Dest=0x3e6edd8, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0139.518] wcscat (in: _Dest=0x3e6edd8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0139.518] wcscat (in: _Dest=0x3e6edd8, _Source="DSS" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" [0141.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e6edd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0141.392] FindNextFileW (in: hFindFile=0x8098bd0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0141.392] wcscmp (_String1="Keys", _String2=".") returned 1 [0141.392] wcscmp (_String1="Keys", _String2="..") returned 1 [0141.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6728 [0141.392] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0141.392] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0141.392] wcscat (in: _Dest=0x2fe6728, _Source="Keys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" [0141.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0141.393] FindNextFileW (in: hFindFile=0x8098bd0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0141.393] wcscmp (_String1="RSA", _String2=".") returned 1 [0141.393] wcscmp (_String1="RSA", _String2="..") returned 1 [0141.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e22cf8 [0141.393] wcscpy (in: _Dest=0x3e22cf8, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0141.393] wcscat (in: _Dest=0x3e22cf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0141.393] wcscat (in: _Dest=0x3e22cf8, _Source="RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0141.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22cf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0141.394] FindNextFileW (in: hFindFile=0x8098bd0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0141.394] FindClose (in: hFindFile=0x8098bd0 | out: hFindFile=0x8098bd0) returned 1 [0141.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0141.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ec20) returned 1 [0141.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6a28) returned 1 Thread: id = 878 os_tid = 0x14b0 [0139.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6968 [0139.519] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0139.519] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\" [0139.519] wcscat (in: _Dest=0x2fe6968, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\*" [0139.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a6d8 [0139.519] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c10 [0139.519] wcscmp (_String1=".", _String2=".") returned 0 [0139.519] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.519] wcscmp (_String1="..", _String2=".") returned 1 [0139.519] wcscmp (_String1="..", _String2="..") returned 0 [0139.519] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0139.519] wcscmp (_String1="Device", _String2=".") returned 1 [0139.519] wcscmp (_String1="Device", _String2="..") returned 1 [0139.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39af8 [0139.519] wcscpy (in: _Dest=0x3f39af8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0139.519] wcscat (in: _Dest=0x3f39af8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\" [0139.519] wcscat (in: _Dest=0x3f39af8, _Source="Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0151.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0151.789] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0151.789] wcscmp (_String1="Task", _String2=".") returned 1 [0151.789] wcscmp (_String1="Task", _String2="..") returned 1 [0151.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e2e0 [0151.789] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0151.789] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\" [0151.789] wcscat (in: _Dest=0x3d8e2e0, _Source="Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0151.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e64 [0151.790] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0151.790] FindClose (in: hFindFile=0x8098c10 | out: hFindFile=0x8098c10) returned 1 [0151.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a6d8) returned 1 [0151.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 [0151.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 Thread: id = 879 os_tid = 0x14b4 [0139.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7028 [0139.520] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Users\\All Users\\Microsoft\\DeviceSync" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync" [0139.520] wcscat (in: _Dest=0x2fe7028, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync\\") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync\\" [0139.520] wcscat (in: _Dest=0x2fe7028, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*" [0139.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0139.520] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c50 [0139.520] wcscmp (_String1=".", _String2=".") returned 0 [0139.520] FindNextFileW (in: hFindFile=0x8098c50, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.520] wcscmp (_String1="..", _String2=".") returned 1 [0139.521] wcscmp (_String1="..", _String2="..") returned 0 [0139.521] FindNextFileW (in: hFindFile=0x8098c50, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.521] FindClose (in: hFindFile=0x8098c50 | out: hFindFile=0x8098c50) returned 1 [0139.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0139.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 [0139.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b8) returned 1 Thread: id = 880 os_tid = 0x14b8 [0139.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3dc5e98 [0139.522] wcscpy (in: _Dest=0x3dc5e98, _Source="C:\\Users\\All Users\\Microsoft\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM" [0139.522] wcscat (in: _Dest=0x3dc5e98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\DRM\\" [0139.522] wcscat (in: _Dest=0x3dc5e98, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\*") returned="C:\\Users\\All Users\\Microsoft\\DRM\\*" [0139.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0139.522] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c50 [0139.523] wcscmp (_String1=".", _String2=".") returned 0 [0139.523] FindNextFileW (in: hFindFile=0x8098c50, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.523] wcscmp (_String1="..", _String2=".") returned 1 [0139.523] wcscmp (_String1="..", _String2="..") returned 0 [0139.523] FindNextFileW (in: hFindFile=0x8098c50, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0139.523] wcscmp (_String1="Server", _String2=".") returned 1 [0139.523] wcscmp (_String1="Server", _String2="..") returned 1 [0139.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0f0b8 [0139.523] wcscpy (in: _Dest=0x3e0f0b8, _Source="C:\\Users\\All Users\\Microsoft\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM" [0139.523] wcscat (in: _Dest=0x3e0f0b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\DRM\\" [0139.523] wcscat (in: _Dest=0x3e0f0b8, _Source="Server" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server" [0143.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0143.423] FindNextFileW (in: hFindFile=0x8098c50, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0143.423] FindClose (in: hFindFile=0x8098c50 | out: hFindFile=0x8098c50) returned 1 [0143.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0143.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5e98) returned 1 [0143.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6398) returned 1 Thread: id = 881 os_tid = 0x14bc [0139.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0f270 [0139.524] wcscpy (in: _Dest=0x3e0f270, _Source="C:\\Users\\All Users\\Microsoft\\eHome" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome" [0139.524] wcscat (in: _Dest=0x3e0f270, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\") returned="C:\\Users\\All Users\\Microsoft\\eHome\\" [0139.524] wcscat (in: _Dest=0x3e0f270, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\*") returned="C:\\Users\\All Users\\Microsoft\\eHome\\*" [0139.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0139.524] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c90 [0139.524] wcscmp (_String1=".", _String2=".") returned 0 [0139.524] FindNextFileW (in: hFindFile=0x8098c90, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.524] wcscmp (_String1="..", _String2=".") returned 1 [0139.524] wcscmp (_String1="..", _String2="..") returned 0 [0139.524] FindNextFileW (in: hFindFile=0x8098c90, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0139.524] wcscmp (_String1="logs", _String2=".") returned 1 [0139.524] wcscmp (_String1="logs", _String2="..") returned 1 [0139.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0eae0 [0139.524] wcscpy (in: _Dest=0x3e0eae0, _Source="C:\\Users\\All Users\\Microsoft\\eHome" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome" [0139.525] wcscat (in: _Dest=0x3e0eae0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\") returned="C:\\Users\\All Users\\Microsoft\\eHome\\" [0139.525] wcscat (in: _Dest=0x3e0eae0, _Source="logs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs" [0141.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0eae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074 [0141.396] FindNextFileW (in: hFindFile=0x8098c90, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0141.396] FindClose (in: hFindFile=0x8098c90 | out: hFindFile=0x8098c90) returned 1 [0141.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0141.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f270) returned 1 [0141.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6528) returned 1 Thread: id = 882 os_tid = 0x14c0 [0139.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7028 [0139.525] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer" [0139.525] wcscat (in: _Dest=0x2fe7028, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\" [0139.525] wcscat (in: _Dest=0x2fe7028, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*" [0139.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0139.525] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098cd0 [0139.525] wcscmp (_String1=".", _String2=".") returned 0 [0139.526] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.526] wcscmp (_String1="..", _String2=".") returned 1 [0139.526] wcscmp (_String1="..", _String2="..") returned 0 [0139.526] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0139.526] wcscmp (_String1="Views", _String2=".") returned 1 [0139.526] wcscmp (_String1="Views", _String2="..") returned 1 [0139.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd820 [0139.526] wcscpy (in: _Dest=0x3ecd820, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer" [0139.526] wcscat (in: _Dest=0x3ecd820, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\" [0139.526] wcscat (in: _Dest=0x3ecd820, _Source="Views" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" [0141.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0141.398] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0141.398] FindClose (in: hFindFile=0x8098cd0 | out: hFindFile=0x8098cd0) returned 1 [0141.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0141.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 [0141.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 Thread: id = 883 os_tid = 0x14c4 [0139.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6d28 [0139.526] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\HTML Help" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help") returned="C:\\Users\\All Users\\Microsoft\\HTML Help" [0139.526] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help\\") returned="C:\\Users\\All Users\\Microsoft\\HTML Help\\" [0139.526] wcscat (in: _Dest=0x2fe6d28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help\\*") returned="C:\\Users\\All Users\\Microsoft\\HTML Help\\*" [0139.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0139.527] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\HTML Help\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d10 [0139.527] wcscmp (_String1=".", _String2=".") returned 0 [0139.527] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.527] wcscmp (_String1="..", _String2=".") returned 1 [0139.527] wcscmp (_String1="..", _String2="..") returned 0 [0139.527] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.527] FindClose (in: hFindFile=0x8098d10 | out: hFindFile=0x8098d10) returned 1 [0139.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0139.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0139.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f5e0) returned 1 Thread: id = 884 os_tid = 0x14c8 [0139.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6d28 [0139.529] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\IdentityCRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL" [0139.529] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\" [0139.529] wcscat (in: _Dest=0x2fe6d28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*" [0139.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0139.529] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d10 [0139.529] wcscmp (_String1=".", _String2=".") returned 0 [0139.529] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.529] wcscmp (_String1="..", _String2=".") returned 1 [0139.529] wcscmp (_String1="..", _String2="..") returned 0 [0139.529] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x9fd2229c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0139.530] wcscmp (_String1="ppcrlconfig.dll", _String2=".") returned 1 [0139.530] wcscmp (_String1="ppcrlconfig.dll", _String2="..") returned 1 [0139.530] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0139.530] wcscmp (_String1="ppcrlui.dll", _String2=".") returned 1 [0139.530] wcscmp (_String1="ppcrlui.dll", _String2="..") returned 1 [0139.530] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0139.530] FindClose (in: hFindFile=0x8098d10 | out: hFindFile=0x8098d10) returned 1 [0139.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0139.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0139.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5b88) returned 1 Thread: id = 885 os_tid = 0x14cc [0139.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3dc5d58 [0139.531] wcscpy (in: _Dest=0x3dc5d58, _Source="C:\\Users\\All Users\\Microsoft\\MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0139.531] wcscat (in: _Dest=0x3dc5d58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\") returned="C:\\Users\\All Users\\Microsoft\\MF\\" [0139.531] wcscat (in: _Dest=0x3dc5d58, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\*") returned="C:\\Users\\All Users\\Microsoft\\MF\\*" [0139.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0139.532] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d10 [0139.532] wcscmp (_String1=".", _String2=".") returned 0 [0139.532] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.532] wcscmp (_String1="..", _String2=".") returned 1 [0139.532] wcscmp (_String1="..", _String2="..") returned 0 [0139.532] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0139.532] wcscmp (_String1="Active.GRL", _String2=".") returned 1 [0139.532] wcscmp (_String1="Active.GRL", _String2="..") returned 1 [0139.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe5b88 [0139.532] wcscpy (in: _Dest=0x2fe5b88, _Source="C:\\Users\\All Users\\Microsoft\\MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0139.532] wcscat (in: _Dest=0x2fe5b88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\") returned="C:\\Users\\All Users\\Microsoft\\MF\\" [0139.532] wcscat (in: _Dest=0x2fe5b88, _Source="Active.GRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL") returned="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" [0141.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0141.400] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0141.400] wcscmp (_String1="Pending.GRL", _String2=".") returned 1 [0141.400] wcscmp (_String1="Pending.GRL", _String2="..") returned 1 [0141.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6908 [0141.400] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\All Users\\Microsoft\\MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0141.400] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\") returned="C:\\Users\\All Users\\Microsoft\\MF\\" [0141.400] wcscat (in: _Dest=0x2fe6908, _Source="Pending.GRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL") returned="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" [0141.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0141.401] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0141.401] FindClose (in: hFindFile=0x8098d10 | out: hFindFile=0x8098d10) returned 1 [0141.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0141.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d58) returned 1 [0141.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cdd0) returned 1 Thread: id = 886 os_tid = 0x14d0 [0139.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3dc5e48 [0139.533] wcscpy (in: _Dest=0x3dc5e48, _Source="C:\\Users\\All Users\\Microsoft\\MSDN" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN" [0139.533] wcscat (in: _Dest=0x3dc5e48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\" [0139.533] wcscat (in: _Dest=0x3dc5e48, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\*") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\*" [0139.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0139.533] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d50 [0139.534] wcscmp (_String1=".", _String2=".") returned 0 [0139.534] FindNextFileW (in: hFindFile=0x8098d50, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.534] wcscmp (_String1="..", _String2=".") returned 1 [0139.534] wcscmp (_String1="..", _String2="..") returned 0 [0139.534] FindNextFileW (in: hFindFile=0x8098d50, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0139.534] wcscmp (_String1="8.0", _String2=".") returned 1 [0139.534] wcscmp (_String1="8.0", _String2="..") returned 1 [0139.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0f5e0 [0139.534] wcscpy (in: _Dest=0x3e0f5e0, _Source="C:\\Users\\All Users\\Microsoft\\MSDN" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN" [0139.534] wcscat (in: _Dest=0x3e0f5e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\" [0139.534] wcscat (in: _Dest=0x3e0f5e0, _Source="8.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" [0143.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e0f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0143.424] FindNextFileW (in: hFindFile=0x8098d50, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0143.424] FindClose (in: hFindFile=0x8098d50 | out: hFindFile=0x8098d50) returned 1 [0143.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0143.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5e48) returned 1 [0143.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6258) returned 1 Thread: id = 887 os_tid = 0x14d4 [0139.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d28 [0139.535] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\NetFramework" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework" [0139.535] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\" [0139.535] wcscat (in: _Dest=0x2fe6d28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\*") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\*" [0139.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0139.535] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d90 [0139.535] wcscmp (_String1=".", _String2=".") returned 0 [0139.535] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.535] wcscmp (_String1="..", _String2=".") returned 1 [0139.535] wcscmp (_String1="..", _String2="..") returned 0 [0139.535] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0139.535] wcscmp (_String1="BreadcrumbStore", _String2=".") returned 1 [0139.535] wcscmp (_String1="BreadcrumbStore", _String2="..") returned 1 [0139.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3db0d88 [0139.535] wcscpy (in: _Dest=0x3db0d88, _Source="C:\\Users\\All Users\\Microsoft\\NetFramework" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework" [0139.536] wcscat (in: _Dest=0x3db0d88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\" [0139.536] wcscat (in: _Dest=0x3db0d88, _Source="BreadcrumbStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" [0141.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3db0d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0141.403] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0141.403] FindClose (in: hFindFile=0x8098d90 | out: hFindFile=0x8098d90) returned 1 [0141.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0141.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0141.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0cc8) returned 1 Thread: id = 888 os_tid = 0x14d8 [0139.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e0f060 [0139.536] wcscpy (in: _Dest=0x3e0f060, _Source="C:\\Users\\All Users\\Microsoft\\Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0139.536] wcscat (in: _Dest=0x3e0f060, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\" [0139.536] wcscat (in: _Dest=0x3e0f060, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\*") returned="C:\\Users\\All Users\\Microsoft\\Network\\*" [0139.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0139.536] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098dd0 [0139.536] wcscmp (_String1=".", _String2=".") returned 0 [0139.537] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.537] wcscmp (_String1="..", _String2=".") returned 1 [0139.537] wcscmp (_String1="..", _String2="..") returned 0 [0139.537] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0139.537] wcscmp (_String1="Connections", _String2=".") returned 1 [0139.537] wcscmp (_String1="Connections", _String2="..") returned 1 [0139.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39d28 [0139.537] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\All Users\\Microsoft\\Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0139.537] wcscat (in: _Dest=0x3f39d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\" [0139.537] wcscat (in: _Dest=0x3f39d28, _Source="Connections" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections" [0141.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0141.405] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0141.405] wcscmp (_String1="Downloader", _String2=".") returned 1 [0141.405] wcscmp (_String1="Downloader", _String2="..") returned 1 [0141.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e7c0 [0141.405] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Users\\All Users\\Microsoft\\Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0141.405] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\" [0141.405] wcscat (in: _Dest=0x3d8e7c0, _Source="Downloader" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" [0141.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0141.406] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0141.406] FindClose (in: hFindFile=0x8098dd0 | out: hFindFile=0x8098dd0) returned 1 [0141.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0141.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f060) returned 1 [0141.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eea8) returned 1 Thread: id = 889 os_tid = 0x14dc [0139.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0f110 [0139.538] wcscpy (in: _Dest=0x3e0f110, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE" [0139.538] wcscat (in: _Dest=0x3e0f110, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\" [0139.538] wcscat (in: _Dest=0x3e0f110, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\*" [0139.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0139.538] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e10 [0139.538] wcscmp (_String1=".", _String2=".") returned 0 [0139.538] FindNextFileW (in: hFindFile=0x8098e10, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.539] wcscmp (_String1="..", _String2=".") returned 1 [0139.539] wcscmp (_String1="..", _String2="..") returned 0 [0139.539] FindNextFileW (in: hFindFile=0x8098e10, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe546bd00, ftCreationTime.dwHighDateTime=0x1ca0563, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe546bd00, ftLastWriteTime.dwHighDateTime=0x1ca0563, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0139.539] wcscmp (_String1="AssetLibrary.ico", _String2=".") returned 1 [0139.539] wcscmp (_String1="AssetLibrary.ico", _String2="..") returned 1 [0139.539] FindNextFileW (in: hFindFile=0x8098e10, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4123ca00, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4123ca00, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0139.539] wcscmp (_String1="DocumentRepository.ico", _String2=".") returned 1 [0139.539] wcscmp (_String1="DocumentRepository.ico", _String2="..") returned 1 [0139.539] FindNextFileW (in: hFindFile=0x8098e10, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc130b800, ftCreationTime.dwHighDateTime=0x1c9fb2f, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc130b800, ftLastWriteTime.dwHighDateTime=0x1c9fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0139.539] wcscmp (_String1="MySharePoints.ico", _String2=".") returned 1 [0139.539] wcscmp (_String1="MySharePoints.ico", _String2="..") returned 1 [0139.539] FindNextFileW (in: hFindFile=0x8098e10, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e61fd00, ftCreationTime.dwHighDateTime=0x1c62807, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e61fd00, ftLastWriteTime.dwHighDateTime=0x1c62807, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0139.539] wcscmp (_String1="MySite.ico", _String2=".") returned 1 [0139.539] wcscmp (_String1="MySite.ico", _String2="..") returned 1 [0139.539] FindNextFileW (in: hFindFile=0x8098e10, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87792900, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87792900, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0139.539] wcscmp (_String1="SharePointPortalSite.ico", _String2=".") returned 1 [0139.539] wcscmp (_String1="SharePointPortalSite.ico", _String2="..") returned 1 [0139.539] FindNextFileW (in: hFindFile=0x8098e10, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42a91900, ftCreationTime.dwHighDateTime=0x1c6276b, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42a91900, ftLastWriteTime.dwHighDateTime=0x1c6276b, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0139.540] wcscmp (_String1="SharePointTeamSite.ico", _String2=".") returned 1 [0139.540] wcscmp (_String1="SharePointTeamSite.ico", _String2="..") returned 1 [0139.540] FindNextFileW (in: hFindFile=0x8098e10, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0139.540] wcscmp (_String1="UICaptions", _String2=".") returned 1 [0139.540] wcscmp (_String1="UICaptions", _String2="..") returned 1 [0139.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecd8f0 [0139.540] wcscpy (in: _Dest=0x3ecd8f0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE" [0139.540] wcscat (in: _Dest=0x3ecd8f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\" [0139.540] wcscat (in: _Dest=0x3ecd8f0, _Source="UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0143.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0143.426] FindNextFileW (in: hFindFile=0x8098e10, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0143.426] FindClose (in: hFindFile=0x8098e10 | out: hFindFile=0x8098e10) returned 1 [0143.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0143.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f110) returned 1 [0143.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6118) returned 1 Thread: id = 890 os_tid = 0x14e0 [0139.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8052f50 [0139.540] wcscpy (in: _Dest=0x8052f50, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0139.540] wcscat (in: _Dest=0x8052f50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0139.540] wcscat (in: _Dest=0x8052f50, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0139.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0139.541] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0139.541] wcscmp (_String1=".", _String2=".") returned 0 [0139.541] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.541] wcscmp (_String1="..", _String2=".") returned 1 [0139.541] wcscmp (_String1="..", _String2="..") returned 0 [0139.541] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0139.541] wcscmp (_String1="Cache", _String2=".") returned 1 [0139.541] wcscmp (_String1="Cache", _String2="..") returned 1 [0139.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355dd0 [0139.541] wcscpy (in: _Dest=0x355dd0, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0139.541] wcscat (in: _Dest=0x355dd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0139.541] wcscat (in: _Dest=0x355dd0, _Source="Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0141.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x355dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0141.408] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0141.408] wcscmp (_String1="tokens.dat", _String2=".") returned 1 [0141.408] wcscmp (_String1="tokens.dat", _String2="..") returned 1 [0141.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11d28 [0141.408] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0141.408] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0141.408] wcscat (in: _Dest=0x3e11d28, _Source="tokens.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0141.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0141.409] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0141.409] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0141.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0141.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8052f50) returned 1 [0141.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 891 os_tid = 0x14e4 [0139.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3dc5d08 [0139.542] wcscpy (in: _Dest=0x3dc5d08, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0139.542] wcscat (in: _Dest=0x3dc5d08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0139.542] wcscat (in: _Dest=0x3dc5d08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\*" [0139.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0139.542] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80994d0 [0140.960] wcscmp (_String1=".", _String2=".") returned 0 [0140.960] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.960] wcscmp (_String1="..", _String2=".") returned 1 [0140.960] wcscmp (_String1="..", _String2="..") returned 0 [0140.960] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0140.960] wcscmp (_String1="Outbound", _String2=".") returned 1 [0140.960] wcscmp (_String1="Outbound", _String2="..") returned 1 [0140.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7388 [0140.960] wcscpy (in: _Dest=0x2fe7388, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0140.960] wcscat (in: _Dest=0x2fe7388, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0140.960] wcscat (in: _Dest=0x2fe7388, _Source="Outbound" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" [0144.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe7388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0144.380] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0144.380] wcscmp (_String1="PublishedData", _String2=".") returned 1 [0144.380] wcscmp (_String1="PublishedData", _String2="..") returned 1 [0144.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8cbb8 [0144.380] wcscpy (in: _Dest=0x3d8cbb8, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0144.380] wcscat (in: _Dest=0x3d8cbb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0144.380] wcscat (in: _Dest=0x3d8cbb8, _Source="PublishedData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" [0144.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0144.381] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0144.381] wcscmp (_String1="StateData", _String2=".") returned 1 [0144.381] wcscmp (_String1="StateData", _String2="..") returned 1 [0144.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6b48 [0144.382] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0144.382] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0144.382] wcscat (in: _Dest=0x2fe6b48, _Source="StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0144.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074 [0144.383] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc4b83e00, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc4b83e00, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0144.383] wcscmp (_String1="Temp", _String2=".") returned 1 [0144.383] wcscmp (_String1="Temp", _String2="..") returned 1 [0144.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x303c990 [0144.383] wcscpy (in: _Dest=0x303c990, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0144.383] wcscat (in: _Dest=0x303c990, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0144.383] wcscat (in: _Dest=0x303c990, _Source="Temp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Temp") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Temp" [0144.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303c990) returned 1 [0144.383] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc4b83e00, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc4b83e00, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0144.383] FindClose (in: hFindFile=0x80994d0 | out: hFindFile=0x80994d0) returned 1 [0144.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0144.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d08) returned 1 [0144.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc60c8) returned 1 Thread: id = 892 os_tid = 0x14e8 [0139.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e0ea88 [0139.543] wcscpy (in: _Dest=0x3e0ea88, _Source="C:\\Users\\All Users\\Microsoft\\Search" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search" [0139.543] wcscat (in: _Dest=0x3e0ea88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\") returned="C:\\Users\\All Users\\Microsoft\\Search\\" [0139.543] wcscat (in: _Dest=0x3e0ea88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\*") returned="C:\\Users\\All Users\\Microsoft\\Search\\*" [0139.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0139.543] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e90 [0139.543] wcscmp (_String1=".", _String2=".") returned 0 [0139.543] FindNextFileW (in: hFindFile=0x8098e90, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.543] wcscmp (_String1="..", _String2=".") returned 1 [0139.543] wcscmp (_String1="..", _String2="..") returned 0 [0139.543] FindNextFileW (in: hFindFile=0x8098e90, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0139.543] wcscmp (_String1="Data", _String2=".") returned 1 [0139.544] wcscmp (_String1="Data", _String2="..") returned 1 [0139.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6cc8 [0139.544] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\All Users\\Microsoft\\Search" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search" [0139.544] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\") returned="C:\\Users\\All Users\\Microsoft\\Search\\" [0139.544] wcscat (in: _Dest=0x2fe6cc8, _Source="Data" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data" [0143.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0143.429] FindNextFileW (in: hFindFile=0x8098e90, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0143.429] FindClose (in: hFindFile=0x8098e90 | out: hFindFile=0x8098e90) returned 1 [0143.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0143.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ea88) returned 1 [0143.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5df8) returned 1 Thread: id = 893 os_tid = 0x14ec [0139.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f33330 [0139.544] wcscpy (in: _Dest=0x3f33330, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0139.544] wcscat (in: _Dest=0x3f33330, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0139.544] wcscat (in: _Dest=0x3f33330, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*" [0139.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86880 [0139.545] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099510 [0140.960] wcscmp (_String1=".", _String2=".") returned 0 [0140.960] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.960] wcscmp (_String1="..", _String2=".") returned 1 [0140.960] wcscmp (_String1="..", _String2="..") returned 0 [0140.960] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0140.960] wcscmp (_String1="Default Pictures", _String2=".") returned 1 [0140.960] wcscmp (_String1="Default Pictures", _String2="..") returned 1 [0140.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35640 [0140.961] wcscpy (in: _Dest=0x3f35640, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0140.961] wcscat (in: _Dest=0x3f35640, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0140.961] wcscat (in: _Dest=0x3f35640, _Source="Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0154.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f35640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0154.183] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9250c90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEBsYm5.dat", cAlternateFileName="")) returned 1 [0154.183] wcscmp (_String1="EEBsYm5.dat", _String2=".") returned 1 [0154.183] wcscmp (_String1="EEBsYm5.dat", _String2="..") returned 1 [0154.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f4d0 [0154.183] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0154.183] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0154.183] wcscat (in: _Dest=0x3e1f4d0, _Source="EEBsYm5.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat" [0154.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2414 [0154.185] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0154.185] wcscmp (_String1="guest.bmp", _String2=".") returned 1 [0154.185] wcscmp (_String1="guest.bmp", _String2="..") returned 1 [0154.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfdd8 [0154.185] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0154.185] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0154.185] wcscat (in: _Dest=0x81bfdd8, _Source="guest.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" [0154.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0154.187] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0154.187] wcscmp (_String1="user.bmp", _String2=".") returned 1 [0154.187] wcscmp (_String1="user.bmp", _String2="..") returned 1 [0154.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5288 [0154.187] wcscpy (in: _Dest=0x3dc5288, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0154.187] wcscat (in: _Dest=0x3dc5288, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0154.187] wcscat (in: _Dest=0x3dc5288, _Source="user.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" [0154.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x241c [0154.189] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0154.189] FindClose (in: hFindFile=0x8099510 | out: hFindFile=0x8099510) returned 1 [0154.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86880) returned 1 [0154.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 [0154.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39778) returned 1 Thread: id = 894 os_tid = 0x14f0 [0139.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e22d50 [0139.545] wcscpy (in: _Dest=0x3e22d50, _Source="C:\\Users\\All Users\\Microsoft\\Vault" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault" [0139.545] wcscat (in: _Dest=0x3e22d50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault\\") returned="C:\\Users\\All Users\\Microsoft\\Vault\\" [0139.545] wcscat (in: _Dest=0x3e22d50, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault\\*") returned="C:\\Users\\All Users\\Microsoft\\Vault\\*" [0139.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0139.545] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0139.545] wcscmp (_String1=".", _String2=".") returned 0 [0139.545] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.546] wcscmp (_String1="..", _String2=".") returned 1 [0139.546] wcscmp (_String1="..", _String2="..") returned 0 [0139.546] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.546] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0139.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0139.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22d50) returned 1 [0139.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6078) returned 1 Thread: id = 895 os_tid = 0x14f4 [0139.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e22d50 [0139.547] wcscpy (in: _Dest=0x3e22d50, _Source="C:\\Users\\All Users\\Microsoft\\VISIO" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO" [0139.547] wcscat (in: _Dest=0x3e22d50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO\\") returned="C:\\Users\\All Users\\Microsoft\\VISIO\\" [0139.548] wcscat (in: _Dest=0x3e22d50, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO\\*") returned="C:\\Users\\All Users\\Microsoft\\VISIO\\*" [0139.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0139.548] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0139.548] wcscmp (_String1=".", _String2=".") returned 0 [0139.548] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.548] wcscmp (_String1="..", _String2=".") returned 1 [0139.548] wcscmp (_String1="..", _String2="..") returned 0 [0139.548] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.548] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0139.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0139.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22d50) returned 1 [0139.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6028) returned 1 Thread: id = 896 os_tid = 0x14f8 [0139.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e22d50 [0139.550] wcscpy (in: _Dest=0x3e22d50, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0139.550] wcscat (in: _Dest=0x3e22d50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0139.550] wcscat (in: _Dest=0x3e22d50, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\*" [0139.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0139.550] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0139.550] wcscmp (_String1=".", _String2=".") returned 0 [0139.550] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.550] wcscmp (_String1="..", _String2=".") returned 1 [0139.550] wcscmp (_String1="..", _String2="..") returned 0 [0139.550] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0139.550] wcscmp (_String1="AIT", _String2=".") returned 1 [0139.551] wcscmp (_String1="AIT", _String2="..") returned 1 [0139.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe7448 [0139.551] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0139.551] wcscat (in: _Dest=0x2fe7448, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0139.551] wcscat (in: _Dest=0x2fe7448, _Source="AIT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" [0141.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0141.411] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b470439, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xd800ce10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd800ce10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0141.411] wcscmp (_String1="Caches", _String2=".") returned 1 [0141.411] wcscmp (_String1="Caches", _String2="..") returned 1 [0141.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0cc8 [0141.411] wcscpy (in: _Dest=0x2fe0cc8, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.411] wcscat (in: _Dest=0x2fe0cc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.411] wcscat (in: _Dest=0x2fe0cc8, _Source="Caches" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Caches") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches" [0141.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0cc8) returned 1 [0141.411] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0141.411] wcscmp (_String1="DeviceMetadataStore", _String2=".") returned 1 [0141.411] wcscmp (_String1="DeviceMetadataStore", _String2="..") returned 1 [0141.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5ff0 [0141.411] wcscpy (in: _Dest=0x3da5ff0, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.412] wcscat (in: _Dest=0x3da5ff0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.412] wcscat (in: _Dest=0x3da5ff0, _Source="DeviceMetadataStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" [0141.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3da5ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0141.413] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0141.413] wcscmp (_String1="DRM", _String2=".") returned 1 [0141.413] wcscmp (_String1="DRM", _String2="..") returned 1 [0141.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe0cc8 [0141.413] wcscpy (in: _Dest=0x2fe0cc8, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.413] wcscat (in: _Dest=0x2fe0cc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.413] wcscat (in: _Dest=0x2fe0cc8, _Source="DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0141.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe0cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0141.414] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0141.414] wcscmp (_String1="GameExplorer", _String2=".") returned 1 [0141.414] wcscmp (_String1="GameExplorer", _String2="..") returned 1 [0141.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f397e8 [0141.414] wcscpy (in: _Dest=0x3f397e8, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.414] wcscat (in: _Dest=0x3f397e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.414] wcscat (in: _Dest=0x3f397e8, _Source="GameExplorer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" [0141.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f397e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0141.415] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7202b9f0, ftLastAccessTime.dwHighDateTime=0x1d30232, ftLastWriteTime.dwLowDateTime=0x7202b9f0, ftLastWriteTime.dwHighDateTime=0x1d30232, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0141.415] wcscmp (_String1="Power Efficiency Diagnostics", _String2=".") returned 1 [0141.415] wcscmp (_String1="Power Efficiency Diagnostics", _String2="..") returned 1 [0141.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f356d0 [0141.415] wcscpy (in: _Dest=0x3f356d0, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.415] wcscat (in: _Dest=0x3f356d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.415] wcscat (in: _Dest=0x3f356d0, _Source="Power Efficiency Diagnostics" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0141.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f356d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0141.417] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0141.417] wcscmp (_String1="Ringtones", _String2=".") returned 1 [0141.417] wcscmp (_String1="Ringtones", _String2="..") returned 1 [0141.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c5a0 [0141.417] wcscpy (in: _Dest=0x3d8c5a0, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.417] wcscat (in: _Dest=0x3d8c5a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.417] wcscat (in: _Dest=0x3d8c5a0, _Source="Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0141.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8c5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0141.418] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0141.418] wcscmp (_String1="Sqm", _String2=".") returned 1 [0141.418] wcscmp (_String1="Sqm", _String2="..") returned 1 [0141.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6d28 [0141.418] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.418] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.418] wcscat (in: _Dest=0x2fe6d28, _Source="Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0141.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0141.419] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0141.419] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0141.419] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0141.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e348 [0141.419] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.420] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.420] wcscat (in: _Dest=0x3d8e348, _Source="Start Menu" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" [0141.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0141.421] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0141.421] wcscmp (_String1="Templates", _String2=".") returned 1 [0141.421] wcscmp (_String1="Templates", _String2="..") returned 1 [0141.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecd3a8 [0141.421] wcscpy (in: _Dest=0x3ecd3a8, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.421] wcscat (in: _Dest=0x3ecd3a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.421] wcscat (in: _Dest=0x3ecd3a8, _Source="Templates" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" [0141.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0141.422] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0141.422] wcscmp (_String1="WER", _String2=".") returned 1 [0141.422] wcscmp (_String1="WER", _String2="..") returned 1 [0141.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe7028 [0141.422] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0141.422] wcscat (in: _Dest=0x2fe7028, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0141.422] wcscat (in: _Dest=0x2fe7028, _Source="WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0141.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe7028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0141.423] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0141.423] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0141.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0141.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22d50) returned 1 [0141.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0efb0) returned 1 Thread: id = 897 os_tid = 0x14fc [0140.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe68a8 [0140.392] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0140.392] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\" [0140.392] wcscat (in: _Dest=0x2fe68a8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\*" [0140.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100d40 [0140.392] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*", lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f382d8 [0140.393] wcscmp (_String1=".", _String2=".") returned 0 [0140.393] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.393] wcscmp (_String1="..", _String2=".") returned 1 [0140.393] wcscmp (_String1="..", _String2="..") returned 0 [0140.393] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0140.393] wcscmp (_String1="MSFax", _String2=".") returned 1 [0140.393] wcscmp (_String1="MSFax", _String2="..") returned 1 [0140.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ecd5b0 [0140.393] wcscpy (in: _Dest=0x3ecd5b0, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0140.393] wcscat (in: _Dest=0x3ecd5b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\" [0140.393] wcscat (in: _Dest=0x3ecd5b0, _Source="MSFax" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" [0144.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c [0144.559] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0144.559] wcscmp (_String1="MSScan", _String2=".") returned 1 [0144.559] wcscmp (_String1="MSScan", _String2="..") returned 1 [0144.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c5a0 [0144.559] wcscpy (in: _Dest=0x3d8c5a0, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0144.559] wcscat (in: _Dest=0x3d8c5a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\" [0144.560] wcscat (in: _Dest=0x3d8c5a0, _Source="MSScan" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" [0144.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8c5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0144.561] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0144.561] FindClose (in: hFindFile=0x3f382d8 | out: hFindFile=0x3f382d8) returned 1 [0144.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100d40) returned 1 [0144.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 [0144.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 909 os_tid = 0x1504 [0140.393] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\ija-r\\-jc 5zf ffkrvztp-s.odp")) returned 0x20 [0140.393] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp", dwFileAttributes=0x20) returned 1 [0140.394] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\ija-r\\-jc 5zf ffkrvztp-s.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf28 [0140.394] GetFileSizeEx (in: hFile=0xf28, lpFileSize=0x946fea0 | out: lpFileSize=0x946fea0*=70422) returned 1 [0140.394] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x11312, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.394] ReadFile (in: hFile=0xf28, lpBuffer=0x946feac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x946fe88, lpOverlapped=0x0 | out: lpBuffer=0x946feac*, lpNumberOfBytesRead=0x946fe88*=0x4, lpOverlapped=0x0) returned 1 [0140.395] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad08 [0140.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0140.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0140.396] NtQuerySystemTime (in: CurrentTime=0x946fe28 | out: CurrentTime=0x946fe28*=132471540090456000) returned 0x0 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0xbbedb6b [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7edbd9c9 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7423b96d [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x2f631ab9 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x2a8e6675 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x5d8db785 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x4a4cae68 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7cde2169 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x1016f0ff [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x2e609be [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x459966f8 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x1222bba9 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x5f773599 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x170a05ef [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x67d4475d [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x23a8873a [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7e267daa [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7fd5942e [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x1fac3a0d [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7168a151 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x19e5b6ee [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0xaab2fef [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7e5080cf [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x5d82a867 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x34bcd560 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7810f981 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7d41b08c [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x7f81ac60 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0xe4949d9 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x27f57170 [0140.396] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x4fc1e733 [0140.397] RtlRandomEx (in: Seed=0x946fe20 | out: Seed=0x946fe20) returned 0x4ab8fefc [0140.405] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.405] ReadFile (in: hFile=0xf28, lpBuffer=0x80bc0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x946fe28, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesRead=0x946fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0140.405] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x830a3d8 [0140.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67d90 [0140.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad08 [0140.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad08) returned 1 [0140.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bfca8 [0140.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad08 [0140.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0140.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0140.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 [0140.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a3d8) returned 1 [0140.406] WriteFile (in: hFile=0xf28, lpBuffer=0x80bfca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x946fe28, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesWritten=0x946fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0141.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0141.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0141.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x8309778 [0141.672] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.672] WriteFile (in: hFile=0xf28, lpBuffer=0x3042500*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x946fe94, lpOverlapped=0x0 | out: lpBuffer=0x3042500*, lpNumberOfBytesWritten=0x946fe94*=0x11e, lpOverlapped=0x0) returned 1 [0141.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0141.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83092b0) returned 1 [0141.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0141.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309778) returned 1 [0141.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad08) returned 1 [0141.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0141.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0141.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0141.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11468 [0141.787] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp" [0141.787] wcscat (in: _Dest=0x3e11468, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp.f0dbec" [0141.787] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp.f0dbec", NtPathName=0x946fe18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\-jc 5zF fFKRVztp-S.odp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b718 [0141.831] FlushFileBuffers (hFile=0xf28) returned 1 [0141.884] CloseHandle (hObject=0xf28) returned 1 [0141.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f31260 [0141.896] wcscpy (in: _Dest=0x3f31260, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\" [0141.896] wcscat (in: _Dest=0x3f31260, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\F0DBEC-Readme.txt" [0141.896] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\ija-r\\f0dbec-readme.txt")) returned 0xffffffff [0141.896] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\ija-r\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf98 [0141.925] WriteFile (in: hFile=0xf98, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x946fe3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x946fe3c*=0x70c, lpOverlapped=0x0) returned 1 [0141.930] CloseHandle (hObject=0xf98) returned 1 [0141.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31260) returned 1 [0141.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34cb0) returned 1 Thread: id = 910 os_tid = 0x1508 [0140.410] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\ija-r\\koh_vizqav.pps")) returned 0x20 [0140.410] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps", dwFileAttributes=0x20) returned 1 [0140.410] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\ija-r\\koh_vizqav.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf30 [0140.410] GetFileSizeEx (in: hFile=0xf30, lpFileSize=0x7e9fdf8 | out: lpFileSize=0x7e9fdf8*=87539) returned 1 [0140.410] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x155ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.410] ReadFile (in: hFile=0xf30, lpBuffer=0x7e9fe04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e9fde0, lpOverlapped=0x0 | out: lpBuffer=0x7e9fe04*, lpNumberOfBytesRead=0x7e9fde0*=0x4, lpOverlapped=0x0) returned 1 [0140.412] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0140.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae70 [0140.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0140.412] NtQuerySystemTime (in: CurrentTime=0x7e9fd80 | out: CurrentTime=0x7e9fd80*=132471540090612000) returned 0x0 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x75655e5d [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x2b24587b [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x4d435bf5 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x714de9e8 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x55c62b03 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x19aba8d4 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x58bc92c9 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x4906f6a1 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x7eda1369 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x1626568c [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x5d0906e0 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x4fa408f4 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x14aaa250 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0xa8ae93 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x5978c4e3 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x601e2ebe [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x3d5e0cb9 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x6531a735 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x73c7ec79 [0140.412] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0xee541c3 [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x2cd676a1 [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x5a2968e0 [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x5e630dd3 [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0xa27900 [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x31f72a9e [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x573cf769 [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x3bb5258b [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x73e1600b [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x2abae5aa [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x59ef55bc [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x454bd4f5 [0140.413] RtlRandomEx (in: Seed=0x7e9fd78 | out: Seed=0x7e9fd78) returned 0x28af86b2 [0140.420] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.420] ReadFile (in: hFile=0xf30, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e9fd80, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0x7e9fd80*=0x3c00, lpOverlapped=0x0) returned 1 [0140.421] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d630 [0140.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67d90 [0140.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0140.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0140.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809e060 [0140.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0140.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0140.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0140.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 [0140.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d630) returned 1 [0140.422] WriteFile (in: hFile=0xf30, lpBuffer=0x809e060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e9fd80, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesWritten=0x7e9fd80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0141.677] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.677] ReadFile (in: hFile=0xf30, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e9fd80, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0x7e9fd80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.677] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83092f8 [0141.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0141.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0141.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab78) returned 1 [0141.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809e060 [0141.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0141.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0141.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0141.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0141.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83092f8) returned 1 [0141.678] WriteFile (in: hFile=0xf30, lpBuffer=0x809e060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e9fd80, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesWritten=0x7e9fd80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0141.681] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x119f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.681] ReadFile (in: hFile=0xf30, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e9fd80, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0x7e9fd80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.682] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x119f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83092f8 [0141.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0141.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b208 [0141.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b208) returned 1 [0141.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809e060 [0141.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b208 [0141.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0141.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0141.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0141.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83092f8) returned 1 [0141.682] WriteFile (in: hFile=0xf30, lpBuffer=0x809e060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e9fd80, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesWritten=0x7e9fd80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0141.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3c78 [0141.684] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.684] WriteFile (in: hFile=0xf30, lpBuffer=0x3e17398*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x7e9fdec, lpOverlapped=0x0 | out: lpBuffer=0x3e17398*, lpNumberOfBytesWritten=0x7e9fdec*=0x14e, lpOverlapped=0x0) returned 1 [0141.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17398) returned 1 [0141.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8088) returned 1 [0141.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0141.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0141.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3c78) returned 1 [0141.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae70) returned 1 [0141.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aec0) returned 1 [0141.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0141.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f348c0 [0141.796] wcscpy (in: _Dest=0x3f348c0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps" [0141.796] wcscat (in: _Dest=0x3f348c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps.f0dbec" [0141.796] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps.f0dbec", NtPathName=0x7e9fd70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\KOh_vIZQav.pps.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3ef8e38 [0141.833] FlushFileBuffers (hFile=0xf30) returned 1 [0141.884] CloseHandle (hObject=0xf30) returned 1 [0141.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30b78 [0141.898] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\" [0141.898] wcscat (in: _Dest=0x3f30b78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\F0DBEC-Readme.txt" [0141.898] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\ija-R\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\ija-r\\f0dbec-readme.txt")) returned 0x20 [0141.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 [0141.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0088) returned 1 Thread: id = 911 os_tid = 0x150c [0140.422] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\3ttv-mpanqpyl6nw.xlsx")) returned 0x20 [0140.422] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx", dwFileAttributes=0x20) returned 1 [0140.422] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\3ttv-mpanqpyl6nw.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x718 [0140.422] GetFileSizeEx (in: hFile=0x718, lpFileSize=0x91df960 | out: lpFileSize=0x91df960*=32246) returned 1 [0140.422] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x7df2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.423] ReadFile (in: hFile=0x718, lpBuffer=0x91df96c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x91df948, lpOverlapped=0x0 | out: lpBuffer=0x91df96c*, lpNumberOfBytesRead=0x91df948*=0x4, lpOverlapped=0x0) returned 1 [0140.424] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0140.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0140.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af38 [0140.424] NtQuerySystemTime (in: CurrentTime=0x91df8e8 | out: CurrentTime=0x91df8e8*=132471540090768000) returned 0x0 [0140.424] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x5db69a55 [0140.424] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x15f97cc0 [0140.424] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x7ce71b61 [0140.424] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x2d2bf87f [0140.424] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x6158f640 [0140.424] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0xe4937cc [0140.424] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x5a273eed [0140.424] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x21b2c25b [0140.424] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x44df6440 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x4ea9cb40 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x6c746fc9 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x75926174 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x3efe1201 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x31ee20d8 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x316195da [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x73f5860d [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x45b3fa01 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x780fb538 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0xa5b087d [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x57ce9686 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x37c86df0 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x37c012e0 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x3a5ddb59 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x8e1e0f2 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0xea3ace4 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x5acdca9a [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x7e1308a1 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x77455b94 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x26332d67 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x4e9c0274 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x260d9ee2 [0140.425] RtlRandomEx (in: Seed=0x91df8e0 | out: Seed=0x91df8e0) returned 0x646548e0 [0140.433] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.433] ReadFile (in: hFile=0x718, lpBuffer=0x80b0c88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x91df8e8, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesRead=0x91df8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0140.434] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d4c8 [0140.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67d90 [0140.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0140.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0140.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0140.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0140.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af38 [0140.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0140.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 [0140.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d4c8) returned 1 [0140.434] WriteFile (in: hFile=0x718, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x91df8e8, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0x91df8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0141.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0141.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0141.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2fc8b08 [0141.680] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.681] WriteFile (in: hFile=0x718, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x91df954, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0x91df954*=0x11c, lpOverlapped=0x0) returned 1 [0141.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0141.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8e48) returned 1 [0141.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0141.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8b08) returned 1 [0141.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0141.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0141.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0141.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af88) returned 1 [0141.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11788 [0141.793] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx" [0141.793] wcscat (in: _Dest=0x3e11788, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx.f0dbec" [0141.793] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx.f0dbec", NtPathName=0x91df8d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\3tTv-MpanQPyl6Nw.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7d88 [0141.816] FlushFileBuffers (hFile=0x718) returned 1 [0141.884] CloseHandle (hObject=0x718) returned 1 [0141.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f359a0 [0141.891] wcscpy (in: _Dest=0x3f359a0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\" [0141.891] wcscat (in: _Dest=0x3f359a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\F0DBEC-Readme.txt" [0141.891] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\f0dbec-readme.txt")) returned 0xffffffff [0141.891] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdac [0141.913] WriteFile (in: hFile=0xdac, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x91df8fc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x91df8fc*=0x70c, lpOverlapped=0x0) returned 1 [0141.918] CloseHandle (hObject=0xdac) returned 1 [0141.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f359a0) returned 1 [0141.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f351c0) returned 1 Thread: id = 912 os_tid = 0x1510 [0140.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3db0a88 [0140.435] wcscpy (in: _Dest=0x3db0a88, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp" [0140.435] wcscat (in: _Dest=0x3db0a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" [0140.435] wcscat (in: _Dest=0x3db0a88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\*") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\*" [0140.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8102080 [0140.435] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\*", lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c0bcae0, ftCreationTime.dwHighDateTime=0x1d5e3ff, ftLastAccessTime.dwLowDateTime=0xd7538030, ftLastAccessTime.dwHighDateTime=0x1d5df27, ftLastWriteTime.dwLowDateTime=0xd7538030, ftLastWriteTime.dwHighDateTime=0x1d5df27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37998 [0140.435] wcscmp (_String1=".", _String2=".") returned 0 [0140.435] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c0bcae0, ftCreationTime.dwHighDateTime=0x1d5e3ff, ftLastAccessTime.dwLowDateTime=0xd7538030, ftLastAccessTime.dwHighDateTime=0x1d5df27, ftLastWriteTime.dwLowDateTime=0xd7538030, ftLastWriteTime.dwHighDateTime=0x1d5df27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.435] wcscmp (_String1="..", _String2=".") returned 1 [0140.435] wcscmp (_String1="..", _String2="..") returned 0 [0140.435] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee3ec50, ftCreationTime.dwHighDateTime=0x1d5d985, ftLastAccessTime.dwLowDateTime=0x876bcfa0, ftLastAccessTime.dwHighDateTime=0x1d5da31, ftLastWriteTime.dwLowDateTime=0x876bcfa0, ftLastWriteTime.dwHighDateTime=0x1d5da31, nFileSizeHigh=0x0, nFileSizeLow=0xadb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESvL-YqTa9CWP.odt", cAlternateFileName="ESVL-Y~1.ODT")) returned 1 [0140.435] wcscmp (_String1="ESvL-YqTa9CWP.odt", _String2=".") returned 1 [0140.435] wcscmp (_String1="ESvL-YqTa9CWP.odt", _String2="..") returned 1 [0140.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7738 [0140.435] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp" [0140.436] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" [0140.436] wcscat (in: _Dest=0x2c7738, _Source="ESvL-YqTa9CWP.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt" [0145.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0145.060] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6733d0, ftCreationTime.dwHighDateTime=0x1d5e170, ftLastAccessTime.dwLowDateTime=0x1f7083f0, ftLastAccessTime.dwHighDateTime=0x1d5dd74, ftLastWriteTime.dwLowDateTime=0x1f7083f0, ftLastWriteTime.dwHighDateTime=0x1d5dd74, nFileSizeHigh=0x0, nFileSizeLow=0xc76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GGq0TN.odp", cAlternateFileName="")) returned 1 [0145.060] wcscmp (_String1="GGq0TN.odp", _String2=".") returned 1 [0145.060] wcscmp (_String1="GGq0TN.odp", _String2="..") returned 1 [0145.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34a70 [0145.060] wcscpy (in: _Dest=0x3f34a70, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp" [0145.060] wcscat (in: _Dest=0x3f34a70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" [0145.060] wcscat (in: _Dest=0x3f34a70, _Source="GGq0TN.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp" [0145.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0145.061] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6034a50, ftCreationTime.dwHighDateTime=0x1d5e489, ftLastAccessTime.dwLowDateTime=0x9038b2e0, ftLastAccessTime.dwHighDateTime=0x1d5e44c, ftLastWriteTime.dwLowDateTime=0x9038b2e0, ftLastWriteTime.dwHighDateTime=0x1d5e44c, nFileSizeHigh=0x0, nFileSizeLow=0xc15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpnS ubWPM22psILI.odp", cAlternateFileName="MPNSUB~1.ODP")) returned 1 [0145.061] wcscmp (_String1="MpnS ubWPM22psILI.odp", _String2=".") returned 1 [0145.061] wcscmp (_String1="MpnS ubWPM22psILI.odp", _String2="..") returned 1 [0145.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187b50 [0145.061] wcscpy (in: _Dest=0x8187b50, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp" [0145.061] wcscat (in: _Dest=0x8187b50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" [0145.061] wcscat (in: _Dest=0x8187b50, _Source="MpnS ubWPM22psILI.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp" [0145.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0145.063] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6034a50, ftCreationTime.dwHighDateTime=0x1d5e489, ftLastAccessTime.dwLowDateTime=0x9038b2e0, ftLastAccessTime.dwHighDateTime=0x1d5e44c, ftLastWriteTime.dwLowDateTime=0x9038b2e0, ftLastWriteTime.dwHighDateTime=0x1d5e44c, nFileSizeHigh=0x0, nFileSizeLow=0xc15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpnS ubWPM22psILI.odp", cAlternateFileName="MPNSUB~1.ODP")) returned 0 [0145.063] FindClose (in: hFindFile=0x3f37998 | out: hFindFile=0x3f37998) returned 1 [0145.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8102080) returned 1 [0145.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0a88) returned 1 [0145.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 Thread: id = 913 os_tid = 0x1518 [0140.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3daf888 [0140.436] wcscpy (in: _Dest=0x3daf888, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0140.436] wcscat (in: _Dest=0x3daf888, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0140.436] wcscat (in: _Dest=0x3daf888, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\*" [0140.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100fa8 [0140.436] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f18 [0140.436] wcscmp (_String1=".", _String2=".") returned 0 [0140.436] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.211] wcscmp (_String1="..", _String2=".") returned 1 [0141.211] wcscmp (_String1="..", _String2="..") returned 0 [0141.211] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x260e6157, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110.manifest", cAlternateFileName="580302~1.MAN")) returned 1 [0141.211] wcscmp (_String1="58.0.3029.110.manifest", _String2=".") returned 1 [0141.211] wcscmp (_String1="58.0.3029.110.manifest", _String2="..") returned 1 [0141.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186b90 [0141.212] wcscpy (in: _Dest=0x8186b90, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0141.212] wcscat (in: _Dest=0x8186b90, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0141.212] wcscat (in: _Dest=0x8186b90, _Source="58.0.3029.110.manifest" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" [0149.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0149.995] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0bfb530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0bfb530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf98067d6, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2164d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll", cAlternateFileName="")) returned 1 [0149.995] wcscmp (_String1="chrome.dll", _String2=".") returned 1 [0149.995] wcscmp (_String1="chrome.dll", _String2="..") returned 1 [0149.995] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf9ebb1a8, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll.sig", cAlternateFileName="CHROME~3.SIG")) returned 1 [0149.995] wcscmp (_String1="chrome.dll.sig", _String2=".") returned 1 [0149.995] wcscmp (_String1="chrome.dll.sig", _String2="..") returned 1 [0149.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3daa0 [0149.995] wcscpy (in: _Dest=0x3e3daa0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0149.995] wcscat (in: _Dest=0x3e3daa0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0149.996] wcscat (in: _Dest=0x3e3daa0, _Source="chrome.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" [0149.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3daa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0149.997] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf919e2b8, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe.sig", cAlternateFileName="CHROME~2.SIG")) returned 1 [0149.997] wcscmp (_String1="chrome.exe.sig", _String2=".") returned 1 [0149.997] wcscmp (_String1="chrome.exe.sig", _String2="..") returned 1 [0149.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c9f0 [0149.997] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0149.997] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0149.997] wcscat (in: _Dest=0x32c9f0, _Source="chrome.exe.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" [0149.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0149.998] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2613dfbb, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x6f44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_100_percent.pak", cAlternateFileName="CHROME~1.PAK")) returned 1 [0149.998] wcscmp (_String1="chrome_100_percent.pak", _String2=".") returned 1 [0149.998] wcscmp (_String1="chrome_100_percent.pak", _String2="..") returned 1 [0149.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81868f0 [0149.999] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0149.999] wcscat (in: _Dest=0x81868f0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0149.999] wcscat (in: _Dest=0x81868f0, _Source="chrome_100_percent.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" [0149.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81868f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0150.000] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26f2acaf, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xb0b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="CHROME~2.PAK")) returned 1 [0150.000] wcscmp (_String1="chrome_200_percent.pak", _String2=".") returned 1 [0150.000] wcscmp (_String1="chrome_200_percent.pak", _String2="..") returned 1 [0150.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186d88 [0150.001] wcscpy (in: _Dest=0x8186d88, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.001] wcscat (in: _Dest=0x8186d88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.001] wcscat (in: _Dest=0x8186d88, _Source="chrome_200_percent.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" [0150.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0150.002] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1cf11f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe1cf11f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfa6ed2fe, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2ca2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0150.002] wcscmp (_String1="chrome_child.dll", _String2=".") returned 1 [0150.002] wcscmp (_String1="chrome_child.dll", _String2="..") returned 1 [0150.002] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfaf456ae, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="CHROME~1.SIG")) returned 1 [0150.002] wcscmp (_String1="chrome_child.dll.sig", _String2=".") returned 1 [0150.002] wcscmp (_String1="chrome_child.dll.sig", _String2="..") returned 1 [0150.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186998 [0150.003] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.003] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.003] wcscat (in: _Dest=0x8186998, _Source="chrome_child.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" [0150.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0150.004] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2037030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2037030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfb1a7c4e, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x69d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~2.DLL")) returned 1 [0150.004] wcscmp (_String1="chrome_elf.dll", _String2=".") returned 1 [0150.004] wcscmp (_String1="chrome_elf.dll", _String2="..") returned 1 [0150.004] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2037030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2037030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfb515264, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x75558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="CHROME~3.DLL")) returned 1 [0150.005] wcscmp (_String1="chrome_watcher.dll", _String2=".") returned 1 [0150.005] wcscmp (_String1="chrome_watcher.dll", _String2="..") returned 1 [0150.005] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2645ed83, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x392eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0150.005] wcscmp (_String1="d3dcompiler_47.dll", _String2=".") returned 1 [0150.005] wcscmp (_String1="d3dcompiler_47.dll", _String2="..") returned 1 [0150.005] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="DEFAUL~1")) returned 1 [0150.005] wcscmp (_String1="default_apps", _String2=".") returned 1 [0150.005] wcscmp (_String1="default_apps", _String2="..") returned 1 [0150.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ce18 [0150.005] wcscpy (in: _Dest=0x32ce18, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.005] wcscat (in: _Dest=0x32ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.005] wcscat (in: _Dest=0x32ce18, _Source="default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0150.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x32ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0150.006] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2037030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2037030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfba7270c, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1 [0150.007] wcscmp (_String1="eventlog_provider.dll", _String2=".") returned 1 [0150.007] wcscmp (_String1="eventlog_provider.dll", _String2="..") returned 1 [0150.007] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0150.007] wcscmp (_String1="Extensions", _String2=".") returned 1 [0150.007] wcscmp (_String1="Extensions", _String2="..") returned 1 [0150.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f355b0 [0150.007] wcscpy (in: _Dest=0x3f355b0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.007] wcscat (in: _Dest=0x3f355b0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.007] wcscat (in: _Dest=0x3f355b0, _Source="Extensions" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" [0150.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f355b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0150.008] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a0c350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a0c350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2647c24f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0150.009] wcscmp (_String1="icudtl.dat", _String2=".") returned 1 [0150.009] wcscmp (_String1="icudtl.dat", _String2="..") returned 1 [0150.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f357f0 [0150.009] wcscpy (in: _Dest=0x3f357f0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.009] wcscat (in: _Dest=0x3f357f0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.009] wcscat (in: _Dest=0x3f357f0, _Source="icudtl.dat" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" [0150.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f357f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0150.010] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0150.010] wcscmp (_String1="Installer", _String2=".") returned 1 [0150.010] wcscmp (_String1="Installer", _String2="..") returned 1 [0150.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35400 [0150.011] wcscpy (in: _Dest=0x3f35400, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.011] wcscat (in: _Dest=0x3f35400, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.011] wcscat (in: _Dest=0x3f35400, _Source="Installer" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" [0150.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f35400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0150.012] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20a9450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20a9450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfbe2c1d6, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0150.012] wcscmp (_String1="libegl.dll", _String2=".") returned 1 [0150.012] wcscmp (_String1="libegl.dll", _String2="..") returned 1 [0150.012] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20cf5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20cf5b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfc1e5ca0, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2bb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0150.012] wcscmp (_String1="libglesv2.dll", _String2=".") returned 1 [0150.012] wcscmp (_String1="libglesv2.dll", _String2="..") returned 1 [0150.012] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0acaa30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locales", cAlternateFileName="")) returned 1 [0150.012] wcscmp (_String1="Locales", _String2=".") returned 1 [0150.012] wcscmp (_String1="Locales", _String2="..") returned 1 [0150.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35ac0 [0150.012] wcscpy (in: _Dest=0x3f35ac0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.013] wcscat (in: _Dest=0x3f35ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.013] wcscat (in: _Dest=0x3f35ac0, _Source="Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0150.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f35ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0150.014] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20f5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20f5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfc684586, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x60e358, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl64.exe", cAlternateFileName="")) returned 1 [0150.014] wcscmp (_String1="nacl64.exe", _String2=".") returned 1 [0150.014] wcscmp (_String1="nacl64.exe", _String2="..") returned 1 [0150.014] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2651ada0, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x3404b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_32.nexe", cAlternateFileName="NACL_I~1.NEX")) returned 1 [0150.014] wcscmp (_String1="nacl_irt_x86_32.nexe", _String2=".") returned 1 [0150.014] wcscmp (_String1="nacl_irt_x86_32.nexe", _String2="..") returned 1 [0150.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186ed8 [0150.014] wcscpy (in: _Dest=0x8186ed8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.014] wcscat (in: _Dest=0x8186ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.014] wcscat (in: _Dest=0x8186ed8, _Source="nacl_irt_x86_32.nexe" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe" [0150.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0150.015] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2656dde2, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x410630, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="NACL_I~2.NEX")) returned 1 [0150.015] wcscmp (_String1="nacl_irt_x86_64.nexe", _String2=".") returned 1 [0150.015] wcscmp (_String1="nacl_irt_x86_64.nexe", _String2="..") returned 1 [0150.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186a40 [0150.015] wcscpy (in: _Dest=0x8186a40, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.015] wcscat (in: _Dest=0x8186a40, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.016] wcscat (in: _Dest=0x8186a40, _Source="nacl_irt_x86_64.nexe" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" [0150.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0150.017] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0af0b90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0af0b90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2657c848, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x40323, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0150.017] wcscmp (_String1="natives_blob.bin", _String2=".") returned 1 [0150.017] wcscmp (_String1="natives_blob.bin", _String2="..") returned 1 [0150.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e10608 [0150.017] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.017] wcscat (in: _Dest=0x3e10608, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.017] wcscat (in: _Dest=0x3e10608, _Source="natives_blob.bin" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" [0150.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0150.018] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b3ce50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b3ce50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265aae8b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x118671c, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pak", cAlternateFileName="RESOUR~1.PAK")) returned 1 [0150.018] wcscmp (_String1="resources.pak", _String2=".") returned 1 [0150.018] wcscmp (_String1="resources.pak", _String2="..") returned 1 [0150.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32bce0 [0150.018] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.018] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.018] wcscat (in: _Dest=0x32bce0, _Source="resources.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" [0150.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0150.019] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b3ce50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b3ce50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265afcad, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x10c4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0150.019] wcscmp (_String1="snapshot_blob.bin", _String2=".") returned 1 [0150.019] wcscmp (_String1="snapshot_blob.bin", _String2="..") returned 1 [0150.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11a08 [0150.020] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.020] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.020] wcscat (in: _Dest=0x3e11a08, _Source="snapshot_blob.bin" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" [0150.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b3c [0150.021] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1 [0150.021] wcscmp (_String1="VisualElements", _String2=".") returned 1 [0150.021] wcscmp (_String1="VisualElements", _String2="..") returned 1 [0150.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32bd78 [0150.021] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.021] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.021] wcscat (in: _Dest=0x32bd78, _Source="VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0150.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b40 [0150.022] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0150.022] wcscmp (_String1="WidevineCdm", _String2=".") returned 1 [0150.022] wcscmp (_String1="WidevineCdm", _String2="..") returned 1 [0150.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cbb8 [0150.022] wcscpy (in: _Dest=0x32cbb8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0150.022] wcscat (in: _Dest=0x32cbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0150.022] wcscat (in: _Dest=0x32cbb8, _Source="WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0150.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x32cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0150.023] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0150.023] FindClose (in: hFindFile=0x3f37f18 | out: hFindFile=0x3f37f18) returned 1 [0150.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100fa8) returned 1 [0150.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf888) returned 1 [0150.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23dc0) returned 1 Thread: id = 914 os_tid = 0x151c [0140.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files\\google\\chrome\\application\\chrome.visualelementsmanifest.xml")) returned 0x20 [0140.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", dwFileAttributes=0x20) returned 0 [0140.438] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.438] GetLastError () returned 0x5 [0140.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", dwFileAttributes=0x20) returned 0 [0140.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d290) returned 1 Thread: id = 915 os_tid = 0x1520 [0140.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3daf908 [0140.440] wcscpy (in: _Dest=0x3daf908, _Source="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" [0140.440] wcscat (in: _Dest=0x3daf908, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\" [0140.440] wcscat (in: _Dest=0x3daf908, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\*" [0140.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85a10 [0140.440] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0140.441] wcscmp (_String1=".", _String2=".") returned 0 [0140.441] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.441] wcscmp (_String1="..", _String2=".") returned 1 [0140.441] wcscmp (_String1="..", _String2="..") returned 0 [0140.441] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a2fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170531124044.pma", cAlternateFileName="201705~1.PMA")) returned 1 [0140.441] wcscmp (_String1="20170531124044.pma", _String2=".") returned 1 [0140.441] wcscmp (_String1="20170531124044.pma", _String2="..") returned 1 [0140.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c74b8 [0140.442] wcscpy (in: _Dest=0x2c74b8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" [0140.442] wcscat (in: _Dest=0x2c74b8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\" [0140.442] wcscat (in: _Dest=0x2c74b8, _Source="20170531124044.pma" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma" [0144.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c74b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0144.322] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a2fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170531124044.pma", cAlternateFileName="201705~1.PMA")) returned 0 [0144.322] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0144.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85a10) returned 1 [0144.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf908) returned 1 [0144.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 Thread: id = 916 os_tid = 0x1524 [0140.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f9f0 [0140.442] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" [0140.442] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\" [0140.442] wcscat (in: _Dest=0x3f2f9f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\*") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\*" [0140.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048718 [0140.443] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\*", lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c1f2340, ftCreationTime.dwHighDateTime=0x1d5df2d, ftLastAccessTime.dwLowDateTime=0xa1837fc0, ftLastAccessTime.dwHighDateTime=0x1d5db1a, ftLastWriteTime.dwLowDateTime=0xa1837fc0, ftLastWriteTime.dwHighDateTime=0x1d5db1a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0140.443] wcscmp (_String1=".", _String2=".") returned 0 [0140.443] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c1f2340, ftCreationTime.dwHighDateTime=0x1d5df2d, ftLastAccessTime.dwLowDateTime=0xa1837fc0, ftLastAccessTime.dwHighDateTime=0x1d5db1a, ftLastWriteTime.dwLowDateTime=0xa1837fc0, ftLastWriteTime.dwHighDateTime=0x1d5db1a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.443] wcscmp (_String1="..", _String2=".") returned 1 [0140.443] wcscmp (_String1="..", _String2="..") returned 0 [0140.443] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1f27950, ftCreationTime.dwHighDateTime=0x1d5e2dd, ftLastAccessTime.dwLowDateTime=0xba88b500, ftLastAccessTime.dwHighDateTime=0x1d5dea1, ftLastWriteTime.dwLowDateTime=0xba88b500, ftLastWriteTime.dwHighDateTime=0x1d5dea1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3ayWqTk", cAlternateFileName="")) returned 1 [0140.443] wcscmp (_String1="3ayWqTk", _String2=".") returned 1 [0140.443] wcscmp (_String1="3ayWqTk", _String2="..") returned 1 [0140.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2b2e0 [0140.444] wcscpy (in: _Dest=0x3e2b2e0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" [0140.444] wcscat (in: _Dest=0x3e2b2e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\" [0140.444] wcscat (in: _Dest=0x3e2b2e0, _Source="3ayWqTk" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk" [0144.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2b2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0144.325] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656cd40, ftCreationTime.dwHighDateTime=0x1d5e6c7, ftLastAccessTime.dwLowDateTime=0x6fc76ca0, ftLastAccessTime.dwHighDateTime=0x1d5e7f2, ftLastWriteTime.dwLowDateTime=0x6fc76ca0, ftLastWriteTime.dwHighDateTime=0x1d5e7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="B9Ur2WL.mp3", cAlternateFileName="")) returned 1 [0144.325] wcscmp (_String1="B9Ur2WL.mp3", _String2=".") returned 1 [0144.325] wcscmp (_String1="B9Ur2WL.mp3", _String2="..") returned 1 [0144.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11468 [0144.325] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" [0144.325] wcscat (in: _Dest=0x3e11468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\" [0144.325] wcscat (in: _Dest=0x3e11468, _Source="B9Ur2WL.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3" [0144.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c4 [0144.326] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a69de30, ftCreationTime.dwHighDateTime=0x1d5db74, ftLastAccessTime.dwLowDateTime=0xe25c16d0, ftLastAccessTime.dwHighDateTime=0x1d5e509, ftLastWriteTime.dwLowDateTime=0xe25c16d0, ftLastWriteTime.dwHighDateTime=0x1d5e509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lFCPtu7e5W9r7xKG", cAlternateFileName="LFCPTU~1")) returned 1 [0144.326] wcscmp (_String1="lFCPtu7e5W9r7xKG", _String2=".") returned 1 [0144.326] wcscmp (_String1="lFCPtu7e5W9r7xKG", _String2="..") returned 1 [0144.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187808 [0144.326] wcscpy (in: _Dest=0x8187808, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" [0144.326] wcscat (in: _Dest=0x8187808, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\" [0144.326] wcscat (in: _Dest=0x8187808, _Source="lFCPtu7e5W9r7xKG" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG" [0144.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8187808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0144.327] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b640e0, ftCreationTime.dwHighDateTime=0x1d5d9f1, ftLastAccessTime.dwLowDateTime=0x148b4a40, ftLastAccessTime.dwHighDateTime=0x1d5e14a, ftLastWriteTime.dwLowDateTime=0x148b4a40, ftLastWriteTime.dwHighDateTime=0x1d5e14a, nFileSizeHigh=0x0, nFileSizeLow=0x107ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Szmgf4W6m TteCq4ClCi.m4a", cAlternateFileName="SZMGF4~1.M4A")) returned 1 [0144.327] wcscmp (_String1="Szmgf4W6m TteCq4ClCi.m4a", _String2=".") returned 1 [0144.327] wcscmp (_String1="Szmgf4W6m TteCq4ClCi.m4a", _String2="..") returned 1 [0144.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7880 [0144.327] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj" [0144.327] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\" [0144.328] wcscat (in: _Dest=0x2ff7880, _Source="Szmgf4W6m TteCq4ClCi.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a" [0144.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0144.329] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b640e0, ftCreationTime.dwHighDateTime=0x1d5d9f1, ftLastAccessTime.dwLowDateTime=0x148b4a40, ftLastAccessTime.dwHighDateTime=0x1d5e14a, ftLastWriteTime.dwLowDateTime=0x148b4a40, ftLastWriteTime.dwHighDateTime=0x1d5e14a, nFileSizeHigh=0x0, nFileSizeLow=0x107ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Szmgf4W6m TteCq4ClCi.m4a", cAlternateFileName="SZMGF4~1.M4A")) returned 0 [0144.329] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0144.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048718) returned 1 [0144.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f9f0) returned 1 [0144.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 917 os_tid = 0x1528 [0140.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7238 [0140.444] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" [0140.445] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0140.445] wcscat (in: _Dest=0x2c7238, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\*") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\*" [0140.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a3f8 [0140.445] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\*", lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19ef8db0, ftCreationTime.dwHighDateTime=0x1d5e37b, ftLastAccessTime.dwLowDateTime=0xb859d0d0, ftLastAccessTime.dwHighDateTime=0x1d5e3b4, ftLastWriteTime.dwLowDateTime=0xb859d0d0, ftLastWriteTime.dwHighDateTime=0x1d5e3b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37858 [0140.445] wcscmp (_String1=".", _String2=".") returned 0 [0140.445] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19ef8db0, ftCreationTime.dwHighDateTime=0x1d5e37b, ftLastAccessTime.dwLowDateTime=0xb859d0d0, ftLastAccessTime.dwHighDateTime=0x1d5e3b4, ftLastWriteTime.dwLowDateTime=0xb859d0d0, ftLastWriteTime.dwHighDateTime=0x1d5e3b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.445] wcscmp (_String1="..", _String2=".") returned 1 [0140.445] wcscmp (_String1="..", _String2="..") returned 0 [0140.446] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3dedd0, ftCreationTime.dwHighDateTime=0x1d5e308, ftLastAccessTime.dwLowDateTime=0x6d7df7b0, ftLastAccessTime.dwHighDateTime=0x1d5e456, ftLastWriteTime.dwLowDateTime=0x6d7df7b0, ftLastWriteTime.dwHighDateTime=0x1d5e456, nFileSizeHigh=0x0, nFileSizeLow=0x579e, dwReserved0=0x0, dwReserved1=0x0, cFileName="-EZ3TM6Tz0ukmGaoB9V_.wav", cAlternateFileName="-EZ3TM~1.WAV")) returned 1 [0140.446] wcscmp (_String1="-EZ3TM6Tz0ukmGaoB9V_.wav", _String2=".") returned -1 [0140.446] wcscmp (_String1="-EZ3TM6Tz0ukmGaoB9V_.wav", _String2="..") returned -1 [0140.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e351b8 [0140.446] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" [0140.446] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0140.446] wcscat (in: _Dest=0x3e351b8, _Source="-EZ3TM6Tz0ukmGaoB9V_.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav" [0144.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e351b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0144.563] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c38b40, ftCreationTime.dwHighDateTime=0x1d5e245, ftLastAccessTime.dwLowDateTime=0xde268e0, ftLastAccessTime.dwHighDateTime=0x1d5e71c, ftLastWriteTime.dwLowDateTime=0xde268e0, ftLastWriteTime.dwHighDateTime=0x1d5e71c, nFileSizeHigh=0x0, nFileSizeLow=0x13fad, dwReserved0=0x0, dwReserved1=0x0, cFileName="huoPrqCrRvDbt.wav", cAlternateFileName="HUOPRQ~1.WAV")) returned 1 [0144.563] wcscmp (_String1="huoPrqCrRvDbt.wav", _String2=".") returned 1 [0144.563] wcscmp (_String1="huoPrqCrRvDbt.wav", _String2="..") returned 1 [0144.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333168 [0144.563] wcscpy (in: _Dest=0x333168, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" [0144.563] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0144.563] wcscat (in: _Dest=0x333168, _Source="huoPrqCrRvDbt.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav" [0144.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0144.564] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf57fb3d0, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0x3105aa90, ftLastAccessTime.dwHighDateTime=0x1d5e117, ftLastWriteTime.dwLowDateTime=0x3105aa90, ftLastWriteTime.dwHighDateTime=0x1d5e117, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IvTKHR2DOCxR", cAlternateFileName="IVTKHR~1")) returned 1 [0144.564] wcscmp (_String1="IvTKHR2DOCxR", _String2=".") returned 1 [0144.564] wcscmp (_String1="IvTKHR2DOCxR", _String2="..") returned 1 [0144.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c798 [0144.564] wcscpy (in: _Dest=0x35c798, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" [0144.564] wcscat (in: _Dest=0x35c798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0144.564] wcscat (in: _Dest=0x35c798, _Source="IvTKHR2DOCxR" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" [0144.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0144.565] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e09aca0, ftCreationTime.dwHighDateTime=0x1d5dccc, ftLastAccessTime.dwLowDateTime=0x842277e0, ftLastAccessTime.dwHighDateTime=0x1d5db6c, ftLastWriteTime.dwLowDateTime=0x842277e0, ftLastWriteTime.dwHighDateTime=0x1d5db6c, nFileSizeHigh=0x0, nFileSizeLow=0x17c17, dwReserved0=0x0, dwReserved1=0x0, cFileName="lnZ3azu.wav", cAlternateFileName="")) returned 1 [0144.565] wcscmp (_String1="lnZ3azu.wav", _String2=".") returned 1 [0144.565] wcscmp (_String1="lnZ3azu.wav", _String2="..") returned 1 [0144.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c218 [0144.565] wcscpy (in: _Dest=0x35c218, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" [0144.565] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0144.565] wcscat (in: _Dest=0x35c218, _Source="lnZ3azu.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav" [0144.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0144.566] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e089b0, ftCreationTime.dwHighDateTime=0x1d5e093, ftLastAccessTime.dwLowDateTime=0x32e655b0, ftLastAccessTime.dwHighDateTime=0x1d5db6a, ftLastWriteTime.dwLowDateTime=0x32e655b0, ftLastWriteTime.dwHighDateTime=0x1d5db6a, nFileSizeHigh=0x0, nFileSizeLow=0xda2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnxyNfeBshCNu.mp3", cAlternateFileName="PNXYNF~1.MP3")) returned 1 [0144.566] wcscmp (_String1="pnxyNfeBshCNu.mp3", _String2=".") returned 1 [0144.566] wcscmp (_String1="pnxyNfeBshCNu.mp3", _String2="..") returned 1 [0144.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333528 [0144.567] wcscpy (in: _Dest=0x333528, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" [0144.567] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0144.567] wcscat (in: _Dest=0x333528, _Source="pnxyNfeBshCNu.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3" [0144.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0144.568] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a81a140, ftCreationTime.dwHighDateTime=0x1d5dcfb, ftLastAccessTime.dwLowDateTime=0x3a5aacb0, ftLastAccessTime.dwHighDateTime=0x1d5dae3, ftLastWriteTime.dwLowDateTime=0x3a5aacb0, ftLastWriteTime.dwHighDateTime=0x1d5dae3, nFileSizeHigh=0x0, nFileSizeLow=0x17257, dwReserved0=0x0, dwReserved1=0x0, cFileName="pWWBIwnPB.m4a", cAlternateFileName="PWWBIW~1.M4A")) returned 1 [0144.568] wcscmp (_String1="pWWBIwnPB.m4a", _String2=".") returned 1 [0144.568] wcscmp (_String1="pWWBIwnPB.m4a", _String2="..") returned 1 [0144.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6f28 [0144.568] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" [0144.568] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0144.568] wcscat (in: _Dest=0x2ff6f28, _Source="pWWBIwnPB.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a" [0144.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0144.569] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c40e60, ftCreationTime.dwHighDateTime=0x1d5e30d, ftLastAccessTime.dwLowDateTime=0xc3a857d0, ftLastAccessTime.dwHighDateTime=0x1d5dfd7, ftLastWriteTime.dwLowDateTime=0xc3a857d0, ftLastWriteTime.dwHighDateTime=0x1d5dfd7, nFileSizeHigh=0x0, nFileSizeLow=0x187c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="t3Kq_MXAdQcPRdYL2H.wav", cAlternateFileName="T3KQ_M~1.WAV")) returned 1 [0144.569] wcscmp (_String1="t3Kq_MXAdQcPRdYL2H.wav", _String2=".") returned 1 [0144.569] wcscmp (_String1="t3Kq_MXAdQcPRdYL2H.wav", _String2="..") returned 1 [0144.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e34c40 [0144.569] wcscpy (in: _Dest=0x3e34c40, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u" [0144.569] wcscat (in: _Dest=0x3e34c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0144.569] wcscat (in: _Dest=0x3e34c40, _Source="t3Kq_MXAdQcPRdYL2H.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav" [0144.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0144.570] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c40e60, ftCreationTime.dwHighDateTime=0x1d5e30d, ftLastAccessTime.dwLowDateTime=0xc3a857d0, ftLastAccessTime.dwHighDateTime=0x1d5dfd7, ftLastWriteTime.dwLowDateTime=0xc3a857d0, ftLastWriteTime.dwHighDateTime=0x1d5dfd7, nFileSizeHigh=0x0, nFileSizeLow=0x187c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="t3Kq_MXAdQcPRdYL2H.wav", cAlternateFileName="T3KQ_M~1.WAV")) returned 0 [0144.570] FindClose (in: hFindFile=0x3f37858 | out: hFindFile=0x3f37858) returned 1 [0144.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a3f8) returned 1 [0144.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0144.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 918 os_tid = 0x152c [0140.450] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\ddialss5i5afheu.mp3")) returned 0x20 [0140.454] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3", dwFileAttributes=0x20) returned 1 [0140.454] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\ddialss5i5afheu.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf90 [0140.454] GetFileSizeEx (in: hFile=0xf90, lpFileSize=0xa8df958 | out: lpFileSize=0xa8df958*=57076) returned 1 [0140.454] SetFilePointerEx (in: hFile=0xf90, liDistanceToMove=0xdef0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.454] ReadFile (in: hFile=0xf90, lpBuffer=0xa8df964, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa8df940, lpOverlapped=0x0 | out: lpBuffer=0xa8df964*, lpNumberOfBytesRead=0xa8df940*=0x4, lpOverlapped=0x0) returned 1 [0140.456] SetFilePointerEx (in: hFile=0xf90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0140.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b000 [0140.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0140.456] NtQuerySystemTime (in: CurrentTime=0xa8df8e0 | out: CurrentTime=0xa8df8e0*=132471540091080000) returned 0x0 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x147eabfc [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x3de0b65a [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x55cd0e5e [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x2761a854 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x4e80a296 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x57990eaf [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0xc009621 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x1fa626e0 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x90cc058 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x4e1ac924 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x701b6148 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x5a065e28 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x2b081ebb [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0xf17e809 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x320ffb7b [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x52e886cf [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x7af4912c [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x216e5559 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x41a60f27 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x3fda0c12 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x70f6e828 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x19b424b6 [0140.457] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x45e3ead5 [0140.458] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x342e5ef [0140.458] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x5e4458fb [0140.458] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x38ba54c7 [0140.458] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x618634b1 [0140.458] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x476ae2a0 [0140.458] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x74753a40 [0140.458] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x79b964dd [0140.458] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x22a96460 [0140.458] RtlRandomEx (in: Seed=0xa8df8d8 | out: Seed=0xa8df8d8) returned 0x2f039c4b [0140.470] SetFilePointerEx (in: hFile=0xf90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.470] ReadFile (in: hFile=0xf90, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa8df8e0, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0xa8df8e0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.470] SetFilePointerEx (in: hFile=0xf90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e69d20 [0140.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0140.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0140.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0140.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0140.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0140.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0140.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0140.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0140.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d20) returned 1 [0140.471] WriteFile (in: hFile=0xf90, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa8df8e0, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0xa8df8e0*=0x3c00, lpOverlapped=0x0) returned 1 [0141.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0141.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0141.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x2fc8688 [0141.683] SetFilePointerEx (in: hFile=0xf90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.684] WriteFile (in: hFile=0xf90, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xa8df94c, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0xa8df94c*=0x118, lpOverlapped=0x0) returned 1 [0141.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0141.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099790) returned 1 [0141.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0141.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8688) returned 1 [0141.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0141.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b000) returned 1 [0141.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e368) returned 1 [0141.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e340) returned 1 [0141.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c798 [0141.794] wcscpy (in: _Dest=0x35c798, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3" [0141.794] wcscat (in: _Dest=0x35c798, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3.f0dbec" [0141.794] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3.f0dbec", NtPathName=0xa8df8d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\DdIaLSs5i5afHEU.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e342e0 [0141.827] FlushFileBuffers (hFile=0xf90) returned 1 [0141.884] CloseHandle (hObject=0xf90) returned 1 [0141.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3ef8e38 [0141.895] wcscpy (in: _Dest=0x3ef8e38, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\" [0141.895] wcscat (in: _Dest=0x3ef8e38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\F0DBEC-Readme.txt" [0141.895] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\f0dbec-readme.txt")) returned 0x20 [0141.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8e38) returned 1 [0141.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 919 os_tid = 0x1530 [0140.472] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\jj0b_eryvoglx.m4a")) returned 0x20 [0140.472] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a", dwFileAttributes=0x20) returned 1 [0140.472] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\jj0b_eryvoglx.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd84 [0140.472] GetFileSizeEx (in: hFile=0xd84, lpFileSize=0xa55fea8 | out: lpFileSize=0xa55fea8*=80908) returned 1 [0140.473] SetFilePointerEx (in: hFile=0xd84, liDistanceToMove=0x13c08, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.473] ReadFile (in: hFile=0xd84, lpBuffer=0xa55feb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa55fe90, lpOverlapped=0x0 | out: lpBuffer=0xa55feb4*, lpNumberOfBytesRead=0xa55fe90*=0x4, lpOverlapped=0x0) returned 1 [0140.475] SetFilePointerEx (in: hFile=0xd84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0140.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0140.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0140.475] NtQuerySystemTime (in: CurrentTime=0xa55fe30 | out: CurrentTime=0xa55fe30*=132471540091236000) returned 0x0 [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x293d930d [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0xe467949 [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x48f81e4d [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x70f67be4 [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x91d35f [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x7c9f00a0 [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x5f31be10 [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x425550ee [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x3cd1f472 [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x171c53c7 [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x3d4b9fe5 [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x436d09b6 [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x1030407a [0140.475] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x47b1a112 [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x1b1b587d [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x465214e8 [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x5863fe4d [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x44b88609 [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x4362ec94 [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x13e844dc [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x77f4d1a9 [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x360d9f6d [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x7fe27a4d [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x51d95f0f [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x266d9f3f [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x5066ce80 [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x6e7e8c39 [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x40c9cb60 [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x435d7f72 [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x162b31fe [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x2b871a7d [0140.476] RtlRandomEx (in: Seed=0xa55fe28 | out: Seed=0xa55fe28) returned 0x58eba86b [0140.504] SetFilePointerEx (in: hFile=0xd84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.504] ReadFile (in: hFile=0xd84, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa55fe30, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xa55fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0140.504] SetFilePointerEx (in: hFile=0xd84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6aa58 [0140.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0140.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0140.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0140.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0140.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0140.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0140.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0140.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0140.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aa58) returned 1 [0140.505] WriteFile (in: hFile=0xd84, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa55fe30, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xa55fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0140.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0140.991] SetFilePointerEx (in: hFile=0xd84, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.991] ReadFile (in: hFile=0xd84, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa55fe30, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xa55fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0140.991] SetFilePointerEx (in: hFile=0xd84, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308d10 [0140.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0140.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0140.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0140.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0140.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0140.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0140.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0140.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0140.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308d10) returned 1 [0140.992] WriteFile (in: hFile=0xd84, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa55fe30, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xa55fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0140.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0140.994] SetFilePointerEx (in: hFile=0xd84, liDistanceToMove=0x1000c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.994] ReadFile (in: hFile=0xd84, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa55fe30, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xa55fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0140.995] SetFilePointerEx (in: hFile=0xd84, liDistanceToMove=0x1000c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308d10 [0140.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68678 [0140.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0140.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0140.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0140.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0140.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ed8 [0140.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0140.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68678) returned 1 [0140.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308d10) returned 1 [0140.995] WriteFile (in: hFile=0xd84, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa55fe30, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xa55fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0140.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0140.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3c10 [0140.999] SetFilePointerEx (in: hFile=0xd84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.999] WriteFile (in: hFile=0xd84, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xa55fe9c, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xa55fe9c*=0x154, lpOverlapped=0x0) returned 1 [0141.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0141.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77de0) returned 1 [0141.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0141.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77da8) returned 1 [0141.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3c10) returned 1 [0141.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0141.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0141.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0141.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81868f0 [0141.726] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a" [0141.726] wcscat (in: _Dest=0x81868f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a.f0dbec" [0141.726] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a.f0dbec", NtPathName=0xa55fe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\JJ0B_ErYvoGlx.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3333a8 [0141.824] FlushFileBuffers (hFile=0xd84) returned 1 [0141.884] CloseHandle (hObject=0xd84) returned 1 [0141.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3ef8c58 [0141.894] wcscpy (in: _Dest=0x3ef8c58, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\" [0141.894] wcscat (in: _Dest=0x3ef8c58, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\F0DBEC-Readme.txt" [0141.894] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\f0dbec-readme.txt")) returned 0xffffffff [0141.894] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xebc [0141.954] WriteFile (in: hFile=0xebc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa55fe44, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa55fe44*=0x70c, lpOverlapped=0x0) returned 1 [0141.956] CloseHandle (hObject=0xebc) returned 1 [0141.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8c58) returned 1 [0141.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 920 os_tid = 0x1534 [0140.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053eb8 [0140.528] wcscpy (in: _Dest=0x8053eb8, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" [0140.528] wcscat (in: _Dest=0x8053eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\" [0140.528] wcscat (in: _Dest=0x8053eb8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*" [0140.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80473d8 [0140.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37898 [0140.528] wcscmp (_String1=".", _String2=".") returned 0 [0140.528] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.528] wcscmp (_String1="..", _String2=".") returned 1 [0140.528] wcscmp (_String1="..", _String2="..") returned 0 [0140.528] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f00bc1a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f00bc1a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0140.528] wcscmp (_String1="en-US", _String2=".") returned 1 [0140.528] wcscmp (_String1="en-US", _String2="..") returned 1 [0140.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35880 [0140.528] wcscpy (in: _Dest=0x3f35880, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" [0140.529] wcscat (in: _Dest=0x3f35880, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\" [0140.529] wcscat (in: _Dest=0x3f35880, _Source="en-US" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" [0151.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f35880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0151.865] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7523740, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7523740, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f416c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0151.865] wcscmp (_String1="MSTTSCommon.dll", _String2=".") returned 1 [0151.865] wcscmp (_String1="MSTTSCommon.dll", _String2="..") returned 1 [0151.865] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b630d6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b630d6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f4f9d60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSDecWrp.dll", cAlternateFileName="")) returned 1 [0151.865] wcscmp (_String1="MSTTSDecWrp.dll", _String2=".") returned 1 [0151.865] wcscmp (_String1="MSTTSDecWrp.dll", _String2="..") returned 1 [0151.865] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80be232, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf80be232, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f6c4d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0151.865] wcscmp (_String1="MSTTSEngine.dll", _String2=".") returned 1 [0151.865] wcscmp (_String1="MSTTSEngine.dll", _String2="..") returned 1 [0151.865] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0151.865] wcscmp (_String1="MSTTSLoc.dll", _String2=".") returned 1 [0151.865] wcscmp (_String1="MSTTSLoc.dll", _String2="..") returned 1 [0151.865] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0151.865] FindClose (in: hFindFile=0x3f37898 | out: hFindFile=0x3f37898) returned 1 [0151.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80473d8) returned 1 [0151.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053eb8) returned 1 [0151.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24a40) returned 1 Thread: id = 921 os_tid = 0x1538 [0140.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 0x20 [0140.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0140.529] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.529] GetLastError () returned 0x5 [0140.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0140.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 922 os_tid = 0x153c [0140.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml")) returned 0x20 [0140.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0140.531] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.531] GetLastError () returned 0x5 [0140.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0140.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6a20) returned 1 Thread: id = 923 os_tid = 0x1540 [0140.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d290 [0140.532] wcscpy (in: _Dest=0x3e2d290, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0140.532] wcscat (in: _Dest=0x3e2d290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0140.533] wcscat (in: _Dest=0x3e2d290, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\*" [0140.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049320 [0140.533] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\*", lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf21b20, ftCreationTime.dwHighDateTime=0x1d5d8ac, ftLastAccessTime.dwLowDateTime=0x16983f50, ftLastAccessTime.dwHighDateTime=0x1d5dd7b, ftLastWriteTime.dwLowDateTime=0x16983f50, ftLastWriteTime.dwHighDateTime=0x1d5dd7b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37958 [0140.533] wcscmp (_String1=".", _String2=".") returned 0 [0140.533] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf21b20, ftCreationTime.dwHighDateTime=0x1d5d8ac, ftLastAccessTime.dwLowDateTime=0x16983f50, ftLastAccessTime.dwHighDateTime=0x1d5dd7b, ftLastWriteTime.dwLowDateTime=0x16983f50, ftLastWriteTime.dwHighDateTime=0x1d5dd7b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.533] wcscmp (_String1="..", _String2=".") returned 1 [0140.533] wcscmp (_String1="..", _String2="..") returned 0 [0140.533] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e760, ftCreationTime.dwHighDateTime=0x1d5da0d, ftLastAccessTime.dwLowDateTime=0xdd9f0d60, ftLastAccessTime.dwHighDateTime=0x1d5da68, ftLastWriteTime.dwLowDateTime=0xdd9f0d60, ftLastWriteTime.dwHighDateTime=0x1d5da68, nFileSizeHigh=0x0, nFileSizeLow=0x165e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5SFxpCptv-Maoy7V9X.png", cAlternateFileName="5SFXPC~1.PNG")) returned 1 [0140.533] wcscmp (_String1="5SFxpCptv-Maoy7V9X.png", _String2=".") returned 1 [0140.533] wcscmp (_String1="5SFxpCptv-Maoy7V9X.png", _String2="..") returned 1 [0140.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b898 [0140.533] wcscpy (in: _Dest=0x3e1b898, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0140.533] wcscat (in: _Dest=0x3e1b898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0140.533] wcscat (in: _Dest=0x3e1b898, _Source="5SFxpCptv-Maoy7V9X.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png" [0151.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0151.868] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442f460, ftCreationTime.dwHighDateTime=0x1d5da85, ftLastAccessTime.dwLowDateTime=0x4c947cc0, ftLastAccessTime.dwHighDateTime=0x1d5e331, ftLastWriteTime.dwLowDateTime=0x4c947cc0, ftLastWriteTime.dwHighDateTime=0x1d5e331, nFileSizeHigh=0x0, nFileSizeLow=0x7e4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HBK4Hum3hTUTYBnBW.jpg", cAlternateFileName="HBK4HU~1.JPG")) returned 1 [0151.868] wcscmp (_String1="HBK4Hum3hTUTYBnBW.jpg", _String2=".") returned 1 [0151.868] wcscmp (_String1="HBK4Hum3hTUTYBnBW.jpg", _String2="..") returned 1 [0151.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b558 [0151.868] wcscpy (in: _Dest=0x3e1b558, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0151.868] wcscat (in: _Dest=0x3e1b558, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0151.868] wcscat (in: _Dest=0x3e1b558, _Source="HBK4Hum3hTUTYBnBW.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg" [0151.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0151.869] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d75e660, ftCreationTime.dwHighDateTime=0x1d5e1d5, ftLastAccessTime.dwLowDateTime=0x69f45770, ftLastAccessTime.dwHighDateTime=0x1d5e5e5, ftLastWriteTime.dwLowDateTime=0x69f45770, ftLastWriteTime.dwHighDateTime=0x1d5e5e5, nFileSizeHigh=0x0, nFileSizeLow=0x18925, dwReserved0=0x0, dwReserved1=0x0, cFileName="J-Vc2wd8.gif", cAlternateFileName="")) returned 1 [0151.869] wcscmp (_String1="J-Vc2wd8.gif", _String2=".") returned 1 [0151.869] wcscmp (_String1="J-Vc2wd8.gif", _String2="..") returned 1 [0151.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3330a8 [0151.869] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0151.869] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0151.869] wcscat (in: _Dest=0x3330a8, _Source="J-Vc2wd8.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif" [0151.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb4 [0151.871] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d554980, ftCreationTime.dwHighDateTime=0x1d5d888, ftLastAccessTime.dwLowDateTime=0x9dd7ce90, ftLastAccessTime.dwHighDateTime=0x1d5d835, ftLastWriteTime.dwLowDateTime=0x9dd7ce90, ftLastWriteTime.dwHighDateTime=0x1d5d835, nFileSizeHigh=0x0, nFileSizeLow=0x113f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkBHMND.png", cAlternateFileName="")) returned 1 [0151.871] wcscmp (_String1="pkBHMND.png", _String2=".") returned 1 [0151.871] wcscmp (_String1="pkBHMND.png", _String2="..") returned 1 [0151.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333768 [0151.871] wcscpy (in: _Dest=0x333768, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0151.871] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0151.871] wcscat (in: _Dest=0x333768, _Source="pkBHMND.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png" [0151.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0151.872] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c78f6b0, ftCreationTime.dwHighDateTime=0x1d5e3ad, ftLastAccessTime.dwLowDateTime=0x6ebc4e30, ftLastAccessTime.dwHighDateTime=0x1d5db0d, ftLastWriteTime.dwLowDateTime=0x6ebc4e30, ftLastWriteTime.dwHighDateTime=0x1d5db0d, nFileSizeHigh=0x0, nFileSizeLow=0x15743, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFdaW65UOKQj.bmp", cAlternateFileName="XFDAW6~1.BMP")) returned 1 [0151.872] wcscmp (_String1="xFdaW65UOKQj.bmp", _String2=".") returned 1 [0151.872] wcscmp (_String1="xFdaW65UOKQj.bmp", _String2="..") returned 1 [0151.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d5af8 [0151.872] wcscpy (in: _Dest=0x81d5af8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0151.872] wcscat (in: _Dest=0x81d5af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0151.872] wcscat (in: _Dest=0x81d5af8, _Source="xFdaW65UOKQj.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp" [0151.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0151.874] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac5906a0, ftCreationTime.dwHighDateTime=0x1d5d934, ftLastAccessTime.dwLowDateTime=0xfe934180, ftLastAccessTime.dwHighDateTime=0x1d5d87e, ftLastWriteTime.dwLowDateTime=0xfe934180, ftLastWriteTime.dwHighDateTime=0x1d5d87e, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="z0YRS.png", cAlternateFileName="")) returned 1 [0151.874] wcscmp (_String1="z0YRS.png", _String2=".") returned 1 [0151.874] wcscmp (_String1="z0YRS.png", _String2="..") returned 1 [0151.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7378 [0151.874] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0151.874] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0151.874] wcscat (in: _Dest=0x2ff7378, _Source="z0YRS.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png" [0151.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0151.875] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61fe9030, ftCreationTime.dwHighDateTime=0x1d5e513, ftLastAccessTime.dwLowDateTime=0x7fca2c40, ftLastAccessTime.dwHighDateTime=0x1d5e1f9, ftLastWriteTime.dwLowDateTime=0x7fca2c40, ftLastWriteTime.dwHighDateTime=0x1d5e1f9, nFileSizeHigh=0x0, nFileSizeLow=0x4553, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-vcHGNsO5GojHDIyvkP.jpg", cAlternateFileName="_-VCHG~1.JPG")) returned 1 [0151.875] wcscmp (_String1="_-vcHGNsO5GojHDIyvkP.jpg", _String2=".") returned 1 [0151.875] wcscmp (_String1="_-vcHGNsO5GojHDIyvkP.jpg", _String2="..") returned 1 [0151.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0151.875] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0151.875] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0151.875] wcscat (in: _Dest=0x3e65a28, _Source="_-vcHGNsO5GojHDIyvkP.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg" [0151.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0151.876] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f031ca0, ftCreationTime.dwHighDateTime=0x1d5df43, ftLastAccessTime.dwLowDateTime=0x2acdbee0, ftLastAccessTime.dwHighDateTime=0x1d5dea3, ftLastWriteTime.dwLowDateTime=0x2acdbee0, ftLastWriteTime.dwHighDateTime=0x1d5dea3, nFileSizeHigh=0x0, nFileSizeLow=0xc9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="_guvf30pW.jpg", cAlternateFileName="_GUVF3~1.JPG")) returned 1 [0151.876] wcscmp (_String1="_guvf30pW.jpg", _String2=".") returned 1 [0151.876] wcscmp (_String1="_guvf30pW.jpg", _String2="..") returned 1 [0151.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333fa8 [0151.877] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak" [0151.877] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0151.877] wcscat (in: _Dest=0x333fa8, _Source="_guvf30pW.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg" [0151.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0151.878] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f031ca0, ftCreationTime.dwHighDateTime=0x1d5df43, ftLastAccessTime.dwLowDateTime=0x2acdbee0, ftLastAccessTime.dwHighDateTime=0x1d5dea3, ftLastWriteTime.dwLowDateTime=0x2acdbee0, ftLastWriteTime.dwHighDateTime=0x1d5dea3, nFileSizeHigh=0x0, nFileSizeLow=0xc9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="_guvf30pW.jpg", cAlternateFileName="_GUVF3~1.JPG")) returned 0 [0151.878] FindClose (in: hFindFile=0x3f37958 | out: hFindFile=0x3f37958) returned 1 [0151.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049320) returned 1 [0151.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d290) returned 1 [0151.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d488) returned 1 Thread: id = 924 os_tid = 0x1544 [0140.534] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\717ufu18cbkv.gif")) returned 0x20 [0140.534] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif", dwFileAttributes=0x20) returned 1 [0140.534] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\717ufu18cbkv.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1448 [0140.534] GetFileSizeEx (in: hFile=0x1448, lpFileSize=0x7a3f7a0 | out: lpFileSize=0x7a3f7a0*=31718) returned 1 [0140.534] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x7be2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.534] ReadFile (in: hFile=0x1448, lpBuffer=0x7a3f7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7a3f788, lpOverlapped=0x0 | out: lpBuffer=0x7a3f7ac*, lpNumberOfBytesRead=0x7a3f788*=0x4, lpOverlapped=0x0) returned 1 [0140.536] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0140.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0140.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0140.536] NtQuerySystemTime (in: CurrentTime=0x7a3f728 | out: CurrentTime=0x7a3f728*=132471540091860000) returned 0x0 [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x7f656a1f [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x6d0d9ef1 [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x58c57ab8 [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x58297d37 [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x645dbe22 [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0xfc5e718 [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x4da127fd [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x5aa2ceb3 [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x42bdad95 [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x28b71063 [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x700f2f7f [0140.536] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x293d1a64 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x7d11f421 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x708022f3 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x6ddab4f6 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x755d83f6 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x54eb1c07 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x7237669 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x3ac35060 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x60021bc2 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x690d7cfa [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x564e4d87 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x37733cef [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x5d1a7992 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x798f7dae [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x10c941d1 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x6612f49c [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x4d55c4b8 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x6a4a802 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x726d4b1 [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x18e3742e [0140.537] RtlRandomEx (in: Seed=0x7a3f720 | out: Seed=0x7a3f720) returned 0x74522ec8 [0140.546] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.546] ReadFile (in: hFile=0x1448, lpBuffer=0x828fc68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a3f728, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesRead=0x7a3f728*=0x3c00, lpOverlapped=0x0) returned 1 [0140.546] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6aa58 [0140.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0140.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0140.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0140.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b54b8 [0140.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0140.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0140.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0140.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0140.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aa58) returned 1 [0140.547] WriteFile (in: hFile=0x1448, lpBuffer=0x82b54b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a3f728, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesWritten=0x7a3f728*=0x3c00, lpOverlapped=0x0) returned 1 [0140.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0140.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828fc68) returned 1 [0140.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df7988 [0140.994] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.994] WriteFile (in: hFile=0x1448, lpBuffer=0x3040a68*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x7a3f794, lpOverlapped=0x0 | out: lpBuffer=0x3040a68*, lpNumberOfBytesWritten=0x7a3f794*=0x112, lpOverlapped=0x0) returned 1 [0141.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 [0141.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d70) returned 1 [0141.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0141.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7988) returned 1 [0141.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0141.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0141.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0141.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0141.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c218 [0141.723] wcscpy (in: _Dest=0x35c218, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif" [0141.723] wcscat (in: _Dest=0x35c218, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif.f0dbec" [0141.723] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif.f0dbec", NtPathName=0x7a3f718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\717UfU18cBKV.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35280 [0141.813] FlushFileBuffers (hFile=0x1448) returned 1 [0141.883] CloseHandle (hObject=0x1448) returned 1 [0141.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d1e8 [0141.890] wcscpy (in: _Dest=0x3e2d1e8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0141.890] wcscat (in: _Dest=0x3e2d1e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt" [0141.890] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\f0dbec-readme.txt")) returned 0xffffffff [0141.890] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf98 [0141.912] WriteFile (in: hFile=0xf98, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7a3f73c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7a3f73c*=0x70c, lpOverlapped=0x0) returned 1 [0141.916] CloseHandle (hObject=0xf98) returned 1 [0141.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d1e8) returned 1 [0141.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d3e0) returned 1 Thread: id = 925 os_tid = 0x1548 [0140.547] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\e 5fe jlr5yfpd834.png")) returned 0x20 [0140.548] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png", dwFileAttributes=0x20) returned 1 [0140.548] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\e 5fe jlr5yfpd834.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x58c [0140.548] GetFileSizeEx (in: hFile=0x58c, lpFileSize=0xabbf860 | out: lpFileSize=0xabbf860*=69763) returned 1 [0140.548] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x1107f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.548] ReadFile (in: hFile=0x58c, lpBuffer=0xabbf86c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xabbf848, lpOverlapped=0x0 | out: lpBuffer=0xabbf86c*, lpNumberOfBytesRead=0xabbf848*=0x4, lpOverlapped=0x0) returned 1 [0140.550] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0140.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0140.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0140.550] NtQuerySystemTime (in: CurrentTime=0xabbf7e8 | out: CurrentTime=0xabbf7e8*=132471540092016000) returned 0x0 [0140.550] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0xade8984 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x2ffd9a6e [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x52aaccbd [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x1813c6f6 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x7907d390 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x219fd4c2 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x33187e79 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x599b1567 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x29337b8a [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x1d0d3621 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x79fe7a6b [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x250fbae [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x2136648 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x7d731f92 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x3b2229d6 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x4fd9fee0 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x61c94ad5 [0140.551] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x7b657ca1 [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x48859762 [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x3cf777ad [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x19a7c345 [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x1eeded16 [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x7cbc42a1 [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x7b905561 [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0xaedc33c [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x70743aa [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x330aca12 [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x1d2d143b [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x2b0015a1 [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x246984db [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x62ac13f8 [0140.552] RtlRandomEx (in: Seed=0xabbf7e0 | out: Seed=0xabbf7e0) returned 0x550ad2c2 [0140.563] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.563] ReadFile (in: hFile=0x58c, lpBuffer=0x828c060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xabbf7e8, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesRead=0xabbf7e8*=0x3c00, lpOverlapped=0x0) returned 1 [0140.563] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a500 [0140.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0140.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0140.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0140.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0140.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0140.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0140.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0140.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0140.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a500) returned 1 [0140.564] WriteFile (in: hFile=0x58c, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xabbf7e8, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0xabbf7e8*=0x3c00, lpOverlapped=0x0) returned 1 [0140.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0140.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0140.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067040 [0140.998] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.998] WriteFile (in: hFile=0x58c, lpBuffer=0x3041f38*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xabbf854, lpOverlapped=0x0 | out: lpBuffer=0x3041f38*, lpNumberOfBytesWritten=0xabbf854*=0x11c, lpOverlapped=0x0) returned 1 [0141.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041f38) returned 1 [0141.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b00) returned 1 [0141.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0141.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 [0141.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0141.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0141.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0141.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0141.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3338e8 [0141.724] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png" [0141.725] wcscat (in: _Dest=0x3338e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png.f0dbec" [0141.725] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png.f0dbec", NtPathName=0xabbf7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\E 5fe JLr5YfPd834.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b218 [0141.856] FlushFileBuffers (hFile=0x58c) returned 1 [0142.042] CloseHandle (hObject=0x58c) returned 1 [0142.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d5d8 [0142.043] wcscpy (in: _Dest=0x3e2d5d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0142.043] wcscat (in: _Dest=0x3e2d5d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt" [0142.043] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\f0dbec-readme.txt")) returned 0x20 [0142.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d5d8) returned 1 [0142.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 926 os_tid = 0x154c [0140.564] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\quvh9ha1oswabljd.gif")) returned 0x20 [0140.564] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif", dwFileAttributes=0x20) returned 1 [0140.565] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\quvh9ha1oswabljd.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11f0 [0140.565] GetFileSizeEx (in: hFile=0x11f0, lpFileSize=0x8d9fc68 | out: lpFileSize=0x8d9fc68*=57367) returned 1 [0140.565] SetFilePointerEx (in: hFile=0x11f0, liDistanceToMove=0xe013, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.565] ReadFile (in: hFile=0x11f0, lpBuffer=0x8d9fc74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d9fc50, lpOverlapped=0x0 | out: lpBuffer=0x8d9fc74*, lpNumberOfBytesRead=0x8d9fc50*=0x4, lpOverlapped=0x0) returned 1 [0140.566] SetFilePointerEx (in: hFile=0x11f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0140.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0140.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0140.567] NtQuerySystemTime (in: CurrentTime=0x8d9fbf0 | out: CurrentTime=0x8d9fbf0*=132471540092172000) returned 0x0 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x3eb750aa [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x7fdf0e72 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x56004efe [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x5344df02 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x76376df7 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x6fe8e5f1 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x73e92976 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x30b47949 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x199fabe0 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0xff82ac9 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x4e4ee23c [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x4f7f4027 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x2ab2677 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x4abdaff6 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x202b2401 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x4001d484 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x19649383 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x559fcc3 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x1eeea8c6 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x46bb8975 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x632950e6 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x6fd00d7d [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x7c251478 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x208d7721 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x3ea9a06d [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x7c997f61 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x7094a858 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x526ab728 [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x7de621aa [0140.567] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x46c14101 [0140.568] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x1be2a4c4 [0140.568] RtlRandomEx (in: Seed=0x8d9fbe8 | out: Seed=0x8d9fbe8) returned 0x7989a80d [0140.577] SetFilePointerEx (in: hFile=0x11f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.577] ReadFile (in: hFile=0x11f0, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d9fbf0, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0x8d9fbf0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.577] SetFilePointerEx (in: hFile=0x11f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a470 [0140.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0140.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0140.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0140.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8253870 [0140.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0140.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0140.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0140.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0140.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a470) returned 1 [0140.578] WriteFile (in: hFile=0x11f0, lpBuffer=0x8253870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d9fbf0, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesWritten=0x8d9fbf0*=0x3c00, lpOverlapped=0x0) returned 1 [0141.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0141.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0141.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066f80 [0141.001] SetFilePointerEx (in: hFile=0x11f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.001] WriteFile (in: hFile=0x11f0, lpBuffer=0x3041e10*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x8d9fc5c, lpOverlapped=0x0 | out: lpBuffer=0x3041e10*, lpNumberOfBytesWritten=0x8d9fc5c*=0x11a, lpOverlapped=0x0) returned 1 [0141.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041e10) returned 1 [0141.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066500) returned 1 [0141.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3c8) returned 1 [0141.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f80) returned 1 [0141.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0141.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0141.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0141.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0141.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7710 [0141.729] wcscpy (in: _Dest=0x2ff7710, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif" [0141.729] wcscat (in: _Dest=0x2ff7710, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif.f0dbec" [0141.729] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif.f0dbec", NtPathName=0x8d9fbe0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\Quvh9hA1oSwabljd.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1ad38 [0141.859] FlushFileBuffers (hFile=0x11f0) returned 1 [0142.044] CloseHandle (hObject=0x11f0) returned 1 [0142.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d5d8 [0142.045] wcscpy (in: _Dest=0x3e2d5d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0142.045] wcscat (in: _Dest=0x3e2d5d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt" [0142.045] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\f0dbec-readme.txt")) returned 0x20 [0142.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d5d8) returned 1 [0142.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 927 os_tid = 0x1550 [0140.578] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\xsvz.png")) returned 0x20 [0140.578] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png", dwFileAttributes=0x20) returned 1 [0140.579] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\xsvz.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1190 [0140.579] GetFileSizeEx (in: hFile=0x1190, lpFileSize=0x7d7fc28 | out: lpFileSize=0x7d7fc28*=28445) returned 1 [0140.579] SetFilePointerEx (in: hFile=0x1190, liDistanceToMove=0x6f19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.579] ReadFile (in: hFile=0x1190, lpBuffer=0x7d7fc34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7d7fc10, lpOverlapped=0x0 | out: lpBuffer=0x7d7fc34*, lpNumberOfBytesRead=0x7d7fc10*=0x4, lpOverlapped=0x0) returned 1 [0140.580] SetFilePointerEx (in: hFile=0x1190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0140.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0140.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0140.581] NtQuerySystemTime (in: CurrentTime=0x7d7fbb0 | out: CurrentTime=0x7d7fbb0*=132471540092328000) returned 0x0 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x609cb29e [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x2de7c76e [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x25285f0c [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x3c5a547a [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x301a4455 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x42c2ba87 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x4ff74b65 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x3b955ffa [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x53455433 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x7b0fcb21 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x36999591 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x32453bfb [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x25201422 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x1fd8bcbc [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x613e8009 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x1e2731c3 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x7051af1f [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0xfe69846 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x1464ac3c [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x7b3aa3e1 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x134f789b [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x2c71c0f8 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x73fa71db [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x235f0cea [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x60006e4d [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x6c1b642c [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x530ad3da [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x5742a062 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x787dd7b9 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x5238b5a3 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x403b0df6 [0140.581] RtlRandomEx (in: Seed=0x7d7fba8 | out: Seed=0x7d7fba8) returned 0x1e1328a4 [0140.590] SetFilePointerEx (in: hFile=0x1190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.590] ReadFile (in: hFile=0x1190, lpBuffer=0x82790c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7d7fbb0, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesRead=0x7d7fbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.590] SetFilePointerEx (in: hFile=0x1190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a398 [0140.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0140.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0140.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0140.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0140.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0140.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0140.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0140.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0140.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a398) returned 1 [0140.591] WriteFile (in: hFile=0x1190, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7d7fbb0, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x7d7fbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0141.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0141.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0141.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dca0d0 [0141.002] SetFilePointerEx (in: hFile=0x1190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.003] WriteFile (in: hFile=0x1190, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x7d7fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0x7d7fc1c*=0x102, lpOverlapped=0x0) returned 1 [0141.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0141.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca198) returned 1 [0141.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca148) returned 1 [0141.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0d0) returned 1 [0141.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0141.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0141.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0141.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0141.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11468 [0141.850] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png" [0141.850] wcscat (in: _Dest=0x3e11468, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png.f0dbec" [0141.850] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png.f0dbec", NtPathName=0x7d7fba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\XsVz.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7d88 [0141.853] FlushFileBuffers (hFile=0x1190) returned 1 [0142.040] CloseHandle (hObject=0x1190) returned 1 [0142.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d5d8 [0142.041] wcscpy (in: _Dest=0x3e2d5d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\" [0142.041] wcscat (in: _Dest=0x3e2d5d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt" [0142.041] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\f0dbec-readme.txt")) returned 0x20 [0142.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d5d8) returned 1 [0142.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c828) returned 1 Thread: id = 928 os_tid = 0x1554 [0140.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6a20 [0140.591] wcscpy (in: _Dest=0x2ff6a20, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0140.591] wcscat (in: _Dest=0x2ff6a20, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0140.591] wcscat (in: _Dest=0x2ff6a20, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*" [0140.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0140.591] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0141.246] wcscmp (_String1=".", _String2=".") returned 0 [0141.246] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.246] wcscmp (_String1="..", _String2=".") returned 1 [0141.246] wcscmp (_String1="..", _String2="..") returned 0 [0141.246] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0141.246] wcscmp (_String1="x86", _String2=".") returned 1 [0141.246] wcscmp (_String1="x86", _String2="..") returned 1 [0141.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3339a8 [0141.246] wcscpy (in: _Dest=0x3339a8, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0141.246] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0141.246] wcscat (in: _Dest=0x3339a8, _Source="x86" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0144.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0144.385] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0144.385] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0144.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0144.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6a20) returned 1 [0144.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 929 os_tid = 0x1558 [0140.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecdd00 [0140.592] wcscpy (in: _Dest=0x3ecdd00, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU" [0140.592] wcscat (in: _Dest=0x3ecdd00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\" [0140.592] wcscat (in: _Dest=0x3ecdd00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\*" [0140.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0140.592] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0140.593] wcscmp (_String1=".", _String2=".") returned 0 [0140.593] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.593] wcscmp (_String1="..", _String2=".") returned 1 [0140.593] wcscmp (_String1="..", _String2="..") returned 0 [0140.593] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0140.593] wcscmp (_String1="au.cab", _String2=".") returned 1 [0140.593] wcscmp (_String1="au.cab", _String2="..") returned 1 [0140.593] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0140.593] wcscmp (_String1="au.msi", _String2=".") returned 1 [0140.593] wcscmp (_String1="au.msi", _String2="..") returned 1 [0140.593] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0 [0140.593] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0140.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0140.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecdd00) returned 1 [0140.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 Thread: id = 930 os_tid = 0x155c [0140.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0140.594] wcscpy (in: _Dest=0x3f0b730, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0140.595] wcscat (in: _Dest=0x3f0b730, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0140.595] wcscat (in: _Dest=0x3f0b730, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*" [0140.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0140.595] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80dd3c10, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099690 [0141.252] wcscmp (_String1=".", _String2=".") returned 0 [0141.252] FindNextFileW (in: hFindFile=0x8099690, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80dd3c10, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.252] wcscmp (_String1="..", _String2=".") returned 1 [0141.252] wcscmp (_String1="..", _String2="..") returned 0 [0141.252] FindNextFileW (in: hFindFile=0x8099690, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80dd3c10, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0141.252] wcscmp (_String1="deployment.properties", _String2=".") returned 1 [0141.252] wcscmp (_String1="deployment.properties", _String2="..") returned 1 [0141.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e10608 [0141.252] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0141.253] wcscat (in: _Dest=0x3e10608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0141.253] wcscat (in: _Dest=0x3e10608, _Source="deployment.properties" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" [0144.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0144.387] FindNextFileW (in: hFindFile=0x8099690, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d87950, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0144.387] wcscmp (_String1="security", _String2=".") returned 1 [0144.387] wcscmp (_String1="security", _String2="..") returned 1 [0144.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1fc40 [0144.387] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0144.387] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0144.387] wcscat (in: _Dest=0x3e1fc40, _Source="security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0144.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0144.388] FindNextFileW (in: hFindFile=0x8099690, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0144.389] wcscmp (_String1="tmp", _String2=".") returned 1 [0144.389] wcscmp (_String1="tmp", _String2="..") returned 1 [0144.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3db0d88 [0144.389] wcscpy (in: _Dest=0x3db0d88, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0144.389] wcscat (in: _Dest=0x3db0d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0144.389] wcscat (in: _Dest=0x3db0d88, _Source="tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" [0144.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3db0d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0144.390] FindNextFileW (in: hFindFile=0x8099690, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0144.390] FindClose (in: hFindFile=0x8099690 | out: hFindFile=0x8099690) returned 1 [0144.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0144.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0144.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32bb0) returned 1 Thread: id = 931 os_tid = 0x1560 [0140.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3db0188 [0140.595] wcscpy (in: _Dest=0x3db0188, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" [0140.595] wcscat (in: _Dest=0x3db0188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\" [0140.595] wcscat (in: _Dest=0x3db0188, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*" [0140.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047170 [0140.595] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b88 [0141.581] wcscmp (_String1=".", _String2=".") returned 0 [0141.581] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.582] wcscmp (_String1="..", _String2=".") returned 1 [0141.582] wcscmp (_String1="..", _String2="..") returned 0 [0141.582] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0141.582] wcscmp (_String1="Data1.cab", _String2=".") returned 1 [0141.582] wcscmp (_String1="Data1.cab", _String2="..") returned 1 [0141.582] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5833c7c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0141.582] wcscmp (_String1="jre1.7.0_45.msi", _String2=".") returned 1 [0141.582] wcscmp (_String1="jre1.7.0_45.msi", _String2="..") returned 1 [0141.582] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5833c7c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0 [0141.582] FindClose (in: hFindFile=0x3e54b88 | out: hFindFile=0x3e54b88) returned 1 [0141.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047170) returned 1 [0141.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0188) returned 1 [0141.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 Thread: id = 932 os_tid = 0x1564 [0140.596] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3")) returned 0x20 [0143.099] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", dwFileAttributes=0x20) returned 1 [0143.100] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1618 [0143.100] GetFileSizeEx (in: hFile=0x1618, lpFileSize=0x7e4f9c8 | out: lpFileSize=0x7e4f9c8*=8414449) returned 1 [0143.100] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x8064ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.100] ReadFile (in: hFile=0x1618, lpBuffer=0x7e4f9d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e4f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7e4f9d4*, lpNumberOfBytesRead=0x7e4f9b0*=0x4, lpOverlapped=0x0) returned 1 [0143.104] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0143.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0143.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0143.104] NtQuerySystemTime (in: CurrentTime=0x7e4f950 | out: CurrentTime=0x7e4f950*=132471540116820000) returned 0x0 [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x4ecb89f4 [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x43bf52fe [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x66ab9a0a [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x57504fa6 [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x26566372 [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x26e5e3d5 [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x5477c4e [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x56bd1cb1 [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x3298faac [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0xfa5c4f5 [0143.104] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x739a0830 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x5286dc72 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x759fa0e3 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x182aa20f [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x3a99376e [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x562fd9 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x41578eb3 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x47ef2b01 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x4ded01ba [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x5adbed9c [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x7e58be51 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x6b14f80f [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x3b2c26d5 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x2a4ffc47 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x17dc102f [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x42a25d19 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x3d4b4901 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x1df63f12 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x6cc89ead [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x7e3833b4 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x64777de1 [0143.105] RtlRandomEx (in: Seed=0x7e4f948 | out: Seed=0x7e4f948) returned 0x6d54ce92 [0143.116] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.116] ReadFile (in: hFile=0x1618, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e4f950, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0x7e4f950*=0x3c00, lpOverlapped=0x0) returned 1 [0143.121] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0143.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0143.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0143.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0143.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0143.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0143.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.122] WriteFile (in: hFile=0x1618, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e4f950, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0x7e4f950*=0x3c00, lpOverlapped=0x0) returned 1 [0143.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0143.987] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x403800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.987] ReadFile (in: hFile=0x1618, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e4f950, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0x7e4f950*=0x3c00, lpOverlapped=0x0) returned 1 [0144.018] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x403800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cf70 [0144.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ac0 [0144.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0144.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0144.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0144.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0144.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0144.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0144.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0144.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf70) returned 1 [0144.019] WriteFile (in: hFile=0x1618, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e4f950, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0x7e4f950*=0x3c00, lpOverlapped=0x0) returned 1 [0145.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0145.146] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x8028f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.146] ReadFile (in: hFile=0x1618, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e4f950, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0x7e4f950*=0x3c00, lpOverlapped=0x0) returned 1 [0145.150] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x8028f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83097c0 [0145.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0145.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1838 [0145.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0145.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0145.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1838 [0145.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1518 [0145.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0145.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0145.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83097c0) returned 1 [0145.152] WriteFile (in: hFile=0x1618, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e4f950, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0x7e4f950*=0x3c00, lpOverlapped=0x0) returned 1 [0145.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0145.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c330 [0145.291] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.291] WriteFile (in: hFile=0x1618, lpBuffer=0x3e177a0*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0x7e4f9bc, lpOverlapped=0x0 | out: lpBuffer=0x3e177a0*, lpNumberOfBytesWritten=0x7e4f9bc*=0x148, lpOverlapped=0x0) returned 1 [0145.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e177a0) returned 1 [0145.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdf8) returned 1 [0145.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0145.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6feb8) returned 1 [0145.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c330) returned 1 [0145.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0145.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0145.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c860) returned 1 [0145.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0beb0 [0145.332] wcscpy (in: _Dest=0x3f0beb0, _Source="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" [0145.332] wcscat (in: _Dest=0x3f0beb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.f0dbec") returned="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.f0dbec" [0145.332] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.f0dbec", NtPathName=0x7e4f940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34950 [0146.694] FlushFileBuffers (hFile=0x1618) returned 1 [0146.784] CloseHandle (hObject=0x1618) returned 1 [0146.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0beb0 [0146.786] wcscpy (in: _Dest=0x3f0beb0, _Source="C:\\Users\\Public\\Music\\Sample Music\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0146.786] wcscat (in: _Dest=0x3f0beb0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt" [0146.786] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\f0dbec-readme.txt")) returned 0x20 [0146.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0beb0) returned 1 [0146.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d440) returned 1 Thread: id = 933 os_tid = 0x1568 [0140.598] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3")) returned 0x20 [0141.247] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", dwFileAttributes=0x20) returned 1 [0142.581] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14ec [0142.581] GetFileSizeEx (in: hFile=0x14ec, lpFileSize=0x475f920 | out: lpFileSize=0x475f920*=4113874) returned 1 [0142.581] SetFilePointerEx (in: hFile=0x14ec, liDistanceToMove=0x3ec5ce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.581] ReadFile (in: hFile=0x14ec, lpBuffer=0x475f92c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x475f908, lpOverlapped=0x0 | out: lpBuffer=0x475f92c*, lpNumberOfBytesRead=0x475f908*=0x4, lpOverlapped=0x0) returned 1 [0142.598] SetFilePointerEx (in: hFile=0x14ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0142.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0142.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0142.598] NtQuerySystemTime (in: CurrentTime=0x475f8a8 | out: CurrentTime=0x475f8a8*=132471540111672000) returned 0x0 [0142.598] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x4121eacb [0142.598] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x214a4c56 [0142.598] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x69d13e3a [0142.598] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x6065412d [0142.598] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x59578c44 [0142.598] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x697ce461 [0142.598] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x679f10f [0142.598] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x359a3bf4 [0142.598] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x257ab6c3 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x27ecbfa5 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0xe099790 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x71fc8058 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x664ece21 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x7bbce6c2 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x53a19660 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x446f77d [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x1083b748 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x1b1412bd [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x543e61c6 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0xc5f6d86 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x7864572a [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x1b64aaef [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x613a19ff [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x70718149 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x27416ace [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x509573f8 [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x1eac8eaa [0142.599] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x27977527 [0142.600] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x4fec72e2 [0142.600] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x41b6ac87 [0142.600] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0xf7b640b [0142.600] RtlRandomEx (in: Seed=0x475f8a0 | out: Seed=0x475f8a0) returned 0x5d5f2608 [0142.610] SetFilePointerEx (in: hFile=0x14ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.610] ReadFile (in: hFile=0x14ec, lpBuffer=0x8262890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x475f8a8, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesRead=0x475f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.613] SetFilePointerEx (in: hFile=0x14ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x2ff0010 [0142.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f324a8 [0142.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0142.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0142.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82844d8 [0142.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0142.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0142.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0142.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0142.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff0010) returned 1 [0142.614] WriteFile (in: hFile=0x14ec, lpBuffer=0x82844d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x475f8a8, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesWritten=0x475f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82844d8) returned 1 [0143.587] SetFilePointerEx (in: hFile=0x14ec, liDistanceToMove=0x1f6800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.587] ReadFile (in: hFile=0x14ec, lpBuffer=0x8262890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x475f8a8, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesRead=0x475f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.662] SetFilePointerEx (in: hFile=0x14ec, liDistanceToMove=0x1f6800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d370 [0143.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0143.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb40 [0143.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb40) returned 1 [0143.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0143.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb40 [0143.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0143.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0143.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0143.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d370) returned 1 [0143.663] WriteFile (in: hFile=0x14ec, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x475f8a8, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0x475f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0145.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0145.110] SetFilePointerEx (in: hFile=0x14ec, liDistanceToMove=0x3e89d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.110] ReadFile (in: hFile=0x14ec, lpBuffer=0x8262890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x475f8a8, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesRead=0x475f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0145.140] SetFilePointerEx (in: hFile=0x14ec, liDistanceToMove=0x3e89d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83097c0 [0145.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0145.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0145.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0145.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0145.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0145.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0145.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0145.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0145.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83097c0) returned 1 [0145.141] WriteFile (in: hFile=0x14ec, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x475f8a8, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0x475f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0145.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0145.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c128 [0145.285] SetFilePointerEx (in: hFile=0x14ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.285] WriteFile (in: hFile=0x14ec, lpBuffer=0x3e39870*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0x475f914, lpOverlapped=0x0 | out: lpBuffer=0x3e39870*, lpNumberOfBytesWritten=0x475f914*=0x16c, lpOverlapped=0x0) returned 1 [0145.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39870) returned 1 [0145.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de64c8) returned 1 [0145.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0145.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5fc8) returned 1 [0145.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c128) returned 1 [0145.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0145.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0145.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0145.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c968 [0145.328] wcscpy (in: _Dest=0x3e3c968, _Source="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" [0145.328] wcscat (in: _Dest=0x3e3c968, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.f0dbec") returned="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.f0dbec" [0145.328] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.f0dbec", NtPathName=0x475f898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c638 [0146.614] FlushFileBuffers (hFile=0x14ec) returned 1 [0146.621] CloseHandle (hObject=0x14ec) returned 1 [0146.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df8ad8 [0146.633] wcscpy (in: _Dest=0x3df8ad8, _Source="C:\\Users\\Public\\Music\\Sample Music\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0146.633] wcscat (in: _Dest=0x3df8ad8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt" [0146.633] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\f0dbec-readme.txt")) returned 0xffffffff [0146.633] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xddc [0146.663] WriteFile (in: hFile=0xddc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x475f8bc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x475f8bc*=0x70c, lpOverlapped=0x0) returned 1 [0146.672] CloseHandle (hObject=0xddc) returned 1 [0146.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 934 os_tid = 0x156c [0140.598] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3")) returned 0x20 [0143.067] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", dwFileAttributes=0x20) returned 1 [0143.068] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1614 [0143.068] GetFileSizeEx (in: hFile=0x1614, lpFileSize=0xacafcd0 | out: lpFileSize=0xacafcd0*=4842585) returned 1 [0143.068] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x49e455, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.068] ReadFile (in: hFile=0x1614, lpBuffer=0xacafcdc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xacafcb8, lpOverlapped=0x0 | out: lpBuffer=0xacafcdc*, lpNumberOfBytesRead=0xacafcb8*=0x4, lpOverlapped=0x0) returned 1 [0143.072] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0143.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0143.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0143.072] NtQuerySystemTime (in: CurrentTime=0xacafc58 | out: CurrentTime=0xacafc58*=132471540116508000) returned 0x0 [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x7d26caa7 [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x66042c0 [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x2a8cf8b4 [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x6957546b [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x1fece9d6 [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x259e72c9 [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0xdc13eea [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x35b68c1f [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x1ff63429 [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x555e0a5 [0143.072] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x709893bf [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x6fb1a44b [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x2c38e1e [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x20637a46 [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x64af907b [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x7302c04b [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x1c894abf [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x3fd86294 [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x1804e892 [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x5cb11856 [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x5022d1be [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x66dce2fb [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x3f73fc76 [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x36542f85 [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x68f95bcc [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x35a9f0f3 [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x2165018d [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0xa4c8f45 [0143.073] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x75b04c90 [0143.074] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x64a256a1 [0143.074] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x67a5fd58 [0143.074] RtlRandomEx (in: Seed=0xacafc50 | out: Seed=0xacafc50) returned 0x7604192c [0143.091] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.092] ReadFile (in: hFile=0x1614, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xacafc58, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xacafc58*=0x3c00, lpOverlapped=0x0) returned 1 [0143.096] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0143.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0143.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0143.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0143.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0143.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0143.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.097] WriteFile (in: hFile=0x1614, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xacafc58, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xacafc58*=0x3c00, lpOverlapped=0x0) returned 1 [0144.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0144.042] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x250800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.042] ReadFile (in: hFile=0x1614, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xacafc58, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xacafc58*=0x3c00, lpOverlapped=0x0) returned 1 [0144.055] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x250800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b42c8 [0144.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c1f8 [0144.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43208 [0144.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0144.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0144.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43208 [0144.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42308 [0144.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42308) returned 1 [0144.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c1f8) returned 1 [0144.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b42c8) returned 1 [0144.056] WriteFile (in: hFile=0x1614, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xacafc58, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xacafc58*=0x3c00, lpOverlapped=0x0) returned 1 [0145.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0145.143] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x49a859, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.143] ReadFile (in: hFile=0x1614, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xacafc58, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xacafc58*=0x3c00, lpOverlapped=0x0) returned 1 [0145.144] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x49a859, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83097c0 [0145.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f332b8 [0145.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0145.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0145.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0145.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0145.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1838 [0145.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0145.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0145.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83097c0) returned 1 [0145.146] WriteFile (in: hFile=0x1614, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xacafc58, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xacafc58*=0x3c00, lpOverlapped=0x0) returned 1 [0145.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0145.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e890 [0145.286] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.287] WriteFile (in: hFile=0x1614, lpBuffer=0x3e16ce0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xacafcc4, lpOverlapped=0x0 | out: lpBuffer=0x3e16ce0*, lpNumberOfBytesWritten=0xacafcc4*=0x14e, lpOverlapped=0x0) returned 1 [0145.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0145.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c90) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77cc8) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e890) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0145.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831aa58 [0145.330] wcscpy (in: _Dest=0x831aa58, _Source="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" [0145.330] wcscat (in: _Dest=0x831aa58, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.f0dbec") returned="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.f0dbec" [0145.330] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.f0dbec", NtPathName=0xacafc48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34dd0 [0146.623] FlushFileBuffers (hFile=0x1614) returned 1 [0146.625] CloseHandle (hObject=0x1614) returned 1 [0146.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df8bc8 [0146.640] wcscpy (in: _Dest=0x3df8bc8, _Source="C:\\Users\\Public\\Music\\Sample Music\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0146.641] wcscat (in: _Dest=0x3df8bc8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt" [0146.641] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\f0dbec-readme.txt")) returned 0x20 [0146.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 [0146.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a1f8) returned 1 Thread: id = 935 os_tid = 0x1570 [0140.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d4a8 [0140.599] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" [0140.599] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\" [0140.599] wcscat (in: _Dest=0x3d8d4a8, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*" [0140.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047b10 [0140.599] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0140.599] wcscmp (_String1=".", _String2=".") returned 0 [0140.599] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.599] wcscmp (_String1="..", _String2=".") returned 1 [0140.599] wcscmp (_String1="..", _String2="..") returned 0 [0140.599] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0140.599] wcscmp (_String1="Security", _String2=".") returned 1 [0140.599] wcscmp (_String1="Security", _String2="..") returned 1 [0140.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0c090 [0140.599] wcscpy (in: _Dest=0x3f0c090, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" [0140.600] wcscat (in: _Dest=0x3f0c090, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\" [0140.600] wcscat (in: _Dest=0x3f0c090, _Source="Security" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0144.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0c090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0144.331] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0144.331] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0144.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047b10) returned 1 [0144.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 [0144.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4a48) returned 1 Thread: id = 936 os_tid = 0x1574 [0140.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff62f0 [0140.600] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0140.600] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0140.600] wcscat (in: _Dest=0x2ff62f0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*" [0140.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049f28 [0140.600] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*", lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38358 [0140.600] wcscmp (_String1=".", _String2=".") returned 0 [0140.600] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.600] wcscmp (_String1="..", _String2=".") returned 1 [0140.600] wcscmp (_String1="..", _String2="..") returned 0 [0140.601] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0140.601] wcscmp (_String1="x86", _String2=".") returned 1 [0140.601] wcscmp (_String1="x86", _String2="..") returned 1 [0140.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3330a8 [0140.601] wcscpy (in: _Dest=0x3330a8, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0140.601] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0140.601] wcscat (in: _Dest=0x3330a8, _Source="x86" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0144.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0144.334] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0144.334] FindClose (in: hFindFile=0x3f38358 | out: hFindFile=0x3f38358) returned 1 [0144.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049f28) returned 1 [0144.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 [0144.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 937 os_tid = 0x1578 [0140.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333168 [0140.608] wcscpy (in: _Dest=0x333168, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0140.608] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0140.608] wcscat (in: _Dest=0x333168, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" [0140.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048248 [0140.608] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099250 [0140.610] wcscmp (_String1=".", _String2=".") returned 0 [0140.610] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.610] wcscmp (_String1="..", _String2=".") returned 1 [0140.610] wcscmp (_String1="..", _String2="..") returned 0 [0140.610] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0140.610] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0140.610] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0140.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e64288 [0140.610] wcscpy (in: _Dest=0x3e64288, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0140.610] wcscat (in: _Dest=0x3e64288, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0140.610] wcscat (in: _Dest=0x3e64288, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" [0144.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0144.336] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0144.336] FindClose (in: hFindFile=0x8099250 | out: hFindFile=0x8099250) returned 1 [0144.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048248) returned 1 [0144.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 [0144.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 Thread: id = 938 os_tid = 0x157c [0140.611] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20 [0141.248] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0141.248] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.248] GetLastError () returned 0x5 [0141.248] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0141.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35280) returned 1 Thread: id = 939 os_tid = 0x1580 [0140.612] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20 [0141.250] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0141.250] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.250] GetLastError () returned 0x5 [0141.250] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0141.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 940 os_tid = 0x1584 [0140.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl")) returned 0x20 [0140.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0140.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.613] GetLastError () returned 0x5 [0140.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0140.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f331c8) returned 1 Thread: id = 941 os_tid = 0x1588 [0140.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl")) returned 0x20 [0140.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0140.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.615] GetLastError () returned 0x5 [0140.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0140.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33150) returned 1 Thread: id = 942 os_tid = 0x158c [0140.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm")) returned 0x20 [0142.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", dwFileAttributes=0x20) returned 0 [0142.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.619] GetLastError () returned 0x5 [0142.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", dwFileAttributes=0x20) returned 0 [0142.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f347a0) returned 1 Thread: id = 943 os_tid = 0x1590 [0140.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl")) returned 0x20 [0141.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", dwFileAttributes=0x20) returned 0 [0141.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.584] GetLastError () returned 0x5 [0141.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", dwFileAttributes=0x20) returned 0 [0141.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f359a0) returned 1 Thread: id = 944 os_tid = 0x1594 [0140.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp")) returned 0x20 [0142.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", dwFileAttributes=0x20) returned 0 [0142.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.616] GetLastError () returned 0x5 [0142.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", dwFileAttributes=0x20) returned 0 [0142.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34950) returned 1 Thread: id = 945 os_tid = 0x1598 [0140.617] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg")) returned 0x20 [0142.154] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", dwFileAttributes=0x20) returned 1 [0142.155] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x108c [0142.155] GetFileSizeEx (in: hFile=0x108c, lpFileSize=0xb70f830 | out: lpFileSize=0xb70f830*=879394) returned 1 [0142.155] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0xd6b1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.155] ReadFile (in: hFile=0x108c, lpBuffer=0xb70f83c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb70f818, lpOverlapped=0x0 | out: lpBuffer=0xb70f83c*, lpNumberOfBytesRead=0xb70f818*=0x4, lpOverlapped=0x0) returned 1 [0142.158] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1478 [0142.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ed8 [0142.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0142.158] NtQuerySystemTime (in: CurrentTime=0xb70f7b8 | out: CurrentTime=0xb70f7b8*=132471540107304000) returned 0x0 [0142.158] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x2d9c476c [0142.158] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x6b7b89f2 [0142.158] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x38efbf75 [0142.158] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x341a151e [0142.158] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x51655361 [0142.158] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x5c57eaf0 [0142.158] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x671c8035 [0142.158] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x46d5ee29 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x6de0fd83 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x247debd9 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x2b8979e3 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x7c3ef983 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x6a8448a [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x7a1ac762 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x108b6979 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x462e2c7e [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x60845ed2 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x52705425 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x406c3408 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x7488c5e1 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x521dedce [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x4d1f7c1c [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x358fdd2d [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x4423d65f [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x646be20b [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x706a1aef [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x8f1debf [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x7d31c217 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x1a3352f2 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x17233e90 [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x2fad108f [0142.159] RtlRandomEx (in: Seed=0xb70f7b0 | out: Seed=0xb70f7b0) returned 0x5a785d5e [0142.172] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.172] ReadFile (in: hFile=0x108c, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb70f7b8, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xb70f7b8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.174] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a110 [0142.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e680d8 [0142.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1478 [0142.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1478) returned 1 [0142.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0142.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1478 [0142.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0142.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0142.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0142.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a110) returned 1 [0142.175] WriteFile (in: hFile=0x108c, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb70f7b8, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xb70f7b8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0142.996] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x6cc00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.996] ReadFile (in: hFile=0x108c, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb70f7b8, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xb70f7b8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.000] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x6cc00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0143.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0143.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0143.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0143.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1838 [0143.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0143.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.001] WriteFile (in: hFile=0x108c, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb70f7b8, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xb70f7b8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0143.599] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0xd2f22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.600] ReadFile (in: hFile=0x108c, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb70f7b8, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xb70f7b8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.665] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0xd2f22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d370 [0143.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0143.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0143.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0143.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x827ccc8 [0143.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0143.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0143.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0143.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0143.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d370) returned 1 [0143.665] WriteFile (in: hFile=0x108c, lpBuffer=0x827ccc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb70f7b8, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesWritten=0xb70f7b8*=0x3c00, lpOverlapped=0x0) returned 1 [0145.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0145.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e6f0 [0145.111] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.111] WriteFile (in: hFile=0x108c, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xb70f824, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0xb70f824*=0x154, lpOverlapped=0x0) returned 1 [0145.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0145.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7ad8) returned 1 [0145.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1478) returned 1 [0145.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e90) returned 1 [0145.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e6f0) returned 1 [0145.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0145.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0145.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0145.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f347a0 [0145.337] wcscpy (in: _Dest=0x3f347a0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" [0145.337] wcscat (in: _Dest=0x3f347a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.f0dbec") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.f0dbec" [0145.337] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.f0dbec", NtPathName=0xb70f7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187e98 [0146.691] FlushFileBuffers (hFile=0x108c) returned 1 [0146.743] CloseHandle (hObject=0x108c) returned 1 [0146.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5bf0 [0146.744] wcscpy (in: _Dest=0x3da5bf0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0146.744] wcscat (in: _Dest=0x3da5bf0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" [0146.744] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\f0dbec-readme.txt")) returned 0x20 [0146.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5bf0) returned 1 [0146.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24440) returned 1 Thread: id = 946 os_tid = 0x159c [0140.619] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp")) returned 0x20 [0142.150] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0142.151] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.151] GetLastError () returned 0x5 [0142.151] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0142.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ae8) returned 1 Thread: id = 947 os_tid = 0x15a0 [0140.619] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp")) returned 0x20 [0142.152] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0142.152] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.153] GetLastError () returned 0x5 [0142.153] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0142.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d680) returned 1 Thread: id = 948 os_tid = 0x15a4 [0140.619] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp")) returned 0x20 [0141.233] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0141.233] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.233] GetLastError () returned 0x5 [0141.233] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0141.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d5d8) returned 1 Thread: id = 949 os_tid = 0x15a8 [0140.619] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp")) returned 0x20 [0141.773] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0141.773] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.773] GetLastError () returned 0x5 [0141.773] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0141.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ce0) returned 1 Thread: id = 950 os_tid = 0x15ac [0140.620] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg")) returned 0x20 [0142.176] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", dwFileAttributes=0x20) returned 1 [0142.177] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12c8 [0142.177] GetFileSizeEx (in: hFile=0x12c8, lpFileSize=0xad7f9e8 | out: lpFileSize=0xad7f9e8*=845941) returned 1 [0142.177] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0xce871, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.177] ReadFile (in: hFile=0x12c8, lpBuffer=0xad7f9f4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad7f9d0, lpOverlapped=0x0 | out: lpBuffer=0xad7f9f4*, lpNumberOfBytesRead=0xad7f9d0*=0x4, lpOverlapped=0x0) returned 1 [0142.202] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0142.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef13d8 [0142.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1900 [0142.202] NtQuerySystemTime (in: CurrentTime=0xad7f970 | out: CurrentTime=0xad7f970*=132471540107772000) returned 0x0 [0142.202] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x5e59dfe1 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x43d8b8e [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x4bac1301 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x6a1dface [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x466bc386 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x4887f02f [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x3af061ec [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x5632953f [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x19331c4e [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x6aa8d1a1 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x384f59f5 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0xe07373b [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x25139505 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0xa4ea128 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x797c9cf6 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x6d1492a0 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x6a7df8e1 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x3247fe3 [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x271ea52d [0142.203] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x23896f1b [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x753cf666 [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x75c9b292 [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x65ec7c5a [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x5a6ac837 [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x75caebfd [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x6afe8321 [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x2f5e82fc [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x23da10d6 [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x2f9407b3 [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0xd9ad088 [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x4392747c [0142.204] RtlRandomEx (in: Seed=0xad7f968 | out: Seed=0xad7f968) returned 0x390166d3 [0142.217] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.217] ReadFile (in: hFile=0x12c8, lpBuffer=0x828fc68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad7f970, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesRead=0xad7f970*=0x3c00, lpOverlapped=0x0) returned 1 [0142.220] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a110 [0142.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e680d8 [0142.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0142.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0142.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b54b8 [0142.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0142.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1900 [0142.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0142.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0142.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a110) returned 1 [0142.221] WriteFile (in: hFile=0x12c8, lpBuffer=0x82b54b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad7f970, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesWritten=0xad7f970*=0x3c00, lpOverlapped=0x0) returned 1 [0143.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0143.002] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x69000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.002] ReadFile (in: hFile=0x12c8, lpBuffer=0x828fc68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad7f970, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesRead=0xad7f970*=0x3c00, lpOverlapped=0x0) returned 1 [0143.005] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x69000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1838 [0143.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0143.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b54b8 [0143.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1838 [0143.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0143.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0143.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.006] WriteFile (in: hFile=0x12c8, lpBuffer=0x82b54b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad7f970, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesWritten=0xad7f970*=0x3c00, lpOverlapped=0x0) returned 1 [0143.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0143.599] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0xcac75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.599] ReadFile (in: hFile=0x12c8, lpBuffer=0x828fc68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad7f970, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesRead=0xad7f970*=0x3c00, lpOverlapped=0x0) returned 1 [0143.663] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0xcac75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d370 [0143.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0143.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0143.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0143.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825ec88 [0143.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0143.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0143.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0143.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0143.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d370) returned 1 [0143.664] WriteFile (in: hFile=0x12c8, lpBuffer=0x825ec88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad7f970, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesWritten=0xad7f970*=0x3c00, lpOverlapped=0x0) returned 1 [0145.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0145.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d2a0 [0145.109] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.109] WriteFile (in: hFile=0x12c8, lpBuffer=0x3e16f90*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0xad7f9dc, lpOverlapped=0x0 | out: lpBuffer=0x3e16f90*, lpNumberOfBytesWritten=0xad7f9dc*=0x146, lpOverlapped=0x0) returned 1 [0145.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16f90) returned 1 [0145.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68dc0) returned 1 [0145.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0145.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d90) returned 1 [0145.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d2a0) returned 1 [0145.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef13d8) returned 1 [0145.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2210) returned 1 [0145.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0145.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831aad8 [0145.338] wcscpy (in: _Dest=0x831aad8, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" [0145.338] wcscat (in: _Dest=0x831aad8, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.f0dbec") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.f0dbec" [0145.338] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.f0dbec", NtPathName=0xad7f960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3ca00 [0146.776] FlushFileBuffers (hFile=0x12c8) returned 1 [0146.800] CloseHandle (hObject=0x12c8) returned 1 [0146.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcaa88 [0146.813] wcscpy (in: _Dest=0x2fcaa88, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0146.813] wcscat (in: _Dest=0x2fcaa88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" [0146.813] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\f0dbec-readme.txt")) returned 0x20 [0146.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcaa88) returned 1 [0146.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33748) returned 1 Thread: id = 951 os_tid = 0x15b0 [0140.687] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg")) returned 0x20 [0142.180] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", dwFileAttributes=0x20) returned 1 [0142.180] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf0 [0142.180] GetFileSizeEx (in: hFile=0xdf0, lpFileSize=0xba2f818 | out: lpFileSize=0xba2f818*=595284) returned 1 [0142.180] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x91550, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.180] ReadFile (in: hFile=0xdf0, lpBuffer=0xba2f824, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xba2f800, lpOverlapped=0x0 | out: lpBuffer=0xba2f824*, lpNumberOfBytesRead=0xba2f800*=0x4, lpOverlapped=0x0) returned 1 [0142.184] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0142.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0142.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef13d8 [0142.184] NtQuerySystemTime (in: CurrentTime=0xba2f7a0 | out: CurrentTime=0xba2f7a0*=132471540107616000) returned 0x0 [0142.184] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x76ae98d8 [0142.184] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x45585d61 [0142.184] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x5b191d23 [0142.184] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x587c2439 [0142.184] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x5ee7b2bd [0142.184] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x5ea7fa4a [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x5f8599a0 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x7ba00094 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x5708f970 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x66365d00 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x7de6c4e5 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x3b27c894 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x7da954cd [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x46e022e6 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x3d6ce004 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0xf1e0a61 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x7e021b7e [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x64afd6f3 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x7111723f [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x446dde9e [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x59cbb7f4 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x2de6a9a7 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x3423b586 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x25c62798 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x214263 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0xb1d5632 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x548db074 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0xd45d32 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x45a0cf87 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0xcc5f746 [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x69bf5dae [0142.185] RtlRandomEx (in: Seed=0xba2f798 | out: Seed=0xba2f798) returned 0x22d9f906 [0142.199] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.199] ReadFile (in: hFile=0xdf0, lpBuffer=0x828c060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba2f7a0, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesRead=0xba2f7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.867] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a158 [0142.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0142.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0142.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0142.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0142.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0142.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0142.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0142.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0142.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a158) returned 1 [0142.868] WriteFile (in: hFile=0xdf0, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba2f7a0, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0xba2f7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0143.595] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.595] ReadFile (in: hFile=0xdf0, lpBuffer=0x828c060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba2f7a0, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesRead=0xba2f7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.597] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e69db0 [0143.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0143.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0143.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0143.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0143.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0143.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0143.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0143.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0143.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69db0) returned 1 [0143.598] WriteFile (in: hFile=0xdf0, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba2f7a0, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0xba2f7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0144.629] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x8d954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.629] ReadFile (in: hFile=0xdf0, lpBuffer=0x828c060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba2f7a0, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesRead=0xba2f7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.630] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x8d954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300930 [0144.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bbe0 [0144.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0144.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305beb0) returned 1 [0144.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0144.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0144.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0144.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0144.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bbe0) returned 1 [0144.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300930) returned 1 [0144.631] WriteFile (in: hFile=0xdf0, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba2f7a0, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0xba2f7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0145.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e828 [0145.229] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.229] WriteFile (in: hFile=0xdf0, lpBuffer=0x3e16780*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xba2f80c, lpOverlapped=0x0 | out: lpBuffer=0x3e16780*, lpNumberOfBytesWritten=0xba2f80c*=0x14e, lpOverlapped=0x0) returned 1 [0145.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16780) returned 1 [0145.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7838) returned 1 [0145.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0145.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7e20) returned 1 [0145.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 [0145.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0145.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0145.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16a8) returned 1 [0145.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81be810 [0145.321] wcscpy (in: _Dest=0x81be810, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" [0145.321] wcscat (in: _Dest=0x81be810, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.f0dbec") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.f0dbec" [0145.321] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.f0dbec", NtPathName=0xba2f790, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ad18 [0146.642] FlushFileBuffers (hFile=0xdf0) returned 1 [0146.645] CloseHandle (hObject=0xdf0) returned 1 [0146.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a958 [0146.654] wcscpy (in: _Dest=0x831a958, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0146.654] wcscat (in: _Dest=0x831a958, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" [0146.654] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\f0dbec-readme.txt")) returned 0x20 [0146.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a958) returned 1 [0146.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32868) returned 1 Thread: id = 952 os_tid = 0x15b4 [0140.711] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg")) returned 0x20 [0142.220] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", dwFileAttributes=0x20) returned 1 [0142.224] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde0 [0142.224] GetFileSizeEx (in: hFile=0xde0, lpFileSize=0xba6f8d8 | out: lpFileSize=0xba6f8d8*=775702) returned 1 [0142.224] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0xbd612, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.224] ReadFile (in: hFile=0xde0, lpBuffer=0xba6f8e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xba6f8c0, lpOverlapped=0x0 | out: lpBuffer=0xba6f8e4*, lpNumberOfBytesRead=0xba6f8c0*=0x4, lpOverlapped=0x0) returned 1 [0142.231] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1900 [0142.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0142.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0142.231] NtQuerySystemTime (in: CurrentTime=0xba6f860 | out: CurrentTime=0xba6f860*=132471540108084000) returned 0x0 [0142.231] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x7102be77 [0142.231] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0xe9b7bcb [0142.231] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x30b85ef6 [0142.231] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x2482f8e9 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x739dcb63 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0xa6bac82 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x1ef3c369 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x79f0a281 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x3f304038 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x3d5b54e4 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x738c592 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x1bb049bc [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x489b3276 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x2c91153 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0xf4aa49f [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x5afa5bcc [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x6ba7d70f [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x1f86ab88 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x6a7205cb [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x77938a21 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x10c0dede [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x47943f6c [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x5d2fe0d6 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x1ea69c66 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x1ab1683c [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x7f4d66e5 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x1a658b5f [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x4bcb69dc [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x32551b08 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x1a149cd6 [0142.232] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x72a230aa [0142.233] RtlRandomEx (in: Seed=0xba6f858 | out: Seed=0xba6f858) returned 0x330298f9 [0142.245] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.245] ReadFile (in: hFile=0xde0, lpBuffer=0x82a2890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba6f860, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesRead=0xba6f860*=0x3c00, lpOverlapped=0x0) returned 1 [0142.248] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a110 [0142.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e680d8 [0142.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1900 [0142.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0142.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8297478 [0142.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1900 [0142.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0142.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0142.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0142.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a110) returned 1 [0142.249] WriteFile (in: hFile=0xde0, lpBuffer=0x8297478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba6f860, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesWritten=0xba6f860*=0x3c00, lpOverlapped=0x0) returned 1 [0143.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0143.006] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.006] ReadFile (in: hFile=0xde0, lpBuffer=0x82a2890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba6f860, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesRead=0xba6f860*=0x3c00, lpOverlapped=0x0) returned 1 [0143.012] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0143.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8297478 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1248 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1248) returned 1 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.013] WriteFile (in: hFile=0xde0, lpBuffer=0x8297478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba6f860, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesWritten=0xba6f860*=0x3c00, lpOverlapped=0x0) returned 1 [0143.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0143.600] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0xb9a16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.600] ReadFile (in: hFile=0xde0, lpBuffer=0x82a2890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba6f860, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesRead=0xba6f860*=0x3c00, lpOverlapped=0x0) returned 1 [0143.666] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0xb9a16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d370 [0143.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0143.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0143.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0143.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0143.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0143.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0143.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0143.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0143.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d370) returned 1 [0143.666] WriteFile (in: hFile=0xde0, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba6f860, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0xba6f860*=0x3c00, lpOverlapped=0x0) returned 1 [0145.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0145.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e620 [0145.139] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.142] WriteFile (in: hFile=0xde0, lpBuffer=0x3e16e38*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xba6f8cc, lpOverlapped=0x0 | out: lpBuffer=0x3e16e38*, lpNumberOfBytesWritten=0xba6f8cc*=0x14c, lpOverlapped=0x0) returned 1 [0145.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16e38) returned 1 [0145.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e20) returned 1 [0145.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0145.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68df0) returned 1 [0145.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e620) returned 1 [0145.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0145.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0145.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0145.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30c88 [0145.312] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" [0145.312] wcscat (in: _Dest=0x3f30c88, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.f0dbec") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.f0dbec" [0145.312] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.f0dbec", NtPathName=0xba6f850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819abd8 [0146.635] FlushFileBuffers (hFile=0xde0) returned 1 [0146.637] CloseHandle (hObject=0xde0) returned 1 [0146.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a958 [0146.652] wcscpy (in: _Dest=0x831a958, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0146.652] wcscat (in: _Dest=0x831a958, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" [0146.652] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\f0dbec-readme.txt")) returned 0x20 [0146.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a958) returned 1 [0146.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 Thread: id = 953 os_tid = 0x15b8 [0140.712] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg")) returned 0x20 [0142.254] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", dwFileAttributes=0x20) returned 1 [0142.254] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xddc [0142.254] GetFileSizeEx (in: hFile=0xddc, lpFileSize=0xa7ffb50 | out: lpFileSize=0xa7ffb50*=780831) returned 1 [0142.254] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0xbea1b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.255] ReadFile (in: hFile=0xddc, lpBuffer=0xa7ffb5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa7ffb38, lpOverlapped=0x0 | out: lpBuffer=0xa7ffb5c*, lpNumberOfBytesRead=0xa7ffb38*=0x4, lpOverlapped=0x0) returned 1 [0142.258] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0142.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3638 [0142.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0142.258] NtQuerySystemTime (in: CurrentTime=0xa7ffad8 | out: CurrentTime=0xa7ffad8*=132471540108396000) returned 0x0 [0142.258] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x4df171c0 [0142.258] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x7af3ac37 [0142.258] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x7cc8b10c [0142.258] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x92afae3 [0142.258] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x44780a0f [0142.258] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x5dae41e4 [0142.258] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x134605ee [0142.258] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x7479fd40 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0xf499fa1 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x7c05579 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0xdce9b56 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x6e85b5cb [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0xc8ec398 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x28642abc [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x72f9aa54 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x59e4d78a [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x5c2dbecc [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0xf3175e3 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x4dfc0eae [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x2593fbc1 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x26b0a721 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x19082c6e [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x2208a128 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x79114b7b [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x6d71ff2b [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x50a73371 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x3b8d290e [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x6c19ccc9 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x522ee85f [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x72a99e73 [0142.259] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x662f9992 [0142.260] RtlRandomEx (in: Seed=0xa7ffad0 | out: Seed=0xa7ffad0) returned 0x4ddcc7ed [0142.271] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.271] ReadFile (in: hFile=0xddc, lpBuffer=0x82aa0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa7ffad8, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesRead=0xa7ffad8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.290] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309190 [0142.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e680d8 [0142.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0142.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0142.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8288458 [0142.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0142.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0142.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0142.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0142.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309190) returned 1 [0142.291] WriteFile (in: hFile=0xddc, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa7ffad8, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xa7ffad8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0143.123] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.123] ReadFile (in: hFile=0xddc, lpBuffer=0x82aa0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa7ffad8, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesRead=0xa7ffad8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.126] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0143.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0143.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8288458 [0143.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0143.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0143.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0143.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.127] WriteFile (in: hFile=0xddc, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa7ffad8, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xa7ffad8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0144.771] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0xbae1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.772] ReadFile (in: hFile=0xddc, lpBuffer=0x82aa0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa7ffad8, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesRead=0xa7ffad8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.773] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0xbae1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309bb0 [0144.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0144.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0144.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0144.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8288458 [0144.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0144.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0144.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0144.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0144.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309bb0) returned 1 [0144.774] WriteFile (in: hFile=0xddc, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa7ffad8, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xa7ffad8*=0x3c00, lpOverlapped=0x0) returned 1 [0145.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0145.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e960 [0145.258] SetFilePointerEx (in: hFile=0xddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.258] WriteFile (in: hFile=0xddc, lpBuffer=0x3e174f0*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0xa7ffb44, lpOverlapped=0x0 | out: lpBuffer=0x3e174f0*, lpNumberOfBytesWritten=0xa7ffb44*=0x144, lpOverlapped=0x0) returned 1 [0145.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e174f0) returned 1 [0145.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0145.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0145.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0145.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 [0145.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3638) returned 1 [0145.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0145.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0145.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a958 [0145.317] wcscpy (in: _Dest=0x831a958, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" [0145.317] wcscat (in: _Dest=0x831a958, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.f0dbec") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.f0dbec" [0145.317] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.f0dbec", NtPathName=0xa7ffac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c2e0 [0146.645] FlushFileBuffers (hFile=0xddc) returned 1 [0146.648] CloseHandle (hObject=0xddc) returned 1 [0146.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a958 [0146.660] wcscpy (in: _Dest=0x831a958, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0146.660] wcscat (in: _Dest=0x831a958, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" [0146.660] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\f0dbec-readme.txt")) returned 0x20 [0146.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a958) returned 1 [0146.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f336d8) returned 1 Thread: id = 954 os_tid = 0x15bc [0140.713] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg")) returned 0x20 [0142.274] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", dwFileAttributes=0x20) returned 1 [0142.274] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdcc [0142.274] GetFileSizeEx (in: hFile=0xdcc, lpFileSize=0xb8afd58 | out: lpFileSize=0xb8afd58*=561276) returned 1 [0142.274] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x89078, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.275] ReadFile (in: hFile=0xdcc, lpBuffer=0xb8afd64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb8afd40, lpOverlapped=0x0 | out: lpBuffer=0xb8afd64*, lpNumberOfBytesRead=0xb8afd40*=0x4, lpOverlapped=0x0) returned 1 [0142.296] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0142.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0142.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0142.296] NtQuerySystemTime (in: CurrentTime=0xb8afce0 | out: CurrentTime=0xb8afce0*=132471540108708000) returned 0x0 [0142.296] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x2de8d803 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x45c811ff [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0xb6d0cb5 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x33b63a9b [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x2b685abd [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x27b051fd [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x39c80775 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x34fbe00f [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x56bad6ee [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x5b984c2c [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x6cc06c93 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x2a180948 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x1b0dc4a1 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x33ac2fc7 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x29ea2bc8 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x7bca0853 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x6884687a [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x2110fcb [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x37d1716f [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x78a3104f [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x77913b6 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x63f6f0db [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x66711c6b [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x52dc425d [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x476f01cd [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x58490093 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x527e0705 [0142.297] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x34eda1c6 [0142.298] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x6b4fef15 [0142.298] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x5ec40281 [0142.298] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x24dc3312 [0142.298] RtlRandomEx (in: Seed=0xb8afcd8 | out: Seed=0xb8afcd8) returned 0x5acce37d [0142.310] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.310] ReadFile (in: hFile=0xdcc, lpBuffer=0x829b080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb8afce0, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesRead=0xb8afce0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.313] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309190 [0142.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e680d8 [0142.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0142.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0142.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a6498 [0142.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0142.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0142.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0142.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0142.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309190) returned 1 [0142.314] WriteFile (in: hFile=0xdcc, lpBuffer=0x82a6498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb8afce0, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesWritten=0xb8afce0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0142.316] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x47400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.316] ReadFile (in: hFile=0xdcc, lpBuffer=0x829b080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb8afce0, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesRead=0xb8afce0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.319] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x47400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309190 [0142.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e680d8 [0142.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0142.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0142.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a6498 [0142.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0142.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0142.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0142.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0142.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309190) returned 1 [0142.320] WriteFile (in: hFile=0xdcc, lpBuffer=0x82a6498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb8afce0, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesWritten=0xb8afce0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0143.128] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x8547c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.128] ReadFile (in: hFile=0xdcc, lpBuffer=0x829b080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb8afce0, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesRead=0xb8afce0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.238] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x8547c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0143.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0143.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a6498 [0143.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0143.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0143.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0143.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.239] WriteFile (in: hFile=0xdcc, lpBuffer=0x82a6498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb8afce0, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesWritten=0xb8afce0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0144.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e070 [0144.777] SetFilePointerEx (in: hFile=0xdcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.777] WriteFile (in: hFile=0xdcc, lpBuffer=0x3e17240*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xb8afd4c, lpOverlapped=0x0 | out: lpBuffer=0x3e17240*, lpNumberOfBytesWritten=0xb8afd4c*=0x14e, lpOverlapped=0x0) returned 1 [0145.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17240) returned 1 [0145.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7bb8) returned 1 [0145.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0145.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8210) returned 1 [0145.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 [0145.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0145.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0145.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0145.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81be898 [0145.339] wcscpy (in: _Dest=0x81be898, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" [0145.339] wcscat (in: _Dest=0x81be898, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.f0dbec") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.f0dbec" [0145.339] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.f0dbec", NtPathName=0xb8afcd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ae58 [0146.733] FlushFileBuffers (hFile=0xdcc) returned 1 [0146.799] CloseHandle (hObject=0xdcc) returned 1 [0146.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcaa88 [0146.808] wcscpy (in: _Dest=0x2fcaa88, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0146.808] wcscat (in: _Dest=0x2fcaa88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" [0146.808] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\f0dbec-readme.txt")) returned 0x20 [0146.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcaa88) returned 1 [0146.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f329d0) returned 1 Thread: id = 955 os_tid = 0x15c0 [0140.714] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg")) returned 0x20 [0141.256] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", dwFileAttributes=0x20) returned 1 [0141.256] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14f4 [0141.256] GetFileSizeEx (in: hFile=0x14f4, lpFileSize=0xbaef818 | out: lpFileSize=0xbaef818*=777835) returned 1 [0141.256] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0xbde67, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.256] ReadFile (in: hFile=0x14f4, lpBuffer=0xbaef824, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbaef800, lpOverlapped=0x0 | out: lpBuffer=0xbaef824*, lpNumberOfBytesRead=0xbaef800*=0x4, lpOverlapped=0x0) returned 1 [0141.259] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0141.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0141.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0141.259] NtQuerySystemTime (in: CurrentTime=0xbaef7a0 | out: CurrentTime=0xbaef7a0*=132471540098412000) returned 0x0 [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x4bc8e52e [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x1aac1ca3 [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x4907ffff [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x7e3eaf3b [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x2b5aca05 [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x2daf37e6 [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x7aa18a4d [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x7ae1039b [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x6a4212f3 [0141.259] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x7d1a75e6 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x28f4fe86 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x14d2b15a [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x39ca691f [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x7680c084 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x34730ea6 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x3824ec22 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x35f4d803 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x7877a157 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x46661568 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0xc1acce1 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x2168316 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x67f5fd0e [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x122147e1 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x1ea36cf8 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x5adde3d4 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x32805a14 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x7d1ddcff [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x79d23709 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x75aaa9f [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x6fc49b8d [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0x275bb698 [0141.260] RtlRandomEx (in: Seed=0xbaef798 | out: Seed=0xbaef798) returned 0xcd27e6a [0141.271] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.271] ReadFile (in: hFile=0x14f4, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbaef7a0, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0xbaef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0141.274] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6aae8 [0141.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68498 [0141.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0141.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0141.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8262890 [0141.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0141.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0141.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0141.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0141.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aae8) returned 1 [0141.275] WriteFile (in: hFile=0x14f4, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbaef7a0, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0xbaef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0142.567] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.567] ReadFile (in: hFile=0x14f4, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbaef7a0, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0xbaef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.588] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x2ff0010 [0142.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f324a8 [0142.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312a90 [0142.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312a90) returned 1 [0142.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0142.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312a90 [0142.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312ae0 [0142.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312ae0) returned 1 [0142.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0142.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff0010) returned 1 [0142.589] WriteFile (in: hFile=0x14f4, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbaef7a0, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xbaef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0143.022] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0xba26b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.022] ReadFile (in: hFile=0x14f4, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbaef7a0, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0xbaef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.023] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0xba26b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1248 [0143.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1248) returned 1 [0143.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0143.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1248 [0143.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14c8 [0143.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14c8) returned 1 [0143.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.025] WriteFile (in: hFile=0x14f4, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbaef7a0, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xbaef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0143.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3d48 [0143.049] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.049] WriteFile (in: hFile=0x14f4, lpBuffer=0x3e16ce0*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xbaef80c, lpOverlapped=0x0 | out: lpBuffer=0x3e16ce0*, lpNumberOfBytesWritten=0xbaef80c*=0x14a, lpOverlapped=0x0) returned 1 [0143.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0143.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff48) returned 1 [0143.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0143.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff78) returned 1 [0143.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3d48) returned 1 [0143.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0143.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0143.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0143.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f31370 [0143.051] wcscpy (in: _Dest=0x3f31370, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" [0143.052] wcscat (in: _Dest=0x3f31370, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.f0dbec") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.f0dbec" [0143.052] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.f0dbec", NtPathName=0xbaef790, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c7a0 [0143.055] FlushFileBuffers (hFile=0x14f4) returned 1 [0143.825] CloseHandle (hObject=0x14f4) returned 1 [0144.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0a08 [0144.016] wcscpy (in: _Dest=0x3db0a08, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0144.016] wcscat (in: _Dest=0x3db0a08, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" [0144.016] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\f0dbec-readme.txt")) returned 0x20 [0144.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0a08) returned 1 [0144.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 Thread: id = 956 os_tid = 0x15c4 [0140.715] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg")) returned 0x20 [0141.275] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", dwFileAttributes=0x20) returned 1 [0141.276] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14f8 [0141.276] GetFileSizeEx (in: hFile=0x14f8, lpFileSize=0xa6cfd30 | out: lpFileSize=0xa6cfd30*=620888) returned 1 [0141.276] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x97954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.276] ReadFile (in: hFile=0x14f8, lpBuffer=0xa6cfd3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa6cfd18, lpOverlapped=0x0 | out: lpBuffer=0xa6cfd3c*, lpNumberOfBytesRead=0xa6cfd18*=0x4, lpOverlapped=0x0) returned 1 [0141.278] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0141.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0141.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0141.278] NtQuerySystemTime (in: CurrentTime=0xa6cfcb8 | out: CurrentTime=0xa6cfcb8*=132471540098568000) returned 0x0 [0141.278] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x721efced [0141.278] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x39a8f1ef [0141.278] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x43d6336f [0141.278] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x557d3c50 [0141.278] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x53b56e6c [0141.278] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x4755cbe7 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x4e6215e1 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x2bdfe27d [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x5df2a7e3 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x1d17ad7 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x621997d2 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x25d4d5af [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x5de4a3be [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x2e583f73 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x58306682 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x615e75d7 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x3fb976f [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x745ded21 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x4678aaf2 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x374ec809 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x3dcb89a7 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x70556dc7 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x10ebe389 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x39e5473c [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x555f4161 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x716066c9 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x29e57f15 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x256fc9f2 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x5efe5654 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x39738122 [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x3046589e [0141.279] RtlRandomEx (in: Seed=0xa6cfcb0 | out: Seed=0xa6cfcb0) returned 0x1fc96ee8 [0141.291] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.291] ReadFile (in: hFile=0x14f8, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa6cfcb8, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xa6cfcb8*=0x3c00, lpOverlapped=0x0) returned 1 [0141.304] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308530 [0141.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68498 [0141.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0141.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0141.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0141.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0141.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0141.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c298) returned 1 [0141.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0141.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308530) returned 1 [0141.305] WriteFile (in: hFile=0x14f8, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa6cfcb8, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xa6cfcb8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0142.585] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x4ec00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.585] ReadFile (in: hFile=0x14f8, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa6cfcb8, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xa6cfcb8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.590] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x4ec00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x2ff0010 [0142.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f324a8 [0142.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312ae0 [0142.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312ae0) returned 1 [0142.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0142.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312ae0 [0142.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b58 [0142.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b58) returned 1 [0142.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0142.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff0010) returned 1 [0142.591] WriteFile (in: hFile=0x14f8, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa6cfcb8, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xa6cfcb8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0143.027] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x93d58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.027] ReadFile (in: hFile=0x14f8, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa6cfcb8, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xa6cfcb8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.028] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x93d58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9da8 [0143.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0143.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14c8 [0143.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14c8) returned 1 [0143.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0143.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14c8 [0143.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0143.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0143.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0143.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9da8) returned 1 [0143.029] WriteFile (in: hFile=0x14f8, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa6cfcb8, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xa6cfcb8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0143.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3d48 [0143.057] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.057] WriteFile (in: hFile=0x14f8, lpBuffer=0x3e16ce0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0xa6cfd24, lpOverlapped=0x0 | out: lpBuffer=0x3e16ce0*, lpNumberOfBytesWritten=0xa6cfd24*=0x146, lpOverlapped=0x0) returned 1 [0143.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0143.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff48) returned 1 [0143.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0143.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff78) returned 1 [0143.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3d48) returned 1 [0143.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0143.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0143.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0143.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e241c0 [0143.059] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" [0143.059] wcscat (in: _Dest=0x3e241c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.f0dbec") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.f0dbec" [0143.059] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.f0dbec", NtPathName=0xa6cfca8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c7a0 [0143.063] FlushFileBuffers (hFile=0x14f8) returned 1 [0143.826] CloseHandle (hObject=0x14f8) returned 1 [0144.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0a08 [0144.005] wcscpy (in: _Dest=0x3db0a08, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0144.005] wcscat (in: _Dest=0x3db0a08, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" [0144.005] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\f0dbec-readme.txt")) returned 0xffffffff [0144.006] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\F0DBEC-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1784 [0144.006] WriteFile (in: hFile=0x1784, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa6cfccc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa6cfccc*=0x70c, lpOverlapped=0x0) returned 1 [0144.008] CloseHandle (hObject=0x1784) returned 1 [0144.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0a08) returned 1 [0144.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f335f8) returned 1 Thread: id = 957 os_tid = 0x15c8 [0140.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7378 [0140.716] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" [0140.716] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\" [0140.716] wcscat (in: _Dest=0x2c7378, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*" [0140.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0140.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099290 [0140.719] wcscmp (_String1=".", _String2=".") returned 0 [0140.719] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.719] wcscmp (_String1="..", _String2=".") returned 1 [0140.719] wcscmp (_String1="..", _String2="..") returned 0 [0140.719] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0140.719] wcscmp (_String1="FrameworkList.xml", _String2=".") returned 1 [0140.719] wcscmp (_String1="FrameworkList.xml", _String2="..") returned 1 [0140.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0140.719] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" [0140.719] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\" [0140.719] wcscat (in: _Dest=0x333828, _Source="FrameworkList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" [0144.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0144.338] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0144.338] FindClose (in: hFindFile=0x8099290 | out: hFindFile=0x8099290) returned 1 [0144.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0144.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 [0144.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 958 os_tid = 0x15cc [0140.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11fa8 [0140.720] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" [0140.720] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\" [0140.720] wcscat (in: _Dest=0x3e11fa8, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*" [0140.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0140.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80992d0 [0140.720] wcscmp (_String1=".", _String2=".") returned 0 [0140.720] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.720] wcscmp (_String1="..", _String2=".") returned 1 [0140.720] wcscmp (_String1="..", _String2="..") returned 0 [0140.720] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0140.720] wcscmp (_String1="Client.xml", _String2=".") returned 1 [0140.721] wcscmp (_String1="Client.xml", _String2="..") returned 1 [0140.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff63a8 [0140.721] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" [0140.721] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\" [0140.721] wcscat (in: _Dest=0x2ff63a8, _Source="Client.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" [0144.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c [0144.340] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0144.340] FindClose (in: hFindFile=0x80992d0 | out: hFindFile=0x80992d0) returned 1 [0144.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0144.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 [0144.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 959 os_tid = 0x15d0 [0140.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 0x20 [0140.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x20) returned 0 [0140.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.722] GetLastError () returned 0x5 [0140.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x20) returned 0 [0140.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 960 os_tid = 0x15d4 [0140.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 0x20 [0140.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x20) returned 0 [0140.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.724] GetLastError () returned 0x5 [0140.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x20) returned 0 [0140.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 961 os_tid = 0x15d8 [0140.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 0x20 [0140.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x20) returned 0 [0140.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.726] GetLastError () returned 0x5 [0140.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x20) returned 0 [0140.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053308) returned 1 Thread: id = 962 os_tid = 0x15dc [0140.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0x20 [0140.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x20) returned 0 [0140.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.728] GetLastError () returned 0x5 [0140.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x20) returned 0 [0140.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053390) returned 1 Thread: id = 963 os_tid = 0x15e0 [0140.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 0x20 [0140.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x20) returned 0 [0140.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.731] GetLastError () returned 0x5 [0140.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x20) returned 0 [0140.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053418) returned 1 Thread: id = 964 os_tid = 0x15e4 [0140.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 0x20 [0144.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x20) returned 0 [0144.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.040] GetLastError () returned 0x5 [0144.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x20) returned 0 [0144.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80534a0) returned 1 Thread: id = 965 os_tid = 0x15e8 [0140.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0x20 [0144.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x20) returned 0 [0144.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.020] GetLastError () returned 0x5 [0144.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x20) returned 0 [0144.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053528) returned 1 Thread: id = 966 os_tid = 0x15ec [0140.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 0x20 [0143.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x20) returned 0 [0143.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.807] GetLastError () returned 0x5 [0143.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x20) returned 0 [0143.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80535b0) returned 1 Thread: id = 967 os_tid = 0x15f0 [0140.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 0x20 [0144.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x20) returned 0 [0144.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.022] GetLastError () returned 0x5 [0144.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x20) returned 0 [0144.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053638) returned 1 Thread: id = 968 os_tid = 0x15f4 [0140.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 0x20 [0144.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x20) returned 0 [0144.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.024] GetLastError () returned 0x5 [0144.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x20) returned 0 [0144.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80536c0) returned 1 Thread: id = 969 os_tid = 0x15f8 [0140.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 0x20 [0144.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x20) returned 0 [0144.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.025] GetLastError () returned 0x5 [0144.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x20) returned 0 [0144.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053748) returned 1 Thread: id = 970 os_tid = 0x15fc [0140.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 0x20 [0144.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x20) returned 0 [0144.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.027] GetLastError () returned 0x5 [0144.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x20) returned 0 [0144.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80537d0) returned 1 Thread: id = 971 os_tid = 0x1600 [0140.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 0x20 [0144.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x20) returned 0 [0144.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.028] GetLastError () returned 0x5 [0144.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x20) returned 0 [0144.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053858) returned 1 Thread: id = 972 os_tid = 0x1604 [0140.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 0x20 [0144.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x20) returned 0 [0144.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.030] GetLastError () returned 0x5 [0144.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x20) returned 0 [0144.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80538e0) returned 1 Thread: id = 973 os_tid = 0x1608 [0140.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 0x20 [0144.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x20) returned 0 [0144.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.032] GetLastError () returned 0x5 [0144.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x20) returned 0 [0144.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053968) returned 1 Thread: id = 974 os_tid = 0x160c [0140.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 0x20 [0144.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x20) returned 0 [0144.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.033] GetLastError () returned 0x5 [0144.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x20) returned 0 [0144.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80539f0) returned 1 Thread: id = 975 os_tid = 0x1610 [0140.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 0x20 [0144.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x20) returned 0 [0144.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.035] GetLastError () returned 0x5 [0144.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x20) returned 0 [0144.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053a78) returned 1 Thread: id = 976 os_tid = 0x1614 [0140.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0x20 [0144.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x20) returned 0 [0144.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.039] GetLastError () returned 0x5 [0144.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x20) returned 0 [0144.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b00) returned 1 Thread: id = 977 os_tid = 0x1618 [0140.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0x20 [0144.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x20) returned 0 [0144.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.036] GetLastError () returned 0x5 [0144.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x20) returned 0 [0144.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b88) returned 1 Thread: id = 978 os_tid = 0x161c [0140.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 0x20 [0144.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x20) returned 0 [0144.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.038] GetLastError () returned 0x5 [0144.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x20) returned 0 [0144.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053c10) returned 1 Thread: id = 979 os_tid = 0x1620 [0141.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 0x20 [0143.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x20) returned 0 [0143.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.615] GetLastError () returned 0x5 [0143.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x20) returned 0 [0143.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053c98) returned 1 Thread: id = 980 os_tid = 0x1624 [0141.332] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn")) returned 0x2022 [0141.332] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x20) returned 0 [0141.333] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.333] GetLastError () returned 0x5 [0141.333] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x2022) returned 0 [0141.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ee30) returned 1 Thread: id = 981 os_tid = 0x1628 [0141.334] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_k.hxw")) returned 0x2022 [0141.334] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x20) returned 0 [0141.334] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_k.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.334] GetLastError () returned 0x5 [0141.335] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x2022) returned 0 [0141.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054ee0) returned 1 Thread: id = 982 os_tid = 0x162c [0141.336] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_namedurl.hxw")) returned 0x2022 [0145.513] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x20) returned 0 [0145.768] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_namedurl.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.927] GetLastError () returned 0x5 [0145.927] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x2022) returned 0 [0146.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 Thread: id = 983 os_tid = 0x1630 [0141.337] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mtoc_hx.hxh")) returned 0x2022 [0142.866] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x20) returned 0 [0142.866] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mtoc_hx.hxh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.415] GetLastError () returned 0x5 [0143.415] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x2022) returned 0 [0143.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055260) returned 1 Thread: id = 984 os_tid = 0x1634 [0141.337] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.hxd")) returned 0x2022 [0145.562] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x20) returned 0 [0145.685] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.hxd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.916] GetLastError () returned 0x5 [0145.916] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x2022) returned 0 [0146.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 Thread: id = 985 os_tid = 0x1638 [0141.337] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.lck")) returned 0x2022 [0145.563] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0145.684] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.916] GetLastError () returned 0x5 [0145.916] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x2022) returned 0 [0146.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 Thread: id = 986 os_tid = 0x163c [0141.338] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn")) returned 0x2022 [0145.567] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.682] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.914] GetLastError () returned 0x5 [0145.914] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80552d0) returned 1 Thread: id = 987 os_tid = 0x1640 [0141.338] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn")) returned 0x2022 [0145.555] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.686] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.919] GetLastError () returned 0x5 [0145.919] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 Thread: id = 988 os_tid = 0x1644 [0141.338] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn")) returned 0x2022 [0145.563] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.684] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.916] GetLastError () returned 0x5 [0145.916] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054d90) returned 1 Thread: id = 989 os_tid = 0x1648 [0141.339] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn")) returned 0x2022 [0145.564] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.684] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.916] GetLastError () returned 0x5 [0145.916] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054cb0) returned 1 Thread: id = 990 os_tid = 0x164c [0141.339] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn")) returned 0x2022 [0145.679] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.912] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.340] GetLastError () returned 0x5 [0146.340] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 Thread: id = 991 os_tid = 0x1650 [0141.339] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn")) returned 0x2022 [0145.567] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.682] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.913] GetLastError () returned 0x5 [0145.914] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0008) returned 1 Thread: id = 992 os_tid = 0x1654 [0141.340] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn")) returned 0x2022 [0145.556] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.686] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.919] GetLastError () returned 0x5 [0145.919] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 Thread: id = 993 os_tid = 0x1658 [0141.345] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn")) returned 0x2022 [0145.562] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.685] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.916] GetLastError () returned 0x5 [0145.917] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafa08) returned 1 Thread: id = 994 os_tid = 0x165c [0141.345] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn")) returned 0x2022 [0145.564] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.684] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.915] GetLastError () returned 0x5 [0145.915] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055340) returned 1 Thread: id = 995 os_tid = 0x1660 [0141.345] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn")) returned 0x2022 [0145.550] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.687] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.922] GetLastError () returned 0x5 [0145.922] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80553b0) returned 1 Thread: id = 996 os_tid = 0x1664 [0141.346] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn")) returned 0x2022 [0145.568] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.681] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.913] GetLastError () returned 0x5 [0145.913] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b28) returned 1 Thread: id = 997 os_tid = 0x1668 [0141.346] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn")) returned 0x2022 [0145.568] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.681] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.913] GetLastError () returned 0x5 [0145.913] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055420) returned 1 Thread: id = 998 os_tid = 0x166c [0141.346] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn")) returned 0x2022 [0145.564] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.683] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.915] GetLastError () returned 0x5 [0145.915] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055490) returned 1 Thread: id = 999 os_tid = 0x1670 [0141.347] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn")) returned 0x2022 [0145.681] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.913] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.341] GetLastError () returned 0x5 [0146.341] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e08) returned 1 Thread: id = 1000 os_tid = 0x1674 [0141.347] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn")) returned 0x2022 [0145.565] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.683] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.915] GetLastError () returned 0x5 [0145.915] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 Thread: id = 1001 os_tid = 0x1678 [0141.348] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn")) returned 0x2022 [0145.565] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.683] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.915] GetLastError () returned 0x5 [0145.915] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf208) returned 1 Thread: id = 1002 os_tid = 0x167c [0141.348] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn")) returned 0x2022 [0145.565] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.683] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.915] GetLastError () returned 0x5 [0145.915] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 Thread: id = 1003 os_tid = 0x1680 [0141.348] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn")) returned 0x2022 [0145.680] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.913] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.340] GetLastError () returned 0x5 [0146.340] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0f88) returned 1 Thread: id = 1004 os_tid = 0x1684 [0141.349] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn")) returned 0x2022 [0145.566] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.683] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.914] GetLastError () returned 0x5 [0145.914] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 Thread: id = 1005 os_tid = 0x1688 [0141.349] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn")) returned 0x2022 [0145.566] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.682] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.914] GetLastError () returned 0x5 [0145.914] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055500) returned 1 Thread: id = 1006 os_tid = 0x168c [0141.349] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn")) returned 0x2022 [0145.567] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.682] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.914] GetLastError () returned 0x5 [0145.914] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 Thread: id = 1007 os_tid = 0x1690 [0141.349] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn")) returned 0x2022 [0145.562] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.685] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.917] GetLastError () returned 0x5 [0145.917] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 1008 os_tid = 0x1694 [0142.348] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn")) returned 0x2022 [0145.679] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.912] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.340] GetLastError () returned 0x5 [0146.340] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 Thread: id = 1011 os_tid = 0x16a0 [0142.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf")) returned 0x20 [0143.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", dwFileAttributes=0x20) returned 0 [0143.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.616] GetLastError () returned 0x5 [0143.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", dwFileAttributes=0x20) returned 0 [0143.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30d10) returned 1 Thread: id = 1012 os_tid = 0x16a4 [0142.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml")) returned 0x20 [0143.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x20) returned 0 [0143.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.811] GetLastError () returned 0x5 [0143.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x20) returned 0 [0143.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 1013 os_tid = 0x16a8 [0142.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf")) returned 0x20 [0143.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x20) returned 0 [0143.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.817] GetLastError () returned 0x5 [0143.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x20) returned 0 [0143.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6570) returned 1 Thread: id = 1014 os_tid = 0x16ac [0142.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf")) returned 0x20 [0143.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x20) returned 0 [0143.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.815] GetLastError () returned 0x5 [0143.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x20) returned 0 [0143.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 Thread: id = 1015 os_tid = 0x16b0 [0142.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf")) returned 0x20 [0143.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x20) returned 0 [0143.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.809] GetLastError () returned 0x5 [0143.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x20) returned 0 [0143.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 1016 os_tid = 0x16b4 [0142.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf")) returned 0x20 [0143.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x20) returned 0 [0143.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.814] GetLastError () returned 0x5 [0143.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x20) returned 0 [0143.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 1017 os_tid = 0x16b8 [0142.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6848 [0142.354] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Program Files\\Java\\jre7\\bin\\plugin2" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2" [0142.354] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\" [0142.354] wcscat (in: _Dest=0x2fe6848, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\*" [0142.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0142.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0142.874] wcscmp (_String1=".", _String2=".") returned 0 [0142.874] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.874] wcscmp (_String1="..", _String2=".") returned 1 [0142.874] wcscmp (_String1="..", _String2="..") returned 0 [0142.874] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0142.874] wcscmp (_String1="msvcr100.dll", _String2=".") returned 1 [0142.874] wcscmp (_String1="msvcr100.dll", _String2="..") returned 1 [0142.874] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0142.874] wcscmp (_String1="npjp2.dll", _String2=".") returned 1 [0142.874] wcscmp (_String1="npjp2.dll", _String2="..") returned 1 [0142.874] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0142.875] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0142.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0142.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0142.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f1a0) returned 1 Thread: id = 1018 os_tid = 0x16bc [0142.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg")) returned 0x20 [0142.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.356] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.356] GetLastError () returned 0x5 [0142.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 1019 os_tid = 0x16c0 [0142.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg")) returned 0x20 [0142.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.358] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.358] GetLastError () returned 0x5 [0142.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ce18) returned 1 Thread: id = 1020 os_tid = 0x16c4 [0142.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg")) returned 0x20 [0142.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.360] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.360] GetLastError () returned 0x5 [0142.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c958) returned 1 Thread: id = 1021 os_tid = 0x16c8 [0142.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg")) returned 0x20 [0142.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.362] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.362] GetLastError () returned 0x5 [0142.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 1022 os_tid = 0x16cc [0142.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg")) returned 0x20 [0142.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.366] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.366] GetLastError () returned 0x5 [0142.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 1023 os_tid = 0x16d0 [0142.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6f0f0 [0142.367] wcscpy (in: _Dest=0x3e6f0f0, _Source="C:\\ProgramData\\Sun\\Java\\Java Update" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update" [0142.367] wcscat (in: _Dest=0x3e6f0f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\" [0142.367] wcscat (in: _Dest=0x3e6f0f0, _Source="*" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\*") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\*" [0142.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0142.368] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0142.876] wcscmp (_String1=".", _String2=".") returned 0 [0142.876] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.876] wcscmp (_String1="..", _String2=".") returned 1 [0142.876] wcscmp (_String1="..", _String2="..") returned 0 [0142.877] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0142.877] wcscmp (_String1="jaureglist.xml", _String2=".") returned 1 [0142.877] wcscmp (_String1="jaureglist.xml", _String2="..") returned 1 [0142.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39fc8 [0142.877] wcscpy (in: _Dest=0x3f39fc8, _Source="C:\\ProgramData\\Sun\\Java\\Java Update" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update" [0142.877] wcscat (in: _Dest=0x3f39fc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\" [0142.877] wcscat (in: _Dest=0x3f39fc8, _Source="jaureglist.xml" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" [0145.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0145.090] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0 [0145.090] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0145.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0145.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f0f0) returned 1 [0145.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5f38) returned 1 Thread: id = 1024 os_tid = 0x16d4 [0142.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddee38 [0142.369] wcscpy (in: _Dest=0x3ddee38, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0142.369] wcscat (in: _Dest=0x3ddee38, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\" [0142.369] wcscat (in: _Dest=0x3ddee38, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*" [0142.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0142.369] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0142.369] wcscmp (_String1=".", _String2=".") returned 0 [0142.369] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.369] wcscmp (_String1="..", _String2=".") returned 1 [0142.369] wcscmp (_String1="..", _String2="..") returned 0 [0142.369] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8639f00, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe8639f00, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe8639f00, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0142.369] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0142.370] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0142.370] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0142.370] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0142.370] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0142.370] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0142.370] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0142.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0142.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddee38) returned 1 [0142.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 Thread: id = 1025 os_tid = 0x16d8 [0142.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e680d8 [0142.371] wcscpy (in: _Dest=0x3e680d8, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0142.371] wcscat (in: _Dest=0x3e680d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0142.372] wcscat (in: _Dest=0x3e680d8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" [0142.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0142.372] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0142.880] wcscmp (_String1=".", _String2=".") returned 0 [0142.880] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.880] wcscmp (_String1="..", _String2=".") returned 1 [0142.880] wcscmp (_String1="..", _String2="..") returned 0 [0142.880] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88d2693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf115ef62, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xe45606ca, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0142.880] wcscmp (_String1="Help_CValidator.H1D", _String2=".") returned 1 [0142.880] wcscmp (_String1="Help_CValidator.H1D", _String2="..") returned 1 [0142.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11d28 [0142.881] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0142.881] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0142.881] wcscat (in: _Dest=0x3e11d28, _Source="Help_CValidator.H1D" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" [0145.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0145.092] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf774b282, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc098760, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0145.092] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2=".") returned 1 [0145.092] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2="..") returned 1 [0145.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a8b8 [0145.092] wcscpy (in: _Dest=0x819a8b8, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0145.092] wcscat (in: _Dest=0x819a8b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0145.092] wcscat (in: _Dest=0x819a8b8, _Source="Help_MKWD_AssetId.H1W" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" [0145.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0145.094] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf7961352, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc1ef3c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0145.094] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2=".") returned 1 [0145.094] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2="..") returned 1 [0145.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a958 [0145.094] wcscpy (in: _Dest=0x819a958, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0145.094] wcscat (in: _Dest=0x819a958, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0145.094] wcscat (in: _Dest=0x819a958, _Source="Help_MKWD_BestBet.H1W" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" [0145.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0145.095] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x79f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0145.095] wcscmp (_String1="Help_MTOC_help.H1H", _String2=".") returned 1 [0145.095] wcscmp (_String1="Help_MTOC_help.H1H", _String2="..") returned 1 [0145.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c1b0 [0145.095] wcscpy (in: _Dest=0x3e3c1b0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0145.095] wcscat (in: _Dest=0x3e3c1b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0145.095] wcscat (in: _Dest=0x3e3c1b0, _Source="Help_MTOC_help.H1H" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" [0145.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0145.097] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8baf9110, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0145.097] wcscmp (_String1="Help_MValidator.H1D", _String2=".") returned 1 [0145.097] wcscmp (_String1="Help_MValidator.H1D", _String2="..") returned 1 [0145.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819a9f8 [0145.097] wcscpy (in: _Dest=0x819a9f8, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0145.097] wcscat (in: _Dest=0x819a9f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0145.097] wcscat (in: _Dest=0x819a9f8, _Source="Help_MValidator.H1D" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" [0145.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0145.099] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0145.099] wcscmp (_String1="Help_MValidator.Lck", _String2=".") returned 1 [0145.099] wcscmp (_String1="Help_MValidator.Lck", _String2="..") returned 1 [0145.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819aa98 [0145.099] wcscpy (in: _Dest=0x819aa98, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0145.099] wcscat (in: _Dest=0x819aa98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0145.099] wcscat (in: _Dest=0x819aa98, _Source="Help_MValidator.Lck" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" [0145.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0145.101] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0145.101] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2=".") returned 1 [0145.101] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2="..") returned 1 [0145.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b218 [0145.101] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0145.101] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0145.101] wcscat (in: _Dest=0x3e1b218, _Source="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" [0145.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0145.102] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0145.102] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0145.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0145.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0145.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 Thread: id = 1026 os_tid = 0x16dc [0142.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ec20 [0142.379] wcscpy (in: _Dest=0x3e6ec20, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" [0142.379] wcscat (in: _Dest=0x3e6ec20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\" [0142.379] wcscat (in: _Dest=0x3e6ec20, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*" [0142.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0142.379] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0142.380] wcscmp (_String1=".", _String2=".") returned 0 [0142.380] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.380] wcscmp (_String1="..", _String2=".") returned 1 [0142.380] wcscmp (_String1="..", _String2="..") returned 0 [0142.380] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0142.380] wcscmp (_String1="Replicate", _String2=".") returned 1 [0142.380] wcscmp (_String1="Replicate", _String2="..") returned 1 [0142.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bff0 [0142.380] wcscpy (in: _Dest=0x3d8bff0, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" [0142.380] wcscat (in: _Dest=0x3d8bff0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\" [0142.380] wcscat (in: _Dest=0x3d8bff0, _Source="Replicate" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" [0149.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8bff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0149.558] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0149.559] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0149.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0149.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ec20) returned 1 [0149.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ee88) returned 1 Thread: id = 1027 os_tid = 0x16e0 [0142.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39e78 [0142.381] wcscpy (in: _Dest=0x3f39e78, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" [0142.381] wcscat (in: _Dest=0x3f39e78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\" [0142.381] wcscat (in: _Dest=0x3f39e78, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*" [0142.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0142.381] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0142.381] wcscmp (_String1=".", _String2=".") returned 0 [0142.381] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.381] wcscmp (_String1="..", _String2=".") returned 1 [0142.381] wcscmp (_String1="..", _String2="..") returned 0 [0142.381] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0142.381] wcscmp (_String1="1.0", _String2=".") returned 1 [0142.381] wcscmp (_String1="1.0", _String2="..") returned 1 [0142.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39f58 [0142.381] wcscpy (in: _Dest=0x3f39f58, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" [0142.381] wcscat (in: _Dest=0x3f39f58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\" [0142.382] wcscat (in: _Dest=0x3f39f58, _Source="1.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" [0149.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0149.205] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0149.205] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0149.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0149.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e78) returned 1 [0149.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd958) returned 1 Thread: id = 1028 os_tid = 0x16e4 [0142.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0142.382] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" [0142.382] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\" [0142.382] wcscat (in: _Dest=0x2fe6c08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*" [0142.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0142.382] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f379d8 [0142.382] wcscmp (_String1=".", _String2=".") returned 0 [0142.382] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.382] wcscmp (_String1="..", _String2=".") returned 1 [0142.382] wcscmp (_String1="..", _String2="..") returned 0 [0142.382] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0142.383] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0142.383] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39ee8 [0142.383] wcscpy (in: _Dest=0x3f39ee8, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" [0142.383] wcscat (in: _Dest=0x3f39ee8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\" [0142.383] wcscat (in: _Dest=0x3f39ee8, _Source="MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" [0156.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0156.664] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0156.664] FindClose (in: hFindFile=0x3f379d8 | out: hFindFile=0x3f379d8) returned 1 [0156.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0156.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0156.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6edd8) returned 1 Thread: id = 1029 os_tid = 0x16e8 [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1508 [0142.383] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" [0142.383] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\" [0142.383] wcscat (in: _Dest=0x2fe1508, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*" [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d228 [0142.384] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0142.384] wcscmp (_String1=".", _String2=".") returned 0 [0142.384] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.384] wcscmp (_String1="..", _String2=".") returned 1 [0142.384] wcscmp (_String1="..", _String2="..") returned 0 [0142.384] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.384] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0142.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d228) returned 1 [0142.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0142.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 Thread: id = 1030 os_tid = 0x16ec [0142.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6728 [0142.385] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0142.385] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\" [0142.385] wcscat (in: _Dest=0x2fe6728, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*" [0142.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d228 [0142.385] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0142.386] wcscmp (_String1=".", _String2=".") returned 0 [0142.386] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.386] wcscmp (_String1="..", _String2=".") returned 1 [0142.386] wcscmp (_String1="..", _String2="..") returned 0 [0142.386] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0142.386] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0142.386] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0142.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39708 [0142.386] wcscpy (in: _Dest=0x3f39708, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0142.386] wcscat (in: _Dest=0x3f39708, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\" [0142.386] wcscat (in: _Dest=0x3f39708, _Source="MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" [0144.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0144.535] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0144.535] wcscmp (_String1="S-1-5-18", _String2=".") returned 1 [0144.535] wcscmp (_String1="S-1-5-18", _String2="..") returned 1 [0144.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5320 [0144.535] wcscpy (in: _Dest=0x2ff5320, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0144.536] wcscat (in: _Dest=0x2ff5320, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\" [0144.536] wcscat (in: _Dest=0x2ff5320, _Source="S-1-5-18" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0144.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff5320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd4 [0144.538] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0144.538] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0144.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d228) returned 1 [0144.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0144.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22cf8) returned 1 Thread: id = 1031 os_tid = 0x16f0 [0142.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1508 [0142.386] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Users\\All Users\\Microsoft\\eHome\\logs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs" [0142.386] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\" [0142.386] wcscat (in: _Dest=0x2fe1508, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*" [0142.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0142.387] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0142.387] wcscmp (_String1=".", _String2=".") returned 0 [0142.387] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.387] wcscmp (_String1="..", _String2=".") returned 1 [0142.387] wcscmp (_String1="..", _String2="..") returned 0 [0142.387] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.387] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0142.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0142.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0142.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eae0) returned 1 Thread: id = 1032 os_tid = 0x16f4 [0142.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a2d8 [0142.388] wcscpy (in: _Dest=0x3f3a2d8, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" [0142.388] wcscat (in: _Dest=0x3f3a2d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\" [0142.389] wcscat (in: _Dest=0x3f3a2d8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*" [0142.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0142.389] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0142.389] wcscmp (_String1=".", _String2=".") returned 0 [0142.389] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.389] wcscmp (_String1="..", _String2=".") returned 1 [0142.389] wcscmp (_String1="..", _String2="..") returned 0 [0142.389] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0142.389] wcscmp (_String1="ApplicationViewsRootNode", _String2=".") returned 1 [0142.389] wcscmp (_String1="ApplicationViewsRootNode", _String2="..") returned 1 [0142.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e12408 [0142.389] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" [0142.389] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\" [0142.389] wcscat (in: _Dest=0x3e12408, _Source="ApplicationViewsRootNode" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0145.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0145.036] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0145.036] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0145.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0145.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a2d8) returned 1 [0145.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd820) returned 1 Thread: id = 1033 os_tid = 0x16f8 [0142.390] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl")) returned 0x20 [0142.390] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0142.390] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.390] GetLastError () returned 0x5 [0142.390] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0142.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5b88) returned 1 Thread: id = 1034 os_tid = 0x16fc [0142.391] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl")) returned 0x20 [0142.392] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0142.392] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.392] GetLastError () returned 0x5 [0142.392] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0142.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 Thread: id = 1035 os_tid = 0x1700 [0142.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4688 [0142.393] wcscpy (in: _Dest=0x3dc4688, _Source="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" [0142.393] wcscat (in: _Dest=0x3dc4688, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\" [0142.393] wcscat (in: _Dest=0x3dc4688, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*" [0142.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0142.393] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0142.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4688) returned 1 [0142.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0d88) returned 1 Thread: id = 1036 os_tid = 0x1704 [0142.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39a18 [0142.395] wcscpy (in: _Dest=0x3f39a18, _Source="C:\\Users\\All Users\\Microsoft\\Network\\Connections" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections" [0142.395] wcscat (in: _Dest=0x3f39a18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\" [0142.395] wcscat (in: _Dest=0x3f39a18, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*" [0142.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0142.395] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099790 [0142.395] wcscmp (_String1=".", _String2=".") returned 0 [0142.395] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.395] wcscmp (_String1="..", _String2=".") returned 1 [0142.395] wcscmp (_String1="..", _String2="..") returned 0 [0142.395] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.395] FindClose (in: hFindFile=0x8099790 | out: hFindFile=0x8099790) returned 1 [0142.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0142.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a18) returned 1 [0142.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 Thread: id = 1037 os_tid = 0x1708 [0142.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39d28 [0142.397] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" [0142.397] wcscat (in: _Dest=0x3f39d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\" [0142.397] wcscat (in: _Dest=0x3f39d28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*" [0142.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0142.397] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0142.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0142.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 1038 os_tid = 0x170c [0142.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ca88 [0142.399] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0142.399] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0142.399] wcscat (in: _Dest=0x32ca88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" [0142.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0142.399] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099790 [0142.399] wcscmp (_String1=".", _String2=".") returned 0 [0142.399] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.399] wcscmp (_String1="..", _String2=".") returned 1 [0142.399] wcscmp (_String1="..", _String2="..") returned 0 [0142.399] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0142.399] wcscmp (_String1="cache.dat", _String2=".") returned 1 [0142.399] wcscmp (_String1="cache.dat", _String2="..") returned 1 [0142.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d680 [0142.399] wcscpy (in: _Dest=0x3e2d680, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0142.399] wcscat (in: _Dest=0x3e2d680, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0142.399] wcscat (in: _Dest=0x3e2d680, _Source="cache.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" [0144.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0144.283] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0144.283] FindClose (in: hFindFile=0x8099790 | out: hFindFile=0x8099790) returned 1 [0144.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0144.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 [0144.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355dd0) returned 1 Thread: id = 1039 os_tid = 0x1710 [0142.400] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat")) returned 0x2020 [0142.400] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x20) returned 0 [0142.400] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.400] GetLastError () returned 0x5 [0142.400] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x2020) returned 0 [0142.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 Thread: id = 1040 os_tid = 0x1714 [0142.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6908 [0142.402] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" [0142.402] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\" [0142.402] wcscat (in: _Dest=0x2fe6908, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*" [0142.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0142.402] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80995d0 [0142.402] wcscmp (_String1=".", _String2=".") returned 0 [0142.402] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.402] wcscmp (_String1="..", _String2=".") returned 1 [0142.402] wcscmp (_String1="..", _String2="..") returned 0 [0142.402] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.402] FindClose (in: hFindFile=0x80995d0 | out: hFindFile=0x80995d0) returned 1 [0142.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0142.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 [0142.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 Thread: id = 1041 os_tid = 0x1718 [0142.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3db0d88 [0142.404] wcscpy (in: _Dest=0x3db0d88, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" [0142.404] wcscat (in: _Dest=0x3db0d88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\" [0142.404] wcscat (in: _Dest=0x3db0d88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*" [0142.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0142.404] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80995d0 [0142.404] wcscmp (_String1=".", _String2=".") returned 0 [0142.404] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.404] wcscmp (_String1="..", _String2=".") returned 1 [0142.405] wcscmp (_String1="..", _String2="..") returned 0 [0142.405] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0142.405] wcscmp (_String1="en-US", _String2=".") returned 1 [0142.405] wcscmp (_String1="en-US", _String2="..") returned 1 [0142.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f31040 [0142.405] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" [0142.405] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\" [0142.405] wcscat (in: _Dest=0x3f31040, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0144.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda0 [0144.290] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0144.290] FindClose (in: hFindFile=0x80995d0 | out: hFindFile=0x80995d0) returned 1 [0144.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0144.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0d88) returned 1 [0144.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ff0) returned 1 Thread: id = 1042 os_tid = 0x171c [0142.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7448 [0142.405] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0142.405] wcscat (in: _Dest=0x2fe7448, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0142.405] wcscat (in: _Dest=0x2fe7448, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*" [0142.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0142.405] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099610 [0142.406] wcscmp (_String1=".", _String2=".") returned 0 [0142.406] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.406] wcscmp (_String1="..", _String2=".") returned 1 [0142.406] wcscmp (_String1="..", _String2="..") returned 0 [0142.406] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbox.bin", cAlternateFileName="")) returned 1 [0142.406] wcscmp (_String1="blackbox.bin", _String2=".") returned 1 [0142.406] wcscmp (_String1="blackbox.bin", _String2="..") returned 1 [0142.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68060 [0142.406] wcscpy (in: _Dest=0x3e68060, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0142.406] wcscat (in: _Dest=0x3e68060, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0142.406] wcscat (in: _Dest=0x3e68060, _Source="blackbox.bin" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin" [0144.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0144.293] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0144.293] wcscmp (_String1="Cache", _String2=".") returned 1 [0144.293] wcscmp (_String1="Cache", _String2="..") returned 1 [0144.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c260 [0144.293] wcscpy (in: _Dest=0x3d8c260, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0144.293] wcscat (in: _Dest=0x3d8c260, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0144.293] wcscat (in: _Dest=0x3d8c260, _Source="Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" [0144.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8c260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15cc [0144.294] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1221c4f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x1221c4f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x18f04190, ftLastWriteTime.dwHighDateTime=0x1d2fc8b, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="drmstore.hds", cAlternateFileName="")) returned 1 [0144.294] wcscmp (_String1="drmstore.hds", _String2=".") returned 1 [0144.294] wcscmp (_String1="drmstore.hds", _String2="..") returned 1 [0144.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0c270 [0144.295] wcscpy (in: _Dest=0x3f0c270, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0144.295] wcscat (in: _Dest=0x3f0c270, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0144.295] wcscat (in: _Dest=0x3f0c270, _Source="drmstore.hds" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" [0144.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0c270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0144.296] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.bla", cAlternateFileName="")) returned 1 [0144.296] wcscmp (_String1="v3ks.bla", _String2=".") returned 1 [0144.296] wcscmp (_String1="v3ks.bla", _String2="..") returned 1 [0144.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff50f0 [0144.296] wcscpy (in: _Dest=0x2ff50f0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0144.296] wcscat (in: _Dest=0x2ff50f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0144.296] wcscat (in: _Dest=0x2ff50f0, _Source="v3ks.bla" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" [0144.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff50f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0144.298] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 1 [0144.298] wcscmp (_String1="v3ks.sec", _String2=".") returned 1 [0144.298] wcscmp (_String1="v3ks.sec", _String2="..") returned 1 [0144.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5160 [0144.298] wcscpy (in: _Dest=0x2ff5160, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0144.298] wcscat (in: _Dest=0x2ff5160, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0144.298] wcscat (in: _Dest=0x2ff5160, _Source="v3ks.sec" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec" [0144.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0144.299] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 0 [0144.299] FindClose (in: hFindFile=0x8099610 | out: hFindFile=0x8099610) returned 1 [0144.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0144.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 [0144.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0cc8) returned 1 Thread: id = 1043 os_tid = 0x1720 [0142.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39d28 [0142.406] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" [0142.406] wcscat (in: _Dest=0x3f39d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\" [0142.407] wcscat (in: _Dest=0x3f39d28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*" [0142.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0142.407] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80997d0 [0142.407] wcscmp (_String1=".", _String2=".") returned 0 [0142.407] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.407] wcscmp (_String1="..", _String2=".") returned 1 [0142.407] wcscmp (_String1="..", _String2="..") returned 0 [0142.407] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.407] FindClose (in: hFindFile=0x80997d0 | out: hFindFile=0x80997d0) returned 1 [0142.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0142.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 [0142.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f397e8) returned 1 Thread: id = 1044 os_tid = 0x1724 [0142.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2408 [0142.409] wcscpy (in: _Dest=0x3df2408, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0142.409] wcscat (in: _Dest=0x3df2408, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\" [0142.409] wcscat (in: _Dest=0x3df2408, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*" [0142.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0142.409] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0142.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2408) returned 1 [0142.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f356d0) returned 1 Thread: id = 1045 os_tid = 0x1728 [0142.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f397e8 [0142.410] wcscpy (in: _Dest=0x3f397e8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0142.410] wcscat (in: _Dest=0x3f397e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0142.410] wcscat (in: _Dest=0x3f397e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*" [0142.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0142.410] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80997d0 [0142.411] wcscmp (_String1=".", _String2=".") returned 0 [0142.411] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.411] wcscmp (_String1="..", _String2=".") returned 1 [0142.411] wcscmp (_String1="..", _String2="..") returned 0 [0142.411] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.411] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0142.411] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0142.411] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0142.411] wcscmp (_String1="Ringtone 01.wma", _String2=".") returned 1 [0142.411] wcscmp (_String1="Ringtone 01.wma", _String2="..") returned 1 [0142.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30fb8 [0142.411] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0142.411] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0142.411] wcscat (in: _Dest=0x3f30fb8, _Source="Ringtone 01.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" [0144.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0144.540] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0144.540] wcscmp (_String1="Ringtone 02.wma", _String2=".") returned 1 [0144.540] wcscmp (_String1="Ringtone 02.wma", _String2="..") returned 1 [0144.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f6f0 [0144.540] wcscpy (in: _Dest=0x3e1f6f0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0144.540] wcscat (in: _Dest=0x3e1f6f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0144.540] wcscat (in: _Dest=0x3e1f6f0, _Source="Ringtone 02.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" [0144.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0144.541] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0144.541] wcscmp (_String1="Ringtone 03.wma", _String2=".") returned 1 [0144.541] wcscmp (_String1="Ringtone 03.wma", _String2="..") returned 1 [0144.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ebc8 [0144.541] wcscpy (in: _Dest=0x3e1ebc8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0144.541] wcscat (in: _Dest=0x3e1ebc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0144.541] wcscat (in: _Dest=0x3e1ebc8, _Source="Ringtone 03.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" [0144.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0144.543] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0144.543] wcscmp (_String1="Ringtone 04.wma", _String2=".") returned 1 [0144.543] wcscmp (_String1="Ringtone 04.wma", _String2="..") returned 1 [0144.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ef80 [0144.543] wcscpy (in: _Dest=0x3e1ef80, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0144.543] wcscat (in: _Dest=0x3e1ef80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0144.543] wcscat (in: _Dest=0x3e1ef80, _Source="Ringtone 04.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" [0144.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0144.544] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0144.544] wcscmp (_String1="Ringtone 05.wma", _String2=".") returned 1 [0144.544] wcscmp (_String1="Ringtone 05.wma", _String2="..") returned 1 [0144.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f008 [0144.544] wcscpy (in: _Dest=0x3e1f008, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0144.544] wcscat (in: _Dest=0x3e1f008, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0144.544] wcscat (in: _Dest=0x3e1f008, _Source="Ringtone 05.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" [0144.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0144.546] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0144.546] wcscmp (_String1="Ringtone 06.wma", _String2=".") returned 1 [0144.546] wcscmp (_String1="Ringtone 06.wma", _String2="..") returned 1 [0144.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ede8 [0144.546] wcscpy (in: _Dest=0x3e1ede8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0144.546] wcscat (in: _Dest=0x3e1ede8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0144.546] wcscat (in: _Dest=0x3e1ede8, _Source="Ringtone 06.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" [0144.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0144.547] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0144.547] wcscmp (_String1="Ringtone 07.wma", _String2=".") returned 1 [0144.547] wcscmp (_String1="Ringtone 07.wma", _String2="..") returned 1 [0144.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1eef8 [0144.547] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0144.547] wcscat (in: _Dest=0x3e1eef8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0144.547] wcscat (in: _Dest=0x3e1eef8, _Source="Ringtone 07.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" [0144.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0144.548] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0144.548] wcscmp (_String1="Ringtone 08.wma", _String2=".") returned 1 [0144.548] wcscmp (_String1="Ringtone 08.wma", _String2="..") returned 1 [0144.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ed60 [0144.548] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0144.548] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0144.548] wcscat (in: _Dest=0x3e1ed60, _Source="Ringtone 08.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" [0144.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0144.550] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0144.550] wcscmp (_String1="Ringtone 09.wma", _String2=".") returned 1 [0144.550] wcscmp (_String1="Ringtone 09.wma", _String2="..") returned 1 [0144.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ecd8 [0144.550] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0144.550] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0144.550] wcscat (in: _Dest=0x3e1ecd8, _Source="Ringtone 09.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" [0144.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0144.552] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0144.552] wcscmp (_String1="Ringtone 10.wma", _String2=".") returned 1 [0144.552] wcscmp (_String1="Ringtone 10.wma", _String2="..") returned 1 [0144.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ec50 [0144.552] wcscpy (in: _Dest=0x3e1ec50, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0144.552] wcscat (in: _Dest=0x3e1ec50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0144.552] wcscat (in: _Dest=0x3e1ec50, _Source="Ringtone 10.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" [0144.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0144.553] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 0 [0144.553] FindClose (in: hFindFile=0x80997d0 | out: hFindFile=0x80997d0) returned 1 [0144.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0144.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f397e8) returned 1 [0144.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c5a0) returned 1 Thread: id = 1046 os_tid = 0x172c [0142.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6908 [0142.416] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0142.418] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0142.418] wcscat (in: _Dest=0x2fe6908, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*" [0142.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0142.418] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0142.418] wcscmp (_String1=".", _String2=".") returned 0 [0142.418] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.418] wcscmp (_String1="..", _String2=".") returned 1 [0142.418] wcscmp (_String1="..", _String2="..") returned 0 [0142.418] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0142.418] wcscmp (_String1="Manifest", _String2=".") returned 1 [0142.418] wcscmp (_String1="Manifest", _String2="..") returned 1 [0142.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39d28 [0142.418] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0142.419] wcscat (in: _Dest=0x3f39d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0142.419] wcscat (in: _Dest=0x3f39d28, _Source="Manifest" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" [0145.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f39d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0145.038] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0145.038] wcscmp (_String1="Sessions", _String2=".") returned 1 [0145.038] wcscmp (_String1="Sessions", _String2="..") returned 1 [0145.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a2d8 [0145.038] wcscpy (in: _Dest=0x3f3a2d8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0145.038] wcscat (in: _Dest=0x3f3a2d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0145.038] wcscat (in: _Dest=0x3f3a2d8, _Source="Sessions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" [0145.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0145.039] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0145.039] wcscmp (_String1="Upload", _String2=".") returned 1 [0145.039] wcscmp (_String1="Upload", _String2="..") returned 1 [0145.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd820 [0145.039] wcscpy (in: _Dest=0x3ecd820, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0145.039] wcscat (in: _Dest=0x3ecd820, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0145.039] wcscat (in: _Dest=0x3ecd820, _Source="Upload" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" [0145.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ecd820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0145.043] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0145.043] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0145.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0145.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 [0145.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 Thread: id = 1047 os_tid = 0x1730 [0142.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39a18 [0142.419] wcscpy (in: _Dest=0x3f39a18, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" [0142.419] wcscat (in: _Dest=0x3f39a18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\" [0142.419] wcscat (in: _Dest=0x3f39a18, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*" [0142.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0142.419] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80996d0 [0142.419] wcscmp (_String1=".", _String2=".") returned 0 [0142.419] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.419] wcscmp (_String1="..", _String2=".") returned 1 [0142.419] wcscmp (_String1="..", _String2="..") returned 0 [0142.419] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x112b4ab2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x112b4ab2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0142.419] wcscmp (_String1="Default Programs.lnk", _String2=".") returned 1 [0142.419] wcscmp (_String1="Default Programs.lnk", _String2="..") returned 1 [0142.420] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd42927e2, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd42927e2, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.420] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0142.420] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0142.420] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0142.420] wcscmp (_String1="Programs", _String2=".") returned 1 [0142.420] wcscmp (_String1="Programs", _String2="..") returned 1 [0142.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3daf408 [0142.420] wcscpy (in: _Dest=0x3daf408, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" [0142.420] wcscat (in: _Dest=0x3daf408, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\" [0142.420] wcscat (in: _Dest=0x3daf408, _Source="Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0151.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3daf408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0151.856] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0151.857] wcscmp (_String1="Windows Update.lnk", _String2=".") returned 1 [0151.857] wcscmp (_String1="Windows Update.lnk", _String2="..") returned 1 [0151.857] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0151.857] FindClose (in: hFindFile=0x80996d0 | out: hFindFile=0x80996d0) returned 1 [0151.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0151.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a18) returned 1 [0151.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 Thread: id = 1048 os_tid = 0x1734 [0142.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39a88 [0142.420] wcscpy (in: _Dest=0x3f39a88, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" [0142.420] wcscat (in: _Dest=0x3f39a88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\" [0142.420] wcscat (in: _Dest=0x3f39a88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*" [0142.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0142.421] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099710 [0142.421] wcscmp (_String1=".", _String2=".") returned 0 [0142.421] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.421] wcscmp (_String1="..", _String2=".") returned 1 [0142.421] wcscmp (_String1="..", _String2="..") returned 0 [0142.421] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.421] FindClose (in: hFindFile=0x8099710 | out: hFindFile=0x8099710) returned 1 [0142.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0142.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a88) returned 1 [0142.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd3a8) returned 1 Thread: id = 1049 os_tid = 0x1738 [0142.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe5b88 [0142.427] wcscpy (in: _Dest=0x2fe5b88, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0142.427] wcscat (in: _Dest=0x2fe5b88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\" [0142.427] wcscat (in: _Dest=0x2fe5b88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*" [0142.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0142.427] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099710 [0142.427] wcscmp (_String1=".", _String2=".") returned 0 [0142.427] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.427] wcscmp (_String1="..", _String2=".") returned 1 [0142.428] wcscmp (_String1="..", _String2="..") returned 0 [0142.428] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0142.428] wcscmp (_String1="ReportArchive", _String2=".") returned 1 [0142.428] wcscmp (_String1="ReportArchive", _String2="..") returned 1 [0142.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67fe8 [0142.428] wcscpy (in: _Dest=0x3e67fe8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0142.428] wcscat (in: _Dest=0x3e67fe8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\" [0142.428] wcscat (in: _Dest=0x3e67fe8, _Source="ReportArchive" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" [0151.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e67fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0151.859] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0151.859] wcscmp (_String1="ReportQueue", _String2=".") returned 1 [0151.859] wcscmp (_String1="ReportQueue", _String2="..") returned 1 [0151.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f331c8 [0151.859] wcscpy (in: _Dest=0x3f331c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0151.859] wcscat (in: _Dest=0x3f331c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\" [0151.859] wcscat (in: _Dest=0x3f331c8, _Source="ReportQueue" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" [0151.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f331c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0151.860] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 0 [0151.860] FindClose (in: hFindFile=0x8099710 | out: hFindFile=0x8099710) returned 1 [0151.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0151.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5b88) returned 1 [0151.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 Thread: id = 1050 os_tid = 0x173c [0142.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7710 [0142.429] wcscpy (in: _Dest=0x2ff7710, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0142.429] wcscat (in: _Dest=0x2ff7710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0142.429] wcscat (in: _Dest=0x2ff7710, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*" [0142.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a470 [0142.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098dd0 [0142.885] wcscmp (_String1=".", _String2=".") returned 0 [0142.885] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.885] wcscmp (_String1="..", _String2=".") returned 1 [0142.885] wcscmp (_String1="..", _String2="..") returned 0 [0142.885] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x8b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="AboutBox.zip", cAlternateFileName="")) returned 1 [0142.885] wcscmp (_String1="AboutBox.zip", _String2=".") returned 1 [0142.885] wcscmp (_String1="AboutBox.zip", _String2="..") returned 1 [0142.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b3b8 [0142.885] wcscpy (in: _Dest=0x3e1b3b8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0142.885] wcscat (in: _Dest=0x3e1b3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0142.885] wcscat (in: _Dest=0x3e1b3b8, _Source="AboutBox.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" [0151.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0151.880] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfig.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0151.880] wcscmp (_String1="AppConfig.zip", _String2=".") returned 1 [0151.880] wcscmp (_String1="AppConfig.zip", _String2="..") returned 1 [0151.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b218 [0151.880] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.880] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.880] wcscat (in: _Dest=0x3e1b218, _Source="AppConfig.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" [0151.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0151.883] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigInternal.zip", cAlternateFileName="APPCON~2.ZIP")) returned 1 [0151.883] wcscmp (_String1="AppConfigInternal.zip", _String2=".") returned 1 [0151.883] wcscmp (_String1="AppConfigInternal.zip", _String2="..") returned 1 [0151.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8568 [0151.883] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.883] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.883] wcscat (in: _Dest=0x2c8568, _Source="AppConfigInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" [0151.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0151.884] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x492, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfo.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0151.884] wcscmp (_String1="AssemblyInfo.zip", _String2=".") returned 1 [0151.884] wcscmp (_String1="AssemblyInfo.zip", _String2="..") returned 1 [0151.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e64438 [0151.884] wcscpy (in: _Dest=0x3e64438, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.884] wcscat (in: _Dest=0x3e64438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.884] wcscat (in: _Dest=0x3e64438, _Source="AssemblyInfo.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" [0151.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0151.885] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~2.ZIP")) returned 1 [0151.885] wcscmp (_String1="AssemblyInfoInternal.zip", _String2=".") returned 1 [0151.885] wcscmp (_String1="AssemblyInfoInternal.zip", _String2="..") returned 1 [0151.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3a080 [0151.885] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.886] wcscat (in: _Dest=0x3e3a080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.886] wcscat (in: _Dest=0x3e3a080, _Source="AssemblyInfoInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" [0151.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0151.887] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0151.887] wcscmp (_String1="Class.zip", _String2=".") returned 1 [0151.887] wcscmp (_String1="Class.zip", _String2="..") returned 1 [0151.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d5ee0 [0151.887] wcscpy (in: _Dest=0x81d5ee0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.887] wcscat (in: _Dest=0x81d5ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.887] wcscat (in: _Dest=0x81d5ee0, _Source="Class.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" [0151.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0151.888] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeFile.zip", cAlternateFileName="")) returned 1 [0151.888] wcscmp (_String1="CodeFile.zip", _String2=".") returned 1 [0151.888] wcscmp (_String1="CodeFile.zip", _String2="..") returned 1 [0151.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1ab98 [0151.888] wcscpy (in: _Dest=0x3e1ab98, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.888] wcscat (in: _Dest=0x3e1ab98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.888] wcscat (in: _Dest=0x3e1ab98, _Source="CodeFile.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" [0151.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ab98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0151.892] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5909be30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataSet.zip", cAlternateFileName="")) returned 1 [0151.892] wcscmp (_String1="DataSet.zip", _String2=".") returned 1 [0151.892] wcscmp (_String1="DataSet.zip", _String2="..") returned 1 [0151.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c3f8 [0151.892] wcscpy (in: _Dest=0x3e1c3f8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.892] wcscat (in: _Dest=0x3e1c3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.892] wcscat (in: _Dest=0x3e1c3f8, _Source="DataSet.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" [0151.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0151.893] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0151.893] wcscmp (_String1="EmptyDatabase.zip", _String2=".") returned 1 [0151.894] wcscmp (_String1="EmptyDatabase.zip", _String2="..") returned 1 [0151.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e656c8 [0151.894] wcscpy (in: _Dest=0x3e656c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.894] wcscat (in: _Dest=0x3e656c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.894] wcscat (in: _Dest=0x3e656c8, _Source="EmptyDatabase.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" [0151.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e656c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0151.895] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x585, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0151.895] wcscmp (_String1="Form.zip", _String2=".") returned 1 [0151.895] wcscmp (_String1="Form.zip", _String2="..") returned 1 [0151.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5e18 [0151.895] wcscpy (in: _Dest=0x81d5e18, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.895] wcscat (in: _Dest=0x81d5e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.895] wcscat (in: _Dest=0x81d5e18, _Source="Form.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" [0151.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0151.896] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interface.zip", cAlternateFileName="INTERF~1.ZIP")) returned 1 [0151.897] wcscmp (_String1="Interface.zip", _String2=".") returned 1 [0151.897] wcscmp (_String1="Interface.zip", _String2="..") returned 1 [0151.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1c598 [0151.897] wcscpy (in: _Dest=0x3e1c598, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.897] wcscat (in: _Dest=0x3e1c598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.897] wcscat (in: _Dest=0x3e1c598, _Source="Interface.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" [0151.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0151.898] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591343b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x3719, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0151.898] wcscmp (_String1="MDIParent.zip", _String2=".") returned 1 [0151.898] wcscmp (_String1="MDIParent.zip", _String2="..") returned 1 [0151.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1c738 [0151.898] wcscpy (in: _Dest=0x3e1c738, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.898] wcscat (in: _Dest=0x3e1c738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.898] wcscat (in: _Dest=0x3e1c738, _Source="MDIParent.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" [0151.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0151.900] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource.zip", cAlternateFileName="")) returned 1 [0151.900] wcscmp (_String1="Resource.zip", _String2=".") returned 1 [0151.900] wcscmp (_String1="Resource.zip", _String2="..") returned 1 [0151.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b148 [0151.900] wcscpy (in: _Dest=0x3e1b148, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.900] wcscat (in: _Dest=0x3e1b148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.900] wcscat (in: _Dest=0x3e1b148, _Source="Resource.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" [0151.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0151.901] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0151.901] wcscmp (_String1="ResourceInternal.zip", _String2=".") returned 1 [0151.901] wcscmp (_String1="ResourceInternal.zip", _String2="..") returned 1 [0151.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8b88 [0151.901] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.902] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.902] wcscat (in: _Dest=0x2c8b88, _Source="ResourceInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" [0151.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0151.903] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.zip", cAlternateFileName="")) returned 1 [0151.903] wcscmp (_String1="Settings.zip", _String2=".") returned 1 [0151.903] wcscmp (_String1="Settings.zip", _String2="..") returned 1 [0151.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1c258 [0151.903] wcscpy (in: _Dest=0x3e1c258, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.903] wcscat (in: _Dest=0x3e1c258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.903] wcscat (in: _Dest=0x3e1c258, _Source="Settings.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" [0151.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0151.905] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0151.905] wcscmp (_String1="SettingsInternal.zip", _String2=".") returned 1 [0151.905] wcscmp (_String1="SettingsInternal.zip", _String2="..") returned 1 [0151.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8488 [0151.905] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.905] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.905] wcscat (in: _Dest=0x2c8488, _Source="SettingsInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" [0151.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0151.906] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextFile.zip", cAlternateFileName="")) returned 1 [0151.906] wcscmp (_String1="TextFile.zip", _String2=".") returned 1 [0151.906] wcscmp (_String1="TextFile.zip", _String2="..") returned 1 [0151.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1c4c8 [0151.906] wcscpy (in: _Dest=0x3e1c4c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.906] wcscat (in: _Dest=0x3e1c4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.906] wcscat (in: _Dest=0x3e1c4c8, _Source="TextFile.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" [0151.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0151.908] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0151.908] wcscmp (_String1="UserControl.zip", _String2=".") returned 1 [0151.908] wcscmp (_String1="UserControl.zip", _String2="..") returned 1 [0151.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65518 [0151.908] wcscpy (in: _Dest=0x3e65518, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.908] wcscat (in: _Dest=0x3e65518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.908] wcscat (in: _Dest=0x3e65518, _Source="UserControl.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" [0151.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0151.909] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizer.zip", cAlternateFileName="VISUAL~1.ZIP")) returned 1 [0151.909] wcscmp (_String1="Visualizer.zip", _String2=".") returned 1 [0151.909] wcscmp (_String1="Visualizer.zip", _String2="..") returned 1 [0151.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e64288 [0151.910] wcscpy (in: _Dest=0x3e64288, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.910] wcscat (in: _Dest=0x3e64288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.910] wcscat (in: _Dest=0x3e64288, _Source="Visualizer.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" [0151.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0151.911] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 1 [0151.911] wcscmp (_String1="XmlFile.zip", _String2=".") returned 1 [0151.911] wcscmp (_String1="XmlFile.zip", _String2="..") returned 1 [0151.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c668 [0151.911] wcscpy (in: _Dest=0x3e1c668, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.911] wcscat (in: _Dest=0x3e1c668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.911] wcscat (in: _Dest=0x3e1c668, _Source="XmlFile.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" [0151.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0151.912] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 0 [0151.913] FindClose (in: hFindFile=0x8098dd0 | out: hFindFile=0x8098dd0) returned 1 [0151.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a470) returned 1 [0151.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7710) returned 1 [0151.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 1051 os_tid = 0x1740 [0142.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e34d08 [0142.431] wcscpy (in: _Dest=0x3e34d08, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0142.431] wcscat (in: _Dest=0x3e34d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0142.431] wcscat (in: _Dest=0x3e34d08, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*" [0142.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cd58 [0142.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d90 [0142.885] wcscmp (_String1=".", _String2=".") returned 0 [0142.886] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.886] wcscmp (_String1="..", _String2=".") returned 1 [0142.886] wcscmp (_String1="..", _String2="..") returned 0 [0142.886] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0142.886] wcscmp (_String1="AppConfigurationInternal.zip", _String2=".") returned 1 [0142.886] wcscmp (_String1="AppConfigurationInternal.zip", _String2="..") returned 1 [0142.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dad468 [0142.886] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0142.886] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0142.886] wcscat (in: _Dest=0x3dad468, _Source="AppConfigurationInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" [0152.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dad468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0152.402] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0152.403] wcscmp (_String1="AssemblyInfoInternal.zip", _String2=".") returned 1 [0152.403] wcscmp (_String1="AssemblyInfoInternal.zip", _String2="..") returned 1 [0152.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80207e0 [0152.403] wcscpy (in: _Dest=0x80207e0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.403] wcscat (in: _Dest=0x80207e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.403] wcscat (in: _Dest=0x80207e0, _Source="AssemblyInfoInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" [0152.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80207e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020 [0152.404] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0152.404] wcscmp (_String1="Class.zip", _String2=".") returned 1 [0152.404] wcscmp (_String1="Class.zip", _String2="..") returned 1 [0152.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e657a0 [0152.404] wcscpy (in: _Dest=0x3e657a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.404] wcscat (in: _Dest=0x3e657a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.404] wcscat (in: _Dest=0x3e657a0, _Source="Class.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" [0152.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e657a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2024 [0152.406] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5909be30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1 [0152.406] wcscmp (_String1="Dataset.zip", _String2=".") returned 1 [0152.406] wcscmp (_String1="Dataset.zip", _String2="..") returned 1 [0152.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e65950 [0152.406] wcscpy (in: _Dest=0x3e65950, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.406] wcscat (in: _Dest=0x3e65950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.406] wcscat (in: _Dest=0x3e65950, _Source="Dataset.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" [0152.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2028 [0152.407] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5909be30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1 [0152.407] wcscmp (_String1="Dialog.zip", _String2=".") returned 1 [0152.407] wcscmp (_String1="Dialog.zip", _String2="..") returned 1 [0152.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e655f0 [0152.407] wcscpy (in: _Dest=0x3e655f0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.407] wcscat (in: _Dest=0x3e655f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.407] wcscat (in: _Dest=0x3e655f0, _Source="Dialog.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" [0152.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e655f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0152.409] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0152.409] wcscmp (_String1="EmptyDatabase.zip", _String2=".") returned 1 [0152.409] wcscmp (_String1="EmptyDatabase.zip", _String2="..") returned 1 [0152.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39dc8 [0152.409] wcscpy (in: _Dest=0x3e39dc8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.409] wcscat (in: _Dest=0x3e39dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.409] wcscat (in: _Dest=0x3e39dc8, _Source="EmptyDatabase.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" [0152.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0152.410] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1 [0152.410] wcscmp (_String1="Explorer.zip", _String2=".") returned 1 [0152.410] wcscmp (_String1="Explorer.zip", _String2="..") returned 1 [0152.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e65b00 [0152.410] wcscpy (in: _Dest=0x3e65b00, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.411] wcscat (in: _Dest=0x3e65b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.411] wcscat (in: _Dest=0x3e65b00, _Source="Explorer.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" [0152.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0152.412] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0152.412] wcscmp (_String1="Form.zip", _String2=".") returned 1 [0152.412] wcscmp (_String1="Form.zip", _String2="..") returned 1 [0152.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b218 [0152.412] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.412] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.412] wcscat (in: _Dest=0x3e1b218, _Source="Form.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" [0152.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2038 [0152.413] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1 [0152.413] wcscmp (_String1="LoginForm.zip", _String2=".") returned 1 [0152.414] wcscmp (_String1="LoginForm.zip", _String2="..") returned 1 [0152.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8568 [0152.414] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.414] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.414] wcscat (in: _Dest=0x2c8568, _Source="LoginForm.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" [0152.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0152.415] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591343b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0152.415] wcscmp (_String1="MDIParent.zip", _String2=".") returned 1 [0152.415] wcscmp (_String1="MDIParent.zip", _String2="..") returned 1 [0152.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8648 [0152.415] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.415] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.415] wcscat (in: _Dest=0x2c8648, _Source="MDIParent.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" [0152.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0152.416] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5915a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1 [0152.416] wcscmp (_String1="Module.zip", _String2=".") returned 1 [0152.416] wcscmp (_String1="Module.zip", _String2="..") returned 1 [0152.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3deeff0 [0152.417] wcscpy (in: _Dest=0x3deeff0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.417] wcscat (in: _Dest=0x3deeff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.417] wcscat (in: _Dest=0x3deeff0, _Source="Module.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" [0152.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3deeff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044 [0152.418] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0152.418] wcscmp (_String1="ResourceInternal.zip", _String2=".") returned 1 [0152.418] wcscmp (_String1="ResourceInternal.zip", _String2="..") returned 1 [0152.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e39ce0 [0152.418] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.418] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.418] wcscat (in: _Dest=0x3e39ce0, _Source="ResourceInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" [0152.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048 [0152.419] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0152.420] wcscmp (_String1="SettingsInternal.zip", _String2=".") returned 1 [0152.420] wcscmp (_String1="SettingsInternal.zip", _String2="..") returned 1 [0152.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a168 [0152.420] wcscpy (in: _Dest=0x3e3a168, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.420] wcscat (in: _Dest=0x3e3a168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.420] wcscat (in: _Dest=0x3e3a168, _Source="SettingsInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" [0152.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0152.421] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1 [0152.421] wcscmp (_String1="SplashScreen.zip", _String2=".") returned 1 [0152.421] wcscmp (_String1="SplashScreen.zip", _String2="..") returned 1 [0152.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8aa8 [0152.421] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.421] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.421] wcscat (in: _Dest=0x2c8aa8, _Source="SplashScreen.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" [0152.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050 [0152.423] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1 [0152.423] wcscmp (_String1="Text.zip", _String2=".") returned 1 [0152.423] wcscmp (_String1="Text.zip", _String2="..") returned 1 [0152.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b3b8 [0152.423] wcscpy (in: _Dest=0x3e1b3b8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.423] wcscat (in: _Dest=0x3e1b3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.423] wcscat (in: _Dest=0x3e1b3b8, _Source="Text.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" [0152.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0152.424] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0152.424] wcscmp (_String1="UserControl.zip", _String2=".") returned 1 [0152.424] wcscmp (_String1="UserControl.zip", _String2="..") returned 1 [0152.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8e28 [0152.424] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.424] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.424] wcscat (in: _Dest=0x2c8e28, _Source="UserControl.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" [0152.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0152.426] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 0 [0152.426] FindClose (in: hFindFile=0x8098d90 | out: hFindFile=0x8098d90) returned 1 [0152.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd58) returned 1 [0152.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34d08) returned 1 [0152.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 1052 os_tid = 0x1744 [0142.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg")) returned 0x20 [0142.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.434] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.434] GetLastError () returned 0x5 [0142.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bbc8) returned 1 Thread: id = 1053 os_tid = 0x1748 [0142.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg")) returned 0x20 [0142.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.436] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.436] GetLastError () returned 0x5 [0142.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0142.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b7a0) returned 1 Thread: id = 1054 os_tid = 0x174c [0142.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30f30 [0142.437] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" [0142.438] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\" [0142.438] wcscat (in: _Dest=0x3f30f30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*" [0142.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0142.438] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0142.438] wcscmp (_String1=".", _String2=".") returned 0 [0142.438] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.438] wcscmp (_String1="..", _String2=".") returned 1 [0142.438] wcscmp (_String1="..", _String2="..") returned 0 [0142.438] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.438] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0142.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0142.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 [0142.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 Thread: id = 1055 os_tid = 0x1750 [0142.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da4c70 [0142.440] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" [0142.440] wcscat (in: _Dest=0x3da4c70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\" [0142.440] wcscat (in: _Dest=0x3da4c70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*" [0142.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0142.440] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0142.440] wcscmp (_String1=".", _String2=".") returned 0 [0142.440] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.440] wcscmp (_String1="..", _String2=".") returned 1 [0142.440] wcscmp (_String1="..", _String2="..") returned 0 [0142.440] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.440] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0142.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0142.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 [0142.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 Thread: id = 1056 os_tid = 0x1754 [0142.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f356d0 [0142.442] wcscpy (in: _Dest=0x3f356d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0142.442] wcscat (in: _Dest=0x3f356d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0142.442] wcscat (in: _Dest=0x3f356d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*" [0142.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0142.442] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb989790, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d10 [0142.887] wcscmp (_String1=".", _String2=".") returned 0 [0142.887] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb989790, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.887] wcscmp (_String1="..", _String2=".") returned 1 [0142.887] wcscmp (_String1="..", _String2="..") returned 0 [0142.887] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x924964c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1 [0142.887] wcscmp (_String1="glob.js", _String2=".") returned 1 [0142.887] wcscmp (_String1="glob.js", _String2="..") returned 1 [0142.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c378 [0142.887] wcscpy (in: _Dest=0x3e3c378, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0142.887] wcscat (in: _Dest=0x3e3c378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0142.887] wcscat (in: _Dest=0x3e3c378, _Source="glob.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" [0155.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2784 [0155.674] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb989790, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x924964c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1 [0155.674] wcscmp (_String1="glob.settings.js", _String2=".") returned 1 [0155.674] wcscmp (_String1="glob.settings.js", _String2="..") returned 1 [0155.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d96f8 [0155.674] wcscpy (in: _Dest=0x81d96f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0155.674] wcscat (in: _Dest=0x81d96f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0155.674] wcscat (in: _Dest=0x81d96f8, _Source="glob.settings.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" [0155.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2788 [0155.675] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb989790, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x924964c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 0 [0155.675] FindClose (in: hFindFile=0x8098d10 | out: hFindFile=0x8098d10) returned 1 [0155.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0155.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f356d0) returned 1 [0155.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 1057 os_tid = 0x1758 [0142.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30f30 [0142.443] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0142.443] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0142.443] wcscat (in: _Dest=0x3f30f30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*" [0142.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0142.443] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098cd0 [0142.888] wcscmp (_String1=".", _String2=".") returned 0 [0142.888] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.888] wcscmp (_String1="..", _String2=".") returned 1 [0142.888] wcscmp (_String1="..", _String2="..") returned 0 [0142.888] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe50712d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5097430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0142.888] wcscmp (_String1="addressbook.acrodata", _String2=".") returned 1 [0142.888] wcscmp (_String1="addressbook.acrodata", _String2="..") returned 1 [0142.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b7c8 [0142.888] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0142.888] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0142.888] wcscat (in: _Dest=0x35b7c8, _Source="addressbook.acrodata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" [0159.624] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata")) returned 0x2020 [0162.123] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata", dwFileAttributes=0x20) returned 1 [0163.294] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a38 [0163.295] GetFileSizeEx (in: hFile=0x2a38, lpFileSize=0xb47f750 | out: lpFileSize=0xb47f750*=5399) returned 1 [0163.295] SetFilePointerEx (in: hFile=0x2a38, liDistanceToMove=0x1513, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.295] ReadFile (in: hFile=0x2a38, lpBuffer=0xb47f75c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb47f738, lpOverlapped=0x0 | out: lpBuffer=0xb47f75c*, lpNumberOfBytesRead=0xb47f738*=0x4, lpOverlapped=0x0) returned 1 [0163.298] SetFilePointerEx (in: hFile=0x2a38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0163.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0163.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0163.298] NtQuerySystemTime (in: CurrentTime=0xb47f6d8 | out: CurrentTime=0xb47f6d8*=132471540315252000) returned 0x0 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x773febb5 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x500117f4 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x516333bf [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x6f2d70f5 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x128b5b05 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x39a5eae1 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x516dbbe7 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x7493365b [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x19644b24 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0xc6bc99a [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x67a27456 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x3b9fcbc5 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x4648c97a [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0xdd165c4 [0163.298] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x334e3ef1 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x3582fb29 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x123113bb [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x72ce9394 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x299b41da [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x75fd4951 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x5490cfaa [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x33a4452e [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x30050a89 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x2ea2cf45 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x1e0562d2 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x43972006 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x4ce3020d [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x54b3329c [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x30bf5e7c [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x1d816cf9 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x54965814 [0163.299] RtlRandomEx (in: Seed=0xb47f6d0 | out: Seed=0xb47f6d0) returned 0x4da62d4d [0163.309] ReadFile (in: hFile=0x2a38, lpBuffer=0x80bc0a0, nNumberOfBytesToRead=0x1517, lpNumberOfBytesRead=0xb47f6cc, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesRead=0xb47f6cc*=0x1517, lpOverlapped=0x0) returned 1 [0163.310] SetFilePointerEx (in: hFile=0x2a38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.310] WriteFile (in: hFile=0x2a38, lpBuffer=0x80b0c88*, nNumberOfBytesToWrite=0x1517, lpNumberOfBytesWritten=0xb47f6d0, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesWritten=0xb47f6d0*=0x1517, lpOverlapped=0x0) returned 1 [0165.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0165.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0165.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0165.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0165.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0165.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0165.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b42c8) returned 1 [0165.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f38158 [0165.485] SetFilePointerEx (in: hFile=0x2a38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.485] WriteFile (in: hFile=0x2a38, lpBuffer=0x3d57278*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xb47f744, lpOverlapped=0x0 | out: lpBuffer=0x3d57278*, lpNumberOfBytesWritten=0xb47f744*=0x11a, lpOverlapped=0x0) returned 1 [0167.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 [0167.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38318) returned 1 [0167.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0167.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38158) returned 1 [0167.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0167.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0167.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0167.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0167.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81df948 [0167.410] wcscpy (in: _Dest=0x81df948, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" [0167.410] wcscat (in: _Dest=0x81df948, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.f0dbec" [0167.410] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.f0dbec", NtPathName=0xb47f6c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b898 [0167.413] FlushFileBuffers (hFile=0x2a38) returned 1 [0168.246] CloseHandle (hObject=0x2a38) returned 1 [0168.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187220 [0168.818] wcscpy (in: _Dest=0x8187220, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0168.818] wcscat (in: _Dest=0x8187220, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\F0DBEC-Readme.txt" [0168.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\f0dbec-readme.txt")) returned 0xffffffff [0168.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28b4 [0172.269] WriteFile (in: hFile=0x28b4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb47f6ec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb47f6ec*=0x70c, lpOverlapped=0x0) returned 1 [0172.330] CloseHandle (hObject=0x28b4) returned 1 [0172.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187220) returned 1 [0172.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 [0172.330] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0172.330] wcscmp (_String1="CRLCache", _String2=".") returned 1 [0172.330] wcscmp (_String1="CRLCache", _String2="..") returned 1 [0172.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b2e0 [0172.331] wcscpy (in: _Dest=0x3e2b2e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0172.331] wcscat (in: _Dest=0x3e2b2e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0172.331] wcscat (in: _Dest=0x3e2b2e0, _Source="CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0173.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2b2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b60 [0173.500] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0173.500] FindClose (in: hFindFile=0x8098cd0 | out: hFindFile=0x8098cd0) returned 1 [0173.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0173.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 [0173.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f305a0) returned 1 Thread: id = 1058 os_tid = 0x175c [0142.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\classes.jsa")) returned 0x21 [0143.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa", dwFileAttributes=0x20) returned 0 [0143.617] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\classes.jsa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.617] GetLastError () returned 0x5 [0143.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa", dwFileAttributes=0x21) returned 0 [0143.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39698) returned 1 Thread: id = 1059 os_tid = 0x1760 [0142.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\xusage.txt")) returned 0x20 [0143.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt", dwFileAttributes=0x20) returned 0 [0143.381] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\xusage.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.381] GetLastError () returned 0x5 [0143.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt", dwFileAttributes=0x20) returned 0 [0143.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a268) returned 1 Thread: id = 1060 os_tid = 0x1764 [0142.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api")) returned 0x20 [0142.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api", dwFileAttributes=0x20) returned 0 [0142.460] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.460] GetLastError () returned 0x5 [0142.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api", dwFileAttributes=0x20) returned 0 [0142.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a078) returned 1 Thread: id = 1061 os_tid = 0x1768 [0142.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30ea8 [0142.461] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0142.461] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\" [0142.461] wcscat (in: _Dest=0x3f30ea8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*" [0142.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0142.462] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe138d9a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1425f20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098890 [0147.621] wcscmp (_String1=".", _String2=".") returned 0 [0147.621] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe138d9a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1425f20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.621] wcscmp (_String1="..", _String2=".") returned 1 [0147.621] wcscmp (_String1="..", _String2="..") returned 0 [0147.621] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1 [0147.621] wcscmp (_String1="adobepdf.xdc", _String2=".") returned 1 [0147.621] wcscmp (_String1="adobepdf.xdc", _String2="..") returned 1 [0147.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e10608 [0147.621] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0147.621] wcscat (in: _Dest=0x3e10608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\" [0147.621] wcscat (in: _Dest=0x3e10608, _Source="adobepdf.xdc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" [0148.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0148.880] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 1 [0148.880] wcscmp (_String1="PMP", _String2=".") returned 1 [0148.881] wcscmp (_String1="PMP", _String2="..") returned 1 [0148.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30b78 [0148.881] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0148.881] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\" [0148.881] wcscat (in: _Dest=0x3f30b78, _Source="PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0148.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0148.882] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0 [0148.882] FindClose (in: hFindFile=0x8098890 | out: hFindFile=0x8098890) returned 1 [0148.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0148.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 [0148.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da61f0) returned 1 Thread: id = 1062 os_tid = 0x176c [0142.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api")) returned 0x20 [0144.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api", dwFileAttributes=0x20) returned 0 [0144.135] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.544] GetLastError () returned 0x5 [0145.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api", dwFileAttributes=0x20) returned 0 [0145.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30518) returned 1 Thread: id = 1063 os_tid = 0x1770 [0142.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc")) returned 0x20 [0147.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc", dwFileAttributes=0x20) returned 0 [0147.605] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.605] GetLastError () returned 0x5 [0147.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc", dwFileAttributes=0x20) returned 0 [0147.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 1064 os_tid = 0x1774 [0142.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34440 [0142.464] wcscpy (in: _Dest=0x3f34440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" [0142.464] wcscat (in: _Dest=0x3f34440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\" [0142.464] wcscat (in: _Dest=0x3f34440, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*" [0142.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0142.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0146.298] wcscmp (_String1=".", _String2=".") returned 0 [0146.298] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.298] wcscmp (_String1="..", _String2=".") returned 1 [0146.298] wcscmp (_String1="..", _String2="..") returned 0 [0146.298] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1 [0146.298] wcscmp (_String1="Stamps", _String2=".") returned 1 [0146.298] wcscmp (_String1="Stamps", _String2="..") returned 1 [0146.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3ca98 [0146.299] wcscpy (in: _Dest=0x3e3ca98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" [0146.299] wcscat (in: _Dest=0x3e3ca98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\" [0146.299] wcscat (in: _Dest=0x3e3ca98, _Source="Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0148.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e3ca98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0148.252] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0 [0148.252] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0148.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0148.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34440) returned 1 [0148.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30408) returned 1 Thread: id = 1065 os_tid = 0x1778 [0142.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api")) returned 0x20 [0147.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api", dwFileAttributes=0x20) returned 0 [0147.602] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.603] GetLastError () returned 0x5 [0147.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api", dwFileAttributes=0x20) returned 0 [0147.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 1066 os_tid = 0x177c [0142.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api")) returned 0x20 [0147.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api", dwFileAttributes=0x20) returned 0 [0147.600] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.600] GetLastError () returned 0x5 [0147.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api", dwFileAttributes=0x20) returned 0 [0147.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f301e8) returned 1 Thread: id = 1067 os_tid = 0x1780 [0142.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api")) returned 0x20 [0147.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api", dwFileAttributes=0x20) returned 0 [0147.598] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.598] GetLastError () returned 0x5 [0147.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api", dwFileAttributes=0x20) returned 0 [0147.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30160) returned 1 Thread: id = 1068 os_tid = 0x1784 [0142.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api")) returned 0x20 [0147.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api", dwFileAttributes=0x20) returned 0 [0147.595] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.596] GetLastError () returned 0x5 [0147.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api", dwFileAttributes=0x20) returned 0 [0147.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5288) returned 1 Thread: id = 1069 os_tid = 0x1788 [0142.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api")) returned 0x20 [0147.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api", dwFileAttributes=0x20) returned 0 [0147.593] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.594] GetLastError () returned 0x5 [0147.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api", dwFileAttributes=0x20) returned 0 [0147.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 1070 os_tid = 0x178c [0142.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api")) returned 0x20 [0147.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api", dwFileAttributes=0x20) returned 0 [0147.591] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.591] GetLastError () returned 0x5 [0147.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api", dwFileAttributes=0x20) returned 0 [0147.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30050) returned 1 Thread: id = 1071 os_tid = 0x1790 [0142.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api")) returned 0x20 [0147.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api", dwFileAttributes=0x20) returned 0 [0147.589] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.589] GetLastError () returned 0x5 [0147.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api", dwFileAttributes=0x20) returned 0 [0147.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5808) returned 1 Thread: id = 1072 os_tid = 0x1794 [0142.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api")) returned 0x20 [0147.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api", dwFileAttributes=0x20) returned 0 [0147.587] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.587] GetLastError () returned 0x5 [0147.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api", dwFileAttributes=0x20) returned 0 [0147.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c118) returned 1 Thread: id = 1073 os_tid = 0x1798 [0142.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30e20 [0142.467] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0142.467] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0142.467] wcscat (in: _Dest=0x3f30e20, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*" [0142.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0142.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0148.432] wcscmp (_String1=".", _String2=".") returned 0 [0148.432] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.432] wcscmp (_String1="..", _String2=".") returned 1 [0148.432] wcscmp (_String1="..", _String2="..") returned 0 [0148.432] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda4917e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0148.432] wcscmp (_String1="MPP", _String2=".") returned 1 [0148.432] wcscmp (_String1="MPP", _String2="..") returned 1 [0148.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35370 [0148.432] wcscpy (in: _Dest=0x3f35370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0148.432] wcscat (in: _Dest=0x3f35370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0148.432] wcscat (in: _Dest=0x3f35370, _Source="MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f35370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0151.745] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1 [0151.745] wcscmp (_String1="MPP_CZE", _String2=".") returned 1 [0151.745] wcscmp (_String1="MPP_CZE", _String2="..") returned 1 [0151.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0f08 [0151.745] wcscpy (in: _Dest=0x81d0f08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.745] wcscat (in: _Dest=0x81d0f08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.745] wcscat (in: _Dest=0x81d0f08, _Source="MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0151.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d0f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0151.746] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1 [0151.746] wcscmp (_String1="MPP_HRV", _String2=".") returned 1 [0151.746] wcscmp (_String1="MPP_HRV", _String2="..") returned 1 [0151.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0fa0 [0151.746] wcscpy (in: _Dest=0x81d0fa0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.746] wcscat (in: _Dest=0x81d0fa0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.746] wcscat (in: _Dest=0x81d0fa0, _Source="MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0151.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d0fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0151.747] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1 [0151.747] wcscmp (_String1="MPP_HUN", _String2=".") returned 1 [0151.747] wcscmp (_String1="MPP_HUN", _String2="..") returned 1 [0151.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1038 [0151.747] wcscpy (in: _Dest=0x81d1038, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.747] wcscat (in: _Dest=0x81d1038, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.747] wcscat (in: _Dest=0x81d1038, _Source="MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0151.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d1038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0151.748] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1 [0151.748] wcscmp (_String1="MPP_POL", _String2=".") returned 1 [0151.748] wcscmp (_String1="MPP_POL", _String2="..") returned 1 [0151.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d10d0 [0151.748] wcscpy (in: _Dest=0x81d10d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.749] wcscat (in: _Dest=0x81d10d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.749] wcscat (in: _Dest=0x81d10d0, _Source="MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0151.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d10d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0151.750] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1 [0151.750] wcscmp (_String1="MPP_RUM", _String2=".") returned 1 [0151.750] wcscmp (_String1="MPP_RUM", _String2="..") returned 1 [0151.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1168 [0151.750] wcscpy (in: _Dest=0x81d1168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.750] wcscat (in: _Dest=0x81d1168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.750] wcscat (in: _Dest=0x81d1168, _Source="MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0151.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d1168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0151.751] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1 [0151.751] wcscmp (_String1="MPP_RUS", _String2=".") returned 1 [0151.751] wcscmp (_String1="MPP_RUS", _String2="..") returned 1 [0151.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1200 [0151.751] wcscpy (in: _Dest=0x81d1200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.751] wcscat (in: _Dest=0x81d1200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.751] wcscat (in: _Dest=0x81d1200, _Source="MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0151.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d1200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0151.752] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1 [0151.752] wcscmp (_String1="MPP_SKY", _String2=".") returned 1 [0151.753] wcscmp (_String1="MPP_SKY", _String2="..") returned 1 [0151.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1298 [0151.753] wcscpy (in: _Dest=0x81d1298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.753] wcscat (in: _Dest=0x81d1298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.753] wcscat (in: _Dest=0x81d1298, _Source="MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0151.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d1298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0151.754] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1 [0151.754] wcscmp (_String1="MPP_SLV", _String2=".") returned 1 [0151.754] wcscmp (_String1="MPP_SLV", _String2="..") returned 1 [0151.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1330 [0151.754] wcscpy (in: _Dest=0x81d1330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.754] wcscat (in: _Dest=0x81d1330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.754] wcscat (in: _Dest=0x81d1330, _Source="MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0151.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d1330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0151.755] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1 [0151.755] wcscmp (_String1="MPP_TUR", _String2=".") returned 1 [0151.755] wcscmp (_String1="MPP_TUR", _String2="..") returned 1 [0151.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d13c8 [0151.755] wcscpy (in: _Dest=0x81d13c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.755] wcscat (in: _Dest=0x81d13c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.755] wcscat (in: _Dest=0x81d13c8, _Source="MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0151.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d13c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0151.756] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1 [0151.756] wcscmp (_String1="MPP_UKR", _String2=".") returned 1 [0151.756] wcscmp (_String1="MPP_UKR", _String2="..") returned 1 [0151.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1460 [0151.756] wcscpy (in: _Dest=0x81d1460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0151.756] wcscat (in: _Dest=0x81d1460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0151.756] wcscat (in: _Dest=0x81d1460, _Source="MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0151.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d1460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0151.758] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 0 [0151.758] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0151.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0151.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 [0151.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 1074 os_tid = 0x179c [0142.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api")) returned 0x20 [0147.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api", dwFileAttributes=0x20) returned 0 [0147.585] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.585] GetLastError () returned 0x5 [0147.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api", dwFileAttributes=0x20) returned 0 [0147.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f352e0) returned 1 Thread: id = 1075 os_tid = 0x17a0 [0142.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api")) returned 0x20 [0147.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api", dwFileAttributes=0x20) returned 0 [0147.583] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.583] GetLastError () returned 0x5 [0147.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api", dwFileAttributes=0x20) returned 0 [0147.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 Thread: id = 1076 os_tid = 0x17a4 [0142.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api")) returned 0x20 [0147.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api", dwFileAttributes=0x20) returned 0 [0147.581] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.581] GetLastError () returned 0x5 [0147.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api", dwFileAttributes=0x20) returned 0 [0147.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 1077 os_tid = 0x17a8 [0142.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api")) returned 0x20 [0146.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api", dwFileAttributes=0x20) returned 0 [0146.327] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.339] GetLastError () returned 0x5 [0146.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api", dwFileAttributes=0x20) returned 0 [0146.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34e60) returned 1 Thread: id = 1078 os_tid = 0x17ac [0142.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api")) returned 0x20 [0147.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api", dwFileAttributes=0x20) returned 0 [0147.578] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.579] GetLastError () returned 0x5 [0147.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api", dwFileAttributes=0x20) returned 0 [0147.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 1079 os_tid = 0x17b0 [0142.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api")) returned 0x20 [0147.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api", dwFileAttributes=0x20) returned 0 [0147.616] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.616] GetLastError () returned 0x5 [0147.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api", dwFileAttributes=0x20) returned 0 [0147.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35760) returned 1 Thread: id = 1080 os_tid = 0x17b4 [0142.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\search.api")) returned 0x20 [0147.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api", dwFileAttributes=0x20) returned 0 [0147.614] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.614] GetLastError () returned 0x5 [0147.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api", dwFileAttributes=0x20) returned 0 [0147.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f307c0) returned 1 Thread: id = 1081 os_tid = 0x17b8 [0142.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api")) returned 0x20 [0147.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api", dwFileAttributes=0x20) returned 0 [0147.612] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.612] GetLastError () returned 0x5 [0147.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api", dwFileAttributes=0x20) returned 0 [0147.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 1082 os_tid = 0x17bc [0142.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api")) returned 0x20 [0147.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api", dwFileAttributes=0x20) returned 0 [0147.609] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.610] GetLastError () returned 0x5 [0147.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api", dwFileAttributes=0x20) returned 0 [0147.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 1083 os_tid = 0x17c0 [0142.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api")) returned 0x20 [0147.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api", dwFileAttributes=0x20) returned 0 [0147.607] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.607] GetLastError () returned 0x5 [0147.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api", dwFileAttributes=0x20) returned 0 [0147.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8052f50) returned 1 Thread: id = 1084 os_tid = 0x17c4 [0142.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api")) returned 0x20 [0147.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api", dwFileAttributes=0x20) returned 0 [0147.618] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.619] GetLastError () returned 0x5 [0147.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api", dwFileAttributes=0x20) returned 0 [0147.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054160) returned 1 Thread: id = 1085 os_tid = 0x17c8 [0142.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015328 [0142.894] wcscpy (in: _Dest=0x3015328, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive" [0142.894] wcscat (in: _Dest=0x3015328, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\" [0142.894] wcscat (in: _Dest=0x3015328, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*" [0142.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0142.894] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c90 [0142.895] wcscmp (_String1=".", _String2=".") returned 0 [0142.895] FindNextFileW (in: hFindFile=0x8098c90, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.895] wcscmp (_String1="..", _String2=".") returned 1 [0142.895] wcscmp (_String1="..", _String2="..") returned 0 [0142.895] FindNextFileW (in: hFindFile=0x8098c90, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.895] FindClose (in: hFindFile=0x8098c90 | out: hFindFile=0x8098c90) returned 1 [0142.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0142.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0142.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5160) returned 1 Thread: id = 1086 os_tid = 0x17cc [0142.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x2ff5160 [0142.897] wcscpy (in: _Dest=0x2ff5160, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue" [0142.897] wcscat (in: _Dest=0x2ff5160, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\" [0142.897] wcscat (in: _Dest=0x2ff5160, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*" [0142.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0142.897] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c90 [0142.897] wcscmp (_String1=".", _String2=".") returned 0 [0142.897] FindNextFileW (in: hFindFile=0x8098c90, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.897] wcscmp (_String1="..", _String2=".") returned 1 [0142.897] wcscmp (_String1="..", _String2="..") returned 0 [0142.897] FindNextFileW (in: hFindFile=0x8098c90, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.897] FindClose (in: hFindFile=0x8098c90 | out: hFindFile=0x8098c90) returned 1 [0142.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0142.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5160) returned 1 [0142.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a88) returned 1 Thread: id = 1087 os_tid = 0x17d0 [0142.899] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn")) returned 0x2022 [0145.680] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x20) returned 0 [0146.328] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.808] GetLastError () returned 0x5 [0148.808] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x2022) returned 0 [0149.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 Thread: id = 1088 os_tid = 0x17d4 [0142.899] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_k.hxw")) returned 0x2022 [0145.556] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x20) returned 0 [0145.919] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_k.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.353] GetLastError () returned 0x5 [0146.354] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x2022) returned 0 [0146.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68150) returned 1 Thread: id = 1089 os_tid = 0x17d8 [0142.900] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_namedurl.hxw")) returned 0x2022 [0145.552] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x20) returned 0 [0145.921] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_namedurl.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.355] GetLastError () returned 0x5 [0146.355] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x2022) returned 0 [0146.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 Thread: id = 1090 os_tid = 0x17dc [0142.900] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mtoc_hx.hxh")) returned 0x2022 [0143.820] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x20) returned 0 [0143.820] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mtoc_hx.hxh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.820] GetLastError () returned 0x5 [0143.820] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x2022) returned 0 [0143.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 Thread: id = 1091 os_tid = 0x17e0 [0142.901] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.hxd")) returned 0x2022 [0145.553] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x20) returned 0 [0145.921] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.hxd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.355] GetLastError () returned 0x5 [0146.355] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x2022) returned 0 [0146.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 Thread: id = 1092 os_tid = 0x17e4 [0142.901] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.lck")) returned 0x2022 [0145.553] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0145.920] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.355] GetLastError () returned 0x5 [0146.355] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x2022) returned 0 [0146.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4688) returned 1 Thread: id = 1093 os_tid = 0x17e8 [0142.901] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn")) returned 0x2022 [0145.554] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.920] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.355] GetLastError () returned 0x5 [0146.355] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68588) returned 1 Thread: id = 1094 os_tid = 0x17ec [0142.902] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn")) returned 0x2022 [0145.554] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.920] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.354] GetLastError () returned 0x5 [0146.354] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5a08) returned 1 Thread: id = 1095 os_tid = 0x17f0 [0142.902] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn")) returned 0x2022 [0145.555] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.920] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.354] GetLastError () returned 0x5 [0146.354] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 Thread: id = 1096 os_tid = 0x17f4 [0142.903] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn")) returned 0x2022 [0145.555] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.920] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.354] GetLastError () returned 0x5 [0146.354] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 Thread: id = 1097 os_tid = 0x17f8 [0142.903] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn")) returned 0x2022 [0145.549] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.361] GetLastError () returned 0x5 [0146.362] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0148.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5b88) returned 1 Thread: id = 1098 os_tid = 0x17fc [0142.903] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn")) returned 0x2022 [0145.557] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.919] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.353] GetLastError () returned 0x5 [0146.353] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 1099 os_tid = 0x7dc [0142.904] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn")) returned 0x2022 [0145.558] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.353] GetLastError () returned 0x5 [0146.353] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 1100 os_tid = 0x3ec [0142.904] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn")) returned 0x2022 [0145.558] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.352] GetLastError () returned 0x5 [0146.352] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 1101 os_tid = 0x2a4 [0142.905] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn")) returned 0x2022 [0145.558] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.352] GetLastError () returned 0x5 [0146.352] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 Thread: id = 1102 os_tid = 0xec0 [0142.905] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn")) returned 0x2022 [0145.559] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.352] GetLastError () returned 0x5 [0146.352] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 Thread: id = 1103 os_tid = 0x218 [0142.905] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn")) returned 0x2022 [0145.559] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.352] GetLastError () returned 0x5 [0146.352] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5988) returned 1 Thread: id = 1104 os_tid = 0x300 [0142.906] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn")) returned 0x2022 [0145.560] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.917] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.351] GetLastError () returned 0x5 [0146.351] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 Thread: id = 1105 os_tid = 0x7a8 [0142.907] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn")) returned 0x2022 [0145.560] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.917] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.351] GetLastError () returned 0x5 [0146.351] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 1106 os_tid = 0x4d0 [0142.907] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn")) returned 0x2022 [0145.561] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.306] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.373] GetLastError () returned 0x5 [0146.373] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0147.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 Thread: id = 1107 os_tid = 0x784 [0142.908] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn")) returned 0x2022 [0145.561] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.917] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.351] GetLastError () returned 0x5 [0146.351] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4d08) returned 1 Thread: id = 1108 os_tid = 0x5e8 [0142.908] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn")) returned 0x2022 [0145.550] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.922] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.356] GetLastError () returned 0x5 [0146.357] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fb00) returned 1 Thread: id = 1109 os_tid = 0xeec [0142.909] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn")) returned 0x2022 [0145.551] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.922] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.356] GetLastError () returned 0x5 [0146.356] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5688) returned 1 Thread: id = 1110 os_tid = 0xef0 [0142.910] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn")) returned 0x2022 [0145.551] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.304] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.363] GetLastError () returned 0x5 [0146.363] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0148.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 1111 os_tid = 0xef4 [0142.910] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn")) returned 0x2022 [0145.551] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.921] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.356] GetLastError () returned 0x5 [0146.356] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5888) returned 1 Thread: id = 1112 os_tid = 0xa20 [0142.911] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn")) returned 0x2022 [0145.552] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.921] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.356] GetLastError () returned 0x5 [0146.356] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 Thread: id = 1113 os_tid = 0xee8 [0142.912] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn")) returned 0x2022 [0143.827] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0143.827] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.113] GetLastError () returned 0x5 [0145.113] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0145.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5508) returned 1 Thread: id = 1114 os_tid = 0xee4 [0142.912] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn")) returned 0x2022 [0145.512] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.927] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.357] GetLastError () returned 0x5 [0146.357] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f355b0) returned 1 Thread: id = 1115 os_tid = 0x720 [0142.913] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn")) returned 0x2022 [0145.569] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.312] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.255] GetLastError () returned 0x5 [0148.255] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0148.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5708) returned 1 Thread: id = 1116 os_tid = 0xa70 [0143.619] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn")) returned 0x2022 [0145.557] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.919] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.353] GetLastError () returned 0x5 [0146.353] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5c08) returned 1 Thread: id = 1118 os_tid = 0xac8 [0143.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg")) returned 0x20 [0143.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.620] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.621] GetLastError () returned 0x5 [0143.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ac58) returned 1 Thread: id = 1119 os_tid = 0x7ec [0143.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg")) returned 0x20 [0143.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.622] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.622] GetLastError () returned 0x5 [0143.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a240) returned 1 Thread: id = 1120 os_tid = 0x598 [0143.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg")) returned 0x20 [0143.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.624] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.624] GetLastError () returned 0x5 [0143.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b968) returned 1 Thread: id = 1121 os_tid = 0xb4c [0143.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg")) returned 0x20 [0143.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.632] GetLastError () returned 0x5 [0143.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 Thread: id = 1122 os_tid = 0x6a8 [0143.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg")) returned 0x20 [0143.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.633] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.633] GetLastError () returned 0x5 [0143.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 1123 os_tid = 0x6a4 [0143.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg")) returned 0x20 [0143.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.635] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.635] GetLastError () returned 0x5 [0143.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 1124 os_tid = 0x448 [0143.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg")) returned 0x20 [0143.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.636] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.636] GetLastError () returned 0x5 [0143.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cbb8) returned 1 Thread: id = 1125 os_tid = 0x524 [0143.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg")) returned 0x20 [0143.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.637] GetLastError () returned 0x5 [0143.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 1126 os_tid = 0x14c [0143.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg")) returned 0x20 [0143.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.639] GetLastError () returned 0x5 [0143.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 1127 os_tid = 0x4f8 [0143.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg")) returned 0x20 [0143.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.640] GetLastError () returned 0x5 [0143.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 1128 os_tid = 0x754 [0143.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg")) returned 0x20 [0143.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.641] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.642] GetLastError () returned 0x5 [0143.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 Thread: id = 1129 os_tid = 0x894 [0143.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg")) returned 0x20 [0143.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.643] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.643] GetLastError () returned 0x5 [0143.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 1130 os_tid = 0xba4 [0143.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg")) returned 0x20 [0143.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.644] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.644] GetLastError () returned 0x5 [0143.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 1131 os_tid = 0xb9c [0143.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg")) returned 0x20 [0143.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.646] GetLastError () returned 0x5 [0143.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 1132 os_tid = 0xb98 [0143.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg")) returned 0x20 [0143.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.647] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.648] GetLastError () returned 0x5 [0143.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0143.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 Thread: id = 1133 os_tid = 0xb94 [0143.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24140 [0143.649] wcscpy (in: _Dest=0x3e24140, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0143.649] wcscat (in: _Dest=0x3e24140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0143.649] wcscat (in: _Dest=0x3e24140, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*" [0143.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85070 [0143.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4f9290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfdd0 [0144.138] wcscmp (_String1=".", _String2=".") returned 0 [0144.138] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4f9290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.138] wcscmp (_String1="..", _String2=".") returned 1 [0144.138] wcscmp (_String1="..", _String2="..") returned 0 [0144.138] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d1d500, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c356370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61d1d500, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0xfd04e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets.accdt", cAlternateFileName="ASSETS~1.ACC")) returned 1 [0144.138] wcscmp (_String1="Assets.accdt", _String2=".") returned 1 [0144.138] wcscmp (_String1="Assets.accdt", _String2="..") returned 1 [0144.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a2d8 [0144.138] wcscpy (in: _Dest=0x3e2a2d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0144.138] wcscat (in: _Dest=0x3e2a2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0144.138] wcscat (in: _Dest=0x3e2a2d8, _Source="Assets.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" [0149.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0149.515] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8463ee00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c37c4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8463ee00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1af3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Charitable Contributions.accdt", cAlternateFileName="CHARIT~1.ACC")) returned 1 [0149.515] wcscmp (_String1="Charitable Contributions.accdt", _String2=".") returned 1 [0149.515] wcscmp (_String1="Charitable Contributions.accdt", _String2="..") returned 1 [0149.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0149.515] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.515] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.515] wcscat (in: _Dest=0x2ff6740, _Source="Charitable Contributions.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" [0149.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0149.516] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3628000, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3628000, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0xd45ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1 [0149.516] wcscmp (_String1="Contacts.accdt", _String2=".") returned 1 [0149.516] wcscmp (_String1="Contacts.accdt", _String2="..") returned 1 [0149.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3dc68 [0149.517] wcscpy (in: _Dest=0x3e3dc68, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.517] wcscat (in: _Dest=0x3e3dc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.517] wcscat (in: _Dest=0x3e3dc68, _Source="Contacts.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" [0149.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0149.518] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c3a2630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c3c8790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataType", cAlternateFileName="")) returned 1 [0149.518] wcscmp (_String1="DataType", _String2=".") returned 1 [0149.518] wcscmp (_String1="DataType", _String2="..") returned 1 [0149.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35c70 [0149.518] wcscpy (in: _Dest=0x3f35c70, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.518] wcscat (in: _Dest=0x3f35c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.518] wcscat (in: _Dest=0x3f35c70, _Source="DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0149.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f35c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0149.519] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e22b00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91e22b00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x2f2af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events.accdt", cAlternateFileName="EVENTS~1.ACC")) returned 1 [0149.519] wcscmp (_String1="Events.accdt", _String2=".") returned 1 [0149.519] wcscmp (_String1="Events.accdt", _String2="..") returned 1 [0149.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3dd98 [0149.519] wcscpy (in: _Dest=0x3e3dd98, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.519] wcscat (in: _Dest=0x3e3dd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.519] wcscat (in: _Dest=0x3e3dd98, _Source="Events.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" [0149.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0149.520] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7414c600, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c3ee8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7414c600, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x7490b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faculty.accdt", cAlternateFileName="FACULT~1.ACC")) returned 1 [0149.520] wcscmp (_String1="Faculty.accdt", _String2=".") returned 1 [0149.520] wcscmp (_String1="Faculty.accdt", _String2="..") returned 1 [0149.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3de30 [0149.520] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.520] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.520] wcscat (in: _Dest=0x3e3de30, _Source="Faculty.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" [0149.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3de30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0149.522] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecd8b00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3ee8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbecd8b00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x80f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1 [0149.522] wcscmp (_String1="Issues.accdt", _String2=".") returned 1 [0149.522] wcscmp (_String1="Issues.accdt", _String2="..") returned 1 [0149.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c828 [0149.522] wcscpy (in: _Dest=0x32c828, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.522] wcscat (in: _Dest=0x32c828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.522] wcscat (in: _Dest=0x32c828, _Source="Issues.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" [0149.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0149.523] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b0fe00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c414a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90b0fe00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x10e5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marketing Projects.accdt", cAlternateFileName="MARKET~1.ACC")) returned 1 [0149.523] wcscmp (_String1="Marketing Projects.accdt", _String2=".") returned 1 [0149.523] wcscmp (_String1="Marketing Projects.accdt", _String2="..") returned 1 [0149.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c218 [0149.523] wcscpy (in: _Dest=0x35c218, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.523] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.524] wcscat (in: _Dest=0x35c218, _Source="Marketing Projects.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" [0149.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0149.525] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b486700, ftCreationTime.dwHighDateTime=0x1c6eaed, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b486700, ftLastWriteTime.dwHighDateTime=0x1c6eaed, nFileSizeHigh=0x0, nFileSizeLow=0x1f5a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="Northwind.accdt", cAlternateFileName="NORTHW~1.ACC")) returned 1 [0149.525] wcscmp (_String1="Northwind.accdt", _String2=".") returned 1 [0149.525] wcscmp (_String1="Northwind.accdt", _String2="..") returned 1 [0149.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cb20 [0149.525] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.525] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.525] wcscat (in: _Dest=0x32cb20, _Source="Northwind.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" [0149.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0149.526] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c460d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4acfd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1 [0149.526] wcscmp (_String1="Part", _String2=".") returned 1 [0149.526] wcscmp (_String1="Part", _String2="..") returned 1 [0149.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ed60 [0149.526] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.526] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.526] wcscat (in: _Dest=0x3e1ed60, _Source="Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0149.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e0 [0149.527] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9af000, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4d3130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc9af000, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x15cc78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Projects.accdt", cAlternateFileName="PROJEC~1.ACC")) returned 1 [0149.527] wcscmp (_String1="Projects.accdt", _String2=".") returned 1 [0149.528] wcscmp (_String1="Projects.accdt", _String2="..") returned 1 [0149.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32c958 [0149.528] wcscpy (in: _Dest=0x32c958, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.528] wcscat (in: _Dest=0x32c958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.528] wcscat (in: _Dest=0x32c958, _Source="Projects.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" [0149.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0149.529] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b486700, ftCreationTime.dwHighDateTime=0x1c6eaed, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b486700, ftLastWriteTime.dwHighDateTime=0x1c6eaed, nFileSizeHigh=0x0, nFileSizeLow=0xf8196, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sales Pipeline.accdt", cAlternateFileName="SALESP~1.ACC")) returned 1 [0149.529] wcscmp (_String1="Sales Pipeline.accdt", _String2=".") returned 1 [0149.529] wcscmp (_String1="Sales Pipeline.accdt", _String2="..") returned 1 [0149.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ae8 [0149.529] wcscpy (in: _Dest=0x8186ae8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.529] wcscat (in: _Dest=0x8186ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.529] wcscat (in: _Dest=0x8186ae8, _Source="Sales Pipeline.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" [0149.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0149.530] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9e2e00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d9e2e00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x7d017, dwReserved0=0x0, dwReserved1=0x0, cFileName="Students.accdt", cAlternateFileName="STUDEN~1.ACC")) returned 1 [0149.530] wcscmp (_String1="Students.accdt", _String2=".") returned 1 [0149.530] wcscmp (_String1="Students.accdt", _String2="..") returned 1 [0149.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0149.531] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.531] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.531] wcscat (in: _Dest=0x32d700, _Source="Students.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" [0149.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0149.532] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8262e200, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c51f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8262e200, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x84e69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1 [0149.532] wcscmp (_String1="Tasks.accdt", _String2=".") returned 1 [0149.532] wcscmp (_String1="Tasks.accdt", _String2="..") returned 1 [0149.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f36180 [0149.532] wcscpy (in: _Dest=0x3f36180, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.532] wcscat (in: _Dest=0x3f36180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.532] wcscat (in: _Dest=0x3f36180, _Source="Tasks.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" [0149.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0149.533] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 1 [0149.533] wcscmp (_String1="WSS", _String2=".") returned 1 [0149.533] wcscmp (_String1="WSS", _String2="..") returned 1 [0149.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5288 [0149.533] wcscpy (in: _Dest=0x3dc5288, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0149.533] wcscat (in: _Dest=0x3dc5288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0149.533] wcscat (in: _Dest=0x3dc5288, _Source="WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0149.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0149.534] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 0 [0149.534] FindClose (in: hFindFile=0x3dcfdd0 | out: hFindFile=0x3dcfdd0) returned 1 [0149.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85070) returned 1 [0149.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24140) returned 1 [0149.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c018) returned 1 Thread: id = 1134 os_tid = 0xbb8 [0143.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx")) returned 0x20 [0143.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx", dwFileAttributes=0x20) returned 0 [0143.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.650] GetLastError () returned 0x5 [0143.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx", dwFileAttributes=0x20) returned 0 [0143.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1b0) returned 1 Thread: id = 1135 os_tid = 0xba0 [0143.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx")) returned 0x20 [0144.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.322] GetLastError () returned 0x5 [0146.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0146.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 1136 os_tid = 0xba8 [0143.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx")) returned 0x20 [0147.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx", dwFileAttributes=0x20) returned 0 [0147.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.733] GetLastError () returned 0x5 [0148.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx", dwFileAttributes=0x20) returned 0 [0148.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c248) returned 1 Thread: id = 1137 os_tid = 0xb90 [0143.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx")) returned 0x20 [0147.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx", dwFileAttributes=0x20) returned 0 [0147.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.734] GetLastError () returned 0x5 [0148.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx", dwFileAttributes=0x20) returned 0 [0148.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c4a8) returned 1 Thread: id = 1138 os_tid = 0xbc8 [0143.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt")) returned 0x20 [0150.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT", dwFileAttributes=0x20) returned 0 [0150.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.434] GetLastError () returned 0x5 [0150.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT", dwFileAttributes=0x20) returned 0 [0150.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24040) returned 1 Thread: id = 1139 os_tid = 0xbd0 [0143.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt")) returned 0x20 [0150.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT", dwFileAttributes=0x20) returned 0 [0150.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.439] GetLastError () returned 0x5 [0150.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT", dwFileAttributes=0x20) returned 0 [0150.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24940) returned 1 Thread: id = 1140 os_tid = 0xbe0 [0143.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt")) returned 0x20 [0150.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT", dwFileAttributes=0x20) returned 0 [0150.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.551] GetLastError () returned 0x5 [0150.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT", dwFileAttributes=0x20) returned 0 [0150.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e249c0) returned 1 Thread: id = 1141 os_tid = 0xbec [0143.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt")) returned 0x20 [0150.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT", dwFileAttributes=0x20) returned 0 [0150.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.443] GetLastError () returned 0x5 [0150.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT", dwFileAttributes=0x20) returned 0 [0150.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e242c0) returned 1 Thread: id = 1142 os_tid = 0xc3c [0143.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt")) returned 0x20 [0150.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT", dwFileAttributes=0x20) returned 0 [0150.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.554] GetLastError () returned 0x5 [0150.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT", dwFileAttributes=0x20) returned 0 [0150.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24740) returned 1 Thread: id = 1143 os_tid = 0xc28 [0143.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt")) returned 0x20 [0150.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT", dwFileAttributes=0x20) returned 0 [0150.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.552] GetLastError () returned 0x5 [0150.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT", dwFileAttributes=0x20) returned 0 [0150.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24640) returned 1 Thread: id = 1144 os_tid = 0xc2c [0143.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt")) returned 0x20 [0150.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT", dwFileAttributes=0x20) returned 0 [0150.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.555] GetLastError () returned 0x5 [0150.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT", dwFileAttributes=0x20) returned 0 [0150.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24240) returned 1 Thread: id = 1145 os_tid = 0xc30 [0143.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt")) returned 0x20 [0150.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT", dwFileAttributes=0x20) returned 0 [0150.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.545] GetLastError () returned 0x5 [0150.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT", dwFileAttributes=0x20) returned 0 [0150.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23e40) returned 1 Thread: id = 1146 os_tid = 0xc00 [0143.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt")) returned 0x20 [0150.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT", dwFileAttributes=0x20) returned 0 [0150.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.548] GetLastError () returned 0x5 [0150.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT", dwFileAttributes=0x20) returned 0 [0150.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23fc0) returned 1 Thread: id = 1147 os_tid = 0xbfc [0143.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt")) returned 0x20 [0150.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT", dwFileAttributes=0x20) returned 0 [0150.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.558] GetLastError () returned 0x5 [0150.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT", dwFileAttributes=0x20) returned 0 [0150.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23cc0) returned 1 Thread: id = 1148 os_tid = 0x4bc [0143.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx")) returned 0x20 [0150.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.441] GetLastError () returned 0x5 [0150.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c410) returned 1 Thread: id = 1149 os_tid = 0x8b4 [0143.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx")) returned 0x20 [0150.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.438] GetLastError () returned 0x5 [0150.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 Thread: id = 1150 os_tid = 0x248 [0143.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx")) returned 0x20 [0150.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0150.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.436] GetLastError () returned 0x5 [0150.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0150.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e111e8) returned 1 Thread: id = 1151 os_tid = 0x8c4 [0143.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx")) returned 0x20 [0149.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx", dwFileAttributes=0x20) returned 0 [0149.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.129] GetLastError () returned 0x5 [0150.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx", dwFileAttributes=0x20) returned 0 [0150.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 Thread: id = 1153 os_tid = 0x8d4 [0143.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1508 [0143.828] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Users\\All Users\\Microsoft\\DRM\\Server" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server" [0143.828] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\" [0143.828] wcscat (in: _Dest=0x2fe1508, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*" [0143.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0143.828] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0143.829] wcscmp (_String1=".", _String2=".") returned 0 [0143.829] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.829] wcscmp (_String1="..", _String2=".") returned 1 [0143.829] wcscmp (_String1="..", _String2="..") returned 0 [0143.829] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.829] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0143.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0143.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0143.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b8) returned 1 Thread: id = 1154 os_tid = 0x8e8 [0143.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e0f0b8 [0143.830] wcscpy (in: _Dest=0x3e0f0b8, _Source="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" [0143.830] wcscat (in: _Dest=0x3e0f0b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\" [0143.830] wcscat (in: _Dest=0x3e0f0b8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*" [0143.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0143.831] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0143.831] wcscmp (_String1=".", _String2=".") returned 0 [0143.831] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.831] wcscmp (_String1="..", _String2=".") returned 1 [0143.831] wcscmp (_String1="..", _String2="..") returned 0 [0143.831] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.831] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0143.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0143.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b8) returned 1 [0143.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f5e0) returned 1 Thread: id = 1155 os_tid = 0x3c4 [0143.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a268 [0143.832] wcscpy (in: _Dest=0x3f3a268, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0143.832] wcscat (in: _Dest=0x3f3a268, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\" [0143.833] wcscat (in: _Dest=0x3f3a268, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*" [0143.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0143.833] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0143.833] wcscmp (_String1=".", _String2=".") returned 0 [0143.833] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.833] wcscmp (_String1="..", _String2=".") returned 1 [0143.833] wcscmp (_String1="..", _String2="..") returned 0 [0143.833] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0143.833] wcscmp (_String1="1036", _String2=".") returned 1 [0143.833] wcscmp (_String1="1036", _String2="..") returned 1 [0143.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f395b8 [0143.833] wcscpy (in: _Dest=0x3f395b8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0143.833] wcscat (in: _Dest=0x3f395b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\" [0143.833] wcscat (in: _Dest=0x3f395b8, _Source="1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0145.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f395b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0145.046] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0145.046] wcscmp (_String1="3082", _String2=".") returned 1 [0145.046] wcscmp (_String1="3082", _String2="..") returned 1 [0145.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f394d8 [0145.046] wcscpy (in: _Dest=0x3f394d8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0145.046] wcscat (in: _Dest=0x3f394d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\" [0145.046] wcscat (in: _Dest=0x3f394d8, _Source="3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0145.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f394d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0145.047] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0145.047] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0145.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0145.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a268) returned 1 [0145.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd8f0) returned 1 Thread: id = 1156 os_tid = 0x8f8 [0143.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1508 [0143.834] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Users\\All Users\\Microsoft\\Search\\Data" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data" [0143.834] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data\\") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\" [0143.834] wcscat (in: _Dest=0x2fe1508, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*" [0143.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0143.834] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0143.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0143.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 1157 os_tid = 0xc84 [0143.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\c6xvis svu.doc")) returned 0x20 [0143.836] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc", dwFileAttributes=0x20) returned 1 [0144.651] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\c6xvis svu.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14f8 [0144.651] GetFileSizeEx (in: hFile=0x14f8, lpFileSize=0xaa9fe30 | out: lpFileSize=0xaa9fe30*=5282) returned 1 [0144.651] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x149e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.651] ReadFile (in: hFile=0x14f8, lpBuffer=0xaa9fe3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaa9fe18, lpOverlapped=0x0 | out: lpBuffer=0xaa9fe3c*, lpNumberOfBytesRead=0xaa9fe18*=0x4, lpOverlapped=0x0) returned 1 [0144.653] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0144.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0f78 [0144.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2120 [0144.654] NtQuerySystemTime (in: CurrentTime=0xaa9fdb8 | out: CurrentTime=0xaa9fdb8*=132471540132264000) returned 0x0 [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x6322db28 [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x11d47f0c [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x7cc0c319 [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0xf4c65fd [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x644ca521 [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x7e39f2fe [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x6aacd9b5 [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x4dcd4a37 [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x26377412 [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x60c8dd61 [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x3c8c29de [0144.654] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x5019d67a [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x25b6c19b [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x5c5a660b [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x15f51f35 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x77d1f25c [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x1ac23ee [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x557dd848 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x227af17b [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0xab271f6 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x1ae6cb56 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x66c57958 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0xdeeff27 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x5ad164b7 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x60b3772e [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x64d26bdd [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x5e07a471 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x61e57907 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x77a26ed8 [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0xdedce6a [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x790c7db [0144.655] RtlRandomEx (in: Seed=0xaa9fdb0 | out: Seed=0xaa9fdb0) returned 0x7691ca08 [0144.665] ReadFile (in: hFile=0x14f8, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x14a2, lpNumberOfBytesRead=0xaa9fdac, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0xaa9fdac*=0x14a2, lpOverlapped=0x0) returned 1 [0144.665] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.665] WriteFile (in: hFile=0x14f8, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x14a2, lpNumberOfBytesWritten=0xaa9fdb0, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0xaa9fdb0*=0x14a2, lpOverlapped=0x0) returned 1 [0145.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1518 [0145.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0145.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0145.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0145.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0145.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bbe0) returned 1 [0145.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300930) returned 1 [0145.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3df7988 [0145.153] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.154] WriteFile (in: hFile=0x14f8, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xaa9fe24, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xaa9fe24*=0x10e, lpOverlapped=0x0) returned 1 [0145.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0145.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78e0) returned 1 [0145.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0145.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df7988) returned 1 [0145.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0145.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f78) returned 1 [0145.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0145.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0145.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34cb0 [0145.326] wcscpy (in: _Dest=0x3f34cb0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc" [0145.326] wcscat (in: _Dest=0x3f34cb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc.f0dbec" [0145.326] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc.f0dbec", NtPathName=0xaa9fda8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\c6XVIS sVu.doc.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819adb8 [0146.571] FlushFileBuffers (hFile=0x14f8) returned 1 [0146.574] CloseHandle (hObject=0x14f8) returned 1 [0146.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30a68 [0146.590] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0146.590] wcscat (in: _Dest=0x3f30a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt" [0146.590] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\f0dbec-readme.txt")) returned 0xffffffff [0146.734] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x108c [0146.745] WriteFile (in: hFile=0x108c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xaa9fdcc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xaa9fdcc*=0x70c, lpOverlapped=0x0) returned 1 [0146.747] CloseHandle (hObject=0x108c) returned 1 [0146.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 [0146.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5308) returned 1 Thread: id = 1158 os_tid = 0x908 [0143.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\hew1nlw2ik9h.pps")) returned 0x20 [0143.837] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps", dwFileAttributes=0x20) returned 1 [0144.668] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\hew1nlw2ik9h.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda8 [0144.668] GetFileSizeEx (in: hFile=0xda8, lpFileSize=0xa85fd48 | out: lpFileSize=0xa85fd48*=6718) returned 1 [0144.668] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x1a3a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.668] ReadFile (in: hFile=0xda8, lpBuffer=0xa85fd54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa85fd30, lpOverlapped=0x0 | out: lpBuffer=0xa85fd54*, lpNumberOfBytesRead=0xa85fd30*=0x4, lpOverlapped=0x0) returned 1 [0144.670] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0144.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2120 [0144.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0144.670] NtQuerySystemTime (in: CurrentTime=0xa85fcd0 | out: CurrentTime=0xa85fcd0*=132471540132420000) returned 0x0 [0144.670] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x5fdfda4e [0144.670] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x50370b21 [0144.670] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x689f807 [0144.670] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x5c213766 [0144.670] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x79191bf5 [0144.670] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x71037c7d [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x5f2474e6 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x20f94247 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x48e99560 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x75dc9efc [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x3f21750b [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x1d46ead9 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x8e5576a [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x4128cc2e [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x7320eb65 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x1868f219 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x5585ea18 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x69346a2b [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x481a332f [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x3b4d0c87 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x66b3fb45 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x3af45df2 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x6d566b61 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x683bcf25 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0xc195d18 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x33619e7a [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0xcba4a06 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x3cfdada1 [0144.671] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0xd83df6e [0144.672] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x469dece8 [0144.672] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x62c78f5d [0144.672] RtlRandomEx (in: Seed=0xa85fcc8 | out: Seed=0xa85fcc8) returned 0x2d8c3b05 [0144.685] ReadFile (in: hFile=0xda8, lpBuffer=0x8297478, nNumberOfBytesToRead=0x1a3e, lpNumberOfBytesRead=0xa85fcc4, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0xa85fcc4*=0x1a3e, lpOverlapped=0x0) returned 1 [0144.685] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.685] WriteFile (in: hFile=0xda8, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x1a3e, lpNumberOfBytesWritten=0xa85fcc8, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xa85fcc8*=0x1a3e, lpOverlapped=0x0) returned 1 [0145.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0145.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0145.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0145.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0145.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0145.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0145.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3008a0) returned 1 [0145.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3df78a8 [0145.156] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.156] WriteFile (in: hFile=0xda8, lpBuffer=0x3d56cb0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xa85fd3c, lpOverlapped=0x0 | out: lpBuffer=0x3d56cb0*, lpNumberOfBytesWritten=0xa85fd3c*=0x112, lpOverlapped=0x0) returned 1 [0145.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cb0) returned 1 [0145.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df79c0) returned 1 [0145.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0145.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df78a8) returned 1 [0145.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0145.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2120) returned 1 [0145.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0145.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0cd0) returned 1 [0145.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f345f0 [0145.324] wcscpy (in: _Dest=0x3f345f0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps" [0145.324] wcscat (in: _Dest=0x3f345f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps.f0dbec" [0145.324] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps.f0dbec", NtPathName=0xa85fcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\HEw1NLW2IK9H.pps.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187df0 [0146.767] FlushFileBuffers (hFile=0xda8) returned 1 [0146.779] CloseHandle (hObject=0xda8) returned 1 [0146.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30a68 [0146.780] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0146.780] wcscat (in: _Dest=0x3f30a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt" [0146.780] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\f0dbec-readme.txt")) returned 0x20 [0146.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 [0146.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcaa88) returned 1 Thread: id = 1159 os_tid = 0x7cc [0143.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68600 [0143.837] wcscpy (in: _Dest=0x3e68600, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs" [0143.837] wcscat (in: _Dest=0x3e68600, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\" [0143.837] wcscat (in: _Dest=0x3e68600, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\*") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\*" [0143.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0143.837] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x331b4450, ftCreationTime.dwHighDateTime=0x1d5e61e, ftLastAccessTime.dwLowDateTime=0x6dcbaef0, ftLastAccessTime.dwHighDateTime=0x1d5e0e7, ftLastWriteTime.dwLowDateTime=0x6dcbaef0, ftLastWriteTime.dwHighDateTime=0x1d5e0e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f374d8 [0143.838] wcscmp (_String1=".", _String2=".") returned 0 [0143.838] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x331b4450, ftCreationTime.dwHighDateTime=0x1d5e61e, ftLastAccessTime.dwLowDateTime=0x6dcbaef0, ftLastAccessTime.dwHighDateTime=0x1d5e0e7, ftLastWriteTime.dwLowDateTime=0x6dcbaef0, ftLastWriteTime.dwHighDateTime=0x1d5e0e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.838] wcscmp (_String1="..", _String2=".") returned 1 [0143.838] wcscmp (_String1="..", _String2="..") returned 0 [0143.838] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe665170, ftCreationTime.dwHighDateTime=0x1d5dd01, ftLastAccessTime.dwLowDateTime=0x9ebc5460, ftLastAccessTime.dwHighDateTime=0x1d5db65, ftLastWriteTime.dwLowDateTime=0x9ebc5460, ftLastWriteTime.dwHighDateTime=0x1d5db65, nFileSizeHigh=0x0, nFileSizeLow=0x11dbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="2uvuWQMopjqQJgE1YRVR.rtf", cAlternateFileName="2UVUWQ~1.RTF")) returned 1 [0143.838] wcscmp (_String1="2uvuWQMopjqQJgE1YRVR.rtf", _String2=".") returned 1 [0143.838] wcscmp (_String1="2uvuWQMopjqQJgE1YRVR.rtf", _String2="..") returned 1 [0143.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11148 [0143.838] wcscpy (in: _Dest=0x3e11148, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs" [0143.838] wcscat (in: _Dest=0x3e11148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\" [0143.838] wcscat (in: _Dest=0x3e11148, _Source="2uvuWQMopjqQJgE1YRVR.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf" [0159.469] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\j477fns\\2uvuwqmopjqqjge1yrvr.rtf")) returned 0x20 [0159.469] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf", dwFileAttributes=0x20) returned 1 [0159.469] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\j477fns\\2uvuwqmopjqqjge1yrvr.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x664 [0159.469] GetFileSizeEx (in: hFile=0x664, lpFileSize=0xa33fb38 | out: lpFileSize=0xa33fb38*=73151) returned 1 [0159.469] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x11dbb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.469] ReadFile (in: hFile=0x664, lpBuffer=0xa33fb44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa33fb20, lpOverlapped=0x0 | out: lpBuffer=0xa33fb44*, lpNumberOfBytesRead=0xa33fb20*=0x4, lpOverlapped=0x0) returned 1 [0159.471] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0159.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0159.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0159.471] NtQuerySystemTime (in: CurrentTime=0xa33fac0 | out: CurrentTime=0xa33fac0*=132471540277032000) returned 0x0 [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x4f258b90 [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x2ece0e7a [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x624df4c5 [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x2235e5fd [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x6dc8b56f [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x4ffe06fa [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x4c371886 [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x7d4504ee [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x41b6973 [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x63033dee [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x723d3901 [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x6ec10a42 [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x5e24d07c [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x1684c9dc [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x7b854e8e [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x62667a8d [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x334bdbb1 [0159.471] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x60238224 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x616956fe [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x3d80d92e [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x2479f285 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x5a932117 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x6dd57e04 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x7309c222 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x3000ee98 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x1bae8a71 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x6022ab96 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x47e33de6 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x6cd1cf8c [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x39c5e467 [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x7205a58d [0159.472] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x714f6723 [0159.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0159.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8970 [0159.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0159.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0159.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0159.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0159.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0159.481] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.481] ReadFile (in: hFile=0x664, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa33fac0, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xa33fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0159.481] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5538 [0159.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8970 [0159.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0159.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0159.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0159.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0159.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0159.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0159.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0159.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5538) returned 1 [0159.482] WriteFile (in: hFile=0x664, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa33fac0, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0xa33fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0159.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0159.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3dd4500 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e6530 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8970 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0159.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x81e6578 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0159.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0159.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0159.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6530) returned 1 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ef7d68 [0159.511] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.511] WriteFile (in: hFile=0x664, lpBuffer=0x3ef7d68*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xa33fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef7d68*, lpNumberOfBytesWritten=0xa33fb2c*=0x122, lpOverlapped=0x0) returned 1 [0159.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0159.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6578) returned 1 [0159.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0159.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4500) returned 1 [0159.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0159.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0159.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0159.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0159.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b878 [0159.532] wcscpy (in: _Dest=0x35b878, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf" [0159.532] wcscat (in: _Dest=0x35b878, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf.f0dbec" [0159.532] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf.f0dbec", NtPathName=0xa33fab0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\2uvuWQMopjqQJgE1YRVR.rtf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0159.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e351b8 [0159.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4d390) returned 1 [0159.533] NtQueryInformationFile (in: FileHandle=0x664, IoStatusBlock=0xa33fa88, FileInformation=0xa33fa90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa33fa88, FileInformation=0xa33fa90) returned 0x0 [0159.533] NtSetInformationFile (FileHandle=0x664, IoStatusBlock=0xa33fa88, FileInformation=0xa33fa90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0159.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0159.535] FlushFileBuffers (hFile=0x664) returned 1 [0159.558] CloseHandle (hObject=0x664) returned 1 [0159.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c540 [0159.559] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\" [0159.559] wcscat (in: _Dest=0x3e3c540, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\F0DBEC-Readme.txt" [0159.559] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\j477fns\\f0dbec-readme.txt")) returned 0xffffffff [0159.559] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\j477fns\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x664 [0159.568] WriteFile (in: hFile=0x664, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa33fad4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa33fad4*=0x70c, lpOverlapped=0x0) returned 1 [0159.569] CloseHandle (hObject=0x664) returned 1 [0159.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11148) returned 1 [0159.570] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaee20f0, ftCreationTime.dwHighDateTime=0x1d5e6f4, ftLastAccessTime.dwLowDateTime=0xcacdeaf0, ftLastAccessTime.dwHighDateTime=0x1d5db10, ftLastWriteTime.dwLowDateTime=0xcacdeaf0, ftLastWriteTime.dwHighDateTime=0x1d5db10, nFileSizeHigh=0x0, nFileSizeLow=0x3809, dwReserved0=0x0, dwReserved1=0x0, cFileName="EBAXHMm0ka.xlsx", cAlternateFileName="EBAXHM~1.XLS")) returned 1 [0159.570] wcscmp (_String1="EBAXHMm0ka.xlsx", _String2=".") returned 1 [0159.570] wcscmp (_String1="EBAXHMm0ka.xlsx", _String2="..") returned 1 [0159.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35250 [0159.570] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs" [0159.570] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\" [0159.570] wcscat (in: _Dest=0x3f35250, _Source="EBAXHMm0ka.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx" [0159.570] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\j477fns\\ebaxhmm0ka.xlsx")) returned 0x20 [0159.570] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx", dwFileAttributes=0x20) returned 1 [0159.571] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\j477fns\\ebaxhmm0ka.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x664 [0159.571] GetFileSizeEx (in: hFile=0x664, lpFileSize=0xa33fb38 | out: lpFileSize=0xa33fb38*=14345) returned 1 [0159.571] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x3805, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.571] ReadFile (in: hFile=0x664, lpBuffer=0xa33fb44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa33fb20, lpOverlapped=0x0 | out: lpBuffer=0xa33fb44*, lpNumberOfBytesRead=0xa33fb20*=0x4, lpOverlapped=0x0) returned 1 [0159.572] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e10 [0159.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ca8 [0159.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0159.572] NtQuerySystemTime (in: CurrentTime=0xa33fac0 | out: CurrentTime=0xa33fac0*=132471540277968000) returned 0x0 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x366d4710 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0xb5a4271 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x6a2ab5bf [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x3cca56da [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x48d01460 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x3e6e099e [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x2f9d5169 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x2cdf46ff [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x33e43ea0 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x1835d3f5 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x3443092 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x46fd236c [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x4e56b97b [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x3fb7af5a [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x168d3967 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x171a84ad [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x5443909e [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x4a95df29 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x38d8fdcb [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x1abdf6c3 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x2338222 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x5e3f8a9e [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x25830cc9 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x3f85e361 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x14cb61cc [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x710c35ea [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x5e3c1b1c [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x61ecc84f [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x470e0d30 [0159.573] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x33e712d4 [0159.574] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x4412545a [0159.574] RtlRandomEx (in: Seed=0xa33fab8 | out: Seed=0xa33fab8) returned 0x6ab45a6b [0159.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0159.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df88f8 [0159.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0159.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0159.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0159.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0159.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308728 [0159.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df88f8 [0159.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e10 [0159.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0159.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0159.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0159.575] ReadFile (in: hFile=0x664, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3809, lpNumberOfBytesRead=0xa33fab4, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xa33fab4*=0x3809, lpOverlapped=0x0) returned 1 [0159.576] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.576] WriteFile (in: hFile=0x664, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3809, lpNumberOfBytesWritten=0xa33fab8, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0xa33fab8*=0x3809, lpOverlapped=0x0) returned 1 [0159.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e10 [0159.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0159.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0159.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0159.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0159.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0159.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308728) returned 1 [0159.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77e18 [0159.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308728 [0159.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df88f8 [0159.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0159.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0159.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77d38 [0159.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0159.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ed8 [0159.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0159.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0159.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308728) returned 1 [0159.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec828 [0159.588] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.589] WriteFile (in: hFile=0x664, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa33fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xa33fb2c*=0x110, lpOverlapped=0x0) returned 1 [0159.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0159.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0159.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0159.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0159.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0159.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ca8) returned 1 [0159.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0159.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0159.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819bb78 [0159.607] wcscpy (in: _Dest=0x819bb78, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx" [0159.607] wcscat (in: _Dest=0x819bb78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx.f0dbec" [0159.607] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx.f0dbec", NtPathName=0xa33fab0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\EBAXHMm0ka.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0159.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff68b0 [0159.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff68b0) returned 1 [0159.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49fd0) returned 1 [0159.610] NtQueryInformationFile (in: FileHandle=0x664, IoStatusBlock=0xa33fa88, FileInformation=0xa33fa90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa33fa88, FileInformation=0xa33fa90) returned 0x0 [0159.610] NtSetInformationFile (FileHandle=0x664, IoStatusBlock=0xa33fa88, FileInformation=0xa33fa90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0159.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bb78) returned 1 [0159.612] FlushFileBuffers (hFile=0x664) returned 1 [0159.631] CloseHandle (hObject=0x664) returned 1 [0159.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c540 [0159.632] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\" [0159.632] wcscat (in: _Dest=0x3e3c540, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\F0DBEC-Readme.txt" [0159.633] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\J477fNs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\j477fns\\f0dbec-readme.txt")) returned 0x20 [0159.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.633] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaee20f0, ftCreationTime.dwHighDateTime=0x1d5e6f4, ftLastAccessTime.dwLowDateTime=0xcacdeaf0, ftLastAccessTime.dwHighDateTime=0x1d5db10, ftLastWriteTime.dwLowDateTime=0xcacdeaf0, ftLastWriteTime.dwHighDateTime=0x1d5db10, nFileSizeHigh=0x0, nFileSizeLow=0x3809, dwReserved0=0x0, dwReserved1=0x0, cFileName="EBAXHMm0ka.xlsx", cAlternateFileName="EBAXHM~1.XLS")) returned 0 [0159.633] FindClose (in: hFindFile=0x3f374d8 | out: hFindFile=0x3f374d8) returned 1 [0159.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0159.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 [0159.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055260) returned 1 Thread: id = 1160 os_tid = 0x928 [0143.839] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\ng6c_lljwl84liebo1e.pps")) returned 0x20 [0143.839] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps", dwFileAttributes=0x20) returned 1 [0144.687] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\ng6c_lljwl84liebo1e.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1288 [0144.687] GetFileSizeEx (in: hFile=0x1288, lpFileSize=0xa1bfcf0 | out: lpFileSize=0xa1bfcf0*=60213) returned 1 [0144.687] SetFilePointerEx (in: hFile=0x1288, liDistanceToMove=0xeb31, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.687] ReadFile (in: hFile=0x1288, lpBuffer=0xa1bfcfc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa1bfcd8, lpOverlapped=0x0 | out: lpBuffer=0xa1bfcfc*, lpNumberOfBytesRead=0xa1bfcd8*=0x4, lpOverlapped=0x0) returned 1 [0144.689] SetFilePointerEx (in: hFile=0x1288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0144.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0144.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2648 [0144.689] NtQuerySystemTime (in: CurrentTime=0xa1bfc78 | out: CurrentTime=0xa1bfc78*=132471540132576000) returned 0x0 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x75f9c631 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x31e06ee4 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x6f3d606f [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x6421cc61 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x6f9925e3 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0xce43169 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x6227b266 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x1e98ddeb [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x1fb36baf [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x3001ac4e [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x2bd9f3e4 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x514f3267 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x40b054dd [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x310fc45a [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x3a0d0ea6 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x299eb7e0 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x2c83552e [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x15459c46 [0144.690] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x517a15b8 [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x1a5088af [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x7c40d76e [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x7b0d347a [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x5305678c [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x7c958a07 [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x39ecfa05 [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x5a21d1a9 [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x5e2eeb24 [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x5320f04 [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x3afe1f01 [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x4e4001a7 [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x6d78a296 [0144.691] RtlRandomEx (in: Seed=0xa1bfc70 | out: Seed=0xa1bfc70) returned 0x1bc7bb60 [0144.700] SetFilePointerEx (in: hFile=0x1288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.700] ReadFile (in: hFile=0x1288, lpBuffer=0x82b54b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa1bfc78, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesRead=0xa1bfc78*=0x3c00, lpOverlapped=0x0) returned 1 [0144.701] SetFilePointerEx (in: hFile=0x1288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300fa8 [0144.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0144.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0144.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c44d8 [0144.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0144.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2648 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2648) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300fa8) returned 1 [0144.701] WriteFile (in: hFile=0x1288, lpBuffer=0x82c44d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa1bfc78, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesWritten=0xa1bfc78*=0x3c00, lpOverlapped=0x0) returned 1 [0145.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0145.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0145.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3008a0 [0145.159] SetFilePointerEx (in: hFile=0x1288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.159] WriteFile (in: hFile=0x1288, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xa1bfce4, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0xa1bfce4*=0x120, lpOverlapped=0x0) returned 1 [0145.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0145.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300a08) returned 1 [0145.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0145.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3008a0) returned 1 [0145.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0145.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0145.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0eb0) returned 1 [0145.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca508) returned 1 [0145.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ac78 [0145.314] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps" [0145.314] wcscat (in: _Dest=0x819ac78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps.f0dbec" [0145.314] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps.f0dbec", NtPathName=0xa1bfc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\Ng6C_lljWL84LiEBO1E.pps.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6db8 [0146.772] FlushFileBuffers (hFile=0x1288) returned 1 [0146.783] CloseHandle (hObject=0x1288) returned 1 [0146.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30a68 [0146.783] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0146.783] wcscat (in: _Dest=0x3f30a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt" [0146.783] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\f0dbec-readme.txt")) returned 0x20 [0146.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 [0146.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35d90) returned 1 Thread: id = 1161 os_tid = 0x95c [0143.839] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\x8e2.pps")) returned 0x20 [0143.839] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps", dwFileAttributes=0x20) returned 1 [0144.706] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\x8e2.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16bc [0144.706] GetFileSizeEx (in: hFile=0x16bc, lpFileSize=0xad2fed0 | out: lpFileSize=0xad2fed0*=88102) returned 1 [0144.706] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x15822, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.706] ReadFile (in: hFile=0x16bc, lpBuffer=0xad2fedc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad2feb8, lpOverlapped=0x0 | out: lpBuffer=0xad2fedc*, lpNumberOfBytesRead=0xad2feb8*=0x4, lpOverlapped=0x0) returned 1 [0144.708] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2648 [0144.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca300 [0144.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0144.708] NtQuerySystemTime (in: CurrentTime=0xad2fe58 | out: CurrentTime=0xad2fe58*=132471540132888000) returned 0x0 [0144.708] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x6e28666b [0144.708] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x3d7c4b34 [0144.708] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x781d6396 [0144.708] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x5dda05a6 [0144.708] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x3ac6afbd [0144.708] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x24e88e5b [0144.708] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x135b0519 [0144.708] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x4bebf43b [0144.708] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x4242a63a [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x21db101a [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x63766fc4 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x72f51df8 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x2c6c2708 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x77077b12 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x9d83f6f [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x59e25e90 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x74d30871 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0xd3b4e43 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x4d009ab2 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x2ce0bbe5 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x67d7f724 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x2577c7f1 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x3629ca69 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x5aa1a8b [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x1935748a [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x869934e [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x67af7299 [0144.709] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x5a717a1b [0144.710] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x5e751d9 [0144.710] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x52649371 [0144.710] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x55b2756a [0144.710] RtlRandomEx (in: Seed=0xad2fe50 | out: Seed=0xad2fe50) returned 0x1bc5b3b4 [0144.724] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.724] ReadFile (in: hFile=0x16bc, lpBuffer=0x8293870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad2fe58, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesRead=0xad2fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0144.724] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300fa8 [0144.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0144.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2648 [0144.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2648) returned 1 [0144.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b90c0 [0144.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2648 [0144.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0144.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0144.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0144.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300fa8) returned 1 [0144.726] WriteFile (in: hFile=0x16bc, lpBuffer=0x82b90c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad2fe58, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesWritten=0xad2fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0145.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0145.172] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.172] ReadFile (in: hFile=0x16bc, lpBuffer=0x8293870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad2fe58, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesRead=0xad2fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0145.172] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300930 [0145.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8970 [0145.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0145.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0145.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b90c0 [0145.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0145.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0145.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1680) returned 1 [0145.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0145.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300930) returned 1 [0145.174] WriteFile (in: hFile=0x16bc, lpBuffer=0x82b90c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad2fe58, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesWritten=0xad2fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0145.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0145.236] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x11c26, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.236] ReadFile (in: hFile=0x16bc, lpBuffer=0x8293870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad2fe58, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesRead=0xad2fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0145.237] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x11c26, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5d18 [0145.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0145.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0145.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0145.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b90c0 [0145.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0145.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0145.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305beb0) returned 1 [0145.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0145.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5d18) returned 1 [0145.238] WriteFile (in: hFile=0x16bc, lpBuffer=0x82b90c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad2fe58, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesWritten=0xad2fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0145.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0145.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e9c8 [0145.260] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.260] WriteFile (in: hFile=0x16bc, lpBuffer=0x3e17648*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0xad2fec4, lpOverlapped=0x0 | out: lpBuffer=0x3e17648*, lpNumberOfBytesWritten=0xad2fec4*=0x142, lpOverlapped=0x0) returned 1 [0145.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17648) returned 1 [0145.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0145.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0145.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2648) returned 1 [0145.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 [0145.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0145.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0145.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0145.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831a9d8 [0145.319] wcscpy (in: _Dest=0x831a9d8, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps" [0145.319] wcscat (in: _Dest=0x831a9d8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps.f0dbec" [0145.319] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps.f0dbec", NtPathName=0xad2fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\X8e2.pps.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c5d8 [0146.770] FlushFileBuffers (hFile=0x16bc) returned 1 [0146.781] CloseHandle (hObject=0x16bc) returned 1 [0146.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30a68 [0146.782] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\" [0146.782] wcscat (in: _Dest=0x3f30a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt" [0146.782] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\f0dbec-readme.txt")) returned 0x20 [0146.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 [0146.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80555e0) returned 1 Thread: id = 1162 os_tid = 0x97c [0143.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e682b8 [0143.840] wcscpy (in: _Dest=0x3e682b8, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2" [0143.840] wcscat (in: _Dest=0x3e682b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\" [0143.840] wcscat (in: _Dest=0x3e682b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\*") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\*" [0143.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85ee0 [0143.840] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\*", lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78499530, ftCreationTime.dwHighDateTime=0x1d5dedb, ftLastAccessTime.dwLowDateTime=0x4b33adb0, ftLastAccessTime.dwHighDateTime=0x1d5de22, ftLastWriteTime.dwLowDateTime=0x4b33adb0, ftLastWriteTime.dwHighDateTime=0x1d5de22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0143.840] wcscmp (_String1=".", _String2=".") returned 0 [0143.840] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78499530, ftCreationTime.dwHighDateTime=0x1d5dedb, ftLastAccessTime.dwLowDateTime=0x4b33adb0, ftLastAccessTime.dwHighDateTime=0x1d5de22, ftLastWriteTime.dwLowDateTime=0x4b33adb0, ftLastWriteTime.dwHighDateTime=0x1d5de22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.841] wcscmp (_String1="..", _String2=".") returned 1 [0143.841] wcscmp (_String1="..", _String2="..") returned 0 [0143.841] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97300a30, ftCreationTime.dwHighDateTime=0x1d5db8c, ftLastAccessTime.dwLowDateTime=0x1856d520, ftLastAccessTime.dwHighDateTime=0x1d5e1e2, ftLastWriteTime.dwLowDateTime=0x1856d520, ftLastWriteTime.dwHighDateTime=0x1d5e1e2, nFileSizeHigh=0x0, nFileSizeLow=0x474c, dwReserved0=0x0, dwReserved1=0x0, cFileName="96b8zr9IS.xlsx", cAlternateFileName="96B8ZR~1.XLS")) returned 1 [0143.841] wcscmp (_String1="96b8zr9IS.xlsx", _String2=".") returned 1 [0143.841] wcscmp (_String1="96b8zr9IS.xlsx", _String2="..") returned 1 [0143.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f359a0 [0143.841] wcscpy (in: _Dest=0x3f359a0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2" [0143.841] wcscat (in: _Dest=0x3f359a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\" [0143.841] wcscat (in: _Dest=0x3f359a0, _Source="96b8zr9IS.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx" [0145.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f359a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc [0145.049] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97300a30, ftCreationTime.dwHighDateTime=0x1d5db8c, ftLastAccessTime.dwLowDateTime=0x1856d520, ftLastAccessTime.dwHighDateTime=0x1d5e1e2, ftLastWriteTime.dwLowDateTime=0x1856d520, ftLastWriteTime.dwHighDateTime=0x1d5e1e2, nFileSizeHigh=0x0, nFileSizeLow=0x474c, dwReserved0=0x0, dwReserved1=0x0, cFileName="96b8zr9IS.xlsx", cAlternateFileName="96B8ZR~1.XLS")) returned 0 [0145.049] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0145.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ee0) returned 1 [0145.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 [0145.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a80) returned 1 Thread: id = 1163 os_tid = 0xadc [0143.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task.xml")) returned 0x20 [0143.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml", dwFileAttributes=0x20) returned 0 [0143.845] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.845] GetLastError () returned 0x5 [0143.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml", dwFileAttributes=0x20) returned 0 [0143.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f330d8) returned 1 Thread: id = 1164 os_tid = 0x7e0 [0143.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task64.xml")) returned 0x20 [0143.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml", dwFileAttributes=0x20) returned 0 [0143.847] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.847] GetLastError () returned 0x5 [0143.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml", dwFileAttributes=0x20) returned 0 [0143.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e241c0) returned 1 Thread: id = 1165 os_tid = 0x578 [0143.850] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20 [0143.852] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0143.852] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.852] GetLastError () returned 0x5 [0143.852] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0143.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c3f8) returned 1 Thread: id = 1166 os_tid = 0x32c [0143.854] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20 [0143.854] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0143.854] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.854] GetLastError () returned 0x5 [0143.854] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0143.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ad38) returned 1 Thread: id = 1167 os_tid = 0x5f4 [0143.856] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20 [0143.856] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0143.856] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.856] GetLastError () returned 0x5 [0143.856] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0143.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34088) returned 1 Thread: id = 1168 os_tid = 0x5d8 [0143.861] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20 [0143.862] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0143.862] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.862] GetLastError () returned 0x5 [0143.862] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0143.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35348) returned 1 Thread: id = 1169 os_tid = 0x99c [0143.863] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20 [0143.863] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0143.864] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.864] GetLastError () returned 0x5 [0143.864] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0143.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 Thread: id = 1170 os_tid = 0xe4c [0143.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35370 [0143.865] wcscpy (in: _Dest=0x3f35370, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" [0143.865] wcscat (in: _Dest=0x3f35370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\" [0143.865] wcscat (in: _Dest=0x3f35370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*" [0143.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0143.865] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0143.865] wcscmp (_String1=".", _String2=".") returned 0 [0143.866] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.866] wcscmp (_String1="..", _String2=".") returned 1 [0143.866] wcscmp (_String1="..", _String2="..") returned 0 [0143.866] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.866] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0143.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0143.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35370) returned 1 [0143.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 1171 os_tid = 0x534 [0143.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e241c0 [0143.867] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0143.867] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0143.867] wcscat (in: _Dest=0x3e241c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\*" [0143.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0143.867] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098950 [0144.164] wcscmp (_String1=".", _String2=".") returned 0 [0144.164] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.164] wcscmp (_String1="..", _String2=".") returned 1 [0144.164] wcscmp (_String1="..", _String2="..") returned 0 [0144.164] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0144.164] wcscmp (_String1="CertificateTransparency", _String2=".") returned 1 [0144.164] wcscmp (_String1="CertificateTransparency", _String2="..") returned 1 [0144.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81876b8 [0144.164] wcscpy (in: _Dest=0x81876b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.164] wcscat (in: _Dest=0x81876b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.164] wcscat (in: _Dest=0x81876b8, _Source="CertificateTransparency" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0144.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81876b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0144.394] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3022350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0144.394] wcscmp (_String1="Crashpad", _String2=".") returned 1 [0144.394] wcscmp (_String1="Crashpad", _String2="..") returned 1 [0144.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f448 [0144.394] wcscpy (in: _Dest=0x3e1f448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.394] wcscat (in: _Dest=0x3e1f448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.394] wcscat (in: _Dest=0x3e1f448, _Source="Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0144.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1f448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0144.395] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fd24d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0144.395] wcscmp (_String1="Default", _String2=".") returned 1 [0144.395] wcscmp (_String1="Default", _String2="..") returned 1 [0144.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f2b0 [0144.396] wcscpy (in: _Dest=0x3e1f2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.396] wcscat (in: _Dest=0x3e1f2b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.396] wcscat (in: _Dest=0x3e1f2b0, _Source="Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0144.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1f2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x145c [0144.397] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1 [0144.397] wcscmp (_String1="EVWhitelist", _String2=".") returned 1 [0144.397] wcscmp (_String1="EVWhitelist", _String2="..") returned 1 [0144.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1078 [0144.397] wcscpy (in: _Dest=0x3eb1078, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.397] wcscat (in: _Dest=0x3eb1078, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.397] wcscat (in: _Dest=0x3eb1078, _Source="EVWhitelist" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0144.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0144.398] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0144.398] wcscmp (_String1="FileTypePolicies", _String2=".") returned 1 [0144.398] wcscmp (_String1="FileTypePolicies", _String2="..") returned 1 [0144.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d700 [0144.398] wcscpy (in: _Dest=0x32d700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.398] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.398] wcscat (in: _Dest=0x32d700, _Source="FileTypePolicies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0144.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c [0144.399] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3211530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3211530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3211530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0144.400] wcscmp (_String1="First Run", _String2=".") returned 1 [0144.400] wcscmp (_String1="First Run", _String2="..") returned 1 [0144.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1228 [0144.400] wcscpy (in: _Dest=0x3eb1228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.400] wcscat (in: _Dest=0x3eb1228, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.400] wcscat (in: _Dest=0x3eb1228, _Source="First Run" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" [0144.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0144.401] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8ac0f00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8ac0f00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8ac3610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1064b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0144.401] wcscmp (_String1="Local State", _String2=".") returned 1 [0144.401] wcscmp (_String1="Local State", _String2="..") returned 1 [0144.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb13d8 [0144.401] wcscpy (in: _Dest=0x3eb13d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.401] wcscat (in: _Dest=0x3eb13d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.401] wcscat (in: _Dest=0x3eb13d8, _Source="Local State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" [0144.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb13d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0144.402] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0144.402] wcscmp (_String1="OriginTrials", _String2=".") returned 1 [0144.402] wcscmp (_String1="OriginTrials", _String2="..") returned 1 [0144.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1468 [0144.402] wcscpy (in: _Dest=0x3eb1468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.402] wcscat (in: _Dest=0x3eb1468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.403] wcscat (in: _Dest=0x3eb1468, _Source="OriginTrials" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0144.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb1468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0144.404] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0144.404] wcscmp (_String1="PepperFlash", _String2=".") returned 1 [0144.404] wcscmp (_String1="PepperFlash", _String2="..") returned 1 [0144.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb12b8 [0144.404] wcscpy (in: _Dest=0x3eb12b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.404] wcscat (in: _Dest=0x3eb12b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.404] wcscat (in: _Dest=0x3eb12b8, _Source="PepperFlash" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0144.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb12b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0144.406] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0144.406] wcscmp (_String1="pnacl", _String2=".") returned 1 [0144.406] wcscmp (_String1="pnacl", _String2="..") returned 1 [0144.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1f998 [0144.406] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.406] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.406] wcscat (in: _Dest=0x3e1f998, _Source="pnacl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0144.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78 [0144.408] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0144.408] wcscmp (_String1="SSLErrorAssistant", _String2=".") returned 1 [0144.408] wcscmp (_String1="SSLErrorAssistant", _String2="..") returned 1 [0144.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0144.408] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.408] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.408] wcscat (in: _Dest=0x2c75f8, _Source="SSLErrorAssistant" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0144.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb54 [0144.409] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwiftShader", cAlternateFileName="SWIFTS~1")) returned 1 [0144.409] wcscmp (_String1="SwiftShader", _String2=".") returned 1 [0144.409] wcscmp (_String1="SwiftShader", _String2="..") returned 1 [0144.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb14f8 [0144.409] wcscpy (in: _Dest=0x3eb14f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.410] wcscat (in: _Dest=0x3eb14f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.410] wcscat (in: _Dest=0x3eb14f8, _Source="SwiftShader" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader" [0144.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb14f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb80 [0144.411] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0144.411] wcscmp (_String1="SwReporter", _String2=".") returned 1 [0144.411] wcscmp (_String1="SwReporter", _String2="..") returned 1 [0144.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1588 [0144.411] wcscpy (in: _Dest=0x3eb1588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.411] wcscat (in: _Dest=0x3eb1588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.411] wcscat (in: _Dest=0x3eb1588, _Source="SwReporter" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0144.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb1588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0144.412] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0144.412] wcscmp (_String1="WidevineCdm", _String2=".") returned 1 [0144.412] wcscmp (_String1="WidevineCdm", _String2="..") returned 1 [0144.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1618 [0144.413] wcscpy (in: _Dest=0x3eb1618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0144.413] wcscat (in: _Dest=0x3eb1618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0144.413] wcscat (in: _Dest=0x3eb1618, _Source="WidevineCdm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0144.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb1618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0144.414] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0144.414] FindClose (in: hFindFile=0x8098950 | out: hFindFile=0x8098950) returned 1 [0144.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0144.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e241c0) returned 1 [0144.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b4d8) returned 1 Thread: id = 1172 os_tid = 0x9cc [0143.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x86\\resources\\1033\\synchronization.rll")) returned 0x20 [0144.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll", dwFileAttributes=0x20) returned 0 [0144.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x86\\resources\\1033\\synchronization.rll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.165] GetLastError () returned 0x5 [0144.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll", dwFileAttributes=0x20) returned 0 [0144.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 Thread: id = 1173 os_tid = 0x9dc [0143.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20 [0143.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x20) returned 0 [0143.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.871] GetLastError () returned 0x5 [0143.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x20) returned 0 [0143.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 1174 os_tid = 0xf50 [0143.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20 [0143.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll", dwFileAttributes=0x20) returned 0 [0143.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.872] GetLastError () returned 0x5 [0143.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll", dwFileAttributes=0x20) returned 0 [0143.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 Thread: id = 1175 os_tid = 0x474 [0143.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ed4b80 [0143.873] wcscpy (in: _Dest=0x3ed4b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" [0143.873] wcscat (in: _Dest=0x3ed4b80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\" [0143.873] wcscat (in: _Dest=0x3ed4b80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\*" [0143.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0143.873] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0143.874] wcscmp (_String1=".", _String2=".") returned 0 [0143.874] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.874] wcscmp (_String1="..", _String2=".") returned 1 [0143.874] wcscmp (_String1="..", _String2="..") returned 0 [0143.874] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0143.874] wcscmp (_String1="10.0", _String2=".") returned 1 [0143.874] wcscmp (_String1="10.0", _String2="..") returned 1 [0143.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a3b8 [0143.874] wcscpy (in: _Dest=0x3f3a3b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" [0143.874] wcscat (in: _Dest=0x3f3a3b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\" [0143.874] wcscat (in: _Dest=0x3f3a3b8, _Source="10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0145.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f3a3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0145.051] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0145.051] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0145.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0145.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4b80) returned 1 [0145.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e6f0) returned 1 Thread: id = 1176 os_tid = 0xedc [0143.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ed4d88 [0143.874] wcscpy (in: _Dest=0x3ed4d88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0143.874] wcscat (in: _Dest=0x3ed4d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0143.875] wcscat (in: _Dest=0x3ed4d88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\*" [0143.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0143.875] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0143.875] wcscmp (_String1=".", _String2=".") returned 0 [0143.875] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.875] wcscmp (_String1="..", _String2=".") returned 1 [0143.875] wcscmp (_String1="..", _String2="..") returned 0 [0143.875] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd685b1d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd6965b70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0143.875] wcscmp (_String1="ACECache11.lst", _String2=".") returned 1 [0143.875] wcscmp (_String1="ACECache11.lst", _String2="..") returned 1 [0143.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e23d40 [0143.875] wcscpy (in: _Dest=0x3e23d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0143.875] wcscat (in: _Dest=0x3e23d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0143.875] wcscat (in: _Dest=0x3e23d40, _Source="ACECache11.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" [0145.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0145.053] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0145.053] wcscmp (_String1="Profiles", _String2=".") returned 1 [0145.053] wcscmp (_String1="Profiles", _String2="..") returned 1 [0145.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8054a80 [0145.053] wcscpy (in: _Dest=0x8054a80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0145.054] wcscat (in: _Dest=0x8054a80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0145.054] wcscat (in: _Dest=0x8054a80, _Source="Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0145.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0145.055] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0145.055] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0145.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0145.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4d88) returned 1 [0145.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe71a8) returned 1 Thread: id = 1177 os_tid = 0xe80 [0143.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e572f8 [0143.876] wcscpy (in: _Dest=0x3e572f8, _Source="C:\\Users\\Default\\Favorites\\Links" | out: _Dest="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links" [0143.876] wcscat (in: _Dest=0x3e572f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\") returned="C:\\Users\\Default\\Favorites\\Links\\" [0143.876] wcscat (in: _Dest=0x3e572f8, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\*") returned="C:\\Users\\Default\\Favorites\\Links\\*" [0143.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0143.876] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299394d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0144.845] wcscmp (_String1=".", _String2=".") returned 0 [0144.845] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299394d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.845] wcscmp (_String1="..", _String2=".") returned 1 [0144.845] wcscmp (_String1="..", _String2="..") returned 0 [0144.845] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29913374, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.845] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0144.845] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0144.845] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299f7bb6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0144.845] wcscmp (_String1="Web Slice Gallery.url", _String2=".") returned 1 [0144.845] wcscmp (_String1="Web Slice Gallery.url", _String2="..") returned 1 [0144.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3015058 [0144.846] wcscpy (in: _Dest=0x3015058, _Source="C:\\Users\\Default\\Favorites\\Links" | out: _Dest="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links" [0144.846] wcscat (in: _Dest=0x3015058, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\") returned="C:\\Users\\Default\\Favorites\\Links\\" [0144.846] wcscat (in: _Dest=0x3015058, _Source="Web Slice Gallery.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" [0161.218] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url")) returned 0x20 [0161.218] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url", dwFileAttributes=0x20) returned 0 [0161.219] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.219] GetLastError () returned 0x5 [0161.219] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url", dwFileAttributes=0x20) returned 0 [0161.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0161.219] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299f7bb6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0161.219] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0161.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0161.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e572f8) returned 1 [0161.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 Thread: id = 1178 os_tid = 0xe6c [0143.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed4be8 [0143.878] wcscpy (in: _Dest=0x3ed4be8, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0143.878] wcscat (in: _Dest=0x3ed4be8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0143.878] wcscat (in: _Dest=0x3ed4be8, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*" [0143.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0143.878] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7614190, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0145.178] wcscmp (_String1=".", _String2=".") returned 0 [0145.178] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7614190, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.178] wcscmp (_String1="..", _String2=".") returned 1 [0145.178] wcscmp (_String1="..", _String2="..") returned 0 [0145.178] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb4af0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cb4af0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x290260e4, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0145.178] wcscmp (_String1="IE Add-on site.url", _String2=".") returned 1 [0145.178] wcscmp (_String1="IE Add-on site.url", _String2="..") returned 1 [0145.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35c70 [0145.178] wcscpy (in: _Dest=0x3f35c70, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0145.178] wcscat (in: _Dest=0x3f35c70, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0145.178] wcscat (in: _Dest=0x3f35c70, _Source="IE Add-on site.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0148.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0148.144] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28ffff84, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0148.144] wcscmp (_String1="IE site on Microsoft.com.url", _String2=".") returned 1 [0148.144] wcscmp (_String1="IE site on Microsoft.com.url", _String2="..") returned 1 [0148.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11a08 [0148.144] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0148.144] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0148.144] wcscat (in: _Dest=0x3e11a08, _Source="IE site on Microsoft.com.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0148.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0148.145] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x290e47c5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0148.145] wcscmp (_String1="Microsoft At Home.url", _String2=".") returned 1 [0148.145] wcscmp (_String1="Microsoft At Home.url", _String2="..") returned 1 [0148.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35fd0 [0148.146] wcscpy (in: _Dest=0x3f35fd0, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0148.146] wcscat (in: _Dest=0x3f35fd0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0148.146] wcscat (in: _Dest=0x3f35fd0, _Source="Microsoft At Home.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0148.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0148.147] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdac50, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x290e47c5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0148.147] wcscmp (_String1="Microsoft At Work.url", _String2=".") returned 1 [0148.147] wcscmp (_String1="Microsoft At Work.url", _String2="..") returned 1 [0148.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f36330 [0148.147] wcscpy (in: _Dest=0x3f36330, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0148.147] wcscat (in: _Dest=0x3f36330, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0148.147] wcscat (in: _Dest=0x3f36330, _Source="Microsoft At Work.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0148.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0148.148] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0148.149] wcscmp (_String1="Microsoft Store.url", _String2=".") returned 1 [0148.149] wcscmp (_String1="Microsoft Store.url", _String2="..") returned 1 [0148.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f362a0 [0148.149] wcscpy (in: _Dest=0x3f362a0, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0148.149] wcscat (in: _Dest=0x3f362a0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0148.149] wcscat (in: _Dest=0x3f362a0, _Source="Microsoft Store.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0148.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f362a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0148.150] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0148.150] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0148.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0148.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4be8) returned 1 [0148.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e418) returned 1 Thread: id = 1179 os_tid = 0xe70 [0143.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6cc8 [0143.878] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0143.878] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0143.878] wcscat (in: _Dest=0x2fe6cc8, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\*") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\*" [0143.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0143.878] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0144.170] wcscmp (_String1=".", _String2=".") returned 0 [0144.170] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.170] wcscmp (_String1="..", _String2=".") returned 1 [0144.170] wcscmp (_String1="..", _String2="..") returned 0 [0144.170] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0144.170] wcscmp (_String1="MSN Autos.url", _String2=".") returned 1 [0144.170] wcscmp (_String1="MSN Autos.url", _String2="..") returned 1 [0144.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f330d8 [0144.171] wcscpy (in: _Dest=0x3f330d8, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0144.171] wcscat (in: _Dest=0x3f330d8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0144.171] wcscat (in: _Dest=0x3f330d8, _Source="MSN Autos.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" [0151.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f330d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0151.773] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0151.773] wcscmp (_String1="MSN Entertainment.url", _String2=".") returned 1 [0151.773] wcscmp (_String1="MSN Entertainment.url", _String2="..") returned 1 [0151.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2ffc8 [0151.773] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0151.773] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0151.773] wcscat (in: _Dest=0x3f2ffc8, _Source="MSN Entertainment.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" [0151.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0151.775] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0151.775] wcscmp (_String1="MSN Money.url", _String2=".") returned 1 [0151.775] wcscmp (_String1="MSN Money.url", _String2="..") returned 1 [0151.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32610 [0151.775] wcscpy (in: _Dest=0x3f32610, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0151.775] wcscat (in: _Dest=0x3f32610, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0151.775] wcscat (in: _Dest=0x3f32610, _Source="MSN Money.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" [0151.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0151.776] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0151.776] wcscmp (_String1="MSN Sports.url", _String2=".") returned 1 [0151.776] wcscmp (_String1="MSN Sports.url", _String2="..") returned 1 [0151.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32688 [0151.776] wcscpy (in: _Dest=0x3f32688, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0151.776] wcscat (in: _Dest=0x3f32688, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0151.776] wcscat (in: _Dest=0x3f32688, _Source="MSN Sports.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" [0151.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0151.777] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0151.777] wcscmp (_String1="MSN.url", _String2=".") returned 1 [0151.777] wcscmp (_String1="MSN.url", _String2="..") returned 1 [0151.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d370 [0151.778] wcscpy (in: _Dest=0x3d8d370, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0151.778] wcscat (in: _Dest=0x3d8d370, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0151.778] wcscat (in: _Dest=0x3d8d370, _Source="MSN.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" [0151.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0151.779] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0151.779] wcscmp (_String1="MSNBC News.url", _String2=".") returned 1 [0151.779] wcscmp (_String1="MSNBC News.url", _String2="..") returned 1 [0151.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32598 [0151.779] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0151.779] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0151.779] wcscat (in: _Dest=0x3f32598, _Source="MSNBC News.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" [0151.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0151.780] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0151.780] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0151.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0151.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 [0151.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ecd0) returned 1 Thread: id = 1180 os_tid = 0xee0 [0143.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1508 [0143.880] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0143.880] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0143.880] wcscat (in: _Dest=0x2fe1508, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\*") returned="C:\\Users\\Default\\Favorites\\Windows Live\\*" [0143.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0143.880] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37858 [0144.857] wcscmp (_String1=".", _String2=".") returned 0 [0144.857] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.857] wcscmp (_String1="..", _String2=".") returned 1 [0144.857] wcscmp (_String1="..", _String2="..") returned 0 [0144.857] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0144.857] wcscmp (_String1="Get Windows Live.url", _String2=".") returned 1 [0144.857] wcscmp (_String1="Get Windows Live.url", _String2="..") returned 1 [0144.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x309a680 [0144.857] wcscpy (in: _Dest=0x309a680, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0144.857] wcscat (in: _Dest=0x309a680, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0144.857] wcscat (in: _Dest=0x309a680, _Source="Get Windows Live.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" [0155.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x309a680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ec [0155.750] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0155.750] wcscmp (_String1="Windows Live Gallery.url", _String2=".") returned 1 [0155.750] wcscmp (_String1="Windows Live Gallery.url", _String2="..") returned 1 [0155.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2158 [0155.751] wcscpy (in: _Dest=0x3eb2158, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0155.751] wcscat (in: _Dest=0x3eb2158, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0155.751] wcscat (in: _Dest=0x3eb2158, _Source="Windows Live Gallery.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" [0155.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f0 [0155.752] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29156be6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0155.752] wcscmp (_String1="Windows Live Mail.url", _String2=".") returned 1 [0155.752] wcscmp (_String1="Windows Live Mail.url", _String2="..") returned 1 [0155.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d32b0 [0155.753] wcscpy (in: _Dest=0x81d32b0, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0155.753] wcscat (in: _Dest=0x81d32b0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0155.753] wcscat (in: _Dest=0x81d32b0, _Source="Windows Live Mail.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" [0155.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d32b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f4 [0155.754] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29156be6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0155.754] wcscmp (_String1="Windows Live Spaces.url", _String2=".") returned 1 [0155.754] wcscmp (_String1="Windows Live Spaces.url", _String2="..") returned 1 [0155.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81d3338 [0155.754] wcscpy (in: _Dest=0x81d3338, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0155.754] wcscat (in: _Dest=0x81d3338, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0155.754] wcscat (in: _Dest=0x81d3338, _Source="Windows Live Spaces.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" [0155.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f8 [0155.756] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29156be6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0155.756] FindClose (in: hFindFile=0x3f37858 | out: hFindFile=0x3f37858) returned 1 [0155.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0155.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0155.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f148) returned 1 Thread: id = 1181 os_tid = 0xe74 [0143.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif")) returned 0x20 [0144.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif", dwFileAttributes=0x20) returned 0 [0144.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.140] GetLastError () returned 0x5 [0144.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif", dwFileAttributes=0x20) returned 0 [0144.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 1182 os_tid = 0xe78 [0143.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx")) returned 0x20 [0145.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx", dwFileAttributes=0x20) returned 0 [0145.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.339] GetLastError () returned 0x5 [0146.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx", dwFileAttributes=0x20) returned 0 [0146.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f349e0) returned 1 Thread: id = 1183 os_tid = 0xe84 [0143.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx")) returned 0x20 [0145.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx", dwFileAttributes=0x20) returned 0 [0145.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.338] GetLastError () returned 0x5 [0146.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx", dwFileAttributes=0x20) returned 0 [0146.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 1184 os_tid = 0xe64 [0143.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx")) returned 0x20 [0145.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx", dwFileAttributes=0x20) returned 0 [0145.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.924] GetLastError () returned 0x5 [0145.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx", dwFileAttributes=0x20) returned 0 [0146.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f418) returned 1 Thread: id = 1185 os_tid = 0xf00 [0143.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx")) returned 0x20 [0145.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx", dwFileAttributes=0x20) returned 0 [0145.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.924] GetLastError () returned 0x5 [0145.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx", dwFileAttributes=0x20) returned 0 [0146.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a700) returned 1 Thread: id = 1186 os_tid = 0xe50 [0143.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx")) returned 0x20 [0145.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx", dwFileAttributes=0x20) returned 0 [0145.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.925] GetLastError () returned 0x5 [0145.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx", dwFileAttributes=0x20) returned 0 [0146.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 1187 os_tid = 0xe58 [0143.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx")) returned 0x20 [0145.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx", dwFileAttributes=0x20) returned 0 [0145.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.925] GetLastError () returned 0x5 [0145.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx", dwFileAttributes=0x20) returned 0 [0146.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35e20) returned 1 Thread: id = 1188 os_tid = 0xf10 [0143.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx")) returned 0x20 [0145.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx", dwFileAttributes=0x20) returned 0 [0145.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.925] GetLastError () returned 0x5 [0145.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx", dwFileAttributes=0x20) returned 0 [0146.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35eb0) returned 1 Thread: id = 1189 os_tid = 0x150 [0143.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx")) returned 0x20 [0147.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx", dwFileAttributes=0x20) returned 0 [0147.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.890] GetLastError () returned 0x5 [0147.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx", dwFileAttributes=0x20) returned 0 [0147.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80540d8) returned 1 Thread: id = 1190 os_tid = 0x11c [0143.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx")) returned 0x20 [0145.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx", dwFileAttributes=0x20) returned 0 [0145.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.925] GetLastError () returned 0x5 [0145.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx", dwFileAttributes=0x20) returned 0 [0146.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35f40) returned 1 Thread: id = 1191 os_tid = 0xf34 [0143.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx")) returned 0x20 [0147.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx", dwFileAttributes=0x20) returned 0 [0147.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.892] GetLastError () returned 0x5 [0147.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx", dwFileAttributes=0x20) returned 0 [0147.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35fd0) returned 1 Thread: id = 1192 os_tid = 0xe10 [0143.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx")) returned 0x20 [0147.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx", dwFileAttributes=0x20) returned 0 [0147.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.838] GetLastError () returned 0x5 [0147.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx", dwFileAttributes=0x20) returned 0 [0147.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36060) returned 1 Thread: id = 1193 os_tid = 0xe24 [0143.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx")) returned 0x20 [0147.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx", dwFileAttributes=0x20) returned 0 [0147.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.840] GetLastError () returned 0x5 [0147.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx", dwFileAttributes=0x20) returned 0 [0147.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f360f0) returned 1 Thread: id = 1194 os_tid = 0xe1c [0143.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx")) returned 0x20 [0147.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx", dwFileAttributes=0x20) returned 0 [0147.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.843] GetLastError () returned 0x5 [0147.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx", dwFileAttributes=0x20) returned 0 [0147.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36180) returned 1 Thread: id = 1195 os_tid = 0xe18 [0143.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx")) returned 0x20 [0147.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx", dwFileAttributes=0x20) returned 0 [0147.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.845] GetLastError () returned 0x5 [0147.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx", dwFileAttributes=0x20) returned 0 [0147.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36210) returned 1 Thread: id = 1196 os_tid = 0xe60 [0143.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx")) returned 0x20 [0147.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx", dwFileAttributes=0x20) returned 0 [0147.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.847] GetLastError () returned 0x5 [0147.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx", dwFileAttributes=0x20) returned 0 [0147.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f362a0) returned 1 Thread: id = 1197 os_tid = 0x650 [0143.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx")) returned 0x20 [0147.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx", dwFileAttributes=0x20) returned 0 [0147.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.850] GetLastError () returned 0x5 [0147.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx", dwFileAttributes=0x20) returned 0 [0147.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36330) returned 1 Thread: id = 1198 os_tid = 0x7c4 [0143.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx")) returned 0x20 [0145.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx", dwFileAttributes=0x20) returned 0 [0145.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.925] GetLastError () returned 0x5 [0145.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx", dwFileAttributes=0x20) returned 0 [0146.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053390) returned 1 Thread: id = 1199 os_tid = 0x7b0 [0143.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx")) returned 0x20 [0145.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx", dwFileAttributes=0x20) returned 0 [0145.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.926] GetLastError () returned 0x5 [0145.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx", dwFileAttributes=0x20) returned 0 [0146.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2408) returned 1 Thread: id = 1200 os_tid = 0xb44 [0143.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx")) returned 0x20 [0147.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx", dwFileAttributes=0x20) returned 0 [0147.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.852] GetLastError () returned 0x5 [0147.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx", dwFileAttributes=0x20) returned 0 [0147.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054490) returned 1 Thread: id = 1201 os_tid = 0x728 [0143.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx")) returned 0x20 [0145.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx", dwFileAttributes=0x20) returned 0 [0145.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.926] GetLastError () returned 0x5 [0145.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx", dwFileAttributes=0x20) returned 0 [0146.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1d48) returned 1 Thread: id = 1202 os_tid = 0xf9c [0143.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx")) returned 0x20 [0147.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx", dwFileAttributes=0x20) returned 0 [0147.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.854] GetLastError () returned 0x5 [0147.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx", dwFileAttributes=0x20) returned 0 [0147.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2888) returned 1 Thread: id = 1203 os_tid = 0x5f8 [0143.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx")) returned 0x20 [0145.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx", dwFileAttributes=0x20) returned 0 [0145.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.926] GetLastError () returned 0x5 [0145.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx", dwFileAttributes=0x20) returned 0 [0146.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2be8) returned 1 Thread: id = 1204 os_tid = 0xd1c [0143.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx")) returned 0x20 [0147.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx", dwFileAttributes=0x20) returned 0 [0147.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.857] GetLastError () returned 0x5 [0147.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx", dwFileAttributes=0x20) returned 0 [0147.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054408) returned 1 Thread: id = 1205 os_tid = 0x7b8 [0143.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx")) returned 0x20 [0147.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx", dwFileAttributes=0x20) returned 0 [0147.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.721] GetLastError () returned 0x5 [0147.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx", dwFileAttributes=0x20) returned 0 [0147.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1f88) returned 1 Thread: id = 1206 os_tid = 0x950 [0144.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx")) returned 0x20 [0145.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx", dwFileAttributes=0x20) returned 0 [0145.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.339] GetLastError () returned 0x5 [0146.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx", dwFileAttributes=0x20) returned 0 [0146.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0fe8) returned 1 Thread: id = 1208 os_tid = 0xa40 [0144.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a080 [0144.142] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0144.142] wcscat (in: _Dest=0x3e3a080, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\" [0144.142] wcscat (in: _Dest=0x3e3a080, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*" [0144.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80912e8 [0144.142] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0144.842] wcscmp (_String1=".", _String2=".") returned 0 [0144.842] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.842] wcscmp (_String1="..", _String2=".") returned 1 [0144.842] wcscmp (_String1="..", _String2="..") returned 0 [0144.843] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66936b00, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x66936b00, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x66936b00, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0144.843] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0144.843] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0144.843] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0144.843] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0144.843] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0144.843] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0144.843] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0144.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80912e8) returned 1 [0144.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a080) returned 1 [0144.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39dc8) returned 1 Thread: id = 1209 os_tid = 0xaa0 [0144.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x303d5f0 [0144.143] wcscpy (in: _Dest=0x303d5f0, _Source="C:\\Users\\All Users\\Microsoft\\WwanSvc" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc" [0144.143] wcscat (in: _Dest=0x303d5f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\" [0144.143] wcscat (in: _Dest=0x303d5f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*" [0144.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fd40 [0144.143] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0144.144] wcscmp (_String1=".", _String2=".") returned 0 [0144.144] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.144] wcscmp (_String1="..", _String2=".") returned 1 [0144.144] wcscmp (_String1="..", _String2="..") returned 0 [0144.144] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0144.144] wcscmp (_String1="Profiles", _String2=".") returned 1 [0144.144] wcscmp (_String1="Profiles", _String2="..") returned 1 [0144.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8b970 [0144.144] wcscpy (in: _Dest=0x3d8b970, _Source="C:\\Users\\All Users\\Microsoft\\WwanSvc" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc" [0144.144] wcscat (in: _Dest=0x3d8b970, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\" [0144.144] wcscat (in: _Dest=0x3d8b970, _Source="Profiles" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" [0144.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8b970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0144.392] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0144.392] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0144.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fd40) returned 1 [0144.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303d5f0) returned 1 [0144.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ed80) returned 1 Thread: id = 1210 os_tid = 0x6f0 [0144.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc")) returned 0x20 [0144.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC", dwFileAttributes=0x20) returned 0 [0144.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.146] GetLastError () returned 0x5 [0144.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC", dwFileAttributes=0x20) returned 0 [0144.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053d20) returned 1 Thread: id = 1211 os_tid = 0x714 [0144.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl")) returned 0x20 [0144.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL", dwFileAttributes=0x20) returned 0 [0144.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.148] GetLastError () returned 0x5 [0144.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL", dwFileAttributes=0x20) returned 0 [0144.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f330d8) returned 1 Thread: id = 1212 os_tid = 0x6b0 [0144.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl")) returned 0x20 [0145.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL", dwFileAttributes=0x20) returned 0 [0146.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.334] GetLastError () returned 0x5 [0146.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL", dwFileAttributes=0x20) returned 0 [0146.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 1213 os_tid = 0xc78 [0144.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd")) returned 0x20 [0147.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD", dwFileAttributes=0x20) returned 0 [0147.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.625] GetLastError () returned 0x5 [0147.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD", dwFileAttributes=0x20) returned 0 [0147.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e248c0) returned 1 Thread: id = 1214 os_tid = 0xc6c [0144.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm")) returned 0x20 [0147.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM", dwFileAttributes=0x20) returned 0 [0147.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.628] GetLastError () returned 0x5 [0147.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM", dwFileAttributes=0x20) returned 0 [0147.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 Thread: id = 1215 os_tid = 0xc7c [0144.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053d20 [0144.158] wcscpy (in: _Dest=0x8053d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" [0144.158] wcscat (in: _Dest=0x8053d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\" [0144.158] wcscat (in: _Dest=0x8053d20, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*" [0144.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f870 [0144.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63d049b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63d049b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0145.923] wcscmp (_String1=".", _String2=".") returned 0 [0145.923] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63d049b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63d049b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.923] wcscmp (_String1="..", _String2=".") returned 1 [0145.923] wcscmp (_String1="..", _String2="..") returned 0 [0145.923] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a63800, ftCreationTime.dwHighDateTime=0x1c8c027, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0a63800, ftLastWriteTime.dwHighDateTime=0x1c8c027, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0145.923] wcscmp (_String1="BIBFORM.XML", _String2=".") returned 1 [0145.923] wcscmp (_String1="BIBFORM.XML", _String2="..") returned 1 [0145.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819a6d8 [0145.924] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" [0145.924] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\" [0145.924] wcscat (in: _Dest=0x819a6d8, _Source="BIBFORM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" [0148.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0148.241] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a63800, ftCreationTime.dwHighDateTime=0x1c8c027, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0a63800, ftLastWriteTime.dwHighDateTime=0x1c8c027, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0 [0148.241] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0148.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f870) returned 1 [0148.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053d20) returned 1 [0148.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 1216 os_tid = 0xb10 [0144.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl")) returned 0x20 [0145.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL", dwFileAttributes=0x20) returned 0 [0146.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.334] GetLastError () returned 0x5 [0146.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL", dwFileAttributes=0x20) returned 0 [0146.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e88) returned 1 Thread: id = 1217 os_tid = 0x5d4 [0144.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css")) returned 0x20 [0147.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS", dwFileAttributes=0x20) returned 0 [0147.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.747] GetLastError () returned 0x5 [0147.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS", dwFileAttributes=0x20) returned 0 [0147.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f331c8) returned 1 Thread: id = 1218 os_tid = 0xc10 [0144.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd")) returned 0x20 [0147.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD", dwFileAttributes=0x20) returned 0 [0147.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.743] GetLastError () returned 0x5 [0147.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD", dwFileAttributes=0x20) returned 0 [0147.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 1219 os_tid = 0xdfc [0144.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css")) returned 0x20 [0147.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS", dwFileAttributes=0x20) returned 0 [0147.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.799] GetLastError () returned 0x5 [0147.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS", dwFileAttributes=0x20) returned 0 [0147.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4588) returned 1 Thread: id = 1220 os_tid = 0xe00 [0144.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn")) returned 0x20 [0147.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn", dwFileAttributes=0x20) returned 0 [0147.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.740] GetLastError () returned 0x5 [0147.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn", dwFileAttributes=0x20) returned 0 [0147.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 1221 os_tid = 0xe04 [0144.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn")) returned 0x20 [0147.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn", dwFileAttributes=0x20) returned 0 [0147.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.796] GetLastError () returned 0x5 [0147.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn", dwFileAttributes=0x20) returned 0 [0147.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 Thread: id = 1222 os_tid = 0xdec [0144.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml")) returned 0x20 [0147.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML", dwFileAttributes=0x20) returned 0 [0147.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.774] GetLastError () returned 0x5 [0147.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML", dwFileAttributes=0x20) returned 0 [0147.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 1223 os_tid = 0xad0 [0144.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x8053b00 [0144.171] wcscpy (in: _Dest=0x8053b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0144.171] wcscat (in: _Dest=0x8053b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\" [0144.171] wcscat (in: _Dest=0x8053b00, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*" [0144.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808eed0 [0144.171] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a4570, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80988d0 [0148.517] wcscmp (_String1=".", _String2=".") returned 0 [0148.517] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a4570, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.517] wcscmp (_String1="..", _String2=".") returned 1 [0148.517] wcscmp (_String1="..", _String2="..") returned 0 [0148.517] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbc8200, ftCreationTime.dwHighDateTime=0x1c02713, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dbc8200, ftLastWriteTime.dwHighDateTime=0x1c02713, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="_CONNE~1.ODC")) returned 1 [0148.517] wcscmp (_String1="+Connect to New Data Source.odc", _String2=".") returned -1 [0148.517] wcscmp (_String1="+Connect to New Data Source.odc", _String2="..") returned -1 [0148.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e354d8 [0148.517] wcscpy (in: _Dest=0x3e354d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0148.517] wcscat (in: _Dest=0x3e354d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\" [0148.517] wcscat (in: _Dest=0x3e354d8, _Source="+Connect to New Data Source.odc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" [0156.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e354d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0156.439] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b5a2800, ftCreationTime.dwHighDateTime=0x1c02713, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b5a2800, ftLastWriteTime.dwHighDateTime=0x1c02713, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="_NEWSQ~1.ODC")) returned 1 [0156.439] wcscmp (_String1="+NewSQLServerConnection.odc", _String2=".") returned -1 [0156.439] wcscmp (_String1="+NewSQLServerConnection.odc", _String2="..") returned -1 [0156.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3335e8 [0156.439] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0156.439] wcscat (in: _Dest=0x3335e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\" [0156.439] wcscat (in: _Dest=0x3335e8, _Source="+NewSQLServerConnection.odc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" [0156.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3335e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c8 [0156.441] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed46a800, ftCreationTime.dwHighDateTime=0x1bff7e7, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed46a800, ftLastWriteTime.dwHighDateTime=0x1bff7e7, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0156.441] wcscmp (_String1="DESKTOP.INI", _String2=".") returned 1 [0156.441] wcscmp (_String1="DESKTOP.INI", _String2="..") returned 1 [0156.441] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a607800, ftCreationTime.dwHighDateTime=0x1bff884, ftLastAccessTime.dwLowDateTime=0x3533caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a607800, ftLastWriteTime.dwHighDateTime=0x1bff884, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0156.441] wcscmp (_String1="FOLDER.ICO", _String2=".") returned 1 [0156.441] wcscmp (_String1="FOLDER.ICO", _String2="..") returned 1 [0156.441] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a607800, ftCreationTime.dwHighDateTime=0x1bff884, ftLastAccessTime.dwLowDateTime=0x3533caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a607800, ftLastWriteTime.dwHighDateTime=0x1bff884, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0 [0156.441] FindClose (in: hFindFile=0x80988d0 | out: hFindFile=0x80988d0) returned 1 [0156.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808eed0) returned 1 [0156.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b00) returned 1 [0156.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f5b0) returned 1 Thread: id = 1224 os_tid = 0x4c0 [0144.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl")) returned 0x20 [0147.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL", dwFileAttributes=0x20) returned 0 [0147.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.771] GetLastError () returned 0x5 [0147.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL", dwFileAttributes=0x20) returned 0 [0147.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5608) returned 1 Thread: id = 1225 os_tid = 0x110 [0144.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb")) returned 0x20 [0147.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB", dwFileAttributes=0x20) returned 0 [0147.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.769] GetLastError () returned 0x5 [0147.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB", dwFileAttributes=0x20) returned 0 [0147.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 1226 os_tid = 0x20c [0144.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl")) returned 0x20 [0147.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL", dwFileAttributes=0x20) returned 0 [0147.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.764] GetLastError () returned 0x5 [0147.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL", dwFileAttributes=0x20) returned 0 [0147.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e08) returned 1 Thread: id = 1227 os_tid = 0x9bc [0144.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css")) returned 0x20 [0147.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS", dwFileAttributes=0x20) returned 0 [0147.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.767] GetLastError () returned 0x5 [0147.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS", dwFileAttributes=0x20) returned 0 [0147.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0088) returned 1 Thread: id = 1228 os_tid = 0x106c [0144.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta")) returned 0x20 [0147.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta", dwFileAttributes=0x20) returned 0 [0147.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.762] GetLastError () returned 0x5 [0147.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta", dwFileAttributes=0x20) returned 0 [0147.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 1229 os_tid = 0x6d4 [0144.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta")) returned 0x20 [0147.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta", dwFileAttributes=0x20) returned 0 [0147.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.738] GetLastError () returned 0x5 [0147.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta", dwFileAttributes=0x20) returned 0 [0147.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35370) returned 1 Thread: id = 1230 os_tid = 0xc50 [0144.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif")) returned 0x20 [0145.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", dwFileAttributes=0x20) returned 0 [0145.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.924] GetLastError () returned 0x5 [0145.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", dwFileAttributes=0x20) returned 0 [0146.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d098) returned 1 Thread: id = 1231 os_tid = 0x48c [0144.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif")) returned 0x20 [0145.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", dwFileAttributes=0x20) returned 0 [0145.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.922] GetLastError () returned 0x5 [0145.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", dwFileAttributes=0x20) returned 0 [0146.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186c38) returned 1 Thread: id = 1232 os_tid = 0x11ac [0144.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif")) returned 0x20 [0147.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", dwFileAttributes=0x20) returned 0 [0147.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.810] GetLastError () returned 0x5 [0147.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", dwFileAttributes=0x20) returned 0 [0147.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ae8) returned 1 Thread: id = 1233 os_tid = 0x11b0 [0144.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif")) returned 0x20 [0147.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", dwFileAttributes=0x20) returned 0 [0147.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.812] GetLastError () returned 0x5 [0147.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", dwFileAttributes=0x20) returned 0 [0147.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186650) returned 1 Thread: id = 1234 os_tid = 0x11b4 [0144.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif")) returned 0x20 [0147.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", dwFileAttributes=0x20) returned 0 [0147.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.807] GetLastError () returned 0x5 [0147.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", dwFileAttributes=0x20) returned 0 [0147.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81865a8) returned 1 Thread: id = 1235 os_tid = 0x11b8 [0144.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif")) returned 0x20 [0147.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", dwFileAttributes=0x20) returned 0 [0147.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.803] GetLastError () returned 0x5 [0147.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", dwFileAttributes=0x20) returned 0 [0147.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186500) returned 1 Thread: id = 1236 os_tid = 0x6c0 [0144.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif")) returned 0x20 [0147.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", dwFileAttributes=0x20) returned 0 [0147.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.805] GetLastError () returned 0x5 [0147.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", dwFileAttributes=0x20) returned 0 [0147.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186458) returned 1 Thread: id = 1237 os_tid = 0x11c0 [0144.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif")) returned 0x20 [0147.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", dwFileAttributes=0x20) returned 0 [0147.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.801] GetLastError () returned 0x5 [0147.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", dwFileAttributes=0x20) returned 0 [0147.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 Thread: id = 1238 os_tid = 0x11c4 [0144.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif")) returned 0x20 [0147.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", dwFileAttributes=0x20) returned 0 [0147.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.736] GetLastError () returned 0x5 [0147.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", dwFileAttributes=0x20) returned 0 [0147.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187028) returned 1 Thread: id = 1239 os_tid = 0x11c8 [0144.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif")) returned 0x20 [0147.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", dwFileAttributes=0x20) returned 0 [0147.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.733] GetLastError () returned 0x5 [0147.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", dwFileAttributes=0x20) returned 0 [0147.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186f80) returned 1 Thread: id = 1240 os_tid = 0xbd8 [0144.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif")) returned 0x20 [0147.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", dwFileAttributes=0x20) returned 0 [0147.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.836] GetLastError () returned 0x5 [0147.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", dwFileAttributes=0x20) returned 0 [0147.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ed8) returned 1 Thread: id = 1241 os_tid = 0xbd4 [0144.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif")) returned 0x20 [0147.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", dwFileAttributes=0x20) returned 0 [0147.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.760] GetLastError () returned 0x5 [0147.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", dwFileAttributes=0x20) returned 0 [0147.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81867a0) returned 1 Thread: id = 1242 os_tid = 0xc34 [0144.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif")) returned 0x20 [0147.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", dwFileAttributes=0x20) returned 0 [0147.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.758] GetLastError () returned 0x5 [0147.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", dwFileAttributes=0x20) returned 0 [0147.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81866f8) returned 1 Thread: id = 1243 os_tid = 0xc40 [0144.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif")) returned 0x20 [0147.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", dwFileAttributes=0x20) returned 0 [0147.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.756] GetLastError () returned 0x5 [0147.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", dwFileAttributes=0x20) returned 0 [0147.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81872c8) returned 1 Thread: id = 1244 os_tid = 0xc38 [0144.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif")) returned 0x20 [0147.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", dwFileAttributes=0x20) returned 0 [0147.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.753] GetLastError () returned 0x5 [0147.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", dwFileAttributes=0x20) returned 0 [0147.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187220) returned 1 Thread: id = 1245 os_tid = 0x1200 [0144.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif")) returned 0x20 [0147.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", dwFileAttributes=0x20) returned 0 [0147.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.749] GetLastError () returned 0x5 [0147.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", dwFileAttributes=0x20) returned 0 [0147.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187178) returned 1 Thread: id = 1246 os_tid = 0x1204 [0144.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif")) returned 0x20 [0147.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", dwFileAttributes=0x20) returned 0 [0147.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.751] GetLastError () returned 0x5 [0147.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", dwFileAttributes=0x20) returned 0 [0147.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81870d0) returned 1 Thread: id = 1247 os_tid = 0x1218 [0144.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif")) returned 0x20 [0147.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", dwFileAttributes=0x20) returned 0 [0147.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.833] GetLastError () returned 0x5 [0147.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", dwFileAttributes=0x20) returned 0 [0147.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 Thread: id = 1248 os_tid = 0x644 [0144.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif")) returned 0x20 [0147.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", dwFileAttributes=0x20) returned 0 [0147.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.831] GetLastError () returned 0x5 [0147.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", dwFileAttributes=0x20) returned 0 [0147.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 Thread: id = 1249 os_tid = 0x9ac [0144.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif")) returned 0x20 [0147.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", dwFileAttributes=0x20) returned 0 [0147.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.826] GetLastError () returned 0x5 [0147.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", dwFileAttributes=0x20) returned 0 [0147.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f0) returned 1 Thread: id = 1250 os_tid = 0xf54 [0144.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif")) returned 0x20 [0147.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", dwFileAttributes=0x20) returned 0 [0147.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.821] GetLastError () returned 0x5 [0147.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", dwFileAttributes=0x20) returned 0 [0147.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ce0) returned 1 Thread: id = 1251 os_tid = 0x9fc [0144.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif")) returned 0x20 [0147.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", dwFileAttributes=0x20) returned 0 [0147.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.828] GetLastError () returned 0x5 [0147.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", dwFileAttributes=0x20) returned 0 [0147.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186d88) returned 1 Thread: id = 1252 os_tid = 0xa0c [0144.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif")) returned 0x20 [0147.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", dwFileAttributes=0x20) returned 0 [0147.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.823] GetLastError () returned 0x5 [0147.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", dwFileAttributes=0x20) returned 0 [0147.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a40) returned 1 Thread: id = 1253 os_tid = 0xa1c [0144.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif")) returned 0x20 [0147.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", dwFileAttributes=0x20) returned 0 [0147.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.818] GetLastError () returned 0x5 [0147.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", dwFileAttributes=0x20) returned 0 [0147.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187418) returned 1 Thread: id = 1254 os_tid = 0xa2c [0144.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif")) returned 0x20 [0147.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", dwFileAttributes=0x20) returned 0 [0147.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.816] GetLastError () returned 0x5 [0147.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", dwFileAttributes=0x20) returned 0 [0147.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81874c0) returned 1 Thread: id = 1255 os_tid = 0xa3c [0144.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif")) returned 0x20 [0147.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", dwFileAttributes=0x20) returned 0 [0147.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.814] GetLastError () returned 0x5 [0147.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", dwFileAttributes=0x20) returned 0 [0147.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187568) returned 1 Thread: id = 1256 os_tid = 0xa4c [0144.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif")) returned 0x20 [0147.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", dwFileAttributes=0x20) returned 0 [0147.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.677] GetLastError () returned 0x5 [0147.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", dwFileAttributes=0x20) returned 0 [0147.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187610) returned 1 Thread: id = 1257 os_tid = 0xa5c [0144.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif")) returned 0x20 [0144.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x20) returned 0 [0144.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.866] GetLastError () returned 0x5 [0144.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x20) returned 0 [0144.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 1258 os_tid = 0xa6c [0144.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm")) returned 0x20 [0147.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM", dwFileAttributes=0x20) returned 0 [0147.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.887] GetLastError () returned 0x5 [0147.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM", dwFileAttributes=0x20) returned 0 [0147.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053c10) returned 1 Thread: id = 1259 os_tid = 0xa7c [0144.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif")) returned 0x20 [0147.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF", dwFileAttributes=0x20) returned 0 [0147.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.885] GetLastError () returned 0x5 [0147.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF", dwFileAttributes=0x20) returned 0 [0147.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b88) returned 1 Thread: id = 1260 os_tid = 0xa8c [0144.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm")) returned 0x20 [0147.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM", dwFileAttributes=0x20) returned 0 [0147.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.882] GetLastError () returned 0x5 [0147.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM", dwFileAttributes=0x20) returned 0 [0147.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053a78) returned 1 Thread: id = 1261 os_tid = 0xa9c [0144.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif")) returned 0x20 [0147.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF", dwFileAttributes=0x20) returned 0 [0147.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.880] GetLastError () returned 0x5 [0147.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF", dwFileAttributes=0x20) returned 0 [0147.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80539f0) returned 1 Thread: id = 1262 os_tid = 0xaac [0144.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm")) returned 0x20 [0147.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM", dwFileAttributes=0x20) returned 0 [0147.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.877] GetLastError () returned 0x5 [0147.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM", dwFileAttributes=0x20) returned 0 [0147.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053968) returned 1 Thread: id = 1263 os_tid = 0xac0 [0144.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif")) returned 0x20 [0147.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF", dwFileAttributes=0x20) returned 0 [0147.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.875] GetLastError () returned 0x5 [0147.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF", dwFileAttributes=0x20) returned 0 [0147.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80538e0) returned 1 Thread: id = 1264 os_tid = 0xacc [0144.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm")) returned 0x20 [0147.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM", dwFileAttributes=0x20) returned 0 [0147.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.873] GetLastError () returned 0x5 [0147.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM", dwFileAttributes=0x20) returned 0 [0147.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053858) returned 1 Thread: id = 1265 os_tid = 0xb58 [0144.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm")) returned 0x20 [0147.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM", dwFileAttributes=0x20) returned 0 [0147.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.870] GetLastError () returned 0x5 [0147.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM", dwFileAttributes=0x20) returned 0 [0147.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80537d0) returned 1 Thread: id = 1266 os_tid = 0x43c [0144.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg")) returned 0x20 [0147.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG", dwFileAttributes=0x20) returned 0 [0147.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.868] GetLastError () returned 0x5 [0147.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG", dwFileAttributes=0x20) returned 0 [0147.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053748) returned 1 Thread: id = 1267 os_tid = 0xdb4 [0144.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif")) returned 0x20 [0147.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF", dwFileAttributes=0x20) returned 0 [0147.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.866] GetLastError () returned 0x5 [0147.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF", dwFileAttributes=0x20) returned 0 [0147.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80536c0) returned 1 Thread: id = 1268 os_tid = 0xdf0 [0144.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm")) returned 0x20 [0147.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM", dwFileAttributes=0x20) returned 0 [0147.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.864] GetLastError () returned 0x5 [0147.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM", dwFileAttributes=0x20) returned 0 [0147.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053638) returned 1 Thread: id = 1269 os_tid = 0xde8 [0144.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif")) returned 0x20 [0147.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF", dwFileAttributes=0x20) returned 0 [0147.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.862] GetLastError () returned 0x5 [0147.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF", dwFileAttributes=0x20) returned 0 [0147.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053528) returned 1 Thread: id = 1270 os_tid = 0x68c [0144.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm")) returned 0x20 [0147.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM", dwFileAttributes=0x20) returned 0 [0147.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.860] GetLastError () returned 0x5 [0147.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM", dwFileAttributes=0x20) returned 0 [0147.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80535b0) returned 1 Thread: id = 1271 os_tid = 0xe98 [0144.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm")) returned 0x20 [0147.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM", dwFileAttributes=0x20) returned 0 [0147.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.897] GetLastError () returned 0x5 [0147.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM", dwFileAttributes=0x20) returned 0 [0147.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054628) returned 1 Thread: id = 1272 os_tid = 0xe9c [0144.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg")) returned 0x20 [0147.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG", dwFileAttributes=0x20) returned 0 [0147.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.895] GetLastError () returned 0x5 [0147.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG", dwFileAttributes=0x20) returned 0 [0147.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053418) returned 1 Thread: id = 1273 os_tid = 0xeb0 [0144.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm")) returned 0x20 [0147.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM", dwFileAttributes=0x20) returned 0 [0147.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.291] GetLastError () returned 0x5 [0147.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM", dwFileAttributes=0x20) returned 0 [0147.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f1a0) returned 1 Thread: id = 1274 os_tid = 0xeac [0144.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg")) returned 0x20 [0147.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG", dwFileAttributes=0x20) returned 0 [0147.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.298] GetLastError () returned 0x5 [0147.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG", dwFileAttributes=0x20) returned 0 [0147.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f118) returned 1 Thread: id = 1275 os_tid = 0xea8 [0144.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif")) returned 0x20 [0147.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF", dwFileAttributes=0x20) returned 0 [0147.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.296] GetLastError () returned 0x5 [0147.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF", dwFileAttributes=0x20) returned 0 [0147.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f090) returned 1 Thread: id = 1276 os_tid = 0xeb4 [0144.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm")) returned 0x20 [0147.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM", dwFileAttributes=0x20) returned 0 [0147.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.293] GetLastError () returned 0x5 [0147.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM", dwFileAttributes=0x20) returned 0 [0147.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 Thread: id = 1277 os_tid = 0xeb8 [0144.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e550 [0144.880] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Users\\Default\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities" [0144.880] wcscat (in: _Dest=0x3d8e550, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\" [0144.880] wcscat (in: _Dest=0x3d8e550, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*" [0144.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80912e8 [0144.880] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b18 [0147.295] wcscmp (_String1=".", _String2=".") returned 0 [0147.295] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.295] wcscmp (_String1="..", _String2=".") returned 1 [0147.295] wcscmp (_String1="..", _String2="..") returned 0 [0147.295] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 1 [0147.295] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2=".") returned 1 [0147.295] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2="..") returned 1 [0147.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bea8 [0147.295] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Users\\Default\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities" [0147.296] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\" [0147.296] wcscat (in: _Dest=0x35bea8, _Source="{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0149.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0149.193] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 0 [0149.193] FindClose (in: hFindFile=0x3f37b18 | out: hFindFile=0x3f37b18) returned 1 [0149.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80912e8) returned 1 [0149.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 [0149.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5b28) returned 1 Thread: id = 1278 os_tid = 0xebc [0144.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7378 [0144.881] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0144.881] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0144.881] wcscat (in: _Dest=0x2c7378, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*" [0144.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80917b8 [0144.882] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*", lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37998 [0145.798] wcscmp (_String1=".", _String2=".") returned 0 [0145.798] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.798] wcscmp (_String1="..", _String2=".") returned 1 [0145.798] wcscmp (_String1="..", _String2="..") returned 0 [0145.798] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.798] wcscmp (_String1="packages", _String2=".") returned 1 [0145.798] wcscmp (_String1="packages", _String2="..") returned 1 [0145.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b878 [0145.798] wcscpy (in: _Dest=0x35b878, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0145.798] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0145.798] wcscat (in: _Dest=0x35b878, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0148.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0148.239] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0148.239] FindClose (in: hFindFile=0x3f37998 | out: hFindFile=0x3f37998) returned 1 [0148.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80917b8) returned 1 [0148.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 [0148.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c70f8) returned 1 Thread: id = 1279 os_tid = 0x12a4 [0144.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11fa8 [0144.882] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0144.882] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0144.882] wcscat (in: _Dest=0x3e11fa8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*" [0144.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fd40 [0144.882] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*", lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37498 [0145.797] wcscmp (_String1=".", _String2=".") returned 0 [0145.797] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.797] wcscmp (_String1="..", _String2=".") returned 1 [0145.797] wcscmp (_String1="..", _String2="..") returned 0 [0145.797] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.797] wcscmp (_String1="packages", _String2=".") returned 1 [0145.797] wcscmp (_String1="packages", _String2="..") returned 1 [0145.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c168 [0145.797] wcscpy (in: _Dest=0x35c168, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0145.797] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0145.797] wcscat (in: _Dest=0x35c168, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0148.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0148.237] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0148.237] FindClose (in: hFindFile=0x3f37498 | out: hFindFile=0x3f37498) returned 1 [0148.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fd40) returned 1 [0148.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 [0148.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 1280 os_tid = 0xe0c [0144.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6a20 [0144.883] wcscpy (in: _Dest=0x2ff6a20, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0144.883] wcscat (in: _Dest=0x2ff6a20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0144.883] wcscat (in: _Dest=0x2ff6a20, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" [0144.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090210 [0144.883] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0147.255] wcscmp (_String1=".", _String2=".") returned 0 [0147.255] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.255] wcscmp (_String1="..", _String2=".") returned 1 [0147.255] wcscmp (_String1="..", _String2="..") returned 0 [0147.255] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0147.255] wcscmp (_String1="packages", _String2=".") returned 1 [0147.255] wcscmp (_String1="packages", _String2="..") returned 1 [0147.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3330a8 [0147.256] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0147.256] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0147.256] wcscat (in: _Dest=0x3330a8, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0148.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0148.304] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0148.304] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0148.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090210) returned 1 [0148.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6a20) returned 1 [0148.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 1281 os_tid = 0xe14 [0144.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11788 [0144.884] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0144.884] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0144.884] wcscat (in: _Dest=0x3e11788, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" [0144.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ec68 [0144.884] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38218 [0147.254] wcscmp (_String1=".", _String2=".") returned 0 [0147.254] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.254] wcscmp (_String1="..", _String2=".") returned 1 [0147.254] wcscmp (_String1="..", _String2="..") returned 0 [0147.254] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xcae8da20, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0147.254] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0147.254] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0147.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c218 [0147.254] wcscpy (in: _Dest=0x35c218, _Source="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0147.254] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0147.254] wcscat (in: _Dest=0x35c218, _Source="state.rsm" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0148.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0148.302] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0148.302] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0148.302] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0148.302] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0148.302] FindClose (in: hFindFile=0x3f38218 | out: hFindFile=0x3f38218) returned 1 [0148.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ec68) returned 1 [0148.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 [0148.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a240) returned 1 Thread: id = 1282 os_tid = 0x4e4 [0144.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff72c0 [0144.884] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0144.884] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0144.884] wcscat (in: _Dest=0x2ff72c0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*" [0144.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f138 [0144.884] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37cd8 [0145.795] wcscmp (_String1=".", _String2=".") returned 0 [0145.796] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.796] wcscmp (_String1="..", _String2=".") returned 1 [0145.796] wcscmp (_String1="..", _String2="..") returned 0 [0145.796] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.796] wcscmp (_String1="packages", _String2=".") returned 1 [0145.796] wcscmp (_String1="packages", _String2="..") returned 1 [0145.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e34088 [0145.796] wcscpy (in: _Dest=0x3e34088, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0145.796] wcscat (in: _Dest=0x3e34088, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0145.796] wcscat (in: _Dest=0x3e34088, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0148.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e34088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0148.234] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0148.234] FindClose (in: hFindFile=0x3f37cd8 | out: hFindFile=0x3f37cd8) returned 1 [0148.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f138) returned 1 [0148.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 [0148.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 Thread: id = 1283 os_tid = 0xed8 [0144.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7c18 [0144.885] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0144.885] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0144.885] wcscat (in: _Dest=0x2ff7c18, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*" [0144.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ea00 [0144.885] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0147.250] wcscmp (_String1=".", _String2=".") returned 0 [0147.250] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.250] wcscmp (_String1="..", _String2=".") returned 1 [0147.250] wcscmp (_String1="..", _String2="..") returned 0 [0147.250] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0147.250] wcscmp (_String1="packages", _String2=".") returned 1 [0147.250] wcscmp (_String1="packages", _String2="..") returned 1 [0147.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e351b8 [0147.250] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0147.250] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0147.251] wcscat (in: _Dest=0x3e351b8, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0148.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e351b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0148.300] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0148.300] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0148.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ea00) returned 1 [0148.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 [0148.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 1284 os_tid = 0xf38 [0144.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff62f0 [0144.886] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0144.886] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0144.886] wcscat (in: _Dest=0x2ff62f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" [0144.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e060 [0144.886] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38398 [0147.245] wcscmp (_String1=".", _String2=".") returned 0 [0147.245] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.246] wcscmp (_String1="..", _String2=".") returned 1 [0147.246] wcscmp (_String1="..", _String2="..") returned 0 [0147.246] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0147.246] wcscmp (_String1="packages", _String2=".") returned 1 [0147.246] wcscmp (_String1="packages", _String2="..") returned 1 [0147.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0147.246] wcscpy (in: _Dest=0x333828, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0147.246] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0147.246] wcscat (in: _Dest=0x333828, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0149.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0149.191] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0149.191] FindClose (in: hFindFile=0x3f38398 | out: hFindFile=0x3f38398) returned 1 [0149.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e060) returned 1 [0149.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 [0149.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 1285 os_tid = 0xed4 [0144.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6688 [0144.886] wcscpy (in: _Dest=0x2ff6688, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0144.886] wcscat (in: _Dest=0x2ff6688, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0144.886] wcscat (in: _Dest=0x2ff6688, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" [0144.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e530 [0144.887] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d98 [0147.242] wcscmp (_String1=".", _String2=".") returned 0 [0147.242] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.242] wcscmp (_String1="..", _String2=".") returned 1 [0147.242] wcscmp (_String1="..", _String2="..") returned 0 [0147.242] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0147.242] wcscmp (_String1="packages", _String2=".") returned 1 [0147.242] wcscmp (_String1="packages", _String2="..") returned 1 [0147.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3339a8 [0147.243] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0147.243] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0147.243] wcscat (in: _Dest=0x3339a8, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0149.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0149.574] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0149.574] FindClose (in: hFindFile=0x3f37d98 | out: hFindFile=0x3f37d98) returned 1 [0149.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e530) returned 1 [0149.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6688) returned 1 [0149.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c2c8) returned 1 Thread: id = 1286 os_tid = 0xefc [0144.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a458 [0144.887] wcscpy (in: _Dest=0x819a458, _Source="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0144.887] wcscat (in: _Dest=0x819a458, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0144.887] wcscat (in: _Dest=0x819a458, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" [0144.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e2c8 [0144.887] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0147.239] wcscmp (_String1=".", _String2=".") returned 0 [0147.239] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.239] wcscmp (_String1="..", _String2=".") returned 1 [0147.239] wcscmp (_String1="..", _String2="..") returned 0 [0147.239] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb20410, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xd7101e80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0147.239] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0147.239] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0147.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c378 [0147.239] wcscpy (in: _Dest=0x35c378, _Source="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0147.239] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0147.239] wcscat (in: _Dest=0x35c378, _Source="state.rsm" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0149.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0149.572] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0149.572] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0149.572] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0149.572] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0149.572] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0149.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e2c8) returned 1 [0149.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a458) returned 1 [0149.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ac58) returned 1 Thread: id = 1287 os_tid = 0xec8 [0144.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a4f8 [0144.888] wcscpy (in: _Dest=0x819a4f8, _Source="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0144.888] wcscat (in: _Dest=0x819a4f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0144.888] wcscat (in: _Dest=0x819a4f8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*" [0144.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e798 [0144.888] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0147.234] wcscmp (_String1=".", _String2=".") returned 0 [0147.234] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.234] wcscmp (_String1="..", _String2=".") returned 1 [0147.234] wcscmp (_String1="..", _String2="..") returned 0 [0147.234] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe644ba0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x2fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0147.234] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0147.234] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0147.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c428 [0147.234] wcscpy (in: _Dest=0x35c428, _Source="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0147.234] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0147.234] wcscat (in: _Dest=0x35c428, _Source="state.rsm" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0149.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0149.570] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0149.570] wcscmp (_String1="VC_redist.x86.exe", _String2=".") returned 1 [0149.570] wcscmp (_String1="VC_redist.x86.exe", _String2="..") returned 1 [0149.570] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0149.570] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0149.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e798) returned 1 [0149.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a4f8) returned 1 [0149.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a078) returned 1 Thread: id = 1288 os_tid = 0xecc [0144.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7d88 [0144.889] wcscpy (in: _Dest=0x2ff7d88, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0144.889] wcscat (in: _Dest=0x2ff7d88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0144.889] wcscat (in: _Dest=0x2ff7d88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*" [0144.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ffa8 [0144.889] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38058 [0145.794] wcscmp (_String1=".", _String2=".") returned 0 [0145.794] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.794] wcscmp (_String1="..", _String2=".") returned 1 [0145.794] wcscmp (_String1="..", _String2="..") returned 0 [0145.794] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.794] wcscmp (_String1="packages", _String2=".") returned 1 [0145.794] wcscmp (_String1="packages", _String2="..") returned 1 [0145.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3338e8 [0145.794] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0145.794] wcscat (in: _Dest=0x3338e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0145.794] wcscat (in: _Dest=0x3338e8, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0149.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3338e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0149.555] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0149.555] FindClose (in: hFindFile=0x3f38058 | out: hFindFile=0x3f38058) returned 1 [0149.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ffa8) returned 1 [0149.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 [0149.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 1289 os_tid = 0x670 [0144.889] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn")) returned 0x2022 [0145.385] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0145.790] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.268] GetLastError () returned 0x5 [0146.268] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e08) returned 1 Thread: id = 1290 os_tid = 0x8fc [0144.890] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn")) returned 0x2022 [0150.082] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0150.082] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.082] GetLastError () returned 0x5 [0150.082] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0150.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 Thread: id = 1291 os_tid = 0xb5c [0144.890] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn")) returned 0x2022 [0150.080] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0150.080] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.080] GetLastError () returned 0x5 [0150.080] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0150.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 Thread: id = 1292 os_tid = 0xb18 [0144.893] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn")) returned 0x2022 [0150.078] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0150.078] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.078] GetLastError () returned 0x5 [0150.078] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0150.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bb68) returned 1 Thread: id = 1293 os_tid = 0xb78 [0144.895] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn")) returned 0x2022 [0150.085] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0150.085] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.086] GetLastError () returned 0x5 [0150.086] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0150.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6570) returned 1 Thread: id = 1294 os_tid = 0xb0c [0144.896] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl")) returned 0x2022 [0149.696] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x20) returned 0 [0149.696] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.696] GetLastError () returned 0x5 [0149.696] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x2022) returned 0 [0149.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 Thread: id = 1295 os_tid = 0x620 [0144.897] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat")) returned 0x2020 [0147.230] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x20) returned 0 [0147.231] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.231] GetLastError () returned 0x5 [0147.231] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x2020) returned 0 [0147.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d680) returned 1 Thread: id = 1296 os_tid = 0xb54 [0144.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1c48 [0144.898] wcscpy (in: _Dest=0x3eb1c48, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0144.898] wcscat (in: _Dest=0x3eb1c48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0144.898] wcscat (in: _Dest=0x3eb1c48, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*" [0144.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091a20 [0144.898] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b58 [0145.793] wcscmp (_String1=".", _String2=".") returned 0 [0145.793] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.793] wcscmp (_String1="..", _String2=".") returned 1 [0145.793] wcscmp (_String1="..", _String2="..") returned 0 [0145.793] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0145.793] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2=".") returned 1 [0145.793] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2="..") returned 1 [0145.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0145.793] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0145.793] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0145.793] wcscat (in: _Dest=0x3dadb30, _Source="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" [0150.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0150.031] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0150.031] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2=".") returned 1 [0150.031] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2="..") returned 1 [0150.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadc28 [0150.032] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0150.032] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0150.032] wcscat (in: _Dest=0x3dadc28, _Source="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" [0150.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0150.033] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0150.033] FindClose (in: hFindFile=0x3f37b58 | out: hFindFile=0x3f37b58) returned 1 [0150.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091a20) returned 1 [0150.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1c48) returned 1 [0150.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 1297 os_tid = 0xb88 [0144.899] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\blackbox.bin")) returned 0xffffffff [0146.980] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin", dwFileAttributes=0x20) returned 0 [0146.980] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\blackbox.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.980] GetLastError () returned 0x2 [0146.980] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin", dwFileAttributes=0xffffffff) returned 0 [0146.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 Thread: id = 1298 os_tid = 0x358 [0144.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33898 [0144.899] wcscpy (in: _Dest=0x3f33898, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" [0144.899] wcscat (in: _Dest=0x3f33898, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\" [0144.899] wcscat (in: _Dest=0x3f33898, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*" [0144.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f3a0 [0144.899] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0146.989] wcscmp (_String1=".", _String2=".") returned 0 [0146.989] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.989] wcscmp (_String1="..", _String2=".") returned 1 [0146.989] wcscmp (_String1="..", _String2="..") returned 0 [0146.989] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.989] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0146.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f3a0) returned 1 [0146.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33898) returned 1 [0146.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c260) returned 1 Thread: id = 1299 os_tid = 0x484 [0144.900] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\drmstore.hds")) returned 0xffffffff [0146.288] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0x20) returned 0 [0146.982] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\drmstore.hds"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.982] GetLastError () returned 0x2 [0146.982] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0xffffffff) returned 0 [0146.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c270) returned 1 Thread: id = 1300 os_tid = 0x264 [0144.900] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.bla")) returned 0xffffffff [0145.905] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0x20) returned 0 [0146.338] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.bla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.984] GetLastError () returned 0x2 [0146.984] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0xffffffff) returned 0 [0146.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff50f0) returned 1 Thread: id = 1301 os_tid = 0xc4 [0144.900] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.sec")) returned 0xffffffff [0146.289] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec", dwFileAttributes=0x20) returned 0 [0146.344] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.sec"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.985] GetLastError () returned 0x2 [0146.985] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec", dwFileAttributes=0xffffffff) returned 0 [0146.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5160) returned 1 Thread: id = 1302 os_tid = 0x918 [0144.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx")) returned 0x20 [0150.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx", dwFileAttributes=0x20) returned 0 [0150.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.549] GetLastError () returned 0x5 [0150.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx", dwFileAttributes=0x20) returned 0 [0150.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bbc8) returned 1 Thread: id = 1303 os_tid = 0xdf4 [0144.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx")) returned 0x20 [0150.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.534] GetLastError () returned 0x5 [0150.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 1304 os_tid = 0x5ec [0144.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx")) returned 0x20 [0150.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.544] GetLastError () returned 0x5 [0150.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 1305 os_tid = 0x508 [0144.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx")) returned 0x20 [0150.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0150.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.532] GetLastError () returned 0x5 [0150.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0150.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 1306 os_tid = 0xfd8 [0144.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx")) returned 0x20 [0148.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx", dwFileAttributes=0x20) returned 0 [0148.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.127] GetLastError () returned 0x5 [0150.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx", dwFileAttributes=0x20) returned 0 [0150.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 Thread: id = 1307 os_tid = 0x1004 [0144.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx")) returned 0x20 [0150.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx", dwFileAttributes=0x20) returned 0 [0150.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.446] GetLastError () returned 0x5 [0150.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx", dwFileAttributes=0x20) returned 0 [0150.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ff0) returned 1 Thread: id = 1308 os_tid = 0x100c [0144.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx")) returned 0x20 [0150.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx", dwFileAttributes=0x20) returned 0 [0150.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.367] GetLastError () returned 0x5 [0150.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx", dwFileAttributes=0x20) returned 0 [0150.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 1309 os_tid = 0x1014 [0144.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx")) returned 0x20 [0149.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0149.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.128] GetLastError () returned 0x5 [0150.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0150.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 1310 os_tid = 0x101c [0144.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx")) returned 0x20 [0150.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0150.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.444] GetLastError () returned 0x5 [0150.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0150.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187760) returned 1 Thread: id = 1311 os_tid = 0x1024 [0144.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx")) returned 0x20 [0147.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx", dwFileAttributes=0x20) returned 0 [0147.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.449] GetLastError () returned 0x5 [0148.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355dd0) returned 1 Thread: id = 1312 os_tid = 0x1064 [0144.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx")) returned 0x20 [0150.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0150.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.547] GetLastError () returned 0x5 [0150.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0150.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 1313 os_tid = 0x10c4 [0144.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma" (normalized: "c:\\program files\\google\\chrome\\application\\setupmetrics\\20170531124044.pma")) returned 0x20 [0147.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma", dwFileAttributes=0x20) returned 0 [0147.251] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma" (normalized: "c:\\program files\\google\\chrome\\application\\setupmetrics\\20170531124044.pma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.251] GetLastError () returned 0x5 [0147.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma", dwFileAttributes=0x20) returned 0 [0147.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c74b8) returned 1 Thread: id = 1314 os_tid = 0x10c8 [0144.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32ceb0 [0144.906] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk" [0144.906] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" [0144.906] wcscat (in: _Dest=0x32ceb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\*") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\*" [0144.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fad8 [0144.906] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\*", lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1f27950, ftCreationTime.dwHighDateTime=0x1d5e2dd, ftLastAccessTime.dwLowDateTime=0xba88b500, ftLastAccessTime.dwHighDateTime=0x1d5dea1, ftLastWriteTime.dwLowDateTime=0xba88b500, ftLastWriteTime.dwHighDateTime=0x1d5dea1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f382d8 [0144.906] wcscmp (_String1=".", _String2=".") returned 0 [0144.906] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1f27950, ftCreationTime.dwHighDateTime=0x1d5e2dd, ftLastAccessTime.dwLowDateTime=0xba88b500, ftLastAccessTime.dwHighDateTime=0x1d5dea1, ftLastWriteTime.dwLowDateTime=0xba88b500, ftLastWriteTime.dwHighDateTime=0x1d5dea1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.906] wcscmp (_String1="..", _String2=".") returned 1 [0144.907] wcscmp (_String1="..", _String2="..") returned 0 [0144.907] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9380f3c0, ftCreationTime.dwHighDateTime=0x1d5dee0, ftLastAccessTime.dwLowDateTime=0x3e6f8110, ftLastAccessTime.dwHighDateTime=0x1d5dc35, ftLastWriteTime.dwLowDateTime=0x3e6f8110, ftLastWriteTime.dwHighDateTime=0x1d5dc35, nFileSizeHigh=0x0, nFileSizeLow=0x58ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="5d6x.mp3", cAlternateFileName="")) returned 1 [0144.907] wcscmp (_String1="5d6x.mp3", _String2=".") returned 1 [0144.907] wcscmp (_String1="5d6x.mp3", _String2="..") returned 1 [0144.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187958 [0144.907] wcscpy (in: _Dest=0x8187958, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk" [0144.907] wcscat (in: _Dest=0x8187958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" [0144.907] wcscat (in: _Dest=0x8187958, _Source="5d6x.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3" [0151.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0151.784] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x493b5b30, ftCreationTime.dwHighDateTime=0x1d5e759, ftLastAccessTime.dwLowDateTime=0xb7dcd10, ftLastAccessTime.dwHighDateTime=0x1d5e2cb, ftLastWriteTime.dwLowDateTime=0xb7dcd10, ftLastWriteTime.dwHighDateTime=0x1d5e2cb, nFileSizeHigh=0x0, nFileSizeLow=0x33f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="bQ_hd0SrjrQEH.wav", cAlternateFileName="BQ_HD0~1.WAV")) returned 1 [0151.784] wcscmp (_String1="bQ_hd0SrjrQEH.wav", _String2=".") returned 1 [0151.784] wcscmp (_String1="bQ_hd0SrjrQEH.wav", _String2="..") returned 1 [0151.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7d88 [0151.784] wcscpy (in: _Dest=0x2ff7d88, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk" [0151.784] wcscat (in: _Dest=0x2ff7d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" [0151.784] wcscat (in: _Dest=0x2ff7d88, _Source="bQ_hd0SrjrQEH.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav" [0151.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c [0151.785] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e430ca0, ftCreationTime.dwHighDateTime=0x1d5e552, ftLastAccessTime.dwLowDateTime=0x716c4e80, ftLastAccessTime.dwHighDateTime=0x1d5e3ca, ftLastWriteTime.dwLowDateTime=0x716c4e80, ftLastWriteTime.dwHighDateTime=0x1d5e3ca, nFileSizeHigh=0x0, nFileSizeLow=0x136fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pG LOU6QffoMNv6.mp3", cAlternateFileName="PGLOU6~1.MP3")) returned 1 [0151.785] wcscmp (_String1="pG LOU6QffoMNv6.mp3", _String2=".") returned 1 [0151.785] wcscmp (_String1="pG LOU6QffoMNv6.mp3", _String2="..") returned 1 [0151.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333828 [0151.785] wcscpy (in: _Dest=0x333828, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk" [0151.786] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" [0151.786] wcscat (in: _Dest=0x333828, _Source="pG LOU6QffoMNv6.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3" [0151.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0151.787] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e430ca0, ftCreationTime.dwHighDateTime=0x1d5e552, ftLastAccessTime.dwLowDateTime=0x716c4e80, ftLastAccessTime.dwHighDateTime=0x1d5e3ca, ftLastWriteTime.dwLowDateTime=0x716c4e80, ftLastWriteTime.dwHighDateTime=0x1d5e3ca, nFileSizeHigh=0x0, nFileSizeLow=0x136fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pG LOU6QffoMNv6.mp3", cAlternateFileName="PGLOU6~1.MP3")) returned 0 [0151.787] FindClose (in: hFindFile=0x3f382d8 | out: hFindFile=0x3f382d8) returned 1 [0151.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fad8) returned 1 [0151.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 [0151.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b2e0) returned 1 Thread: id = 1315 os_tid = 0x10d0 [0144.908] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\b9ur2wl.mp3")) returned 0x20 [0145.795] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3", dwFileAttributes=0x20) returned 1 [0145.807] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\b9ur2wl.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xac4 [0146.269] GetFileSizeEx (in: hFile=0xac4, lpFileSize=0xd9ffe18 | out: lpFileSize=0xd9ffe18*=58788) returned 1 [0146.269] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0xe5a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.269] ReadFile (in: hFile=0xac4, lpBuffer=0xd9ffe24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd9ffe00, lpOverlapped=0x0 | out: lpBuffer=0xd9ffe24*, lpNumberOfBytesRead=0xd9ffe00*=0x4, lpOverlapped=0x0) returned 1 [0146.271] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b8e8 [0146.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0146.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0146.271] NtQuerySystemTime (in: CurrentTime=0xd9ffda0 | out: CurrentTime=0xd9ffda0*=132471540148488000) returned 0x0 [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x6346d8d6 [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0xdded8d9 [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x343a60c [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x35faef70 [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x23ab4941 [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x647649fc [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x101497f0 [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0xe0a76c3 [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x7bfe54b1 [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x15d7a2a [0146.271] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x102d90bc [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x5a004bee [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x3418d6d1 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x2fcafa62 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x4d4ec24b [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x4a4cca5a [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x71f67a4a [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0xeda16af [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x55dceb41 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x398c889d [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x25aa73cf [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x2b99c319 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x3a86de67 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0xe2b111a [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x2cb312e4 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x1ac4e5c4 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x411c4d11 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x391b1ec1 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x7c17d629 [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x23d853ef [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x593a314a [0146.272] RtlRandomEx (in: Seed=0xd9ffd98 | out: Seed=0xd9ffd98) returned 0x9653d69 [0146.284] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.284] ReadFile (in: hFile=0xac4, lpBuffer=0x815cc88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd9ffda0, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesRead=0xd9ffda0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.284] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b8e8 [0146.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b8e8) returned 1 [0146.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8160890 [0146.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b8e8 [0146.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0146.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0146.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.285] WriteFile (in: hFile=0xac4, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd9ffda0, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0xd9ffda0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0146.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0146.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e68fa0 [0146.501] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.502] WriteFile (in: hFile=0xac4, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xd9ffe0c, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xd9ffe0c*=0x108, lpOverlapped=0x0) returned 1 [0146.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0146.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0146.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0146.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fa0) returned 1 [0146.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b8e8) returned 1 [0146.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c298) returned 1 [0146.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c270) returned 1 [0146.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0146.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187fe8 [0146.564] wcscpy (in: _Dest=0x8187fe8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3" [0146.564] wcscat (in: _Dest=0x8187fe8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3.f0dbec" [0146.564] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3.f0dbec", NtPathName=0xd9ffd90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\B9Ur2WL.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333ee8 [0146.600] FlushFileBuffers (hFile=0xac4) returned 1 [0146.603] CloseHandle (hObject=0xac4) returned 1 [0146.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8188138 [0146.627] wcscpy (in: _Dest=0x8188138, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\" [0146.627] wcscat (in: _Dest=0x8188138, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\F0DBEC-Readme.txt" [0146.627] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\f0dbec-readme.txt")) returned 0x20 [0146.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188138) returned 1 [0146.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11468) returned 1 Thread: id = 1316 os_tid = 0x1110 [0144.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187a00 [0144.908] wcscpy (in: _Dest=0x8187a00, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG" [0144.908] wcscat (in: _Dest=0x8187a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\" [0144.908] wcscat (in: _Dest=0x8187a00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\*") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\*" [0144.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0144.908] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a69de30, ftCreationTime.dwHighDateTime=0x1d5db74, ftLastAccessTime.dwLowDateTime=0xe25c16d0, ftLastAccessTime.dwHighDateTime=0x1d5e509, ftLastWriteTime.dwLowDateTime=0xe25c16d0, ftLastWriteTime.dwHighDateTime=0x1d5e509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0144.909] wcscmp (_String1=".", _String2=".") returned 0 [0144.909] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a69de30, ftCreationTime.dwHighDateTime=0x1d5db74, ftLastAccessTime.dwLowDateTime=0xe25c16d0, ftLastAccessTime.dwHighDateTime=0x1d5e509, ftLastWriteTime.dwLowDateTime=0xe25c16d0, ftLastWriteTime.dwHighDateTime=0x1d5e509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.909] wcscmp (_String1="..", _String2=".") returned 1 [0144.909] wcscmp (_String1="..", _String2="..") returned 0 [0144.909] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf77f8c0, ftCreationTime.dwHighDateTime=0x1d5e500, ftLastAccessTime.dwLowDateTime=0x464f56a0, ftLastAccessTime.dwHighDateTime=0x1d5db57, ftLastWriteTime.dwLowDateTime=0x464f56a0, ftLastWriteTime.dwHighDateTime=0x1d5db57, nFileSizeHigh=0x0, nFileSizeLow=0x18a37, dwReserved0=0x0, dwReserved1=0x0, cFileName="qfHfKHqdrh.wav", cAlternateFileName="QFHFKH~1.WAV")) returned 1 [0144.909] wcscmp (_String1="qfHfKHqdrh.wav", _String2=".") returned 1 [0144.909] wcscmp (_String1="qfHfKHqdrh.wav", _String2="..") returned 1 [0144.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35348 [0144.909] wcscpy (in: _Dest=0x3e35348, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG" [0144.909] wcscat (in: _Dest=0x3e35348, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\" [0144.909] wcscat (in: _Dest=0x3e35348, _Source="qfHfKHqdrh.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav" [0159.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b48 [0159.223] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1085eab0, ftCreationTime.dwHighDateTime=0x1d5d95f, ftLastAccessTime.dwLowDateTime=0xf2138d70, ftLastAccessTime.dwHighDateTime=0x1d5dd1f, ftLastWriteTime.dwLowDateTime=0xf2138d70, ftLastWriteTime.dwHighDateTime=0x1d5dd1f, nFileSizeHigh=0x0, nFileSizeLow=0xe101, dwReserved0=0x0, dwReserved1=0x0, cFileName="yONESU.m4a", cAlternateFileName="")) returned 1 [0159.223] wcscmp (_String1="yONESU.m4a", _String2=".") returned 1 [0159.223] wcscmp (_String1="yONESU.m4a", _String2="..") returned 1 [0159.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81dfdc8 [0159.223] wcscpy (in: _Dest=0x81dfdc8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG" [0159.223] wcscat (in: _Dest=0x81dfdc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\" [0159.223] wcscat (in: _Dest=0x81dfdc8, _Source="yONESU.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a" [0159.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d08 [0159.224] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1085eab0, ftCreationTime.dwHighDateTime=0x1d5d95f, ftLastAccessTime.dwLowDateTime=0xf2138d70, ftLastAccessTime.dwHighDateTime=0x1d5dd1f, ftLastWriteTime.dwLowDateTime=0xf2138d70, ftLastWriteTime.dwHighDateTime=0x1d5dd1f, nFileSizeHigh=0x0, nFileSizeLow=0xe101, dwReserved0=0x0, dwReserved1=0x0, cFileName="yONESU.m4a", cAlternateFileName="")) returned 0 [0159.224] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0159.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0159.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a00) returned 1 [0159.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187808) returned 1 Thread: id = 1317 os_tid = 0x1114 [0144.909] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\szmgf4w6m ttecq4clci.m4a")) returned 0x20 [0144.909] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a", dwFileAttributes=0x20) returned 1 [0145.293] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\szmgf4w6m ttecq4clci.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x55c [0145.736] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0xdcdfba0 | out: lpFileSize=0xdcdfba0*=67583) returned 1 [0145.736] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x107fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.736] ReadFile (in: hFile=0x55c, lpBuffer=0xdcdfbac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdcdfb88, lpOverlapped=0x0 | out: lpBuffer=0xdcdfbac*, lpNumberOfBytesRead=0xdcdfb88*=0x4, lpOverlapped=0x0) returned 1 [0145.737] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0145.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0145.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0145.738] NtQuerySystemTime (in: CurrentTime=0xdcdfb28 | out: CurrentTime=0xdcdfb28*=132471540143184000) returned 0x0 [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x59406539 [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x5d93f0cc [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x509287af [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x48bc063e [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x20473727 [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x3759c300 [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x65bcbc0a [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x240569d1 [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x7f7fe1fa [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x4f6fc78a [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x12d711fe [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x2e155997 [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x3b77e62b [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x6f3cc718 [0145.738] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0xcadcae9 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x2f040868 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x13927a01 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x186754f9 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x65188094 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x4ef261e0 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x6bd4d961 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x30b4dda9 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x58bac701 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x1a0a21fd [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x2b499bf6 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x3e6b65a5 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x367cd1fb [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x17f48660 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x75dee7d0 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x4c527f27 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x1dc29e00 [0145.739] RtlRandomEx (in: Seed=0xdcdfb20 | out: Seed=0xdcdfb20) returned 0x720d5c26 [0145.749] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.749] ReadFile (in: hFile=0x55c, lpBuffer=0x809a458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xdcdfb28, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0xdcdfb28*=0x3c00, lpOverlapped=0x0) returned 1 [0145.749] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83097c0 [0145.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8bc8 [0145.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0145.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0145.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809e060 [0145.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0145.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0145.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0145.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 [0145.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83097c0) returned 1 [0145.750] WriteFile (in: hFile=0x55c, lpBuffer=0x809e060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xdcdfb28, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesWritten=0xdcdfb28*=0x3c00, lpOverlapped=0x0) returned 1 [0145.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0145.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0145.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e6ccb0 [0145.804] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.804] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd8b80*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xdcdfb94, lpOverlapped=0x0 | out: lpBuffer=0x3dd8b80*, lpNumberOfBytesWritten=0xdcdfb94*=0x122, lpOverlapped=0x0) returned 1 [0146.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0146.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cea8) returned 1 [0146.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0146.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ccb0) returned 1 [0146.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0146.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0146.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0146.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c860) returned 1 [0146.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e342e0 [0146.390] wcscpy (in: _Dest=0x3e342e0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a" [0146.390] wcscat (in: _Dest=0x3e342e0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a.f0dbec" [0146.390] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a.f0dbec", NtPathName=0xdcdfb18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\Szmgf4W6m TteCq4ClCi.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e65518 [0146.585] FlushFileBuffers (hFile=0x55c) returned 1 [0146.588] CloseHandle (hObject=0x55c) returned 1 [0146.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187fe8 [0146.602] wcscpy (in: _Dest=0x8187fe8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\" [0146.602] wcscat (in: _Dest=0x8187fe8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\F0DBEC-Readme.txt" [0146.602] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\f0dbec-readme.txt")) returned 0xffffffff [0146.602] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14ec [0146.625] WriteFile (in: hFile=0x14ec, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdcdfb3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdcdfb3c*=0x70c, lpOverlapped=0x0) returned 1 [0146.639] CloseHandle (hObject=0x14ec) returned 1 [0146.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187fe8) returned 1 [0146.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 Thread: id = 1318 os_tid = 0x1118 [0144.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x30150d0 [0144.910] wcscpy (in: _Dest=0x30150d0, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0144.910] wcscat (in: _Dest=0x30150d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0144.910] wcscat (in: _Dest=0x30150d0, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*" [0144.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0144.910] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0147.281] wcscmp (_String1=".", _String2=".") returned 0 [0147.281] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.281] wcscmp (_String1="..", _String2=".") returned 1 [0147.281] wcscmp (_String1="..", _String2="..") returned 0 [0147.281] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0147.281] wcscmp (_String1="directories.acrodata", _String2=".") returned 1 [0147.281] wcscmp (_String1="directories.acrodata", _String2="..") returned 1 [0147.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c74b8 [0147.281] wcscpy (in: _Dest=0x2c74b8, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0147.281] wcscat (in: _Dest=0x2c74b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0147.281] wcscat (in: _Dest=0x2c74b8, _Source="directories.acrodata" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" [0148.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c74b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0148.307] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0148.307] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0148.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0148.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0148.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c090) returned 1 Thread: id = 1319 os_tid = 0x111c [0144.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3336a8 [0144.910] wcscpy (in: _Dest=0x3336a8, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0144.910] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\" [0144.910] wcscat (in: _Dest=0x3336a8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*" [0144.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0144.911] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0147.247] wcscmp (_String1=".", _String2=".") returned 0 [0147.247] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.247] wcscmp (_String1="..", _String2=".") returned 1 [0147.247] wcscmp (_String1="..", _String2="..") returned 0 [0147.247] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0147.248] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0147.248] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0147.248] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0147.248] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0147.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0147.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 [0147.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 1320 os_tid = 0x1144 [0144.911] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20 [0147.279] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0147.279] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.279] GetLastError () returned 0x5 [0147.279] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0147.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64288) returned 1 Thread: id = 1321 os_tid = 0x1164 [0144.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml")) returned 0x20 [0147.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0147.243] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.244] GetLastError () returned 0x5 [0147.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0147.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 1322 os_tid = 0x1168 [0144.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml")) returned 0x20 [0147.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0147.277] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.277] GetLastError () returned 0x5 [0147.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0147.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 1323 os_tid = 0x116c [0144.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\accessibility.properties")) returned 0x20 [0147.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties", dwFileAttributes=0x20) returned 0 [0147.240] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\accessibility.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.240] GetLastError () returned 0x5 [0147.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties", dwFileAttributes=0x20) returned 0 [0147.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 Thread: id = 1324 os_tid = 0x1170 [0144.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\alt-rt.jar")) returned 0x20 [0147.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar", dwFileAttributes=0x20) returned 0 [0147.275] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\alt-rt.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.275] GetLastError () returned 0x5 [0147.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar", dwFileAttributes=0x20) returned 0 [0147.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4a48) returned 1 Thread: id = 1325 os_tid = 0x1174 [0144.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x2b1650 [0144.913] wcscpy (in: _Dest=0x2b1650, _Source="C:\\Program Files\\Java\\jre7\\lib\\applet" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet") returned="C:\\Program Files\\Java\\jre7\\lib\\applet" [0144.913] wcscat (in: _Dest=0x2b1650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet\\") returned="C:\\Program Files\\Java\\jre7\\lib\\applet\\" [0144.913] wcscat (in: _Dest=0x2b1650, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\applet\\*" [0144.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0144.913] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0147.235] wcscmp (_String1=".", _String2=".") returned 0 [0147.235] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.235] wcscmp (_String1="..", _String2=".") returned 1 [0147.235] wcscmp (_String1="..", _String2="..") returned 0 [0147.235] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.236] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2b1650) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303d490) returned 1 Thread: id = 1326 os_tid = 0x1178 [0144.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\calendars.properties")) returned 0x20 [0147.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties", dwFileAttributes=0x20) returned 0 [0147.273] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\calendars.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.273] GetLastError () returned 0x5 [0147.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties", dwFileAttributes=0x20) returned 0 [0147.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5400) returned 1 Thread: id = 1327 os_tid = 0x117c [0144.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\charsets.jar")) returned 0x20 [0147.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar", dwFileAttributes=0x20) returned 0 [0147.142] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\charsets.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.142] GetLastError () returned 0x5 [0147.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar", dwFileAttributes=0x20) returned 0 [0147.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0cc8) returned 1 Thread: id = 1328 os_tid = 0x1180 [0144.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files\\java\\jre7\\lib\\classlist")) returned 0x20 [0147.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist", dwFileAttributes=0x20) returned 0 [0147.271] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files\\java\\jre7\\lib\\classlist"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.271] GetLastError () returned 0x5 [0147.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist", dwFileAttributes=0x20) returned 0 [0147.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 Thread: id = 1329 os_tid = 0x118c [0144.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6efe8 [0144.915] wcscpy (in: _Dest=0x3e6efe8, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0144.915] wcscat (in: _Dest=0x3e6efe8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0144.915] wcscat (in: _Dest=0x3e6efe8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\*" [0144.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a3f8 [0144.915] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0147.233] wcscmp (_String1=".", _String2=".") returned 0 [0147.233] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.233] wcscmp (_String1="..", _String2=".") returned 1 [0147.233] wcscmp (_String1="..", _String2="..") returned 0 [0147.233] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0147.233] wcscmp (_String1="CIEXYZ.pf", _String2=".") returned 1 [0147.233] wcscmp (_String1="CIEXYZ.pf", _String2="..") returned 1 [0147.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d4a8 [0147.233] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0147.233] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0147.233] wcscat (in: _Dest=0x3d8d4a8, _Source="CIEXYZ.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" [0148.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0148.286] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0148.286] wcscmp (_String1="GRAY.pf", _String2=".") returned 1 [0148.286] wcscmp (_String1="GRAY.pf", _String2="..") returned 1 [0148.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6b48 [0148.286] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0148.286] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0148.286] wcscat (in: _Dest=0x2fe6b48, _Source="GRAY.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf" [0148.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0148.287] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0148.287] wcscmp (_String1="LINEAR_RGB.pf", _String2=".") returned 1 [0148.287] wcscmp (_String1="LINEAR_RGB.pf", _String2="..") returned 1 [0148.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8054a80 [0148.288] wcscpy (in: _Dest=0x8054a80, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0148.288] wcscat (in: _Dest=0x8054a80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0148.288] wcscat (in: _Dest=0x8054a80, _Source="LINEAR_RGB.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" [0148.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0148.289] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0148.289] wcscmp (_String1="PYCC.pf", _String2=".") returned 1 [0148.289] wcscmp (_String1="PYCC.pf", _String2="..") returned 1 [0148.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe4b08 [0148.289] wcscpy (in: _Dest=0x2fe4b08, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0148.289] wcscat (in: _Dest=0x2fe4b08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0148.289] wcscat (in: _Dest=0x2fe4b08, _Source="PYCC.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf" [0148.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe4b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0148.290] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0148.290] wcscmp (_String1="sRGB.pf", _String2=".") returned 1 [0148.290] wcscmp (_String1="sRGB.pf", _String2="..") returned 1 [0148.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7448 [0148.290] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0148.290] wcscat (in: _Dest=0x2fe7448, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0148.290] wcscat (in: _Dest=0x2fe7448, _Source="sRGB.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf" [0148.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0148.292] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0148.292] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0148.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a3f8) returned 1 [0148.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6efe8) returned 1 [0148.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6ab8) returned 1 Thread: id = 1330 os_tid = 0x608 [0144.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\content-types.properties")) returned 0x20 [0147.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties", dwFileAttributes=0x20) returned 0 [0147.269] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\content-types.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.269] GetLastError () returned 0x5 [0147.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties", dwFileAttributes=0x20) returned 0 [0147.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 Thread: id = 1331 os_tid = 0xad8 [0144.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre7\\lib\\currency.data")) returned 0x20 [0147.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data", dwFileAttributes=0x20) returned 0 [0147.229] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre7\\lib\\currency.data"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.229] GetLastError () returned 0x5 [0147.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data", dwFileAttributes=0x20) returned 0 [0147.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 Thread: id = 1332 os_tid = 0x119c [0144.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ed80 [0144.916] wcscpy (in: _Dest=0x3e6ed80, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0144.916] wcscat (in: _Dest=0x3e6ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0144.916] wcscat (in: _Dest=0x3e6ed80, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\*" [0144.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80484b0 [0144.916] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099090 [0147.408] wcscmp (_String1=".", _String2=".") returned 0 [0147.408] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.408] wcscmp (_String1="..", _String2=".") returned 1 [0147.408] wcscmp (_String1="..", _String2="..") returned 0 [0147.408] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0147.408] wcscmp (_String1="ffjcext.zip", _String2=".") returned 1 [0147.408] wcscmp (_String1="ffjcext.zip", _String2="..") returned 1 [0147.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39d28 [0147.408] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0147.408] wcscat (in: _Dest=0x3f39d28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0147.408] wcscat (in: _Dest=0x3f39d28, _Source="ffjcext.zip" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip" [0154.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc0 [0154.771] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1 [0154.771] wcscmp (_String1="jqs", _String2=".") returned 1 [0154.771] wcscmp (_String1="jqs", _String2="..") returned 1 [0154.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7028 [0154.771] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.771] wcscat (in: _Dest=0x2fe7028, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.771] wcscat (in: _Dest=0x2fe7028, _Source="jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0154.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe7028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2588 [0154.772] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0154.772] wcscmp (_String1="messages.properties", _String2=".") returned 1 [0154.772] wcscmp (_String1="messages.properties", _String2="..") returned 1 [0154.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5288 [0154.772] wcscpy (in: _Dest=0x3dc5288, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.772] wcscat (in: _Dest=0x3dc5288, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.773] wcscat (in: _Dest=0x3dc5288, _Source="messages.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties" [0154.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x258c [0154.774] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0154.774] wcscmp (_String1="messages_de.properties", _String2=".") returned 1 [0154.774] wcscmp (_String1="messages_de.properties", _String2="..") returned 1 [0154.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfdd8 [0154.774] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.774] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.774] wcscat (in: _Dest=0x81bfdd8, _Source="messages_de.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties" [0154.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0154.775] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67890320, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0154.775] wcscmp (_String1="messages_es.properties", _String2=".") returned 1 [0154.775] wcscmp (_String1="messages_es.properties", _String2="..") returned 1 [0154.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x80537d0 [0154.775] wcscpy (in: _Dest=0x80537d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.775] wcscat (in: _Dest=0x80537d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.775] wcscat (in: _Dest=0x80537d0, _Source="messages_es.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties" [0154.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80537d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2594 [0154.776] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67890320, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67890320, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67890320, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0154.777] wcscmp (_String1="messages_fr.properties", _String2=".") returned 1 [0154.777] wcscmp (_String1="messages_fr.properties", _String2="..") returned 1 [0154.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053748 [0154.777] wcscpy (in: _Dest=0x8053748, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.777] wcscat (in: _Dest=0x8053748, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.777] wcscat (in: _Dest=0x8053748, _Source="messages_fr.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties" [0154.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2598 [0154.778] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67890320, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67890320, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0154.778] wcscmp (_String1="messages_it.properties", _String2=".") returned 1 [0154.778] wcscmp (_String1="messages_it.properties", _String2="..") returned 1 [0154.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x80536c0 [0154.778] wcscpy (in: _Dest=0x80536c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.778] wcscat (in: _Dest=0x80536c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.778] wcscat (in: _Dest=0x80536c0, _Source="messages_it.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties" [0154.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80536c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x259c [0154.780] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0154.780] wcscmp (_String1="messages_ja.properties", _String2=".") returned 1 [0154.780] wcscmp (_String1="messages_ja.properties", _String2="..") returned 1 [0154.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053638 [0154.780] wcscpy (in: _Dest=0x8053638, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.780] wcscat (in: _Dest=0x8053638, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.780] wcscat (in: _Dest=0x8053638, _Source="messages_ja.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties" [0154.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a0 [0154.782] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0154.782] wcscmp (_String1="messages_ko.properties", _String2=".") returned 1 [0154.782] wcscmp (_String1="messages_ko.properties", _String2="..") returned 1 [0154.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053528 [0154.783] wcscpy (in: _Dest=0x8053528, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.783] wcscat (in: _Dest=0x8053528, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.783] wcscat (in: _Dest=0x8053528, _Source="messages_ko.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties" [0154.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a4 [0154.784] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0154.784] wcscmp (_String1="messages_pt_BR.properties", _String2=".") returned 1 [0154.784] wcscmp (_String1="messages_pt_BR.properties", _String2="..") returned 1 [0154.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x80535b0 [0154.785] wcscpy (in: _Dest=0x80535b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.785] wcscat (in: _Dest=0x80535b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.785] wcscat (in: _Dest=0x80535b0, _Source="messages_pt_BR.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" [0154.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80535b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a8 [0154.786] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0154.786] wcscmp (_String1="messages_sv.properties", _String2=".") returned 1 [0154.786] wcscmp (_String1="messages_sv.properties", _String2="..") returned 1 [0154.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8054408 [0154.786] wcscpy (in: _Dest=0x8054408, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.786] wcscat (in: _Dest=0x8054408, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.786] wcscat (in: _Dest=0x8054408, _Source="messages_sv.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties" [0154.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25ac [0154.787] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0154.787] wcscmp (_String1="messages_zh_CN.properties", _String2=".") returned 1 [0154.787] wcscmp (_String1="messages_zh_CN.properties", _String2="..") returned 1 [0154.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054490 [0154.787] wcscpy (in: _Dest=0x8054490, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.787] wcscat (in: _Dest=0x8054490, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.787] wcscat (in: _Dest=0x8054490, _Source="messages_zh_CN.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" [0154.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25b0 [0154.788] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0154.788] wcscmp (_String1="messages_zh_HK.properties", _String2=".") returned 1 [0154.788] wcscmp (_String1="messages_zh_HK.properties", _String2="..") returned 1 [0154.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8054160 [0154.788] wcscpy (in: _Dest=0x8054160, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.788] wcscat (in: _Dest=0x8054160, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.788] wcscat (in: _Dest=0x8054160, _Source="messages_zh_HK.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" [0154.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25b4 [0154.789] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0154.789] wcscmp (_String1="messages_zh_TW.properties", _String2=".") returned 1 [0154.789] wcscmp (_String1="messages_zh_TW.properties", _String2="..") returned 1 [0154.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8052f50 [0154.789] wcscpy (in: _Dest=0x8052f50, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.789] wcscat (in: _Dest=0x8052f50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.790] wcscat (in: _Dest=0x8052f50, _Source="messages_zh_TW.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" [0154.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8052f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25b8 [0154.790] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0154.790] wcscmp (_String1="splash.gif", _String2=".") returned 1 [0154.790] wcscmp (_String1="splash.gif", _String2="..") returned 1 [0154.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39628 [0154.791] wcscpy (in: _Dest=0x3f39628, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0154.791] wcscat (in: _Dest=0x3f39628, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0154.791] wcscat (in: _Dest=0x3f39628, _Source="splash.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif" [0154.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25bc [0154.792] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 0 [0154.792] FindClose (in: hFindFile=0x8099090 | out: hFindFile=0x8099090) returned 1 [0154.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80484b0) returned 1 [0154.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ed80) returned 1 [0154.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303d598) returned 1 Thread: id = 1333 os_tid = 0xf7c [0144.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy.jar")) returned 0x20 [0147.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar", dwFileAttributes=0x20) returned 0 [0147.227] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.227] GetLastError () returned 0x5 [0147.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar", dwFileAttributes=0x20) returned 0 [0147.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe73e8) returned 1 Thread: id = 1334 os_tid = 0xf78 [0144.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e0f060 [0144.917] wcscpy (in: _Dest=0x3e0f060, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0144.917] wcscat (in: _Dest=0x3e0f060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0144.917] wcscat (in: _Dest=0x3e0f060, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\*" [0144.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047640 [0144.917] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80990d0 [0147.407] wcscmp (_String1=".", _String2=".") returned 0 [0147.407] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.407] wcscmp (_String1="..", _String2=".") returned 1 [0147.407] wcscmp (_String1="..", _String2="..") returned 0 [0147.407] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x148e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge.jar", cAlternateFileName="ACCESS~2.JAR")) returned 1 [0147.407] wcscmp (_String1="access-bridge.jar", _String2=".") returned 1 [0147.407] wcscmp (_String1="access-bridge.jar", _String2="..") returned 1 [0147.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32868 [0147.407] wcscpy (in: _Dest=0x3f32868, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0147.407] wcscat (in: _Dest=0x3f32868, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0147.407] wcscat (in: _Dest=0x3f32868, _Source="access-bridge.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar" [0151.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0151.816] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0151.816] wcscmp (_String1="dnsns.jar", _String2=".") returned 1 [0151.816] wcscmp (_String1="dnsns.jar", _String2="..") returned 1 [0151.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d1d0 [0151.816] wcscpy (in: _Dest=0x3d8d1d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.816] wcscat (in: _Dest=0x3d8d1d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.816] wcscat (in: _Dest=0x3d8d1d0, _Source="dnsns.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar" [0151.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0151.817] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0151.817] wcscmp (_String1="jaccess.jar", _String2=".") returned 1 [0151.818] wcscmp (_String1="jaccess.jar", _String2="..") returned 1 [0151.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c810 [0151.818] wcscpy (in: _Dest=0x3d8c810, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.818] wcscat (in: _Dest=0x3d8c810, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.818] wcscat (in: _Dest=0x3d8c810, _Source="jaccess.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar" [0151.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0151.834] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6994b1a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6994b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69997460, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf790d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0151.834] wcscmp (_String1="localedata.jar", _String2=".") returned 1 [0151.834] wcscmp (_String1="localedata.jar", _String2="..") returned 1 [0151.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a038 [0151.834] wcscpy (in: _Dest=0x3f3a038, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.834] wcscat (in: _Dest=0x3f3a038, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.834] wcscat (in: _Dest=0x3f3a038, _Source="localedata.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar" [0151.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0151.841] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0151.841] wcscmp (_String1="meta-index", _String2=".") returned 1 [0151.841] wcscmp (_String1="meta-index", _String2="..") returned 1 [0151.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8cbb8 [0151.841] wcscpy (in: _Dest=0x3d8cbb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.841] wcscat (in: _Dest=0x3d8cbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.841] wcscat (in: _Dest=0x3d8cbb8, _Source="meta-index" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index" [0151.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0151.843] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3e45, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0151.843] wcscmp (_String1="sunec.jar", _String2=".") returned 1 [0151.843] wcscmp (_String1="sunec.jar", _String2="..") returned 1 [0151.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e8f8 [0151.843] wcscpy (in: _Dest=0x3d8e8f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.843] wcscat (in: _Dest=0x3d8e8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.843] wcscat (in: _Dest=0x3d8e8f8, _Source="sunec.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar" [0151.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0151.844] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3057d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0151.844] wcscmp (_String1="sunjce_provider.jar", _String2=".") returned 1 [0151.844] wcscmp (_String1="sunjce_provider.jar", _String2="..") returned 1 [0151.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32ac0 [0151.844] wcscpy (in: _Dest=0x3f32ac0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.844] wcscat (in: _Dest=0x3f32ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.844] wcscat (in: _Dest=0x3f32ac0, _Source="sunjce_provider.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" [0151.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0151.846] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0151.846] wcscmp (_String1="sunmscapi.jar", _String2=".") returned 1 [0151.846] wcscmp (_String1="sunmscapi.jar", _String2="..") returned 1 [0151.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f399a8 [0151.846] wcscpy (in: _Dest=0x3f399a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.846] wcscat (in: _Dest=0x3f399a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.846] wcscat (in: _Dest=0x3f399a8, _Source="sunmscapi.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar" [0151.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f399a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0151.848] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x39fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0151.848] wcscmp (_String1="sunpkcs11.jar", _String2=".") returned 1 [0151.848] wcscmp (_String1="sunpkcs11.jar", _String2="..") returned 1 [0151.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a3b8 [0151.848] wcscpy (in: _Dest=0x3f3a3b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.849] wcscat (in: _Dest=0x3f3a3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.849] wcscat (in: _Dest=0x3f3a3b8, _Source="sunpkcs11.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" [0151.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0151.850] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0151.850] wcscmp (_String1="zipfs.jar", _String2=".") returned 1 [0151.850] wcscmp (_String1="zipfs.jar", _String2="..") returned 1 [0151.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e550 [0151.851] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.851] wcscat (in: _Dest=0x3d8e550, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.851] wcscat (in: _Dest=0x3d8e550, _Source="zipfs.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar" [0151.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0151.852] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0151.852] FindClose (in: hFindFile=0x80990d0 | out: hFindFile=0x80990d0) returned 1 [0151.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047640) returned 1 [0151.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f060) returned 1 [0151.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5e88) returned 1 Thread: id = 1335 os_tid = 0x804 [0144.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\flavormap.properties")) returned 0x20 [0147.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties", dwFileAttributes=0x20) returned 0 [0147.225] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\flavormap.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.225] GetLastError () returned 0x5 [0147.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties", dwFileAttributes=0x20) returned 0 [0147.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5390) returned 1 Thread: id = 1336 os_tid = 0x6b8 [0144.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.bfc")) returned 0x20 [0147.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc", dwFileAttributes=0x20) returned 0 [0147.261] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.261] GetLastError () returned 0x5 [0147.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc", dwFileAttributes=0x20) returned 0 [0147.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c810) returned 1 Thread: id = 1337 os_tid = 0xf74 [0144.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.properties.src")) returned 0x20 [0147.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src", dwFileAttributes=0x20) returned 0 [0147.223] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.223] GetLastError () returned 0x5 [0147.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src", dwFileAttributes=0x20) returned 0 [0147.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf908) returned 1 Thread: id = 1338 os_tid = 0xaf0 [0144.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3dba378 [0144.919] wcscpy (in: _Dest=0x3dba378, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0144.919] wcscat (in: _Dest=0x3dba378, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0144.919] wcscat (in: _Dest=0x3dba378, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\*" [0144.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0144.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099110 [0147.406] wcscmp (_String1=".", _String2=".") returned 0 [0147.406] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.406] wcscmp (_String1="..", _String2=".") returned 1 [0147.406] wcscmp (_String1="..", _String2="..") returned 0 [0147.406] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0147.406] wcscmp (_String1="LucidaBrightDemiBold.ttf", _String2=".") returned 1 [0147.406] wcscmp (_String1="LucidaBrightDemiBold.ttf", _String2="..") returned 1 [0147.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f6f0 [0147.406] wcscpy (in: _Dest=0x3e1f6f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0147.406] wcscat (in: _Dest=0x3e1f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0147.406] wcscat (in: _Dest=0x3e1f6f0, _Source="LucidaBrightDemiBold.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" [0149.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0149.576] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0149.576] wcscmp (_String1="LucidaBrightDemiItalic.ttf", _String2=".") returned 1 [0149.576] wcscmp (_String1="LucidaBrightDemiItalic.ttf", _String2="..") returned 1 [0149.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ecd8 [0149.576] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0149.576] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0149.576] wcscat (in: _Dest=0x3e1ecd8, _Source="LucidaBrightDemiItalic.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" [0149.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0149.577] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0149.577] wcscmp (_String1="LucidaBrightItalic.ttf", _String2=".") returned 1 [0149.577] wcscmp (_String1="LucidaBrightItalic.ttf", _String2="..") returned 1 [0149.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24140 [0149.577] wcscpy (in: _Dest=0x3e24140, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0149.577] wcscat (in: _Dest=0x3e24140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0149.577] wcscat (in: _Dest=0x3e24140, _Source="LucidaBrightItalic.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" [0149.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0149.578] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0149.578] wcscmp (_String1="LucidaBrightRegular.ttf", _String2=".") returned 1 [0149.578] wcscmp (_String1="LucidaBrightRegular.ttf", _String2="..") returned 1 [0149.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1f118 [0149.578] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0149.579] wcscat (in: _Dest=0x3e1f118, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0149.579] wcscat (in: _Dest=0x3e1f118, _Source="LucidaBrightRegular.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" [0149.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0149.579] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0149.580] wcscmp (_String1="LucidaSansDemiBold.ttf", _String2=".") returned 1 [0149.580] wcscmp (_String1="LucidaSansDemiBold.ttf", _String2="..") returned 1 [0149.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e23ec0 [0149.580] wcscpy (in: _Dest=0x3e23ec0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0149.580] wcscat (in: _Dest=0x3e23ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0149.580] wcscat (in: _Dest=0x3e23ec0, _Source="LucidaSansDemiBold.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" [0149.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0149.581] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0149.581] wcscmp (_String1="LucidaSansRegular.ttf", _String2=".") returned 1 [0149.581] wcscmp (_String1="LucidaSansRegular.ttf", _String2="..") returned 1 [0149.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e241c0 [0149.581] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0149.581] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0149.581] wcscat (in: _Dest=0x3e241c0, _Source="LucidaSansRegular.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" [0149.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e241c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0149.582] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0149.582] wcscmp (_String1="LucidaTypewriterBold.ttf", _String2=".") returned 1 [0149.582] wcscmp (_String1="LucidaTypewriterBold.ttf", _String2="..") returned 1 [0149.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f090 [0149.582] wcscpy (in: _Dest=0x3e1f090, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0149.582] wcscat (in: _Dest=0x3e1f090, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0149.582] wcscat (in: _Dest=0x3e1f090, _Source="LucidaTypewriterBold.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" [0149.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0149.583] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0149.583] wcscmp (_String1="LucidaTypewriterRegular.ttf", _String2=".") returned 1 [0149.583] wcscmp (_String1="LucidaTypewriterRegular.ttf", _String2="..") returned 1 [0149.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35e20 [0149.583] wcscpy (in: _Dest=0x3f35e20, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0149.583] wcscat (in: _Dest=0x3f35e20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0149.583] wcscat (in: _Dest=0x3f35e20, _Source="LucidaTypewriterRegular.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" [0149.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0149.585] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0149.585] FindClose (in: hFindFile=0x8099110 | out: hFindFile=0x8099110) returned 1 [0149.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0149.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba378) returned 1 [0149.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303d4e8) returned 1 Thread: id = 1339 os_tid = 0xf70 [0144.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e23900 [0144.919] wcscpy (in: _Dest=0x3e23900, _Source="C:\\Program Files\\Java\\jre7\\lib\\i386" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386") returned="C:\\Program Files\\Java\\jre7\\lib\\i386" [0144.919] wcscat (in: _Dest=0x3e23900, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\" [0144.919] wcscat (in: _Dest=0x3e23900, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\*" [0144.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0144.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0147.140] wcscmp (_String1=".", _String2=".") returned 0 [0147.140] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.140] wcscmp (_String1="..", _String2=".") returned 1 [0147.141] wcscmp (_String1="..", _String2="..") returned 0 [0147.141] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0147.141] wcscmp (_String1="jvm.cfg", _String2=".") returned 1 [0147.141] wcscmp (_String1="jvm.cfg", _String2="..") returned 1 [0147.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7328 [0147.141] wcscpy (in: _Dest=0x2fe7328, _Source="C:\\Program Files\\Java\\jre7\\lib\\i386" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386") returned="C:\\Program Files\\Java\\jre7\\lib\\i386" [0147.141] wcscat (in: _Dest=0x2fe7328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\" [0147.141] wcscat (in: _Dest=0x2fe7328, _Source="jvm.cfg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg" [0149.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0149.566] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0149.566] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0149.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0149.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23900) returned 1 [0149.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6608) returned 1 Thread: id = 1340 os_tid = 0x824 [0144.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x831c458 [0144.920] wcscpy (in: _Dest=0x831c458, _Source="C:\\Program Files\\Java\\jre7\\lib\\images" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images") returned="C:\\Program Files\\Java\\jre7\\lib\\images" [0144.920] wcscat (in: _Dest=0x831c458, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\" [0144.920] wcscat (in: _Dest=0x831c458, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\*" [0144.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048248 [0144.920] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0147.139] wcscmp (_String1=".", _String2=".") returned 0 [0147.139] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.139] wcscmp (_String1="..", _String2=".") returned 1 [0147.139] wcscmp (_String1="..", _String2="..") returned 0 [0147.139] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0147.139] wcscmp (_String1="cursors", _String2=".") returned 1 [0147.139] wcscmp (_String1="cursors", _String2="..") returned 1 [0147.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d370 [0147.140] wcscpy (in: _Dest=0x3d8d370, _Source="C:\\Program Files\\Java\\jre7\\lib\\images" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images") returned="C:\\Program Files\\Java\\jre7\\lib\\images" [0147.140] wcscat (in: _Dest=0x3d8d370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\" [0147.140] wcscat (in: _Dest=0x3d8d370, _Source="cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0149.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0149.564] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0149.564] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0149.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048248) returned 1 [0149.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831c458) returned 1 [0149.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303c888) returned 1 Thread: id = 1341 os_tid = 0x844 [0144.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\javafx.properties")) returned 0x20 [0147.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties", dwFileAttributes=0x20) returned 0 [0147.256] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\javafx.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.256] GetLastError () returned 0x5 [0147.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties", dwFileAttributes=0x20) returned 0 [0147.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5010) returned 1 Thread: id = 1342 os_tid = 0x854 [0144.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\javaws.jar")) returned 0x20 [0147.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar", dwFileAttributes=0x20) returned 0 [0147.137] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\javaws.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.137] GetLastError () returned 0x5 [0147.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar", dwFileAttributes=0x20) returned 0 [0147.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7328) returned 1 Thread: id = 1343 os_tid = 0x864 [0144.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jce.jar")) returned 0x20 [0147.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar", dwFileAttributes=0x20) returned 0 [0147.216] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jce.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.216] GetLastError () returned 0x5 [0147.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar", dwFileAttributes=0x20) returned 0 [0147.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303c830) returned 1 Thread: id = 1344 os_tid = 0x874 [0144.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x831c4b0 [0144.921] wcscpy (in: _Dest=0x831c4b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0144.921] wcscat (in: _Dest=0x831c4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\" [0144.921] wcscat (in: _Dest=0x831c4b0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\*" [0144.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049f28 [0144.921] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0147.284] wcscmp (_String1=".", _String2=".") returned 0 [0147.284] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.284] wcscmp (_String1="..", _String2=".") returned 1 [0147.284] wcscmp (_String1="..", _String2="..") returned 0 [0147.284] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x488e, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0147.284] wcscmp (_String1="default.jfc", _String2=".") returned 1 [0147.284] wcscmp (_String1="default.jfc", _String2="..") returned 1 [0147.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c810 [0147.284] wcscpy (in: _Dest=0x3d8c810, _Source="C:\\Program Files\\Java\\jre7\\lib\\jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0147.284] wcscat (in: _Dest=0x3d8c810, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\" [0147.284] wcscat (in: _Dest=0x3d8c810, _Source="default.jfc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc" [0148.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0148.309] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679c0e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0148.309] wcscmp (_String1="profile.jfc", _String2=".") returned 1 [0148.309] wcscmp (_String1="profile.jfc", _String2="..") returned 1 [0148.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dc60 [0148.310] wcscpy (in: _Dest=0x3d8dc60, _Source="C:\\Program Files\\Java\\jre7\\lib\\jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0148.310] wcscat (in: _Dest=0x3d8dc60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\" [0148.310] wcscat (in: _Dest=0x3d8dc60, _Source="profile.jfc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc" [0148.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8dc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0148.311] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679c0e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0148.311] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0148.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049f28) returned 1 [0148.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831c4b0) returned 1 [0148.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6018) returned 1 Thread: id = 1345 os_tid = 0x11cc [0144.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr.jar")) returned 0x20 [0147.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar", dwFileAttributes=0x20) returned 0 [0147.134] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.135] GetLastError () returned 0x5 [0147.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar", dwFileAttributes=0x20) returned 0 [0147.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303c8e0) returned 1 Thread: id = 1346 os_tid = 0x11d4 [0144.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfxrt.jar")) returned 0x20 [0147.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar", dwFileAttributes=0x20) returned 0 [0147.282] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfxrt.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.282] GetLastError () returned 0x5 [0147.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar", dwFileAttributes=0x20) returned 0 [0147.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe74a8) returned 1 Thread: id = 1347 os_tid = 0x11dc [0144.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jsse.jar")) returned 0x20 [0147.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar", dwFileAttributes=0x20) returned 0 [0147.132] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jsse.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.132] GetLastError () returned 0x5 [0147.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar", dwFileAttributes=0x20) returned 0 [0147.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303c938) returned 1 Thread: id = 1348 os_tid = 0x11e0 [0144.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre7\\lib\\jvm.hprof.txt")) returned 0x20 [0147.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt", dwFileAttributes=0x20) returned 0 [0147.130] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre7\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.130] GetLastError () returned 0x5 [0147.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt", dwFileAttributes=0x20) returned 0 [0147.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d370) returned 1 Thread: id = 1349 os_tid = 0x11e4 [0144.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6848 [0144.923] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" [0144.923] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\" [0144.923] wcscat (in: _Dest=0x2fe6848, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*" [0144.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047b10 [0144.923] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0147.220] wcscmp (_String1=".", _String2=".") returned 0 [0147.220] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.220] wcscmp (_String1="..", _String2=".") returned 1 [0147.220] wcscmp (_String1="..", _String2="..") returned 0 [0147.221] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.221] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0147.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047b10) returned 1 [0147.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0147.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7388) returned 1 Thread: id = 1350 os_tid = 0x11f0 [0144.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f34078 [0144.924] wcscpy (in: _Dest=0x3f34078, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" [0144.924] wcscat (in: _Dest=0x3f34078, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\" [0144.924] wcscat (in: _Dest=0x3f34078, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*" [0144.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048718 [0144.924] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0146.267] wcscmp (_String1=".", _String2=".") returned 0 [0146.267] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.267] wcscmp (_String1="..", _String2=".") returned 1 [0146.267] wcscmp (_String1="..", _String2="..") returned 0 [0146.267] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xea2144c0, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0146.267] wcscmp (_String1="RacWmiDatabase.sdf", _String2=".") returned 1 [0146.267] wcscmp (_String1="RacWmiDatabase.sdf", _String2="..") returned 1 [0146.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34c20 [0146.267] wcscpy (in: _Dest=0x3f34c20, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" [0146.267] wcscat (in: _Dest=0x3f34c20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\" [0146.267] wcscat (in: _Dest=0x3f34c20, _Source="RacWmiDatabase.sdf" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0149.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0149.556] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xea2144c0, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0 [0149.556] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0149.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048718) returned 1 [0149.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34078) returned 1 [0149.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cbb8) returned 1 Thread: id = 1351 os_tid = 0x11f4 [0144.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8dc60 [0144.925] wcscpy (in: _Dest=0x3d8dc60, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0144.925] wcscat (in: _Dest=0x3d8dc60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\" [0144.925] wcscat (in: _Dest=0x3d8dc60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*" [0144.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80497f0 [0144.925] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0146.266] wcscmp (_String1=".", _String2=".") returned 0 [0146.266] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc3911380, ftLastAccessTime.dwHighDateTime=0x1d6a229, ftLastWriteTime.dwLowDateTime=0xc3911380, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.266] wcscmp (_String1="..", _String2=".") returned 1 [0146.266] wcscmp (_String1="..", _String2="..") returned 0 [0146.266] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5093060, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5093060, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xe7e5fac0, ftLastWriteTime.dwHighDateTime=0x1d6a229, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0146.266] wcscmp (_String1="RacDatabase.sdf", _String2=".") returned 1 [0146.266] wcscmp (_String1="RacDatabase.sdf", _String2="..") returned 1 [0146.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5508 [0146.267] wcscpy (in: _Dest=0x3dc5508, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0146.267] wcscat (in: _Dest=0x3dc5508, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\" [0146.267] wcscat (in: _Dest=0x3dc5508, _Source="RacDatabase.sdf" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" [0148.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0148.243] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0148.244] wcscmp (_String1="RacMetaData.dat", _String2=".") returned 1 [0148.244] wcscmp (_String1="RacMetaData.dat", _String2="..") returned 1 [0148.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24440 [0148.244] wcscpy (in: _Dest=0x3e24440, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0148.244] wcscat (in: _Dest=0x3e24440, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\" [0148.244] wcscat (in: _Dest=0x3e24440, _Source="RacMetaData.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" [0148.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0148.249] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0 [0148.249] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0148.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80497f0) returned 1 [0148.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dc60) returned 1 [0148.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 Thread: id = 1352 os_tid = 0x1210 [0144.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333768 [0144.925] wcscpy (in: _Dest=0x333768, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0144.925] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\" [0144.925] wcscat (in: _Dest=0x333768, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*" [0144.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0144.925] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0147.213] wcscmp (_String1=".", _String2=".") returned 0 [0147.213] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.213] wcscmp (_String1="..", _String2=".") returned 1 [0147.213] wcscmp (_String1="..", _String2="..") returned 0 [0147.214] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0147.214] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0147.214] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0147.214] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0147.214] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0147.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0147.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 [0147.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 1353 os_tid = 0x1214 [0144.926] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties")) returned 0x2020 [0147.126] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", dwFileAttributes=0x20) returned 1 [0147.127] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12ec [0147.127] GetFileSizeEx (in: hFile=0x12ec, lpFileSize=0xbcdfce0 | out: lpFileSize=0xbcdfce0*=707) returned 1 [0147.127] SetFilePointerEx (in: hFile=0x12ec, liDistanceToMove=0x2bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.127] ReadFile (in: hFile=0x12ec, lpBuffer=0xbcdfcec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbcdfcc8, lpOverlapped=0x0 | out: lpBuffer=0xbcdfcec*, lpNumberOfBytesRead=0xbcdfcc8*=0x4, lpOverlapped=0x0) returned 1 [0147.369] SetFilePointerEx (in: hFile=0x12ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0147.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0147.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0147.370] NtQuerySystemTime (in: CurrentTime=0xbcdfc68 | out: CurrentTime=0xbcdfc68*=132471540159408000) returned 0x0 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x4652f0d0 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x57adebab [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x6fe21b44 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x68601e17 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0xac6fd16 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x24891516 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x6c029488 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x61e8c35f [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x3ae21d36 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x30da02d3 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0xc2eb221 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x6551c6ea [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x4485f6ed [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0xb920cc4 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x656e593 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x58264a86 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x4baf843b [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x3ca8b39b [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x3d7eb430 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x5c19f1ef [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x22394649 [0147.370] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0xf90e33e [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x33501d4f [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x126ef5e9 [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x2a05b041 [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x29abde09 [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x221a14ec [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x3ecefd21 [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x8eb7bfd [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x6e81a907 [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x2f3316aa [0147.371] RtlRandomEx (in: Seed=0xbcdfc60 | out: Seed=0xbcdfc60) returned 0x3317b8a1 [0147.382] ReadFile (in: hFile=0x12ec, lpBuffer=0x8159080, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0xbcdfc5c, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesRead=0xbcdfc5c*=0x2c3, lpOverlapped=0x0) returned 1 [0147.382] SetFilePointerEx (in: hFile=0x12ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.382] WriteFile (in: hFile=0x12ec, lpBuffer=0x815cc88*, nNumberOfBytesToWrite=0x2c3, lpNumberOfBytesWritten=0xbcdfc60, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesWritten=0xbcdfc60*=0x2c3, lpOverlapped=0x0) returned 1 [0147.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0147.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c720 [0147.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c720) returned 1 [0147.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0147.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0147.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0147.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095cf0) returned 1 [0147.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x8098f50 [0147.417] SetFilePointerEx (in: hFile=0x12ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.417] WriteFile (in: hFile=0x12ec, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xbcdfcd4, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0xbcdfcd4*=0x11c, lpOverlapped=0x0) returned 1 [0147.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0147.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8098ed0) returned 1 [0147.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c720) returned 1 [0147.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8098f50) returned 1 [0147.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0147.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0147.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0147.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0147.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35af88 [0147.425] wcscpy (in: _Dest=0x35af88, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" [0147.426] wcscat (in: _Dest=0x35af88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.f0dbec" [0147.426] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.f0dbec", NtPathName=0xbcdfc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e354d8 [0147.430] FlushFileBuffers (hFile=0x12ec) returned 1 [0147.436] CloseHandle (hObject=0x12ec) returned 1 [0147.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7698 [0147.440] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0147.440] wcscat (in: _Dest=0x2c7698, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\F0DBEC-Readme.txt" [0147.440] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\f0dbec-readme.txt")) returned 0xffffffff [0147.440] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1184 [0147.451] WriteFile (in: hFile=0x1184, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbcdfc7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbcdfc7c*=0x70c, lpOverlapped=0x0) returned 1 [0147.481] CloseHandle (hObject=0x1184) returned 1 [0147.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 [0147.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 Thread: id = 1354 os_tid = 0xc68 [0144.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2038 [0144.926] wcscpy (in: _Dest=0x3eb2038, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0144.926] wcscat (in: _Dest=0x3eb2038, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0144.926] wcscat (in: _Dest=0x3eb2038, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*" [0144.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0144.926] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d87950, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0147.405] wcscmp (_String1=".", _String2=".") returned 0 [0147.405] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d87950, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.405] wcscmp (_String1="..", _String2=".") returned 1 [0147.405] wcscmp (_String1="..", _String2="..") returned 0 [0147.405] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0x230b0c00, ftLastWriteTime.dwHighDateTime=0x1d38ef3, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseline.versions", cAlternateFileName="BASELI~1.VER")) returned 1 [0147.405] wcscmp (_String1="baseline.versions", _String2=".") returned 1 [0147.405] wcscmp (_String1="baseline.versions", _String2="..") returned 1 [0147.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35ba88 [0147.405] wcscpy (in: _Dest=0x35ba88, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0147.405] wcscat (in: _Dest=0x35ba88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0147.405] wcscat (in: _Dest=0x35ba88, _Source="baseline.versions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" [0149.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35ba88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e0 [0149.195] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xc1ed2680, ftLastWriteTime.dwHighDateTime=0x1ce952b, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist.dynamic", cAlternateFileName="BLACKL~1.DYN")) returned 1 [0149.195] wcscmp (_String1="blacklist.dynamic", _String2=".") returned 1 [0149.195] wcscmp (_String1="blacklist.dynamic", _String2="..") returned 1 [0149.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bbe8 [0149.196] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0149.196] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0149.196] wcscat (in: _Dest=0x35bbe8, _Source="blacklist.dynamic" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" [0149.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0149.197] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0x191caa00, ftLastWriteTime.dwHighDateTime=0x1ce1f40, nFileSizeHigh=0x0, nFileSizeLow=0x12, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0149.197] wcscmp (_String1="blacklisted.certs", _String2=".") returned 1 [0149.197] wcscmp (_String1="blacklisted.certs", _String2="..") returned 1 [0149.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c798 [0149.197] wcscpy (in: _Dest=0x35c798, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0149.197] wcscat (in: _Dest=0x35c798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0149.197] wcscat (in: _Dest=0x35c798, _Source="blacklisted.certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" [0149.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0149.199] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.timestamp", cAlternateFileName="UPDATE~1.TIM")) returned 1 [0149.199] wcscmp (_String1="update.timestamp", _String2=".") returned 1 [0149.199] wcscmp (_String1="update.timestamp", _String2="..") returned 1 [0149.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187418 [0149.199] wcscpy (in: _Dest=0x8187418, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0149.199] wcscat (in: _Dest=0x8187418, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0149.199] wcscat (in: _Dest=0x8187418, _Source="update.timestamp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" [0149.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0149.200] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.timestamp", cAlternateFileName="UPDATE~1.TIM")) returned 0 [0149.200] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0149.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0149.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2038) returned 1 [0149.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 1355 os_tid = 0x518 [0144.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a658 [0144.927] wcscpy (in: _Dest=0x831a658, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" [0144.927] wcscat (in: _Dest=0x831a658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\" [0144.927] wcscat (in: _Dest=0x831a658, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*" [0144.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047fe0 [0144.927] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0147.209] wcscmp (_String1=".", _String2=".") returned 0 [0147.209] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.210] wcscmp (_String1="..", _String2=".") returned 1 [0147.210] wcscmp (_String1="..", _String2="..") returned 0 [0147.210] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xd45a7840, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0147.210] wcscmp (_String1="si", _String2=".") returned 1 [0147.210] wcscmp (_String1="si", _String2="..") returned 1 [0147.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1f998 [0147.210] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" [0147.210] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\" [0147.210] wcscat (in: _Dest=0x3e1f998, _Source="si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" [0148.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0148.277] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xd45a7840, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0 [0148.277] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0148.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047fe0) returned 1 [0148.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a658) returned 1 [0148.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0d88) returned 1 Thread: id = 1356 os_tid = 0xf30 [0144.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bbe0 [0144.927] wcscpy (in: _Dest=0x3d8bbe0, _Source="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" [0144.927] wcscat (in: _Dest=0x3d8bbe0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\" [0144.927] wcscat (in: _Dest=0x3d8bbe0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*" [0144.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049cc0 [0144.927] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0147.218] wcscmp (_String1=".", _String2=".") returned 0 [0147.218] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.218] wcscmp (_String1="..", _String2=".") returned 1 [0147.218] wcscmp (_String1="..", _String2="..") returned 0 [0147.218] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.218] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0147.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049cc0) returned 1 [0147.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bbe0) returned 1 [0147.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b970) returned 1 Thread: id = 1357 os_tid = 0x74c [0144.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c428 [0144.928] wcscpy (in: _Dest=0x35c428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0144.928] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\" [0144.928] wcscat (in: _Dest=0x35c428, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*" [0144.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047170 [0144.928] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0147.124] wcscmp (_String1=".", _String2=".") returned 0 [0147.124] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.124] wcscmp (_String1="..", _String2=".") returned 1 [0147.124] wcscmp (_String1="..", _String2="..") returned 0 [0147.125] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.125] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0147.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047170) returned 1 [0147.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 [0147.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81876b8) returned 1 Thread: id = 1358 os_tid = 0x9ec [0144.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1d68 [0144.929] wcscpy (in: _Dest=0x3eb1d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0144.929] wcscat (in: _Dest=0x3eb1d68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0144.929] wcscat (in: _Dest=0x3eb1d68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*" [0144.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046f08 [0144.929] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3022350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0147.123] wcscmp (_String1=".", _String2=".") returned 0 [0147.123] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3022350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.123] wcscmp (_String1="..", _String2=".") returned 1 [0147.123] wcscmp (_String1="..", _String2="..") returned 0 [0147.123] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5272e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0147.123] wcscmp (_String1="metadata", _String2=".") returned 1 [0147.124] wcscmp (_String1="metadata", _String2="..") returned 1 [0147.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819a598 [0147.124] wcscpy (in: _Dest=0x819a598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0147.124] wcscat (in: _Dest=0x819a598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0147.124] wcscat (in: _Dest=0x819a598, _Source="metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" [0148.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b0 [0148.267] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5209e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0148.267] wcscmp (_String1="reports", _String2=".") returned 1 [0148.267] wcscmp (_String1="reports", _String2="..") returned 1 [0148.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2a4a0 [0148.267] wcscpy (in: _Dest=0x3e2a4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0148.267] wcscat (in: _Dest=0x3e2a4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0148.267] wcscat (in: _Dest=0x3e2a4a0, _Source="reports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0148.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2a4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0148.268] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbba09b80, ftLastWriteTime.dwHighDateTime=0x1d2da1f, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0148.268] wcscmp (_String1="settings.dat", _String2=".") returned 1 [0148.268] wcscmp (_String1="settings.dat", _String2="..") returned 1 [0148.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ce0 [0148.269] wcscpy (in: _Dest=0x8186ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0148.269] wcscat (in: _Dest=0x8186ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0148.269] wcscat (in: _Dest=0x8186ce0, _Source="settings.dat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" [0148.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0148.270] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbba09b80, ftLastWriteTime.dwHighDateTime=0x1d2da1f, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0148.270] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0148.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046f08) returned 1 [0148.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1d68) returned 1 [0148.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f448) returned 1 Thread: id = 1359 os_tid = 0xf44 [0144.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb20c8 [0144.929] wcscpy (in: _Dest=0x3eb20c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0144.929] wcscat (in: _Dest=0x3eb20c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0144.929] wcscat (in: _Dest=0x3eb20c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*" [0144.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049588 [0144.929] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fd24d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f10 [0147.404] wcscmp (_String1=".", _String2=".") returned 0 [0147.404] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fd24d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.433] wcscmp (_String1="..", _String2=".") returned 1 [0147.433] wcscmp (_String1="..", _String2="..") returned 0 [0147.433] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0147.433] wcscmp (_String1="Cache", _String2=".") returned 1 [0147.433] wcscmp (_String1="Cache", _String2="..") returned 1 [0147.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2bd90 [0147.433] wcscpy (in: _Dest=0x3e2bd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0147.433] wcscat (in: _Dest=0x3e2bd90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0147.434] wcscat (in: _Dest=0x3e2bd90, _Source="Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0156.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2bd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0156.667] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f39f50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0156.667] wcscmp (_String1="Cookies", _String2=".") returned 1 [0156.667] wcscmp (_String1="Cookies", _String2="..") returned 1 [0156.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3ca98 [0156.667] wcscpy (in: _Dest=0x3e3ca98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.667] wcscat (in: _Dest=0x3e3ca98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.667] wcscat (in: _Dest=0x3e3ca98, _Source="Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" [0156.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ca98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aac [0156.669] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0156.669] wcscmp (_String1="Cookies-journal", _String2=".") returned 1 [0156.669] wcscmp (_String1="Cookies-journal", _String2="..") returned 1 [0156.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d530 [0156.669] wcscpy (in: _Dest=0x3e2d530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.669] wcscat (in: _Dest=0x3e2d530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.669] wcscat (in: _Dest=0x3e2d530, _Source="Cookies-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" [0156.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab0 [0156.671] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe654ffa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe654ffa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8a55840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0156.671] wcscmp (_String1="Current Session", _String2=".") returned 1 [0156.671] wcscmp (_String1="Current Session", _String2="..") returned 1 [0156.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d488 [0156.671] wcscpy (in: _Dest=0x3e2d488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.671] wcscat (in: _Dest=0x3e2d488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.671] wcscat (in: _Dest=0x3e2d488, _Source="Current Session" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" [0156.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4 [0156.672] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8d4ad70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8d4ad70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0156.672] wcscmp (_String1="Current Tabs", _String2=".") returned 1 [0156.672] wcscmp (_String1="Current Tabs", _String2="..") returned 1 [0156.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11788 [0156.673] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.673] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.673] wcscat (in: _Dest=0x3e11788, _Source="Current Tabs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" [0156.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab8 [0156.674] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0156.674] wcscmp (_String1="data_reduction_proxy_leveldb", _String2=".") returned 1 [0156.674] wcscmp (_String1="data_reduction_proxy_leveldb", _String2="..") returned 1 [0156.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81df648 [0156.674] wcscpy (in: _Dest=0x81df648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.674] wcscat (in: _Dest=0x81df648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.674] wcscat (in: _Dest=0x81df648, _Source="data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0156.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81df648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2abc [0156.676] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f94030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5030430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~2")) returned 1 [0156.676] wcscmp (_String1="Extension Rules", _String2=".") returned 1 [0156.676] wcscmp (_String1="Extension Rules", _String2="..") returned 1 [0156.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d290 [0156.676] wcscpy (in: _Dest=0x3e2d290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.676] wcscat (in: _Dest=0x3e2d290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.676] wcscat (in: _Dest=0x3e2d290, _Source="Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0156.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac0 [0156.677] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c17230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~3")) returned 1 [0156.677] wcscmp (_String1="Extension State", _String2=".") returned 1 [0156.677] wcscmp (_String1="Extension State", _String2="..") returned 1 [0156.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d680 [0156.677] wcscpy (in: _Dest=0x3e2d680, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.678] wcscat (in: _Dest=0x3e2d680, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.678] wcscat (in: _Dest=0x3e2d680, _Source="Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0156.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac4 [0156.679] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6173350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6173350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0156.679] wcscmp (_String1="Extensions", _String2=".") returned 1 [0156.679] wcscmp (_String1="Extensions", _String2="..") returned 1 [0156.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11468 [0156.680] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.680] wcscat (in: _Dest=0x3e11468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.680] wcscat (in: _Dest=0x3e11468, _Source="Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0156.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e11468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac8 [0156.681] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f2b540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f2b540, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0156.681] wcscmp (_String1="Favicons", _String2=".") returned 1 [0156.681] wcscmp (_String1="Favicons", _String2="..") returned 1 [0156.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c4a8 [0156.682] wcscpy (in: _Dest=0x3e3c4a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.682] wcscat (in: _Dest=0x3e3c4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.682] wcscat (in: _Dest=0x3e3c4a8, _Source="Favicons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" [0156.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2acc [0156.683] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0156.683] wcscmp (_String1="Favicons-journal", _String2=".") returned 1 [0156.683] wcscmp (_String1="Favicons-journal", _String2="..") returned 1 [0156.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d098 [0156.683] wcscpy (in: _Dest=0x3e2d098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.683] wcscat (in: _Dest=0x3e2d098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.683] wcscat (in: _Dest=0x3e2d098, _Source="Favicons-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" [0156.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ad0 [0156.684] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0156.685] wcscmp (_String1="Google Profile.ico", _String2=".") returned 1 [0156.685] wcscmp (_String1="Google Profile.ico", _String2="..") returned 1 [0156.685] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3283950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3283950, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8cb27f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0156.685] wcscmp (_String1="History", _String2=".") returned 1 [0156.685] wcscmp (_String1="History", _String2="..") returned 1 [0156.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d710 [0156.685] wcscpy (in: _Dest=0x3e3d710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.685] wcscat (in: _Dest=0x3e3d710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.685] wcscat (in: _Dest=0x3e3d710, _Source="History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" [0156.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ad4 [0156.686] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4ea9260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ea9260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8ac3610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x7df, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0156.686] wcscmp (_String1="History Provider Cache", _String2=".") returned 1 [0156.686] wcscmp (_String1="History Provider Cache", _String2="..") returned 1 [0156.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d41f48 [0156.686] wcscpy (in: _Dest=0x3d41f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.686] wcscat (in: _Dest=0x3d41f48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.686] wcscat (in: _Dest=0x3d41f48, _Source="History Provider Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" [0156.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ad8 [0156.688] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3283950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3283950, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8cd8950, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0156.688] wcscmp (_String1="History-journal", _String2=".") returned 1 [0156.688] wcscmp (_String1="History-journal", _String2="..") returned 1 [0156.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2cf48 [0156.688] wcscpy (in: _Dest=0x3e2cf48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.688] wcscat (in: _Dest=0x3e2cf48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.688] wcscat (in: _Dest=0x3e2cf48, _Source="History-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" [0156.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2adc [0156.689] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~1")) returned 1 [0156.689] wcscmp (_String1="JumpListIcons", _String2=".") returned 1 [0156.689] wcscmp (_String1="JumpListIcons", _String2="..") returned 1 [0156.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2de60 [0156.689] wcscpy (in: _Dest=0x3e2de60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.689] wcscat (in: _Dest=0x3e2de60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.690] wcscat (in: _Dest=0x3e2de60, _Source="JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0156.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2de60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae0 [0156.691] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74cf430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74cf430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0156.691] wcscmp (_String1="Local Extension Settings", _String2=".") returned 1 [0156.691] wcscmp (_String1="Local Extension Settings", _String2="..") returned 1 [0156.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e1648 [0156.691] wcscpy (in: _Dest=0x81e1648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.691] wcscat (in: _Dest=0x81e1648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.691] wcscat (in: _Dest=0x81e1648, _Source="Local Extension Settings" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0156.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e1648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae4 [0156.693] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0156.693] wcscmp (_String1="Login Data", _String2=".") returned 1 [0156.693] wcscmp (_String1="Login Data", _String2="..") returned 1 [0156.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e10a68 [0156.693] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.693] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.693] wcscat (in: _Dest=0x3e10a68, _Source="Login Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" [0156.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae8 [0156.694] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0156.694] wcscmp (_String1="Login Data-journal", _String2=".") returned 1 [0156.694] wcscmp (_String1="Login Data-journal", _String2="..") returned 1 [0156.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da778 [0156.694] wcscpy (in: _Dest=0x81da778, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.695] wcscat (in: _Dest=0x81da778, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.695] wcscat (in: _Dest=0x81da778, _Source="Login Data-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" [0156.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aec [0156.696] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56a0360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56a0360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe583ccf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0156.696] wcscmp (_String1="Network Action Predictor", _String2=".") returned 1 [0156.696] wcscmp (_String1="Network Action Predictor", _String2="..") returned 1 [0156.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e1700 [0156.696] wcscpy (in: _Dest=0x81e1700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.696] wcscat (in: _Dest=0x81e1700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.696] wcscat (in: _Dest=0x81e1700, _Source="Network Action Predictor" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" [0156.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af0 [0156.697] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56a2a70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56a2a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe586b320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0156.697] wcscmp (_String1="Network Action Predictor-journal", _String2=".") returned 1 [0156.697] wcscmp (_String1="Network Action Predictor-journal", _String2="..") returned 1 [0156.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6458 [0156.697] wcscpy (in: _Dest=0x81d6458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.697] wcscat (in: _Dest=0x81d6458, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.697] wcscat (in: _Dest=0x81d6458, _Source="Network Action Predictor-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" [0156.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af4 [0156.699] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8d4ad70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8d4ad70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1 [0156.699] wcscmp (_String1="Network Persistent State", _String2=".") returned 1 [0156.699] wcscmp (_String1="Network Persistent State", _String2="..") returned 1 [0156.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e17b8 [0156.699] wcscpy (in: _Dest=0x81e17b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.699] wcscat (in: _Dest=0x81e17b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.699] wcscat (in: _Dest=0x81e17b8, _Source="Network Persistent State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" [0156.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e17b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af8 [0156.700] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b84760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b84760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f86210, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0156.700] wcscmp (_String1="Origin Bound Certs", _String2=".") returned 1 [0156.700] wcscmp (_String1="Origin Bound Certs", _String2="..") returned 1 [0156.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da828 [0156.700] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.700] wcscat (in: _Dest=0x81da828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.700] wcscat (in: _Dest=0x81da828, _Source="Origin Bound Certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" [0156.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2afc [0156.701] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b84760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b84760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f86210, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0156.701] wcscmp (_String1="Origin Bound Certs-journal", _String2=".") returned 1 [0156.701] wcscmp (_String1="Origin Bound Certs-journal", _String2="..") returned 1 [0156.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81df708 [0156.702] wcscpy (in: _Dest=0x81df708, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.702] wcscat (in: _Dest=0x81df708, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.702] wcscat (in: _Dest=0x81df708, _Source="Origin Bound Certs-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" [0156.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b00 [0156.703] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8fac370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fac370, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fac370, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1a55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0156.703] wcscmp (_String1="Preferences", _String2=".") returned 1 [0156.703] wcscmp (_String1="Preferences", _String2="..") returned 1 [0156.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11fa8 [0156.703] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0156.703] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0156.703] wcscat (in: _Dest=0x3e11fa8, _Source="Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" [0156.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b04 [0157.397] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4309900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0157.397] wcscmp (_String1="previews_opt_out.db", _String2=".") returned 1 [0157.397] wcscmp (_String1="previews_opt_out.db", _String2="..") returned 1 [0157.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81daae8 [0157.397] wcscpy (in: _Dest=0x81daae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0157.397] wcscat (in: _Dest=0x81daae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0157.397] wcscat (in: _Dest=0x81daae8, _Source="previews_opt_out.db" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" [0161.147] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db")) returned 0x2020 [0162.503] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", dwFileAttributes=0x20) returned 1 [0163.738] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x24c0 [0163.738] GetFileSizeEx (in: hFile=0x24c0, lpFileSize=0xeaefeb8 | out: lpFileSize=0xeaefeb8*=16384) returned 1 [0163.738] SetFilePointerEx (in: hFile=0x24c0, liDistanceToMove=0x3ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.738] ReadFile (in: hFile=0x24c0, lpBuffer=0xeaefec4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xeaefea0, lpOverlapped=0x0 | out: lpBuffer=0xeaefec4*, lpNumberOfBytesRead=0xeaefea0*=0x4, lpOverlapped=0x0) returned 1 [0163.741] SetFilePointerEx (in: hFile=0x24c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0163.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0163.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0163.742] NtQuerySystemTime (in: CurrentTime=0xeaefe40 | out: CurrentTime=0xeaefe40*=132471540319620000) returned 0x0 [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x6d31cd36 [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x584e561a [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x2dfe1974 [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x6397158d [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x46886760 [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x69dbcb16 [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x2f7865b0 [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x3b4bd53c [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x6b00f19b [0163.742] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x37ec3a59 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x3a6cb083 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x11331e19 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0xbf9e482 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x44223595 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x328a618e [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0xbaac5af [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x572822e6 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x4a7df1e3 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x3f227397 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x79b0570e [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x7d8cb977 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x44c444f6 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x64d70cc6 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x52ed6663 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x716d4f90 [0163.743] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x53b6e048 [0163.744] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0xe756e73 [0163.744] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x15cbbc1d [0163.744] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x481a6a02 [0163.744] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x6d866079 [0163.744] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x3338b98 [0163.744] RtlRandomEx (in: Seed=0xeaefe38 | out: Seed=0xeaefe38) returned 0x1b5a626f [0163.758] SetFilePointerEx (in: hFile=0x24c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.758] ReadFile (in: hFile=0x24c0, lpBuffer=0x8248458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xeaefe40, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xeaefe40*=0x3c00, lpOverlapped=0x0) returned 1 [0163.759] SetFilePointerEx (in: hFile=0x24c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309b68 [0163.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32778 [0163.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0163.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0163.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0163.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0163.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0163.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0163.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0163.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309b68) returned 1 [0163.760] WriteFile (in: hFile=0x24c0, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xeaefe40, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xeaefe40*=0x3c00, lpOverlapped=0x0) returned 1 [0166.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0166.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0166.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e554c8 [0166.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ca8) returned 1 [0166.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e54d88 [0166.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ca8 [0166.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0166.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0166.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0166.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308608) returned 1 [0166.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d574c8 [0166.631] SetFilePointerEx (in: hFile=0x24c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.631] WriteFile (in: hFile=0x24c0, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xeaefeac, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0xeaefeac*=0x118, lpOverlapped=0x0) returned 1 [0168.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0168.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54d88) returned 1 [0168.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ca8) returned 1 [0168.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e554c8) returned 1 [0168.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0168.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0168.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0168.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0168.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333e28 [0168.817] wcscpy (in: _Dest=0x333e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" [0168.817] wcscat (in: _Dest=0x333e28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.f0dbec" [0168.817] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.f0dbec", NtPathName=0xeaefe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81ecd10 [0172.517] FlushFileBuffers (hFile=0x24c0) returned 1 [0172.568] CloseHandle (hObject=0x24c0) returned 1 [0172.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da828 [0172.569] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.569] wcscat (in: _Dest=0x81da828, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0172.569] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0172.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 [0172.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daae8) returned 1 [0172.570] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0172.570] wcscmp (_String1="previews_opt_out.db-journal", _String2=".") returned 1 [0172.570] wcscmp (_String1="previews_opt_out.db-journal", _String2="..") returned 1 [0172.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3335e8 [0172.570] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.570] wcscat (in: _Dest=0x3335e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.570] wcscat (in: _Dest=0x3335e8, _Source="previews_opt_out.db-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" [0173.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3335e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a08 [0173.896] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31c5270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe31c5270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1 [0173.896] wcscmp (_String1="README", _String2=".") returned 1 [0173.896] wcscmp (_String1="README", _String2="..") returned 1 [0173.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c1b0 [0173.920] wcscpy (in: _Dest=0x3e3c1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0173.920] wcscat (in: _Dest=0x3e3c1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0173.920] wcscat (in: _Dest=0x3e3c1b0, _Source="README" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" [0173.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a40 [0173.921] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8f13df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8f13df0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f13df0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x7799, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0173.921] wcscmp (_String1="Secure Preferences", _String2=".") returned 1 [0173.921] wcscmp (_String1="Secure Preferences", _String2="..") returned 1 [0173.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da4b8 [0173.921] wcscpy (in: _Dest=0x81da4b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0173.921] wcscat (in: _Dest=0x81da4b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0173.921] wcscat (in: _Dest=0x81da4b8, _Source="Secure Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" [0173.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b64 [0174.235] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe55ff140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe55ff140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5652160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0174.235] wcscmp (_String1="Shortcuts", _String2=".") returned 1 [0174.235] wcscmp (_String1="Shortcuts", _String2="..") returned 1 [0174.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11468 [0174.235] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0174.235] wcscat (in: _Dest=0x3e11468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.235] wcscat (in: _Dest=0x3e11468, _Source="Shortcuts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" [0174.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2690 [0174.236] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5601850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5601850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5682ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0174.236] wcscmp (_String1="Shortcuts-journal", _String2=".") returned 1 [0174.236] wcscmp (_String1="Shortcuts-journal", _String2="..") returned 1 [0174.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da358 [0174.236] wcscpy (in: _Dest=0x81da358, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0174.236] wcscat (in: _Dest=0x81da358, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.236] wcscat (in: _Dest=0x81da358, _Source="Shortcuts-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" [0174.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2694 [0174.237] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd3130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0174.237] wcscmp (_String1="Top Sites", _String2=".") returned 1 [0174.237] wcscmp (_String1="Top Sites", _String2="..") returned 1 [0174.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11328 [0174.237] wcscpy (in: _Dest=0x3e11328, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0174.237] wcscat (in: _Dest=0x3e11328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.237] wcscat (in: _Dest=0x3e11328, _Source="Top Sites" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" [0174.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2698 [0174.238] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0174.238] wcscmp (_String1="Top Sites-journal", _String2=".") returned 1 [0174.238] wcscmp (_String1="Top Sites-journal", _String2="..") returned 1 [0174.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d99b8 [0174.238] wcscpy (in: _Dest=0x81d99b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0174.239] wcscat (in: _Dest=0x81d99b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.239] wcscat (in: _Dest=0x81d99b8, _Source="Top Sites-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" [0174.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d99b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x269c [0174.239] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8e09450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8e09450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8e09450, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0174.239] wcscmp (_String1="TransportSecurity", _String2=".") returned 1 [0174.239] wcscmp (_String1="TransportSecurity", _String2="..") returned 1 [0174.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da988 [0174.239] wcscpy (in: _Dest=0x81da988, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0174.240] wcscat (in: _Dest=0x81da988, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.240] wcscat (in: _Dest=0x81da988, _Source="TransportSecurity" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" [0174.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a0 [0174.240] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41fef60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41fef60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0174.240] wcscmp (_String1="Visited Links", _String2=".") returned 1 [0174.240] wcscmp (_String1="Visited Links", _String2="..") returned 1 [0174.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d680 [0174.240] wcscpy (in: _Dest=0x3e2d680, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0174.240] wcscat (in: _Dest=0x3e2d680, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.241] wcscat (in: _Dest=0x3e2d680, _Source="Visited Links" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" [0174.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b4 [0174.241] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6626d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6626d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0174.241] wcscmp (_String1="Web Applications", _String2=".") returned 1 [0174.241] wcscmp (_String1="Web Applications", _String2="..") returned 1 [0174.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d488 [0174.241] wcscpy (in: _Dest=0x3e2d488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0174.241] wcscat (in: _Dest=0x3e2d488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.241] wcscat (in: _Dest=0x3e2d488, _Source="Web Applications" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0174.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0174.242] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31eb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31eb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a99d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0174.242] wcscmp (_String1="Web Data", _String2=".") returned 1 [0174.242] wcscmp (_String1="Web Data", _String2="..") returned 1 [0174.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0174.242] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0174.242] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.242] wcscat (in: _Dest=0x3e3d120, _Source="Web Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" [0174.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a4 [0174.243] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31eb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31eb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c6e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0174.243] wcscmp (_String1="Web Data-journal", _String2=".") returned 1 [0174.243] wcscmp (_String1="Web Data-journal", _String2="..") returned 1 [0174.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2da70 [0174.243] wcscpy (in: _Dest=0x3e2da70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0174.243] wcscat (in: _Dest=0x3e2da70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.244] wcscat (in: _Dest=0x3e2da70, _Source="Web Data-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" [0174.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2da70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a8 [0174.244] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31eb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31eb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c6e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 0 [0174.244] FindClose (in: hFindFile=0x8098f10 | out: hFindFile=0x8098f10) returned 1 [0174.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049588) returned 1 [0174.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb20c8) returned 1 [0174.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f2b0) returned 1 Thread: id = 1360 os_tid = 0x2a8 [0144.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c958 [0144.929] wcscpy (in: _Dest=0x32c958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0144.930] wcscat (in: _Dest=0x32c958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\" [0144.930] wcscat (in: _Dest=0x32c958, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*" [0144.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048e50 [0144.930] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0147.121] wcscmp (_String1=".", _String2=".") returned 0 [0147.121] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.121] wcscmp (_String1="..", _String2=".") returned 1 [0147.121] wcscmp (_String1="..", _String2="..") returned 0 [0147.121] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.121] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0147.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048e50) returned 1 [0147.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c958) returned 1 [0147.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1078) returned 1 Thread: id = 1361 os_tid = 0x410 [0144.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a598 [0144.930] wcscpy (in: _Dest=0x819a598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0144.930] wcscat (in: _Dest=0x819a598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\" [0144.930] wcscat (in: _Dest=0x819a598, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*" [0144.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100d40 [0144.930] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0147.118] wcscmp (_String1=".", _String2=".") returned 0 [0147.118] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.118] wcscmp (_String1="..", _String2=".") returned 1 [0147.118] wcscmp (_String1="..", _String2="..") returned 0 [0147.118] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.118] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0147.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100d40) returned 1 [0147.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a598) returned 1 [0147.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 1362 os_tid = 0xabc [0144.930] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\first run")) returned 0x2020 [0147.112] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", dwFileAttributes=0x20) returned 1 [0147.115] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x74c [0147.115] GetFileSizeEx (in: hFile=0x74c, lpFileSize=0xebdfa20 | out: lpFileSize=0xebdfa20*=0) returned 1 [0147.115] FlushFileBuffers (hFile=0x74c) returned 1 [0147.367] CloseHandle (hObject=0x74c) returned 1 [0147.367] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", dwFileAttributes=0x2020) returned 1 [0147.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1228) returned 1 Thread: id = 1363 os_tid = 0xe8c [0144.931] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\local state")) returned 0x2020 [0147.109] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", dwFileAttributes=0x20) returned 1 [0147.109] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd44 [0147.109] GetFileSizeEx (in: hFile=0xd44, lpFileSize=0x7b4fcb8 | out: lpFileSize=0x7b4fcb8*=67147) returned 1 [0147.109] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x10647, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.109] ReadFile (in: hFile=0xd44, lpBuffer=0x7b4fcc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7b4fca0, lpOverlapped=0x0 | out: lpBuffer=0x7b4fcc4*, lpNumberOfBytesRead=0x7b4fca0*=0x4, lpOverlapped=0x0) returned 1 [0147.351] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0147.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0147.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0147.352] NtQuerySystemTime (in: CurrentTime=0x7b4fc40 | out: CurrentTime=0x7b4fc40*=132471540159252000) returned 0x0 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x4699c565 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x6137ec39 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x1186c79a [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x546f3f0e [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x55c56db1 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x8c2920a [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x504c0aa [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x5898874a [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x610c55f6 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x2d17545b [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x51042333 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x2e94a310 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x515954ba [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x43565461 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x75974e56 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x654c080 [0147.352] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x5f7147f8 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x5f48a4a3 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x6a6d085f [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x10d63761 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x219e2b34 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x6be5b3c [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x2e9af00e [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x23ba64d9 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x2419f4ef [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x67d00565 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x33429161 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x5734c553 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x219c5734 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x6b1975de [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x149063d3 [0147.353] RtlRandomEx (in: Seed=0x7b4fc38 | out: Seed=0x7b4fc38) returned 0x720017b9 [0147.366] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.366] ReadFile (in: hFile=0xd44, lpBuffer=0x8155478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7b4fc40, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesRead=0x7b4fc40*=0x3c00, lpOverlapped=0x0) returned 1 [0147.414] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095f30 [0147.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f329d0 [0147.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0147.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0147.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8151870 [0147.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0147.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0147.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0147.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f329d0) returned 1 [0147.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0147.415] WriteFile (in: hFile=0xd44, lpBuffer=0x8151870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7b4fc40, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesWritten=0x7b4fc40*=0x3c00, lpOverlapped=0x0) returned 1 [0149.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0149.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0149.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e6fd38 [0149.353] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.353] WriteFile (in: hFile=0xd44, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x7b4fcac, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x7b4fcac*=0x108, lpOverlapped=0x0) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd68) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd38) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0151.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e116e8 [0151.139] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" [0151.139] wcscat (in: _Dest=0x3e116e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.f0dbec" [0151.139] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.f0dbec", NtPathName=0x7b4fc30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7098 [0151.146] FlushFileBuffers (hFile=0xd44) returned 1 [0151.153] CloseHandle (hObject=0xd44) returned 1 [0151.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e116e8 [0151.154] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0151.154] wcscat (in: _Dest=0x3e116e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\F0DBEC-Readme.txt" [0151.154] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\f0dbec-readme.txt")) returned 0xffffffff [0151.155] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd44 [0151.155] WriteFile (in: hFile=0xd44, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7b4fc54, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7b4fc54*=0x70c, lpOverlapped=0x0) returned 1 [0151.157] CloseHandle (hObject=0xd44) returned 1 [0151.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 [0151.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb13d8) returned 1 Thread: id = 1364 os_tid = 0x12b4 [0144.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c828 [0144.931] wcscpy (in: _Dest=0x32c828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0144.931] wcscat (in: _Dest=0x32c828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\" [0144.931] wcscat (in: _Dest=0x32c828, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*" [0144.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe928 [0144.931] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0147.204] wcscmp (_String1=".", _String2=".") returned 0 [0147.204] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.204] wcscmp (_String1="..", _String2=".") returned 1 [0147.204] wcscmp (_String1="..", _String2="..") returned 0 [0147.205] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.205] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0147.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe928) returned 1 [0147.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c828) returned 1 [0147.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1468) returned 1 Thread: id = 1365 os_tid = 0xb50 [0144.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c9f0 [0144.931] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0144.932] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\" [0144.932] wcscat (in: _Dest=0x32c9f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*" [0144.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0144.932] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0147.107] wcscmp (_String1=".", _String2=".") returned 0 [0147.107] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.107] wcscmp (_String1="..", _String2=".") returned 1 [0147.107] wcscmp (_String1="..", _String2="..") returned 0 [0147.107] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.107] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0147.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0147.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 [0147.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb12b8) returned 1 Thread: id = 1366 os_tid = 0x2ac [0144.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f638 [0144.932] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0144.932] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\" [0144.932] wcscat (in: _Dest=0x3f2f638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*" [0144.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101e18 [0144.932] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0147.104] wcscmp (_String1=".", _String2=".") returned 0 [0147.105] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.105] wcscmp (_String1="..", _String2=".") returned 1 [0147.105] wcscmp (_String1="..", _String2="..") returned 0 [0147.105] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.105] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0147.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101e18) returned 1 [0147.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 [0147.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 1367 os_tid = 0xb34 [0144.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a638 [0144.933] wcscpy (in: _Dest=0x819a638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0144.933] wcscat (in: _Dest=0x819a638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\" [0144.933] wcscat (in: _Dest=0x819a638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*" [0144.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0144.933] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0147.102] wcscmp (_String1=".", _String2=".") returned 0 [0147.102] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.103] wcscmp (_String1="..", _String2=".") returned 1 [0147.103] wcscmp (_String1="..", _String2="..") returned 0 [0147.103] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.103] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0147.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0147.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a638) returned 1 [0147.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 1368 os_tid = 0xf6c [0144.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ce18 [0144.933] wcscpy (in: _Dest=0x32ce18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader" [0144.933] wcscat (in: _Dest=0x32ce18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\" [0144.933] wcscat (in: _Dest=0x32ce18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\*" [0144.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0144.934] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0147.100] wcscmp (_String1=".", _String2=".") returned 0 [0147.100] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.100] wcscmp (_String1="..", _String2=".") returned 1 [0147.101] wcscmp (_String1="..", _String2="..") returned 0 [0147.101] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.101] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0147.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0147.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ce18) returned 1 [0147.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb14f8) returned 1 Thread: id = 1369 os_tid = 0x3c8 [0144.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1e88 [0144.934] wcscpy (in: _Dest=0x3eb1e88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0144.934] wcscat (in: _Dest=0x3eb1e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\" [0144.934] wcscat (in: _Dest=0x3eb1e88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*" [0144.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fedf8 [0144.934] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0147.098] wcscmp (_String1=".", _String2=".") returned 0 [0147.098] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.098] wcscmp (_String1="..", _String2=".") returned 1 [0147.098] wcscmp (_String1="..", _String2="..") returned 0 [0147.099] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.099] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0147.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fedf8) returned 1 [0147.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1e88) returned 1 [0147.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1588) returned 1 Thread: id = 1370 os_tid = 0xfb0 [0144.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c7a0 [0144.935] wcscpy (in: _Dest=0x3e3c7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0144.935] wcscat (in: _Dest=0x3e3c7a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\" [0144.935] wcscat (in: _Dest=0x3e3c7a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*" [0144.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe6c0 [0144.935] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0147.096] wcscmp (_String1=".", _String2=".") returned 0 [0147.096] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.096] wcscmp (_String1="..", _String2=".") returned 1 [0147.096] wcscmp (_String1="..", _String2="..") returned 0 [0147.096] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.096] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0147.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe6c0) returned 1 [0147.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c7a0) returned 1 [0147.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1618) returned 1 Thread: id = 1371 os_tid = 0xff4 [0144.938] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\gbww vyw3x.pdf")) returned 0x20 [0145.788] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf", dwFileAttributes=0x20) returned 1 [0145.827] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\gbww vyw3x.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xacc [0146.249] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0xeb4f7e0 | out: lpFileSize=0xeb4f7e0*=80143) returned 1 [0146.249] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x1390b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.249] ReadFile (in: hFile=0xacc, lpBuffer=0xeb4f7ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xeb4f7c8, lpOverlapped=0x0 | out: lpBuffer=0xeb4f7ec*, lpNumberOfBytesRead=0xeb4f7c8*=0x4, lpOverlapped=0x0) returned 1 [0146.251] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6d0 [0146.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0146.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0146.251] NtQuerySystemTime (in: CurrentTime=0xeb4f768 | out: CurrentTime=0xeb4f768*=132471540148332000) returned 0x0 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x432e12da [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x2197e83d [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x203e4317 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x5f66cb41 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x3ffaea61 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x481e0b40 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x1771c2e1 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x335f9e9b [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x6421bcf7 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x7c18f0e2 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x296a3903 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x2ffc8a7b [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x1777f45f [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x1c3fa063 [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x453e52eb [0146.251] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x79ab3214 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x7c642ad7 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x10765673 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x7d584768 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x4087018f [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x48edbdf3 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x14d01fe6 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x507cf8b6 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x62118171 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0xe0c2f41 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x573682ec [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x3e194331 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x133936b3 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x44fa8ee [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x30b86d33 [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x3432b55f [0146.252] RtlRandomEx (in: Seed=0xeb4f760 | out: Seed=0xeb4f760) returned 0x39e88883 [0146.264] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.264] ReadFile (in: hFile=0xacc, lpBuffer=0x8155478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xeb4f768, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesRead=0xeb4f768*=0x3c00, lpOverlapped=0x0) returned 1 [0146.264] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6d0 [0146.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6d0) returned 1 [0146.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8159080 [0146.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6d0 [0146.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0146.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0146.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.266] WriteFile (in: hFile=0xacc, lpBuffer=0x8159080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xeb4f768, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesWritten=0xeb4f768*=0x3c00, lpOverlapped=0x0) returned 1 [0146.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0146.498] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.498] ReadFile (in: hFile=0xacc, lpBuffer=0x8155478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xeb4f768, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesRead=0xeb4f768*=0x3c00, lpOverlapped=0x0) returned 1 [0146.498] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d958 [0146.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0146.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0146.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8159080 [0146.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0146.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0146.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0146.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d958) returned 1 [0146.500] WriteFile (in: hFile=0xacc, lpBuffer=0x8159080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xeb4f768, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesWritten=0xeb4f768*=0x3c00, lpOverlapped=0x0) returned 1 [0146.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0146.502] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0xfd0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.503] ReadFile (in: hFile=0xacc, lpBuffer=0x8155478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xeb4f768, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesRead=0xeb4f768*=0x3c00, lpOverlapped=0x0) returned 1 [0146.503] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0xfd0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d958 [0146.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0146.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb58) returned 1 [0146.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8159080 [0146.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0146.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0146.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0146.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d958) returned 1 [0146.504] WriteFile (in: hFile=0xacc, lpBuffer=0x8159080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xeb4f768, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesWritten=0xeb4f768*=0x3c00, lpOverlapped=0x0) returned 1 [0146.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0146.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd000 [0146.506] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.507] WriteFile (in: hFile=0xacc, lpBuffer=0x3e16ce0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xeb4f7d4, lpOverlapped=0x0 | out: lpBuffer=0x3e16ce0*, lpNumberOfBytesWritten=0xeb4f7d4*=0x14e, lpOverlapped=0x0) returned 1 [0146.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0146.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77b78) returned 1 [0146.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6d0) returned 1 [0146.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77ad0) returned 1 [0146.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd000) returned 1 [0146.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b618) returned 1 [0146.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b848) returned 1 [0146.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0146.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2db8 [0146.566] wcscpy (in: _Dest=0x3eb2db8, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf" [0146.566] wcscat (in: _Dest=0x3eb2db8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf.f0dbec" [0146.566] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf.f0dbec", NtPathName=0xeb4f758, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\gbwW VYW3X.pdf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8188090 [0146.668] FlushFileBuffers (hFile=0xacc) returned 1 [0146.670] CloseHandle (hObject=0xacc) returned 1 [0146.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bed60 [0146.675] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0146.675] wcscat (in: _Dest=0x81bed60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" [0146.675] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\f0dbec-readme.txt")) returned 0x20 [0146.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 [0146.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5bf0) returned 1 Thread: id = 1372 os_tid = 0x3f4 [0144.940] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\hcc4ui6p.xlsx")) returned 0x20 [0145.788] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx", dwFileAttributes=0x20) returned 1 [0145.827] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\hcc4ui6p.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x674 [0146.232] GetFileSizeEx (in: hFile=0x674, lpFileSize=0xedcfcb8 | out: lpFileSize=0xedcfcb8*=31715) returned 1 [0146.232] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x7bdf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.232] ReadFile (in: hFile=0x674, lpBuffer=0xedcfcc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xedcfca0, lpOverlapped=0x0 | out: lpBuffer=0xedcfcc4*, lpNumberOfBytesRead=0xedcfca0*=0x4, lpOverlapped=0x0) returned 1 [0146.234] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7c0 [0146.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0146.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6d0 [0146.234] NtQuerySystemTime (in: CurrentTime=0xedcfc40 | out: CurrentTime=0xedcfc40*=132471540148176000) returned 0x0 [0146.234] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x360faff0 [0146.234] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x5c09f1cc [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x62e9a9f1 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x32522980 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x4556907 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x24d82c29 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x3f7a6021 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x51970e44 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x65a11e60 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x60fdb788 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x2394effe [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x21b62cd1 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x210f0bee [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x598cd79b [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x7aca18f0 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x6aabbec8 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x1bf530c3 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x27aaf2af [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x17f90e9d [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x67d18e24 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x4ac5b524 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x7ca5216f [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x3f24aea1 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x2359961 [0146.235] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x2bba9657 [0146.236] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x1f741b7d [0146.236] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x2e291826 [0146.236] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x433793f2 [0146.236] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x537f29fd [0146.236] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x4ecced69 [0146.236] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x585afbb [0146.236] RtlRandomEx (in: Seed=0xedcfc38 | out: Seed=0xedcfc38) returned 0x5def56a2 [0146.247] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.247] ReadFile (in: hFile=0x674, lpBuffer=0x814dc68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xedcfc40, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesRead=0xedcfc40*=0x3c00, lpOverlapped=0x0) returned 1 [0146.247] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7c0 [0146.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7c0) returned 1 [0146.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8151870 [0146.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7c0 [0146.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6d0 [0146.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6d0) returned 1 [0146.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.248] WriteFile (in: hFile=0x674, lpBuffer=0x8151870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xedcfc40, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesWritten=0xedcfc40*=0x3c00, lpOverlapped=0x0) returned 1 [0146.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0146.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0146.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68f40 [0146.495] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.495] WriteFile (in: hFile=0x674, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xedcfcac, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xedcfcac*=0x10c, lpOverlapped=0x0) returned 1 [0146.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0146.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f70) returned 1 [0146.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0146.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f40) returned 1 [0146.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7c0) returned 1 [0146.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0146.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0146.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0146.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb0fe8 [0146.562] wcscpy (in: _Dest=0x3eb0fe8, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx" [0146.562] wcscat (in: _Dest=0x3eb0fe8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx.f0dbec" [0146.562] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx.f0dbec", NtPathName=0xedcfc30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\HCC4uI6p.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187ca0 [0146.665] FlushFileBuffers (hFile=0x674) returned 1 [0146.668] CloseHandle (hObject=0x674) returned 1 [0146.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be810 [0146.674] wcscpy (in: _Dest=0x81be810, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0146.674] wcscat (in: _Dest=0x81be810, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" [0146.674] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\f0dbec-readme.txt")) returned 0xffffffff [0146.674] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xddc [0146.677] WriteFile (in: hFile=0xddc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xedcfc54, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xedcfc54*=0x70c, lpOverlapped=0x0) returned 1 [0146.679] CloseHandle (hObject=0xddc) returned 1 [0146.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 [0146.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e241c0) returned 1 Thread: id = 1373 os_tid = 0x640 [0144.940] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\s9srrfvswnciuhxmdofi.pdf")) returned 0x20 [0145.788] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf", dwFileAttributes=0x20) returned 1 [0145.828] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\s9srrfvswnciuhxmdofi.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x748 [0146.214] GetFileSizeEx (in: hFile=0x748, lpFileSize=0xb42f788 | out: lpFileSize=0xb42f788*=65540) returned 1 [0146.214] SetFilePointerEx (in: hFile=0x748, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.214] ReadFile (in: hFile=0x748, lpBuffer=0xb42f794, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb42f770, lpOverlapped=0x0 | out: lpBuffer=0xb42f794*, lpNumberOfBytesRead=0xb42f770*=0x4, lpOverlapped=0x0) returned 1 [0146.216] SetFilePointerEx (in: hFile=0x748, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0146.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0146.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7c0 [0146.216] NtQuerySystemTime (in: CurrentTime=0xb42f710 | out: CurrentTime=0xb42f710*=132471540147864000) returned 0x0 [0146.216] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x3fa538e1 [0146.216] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x748f6cc6 [0146.216] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x6de33539 [0146.216] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x7b04060f [0146.216] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x27254f3 [0146.216] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x19a61a20 [0146.216] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x6251bb0e [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x3f2cc5d6 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x67c794f2 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x1112edf7 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x7d1837c3 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x4dce06e8 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x570b1d87 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x6bdab044 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x2a1163b4 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x788e86b4 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x412f58f1 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x87fc1ce [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x661ffe9 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0xd1c0161 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x48685392 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x3fd011a1 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x43ee10e8 [0146.217] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x6f70c2ac [0146.218] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x345b29dc [0146.218] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x583b36f1 [0146.218] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0xc71b1d [0146.218] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x41b14cc9 [0146.218] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x55d05dae [0146.218] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x41e47b2c [0146.218] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x4cab4463 [0146.218] RtlRandomEx (in: Seed=0xb42f708 | out: Seed=0xb42f708) returned 0x3e023436 [0146.230] SetFilePointerEx (in: hFile=0x748, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.230] ReadFile (in: hFile=0x748, lpBuffer=0x8146458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb42f710, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesRead=0xb42f710*=0x3c00, lpOverlapped=0x0) returned 1 [0146.231] SetFilePointerEx (in: hFile=0x748, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0146.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0146.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814a060 [0146.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0146.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7c0 [0146.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7c0) returned 1 [0146.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.232] WriteFile (in: hFile=0x748, lpBuffer=0x814a060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb42f710, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesWritten=0xb42f710*=0x3c00, lpOverlapped=0x0) returned 1 [0146.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0146.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0146.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e6d298 [0146.492] SetFilePointerEx (in: hFile=0x748, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.492] WriteFile (in: hFile=0x748, lpBuffer=0x3ef7ea0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xb42f77c, lpOverlapped=0x0 | out: lpBuffer=0x3ef7ea0*, lpNumberOfBytesWritten=0xb42f77c*=0x122, lpOverlapped=0x0) returned 1 [0146.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7ea0) returned 1 [0146.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d6d0) returned 1 [0146.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0146.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d298) returned 1 [0146.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0146.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0146.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0146.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5f0) returned 1 [0146.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187bf8 [0146.560] wcscpy (in: _Dest=0x8187bf8, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf" [0146.560] wcscat (in: _Dest=0x8187bf8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf.f0dbec" [0146.560] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf.f0dbec", NtPathName=0xb42f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\s9SrrFVswnCiuHXMDOFi.pdf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7938 [0146.721] FlushFileBuffers (hFile=0x748) returned 1 [0146.799] CloseHandle (hObject=0x748) returned 1 [0146.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30a68 [0146.803] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0146.803] wcscat (in: _Dest=0x3f30a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" [0146.803] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\f0dbec-readme.txt")) returned 0x20 [0146.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 [0146.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 Thread: id = 1374 os_tid = 0x434 [0144.942] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\sucqys-9xpenl8afn8cm.rtf")) returned 0x20 [0145.788] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf", dwFileAttributes=0x20) returned 1 [0145.828] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\sucqys-9xpenl8afn8cm.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd44 [0146.196] GetFileSizeEx (in: hFile=0xd44, lpFileSize=0xef3fbe8 | out: lpFileSize=0xef3fbe8*=66047) returned 1 [0146.196] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x101fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.196] ReadFile (in: hFile=0xd44, lpBuffer=0xef3fbf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xef3fbd0, lpOverlapped=0x0 | out: lpBuffer=0xef3fbf4*, lpNumberOfBytesRead=0xef3fbd0*=0x4, lpOverlapped=0x0) returned 1 [0146.198] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0146.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0146.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0146.198] NtQuerySystemTime (in: CurrentTime=0xef3fb70 | out: CurrentTime=0xef3fb70*=132471540147708000) returned 0x0 [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x6a9f9aec [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x35ec269 [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x6678aafd [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x5990d112 [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x2addfd9b [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x33147d73 [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x5b84e9 [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x6ed49a41 [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0xab666c6 [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x4522646e [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x24653306 [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x46c2ac66 [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x6a97492f [0146.198] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x2ada61af [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x21fafff4 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x78c0c260 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x73d43ae0 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x1a19f3c3 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x337f508b [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x293de217 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0xe6235c7 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x5b68abb5 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x1ef95a96 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x32d09f2d [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x2bfaa8fb [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x29c1523b [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x146280fd [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0xc559c6f [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x652be852 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x6e4813e8 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x3b5c7da7 [0146.199] RtlRandomEx (in: Seed=0xef3fb68 | out: Seed=0xef3fb68) returned 0x5fa870b [0146.212] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.212] ReadFile (in: hFile=0xd44, lpBuffer=0x82808d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xef3fb70, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesRead=0xef3fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0146.212] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0146.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0146.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82844d8 [0146.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0146.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0146.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0146.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.213] WriteFile (in: hFile=0xd44, lpBuffer=0x82844d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xef3fb70, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesWritten=0xef3fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0146.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82844d8) returned 1 [0146.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0146.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e6cfc8 [0146.489] SetFilePointerEx (in: hFile=0xd44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.490] WriteFile (in: hFile=0xd44, lpBuffer=0x3ef7d68*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xef3fbdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef7d68*, lpNumberOfBytesWritten=0xef3fbdc*=0x122, lpOverlapped=0x0) returned 1 [0146.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0146.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cc68) returned 1 [0146.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0146.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cfc8) returned 1 [0146.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0146.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0146.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0146.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1a8) returned 1 [0146.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187aa8 [0146.558] wcscpy (in: _Dest=0x8187aa8, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf" [0146.558] wcscat (in: _Dest=0x8187aa8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf.f0dbec" [0146.558] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf.f0dbec", NtPathName=0xef3fb60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\sucQYs-9XpEnl8afn8cm.rtf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7aa8 [0146.711] FlushFileBuffers (hFile=0xd44) returned 1 [0146.795] CloseHandle (hObject=0xd44) returned 1 [0146.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30a68 [0146.814] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0146.814] wcscat (in: _Dest=0x3f30a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" [0146.814] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\f0dbec-readme.txt")) returned 0x20 [0146.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 [0146.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 1375 os_tid = 0xb20 [0144.946] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\wc25r8kjqgu0druc9 h.odt")) returned 0x20 [0145.788] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt", dwFileAttributes=0x20) returned 1 [0145.828] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\wc25r8kjqgu0druc9 h.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10ec [0146.179] GetFileSizeEx (in: hFile=0x10ec, lpFileSize=0xecafa58 | out: lpFileSize=0xecafa58*=65143) returned 1 [0146.179] SetFilePointerEx (in: hFile=0x10ec, liDistanceToMove=0xfe73, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.179] ReadFile (in: hFile=0x10ec, lpBuffer=0xecafa64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xecafa40, lpOverlapped=0x0 | out: lpBuffer=0xecafa64*, lpNumberOfBytesRead=0xecafa40*=0x4, lpOverlapped=0x0) returned 1 [0146.181] SetFilePointerEx (in: hFile=0x10ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0146.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0146.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0146.181] NtQuerySystemTime (in: CurrentTime=0xecaf9e0 | out: CurrentTime=0xecaf9e0*=132471540147552000) returned 0x0 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x59b792a4 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x78c42221 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x68cce4dc [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x173e3a60 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x262d946 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x2d21f46a [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x7ce4e87c [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x40fe55b3 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x6a702c30 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x460641b2 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x7585ee53 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x5a104fe4 [0146.181] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x4d9df641 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x5aa904a7 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x11b64228 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x66054d62 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x7838369 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x61b7ae74 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x3dc902ff [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x794d6a47 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x4bd622c5 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x41770c85 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x7a5509e8 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x288c22f5 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x6e1df924 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x676d68cf [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x3eee9964 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x2dd43682 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x74aa6773 [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x3942cf6a [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x2a124f9c [0146.182] RtlRandomEx (in: Seed=0xecaf9d8 | out: Seed=0xecaf9d8) returned 0x750f4031 [0146.194] SetFilePointerEx (in: hFile=0x10ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.194] ReadFile (in: hFile=0x10ec, lpBuffer=0x82790c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xecaf9e0, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesRead=0xecaf9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.194] SetFilePointerEx (in: hFile=0x10ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0146.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0146.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x827ccc8 [0146.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0146.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0146.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0146.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.195] WriteFile (in: hFile=0x10ec, lpBuffer=0x827ccc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xecaf9e0, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesWritten=0xecaf9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0146.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0146.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e6ccb0 [0146.486] SetFilePointerEx (in: hFile=0x10ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.486] WriteFile (in: hFile=0x10ec, lpBuffer=0x3d57278*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xecafa4c, lpOverlapped=0x0 | out: lpBuffer=0x3d57278*, lpNumberOfBytesWritten=0xecafa4c*=0x120, lpOverlapped=0x0) returned 1 [0146.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 [0146.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cf38) returned 1 [0146.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0146.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ccb0) returned 1 [0146.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0146.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0146.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0146.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0146.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819aef8 [0146.556] wcscpy (in: _Dest=0x819aef8, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt" [0146.556] wcscat (in: _Dest=0x819aef8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt.f0dbec" [0146.556] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt.f0dbec", NtPathName=0xecaf9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\Wc25r8KJqgu0druc9 H.odt.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6968 [0146.742] FlushFileBuffers (hFile=0x10ec) returned 1 [0146.799] CloseHandle (hObject=0x10ec) returned 1 [0146.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30a68 [0146.811] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\" [0146.811] wcscat (in: _Dest=0x3f30a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" [0146.811] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\sHoNibZaADk\\YH8ZX\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\shonibzaadk\\yh8zx\\f0dbec-readme.txt")) returned 0x20 [0146.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 [0146.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 1376 os_tid = 0x570 [0144.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e8f8 [0144.947] wcscpy (in: _Dest=0x3d8e8f8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0144.947] wcscat (in: _Dest=0x3d8e8f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\" [0144.947] wcscat (in: _Dest=0x3d8e8f8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*" [0144.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0144.947] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ad8 [0145.787] wcscmp (_String1=".", _String2=".") returned 0 [0145.787] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.787] wcscmp (_String1="..", _String2=".") returned 1 [0145.787] wcscmp (_String1="..", _String2="..") returned 0 [0145.787] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0145.787] wcscmp (_String1="1036", _String2=".") returned 1 [0145.787] wcscmp (_String1="1036", _String2="..") returned 1 [0145.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e9c8 [0145.787] wcscpy (in: _Dest=0x3d8e9c8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0145.787] wcscat (in: _Dest=0x3d8e9c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\" [0145.787] wcscat (in: _Dest=0x3d8e9c8, _Source="1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0149.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d8e9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0149.552] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0149.552] wcscmp (_String1="3082", _String2=".") returned 1 [0149.552] wcscmp (_String1="3082", _String2="..") returned 1 [0149.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed4be8 [0149.552] wcscpy (in: _Dest=0x3ed4be8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0149.552] wcscat (in: _Dest=0x3ed4be8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\" [0149.552] wcscat (in: _Dest=0x3ed4be8, _Source="3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0149.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ed4be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0149.553] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0149.553] FindClose (in: hFindFile=0x3f37ad8 | out: hFindFile=0x3f37ad8) returned 1 [0149.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0149.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e8f8) returned 1 [0149.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 1377 os_tid = 0xbf4 [0144.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0144.948] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" [0144.948] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\" [0144.948] wcscat (in: _Dest=0x2ff6b90, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*" [0144.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0144.948] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0147.203] wcscmp (_String1=".", _String2=".") returned 0 [0147.203] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.203] wcscmp (_String1="..", _String2=".") returned 1 [0147.203] wcscmp (_String1="..", _String2="..") returned 0 [0147.203] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80607400, ftCreationTime.dwHighDateTime=0x1c9c5bf, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80607400, ftLastWriteTime.dwHighDateTime=0x1c9c5bf, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 1 [0147.203] wcscmp (_String1="SynchronizationEula.rtf", _String2=".") returned 1 [0147.203] wcscmp (_String1="SynchronizationEula.rtf", _String2="..") returned 1 [0147.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39dc8 [0147.204] wcscpy (in: _Dest=0x3e39dc8, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" [0147.204] wcscat (in: _Dest=0x3e39dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\" [0147.204] wcscat (in: _Dest=0x3e39dc8, _Source="SynchronizationEula.rtf" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" [0148.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0148.275] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80607400, ftCreationTime.dwHighDateTime=0x1c9c5bf, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80607400, ftLastWriteTime.dwHighDateTime=0x1c9c5bf, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 0 [0148.275] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0148.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0148.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0148.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 1378 os_tid = 0x584 [0144.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc")) returned 0x20 [0147.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc", dwFileAttributes=0x20) returned 0 [0147.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.094] GetLastError () returned 0x5 [0147.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc", dwFileAttributes=0x20) returned 0 [0147.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3f88) returned 1 Thread: id = 1379 os_tid = 0xc14 [0144.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a758 [0144.950] wcscpy (in: _Dest=0x831a758, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" [0144.950] wcscat (in: _Dest=0x831a758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\" [0144.950] wcscat (in: _Dest=0x831a758, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*" [0144.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0144.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0147.202] wcscmp (_String1=".", _String2=".") returned 0 [0147.202] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.202] wcscmp (_String1="..", _String2=".") returned 1 [0147.202] wcscmp (_String1="..", _String2="..") returned 0 [0147.202] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0147.202] wcscmp (_String1="1033", _String2=".") returned 1 [0147.202] wcscmp (_String1="1033", _String2="..") returned 1 [0147.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1eb40 [0147.202] wcscpy (in: _Dest=0x3e1eb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" [0147.202] wcscat (in: _Dest=0x3e1eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\" [0147.203] wcscat (in: _Dest=0x3e1eb40, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" [0148.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0148.273] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0148.273] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0148.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0148.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a758) returned 1 [0148.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23ec0) returned 1 Thread: id = 1380 os_tid = 0x6fc [0144.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat")) returned 0x20 [0147.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT", dwFileAttributes=0x20) returned 0 [0147.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.092] GetLastError () returned 0x5 [0147.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT", dwFileAttributes=0x20) returned 0 [0147.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b4d8) returned 1 Thread: id = 1381 os_tid = 0xbf8 [0144.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat")) returned 0x20 [0147.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT", dwFileAttributes=0x20) returned 0 [0147.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.200] GetLastError () returned 0x5 [0147.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT", dwFileAttributes=0x20) returned 0 [0147.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 Thread: id = 1382 os_tid = 0x564 [0144.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng")) returned 0x20 [0147.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG", dwFileAttributes=0x20) returned 0 [0147.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.089] GetLastError () returned 0x5 [0147.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG", dwFileAttributes=0x20) returned 0 [0147.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c1f8) returned 1 Thread: id = 1383 os_tid = 0x56c [0144.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add")) returned 0x20 [0147.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD", dwFileAttributes=0x20) returned 0 [0147.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.197] GetLastError () returned 0x5 [0147.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD", dwFileAttributes=0x20) returned 0 [0147.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c108) returned 1 Thread: id = 1384 os_tid = 0xb48 [0144.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest")) returned 0x20 [0147.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest", dwFileAttributes=0x20) returned 0 [0147.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.087] GetLastError () returned 0x5 [0147.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest", dwFileAttributes=0x20) returned 0 [0147.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 1385 os_tid = 0x848 [0144.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml")) returned 0x20 [0147.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML", dwFileAttributes=0x20) returned 0 [0147.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.195] GetLastError () returned 0x5 [0147.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML", dwFileAttributes=0x20) returned 0 [0147.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b460) returned 1 Thread: id = 1386 os_tid = 0x230 [0144.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml")) returned 0x20 [0147.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML", dwFileAttributes=0x20) returned 0 [0147.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.085] GetLastError () returned 0x5 [0147.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML", dwFileAttributes=0x20) returned 0 [0147.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b898) returned 1 Thread: id = 1387 os_tid = 0xd08 [0144.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f34008 [0144.953] wcscpy (in: _Dest=0x3f34008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" [0144.953] wcscat (in: _Dest=0x3f34008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\" [0144.953] wcscat (in: _Dest=0x3f34008, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*" [0144.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0144.953] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ba9270, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38358 [0147.084] wcscmp (_String1=".", _String2=".") returned 0 [0147.084] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ba9270, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.084] wcscmp (_String1="..", _String2=".") returned 1 [0147.084] wcscmp (_String1="..", _String2="..") returned 0 [0147.084] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0147.084] wcscmp (_String1="1033", _String2=".") returned 1 [0147.084] wcscmp (_String1="1033", _String2="..") returned 1 [0147.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df9438 [0147.084] wcscpy (in: _Dest=0x3df9438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" [0147.084] wcscat (in: _Dest=0x3df9438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\" [0147.084] wcscat (in: _Dest=0x3df9438, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0149.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df9438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0149.562] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0149.562] FindClose (in: hFindFile=0x3f38358 | out: hFindFile=0x3f38358) returned 1 [0149.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0149.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34008) returned 1 [0149.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5470) returned 1 Thread: id = 1388 os_tid = 0xd54 [0144.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng")) returned 0x20 [0147.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG", dwFileAttributes=0x20) returned 0 [0147.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.082] GetLastError () returned 0x5 [0147.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG", dwFileAttributes=0x20) returned 0 [0147.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 Thread: id = 1389 os_tid = 0x8d0 [0144.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest")) returned 0x20 [0147.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest", dwFileAttributes=0x20) returned 0 [0147.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.080] GetLastError () returned 0x5 [0147.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest", dwFileAttributes=0x20) returned 0 [0147.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 1390 os_tid = 0x924 [0144.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f34158 [0144.955] wcscpy (in: _Dest=0x3f34158, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0144.956] wcscat (in: _Dest=0x3f34158, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0144.956] wcscat (in: _Dest=0x3f34158, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*" [0144.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81016e0 [0144.956] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x824623b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0147.403] wcscmp (_String1=".", _String2=".") returned 0 [0147.403] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x824623b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.403] wcscmp (_String1="..", _String2=".") returned 1 [0147.403] wcscmp (_String1="..", _String2="..") returned 0 [0147.403] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0147.403] wcscmp (_String1="Certificates", _String2=".") returned 1 [0147.403] wcscmp (_String1="Certificates", _String2="..") returned 1 [0147.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ec50 [0147.403] wcscpy (in: _Dest=0x3e1ec50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0147.403] wcscat (in: _Dest=0x3e1ec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0147.403] wcscat (in: _Dest=0x3e1ec50, _Source="Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0148.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e1ec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0148.315] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77038290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1 [0148.315] wcscmp (_String1="Sounds", _String2=".") returned 1 [0148.315] wcscmp (_String1="Sounds", _String2="..") returned 1 [0148.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3db0d88 [0148.316] wcscpy (in: _Dest=0x3db0d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0148.316] wcscat (in: _Dest=0x3db0d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0148.316] wcscat (in: _Dest=0x3db0d88, _Source="Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0148.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3db0d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0148.317] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770aa6b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolBMPs", cAlternateFileName="")) returned 1 [0148.317] wcscmp (_String1="ToolBMPs", _String2=".") returned 1 [0148.317] wcscmp (_String1="ToolBMPs", _String2="..") returned 1 [0148.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3db0088 [0148.317] wcscpy (in: _Dest=0x3db0088, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0148.317] wcscat (in: _Dest=0x3db0088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0148.317] wcscat (in: _Dest=0x3db0088, _Source="ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0148.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3db0088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0148.318] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76451490, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolData", cAlternateFileName="")) returned 1 [0148.318] wcscmp (_String1="ToolData", _String2=".") returned 1 [0148.318] wcscmp (_String1="ToolData", _String2="..") returned 1 [0148.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3daf908 [0148.318] wcscpy (in: _Dest=0x3daf908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0148.319] wcscat (in: _Dest=0x3daf908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0148.319] wcscat (in: _Dest=0x3daf908, _Source="ToolData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" [0148.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3daf908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0148.320] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1 [0148.320] wcscmp (_String1="ToolIcons", _String2=".") returned 1 [0148.320] wcscmp (_String1="ToolIcons", _String2="..") returned 1 [0148.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dafd88 [0148.320] wcscpy (in: _Dest=0x3dafd88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0148.320] wcscat (in: _Dest=0x3dafd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0148.320] wcscat (in: _Dest=0x3dafd88, _Source="ToolIcons" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" [0148.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dafd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0148.321] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 1 [0148.321] wcscmp (_String1="XML Files", _String2=".") returned 1 [0148.321] wcscmp (_String1="XML Files", _String2="..") returned 1 [0148.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dafa88 [0148.321] wcscpy (in: _Dest=0x3dafa88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0148.321] wcscat (in: _Dest=0x3dafa88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0148.321] wcscat (in: _Dest=0x3dafa88, _Source="XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0148.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dafa88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098 [0148.323] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 0 [0148.323] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0148.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81016e0) returned 1 [0148.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34158) returned 1 [0148.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5080) returned 1 Thread: id = 1391 os_tid = 0x75c [0144.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x30152b0 [0144.956] wcscpy (in: _Dest=0x30152b0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" [0144.956] wcscat (in: _Dest=0x30152b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\" [0144.956] wcscat (in: _Dest=0x30152b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" [0144.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0144.956] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0146.386] wcscmp (_String1=".", _String2=".") returned 0 [0146.387] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.387] wcscmp (_String1="..", _String2=".") returned 1 [0146.387] wcscmp (_String1="..", _String2="..") returned 0 [0146.387] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.387] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0146.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0146.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0146.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39708) returned 1 Thread: id = 1392 os_tid = 0x8cc [0144.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f340e8 [0144.957] wcscpy (in: _Dest=0x3f340e8, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0144.957] wcscat (in: _Dest=0x3f340e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\" [0144.957] wcscat (in: _Dest=0x3f340e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*" [0144.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0144.957] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0146.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f340e8) returned 1 [0146.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5320) returned 1 Thread: id = 1393 os_tid = 0x920 [0144.957] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 0x20 [0147.322] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0147.322] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.322] GetLastError () returned 0x5 [0147.322] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0147.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 1394 os_tid = 0x7f0 [0144.958] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 0x20 [0147.319] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0147.320] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.320] GetLastError () returned 0x5 [0147.320] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0147.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f6f0) returned 1 Thread: id = 1395 os_tid = 0x8d8 [0144.958] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 0x20 [0147.317] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0147.317] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.318] GetLastError () returned 0x5 [0147.318] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0147.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ebc8) returned 1 Thread: id = 1396 os_tid = 0x8ec [0144.958] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 0x20 [0147.315] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0147.315] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.316] GetLastError () returned 0x5 [0147.316] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0147.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ef80) returned 1 Thread: id = 1397 os_tid = 0x92c [0144.958] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 0x20 [0147.313] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0147.313] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.313] GetLastError () returned 0x5 [0147.313] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0147.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f008) returned 1 Thread: id = 1398 os_tid = 0x940 [0144.959] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 0x20 [0147.311] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0147.311] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.311] GetLastError () returned 0x5 [0147.311] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0147.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ede8) returned 1 Thread: id = 1399 os_tid = 0x740 [0144.959] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 0x20 [0147.309] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0147.309] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.309] GetLastError () returned 0x5 [0147.309] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0147.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eef8) returned 1 Thread: id = 1400 os_tid = 0x90c [0144.959] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 0x20 [0147.307] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0147.307] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.307] GetLastError () returned 0x5 [0147.307] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0147.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 1401 os_tid = 0x91c [0144.959] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 0x20 [0147.304] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0147.304] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.305] GetLastError () returned 0x5 [0147.305] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0147.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 1402 os_tid = 0xbe4 [0144.960] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 0x20 [0147.336] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0147.336] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.337] GetLastError () returned 0x5 [0147.337] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0147.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec50) returned 1 Thread: id = 1403 os_tid = 0xc8 [0144.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\dexshare.spi")) returned 0x20 [0147.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi", dwFileAttributes=0x20) returned 0 [0147.077] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\dexshare.spi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.078] GetLastError () returned 0x5 [0147.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi", dwFileAttributes=0x20) returned 0 [0147.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053da8) returned 1 Thread: id = 1404 os_tid = 0x7b4 [0144.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\services.cfg")) returned 0x20 [0147.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg", dwFileAttributes=0x20) returned 0 [0147.190] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\services.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.190] GetLastError () returned 0x5 [0147.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg", dwFileAttributes=0x20) returned 0 [0147.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eb40) returned 1 Thread: id = 1405 os_tid = 0x960 [0144.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e5b8 [0144.960] wcscpy (in: _Dest=0x3d8e5b8, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" [0144.961] wcscat (in: _Dest=0x3d8e5b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\" [0144.961] wcscat (in: _Dest=0x3d8e5b8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*" [0144.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d228 [0144.961] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x3f3d228 | out: lpFindFileData=0x3f3d228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d228) returned 1 [0146.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e5b8) returned 1 [0146.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd5b0) returned 1 Thread: id = 1406 os_tid = 0x970 [0144.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33ac8 [0144.962] wcscpy (in: _Dest=0x3f33ac8, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" [0144.962] wcscat (in: _Dest=0x3f33ac8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\" [0144.962] wcscat (in: _Dest=0x3f33ac8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*" [0144.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b548 [0144.962] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0147.335] wcscmp (_String1=".", _String2=".") returned 0 [0147.335] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.335] wcscmp (_String1="..", _String2=".") returned 1 [0147.335] wcscmp (_String1="..", _String2="..") returned 0 [0147.335] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0147.335] wcscmp (_String1="WelcomeScan.jpg", _String2=".") returned 1 [0147.335] wcscmp (_String1="WelcomeScan.jpg", _String2="..") returned 1 [0147.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30fb8 [0147.335] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" [0147.335] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\" [0147.335] wcscat (in: _Dest=0x3f30fb8, _Source="WelcomeScan.jpg" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" [0148.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0148.313] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0148.313] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0148.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b548) returned 1 [0148.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33ac8) returned 1 [0148.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c5a0) returned 1 Thread: id = 1407 os_tid = 0x990 [0144.962] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\-ez3tm6tz0ukmgaob9v_.wav")) returned 0x20 [0145.785] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav", dwFileAttributes=0x20) returned 1 [0145.836] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\-ez3tm6tz0ukmgaob9v_.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10e0 [0146.162] GetFileSizeEx (in: hFile=0x10e0, lpFileSize=0x9c5fac8 | out: lpFileSize=0x9c5fac8*=22430) returned 1 [0146.162] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x579a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.163] ReadFile (in: hFile=0x10e0, lpBuffer=0x9c5fad4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9c5fab0, lpOverlapped=0x0 | out: lpBuffer=0x9c5fad4*, lpNumberOfBytesRead=0x9c5fab0*=0x4, lpOverlapped=0x0) returned 1 [0146.164] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0146.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0146.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0146.165] NtQuerySystemTime (in: CurrentTime=0x9c5fa50 | out: CurrentTime=0x9c5fa50*=132471540147396000) returned 0x0 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x3117b02f [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x40f4fc94 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x714b5168 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x73d19a4c [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x5068cad3 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x2a90bcd5 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x4b83f9eb [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x619d9265 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x4783536c [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x5f37e068 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x7990a761 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x1abf522 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x4dea59c7 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x4e5d1970 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x1feb29f5 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x73b65d11 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x1c5a0097 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x4405b90e [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x35f7f1c9 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x5b489fa6 [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x5424e99b [0146.165] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x1687fd88 [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x5e4a1fe1 [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x3267cf54 [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x7f871fe2 [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x19fe93cb [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x3a4ea127 [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x67045f46 [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x14e4c60b [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x1314a8b6 [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x189a88a1 [0146.166] RtlRandomEx (in: Seed=0x9c5fa48 | out: Seed=0x9c5fa48) returned 0x51b009a [0146.176] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.177] ReadFile (in: hFile=0x10e0, lpBuffer=0x82718b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9c5fa50, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesRead=0x9c5fa50*=0x3c00, lpOverlapped=0x0) returned 1 [0146.177] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0146.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0146.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82754b8 [0146.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0146.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0146.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0146.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.178] WriteFile (in: hFile=0x10e0, lpBuffer=0x82754b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9c5fa50, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesWritten=0x9c5fa50*=0x3c00, lpOverlapped=0x0) returned 1 [0146.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0146.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0146.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e6d760 [0146.480] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.480] WriteFile (in: hFile=0x10e0, lpBuffer=0x3dd8b80*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x9c5fabc, lpOverlapped=0x0 | out: lpBuffer=0x3dd8b80*, lpNumberOfBytesWritten=0x9c5fabc*=0x122, lpOverlapped=0x0) returned 1 [0146.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0146.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cea8) returned 1 [0146.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0146.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d760) returned 1 [0146.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0146.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0146.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0146.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0146.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e657a0 [0146.549] wcscpy (in: _Dest=0x3e657a0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav" [0146.549] wcscat (in: _Dest=0x3e657a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav.f0dbec" [0146.549] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav.f0dbec", NtPathName=0x9c5fa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\-EZ3TM6Tz0ukmGaoB9V_.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddee38 [0146.728] FlushFileBuffers (hFile=0x10e0) returned 1 [0146.799] CloseHandle (hObject=0x10e0) returned 1 [0146.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333168 [0146.804] wcscpy (in: _Dest=0x333168, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0146.804] wcscat (in: _Dest=0x333168, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" [0146.804] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\f0dbec-readme.txt")) returned 0x20 [0146.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 [0146.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 Thread: id = 1408 os_tid = 0x9a0 [0144.963] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\huoprqcrrvdbt.wav")) returned 0x20 [0145.785] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav", dwFileAttributes=0x20) returned 1 [0145.836] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\huoprqcrrvdbt.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd94 [0146.147] GetFileSizeEx (in: hFile=0xd94, lpFileSize=0xf1efc00 | out: lpFileSize=0xf1efc00*=81837) returned 1 [0146.147] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x13fa9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.147] ReadFile (in: hFile=0xd94, lpBuffer=0xf1efc0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf1efbe8, lpOverlapped=0x0 | out: lpBuffer=0xf1efc0c*, lpNumberOfBytesRead=0xf1efbe8*=0x4, lpOverlapped=0x0) returned 1 [0146.149] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0146.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0146.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0146.149] NtQuerySystemTime (in: CurrentTime=0xf1efb88 | out: CurrentTime=0xf1efb88*=132471540147240000) returned 0x0 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x53a08ed1 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x7eb7acfc [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x2af18ddf [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x32e5a0dc [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x7759697b [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x6aa462b5 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x26258a84 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x744e8ee8 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x564985a3 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x40509be1 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x1da24308 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x3798fcbe [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x515c4276 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x1bb6950d [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0xd2984d6 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x7fec95a4 [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x3c953ddd [0146.149] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x64f4573c [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x5277a133 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x74cff5f [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x5ec9c1e4 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x1eb5f506 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x4025c321 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x417c8921 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x6ec68adb [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x40a64d61 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x45eeee18 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x41ce455 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x13085227 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x718aaa1c [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x201dabf9 [0146.150] RtlRandomEx (in: Seed=0xf1efb80 | out: Seed=0xf1efb80) returned 0x431f60ab [0146.161] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.161] ReadFile (in: hFile=0xd94, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf1efb88, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0xf1efb88*=0x3c00, lpOverlapped=0x0) returned 1 [0146.161] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0146.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0146.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0146.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0146.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0146.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0146.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.162] WriteFile (in: hFile=0xd94, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf1efb88, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xf1efb88*=0x3c00, lpOverlapped=0x0) returned 1 [0146.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0146.474] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.474] ReadFile (in: hFile=0xd94, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf1efb88, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0xf1efb88*=0x3c00, lpOverlapped=0x0) returned 1 [0146.474] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d760 [0146.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0146.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0146.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0146.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0146.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0146.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0146.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d760) returned 1 [0146.475] WriteFile (in: hFile=0xd94, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf1efb88, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xf1efb88*=0x3c00, lpOverlapped=0x0) returned 1 [0146.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0146.481] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x103ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.481] ReadFile (in: hFile=0xd94, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf1efb88, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0xf1efb88*=0x3c00, lpOverlapped=0x0) returned 1 [0146.481] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x103ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6ccb0 [0146.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0146.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0146.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0146.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0146.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0146.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0146.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ccb0) returned 1 [0146.482] WriteFile (in: hFile=0xd94, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf1efb88, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xf1efb88*=0x3c00, lpOverlapped=0x0) returned 1 [0146.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0146.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd8f0 [0146.487] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.487] WriteFile (in: hFile=0xd94, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xf1efbf4, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xf1efbf4*=0x154, lpOverlapped=0x0) returned 1 [0146.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0146.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77bb0) returned 1 [0146.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0146.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77b08) returned 1 [0146.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd8f0) returned 1 [0146.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0146.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0146.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0146.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e35668 [0146.554] wcscpy (in: _Dest=0x3e35668, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav" [0146.554] wcscat (in: _Dest=0x3e35668, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav.f0dbec" [0146.554] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav.f0dbec", NtPathName=0xf1efb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\huoPrqCrRvDbt.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8568 [0146.737] FlushFileBuffers (hFile=0xd94) returned 1 [0146.777] CloseHandle (hObject=0xd94) returned 1 [0146.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333fa8 [0146.778] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0146.778] wcscat (in: _Dest=0x333fa8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" [0146.778] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\f0dbec-readme.txt")) returned 0x20 [0146.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 [0146.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 1409 os_tid = 0x9b0 [0144.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7098 [0144.963] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" [0144.963] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0144.963] wcscat (in: _Dest=0x2ff7098, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\*") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\*" [0144.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0144.963] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf57fb3d0, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0x3105aa90, ftLastAccessTime.dwHighDateTime=0x1d5e117, ftLastWriteTime.dwLowDateTime=0x3105aa90, ftLastWriteTime.dwHighDateTime=0x1d5e117, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0145.784] wcscmp (_String1=".", _String2=".") returned 0 [0145.784] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf57fb3d0, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0x3105aa90, ftLastAccessTime.dwHighDateTime=0x1d5e117, ftLastWriteTime.dwLowDateTime=0x3105aa90, ftLastWriteTime.dwHighDateTime=0x1d5e117, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.784] wcscmp (_String1="..", _String2=".") returned 1 [0145.785] wcscmp (_String1="..", _String2="..") returned 0 [0145.785] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d08800, ftCreationTime.dwHighDateTime=0x1d5e54d, ftLastAccessTime.dwLowDateTime=0xe600f6a0, ftLastAccessTime.dwHighDateTime=0x1d5e47f, ftLastWriteTime.dwLowDateTime=0xe600f6a0, ftLastWriteTime.dwHighDateTime=0x1d5e47f, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="gznVbmDSEmcsW9HS5Yq.mp3", cAlternateFileName="GZNVBM~1.MP3")) returned 1 [0145.785] wcscmp (_String1="gznVbmDSEmcsW9HS5Yq.mp3", _String2=".") returned 1 [0145.785] wcscmp (_String1="gznVbmDSEmcsW9HS5Yq.mp3", _String2="..") returned 1 [0145.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8b88 [0145.785] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" [0145.785] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0145.785] wcscat (in: _Dest=0x2c8b88, _Source="gznVbmDSEmcsW9HS5Yq.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3" [0149.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0149.170] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5468a0, ftCreationTime.dwHighDateTime=0x1d5de66, ftLastAccessTime.dwLowDateTime=0xfd42e210, ftLastAccessTime.dwHighDateTime=0x1d5dcc3, ftLastWriteTime.dwLowDateTime=0xfd42e210, ftLastWriteTime.dwHighDateTime=0x1d5dcc3, nFileSizeHigh=0x0, nFileSizeLow=0x2cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="qIuBEGvUwFl92b.mp3", cAlternateFileName="QIUBEG~1.MP3")) returned 1 [0149.170] wcscmp (_String1="qIuBEGvUwFl92b.mp3", _String2=".") returned 1 [0149.170] wcscmp (_String1="qIuBEGvUwFl92b.mp3", _String2="..") returned 1 [0149.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e64438 [0149.170] wcscpy (in: _Dest=0x3e64438, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" [0149.170] wcscat (in: _Dest=0x3e64438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0149.170] wcscat (in: _Dest=0x3e64438, _Source="qIuBEGvUwFl92b.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3" [0149.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0149.171] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x326a39b0, ftCreationTime.dwHighDateTime=0x1d5e814, ftLastAccessTime.dwLowDateTime=0x11a4d190, ftLastAccessTime.dwHighDateTime=0x1d5e57b, ftLastWriteTime.dwLowDateTime=0x11a4d190, ftLastWriteTime.dwHighDateTime=0x1d5e57b, nFileSizeHigh=0x0, nFileSizeLow=0x1712b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QJYLY6psWWQdwdryhq4.mp3", cAlternateFileName="QJYLY6~1.MP3")) returned 1 [0149.171] wcscmp (_String1="QJYLY6psWWQdwdryhq4.mp3", _String2=".") returned 1 [0149.171] wcscmp (_String1="QJYLY6psWWQdwdryhq4.mp3", _String2="..") returned 1 [0149.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8568 [0149.171] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" [0149.172] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0149.172] wcscat (in: _Dest=0x2c8568, _Source="QJYLY6psWWQdwdryhq4.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3" [0149.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0149.173] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a83590, ftCreationTime.dwHighDateTime=0x1d5d9f8, ftLastAccessTime.dwLowDateTime=0xbe6191a0, ftLastAccessTime.dwHighDateTime=0x1d5daec, ftLastWriteTime.dwLowDateTime=0xbe6191a0, ftLastWriteTime.dwHighDateTime=0x1d5daec, nFileSizeHigh=0x0, nFileSizeLow=0xad2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YP8FSc3Sxcb.m4a", cAlternateFileName="YP8FSC~1.M4A")) returned 1 [0149.173] wcscmp (_String1="YP8FSc3Sxcb.m4a", _String2=".") returned 1 [0149.173] wcscmp (_String1="YP8FSc3Sxcb.m4a", _String2="..") returned 1 [0149.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b558 [0149.173] wcscpy (in: _Dest=0x3e1b558, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" [0149.173] wcscat (in: _Dest=0x3e1b558, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0149.173] wcscat (in: _Dest=0x3e1b558, _Source="YP8FSc3Sxcb.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a" [0149.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0149.174] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d7cfd00, ftCreationTime.dwHighDateTime=0x1d5df16, ftLastAccessTime.dwLowDateTime=0xa79e6930, ftLastAccessTime.dwHighDateTime=0x1d5dfe1, ftLastWriteTime.dwLowDateTime=0xa79e6930, ftLastWriteTime.dwHighDateTime=0x1d5dfe1, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YXeDiO7XBtzE.m4a", cAlternateFileName="YXEDIO~1.M4A")) returned 1 [0149.174] wcscmp (_String1="YXeDiO7XBtzE.m4a", _String2=".") returned 1 [0149.174] wcscmp (_String1="YXeDiO7XBtzE.m4a", _String2="..") returned 1 [0149.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e64288 [0149.174] wcscpy (in: _Dest=0x3e64288, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR" [0149.174] wcscat (in: _Dest=0x3e64288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0149.175] wcscat (in: _Dest=0x3e64288, _Source="YXeDiO7XBtzE.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a" [0149.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0149.176] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d7cfd00, ftCreationTime.dwHighDateTime=0x1d5df16, ftLastAccessTime.dwLowDateTime=0xa79e6930, ftLastAccessTime.dwHighDateTime=0x1d5dfe1, ftLastWriteTime.dwLowDateTime=0xa79e6930, ftLastWriteTime.dwHighDateTime=0x1d5dfe1, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YXeDiO7XBtzE.m4a", cAlternateFileName="YXEDIO~1.M4A")) returned 0 [0149.176] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0149.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0149.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 [0149.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c798) returned 1 Thread: id = 1410 os_tid = 0x9c0 [0144.964] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\lnz3azu.wav")) returned 0x20 [0145.784] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav", dwFileAttributes=0x20) returned 1 [0145.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\lnz3azu.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x106c [0146.132] GetFileSizeEx (in: hFile=0x106c, lpFileSize=0xa79fe20 | out: lpFileSize=0xa79fe20*=97303) returned 1 [0146.132] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x17c13, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.132] ReadFile (in: hFile=0x106c, lpBuffer=0xa79fe2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa79fe08, lpOverlapped=0x0 | out: lpBuffer=0xa79fe2c*, lpNumberOfBytesRead=0xa79fe08*=0x4, lpOverlapped=0x0) returned 1 [0146.134] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0146.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0146.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0146.134] NtQuerySystemTime (in: CurrentTime=0xa79fda8 | out: CurrentTime=0xa79fda8*=132471540147084000) returned 0x0 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x8cc6168 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x3d81a631 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x3d4ed2a0 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x3fa656fa [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x3347c240 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x6ec63d52 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x63bafb0a [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0xf16f9a9 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x2ce25049 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x3b53345c [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x2b8088d [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x5aabdcf5 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x7493ab31 [0146.134] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x9de6221 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x138f6136 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x44a0b7d3 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x63530cba [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x7d7435d8 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x95dc195 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x66d1dd7d [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x7e5dd8e8 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x3396aa22 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x653e5b68 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x7ea12fb [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x1d66bf62 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x4183aaf5 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x6076f42c [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x407b74a1 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x418e7fbf [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x33d14c73 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x73058aa3 [0146.135] RtlRandomEx (in: Seed=0xa79fda0 | out: Seed=0xa79fda0) returned 0x6e3ddeb5 [0146.145] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.145] ReadFile (in: hFile=0x106c, lpBuffer=0x8262890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa79fda8, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesRead=0xa79fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.145] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0146.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0146.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8266498 [0146.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0146.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0146.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0146.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.146] WriteFile (in: hFile=0x106c, lpBuffer=0x8266498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa79fda8, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesWritten=0xa79fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0146.445] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.445] ReadFile (in: hFile=0x106c, lpBuffer=0x8262890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa79fda8, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesRead=0xa79fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.445] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d760 [0146.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0146.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0146.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8266498 [0146.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0146.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0146.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0146.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d760) returned 1 [0146.446] WriteFile (in: hFile=0x106c, lpBuffer=0x8266498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa79fda8, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesWritten=0xa79fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0146.476] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x14017, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.476] ReadFile (in: hFile=0x106c, lpBuffer=0x8262890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa79fda8, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesRead=0xa79fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.476] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x14017, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d760 [0146.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0146.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0146.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8266498 [0146.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0146.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0146.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0146.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d760) returned 1 [0146.477] WriteFile (in: hFile=0x106c, lpBuffer=0x8266498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa79fda8, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesWritten=0xa79fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0146.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed4b80 [0146.483] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.483] WriteFile (in: hFile=0x106c, lpBuffer=0x3e177a0*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0xa79fe14, lpOverlapped=0x0 | out: lpBuffer=0x3e177a0*, lpNumberOfBytesWritten=0xa79fe14*=0x148, lpOverlapped=0x0) returned 1 [0146.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e177a0) returned 1 [0146.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0146.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0146.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ee0) returned 1 [0146.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4b80) returned 1 [0146.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0146.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0146.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0146.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333fa8 [0146.552] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav" [0146.552] wcscat (in: _Dest=0x333fa8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav.f0dbec" [0146.552] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav.f0dbec", NtPathName=0xa79fd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\lnZ3azu.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e65878 [0146.739] FlushFileBuffers (hFile=0x106c) returned 1 [0146.799] CloseHandle (hObject=0x106c) returned 1 [0146.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333168 [0146.809] wcscpy (in: _Dest=0x333168, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0146.810] wcscat (in: _Dest=0x333168, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" [0146.810] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\f0dbec-readme.txt")) returned 0x20 [0146.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 [0146.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 1411 os_tid = 0x9d0 [0144.966] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\pnxynfebshcnu.mp3")) returned 0x20 [0145.784] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3", dwFileAttributes=0x20) returned 1 [0145.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\pnxynfebshcnu.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf68 [0146.115] GetFileSizeEx (in: hFile=0xf68, lpFileSize=0xf31fc48 | out: lpFileSize=0xf31fc48*=55851) returned 1 [0146.115] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0xda27, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.115] ReadFile (in: hFile=0xf68, lpBuffer=0xf31fc54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf31fc30, lpOverlapped=0x0 | out: lpBuffer=0xf31fc54*, lpNumberOfBytesRead=0xf31fc30*=0x4, lpOverlapped=0x0) returned 1 [0146.117] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0146.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0146.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0146.117] NtQuerySystemTime (in: CurrentTime=0xf31fbd0 | out: CurrentTime=0xf31fbd0*=132471540146928000) returned 0x0 [0146.117] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x307955f7 [0146.117] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x54df98d9 [0146.117] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x329e3285 [0146.117] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0xfc900f [0146.117] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x1f54d1d [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x1c99a49d [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x7c960b14 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x2c199b7a [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x345e97b9 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x9500f8 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x2229a27a [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x7528ec64 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x6b4d5d7f [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x72ed7aca [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x47142a99 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x43e66085 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x44009bc [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x191a8903 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x20907eb1 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x15474d51 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x2301de17 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x16d9f0db [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x386b8ca [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x12a3ecfd [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x5b43265b [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x7751cc68 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x44c8b67 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x684198e8 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x777e8698 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x64bdfa80 [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x710efb [0146.118] RtlRandomEx (in: Seed=0xf31fbc8 | out: Seed=0xf31fbc8) returned 0x553365b1 [0146.130] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.130] ReadFile (in: hFile=0xf68, lpBuffer=0x825b080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf31fbd0, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesRead=0xf31fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.130] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0146.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0146.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825ec88 [0146.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0146.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0146.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0146.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.131] WriteFile (in: hFile=0xf68, lpBuffer=0x825ec88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf31fbd0, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesWritten=0xf31fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0146.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0146.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77a98 [0146.439] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.440] WriteFile (in: hFile=0xf68, lpBuffer=0x3d56810*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xf31fc3c, lpOverlapped=0x0 | out: lpBuffer=0x3d56810*, lpNumberOfBytesWritten=0xf31fc3c*=0x114, lpOverlapped=0x0) returned 1 [0146.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56810) returned 1 [0146.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77b40) returned 1 [0146.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0146.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77a98) returned 1 [0146.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0146.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0146.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0146.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0146.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e355a0 [0146.543] wcscpy (in: _Dest=0x3e355a0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3" [0146.543] wcscat (in: _Dest=0x3e355a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3.f0dbec" [0146.543] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3.f0dbec", NtPathName=0xf31fbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pnxyNfeBshCNu.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0146.611] FlushFileBuffers (hFile=0xf68) returned 1 [0146.615] CloseHandle (hObject=0xf68) returned 1 [0146.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333468 [0146.631] wcscpy (in: _Dest=0x333468, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0146.631] wcscat (in: _Dest=0x333468, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" [0146.631] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\f0dbec-readme.txt")) returned 0xffffffff [0146.631] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xddc [0146.648] WriteFile (in: hFile=0xddc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf31fbe4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf31fbe4*=0x70c, lpOverlapped=0x0) returned 1 [0146.663] CloseHandle (hObject=0xddc) returned 1 [0146.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 [0146.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 1412 os_tid = 0x9e0 [0144.966] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\pwwbiwnpb.m4a")) returned 0x20 [0145.784] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a", dwFileAttributes=0x20) returned 1 [0145.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\pwwbiwnpb.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x578 [0146.094] GetFileSizeEx (in: hFile=0x578, lpFileSize=0x951f8c8 | out: lpFileSize=0x951f8c8*=94807) returned 1 [0146.094] SetFilePointerEx (in: hFile=0x578, liDistanceToMove=0x17253, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.094] ReadFile (in: hFile=0x578, lpBuffer=0x951f8d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x951f8b0, lpOverlapped=0x0 | out: lpBuffer=0x951f8d4*, lpNumberOfBytesRead=0x951f8b0*=0x4, lpOverlapped=0x0) returned 1 [0146.096] SetFilePointerEx (in: hFile=0x578, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0146.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c748 [0146.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0146.096] NtQuerySystemTime (in: CurrentTime=0x951f850 | out: CurrentTime=0x951f850*=132471540146772000) returned 0x0 [0146.096] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x3e250e1f [0146.096] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x6b99115e [0146.096] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0xb6d4cc7 [0146.096] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x68cb3662 [0146.096] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x6ac1e5b6 [0146.096] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x7a2d9968 [0146.096] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x336ce2c2 [0146.096] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x8b44664 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x133bb770 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x156792d2 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x562e27e8 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x3de9e83d [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x504c4ea6 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x68aa1f75 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x453e6ceb [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x4151b061 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x258dab71 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x58165a9b [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x7771db54 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x2115bb8e [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x62580e18 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x458aa7c [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0xff4ad3b [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x6d1db65 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x66331129 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x78c39aae [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x3d8abcd0 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x26a4dee6 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x320aecba [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x68293346 [0146.097] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x539cd049 [0146.098] RtlRandomEx (in: Seed=0x951f848 | out: Seed=0x951f848) returned 0x15c1608 [0146.112] SetFilePointerEx (in: hFile=0x578, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.112] ReadFile (in: hFile=0x578, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x951f850, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x951f850*=0x3c00, lpOverlapped=0x0) returned 1 [0146.113] SetFilePointerEx (in: hFile=0x578, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0146.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0146.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0146.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0146.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0146.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0146.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.114] WriteFile (in: hFile=0x578, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x951f850, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x951f850*=0x3c00, lpOverlapped=0x0) returned 1 [0146.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0146.433] SetFilePointerEx (in: hFile=0x578, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.433] ReadFile (in: hFile=0x578, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x951f850, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x951f850*=0x3c00, lpOverlapped=0x0) returned 1 [0146.433] SetFilePointerEx (in: hFile=0x578, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d010 [0146.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0146.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0146.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0146.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0146.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0146.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0146.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d010) returned 1 [0146.434] WriteFile (in: hFile=0x578, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x951f850, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x951f850*=0x3c00, lpOverlapped=0x0) returned 1 [0146.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0146.440] SetFilePointerEx (in: hFile=0x578, liDistanceToMove=0x13657, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.440] ReadFile (in: hFile=0x578, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x951f850, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x951f850*=0x3c00, lpOverlapped=0x0) returned 1 [0146.441] SetFilePointerEx (in: hFile=0x578, liDistanceToMove=0x13657, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d010 [0146.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0146.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0146.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0146.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0146.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0146.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0146.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d010) returned 1 [0146.442] WriteFile (in: hFile=0x578, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x951f850, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x951f850*=0x3c00, lpOverlapped=0x0) returned 1 [0146.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0146.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed4d88 [0146.448] SetFilePointerEx (in: hFile=0x578, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.448] WriteFile (in: hFile=0x578, lpBuffer=0x3e16f90*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x951f8bc, lpOverlapped=0x0 | out: lpBuffer=0x3e16f90*, lpNumberOfBytesWritten=0x951f8bc*=0x14c, lpOverlapped=0x0) returned 1 [0146.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16f90) returned 1 [0146.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68eb0) returned 1 [0146.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0146.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e80) returned 1 [0146.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4d88) returned 1 [0146.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0146.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c720) returned 1 [0146.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0146.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333e28 [0146.547] wcscpy (in: _Dest=0x333e28, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a" [0146.547] wcscat (in: _Dest=0x333e28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a.f0dbec" [0146.547] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a.f0dbec", NtPathName=0x951f840, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\pWWBIwnPB.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e656c8 [0146.715] FlushFileBuffers (hFile=0x578) returned 1 [0146.798] CloseHandle (hObject=0x578) returned 1 [0146.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333168 [0146.813] wcscpy (in: _Dest=0x333168, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0146.814] wcscat (in: _Dest=0x333168, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" [0146.814] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\f0dbec-readme.txt")) returned 0x20 [0146.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 [0146.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 1413 os_tid = 0x9f0 [0144.967] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\t3kq_mxadqcprdyl2h.wav")) returned 0x20 [0145.784] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav", dwFileAttributes=0x20) returned 1 [0145.838] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\t3kq_mxadqcprdyl2h.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x67c [0146.076] GetFileSizeEx (in: hFile=0x67c, lpFileSize=0xf8ffa38 | out: lpFileSize=0xf8ffa38*=100293) returned 1 [0146.076] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x187c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.077] ReadFile (in: hFile=0x67c, lpBuffer=0xf8ffa44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf8ffa20, lpOverlapped=0x0 | out: lpBuffer=0xf8ffa44*, lpNumberOfBytesRead=0xf8ffa20*=0x4, lpOverlapped=0x0) returned 1 [0146.078] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0146.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0146.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0146.079] NtQuerySystemTime (in: CurrentTime=0xf8ff9c0 | out: CurrentTime=0xf8ff9c0*=132471540146616000) returned 0x0 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x3d4762ad [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x27b8d60e [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x37a2d49e [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x4ed23182 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0xf6761f5 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x47cb33b4 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x30ec08c4 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x57686348 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x196f5882 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0xad0f449 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x4291aa2 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x2331a1ed [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x762cc6f0 [0146.079] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x54693eb8 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x5d9fe500 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x360a3c4e [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x38a5bda0 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x40d12621 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x6a23f804 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x25fa272b [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x351c205f [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x4aaf54c8 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x362bc69c [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0xf7ceb68 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x8474076 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x40fbfee1 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x20938edf [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x36e05c52 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x1d2b8c4 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x4eb1dc10 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x6abb1c87 [0146.080] RtlRandomEx (in: Seed=0xf8ff9b8 | out: Seed=0xf8ff9b8) returned 0x550cb8d7 [0146.091] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.091] ReadFile (in: hFile=0x67c, lpBuffer=0x824c060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf8ff9c0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesRead=0xf8ff9c0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.092] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0146.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0146.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0146.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0146.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0146.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0146.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.093] WriteFile (in: hFile=0x67c, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf8ff9c0, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0xf8ff9c0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0146.426] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.426] ReadFile (in: hFile=0x67c, lpBuffer=0x824c060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf8ff9c0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesRead=0xf8ff9c0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.427] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d010 [0146.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0146.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0146.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0146.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0146.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0146.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0146.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d010) returned 1 [0146.428] WriteFile (in: hFile=0x67c, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf8ff9c0, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0xf8ff9c0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0146.435] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x14bc5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.435] ReadFile (in: hFile=0x67c, lpBuffer=0x824c060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf8ff9c0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesRead=0xf8ff9c0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.435] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x14bc5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d010 [0146.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0146.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0146.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0146.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0146.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0146.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0146.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d010) returned 1 [0146.436] WriteFile (in: hFile=0x67c, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf8ff9c0, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0xf8ff9c0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0146.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3e18 [0146.443] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.443] WriteFile (in: hFile=0x67c, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0xf8ffa2c, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0xf8ffa2c*=0x15e, lpOverlapped=0x0) returned 1 [0146.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0146.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d688) returned 1 [0146.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0146.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d010) returned 1 [0146.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3e18) returned 1 [0146.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0146.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0146.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0146.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e655f0 [0146.545] wcscpy (in: _Dest=0x3e655f0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav" [0146.545] wcscat (in: _Dest=0x3e655f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav.f0dbec" [0146.545] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav.f0dbec", NtPathName=0xf8ff9b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\t3Kq_MXAdQcPRdYL2H.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e39dc8 [0146.705] FlushFileBuffers (hFile=0x67c) returned 1 [0146.792] CloseHandle (hObject=0x67c) returned 1 [0146.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333168 [0146.793] wcscpy (in: _Dest=0x333168, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\" [0146.793] wcscat (in: _Dest=0x333168, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" [0146.793] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\f0dbec-readme.txt")) returned 0x20 [0146.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 [0146.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 Thread: id = 1414 os_tid = 0xa00 [0144.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.tur")) returned 0x20 [0149.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", dwFileAttributes=0x20) returned 0 [0149.725] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.725] GetLastError () returned 0x5 [0149.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", dwFileAttributes=0x20) returned 0 [0149.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc10) returned 1 Thread: id = 1415 os_tid = 0xa10 [0144.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ukr")) returned 0x20 [0149.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", dwFileAttributes=0x20) returned 0 [0149.728] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.728] GetLastError () returned 0x5 [0149.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", dwFileAttributes=0x20) returned 0 [0149.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 1416 os_tid = 0xa30 [0144.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cat")) returned 0x20 [0149.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", dwFileAttributes=0x20) returned 0 [0149.730] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.730] GetLastError () returned 0x5 [0149.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", dwFileAttributes=0x20) returned 0 [0149.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2378) returned 1 Thread: id = 1417 os_tid = 0x130c [0144.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.chs")) returned 0x20 [0149.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", dwFileAttributes=0x20) returned 0 [0149.731] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.731] GetLastError () returned 0x5 [0149.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", dwFileAttributes=0x20) returned 0 [0149.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb16a8) returned 1 Thread: id = 1418 os_tid = 0xa50 [0144.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cht")) returned 0x20 [0149.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", dwFileAttributes=0x20) returned 0 [0149.733] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.733] GetLastError () returned 0x5 [0149.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", dwFileAttributes=0x20) returned 0 [0149.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1738) returned 1 Thread: id = 1419 os_tid = 0xa60 [0144.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cze")) returned 0x20 [0149.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", dwFileAttributes=0x20) returned 0 [0149.726] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.727] GetLastError () returned 0x5 [0149.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", dwFileAttributes=0x20) returned 0 [0149.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb17c8) returned 1 Thread: id = 1420 os_tid = 0x1310 [0144.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg")) returned 0x20 [0147.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.187] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.187] GetLastError () returned 0x5 [0147.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2af50) returned 1 Thread: id = 1421 os_tid = 0x1314 [0144.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif")) returned 0x20 [0147.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif", dwFileAttributes=0x20) returned 0 [0147.075] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.075] GetLastError () returned 0x5 [0147.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif", dwFileAttributes=0x20) returned 0 [0147.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34ef0) returned 1 Thread: id = 1422 os_tid = 0x1318 [0144.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\bl.gif")) returned 0x20 [0147.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif", dwFileAttributes=0x20) returned 0 [0147.073] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.073] GetLastError () returned 0x5 [0147.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif", dwFileAttributes=0x20) returned 0 [0147.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcab08) returned 1 Thread: id = 1423 os_tid = 0x131c [0144.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\br.gif")) returned 0x20 [0147.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif", dwFileAttributes=0x20) returned 0 [0147.071] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.071] GetLastError () returned 0x5 [0147.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif", dwFileAttributes=0x20) returned 0 [0147.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x290300) returned 1 Thread: id = 1424 os_tid = 0xb6c [0144.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif")) returned 0x20 [0147.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif", dwFileAttributes=0x20) returned 0 [0147.069] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.069] GetLastError () returned 0x5 [0147.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif", dwFileAttributes=0x20) returned 0 [0147.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1858) returned 1 Thread: id = 1425 os_tid = 0xb60 [0144.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif")) returned 0x20 [0147.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif", dwFileAttributes=0x20) returned 0 [0147.067] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.067] GetLastError () returned 0x5 [0147.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif", dwFileAttributes=0x20) returned 0 [0147.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 1426 os_tid = 0xbac [0144.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif")) returned 0x20 [0147.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif", dwFileAttributes=0x20) returned 0 [0147.065] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.065] GetLastError () returned 0x5 [0147.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif", dwFileAttributes=0x20) returned 0 [0147.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 1427 os_tid = 0xbc0 [0144.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif")) returned 0x20 [0147.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif", dwFileAttributes=0x20) returned 0 [0147.063] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.063] GetLastError () returned 0x5 [0147.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif", dwFileAttributes=0x20) returned 0 [0147.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 1428 os_tid = 0x1320 [0144.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif")) returned 0x20 [0147.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif", dwFileAttributes=0x20) returned 0 [0147.185] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.185] GetLastError () returned 0x5 [0147.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif", dwFileAttributes=0x20) returned 0 [0147.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 Thread: id = 1429 os_tid = 0x1324 [0144.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif")) returned 0x20 [0147.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif", dwFileAttributes=0x20) returned 0 [0147.061] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.061] GetLastError () returned 0x5 [0147.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif", dwFileAttributes=0x20) returned 0 [0147.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb18e8) returned 1 Thread: id = 1430 os_tid = 0x1328 [0144.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif")) returned 0x20 [0147.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif", dwFileAttributes=0x20) returned 0 [0147.059] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.059] GetLastError () returned 0x5 [0147.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif", dwFileAttributes=0x20) returned 0 [0147.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cbb8) returned 1 Thread: id = 1431 os_tid = 0x132c [0144.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif")) returned 0x20 [0147.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", dwFileAttributes=0x20) returned 0 [0147.183] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.183] GetLastError () returned 0x5 [0147.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", dwFileAttributes=0x20) returned 0 [0147.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 1432 os_tid = 0xb68 [0144.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif")) returned 0x20 [0147.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", dwFileAttributes=0x20) returned 0 [0147.181] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.181] GetLastError () returned 0x5 [0147.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", dwFileAttributes=0x20) returned 0 [0147.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a08) returned 1 Thread: id = 1433 os_tid = 0x1330 [0144.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif")) returned 0x20 [0147.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", dwFileAttributes=0x20) returned 0 [0147.057] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.057] GetLastError () returned 0x5 [0147.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", dwFileAttributes=0x20) returned 0 [0147.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 1434 os_tid = 0x1334 [0144.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\info.gif")) returned 0x20 [0147.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", dwFileAttributes=0x20) returned 0 [0147.054] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.055] GetLastError () returned 0x5 [0147.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", dwFileAttributes=0x20) returned 0 [0147.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30911e0) returned 1 Thread: id = 1435 os_tid = 0x1340 [0144.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\main.css")) returned 0x20 [0147.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", dwFileAttributes=0x20) returned 0 [0147.052] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.052] GetLastError () returned 0x5 [0147.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", dwFileAttributes=0x20) returned 0 [0147.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303290) returned 1 Thread: id = 1436 os_tid = 0x588 [0144.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif")) returned 0x20 [0147.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", dwFileAttributes=0x20) returned 0 [0147.050] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.050] GetLastError () returned 0x5 [0147.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", dwFileAttributes=0x20) returned 0 [0147.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 1437 os_tid = 0xab0 [0144.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif")) returned 0x20 [0147.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", dwFileAttributes=0x20) returned 0 [0147.045] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.045] GetLastError () returned 0x5 [0147.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", dwFileAttributes=0x20) returned 0 [0147.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a458) returned 1 Thread: id = 1438 os_tid = 0xad4 [0144.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif")) returned 0x20 [0147.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", dwFileAttributes=0x20) returned 0 [0147.043] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.043] GetLastError () returned 0x5 [0147.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", dwFileAttributes=0x20) returned 0 [0147.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 1439 os_tid = 0xb74 [0144.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif")) returned 0x20 [0147.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", dwFileAttributes=0x20) returned 0 [0147.041] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.041] GetLastError () returned 0x5 [0147.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", dwFileAttributes=0x20) returned 0 [0147.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 Thread: id = 1440 os_tid = 0xbb4 [0144.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif")) returned 0x20 [0147.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", dwFileAttributes=0x20) returned 0 [0147.039] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.039] GetLastError () returned 0x5 [0147.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", dwFileAttributes=0x20) returned 0 [0147.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a98) returned 1 Thread: id = 1441 os_tid = 0xc64 [0145.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif")) returned 0x20 [0147.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", dwFileAttributes=0x20) returned 0 [0147.728] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.729] GetLastError () returned 0x5 [0147.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", dwFileAttributes=0x20) returned 0 [0147.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1b28) returned 1 Thread: id = 1442 os_tid = 0xb14 [0145.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr")) returned 0x20 [0147.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR", dwFileAttributes=0x20) returned 0 [0147.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.179] GetLastError () returned 0x5 [0147.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR", dwFileAttributes=0x20) returned 0 [0147.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053280) returned 1 Thread: id = 1443 os_tid = 0x1c4 [0145.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr")) returned 0x20 [0147.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR", dwFileAttributes=0x20) returned 0 [0147.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.037] GetLastError () returned 0x5 [0147.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR", dwFileAttributes=0x20) returned 0 [0147.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c00) returned 1 Thread: id = 1444 os_tid = 0x7fc [0145.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr")) returned 0x20 [0147.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR", dwFileAttributes=0x20) returned 0 [0147.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.177] GetLastError () returned 0x5 [0147.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR", dwFileAttributes=0x20) returned 0 [0147.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f9f0) returned 1 Thread: id = 1445 os_tid = 0x98c [0145.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr")) returned 0x20 [0147.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR", dwFileAttributes=0x20) returned 0 [0147.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.035] GetLastError () returned 0x5 [0147.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR", dwFileAttributes=0x20) returned 0 [0147.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 1446 os_tid = 0xde4 [0145.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr")) returned 0x20 [0147.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR", dwFileAttributes=0x20) returned 0 [0147.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.175] GetLastError () returned 0x5 [0147.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR", dwFileAttributes=0x20) returned 0 [0147.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 1447 os_tid = 0xe44 [0145.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr")) returned 0x20 [0147.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR", dwFileAttributes=0x20) returned 0 [0147.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.173] GetLastError () returned 0x5 [0147.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR", dwFileAttributes=0x20) returned 0 [0147.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 1448 os_tid = 0x490 [0145.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr")) returned 0x20 [0147.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR", dwFileAttributes=0x20) returned 0 [0147.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.033] GetLastError () returned 0x5 [0147.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR", dwFileAttributes=0x20) returned 0 [0147.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 1449 os_tid = 0xfd0 [0145.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr")) returned 0x20 [0147.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR", dwFileAttributes=0x20) returned 0 [0147.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.030] GetLastError () returned 0x5 [0147.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR", dwFileAttributes=0x20) returned 0 [0147.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 1450 os_tid = 0xfd4 [0145.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr")) returned 0x20 [0147.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR", dwFileAttributes=0x20) returned 0 [0147.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.028] GetLastError () returned 0x5 [0147.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR", dwFileAttributes=0x20) returned 0 [0147.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 1451 os_tid = 0xfdc [0145.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr")) returned 0x20 [0147.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR", dwFileAttributes=0x20) returned 0 [0147.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.025] GetLastError () returned 0x5 [0147.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR", dwFileAttributes=0x20) returned 0 [0147.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a5f8) returned 1 Thread: id = 1452 os_tid = 0x1020 [0145.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr")) returned 0x20 [0147.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR", dwFileAttributes=0x20) returned 0 [0147.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.023] GetLastError () returned 0x5 [0147.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR", dwFileAttributes=0x20) returned 0 [0147.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 1453 os_tid = 0x10e0 [0145.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr")) returned 0x20 [0147.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR", dwFileAttributes=0x20) returned 0 [0147.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.020] GetLastError () returned 0x5 [0147.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR", dwFileAttributes=0x20) returned 0 [0147.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 Thread: id = 1454 os_tid = 0x10e4 [0145.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr")) returned 0x20 [0147.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR", dwFileAttributes=0x20) returned 0 [0147.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.018] GetLastError () returned 0x5 [0147.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR", dwFileAttributes=0x20) returned 0 [0147.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be568) returned 1 Thread: id = 1455 os_tid = 0x10e8 [0145.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr")) returned 0x20 [0147.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR", dwFileAttributes=0x20) returned 0 [0147.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.016] GetLastError () returned 0x5 [0147.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR", dwFileAttributes=0x20) returned 0 [0147.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be5f0) returned 1 Thread: id = 1456 os_tid = 0x10ec [0145.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr")) returned 0x20 [0147.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR", dwFileAttributes=0x20) returned 0 [0147.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.013] GetLastError () returned 0x5 [0147.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR", dwFileAttributes=0x20) returned 0 [0147.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be678) returned 1 Thread: id = 1457 os_tid = 0x10f4 [0145.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7150 [0145.193] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0145.193] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0145.193] wcscat (in: _Dest=0x2ff7150, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*" [0145.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0145.193] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0147.401] wcscmp (_String1=".", _String2=".") returned 0 [0147.401] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.401] wcscmp (_String1="..", _String2=".") returned 1 [0147.401] wcscmp (_String1="..", _String2="..") returned 0 [0147.401] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90a1fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1 [0147.401] wcscmp (_String1="1027.mst", _String2=".") returned 1 [0147.401] wcscmp (_String1="1027.mst", _String2="..") returned 1 [0147.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e34c40 [0147.401] wcscpy (in: _Dest=0x3e34c40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.402] wcscat (in: _Dest=0x3e34c40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.402] wcscat (in: _Dest=0x3e34c40, _Source="1027.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" [0147.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0147.419] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028.mst", cAlternateFileName="")) returned 1 [0147.419] wcscmp (_String1="1028.mst", _String2=".") returned 1 [0147.419] wcscmp (_String1="1028.mst", _String2="..") returned 1 [0147.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35668 [0147.419] wcscpy (in: _Dest=0x3e35668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.419] wcscat (in: _Dest=0x3e35668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.419] wcscat (in: _Dest=0x3e35668, _Source="1028.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" [0147.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0147.431] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029.mst", cAlternateFileName="")) returned 1 [0147.431] wcscmp (_String1="1029.mst", _String2=".") returned 1 [0147.431] wcscmp (_String1="1029.mst", _String2="..") returned 1 [0147.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e354d8 [0147.432] wcscpy (in: _Dest=0x3e354d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.432] wcscat (in: _Dest=0x3e354d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.432] wcscat (in: _Dest=0x3e354d8, _Source="1029.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" [0147.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e354d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0147.442] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030.mst", cAlternateFileName="")) returned 1 [0147.442] wcscmp (_String1="1030.mst", _String2=".") returned 1 [0147.442] wcscmp (_String1="1030.mst", _String2="..") returned 1 [0147.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35410 [0147.442] wcscpy (in: _Dest=0x3e35410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.442] wcscat (in: _Dest=0x3e35410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.442] wcscat (in: _Dest=0x3e35410, _Source="1030.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" [0147.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0147.484] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031.mst", cAlternateFileName="")) returned 1 [0147.484] wcscmp (_String1="1031.mst", _String2=".") returned 1 [0147.484] wcscmp (_String1="1031.mst", _String2="..") returned 1 [0147.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e355a0 [0147.484] wcscpy (in: _Dest=0x3e355a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.484] wcscat (in: _Dest=0x3e355a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.484] wcscat (in: _Dest=0x3e355a0, _Source="1031.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" [0147.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e355a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0147.486] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033.mst", cAlternateFileName="")) returned 1 [0147.486] wcscmp (_String1="1033.mst", _String2=".") returned 1 [0147.486] wcscmp (_String1="1033.mst", _String2="..") returned 1 [0147.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e342e0 [0147.486] wcscpy (in: _Dest=0x3e342e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.486] wcscat (in: _Dest=0x3e342e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.486] wcscat (in: _Dest=0x3e342e0, _Source="1033.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" [0147.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e342e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0147.488] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1034.mst", cAlternateFileName="")) returned 1 [0147.488] wcscmp (_String1="1034.mst", _String2=".") returned 1 [0147.488] wcscmp (_String1="1034.mst", _String2="..") returned 1 [0147.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35280 [0147.488] wcscpy (in: _Dest=0x3e35280, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.488] wcscat (in: _Dest=0x3e35280, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.488] wcscat (in: _Dest=0x3e35280, _Source="1034.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" [0147.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0147.490] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035.mst", cAlternateFileName="")) returned 1 [0147.490] wcscmp (_String1="1035.mst", _String2=".") returned 1 [0147.490] wcscmp (_String1="1035.mst", _String2="..") returned 1 [0147.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35730 [0147.490] wcscpy (in: _Dest=0x3e35730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.490] wcscat (in: _Dest=0x3e35730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.490] wcscat (in: _Dest=0x3e35730, _Source="1035.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" [0147.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0147.492] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036.mst", cAlternateFileName="")) returned 1 [0147.492] wcscmp (_String1="1036.mst", _String2=".") returned 1 [0147.492] wcscmp (_String1="1036.mst", _String2="..") returned 1 [0147.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e357f8 [0147.492] wcscpy (in: _Dest=0x3e357f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.492] wcscat (in: _Dest=0x3e357f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.492] wcscat (in: _Dest=0x3e357f8, _Source="1036.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" [0147.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e357f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0147.494] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038.mst", cAlternateFileName="")) returned 1 [0147.494] wcscmp (_String1="1038.mst", _String2=".") returned 1 [0147.494] wcscmp (_String1="1038.mst", _String2="..") returned 1 [0147.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e358c0 [0147.494] wcscpy (in: _Dest=0x3e358c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.494] wcscat (in: _Dest=0x3e358c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.494] wcscat (in: _Dest=0x3e358c0, _Source="1038.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" [0147.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e358c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0147.495] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040.mst", cAlternateFileName="")) returned 1 [0147.495] wcscmp (_String1="1040.mst", _String2=".") returned 1 [0147.495] wcscmp (_String1="1040.mst", _String2="..") returned 1 [0147.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35988 [0147.496] wcscpy (in: _Dest=0x3e35988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.496] wcscat (in: _Dest=0x3e35988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.496] wcscat (in: _Dest=0x3e35988, _Source="1040.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" [0147.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0147.497] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041.mst", cAlternateFileName="")) returned 1 [0147.497] wcscmp (_String1="1041.mst", _String2=".") returned 1 [0147.497] wcscmp (_String1="1041.mst", _String2="..") returned 1 [0147.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5648 [0147.498] wcscpy (in: _Dest=0x81d5648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.498] wcscat (in: _Dest=0x81d5648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.498] wcscat (in: _Dest=0x81d5648, _Source="1041.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" [0147.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0147.500] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042.mst", cAlternateFileName="")) returned 1 [0147.500] wcscmp (_String1="1042.mst", _String2=".") returned 1 [0147.500] wcscmp (_String1="1042.mst", _String2="..") returned 1 [0147.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5710 [0147.500] wcscpy (in: _Dest=0x81d5710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.500] wcscat (in: _Dest=0x81d5710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.500] wcscat (in: _Dest=0x81d5710, _Source="1042.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" [0147.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0147.502] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043.mst", cAlternateFileName="")) returned 1 [0147.502] wcscmp (_String1="1043.mst", _String2=".") returned 1 [0147.502] wcscmp (_String1="1043.mst", _String2="..") returned 1 [0147.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d57d8 [0147.502] wcscpy (in: _Dest=0x81d57d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.502] wcscat (in: _Dest=0x81d57d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.502] wcscat (in: _Dest=0x81d57d8, _Source="1043.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" [0147.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d57d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0147.503] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044.mst", cAlternateFileName="")) returned 1 [0147.504] wcscmp (_String1="1044.mst", _String2=".") returned 1 [0147.504] wcscmp (_String1="1044.mst", _String2="..") returned 1 [0147.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d58a0 [0147.504] wcscpy (in: _Dest=0x81d58a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.504] wcscat (in: _Dest=0x81d58a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.504] wcscat (in: _Dest=0x81d58a0, _Source="1044.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" [0147.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d58a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0147.505] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045.mst", cAlternateFileName="")) returned 1 [0147.505] wcscmp (_String1="1045.mst", _String2=".") returned 1 [0147.505] wcscmp (_String1="1045.mst", _String2="..") returned 1 [0147.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5968 [0147.506] wcscpy (in: _Dest=0x81d5968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.506] wcscat (in: _Dest=0x81d5968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.506] wcscat (in: _Dest=0x81d5968, _Source="1045.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" [0147.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0147.507] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046.mst", cAlternateFileName="")) returned 1 [0147.507] wcscmp (_String1="1046.mst", _String2=".") returned 1 [0147.507] wcscmp (_String1="1046.mst", _String2="..") returned 1 [0147.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5a30 [0147.507] wcscpy (in: _Dest=0x81d5a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.508] wcscat (in: _Dest=0x81d5a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.508] wcscat (in: _Dest=0x81d5a30, _Source="1046.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" [0147.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0147.509] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048.mst", cAlternateFileName="")) returned 1 [0147.509] wcscmp (_String1="1048.mst", _String2=".") returned 1 [0147.509] wcscmp (_String1="1048.mst", _String2="..") returned 1 [0147.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5af8 [0147.509] wcscpy (in: _Dest=0x81d5af8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.509] wcscat (in: _Dest=0x81d5af8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.509] wcscat (in: _Dest=0x81d5af8, _Source="1048.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" [0147.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0147.511] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049.mst", cAlternateFileName="")) returned 1 [0147.511] wcscmp (_String1="1049.mst", _String2=".") returned 1 [0147.511] wcscmp (_String1="1049.mst", _String2="..") returned 1 [0147.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5bc0 [0147.511] wcscpy (in: _Dest=0x81d5bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.511] wcscat (in: _Dest=0x81d5bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.511] wcscat (in: _Dest=0x81d5bc0, _Source="1049.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" [0147.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0147.513] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050.mst", cAlternateFileName="")) returned 1 [0147.513] wcscmp (_String1="1050.mst", _String2=".") returned 1 [0147.513] wcscmp (_String1="1050.mst", _String2="..") returned 1 [0147.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5c88 [0147.513] wcscpy (in: _Dest=0x81d5c88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.513] wcscat (in: _Dest=0x81d5c88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.513] wcscat (in: _Dest=0x81d5c88, _Source="1050.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" [0147.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0 [0147.515] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051.mst", cAlternateFileName="")) returned 1 [0147.515] wcscmp (_String1="1051.mst", _String2=".") returned 1 [0147.515] wcscmp (_String1="1051.mst", _String2="..") returned 1 [0147.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5d50 [0147.515] wcscpy (in: _Dest=0x81d5d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.515] wcscat (in: _Dest=0x81d5d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.515] wcscat (in: _Dest=0x81d5d50, _Source="1051.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" [0147.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0148.366] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053.mst", cAlternateFileName="")) returned 1 [0148.366] wcscmp (_String1="1053.mst", _String2=".") returned 1 [0148.366] wcscmp (_String1="1053.mst", _String2="..") returned 1 [0148.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35410 [0148.366] wcscpy (in: _Dest=0x3e35410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0148.367] wcscat (in: _Dest=0x3e35410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0148.367] wcscat (in: _Dest=0x3e35410, _Source="1053.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" [0151.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0151.038] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055.mst", cAlternateFileName="")) returned 1 [0151.038] wcscmp (_String1="1055.mst", _String2=".") returned 1 [0151.038] wcscmp (_String1="1055.mst", _String2="..") returned 1 [0151.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d58a0 [0151.038] wcscpy (in: _Dest=0x81d58a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0151.038] wcscat (in: _Dest=0x81d58a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0151.038] wcscat (in: _Dest=0x81d58a0, _Source="1055.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" [0151.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d58a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0151.040] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058.mst", cAlternateFileName="")) returned 1 [0151.040] wcscmp (_String1="1058.mst", _String2=".") returned 1 [0151.040] wcscmp (_String1="1058.mst", _String2="..") returned 1 [0151.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d57d8 [0151.040] wcscpy (in: _Dest=0x81d57d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0151.040] wcscat (in: _Dest=0x81d57d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0151.040] wcscat (in: _Dest=0x81d57d8, _Source="1058.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" [0151.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d57d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0151.041] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060.mst", cAlternateFileName="")) returned 1 [0151.041] wcscmp (_String1="1060.mst", _String2=".") returned 1 [0151.041] wcscmp (_String1="1060.mst", _String2="..") returned 1 [0151.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5710 [0151.042] wcscpy (in: _Dest=0x81d5710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0151.042] wcscat (in: _Dest=0x81d5710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0151.042] wcscat (in: _Dest=0x81d5710, _Source="1060.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" [0151.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0151.043] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069.mst", cAlternateFileName="")) returned 1 [0151.043] wcscmp (_String1="1069.mst", _String2=".") returned 1 [0151.043] wcscmp (_String1="1069.mst", _String2="..") returned 1 [0151.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5648 [0151.043] wcscpy (in: _Dest=0x81d5648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0151.043] wcscat (in: _Dest=0x81d5648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0151.043] wcscat (in: _Dest=0x81d5648, _Source="1069.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" [0151.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0151.044] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052.mst", cAlternateFileName="")) returned 1 [0151.044] wcscmp (_String1="2052.mst", _String2=".") returned 1 [0151.044] wcscmp (_String1="2052.mst", _String2="..") returned 1 [0151.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5e18 [0151.045] wcscpy (in: _Dest=0x81d5e18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0151.045] wcscat (in: _Dest=0x81d5e18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0151.045] wcscat (in: _Dest=0x81d5e18, _Source="2052.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" [0151.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0151.046] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x6c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABCPY.INI", cAlternateFileName="")) returned 1 [0151.046] wcscmp (_String1="ABCPY.INI", _String2=".") returned 1 [0151.046] wcscmp (_String1="ABCPY.INI", _String2="..") returned 1 [0151.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d5ee0 [0151.046] wcscpy (in: _Dest=0x81d5ee0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0151.046] wcscat (in: _Dest=0x81d5ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0151.046] wcscat (in: _Dest=0x81d5ee0, _Source="ABCPY.INI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" [0151.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0151.048] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x268000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRead.msi", cAlternateFileName="")) returned 1 [0151.048] wcscmp (_String1="AcroRead.msi", _String2=".") returned 1 [0151.048] wcscmp (_String1="AcroRead.msi", _String2="..") returned 1 [0151.048] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x37422680, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x37422680, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x7a3f7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0151.048] wcscmp (_String1="Data1.cab", _String2=".") returned 1 [0151.048] wcscmp (_String1="Data1.cab", _String2="..") returned 1 [0151.048] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90c8100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x525c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0151.048] wcscmp (_String1="Setup.exe", _String2=".") returned 1 [0151.048] wcscmp (_String1="Setup.exe", _String2="..") returned 1 [0151.048] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90a1fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 1 [0151.049] wcscmp (_String1="setup.ini", _String2=".") returned 1 [0151.049] wcscmp (_String1="setup.ini", _String2="..") returned 1 [0151.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d5fa8 [0151.049] wcscpy (in: _Dest=0x81d5fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0151.049] wcscat (in: _Dest=0x81d5fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0151.049] wcscat (in: _Dest=0x81d5fa8, _Source="setup.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" [0151.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0151.050] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90a1fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 0 [0151.050] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0151.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0151.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 [0151.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 Thread: id = 1458 os_tid = 0x10fc [0145.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35520 [0145.193] wcscpy (in: _Dest=0x3f35520, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" [0145.193] wcscat (in: _Dest=0x3f35520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\" [0145.193] wcscat (in: _Dest=0x3f35520, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*" [0145.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0145.194] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38358 [0147.011] wcscmp (_String1=".", _String2=".") returned 0 [0147.011] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.011] wcscmp (_String1="..", _String2=".") returned 1 [0147.011] wcscmp (_String1="..", _String2="..") returned 0 [0147.011] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.011] FindClose (in: hFindFile=0x3f38358 | out: hFindFile=0x3f38358) returned 1 [0147.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0147.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35520) returned 1 [0147.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f858) returned 1 Thread: id = 1459 os_tid = 0x1100 [0145.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c168 [0145.194] wcscpy (in: _Dest=0x35c168, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0145.194] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\" [0145.194] wcscat (in: _Dest=0x35c168, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*" [0145.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0145.194] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0145.780] wcscmp (_String1=".", _String2=".") returned 0 [0145.780] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.780] wcscmp (_String1="..", _String2=".") returned 1 [0145.780] wcscmp (_String1="..", _String2="..") returned 0 [0145.780] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93532dc2, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x93532dc2, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0145.780] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0145.780] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0145.780] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0145.780] wcscmp (_String1="Speech Recognition.lnk", _String2=".") returned 1 [0145.780] wcscmp (_String1="Speech Recognition.lnk", _String2="..") returned 1 [0145.781] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 0 [0145.781] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0145.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0145.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 [0145.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cf48) returned 1 Thread: id = 1460 os_tid = 0x1104 [0145.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187bf8 [0145.195] wcscpy (in: _Dest=0x8187bf8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0145.195] wcscat (in: _Dest=0x8187bf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\" [0145.195] wcscat (in: _Dest=0x8187bf8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*" [0145.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0145.195] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0145.778] wcscmp (_String1=".", _String2=".") returned 0 [0145.778] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.778] wcscmp (_String1="..", _String2=".") returned 1 [0145.778] wcscmp (_String1="..", _String2="..") returned 0 [0145.778] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c902257, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c902257, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c9283b7, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0145.778] wcscmp (_String1="Character Map.lnk", _String2=".") returned 1 [0145.778] wcscmp (_String1="Character Map.lnk", _String2="..") returned 1 [0145.778] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9357f080, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9357f080, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0145.778] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0145.778] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0145.778] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00af8f, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6c00af8f, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6c00af8f, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0145.778] wcscmp (_String1="dfrgui.lnk", _String2=".") returned 1 [0145.778] wcscmp (_String1="dfrgui.lnk", _String2="..") returned 1 [0145.778] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3e1ef0, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b3e1ef0, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b3e1ef0, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0145.778] wcscmp (_String1="Disk Cleanup.lnk", _String2=".") returned 1 [0145.779] wcscmp (_String1="Disk Cleanup.lnk", _String2="..") returned 1 [0145.779] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d2e5e1a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d2e5e1a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d2e5e1a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0145.779] wcscmp (_String1="Resource Monitor.lnk", _String2=".") returned 1 [0145.779] wcscmp (_String1="Resource Monitor.lnk", _String2="..") returned 1 [0145.779] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5597fb3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5597fb3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5597fb3a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0145.779] wcscmp (_String1="System Information.lnk", _String2=".") returned 1 [0145.779] wcscmp (_String1="System Information.lnk", _String2="..") returned 1 [0145.779] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad30103, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ad30103, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ad30103, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0145.779] wcscmp (_String1="System Restore.lnk", _String2=".") returned 1 [0145.779] wcscmp (_String1="System Restore.lnk", _String2="..") returned 1 [0145.779] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df49088, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6df49088, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6df49088, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0145.779] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0145.779] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0145.779] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e62b00c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e62b00c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0145.779] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2=".") returned 1 [0145.779] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2="..") returned 1 [0145.779] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0145.779] wcscmp (_String1="Windows Easy Transfer.lnk", _String2=".") returned 1 [0145.779] wcscmp (_String1="Windows Easy Transfer.lnk", _String2="..") returned 1 [0145.779] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0145.779] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0145.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0145.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187bf8) returned 1 [0145.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187aa8) returned 1 Thread: id = 1461 os_tid = 0x110c [0145.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187ca0 [0145.196] wcscpy (in: _Dest=0x8187ca0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0145.196] wcscat (in: _Dest=0x8187ca0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\" [0145.196] wcscat (in: _Dest=0x8187ca0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*" [0145.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0145.196] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0145.776] wcscmp (_String1=".", _String2=".") returned 0 [0145.776] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.776] wcscmp (_String1="..", _String2=".") returned 1 [0145.776] wcscmp (_String1="..", _String2="..") returned 0 [0145.776] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84e2d1b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0145.776] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0145.777] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0145.777] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95124c0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95124c0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95124c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0145.777] wcscmp (_String1="ShapeCollector.lnk", _String2=".") returned 1 [0145.777] wcscmp (_String1="ShapeCollector.lnk", _String2="..") returned 1 [0145.777] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95aaa40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95aaa40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95aaa40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0145.777] wcscmp (_String1="TabTip.lnk", _String2=".") returned 1 [0145.777] wcscmp (_String1="TabTip.lnk", _String2="..") returned 1 [0145.777] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0145.777] wcscmp (_String1="Windows Journal.lnk", _String2=".") returned 1 [0145.777] wcscmp (_String1="Windows Journal.lnk", _String2="..") returned 1 [0145.777] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0145.777] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0145.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0145.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187ca0) returned 1 [0145.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 Thread: id = 1462 os_tid = 0x64c [0145.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6968 [0145.197] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0145.197] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\" [0145.197] wcscat (in: _Dest=0x2ff6968, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*" [0145.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ba18 [0145.197] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0145.775] wcscmp (_String1=".", _String2=".") returned 0 [0145.775] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.775] wcscmp (_String1="..", _String2=".") returned 1 [0145.775] wcscmp (_String1="..", _String2="..") returned 0 [0145.775] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0145.775] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0145.775] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0145.775] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119d8cbf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0145.775] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2=".") returned 1 [0145.775] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2="..") returned 1 [0145.775] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0145.775] wcscmp (_String1="Windows PowerShell.lnk", _String2=".") returned 1 [0145.775] wcscmp (_String1="Windows PowerShell.lnk", _String2="..") returned 1 [0145.775] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0145.775] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0145.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ba18) returned 1 [0145.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 [0145.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 1463 os_tid = 0x1304 [0145.198] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\-anvlp2cic.avi")) returned 0x20 [0145.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi", dwFileAttributes=0x20) returned 1 [0145.860] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\-anvlp2cic.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1148 [0146.061] GetFileSizeEx (in: hFile=0x1148, lpFileSize=0xfc0fc20 | out: lpFileSize=0xfc0fc20*=79651) returned 1 [0146.061] SetFilePointerEx (in: hFile=0x1148, liDistanceToMove=0x1371f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.061] ReadFile (in: hFile=0x1148, lpBuffer=0xfc0fc2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfc0fc08, lpOverlapped=0x0 | out: lpBuffer=0xfc0fc2c*, lpNumberOfBytesRead=0xfc0fc08*=0x4, lpOverlapped=0x0) returned 1 [0146.063] SetFilePointerEx (in: hFile=0x1148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0146.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0146.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0146.063] NtQuerySystemTime (in: CurrentTime=0xfc0fba8 | out: CurrentTime=0xfc0fba8*=132471540146460000) returned 0x0 [0146.063] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x22ebb49c [0146.063] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x1533420a [0146.063] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x64de227 [0146.063] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x7a923d67 [0146.063] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x42ed5435 [0146.063] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x6f922cfb [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x36fdafd9 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x3500f2c2 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x50e16fee [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x37c8f7 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x109996c8 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x27ddc9cd [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x32745af8 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x4c798cae [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x8d8870a [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x70ead676 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x10abcce7 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x2130d90d [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x6396fbd7 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x502620fc [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x5d2d7481 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x2409c97b [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x10683798 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x1fd65edd [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x25cd19e1 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x57e3d69d [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x3863803 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x72cdcea4 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x35d7174d [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x6829d15 [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x6b8ac2bc [0146.064] RtlRandomEx (in: Seed=0xfc0fba0 | out: Seed=0xfc0fba0) returned 0x49d610f5 [0146.074] SetFilePointerEx (in: hFile=0x1148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.074] ReadFile (in: hFile=0x1148, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xfc0fba8, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xfc0fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.075] SetFilePointerEx (in: hFile=0x1148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5190 [0146.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0146.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0146.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0146.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8248458 [0146.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0146.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0146.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0146.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0146.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0146.075] WriteFile (in: hFile=0x1148, lpBuffer=0x8248458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xfc0fba8, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesWritten=0xfc0fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0146.423] SetFilePointerEx (in: hFile=0x1148, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.423] ReadFile (in: hFile=0x1148, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xfc0fba8, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xfc0fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.423] SetFilePointerEx (in: hFile=0x1148, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d010 [0146.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0146.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0146.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8248458 [0146.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0146.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0146.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0146.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d010) returned 1 [0146.424] WriteFile (in: hFile=0x1148, lpBuffer=0x8248458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xfc0fba8, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesWritten=0xfc0fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0146.429] SetFilePointerEx (in: hFile=0x1148, liDistanceToMove=0xfb23, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.429] ReadFile (in: hFile=0x1148, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xfc0fba8, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xfc0fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.429] SetFilePointerEx (in: hFile=0x1148, liDistanceToMove=0xfb23, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d010 [0146.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0146.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0146.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8248458 [0146.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0146.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0146.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0146.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d010) returned 1 [0146.430] WriteFile (in: hFile=0x1148, lpBuffer=0x8248458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xfc0fba8, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesWritten=0xfc0fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0146.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd5b0 [0146.437] SetFilePointerEx (in: hFile=0x1148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.437] WriteFile (in: hFile=0x1148, lpBuffer=0x3e17240*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xfc0fc14, lpOverlapped=0x0 | out: lpBuffer=0x3e17240*, lpNumberOfBytesWritten=0xfc0fc14*=0x14e, lpOverlapped=0x0) returned 1 [0146.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17240) returned 1 [0146.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e777f8) returned 1 [0146.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0146.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77980) returned 1 [0146.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd5b0) returned 1 [0146.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0146.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0146.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0146.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35ba88 [0146.541] wcscpy (in: _Dest=0x35ba88, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi" [0146.541] wcscat (in: _Dest=0x35ba88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi.f0dbec" [0146.541] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi.f0dbec", NtPathName=0xfc0fb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\-AnvLp2CiC.avi.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e354d8 [0146.731] FlushFileBuffers (hFile=0x1148) returned 1 [0146.799] CloseHandle (hObject=0x1148) returned 1 [0146.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187df0 [0146.806] wcscpy (in: _Dest=0x8187df0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0146.806] wcscat (in: _Dest=0x8187df0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" [0146.806] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\f0dbec-readme.txt")) returned 0x20 [0146.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187df0) returned 1 [0146.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 1464 os_tid = 0xfc4 [0145.198] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\2jshidbhr.avi")) returned 0x20 [0145.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi", dwFileAttributes=0x20) returned 1 [0145.860] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\2jshidbhr.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x74c [0146.047] GetFileSizeEx (in: hFile=0x74c, lpFileSize=0x104bf7b0 | out: lpFileSize=0x104bf7b0*=14318) returned 1 [0146.047] SetFilePointerEx (in: hFile=0x74c, liDistanceToMove=0x37ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.047] ReadFile (in: hFile=0x74c, lpBuffer=0x104bf7bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x104bf798, lpOverlapped=0x0 | out: lpBuffer=0x104bf7bc*, lpNumberOfBytesRead=0x104bf798*=0x4, lpOverlapped=0x0) returned 1 [0146.049] SetFilePointerEx (in: hFile=0x74c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0146.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0146.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0146.049] NtQuerySystemTime (in: CurrentTime=0x104bf738 | out: CurrentTime=0x104bf738*=132471540146304000) returned 0x0 [0146.049] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x46ac6f5a [0146.049] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x4fe159a1 [0146.049] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x3075307b [0146.049] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x58ac1711 [0146.049] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x2885100c [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x5f2f01fb [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x71c263f2 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x4126d7a1 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x243981f8 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x492967c1 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x6b44d668 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x2655b0d [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x6d51180f [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x7cda5901 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x39cd3660 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x274d4328 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x3c9146ee [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x31ab42d0 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x15230af5 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x45956c07 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x6d87782b [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x76552ff4 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x6afd7776 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x7973be43 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x4227ec21 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x7d326cb5 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x4ef2ce7f [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x5b16b427 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x6a151c80 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0xe861905 [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x3c225d8a [0146.050] RtlRandomEx (in: Seed=0x104bf730 | out: Seed=0x104bf730) returned 0x47b80aa4 [0146.060] ReadFile (in: hFile=0x74c, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0x37ee, lpNumberOfBytesRead=0x104bf72c, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0x104bf72c*=0x37ee, lpOverlapped=0x0) returned 1 [0146.061] SetFilePointerEx (in: hFile=0x74c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.061] WriteFile (in: hFile=0x74c, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x37ee, lpNumberOfBytesWritten=0x104bf730, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x104bf730*=0x37ee, lpOverlapped=0x0) returned 1 [0146.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0146.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0146.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0146.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0146.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0146.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d010) returned 1 [0146.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e20 [0146.421] SetFilePointerEx (in: hFile=0x74c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.421] WriteFile (in: hFile=0x74c, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x104bf7a4, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x104bf7a4*=0x10c, lpOverlapped=0x0) returned 1 [0146.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0146.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d60) returned 1 [0146.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0146.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e20) returned 1 [0146.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0146.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0146.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0146.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0146.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bc98 [0146.538] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi" [0146.538] wcscat (in: _Dest=0x35bc98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi.f0dbec" [0146.538] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi.f0dbec", NtPathName=0x104bf728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\2jshIdbhr.avi.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35410 [0146.708] FlushFileBuffers (hFile=0x74c) returned 1 [0146.793] CloseHandle (hObject=0x74c) returned 1 [0146.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187df0 [0146.794] wcscpy (in: _Dest=0x8187df0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0146.794] wcscat (in: _Dest=0x8187df0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" [0146.794] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\f0dbec-readme.txt")) returned 0x20 [0146.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187df0) returned 1 [0146.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a778) returned 1 Thread: id = 1465 os_tid = 0x1348 [0145.199] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\8apizw3y.flv")) returned 0x20 [0145.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv", dwFileAttributes=0x20) returned 1 [0145.861] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\8apizw3y.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1298 [0146.031] GetFileSizeEx (in: hFile=0x1298, lpFileSize=0x8a6fba8 | out: lpFileSize=0x8a6fba8*=73641) returned 1 [0146.032] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0x11fa5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.032] ReadFile (in: hFile=0x1298, lpBuffer=0x8a6fbb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a6fb90, lpOverlapped=0x0 | out: lpBuffer=0x8a6fbb4*, lpNumberOfBytesRead=0x8a6fb90*=0x4, lpOverlapped=0x0) returned 1 [0146.033] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0146.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0146.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0146.034] NtQuerySystemTime (in: CurrentTime=0x8a6fb30 | out: CurrentTime=0x8a6fb30*=132471540146148000) returned 0x0 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x3b8246a7 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x325099c4 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x2d1a64c9 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x58c88237 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x2b633f65 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x190683b8 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x2cfa653f [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x57942dec [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x4206ad4b [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x9021c1e [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x22ab4bb2 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x771ec1d3 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x15bc3e81 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x16a11f68 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x43d0b5f7 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x565397fe [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x4f0f65d9 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x7f624a97 [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x7063318e [0146.034] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x5d382588 [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x1b603ce8 [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x2d8f55f9 [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x461d7785 [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x699c403d [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x2dc5a7cf [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x41e6d7d9 [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x13037b6b [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x12473d54 [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x54f8b0 [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x5dc4d278 [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x168d0ca0 [0146.035] RtlRandomEx (in: Seed=0x8a6fb28 | out: Seed=0x8a6fb28) returned 0x3c5d0366 [0146.045] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.045] ReadFile (in: hFile=0x1298, lpBuffer=0x80c74b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8a6fb30, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesRead=0x8a6fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0146.045] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d010 [0146.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0146.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0146.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0146.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0146.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0146.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0146.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0146.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0146.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d010) returned 1 [0146.046] WriteFile (in: hFile=0x1298, lpBuffer=0x80cb0c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8a6fb30, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesWritten=0x8a6fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0146.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0146.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0146.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e68e50 [0146.418] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.418] WriteFile (in: hFile=0x1298, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x8a6fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0x8a6fb9c*=0x10a, lpOverlapped=0x0) returned 1 [0146.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0146.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68df0) returned 1 [0146.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0146.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e50) returned 1 [0146.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0146.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0146.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0146.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0146.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35af88 [0146.540] wcscpy (in: _Dest=0x35af88, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv" [0146.540] wcscat (in: _Dest=0x35af88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv.f0dbec" [0146.540] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv.f0dbec", NtPathName=0x8a6fb20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\8apIzw3y.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333228 [0146.718] FlushFileBuffers (hFile=0x1298) returned 1 [0146.798] CloseHandle (hObject=0x1298) returned 1 [0146.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187df0 [0146.801] wcscpy (in: _Dest=0x8187df0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0146.801] wcscat (in: _Dest=0x8187df0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" [0146.801] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\f0dbec-readme.txt")) returned 0x20 [0146.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187df0) returned 1 [0146.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a818) returned 1 Thread: id = 1466 os_tid = 0x1148 [0145.199] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\dm3nn0ih_3fqxvpch.mkv")) returned 0x20 [0145.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv", dwFileAttributes=0x20) returned 1 [0145.861] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\dm3nn0ih_3fqxvpch.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12ec [0146.016] GetFileSizeEx (in: hFile=0x12ec, lpFileSize=0x106ff8b0 | out: lpFileSize=0x106ff8b0*=12151) returned 1 [0146.016] SetFilePointerEx (in: hFile=0x12ec, liDistanceToMove=0x2f73, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.016] ReadFile (in: hFile=0x12ec, lpBuffer=0x106ff8bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x106ff898, lpOverlapped=0x0 | out: lpBuffer=0x106ff8bc*, lpNumberOfBytesRead=0x106ff898*=0x4, lpOverlapped=0x0) returned 1 [0146.018] SetFilePointerEx (in: hFile=0x12ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0146.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0146.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0146.018] NtQuerySystemTime (in: CurrentTime=0x106ff838 | out: CurrentTime=0x106ff838*=132471540145992000) returned 0x0 [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x41cc624e [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x9788f6d [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x50d707fd [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x44ed7c41 [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x75802101 [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x55d39fe2 [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x7041c3b6 [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x4b626acb [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x2a2cdc0a [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x4c63e220 [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x489ef9fe [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x496db173 [0146.018] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x4b501400 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x7edd9d [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x388be61f [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x12cd5ec4 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x77146ab9 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x74b36bd4 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x154e4902 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x54265143 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x1f144dc8 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x2e02a08b [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x427d9da1 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x69944e8a [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x60c6810e [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x38666c5a [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x45133f58 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x50ce8d00 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x1715d5fa [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0xedb5a08 [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x7dbfb7fb [0146.019] RtlRandomEx (in: Seed=0x106ff830 | out: Seed=0x106ff830) returned 0x73f4dc4e [0146.031] ReadFile (in: hFile=0x12ec, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x2f77, lpNumberOfBytesRead=0x106ff82c, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0x106ff82c*=0x2f77, lpOverlapped=0x0) returned 1 [0146.031] SetFilePointerEx (in: hFile=0x12ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.031] WriteFile (in: hFile=0x12ec, lpBuffer=0x80c38b0*, nNumberOfBytesToWrite=0x2f77, lpNumberOfBytesWritten=0x106ff830, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesWritten=0x106ff830*=0x2f77, lpOverlapped=0x0) returned 1 [0146.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0146.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0146.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0146.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0146.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0146.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 [0146.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d760) returned 1 [0146.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f38358 [0146.416] SetFilePointerEx (in: hFile=0x12ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.416] WriteFile (in: hFile=0x12ec, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x106ff8a4, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0x106ff8a4*=0x11c, lpOverlapped=0x0) returned 1 [0146.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0146.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37e98) returned 1 [0146.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0146.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38358) returned 1 [0146.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0146.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0146.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0146.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0146.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3335e8 [0146.533] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv" [0146.533] wcscat (in: _Dest=0x3335e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv.f0dbec" [0146.533] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv.f0dbec", NtPathName=0x106ff828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\Dm3nn0ih_3FqXvPCH.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e65518 [0146.701] FlushFileBuffers (hFile=0x12ec) returned 1 [0146.790] CloseHandle (hObject=0x12ec) returned 1 [0146.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187df0 [0146.791] wcscpy (in: _Dest=0x8187df0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0146.791] wcscat (in: _Dest=0x8187df0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" [0146.791] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\f0dbec-readme.txt")) returned 0x20 [0146.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187df0) returned 1 [0146.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 1467 os_tid = 0xec4 [0145.200] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\qujgglrw7uwdc4jc.mp4")) returned 0x20 [0145.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4", dwFileAttributes=0x20) returned 1 [0145.862] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\qujgglrw7uwdc4jc.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1214 [0145.995] GetFileSizeEx (in: hFile=0x1214, lpFileSize=0x104ffc28 | out: lpFileSize=0x104ffc28*=4611) returned 1 [0145.995] SetFilePointerEx (in: hFile=0x1214, liDistanceToMove=0x11ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.995] ReadFile (in: hFile=0x1214, lpBuffer=0x104ffc34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x104ffc10, lpOverlapped=0x0 | out: lpBuffer=0x104ffc34*, lpNumberOfBytesRead=0x104ffc10*=0x4, lpOverlapped=0x0) returned 1 [0145.997] SetFilePointerEx (in: hFile=0x1214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0145.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb40 [0145.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0145.997] NtQuerySystemTime (in: CurrentTime=0x104ffbb0 | out: CurrentTime=0x104ffbb0*=132471540145680000) returned 0x0 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x1037f4d0 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x61a12672 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x4059e245 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x1073578f [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x4175c28f [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x20fa1979 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x62845c7d [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x578fc965 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x41d23aa1 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x7fd8b0fa [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x69377271 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x2c3eb91b [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x12b17eec [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x1912932b [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x77b6f127 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x30fb0f91 [0145.998] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x3cb1a6ba [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x5aa2780c [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x5c34a2e8 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x41fd1361 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x5f2b6c53 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x53e92a9 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x6952f6fb [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x17c29717 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x7b3b5aa8 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x3893a87 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x4e123866 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x59316568 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x7c13de65 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x2199afe1 [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x28a4a6db [0145.999] RtlRandomEx (in: Seed=0x104ffba8 | out: Seed=0x104ffba8) returned 0x2d42b613 [0146.015] ReadFile (in: hFile=0x1214, lpBuffer=0x80b8498, nNumberOfBytesToRead=0x1203, lpNumberOfBytesRead=0x104ffba4, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesRead=0x104ffba4*=0x1203, lpOverlapped=0x0) returned 1 [0146.015] SetFilePointerEx (in: hFile=0x1214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.015] WriteFile (in: hFile=0x1214, lpBuffer=0x80bc0a0*, nNumberOfBytesToWrite=0x1203, lpNumberOfBytesWritten=0x104ffba8, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesWritten=0x104ffba8*=0x1203, lpOverlapped=0x0) returned 1 [0146.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0146.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0146.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0146.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0146.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0146.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0146.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d688) returned 1 [0146.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37b98 [0146.413] SetFilePointerEx (in: hFile=0x1214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.413] WriteFile (in: hFile=0x1214, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x104ffc1c, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0x104ffc1c*=0x11a, lpOverlapped=0x0) returned 1 [0146.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0146.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38298) returned 1 [0146.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0146.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37b98) returned 1 [0146.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0146.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb40) returned 1 [0146.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0146.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0146.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333468 [0146.531] wcscpy (in: _Dest=0x333468, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4" [0146.532] wcscat (in: _Dest=0x333468, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4.f0dbec" [0146.532] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4.f0dbec", NtPathName=0x104ffba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\QuJggLRw7UWDc4jc.mp4.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1ad38 [0146.605] FlushFileBuffers (hFile=0x1214) returned 1 [0146.608] CloseHandle (hObject=0x1214) returned 1 [0146.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81881e0 [0146.628] wcscpy (in: _Dest=0x81881e0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\" [0146.628] wcscat (in: _Dest=0x81881e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" [0146.628] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\f0dbec-readme.txt")) returned 0xffffffff [0146.628] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\W3sxHAww0gkLkZVGTZ\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\w3sxhaww0gklkzvgtz\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf0 [0146.646] WriteFile (in: hFile=0xdf0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x104ffbc4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x104ffbc4*=0x70c, lpOverlapped=0x0) returned 1 [0146.657] CloseHandle (hObject=0xdf0) returned 1 [0146.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81881e0) returned 1 [0146.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c848) returned 1 Thread: id = 1468 os_tid = 0x1150 [0145.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ab38 [0145.200] wcscpy (in: _Dest=0x819ab38, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0145.200] wcscat (in: _Dest=0x819ab38, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\" [0145.200] wcscat (in: _Dest=0x819ab38, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*" [0145.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0145.200] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0146.797] wcscmp (_String1=".", _String2=".") returned 0 [0146.797] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.797] wcscmp (_String1="..", _String2=".") returned 1 [0146.798] wcscmp (_String1="..", _String2="..") returned 0 [0146.798] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.798] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0146.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0146.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ab38) returned 1 [0146.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 1469 os_tid = 0x1154 [0145.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33eb8 [0145.201] wcscpy (in: _Dest=0x3f33eb8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" [0145.201] wcscat (in: _Dest=0x3f33eb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\" [0145.201] wcscat (in: _Dest=0x3f33eb8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*" [0145.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0145.201] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0147.332] wcscmp (_String1=".", _String2=".") returned 0 [0147.332] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.332] wcscmp (_String1="..", _String2=".") returned 1 [0147.332] wcscmp (_String1="..", _String2="..") returned 0 [0147.332] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.332] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0147.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0147.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33eb8) returned 1 [0147.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 Thread: id = 1470 os_tid = 0x1158 [0145.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33908 [0145.202] wcscpy (in: _Dest=0x3f33908, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" [0145.202] wcscat (in: _Dest=0x3f33908, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\" [0145.202] wcscat (in: _Dest=0x3f33908, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*" [0145.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ae10 [0145.202] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0147.330] wcscmp (_String1=".", _String2=".") returned 0 [0147.330] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.330] wcscmp (_String1="..", _String2=".") returned 1 [0147.330] wcscmp (_String1="..", _String2="..") returned 0 [0147.330] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.330] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0147.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ae10) returned 1 [0147.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33908) returned 1 [0147.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a2d8) returned 1 Thread: id = 1471 os_tid = 0x1160 [0145.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33ba8 [0145.203] wcscpy (in: _Dest=0x3f33ba8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" [0145.203] wcscat (in: _Dest=0x3f33ba8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\" [0145.203] wcscat (in: _Dest=0x3f33ba8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*" [0145.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b7b0 [0145.203] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0147.327] wcscmp (_String1=".", _String2=".") returned 0 [0147.327] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.327] wcscmp (_String1="..", _String2=".") returned 1 [0147.327] wcscmp (_String1="..", _String2="..") returned 0 [0147.327] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.328] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0147.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b7b0) returned 1 [0147.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33ba8) returned 1 [0147.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd820) returned 1 Thread: id = 1472 os_tid = 0x147c [0145.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df8970 [0145.209] wcscpy (in: _Dest=0x3df8970, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0145.209] wcscat (in: _Dest=0x3df8970, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0145.209] wcscat (in: _Dest=0x3df8970, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*" [0145.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0145.209] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098fd0 [0147.411] wcscmp (_String1=".", _String2=".") returned 0 [0147.411] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.435] wcscmp (_String1="..", _String2=".") returned 1 [0147.435] wcscmp (_String1="..", _String2="..") returned 0 [0147.435] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0147.435] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0147.435] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0147.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0147.435] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0147.436] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0147.436] wcscat (in: _Dest=0x2c75f8, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" [0159.424] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll")) returned 0x2020 [0159.424] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.424] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.424] GetLastError () returned 0x5 [0159.424] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.424] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0159.424] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0159.425] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0159.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.425] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.425] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.425] wcscat (in: _Dest=0x2c75f8, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" [0159.425] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll")) returned 0x2020 [0159.425] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.425] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.425] GetLastError () returned 0x5 [0159.425] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.425] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0159.425] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0159.425] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0159.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0159.426] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.426] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.426] wcscat (in: _Dest=0x2c75f8, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" [0159.426] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll")) returned 0x2020 [0159.426] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.426] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.426] GetLastError () returned 0x5 [0159.426] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.426] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0159.426] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0159.426] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0159.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c540 [0159.427] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.427] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.427] wcscat (in: _Dest=0x3e3c540, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" [0159.427] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll")) returned 0x2020 [0159.427] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.427] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.427] GetLastError () returned 0x5 [0159.427] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.427] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0159.427] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0159.427] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0159.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.427] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.428] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.428] wcscat (in: _Dest=0x2c75f8, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" [0159.428] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll")) returned 0x2020 [0159.428] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.428] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.428] GetLastError () returned 0x5 [0159.428] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.428] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99450400, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99450400, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0159.428] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0159.428] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0159.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.428] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.428] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.428] wcscat (in: _Dest=0x3e3c540, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" [0159.429] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll")) returned 0x2020 [0159.429] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.429] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.429] GetLastError () returned 0x5 [0159.429] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.429] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x3546d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0159.429] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0159.429] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0159.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.429] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.429] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.429] wcscat (in: _Dest=0x2c75f8, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" [0159.430] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll")) returned 0x2020 [0159.430] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.430] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.430] GetLastError () returned 0x5 [0159.430] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.430] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4f0a000, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4f0a000, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0159.430] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0159.430] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0159.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.430] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.430] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.430] wcscat (in: _Dest=0x3e3c540, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" [0159.430] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll")) returned 0x2020 [0159.431] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.431] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.431] GetLastError () returned 0x5 [0159.431] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.431] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0159.431] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0159.431] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0159.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0159.431] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.431] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.431] wcscat (in: _Dest=0x3e3c540, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" [0159.431] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll")) returned 0x2020 [0159.431] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.432] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.432] GetLastError () returned 0x5 [0159.432] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.432] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0159.432] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0159.432] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0159.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.432] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.432] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.432] wcscat (in: _Dest=0x3e3c540, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" [0159.433] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll")) returned 0x2020 [0159.433] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.433] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.433] GetLastError () returned 0x5 [0159.433] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.433] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0159.433] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0159.433] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0159.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.433] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.433] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.433] wcscat (in: _Dest=0x2c75f8, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" [0159.434] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll")) returned 0x2020 [0159.434] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.434] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.434] GetLastError () returned 0x5 [0159.434] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.434] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0159.434] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0159.434] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0159.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0159.434] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.434] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.434] wcscat (in: _Dest=0x2c75f8, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" [0159.434] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll")) returned 0x2020 [0159.435] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.435] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.435] GetLastError () returned 0x5 [0159.435] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.435] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0159.435] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0159.435] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0159.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.435] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.435] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.435] wcscat (in: _Dest=0x3e3c540, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" [0159.436] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll")) returned 0x2020 [0159.436] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.436] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.436] GetLastError () returned 0x5 [0159.436] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.436] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0159.436] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0159.436] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0159.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0159.436] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.436] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.437] wcscat (in: _Dest=0x3e3c540, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" [0159.437] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll")) returned 0x2020 [0159.437] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.437] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.437] GetLastError () returned 0x5 [0159.437] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.437] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0159.437] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0159.437] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0159.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.437] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.438] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.438] wcscat (in: _Dest=0x3e3c540, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" [0159.438] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll")) returned 0x2020 [0159.438] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.438] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.438] GetLastError () returned 0x5 [0159.438] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.438] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0159.438] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0159.438] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0159.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.439] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.439] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.439] wcscat (in: _Dest=0x2c75f8, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" [0159.439] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll")) returned 0x2020 [0159.439] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.439] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.439] GetLastError () returned 0x5 [0159.439] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.439] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46e8c500, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46e8c500, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0159.439] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0159.440] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0159.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0159.440] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.440] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.440] wcscat (in: _Dest=0x2c75f8, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" [0159.440] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll")) returned 0x2020 [0159.440] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.440] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.440] GetLastError () returned 0x5 [0159.440] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.440] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d25900, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82d25900, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0159.441] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0159.441] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0159.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0159.441] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.441] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.441] wcscat (in: _Dest=0x2c75f8, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" [0159.441] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll")) returned 0x2020 [0159.441] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.441] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.441] GetLastError () returned 0x5 [0159.441] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.442] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cef700, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77cef700, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0159.442] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0159.442] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0159.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c540 [0159.442] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.442] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.442] wcscat (in: _Dest=0x3e3c540, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" [0159.442] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll")) returned 0x2020 [0159.442] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.442] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.442] GetLastError () returned 0x5 [0159.442] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.443] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0159.443] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0159.443] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0159.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0159.443] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.443] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.443] wcscat (in: _Dest=0x3e3c540, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" [0159.443] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll")) returned 0x2020 [0159.443] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.443] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.443] GetLastError () returned 0x5 [0159.443] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.444] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf11c1900, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf11c1900, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0159.444] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0159.444] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0159.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.444] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.444] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.444] wcscat (in: _Dest=0x2c75f8, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" [0159.444] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll")) returned 0x2020 [0159.444] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.444] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.444] GetLastError () returned 0x5 [0159.445] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.445] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0159.445] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0159.445] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0159.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.445] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.445] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.445] wcscat (in: _Dest=0x3e3c540, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" [0159.445] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll")) returned 0x2020 [0159.445] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.445] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.445] GetLastError () returned 0x5 [0159.445] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.446] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0159.446] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0159.446] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0159.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0159.446] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.446] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.446] wcscat (in: _Dest=0x3e3c540, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" [0159.446] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll")) returned 0x2020 [0159.446] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.446] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.446] GetLastError () returned 0x5 [0159.446] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.447] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0159.447] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0159.447] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0159.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.447] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.447] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.447] wcscat (in: _Dest=0x3e3c540, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" [0159.447] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll")) returned 0x2020 [0159.447] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.447] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.448] GetLastError () returned 0x5 [0159.448] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.448] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0159.448] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0159.448] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0159.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.448] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.448] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.448] wcscat (in: _Dest=0x2c75f8, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" [0159.448] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll")) returned 0x2020 [0159.448] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.448] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.449] GetLastError () returned 0x5 [0159.449] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.449] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356f4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0159.449] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0159.449] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0159.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0159.449] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.449] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.449] wcscat (in: _Dest=0x2c75f8, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" [0159.449] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll")) returned 0x2020 [0159.449] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.449] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.450] GetLastError () returned 0x5 [0159.450] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.450] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0159.450] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0159.450] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0159.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.450] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.450] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.450] wcscat (in: _Dest=0x2c75f8, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" [0159.450] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll")) returned 0x2020 [0159.450] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.450] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.451] GetLastError () returned 0x5 [0159.451] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.451] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0159.451] FindClose (in: hFindFile=0x8098fd0 | out: hFindFile=0x8098fd0) returned 1 [0159.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0159.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0159.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f395b8) returned 1 Thread: id = 1473 os_tid = 0x1480 [0145.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df88f8 [0145.209] wcscpy (in: _Dest=0x3df88f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0145.209] wcscat (in: _Dest=0x3df88f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0145.209] wcscat (in: _Dest=0x3df88f8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*" [0145.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0145.210] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099010 [0147.410] wcscmp (_String1=".", _String2=".") returned 0 [0147.410] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.434] wcscmp (_String1="..", _String2=".") returned 1 [0147.434] wcscmp (_String1="..", _String2="..") returned 0 [0147.434] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0147.434] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0147.434] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0147.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7238 [0147.434] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0147.434] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0147.435] wcscat (in: _Dest=0x2c7238, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" [0159.407] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll")) returned 0x2020 [0159.407] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.407] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.407] GetLastError () returned 0x5 [0159.407] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0159.408] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0159.408] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0159.408] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0159.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7238 [0159.408] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.408] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.408] wcscat (in: _Dest=0x2c7238, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" [0159.408] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll")) returned 0x2020 [0159.408] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.408] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.409] GetLastError () returned 0x5 [0159.409] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0159.409] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0159.409] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0159.409] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0159.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7238 [0159.409] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.409] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.409] wcscat (in: _Dest=0x2c7238, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" [0159.409] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll")) returned 0x2020 [0159.409] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.410] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.410] GetLastError () returned 0x5 [0159.410] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0159.410] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0159.410] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0159.410] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0159.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c540 [0159.410] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.410] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.410] wcscat (in: _Dest=0x3e3c540, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" [0159.410] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll")) returned 0x2020 [0159.411] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.411] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.411] GetLastError () returned 0x5 [0159.411] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.411] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0159.411] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0159.411] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0159.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7238 [0159.411] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.411] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.411] wcscat (in: _Dest=0x2c7238, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" [0159.411] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll")) returned 0x2020 [0159.455] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.455] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.455] GetLastError () returned 0x5 [0159.455] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0159.455] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0159.455] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0159.455] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0159.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.455] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.455] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.455] wcscat (in: _Dest=0x3e3c540, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" [0159.456] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll")) returned 0x2020 [0159.456] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.456] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.456] GetLastError () returned 0x5 [0159.456] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.456] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0159.456] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0159.456] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0159.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7238 [0159.457] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.457] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.457] wcscat (in: _Dest=0x2c7238, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" [0159.457] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll")) returned 0x2020 [0159.457] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.457] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.457] GetLastError () returned 0x5 [0159.457] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0159.458] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdc99200, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdc99200, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0159.458] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0159.458] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0159.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.458] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.458] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.458] wcscat (in: _Dest=0x3e3c540, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" [0159.458] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll")) returned 0x2020 [0159.458] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.458] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.458] GetLastError () returned 0x5 [0159.458] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.459] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0159.459] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0159.459] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0159.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0159.459] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.459] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.459] wcscat (in: _Dest=0x3e3c540, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" [0159.459] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll")) returned 0x2020 [0159.459] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.459] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.459] GetLastError () returned 0x5 [0159.460] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.460] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0159.460] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0159.460] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0159.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.460] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.460] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.460] wcscat (in: _Dest=0x3e3c540, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" [0159.460] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll")) returned 0x2020 [0159.460] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.460] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.461] GetLastError () returned 0x5 [0159.461] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.461] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0159.461] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0159.461] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0159.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7238 [0159.461] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.461] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.461] wcscat (in: _Dest=0x2c7238, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" [0159.461] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll")) returned 0x2020 [0159.461] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.462] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.462] GetLastError () returned 0x5 [0159.462] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0159.462] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0159.462] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0159.462] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0159.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7238 [0159.462] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.462] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.462] wcscat (in: _Dest=0x2c7238, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" [0159.462] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll")) returned 0x2020 [0159.463] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.463] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.463] GetLastError () returned 0x5 [0159.463] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0159.463] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0159.463] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0159.463] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0159.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.463] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.463] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.463] wcscat (in: _Dest=0x3e3c540, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" [0159.464] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll")) returned 0x2020 [0159.493] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.493] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.494] GetLastError () returned 0x5 [0159.494] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.494] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0159.494] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0159.494] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0159.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0159.494] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.494] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.494] wcscat (in: _Dest=0x3e3c540, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" [0159.495] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll")) returned 0x2020 [0159.495] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.495] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.495] GetLastError () returned 0x5 [0159.495] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.496] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0159.496] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0159.496] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0159.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.496] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.496] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.496] wcscat (in: _Dest=0x3e3c540, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" [0159.496] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll")) returned 0x2020 [0159.513] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.514] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.514] GetLastError () returned 0x5 [0159.514] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.514] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0159.514] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0159.514] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0159.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.514] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.514] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.514] wcscat (in: _Dest=0x2c75f8, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" [0159.514] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll")) returned 0x2020 [0159.515] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.515] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.515] GetLastError () returned 0x5 [0159.515] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.515] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0159.515] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0159.515] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0159.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0159.515] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.515] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.515] wcscat (in: _Dest=0x2c75f8, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" [0159.515] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll")) returned 0x2020 [0159.516] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.516] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.516] GetLastError () returned 0x5 [0159.516] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.516] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81a12c00, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81a12c00, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0159.516] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0159.516] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0159.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0159.516] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.516] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.516] wcscat (in: _Dest=0x2c75f8, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" [0159.517] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll")) returned 0x2020 [0159.538] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.538] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.538] GetLastError () returned 0x5 [0159.538] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.538] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x874e4000, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x874e4000, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0159.538] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0159.538] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0159.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c540 [0159.539] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.539] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.539] wcscat (in: _Dest=0x3e3c540, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" [0159.539] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll")) returned 0x2020 [0159.539] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.539] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.539] GetLastError () returned 0x5 [0159.539] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.540] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0159.540] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0159.540] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0159.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0159.540] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.540] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.540] wcscat (in: _Dest=0x3e3c540, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" [0159.540] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll")) returned 0x2020 [0159.540] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.540] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.540] GetLastError () returned 0x5 [0159.540] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.541] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe792b100, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe792b100, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0159.541] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0159.541] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0159.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.541] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.541] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.541] wcscat (in: _Dest=0x2c75f8, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" [0159.541] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll")) returned 0x2020 [0159.541] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.541] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.542] GetLastError () returned 0x5 [0159.542] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.542] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x35682930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0159.542] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0159.542] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0159.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.542] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.542] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.542] wcscat (in: _Dest=0x3e3c540, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" [0159.542] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll")) returned 0x2020 [0159.542] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.543] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.543] GetLastError () returned 0x5 [0159.543] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.543] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0159.543] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0159.543] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0159.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c540 [0159.543] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.543] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.543] wcscat (in: _Dest=0x3e3c540, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" [0159.543] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll")) returned 0x2020 [0159.544] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.544] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.544] GetLastError () returned 0x5 [0159.544] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.544] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0159.544] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0159.544] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0159.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0159.545] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.545] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.545] wcscat (in: _Dest=0x3e3c540, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" [0159.545] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll")) returned 0x2020 [0159.545] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.545] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.546] GetLastError () returned 0x5 [0159.546] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.546] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a568800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a568800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0159.546] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0159.546] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0159.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.546] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.546] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.546] wcscat (in: _Dest=0x2c75f8, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" [0159.546] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll")) returned 0x2020 [0159.546] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.547] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.547] GetLastError () returned 0x5 [0159.547] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.547] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b87b500, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b87b500, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0159.547] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0159.547] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0159.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0159.547] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.547] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.547] wcscat (in: _Dest=0x2c75f8, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" [0159.547] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll")) returned 0x2020 [0159.548] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.548] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.548] GetLastError () returned 0x5 [0159.548] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.548] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0159.548] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0159.548] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0159.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0159.548] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0159.548] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0159.548] wcscat (in: _Dest=0x2c75f8, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" [0159.548] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll")) returned 0x2020 [0159.549] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.549] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.549] GetLastError () returned 0x5 [0159.549] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0159.549] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0159.549] FindClose (in: hFindFile=0x8099010 | out: hFindFile=0x8099010) returned 1 [0159.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0159.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0159.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f394d8) returned 1 Thread: id = 1474 os_tid = 0x6cc [0145.210] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\zeh7wi2\\96b8zr9is.xlsx")) returned 0x20 [0145.773] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx", dwFileAttributes=0x20) returned 1 [0145.863] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\zeh7wi2\\96b8zr9is.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12e8 [0145.978] GetFileSizeEx (in: hFile=0x12e8, lpFileSize=0xa3bfea0 | out: lpFileSize=0xa3bfea0*=18252) returned 1 [0145.978] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x4748, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.978] ReadFile (in: hFile=0x12e8, lpBuffer=0xa3bfeac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa3bfe88, lpOverlapped=0x0 | out: lpBuffer=0xa3bfeac*, lpNumberOfBytesRead=0xa3bfe88*=0x4, lpOverlapped=0x0) returned 1 [0145.980] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5c8 [0145.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b708 [0145.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0145.980] NtQuerySystemTime (in: CurrentTime=0xa3bfe28 | out: CurrentTime=0xa3bfe28*=132471540145524000) returned 0x0 [0145.980] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x774fd518 [0145.980] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x60cbd19b [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x45626d71 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x7a759cb4 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x3bebaf04 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x126a8676 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x3638cbbf [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x5832c9a3 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x590a419d [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x399a9d93 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x54951e3d [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x246c4458 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x78c96e6 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x63fb044c [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x51fae8ad [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x70e07262 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x5b87d074 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x629d18e [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x34828b75 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x5fa1163e [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x67a782e3 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x5c10c921 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x26fb8468 [0145.981] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x703e4e7c [0145.982] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x2af2766b [0145.982] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x110f43c7 [0145.982] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x3c884173 [0145.982] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x1b9e7afc [0145.982] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x4cb7c60e [0145.982] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x2f851329 [0145.982] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x31c4030b [0145.982] RtlRandomEx (in: Seed=0xa3bfe20 | out: Seed=0xa3bfe20) returned 0x54516022 [0145.993] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.993] ReadFile (in: hFile=0x12e8, lpBuffer=0x80b0c88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa3bfe28, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesRead=0xa3bfe28*=0x3c00, lpOverlapped=0x0) returned 1 [0145.993] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d688 [0145.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8b50 [0145.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5c8 [0145.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5c8) returned 1 [0145.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0145.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5c8 [0145.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0145.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0145.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0145.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d688) returned 1 [0145.994] WriteFile (in: hFile=0x12e8, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa3bfe28, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0xa3bfe28*=0x3c00, lpOverlapped=0x0) returned 1 [0146.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0146.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0146.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77c20 [0146.410] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.410] WriteFile (in: hFile=0x12e8, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xa3bfe94, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0xa3bfe94*=0x10e, lpOverlapped=0x0) returned 1 [0146.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0146.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77be8) returned 1 [0146.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0146.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c20) returned 1 [0146.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5c8) returned 1 [0146.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b708) returned 1 [0146.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7e8) returned 1 [0146.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0146.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819af98 [0146.524] wcscpy (in: _Dest=0x819af98, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx" [0146.524] wcscat (in: _Dest=0x819af98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx.f0dbec" [0146.524] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx.f0dbec", NtPathName=0xa3bfe18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\96b8zr9IS.xlsx.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b5b8 [0146.607] FlushFileBuffers (hFile=0x12e8) returned 1 [0146.613] CloseHandle (hObject=0x12e8) returned 1 [0146.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c2e0 [0146.629] wcscpy (in: _Dest=0x3e3c2e0, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\" [0146.629] wcscat (in: _Dest=0x3e3c2e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\F0DBEC-Readme.txt" [0146.629] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\zeh7wi2\\f0dbec-readme.txt")) returned 0xffffffff [0146.629] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\pcen0\\ZeH7wI2\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\pcen0\\zeh7wi2\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x108c [0146.748] WriteFile (in: hFile=0x108c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa3bfe3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa3bfe3c*=0x70c, lpOverlapped=0x0) returned 1 [0146.751] CloseHandle (hObject=0x108c) returned 1 [0146.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c2e0) returned 1 [0146.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f359a0) returned 1 Thread: id = 1475 os_tid = 0x1484 [0145.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f34388 [0145.211] wcscpy (in: _Dest=0x3f34388, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0145.211] wcscat (in: _Dest=0x3f34388, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0145.211] wcscat (in: _Dest=0x3f34388, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*" [0145.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d490 [0145.211] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e18 [0145.772] wcscmp (_String1=".", _String2=".") returned 0 [0145.772] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.772] wcscmp (_String1="..", _String2=".") returned 1 [0145.772] wcscmp (_String1="..", _String2="..") returned 0 [0145.772] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x85d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0145.772] wcscmp (_String1="AdobeCMapFnt10.lst", _String2=".") returned 1 [0145.772] wcscmp (_String1="AdobeCMapFnt10.lst", _String2="..") returned 1 [0145.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cb30 [0145.772] wcscpy (in: _Dest=0x3e3cb30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0145.772] wcscat (in: _Dest=0x3e3cb30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0145.772] wcscat (in: _Dest=0x3e3cb30, _Source="AdobeCMapFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" [0148.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0148.221] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0148.221] wcscmp (_String1="AdobeSysFnt10.lst", _String2=".") returned 1 [0148.221] wcscmp (_String1="AdobeSysFnt10.lst", _String2="..") returned 1 [0148.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f360f0 [0148.221] wcscpy (in: _Dest=0x3f360f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0148.221] wcscat (in: _Dest=0x3f360f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0148.221] wcscat (in: _Dest=0x3f360f0, _Source="AdobeSysFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" [0148.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f360f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0148.222] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xebdb3e10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0148.222] wcscmp (_String1="Cache", _String2=".") returned 1 [0148.222] wcscmp (_String1="Cache", _String2="..") returned 1 [0148.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e687e0 [0148.222] wcscpy (in: _Dest=0x3e687e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0148.222] wcscat (in: _Dest=0x3e687e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0148.223] wcscat (in: _Dest=0x3e687e0, _Source="Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" [0148.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e687e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0148.224] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdcf4e950, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdcf4e950, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x929a5380, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0148.224] wcscmp (_String1="SharedDataEvents", _String2=".") returned 1 [0148.224] wcscmp (_String1="SharedDataEvents", _String2="..") returned 1 [0148.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f36060 [0148.224] wcscpy (in: _Dest=0x3f36060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0148.224] wcscat (in: _Dest=0x3f36060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0148.224] wcscat (in: _Dest=0x3f36060, _Source="SharedDataEvents" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" [0148.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0148.225] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb83f430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdb83f430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x86034dc0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x12dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0148.225] wcscmp (_String1="UserCache.bin", _String2=".") returned 1 [0148.225] wcscmp (_String1="UserCache.bin", _String2="..") returned 1 [0148.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ef80 [0148.226] wcscpy (in: _Dest=0x3e1ef80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0148.226] wcscat (in: _Dest=0x3e1ef80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0148.226] wcscat (in: _Dest=0x3e1ef80, _Source="UserCache.bin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" [0148.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0148.227] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb83f430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdb83f430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x86034dc0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x12dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0148.227] FindClose (in: hFindFile=0x3f37e18 | out: hFindFile=0x3f37e18) returned 1 [0148.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d490) returned 1 [0148.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34388) returned 1 [0148.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a3b8) returned 1 Thread: id = 1476 os_tid = 0xf3c [0145.211] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\acecache11.lst")) returned 0x2020 [0147.167] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", dwFileAttributes=0x20) returned 1 [0147.167] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda8 [0147.167] GetFileSizeEx (in: hFile=0xda8, lpFileSize=0x800fd18 | out: lpFileSize=0x800fd18*=1154) returned 1 [0147.167] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.167] ReadFile (in: hFile=0xda8, lpBuffer=0x800fd24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x800fd00, lpOverlapped=0x0 | out: lpBuffer=0x800fd24*, lpNumberOfBytesRead=0x800fd00*=0x4, lpOverlapped=0x0) returned 1 [0147.386] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0147.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0147.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0147.386] NtQuerySystemTime (in: CurrentTime=0x800fca0 | out: CurrentTime=0x800fca0*=132471540159564000) returned 0x0 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x1fea767d [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x5b13dbf3 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x62cfce9 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x17f06339 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x7df4d92c [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x5d51ae00 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0xf1b4970 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x75d96e77 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x3ab32d95 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x24b77970 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x32661f07 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x1d022484 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x36b63b55 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x7681e3ac [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x53eb9783 [0147.386] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x5f20bc2 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x6da66685 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x32ecdfe1 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x7c0531ae [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x2fbb19fa [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x5e8d50e1 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x56e1ae60 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x53f606ad [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x781e4945 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x511905be [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x4ce46c40 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x25573651 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x7a6b34c3 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x5279f363 [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x4260c2de [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x8c7daad [0147.387] RtlRandomEx (in: Seed=0x800fc98 | out: Seed=0x800fc98) returned 0x32c9b235 [0147.399] ReadFile (in: hFile=0xda8, lpBuffer=0x8160890, nNumberOfBytesToRead=0x482, lpNumberOfBytesRead=0x800fc94, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0x800fc94*=0x482, lpOverlapped=0x0) returned 1 [0147.399] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.399] WriteFile (in: hFile=0xda8, lpBuffer=0x814dc68*, nNumberOfBytesToWrite=0x482, lpNumberOfBytesWritten=0x800fc98, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesWritten=0x800fc98*=0x482, lpOverlapped=0x0) returned 1 [0149.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0149.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0149.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0149.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0149.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0149.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0149.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096200) returned 1 [0149.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77d38 [0149.059] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.059] WriteFile (in: hFile=0xda8, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x800fd0c, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x800fd0c*=0x10e, lpOverlapped=0x0) returned 1 [0151.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0151.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c58) returned 1 [0151.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0151.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0151.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0151.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0151.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0151.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0151.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34c20 [0151.115] wcscpy (in: _Dest=0x3f34c20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" [0151.115] wcscat (in: _Dest=0x3f34c20, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.f0dbec" [0151.115] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.f0dbec", NtPathName=0x800fc90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11788 [0151.144] FlushFileBuffers (hFile=0xda8) returned 1 [0151.147] CloseHandle (hObject=0xda8) returned 1 [0151.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1eef8 [0151.148] wcscpy (in: _Dest=0x3e1eef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0151.148] wcscat (in: _Dest=0x3e1eef8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\F0DBEC-Readme.txt" [0151.148] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\f0dbec-readme.txt")) returned 0xffffffff [0151.148] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xda8 [0151.149] WriteFile (in: hFile=0xda8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x800fcb4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x800fcb4*=0x70c, lpOverlapped=0x0) returned 1 [0151.151] CloseHandle (hObject=0xda8) returned 1 [0151.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eef8) returned 1 [0151.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23d40) returned 1 Thread: id = 1477 os_tid = 0xef8 [0145.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d51728 [0145.212] wcscpy (in: _Dest=0x3d51728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0145.212] wcscat (in: _Dest=0x3d51728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0145.212] wcscat (in: _Dest=0x3d51728, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\*" [0145.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bee8 [0145.212] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0147.009] wcscmp (_String1=".", _String2=".") returned 0 [0147.009] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.010] wcscmp (_String1="..", _String2=".") returned 1 [0147.010] wcscmp (_String1="..", _String2="..") returned 0 [0147.010] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd6835070, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0147.010] wcscmp (_String1="wscRGB.icc", _String2=".") returned 1 [0147.010] wcscmp (_String1="wscRGB.icc", _String2="..") returned 1 [0147.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1fbb8 [0147.010] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0147.010] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0147.010] wcscat (in: _Dest=0x3e1fbb8, _Source="wscRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" [0148.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0148.262] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd685b1d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0148.262] wcscmp (_String1="wsRGB.icc", _String2=".") returned 1 [0148.262] wcscmp (_String1="wsRGB.icc", _String2="..") returned 1 [0148.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30408 [0148.262] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0148.263] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0148.263] wcscat (in: _Dest=0x3f30408, _Source="wsRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" [0148.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0148.264] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd685b1d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0148.264] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0148.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bee8) returned 1 [0148.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0148.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a80) returned 1 Thread: id = 1478 os_tid = 0x1488 [0145.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl")) returned 0x20 [0147.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl", dwFileAttributes=0x20) returned 0 [0147.164] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.164] GetLastError () returned 0x5 [0147.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl", dwFileAttributes=0x20) returned 0 [0147.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 Thread: id = 1479 os_tid = 0x158 [0145.213] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\esvl-yqta9cwp.odt")) returned 0x20 [0145.770] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt", dwFileAttributes=0x20) returned 1 [0145.864] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\esvl-yqta9cwp.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb48 [0145.958] GetFileSizeEx (in: hFile=0xb48, lpFileSize=0x1088fb08 | out: lpFileSize=0x1088fb08*=44468) returned 1 [0145.958] SetFilePointerEx (in: hFile=0xb48, liDistanceToMove=0xadb0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.958] ReadFile (in: hFile=0xb48, lpBuffer=0x1088fb14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1088faf0, lpOverlapped=0x0 | out: lpBuffer=0x1088fb14*, lpNumberOfBytesRead=0x1088faf0*=0x4, lpOverlapped=0x0) returned 1 [0145.960] SetFilePointerEx (in: hFile=0xb48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0145.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0145.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5c8 [0145.960] NtQuerySystemTime (in: CurrentTime=0x1088fa90 | out: CurrentTime=0x1088fa90*=132471540145368000) returned 0x0 [0145.960] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x6e1f4fdb [0145.960] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x3c5ba38e [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x532aea68 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x2cc0ce89 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x1751cc03 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0xdf7eb2c [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x2179586f [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x1fe1e241 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x611e8ee1 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x200c5d0a [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x2bcb6f1b [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x16943483 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x11ed9860 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x1c72da21 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x109b78a [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x796323d0 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x682e2d66 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x7a068363 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x4a3b8347 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x3d667d42 [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x31b7686d [0145.961] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x57e3d7b3 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x46660256 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x723cf296 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x70c13167 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x1c630403 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x5cc093b9 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x11aa813 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x299f41d5 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0x2b393c16 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0xae4af27 [0145.962] RtlRandomEx (in: Seed=0x1088fa88 | out: Seed=0x1088fa88) returned 0xb16c114 [0145.976] SetFilePointerEx (in: hFile=0xb48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.976] ReadFile (in: hFile=0xb48, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x1088fa90, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0x1088fa90*=0x3c00, lpOverlapped=0x0) returned 1 [0145.976] SetFilePointerEx (in: hFile=0xb48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d688 [0145.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8b50 [0145.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0145.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0145.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0145.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0145.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5c8 [0145.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5c8) returned 1 [0145.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0145.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d688) returned 1 [0145.977] WriteFile (in: hFile=0xb48, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1088fa90, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0x1088fa90*=0x3c00, lpOverlapped=0x0) returned 1 [0146.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0146.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0146.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77cc8 [0146.407] SetFilePointerEx (in: hFile=0xb48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.407] WriteFile (in: hFile=0xb48, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x1088fafc, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0x1088fafc*=0x114, lpOverlapped=0x0) returned 1 [0146.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0146.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c90) returned 1 [0146.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0146.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77cc8) returned 1 [0146.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0146.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0b8) returned 1 [0146.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0146.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3c0) returned 1 [0146.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186c38 [0146.522] wcscpy (in: _Dest=0x8186c38, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt" [0146.522] wcscat (in: _Dest=0x8186c38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt.f0dbec" [0146.523] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt.f0dbec", NtPathName=0x1088fa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\ESvL-YqTa9CWP.odt.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3333a8 [0146.698] FlushFileBuffers (hFile=0xb48) returned 1 [0146.787] CloseHandle (hObject=0xb48) returned 1 [0146.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ac78 [0146.789] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" [0146.789] wcscat (in: _Dest=0x819ac78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt" [0146.789] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\f0dbec-readme.txt")) returned 0x20 [0146.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac78) returned 1 [0146.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 1480 os_tid = 0x148c [0145.213] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\ggq0tn.odp")) returned 0x20 [0145.769] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp", dwFileAttributes=0x20) returned 1 [0145.864] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\ggq0tn.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd30 [0145.943] GetFileSizeEx (in: hFile=0xd30, lpFileSize=0x108ff7e0 | out: lpFileSize=0x108ff7e0*=51054) returned 1 [0145.943] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0xc76a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.943] ReadFile (in: hFile=0xd30, lpBuffer=0x108ff7ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x108ff7c8, lpOverlapped=0x0 | out: lpBuffer=0x108ff7ec*, lpNumberOfBytesRead=0x108ff7c8*=0x4, lpOverlapped=0x0) returned 1 [0145.945] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0145.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0145.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0145.945] NtQuerySystemTime (in: CurrentTime=0x108ff768 | out: CurrentTime=0x108ff768*=132471540145212000) returned 0x0 [0145.945] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x2e6a353d [0145.945] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x5d8d405c [0145.945] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x1ddd7d38 [0145.945] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x79ae16e0 [0145.945] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x2dba0004 [0145.945] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x2e1d6866 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0xbf4d300 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x75388494 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x3fac09a9 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x350d2722 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x6c202e6d [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x592662d8 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x4d849128 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x51fad521 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x447fc6a1 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x67867333 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x64ad105a [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x6850e3bf [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x49176aa [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x40900f8d [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x7e02b66 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x712ef9a7 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x666d31cf [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x65b851ac [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x4c6dd241 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0xe58e78b [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x4252c4e1 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x2968d393 [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x4250b06e [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x427fb31f [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x421e172d [0145.946] RtlRandomEx (in: Seed=0x108ff760 | out: Seed=0x108ff760) returned 0x68abca70 [0145.956] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.956] ReadFile (in: hFile=0xd30, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x108ff768, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0x108ff768*=0x3c00, lpOverlapped=0x0) returned 1 [0145.957] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d688 [0145.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8b50 [0145.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0145.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0145.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0145.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0145.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0145.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0145.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0145.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d688) returned 1 [0145.958] WriteFile (in: hFile=0xd30, lpBuffer=0x80a5870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x108ff768, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesWritten=0x108ff768*=0x3c00, lpOverlapped=0x0) returned 1 [0146.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0146.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0146.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e68dc0 [0146.404] SetFilePointerEx (in: hFile=0xd30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.404] WriteFile (in: hFile=0xd30, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x108ff7d4, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x108ff7d4*=0x106, lpOverlapped=0x0) returned 1 [0146.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0146.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d90) returned 1 [0146.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0146.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68dc0) returned 1 [0146.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0146.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b578) returned 1 [0146.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0146.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b730) returned 1 [0146.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819adb8 [0146.520] wcscpy (in: _Dest=0x819adb8, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp" [0146.520] wcscat (in: _Dest=0x819adb8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp.f0dbec" [0146.520] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp.f0dbec", NtPathName=0x108ff758, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\GGq0TN.odp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c0b8 [0146.686] FlushFileBuffers (hFile=0xd30) returned 1 [0146.688] CloseHandle (hObject=0xd30) returned 1 [0146.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819adb8 [0146.688] wcscpy (in: _Dest=0x819adb8, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" [0146.688] wcscat (in: _Dest=0x819adb8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt" [0146.688] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\f0dbec-readme.txt")) returned 0x20 [0146.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819adb8) returned 1 [0146.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34a70) returned 1 Thread: id = 1481 os_tid = 0x1490 [0145.214] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\mpns ubwpm22psili.odp")) returned 0x20 [0145.769] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp", dwFileAttributes=0x20) returned 1 [0145.865] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\mpns ubwpm22psili.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd1c [0145.928] GetFileSizeEx (in: hFile=0xd1c, lpFileSize=0x1067fea8 | out: lpFileSize=0x1067fea8*=49503) returned 1 [0145.928] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0xc15b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.928] ReadFile (in: hFile=0xd1c, lpBuffer=0x1067feb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1067fe90, lpOverlapped=0x0 | out: lpBuffer=0x1067feb4*, lpNumberOfBytesRead=0x1067fe90*=0x4, lpOverlapped=0x0) returned 1 [0145.930] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0145.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0145.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0145.930] NtQuerySystemTime (in: CurrentTime=0x1067fe30 | out: CurrentTime=0x1067fe30*=132471540145056000) returned 0x0 [0145.930] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x23ebc3d5 [0145.930] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x500c3261 [0145.930] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x779e8f0c [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x48ebff75 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x3978e1b5 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x23f1f77 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x41eea891 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x5f68097f [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x66582687 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x6bb22fd7 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x3a3dce0c [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x47d0c4bb [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x28c929c2 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x7b0f8507 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x273b55be [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x6b08b6e2 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x796c3ac4 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x52f110aa [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x5c3fa78a [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x42de01a5 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x4f8ba821 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x78868ea6 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x4ced3bc3 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x7663ddea [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x4370d9f6 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x3653b313 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x6446f54d [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x6b21a47e [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x6893a446 [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x486e747a [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x7feca96d [0145.931] RtlRandomEx (in: Seed=0x1067fe28 | out: Seed=0x1067fe28) returned 0x133cf53b [0145.941] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.941] ReadFile (in: hFile=0xd1c, lpBuffer=0x809a458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x1067fe30, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0x1067fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0145.942] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d688 [0145.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8b50 [0145.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0145.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0145.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809e060 [0145.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0145.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0145.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0145.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0145.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d688) returned 1 [0145.943] WriteFile (in: hFile=0xd1c, lpBuffer=0x809e060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1067fe30, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesWritten=0x1067fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0146.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0146.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0146.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f381d8 [0146.401] SetFilePointerEx (in: hFile=0xd1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.401] WriteFile (in: hFile=0xd1c, lpBuffer=0x3d57028*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x1067fe9c, lpOverlapped=0x0 | out: lpBuffer=0x3d57028*, lpNumberOfBytesWritten=0x1067fe9c*=0x11c, lpOverlapped=0x0) returned 1 [0146.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57028) returned 1 [0146.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37518) returned 1 [0146.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c860) returned 1 [0146.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f381d8) returned 1 [0146.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0146.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0146.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0146.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b398) returned 1 [0146.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c588 [0146.517] wcscpy (in: _Dest=0x35c588, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp" [0146.517] wcscat (in: _Dest=0x35c588, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp.f0dbec") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp.f0dbec" [0146.517] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp.f0dbec", NtPathName=0x1067fe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\MpnS ubWPM22psILI.odp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35280 [0146.595] FlushFileBuffers (hFile=0xd1c) returned 1 [0146.598] CloseHandle (hObject=0xd1c) returned 1 [0146.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819af98 [0146.616] wcscpy (in: _Dest=0x819af98, _Source="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\" [0146.616] wcscat (in: _Dest=0x819af98, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt" [0146.616] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\f0dbec-readme.txt")) returned 0xffffffff [0146.616] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\K0lHR 0GU\\zNTEN6tf\\o8qFYwPp\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\k0lhr 0gu\\znten6tf\\o8qfywpp\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1614 [0146.632] WriteFile (in: hFile=0x1614, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1067fe44, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1067fe44*=0x70c, lpOverlapped=0x0) returned 1 [0146.650] CloseHandle (hObject=0x1614) returned 1 [0146.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819af98) returned 1 [0146.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187b50) returned 1 Thread: id = 1482 os_tid = 0x1494 [0145.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c838 [0145.214] wcscpy (in: _Dest=0x3e3c838, _Source="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0145.214] wcscat (in: _Dest=0x3e3c838, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\" [0145.214] wcscat (in: _Dest=0x3e3c838, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*" [0145.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b2e0 [0145.215] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38098 [0147.339] wcscmp (_String1=".", _String2=".") returned 0 [0147.339] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.339] wcscmp (_String1="..", _String2=".") returned 1 [0147.339] wcscmp (_String1="..", _String2="..") returned 0 [0147.339] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.339] FindClose (in: hFindFile=0x3f38098 | out: hFindFile=0x3f38098) returned 1 [0147.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b2e0) returned 1 [0147.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c838) returned 1 [0147.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 Thread: id = 1483 os_tid = 0x1498 [0145.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51548 [0145.215] wcscpy (in: _Dest=0x3d51548, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" [0145.215] wcscat (in: _Dest=0x3d51548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\" [0145.216] wcscat (in: _Dest=0x3d51548, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*" [0145.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0145.216] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0147.008] wcscmp (_String1=".", _String2=".") returned 0 [0147.008] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.008] wcscmp (_String1="..", _String2=".") returned 1 [0147.008] wcscmp (_String1="..", _String2="..") returned 0 [0147.008] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83ee400, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa83ee400, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 1 [0147.009] wcscmp (_String1="OFFICE10.MML", _String2=".") returned 1 [0147.009] wcscmp (_String1="OFFICE10.MML", _String2="..") returned 1 [0147.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f355b0 [0147.009] wcscpy (in: _Dest=0x3f355b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" [0147.009] wcscat (in: _Dest=0x3f355b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\" [0147.009] wcscat (in: _Dest=0x3f355b0, _Source="OFFICE10.MML" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" [0149.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f355b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0149.560] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83ee400, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa83ee400, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 0 [0149.561] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0149.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0149.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51548) returned 1 [0149.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 Thread: id = 1484 os_tid = 0x149c [0145.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a7d8 [0145.216] wcscpy (in: _Dest=0x831a7d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0145.217] wcscat (in: _Dest=0x831a7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0145.217] wcscat (in: _Dest=0x831a7d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*" [0145.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0145.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76b293d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd799b30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38098 [0147.385] wcscmp (_String1=".", _String2=".") returned 0 [0147.385] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76b293d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd799b30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.418] wcscmp (_String1="..", _String2=".") returned 1 [0147.418] wcscmp (_String1="..", _String2="..") returned 0 [0147.418] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x39a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP.DLL", cAlternateFileName="")) returned 1 [0147.418] wcscmp (_String1="AUTOSHAP.DLL", _String2=".") returned 1 [0147.418] wcscmp (_String1="AUTOSHAP.DLL", _String2="..") returned 1 [0147.418] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf689c300, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf689c300, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18180_.WMF", cAlternateFileName="")) returned 1 [0147.418] wcscmp (_String1="BD18180_.WMF", _String2=".") returned 1 [0147.418] wcscmp (_String1="BD18180_.WMF", _String2="..") returned 1 [0147.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2be28 [0147.418] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.418] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.418] wcscat (in: _Dest=0x3e2be28, _Source="BD18180_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" [0149.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2be28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0149.207] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5382f600, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5382f600, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18181_.WMF", cAlternateFileName="")) returned 1 [0149.207] wcscmp (_String1="BD18181_.WMF", _String2=".") returned 1 [0149.207] wcscmp (_String1="BD18181_.WMF", _String2="..") returned 1 [0149.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cec0 [0149.207] wcscpy (in: _Dest=0x3e3cec0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.207] wcscat (in: _Dest=0x3e3cec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.207] wcscat (in: _Dest=0x3e3cec0, _Source="BD18181_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" [0149.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0149.208] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3602e000, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3602e000, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18182_.WMF", cAlternateFileName="")) returned 1 [0149.209] wcscmp (_String1="BD18182_.WMF", _String2=".") returned 1 [0149.209] wcscmp (_String1="BD18182_.WMF", _String2="..") returned 1 [0149.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cf58 [0149.209] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.209] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.209] wcscat (in: _Dest=0x3e3cf58, _Source="BD18182_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" [0149.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0149.210] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76625e00, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76625e00, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0xd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18184_.WMF", cAlternateFileName="")) returned 1 [0149.210] wcscmp (_String1="BD18184_.WMF", _String2=".") returned 1 [0149.210] wcscmp (_String1="BD18184_.WMF", _String2="..") returned 1 [0149.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cff0 [0149.210] wcscpy (in: _Dest=0x3e3cff0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.210] wcscat (in: _Dest=0x3e3cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.210] wcscat (in: _Dest=0x3e3cff0, _Source="BD18184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" [0149.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0149.211] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbb5900, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6dbb5900, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18185_.WMF", cAlternateFileName="")) returned 1 [0149.211] wcscmp (_String1="BD18185_.WMF", _String2=".") returned 1 [0149.211] wcscmp (_String1="BD18185_.WMF", _String2="..") returned 1 [0149.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d088 [0149.211] wcscpy (in: _Dest=0x3e3d088, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.212] wcscat (in: _Dest=0x3e3d088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.212] wcscat (in: _Dest=0x3e3d088, _Source="BD18185_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" [0149.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0149.214] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a40b100, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a40b100, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x758, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18187_.WMF", cAlternateFileName="")) returned 1 [0149.214] wcscmp (_String1="BD18187_.WMF", _String2=".") returned 1 [0149.214] wcscmp (_String1="BD18187_.WMF", _String2="..") returned 1 [0149.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d120 [0149.215] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.215] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.215] wcscat (in: _Dest=0x3e3d120, _Source="BD18187_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" [0149.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0149.216] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fe3f00, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19fe3f00, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18189_.WMF", cAlternateFileName="")) returned 1 [0149.216] wcscmp (_String1="BD18189_.WMF", _String2=".") returned 1 [0149.216] wcscmp (_String1="BD18189_.WMF", _String2="..") returned 1 [0149.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d1b8 [0149.216] wcscpy (in: _Dest=0x3e3d1b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.216] wcscat (in: _Dest=0x3e3d1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.217] wcscat (in: _Dest=0x3e3d1b8, _Source="BD18189_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" [0149.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0149.218] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9e7700, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f9e7700, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18190_.WMF", cAlternateFileName="")) returned 1 [0149.218] wcscmp (_String1="BD18190_.WMF", _String2=".") returned 1 [0149.218] wcscmp (_String1="BD18190_.WMF", _String2="..") returned 1 [0149.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d250 [0149.218] wcscpy (in: _Dest=0x3e3d250, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.218] wcscat (in: _Dest=0x3e3d250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.218] wcscat (in: _Dest=0x3e3d250, _Source="BD18190_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" [0149.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0149.220] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac521300, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xac521300, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0xc9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18191_.WMF", cAlternateFileName="")) returned 1 [0149.220] wcscmp (_String1="BD18191_.WMF", _String2=".") returned 1 [0149.220] wcscmp (_String1="BD18191_.WMF", _String2="..") returned 1 [0149.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d2e8 [0149.220] wcscpy (in: _Dest=0x3e3d2e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.220] wcscat (in: _Dest=0x3e3d2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.220] wcscat (in: _Dest=0x3e3d2e8, _Source="BD18191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" [0149.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0149.221] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b780a00, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b780a00, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18192_.WMF", cAlternateFileName="")) returned 1 [0149.221] wcscmp (_String1="BD18192_.WMF", _String2=".") returned 1 [0149.221] wcscmp (_String1="BD18192_.WMF", _String2="..") returned 1 [0149.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d380 [0149.221] wcscpy (in: _Dest=0x3e3d380, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.221] wcscat (in: _Dest=0x3e3d380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.221] wcscat (in: _Dest=0x3e3d380, _Source="BD18192_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" [0149.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0149.223] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b1e800, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65b1e800, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18193_.WMF", cAlternateFileName="")) returned 1 [0149.223] wcscmp (_String1="BD18193_.WMF", _String2=".") returned 1 [0149.223] wcscmp (_String1="BD18193_.WMF", _String2="..") returned 1 [0149.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d418 [0149.223] wcscpy (in: _Dest=0x3e3d418, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.223] wcscat (in: _Dest=0x3e3d418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.223] wcscat (in: _Dest=0x3e3d418, _Source="BD18193_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" [0149.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0149.224] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf181800, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbf181800, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18194_.WMF", cAlternateFileName="")) returned 1 [0149.224] wcscmp (_String1="BD18194_.WMF", _String2=".") returned 1 [0149.224] wcscmp (_String1="BD18194_.WMF", _String2="..") returned 1 [0149.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d4b0 [0149.225] wcscpy (in: _Dest=0x3e3d4b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.225] wcscat (in: _Dest=0x3e3d4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.225] wcscat (in: _Dest=0x3e3d4b0, _Source="BD18194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" [0149.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0149.226] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89752e00, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x89752e00, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18196_.WMF", cAlternateFileName="")) returned 1 [0149.226] wcscmp (_String1="BD18196_.WMF", _String2=".") returned 1 [0149.226] wcscmp (_String1="BD18196_.WMF", _String2="..") returned 1 [0149.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d548 [0149.226] wcscpy (in: _Dest=0x3e3d548, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.226] wcscat (in: _Dest=0x3e3d548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.226] wcscat (in: _Dest=0x3e3d548, _Source="BD18196_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" [0149.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0149.227] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a800, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10a800, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18197_.WMF", cAlternateFileName="")) returned 1 [0149.227] wcscmp (_String1="BD18197_.WMF", _String2=".") returned 1 [0149.227] wcscmp (_String1="BD18197_.WMF", _String2="..") returned 1 [0149.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d5e0 [0149.228] wcscpy (in: _Dest=0x3e3d5e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.228] wcscat (in: _Dest=0x3e3d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.228] wcscat (in: _Dest=0x3e3d5e0, _Source="BD18197_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" [0149.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0149.229] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a800, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10a800, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x5c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18198_.WMF", cAlternateFileName="")) returned 1 [0149.229] wcscmp (_String1="BD18198_.WMF", _String2=".") returned 1 [0149.229] wcscmp (_String1="BD18198_.WMF", _String2="..") returned 1 [0149.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d678 [0149.229] wcscpy (in: _Dest=0x3e3d678, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.229] wcscat (in: _Dest=0x3e3d678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.229] wcscat (in: _Dest=0x3e3d678, _Source="BD18198_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" [0149.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0149.230] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50ff800, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc50ff800, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18199_.WMF", cAlternateFileName="")) returned 1 [0149.230] wcscmp (_String1="BD18199_.WMF", _String2=".") returned 1 [0149.230] wcscmp (_String1="BD18199_.WMF", _String2="..") returned 1 [0149.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d710 [0149.230] wcscpy (in: _Dest=0x3e3d710, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.231] wcscat (in: _Dest=0x3e3d710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.231] wcscat (in: _Dest=0x3e3d710, _Source="BD18199_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" [0149.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0149.232] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92650000, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x92650000, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18200_.WMF", cAlternateFileName="")) returned 1 [0149.232] wcscmp (_String1="BD18200_.WMF", _String2=".") returned 1 [0149.232] wcscmp (_String1="BD18200_.WMF", _String2="..") returned 1 [0149.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d7a8 [0149.232] wcscpy (in: _Dest=0x3e3d7a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.232] wcscat (in: _Dest=0x3e3d7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.232] wcscat (in: _Dest=0x3e3d7a8, _Source="BD18200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" [0149.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0149.233] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f8a400, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68f8a400, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18201_.WMF", cAlternateFileName="")) returned 1 [0149.233] wcscmp (_String1="BD18201_.WMF", _String2=".") returned 1 [0149.233] wcscmp (_String1="BD18201_.WMF", _String2="..") returned 1 [0149.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d840 [0149.233] wcscpy (in: _Dest=0x3e3d840, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.233] wcscat (in: _Dest=0x3e3d840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.233] wcscat (in: _Dest=0x3e3d840, _Source="BD18201_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" [0149.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0149.235] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a800, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10a800, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18202_.WMF", cAlternateFileName="")) returned 1 [0149.235] wcscmp (_String1="BD18202_.WMF", _String2=".") returned 1 [0149.235] wcscmp (_String1="BD18202_.WMF", _String2="..") returned 1 [0149.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d8d8 [0149.235] wcscpy (in: _Dest=0x3e3d8d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.235] wcscat (in: _Dest=0x3e3d8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.235] wcscat (in: _Dest=0x3e3d8d8, _Source="BD18202_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" [0149.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0149.237] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd48d4200, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd48d4200, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18203_.WMF", cAlternateFileName="")) returned 1 [0149.237] wcscmp (_String1="BD18203_.WMF", _String2=".") returned 1 [0149.237] wcscmp (_String1="BD18203_.WMF", _String2="..") returned 1 [0149.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d970 [0149.237] wcscpy (in: _Dest=0x3e3d970, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.237] wcscat (in: _Dest=0x3e3d970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.237] wcscat (in: _Dest=0x3e3d970, _Source="BD18203_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" [0149.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0149.238] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d101a00, ftCreationTime.dwHighDateTime=0x1bddd17, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d101a00, ftLastWriteTime.dwHighDateTime=0x1bddd17, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18204_.WMF", cAlternateFileName="")) returned 1 [0149.238] wcscmp (_String1="BD18204_.WMF", _String2=".") returned 1 [0149.238] wcscmp (_String1="BD18204_.WMF", _String2="..") returned 1 [0149.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3da08 [0149.239] wcscpy (in: _Dest=0x3e3da08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.239] wcscat (in: _Dest=0x3e3da08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.239] wcscat (in: _Dest=0x3e3da08, _Source="BD18204_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" [0149.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3da08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0149.240] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed97f200, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xed97f200, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18205_.WMF", cAlternateFileName="")) returned 1 [0149.240] wcscmp (_String1="BD18205_.WMF", _String2=".") returned 1 [0149.240] wcscmp (_String1="BD18205_.WMF", _String2="..") returned 1 [0149.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3daa0 [0149.240] wcscpy (in: _Dest=0x3e3daa0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.240] wcscat (in: _Dest=0x3e3daa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.240] wcscat (in: _Dest=0x3e3daa0, _Source="BD18205_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" [0149.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3daa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0149.242] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe30a8600, ftCreationTime.dwHighDateTime=0x1bddd03, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe30a8600, ftLastWriteTime.dwHighDateTime=0x1bddd03, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18206_.WMF", cAlternateFileName="")) returned 1 [0149.242] wcscmp (_String1="BD18206_.WMF", _String2=".") returned 1 [0149.242] wcscmp (_String1="BD18206_.WMF", _String2="..") returned 1 [0149.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3db38 [0149.242] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.242] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.242] wcscat (in: _Dest=0x3e3db38, _Source="BD18206_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" [0149.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3db38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0149.243] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4936e00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4936e00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18207_.WMF", cAlternateFileName="")) returned 1 [0149.243] wcscmp (_String1="BD18207_.WMF", _String2=".") returned 1 [0149.243] wcscmp (_String1="BD18207_.WMF", _String2="..") returned 1 [0149.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3dbd0 [0149.243] wcscpy (in: _Dest=0x3e3dbd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.243] wcscat (in: _Dest=0x3e3dbd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.243] wcscat (in: _Dest=0x3e3dbd0, _Source="BD18207_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" [0149.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0149.654] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a62100, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4a62100, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x1b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18208_.WMF", cAlternateFileName="")) returned 1 [0149.654] wcscmp (_String1="BD18208_.WMF", _String2=".") returned 1 [0149.655] wcscmp (_String1="BD18208_.WMF", _String2="..") returned 1 [0149.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2a078 [0149.655] wcscpy (in: _Dest=0x3e2a078, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0149.655] wcscat (in: _Dest=0x3e2a078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0149.655] wcscat (in: _Dest=0x3e2a078, _Source="BD18208_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" [0151.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0151.761] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b951600, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b951600, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xc6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18209_.WMF", cAlternateFileName="")) returned 1 [0151.761] wcscmp (_String1="BD18209_.WMF", _String2=".") returned 1 [0151.761] wcscmp (_String1="BD18209_.WMF", _String2="..") returned 1 [0151.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d14f8 [0151.762] wcscpy (in: _Dest=0x81d14f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0151.762] wcscat (in: _Dest=0x81d14f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0151.762] wcscat (in: _Dest=0x81d14f8, _Source="BD18209_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" [0151.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d14f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0151.763] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9c1f00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd9c1f00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0xc4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18210_.WMF", cAlternateFileName="")) returned 1 [0151.763] wcscmp (_String1="BD18210_.WMF", _String2=".") returned 1 [0151.763] wcscmp (_String1="BD18210_.WMF", _String2="..") returned 1 [0151.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1590 [0151.763] wcscpy (in: _Dest=0x81d1590, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0151.763] wcscat (in: _Dest=0x81d1590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0151.763] wcscat (in: _Dest=0x81d1590, _Source="BD18210_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" [0151.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0151.764] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9e7700, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f9e7700, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18211_.WMF", cAlternateFileName="")) returned 1 [0151.764] wcscmp (_String1="BD18211_.WMF", _String2=".") returned 1 [0151.764] wcscmp (_String1="BD18211_.WMF", _String2="..") returned 1 [0151.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1628 [0151.764] wcscpy (in: _Dest=0x81d1628, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0151.764] wcscat (in: _Dest=0x81d1628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0151.764] wcscat (in: _Dest=0x81d1628, _Source="BD18211_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" [0151.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0151.765] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac8fc00, ftCreationTime.dwHighDateTime=0x1bddd0b, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ac8fc00, ftLastWriteTime.dwHighDateTime=0x1bddd0b, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18212_.WMF", cAlternateFileName="")) returned 1 [0151.765] wcscmp (_String1="BD18212_.WMF", _String2=".") returned 1 [0151.765] wcscmp (_String1="BD18212_.WMF", _String2="..") returned 1 [0151.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d16c0 [0151.765] wcscpy (in: _Dest=0x81d16c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0151.765] wcscat (in: _Dest=0x81d16c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0151.765] wcscat (in: _Dest=0x81d16c0, _Source="BD18212_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" [0151.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d16c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0151.766] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab6db100, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab6db100, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x704, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18213_.WMF", cAlternateFileName="")) returned 1 [0151.767] wcscmp (_String1="BD18213_.WMF", _String2=".") returned 1 [0151.767] wcscmp (_String1="BD18213_.WMF", _String2="..") returned 1 [0151.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1758 [0151.767] wcscpy (in: _Dest=0x81d1758, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0151.767] wcscat (in: _Dest=0x81d1758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0151.767] wcscat (in: _Dest=0x81d1758, _Source="BD18213_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" [0151.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0151.768] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425900, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1425900, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18214_.WMF", cAlternateFileName="")) returned 1 [0151.768] wcscmp (_String1="BD18214_.WMF", _String2=".") returned 1 [0151.768] wcscmp (_String1="BD18214_.WMF", _String2="..") returned 1 [0151.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d17f0 [0151.768] wcscpy (in: _Dest=0x81d17f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0151.768] wcscat (in: _Dest=0x81d17f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0151.768] wcscat (in: _Dest=0x81d17f0, _Source="BD18214_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" [0151.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d17f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0151.769] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0961000, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc0961000, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18215_.WMF", cAlternateFileName="")) returned 1 [0151.769] wcscmp (_String1="BD18215_.WMF", _String2=".") returned 1 [0151.769] wcscmp (_String1="BD18215_.WMF", _String2="..") returned 1 [0151.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1888 [0151.769] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0151.769] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0151.769] wcscat (in: _Dest=0x81d1888, _Source="BD18215_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" [0151.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0151.770] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1e01c00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd1e01c00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0x726, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18216_.WMF", cAlternateFileName="")) returned 1 [0151.774] wcscmp (_String1="BD18216_.WMF", _String2=".") returned 1 [0151.774] wcscmp (_String1="BD18216_.WMF", _String2="..") returned 1 [0151.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1920 [0151.774] wcscpy (in: _Dest=0x81d1920, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0151.775] wcscat (in: _Dest=0x81d1920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0151.775] wcscat (in: _Dest=0x81d1920, _Source="BD18216_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" [0154.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0154.192] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1321fd00, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1321fd00, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x1552, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18217_.WMF", cAlternateFileName="")) returned 1 [0154.192] wcscmp (_String1="BD18217_.WMF", _String2=".") returned 1 [0154.192] wcscmp (_String1="BD18217_.WMF", _String2="..") returned 1 [0154.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1628 [0154.192] wcscpy (in: _Dest=0x81d1628, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.192] wcscat (in: _Dest=0x81d1628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.192] wcscat (in: _Dest=0x81d1628, _Source="BD18217_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" [0154.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0154.194] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2503a000, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2503a000, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x1212, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18218_.WMF", cAlternateFileName="")) returned 1 [0154.194] wcscmp (_String1="BD18218_.WMF", _String2=".") returned 1 [0154.194] wcscmp (_String1="BD18218_.WMF", _String2="..") returned 1 [0154.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d14f8 [0154.194] wcscpy (in: _Dest=0x81d14f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.194] wcscat (in: _Dest=0x81d14f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.194] wcscat (in: _Dest=0x81d14f8, _Source="BD18218_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" [0154.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d14f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0154.195] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4595600, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4595600, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x1136, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18219_.WMF", cAlternateFileName="")) returned 1 [0154.195] wcscmp (_String1="BD18219_.WMF", _String2=".") returned 1 [0154.196] wcscmp (_String1="BD18219_.WMF", _String2="..") returned 1 [0154.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1d48 [0154.196] wcscpy (in: _Dest=0x81d1d48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.196] wcscat (in: _Dest=0x81d1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.196] wcscat (in: _Dest=0x81d1d48, _Source="BD18219_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" [0154.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0154.197] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfe2d500, ftCreationTime.dwHighDateTime=0x1bddd09, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbfe2d500, ftLastWriteTime.dwHighDateTime=0x1bddd09, nFileSizeHigh=0x0, nFileSizeLow=0x213c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18220_.WMF", cAlternateFileName="")) returned 1 [0154.197] wcscmp (_String1="BD18220_.WMF", _String2=".") returned 1 [0154.197] wcscmp (_String1="BD18220_.WMF", _String2="..") returned 1 [0154.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1de0 [0154.198] wcscpy (in: _Dest=0x81d1de0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.198] wcscat (in: _Dest=0x81d1de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.198] wcscat (in: _Dest=0x81d1de0, _Source="BD18220_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" [0154.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x242c [0154.199] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35694a00, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35694a00, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x72c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18221_.WMF", cAlternateFileName="")) returned 1 [0154.199] wcscmp (_String1="BD18221_.WMF", _String2=".") returned 1 [0154.199] wcscmp (_String1="BD18221_.WMF", _String2="..") returned 1 [0154.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1e78 [0154.199] wcscpy (in: _Dest=0x81d1e78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.199] wcscat (in: _Dest=0x81d1e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.200] wcscat (in: _Dest=0x81d1e78, _Source="BD18221_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" [0154.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0154.201] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ade7400, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ade7400, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18222_.WMF", cAlternateFileName="")) returned 1 [0154.201] wcscmp (_String1="BD18222_.WMF", _String2=".") returned 1 [0154.201] wcscmp (_String1="BD18222_.WMF", _String2="..") returned 1 [0154.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1f10 [0154.201] wcscpy (in: _Dest=0x81d1f10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.201] wcscat (in: _Dest=0x81d1f10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.201] wcscat (in: _Dest=0x81d1f10, _Source="BD18222_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" [0154.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2434 [0154.203] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf419a100, ftCreationTime.dwHighDateTime=0x1bddbf6, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf419a100, ftLastWriteTime.dwHighDateTime=0x1bddbf6, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18223_.WMF", cAlternateFileName="")) returned 1 [0154.203] wcscmp (_String1="BD18223_.WMF", _String2=".") returned 1 [0154.203] wcscmp (_String1="BD18223_.WMF", _String2="..") returned 1 [0154.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1fa8 [0154.203] wcscpy (in: _Dest=0x81d1fa8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.203] wcscat (in: _Dest=0x81d1fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.203] wcscat (in: _Dest=0x81d1fa8, _Source="BD18223_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" [0154.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0154.207] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea7e600, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3ea7e600, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18224_.WMF", cAlternateFileName="")) returned 1 [0154.207] wcscmp (_String1="BD18224_.WMF", _String2=".") returned 1 [0154.207] wcscmp (_String1="BD18224_.WMF", _String2="..") returned 1 [0154.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d2040 [0154.207] wcscpy (in: _Dest=0x81d2040, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.207] wcscat (in: _Dest=0x81d2040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.207] wcscat (in: _Dest=0x81d2040, _Source="BD18224_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" [0154.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x243c [0154.209] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb88c9f00, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb88c9f00, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18225_.WMF", cAlternateFileName="")) returned 1 [0154.209] wcscmp (_String1="BD18225_.WMF", _String2=".") returned 1 [0154.209] wcscmp (_String1="BD18225_.WMF", _String2="..") returned 1 [0154.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d20d8 [0154.209] wcscpy (in: _Dest=0x81d20d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.209] wcscat (in: _Dest=0x81d20d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.209] wcscat (in: _Dest=0x81d20d8, _Source="BD18225_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" [0154.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d20d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0154.210] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe245c600, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe245c600, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18226_.WMF", cAlternateFileName="")) returned 1 [0154.210] wcscmp (_String1="BD18226_.WMF", _String2=".") returned 1 [0154.210] wcscmp (_String1="BD18226_.WMF", _String2="..") returned 1 [0154.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d2170 [0154.210] wcscpy (in: _Dest=0x81d2170, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.210] wcscat (in: _Dest=0x81d2170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.210] wcscat (in: _Dest=0x81d2170, _Source="BD18226_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" [0154.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2444 [0154.211] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1919dd00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1919dd00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18227_.WMF", cAlternateFileName="")) returned 1 [0154.211] wcscmp (_String1="BD18227_.WMF", _String2=".") returned 1 [0154.212] wcscmp (_String1="BD18227_.WMF", _String2="..") returned 1 [0154.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d2208 [0154.212] wcscpy (in: _Dest=0x81d2208, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.212] wcscat (in: _Dest=0x81d2208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.212] wcscat (in: _Dest=0x81d2208, _Source="BD18227_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" [0154.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0154.213] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0685000, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa0685000, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18228_.WMF", cAlternateFileName="")) returned 1 [0154.213] wcscmp (_String1="BD18228_.WMF", _String2=".") returned 1 [0154.213] wcscmp (_String1="BD18228_.WMF", _String2="..") returned 1 [0154.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d22a0 [0154.214] wcscpy (in: _Dest=0x81d22a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.214] wcscat (in: _Dest=0x81d22a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.214] wcscat (in: _Dest=0x81d22a0, _Source="BD18228_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" [0154.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d22a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0154.215] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93a9200, ftCreationTime.dwHighDateTime=0x1bdfeb0, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc93a9200, ftLastWriteTime.dwHighDateTime=0x1bdfeb0, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18229_.WMF", cAlternateFileName="")) returned 1 [0154.215] wcscmp (_String1="BD18229_.WMF", _String2=".") returned 1 [0154.215] wcscmp (_String1="BD18229_.WMF", _String2="..") returned 1 [0154.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d2338 [0154.215] wcscpy (in: _Dest=0x81d2338, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.215] wcscat (in: _Dest=0x81d2338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.215] wcscat (in: _Dest=0x81d2338, _Source="BD18229_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" [0154.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2450 [0154.216] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8461b000, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8461b000, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x724, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18230_.WMF", cAlternateFileName="")) returned 1 [0154.216] wcscmp (_String1="BD18230_.WMF", _String2=".") returned 1 [0154.216] wcscmp (_String1="BD18230_.WMF", _String2="..") returned 1 [0154.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cff0 [0154.217] wcscpy (in: _Dest=0x3e3cff0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.217] wcscat (in: _Dest=0x3e3cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.217] wcscat (in: _Dest=0x3e3cff0, _Source="BD18230_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" [0154.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0154.218] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa22f1500, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa22f1500, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18231_.WMF", cAlternateFileName="")) returned 1 [0154.218] wcscmp (_String1="BD18231_.WMF", _String2=".") returned 1 [0154.218] wcscmp (_String1="BD18231_.WMF", _String2="..") returned 1 [0154.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3ca00 [0154.218] wcscpy (in: _Dest=0x3e3ca00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.218] wcscat (in: _Dest=0x3e3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.218] wcscat (in: _Dest=0x3e3ca00, _Source="BD18231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" [0154.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0154.220] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc98b200, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc98b200, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18232_.WMF", cAlternateFileName="")) returned 1 [0154.220] wcscmp (_String1="BD18232_.WMF", _String2=".") returned 1 [0154.220] wcscmp (_String1="BD18232_.WMF", _String2="..") returned 1 [0154.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3daa0 [0154.220] wcscpy (in: _Dest=0x3e3daa0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.220] wcscat (in: _Dest=0x3e3daa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.220] wcscat (in: _Dest=0x3e3daa0, _Source="BD18232_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" [0154.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3daa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x245c [0154.222] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefab8200, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xefab8200, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18233_.WMF", cAlternateFileName="")) returned 1 [0154.222] wcscmp (_String1="BD18233_.WMF", _String2=".") returned 1 [0154.222] wcscmp (_String1="BD18233_.WMF", _String2="..") returned 1 [0154.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3bf50 [0154.222] wcscpy (in: _Dest=0x3e3bf50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.222] wcscat (in: _Dest=0x3e3bf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.222] wcscat (in: _Dest=0x3e3bf50, _Source="BD18233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" [0154.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3bf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0154.223] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef7f00, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3ef7f00, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x754, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18234_.WMF", cAlternateFileName="")) returned 1 [0154.223] wcscmp (_String1="BD18234_.WMF", _String2=".") returned 1 [0154.223] wcscmp (_String1="BD18234_.WMF", _String2="..") returned 1 [0154.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c1b0 [0154.224] wcscpy (in: _Dest=0x3e3c1b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.224] wcscat (in: _Dest=0x3e3c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.224] wcscat (in: _Dest=0x3e3c1b0, _Source="BD18234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" [0154.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0154.225] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5a8a00, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f5a8a00, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18235_.WMF", cAlternateFileName="")) returned 1 [0154.225] wcscmp (_String1="BD18235_.WMF", _String2=".") returned 1 [0154.225] wcscmp (_String1="BD18235_.WMF", _String2="..") returned 1 [0154.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3c7a0 [0154.225] wcscpy (in: _Dest=0x3e3c7a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.225] wcscat (in: _Dest=0x3e3c7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.225] wcscat (in: _Dest=0x3e3c7a0, _Source="BD18235_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" [0154.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0154.227] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34cfb400, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34cfb400, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x6d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18236_.WMF", cAlternateFileName="")) returned 1 [0154.227] wcscmp (_String1="BD18236_.WMF", _String2=".") returned 1 [0154.227] wcscmp (_String1="BD18236_.WMF", _String2="..") returned 1 [0154.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d120 [0154.227] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.227] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.227] wcscat (in: _Dest=0x3e3d120, _Source="BD18236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" [0154.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x246c [0154.228] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecb4d00, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbecb4d00, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x5fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18237_.WMF", cAlternateFileName="")) returned 1 [0154.228] wcscmp (_String1="BD18237_.WMF", _String2=".") returned 1 [0154.228] wcscmp (_String1="BD18237_.WMF", _String2="..") returned 1 [0154.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d1b8 [0154.228] wcscpy (in: _Dest=0x3e3d1b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.228] wcscat (in: _Dest=0x3e3d1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.228] wcscat (in: _Dest=0x3e3d1b8, _Source="BD18237_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" [0154.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2470 [0154.880] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a44de00, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4a44de00, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18238_.WMF", cAlternateFileName="")) returned 1 [0154.880] wcscmp (_String1="BD18238_.WMF", _String2=".") returned 1 [0154.880] wcscmp (_String1="BD18238_.WMF", _String2="..") returned 1 [0154.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d14f8 [0154.880] wcscpy (in: _Dest=0x81d14f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.880] wcscat (in: _Dest=0x81d14f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.880] wcscat (in: _Dest=0x81d14f8, _Source="BD18238_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" [0159.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d14f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0159.252] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3d4900, ftCreationTime.dwHighDateTime=0x1bddd0f, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6e3d4900, ftLastWriteTime.dwHighDateTime=0x1bddd0f, nFileSizeHigh=0x0, nFileSizeLow=0x93c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18239_.WMF", cAlternateFileName="")) returned 1 [0159.252] wcscmp (_String1="BD18239_.WMF", _String2=".") returned 1 [0159.252] wcscmp (_String1="BD18239_.WMF", _String2="..") returned 1 [0159.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d0fa0 [0159.252] wcscpy (in: _Dest=0x81d0fa0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.252] wcscat (in: _Dest=0x81d0fa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.252] wcscat (in: _Dest=0x81d0fa0, _Source="BD18239_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" [0159.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d38 [0159.254] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37653400, ftCreationTime.dwHighDateTime=0x1bddd0b, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37653400, ftLastWriteTime.dwHighDateTime=0x1bddd0b, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18241_.WMF", cAlternateFileName="")) returned 1 [0159.254] wcscmp (_String1="BD18241_.WMF", _String2=".") returned 1 [0159.254] wcscmp (_String1="BD18241_.WMF", _String2="..") returned 1 [0159.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1d48 [0159.254] wcscpy (in: _Dest=0x81d1d48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.254] wcscat (in: _Dest=0x81d1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.254] wcscat (in: _Dest=0x81d1d48, _Source="BD18241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" [0159.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d3c [0159.255] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff779600, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xff779600, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18242_.WMF", cAlternateFileName="")) returned 1 [0159.255] wcscmp (_String1="BD18242_.WMF", _String2=".") returned 1 [0159.255] wcscmp (_String1="BD18242_.WMF", _String2="..") returned 1 [0159.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1f10 [0159.256] wcscpy (in: _Dest=0x81d1f10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.256] wcscat (in: _Dest=0x81d1f10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.256] wcscat (in: _Dest=0x81d1f10, _Source="BD18242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" [0159.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d40 [0159.257] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ecc000, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x14ecc000, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18243_.WMF", cAlternateFileName="")) returned 1 [0159.257] wcscmp (_String1="BD18243_.WMF", _String2=".") returned 1 [0159.257] wcscmp (_String1="BD18243_.WMF", _String2="..") returned 1 [0159.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1fa8 [0159.257] wcscpy (in: _Dest=0x81d1fa8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.257] wcscat (in: _Dest=0x81d1fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.257] wcscat (in: _Dest=0x81d1fa8, _Source="BD18243_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" [0159.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d44 [0159.259] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb249f300, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb249f300, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18244_.WMF", cAlternateFileName="")) returned 1 [0159.259] wcscmp (_String1="BD18244_.WMF", _String2=".") returned 1 [0159.259] wcscmp (_String1="BD18244_.WMF", _String2="..") returned 1 [0159.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d2040 [0159.259] wcscpy (in: _Dest=0x81d2040, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.259] wcscat (in: _Dest=0x81d2040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.259] wcscat (in: _Dest=0x81d2040, _Source="BD18244_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" [0159.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d48 [0159.289] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55cc300, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc55cc300, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18245_.WMF", cAlternateFileName="")) returned 1 [0159.289] wcscmp (_String1="BD18245_.WMF", _String2=".") returned 1 [0159.289] wcscmp (_String1="BD18245_.WMF", _String2="..") returned 1 [0159.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d20d8 [0159.289] wcscpy (in: _Dest=0x81d20d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.289] wcscat (in: _Dest=0x81d20d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.289] wcscat (in: _Dest=0x81d20d8, _Source="BD18245_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" [0159.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d20d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0159.291] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6184cb00, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6184cb00, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18246_.WMF", cAlternateFileName="")) returned 1 [0159.291] wcscmp (_String1="BD18246_.WMF", _String2=".") returned 1 [0159.291] wcscmp (_String1="BD18246_.WMF", _String2="..") returned 1 [0159.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d2170 [0159.291] wcscpy (in: _Dest=0x81d2170, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.291] wcscat (in: _Dest=0x81d2170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.291] wcscat (in: _Dest=0x81d2170, _Source="BD18246_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" [0159.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0159.294] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f585c00, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4f585c00, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18247_.WMF", cAlternateFileName="")) returned 1 [0159.294] wcscmp (_String1="BD18247_.WMF", _String2=".") returned 1 [0159.294] wcscmp (_String1="BD18247_.WMF", _String2="..") returned 1 [0159.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d2208 [0159.294] wcscpy (in: _Dest=0x81d2208, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.294] wcscat (in: _Dest=0x81d2208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.294] wcscat (in: _Dest=0x81d2208, _Source="BD18247_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" [0159.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0159.296] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x626b2c00, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x626b2c00, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18248_.WMF", cAlternateFileName="")) returned 1 [0159.296] wcscmp (_String1="BD18248_.WMF", _String2=".") returned 1 [0159.296] wcscmp (_String1="BD18248_.WMF", _String2="..") returned 1 [0159.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1c18 [0159.296] wcscpy (in: _Dest=0x81d1c18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.296] wcscat (in: _Dest=0x81d1c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.296] wcscat (in: _Dest=0x81d1c18, _Source="BD18248_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" [0159.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d4c [0159.297] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0642300, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0642300, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18249_.WMF", cAlternateFileName="")) returned 1 [0159.297] wcscmp (_String1="BD18249_.WMF", _String2=".") returned 1 [0159.297] wcscmp (_String1="BD18249_.WMF", _String2="..") returned 1 [0159.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d0f08 [0159.298] wcscpy (in: _Dest=0x81d0f08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.298] wcscat (in: _Dest=0x81d0f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.298] wcscat (in: _Dest=0x81d0f08, _Source="BD18249_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" [0159.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d50 [0159.299] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744ccf00, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x744ccf00, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18250_.WMF", cAlternateFileName="")) returned 1 [0159.299] wcscmp (_String1="BD18250_.WMF", _String2=".") returned 1 [0159.299] wcscmp (_String1="BD18250_.WMF", _String2="..") returned 1 [0159.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1168 [0159.299] wcscpy (in: _Dest=0x81d1168, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.299] wcscat (in: _Dest=0x81d1168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.299] wcscat (in: _Dest=0x81d1168, _Source="BD18250_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" [0159.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d54 [0159.301] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84fd4500, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x84fd4500, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18251_.WMF", cAlternateFileName="")) returned 1 [0159.301] wcscmp (_String1="BD18251_.WMF", _String2=".") returned 1 [0159.301] wcscmp (_String1="BD18251_.WMF", _String2="..") returned 1 [0159.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d19b8 [0159.301] wcscpy (in: _Dest=0x81d19b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.301] wcscat (in: _Dest=0x81d19b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.301] wcscat (in: _Dest=0x81d19b8, _Source="BD18251_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" [0159.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d19b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d58 [0159.302] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e210300, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7e210300, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18252_.WMF", cAlternateFileName="")) returned 1 [0159.303] wcscmp (_String1="BD18252_.WMF", _String2=".") returned 1 [0159.303] wcscmp (_String1="BD18252_.WMF", _String2="..") returned 1 [0159.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1888 [0159.303] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.303] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.303] wcscat (in: _Dest=0x81d1888, _Source="BD18252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" [0159.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf")) returned 0x20 [0159.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF", dwFileAttributes=0x20) returned 0 [0159.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.306] GetLastError () returned 0x5 [0159.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF", dwFileAttributes=0x20) returned 0 [0159.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 [0159.306] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b51b00, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa0b51b00, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18253_.WMF", cAlternateFileName="")) returned 1 [0159.306] wcscmp (_String1="BD18253_.WMF", _String2=".") returned 1 [0159.306] wcscmp (_String1="BD18253_.WMF", _String2="..") returned 1 [0159.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1888 [0159.306] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.306] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.306] wcscat (in: _Dest=0x81d1888, _Source="BD18253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" [0159.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf")) returned 0x20 [0159.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF", dwFileAttributes=0x20) returned 0 [0159.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.308] GetLastError () returned 0x5 [0159.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF", dwFileAttributes=0x20) returned 0 [0159.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 [0159.308] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ff2100, ftCreationTime.dwHighDateTime=0x1bddd0f, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb0ff2100, ftLastWriteTime.dwHighDateTime=0x1bddd0f, nFileSizeHigh=0x0, nFileSizeLow=0x796, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18254_.WMF", cAlternateFileName="")) returned 1 [0159.308] wcscmp (_String1="BD18254_.WMF", _String2=".") returned 1 [0159.308] wcscmp (_String1="BD18254_.WMF", _String2="..") returned 1 [0159.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1888 [0159.308] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.308] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.308] wcscat (in: _Dest=0x81d1888, _Source="BD18254_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" [0159.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf")) returned 0x20 [0159.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF", dwFileAttributes=0x20) returned 0 [0159.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.309] GetLastError () returned 0x5 [0159.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF", dwFileAttributes=0x20) returned 0 [0159.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 [0159.309] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb339900, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb339900, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18255_.WMF", cAlternateFileName="")) returned 1 [0159.309] wcscmp (_String1="BD18255_.WMF", _String2=".") returned 1 [0159.309] wcscmp (_String1="BD18255_.WMF", _String2="..") returned 1 [0159.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1888 [0159.309] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.309] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.310] wcscat (in: _Dest=0x81d1888, _Source="BD18255_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" [0159.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf")) returned 0x20 [0159.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF", dwFileAttributes=0x20) returned 0 [0159.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.338] GetLastError () returned 0x5 [0159.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF", dwFileAttributes=0x20) returned 0 [0159.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 [0159.338] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd6f700, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cd6f700, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18256_.WMF", cAlternateFileName="")) returned 1 [0159.338] wcscmp (_String1="BD18256_.WMF", _String2=".") returned 1 [0159.338] wcscmp (_String1="BD18256_.WMF", _String2="..") returned 1 [0159.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1888 [0159.338] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.338] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.338] wcscat (in: _Dest=0x81d1888, _Source="BD18256_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" [0159.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf")) returned 0x20 [0159.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF", dwFileAttributes=0x20) returned 0 [0159.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.350] GetLastError () returned 0x5 [0159.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF", dwFileAttributes=0x20) returned 0 [0159.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 [0159.350] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d700900, ftCreationTime.dwHighDateTime=0x1bdfeb0, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d700900, ftLastWriteTime.dwHighDateTime=0x1bdfeb0, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 1 [0159.350] wcscmp (_String1="BD18257_.WMF", _String2=".") returned 1 [0159.350] wcscmp (_String1="BD18257_.WMF", _String2="..") returned 1 [0159.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1888 [0159.351] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.351] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.351] wcscat (in: _Dest=0x81d1888, _Source="BD18257_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" [0159.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf")) returned 0x20 [0159.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF", dwFileAttributes=0x20) returned 0 [0159.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.351] GetLastError () returned 0x5 [0159.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF", dwFileAttributes=0x20) returned 0 [0159.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 [0159.351] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d700900, ftCreationTime.dwHighDateTime=0x1bdfeb0, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d700900, ftLastWriteTime.dwHighDateTime=0x1bdfeb0, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 0 [0159.352] FindClose (in: hFindFile=0x3f38098 | out: hFindFile=0x3f38098) returned 1 [0159.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0159.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a7d8) returned 1 [0159.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0a88) returned 1 Thread: id = 1485 os_tid = 0x14a0 [0145.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831a6d8 [0145.217] wcscpy (in: _Dest=0x831a6d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0145.218] wcscat (in: _Dest=0x831a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0145.218] wcscat (in: _Dest=0x831a6d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*" [0145.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84e08 [0145.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f90 [0147.413] wcscmp (_String1=".", _String2=".") returned 0 [0147.413] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.423] wcscmp (_String1="..", _String2=".") returned 1 [0147.423] wcscmp (_String1="..", _String2="..") returned 0 [0147.423] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e616400, ftCreationTime.dwHighDateTime=0x1bd5e49, ftLastAccessTime.dwLowDateTime=0xbd3231f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e616400, ftLastWriteTime.dwHighDateTime=0x1bd5e49, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10253_.GIF", cAlternateFileName="")) returned 1 [0147.423] wcscmp (_String1="BD10253_.GIF", _String2=".") returned 1 [0147.423] wcscmp (_String1="BD10253_.GIF", _String2="..") returned 1 [0147.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2af50 [0147.423] wcscpy (in: _Dest=0x3e2af50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0147.423] wcscat (in: _Dest=0x3e2af50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0147.423] wcscat (in: _Dest=0x3e2af50, _Source="BD10253_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" [0150.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2af50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0150.760] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3211400, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd3231f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3211400, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10254_.GIF", cAlternateFileName="")) returned 1 [0150.760] wcscmp (_String1="BD10254_.GIF", _String2=".") returned 1 [0150.760] wcscmp (_String1="BD10254_.GIF", _String2="..") returned 1 [0150.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c708 [0150.761] wcscpy (in: _Dest=0x3e3c708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.761] wcscat (in: _Dest=0x3e3c708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.761] wcscat (in: _Dest=0x3e3c708, _Source="BD10254_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" [0150.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0150.762] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4524100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4524100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10255_.GIF", cAlternateFileName="")) returned 1 [0150.762] wcscmp (_String1="BD10255_.GIF", _String2=".") returned 1 [0150.762] wcscmp (_String1="BD10255_.GIF", _String2="..") returned 1 [0150.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c248 [0150.762] wcscpy (in: _Dest=0x3e3c248, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.762] wcscat (in: _Dest=0x3e3c248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.762] wcscat (in: _Dest=0x3e3c248, _Source="BD10255_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" [0150.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0150.763] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76406b00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76406b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10263_.GIF", cAlternateFileName="")) returned 1 [0150.763] wcscmp (_String1="BD10263_.GIF", _String2=".") returned 1 [0150.763] wcscmp (_String1="BD10263_.GIF", _String2="..") returned 1 [0150.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3ca00 [0150.763] wcscpy (in: _Dest=0x3e3ca00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.763] wcscat (in: _Dest=0x3e3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.763] wcscat (in: _Dest=0x3e3ca00, _Source="BD10263_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" [0150.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0150.764] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76406b00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76406b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10264_.GIF", cAlternateFileName="")) returned 1 [0150.764] wcscmp (_String1="BD10264_.GIF", _String2=".") returned 1 [0150.764] wcscmp (_String1="BD10264_.GIF", _String2="..") returned 1 [0150.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c5d8 [0150.764] wcscpy (in: _Dest=0x3e3c5d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.764] wcscat (in: _Dest=0x3e3c5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.764] wcscat (in: _Dest=0x3e3c5d8, _Source="BD10264_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" [0150.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0150.765] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76406b00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76406b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10265_.GIF", cAlternateFileName="")) returned 1 [0150.765] wcscmp (_String1="BD10265_.GIF", _String2=".") returned 1 [0150.765] wcscmp (_String1="BD10265_.GIF", _String2="..") returned 1 [0150.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c2e0 [0150.766] wcscpy (in: _Dest=0x3e3c2e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.766] wcscat (in: _Dest=0x3e3c2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.766] wcscat (in: _Dest=0x3e3c2e0, _Source="BD10265_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" [0150.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0150.767] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77719800, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77719800, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10266_.GIF", cAlternateFileName="")) returned 1 [0150.767] wcscmp (_String1="BD10266_.GIF", _String2=".") returned 1 [0150.767] wcscmp (_String1="BD10266_.GIF", _String2="..") returned 1 [0150.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c968 [0150.767] wcscpy (in: _Dest=0x3e3c968, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.767] wcscat (in: _Dest=0x3e3c968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.767] wcscat (in: _Dest=0x3e3c968, _Source="BD10266_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" [0150.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0150.768] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77719800, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77719800, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10267_.GIF", cAlternateFileName="")) returned 1 [0150.768] wcscmp (_String1="BD10267_.GIF", _String2=".") returned 1 [0150.768] wcscmp (_String1="BD10267_.GIF", _String2="..") returned 1 [0150.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cbc8 [0150.768] wcscpy (in: _Dest=0x3e3cbc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.768] wcscat (in: _Dest=0x3e3cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.768] wcscat (in: _Dest=0x3e3cbc8, _Source="BD10267_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" [0150.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0150.769] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77719800, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77719800, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10268_.GIF", cAlternateFileName="")) returned 1 [0150.769] wcscmp (_String1="BD10268_.GIF", _String2=".") returned 1 [0150.769] wcscmp (_String1="BD10268_.GIF", _String2="..") returned 1 [0150.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cc60 [0150.769] wcscpy (in: _Dest=0x3e3cc60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.769] wcscat (in: _Dest=0x3e3cc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.769] wcscat (in: _Dest=0x3e3cc60, _Source="BD10268_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" [0150.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0150.770] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59a4e00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59a4e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10297_.GIF", cAlternateFileName="")) returned 1 [0150.770] wcscmp (_String1="BD10297_.GIF", _String2=".") returned 1 [0150.771] wcscmp (_String1="BD10297_.GIF", _String2="..") returned 1 [0150.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3ccf8 [0150.771] wcscpy (in: _Dest=0x3e3ccf8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.771] wcscat (in: _Dest=0x3e3ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.771] wcscat (in: _Dest=0x3e3ccf8, _Source="BD10297_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" [0150.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0150.772] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59a4e00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59a4e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10298_.GIF", cAlternateFileName="")) returned 1 [0150.772] wcscmp (_String1="BD10298_.GIF", _String2=".") returned 1 [0150.772] wcscmp (_String1="BD10298_.GIF", _String2="..") returned 1 [0150.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cd90 [0150.772] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.772] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.772] wcscat (in: _Dest=0x3e3cd90, _Source="BD10298_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" [0150.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0150.774] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb7b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cb7b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10299_.GIF", cAlternateFileName="")) returned 1 [0150.774] wcscmp (_String1="BD10299_.GIF", _String2=".") returned 1 [0150.774] wcscmp (_String1="BD10299_.GIF", _String2="..") returned 1 [0150.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c8d0 [0150.774] wcscpy (in: _Dest=0x3e3c8d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.774] wcscat (in: _Dest=0x3e3c8d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.774] wcscat (in: _Dest=0x3e3c8d0, _Source="BD10299_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" [0150.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0150.775] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb7b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cb7b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10300_.GIF", cAlternateFileName="")) returned 1 [0150.775] wcscmp (_String1="BD10300_.GIF", _String2=".") returned 1 [0150.775] wcscmp (_String1="BD10300_.GIF", _String2="..") returned 1 [0150.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c410 [0150.775] wcscpy (in: _Dest=0x3e3c410, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.775] wcscat (in: _Dest=0x3e3c410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.775] wcscat (in: _Dest=0x3e3c410, _Source="BD10300_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" [0150.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0150.776] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb7b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cb7b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10301_.GIF", cAlternateFileName="")) returned 1 [0150.776] wcscmp (_String1="BD10301_.GIF", _String2=".") returned 1 [0150.776] wcscmp (_String1="BD10301_.GIF", _String2="..") returned 1 [0150.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cec0 [0150.776] wcscpy (in: _Dest=0x3e3cec0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.776] wcscat (in: _Dest=0x3e3cec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.776] wcscat (in: _Dest=0x3e3cec0, _Source="BD10301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" [0150.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0150.777] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fca800, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7fca800, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10302_.GIF", cAlternateFileName="")) returned 1 [0150.777] wcscmp (_String1="BD10302_.GIF", _String2=".") returned 1 [0150.777] wcscmp (_String1="BD10302_.GIF", _String2="..") returned 1 [0150.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0150.777] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.777] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.777] wcscat (in: _Dest=0x3e3cf58, _Source="BD10302_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" [0150.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0150.778] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5836e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5836e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10335_.GIF", cAlternateFileName="")) returned 1 [0150.778] wcscmp (_String1="BD10335_.GIF", _String2=".") returned 1 [0150.778] wcscmp (_String1="BD10335_.GIF", _String2="..") returned 1 [0150.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d04f0 [0150.779] wcscpy (in: _Dest=0x81d04f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.779] wcscat (in: _Dest=0x81d04f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.779] wcscat (in: _Dest=0x81d04f0, _Source="BD10335_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" [0150.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d04f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0150.780] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5836e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5836e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10336_.GIF", cAlternateFileName="")) returned 1 [0150.780] wcscmp (_String1="BD10336_.GIF", _String2=".") returned 1 [0150.780] wcscmp (_String1="BD10336_.GIF", _String2="..") returned 1 [0150.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0588 [0150.780] wcscpy (in: _Dest=0x81d0588, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.780] wcscat (in: _Dest=0x81d0588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.780] wcscat (in: _Dest=0x81d0588, _Source="BD10336_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" [0150.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0150.781] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5836e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5836e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10337_.GIF", cAlternateFileName="")) returned 1 [0150.781] wcscmp (_String1="BD10337_.GIF", _String2=".") returned 1 [0150.781] wcscmp (_String1="BD10337_.GIF", _String2="..") returned 1 [0150.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0620 [0150.781] wcscpy (in: _Dest=0x81d0620, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.781] wcscat (in: _Dest=0x81d0620, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.781] wcscat (in: _Dest=0x81d0620, _Source="BD10337_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" [0150.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0150.782] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d20da00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d20da00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14513_.GIF", cAlternateFileName="")) returned 1 [0150.782] wcscmp (_String1="BD14513_.GIF", _String2=".") returned 1 [0150.782] wcscmp (_String1="BD14513_.GIF", _String2="..") returned 1 [0150.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d06b8 [0150.782] wcscpy (in: _Dest=0x81d06b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.782] wcscat (in: _Dest=0x81d06b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.782] wcscat (in: _Dest=0x81d06b8, _Source="BD14513_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" [0150.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d06b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0150.783] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e520700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e520700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14514_.GIF", cAlternateFileName="")) returned 1 [0150.783] wcscmp (_String1="BD14514_.GIF", _String2=".") returned 1 [0150.783] wcscmp (_String1="BD14514_.GIF", _String2="..") returned 1 [0150.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0750 [0150.783] wcscpy (in: _Dest=0x81d0750, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.784] wcscat (in: _Dest=0x81d0750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.784] wcscat (in: _Dest=0x81d0750, _Source="BD14514_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" [0150.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0150.785] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e520700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e520700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14515_.GIF", cAlternateFileName="")) returned 1 [0150.785] wcscmp (_String1="BD14515_.GIF", _String2=".") returned 1 [0150.785] wcscmp (_String1="BD14515_.GIF", _String2="..") returned 1 [0150.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d07e8 [0150.785] wcscpy (in: _Dest=0x81d07e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.785] wcscat (in: _Dest=0x81d07e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.785] wcscat (in: _Dest=0x81d07e8, _Source="BD14515_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" [0150.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d07e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0150.786] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658ff500, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x658ff500, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14528_.GIF", cAlternateFileName="")) returned 1 [0150.786] wcscmp (_String1="BD14528_.GIF", _String2=".") returned 1 [0150.786] wcscmp (_String1="BD14528_.GIF", _String2="..") returned 1 [0150.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0880 [0150.786] wcscpy (in: _Dest=0x81d0880, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.786] wcscat (in: _Dest=0x81d0880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.786] wcscat (in: _Dest=0x81d0880, _Source="BD14528_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" [0150.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0150.787] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c12200, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x66c12200, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14529_.GIF", cAlternateFileName="")) returned 1 [0150.787] wcscmp (_String1="BD14529_.GIF", _String2=".") returned 1 [0150.787] wcscmp (_String1="BD14529_.GIF", _String2="..") returned 1 [0150.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0918 [0150.787] wcscpy (in: _Dest=0x81d0918, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.787] wcscat (in: _Dest=0x81d0918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.787] wcscat (in: _Dest=0x81d0918, _Source="BD14529_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" [0150.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0150.789] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c12200, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x66c12200, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14530_.GIF", cAlternateFileName="")) returned 1 [0150.789] wcscmp (_String1="BD14530_.GIF", _String2=".") returned 1 [0150.789] wcscmp (_String1="BD14530_.GIF", _String2="..") returned 1 [0150.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d09b0 [0150.789] wcscpy (in: _Dest=0x81d09b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.789] wcscat (in: _Dest=0x81d09b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.789] wcscat (in: _Dest=0x81d09b0, _Source="BD14530_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" [0150.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d09b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0150.811] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f24f00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67f24f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14531_.GIF", cAlternateFileName="")) returned 1 [0150.811] wcscmp (_String1="BD14531_.GIF", _String2=".") returned 1 [0150.811] wcscmp (_String1="BD14531_.GIF", _String2="..") returned 1 [0150.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0a48 [0150.812] wcscpy (in: _Dest=0x81d0a48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.812] wcscat (in: _Dest=0x81d0a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.812] wcscat (in: _Dest=0x81d0a48, _Source="BD14531_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" [0150.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0150.813] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f24f00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67f24f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14532_.GIF", cAlternateFileName="")) returned 1 [0150.813] wcscmp (_String1="BD14532_.GIF", _String2=".") returned 1 [0150.813] wcscmp (_String1="BD14532_.GIF", _String2="..") returned 1 [0150.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0ae0 [0150.813] wcscpy (in: _Dest=0x81d0ae0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.813] wcscat (in: _Dest=0x81d0ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.813] wcscat (in: _Dest=0x81d0ae0, _Source="BD14532_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" [0150.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0150.814] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f24f00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67f24f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14533_.GIF", cAlternateFileName="")) returned 1 [0150.815] wcscmp (_String1="BD14533_.GIF", _String2=".") returned 1 [0150.815] wcscmp (_String1="BD14533_.GIF", _String2="..") returned 1 [0150.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0b78 [0150.815] wcscpy (in: _Dest=0x81d0b78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.815] wcscat (in: _Dest=0x81d0b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.815] wcscat (in: _Dest=0x81d0b78, _Source="BD14533_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" [0150.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0150.816] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b05100, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x53b05100, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14565_.GIF", cAlternateFileName="")) returned 1 [0150.816] wcscmp (_String1="BD14565_.GIF", _String2=".") returned 1 [0150.816] wcscmp (_String1="BD14565_.GIF", _String2="..") returned 1 [0150.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0c10 [0150.816] wcscpy (in: _Dest=0x81d0c10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.816] wcscat (in: _Dest=0x81d0c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.816] wcscat (in: _Dest=0x81d0c10, _Source="BD14565_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" [0150.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0150.817] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13e86a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13e86a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14578_.GIF", cAlternateFileName="")) returned 1 [0150.817] wcscmp (_String1="BD14578_.GIF", _String2=".") returned 1 [0150.817] wcscmp (_String1="BD14578_.GIF", _String2="..") returned 1 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0ca8 [0150.817] wcscpy (in: _Dest=0x81d0ca8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.818] wcscat (in: _Dest=0x81d0ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.818] wcscat (in: _Dest=0x81d0ca8, _Source="BD14578_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" [0150.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c [0151.098] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13e86a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13e86a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14579_.GIF", cAlternateFileName="")) returned 1 [0151.098] wcscmp (_String1="BD14579_.GIF", _String2=".") returned 1 [0151.098] wcscmp (_String1="BD14579_.GIF", _String2="..") returned 1 [0151.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d088 [0151.098] wcscpy (in: _Dest=0x3e3d088, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0151.099] wcscat (in: _Dest=0x3e3d088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0151.099] wcscat (in: _Dest=0x3e3d088, _Source="BD14579_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" [0159.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0159.226] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15199700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15199700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14580_.GIF", cAlternateFileName="")) returned 1 [0159.226] wcscmp (_String1="BD14580_.GIF", _String2=".") returned 1 [0159.226] wcscmp (_String1="BD14580_.GIF", _String2="..") returned 1 [0159.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bd90 [0159.226] wcscpy (in: _Dest=0x3e2bd90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0159.226] wcscat (in: _Dest=0x3e2bd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0159.226] wcscat (in: _Dest=0x3e2bd90, _Source="BD14580_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" [0159.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d0c [0159.227] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15199700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15199700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14581_.GIF", cAlternateFileName="")) returned 1 [0159.227] wcscmp (_String1="BD14581_.GIF", _String2=".") returned 1 [0159.228] wcscmp (_String1="BD14581_.GIF", _String2="..") returned 1 [0159.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ab28 [0159.228] wcscpy (in: _Dest=0x3e2ab28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0159.228] wcscat (in: _Dest=0x3e2ab28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0159.228] wcscat (in: _Dest=0x3e2ab28, _Source="BD14581_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" [0159.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ab28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d10 [0159.229] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15199700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15199700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14582_.GIF", cAlternateFileName="")) returned 1 [0159.229] wcscmp (_String1="BD14582_.GIF", _String2=".") returned 1 [0159.229] wcscmp (_String1="BD14582_.GIF", _String2="..") returned 1 [0159.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2be28 [0159.229] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0159.229] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0159.229] wcscat (in: _Dest=0x3e2be28, _Source="BD14582_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" [0159.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2be28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d14 [0159.230] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164ac400, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x164ac400, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14583_.GIF", cAlternateFileName="")) returned 1 [0159.248] wcscmp (_String1="BD14583_.GIF", _String2=".") returned 1 [0159.248] wcscmp (_String1="BD14583_.GIF", _String2="..") returned 1 [0159.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1298 [0159.248] wcscpy (in: _Dest=0x81d1298, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0159.248] wcscat (in: _Dest=0x81d1298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0159.248] wcscat (in: _Dest=0x81d1298, _Source="BD14583_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" [0161.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0161.254] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da1e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49da1e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14654_.GIF", cAlternateFileName="")) returned 1 [0161.254] wcscmp (_String1="BD14654_.GIF", _String2=".") returned 1 [0161.254] wcscmp (_String1="BD14654_.GIF", _String2="..") returned 1 [0161.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1590 [0161.255] wcscpy (in: _Dest=0x81d1590, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.255] wcscat (in: _Dest=0x81d1590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.255] wcscat (in: _Dest=0x81d1590, _Source="BD14654_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" [0161.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b0 [0161.256] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da1e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49da1e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14655_.GIF", cAlternateFileName="")) returned 1 [0161.256] wcscmp (_String1="BD14655_.GIF", _String2=".") returned 1 [0161.256] wcscmp (_String1="BD14655_.GIF", _String2="..") returned 1 [0161.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1888 [0161.256] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.256] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.256] wcscat (in: _Dest=0x81d1888, _Source="BD14655_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" [0161.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc8 [0161.258] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4b00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b0b4b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14656_.GIF", cAlternateFileName="")) returned 1 [0161.258] wcscmp (_String1="BD14656_.GIF", _String2=".") returned 1 [0161.258] wcscmp (_String1="BD14656_.GIF", _String2="..") returned 1 [0161.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1758 [0161.258] wcscpy (in: _Dest=0x81d1758, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.258] wcscat (in: _Dest=0x81d1758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.258] wcscat (in: _Dest=0x81d1758, _Source="BD14656_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" [0161.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a0 [0161.260] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59596700, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59596700, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14691_.GIF", cAlternateFileName="")) returned 1 [0161.260] wcscmp (_String1="BD14691_.GIF", _String2=".") returned 1 [0161.260] wcscmp (_String1="BD14691_.GIF", _String2="..") returned 1 [0161.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0ae0 [0161.260] wcscpy (in: _Dest=0x81d0ae0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.260] wcscat (in: _Dest=0x81d0ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.260] wcscat (in: _Dest=0x81d0ae0, _Source="BD14691_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" [0161.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc4 [0161.261] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59596700, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59596700, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14692_.GIF", cAlternateFileName="")) returned 1 [0161.261] wcscmp (_String1="BD14692_.GIF", _String2=".") returned 1 [0161.261] wcscmp (_String1="BD14692_.GIF", _String2="..") returned 1 [0161.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0e70 [0161.262] wcscpy (in: _Dest=0x81d0e70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.262] wcscat (in: _Dest=0x81d0e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.262] wcscat (in: _Dest=0x81d0e70, _Source="BD14692_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" [0161.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0161.263] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8a9400, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd453cf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5a8a9400, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14693_.GIF", cAlternateFileName="")) returned 1 [0161.263] wcscmp (_String1="BD14693_.GIF", _String2=".") returned 1 [0161.263] wcscmp (_String1="BD14693_.GIF", _String2="..") returned 1 [0161.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1628 [0161.263] wcscpy (in: _Dest=0x81d1628, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.263] wcscat (in: _Dest=0x81d1628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.263] wcscat (in: _Dest=0x81d1628, _Source="BD14693_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" [0161.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80 [0161.265] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e16100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81e16100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14752_.GIF", cAlternateFileName="")) returned 1 [0161.265] wcscmp (_String1="BD14752_.GIF", _String2=".") returned 1 [0161.265] wcscmp (_String1="BD14752_.GIF", _String2="..") returned 1 [0161.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1920 [0161.265] wcscpy (in: _Dest=0x81d1920, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.265] wcscat (in: _Dest=0x81d1920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.265] wcscat (in: _Dest=0x81d1920, _Source="BD14752_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" [0161.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c [0161.266] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e16100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81e16100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14753_.GIF", cAlternateFileName="")) returned 1 [0161.266] wcscmp (_String1="BD14753_.GIF", _String2=".") returned 1 [0161.266] wcscmp (_String1="BD14753_.GIF", _String2="..") returned 1 [0161.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1cb0 [0161.267] wcscpy (in: _Dest=0x81d1cb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.267] wcscat (in: _Dest=0x81d1cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.267] wcscat (in: _Dest=0x81d1cb0, _Source="BD14753_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" [0161.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0161.268] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e16100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81e16100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14754_.GIF", cAlternateFileName="")) returned 1 [0161.268] wcscmp (_String1="BD14754_.GIF", _String2=".") returned 1 [0161.268] wcscmp (_String1="BD14754_.GIF", _String2="..") returned 1 [0161.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0dd8 [0161.268] wcscpy (in: _Dest=0x81d0dd8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.268] wcscat (in: _Dest=0x81d0dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.269] wcscat (in: _Dest=0x81d0dd8, _Source="BD14754_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" [0161.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0161.270] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc507d700, ftCreationTime.dwHighDateTime=0x1bd4fa7, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc507d700, ftLastWriteTime.dwHighDateTime=0x1bd4fa7, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14755_.GIF", cAlternateFileName="")) returned 1 [0161.270] wcscmp (_String1="BD14755_.GIF", _String2=".") returned 1 [0161.270] wcscmp (_String1="BD14755_.GIF", _String2="..") returned 1 [0161.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0588 [0161.270] wcscpy (in: _Dest=0x81d0588, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.270] wcscat (in: _Dest=0x81d0588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.270] wcscat (in: _Dest=0x81d0588, _Source="BD14755_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" [0161.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa8 [0161.271] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83128e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x83128e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14756_.GIF", cAlternateFileName="")) returned 1 [0161.271] wcscmp (_String1="BD14756_.GIF", _String2=".") returned 1 [0161.271] wcscmp (_String1="BD14756_.GIF", _String2="..") returned 1 [0161.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0620 [0161.271] wcscpy (in: _Dest=0x81d0620, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.271] wcscat (in: _Dest=0x81d0620, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.272] wcscat (in: _Dest=0x81d0620, _Source="BD14756_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" [0161.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0161.273] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83128e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x83128e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14757_.GIF", cAlternateFileName="")) returned 1 [0161.273] wcscmp (_String1="BD14757_.GIF", _String2=".") returned 1 [0161.273] wcscmp (_String1="BD14757_.GIF", _String2="..") returned 1 [0161.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0750 [0161.273] wcscpy (in: _Dest=0x81d0750, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.273] wcscat (in: _Dest=0x81d0750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.273] wcscat (in: _Dest=0x81d0750, _Source="BD14757_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" [0161.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa4 [0161.274] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902f7d00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x902f7d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14790_.GIF", cAlternateFileName="")) returned 1 [0161.274] wcscmp (_String1="BD14790_.GIF", _String2=".") returned 1 [0161.274] wcscmp (_String1="BD14790_.GIF", _String2="..") returned 1 [0161.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d07e8 [0161.274] wcscpy (in: _Dest=0x81d07e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.275] wcscat (in: _Dest=0x81d07e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.275] wcscat (in: _Dest=0x81d07e8, _Source="BD14790_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" [0161.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d07e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0161.276] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902f7d00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x902f7d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14791_.GIF", cAlternateFileName="")) returned 1 [0161.276] wcscmp (_String1="BD14791_.GIF", _String2=".") returned 1 [0161.276] wcscmp (_String1="BD14791_.GIF", _String2="..") returned 1 [0161.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0880 [0161.276] wcscpy (in: _Dest=0x81d0880, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.276] wcscat (in: _Dest=0x81d0880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.276] wcscat (in: _Dest=0x81d0880, _Source="BD14791_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" [0161.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a98 [0161.277] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902f7d00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x902f7d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14792_.GIF", cAlternateFileName="")) returned 1 [0161.277] wcscmp (_String1="BD14792_.GIF", _String2=".") returned 1 [0161.277] wcscmp (_String1="BD14792_.GIF", _String2="..") returned 1 [0161.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0918 [0161.278] wcscpy (in: _Dest=0x81d0918, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.278] wcscat (in: _Dest=0x81d0918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.278] wcscat (in: _Dest=0x81d0918, _Source="BD14792_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" [0161.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a94 [0161.279] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9160aa00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9160aa00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14793_.GIF", cAlternateFileName="")) returned 1 [0161.279] wcscmp (_String1="BD14793_.GIF", _String2=".") returned 1 [0161.279] wcscmp (_String1="BD14793_.GIF", _String2="..") returned 1 [0161.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d09b0 [0161.279] wcscpy (in: _Dest=0x81d09b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.279] wcscat (in: _Dest=0x81d09b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.279] wcscat (in: _Dest=0x81d09b0, _Source="BD14793_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" [0161.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d09b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a90 [0161.280] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9160aa00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9160aa00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14794_.GIF", cAlternateFileName="")) returned 1 [0161.280] wcscmp (_String1="BD14794_.GIF", _String2=".") returned 1 [0161.281] wcscmp (_String1="BD14794_.GIF", _String2="..") returned 1 [0161.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0b78 [0161.281] wcscpy (in: _Dest=0x81d0b78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.281] wcscat (in: _Dest=0x81d0b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.281] wcscat (in: _Dest=0x81d0b78, _Source="BD14794_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" [0161.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0161.282] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9160aa00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9160aa00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14795_.GIF", cAlternateFileName="")) returned 1 [0161.282] wcscmp (_String1="BD14795_.GIF", _String2=".") returned 1 [0161.282] wcscmp (_String1="BD14795_.GIF", _String2="..") returned 1 [0161.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0c10 [0161.282] wcscpy (in: _Dest=0x81d0c10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.282] wcscat (in: _Dest=0x81d0c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.282] wcscat (in: _Dest=0x81d0c10, _Source="BD14795_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" [0161.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c [0161.283] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e7d9900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e7d9900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14828_.GIF", cAlternateFileName="")) returned 1 [0161.283] wcscmp (_String1="BD14828_.GIF", _String2=".") returned 1 [0161.283] wcscmp (_String1="BD14828_.GIF", _String2="..") returned 1 [0161.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d04f0 [0161.284] wcscpy (in: _Dest=0x81d04f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.284] wcscat (in: _Dest=0x81d04f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.284] wcscat (in: _Dest=0x81d04f0, _Source="BD14828_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" [0161.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d04f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a68 [0161.285] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e7d9900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e7d9900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14829_.GIF", cAlternateFileName="")) returned 1 [0161.285] wcscmp (_String1="BD14829_.GIF", _String2=".") returned 1 [0161.285] wcscmp (_String1="BD14829_.GIF", _String2="..") returned 1 [0161.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d06b8 [0161.285] wcscpy (in: _Dest=0x81d06b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.285] wcscat (in: _Dest=0x81d06b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.285] wcscat (in: _Dest=0x81d06b8, _Source="BD14829_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" [0161.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d06b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a64 [0161.287] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14830_.GIF", cAlternateFileName="")) returned 1 [0161.287] wcscmp (_String1="BD14830_.GIF", _String2=".") returned 1 [0161.287] wcscmp (_String1="BD14830_.GIF", _String2="..") returned 1 [0161.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0a48 [0161.287] wcscpy (in: _Dest=0x81d0a48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.287] wcscat (in: _Dest=0x81d0a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.287] wcscat (in: _Dest=0x81d0a48, _Source="BD14830_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" [0161.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a60 [0161.288] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14831_.GIF", cAlternateFileName="")) returned 1 [0161.288] wcscmp (_String1="BD14831_.GIF", _String2=".") returned 1 [0161.288] wcscmp (_String1="BD14831_.GIF", _String2="..") returned 1 [0161.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0ca8 [0161.288] wcscpy (in: _Dest=0x81d0ca8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.288] wcscat (in: _Dest=0x81d0ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.289] wcscat (in: _Dest=0x81d0ca8, _Source="BD14831_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" [0161.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a5c [0161.290] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14832_.GIF", cAlternateFileName="")) returned 1 [0161.290] wcscmp (_String1="BD14832_.GIF", _String2=".") returned 1 [0161.290] wcscmp (_String1="BD14832_.GIF", _String2="..") returned 1 [0161.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0161.290] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.290] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.290] wcscat (in: _Dest=0x3e3cf58, _Source="BD14832_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" [0161.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a58 [0162.464] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14833_.GIF", cAlternateFileName="")) returned 1 [0162.464] wcscmp (_String1="BD14833_.GIF", _String2=".") returned 1 [0162.464] wcscmp (_String1="BD14833_.GIF", _String2="..") returned 1 [0162.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1038 [0162.464] wcscpy (in: _Dest=0x81d1038, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0162.464] wcscat (in: _Dest=0x81d1038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0162.464] wcscat (in: _Dest=0x81d1038, _Source="BD14833_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" [0163.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1894 [0163.197] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaccbb500, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaccbb500, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14866_.GIF", cAlternateFileName="")) returned 1 [0163.197] wcscmp (_String1="BD14866_.GIF", _String2=".") returned 1 [0163.197] wcscmp (_String1="BD14866_.GIF", _String2="..") returned 1 [0163.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d14f8 [0163.197] wcscpy (in: _Dest=0x81d14f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.197] wcscat (in: _Dest=0x81d14f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.197] wcscat (in: _Dest=0x81d14f8, _Source="BD14866_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" [0163.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d14f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0163.233] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfce200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xadfce200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14867_.GIF", cAlternateFileName="")) returned 1 [0163.233] wcscmp (_String1="BD14867_.GIF", _String2=".") returned 1 [0163.233] wcscmp (_String1="BD14867_.GIF", _String2="..") returned 1 [0163.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1ae8 [0163.233] wcscpy (in: _Dest=0x81d1ae8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.233] wcscat (in: _Dest=0x81d1ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.233] wcscat (in: _Dest=0x81d1ae8, _Source="BD14867_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" [0164.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0164.599] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfce200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xadfce200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14868_.GIF", cAlternateFileName="")) returned 1 [0164.600] wcscmp (_String1="BD14868_.GIF", _String2=".") returned 1 [0164.600] wcscmp (_String1="BD14868_.GIF", _String2="..") returned 1 [0164.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d10d0 [0164.600] wcscpy (in: _Dest=0x81d10d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0164.600] wcscat (in: _Dest=0x81d10d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0164.600] wcscat (in: _Dest=0x81d10d0, _Source="BD14868_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" [0164.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d10d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f8 [0164.601] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfce200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xadfce200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14869_.GIF", cAlternateFileName="")) returned 1 [0164.601] wcscmp (_String1="BD14869_.GIF", _String2=".") returned 1 [0164.601] wcscmp (_String1="BD14869_.GIF", _String2="..") returned 1 [0164.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0d40 [0164.601] wcscpy (in: _Dest=0x81d0d40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0164.601] wcscat (in: _Dest=0x81d0d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0164.601] wcscat (in: _Dest=0x81d0d40, _Source="BD14869_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" [0164.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f4 [0164.602] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2e0f00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaf2e0f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14870_.GIF", cAlternateFileName="")) returned 1 [0164.602] wcscmp (_String1="BD14870_.GIF", _String2=".") returned 1 [0164.602] wcscmp (_String1="BD14870_.GIF", _String2="..") returned 1 [0164.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1e78 [0164.602] wcscpy (in: _Dest=0x81d1e78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0164.602] wcscat (in: _Dest=0x81d1e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0164.602] wcscat (in: _Dest=0x81d1e78, _Source="BD14870_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" [0164.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f0 [0164.603] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2e0f00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaf2e0f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14871_.GIF", cAlternateFileName="")) returned 1 [0164.603] wcscmp (_String1="BD14871_.GIF", _String2=".") returned 1 [0164.603] wcscmp (_String1="BD14871_.GIF", _String2="..") returned 1 [0164.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1330 [0164.603] wcscpy (in: _Dest=0x81d1330, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0164.603] wcscat (in: _Dest=0x81d1330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0164.603] wcscat (in: _Dest=0x81d1330, _Source="BD14871_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" [0164.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28ec [0164.604] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16f3000, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16f3000, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14980_.GIF", cAlternateFileName="")) returned 1 [0164.604] wcscmp (_String1="BD14980_.GIF", _String2=".") returned 1 [0164.604] wcscmp (_String1="BD14980_.GIF", _String2="..") returned 1 [0164.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1b80 [0164.605] wcscpy (in: _Dest=0x81d1b80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0164.605] wcscat (in: _Dest=0x81d1b80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0164.605] wcscat (in: _Dest=0x81d1b80, _Source="BD14980_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" [0164.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e8 [0164.605] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a05d00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2a05d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14981_.GIF", cAlternateFileName="")) returned 1 [0164.606] wcscmp (_String1="BD14981_.GIF", _String2=".") returned 1 [0164.606] wcscmp (_String1="BD14981_.GIF", _String2="..") returned 1 [0164.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0f08 [0164.606] wcscpy (in: _Dest=0x81d0f08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0164.606] wcscat (in: _Dest=0x81d0f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0164.606] wcscat (in: _Dest=0x81d0f08, _Source="BD14981_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" [0164.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2870 [0164.607] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aa26700, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5aa26700, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14982_.GIF", cAlternateFileName="")) returned 1 [0164.607] wcscmp (_String1="BD14982_.GIF", _String2=".") returned 1 [0164.607] wcscmp (_String1="BD14982_.GIF", _String2="..") returned 1 [0164.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1c18 [0164.607] wcscpy (in: _Dest=0x81d1c18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0164.607] wcscat (in: _Dest=0x81d1c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0164.607] wcscat (in: _Dest=0x81d1c18, _Source="BD14982_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" [0164.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x286c [0164.608] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59713a00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59713a00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14983_.GIF", cAlternateFileName="")) returned 1 [0165.264] wcscmp (_String1="BD14983_.GIF", _String2=".") returned 1 [0165.264] wcscmp (_String1="BD14983_.GIF", _String2="..") returned 1 [0165.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1a50 [0165.264] wcscpy (in: _Dest=0x81d1a50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0165.264] wcscat (in: _Dest=0x81d1a50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0165.264] wcscat (in: _Dest=0x81d1a50, _Source="BD14983_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" [0168.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1a50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0168.198] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58400d00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58400d00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14984_.GIF", cAlternateFileName="")) returned 1 [0168.198] wcscmp (_String1="BD14984_.GIF", _String2=".") returned 1 [0168.198] wcscmp (_String1="BD14984_.GIF", _String2="..") returned 1 [0168.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d5d0 [0168.198] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.198] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.198] wcscat (in: _Dest=0x32d5d0, _Source="BD14984_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" [0168.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0168.199] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x570ee000, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x570ee000, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14985_.GIF", cAlternateFileName="")) returned 1 [0168.199] wcscmp (_String1="BD14985_.GIF", _String2=".") returned 1 [0168.199] wcscmp (_String1="BD14985_.GIF", _String2="..") returned 1 [0168.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ca88 [0168.199] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.202] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.202] wcscat (in: _Dest=0x32ca88, _Source="BD14985_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" [0168.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0168.203] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5a2000, ftCreationTime.dwHighDateTime=0x1bd5f25, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xec5a2000, ftLastWriteTime.dwHighDateTime=0x1bd5f25, nFileSizeHigh=0x0, nFileSizeLow=0x40f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15018_.GIF", cAlternateFileName="")) returned 1 [0168.203] wcscmp (_String1="BD15018_.GIF", _String2=".") returned 1 [0168.203] wcscmp (_String1="BD15018_.GIF", _String2="..") returned 1 [0168.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bce0 [0168.203] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.203] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.203] wcscat (in: _Dest=0x32bce0, _Source="BD15018_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" [0168.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0168.204] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ee7900, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10ee7900, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15019_.GIF", cAlternateFileName="")) returned 1 [0168.204] wcscmp (_String1="BD15019_.GIF", _String2=".") returned 1 [0168.204] wcscmp (_String1="BD15019_.GIF", _String2="..") returned 1 [0168.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bd78 [0168.204] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.204] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.204] wcscat (in: _Dest=0x32bd78, _Source="BD15019_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" [0168.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0168.205] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1911bc00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1911bc00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15020_.GIF", cAlternateFileName="")) returned 1 [0168.205] wcscmp (_String1="BD15020_.GIF", _String2=".") returned 1 [0168.205] wcscmp (_String1="BD15020_.GIF", _String2="..") returned 1 [0168.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c8c0 [0168.205] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.205] wcscat (in: _Dest=0x32c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.205] wcscat (in: _Dest=0x32c8c0, _Source="BD15020_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" [0168.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0168.206] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17e08f00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17e08f00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15021_.GIF", cAlternateFileName="")) returned 1 [0168.206] wcscmp (_String1="BD15021_.GIF", _String2=".") returned 1 [0168.206] wcscmp (_String1="BD15021_.GIF", _String2="..") returned 1 [0168.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cf48 [0168.206] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.206] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.206] wcscat (in: _Dest=0x32cf48, _Source="BD15021_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" [0168.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0168.207] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16af6200, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16af6200, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15022_.GIF", cAlternateFileName="")) returned 1 [0168.207] wcscmp (_String1="BD15022_.GIF", _String2=".") returned 1 [0168.207] wcscmp (_String1="BD15022_.GIF", _String2="..") returned 1 [0168.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ce18 [0168.207] wcscpy (in: _Dest=0x32ce18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.207] wcscat (in: _Dest=0x32ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.207] wcscat (in: _Dest=0x32ce18, _Source="BD15022_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" [0168.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0168.208] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157e3500, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x157e3500, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15023_.GIF", cAlternateFileName="")) returned 1 [0168.208] wcscmp (_String1="BD15023_.GIF", _String2=".") returned 1 [0168.208] wcscmp (_String1="BD15023_.GIF", _String2="..") returned 1 [0168.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ceb0 [0168.208] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.208] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.208] wcscat (in: _Dest=0x32ceb0, _Source="BD15023_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" [0168.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0168.209] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b285700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b285700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15056_.GIF", cAlternateFileName="")) returned 1 [0168.209] wcscmp (_String1="BD15056_.GIF", _String2=".") returned 1 [0168.209] wcscmp (_String1="BD15056_.GIF", _String2="..") returned 1 [0168.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cbb8 [0168.210] wcscpy (in: _Dest=0x32cbb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.210] wcscat (in: _Dest=0x32cbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.210] wcscat (in: _Dest=0x32cbb8, _Source="BD15056_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" [0168.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0168.210] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b285700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b285700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15057_.GIF", cAlternateFileName="")) returned 1 [0168.210] wcscmp (_String1="BD15057_.GIF", _String2=".") returned 1 [0168.211] wcscmp (_String1="BD15057_.GIF", _String2="..") returned 1 [0168.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c9f0 [0168.211] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.211] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.211] wcscat (in: _Dest=0x32c9f0, _Source="BD15057_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" [0168.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0168.212] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c598400, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2c598400, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15058_.GIF", cAlternateFileName="")) returned 1 [0168.212] wcscmp (_String1="BD15058_.GIF", _String2=".") returned 1 [0168.212] wcscmp (_String1="BD15058_.GIF", _String2="..") returned 1 [0168.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c828 [0168.212] wcscpy (in: _Dest=0x32c828, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.212] wcscat (in: _Dest=0x32c828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.212] wcscat (in: _Dest=0x32c828, _Source="BD15058_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" [0168.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0168.213] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d09b00, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc6d09b00, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15059_.GIF", cAlternateFileName="")) returned 1 [0168.213] wcscmp (_String1="BD15059_.GIF", _String2=".") returned 1 [0168.213] wcscmp (_String1="BD15059_.GIF", _String2="..") returned 1 [0168.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0168.213] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.213] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.213] wcscat (in: _Dest=0x32d700, _Source="BD15059_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" [0168.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0168.214] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59f6e00, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc59f6e00, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15060_.GIF", cAlternateFileName="")) returned 1 [0168.214] wcscmp (_String1="BD15060_.GIF", _String2=".") returned 1 [0168.214] wcscmp (_String1="BD15060_.GIF", _String2="..") returned 1 [0168.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c958 [0168.214] wcscpy (in: _Dest=0x32c958, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.214] wcscat (in: _Dest=0x32c958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.214] wcscat (in: _Dest=0x32c958, _Source="BD15060_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" [0168.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0168.215] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46e4100, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc46e4100, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15061_.GIF", cAlternateFileName="")) returned 1 [0168.215] wcscmp (_String1="BD15061_.GIF", _String2=".") returned 1 [0168.215] wcscmp (_String1="BD15061_.GIF", _String2="..") returned 1 [0168.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0168.215] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.215] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.215] wcscat (in: _Dest=0x32cb20, _Source="BD15061_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" [0168.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0168.216] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e17e00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54e17e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15132_.GIF", cAlternateFileName="")) returned 1 [0168.216] wcscmp (_String1="BD15132_.GIF", _String2=".") returned 1 [0168.216] wcscmp (_String1="BD15132_.GIF", _String2="..") returned 1 [0168.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0168.216] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.217] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.217] wcscat (in: _Dest=0x32d408, _Source="BD15132_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" [0168.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0168.218] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5612ab00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5612ab00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15133_.GIF", cAlternateFileName="")) returned 1 [0168.218] wcscmp (_String1="BD15133_.GIF", _String2=".") returned 1 [0168.218] wcscmp (_String1="BD15133_.GIF", _String2="..") returned 1 [0168.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bea8 [0168.218] wcscpy (in: _Dest=0x32bea8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.218] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.218] wcscat (in: _Dest=0x32bea8, _Source="BD15133_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" [0168.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0168.219] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5612ab00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5612ab00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15134_.GIF", cAlternateFileName="")) returned 1 [0168.219] wcscmp (_String1="BD15134_.GIF", _String2=".") returned 1 [0168.219] wcscmp (_String1="BD15134_.GIF", _String2="..") returned 1 [0168.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0168.219] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.219] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.219] wcscat (in: _Dest=0x32d668, _Source="BD15134_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" [0168.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0168.220] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5612ab00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5612ab00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15135_.GIF", cAlternateFileName="")) returned 1 [0168.220] wcscmp (_String1="BD15135_.GIF", _String2=".") returned 1 [0168.220] wcscmp (_String1="BD15135_.GIF", _String2="..") returned 1 [0168.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0168.220] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.220] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.220] wcscat (in: _Dest=0x32b820, _Source="BD15135_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" [0168.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0168.221] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5743d800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5743d800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15136_.GIF", cAlternateFileName="")) returned 1 [0168.221] wcscmp (_String1="BD15136_.GIF", _String2=".") returned 1 [0168.221] wcscmp (_String1="BD15136_.GIF", _String2="..") returned 1 [0168.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c708 [0168.221] wcscpy (in: _Dest=0x3e3c708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.221] wcscat (in: _Dest=0x3e3c708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.221] wcscat (in: _Dest=0x3e3c708, _Source="BD15136_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" [0168.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0168.222] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f9a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x632f9a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15168_.GIF", cAlternateFileName="")) returned 1 [0168.222] wcscmp (_String1="BD15168_.GIF", _String2=".") returned 1 [0168.222] wcscmp (_String1="BD15168_.GIF", _String2="..") returned 1 [0168.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3de30 [0168.222] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.223] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.223] wcscat (in: _Dest=0x3e3de30, _Source="BD15168_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" [0168.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3de30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0168.224] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f9a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x632f9a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15169_.GIF", cAlternateFileName="")) returned 1 [0168.224] wcscmp (_String1="BD15169_.GIF", _String2=".") returned 1 [0168.224] wcscmp (_String1="BD15169_.GIF", _String2="..") returned 1 [0168.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d2e8 [0168.224] wcscpy (in: _Dest=0x3e3d2e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.224] wcscat (in: _Dest=0x3e3d2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.224] wcscat (in: _Dest=0x3e3d2e8, _Source="BD15169_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" [0168.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0168.225] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6460c700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6460c700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15170_.GIF", cAlternateFileName="")) returned 1 [0168.225] wcscmp (_String1="BD15170_.GIF", _String2=".") returned 1 [0168.225] wcscmp (_String1="BD15170_.GIF", _String2="..") returned 1 [0168.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0168.225] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.225] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.225] wcscat (in: _Dest=0x3e3cf58, _Source="BD15170_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" [0168.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0168.226] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b8900, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3b8900, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15171_.GIF", cAlternateFileName="")) returned 1 [0168.226] wcscmp (_String1="BD15171_.GIF", _String2=".") returned 1 [0168.226] wcscmp (_String1="BD15171_.GIF", _String2="..") returned 1 [0168.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d088 [0168.226] wcscpy (in: _Dest=0x3e3d088, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.226] wcscat (in: _Dest=0x3e3d088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.226] wcscat (in: _Dest=0x3e3d088, _Source="BD15171_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" [0168.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0168.227] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6460c700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6460c700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15172_.GIF", cAlternateFileName="")) returned 1 [0168.227] wcscmp (_String1="BD15172_.GIF", _String2=".") returned 1 [0168.227] wcscmp (_String1="BD15172_.GIF", _String2="..") returned 1 [0168.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d548 [0168.227] wcscpy (in: _Dest=0x3e3d548, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.227] wcscat (in: _Dest=0x3e3d548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.227] wcscat (in: _Dest=0x3e3d548, _Source="BD15172_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" [0168.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0168.228] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd92f00, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd92f00, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15173_.GIF", cAlternateFileName="")) returned 1 [0168.229] wcscmp (_String1="BD15173_.GIF", _String2=".") returned 1 [0168.229] wcscmp (_String1="BD15173_.GIF", _String2="..") returned 1 [0168.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d5e0 [0168.229] wcscpy (in: _Dest=0x3e3d5e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.229] wcscat (in: _Dest=0x3e3d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.229] wcscat (in: _Dest=0x3e3d5e0, _Source="BD15173_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" [0168.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0168.230] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907c4800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x907c4800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15272_.GIF", cAlternateFileName="")) returned 1 [0168.230] wcscmp (_String1="BD15272_.GIF", _String2=".") returned 1 [0168.230] wcscmp (_String1="BD15272_.GIF", _String2="..") returned 1 [0168.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d418 [0168.230] wcscpy (in: _Dest=0x3e3d418, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.230] wcscat (in: _Dest=0x3e3d418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.230] wcscat (in: _Dest=0x3e3d418, _Source="BD15272_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" [0168.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0168.231] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ad7500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x91ad7500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15273_.GIF", cAlternateFileName="")) returned 1 [0168.231] wcscmp (_String1="BD15273_.GIF", _String2=".") returned 1 [0168.231] wcscmp (_String1="BD15273_.GIF", _String2="..") returned 1 [0168.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cbc8 [0168.231] wcscpy (in: _Dest=0x3e3cbc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.231] wcscat (in: _Dest=0x3e3cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.231] wcscat (in: _Dest=0x3e3cbc8, _Source="BD15273_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" [0168.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0168.232] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ecd8500, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ecd8500, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15274_.GIF", cAlternateFileName="")) returned 1 [0168.232] wcscmp (_String1="BD15274_.GIF", _String2=".") returned 1 [0168.232] wcscmp (_String1="BD15274_.GIF", _String2="..") returned 1 [0168.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c378 [0168.232] wcscpy (in: _Dest=0x3e3c378, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.232] wcscat (in: _Dest=0x3e3c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.232] wcscat (in: _Dest=0x3e3c378, _Source="BD15274_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" [0168.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0168.233] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6b2b00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5c6b2b00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15275_.GIF", cAlternateFileName="")) returned 1 [0168.233] wcscmp (_String1="BD15275_.GIF", _String2=".") returned 1 [0168.233] wcscmp (_String1="BD15275_.GIF", _String2="..") returned 1 [0168.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3dc68 [0168.234] wcscpy (in: _Dest=0x3e3dc68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.234] wcscat (in: _Dest=0x3e3dc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.234] wcscat (in: _Dest=0x3e3dc68, _Source="BD15275_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" [0168.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0168.235] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58d7a400, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58d7a400, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15276_.GIF", cAlternateFileName="")) returned 1 [0168.235] wcscmp (_String1="BD15276_.GIF", _String2=".") returned 1 [0168.235] wcscmp (_String1="BD15276_.GIF", _String2="..") returned 1 [0168.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c2e0 [0168.235] wcscpy (in: _Dest=0x3e3c2e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.235] wcscat (in: _Dest=0x3e3c2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.235] wcscat (in: _Dest=0x3e3c2e0, _Source="BD15276_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" [0168.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0168.236] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57a67700, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x57a67700, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15277_.GIF", cAlternateFileName="")) returned 1 [0168.236] wcscmp (_String1="BD15277_.GIF", _String2=".") returned 1 [0168.236] wcscmp (_String1="BD15277_.GIF", _String2="..") returned 1 [0168.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c410 [0168.236] wcscpy (in: _Dest=0x3e3c410, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.236] wcscat (in: _Dest=0x3e3c410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.236] wcscat (in: _Dest=0x3e3c410, _Source="BD15277_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" [0168.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0168.237] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd76def00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd76def00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21294_.GIF", cAlternateFileName="")) returned 1 [0168.237] wcscmp (_String1="BD21294_.GIF", _String2=".") returned 1 [0168.237] wcscmp (_String1="BD21294_.GIF", _String2="..") returned 1 [0168.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3dd00 [0168.237] wcscpy (in: _Dest=0x3e3dd00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.237] wcscat (in: _Dest=0x3e3dd00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.237] wcscat (in: _Dest=0x3e3dd00, _Source="BD21294_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" [0168.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dd00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0168.238] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd89f1c00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd89f1c00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21295_.GIF", cAlternateFileName="")) returned 1 [0168.238] wcscmp (_String1="BD21295_.GIF", _String2=".") returned 1 [0168.238] wcscmp (_String1="BD21295_.GIF", _String2="..") returned 1 [0168.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0168.238] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.238] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.238] wcscat (in: _Dest=0x3e3db38, _Source="BD21295_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" [0168.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3db38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0168.662] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb017600, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdb017600, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21296_.GIF", cAlternateFileName="")) returned 1 [0171.964] wcscmp (_String1="BD21296_.GIF", _String2=".") returned 1 [0171.964] wcscmp (_String1="BD21296_.GIF", _String2="..") returned 1 [0171.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3ca00 [0171.964] wcscpy (in: _Dest=0x3e3ca00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0171.964] wcscat (in: _Dest=0x3e3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0171.964] wcscat (in: _Dest=0x3e3ca00, _Source="BD21296_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" [0173.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0 [0173.077] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9d04900, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9d04900, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21297_.GIF", cAlternateFileName="")) returned 1 [0173.077] wcscmp (_String1="BD21297_.GIF", _String2=".") returned 1 [0173.077] wcscmp (_String1="BD21297_.GIF", _String2="..") returned 1 [0173.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c4a8 [0173.077] wcscpy (in: _Dest=0x3e3c4a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.077] wcscat (in: _Dest=0x3e3c4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.078] wcscat (in: _Dest=0x3e3c4a8, _Source="BD21297_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" [0173.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b4 [0173.079] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc62a00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfc62a00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21298_.GIF", cAlternateFileName="")) returned 1 [0173.079] wcscmp (_String1="BD21298_.GIF", _String2=".") returned 1 [0173.079] wcscmp (_String1="BD21298_.GIF", _String2="..") returned 1 [0173.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d710 [0173.079] wcscpy (in: _Dest=0x3e3d710, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.079] wcscat (in: _Dest=0x3e3d710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.079] wcscat (in: _Dest=0x3e3d710, _Source="BD21298_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" [0173.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0173.081] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde94fd00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde94fd00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21299_.GIF", cAlternateFileName="")) returned 1 [0173.081] wcscmp (_String1="BD21299_.GIF", _String2=".") returned 1 [0173.081] wcscmp (_String1="BD21299_.GIF", _String2="..") returned 1 [0173.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3daa0 [0173.081] wcscpy (in: _Dest=0x3e3daa0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.081] wcscat (in: _Dest=0x3e3daa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.081] wcscat (in: _Dest=0x3e3daa0, _Source="BD21299_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" [0173.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3daa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0173.083] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd63d000, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdd63d000, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21300_.GIF", cAlternateFileName="")) returned 1 [0173.083] wcscmp (_String1="BD21300_.GIF", _String2=".") returned 1 [0173.083] wcscmp (_String1="BD21300_.GIF", _String2="..") returned 1 [0173.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3bf50 [0173.083] wcscpy (in: _Dest=0x3e3bf50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.083] wcscat (in: _Dest=0x3e3bf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.083] wcscat (in: _Dest=0x3e3bf50, _Source="BD21300_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" [0173.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3bf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0173.085] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ed3800, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe6ed3800, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21301_.GIF", cAlternateFileName="")) returned 1 [0173.085] wcscmp (_String1="BD21301_.GIF", _String2=".") returned 1 [0173.085] wcscmp (_String1="BD21301_.GIF", _String2="..") returned 1 [0173.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d2e8 [0173.085] wcscpy (in: _Dest=0x3e3d2e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.085] wcscat (in: _Dest=0x3e3d2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.085] wcscat (in: _Dest=0x3e3d2e8, _Source="BD21301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" [0173.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0173.086] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5bc0b00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe5bc0b00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21302_.GIF", cAlternateFileName="")) returned 1 [0173.086] wcscmp (_String1="BD21302_.GIF", _String2=".") returned 1 [0173.086] wcscmp (_String1="BD21302_.GIF", _String2="..") returned 1 [0173.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0173.086] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.087] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.087] wcscat (in: _Dest=0x3e3cf58, _Source="BD21302_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" [0173.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c8 [0173.088] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2288400, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2288400, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21304_.GIF", cAlternateFileName="")) returned 1 [0173.088] wcscmp (_String1="BD21304_.GIF", _String2=".") returned 1 [0173.088] wcscmp (_String1="BD21304_.GIF", _String2="..") returned 1 [0173.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d088 [0173.088] wcscpy (in: _Dest=0x3e3d088, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.088] wcscat (in: _Dest=0x3e3d088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.088] wcscat (in: _Dest=0x3e3d088, _Source="BD21304_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" [0173.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0173.090] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f75700, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe0f75700, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21306_.GIF", cAlternateFileName="")) returned 1 [0173.090] wcscmp (_String1="BD21306_.GIF", _String2=".") returned 1 [0173.090] wcscmp (_String1="BD21306_.GIF", _String2="..") returned 1 [0173.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d548 [0173.090] wcscpy (in: _Dest=0x3e3d548, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.090] wcscat (in: _Dest=0x3e3d548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.090] wcscat (in: _Dest=0x3e3d548, _Source="BD21306_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" [0173.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29cc [0173.091] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63cc200, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd63cc200, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21308_.GIF", cAlternateFileName="")) returned 1 [0173.091] wcscmp (_String1="BD21308_.GIF", _String2=".") returned 1 [0173.091] wcscmp (_String1="BD21308_.GIF", _String2="..") returned 1 [0173.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d5e0 [0173.092] wcscpy (in: _Dest=0x3e3d5e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.092] wcscat (in: _Dest=0x3e3d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.092] wcscat (in: _Dest=0x3e3d5e0, _Source="BD21308_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" [0173.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0173.093] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3da6800, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd3da6800, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21310_.GIF", cAlternateFileName="")) returned 1 [0173.093] wcscmp (_String1="BD21310_.GIF", _String2=".") returned 1 [0173.093] wcscmp (_String1="BD21310_.GIF", _String2="..") returned 1 [0173.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d418 [0173.093] wcscpy (in: _Dest=0x3e3d418, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.093] wcscat (in: _Dest=0x3e3d418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.093] wcscat (in: _Dest=0x3e3d418, _Source="BD21310_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" [0173.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0173.095] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1780e00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd1780e00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21312_.GIF", cAlternateFileName="")) returned 1 [0173.095] wcscmp (_String1="BD21312_.GIF", _String2=".") returned 1 [0173.095] wcscmp (_String1="BD21312_.GIF", _String2="..") returned 1 [0173.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cbc8 [0173.095] wcscpy (in: _Dest=0x3e3cbc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.095] wcscat (in: _Dest=0x3e3cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.095] wcscat (in: _Dest=0x3e3cbc8, _Source="BD21312_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" [0173.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a18 [0173.096] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde48700, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcde48700, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x45, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21314_.GIF", cAlternateFileName="")) returned 1 [0173.096] wcscmp (_String1="BD21314_.GIF", _String2=".") returned 1 [0173.096] wcscmp (_String1="BD21314_.GIF", _String2="..") returned 1 [0173.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c378 [0173.096] wcscpy (in: _Dest=0x3e3c378, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.096] wcscat (in: _Dest=0x3e3c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.096] wcscat (in: _Dest=0x3e3c378, _Source="BD21314_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" [0173.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0173.107] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91fd300, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc91fd300, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21316_.GIF", cAlternateFileName="")) returned 1 [0173.107] wcscmp (_String1="BD21316_.GIF", _String2=".") returned 1 [0173.107] wcscmp (_String1="BD21316_.GIF", _String2="..") returned 1 [0173.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3dc68 [0173.107] wcscpy (in: _Dest=0x3e3dc68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.107] wcscat (in: _Dest=0x3e3dc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.107] wcscat (in: _Dest=0x3e3dc68, _Source="BD21316_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" [0173.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a1c [0173.121] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f8c500, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1f8c500, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21327_.GIF", cAlternateFileName="")) returned 1 [0173.121] wcscmp (_String1="BD21327_.GIF", _String2=".") returned 1 [0173.121] wcscmp (_String1="BD21327_.GIF", _String2="..") returned 1 [0173.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c2e0 [0173.121] wcscpy (in: _Dest=0x3e3c2e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.121] wcscat (in: _Dest=0x3e3c2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.121] wcscat (in: _Dest=0x3e3c2e0, _Source="BD21327_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" [0173.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2594 [0173.127] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe653e00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe653e00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21329_.GIF", cAlternateFileName="")) returned 1 [0173.127] wcscmp (_String1="BD21329_.GIF", _String2=".") returned 1 [0173.127] wcscmp (_String1="BD21329_.GIF", _String2="..") returned 1 [0173.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c410 [0173.127] wcscpy (in: _Dest=0x3e3c410, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.127] wcscat (in: _Dest=0x3e3c410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.127] wcscat (in: _Dest=0x3e3c410, _Source="BD21329_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" [0173.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26b8 [0173.133] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad1b700, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbad1b700, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21331_.GIF", cAlternateFileName="")) returned 1 [0173.133] wcscmp (_String1="BD21331_.GIF", _String2=".") returned 1 [0173.133] wcscmp (_String1="BD21331_.GIF", _String2="..") returned 1 [0173.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3dd00 [0173.133] wcscpy (in: _Dest=0x3e3dd00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.133] wcscat (in: _Dest=0x3e3dd00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.133] wcscat (in: _Dest=0x3e3dd00, _Source="BD21331_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" [0173.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dd00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0173.134] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60d0300, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb60d0300, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21333_.GIF", cAlternateFileName="")) returned 1 [0173.135] wcscmp (_String1="BD21333_.GIF", _String2=".") returned 1 [0173.135] wcscmp (_String1="BD21333_.GIF", _String2="..") returned 1 [0173.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0173.135] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.135] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.135] wcscat (in: _Dest=0x3e3db38, _Source="BD21333_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" [0173.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3db38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b30 [0173.137] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2797c00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2797c00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21335_.GIF", cAlternateFileName="")) returned 1 [0173.137] wcscmp (_String1="BD21335_.GIF", _String2=".") returned 1 [0173.137] wcscmp (_String1="BD21335_.GIF", _String2="..") returned 1 [0173.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cff0 [0173.137] wcscpy (in: _Dest=0x3e3cff0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.137] wcscat (in: _Dest=0x3e3cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.137] wcscat (in: _Dest=0x3e3cff0, _Source="BD21335_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" [0173.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0173.139] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1484f00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1484f00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21337_.GIF", cAlternateFileName="")) returned 1 [0173.139] wcscmp (_String1="BD21337_.GIF", _String2=".") returned 1 [0173.139] wcscmp (_String1="BD21337_.GIF", _String2="..") returned 1 [0173.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c708 [0173.139] wcscpy (in: _Dest=0x3e3c708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.139] wcscat (in: _Dest=0x3e3c708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.139] wcscat (in: _Dest=0x3e3c708, _Source="BD21337_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" [0173.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0c [0173.141] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaee5f500, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaee5f500, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21339_.GIF", cAlternateFileName="")) returned 1 [0173.141] wcscmp (_String1="BD21339_.GIF", _String2=".") returned 1 [0173.141] wcscmp (_String1="BD21339_.GIF", _String2="..") returned 1 [0173.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cd90 [0173.141] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.141] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.141] wcscat (in: _Dest=0x3e3cd90, _Source="BD21339_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" [0173.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0173.142] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22368600, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22368600, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21342_.GIF", cAlternateFileName="")) returned 1 [0173.143] wcscmp (_String1="BD21342_.GIF", _String2=".") returned 1 [0173.143] wcscmp (_String1="BD21342_.GIF", _String2="..") returned 1 [0173.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d840 [0173.143] wcscpy (in: _Dest=0x3e3d840, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.143] wcscat (in: _Dest=0x3e3d840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.143] wcscat (in: _Dest=0x3e3d840, _Source="BD21342_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" [0173.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0173.149] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22368600, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22368600, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21343_.GIF", cAlternateFileName="")) returned 1 [0173.149] wcscmp (_String1="BD21343_.GIF", _String2=".") returned 1 [0173.149] wcscmp (_String1="BD21343_.GIF", _String2="..") returned 1 [0173.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d8d8 [0173.149] wcscpy (in: _Dest=0x3e3d8d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.149] wcscat (in: _Dest=0x3e3d8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.149] wcscat (in: _Dest=0x3e3d8d8, _Source="BD21343_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" [0173.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26bc [0173.151] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2367b300, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2367b300, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21344_.GIF", cAlternateFileName="")) returned 1 [0173.151] wcscmp (_String1="BD21344_.GIF", _String2=".") returned 1 [0173.151] wcscmp (_String1="BD21344_.GIF", _String2="..") returned 1 [0173.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d970 [0173.151] wcscpy (in: _Dest=0x3e3d970, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.151] wcscat (in: _Dest=0x3e3d970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.151] wcscat (in: _Dest=0x3e3d970, _Source="BD21344_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" [0173.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b58 [0173.590] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7355200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7355200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21364_.GIF", cAlternateFileName="")) returned 1 [0173.590] wcscmp (_String1="BD21364_.GIF", _String2=".") returned 1 [0173.591] wcscmp (_String1="BD21364_.GIF", _String2="..") returned 1 [0173.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3da08 [0173.591] wcscpy (in: _Dest=0x3e3da08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0173.591] wcscat (in: _Dest=0x3e3da08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0173.591] wcscat (in: _Dest=0x3e3da08, _Source="BD21364_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" [0175.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3da08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x282c [0175.265] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7355200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7355200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21365_.GIF", cAlternateFileName="")) returned 1 [0175.265] wcscmp (_String1="BD21365_.GIF", _String2=".") returned 1 [0175.265] wcscmp (_String1="BD21365_.GIF", _String2="..") returned 1 [0175.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0175.265] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.265] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.265] wcscat (in: _Dest=0x32b820, _Source="BD21365_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" [0175.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34 [0175.266] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7355200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7355200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21366_.GIF", cAlternateFileName="")) returned 1 [0175.266] wcscmp (_String1="BD21366_.GIF", _String2=".") returned 1 [0175.266] wcscmp (_String1="BD21366_.GIF", _String2="..") returned 1 [0175.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0175.266] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.266] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.266] wcscat (in: _Dest=0x32d408, _Source="BD21366_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" [0175.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0175.285] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0b6800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e0b6800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21375_.GIF", cAlternateFileName="")) returned 1 [0175.285] wcscmp (_String1="BD21375_.GIF", _String2=".") returned 1 [0175.285] wcscmp (_String1="BD21375_.GIF", _String2="..") returned 1 [0175.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0175.285] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.285] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.285] wcscat (in: _Dest=0x32cb20, _Source="BD21375_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" [0175.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08 [0175.310] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3c9500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f3c9500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21376_.GIF", cAlternateFileName="")) returned 1 [0175.310] wcscmp (_String1="BD21376_.GIF", _String2=".") returned 1 [0175.310] wcscmp (_String1="BD21376_.GIF", _String2="..") returned 1 [0175.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c958 [0175.310] wcscpy (in: _Dest=0x32c958, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.310] wcscat (in: _Dest=0x32c958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.310] wcscat (in: _Dest=0x32c958, _Source="BD21376_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" [0175.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0175.311] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3c9500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f3c9500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21377_.GIF", cAlternateFileName="")) returned 1 [0175.312] wcscmp (_String1="BD21377_.GIF", _String2=".") returned 1 [0175.312] wcscmp (_String1="BD21377_.GIF", _String2="..") returned 1 [0175.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0175.312] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.312] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.312] wcscat (in: _Dest=0x32d700, _Source="BD21377_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" [0175.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0175.313] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c48f00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47c48f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21398_.GIF", cAlternateFileName="")) returned 1 [0175.313] wcscmp (_String1="BD21398_.GIF", _String2=".") returned 1 [0175.313] wcscmp (_String1="BD21398_.GIF", _String2="..") returned 1 [0175.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c828 [0175.313] wcscpy (in: _Dest=0x32c828, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.313] wcscat (in: _Dest=0x32c828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.314] wcscat (in: _Dest=0x32c828, _Source="BD21398_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" [0175.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0175.315] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48f5bc00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x48f5bc00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21399_.GIF", cAlternateFileName="")) returned 1 [0175.315] wcscmp (_String1="BD21399_.GIF", _String2=".") returned 1 [0175.315] wcscmp (_String1="BD21399_.GIF", _String2="..") returned 1 [0175.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c9f0 [0175.315] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.315] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.315] wcscat (in: _Dest=0x32c9f0, _Source="BD21399_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" [0175.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0175.316] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48f5bc00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x48f5bc00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21400_.GIF", cAlternateFileName="")) returned 1 [0175.316] wcscmp (_String1="BD21400_.GIF", _String2=".") returned 1 [0175.316] wcscmp (_String1="BD21400_.GIF", _String2="..") returned 1 [0175.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cbb8 [0175.317] wcscpy (in: _Dest=0x32cbb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.317] wcscat (in: _Dest=0x32cbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.317] wcscat (in: _Dest=0x32cbb8, _Source="BD21400_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" [0175.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0175.318] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ffb9100, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ffb9100, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21421_.GIF", cAlternateFileName="")) returned 1 [0175.318] wcscmp (_String1="BD21421_.GIF", _String2=".") returned 1 [0175.318] wcscmp (_String1="BD21421_.GIF", _String2="..") returned 1 [0175.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ceb0 [0175.318] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.318] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.318] wcscat (in: _Dest=0x32ceb0, _Source="BD21421_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" [0175.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0175.319] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ffb9100, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ffb9100, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21422_.GIF", cAlternateFileName="")) returned 1 [0176.168] wcscmp (_String1="BD21422_.GIF", _String2=".") returned 1 [0176.168] wcscmp (_String1="BD21422_.GIF", _String2="..") returned 1 [0176.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0176.168] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0176.168] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0176.168] wcscat (in: _Dest=0x32cc50, _Source="BD21422_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" [0178.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d8 [0178.163] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12cbe00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa12cbe00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21423_.GIF", cAlternateFileName="")) returned 1 [0178.163] wcscmp (_String1="BD21423_.GIF", _String2=".") returned 1 [0178.163] wcscmp (_String1="BD21423_.GIF", _String2="..") returned 1 [0178.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b2e0 [0178.163] wcscpy (in: _Dest=0x3e2b2e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.163] wcscat (in: _Dest=0x3e2b2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.163] wcscat (in: _Dest=0x3e2b2e0, _Source="BD21423_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" [0178.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0178.165] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fb3a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26fb3a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21433_.GIF", cAlternateFileName="")) returned 1 [0178.165] wcscmp (_String1="BD21433_.GIF", _String2=".") returned 1 [0178.165] wcscmp (_String1="BD21433_.GIF", _String2="..") returned 1 [0178.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ab28 [0178.165] wcscpy (in: _Dest=0x3e2ab28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.165] wcscat (in: _Dest=0x3e2ab28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.165] wcscat (in: _Dest=0x3e2ab28, _Source="BD21433_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" [0178.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ab28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0178.167] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fb3a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26fb3a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21434_.GIF", cAlternateFileName="")) returned 1 [0178.167] wcscmp (_String1="BD21434_.GIF", _String2=".") returned 1 [0178.167] wcscmp (_String1="BD21434_.GIF", _String2="..") returned 1 [0178.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bd90 [0178.167] wcscpy (in: _Dest=0x3e2bd90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.167] wcscat (in: _Dest=0x3e2bd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.167] wcscat (in: _Dest=0x3e2bd90, _Source="BD21434_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" [0178.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0178.168] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282c6700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x282c6700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21435_.GIF", cAlternateFileName="")) returned 1 [0178.168] wcscmp (_String1="BD21435_.GIF", _String2=".") returned 1 [0178.168] wcscmp (_String1="BD21435_.GIF", _String2="..") returned 1 [0178.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2be28 [0178.169] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.169] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.169] wcscat (in: _Dest=0x3e2be28, _Source="BD21435_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" [0178.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2be28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0178.170] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeac8d900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeac8d900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21480_.GIF", cAlternateFileName="")) returned 1 [0178.170] wcscmp (_String1="BD21480_.GIF", _String2=".") returned 1 [0178.170] wcscmp (_String1="BD21480_.GIF", _String2="..") returned 1 [0178.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a8c8 [0178.170] wcscpy (in: _Dest=0x3e2a8c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.170] wcscat (in: _Dest=0x3e2a8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.170] wcscat (in: _Dest=0x3e2a8c8, _Source="BD21480_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" [0178.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0178.172] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebfa0600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xebfa0600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21481_.GIF", cAlternateFileName="")) returned 1 [0178.172] wcscmp (_String1="BD21481_.GIF", _String2=".") returned 1 [0178.172] wcscmp (_String1="BD21481_.GIF", _String2="..") returned 1 [0178.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bbc8 [0178.172] wcscpy (in: _Dest=0x3e2bbc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.172] wcscat (in: _Dest=0x3e2bbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.172] wcscat (in: _Dest=0x3e2bbc8, _Source="BD21481_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" [0178.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0178.173] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebfa0600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xebfa0600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21482_.GIF", cAlternateFileName="")) returned 1 [0178.173] wcscmp (_String1="BD21482_.GIF", _String2=".") returned 1 [0178.173] wcscmp (_String1="BD21482_.GIF", _String2="..") returned 1 [0178.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a700 [0178.173] wcscpy (in: _Dest=0x3e2a700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.173] wcscat (in: _Dest=0x3e2a700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.173] wcscat (in: _Dest=0x3e2a700, _Source="BD21482_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" [0178.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0178.175] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25327600, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x25327600, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21503_.GIF", cAlternateFileName="")) returned 1 [0178.175] wcscmp (_String1="BD21503_.GIF", _String2=".") returned 1 [0178.175] wcscmp (_String1="BD21503_.GIF", _String2="..") returned 1 [0178.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a798 [0178.175] wcscpy (in: _Dest=0x3e2a798, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.175] wcscat (in: _Dest=0x3e2a798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.175] wcscat (in: _Dest=0x3e2a798, _Source="BD21503_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" [0178.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0178.176] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2663a300, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2663a300, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21504_.GIF", cAlternateFileName="")) returned 1 [0178.176] wcscmp (_String1="BD21504_.GIF", _String2=".") returned 1 [0178.176] wcscmp (_String1="BD21504_.GIF", _String2="..") returned 1 [0178.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a4a0 [0178.177] wcscpy (in: _Dest=0x3e2a4a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.177] wcscat (in: _Dest=0x3e2a4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.177] wcscat (in: _Dest=0x3e2a4a0, _Source="BD21504_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" [0178.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0178.178] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2663a300, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2663a300, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21505_.GIF", cAlternateFileName="")) returned 1 [0178.178] wcscmp (_String1="BD21505_.GIF", _String2=".") returned 1 [0178.178] wcscmp (_String1="BD21505_.GIF", _String2="..") returned 1 [0178.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a240 [0178.178] wcscpy (in: _Dest=0x3e2a240, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.178] wcscat (in: _Dest=0x3e2a240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.178] wcscat (in: _Dest=0x3e2a240, _Source="BD21505_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" [0178.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0178.180] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eeb9d00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4eeb9d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21518_.GIF", cAlternateFileName="")) returned 1 [0178.180] wcscmp (_String1="BD21518_.GIF", _String2=".") returned 1 [0178.180] wcscmp (_String1="BD21518_.GIF", _String2="..") returned 1 [0178.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ba98 [0178.180] wcscpy (in: _Dest=0x3e2ba98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.180] wcscat (in: _Dest=0x3e2ba98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.180] wcscat (in: _Dest=0x3e2ba98, _Source="BD21518_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" [0178.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ba98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0178.181] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501cca00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x501cca00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21519_.GIF", cAlternateFileName="")) returned 1 [0178.181] wcscmp (_String1="BD21519_.GIF", _String2=".") returned 1 [0178.182] wcscmp (_String1="BD21519_.GIF", _String2="..") returned 1 [0178.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ac58 [0178.182] wcscpy (in: _Dest=0x3e2ac58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.182] wcscat (in: _Dest=0x3e2ac58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.182] wcscat (in: _Dest=0x3e2ac58, _Source="BD21519_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" [0178.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ac58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0178.183] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501cca00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x501cca00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21520_.GIF", cAlternateFileName="")) returned 1 [0178.183] wcscmp (_String1="BD21520_.GIF", _String2=".") returned 1 [0178.183] wcscmp (_String1="BD21520_.GIF", _String2="..") returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2af50 [0178.183] wcscpy (in: _Dest=0x3e2af50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.183] wcscat (in: _Dest=0x3e2af50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.183] wcscat (in: _Dest=0x3e2af50, _Source="BD21520_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" [0178.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2af50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0178.185] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c04500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4c04500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21533_.GIF", cAlternateFileName="")) returned 1 [0178.185] wcscmp (_String1="BD21533_.GIF", _String2=".") returned 1 [0178.185] wcscmp (_String1="BD21533_.GIF", _String2="..") returned 1 [0178.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a2d8 [0178.185] wcscpy (in: _Dest=0x3e2a2d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.185] wcscat (in: _Dest=0x3e2a2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.185] wcscat (in: _Dest=0x3e2a2d8, _Source="BD21533_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" [0178.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0178.187] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c04500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4c04500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21534_.GIF", cAlternateFileName="")) returned 1 [0178.187] wcscmp (_String1="BD21534_.GIF", _String2=".") returned 1 [0178.187] wcscmp (_String1="BD21534_.GIF", _String2="..") returned 1 [0178.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b378 [0178.187] wcscpy (in: _Dest=0x3e2b378, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.187] wcscat (in: _Dest=0x3e2b378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.187] wcscat (in: _Dest=0x3e2b378, _Source="BD21534_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" [0178.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0178.188] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c04500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4c04500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21535_.GIF", cAlternateFileName="")) returned 1 [0178.188] wcscmp (_String1="BD21535_.GIF", _String2=".") returned 1 [0178.188] wcscmp (_String1="BD21535_.GIF", _String2="..") returned 1 [0178.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a830 [0178.189] wcscpy (in: _Dest=0x3e2a830, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.189] wcscat (in: _Dest=0x3e2a830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.189] wcscat (in: _Dest=0x3e2a830, _Source="BD21535_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" [0178.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0178.190] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481cb800, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x481cb800, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x37a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS.DLL", cAlternateFileName="")) returned 1 [0178.190] wcscmp (_String1="BULLETS.DLL", _String2=".") returned 1 [0178.190] wcscmp (_String1="BULLETS.DLL", _String2="..") returned 1 [0178.190] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58283a00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58283a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115834.GIF", cAlternateFileName="")) returned 1 [0178.190] wcscmp (_String1="J0115834.GIF", _String2=".") returned 1 [0178.190] wcscmp (_String1="J0115834.GIF", _String2="..") returned 1 [0178.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b1b0 [0178.190] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.190] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.190] wcscat (in: _Dest=0x3e2b1b0, _Source="J0115834.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" [0178.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0178.192] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59596700, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59596700, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115835.GIF", cAlternateFileName="")) returned 1 [0178.192] wcscmp (_String1="J0115835.GIF", _String2=".") returned 1 [0178.192] wcscmp (_String1="J0115835.GIF", _String2="..") returned 1 [0178.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e29f48 [0178.192] wcscpy (in: _Dest=0x3e29f48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.192] wcscat (in: _Dest=0x3e29f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.192] wcscat (in: _Dest=0x3e29f48, _Source="J0115835.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" [0178.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e29f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0178.193] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8a9400, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5a8a9400, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115836.GIF", cAlternateFileName="")) returned 1 [0178.193] wcscmp (_String1="J0115836.GIF", _String2=".") returned 1 [0178.194] wcscmp (_String1="J0115836.GIF", _String2="..") returned 1 [0178.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bcf8 [0178.194] wcscpy (in: _Dest=0x3e2bcf8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.194] wcscat (in: _Dest=0x3e2bcf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.194] wcscat (in: _Dest=0x3e2bcf8, _Source="J0115836.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" [0178.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0178.195] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb09300, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdeb09300, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115839.GIF", cAlternateFileName="")) returned 1 [0178.195] wcscmp (_String1="J0115839.GIF", _String2=".") returned 1 [0178.195] wcscmp (_String1="J0115839.GIF", _String2="..") returned 1 [0178.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ae20 [0178.195] wcscpy (in: _Dest=0x3e2ae20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.195] wcscat (in: _Dest=0x3e2ae20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.195] wcscat (in: _Dest=0x3e2ae20, _Source="J0115839.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" [0178.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ae20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0178.197] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115840.GIF", cAlternateFileName="")) returned 1 [0178.197] wcscmp (_String1="J0115840.GIF", _String2=".") returned 1 [0178.197] wcscmp (_String1="J0115840.GIF", _String2="..") returned 1 [0178.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b968 [0178.197] wcscpy (in: _Dest=0x3e2b968, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.197] wcscat (in: _Dest=0x3e2b968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.197] wcscat (in: _Dest=0x3e2b968, _Source="J0115840.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" [0178.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0178.198] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115841.GIF", cAlternateFileName="")) returned 1 [0178.198] wcscmp (_String1="J0115841.GIF", _String2=".") returned 1 [0178.198] wcscmp (_String1="J0115841.GIF", _String2="..") returned 1 [0178.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b7a0 [0178.213] wcscpy (in: _Dest=0x3e2b7a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.213] wcscat (in: _Dest=0x3e2b7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.213] wcscat (in: _Dest=0x3e2b7a0, _Source="J0115841.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" [0178.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0178.347] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115842.GIF", cAlternateFileName="")) returned 1 [0178.347] wcscmp (_String1="J0115842.GIF", _String2=".") returned 1 [0178.347] wcscmp (_String1="J0115842.GIF", _String2="..") returned 1 [0178.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a078 [0178.348] wcscpy (in: _Dest=0x3e2a078, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.348] wcscat (in: _Dest=0x3e2a078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.348] wcscat (in: _Dest=0x3e2a078, _Source="J0115842.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" [0178.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0178.349] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115843.GIF", cAlternateFileName="")) returned 1 [0178.349] wcscmp (_String1="J0115843.GIF", _String2=".") returned 1 [0178.349] wcscmp (_String1="J0115843.GIF", _String2="..") returned 1 [0178.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3de30 [0178.350] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.350] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.350] wcscat (in: _Dest=0x3e3de30, _Source="J0115843.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" [0178.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3de30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0178.351] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe112ed00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfc86d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe112ed00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115844.GIF", cAlternateFileName="")) returned 1 [0178.351] wcscmp (_String1="J0115844.GIF", _String2=".") returned 1 [0178.351] wcscmp (_String1="J0115844.GIF", _String2="..") returned 1 [0178.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3dbd0 [0178.351] wcscpy (in: _Dest=0x3e3dbd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.351] wcscat (in: _Dest=0x3e3dbd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.351] wcscat (in: _Dest=0x3e3dbd0, _Source="J0115844.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" [0178.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0178.353] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfeaf00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfee830, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecfeaf00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115863.GIF", cAlternateFileName="")) returned 1 [0178.353] wcscmp (_String1="J0115863.GIF", _String2=".") returned 1 [0178.353] wcscmp (_String1="J0115863.GIF", _String2="..") returned 1 [0178.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c838 [0178.353] wcscpy (in: _Dest=0x3e3c838, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.353] wcscat (in: _Dest=0x3e3c838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.353] wcscat (in: _Dest=0x3e3c838, _Source="J0115863.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" [0178.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0178.354] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfeaf00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfee830, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecfeaf00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115864.GIF", cAlternateFileName="")) returned 1 [0178.354] wcscmp (_String1="J0115864.GIF", _String2=".") returned 1 [0178.355] wcscmp (_String1="J0115864.GIF", _String2="..") returned 1 [0178.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c540 [0178.355] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.355] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.355] wcscat (in: _Dest=0x3e3c540, _Source="J0115864.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" [0178.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0178.356] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfeaf00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfee830, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecfeaf00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115865.GIF", cAlternateFileName="")) returned 1 [0178.356] wcscmp (_String1="J0115865.GIF", _String2=".") returned 1 [0178.356] wcscmp (_String1="J0115865.GIF", _String2="..") returned 1 [0178.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d7a8 [0178.356] wcscpy (in: _Dest=0x3e3d7a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.356] wcscat (in: _Dest=0x3e3d7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.356] wcscat (in: _Dest=0x3e3d7a8, _Source="J0115865.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" [0178.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0178.358] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115866.GIF", cAlternateFileName="")) returned 1 [0178.358] wcscmp (_String1="J0115866.GIF", _String2=".") returned 1 [0178.358] wcscmp (_String1="J0115866.GIF", _String2="..") returned 1 [0178.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d4b0 [0178.358] wcscpy (in: _Dest=0x3e3d4b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.358] wcscat (in: _Dest=0x3e3d4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.358] wcscat (in: _Dest=0x3e3d4b0, _Source="J0115866.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" [0178.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0178.360] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115867.GIF", cAlternateFileName="")) returned 1 [0178.360] wcscmp (_String1="J0115867.GIF", _String2=".") returned 1 [0178.360] wcscmp (_String1="J0115867.GIF", _String2="..") returned 1 [0178.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cb30 [0178.360] wcscpy (in: _Dest=0x3e3cb30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.360] wcscat (in: _Dest=0x3e3cb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.360] wcscat (in: _Dest=0x3e3cb30, _Source="J0115867.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" [0178.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0178.361] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 1 [0178.361] wcscmp (_String1="J0115868.GIF", _String2=".") returned 1 [0178.361] wcscmp (_String1="J0115868.GIF", _String2="..") returned 1 [0178.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c7a0 [0178.362] wcscpy (in: _Dest=0x3e3c7a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.362] wcscat (in: _Dest=0x3e3c7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.362] wcscat (in: _Dest=0x3e3c7a0, _Source="J0115868.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" [0178.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0178.363] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x3d84e08 | out: lpFindFileData=0x3d84e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 0 [0181.403] FindClose (in: hFindFile=0x8098f90 | out: hFindFile=0x8098f90) returned 1 [0186.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e08) returned 1 [0186.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a6d8) returned 1 [0186.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a5d8) returned 1 Thread: id = 1486 os_tid = 0x14a4 [0145.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831a858 [0145.218] wcscpy (in: _Dest=0x831a858, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0145.219] wcscat (in: _Dest=0x831a858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0145.219] wcscat (in: _Dest=0x831a858, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*" [0145.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85ee0 [0145.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37558 [0147.350] wcscmp (_String1=".", _String2=".") returned 0 [0147.350] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.412] wcscmp (_String1="..", _String2=".") returned 1 [0147.412] wcscmp (_String1="..", _String2="..") returned 0 [0147.412] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30432a00, ftCreationTime.dwHighDateTime=0x1bd5f12, ftLastAccessTime.dwLowDateTime=0xbd3231f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x30432a00, ftLastWriteTime.dwHighDateTime=0x1bd5f12, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10219_.GIF", cAlternateFileName="")) returned 1 [0147.412] wcscmp (_String1="BD10219_.GIF", _String2=".") returned 1 [0147.412] wcscmp (_String1="BD10219_.GIF", _String2="..") returned 1 [0147.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1228 [0147.412] wcscpy (in: _Dest=0x3eb1228, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0147.412] wcscat (in: _Dest=0x3eb1228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0147.412] wcscat (in: _Dest=0x3eb1228, _Source="BD10219_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" [0148.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0148.327] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0ea300, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e0ea300, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10256_.GIF", cAlternateFileName="")) returned 1 [0148.327] wcscmp (_String1="BD10256_.GIF", _String2=".") returned 1 [0148.327] wcscmp (_String1="BD10256_.GIF", _String2="..") returned 1 [0148.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1d68 [0148.327] wcscpy (in: _Dest=0x3eb1d68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.327] wcscat (in: _Dest=0x3eb1d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.327] wcscat (in: _Dest=0x3eb1d68, _Source="BD10256_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" [0148.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680 [0148.328] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337f400, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x337f400, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10289_.GIF", cAlternateFileName="")) returned 1 [0148.328] wcscmp (_String1="BD10289_.GIF", _String2=".") returned 1 [0148.328] wcscmp (_String1="BD10289_.GIF", _String2="..") returned 1 [0148.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1b28 [0148.328] wcscpy (in: _Dest=0x3eb1b28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.328] wcscat (in: _Dest=0x3eb1b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.328] wcscat (in: _Dest=0x3eb1b28, _Source="BD10289_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" [0148.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934 [0148.330] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337f400, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x337f400, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10290_.GIF", cAlternateFileName="")) returned 1 [0148.330] wcscmp (_String1="BD10290_.GIF", _String2=".") returned 1 [0148.330] wcscmp (_String1="BD10290_.GIF", _String2="..") returned 1 [0148.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1468 [0148.330] wcscpy (in: _Dest=0x3eb1468, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.330] wcscat (in: _Dest=0x3eb1468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.330] wcscat (in: _Dest=0x3eb1468, _Source="BD10290_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" [0148.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0148.331] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92dd500, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x92dd500, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10307_.GIF", cAlternateFileName="")) returned 1 [0148.331] wcscmp (_String1="BD10307_.GIF", _String2=".") returned 1 [0148.331] wcscmp (_String1="BD10307_.GIF", _String2="..") returned 1 [0148.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1a08 [0148.331] wcscpy (in: _Dest=0x3eb1a08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.331] wcscat (in: _Dest=0x3eb1a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.331] wcscat (in: _Dest=0x3eb1a08, _Source="BD10307_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" [0148.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0148.333] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f0200, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5f0200, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10308_.GIF", cAlternateFileName="")) returned 1 [0148.333] wcscmp (_String1="BD10308_.GIF", _String2=".") returned 1 [0148.333] wcscmp (_String1="BD10308_.GIF", _String2="..") returned 1 [0148.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1078 [0148.333] wcscpy (in: _Dest=0x3eb1078, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.333] wcscat (in: _Dest=0x3eb1078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.333] wcscat (in: _Dest=0x3eb1078, _Source="BD10308_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" [0148.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0148.334] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfddba900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfddba900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10358_.GIF", cAlternateFileName="")) returned 1 [0148.334] wcscmp (_String1="BD10358_.GIF", _String2=".") returned 1 [0148.334] wcscmp (_String1="BD10358_.GIF", _String2="..") returned 1 [0148.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb12b8 [0148.334] wcscpy (in: _Dest=0x3eb12b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.334] wcscat (in: _Dest=0x3eb12b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.334] wcscat (in: _Dest=0x3eb12b8, _Source="BD10358_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" [0148.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb12b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0148.336] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e520700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e520700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14516_.GIF", cAlternateFileName="")) returned 1 [0148.336] wcscmp (_String1="BD14516_.GIF", _String2=".") returned 1 [0148.336] wcscmp (_String1="BD14516_.GIF", _String2="..") returned 1 [0148.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb14f8 [0148.336] wcscpy (in: _Dest=0x3eb14f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.336] wcscat (in: _Dest=0x3eb14f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.336] wcscat (in: _Dest=0x3eb14f8, _Source="BD14516_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" [0148.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb14f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0148.337] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0ea300, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e0ea300, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x617, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14538_.GIF", cAlternateFileName="")) returned 1 [0148.337] wcscmp (_String1="BD14538_.GIF", _String2=".") returned 1 [0148.337] wcscmp (_String1="BD14538_.GIF", _String2="..") returned 1 [0148.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1588 [0148.337] wcscpy (in: _Dest=0x3eb1588, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.337] wcscat (in: _Dest=0x3eb1588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.337] wcscat (in: _Dest=0x3eb1588, _Source="BD14538_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" [0148.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0148.338] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3fd000, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f3fd000, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14539_.GIF", cAlternateFileName="")) returned 1 [0148.338] wcscmp (_String1="BD14539_.GIF", _String2=".") returned 1 [0148.338] wcscmp (_String1="BD14539_.GIF", _String2="..") returned 1 [0148.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1e88 [0148.339] wcscpy (in: _Dest=0x3eb1e88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.339] wcscat (in: _Dest=0x3eb1e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.339] wcscat (in: _Dest=0x3eb1e88, _Source="BD14539_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" [0148.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0148.340] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19de4b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19de4b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14594_.GIF", cAlternateFileName="")) returned 1 [0148.340] wcscmp (_String1="BD14594_.GIF", _String2=".") returned 1 [0148.340] wcscmp (_String1="BD14594_.GIF", _String2="..") returned 1 [0148.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1618 [0148.340] wcscpy (in: _Dest=0x3eb1618, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.340] wcscat (in: _Dest=0x3eb1618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.341] wcscat (in: _Dest=0x3eb1618, _Source="BD14594_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" [0148.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0148.342] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19de4b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19de4b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14595_.GIF", cAlternateFileName="")) returned 1 [0148.342] wcscmp (_String1="BD14595_.GIF", _String2=".") returned 1 [0148.342] wcscmp (_String1="BD14595_.GIF", _String2="..") returned 1 [0148.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1858 [0148.342] wcscpy (in: _Dest=0x3eb1858, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.342] wcscat (in: _Dest=0x3eb1858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.342] wcscat (in: _Dest=0x3eb1858, _Source="BD14595_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" [0148.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0148.343] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53638600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x53638600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14677_.GIF", cAlternateFileName="")) returned 1 [0148.343] wcscmp (_String1="BD14677_.GIF", _String2=".") returned 1 [0148.343] wcscmp (_String1="BD14677_.GIF", _String2="..") returned 1 [0148.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb18e8 [0148.343] wcscpy (in: _Dest=0x3eb18e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.343] wcscat (in: _Dest=0x3eb18e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.343] wcscat (in: _Dest=0x3eb18e8, _Source="BD14677_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" [0148.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb18e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0148.345] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e2cf00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd453cf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62e2cf00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14710_.GIF", cAlternateFileName="")) returned 1 [0148.345] wcscmp (_String1="BD14710_.GIF", _String2=".") returned 1 [0148.345] wcscmp (_String1="BD14710_.GIF", _String2="..") returned 1 [0148.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1a98 [0148.345] wcscpy (in: _Dest=0x3eb1a98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.345] wcscat (in: _Dest=0x3eb1a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.345] wcscat (in: _Dest=0x3eb1a98, _Source="BD14710_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" [0148.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc [0148.346] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e2cf00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62e2cf00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xa97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14711_.GIF", cAlternateFileName="")) returned 1 [0148.346] wcscmp (_String1="BD14711_.GIF", _String2=".") returned 1 [0148.346] wcscmp (_String1="BD14711_.GIF", _String2="..") returned 1 [0148.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2db8 [0148.347] wcscpy (in: _Dest=0x3eb2db8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.347] wcscat (in: _Dest=0x3eb2db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.347] wcscat (in: _Dest=0x3eb2db8, _Source="BD14711_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" [0148.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0148.348] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d74200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87d74200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14768_.GIF", cAlternateFileName="")) returned 1 [0148.348] wcscmp (_String1="BD14768_.GIF", _String2=".") returned 1 [0148.348] wcscmp (_String1="BD14768_.GIF", _String2="..") returned 1 [0148.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb0fe8 [0148.348] wcscpy (in: _Dest=0x3eb0fe8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.348] wcscat (in: _Dest=0x3eb0fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.348] wcscat (in: _Dest=0x3eb0fe8, _Source="BD14768_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" [0148.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0148.350] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d74200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87d74200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14769_.GIF", cAlternateFileName="")) returned 1 [0148.350] wcscmp (_String1="BD14769_.GIF", _String2=".") returned 1 [0148.350] wcscmp (_String1="BD14769_.GIF", _String2="..") returned 1 [0148.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2d28 [0148.350] wcscpy (in: _Dest=0x3eb2d28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.351] wcscat (in: _Dest=0x3eb2d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.351] wcscat (in: _Dest=0x3eb2d28, _Source="BD14769_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" [0148.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0148.352] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3fd000, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f3fd000, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14800_.GIF", cAlternateFileName="")) returned 1 [0148.352] wcscmp (_String1="BD14800_.GIF", _String2=".") returned 1 [0148.352] wcscmp (_String1="BD14800_.GIF", _String2="..") returned 1 [0148.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2c98 [0148.352] wcscpy (in: _Dest=0x3eb2c98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.352] wcscat (in: _Dest=0x3eb2c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.352] wcscat (in: _Dest=0x3eb2c98, _Source="BD14800_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" [0148.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0148.353] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3fd000, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f3fd000, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14801_.GIF", cAlternateFileName="")) returned 1 [0148.353] wcscmp (_String1="BD14801_.GIF", _String2=".") returned 1 [0148.353] wcscmp (_String1="BD14801_.GIF", _String2="..") returned 1 [0148.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2c08 [0148.353] wcscpy (in: _Dest=0x3eb2c08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.353] wcscat (in: _Dest=0x3eb2c08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.353] wcscat (in: _Dest=0x3eb2c08, _Source="BD14801_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" [0148.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0148.354] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4737a00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4737a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14844_.GIF", cAlternateFileName="")) returned 1 [0148.355] wcscmp (_String1="BD14844_.GIF", _String2=".") returned 1 [0148.355] wcscmp (_String1="BD14844_.GIF", _String2="..") returned 1 [0148.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2b78 [0148.355] wcscpy (in: _Dest=0x3eb2b78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.355] wcscat (in: _Dest=0x3eb2b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.355] wcscat (in: _Dest=0x3eb2b78, _Source="BD14844_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" [0148.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0148.356] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4737a00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4737a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14845_.GIF", cAlternateFileName="")) returned 1 [0148.356] wcscmp (_String1="BD14845_.GIF", _String2=".") returned 1 [0148.356] wcscmp (_String1="BD14845_.GIF", _String2="..") returned 1 [0148.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2ae8 [0148.357] wcscpy (in: _Dest=0x3eb2ae8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.357] wcscat (in: _Dest=0x3eb2ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.357] wcscat (in: _Dest=0x3eb2ae8, _Source="BD14845_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" [0148.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0148.358] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f2c300, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3f2c300, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14882_.GIF", cAlternateFileName="")) returned 1 [0148.358] wcscmp (_String1="BD14882_.GIF", _String2=".") returned 1 [0148.358] wcscmp (_String1="BD14882_.GIF", _String2="..") returned 1 [0148.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2a58 [0148.358] wcscpy (in: _Dest=0x3eb2a58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.358] wcscat (in: _Dest=0x3eb2a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.358] wcscat (in: _Dest=0x3eb2a58, _Source="BD14882_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" [0148.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0148.359] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f2c300, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3f2c300, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14883_.GIF", cAlternateFileName="")) returned 1 [0148.359] wcscmp (_String1="BD14883_.GIF", _String2=".") returned 1 [0148.359] wcscmp (_String1="BD14883_.GIF", _String2="..") returned 1 [0148.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb29c8 [0148.359] wcscpy (in: _Dest=0x3eb29c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.359] wcscat (in: _Dest=0x3eb29c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.359] wcscat (in: _Dest=0x3eb29c8, _Source="BD14883_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" [0148.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb29c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0148.360] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8963e00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8963e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14996_.GIF", cAlternateFileName="")) returned 1 [0148.361] wcscmp (_String1="BD14996_.GIF", _String2=".") returned 1 [0148.361] wcscmp (_String1="BD14996_.GIF", _String2="..") returned 1 [0148.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2e48 [0148.361] wcscpy (in: _Dest=0x3eb2e48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.361] wcscat (in: _Dest=0x3eb2e48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.361] wcscat (in: _Dest=0x3eb2e48, _Source="BD14996_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" [0148.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0148.362] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8963e00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8963e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14997_.GIF", cAlternateFileName="")) returned 1 [0148.362] wcscmp (_String1="BD14997_.GIF", _String2=".") returned 1 [0148.362] wcscmp (_String1="BD14997_.GIF", _String2="..") returned 1 [0148.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2ed8 [0148.362] wcscpy (in: _Dest=0x3eb2ed8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.362] wcscat (in: _Dest=0x3eb2ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.362] wcscat (in: _Dest=0x3eb2ed8, _Source="BD14997_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" [0148.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0148.363] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16e45a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16e45a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15034_.GIF", cAlternateFileName="")) returned 1 [0148.363] wcscmp (_String1="BD15034_.GIF", _String2=".") returned 1 [0148.364] wcscmp (_String1="BD15034_.GIF", _String2="..") returned 1 [0148.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34440 [0148.364] wcscpy (in: _Dest=0x3f34440, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.364] wcscat (in: _Dest=0x3f34440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.364] wcscat (in: _Dest=0x3f34440, _Source="BD15034_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" [0148.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0148.927] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16e45a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16e45a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15035_.GIF", cAlternateFileName="")) returned 1 [0148.927] wcscmp (_String1="BD15035_.GIF", _String2=".") returned 1 [0148.927] wcscmp (_String1="BD15035_.GIF", _String2="..") returned 1 [0148.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35d90 [0148.927] wcscpy (in: _Dest=0x3f35d90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0148.927] wcscat (in: _Dest=0x3f35d90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0148.927] wcscat (in: _Dest=0x3f35d90, _Source="BD15035_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" [0149.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0149.543] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x311e3800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x311e3800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15072_.GIF", cAlternateFileName="")) returned 1 [0149.543] wcscmp (_String1="BD15072_.GIF", _String2=".") returned 1 [0149.543] wcscmp (_String1="BD15072_.GIF", _String2="..") returned 1 [0149.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f36330 [0149.543] wcscpy (in: _Dest=0x3f36330, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0149.543] wcscat (in: _Dest=0x3f36330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0149.543] wcscat (in: _Dest=0x3f36330, _Source="BD15072_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" [0149.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0149.544] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324f6500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x324f6500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15073_.GIF", cAlternateFileName="")) returned 1 [0149.544] wcscmp (_String1="BD15073_.GIF", _String2=".") returned 1 [0149.544] wcscmp (_String1="BD15073_.GIF", _String2="..") returned 1 [0149.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34dd0 [0149.544] wcscpy (in: _Dest=0x3f34dd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0149.544] wcscat (in: _Dest=0x3f34dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0149.544] wcscat (in: _Dest=0x3f34dd0, _Source="BD15073_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" [0149.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0149.545] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4070fd00, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4070fd00, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15155_.GIF", cAlternateFileName="")) returned 1 [0149.545] wcscmp (_String1="BD15155_.GIF", _String2=".") returned 1 [0149.545] wcscmp (_String1="BD15155_.GIF", _String2="..") returned 1 [0149.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f347a0 [0149.546] wcscpy (in: _Dest=0x3f347a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0149.546] wcscat (in: _Dest=0x3f347a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0149.546] wcscat (in: _Dest=0x3f347a0, _Source="BD15155_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" [0149.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f347a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0149.547] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4070fd00, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4070fd00, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15156_.GIF", cAlternateFileName="")) returned 1 [0149.547] wcscmp (_String1="BD15156_.GIF", _String2=".") returned 1 [0149.547] wcscmp (_String1="BD15156_.GIF", _String2="..") returned 1 [0149.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34cb0 [0149.547] wcscpy (in: _Dest=0x3f34cb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0149.547] wcscat (in: _Dest=0x3f34cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0149.547] wcscat (in: _Dest=0x3f34cb0, _Source="BD15156_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" [0149.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0149.548] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69257b00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x69257b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15184_.GIF", cAlternateFileName="")) returned 1 [0149.548] wcscmp (_String1="BD15184_.GIF", _String2=".") returned 1 [0149.548] wcscmp (_String1="BD15184_.GIF", _String2="..") returned 1 [0149.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f349e0 [0149.548] wcscpy (in: _Dest=0x3f349e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0149.548] wcscat (in: _Dest=0x3f349e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0149.548] wcscat (in: _Dest=0x3f349e0, _Source="BD15184_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" [0149.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f349e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0149.549] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69257b00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x69257b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15185_.GIF", cAlternateFileName="")) returned 1 [0149.549] wcscmp (_String1="BD15185_.GIF", _String2=".") returned 1 [0149.550] wcscmp (_String1="BD15185_.GIF", _String2="..") returned 1 [0149.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34e60 [0149.550] wcscpy (in: _Dest=0x3f34e60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0149.550] wcscat (in: _Dest=0x3f34e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0149.550] wcscat (in: _Dest=0x3f34e60, _Source="BD15185_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" [0149.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0149.558] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a22a00, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x41a22a00, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15301_.GIF", cAlternateFileName="")) returned 1 [0150.233] wcscmp (_String1="BD15301_.GIF", _String2=".") returned 1 [0150.234] wcscmp (_String1="BD15301_.GIF", _String2="..") returned 1 [0150.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f348c0 [0150.234] wcscpy (in: _Dest=0x3f348c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0150.234] wcscat (in: _Dest=0x3f348c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0150.234] wcscat (in: _Dest=0x3f348c0, _Source="BD15301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" [0153.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f348c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0153.243] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c680a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9c680a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15302_.GIF", cAlternateFileName="")) returned 1 [0153.243] wcscmp (_String1="BD15302_.GIF", _String2=".") returned 1 [0153.243] wcscmp (_String1="BD15302_.GIF", _String2="..") returned 1 [0153.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35760 [0153.243] wcscpy (in: _Dest=0x3f35760, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.243] wcscat (in: _Dest=0x3f35760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.243] wcscat (in: _Dest=0x3f35760, _Source="BD15302_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" [0153.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0153.244] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe359b100, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe359b100, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21303_.GIF", cAlternateFileName="")) returned 1 [0153.244] wcscmp (_String1="BD21303_.GIF", _String2=".") returned 1 [0153.244] wcscmp (_String1="BD21303_.GIF", _String2="..") returned 1 [0153.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f359a0 [0153.244] wcscpy (in: _Dest=0x3f359a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.244] wcscat (in: _Dest=0x3f359a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.244] wcscat (in: _Dest=0x3f359a0, _Source="BD21303_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" [0153.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f359a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0153.245] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8549eb00, ftCreationTime.dwHighDateTime=0x1bd4fb9, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8549eb00, ftLastWriteTime.dwHighDateTime=0x1bd4fb9, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21305_.GIF", cAlternateFileName="")) returned 1 [0153.245] wcscmp (_String1="BD21305_.GIF", _String2=".") returned 1 [0153.246] wcscmp (_String1="BD21305_.GIF", _String2="..") returned 1 [0153.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35f40 [0153.246] wcscpy (in: _Dest=0x3f35f40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.246] wcscat (in: _Dest=0x3f35f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.246] wcscat (in: _Dest=0x3f35f40, _Source="BD21305_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" [0153.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0153.247] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744caa00, ftCreationTime.dwHighDateTime=0x1bd4fb8, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x744caa00, ftLastWriteTime.dwHighDateTime=0x1bd4fb8, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21307_.GIF", cAlternateFileName="")) returned 1 [0153.247] wcscmp (_String1="BD21307_.GIF", _String2=".") returned 1 [0153.247] wcscmp (_String1="BD21307_.GIF", _String2="..") returned 1 [0153.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f362a0 [0153.247] wcscpy (in: _Dest=0x3f362a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.247] wcscat (in: _Dest=0x3f362a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.247] wcscat (in: _Dest=0x3f362a0, _Source="BD21307_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" [0153.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f362a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140 [0153.248] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb357300, ftCreationTime.dwHighDateTime=0x1bd4fb7, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb357300, ftLastWriteTime.dwHighDateTime=0x1bd4fb7, nFileSizeHigh=0x0, nFileSizeLow=0xd1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21309_.GIF", cAlternateFileName="")) returned 1 [0153.248] wcscmp (_String1="BD21309_.GIF", _String2=".") returned 1 [0153.248] wcscmp (_String1="BD21309_.GIF", _String2="..") returned 1 [0153.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35fd0 [0153.249] wcscpy (in: _Dest=0x3f35fd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.249] wcscat (in: _Dest=0x3f35fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.249] wcscat (in: _Dest=0x3f35fd0, _Source="BD21309_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" [0153.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0153.250] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a93b00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2a93b00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21311_.GIF", cAlternateFileName="")) returned 1 [0153.250] wcscmp (_String1="BD21311_.GIF", _String2=".") returned 1 [0153.250] wcscmp (_String1="BD21311_.GIF", _String2="..") returned 1 [0153.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f36210 [0153.250] wcscpy (in: _Dest=0x3f36210, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.250] wcscat (in: _Dest=0x3f36210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.250] wcscat (in: _Dest=0x3f36210, _Source="BD21311_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" [0153.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0153.251] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd046e100, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd046e100, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21313_.GIF", cAlternateFileName="")) returned 1 [0153.251] wcscmp (_String1="BD21313_.GIF", _String2=".") returned 1 [0153.251] wcscmp (_String1="BD21313_.GIF", _String2="..") returned 1 [0153.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f355b0 [0153.251] wcscpy (in: _Dest=0x3f355b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.251] wcscat (in: _Dest=0x3f355b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.251] wcscat (in: _Dest=0x3f355b0, _Source="BD21313_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" [0153.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f355b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0153.253] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb822d00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcb822d00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21315_.GIF", cAlternateFileName="")) returned 1 [0153.253] wcscmp (_String1="BD21315_.GIF", _String2=".") returned 1 [0153.253] wcscmp (_String1="BD21315_.GIF", _String2="..") returned 1 [0153.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34a70 [0153.253] wcscpy (in: _Dest=0x3f34a70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.253] wcscat (in: _Dest=0x3f34a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.253] wcscat (in: _Dest=0x3f34a70, _Source="BD21315_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" [0153.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0153.254] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508b6300, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x508b6300, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21318_.GIF", cAlternateFileName="")) returned 1 [0153.254] wcscmp (_String1="BD21318_.GIF", _String2=".") returned 1 [0153.254] wcscmp (_String1="BD21318_.GIF", _String2="..") returned 1 [0153.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35d90 [0153.254] wcscpy (in: _Dest=0x3f35d90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.254] wcscat (in: _Dest=0x3f35d90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.254] wcscat (in: _Dest=0x3f35d90, _Source="BD21318_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" [0153.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0153.255] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c476600, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c476600, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21319_.GIF", cAlternateFileName="")) returned 1 [0153.255] wcscmp (_String1="BD21319_.GIF", _String2=".") returned 1 [0153.256] wcscmp (_String1="BD21319_.GIF", _String2="..") returned 1 [0153.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34b00 [0153.256] wcscpy (in: _Dest=0x3f34b00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.256] wcscat (in: _Dest=0x3f34b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.256] wcscat (in: _Dest=0x3f34b00, _Source="BD21319_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" [0153.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0153.257] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc81d00, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2cc81d00, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x664, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21320_.GIF", cAlternateFileName="")) returned 1 [0153.257] wcscmp (_String1="BD21320_.GIF", _String2=".") returned 1 [0153.257] wcscmp (_String1="BD21320_.GIF", _String2="..") returned 1 [0153.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34c20 [0153.257] wcscpy (in: _Dest=0x3f34c20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.257] wcscat (in: _Dest=0x3f34c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.257] wcscat (in: _Dest=0x3f34c20, _Source="BD21320_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" [0153.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0153.258] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae67a00, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ae67a00, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21321_.GIF", cAlternateFileName="")) returned 1 [0153.258] wcscmp (_String1="BD21321_.GIF", _String2=".") returned 1 [0153.258] wcscmp (_String1="BD21321_.GIF", _String2="..") returned 1 [0153.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34440 [0153.259] wcscpy (in: _Dest=0x3f34440, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.259] wcscat (in: _Dest=0x3f34440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.259] wcscat (in: _Dest=0x3f34440, _Source="BD21321_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" [0153.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0153.260] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4911b00, ftCreationTime.dwHighDateTime=0x1bd4fbb, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd4911b00, ftLastWriteTime.dwHighDateTime=0x1bd4fbb, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21322_.GIF", cAlternateFileName="")) returned 1 [0153.260] wcscmp (_String1="BD21322_.GIF", _String2=".") returned 1 [0153.260] wcscmp (_String1="BD21322_.GIF", _String2="..") returned 1 [0153.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f349e0 [0153.260] wcscpy (in: _Dest=0x3f349e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.260] wcscat (in: _Dest=0x3f349e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.260] wcscat (in: _Dest=0x3f349e0, _Source="BD21322_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" [0153.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f349e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0153.261] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7eea600, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc7eea600, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21323_.GIF", cAlternateFileName="")) returned 1 [0153.261] wcscmp (_String1="BD21323_.GIF", _String2=".") returned 1 [0153.261] wcscmp (_String1="BD21323_.GIF", _String2="..") returned 1 [0153.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f347a0 [0153.261] wcscpy (in: _Dest=0x3f347a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.261] wcscat (in: _Dest=0x3f347a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.261] wcscat (in: _Dest=0x3f347a0, _Source="BD21323_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" [0153.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f347a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0153.263] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58c4c00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc58c4c00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21324_.GIF", cAlternateFileName="")) returned 1 [0153.263] wcscmp (_String1="BD21324_.GIF", _String2=".") returned 1 [0153.263] wcscmp (_String1="BD21324_.GIF", _String2="..") returned 1 [0153.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34e60 [0153.263] wcscpy (in: _Dest=0x3f34e60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.263] wcscat (in: _Dest=0x3f34e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.263] wcscat (in: _Dest=0x3f34e60, _Source="BD21324_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" [0153.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0153.264] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc329f200, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc329f200, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21325_.GIF", cAlternateFileName="")) returned 1 [0153.264] wcscmp (_String1="BD21325_.GIF", _String2=".") returned 1 [0153.264] wcscmp (_String1="BD21325_.GIF", _String2="..") returned 1 [0153.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34cb0 [0153.264] wcscpy (in: _Dest=0x3f34cb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.264] wcscat (in: _Dest=0x3f34cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.264] wcscat (in: _Dest=0x3f34cb0, _Source="BD21325_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" [0153.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0153.266] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e36400, ftCreationTime.dwHighDateTime=0x1bd4fba, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2e36400, ftLastWriteTime.dwHighDateTime=0x1bd4fba, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21326_.GIF", cAlternateFileName="")) returned 1 [0153.266] wcscmp (_String1="BD21326_.GIF", _String2=".") returned 1 [0153.266] wcscmp (_String1="BD21326_.GIF", _String2="..") returned 1 [0153.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34dd0 [0153.266] wcscpy (in: _Dest=0x3f34dd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.266] wcscat (in: _Dest=0x3f34dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.266] wcscat (in: _Dest=0x3f34dd0, _Source="BD21326_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" [0153.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0153.267] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf966b00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbf966b00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21328_.GIF", cAlternateFileName="")) returned 1 [0153.267] wcscmp (_String1="BD21328_.GIF", _String2=".") returned 1 [0153.267] wcscmp (_String1="BD21328_.GIF", _String2="..") returned 1 [0153.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f36330 [0153.267] wcscpy (in: _Dest=0x3f36330, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.267] wcscat (in: _Dest=0x3f36330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.267] wcscat (in: _Dest=0x3f36330, _Source="BD21328_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" [0153.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0153.269] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd341100, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd341100, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21330_.GIF", cAlternateFileName="")) returned 1 [0153.269] wcscmp (_String1="BD21330_.GIF", _String2=".") returned 1 [0153.269] wcscmp (_String1="BD21330_.GIF", _String2="..") returned 1 [0153.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35e20 [0153.269] wcscpy (in: _Dest=0x3f35e20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.269] wcscat (in: _Dest=0x3f35e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.269] wcscat (in: _Dest=0x3f35e20, _Source="BD21330_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" [0153.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0153.270] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a08a00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb9a08a00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21332_.GIF", cAlternateFileName="")) returned 1 [0153.270] wcscmp (_String1="BD21332_.GIF", _String2=".") returned 1 [0153.270] wcscmp (_String1="BD21332_.GIF", _String2="..") returned 1 [0153.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f352e0 [0153.270] wcscpy (in: _Dest=0x3f352e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.270] wcscat (in: _Dest=0x3f352e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.270] wcscat (in: _Dest=0x3f352e0, _Source="BD21332_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" [0153.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f352e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0153.272] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3aaa900, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3aaa900, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x888, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21334_.GIF", cAlternateFileName="")) returned 1 [0153.272] wcscmp (_String1="BD21334_.GIF", _String2=".") returned 1 [0153.272] wcscmp (_String1="BD21334_.GIF", _String2="..") returned 1 [0153.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34ef0 [0153.272] wcscpy (in: _Dest=0x3f34ef0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.272] wcscat (in: _Dest=0x3f34ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.272] wcscat (in: _Dest=0x3f34ef0, _Source="BD21334_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" [0153.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0153.273] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a9e00, ftCreationTime.dwHighDateTime=0x1bd4fac, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd99a9e00, ftLastWriteTime.dwHighDateTime=0x1bd4fac, nFileSizeHigh=0x0, nFileSizeLow=0xaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21336_.GIF", cAlternateFileName="")) returned 1 [0153.273] wcscmp (_String1="BD21336_.GIF", _String2=".") returned 1 [0153.273] wcscmp (_String1="BD21336_.GIF", _String2="..") returned 1 [0153.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35520 [0153.273] wcscpy (in: _Dest=0x3f35520, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.273] wcscat (in: _Dest=0x3f35520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.273] wcscat (in: _Dest=0x3f35520, _Source="BD21336_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" [0153.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0153.274] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0172200, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb0172200, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21338_.GIF", cAlternateFileName="")) returned 1 [0153.274] wcscmp (_String1="BD21338_.GIF", _String2=".") returned 1 [0153.274] wcscmp (_String1="BD21338_.GIF", _String2="..") returned 1 [0153.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1738 [0153.275] wcscpy (in: _Dest=0x3eb1738, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.275] wcscat (in: _Dest=0x3eb1738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.275] wcscat (in: _Dest=0x3eb1738, _Source="BD21338_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" [0153.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0153.276] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf885400, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf885400, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21340_.GIF", cAlternateFileName="")) returned 1 [0153.276] wcscmp (_String1="BD21340_.GIF", _String2=".") returned 1 [0153.276] wcscmp (_String1="BD21340_.GIF", _String2="..") returned 1 [0153.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb26f8 [0153.276] wcscpy (in: _Dest=0x3eb26f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.276] wcscat (in: _Dest=0x3eb26f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.276] wcscat (in: _Dest=0x3eb26f8, _Source="BD21340_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" [0153.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb26f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0153.278] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdd7600, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cdd7600, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21348_.GIF", cAlternateFileName="")) returned 1 [0153.278] wcscmp (_String1="BD21348_.GIF", _String2=".") returned 1 [0153.278] wcscmp (_String1="BD21348_.GIF", _String2="..") returned 1 [0153.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2428 [0153.278] wcscpy (in: _Dest=0x3eb2428, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.278] wcscat (in: _Dest=0x3eb2428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.278] wcscat (in: _Dest=0x3eb2428, _Source="BD21348_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" [0153.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0153.279] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe997ac00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe997ac00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21370_.GIF", cAlternateFileName="")) returned 1 [0153.279] wcscmp (_String1="BD21370_.GIF", _String2=".") returned 1 [0153.279] wcscmp (_String1="BD21370_.GIF", _String2="..") returned 1 [0153.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1c48 [0153.279] wcscpy (in: _Dest=0x3eb1c48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.279] wcscat (in: _Dest=0x3eb1c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.279] wcscat (in: _Dest=0x3eb1c48, _Source="BD21370_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" [0153.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0153.866] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d01c00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22d01c00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21390_.GIF", cAlternateFileName="")) returned 1 [0153.866] wcscmp (_String1="BD21390_.GIF", _String2=".") returned 1 [0153.866] wcscmp (_String1="BD21390_.GIF", _String2="..") returned 1 [0153.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb18e8 [0153.866] wcscpy (in: _Dest=0x3eb18e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0153.866] wcscat (in: _Dest=0x3eb18e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0153.866] wcscat (in: _Dest=0x3eb18e8, _Source="BD21390_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" [0154.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb18e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0154.795] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c894300, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4c894300, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21413_.GIF", cAlternateFileName="")) returned 1 [0154.795] wcscmp (_String1="BD21413_.GIF", _String2=".") returned 1 [0154.795] wcscmp (_String1="BD21413_.GIF", _String2="..") returned 1 [0154.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35880 [0154.795] wcscpy (in: _Dest=0x3f35880, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.795] wcscat (in: _Dest=0x3f35880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.795] wcscat (in: _Dest=0x3f35880, _Source="BD21413_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" [0154.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c0 [0154.796] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25deb00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa25deb00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21427_.GIF", cAlternateFileName="")) returned 1 [0154.796] wcscmp (_String1="BD21427_.GIF", _String2=".") returned 1 [0154.796] wcscmp (_String1="BD21427_.GIF", _String2="..") returned 1 [0154.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2818 [0154.796] wcscpy (in: _Dest=0x3eb2818, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.797] wcscat (in: _Dest=0x3eb2818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.797] wcscat (in: _Dest=0x3eb2818, _Source="BD21427_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" [0154.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c4 [0154.798] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf11b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2cf11b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21448_.GIF", cAlternateFileName="")) returned 1 [0154.798] wcscmp (_String1="BD21448_.GIF", _String2=".") returned 1 [0154.798] wcscmp (_String1="BD21448_.GIF", _String2="..") returned 1 [0154.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb25d8 [0154.798] wcscpy (in: _Dest=0x3eb25d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.798] wcscat (in: _Dest=0x3eb25d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.798] wcscat (in: _Dest=0x3eb25d8, _Source="BD21448_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" [0154.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb25d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c8 [0154.799] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0beba00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf0beba00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21495_.GIF", cAlternateFileName="")) returned 1 [0154.799] wcscmp (_String1="BD21495_.GIF", _String2=".") returned 1 [0154.799] wcscmp (_String1="BD21495_.GIF", _String2="..") returned 1 [0154.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2548 [0154.799] wcscpy (in: _Dest=0x3eb2548, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.799] wcscat (in: _Dest=0x3eb2548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.799] wcscat (in: _Dest=0x3eb2548, _Source="BD21495_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" [0154.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25cc [0154.801] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28c5fd00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28c5fd00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21512_.GIF", cAlternateFileName="")) returned 1 [0154.801] wcscmp (_String1="BD21512_.GIF", _String2=".") returned 1 [0154.801] wcscmp (_String1="BD21512_.GIF", _String2="..") returned 1 [0154.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb24b8 [0154.801] wcscpy (in: _Dest=0x3eb24b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.801] wcscat (in: _Dest=0x3eb24b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.801] wcscat (in: _Dest=0x3eb24b8, _Source="BD21512_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" [0154.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb24b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d0 [0154.802] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f2400, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x527f2400, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x24e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21527_.GIF", cAlternateFileName="")) returned 1 [0154.802] wcscmp (_String1="BD21527_.GIF", _String2=".") returned 1 [0154.802] wcscmp (_String1="BD21527_.GIF", _String2="..") returned 1 [0154.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2398 [0154.802] wcscpy (in: _Dest=0x3eb2398, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.802] wcscat (in: _Dest=0x3eb2398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.802] wcscat (in: _Dest=0x3eb2398, _Source="BD21527_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" [0154.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0154.803] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaab62600, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd988d10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaab62600, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21548_.GIF", cAlternateFileName="")) returned 1 [0155.292] wcscmp (_String1="BD21548_.GIF", _String2=".") returned 1 [0155.292] wcscmp (_String1="BD21548_.GIF", _String2="..") returned 1 [0155.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1f88 [0155.293] wcscpy (in: _Dest=0x3df1f88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.293] wcscat (in: _Dest=0x3df1f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.293] wcscat (in: _Dest=0x3df1f88, _Source="BD21548_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" [0156.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df1f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0156.394] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe708ce00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfc86d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe708ce00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115855.GIF", cAlternateFileName="")) returned 1 [0156.394] wcscmp (_String1="J0115855.GIF", _String2=".") returned 1 [0156.394] wcscmp (_String1="J0115855.GIF", _String2="..") returned 1 [0156.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2038 [0156.394] wcscpy (in: _Dest=0x3eb2038, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0156.394] wcscat (in: _Dest=0x3eb2038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0156.394] wcscat (in: _Dest=0x3eb2038, _Source="J0115855.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" [0156.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2990 [0156.395] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe708ce00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfc86d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe708ce00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115856.GIF", cAlternateFileName="")) returned 1 [0156.395] wcscmp (_String1="J0115856.GIF", _String2=".") returned 1 [0156.395] wcscmp (_String1="J0115856.GIF", _String2="..") returned 1 [0156.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354ab0 [0156.396] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0156.396] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0156.396] wcscat (in: _Dest=0x354ab0, _Source="J0115856.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" [0156.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2994 [0156.397] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf556ea00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf556ea00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115875.GIF", cAlternateFileName="")) returned 1 [0156.397] wcscmp (_String1="J0115875.GIF", _String2=".") returned 1 [0156.397] wcscmp (_String1="J0115875.GIF", _String2="..") returned 1 [0156.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355290 [0156.397] wcscpy (in: _Dest=0x355290, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0156.397] wcscat (in: _Dest=0x355290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0156.397] wcscat (in: _Dest=0x355290, _Source="J0115875.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" [0156.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2998 [0156.399] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf556ea00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf556ea00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115876.GIF", cAlternateFileName="")) returned 1 [0156.399] wcscmp (_String1="J0115876.GIF", _String2=".") returned 1 [0156.399] wcscmp (_String1="J0115876.GIF", _String2="..") returned 1 [0156.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355dd0 [0156.399] wcscpy (in: _Dest=0x355dd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0156.399] wcscat (in: _Dest=0x355dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0156.399] wcscat (in: _Dest=0x355dd0, _Source="J0115876.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" [0156.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x299c [0156.401] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x3798, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 1 [0156.401] wcscmp (_String1="LINES.DLL", _String2=".") returned 1 [0156.401] wcscmp (_String1="LINES.DLL", _String2="..") returned 1 [0156.401] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x3798, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 0 [0158.629] FindClose (in: hFindFile=0x3f37558 | out: hFindFile=0x3f37558) returned 1 [0161.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ee0) returned 1 [0161.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a858) returned 1 [0161.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 Thread: id = 1487 os_tid = 0x1198 [0145.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw")) returned 0x20 [0147.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW", dwFileAttributes=0x20) returned 0 [0147.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.001] GetLastError () returned 0x5 [0147.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW", dwFileAttributes=0x20) returned 0 [0147.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 1488 os_tid = 0x14a8 [0145.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg")) returned 0x20 [0147.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.159] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.160] GetLastError () returned 0x5 [0147.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bd90) returned 1 Thread: id = 1489 os_tid = 0x11a0 [0145.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg")) returned 0x20 [0147.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.157] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.157] GetLastError () returned 0x5 [0147.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 Thread: id = 1490 os_tid = 0x11a4 [0145.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg")) returned 0x20 [0147.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.155] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.155] GetLastError () returned 0x5 [0147.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a830) returned 1 Thread: id = 1491 os_tid = 0x14ac [0145.223] GetFileAttributesW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml")) returned 0x2020 [0147.152] SetFileAttributesW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x20) returned 0 [0147.153] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.153] GetLastError () returned 0x5 [0147.153] SetFileAttributesW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x2020) returned 0 [0147.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39fc8) returned 1 Thread: id = 1492 os_tid = 0x14b4 [0145.223] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d")) returned 0x2026 [0146.999] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x20) returned 0 [0146.999] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.999] GetLastError () returned 0x5 [0146.999] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x2026) returned 0 [0146.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 Thread: id = 1493 os_tid = 0x134c [0145.223] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w")) returned 0x2026 [0146.997] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x20) returned 0 [0146.997] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.997] GetLastError () returned 0x5 [0146.997] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x2026) returned 0 [0146.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a8b8) returned 1 Thread: id = 1494 os_tid = 0x14b8 [0145.225] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w")) returned 0x2026 [0146.994] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x20) returned 0 [0146.995] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.995] GetLastError () returned 0x5 [0146.995] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x2026) returned 0 [0146.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a958) returned 1 Thread: id = 1495 os_tid = 0x1358 [0145.225] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h")) returned 0x2026 [0146.993] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x20) returned 0 [0146.993] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.993] GetLastError () returned 0x5 [0146.993] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x2026) returned 0 [0146.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1b0) returned 1 Thread: id = 1496 os_tid = 0x14bc [0145.226] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d")) returned 0x2026 [0146.991] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x20) returned 0 [0146.991] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.991] GetLastError () returned 0x5 [0146.991] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x2026) returned 0 [0146.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a9f8) returned 1 Thread: id = 1497 os_tid = 0x14c0 [0145.226] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck")) returned 0x2026 [0147.150] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0147.151] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.151] GetLastError () returned 0x5 [0147.151] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x2026) returned 0 [0147.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aa98) returned 1 Thread: id = 1498 os_tid = 0x814 [0145.227] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q")) returned 0x2026 [0147.148] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x20) returned 0 [0147.149] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.149] GetLastError () returned 0x5 [0147.149] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x2026) returned 0 [0147.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 Thread: id = 1499 os_tid = 0x14c4 [0145.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.dan")) returned 0x20 [0149.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", dwFileAttributes=0x20) returned 0 [0149.385] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.385] GetLastError () returned 0x5 [0149.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", dwFileAttributes=0x20) returned 0 [0149.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1978) returned 1 Thread: id = 1500 os_tid = 0x14c8 [0145.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.deu")) returned 0x20 [0149.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", dwFileAttributes=0x20) returned 0 [0149.721] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.721] GetLastError () returned 0x5 [0149.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", dwFileAttributes=0x20) returned 0 [0149.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35400) returned 1 Thread: id = 1501 os_tid = 0x834 [0145.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.esp")) returned 0x20 [0149.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", dwFileAttributes=0x20) returned 0 [0149.722] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.723] GetLastError () returned 0x5 [0149.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", dwFileAttributes=0x20) returned 0 [0149.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f357f0) returned 1 Thread: id = 1502 os_tid = 0x14cc [0145.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.euq")) returned 0x20 [0149.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", dwFileAttributes=0x20) returned 0 [0149.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.703] GetLastError () returned 0x5 [0149.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", dwFileAttributes=0x20) returned 0 [0149.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f348c0) returned 1 Thread: id = 1503 os_tid = 0x14d0 [0145.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.fra")) returned 0x20 [0149.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", dwFileAttributes=0x20) returned 0 [0149.701] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.701] GetLastError () returned 0x5 [0149.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", dwFileAttributes=0x20) returned 0 [0149.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f351c0) returned 1 Thread: id = 1504 os_tid = 0x14d4 [0145.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv")) returned 0x20 [0149.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", dwFileAttributes=0x20) returned 0 [0149.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.708] GetLastError () returned 0x5 [0149.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", dwFileAttributes=0x20) returned 0 [0149.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35ac0) returned 1 Thread: id = 1505 os_tid = 0x14d8 [0145.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hun")) returned 0x20 [0149.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN", dwFileAttributes=0x20) returned 0 [0149.709] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.709] GetLastError () returned 0x5 [0149.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN", dwFileAttributes=0x20) returned 0 [0149.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1bb8) returned 1 Thread: id = 1506 os_tid = 0x884 [0145.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ita")) returned 0x20 [0149.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA", dwFileAttributes=0x20) returned 0 [0149.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.700] GetLastError () returned 0x5 [0149.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA", dwFileAttributes=0x20) returned 0 [0149.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2158) returned 1 Thread: id = 1507 os_tid = 0x14dc [0145.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn")) returned 0x20 [0149.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN", dwFileAttributes=0x20) returned 0 [0149.698] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.698] GetLastError () returned 0x5 [0149.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN", dwFileAttributes=0x20) returned 0 [0149.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21e8) returned 1 Thread: id = 1508 os_tid = 0x11d0 [0145.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.kor")) returned 0x20 [0149.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR", dwFileAttributes=0x20) returned 0 [0149.710] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.711] GetLastError () returned 0x5 [0149.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR", dwFileAttributes=0x20) returned 0 [0149.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2278) returned 1 Thread: id = 1509 os_tid = 0x14e0 [0145.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nld")) returned 0x20 [0149.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD", dwFileAttributes=0x20) returned 0 [0149.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.712] GetLastError () returned 0x5 [0149.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD", dwFileAttributes=0x20) returned 0 [0149.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2308) returned 1 Thread: id = 1510 os_tid = 0x14e8 [0145.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nor")) returned 0x20 [0149.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR", dwFileAttributes=0x20) returned 0 [0149.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.713] GetLastError () returned 0x5 [0149.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR", dwFileAttributes=0x20) returned 0 [0149.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2398) returned 1 Thread: id = 1511 os_tid = 0x14f0 [0145.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.pol")) returned 0x20 [0149.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL", dwFileAttributes=0x20) returned 0 [0149.388] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.388] GetLastError () returned 0x5 [0149.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL", dwFileAttributes=0x20) returned 0 [0149.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2428) returned 1 Thread: id = 1512 os_tid = 0x14f4 [0145.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb")) returned 0x20 [0149.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB", dwFileAttributes=0x20) returned 0 [0149.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.715] GetLastError () returned 0x5 [0149.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB", dwFileAttributes=0x20) returned 0 [0149.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb24b8) returned 1 Thread: id = 1513 os_tid = 0x11f8 [0145.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rum")) returned 0x20 [0149.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM", dwFileAttributes=0x20) returned 0 [0149.716] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.716] GetLastError () returned 0x5 [0149.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM", dwFileAttributes=0x20) returned 0 [0149.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2548) returned 1 Thread: id = 1514 os_tid = 0x136c [0145.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rus")) returned 0x20 [0149.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS", dwFileAttributes=0x20) returned 0 [0149.717] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.717] GetLastError () returned 0x5 [0149.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS", dwFileAttributes=0x20) returned 0 [0149.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb25d8) returned 1 Thread: id = 1515 os_tid = 0x1370 [0145.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sky")) returned 0x20 [0149.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY", dwFileAttributes=0x20) returned 0 [0149.719] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.719] GetLastError () returned 0x5 [0149.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY", dwFileAttributes=0x20) returned 0 [0149.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 Thread: id = 1516 os_tid = 0x1378 [0145.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.slv")) returned 0x20 [0149.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV", dwFileAttributes=0x20) returned 0 [0149.387] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.387] GetLastError () returned 0x5 [0149.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV", dwFileAttributes=0x20) returned 0 [0149.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb26f8) returned 1 Thread: id = 1517 os_tid = 0x137c [0145.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.suo")) returned 0x20 [0149.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO", dwFileAttributes=0x20) returned 0 [0149.706] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.706] GetLastError () returned 0x5 [0149.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO", dwFileAttributes=0x20) returned 0 [0149.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2788) returned 1 Thread: id = 1518 os_tid = 0x11fc [0145.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sve")) returned 0x20 [0149.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", dwFileAttributes=0x20) returned 0 [0149.720] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.720] GetLastError () returned 0x5 [0149.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", dwFileAttributes=0x20) returned 0 [0149.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2818) returned 1 Thread: id = 1519 os_tid = 0x1208 [0145.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.tur")) returned 0x20 [0149.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", dwFileAttributes=0x20) returned 0 [0149.704] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.704] GetLastError () returned 0x5 [0149.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", dwFileAttributes=0x20) returned 0 [0149.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28a8) returned 1 Thread: id = 1520 os_tid = 0x120c [0147.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr")) returned 0x20 [0149.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", dwFileAttributes=0x20) returned 0 [0149.724] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.724] GetLastError () returned 0x5 [0149.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", dwFileAttributes=0x20) returned 0 [0149.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2938) returned 1 Thread: id = 1521 os_tid = 0x14f8 [0147.647] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn")) returned 0x2022 [0150.087] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0150.087] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.087] GetLastError () returned 0x5 [0150.087] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0150.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24340) returned 1 Thread: id = 1522 os_tid = 0x1504 [0147.648] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn")) returned 0x2022 [0150.091] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0150.094] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.102] GetLastError () returned 0x5 [0150.102] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0150.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 1523 os_tid = 0x138c [0147.648] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn")) returned 0x2022 [0149.693] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.694] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.694] GetLastError () returned 0x5 [0149.694] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831acd8) returned 1 Thread: id = 1524 os_tid = 0x1220 [0147.649] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn")) returned 0x2022 [0148.513] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0148.513] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.695] GetLastError () returned 0x5 [0149.695] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 Thread: id = 1525 os_tid = 0x1228 [0147.649] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl")) returned 0x2022 [0150.083] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x20) returned 0 [0150.084] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.084] GetLastError () returned 0x5 [0150.084] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x2022) returned 0 [0150.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e890) returned 1 Thread: id = 1526 os_tid = 0x122c [0147.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39fc8 [0147.650] wcscpy (in: _Dest=0x3f39fc8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" [0147.650] wcscat (in: _Dest=0x3f39fc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\" [0147.650] wcscat (in: _Dest=0x3f39fc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\*" [0147.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0147.650] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80997d0 [0147.651] wcscmp (_String1=".", _String2=".") returned 0 [0147.651] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.651] wcscmp (_String1="..", _String2=".") returned 1 [0147.651] wcscmp (_String1="..", _String2="..") returned 0 [0147.651] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0147.651] wcscmp (_String1="10.0", _String2=".") returned 1 [0147.651] wcscmp (_String1="10.0", _String2="..") returned 1 [0147.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b4d8 [0147.651] wcscpy (in: _Dest=0x3f0b4d8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" [0147.651] wcscat (in: _Dest=0x3f0b4d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\" [0147.651] wcscat (in: _Dest=0x3f0b4d8, _Source="10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0151.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f0b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4 [0151.917] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0151.917] FindClose (in: hFindFile=0x80997d0 | out: hFindFile=0x80997d0) returned 1 [0151.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0151.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39fc8) returned 1 [0151.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c4d0) returned 1 Thread: id = 1527 os_tid = 0x1230 [0147.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0c1f8 [0147.652] wcscpy (in: _Dest=0x3f0c1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" [0147.652] wcscat (in: _Dest=0x3f0c1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\" [0147.652] wcscat (in: _Dest=0x3f0c1f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\*" [0147.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0147.652] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098950 [0147.653] wcscmp (_String1=".", _String2=".") returned 0 [0147.653] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.653] wcscmp (_String1="..", _String2=".") returned 1 [0147.653] wcscmp (_String1="..", _String2="..") returned 0 [0147.653] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0147.653] wcscmp (_String1="Dictionaries", _String2=".") returned 1 [0147.653] wcscmp (_String1="Dictionaries", _String2="..") returned 1 [0147.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35760 [0147.653] wcscpy (in: _Dest=0x3f35760, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" [0147.653] wcscat (in: _Dest=0x3f35760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\" [0147.654] wcscat (in: _Dest=0x3f35760, _Source="Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" [0148.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f35760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0148.885] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0148.885] FindClose (in: hFindFile=0x8098950 | out: hFindFile=0x8098950) returned 1 [0148.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0148.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c1f8) returned 1 [0148.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33438) returned 1 Thread: id = 1528 os_tid = 0x1234 [0147.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3336a8 [0147.657] wcscpy (in: _Dest=0x3336a8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0147.657] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0147.657] wcscat (in: _Dest=0x3336a8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" [0147.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0147.657] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0147.659] wcscmp (_String1=".", _String2=".") returned 0 [0147.659] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.659] wcscmp (_String1="..", _String2=".") returned 1 [0147.659] wcscmp (_String1="..", _String2="..") returned 0 [0147.659] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0147.659] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0147.659] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0147.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e64438 [0147.659] wcscpy (in: _Dest=0x3e64438, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0147.659] wcscat (in: _Dest=0x3e64438, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0147.660] wcscat (in: _Dest=0x3e64438, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" [0148.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0148.887] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0148.887] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0148.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0148.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 [0148.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 1529 os_tid = 0xb84 [0147.661] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20 [0148.446] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0148.446] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.447] GetLastError () returned 0x5 [0148.447] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0148.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 1530 os_tid = 0x1238 [0147.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0b730 [0147.662] wcscpy (in: _Dest=0x3f0b730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0147.662] wcscat (in: _Dest=0x3f0b730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0147.662] wcscat (in: _Dest=0x3f0b730, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*" [0147.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0147.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb80ec00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc86c340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc86c340, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0149.291] wcscmp (_String1=".", _String2=".") returned 0 [0149.291] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb80ec00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc86c340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc86c340, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.291] wcscmp (_String1="..", _String2=".") returned 1 [0149.292] wcscmp (_String1="..", _String2="..") returned 0 [0149.292] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeFanHeitiStd-Bold.otf", cAlternateFileName="ADOBEF~1.OTF")) returned 1 [0149.292] wcscmp (_String1="AdobeFanHeitiStd-Bold.otf", _String2=".") returned 1 [0149.302] wcscmp (_String1="AdobeFanHeitiStd-Bold.otf", _String2="..") returned 1 [0149.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81874c0 [0149.302] wcscpy (in: _Dest=0x81874c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0149.302] wcscat (in: _Dest=0x81874c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0149.302] wcscat (in: _Dest=0x81874c0, _Source="AdobeFanHeitiStd-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" [0154.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81874c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb4 [0154.017] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb2e8e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c0638, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeGothicStd-Bold.otf", cAlternateFileName="ADOBEG~1.OTF")) returned 1 [0154.017] wcscmp (_String1="AdobeGothicStd-Bold.otf", _String2=".") returned 1 [0154.017] wcscmp (_String1="AdobeGothicStd-Bold.otf", _String2="..") returned 1 [0154.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819c398 [0154.017] wcscpy (in: _Dest=0x819c398, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0154.017] wcscat (in: _Dest=0x819c398, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0154.017] wcscat (in: _Dest=0x819c398, _Source="AdobeGothicStd-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" [0154.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0154.018] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbd43c20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbb27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHeitiStd-Regular.otf", cAlternateFileName="ADOBEH~1.OTF")) returned 1 [0154.018] wcscmp (_String1="AdobeHeitiStd-Regular.otf", _String2=".") returned 1 [0154.018] wcscmp (_String1="AdobeHeitiStd-Regular.otf", _String2="..") returned 1 [0154.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81872c8 [0154.018] wcscpy (in: _Dest=0x81872c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0154.018] wcscat (in: _Dest=0x81872c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0154.018] wcscat (in: _Dest=0x81872c8, _Source="AdobeHeitiStd-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" [0154.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81872c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0154.019] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc8461e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9b3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMingStd-Light.otf", cAlternateFileName="ADOBEM~2.OTF")) returned 1 [0154.019] wcscmp (_String1="AdobeMingStd-Light.otf", _String2=".") returned 1 [0154.019] wcscmp (_String1="AdobeMingStd-Light.otf", _String2="..") returned 1 [0154.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7378 [0154.020] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0154.020] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0154.020] wcscat (in: _Dest=0x2c7378, _Source="AdobeMingStd-Light.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" [0154.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0154.021] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbae2620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e93f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMyungjoStd-Medium.otf", cAlternateFileName="ADOBEM~1.OTF")) returned 1 [0154.021] wcscmp (_String1="AdobeMyungjoStd-Medium.otf", _String2=".") returned 1 [0154.021] wcscmp (_String1="AdobeMyungjoStd-Medium.otf", _String2="..") returned 1 [0154.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187220 [0154.021] wcscpy (in: _Dest=0x8187220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0154.021] wcscat (in: _Dest=0x8187220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0154.021] wcscat (in: _Dest=0x8187220, _Source="AdobeMyungjoStd-Medium.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" [0154.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0154.022] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbec09e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xedd564, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSongStd-Light.otf", cAlternateFileName="ADOBES~1.OTF")) returned 1 [0154.022] wcscmp (_String1="AdobeSongStd-Light.otf", _String2=".") returned 1 [0154.022] wcscmp (_String1="AdobeSongStd-Light.otf", _String2="..") returned 1 [0154.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c72d8 [0154.022] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0154.022] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0154.022] wcscat (in: _Dest=0x2c72d8, _Source="AdobeSongStd-Light.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" [0154.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0154.023] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb8a7180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozGoPr6N-Medium.otf", cAlternateFileName="KOZGOP~1.OTF")) returned 1 [0154.023] wcscmp (_String1="KozGoPr6N-Medium.otf", _String2=".") returned 1 [0154.023] wcscmp (_String1="KozGoPr6N-Medium.otf", _String2="..") returned 1 [0154.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7558 [0154.023] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0154.023] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0154.023] wcscat (in: _Dest=0x2c7558, _Source="KozGoPr6N-Medium.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" [0154.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0154.024] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 1 [0154.024] wcscmp (_String1="KozMinPr6N-Regular.otf", _String2=".") returned 1 [0154.024] wcscmp (_String1="KozMinPr6N-Regular.otf", _String2="..") returned 1 [0154.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7698 [0154.024] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0154.024] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0154.024] wcscat (in: _Dest=0x2c7698, _Source="KozMinPr6N-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" [0154.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0154.025] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 0 [0154.025] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0154.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0154.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0154.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39628) returned 1 Thread: id = 1531 os_tid = 0x1240 [0147.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a2d8 [0147.665] wcscpy (in: _Dest=0x3f3a2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0147.665] wcscat (in: _Dest=0x3f3a2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0147.665] wcscat (in: _Dest=0x3f3a2d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\*" [0147.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0147.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc7619a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099490 [0149.689] wcscmp (_String1=".", _String2=".") returned 0 [0149.689] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc7619a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.103] wcscmp (_String1="..", _String2=".") returned 1 [0151.103] wcscmp (_String1="..", _String2="..") returned 0 [0151.103] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="83pv-RKSJ-H", cAlternateFileName="83PV-R~1")) returned 1 [0151.103] wcscmp (_String1="83pv-RKSJ-H", _String2=".") returned 1 [0151.104] wcscmp (_String1="83pv-RKSJ-H", _String2="..") returned 1 [0151.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ec50 [0151.104] wcscpy (in: _Dest=0x3e1ec50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0151.104] wcscat (in: _Dest=0x3e1ec50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0151.104] wcscat (in: _Dest=0x3e1ec50, _Source="83pv-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" [0153.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d0 [0153.829] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-H", cAlternateFileName="90MS-R~1")) returned 1 [0153.829] wcscmp (_String1="90ms-RKSJ-H", _String2=".") returned 1 [0153.829] wcscmp (_String1="90ms-RKSJ-H", _String2="..") returned 1 [0153.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2ffc8 [0153.829] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.829] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.829] wcscat (in: _Dest=0x3f2ffc8, _Source="90ms-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" [0153.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0153.830] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-UCS2", cAlternateFileName="90MS-R~2")) returned 1 [0153.830] wcscmp (_String1="90ms-RKSJ-UCS2", _String2=".") returned 1 [0153.830] wcscmp (_String1="90ms-RKSJ-UCS2", _String2="..") returned 1 [0153.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31040 [0153.831] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.831] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.831] wcscat (in: _Dest=0x3f31040, _Source="90ms-RKSJ-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" [0153.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0153.832] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-V", cAlternateFileName="90MS-R~3")) returned 1 [0153.832] wcscmp (_String1="90ms-RKSJ-V", _String2=".") returned 1 [0153.832] wcscmp (_String1="90ms-RKSJ-V", _String2="..") returned 1 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2f4a0 [0153.832] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.832] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.832] wcscat (in: _Dest=0x3f2f4a0, _Source="90ms-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" [0153.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0153.833] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-H", cAlternateFileName="90MSP-~1")) returned 1 [0153.833] wcscmp (_String1="90msp-RKSJ-H", _String2=".") returned 1 [0153.833] wcscmp (_String1="90msp-RKSJ-H", _String2="..") returned 1 [0153.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30628 [0153.833] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.833] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.833] wcscat (in: _Dest=0x3f30628, _Source="90msp-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" [0153.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0153.834] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-V", cAlternateFileName="90MSP-~2")) returned 1 [0153.834] wcscmp (_String1="90msp-RKSJ-V", _String2=".") returned 1 [0153.834] wcscmp (_String1="90msp-RKSJ-V", _String2="..") returned 1 [0153.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f308d0 [0153.834] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.834] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.834] wcscat (in: _Dest=0x3f308d0, _Source="90msp-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" [0153.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0153.835] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x202f, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-H", cAlternateFileName="90PV-R~1")) returned 1 [0153.835] wcscmp (_String1="90pv-RKSJ-H", _String2=".") returned 1 [0153.835] wcscmp (_String1="90pv-RKSJ-H", _String2="..") returned 1 [0153.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30ea8 [0153.835] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.835] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.835] wcscat (in: _Dest=0x3f30ea8, _Source="90pv-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" [0153.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0153.836] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2", cAlternateFileName="90PV-R~2")) returned 1 [0153.836] wcscmp (_String1="90pv-RKSJ-UCS2", _String2=".") returned 1 [0153.837] wcscmp (_String1="90pv-RKSJ-UCS2", _String2="..") returned 1 [0153.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f7d0 [0153.837] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.837] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.837] wcscat (in: _Dest=0x3f2f7d0, _Source="90pv-RKSJ-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" [0153.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0153.838] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x190bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2C", cAlternateFileName="90PV-R~3")) returned 1 [0153.838] wcscmp (_String1="90pv-RKSJ-UCS2C", _String2=".") returned 1 [0153.838] wcscmp (_String1="90pv-RKSJ-UCS2C", _String2="..") returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2668 [0153.838] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.838] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.838] wcscat (in: _Dest=0x3eb2668, _Source="90pv-RKSJ-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" [0153.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0153.839] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3de5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-H", cAlternateFileName="ADD-RK~1")) returned 1 [0153.839] wcscmp (_String1="Add-RKSJ-H", _String2=".") returned 1 [0153.839] wcscmp (_String1="Add-RKSJ-H", _String2="..") returned 1 [0153.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4108 [0153.839] wcscpy (in: _Dest=0x3dc4108, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.839] wcscat (in: _Dest=0x3dc4108, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.839] wcscat (in: _Dest=0x3dc4108, _Source="Add-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" [0153.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0153.840] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-V", cAlternateFileName="ADD-RK~2")) returned 1 [0153.840] wcscmp (_String1="Add-RKSJ-V", _String2=".") returned 1 [0153.840] wcscmp (_String1="Add-RKSJ-V", _String2="..") returned 1 [0153.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5008 [0153.840] wcscpy (in: _Dest=0x3dc5008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.840] wcscat (in: _Dest=0x3dc5008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.840] wcscat (in: _Dest=0x3dc5008, _Source="Add-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" [0153.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0153.841] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-0", cAlternateFileName="ADFD7E~1")) returned 1 [0153.841] wcscmp (_String1="Adobe-CNS1-0", _String2=".") returned 1 [0153.841] wcscmp (_String1="Adobe-CNS1-0", _String2="..") returned 1 [0153.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30b78 [0153.841] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.841] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.841] wcscat (in: _Dest=0x3f30b78, _Source="Adobe-CNS1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" [0153.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0153.842] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-1", cAlternateFileName="AD1410~1")) returned 1 [0153.842] wcscmp (_String1="Adobe-CNS1-1", _String2=".") returned 1 [0153.842] wcscmp (_String1="Adobe-CNS1-1", _String2="..") returned 1 [0153.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f302f8 [0153.842] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.842] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.843] wcscat (in: _Dest=0x3f302f8, _Source="Adobe-CNS1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" [0153.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200 [0153.843] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x108f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-2", cAlternateFileName="ADC905~1")) returned 1 [0153.843] wcscmp (_String1="Adobe-CNS1-2", _String2=".") returned 1 [0153.844] wcscmp (_String1="Adobe-CNS1-2", _String2="..") returned 1 [0153.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f312e8 [0153.844] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.844] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.844] wcscat (in: _Dest=0x3f312e8, _Source="Adobe-CNS1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" [0153.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0153.845] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-3", cAlternateFileName="AD7FF9~1")) returned 1 [0153.845] wcscmp (_String1="Adobe-CNS1-3", _String2=".") returned 1 [0153.845] wcscmp (_String1="Adobe-CNS1-3", _String2="..") returned 1 [0153.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30c00 [0153.845] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.845] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.845] wcscat (in: _Dest=0x3f30c00, _Source="Adobe-CNS1-3" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" [0153.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208 [0153.846] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-4", cAlternateFileName="ADEA01~1")) returned 1 [0153.846] wcscmp (_String1="Adobe-CNS1-4", _String2=".") returned 1 [0153.846] wcscmp (_String1="Adobe-CNS1-4", _String2="..") returned 1 [0153.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f311d8 [0153.846] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.846] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.846] wcscat (in: _Dest=0x3f311d8, _Source="Adobe-CNS1-4" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" [0153.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0153.847] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-5", cAlternateFileName="AD351C~1")) returned 1 [0153.847] wcscmp (_String1="Adobe-CNS1-5", _String2=".") returned 1 [0153.847] wcscmp (_String1="Adobe-CNS1-5", _String2="..") returned 1 [0153.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f858 [0153.847] wcscpy (in: _Dest=0x3f2f858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.847] wcscat (in: _Dest=0x3f2f858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.847] wcscat (in: _Dest=0x3f2f858, _Source="Adobe-CNS1-5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" [0153.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2210 [0153.848] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-B5pc", cAlternateFileName="ADOBE-~1")) returned 1 [0153.848] wcscmp (_String1="Adobe-CNS1-B5pc", _String2=".") returned 1 [0153.848] wcscmp (_String1="Adobe-CNS1-B5pc", _String2="..") returned 1 [0153.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2e48 [0153.849] wcscpy (in: _Dest=0x3eb2e48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.849] wcscat (in: _Dest=0x3eb2e48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.849] wcscat (in: _Dest=0x3eb2e48, _Source="Adobe-CNS1-B5pc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" [0153.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2214 [0153.850] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-ETen-B5", cAlternateFileName="ADOBE-~2")) returned 1 [0153.850] wcscmp (_String1="Adobe-CNS1-ETen-B5", _String2=".") returned 1 [0153.850] wcscmp (_String1="Adobe-CNS1-ETen-B5", _String2="..") returned 1 [0153.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb29c8 [0153.850] wcscpy (in: _Dest=0x3eb29c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.850] wcscat (in: _Dest=0x3eb29c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.850] wcscat (in: _Dest=0x3eb29c8, _Source="Adobe-CNS1-ETen-B5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" [0153.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb29c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2218 [0153.851] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-CID", cAlternateFileName="ADOBE-~3")) returned 1 [0153.851] wcscmp (_String1="Adobe-CNS1-H-CID", _String2=".") returned 1 [0153.851] wcscmp (_String1="Adobe-CNS1-H-CID", _String2="..") returned 1 [0153.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb12b8 [0153.851] wcscpy (in: _Dest=0x3eb12b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.851] wcscat (in: _Dest=0x3eb12b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.851] wcscat (in: _Dest=0x3eb12b8, _Source="Adobe-CNS1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" [0153.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb12b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c [0153.852] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x212a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Host", cAlternateFileName="ADOBE-~4")) returned 1 [0153.852] wcscmp (_String1="Adobe-CNS1-H-Host", _String2=".") returned 1 [0153.852] wcscmp (_String1="Adobe-CNS1-H-Host", _String2="..") returned 1 [0153.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb14f8 [0153.852] wcscpy (in: _Dest=0x3eb14f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.852] wcscat (in: _Dest=0x3eb14f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.852] wcscat (in: _Dest=0x3eb14f8, _Source="Adobe-CNS1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" [0153.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb14f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2220 [0153.853] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Mac", cAlternateFileName="AD9A15~1")) returned 1 [0153.853] wcscmp (_String1="Adobe-CNS1-H-Mac", _String2=".") returned 1 [0153.853] wcscmp (_String1="Adobe-CNS1-H-Mac", _String2="..") returned 1 [0153.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1588 [0153.853] wcscpy (in: _Dest=0x3eb1588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.853] wcscat (in: _Dest=0x3eb1588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.853] wcscat (in: _Dest=0x3eb1588, _Source="Adobe-CNS1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" [0153.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2224 [0153.854] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44cc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-UCS2", cAlternateFileName="ADD444~1")) returned 1 [0153.854] wcscmp (_String1="Adobe-CNS1-UCS2", _String2=".") returned 1 [0153.854] wcscmp (_String1="Adobe-CNS1-UCS2", _String2="..") returned 1 [0153.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1e88 [0153.855] wcscpy (in: _Dest=0x3eb1e88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.855] wcscat (in: _Dest=0x3eb1e88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.855] wcscat (in: _Dest=0x3eb1e88, _Source="Adobe-CNS1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" [0153.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0153.856] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-0", cAlternateFileName="ADD8F8~1")) returned 1 [0153.856] wcscmp (_String1="Adobe-GB1-0", _String2=".") returned 1 [0153.856] wcscmp (_String1="Adobe-GB1-0", _String2="..") returned 1 [0153.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30a68 [0153.856] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.856] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.856] wcscat (in: _Dest=0x3f30a68, _Source="Adobe-GB1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" [0153.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x222c [0153.857] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-1", cAlternateFileName="AD9B16~1")) returned 1 [0153.857] wcscmp (_String1="Adobe-GB1-1", _String2=".") returned 1 [0153.857] wcscmp (_String1="Adobe-GB1-1", _String2="..") returned 1 [0153.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30c88 [0153.857] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.857] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.857] wcscat (in: _Dest=0x3f30c88, _Source="Adobe-GB1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" [0153.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0153.858] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-2", cAlternateFileName="AD411B~1")) returned 1 [0153.858] wcscmp (_String1="Adobe-GB1-2", _String2=".") returned 1 [0153.858] wcscmp (_String1="Adobe-GB1-2", _String2="..") returned 1 [0153.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30518 [0153.858] wcscpy (in: _Dest=0x3f30518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.858] wcscat (in: _Dest=0x3f30518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.858] wcscat (in: _Dest=0x3f30518, _Source="Adobe-GB1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" [0153.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0153.859] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-3", cAlternateFileName="ADF600~1")) returned 1 [0153.859] wcscmp (_String1="Adobe-GB1-3", _String2=".") returned 1 [0153.859] wcscmp (_String1="Adobe-GB1-3", _String2="..") returned 1 [0153.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2fda8 [0153.859] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.859] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.859] wcscat (in: _Dest=0x3f2fda8, _Source="Adobe-GB1-3" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" [0153.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0153.860] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-4", cAlternateFileName="AD1D91~1")) returned 1 [0153.860] wcscmp (_String1="Adobe-GB1-4", _String2=".") returned 1 [0153.860] wcscmp (_String1="Adobe-GB1-4", _String2="..") returned 1 [0153.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2f418 [0153.861] wcscpy (in: _Dest=0x3f2f418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.861] wcscat (in: _Dest=0x3f2f418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.861] wcscat (in: _Dest=0x3f2f418, _Source="Adobe-GB1-4" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" [0153.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0153.861] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-5", cAlternateFileName="ADC296~1")) returned 1 [0153.861] wcscmp (_String1="Adobe-GB1-5", _String2=".") returned 1 [0153.861] wcscmp (_String1="Adobe-GB1-5", _String2="..") returned 1 [0153.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2f968 [0153.862] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.862] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.862] wcscat (in: _Dest=0x3f2f968, _Source="Adobe-GB1-5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" [0153.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0153.863] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBK-EUC", cAlternateFileName="ADFBCB~1")) returned 1 [0153.863] wcscmp (_String1="Adobe-GB1-GBK-EUC", _String2=".") returned 1 [0153.863] wcscmp (_String1="Adobe-GB1-GBK-EUC", _String2="..") returned 1 [0153.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1618 [0153.863] wcscpy (in: _Dest=0x3eb1618, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.863] wcscat (in: _Dest=0x3eb1618, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.863] wcscat (in: _Dest=0x3eb1618, _Source="Adobe-GB1-GBK-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" [0153.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0153.864] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBpc-EUC", cAlternateFileName="AD2E3A~1")) returned 1 [0153.864] wcscmp (_String1="Adobe-GB1-GBpc-EUC", _String2=".") returned 1 [0153.864] wcscmp (_String1="Adobe-GB1-GBpc-EUC", _String2="..") returned 1 [0153.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1858 [0153.864] wcscpy (in: _Dest=0x3eb1858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.864] wcscat (in: _Dest=0x3eb1858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0153.864] wcscat (in: _Dest=0x3eb1858, _Source="Adobe-GB1-GBpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" [0153.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0154.229] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-CID", cAlternateFileName="AD43DF~1")) returned 1 [0154.229] wcscmp (_String1="Adobe-GB1-H-CID", _String2=".") returned 1 [0154.229] wcscmp (_String1="Adobe-GB1-H-CID", _String2="..") returned 1 [0154.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb16a8 [0154.230] wcscpy (in: _Dest=0x3eb16a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0154.230] wcscat (in: _Dest=0x3eb16a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0154.230] wcscat (in: _Dest=0x3eb16a8, _Source="Adobe-GB1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" [0156.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb16a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0156.485] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x170e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Host", cAlternateFileName="AD3180~1")) returned 1 [0158.516] wcscmp (_String1="Adobe-GB1-H-Host", _String2=".") returned 1 [0158.516] wcscmp (_String1="Adobe-GB1-H-Host", _String2="..") returned 1 [0158.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1858 [0158.516] wcscpy (in: _Dest=0x3eb1858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0158.516] wcscat (in: _Dest=0x3eb1858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0158.517] wcscat (in: _Dest=0x3eb1858, _Source="Adobe-GB1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" [0159.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host")) returned 0x20 [0159.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", dwFileAttributes=0x20) returned 0 [0159.901] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.901] GetLastError () returned 0x5 [0159.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", dwFileAttributes=0x20) returned 0 [0159.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1858) returned 1 [0159.901] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Mac", cAlternateFileName="ADAB0B~1")) returned 1 [0159.901] wcscmp (_String1="Adobe-GB1-H-Mac", _String2=".") returned 1 [0159.901] wcscmp (_String1="Adobe-GB1-H-Mac", _String2="..") returned 1 [0159.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1858 [0159.901] wcscpy (in: _Dest=0x3eb1858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.901] wcscat (in: _Dest=0x3eb1858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.901] wcscat (in: _Dest=0x3eb1858, _Source="Adobe-GB1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" [0159.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac")) returned 0x20 [0159.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", dwFileAttributes=0x20) returned 0 [0159.902] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.902] GetLastError () returned 0x5 [0159.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", dwFileAttributes=0x20) returned 0 [0159.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1858) returned 1 [0159.902] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bb8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-UCS2", cAlternateFileName="AD0115~1")) returned 1 [0159.902] wcscmp (_String1="Adobe-GB1-UCS2", _String2=".") returned 1 [0159.902] wcscmp (_String1="Adobe-GB1-UCS2", _String2="..") returned 1 [0159.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.902] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.902] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.902] wcscat (in: _Dest=0x81be458, _Source="Adobe-GB1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" [0159.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2")) returned 0x20 [0159.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", dwFileAttributes=0x20) returned 0 [0159.903] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.903] GetLastError () returned 0x5 [0159.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", dwFileAttributes=0x20) returned 0 [0159.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.903] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-0", cAlternateFileName="AD276E~1")) returned 1 [0159.903] wcscmp (_String1="Adobe-Japan1-0", _String2=".") returned 1 [0159.903] wcscmp (_String1="Adobe-Japan1-0", _String2="..") returned 1 [0159.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.903] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.903] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.903] wcscat (in: _Dest=0x81be458, _Source="Adobe-Japan1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" [0159.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0")) returned 0x20 [0159.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", dwFileAttributes=0x20) returned 0 [0159.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.918] GetLastError () returned 0x5 [0159.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", dwFileAttributes=0x20) returned 0 [0159.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.919] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-1", cAlternateFileName="AD4DFF~1")) returned 1 [0159.919] wcscmp (_String1="Adobe-Japan1-1", _String2=".") returned 1 [0159.919] wcscmp (_String1="Adobe-Japan1-1", _String2="..") returned 1 [0159.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.919] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.919] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.919] wcscat (in: _Dest=0x81be458, _Source="Adobe-Japan1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" [0159.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1")) returned 0x20 [0159.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", dwFileAttributes=0x20) returned 0 [0159.944] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.944] GetLastError () returned 0x5 [0159.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", dwFileAttributes=0x20) returned 0 [0159.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.944] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-2", cAlternateFileName="ADF2F4~1")) returned 1 [0159.944] wcscmp (_String1="Adobe-Japan1-2", _String2=".") returned 1 [0159.944] wcscmp (_String1="Adobe-Japan1-2", _String2="..") returned 1 [0159.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.944] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.945] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.945] wcscat (in: _Dest=0x81be458, _Source="Adobe-Japan1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" [0159.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2")) returned 0x20 [0159.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", dwFileAttributes=0x20) returned 0 [0159.945] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.945] GetLastError () returned 0x5 [0159.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", dwFileAttributes=0x20) returned 0 [0159.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.946] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-3", cAlternateFileName="ADA8E9~1")) returned 1 [0159.946] wcscmp (_String1="Adobe-Japan1-3", _String2=".") returned 1 [0159.946] wcscmp (_String1="Adobe-Japan1-3", _String2="..") returned 1 [0159.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.946] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.946] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.946] wcscat (in: _Dest=0x81be458, _Source="Adobe-Japan1-3" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" [0159.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3")) returned 0x20 [0159.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", dwFileAttributes=0x20) returned 0 [0159.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.947] GetLastError () returned 0x5 [0159.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", dwFileAttributes=0x20) returned 0 [0159.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.947] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-4", cAlternateFileName="ADCE7B~1")) returned 1 [0159.947] wcscmp (_String1="Adobe-Japan1-4", _String2=".") returned 1 [0159.947] wcscmp (_String1="Adobe-Japan1-4", _String2="..") returned 1 [0159.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.947] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.947] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.947] wcscat (in: _Dest=0x81be458, _Source="Adobe-Japan1-4" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" [0159.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4")) returned 0x20 [0159.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", dwFileAttributes=0x20) returned 0 [0159.948] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.948] GetLastError () returned 0x5 [0159.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", dwFileAttributes=0x20) returned 0 [0159.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.948] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-5", cAlternateFileName="AD7470~1")) returned 1 [0159.948] wcscmp (_String1="Adobe-Japan1-5", _String2=".") returned 1 [0159.948] wcscmp (_String1="Adobe-Japan1-5", _String2="..") returned 1 [0159.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.948] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.948] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.948] wcscat (in: _Dest=0x81be458, _Source="Adobe-Japan1-5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" [0159.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5")) returned 0x20 [0159.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", dwFileAttributes=0x20) returned 0 [0159.965] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.965] GetLastError () returned 0x5 [0159.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", dwFileAttributes=0x20) returned 0 [0159.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.965] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-6", cAlternateFileName="AD2A65~1")) returned 1 [0159.965] wcscmp (_String1="Adobe-Japan1-6", _String2=".") returned 1 [0159.965] wcscmp (_String1="Adobe-Japan1-6", _String2="..") returned 1 [0159.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.965] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.965] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.965] wcscat (in: _Dest=0x81be458, _Source="Adobe-Japan1-6" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" [0159.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6")) returned 0x20 [0159.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", dwFileAttributes=0x20) returned 0 [0159.974] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.974] GetLastError () returned 0x5 [0159.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", dwFileAttributes=0x20) returned 0 [0159.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.975] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90ms-RKSJ", cAlternateFileName="AD02A2~1")) returned 1 [0159.975] wcscmp (_String1="Adobe-Japan1-90ms-RKSJ", _String2=".") returned 1 [0159.975] wcscmp (_String1="Adobe-Japan1-90ms-RKSJ", _String2="..") returned 1 [0159.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cf48 [0159.975] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.975] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.975] wcscat (in: _Dest=0x32cf48, _Source="Adobe-Japan1-90ms-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" [0159.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj")) returned 0x20 [0159.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0159.975] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.975] GetLastError () returned 0x5 [0159.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0159.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.976] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90pv-RKSJ", cAlternateFileName="ADE5F6~1")) returned 1 [0159.976] wcscmp (_String1="Adobe-Japan1-90pv-RKSJ", _String2=".") returned 1 [0159.976] wcscmp (_String1="Adobe-Japan1-90pv-RKSJ", _String2="..") returned 1 [0159.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cf48 [0159.976] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.976] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.976] wcscat (in: _Dest=0x32cf48, _Source="Adobe-Japan1-90pv-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" [0159.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj")) returned 0x20 [0159.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0159.976] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.976] GetLastError () returned 0x5 [0159.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0159.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.976] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-CID", cAlternateFileName="AD8921~1")) returned 1 [0159.977] wcscmp (_String1="Adobe-Japan1-H-CID", _String2=".") returned 1 [0159.977] wcscmp (_String1="Adobe-Japan1-H-CID", _String2="..") returned 1 [0159.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0159.977] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.977] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.977] wcscat (in: _Dest=0x81de7b8, _Source="Adobe-Japan1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" [0159.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid")) returned 0x20 [0159.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", dwFileAttributes=0x20) returned 0 [0159.977] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.977] GetLastError () returned 0x5 [0159.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", dwFileAttributes=0x20) returned 0 [0159.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0159.977] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Host", cAlternateFileName="ADD587~1")) returned 1 [0159.977] wcscmp (_String1="Adobe-Japan1-H-Host", _String2=".") returned 1 [0159.977] wcscmp (_String1="Adobe-Japan1-H-Host", _String2="..") returned 1 [0159.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0159.978] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.978] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.978] wcscat (in: _Dest=0x32cf48, _Source="Adobe-Japan1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" [0159.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host")) returned 0x20 [0159.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", dwFileAttributes=0x20) returned 0 [0159.978] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.978] GetLastError () returned 0x5 [0159.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", dwFileAttributes=0x20) returned 0 [0159.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.978] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Mac", cAlternateFileName="ADF41D~1")) returned 1 [0159.978] wcscmp (_String1="Adobe-Japan1-H-Mac", _String2=".") returned 1 [0159.978] wcscmp (_String1="Adobe-Japan1-H-Mac", _String2="..") returned 1 [0159.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0159.979] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.979] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.979] wcscat (in: _Dest=0x81de7b8, _Source="Adobe-Japan1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" [0159.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac")) returned 0x20 [0159.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", dwFileAttributes=0x20) returned 0 [0159.985] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.985] GetLastError () returned 0x5 [0159.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", dwFileAttributes=0x20) returned 0 [0159.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0159.985] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-UCS2", cAlternateFileName="AD1CC0~1")) returned 1 [0159.985] wcscmp (_String1="Adobe-Japan1-UCS2", _String2=".") returned 1 [0159.985] wcscmp (_String1="Adobe-Japan1-UCS2", _String2="..") returned 1 [0159.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0159.985] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.985] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.985] wcscat (in: _Dest=0x81de7b8, _Source="Adobe-Japan1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" [0159.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2")) returned 0x20 [0159.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", dwFileAttributes=0x20) returned 0 [0159.986] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.986] GetLastError () returned 0x5 [0159.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", dwFileAttributes=0x20) returned 0 [0159.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0159.986] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-0", cAlternateFileName="AD0C77~1")) returned 1 [0159.986] wcscmp (_String1="Adobe-Korea1-0", _String2=".") returned 1 [0159.986] wcscmp (_String1="Adobe-Korea1-0", _String2="..") returned 1 [0159.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.986] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.986] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.986] wcscat (in: _Dest=0x81be458, _Source="Adobe-Korea1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" [0159.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0")) returned 0x20 [0159.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", dwFileAttributes=0x20) returned 0 [0159.992] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.992] GetLastError () returned 0x5 [0159.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", dwFileAttributes=0x20) returned 0 [0159.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.992] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-1", cAlternateFileName="ADE5E5~1")) returned 1 [0159.992] wcscmp (_String1="Adobe-Korea1-1", _String2=".") returned 1 [0159.992] wcscmp (_String1="Adobe-Korea1-1", _String2="..") returned 1 [0159.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.993] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.993] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.993] wcscat (in: _Dest=0x81be458, _Source="Adobe-Korea1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" [0159.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1")) returned 0x20 [0159.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", dwFileAttributes=0x20) returned 0 [0159.993] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.993] GetLastError () returned 0x5 [0159.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", dwFileAttributes=0x20) returned 0 [0159.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.995] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-2", cAlternateFileName="AD30F0~1")) returned 1 [0159.995] wcscmp (_String1="Adobe-Korea1-2", _String2=".") returned 1 [0159.995] wcscmp (_String1="Adobe-Korea1-2", _String2="..") returned 1 [0159.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0159.996] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.996] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.996] wcscat (in: _Dest=0x81be458, _Source="Adobe-Korea1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" [0159.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2")) returned 0x20 [0159.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", dwFileAttributes=0x20) returned 0 [0159.996] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.996] GetLastError () returned 0x5 [0159.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", dwFileAttributes=0x20) returned 0 [0159.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.997] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-CID", cAlternateFileName="AD15A3~1")) returned 1 [0159.997] wcscmp (_String1="Adobe-Korea1-H-CID", _String2=".") returned 1 [0159.997] wcscmp (_String1="Adobe-Korea1-H-CID", _String2="..") returned 1 [0159.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de848 [0159.997] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0159.997] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0159.997] wcscat (in: _Dest=0x81de848, _Source="Adobe-Korea1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" [0159.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid")) returned 0x20 [0160.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", dwFileAttributes=0x20) returned 0 [0160.010] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.010] GetLastError () returned 0x5 [0160.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", dwFileAttributes=0x20) returned 0 [0160.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 [0160.010] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Host", cAlternateFileName="ADCDCC~1")) returned 1 [0160.010] wcscmp (_String1="Adobe-Korea1-H-Host", _String2=".") returned 1 [0160.010] wcscmp (_String1="Adobe-Korea1-H-Host", _String2="..") returned 1 [0160.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0160.010] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0160.010] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0160.010] wcscat (in: _Dest=0x32cf48, _Source="Adobe-Korea1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" [0160.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host")) returned 0x20 [0160.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", dwFileAttributes=0x20) returned 0 [0160.011] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.011] GetLastError () returned 0x5 [0160.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", dwFileAttributes=0x20) returned 0 [0160.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0160.011] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ca3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Mac", cAlternateFileName="ADF8FD~1")) returned 1 [0160.011] wcscmp (_String1="Adobe-Korea1-H-Mac", _String2=".") returned 1 [0160.011] wcscmp (_String1="Adobe-Korea1-H-Mac", _String2="..") returned 1 [0160.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de848 [0160.011] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0160.011] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0160.011] wcscat (in: _Dest=0x81de848, _Source="Adobe-Korea1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" [0160.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac")) returned 0x20 [0160.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", dwFileAttributes=0x20) returned 0 [0160.012] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.012] GetLastError () returned 0x5 [0160.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", dwFileAttributes=0x20) returned 0 [0160.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 [0160.012] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCms-UHC", cAlternateFileName="ADF15E~1")) returned 1 [0160.012] wcscmp (_String1="Adobe-Korea1-KSCms-UHC", _String2=".") returned 1 [0160.012] wcscmp (_String1="Adobe-Korea1-KSCms-UHC", _String2="..") returned 1 [0160.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cf48 [0160.012] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0160.012] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0160.013] wcscat (in: _Dest=0x32cf48, _Source="Adobe-Korea1-KSCms-UHC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" [0160.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc")) returned 0x20 [0160.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0160.013] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.013] GetLastError () returned 0x5 [0160.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0160.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0160.014] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2cf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCpc-EUC", cAlternateFileName="AD662F~1")) returned 1 [0160.014] wcscmp (_String1="Adobe-Korea1-KSCpc-EUC", _String2=".") returned 1 [0160.014] wcscmp (_String1="Adobe-Korea1-KSCpc-EUC", _String2="..") returned 1 [0160.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cf48 [0160.014] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0160.014] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0160.014] wcscat (in: _Dest=0x32cf48, _Source="Adobe-Korea1-KSCpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" [0160.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc")) returned 0x20 [0160.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0160.034] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.034] GetLastError () returned 0x5 [0160.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0160.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0160.034] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-UCS2", cAlternateFileName="AD8F7C~1")) returned 1 [0160.035] wcscmp (_String1="Adobe-Korea1-UCS2", _String2=".") returned 1 [0160.035] wcscmp (_String1="Adobe-Korea1-UCS2", _String2="..") returned 1 [0160.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de848 [0160.035] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0160.035] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0160.035] wcscat (in: _Dest=0x81de848, _Source="Adobe-Korea1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" [0160.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2")) returned 0x20 [0160.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", dwFileAttributes=0x20) returned 0 [0160.035] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.035] GetLastError () returned 0x5 [0160.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", dwFileAttributes=0x20) returned 0 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 [0160.035] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-H", cAlternateFileName="")) returned 1 [0160.035] wcscmp (_String1="B5pc-H", _String2=".") returned 1 [0160.036] wcscmp (_String1="B5pc-H", _String2="..") returned 1 [0160.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32778 [0160.036] wcscpy (in: _Dest=0x3f32778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0160.036] wcscat (in: _Dest=0x3f32778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0160.036] wcscat (in: _Dest=0x3f32778, _Source="B5pc-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" [0160.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h")) returned 0x20 [0160.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", dwFileAttributes=0x20) returned 0 [0160.036] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.036] GetLastError () returned 0x5 [0160.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", dwFileAttributes=0x20) returned 0 [0160.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0160.036] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2", cAlternateFileName="B5PC-U~1")) returned 1 [0160.036] wcscmp (_String1="B5pc-UCS2", _String2=".") returned 1 [0160.036] wcscmp (_String1="B5pc-UCS2", _String2="..") returned 1 [0160.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4188 [0160.037] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0160.037] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0160.037] wcscat (in: _Dest=0x3dc4188, _Source="B5pc-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" [0160.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2")) returned 0x20 [0160.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", dwFileAttributes=0x20) returned 0 [0160.037] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.037] GetLastError () returned 0x5 [0160.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", dwFileAttributes=0x20) returned 0 [0160.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.037] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x457be, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2C", cAlternateFileName="B5PC-U~2")) returned 1 [0160.037] wcscmp (_String1="B5pc-UCS2C", _String2=".") returned 1 [0160.037] wcscmp (_String1="B5pc-UCS2C", _String2="..") returned 1 [0160.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4188 [0160.038] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0160.038] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0160.038] wcscat (in: _Dest=0x3dc4188, _Source="B5pc-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" [0160.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c")) returned 0x20 [0160.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", dwFileAttributes=0x20) returned 0 [0160.038] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.038] GetLastError () returned 0x5 [0160.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", dwFileAttributes=0x20) returned 0 [0160.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 [0160.038] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-V", cAlternateFileName="")) returned 1 [0160.038] wcscmp (_String1="B5pc-V", _String2=".") returned 1 [0160.038] wcscmp (_String1="B5pc-V", _String2="..") returned 1 [0160.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32778 [0160.039] wcscpy (in: _Dest=0x3f32778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0160.039] wcscat (in: _Dest=0x3f32778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0160.039] wcscat (in: _Dest=0x3f32778, _Source="B5pc-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" [0160.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v")) returned 0x20 [0162.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", dwFileAttributes=0x20) returned 0 [0162.212] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.212] GetLastError () returned 0x5 [0162.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", dwFileAttributes=0x20) returned 0 [0162.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0162.213] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3205, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-H", cAlternateFileName="CNS-EU~1")) returned 1 [0162.213] wcscmp (_String1="CNS-EUC-H", _String2=".") returned 1 [0162.213] wcscmp (_String1="CNS-EUC-H", _String2="..") returned 1 [0162.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831a858 [0162.213] wcscpy (in: _Dest=0x831a858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.213] wcscat (in: _Dest=0x831a858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.213] wcscat (in: _Dest=0x831a858, _Source="CNS-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" [0167.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0167.280] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x363d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-V", cAlternateFileName="CNS-EU~2")) returned 1 [0167.280] wcscmp (_String1="CNS-EUC-V", _String2=".") returned 1 [0167.280] wcscmp (_String1="CNS-EUC-V", _String2="..") returned 1 [0167.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24240 [0167.280] wcscpy (in: _Dest=0x3e24240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.281] wcscat (in: _Dest=0x3e24240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.281] wcscat (in: _Dest=0x3e24240, _Source="CNS-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" [0167.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0167.285] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-H", cAlternateFileName="ETEN-B~1")) returned 1 [0167.290] wcscmp (_String1="ETen-B5-H", _String2=".") returned 1 [0167.290] wcscmp (_String1="ETen-B5-H", _String2="..") returned 1 [0167.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24140 [0167.290] wcscpy (in: _Dest=0x3e24140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.290] wcscat (in: _Dest=0x3e24140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.290] wcscat (in: _Dest=0x3e24140, _Source="ETen-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" [0168.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d14 [0168.601] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x466cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-UCS2", cAlternateFileName="ETEN-B~2")) returned 1 [0168.601] wcscmp (_String1="ETen-B5-UCS2", _String2=".") returned 1 [0168.601] wcscmp (_String1="ETen-B5-UCS2", _String2="..") returned 1 [0168.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfaa8 [0168.601] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.601] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.601] wcscat (in: _Dest=0x81bfaa8, _Source="ETen-B5-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" [0168.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d10 [0168.602] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-V", cAlternateFileName="ETEN-B~3")) returned 1 [0168.602] wcscmp (_String1="ETen-B5-V", _String2=".") returned 1 [0168.602] wcscmp (_String1="ETen-B5-V", _String2="..") returned 1 [0168.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24240 [0168.602] wcscpy (in: _Dest=0x3e24240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.602] wcscat (in: _Dest=0x3e24240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.602] wcscat (in: _Dest=0x3e24240, _Source="ETen-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" [0168.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d0c [0168.604] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-H", cAlternateFileName="ETENMS~1")) returned 1 [0168.604] wcscmp (_String1="ETenms-B5-H", _String2=".") returned 1 [0168.604] wcscmp (_String1="ETenms-B5-H", _String2="..") returned 1 [0168.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfa20 [0168.604] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.604] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.604] wcscat (in: _Dest=0x81bfa20, _Source="ETenms-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" [0168.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0168.606] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc89, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-V", cAlternateFileName="ETENMS~2")) returned 1 [0168.606] wcscmp (_String1="ETenms-B5-V", _String2=".") returned 1 [0168.606] wcscmp (_String1="ETenms-B5-V", _String2="..") returned 1 [0168.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf448 [0168.606] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.606] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.606] wcscat (in: _Dest=0x81bf448, _Source="ETenms-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" [0168.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c64 [0168.607] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6017, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-H", cAlternateFileName="ETHK-B~1")) returned 1 [0168.607] wcscmp (_String1="ETHK-B5-H", _String2=".") returned 1 [0168.607] wcscmp (_String1="ETHK-B5-H", _String2="..") returned 1 [0168.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e23cc0 [0168.607] wcscpy (in: _Dest=0x3e23cc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.607] wcscat (in: _Dest=0x3e23cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.607] wcscat (in: _Dest=0x3e23cc0, _Source="ETHK-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" [0168.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c60 [0168.608] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-V", cAlternateFileName="ETHK-B~2")) returned 1 [0168.608] wcscmp (_String1="ETHK-B5-V", _String2=".") returned 1 [0168.608] wcscmp (_String1="ETHK-B5-V", _String2="..") returned 1 [0168.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24040 [0168.608] wcscpy (in: _Dest=0x3e24040, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.608] wcscat (in: _Dest=0x3e24040, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.608] wcscat (in: _Dest=0x3e24040, _Source="ETHK-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" [0168.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c5c [0168.609] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-H", cAlternateFileName="")) returned 1 [0168.609] wcscmp (_String1="EUC-H", _String2=".") returned 1 [0168.609] wcscmp (_String1="EUC-H", _String2="..") returned 1 [0168.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df8b50 [0168.609] wcscpy (in: _Dest=0x3df8b50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.609] wcscat (in: _Dest=0x3df8b50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.609] wcscat (in: _Dest=0x3df8b50, _Source="EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" [0168.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c58 [0168.610] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-V", cAlternateFileName="")) returned 1 [0168.610] wcscmp (_String1="EUC-V", _String2=".") returned 1 [0168.611] wcscmp (_String1="EUC-V", _String2="..") returned 1 [0168.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df8a60 [0168.611] wcscpy (in: _Dest=0x3df8a60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.611] wcscat (in: _Dest=0x3df8a60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.611] wcscat (in: _Dest=0x3df8a60, _Source="EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" [0168.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c54 [0168.612] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x403c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-H", cAlternateFileName="EXT-RK~1")) returned 1 [0168.612] wcscmp (_String1="Ext-RKSJ-H", _String2=".") returned 1 [0168.612] wcscmp (_String1="Ext-RKSJ-H", _String2="..") returned 1 [0168.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e23e40 [0168.612] wcscpy (in: _Dest=0x3e23e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.612] wcscat (in: _Dest=0x3e23e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.612] wcscat (in: _Dest=0x3e23e40, _Source="Ext-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" [0168.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c50 [0168.613] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-V", cAlternateFileName="EXT-RK~2")) returned 1 [0168.613] wcscmp (_String1="Ext-RKSJ-V", _String2=".") returned 1 [0168.613] wcscmp (_String1="Ext-RKSJ-V", _String2="..") returned 1 [0168.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e249c0 [0168.613] wcscpy (in: _Dest=0x3e249c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.613] wcscat (in: _Dest=0x3e249c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.613] wcscat (in: _Dest=0x3e249c0, _Source="Ext-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" [0168.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e249c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c4c [0168.614] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-H", cAlternateFileName="")) returned 1 [0168.614] wcscmp (_String1="GB-EUC-H", _String2=".") returned 1 [0168.614] wcscmp (_String1="GB-EUC-H", _String2="..") returned 1 [0168.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e244c0 [0168.614] wcscpy (in: _Dest=0x3e244c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.614] wcscat (in: _Dest=0x3e244c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.614] wcscat (in: _Dest=0x3e244c0, _Source="GB-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" [0168.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e244c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c48 [0168.615] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-V", cAlternateFileName="")) returned 1 [0168.615] wcscmp (_String1="GB-EUC-V", _String2=".") returned 1 [0168.615] wcscmp (_String1="GB-EUC-V", _String2="..") returned 1 [0168.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e24640 [0168.615] wcscpy (in: _Dest=0x3e24640, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.615] wcscat (in: _Dest=0x3e24640, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.615] wcscat (in: _Dest=0x3e24640, _Source="GB-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" [0168.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c44 [0168.616] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15594, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-H", cAlternateFileName="GBK-EU~1")) returned 1 [0168.616] wcscmp (_String1="GBK-EUC-H", _String2=".") returned 1 [0168.616] wcscmp (_String1="GBK-EUC-H", _String2="..") returned 1 [0168.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e23d40 [0168.616] wcscpy (in: _Dest=0x3e23d40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.616] wcscat (in: _Dest=0x3e23d40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.616] wcscat (in: _Dest=0x3e23d40, _Source="GBK-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" [0168.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c40 [0168.617] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x39050, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-UCS2", cAlternateFileName="GBK-EU~2")) returned 1 [0168.618] wcscmp (_String1="GBK-EUC-UCS2", _String2=".") returned 1 [0168.618] wcscmp (_String1="GBK-EUC-UCS2", _String2="..") returned 1 [0168.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf558 [0168.618] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.618] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.618] wcscat (in: _Dest=0x81bf558, _Source="GBK-EUC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" [0168.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c3c [0168.619] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-V", cAlternateFileName="GBK-EU~3")) returned 1 [0168.619] wcscmp (_String1="GBK-EUC-V", _String2=".") returned 1 [0168.619] wcscmp (_String1="GBK-EUC-V", _String2="..") returned 1 [0168.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e23dc0 [0168.619] wcscpy (in: _Dest=0x3e23dc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.619] wcscat (in: _Dest=0x3e23dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.619] wcscat (in: _Dest=0x3e23dc0, _Source="GBK-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" [0168.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c38 [0168.661] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17840, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-H", cAlternateFileName="")) returned 1 [0168.661] wcscmp (_String1="GBK2K-H", _String2=".") returned 1 [0168.661] wcscmp (_String1="GBK2K-H", _String2="..") returned 1 [0168.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e242c0 [0168.662] wcscpy (in: _Dest=0x3e242c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0168.662] wcscat (in: _Dest=0x3e242c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0168.662] wcscat (in: _Dest=0x3e242c0, _Source="GBK2K-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" [0169.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e242c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b08 [0169.078] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-V", cAlternateFileName="")) returned 1 [0169.078] wcscmp (_String1="GBK2K-V", _String2=".") returned 1 [0169.078] wcscmp (_String1="GBK2K-V", _String2="..") returned 1 [0169.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24140 [0169.078] wcscpy (in: _Dest=0x3e24140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.078] wcscat (in: _Dest=0x3e24140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.078] wcscat (in: _Dest=0x3e24140, _Source="GBK2K-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" [0169.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0169.079] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-H", cAlternateFileName="GBKP-E~1")) returned 1 [0169.079] wcscmp (_String1="GBKp-EUC-H", _String2=".") returned 1 [0169.079] wcscmp (_String1="GBKp-EUC-H", _String2="..") returned 1 [0169.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24740 [0169.079] wcscpy (in: _Dest=0x3e24740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.079] wcscat (in: _Dest=0x3e24740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.079] wcscat (in: _Dest=0x3e24740, _Source="GBKp-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" [0169.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a48 [0169.080] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-V", cAlternateFileName="GBKP-E~2")) returned 1 [0169.080] wcscmp (_String1="GBKp-EUC-V", _String2=".") returned 1 [0169.080] wcscmp (_String1="GBKp-EUC-V", _String2="..") returned 1 [0169.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24940 [0169.080] wcscpy (in: _Dest=0x3e24940, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.080] wcscat (in: _Dest=0x3e24940, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.080] wcscat (in: _Dest=0x3e24940, _Source="GBKp-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" [0169.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0169.081] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x125b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-H", cAlternateFileName="GBPC-E~1")) returned 1 [0169.081] wcscmp (_String1="GBpc-EUC-H", _String2=".") returned 1 [0169.081] wcscmp (_String1="GBpc-EUC-H", _String2="..") returned 1 [0169.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e243c0 [0169.081] wcscpy (in: _Dest=0x3e243c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.081] wcscat (in: _Dest=0x3e243c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.081] wcscat (in: _Dest=0x3e243c0, _Source="GBpc-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" [0169.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e243c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0169.083] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2", cAlternateFileName="GBPC-E~2")) returned 1 [0169.083] wcscmp (_String1="GBpc-EUC-UCS2", _String2=".") returned 1 [0169.083] wcscmp (_String1="GBpc-EUC-UCS2", _String2="..") returned 1 [0169.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf668 [0169.083] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.083] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.083] wcscat (in: _Dest=0x81bf668, _Source="GBpc-EUC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" [0169.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c0 [0169.084] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24296, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2C", cAlternateFileName="GBPC-E~3")) returned 1 [0169.084] wcscmp (_String1="GBpc-EUC-UCS2C", _String2=".") returned 1 [0169.084] wcscmp (_String1="GBpc-EUC-UCS2C", _String2="..") returned 1 [0169.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf778 [0169.084] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.084] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.084] wcscat (in: _Dest=0x81bf778, _Source="GBpc-EUC-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" [0169.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2498 [0169.085] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-V", cAlternateFileName="GBPC-E~4")) returned 1 [0169.085] wcscmp (_String1="GBpc-EUC-V", _String2=".") returned 1 [0169.085] wcscmp (_String1="GBpc-EUC-V", _String2="..") returned 1 [0169.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e241c0 [0169.085] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.085] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.085] wcscat (in: _Dest=0x3e241c0, _Source="GBpc-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" [0169.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e241c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac [0169.086] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc07a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-H", cAlternateFileName="GBT-EU~1")) returned 1 [0169.086] wcscmp (_String1="GBT-EUC-H", _String2=".") returned 1 [0169.086] wcscmp (_String1="GBT-EUC-H", _String2="..") returned 1 [0169.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e248c0 [0169.086] wcscpy (in: _Dest=0x3e248c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.086] wcscat (in: _Dest=0x3e248c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.087] wcscat (in: _Dest=0x3e248c0, _Source="GBT-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" [0169.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e248c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d2c [0169.088] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xccb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-V", cAlternateFileName="GBT-EU~2")) returned 1 [0169.088] wcscmp (_String1="GBT-EUC-V", _String2=".") returned 1 [0169.088] wcscmp (_String1="GBT-EUC-V", _String2="..") returned 1 [0169.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24440 [0169.088] wcscpy (in: _Dest=0x3e24440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.088] wcscat (in: _Dest=0x3e24440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.088] wcscat (in: _Dest=0x3e24440, _Source="GBT-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" [0169.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b8 [0169.089] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="H", cAlternateFileName="")) returned 1 [0169.089] wcscmp (_String1="H", _String2=".") returned 1 [0169.089] wcscmp (_String1="H", _String2="..") returned 1 [0169.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39858 [0169.089] wcscpy (in: _Dest=0x3f39858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.089] wcscat (in: _Dest=0x3f39858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.089] wcscat (in: _Dest=0x3f39858, _Source="H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H" [0169.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x288c [0169.090] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-H", cAlternateFileName="HKDLA-~1")) returned 1 [0169.090] wcscmp (_String1="HKdla-B5-H", _String2=".") returned 1 [0169.090] wcscmp (_String1="HKdla-B5-H", _String2="..") returned 1 [0169.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a858 [0169.090] wcscpy (in: _Dest=0x831a858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.090] wcscat (in: _Dest=0x831a858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.090] wcscat (in: _Dest=0x831a858, _Source="HKdla-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" [0169.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b0 [0169.091] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-V", cAlternateFileName="HKDLA-~2")) returned 1 [0169.092] wcscmp (_String1="HKdla-B5-V", _String2=".") returned 1 [0169.092] wcscmp (_String1="HKdla-B5-V", _String2="..") returned 1 [0169.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a9d8 [0169.092] wcscpy (in: _Dest=0x831a9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.092] wcscat (in: _Dest=0x831a9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.092] wcscat (in: _Dest=0x831a9d8, _Source="HKdla-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" [0169.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0169.093] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x55fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-H", cAlternateFileName="HKDLB-~1")) returned 1 [0169.093] wcscmp (_String1="HKdlb-B5-H", _String2=".") returned 1 [0169.093] wcscmp (_String1="HKdlb-B5-H", _String2="..") returned 1 [0169.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831acd8 [0169.093] wcscpy (in: _Dest=0x831acd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.093] wcscat (in: _Dest=0x831acd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.093] wcscat (in: _Dest=0x831acd8, _Source="HKdlb-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" [0169.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831acd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0169.094] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-V", cAlternateFileName="HKDLB-~2")) returned 1 [0169.094] wcscmp (_String1="HKdlb-B5-V", _String2=".") returned 1 [0169.094] wcscmp (_String1="HKdlb-B5-V", _String2="..") returned 1 [0169.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bb58 [0169.094] wcscpy (in: _Dest=0x831bb58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.094] wcscat (in: _Dest=0x831bb58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.094] wcscat (in: _Dest=0x831bb58, _Source="HKdlb-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" [0169.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0169.096] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x386a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-H", cAlternateFileName="HKGCCS~1")) returned 1 [0169.096] wcscmp (_String1="HKgccs-B5-H", _String2=".") returned 1 [0169.096] wcscmp (_String1="HKgccs-B5-H", _String2="..") returned 1 [0169.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c03b0 [0169.096] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.096] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.096] wcscat (in: _Dest=0x81c03b0, _Source="HKgccs-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" [0169.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0169.097] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-V", cAlternateFileName="HKGCCS~2")) returned 1 [0169.097] wcscmp (_String1="HKgccs-B5-V", _String2=".") returned 1 [0169.097] wcscmp (_String1="HKgccs-B5-V", _String2="..") returned 1 [0169.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfc40 [0169.097] wcscpy (in: _Dest=0x81bfc40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.097] wcscat (in: _Dest=0x81bfc40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.097] wcscat (in: _Dest=0x81bfc40, _Source="HKgccs-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" [0169.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98 [0169.098] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-H", cAlternateFileName="HKM314~1")) returned 1 [0169.098] wcscmp (_String1="HKm314-B5-H", _String2=".") returned 1 [0169.098] wcscmp (_String1="HKm314-B5-H", _String2="..") returned 1 [0169.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfcc8 [0169.098] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.098] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.098] wcscat (in: _Dest=0x81bfcc8, _Source="HKm314-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" [0169.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0169.100] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-V", cAlternateFileName="HKM314~2")) returned 1 [0169.100] wcscmp (_String1="HKm314-B5-V", _String2=".") returned 1 [0169.100] wcscmp (_String1="HKm314-B5-V", _String2="..") returned 1 [0169.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bef80 [0169.100] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0169.100] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0169.100] wcscat (in: _Dest=0x81bef80, _Source="HKm314-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" [0169.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0169.101] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-H", cAlternateFileName="HKM471~1")) returned 1 [0172.778] wcscmp (_String1="HKm471-B5-H", _String2=".") returned 1 [0172.778] wcscmp (_String1="HKm471-B5-H", _String2="..") returned 1 [0172.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ed60 [0172.779] wcscpy (in: _Dest=0x3e1ed60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.779] wcscat (in: _Dest=0x3e1ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.779] wcscat (in: _Dest=0x3e1ed60, _Source="HKm471-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" [0178.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0178.942] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-V", cAlternateFileName="HKM471~2")) returned 1 [0178.942] wcscmp (_String1="HKm471-B5-V", _String2=".") returned 1 [0178.942] wcscmp (_String1="HKm471-B5-V", _String2="..") returned 1 [0178.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81be810 [0178.942] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.942] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.942] wcscat (in: _Dest=0x81be810, _Source="HKm471-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" [0178.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0178.944] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x604d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-H", cAlternateFileName="HKSCS-~1")) returned 1 [0178.944] wcscmp (_String1="HKscs-B5-H", _String2=".") returned 1 [0178.944] wcscmp (_String1="HKscs-B5-H", _String2="..") returned 1 [0178.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b258 [0178.944] wcscpy (in: _Dest=0x831b258, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.944] wcscat (in: _Dest=0x831b258, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.944] wcscat (in: _Dest=0x831b258, _Source="HKscs-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" [0178.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0178.945] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-V", cAlternateFileName="HKSCS-~2")) returned 1 [0178.945] wcscmp (_String1="HKscs-B5-V", _String2=".") returned 1 [0178.945] wcscmp (_String1="HKscs-B5-V", _String2="..") returned 1 [0178.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bc58 [0178.946] wcscpy (in: _Dest=0x831bc58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.946] wcscat (in: _Dest=0x831bc58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.946] wcscat (in: _Dest=0x831bc58, _Source="HKscs-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" [0178.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0178.947] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-H", cAlternateFileName="IDENTI~1")) returned 1 [0178.947] wcscmp (_String1="Identity-H", _String2=".") returned 1 [0178.947] wcscmp (_String1="Identity-H", _String2="..") returned 1 [0178.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b058 [0178.947] wcscpy (in: _Dest=0x831b058, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.947] wcscat (in: _Dest=0x831b058, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.947] wcscat (in: _Dest=0x831b058, _Source="Identity-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" [0178.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0178.949] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="IDENTI~2")) returned 1 [0178.949] wcscmp (_String1="Identity-V", _String2=".") returned 1 [0178.949] wcscmp (_String1="Identity-V", _String2="..") returned 1 [0178.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b8d8 [0178.949] wcscpy (in: _Dest=0x831b8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.949] wcscat (in: _Dest=0x831b8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.949] wcscat (in: _Dest=0x831b8d8, _Source="Identity-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" [0178.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0178.950] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3047, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-H", cAlternateFileName="KSC-EU~1")) returned 1 [0178.950] wcscmp (_String1="KSC-EUC-H", _String2=".") returned 1 [0178.950] wcscmp (_String1="KSC-EUC-H", _String2="..") returned 1 [0178.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831b3d8 [0178.950] wcscpy (in: _Dest=0x831b3d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.950] wcscat (in: _Dest=0x831b3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.951] wcscat (in: _Dest=0x831b3d8, _Source="KSC-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" [0178.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0178.952] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-V", cAlternateFileName="KSC-EU~2")) returned 1 [0178.952] wcscmp (_String1="KSC-EUC-V", _String2=".") returned 1 [0178.952] wcscmp (_String1="KSC-EUC-V", _String2="..") returned 1 [0178.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831b558 [0178.952] wcscpy (in: _Dest=0x831b558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.952] wcscat (in: _Dest=0x831b558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.952] wcscat (in: _Dest=0x831b558, _Source="KSC-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" [0178.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0178.954] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4191, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-H", cAlternateFileName="KSCMS-~1")) returned 1 [0178.954] wcscmp (_String1="KSCms-UHC-H", _String2=".") returned 1 [0178.954] wcscmp (_String1="KSCms-UHC-H", _String2="..") returned 1 [0178.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81becd8 [0178.954] wcscpy (in: _Dest=0x81becd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.954] wcscat (in: _Dest=0x81becd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.954] wcscat (in: _Dest=0x81becd8, _Source="KSCms-UHC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" [0178.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81becd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0178.955] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-H", cAlternateFileName="KSCMS-~2")) returned 1 [0178.955] wcscmp (_String1="KSCms-UHC-HW-H", _String2=".") returned 1 [0178.956] wcscmp (_String1="KSCms-UHC-HW-H", _String2="..") returned 1 [0178.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bede8 [0178.956] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.956] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.956] wcscat (in: _Dest=0x81bede8, _Source="KSCms-UHC-HW-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" [0178.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0178.957] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-V", cAlternateFileName="KSCMS-~3")) returned 1 [0178.957] wcscmp (_String1="KSCms-UHC-HW-V", _String2=".") returned 1 [0178.957] wcscmp (_String1="KSCms-UHC-HW-V", _String2="..") returned 1 [0178.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beb40 [0178.957] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.957] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.957] wcscat (in: _Dest=0x81beb40, _Source="KSCms-UHC-HW-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" [0178.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0178.959] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e597, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-UCS2", cAlternateFileName="KSCMS-~4")) returned 1 [0178.959] wcscmp (_String1="KSCms-UHC-UCS2", _String2=".") returned 1 [0178.959] wcscmp (_String1="KSCms-UHC-UCS2", _String2="..") returned 1 [0178.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beef8 [0178.959] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.959] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.959] wcscat (in: _Dest=0x81beef8, _Source="KSCms-UHC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" [0178.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0178.960] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-V", cAlternateFileName="KS3FF3~1")) returned 1 [0178.961] wcscmp (_String1="KSCms-UHC-V", _String2=".") returned 1 [0178.961] wcscmp (_String1="KSCms-UHC-V", _String2="..") returned 1 [0178.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bebc8 [0178.961] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.961] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.961] wcscat (in: _Dest=0x81bebc8, _Source="KSCms-UHC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" [0178.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0178.962] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x33b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-H", cAlternateFileName="KSCPC-~1")) returned 1 [0178.962] wcscmp (_String1="KSCpc-EUC-H", _String2=".") returned 1 [0178.962] wcscmp (_String1="KSCpc-EUC-H", _String2="..") returned 1 [0178.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0328 [0178.962] wcscpy (in: _Dest=0x81c0328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.962] wcscat (in: _Dest=0x81c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.962] wcscat (in: _Dest=0x81c0328, _Source="KSCpc-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" [0178.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0178.964] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2", cAlternateFileName="KSCPC-~2")) returned 1 [0178.964] wcscmp (_String1="KSCpc-EUC-UCS2", _String2=".") returned 1 [0178.964] wcscmp (_String1="KSCpc-EUC-UCS2", _String2="..") returned 1 [0178.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfff8 [0178.964] wcscpy (in: _Dest=0x81bfff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.964] wcscat (in: _Dest=0x81bfff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.964] wcscat (in: _Dest=0x81bfff8, _Source="KSCpc-EUC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" [0178.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0178.965] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26499, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2C", cAlternateFileName="KSCPC-~3")) returned 1 [0178.965] wcscmp (_String1="KSCpc-EUC-UCS2C", _String2=".") returned 1 [0178.965] wcscmp (_String1="KSCpc-EUC-UCS2C", _String2="..") returned 1 [0178.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de068 [0178.966] wcscpy (in: _Dest=0x81de068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.966] wcscat (in: _Dest=0x81de068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.966] wcscat (in: _Dest=0x81de068, _Source="KSCpc-EUC-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" [0178.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0178.967] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90ms-RKSJ", cAlternateFileName="UCS2-9~1")) returned 1 [0178.967] wcscmp (_String1="UCS2-90ms-RKSJ", _String2=".") returned 1 [0178.967] wcscmp (_String1="UCS2-90ms-RKSJ", _String2="..") returned 1 [0178.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf118 [0178.967] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.967] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.967] wcscat (in: _Dest=0x81bf118, _Source="UCS2-90ms-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" [0178.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0178.969] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24373, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90pv-RKSJ", cAlternateFileName="UCS2-9~2")) returned 1 [0178.969] wcscmp (_String1="UCS2-90pv-RKSJ", _String2=".") returned 1 [0178.969] wcscmp (_String1="UCS2-90pv-RKSJ", _String2="..") returned 1 [0178.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfbb8 [0178.969] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.969] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.969] wcscat (in: _Dest=0x81bfbb8, _Source="UCS2-90pv-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" [0178.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0178.971] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45903, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-B5pc", cAlternateFileName="UCS2-B~1")) returned 1 [0178.971] wcscmp (_String1="UCS2-B5pc", _String2=".") returned 1 [0178.971] wcscmp (_String1="UCS2-B5pc", _String2="..") returned 1 [0178.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831bdd8 [0178.971] wcscpy (in: _Dest=0x831bdd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.971] wcscat (in: _Dest=0x831bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.971] wcscat (in: _Dest=0x831bdd8, _Source="UCS2-B5pc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" [0178.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0178.972] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49113, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-ETen-B5", cAlternateFileName="UCS2-E~1")) returned 1 [0178.972] wcscmp (_String1="UCS2-ETen-B5", _String2=".") returned 1 [0178.972] wcscmp (_String1="UCS2-ETen-B5", _String2="..") returned 1 [0178.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf008 [0178.973] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.973] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.973] wcscat (in: _Dest=0x81bf008, _Source="UCS2-ETen-B5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" [0178.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0178.974] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3b87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBK-EUC", cAlternateFileName="UCS2-G~1")) returned 1 [0178.974] wcscmp (_String1="UCS2-GBK-EUC", _String2=".") returned 1 [0178.974] wcscmp (_String1="UCS2-GBK-EUC", _String2="..") returned 1 [0178.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf888 [0178.974] wcscpy (in: _Dest=0x81bf888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.974] wcscat (in: _Dest=0x81bf888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.974] wcscat (in: _Dest=0x81bf888, _Source="UCS2-GBK-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" [0178.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0178.976] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3022b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBpc-EUC", cAlternateFileName="UCS2-G~2")) returned 1 [0178.976] wcscmp (_String1="UCS2-GBpc-EUC", _String2=".") returned 1 [0178.976] wcscmp (_String1="UCS2-GBpc-EUC", _String2="..") returned 1 [0178.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf2b0 [0178.976] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.976] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.976] wcscat (in: _Dest=0x81bf2b0, _Source="UCS2-GBpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" [0178.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0178.978] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ff61, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCms-UHC", cAlternateFileName="UCS2-K~2")) returned 1 [0178.978] wcscmp (_String1="UCS2-KSCms-UHC", _String2=".") returned 1 [0178.978] wcscmp (_String1="UCS2-KSCms-UHC", _String2="..") returned 1 [0178.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfd50 [0178.978] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.978] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.978] wcscat (in: _Dest=0x81bfd50, _Source="UCS2-KSCms-UHC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" [0178.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0179.080] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb2e8e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25737, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCpc-EUC", cAlternateFileName="UCS2-K~1")) returned 1 [0179.080] wcscmp (_String1="UCS2-KSCpc-EUC", _String2=".") returned 1 [0179.080] wcscmp (_String1="UCS2-KSCpc-EUC", _String2="..") returned 1 [0179.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be810 [0179.080] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.080] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.080] wcscat (in: _Dest=0x81be810, _Source="UCS2-KSCpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" [0179.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0179.082] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-H", cAlternateFileName="UNICNS~2")) returned 1 [0179.082] wcscmp (_String1="UniCNS-UCS2-H", _String2=".") returned 1 [0179.082] wcscmp (_String1="UniCNS-UCS2-H", _String2="..") returned 1 [0179.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f305a0 [0179.082] wcscpy (in: _Dest=0x3f305a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.082] wcscat (in: _Dest=0x3f305a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.082] wcscat (in: _Dest=0x3f305a0, _Source="UniCNS-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" [0179.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f305a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0179.084] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-V", cAlternateFileName="UNICNS~1")) returned 1 [0179.084] wcscmp (_String1="UniCNS-UCS2-V", _String2=".") returned 1 [0179.084] wcscmp (_String1="UniCNS-UCS2-V", _String2="..") returned 1 [0179.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30f30 [0179.084] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.084] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.084] wcscat (in: _Dest=0x3f30f30, _Source="UniCNS-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" [0179.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0179.086] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x425e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-H", cAlternateFileName="UNICNS~4")) returned 1 [0179.086] wcscmp (_String1="UniCNS-UTF16-H", _String2=".") returned 1 [0179.086] wcscmp (_String1="UniCNS-UTF16-H", _String2="..") returned 1 [0179.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30848 [0179.086] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.086] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.086] wcscat (in: _Dest=0x3f30848, _Source="UniCNS-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" [0179.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0179.087] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc33, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-V", cAlternateFileName="UNICNS~3")) returned 1 [0179.088] wcscmp (_String1="UniCNS-UTF16-V", _String2=".") returned 1 [0179.088] wcscmp (_String1="UniCNS-UTF16-V", _String2="..") returned 1 [0179.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30fb8 [0179.088] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.088] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.088] wcscat (in: _Dest=0x3f30fb8, _Source="UniCNS-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" [0179.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0179.090] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x46805, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-H", cAlternateFileName="UNIGB-~2")) returned 1 [0179.090] wcscmp (_String1="UniGB-UCS2-H", _String2=".") returned 1 [0179.090] wcscmp (_String1="UniGB-UCS2-H", _String2="..") returned 1 [0179.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fd20 [0179.090] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.090] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.090] wcscat (in: _Dest=0x3f2fd20, _Source="UniGB-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" [0179.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0179.091] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-V", cAlternateFileName="UNIGB-~1")) returned 1 [0179.091] wcscmp (_String1="UniGB-UCS2-V", _String2=".") returned 1 [0179.091] wcscmp (_String1="UniGB-UCS2-V", _String2="..") returned 1 [0179.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f528 [0179.091] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.091] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.091] wcscat (in: _Dest=0x3f2f528, _Source="UniGB-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" [0179.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0179.093] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3453e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-H", cAlternateFileName="UNIGB-~4")) returned 1 [0179.093] wcscmp (_String1="UniGB-UTF16-H", _String2=".") returned 1 [0179.093] wcscmp (_String1="UniGB-UTF16-H", _String2="..") returned 1 [0179.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f748 [0179.093] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.093] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.093] wcscat (in: _Dest=0x3f2f748, _Source="UniGB-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" [0179.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0179.095] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-V", cAlternateFileName="UNIGB-~3")) returned 1 [0179.095] wcscmp (_String1="UniGB-UTF16-V", _String2=".") returned 1 [0179.095] wcscmp (_String1="UniGB-UTF16-V", _String2="..") returned 1 [0179.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f5b0 [0179.095] wcscpy (in: _Dest=0x3f2f5b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.095] wcscat (in: _Dest=0x3f2f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.095] wcscat (in: _Dest=0x3f2f5b0, _Source="UniGB-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" [0179.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0179.097] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2b580, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-H", cAlternateFileName="UNIJIS~1")) returned 1 [0179.097] wcscmp (_String1="UniJIS-UCS2-H", _String2=".") returned 1 [0179.097] wcscmp (_String1="UniJIS-UCS2-H", _String2="..") returned 1 [0179.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30738 [0179.097] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.097] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.097] wcscat (in: _Dest=0x3f30738, _Source="UniJIS-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" [0179.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0179.098] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-H", cAlternateFileName="UNIJIS~2")) returned 1 [0181.642] wcscmp (_String1="UniJIS-UCS2-HW-H", _String2=".") returned 1 [0181.642] wcscmp (_String1="UniJIS-UCS2-HW-H", _String2="..") returned 1 [0181.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34950 [0181.642] wcscpy (in: _Dest=0x3f34950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0181.642] wcscat (in: _Dest=0x3f34950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0181.642] wcscat (in: _Dest=0x3f34950, _Source="UniJIS-UCS2-HW-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" [0183.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0183.669] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-V", cAlternateFileName="UNIJIS~3")) returned 1 [0183.669] wcscmp (_String1="UniJIS-UCS2-HW-V", _String2=".") returned 1 [0183.669] wcscmp (_String1="UniJIS-UCS2-HW-V", _String2="..") returned 1 [0183.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ddd98 [0183.669] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.669] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.669] wcscat (in: _Dest=0x81ddd98, _Source="UniJIS-UCS2-HW-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" [0183.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0183.671] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ac5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-V", cAlternateFileName="UNIJIS~4")) returned 1 [0183.671] wcscmp (_String1="UniJIS-UCS2-V", _String2=".") returned 1 [0183.671] wcscmp (_String1="UniJIS-UCS2-V", _String2="..") returned 1 [0183.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81c0218 [0183.671] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.671] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.671] wcscat (in: _Dest=0x81c0218, _Source="UniJIS-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" [0183.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0183.672] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x315bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-H", cAlternateFileName="UN87E6~1")) returned 1 [0183.672] wcscmp (_String1="UniJIS-UTF16-H", _String2=".") returned 1 [0183.672] wcscmp (_String1="UniJIS-UTF16-H", _String2="..") returned 1 [0183.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be9a8 [0183.673] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.673] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.673] wcscat (in: _Dest=0x81be9a8, _Source="UniJIS-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" [0183.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0183.674] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-V", cAlternateFileName="UN275C~1")) returned 1 [0183.674] wcscmp (_String1="UniJIS-UTF16-V", _String2=".") returned 1 [0183.674] wcscmp (_String1="UniJIS-UTF16-V", _String2="..") returned 1 [0183.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be920 [0183.674] wcscpy (in: _Dest=0x81be920, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.674] wcscat (in: _Dest=0x81be920, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.674] wcscat (in: _Dest=0x81be920, _Source="UniJIS-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" [0183.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c8 [0183.676] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x31610, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-H", cAlternateFileName="UN288D~1")) returned 1 [0183.676] wcscmp (_String1="UniJIS2004-UTF16-H", _String2=".") returned 1 [0183.676] wcscmp (_String1="UniJIS2004-UTF16-H", _String2="..") returned 1 [0183.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df388 [0183.676] wcscpy (in: _Dest=0x81df388, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.676] wcscat (in: _Dest=0x81df388, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.676] wcscat (in: _Dest=0x81df388, _Source="UniJIS2004-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" [0183.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0183.677] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-V", cAlternateFileName="UNC565~1")) returned 1 [0183.678] wcscmp (_String1="UniJIS2004-UTF16-V", _String2=".") returned 1 [0183.678] wcscmp (_String1="UniJIS2004-UTF16-V", _String2="..") returned 1 [0183.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df268 [0183.678] wcscpy (in: _Dest=0x81df268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.678] wcscat (in: _Dest=0x81df268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.678] wcscat (in: _Dest=0x81df268, _Source="UniJIS2004-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" [0183.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230c [0183.679] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2aad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-H", cAlternateFileName="UNIKS-~4")) returned 1 [0183.679] wcscmp (_String1="UniKS-UCS2-H", _String2=".") returned 1 [0183.679] wcscmp (_String1="UniKS-UCS2-H", _String2="..") returned 1 [0183.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fda8 [0183.679] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.679] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.679] wcscat (in: _Dest=0x3f2fda8, _Source="UniKS-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" [0183.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0183.683] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-V", cAlternateFileName="UNIKS-~3")) returned 1 [0183.683] wcscmp (_String1="UniKS-UCS2-V", _String2=".") returned 1 [0183.683] wcscmp (_String1="UniKS-UCS2-V", _String2="..") returned 1 [0183.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f968 [0183.683] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.683] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.683] wcscat (in: _Dest=0x3f2f968, _Source="UniKS-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" [0183.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0183.684] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2031a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-H", cAlternateFileName="UNIKS-~2")) returned 1 [0183.684] wcscmp (_String1="UniKS-UTF16-H", _String2=".") returned 1 [0183.684] wcscmp (_String1="UniKS-UTF16-H", _String2="..") returned 1 [0183.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30a68 [0183.684] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.685] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.685] wcscat (in: _Dest=0x3f30a68, _Source="UniKS-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" [0183.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048 [0183.707] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-V", cAlternateFileName="UNIKS-~1")) returned 1 [0183.707] wcscmp (_String1="UniKS-UTF16-V", _String2=".") returned 1 [0183.707] wcscmp (_String1="UniKS-UTF16-V", _String2="..") returned 1 [0183.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30c88 [0183.708] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.708] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.708] wcscat (in: _Dest=0x3f30c88, _Source="UniKS-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" [0183.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0183.712] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 1 [0183.712] wcscmp (_String1="V", _String2=".") returned 1 [0183.712] wcscmp (_String1="V", _String2="..") returned 1 [0183.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8402bd0 [0183.713] wcscpy (in: _Dest=0x8402bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0183.713] wcscat (in: _Dest=0x8402bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0183.713] wcscat (in: _Dest=0x8402bd0, _Source="V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V" [0183.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2434 [0183.714] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 0 [0183.715] FindClose (in: hFindFile=0x8099490 | out: hFindFile=0x8099490) returned 1 [0183.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0183.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a2d8) returned 1 [0183.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33cf8) returned 1 Thread: id = 1532 os_tid = 0x1244 [0147.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\enutxt.pdf")) returned 0x20 [0149.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", dwFileAttributes=0x20) returned 0 [0149.088] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\enutxt.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.088] GetLastError () returned 0x5 [0149.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", dwFileAttributes=0x20) returned 0 [0149.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c180) returned 1 Thread: id = 1533 os_tid = 0x93c [0147.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39938 [0147.671] wcscpy (in: _Dest=0x3f39938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0147.671] wcscat (in: _Dest=0x3f39938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0147.671] wcscat (in: _Dest=0x3f39938, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\*" [0147.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0147.671] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0149.371] wcscmp (_String1=".", _String2=".") returned 0 [0149.371] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.077] wcscmp (_String1="..", _String2=".") returned 1 [0150.077] wcscmp (_String1="..", _String2="..") returned 0 [0150.077] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Bold.otf", cAlternateFileName="ADOBEA~2.OTF")) returned 1 [0150.077] wcscmp (_String1="AdobeArabic-Bold.otf", _String2=".") returned 1 [0150.077] wcscmp (_String1="AdobeArabic-Bold.otf", _String2="..") returned 1 [0150.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0150.077] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0150.077] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0150.077] wcscat (in: _Dest=0x32cc50, _Source="AdobeArabic-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" [0159.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf")) returned 0x20 [0159.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.706] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.706] GetLastError () returned 0x5 [0159.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.706] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3d9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-BoldItalic.otf", cAlternateFileName="ADOBEA~3.OTF")) returned 1 [0159.706] wcscmp (_String1="AdobeArabic-BoldItalic.otf", _String2=".") returned 1 [0159.706] wcscmp (_String1="AdobeArabic-BoldItalic.otf", _String2="..") returned 1 [0159.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11d28 [0159.706] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.706] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.706] wcscat (in: _Dest=0x3e11d28, _Source="AdobeArabic-BoldItalic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" [0159.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf")) returned 0x20 [0159.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0159.707] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.707] GetLastError () returned 0x5 [0159.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0159.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 [0159.707] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3dce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Italic.otf", cAlternateFileName="ADOBEA~1.OTF")) returned 1 [0159.707] wcscmp (_String1="AdobeArabic-Italic.otf", _String2=".") returned 1 [0159.707] wcscmp (_String1="AdobeArabic-Italic.otf", _String2="..") returned 1 [0159.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cc50 [0159.707] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.707] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.708] wcscat (in: _Dest=0x32cc50, _Source="AdobeArabic-Italic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" [0159.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf")) returned 0x20 [0159.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf", dwFileAttributes=0x20) returned 0 [0159.712] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.712] GetLastError () returned 0x5 [0159.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf", dwFileAttributes=0x20) returned 0 [0159.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.713] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Regular.otf", cAlternateFileName="ADOBEA~4.OTF")) returned 1 [0159.713] wcscmp (_String1="AdobeArabic-Regular.otf", _String2=".") returned 1 [0159.713] wcscmp (_String1="AdobeArabic-Regular.otf", _String2="..") returned 1 [0159.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11d28 [0159.713] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.713] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.713] wcscat (in: _Dest=0x3e11d28, _Source="AdobeArabic-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" [0159.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf")) returned 0x20 [0159.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf", dwFileAttributes=0x20) returned 0 [0159.713] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.714] GetLastError () returned 0x5 [0159.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf", dwFileAttributes=0x20) returned 0 [0159.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 [0159.714] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10e4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Bold.otf", cAlternateFileName="ADOBEH~4.OTF")) returned 1 [0159.714] wcscmp (_String1="AdobeHebrew-Bold.otf", _String2=".") returned 1 [0159.714] wcscmp (_String1="AdobeHebrew-Bold.otf", _String2="..") returned 1 [0159.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0159.714] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.714] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.714] wcscat (in: _Dest=0x32cc50, _Source="AdobeHebrew-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" [0159.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf")) returned 0x20 [0159.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.744] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.744] GetLastError () returned 0x5 [0159.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.744] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-BoldItalic.otf", cAlternateFileName="ADOBEH~1.OTF")) returned 1 [0159.744] wcscmp (_String1="AdobeHebrew-BoldItalic.otf", _String2=".") returned 1 [0159.744] wcscmp (_String1="AdobeHebrew-BoldItalic.otf", _String2="..") returned 1 [0159.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11968 [0159.744] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.744] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.744] wcscat (in: _Dest=0x3e11968, _Source="AdobeHebrew-BoldItalic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" [0159.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf")) returned 0x20 [0159.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0159.752] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.752] GetLastError () returned 0x5 [0159.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0159.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 [0159.753] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Italic.otf", cAlternateFileName="ADOBEH~2.OTF")) returned 1 [0159.753] wcscmp (_String1="AdobeHebrew-Italic.otf", _String2=".") returned 1 [0159.753] wcscmp (_String1="AdobeHebrew-Italic.otf", _String2="..") returned 1 [0159.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cc50 [0159.753] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.753] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.753] wcscat (in: _Dest=0x32cc50, _Source="AdobeHebrew-Italic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" [0159.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf")) returned 0x20 [0159.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf", dwFileAttributes=0x20) returned 0 [0159.754] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.754] GetLastError () returned 0x5 [0159.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf", dwFileAttributes=0x20) returned 0 [0159.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.754] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Regular.otf", cAlternateFileName="ADOBEH~3.OTF")) returned 1 [0159.754] wcscmp (_String1="AdobeHebrew-Regular.otf", _String2=".") returned 1 [0159.754] wcscmp (_String1="AdobeHebrew-Regular.otf", _String2="..") returned 1 [0159.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11968 [0159.754] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.754] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.754] wcscat (in: _Dest=0x3e11968, _Source="AdobeHebrew-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" [0159.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf")) returned 0x20 [0159.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf", dwFileAttributes=0x20) returned 0 [0159.755] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.755] GetLastError () returned 0x5 [0159.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf", dwFileAttributes=0x20) returned 0 [0159.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 [0159.755] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePiStd.otf", cAlternateFileName="ADOBEP~1.OTF")) returned 1 [0159.755] wcscmp (_String1="AdobePiStd.otf", _String2=".") returned 1 [0159.755] wcscmp (_String1="AdobePiStd.otf", _String2="..") returned 1 [0159.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30e20 [0159.755] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.755] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.755] wcscat (in: _Dest=0x3f30e20, _Source="AdobePiStd.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" [0159.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf")) returned 0x20 [0159.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf", dwFileAttributes=0x20) returned 0 [0159.757] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.757] GetLastError () returned 0x5 [0159.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf", dwFileAttributes=0x20) returned 0 [0159.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 [0159.757] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Bold.otf", cAlternateFileName="ADOBET~1.OTF")) returned 1 [0159.757] wcscmp (_String1="AdobeThai-Bold.otf", _String2=".") returned 1 [0159.757] wcscmp (_String1="AdobeThai-Bold.otf", _String2="..") returned 1 [0159.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35250 [0159.757] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.758] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.758] wcscat (in: _Dest=0x3f35250, _Source="AdobeThai-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" [0159.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf")) returned 0x20 [0159.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.758] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.758] GetLastError () returned 0x5 [0159.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.758] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x112a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-BoldItalic.otf", cAlternateFileName="ADOBET~3.OTF")) returned 1 [0159.758] wcscmp (_String1="AdobeThai-BoldItalic.otf", _String2=".") returned 1 [0159.758] wcscmp (_String1="AdobeThai-BoldItalic.otf", _String2="..") returned 1 [0159.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11968 [0159.759] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.759] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.759] wcscat (in: _Dest=0x3e11968, _Source="AdobeThai-BoldItalic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" [0159.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf")) returned 0x20 [0159.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0159.759] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.759] GetLastError () returned 0x5 [0159.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0159.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 [0159.759] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Italic.otf", cAlternateFileName="ADOBET~4.OTF")) returned 1 [0159.759] wcscmp (_String1="AdobeThai-Italic.otf", _String2=".") returned 1 [0159.760] wcscmp (_String1="AdobeThai-Italic.otf", _String2="..") returned 1 [0159.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0159.760] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.760] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.760] wcscat (in: _Dest=0x32cc50, _Source="AdobeThai-Italic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" [0159.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf")) returned 0x20 [0159.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf", dwFileAttributes=0x20) returned 0 [0159.760] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.760] GetLastError () returned 0x5 [0159.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf", dwFileAttributes=0x20) returned 0 [0159.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.761] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10530, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Regular.otf", cAlternateFileName="ADOBET~2.OTF")) returned 1 [0159.761] wcscmp (_String1="AdobeThai-Regular.otf", _String2=".") returned 1 [0159.761] wcscmp (_String1="AdobeThai-Regular.otf", _String2="..") returned 1 [0159.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cc50 [0159.761] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.761] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.761] wcscat (in: _Dest=0x32cc50, _Source="AdobeThai-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" [0159.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf")) returned 0x20 [0159.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf", dwFileAttributes=0x20) returned 0 [0159.761] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.761] GetLastError () returned 0x5 [0159.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf", dwFileAttributes=0x20) returned 0 [0159.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.762] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8b9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Bold.otf", cAlternateFileName="COURIE~3.OTF")) returned 1 [0159.762] wcscmp (_String1="CourierStd-Bold.otf", _String2=".") returned 1 [0159.762] wcscmp (_String1="CourierStd-Bold.otf", _String2="..") returned 1 [0159.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cc50 [0159.762] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.762] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.762] wcscat (in: _Dest=0x32cc50, _Source="CourierStd-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" [0159.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf")) returned 0x20 [0159.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.774] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.774] GetLastError () returned 0x5 [0159.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.774] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x90dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-BoldOblique.otf", cAlternateFileName="COURIE~2.OTF")) returned 1 [0159.775] wcscmp (_String1="CourierStd-BoldOblique.otf", _String2=".") returned 1 [0159.775] wcscmp (_String1="CourierStd-BoldOblique.otf", _String2="..") returned 1 [0159.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819a818 [0159.775] wcscpy (in: _Dest=0x819a818, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.775] wcscat (in: _Dest=0x819a818, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.775] wcscat (in: _Dest=0x819a818, _Source="CourierStd-BoldOblique.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" [0159.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf")) returned 0x20 [0159.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf", dwFileAttributes=0x20) returned 0 [0159.775] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.775] GetLastError () returned 0x5 [0159.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf", dwFileAttributes=0x20) returned 0 [0159.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a818) returned 1 [0159.776] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9238, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Oblique.otf", cAlternateFileName="COURIE~4.OTF")) returned 1 [0159.776] wcscmp (_String1="CourierStd-Oblique.otf", _String2=".") returned 1 [0159.776] wcscmp (_String1="CourierStd-Oblique.otf", _String2="..") returned 1 [0159.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cc50 [0159.776] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.776] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.776] wcscat (in: _Dest=0x32cc50, _Source="CourierStd-Oblique.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" [0159.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf")) returned 0x20 [0159.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf", dwFileAttributes=0x20) returned 0 [0159.781] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.781] GetLastError () returned 0x5 [0159.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf", dwFileAttributes=0x20) returned 0 [0159.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.781] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd.otf", cAlternateFileName="COURIE~1.OTF")) returned 1 [0159.781] wcscmp (_String1="CourierStd.otf", _String2=".") returned 1 [0159.781] wcscmp (_String1="CourierStd.otf", _String2="..") returned 1 [0159.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30e20 [0159.782] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.782] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.782] wcscat (in: _Dest=0x3f30e20, _Source="CourierStd.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" [0159.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd.otf")) returned 0x20 [0159.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf", dwFileAttributes=0x20) returned 0 [0159.782] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.782] GetLastError () returned 0x5 [0159.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf", dwFileAttributes=0x20) returned 0 [0159.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 [0159.782] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Bold.otf", cAlternateFileName="MINION~4.OTF")) returned 1 [0159.782] wcscmp (_String1="MinionPro-Bold.otf", _String2=".") returned 1 [0159.782] wcscmp (_String1="MinionPro-Bold.otf", _String2="..") returned 1 [0159.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35250 [0159.782] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.783] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.783] wcscat (in: _Dest=0x3f35250, _Source="MinionPro-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" [0159.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf")) returned 0x20 [0159.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.786] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.786] GetLastError () returned 0x5 [0159.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.787] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43898, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-BoldIt.otf", cAlternateFileName="MINION~3.OTF")) returned 1 [0159.787] wcscmp (_String1="MinionPro-BoldIt.otf", _String2=".") returned 1 [0159.787] wcscmp (_String1="MinionPro-BoldIt.otf", _String2="..") returned 1 [0159.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0159.787] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.787] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.787] wcscat (in: _Dest=0x32cc50, _Source="MinionPro-BoldIt.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" [0159.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf")) returned 0x20 [0159.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0159.788] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.788] GetLastError () returned 0x5 [0159.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0159.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.788] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x436ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-It.otf", cAlternateFileName="MINION~2.OTF")) returned 1 [0159.788] wcscmp (_String1="MinionPro-It.otf", _String2=".") returned 1 [0159.789] wcscmp (_String1="MinionPro-It.otf", _String2="..") returned 1 [0159.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35250 [0159.789] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.789] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.789] wcscat (in: _Dest=0x3f35250, _Source="MinionPro-It.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" [0159.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf")) returned 0x20 [0159.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf", dwFileAttributes=0x20) returned 0 [0159.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.789] GetLastError () returned 0x5 [0159.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf", dwFileAttributes=0x20) returned 0 [0159.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.790] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Regular.otf", cAlternateFileName="MINION~1.OTF")) returned 1 [0159.790] wcscmp (_String1="MinionPro-Regular.otf", _String2=".") returned 1 [0159.790] wcscmp (_String1="MinionPro-Regular.otf", _String2="..") returned 1 [0159.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cc50 [0159.790] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.790] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.790] wcscat (in: _Dest=0x32cc50, _Source="MinionPro-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" [0159.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf")) returned 0x20 [0159.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0159.790] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.806] GetLastError () returned 0x5 [0159.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0159.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.812] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x175c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Bold.otf", cAlternateFileName="MYRIAD~3.OTF")) returned 1 [0159.812] wcscmp (_String1="MyriadPro-Bold.otf", _String2=".") returned 1 [0159.812] wcscmp (_String1="MyriadPro-Bold.otf", _String2="..") returned 1 [0159.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35250 [0159.812] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.812] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.812] wcscat (in: _Dest=0x3f35250, _Source="MyriadPro-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" [0159.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf")) returned 0x20 [0159.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.812] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.813] GetLastError () returned 0x5 [0159.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0159.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.813] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1879c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-BoldIt.otf", cAlternateFileName="MYRIAD~2.OTF")) returned 1 [0159.813] wcscmp (_String1="MyriadPro-BoldIt.otf", _String2=".") returned 1 [0159.813] wcscmp (_String1="MyriadPro-BoldIt.otf", _String2="..") returned 1 [0159.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0159.813] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.813] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.813] wcscat (in: _Dest=0x32cc50, _Source="MyriadPro-BoldIt.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" [0159.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf")) returned 0x20 [0159.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0159.814] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.814] GetLastError () returned 0x5 [0159.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0159.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0159.814] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-It.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0159.814] wcscmp (_String1="MyriadPro-It.otf", _String2=".") returned 1 [0159.814] wcscmp (_String1="MyriadPro-It.otf", _String2="..") returned 1 [0159.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35250 [0159.814] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.814] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.814] wcscat (in: _Dest=0x3f35250, _Source="MyriadPro-It.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" [0159.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf")) returned 0x20 [0159.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf", dwFileAttributes=0x20) returned 0 [0159.815] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.815] GetLastError () returned 0x5 [0159.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf", dwFileAttributes=0x20) returned 0 [0159.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.815] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb61fa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17098, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Regular.otf", cAlternateFileName="MYRIAD~4.OTF")) returned 1 [0159.815] wcscmp (_String1="MyriadPro-Regular.otf", _String2=".") returned 1 [0159.815] wcscmp (_String1="MyriadPro-Regular.otf", _String2="..") returned 1 [0159.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cc50 [0159.816] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0159.816] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0159.816] wcscat (in: _Dest=0x32cc50, _Source="MyriadPro-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" [0159.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf")) returned 0x20 [0162.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0162.155] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.155] GetLastError () returned 0x5 [0162.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0162.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0162.155] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb5ad600, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFM", cAlternateFileName="")) returned 1 [0162.155] wcscmp (_String1="PFM", _String2=".") returned 1 [0162.155] wcscmp (_String1="PFM", _String2="..") returned 1 [0162.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32c28 [0162.156] wcscpy (in: _Dest=0x3f32c28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0162.156] wcscat (in: _Dest=0x3f32c28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0162.156] wcscat (in: _Dest=0x3f32c28, _Source="PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0167.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f32c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0167.270] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFB", cAlternateFileName="")) returned 1 [0167.270] wcscmp (_String1="SY______.PFB", _String2=".") returned 1 [0167.270] wcscmp (_String1="SY______.PFB", _String2="..") returned 1 [0167.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81c0108 [0167.270] wcscpy (in: _Dest=0x81c0108, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0167.270] wcscat (in: _Dest=0x81c0108, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0167.270] wcscat (in: _Dest=0x81c0108, _Source="SY______.PFB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" [0167.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0167.272] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12735, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZX______.PFB", cAlternateFileName="")) returned 1 [0167.272] wcscmp (_String1="ZX______.PFB", _String2=".") returned 1 [0167.272] wcscmp (_String1="ZX______.PFB", _String2="..") returned 1 [0167.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bff70 [0167.272] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0167.272] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0167.272] wcscat (in: _Dest=0x81bff70, _Source="ZX______.PFB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" [0167.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0167.273] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 1 [0167.273] wcscmp (_String1="ZY______.PFB", _String2=".") returned 1 [0167.273] wcscmp (_String1="ZY______.PFB", _String2="..") returned 1 [0167.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfaa8 [0167.273] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0167.274] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0167.274] wcscat (in: _Dest=0x81bfaa8, _Source="ZY______.PFB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" [0167.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c [0167.275] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 0 [0167.275] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0167.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0167.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39938) returned 1 [0167.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f335f8) returned 1 Thread: id = 1534 os_tid = 0x1508 [0147.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5108 [0147.672] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0147.672] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\" [0147.672] wcscat (in: _Dest=0x3dc5108, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*" [0147.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0147.672] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdadcad20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098950 [0149.090] wcscmp (_String1=".", _String2=".") returned 0 [0149.090] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdadcad20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.090] wcscmp (_String1="..", _String2=".") returned 1 [0149.090] wcscmp (_String1="..", _String2="..") returned 0 [0149.090] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdadcad20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb4eef20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageNames2", cAlternateFileName="LANGUA~1")) returned 1 [0149.090] wcscmp (_String1="LanguageNames2", _String2=".") returned 1 [0149.090] wcscmp (_String1="LanguageNames2", _String2="..") returned 1 [0149.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3ce28 [0149.090] wcscpy (in: _Dest=0x3e3ce28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0149.090] wcscat (in: _Dest=0x3e3ce28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\" [0149.090] wcscat (in: _Dest=0x3e3ce28, _Source="LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819ad18 [0159.355] wcscpy (in: _Dest=0x819ad18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.355] wcscat (in: _Dest=0x819ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.355] wcscat (in: _Dest=0x819ad18, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*" [0159.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86618 [0159.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdadcad20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb4eef20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0159.412] wcscmp (_String1=".", _String2=".") returned 0 [0159.412] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdadcad20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb4eef20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.563] wcscmp (_String1="..", _String2=".") returned 1 [0159.563] wcscmp (_String1="..", _String2="..") returned 0 [0159.563] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar.txt", cAlternateFileName="DICAC9~1.TXT")) returned 1 [0159.563] wcscmp (_String1="DisplayLanguageNames.ar.txt", _String2=".") returned 1 [0159.563] wcscmp (_String1="DisplayLanguageNames.ar.txt", _String2="..") returned 1 [0159.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b218 [0159.563] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.563] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.563] wcscat (in: _Dest=0x3e1b218, _Source="DisplayLanguageNames.ar.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" [0159.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt")) returned 0x20 [0159.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", dwFileAttributes=0x20) returned 0 [0159.580] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.580] GetLastError () returned 0x5 [0159.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", dwFileAttributes=0x20) returned 0 [0159.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 [0159.581] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_AE.txt", cAlternateFileName="DI3495~1.TXT")) returned 1 [0159.581] wcscmp (_String1="DisplayLanguageNames.ar_AE.txt", _String2=".") returned 1 [0159.581] wcscmp (_String1="DisplayLanguageNames.ar_AE.txt", _String2="..") returned 1 [0159.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.581] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.581] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.581] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_AE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" [0159.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt")) returned 0x20 [0159.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", dwFileAttributes=0x20) returned 0 [0159.591] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.591] GetLastError () returned 0x5 [0159.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", dwFileAttributes=0x20) returned 0 [0159.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.592] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_BH.txt", cAlternateFileName="DI7F79~1.TXT")) returned 1 [0159.592] wcscmp (_String1="DisplayLanguageNames.ar_BH.txt", _String2=".") returned 1 [0159.592] wcscmp (_String1="DisplayLanguageNames.ar_BH.txt", _String2="..") returned 1 [0159.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.592] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.592] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.592] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_BH.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" [0159.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt")) returned 0x20 [0159.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", dwFileAttributes=0x20) returned 0 [0159.593] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.593] GetLastError () returned 0x5 [0159.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", dwFileAttributes=0x20) returned 0 [0159.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.593] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_DZ.txt", cAlternateFileName="DIF61A~1.TXT")) returned 1 [0159.593] wcscmp (_String1="DisplayLanguageNames.ar_DZ.txt", _String2=".") returned 1 [0159.593] wcscmp (_String1="DisplayLanguageNames.ar_DZ.txt", _String2="..") returned 1 [0159.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.594] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.594] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.594] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_DZ.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" [0159.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt")) returned 0x20 [0159.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", dwFileAttributes=0x20) returned 0 [0159.594] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.595] GetLastError () returned 0x5 [0159.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", dwFileAttributes=0x20) returned 0 [0159.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.595] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_EG.txt", cAlternateFileName="DIC7FA~1.TXT")) returned 1 [0159.595] wcscmp (_String1="DisplayLanguageNames.ar_EG.txt", _String2=".") returned 1 [0159.595] wcscmp (_String1="DisplayLanguageNames.ar_EG.txt", _String2="..") returned 1 [0159.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.595] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.595] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.595] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_EG.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" [0159.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt")) returned 0x20 [0159.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", dwFileAttributes=0x20) returned 0 [0159.618] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.618] GetLastError () returned 0x5 [0159.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", dwFileAttributes=0x20) returned 0 [0159.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.618] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IN.txt", cAlternateFileName="DI4FA4~1.TXT")) returned 1 [0159.618] wcscmp (_String1="DisplayLanguageNames.ar_IN.txt", _String2=".") returned 1 [0159.618] wcscmp (_String1="DisplayLanguageNames.ar_IN.txt", _String2="..") returned 1 [0159.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.618] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.618] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.618] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_IN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" [0159.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt")) returned 0x20 [0159.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", dwFileAttributes=0x20) returned 0 [0159.619] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.619] GetLastError () returned 0x5 [0159.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", dwFileAttributes=0x20) returned 0 [0159.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.620] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IQ.txt", cAlternateFileName="DI3F41~1.TXT")) returned 1 [0159.620] wcscmp (_String1="DisplayLanguageNames.ar_IQ.txt", _String2=".") returned 1 [0159.620] wcscmp (_String1="DisplayLanguageNames.ar_IQ.txt", _String2="..") returned 1 [0159.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.620] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.620] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.620] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_IQ.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" [0159.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt")) returned 0x20 [0159.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", dwFileAttributes=0x20) returned 0 [0159.621] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.621] GetLastError () returned 0x5 [0159.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", dwFileAttributes=0x20) returned 0 [0159.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.621] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_JO.txt", cAlternateFileName="DI0622~1.TXT")) returned 1 [0159.621] wcscmp (_String1="DisplayLanguageNames.ar_JO.txt", _String2=".") returned 1 [0159.621] wcscmp (_String1="DisplayLanguageNames.ar_JO.txt", _String2="..") returned 1 [0159.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.621] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.621] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.621] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_JO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" [0159.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt")) returned 0x20 [0159.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", dwFileAttributes=0x20) returned 0 [0159.622] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.622] GetLastError () returned 0x5 [0159.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", dwFileAttributes=0x20) returned 0 [0159.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.623] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_KW.txt", cAlternateFileName="DIF6C4~1.TXT")) returned 1 [0159.623] wcscmp (_String1="DisplayLanguageNames.ar_KW.txt", _String2=".") returned 1 [0159.623] wcscmp (_String1="DisplayLanguageNames.ar_KW.txt", _String2="..") returned 1 [0159.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.623] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.623] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.623] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_KW.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" [0159.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt")) returned 0x20 [0159.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", dwFileAttributes=0x20) returned 0 [0159.643] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.643] GetLastError () returned 0x5 [0159.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", dwFileAttributes=0x20) returned 0 [0159.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.644] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LB.txt", cAlternateFileName="DI621E~1.TXT")) returned 1 [0159.644] wcscmp (_String1="DisplayLanguageNames.ar_LB.txt", _String2=".") returned 1 [0159.644] wcscmp (_String1="DisplayLanguageNames.ar_LB.txt", _String2="..") returned 1 [0159.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.644] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.644] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.644] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_LB.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" [0159.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt")) returned 0x20 [0159.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", dwFileAttributes=0x20) returned 0 [0159.644] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.645] GetLastError () returned 0x5 [0159.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", dwFileAttributes=0x20) returned 0 [0159.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.645] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LY.txt", cAlternateFileName="DID7B2~1.TXT")) returned 1 [0159.645] wcscmp (_String1="DisplayLanguageNames.ar_LY.txt", _String2=".") returned 1 [0159.645] wcscmp (_String1="DisplayLanguageNames.ar_LY.txt", _String2="..") returned 1 [0159.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.645] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.645] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.645] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_LY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" [0159.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt")) returned 0x20 [0159.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", dwFileAttributes=0x20) returned 0 [0159.646] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.646] GetLastError () returned 0x5 [0159.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", dwFileAttributes=0x20) returned 0 [0159.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.646] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_MA.txt", cAlternateFileName="DIEC69~1.TXT")) returned 1 [0159.646] wcscmp (_String1="DisplayLanguageNames.ar_MA.txt", _String2=".") returned 1 [0159.646] wcscmp (_String1="DisplayLanguageNames.ar_MA.txt", _String2="..") returned 1 [0159.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.647] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.647] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.647] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_MA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" [0159.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt")) returned 0x20 [0159.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", dwFileAttributes=0x20) returned 0 [0159.647] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.647] GetLastError () returned 0x5 [0159.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", dwFileAttributes=0x20) returned 0 [0159.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.648] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_OM.txt", cAlternateFileName="DIC553~1.TXT")) returned 1 [0159.648] wcscmp (_String1="DisplayLanguageNames.ar_OM.txt", _String2=".") returned 1 [0159.648] wcscmp (_String1="DisplayLanguageNames.ar_OM.txt", _String2="..") returned 1 [0159.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.648] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.648] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.648] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_OM.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" [0159.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt")) returned 0x20 [0159.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", dwFileAttributes=0x20) returned 0 [0159.686] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.686] GetLastError () returned 0x5 [0159.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", dwFileAttributes=0x20) returned 0 [0159.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.686] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_QA.txt", cAlternateFileName="DI2F38~1.TXT")) returned 1 [0159.686] wcscmp (_String1="DisplayLanguageNames.ar_QA.txt", _String2=".") returned 1 [0159.686] wcscmp (_String1="DisplayLanguageNames.ar_QA.txt", _String2="..") returned 1 [0159.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.687] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.687] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.687] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_QA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" [0159.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt")) returned 0x20 [0159.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", dwFileAttributes=0x20) returned 0 [0159.687] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.687] GetLastError () returned 0x5 [0159.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", dwFileAttributes=0x20) returned 0 [0159.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.688] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SA.txt", cAlternateFileName="DI48AF~1.TXT")) returned 1 [0159.688] wcscmp (_String1="DisplayLanguageNames.ar_SA.txt", _String2=".") returned 1 [0159.688] wcscmp (_String1="DisplayLanguageNames.ar_SA.txt", _String2="..") returned 1 [0159.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.688] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.688] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.688] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_SA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" [0159.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt")) returned 0x20 [0159.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", dwFileAttributes=0x20) returned 0 [0159.688] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.689] GetLastError () returned 0x5 [0159.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", dwFileAttributes=0x20) returned 0 [0159.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.689] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SD.txt", cAlternateFileName="DIC7AF~1.TXT")) returned 1 [0159.689] wcscmp (_String1="DisplayLanguageNames.ar_SD.txt", _String2=".") returned 1 [0159.689] wcscmp (_String1="DisplayLanguageNames.ar_SD.txt", _String2="..") returned 1 [0159.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.689] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.689] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.689] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_SD.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" [0159.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt")) returned 0x20 [0159.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", dwFileAttributes=0x20) returned 0 [0159.690] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.690] GetLastError () returned 0x5 [0159.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", dwFileAttributes=0x20) returned 0 [0159.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.690] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SY.txt", cAlternateFileName="DID7BE~1.TXT")) returned 1 [0159.690] wcscmp (_String1="DisplayLanguageNames.ar_SY.txt", _String2=".") returned 1 [0159.690] wcscmp (_String1="DisplayLanguageNames.ar_SY.txt", _String2="..") returned 1 [0159.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.690] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.690] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.690] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_SY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" [0159.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt")) returned 0x20 [0159.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", dwFileAttributes=0x20) returned 0 [0159.735] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.735] GetLastError () returned 0x5 [0159.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", dwFileAttributes=0x20) returned 0 [0159.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.736] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_TN.txt", cAlternateFileName="DI7175~1.TXT")) returned 1 [0159.736] wcscmp (_String1="DisplayLanguageNames.ar_TN.txt", _String2=".") returned 1 [0159.736] wcscmp (_String1="DisplayLanguageNames.ar_TN.txt", _String2="..") returned 1 [0159.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.736] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.736] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.736] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_TN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" [0159.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt")) returned 0x20 [0159.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", dwFileAttributes=0x20) returned 0 [0159.736] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.736] GetLastError () returned 0x5 [0159.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", dwFileAttributes=0x20) returned 0 [0159.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.737] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_YE.txt", cAlternateFileName="DIE8B6~1.TXT")) returned 1 [0159.737] wcscmp (_String1="DisplayLanguageNames.ar_YE.txt", _String2=".") returned 1 [0159.737] wcscmp (_String1="DisplayLanguageNames.ar_YE.txt", _String2="..") returned 1 [0159.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.737] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.737] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.737] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.ar_YE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" [0159.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt")) returned 0x20 [0159.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", dwFileAttributes=0x20) returned 0 [0159.738] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.738] GetLastError () returned 0x5 [0159.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", dwFileAttributes=0x20) returned 0 [0159.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.738] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg.txt", cAlternateFileName="DI8E5A~1.TXT")) returned 1 [0159.738] wcscmp (_String1="DisplayLanguageNames.bg.txt", _String2=".") returned 1 [0159.738] wcscmp (_String1="DisplayLanguageNames.bg.txt", _String2="..") returned 1 [0159.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b218 [0159.738] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.738] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.738] wcscat (in: _Dest=0x3e1b218, _Source="DisplayLanguageNames.bg.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" [0159.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt")) returned 0x20 [0162.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", dwFileAttributes=0x20) returned 0 [0162.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.127] GetLastError () returned 0x5 [0162.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", dwFileAttributes=0x20) returned 0 [0162.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 [0162.127] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg_BG.txt", cAlternateFileName="DIC784~1.TXT")) returned 1 [0162.127] wcscmp (_String1="DisplayLanguageNames.bg_BG.txt", _String2=".") returned 1 [0162.127] wcscmp (_String1="DisplayLanguageNames.bg_BG.txt", _String2="..") returned 1 [0162.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65518 [0162.127] wcscpy (in: _Dest=0x3e65518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0162.127] wcscat (in: _Dest=0x3e65518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0162.128] wcscat (in: _Dest=0x3e65518, _Source="DisplayLanguageNames.bg_BG.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" [0164.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a48 [0164.582] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca.txt", cAlternateFileName="DIFBE9~1.TXT")) returned 1 [0164.582] wcscmp (_String1="DisplayLanguageNames.ca.txt", _String2=".") returned 1 [0164.582] wcscmp (_String1="DisplayLanguageNames.ca.txt", _String2="..") returned 1 [0164.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b218 [0164.583] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.583] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.583] wcscat (in: _Dest=0x3e1b218, _Source="DisplayLanguageNames.ca.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" [0164.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0164.583] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES.txt", cAlternateFileName="DI0E62~1.TXT")) returned 1 [0164.584] wcscmp (_String1="DisplayLanguageNames.ca_ES.txt", _String2=".") returned 1 [0164.584] wcscmp (_String1="DisplayLanguageNames.ca_ES.txt", _String2="..") returned 1 [0164.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65290 [0164.584] wcscpy (in: _Dest=0x3e65290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.584] wcscat (in: _Dest=0x3e65290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.584] wcscat (in: _Dest=0x3e65290, _Source="DisplayLanguageNames.ca_ES.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" [0164.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x295c [0164.585] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES_PREEURO.txt", cAlternateFileName="DIFFE0~1.TXT")) returned 1 [0164.585] wcscmp (_String1="DisplayLanguageNames.ca_ES_PREEURO.txt", _String2=".") returned 1 [0164.585] wcscmp (_String1="DisplayLanguageNames.ca_ES_PREEURO.txt", _String2="..") returned 1 [0164.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3aa78 [0164.585] wcscpy (in: _Dest=0x3e3aa78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.585] wcscat (in: _Dest=0x3e3aa78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.585] wcscat (in: _Dest=0x3e3aa78, _Source="DisplayLanguageNames.ca_ES_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" [0164.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3aa78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2958 [0164.586] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs.txt", cAlternateFileName="DI5C2E~1.TXT")) returned 1 [0164.586] wcscmp (_String1="DisplayLanguageNames.cs.txt", _String2=".") returned 1 [0164.586] wcscmp (_String1="DisplayLanguageNames.cs.txt", _String2="..") returned 1 [0164.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b148 [0164.586] wcscpy (in: _Dest=0x3e1b148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.586] wcscat (in: _Dest=0x3e1b148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.586] wcscat (in: _Dest=0x3e1b148, _Source="DisplayLanguageNames.cs.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" [0164.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2954 [0164.587] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs_CZ.txt", cAlternateFileName="DICA81~1.TXT")) returned 1 [0165.102] wcscmp (_String1="DisplayLanguageNames.cs_CZ.txt", _String2=".") returned 1 [0165.102] wcscmp (_String1="DisplayLanguageNames.cs_CZ.txt", _String2="..") returned 1 [0165.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65878 [0165.102] wcscpy (in: _Dest=0x3e65878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.102] wcscat (in: _Dest=0x3e65878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.102] wcscat (in: _Dest=0x3e65878, _Source="DisplayLanguageNames.cs_CZ.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" [0167.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25b0 [0167.115] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da.txt", cAlternateFileName="DI3825~1.TXT")) returned 1 [0167.115] wcscmp (_String1="DisplayLanguageNames.da.txt", _String2=".") returned 1 [0167.115] wcscmp (_String1="DisplayLanguageNames.da.txt", _String2="..") returned 1 [0167.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f00d8 [0167.116] wcscpy (in: _Dest=0x81f00d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.116] wcscat (in: _Dest=0x81f00d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.116] wcscat (in: _Dest=0x81f00d8, _Source="DisplayLanguageNames.da.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" [0167.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f00d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0167.117] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da_DK.txt", cAlternateFileName="DID241~1.TXT")) returned 1 [0167.117] wcscmp (_String1="DisplayLanguageNames.da_DK.txt", _String2=".") returned 1 [0167.117] wcscmp (_String1="DisplayLanguageNames.da_DK.txt", _String2="..") returned 1 [0167.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ec8d8 [0167.117] wcscpy (in: _Dest=0x81ec8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.117] wcscat (in: _Dest=0x81ec8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.117] wcscat (in: _Dest=0x81ec8d8, _Source="DisplayLanguageNames.da_DK.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" [0167.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0167.118] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x72d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_CH.txt", cAlternateFileName="DI26AE~1.TXT")) returned 1 [0167.118] wcscmp (_String1="DisplayLanguageNames.de_CH.txt", _String2=".") returned 1 [0167.119] wcscmp (_String1="DisplayLanguageNames.de_CH.txt", _String2="..") returned 1 [0167.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ec800 [0167.119] wcscpy (in: _Dest=0x81ec800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.119] wcscat (in: _Dest=0x81ec800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.119] wcscat (in: _Dest=0x81ec800, _Source="DisplayLanguageNames.de_CH.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" [0167.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0167.120] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7328, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE.txt", cAlternateFileName="DID4A5~1.TXT")) returned 1 [0167.120] wcscmp (_String1="DisplayLanguageNames.de_DE.txt", _String2=".") returned 1 [0167.120] wcscmp (_String1="DisplayLanguageNames.de_DE.txt", _String2="..") returned 1 [0167.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ec728 [0167.120] wcscpy (in: _Dest=0x81ec728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.120] wcscat (in: _Dest=0x81ec728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.120] wcscat (in: _Dest=0x81ec728, _Source="DisplayLanguageNames.de_DE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" [0167.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0167.121] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7326, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE_PREEURO.txt", cAlternateFileName="DI06A0~1.TXT")) returned 1 [0167.121] wcscmp (_String1="DisplayLanguageNames.de_DE_PREEURO.txt", _String2=".") returned 1 [0167.121] wcscmp (_String1="DisplayLanguageNames.de_DE_PREEURO.txt", _String2="..") returned 1 [0167.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a990 [0167.121] wcscpy (in: _Dest=0x3e3a990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.121] wcscat (in: _Dest=0x3e3a990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.121] wcscat (in: _Dest=0x3e3a990, _Source="DisplayLanguageNames.de_DE_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" [0167.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0167.123] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el.txt", cAlternateFileName="DI372F~1.TXT")) returned 1 [0167.123] wcscmp (_String1="DisplayLanguageNames.el.txt", _String2=".") returned 1 [0167.123] wcscmp (_String1="DisplayLanguageNames.el.txt", _String2="..") returned 1 [0167.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0008 [0167.123] wcscpy (in: _Dest=0x81f0008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.123] wcscat (in: _Dest=0x81f0008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.123] wcscat (in: _Dest=0x81f0008, _Source="DisplayLanguageNames.el.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" [0167.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0167.124] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR.txt", cAlternateFileName="DI5702~1.TXT")) returned 1 [0167.124] wcscmp (_String1="DisplayLanguageNames.el_GR.txt", _String2=".") returned 1 [0167.124] wcscmp (_String1="DisplayLanguageNames.el_GR.txt", _String2="..") returned 1 [0167.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ec650 [0167.125] wcscpy (in: _Dest=0x81ec650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.125] wcscat (in: _Dest=0x81ec650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.125] wcscat (in: _Dest=0x81ec650, _Source="DisplayLanguageNames.el_GR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" [0167.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0167.126] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR_PREEURO.txt", cAlternateFileName="DI8CEE~1.TXT")) returned 1 [0167.126] wcscmp (_String1="DisplayLanguageNames.el_GR_PREEURO.txt", _String2=".") returned 1 [0167.126] wcscmp (_String1="DisplayLanguageNames.el_GR_PREEURO.txt", _String2="..") returned 1 [0167.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a8a8 [0167.126] wcscpy (in: _Dest=0x3e3a8a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.126] wcscat (in: _Dest=0x3e3a8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.126] wcscat (in: _Dest=0x3e3a8a8, _Source="DisplayLanguageNames.el_GR_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" [0167.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0167.127] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_CA.txt", cAlternateFileName="DI579A~1.TXT")) returned 1 [0167.127] wcscmp (_String1="DisplayLanguageNames.en_CA.txt", _String2=".") returned 1 [0167.127] wcscmp (_String1="DisplayLanguageNames.en_CA.txt", _String2="..") returned 1 [0167.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ecd10 [0167.127] wcscpy (in: _Dest=0x81ecd10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.127] wcscat (in: _Dest=0x81ecd10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.127] wcscat (in: _Dest=0x81ecd10, _Source="DisplayLanguageNames.en_CA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" [0167.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0167.128] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB.txt", cAlternateFileName="DICF87~1.TXT")) returned 1 [0167.128] wcscmp (_String1="DisplayLanguageNames.en_GB.txt", _String2=".") returned 1 [0167.128] wcscmp (_String1="DisplayLanguageNames.en_GB.txt", _String2="..") returned 1 [0167.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ecde8 [0167.128] wcscpy (in: _Dest=0x81ecde8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.128] wcscat (in: _Dest=0x81ecde8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.128] wcscat (in: _Dest=0x81ecde8, _Source="DisplayLanguageNames.en_GB.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" [0167.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0167.129] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB_EURO.txt", cAlternateFileName="DIB168~1.TXT")) returned 1 [0167.129] wcscmp (_String1="DisplayLanguageNames.en_GB_EURO.txt", _String2=".") returned 1 [0167.129] wcscmp (_String1="DisplayLanguageNames.en_GB_EURO.txt", _String2="..") returned 1 [0167.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c90c8 [0167.129] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.130] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.130] wcscat (in: _Dest=0x2c90c8, _Source="DisplayLanguageNames.en_GB_EURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" [0167.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c90c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0167.131] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US.txt", cAlternateFileName="DI0A37~1.TXT")) returned 1 [0167.131] wcscmp (_String1="DisplayLanguageNames.en_US.txt", _String2=".") returned 1 [0167.131] wcscmp (_String1="DisplayLanguageNames.en_US.txt", _String2="..") returned 1 [0167.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ecec0 [0167.131] wcscpy (in: _Dest=0x81ecec0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.131] wcscat (in: _Dest=0x81ecec0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.131] wcscat (in: _Dest=0x81ecec0, _Source="DisplayLanguageNames.en_US.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" [0167.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0167.132] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US_POSIX.txt", cAlternateFileName="DIA6FD~1.TXT")) returned 1 [0167.132] wcscmp (_String1="DisplayLanguageNames.en_US_POSIX.txt", _String2=".") returned 1 [0167.132] wcscmp (_String1="DisplayLanguageNames.en_US_POSIX.txt", _String2="..") returned 1 [0167.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8fe8 [0167.132] wcscpy (in: _Dest=0x2c8fe8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.132] wcscat (in: _Dest=0x2c8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.133] wcscat (in: _Dest=0x2c8fe8, _Source="DisplayLanguageNames.en_US_POSIX.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" [0167.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0167.134] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es.txt", cAlternateFileName="DIA363~1.TXT")) returned 1 [0167.134] wcscmp (_String1="DisplayLanguageNames.es.txt", _String2=".") returned 1 [0167.134] wcscmp (_String1="DisplayLanguageNames.es.txt", _String2="..") returned 1 [0167.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81eff38 [0167.134] wcscpy (in: _Dest=0x81eff38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.134] wcscat (in: _Dest=0x81eff38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.134] wcscat (in: _Dest=0x81eff38, _Source="DisplayLanguageNames.es.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" [0167.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eff38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0167.135] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_AR.txt", cAlternateFileName="DID78F~1.TXT")) returned 1 [0167.135] wcscmp (_String1="DisplayLanguageNames.es_AR.txt", _String2=".") returned 1 [0167.135] wcscmp (_String1="DisplayLanguageNames.es_AR.txt", _String2="..") returned 1 [0167.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ecf98 [0167.135] wcscpy (in: _Dest=0x81ecf98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.135] wcscat (in: _Dest=0x81ecf98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.135] wcscat (in: _Dest=0x81ecf98, _Source="DisplayLanguageNames.es_AR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" [0167.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecf98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0167.136] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_BO.txt", cAlternateFileName="DIA31D~1.TXT")) returned 1 [0167.136] wcscmp (_String1="DisplayLanguageNames.es_BO.txt", _String2=".") returned 1 [0167.136] wcscmp (_String1="DisplayLanguageNames.es_BO.txt", _String2="..") returned 1 [0167.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed070 [0167.137] wcscpy (in: _Dest=0x81ed070, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.137] wcscat (in: _Dest=0x81ed070, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.137] wcscat (in: _Dest=0x81ed070, _Source="DisplayLanguageNames.es_BO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" [0167.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0167.138] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CL.txt", cAlternateFileName="DI9065~1.TXT")) returned 1 [0167.138] wcscmp (_String1="DisplayLanguageNames.es_CL.txt", _String2=".") returned 1 [0167.138] wcscmp (_String1="DisplayLanguageNames.es_CL.txt", _String2="..") returned 1 [0167.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed148 [0167.138] wcscpy (in: _Dest=0x81ed148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.138] wcscat (in: _Dest=0x81ed148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.138] wcscat (in: _Dest=0x81ed148, _Source="DisplayLanguageNames.es_CL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" [0167.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0167.139] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CO.txt", cAlternateFileName="DIF0AE~1.TXT")) returned 1 [0167.139] wcscmp (_String1="DisplayLanguageNames.es_CO.txt", _String2=".") returned 1 [0167.139] wcscmp (_String1="DisplayLanguageNames.es_CO.txt", _String2="..") returned 1 [0167.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed220 [0167.139] wcscpy (in: _Dest=0x81ed220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.139] wcscat (in: _Dest=0x81ed220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.139] wcscat (in: _Dest=0x81ed220, _Source="DisplayLanguageNames.es_CO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" [0167.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0167.140] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CR.txt", cAlternateFileName="DI0002~1.TXT")) returned 1 [0167.140] wcscmp (_String1="DisplayLanguageNames.es_CR.txt", _String2=".") returned 1 [0167.140] wcscmp (_String1="DisplayLanguageNames.es_CR.txt", _String2="..") returned 1 [0167.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed2f8 [0167.140] wcscpy (in: _Dest=0x81ed2f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.140] wcscat (in: _Dest=0x81ed2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.140] wcscat (in: _Dest=0x81ed2f8, _Source="DisplayLanguageNames.es_CR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" [0167.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0167.142] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_DO.txt", cAlternateFileName="DI1A09~1.TXT")) returned 1 [0167.142] wcscmp (_String1="DisplayLanguageNames.es_DO.txt", _String2=".") returned 1 [0167.142] wcscmp (_String1="DisplayLanguageNames.es_DO.txt", _String2="..") returned 1 [0167.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed3d0 [0167.142] wcscpy (in: _Dest=0x81ed3d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.142] wcscat (in: _Dest=0x81ed3d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.142] wcscat (in: _Dest=0x81ed3d0, _Source="DisplayLanguageNames.es_DO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" [0167.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0167.143] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_EC.txt", cAlternateFileName="DIE9E6~1.TXT")) returned 1 [0167.143] wcscmp (_String1="DisplayLanguageNames.es_EC.txt", _String2=".") returned 1 [0167.143] wcscmp (_String1="DisplayLanguageNames.es_EC.txt", _String2="..") returned 1 [0167.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed4a8 [0167.143] wcscpy (in: _Dest=0x81ed4a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.143] wcscat (in: _Dest=0x81ed4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.143] wcscat (in: _Dest=0x81ed4a8, _Source="DisplayLanguageNames.es_EC.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" [0167.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0167.144] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES.txt", cAlternateFileName="DI408C~1.TXT")) returned 1 [0167.144] wcscmp (_String1="DisplayLanguageNames.es_ES.txt", _String2=".") returned 1 [0167.144] wcscmp (_String1="DisplayLanguageNames.es_ES.txt", _String2="..") returned 1 [0167.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3deeff0 [0167.144] wcscpy (in: _Dest=0x3deeff0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.144] wcscat (in: _Dest=0x3deeff0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.144] wcscat (in: _Dest=0x3deeff0, _Source="DisplayLanguageNames.es_ES.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" [0167.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3deeff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0167.145] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES_PREEURO.txt", cAlternateFileName="DI260B~1.TXT")) returned 1 [0167.145] wcscmp (_String1="DisplayLanguageNames.es_ES_PREEURO.txt", _String2=".") returned 1 [0167.145] wcscmp (_String1="DisplayLanguageNames.es_ES_PREEURO.txt", _String2="..") returned 1 [0167.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a168 [0167.145] wcscpy (in: _Dest=0x3e3a168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.145] wcscat (in: _Dest=0x3e3a168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.146] wcscat (in: _Dest=0x3e3a168, _Source="DisplayLanguageNames.es_ES_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" [0167.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0167.146] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_GT.txt", cAlternateFileName="DID1E0~1.TXT")) returned 1 [0167.146] wcscmp (_String1="DisplayLanguageNames.es_GT.txt", _String2=".") returned 1 [0167.146] wcscmp (_String1="DisplayLanguageNames.es_GT.txt", _String2="..") returned 1 [0167.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1648 [0167.147] wcscpy (in: _Dest=0x81f1648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.147] wcscat (in: _Dest=0x81f1648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.147] wcscat (in: _Dest=0x81f1648, _Source="DisplayLanguageNames.es_GT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" [0167.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0167.148] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_HN.txt", cAlternateFileName="DI2D6E~1.TXT")) returned 1 [0168.751] wcscmp (_String1="DisplayLanguageNames.es_HN.txt", _String2=".") returned 1 [0168.751] wcscmp (_String1="DisplayLanguageNames.es_HN.txt", _String2="..") returned 1 [0168.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f24a0 [0168.751] wcscpy (in: _Dest=0x81f24a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0168.751] wcscat (in: _Dest=0x81f24a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0168.751] wcscat (in: _Dest=0x81f24a0, _Source="DisplayLanguageNames.es_HN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" [0169.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f24a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0169.257] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_MX.txt", cAlternateFileName="DI31D9~1.TXT")) returned 1 [0169.257] wcscmp (_String1="DisplayLanguageNames.es_MX.txt", _String2=".") returned 1 [0169.257] wcscmp (_String1="DisplayLanguageNames.es_MX.txt", _String2="..") returned 1 [0169.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed070 [0169.257] wcscpy (in: _Dest=0x81ed070, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.257] wcscat (in: _Dest=0x81ed070, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.258] wcscat (in: _Dest=0x81ed070, _Source="DisplayLanguageNames.es_MX.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" [0169.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0169.259] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ecc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_NI.txt", cAlternateFileName="DI4326~1.TXT")) returned 1 [0169.259] wcscmp (_String1="DisplayLanguageNames.es_NI.txt", _String2=".") returned 1 [0169.259] wcscmp (_String1="DisplayLanguageNames.es_NI.txt", _String2="..") returned 1 [0169.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed148 [0169.259] wcscpy (in: _Dest=0x81ed148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.259] wcscat (in: _Dest=0x81ed148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.259] wcscat (in: _Dest=0x81ed148, _Source="DisplayLanguageNames.es_NI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" [0169.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0169.268] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PA.txt", cAlternateFileName="DI714F~1.TXT")) returned 1 [0169.268] wcscmp (_String1="DisplayLanguageNames.es_PA.txt", _String2=".") returned 1 [0169.268] wcscmp (_String1="DisplayLanguageNames.es_PA.txt", _String2="..") returned 1 [0169.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed220 [0169.268] wcscpy (in: _Dest=0x81ed220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.268] wcscat (in: _Dest=0x81ed220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.268] wcscat (in: _Dest=0x81ed220, _Source="DisplayLanguageNames.es_PA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" [0169.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0169.269] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PE.txt", cAlternateFileName="DIE843~1.TXT")) returned 1 [0169.269] wcscmp (_String1="DisplayLanguageNames.es_PE.txt", _String2=".") returned 1 [0169.269] wcscmp (_String1="DisplayLanguageNames.es_PE.txt", _String2="..") returned 1 [0169.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed2f8 [0169.269] wcscpy (in: _Dest=0x81ed2f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.270] wcscat (in: _Dest=0x81ed2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.270] wcscat (in: _Dest=0x81ed2f8, _Source="DisplayLanguageNames.es_PE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" [0169.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0169.271] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PR.txt", cAlternateFileName="DID39C~1.TXT")) returned 1 [0169.271] wcscmp (_String1="DisplayLanguageNames.es_PR.txt", _String2=".") returned 1 [0169.271] wcscmp (_String1="DisplayLanguageNames.es_PR.txt", _String2="..") returned 1 [0169.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed3d0 [0169.271] wcscpy (in: _Dest=0x81ed3d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.271] wcscat (in: _Dest=0x81ed3d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.271] wcscat (in: _Dest=0x81ed3d0, _Source="DisplayLanguageNames.es_PR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" [0169.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0169.277] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PY.txt", cAlternateFileName="DI61E0~1.TXT")) returned 1 [0169.277] wcscmp (_String1="DisplayLanguageNames.es_PY.txt", _String2=".") returned 1 [0169.277] wcscmp (_String1="DisplayLanguageNames.es_PY.txt", _String2="..") returned 1 [0169.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ed4a8 [0169.277] wcscpy (in: _Dest=0x81ed4a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.278] wcscat (in: _Dest=0x81ed4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.278] wcscat (in: _Dest=0x81ed4a8, _Source="DisplayLanguageNames.es_PY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" [0169.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b8 [0169.283] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_SV.txt", cAlternateFileName="DIBEBA~1.TXT")) returned 1 [0169.283] wcscmp (_String1="DisplayLanguageNames.es_SV.txt", _String2=".") returned 1 [0169.283] wcscmp (_String1="DisplayLanguageNames.es_SV.txt", _String2="..") returned 1 [0169.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ec8d8 [0169.284] wcscpy (in: _Dest=0x81ec8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.284] wcscat (in: _Dest=0x81ec8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.284] wcscat (in: _Dest=0x81ec8d8, _Source="DisplayLanguageNames.es_SV.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" [0169.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0169.289] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_US.txt", cAlternateFileName="DI5822~1.TXT")) returned 1 [0169.289] wcscmp (_String1="DisplayLanguageNames.es_US.txt", _String2=".") returned 1 [0169.289] wcscmp (_String1="DisplayLanguageNames.es_US.txt", _String2="..") returned 1 [0169.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ec800 [0169.289] wcscpy (in: _Dest=0x81ec800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.289] wcscat (in: _Dest=0x81ec800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.289] wcscat (in: _Dest=0x81ec800, _Source="DisplayLanguageNames.es_US.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" [0169.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0169.290] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_UY.txt", cAlternateFileName="DIC7CE~1.TXT")) returned 1 [0169.290] wcscmp (_String1="DisplayLanguageNames.es_UY.txt", _String2=".") returned 1 [0169.290] wcscmp (_String1="DisplayLanguageNames.es_UY.txt", _String2="..") returned 1 [0169.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ec728 [0169.290] wcscpy (in: _Dest=0x81ec728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.290] wcscat (in: _Dest=0x81ec728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.290] wcscat (in: _Dest=0x81ec728, _Source="DisplayLanguageNames.es_UY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" [0169.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0169.291] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_VE.txt", cAlternateFileName="DIACC3~1.TXT")) returned 1 [0169.291] wcscmp (_String1="DisplayLanguageNames.es_VE.txt", _String2=".") returned 1 [0169.291] wcscmp (_String1="DisplayLanguageNames.es_VE.txt", _String2="..") returned 1 [0169.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81eb720 [0169.291] wcscpy (in: _Dest=0x81eb720, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.291] wcscat (in: _Dest=0x81eb720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.291] wcscat (in: _Dest=0x81eb720, _Source="DisplayLanguageNames.es_VE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" [0169.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0169.292] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es__TRADITIONAL.txt", cAlternateFileName="DI8400~1.TXT")) returned 1 [0169.292] wcscmp (_String1="DisplayLanguageNames.es__TRADITIONAL.txt", _String2=".") returned 1 [0169.292] wcscmp (_String1="DisplayLanguageNames.es__TRADITIONAL.txt", _String2="..") returned 1 [0169.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x81edf58 [0169.292] wcscpy (in: _Dest=0x81edf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.292] wcscat (in: _Dest=0x81edf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.292] wcscat (in: _Dest=0x81edf58, _Source="DisplayLanguageNames.es__TRADITIONAL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" [0169.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81edf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0169.293] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et.txt", cAlternateFileName="DIED82~1.TXT")) returned 1 [0169.293] wcscmp (_String1="DisplayLanguageNames.et.txt", _String2=".") returned 1 [0169.293] wcscmp (_String1="DisplayLanguageNames.et.txt", _String2="..") returned 1 [0169.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0418 [0169.293] wcscpy (in: _Dest=0x81f0418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.293] wcscat (in: _Dest=0x81f0418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.293] wcscat (in: _Dest=0x81f0418, _Source="DisplayLanguageNames.et.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" [0169.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0169.294] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et_EE.txt", cAlternateFileName="DI9AE7~1.TXT")) returned 1 [0169.294] wcscmp (_String1="DisplayLanguageNames.et_EE.txt", _String2=".") returned 1 [0169.294] wcscmp (_String1="DisplayLanguageNames.et_EE.txt", _String2="..") returned 1 [0169.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81eb7f8 [0169.294] wcscpy (in: _Dest=0x81eb7f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.294] wcscat (in: _Dest=0x81eb7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.294] wcscat (in: _Dest=0x81eb7f8, _Source="DisplayLanguageNames.et_EE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" [0169.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x239c [0169.295] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi.txt", cAlternateFileName="DIC325~1.TXT")) returned 1 [0169.295] wcscmp (_String1="DisplayLanguageNames.fi.txt", _String2=".") returned 1 [0169.295] wcscmp (_String1="DisplayLanguageNames.fi.txt", _String2="..") returned 1 [0169.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f04e8 [0169.296] wcscpy (in: _Dest=0x81f04e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.296] wcscat (in: _Dest=0x81f04e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.296] wcscat (in: _Dest=0x81f04e8, _Source="DisplayLanguageNames.fi.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" [0169.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f04e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2398 [0169.296] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI.txt", cAlternateFileName="DI7250~1.TXT")) returned 1 [0169.297] wcscmp (_String1="DisplayLanguageNames.fi_FI.txt", _String2=".") returned 1 [0169.297] wcscmp (_String1="DisplayLanguageNames.fi_FI.txt", _String2="..") returned 1 [0169.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81eb648 [0169.297] wcscpy (in: _Dest=0x81eb648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.297] wcscat (in: _Dest=0x81eb648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.297] wcscat (in: _Dest=0x81eb648, _Source="DisplayLanguageNames.fi_FI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" [0169.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0169.297] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI_PREEURO.txt", cAlternateFileName="DI4571~1.TXT")) returned 1 [0169.298] wcscmp (_String1="DisplayLanguageNames.fi_FI_PREEURO.txt", _String2=".") returned 1 [0169.298] wcscmp (_String1="DisplayLanguageNames.fi_FI_PREEURO.txt", _String2="..") returned 1 [0169.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x81ee040 [0169.298] wcscpy (in: _Dest=0x81ee040, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.298] wcscat (in: _Dest=0x81ee040, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.298] wcscat (in: _Dest=0x81ee040, _Source="DisplayLanguageNames.fi_FI_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" [0169.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ee040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0169.299] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_CA.txt", cAlternateFileName="DI603C~1.TXT")) returned 1 [0169.299] wcscmp (_String1="DisplayLanguageNames.fr_CA.txt", _String2=".") returned 1 [0169.299] wcscmp (_String1="DisplayLanguageNames.fr_CA.txt", _String2="..") returned 1 [0169.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1648 [0169.299] wcscpy (in: _Dest=0x81f1648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.299] wcscat (in: _Dest=0x81f1648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.299] wcscat (in: _Dest=0x81f1648, _Source="DisplayLanguageNames.fr_CA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" [0169.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238c [0169.300] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR.txt", cAlternateFileName="DIC6EF~1.TXT")) returned 1 [0169.300] wcscmp (_String1="DisplayLanguageNames.fr_FR.txt", _String2=".") returned 1 [0169.300] wcscmp (_String1="DisplayLanguageNames.fr_FR.txt", _String2="..") returned 1 [0169.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2578 [0169.300] wcscpy (in: _Dest=0x81f2578, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.300] wcscat (in: _Dest=0x81f2578, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.300] wcscat (in: _Dest=0x81f2578, _Source="DisplayLanguageNames.fr_FR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" [0169.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2388 [0169.301] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR_PREEURO.txt", cAlternateFileName="DIFF6A~1.TXT")) returned 1 [0169.301] wcscmp (_String1="DisplayLanguageNames.fr_FR_PREEURO.txt", _String2=".") returned 1 [0169.301] wcscmp (_String1="DisplayLanguageNames.fr_FR_PREEURO.txt", _String2="..") returned 1 [0169.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x81ee128 [0169.301] wcscpy (in: _Dest=0x81ee128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.301] wcscat (in: _Dest=0x81ee128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.301] wcscat (in: _Dest=0x81ee128, _Source="DisplayLanguageNames.fr_FR_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" [0169.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ee128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0169.302] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he.txt", cAlternateFileName="DI503B~1.TXT")) returned 1 [0169.302] wcscmp (_String1="DisplayLanguageNames.he.txt", _String2=".") returned 1 [0169.302] wcscmp (_String1="DisplayLanguageNames.he.txt", _String2="..") returned 1 [0169.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f05b8 [0169.302] wcscpy (in: _Dest=0x81f05b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.302] wcscat (in: _Dest=0x81f05b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.302] wcscat (in: _Dest=0x81f05b8, _Source="DisplayLanguageNames.he.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" [0169.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f05b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0169.303] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he_IL.txt", cAlternateFileName="DI97E6~1.TXT")) returned 1 [0169.303] wcscmp (_String1="DisplayLanguageNames.he_IL.txt", _String2=".") returned 1 [0169.303] wcscmp (_String1="DisplayLanguageNames.he_IL.txt", _String2="..") returned 1 [0169.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2650 [0169.303] wcscpy (in: _Dest=0x81f2650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.304] wcscat (in: _Dest=0x81f2650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.304] wcscat (in: _Dest=0x81f2650, _Source="DisplayLanguageNames.he_IL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" [0169.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0169.305] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr.txt", cAlternateFileName="DI4B74~1.TXT")) returned 1 [0169.305] wcscmp (_String1="DisplayLanguageNames.hr.txt", _String2=".") returned 1 [0169.305] wcscmp (_String1="DisplayLanguageNames.hr.txt", _String2="..") returned 1 [0169.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0688 [0169.305] wcscpy (in: _Dest=0x81f0688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.305] wcscat (in: _Dest=0x81f0688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.305] wcscat (in: _Dest=0x81f0688, _Source="DisplayLanguageNames.hr.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" [0169.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2378 [0169.306] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr_HR.txt", cAlternateFileName="DI0D1D~1.TXT")) returned 1 [0169.306] wcscmp (_String1="DisplayLanguageNames.hr_HR.txt", _String2=".") returned 1 [0169.306] wcscmp (_String1="DisplayLanguageNames.hr_HR.txt", _String2="..") returned 1 [0169.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2728 [0169.306] wcscpy (in: _Dest=0x81f2728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.306] wcscat (in: _Dest=0x81f2728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.306] wcscat (in: _Dest=0x81f2728, _Source="DisplayLanguageNames.hr_HR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" [0169.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0169.308] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu.txt", cAlternateFileName="DIB428~1.TXT")) returned 1 [0169.308] wcscmp (_String1="DisplayLanguageNames.hu.txt", _String2=".") returned 1 [0169.308] wcscmp (_String1="DisplayLanguageNames.hu.txt", _String2="..") returned 1 [0169.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0758 [0169.308] wcscpy (in: _Dest=0x81f0758, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0169.308] wcscat (in: _Dest=0x81f0758, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0169.308] wcscat (in: _Dest=0x81f0758, _Source="DisplayLanguageNames.hu.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" [0169.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0169.309] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu_HU.txt", cAlternateFileName="DI4400~1.TXT")) returned 1 [0171.729] wcscmp (_String1="DisplayLanguageNames.hu_HU.txt", _String2=".") returned 1 [0171.729] wcscmp (_String1="DisplayLanguageNames.hu_HU.txt", _String2="..") returned 1 [0171.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81eb9a8 [0171.729] wcscpy (in: _Dest=0x81eb9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.729] wcscat (in: _Dest=0x81eb9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.729] wcscat (in: _Dest=0x81eb9a8, _Source="DisplayLanguageNames.hu_HU.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" [0174.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b4 [0174.279] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it.txt", cAlternateFileName="DIABB3~1.TXT")) returned 1 [0174.279] wcscmp (_String1="DisplayLanguageNames.it.txt", _String2=".") returned 1 [0174.279] wcscmp (_String1="DisplayLanguageNames.it.txt", _String2="..") returned 1 [0174.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3034e90 [0174.279] wcscpy (in: _Dest=0x3034e90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.279] wcscat (in: _Dest=0x3034e90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.279] wcscat (in: _Dest=0x3034e90, _Source="DisplayLanguageNames.it.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" [0174.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3034e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0174.280] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_CH.txt", cAlternateFileName="DIFC7F~1.TXT")) returned 1 [0174.280] wcscmp (_String1="DisplayLanguageNames.it_CH.txt", _String2=".") returned 1 [0174.280] wcscmp (_String1="DisplayLanguageNames.it_CH.txt", _String2="..") returned 1 [0174.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e656c8 [0174.281] wcscpy (in: _Dest=0x3e656c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.281] wcscat (in: _Dest=0x3e656c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.281] wcscat (in: _Dest=0x3e656c8, _Source="DisplayLanguageNames.it_CH.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" [0174.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e656c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x299c [0174.281] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT.txt", cAlternateFileName="DI5DFF~1.TXT")) returned 1 [0174.282] wcscmp (_String1="DisplayLanguageNames.it_IT.txt", _String2=".") returned 1 [0174.282] wcscmp (_String1="DisplayLanguageNames.it_IT.txt", _String2="..") returned 1 [0174.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e657a0 [0174.282] wcscpy (in: _Dest=0x3e657a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.282] wcscat (in: _Dest=0x3e657a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.282] wcscat (in: _Dest=0x3e657a0, _Source="DisplayLanguageNames.it_IT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" [0174.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e657a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a8 [0174.283] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT_PREEURO.txt", cAlternateFileName="DI988F~1.TXT")) returned 1 [0174.283] wcscmp (_String1="DisplayLanguageNames.it_IT_PREEURO.txt", _String2=".") returned 1 [0174.283] wcscmp (_String1="DisplayLanguageNames.it_IT_PREEURO.txt", _String2="..") returned 1 [0174.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a990 [0174.283] wcscpy (in: _Dest=0x3e3a990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.283] wcscat (in: _Dest=0x3e3a990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.283] wcscat (in: _Dest=0x3e3a990, _Source="DisplayLanguageNames.it_IT_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" [0174.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b3c [0174.284] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja.txt", cAlternateFileName="DI0CF7~1.TXT")) returned 1 [0174.284] wcscmp (_String1="DisplayLanguageNames.ja.txt", _String2=".") returned 1 [0174.284] wcscmp (_String1="DisplayLanguageNames.ja.txt", _String2="..") returned 1 [0174.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036a30 [0174.284] wcscpy (in: _Dest=0x3036a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.284] wcscat (in: _Dest=0x3036a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.284] wcscat (in: _Dest=0x3036a30, _Source="DisplayLanguageNames.ja.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" [0174.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3036a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444 [0174.285] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP.txt", cAlternateFileName="DI3A02~1.TXT")) returned 1 [0174.285] wcscmp (_String1="DisplayLanguageNames.ja_JP.txt", _String2=".") returned 1 [0174.285] wcscmp (_String1="DisplayLanguageNames.ja_JP.txt", _String2="..") returned 1 [0174.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e64288 [0174.285] wcscpy (in: _Dest=0x3e64288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.285] wcscat (in: _Dest=0x3e64288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.285] wcscat (in: _Dest=0x3e64288, _Source="DisplayLanguageNames.ja_JP.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" [0174.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0174.286] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6594, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", cAlternateFileName="DI1663~1.TXT")) returned 1 [0174.286] wcscmp (_String1="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", _String2=".") returned 1 [0174.286] wcscmp (_String1="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", _String2="..") returned 1 [0174.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x80217d0 [0174.286] wcscpy (in: _Dest=0x80217d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.286] wcscat (in: _Dest=0x80217d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.286] wcscat (in: _Dest=0x80217d0, _Source="DisplayLanguageNames.ja_JP_TRADITIONAL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" [0174.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80217d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0174.287] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko.txt", cAlternateFileName="DI1265~1.TXT")) returned 1 [0174.287] wcscmp (_String1="DisplayLanguageNames.ko.txt", _String2=".") returned 1 [0174.287] wcscmp (_String1="DisplayLanguageNames.ko.txt", _String2="..") returned 1 [0174.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81ef7e8 [0174.287] wcscpy (in: _Dest=0x81ef7e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.287] wcscat (in: _Dest=0x81ef7e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.287] wcscat (in: _Dest=0x81ef7e8, _Source="DisplayLanguageNames.ko.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" [0174.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef7e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0174.288] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko_KR.txt", cAlternateFileName="DI9E0C~1.TXT")) returned 1 [0174.288] wcscmp (_String1="DisplayLanguageNames.ko_KR.txt", _String2=".") returned 1 [0174.288] wcscmp (_String1="DisplayLanguageNames.ko_KR.txt", _String2="..") returned 1 [0174.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65950 [0174.288] wcscpy (in: _Dest=0x3e65950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.288] wcscat (in: _Dest=0x3e65950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.288] wcscat (in: _Dest=0x3e65950, _Source="DisplayLanguageNames.ko_KR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" [0174.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0174.289] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt.txt", cAlternateFileName="DIA1C2~1.TXT")) returned 1 [0174.289] wcscmp (_String1="DisplayLanguageNames.lt.txt", _String2=".") returned 1 [0174.289] wcscmp (_String1="DisplayLanguageNames.lt.txt", _String2="..") returned 1 [0174.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81efb28 [0174.290] wcscpy (in: _Dest=0x81efb28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.290] wcscat (in: _Dest=0x81efb28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.290] wcscat (in: _Dest=0x81efb28, _Source="DisplayLanguageNames.lt.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" [0174.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efb28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0174.290] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt_LT.txt", cAlternateFileName="DI6CC8~1.TXT")) returned 1 [0174.291] wcscmp (_String1="DisplayLanguageNames.lt_LT.txt", _String2=".") returned 1 [0174.291] wcscmp (_String1="DisplayLanguageNames.lt_LT.txt", _String2="..") returned 1 [0174.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e64438 [0174.291] wcscpy (in: _Dest=0x3e64438, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.291] wcscat (in: _Dest=0x3e64438, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.291] wcscat (in: _Dest=0x3e64438, _Source="DisplayLanguageNames.lt_LT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" [0174.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0174.292] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv.txt", cAlternateFileName="DI4C2B~1.TXT")) returned 1 [0174.292] wcscmp (_String1="DisplayLanguageNames.lv.txt", _String2=".") returned 1 [0174.292] wcscmp (_String1="DisplayLanguageNames.lv.txt", _String2="..") returned 1 [0174.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81efbf8 [0174.292] wcscpy (in: _Dest=0x81efbf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.292] wcscat (in: _Dest=0x81efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.292] wcscat (in: _Dest=0x81efbf8, _Source="DisplayLanguageNames.lv.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" [0174.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0174.293] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv_LV.txt", cAlternateFileName="DI7CF0~1.TXT")) returned 1 [0174.293] wcscmp (_String1="DisplayLanguageNames.lv_LV.txt", _String2=".") returned 1 [0174.293] wcscmp (_String1="DisplayLanguageNames.lv_LV.txt", _String2="..") returned 1 [0174.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e655f0 [0174.293] wcscpy (in: _Dest=0x3e655f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.293] wcscat (in: _Dest=0x3e655f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.293] wcscat (in: _Dest=0x3e655f0, _Source="DisplayLanguageNames.lv_LV.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" [0174.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e655f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0174.294] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb.txt", cAlternateFileName="DI74F4~1.TXT")) returned 1 [0174.294] wcscmp (_String1="DisplayLanguageNames.nb.txt", _String2=".") returned 1 [0174.294] wcscmp (_String1="DisplayLanguageNames.nb.txt", _String2="..") returned 1 [0174.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0278 [0174.294] wcscpy (in: _Dest=0x81f0278, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.295] wcscat (in: _Dest=0x81f0278, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.295] wcscat (in: _Dest=0x81f0278, _Source="DisplayLanguageNames.nb.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" [0174.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c84 [0174.296] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb_NO.txt", cAlternateFileName="DI7EFB~1.TXT")) returned 1 [0174.296] wcscmp (_String1="DisplayLanguageNames.nb_NO.txt", _String2=".") returned 1 [0174.296] wcscmp (_String1="DisplayLanguageNames.nb_NO.txt", _String2="..") returned 1 [0174.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65b00 [0174.296] wcscpy (in: _Dest=0x3e65b00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.296] wcscat (in: _Dest=0x3e65b00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.296] wcscat (in: _Dest=0x3e65b00, _Source="DisplayLanguageNames.nb_NO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" [0174.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c88 [0174.297] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl.txt", cAlternateFileName="DIDFDB~1.TXT")) returned 1 [0174.297] wcscmp (_String1="DisplayLanguageNames.nl.txt", _String2=".") returned 1 [0174.297] wcscmp (_String1="DisplayLanguageNames.nl.txt", _String2="..") returned 1 [0174.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f01a8 [0174.297] wcscpy (in: _Dest=0x81f01a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.297] wcscat (in: _Dest=0x81f01a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.297] wcscat (in: _Dest=0x81f01a8, _Source="DisplayLanguageNames.nl.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" [0174.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f01a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8c [0174.298] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE.txt", cAlternateFileName="DI6018~1.TXT")) returned 1 [0174.298] wcscmp (_String1="DisplayLanguageNames.nl_BE.txt", _String2=".") returned 1 [0174.298] wcscmp (_String1="DisplayLanguageNames.nl_BE.txt", _String2="..") returned 1 [0174.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0174.299] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.299] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.299] wcscat (in: _Dest=0x3e65a28, _Source="DisplayLanguageNames.nl_BE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" [0174.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c90 [0174.300] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE_PREEURO.txt", cAlternateFileName="DIB2C6~1.TXT")) returned 1 [0174.300] wcscmp (_String1="DisplayLanguageNames.nl_BE_PREEURO.txt", _String2=".") returned 1 [0174.300] wcscmp (_String1="DisplayLanguageNames.nl_BE_PREEURO.txt", _String2="..") returned 1 [0174.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a080 [0174.300] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.300] wcscat (in: _Dest=0x3e3a080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.300] wcscat (in: _Dest=0x3e3a080, _Source="DisplayLanguageNames.nl_BE_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" [0174.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c94 [0174.301] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL.txt", cAlternateFileName="DI742E~1.TXT")) returned 1 [0174.301] wcscmp (_String1="DisplayLanguageNames.nl_NL.txt", _String2=".") returned 1 [0174.301] wcscmp (_String1="DisplayLanguageNames.nl_NL.txt", _String2="..") returned 1 [0174.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65878 [0174.302] wcscpy (in: _Dest=0x3e65878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.302] wcscat (in: _Dest=0x3e65878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.302] wcscat (in: _Dest=0x3e65878, _Source="DisplayLanguageNames.nl_NL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" [0174.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c98 [0174.303] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL_PREEURO.txt", cAlternateFileName="DI3524~1.TXT")) returned 1 [0174.303] wcscmp (_String1="DisplayLanguageNames.nl_NL_PREEURO.txt", _String2=".") returned 1 [0174.303] wcscmp (_String1="DisplayLanguageNames.nl_NL_PREEURO.txt", _String2="..") returned 1 [0174.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3b470 [0174.303] wcscpy (in: _Dest=0x3e3b470, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.303] wcscat (in: _Dest=0x3e3b470, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.303] wcscat (in: _Dest=0x3e3b470, _Source="DisplayLanguageNames.nl_NL_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" [0174.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c [0174.305] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nn_NO.txt", cAlternateFileName="DIF7B3~1.TXT")) returned 1 [0174.305] wcscmp (_String1="DisplayLanguageNames.nn_NO.txt", _String2=".") returned 1 [0174.305] wcscmp (_String1="DisplayLanguageNames.nn_NO.txt", _String2="..") returned 1 [0174.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65290 [0174.305] wcscpy (in: _Dest=0x3e65290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.305] wcscat (in: _Dest=0x3e65290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.305] wcscat (in: _Dest=0x3e65290, _Source="DisplayLanguageNames.nn_NO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" [0174.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0 [0174.306] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl.txt", cAlternateFileName="DI69EF~1.TXT")) returned 1 [0174.306] wcscmp (_String1="DisplayLanguageNames.pl.txt", _String2=".") returned 1 [0174.306] wcscmp (_String1="DisplayLanguageNames.pl.txt", _String2="..") returned 1 [0174.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0348 [0174.306] wcscpy (in: _Dest=0x81f0348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.306] wcscat (in: _Dest=0x81f0348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.306] wcscat (in: _Dest=0x81f0348, _Source="DisplayLanguageNames.pl.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" [0174.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca4 [0174.307] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl_PL.txt", cAlternateFileName="DI4ABE~1.TXT")) returned 1 [0174.307] wcscmp (_String1="DisplayLanguageNames.pl_PL.txt", _String2=".") returned 1 [0174.307] wcscmp (_String1="DisplayLanguageNames.pl_PL.txt", _String2="..") returned 1 [0174.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65518 [0174.307] wcscpy (in: _Dest=0x3e65518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.308] wcscat (in: _Dest=0x3e65518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.308] wcscat (in: _Dest=0x3e65518, _Source="DisplayLanguageNames.pl_PL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" [0174.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca8 [0174.308] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_BR.txt", cAlternateFileName="DIC9A4~1.TXT")) returned 1 [0174.308] wcscmp (_String1="DisplayLanguageNames.pt_BR.txt", _String2=".") returned 1 [0174.309] wcscmp (_String1="DisplayLanguageNames.pt_BR.txt", _String2="..") returned 1 [0174.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2140 [0174.309] wcscpy (in: _Dest=0x81f2140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.309] wcscat (in: _Dest=0x81f2140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.309] wcscat (in: _Dest=0x81f2140, _Source="DisplayLanguageNames.pt_BR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" [0174.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d18 [0174.310] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT.txt", cAlternateFileName="DI7FB1~1.TXT")) returned 1 [0174.310] wcscmp (_String1="DisplayLanguageNames.pt_PT.txt", _String2=".") returned 1 [0174.310] wcscmp (_String1="DisplayLanguageNames.pt_PT.txt", _String2="..") returned 1 [0174.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1720 [0174.310] wcscpy (in: _Dest=0x81f1720, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.310] wcscat (in: _Dest=0x81f1720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.310] wcscat (in: _Dest=0x81f1720, _Source="DisplayLanguageNames.pt_PT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" [0174.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d1c [0174.311] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT_PREEURO.txt", cAlternateFileName="DIB661~1.TXT")) returned 1 [0174.311] wcscmp (_String1="DisplayLanguageNames.pt_PT_PREEURO.txt", _String2=".") returned 1 [0174.311] wcscmp (_String1="DisplayLanguageNames.pt_PT_PREEURO.txt", _String2="..") returned 1 [0174.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3b0d0 [0174.311] wcscpy (in: _Dest=0x3e3b0d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.311] wcscat (in: _Dest=0x3e3b0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.312] wcscat (in: _Dest=0x3e3b0d0, _Source="DisplayLanguageNames.pt_PT_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" [0174.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d20 [0174.312] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro.txt", cAlternateFileName="DI0257~1.TXT")) returned 1 [0174.312] wcscmp (_String1="DisplayLanguageNames.ro.txt", _String2=".") returned 1 [0174.312] wcscmp (_String1="DisplayLanguageNames.ro.txt", _String2="..") returned 1 [0174.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f04e8 [0174.313] wcscpy (in: _Dest=0x81f04e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.313] wcscat (in: _Dest=0x81f04e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.313] wcscat (in: _Dest=0x81f04e8, _Source="DisplayLanguageNames.ro.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" [0174.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f04e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d24 [0174.314] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro_RO.txt", cAlternateFileName="DIC031~1.TXT")) returned 1 [0174.314] wcscmp (_String1="DisplayLanguageNames.ro_RO.txt", _String2=".") returned 1 [0174.314] wcscmp (_String1="DisplayLanguageNames.ro_RO.txt", _String2="..") returned 1 [0174.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f22f0 [0174.314] wcscpy (in: _Dest=0x81f22f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.314] wcscat (in: _Dest=0x81f22f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.314] wcscat (in: _Dest=0x81f22f0, _Source="DisplayLanguageNames.ro_RO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" [0174.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f22f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0174.315] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru.txt", cAlternateFileName="DIBDC2~1.TXT")) returned 1 [0174.315] wcscmp (_String1="DisplayLanguageNames.ru.txt", _String2=".") returned 1 [0174.315] wcscmp (_String1="DisplayLanguageNames.ru.txt", _String2="..") returned 1 [0174.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0418 [0174.315] wcscpy (in: _Dest=0x81f0418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.315] wcscat (in: _Dest=0x81f0418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.315] wcscat (in: _Dest=0x81f0418, _Source="DisplayLanguageNames.ru.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" [0174.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a20 [0174.316] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_RU.txt", cAlternateFileName="DI759A~1.TXT")) returned 1 [0174.316] wcscmp (_String1="DisplayLanguageNames.ru_RU.txt", _String2=".") returned 1 [0174.316] wcscmp (_String1="DisplayLanguageNames.ru_RU.txt", _String2="..") returned 1 [0174.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2068 [0174.316] wcscpy (in: _Dest=0x81f2068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.316] wcscat (in: _Dest=0x81f2068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.316] wcscat (in: _Dest=0x81f2068, _Source="DisplayLanguageNames.ru_RU.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" [0174.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a24 [0175.106] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_UA.txt", cAlternateFileName="DI0840~1.TXT")) returned 1 [0175.106] wcscmp (_String1="DisplayLanguageNames.ru_UA.txt", _String2=".") returned 1 [0175.106] wcscmp (_String1="DisplayLanguageNames.ru_UA.txt", _String2="..") returned 1 [0175.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e656c8 [0175.106] wcscpy (in: _Dest=0x3e656c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.116] wcscat (in: _Dest=0x3e656c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.116] wcscat (in: _Dest=0x3e656c8, _Source="DisplayLanguageNames.ru_UA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" [0175.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e656c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b18 [0175.639] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk.txt", cAlternateFileName="DIDD84~1.TXT")) returned 1 [0175.639] wcscmp (_String1="DisplayLanguageNames.sk.txt", _String2=".") returned 1 [0175.639] wcscmp (_String1="DisplayLanguageNames.sk.txt", _String2="..") returned 1 [0175.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f05b8 [0175.639] wcscpy (in: _Dest=0x81f05b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.639] wcscat (in: _Dest=0x81f05b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.639] wcscat (in: _Dest=0x81f05b8, _Source="DisplayLanguageNames.sk.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" [0175.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f05b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0175.640] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk_SK.txt", cAlternateFileName="DI9804~1.TXT")) returned 1 [0175.640] wcscmp (_String1="DisplayLanguageNames.sk_SK.txt", _String2=".") returned 1 [0175.641] wcscmp (_String1="DisplayLanguageNames.sk_SK.txt", _String2="..") returned 1 [0175.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1f90 [0175.641] wcscpy (in: _Dest=0x81f1f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.641] wcscat (in: _Dest=0x81f1f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.641] wcscat (in: _Dest=0x81f1f90, _Source="DisplayLanguageNames.sk_SK.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" [0175.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0175.642] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl.txt", cAlternateFileName="DIF8FC~1.TXT")) returned 1 [0175.642] wcscmp (_String1="DisplayLanguageNames.sl.txt", _String2=".") returned 1 [0175.642] wcscmp (_String1="DisplayLanguageNames.sl.txt", _String2="..") returned 1 [0175.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0688 [0175.642] wcscpy (in: _Dest=0x81f0688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.642] wcscat (in: _Dest=0x81f0688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.642] wcscat (in: _Dest=0x81f0688, _Source="DisplayLanguageNames.sl.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" [0175.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0175.643] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl_SI.txt", cAlternateFileName="DI9B2F~1.TXT")) returned 1 [0175.643] wcscmp (_String1="DisplayLanguageNames.sl_SI.txt", _String2=".") returned 1 [0175.643] wcscmp (_String1="DisplayLanguageNames.sl_SI.txt", _String2="..") returned 1 [0175.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f24a0 [0175.643] wcscpy (in: _Dest=0x81f24a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.643] wcscat (in: _Dest=0x81f24a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.643] wcscat (in: _Dest=0x81f24a0, _Source="DisplayLanguageNames.sl_SI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" [0175.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f24a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0175.644] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv.txt", cAlternateFileName="DIF2A9~1.TXT")) returned 1 [0175.644] wcscmp (_String1="DisplayLanguageNames.sv.txt", _String2=".") returned 1 [0175.644] wcscmp (_String1="DisplayLanguageNames.sv.txt", _String2="..") returned 1 [0175.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0758 [0175.644] wcscpy (in: _Dest=0x81f0758, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.644] wcscat (in: _Dest=0x81f0758, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.644] wcscat (in: _Dest=0x81f0758, _Source="DisplayLanguageNames.sv.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" [0175.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0175.645] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7144, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_FI.txt", cAlternateFileName="DIE445~1.TXT")) returned 1 [0175.645] wcscmp (_String1="DisplayLanguageNames.sv_FI.txt", _String2=".") returned 1 [0175.645] wcscmp (_String1="DisplayLanguageNames.sv_FI.txt", _String2="..") returned 1 [0175.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1648 [0175.645] wcscpy (in: _Dest=0x81f1648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.645] wcscat (in: _Dest=0x81f1648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.645] wcscat (in: _Dest=0x81f1648, _Source="DisplayLanguageNames.sv_FI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" [0175.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0175.646] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_SE.txt", cAlternateFileName="DISPLA~4.TXT")) returned 1 [0175.646] wcscmp (_String1="DisplayLanguageNames.sv_SE.txt", _String2=".") returned 1 [0175.646] wcscmp (_String1="DisplayLanguageNames.sv_SE.txt", _String2="..") returned 1 [0175.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2578 [0175.646] wcscpy (in: _Dest=0x81f2578, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.646] wcscat (in: _Dest=0x81f2578, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.646] wcscat (in: _Dest=0x81f2578, _Source="DisplayLanguageNames.sv_SE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" [0175.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0175.647] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr.txt", cAlternateFileName="DIA3CE~1.TXT")) returned 1 [0175.647] wcscmp (_String1="DisplayLanguageNames.tr.txt", _String2=".") returned 1 [0175.647] wcscmp (_String1="DisplayLanguageNames.tr.txt", _String2="..") returned 1 [0175.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81ef988 [0175.647] wcscpy (in: _Dest=0x81ef988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.647] wcscat (in: _Dest=0x81ef988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.647] wcscat (in: _Dest=0x81ef988, _Source="DisplayLanguageNames.tr.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" [0175.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0175.648] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr_TR.txt", cAlternateFileName="DIF209~1.TXT")) returned 1 [0175.648] wcscmp (_String1="DisplayLanguageNames.tr_TR.txt", _String2=".") returned 1 [0175.648] wcscmp (_String1="DisplayLanguageNames.tr_TR.txt", _String2="..") returned 1 [0175.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2650 [0175.649] wcscpy (in: _Dest=0x81f2650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.649] wcscat (in: _Dest=0x81f2650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.649] wcscat (in: _Dest=0x81f2650, _Source="DisplayLanguageNames.tr_TR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" [0175.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0175.650] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk.txt", cAlternateFileName="DI4480~1.TXT")) returned 1 [0175.650] wcscmp (_String1="DisplayLanguageNames.uk.txt", _String2=".") returned 1 [0175.650] wcscmp (_String1="DisplayLanguageNames.uk.txt", _String2="..") returned 1 [0175.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81ef8b8 [0175.650] wcscpy (in: _Dest=0x81ef8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.650] wcscat (in: _Dest=0x81ef8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.650] wcscat (in: _Dest=0x81ef8b8, _Source="DisplayLanguageNames.uk.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" [0175.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0175.651] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk_UA.txt", cAlternateFileName="DICC10~1.TXT")) returned 1 [0175.651] wcscmp (_String1="DisplayLanguageNames.uk_UA.txt", _String2=".") returned 1 [0175.651] wcscmp (_String1="DisplayLanguageNames.uk_UA.txt", _String2="..") returned 1 [0175.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2728 [0175.651] wcscpy (in: _Dest=0x81f2728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.651] wcscat (in: _Dest=0x81f2728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.651] wcscat (in: _Dest=0x81f2728, _Source="DisplayLanguageNames.uk_UA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" [0175.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0175.652] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6068, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_CN.txt", cAlternateFileName="DISPLA~3.TXT")) returned 1 [0175.652] wcscmp (_String1="DisplayLanguageNames.zh_CN.txt", _String2=".") returned 1 [0175.652] wcscmp (_String1="DisplayLanguageNames.zh_CN.txt", _String2="..") returned 1 [0175.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f23c8 [0175.652] wcscpy (in: _Dest=0x81f23c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.652] wcscat (in: _Dest=0x81f23c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.652] wcscat (in: _Dest=0x81f23c8, _Source="DisplayLanguageNames.zh_CN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" [0175.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f23c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0175.653] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x605a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW.txt", cAlternateFileName="DISPLA~1.TXT")) returned 1 [0175.653] wcscmp (_String1="DisplayLanguageNames.zh_TW.txt", _String2=".") returned 1 [0175.653] wcscmp (_String1="DisplayLanguageNames.zh_TW.txt", _String2="..") returned 1 [0175.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2218 [0175.653] wcscpy (in: _Dest=0x81f2218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.653] wcscat (in: _Dest=0x81f2218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.653] wcscat (in: _Dest=0x81f2218, _Source="DisplayLanguageNames.zh_TW.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" [0175.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0175.654] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="DISPLA~2.TXT")) returned 1 [0175.654] wcscmp (_String1="DisplayLanguageNames.zh_TW_STROKE.txt", _String2=".") returned 1 [0175.654] wcscmp (_String1="DisplayLanguageNames.zh_TW_STROKE.txt", _String2="..") returned 1 [0175.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3aa78 [0175.654] wcscpy (in: _Dest=0x3e3aa78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.654] wcscat (in: _Dest=0x3e3aa78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.654] wcscat (in: _Dest=0x3e3aa78, _Source="DisplayLanguageNames.zh_TW_STROKE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" [0175.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3aa78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0175.655] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="DISPLA~2.TXT")) returned 0 [0177.469] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0187.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86618) returned 1 [0187.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ad18) returned 1 [0187.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ce28) returned 1 [0187.106] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 1 [0187.106] wcscmp (_String1="Providers", _String2=".") returned 1 [0187.106] wcscmp (_String1="Providers", _String2="..") returned 1 [0187.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ddd98 [0187.106] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0187.106] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\" [0187.106] wcscat (in: _Dest=0x81ddd98, _Source="Providers" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" [0187.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b30 [0187.969] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 0 [0187.969] FindClose (in: hFindFile=0x8098950 | out: hFindFile=0x8098950) returned 1 [0187.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0187.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 [0187.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b6b8) returned 1 Thread: id = 1535 os_tid = 0x124c [0147.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0c270 [0147.673] wcscpy (in: _Dest=0x3f0c270, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" [0147.673] wcscat (in: _Dest=0x3f0c270, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\" [0147.673] wcscat (in: _Dest=0x3f0c270, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*" [0147.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0147.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099490 [0148.553] wcscmp (_String1=".", _String2=".") returned 0 [0148.553] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.553] wcscmp (_String1="..", _String2=".") returned 1 [0148.553] wcscmp (_String1="..", _String2="..") returned 0 [0148.553] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 1 [0148.554] wcscmp (_String1="SaslPrepProfile_norm_bidi.spp", _String2=".") returned 1 [0148.554] wcscmp (_String1="SaslPrepProfile_norm_bidi.spp", _String2="..") returned 1 [0148.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c4d8 [0148.554] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" [0148.554] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\" [0148.554] wcscat (in: _Dest=0x35c4d8, _Source="SaslPrepProfile_norm_bidi.spp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" [0149.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0149.494] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 0 [0149.494] FindClose (in: hFindFile=0x8099490 | out: hFindFile=0x8099490) returned 1 [0149.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0149.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c270) returned 1 [0149.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0be38) returned 1 Thread: id = 1536 os_tid = 0x1250 [0148.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc4588 [0148.056] wcscpy (in: _Dest=0x3dc4588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" [0148.056] wcscat (in: _Dest=0x3dc4588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\" [0148.056] wcscat (in: _Dest=0x3dc4588, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*" [0148.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0148.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0149.085] wcscmp (_String1=".", _String2=".") returned 0 [0149.085] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.085] wcscmp (_String1="..", _String2=".") returned 1 [0149.085] wcscmp (_String1="..", _String2="..") returned 0 [0149.085] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 1 [0149.085] wcscmp (_String1="Unicode", _String2=".") returned 1 [0149.086] wcscmp (_String1="Unicode", _String2="..") returned 1 [0149.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30738 [0149.086] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" [0149.086] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\" [0149.086] wcscat (in: _Dest=0x3f30738, _Source="Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0159.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ddd08 [0159.353] wcscpy (in: _Dest=0x81ddd08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0159.353] wcscat (in: _Dest=0x81ddd08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\" [0159.353] wcscat (in: _Dest=0x81ddd08, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*" [0159.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0159.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38098 [0159.353] wcscmp (_String1=".", _String2=".") returned 0 [0159.353] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.353] wcscmp (_String1="..", _String2=".") returned 1 [0159.353] wcscmp (_String1="..", _String2="..") returned 0 [0159.353] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1c7ac20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e1db40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICU", cAlternateFileName="")) returned 1 [0159.353] wcscmp (_String1="ICU", _String2=".") returned 1 [0159.353] wcscmp (_String1="ICU", _String2="..") returned 1 [0159.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de608 [0159.354] wcscpy (in: _Dest=0x81de608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0159.354] wcscat (in: _Dest=0x81de608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\" [0159.354] wcscat (in: _Dest=0x81de608, _Source="ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0159.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1888 [0159.354] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0159.354] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\" [0159.354] wcscat (in: _Dest=0x81d1888, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*" [0159.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85a10 [0159.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1c7ac20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e1db40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0159.370] wcscmp (_String1=".", _String2=".") returned 0 [0159.370] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1c7ac20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e1db40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.370] wcscmp (_String1="..", _String2=".") returned 1 [0159.370] wcscmp (_String1="..", _String2="..") returned 0 [0159.370] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl_gb18030.cnv", cAlternateFileName="CTL_GB~1.CNV")) returned 1 [0159.370] wcscmp (_String1="ctl_gb18030.cnv", _String2=".") returned 1 [0159.370] wcscmp (_String1="ctl_gb18030.cnv", _String2="..") returned 1 [0159.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b878 [0159.370] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0159.370] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\" [0159.370] wcscat (in: _Dest=0x35b878, _Source="ctl_gb18030.cnv" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" [0159.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv")) returned 0x20 [0159.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv", dwFileAttributes=0x20) returned 0 [0159.396] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.396] GetLastError () returned 0x5 [0159.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv", dwFileAttributes=0x20) returned 0 [0159.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0159.397] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 1 [0159.397] wcscmp (_String1="icudt26l.dat", _String2=".") returned 1 [0159.397] wcscmp (_String1="icudt26l.dat", _String2="..") returned 1 [0159.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b878 [0159.397] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0159.397] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\" [0159.397] wcscat (in: _Dest=0x35b878, _Source="icudt26l.dat" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" [0159.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat")) returned 0x20 [0159.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", dwFileAttributes=0x20) returned 0 [0159.397] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.397] GetLastError () returned 0x5 [0159.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", dwFileAttributes=0x20) returned 0 [0159.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0159.398] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 0 [0159.398] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0159.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85a10) returned 1 [0159.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 [0159.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de608) returned 1 [0159.398] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1 [0159.398] wcscmp (_String1="Mappings", _String2=".") returned 1 [0159.398] wcscmp (_String1="Mappings", _String2="..") returned 1 [0159.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819bf38 [0159.398] wcscpy (in: _Dest=0x819bf38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0159.398] wcscat (in: _Dest=0x819bf38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\" [0159.398] wcscat (in: _Dest=0x819bf38, _Source="Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0159.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819abd8 [0159.398] wcscpy (in: _Dest=0x819abd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0159.399] wcscat (in: _Dest=0x819abd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0159.399] wcscat (in: _Dest=0x819abd8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*" [0159.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85a10 [0159.399] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0159.399] wcscmp (_String1=".", _String2=".") returned 0 [0159.399] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.399] wcscmp (_String1="..", _String2=".") returned 1 [0159.399] wcscmp (_String1="..", _String2="..") returned 0 [0159.399] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0159.399] wcscmp (_String1="Adobe", _String2=".") returned 1 [0159.399] wcscmp (_String1="Adobe", _String2="..") returned 1 [0159.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187b50 [0159.399] wcscpy (in: _Dest=0x8187b50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0159.399] wcscat (in: _Dest=0x8187b50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0159.399] wcscat (in: _Dest=0x8187b50, _Source="Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0159.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b878 [0159.400] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0159.400] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0159.400] wcscat (in: _Dest=0x35b878, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*" [0159.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0159.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098fd0 [0159.452] wcscmp (_String1=".", _String2=".") returned 0 [0159.452] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.452] wcscmp (_String1="..", _String2=".") returned 1 [0159.452] wcscmp (_String1="..", _String2="..") returned 0 [0159.452] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5f76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKSCS.txt", cAlternateFileName="")) returned 1 [0159.452] wcscmp (_String1="HKSCS.txt", _String2=".") returned 1 [0159.452] wcscmp (_String1="HKSCS.txt", _String2="..") returned 1 [0159.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333828 [0159.453] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0159.453] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0159.453] wcscat (in: _Dest=0x333828, _Source="HKSCS.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" [0159.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt")) returned 0x20 [0159.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", dwFileAttributes=0x20) returned 0 [0159.453] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.453] GetLastError () returned 0x5 [0159.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", dwFileAttributes=0x20) returned 0 [0159.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.453] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Japanese83pv.txt", cAlternateFileName="JAPANE~1.TXT")) returned 1 [0159.454] wcscmp (_String1="Japanese83pv.txt", _String2=".") returned 1 [0159.454] wcscmp (_String1="Japanese83pv.txt", _String2="..") returned 1 [0159.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e351b8 [0159.454] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0159.454] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0159.454] wcscat (in: _Dest=0x3e351b8, _Source="Japanese83pv.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" [0159.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt")) returned 0x20 [0159.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", dwFileAttributes=0x20) returned 0 [0159.484] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.485] GetLastError () returned 0x5 [0159.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", dwFileAttributes=0x20) returned 0 [0159.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.485] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19ea7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0208.txt", cAlternateFileName="")) returned 1 [0159.485] wcscmp (_String1="JISX0208.txt", _String2=".") returned 1 [0159.485] wcscmp (_String1="JISX0208.txt", _String2="..") returned 1 [0159.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0159.485] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0159.485] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0159.485] wcscat (in: _Dest=0x333828, _Source="JISX0208.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" [0159.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt")) returned 0x20 [0159.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", dwFileAttributes=0x20) returned 0 [0159.486] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.486] GetLastError () returned 0x5 [0159.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", dwFileAttributes=0x20) returned 0 [0159.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.486] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x29ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0213.txt", cAlternateFileName="")) returned 1 [0159.486] wcscmp (_String1="JISX0213.txt", _String2=".") returned 1 [0159.486] wcscmp (_String1="JISX0213.txt", _String2="..") returned 1 [0159.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0159.486] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0159.486] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0159.486] wcscat (in: _Dest=0x333828, _Source="JISX0213.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" [0159.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt")) returned 0x20 [0159.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", dwFileAttributes=0x20) returned 0 [0159.487] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.487] GetLastError () returned 0x5 [0159.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", dwFileAttributes=0x20) returned 0 [0159.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.487] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x288d, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.txt", cAlternateFileName="")) returned 1 [0159.487] wcscmp (_String1="symbol.txt", _String2=".") returned 1 [0159.487] wcscmp (_String1="symbol.txt", _String2="..") returned 1 [0159.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0159.487] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0159.487] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0159.487] wcscat (in: _Dest=0x333828, _Source="symbol.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" [0159.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt")) returned 0x20 [0159.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", dwFileAttributes=0x20) returned 0 [0159.488] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.488] GetLastError () returned 0x5 [0159.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", dwFileAttributes=0x20) returned 0 [0159.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.488] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 1 [0159.489] wcscmp (_String1="zdingbat.txt", _String2=".") returned 1 [0159.489] wcscmp (_String1="zdingbat.txt", _String2="..") returned 1 [0159.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0159.489] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0159.489] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0159.489] wcscat (in: _Dest=0x333828, _Source="zdingbat.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" [0159.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt")) returned 0x20 [0159.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", dwFileAttributes=0x20) returned 0 [0159.489] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.489] GetLastError () returned 0x5 [0159.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", dwFileAttributes=0x20) returned 0 [0159.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.490] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 0 [0159.490] FindClose (in: hFindFile=0x8098fd0 | out: hFindFile=0x8098fd0) returned 1 [0159.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0159.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0159.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187b50) returned 1 [0159.491] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mac", cAlternateFileName="")) returned 1 [0159.491] wcscmp (_String1="Mac", _String2=".") returned 1 [0159.492] wcscmp (_String1="Mac", _String2="..") returned 1 [0159.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187b50 [0159.492] wcscpy (in: _Dest=0x8187b50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0159.492] wcscat (in: _Dest=0x8187b50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0159.492] wcscat (in: _Dest=0x8187b50, _Source="Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81878b0 [0159.492] wcscpy (in: _Dest=0x81878b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.492] wcscat (in: _Dest=0x81878b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0159.492] wcscat (in: _Dest=0x81878b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*" [0159.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0159.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0159.536] wcscmp (_String1=".", _String2=".") returned 0 [0159.536] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.536] wcscmp (_String1="..", _String2=".") returned 1 [0159.536] wcscmp (_String1="..", _String2="..") returned 0 [0159.536] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARABIC.TXT", cAlternateFileName="")) returned 1 [0159.536] wcscmp (_String1="ARABIC.TXT", _String2=".") returned 1 [0159.536] wcscmp (_String1="ARABIC.TXT", _String2="..") returned 1 [0159.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff68b0 [0159.537] wcscpy (in: _Dest=0x2ff68b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.537] wcscat (in: _Dest=0x2ff68b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0159.537] wcscat (in: _Dest=0x2ff68b0, _Source="ARABIC.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" [0159.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt")) returned 0x20 [0159.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", dwFileAttributes=0x20) returned 0 [0159.560] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.561] GetLastError () returned 0x5 [0159.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", dwFileAttributes=0x20) returned 0 [0159.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff68b0) returned 1 [0159.561] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0159.561] wcscmp (_String1="CENTEURO.TXT", _String2=".") returned 1 [0159.561] wcscmp (_String1="CENTEURO.TXT", _String2="..") returned 1 [0159.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0159.561] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.561] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0159.561] wcscat (in: _Dest=0x333828, _Source="CENTEURO.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" [0159.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt")) returned 0x20 [0159.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", dwFileAttributes=0x20) returned 0 [0159.578] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.578] GetLastError () returned 0x5 [0159.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", dwFileAttributes=0x20) returned 0 [0159.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.578] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINSIMP.TXT", cAlternateFileName="")) returned 1 [0159.579] wcscmp (_String1="CHINSIMP.TXT", _String2=".") returned 1 [0159.579] wcscmp (_String1="CHINSIMP.TXT", _String2="..") returned 1 [0159.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0159.579] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.579] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0159.579] wcscat (in: _Dest=0x333828, _Source="CHINSIMP.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" [0159.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt")) returned 0x20 [0159.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", dwFileAttributes=0x20) returned 0 [0159.589] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.590] GetLastError () returned 0x5 [0159.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", dwFileAttributes=0x20) returned 0 [0159.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.590] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x520b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINTRAD.TXT", cAlternateFileName="")) returned 1 [0159.590] wcscmp (_String1="CHINTRAD.TXT", _String2=".") returned 1 [0159.590] wcscmp (_String1="CHINTRAD.TXT", _String2="..") returned 1 [0159.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0159.590] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.590] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0159.590] wcscat (in: _Dest=0x333828, _Source="CHINTRAD.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" [0159.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt")) returned 0x20 [0159.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", dwFileAttributes=0x20) returned 0 [0159.614] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.614] GetLastError () returned 0x5 [0159.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", dwFileAttributes=0x20) returned 0 [0159.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.614] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0159.615] wcscmp (_String1="CORPCHAR.TXT", _String2=".") returned 1 [0159.615] wcscmp (_String1="CORPCHAR.TXT", _String2="..") returned 1 [0159.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0159.615] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.615] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0159.615] wcscat (in: _Dest=0x333828, _Source="CORPCHAR.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" [0159.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt")) returned 0x20 [0159.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", dwFileAttributes=0x20) returned 0 [0159.615] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.616] GetLastError () returned 0x5 [0159.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", dwFileAttributes=0x20) returned 0 [0159.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.616] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x34f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0159.616] wcscmp (_String1="CROATIAN.TXT", _String2=".") returned 1 [0159.616] wcscmp (_String1="CROATIAN.TXT", _String2="..") returned 1 [0159.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0159.616] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.616] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0159.616] wcscat (in: _Dest=0x333828, _Source="CROATIAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" [0159.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt")) returned 0x20 [0159.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", dwFileAttributes=0x20) returned 0 [0159.635] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.635] GetLastError () returned 0x5 [0159.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", dwFileAttributes=0x20) returned 0 [0159.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.635] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3478, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0159.636] wcscmp (_String1="CYRILLIC.TXT", _String2=".") returned 1 [0159.636] wcscmp (_String1="CYRILLIC.TXT", _String2="..") returned 1 [0159.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0159.636] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.636] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0159.636] wcscat (in: _Dest=0x333828, _Source="CYRILLIC.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" [0159.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt")) returned 0x20 [0159.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", dwFileAttributes=0x20) returned 0 [0159.636] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.637] GetLastError () returned 0x5 [0159.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", dwFileAttributes=0x20) returned 0 [0159.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.637] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6145, dwReserved0=0x0, dwReserved1=0x0, cFileName="FARSI.TXT", cAlternateFileName="")) returned 1 [0159.637] wcscmp (_String1="FARSI.TXT", _String2=".") returned 1 [0159.637] wcscmp (_String1="FARSI.TXT", _String2="..") returned 1 [0159.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40b28 [0159.637] wcscpy (in: _Dest=0x3d40b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.637] wcscat (in: _Dest=0x3d40b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0159.637] wcscat (in: _Dest=0x3d40b28, _Source="FARSI.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" [0159.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt")) returned 0x20 [0162.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", dwFileAttributes=0x20) returned 0 [0162.125] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.125] GetLastError () returned 0x5 [0162.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", dwFileAttributes=0x20) returned 0 [0162.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b28) returned 1 [0162.125] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x342b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0162.125] wcscmp (_String1="GREEK.TXT", _String2=".") returned 1 [0162.125] wcscmp (_String1="GREEK.TXT", _String2="..") returned 1 [0162.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40b28 [0162.126] wcscpy (in: _Dest=0x3d40b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0162.126] wcscat (in: _Dest=0x3d40b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0162.126] wcscat (in: _Dest=0x3d40b28, _Source="GREEK.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" [0163.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0163.176] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEBREW.TXT", cAlternateFileName="")) returned 1 [0163.176] wcscmp (_String1="HEBREW.TXT", _String2=".") returned 1 [0163.176] wcscmp (_String1="HEBREW.TXT", _String2="..") returned 1 [0163.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e1c08 [0163.176] wcscpy (in: _Dest=0x81e1c08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.176] wcscat (in: _Dest=0x81e1c08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.176] wcscat (in: _Dest=0x81e1c08, _Source="HEBREW.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" [0163.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0163.177] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0163.177] wcscmp (_String1="ICELAND.TXT", _String2=".") returned 1 [0163.177] wcscmp (_String1="ICELAND.TXT", _String2="..") returned 1 [0163.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81dfac8 [0163.177] wcscpy (in: _Dest=0x81dfac8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.177] wcscat (in: _Dest=0x81dfac8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.177] wcscat (in: _Dest=0x81dfac8, _Source="ICELAND.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" [0163.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0163.178] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x320dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAPANESE.TXT", cAlternateFileName="")) returned 1 [0163.179] wcscmp (_String1="JAPANESE.TXT", _String2=".") returned 1 [0163.179] wcscmp (_String1="JAPANESE.TXT", _String2="..") returned 1 [0163.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81df888 [0163.179] wcscpy (in: _Dest=0x81df888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.179] wcscat (in: _Dest=0x81df888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.179] wcscat (in: _Dest=0x81df888, _Source="JAPANESE.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" [0163.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0163.180] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x591cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOREAN.TXT", cAlternateFileName="")) returned 1 [0163.180] wcscmp (_String1="KOREAN.TXT", _String2=".") returned 1 [0163.180] wcscmp (_String1="KOREAN.TXT", _String2="..") returned 1 [0163.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e1a98 [0163.180] wcscpy (in: _Dest=0x81e1a98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.180] wcscat (in: _Dest=0x81e1a98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.180] wcscat (in: _Dest=0x81e1a98, _Source="KOREAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" [0163.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0163.182] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3857, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0163.182] wcscmp (_String1="ROMAN.TXT", _String2=".") returned 1 [0163.182] wcscmp (_String1="ROMAN.TXT", _String2="..") returned 1 [0163.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e19e0 [0163.182] wcscpy (in: _Dest=0x81e19e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.182] wcscat (in: _Dest=0x81e19e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.182] wcscat (in: _Dest=0x81e19e0, _Source="ROMAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" [0163.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0163.183] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x39c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0163.184] wcscmp (_String1="ROMANIAN.TXT", _String2=".") returned 1 [0163.184] wcscmp (_String1="ROMANIAN.TXT", _String2="..") returned 1 [0163.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81dfb88 [0163.184] wcscpy (in: _Dest=0x81dfb88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.184] wcscat (in: _Dest=0x81dfb88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.184] wcscat (in: _Dest=0x81dfb88, _Source="ROMANIAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" [0163.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0163.185] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0163.185] wcscmp (_String1="SYMBOL.TXT", _String2=".") returned 1 [0163.185] wcscmp (_String1="SYMBOL.TXT", _String2="..") returned 1 [0163.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e1e30 [0163.185] wcscpy (in: _Dest=0x81e1e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.186] wcscat (in: _Dest=0x81e1e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.186] wcscat (in: _Dest=0x81e1e30, _Source="SYMBOL.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" [0163.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0163.187] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THAI.TXT", cAlternateFileName="")) returned 1 [0163.187] wcscmp (_String1="THAI.TXT", _String2=".") returned 1 [0163.187] wcscmp (_String1="THAI.TXT", _String2="..") returned 1 [0163.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x81e1ee8 [0163.187] wcscpy (in: _Dest=0x81e1ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.187] wcscat (in: _Dest=0x81e1ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.187] wcscat (in: _Dest=0x81e1ee8, _Source="THAI.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" [0163.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0163.188] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3219, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0163.188] wcscmp (_String1="TURKISH.TXT", _String2=".") returned 1 [0163.188] wcscmp (_String1="TURKISH.TXT", _String2="..") returned 1 [0163.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81df7c8 [0163.188] wcscpy (in: _Dest=0x81df7c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.188] wcscat (in: _Dest=0x81df7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.188] wcscat (in: _Dest=0x81df7c8, _Source="TURKISH.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" [0163.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0163.189] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0163.189] wcscmp (_String1="UKRAINE.TXT", _String2=".") returned 1 [0163.189] wcscmp (_String1="UKRAINE.TXT", _String2="..") returned 1 [0163.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81dfa08 [0163.190] wcscpy (in: _Dest=0x81dfa08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.190] wcscat (in: _Dest=0x81dfa08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.190] wcscat (in: _Dest=0x81dfa08, _Source="UKRAINE.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" [0163.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfa08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0163.191] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0163.191] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0163.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0163.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81878b0) returned 1 [0163.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187b50) returned 1 [0163.193] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 1 [0163.193] wcscmp (_String1="win", _String2=".") returned 1 [0163.193] wcscmp (_String1="win", _String2="..") returned 1 [0163.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187b50 [0163.193] wcscpy (in: _Dest=0x8187b50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0163.193] wcscat (in: _Dest=0x8187b50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0163.193] wcscat (in: _Dest=0x8187b50, _Source="win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0163.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8187b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf80 [0163.194] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 0 [0163.194] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0163.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85a10) returned 1 [0163.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819abd8) returned 1 [0163.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bf38) returned 1 [0163.195] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 0 [0163.195] FindClose (in: hFindFile=0x3f38098 | out: hFindFile=0x3f38098) returned 1 [0163.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0163.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd08) returned 1 [0163.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 [0163.195] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 0 [0163.195] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0163.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0163.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4588) returned 1 [0163.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 Thread: id = 1537 os_tid = 0x1254 [0148.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst")) returned 0x21 [0148.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", dwFileAttributes=0x20) returned 0 [0148.058] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.059] GetLastError () returned 0x5 [0148.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", dwFileAttributes=0x21) returned 0 [0148.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 Thread: id = 1538 os_tid = 0x125c [0148.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst")) returned 0x21 [0148.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", dwFileAttributes=0x20) returned 0 [0148.063] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.063] GetLastError () returned 0x5 [0148.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", dwFileAttributes=0x21) returned 0 [0148.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35668) returned 1 Thread: id = 1539 os_tid = 0x1260 [0148.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst")) returned 0x21 [0148.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", dwFileAttributes=0x20) returned 0 [0148.065] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.065] GetLastError () returned 0x5 [0148.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", dwFileAttributes=0x21) returned 0 [0148.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e354d8) returned 1 Thread: id = 1540 os_tid = 0x1264 [0148.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst")) returned 0x21 [0148.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", dwFileAttributes=0x20) returned 0 [0148.067] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.067] GetLastError () returned 0x5 [0148.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", dwFileAttributes=0x21) returned 0 [0148.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35410) returned 1 Thread: id = 1541 os_tid = 0x150c [0148.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst")) returned 0x21 [0149.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", dwFileAttributes=0x20) returned 0 [0149.063] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.063] GetLastError () returned 0x5 [0149.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", dwFileAttributes=0x21) returned 0 [0149.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e355a0) returned 1 Thread: id = 1542 os_tid = 0x1268 [0148.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst")) returned 0x21 [0149.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", dwFileAttributes=0x20) returned 0 [0149.065] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.065] GetLastError () returned 0x5 [0149.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", dwFileAttributes=0x21) returned 0 [0149.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e342e0) returned 1 Thread: id = 1543 os_tid = 0xc0c [0148.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst")) returned 0x21 [0149.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", dwFileAttributes=0x20) returned 0 [0149.067] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.068] GetLastError () returned 0x5 [0149.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", dwFileAttributes=0x21) returned 0 [0149.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35280) returned 1 Thread: id = 1544 os_tid = 0x126c [0148.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst")) returned 0x21 [0149.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", dwFileAttributes=0x20) returned 0 [0149.070] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.070] GetLastError () returned 0x5 [0149.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", dwFileAttributes=0x21) returned 0 [0149.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35730) returned 1 Thread: id = 1545 os_tid = 0x1390 [0148.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst")) returned 0x21 [0149.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", dwFileAttributes=0x20) returned 0 [0149.071] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.071] GetLastError () returned 0x5 [0149.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", dwFileAttributes=0x21) returned 0 [0149.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e357f8) returned 1 Thread: id = 1546 os_tid = 0x1270 [0148.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst")) returned 0x21 [0149.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", dwFileAttributes=0x20) returned 0 [0149.072] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.073] GetLastError () returned 0x5 [0149.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", dwFileAttributes=0x21) returned 0 [0149.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e358c0) returned 1 Thread: id = 1547 os_tid = 0x1278 [0148.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst")) returned 0x21 [0149.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", dwFileAttributes=0x20) returned 0 [0149.074] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.074] GetLastError () returned 0x5 [0149.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", dwFileAttributes=0x21) returned 0 [0149.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35988) returned 1 Thread: id = 1548 os_tid = 0x127c [0148.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst")) returned 0x21 [0149.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", dwFileAttributes=0x20) returned 0 [0149.075] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.075] GetLastError () returned 0x5 [0149.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", dwFileAttributes=0x21) returned 0 [0149.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5648) returned 1 Thread: id = 1549 os_tid = 0x1280 [0148.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst")) returned 0x21 [0149.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", dwFileAttributes=0x20) returned 0 [0149.076] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.076] GetLastError () returned 0x5 [0149.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", dwFileAttributes=0x21) returned 0 [0149.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5710) returned 1 Thread: id = 1550 os_tid = 0x139c [0148.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst")) returned 0x21 [0149.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", dwFileAttributes=0x20) returned 0 [0149.077] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.077] GetLastError () returned 0x5 [0149.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", dwFileAttributes=0x21) returned 0 [0149.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d57d8) returned 1 Thread: id = 1551 os_tid = 0x13a0 [0148.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst")) returned 0x21 [0149.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", dwFileAttributes=0x20) returned 0 [0149.079] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.079] GetLastError () returned 0x5 [0149.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", dwFileAttributes=0x21) returned 0 [0149.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d58a0) returned 1 Thread: id = 1552 os_tid = 0x13a4 [0148.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst")) returned 0x21 [0149.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", dwFileAttributes=0x20) returned 0 [0149.080] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.080] GetLastError () returned 0x5 [0149.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", dwFileAttributes=0x21) returned 0 [0149.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5968) returned 1 Thread: id = 1553 os_tid = 0x151c [0148.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst")) returned 0x21 [0149.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", dwFileAttributes=0x20) returned 0 [0149.081] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.081] GetLastError () returned 0x5 [0149.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", dwFileAttributes=0x21) returned 0 [0149.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a30) returned 1 Thread: id = 1554 os_tid = 0x1284 [0148.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst")) returned 0x21 [0149.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", dwFileAttributes=0x20) returned 0 [0149.082] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.083] GetLastError () returned 0x5 [0149.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", dwFileAttributes=0x21) returned 0 [0149.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5af8) returned 1 Thread: id = 1555 os_tid = 0x13a8 [0148.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst")) returned 0x21 [0148.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", dwFileAttributes=0x20) returned 0 [0148.529] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.529] GetLastError () returned 0x5 [0148.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", dwFileAttributes=0x21) returned 0 [0148.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5bc0) returned 1 Thread: id = 1556 os_tid = 0x13ac [0148.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst")) returned 0x21 [0148.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", dwFileAttributes=0x20) returned 0 [0148.531] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.531] GetLastError () returned 0x5 [0148.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", dwFileAttributes=0x21) returned 0 [0148.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5c88) returned 1 Thread: id = 1557 os_tid = 0x13b0 [0148.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst")) returned 0x21 [0148.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", dwFileAttributes=0x20) returned 0 [0148.533] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.533] GetLastError () returned 0x5 [0148.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", dwFileAttributes=0x21) returned 0 [0148.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5d50) returned 1 Thread: id = 1558 os_tid = 0x13b4 [0148.534] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url")) returned 0x20 [0149.367] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url", dwFileAttributes=0x20) returned 0 [0149.367] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.367] GetLastError () returned 0x5 [0149.367] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url", dwFileAttributes=0x20) returned 0 [0149.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35c70) returned 1 Thread: id = 1559 os_tid = 0x13b8 [0148.537] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url")) returned 0x20 [0149.665] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", dwFileAttributes=0x20) returned 0 [0149.665] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.665] GetLastError () returned 0x5 [0149.665] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", dwFileAttributes=0x20) returned 0 [0149.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 Thread: id = 1560 os_tid = 0x13bc [0148.538] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url")) returned 0x20 [0149.667] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url", dwFileAttributes=0x20) returned 0 [0149.667] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.667] GetLastError () returned 0x5 [0149.667] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url", dwFileAttributes=0x20) returned 0 [0149.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35fd0) returned 1 Thread: id = 1561 os_tid = 0x13c0 [0148.539] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url")) returned 0x20 [0149.303] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url", dwFileAttributes=0x20) returned 0 [0149.303] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.304] GetLastError () returned 0x5 [0149.304] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url", dwFileAttributes=0x20) returned 0 [0149.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36330) returned 1 Thread: id = 1562 os_tid = 0x13c4 [0148.539] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url")) returned 0x20 [0149.664] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url", dwFileAttributes=0x20) returned 0 [0149.664] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.664] GetLastError () returned 0x5 [0149.664] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url", dwFileAttributes=0x20) returned 0 [0149.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f362a0) returned 1 Thread: id = 1563 os_tid = 0x13c8 [0148.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d")) returned 0x20 [0149.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d", dwFileAttributes=0x20) returned 0 [0149.369] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.369] GetLastError () returned 0x5 [0149.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d", dwFileAttributes=0x20) returned 0 [0149.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b08) returned 1 Thread: id = 1564 os_tid = 0x13cc [0148.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d")) returned 0x20 [0149.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d", dwFileAttributes=0x20) returned 0 [0149.676] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.676] GetLastError () returned 0x5 [0149.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d", dwFileAttributes=0x20) returned 0 [0149.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054628) returned 1 Thread: id = 1565 os_tid = 0x13d0 [0148.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d")) returned 0x20 [0149.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d", dwFileAttributes=0x20) returned 0 [0149.677] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.678] GetLastError () returned 0x5 [0149.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d", dwFileAttributes=0x20) returned 0 [0149.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053418) returned 1 Thread: id = 1566 os_tid = 0x13d4 [0148.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d")) returned 0x20 [0149.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d", dwFileAttributes=0x20) returned 0 [0149.679] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.679] GetLastError () returned 0x5 [0149.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d", dwFileAttributes=0x20) returned 0 [0149.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80540d8) returned 1 Thread: id = 1567 os_tid = 0x13d8 [0148.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d")) returned 0x20 [0149.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d", dwFileAttributes=0x20) returned 0 [0149.680] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.680] GetLastError () returned 0x5 [0149.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d", dwFileAttributes=0x20) returned 0 [0149.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36210) returned 1 Thread: id = 1568 os_tid = 0x13dc [0148.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5708 [0148.546] wcscpy (in: _Dest=0x3dc5708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" [0148.546] wcscat (in: _Dest=0x3dc5708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\" [0148.546] wcscat (in: _Dest=0x3dc5708, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*" [0148.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81016e0 [0148.546] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac01ca0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac01ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099110 [0149.681] wcscmp (_String1=".", _String2=".") returned 0 [0149.681] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac01ca0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac01ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.681] wcscmp (_String1="..", _String2=".") returned 1 [0149.681] wcscmp (_String1="..", _String2="..") returned 0 [0149.681] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0149.681] wcscmp (_String1="MyriadCAD.otf", _String2=".") returned 1 [0149.681] wcscmp (_String1="MyriadCAD.otf", _String2="..") returned 1 [0149.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2a240 [0149.682] wcscpy (in: _Dest=0x3e2a240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" [0149.682] wcscat (in: _Dest=0x3e2a240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\" [0149.682] wcscat (in: _Dest=0x3e2a240, _Source="MyriadCAD.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" [0154.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0154.028] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 0 [0154.028] FindClose (in: hFindFile=0x8099110 | out: hFindFile=0x8099110) returned 1 [0154.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81016e0) returned 1 [0154.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5708) returned 1 [0154.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5608) returned 1 Thread: id = 1569 os_tid = 0x13e0 [0148.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d")) returned 0x20 [0149.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d", dwFileAttributes=0x20) returned 0 [0149.675] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.675] GetLastError () returned 0x5 [0149.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d", dwFileAttributes=0x20) returned 0 [0149.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053c10) returned 1 Thread: id = 1570 os_tid = 0x13e4 [0148.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d")) returned 0x20 [0149.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d", dwFileAttributes=0x20) returned 0 [0149.308] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.308] GetLastError () returned 0x5 [0149.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d", dwFileAttributes=0x20) returned 0 [0149.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36180) returned 1 Thread: id = 1571 os_tid = 0x13e8 [0148.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif")) returned 0x20 [0148.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", dwFileAttributes=0x20) returned 0 [0148.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.548] GetLastError () returned 0x5 [0148.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", dwFileAttributes=0x20) returned 0 [0148.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81878b0) returned 1 Thread: id = 1572 os_tid = 0x13ec [0148.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif")) returned 0x20 [0149.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", dwFileAttributes=0x20) returned 0 [0149.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.669] GetLastError () returned 0x5 [0149.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", dwFileAttributes=0x20) returned 0 [0149.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ed8) returned 1 Thread: id = 1573 os_tid = 0x13f0 [0148.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif")) returned 0x20 [0149.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", dwFileAttributes=0x20) returned 0 [0149.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.310] GetLastError () returned 0x5 [0149.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", dwFileAttributes=0x20) returned 0 [0149.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 Thread: id = 1574 os_tid = 0x13f4 [0148.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif")) returned 0x20 [0149.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", dwFileAttributes=0x20) returned 0 [0149.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.671] GetLastError () returned 0x5 [0149.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", dwFileAttributes=0x20) returned 0 [0149.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 Thread: id = 1575 os_tid = 0x13f8 [0148.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif")) returned 0x20 [0149.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", dwFileAttributes=0x20) returned 0 [0149.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.672] GetLastError () returned 0x5 [0149.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", dwFileAttributes=0x20) returned 0 [0149.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186d88) returned 1 Thread: id = 1576 os_tid = 0x13fc [0148.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif")) returned 0x20 [0149.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", dwFileAttributes=0x20) returned 0 [0149.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.673] GetLastError () returned 0x5 [0149.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", dwFileAttributes=0x20) returned 0 [0149.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f0) returned 1 Thread: id = 1577 os_tid = 0x1400 [0148.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif")) returned 0x20 [0149.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", dwFileAttributes=0x20) returned 0 [0149.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.668] GetLastError () returned 0x5 [0149.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", dwFileAttributes=0x20) returned 0 [0149.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a40) returned 1 Thread: id = 1578 os_tid = 0x1404 [0148.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl")) returned 0x20 [0150.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL", dwFileAttributes=0x20) returned 0 [0150.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.075] GetLastError () returned 0x5 [0150.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL", dwFileAttributes=0x20) returned 0 [0150.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11328) returned 1 Thread: id = 1579 os_tid = 0x152c [0148.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl")) returned 0x20 [0149.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x20) returned 0 [0149.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.686] GetLastError () returned 0x5 [0149.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x20) returned 0 [0149.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c838) returned 1 Thread: id = 1580 os_tid = 0x1288 [0148.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f448 [0148.559] wcscpy (in: _Dest=0x3e1f448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0148.559] wcscat (in: _Dest=0x3e1f448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0148.559] wcscat (in: _Dest=0x3e1f448, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*" [0148.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0148.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099310 [0149.688] wcscmp (_String1=".", _String2=".") returned 0 [0149.688] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.688] wcscmp (_String1="..", _String2=".") returned 1 [0149.688] wcscmp (_String1="..", _String2="..") returned 0 [0149.688] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1 [0149.688] wcscmp (_String1="AUTHOR.XSL", _String2=".") returned 1 [0149.688] wcscmp (_String1="AUTHOR.XSL", _String2="..") returned 1 [0149.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c838 [0149.688] wcscpy (in: _Dest=0x3e3c838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0149.688] wcscat (in: _Dest=0x3e3c838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0149.688] wcscat (in: _Dest=0x3e3c838, _Source="AUTHOR.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" [0154.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0154.030] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1 [0154.030] wcscmp (_String1="TAG.XSL", _String2=".") returned 1 [0154.030] wcscmp (_String1="TAG.XSL", _String2="..") returned 1 [0154.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d0ae0 [0154.030] wcscpy (in: _Dest=0x81d0ae0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0154.031] wcscat (in: _Dest=0x81d0ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0154.031] wcscat (in: _Dest=0x81d0ae0, _Source="TAG.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" [0154.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0154.032] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1 [0154.032] wcscmp (_String1="TITLE.XSL", _String2=".") returned 1 [0154.032] wcscmp (_String1="TITLE.XSL", _String2="..") returned 1 [0154.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1758 [0154.032] wcscpy (in: _Dest=0x81d1758, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0154.032] wcscat (in: _Dest=0x81d1758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0154.032] wcscat (in: _Dest=0x81d1758, _Source="TITLE.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" [0154.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0154.033] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1 [0154.033] wcscmp (_String1="YEAR.XSL", _String2=".") returned 1 [0154.033] wcscmp (_String1="YEAR.XSL", _String2="..") returned 1 [0154.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1888 [0154.033] wcscpy (in: _Dest=0x81d1888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0154.033] wcscat (in: _Dest=0x81d1888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0154.033] wcscat (in: _Dest=0x81d1888, _Source="YEAR.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" [0154.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0154.034] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0 [0154.034] FindClose (in: hFindFile=0x8099310 | out: hFindFile=0x8099310) returned 1 [0154.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0154.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f448) returned 1 [0154.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 Thread: id = 1581 os_tid = 0x128c [0148.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f008 [0148.560] wcscpy (in: _Dest=0x3e1f008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0148.560] wcscat (in: _Dest=0x3e1f008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0148.560] wcscat (in: _Dest=0x3e1f008, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*" [0148.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0148.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0150.393] wcscmp (_String1=".", _String2=".") returned 0 [0150.393] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.393] wcscmp (_String1="..", _String2=".") returned 1 [0150.393] wcscmp (_String1="..", _String2="..") returned 0 [0150.393] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81d3cd00, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x766fed50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81d3cd00, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x5cd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="APA.XSL", cAlternateFileName="")) returned 1 [0150.393] wcscmp (_String1="APA.XSL", _String2=".") returned 1 [0150.393] wcscmp (_String1="APA.XSL", _String2="..") returned 1 [0150.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c540 [0150.393] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0150.393] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0150.393] wcscat (in: _Dest=0x3e3c540, _Source="APA.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" [0159.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl")) returned 0x20 [0159.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL", dwFileAttributes=0x20) returned 0 [0159.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.401] GetLastError () returned 0x5 [0159.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL", dwFileAttributes=0x20) returned 0 [0159.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.402] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9db1000, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9db1000, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x5282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0159.402] wcscmp (_String1="CHICAGO.XSL", _String2=".") returned 1 [0159.402] wcscmp (_String1="CHICAGO.XSL", _String2="..") returned 1 [0159.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819bfd8 [0159.402] wcscpy (in: _Dest=0x819bfd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0159.402] wcscat (in: _Dest=0x819bfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0159.402] wcscat (in: _Dest=0x819bfd8, _Source="CHICAGO.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" [0159.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl")) returned 0x20 [0159.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x20) returned 0 [0159.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.413] GetLastError () returned 0x5 [0159.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x20) returned 0 [0159.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bfd8) returned 1 [0159.413] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb12ae00, ftCreationTime.dwHighDateTime=0x1c9306a, ftLastAccessTime.dwLowDateTime=0x88646c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb12ae00, ftLastWriteTime.dwHighDateTime=0x1c9306a, nFileSizeHigh=0x0, nFileSizeLow=0x40188, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0159.414] wcscmp (_String1="GB.XSL", _String2=".") returned 1 [0159.414] wcscmp (_String1="GB.XSL", _String2="..") returned 1 [0159.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c540 [0159.414] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0159.414] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0159.414] wcscat (in: _Dest=0x3e3c540, _Source="GB.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" [0159.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl")) returned 0x20 [0159.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x20) returned 0 [0159.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.414] GetLastError () returned 0x5 [0159.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x20) returned 0 [0159.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0159.415] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79820300, ftCreationTime.dwHighDateTime=0x1c9306a, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79820300, ftLastWriteTime.dwHighDateTime=0x1c9306a, nFileSizeHigh=0x0, nFileSizeLow=0x3cd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0159.415] wcscmp (_String1="GostName.XSL", _String2=".") returned 1 [0159.415] wcscmp (_String1="GostName.XSL", _String2="..") returned 1 [0159.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bfd8 [0159.415] wcscpy (in: _Dest=0x819bfd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0159.415] wcscat (in: _Dest=0x819bfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0159.415] wcscat (in: _Dest=0x819bfd8, _Source="GostName.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" [0159.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl")) returned 0x20 [0159.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x20) returned 0 [0159.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.415] GetLastError () returned 0x5 [0159.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x20) returned 0 [0159.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bfd8) returned 1 [0159.416] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c19900, ftCreationTime.dwHighDateTime=0x1c9306a, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17c19900, ftLastWriteTime.dwHighDateTime=0x1c9306a, nFileSizeHigh=0x0, nFileSizeLow=0x3b9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0159.416] wcscmp (_String1="GostTitle.XSL", _String2=".") returned 1 [0159.416] wcscmp (_String1="GostTitle.XSL", _String2="..") returned 1 [0159.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bfd8 [0159.416] wcscpy (in: _Dest=0x819bfd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0159.416] wcscat (in: _Dest=0x819bfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0159.416] wcscat (in: _Dest=0x819bfd8, _Source="GostTitle.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" [0159.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl")) returned 0x20 [0159.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x20) returned 0 [0159.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.417] GetLastError () returned 0x5 [0159.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x20) returned 0 [0159.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bfd8) returned 1 [0159.417] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910cbc00, ftCreationTime.dwHighDateTime=0x1c93069, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x910cbc00, ftLastWriteTime.dwHighDateTime=0x1c93069, nFileSizeHigh=0x0, nFileSizeLow=0x4033d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0159.417] wcscmp (_String1="ISO690.XSL", _String2=".") returned 1 [0159.417] wcscmp (_String1="ISO690.XSL", _String2="..") returned 1 [0159.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819bfd8 [0159.417] wcscpy (in: _Dest=0x819bfd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0159.417] wcscat (in: _Dest=0x819bfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0159.417] wcscat (in: _Dest=0x819bfd8, _Source="ISO690.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" [0159.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl")) returned 0x20 [0159.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x20) returned 0 [0159.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.418] GetLastError () returned 0x5 [0159.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x20) returned 0 [0159.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bfd8) returned 1 [0159.418] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fcd0900, ftCreationTime.dwHighDateTime=0x1c93069, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1fcd0900, ftLastWriteTime.dwHighDateTime=0x1c93069, nFileSizeHigh=0x0, nFileSizeLow=0x3ee6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0159.418] wcscmp (_String1="ISO690Nmerical.XSL", _String2=".") returned 1 [0159.418] wcscmp (_String1="ISO690Nmerical.XSL", _String2="..") returned 1 [0159.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81daa38 [0159.418] wcscpy (in: _Dest=0x81daa38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0159.418] wcscat (in: _Dest=0x81daa38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0159.418] wcscat (in: _Dest=0x81daa38, _Source="ISO690Nmerical.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" [0159.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl")) returned 0x20 [0159.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x20) returned 0 [0159.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.465] GetLastError () returned 0x5 [0159.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x20) returned 0 [0159.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa38) returned 1 [0159.465] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3647800, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3647800, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x49051, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLA.XSL", cAlternateFileName="")) returned 1 [0159.465] wcscmp (_String1="MLA.XSL", _String2=".") returned 1 [0159.465] wcscmp (_String1="MLA.XSL", _String2="..") returned 1 [0159.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3de30 [0159.466] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0159.466] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0159.466] wcscat (in: _Dest=0x3e3de30, _Source="MLA.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" [0159.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl")) returned 0x20 [0159.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL", dwFileAttributes=0x20) returned 0 [0159.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.498] GetLastError () returned 0x5 [0159.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL", dwFileAttributes=0x20) returned 0 [0159.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0159.498] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eb1100, ftCreationTime.dwHighDateTime=0x1c6daa0, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4eb1100, ftLastWriteTime.dwHighDateTime=0x1c6daa0, nFileSizeHigh=0x0, nFileSizeLow=0x3bd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0159.498] wcscmp (_String1="SIST02.XSL", _String2=".") returned 1 [0159.498] wcscmp (_String1="SIST02.XSL", _String2="..") returned 1 [0159.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7238 [0159.498] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0159.498] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0159.498] wcscat (in: _Dest=0x2c7238, _Source="SIST02.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" [0159.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl")) returned 0x20 [0159.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x20) returned 0 [0159.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.499] GetLastError () returned 0x5 [0159.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x20) returned 0 [0159.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0159.499] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8b8600, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca8b8600, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0159.499] wcscmp (_String1="TURABIAN.XSL", _String2=".") returned 1 [0159.499] wcscmp (_String1="TURABIAN.XSL", _String2="..") returned 1 [0159.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7238 [0159.499] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0159.499] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0159.499] wcscat (in: _Dest=0x2c7238, _Source="TURABIAN.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" [0159.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl")) returned 0x20 [0159.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x20) returned 0 [0159.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.524] GetLastError () returned 0x5 [0159.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x20) returned 0 [0159.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 [0159.524] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8b8600, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca8b8600, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0159.524] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0159.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0159.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f008) returned 1 [0159.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ebc8) returned 1 Thread: id = 1582 os_tid = 0x1290 [0148.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\dwi2.gif")) returned 0x20 [0148.561] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif", dwFileAttributes=0x20) returned 1 [0148.562] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\dwi2.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1264 [0148.562] GetFileSizeEx (in: hFile=0x1264, lpFileSize=0x8b7f7f8 | out: lpFileSize=0x8b7f7f8*=30180) returned 1 [0148.562] SetFilePointerEx (in: hFile=0x1264, liDistanceToMove=0x75e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.562] ReadFile (in: hFile=0x1264, lpBuffer=0x8b7f804, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b7f7e0, lpOverlapped=0x0 | out: lpBuffer=0x8b7f804*, lpNumberOfBytesRead=0x8b7f7e0*=0x4, lpOverlapped=0x0) returned 1 [0148.564] SetFilePointerEx (in: hFile=0x1264, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0148.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0148.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d98 [0148.564] NtQuerySystemTime (in: CurrentTime=0x8b7f780 | out: CurrentTime=0x8b7f780*=132471540171420000) returned 0x0 [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x2ca57399 [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x276a59c [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x158def01 [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x4c3d985c [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x70e26952 [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x476bd263 [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x59bdc7c8 [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x2cab4890 [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x457fe183 [0148.564] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x31fe9d45 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x6ce16d9f [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x20bbe7dd [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x22e0f617 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x4f1e1aea [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x443646f1 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x436077c4 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x504e83ec [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x2cf12903 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x6537ea92 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x7d1be799 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x66ce3a91 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x55324c1e [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x1120ea6b [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x7014d5e1 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x18b3878e [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x15cf0206 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x4360fef0 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x7cab667f [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x3d8507c9 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x64af0820 [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x7080a96b [0148.565] RtlRandomEx (in: Seed=0x8b7f778 | out: Seed=0x8b7f778) returned 0x1dfa1379 [0148.576] SetFilePointerEx (in: hFile=0x1264, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.576] ReadFile (in: hFile=0x1264, lpBuffer=0x8159080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8b7f780, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesRead=0x8b7f780*=0x3c00, lpOverlapped=0x0) returned 1 [0148.576] SetFilePointerEx (in: hFile=0x1264, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b46e0 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014f68 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d98 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d98) returned 1 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b46e0) returned 1 [0148.577] WriteFile (in: hFile=0x1264, lpBuffer=0x815cc88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8b7f780, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesWritten=0x8b7f780*=0x3c00, lpOverlapped=0x0) returned 1 [0149.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0149.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0149.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1900 [0149.093] SetFilePointerEx (in: hFile=0x1264, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.093] WriteFile (in: hFile=0x1264, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x8b7f7ec, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x8b7f7ec*=0x102, lpOverlapped=0x0) returned 1 [0151.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0151.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0151.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0151.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0151.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0151.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0151.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0151.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0151.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f118 [0151.129] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif" [0151.129] wcscat (in: _Dest=0x3e1f118, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif.f0dbec" [0151.129] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif.f0dbec", NtPathName=0x8b7f770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\DWI2.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e12228 [0151.572] FlushFileBuffers (hFile=0x1264) returned 1 [0151.579] CloseHandle (hObject=0x1264) returned 1 [0151.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb13d8 [0151.580] wcscpy (in: _Dest=0x3eb13d8, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0151.580] wcscat (in: _Dest=0x3eb13d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" [0151.580] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\f0dbec-readme.txt")) returned 0xffffffff [0151.580] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1264 [0151.583] WriteFile (in: hFile=0x1264, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8b7f794, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8b7f794*=0x70c, lpOverlapped=0x0) returned 1 [0151.585] CloseHandle (hObject=0x1264) returned 1 [0151.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb13d8) returned 1 [0151.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32610) returned 1 Thread: id = 1583 os_tid = 0x1294 [0148.580] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\is88 kky.gif")) returned 0x20 [0148.580] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif", dwFileAttributes=0x20) returned 1 [0148.581] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\is88 kky.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1060 [0148.581] GetFileSizeEx (in: hFile=0x1060, lpFileSize=0x769f8e0 | out: lpFileSize=0x769f8e0*=56712) returned 1 [0148.581] SetFilePointerEx (in: hFile=0x1060, liDistanceToMove=0xdd84, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.581] ReadFile (in: hFile=0x1060, lpBuffer=0x769f8ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x769f8c8, lpOverlapped=0x0 | out: lpBuffer=0x769f8ec*, lpNumberOfBytesRead=0x769f8c8*=0x4, lpOverlapped=0x0) returned 1 [0148.583] SetFilePointerEx (in: hFile=0x1060, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d98 [0148.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0148.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2210 [0148.583] NtQuerySystemTime (in: CurrentTime=0x769f868 | out: CurrentTime=0x769f868*=132471540171576000) returned 0x0 [0148.583] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x324ad30 [0148.583] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x5acc6754 [0148.583] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x74d1d13e [0148.583] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x575122dc [0148.583] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x2e49eb64 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x263486e1 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x3f80e3f [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x33f786b1 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x50f01aef [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x7378d17e [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x6855046a [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x763914bc [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x6bb16d75 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x77120153 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x3c63a5e4 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x645df02e [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x731117b5 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x11ea631c [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x54b1cdac [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x7692e56d [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x68cc54f9 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0xd620a21 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x6ab2cb31 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x4ea02a5a [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x17666c06 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x5e2acb1f [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x76777525 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x6f3047fb [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x3525161 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0xb7ce04a [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0x1e88f5e2 [0148.584] RtlRandomEx (in: Seed=0x769f860 | out: Seed=0x769f860) returned 0xb7f89a0 [0148.595] SetFilePointerEx (in: hFile=0x1060, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.595] ReadFile (in: hFile=0x1060, lpBuffer=0x8146458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x769f868, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesRead=0x769f868*=0x3c00, lpOverlapped=0x0) returned 1 [0148.596] SetFilePointerEx (in: hFile=0x1060, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4920 [0148.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014f68 [0148.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d98 [0148.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d98) returned 1 [0148.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814a060 [0148.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d98 [0148.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2210 [0148.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2210) returned 1 [0148.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0148.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4920) returned 1 [0148.597] WriteFile (in: hFile=0x1060, lpBuffer=0x814a060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x769f868, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesWritten=0x769f868*=0x3c00, lpOverlapped=0x0) returned 1 [0149.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0149.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0149.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6feb8 [0149.094] SetFilePointerEx (in: hFile=0x1060, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.094] WriteFile (in: hFile=0x1060, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x769f8d4, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0x769f8d4*=0x10a, lpOverlapped=0x0) returned 1 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdf8) returned 1 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6feb8) returned 1 [0151.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d98) returned 1 [0151.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0151.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef13d8) returned 1 [0151.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0151.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35d90 [0151.127] wcscpy (in: _Dest=0x3f35d90, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif" [0151.127] wcscat (in: _Dest=0x3f35d90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif.f0dbec" [0151.127] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif.f0dbec", NtPathName=0x769f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\is88 kky.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187760 [0151.598] FlushFileBuffers (hFile=0x1060) returned 1 [0151.607] CloseHandle (hObject=0x1060) returned 1 [0151.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34a70 [0151.608] wcscpy (in: _Dest=0x3f34a70, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0151.608] wcscat (in: _Dest=0x3f34a70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" [0151.608] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\f0dbec-readme.txt")) returned 0x20 [0151.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34a70) returned 1 [0151.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24540) returned 1 Thread: id = 1584 os_tid = 0x1298 [0148.599] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\quh jayeglsr8n2sxsp.avi")) returned 0x20 [0148.599] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi", dwFileAttributes=0x20) returned 1 [0148.599] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\quh jayeglsr8n2sxsp.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17d8 [0148.599] GetFileSizeEx (in: hFile=0x17d8, lpFileSize=0x8e8fdc0 | out: lpFileSize=0x8e8fdc0*=92684) returned 1 [0148.599] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x16a08, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.599] ReadFile (in: hFile=0x17d8, lpBuffer=0x8e8fdcc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e8fda8, lpOverlapped=0x0 | out: lpBuffer=0x8e8fdcc*, lpNumberOfBytesRead=0x8e8fda8*=0x4, lpOverlapped=0x0) returned 1 [0148.601] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2210 [0148.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0148.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0148.602] NtQuerySystemTime (in: CurrentTime=0x8e8fd48 | out: CurrentTime=0x8e8fd48*=132471540171732000) returned 0x0 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x741e64b1 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x5bf4e59d [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x1cc40a28 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x5a7ab920 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x6d864d7a [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x6132d04f [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x5c4b8c3f [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x3409b6f0 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x31383a8e [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x61889998 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x2852652b [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x1b074755 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x58b7fcd2 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x53a85acb [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x4ce27837 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x342f02c8 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x78bd0564 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x48dbfea4 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x3709bc59 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x5654feec [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x5a03db30 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x6b5841ea [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x5ccbd289 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x73cb5d40 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x25ded561 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x371764b9 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x229b9029 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x24406620 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x31085282 [0148.602] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x1407e6f0 [0148.603] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x24c8ba9a [0148.603] RtlRandomEx (in: Seed=0x8e8fd40 | out: Seed=0x8e8fd40) returned 0x5351c16c [0148.612] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.612] ReadFile (in: hFile=0x17d8, lpBuffer=0x8164498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8e8fd48, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0x8e8fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0148.613] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b49f8 [0148.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014f68 [0148.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2210 [0148.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2210) returned 1 [0148.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81680a0 [0148.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2210 [0148.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0148.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0148.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0148.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b49f8) returned 1 [0148.613] WriteFile (in: hFile=0x17d8, lpBuffer=0x81680a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8e8fd48, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesWritten=0x8e8fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0149.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0149.095] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.095] ReadFile (in: hFile=0x17d8, lpBuffer=0x8164498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8e8fd48, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0x8e8fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0149.095] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5dab0 [0149.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c180 [0149.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0149.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0149.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81680a0 [0149.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0149.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3390 [0149.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0149.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c180) returned 1 [0149.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dab0) returned 1 [0149.096] WriteFile (in: hFile=0x17d8, lpBuffer=0x81680a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8e8fd48, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesWritten=0x8e8fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0149.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0149.372] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x12e0c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.372] ReadFile (in: hFile=0x17d8, lpBuffer=0x8164498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8e8fd48, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0x8e8fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0149.373] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x12e0c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a818 [0149.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32688 [0149.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0149.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0149.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81680a0 [0149.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0149.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0149.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0149.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0149.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a818) returned 1 [0149.373] WriteFile (in: hFile=0x17d8, lpBuffer=0x81680a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8e8fd48, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesWritten=0x8e8fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0149.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0149.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8cbb8 [0149.690] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.690] WriteFile (in: hFile=0x17d8, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x8e8fdb4, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0x8e8fdb4*=0x160, lpOverlapped=0x0) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5460) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2210) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b56a0) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cbb8) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1478) returned 1 [0151.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81868f0 [0151.134] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi" [0151.134] wcscat (in: _Dest=0x81868f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi.f0dbec" [0151.134] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi.f0dbec", NtPathName=0x8e8fd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\Quh jAyEGLSR8N2SxSP.avi.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7d88 [0151.578] FlushFileBuffers (hFile=0x17d8) returned 1 [0151.586] CloseHandle (hObject=0x17d8) returned 1 [0151.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb13d8 [0151.588] wcscpy (in: _Dest=0x3eb13d8, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0151.588] wcscat (in: _Dest=0x3eb13d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" [0151.588] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\f0dbec-readme.txt")) returned 0x20 [0151.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb13d8) returned 1 [0151.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c7a0) returned 1 Thread: id = 1585 os_tid = 0x129c [0148.616] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\s0wmuh fsc1tyz.bmp")) returned 0x20 [0148.616] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp", dwFileAttributes=0x20) returned 1 [0148.616] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\s0wmuh fsc1tyz.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17dc [0148.616] GetFileSizeEx (in: hFile=0x17dc, lpFileSize=0x44cf928 | out: lpFileSize=0x44cf928*=91441) returned 1 [0148.616] SetFilePointerEx (in: hFile=0x17dc, liDistanceToMove=0x1652d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.616] ReadFile (in: hFile=0x17dc, lpBuffer=0x44cf934, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x44cf910, lpOverlapped=0x0 | out: lpBuffer=0x44cf934*, lpNumberOfBytesRead=0x44cf910*=0x4, lpOverlapped=0x0) returned 1 [0148.618] SetFilePointerEx (in: hFile=0x17dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0148.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0148.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0148.618] NtQuerySystemTime (in: CurrentTime=0x44cf8b0 | out: CurrentTime=0x44cf8b0*=132471540171888000) returned 0x0 [0148.618] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x49f91ce [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x5bb37133 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x64fe08e [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x3bf2cac4 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x4c04b99d [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x6112edbb [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x60881831 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x60983 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x1cf0c706 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x7f93548d [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x78e33858 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x21a20633 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0xd0f698c [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x1e27d7f8 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x37cbc01f [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x60400341 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x1640d8ba [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x4392a786 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x2b59eab [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x5dca3ed2 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x25b5a7ea [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x385853e6 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x646aa13d [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x4e73699b [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x7a3748ef [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x59c0a3f [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x4b5f1acd [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x422eaad4 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x3ecd72b5 [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x1d541ced [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x205aeaba [0148.619] RtlRandomEx (in: Seed=0x44cf8a8 | out: Seed=0x44cf8a8) returned 0x47a28176 [0148.629] SetFilePointerEx (in: hFile=0x17dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.629] ReadFile (in: hFile=0x17dc, lpBuffer=0x816bca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x44cf8b0, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesRead=0x44cf8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.629] SetFilePointerEx (in: hFile=0x17dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4a40 [0148.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014f68 [0148.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0148.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0148.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816f8b0 [0148.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0148.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0148.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0148.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0148.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4a40) returned 1 [0148.630] WriteFile (in: hFile=0x17dc, lpBuffer=0x816f8b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x44cf8b0, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesWritten=0x44cf8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0149.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0149.099] SetFilePointerEx (in: hFile=0x17dc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.099] ReadFile (in: hFile=0x17dc, lpBuffer=0x816bca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x44cf8b0, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesRead=0x44cf8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0149.100] SetFilePointerEx (in: hFile=0x17dc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5dab0 [0149.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c180 [0149.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3390 [0149.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0149.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816f8b0 [0149.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3390 [0149.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0149.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0149.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c180) returned 1 [0149.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dab0) returned 1 [0149.100] WriteFile (in: hFile=0x17dc, lpBuffer=0x816f8b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x44cf8b0, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesWritten=0x44cf8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0149.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0149.374] SetFilePointerEx (in: hFile=0x17dc, liDistanceToMove=0x12931, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.375] ReadFile (in: hFile=0x17dc, lpBuffer=0x816bca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x44cf8b0, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesRead=0x44cf8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0149.375] SetFilePointerEx (in: hFile=0x17dc, liDistanceToMove=0x12931, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a818 [0149.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32688 [0149.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0149.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0149.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816f8b0 [0149.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0149.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0149.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1680) returned 1 [0149.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0149.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a818) returned 1 [0149.376] WriteFile (in: hFile=0x17dc, lpBuffer=0x816f8b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x44cf8b0, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesWritten=0x44cf8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0149.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0149.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e8f8 [0149.691] SetFilePointerEx (in: hFile=0x17dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.691] WriteFile (in: hFile=0x17dc, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x44cf91c, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0x44cf91c*=0x156, lpOverlapped=0x0) returned 1 [0151.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0151.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37dd8) returned 1 [0151.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0151.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37d98) returned 1 [0151.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e8f8) returned 1 [0151.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0151.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0f78) returned 1 [0151.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0151.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0151.132] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp" [0151.132] wcscat (in: _Dest=0x3e3d120, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp.f0dbec" [0151.132] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp.f0dbec", NtPathName=0x44cf8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\S0wMUH fSC1tyz.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c008 [0151.581] FlushFileBuffers (hFile=0x17dc) returned 1 [0151.589] CloseHandle (hObject=0x17dc) returned 1 [0151.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb13d8 [0151.590] wcscpy (in: _Dest=0x3eb13d8, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0151.590] wcscat (in: _Dest=0x3eb13d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" [0151.590] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\f0dbec-readme.txt")) returned 0x20 [0151.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb13d8) returned 1 [0151.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34b00) returned 1 Thread: id = 1586 os_tid = 0x1408 [0148.641] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\wtji_mqu9.png")) returned 0x20 [0148.641] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png", dwFileAttributes=0x20) returned 1 [0148.642] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\wtji_mqu9.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17e0 [0148.642] GetFileSizeEx (in: hFile=0x17e0, lpFileSize=0x8acf7e8 | out: lpFileSize=0x8acf7e8*=41879) returned 1 [0148.642] SetFilePointerEx (in: hFile=0x17e0, liDistanceToMove=0xa393, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.642] ReadFile (in: hFile=0x17e0, lpBuffer=0x8acf7f4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8acf7d0, lpOverlapped=0x0 | out: lpBuffer=0x8acf7f4*, lpNumberOfBytesRead=0x8acf7d0*=0x4, lpOverlapped=0x0) returned 1 [0148.644] SetFilePointerEx (in: hFile=0x17e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0148.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0148.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0cd0 [0148.645] NtQuerySystemTime (in: CurrentTime=0x8acf770 | out: CurrentTime=0x8acf770*=132471540172200000) returned 0x0 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x681cdee4 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0xf6bb869 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x7df8625e [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x110fdcdd [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x6dd17802 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x3f48addb [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x271f8929 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x63988a95 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x9ca1990 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x5a5eb5db [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x40adc0ec [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x2f1d8950 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x2b02349 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x4fca33a2 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x235efb77 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0xb999b2c [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x2ba1752f [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x3993030d [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0xdd8faeb [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x24e92898 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x61f29f98 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x493f4957 [0148.645] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x1430ddff [0148.646] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0xe887100 [0148.646] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x5bd6b159 [0148.646] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x69d958b [0148.646] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x461798b6 [0148.646] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x767707b2 [0148.646] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x463f0fce [0148.646] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x1579d4b3 [0148.646] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0xa0be1c1 [0148.646] RtlRandomEx (in: Seed=0x8acf768 | out: Seed=0x8acf768) returned 0x1a4db04b [0148.658] SetFilePointerEx (in: hFile=0x17e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.658] ReadFile (in: hFile=0x17e0, lpBuffer=0x81734b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8acf770, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesRead=0x8acf770*=0x3c00, lpOverlapped=0x0) returned 1 [0148.658] SetFilePointerEx (in: hFile=0x17e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4cc8 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014f68 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0148.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81770c0 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0cd0 [0148.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0cd0) returned 1 [0148.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0148.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4cc8) returned 1 [0148.660] WriteFile (in: hFile=0x17e0, lpBuffer=0x81770c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8acf770, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesWritten=0x8acf770*=0x3c00, lpOverlapped=0x0) returned 1 [0149.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0149.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0149.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fee8 [0149.102] SetFilePointerEx (in: hFile=0x17e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.102] WriteFile (in: hFile=0x17e0, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8acf7dc, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x8acf7dc*=0x10c, lpOverlapped=0x0) returned 1 [0151.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0151.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd98) returned 1 [0151.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0151.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fee8) returned 1 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2120) returned 1 [0151.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34a70 [0151.125] wcscpy (in: _Dest=0x3f34a70, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png" [0151.125] wcscat (in: _Dest=0x3f34a70, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png.f0dbec" [0151.125] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png.f0dbec", NtPathName=0x8acf760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\WtJI_mQU9.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81878b0 [0151.606] FlushFileBuffers (hFile=0x17e0) returned 1 [0151.615] CloseHandle (hObject=0x17e0) returned 1 [0151.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34a70 [0151.616] wcscpy (in: _Dest=0x3f34a70, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0151.616] wcscat (in: _Dest=0x3f34a70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" [0151.616] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\f0dbec-readme.txt")) returned 0x20 [0151.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34a70) returned 1 [0151.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e248c0) returned 1 Thread: id = 1587 os_tid = 0xe7c [0148.662] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\zgordmyi_qzxtsrzswt.pps")) returned 0x20 [0148.662] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps", dwFileAttributes=0x20) returned 1 [0148.663] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\zgordmyi_qzxtsrzswt.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17e4 [0148.663] GetFileSizeEx (in: hFile=0x17e4, lpFileSize=0x8f2fd80 | out: lpFileSize=0x8f2fd80*=6738) returned 1 [0148.663] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x1a4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.663] ReadFile (in: hFile=0x17e4, lpBuffer=0x8f2fd8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8f2fd68, lpOverlapped=0x0 | out: lpBuffer=0x8f2fd8c*, lpNumberOfBytesRead=0x8f2fd68*=0x4, lpOverlapped=0x0) returned 1 [0148.665] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0cd0 [0148.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0148.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0148.665] NtQuerySystemTime (in: CurrentTime=0x8f2fd08 | out: CurrentTime=0x8f2fd08*=132471540172356000) returned 0x0 [0148.665] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x3bb87988 [0148.665] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0xd6a3299 [0148.665] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x4b8973a7 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x3344012d [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x3b7fc524 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x3c235ed5 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x35364bd4 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x6ddcd46e [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x9acac29 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x3fc85adc [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x76494ce8 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x69e2e0ea [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x354bae28 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0xc18ca2e [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x1da0bbcf [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x27b4af33 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x18138bdb [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x4c8e8d20 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x5fde2e0c [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x73a9c8d1 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x4a08f046 [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x781994d [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x13ac7d8e [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x14fb2c1f [0148.666] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0xf8cbee [0148.667] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x62d67084 [0148.667] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x1e299d72 [0148.667] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0xb9acdb1 [0148.667] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x2df853ad [0148.667] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x3055ddfb [0148.667] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x4db58622 [0148.667] RtlRandomEx (in: Seed=0x8f2fd00 | out: Seed=0x8f2fd00) returned 0x2fec581d [0148.678] ReadFile (in: hFile=0x17e4, lpBuffer=0x817acc8, nNumberOfBytesToRead=0x1a52, lpNumberOfBytesRead=0x8f2fcfc, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesRead=0x8f2fcfc*=0x1a52, lpOverlapped=0x0) returned 1 [0148.679] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.679] WriteFile (in: hFile=0x17e4, lpBuffer=0x817e8d0*, nNumberOfBytesToWrite=0x1a52, lpNumberOfBytesWritten=0x8f2fd00, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesWritten=0x8f2fd00*=0x1a52, lpOverlapped=0x0) returned 1 [0149.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0149.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0149.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0149.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0149.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0149.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0149.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4d58) returned 1 [0149.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x81b4d58 [0149.103] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.103] WriteFile (in: hFile=0x17e4, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x8f2fd74, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0x8f2fd74*=0x120, lpOverlapped=0x0) returned 1 [0151.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0151.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4b18) returned 1 [0151.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0151.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4d58) returned 1 [0151.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0151.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0151.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16a8) returned 1 [0151.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0151.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186650 [0151.123] wcscpy (in: _Dest=0x8186650, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps" [0151.123] wcscat (in: _Dest=0x8186650, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps.f0dbec") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps.f0dbec" [0151.123] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps.f0dbec", NtPathName=0x8f2fcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\ZgoRDmYi_QzXTSrzsWT.pps.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7150 [0151.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 [0151.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f4c0) returned 1 [0151.602] NtQueryInformationFile (in: FileHandle=0x17e4, IoStatusBlock=0x8f2fcd0, FileInformation=0x8f2fcd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8f2fcd0, FileInformation=0x8f2fcd8) returned 0x0 [0151.602] NtSetInformationFile (FileHandle=0x17e4, IoStatusBlock=0x8f2fcd0, FileInformation=0x8f2fcd8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0151.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186650) returned 1 [0151.604] FlushFileBuffers (hFile=0x17e4) returned 1 [0151.613] CloseHandle (hObject=0x17e4) returned 1 [0151.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f34a70 [0151.614] wcscpy (in: _Dest=0x3f34a70, _Source="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\" [0151.614] wcscat (in: _Dest=0x3f34a70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" [0151.614] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\jpaQUl_gR3\\RnOGyLr7Z\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\jpaqul_gr3\\rnogylr7z\\f0dbec-readme.txt")) returned 0x20 [0151.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34a70) returned 1 [0151.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1b0) returned 1 Thread: id = 1588 os_tid = 0xe68 [0148.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b218 [0148.681] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0148.681] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\" [0148.681] wcscat (in: _Dest=0x3e1b218, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*" [0148.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100ad8 [0148.682] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0148.684] wcscmp (_String1=".", _String2=".") returned 0 [0148.684] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.684] wcscmp (_String1="..", _String2=".") returned 1 [0148.684] wcscmp (_String1="..", _String2="..") returned 0 [0148.684] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0148.684] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2=".") returned 1 [0148.684] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2="..") returned 1 [0148.684] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc226eed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc226eed0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0148.684] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2=".") returned 1 [0148.684] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2="..") returned 1 [0148.684] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0148.684] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2=".") returned 1 [0148.684] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2="..") returned 1 [0148.684] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0148.684] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2=".") returned 1 [0148.684] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2="..") returned 1 [0148.684] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971568f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0148.684] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2=".") returned 1 [0148.684] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2="..") returned 1 [0148.684] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0148.685] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2=".") returned 1 [0148.685] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2="..") returned 1 [0148.685] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 0 [0148.685] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0148.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100ad8) returned 1 [0148.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 [0148.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b558) returned 1 Thread: id = 1589 os_tid = 0x12a8 [0148.688] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\ccjf.gif")) returned 0x20 [0148.688] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif", dwFileAttributes=0x20) returned 1 [0148.689] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\ccjf.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17e8 [0148.689] GetFileSizeEx (in: hFile=0x17e8, lpFileSize=0x85bf908 | out: lpFileSize=0x85bf908*=69786) returned 1 [0148.689] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x11096, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.689] ReadFile (in: hFile=0x17e8, lpBuffer=0x85bf914, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x85bf8f0, lpOverlapped=0x0 | out: lpBuffer=0x85bf914*, lpNumberOfBytesRead=0x85bf8f0*=0x4, lpOverlapped=0x0) returned 1 [0148.691] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0cd0 [0148.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0148.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0148.691] NtQuerySystemTime (in: CurrentTime=0x85bf890 | out: CurrentTime=0x85bf890*=132471540172668000) returned 0x0 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x7d6f0b2a [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x2c1fc8da [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x61535aae [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x1461ba13 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x7015f715 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x33e0299d [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x47458f90 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x462786c5 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x431038f3 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x30a7f3a7 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x647b5b78 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x19f66417 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x2c3ea2f4 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x2161cdb3 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x272fd3c2 [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x60a790cd [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0xde3db6d [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x4d07742b [0148.691] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x4a069601 [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x689c9f8a [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x2e3136be [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x780cf21d [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x51dbe4e0 [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x2641c886 [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x679b250e [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x388eff55 [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x28239f7a [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x11ac8580 [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x3c4de6f6 [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x5be82f4f [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x7ed7fe36 [0148.692] RtlRandomEx (in: Seed=0x85bf888 | out: Seed=0x85bf888) returned 0x5e58fa28 [0148.701] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.702] ReadFile (in: hFile=0x17e8, lpBuffer=0x81824d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85bf890, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesRead=0x85bf890*=0x3c00, lpOverlapped=0x0) returned 1 [0148.702] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4e30 [0148.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30150d0 [0148.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0cd0 [0148.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0cd0) returned 1 [0148.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8248458 [0148.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0cd0 [0148.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0148.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0148.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0148.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4e30) returned 1 [0148.703] WriteFile (in: hFile=0x17e8, lpBuffer=0x8248458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85bf890, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesWritten=0x85bf890*=0x3c00, lpOverlapped=0x0) returned 1 [0149.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0149.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0149.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9ab8 [0149.105] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.105] WriteFile (in: hFile=0x17e8, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x85bf8fc, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0x85bf8fc*=0x102, lpOverlapped=0x0) returned 1 [0151.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0151.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0151.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0151.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0151.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0cd0) returned 1 [0151.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0151.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2648) returned 1 [0151.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0151.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6d00 [0151.121] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif" [0151.121] wcscat (in: _Dest=0x2ff6d00, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif.f0dbec" [0151.121] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif.f0dbec", NtPathName=0x85bf880, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\CCJf.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d5bc0 [0151.504] FlushFileBuffers (hFile=0x17e8) returned 1 [0151.508] CloseHandle (hObject=0x17e8) returned 1 [0151.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6d00 [0151.510] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" [0151.510] wcscat (in: _Dest=0x2ff6d00, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" [0151.510] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\f0dbec-readme.txt")) returned 0xffffffff [0151.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x195c [0151.525] WriteFile (in: hFile=0x195c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x85bf8a4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x85bf8a4*=0x70c, lpOverlapped=0x0) returned 1 [0151.527] CloseHandle (hObject=0x195c) returned 1 [0151.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0151.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186e30) returned 1 Thread: id = 1590 os_tid = 0x12ac [0148.705] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\fv ynb9csqry_c7mu.gif")) returned 0x20 [0148.705] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif", dwFileAttributes=0x20) returned 1 [0148.706] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\fv ynb9csqry_c7mu.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17ec [0148.706] GetFileSizeEx (in: hFile=0x17ec, lpFileSize=0x8f6fdd0 | out: lpFileSize=0x8f6fdd0*=29753) returned 1 [0148.706] SetFilePointerEx (in: hFile=0x17ec, liDistanceToMove=0x7435, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.706] ReadFile (in: hFile=0x17ec, lpBuffer=0x8f6fddc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8f6fdb8, lpOverlapped=0x0 | out: lpBuffer=0x8f6fddc*, lpNumberOfBytesRead=0x8f6fdb8*=0x4, lpOverlapped=0x0) returned 1 [0148.708] SetFilePointerEx (in: hFile=0x17ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0148.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0148.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0148.708] NtQuerySystemTime (in: CurrentTime=0x8f6fd58 | out: CurrentTime=0x8f6fd58*=132471540172824000) returned 0x0 [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0xe2b0122 [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x314a1920 [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x1e74a03a [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x197cfbc6 [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x726dce1c [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x7a40dc8 [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x2cacf622 [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x6639efac [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x3fb0384e [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x52f8e08d [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x6867a360 [0148.708] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x366e4c44 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x386c0629 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x28b682f5 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x4b2a2030 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x3e99c43 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x5f5eb76c [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x755f848c [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x744781bb [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0xfa8eb23 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x54134864 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x8480ece [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x1ddf2bc5 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x7f6db642 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x58a1bce2 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x28a8211d [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x7f46413b [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x63c85e54 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x6ea5c26f [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x71651c79 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x232aca84 [0148.709] RtlRandomEx (in: Seed=0x8f6fd50 | out: Seed=0x8f6fd50) returned 0x16a4e8b0 [0148.719] SetFilePointerEx (in: hFile=0x17ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.719] ReadFile (in: hFile=0x17ec, lpBuffer=0x824c060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8f6fd58, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesRead=0x8f6fd58*=0x3c00, lpOverlapped=0x0) returned 1 [0148.719] SetFilePointerEx (in: hFile=0x17ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b56e8 [0148.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30150d0 [0148.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0148.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0148.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0148.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10e0 [0148.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0148.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0148.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0148.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b56e8) returned 1 [0148.720] WriteFile (in: hFile=0x17ec, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8f6fd58, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0x8f6fd58*=0x3c00, lpOverlapped=0x0) returned 1 [0149.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0149.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0149.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x8098890 [0149.106] SetFilePointerEx (in: hFile=0x17ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.106] WriteFile (in: hFile=0x17ec, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x8f6fdc4, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0x8f6fdc4*=0x11c, lpOverlapped=0x0) returned 1 [0151.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0151.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099610) returned 1 [0151.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0151.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8098890) returned 1 [0151.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0151.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0151.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3638) returned 1 [0151.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0151.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1b218 [0151.119] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif" [0151.119] wcscat (in: _Dest=0x3e1b218, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif.f0dbec" [0151.120] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif.f0dbec", NtPathName=0x8f6fd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Fv yNB9csqrY_c7MU.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39dc8 [0151.499] FlushFileBuffers (hFile=0x17ec) returned 1 [0151.502] CloseHandle (hObject=0x17ec) returned 1 [0151.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7378 [0151.503] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" [0151.503] wcscat (in: _Dest=0x2ff7378, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" [0151.503] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\f0dbec-readme.txt")) returned 0xffffffff [0151.511] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1968 [0151.536] WriteFile (in: hFile=0x1968, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8f6fd6c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8f6fd6c*=0x70c, lpOverlapped=0x0) returned 1 [0151.536] CloseHandle (hObject=0x1968) returned 1 [0151.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 [0151.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 1591 os_tid = 0x12b0 [0148.722] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst")) returned 0x2020 [0149.692] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst", dwFileAttributes=0x20) returned 1 [0152.066] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f90 [0152.066] GetFileSizeEx (in: hFile=0x1f90, lpFileSize=0x85ffa78 | out: lpFileSize=0x85ffa78*=34258) returned 1 [0152.066] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x85ce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.066] ReadFile (in: hFile=0x1f90, lpBuffer=0x85ffa84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x85ffa60, lpOverlapped=0x0 | out: lpBuffer=0x85ffa84*, lpNumberOfBytesRead=0x85ffa60*=0x4, lpOverlapped=0x0) returned 1 [0152.068] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0152.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0152.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0152.069] NtQuerySystemTime (in: CurrentTime=0x85ffa00 | out: CurrentTime=0x85ffa00*=132471540206520000) returned 0x0 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x21bdbe50 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x3514c9f7 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x19c69614 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x72611583 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x31cef671 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x11e6eb74 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x42df3ee9 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x32cd0062 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x1d5bd40a [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x60cb61a [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x75f09f6e [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x644a8b03 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x2f4e18ae [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x5568238a [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0xa14182b [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x752c7c7d [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x26fd2dca [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x7ab855a [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x68466f92 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x305cc877 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x2609ae21 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x51929795 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x3b9f82f3 [0152.069] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x42df3ee9 [0152.070] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x3aeb74c7 [0152.070] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x9efeb7e [0152.070] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x510ca59c [0152.070] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x745b6957 [0152.070] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x19e07a99 [0152.070] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x38bafdb7 [0152.070] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x4e01eaeb [0152.070] RtlRandomEx (in: Seed=0x85ff9f8 | out: Seed=0x85ff9f8) returned 0x675ab199 [0152.080] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.080] ReadFile (in: hFile=0x1f90, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85ffa00, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0x85ffa00*=0x3c00, lpOverlapped=0x0) returned 1 [0152.081] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cca0 [0152.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32700 [0152.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0152.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0152.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0152.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0152.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0152.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0152.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0152.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0152.082] WriteFile (in: hFile=0x1f90, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85ffa00, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0x85ffa00*=0x3c00, lpOverlapped=0x0) returned 1 [0156.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0156.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0156.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f379d8 [0156.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0156.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f37f98 [0156.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0156.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0156.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0156.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0156.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d630) returned 1 [0156.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56f00 [0156.914] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.914] WriteFile (in: hFile=0x1f90, lpBuffer=0x3d56f00*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x85ffa6c, lpOverlapped=0x0 | out: lpBuffer=0x3d56f00*, lpNumberOfBytesWritten=0x85ffa6c*=0x116, lpOverlapped=0x0) returned 1 [0156.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 [0156.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37f98) returned 1 [0156.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0156.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f379d8) returned 1 [0156.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0156.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0156.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0156.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0156.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11a08 [0156.992] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" [0156.992] wcscat (in: _Dest=0x3e11a08, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.f0dbec" [0156.992] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.f0dbec", NtPathName=0x85ff9f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0156.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e19e0 [0157.066] FlushFileBuffers (hFile=0x1f90) returned 1 [0157.089] CloseHandle (hObject=0x1f90) returned 1 [0157.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c7a0 [0157.090] wcscpy (in: _Dest=0x3e3c7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0157.090] wcscat (in: _Dest=0x3e3c7a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" [0157.090] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\f0dbec-readme.txt")) returned 0x2020 [0158.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c7a0) returned 1 [0158.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cb30) returned 1 Thread: id = 1592 os_tid = 0x1530 [0148.725] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst")) returned 0x2020 [0149.693] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst", dwFileAttributes=0x20) returned 1 [0152.051] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f8c [0152.051] GetFileSizeEx (in: hFile=0x1f8c, lpFileSize=0x8deff40 | out: lpFileSize=0x8deff40*=138459) returned 1 [0152.051] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x21cd7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.051] ReadFile (in: hFile=0x1f8c, lpBuffer=0x8deff4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8deff28, lpOverlapped=0x0 | out: lpBuffer=0x8deff4c*, lpNumberOfBytesRead=0x8deff28*=0x4, lpOverlapped=0x0) returned 1 [0152.054] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0152.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0152.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0152.054] NtQuerySystemTime (in: CurrentTime=0x8defec8 | out: CurrentTime=0x8defec8*=132471540206364000) returned 0x0 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x4ac1d6fd [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x3ed7b05d [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x6ef19a4 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x40d60a15 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x669be21d [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x59e1b8cb [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x46dab0c6 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x64142071 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x1c1bbcfb [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x7f73044a [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x10c9061 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x7e5e7434 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x7d3d5098 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x49acc00c [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x60bbb8da [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x31b05502 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x4d2170e6 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x53960908 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x675476bf [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x34259cc5 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x39fa4223 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x4bf4bbd5 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x7b001fad [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x21bdbe50 [0152.054] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x46d4680 [0152.055] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x792539cb [0152.055] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x3b7babe3 [0152.055] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x86ddd58 [0152.055] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x48858fde [0152.055] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x2e3799a1 [0152.055] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x284202f9 [0152.055] RtlRandomEx (in: Seed=0x8defec0 | out: Seed=0x8defec0) returned 0x2da28de [0152.063] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.063] ReadFile (in: hFile=0x1f8c, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8defec8, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x8defec8*=0x3c00, lpOverlapped=0x0) returned 1 [0152.065] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cca0 [0152.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32700 [0152.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0152.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0152.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0152.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0152.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0152.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0152.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0152.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0152.065] WriteFile (in: hFile=0x1f8c, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8defec8, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x8defec8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0156.909] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.909] ReadFile (in: hFile=0x1f8c, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8defec8, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x8defec8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.915] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d630 [0156.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f327f0 [0156.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0156.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0156.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x827ccc8 [0156.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0156.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0156.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0156.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0156.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d630) returned 1 [0156.917] WriteFile (in: hFile=0x1f8c, lpBuffer=0x827ccc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8defec8, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesWritten=0x8defec8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0156.938] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x1e0db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.938] ReadFile (in: hFile=0x1f8c, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8defec8, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x8defec8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.945] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x1e0db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cca0 [0156.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32700 [0156.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca170 [0156.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca170) returned 1 [0156.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0156.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca170 [0156.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac10 [0156.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0156.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0156.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0156.946] WriteFile (in: hFile=0x1f8c, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8defec8, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0x8defec8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0156.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e8f8 [0156.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0156.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77d38 [0156.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0156.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0156.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0156.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0156.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0156.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dcdcd0 [0156.952] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.952] WriteFile (in: hFile=0x1f8c, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x8deff34, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0x8deff34*=0x154, lpOverlapped=0x0) returned 1 [0157.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0157.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0157.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0157.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0157.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e8f8) returned 1 [0157.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0157.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7c0) returned 1 [0157.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0157.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbc88 [0157.000] wcscpy (in: _Dest=0x81dbc88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" [0157.000] wcscat (in: _Dest=0x81dbc88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.f0dbec" [0157.000] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.f0dbec", NtPathName=0x8defeb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0157.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x81e1c08 [0157.064] FlushFileBuffers (hFile=0x1f8c) returned 1 [0157.067] CloseHandle (hObject=0x1f8c) returned 1 [0157.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3d5e0 [0157.068] wcscpy (in: _Dest=0x3e3d5e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0157.068] wcscat (in: _Dest=0x3e3d5e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" [0157.068] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\f0dbec-readme.txt")) returned 0xffffffff [0157.069] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8c [0157.089] WriteFile (in: hFile=0x1f8c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8defedc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8defedc*=0x70c, lpOverlapped=0x0) returned 1 [0158.846] CloseHandle (hObject=0x1f8c) returned 1 [0162.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d5e0) returned 1 [0162.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f360f0) returned 1 Thread: id = 1593 os_tid = 0x12b8 [0148.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5b88 [0148.726] wcscpy (in: _Dest=0x3dc5b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" [0148.726] wcscat (in: _Dest=0x3dc5b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" [0148.726] wcscat (in: _Dest=0x3dc5b88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*" [0148.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100ad8 [0148.726] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xebdb3e10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0149.377] wcscmp (_String1=".", _String2=".") returned 0 [0149.377] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xebdb3e10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.378] wcscmp (_String1="..", _String2=".") returned 1 [0149.378] wcscmp (_String1="..", _String2="..") returned 0 [0149.378] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xcb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0149.378] wcscmp (_String1="AcroFnt10.lst", _String2=".") returned 1 [0149.378] wcscmp (_String1="AcroFnt10.lst", _String2="..") returned 1 [0149.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3dd00 [0149.378] wcscpy (in: _Dest=0x3e3dd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" [0149.378] wcscat (in: _Dest=0x3e3dd00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" [0149.378] wcscat (in: _Dest=0x3e3dd00, _Source="AcroFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" [0151.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dd00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0151.028] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xcb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 0 [0151.028] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0151.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100ad8) returned 1 [0151.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5b88) returned 1 [0151.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687e0) returned 1 Thread: id = 1594 os_tid = 0xe20 [0148.727] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents")) returned 0x2020 [0149.379] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents", dwFileAttributes=0x20) returned 1 [0152.007] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f80 [0152.007] GetFileSizeEx (in: hFile=0x1f80, lpFileSize=0x90bfef0 | out: lpFileSize=0x90bfef0*=5120) returned 1 [0152.007] SetFilePointerEx (in: hFile=0x1f80, liDistanceToMove=0x13fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.007] ReadFile (in: hFile=0x1f80, lpBuffer=0x90bfefc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x90bfed8, lpOverlapped=0x0 | out: lpBuffer=0x90bfefc*, lpNumberOfBytesRead=0x90bfed8*=0x4, lpOverlapped=0x0) returned 1 [0152.024] SetFilePointerEx (in: hFile=0x1f80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0152.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0152.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0152.024] NtQuerySystemTime (in: CurrentTime=0x90bfe78 | out: CurrentTime=0x90bfe78*=132471540206052000) returned 0x0 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x1cc7ee69 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x4b2191cb [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x3ce7670 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x6fdc277 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x2016d98e [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x5d4a31b3 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x6b316bc2 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x675476bf [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x2b5bca3c [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x57bf9ad8 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x46e64ebd [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x24a5c73f [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0xa2111c3 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x74bac896 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x5c41cd55 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x30097258 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0xe8db334 [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x469c779d [0152.024] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x218547d8 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x1a4d3e07 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x6b4af4d7 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x476ba270 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0xce25d36 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x3adfe65b [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x2b5bca3c [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x36207d97 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x283860ee [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x7695b7c3 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x44f1ef38 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x228ba389 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x2c092f02 [0152.025] RtlRandomEx (in: Seed=0x90bfe70 | out: Seed=0x90bfe70) returned 0x7695b7c3 [0152.034] ReadFile (in: hFile=0x1f80, lpBuffer=0x8266498, nNumberOfBytesToRead=0x1400, lpNumberOfBytesRead=0x90bfe6c, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0x90bfe6c*=0x1400, lpOverlapped=0x0) returned 1 [0152.035] SetFilePointerEx (in: hFile=0x1f80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.035] WriteFile (in: hFile=0x1f80, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x90bfe70, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0x90bfe70*=0x1400, lpOverlapped=0x0) returned 1 [0156.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0156.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0156.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0156.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0156.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0156.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e683a8) returned 1 [0156.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d870) returned 1 [0156.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77f68 [0156.896] SetFilePointerEx (in: hFile=0x1f80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.896] WriteFile (in: hFile=0x1f80, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x90bfee4, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0x90bfee4*=0x112, lpOverlapped=0x0) returned 1 [0156.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0156.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77da8) returned 1 [0156.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0156.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77f68) returned 1 [0156.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0156.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0156.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0156.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0156.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e10608 [0156.984] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" [0156.984] wcscat (in: _Dest=0x3e10608, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.f0dbec" [0156.984] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.f0dbec", NtPathName=0x90bfe68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0156.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x81e1928 [0157.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1928) returned 1 [0157.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060d28) returned 1 [0157.099] NtQueryInformationFile (in: FileHandle=0x1f80, IoStatusBlock=0x90bfe40, FileInformation=0x90bfe48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x90bfe40, FileInformation=0x90bfe48) returned 0x0 [0157.099] NtSetInformationFile (FileHandle=0x1f80, IoStatusBlock=0x90bfe40, FileInformation=0x90bfe48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0157.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 [0157.101] FlushFileBuffers (hFile=0x1f80) returned 1 [0157.110] CloseHandle (hObject=0x1f80) returned 1 [0157.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3d4b0 [0157.111] wcscpy (in: _Dest=0x3e3d4b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0157.111] wcscat (in: _Dest=0x3e3d4b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" [0157.111] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\f0dbec-readme.txt")) returned 0x2020 [0158.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d4b0) returned 1 [0158.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36060) returned 1 Thread: id = 1595 os_tid = 0x12bc [0148.728] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin")) returned 0x2020 [0149.378] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin", dwFileAttributes=0x20) returned 1 [0152.009] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f84 [0152.009] GetFileSizeEx (in: hFile=0x1f84, lpFileSize=0x919fa98 | out: lpFileSize=0x919fa98*=77254) returned 1 [0152.009] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x12dc2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.009] ReadFile (in: hFile=0x1f84, lpBuffer=0x919faa4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x919fa80, lpOverlapped=0x0 | out: lpBuffer=0x919faa4*, lpNumberOfBytesRead=0x919fa80*=0x4, lpOverlapped=0x0) returned 1 [0152.011] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0152.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0152.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0152.012] NtQuerySystemTime (in: CurrentTime=0x919fa20 | out: CurrentTime=0x919fa20*=132471540205896000) returned 0x0 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x1979e75f [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x147c3f36 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x514de9c5 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x297913fd [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x933145b [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x11e6eb74 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x54871c87 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x4635aee5 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x6d34adb3 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x5d4a31b3 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x70c88120 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x3c0fa647 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x6a1a9b71 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x35f8fbd [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x157c97f4 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0xbc5eb8d [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x1ceb5c05 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x24fcc801 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x5e076762 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x15edcf2 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x637abad2 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x269be1b1 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x356dbb12 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x6caef1b0 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x466533b2 [0152.012] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x57738792 [0152.013] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x275ab64e [0152.013] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x46e64ebd [0152.013] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x72dfb508 [0152.013] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x7c8a5378 [0152.013] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x6bd29671 [0152.013] RtlRandomEx (in: Seed=0x919fa18 | out: Seed=0x919fa18) returned 0x330323b [0152.021] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.021] ReadFile (in: hFile=0x1f84, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x919fa20, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0x919fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0152.022] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d870 [0152.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e683a8 [0152.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0152.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0152.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0152.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0152.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0152.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0152.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e683a8) returned 1 [0152.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d870) returned 1 [0152.023] WriteFile (in: hFile=0x1f84, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x919fa20, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0x919fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0155.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0155.275] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.275] ReadFile (in: hFile=0x1f84, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x919fa20, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0x919fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0155.276] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d8c8 [0155.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68510 [0155.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ab8 [0155.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0155.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0155.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ab8 [0155.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca300 [0155.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0155.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 [0155.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d8c8) returned 1 [0155.277] WriteFile (in: hFile=0x1f84, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x919fa20, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0x919fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0155.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0155.278] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0xf1c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.278] ReadFile (in: hFile=0x1f84, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x919fa20, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0x919fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0155.279] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0xf1c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d8c8 [0155.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68510 [0155.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca300 [0155.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0155.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0155.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca300 [0155.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca378 [0155.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca378) returned 1 [0155.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 [0155.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d8c8) returned 1 [0155.280] WriteFile (in: hFile=0x1f84, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x919fa20, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0x919fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0155.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0155.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8cbb8 [0155.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0155.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fd08 [0155.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0155.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0155.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0155.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 [0155.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d8c8) returned 1 [0155.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e16628 [0155.282] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.282] WriteFile (in: hFile=0x1f84, lpBuffer=0x3e16628*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x919fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3e16628*, lpNumberOfBytesWritten=0x919fa8c*=0x14c, lpOverlapped=0x0) returned 1 [0158.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16628) returned 1 [0158.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd08) returned 1 [0158.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0158.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fca8) returned 1 [0158.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cbb8) returned 1 [0158.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0158.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0158.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0158.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cbb8 [0158.777] wcscpy (in: _Dest=0x32cbb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" [0158.777] wcscat (in: _Dest=0x32cbb8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.f0dbec" [0158.777] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.f0dbec", NtPathName=0x919fa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da1f8 [0158.778] NtSetInformationFile (FileHandle=0x1f84, IoStatusBlock=0x919fa18, FileInformation=0x81da1f8, Length=0xa4, FileInformationClass=0xa) returned 0x0 [0158.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da1f8) returned 1 [0158.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b02e0) returned 1 [0158.824] NtQueryInformationFile (in: FileHandle=0x1f84, IoStatusBlock=0x919f9e8, FileInformation=0x919f9f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x919f9e8, FileInformation=0x919f9f0) returned 0x0 [0158.825] NtSetInformationFile (FileHandle=0x1f84, IoStatusBlock=0x919f9e8, FileInformation=0x919f9f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0158.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cbb8) returned 1 [0158.873] FlushFileBuffers (hFile=0x1f84) returned 1 [0158.874] CloseHandle (hObject=0x1f84) returned 1 [0158.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c8c0 [0158.879] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0158.879] wcscat (in: _Dest=0x32c8c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" [0158.879] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\f0dbec-readme.txt")) returned 0x2020 [0159.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 [0159.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ef80) returned 1 Thread: id = 1596 os_tid = 0x12c0 [0148.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5d50 [0148.728] wcscpy (in: _Dest=0x81d5d50, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0148.728] wcscat (in: _Dest=0x81d5d50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0148.728] wcscat (in: _Dest=0x81d5d50, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*" [0148.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe928 [0148.729] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0148.729] wcscmp (_String1=".", _String2=".") returned 0 [0148.729] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.729] wcscmp (_String1="..", _String2=".") returned 1 [0148.729] wcscmp (_String1="..", _String2="..") returned 0 [0148.729] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0148.729] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0148.729] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0148.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddf6a8 [0148.729] wcscpy (in: _Dest=0x3ddf6a8, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0148.729] wcscat (in: _Dest=0x3ddf6a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0148.729] wcscat (in: _Dest=0x3ddf6a8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0160.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80207e0 [0160.075] wcscpy (in: _Dest=0x80207e0, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0160.075] wcscat (in: _Dest=0x80207e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\" [0160.076] wcscat (in: _Dest=0x80207e0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*" [0160.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe390 [0160.076] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e555c8 [0160.076] wcscmp (_String1=".", _String2=".") returned 0 [0160.076] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.076] wcscmp (_String1="..", _String2=".") returned 1 [0160.076] wcscmp (_String1="..", _String2="..") returned 0 [0160.076] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66936b00, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x66936b00, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x66936b00, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0160.076] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0160.076] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0160.077] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0160.077] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0160.077] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0160.077] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0160.077] FindClose (in: hFindFile=0x3e555c8 | out: hFindFile=0x3e555c8) returned 1 [0160.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe390) returned 1 [0160.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80207e0) returned 1 [0160.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf6a8) returned 1 [0160.077] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0160.077] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0160.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe928) returned 1 [0160.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5d50) returned 1 [0160.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34088) returned 1 Thread: id = 1597 os_tid = 0x12c4 [0148.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6a20 [0148.738] wcscpy (in: _Dest=0x2ff6a20, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0148.738] wcscat (in: _Dest=0x2ff6a20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0148.739] wcscat (in: _Dest=0x2ff6a20, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*" [0148.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100d40 [0148.739] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*", lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099690 [0148.739] wcscmp (_String1=".", _String2=".") returned 0 [0148.739] FindNextFileW (in: hFindFile=0x8099690, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.739] wcscmp (_String1="..", _String2=".") returned 1 [0148.739] wcscmp (_String1="..", _String2="..") returned 0 [0148.739] FindNextFileW (in: hFindFile=0x8099690, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0148.740] wcscmp (_String1="Patch", _String2=".") returned 1 [0148.740] wcscmp (_String1="Patch", _String2="..") returned 1 [0148.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333a68 [0148.740] wcscpy (in: _Dest=0x333a68, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0148.740] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0148.740] wcscat (in: _Dest=0x333a68, _Source="Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0154.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0154.180] FindNextFileW (in: hFindFile=0x8099690, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0154.180] FindClose (in: hFindFile=0x8099690 | out: hFindFile=0x8099690) returned 1 [0154.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100d40) returned 1 [0154.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6a20) returned 1 [0154.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 1598 os_tid = 0x12c8 [0148.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7c18 [0148.741] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0148.741] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0148.741] wcscat (in: _Dest=0x2ff7c18, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*" [0148.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0148.741] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0148.741] wcscmp (_String1=".", _String2=".") returned 0 [0148.741] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.742] wcscmp (_String1="..", _String2=".") returned 1 [0148.742] wcscmp (_String1="..", _String2="..") returned 0 [0148.742] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0148.742] wcscmp (_String1="Patch", _String2=".") returned 1 [0148.742] wcscmp (_String1="Patch", _String2="..") returned 1 [0148.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333168 [0148.742] wcscpy (in: _Dest=0x333168, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0148.742] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0148.742] wcscat (in: _Dest=0x333168, _Source="Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0152.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0152.430] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0152.430] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0152.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0152.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 [0152.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 1599 os_tid = 0x12cc [0148.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml")) returned 0x20 [0148.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML", dwFileAttributes=0x20) returned 0 [0148.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.744] GetLastError () returned 0x5 [0148.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML", dwFileAttributes=0x20) returned 0 [0148.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 Thread: id = 1600 os_tid = 0x12d0 [0148.750] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf")) returned 0x2020 [0148.751] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x20) returned 0 [0148.751] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.751] GetLastError () returned 0x5 [0148.751] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x2020) returned 0 [0148.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5508) returned 1 Thread: id = 1601 os_tid = 0x140c [0148.752] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat")) returned 0x2020 [0148.753] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x20) returned 0 [0148.753] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.753] GetLastError () returned 0x5 [0148.753] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x2020) returned 0 [0148.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24440) returned 1 Thread: id = 1602 os_tid = 0x1410 [0148.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c4a8 [0148.756] wcscpy (in: _Dest=0x3e3c4a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0148.756] wcscat (in: _Dest=0x3e3c4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0148.756] wcscat (in: _Dest=0x3e3c4a8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*" [0148.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101e18 [0148.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80995d0 [0149.111] wcscmp (_String1=".", _String2=".") returned 0 [0149.111] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.111] wcscmp (_String1="..", _String2=".") returned 1 [0149.111] wcscmp (_String1="..", _String2="..") returned 0 [0149.111] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd61c1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0149.111] wcscmp (_String1="CAT", _String2=".") returned 1 [0149.112] wcscmp (_String1="CAT", _String2="..") returned 1 [0149.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7198 [0149.112] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0149.112] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0149.112] wcscat (in: _Dest=0x2c7198, _Source="CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0150.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0150.026] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6c9420, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0150.026] wcscmp (_String1="CHS", _String2=".") returned 1 [0150.026] wcscmp (_String1="CHS", _String2="..") returned 1 [0150.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e10a68 [0150.026] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.026] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.026] wcscat (in: _Dest=0x3e10a68, _Source="CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0150.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0150.027] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc089a60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0150.027] wcscmp (_String1="CHT", _String2=".") returned 1 [0150.027] wcscmp (_String1="CHT", _String2="..") returned 1 [0150.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11d28 [0150.027] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.027] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.027] wcscat (in: _Dest=0x3e11d28, _Source="CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0150.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e11d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0150.028] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfdc800, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0150.029] wcscmp (_String1="CZE", _String2=".") returned 1 [0150.029] wcscmp (_String1="CZE", _String2="..") returned 1 [0150.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e12408 [0150.029] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.029] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.029] wcscat (in: _Dest=0x3e12408, _Source="CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0150.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0150.034] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc089a60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0150.034] wcscmp (_String1="DAN", _String2=".") returned 1 [0150.034] wcscmp (_String1="DAN", _String2="..") returned 1 [0150.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11468 [0150.034] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.034] wcscat (in: _Dest=0x3e11468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.034] wcscat (in: _Dest=0x3e11468, _Source="DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0150.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e11468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0150.035] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0150.035] wcscmp (_String1="DEU", _String2=".") returned 1 [0150.035] wcscmp (_String1="DEU", _String2="..") returned 1 [0150.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11968 [0150.035] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.035] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.035] wcscat (in: _Dest=0x3e11968, _Source="DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0150.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b5c [0150.037] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbff14e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0150.037] wcscmp (_String1="ENU", _String2=".") returned 1 [0150.037] wcscmp (_String1="ENU", _String2="..") returned 1 [0150.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a458 [0150.037] wcscpy (in: _Dest=0x819a458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.037] wcscat (in: _Dest=0x819a458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.037] wcscat (in: _Dest=0x819a458, _Source="ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0150.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819a458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b60 [0150.038] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0afbc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0150.038] wcscmp (_String1="ESP", _String2=".") returned 1 [0150.038] wcscmp (_String1="ESP", _String2="..") returned 1 [0150.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a4f8 [0150.038] wcscpy (in: _Dest=0x819a4f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.038] wcscat (in: _Dest=0x819a4f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.038] wcscat (in: _Dest=0x819a4f8, _Source="ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0150.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819a4f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b64 [0150.039] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd406e80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0150.039] wcscmp (_String1="EUQ", _String2=".") returned 1 [0150.039] wcscmp (_String1="EUQ", _String2="..") returned 1 [0150.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819aa98 [0150.040] wcscpy (in: _Dest=0x819aa98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.040] wcscat (in: _Dest=0x819aa98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.040] wcscat (in: _Dest=0x819aa98, _Source="EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0150.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819aa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0150.041] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf7f0c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfa5220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0150.041] wcscmp (_String1="FRA", _String2=".") returned 1 [0150.041] wcscmp (_String1="FRA", _String2="..") returned 1 [0150.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a638 [0150.041] wcscpy (in: _Dest=0x819a638, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.041] wcscat (in: _Dest=0x819a638, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.041] wcscat (in: _Dest=0x819a638, _Source="FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0150.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819a638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b6c [0150.043] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfb66a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0150.043] wcscmp (_String1="HRV", _String2=".") returned 1 [0150.043] wcscmp (_String1="HRV", _String2="..") returned 1 [0150.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a8b8 [0150.043] wcscpy (in: _Dest=0x819a8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.043] wcscat (in: _Dest=0x819a8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.043] wcscat (in: _Dest=0x819a8b8, _Source="HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0150.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819a8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0150.044] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf90540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfb66a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0150.044] wcscmp (_String1="HUN", _String2=".") returned 1 [0150.044] wcscmp (_String1="HUN", _String2="..") returned 1 [0150.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a958 [0150.045] wcscpy (in: _Dest=0x819a958, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.045] wcscat (in: _Dest=0x819a958, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.045] wcscat (in: _Dest=0x819a958, _Source="HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0150.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819a958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0150.046] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbff14e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0150.046] wcscmp (_String1="ITA", _String2=".") returned 1 [0150.046] wcscmp (_String1="ITA", _String2="..") returned 1 [0150.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a9f8 [0150.046] wcscpy (in: _Dest=0x819a9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.046] wcscat (in: _Dest=0x819a9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.046] wcscat (in: _Dest=0x819a9f8, _Source="ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0150.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819a9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0150.047] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc03d7a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0150.047] wcscmp (_String1="JPN", _String2=".") returned 1 [0150.047] wcscmp (_String1="JPN", _String2="..") returned 1 [0150.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a818 [0150.047] wcscpy (in: _Dest=0x819a818, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.047] wcscat (in: _Dest=0x819a818, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.047] wcscat (in: _Dest=0x819a818, _Source="JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0150.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819a818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b7c [0150.048] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc03d7a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0150.048] wcscmp (_String1="KOR", _String2=".") returned 1 [0150.048] wcscmp (_String1="KOR", _String2="..") returned 1 [0150.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ab38 [0150.049] wcscpy (in: _Dest=0x819ab38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.049] wcscat (in: _Dest=0x819ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.049] wcscat (in: _Dest=0x819ab38, _Source="KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0150.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0150.050] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfa5220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0150.050] wcscmp (_String1="NLD", _String2=".") returned 1 [0150.050] wcscmp (_String1="NLD", _String2="..") returned 1 [0150.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a778 [0150.050] wcscpy (in: _Dest=0x819a778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.050] wcscat (in: _Dest=0x819a778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.050] wcscat (in: _Dest=0x819a778, _Source="NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0150.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819a778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0150.051] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0150.051] wcscmp (_String1="NOR", _String2=".") returned 1 [0150.051] wcscmp (_String1="NOR", _String2="..") returned 1 [0150.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ac78 [0150.051] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.051] wcscat (in: _Dest=0x819ac78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.051] wcscat (in: _Dest=0x819ac78, _Source="NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0150.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819ac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0150.053] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf6a3e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf90540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0150.053] wcscmp (_String1="POL", _String2=".") returned 1 [0150.053] wcscmp (_String1="POL", _String2="..") returned 1 [0150.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819aef8 [0150.053] wcscpy (in: _Dest=0x819aef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.053] wcscat (in: _Dest=0x819aef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.053] wcscat (in: _Dest=0x819aef8, _Source="POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0150.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819aef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0150.054] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0d5d20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc194400, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0150.054] wcscmp (_String1="PTB", _String2=".") returned 1 [0150.054] wcscmp (_String1="PTB", _String2="..") returned 1 [0150.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ae58 [0150.054] wcscpy (in: _Dest=0x819ae58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.054] wcscat (in: _Dest=0x819ae58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.054] wcscat (in: _Dest=0x819ae58, _Source="PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0150.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819ae58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0150.056] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf44280, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf6a3e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0150.056] wcscmp (_String1="RUM", _String2=".") returned 1 [0150.056] wcscmp (_String1="RUM", _String2="..") returned 1 [0150.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819adb8 [0150.056] wcscpy (in: _Dest=0x819adb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.056] wcscat (in: _Dest=0x819adb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.056] wcscat (in: _Dest=0x819adb8, _Source="RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0150.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819adb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b94 [0150.058] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf44280, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0150.058] wcscmp (_String1="RUS", _String2=".") returned 1 [0150.058] wcscmp (_String1="RUS", _String2="..") returned 1 [0150.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819af98 [0150.058] wcscpy (in: _Dest=0x819af98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.058] wcscat (in: _Dest=0x819af98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.058] wcscat (in: _Dest=0x819af98, _Source="RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0150.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819af98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0150.059] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0150.059] wcscmp (_String1="SKY", _String2=".") returned 1 [0150.059] wcscmp (_String1="SKY", _String2="..") returned 1 [0150.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ad18 [0150.059] wcscpy (in: _Dest=0x819ad18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.059] wcscat (in: _Dest=0x819ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.059] wcscat (in: _Dest=0x819ad18, _Source="SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0150.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819ad18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0150.060] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcef7fc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0150.060] wcscmp (_String1="SLV", _String2=".") returned 1 [0150.060] wcscmp (_String1="SLV", _String2="..") returned 1 [0150.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819abd8 [0150.060] wcscpy (in: _Dest=0x819abd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.061] wcscat (in: _Dest=0x819abd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.061] wcscat (in: _Dest=0x819abd8, _Source="SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0150.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819abd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0150.062] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0150.062] wcscmp (_String1="SUO", _String2=".") returned 1 [0150.062] wcscmp (_String1="SUO", _String2="..") returned 1 [0150.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b038 [0150.062] wcscpy (in: _Dest=0x819b038, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.062] wcscat (in: _Dest=0x819b038, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.062] wcscat (in: _Dest=0x819b038, _Source="SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0150.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba4 [0150.064] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0150.064] wcscmp (_String1="SVE", _String2=".") returned 1 [0150.064] wcscmp (_String1="SVE", _String2="..") returned 1 [0150.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b0d8 [0150.064] wcscpy (in: _Dest=0x819b0d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.064] wcscat (in: _Dest=0x819b0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.064] wcscat (in: _Dest=0x819b0d8, _Source="SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0150.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819b0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0150.065] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdced1e60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcef7fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0150.065] wcscmp (_String1="TUR", _String2=".") returned 1 [0150.065] wcscmp (_String1="TUR", _String2="..") returned 1 [0150.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b178 [0150.066] wcscpy (in: _Dest=0x819b178, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.066] wcscat (in: _Dest=0x819b178, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.066] wcscat (in: _Dest=0x819b178, _Source="TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0150.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819b178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bac [0150.366] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdceabd00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdced1e60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0150.366] wcscmp (_String1="UKR", _String2=".") returned 1 [0150.366] wcscmp (_String1="UKR", _String2="..") returned 1 [0150.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819c1b8 [0150.366] wcscpy (in: _Dest=0x819c1b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.366] wcscat (in: _Dest=0x819c1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.366] wcscat (in: _Dest=0x819c1b8, _Source="UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0156.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819c1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0156.659] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbee6b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1 [0156.659] wcscmp (_String1="Words.pdf", _String2=".") returned 1 [0156.660] wcscmp (_String1="Words.pdf", _String2="..") returned 1 [0156.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8188330 [0156.660] wcscpy (in: _Dest=0x8188330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0156.660] wcscat (in: _Dest=0x8188330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0156.660] wcscat (in: _Dest=0x8188330, _Source="Words.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" [0156.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa8 [0156.661] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbee6b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 0 [0156.662] FindClose (in: hFindFile=0x80995d0 | out: hFindFile=0x80995d0) returned 1 [0156.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101e18) returned 1 [0156.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c4a8) returned 1 [0156.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ca98) returned 1 Thread: id = 1603 os_tid = 0x12d4 [0148.759] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\fysx5jcxc.bmp")) returned 0x20 [0148.759] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp", dwFileAttributes=0x20) returned 1 [0148.760] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\fysx5jcxc.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1804 [0148.760] GetFileSizeEx (in: hFile=0x1804, lpFileSize=0x93ffdc8 | out: lpFileSize=0x93ffdc8*=97944) returned 1 [0148.760] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0x17e94, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.760] ReadFile (in: hFile=0x1804, lpBuffer=0x93ffdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x93ffdb0, lpOverlapped=0x0 | out: lpBuffer=0x93ffdd4*, lpNumberOfBytesRead=0x93ffdb0*=0x4, lpOverlapped=0x0) returned 1 [0148.762] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0148.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0148.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1040 [0148.763] NtQuerySystemTime (in: CurrentTime=0x93ffd50 | out: CurrentTime=0x93ffd50*=132471540173448000) returned 0x0 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x325a9271 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x8a3d03d [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x6faecbfd [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x4f9014fb [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x6e6d7327 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x14769d97 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x598d54db [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x1b50269e [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x5953e2c1 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x4be809e1 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x93c9155 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x3c035817 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x5a3d12b2 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x1170e439 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x6496d45b [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x62e22da4 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x4ee4c826 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x41de9cc1 [0148.763] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x2e6867c9 [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x7e34dff3 [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x2285365 [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x1aa377f4 [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0xf9eb5e [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x68b7d06e [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x9b1f08f [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x6e5c8432 [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x68686fec [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x59583c6c [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x5b71c9bd [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x75a1b3ca [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x381a0e25 [0148.764] RtlRandomEx (in: Seed=0x93ffd48 | out: Seed=0x93ffd48) returned 0x151cc71e [0148.780] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.781] ReadFile (in: hFile=0x1804, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x93ffd50, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x93ffd50*=0x3c00, lpOverlapped=0x0) returned 1 [0148.781] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6cb90 [0148.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30150d0 [0148.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0148.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0148.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0148.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0148.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1040 [0148.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0148.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0148.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cb90) returned 1 [0148.782] WriteFile (in: hFile=0x1804, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x93ffd50, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x93ffd50*=0x3c00, lpOverlapped=0x0) returned 1 [0149.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0149.736] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.736] ReadFile (in: hFile=0x1804, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x93ffd50, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x93ffd50*=0x3c00, lpOverlapped=0x0) returned 1 [0149.737] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4650 [0149.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0149.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3390 [0149.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0149.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0149.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3390 [0149.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0149.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0149.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0149.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4650) returned 1 [0149.738] WriteFile (in: hFile=0x1804, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x93ffd50, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x93ffd50*=0x3c00, lpOverlapped=0x0) returned 1 [0150.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0150.114] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0x14298, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.114] ReadFile (in: hFile=0x1804, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x93ffd50, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x93ffd50*=0x3c00, lpOverlapped=0x0) returned 1 [0150.114] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0x14298, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cee0 [0150.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ac0 [0150.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c98 [0150.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c98) returned 1 [0150.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0150.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c98 [0150.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca170 [0150.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca170) returned 1 [0150.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0150.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cee0) returned 1 [0150.115] WriteFile (in: hFile=0x1804, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x93ffd50, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x93ffd50*=0x3c00, lpOverlapped=0x0) returned 1 [0150.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0150.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c810 [0150.406] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.406] WriteFile (in: hFile=0x1804, lpBuffer=0x3e16628*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x93ffdbc, lpOverlapped=0x0 | out: lpBuffer=0x3e16628*, lpNumberOfBytesWritten=0x93ffdbc*=0x14c, lpOverlapped=0x0) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16628) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd08) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fca8) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c810) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0eb0) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0151.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3330a8 [0151.135] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp" [0151.135] wcscat (in: _Dest=0x3330a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp.f0dbec" [0151.135] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp.f0dbec", NtPathName=0x93ffd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\fYsx5JCxc.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e657a0 [0151.601] FlushFileBuffers (hFile=0x1804) returned 1 [0151.610] CloseHandle (hObject=0x1804) returned 1 [0151.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7150 [0151.611] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" [0151.611] wcscat (in: _Dest=0x2ff7150, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" [0151.611] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\f0dbec-readme.txt")) returned 0x20 [0151.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 [0151.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 Thread: id = 1604 os_tid = 0x12d8 [0148.810] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\xk_jhlz3n9ovj.bmp")) returned 0x20 [0148.810] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp", dwFileAttributes=0x20) returned 1 [0151.242] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\xk_jhlz3n9ovj.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1808 [0151.243] GetFileSizeEx (in: hFile=0x1808, lpFileSize=0x8eefc50 | out: lpFileSize=0x8eefc50*=37176) returned 1 [0151.243] SetFilePointerEx (in: hFile=0x1808, liDistanceToMove=0x9134, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.243] ReadFile (in: hFile=0x1808, lpBuffer=0x8eefc5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8eefc38, lpOverlapped=0x0 | out: lpBuffer=0x8eefc5c*, lpNumberOfBytesRead=0x8eefc38*=0x4, lpOverlapped=0x0) returned 1 [0151.244] SetFilePointerEx (in: hFile=0x1808, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0151.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0151.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0151.245] NtQuerySystemTime (in: CurrentTime=0x8eefbd8 | out: CurrentTime=0x8eefbd8*=132471540198252000) returned 0x0 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x14ea93ea [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x6c99b73a [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x1a385a8d [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x231357f9 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x25b3fca1 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x3b9f2e42 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x22a62e9b [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x2e4fa11e [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x79c74d63 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x16693ceb [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x242dabb4 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x3aa15b7f [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x4fed259d [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x53789870 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x4bb4ae68 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x15c4305f [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0xd69e7cf [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x567bd5f0 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x1f11a917 [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x49c2851a [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x3da9dddf [0151.245] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x4d9172e6 [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x7f9dd4d1 [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0xe7ffe3a [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x3e89e7f8 [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x1f5c9e4e [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x167c89a6 [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x555af9e2 [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x73e9fe19 [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x6321233e [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x96ae5e1 [0151.246] RtlRandomEx (in: Seed=0x8eefbd0 | out: Seed=0x8eefbd0) returned 0x587bb0 [0151.256] SetFilePointerEx (in: hFile=0x1808, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.256] ReadFile (in: hFile=0x1808, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8eefbd8, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0x8eefbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.256] SetFilePointerEx (in: hFile=0x1808, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30963b0 [0151.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0151.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0151.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0151.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0151.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0151.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0151.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0151.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0151.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30963b0) returned 1 [0151.258] WriteFile (in: hFile=0x1808, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8eefbd8, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0x8eefbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0151.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0151.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77e50 [0151.435] SetFilePointerEx (in: hFile=0x1808, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.435] WriteFile (in: hFile=0x1808, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x8eefc44, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0x8eefc44*=0x114, lpOverlapped=0x0) returned 1 [0151.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0151.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77da8) returned 1 [0151.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0151.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e50) returned 1 [0151.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0151.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0151.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0151.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0151.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d58a0 [0151.486] wcscpy (in: _Dest=0x81d58a0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp" [0151.486] wcscat (in: _Dest=0x81d58a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp.f0dbec" [0151.486] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp.f0dbec", NtPathName=0x8eefbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\Xk_jhLz3n9OVJ.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8aa8 [0151.508] FlushFileBuffers (hFile=0x1808) returned 1 [0151.512] CloseHandle (hObject=0x1808) returned 1 [0151.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6b90 [0151.513] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\" [0151.513] wcscat (in: _Dest=0x2ff6b90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" [0151.513] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\ZPw2V73hAmPjXt\\UOnbIJT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\zpw2v73hampjxt\\uonbijt\\f0dbec-readme.txt")) returned 0x20 [0151.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0151.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 Thread: id = 1605 os_tid = 0x1414 [0148.813] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc")) returned 0x2020 [0148.814] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", dwFileAttributes=0x20) returned 1 [0151.979] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f7c [0151.979] GetFileSizeEx (in: hFile=0x1f7c, lpFileSize=0x948f800 | out: lpFileSize=0x948f800*=66208) returned 1 [0151.979] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x1029c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.980] ReadFile (in: hFile=0x1f7c, lpBuffer=0x948f80c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x948f7e8, lpOverlapped=0x0 | out: lpBuffer=0x948f80c*, lpNumberOfBytesRead=0x948f7e8*=0x4, lpOverlapped=0x0) returned 1 [0151.984] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0151.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0151.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0151.985] NtQuerySystemTime (in: CurrentTime=0x948f788 | out: CurrentTime=0x948f788*=132471540205584000) returned 0x0 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x637abad2 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x2e210171 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x330323b [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x31b05502 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x18d1aa1 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x9e9b27e [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x738bc785 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x583a3853 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x2c156fd8 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x8ca3b7d [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x5e076762 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x70f34a40 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x64b61985 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x19c28b54 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0xa492f0e [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x637209ba [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x7e16c5e8 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x632b9b01 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x4b7cde43 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x7d3d5098 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x995bea1 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x6c57fd50 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x55506ae4 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x4ecebf17 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x77738765 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x19a0599 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x5bb30154 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x3c0fa647 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x3fb95eb5 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x545c1157 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x3dc37199 [0151.985] RtlRandomEx (in: Seed=0x948f780 | out: Seed=0x948f780) returned 0x22661562 [0151.993] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.993] ReadFile (in: hFile=0x1f7c, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x948f788, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0x948f788*=0x3c00, lpOverlapped=0x0) returned 1 [0151.994] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d048 [0151.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0151.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0151.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0151.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0151.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0151.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0151.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0151.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0151.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d048) returned 1 [0151.995] WriteFile (in: hFile=0x1f7c, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x948f788, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0x948f788*=0x3c00, lpOverlapped=0x0) returned 1 [0153.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0153.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0153.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e6f918 [0153.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0153.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e6fd38 [0153.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0153.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1900 [0153.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0153.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32610) returned 1 [0153.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5778) returned 1 [0153.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec710 [0153.868] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.868] WriteFile (in: hFile=0x1f7c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x948f7f4, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x948f7f4*=0x106, lpOverlapped=0x0) returned 1 [0158.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0158.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd38) returned 1 [0158.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0158.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f918) returned 1 [0158.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0158.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0158.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0158.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0158.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c8c0 [0158.788] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" [0158.788] wcscat (in: _Dest=0x32c8c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.f0dbec" [0158.788] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.f0dbec", NtPathName=0x948f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da148 [0158.788] NtSetInformationFile (FileHandle=0x1f7c, IoStatusBlock=0x948f780, FileInformation=0x81da148, Length=0xa2, FileInformationClass=0xa) returned 0x0 [0158.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da148) returned 1 [0158.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b0730) returned 1 [0158.824] NtQueryInformationFile (in: FileHandle=0x1f7c, IoStatusBlock=0x948f750, FileInformation=0x948f758, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x948f750, FileInformation=0x948f758) returned 0x0 [0158.824] NtSetInformationFile (FileHandle=0x1f7c, IoStatusBlock=0x948f750, FileInformation=0x948f758, Length=0x28, FileInformationClass=0x4) returned 0x0 [0158.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 [0158.829] FlushFileBuffers (hFile=0x1f7c) returned 1 [0158.871] CloseHandle (hObject=0x1f7c) returned 1 [0158.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cbb8 [0158.878] wcscpy (in: _Dest=0x32cbb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0158.878] wcscat (in: _Dest=0x32cbb8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\F0DBEC-Readme.txt" [0158.878] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\f0dbec-readme.txt")) returned 0x2020 [0158.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cbb8) returned 1 [0158.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 1606 os_tid = 0x1418 [0148.815] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc")) returned 0x2020 [0148.816] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", dwFileAttributes=0x20) returned 1 [0149.113] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1810 [0149.113] GetFileSizeEx (in: hFile=0x1810, lpFileSize=0x906f7c8 | out: lpFileSize=0x906f7c8*=2676) returned 1 [0149.113] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0xa70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.113] ReadFile (in: hFile=0x1810, lpBuffer=0x906f7d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x906f7b0, lpOverlapped=0x0 | out: lpBuffer=0x906f7d4*, lpNumberOfBytesRead=0x906f7b0*=0x4, lpOverlapped=0x0) returned 1 [0149.117] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca508 [0149.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0149.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0149.118] NtQuerySystemTime (in: CurrentTime=0x906f750 | out: CurrentTime=0x906f750*=132471540176880000) returned 0x0 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x24078521 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x2a8035ce [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x6e06131f [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x49cd5427 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x408a2661 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x529853ec [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x592a22a9 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x34aed9da [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x5d311da0 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x3490ff9a [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x53da7952 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x4f5fe652 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x255e4b21 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x47c3ce1d [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x39bfec6d [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x16e73e82 [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x73e9ed0c [0149.118] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x4d15dac9 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x6b6bad6c [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x7914c275 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x6b41cdf4 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x448a1d93 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x2d4bbc69 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x35ab9e8c [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x5e0fe101 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x24b2e821 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x50acc05b [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x733b8588 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x743b81af [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x6f539145 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x67de8612 [0149.119] RtlRandomEx (in: Seed=0x906f748 | out: Seed=0x906f748) returned 0x6b32345b [0149.130] ReadFile (in: hFile=0x1810, lpBuffer=0x824c060, nNumberOfBytesToRead=0xa74, lpNumberOfBytesRead=0x906f744, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesRead=0x906f744*=0xa74, lpOverlapped=0x0) returned 1 [0149.130] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.130] WriteFile (in: hFile=0x1810, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0xa74, lpNumberOfBytesWritten=0x906f748, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0x906f748*=0xa74, lpOverlapped=0x0) returned 1 [0152.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0152.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0152.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0152.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0152.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0152.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0152.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4ad0) returned 1 [0152.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0152.135] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.135] WriteFile (in: hFile=0x1810, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x906f7bc, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x906f7bc*=0x104, lpOverlapped=0x0) returned 1 [0156.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0156.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0156.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0156.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0156.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0156.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0156.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0156.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0156.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3d7a8 [0156.912] wcscpy (in: _Dest=0x3e3d7a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" [0156.912] wcscat (in: _Dest=0x3e3d7a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.f0dbec" [0156.912] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.f0dbec", NtPathName=0x906f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0156.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d140 [0156.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d140) returned 1 [0156.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81cdcc0) returned 1 [0156.988] NtQueryInformationFile (in: FileHandle=0x1810, IoStatusBlock=0x906f718, FileInformation=0x906f720, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x906f718, FileInformation=0x906f720) returned 0x0 [0156.988] NtSetInformationFile (FileHandle=0x1810, IoStatusBlock=0x906f718, FileInformation=0x906f720, Length=0x28, FileInformationClass=0x4) returned 0x0 [0157.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d7a8) returned 1 [0157.018] FlushFileBuffers (hFile=0x1810) returned 1 [0157.021] CloseHandle (hObject=0x1810) returned 1 [0157.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3d7a8 [0157.035] wcscpy (in: _Dest=0x3e3d7a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0157.036] wcscat (in: _Dest=0x3e3d7a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\F0DBEC-Readme.txt" [0157.036] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\f0dbec-readme.txt")) returned 0xffffffff [0157.036] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fa0 [0157.050] WriteFile (in: hFile=0x1fa0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x906f764, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x906f764*=0x70c, lpOverlapped=0x0) returned 1 [0158.900] CloseHandle (hObject=0x1fa0) returned 1 [0158.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d7a8) returned 1 [0158.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30408) returned 1 Thread: id = 1607 os_tid = 0x141c [0148.816] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata")) returned 0x2020 [0149.391] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", dwFileAttributes=0x20) returned 1 [0152.068] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f94 [0152.081] GetFileSizeEx (in: hFile=0x1f94, lpFileSize=0x900f780 | out: lpFileSize=0x900f780*=114) returned 1 [0152.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0152.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0152.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0152.082] NtQuerySystemTime (in: CurrentTime=0x900f708 | out: CurrentTime=0x900f708*=132471540206520000) returned 0x0 [0152.082] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x618144d7 [0152.082] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x30510ac3 [0152.082] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x20a89e1f [0152.082] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x33947f19 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x6433cf77 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x1c1bbcfb [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x4d1c5ac0 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x27f309e4 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x598c21f1 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x40d4a7a8 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x416e9a81 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x76279171 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x28cacabf [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x8c0621 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x1888998f [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0xd243540 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x4285c26f [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x38bafdb7 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x49e372ef [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x5431fc79 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x2559f0d8 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x24a0f28f [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x60cb61a [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x4bf4bbd5 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x2b0c2771 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x228ba389 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x8c0621 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x531d2a1a [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x67cd155e [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x3dd7b33 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x4ca92027 [0152.083] RtlRandomEx (in: Seed=0x900f700 | out: Seed=0x900f700) returned 0x745b6957 [0152.093] ReadFile (in: hFile=0x1f94, lpBuffer=0x82844d8, nNumberOfBytesToRead=0x72, lpNumberOfBytesRead=0x900f6fc, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0x900f6fc*=0x72, lpOverlapped=0x0) returned 1 [0152.095] SetFilePointerEx (in: hFile=0x1f94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.095] WriteFile (in: hFile=0x1f94, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x900f700, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0x900f700*=0x72, lpOverlapped=0x0) returned 1 [0156.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0156.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2b0 [0156.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0156.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0156.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82844d8) returned 1 [0156.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0156.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0156.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dca2b0 [0156.937] SetFilePointerEx (in: hFile=0x1f94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.937] WriteFile (in: hFile=0x1f94, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x900f774, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x900f774*=0x102, lpOverlapped=0x0) returned 1 [0156.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0156.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9dd8) returned 1 [0156.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f68) returned 1 [0156.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0156.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0156.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0156.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0156.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0156.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d140 [0156.994] wcscpy (in: _Dest=0x3e2d140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" [0156.994] wcscat (in: _Dest=0x3e2d140, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.f0dbec" [0156.994] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.f0dbec", NtPathName=0x900f6f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0156.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81df7c8 [0162.684] FlushFileBuffers (hFile=0x1f94) returned 1 [0162.690] CloseHandle (hObject=0x1f94) returned 1 [0162.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9858 [0162.696] wcscpy (in: _Dest=0x81d9858, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0162.696] wcscat (in: _Dest=0x81d9858, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\F0DBEC-Readme.txt" [0162.696] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\f0dbec-readme.txt")) returned 0x2020 [0162.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9858) returned 1 [0162.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a598) returned 1 Thread: id = 1608 os_tid = 0x1420 [0148.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a6d8 [0148.817] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0148.817] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" [0148.817] wcscat (in: _Dest=0x819a6d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*" [0148.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0148.817] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5209e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099790 [0149.131] wcscmp (_String1=".", _String2=".") returned 0 [0149.131] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5209e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.131] wcscmp (_String1="..", _String2=".") returned 1 [0149.131] wcscmp (_String1="..", _String2="..") returned 0 [0149.131] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5209e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe52706f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", cAlternateFileName="3445AE~1.DMP")) returned 1 [0149.131] wcscmp (_String1="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", _String2=".") returned 1 [0149.131] wcscmp (_String1="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", _String2="..") returned 1 [0149.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80206f0 [0149.131] wcscpy (in: _Dest=0x80206f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0149.132] wcscat (in: _Dest=0x80206f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" [0149.132] wcscat (in: _Dest=0x80206f0, _Source="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" [0153.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80206f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0153.198] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5209e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe52706f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", cAlternateFileName="3445AE~1.DMP")) returned 0 [0153.199] FindClose (in: hFindFile=0x8099790 | out: hFindFile=0x8099790) returned 1 [0153.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0153.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 [0153.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a4a0) returned 1 Thread: id = 1609 os_tid = 0x1424 [0148.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat")) returned 0x2020 [0149.132] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", dwFileAttributes=0x20) returned 1 [0152.036] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f88 [0152.036] GetFileSizeEx (in: hFile=0x1f88, lpFileSize=0x979f878 | out: lpFileSize=0x979f878*=40) returned 1 [0152.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0152.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0152.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0152.036] NtQuerySystemTime (in: CurrentTime=0x979f800 | out: CurrentTime=0x979f800*=132471540206052000) returned 0x0 [0152.036] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x75e1c01e [0152.036] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x644ff091 [0152.036] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x53e6bec2 [0152.036] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x738bc785 [0152.036] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x4c4d9358 [0152.036] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x72446dc [0152.036] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x51da7ee1 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x18d1aa1 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x61d03014 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x2a8c6693 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x1376921 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x157c97f4 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x7ead8003 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x7b243f90 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x10c9061 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0xafcd2d4 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x67fad867 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x3a6d562d [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x31b72b1e [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x8ff96b0 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x11ef7a1 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x490a19ab [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x7f9a6dd3 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x70c88120 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x3437d14c [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x661f774b [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x7ead8003 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x17ccff7c [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x6f8b170b [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x297913fd [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x632b9b01 [0152.037] RtlRandomEx (in: Seed=0x979f7f8 | out: Seed=0x979f7f8) returned 0x19a0599 [0152.048] ReadFile (in: hFile=0x1f88, lpBuffer=0x8248458, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0x979f7f4, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0x979f7f4*=0x28, lpOverlapped=0x0) returned 1 [0152.050] SetFilePointerEx (in: hFile=0x1f88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.050] WriteFile (in: hFile=0x1f88, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x979f7f8, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0x979f7f8*=0x28, lpOverlapped=0x0) returned 1 [0156.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0156.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d630) returned 1 [0156.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6fd68 [0156.905] SetFilePointerEx (in: hFile=0x1f88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.905] WriteFile (in: hFile=0x1f88, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x979f86c, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0x979f86c*=0x10a, lpOverlapped=0x0) returned 1 [0156.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0156.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6feb8) returned 1 [0156.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0156.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd68) returned 1 [0156.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0156.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0156.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7f8) returned 1 [0156.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0156.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da8d8 [0156.989] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" [0156.989] wcscat (in: _Dest=0x81da8d8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.f0dbec" [0156.989] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.f0dbec", NtPathName=0x979f7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0156.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d6520 [0157.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6520) returned 1 [0157.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81cdcc0) returned 1 [0157.025] NtQueryInformationFile (in: FileHandle=0x1f88, IoStatusBlock=0x979f7c8, FileInformation=0x979f7d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x979f7c8, FileInformation=0x979f7d0) returned 0x0 [0157.025] NtSetInformationFile (FileHandle=0x1f88, IoStatusBlock=0x979f7c8, FileInformation=0x979f7d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0157.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8d8) returned 1 [0157.041] FlushFileBuffers (hFile=0x1f88) returned 1 [0157.048] CloseHandle (hObject=0x1f88) returned 1 [0157.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da8d8 [0157.055] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0157.055] wcscat (in: _Dest=0x81da8d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\F0DBEC-Readme.txt" [0157.055] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\f0dbec-readme.txt")) returned 0xffffffff [0157.055] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1810 [0157.059] WriteFile (in: hFile=0x1810, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x979f814, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x979f814*=0x70c, lpOverlapped=0x0) returned 1 [0158.893] CloseHandle (hObject=0x1810) returned 1 [0162.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8d8) returned 1 [0162.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ce0) returned 1 Thread: id = 1610 os_tid = 0x1428 [0148.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x355dd0 [0148.819] wcscpy (in: _Dest=0x355dd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" [0148.819] wcscat (in: _Dest=0x355dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\" [0148.819] wcscat (in: _Dest=0x355dd0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*" [0148.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0148.819] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80994d0 [0148.820] wcscmp (_String1=".", _String2=".") returned 0 [0148.820] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.820] wcscmp (_String1="..", _String2=".") returned 1 [0148.820] wcscmp (_String1="..", _String2="..") returned 0 [0148.820] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0148.820] wcscmp (_String1="14", _String2=".") returned 1 [0148.820] wcscmp (_String1="14", _String2="..") returned 1 [0148.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355200 [0148.820] wcscpy (in: _Dest=0x355200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" [0148.820] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\" [0148.820] wcscat (in: _Dest=0x355200, _Source="14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" [0152.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x355200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0152.432] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0152.433] FindClose (in: hFindFile=0x80994d0 | out: hFindFile=0x80994d0) returned 1 [0152.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0152.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355dd0) returned 1 [0152.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eb40) returned 1 Thread: id = 1611 os_tid = 0x142c [0148.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf")) returned 0x20 [0148.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", dwFileAttributes=0x20) returned 0 [0148.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.821] GetLastError () returned 0x5 [0148.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", dwFileAttributes=0x20) returned 0 [0148.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39dc8) returned 1 Thread: id = 1612 os_tid = 0x12dc [0148.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f308d0 [0148.823] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" [0148.823] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\" [0148.823] wcscat (in: _Dest=0x3f308d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*" [0148.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fedf8 [0148.823] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xeb650780, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0150.395] wcscmp (_String1=".", _String2=".") returned 0 [0150.395] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xeb650780, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.395] wcscmp (_String1="..", _String2=".") returned 1 [0150.395] wcscmp (_String1="..", _String2="..") returned 0 [0150.395] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xeb650780, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0150.395] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0150.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fedf8) returned 1 [0150.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 [0150.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 1613 os_tid = 0x1430 [0148.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0148.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x20) returned 0 [0148.824] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.824] GetLastError () returned 0x5 [0148.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x20) returned 0 [0148.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 Thread: id = 1614 os_tid = 0x330 [0148.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\gray.pf")) returned 0x20 [0149.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x20) returned 0 [0149.391] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.391] GetLastError () returned 0x5 [0149.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x20) returned 0 [0149.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 Thread: id = 1615 os_tid = 0x12e0 [0148.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0149.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x20) returned 0 [0149.393] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.393] GetLastError () returned 0x5 [0149.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x20) returned 0 [0149.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a80) returned 1 Thread: id = 1616 os_tid = 0x12e4 [0148.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\pycc.pf")) returned 0x20 [0149.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x20) returned 0 [0149.137] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.137] GetLastError () returned 0x5 [0149.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x20) returned 0 [0149.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4b08) returned 1 Thread: id = 1617 os_tid = 0x12e8 [0148.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\srgb.pf")) returned 0x20 [0149.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x20) returned 0 [0149.139] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.139] GetLastError () returned 0x5 [0149.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x20) returned 0 [0149.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 Thread: id = 1618 os_tid = 0x12ec [0148.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5c88 [0148.830] wcscpy (in: _Dest=0x81d5c88, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0148.830] wcscat (in: _Dest=0x81d5c88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0148.830] wcscat (in: _Dest=0x81d5c88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*" [0148.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe6c0 [0148.830] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80992d0 [0148.830] wcscmp (_String1=".", _String2=".") returned 0 [0148.830] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.830] wcscmp (_String1="..", _String2=".") returned 1 [0148.830] wcscmp (_String1="..", _String2="..") returned 0 [0148.831] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0148.831] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0148.831] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0148.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dada38 [0148.831] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0148.831] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0148.831] wcscat (in: _Dest=0x3dada38, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0152.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dada38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0152.435] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0152.435] FindClose (in: hFindFile=0x80992d0 | out: hFindFile=0x80992d0) returned 1 [0152.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe6c0) returned 1 [0152.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5c88) returned 1 [0152.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 Thread: id = 1619 os_tid = 0x368 [0148.831] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm")) returned 0x20 [0148.832] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0148.832] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.832] GetLastError () returned 0x5 [0148.832] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0148.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 1620 os_tid = 0x1538 [0148.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d5bc0 [0148.834] wcscpy (in: _Dest=0x81d5bc0, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0148.834] wcscat (in: _Dest=0x81d5bc0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0148.834] wcscat (in: _Dest=0x81d5bc0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" [0148.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0148.834] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099290 [0148.834] wcscmp (_String1=".", _String2=".") returned 0 [0148.834] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.834] wcscmp (_String1="..", _String2=".") returned 1 [0148.834] wcscmp (_String1="..", _String2="..") returned 0 [0148.834] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0148.834] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0148.834] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0148.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ddf018 [0148.834] wcscpy (in: _Dest=0x3ddf018, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0148.835] wcscat (in: _Dest=0x3ddf018, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0148.835] wcscat (in: _Dest=0x3ddf018, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0151.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ddf018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0151.052] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0151.053] FindClose (in: hFindFile=0x8099290 | out: hFindFile=0x8099290) returned 1 [0151.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0151.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5bc0) returned 1 [0151.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 1621 os_tid = 0x153c [0148.835] GetFileAttributesW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata")) returned 0x2020 [0148.835] SetFileAttributesW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x20) returned 0 [0148.835] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.836] GetLastError () returned 0x5 [0148.836] SetFileAttributesW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x2020) returned 0 [0148.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c74b8) returned 1 Thread: id = 1622 os_tid = 0x1544 [0148.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\default.jfc")) returned 0x20 [0148.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc", dwFileAttributes=0x20) returned 0 [0148.837] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.837] GetLastError () returned 0x5 [0148.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc", dwFileAttributes=0x20) returned 0 [0148.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c810) returned 1 Thread: id = 1623 os_tid = 0x12f0 [0148.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\profile.jfc")) returned 0x20 [0148.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc", dwFileAttributes=0x20) returned 0 [0148.840] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.840] GetLastError () returned 0x5 [0148.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc", dwFileAttributes=0x20) returned 0 [0148.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dc60) returned 1 Thread: id = 1624 os_tid = 0x1548 [0148.841] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20 [0148.842] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0148.842] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.842] GetLastError () returned 0x5 [0148.842] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0148.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 1625 os_tid = 0x154c [0148.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354fc0 [0148.844] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0148.844] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\" [0148.844] wcscat (in: _Dest=0x354fc0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*" [0148.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101478 [0148.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099250 [0148.846] wcscmp (_String1=".", _String2=".") returned 0 [0148.846] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.846] wcscmp (_String1="..", _String2=".") returned 1 [0148.846] wcscmp (_String1="..", _String2="..") returned 0 [0148.846] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0148.846] wcscmp (_String1="groove.net", _String2=".") returned 1 [0148.846] wcscmp (_String1="groove.net", _String2="..") returned 1 [0148.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c74b8 [0148.846] wcscpy (in: _Dest=0x2c74b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0148.846] wcscat (in: _Dest=0x2c74b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\" [0148.847] wcscat (in: _Dest=0x2c74b8, _Source="groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0151.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c74b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0151.055] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1 [0151.055] wcscmp (_String1="Verisign", _String2=".") returned 1 [0151.056] wcscmp (_String1="Verisign", _String2="..") returned 1 [0151.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3cff0 [0151.056] wcscpy (in: _Dest=0x3e3cff0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0151.056] wcscat (in: _Dest=0x3e3cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\" [0151.056] wcscat (in: _Dest=0x3e3cff0, _Source="Verisign" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" [0151.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e3cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0151.057] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0 [0151.057] FindClose (in: hFindFile=0x8099250 | out: hFindFile=0x8099250) returned 1 [0151.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101478) returned 1 [0151.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 [0151.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec50) returned 1 Thread: id = 1626 os_tid = 0x1550 [0148.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24440 [0148.847] wcscpy (in: _Dest=0x3e24440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0148.847] wcscat (in: _Dest=0x3e24440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0148.847] wcscat (in: _Dest=0x3e24440, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*" [0148.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffc68 [0148.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77038290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b58 [0150.116] wcscmp (_String1=".", _String2=".") returned 0 [0150.116] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77038290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.116] wcscmp (_String1="..", _String2=".") returned 1 [0150.116] wcscmp (_String1="..", _String2="..") returned 0 [0150.116] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77038290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9052e150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="People", cAlternateFileName="")) returned 1 [0150.116] wcscmp (_String1="People", _String2=".") returned 1 [0150.116] wcscmp (_String1="People", _String2="..") returned 1 [0150.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be9a8 [0150.116] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0150.117] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0150.117] wcscat (in: _Dest=0x81be9a8, _Source="People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0154.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0154.012] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9233b710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1 [0154.012] wcscmp (_String1="Places", _String2=".") returned 1 [0154.013] wcscmp (_String1="Places", _String2="..") returned 1 [0154.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfb30 [0154.013] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0154.013] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0154.013] wcscat (in: _Dest=0x81bfb30, _Source="Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0154.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0154.014] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1 [0154.014] wcscmp (_String1="Things", _String2=".") returned 1 [0154.014] wcscmp (_String1="Things", _String2="..") returned 1 [0154.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfbb8 [0154.014] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0154.014] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0154.014] wcscat (in: _Dest=0x81bfbb8, _Source="Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0154.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0154.015] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0 [0154.015] FindClose (in: hFindFile=0x3f37b58 | out: hFindFile=0x3f37b58) returned 1 [0154.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffc68) returned 1 [0154.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24440) returned 1 [0154.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0d88) returned 1 Thread: id = 1627 os_tid = 0x12f4 [0148.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30fb8 [0148.848] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0148.848] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0148.848] wcscat (in: _Dest=0x3f30fb8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*" [0148.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101bb0 [0148.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770aa6b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0150.833] wcscmp (_String1=".", _String2=".") returned 0 [0150.833] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770aa6b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.136] wcscmp (_String1="..", _String2=".") returned 1 [0152.136] wcscmp (_String1="..", _String2="..") returned 0 [0152.136] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8a400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c8a400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1 [0152.136] wcscmp (_String1="CalendarToolIconImages.jpg", _String2=".") returned 1 [0152.136] wcscmp (_String1="CalendarToolIconImages.jpg", _String2="..") returned 1 [0152.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff79f0 [0152.136] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0152.136] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0152.136] wcscat (in: _Dest=0x2ff79f0, _Source="CalendarToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" [0154.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0154.102] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8a400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c8a400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1 [0154.102] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2=".") returned 1 [0154.102] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2="..") returned 1 [0154.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333168 [0154.102] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.102] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.102] wcscat (in: _Dest=0x333168, _Source="CalendarToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" [0154.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0154.103] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImages.bmp", cAlternateFileName="CHESSI~1.BMP")) returned 1 [0154.103] wcscmp (_String1="ChessIconImages.bmp", _String2=".") returned 1 [0154.103] wcscmp (_String1="ChessIconImages.bmp", _String2="..") returned 1 [0154.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81870d0 [0154.103] wcscpy (in: _Dest=0x81870d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.103] wcscat (in: _Dest=0x81870d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.103] wcscat (in: _Dest=0x81870d0, _Source="ChessIconImages.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" [0154.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81870d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0154.104] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImagesMask.bmp", cAlternateFileName="CHESSI~2.BMP")) returned 1 [0154.105] wcscmp (_String1="ChessIconImagesMask.bmp", _String2=".") returned 1 [0154.105] wcscmp (_String1="ChessIconImagesMask.bmp", _String2="..") returned 1 [0154.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c848 [0154.105] wcscpy (in: _Dest=0x35c848, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.105] wcscat (in: _Dest=0x35c848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.105] wcscat (in: _Dest=0x35c848, _Source="ChessIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" [0154.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2378 [0154.106] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cfc2b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImage.jpg", cAlternateFileName="CREATE~1.JPG")) returned 1 [0154.106] wcscmp (_String1="CreateSpaceImage.jpg", _String2=".") returned 1 [0154.106] wcscmp (_String1="CreateSpaceImage.jpg", _String2="..") returned 1 [0154.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187178 [0154.106] wcscpy (in: _Dest=0x8187178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.106] wcscat (in: _Dest=0x8187178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.106] wcscat (in: _Dest=0x8187178, _Source="CreateSpaceImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" [0154.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0154.107] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cfc2b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImageMask.bmp", cAlternateFileName="CREATE~1.BMP")) returned 1 [0154.107] wcscmp (_String1="CreateSpaceImageMask.bmp", _String2=".") returned 1 [0154.107] wcscmp (_String1="CreateSpaceImageMask.bmp", _String2="..") returned 1 [0154.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c638 [0154.107] wcscpy (in: _Dest=0x35c638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.107] wcscat (in: _Dest=0x35c638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.107] wcscat (in: _Dest=0x35c638, _Source="CreateSpaceImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" [0154.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0154.108] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImages.jpg", cAlternateFileName="DATALI~1.JPG")) returned 1 [0154.108] wcscmp (_String1="DataListIconImages.jpg", _String2=".") returned 1 [0154.108] wcscmp (_String1="DataListIconImages.jpg", _String2="..") returned 1 [0154.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c588 [0154.108] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.108] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.108] wcscat (in: _Dest=0x35c588, _Source="DataListIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" [0154.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0154.109] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="DATALI~1.BMP")) returned 1 [0154.109] wcscmp (_String1="DataListIconImagesMask.bmp", _String2=".") returned 1 [0154.109] wcscmp (_String1="DataListIconImagesMask.bmp", _String2="..") returned 1 [0154.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40118 [0154.109] wcscpy (in: _Dest=0x3d40118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.109] wcscat (in: _Dest=0x3d40118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.109] wcscat (in: _Dest=0x3d40118, _Source="DataListIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" [0154.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2388 [0154.110] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImages.jpg", cAlternateFileName="DATAVI~1.JPG")) returned 1 [0154.110] wcscmp (_String1="DataViewIconImages.jpg", _String2=".") returned 1 [0154.110] wcscmp (_String1="DataViewIconImages.jpg", _String2="..") returned 1 [0154.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b5b8 [0154.110] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.110] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.110] wcscat (in: _Dest=0x35b5b8, _Source="DataViewIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" [0154.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238c [0154.111] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImagesMask.bmp", cAlternateFileName="DATAVI~1.BMP")) returned 1 [0154.111] wcscmp (_String1="DataViewIconImagesMask.bmp", _String2=".") returned 1 [0154.111] wcscmp (_String1="DataViewIconImagesMask.bmp", _String2="..") returned 1 [0154.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d401d0 [0154.111] wcscpy (in: _Dest=0x3d401d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.111] wcscat (in: _Dest=0x3d401d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.112] wcscat (in: _Dest=0x3d401d0, _Source="DataViewIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" [0154.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d401d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0154.112] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2eaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1 [0154.112] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2=".") returned 1 [0154.113] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2="..") returned 1 [0154.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d40288 [0154.113] wcscpy (in: _Dest=0x3d40288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.113] wcscat (in: _Dest=0x3d40288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.113] wcscat (in: _Dest=0x3d40288, _Source="DiscussionToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" [0154.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0154.114] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1 [0154.114] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2=".") returned 1 [0154.114] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2="..") returned 1 [0154.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3329e8 [0154.114] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.114] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.114] wcscat (in: _Dest=0x3329e8, _Source="DiscussionToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" [0154.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2398 [0154.115] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2a0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImage.jpg", cAlternateFileName="FORM_S~1.JPG")) returned 1 [0154.115] wcscmp (_String1="Form_StatusImage.jpg", _String2=".") returned 1 [0154.115] wcscmp (_String1="Form_StatusImage.jpg", _String2="..") returned 1 [0154.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187028 [0154.115] wcscpy (in: _Dest=0x8187028, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.115] wcscat (in: _Dest=0x8187028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.115] wcscat (in: _Dest=0x8187028, _Source="Form_StatusImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" [0154.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x239c [0154.117] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImageMask.bmp", cAlternateFileName="FORM_S~1.BMP")) returned 1 [0154.117] wcscmp (_String1="Form_StatusImageMask.bmp", _String2=".") returned 1 [0154.117] wcscmp (_String1="Form_StatusImageMask.bmp", _String2="..") returned 1 [0154.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3eaf4b8 [0154.117] wcscpy (in: _Dest=0x3eaf4b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.117] wcscat (in: _Dest=0x3eaf4b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.117] wcscat (in: _Dest=0x3eaf4b8, _Source="Form_StatusImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" [0154.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eaf4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0154.118] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1 [0154.118] wcscmp (_String1="GRIP.JPG", _String2=".") returned 1 [0154.118] wcscmp (_String1="GRIP.JPG", _String2="..") returned 1 [0154.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355200 [0154.118] wcscpy (in: _Dest=0x355200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.118] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.118] wcscat (in: _Dest=0x355200, _Source="GRIP.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" [0154.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0154.119] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1 [0154.119] wcscmp (_String1="GRIPMASK.BMP", _String2=".") returned 1 [0154.119] wcscmp (_String1="GRIPMASK.BMP", _String2="..") returned 1 [0154.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1460 [0154.119] wcscpy (in: _Dest=0x81d1460, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.119] wcscat (in: _Dest=0x81d1460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.119] wcscat (in: _Dest=0x81d1460, _Source="GRIPMASK.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" [0154.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0154.120] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIcon.jpg", cAlternateFileName="INFORM~1.JPG")) returned 1 [0154.120] wcscmp (_String1="InformationIcon.jpg", _String2=".") returned 1 [0154.120] wcscmp (_String1="InformationIcon.jpg", _String2="..") returned 1 [0154.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186f80 [0154.120] wcscpy (in: _Dest=0x8186f80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.120] wcscat (in: _Dest=0x8186f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.120] wcscat (in: _Dest=0x8186f80, _Source="InformationIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" [0154.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0154.121] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIconMask.bmp", cAlternateFileName="INFORM~1.BMP")) returned 1 [0154.121] wcscmp (_String1="InformationIconMask.bmp", _String2=".") returned 1 [0154.122] wcscmp (_String1="InformationIconMask.bmp", _String2="..") returned 1 [0154.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf148 [0154.122] wcscpy (in: _Dest=0x3eaf148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.122] wcscat (in: _Dest=0x3eaf148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.122] wcscat (in: _Dest=0x3eaf148, _Source="InformationIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" [0154.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eaf148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0154.123] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8f8300, ftCreationTime.dwHighDateTime=0x1c9f985, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc8f8300, ftLastWriteTime.dwHighDateTime=0x1c9f985, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="LOGIND~1.JPG")) returned 1 [0154.123] wcscmp (_String1="LoginDialogBackground.jpg", _String2=".") returned 1 [0154.123] wcscmp (_String1="LoginDialogBackground.jpg", _String2="..") returned 1 [0154.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d40340 [0154.123] wcscpy (in: _Dest=0x3d40340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.123] wcscat (in: _Dest=0x3d40340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.123] wcscat (in: _Dest=0x3d40340, _Source="LoginDialogBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" [0154.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0154.124] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f1f3190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="LOGINT~1.JPG")) returned 1 [0154.124] wcscmp (_String1="LoginTool24x24Images.jpg", _String2=".") returned 1 [0154.124] wcscmp (_String1="LoginTool24x24Images.jpg", _String2="..") returned 1 [0154.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3eb0068 [0154.124] wcscpy (in: _Dest=0x3eb0068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.124] wcscat (in: _Dest=0x3eb0068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.124] wcscat (in: _Dest=0x3eb0068, _Source="LoginTool24x24Images.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" [0154.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b8 [0154.125] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f1f3190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="LOGINT~1.BMP")) returned 1 [0154.125] wcscmp (_String1="LoginTool24x24ImagesMask.bmp", _String2=".") returned 1 [0154.125] wcscmp (_String1="LoginTool24x24ImagesMask.bmp", _String2="..") returned 1 [0154.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d403f8 [0154.126] wcscpy (in: _Dest=0x3d403f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.126] wcscat (in: _Dest=0x3d403f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.126] wcscat (in: _Dest=0x3d403f8, _Source="LoginTool24x24ImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" [0154.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d403f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23bc [0154.133] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f4c6bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1 [0154.133] wcscmp (_String1="MessageAttachmentIconImages.jpg", _String2=".") returned 1 [0154.133] wcscmp (_String1="MessageAttachmentIconImages.jpg", _String2="..") returned 1 [0154.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3339a8 [0154.134] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.134] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.134] wcscat (in: _Dest=0x3339a8, _Source="MessageAttachmentIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" [0154.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0154.134] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1 [0154.135] wcscmp (_String1="MessageAttachmentIconImagesMask.bmp", _String2=".") returned 1 [0154.135] wcscmp (_String1="MessageAttachmentIconImagesMask.bmp", _String2="..") returned 1 [0154.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5648 [0154.135] wcscpy (in: _Dest=0x81d5648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.135] wcscat (in: _Dest=0x81d5648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.135] wcscat (in: _Dest=0x81d5648, _Source="MessageAttachmentIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" [0154.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0154.136] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="MESSAG~2.JPG")) returned 1 [0154.136] wcscmp (_String1="MessageHistoryIconImages.jpg", _String2=".") returned 1 [0154.136] wcscmp (_String1="MessageHistoryIconImages.jpg", _String2="..") returned 1 [0154.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d404b0 [0154.136] wcscpy (in: _Dest=0x3d404b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.136] wcscat (in: _Dest=0x3d404b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.136] wcscat (in: _Dest=0x3d404b0, _Source="MessageHistoryIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" [0154.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d404b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0154.137] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="MESSAG~2.BMP")) returned 1 [0154.137] wcscmp (_String1="MessageHistoryIconImagesMask.bmp", _String2=".") returned 1 [0154.137] wcscmp (_String1="MessageHistoryIconImagesMask.bmp", _String2="..") returned 1 [0154.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333e28 [0154.137] wcscpy (in: _Dest=0x333e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.137] wcscat (in: _Dest=0x333e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.137] wcscat (in: _Dest=0x333e28, _Source="MessageHistoryIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" [0154.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0154.138] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbec8400, ftCreationTime.dwHighDateTime=0x1c9e917, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdbec8400, ftLastWriteTime.dwHighDateTime=0x1c9e917, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackground.jpg", cAlternateFileName="NOTIFI~4.JPG")) returned 1 [0154.138] wcscmp (_String1="NotifierBackground.jpg", _String2=".") returned 1 [0154.139] wcscmp (_String1="NotifierBackground.jpg", _String2="..") returned 1 [0154.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3eaf618 [0154.139] wcscpy (in: _Dest=0x3eaf618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.139] wcscat (in: _Dest=0x3eaf618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.139] wcscat (in: _Dest=0x3eaf618, _Source="NotifierBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" [0154.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eaf618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0154.140] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe575ec00, ftCreationTime.dwHighDateTime=0x1c9e917, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe575ec00, ftLastWriteTime.dwHighDateTime=0x1c9e917, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="NOBA77~1.JPG")) returned 1 [0154.140] wcscmp (_String1="NotifierBackgroundRTL.jpg", _String2=".") returned 1 [0154.140] wcscmp (_String1="NotifierBackgroundRTL.jpg", _String2="..") returned 1 [0154.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d40568 [0154.140] wcscpy (in: _Dest=0x3d40568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.140] wcscat (in: _Dest=0x3d40568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.140] wcscat (in: _Dest=0x3d40568, _Source="NotifierBackgroundRTL.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" [0154.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0154.141] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe652700, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x80e376d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe652700, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="NOTIFI~1.JPG")) returned 1 [0154.145] wcscmp (_String1="NotifierCloseButton.jpg", _String2=".") returned 1 [0154.145] wcscmp (_String1="NotifierCloseButton.jpg", _String2="..") returned 1 [0154.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb03d8 [0154.145] wcscpy (in: _Dest=0x3eb03d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.145] wcscat (in: _Dest=0x3eb03d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.145] wcscat (in: _Dest=0x3eb03d8, _Source="NotifierCloseButton.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" [0154.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb03d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d8 [0154.804] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x145b0800, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x145b0800, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="NOTIFI~2.JPG")) returned 1 [0154.804] wcscmp (_String1="NotifierDisableDownArrow.jpg", _String2=".") returned 1 [0154.804] wcscmp (_String1="NotifierDisableDownArrow.jpg", _String2="..") returned 1 [0154.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d406d8 [0154.805] wcscpy (in: _Dest=0x3d406d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.805] wcscat (in: _Dest=0x3d406d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.805] wcscat (in: _Dest=0x3d406d8, _Source="NotifierDisableDownArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" [0154.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d406d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25dc [0154.806] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17ee8f00, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17ee8f00, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="NO795D~1.JPG")) returned 1 [0154.806] wcscmp (_String1="NotifierDisableUpArrow.jpg", _String2=".") returned 1 [0154.806] wcscmp (_String1="NotifierDisableUpArrow.jpg", _String2="..") returned 1 [0154.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40620 [0154.806] wcscpy (in: _Dest=0x3d40620, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.806] wcscat (in: _Dest=0x3d40620, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.806] wcscat (in: _Dest=0x3d40620, _Source="NotifierDisableUpArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" [0154.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25e0 [0154.807] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b821600, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b821600, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="NOE4F1~1.JPG")) returned 1 [0154.807] wcscmp (_String1="NotifierDownArrow.jpg", _String2=".") returned 1 [0154.807] wcscmp (_String1="NotifierDownArrow.jpg", _String2="..") returned 1 [0154.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c218 [0154.807] wcscpy (in: _Dest=0x35c218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.807] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.807] wcscat (in: _Dest=0x35c218, _Source="NotifierDownArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" [0154.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25e4 [0154.808] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f159d00, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f159d00, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="NOTIFI~3.JPG")) returned 1 [0154.808] wcscmp (_String1="NotifierUpArrow.jpg", _String2=".") returned 1 [0154.808] wcscmp (_String1="NotifierUpArrow.jpg", _String2="..") returned 1 [0154.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186d88 [0154.808] wcscpy (in: _Dest=0x8186d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.808] wcscat (in: _Dest=0x8186d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.808] wcscat (in: _Dest=0x8186d88, _Source="NotifierUpArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" [0154.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25e8 [0154.809] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d7c0000, ftCreationTime.dwHighDateTime=0x1c90f66, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9d7c0000, ftLastWriteTime.dwHighDateTime=0x1c90f66, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="NOTIFI~2.BMP")) returned 1 [0154.810] wcscmp (_String1="NotifierWindowMask.bmp", _String2=".") returned 1 [0154.810] wcscmp (_String1="NotifierWindowMask.bmp", _String2="..") returned 1 [0154.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c168 [0154.810] wcscpy (in: _Dest=0x35c168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.810] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.810] wcscat (in: _Dest=0x35c168, _Source="NotifierWindowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" [0154.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25ec [0154.811] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf8d6200, ftCreationTime.dwHighDateTime=0x1c90f66, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf8d6200, ftLastWriteTime.dwHighDateTime=0x1c90f66, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="NOTIFI~1.BMP")) returned 1 [0154.811] wcscmp (_String1="NotifierWindowMaskRTL.bmp", _String2=".") returned 1 [0154.811] wcscmp (_String1="NotifierWindowMaskRTL.bmp", _String2="..") returned 1 [0154.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d40060 [0154.811] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.811] wcscat (in: _Dest=0x3d40060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.811] wcscat (in: _Dest=0x3d40060, _Source="NotifierWindowMaskRTL.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" [0154.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25f0 [0154.812] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe8500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e5c9f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbbe8500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImages.jpg", cAlternateFileName="OUTLIN~1.JPG")) returned 1 [0154.812] wcscmp (_String1="OutlineToolIconImages.jpg", _String2=".") returned 1 [0154.812] wcscmp (_String1="OutlineToolIconImages.jpg", _String2="..") returned 1 [0154.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d40c98 [0154.812] wcscpy (in: _Dest=0x3d40c98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.812] wcscat (in: _Dest=0x3d40c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.813] wcscat (in: _Dest=0x3d40c98, _Source="OutlineToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" [0154.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25f4 [0154.813] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81d64310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1938, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImagesMask.bmp", cAlternateFileName="OUTLIN~1.BMP")) returned 1 [0154.813] wcscmp (_String1="OutlineToolIconImagesMask.bmp", _String2=".") returned 1 [0154.813] wcscmp (_String1="OutlineToolIconImagesMask.bmp", _String2="..") returned 1 [0154.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333468 [0154.814] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.814] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.814] wcscat (in: _Dest=0x333468, _Source="OutlineToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" [0154.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25f8 [0154.815] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="OUTOFS~1.JPG")) returned 1 [0154.815] wcscmp (_String1="OutofSyncIconImages.jpg", _String2=".") returned 1 [0154.815] wcscmp (_String1="OutofSyncIconImages.jpg", _String2="..") returned 1 [0154.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bf58 [0154.815] wcscpy (in: _Dest=0x35bf58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.815] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.815] wcscat (in: _Dest=0x35bf58, _Source="OutofSyncIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" [0154.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25fc [0154.816] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8f888c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="OUTOFS~1.BMP")) returned 1 [0154.816] wcscmp (_String1="OutofSyncIconImagesMask.bmp", _String2=".") returned 1 [0154.816] wcscmp (_String1="OutofSyncIconImagesMask.bmp", _String2="..") returned 1 [0154.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40d50 [0154.816] wcscpy (in: _Dest=0x3d40d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.816] wcscat (in: _Dest=0x3d40d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.816] wcscat (in: _Dest=0x3d40d50, _Source="OutofSyncIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" [0154.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2600 [0154.817] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cd8a500, ftCreationTime.dwHighDateTime=0x1ca0393, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9cd8a500, ftLastWriteTime.dwHighDateTime=0x1ca0393, nFileSizeHigh=0x0, nFileSizeLow=0x5203, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImages.jpg", cAlternateFileName="PICTUR~1.JPG")) returned 1 [0154.817] wcscmp (_String1="PicturesToolIconImages.jpg", _String2=".") returned 1 [0154.817] wcscmp (_String1="PicturesToolIconImages.jpg", _String2="..") returned 1 [0154.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40e08 [0154.817] wcscpy (in: _Dest=0x3d40e08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.817] wcscat (in: _Dest=0x3d40e08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.817] wcscat (in: _Dest=0x3d40e08, _Source="PicturesToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" [0154.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2604 [0154.818] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934f3d00, ftCreationTime.dwHighDateTime=0x1ca0393, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x934f3d00, ftLastWriteTime.dwHighDateTime=0x1ca0393, nFileSizeHigh=0x0, nFileSizeLow=0x1238, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImagesMask.bmp", cAlternateFileName="PICTUR~1.BMP")) returned 1 [0154.818] wcscmp (_String1="PicturesToolIconImagesMask.bmp", _String2=".") returned 1 [0154.818] wcscmp (_String1="PicturesToolIconImagesMask.bmp", _String2="..") returned 1 [0154.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333ee8 [0154.818] wcscpy (in: _Dest=0x333ee8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.818] wcscat (in: _Dest=0x333ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.818] wcscat (in: _Dest=0x333ee8, _Source="PicturesToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" [0154.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2608 [0154.819] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIcon.jpg", cAlternateFileName="QUESTI~1.JPG")) returned 1 [0154.819] wcscmp (_String1="QuestionIcon.jpg", _String2=".") returned 1 [0154.819] wcscmp (_String1="QuestionIcon.jpg", _String2="..") returned 1 [0154.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819c2f8 [0154.820] wcscpy (in: _Dest=0x819c2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.820] wcscat (in: _Dest=0x819c2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.820] wcscat (in: _Dest=0x819c2f8, _Source="QuestionIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" [0154.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x260c [0154.821] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903b1390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIconMask.bmp", cAlternateFileName="QUESTI~1.BMP")) returned 1 [0154.821] wcscmp (_String1="QuestionIconMask.bmp", _String2=".") returned 1 [0154.821] wcscmp (_String1="QuestionIconMask.bmp", _String2="..") returned 1 [0154.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186e30 [0154.821] wcscpy (in: _Dest=0x8186e30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.821] wcscat (in: _Dest=0x8186e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.821] wcscat (in: _Dest=0x8186e30, _Source="QuestionIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" [0154.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2610 [0154.822] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16Images.jpg", cAlternateFileName="SHARED~1.JPG")) returned 1 [0154.822] wcscmp (_String1="Shared16x16Images.jpg", _String2=".") returned 1 [0154.822] wcscmp (_String1="Shared16x16Images.jpg", _String2="..") returned 1 [0154.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3eafa38 [0154.822] wcscpy (in: _Dest=0x3eafa38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.822] wcscat (in: _Dest=0x3eafa38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.822] wcscat (in: _Dest=0x3eafa38, _Source="Shared16x16Images.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" [0154.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eafa38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2614 [0154.823] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="SHARED~1.BMP")) returned 1 [0154.823] wcscmp (_String1="Shared16x16ImagesMask.bmp", _String2=".") returned 1 [0154.823] wcscmp (_String1="Shared16x16ImagesMask.bmp", _String2="..") returned 1 [0154.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d40ec0 [0154.823] wcscpy (in: _Dest=0x3d40ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.823] wcscat (in: _Dest=0x3d40ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.823] wcscat (in: _Dest=0x3d40ec0, _Source="Shared16x16ImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" [0154.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2618 [0154.825] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24Images.jpg", cAlternateFileName="SHARED~2.JPG")) returned 1 [0154.825] wcscmp (_String1="Shared24x24Images.jpg", _String2=".") returned 1 [0154.825] wcscmp (_String1="Shared24x24Images.jpg", _String2="..") returned 1 [0154.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3eaefe8 [0154.825] wcscpy (in: _Dest=0x3eaefe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.825] wcscat (in: _Dest=0x3eaefe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.825] wcscat (in: _Dest=0x3eaefe8, _Source="Shared24x24Images.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" [0154.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eaefe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x261c [0154.826] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="SHARED~2.BMP")) returned 1 [0154.826] wcscmp (_String1="Shared24x24ImagesMask.bmp", _String2=".") returned 1 [0154.826] wcscmp (_String1="Shared24x24ImagesMask.bmp", _String2="..") returned 1 [0154.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d40f78 [0154.826] wcscpy (in: _Dest=0x3d40f78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.826] wcscat (in: _Dest=0x3d40f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.826] wcscat (in: _Dest=0x3d40f78, _Source="Shared24x24ImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" [0154.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2620 [0154.827] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchIconImages.bmp", cAlternateFileName="SKETCH~1.BMP")) returned 1 [0154.827] wcscmp (_String1="SketchIconImages.bmp", _String2=".") returned 1 [0154.827] wcscmp (_String1="SketchIconImages.bmp", _String2="..") returned 1 [0154.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186ae8 [0154.827] wcscpy (in: _Dest=0x8186ae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.827] wcscat (in: _Dest=0x8186ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.827] wcscat (in: _Dest=0x8186ae8, _Source="SketchIconImages.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" [0154.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2624 [0154.828] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupicons.jpg", cAlternateFileName="SPACEB~1.JPG")) returned 1 [0154.828] wcscmp (_String1="spacebackupicons.jpg", _String2=".") returned 1 [0154.828] wcscmp (_String1="spacebackupicons.jpg", _String2="..") returned 1 [0154.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187610 [0154.829] wcscpy (in: _Dest=0x8187610, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.829] wcscat (in: _Dest=0x8187610, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.829] wcscat (in: _Dest=0x8187610, _Source="spacebackupicons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" [0154.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2628 [0154.830] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupiconsmask.bmp", cAlternateFileName="SPACEB~1.BMP")) returned 1 [0154.830] wcscmp (_String1="spacebackupiconsmask.bmp", _String2=".") returned 1 [0154.830] wcscmp (_String1="spacebackupiconsmask.bmp", _String2="..") returned 1 [0154.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3eaffb8 [0154.830] wcscpy (in: _Dest=0x3eaffb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.830] wcscat (in: _Dest=0x3eaffb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.830] wcscat (in: _Dest=0x3eaffb8, _Source="spacebackupiconsmask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" [0154.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eaffb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x262c [0154.831] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1 [0154.831] wcscmp (_String1="STOPICON.JPG", _String2=".") returned 1 [0154.831] wcscmp (_String1="STOPICON.JPG", _String2="..") returned 1 [0154.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d0458 [0154.832] wcscpy (in: _Dest=0x81d0458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.832] wcscat (in: _Dest=0x81d0458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.832] wcscat (in: _Dest=0x81d0458, _Source="STOPICON.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" [0154.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2630 [0154.833] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopIconMask.bmp", cAlternateFileName="STOPIC~1.BMP")) returned 1 [0154.833] wcscmp (_String1="StopIconMask.bmp", _String2=".") returned 1 [0154.833] wcscmp (_String1="StopIconMask.bmp", _String2="..") returned 1 [0154.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819c258 [0154.833] wcscpy (in: _Dest=0x819c258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.833] wcscat (in: _Dest=0x819c258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.833] wcscat (in: _Dest=0x819c258, _Source="StopIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" [0154.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2634 [0154.835] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28a2a00, ftCreationTime.dwHighDateTime=0x1ca0ba9, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf28a2a00, ftLastWriteTime.dwHighDateTime=0x1ca0ba9, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="TASKBA~1.BMP")) returned 1 [0154.835] wcscmp (_String1="TaskbarIconImages256Colors.bmp", _String2=".") returned 1 [0154.835] wcscmp (_String1="TaskbarIconImages256Colors.bmp", _String2="..") returned 1 [0154.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x334068 [0154.835] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.835] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.835] wcscat (in: _Dest=0x334068, _Source="TaskbarIconImages256Colors.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" [0154.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2638 [0154.836] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2097300, ftCreationTime.dwHighDateTime=0x1ca0baa, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2097300, ftLastWriteTime.dwHighDateTime=0x1ca0baa, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="TASKBA~2.BMP")) returned 1 [0154.837] wcscmp (_String1="TaskbarIconImagesMask256Colors.bmp", _String2=".") returned 1 [0154.837] wcscmp (_String1="TaskbarIconImagesMask256Colors.bmp", _String2="..") returned 1 [0154.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d57d8 [0154.837] wcscpy (in: _Dest=0x81d57d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.837] wcscat (in: _Dest=0x81d57d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.837] wcscat (in: _Dest=0x81d57d8, _Source="TaskbarIconImagesMask256Colors.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" [0154.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d57d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x263c [0154.838] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf520c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf520c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImage.jpg", cAlternateFileName="TIPSIM~1.JPG")) returned 1 [0154.838] wcscmp (_String1="TipsImage.jpg", _String2=".") returned 1 [0154.838] wcscmp (_String1="TipsImage.jpg", _String2="..") returned 1 [0154.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819a778 [0154.838] wcscpy (in: _Dest=0x819a778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.838] wcscat (in: _Dest=0x819a778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.839] wcscat (in: _Dest=0x819a778, _Source="TipsImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" [0154.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2640 [0154.840] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf520c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf520c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImageMask.bmp", cAlternateFileName="TIPSIM~1.BMP")) returned 1 [0154.840] wcscmp (_String1="TipsImageMask.bmp", _String2=".") returned 1 [0154.840] wcscmp (_String1="TipsImageMask.bmp", _String2="..") returned 1 [0154.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81876b8 [0154.840] wcscpy (in: _Dest=0x81876b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.841] wcscat (in: _Dest=0x81876b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.841] wcscat (in: _Dest=0x81876b8, _Source="TipsImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" [0154.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81876b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2644 [0154.842] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10833900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10833900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 1 [0155.309] wcscmp (_String1="VeriSignLogo.jpg", _String2=".") returned 1 [0155.309] wcscmp (_String1="VeriSignLogo.jpg", _String2="..") returned 1 [0155.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7558 [0155.309] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0155.309] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0155.310] wcscat (in: _Dest=0x2c7558, _Source="VeriSignLogo.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" [0159.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg")) returned 0x20 [0164.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg", dwFileAttributes=0x20) returned 0 [0164.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.896] GetLastError () returned 0x5 [0164.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg", dwFileAttributes=0x20) returned 0 [0164.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 [0164.897] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25efdc00, ftCreationTime.dwHighDateTime=0x1ca0394, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25efdc00, ftLastWriteTime.dwHighDateTime=0x1ca0394, nFileSizeHigh=0x0, nFileSizeLow=0x5431, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImages.jpg", cAlternateFileName="WEBTOO~2.JPG")) returned 1 [0164.897] wcscmp (_String1="WebToolIconImages.jpg", _String2=".") returned 1 [0164.897] wcscmp (_String1="WebToolIconImages.jpg", _String2="..") returned 1 [0164.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da408 [0164.897] wcscpy (in: _Dest=0x81da408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.897] wcscat (in: _Dest=0x81da408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.897] wcscat (in: _Dest=0x81da408, _Source="WebToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" [0165.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0165.233] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d97a100, ftCreationTime.dwHighDateTime=0x1ca0394, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d97a100, ftLastWriteTime.dwHighDateTime=0x1ca0394, nFileSizeHigh=0x0, nFileSizeLow=0x1538, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImagesMask.bmp", cAlternateFileName="WEBTOO~1.BMP")) returned 1 [0165.233] wcscmp (_String1="WebToolIconImagesMask.bmp", _String2=".") returned 1 [0165.233] wcscmp (_String1="WebToolIconImagesMask.bmp", _String2="..") returned 1 [0165.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x81e1e30 [0165.233] wcscpy (in: _Dest=0x81e1e30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0165.233] wcscat (in: _Dest=0x81e1e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0165.233] wcscat (in: _Dest=0x81e1e30, _Source="WebToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" [0165.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0165.234] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10833900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10833900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1995, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImages16x16.jpg", cAlternateFileName="WEBTOO~1.JPG")) returned 1 [0165.234] wcscmp (_String1="WebToolImages16x16.jpg", _String2=".") returned 1 [0165.234] wcscmp (_String1="WebToolImages16x16.jpg", _String2="..") returned 1 [0165.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bc98 [0165.234] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0165.234] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0165.234] wcscat (in: _Dest=0x35bc98, _Source="WebToolImages16x16.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" [0165.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0165.236] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10833900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10833900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImagesMask16x16.bmp", cAlternateFileName="WEBTOO~2.BMP")) returned 1 [0165.236] wcscmp (_String1="WebToolImagesMask16x16.bmp", _String2=".") returned 1 [0165.236] wcscmp (_String1="WebToolImagesMask16x16.bmp", _String2="..") returned 1 [0165.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x81e19e0 [0165.236] wcscpy (in: _Dest=0x81e19e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0165.236] wcscat (in: _Dest=0x81e19e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0165.236] wcscat (in: _Dest=0x81e19e0, _Source="WebToolImagesMask16x16.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" [0165.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0165.237] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2308, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImages.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1 [0165.237] wcscmp (_String1="WSSFilesToolIconImages.jpg", _String2=".") returned 1 [0165.237] wcscmp (_String1="WSSFilesToolIconImages.jpg", _String2="..") returned 1 [0165.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x81e1a98 [0165.237] wcscpy (in: _Dest=0x81e1a98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0165.237] wcscat (in: _Dest=0x81e1a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0165.237] wcscat (in: _Dest=0x81e1a98, _Source="WSSFilesToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" [0165.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0165.238] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="WSSFIL~1.BMP")) returned 1 [0165.238] wcscmp (_String1="WSSFilesToolIconImagesMask.bmp", _String2=".") returned 1 [0165.238] wcscmp (_String1="WSSFilesToolIconImagesMask.bmp", _String2="..") returned 1 [0165.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81df888 [0165.238] wcscpy (in: _Dest=0x81df888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0165.238] wcscat (in: _Dest=0x81df888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0165.238] wcscat (in: _Dest=0x81df888, _Source="WSSFilesToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" [0165.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0165.239] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="WSSFIL~1.BMP")) returned 0 [0165.240] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0165.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101bb0) returned 1 [0165.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 [0165.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0088) returned 1 Thread: id = 1628 os_tid = 0x1558 [0148.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30628 [0148.849] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" [0148.849] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\" [0148.849] wcscat (in: _Dest=0x3f30628, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*" [0148.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81003a0 [0148.849] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76451490, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0150.409] wcscmp (_String1=".", _String2=".") returned 0 [0150.409] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76451490, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.409] wcscmp (_String1="..", _String2=".") returned 1 [0150.409] wcscmp (_String1="..", _String2="..") returned 0 [0150.409] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0150.409] wcscmp (_String1="groove.net", _String2=".") returned 1 [0150.409] wcscmp (_String1="groove.net", _String2="..") returned 1 [0150.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0458 [0150.409] wcscpy (in: _Dest=0x81d0458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" [0150.409] wcscat (in: _Dest=0x81d0458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\" [0150.409] wcscat (in: _Dest=0x81d0458, _Source="groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0152.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d0458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1414 [0152.374] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0 [0152.374] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0152.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81003a0) returned 1 [0152.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 [0152.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf908) returned 1 Thread: id = 1629 os_tid = 0x72c [0148.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f302f8 [0148.850] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" [0148.850] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\" [0148.850] wcscat (in: _Dest=0x3f302f8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*" [0148.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8102080 [0148.850] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0150.834] wcscmp (_String1=".", _String2=".") returned 0 [0150.834] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.261] wcscmp (_String1="..", _String2=".") returned 1 [0151.261] wcscmp (_String1="..", _String2="..") returned 0 [0151.261] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1 [0151.261] wcscmp (_String1="ALERT.ICO", _String2=".") returned 1 [0151.261] wcscmp (_String1="ALERT.ICO", _String2="..") returned 1 [0151.261] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1 [0151.261] wcscmp (_String1="CHEVRON.ICO", _String2=".") returned 1 [0151.261] wcscmp (_String1="CHEVRON.ICO", _String2="..") returned 1 [0151.261] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76febfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1 [0151.261] wcscmp (_String1="COMPUTER.ICO", _String2=".") returned 1 [0151.261] wcscmp (_String1="COMPUTER.ICO", _String2="..") returned 1 [0151.261] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="CONTAC~1.ICO")) returned 1 [0151.262] wcscmp (_String1="ContactSelector.ico", _String2=".") returned 1 [0151.262] wcscmp (_String1="ContactSelector.ico", _String2="..") returned 1 [0151.262] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ab2200, ftCreationTime.dwHighDateTime=0x1c9ffd1, ftLastAccessTime.dwLowDateTime=0x88646c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x13ab2200, ftLastWriteTime.dwHighDateTime=0x1c9ffd1, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrorfromgroove.ico", cAlternateFileName="GFSERR~1.ICO")) returned 1 [0151.262] wcscmp (_String1="gfserrorfromgroove.ico", _String2=".") returned 1 [0151.262] wcscmp (_String1="gfserrorfromgroove.ico", _String2="..") returned 1 [0151.262] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb54100, ftCreationTime.dwHighDateTime=0x1c9ffd1, ftLastAccessTime.dwLowDateTime=0x88646c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb54100, ftLastWriteTime.dwHighDateTime=0x1c9ffd1, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrortogroove.ico", cAlternateFileName="GFSERR~2.ICO")) returned 1 [0151.262] wcscmp (_String1="gfserrortogroove.ico", _String2=".") returned 1 [0151.262] wcscmp (_String1="gfserrortogroove.ico", _String2="..") returned 1 [0151.262] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73232300, ftCreationTime.dwHighDateTime=0x1c9e05e, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73232300, ftLastWriteTime.dwHighDateTime=0x1c9e05e, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1 [0151.262] wcscmp (_String1="GWE.ICO", _String2=".") returned 1 [0151.262] wcscmp (_String1="GWE.ICO", _String2="..") returned 1 [0151.262] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53451100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53451100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1 [0151.262] wcscmp (_String1="INCOMING.ICO", _String2=".") returned 1 [0151.262] wcscmp (_String1="INCOMING.ICO", _String2="..") returned 1 [0151.262] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53451100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53451100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1 [0151.262] wcscmp (_String1="INDOMAIN.ICO", _String2=".") returned 1 [0151.262] wcscmp (_String1="INDOMAIN.ICO", _String2="..") returned 1 [0151.262] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1 [0151.262] wcscmp (_String1="MAIL.ICO", _String2=".") returned 1 [0151.262] wcscmp (_String1="MAIL.ICO", _String2="..") returned 1 [0151.263] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1 [0151.263] wcscmp (_String1="MANUAL.ICO", _String2=".") returned 1 [0151.263] wcscmp (_String1="MANUAL.ICO", _String2="..") returned 1 [0151.263] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f4c6bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="MESSAG~1.ICO")) returned 1 [0151.263] wcscmp (_String1="messageboxalert.ico", _String2=".") returned 1 [0151.263] wcscmp (_String1="messageboxalert.ico", _String2="..") returned 1 [0151.263] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="MESSAG~3.ICO")) returned 1 [0151.263] wcscmp (_String1="messageboxerror.ico", _String2=".") returned 1 [0151.263] wcscmp (_String1="messageboxerror.ico", _String2="..") returned 1 [0151.263] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="MESSAG~2.ICO")) returned 1 [0151.263] wcscmp (_String1="messageboxinfo.ico", _String2=".") returned 1 [0151.263] wcscmp (_String1="messageboxinfo.ico", _String2="..") returned 1 [0151.263] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3dc400, ftCreationTime.dwHighDateTime=0x1ca045a, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xab3dc400, ftLastWriteTime.dwHighDateTime=0x1ca045a, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="MODIFI~1.ICO")) returned 1 [0151.263] wcscmp (_String1="ModifiedTelespace.ico", _String2=".") returned 1 [0151.263] wcscmp (_String1="ModifiedTelespace.ico", _String2="..") returned 1 [0151.263] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e4bf590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1 [0151.263] wcscmp (_String1="OFFLINE.ICO", _String2=".") returned 1 [0151.263] wcscmp (_String1="OFFLINE.ICO", _String2="..") returned 1 [0151.263] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1 [0151.263] wcscmp (_String1="ONLINE.ICO", _String2=".") returned 1 [0151.263] wcscmp (_String1="ONLINE.ICO", _String2="..") returned 1 [0151.263] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8174aab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="ONLINE~1.ICO")) returned 1 [0151.263] wcscmp (_String1="OnLineBusy.ico", _String2=".") returned 1 [0151.264] wcscmp (_String1="OnLineBusy.ico", _String2="..") returned 1 [0151.264] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="ONLINE~2.ICO")) returned 1 [0151.264] wcscmp (_String1="OnLineIdle.ico", _String2=".") returned 1 [0151.264] wcscmp (_String1="OnLineIdle.ico", _String2="..") returned 1 [0151.264] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="OUTDOM~1.ICO")) returned 1 [0151.264] wcscmp (_String1="OutDomain.ico", _String2=".") returned 1 [0151.264] wcscmp (_String1="OutDomain.ico", _String2="..") returned 1 [0151.264] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81d18050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1 [0151.264] wcscmp (_String1="OUTGOING.ICO", _String2=".") returned 1 [0151.264] wcscmp (_String1="OUTGOING.ICO", _String2="..") returned 1 [0151.264] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="OUTSYN~1.ICO")) returned 1 [0151.264] wcscmp (_String1="OutSyncPC.ico", _String2=".") returned 1 [0151.264] wcscmp (_String1="OutSyncPC.ico", _String2="..") returned 1 [0151.264] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="PERSON~1.ICO")) returned 1 [0151.264] wcscmp (_String1="PersonalContact.ico", _String2=".") returned 1 [0151.264] wcscmp (_String1="PersonalContact.ico", _String2="..") returned 1 [0151.264] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x904bbd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="SESSIO~2.ICO")) returned 1 [0151.265] wcscmp (_String1="SessionMember.ico", _String2=".") returned 1 [0151.265] wcscmp (_String1="SessionMember.ico", _String2="..") returned 1 [0151.265] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="SESSIO~1.ICO")) returned 1 [0151.265] wcscmp (_String1="SessionOwner.ico", _String2=".") returned 1 [0151.265] wcscmp (_String1="SessionOwner.ico", _String2="..") returned 1 [0151.265] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="SPACES~1.ICO")) returned 1 [0151.265] wcscmp (_String1="SpaceSelector.ico", _String2=".") returned 1 [0151.265] wcscmp (_String1="SpaceSelector.ico", _String2="..") returned 1 [0151.265] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="STATUS~1.ICO")) returned 1 [0151.265] wcscmp (_String1="StatusAway.ico", _String2=".") returned 1 [0151.265] wcscmp (_String1="StatusAway.ico", _String2="..") returned 1 [0151.265] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="STATUS~2.ICO")) returned 1 [0151.265] wcscmp (_String1="StatusDoNotDisturb.ico", _String2=".") returned 1 [0151.265] wcscmp (_String1="StatusDoNotDisturb.ico", _String2="..") returned 1 [0151.265] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="STATUS~3.ICO")) returned 1 [0151.266] wcscmp (_String1="StatusOnline.ico", _String2=".") returned 1 [0151.266] wcscmp (_String1="StatusOnline.ico", _String2="..") returned 1 [0151.266] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1 [0151.266] wcscmp (_String1="TOOLICON.ICO", _String2=".") returned 1 [0151.266] wcscmp (_String1="TOOLICON.ICO", _String2="..") returned 1 [0151.266] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5809c500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5809c500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1 [0151.266] wcscmp (_String1="WSS.ICO", _String2=".") returned 1 [0151.266] wcscmp (_String1="WSS.ICO", _String2="..") returned 1 [0151.266] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99659200, ftCreationTime.dwHighDateTime=0x1c9d4a6, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99659200, ftLastWriteTime.dwHighDateTime=0x1c9d4a6, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 1 [0151.266] wcscmp (_String1="WSS_DocLib.ico", _String2=".") returned 1 [0151.266] wcscmp (_String1="WSS_DocLib.ico", _String2="..") returned 1 [0151.266] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99659200, ftCreationTime.dwHighDateTime=0x1c9d4a6, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99659200, ftLastWriteTime.dwHighDateTime=0x1c9d4a6, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 0 [0151.266] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0151.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8102080) returned 1 [0151.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 [0151.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafd88) returned 1 Thread: id = 1630 os_tid = 0x1560 [0148.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f4a0 [0148.851] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0148.851] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0148.851] wcscat (in: _Dest=0x3f2f4a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*" [0148.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0148.851] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0150.410] wcscmp (_String1=".", _String2=".") returned 0 [0150.411] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.411] wcscmp (_String1="..", _String2=".") returned 1 [0150.411] wcscmp (_String1="..", _String2="..") returned 0 [0150.411] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67aeba00, ftCreationTime.dwHighDateTime=0x1c8a132, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67aeba00, ftLastWriteTime.dwHighDateTime=0x1c8a132, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0x0, dwReserved1=0x0, cFileName="builtincontrolsschema.xsd", cAlternateFileName="BUILTI~1.XSD")) returned 1 [0150.411] wcscmp (_String1="builtincontrolsschema.xsd", _String2=".") returned 1 [0150.411] wcscmp (_String1="builtincontrolsschema.xsd", _String2="..") returned 1 [0150.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6688 [0150.411] wcscpy (in: _Dest=0x2ff6688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0150.411] wcscat (in: _Dest=0x2ff6688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0150.411] wcscat (in: _Dest=0x2ff6688, _Source="builtincontrolsschema.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" [0152.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0152.376] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67aeba00, ftCreationTime.dwHighDateTime=0x1c8a132, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67aeba00, ftLastWriteTime.dwHighDateTime=0x1c8a132, nFileSizeHigh=0x0, nFileSizeLow=0x5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="grvschema.xsd", cAlternateFileName="GRVSCH~1.XSD")) returned 1 [0152.376] wcscmp (_String1="grvschema.xsd", _String2=".") returned 1 [0152.376] wcscmp (_String1="grvschema.xsd", _String2="..") returned 1 [0152.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e120e8 [0152.376] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0152.376] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0152.376] wcscat (in: _Dest=0x3e120e8, _Source="grvschema.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" [0152.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0152.378] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5809c500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5809c500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Messenger.xml", cAlternateFileName="MESSEN~1.XML")) returned 1 [0152.378] wcscmp (_String1="Messenger.xml", _String2=".") returned 1 [0152.378] wcscmp (_String1="Messenger.xml", _String2="..") returned 1 [0152.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819c258 [0152.378] wcscpy (in: _Dest=0x819c258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0152.378] wcscat (in: _Dest=0x819c258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0152.378] wcscat (in: _Dest=0x819c258, _Source="Messenger.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" [0152.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc [0152.379] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Space Templates", cAlternateFileName="SPACET~1")) returned 1 [0152.379] wcscmp (_String1="Space Templates", _String2=".") returned 1 [0152.379] wcscmp (_String1="Space Templates", _String2="..") returned 1 [0152.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819c2f8 [0152.379] wcscpy (in: _Dest=0x819c2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0152.379] wcscat (in: _Dest=0x819c2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0152.379] wcscat (in: _Dest=0x819c2f8, _Source="Space Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" [0152.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819c2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0152.381] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf779900, ftCreationTime.dwHighDateTime=0x1c9d7ab, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf779900, ftLastWriteTime.dwHighDateTime=0x1c9d7ab, nFileSizeHigh=0x0, nFileSizeLow=0x17e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterApplicationDescriptors.xml", cAlternateFileName="STARTE~2.XML")) returned 1 [0152.381] wcscmp (_String1="StarterApplicationDescriptors.xml", _String2=".") returned 1 [0152.381] wcscmp (_String1="StarterApplicationDescriptors.xml", _String2="..") returned 1 [0152.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d5648 [0152.381] wcscpy (in: _Dest=0x81d5648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0152.381] wcscat (in: _Dest=0x81d5648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0152.381] wcscat (in: _Dest=0x81d5648, _Source="StarterApplicationDescriptors.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" [0152.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0152.383] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x593af200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x593af200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b875, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterNotificationDescriptors.xml", cAlternateFileName="STARTE~1.XML")) returned 1 [0152.383] wcscmp (_String1="StarterNotificationDescriptors.xml", _String2=".") returned 1 [0152.383] wcscmp (_String1="StarterNotificationDescriptors.xml", _String2="..") returned 1 [0152.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5710 [0152.383] wcscpy (in: _Dest=0x81d5710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0152.383] wcscat (in: _Dest=0x81d5710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0152.383] wcscat (in: _Dest=0x81d5710, _Source="StarterNotificationDescriptors.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" [0152.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0152.384] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7893300, ftCreationTime.dwHighDateTime=0x1c9a4f3, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7893300, ftLastWriteTime.dwHighDateTime=0x1c9a4f3, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~3.XML")) returned 1 [0152.384] wcscmp (_String1="StarterToolTemplates.xml", _String2=".") returned 1 [0152.384] wcscmp (_String1="StarterToolTemplates.xml", _String2="..") returned 1 [0152.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6b90 [0152.384] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0152.385] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0152.385] wcscat (in: _Dest=0x2ff6b90, _Source="StarterToolTemplates.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" [0152.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2010 [0152.386] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7893300, ftCreationTime.dwHighDateTime=0x1c9a4f3, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7893300, ftLastWriteTime.dwHighDateTime=0x1c9a4f3, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~3.XML")) returned 0 [0152.386] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0152.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0152.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 [0152.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafa88) returned 1 Thread: id = 1631 os_tid = 0x157c [0148.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif")) returned 0x20 [0150.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF", dwFileAttributes=0x20) returned 0 [0150.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.948] GetLastError () returned 0x5 [0150.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF", dwFileAttributes=0x20) returned 0 [0150.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1228) returned 1 Thread: id = 1632 os_tid = 0x1580 [0148.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif")) returned 0x20 [0150.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF", dwFileAttributes=0x20) returned 0 [0150.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.674] GetLastError () returned 0x5 [0150.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF", dwFileAttributes=0x20) returned 0 [0150.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1d68) returned 1 Thread: id = 1633 os_tid = 0x1584 [0148.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif")) returned 0x20 [0150.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF", dwFileAttributes=0x20) returned 0 [0150.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.675] GetLastError () returned 0x5 [0150.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF", dwFileAttributes=0x20) returned 0 [0150.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1b28) returned 1 Thread: id = 1634 os_tid = 0x1588 [0148.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif")) returned 0x20 [0150.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF", dwFileAttributes=0x20) returned 0 [0150.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.939] GetLastError () returned 0x5 [0150.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF", dwFileAttributes=0x20) returned 0 [0150.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1468) returned 1 Thread: id = 1635 os_tid = 0x12f8 [0148.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif")) returned 0x20 [0150.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF", dwFileAttributes=0x20) returned 0 [0150.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.941] GetLastError () returned 0x5 [0150.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF", dwFileAttributes=0x20) returned 0 [0150.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a08) returned 1 Thread: id = 1636 os_tid = 0x158c [0148.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif")) returned 0x20 [0150.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF", dwFileAttributes=0x20) returned 0 [0150.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.942] GetLastError () returned 0x5 [0150.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF", dwFileAttributes=0x20) returned 0 [0150.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1078) returned 1 Thread: id = 1637 os_tid = 0x1590 [0148.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif")) returned 0x20 [0150.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF", dwFileAttributes=0x20) returned 0 [0150.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.982] GetLastError () returned 0x5 [0150.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF", dwFileAttributes=0x20) returned 0 [0150.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb12b8) returned 1 Thread: id = 1638 os_tid = 0x1594 [0148.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif")) returned 0x20 [0150.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF", dwFileAttributes=0x20) returned 0 [0150.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.981] GetLastError () returned 0x5 [0150.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF", dwFileAttributes=0x20) returned 0 [0150.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb14f8) returned 1 Thread: id = 1639 os_tid = 0x159c [0148.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif")) returned 0x20 [0150.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF", dwFileAttributes=0x20) returned 0 [0150.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.979] GetLastError () returned 0x5 [0150.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF", dwFileAttributes=0x20) returned 0 [0150.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1588) returned 1 Thread: id = 1640 os_tid = 0x15a0 [0148.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif")) returned 0x20 [0150.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF", dwFileAttributes=0x20) returned 0 [0150.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.978] GetLastError () returned 0x5 [0150.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF", dwFileAttributes=0x20) returned 0 [0150.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1e88) returned 1 Thread: id = 1641 os_tid = 0x15a4 [0148.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif")) returned 0x20 [0150.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF", dwFileAttributes=0x20) returned 0 [0150.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.976] GetLastError () returned 0x5 [0150.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF", dwFileAttributes=0x20) returned 0 [0150.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1618) returned 1 Thread: id = 1642 os_tid = 0x15a8 [0148.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif")) returned 0x20 [0150.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF", dwFileAttributes=0x20) returned 0 [0150.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.974] GetLastError () returned 0x5 [0150.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF", dwFileAttributes=0x20) returned 0 [0150.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1858) returned 1 Thread: id = 1643 os_tid = 0x1434 [0148.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif")) returned 0x20 [0150.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF", dwFileAttributes=0x20) returned 0 [0150.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.972] GetLastError () returned 0x5 [0150.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF", dwFileAttributes=0x20) returned 0 [0150.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb18e8) returned 1 Thread: id = 1644 os_tid = 0x15c0 [0148.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif")) returned 0x20 [0150.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF", dwFileAttributes=0x20) returned 0 [0150.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.970] GetLastError () returned 0x5 [0150.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF", dwFileAttributes=0x20) returned 0 [0150.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a98) returned 1 Thread: id = 1645 os_tid = 0x15c4 [0148.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif")) returned 0x20 [0150.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF", dwFileAttributes=0x20) returned 0 [0150.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.968] GetLastError () returned 0x5 [0150.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF", dwFileAttributes=0x20) returned 0 [0150.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 Thread: id = 1646 os_tid = 0x12fc [0148.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif")) returned 0x20 [0150.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF", dwFileAttributes=0x20) returned 0 [0150.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.967] GetLastError () returned 0x5 [0150.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF", dwFileAttributes=0x20) returned 0 [0150.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0fe8) returned 1 Thread: id = 1647 os_tid = 0x1300 [0148.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif")) returned 0x20 [0150.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF", dwFileAttributes=0x20) returned 0 [0150.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.965] GetLastError () returned 0x5 [0150.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF", dwFileAttributes=0x20) returned 0 [0150.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2d28) returned 1 Thread: id = 1648 os_tid = 0x1308 [0148.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif")) returned 0x20 [0150.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF", dwFileAttributes=0x20) returned 0 [0150.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.963] GetLastError () returned 0x5 [0150.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF", dwFileAttributes=0x20) returned 0 [0150.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2c98) returned 1 Thread: id = 1649 os_tid = 0x15d0 [0148.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif")) returned 0x20 [0150.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF", dwFileAttributes=0x20) returned 0 [0150.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.962] GetLastError () returned 0x5 [0150.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF", dwFileAttributes=0x20) returned 0 [0150.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2c08) returned 1 Thread: id = 1650 os_tid = 0x15d4 [0148.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif")) returned 0x20 [0150.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF", dwFileAttributes=0x20) returned 0 [0150.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.960] GetLastError () returned 0x5 [0150.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF", dwFileAttributes=0x20) returned 0 [0150.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2b78) returned 1 Thread: id = 1651 os_tid = 0x15d8 [0148.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif")) returned 0x20 [0150.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF", dwFileAttributes=0x20) returned 0 [0150.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.946] GetLastError () returned 0x5 [0150.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF", dwFileAttributes=0x20) returned 0 [0150.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2ae8) returned 1 Thread: id = 1652 os_tid = 0x15dc [0148.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif")) returned 0x20 [0150.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF", dwFileAttributes=0x20) returned 0 [0150.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.672] GetLastError () returned 0x5 [0150.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF", dwFileAttributes=0x20) returned 0 [0150.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2a58) returned 1 Thread: id = 1653 os_tid = 0x15e0 [0148.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif")) returned 0x20 [0150.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF", dwFileAttributes=0x20) returned 0 [0150.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.984] GetLastError () returned 0x5 [0150.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF", dwFileAttributes=0x20) returned 0 [0150.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb29c8) returned 1 Thread: id = 1654 os_tid = 0x15e4 [0148.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif")) returned 0x20 [0150.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF", dwFileAttributes=0x20) returned 0 [0150.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.986] GetLastError () returned 0x5 [0150.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF", dwFileAttributes=0x20) returned 0 [0150.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2e48) returned 1 Thread: id = 1655 os_tid = 0x15e8 [0148.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif")) returned 0x20 [0150.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF", dwFileAttributes=0x20) returned 0 [0150.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.988] GetLastError () returned 0x5 [0150.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF", dwFileAttributes=0x20) returned 0 [0150.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2ed8) returned 1 Thread: id = 1656 os_tid = 0x15ec [0149.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif")) returned 0x20 [0150.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF", dwFileAttributes=0x20) returned 0 [0150.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.957] GetLastError () returned 0x5 [0150.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF", dwFileAttributes=0x20) returned 0 [0150.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34440) returned 1 Thread: id = 1657 os_tid = 0x1600 [0149.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc")) returned 0x20 [0149.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", dwFileAttributes=0x20) returned 0 [0149.146] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.146] GetLastError () returned 0x5 [0149.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", dwFileAttributes=0x20) returned 0 [0149.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 Thread: id = 1658 os_tid = 0x1604 [0149.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34a70 [0149.148] wcscpy (in: _Dest=0x3f34a70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0149.148] wcscat (in: _Dest=0x3f34a70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0149.148] wcscat (in: _Dest=0x3f34a70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*" [0149.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0149.148] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0149.401] wcscmp (_String1=".", _String2=".") returned 0 [0149.401] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.401] wcscmp (_String1="..", _String2=".") returned 1 [0149.401] wcscmp (_String1="..", _String2="..") returned 0 [0149.401] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePDF417.pmp", cAlternateFileName="ADOBEP~1.PMP")) returned 1 [0149.401] wcscmp (_String1="AdobePDF417.pmp", _String2=".") returned 1 [0149.401] wcscmp (_String1="AdobePDF417.pmp", _String2="..") returned 1 [0149.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186848 [0149.401] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0149.401] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0149.401] wcscat (in: _Dest=0x8186848, _Source="AdobePDF417.pmp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" [0151.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0151.031] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMatrix.pmp", cAlternateFileName="DATAMA~1.PMP")) returned 1 [0151.031] wcscmp (_String1="DataMatrix.pmp", _String2=".") returned 1 [0151.031] wcscmp (_String1="DataMatrix.pmp", _String2="..") returned 1 [0151.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187568 [0151.031] wcscpy (in: _Dest=0x8187568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0151.031] wcscat (in: _Dest=0x8187568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0151.031] wcscat (in: _Dest=0x8187568, _Source="DataMatrix.pmp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" [0151.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0151.032] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 1 [0151.032] wcscmp (_String1="QRCode.pmp", _String2=".") returned 1 [0151.032] wcscmp (_String1="QRCode.pmp", _String2="..") returned 1 [0151.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11fa8 [0151.033] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0151.033] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0151.033] wcscat (in: _Dest=0x3e11fa8, _Source="QRCode.pmp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" [0151.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0151.034] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 0 [0151.034] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0151.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0151.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34a70) returned 1 [0151.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 1659 os_tid = 0x1608 [0149.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f359a0 [0149.149] wcscpy (in: _Dest=0x3f359a0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" [0149.149] wcscat (in: _Dest=0x3f359a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\" [0149.149] wcscat (in: _Dest=0x3f359a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*" [0149.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0149.149] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0149.150] wcscmp (_String1=".", _String2=".") returned 0 [0149.150] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.150] wcscmp (_String1="..", _String2=".") returned 1 [0149.150] wcscmp (_String1="..", _String2="..") returned 0 [0149.150] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0149.150] wcscmp (_String1="Adobe Custom Dictionary", _String2=".") returned 1 [0149.150] wcscmp (_String1="Adobe Custom Dictionary", _String2="..") returned 1 [0149.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3336a8 [0149.150] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" [0149.150] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\" [0149.150] wcscat (in: _Dest=0x3336a8, _Source="Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0153.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0153.202] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0153.202] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0153.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0153.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f359a0) returned 1 [0153.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35760) returned 1 Thread: id = 1660 os_tid = 0x160c [0149.151] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20 [0149.151] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0149.152] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.152] GetLastError () returned 0x5 [0149.152] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0149.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64438) returned 1 Thread: id = 1661 os_tid = 0x1610 [0149.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx")) returned 0x20 [0150.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0150.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.543] GetLastError () returned 0x5 [0150.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0150.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c8d0) returned 1 Thread: id = 1662 os_tid = 0x1614 [0149.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx")) returned 0x20 [0150.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx", dwFileAttributes=0x20) returned 0 [0150.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.135] GetLastError () returned 0x5 [0150.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx", dwFileAttributes=0x20) returned 0 [0150.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 1663 os_tid = 0x154 [0149.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx")) returned 0x20 [0150.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx", dwFileAttributes=0x20) returned 0 [0150.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.588] GetLastError () returned 0x5 [0150.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx", dwFileAttributes=0x20) returned 0 [0150.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 1664 os_tid = 0x1618 [0149.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx")) returned 0x20 [0150.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.585] GetLastError () returned 0x5 [0150.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c248) returned 1 Thread: id = 1665 os_tid = 0x161c [0149.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx")) returned 0x20 [0150.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.583] GetLastError () returned 0x5 [0150.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c70f8) returned 1 Thread: id = 1666 os_tid = 0x1620 [0149.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx")) returned 0x20 [0150.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx", dwFileAttributes=0x20) returned 0 [0150.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.582] GetLastError () returned 0x5 [0150.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx", dwFileAttributes=0x20) returned 0 [0150.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ca00) returned 1 Thread: id = 1667 os_tid = 0x1624 [0149.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx")) returned 0x20 [0150.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx", dwFileAttributes=0x20) returned 0 [0150.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.580] GetLastError () returned 0x5 [0150.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx", dwFileAttributes=0x20) returned 0 [0150.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c5d8) returned 1 Thread: id = 1668 os_tid = 0x1438 [0149.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx")) returned 0x20 [0150.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.579] GetLastError () returned 0x5 [0150.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c2e0) returned 1 Thread: id = 1669 os_tid = 0x1628 [0149.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx")) returned 0x20 [0150.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.577] GetLastError () returned 0x5 [0150.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0150.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 1670 os_tid = 0xbbc [0149.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx")) returned 0x20 [0150.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0150.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.575] GetLastError () returned 0x5 [0150.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0150.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 1671 os_tid = 0x1630 [0149.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx")) returned 0x20 [0150.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx", dwFileAttributes=0x20) returned 0 [0150.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.574] GetLastError () returned 0x5 [0150.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx", dwFileAttributes=0x20) returned 0 [0150.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c968) returned 1 Thread: id = 1672 os_tid = 0x143c [0149.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx")) returned 0x20 [0150.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx", dwFileAttributes=0x20) returned 0 [0150.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.572] GetLastError () returned 0x5 [0150.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx", dwFileAttributes=0x20) returned 0 [0150.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cbc8) returned 1 Thread: id = 1673 os_tid = 0xb80 [0149.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx")) returned 0x20 [0150.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx", dwFileAttributes=0x20) returned 0 [0150.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.541] GetLastError () returned 0x5 [0150.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx", dwFileAttributes=0x20) returned 0 [0150.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355170) returned 1 Thread: id = 1674 os_tid = 0xb70 [0149.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x30150d0 [0149.162] wcscpy (in: _Dest=0x30150d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0149.162] wcscat (in: _Dest=0x30150d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0149.162] wcscat (in: _Dest=0x30150d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*" [0149.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0149.162] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f8c110, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb50 [0150.884] wcscmp (_String1=".", _String2=".") returned 0 [0150.884] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f8c110, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.884] wcscmp (_String1="..", _String2=".") returned 1 [0150.884] wcscmp (_String1="..", _String2="..") returned 0 [0150.884] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityFax.Dotx", cAlternateFileName="EQUITY~1.DOT")) returned 1 [0150.885] wcscmp (_String1="EquityFax.Dotx", _String2=".") returned 1 [0150.885] wcscmp (_String1="EquityFax.Dotx", _String2="..") returned 1 [0150.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1d68 [0150.885] wcscpy (in: _Dest=0x3eb1d68, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0150.885] wcscat (in: _Dest=0x3eb1d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0150.885] wcscat (in: _Dest=0x3eb1d68, _Source="EquityFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" [0159.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0159.152] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x19972, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianFax.Dotx", cAlternateFileName="MEDIAN~1.DOT")) returned 1 [0159.152] wcscmp (_String1="MedianFax.Dotx", _String2=".") returned 1 [0159.152] wcscmp (_String1="MedianFax.Dotx", _String2="..") returned 1 [0159.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35f40 [0159.152] wcscpy (in: _Dest=0x3f35f40, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0159.152] wcscat (in: _Dest=0x3f35f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0159.152] wcscat (in: _Dest=0x3f35f40, _Source="MedianFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" [0159.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0159.153] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1bbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielFax.Dotx", cAlternateFileName="ORIELF~1.DOT")) returned 1 [0159.153] wcscmp (_String1="OrielFax.Dotx", _String2=".") returned 1 [0159.153] wcscmp (_String1="OrielFax.Dotx", _String2="..") returned 1 [0159.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f36060 [0159.154] wcscpy (in: _Dest=0x3f36060, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0159.154] wcscat (in: _Dest=0x3f36060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0159.154] wcscat (in: _Dest=0x3f36060, _Source="OrielFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" [0159.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0159.155] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x16d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginFax.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0159.155] wcscmp (_String1="OriginFax.Dotx", _String2=".") returned 1 [0159.155] wcscmp (_String1="OriginFax.Dotx", _String2="..") returned 1 [0159.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f357f0 [0159.155] wcscpy (in: _Dest=0x3f357f0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0159.155] wcscat (in: _Dest=0x3f357f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0159.155] wcscat (in: _Dest=0x3f357f0, _Source="OriginFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" [0159.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f357f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0159.157] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="URBANF~1.DOT")) returned 1 [0159.157] wcscmp (_String1="UrbanFax.Dotx", _String2=".") returned 1 [0159.157] wcscmp (_String1="UrbanFax.Dotx", _String2="..") returned 1 [0159.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35400 [0159.157] wcscpy (in: _Dest=0x3f35400, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0159.157] wcscat (in: _Dest=0x3f35400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0159.157] wcscat (in: _Dest=0x3f35400, _Source="UrbanFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" [0159.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0159.158] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="URBANF~1.DOT")) returned 0 [0159.158] FindClose (in: hFindFile=0x3dcfb50 | out: hFindFile=0x3dcfb50) returned 1 [0159.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0159.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0159.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c1f8) returned 1 Thread: id = 1675 os_tid = 0x1440 [0149.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx")) returned 0x20 [0150.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx", dwFileAttributes=0x20) returned 0 [0150.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.538] GetLastError () returned 0x5 [0150.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx", dwFileAttributes=0x20) returned 0 [0150.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 1676 os_tid = 0xb7c [0149.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx")) returned 0x20 [0150.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx", dwFileAttributes=0x20) returned 0 [0150.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.537] GetLastError () returned 0x5 [0150.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx", dwFileAttributes=0x20) returned 0 [0150.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81878b0) returned 1 Thread: id = 1677 os_tid = 0xb64 [0149.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx")) returned 0x20 [0150.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx", dwFileAttributes=0x20) returned 0 [0150.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.568] GetLastError () returned 0x5 [0150.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx", dwFileAttributes=0x20) returned 0 [0150.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cc60) returned 1 Thread: id = 1678 os_tid = 0x1444 [0149.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx")) returned 0x20 [0150.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx", dwFileAttributes=0x20) returned 0 [0150.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.566] GetLastError () returned 0x5 [0150.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx", dwFileAttributes=0x20) returned 0 [0150.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f352e0) returned 1 Thread: id = 1679 os_tid = 0xde0 [0149.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx")) returned 0x20 [0150.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0150.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.565] GetLastError () returned 0x5 [0150.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0150.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ccf8) returned 1 Thread: id = 1680 os_tid = 0x133c [0149.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx")) returned 0x20 [0150.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0150.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.563] GetLastError () returned 0x5 [0150.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0150.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 Thread: id = 1681 os_tid = 0xe48 [0149.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx")) returned 0x20 [0150.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx", dwFileAttributes=0x20) returned 0 [0150.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.561] GetLastError () returned 0x5 [0150.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx", dwFileAttributes=0x20) returned 0 [0150.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34ef0) returned 1 Thread: id = 1682 os_tid = 0x1344 [0149.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx")) returned 0x20 [0150.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx", dwFileAttributes=0x20) returned 0 [0150.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.560] GetLastError () returned 0x5 [0150.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx", dwFileAttributes=0x20) returned 0 [0150.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35520) returned 1 Thread: id = 1683 os_tid = 0x1448 [0149.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx")) returned 0x20 [0150.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx", dwFileAttributes=0x20) returned 0 [0150.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.536] GetLastError () returned 0x5 [0150.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx", dwFileAttributes=0x20) returned 0 [0150.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 1684 os_tid = 0x144c [0149.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4b08 [0149.404] wcscpy (in: _Dest=0x3dc4b08, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" [0149.404] wcscat (in: _Dest=0x3dc4b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\" [0149.404] wcscat (in: _Dest=0x3dc4b08, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*" [0149.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0149.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x553507b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x553507b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0150.428] wcscmp (_String1=".", _String2=".") returned 0 [0150.428] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x553507b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x553507b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.429] wcscmp (_String1="..", _String2=".") returned 1 [0150.429] wcscmp (_String1="..", _String2="..") returned 0 [0150.429] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0150.429] wcscmp (_String1="14", _String2=".") returned 1 [0150.429] wcscmp (_String1="14", _String2="..") returned 1 [0150.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4b88 [0150.429] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" [0150.429] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\" [0150.429] wcscat (in: _Dest=0x3dc4b88, _Source="14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0151.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0151.382] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0151.382] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b08) returned 1 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da61f0) returned 1 Thread: id = 1685 os_tid = 0x145c [0149.405] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 0x20 [0149.405] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0149.405] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.405] GetLastError () returned 0x5 [0149.405] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0149.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 Thread: id = 1686 os_tid = 0x1460 [0149.407] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 0x20 [0149.407] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0149.407] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.407] GetLastError () returned 0x5 [0149.407] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0149.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 Thread: id = 1687 os_tid = 0x1464 [0149.408] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\gznvbmdsemcsw9hs5yq.mp3")) returned 0x20 [0149.408] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3", dwFileAttributes=0x20) returned 1 [0151.160] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\gznvbmdsemcsw9hs5yq.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x195c [0151.160] GetFileSizeEx (in: hFile=0x195c, lpFileSize=0x7c7fa80 | out: lpFileSize=0x7c7fa80*=19433) returned 1 [0151.160] SetFilePointerEx (in: hFile=0x195c, liDistanceToMove=0x4be5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.160] ReadFile (in: hFile=0x195c, lpBuffer=0x7c7fa8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7c7fa68, lpOverlapped=0x0 | out: lpBuffer=0x7c7fa8c*, lpNumberOfBytesRead=0x7c7fa68*=0x4, lpOverlapped=0x0) returned 1 [0151.162] SetFilePointerEx (in: hFile=0x195c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0151.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0151.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0151.162] NtQuerySystemTime (in: CurrentTime=0x7c7fa08 | out: CurrentTime=0x7c7fa08*=132471540197316000) returned 0x0 [0151.162] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x37e7a6fa [0151.162] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x399b7eab [0151.162] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x2f529eb2 [0151.162] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x36e3d50f [0151.162] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x77202548 [0151.162] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x517d15b4 [0151.162] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x4f3ad7bd [0151.162] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x305233d8 [0151.162] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x2a34e2b8 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x15723369 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x3b098fd5 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x16f4162e [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x7046ebdf [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x446864f0 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x2048409c [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x1984821b [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x6261f4ec [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x63bd9a9c [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x6dbe310d [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x50c21c21 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x141fc469 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0xae78775 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x72298367 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0xcec166e [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x5fa9218 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x525a0566 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x4b571a1e [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x3b9f4821 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x70816011 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x2058e4a1 [0151.163] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x79aa895 [0151.164] RtlRandomEx (in: Seed=0x7c7fa00 | out: Seed=0x7c7fa00) returned 0x7678514e [0151.174] SetFilePointerEx (in: hFile=0x195c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.175] ReadFile (in: hFile=0x195c, lpBuffer=0x8253870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7c7fa08, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0x7c7fa08*=0x3c00, lpOverlapped=0x0) returned 1 [0151.175] SetFilePointerEx (in: hFile=0x195c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3096008 [0151.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32688 [0151.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0151.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0151.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0151.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0151.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0151.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0151.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0151.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096008) returned 1 [0151.176] WriteFile (in: hFile=0x195c, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7c7fa08, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0x7c7fa08*=0x3c00, lpOverlapped=0x0) returned 1 [0151.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0151.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0151.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e6cc20 [0151.415] SetFilePointerEx (in: hFile=0x195c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.415] WriteFile (in: hFile=0x195c, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x7c7fa74, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0x7c7fa74*=0x120, lpOverlapped=0x0) returned 1 [0151.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0151.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf70) returned 1 [0151.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d88) returned 1 [0151.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cc20) returned 1 [0151.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0151.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0151.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0151.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0151.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ddf018 [0151.476] wcscpy (in: _Dest=0x3ddf018, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3" [0151.476] wcscat (in: _Dest=0x3ddf018, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3.f0dbec" [0151.476] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3.f0dbec", NtPathName=0x7c7f9f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\gznVbmDSEmcsW9HS5Yq.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x2faea0 [0151.516] FlushFileBuffers (hFile=0x195c) returned 1 [0151.517] CloseHandle (hObject=0x195c) returned 1 [0151.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e655f0 [0151.519] wcscpy (in: _Dest=0x3e655f0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0151.519] wcscat (in: _Dest=0x3e655f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" [0151.519] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\f0dbec-readme.txt")) returned 0xffffffff [0151.520] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1968 [0151.548] WriteFile (in: hFile=0x1968, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7c7fa1c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7c7fa1c*=0x70c, lpOverlapped=0x0) returned 1 [0151.550] CloseHandle (hObject=0x1968) returned 1 [0151.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e655f0) returned 1 [0151.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 Thread: id = 1688 os_tid = 0x1468 [0149.409] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\qiubegvuwfl92b.mp3")) returned 0x20 [0149.409] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3", dwFileAttributes=0x20) returned 1 [0151.176] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\qiubegvuwfl92b.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1960 [0151.176] GetFileSizeEx (in: hFile=0x1960, lpFileSize=0x7c3fca8 | out: lpFileSize=0x7c3fca8*=11475) returned 1 [0151.176] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x2ccf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.177] ReadFile (in: hFile=0x1960, lpBuffer=0x7c3fcb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7c3fc90, lpOverlapped=0x0 | out: lpBuffer=0x7c3fcb4*, lpNumberOfBytesRead=0x7c3fc90*=0x4, lpOverlapped=0x0) returned 1 [0151.178] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0151.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0151.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0151.178] NtQuerySystemTime (in: CurrentTime=0x7c3fc30 | out: CurrentTime=0x7c3fc30*=132471540197472000) returned 0x0 [0151.178] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x5c05a149 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x30a8e6da [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x5dbe68e6 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x2a6d5a28 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x29ace99e [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x34100851 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x46790ff8 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x44af3449 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x2bae5298 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x5bccbbab [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0xa6bfa61 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x3f9ffa5 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x434a03de [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x1665211 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x3e462142 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x11ffd06d [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x56df6a0a [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x78349912 [0151.179] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x8fb3a4f [0151.180] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x4735f38b [0151.180] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x2b8a4837 [0151.180] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x74c9ed16 [0151.180] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x4a53232a [0151.181] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x458354c1 [0151.181] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x145d48a4 [0151.181] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x20819098 [0151.181] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x1fb50a2 [0151.181] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x7be292d2 [0151.181] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x2d7ec92a [0151.181] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x23fb04ae [0151.181] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x3bf7b268 [0151.181] RtlRandomEx (in: Seed=0x7c3fc28 | out: Seed=0x7c3fc28) returned 0x113885e0 [0151.197] ReadFile (in: hFile=0x1960, lpBuffer=0x8248458, nNumberOfBytesToRead=0x2cd3, lpNumberOfBytesRead=0x7c3fc24, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0x7c3fc24*=0x2cd3, lpOverlapped=0x0) returned 1 [0151.198] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.198] WriteFile (in: hFile=0x1960, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x2cd3, lpNumberOfBytesWritten=0x7c3fc28, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0x7c3fc28*=0x2cd3, lpOverlapped=0x0) returned 1 [0151.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ab8 [0151.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca300 [0151.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0151.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0151.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0151.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0151.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096008) returned 1 [0151.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066e00 [0151.419] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.419] WriteFile (in: hFile=0x1960, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x7c3fc9c, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0x7c3fc9c*=0x116, lpOverlapped=0x0) returned 1 [0151.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0151.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f80) returned 1 [0151.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0151.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e00) returned 1 [0151.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0151.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0151.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0151.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7c0) returned 1 [0151.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a080 [0151.479] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3" [0151.479] wcscat (in: _Dest=0x3e3a080, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3.f0dbec" [0151.479] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3.f0dbec", NtPathName=0x7c3fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\qIuBEGvUwFl92b.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e24d40 [0151.523] FlushFileBuffers (hFile=0x1960) returned 1 [0151.528] CloseHandle (hObject=0x1960) returned 1 [0151.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e656c8 [0151.529] wcscpy (in: _Dest=0x3e656c8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0151.529] wcscat (in: _Dest=0x3e656c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" [0151.529] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\f0dbec-readme.txt")) returned 0xffffffff [0151.534] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1968 [0151.558] WriteFile (in: hFile=0x1968, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7c3fc44, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7c3fc44*=0x70c, lpOverlapped=0x0) returned 1 [0151.558] CloseHandle (hObject=0x1968) returned 1 [0151.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e656c8) returned 1 [0151.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64438) returned 1 Thread: id = 1689 os_tid = 0x146c [0149.409] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\qjyly6pswwqdwdryhq4.mp3")) returned 0x20 [0149.410] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3", dwFileAttributes=0x20) returned 1 [0151.198] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\qjyly6pswwqdwdryhq4.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1964 [0151.198] GetFileSizeEx (in: hFile=0x1964, lpFileSize=0x7a2fe98 | out: lpFileSize=0x7a2fe98*=94507) returned 1 [0151.198] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x17127, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.199] ReadFile (in: hFile=0x1964, lpBuffer=0x7a2fea4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7a2fe80, lpOverlapped=0x0 | out: lpBuffer=0x7a2fea4*, lpNumberOfBytesRead=0x7a2fe80*=0x4, lpOverlapped=0x0) returned 1 [0151.200] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0151.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0151.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0151.200] NtQuerySystemTime (in: CurrentTime=0x7a2fe20 | out: CurrentTime=0x7a2fe20*=132471540197784000) returned 0x0 [0151.200] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x6b1b56a1 [0151.200] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x7859ab82 [0151.200] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x29af4de7 [0151.200] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x5bf15e81 [0151.200] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x224f7c9a [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x79322133 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0xc0f3da1 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x69ff273a [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x490a214c [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x44cbba1e [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x2cc7bf47 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x11391fac [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x86790da [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x24ddc0e1 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x168e44eb [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x7a79aa1c [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x4f75701 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x4c4c19d7 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x2150c17a [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x3e5ee1ef [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x5e55e634 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x65d09c23 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x45d4d5ba [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x7576901a [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x3ef9d5e1 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x2fc3742 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x4895746b [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x7cab20bd [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x58e77ab9 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x49fbc5a9 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0x73f323d5 [0151.201] RtlRandomEx (in: Seed=0x7a2fe18 | out: Seed=0x7a2fe18) returned 0xc4d3c6f [0151.210] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.210] ReadFile (in: hFile=0x1964, lpBuffer=0x825ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a2fe20, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0x7a2fe20*=0x3c00, lpOverlapped=0x0) returned 1 [0151.211] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30963b0 [0151.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0151.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0151.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0151.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8262890 [0151.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0151.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0151.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0151.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0151.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30963b0) returned 1 [0151.211] WriteFile (in: hFile=0x1964, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a2fe20, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0x7a2fe20*=0x3c00, lpOverlapped=0x0) returned 1 [0151.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0151.421] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.421] ReadFile (in: hFile=0x1964, lpBuffer=0x825ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a2fe20, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0x7a2fe20*=0x3c00, lpOverlapped=0x0) returned 1 [0151.421] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3096008 [0151.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32688 [0151.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0151.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0151.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8262890 [0151.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0151.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0151.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0151.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0151.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096008) returned 1 [0151.423] WriteFile (in: hFile=0x1964, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a2fe20, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0x7a2fe20*=0x3c00, lpOverlapped=0x0) returned 1 [0151.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0151.428] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x1352b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.428] ReadFile (in: hFile=0x1964, lpBuffer=0x825ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a2fe20, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0x7a2fe20*=0x3c00, lpOverlapped=0x0) returned 1 [0151.428] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x1352b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3096008 [0151.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32688 [0151.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0151.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0151.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8262890 [0151.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0151.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8000 [0151.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc8000) returned 1 [0151.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0151.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096008) returned 1 [0151.429] WriteFile (in: hFile=0x1964, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a2fe20, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0x7a2fe20*=0x3c00, lpOverlapped=0x0) returned 1 [0151.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0151.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c810 [0151.432] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.432] WriteFile (in: hFile=0x1964, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x7a2fe8c, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0x7a2fe8c*=0x160, lpOverlapped=0x0) returned 1 [0151.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0151.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095ab0) returned 1 [0151.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0151.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096008) returned 1 [0151.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c810) returned 1 [0151.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0151.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0151.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0151.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8020ab0 [0151.484] wcscpy (in: _Dest=0x8020ab0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3" [0151.484] wcscat (in: _Dest=0x8020ab0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3.f0dbec" [0151.485] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3.f0dbec", NtPathName=0x7a2fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\QJYLY6psWWQdwdryhq4.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x2f97f0 [0151.540] FlushFileBuffers (hFile=0x1964) returned 1 [0151.543] CloseHandle (hObject=0x1964) returned 1 [0151.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e65a28 [0151.544] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0151.544] wcscat (in: _Dest=0x3e65a28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" [0151.544] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\f0dbec-readme.txt")) returned 0x20 [0151.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0151.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 1690 os_tid = 0x1470 [0149.410] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\yp8fsc3sxcb.m4a")) returned 0x20 [0149.410] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a", dwFileAttributes=0x20) returned 1 [0151.212] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\yp8fsc3sxcb.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1968 [0151.212] GetFileSizeEx (in: hFile=0x1968, lpFileSize=0x7e8fbd8 | out: lpFileSize=0x7e8fbd8*=44335) returned 1 [0151.212] SetFilePointerEx (in: hFile=0x1968, liDistanceToMove=0xad2b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.212] ReadFile (in: hFile=0x1968, lpBuffer=0x7e8fbe4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e8fbc0, lpOverlapped=0x0 | out: lpBuffer=0x7e8fbe4*, lpNumberOfBytesRead=0x7e8fbc0*=0x4, lpOverlapped=0x0) returned 1 [0151.214] SetFilePointerEx (in: hFile=0x1968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0151.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0151.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0151.214] NtQuerySystemTime (in: CurrentTime=0x7e8fb60 | out: CurrentTime=0x7e8fb60*=132471540197940000) returned 0x0 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x14019e39 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x64b75eba [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x664eebe5 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x11d792a2 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x39eed9e4 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x4076f523 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x3b2331f4 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x3a392cda [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x65c3e069 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x45347910 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x25337261 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x2691a342 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x1b036a06 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x5d7ba028 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x26edaa70 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x9075aa5 [0151.214] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x7a6e93d9 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x615e8414 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x2c308269 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x5052a3e5 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x524bc91e [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x6c454523 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x75a0b657 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x59fdc588 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x40baaed1 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x3e48d878 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x5c5ddefb [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x48a08cca [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x1fbd60a3 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x53d0e165 [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x26899a7a [0151.215] RtlRandomEx (in: Seed=0x7e8fb58 | out: Seed=0x7e8fb58) returned 0x3c67680d [0151.225] SetFilePointerEx (in: hFile=0x1968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.225] ReadFile (in: hFile=0x1968, lpBuffer=0x8266498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7e8fb60, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0x7e8fb60*=0x3c00, lpOverlapped=0x0) returned 1 [0151.226] SetFilePointerEx (in: hFile=0x1968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30963b0 [0151.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0151.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0151.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0151.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0151.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0151.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0151.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0151.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0151.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30963b0) returned 1 [0151.226] WriteFile (in: hFile=0x1968, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7e8fb60, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0x7e8fb60*=0x3c00, lpOverlapped=0x0) returned 1 [0151.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0151.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0151.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77d38 [0151.425] SetFilePointerEx (in: hFile=0x1968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.425] WriteFile (in: hFile=0x1968, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x7e8fbcc, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x7e8fbcc*=0x110, lpOverlapped=0x0) returned 1 [0151.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0151.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c58) returned 1 [0151.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0151.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0151.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0151.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0151.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7f8) returned 1 [0151.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0151.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0151.480] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a" [0151.480] wcscat (in: _Dest=0x2c8648, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a.f0dbec" [0151.480] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a.f0dbec", NtPathName=0x7e8fb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YP8FSc3Sxcb.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0151.530] FlushFileBuffers (hFile=0x1968) returned 1 [0151.532] CloseHandle (hObject=0x1968) returned 1 [0151.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e65518 [0151.533] wcscpy (in: _Dest=0x3e65518, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0151.533] wcscat (in: _Dest=0x3e65518, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" [0151.533] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\f0dbec-readme.txt")) returned 0x20 [0151.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65518) returned 1 [0151.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b558) returned 1 Thread: id = 1691 os_tid = 0xac4 [0149.411] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\yxedio7xbtze.m4a")) returned 0x20 [0149.411] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a", dwFileAttributes=0x20) returned 1 [0151.227] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\yxedio7xbtze.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x196c [0151.227] GetFileSizeEx (in: hFile=0x196c, lpFileSize=0x773fde0 | out: lpFileSize=0x773fde0*=30912) returned 1 [0151.227] SetFilePointerEx (in: hFile=0x196c, liDistanceToMove=0x78bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.227] ReadFile (in: hFile=0x196c, lpBuffer=0x773fdec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x773fdc8, lpOverlapped=0x0 | out: lpBuffer=0x773fdec*, lpNumberOfBytesRead=0x773fdc8*=0x4, lpOverlapped=0x0) returned 1 [0151.229] SetFilePointerEx (in: hFile=0x196c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0151.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0151.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0151.229] NtQuerySystemTime (in: CurrentTime=0x773fd68 | out: CurrentTime=0x773fd68*=132471540198096000) returned 0x0 [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x11c08097 [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x588b3d61 [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x51c99c6f [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x73c86f22 [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x5d49a861 [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x70d228e4 [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0xdf9edd9 [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x6d09c128 [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x2c281c27 [0151.229] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x1708f8a6 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x2809a1d6 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x2a0e660d [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x57867c93 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x62c3a5c7 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x728bea76 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x7a096619 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x6e3ff32 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x520c4452 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x4a441d1f [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x1039b3a0 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x9eb7021 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x4d721d70 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x4a11acee [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x5a30799e [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x2897729b [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x3e66aba1 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x4489cc5e [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x460ff3bf [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x77a2c344 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0xa4121a1 [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x5d275c1f [0151.230] RtlRandomEx (in: Seed=0x773fd60 | out: Seed=0x773fd60) returned 0x5df5d00e [0151.240] SetFilePointerEx (in: hFile=0x196c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.240] ReadFile (in: hFile=0x196c, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x773fd68, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0x773fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0151.240] SetFilePointerEx (in: hFile=0x196c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30963b0 [0151.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0151.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0151.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0151.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0151.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0151.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0151.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0151.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0151.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30963b0) returned 1 [0151.241] WriteFile (in: hFile=0x196c, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x773fd68, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0x773fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0151.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0151.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0151.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77e18 [0151.431] SetFilePointerEx (in: hFile=0x196c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.431] WriteFile (in: hFile=0x196c, lpBuffer=0x3d56f00*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x773fdd4, lpOverlapped=0x0 | out: lpBuffer=0x3d56f00*, lpNumberOfBytesWritten=0x773fdd4*=0x112, lpOverlapped=0x0) returned 1 [0151.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 [0151.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77f68) returned 1 [0151.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc8000) returned 1 [0151.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0151.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0151.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0151.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0151.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0151.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8488 [0151.482] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a" [0151.482] wcscat (in: _Dest=0x2c8488, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a.f0dbec" [0151.482] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a.f0dbec", NtPathName=0x773fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\YXeDiO7XBtzE.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadc28 [0151.535] FlushFileBuffers (hFile=0x196c) returned 1 [0151.536] CloseHandle (hObject=0x196c) returned 1 [0151.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e65950 [0151.538] wcscpy (in: _Dest=0x3e65950, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\" [0151.538] wcscat (in: _Dest=0x3e65950, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" [0151.538] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\cvWrtGF-hYKsT0u\\IvTKHR2DOCxR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\cvwrtgf-hykst0u\\ivtkhr2docxr\\f0dbec-readme.txt")) returned 0x20 [0151.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65950) returned 1 [0151.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64288) returned 1 Thread: id = 1692 os_tid = 0x520 [0149.411] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 0x20 [0149.411] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0149.411] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.411] GetLastError () returned 0x5 [0149.412] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0149.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 1693 os_tid = 0x1474 [0149.413] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 0x20 [0149.413] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0149.413] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.413] GetLastError () returned 0x5 [0149.413] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0149.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e08) returned 1 Thread: id = 1694 os_tid = 0xb0 [0149.415] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 0x20 [0149.415] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0149.415] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.415] GetLastError () returned 0x5 [0149.415] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0149.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5288) returned 1 Thread: id = 1695 os_tid = 0x1478 [0149.416] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 0x20 [0149.417] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0149.417] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.417] GetLastError () returned 0x5 [0149.417] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0149.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5808) returned 1 Thread: id = 1696 os_tid = 0x2c0 [0149.418] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 0x20 [0149.418] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0149.419] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.419] GetLastError () returned 0x5 [0149.419] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0149.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5308) returned 1 Thread: id = 1697 os_tid = 0x414 [0149.420] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 0x20 [0149.420] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0149.420] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.421] GetLastError () returned 0x5 [0149.421] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0149.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4d08) returned 1 Thread: id = 1698 os_tid = 0xb08 [0149.422] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 0x20 [0149.422] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0149.422] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.422] GetLastError () returned 0x5 [0149.422] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0149.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5988) returned 1 Thread: id = 1699 os_tid = 0x7bc [0149.424] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 0x20 [0149.424] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0149.424] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.424] GetLastError () returned 0x5 [0149.424] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0149.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 1700 os_tid = 0xfc8 [0149.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d5af8 [0149.426] wcscpy (in: _Dest=0x81d5af8, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0149.426] wcscat (in: _Dest=0x81d5af8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0149.426] wcscat (in: _Dest=0x81d5af8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" [0149.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0149.426] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099590 [0149.426] wcscmp (_String1=".", _String2=".") returned 0 [0149.426] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.426] wcscmp (_String1="..", _String2=".") returned 1 [0149.426] wcscmp (_String1="..", _String2="..") returned 0 [0149.426] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0149.426] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0149.426] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0149.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80207e0 [0149.427] wcscpy (in: _Dest=0x80207e0, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0149.427] wcscat (in: _Dest=0x80207e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0149.427] wcscat (in: _Dest=0x80207e0, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0151.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80207e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0151.740] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0151.740] FindClose (in: hFindFile=0x8099590 | out: hFindFile=0x8099590) returned 1 [0151.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0151.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5af8) returned 1 [0151.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 1701 os_tid = 0x16a0 [0149.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6740 [0149.427] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0149.427] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\" [0149.427] wcscat (in: _Dest=0x2ff6740, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*" [0149.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0149.427] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0149.428] wcscmp (_String1=".", _String2=".") returned 0 [0149.428] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.428] wcscmp (_String1="..", _String2=".") returned 1 [0149.428] wcscmp (_String1="..", _String2="..") returned 0 [0149.428] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.428] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0149.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0149.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 [0149.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 1702 os_tid = 0x16a4 [0149.430] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\baseline.versions")) returned 0x2020 [0151.279] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions", dwFileAttributes=0x20) returned 1 [0151.982] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\baseline.versions"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c90 [0151.982] GetFileSizeEx (in: hFile=0x1c90, lpFileSize=0x8b0fcf0 | out: lpFileSize=0x8b0fcf0*=53) returned 1 [0151.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0151.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0151.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0151.983] NtQuerySystemTime (in: CurrentTime=0x8b0fc78 | out: CurrentTime=0x8b0fc78*=132471540205584000) returned 0x0 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x5755053f [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x37a3bf73 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x6b56d1f0 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x657dd033 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x6d65114f [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x3e64b3c3 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x2e3760fe [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x652e04ff [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x2291bff4 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x73e53cd4 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x17e2dfbf [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0xe99a8cf [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x3c65e2fb [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0xee4c734 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x1050b8d9 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x759e3a4c [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x7778a36c [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x667e228d [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x3c15dc3 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x6b3e5214 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0xe3e57b8 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x9c09761 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x5fad108e [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x2629f6c9 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x41ade5cb [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x4adde527 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x5a68915c [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x14d59931 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x7813e862 [0151.983] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x6ffc8ebc [0151.984] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x469c779d [0151.984] RtlRandomEx (in: Seed=0x8b0fc70 | out: Seed=0x8b0fc70) returned 0x401b2de1 [0152.004] ReadFile (in: hFile=0x1c90, lpBuffer=0x825ec88, nNumberOfBytesToRead=0x35, lpNumberOfBytesRead=0x8b0fc6c, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0x8b0fc6c*=0x35, lpOverlapped=0x0) returned 1 [0152.006] SetFilePointerEx (in: hFile=0x1c90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.006] WriteFile (in: hFile=0x1c90, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0x8b0fc70, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0x8b0fc70*=0x35, lpOverlapped=0x0) returned 1 [0153.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1108 [0153.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0eb0 [0153.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0eb0) returned 1 [0153.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0153.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0153.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0153.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d048) returned 1 [0153.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77da8 [0153.710] SetFilePointerEx (in: hFile=0x1c90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.711] WriteFile (in: hFile=0x1c90, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x8b0fce4, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0x8b0fce4*=0x114, lpOverlapped=0x0) returned 1 [0153.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0153.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0153.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0eb0) returned 1 [0153.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77da8) returned 1 [0153.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1108) returned 1 [0153.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0153.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0153.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0153.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6f28 [0153.933] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" [0153.934] wcscat (in: _Dest=0x2ff6f28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions.f0dbec" [0153.934] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions.f0dbec", NtPathName=0x8b0fc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0153.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1c0b8 [0156.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c0b8) returned 1 [0156.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060d28) returned 1 [0156.978] NtQueryInformationFile (in: FileHandle=0x1c90, IoStatusBlock=0x8b0fc40, FileInformation=0x8b0fc48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8b0fc40, FileInformation=0x8b0fc48) returned 0x0 [0156.978] NtSetInformationFile (FileHandle=0x1c90, IoStatusBlock=0x8b0fc40, FileInformation=0x8b0fc48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0157.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 [0157.010] FlushFileBuffers (hFile=0x1c90) returned 1 [0157.017] CloseHandle (hObject=0x1c90) returned 1 [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81daa38 [0157.034] wcscpy (in: _Dest=0x81daa38, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0157.034] wcscat (in: _Dest=0x81daa38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt" [0157.034] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\f0dbec-readme.txt")) returned 0xffffffff [0157.034] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f88 [0157.049] WriteFile (in: hFile=0x1f88, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8b0fc8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8b0fc8c*=0x70c, lpOverlapped=0x0) returned 1 [0158.908] CloseHandle (hObject=0x1f88) returned 1 [0158.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa38) returned 1 [0158.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35ba88) returned 1 Thread: id = 1703 os_tid = 0x16a8 [0149.432] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklist.dynamic")) returned 0x2020 [0151.279] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic", dwFileAttributes=0x20) returned 1 [0158.911] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklist.dynamic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f88 [0158.912] GetFileSizeEx (in: hFile=0x1f88, lpFileSize=0x5e1f910 | out: lpFileSize=0x5e1f910*=2837) returned 1 [0158.912] SetFilePointerEx (in: hFile=0x1f88, liDistanceToMove=0xb11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.912] ReadFile (in: hFile=0x1f88, lpBuffer=0x5e1f91c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5e1f8f8, lpOverlapped=0x0 | out: lpBuffer=0x5e1f91c*, lpNumberOfBytesRead=0x5e1f8f8*=0x4, lpOverlapped=0x0) returned 1 [0158.938] SetFilePointerEx (in: hFile=0x1f88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0158.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0158.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca68 [0158.938] NtQuerySystemTime (in: CurrentTime=0x5e1f898 | out: CurrentTime=0x5e1f898*=132471540271728000) returned 0x0 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x9b7aeeb [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x584e3002 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x62c20186 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x2ce649b9 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x48c50cdc [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x20048352 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x7e340234 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x2057d80a [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x3ed19d14 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x133fd49c [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x39d2cf0b [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x6ac438c0 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x61d29405 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x6e846e56 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x7759dbd9 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x4e835b47 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x79dc32be [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x1e7516ea [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x39c5e467 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x296b3ec4 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x7015f07d [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x5e3f8a9e [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x1ad30a7 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0xa1e206b [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x7b9a5bc9 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x29ebff20 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x1e7516ea [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x70ac4175 [0158.939] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x398ab23f [0158.940] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x2c24b04 [0158.940] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x486b74e2 [0158.940] RtlRandomEx (in: Seed=0x5e1f890 | out: Seed=0x5e1f890) returned 0x515ab67 [0158.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0158.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0158.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0158.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0158.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0158.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0158.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50d58 [0158.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0158.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0158.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0158.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0158.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0158.962] ReadFile (in: hFile=0x1f88, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0xb15, lpNumberOfBytesRead=0x5e1f88c, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0x5e1f88c*=0xb15, lpOverlapped=0x0) returned 1 [0158.962] SetFilePointerEx (in: hFile=0x1f88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.962] WriteFile (in: hFile=0x1f88, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0xb15, lpNumberOfBytesWritten=0x5e1f890, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x5e1f890*=0xb15, lpOverlapped=0x0) returned 1 [0158.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca68 [0158.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0158.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0158.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0158.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0158.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0158.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50d58) returned 1 [0158.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77e18 [0158.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e50d58 [0158.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0158.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0158.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0158.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77d38 [0158.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0158.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0158.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0158.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0158.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e50d58) returned 1 [0158.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d575f0 [0158.974] SetFilePointerEx (in: hFile=0x1f88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.974] WriteFile (in: hFile=0x1f88, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x5e1f904, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0x5e1f904*=0x114, lpOverlapped=0x0) returned 1 [0158.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0158.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0158.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0158.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0158.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0158.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0158.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0158.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0158.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d409b8 [0158.989] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" [0158.989] wcscat (in: _Dest=0x3d409b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic.f0dbec" [0158.989] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic.f0dbec", NtPathName=0x5e1f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b148 [0158.989] NtSetInformationFile (FileHandle=0x1f88, IoStatusBlock=0x5e1f890, FileInformation=0x3e1b148, Length=0xc6, FileInformationClass=0xa) returned 0x0 [0158.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b148) returned 1 [0158.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81cf6a0) returned 1 [0158.996] NtQueryInformationFile (in: FileHandle=0x1f88, IoStatusBlock=0x5e1f860, FileInformation=0x5e1f868, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5e1f860, FileInformation=0x5e1f868) returned 0x0 [0158.996] NtSetInformationFile (FileHandle=0x1f88, IoStatusBlock=0x5e1f860, FileInformation=0x5e1f868, Length=0x28, FileInformationClass=0x4) returned 0x0 [0158.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 [0158.999] FlushFileBuffers (hFile=0x1f88) returned 1 [0159.000] CloseHandle (hObject=0x1f88) returned 1 [0159.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35ba88 [0159.002] wcscpy (in: _Dest=0x35ba88, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0159.002] wcscat (in: _Dest=0x35ba88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt" [0159.002] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\f0dbec-readme.txt")) returned 0x2020 [0159.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35ba88) returned 1 [0159.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 1704 os_tid = 0x16ac [0149.434] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklisted.certs")) returned 0x2020 [0150.412] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs", dwFileAttributes=0x20) returned 1 [0152.095] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklisted.certs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x180c [0157.342] GetFileSizeEx (in: hFile=0x180c, lpFileSize=0xb4bf8e0 | out: lpFileSize=0xb4bf8e0*=18) returned 1 [0157.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0157.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0157.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0157.342] NtQuerySystemTime (in: CurrentTime=0xb4bf868 | out: CurrentTime=0xb4bf868*=132471540258468000) returned 0x0 [0157.342] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x1b9555e5 [0157.342] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x6950594f [0157.342] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x3a29d133 [0157.342] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x6ddf647c [0157.342] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x329ce851 [0157.342] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x2759ce34 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x42f4c763 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0xb1a0f20 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x6012f697 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x5eb75dfb [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0xf818639 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x1cecc91b [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x4335b3fc [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x36a1ba84 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x7ac394ba [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x431a36 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x3c424807 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x6bbb7474 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x4afac9ef [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x4f6d0ee3 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x7fbf8134 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x1b7bd407 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x2a56f4ac [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x690f4a25 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0xd680f7e [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x4a809f93 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x1fef390d [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x25c2c46e [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x24eb4ea9 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x6c021081 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x20530296 [0157.343] RtlRandomEx (in: Seed=0xb4bf860 | out: Seed=0xb4bf860) returned 0x331c23cb [0157.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0157.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0157.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8320930 [0158.361] ReadFile (in: hFile=0x180c, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x12, lpNumberOfBytesRead=0xb4bf85c, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xb4bf85c*=0x12, lpOverlapped=0x0) returned 1 [0158.366] SetFilePointerEx (in: hFile=0x180c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.366] WriteFile (in: hFile=0x180c, lpBuffer=0x8320930*, nNumberOfBytesToWrite=0x12, lpNumberOfBytesWritten=0xb4bf860, lpOverlapped=0x0 | out: lpBuffer=0x8320930*, lpNumberOfBytesWritten=0xb4bf860*=0x12, lpOverlapped=0x0) returned 1 [0158.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0158.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0158.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0158.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320930) returned 1 [0158.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0158.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b4d8) returned 1 [0158.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5730) returned 1 [0158.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77c58 [0158.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5730 [0158.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b4d8 [0158.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0158.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0158.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77de0 [0158.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0158.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca68 [0158.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0158.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b4d8) returned 1 [0158.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5730) returned 1 [0158.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d57278 [0158.762] SetFilePointerEx (in: hFile=0x180c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.762] WriteFile (in: hFile=0x180c, lpBuffer=0x3d57278*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xb4bf8d4, lpOverlapped=0x0 | out: lpBuffer=0x3d57278*, lpNumberOfBytesWritten=0xb4bf8d4*=0x114, lpOverlapped=0x0) returned 1 [0158.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 [0158.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77de0) returned 1 [0158.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0158.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c58) returned 1 [0158.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0158.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0158.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0158.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0158.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d403f8 [0158.820] wcscpy (in: _Dest=0x3d403f8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" [0158.820] wcscat (in: _Dest=0x3d403f8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs.f0dbec" [0158.820] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs.f0dbec", NtPathName=0xb4bf858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b148 [0158.820] NtSetInformationFile (FileHandle=0x180c, IoStatusBlock=0xb4bf860, FileInformation=0x3e1b148, Length=0xc6, FileInformationClass=0xa) returned 0x0 [0158.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b148) returned 1 [0158.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b0b80) returned 1 [0158.885] NtQueryInformationFile (in: FileHandle=0x180c, IoStatusBlock=0xb4bf830, FileInformation=0xb4bf838, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb4bf830, FileInformation=0xb4bf838) returned 0x0 [0158.886] NtSetInformationFile (FileHandle=0x180c, IoStatusBlock=0xb4bf830, FileInformation=0xb4bf838, Length=0x28, FileInformationClass=0x4) returned 0x0 [0158.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d403f8) returned 1 [0158.888] FlushFileBuffers (hFile=0x180c) returned 1 [0158.890] CloseHandle (hObject=0x180c) returned 1 [0158.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da148 [0158.891] wcscpy (in: _Dest=0x81da148, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0158.891] wcscat (in: _Dest=0x81da148, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt" [0158.891] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\f0dbec-readme.txt")) returned 0x2020 [0158.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da148) returned 1 [0158.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c798) returned 1 Thread: id = 1705 os_tid = 0x16b0 [0149.435] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\update.timestamp")) returned 0x2020 [0150.990] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp", dwFileAttributes=0x20) returned 1 [0152.095] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\update.timestamp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c90 [0157.352] GetFileSizeEx (in: hFile=0x1c90, lpFileSize=0xb72fde0 | out: lpFileSize=0xb72fde0*=1) returned 1 [0157.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0157.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0157.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0157.352] NtQuerySystemTime (in: CurrentTime=0xb72fd68 | out: CurrentTime=0xb72fd68*=132471540258468000) returned 0x0 [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x16c15210 [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x6871c7d5 [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x46b3c4f8 [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x412dfcd5 [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x4da8fe2f [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x630973af [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x615e90f9 [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x448aaf4e [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x49d128e0 [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x49e1b83c [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x76d67b9d [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x49e1b83c [0157.352] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x1f31975c [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x50a079b6 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x3fa1e79 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x1ad30a7 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x1d977d5a [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x4a08c735 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x12e6e44b [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x27fff2bb [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x207c8453 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x6b9e9f32 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x7e340234 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x7ac394ba [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x593f67dc [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x6f7a0ab8 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x4e210b81 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0xdba43ce [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x39d2cf0b [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x77b39f95 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x4e210b81 [0157.353] RtlRandomEx (in: Seed=0xb72fd60 | out: Seed=0xb72fd60) returned 0x5d942134 [0157.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0157.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8360930 [0158.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8364538 [0158.372] ReadFile (in: hFile=0x1c90, lpBuffer=0x8360930, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb72fd5c, lpOverlapped=0x0 | out: lpBuffer=0x8360930*, lpNumberOfBytesRead=0xb72fd5c*=0x1, lpOverlapped=0x0) returned 1 [0158.373] SetFilePointerEx (in: hFile=0x1c90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.373] WriteFile (in: hFile=0x1c90, lpBuffer=0x8364538*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0xb72fd60, lpOverlapped=0x0 | out: lpBuffer=0x8364538*, lpNumberOfBytesWritten=0xb72fd60*=0x1, lpOverlapped=0x0) returned 1 [0158.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca68 [0158.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0158.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0158.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8364538) returned 1 [0158.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8360930) returned 1 [0158.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0158.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4b18) returned 1 [0158.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77e18 [0158.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4b18 [0158.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0158.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0158.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0158.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77d38 [0158.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0158.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0158.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0158.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0158.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4b18) returned 1 [0158.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d575f0 [0158.774] SetFilePointerEx (in: hFile=0x1c90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.774] WriteFile (in: hFile=0x1c90, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xb72fdd4, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0xb72fdd4*=0x112, lpOverlapped=0x0) returned 1 [0158.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0158.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0158.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0158.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0158.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0158.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0158.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0158.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0158.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1870 [0158.825] wcscpy (in: _Dest=0x81e1870, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" [0158.826] wcscat (in: _Dest=0x81e1870, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp.f0dbec" [0158.826] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp.f0dbec", NtPathName=0xb72fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c258 [0158.826] NtSetInformationFile (FileHandle=0x1c90, IoStatusBlock=0xb72fd60, FileInformation=0x3e1c258, Length=0xc4, FileInformationClass=0xa) returned 0x0 [0158.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c258) returned 1 [0158.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b02e0) returned 1 [0158.876] NtQueryInformationFile (in: FileHandle=0x1c90, IoStatusBlock=0xb72fd30, FileInformation=0xb72fd38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb72fd30, FileInformation=0xb72fd38) returned 0x0 [0158.876] NtSetInformationFile (FileHandle=0x1c90, IoStatusBlock=0xb72fd30, FileInformation=0xb72fd38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0158.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1870) returned 1 [0158.881] FlushFileBuffers (hFile=0x1c90) returned 1 [0158.884] CloseHandle (hObject=0x1c90) returned 1 [0158.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da1f8 [0158.885] wcscpy (in: _Dest=0x81da1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0158.885] wcscat (in: _Dest=0x81da1f8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt" [0158.885] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\f0dbec-readme.txt")) returned 0x2020 [0158.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da1f8) returned 1 [0158.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187418) returned 1 Thread: id = 1706 os_tid = 0x1010 [0149.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32688 [0149.439] wcscpy (in: _Dest=0x3f32688, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" [0149.439] wcscat (in: _Dest=0x3f32688, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\" [0149.439] wcscat (in: _Dest=0x3f32688, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*" [0149.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0149.440] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0149.440] wcscmp (_String1=".", _String2=".") returned 0 [0149.440] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.440] wcscmp (_String1="..", _String2=".") returned 1 [0149.440] wcscmp (_String1="..", _String2="..") returned 0 [0149.440] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0149.440] wcscmp (_String1="en-US", _String2=".") returned 1 [0149.440] wcscmp (_String1="en-US", _String2="..") returned 1 [0149.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc3d08 [0149.440] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" [0149.440] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\" [0149.440] wcscat (in: _Dest=0x3dc3d08, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0151.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0151.036] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0151.036] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0151.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0151.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0151.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39f58) returned 1 Thread: id = 1707 os_tid = 0x16b4 [0149.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf")) returned 0x20 [0150.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF", dwFileAttributes=0x20) returned 0 [0150.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.427] GetLastError () returned 0x5 [0150.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF", dwFileAttributes=0x20) returned 0 [0150.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 Thread: id = 1708 os_tid = 0x1018 [0149.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf")) returned 0x20 [0150.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF", dwFileAttributes=0x20) returned 0 [0150.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.426] GetLastError () returned 0x5 [0150.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF", dwFileAttributes=0x20) returned 0 [0150.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cec0) returned 1 Thread: id = 1709 os_tid = 0x16b8 [0149.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf")) returned 0x20 [0150.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF", dwFileAttributes=0x20) returned 0 [0150.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.424] GetLastError () returned 0x5 [0150.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF", dwFileAttributes=0x20) returned 0 [0150.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 Thread: id = 1710 os_tid = 0x16bc [0149.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf")) returned 0x20 [0150.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF", dwFileAttributes=0x20) returned 0 [0150.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.858] GetLastError () returned 0x5 [0150.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF", dwFileAttributes=0x20) returned 0 [0150.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cff0) returned 1 Thread: id = 1711 os_tid = 0x16c0 [0149.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf")) returned 0x20 [0150.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF", dwFileAttributes=0x20) returned 0 [0150.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.857] GetLastError () returned 0x5 [0150.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF", dwFileAttributes=0x20) returned 0 [0150.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d088) returned 1 Thread: id = 1712 os_tid = 0x1030 [0149.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf")) returned 0x20 [0150.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF", dwFileAttributes=0x20) returned 0 [0150.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.856] GetLastError () returned 0x5 [0150.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF", dwFileAttributes=0x20) returned 0 [0150.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 Thread: id = 1713 os_tid = 0x1034 [0149.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf")) returned 0x20 [0150.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF", dwFileAttributes=0x20) returned 0 [0150.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.854] GetLastError () returned 0x5 [0150.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF", dwFileAttributes=0x20) returned 0 [0150.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d1b8) returned 1 Thread: id = 1714 os_tid = 0x1038 [0149.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf")) returned 0x20 [0150.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF", dwFileAttributes=0x20) returned 0 [0150.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.853] GetLastError () returned 0x5 [0150.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF", dwFileAttributes=0x20) returned 0 [0150.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d250) returned 1 Thread: id = 1715 os_tid = 0x103c [0149.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf")) returned 0x20 [0150.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF", dwFileAttributes=0x20) returned 0 [0150.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.852] GetLastError () returned 0x5 [0150.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF", dwFileAttributes=0x20) returned 0 [0150.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d2e8) returned 1 Thread: id = 1716 os_tid = 0x1040 [0149.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf")) returned 0x20 [0150.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF", dwFileAttributes=0x20) returned 0 [0150.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.850] GetLastError () returned 0x5 [0150.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF", dwFileAttributes=0x20) returned 0 [0150.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d380) returned 1 Thread: id = 1717 os_tid = 0x1044 [0149.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf")) returned 0x20 [0150.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF", dwFileAttributes=0x20) returned 0 [0150.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.849] GetLastError () returned 0x5 [0150.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF", dwFileAttributes=0x20) returned 0 [0150.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d418) returned 1 Thread: id = 1718 os_tid = 0x1048 [0149.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf")) returned 0x20 [0150.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF", dwFileAttributes=0x20) returned 0 [0150.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.848] GetLastError () returned 0x5 [0150.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF", dwFileAttributes=0x20) returned 0 [0150.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d4b0) returned 1 Thread: id = 1719 os_tid = 0x104c [0149.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf")) returned 0x20 [0150.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF", dwFileAttributes=0x20) returned 0 [0150.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.847] GetLastError () returned 0x5 [0150.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF", dwFileAttributes=0x20) returned 0 [0150.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d548) returned 1 Thread: id = 1720 os_tid = 0x1050 [0149.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf")) returned 0x20 [0150.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF", dwFileAttributes=0x20) returned 0 [0150.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.846] GetLastError () returned 0x5 [0150.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF", dwFileAttributes=0x20) returned 0 [0150.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d5e0) returned 1 Thread: id = 1721 os_tid = 0x1054 [0149.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf")) returned 0x20 [0150.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF", dwFileAttributes=0x20) returned 0 [0150.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.844] GetLastError () returned 0x5 [0150.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF", dwFileAttributes=0x20) returned 0 [0150.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d678) returned 1 Thread: id = 1722 os_tid = 0x1058 [0149.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf")) returned 0x20 [0150.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF", dwFileAttributes=0x20) returned 0 [0150.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.843] GetLastError () returned 0x5 [0150.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF", dwFileAttributes=0x20) returned 0 [0150.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d710) returned 1 Thread: id = 1723 os_tid = 0x105c [0149.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf")) returned 0x20 [0150.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF", dwFileAttributes=0x20) returned 0 [0150.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.842] GetLastError () returned 0x5 [0150.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF", dwFileAttributes=0x20) returned 0 [0150.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d7a8) returned 1 Thread: id = 1724 os_tid = 0x16c4 [0149.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf")) returned 0x20 [0150.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF", dwFileAttributes=0x20) returned 0 [0150.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.840] GetLastError () returned 0x5 [0150.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF", dwFileAttributes=0x20) returned 0 [0150.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d840) returned 1 Thread: id = 1725 os_tid = 0x16c8 [0149.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf")) returned 0x20 [0150.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF", dwFileAttributes=0x20) returned 0 [0150.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.839] GetLastError () returned 0x5 [0150.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF", dwFileAttributes=0x20) returned 0 [0150.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d8d8) returned 1 Thread: id = 1726 os_tid = 0x1070 [0149.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf")) returned 0x20 [0150.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF", dwFileAttributes=0x20) returned 0 [0150.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.838] GetLastError () returned 0x5 [0150.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF", dwFileAttributes=0x20) returned 0 [0150.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d970) returned 1 Thread: id = 1727 os_tid = 0x1074 [0149.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf")) returned 0x20 [0150.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF", dwFileAttributes=0x20) returned 0 [0150.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.837] GetLastError () returned 0x5 [0150.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF", dwFileAttributes=0x20) returned 0 [0150.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3da08) returned 1 Thread: id = 1728 os_tid = 0x1078 [0149.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf")) returned 0x20 [0149.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF", dwFileAttributes=0x20) returned 0 [0149.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.747] GetLastError () returned 0x5 [0149.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF", dwFileAttributes=0x20) returned 0 [0149.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3daa0) returned 1 Thread: id = 1729 os_tid = 0x107c [0149.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf")) returned 0x20 [0149.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF", dwFileAttributes=0x20) returned 0 [0149.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.749] GetLastError () returned 0x5 [0149.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF", dwFileAttributes=0x20) returned 0 [0149.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 Thread: id = 1730 os_tid = 0x1080 [0149.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf")) returned 0x20 [0150.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF", dwFileAttributes=0x20) returned 0 [0150.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.835] GetLastError () returned 0x5 [0150.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF", dwFileAttributes=0x20) returned 0 [0150.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dbd0) returned 1 Thread: id = 1731 os_tid = 0x1088 [0149.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif")) returned 0x20 [0149.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", dwFileAttributes=0x20) returned 0 [0149.755] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.755] GetLastError () returned 0x5 [0149.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", dwFileAttributes=0x20) returned 0 [0149.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c708) returned 1 Thread: id = 1732 os_tid = 0x108c [0149.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif")) returned 0x20 [0149.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", dwFileAttributes=0x20) returned 0 [0149.757] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.758] GetLastError () returned 0x5 [0149.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", dwFileAttributes=0x20) returned 0 [0149.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2428) returned 1 Thread: id = 1733 os_tid = 0x1090 [0149.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif")) returned 0x20 [0149.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", dwFileAttributes=0x20) returned 0 [0149.761] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.761] GetLastError () returned 0x5 [0149.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", dwFileAttributes=0x20) returned 0 [0149.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 Thread: id = 1734 os_tid = 0x1094 [0149.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif")) returned 0x20 [0149.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", dwFileAttributes=0x20) returned 0 [0149.763] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.763] GetLastError () returned 0x5 [0149.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", dwFileAttributes=0x20) returned 0 [0149.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb26f8) returned 1 Thread: id = 1735 os_tid = 0x1098 [0149.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp")) returned 0x20 [0149.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", dwFileAttributes=0x20) returned 0 [0149.765] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.765] GetLastError () returned 0x5 [0149.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", dwFileAttributes=0x20) returned 0 [0149.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 1736 os_tid = 0x109c [0149.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\rss.gif")) returned 0x20 [0149.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", dwFileAttributes=0x20) returned 0 [0149.767] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.767] GetLastError () returned 0x5 [0149.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", dwFileAttributes=0x20) returned 0 [0149.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5988) returned 1 Thread: id = 1737 os_tid = 0x10a0 [0149.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif")) returned 0x20 [0149.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", dwFileAttributes=0x20) returned 0 [0149.769] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.770] GetLastError () returned 0x5 [0149.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", dwFileAttributes=0x20) returned 0 [0149.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1978) returned 1 Thread: id = 1738 os_tid = 0x10a4 [0149.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif")) returned 0x20 [0149.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", dwFileAttributes=0x20) returned 0 [0149.772] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.772] GetLastError () returned 0x5 [0149.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", dwFileAttributes=0x20) returned 0 [0149.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 1739 os_tid = 0x10a8 [0149.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif")) returned 0x20 [0150.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", dwFileAttributes=0x20) returned 0 [0150.885] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.885] GetLastError () returned 0x5 [0150.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", dwFileAttributes=0x20) returned 0 [0150.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ede8) returned 1 Thread: id = 1740 os_tid = 0x10ac [0149.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif")) returned 0x20 [0150.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", dwFileAttributes=0x20) returned 0 [0150.887] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.887] GetLastError () returned 0x5 [0150.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", dwFileAttributes=0x20) returned 0 [0150.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 Thread: id = 1741 os_tid = 0x10b0 [0149.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif")) returned 0x20 [0150.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", dwFileAttributes=0x20) returned 0 [0150.888] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.888] GetLastError () returned 0x5 [0150.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", dwFileAttributes=0x20) returned 0 [0150.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 Thread: id = 1742 os_tid = 0x10b4 [0149.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tl.gif")) returned 0x20 [0150.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", dwFileAttributes=0x20) returned 0 [0150.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.890] GetLastError () returned 0x5 [0150.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", dwFileAttributes=0x20) returned 0 [0150.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4d08) returned 1 Thread: id = 1743 os_tid = 0x10b8 [0149.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tr.gif")) returned 0x20 [0150.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", dwFileAttributes=0x20) returned 0 [0150.595] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.595] GetLastError () returned 0x5 [0150.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", dwFileAttributes=0x20) returned 0 [0150.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5308) returned 1 Thread: id = 1744 os_tid = 0x10bc [0149.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\trash.gif")) returned 0x20 [0150.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", dwFileAttributes=0x20) returned 0 [0150.593] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.593] GetLastError () returned 0x5 [0150.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", dwFileAttributes=0x20) returned 0 [0150.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5808) returned 1 Thread: id = 1745 os_tid = 0x10c0 [0149.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif")) returned 0x20 [0150.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0150.591] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.591] GetLastError () returned 0x5 [0150.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0150.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 1746 os_tid = 0x16cc [0149.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif")) returned 0x20 [0150.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0150.895] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.896] GetLastError () returned 0x5 [0150.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0150.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187568) returned 1 Thread: id = 1747 os_tid = 0x10cc [0149.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif")) returned 0x20 [0150.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0150.894] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.894] GetLastError () returned 0x5 [0150.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0150.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 1748 os_tid = 0x16d4 [0149.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif")) returned 0x20 [0150.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0150.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.892] GetLastError () returned 0x5 [0150.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0150.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186650) returned 1 Thread: id = 1749 os_tid = 0x10d4 [0149.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\warning.gif")) returned 0x20 [0150.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", dwFileAttributes=0x20) returned 0 [0150.891] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.891] GetLastError () returned 0x5 [0150.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", dwFileAttributes=0x20) returned 0 [0150.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eef8) returned 1 Thread: id = 1750 os_tid = 0x10d8 [0149.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt")) returned 0x20 [0152.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt", dwFileAttributes=0x20) returned 0 [0152.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.335] GetLastError () returned 0x5 [0154.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt", dwFileAttributes=0x20) returned 0 [0154.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a2d8) returned 1 Thread: id = 1751 os_tid = 0x10dc [0149.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt")) returned 0x20 [0154.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt", dwFileAttributes=0x20) returned 0 [0154.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.348] GetLastError () returned 0x5 [0154.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt", dwFileAttributes=0x20) returned 0 [0154.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 1752 os_tid = 0x10f0 [0149.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt")) returned 0x20 [0154.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0154.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.356] GetLastError () returned 0x5 [0154.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0154.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dc68) returned 1 Thread: id = 1753 os_tid = 0x16e8 [0149.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1978 [0149.805] wcscpy (in: _Dest=0x3eb1978, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0149.805] wcscat (in: _Dest=0x3eb1978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0149.805] wcscat (in: _Dest=0x3eb1978, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*" [0149.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0149.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c3a2630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c3c8790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099510 [0154.928] wcscmp (_String1=".", _String2=".") returned 0 [0154.928] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c3a2630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c3c8790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.928] wcscmp (_String1="..", _String2=".") returned 1 [0154.928] wcscmp (_String1="..", _String2="..") returned 0 [0154.928] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60a0a800, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60a0a800, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="ADDRES~1.ACC")) returned 1 [0154.928] wcscmp (_String1="Address.accft", _String2=".") returned 1 [0154.928] wcscmp (_String1="Address.accft", _String2="..") returned 1 [0154.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187d48 [0154.928] wcscpy (in: _Dest=0x8187d48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0154.929] wcscat (in: _Dest=0x8187d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0154.929] wcscat (in: _Dest=0x8187d48, _Source="Address.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" [0156.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e8 [0156.251] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71511e00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71511e00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="CATEGO~1.ACC")) returned 1 [0156.251] wcscmp (_String1="Category.accft", _String2=".") returned 1 [0156.251] wcscmp (_String1="Category.accft", _String2="..") returned 1 [0156.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187220 [0156.251] wcscpy (in: _Dest=0x8187220, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0156.251] wcscat (in: _Dest=0x8187220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0156.251] wcscat (in: _Dest=0x8187220, _Source="Category.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" [0156.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28ec [0156.253] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c0bb300, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c0bb300, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1134, dwReserved0=0x0, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="NAME~1.ACC")) returned 1 [0156.253] wcscmp (_String1="Name.accft", _String2=".") returned 1 [0156.253] wcscmp (_String1="Name.accft", _String2="..") returned 1 [0156.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7378 [0156.253] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0156.253] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0156.253] wcscat (in: _Dest=0x2c7378, _Source="Name.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" [0156.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f0 [0156.255] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8928a200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8928a200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="PAYMEN~1.ACC")) returned 1 [0156.255] wcscmp (_String1="Payment Type.accft", _String2=".") returned 1 [0156.255] wcscmp (_String1="Payment Type.accft", _String2="..") returned 1 [0156.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d97a8 [0156.255] wcscpy (in: _Dest=0x81d97a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0156.255] wcscat (in: _Dest=0x81d97a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0156.255] wcscat (in: _Dest=0x81d97a8, _Source="Payment Type.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" [0156.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d97a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f4 [0156.256] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180dd00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9180dd00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x10d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="PHONE~1.ACC")) returned 1 [0156.256] wcscmp (_String1="Phone.accft", _String2=".") returned 1 [0156.256] wcscmp (_String1="Phone.accft", _String2="..") returned 1 [0156.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81872c8 [0156.256] wcscpy (in: _Dest=0x81872c8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0156.256] wcscat (in: _Dest=0x81872c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0156.256] wcscat (in: _Dest=0x81872c8, _Source="Phone.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" [0156.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81872c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f8 [0156.258] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c3b7200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9c3b7200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x112d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="PRIORI~1.ACC")) returned 1 [0156.258] wcscmp (_String1="Priority.accft", _String2=".") returned 1 [0156.258] wcscmp (_String1="Priority.accft", _String2="..") returned 1 [0156.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81874c0 [0156.258] wcscpy (in: _Dest=0x81874c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0156.258] wcscat (in: _Dest=0x81874c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0156.258] wcscat (in: _Dest=0x81874c0, _Source="Priority.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" [0156.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81874c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28fc [0156.260] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b09c00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1b09c00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="STARTE~1.ACC")) returned 1 [0156.260] wcscmp (_String1="Start End Dates.accft", _String2=".") returned 1 [0156.260] wcscmp (_String1="Start End Dates.accft", _String2="..") returned 1 [0156.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0156.260] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0156.260] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0156.260] wcscat (in: _Dest=0x2ff6740, _Source="Start End Dates.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" [0156.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2900 [0156.261] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d7aa00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8d7aa00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="STATUS~1.ACC")) returned 1 [0156.261] wcscmp (_String1="Status.accft", _String2=".") returned 1 [0156.261] wcscmp (_String1="Status.accft", _String2="..") returned 1 [0156.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186a40 [0156.262] wcscpy (in: _Dest=0x8186a40, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0156.262] wcscat (in: _Dest=0x8186a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0156.262] wcscat (in: _Dest=0x8186a40, _Source="Status.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" [0156.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2904 [0156.263] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbffeb800, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbffeb800, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 1 [0156.263] wcscmp (_String1="Tags.accft", _String2=".") returned 1 [0156.263] wcscmp (_String1="Tags.accft", _String2="..") returned 1 [0156.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dbaa8 [0156.263] wcscpy (in: _Dest=0x81dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0156.263] wcscat (in: _Dest=0x81dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0156.263] wcscat (in: _Dest=0x81dbaa8, _Source="Tags.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" [0156.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2908 [0156.265] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbffeb800, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbffeb800, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 0 [0156.265] FindClose (in: hFindFile=0x8099510 | out: hFindFile=0x8099510) returned 1 [0156.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0156.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1978) returned 1 [0156.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35c70) returned 1 Thread: id = 1754 os_tid = 0x10f8 [0149.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt")) returned 0x20 [0154.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt", dwFileAttributes=0x20) returned 0 [0154.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.346] GetLastError () returned 0x5 [0154.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt", dwFileAttributes=0x20) returned 0 [0154.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd98) returned 1 Thread: id = 1755 os_tid = 0x16f0 [0149.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt")) returned 0x20 [0150.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt", dwFileAttributes=0x20) returned 0 [0151.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.337] GetLastError () returned 0x5 [0154.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt", dwFileAttributes=0x20) returned 0 [0154.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 Thread: id = 1756 os_tid = 0x1108 [0149.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt")) returned 0x20 [0154.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0154.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.352] GetLastError () returned 0x5 [0154.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0154.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c828) returned 1 Thread: id = 1757 os_tid = 0x16f8 [0149.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt")) returned 0x20 [0153.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt", dwFileAttributes=0x20) returned 0 [0153.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.983] GetLastError () returned 0x5 [0153.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt", dwFileAttributes=0x20) returned 0 [0153.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 1758 os_tid = 0x16fc [0149.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt")) returned 0x20 [0154.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt", dwFileAttributes=0x20) returned 0 [0154.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.339] GetLastError () returned 0x5 [0154.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt", dwFileAttributes=0x20) returned 0 [0154.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 1759 os_tid = 0x1700 [0149.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1fc40 [0149.809] wcscpy (in: _Dest=0x3e1fc40, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0149.809] wcscat (in: _Dest=0x3e1fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0149.809] wcscat (in: _Dest=0x3e1fc40, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*" [0149.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0149.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c460d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4acfd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099090 [0154.929] wcscmp (_String1=".", _String2=".") returned 0 [0154.929] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c460d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4acfd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.929] wcscmp (_String1="..", _String2=".") returned 1 [0154.929] wcscmp (_String1="..", _String2="..") returned 0 [0154.929] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64342f00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64342f00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x5fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="1RIGHT~1.ACC")) returned 1 [0154.929] wcscmp (_String1="1 Right.accdt", _String2=".") returned 1 [0154.929] wcscmp (_String1="1 Right.accdt", _String2="..") returned 1 [0154.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a9f8 [0154.929] wcscpy (in: _Dest=0x819a9f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0154.929] wcscat (in: _Dest=0x819a9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0154.929] wcscat (in: _Dest=0x819a9f8, _Source="1 Right.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" [0165.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b18 [0165.220] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8c6a00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c8c6a00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x6005, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="1TOP~1.ACC")) returned 1 [0165.220] wcscmp (_String1="1 Top.accdt", _String2=".") returned 1 [0165.220] wcscmp (_String1="1 Top.accdt", _String2="..") returned 1 [0165.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819a638 [0165.220] wcscpy (in: _Dest=0x819a638, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.220] wcscat (in: _Dest=0x819a638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.220] wcscat (in: _Dest=0x819a638, _Source="1 Top.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" [0165.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0165.221] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a95900, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79a95900, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x6306, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="2RIGHT~1.ACC")) returned 1 [0165.221] wcscmp (_String1="2 Right.accdt", _String2=".") returned 1 [0165.221] wcscmp (_String1="2 Right.accdt", _String2="..") returned 1 [0165.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b7b8 [0165.221] wcscpy (in: _Dest=0x819b7b8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.221] wcscat (in: _Dest=0x819b7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.222] wcscat (in: _Dest=0x819b7b8, _Source="2 Right.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" [0165.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0165.223] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82019400, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82019400, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x63ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="2TOP~1.ACC")) returned 1 [0165.223] wcscmp (_String1="2 Top.accdt", _String2=".") returned 1 [0165.223] wcscmp (_String1="2 Top.accdt", _String2="..") returned 1 [0165.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819bad8 [0165.223] wcscpy (in: _Dest=0x819bad8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.223] wcscat (in: _Dest=0x819bad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.223] wcscat (in: _Dest=0x819bad8, _Source="2 Top.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" [0165.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0165.226] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8928a200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8928a200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x4a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="COMMEN~1.ACC")) returned 1 [0165.226] wcscmp (_String1="Comments.accdt", _String2=".") returned 1 [0165.226] wcscmp (_String1="Comments.accdt", _String2="..") returned 1 [0165.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819a8b8 [0165.226] wcscpy (in: _Dest=0x819a8b8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.226] wcscat (in: _Dest=0x819a8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.226] wcscat (in: _Dest=0x819a8b8, _Source="Comments.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" [0165.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0165.227] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9776be00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9776be00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x4c444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1 [0165.227] wcscmp (_String1="Contacts.accdt", _String2=".") returned 1 [0165.227] wcscmp (_String1="Contacts.accdt", _String2="..") returned 1 [0165.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bc18 [0165.227] wcscpy (in: _Dest=0x819bc18, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.227] wcscat (in: _Dest=0x819bc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.227] wcscat (in: _Dest=0x819bc18, _Source="Contacts.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" [0165.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0165.228] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8273400, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8273400, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x510d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="DETAIL~1.ACC")) returned 1 [0165.228] wcscmp (_String1="Details.accdt", _String2=".") returned 1 [0165.228] wcscmp (_String1="Details.accdt", _String2="..") returned 1 [0165.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ac78 [0165.228] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.228] wcscat (in: _Dest=0x819ac78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.228] wcscat (in: _Dest=0x819ac78, _Source="Details.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" [0165.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0165.229] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb07f6f00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb07f6f00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x53d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="DIALOG~1.ACC")) returned 1 [0165.229] wcscmp (_String1="Dialog.accdt", _String2=".") returned 1 [0165.229] wcscmp (_String1="Dialog.accdt", _String2="..") returned 1 [0165.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819bf38 [0165.229] wcscpy (in: _Dest=0x819bf38, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.229] wcscat (in: _Dest=0x819bf38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.229] wcscat (in: _Dest=0x819bf38, _Source="Dialog.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" [0165.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0165.230] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b3100, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc6b3100, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0xc660, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1 [0165.231] wcscmp (_String1="Issues.accdt", _String2=".") returned 1 [0165.231] wcscmp (_String1="Issues.accdt", _String2="..") returned 1 [0165.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819abd8 [0165.231] wcscpy (in: _Dest=0x819abd8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.231] wcscat (in: _Dest=0x819abd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.231] wcscat (in: _Dest=0x819abd8, _Source="Issues.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" [0165.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819abd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0165.241] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc856f300, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc856f300, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x6072, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="LIST~1.ACC")) returned 1 [0165.241] wcscmp (_String1="List.accdt", _String2=".") returned 1 [0165.241] wcscmp (_String1="List.accdt", _String2="..") returned 1 [0165.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d2208 [0165.241] wcscpy (in: _Dest=0x81d2208, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.241] wcscat (in: _Dest=0x81d2208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.241] wcscat (in: _Dest=0x81d2208, _Source="List.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" [0165.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0165.242] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd573e200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd573e200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x50d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="MEDIA~1.ACC")) returned 1 [0165.242] wcscmp (_String1="Media.accdt", _String2=".") returned 1 [0165.242] wcscmp (_String1="Media.accdt", _String2="..") returned 1 [0165.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819a958 [0165.242] wcscpy (in: _Dest=0x819a958, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.243] wcscat (in: _Dest=0x819a958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.243] wcscat (in: _Dest=0x819a958, _Source="Media.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" [0165.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0165.244] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02e7700, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe02e7700, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x5465, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="MSGBOX~1.ACC")) returned 1 [0165.244] wcscmp (_String1="Msgbox.accdt", _String2=".") returned 1 [0165.244] wcscmp (_String1="Msgbox.accdt", _String2="..") returned 1 [0165.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b8f8 [0165.244] wcscpy (in: _Dest=0x819b8f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.244] wcscat (in: _Dest=0x819b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.244] wcscat (in: _Dest=0x819b8f8, _Source="Msgbox.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" [0165.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0165.245] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3414700, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf3414700, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x60b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="TABS~1.ACC")) returned 1 [0165.245] wcscmp (_String1="Tabs.accdt", _String2=".") returned 1 [0165.246] wcscmp (_String1="Tabs.accdt", _String2="..") returned 1 [0165.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1200 [0165.246] wcscpy (in: _Dest=0x81d1200, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.246] wcscat (in: _Dest=0x81d1200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.246] wcscat (in: _Dest=0x81d1200, _Source="Tabs.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" [0165.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0165.247] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6541700, ftCreationTime.dwHighDateTime=0x1caa563, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6541700, ftLastWriteTime.dwHighDateTime=0x1caa563, nFileSizeHigh=0x0, nFileSizeLow=0xb315, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1 [0165.247] wcscmp (_String1="Tasks.accdt", _String2=".") returned 1 [0165.247] wcscmp (_String1="Tasks.accdt", _String2="..") returned 1 [0165.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819aef8 [0165.247] wcscpy (in: _Dest=0x819aef8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.247] wcscat (in: _Dest=0x819aef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.247] wcscat (in: _Dest=0x819aef8, _Source="Tasks.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" [0165.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0165.249] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1966e700, ftCreationTime.dwHighDateTime=0x1caa563, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1966e700, ftLastWriteTime.dwHighDateTime=0x1caa563, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 1 [0165.249] wcscmp (_String1="Users.accdt", _String2=".") returned 1 [0165.249] wcscmp (_String1="Users.accdt", _String2="..") returned 1 [0165.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819bcb8 [0165.249] wcscpy (in: _Dest=0x819bcb8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0165.249] wcscat (in: _Dest=0x819bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0165.249] wcscat (in: _Dest=0x819bcb8, _Source="Users.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" [0165.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0165.250] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1966e700, ftCreationTime.dwHighDateTime=0x1caa563, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1966e700, ftLastWriteTime.dwHighDateTime=0x1caa563, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 0 [0165.251] FindClose (in: hFindFile=0x8099090 | out: hFindFile=0x8099090) returned 1 [0165.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0165.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 [0165.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 1760 os_tid = 0x1704 [0149.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt")) returned 0x20 [0154.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt", dwFileAttributes=0x20) returned 0 [0154.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.340] GetLastError () returned 0x5 [0154.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt", dwFileAttributes=0x20) returned 0 [0154.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c958) returned 1 Thread: id = 1761 os_tid = 0x1708 [0149.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt")) returned 0x20 [0154.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt", dwFileAttributes=0x20) returned 0 [0154.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.342] GetLastError () returned 0x5 [0154.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt", dwFileAttributes=0x20) returned 0 [0154.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ae8) returned 1 Thread: id = 1762 os_tid = 0x1120 [0149.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt")) returned 0x20 [0154.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt", dwFileAttributes=0x20) returned 0 [0154.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.343] GetLastError () returned 0x5 [0154.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt", dwFileAttributes=0x20) returned 0 [0154.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 1763 os_tid = 0x1124 [0149.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt")) returned 0x20 [0154.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0154.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.345] GetLastError () returned 0x5 [0154.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0154.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36180) returned 1 Thread: id = 1764 os_tid = 0x1128 [0149.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f4d0 [0149.812] wcscpy (in: _Dest=0x3e1f4d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0149.812] wcscat (in: _Dest=0x3e1f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\" [0149.812] wcscat (in: _Dest=0x3e1f4d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*" [0149.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0149.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099390 [0153.888] wcscmp (_String1=".", _String2=".") returned 0 [0153.888] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.889] wcscmp (_String1="..", _String2=".") returned 1 [0153.889] wcscmp (_String1="..", _String2="..") returned 0 [0153.889] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8888200, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8888200, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x377c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="107.accdt", cAlternateFileName="107~1.ACC")) returned 1 [0153.889] wcscmp (_String1="107.accdt", _String2=".") returned 1 [0153.889] wcscmp (_String1="107.accdt", _String2="..") returned 1 [0153.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a4a0 [0153.889] wcscpy (in: _Dest=0x3e2a4a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0153.889] wcscat (in: _Dest=0x3e2a4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\" [0153.889] wcscat (in: _Dest=0x3e2a4a0, _Source="107.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" [0154.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c0 [0154.131] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c3ce00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c330210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3c3ce00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="1100~1.ACC")) returned 1 [0154.131] wcscmp (_String1="1100.accdt", _String2=".") returned 1 [0154.131] wcscmp (_String1="1100.accdt", _String2="..") returned 1 [0154.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1168 [0154.131] wcscpy (in: _Dest=0x81d1168, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0154.131] wcscat (in: _Dest=0x81d1168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\" [0154.132] wcscat (in: _Dest=0x81d1168, _Source="1100.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" [0154.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0154.132] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c3ce00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c330210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3c3ce00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="1100~1.ACC")) returned 0 [0154.132] FindClose (in: hFindFile=0x8099390 | out: hFindFile=0x8099390) returned 1 [0154.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0154.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 [0154.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5288) returned 1 Thread: id = 1765 os_tid = 0x112c [0149.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe66c8 [0149.813] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\All Users\\Sun\\Java\\Java Update" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update" [0149.813] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\" [0149.813] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*" [0149.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0149.813] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0149.814] wcscmp (_String1=".", _String2=".") returned 0 [0149.814] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.814] wcscmp (_String1="..", _String2=".") returned 1 [0149.814] wcscmp (_String1="..", _String2="..") returned 0 [0149.814] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0149.814] wcscmp (_String1="jaureglist.xml", _String2=".") returned 1 [0149.814] wcscmp (_String1="jaureglist.xml", _String2="..") returned 1 [0149.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32598 [0149.815] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Users\\All Users\\Sun\\Java\\Java Update" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update" [0149.815] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\" [0149.815] wcscat (in: _Dest=0x3f32598, _Source="jaureglist.xml" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" [0150.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4 [0150.320] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0 [0150.320] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0150.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0150.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0150.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e234e0) returned 1 Thread: id = 1766 os_tid = 0x1130 [0149.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39858 [0149.815] wcscpy (in: _Dest=0x3f39858, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" [0149.815] wcscat (in: _Dest=0x3f39858, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\" [0149.815] wcscat (in: _Dest=0x3f39858, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" [0149.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0149.816] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0149.816] wcscmp (_String1=".", _String2=".") returned 0 [0149.816] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.816] wcscmp (_String1="..", _String2=".") returned 1 [0149.816] wcscmp (_String1="..", _String2="..") returned 0 [0149.816] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.816] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0149.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0149.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39858) returned 1 [0149.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd4e0) returned 1 Thread: id = 1767 os_tid = 0x1134 [0149.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif")) returned 0x20 [0150.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF", dwFileAttributes=0x20) returned 0 [0150.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.958] GetLastError () returned 0x5 [0150.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF", dwFileAttributes=0x20) returned 0 [0150.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35d90) returned 1 Thread: id = 1768 os_tid = 0x1138 [0149.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif")) returned 0x20 [0150.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF", dwFileAttributes=0x20) returned 0 [0150.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.944] GetLastError () returned 0x5 [0150.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF", dwFileAttributes=0x20) returned 0 [0150.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36330) returned 1 Thread: id = 1769 os_tid = 0x113c [0149.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif")) returned 0x20 [0150.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF", dwFileAttributes=0x20) returned 0 [0150.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.950] GetLastError () returned 0x5 [0150.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF", dwFileAttributes=0x20) returned 0 [0150.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34dd0) returned 1 Thread: id = 1770 os_tid = 0x1710 [0149.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif")) returned 0x20 [0150.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF", dwFileAttributes=0x20) returned 0 [0150.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.954] GetLastError () returned 0x5 [0150.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF", dwFileAttributes=0x20) returned 0 [0150.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f347a0) returned 1 Thread: id = 1771 os_tid = 0x1714 [0149.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif")) returned 0x20 [0150.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF", dwFileAttributes=0x20) returned 0 [0150.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.951] GetLastError () returned 0x5 [0150.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF", dwFileAttributes=0x20) returned 0 [0150.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34cb0) returned 1 Thread: id = 1772 os_tid = 0x1720 [0149.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif")) returned 0x20 [0150.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF", dwFileAttributes=0x20) returned 0 [0150.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.955] GetLastError () returned 0x5 [0150.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF", dwFileAttributes=0x20) returned 0 [0150.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f349e0) returned 1 Thread: id = 1773 os_tid = 0x1724 [0149.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif")) returned 0x20 [0150.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF", dwFileAttributes=0x20) returned 0 [0150.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.952] GetLastError () returned 0x5 [0150.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF", dwFileAttributes=0x20) returned 0 [0150.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34e60) returned 1 Thread: id = 1774 os_tid = 0x1734 [0149.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39468 [0149.892] wcscpy (in: _Dest=0x3f39468, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0149.892] wcscat (in: _Dest=0x3f39468, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0149.892] wcscat (in: _Dest=0x3f39468, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*" [0149.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0149.892] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0149.892] wcscmp (_String1=".", _String2=".") returned 0 [0149.892] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.892] wcscmp (_String1="..", _String2=".") returned 1 [0149.892] wcscmp (_String1="..", _String2="..") returned 0 [0149.892] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0149.892] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0149.892] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0149.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c708 [0149.892] wcscpy (in: _Dest=0x3e3c708, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0149.892] wcscat (in: _Dest=0x3e3c708, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0149.892] wcscat (in: _Dest=0x3e3c708, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" [0150.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1adc [0150.324] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0150.324] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0150.324] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0150.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32b820 [0150.324] wcscpy (in: _Dest=0x32b820, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.324] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.324] wcscat (in: _Dest=0x32b820, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" [0150.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0150.326] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0150.326] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0150.326] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0150.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0150.326] wcscpy (in: _Dest=0x32d668, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.326] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.326] wcscat (in: _Dest=0x32d668, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" [0150.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0150.327] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0150.327] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0150.327] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0150.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f36210 [0150.328] wcscpy (in: _Dest=0x3f36210, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.328] wcscat (in: _Dest=0x3f36210, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.328] wcscat (in: _Dest=0x3f36210, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" [0150.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0150.329] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0150.329] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0150.329] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0150.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32bea8 [0150.329] wcscpy (in: _Dest=0x32bea8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.329] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.329] wcscat (in: _Dest=0x32bea8, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" [0150.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0150.330] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99450400, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99450400, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0150.330] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0150.330] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0150.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35fd0 [0150.330] wcscpy (in: _Dest=0x3f35fd0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.330] wcscat (in: _Dest=0x3f35fd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.330] wcscat (in: _Dest=0x3f35fd0, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" [0150.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0150.332] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x3546d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0150.332] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0150.332] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0150.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2ae20 [0150.332] wcscpy (in: _Dest=0x3e2ae20, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.332] wcscat (in: _Dest=0x3e2ae20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.332] wcscat (in: _Dest=0x3e2ae20, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" [0150.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ae20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0150.333] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4f0a000, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4f0a000, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0150.333] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0150.333] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0150.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f362a0 [0150.333] wcscpy (in: _Dest=0x3f362a0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.333] wcscat (in: _Dest=0x3f362a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.333] wcscat (in: _Dest=0x3f362a0, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" [0150.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f362a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0150.335] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0150.335] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0150.335] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0150.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35f40 [0150.335] wcscpy (in: _Dest=0x3f35f40, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.335] wcscat (in: _Dest=0x3f35f40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.335] wcscat (in: _Dest=0x3f35f40, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" [0150.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0150.336] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0150.336] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0150.336] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0150.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1c48 [0150.336] wcscpy (in: _Dest=0x3eb1c48, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.336] wcscat (in: _Dest=0x3eb1c48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.336] wcscat (in: _Dest=0x3eb1c48, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" [0150.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0150.339] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0150.339] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0150.339] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0150.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2bcf8 [0150.339] wcscpy (in: _Dest=0x3e2bcf8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.339] wcscat (in: _Dest=0x3e2bcf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.340] wcscat (in: _Dest=0x3e2bcf8, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" [0150.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0150.341] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0150.341] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0150.341] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0150.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e29f48 [0150.341] wcscpy (in: _Dest=0x3e29f48, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.341] wcscat (in: _Dest=0x3e29f48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.341] wcscat (in: _Dest=0x3e29f48, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" [0150.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e29f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0150.342] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0150.342] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0150.342] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0150.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2428 [0150.342] wcscpy (in: _Dest=0x3eb2428, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.342] wcscat (in: _Dest=0x3eb2428, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.342] wcscat (in: _Dest=0x3eb2428, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" [0150.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0150.343] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0150.343] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0150.343] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0150.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb26f8 [0150.343] wcscpy (in: _Dest=0x3eb26f8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.343] wcscat (in: _Dest=0x3eb26f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.344] wcscat (in: _Dest=0x3eb26f8, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" [0150.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb26f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0150.345] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0150.345] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0150.345] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0150.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1738 [0150.345] wcscpy (in: _Dest=0x3eb1738, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.345] wcscat (in: _Dest=0x3eb1738, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.345] wcscat (in: _Dest=0x3eb1738, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" [0150.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0150.346] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0150.346] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0150.346] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0150.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2b1b0 [0150.346] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.346] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.346] wcscat (in: _Dest=0x3e2b1b0, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" [0150.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0150.348] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46e8c500, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46e8c500, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0150.348] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0150.348] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0150.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a830 [0150.348] wcscpy (in: _Dest=0x3e2a830, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.348] wcscat (in: _Dest=0x3e2a830, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.348] wcscat (in: _Dest=0x3e2a830, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" [0150.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0150.349] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d25900, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82d25900, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0150.349] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0150.349] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0150.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b378 [0150.349] wcscpy (in: _Dest=0x3e2b378, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.350] wcscat (in: _Dest=0x3e2b378, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.350] wcscat (in: _Dest=0x3e2b378, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" [0150.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0150.351] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cef700, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77cef700, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0150.351] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0150.351] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0150.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb16a8 [0150.351] wcscpy (in: _Dest=0x3eb16a8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.351] wcscat (in: _Dest=0x3eb16a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.351] wcscat (in: _Dest=0x3eb16a8, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" [0150.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb16a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0150.352] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0150.352] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0150.352] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0150.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb17c8 [0150.352] wcscpy (in: _Dest=0x3eb17c8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.352] wcscat (in: _Dest=0x3eb17c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.352] wcscat (in: _Dest=0x3eb17c8, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" [0150.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb17c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0150.355] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf11c1900, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf11c1900, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0150.355] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0150.355] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0150.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a700 [0150.355] wcscpy (in: _Dest=0x3e2a700, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.355] wcscat (in: _Dest=0x3e2a700, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.355] wcscat (in: _Dest=0x3e2a700, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" [0150.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0150.356] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0150.356] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0150.356] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0150.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2938 [0150.356] wcscpy (in: _Dest=0x3eb2938, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.356] wcscat (in: _Dest=0x3eb2938, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.356] wcscat (in: _Dest=0x3eb2938, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" [0150.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0150.357] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0150.357] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0150.357] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0150.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2818 [0150.358] wcscpy (in: _Dest=0x3eb2818, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.358] wcscat (in: _Dest=0x3eb2818, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.358] wcscat (in: _Dest=0x3eb2818, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" [0150.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0150.359] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0150.359] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0150.359] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0150.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2668 [0150.359] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.359] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.359] wcscat (in: _Dest=0x3eb2668, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" [0150.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0150.360] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0150.360] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0150.360] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0150.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2b968 [0150.360] wcscpy (in: _Dest=0x3e2b968, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.360] wcscat (in: _Dest=0x3e2b968, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.360] wcscat (in: _Dest=0x3e2b968, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" [0150.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0150.361] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356f4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0150.361] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0150.361] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0150.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b7a0 [0150.362] wcscpy (in: _Dest=0x3e2b7a0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.362] wcscat (in: _Dest=0x3e2b7a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.362] wcscat (in: _Dest=0x3e2b7a0, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" [0150.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0150.363] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0150.363] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0150.363] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0150.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3daa0 [0150.363] wcscpy (in: _Dest=0x3e3daa0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0150.363] wcscat (in: _Dest=0x3e3daa0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0150.363] wcscat (in: _Dest=0x3e3daa0, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" [0150.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3daa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0150.818] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0151.296] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0152.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0152.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39468) returned 1 [0152.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 Thread: id = 1775 os_tid = 0x1744 [0149.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39858 [0149.893] wcscpy (in: _Dest=0x3f39858, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0149.893] wcscat (in: _Dest=0x3f39858, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0149.893] wcscat (in: _Dest=0x3f39858, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*" [0149.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0149.893] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0149.893] wcscmp (_String1=".", _String2=".") returned 0 [0149.893] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.893] wcscmp (_String1="..", _String2=".") returned 1 [0149.893] wcscmp (_String1="..", _String2="..") returned 0 [0149.893] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0149.893] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0149.893] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0149.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0149.893] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0149.893] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0149.893] wcscat (in: _Dest=0x3e3db38, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" [0160.084] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll")) returned 0x2020 [0160.084] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.084] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.084] GetLastError () returned 0x5 [0160.084] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.085] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0160.085] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0160.085] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0160.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.085] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.085] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.085] wcscat (in: _Dest=0x3e3db38, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" [0160.085] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll")) returned 0x2020 [0160.085] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.085] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.085] GetLastError () returned 0x5 [0160.085] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.086] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0160.086] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0160.086] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0160.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0160.086] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.086] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.086] wcscat (in: _Dest=0x3e3db38, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" [0160.086] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll")) returned 0x2020 [0160.086] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.086] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.086] GetLastError () returned 0x5 [0160.086] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.087] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0160.087] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0160.087] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0160.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.087] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.087] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.087] wcscat (in: _Dest=0x81de728, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" [0160.087] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll")) returned 0x2020 [0160.097] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.097] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.097] GetLastError () returned 0x5 [0160.097] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.097] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0160.097] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0160.097] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0160.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.098] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.098] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.098] wcscat (in: _Dest=0x3e3db38, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" [0160.098] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll")) returned 0x2020 [0160.098] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.098] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.098] GetLastError () returned 0x5 [0160.098] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.098] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0160.098] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0160.098] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0160.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.098] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.099] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.099] wcscat (in: _Dest=0x81de728, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" [0160.099] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll")) returned 0x2020 [0160.099] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.099] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.099] GetLastError () returned 0x5 [0160.099] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.099] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0160.099] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0160.099] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0160.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.099] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.099] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.099] wcscat (in: _Dest=0x3e3db38, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" [0160.100] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll")) returned 0x2020 [0160.100] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.100] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.100] GetLastError () returned 0x5 [0160.100] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.100] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdc99200, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdc99200, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0160.100] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0160.100] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0160.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.100] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.100] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.100] wcscat (in: _Dest=0x81de728, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" [0160.101] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll")) returned 0x2020 [0160.101] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.101] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.101] GetLastError () returned 0x5 [0160.101] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.101] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0160.101] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0160.101] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0160.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0160.101] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.101] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.101] wcscat (in: _Dest=0x81de728, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" [0160.101] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll")) returned 0x2020 [0160.102] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.102] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.102] GetLastError () returned 0x5 [0160.102] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.102] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0160.102] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0160.102] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0160.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.102] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.102] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.102] wcscat (in: _Dest=0x81de728, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" [0160.102] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll")) returned 0x2020 [0160.103] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.103] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.103] GetLastError () returned 0x5 [0160.103] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.103] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0160.103] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0160.103] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0160.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.103] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.103] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.103] wcscat (in: _Dest=0x3e3db38, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" [0160.103] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll")) returned 0x2020 [0160.103] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.104] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.104] GetLastError () returned 0x5 [0160.104] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.104] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0160.104] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0160.104] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0160.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0160.104] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.104] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.104] wcscat (in: _Dest=0x3e3db38, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" [0160.104] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll")) returned 0x2020 [0160.104] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.104] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.105] GetLastError () returned 0x5 [0160.105] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.105] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0160.105] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0160.105] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0160.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.105] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.105] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.105] wcscat (in: _Dest=0x81de728, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" [0160.105] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll")) returned 0x2020 [0160.105] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.105] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.106] GetLastError () returned 0x5 [0160.106] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.106] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0160.106] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0160.106] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0160.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0160.106] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.106] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.106] wcscat (in: _Dest=0x81de728, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" [0160.106] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll")) returned 0x2020 [0160.106] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.106] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.106] GetLastError () returned 0x5 [0160.106] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.107] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0160.107] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0160.107] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0160.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.107] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.107] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.107] wcscat (in: _Dest=0x81de728, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" [0160.107] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll")) returned 0x2020 [0160.107] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.107] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.107] GetLastError () returned 0x5 [0160.107] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.108] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0160.108] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0160.108] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0160.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.108] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.108] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.108] wcscat (in: _Dest=0x3e3db38, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" [0160.108] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll")) returned 0x2020 [0160.108] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.108] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.108] GetLastError () returned 0x5 [0160.108] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.109] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0160.109] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0160.109] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0160.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0160.109] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.109] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.109] wcscat (in: _Dest=0x3e3db38, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" [0160.109] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll")) returned 0x2020 [0160.109] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.109] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.109] GetLastError () returned 0x5 [0160.109] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.109] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81a12c00, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81a12c00, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0160.110] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0160.110] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0160.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0160.110] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.110] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.110] wcscat (in: _Dest=0x3e3db38, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" [0160.110] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll")) returned 0x2020 [0160.110] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.110] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.110] GetLastError () returned 0x5 [0160.110] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.110] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x874e4000, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x874e4000, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0160.110] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0160.110] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0160.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.111] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.111] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.111] wcscat (in: _Dest=0x81de728, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" [0160.111] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll")) returned 0x2020 [0160.111] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.111] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.111] GetLastError () returned 0x5 [0160.111] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.111] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0160.111] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0160.111] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0160.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0160.111] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.112] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.112] wcscat (in: _Dest=0x81de728, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" [0160.112] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll")) returned 0x2020 [0160.112] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.112] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.112] GetLastError () returned 0x5 [0160.112] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.112] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe792b100, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe792b100, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0160.112] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0160.112] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0160.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.112] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.112] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.113] wcscat (in: _Dest=0x3e3db38, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" [0160.113] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll")) returned 0x2020 [0160.113] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.113] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.113] GetLastError () returned 0x5 [0160.113] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.113] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x35682930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0160.113] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0160.113] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0160.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.113] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.113] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.113] wcscat (in: _Dest=0x81de728, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" [0160.114] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll")) returned 0x2020 [0160.114] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.114] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.114] GetLastError () returned 0x5 [0160.114] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.114] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0160.114] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0160.114] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0160.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0160.114] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.114] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.114] wcscat (in: _Dest=0x81de728, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" [0160.115] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll")) returned 0x2020 [0160.115] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.115] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.115] GetLastError () returned 0x5 [0160.115] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.115] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0160.115] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0160.115] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0160.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.115] wcscpy (in: _Dest=0x81de728, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.115] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.115] wcscat (in: _Dest=0x81de728, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" [0160.115] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll")) returned 0x2020 [0160.116] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.116] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.116] GetLastError () returned 0x5 [0160.116] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.116] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a568800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a568800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0160.116] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0160.116] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0160.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.116] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.116] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.116] wcscat (in: _Dest=0x3e3db38, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" [0160.116] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll")) returned 0x2020 [0160.117] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.117] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.117] GetLastError () returned 0x5 [0160.117] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.117] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b87b500, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b87b500, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0160.117] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0160.117] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0160.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0160.117] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.117] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.117] wcscat (in: _Dest=0x3e3db38, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" [0160.117] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll")) returned 0x2020 [0160.117] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.118] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.118] GetLastError () returned 0x5 [0160.118] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.118] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0160.118] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0160.118] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0160.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.119] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0160.119] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0160.119] wcscat (in: _Dest=0x3e3db38, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" [0160.119] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll")) returned 0x2020 [0160.119] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.119] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.119] GetLastError () returned 0x5 [0160.119] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.119] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0160.120] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0160.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0160.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39858) returned 1 [0160.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4be8) returned 1 Thread: id = 1776 os_tid = 0x1748 [0149.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d5a30 [0149.894] wcscpy (in: _Dest=0x81d5a30, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0149.894] wcscat (in: _Dest=0x81d5a30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0149.894] wcscat (in: _Dest=0x81d5a30, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*" [0149.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85070 [0149.894] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0149.894] wcscmp (_String1=".", _String2=".") returned 0 [0149.894] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.894] wcscmp (_String1="..", _String2=".") returned 1 [0149.894] wcscmp (_String1="..", _String2="..") returned 0 [0149.894] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0149.894] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0149.894] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0149.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80208d0 [0149.895] wcscpy (in: _Dest=0x80208d0, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0149.895] wcscat (in: _Dest=0x80208d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0149.895] wcscat (in: _Dest=0x80208d0, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0160.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dada38 [0160.153] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0160.153] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\" [0160.153] wcscat (in: _Dest=0x3dada38, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*" [0160.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0160.153] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0160.153] wcscmp (_String1=".", _String2=".") returned 0 [0160.153] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.153] wcscmp (_String1="..", _String2=".") returned 1 [0160.153] wcscmp (_String1="..", _String2="..") returned 0 [0160.153] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8639f00, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe8639f00, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe8639f00, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0160.153] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0160.153] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0160.153] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0160.154] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0160.154] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0160.154] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0160.154] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0160.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0160.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 [0160.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80208d0) returned 1 [0160.154] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0160.154] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0160.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85070) returned 1 [0160.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a30) returned 1 [0160.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3338e8) returned 1 Thread: id = 1777 os_tid = 0x174c [0149.895] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0149.895] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0151.104] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.105] GetLastError () returned 0x20 [0151.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x8208310 [0151.105] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0151.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8208310) returned 1 [0151.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x831d978, Size=0x18) returned 0x80976b0 [0151.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x354fc0 [0151.105] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0151.105] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0151.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34c20) returned 1 Thread: id = 1778 os_tid = 0x1750 [0149.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39e78 [0149.896] wcscpy (in: _Dest=0x3f39e78, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" [0149.896] wcscat (in: _Dest=0x3f39e78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\" [0149.896] wcscat (in: _Dest=0x3f39e78, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*" [0149.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85a10 [0149.896] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0149.896] wcscmp (_String1=".", _String2=".") returned 0 [0149.896] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.896] wcscmp (_String1="..", _String2=".") returned 1 [0149.896] wcscmp (_String1="..", _String2="..") returned 0 [0149.896] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0149.896] wcscmp (_String1="Security", _String2=".") returned 1 [0149.896] wcscmp (_String1="Security", _String2="..") returned 1 [0149.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4188 [0149.896] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" [0149.896] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\" [0149.896] wcscat (in: _Dest=0x3dc4188, _Source="Security" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0157.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc4188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c [0157.972] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0157.972] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0157.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85a10) returned 1 [0157.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e78) returned 1 [0157.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bff0) returned 1 Thread: id = 1779 os_tid = 0x175c [0149.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml")) returned 0x20 [0149.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML", dwFileAttributes=0x20) returned 0 [0149.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.897] GetLastError () returned 0x5 [0149.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML", dwFileAttributes=0x20) returned 0 [0149.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f355b0) returned 1 Thread: id = 1780 os_tid = 0x1760 [0149.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f324a8 [0149.898] wcscpy (in: _Dest=0x3f324a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0149.898] wcscat (in: _Dest=0x3f324a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0149.898] wcscat (in: _Dest=0x3f324a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*" [0149.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e530 [0149.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0150.224] wcscmp (_String1=".", _String2=".") returned 0 [0150.224] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.832] wcscmp (_String1="..", _String2=".") returned 1 [0150.832] wcscmp (_String1="..", _String2="..") returned 0 [0150.832] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc2300, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacc2300, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1 [0150.832] wcscmp (_String1="ACTIVITL.ICO", _String2=".") returned 1 [0150.832] wcscmp (_String1="ACTIVITL.ICO", _String2="..") returned 1 [0150.832] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1 [0150.832] wcscmp (_String1="ACTIVITS.ICO", _String2=".") returned 1 [0150.832] wcscmp (_String1="ACTIVITS.ICO", _String2="..") returned 1 [0150.832] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1 [0150.832] wcscmp (_String1="ACTIVITY.CFG", _String2=".") returned 1 [0150.832] wcscmp (_String1="ACTIVITY.CFG", _String2="..") returned 1 [0150.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1b28 [0150.833] wcscpy (in: _Dest=0x3eb1b28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.833] wcscat (in: _Dest=0x3eb1b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.833] wcscat (in: _Dest=0x3eb1b28, _Source="ACTIVITY.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" [0155.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0155.701] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1 [0155.701] wcscmp (_String1="APPT.CFG", _String2=".") returned 1 [0155.701] wcscmp (_String1="APPT.CFG", _String2="..") returned 1 [0155.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81d3090 [0155.701] wcscpy (in: _Dest=0x81d3090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.701] wcscat (in: _Dest=0x81d3090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.701] wcscat (in: _Dest=0x81d3090, _Source="APPT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" [0155.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0155.702] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1 [0155.702] wcscmp (_String1="APPTL.ICO", _String2=".") returned 1 [0155.702] wcscmp (_String1="APPTL.ICO", _String2="..") returned 1 [0155.702] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1 [0155.702] wcscmp (_String1="APPTS.ICO", _String2=".") returned 1 [0155.703] wcscmp (_String1="APPTS.ICO", _String2="..") returned 1 [0155.703] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1 [0155.703] wcscmp (_String1="CNFNOT.CFG", _String2=".") returned 1 [0155.703] wcscmp (_String1="CNFNOT.CFG", _String2="..") returned 1 [0155.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f357f0 [0155.703] wcscpy (in: _Dest=0x3f357f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.703] wcscat (in: _Dest=0x3f357f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.703] wcscat (in: _Dest=0x3f357f0, _Source="CNFNOT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" [0155.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f357f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c4 [0155.704] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3b400, ftCreationTime.dwHighDateTime=0x1c6889c, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81c3b400, ftLastWriteTime.dwHighDateTime=0x1c6889c, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1 [0155.704] wcscmp (_String1="CNFNOT.ICO", _String2=".") returned 1 [0155.704] wcscmp (_String1="CNFNOT.ICO", _String2="..") returned 1 [0155.704] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1 [0155.704] wcscmp (_String1="CNFRES.CFG", _String2=".") returned 1 [0155.704] wcscmp (_String1="CNFRES.CFG", _String2="..") returned 1 [0155.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2888 [0155.705] wcscpy (in: _Dest=0x3df2888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.705] wcscat (in: _Dest=0x3df2888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.705] wcscat (in: _Dest=0x3df2888, _Source="CNFRES.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" [0155.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c8 [0155.706] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1 [0155.706] wcscmp (_String1="CONFLICT.ICO", _String2=".") returned 1 [0155.706] wcscmp (_String1="CONFLICT.ICO", _String2="..") returned 1 [0155.706] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1 [0155.706] wcscmp (_String1="CONTACT.CFG", _String2=".") returned 1 [0155.706] wcscmp (_String1="CONTACT.CFG", _String2="..") returned 1 [0155.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2378 [0155.706] wcscpy (in: _Dest=0x3df2378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.706] wcscat (in: _Dest=0x3df2378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.706] wcscat (in: _Dest=0x3df2378, _Source="CONTACT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" [0155.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27cc [0155.708] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1 [0155.708] wcscmp (_String1="CONTACTL.ICO", _String2=".") returned 1 [0155.708] wcscmp (_String1="CONTACTL.ICO", _String2="..") returned 1 [0155.708] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1 [0155.708] wcscmp (_String1="CONTACTS.ICO", _String2=".") returned 1 [0155.708] wcscmp (_String1="CONTACTS.ICO", _String2="..") returned 1 [0155.708] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1 [0155.708] wcscmp (_String1="DISTLIST.CFG", _String2=".") returned 1 [0155.708] wcscmp (_String1="DISTLIST.CFG", _String2="..") returned 1 [0155.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2408 [0155.708] wcscpy (in: _Dest=0x3df2408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.708] wcscat (in: _Dest=0x3df2408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.708] wcscat (in: _Dest=0x3df2408, _Source="DISTLIST.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" [0155.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d0 [0155.709] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1 [0155.710] wcscmp (_String1="DISTLSTL.ICO", _String2=".") returned 1 [0155.710] wcscmp (_String1="DISTLSTL.ICO", _String2="..") returned 1 [0155.710] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1 [0155.710] wcscmp (_String1="DISTLSTS.ICO", _String2=".") returned 1 [0155.710] wcscmp (_String1="DISTLSTS.ICO", _String2="..") returned 1 [0155.710] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1 [0155.710] wcscmp (_String1="DOC.CFG", _String2=".") returned 1 [0155.710] wcscmp (_String1="DOC.CFG", _String2="..") returned 1 [0155.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d3118 [0155.710] wcscpy (in: _Dest=0x81d3118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.710] wcscat (in: _Dest=0x81d3118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.710] wcscat (in: _Dest=0x81d3118, _Source="DOC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" [0155.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d4 [0155.711] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1 [0155.711] wcscmp (_String1="DOCL.ICO", _String2=".") returned 1 [0155.711] wcscmp (_String1="DOCL.ICO", _String2="..") returned 1 [0155.711] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1 [0155.711] wcscmp (_String1="DOCS.ICO", _String2=".") returned 1 [0155.711] wcscmp (_String1="DOCS.ICO", _String2="..") returned 1 [0155.711] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc737c00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc737c00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1 [0155.711] wcscmp (_String1="EXITEM.CFG", _String2=".") returned 1 [0155.712] wcscmp (_String1="EXITEM.CFG", _String2="..") returned 1 [0155.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1d48 [0155.712] wcscpy (in: _Dest=0x3df1d48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.712] wcscat (in: _Dest=0x3df1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.712] wcscat (in: _Dest=0x3df1d48, _Source="EXITEM.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" [0155.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d8 [0155.713] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1 [0155.713] wcscmp (_String1="EXITEML.ICO", _String2=".") returned 1 [0155.713] wcscmp (_String1="EXITEML.ICO", _String2="..") returned 1 [0155.713] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1 [0155.713] wcscmp (_String1="EXITEMS.ICO", _String2=".") returned 1 [0155.713] wcscmp (_String1="EXITEMS.ICO", _String2="..") returned 1 [0155.713] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ce7900, ftCreationTime.dwHighDateTime=0x1c45223, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90ce7900, ftLastWriteTime.dwHighDateTime=0x1c45223, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1 [0155.713] wcscmp (_String1="INFOMAIL.CFG", _String2=".") returned 1 [0155.713] wcscmp (_String1="INFOMAIL.CFG", _String2="..") returned 1 [0155.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2be8 [0155.714] wcscpy (in: _Dest=0x3df2be8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.714] wcscat (in: _Dest=0x3df2be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.714] wcscat (in: _Dest=0x3df2be8, _Source="INFOMAIL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" [0155.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27dc [0155.715] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1244b900, ftCreationTime.dwHighDateTime=0x1c6bc7f, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1244b900, ftLastWriteTime.dwHighDateTime=0x1c6bc7f, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1 [0155.715] wcscmp (_String1="INFOML.ICO", _String2=".") returned 1 [0155.715] wcscmp (_String1="INFOML.ICO", _String2="..") returned 1 [0155.715] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b87500, ftCreationTime.dwHighDateTime=0x1c6bc7f, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46b87500, ftLastWriteTime.dwHighDateTime=0x1c6bc7f, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1 [0155.715] wcscmp (_String1="INFOMS.ICO", _String2=".") returned 1 [0155.715] wcscmp (_String1="INFOMS.ICO", _String2="..") returned 1 [0155.715] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda4a900, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdda4a900, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1 [0155.715] wcscmp (_String1="IPM.CFG", _String2=".") returned 1 [0155.715] wcscmp (_String1="IPM.CFG", _String2="..") returned 1 [0155.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81d31a0 [0155.715] wcscpy (in: _Dest=0x81d31a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.715] wcscat (in: _Dest=0x81d31a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.715] wcscat (in: _Dest=0x81d31a0, _Source="IPM.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" [0155.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d31a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e0 [0155.724] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1 [0155.724] wcscmp (_String1="IPML.ICO", _String2=".") returned 1 [0155.724] wcscmp (_String1="IPML.ICO", _String2="..") returned 1 [0155.724] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1 [0155.724] wcscmp (_String1="IPMS.ICO", _String2=".") returned 1 [0155.724] wcscmp (_String1="IPMS.ICO", _String2="..") returned 1 [0155.724] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c3bfd00, ftCreationTime.dwHighDateTime=0x1c67fa8, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c3bfd00, ftLastWriteTime.dwHighDateTime=0x1c67fa8, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1 [0155.724] wcscmp (_String1="MMSL.ICO", _String2=".") returned 1 [0155.724] wcscmp (_String1="MMSL.ICO", _String2="..") returned 1 [0155.724] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d33cc00, ftCreationTime.dwHighDateTime=0x1c68600, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d33cc00, ftLastWriteTime.dwHighDateTime=0x1c68600, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1 [0155.724] wcscmp (_String1="MMSS.ICO", _String2=".") returned 1 [0155.724] wcscmp (_String1="MMSS.ICO", _String2="..") returned 1 [0155.724] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded5d600, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded5d600, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1 [0155.724] wcscmp (_String1="NOTE.CFG", _String2=".") returned 1 [0155.724] wcscmp (_String1="NOTE.CFG", _String2="..") returned 1 [0155.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81d3228 [0155.725] wcscpy (in: _Dest=0x81d3228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.725] wcscat (in: _Dest=0x81d3228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.725] wcscat (in: _Dest=0x81d3228, _Source="NOTE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" [0155.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e4 [0155.726] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1 [0155.726] wcscmp (_String1="NOTEL.ICO", _String2=".") returned 1 [0155.726] wcscmp (_String1="NOTEL.ICO", _String2="..") returned 1 [0155.726] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1 [0155.726] wcscmp (_String1="NOTES.ICO", _String2=".") returned 1 [0155.726] wcscmp (_String1="NOTES.ICO", _String2="..") returned 1 [0155.726] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9620200, ftCreationTime.dwHighDateTime=0x1c9d9cf, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9620200, ftLastWriteTime.dwHighDateTime=0x1c9d9cf, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1 [0155.726] wcscmp (_String1="OMSMMS.CFG", _String2=".") returned 1 [0155.726] wcscmp (_String1="OMSMMS.CFG", _String2="..") returned 1 [0155.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb21e8 [0155.726] wcscpy (in: _Dest=0x3eb21e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.726] wcscat (in: _Dest=0x3eb21e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.727] wcscat (in: _Dest=0x3eb21e8, _Source="OMSMMS.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" [0155.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb21e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e8 [0155.728] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc74d200, ftCreationTime.dwHighDateTime=0x1c9d9cf, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc74d200, ftLastWriteTime.dwHighDateTime=0x1c9d9cf, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1 [0158.647] wcscmp (_String1="OMSSMS.CFG", _String2=".") returned 1 [0158.647] wcscmp (_String1="OMSSMS.CFG", _String2="..") returned 1 [0158.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2668 [0158.647] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0158.647] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0158.647] wcscat (in: _Dest=0x3eb2668, _Source="OMSSMS.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" [0159.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg")) returned 0x20 [0159.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x20) returned 0 [0159.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.912] GetLastError () returned 0x5 [0159.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x20) returned 0 [0159.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 [0159.912] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1 [0159.912] wcscmp (_String1="OOFL.ICO", _String2=".") returned 1 [0159.912] wcscmp (_String1="OOFL.ICO", _String2="..") returned 1 [0159.912] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1 [0159.912] wcscmp (_String1="OOFS.ICO", _String2=".") returned 1 [0159.912] wcscmp (_String1="OOFS.ICO", _String2="..") returned 1 [0159.912] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99b8600, ftCreationTime.dwHighDateTime=0x1c944fe, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd99b8600, ftLastWriteTime.dwHighDateTime=0x1c944fe, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1 [0159.912] wcscmp (_String1="OOFTMPL.CFG", _String2=".") returned 1 [0159.912] wcscmp (_String1="OOFTMPL.CFG", _String2="..") returned 1 [0159.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb2668 [0159.912] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.912] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.912] wcscat (in: _Dest=0x3eb2668, _Source="OOFTMPL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" [0159.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg")) returned 0x20 [0159.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x20) returned 0 [0159.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.913] GetLastError () returned 0x5 [0159.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x20) returned 0 [0159.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 [0159.913] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1383000, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1383000, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1 [0159.913] wcscmp (_String1="POST.CFG", _String2=".") returned 1 [0159.913] wcscmp (_String1="POST.CFG", _String2="..") returned 1 [0159.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bebc8 [0159.913] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.913] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.913] wcscat (in: _Dest=0x81bebc8, _Source="POST.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" [0159.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg")) returned 0x20 [0159.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x20) returned 0 [0159.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.914] GetLastError () returned 0x5 [0159.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x20) returned 0 [0159.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0159.914] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1383000, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1383000, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1 [0159.914] wcscmp (_String1="POSTIT.CFG", _String2=".") returned 1 [0159.914] wcscmp (_String1="POSTIT.CFG", _String2="..") returned 1 [0159.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2668 [0159.914] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.914] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.914] wcscat (in: _Dest=0x3eb2668, _Source="POSTIT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" [0159.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg")) returned 0x20 [0159.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x20) returned 0 [0159.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.915] GetLastError () returned 0x5 [0159.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x20) returned 0 [0159.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 [0159.915] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1 [0159.915] wcscmp (_String1="POSTITL.ICO", _String2=".") returned 1 [0159.916] wcscmp (_String1="POSTITL.ICO", _String2="..") returned 1 [0159.916] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1 [0159.916] wcscmp (_String1="POSTITS.ICO", _String2=".") returned 1 [0159.916] wcscmp (_String1="POSTITS.ICO", _String2="..") returned 1 [0159.916] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1 [0159.916] wcscmp (_String1="POSTL.ICO", _String2=".") returned 1 [0159.916] wcscmp (_String1="POSTL.ICO", _String2="..") returned 1 [0159.916] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1 [0159.916] wcscmp (_String1="POSTS.ICO", _String2=".") returned 1 [0159.916] wcscmp (_String1="POSTS.ICO", _String2="..") returned 1 [0159.916] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1 [0159.916] wcscmp (_String1="RCLRPT.CFG", _String2=".") returned 1 [0159.916] wcscmp (_String1="RCLRPT.CFG", _String2="..") returned 1 [0159.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2668 [0159.916] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.916] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.916] wcscat (in: _Dest=0x3eb2668, _Source="RCLRPT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" [0159.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg")) returned 0x20 [0159.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x20) returned 0 [0159.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.942] GetLastError () returned 0x5 [0159.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x20) returned 0 [0159.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 [0159.943] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1 [0159.943] wcscmp (_String1="REC.CFG", _String2=".") returned 1 [0159.943] wcscmp (_String1="REC.CFG", _String2="..") returned 1 [0159.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x309a680 [0159.943] wcscpy (in: _Dest=0x309a680, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.943] wcscat (in: _Dest=0x309a680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.943] wcscat (in: _Dest=0x309a680, _Source="REC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" [0159.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg")) returned 0x20 [0159.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x20) returned 0 [0159.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.961] GetLastError () returned 0x5 [0159.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x20) returned 0 [0159.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a680) returned 1 [0159.961] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1 [0159.961] wcscmp (_String1="RECL.ICO", _String2=".") returned 1 [0159.961] wcscmp (_String1="RECL.ICO", _String2="..") returned 1 [0159.961] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1 [0159.961] wcscmp (_String1="RECS.ICO", _String2=".") returned 1 [0159.961] wcscmp (_String1="RECS.ICO", _String2="..") returned 1 [0159.961] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1 [0159.961] wcscmp (_String1="REMOTE.CFG", _String2=".") returned 1 [0159.961] wcscmp (_String1="REMOTE.CFG", _String2="..") returned 1 [0159.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0159.961] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.961] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.961] wcscat (in: _Dest=0x81de728, _Source="REMOTE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" [0159.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg")) returned 0x20 [0159.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x20) returned 0 [0159.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.962] GetLastError () returned 0x5 [0159.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x20) returned 0 [0159.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.962] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1 [0159.962] wcscmp (_String1="REMOTEL.ICO", _String2=".") returned 1 [0159.963] wcscmp (_String1="REMOTEL.ICO", _String2="..") returned 1 [0159.963] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1 [0159.963] wcscmp (_String1="REMOTES.ICO", _String2=".") returned 1 [0159.963] wcscmp (_String1="REMOTES.ICO", _String2="..") returned 1 [0159.963] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1 [0159.963] wcscmp (_String1="REPLTMPL.CFG", _String2=".") returned 1 [0159.963] wcscmp (_String1="REPLTMPL.CFG", _String2="..") returned 1 [0159.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0159.963] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.963] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.963] wcscat (in: _Dest=0x81de728, _Source="REPLTMPL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" [0159.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg")) returned 0x20 [0159.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x20) returned 0 [0159.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.972] GetLastError () returned 0x5 [0159.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x20) returned 0 [0159.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1 [0159.972] wcscmp (_String1="REPORT.CFG", _String2=".") returned 1 [0159.972] wcscmp (_String1="REPORT.CFG", _String2="..") returned 1 [0159.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0159.972] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.972] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.972] wcscat (in: _Dest=0x81de728, _Source="REPORT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" [0159.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg")) returned 0x20 [0159.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x20) returned 0 [0159.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.973] GetLastError () returned 0x5 [0159.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x20) returned 0 [0159.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1 [0159.973] wcscmp (_String1="REPORTL.ICO", _String2=".") returned 1 [0159.973] wcscmp (_String1="REPORTL.ICO", _String2="..") returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1 [0159.973] wcscmp (_String1="REPORTS.ICO", _String2=".") returned 1 [0159.973] wcscmp (_String1="REPORTS.ICO", _String2="..") returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe39a8a00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe39a8a00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1 [0159.973] wcscmp (_String1="RESEND.CFG", _String2=".") returned 1 [0159.973] wcscmp (_String1="RESEND.CFG", _String2="..") returned 1 [0159.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0159.973] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.973] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.973] wcscat (in: _Dest=0x81de728, _Source="RESEND.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" [0159.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg")) returned 0x20 [0159.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x20) returned 0 [0159.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.990] GetLastError () returned 0x5 [0159.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x20) returned 0 [0159.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.991] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1 [0159.991] wcscmp (_String1="RESENDL.ICO", _String2=".") returned 1 [0159.991] wcscmp (_String1="RESENDL.ICO", _String2="..") returned 1 [0159.991] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1 [0159.991] wcscmp (_String1="RESENDS.ICO", _String2=".") returned 1 [0159.991] wcscmp (_String1="RESENDS.ICO", _String2="..") returned 1 [0159.991] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a45400, ftCreationTime.dwHighDateTime=0x1c616cc, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6a45400, ftLastWriteTime.dwHighDateTime=0x1c616cc, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1 [0159.991] wcscmp (_String1="RSSITEM.CFG", _String2=".") returned 1 [0159.991] wcscmp (_String1="RSSITEM.CFG", _String2="..") returned 1 [0159.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0159.991] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0159.991] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0159.991] wcscat (in: _Dest=0x81de728, _Source="RSSITEM.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" [0159.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg")) returned 0x20 [0160.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x20) returned 0 [0160.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.008] GetLastError () returned 0x5 [0160.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x20) returned 0 [0160.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.008] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd404d500, ftCreationTime.dwHighDateTime=0x1c6889c, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd404d500, ftLastWriteTime.dwHighDateTime=0x1c6889c, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1 [0160.008] wcscmp (_String1="RSSITEML.ICO", _String2=".") returned 1 [0160.008] wcscmp (_String1="RSSITEML.ICO", _String2="..") returned 1 [0160.008] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b6b900, ftCreationTime.dwHighDateTime=0x1c6889c, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5b6b900, ftLastWriteTime.dwHighDateTime=0x1c6889c, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1 [0160.008] wcscmp (_String1="RSSITEMS.ICO", _String2=".") returned 1 [0160.008] wcscmp (_String1="RSSITEMS.ICO", _String2="..") returned 1 [0160.008] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1 [0160.008] wcscmp (_String1="SCDCNCLL.ICO", _String2=".") returned 1 [0160.008] wcscmp (_String1="SCDCNCLL.ICO", _String2="..") returned 1 [0160.008] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1 [0160.008] wcscmp (_String1="SCDCNCLS.ICO", _String2=".") returned 1 [0160.008] wcscmp (_String1="SCDCNCLS.ICO", _String2="..") returned 1 [0160.008] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1 [0160.008] wcscmp (_String1="SCDREQL.ICO", _String2=".") returned 1 [0160.009] wcscmp (_String1="SCDREQL.ICO", _String2="..") returned 1 [0160.009] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1 [0160.009] wcscmp (_String1="SCDREQS.ICO", _String2=".") returned 1 [0160.009] wcscmp (_String1="SCDREQS.ICO", _String2="..") returned 1 [0160.009] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1 [0160.009] wcscmp (_String1="SCDRESNL.ICO", _String2=".") returned 1 [0160.009] wcscmp (_String1="SCDRESNL.ICO", _String2="..") returned 1 [0160.009] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1 [0160.009] wcscmp (_String1="SCDRESNS.ICO", _String2=".") returned 1 [0160.009] wcscmp (_String1="SCDRESNS.ICO", _String2="..") returned 1 [0160.009] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1 [0160.009] wcscmp (_String1="SCDRESPL.ICO", _String2=".") returned 1 [0160.009] wcscmp (_String1="SCDRESPL.ICO", _String2="..") returned 1 [0160.009] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1 [0160.033] wcscmp (_String1="SCDRESPS.ICO", _String2=".") returned 1 [0160.033] wcscmp (_String1="SCDRESPS.ICO", _String2="..") returned 1 [0160.033] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1 [0160.033] wcscmp (_String1="SCDRESTL.ICO", _String2=".") returned 1 [0160.033] wcscmp (_String1="SCDRESTL.ICO", _String2="..") returned 1 [0160.033] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1 [0160.033] wcscmp (_String1="SCDRESTS.ICO", _String2=".") returned 1 [0160.033] wcscmp (_String1="SCDRESTS.ICO", _String2="..") returned 1 [0160.033] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe39a8a00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe39a8a00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1 [0160.033] wcscmp (_String1="SCHDCNCL.CFG", _String2=".") returned 1 [0160.033] wcscmp (_String1="SCHDCNCL.CFG", _String2="..") returned 1 [0160.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0160.033] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.033] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.033] wcscat (in: _Dest=0x81de7b8, _Source="SCHDCNCL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" [0160.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg")) returned 0x20 [0160.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x20) returned 0 [0160.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.049] GetLastError () returned 0x5 [0160.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x20) returned 0 [0160.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.050] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fdf200, ftCreationTime.dwHighDateTime=0x1bfc516, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x40fdf200, ftLastWriteTime.dwHighDateTime=0x1bfc516, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1 [0160.050] wcscmp (_String1="SCHDREQ.CFG", _String2=".") returned 1 [0160.050] wcscmp (_String1="SCHDREQ.CFG", _String2="..") returned 1 [0160.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.050] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.050] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.050] wcscat (in: _Dest=0x81de7b8, _Source="SCHDREQ.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" [0160.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg")) returned 0x20 [0160.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x20) returned 0 [0160.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.050] GetLastError () returned 0x5 [0160.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x20) returned 0 [0160.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.051] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cbb700, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4cbb700, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1 [0160.051] wcscmp (_String1="SCHDRESN.CFG", _String2=".") returned 1 [0160.051] wcscmp (_String1="SCHDRESN.CFG", _String2="..") returned 1 [0160.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0160.051] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.051] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.051] wcscat (in: _Dest=0x81de7b8, _Source="SCHDRESN.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" [0160.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg")) returned 0x20 [0160.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x20) returned 0 [0160.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.051] GetLastError () returned 0x5 [0160.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x20) returned 0 [0160.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.052] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cbb700, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4cbb700, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1 [0160.052] wcscmp (_String1="SCHDRESP.CFG", _String2=".") returned 1 [0160.052] wcscmp (_String1="SCHDRESP.CFG", _String2="..") returned 1 [0160.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0160.052] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.052] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.052] wcscat (in: _Dest=0x81de7b8, _Source="SCHDRESP.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" [0160.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg")) returned 0x20 [0160.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x20) returned 0 [0160.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.052] GetLastError () returned 0x5 [0160.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x20) returned 0 [0160.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.053] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cbb700, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4cbb700, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1 [0160.053] wcscmp (_String1="SCHDREST.CFG", _String2=".") returned 1 [0160.053] wcscmp (_String1="SCHDREST.CFG", _String2="..") returned 1 [0160.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0160.053] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.053] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.053] wcscat (in: _Dest=0x81de7b8, _Source="SCHDREST.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" [0160.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg")) returned 0x20 [0160.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x20) returned 0 [0160.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.054] GetLastError () returned 0x5 [0160.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x20) returned 0 [0160.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.054] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fef800, ftCreationTime.dwHighDateTime=0x1c2b0e3, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x19fef800, ftLastWriteTime.dwHighDateTime=0x1c2b0e3, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1 [0160.054] wcscmp (_String1="SECREC.CFG", _String2=".") returned 1 [0160.054] wcscmp (_String1="SECREC.CFG", _String2="..") returned 1 [0160.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0160.054] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.054] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.054] wcscat (in: _Dest=0x81de7b8, _Source="SECREC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" [0160.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg")) returned 0x20 [0160.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x20) returned 0 [0160.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.055] GetLastError () returned 0x5 [0160.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x20) returned 0 [0160.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.055] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1 [0160.055] wcscmp (_String1="SECRECL.ICO", _String2=".") returned 1 [0160.055] wcscmp (_String1="SECRECL.ICO", _String2="..") returned 1 [0160.055] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1 [0160.055] wcscmp (_String1="SECRECS.ICO", _String2=".") returned 1 [0160.055] wcscmp (_String1="SECRECS.ICO", _String2="..") returned 1 [0160.055] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1 [0160.055] wcscmp (_String1="SECURE.CFG", _String2=".") returned 1 [0160.055] wcscmp (_String1="SECURE.CFG", _String2="..") returned 1 [0160.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0160.055] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.055] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.055] wcscat (in: _Dest=0x81de7b8, _Source="SECURE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" [0160.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg")) returned 0x20 [0160.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x20) returned 0 [0160.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.063] GetLastError () returned 0x5 [0160.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x20) returned 0 [0160.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.064] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1 [0160.064] wcscmp (_String1="SECURL.ICO", _String2=".") returned 1 [0160.064] wcscmp (_String1="SECURL.ICO", _String2="..") returned 1 [0160.064] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1 [0160.064] wcscmp (_String1="SECURS.ICO", _String2=".") returned 1 [0160.064] wcscmp (_String1="SECURS.ICO", _String2="..") returned 1 [0160.064] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ae7300, ftCreationTime.dwHighDateTime=0x1c616cc, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0ae7300, ftLastWriteTime.dwHighDateTime=0x1c616cc, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1 [0160.064] wcscmp (_String1="SHARING.CFG", _String2=".") returned 1 [0160.064] wcscmp (_String1="SHARING.CFG", _String2="..") returned 1 [0160.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.064] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.064] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.064] wcscat (in: _Dest=0x81de7b8, _Source="SHARING.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" [0160.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg")) returned 0x20 [0160.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x20) returned 0 [0160.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.070] GetLastError () returned 0x5 [0160.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x20) returned 0 [0160.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.071] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1 [0160.071] wcscmp (_String1="SIGN.CFG", _String2=".") returned 1 [0160.071] wcscmp (_String1="SIGN.CFG", _String2="..") returned 1 [0160.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bebc8 [0160.071] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.071] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.071] wcscat (in: _Dest=0x81bebc8, _Source="SIGN.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" [0160.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg")) returned 0x20 [0160.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x20) returned 0 [0160.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.072] GetLastError () returned 0x5 [0160.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x20) returned 0 [0160.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.072] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1 [0160.072] wcscmp (_String1="SIGNL.ICO", _String2=".") returned 1 [0160.072] wcscmp (_String1="SIGNL.ICO", _String2="..") returned 1 [0160.072] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1 [0160.072] wcscmp (_String1="SIGNS.ICO", _String2=".") returned 1 [0160.072] wcscmp (_String1="SIGNS.ICO", _String2="..") returned 1 [0160.072] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1 [0160.072] wcscmp (_String1="SMIMEE.CFG", _String2=".") returned 1 [0160.072] wcscmp (_String1="SMIMEE.CFG", _String2="..") returned 1 [0160.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0160.072] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.073] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.073] wcscat (in: _Dest=0x81de7b8, _Source="SMIMEE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" [0160.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg")) returned 0x20 [0160.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x20) returned 0 [0160.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.149] GetLastError () returned 0x5 [0160.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x20) returned 0 [0160.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.149] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1 [0160.149] wcscmp (_String1="SMIMES.CFG", _String2=".") returned 1 [0160.149] wcscmp (_String1="SMIMES.CFG", _String2="..") returned 1 [0160.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0160.149] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.149] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.149] wcscat (in: _Dest=0x81de7b8, _Source="SMIMES.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" [0160.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg")) returned 0x20 [0160.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x20) returned 0 [0160.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.150] GetLastError () returned 0x5 [0160.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x20) returned 0 [0160.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.150] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52ded00, ftCreationTime.dwHighDateTime=0x1c6674a, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc52ded00, ftLastWriteTime.dwHighDateTime=0x1c6674a, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1 [0160.150] wcscmp (_String1="SMSL.ICO", _String2=".") returned 1 [0160.150] wcscmp (_String1="SMSL.ICO", _String2="..") returned 1 [0160.150] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41480a00, ftCreationTime.dwHighDateTime=0x1c68600, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41480a00, ftLastWriteTime.dwHighDateTime=0x1c68600, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1 [0160.150] wcscmp (_String1="SMSS.ICO", _String2=".") returned 1 [0160.150] wcscmp (_String1="SMSS.ICO", _String2="..") returned 1 [0160.150] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1 [0160.150] wcscmp (_String1="TASK.CFG", _String2=".") returned 1 [0160.150] wcscmp (_String1="TASK.CFG", _String2="..") returned 1 [0160.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81be458 [0160.150] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0160.150] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0160.150] wcscat (in: _Dest=0x81be458, _Source="TASK.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" [0160.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg")) returned 0x20 [0162.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x20) returned 0 [0162.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.225] GetLastError () returned 0x5 [0162.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x20) returned 0 [0162.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0162.225] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1 [0162.225] wcscmp (_String1="TASKACC.CFG", _String2=".") returned 1 [0162.225] wcscmp (_String1="TASKACC.CFG", _String2="..") returned 1 [0162.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de698 [0162.225] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.225] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.225] wcscat (in: _Dest=0x81de698, _Source="TASKACC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" [0167.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0167.287] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1 [0167.287] wcscmp (_String1="TASKACCL.ICO", _String2=".") returned 1 [0167.287] wcscmp (_String1="TASKACCL.ICO", _String2="..") returned 1 [0167.287] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1 [0167.288] wcscmp (_String1="TASKACCS.ICO", _String2=".") returned 1 [0167.288] wcscmp (_String1="TASKACCS.ICO", _String2="..") returned 1 [0167.288] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1 [0167.288] wcscmp (_String1="TASKDEC.CFG", _String2=".") returned 1 [0167.288] wcscmp (_String1="TASKDEC.CFG", _String2="..") returned 1 [0167.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb2788 [0167.288] wcscpy (in: _Dest=0x3eb2788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0167.288] wcscat (in: _Dest=0x3eb2788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0167.288] wcscat (in: _Dest=0x3eb2788, _Source="TASKDEC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" [0167.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0167.291] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1 [0167.291] wcscmp (_String1="TASKDECL.ICO", _String2=".") returned 1 [0167.291] wcscmp (_String1="TASKDECL.ICO", _String2="..") returned 1 [0167.291] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1 [0167.291] wcscmp (_String1="TASKDECS.ICO", _String2=".") returned 1 [0167.291] wcscmp (_String1="TASKDECS.ICO", _String2="..") returned 1 [0167.291] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1 [0167.291] wcscmp (_String1="TASKL.ICO", _String2=".") returned 1 [0167.291] wcscmp (_String1="TASKL.ICO", _String2="..") returned 1 [0167.291] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1 [0167.291] wcscmp (_String1="TASKREQ.CFG", _String2=".") returned 1 [0167.291] wcscmp (_String1="TASKREQ.CFG", _String2="..") returned 1 [0167.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb28a8 [0167.291] wcscpy (in: _Dest=0x3eb28a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0167.292] wcscat (in: _Dest=0x3eb28a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0167.292] wcscat (in: _Dest=0x3eb28a8, _Source="TASKREQ.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" [0167.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb28a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0167.293] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1 [0167.293] wcscmp (_String1="TASKREQL.ICO", _String2=".") returned 1 [0167.293] wcscmp (_String1="TASKREQL.ICO", _String2="..") returned 1 [0167.293] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1 [0167.293] wcscmp (_String1="TASKREQS.ICO", _String2=".") returned 1 [0167.293] wcscmp (_String1="TASKREQS.ICO", _String2="..") returned 1 [0167.293] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1 [0167.293] wcscmp (_String1="TASKS.ICO", _String2=".") returned 1 [0167.293] wcscmp (_String1="TASKS.ICO", _String2="..") returned 1 [0167.293] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe72e1100, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe72e1100, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1 [0167.293] wcscmp (_String1="TASKUPD.CFG", _String2=".") returned 1 [0167.293] wcscmp (_String1="TASKUPD.CFG", _String2="..") returned 1 [0167.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1978 [0167.294] wcscpy (in: _Dest=0x3eb1978, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0167.294] wcscat (in: _Dest=0x3eb1978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0167.294] wcscat (in: _Dest=0x3eb1978, _Source="TASKUPD.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" [0167.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0167.295] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe72e1100, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe72e1100, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0 [0167.295] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0167.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e530) returned 1 [0167.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0167.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 Thread: id = 1781 os_tid = 0x1764 [0149.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ecd4e0 [0149.902] wcscpy (in: _Dest=0x3ecd4e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0149.902] wcscat (in: _Dest=0x3ecd4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0149.902] wcscat (in: _Dest=0x3ecd4e0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\*" [0149.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e2c8 [0149.902] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0150.225] wcscmp (_String1=".", _String2=".") returned 0 [0150.225] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.225] wcscmp (_String1="..", _String2=".") returned 1 [0150.225] wcscmp (_String1="..", _String2="..") returned 0 [0150.225] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0150.225] wcscmp (_String1="cursors.properties", _String2=".") returned 1 [0150.225] wcscmp (_String1="cursors.properties", _String2="..") returned 1 [0150.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3550e0 [0150.225] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0150.225] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0150.225] wcscat (in: _Dest=0x3550e0, _Source="cursors.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" [0151.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0151.728] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0151.728] wcscmp (_String1="invalid32x32.gif", _String2=".") returned 1 [0151.728] wcscmp (_String1="invalid32x32.gif", _String2="..") returned 1 [0151.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f308d0 [0151.729] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0151.729] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0151.729] wcscat (in: _Dest=0x3f308d0, _Source="invalid32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" [0151.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0151.730] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0151.730] wcscmp (_String1="win32_CopyDrop32x32.gif", _String2=".") returned 1 [0151.730] wcscmp (_String1="win32_CopyDrop32x32.gif", _String2="..") returned 1 [0151.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ba98 [0151.730] wcscpy (in: _Dest=0x3e2ba98, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0151.730] wcscat (in: _Dest=0x3e2ba98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0151.730] wcscat (in: _Dest=0x3e2ba98, _Source="win32_CopyDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" [0151.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ba98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0151.731] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0151.731] wcscmp (_String1="win32_CopyNoDrop32x32.gif", _String2=".") returned 1 [0151.731] wcscmp (_String1="win32_CopyNoDrop32x32.gif", _String2="..") returned 1 [0151.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2bbc8 [0151.731] wcscpy (in: _Dest=0x3e2bbc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0151.731] wcscat (in: _Dest=0x3e2bbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0151.731] wcscat (in: _Dest=0x3e2bbc8, _Source="win32_CopyNoDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" [0151.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0151.732] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0151.732] wcscmp (_String1="win32_LinkDrop32x32.gif", _String2=".") returned 1 [0151.732] wcscmp (_String1="win32_LinkDrop32x32.gif", _String2="..") returned 1 [0151.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2be28 [0151.732] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0151.732] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0151.732] wcscat (in: _Dest=0x3e2be28, _Source="win32_LinkDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" [0151.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2be28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0151.733] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0151.733] wcscmp (_String1="win32_LinkNoDrop32x32.gif", _String2=".") returned 1 [0151.733] wcscmp (_String1="win32_LinkNoDrop32x32.gif", _String2="..") returned 1 [0151.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d0d40 [0151.733] wcscpy (in: _Dest=0x81d0d40, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0151.733] wcscat (in: _Dest=0x81d0d40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0151.733] wcscat (in: _Dest=0x81d0d40, _Source="win32_LinkNoDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" [0151.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0151.734] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0151.734] wcscmp (_String1="win32_MoveDrop32x32.gif", _String2=".") returned 1 [0151.735] wcscmp (_String1="win32_MoveDrop32x32.gif", _String2="..") returned 1 [0151.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d0dd8 [0151.735] wcscpy (in: _Dest=0x81d0dd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0151.735] wcscat (in: _Dest=0x81d0dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0151.735] wcscat (in: _Dest=0x81d0dd8, _Source="win32_MoveDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" [0151.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0151.736] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0151.736] wcscmp (_String1="win32_MoveNoDrop32x32.gif", _String2=".") returned 1 [0151.736] wcscmp (_String1="win32_MoveNoDrop32x32.gif", _String2="..") returned 1 [0151.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d0e70 [0151.736] wcscpy (in: _Dest=0x81d0e70, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0151.736] wcscat (in: _Dest=0x81d0e70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0151.736] wcscat (in: _Dest=0x81d0e70, _Source="win32_MoveNoDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" [0151.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad8 [0151.737] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0151.737] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0151.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e2c8) returned 1 [0151.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd4e0) returned 1 [0151.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d370) returned 1 Thread: id = 1782 os_tid = 0x17c8 [0149.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files\\java\\jre7\\lib\\i386\\jvm.cfg")) returned 0x20 [0149.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg", dwFileAttributes=0x20) returned 0 [0149.905] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files\\java\\jre7\\lib\\i386\\jvm.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.905] GetLastError () returned 0x5 [0149.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg", dwFileAttributes=0x20) returned 0 [0149.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7328) returned 1 Thread: id = 1783 os_tid = 0x17cc [0149.907] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm")) returned 0x20 [0149.907] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0149.907] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.907] GetLastError () returned 0x5 [0149.907] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0149.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 1784 os_tid = 0x17dc [0149.908] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm")) returned 0x20 [0149.909] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0149.909] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.909] GetLastError () returned 0x5 [0149.909] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0149.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 1785 os_tid = 0xac8 [0149.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d5968 [0149.910] wcscpy (in: _Dest=0x81d5968, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0149.910] wcscat (in: _Dest=0x81d5968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0149.910] wcscat (in: _Dest=0x81d5968, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" [0149.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e798 [0149.910] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0149.911] wcscmp (_String1=".", _String2=".") returned 0 [0149.911] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.911] wcscmp (_String1="..", _String2=".") returned 1 [0149.911] wcscmp (_String1="..", _String2="..") returned 0 [0149.911] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0149.911] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0149.911] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0149.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80209c0 [0149.911] wcscpy (in: _Dest=0x80209c0, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0149.911] wcscat (in: _Dest=0x80209c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0149.911] wcscat (in: _Dest=0x80209c0, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0154.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80209c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0154.036] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0154.036] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0154.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e798) returned 1 [0154.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5968) returned 1 [0154.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 1786 os_tid = 0x7ec [0149.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0149.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0149.921] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.926] GetLastError () returned 0x5 [0149.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0149.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f6f0) returned 1 Thread: id = 1787 os_tid = 0x598 [0149.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0149.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x20) returned 0 [0149.937] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.943] GetLastError () returned 0x5 [0149.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x20) returned 0 [0149.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 1788 os_tid = 0xb4c [0149.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0150.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x20) returned 0 [0150.900] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.900] GetLastError () returned 0x5 [0150.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x20) returned 0 [0150.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24140) returned 1 Thread: id = 1789 os_tid = 0x6a8 [0149.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0150.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x20) returned 0 [0150.902] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.902] GetLastError () returned 0x5 [0150.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x20) returned 0 [0150.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f118) returned 1 Thread: id = 1790 os_tid = 0x6a4 [0149.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0150.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0150.908] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.930] GetLastError () returned 0x5 [0150.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0150.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23ec0) returned 1 Thread: id = 1791 os_tid = 0x448 [0149.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0150.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x20) returned 0 [0150.649] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.651] GetLastError () returned 0x5 [0150.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x20) returned 0 [0150.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e241c0) returned 1 Thread: id = 1792 os_tid = 0x524 [0149.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0150.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x20) returned 0 [0150.654] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.654] GetLastError () returned 0x5 [0150.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x20) returned 0 [0150.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f090) returned 1 Thread: id = 1793 os_tid = 0x14c [0149.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0150.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x20) returned 0 [0150.652] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.653] GetLastError () returned 0x5 [0150.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x20) returned 0 [0150.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35e20) returned 1 Thread: id = 1794 os_tid = 0x4f8 [0149.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add")) returned 0x20 [0149.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD", dwFileAttributes=0x20) returned 0 [0149.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.955] GetLastError () returned 0x5 [0149.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD", dwFileAttributes=0x20) returned 0 [0149.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 Thread: id = 1795 os_tid = 0x754 [0149.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9690 [0149.957] wcscpy (in: _Dest=0x3df9690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0149.957] wcscat (in: _Dest=0x3df9690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0149.957] wcscat (in: _Dest=0x3df9690, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*" [0149.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ffa8 [0149.957] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8922da70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0150.231] wcscmp (_String1=".", _String2=".") returned 0 [0150.231] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8922da70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.232] wcscmp (_String1="..", _String2=".") returned 1 [0150.232] wcscmp (_String1="..", _String2="..") returned 0 [0150.232] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x896f0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x896f0670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServices", cAlternateFileName="INFOPA~2")) returned 1 [0150.232] wcscmp (_String1="InfoPathOMFormServices", _String2=".") returned 1 [0150.232] wcscmp (_String1="InfoPathOMFormServices", _String2="..") returned 1 [0150.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81865a8 [0150.232] wcscpy (in: _Dest=0x81865a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0150.232] wcscat (in: _Dest=0x81865a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0150.232] wcscat (in: _Dest=0x81865a8, _Source="InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0156.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81865a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0156.431] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89253bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMV12", cAlternateFileName="INFOPA~1")) returned 1 [0156.431] wcscmp (_String1="InfoPathOMV12", _String2=".") returned 1 [0156.431] wcscmp (_String1="InfoPathOMV12", _String2="..") returned 1 [0156.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dd6d8 [0156.431] wcscpy (in: _Dest=0x81dd6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0156.431] wcscat (in: _Dest=0x81dd6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0156.431] wcscat (in: _Dest=0x81dd6d8, _Source="InfoPathOMV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" [0156.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81dd6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c0 [0156.432] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xe770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0156.432] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0156.432] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0156.432] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0156.433] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0156.433] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0156.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d9d28 [0156.433] wcscpy (in: _Dest=0x81d9d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0156.433] wcscat (in: _Dest=0x81d9d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0156.433] wcscat (in: _Dest=0x81d9d28, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" [0156.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c4 [0156.434] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0156.434] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0156.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ffa8) returned 1 [0156.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0156.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 Thread: id = 1796 os_tid = 0x894 [0149.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss")) returned 0x20 [0154.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss", dwFileAttributes=0x20) returned 0 [0154.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.435] GetLastError () returned 0x5 [0154.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss", dwFileAttributes=0x20) returned 0 [0154.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ac58) returned 1 Thread: id = 1797 os_tid = 0xba4 [0149.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss")) returned 0x20 [0154.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss", dwFileAttributes=0x20) returned 0 [0154.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.434] GetLastError () returned 0x5 [0154.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss", dwFileAttributes=0x20) returned 0 [0154.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35eb0) returned 1 Thread: id = 1798 os_tid = 0xb9c [0149.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml")) returned 0x20 [0151.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML", dwFileAttributes=0x20) returned 0 [0151.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.765] GetLastError () returned 0x5 [0153.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML", dwFileAttributes=0x20) returned 0 [0153.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 Thread: id = 1799 os_tid = 0xb98 [0149.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml")) returned 0x20 [0153.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML", dwFileAttributes=0x20) returned 0 [0153.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.989] GetLastError () returned 0x5 [0153.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML", dwFileAttributes=0x20) returned 0 [0153.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 1800 os_tid = 0xbb8 [0149.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl")) returned 0x20 [0154.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL", dwFileAttributes=0x20) returned 0 [0154.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.426] GetLastError () returned 0x5 [0154.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL", dwFileAttributes=0x20) returned 0 [0154.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 Thread: id = 1801 os_tid = 0x8d4 [0149.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl")) returned 0x20 [0153.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL", dwFileAttributes=0x20) returned 0 [0153.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.900] GetLastError () returned 0x5 [0153.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL", dwFileAttributes=0x20) returned 0 [0153.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 Thread: id = 1802 os_tid = 0x8e8 [0149.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl")) returned 0x20 [0153.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL", dwFileAttributes=0x20) returned 0 [0153.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.991] GetLastError () returned 0x5 [0153.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL", dwFileAttributes=0x20) returned 0 [0153.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 Thread: id = 1803 os_tid = 0x8f8 [0149.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl")) returned 0x20 [0154.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL", dwFileAttributes=0x20) returned 0 [0154.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.424] GetLastError () returned 0x5 [0154.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL", dwFileAttributes=0x20) returned 0 [0154.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68150) returned 1 Thread: id = 1804 os_tid = 0xadc [0149.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl")) returned 0x20 [0154.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL", dwFileAttributes=0x20) returned 0 [0154.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.428] GetLastError () returned 0x5 [0154.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL", dwFileAttributes=0x20) returned 0 [0154.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 Thread: id = 1805 os_tid = 0x7e0 [0149.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl")) returned 0x20 [0154.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL", dwFileAttributes=0x20) returned 0 [0154.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.430] GetLastError () returned 0x5 [0154.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL", dwFileAttributes=0x20) returned 0 [0154.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 Thread: id = 1806 os_tid = 0x578 [0149.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat")) returned 0x20 [0154.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT", dwFileAttributes=0x20) returned 0 [0154.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.431] GetLastError () returned 0x5 [0154.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT", dwFileAttributes=0x20) returned 0 [0154.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68588) returned 1 Thread: id = 1807 os_tid = 0x32c [0149.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp")) returned 0x20 [0153.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP", dwFileAttributes=0x20) returned 0 [0153.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.988] GetLastError () returned 0x5 [0153.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP", dwFileAttributes=0x20) returned 0 [0153.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e08) returned 1 Thread: id = 1808 os_tid = 0x5f4 [0149.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3df8bc8 [0149.966] wcscpy (in: _Dest=0x3df8bc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0149.966] wcscat (in: _Dest=0x3df8bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0149.966] wcscat (in: _Dest=0x3df8bc8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*" [0149.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80912e8 [0149.967] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x878e30b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f375d8 [0154.433] wcscmp (_String1=".", _String2=".") returned 0 [0154.433] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x878e30b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.433] wcscmp (_String1="..", _String2=".") returned 1 [0154.433] wcscmp (_String1="..", _String2="..") returned 0 [0154.433] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f6bdf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1 [0154.433] wcscmp (_String1="Analysis", _String2=".") returned 1 [0154.433] wcscmp (_String1="Analysis", _String2="..") returned 1 [0154.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5608 [0154.433] wcscpy (in: _Dest=0x3dc5608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0154.433] wcscat (in: _Dest=0x3dc5608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0154.433] wcscat (in: _Dest=0x3dc5608, _Source="Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0155.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e0 [0155.111] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x87909210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1 [0155.111] wcscmp (_String1="EUROTOOL.XLAM", _String2=".") returned 1 [0155.111] wcscmp (_String1="EUROTOOL.XLAM", _String2="..") returned 1 [0155.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x355170 [0155.112] wcscpy (in: _Dest=0x355170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0155.112] wcscat (in: _Dest=0x355170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0155.112] wcscat (in: _Dest=0x355170, _Source="EUROTOOL.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" [0155.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x355170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26d4 [0155.113] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1 [0155.113] wcscmp (_String1="SOLVER", _String2=".") returned 1 [0155.113] wcscmp (_String1="SOLVER", _String2="..") returned 1 [0155.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831b558 [0155.113] wcscpy (in: _Dest=0x831b558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0155.113] wcscat (in: _Dest=0x831b558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0155.113] wcscat (in: _Dest=0x831b558, _Source="SOLVER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" [0155.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x831b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26d8 [0155.114] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0 [0155.115] FindClose (in: hFindFile=0x3f375d8 | out: hFindFile=0x3f375d8) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80912e8) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5470) returned 1 Thread: id = 1809 os_tid = 0x5d8 [0149.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl")) returned 0x20 [0152.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL", dwFileAttributes=0x20) returned 0 [0152.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.422] GetLastError () returned 0x5 [0154.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL", dwFileAttributes=0x20) returned 0 [0154.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 Thread: id = 1810 os_tid = 0x99c [0149.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat")) returned 0x20 [0152.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0152.102] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.102] GetLastError () returned 0x5 [0152.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0152.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4608) returned 1 Thread: id = 1811 os_tid = 0xe4c [0149.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs")) returned 0x20 [0151.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0151.638] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.638] GetLastError () returned 0x5 [0151.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0151.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e243c0) returned 1 Thread: id = 1812 os_tid = 0x9cc [0149.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht")) returned 0x20 [0151.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0151.636] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.636] GetLastError () returned 0x5 [0151.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0151.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e244c0) returned 1 Thread: id = 1813 os_tid = 0x9dc [0149.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze")) returned 0x20 [0152.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0152.105] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.105] GetLastError () returned 0x5 [0152.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0152.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a658) returned 1 Thread: id = 1814 os_tid = 0xf50 [0149.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan")) returned 0x20 [0152.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0152.103] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.104] GetLastError () returned 0x5 [0152.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0152.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a758) returned 1 Thread: id = 1815 os_tid = 0xe74 [0149.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu")) returned 0x20 [0152.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0152.110] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.111] GetLastError () returned 0x5 [0152.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0152.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831ab58) returned 1 Thread: id = 1816 os_tid = 0x6f0 [0149.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp")) returned 0x20 [0152.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0152.112] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.112] GetLastError () returned 0x5 [0152.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0152.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a458) returned 1 Thread: id = 1817 os_tid = 0x714 [0149.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq")) returned 0x20 [0152.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0152.125] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.125] GetLastError () returned 0x5 [0152.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0152.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a9d8) returned 1 Thread: id = 1818 os_tid = 0x710 [0149.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra")) returned 0x20 [0152.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0152.113] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.114] GetLastError () returned 0x5 [0152.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0152.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a8d8) returned 1 Thread: id = 1819 os_tid = 0x1804 [0149.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv")) returned 0x20 [0152.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0152.126] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.126] GetLastError () returned 0x5 [0152.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0152.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b058) returned 1 Thread: id = 1820 os_tid = 0x1808 [0149.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun")) returned 0x20 [0152.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0152.128] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.128] GetLastError () returned 0x5 [0152.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0152.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831afd8) returned 1 Thread: id = 1821 os_tid = 0x180c [0149.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita")) returned 0x20 [0152.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0152.129] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.129] GetLastError () returned 0x5 [0152.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0152.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831af58) returned 1 Thread: id = 1822 os_tid = 0x1810 [0149.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn")) returned 0x20 [0152.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0152.130] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.130] GetLastError () returned 0x5 [0152.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0152.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831aed8) returned 1 Thread: id = 1823 os_tid = 0x1814 [0149.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor")) returned 0x20 [0152.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0152.116] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.116] GetLastError () returned 0x5 [0152.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0152.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831ae58) returned 1 Thread: id = 1824 os_tid = 0x1818 [0149.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld")) returned 0x20 [0151.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0151.635] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.635] GetLastError () returned 0x5 [0151.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0151.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831add8) returned 1 Thread: id = 1825 os_tid = 0x181c [0149.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor")) returned 0x20 [0152.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0152.117] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.117] GetLastError () returned 0x5 [0152.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0152.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831ad58) returned 1 Thread: id = 1826 os_tid = 0x1820 [0149.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol")) returned 0x20 [0152.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0152.119] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.119] GetLastError () returned 0x5 [0152.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0152.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831abd8) returned 1 Thread: id = 1827 os_tid = 0x1824 [0149.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb")) returned 0x20 [0152.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0152.120] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.120] GetLastError () returned 0x5 [0152.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0152.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831ac58) returned 1 Thread: id = 1828 os_tid = 0x1828 [0149.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum")) returned 0x20 [0152.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0152.121] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.121] GetLastError () returned 0x5 [0152.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0152.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b0d8) returned 1 Thread: id = 1829 os_tid = 0x182c [0149.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus")) returned 0x20 [0152.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0152.122] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.122] GetLastError () returned 0x5 [0152.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0152.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b158) returned 1 Thread: id = 1830 os_tid = 0x1830 [0149.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky")) returned 0x20 [0152.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0152.123] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.123] GetLastError () returned 0x5 [0152.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0152.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b1d8) returned 1 Thread: id = 1831 os_tid = 0x1834 [0149.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv")) returned 0x20 [0152.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0152.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.124] GetLastError () returned 0x5 [0152.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0152.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b258) returned 1 Thread: id = 1832 os_tid = 0x1838 [0150.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo")) returned 0x20 [0152.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0152.109] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.109] GetLastError () returned 0x5 [0152.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0152.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b2d8) returned 1 Thread: id = 1833 os_tid = 0x1844 [0150.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest")) returned 0x20 [0150.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", dwFileAttributes=0x20) returned 0 [0150.237] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.237] GetLastError () returned 0x5 [0150.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", dwFileAttributes=0x20) returned 0 [0150.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186b90) returned 1 Thread: id = 1834 os_tid = 0x1848 [0150.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig")) returned 0x20 [0150.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", dwFileAttributes=0x20) returned 0 [0150.238] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.238] GetLastError () returned 0x5 [0150.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", dwFileAttributes=0x20) returned 0 [0150.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3daa0) returned 1 Thread: id = 1835 os_tid = 0x184c [0150.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig")) returned 0x20 [0150.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", dwFileAttributes=0x20) returned 0 [0150.240] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.240] GetLastError () returned 0x5 [0150.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", dwFileAttributes=0x20) returned 0 [0150.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 1836 os_tid = 0x1850 [0150.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak")) returned 0x20 [0150.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", dwFileAttributes=0x20) returned 0 [0150.242] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.242] GetLastError () returned 0x5 [0150.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", dwFileAttributes=0x20) returned 0 [0150.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f0) returned 1 Thread: id = 1837 os_tid = 0x1854 [0150.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak")) returned 0x20 [0151.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", dwFileAttributes=0x20) returned 0 [0151.624] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.738] GetLastError () returned 0x5 [0153.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", dwFileAttributes=0x20) returned 0 [0153.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186d88) returned 1 Thread: id = 1838 os_tid = 0x1858 [0150.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig")) returned 0x20 [0153.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", dwFileAttributes=0x20) returned 0 [0153.789] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.286] GetLastError () returned 0x5 [0155.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", dwFileAttributes=0x20) returned 0 [0155.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 Thread: id = 1839 os_tid = 0x185c [0150.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c9f0 [0150.247] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0150.247] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0150.247] wcscat (in: _Dest=0x32c9f0, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*" [0150.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091a20 [0150.247] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54ac8 [0154.482] wcscmp (_String1=".", _String2=".") returned 0 [0154.482] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.482] wcscmp (_String1="..", _String2=".") returned 1 [0154.482] wcscmp (_String1="..", _String2="..") returned 0 [0154.482] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265c5c46, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0154.482] wcscmp (_String1="docs.crx", _String2=".") returned 1 [0154.482] wcscmp (_String1="docs.crx", _String2="..") returned 1 [0154.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187370 [0154.482] wcscpy (in: _Dest=0x8187370, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0154.482] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0154.482] wcscat (in: _Dest=0x8187370, _Source="docs.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" [0156.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0156.640] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265d46ac, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0156.640] wcscmp (_String1="drive.crx", _String2=".") returned 1 [0156.640] wcscmp (_String1="drive.crx", _String2="..") returned 1 [0156.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8188138 [0156.641] wcscpy (in: _Dest=0x8188138, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0156.641] wcscat (in: _Dest=0x8188138, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0156.641] wcscat (in: _Dest=0x8188138, _Source="drive.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" [0156.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a90 [0156.642] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26602cef, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0156.642] wcscmp (_String1="external_extensions.json", _String2=".") returned 1 [0156.642] wcscmp (_String1="external_extensions.json", _String2="..") returned 1 [0156.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d6390 [0156.642] wcscpy (in: _Dest=0x81d6390, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0156.642] wcscat (in: _Dest=0x81d6390, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0156.642] wcscat (in: _Dest=0x81d6390, _Source="external_extensions.json" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" [0156.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a94 [0156.643] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265e3112, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0156.643] wcscmp (_String1="gmail.crx", _String2=".") returned 1 [0156.643] wcscmp (_String1="gmail.crx", _String2="..") returned 1 [0156.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8188288 [0156.643] wcscpy (in: _Dest=0x8188288, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0156.643] wcscat (in: _Dest=0x8188288, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0156.643] wcscat (in: _Dest=0x8188288, _Source="gmail.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" [0156.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a98 [0156.644] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265f90ab, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0156.644] wcscmp (_String1="youtube.crx", _String2=".") returned 1 [0156.645] wcscmp (_String1="youtube.crx", _String2="..") returned 1 [0156.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da6c8 [0156.645] wcscpy (in: _Dest=0x81da6c8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0156.645] wcscat (in: _Dest=0x81da6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0156.645] wcscat (in: _Dest=0x81da6c8, _Source="youtube.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" [0156.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0156.646] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265f90ab, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 0 [0156.646] FindClose (in: hFindFile=0x3e54ac8 | out: hFindFile=0x3e54ac8) returned 1 [0156.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091a20) returned 1 [0156.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 [0156.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ce18) returned 1 Thread: id = 1840 os_tid = 0x1860 [0150.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0150.247] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" [0150.247] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\" [0150.247] wcscat (in: _Dest=0x32d408, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*" [0150.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e060 [0150.247] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0151.283] wcscmp (_String1=".", _String2=".") returned 0 [0151.283] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.283] wcscmp (_String1="..", _String2=".") returned 1 [0151.283] wcscmp (_String1="..", _String2="..") returned 0 [0151.283] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26605400, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0151.283] wcscmp (_String1="external_extensions.json", _String2=".") returned 1 [0151.283] wcscmp (_String1="external_extensions.json", _String2="..") returned 1 [0151.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6070 [0151.284] wcscpy (in: _Dest=0x81d6070, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" [0151.284] wcscat (in: _Dest=0x81d6070, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\" [0151.284] wcscat (in: _Dest=0x81d6070, _Source="external_extensions.json" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" [0151.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8 [0151.799] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26605400, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 0 [0151.799] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0151.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e060) returned 1 [0151.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 [0151.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f355b0) returned 1 Thread: id = 1841 os_tid = 0x1864 [0150.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat")) returned 0x20 [0153.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", dwFileAttributes=0x20) returned 0 [0153.740] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.956] GetLastError () returned 0x5 [0154.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", dwFileAttributes=0x20) returned 0 [0154.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f357f0) returned 1 Thread: id = 1842 os_tid = 0x1868 [0150.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0150.248] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" [0150.248] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\" [0150.248] wcscat (in: _Dest=0x32cf48, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*" [0150.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090210 [0150.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099290 [0154.957] wcscmp (_String1=".", _String2=".") returned 0 [0154.957] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.957] wcscmp (_String1="..", _String2=".") returned 1 [0154.957] wcscmp (_String1="..", _String2="..") returned 0 [0154.957] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xde7ae5b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14ed58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0154.957] wcscmp (_String1="chrmstp.exe", _String2=".") returned 1 [0154.957] wcscmp (_String1="chrmstp.exe", _String2="..") returned 1 [0154.957] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe067a250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe067a250, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x62faaaa, ftLastWriteTime.dwHighDateTime=0x1d2c89c, nFileSizeHigh=0x0, nFileSizeLow=0x9aa2b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0154.957] wcscmp (_String1="chrome.7z", _String2=".") returned 1 [0154.957] wcscmp (_String1="chrome.7z", _String2="..") returned 1 [0154.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187df0 [0154.957] wcscpy (in: _Dest=0x8187df0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" [0154.957] wcscat (in: _Dest=0x8187df0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\" [0154.957] wcscat (in: _Dest=0x8187df0, _Source="chrome.7z" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" [0158.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e0 [0158.047] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xde7ae5b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14ed58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0158.048] wcscmp (_String1="setup.exe", _String2=".") returned 1 [0158.048] wcscmp (_String1="setup.exe", _String2="..") returned 1 [0158.048] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xde7ae5b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14ed58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 0 [0158.048] FindClose (in: hFindFile=0x8099290 | out: hFindFile=0x8099290) returned 1 [0158.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090210) returned 1 [0158.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0158.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35400) returned 1 Thread: id = 1843 os_tid = 0x186c [0150.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f351c0 [0150.249] wcscpy (in: _Dest=0x3f351c0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0150.249] wcscat (in: _Dest=0x3f351c0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0150.249] wcscat (in: _Dest=0x3f351c0, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*" [0150.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ec68 [0150.249] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0acaa30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d10 [0155.944] wcscmp (_String1=".", _String2=".") returned 0 [0155.944] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0acaa30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.131] wcscmp (_String1="..", _String2=".") returned 1 [0157.131] wcscmp (_String1="..", _String2="..") returned 0 [0157.131] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26638865, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1 [0157.131] wcscmp (_String1="am.pak", _String2=".") returned 1 [0157.131] wcscmp (_String1="am.pak", _String2="..") returned 1 [0157.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0157.132] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.132] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.132] wcscat (in: _Dest=0x3e3d120, _Source="am.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" [0160.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak")) returned 0x20 [0160.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", dwFileAttributes=0x20) returned 0 [0160.166] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.167] GetLastError () returned 0x5 [0160.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", dwFileAttributes=0x20) returned 0 [0160.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.167] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26664797, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x6df65, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0160.167] wcscmp (_String1="ar.pak", _String2=".") returned 1 [0160.167] wcscmp (_String1="ar.pak", _String2="..") returned 1 [0160.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.167] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.167] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.167] wcscat (in: _Dest=0x3e3d120, _Source="ar.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" [0160.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak")) returned 0x20 [0160.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", dwFileAttributes=0x20) returned 0 [0160.167] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.168] GetLastError () returned 0x5 [0160.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", dwFileAttributes=0x20) returned 0 [0160.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.168] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26686a85, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x84ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0160.168] wcscmp (_String1="bg.pak", _String2=".") returned 1 [0160.168] wcscmp (_String1="bg.pak", _String2="..") returned 1 [0160.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.168] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.168] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.168] wcscat (in: _Dest=0x3e3d120, _Source="bg.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" [0160.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak")) returned 0x20 [0160.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", dwFileAttributes=0x20) returned 0 [0160.168] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.168] GetLastError () returned 0x5 [0160.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", dwFileAttributes=0x20) returned 0 [0160.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.169] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x266b9eea, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xa9727, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0160.169] wcscmp (_String1="bn.pak", _String2=".") returned 1 [0160.169] wcscmp (_String1="bn.pak", _String2="..") returned 1 [0160.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.169] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.169] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.169] wcscat (in: _Dest=0x3e3d120, _Source="bn.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" [0160.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak")) returned 0x20 [0160.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", dwFileAttributes=0x20) returned 0 [0160.177] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.177] GetLastError () returned 0x5 [0160.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", dwFileAttributes=0x20) returned 0 [0160.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.177] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x266e370b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5082b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0160.177] wcscmp (_String1="ca.pak", _String2=".") returned 1 [0160.177] wcscmp (_String1="ca.pak", _String2="..") returned 1 [0160.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.177] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.177] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.177] wcscat (in: _Dest=0x3e3d120, _Source="ca.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" [0160.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak")) returned 0x20 [0160.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", dwFileAttributes=0x20) returned 0 [0160.178] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.178] GetLastError () returned 0x5 [0160.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", dwFileAttributes=0x20) returned 0 [0160.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.178] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2670a81b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51809, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0160.178] wcscmp (_String1="cs.pak", _String2=".") returned 1 [0160.178] wcscmp (_String1="cs.pak", _String2="..") returned 1 [0160.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.179] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.179] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.179] wcscat (in: _Dest=0x3e3d120, _Source="cs.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" [0160.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak")) returned 0x20 [0160.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", dwFileAttributes=0x20) returned 0 [0160.179] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.179] GetLastError () returned 0x5 [0160.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", dwFileAttributes=0x20) returned 0 [0160.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.179] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2673b56f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x494f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0160.179] wcscmp (_String1="da.pak", _String2=".") returned 1 [0160.179] wcscmp (_String1="da.pak", _String2="..") returned 1 [0160.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.179] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.180] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.180] wcscat (in: _Dest=0x3e3d120, _Source="da.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" [0160.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak")) returned 0x20 [0160.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", dwFileAttributes=0x20) returned 0 [0160.180] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.180] GetLastError () returned 0x5 [0160.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", dwFileAttributes=0x20) returned 0 [0160.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.180] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2675ff6e, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x463fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0160.180] wcscmp (_String1="de.pak", _String2=".") returned 1 [0160.180] wcscmp (_String1="de.pak", _String2="..") returned 1 [0160.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.181] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.181] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.181] wcscat (in: _Dest=0x3e3d120, _Source="de.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" [0160.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak")) returned 0x20 [0160.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", dwFileAttributes=0x20) returned 0 [0160.193] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.193] GetLastError () returned 0x5 [0160.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", dwFileAttributes=0x20) returned 0 [0160.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.193] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2678225c, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x8f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0160.193] wcscmp (_String1="el.pak", _String2=".") returned 1 [0160.193] wcscmp (_String1="el.pak", _String2="..") returned 1 [0160.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.193] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.193] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.193] wcscat (in: _Dest=0x3e3d120, _Source="el.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" [0160.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak")) returned 0x20 [0160.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", dwFileAttributes=0x20) returned 0 [0160.194] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.194] GetLastError () returned 0x5 [0160.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", dwFileAttributes=0x20) returned 0 [0160.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.194] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2678496d, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4244f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0160.194] wcscmp (_String1="en-GB.pak", _String2=".") returned 1 [0160.194] wcscmp (_String1="en-GB.pak", _String2="..") returned 1 [0160.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbc88 [0160.194] wcscpy (in: _Dest=0x81dbc88, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.194] wcscat (in: _Dest=0x81dbc88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.194] wcscat (in: _Dest=0x81dbc88, _Source="en-GB.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" [0160.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak")) returned 0x20 [0160.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", dwFileAttributes=0x20) returned 0 [0160.195] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.195] GetLastError () returned 0x5 [0160.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", dwFileAttributes=0x20) returned 0 [0160.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbc88) returned 1 [0160.195] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2678496d, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x42442, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0160.195] wcscmp (_String1="en-US.pak", _String2=".") returned 1 [0160.195] wcscmp (_String1="en-US.pak", _String2="..") returned 1 [0160.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbc88 [0160.195] wcscpy (in: _Dest=0x81dbc88, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.196] wcscat (in: _Dest=0x81dbc88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.196] wcscat (in: _Dest=0x81dbc88, _Source="en-US.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" [0160.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak")) returned 0x20 [0160.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", dwFileAttributes=0x20) returned 0 [0160.196] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.196] GetLastError () returned 0x5 [0160.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", dwFileAttributes=0x20) returned 0 [0160.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbc88) returned 1 [0160.196] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x267ae18e, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4fca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0160.196] wcscmp (_String1="es-419.pak", _String2=".") returned 1 [0160.196] wcscmp (_String1="es-419.pak", _String2="..") returned 1 [0160.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dbc88 [0160.197] wcscpy (in: _Dest=0x81dbc88, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.197] wcscat (in: _Dest=0x81dbc88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.197] wcscat (in: _Dest=0x81dbc88, _Source="es-419.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" [0160.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak")) returned 0x20 [0160.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", dwFileAttributes=0x20) returned 0 [0160.209] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.209] GetLastError () returned 0x5 [0160.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", dwFileAttributes=0x20) returned 0 [0160.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbc88) returned 1 [0160.209] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x267d79af, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x512b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0160.209] wcscmp (_String1="es.pak", _String2=".") returned 1 [0160.209] wcscmp (_String1="es.pak", _String2="..") returned 1 [0160.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.210] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.210] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.210] wcscat (in: _Dest=0x3e3d120, _Source="es.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" [0160.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak")) returned 0x20 [0160.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", dwFileAttributes=0x20) returned 0 [0160.210] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.210] GetLastError () returned 0x5 [0160.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", dwFileAttributes=0x20) returned 0 [0160.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.210] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268038e1, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x469ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0160.211] wcscmp (_String1="et.pak", _String2=".") returned 1 [0160.211] wcscmp (_String1="et.pak", _String2="..") returned 1 [0160.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.211] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.211] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.211] wcscat (in: _Dest=0x3e3d120, _Source="et.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" [0160.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak")) returned 0x20 [0160.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", dwFileAttributes=0x20) returned 0 [0160.211] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.211] GetLastError () returned 0x5 [0160.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", dwFileAttributes=0x20) returned 0 [0160.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.212] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26820dad, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x72286, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0160.212] wcscmp (_String1="fa.pak", _String2=".") returned 1 [0160.212] wcscmp (_String1="fa.pak", _String2="..") returned 1 [0160.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.212] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.212] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.212] wcscat (in: _Dest=0x3e3d120, _Source="fa.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" [0160.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak")) returned 0x20 [0160.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", dwFileAttributes=0x20) returned 0 [0160.212] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.213] GetLastError () returned 0x5 [0160.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", dwFileAttributes=0x20) returned 0 [0160.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.213] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2684309b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4b6ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0160.213] wcscmp (_String1="fi.pak", _String2=".") returned 1 [0160.213] wcscmp (_String1="fi.pak", _String2="..") returned 1 [0160.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.213] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.213] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.213] wcscat (in: _Dest=0x3e3d120, _Source="fi.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" [0160.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak")) returned 0x20 [0160.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", dwFileAttributes=0x20) returned 0 [0160.227] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.227] GetLastError () returned 0x5 [0160.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", dwFileAttributes=0x20) returned 0 [0160.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.227] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2686c8bc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0160.227] wcscmp (_String1="fil.pak", _String2=".") returned 1 [0160.227] wcscmp (_String1="fil.pak", _String2="..") returned 1 [0160.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbd28 [0160.227] wcscpy (in: _Dest=0x81dbd28, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.227] wcscat (in: _Dest=0x81dbd28, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.227] wcscat (in: _Dest=0x81dbd28, _Source="fil.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" [0160.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak")) returned 0x20 [0160.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", dwFileAttributes=0x20) returned 0 [0160.228] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.228] GetLastError () returned 0x5 [0160.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", dwFileAttributes=0x20) returned 0 [0160.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbd28) returned 1 [0160.228] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268716de, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x55a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0160.228] wcscmp (_String1="fr.pak", _String2=".") returned 1 [0160.228] wcscmp (_String1="fr.pak", _String2="..") returned 1 [0160.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.229] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.229] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.229] wcscat (in: _Dest=0x3e3d120, _Source="fr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" [0160.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak")) returned 0x20 [0160.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", dwFileAttributes=0x20) returned 0 [0160.229] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.229] GetLastError () returned 0x5 [0160.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", dwFileAttributes=0x20) returned 0 [0160.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.229] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268939cc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x9f1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0160.229] wcscmp (_String1="gu.pak", _String2=".") returned 1 [0160.229] wcscmp (_String1="gu.pak", _String2="..") returned 1 [0160.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.230] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.230] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.230] wcscat (in: _Dest=0x3e3d120, _Source="gu.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" [0160.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak")) returned 0x20 [0160.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", dwFileAttributes=0x20) returned 0 [0160.230] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.230] GetLastError () returned 0x5 [0160.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", dwFileAttributes=0x20) returned 0 [0160.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.231] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268c200f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5df23, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0160.231] wcscmp (_String1="he.pak", _String2=".") returned 1 [0160.231] wcscmp (_String1="he.pak", _String2="..") returned 1 [0160.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.231] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.231] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.231] wcscat (in: _Dest=0x3e3d120, _Source="he.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" [0160.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak")) returned 0x20 [0160.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", dwFileAttributes=0x20) returned 0 [0160.248] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.248] GetLastError () returned 0x5 [0160.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", dwFileAttributes=0x20) returned 0 [0160.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.249] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268eb830, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xa3281, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0160.249] wcscmp (_String1="hi.pak", _String2=".") returned 1 [0160.249] wcscmp (_String1="hi.pak", _String2="..") returned 1 [0160.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.249] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.249] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.249] wcscat (in: _Dest=0x3e3d120, _Source="hi.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" [0160.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak")) returned 0x20 [0160.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", dwFileAttributes=0x20) returned 0 [0160.250] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.250] GetLastError () returned 0x5 [0160.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", dwFileAttributes=0x20) returned 0 [0160.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.250] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268edf41, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4bc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0160.250] wcscmp (_String1="hr.pak", _String2=".") returned 1 [0160.250] wcscmp (_String1="hr.pak", _String2="..") returned 1 [0160.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.250] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.250] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.250] wcscat (in: _Dest=0x3e3d120, _Source="hr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" [0160.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak")) returned 0x20 [0160.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", dwFileAttributes=0x20) returned 0 [0160.251] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.251] GetLastError () returned 0x5 [0160.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", dwFileAttributes=0x20) returned 0 [0160.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.251] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268f2d63, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x54a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0160.251] wcscmp (_String1="hu.pak", _String2=".") returned 1 [0160.251] wcscmp (_String1="hu.pak", _String2="..") returned 1 [0160.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.251] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.251] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.251] wcscat (in: _Dest=0x3e3d120, _Source="hu.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" [0160.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak")) returned 0x20 [0160.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", dwFileAttributes=0x20) returned 0 [0160.252] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.252] GetLastError () returned 0x5 [0160.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", dwFileAttributes=0x20) returned 0 [0160.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.252] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268f5474, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0160.252] wcscmp (_String1="id.pak", _String2=".") returned 1 [0160.252] wcscmp (_String1="id.pak", _String2="..") returned 1 [0160.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.252] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.252] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.252] wcscat (in: _Dest=0x3e3d120, _Source="id.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" [0160.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak")) returned 0x20 [0160.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", dwFileAttributes=0x20) returned 0 [0160.262] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.262] GetLastError () returned 0x5 [0160.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", dwFileAttributes=0x20) returned 0 [0160.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.262] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x269213a6, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4e532, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0160.262] wcscmp (_String1="it.pak", _String2=".") returned 1 [0160.262] wcscmp (_String1="it.pak", _String2="..") returned 1 [0160.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.262] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.262] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.262] wcscat (in: _Dest=0x3e3d120, _Source="it.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" [0160.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak")) returned 0x20 [0160.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", dwFileAttributes=0x20) returned 0 [0160.263] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.263] GetLastError () returned 0x5 [0160.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", dwFileAttributes=0x20) returned 0 [0160.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.263] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2694abc7, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5f8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0160.263] wcscmp (_String1="ja.pak", _String2=".") returned 1 [0160.263] wcscmp (_String1="ja.pak", _String2="..") returned 1 [0160.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.263] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.263] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.263] wcscat (in: _Dest=0x3e3d120, _Source="ja.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" [0160.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak")) returned 0x20 [0160.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", dwFileAttributes=0x20) returned 0 [0160.264] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.264] GetLastError () returned 0x5 [0160.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", dwFileAttributes=0x20) returned 0 [0160.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.264] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2696ceb5, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xb6beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0160.264] wcscmp (_String1="kn.pak", _String2=".") returned 1 [0160.264] wcscmp (_String1="kn.pak", _String2="..") returned 1 [0160.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.264] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.264] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.265] wcscat (in: _Dest=0x3e3d120, _Source="kn.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" [0160.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak")) returned 0x20 [0160.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", dwFileAttributes=0x20) returned 0 [0160.265] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.265] GetLastError () returned 0x5 [0160.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", dwFileAttributes=0x20) returned 0 [0160.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.265] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26971cd7, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x50b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0160.265] wcscmp (_String1="ko.pak", _String2=".") returned 1 [0160.265] wcscmp (_String1="ko.pak", _String2="..") returned 1 [0160.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0160.265] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0160.265] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0160.266] wcscat (in: _Dest=0x3e3d120, _Source="ko.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" [0160.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak")) returned 0x20 [0162.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", dwFileAttributes=0x20) returned 0 [0162.228] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.229] GetLastError () returned 0x5 [0162.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", dwFileAttributes=0x20) returned 0 [0162.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0162.229] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2698f1a3, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0162.229] wcscmp (_String1="lt.pak", _String2=".") returned 1 [0162.229] wcscmp (_String1="lt.pak", _String2="..") returned 1 [0162.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0162.229] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0162.229] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0162.229] wcscat (in: _Dest=0x3e3d120, _Source="lt.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" [0169.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0169.218] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x269b62b3, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0169.218] wcscmp (_String1="lv.pak", _String2=".") returned 1 [0169.218] wcscmp (_String1="lv.pak", _String2="..") returned 1 [0169.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cc50 [0169.218] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.218] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.218] wcscat (in: _Dest=0x32cc50, _Source="lv.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" [0169.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2620 [0169.219] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x269e21e5, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xccccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0169.219] wcscmp (_String1="ml.pak", _String2=".") returned 1 [0169.219] wcscmp (_String1="ml.pak", _String2="..") returned 1 [0169.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c540 [0169.219] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.219] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.219] wcscat (in: _Dest=0x3e3c540, _Source="ml.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" [0169.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x261c [0169.220] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a044d3, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xa1beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0169.220] wcscmp (_String1="mr.pak", _String2=".") returned 1 [0169.220] wcscmp (_String1="mr.pak", _String2="..") returned 1 [0169.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d7a8 [0169.220] wcscpy (in: _Dest=0x3e3d7a8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.220] wcscat (in: _Dest=0x3e3d7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.221] wcscat (in: _Dest=0x3e3d7a8, _Source="mr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" [0169.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2618 [0169.221] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a2dcf4, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x3e2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0169.221] wcscmp (_String1="ms.pak", _String2=".") returned 1 [0169.221] wcscmp (_String1="ms.pak", _String2="..") returned 1 [0169.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d4b0 [0169.221] wcscpy (in: _Dest=0x3e3d4b0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.222] wcscat (in: _Dest=0x3e3d4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.222] wcscat (in: _Dest=0x3e3d4b0, _Source="ms.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" [0169.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2614 [0169.222] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a5c337, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x487e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0169.223] wcscmp (_String1="nb.pak", _String2=".") returned 1 [0169.223] wcscmp (_String1="nb.pak", _String2="..") returned 1 [0169.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3cb30 [0169.223] wcscpy (in: _Dest=0x3e3cb30, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.223] wcscat (in: _Dest=0x3e3cb30, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.223] wcscat (in: _Dest=0x3e3cb30, _Source="nb.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" [0169.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2610 [0169.224] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a80d36, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4d450, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0169.224] wcscmp (_String1="nl.pak", _String2=".") returned 1 [0169.224] wcscmp (_String1="nl.pak", _String2="..") returned 1 [0169.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c7a0 [0169.224] wcscpy (in: _Dest=0x3e3c7a0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.224] wcscat (in: _Dest=0x3e3c7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.224] wcscat (in: _Dest=0x3e3c7a0, _Source="nl.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" [0169.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x260c [0169.225] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26aaa557, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x500e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0169.225] wcscmp (_String1="pl.pak", _String2=".") returned 1 [0169.225] wcscmp (_String1="pl.pak", _String2="..") returned 1 [0169.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c118 [0169.225] wcscpy (in: _Dest=0x3e3c118, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.225] wcscat (in: _Dest=0x3e3c118, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.225] wcscat (in: _Dest=0x3e3c118, _Source="pl.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" [0169.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2608 [0169.226] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26acef56, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4e63d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0169.226] wcscmp (_String1="pt-BR.pak", _String2=".") returned 1 [0169.226] wcscmp (_String1="pt-BR.pak", _String2="..") returned 1 [0169.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a598 [0169.226] wcscpy (in: _Dest=0x819a598, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.226] wcscat (in: _Dest=0x819a598, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.226] wcscat (in: _Dest=0x819a598, _Source="pt-BR.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" [0169.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2604 [0169.227] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26af1244, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4f596, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0169.227] wcscmp (_String1="pt-PT.pak", _String2=".") returned 1 [0169.227] wcscmp (_String1="pt-PT.pak", _String2="..") returned 1 [0169.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ab38 [0169.227] wcscpy (in: _Dest=0x819ab38, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.227] wcscat (in: _Dest=0x819ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.227] wcscat (in: _Dest=0x819ab38, _Source="pt-PT.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" [0169.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2600 [0169.228] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b1d176, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0169.228] wcscmp (_String1="ro.pak", _String2=".") returned 1 [0169.228] wcscmp (_String1="ro.pak", _String2="..") returned 1 [0169.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3dd98 [0169.228] wcscpy (in: _Dest=0x3e3dd98, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.228] wcscat (in: _Dest=0x3e3dd98, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.228] wcscat (in: _Dest=0x3e3dd98, _Source="ro.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" [0169.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25fc [0169.229] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b2e2ed, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x7e47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0169.229] wcscmp (_String1="ru.pak", _String2=".") returned 1 [0169.229] wcscmp (_String1="ru.pak", _String2="..") returned 1 [0169.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3ccf8 [0169.229] wcscpy (in: _Dest=0x3e3ccf8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.229] wcscat (in: _Dest=0x3e3ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.229] wcscat (in: _Dest=0x3e3ccf8, _Source="ru.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" [0169.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25f8 [0169.230] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b63e63, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0169.230] wcscmp (_String1="sk.pak", _String2=".") returned 1 [0169.230] wcscmp (_String1="sk.pak", _String2="..") returned 1 [0169.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3cec0 [0169.231] wcscpy (in: _Dest=0x3e3cec0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.231] wcscat (in: _Dest=0x3e3cec0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.231] wcscat (in: _Dest=0x3e3cec0, _Source="sk.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" [0169.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25f4 [0169.232] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b8af73, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4bb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0169.232] wcscmp (_String1="sl.pak", _String2=".") returned 1 [0169.232] wcscmp (_String1="sl.pak", _String2="..") returned 1 [0169.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c8d0 [0169.232] wcscpy (in: _Dest=0x3e3c8d0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.232] wcscat (in: _Dest=0x3e3c8d0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.232] wcscat (in: _Dest=0x3e3c8d0, _Source="sl.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" [0169.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25f0 [0169.233] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26bb2083, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x79e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0169.233] wcscmp (_String1="sr.pak", _String2=".") returned 1 [0169.233] wcscmp (_String1="sr.pak", _String2="..") returned 1 [0169.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3cc60 [0169.234] wcscpy (in: _Dest=0x3e3cc60, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.234] wcscat (in: _Dest=0x3e3cc60, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.234] wcscat (in: _Dest=0x3e3cc60, _Source="sr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" [0169.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25ec [0169.235] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26bdb8a4, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x496bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0169.235] wcscmp (_String1="sv.pak", _String2=".") returned 1 [0169.235] wcscmp (_String1="sv.pak", _String2="..") returned 1 [0169.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c968 [0169.235] wcscpy (in: _Dest=0x3e3c968, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.235] wcscat (in: _Dest=0x3e3c968, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.235] wcscat (in: _Dest=0x3e3c968, _Source="sv.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" [0169.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25e8 [0169.236] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c050c5, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x44b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0169.236] wcscmp (_String1="sw.pak", _String2=".") returned 1 [0169.236] wcscmp (_String1="sw.pak", _String2="..") returned 1 [0169.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c5d8 [0169.236] wcscpy (in: _Dest=0x3e3c5d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.236] wcscat (in: _Dest=0x3e3c5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.236] wcscat (in: _Dest=0x3e3c5d8, _Source="sw.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" [0169.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25e4 [0169.237] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c3852a, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xbcd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0169.237] wcscmp (_String1="ta.pak", _String2=".") returned 1 [0169.237] wcscmp (_String1="ta.pak", _String2="..") returned 1 [0169.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c248 [0169.238] wcscpy (in: _Dest=0x3e3c248, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.238] wcscat (in: _Dest=0x3e3c248, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.238] wcscat (in: _Dest=0x3e3c248, _Source="ta.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" [0169.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25e0 [0169.239] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c707b1, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xb0b7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0169.239] wcscmp (_String1="te.pak", _String2=".") returned 1 [0169.239] wcscmp (_String1="te.pak", _String2="..") returned 1 [0169.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d678 [0169.239] wcscpy (in: _Dest=0x3e3d678, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.239] wcscat (in: _Dest=0x3e3d678, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.239] wcscat (in: _Dest=0x3e3d678, _Source="te.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" [0169.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25dc [0169.240] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c978c1, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x9efb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0169.240] wcscmp (_String1="th.pak", _String2=".") returned 1 [0169.240] wcscmp (_String1="th.pak", _String2="..") returned 1 [0169.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d380 [0169.240] wcscpy (in: _Dest=0x3e3d380, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.240] wcscat (in: _Dest=0x3e3d380, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.240] wcscat (in: _Dest=0x3e3d380, _Source="th.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" [0169.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d8 [0169.242] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26cc8615, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4f508, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0169.242] wcscmp (_String1="tr.pak", _String2=".") returned 1 [0169.242] wcscmp (_String1="tr.pak", _String2="..") returned 1 [0169.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d1b8 [0169.242] wcscpy (in: _Dest=0x3e3d1b8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.242] wcscat (in: _Dest=0x3e3d1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.242] wcscat (in: _Dest=0x3e3d1b8, _Source="tr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" [0169.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2588 [0169.247] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26cf4547, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x7e1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0169.247] wcscmp (_String1="uk.pak", _String2=".") returned 1 [0169.248] wcscmp (_String1="uk.pak", _String2="..") returned 1 [0169.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d250 [0169.248] wcscpy (in: _Dest=0x3e3d250, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.248] wcscat (in: _Dest=0x3e3d250, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.248] wcscat (in: _Dest=0x3e3d250, _Source="uk.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" [0169.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2580 [0169.249] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d11a13, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5af42, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0169.249] wcscmp (_String1="vi.pak", _String2=".") returned 1 [0169.249] wcscmp (_String1="vi.pak", _String2="..") returned 1 [0169.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c1b0 [0169.249] wcscpy (in: _Dest=0x3e3c1b0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.249] wcscat (in: _Dest=0x3e3c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.249] wcscat (in: _Dest=0x3e3c1b0, _Source="vi.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" [0169.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x256c [0169.250] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d3d945, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4217c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0169.250] wcscmp (_String1="zh-CN.pak", _String2=".") returned 1 [0169.250] wcscmp (_String1="zh-CN.pak", _String2="..") returned 1 [0169.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a9f8 [0169.250] wcscpy (in: _Dest=0x819a9f8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.250] wcscat (in: _Dest=0x819a9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.250] wcscat (in: _Dest=0x819a9f8, _Source="zh-CN.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" [0169.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x255c [0169.251] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d62344, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0169.251] wcscmp (_String1="zh-TW.pak", _String2=".") returned 1 [0169.252] wcscmp (_String1="zh-TW.pak", _String2="..") returned 1 [0169.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a638 [0169.252] wcscpy (in: _Dest=0x819a638, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0169.252] wcscat (in: _Dest=0x819a638, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0169.252] wcscat (in: _Dest=0x819a638, _Source="zh-TW.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" [0169.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2414 [0169.253] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d62344, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0 [0169.253] FindClose (in: hFindFile=0x8098d10 | out: hFindFile=0x8098d10) returned 1 [0174.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ec68) returned 1 [0174.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f351c0) returned 1 [0174.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35ac0) returned 1 Thread: id = 1844 os_tid = 0x1870 [0150.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_32.nexe")) returned 0x20 [0155.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe", dwFileAttributes=0x20) returned 0 [0155.285] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_32.nexe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.285] GetLastError () returned 0x5 [0155.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe", dwFileAttributes=0x20) returned 0 [0155.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ed8) returned 1 Thread: id = 1845 os_tid = 0x1874 [0150.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe")) returned 0x20 [0155.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", dwFileAttributes=0x20) returned 0 [0155.943] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.943] GetLastError () returned 0x5 [0155.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", dwFileAttributes=0x20) returned 0 [0155.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a40) returned 1 Thread: id = 1846 os_tid = 0x1878 [0150.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin")) returned 0x20 [0155.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", dwFileAttributes=0x20) returned 0 [0155.941] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.941] GetLastError () returned 0x5 [0155.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", dwFileAttributes=0x20) returned 0 [0155.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 Thread: id = 1847 os_tid = 0x187c [0150.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\resources.pak")) returned 0x20 [0155.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", dwFileAttributes=0x20) returned 0 [0155.938] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\resources.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.939] GetLastError () returned 0x5 [0155.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", dwFileAttributes=0x20) returned 0 [0155.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 1848 os_tid = 0x1880 [0150.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin")) returned 0x20 [0155.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", dwFileAttributes=0x20) returned 0 [0155.936] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.936] GetLastError () returned 0x5 [0155.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", dwFileAttributes=0x20) returned 0 [0155.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 Thread: id = 1849 os_tid = 0x1884 [0150.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11328 [0150.251] wcscpy (in: _Dest=0x3e11328, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0150.251] wcscat (in: _Dest=0x3e11328, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0150.251] wcscat (in: _Dest=0x3e11328, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*" [0150.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ea00 [0150.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c18 [0157.130] wcscmp (_String1=".", _String2=".") returned 0 [0157.130] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.130] wcscmp (_String1="..", _String2=".") returned 1 [0157.130] wcscmp (_String1="..", _String2="..") returned 0 [0157.130] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d75bcc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0157.131] wcscmp (_String1="logo.png", _String2=".") returned 1 [0157.131] wcscmp (_String1="logo.png", _String2="..") returned 1 [0157.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da988 [0157.131] wcscpy (in: _Dest=0x81da988, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0157.131] wcscat (in: _Dest=0x81da988, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0157.131] wcscat (in: _Dest=0x81da988, _Source="logo.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" [0160.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png")) returned 0x20 [0160.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", dwFileAttributes=0x20) returned 0 [0160.163] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.163] GetLastError () returned 0x5 [0160.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", dwFileAttributes=0x20) returned 0 [0160.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da988) returned 1 [0160.163] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d75bcc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="LOGOCA~1.PNG")) returned 1 [0160.163] wcscmp (_String1="logocanary.png", _String2=".") returned 1 [0160.163] wcscmp (_String1="logocanary.png", _String2="..") returned 1 [0160.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d409b8 [0160.163] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0160.163] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0160.163] wcscat (in: _Dest=0x3d409b8, _Source="logocanary.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" [0160.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png")) returned 0x20 [0160.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", dwFileAttributes=0x20) returned 0 [0160.170] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.170] GetLastError () returned 0x5 [0160.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", dwFileAttributes=0x20) returned 0 [0160.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 [0160.170] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d86d43, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="SMALLL~1.PNG")) returned 1 [0160.170] wcscmp (_String1="smalllogo.png", _String2=".") returned 1 [0160.170] wcscmp (_String1="smalllogo.png", _String2="..") returned 1 [0160.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d409b8 [0160.171] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0160.171] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0160.171] wcscat (in: _Dest=0x3d409b8, _Source="smalllogo.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" [0160.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png")) returned 0x20 [0160.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", dwFileAttributes=0x20) returned 0 [0160.171] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.171] GetLastError () returned 0x5 [0160.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", dwFileAttributes=0x20) returned 0 [0160.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 [0160.171] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d90987, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 1 [0160.171] wcscmp (_String1="smalllogocanary.png", _String2=".") returned 1 [0160.171] wcscmp (_String1="smalllogocanary.png", _String2="..") returned 1 [0160.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3338e8 [0160.172] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0160.172] wcscat (in: _Dest=0x3338e8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0160.172] wcscat (in: _Dest=0x3338e8, _Source="smalllogocanary.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" [0160.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png")) returned 0x20 [0160.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", dwFileAttributes=0x20) returned 0 [0160.172] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.172] GetLastError () returned 0x5 [0160.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", dwFileAttributes=0x20) returned 0 [0160.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3338e8) returned 1 [0160.172] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d90987, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 0 [0160.172] FindClose (in: hFindFile=0x3f37c18 | out: hFindFile=0x3f37c18) returned 1 [0160.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ea00) returned 1 [0160.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11328) returned 1 [0160.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 1850 os_tid = 0x1888 [0150.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32c8c0 [0150.251] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0150.251] wcscat (in: _Dest=0x32c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\" [0150.252] wcscat (in: _Dest=0x32c8c0, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*" [0150.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f870 [0150.252] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099450 [0155.915] wcscmp (_String1=".", _String2=".") returned 0 [0155.916] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.916] wcscmp (_String1="..", _String2=".") returned 1 [0155.916] wcscmp (_String1="..", _String2="..") returned 0 [0155.916] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d9f3ed, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0155.916] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0155.916] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0155.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9858 [0155.916] wcscpy (in: _Dest=0x81d9858, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0155.916] wcscat (in: _Dest=0x81d9858, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\" [0155.916] wcscat (in: _Dest=0x81d9858, _Source="manifest.json" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" [0158.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c0 [0158.043] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0158.043] wcscmp (_String1="_platform_specific", _String2=".") returned 1 [0158.043] wcscmp (_String1="_platform_specific", _String2="..") returned 1 [0158.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41af8 [0158.043] wcscpy (in: _Dest=0x3d41af8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0158.043] wcscat (in: _Dest=0x3d41af8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\" [0158.043] wcscat (in: _Dest=0x3d41af8, _Source="_platform_specific" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" [0158.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d41af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd0 [0158.044] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0 [0158.044] FindClose (in: hFindFile=0x8099450 | out: hFindFile=0x8099450) returned 1 [0158.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f870) returned 1 [0158.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 [0158.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cbb8) returned 1 Thread: id = 1851 os_tid = 0x188c [0150.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b218 [0150.252] wcscpy (in: _Dest=0x819b218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0150.252] wcscat (in: _Dest=0x819b218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0150.252] wcscat (in: _Dest=0x819b218, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*" [0150.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80917b8 [0150.252] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd61c1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37cd8 [0154.472] wcscmp (_String1=".", _String2=".") returned 0 [0154.472] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd61c1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.472] wcscmp (_String1="..", _String2=".") returned 1 [0154.472] wcscmp (_String1="..", _String2="..") returned 0 [0154.472] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.473] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.473] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6740 [0154.473] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0154.473] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0154.473] wcscat (in: _Dest=0x2ff6740, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" [0155.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x253c [0155.164] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd642320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0155.164] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0155.164] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0155.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3eb0328 [0155.165] wcscpy (in: _Dest=0x3eb0328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0155.165] wcscat (in: _Dest=0x3eb0328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0155.165] wcscat (in: _Dest=0x3eb0328, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" [0155.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2704 [0155.166] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0155.166] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0155.166] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0155.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d413c8 [0155.166] wcscpy (in: _Dest=0x3d413c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0155.166] wcscat (in: _Dest=0x3d413c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0155.166] wcscat (in: _Dest=0x3d413c8, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" [0155.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d413c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2708 [0155.168] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0155.168] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0155.168] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0155.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41480 [0155.168] wcscpy (in: _Dest=0x3d41480, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0155.168] wcscat (in: _Dest=0x3d41480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0155.168] wcscat (in: _Dest=0x3d41480, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" [0155.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270c [0155.169] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0155.169] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0155.170] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0155.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41538 [0155.170] wcscpy (in: _Dest=0x3d41538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0155.170] wcscat (in: _Dest=0x3d41538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0155.170] wcscat (in: _Dest=0x3d41538, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" [0155.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2710 [0155.171] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0155.171] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0155.171] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0155.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5968 [0155.171] wcscpy (in: _Dest=0x81d5968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0155.171] wcscat (in: _Dest=0x81d5968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0155.171] wcscat (in: _Dest=0x81d5968, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" [0155.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2714 [0155.173] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0155.173] FindClose (in: hFindFile=0x3f37cd8 | out: hFindFile=0x3f37cd8) returned 1 [0155.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80917b8) returned 1 [0155.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b218) returned 1 [0155.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 1852 os_tid = 0x1890 [0150.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b2b8 [0150.253] wcscpy (in: _Dest=0x819b2b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0150.253] wcscat (in: _Dest=0x819b2b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0150.253] wcscat (in: _Dest=0x819b2b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*" [0150.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fd40 [0150.253] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6c9420, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0151.630] wcscmp (_String1=".", _String2=".") returned 0 [0151.630] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6c9420, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.630] wcscmp (_String1="..", _String2=".") returned 1 [0151.630] wcscmp (_String1="..", _String2="..") returned 0 [0151.630] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.630] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.630] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7150 [0151.630] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0151.631] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0151.631] wcscat (in: _Dest=0x2ff7150, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" [0156.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0156.386] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0156.386] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0156.386] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0156.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d9c78 [0156.386] wcscpy (in: _Dest=0x81d9c78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0156.386] wcscat (in: _Dest=0x81d9c78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0156.386] wcscat (in: _Dest=0x81d9c78, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" [0156.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2984 [0156.388] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.388] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.388] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41a40 [0156.388] wcscpy (in: _Dest=0x3d41a40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0156.388] wcscat (in: _Dest=0x3d41a40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0156.388] wcscat (in: _Dest=0x3d41a40, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" [0156.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2988 [0156.389] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.389] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.389] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5ee0 [0156.390] wcscpy (in: _Dest=0x81d5ee0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0156.390] wcscat (in: _Dest=0x81d5ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0156.390] wcscat (in: _Dest=0x81d5ee0, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" [0156.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298c [0156.391] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.391] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0156.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fd40) returned 1 [0156.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b2b8) returned 1 [0156.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 1853 os_tid = 0x1894 [0150.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b358 [0150.264] wcscpy (in: _Dest=0x819b358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0150.264] wcscat (in: _Dest=0x819b358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0150.264] wcscat (in: _Dest=0x819b358, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*" [0150.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f138 [0150.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc089a60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37898 [0153.939] wcscmp (_String1=".", _String2=".") returned 0 [0153.939] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc089a60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.939] wcscmp (_String1="..", _String2=".") returned 1 [0153.939] wcscmp (_String1="..", _String2="..") returned 0 [0153.939] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.939] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.939] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6db8 [0153.939] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0153.939] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0153.939] wcscat (in: _Dest=0x2ff6db8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" [0159.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf")) returned 0x20 [0159.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.699] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.699] GetLastError () returned 0x5 [0159.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 [0159.699] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0159.699] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0159.700] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0159.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b878 [0159.700] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0159.700] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0159.700] wcscat (in: _Dest=0x35b878, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" [0159.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf")) returned 0x20 [0159.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0159.700] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.700] GetLastError () returned 0x5 [0159.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0159.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0159.701] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.701] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.701] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6db8 [0159.701] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0159.701] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0159.701] wcscat (in: _Dest=0x2ff6db8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" [0159.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf")) returned 0x20 [0159.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.701] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.701] GetLastError () returned 0x5 [0159.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 [0159.702] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.702] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.702] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0159.702] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0159.702] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0159.702] wcscat (in: _Dest=0x3e351b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" [0159.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf")) returned 0x20 [0159.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.702] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.702] GetLastError () returned 0x5 [0159.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.703] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.703] FindClose (in: hFindFile=0x3f37898 | out: hFindFile=0x3f37898) returned 1 [0159.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f138) returned 1 [0159.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b358) returned 1 [0159.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 Thread: id = 1854 os_tid = 0x1898 [0150.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b3f8 [0150.265] wcscpy (in: _Dest=0x819b3f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0150.265] wcscat (in: _Dest=0x819b3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0150.265] wcscat (in: _Dest=0x819b3f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*" [0150.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091550 [0150.265] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfdc800, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e18 [0154.473] wcscmp (_String1=".", _String2=".") returned 0 [0154.473] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfdc800, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.473] wcscmp (_String1="..", _String2=".") returned 1 [0154.473] wcscmp (_String1="..", _String2="..") returned 0 [0154.473] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.473] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.473] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6a20 [0154.473] wcscpy (in: _Dest=0x2ff6a20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0154.473] wcscat (in: _Dest=0x2ff6a20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0154.473] wcscat (in: _Dest=0x2ff6a20, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" [0158.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2508 [0158.065] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0158.065] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0158.065] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0158.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da2a8 [0158.065] wcscpy (in: _Dest=0x81da2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0158.066] wcscat (in: _Dest=0x81da2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0158.066] wcscat (in: _Dest=0x81da2a8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" [0158.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bf4 [0158.067] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0158.067] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0158.067] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0158.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d418d0 [0158.067] wcscpy (in: _Dest=0x3d418d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0158.067] wcscat (in: _Dest=0x3d418d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0158.067] wcscat (in: _Dest=0x3d418d0, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" [0158.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d418d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bf8 [0158.068] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd002960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0158.068] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0158.068] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0158.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1cc0 [0158.068] wcscpy (in: _Dest=0x81e1cc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0158.068] wcscat (in: _Dest=0x81e1cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0158.068] wcscat (in: _Dest=0x81e1cc0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" [0158.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bfc [0158.070] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0158.070] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0158.070] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0158.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1928 [0158.070] wcscpy (in: _Dest=0x81e1928, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0158.070] wcscat (in: _Dest=0x81e1928, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0158.070] wcscat (in: _Dest=0x81e1928, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" [0158.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c00 [0158.071] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0158.071] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0158.071] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0158.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d6200 [0158.071] wcscpy (in: _Dest=0x81d6200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0158.072] wcscat (in: _Dest=0x81d6200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0158.072] wcscat (in: _Dest=0x81d6200, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" [0158.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c04 [0158.073] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0158.073] FindClose (in: hFindFile=0x3f37e18 | out: hFindFile=0x3f37e18) returned 1 [0158.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091550) returned 1 [0158.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b3f8) returned 1 [0158.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 1855 os_tid = 0x189c [0150.265] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms")) returned 0x20 [0151.111] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0151.111] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.112] GetLastError () returned 0x5 [0151.112] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0151.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 1856 os_tid = 0x18a0 [0150.266] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms")) returned 0x20 [0151.110] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0151.110] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.110] GetLastError () returned 0x5 [0151.110] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0151.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 Thread: id = 1857 os_tid = 0x18a4 [0150.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b498 [0150.267] wcscpy (in: _Dest=0x819b498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0150.267] wcscat (in: _Dest=0x819b498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0150.267] wcscat (in: _Dest=0x819b498, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*" [0150.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f3a0 [0150.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc089a60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37918 [0153.941] wcscmp (_String1=".", _String2=".") returned 0 [0153.942] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc089a60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.942] wcscmp (_String1="..", _String2=".") returned 1 [0153.942] wcscmp (_String1="..", _String2="..") returned 0 [0153.942] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.942] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.942] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6968 [0153.942] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0153.942] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0153.942] wcscat (in: _Dest=0x2ff6968, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" [0156.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0156.407] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.407] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.407] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41af8 [0156.407] wcscpy (in: _Dest=0x3d41af8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0156.407] wcscat (in: _Dest=0x3d41af8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0156.407] wcscat (in: _Dest=0x3d41af8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" [0156.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a8 [0156.408] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.408] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.408] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5bc0 [0156.409] wcscpy (in: _Dest=0x81d5bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0156.409] wcscat (in: _Dest=0x81d5bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0156.409] wcscat (in: _Dest=0x81d5bc0, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" [0156.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ac [0156.410] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.410] FindClose (in: hFindFile=0x3f37918 | out: hFindFile=0x3f37918) returned 1 [0156.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f3a0) returned 1 [0156.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b498) returned 1 [0156.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11468) returned 1 Thread: id = 1858 os_tid = 0x18a8 [0150.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b538 [0150.267] wcscpy (in: _Dest=0x819b538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0150.267] wcscat (in: _Dest=0x819b538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0150.267] wcscat (in: _Dest=0x819b538, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*" [0150.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091c88 [0150.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e58 [0153.942] wcscmp (_String1=".", _String2=".") returned 0 [0153.942] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.942] wcscmp (_String1="..", _String2=".") returned 1 [0153.942] wcscmp (_String1="..", _String2="..") returned 0 [0153.942] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.942] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.943] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7938 [0153.943] wcscpy (in: _Dest=0x2ff7938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0153.943] wcscat (in: _Dest=0x2ff7938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0153.943] wcscat (in: _Dest=0x2ff7938, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" [0159.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf")) returned 0x20 [0159.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.740] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.740] GetLastError () returned 0x5 [0159.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7938) returned 1 [0159.740] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.740] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.740] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7938 [0159.740] wcscpy (in: _Dest=0x2ff7938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0159.740] wcscat (in: _Dest=0x2ff7938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0159.740] wcscat (in: _Dest=0x2ff7938, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" [0159.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf")) returned 0x20 [0159.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.741] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.741] GetLastError () returned 0x5 [0159.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7938) returned 1 [0159.741] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.741] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.741] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0159.741] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0159.741] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0159.741] wcscat (in: _Dest=0x3e351b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" [0159.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf")) returned 0x20 [0159.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.742] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.742] GetLastError () returned 0x5 [0159.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.742] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.742] FindClose (in: hFindFile=0x3f37e58 | out: hFindFile=0x3f37e58) returned 1 [0159.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091c88) returned 1 [0159.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b538) returned 1 [0159.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 1859 os_tid = 0x18ac [0150.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b5d8 [0150.268] wcscpy (in: _Dest=0x819b5d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0150.268] wcscat (in: _Dest=0x819b5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0150.268] wcscat (in: _Dest=0x819b5d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*" [0150.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f608 [0150.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbff14e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38118 [0153.943] wcscmp (_String1=".", _String2=".") returned 0 [0153.943] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbff14e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.943] wcscmp (_String1="..", _String2=".") returned 1 [0153.943] wcscmp (_String1="..", _String2="..") returned 0 [0153.943] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.943] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.943] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7aa8 [0153.943] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0153.943] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0153.943] wcscat (in: _Dest=0x2ff7aa8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" [0159.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf")) returned 0x20 [0159.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.747] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.748] GetLastError () returned 0x5 [0159.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 [0159.748] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.748] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.748] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7aa8 [0159.748] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0159.748] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0159.748] wcscat (in: _Dest=0x2ff7aa8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" [0159.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf")) returned 0x20 [0159.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.749] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.749] GetLastError () returned 0x5 [0159.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 [0159.749] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.749] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.749] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0159.749] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0159.749] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0159.750] wcscat (in: _Dest=0x3e351b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" [0159.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf")) returned 0x20 [0159.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.750] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.750] GetLastError () returned 0x5 [0159.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.751] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.751] FindClose (in: hFindFile=0x3f38118 | out: hFindFile=0x3f38118) returned 1 [0159.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f608) returned 1 [0159.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b5d8) returned 1 [0159.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a458) returned 1 Thread: id = 1860 os_tid = 0x18b0 [0150.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b678 [0150.269] wcscpy (in: _Dest=0x819b678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0150.269] wcscat (in: _Dest=0x819b678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0150.269] wcscat (in: _Dest=0x819b678, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*" [0150.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0150.269] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0afbc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f382d8 [0153.944] wcscmp (_String1=".", _String2=".") returned 0 [0153.944] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0afbc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.944] wcscmp (_String1="..", _String2=".") returned 1 [0153.944] wcscmp (_String1="..", _String2="..") returned 0 [0153.944] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.944] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.944] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7880 [0153.944] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0153.944] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0153.944] wcscat (in: _Dest=0x2ff7880, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" [0156.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0156.412] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.413] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.413] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41bb0 [0156.413] wcscpy (in: _Dest=0x3d41bb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0156.413] wcscat (in: _Dest=0x3d41bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0156.413] wcscat (in: _Dest=0x3d41bb0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" [0156.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0 [0156.421] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.421] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.421] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d6138 [0156.421] wcscpy (in: _Dest=0x81d6138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0156.421] wcscat (in: _Dest=0x81d6138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0156.421] wcscat (in: _Dest=0x81d6138, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" [0156.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b4 [0156.423] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.423] FindClose (in: hFindFile=0x3f382d8 | out: hFindFile=0x3f382d8) returned 1 [0156.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0156.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b678) returned 1 [0156.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a4f8) returned 1 Thread: id = 1861 os_tid = 0x18b4 [0150.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b718 [0150.269] wcscpy (in: _Dest=0x819b718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0150.269] wcscat (in: _Dest=0x819b718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0150.269] wcscat (in: _Dest=0x819b718, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*" [0150.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0150.269] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd406e80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0154.474] wcscmp (_String1=".", _String2=".") returned 0 [0154.474] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd406e80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.474] wcscmp (_String1="..", _String2=".") returned 1 [0154.474] wcscmp (_String1="..", _String2="..") returned 0 [0154.474] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd453140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.474] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.474] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6688 [0154.474] wcscpy (in: _Dest=0x2ff6688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0154.474] wcscat (in: _Dest=0x2ff6688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0154.474] wcscat (in: _Dest=0x2ff6688, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" [0156.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2538 [0156.627] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd453140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0156.627] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0156.627] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0156.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da618 [0156.627] wcscpy (in: _Dest=0x81da618, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0156.627] wcscat (in: _Dest=0x81da618, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0156.627] wcscat (in: _Dest=0x81da618, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" [0156.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a7c [0156.629] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd453140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0156.629] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0156.629] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0156.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41d20 [0156.629] wcscpy (in: _Dest=0x3d41d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0156.629] wcscat (in: _Dest=0x3d41d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0156.629] wcscat (in: _Dest=0x3d41d20, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" [0156.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a80 [0156.630] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.630] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.630] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41dd8 [0156.630] wcscpy (in: _Dest=0x3d41dd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0156.630] wcscat (in: _Dest=0x3d41dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0156.630] wcscat (in: _Dest=0x3d41dd8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" [0156.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a84 [0156.632] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd406e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0156.632] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0156.632] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0156.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41e90 [0156.632] wcscpy (in: _Dest=0x3d41e90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0156.632] wcscat (in: _Dest=0x3d41e90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0156.632] wcscat (in: _Dest=0x3d41e90, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" [0156.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a88 [0156.633] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd5f6060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.633] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.633] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d62c8 [0156.634] wcscpy (in: _Dest=0x81d62c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0156.634] wcscat (in: _Dest=0x81d62c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0156.634] wcscat (in: _Dest=0x81d62c8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" [0156.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d62c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8c [0156.637] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd5f6060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.637] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0156.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0156.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b718) returned 1 [0156.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aa98) returned 1 Thread: id = 1862 os_tid = 0x18b8 [0150.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b7b8 [0150.270] wcscpy (in: _Dest=0x819b7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0150.270] wcscat (in: _Dest=0x819b7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0150.270] wcscat (in: _Dest=0x819b7b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*" [0150.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048248 [0150.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf7f0c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfa5220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099790 [0153.718] wcscmp (_String1=".", _String2=".") returned 0 [0153.718] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf7f0c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfa5220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.718] wcscmp (_String1="..", _String2=".") returned 1 [0153.718] wcscmp (_String1="..", _String2="..") returned 0 [0153.718] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.718] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.718] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0153.718] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0153.718] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0153.718] wcscat (in: _Dest=0x2ff63a8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" [0165.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2528 [0165.176] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0165.176] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0165.176] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0165.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1d78 [0165.177] wcscpy (in: _Dest=0x81e1d78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0165.177] wcscat (in: _Dest=0x81e1d78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0165.177] wcscat (in: _Dest=0x81e1d78, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" [0165.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a08 [0165.177] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0165.178] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0165.178] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0165.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d62c8 [0165.178] wcscpy (in: _Dest=0x81d62c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0165.178] wcscat (in: _Dest=0x81d62c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0165.178] wcscat (in: _Dest=0x81d62c8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" [0165.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d62c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a04 [0165.179] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0165.179] FindClose (in: hFindFile=0x8099790 | out: hFindFile=0x8099790) returned 1 [0165.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048248) returned 1 [0165.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b7b8) returned 1 [0165.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a638) returned 1 Thread: id = 1863 os_tid = 0x18bc [0150.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b858 [0150.270] wcscpy (in: _Dest=0x819b858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0150.271] wcscat (in: _Dest=0x819b858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0150.271] wcscat (in: _Dest=0x819b858, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*" [0150.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048718 [0150.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfb66a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38198 [0154.474] wcscmp (_String1=".", _String2=".") returned 0 [0154.474] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfb66a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.475] wcscmp (_String1="..", _String2=".") returned 1 [0154.475] wcscmp (_String1="..", _String2="..") returned 0 [0154.475] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.475] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.475] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40790 [0154.475] wcscpy (in: _Dest=0x3d40790, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0154.475] wcscat (in: _Dest=0x3d40790, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0154.475] wcscat (in: _Dest=0x3d40790, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" [0162.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2544 [0162.388] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0162.388] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0162.388] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0162.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d9bc8 [0162.388] wcscpy (in: _Dest=0x81d9bc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0162.389] wcscat (in: _Dest=0x81d9bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0162.389] wcscat (in: _Dest=0x81d9bc8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" [0162.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0162.390] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0162.390] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0162.390] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0162.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d409b8 [0162.390] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0162.390] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0162.390] wcscat (in: _Dest=0x3d409b8, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" [0162.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d409b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a24 [0162.391] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0162.391] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0162.392] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0162.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41988 [0162.392] wcscpy (in: _Dest=0x3d41988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0162.392] wcscat (in: _Dest=0x3d41988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0162.392] wcscat (in: _Dest=0x3d41988, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" [0162.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0162.393] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0162.393] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0162.393] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0162.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d403f8 [0162.393] wcscpy (in: _Dest=0x3d403f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0162.393] wcscat (in: _Dest=0x3d403f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0162.393] wcscat (in: _Dest=0x3d403f8, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" [0162.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d403f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a20 [0162.395] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0162.395] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0162.395] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0162.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5d50 [0162.395] wcscpy (in: _Dest=0x81d5d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0162.395] wcscat (in: _Dest=0x81d5d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0162.395] wcscat (in: _Dest=0x81d5d50, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" [0162.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0162.396] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0162.397] FindClose (in: hFindFile=0x3f38198 | out: hFindFile=0x3f38198) returned 1 [0162.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048718) returned 1 [0162.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b858) returned 1 [0162.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a8b8) returned 1 Thread: id = 1864 os_tid = 0x18c0 [0150.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b8f8 [0150.271] wcscpy (in: _Dest=0x819b8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0150.271] wcscat (in: _Dest=0x819b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0150.271] wcscat (in: _Dest=0x819b8f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*" [0150.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a190 [0150.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf90540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfb66a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0154.475] wcscmp (_String1=".", _String2=".") returned 0 [0154.475] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf90540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfb66a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.475] wcscmp (_String1="..", _String2=".") returned 1 [0154.475] wcscmp (_String1="..", _String2="..") returned 0 [0154.475] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.475] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.475] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40848 [0154.475] wcscpy (in: _Dest=0x3d40848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0154.476] wcscat (in: _Dest=0x3d40848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0154.476] wcscat (in: _Dest=0x3d40848, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" [0163.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ec [0163.154] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0163.154] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0163.154] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0163.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da568 [0163.154] wcscpy (in: _Dest=0x81da568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0163.154] wcscat (in: _Dest=0x81da568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0163.154] wcscat (in: _Dest=0x81da568, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" [0163.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0163.155] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0163.155] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0163.156] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0163.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1648 [0163.156] wcscpy (in: _Dest=0x81e1648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0163.156] wcscat (in: _Dest=0x81e1648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0163.156] wcscat (in: _Dest=0x81e1648, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" [0163.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0163.157] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0163.157] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0163.157] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0163.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1870 [0163.157] wcscpy (in: _Dest=0x81e1870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0163.157] wcscat (in: _Dest=0x81e1870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0163.157] wcscat (in: _Dest=0x81e1870, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" [0163.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0163.158] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0163.158] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0163.158] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0163.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1b50 [0163.158] wcscpy (in: _Dest=0x81e1b50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0163.158] wcscat (in: _Dest=0x81e1b50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0163.158] wcscat (in: _Dest=0x81e1b50, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" [0163.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0163.159] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0163.159] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0163.159] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0163.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e7d50 [0163.159] wcscpy (in: _Dest=0x81e7d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0163.159] wcscat (in: _Dest=0x81e7d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0163.159] wcscat (in: _Dest=0x81e7d50, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" [0163.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e7d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0163.161] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0163.161] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0163.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a190) returned 1 [0163.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b8f8) returned 1 [0163.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a958) returned 1 Thread: id = 1865 os_tid = 0x18c4 [0150.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b998 [0150.272] wcscpy (in: _Dest=0x819b998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0150.272] wcscat (in: _Dest=0x819b998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0150.272] wcscat (in: _Dest=0x819b998, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*" [0150.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0150.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbff14e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38318 [0153.950] wcscmp (_String1=".", _String2=".") returned 0 [0153.950] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbff14e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.950] wcscmp (_String1="..", _String2=".") returned 1 [0153.950] wcscmp (_String1="..", _String2="..") returned 0 [0153.950] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.950] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.950] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff75a0 [0153.950] wcscpy (in: _Dest=0x2ff75a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0153.950] wcscat (in: _Dest=0x2ff75a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0153.950] wcscat (in: _Dest=0x2ff75a0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" [0154.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff75a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0154.144] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0154.144] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0154.144] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0154.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40620 [0154.144] wcscpy (in: _Dest=0x3d40620, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0154.144] wcscat (in: _Dest=0x3d40620, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0154.144] wcscat (in: _Dest=0x3d40620, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" [0154.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0154.146] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0154.146] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0154.146] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0154.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d57d8 [0154.146] wcscpy (in: _Dest=0x81d57d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0154.146] wcscat (in: _Dest=0x81d57d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0154.146] wcscat (in: _Dest=0x81d57d8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" [0154.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d57d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0154.151] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0154.151] FindClose (in: hFindFile=0x3f38318 | out: hFindFile=0x3f38318) returned 1 [0154.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0154.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b998) returned 1 [0154.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a9f8) returned 1 Thread: id = 1866 os_tid = 0x18c8 [0150.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819ba38 [0150.272] wcscpy (in: _Dest=0x819ba38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0150.272] wcscat (in: _Dest=0x819ba38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0150.273] wcscat (in: _Dest=0x819ba38, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*" [0150.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049f28 [0150.273] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc03d7a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d98 [0153.951] wcscmp (_String1=".", _String2=".") returned 0 [0153.951] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc03d7a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.951] wcscmp (_String1="..", _String2=".") returned 1 [0153.951] wcscmp (_String1="..", _String2="..") returned 0 [0153.951] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.951] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.951] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7430 [0153.951] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0153.951] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0153.951] wcscat (in: _Dest=0x2ff7430, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" [0159.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf")) returned 0x20 [0159.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.769] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.769] GetLastError () returned 0x5 [0159.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0159.769] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0159.769] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0159.769] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0159.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b878 [0159.770] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0159.770] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0159.770] wcscat (in: _Dest=0x35b878, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" [0159.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf")) returned 0x20 [0159.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0159.770] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.770] GetLastError () returned 0x5 [0159.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0159.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0159.771] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.771] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.771] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0159.771] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0159.771] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0159.771] wcscat (in: _Dest=0x2ff7430, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" [0159.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf")) returned 0x20 [0159.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.771] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.771] GetLastError () returned 0x5 [0159.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0159.772] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.772] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.772] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0159.772] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0159.772] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0159.772] wcscat (in: _Dest=0x3e351b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" [0159.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf")) returned 0x20 [0159.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.772] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.772] GetLastError () returned 0x5 [0159.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.773] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.773] FindClose (in: hFindFile=0x3f37d98 | out: hFindFile=0x3f37d98) returned 1 [0159.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049f28) returned 1 [0159.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ba38) returned 1 [0159.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a818) returned 1 Thread: id = 1867 os_tid = 0x18cc [0150.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bad8 [0150.273] wcscpy (in: _Dest=0x819bad8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0150.273] wcscat (in: _Dest=0x819bad8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0150.273] wcscat (in: _Dest=0x819bad8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*" [0150.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a3f8 [0150.273] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc03d7a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0153.951] wcscmp (_String1=".", _String2=".") returned 0 [0153.951] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc03d7a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.951] wcscmp (_String1="..", _String2=".") returned 1 [0153.951] wcscmp (_String1="..", _String2="..") returned 0 [0153.952] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.952] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.952] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7658 [0153.952] wcscpy (in: _Dest=0x2ff7658, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0153.952] wcscat (in: _Dest=0x2ff7658, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0153.952] wcscat (in: _Dest=0x2ff7658, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" [0159.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf")) returned 0x20 [0159.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.763] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.763] GetLastError () returned 0x5 [0159.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7658) returned 1 [0159.763] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0159.763] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0159.763] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0159.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b878 [0159.764] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0159.764] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0159.764] wcscat (in: _Dest=0x35b878, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" [0159.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf")) returned 0x20 [0159.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0159.764] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.764] GetLastError () returned 0x5 [0159.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0159.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0159.764] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.764] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.765] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7658 [0159.765] wcscpy (in: _Dest=0x2ff7658, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0159.765] wcscat (in: _Dest=0x2ff7658, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0159.765] wcscat (in: _Dest=0x2ff7658, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" [0159.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf")) returned 0x20 [0159.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.765] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.765] GetLastError () returned 0x5 [0159.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7658) returned 1 [0159.766] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.766] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.766] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0159.766] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0159.766] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0159.766] wcscat (in: _Dest=0x3e351b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" [0159.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf")) returned 0x20 [0159.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.766] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.766] GetLastError () returned 0x5 [0159.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.767] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.767] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0159.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a3f8) returned 1 [0159.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bad8) returned 1 [0159.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ab38) returned 1 Thread: id = 1868 os_tid = 0x18d0 [0150.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bb78 [0150.274] wcscpy (in: _Dest=0x819bb78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0150.274] wcscat (in: _Dest=0x819bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0150.274] wcscat (in: _Dest=0x819bb78, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*" [0150.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047fe0 [0150.274] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfa5220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0153.952] wcscmp (_String1=".", _String2=".") returned 0 [0153.952] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfa5220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.952] wcscmp (_String1="..", _String2=".") returned 1 [0153.952] wcscmp (_String1="..", _String2="..") returned 0 [0153.952] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.952] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.952] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6e70 [0153.952] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0153.952] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0153.953] wcscat (in: _Dest=0x2ff6e70, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" [0154.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0154.153] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0154.154] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0154.154] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0154.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d406d8 [0154.154] wcscpy (in: _Dest=0x3d406d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0154.154] wcscat (in: _Dest=0x3d406d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0154.154] wcscat (in: _Dest=0x3d406d8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" [0154.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d406d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0154.155] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0154.155] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0154.155] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0154.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5fa8 [0154.155] wcscpy (in: _Dest=0x81d5fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0154.155] wcscat (in: _Dest=0x81d5fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0154.155] wcscat (in: _Dest=0x81d5fa8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" [0154.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0154.157] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0154.157] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0154.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047fe0) returned 1 [0154.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bb78) returned 1 [0154.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a778) returned 1 Thread: id = 1869 os_tid = 0x18d4 [0150.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bc18 [0150.274] wcscpy (in: _Dest=0x819bc18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0150.274] wcscat (in: _Dest=0x819bc18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0150.274] wcscat (in: _Dest=0x819bc18, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*" [0150.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046f08 [0150.274] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0153.953] wcscmp (_String1=".", _String2=".") returned 0 [0153.953] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.953] wcscmp (_String1="..", _String2=".") returned 1 [0153.953] wcscmp (_String1="..", _String2="..") returned 0 [0153.953] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.953] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.953] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff68b0 [0153.953] wcscpy (in: _Dest=0x2ff68b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0153.953] wcscat (in: _Dest=0x2ff68b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0153.953] wcscat (in: _Dest=0x2ff68b0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" [0156.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff68b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0156.426] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.426] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.426] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41c68 [0156.426] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0156.426] wcscat (in: _Dest=0x3d41c68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0156.426] wcscat (in: _Dest=0x3d41c68, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" [0156.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0156.427] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.427] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.427] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d6200 [0156.427] wcscpy (in: _Dest=0x81d6200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0156.428] wcscat (in: _Dest=0x81d6200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0156.428] wcscat (in: _Dest=0x81d6200, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" [0156.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0156.429] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.429] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0156.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046f08) returned 1 [0156.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bc18) returned 1 [0156.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac78) returned 1 Thread: id = 1870 os_tid = 0x18d8 [0150.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bcb8 [0150.276] wcscpy (in: _Dest=0x819bcb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0150.276] wcscat (in: _Dest=0x819bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0150.276] wcscat (in: _Dest=0x819bcb8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*" [0150.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80497f0 [0150.276] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf6a3e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf90540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0154.476] wcscmp (_String1=".", _String2=".") returned 0 [0154.476] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf6a3e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf90540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.476] wcscmp (_String1="..", _String2=".") returned 1 [0154.476] wcscmp (_String1="..", _String2="..") returned 0 [0154.476] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.476] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.476] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40900 [0154.476] wcscpy (in: _Dest=0x3d40900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0154.476] wcscat (in: _Dest=0x3d40900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0154.476] wcscat (in: _Dest=0x3d40900, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" [0163.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2548 [0163.033] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0163.033] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0163.033] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0163.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da408 [0163.033] wcscpy (in: _Dest=0x81da408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0163.033] wcscat (in: _Dest=0x81da408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0163.033] wcscat (in: _Dest=0x81da408, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" [0163.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2718 [0163.034] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0163.034] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0163.034] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0163.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41310 [0163.034] wcscpy (in: _Dest=0x3d41310, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0163.035] wcscat (in: _Dest=0x3d41310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0163.035] wcscat (in: _Dest=0x3d41310, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" [0163.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0163.036] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0163.036] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0163.036] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0163.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41538 [0163.036] wcscpy (in: _Dest=0x3d41538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0163.036] wcscat (in: _Dest=0x3d41538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0163.036] wcscat (in: _Dest=0x3d41538, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" [0163.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d0 [0163.038] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0163.038] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0163.038] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0163.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d416a8 [0163.038] wcscpy (in: _Dest=0x3d416a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0163.038] wcscat (in: _Dest=0x3d416a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0163.038] wcscat (in: _Dest=0x3d416a8, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" [0163.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d416a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25cc [0163.040] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0163.040] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0163.040] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0163.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5ee0 [0163.040] wcscpy (in: _Dest=0x81d5ee0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0163.040] wcscat (in: _Dest=0x81d5ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0163.040] wcscat (in: _Dest=0x81d5ee0, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" [0163.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c8 [0163.041] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0163.041] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0163.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80497f0) returned 1 [0163.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bcb8) returned 1 [0163.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aef8) returned 1 Thread: id = 1871 os_tid = 0x18dc [0150.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bd58 [0150.277] wcscpy (in: _Dest=0x819bd58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0150.277] wcscat (in: _Dest=0x819bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0150.277] wcscat (in: _Dest=0x819bd58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*" [0150.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047b10 [0150.277] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0d5d20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc194400, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f18 [0153.955] wcscmp (_String1=".", _String2=".") returned 0 [0153.955] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0d5d20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc194400, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.956] wcscmp (_String1="..", _String2=".") returned 1 [0153.956] wcscmp (_String1="..", _String2="..") returned 0 [0153.956] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0d5d20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.956] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.956] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7cd0 [0153.956] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0153.956] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0153.956] wcscat (in: _Dest=0x2ff7cd0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" [0159.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf")) returned 0x20 [0159.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.777] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.777] GetLastError () returned 0x5 [0159.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 [0159.777] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.777] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.777] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7cd0 [0159.777] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0159.778] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0159.778] wcscat (in: _Dest=0x2ff7cd0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" [0159.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf")) returned 0x20 [0159.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.778] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.778] GetLastError () returned 0x5 [0159.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 [0159.778] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.779] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.779] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0159.779] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0159.779] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0159.779] wcscat (in: _Dest=0x3e351b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" [0159.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf")) returned 0x20 [0159.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.779] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.779] GetLastError () returned 0x5 [0159.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.779] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.780] FindClose (in: hFindFile=0x3f37f18 | out: hFindFile=0x3f37f18) returned 1 [0159.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047b10) returned 1 [0159.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bd58) returned 1 [0159.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ae58) returned 1 Thread: id = 1872 os_tid = 0x18e0 [0150.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bdf8 [0150.277] wcscpy (in: _Dest=0x819bdf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0150.277] wcscat (in: _Dest=0x819bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0150.277] wcscat (in: _Dest=0x819bdf8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*" [0150.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049cc0 [0150.277] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf44280, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf6a3e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a48 [0154.477] wcscmp (_String1=".", _String2=".") returned 0 [0154.477] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf44280, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf6a3e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.477] wcscmp (_String1="..", _String2=".") returned 1 [0154.477] wcscmp (_String1="..", _String2="..") returned 0 [0154.477] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.477] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.477] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d409b8 [0154.477] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0154.477] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0154.477] wcscat (in: _Dest=0x3d409b8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" [0155.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d409b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0155.177] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0155.177] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0155.177] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0155.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3eaf2a8 [0155.178] wcscpy (in: _Dest=0x3eaf2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0155.178] wcscat (in: _Dest=0x3eaf2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0155.178] wcscat (in: _Dest=0x3eaf2a8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" [0155.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eaf2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2718 [0155.179] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0155.179] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0155.179] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0155.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d415f0 [0155.179] wcscpy (in: _Dest=0x3d415f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0155.179] wcscat (in: _Dest=0x3d415f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0155.179] wcscat (in: _Dest=0x3d415f0, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" [0155.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d415f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x271c [0155.181] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0155.181] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0155.181] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0155.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d416a8 [0155.181] wcscpy (in: _Dest=0x3d416a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0155.181] wcscat (in: _Dest=0x3d416a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0155.181] wcscat (in: _Dest=0x3d416a8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" [0155.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d416a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2720 [0155.182] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0155.182] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0155.182] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0155.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41760 [0155.182] wcscpy (in: _Dest=0x3d41760, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0155.183] wcscat (in: _Dest=0x3d41760, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0155.183] wcscat (in: _Dest=0x3d41760, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" [0155.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2724 [0155.184] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0155.184] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0155.184] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0155.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d58a0 [0155.184] wcscpy (in: _Dest=0x81d58a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0155.184] wcscat (in: _Dest=0x81d58a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0155.184] wcscat (in: _Dest=0x81d58a0, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" [0155.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d58a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2728 [0155.185] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0155.186] FindClose (in: hFindFile=0x3e54a48 | out: hFindFile=0x3e54a48) returned 1 [0155.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049cc0) returned 1 [0155.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bdf8) returned 1 [0155.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819adb8) returned 1 Thread: id = 1873 os_tid = 0x18e4 [0150.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819be98 [0150.278] wcscpy (in: _Dest=0x819be98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0150.278] wcscat (in: _Dest=0x819be98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0150.278] wcscat (in: _Dest=0x819be98, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*" [0150.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0150.278] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf44280, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54cc8 [0154.477] wcscmp (_String1=".", _String2=".") returned 0 [0154.477] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf44280, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.477] wcscmp (_String1="..", _String2=".") returned 1 [0154.477] wcscmp (_String1="..", _String2="..") returned 0 [0154.478] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.478] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.478] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40a70 [0154.478] wcscpy (in: _Dest=0x3d40a70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0154.478] wcscat (in: _Dest=0x3d40a70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0154.478] wcscat (in: _Dest=0x3d40a70, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" [0156.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0156.320] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0156.320] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0156.320] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0156.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d99b8 [0156.320] wcscpy (in: _Dest=0x81d99b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0156.320] wcscat (in: _Dest=0x81d99b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0156.320] wcscat (in: _Dest=0x81d99b8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" [0156.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d99b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2938 [0156.322] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0156.322] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0156.322] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0156.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff67f8 [0156.322] wcscpy (in: _Dest=0x2ff67f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0156.322] wcscat (in: _Dest=0x2ff67f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0156.322] wcscat (in: _Dest=0x2ff67f8, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" [0156.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff67f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x293c [0156.323] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.323] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.323] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7e40 [0156.323] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0156.324] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0156.324] wcscat (in: _Dest=0x2ff7e40, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" [0156.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2940 [0156.325] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0156.325] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0156.325] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0156.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6c48 [0156.325] wcscpy (in: _Dest=0x2ff6c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0156.325] wcscat (in: _Dest=0x2ff6c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0156.325] wcscat (in: _Dest=0x2ff6c48, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" [0156.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2944 [0156.327] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.327] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.327] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5fa8 [0156.327] wcscpy (in: _Dest=0x81d5fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0156.327] wcscat (in: _Dest=0x81d5fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0156.327] wcscat (in: _Dest=0x81d5fa8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" [0156.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2948 [0156.328] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.328] FindClose (in: hFindFile=0x3e54cc8 | out: hFindFile=0x3e54cc8) returned 1 [0156.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0156.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819be98) returned 1 [0156.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819af98) returned 1 Thread: id = 1874 os_tid = 0x18e8 [0150.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bf38 [0150.278] wcscpy (in: _Dest=0x819bf38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0150.278] wcscat (in: _Dest=0x819bf38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0150.278] wcscat (in: _Dest=0x819bf38, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*" [0150.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047170 [0150.278] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b88 [0154.478] wcscmp (_String1=".", _String2=".") returned 0 [0154.478] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.478] wcscmp (_String1="..", _String2=".") returned 1 [0154.478] wcscmp (_String1="..", _String2="..") returned 0 [0154.478] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.478] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.478] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40b28 [0154.479] wcscpy (in: _Dest=0x3d40b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0154.479] wcscat (in: _Dest=0x3d40b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0154.479] wcscat (in: _Dest=0x3d40b28, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" [0159.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf")) returned 0x20 [0159.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.326] GetLastError () returned 0x5 [0159.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b28) returned 1 [0159.327] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0159.327] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0159.327] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0159.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81daa38 [0159.327] wcscpy (in: _Dest=0x81daa38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0159.327] wcscat (in: _Dest=0x81daa38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0159.327] wcscat (in: _Dest=0x81daa38, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" [0159.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf")) returned 0x20 [0159.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0159.328] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.328] GetLastError () returned 0x5 [0159.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0159.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa38) returned 1 [0159.328] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0159.328] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0159.328] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0159.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40b28 [0159.329] wcscpy (in: _Dest=0x3d40b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0159.329] wcscat (in: _Dest=0x3d40b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0159.329] wcscat (in: _Dest=0x3d40b28, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" [0159.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf")) returned 0x20 [0159.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0159.329] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.330] GetLastError () returned 0x5 [0159.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0159.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b28) returned 1 [0159.330] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.330] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.330] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40b28 [0159.330] wcscpy (in: _Dest=0x3d40b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0159.331] wcscat (in: _Dest=0x3d40b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0159.331] wcscat (in: _Dest=0x3d40b28, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" [0159.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf")) returned 0x20 [0159.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.331] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.332] GetLastError () returned 0x5 [0159.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b28) returned 1 [0159.332] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0159.332] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0159.332] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0159.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40b28 [0159.332] wcscpy (in: _Dest=0x3d40b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0159.332] wcscat (in: _Dest=0x3d40b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0159.332] wcscat (in: _Dest=0x3d40b28, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" [0159.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf")) returned 0x20 [0159.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0159.333] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.333] GetLastError () returned 0x5 [0159.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0159.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b28) returned 1 [0159.333] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.333] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.333] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0159.334] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0159.334] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0159.334] wcscat (in: _Dest=0x3e351b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" [0159.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf")) returned 0x20 [0159.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.334] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.334] GetLastError () returned 0x5 [0159.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.335] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.335] FindClose (in: hFindFile=0x3e54b88 | out: hFindFile=0x3e54b88) returned 1 [0159.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047170) returned 1 [0159.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bf38) returned 1 [0159.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ad18) returned 1 Thread: id = 1875 os_tid = 0x18ec [0150.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bfd8 [0150.279] wcscpy (in: _Dest=0x819bfd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0150.279] wcscat (in: _Dest=0x819bfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0150.279] wcscat (in: _Dest=0x819bfd8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*" [0150.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048e50 [0150.279] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcef7fc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54c88 [0154.479] wcscmp (_String1=".", _String2=".") returned 0 [0154.479] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcef7fc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.479] wcscmp (_String1="..", _String2=".") returned 1 [0154.479] wcscmp (_String1="..", _String2="..") returned 0 [0154.479] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.479] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.479] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40be0 [0154.479] wcscpy (in: _Dest=0x3d40be0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0154.479] wcscat (in: _Dest=0x3d40be0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0154.479] wcscat (in: _Dest=0x3d40be0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" [0159.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf")) returned 0x20 [0159.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.314] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.314] GetLastError () returned 0x5 [0159.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40be0) returned 1 [0159.314] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0159.315] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0159.315] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0159.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81daa38 [0159.315] wcscpy (in: _Dest=0x81daa38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0159.315] wcscat (in: _Dest=0x81daa38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0159.315] wcscat (in: _Dest=0x81daa38, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" [0159.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf")) returned 0x20 [0159.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0159.315] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.316] GetLastError () returned 0x5 [0159.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0159.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa38) returned 1 [0159.316] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0159.316] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0159.316] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0159.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40be0 [0159.316] wcscpy (in: _Dest=0x3d40be0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0159.316] wcscat (in: _Dest=0x3d40be0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0159.316] wcscat (in: _Dest=0x3d40be0, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" [0159.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf")) returned 0x20 [0159.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0159.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.317] GetLastError () returned 0x5 [0159.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0159.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40be0) returned 1 [0159.317] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.317] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.317] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40be0 [0159.317] wcscpy (in: _Dest=0x3d40be0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0159.317] wcscat (in: _Dest=0x3d40be0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0159.317] wcscat (in: _Dest=0x3d40be0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" [0159.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf")) returned 0x20 [0159.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.318] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.318] GetLastError () returned 0x5 [0159.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40be0) returned 1 [0159.319] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0159.319] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0159.319] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0159.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40be0 [0159.319] wcscpy (in: _Dest=0x3d40be0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0159.319] wcscat (in: _Dest=0x3d40be0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0159.319] wcscat (in: _Dest=0x3d40be0, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" [0159.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf")) returned 0x20 [0159.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0159.320] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.320] GetLastError () returned 0x5 [0159.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0159.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40be0) returned 1 [0159.320] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.320] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.320] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0159.320] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0159.320] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0159.320] wcscat (in: _Dest=0x3e351b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" [0159.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf")) returned 0x20 [0159.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.321] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.321] GetLastError () returned 0x5 [0159.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.321] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.322] FindClose (in: hFindFile=0x3e54c88 | out: hFindFile=0x3e54c88) returned 1 [0159.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048e50) returned 1 [0159.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bfd8) returned 1 [0159.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819abd8) returned 1 Thread: id = 1876 os_tid = 0x18f0 [0150.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819c078 [0150.280] wcscpy (in: _Dest=0x819c078, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0150.280] wcscat (in: _Dest=0x819c078, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0150.280] wcscat (in: _Dest=0x819c078, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*" [0150.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0150.280] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099250 [0153.787] wcscmp (_String1=".", _String2=".") returned 0 [0153.787] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.787] wcscmp (_String1="..", _String2=".") returned 1 [0153.787] wcscmp (_String1="..", _String2="..") returned 0 [0153.787] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.787] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.787] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff67f8 [0153.787] wcscpy (in: _Dest=0x2ff67f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0153.787] wcscat (in: _Dest=0x2ff67f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0153.787] wcscat (in: _Dest=0x2ff67f8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" [0154.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff67f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0154.077] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0154.077] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0154.077] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0154.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7ef8 [0154.077] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0154.077] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0154.077] wcscat (in: _Dest=0x2ff7ef8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" [0154.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0154.081] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0154.081] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0154.081] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0154.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5968 [0154.081] wcscpy (in: _Dest=0x81d5968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0154.081] wcscat (in: _Dest=0x81d5968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0154.081] wcscat (in: _Dest=0x81d5968, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" [0154.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0154.082] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0154.082] FindClose (in: hFindFile=0x8099250 | out: hFindFile=0x8099250) returned 1 [0154.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0154.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c078) returned 1 [0154.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b038) returned 1 Thread: id = 1877 os_tid = 0x18f4 [0150.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819c118 [0150.281] wcscpy (in: _Dest=0x819c118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0150.281] wcscat (in: _Dest=0x819c118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0150.281] wcscat (in: _Dest=0x819c118, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*" [0150.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3caf0 [0150.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0153.717] wcscmp (_String1=".", _String2=".") returned 0 [0153.717] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.717] wcscmp (_String1="..", _String2=".") returned 1 [0153.717] wcscmp (_String1="..", _String2="..") returned 0 [0153.717] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0153.717] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0153.717] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0153.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6d00 [0153.718] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0153.718] wcscat (in: _Dest=0x2ff6d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0153.718] wcscat (in: _Dest=0x2ff6d00, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" [0161.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b30 [0161.236] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0161.236] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0161.236] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0161.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41988 [0161.236] wcscpy (in: _Dest=0x3d41988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0161.236] wcscat (in: _Dest=0x3d41988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0161.236] wcscat (in: _Dest=0x3d41988, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" [0161.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0161.237] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0161.238] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0161.238] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0161.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5d50 [0161.238] wcscpy (in: _Dest=0x81d5d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0161.238] wcscat (in: _Dest=0x81d5d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0161.238] wcscat (in: _Dest=0x81d5d50, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" [0161.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0c [0161.239] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0161.239] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0161.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3caf0) returned 1 [0161.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c118) returned 1 [0161.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b0d8) returned 1 Thread: id = 1878 os_tid = 0x18f8 [0150.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c70f8 [0150.679] wcscpy (in: _Dest=0x2c70f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0150.679] wcscat (in: _Dest=0x2c70f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0150.679] wcscat (in: _Dest=0x2c70f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*" [0150.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fedf8 [0150.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdced1e60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcef7fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37498 [0154.472] wcscmp (_String1=".", _String2=".") returned 0 [0154.472] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdced1e60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcef7fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.472] wcscmp (_String1="..", _String2=".") returned 1 [0154.472] wcscmp (_String1="..", _String2="..") returned 0 [0154.472] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0154.472] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0154.472] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0154.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6b90 [0154.472] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0154.472] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0154.472] wcscat (in: _Dest=0x2ff6b90, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" [0156.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2530 [0156.307] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0156.308] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0156.308] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0156.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d9908 [0156.308] wcscpy (in: _Dest=0x81d9908, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0156.308] wcscat (in: _Dest=0x81d9908, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0156.308] wcscat (in: _Dest=0x81d9908, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" [0156.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2924 [0156.309] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0156.309] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0156.309] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0156.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6e70 [0156.309] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0156.309] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0156.310] wcscat (in: _Dest=0x2ff6e70, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" [0156.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2928 [0156.311] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.311] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.311] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff75a0 [0156.311] wcscpy (in: _Dest=0x2ff75a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0156.311] wcscat (in: _Dest=0x2ff75a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0156.311] wcscat (in: _Dest=0x2ff75a0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" [0156.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff75a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x292c [0156.312] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0156.313] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0156.313] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0156.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7ef8 [0156.313] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0156.313] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0156.313] wcscat (in: _Dest=0x2ff7ef8, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" [0156.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2930 [0156.314] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.314] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.314] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5e18 [0156.314] wcscpy (in: _Dest=0x81d5e18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0156.314] wcscat (in: _Dest=0x81d5e18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0156.314] wcscat (in: _Dest=0x81d5e18, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" [0156.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2934 [0156.316] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.316] FindClose (in: hFindFile=0x3f37498 | out: hFindFile=0x3f37498) returned 1 [0156.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fedf8) returned 1 [0156.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c70f8) returned 1 [0156.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b178) returned 1 Thread: id = 1879 os_tid = 0x18fc [0150.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat")) returned 0x20 [0150.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0150.695] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.707] GetLastError () returned 0x5 [0150.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0150.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 1880 os_tid = 0x1900 [0150.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs")) returned 0x20 [0153.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0153.722] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.269] GetLastError () returned 0x5 [0155.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0155.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 Thread: id = 1881 os_tid = 0x1904 [0150.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht")) returned 0x20 [0155.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0155.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.271] GetLastError () returned 0x5 [0155.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0155.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 1882 os_tid = 0x1908 [0150.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze")) returned 0x20 [0155.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0155.879] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.879] GetLastError () returned 0x5 [0155.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0155.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 Thread: id = 1883 os_tid = 0x190c [0150.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan")) returned 0x20 [0155.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0155.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.897] GetLastError () returned 0x5 [0155.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0155.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be568) returned 1 Thread: id = 1884 os_tid = 0x1910 [0150.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu")) returned 0x20 [0155.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0155.895] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.895] GetLastError () returned 0x5 [0155.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0155.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be5f0) returned 1 Thread: id = 1885 os_tid = 0x1914 [0150.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp")) returned 0x20 [0155.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0155.898] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.899] GetLastError () returned 0x5 [0155.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0155.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be678) returned 1 Thread: id = 1886 os_tid = 0x1918 [0150.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq")) returned 0x20 [0155.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0155.900] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.900] GetLastError () returned 0x5 [0155.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0155.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 1887 os_tid = 0x191c [0150.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra")) returned 0x20 [0155.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0155.902] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.902] GetLastError () returned 0x5 [0155.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0155.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 1888 os_tid = 0x1920 [0150.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv")) returned 0x20 [0155.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0155.903] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.904] GetLastError () returned 0x5 [0155.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0155.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 1889 os_tid = 0x1924 [0150.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun")) returned 0x20 [0155.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0155.905] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.905] GetLastError () returned 0x5 [0155.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0155.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81becd8) returned 1 Thread: id = 1890 os_tid = 0x1928 [0150.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita")) returned 0x20 [0155.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0155.893] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.893] GetLastError () returned 0x5 [0155.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0155.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bec50) returned 1 Thread: id = 1891 os_tid = 0x192c [0150.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn")) returned 0x20 [0155.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0155.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.892] GetLastError () returned 0x5 [0155.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0155.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 1892 os_tid = 0x1930 [0150.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor")) returned 0x20 [0155.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0155.907] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.907] GetLastError () returned 0x5 [0155.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0155.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 1893 os_tid = 0x1934 [0150.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld")) returned 0x20 [0155.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0155.908] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.909] GetLastError () returned 0x5 [0155.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0155.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 1894 os_tid = 0x1938 [0150.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor")) returned 0x20 [0155.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0155.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.890] GetLastError () returned 0x5 [0155.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0155.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 1895 os_tid = 0x193c [0150.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol")) returned 0x20 [0155.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0155.888] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.888] GetLastError () returned 0x5 [0155.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0155.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 1896 os_tid = 0x1940 [0150.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb")) returned 0x20 [0155.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0155.910] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.910] GetLastError () returned 0x5 [0155.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0155.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 1897 os_tid = 0x1944 [0150.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum")) returned 0x20 [0155.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0155.886] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.886] GetLastError () returned 0x5 [0155.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0155.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 1898 os_tid = 0x1948 [0150.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus")) returned 0x20 [0155.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0155.913] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.914] GetLastError () returned 0x5 [0155.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0155.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 1899 os_tid = 0x194c [0150.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky")) returned 0x20 [0155.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0155.912] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.912] GetLastError () returned 0x5 [0155.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0155.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 1900 os_tid = 0x1950 [0150.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv")) returned 0x20 [0155.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0155.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.881] GetLastError () returned 0x5 [0155.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0155.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 Thread: id = 1901 os_tid = 0x1954 [0150.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo")) returned 0x20 [0155.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0155.268] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.268] GetLastError () returned 0x5 [0155.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0155.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 1902 os_tid = 0x1958 [0150.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve")) returned 0x20 [0155.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0155.882] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.883] GetLastError () returned 0x5 [0155.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0155.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 1903 os_tid = 0x195c [0150.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur")) returned 0x20 [0155.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0155.884] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.884] GetLastError () returned 0x5 [0155.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0155.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 1904 os_tid = 0x1960 [0150.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr")) returned 0x20 [0153.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0153.721] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.953] GetLastError () returned 0x5 [0154.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0154.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf3c0) returned 1 Thread: id = 1905 os_tid = 0x1964 [0150.725] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml")) returned 0x2020 [0150.726] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x20) returned 0 [0150.726] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.726] GetLastError () returned 0x5 [0150.726] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x2020) returned 0 [0150.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 Thread: id = 1906 os_tid = 0x1968 [0150.728] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll")) returned 0x2020 [0150.728] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0150.728] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.728] GetLastError () returned 0x5 [0150.728] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0150.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c708) returned 1 Thread: id = 1907 os_tid = 0x196c [0150.729] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll")) returned 0x2020 [0152.514] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.515] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.515] GetLastError () returned 0x5 [0152.515] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 1908 os_tid = 0x1970 [0150.730] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll")) returned 0x2020 [0152.516] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.516] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.516] GetLastError () returned 0x5 [0152.516] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 1909 os_tid = 0x1974 [0150.731] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll")) returned 0x2020 [0152.518] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.518] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.518] GetLastError () returned 0x5 [0152.518] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36210) returned 1 Thread: id = 1910 os_tid = 0x1978 [0150.732] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll")) returned 0x2020 [0152.519] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.519] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.520] GetLastError () returned 0x5 [0152.520] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 Thread: id = 1911 os_tid = 0x197c [0150.732] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll")) returned 0x2020 [0152.521] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.521] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.521] GetLastError () returned 0x5 [0152.521] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35fd0) returned 1 Thread: id = 1912 os_tid = 0x1980 [0150.733] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll")) returned 0x2020 [0152.523] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.523] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.523] GetLastError () returned 0x5 [0152.523] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 Thread: id = 1913 os_tid = 0x1984 [0150.734] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll")) returned 0x2020 [0152.524] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.524] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.524] GetLastError () returned 0x5 [0152.524] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f362a0) returned 1 Thread: id = 1914 os_tid = 0x1988 [0150.734] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll")) returned 0x2020 [0152.526] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.526] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.526] GetLastError () returned 0x5 [0152.526] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35f40) returned 1 Thread: id = 1915 os_tid = 0x198c [0150.738] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll")) returned 0x2020 [0152.527] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.527] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.528] GetLastError () returned 0x5 [0152.528] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1c48) returned 1 Thread: id = 1916 os_tid = 0x1990 [0150.739] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll")) returned 0x2020 [0152.529] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.529] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.529] GetLastError () returned 0x5 [0152.529] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bcf8) returned 1 Thread: id = 1917 os_tid = 0x1994 [0150.740] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll")) returned 0x2020 [0152.531] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.531] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.531] GetLastError () returned 0x5 [0152.531] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e29f48) returned 1 Thread: id = 1918 os_tid = 0x1998 [0150.740] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll")) returned 0x2020 [0152.532] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.532] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.532] GetLastError () returned 0x5 [0152.532] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2428) returned 1 Thread: id = 1919 os_tid = 0x199c [0150.741] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll")) returned 0x2020 [0152.534] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.534] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.534] GetLastError () returned 0x5 [0152.534] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb26f8) returned 1 Thread: id = 1920 os_tid = 0x19a0 [0150.742] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll")) returned 0x2020 [0152.536] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.536] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.536] GetLastError () returned 0x5 [0152.536] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1738) returned 1 Thread: id = 1921 os_tid = 0x19a4 [0150.742] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll")) returned 0x2020 [0152.537] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.538] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.538] GetLastError () returned 0x5 [0152.538] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 Thread: id = 1922 os_tid = 0x19a8 [0150.743] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll")) returned 0x2020 [0152.540] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.540] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.540] GetLastError () returned 0x5 [0152.540] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a830) returned 1 Thread: id = 1923 os_tid = 0x19ac [0150.744] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll")) returned 0x2020 [0152.544] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.544] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.544] GetLastError () returned 0x5 [0152.544] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b378) returned 1 Thread: id = 1924 os_tid = 0x19b0 [0150.745] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll")) returned 0x2020 [0152.549] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.549] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.549] GetLastError () returned 0x5 [0152.549] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb16a8) returned 1 Thread: id = 1925 os_tid = 0x19b4 [0150.745] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll")) returned 0x2020 [0152.550] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.551] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.551] GetLastError () returned 0x5 [0152.551] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb17c8) returned 1 Thread: id = 1926 os_tid = 0x19b8 [0150.746] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll")) returned 0x2020 [0152.552] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.552] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.553] GetLastError () returned 0x5 [0152.553] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a700) returned 1 Thread: id = 1927 os_tid = 0x19bc [0150.747] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll")) returned 0x2020 [0152.554] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.554] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.554] GetLastError () returned 0x5 [0152.554] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2938) returned 1 Thread: id = 1928 os_tid = 0x19c0 [0150.754] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll")) returned 0x2020 [0152.264] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.264] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.264] GetLastError () returned 0x5 [0152.264] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2818) returned 1 Thread: id = 1929 os_tid = 0x19c4 [0150.756] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll")) returned 0x2020 [0152.513] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.513] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.513] GetLastError () returned 0x5 [0152.513] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 Thread: id = 1930 os_tid = 0x19c8 [0150.756] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll")) returned 0x2020 [0152.511] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.511] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.512] GetLastError () returned 0x5 [0152.512] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b968) returned 1 Thread: id = 1931 os_tid = 0x19cc [0150.757] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll")) returned 0x2020 [0152.510] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.510] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.510] GetLastError () returned 0x5 [0152.510] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b7a0) returned 1 Thread: id = 1932 os_tid = 0x19d0 [0151.013] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll")) returned 0x2020 [0152.508] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.508] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.508] GetLastError () returned 0x5 [0152.508] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3daa0) returned 1 Thread: id = 1933 os_tid = 0x19d8 [0151.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif")) returned 0x20 [0154.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", dwFileAttributes=0x20) returned 0 [0154.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.397] GetLastError () returned 0x5 [0154.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", dwFileAttributes=0x20) returned 0 [0154.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2af50) returned 1 Thread: id = 1934 os_tid = 0x19dc [0151.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif")) returned 0x20 [0154.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF", dwFileAttributes=0x20) returned 0 [0154.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.398] GetLastError () returned 0x5 [0154.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF", dwFileAttributes=0x20) returned 0 [0154.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c708) returned 1 Thread: id = 1935 os_tid = 0x19e0 [0151.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif")) returned 0x20 [0154.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF", dwFileAttributes=0x20) returned 0 [0154.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.399] GetLastError () returned 0x5 [0154.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF", dwFileAttributes=0x20) returned 0 [0154.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c248) returned 1 Thread: id = 1936 os_tid = 0x19e4 [0151.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif")) returned 0x20 [0153.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF", dwFileAttributes=0x20) returned 0 [0153.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.904] GetLastError () returned 0x5 [0153.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF", dwFileAttributes=0x20) returned 0 [0153.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ca00) returned 1 Thread: id = 1937 os_tid = 0x19e8 [0151.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif")) returned 0x20 [0154.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF", dwFileAttributes=0x20) returned 0 [0154.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.395] GetLastError () returned 0x5 [0154.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF", dwFileAttributes=0x20) returned 0 [0154.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c5d8) returned 1 Thread: id = 1938 os_tid = 0x19ec [0151.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif")) returned 0x20 [0154.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF", dwFileAttributes=0x20) returned 0 [0154.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.394] GetLastError () returned 0x5 [0154.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF", dwFileAttributes=0x20) returned 0 [0154.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c2e0) returned 1 Thread: id = 1939 os_tid = 0x19f0 [0151.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif")) returned 0x20 [0154.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF", dwFileAttributes=0x20) returned 0 [0154.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.392] GetLastError () returned 0x5 [0154.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF", dwFileAttributes=0x20) returned 0 [0154.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c968) returned 1 Thread: id = 1940 os_tid = 0x19f4 [0151.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif")) returned 0x20 [0154.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF", dwFileAttributes=0x20) returned 0 [0154.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.391] GetLastError () returned 0x5 [0154.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF", dwFileAttributes=0x20) returned 0 [0154.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cbc8) returned 1 Thread: id = 1941 os_tid = 0x19f8 [0151.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif")) returned 0x20 [0154.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF", dwFileAttributes=0x20) returned 0 [0154.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.389] GetLastError () returned 0x5 [0154.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF", dwFileAttributes=0x20) returned 0 [0154.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cc60) returned 1 Thread: id = 1942 os_tid = 0x19fc [0151.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif")) returned 0x20 [0154.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF", dwFileAttributes=0x20) returned 0 [0154.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.370] GetLastError () returned 0x5 [0154.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF", dwFileAttributes=0x20) returned 0 [0154.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ccf8) returned 1 Thread: id = 1943 os_tid = 0x1a00 [0151.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif")) returned 0x20 [0154.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF", dwFileAttributes=0x20) returned 0 [0154.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.388] GetLastError () returned 0x5 [0154.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF", dwFileAttributes=0x20) returned 0 [0154.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 Thread: id = 1944 os_tid = 0x1a04 [0151.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif")) returned 0x20 [0154.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF", dwFileAttributes=0x20) returned 0 [0154.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.386] GetLastError () returned 0x5 [0154.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF", dwFileAttributes=0x20) returned 0 [0154.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c8d0) returned 1 Thread: id = 1945 os_tid = 0x1a08 [0151.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif")) returned 0x20 [0154.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF", dwFileAttributes=0x20) returned 0 [0154.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.385] GetLastError () returned 0x5 [0154.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF", dwFileAttributes=0x20) returned 0 [0154.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c410) returned 1 Thread: id = 1946 os_tid = 0x1a0c [0151.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif")) returned 0x20 [0154.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF", dwFileAttributes=0x20) returned 0 [0154.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.384] GetLastError () returned 0x5 [0154.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF", dwFileAttributes=0x20) returned 0 [0154.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cec0) returned 1 Thread: id = 1947 os_tid = 0x1a10 [0151.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif")) returned 0x20 [0154.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF", dwFileAttributes=0x20) returned 0 [0154.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.382] GetLastError () returned 0x5 [0154.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF", dwFileAttributes=0x20) returned 0 [0154.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 Thread: id = 1948 os_tid = 0x1a14 [0151.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif")) returned 0x20 [0154.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF", dwFileAttributes=0x20) returned 0 [0154.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.361] GetLastError () returned 0x5 [0154.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF", dwFileAttributes=0x20) returned 0 [0154.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d04f0) returned 1 Thread: id = 1949 os_tid = 0x1a18 [0151.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif")) returned 0x20 [0154.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF", dwFileAttributes=0x20) returned 0 [0154.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.381] GetLastError () returned 0x5 [0154.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF", dwFileAttributes=0x20) returned 0 [0154.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0588) returned 1 Thread: id = 1950 os_tid = 0x1a1c [0151.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif")) returned 0x20 [0154.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF", dwFileAttributes=0x20) returned 0 [0154.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.380] GetLastError () returned 0x5 [0154.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF", dwFileAttributes=0x20) returned 0 [0154.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0620) returned 1 Thread: id = 1951 os_tid = 0x1a20 [0151.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif")) returned 0x20 [0154.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF", dwFileAttributes=0x20) returned 0 [0154.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.360] GetLastError () returned 0x5 [0154.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF", dwFileAttributes=0x20) returned 0 [0154.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d06b8) returned 1 Thread: id = 1952 os_tid = 0x1a24 [0151.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif")) returned 0x20 [0154.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF", dwFileAttributes=0x20) returned 0 [0154.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.379] GetLastError () returned 0x5 [0154.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF", dwFileAttributes=0x20) returned 0 [0154.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0750) returned 1 Thread: id = 1953 os_tid = 0x1a28 [0151.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif")) returned 0x20 [0154.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF", dwFileAttributes=0x20) returned 0 [0154.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.377] GetLastError () returned 0x5 [0154.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF", dwFileAttributes=0x20) returned 0 [0154.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d07e8) returned 1 Thread: id = 1954 os_tid = 0x1a2c [0151.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif")) returned 0x20 [0154.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF", dwFileAttributes=0x20) returned 0 [0154.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.376] GetLastError () returned 0x5 [0154.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF", dwFileAttributes=0x20) returned 0 [0154.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0880) returned 1 Thread: id = 1955 os_tid = 0x1a30 [0151.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif")) returned 0x20 [0154.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF", dwFileAttributes=0x20) returned 0 [0154.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.375] GetLastError () returned 0x5 [0154.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF", dwFileAttributes=0x20) returned 0 [0154.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0918) returned 1 Thread: id = 1956 os_tid = 0x1a34 [0151.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif")) returned 0x20 [0154.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF", dwFileAttributes=0x20) returned 0 [0154.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.374] GetLastError () returned 0x5 [0154.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF", dwFileAttributes=0x20) returned 0 [0154.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d09b0) returned 1 Thread: id = 1957 os_tid = 0x1a38 [0151.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif")) returned 0x20 [0154.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF", dwFileAttributes=0x20) returned 0 [0154.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.359] GetLastError () returned 0x5 [0154.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF", dwFileAttributes=0x20) returned 0 [0154.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0a48) returned 1 Thread: id = 1958 os_tid = 0x1a3c [0151.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif")) returned 0x20 [0153.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF", dwFileAttributes=0x20) returned 0 [0153.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.985] GetLastError () returned 0x5 [0153.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF", dwFileAttributes=0x20) returned 0 [0153.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0ae0) returned 1 Thread: id = 1959 os_tid = 0x1a40 [0151.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif")) returned 0x20 [0154.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF", dwFileAttributes=0x20) returned 0 [0154.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.372] GetLastError () returned 0x5 [0154.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF", dwFileAttributes=0x20) returned 0 [0154.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0b78) returned 1 Thread: id = 1960 os_tid = 0x1a44 [0151.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif")) returned 0x20 [0154.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF", dwFileAttributes=0x20) returned 0 [0154.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.371] GetLastError () returned 0x5 [0154.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF", dwFileAttributes=0x20) returned 0 [0154.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0c10) returned 1 Thread: id = 1961 os_tid = 0x1a48 [0151.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif")) returned 0x20 [0154.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF", dwFileAttributes=0x20) returned 0 [0154.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.357] GetLastError () returned 0x5 [0154.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF", dwFileAttributes=0x20) returned 0 [0154.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0ca8) returned 1 Thread: id = 1962 os_tid = 0x1a54 [0151.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst")) returned 0x2020 [0151.300] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst", dwFileAttributes=0x20) returned 1 [0153.723] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd9c [0153.723] GetFileSizeEx (in: hFile=0xd9c, lpFileSize=0x7fbfcc0 | out: lpFileSize=0x7fbfcc0*=52096) returned 1 [0153.723] SetFilePointerEx (in: hFile=0xd9c, liDistanceToMove=0xcb7c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.723] ReadFile (in: hFile=0xd9c, lpBuffer=0x7fbfccc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7fbfca8, lpOverlapped=0x0 | out: lpBuffer=0x7fbfccc*, lpNumberOfBytesRead=0x7fbfca8*=0x4, lpOverlapped=0x0) returned 1 [0153.726] SetFilePointerEx (in: hFile=0xd9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0153.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0153.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1478 [0153.726] NtQuerySystemTime (in: CurrentTime=0x7fbfc48 | out: CurrentTime=0x7fbfc48*=132471540223056000) returned 0x0 [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x647ed41b [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x49e372ef [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x3137c5c1 [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0xf9888f1 [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x4c4d9358 [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x13744142 [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x213975a3 [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x604fe19e [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x4f910d05 [0153.726] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x1f229bb5 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x539fa933 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0xaa89bf0 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x589604da [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x677218c1 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x1f55f58d [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x47526b9b [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x31d95a04 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x1affc8ca [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x4f910d05 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x3d116794 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x86bed [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x61c5d774 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x31c6a4a8 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x4347e479 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x64399a70 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x5ff42f8f [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x6ce9796d [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x10b004cf [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x76d6eaa0 [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x669be21d [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x13a60f8d [0153.727] RtlRandomEx (in: Seed=0x7fbfc40 | out: Seed=0x7fbfc40) returned 0x284202f9 [0153.735] SetFilePointerEx (in: hFile=0xd9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.735] ReadFile (in: hFile=0xd9c, lpBuffer=0x825ec88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7fbfc48, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0x7fbfc48*=0x3c00, lpOverlapped=0x0) returned 1 [0153.737] SetFilePointerEx (in: hFile=0xd9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d048 [0153.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68948 [0153.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0153.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0153.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8262890 [0153.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0153.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1478 [0153.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1478) returned 1 [0153.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0153.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d048) returned 1 [0153.737] WriteFile (in: hFile=0xd9c, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7fbfc48, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0x7fbfc48*=0x3c00, lpOverlapped=0x0) returned 1 [0156.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0156.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0156.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70188 [0156.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0156.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70158 [0156.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0156.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0156.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0156.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0156.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0156.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec940 [0156.957] SetFilePointerEx (in: hFile=0xd9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.957] WriteFile (in: hFile=0xd9c, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7fbfcb4, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x7fbfcb4*=0x10c, lpOverlapped=0x0) returned 1 [0157.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0157.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70158) returned 1 [0157.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0157.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0157.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0157.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0157.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0157.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0157.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2cff0 [0157.004] wcscpy (in: _Dest=0x3e2cff0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" [0157.004] wcscat (in: _Dest=0x3e2cff0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.f0dbec" [0157.004] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.f0dbec", NtPathName=0x7fbfc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0157.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e1cc0 [0157.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1cc0) returned 1 [0157.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ca288) returned 1 [0157.104] NtQueryInformationFile (in: FileHandle=0xd9c, IoStatusBlock=0x7fbfc10, FileInformation=0x7fbfc18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7fbfc10, FileInformation=0x7fbfc18) returned 0x0 [0157.104] NtSetInformationFile (FileHandle=0xd9c, IoStatusBlock=0x7fbfc10, FileInformation=0x7fbfc18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0157.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cff0) returned 1 [0157.106] FlushFileBuffers (hFile=0xd9c) returned 1 [0157.112] CloseHandle (hObject=0xd9c) returned 1 [0157.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e10608 [0157.113] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" [0157.113] wcscat (in: _Dest=0x3e10608, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\F0DBEC-Readme.txt" [0157.113] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\f0dbec-readme.txt")) returned 0xffffffff [0157.113] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd9c [0157.114] WriteFile (in: hFile=0xd9c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7fbfc5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7fbfc5c*=0x70c, lpOverlapped=0x0) returned 1 [0158.833] CloseHandle (hObject=0xd9c) returned 1 [0158.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 [0158.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd00) returned 1 Thread: id = 1963 os_tid = 0x1a58 [0151.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp")) returned 0x20 [0151.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp", dwFileAttributes=0x20) returned 0 [0151.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.302] GetLastError () returned 0x5 [0151.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp", dwFileAttributes=0x20) returned 0 [0151.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 Thread: id = 1964 os_tid = 0x1a5c [0151.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp")) returned 0x20 [0151.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp", dwFileAttributes=0x20) returned 0 [0151.303] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.303] GetLastError () returned 0x5 [0151.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp", dwFileAttributes=0x20) returned 0 [0151.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187568) returned 1 Thread: id = 1965 os_tid = 0x1a60 [0151.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp")) returned 0x20 [0151.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp", dwFileAttributes=0x20) returned 0 [0151.308] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.308] GetLastError () returned 0x5 [0151.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp", dwFileAttributes=0x20) returned 0 [0151.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 Thread: id = 1966 os_tid = 0x1a64 [0151.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dafd88 [0151.309] wcscpy (in: _Dest=0x3dafd88, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0151.309] wcscat (in: _Dest=0x3dafd88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0151.309] wcscat (in: _Dest=0x3dafd88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" [0151.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8102080 [0151.309] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0151.311] wcscmp (_String1=".", _String2=".") returned 0 [0151.311] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.311] wcscmp (_String1="..", _String2=".") returned 1 [0151.311] wcscmp (_String1="..", _String2="..") returned 0 [0151.311] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88d2693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf115ef62, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xe45606ca, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0151.311] wcscmp (_String1="Help_CValidator.H1D", _String2=".") returned 1 [0151.311] wcscmp (_String1="Help_CValidator.H1D", _String2="..") returned 1 [0151.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187568 [0151.311] wcscpy (in: _Dest=0x8187568, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0151.311] wcscat (in: _Dest=0x8187568, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0151.311] wcscat (in: _Dest=0x8187568, _Source="Help_CValidator.H1D" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" [0151.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0151.801] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf774b282, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc098760, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0151.801] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2=".") returned 1 [0151.801] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2="..") returned 1 [0151.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186458 [0151.801] wcscpy (in: _Dest=0x8186458, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0151.801] wcscat (in: _Dest=0x8186458, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0151.801] wcscat (in: _Dest=0x8186458, _Source="Help_MKWD_AssetId.H1W" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" [0151.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0151.802] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf7961352, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc1ef3c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0151.802] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2=".") returned 1 [0151.802] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2="..") returned 1 [0151.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186500 [0151.802] wcscpy (in: _Dest=0x8186500, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0151.802] wcscat (in: _Dest=0x8186500, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0151.802] wcscat (in: _Dest=0x8186500, _Source="Help_MKWD_BestBet.H1W" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" [0151.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0151.804] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x79f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0151.804] wcscmp (_String1="Help_MTOC_help.H1H", _String2=".") returned 1 [0151.804] wcscmp (_String1="Help_MTOC_help.H1H", _String2="..") returned 1 [0151.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e12228 [0151.804] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0151.804] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0151.804] wcscat (in: _Dest=0x3e12228, _Source="Help_MTOC_help.H1H" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" [0151.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0151.806] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8baf9110, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0151.806] wcscmp (_String1="Help_MValidator.H1D", _String2=".") returned 1 [0151.806] wcscmp (_String1="Help_MValidator.H1D", _String2="..") returned 1 [0151.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187370 [0151.806] wcscpy (in: _Dest=0x8187370, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0151.806] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0151.806] wcscat (in: _Dest=0x8187370, _Source="Help_MValidator.H1D" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" [0151.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0151.808] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0151.808] wcscmp (_String1="Help_MValidator.Lck", _String2=".") returned 1 [0151.808] wcscmp (_String1="Help_MValidator.Lck", _String2="..") returned 1 [0151.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81867a0 [0151.808] wcscpy (in: _Dest=0x81867a0, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0151.808] wcscat (in: _Dest=0x81867a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0151.808] wcscat (in: _Dest=0x81867a0, _Source="Help_MValidator.Lck" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" [0151.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81867a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0151.810] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0151.810] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2=".") returned 1 [0151.810] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2="..") returned 1 [0151.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e657a0 [0151.810] wcscpy (in: _Dest=0x3e657a0, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0151.810] wcscat (in: _Dest=0x3e657a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0151.810] wcscat (in: _Dest=0x3e657a0, _Source="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" [0151.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e657a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0151.812] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0151.812] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0151.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8102080) returned 1 [0151.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafd88) returned 1 [0151.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 1967 os_tid = 0x1a68 [0151.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst")) returned 0x21 [0151.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", dwFileAttributes=0x20) returned 0 [0151.312] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.312] GetLastError () returned 0x5 [0151.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", dwFileAttributes=0x21) returned 0 [0151.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35410) returned 1 Thread: id = 1968 os_tid = 0x1a6c [0151.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst")) returned 0x21 [0151.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", dwFileAttributes=0x20) returned 0 [0151.316] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.316] GetLastError () returned 0x5 [0151.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", dwFileAttributes=0x21) returned 0 [0151.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d58a0) returned 1 Thread: id = 1969 os_tid = 0x1a70 [0151.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst")) returned 0x21 [0152.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", dwFileAttributes=0x20) returned 0 [0152.163] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.163] GetLastError () returned 0x5 [0152.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", dwFileAttributes=0x21) returned 0 [0152.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d57d8) returned 1 Thread: id = 1970 os_tid = 0x1a74 [0151.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst")) returned 0x21 [0152.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", dwFileAttributes=0x20) returned 0 [0152.165] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.165] GetLastError () returned 0x5 [0152.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", dwFileAttributes=0x21) returned 0 [0152.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5710) returned 1 Thread: id = 1971 os_tid = 0x1a78 [0151.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst")) returned 0x21 [0152.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", dwFileAttributes=0x20) returned 0 [0152.166] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.166] GetLastError () returned 0x5 [0152.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", dwFileAttributes=0x21) returned 0 [0152.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5648) returned 1 Thread: id = 1972 os_tid = 0x1a7c [0151.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst")) returned 0x21 [0151.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", dwFileAttributes=0x20) returned 0 [0151.653] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.653] GetLastError () returned 0x5 [0151.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", dwFileAttributes=0x21) returned 0 [0151.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5e18) returned 1 Thread: id = 1973 os_tid = 0x1a80 [0151.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini")) returned 0x21 [0151.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", dwFileAttributes=0x20) returned 0 [0151.654] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.655] GetLastError () returned 0x5 [0151.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", dwFileAttributes=0x21) returned 0 [0151.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ee0) returned 1 Thread: id = 1974 os_tid = 0x1a84 [0151.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini")) returned 0x21 [0152.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", dwFileAttributes=0x20) returned 0 [0152.161] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.162] GetLastError () returned 0x5 [0152.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", dwFileAttributes=0x21) returned 0 [0152.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5fa8) returned 1 Thread: id = 1975 os_tid = 0x1a88 [0151.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8020ab0 [0151.325] wcscpy (in: _Dest=0x8020ab0, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0151.325] wcscat (in: _Dest=0x8020ab0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\" [0151.325] wcscat (in: _Dest=0x8020ab0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" [0151.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101478 [0151.325] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0151.325] wcscmp (_String1=".", _String2=".") returned 0 [0151.325] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.325] wcscmp (_String1="..", _String2=".") returned 1 [0151.325] wcscmp (_String1="..", _String2="..") returned 0 [0151.325] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0151.325] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0151.325] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0151.325] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0151.325] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0151.326] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0151.326] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0151.326] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0151.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101478) returned 1 [0151.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020ab0) returned 1 [0151.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf018) returned 1 Thread: id = 1976 os_tid = 0x1a8c [0151.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11fa8 [0151.330] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0151.330] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0151.330] wcscat (in: _Dest=0x3e11fa8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*" [0151.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101478 [0151.330] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0151.331] wcscmp (_String1=".", _String2=".") returned 0 [0151.331] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.331] wcscmp (_String1="..", _String2=".") returned 1 [0151.331] wcscmp (_String1="..", _String2="..") returned 0 [0151.331] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8256cd50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8256cd50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0151.331] wcscmp (_String1="Components", _String2=".") returned 1 [0151.331] wcscmp (_String1="Components", _String2="..") returned 1 [0151.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7098 [0151.331] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0151.331] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0151.331] wcscat (in: _Dest=0x2ff7098, _Source="Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" [0156.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0156.332] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x904e1e90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1 [0156.332] wcscmp (_String1="ManagedObjects", _String2=".") returned 1 [0156.332] wcscmp (_String1="ManagedObjects", _String2="..") returned 1 [0156.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333a68 [0156.332] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0156.332] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0156.333] wcscat (in: _Dest=0x333a68, _Source="ManagedObjects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" [0156.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294c [0156.334] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 1 [0156.334] wcscmp (_String1="Servers", _String2=".") returned 1 [0156.334] wcscmp (_String1="Servers", _String2="..") returned 1 [0156.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81d9a68 [0156.334] wcscpy (in: _Dest=0x81d9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0156.334] wcscat (in: _Dest=0x81d9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0156.334] wcscat (in: _Dest=0x81d9a68, _Source="Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0156.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2950 [0156.336] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 0 [0156.336] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0156.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101478) returned 1 [0156.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 [0156.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c74b8) returned 1 Thread: id = 1977 os_tid = 0x1a90 [0151.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e116e8 [0151.331] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" [0151.331] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\" [0151.332] wcscat (in: _Dest=0x3e116e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*" [0151.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0151.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0151.656] wcscmp (_String1=".", _String2=".") returned 0 [0151.656] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.656] wcscmp (_String1="..", _String2=".") returned 1 [0151.657] wcscmp (_String1="..", _String2="..") returned 0 [0151.657] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0151.657] wcscmp (_String1="Components", _String2=".") returned 1 [0151.657] wcscmp (_String1="Components", _String2="..") returned 1 [0151.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bf58 [0151.657] wcscpy (in: _Dest=0x35bf58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" [0151.657] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\" [0151.657] wcscat (in: _Dest=0x35bf58, _Source="Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0152.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35bf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0152.393] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0 [0152.393] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cff0) returned 1 Thread: id = 1978 os_tid = 0x1a94 [0151.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3daf888 [0151.332] wcscpy (in: _Dest=0x3daf888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0151.332] wcscat (in: _Dest=0x3daf888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\" [0151.332] wcscat (in: _Dest=0x3daf888, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*" [0151.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100ad8 [0151.333] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099250 [0154.406] wcscmp (_String1=".", _String2=".") returned 0 [0154.406] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.406] wcscmp (_String1="..", _String2=".") returned 1 [0154.406] wcscmp (_String1="..", _String2="..") returned 0 [0154.406] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.406] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.406] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cc60 [0154.406] wcscpy (in: _Dest=0x3e3cc60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0154.406] wcscat (in: _Dest=0x3e3cc60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\" [0154.406] wcscat (in: _Dest=0x3e3cc60, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" [0156.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0156.499] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.499] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.499] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d2040 [0156.500] wcscpy (in: _Dest=0x81d2040, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0156.500] wcscat (in: _Dest=0x81d2040, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\" [0156.500] wcscat (in: _Dest=0x81d2040, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" [0156.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a28 [0156.501] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.501] FindClose (in: hFindFile=0x8099250 | out: hFindFile=0x8099250) returned 1 [0156.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100ad8) returned 1 [0156.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf888) returned 1 [0156.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5908) returned 1 Thread: id = 1979 os_tid = 0x1a98 [0151.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0f88 [0151.333] wcscpy (in: _Dest=0x3db0f88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0151.333] wcscat (in: _Dest=0x3db0f88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\" [0151.333] wcscat (in: _Dest=0x3db0f88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*" [0151.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100fa8 [0151.334] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb65ec0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0154.405] wcscmp (_String1=".", _String2=".") returned 0 [0154.405] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb65ec0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.405] wcscmp (_String1="..", _String2=".") returned 1 [0154.405] wcscmp (_String1="..", _String2="..") returned 0 [0154.405] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.405] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.405] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cbc8 [0154.406] wcscpy (in: _Dest=0x3e3cbc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0154.406] wcscat (in: _Dest=0x3e3cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\" [0154.406] wcscat (in: _Dest=0x3e3cbc8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" [0163.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0163.045] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0163.045] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0163.045] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0163.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d10d0 [0163.045] wcscpy (in: _Dest=0x81d10d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0163.045] wcscat (in: _Dest=0x81d10d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\" [0163.045] wcscat (in: _Dest=0x81d10d0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" [0163.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d10d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c4 [0163.046] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0163.046] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0163.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100fa8) returned 1 [0163.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0f88) returned 1 [0163.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5b88) returned 1 Thread: id = 1980 os_tid = 0x1a9c [0151.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0008 [0151.334] wcscpy (in: _Dest=0x3db0008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0151.334] wcscat (in: _Dest=0x3db0008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\" [0151.334] wcscat (in: _Dest=0x3db0008, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*" [0151.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0151.335] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb3fd60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80993d0 [0154.404] wcscmp (_String1=".", _String2=".") returned 0 [0154.404] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb3fd60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.405] wcscmp (_String1="..", _String2=".") returned 1 [0154.405] wcscmp (_String1="..", _String2="..") returned 0 [0154.405] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x561b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.405] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.405] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c968 [0154.405] wcscpy (in: _Dest=0x3e3c968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0154.405] wcscat (in: _Dest=0x3e3c968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\" [0154.405] wcscat (in: _Dest=0x3e3c968, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" [0156.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0156.495] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.495] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.495] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d20d8 [0156.495] wcscpy (in: _Dest=0x81d20d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0156.495] wcscat (in: _Dest=0x81d20d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\" [0156.495] wcscat (in: _Dest=0x81d20d8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" [0156.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d20d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a24 [0156.496] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.497] FindClose (in: hFindFile=0x80993d0 | out: hFindFile=0x80993d0) returned 1 [0156.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0156.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0008) returned 1 [0156.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4d08) returned 1 Thread: id = 1981 os_tid = 0x1aa0 [0151.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3daf208 [0151.335] wcscpy (in: _Dest=0x3daf208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0151.335] wcscat (in: _Dest=0x3daf208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\" [0151.335] wcscat (in: _Dest=0x3daf208, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*" [0151.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0151.335] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099590 [0154.407] wcscmp (_String1=".", _String2=".") returned 0 [0154.407] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.407] wcscmp (_String1="..", _String2=".") returned 1 [0154.407] wcscmp (_String1="..", _String2="..") returned 0 [0154.407] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16057, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.407] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.407] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cd90 [0154.407] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0154.407] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\" [0154.407] wcscat (in: _Dest=0x3e3cd90, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" [0158.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0158.035] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0158.035] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0158.035] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0158.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1330 [0158.035] wcscpy (in: _Dest=0x81d1330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0158.035] wcscat (in: _Dest=0x81d1330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\" [0158.035] wcscat (in: _Dest=0x81d1330, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" [0158.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc4 [0158.036] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0158.036] FindClose (in: hFindFile=0x8099590 | out: hFindFile=0x8099590) returned 1 [0158.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0158.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf208) returned 1 [0158.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5988) returned 1 Thread: id = 1982 os_tid = 0x1aa4 [0151.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dafa08 [0151.336] wcscpy (in: _Dest=0x3dafa08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0151.336] wcscat (in: _Dest=0x3dafa08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\" [0151.336] wcscat (in: _Dest=0x3dafa08, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*" [0151.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0151.336] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb19c00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb19c00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80990d0 [0154.407] wcscmp (_String1=".", _String2=".") returned 0 [0154.407] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb19c00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb19c00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.407] wcscmp (_String1="..", _String2=".") returned 1 [0154.408] wcscmp (_String1="..", _String2="..") returned 0 [0154.408] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x106ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.408] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.408] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c8d0 [0154.408] wcscpy (in: _Dest=0x3e3c8d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0154.408] wcscat (in: _Dest=0x3e3c8d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\" [0154.408] wcscat (in: _Dest=0x3e3c8d0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" [0156.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0156.504] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.504] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.504] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1fa8 [0156.504] wcscpy (in: _Dest=0x81d1fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0156.504] wcscat (in: _Dest=0x81d1fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\" [0156.504] wcscat (in: _Dest=0x81d1fa8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" [0156.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a2c [0156.506] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.506] FindClose (in: hFindFile=0x80990d0 | out: hFindFile=0x80990d0) returned 1 [0156.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0156.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafa08) returned 1 [0156.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5808) returned 1 Thread: id = 1983 os_tid = 0x1aa8 [0151.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3db0108 [0151.336] wcscpy (in: _Dest=0x3db0108, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0151.336] wcscat (in: _Dest=0x3db0108, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\" [0151.336] wcscat (in: _Dest=0x3db0108, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*" [0151.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b548 [0151.336] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099310 [0154.408] wcscmp (_String1=".", _String2=".") returned 0 [0154.408] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.408] wcscmp (_String1="..", _String2=".") returned 1 [0154.408] wcscmp (_String1="..", _String2="..") returned 0 [0154.408] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x106d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.408] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.408] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c410 [0154.408] wcscpy (in: _Dest=0x3e3c410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0154.409] wcscat (in: _Dest=0x3e3c410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\" [0154.409] wcscat (in: _Dest=0x3e3c410, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" [0159.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0159.248] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0159.248] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0159.248] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0159.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1ae8 [0159.248] wcscpy (in: _Dest=0x81d1ae8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0159.248] wcscat (in: _Dest=0x81d1ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\" [0159.249] wcscat (in: _Dest=0x81d1ae8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" [0159.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34 [0159.250] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0159.250] FindClose (in: hFindFile=0x8099310 | out: hFindFile=0x8099310) returned 1 [0159.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b548) returned 1 [0159.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0108) returned 1 [0159.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e08) returned 1 Thread: id = 1984 os_tid = 0x1aac [0151.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3daf988 [0151.337] wcscpy (in: _Dest=0x3daf988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0151.337] wcscat (in: _Dest=0x3daf988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\" [0151.337] wcscat (in: _Dest=0x3daf988, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*" [0151.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bee8 [0151.337] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80996d0 [0154.401] wcscmp (_String1=".", _String2=".") returned 0 [0154.401] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.402] wcscmp (_String1="..", _String2=".") returned 1 [0154.402] wcscmp (_String1="..", _String2="..") returned 0 [0154.402] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.402] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.402] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c708 [0154.402] wcscpy (in: _Dest=0x3e3c708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0154.402] wcscat (in: _Dest=0x3e3c708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\" [0154.402] wcscat (in: _Dest=0x3e3c708, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" [0166.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a14 [0166.039] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0166.039] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0166.039] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0166.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1e78 [0166.039] wcscpy (in: _Dest=0x81d1e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0166.039] wcscat (in: _Dest=0x81d1e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\" [0166.039] wcscat (in: _Dest=0x81d1e78, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" [0166.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e8 [0166.040] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0166.040] FindClose (in: hFindFile=0x80996d0 | out: hFindFile=0x80996d0) returned 1 [0166.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bee8) returned 1 [0166.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf988) returned 1 [0166.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 Thread: id = 1985 os_tid = 0x1ab0 [0151.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3daf608 [0151.337] wcscpy (in: _Dest=0x3daf608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0151.338] wcscat (in: _Dest=0x3daf608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\" [0151.338] wcscat (in: _Dest=0x3daf608, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*" [0151.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d490 [0151.338] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099110 [0154.409] wcscmp (_String1=".", _String2=".") returned 0 [0154.409] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.409] wcscmp (_String1="..", _String2=".") returned 1 [0154.409] wcscmp (_String1="..", _String2="..") returned 0 [0154.409] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x109db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.409] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.409] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cec0 [0154.409] wcscpy (in: _Dest=0x3e3cec0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0154.410] wcscat (in: _Dest=0x3e3cec0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\" [0154.410] wcscat (in: _Dest=0x3e3cec0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" [0156.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0156.508] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.508] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.508] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1f10 [0156.509] wcscpy (in: _Dest=0x81d1f10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0156.509] wcscat (in: _Dest=0x81d1f10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\" [0156.509] wcscat (in: _Dest=0x81d1f10, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" [0156.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a30 [0156.510] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.510] FindClose (in: hFindFile=0x8099110 | out: hFindFile=0x8099110) returned 1 [0156.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d490) returned 1 [0156.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf608) returned 1 [0156.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3f88) returned 1 Thread: id = 1986 os_tid = 0x1ab4 [0151.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b758 [0151.338] wcscpy (in: _Dest=0x831b758, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" [0151.338] wcscat (in: _Dest=0x831b758, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\" [0151.338] wcscat (in: _Dest=0x831b758, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*" [0151.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0151.338] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0153.986] wcscmp (_String1=".", _String2=".") returned 0 [0153.986] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.986] wcscmp (_String1="..", _String2=".") returned 1 [0153.986] wcscmp (_String1="..", _String2="..") returned 0 [0153.986] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.986] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0153.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0153.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b758) returned 1 [0153.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5508) returned 1 Thread: id = 1987 os_tid = 0x1ab8 [0151.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b7d8 [0151.339] wcscpy (in: _Dest=0x831b7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0151.339] wcscat (in: _Dest=0x831b7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\" [0151.339] wcscat (in: _Dest=0x831b7d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*" [0151.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3aba8 [0151.339] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0154.410] wcscmp (_String1=".", _String2=".") returned 0 [0154.410] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.410] wcscmp (_String1="..", _String2=".") returned 1 [0154.410] wcscmp (_String1="..", _String2="..") returned 0 [0154.410] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.410] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.410] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0154.410] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0154.410] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\" [0154.410] wcscat (in: _Dest=0x3e3cf58, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" [0158.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3cf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a0 [0158.037] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0158.037] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0158.037] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0158.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1b80 [0158.038] wcscpy (in: _Dest=0x81d1b80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0158.038] wcscat (in: _Dest=0x81d1b80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\" [0158.038] wcscat (in: _Dest=0x81d1b80, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" [0158.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc8 [0158.039] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0158.039] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0158.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3aba8) returned 1 [0158.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b7d8) returned 1 [0158.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5c08) returned 1 Thread: id = 1988 os_tid = 0x1abc [0151.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b858 [0151.339] wcscpy (in: _Dest=0x831b858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0151.339] wcscat (in: _Dest=0x831b858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\" [0151.339] wcscat (in: _Dest=0x831b858, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*" [0151.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b2e0 [0151.339] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0154.411] wcscmp (_String1=".", _String2=".") returned 0 [0154.411] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.411] wcscmp (_String1="..", _String2=".") returned 1 [0154.411] wcscmp (_String1="..", _String2="..") returned 0 [0154.411] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.411] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.411] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3ccf8 [0154.411] wcscpy (in: _Dest=0x3e3ccf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0154.411] wcscat (in: _Dest=0x3e3ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\" [0154.411] wcscat (in: _Dest=0x3e3ccf8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" [0156.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ac [0156.513] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.513] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.513] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1e78 [0156.513] wcscpy (in: _Dest=0x81d1e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0156.513] wcscat (in: _Dest=0x81d1e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\" [0156.513] wcscat (in: _Dest=0x81d1e78, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" [0156.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a34 [0156.515] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.515] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0156.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b2e0) returned 1 [0156.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b858) returned 1 [0156.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5a08) returned 1 Thread: id = 1989 os_tid = 0x1ac0 [0151.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b8d8 [0151.340] wcscpy (in: _Dest=0x831b8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0151.340] wcscat (in: _Dest=0x831b8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\" [0151.340] wcscat (in: _Dest=0x831b8d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*" [0151.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0151.340] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0154.411] wcscmp (_String1=".", _String2=".") returned 0 [0154.411] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.411] wcscmp (_String1="..", _String2=".") returned 1 [0154.411] wcscmp (_String1="..", _String2="..") returned 0 [0154.411] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.412] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.412] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3dc68 [0154.412] wcscpy (in: _Dest=0x3e3dc68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0154.412] wcscat (in: _Dest=0x3e3dc68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\" [0154.412] wcscat (in: _Dest=0x3e3dc68, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" [0162.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac [0162.410] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0162.410] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0162.411] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0162.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d10d0 [0162.411] wcscpy (in: _Dest=0x81d10d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0162.411] wcscat (in: _Dest=0x81d10d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\" [0162.411] wcscat (in: _Dest=0x81d10d0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" [0162.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d10d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d2c [0162.412] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0162.413] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0162.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0162.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b8d8) returned 1 [0162.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4688) returned 1 Thread: id = 1990 os_tid = 0x1ac4 [0151.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b958 [0151.347] wcscpy (in: _Dest=0x831b958, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0151.347] wcscat (in: _Dest=0x831b958, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\" [0151.347] wcscat (in: _Dest=0x831b958, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*" [0151.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ae10 [0151.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38318 [0154.412] wcscmp (_String1=".", _String2=".") returned 0 [0154.412] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.412] wcscmp (_String1="..", _String2=".") returned 1 [0154.412] wcscmp (_String1="..", _String2="..") returned 0 [0154.412] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10913, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.412] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.412] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3dd98 [0154.413] wcscpy (in: _Dest=0x3e3dd98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0154.413] wcscat (in: _Dest=0x3e3dd98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\" [0154.413] wcscat (in: _Dest=0x3e3dd98, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" [0156.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b4 [0156.517] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.517] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.518] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1de0 [0156.518] wcscpy (in: _Dest=0x81d1de0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0156.518] wcscat (in: _Dest=0x81d1de0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\" [0156.518] wcscat (in: _Dest=0x81d1de0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" [0156.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a38 [0156.519] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.519] FindClose (in: hFindFile=0x3f38318 | out: hFindFile=0x3f38318) returned 1 [0156.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ae10) returned 1 [0156.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b958) returned 1 [0156.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5888) returned 1 Thread: id = 1991 os_tid = 0x1ac8 [0151.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b9d8 [0151.348] wcscpy (in: _Dest=0x831b9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0151.348] wcscat (in: _Dest=0x831b9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\" [0151.348] wcscat (in: _Dest=0x831b9d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*" [0151.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b7b0 [0151.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a98 [0154.413] wcscmp (_String1=".", _String2=".") returned 0 [0154.413] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.413] wcscmp (_String1="..", _String2=".") returned 1 [0154.413] wcscmp (_String1="..", _String2="..") returned 0 [0154.413] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5944, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.413] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.413] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3de30 [0154.413] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0154.413] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\" [0154.413] wcscat (in: _Dest=0x3e3de30, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" [0158.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3de30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b0 [0158.040] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0158.040] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0158.040] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0158.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1de0 [0158.040] wcscpy (in: _Dest=0x81d1de0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0158.040] wcscat (in: _Dest=0x81d1de0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\" [0158.040] wcscat (in: _Dest=0x81d1de0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" [0158.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0158.041] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0158.041] FindClose (in: hFindFile=0x3f37a98 | out: hFindFile=0x3f37a98) returned 1 [0158.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b7b0) returned 1 [0158.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b9d8) returned 1 [0158.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5688) returned 1 Thread: id = 1992 os_tid = 0x1acc [0151.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831ba58 [0151.349] wcscpy (in: _Dest=0x831ba58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0151.349] wcscat (in: _Dest=0x831ba58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\" [0151.349] wcscat (in: _Dest=0x831ba58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*" [0151.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0151.349] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b58 [0154.414] wcscmp (_String1=".", _String2=".") returned 0 [0154.414] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.414] wcscmp (_String1="..", _String2=".") returned 1 [0154.414] wcscmp (_String1="..", _String2="..") returned 0 [0154.414] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x592a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.414] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.414] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c118 [0154.414] wcscpy (in: _Dest=0x3e3c118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0154.414] wcscat (in: _Dest=0x3e3c118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\" [0154.414] wcscat (in: _Dest=0x3e3c118, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" [0156.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24bc [0156.522] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.522] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.522] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1d48 [0156.522] wcscpy (in: _Dest=0x81d1d48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0156.522] wcscat (in: _Dest=0x81d1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\" [0156.522] wcscat (in: _Dest=0x81d1d48, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" [0156.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a3c [0156.523] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.523] FindClose (in: hFindFile=0x3f37b58 | out: hFindFile=0x3f37b58) returned 1 [0156.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0156.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831ba58) returned 1 [0156.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e88) returned 1 Thread: id = 1993 os_tid = 0x1ad0 [0151.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bad8 [0151.349] wcscpy (in: _Dest=0x831bad8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0151.349] wcscat (in: _Dest=0x831bad8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\" [0151.349] wcscat (in: _Dest=0x831bad8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*" [0151.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0151.350] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0154.414] wcscmp (_String1=".", _String2=".") returned 0 [0154.415] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.415] wcscmp (_String1="..", _String2=".") returned 1 [0154.415] wcscmp (_String1="..", _String2="..") returned 0 [0154.415] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.415] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.415] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d250 [0154.415] wcscpy (in: _Dest=0x3e3d250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0154.415] wcscat (in: _Dest=0x3e3d250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\" [0154.415] wcscat (in: _Dest=0x3e3d250, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" [0155.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c0 [0155.086] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0155.086] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0155.086] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0155.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d1b8 [0155.086] wcscpy (in: _Dest=0x3e3d1b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0155.086] wcscat (in: _Dest=0x3e3d1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\" [0155.086] wcscat (in: _Dest=0x3e3d1b8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" [0155.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c4 [0155.088] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0155.088] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0155.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bad8) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4088) returned 1 Thread: id = 1994 os_tid = 0x1ad4 [0151.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bb58 [0151.353] wcscpy (in: _Dest=0x831bb58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0151.353] wcscat (in: _Dest=0x831bb58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\" [0151.353] wcscat (in: _Dest=0x831bb58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*" [0151.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ba18 [0151.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38358 [0154.415] wcscmp (_String1=".", _String2=".") returned 0 [0154.415] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.415] wcscmp (_String1="..", _String2=".") returned 1 [0154.416] wcscmp (_String1="..", _String2="..") returned 0 [0154.416] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.416] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.416] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d2e8 [0154.416] wcscpy (in: _Dest=0x3e3d2e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0154.416] wcscat (in: _Dest=0x3e3d2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\" [0154.416] wcscat (in: _Dest=0x3e3d2e8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" [0165.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b8 [0165.965] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0165.965] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0165.965] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0165.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1330 [0165.966] wcscpy (in: _Dest=0x81d1330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0165.966] wcscat (in: _Dest=0x81d1330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\" [0165.966] wcscat (in: _Dest=0x81d1330, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" [0165.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2798 [0165.967] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0165.967] FindClose (in: hFindFile=0x3f38358 | out: hFindFile=0x3f38358) returned 1 [0165.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ba18) returned 1 [0165.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bb58) returned 1 [0165.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831acd8) returned 1 Thread: id = 1995 os_tid = 0x1ad8 [0151.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bbd8 [0151.354] wcscpy (in: _Dest=0x831bbd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0151.354] wcscat (in: _Dest=0x831bbd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\" [0151.354] wcscat (in: _Dest=0x831bbd8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*" [0151.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0151.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0154.416] wcscmp (_String1=".", _String2=".") returned 0 [0154.416] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.416] wcscmp (_String1="..", _String2=".") returned 1 [0154.416] wcscmp (_String1="..", _String2="..") returned 0 [0154.416] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.417] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.417] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d380 [0154.417] wcscpy (in: _Dest=0x3e3d380, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0154.417] wcscat (in: _Dest=0x3e3d380, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\" [0154.417] wcscat (in: _Dest=0x3e3d380, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" [0155.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c8 [0155.091] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0155.091] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0155.091] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0155.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d120 [0155.091] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0155.091] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\" [0155.091] wcscat (in: _Dest=0x3e3d120, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" [0155.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c8 [0155.092] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0155.092] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bbd8) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b358) returned 1 Thread: id = 1996 os_tid = 0x1adc [0151.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bc58 [0151.355] wcscpy (in: _Dest=0x831bc58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0151.355] wcscat (in: _Dest=0x831bc58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\" [0151.355] wcscat (in: _Dest=0x831bc58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*" [0151.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0151.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0154.417] wcscmp (_String1=".", _String2=".") returned 0 [0154.417] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.417] wcscmp (_String1="..", _String2=".") returned 1 [0154.417] wcscmp (_String1="..", _String2="..") returned 0 [0154.417] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.417] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.417] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d418 [0154.418] wcscpy (in: _Dest=0x3e3d418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0154.418] wcscat (in: _Dest=0x3e3d418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\" [0154.418] wcscat (in: _Dest=0x3e3d418, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" [0163.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e4 [0163.147] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0163.147] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0163.147] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0163.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1168 [0163.147] wcscpy (in: _Dest=0x81d1168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0163.147] wcscat (in: _Dest=0x81d1168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\" [0163.147] wcscat (in: _Dest=0x81d1168, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" [0163.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0163.148] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0163.149] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0163.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0163.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bc58) returned 1 [0163.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b3d8) returned 1 Thread: id = 1997 os_tid = 0x1ae0 [0151.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bcd8 [0151.355] wcscpy (in: _Dest=0x831bcd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0151.355] wcscat (in: _Dest=0x831bcd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\" [0151.356] wcscat (in: _Dest=0x831bcd8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*" [0151.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0151.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0154.418] wcscmp (_String1=".", _String2=".") returned 0 [0154.418] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.418] wcscmp (_String1="..", _String2=".") returned 1 [0154.418] wcscmp (_String1="..", _String2="..") returned 0 [0154.418] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.418] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.418] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d4b0 [0154.418] wcscpy (in: _Dest=0x3e3d4b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0154.418] wcscat (in: _Dest=0x3e3d4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\" [0154.418] wcscat (in: _Dest=0x3e3d4b0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" [0155.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d0 [0155.095] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0155.095] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0155.095] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0155.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3c7a0 [0155.095] wcscpy (in: _Dest=0x3e3c7a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0155.095] wcscat (in: _Dest=0x3e3c7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\" [0155.095] wcscat (in: _Dest=0x3e3c7a0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" [0155.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26cc [0155.096] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0155.096] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bcd8) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b458) returned 1 Thread: id = 1998 os_tid = 0x1ae4 [0151.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bd58 [0151.356] wcscpy (in: _Dest=0x831bd58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0151.356] wcscat (in: _Dest=0x831bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\" [0151.356] wcscat (in: _Dest=0x831bd58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*" [0151.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0151.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38058 [0154.419] wcscmp (_String1=".", _String2=".") returned 0 [0154.419] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.419] wcscmp (_String1="..", _String2=".") returned 1 [0154.419] wcscmp (_String1="..", _String2="..") returned 0 [0154.419] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.419] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.419] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d548 [0154.419] wcscpy (in: _Dest=0x3e3d548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0154.419] wcscat (in: _Dest=0x3e3d548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\" [0154.419] wcscat (in: _Dest=0x3e3d548, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" [0164.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d8 [0164.629] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0164.629] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0164.629] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0164.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d2208 [0164.629] wcscpy (in: _Dest=0x81d2208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0164.629] wcscat (in: _Dest=0x81d2208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\" [0164.629] wcscat (in: _Dest=0x81d2208, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" [0164.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2840 [0164.630] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0164.630] FindClose (in: hFindFile=0x3f38058 | out: hFindFile=0x3f38058) returned 1 [0164.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0164.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bd58) returned 1 [0164.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b4d8) returned 1 Thread: id = 1999 os_tid = 0x1ae8 [0151.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bdd8 [0151.357] wcscpy (in: _Dest=0x831bdd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0151.357] wcscat (in: _Dest=0x831bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\" [0151.357] wcscat (in: _Dest=0x831bdd8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*" [0151.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0151.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ad8 [0154.420] wcscmp (_String1=".", _String2=".") returned 0 [0154.420] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.420] wcscmp (_String1="..", _String2=".") returned 1 [0154.420] wcscmp (_String1="..", _String2="..") returned 0 [0154.420] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.420] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.420] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d5e0 [0154.420] wcscpy (in: _Dest=0x3e3d5e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0154.420] wcscat (in: _Dest=0x3e3d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\" [0154.421] wcscat (in: _Dest=0x3e3d5e0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" [0155.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d8 [0155.099] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0155.099] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0155.099] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0155.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3d710 [0155.099] wcscpy (in: _Dest=0x3e3d710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0155.099] wcscat (in: _Dest=0x3e3d710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\" [0155.099] wcscat (in: _Dest=0x3e3d710, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" [0155.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26d0 [0155.101] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0155.101] FindClose (in: hFindFile=0x3f37ad8 | out: hFindFile=0x3f37ad8) returned 1 [0155.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0155.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bdd8) returned 1 [0155.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b558) returned 1 Thread: id = 2000 os_tid = 0x1aec [0151.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831be58 [0151.357] wcscpy (in: _Dest=0x831be58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0151.358] wcscat (in: _Dest=0x831be58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\" [0151.358] wcscat (in: _Dest=0x831be58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*" [0151.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0151.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38158 [0154.421] wcscmp (_String1=".", _String2=".") returned 0 [0154.421] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.421] wcscmp (_String1="..", _String2=".") returned 1 [0154.421] wcscmp (_String1="..", _String2="..") returned 0 [0154.421] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.421] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.421] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d678 [0154.421] wcscpy (in: _Dest=0x3e3d678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0154.421] wcscat (in: _Dest=0x3e3d678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\" [0154.421] wcscat (in: _Dest=0x3e3d678, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" [0156.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0156.276] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.276] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.276] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32bce0 [0156.277] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0156.277] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\" [0156.277] wcscat (in: _Dest=0x32bce0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" [0156.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x290c [0156.278] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.278] FindClose (in: hFindFile=0x3f38158 | out: hFindFile=0x3f38158) returned 1 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831be58) returned 1 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b5d8) returned 1 Thread: id = 2001 os_tid = 0x1af0 [0151.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bed8 [0151.358] wcscpy (in: _Dest=0x831bed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0151.358] wcscat (in: _Dest=0x831bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\" [0151.358] wcscat (in: _Dest=0x831bed8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*" [0151.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0151.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099710 [0154.402] wcscmp (_String1=".", _String2=".") returned 0 [0154.402] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.402] wcscmp (_String1="..", _String2=".") returned 1 [0154.402] wcscmp (_String1="..", _String2="..") returned 0 [0154.402] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.402] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.402] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c5d8 [0154.402] wcscpy (in: _Dest=0x3e3c5d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0154.402] wcscat (in: _Dest=0x3e3c5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\" [0154.402] wcscat (in: _Dest=0x3e3c5d8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" [0156.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0156.490] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.490] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.490] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d2170 [0156.490] wcscpy (in: _Dest=0x81d2170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0156.491] wcscat (in: _Dest=0x81d2170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\" [0156.491] wcscat (in: _Dest=0x81d2170, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" [0156.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a20 [0156.492] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.492] FindClose (in: hFindFile=0x8099710 | out: hFindFile=0x8099710) returned 1 [0156.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0156.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bed8) returned 1 [0156.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b658) returned 1 Thread: id = 2002 os_tid = 0x1af4 [0151.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e243c0 [0151.658] wcscpy (in: _Dest=0x3e243c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0151.658] wcscat (in: _Dest=0x3e243c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\" [0151.658] wcscat (in: _Dest=0x3e243c0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*" [0151.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0151.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce85ba0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0154.403] wcscmp (_String1=".", _String2=".") returned 0 [0154.403] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce85ba0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.403] wcscmp (_String1="..", _String2=".") returned 1 [0154.403] wcscmp (_String1="..", _String2="..") returned 0 [0154.403] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.403] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.403] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c2e0 [0154.403] wcscpy (in: _Dest=0x3e3c2e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0154.403] wcscat (in: _Dest=0x3e3c2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\" [0154.403] wcscat (in: _Dest=0x3e3c2e0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" [0161.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a8 [0161.250] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0161.250] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0161.250] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0161.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1038 [0161.250] wcscpy (in: _Dest=0x81d1038, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0161.250] wcscat (in: _Dest=0x81d1038, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\" [0161.250] wcscat (in: _Dest=0x81d1038, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" [0161.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0161.252] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0161.252] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0161.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0161.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e243c0) returned 1 [0161.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b6d8) returned 1 Thread: id = 2003 os_tid = 0x1b04 [0151.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf")) returned 0x20 [0151.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF", dwFileAttributes=0x20) returned 0 [0151.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.659] GetLastError () returned 0x5 [0151.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF", dwFileAttributes=0x20) returned 0 [0151.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f312e8) returned 1 Thread: id = 2004 os_tid = 0x1b08 [0151.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf")) returned 0x20 [0151.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF", dwFileAttributes=0x20) returned 0 [0151.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.661] GetLastError () returned 0x5 [0151.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF", dwFileAttributes=0x20) returned 0 [0151.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 2005 os_tid = 0x1b0c [0151.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf")) returned 0x20 [0151.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF", dwFileAttributes=0x20) returned 0 [0151.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.669] GetLastError () returned 0x5 [0151.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF", dwFileAttributes=0x20) returned 0 [0151.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 2006 os_tid = 0x1b10 [0151.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf")) returned 0x20 [0151.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF", dwFileAttributes=0x20) returned 0 [0151.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.672] GetLastError () returned 0x5 [0151.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF", dwFileAttributes=0x20) returned 0 [0151.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 2007 os_tid = 0x1b14 [0151.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf")) returned 0x20 [0151.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF", dwFileAttributes=0x20) returned 0 [0151.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.681] GetLastError () returned 0x5 [0151.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF", dwFileAttributes=0x20) returned 0 [0151.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 2008 os_tid = 0x1b18 [0151.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf")) returned 0x20 [0151.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF", dwFileAttributes=0x20) returned 0 [0151.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.688] GetLastError () returned 0x5 [0151.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF", dwFileAttributes=0x20) returned 0 [0151.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 2009 os_tid = 0x1b1c [0151.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf")) returned 0x20 [0151.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF", dwFileAttributes=0x20) returned 0 [0151.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.690] GetLastError () returned 0x5 [0151.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF", dwFileAttributes=0x20) returned 0 [0151.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 2010 os_tid = 0x1b20 [0151.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf")) returned 0x20 [0158.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF", dwFileAttributes=0x20) returned 0 [0161.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.602] GetLastError () returned 0x5 [0161.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF", dwFileAttributes=0x20) returned 0 [0161.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc10) returned 1 Thread: id = 2011 os_tid = 0x1b24 [0151.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf")) returned 0x20 [0158.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF", dwFileAttributes=0x20) returned 0 [0161.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.601] GetLastError () returned 0x5 [0161.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF", dwFileAttributes=0x20) returned 0 [0161.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f307c0) returned 1 Thread: id = 2012 os_tid = 0x1b28 [0151.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf")) returned 0x20 [0158.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF", dwFileAttributes=0x20) returned 0 [0161.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.601] GetLastError () returned 0x5 [0161.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF", dwFileAttributes=0x20) returned 0 [0161.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 2013 os_tid = 0x1b2c [0151.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf")) returned 0x20 [0158.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF", dwFileAttributes=0x20) returned 0 [0161.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.601] GetLastError () returned 0x5 [0161.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF", dwFileAttributes=0x20) returned 0 [0162.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 2014 os_tid = 0x1b30 [0151.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf")) returned 0x20 [0154.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF", dwFileAttributes=0x20) returned 0 [0156.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.597] GetLastError () returned 0x5 [0161.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF", dwFileAttributes=0x20) returned 0 [0161.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 2015 os_tid = 0x1b34 [0151.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f31040 [0151.696] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0151.696] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\" [0151.697] wcscat (in: _Dest=0x3f31040, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*" [0151.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0151.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0151.697] wcscmp (_String1=".", _String2=".") returned 0 [0151.697] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.697] wcscmp (_String1="..", _String2=".") returned 1 [0151.697] wcscmp (_String1="..", _String2="..") returned 0 [0151.697] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5540ee90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55434ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook Templates", cAlternateFileName="NOTEBO~1")) returned 1 [0151.697] wcscmp (_String1="Notebook Templates", _String2=".") returned 1 [0151.697] wcscmp (_String1="Notebook Templates", _String2="..") returned 1 [0151.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81878b0 [0151.698] wcscpy (in: _Dest=0x81878b0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0151.698] wcscat (in: _Dest=0x81878b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\" [0151.698] wcscat (in: _Dest=0x81878b0, _Source="Notebook Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" [0152.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81878b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0152.396] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0152.396] wcscmp (_String1="Stationery", _String2=".") returned 1 [0152.396] wcscmp (_String1="Stationery", _String2="..") returned 1 [0152.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cff0 [0152.396] wcscpy (in: _Dest=0x3e3cff0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0152.396] wcscat (in: _Dest=0x3e3cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\" [0152.396] wcscat (in: _Dest=0x3e3cff0, _Source="Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0152.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e3cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x201c [0152.397] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0 [0152.398] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0152.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0152.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 [0152.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 2016 os_tid = 0x1b38 [0151.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf")) returned 0x20 [0162.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF", dwFileAttributes=0x20) returned 0 [0162.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.529] GetLastError () returned 0x5 [0162.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF", dwFileAttributes=0x20) returned 0 [0162.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 2017 os_tid = 0x1b3c [0151.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf")) returned 0x20 [0162.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF", dwFileAttributes=0x20) returned 0 [0162.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.532] GetLastError () returned 0x5 [0162.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF", dwFileAttributes=0x20) returned 0 [0162.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f301e8) returned 1 Thread: id = 2018 os_tid = 0x1b40 [0151.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf")) returned 0x20 [0162.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF", dwFileAttributes=0x20) returned 0 [0162.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.533] GetLastError () returned 0x5 [0162.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF", dwFileAttributes=0x20) returned 0 [0162.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30160) returned 1 Thread: id = 2019 os_tid = 0x1b44 [0151.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf")) returned 0x20 [0158.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF", dwFileAttributes=0x20) returned 0 [0161.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.524] GetLastError () returned 0x5 [0162.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF", dwFileAttributes=0x20) returned 0 [0162.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 2020 os_tid = 0x1b48 [0151.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf")) returned 0x20 [0158.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF", dwFileAttributes=0x20) returned 0 [0161.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.519] GetLastError () returned 0x5 [0162.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF", dwFileAttributes=0x20) returned 0 [0162.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30050) returned 1 Thread: id = 2021 os_tid = 0x1b4c [0151.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf")) returned 0x20 [0162.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF", dwFileAttributes=0x20) returned 0 [0162.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.625] GetLastError () returned 0x5 [0162.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF", dwFileAttributes=0x20) returned 0 [0162.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 Thread: id = 2022 os_tid = 0x1b50 [0151.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf")) returned 0x20 [0162.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF", dwFileAttributes=0x20) returned 0 [0162.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.535] GetLastError () returned 0x5 [0162.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF", dwFileAttributes=0x20) returned 0 [0162.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 2023 os_tid = 0x1b54 [0151.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf")) returned 0x20 [0162.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF", dwFileAttributes=0x20) returned 0 [0162.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.537] GetLastError () returned 0x5 [0162.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF", dwFileAttributes=0x20) returned 0 [0162.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 2024 os_tid = 0x1b58 [0151.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf")) returned 0x20 [0162.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF", dwFileAttributes=0x20) returned 0 [0162.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.539] GetLastError () returned 0x5 [0162.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF", dwFileAttributes=0x20) returned 0 [0162.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f9f0) returned 1 Thread: id = 2025 os_tid = 0x1b5c [0151.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav")) returned 0x20 [0158.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV", dwFileAttributes=0x20) returned 0 [0161.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.527] GetLastError () returned 0x5 [0162.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV", dwFileAttributes=0x20) returned 0 [0162.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2feb8) returned 1 Thread: id = 2026 os_tid = 0x1b60 [0152.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf")) returned 0x20 [0162.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF", dwFileAttributes=0x20) returned 0 [0162.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.627] GetLastError () returned 0x5 [0162.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF", dwFileAttributes=0x20) returned 0 [0162.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 2033 os_tid = 0x1b64 [0152.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20 [0152.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl", dwFileAttributes=0x20) returned 0 [0152.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.178] GetLastError () returned 0x5 [0152.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl", dwFileAttributes=0x20) returned 0 [0152.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d530) returned 1 Thread: id = 2034 os_tid = 0x1b68 [0152.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20 [0153.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl", dwFileAttributes=0x20) returned 0 [0153.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.768] GetLastError () returned 0x5 [0153.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl", dwFileAttributes=0x20) returned 0 [0153.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186650) returned 1 Thread: id = 2035 os_tid = 0x1b6c [0152.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20 [0153.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl", dwFileAttributes=0x20) returned 0 [0153.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.769] GetLastError () returned 0x5 [0153.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl", dwFileAttributes=0x20) returned 0 [0153.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 2036 os_tid = 0x1b70 [0152.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20 [0153.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl", dwFileAttributes=0x20) returned 0 [0153.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.771] GetLastError () returned 0x5 [0153.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl", dwFileAttributes=0x20) returned 0 [0153.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187760) returned 1 Thread: id = 2037 os_tid = 0x1b74 [0152.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20 [0153.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl", dwFileAttributes=0x20) returned 0 [0153.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.772] GetLastError () returned 0x5 [0153.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl", dwFileAttributes=0x20) returned 0 [0153.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f0) returned 1 Thread: id = 2038 os_tid = 0x1b78 [0152.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20 [0153.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl", dwFileAttributes=0x20) returned 0 [0153.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.773] GetLastError () returned 0x5 [0153.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl", dwFileAttributes=0x20) returned 0 [0153.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186e30) returned 1 Thread: id = 2039 os_tid = 0x1b7c [0152.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20 [0152.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl", dwFileAttributes=0x20) returned 0 [0152.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.945] GetLastError () returned 0x5 [0152.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl", dwFileAttributes=0x20) returned 0 [0152.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 Thread: id = 2040 os_tid = 0x1b80 [0152.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20 [0152.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl", dwFileAttributes=0x20) returned 0 [0152.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.947] GetLastError () returned 0x5 [0152.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl", dwFileAttributes=0x20) returned 0 [0152.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186b90) returned 1 Thread: id = 2041 os_tid = 0x1b84 [0152.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve")) returned 0x20 [0152.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0152.191] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.191] GetLastError () returned 0x5 [0152.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0152.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23dc0) returned 1 Thread: id = 2042 os_tid = 0x1b88 [0152.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur")) returned 0x20 [0152.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0152.197] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.197] GetLastError () returned 0x5 [0152.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0152.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e244c0) returned 1 Thread: id = 2043 os_tid = 0x1b8c [0152.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr")) returned 0x20 [0152.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0152.198] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.199] GetLastError () returned 0x5 [0152.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0152.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e248c0) returned 1 Thread: id = 2044 os_tid = 0x1b90 [0152.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0152.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x20) returned 0 [0152.201] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.201] GetLastError () returned 0x5 [0152.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x20) returned 0 [0152.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 2045 os_tid = 0x1b94 [0152.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0152.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x20) returned 0 [0152.203] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.203] GetLastError () returned 0x5 [0152.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x20) returned 0 [0152.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 2046 os_tid = 0x1b98 [0152.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0153.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0153.774] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.444] GetLastError () returned 0x5 [0154.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ba98) returned 1 Thread: id = 2047 os_tid = 0x1b9c [0152.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0154.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.931] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.931] GetLastError () returned 0x5 [0154.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bbc8) returned 1 Thread: id = 2048 os_tid = 0x1ba0 [0152.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0154.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.932] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.933] GetLastError () returned 0x5 [0154.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 Thread: id = 2049 os_tid = 0x1ba4 [0152.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0154.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.935] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.935] GetLastError () returned 0x5 [0154.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0d40) returned 1 Thread: id = 2050 os_tid = 0x1ba8 [0152.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0154.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.443] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.443] GetLastError () returned 0x5 [0154.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0dd8) returned 1 Thread: id = 2051 os_tid = 0x1bac [0152.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0154.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.934] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.934] GetLastError () returned 0x5 [0154.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0154.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0e70) returned 1 Thread: id = 2052 os_tid = 0x1bb0 [0152.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadc28 [0152.212] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0152.212] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\" [0152.212] wcscat (in: _Dest=0x3dadc28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" [0152.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0152.212] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0152.213] wcscmp (_String1=".", _String2=".") returned 0 [0152.213] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.213] wcscmp (_String1="..", _String2=".") returned 1 [0152.213] wcscmp (_String1="..", _String2="..") returned 0 [0152.213] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe34600, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1fe34600, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1fe34600, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0152.213] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0152.213] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0152.213] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0152.213] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0152.213] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0152.213] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0152.213] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0152.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0152.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 [0152.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80207e0) returned 1 Thread: id = 2053 os_tid = 0x1bb4 [0152.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3550e0 [0152.214] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0152.214] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0152.214] wcscat (in: _Dest=0x3550e0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*" [0152.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0152.214] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda4917e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80992d0 [0152.950] wcscmp (_String1=".", _String2=".") returned 0 [0152.950] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda4917e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.775] wcscmp (_String1="..", _String2=".") returned 1 [0153.775] wcscmp (_String1="..", _String2="..") returned 0 [0153.775] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1 [0153.775] wcscmp (_String1="Flash.CAT", _String2=".") returned 1 [0153.775] wcscmp (_String1="Flash.CAT", _String2="..") returned 1 [0153.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819a6d8 [0153.775] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0153.775] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0153.775] wcscat (in: _Dest=0x819a6d8, _Source="Flash.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" [0155.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0155.782] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1 [0155.782] wcscmp (_String1="Flash.CHS", _String2=".") returned 1 [0155.782] wcscmp (_String1="Flash.CHS", _String2="..") returned 1 [0155.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7698 [0155.782] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.782] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.782] wcscat (in: _Dest=0x2c7698, _Source="Flash.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" [0155.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2810 [0155.784] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1 [0155.784] wcscmp (_String1="Flash.CHT", _String2=".") returned 1 [0155.784] wcscmp (_String1="Flash.CHT", _String2="..") returned 1 [0155.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c72d8 [0155.784] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.784] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.784] wcscat (in: _Dest=0x2c72d8, _Source="Flash.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" [0155.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2814 [0155.785] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1 [0155.785] wcscmp (_String1="Flash.DAN", _String2=".") returned 1 [0155.785] wcscmp (_String1="Flash.DAN", _String2="..") returned 1 [0155.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7198 [0155.786] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.786] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.786] wcscat (in: _Dest=0x2c7198, _Source="Flash.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" [0155.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2818 [0155.787] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1 [0155.787] wcscmp (_String1="Flash.DEU", _String2=".") returned 1 [0155.787] wcscmp (_String1="Flash.DEU", _String2="..") returned 1 [0155.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7738 [0155.787] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.787] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.787] wcscat (in: _Dest=0x2c7738, _Source="Flash.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" [0155.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x281c [0155.788] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1 [0155.788] wcscmp (_String1="Flash.ESP", _String2=".") returned 1 [0155.789] wcscmp (_String1="Flash.ESP", _String2="..") returned 1 [0155.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819adb8 [0155.789] wcscpy (in: _Dest=0x819adb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.789] wcscat (in: _Dest=0x819adb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.789] wcscat (in: _Dest=0x819adb8, _Source="Flash.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" [0155.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819adb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2820 [0155.790] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1 [0155.790] wcscmp (_String1="Flash.EUQ", _String2=".") returned 1 [0155.790] wcscmp (_String1="Flash.EUQ", _String2="..") returned 1 [0155.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bdf8 [0155.790] wcscpy (in: _Dest=0x819bdf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.790] wcscat (in: _Dest=0x819bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.790] wcscat (in: _Dest=0x819bdf8, _Source="Flash.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" [0155.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2824 [0155.792] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1 [0155.792] wcscmp (_String1="Flash.FRA", _String2=".") returned 1 [0155.792] wcscmp (_String1="Flash.FRA", _String2="..") returned 1 [0155.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b218 [0155.792] wcscpy (in: _Dest=0x819b218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.792] wcscat (in: _Dest=0x819b218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.792] wcscat (in: _Dest=0x819b218, _Source="Flash.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" [0155.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2828 [0155.793] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1 [0155.793] wcscmp (_String1="Flash.ITA", _String2=".") returned 1 [0155.793] wcscmp (_String1="Flash.ITA", _String2="..") returned 1 [0155.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e120e8 [0155.794] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.794] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.794] wcscat (in: _Dest=0x3e120e8, _Source="Flash.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" [0155.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x282c [0155.795] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1 [0155.795] wcscmp (_String1="Flash.JPN", _String2=".") returned 1 [0155.795] wcscmp (_String1="Flash.JPN", _String2="..") returned 1 [0155.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e116e8 [0155.795] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.795] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.795] wcscat (in: _Dest=0x3e116e8, _Source="Flash.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" [0155.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2830 [0155.796] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1 [0155.796] wcscmp (_String1="Flash.KOR", _String2=".") returned 1 [0155.796] wcscmp (_String1="Flash.KOR", _String2="..") returned 1 [0155.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81db648 [0155.796] wcscpy (in: _Dest=0x81db648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.797] wcscat (in: _Dest=0x81db648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.797] wcscat (in: _Dest=0x81db648, _Source="Flash.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" [0155.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2834 [0155.798] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda27c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0155.798] wcscmp (_String1="Flash.mpp", _String2=".") returned 1 [0155.798] wcscmp (_String1="Flash.mpp", _String2="..") returned 1 [0155.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81db6e8 [0155.798] wcscpy (in: _Dest=0x81db6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.798] wcscat (in: _Dest=0x81db6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.798] wcscat (in: _Dest=0x81db6e8, _Source="Flash.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" [0155.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2838 [0155.799] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1 [0155.799] wcscmp (_String1="Flash.NLD", _String2=".") returned 1 [0155.799] wcscmp (_String1="Flash.NLD", _String2="..") returned 1 [0155.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81db788 [0155.799] wcscpy (in: _Dest=0x81db788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.800] wcscat (in: _Dest=0x81db788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.800] wcscat (in: _Dest=0x81db788, _Source="Flash.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" [0155.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x283c [0155.801] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1 [0155.801] wcscmp (_String1="Flash.NOR", _String2=".") returned 1 [0155.801] wcscmp (_String1="Flash.NOR", _String2="..") returned 1 [0155.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81db828 [0155.801] wcscpy (in: _Dest=0x81db828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.801] wcscat (in: _Dest=0x81db828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.801] wcscat (in: _Dest=0x81db828, _Source="Flash.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" [0155.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2840 [0155.802] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1 [0155.802] wcscmp (_String1="Flash.PTB", _String2=".") returned 1 [0155.802] wcscmp (_String1="Flash.PTB", _String2="..") returned 1 [0155.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81db8c8 [0155.803] wcscpy (in: _Dest=0x81db8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.803] wcscat (in: _Dest=0x81db8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.803] wcscat (in: _Dest=0x81db8c8, _Source="Flash.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" [0155.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2844 [0155.804] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1 [0155.804] wcscmp (_String1="Flash.SUO", _String2=".") returned 1 [0155.804] wcscmp (_String1="Flash.SUO", _String2="..") returned 1 [0155.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81db968 [0155.804] wcscpy (in: _Dest=0x81db968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.804] wcscat (in: _Dest=0x81db968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.804] wcscat (in: _Dest=0x81db968, _Source="Flash.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" [0155.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2848 [0155.805] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1 [0155.805] wcscmp (_String1="Flash.SVE", _String2=".") returned 1 [0155.805] wcscmp (_String1="Flash.SVE", _String2="..") returned 1 [0155.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dba08 [0155.805] wcscpy (in: _Dest=0x81dba08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.805] wcscat (in: _Dest=0x81dba08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.805] wcscat (in: _Dest=0x81dba08, _Source="Flash.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" [0155.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dba08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x284c [0155.807] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1 [0155.807] wcscmp (_String1="Mcimpp.CAT", _String2=".") returned 1 [0155.807] wcscmp (_String1="Mcimpp.CAT", _String2="..") returned 1 [0155.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186998 [0155.807] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.807] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.807] wcscat (in: _Dest=0x8186998, _Source="Mcimpp.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" [0155.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2850 [0155.808] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1 [0155.808] wcscmp (_String1="MCIMPP.CHS", _String2=".") returned 1 [0155.808] wcscmp (_String1="MCIMPP.CHS", _String2="..") returned 1 [0155.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ed8 [0155.808] wcscpy (in: _Dest=0x8186ed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.809] wcscat (in: _Dest=0x8186ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.809] wcscat (in: _Dest=0x8186ed8, _Source="MCIMPP.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" [0155.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2854 [0155.810] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9cd5060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1 [0155.810] wcscmp (_String1="MCIMPP.CHT", _String2=".") returned 1 [0155.810] wcscmp (_String1="MCIMPP.CHT", _String2="..") returned 1 [0155.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187bf8 [0155.810] wcscpy (in: _Dest=0x8187bf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.810] wcscat (in: _Dest=0x8187bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.810] wcscat (in: _Dest=0x8187bf8, _Source="MCIMPP.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" [0155.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2858 [0155.812] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1 [0155.812] wcscmp (_String1="Mcimpp.DAN", _String2=".") returned 1 [0155.812] wcscmp (_String1="Mcimpp.DAN", _String2="..") returned 1 [0155.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187aa8 [0155.812] wcscpy (in: _Dest=0x8187aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.812] wcscat (in: _Dest=0x8187aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.812] wcscat (in: _Dest=0x8187aa8, _Source="Mcimpp.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" [0155.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x285c [0155.813] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1 [0155.813] wcscmp (_String1="Mcimpp.DEU", _String2=".") returned 1 [0155.813] wcscmp (_String1="Mcimpp.DEU", _String2="..") returned 1 [0155.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186c38 [0155.813] wcscpy (in: _Dest=0x8186c38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.813] wcscat (in: _Dest=0x8186c38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.813] wcscat (in: _Dest=0x8186c38, _Source="Mcimpp.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" [0155.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2860 [0155.815] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1 [0155.815] wcscmp (_String1="Mcimpp.ESP", _String2=".") returned 1 [0155.815] wcscmp (_String1="Mcimpp.ESP", _String2="..") returned 1 [0155.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187e98 [0155.815] wcscpy (in: _Dest=0x8187e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.815] wcscat (in: _Dest=0x8187e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.815] wcscat (in: _Dest=0x8187e98, _Source="Mcimpp.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" [0155.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2864 [0155.816] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1 [0155.816] wcscmp (_String1="Mcimpp.EUQ", _String2=".") returned 1 [0155.816] wcscmp (_String1="Mcimpp.EUQ", _String2="..") returned 1 [0155.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81881e0 [0155.816] wcscpy (in: _Dest=0x81881e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.817] wcscat (in: _Dest=0x81881e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.817] wcscat (in: _Dest=0x81881e0, _Source="Mcimpp.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" [0155.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81881e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2868 [0155.818] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1 [0155.818] wcscmp (_String1="Mcimpp.FRA", _String2=".") returned 1 [0155.818] wcscmp (_String1="Mcimpp.FRA", _String2="..") returned 1 [0155.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187b50 [0155.818] wcscpy (in: _Dest=0x8187b50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.818] wcscat (in: _Dest=0x8187b50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.818] wcscat (in: _Dest=0x8187b50, _Source="Mcimpp.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" [0155.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x286c [0155.819] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1 [0155.820] wcscmp (_String1="Mcimpp.ITA", _String2=".") returned 1 [0155.820] wcscmp (_String1="Mcimpp.ITA", _String2="..") returned 1 [0155.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187fe8 [0155.820] wcscpy (in: _Dest=0x8187fe8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0155.820] wcscat (in: _Dest=0x8187fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0155.820] wcscat (in: _Dest=0x8187fe8, _Source="Mcimpp.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" [0155.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2870 [0156.704] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1 [0156.704] wcscmp (_String1="Mcimpp.JPN", _String2=".") returned 1 [0156.704] wcscmp (_String1="Mcimpp.JPN", _String2="..") returned 1 [0156.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d7d0 [0156.704] wcscpy (in: _Dest=0x3e2d7d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0156.704] wcscat (in: _Dest=0x3e2d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0156.705] wcscat (in: _Dest=0x3e2d7d0, _Source="Mcimpp.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" [0159.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0159.163] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1 [0159.163] wcscmp (_String1="Mcimpp.KOR", _String2=".") returned 1 [0159.163] wcscmp (_String1="Mcimpp.KOR", _String2="..") returned 1 [0159.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187df0 [0159.163] wcscpy (in: _Dest=0x8187df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0159.163] wcscat (in: _Dest=0x8187df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0159.163] wcscat (in: _Dest=0x8187df0, _Source="Mcimpp.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" [0159.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0159.164] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9e05b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0159.164] wcscmp (_String1="MCIMPP.mpp", _String2=".") returned 1 [0159.164] wcscmp (_String1="MCIMPP.mpp", _String2="..") returned 1 [0159.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81881e0 [0159.164] wcscpy (in: _Dest=0x81881e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0159.164] wcscat (in: _Dest=0x81881e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0159.164] wcscat (in: _Dest=0x81881e0, _Source="MCIMPP.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" [0159.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81881e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0159.166] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1 [0159.166] wcscmp (_String1="Mcimpp.NLD", _String2=".") returned 1 [0159.166] wcscmp (_String1="Mcimpp.NLD", _String2="..") returned 1 [0159.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187e98 [0159.166] wcscpy (in: _Dest=0x8187e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0159.166] wcscat (in: _Dest=0x8187e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0159.166] wcscat (in: _Dest=0x8187e98, _Source="Mcimpp.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" [0159.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0159.167] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1 [0159.167] wcscmp (_String1="Mcimpp.NOR", _String2=".") returned 1 [0159.167] wcscmp (_String1="Mcimpp.NOR", _String2="..") returned 1 [0159.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186c38 [0159.168] wcscpy (in: _Dest=0x8186c38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0159.168] wcscat (in: _Dest=0x8186c38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0159.168] wcscat (in: _Dest=0x8186c38, _Source="Mcimpp.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" [0159.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c84 [0159.169] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1 [0159.169] wcscmp (_String1="MCIMPP.PTB", _String2=".") returned 1 [0159.169] wcscmp (_String1="MCIMPP.PTB", _String2="..") returned 1 [0159.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187aa8 [0159.169] wcscpy (in: _Dest=0x8187aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0159.169] wcscat (in: _Dest=0x8187aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0159.169] wcscat (in: _Dest=0x8187aa8, _Source="MCIMPP.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" [0159.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c88 [0159.170] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1 [0159.170] wcscmp (_String1="Mcimpp.SUO", _String2=".") returned 1 [0159.170] wcscmp (_String1="Mcimpp.SUO", _String2="..") returned 1 [0159.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187bf8 [0159.171] wcscpy (in: _Dest=0x8187bf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0159.171] wcscat (in: _Dest=0x8187bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0159.171] wcscat (in: _Dest=0x8187bf8, _Source="Mcimpp.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" [0159.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8c [0159.172] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1 [0159.172] wcscmp (_String1="MCIMPP.SVE", _String2=".") returned 1 [0159.172] wcscmp (_String1="MCIMPP.SVE", _String2="..") returned 1 [0159.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ed8 [0159.172] wcscpy (in: _Dest=0x8186ed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0159.172] wcscat (in: _Dest=0x8186ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0159.172] wcscat (in: _Dest=0x8186ed8, _Source="MCIMPP.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" [0159.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c90 [0159.174] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="QUICKT~1.CAT")) returned 1 [0159.191] wcscmp (_String1="QuickTime.CAT", _String2=".") returned 1 [0159.191] wcscmp (_String1="QuickTime.CAT", _String2="..") returned 1 [0159.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0159.191] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0159.191] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0159.191] wcscat (in: _Dest=0x8186998, _Source="QuickTime.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" [0160.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat")) returned 0x20 [0160.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", dwFileAttributes=0x20) returned 0 [0160.519] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.519] GetLastError () returned 0x5 [0160.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", dwFileAttributes=0x20) returned 0 [0160.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.519] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1 [0160.519] wcscmp (_String1="QuickTime.CHS", _String2=".") returned 1 [0160.519] wcscmp (_String1="QuickTime.CHS", _String2="..") returned 1 [0160.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.520] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.520] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.520] wcscat (in: _Dest=0x8186998, _Source="QuickTime.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" [0160.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs")) returned 0x20 [0160.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", dwFileAttributes=0x20) returned 0 [0160.520] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.520] GetLastError () returned 0x5 [0160.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", dwFileAttributes=0x20) returned 0 [0160.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.521] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9cd5060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1 [0160.521] wcscmp (_String1="QuickTime.CHT", _String2=".") returned 1 [0160.521] wcscmp (_String1="QuickTime.CHT", _String2="..") returned 1 [0160.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.521] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.521] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.521] wcscat (in: _Dest=0x8186998, _Source="QuickTime.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" [0160.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht")) returned 0x20 [0160.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", dwFileAttributes=0x20) returned 0 [0160.522] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.522] GetLastError () returned 0x5 [0160.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", dwFileAttributes=0x20) returned 0 [0160.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.523] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="QUICKT~1.DAN")) returned 1 [0160.523] wcscmp (_String1="QuickTime.DAN", _String2=".") returned 1 [0160.523] wcscmp (_String1="QuickTime.DAN", _String2="..") returned 1 [0160.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.523] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.523] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.523] wcscat (in: _Dest=0x8186998, _Source="QuickTime.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" [0160.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan")) returned 0x20 [0160.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", dwFileAttributes=0x20) returned 0 [0160.523] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.523] GetLastError () returned 0x5 [0160.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", dwFileAttributes=0x20) returned 0 [0160.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.524] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="QUICKT~1.DEU")) returned 1 [0160.524] wcscmp (_String1="QuickTime.DEU", _String2=".") returned 1 [0160.524] wcscmp (_String1="QuickTime.DEU", _String2="..") returned 1 [0160.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.524] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.524] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.524] wcscat (in: _Dest=0x8186998, _Source="QuickTime.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" [0160.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu")) returned 0x20 [0160.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", dwFileAttributes=0x20) returned 0 [0160.524] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.524] GetLastError () returned 0x5 [0160.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", dwFileAttributes=0x20) returned 0 [0160.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.525] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="QUICKT~1.ESP")) returned 1 [0160.525] wcscmp (_String1="QuickTime.ESP", _String2=".") returned 1 [0160.525] wcscmp (_String1="QuickTime.ESP", _String2="..") returned 1 [0160.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.525] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.525] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.525] wcscat (in: _Dest=0x8186998, _Source="QuickTime.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" [0160.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp")) returned 0x20 [0160.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", dwFileAttributes=0x20) returned 0 [0160.525] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.525] GetLastError () returned 0x5 [0160.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", dwFileAttributes=0x20) returned 0 [0160.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.526] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="QUICKT~1.EUQ")) returned 1 [0160.526] wcscmp (_String1="QuickTime.EUQ", _String2=".") returned 1 [0160.526] wcscmp (_String1="QuickTime.EUQ", _String2="..") returned 1 [0160.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.526] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.526] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.526] wcscat (in: _Dest=0x8186998, _Source="QuickTime.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" [0160.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq")) returned 0x20 [0160.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", dwFileAttributes=0x20) returned 0 [0160.526] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.526] GetLastError () returned 0x5 [0160.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", dwFileAttributes=0x20) returned 0 [0160.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.527] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="QUICKT~1.FRA")) returned 1 [0160.527] wcscmp (_String1="QuickTime.FRA", _String2=".") returned 1 [0160.527] wcscmp (_String1="QuickTime.FRA", _String2="..") returned 1 [0160.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.527] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.527] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.527] wcscat (in: _Dest=0x8186998, _Source="QuickTime.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" [0160.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra")) returned 0x20 [0160.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", dwFileAttributes=0x20) returned 0 [0160.527] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.527] GetLastError () returned 0x5 [0160.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", dwFileAttributes=0x20) returned 0 [0160.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.528] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="QUICKT~1.ITA")) returned 1 [0160.528] wcscmp (_String1="QuickTime.ITA", _String2=".") returned 1 [0160.528] wcscmp (_String1="QuickTime.ITA", _String2="..") returned 1 [0160.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.528] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.528] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.528] wcscat (in: _Dest=0x8186998, _Source="QuickTime.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" [0160.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita")) returned 0x20 [0160.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", dwFileAttributes=0x20) returned 0 [0160.528] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.529] GetLastError () returned 0x5 [0160.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", dwFileAttributes=0x20) returned 0 [0160.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.529] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="QUICKT~1.JPN")) returned 1 [0160.529] wcscmp (_String1="QuickTime.JPN", _String2=".") returned 1 [0160.529] wcscmp (_String1="QuickTime.JPN", _String2="..") returned 1 [0160.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.529] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.529] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.529] wcscat (in: _Dest=0x8186998, _Source="QuickTime.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" [0160.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn")) returned 0x20 [0160.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", dwFileAttributes=0x20) returned 0 [0160.530] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.530] GetLastError () returned 0x5 [0160.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", dwFileAttributes=0x20) returned 0 [0160.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.530] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="QUICKT~1.KOR")) returned 1 [0160.530] wcscmp (_String1="QuickTime.KOR", _String2=".") returned 1 [0160.530] wcscmp (_String1="QuickTime.KOR", _String2="..") returned 1 [0160.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.530] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.531] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.531] wcscat (in: _Dest=0x8186998, _Source="QuickTime.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" [0160.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor")) returned 0x20 [0160.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", dwFileAttributes=0x20) returned 0 [0160.531] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.531] GetLastError () returned 0x5 [0160.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", dwFileAttributes=0x20) returned 0 [0160.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.532] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9ddfa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0160.532] wcscmp (_String1="QuickTime.mpp", _String2=".") returned 1 [0160.532] wcscmp (_String1="QuickTime.mpp", _String2="..") returned 1 [0160.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.532] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.532] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.532] wcscat (in: _Dest=0x8186998, _Source="QuickTime.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" [0160.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp")) returned 0x20 [0160.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", dwFileAttributes=0x20) returned 0 [0160.573] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.573] GetLastError () returned 0x5 [0160.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", dwFileAttributes=0x20) returned 0 [0160.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.574] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="QUICKT~1.NLD")) returned 1 [0160.574] wcscmp (_String1="QuickTime.NLD", _String2=".") returned 1 [0160.574] wcscmp (_String1="QuickTime.NLD", _String2="..") returned 1 [0160.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.574] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.574] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.574] wcscat (in: _Dest=0x8186998, _Source="QuickTime.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" [0160.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld")) returned 0x20 [0160.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", dwFileAttributes=0x20) returned 0 [0160.575] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.575] GetLastError () returned 0x5 [0160.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", dwFileAttributes=0x20) returned 0 [0160.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.576] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="QUICKT~1.NOR")) returned 1 [0160.576] wcscmp (_String1="QuickTime.NOR", _String2=".") returned 1 [0160.576] wcscmp (_String1="QuickTime.NOR", _String2="..") returned 1 [0160.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.576] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.576] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.576] wcscat (in: _Dest=0x8186998, _Source="QuickTime.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" [0160.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor")) returned 0x20 [0160.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", dwFileAttributes=0x20) returned 0 [0160.577] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.577] GetLastError () returned 0x5 [0160.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", dwFileAttributes=0x20) returned 0 [0160.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.577] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="QUICKT~1.PTB")) returned 1 [0160.577] wcscmp (_String1="QuickTime.PTB", _String2=".") returned 1 [0160.578] wcscmp (_String1="QuickTime.PTB", _String2="..") returned 1 [0160.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.578] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.578] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.578] wcscat (in: _Dest=0x8186998, _Source="QuickTime.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" [0160.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb")) returned 0x20 [0160.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", dwFileAttributes=0x20) returned 0 [0160.579] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.579] GetLastError () returned 0x5 [0160.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", dwFileAttributes=0x20) returned 0 [0160.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.579] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="QUICKT~1.SUO")) returned 1 [0160.579] wcscmp (_String1="QuickTime.SUO", _String2=".") returned 1 [0160.579] wcscmp (_String1="QuickTime.SUO", _String2="..") returned 1 [0160.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.579] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.579] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.579] wcscat (in: _Dest=0x8186998, _Source="QuickTime.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" [0160.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo")) returned 0x20 [0160.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", dwFileAttributes=0x20) returned 0 [0160.580] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.580] GetLastError () returned 0x5 [0160.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", dwFileAttributes=0x20) returned 0 [0160.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.581] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="QUICKT~1.SVE")) returned 1 [0160.581] wcscmp (_String1="QuickTime.SVE", _String2=".") returned 1 [0160.581] wcscmp (_String1="QuickTime.SVE", _String2="..") returned 1 [0160.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186998 [0160.581] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.581] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.581] wcscat (in: _Dest=0x8186998, _Source="QuickTime.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" [0160.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve")) returned 0x20 [0160.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", dwFileAttributes=0x20) returned 0 [0160.582] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.582] GetLastError () returned 0x5 [0160.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", dwFileAttributes=0x20) returned 0 [0160.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.582] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="WINDOW~1.CAT")) returned 1 [0160.582] wcscmp (_String1="WindowsMedia.CAT", _String2=".") returned 1 [0160.582] wcscmp (_String1="WindowsMedia.CAT", _String2="..") returned 1 [0160.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.582] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.582] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.583] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" [0160.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat")) returned 0x20 [0160.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", dwFileAttributes=0x20) returned 0 [0160.583] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.583] GetLastError () returned 0x5 [0160.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", dwFileAttributes=0x20) returned 0 [0160.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.584] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1 [0160.584] wcscmp (_String1="WindowsMedia.CHS", _String2=".") returned 1 [0160.584] wcscmp (_String1="WindowsMedia.CHS", _String2="..") returned 1 [0160.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.584] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.584] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.584] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" [0160.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs")) returned 0x20 [0160.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", dwFileAttributes=0x20) returned 0 [0160.585] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.585] GetLastError () returned 0x5 [0160.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", dwFileAttributes=0x20) returned 0 [0160.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.585] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9cd5060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="WINDOW~1.CHT")) returned 1 [0160.585] wcscmp (_String1="WindowsMedia.CHT", _String2=".") returned 1 [0160.585] wcscmp (_String1="WindowsMedia.CHT", _String2="..") returned 1 [0160.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.586] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.586] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.586] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" [0160.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht")) returned 0x20 [0160.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", dwFileAttributes=0x20) returned 0 [0160.587] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.587] GetLastError () returned 0x5 [0160.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", dwFileAttributes=0x20) returned 0 [0160.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.587] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="WINDOW~1.DAN")) returned 1 [0160.587] wcscmp (_String1="WindowsMedia.DAN", _String2=".") returned 1 [0160.587] wcscmp (_String1="WindowsMedia.DAN", _String2="..") returned 1 [0160.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.587] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.588] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.588] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" [0160.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan")) returned 0x20 [0160.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", dwFileAttributes=0x20) returned 0 [0160.588] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.589] GetLastError () returned 0x5 [0160.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", dwFileAttributes=0x20) returned 0 [0160.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.589] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="WINDOW~1.DEU")) returned 1 [0160.589] wcscmp (_String1="WindowsMedia.DEU", _String2=".") returned 1 [0160.589] wcscmp (_String1="WindowsMedia.DEU", _String2="..") returned 1 [0160.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.589] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.589] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.589] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" [0160.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu")) returned 0x20 [0160.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", dwFileAttributes=0x20) returned 0 [0160.590] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.590] GetLastError () returned 0x5 [0160.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", dwFileAttributes=0x20) returned 0 [0160.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.591] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="WINDOW~1.ESP")) returned 1 [0160.591] wcscmp (_String1="WindowsMedia.ESP", _String2=".") returned 1 [0160.591] wcscmp (_String1="WindowsMedia.ESP", _String2="..") returned 1 [0160.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.591] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.591] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.591] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" [0160.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp")) returned 0x20 [0160.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", dwFileAttributes=0x20) returned 0 [0160.592] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.592] GetLastError () returned 0x5 [0160.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", dwFileAttributes=0x20) returned 0 [0160.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.592] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="WINDOW~1.EUQ")) returned 1 [0160.592] wcscmp (_String1="WindowsMedia.EUQ", _String2=".") returned 1 [0160.592] wcscmp (_String1="WindowsMedia.EUQ", _String2="..") returned 1 [0160.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.593] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.593] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.593] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" [0160.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq")) returned 0x20 [0160.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", dwFileAttributes=0x20) returned 0 [0160.593] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.593] GetLastError () returned 0x5 [0160.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", dwFileAttributes=0x20) returned 0 [0160.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.594] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="WINDOW~1.FRA")) returned 1 [0160.594] wcscmp (_String1="WindowsMedia.FRA", _String2=".") returned 1 [0160.594] wcscmp (_String1="WindowsMedia.FRA", _String2="..") returned 1 [0160.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.594] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.594] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.594] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" [0160.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra")) returned 0x20 [0160.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", dwFileAttributes=0x20) returned 0 [0160.594] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.594] GetLastError () returned 0x5 [0160.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", dwFileAttributes=0x20) returned 0 [0160.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.595] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="WINDOW~1.ITA")) returned 1 [0160.595] wcscmp (_String1="WindowsMedia.ITA", _String2=".") returned 1 [0160.595] wcscmp (_String1="WindowsMedia.ITA", _String2="..") returned 1 [0160.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.595] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.595] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.595] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" [0160.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita")) returned 0x20 [0160.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", dwFileAttributes=0x20) returned 0 [0160.595] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.595] GetLastError () returned 0x5 [0160.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", dwFileAttributes=0x20) returned 0 [0160.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.596] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="WINDOW~1.JPN")) returned 1 [0160.596] wcscmp (_String1="WindowsMedia.JPN", _String2=".") returned 1 [0160.596] wcscmp (_String1="WindowsMedia.JPN", _String2="..") returned 1 [0160.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.596] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.596] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.596] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" [0160.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn")) returned 0x20 [0160.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", dwFileAttributes=0x20) returned 0 [0160.597] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.597] GetLastError () returned 0x5 [0160.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", dwFileAttributes=0x20) returned 0 [0160.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.597] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="WINDOW~1.KOR")) returned 1 [0160.597] wcscmp (_String1="WindowsMedia.KOR", _String2=".") returned 1 [0160.597] wcscmp (_String1="WindowsMedia.KOR", _String2="..") returned 1 [0160.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.597] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.597] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.597] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" [0160.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor")) returned 0x20 [0160.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", dwFileAttributes=0x20) returned 0 [0160.598] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.598] GetLastError () returned 0x5 [0160.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", dwFileAttributes=0x20) returned 0 [0160.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.598] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9e05b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0160.598] wcscmp (_String1="WindowsMedia.mpp", _String2=".") returned 1 [0160.598] wcscmp (_String1="WindowsMedia.mpp", _String2="..") returned 1 [0160.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.598] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.598] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.599] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" [0160.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp")) returned 0x20 [0160.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", dwFileAttributes=0x20) returned 0 [0160.599] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.599] GetLastError () returned 0x5 [0160.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", dwFileAttributes=0x20) returned 0 [0160.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.599] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="WINDOW~1.NLD")) returned 1 [0160.599] wcscmp (_String1="WindowsMedia.NLD", _String2=".") returned 1 [0160.599] wcscmp (_String1="WindowsMedia.NLD", _String2="..") returned 1 [0160.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.599] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.600] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.600] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" [0160.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld")) returned 0x20 [0160.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", dwFileAttributes=0x20) returned 0 [0160.600] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.600] GetLastError () returned 0x5 [0160.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", dwFileAttributes=0x20) returned 0 [0160.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.600] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="WINDOW~1.NOR")) returned 1 [0160.600] wcscmp (_String1="WindowsMedia.NOR", _String2=".") returned 1 [0160.600] wcscmp (_String1="WindowsMedia.NOR", _String2="..") returned 1 [0160.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.600] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.601] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.601] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" [0160.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor")) returned 0x20 [0160.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", dwFileAttributes=0x20) returned 0 [0160.601] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.601] GetLastError () returned 0x5 [0160.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", dwFileAttributes=0x20) returned 0 [0160.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.601] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="WINDOW~1.PTB")) returned 1 [0160.601] wcscmp (_String1="WindowsMedia.PTB", _String2=".") returned 1 [0160.601] wcscmp (_String1="WindowsMedia.PTB", _String2="..") returned 1 [0160.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0160.601] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0160.601] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0160.602] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" [0160.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb")) returned 0x20 [0162.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", dwFileAttributes=0x20) returned 0 [0162.244] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.244] GetLastError () returned 0x5 [0162.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", dwFileAttributes=0x20) returned 0 [0162.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0162.244] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="WINDOW~1.SUO")) returned 1 [0162.244] wcscmp (_String1="WindowsMedia.SUO", _String2=".") returned 1 [0162.244] wcscmp (_String1="WindowsMedia.SUO", _String2="..") returned 1 [0162.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf358 [0162.244] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0162.244] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0162.244] wcscat (in: _Dest=0x3eaf358, _Source="WindowsMedia.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" [0164.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eaf358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0164.545] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 1 [0164.545] wcscmp (_String1="WindowsMedia.SVE", _String2=".") returned 1 [0164.545] wcscmp (_String1="WindowsMedia.SVE", _String2="..") returned 1 [0164.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d96f8 [0164.545] wcscpy (in: _Dest=0x81d96f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.545] wcscat (in: _Dest=0x81d96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.545] wcscat (in: _Dest=0x81d96f8, _Source="WindowsMedia.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" [0164.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a18 [0164.547] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 0 [0164.547] FindClose (in: hFindFile=0x80992d0 | out: hFindFile=0x80992d0) returned 1 [0164.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0164.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 [0164.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35370) returned 1 Thread: id = 2054 os_tid = 0x1bb8 [0152.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d408 [0152.218] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0152.218] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0152.218] wcscat (in: _Dest=0x32d408, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*" [0152.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0152.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80990d0 [0153.775] wcscmp (_String1=".", _String2=".") returned 0 [0153.775] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.775] wcscmp (_String1="..", _String2=".") returned 1 [0153.775] wcscmp (_String1="..", _String2="..") returned 0 [0153.775] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1 [0153.775] wcscmp (_String1="Flash.CZE", _String2=".") returned 1 [0153.775] wcscmp (_String1="Flash.CZE", _String2="..") returned 1 [0153.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186e30 [0153.776] wcscpy (in: _Dest=0x8186e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0153.776] wcscat (in: _Dest=0x8186e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0153.776] wcscat (in: _Dest=0x8186e30, _Source="Flash.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" [0154.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0154.066] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1 [0154.066] wcscmp (_String1="Mcimpp.CZE", _String2=".") returned 1 [0154.066] wcscmp (_String1="Mcimpp.CZE", _String2="..") returned 1 [0154.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c218 [0154.066] wcscpy (in: _Dest=0x35c218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0154.066] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0154.066] wcscat (in: _Dest=0x35c218, _Source="Mcimpp.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" [0154.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0154.067] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="QUICKT~1.CZE")) returned 1 [0154.067] wcscmp (_String1="QuickTime.CZE", _String2=".") returned 1 [0154.067] wcscmp (_String1="QuickTime.CZE", _String2="..") returned 1 [0154.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bea8 [0154.067] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0154.067] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0154.067] wcscat (in: _Dest=0x35bea8, _Source="QuickTime.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" [0154.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0154.068] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 1 [0154.068] wcscmp (_String1="WindowsMedia.CZE", _String2=".") returned 1 [0154.069] wcscmp (_String1="WindowsMedia.CZE", _String2="..") returned 1 [0154.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6c48 [0154.069] wcscpy (in: _Dest=0x2ff6c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0154.069] wcscat (in: _Dest=0x2ff6c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0154.069] wcscat (in: _Dest=0x2ff6c48, _Source="WindowsMedia.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" [0154.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0154.070] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 0 [0154.070] FindClose (in: hFindFile=0x80990d0 | out: hFindFile=0x80990d0) returned 1 [0154.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0154.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 [0154.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0f08) returned 1 Thread: id = 2055 os_tid = 0x1bbc [0152.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32ceb0 [0152.219] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0152.219] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0152.219] wcscat (in: _Dest=0x32ceb0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*" [0152.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0152.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c10 [0153.776] wcscmp (_String1=".", _String2=".") returned 0 [0153.776] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.776] wcscmp (_String1="..", _String2=".") returned 1 [0153.776] wcscmp (_String1="..", _String2="..") returned 0 [0153.776] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1 [0153.776] wcscmp (_String1="Flash.HRV", _String2=".") returned 1 [0153.776] wcscmp (_String1="Flash.HRV", _String2="..") returned 1 [0153.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81868f0 [0153.776] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0153.776] wcscat (in: _Dest=0x81868f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0153.776] wcscat (in: _Dest=0x81868f0, _Source="Flash.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" [0159.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81868f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d18 [0159.232] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1 [0159.232] wcscmp (_String1="MCIMPP.HRV", _String2=".") returned 1 [0159.232] wcscmp (_String1="MCIMPP.HRV", _String2="..") returned 1 [0159.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bbe8 [0159.232] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0159.232] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0159.232] wcscat (in: _Dest=0x35bbe8, _Source="MCIMPP.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" [0159.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d1c [0159.233] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="QUICKT~1.HRV")) returned 1 [0159.233] wcscmp (_String1="QuickTime.HRV", _String2=".") returned 1 [0159.233] wcscmp (_String1="QuickTime.HRV", _String2="..") returned 1 [0159.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35ba88 [0159.234] wcscpy (in: _Dest=0x35ba88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0159.234] wcscat (in: _Dest=0x35ba88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0159.234] wcscat (in: _Dest=0x35ba88, _Source="QuickTime.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" [0159.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35ba88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d20 [0159.235] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 1 [0159.235] wcscmp (_String1="WindowsMedia.HRV", _String2=".") returned 1 [0159.235] wcscmp (_String1="WindowsMedia.HRV", _String2="..") returned 1 [0159.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d403f8 [0159.235] wcscpy (in: _Dest=0x3d403f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0159.235] wcscat (in: _Dest=0x3d403f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0159.235] wcscat (in: _Dest=0x3d403f8, _Source="WindowsMedia.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" [0159.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d403f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d24 [0159.236] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 0 [0159.237] FindClose (in: hFindFile=0x8098c10 | out: hFindFile=0x8098c10) returned 1 [0159.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0159.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 [0159.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0fa0) returned 1 Thread: id = 2056 os_tid = 0x1bc0 [0152.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d5d0 [0152.220] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0152.220] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0152.220] wcscat (in: _Dest=0x32d5d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*" [0152.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0152.220] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0153.777] wcscmp (_String1=".", _String2=".") returned 0 [0153.777] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.777] wcscmp (_String1="..", _String2=".") returned 1 [0153.777] wcscmp (_String1="..", _String2="..") returned 0 [0153.777] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1 [0153.777] wcscmp (_String1="Flash.HUN", _String2=".") returned 1 [0153.777] wcscmp (_String1="Flash.HUN", _String2="..") returned 1 [0153.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187760 [0153.777] wcscpy (in: _Dest=0x8187760, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0153.777] wcscat (in: _Dest=0x8187760, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0153.777] wcscat (in: _Dest=0x8187760, _Source="Flash.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" [0161.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0161.242] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1 [0161.242] wcscmp (_String1="Mcimpp.HUN", _String2=".") returned 1 [0161.242] wcscmp (_String1="Mcimpp.HUN", _String2="..") returned 1 [0161.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da6c8 [0161.242] wcscpy (in: _Dest=0x81da6c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0161.243] wcscat (in: _Dest=0x81da6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0161.243] wcscat (in: _Dest=0x81da6c8, _Source="Mcimpp.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" [0161.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0161.244] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="QUICKT~1.HUN")) returned 1 [0161.244] wcscmp (_String1="QuickTime.HUN", _String2=".") returned 1 [0161.244] wcscmp (_String1="QuickTime.HUN", _String2="..") returned 1 [0161.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d9bc8 [0161.244] wcscpy (in: _Dest=0x81d9bc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0161.244] wcscat (in: _Dest=0x81d9bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0161.244] wcscat (in: _Dest=0x81d9bc8, _Source="QuickTime.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" [0161.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26bc [0161.245] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 1 [0161.245] wcscmp (_String1="WindowsMedia.HUN", _String2=".") returned 1 [0161.245] wcscmp (_String1="WindowsMedia.HUN", _String2="..") returned 1 [0161.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d409b8 [0161.245] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0161.245] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0161.245] wcscat (in: _Dest=0x3d409b8, _Source="WindowsMedia.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" [0161.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d409b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e0 [0161.247] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 0 [0161.247] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0161.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0161.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 [0161.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1038) returned 1 Thread: id = 2057 os_tid = 0x1bc4 [0152.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32ca88 [0152.221] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0152.221] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0152.221] wcscat (in: _Dest=0x32ca88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*" [0152.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0152.221] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0153.777] wcscmp (_String1=".", _String2=".") returned 0 [0153.777] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.777] wcscmp (_String1="..", _String2=".") returned 1 [0153.777] wcscmp (_String1="..", _String2="..") returned 0 [0153.777] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1 [0153.778] wcscmp (_String1="Flash.POL", _String2=".") returned 1 [0153.778] wcscmp (_String1="Flash.POL", _String2="..") returned 1 [0153.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186650 [0153.778] wcscpy (in: _Dest=0x8186650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0153.778] wcscat (in: _Dest=0x8186650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0153.778] wcscat (in: _Dest=0x8186650, _Source="Flash.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" [0162.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0162.402] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1 [0162.402] wcscmp (_String1="Mcimpp.POL", _String2=".") returned 1 [0162.402] wcscmp (_String1="Mcimpp.POL", _String2="..") returned 1 [0162.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da6c8 [0162.402] wcscpy (in: _Dest=0x81da6c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0162.402] wcscat (in: _Dest=0x81da6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0162.402] wcscat (in: _Dest=0x81da6c8, _Source="Mcimpp.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" [0162.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34 [0162.404] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="QUICKT~1.POL")) returned 1 [0162.404] wcscmp (_String1="QuickTime.POL", _String2=".") returned 1 [0162.404] wcscmp (_String1="QuickTime.POL", _String2="..") returned 1 [0162.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da8d8 [0162.404] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0162.404] wcscat (in: _Dest=0x81da8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0162.404] wcscat (in: _Dest=0x81da8d8, _Source="QuickTime.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" [0162.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0162.405] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 1 [0162.405] wcscmp (_String1="WindowsMedia.POL", _String2=".") returned 1 [0162.405] wcscmp (_String1="WindowsMedia.POL", _String2="..") returned 1 [0162.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41a40 [0162.406] wcscpy (in: _Dest=0x3d41a40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0162.406] wcscat (in: _Dest=0x3d41a40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0162.406] wcscat (in: _Dest=0x3d41a40, _Source="WindowsMedia.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" [0162.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d30 [0162.407] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 0 [0162.407] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0162.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0162.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 [0162.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d10d0) returned 1 Thread: id = 2058 os_tid = 0x1bc8 [0152.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d19b8 [0152.222] wcscpy (in: _Dest=0x81d19b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0152.222] wcscat (in: _Dest=0x81d19b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0152.222] wcscat (in: _Dest=0x81d19b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*" [0152.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0152.222] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099590 [0153.778] wcscmp (_String1=".", _String2=".") returned 0 [0153.778] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.778] wcscmp (_String1="..", _String2=".") returned 1 [0153.778] wcscmp (_String1="..", _String2="..") returned 0 [0153.778] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1 [0153.778] wcscmp (_String1="Flash.RUM", _String2=".") returned 1 [0153.778] wcscmp (_String1="Flash.RUM", _String2="..") returned 1 [0153.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186d88 [0153.778] wcscpy (in: _Dest=0x8186d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0153.778] wcscat (in: _Dest=0x8186d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0153.778] wcscat (in: _Dest=0x8186d88, _Source="Flash.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" [0154.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0154.072] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1 [0154.072] wcscmp (_String1="MCIMPP.RUM", _String2=".") returned 1 [0154.072] wcscmp (_String1="MCIMPP.RUM", _String2="..") returned 1 [0154.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c378 [0154.072] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0154.072] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0154.072] wcscat (in: _Dest=0x35c378, _Source="MCIMPP.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" [0154.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0154.073] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="QUICKT~1.RUM")) returned 1 [0154.073] wcscmp (_String1="QuickTime.RUM", _String2=".") returned 1 [0154.073] wcscmp (_String1="QuickTime.RUM", _String2="..") returned 1 [0154.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c428 [0154.073] wcscpy (in: _Dest=0x35c428, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0154.073] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0154.073] wcscat (in: _Dest=0x35c428, _Source="QuickTime.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" [0154.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0154.074] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 1 [0154.074] wcscmp (_String1="WindowsMedia.RUM", _String2=".") returned 1 [0154.074] wcscmp (_String1="WindowsMedia.RUM", _String2="..") returned 1 [0154.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7e40 [0154.074] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0154.074] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0154.074] wcscat (in: _Dest=0x2ff7e40, _Source="WindowsMedia.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" [0154.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0154.075] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 0 [0154.075] FindClose (in: hFindFile=0x8099590 | out: hFindFile=0x8099590) returned 1 [0154.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0154.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d19b8) returned 1 [0154.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1168) returned 1 Thread: id = 2059 os_tid = 0x1bcc [0152.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1a50 [0152.223] wcscpy (in: _Dest=0x81d1a50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0152.223] wcscat (in: _Dest=0x81d1a50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0152.223] wcscat (in: _Dest=0x81d1a50, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*" [0152.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0152.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099350 [0153.779] wcscmp (_String1=".", _String2=".") returned 0 [0153.779] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.779] wcscmp (_String1="..", _String2=".") returned 1 [0153.779] wcscmp (_String1="..", _String2="..") returned 0 [0153.779] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1 [0153.779] wcscmp (_String1="Flash.RUS", _String2=".") returned 1 [0153.779] wcscmp (_String1="Flash.RUS", _String2="..") returned 1 [0153.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186500 [0153.779] wcscpy (in: _Dest=0x8186500, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0153.779] wcscat (in: _Dest=0x8186500, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0153.779] wcscat (in: _Dest=0x8186500, _Source="Flash.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" [0164.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0164.638] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1 [0164.638] wcscmp (_String1="MCIMPP.RUS", _String2=".") returned 1 [0164.638] wcscmp (_String1="MCIMPP.RUS", _String2="..") returned 1 [0164.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d9a68 [0164.638] wcscpy (in: _Dest=0x81d9a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0164.638] wcscat (in: _Dest=0x81d9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0164.638] wcscat (in: _Dest=0x81d9a68, _Source="MCIMPP.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" [0164.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2834 [0164.639] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="QUICKT~1.RUS")) returned 1 [0164.639] wcscmp (_String1="QuickTime.RUS", _String2=".") returned 1 [0164.639] wcscmp (_String1="QuickTime.RUS", _String2="..") returned 1 [0164.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81dab98 [0164.639] wcscpy (in: _Dest=0x81dab98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0164.639] wcscat (in: _Dest=0x81dab98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0164.639] wcscat (in: _Dest=0x81dab98, _Source="QuickTime.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" [0164.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dab98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2830 [0164.640] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 1 [0164.640] wcscmp (_String1="WindowsMedia.RUS", _String2=".") returned 1 [0164.640] wcscmp (_String1="WindowsMedia.RUS", _String2="..") returned 1 [0164.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1ee8 [0164.640] wcscpy (in: _Dest=0x81e1ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0164.641] wcscat (in: _Dest=0x81e1ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0164.641] wcscat (in: _Dest=0x81e1ee8, _Source="WindowsMedia.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" [0164.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x282c [0164.641] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 0 [0164.641] FindClose (in: hFindFile=0x8099350 | out: hFindFile=0x8099350) returned 1 [0164.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0164.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1a50) returned 1 [0164.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1200) returned 1 Thread: id = 2060 os_tid = 0x1bd0 [0152.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1ae8 [0152.224] wcscpy (in: _Dest=0x81d1ae8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0152.224] wcscat (in: _Dest=0x81d1ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0152.224] wcscat (in: _Dest=0x81d1ae8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*" [0152.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090bb0 [0152.224] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098890 [0153.779] wcscmp (_String1=".", _String2=".") returned 0 [0153.779] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.779] wcscmp (_String1="..", _String2=".") returned 1 [0153.780] wcscmp (_String1="..", _String2="..") returned 0 [0153.780] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1 [0153.780] wcscmp (_String1="Flash.SKY", _String2=".") returned 1 [0153.780] wcscmp (_String1="Flash.SKY", _String2="..") returned 1 [0153.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186458 [0153.780] wcscpy (in: _Dest=0x8186458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0153.780] wcscat (in: _Dest=0x8186458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0153.780] wcscat (in: _Dest=0x8186458, _Source="Flash.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" [0159.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0159.239] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1 [0159.239] wcscmp (_String1="Mcimpp.SKY", _String2=".") returned 1 [0159.239] wcscmp (_String1="Mcimpp.SKY", _String2="..") returned 1 [0159.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c798 [0159.239] wcscpy (in: _Dest=0x35c798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0159.239] wcscat (in: _Dest=0x35c798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0159.239] wcscat (in: _Dest=0x35c798, _Source="Mcimpp.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" [0159.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d28 [0159.240] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="QUICKT~1.SKY")) returned 1 [0159.240] wcscmp (_String1="QuickTime.SKY", _String2=".") returned 1 [0159.240] wcscmp (_String1="QuickTime.SKY", _String2="..") returned 1 [0159.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c0b8 [0159.240] wcscpy (in: _Dest=0x35c0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0159.240] wcscat (in: _Dest=0x35c0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0159.240] wcscat (in: _Dest=0x35c0b8, _Source="QuickTime.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" [0159.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d2c [0159.241] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 1 [0159.242] wcscmp (_String1="WindowsMedia.SKY", _String2=".") returned 1 [0159.242] wcscmp (_String1="WindowsMedia.SKY", _String2="..") returned 1 [0159.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1870 [0159.242] wcscpy (in: _Dest=0x81e1870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0159.242] wcscat (in: _Dest=0x81e1870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0159.242] wcscat (in: _Dest=0x81e1870, _Source="WindowsMedia.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" [0159.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d30 [0159.243] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 0 [0159.243] FindClose (in: hFindFile=0x8098890 | out: hFindFile=0x8098890) returned 1 [0159.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090bb0) returned 1 [0159.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1ae8) returned 1 [0159.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1298) returned 1 Thread: id = 2061 os_tid = 0x1bd4 [0152.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1b80 [0152.225] wcscpy (in: _Dest=0x81d1b80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0152.225] wcscat (in: _Dest=0x81d1b80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0152.225] wcscat (in: _Dest=0x81d1b80, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*" [0152.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e060 [0152.225] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099610 [0153.780] wcscmp (_String1=".", _String2=".") returned 0 [0153.780] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.780] wcscmp (_String1="..", _String2=".") returned 1 [0153.780] wcscmp (_String1="..", _String2="..") returned 0 [0153.780] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1 [0153.780] wcscmp (_String1="Flash.SLV", _String2=".") returned 1 [0153.780] wcscmp (_String1="Flash.SLV", _String2="..") returned 1 [0153.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187568 [0153.780] wcscpy (in: _Dest=0x8187568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0153.780] wcscat (in: _Dest=0x8187568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0153.781] wcscat (in: _Dest=0x8187568, _Source="Flash.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" [0158.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0158.029] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SLV", cAlternateFileName="")) returned 1 [0158.030] wcscmp (_String1="MCIMPP.SLV", _String2=".") returned 1 [0158.030] wcscmp (_String1="MCIMPP.SLV", _String2="..") returned 1 [0158.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da408 [0158.030] wcscpy (in: _Dest=0x81da408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0158.030] wcscat (in: _Dest=0x81da408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0158.030] wcscat (in: _Dest=0x81da408, _Source="MCIMPP.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" [0158.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb8 [0158.031] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SLV", cAlternateFileName="QUICKT~1.SLV")) returned 1 [0158.031] wcscmp (_String1="QuickTime.SLV", _String2=".") returned 1 [0158.031] wcscmp (_String1="QuickTime.SLV", _String2="..") returned 1 [0158.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da358 [0158.031] wcscpy (in: _Dest=0x81da358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0158.031] wcscat (in: _Dest=0x81da358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0158.031] wcscat (in: _Dest=0x81da358, _Source="QuickTime.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" [0158.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bbc [0158.032] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 1 [0158.032] wcscmp (_String1="WindowsMedia.SLV", _String2=".") returned 1 [0158.032] wcscmp (_String1="WindowsMedia.SLV", _String2="..") returned 1 [0158.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41bb0 [0158.032] wcscpy (in: _Dest=0x3d41bb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0158.032] wcscat (in: _Dest=0x3d41bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0158.032] wcscat (in: _Dest=0x3d41bb0, _Source="WindowsMedia.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" [0158.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc0 [0158.033] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 0 [0158.033] FindClose (in: hFindFile=0x8099610 | out: hFindFile=0x8099610) returned 1 [0158.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e060) returned 1 [0158.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1b80) returned 1 [0158.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1330) returned 1 Thread: id = 2062 os_tid = 0x1bd8 [0152.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1c18 [0152.225] wcscpy (in: _Dest=0x81d1c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0152.226] wcscat (in: _Dest=0x81d1c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0152.226] wcscat (in: _Dest=0x81d1c18, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*" [0152.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fad8 [0152.226] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80994d0 [0152.953] wcscmp (_String1=".", _String2=".") returned 0 [0152.953] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.953] wcscmp (_String1="..", _String2=".") returned 1 [0152.953] wcscmp (_String1="..", _String2="..") returned 0 [0152.953] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1 [0152.953] wcscmp (_String1="Flash.TUR", _String2=".") returned 1 [0152.953] wcscmp (_String1="Flash.TUR", _String2="..") returned 1 [0152.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186b90 [0152.953] wcscpy (in: _Dest=0x8186b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0152.954] wcscat (in: _Dest=0x8186b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0152.954] wcscat (in: _Dest=0x8186b90, _Source="Flash.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" [0156.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0156.338] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.TUR", cAlternateFileName="")) returned 1 [0156.338] wcscmp (_String1="MCIMPP.TUR", _String2=".") returned 1 [0156.338] wcscmp (_String1="MCIMPP.TUR", _String2="..") returned 1 [0156.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d9b18 [0156.339] wcscpy (in: _Dest=0x81d9b18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0156.339] wcscat (in: _Dest=0x81d9b18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0156.339] wcscat (in: _Dest=0x81d9b18, _Source="MCIMPP.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" [0156.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2954 [0156.340] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.TUR", cAlternateFileName="QUICKT~1.TUR")) returned 1 [0156.340] wcscmp (_String1="QuickTime.TUR", _String2=".") returned 1 [0156.340] wcscmp (_String1="QuickTime.TUR", _String2="..") returned 1 [0156.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d9bc8 [0156.340] wcscpy (in: _Dest=0x81d9bc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0156.340] wcscat (in: _Dest=0x81d9bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0156.340] wcscat (in: _Dest=0x81d9bc8, _Source="QuickTime.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" [0156.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2958 [0156.342] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 1 [0156.342] wcscmp (_String1="WindowsMedia.TUR", _String2=".") returned 1 [0156.342] wcscmp (_String1="WindowsMedia.TUR", _String2="..") returned 1 [0156.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d418d0 [0156.342] wcscpy (in: _Dest=0x3d418d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0156.342] wcscat (in: _Dest=0x3d418d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0156.342] wcscat (in: _Dest=0x3d418d0, _Source="WindowsMedia.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" [0156.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d418d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x295c [0156.343] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 0 [0156.343] FindClose (in: hFindFile=0x80994d0 | out: hFindFile=0x80994d0) returned 1 [0156.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fad8) returned 1 [0156.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1c18) returned 1 [0156.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d13c8) returned 1 Thread: id = 2063 os_tid = 0x1bdc [0152.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1cb0 [0152.226] wcscpy (in: _Dest=0x81d1cb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0152.226] wcscat (in: _Dest=0x81d1cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0152.226] wcscat (in: _Dest=0x81d1cb0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*" [0152.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e2c8 [0152.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0152.954] wcscmp (_String1=".", _String2=".") returned 0 [0152.954] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.954] wcscmp (_String1="..", _String2=".") returned 1 [0152.954] wcscmp (_String1="..", _String2="..") returned 0 [0152.954] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1 [0152.954] wcscmp (_String1="Flash.UKR", _String2=".") returned 1 [0152.954] wcscmp (_String1="Flash.UKR", _String2="..") returned 1 [0152.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186848 [0152.954] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0152.954] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0152.955] wcscat (in: _Dest=0x8186848, _Source="Flash.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" [0154.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0154.093] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.UKR", cAlternateFileName="")) returned 1 [0154.093] wcscmp (_String1="MCIMPP.UKR", _String2=".") returned 1 [0154.093] wcscmp (_String1="MCIMPP.UKR", _String2="..") returned 1 [0154.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bc98 [0154.093] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0154.093] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0154.093] wcscat (in: _Dest=0x35bc98, _Source="MCIMPP.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" [0154.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0154.094] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.UKR", cAlternateFileName="QUICKT~1.UKR")) returned 1 [0154.094] wcscmp (_String1="QuickTime.UKR", _String2=".") returned 1 [0154.094] wcscmp (_String1="QuickTime.UKR", _String2="..") returned 1 [0154.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c0b8 [0154.094] wcscpy (in: _Dest=0x35c0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0154.094] wcscat (in: _Dest=0x35c0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0154.094] wcscat (in: _Dest=0x35c0b8, _Source="QuickTime.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" [0154.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0154.095] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 1 [0154.095] wcscmp (_String1="WindowsMedia.UKR", _String2=".") returned 1 [0154.095] wcscmp (_String1="WindowsMedia.UKR", _String2="..") returned 1 [0154.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d40060 [0154.095] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0154.095] wcscat (in: _Dest=0x3d40060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0154.095] wcscat (in: _Dest=0x3d40060, _Source="WindowsMedia.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" [0154.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0154.096] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 0 [0154.096] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0154.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e2c8) returned 1 [0154.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1cb0) returned 1 [0154.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1460) returned 1 Thread: id = 2064 os_tid = 0x1be0 [0152.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf")) returned 0x20 [0152.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF", dwFileAttributes=0x20) returned 0 [0152.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.228] GetLastError () returned 0x5 [0152.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF", dwFileAttributes=0x20) returned 0 [0152.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a078) returned 1 Thread: id = 2065 os_tid = 0x1be4 [0152.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf")) returned 0x20 [0152.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF", dwFileAttributes=0x20) returned 0 [0152.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.234] GetLastError () returned 0x5 [0152.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF", dwFileAttributes=0x20) returned 0 [0152.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d14f8) returned 1 Thread: id = 2066 os_tid = 0x1be8 [0152.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf")) returned 0x20 [0152.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF", dwFileAttributes=0x20) returned 0 [0152.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.237] GetLastError () returned 0x5 [0152.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF", dwFileAttributes=0x20) returned 0 [0152.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1590) returned 1 Thread: id = 2067 os_tid = 0x1bec [0152.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf")) returned 0x20 [0153.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF", dwFileAttributes=0x20) returned 0 [0153.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.902] GetLastError () returned 0x5 [0153.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF", dwFileAttributes=0x20) returned 0 [0153.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1628) returned 1 Thread: id = 2068 os_tid = 0x1bf0 [0152.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf")) returned 0x20 [0153.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF", dwFileAttributes=0x20) returned 0 [0153.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.975] GetLastError () returned 0x5 [0153.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF", dwFileAttributes=0x20) returned 0 [0153.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d16c0) returned 1 Thread: id = 2069 os_tid = 0x1bf4 [0152.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf")) returned 0x20 [0153.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF", dwFileAttributes=0x20) returned 0 [0153.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.979] GetLastError () returned 0x5 [0153.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF", dwFileAttributes=0x20) returned 0 [0153.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1758) returned 1 Thread: id = 2070 os_tid = 0x1bf8 [0152.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf")) returned 0x20 [0153.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF", dwFileAttributes=0x20) returned 0 [0153.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.973] GetLastError () returned 0x5 [0153.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF", dwFileAttributes=0x20) returned 0 [0153.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d17f0) returned 1 Thread: id = 2071 os_tid = 0x1bfc [0152.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf")) returned 0x20 [0153.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF", dwFileAttributes=0x20) returned 0 [0153.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.977] GetLastError () returned 0x5 [0153.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF", dwFileAttributes=0x20) returned 0 [0153.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 Thread: id = 2072 os_tid = 0x1c00 [0152.242] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url")) returned 0x20 [0153.781] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url", dwFileAttributes=0x20) returned 0 [0153.781] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.781] GetLastError () returned 0x5 [0153.781] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url", dwFileAttributes=0x20) returned 0 [0153.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f330d8) returned 1 Thread: id = 2073 os_tid = 0x1c04 [0152.244] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url")) returned 0x20 [0153.782] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url", dwFileAttributes=0x20) returned 0 [0153.782] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.782] GetLastError () returned 0x5 [0153.782] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url", dwFileAttributes=0x20) returned 0 [0153.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 2074 os_tid = 0x1c08 [0152.245] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url")) returned 0x20 [0153.783] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url", dwFileAttributes=0x20) returned 0 [0153.783] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.783] GetLastError () returned 0x5 [0153.784] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url", dwFileAttributes=0x20) returned 0 [0153.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32610) returned 1 Thread: id = 2075 os_tid = 0x1c0c [0152.246] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url")) returned 0x20 [0153.785] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url", dwFileAttributes=0x20) returned 0 [0153.785] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.785] GetLastError () returned 0x5 [0153.785] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url", dwFileAttributes=0x20) returned 0 [0153.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 Thread: id = 2076 os_tid = 0x1c10 [0152.246] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url")) returned 0x20 [0152.959] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url", dwFileAttributes=0x20) returned 0 [0152.959] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.960] GetLastError () returned 0x5 [0152.960] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url", dwFileAttributes=0x20) returned 0 [0152.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d370) returned 1 Thread: id = 2077 os_tid = 0x1c14 [0152.247] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url")) returned 0x20 [0152.961] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url", dwFileAttributes=0x20) returned 0 [0152.961] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.961] GetLastError () returned 0x5 [0152.961] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url", dwFileAttributes=0x20) returned 0 [0152.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 Thread: id = 2078 os_tid = 0x1c18 [0152.248] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\5d6x.mp3")) returned 0x20 [0152.248] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3", dwFileAttributes=0x20) returned 1 [0156.877] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\5d6x.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f9c [0156.877] GetFileSizeEx (in: hFile=0x1f9c, lpFileSize=0xbd9fc58 | out: lpFileSize=0xbd9fc58*=22734) returned 1 [0156.878] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x58ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.878] ReadFile (in: hFile=0x1f9c, lpBuffer=0xbd9fc64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd9fc40, lpOverlapped=0x0 | out: lpBuffer=0xbd9fc64*, lpNumberOfBytesRead=0xbd9fc40*=0x4, lpOverlapped=0x0) returned 1 [0156.879] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0156.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0156.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0156.880] NtQuerySystemTime (in: CurrentTime=0xbd9fbe0 | out: CurrentTime=0xbd9fbe0*=132471540253788000) returned 0x0 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x53b95f4f [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x3a06cdda [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x51929795 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x7a680dc1 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x22b1b16b [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x445034dc [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x6b858667 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x47aaa5f6 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x47f0e022 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x5bd80954 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x6660eabc [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x1307d75c [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x28f14d29 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x72df9bc0 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x50a4bb09 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0xff7cf96 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x25b469b3 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x15ec949c [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x5e9b1197 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x1162058c [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x6ea42e41 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x74894451 [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x604ac00a [0156.880] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x5ce61d4a [0156.881] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x29f5ba49 [0156.881] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x1c8799a0 [0156.881] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x3f6c19a3 [0156.881] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x4e2b2c60 [0156.881] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x2957a36a [0156.881] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x662097c7 [0156.881] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x63922001 [0156.881] RtlRandomEx (in: Seed=0xbd9fbd8 | out: Seed=0xbd9fbd8) returned 0x3d87dd5e [0157.118] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.118] ReadFile (in: hFile=0x1f9c, lpBuffer=0x809a458, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbd9fbe0, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0xbd9fbe0*=0x3c00, lpOverlapped=0x0) returned 1 [0157.118] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x830a300 [0157.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0157.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0157.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0157.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809e060 [0157.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0157.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0157.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0157.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0157.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a300) returned 1 [0157.120] WriteFile (in: hFile=0x1f9c, lpBuffer=0x809e060*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbd9fbe0, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesWritten=0xbd9fbe0*=0x3c00, lpOverlapped=0x0) returned 1 [0158.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0158.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0158.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4b838 [0158.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5610 [0158.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0158.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce90 [0158.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0158.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4ce90 [0158.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cee0 [0158.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0158.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0158.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0158.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5610) returned 1 [0158.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec940 [0158.426] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.426] WriteFile (in: hFile=0x1f9c, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xbd9fc4c, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xbd9fc4c*=0x102, lpOverlapped=0x0) returned 1 [0161.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0161.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0161.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cee0) returned 1 [0161.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b838) returned 1 [0161.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0161.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0161.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0161.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0161.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d41310 [0161.315] wcscpy (in: _Dest=0x3d41310, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3" [0161.315] wcscat (in: _Dest=0x3d41310, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3.f0dbec" [0161.315] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3.f0dbec", NtPathName=0xbd9fbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\5d6x.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0161.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e7c88 [0162.689] FlushFileBuffers (hFile=0x1f9c) returned 1 [0162.693] CloseHandle (hObject=0x1f9c) returned 1 [0162.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7150 [0162.703] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" [0162.703] wcscat (in: _Dest=0x2ff7150, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt" [0162.703] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\f0dbec-readme.txt")) returned 0x20 [0164.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 [0164.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187958) returned 1 Thread: id = 2079 os_tid = 0x1c1c [0152.248] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\bq_hd0srjrqeh.wav")) returned 0x20 [0152.248] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav", dwFileAttributes=0x20) returned 1 [0156.862] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\bq_hd0srjrqeh.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fa0 [0156.862] GetFileSizeEx (in: hFile=0x1fa0, lpFileSize=0xc38f7d0 | out: lpFileSize=0xc38f7d0*=13303) returned 1 [0156.862] SetFilePointerEx (in: hFile=0x1fa0, liDistanceToMove=0x33f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.862] ReadFile (in: hFile=0x1fa0, lpBuffer=0xc38f7dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc38f7b8, lpOverlapped=0x0 | out: lpBuffer=0xc38f7dc*, lpNumberOfBytesRead=0xc38f7b8*=0x4, lpOverlapped=0x0) returned 1 [0156.864] SetFilePointerEx (in: hFile=0x1fa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0156.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0156.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0156.865] NtQuerySystemTime (in: CurrentTime=0xc38f758 | out: CurrentTime=0xc38f758*=132471540253632000) returned 0x0 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x13848691 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x1f0892dc [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x299b9be1 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x6d3db4f3 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x7582eb18 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x7ca8f58 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x6c5867d5 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x4f0863c [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x61c8b2ba [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x685ae91a [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x3d6bd334 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x4cabe075 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x7d655fd6 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x67a6d08e [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x66683aa0 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x68e48fbf [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x1c8740e5 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x66e8f175 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x666121f7 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x203c17fc [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x2972db49 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x573ac4a9 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x65f982ce [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x39b18f85 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0xa663245 [0156.865] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x5474cd39 [0156.866] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x46d9e2ba [0156.866] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x12ef019b [0156.866] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x43e32d70 [0156.866] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x9f7bb7e [0156.866] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x12e0dc4c [0156.866] RtlRandomEx (in: Seed=0xc38f750 | out: Seed=0xc38f750) returned 0x3960446c [0156.876] ReadFile (in: hFile=0x1fa0, lpBuffer=0x81680a0, nNumberOfBytesToRead=0x33f7, lpNumberOfBytesRead=0xc38f74c, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesRead=0xc38f74c*=0x33f7, lpOverlapped=0x0) returned 1 [0156.876] SetFilePointerEx (in: hFile=0x1fa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.877] WriteFile (in: hFile=0x1fa0, lpBuffer=0x816bca8*, nNumberOfBytesToWrite=0x33f7, lpNumberOfBytesWritten=0xc38f750, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesWritten=0xc38f750*=0x33f7, lpOverlapped=0x0) returned 1 [0156.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0156.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0156.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0156.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0156.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0156.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0156.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a300) returned 1 [0156.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77c58 [0156.979] SetFilePointerEx (in: hFile=0x1fa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.979] WriteFile (in: hFile=0x1fa0, lpBuffer=0x3d57278*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xc38f7c4, lpOverlapped=0x0 | out: lpBuffer=0x3d57278*, lpNumberOfBytesWritten=0xc38f7c4*=0x114, lpOverlapped=0x0) returned 1 [0157.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 [0157.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77de0) returned 1 [0157.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0157.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c58) returned 1 [0157.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0157.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0157.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0157.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0157.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d66b0 [0157.016] wcscpy (in: _Dest=0x81d66b0, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav" [0157.016] wcscat (in: _Dest=0x81d66b0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav.f0dbec" [0157.016] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav.f0dbec", NtPathName=0xc38f748, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\bQ_hd0SrjrQEH.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0157.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8b88 [0157.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 [0157.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804f6f8) returned 1 [0157.032] NtQueryInformationFile (in: FileHandle=0x1fa0, IoStatusBlock=0xc38f720, FileInformation=0xc38f728, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc38f720, FileInformation=0xc38f728) returned 0x0 [0157.032] NtSetInformationFile (FileHandle=0x1fa0, IoStatusBlock=0xc38f720, FileInformation=0xc38f728, Length=0x28, FileInformationClass=0x4) returned 0x0 [0157.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d66b0) returned 1 [0157.047] FlushFileBuffers (hFile=0x1fa0) returned 1 [0157.050] CloseHandle (hObject=0x1fa0) returned 1 [0157.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e1d78 [0157.057] wcscpy (in: _Dest=0x81e1d78, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" [0157.057] wcscat (in: _Dest=0x81e1d78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt" [0157.057] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\f0dbec-readme.txt")) returned 0xffffffff [0157.057] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x24bc [0162.083] WriteFile (in: hFile=0x24bc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc38f76c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc38f76c*=0x70c, lpOverlapped=0x0) returned 1 [0164.731] CloseHandle (hObject=0x24bc) returned 1 [0164.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1d78) returned 1 [0164.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 Thread: id = 2080 os_tid = 0x1c20 [0152.249] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\pg lou6qffomnv6.mp3")) returned 0x20 [0152.249] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3", dwFileAttributes=0x20) returned 1 [0156.845] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\pg lou6qffomnv6.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fa4 [0156.845] GetFileSizeEx (in: hFile=0x1fa4, lpFileSize=0x953fde0 | out: lpFileSize=0x953fde0*=79612) returned 1 [0156.845] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x136f8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.845] ReadFile (in: hFile=0x1fa4, lpBuffer=0x953fdec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x953fdc8, lpOverlapped=0x0 | out: lpBuffer=0x953fdec*, lpNumberOfBytesRead=0x953fdc8*=0x4, lpOverlapped=0x0) returned 1 [0156.847] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0156.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c720 [0156.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0156.847] NtQuerySystemTime (in: CurrentTime=0x953fd68 | out: CurrentTime=0x953fd68*=132471540253476000) returned 0x0 [0156.847] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x4ae0ea6 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x44d076e8 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x11532743 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x37c5b6de [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x27aeea13 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x68bd3d3d [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x439f057b [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x16af9f11 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x74e9eaf8 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x52ead68c [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x26fd4d6f [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0xf0958 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x187684fd [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x14ad1eb [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x130f09ec [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x3bc65007 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x1bea377f [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x7b61ef6c [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x122e801d [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x2c4cf1c8 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x107cbc2c [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x6296ffad [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x33947f19 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x1e409614 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x3424e191 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x1b2e2618 [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x133d168f [0156.848] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x471b9be9 [0156.849] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x487c4fe3 [0156.849] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x66410d61 [0156.849] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x5a3d64c2 [0156.849] RtlRandomEx (in: Seed=0x953fd60 | out: Seed=0x953fd60) returned 0x6914ee28 [0156.860] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.860] ReadFile (in: hFile=0x1fa4, lpBuffer=0x8160890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x953fd68, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0x953fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0156.860] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x830a300 [0156.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0156.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0156.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0156.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0156.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0156.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0156.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0156.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0156.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a300) returned 1 [0156.861] WriteFile (in: hFile=0x1fa4, lpBuffer=0x8164498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x953fd68, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesWritten=0x953fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0156.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0156.973] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.973] ReadFile (in: hFile=0x1fa4, lpBuffer=0x8160890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x953fd68, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0x953fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0156.973] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309388 [0156.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0156.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0156.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0156.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0156.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0156.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0156.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0156.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0156.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309388) returned 1 [0156.974] WriteFile (in: hFile=0x1fa4, lpBuffer=0x8164498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x953fd68, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesWritten=0x953fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0156.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0156.980] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0xfafc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.980] ReadFile (in: hFile=0x1fa4, lpBuffer=0x8160890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x953fd68, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0x953fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0156.980] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0xfafc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x830a300 [0156.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0156.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0156.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0156.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0156.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0156.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0156.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0156.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0156.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a300) returned 1 [0156.981] WriteFile (in: hFile=0x1fa4, lpBuffer=0x8164498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x953fd68, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesWritten=0x953fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0156.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0156.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d1d0 [0158.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0158.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f377d8 [0158.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49bc8 [0158.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b838 [0158.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b838) returned 1 [0158.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0158.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3690) returned 1 [0158.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x158) returned 0x3dce3d8 [0158.337] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.337] WriteFile (in: hFile=0x1fa4, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x953fdd4, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0x953fdd4*=0x158, lpOverlapped=0x0) returned 1 [0158.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0158.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f377d8) returned 1 [0158.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0158.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37e18) returned 1 [0158.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d1d0) returned 1 [0158.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c720) returned 1 [0158.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0158.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0158.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e351b8 [0158.753] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3" [0158.753] wcscat (in: _Dest=0x3e351b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3.f0dbec" [0158.753] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3.f0dbec", NtPathName=0x953fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\pG LOU6QffoMNv6.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8b88 [0158.753] NtSetInformationFile (FileHandle=0x1fa4, IoStatusBlock=0x953fd60, FileInformation=0x2c8b88, Length=0xd6, FileInformationClass=0xa) returned 0x0 [0159.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 [0159.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f011a0) returned 1 [0159.267] NtQueryInformationFile (in: FileHandle=0x1fa4, IoStatusBlock=0x953fd30, FileInformation=0x953fd38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x953fd30, FileInformation=0x953fd38) returned 0x0 [0159.267] NtSetInformationFile (FileHandle=0x1fa4, IoStatusBlock=0x953fd30, FileInformation=0x953fd38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0159.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.269] FlushFileBuffers (hFile=0x1fa4) returned 1 [0159.282] CloseHandle (hObject=0x1fa4) returned 1 [0159.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e1b50 [0159.284] wcscpy (in: _Dest=0x81e1b50, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\" [0159.284] wcscat (in: _Dest=0x81e1b50, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt" [0159.284] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\3ayWqTk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\3aywqtk\\f0dbec-readme.txt")) returned 0x20 [0159.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1b50) returned 1 [0159.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 2081 os_tid = 0x1c24 [0152.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39468 [0152.250] wcscpy (in: _Dest=0x3f39468, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0152.250] wcscat (in: _Dest=0x3f39468, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\" [0152.250] wcscat (in: _Dest=0x3f39468, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*" [0152.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090478 [0152.250] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0152.250] wcscmp (_String1=".", _String2=".") returned 0 [0152.250] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.250] wcscmp (_String1="..", _String2=".") returned 1 [0152.250] wcscmp (_String1="..", _String2="..") returned 0 [0152.250] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0152.250] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2=".") returned 1 [0152.250] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2="..") returned 1 [0152.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7710 [0152.250] wcscpy (in: _Dest=0x2ff7710, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0152.250] wcscat (in: _Dest=0x2ff7710, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\" [0152.250] wcscat (in: _Dest=0x2ff7710, _Source="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0156.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2ff7710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0156.354] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0156.355] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2=".") returned 1 [0156.355] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2="..") returned 1 [0156.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41988 [0156.355] wcscpy (in: _Dest=0x3d41988, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0156.355] wcscat (in: _Dest=0x3d41988, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\" [0156.355] wcscat (in: _Dest=0x3d41988, _Source="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0156.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d41988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2960 [0156.357] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0156.357] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0156.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090478) returned 1 [0156.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39468) returned 1 [0156.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39af8) returned 1 Thread: id = 2082 os_tid = 0x1c28 [0152.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39fc8 [0152.251] wcscpy (in: _Dest=0x3f39fc8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0152.251] wcscat (in: _Dest=0x3f39fc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\" [0152.251] wcscat (in: _Dest=0x3f39fc8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*" [0152.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80906e0 [0152.251] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0152.251] wcscmp (_String1=".", _String2=".") returned 0 [0152.251] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.251] wcscmp (_String1="..", _String2=".") returned 1 [0152.251] wcscmp (_String1="..", _String2="..") returned 0 [0152.251] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0152.251] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2=".") returned 1 [0152.251] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2="..") returned 1 [0152.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff72c0 [0152.251] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0152.252] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\" [0152.252] wcscat (in: _Dest=0x2ff72c0, _Source="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0159.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d40b28 [0159.373] wcscpy (in: _Dest=0x3d40b28, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0159.373] wcscat (in: _Dest=0x3d40b28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0159.374] wcscat (in: _Dest=0x3d40b28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" [0159.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0159.374] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0159.374] wcscmp (_String1=".", _String2=".") returned 0 [0159.374] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.374] wcscmp (_String1="..", _String2=".") returned 1 [0159.374] wcscmp (_String1="..", _String2="..") returned 0 [0159.374] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0159.374] wcscmp (_String1="en-US", _String2=".") returned 1 [0159.374] wcscmp (_String1="en-US", _String2="..") returned 1 [0159.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0159.374] wcscpy (in: _Dest=0x333828, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0159.374] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0159.374] wcscat (in: _Dest=0x333828, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0159.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e351b8 [0159.374] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0159.374] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0159.374] wcscat (in: _Dest=0x3e351b8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" [0159.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d852d8 [0159.375] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0159.375] wcscmp (_String1=".", _String2=".") returned 0 [0159.375] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.375] wcscmp (_String1="..", _String2=".") returned 1 [0159.375] wcscmp (_String1="..", _String2="..") returned 0 [0159.375] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0159.375] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0159.375] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0159.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8b88 [0159.375] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0159.375] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0159.375] wcscat (in: _Dest=0x2c8b88, _Source="resource.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" [0159.375] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20 [0159.376] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.376] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.376] GetLastError () returned 0x5 [0159.376] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 [0159.376] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0159.376] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0159.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852d8) returned 1 [0159.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.377] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0159.377] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0159.377] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0159.377] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0159.377] wcscmp (_String1="netfol.ico", _String2=".") returned 1 [0159.377] wcscmp (_String1="netfol.ico", _String2="..") returned 1 [0159.377] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647e2d64, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647e2d64, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0159.377] wcscmp (_String1="pictures.ico", _String2=".") returned 1 [0159.377] wcscmp (_String1="pictures.ico", _String2="..") returned 1 [0159.377] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0159.377] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0159.377] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0159.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1b218 [0159.377] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0159.377] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0159.377] wcscat (in: _Dest=0x3e1b218, _Source="resource.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" [0159.377] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20 [0159.377] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.378] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.378] GetLastError () returned 0x5 [0159.378] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 [0159.378] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0159.378] wcscmp (_String1="ringtones.ico", _String2=".") returned 1 [0159.378] wcscmp (_String1="ringtones.ico", _String2="..") returned 1 [0159.378] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0159.378] wcscmp (_String1="settings.ico", _String2=".") returned 1 [0159.378] wcscmp (_String1="settings.ico", _String2="..") returned 1 [0159.378] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6482f024, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6482f024, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0159.378] wcscmp (_String1="sync.ico", _String2=".") returned 1 [0159.378] wcscmp (_String1="sync.ico", _String2="..") returned 1 [0159.378] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1137e43c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1137e43c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0159.378] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0159.378] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0159.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e351b8 [0159.378] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0159.378] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0159.379] wcscat (in: _Dest=0x3e351b8, _Source="tasks.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" [0159.379] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20 [0159.379] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0159.379] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.379] GetLastError () returned 0x5 [0159.379] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0159.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.379] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0159.379] wcscmp (_String1="wmp.ico", _String2=".") returned 1 [0159.379] wcscmp (_String1="wmp.ico", _String2="..") returned 1 [0159.380] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0159.380] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0159.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0159.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b28) returned 1 [0159.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 [0159.380] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0159.380] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2=".") returned 1 [0159.380] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2="..") returned 1 [0159.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff72c0 [0159.380] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0159.380] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\" [0159.380] wcscat (in: _Dest=0x2ff72c0, _Source="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0159.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff68b0 [0159.380] wcscpy (in: _Dest=0x2ff68b0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0159.380] wcscat (in: _Dest=0x2ff68b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0159.380] wcscat (in: _Dest=0x2ff68b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" [0159.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0159.381] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0159.382] wcscmp (_String1=".", _String2=".") returned 0 [0159.382] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.382] wcscmp (_String1="..", _String2=".") returned 1 [0159.382] wcscmp (_String1="..", _String2="..") returned 0 [0159.382] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0159.382] wcscmp (_String1="en-US", _String2=".") returned 1 [0159.382] wcscmp (_String1="en-US", _String2="..") returned 1 [0159.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0159.382] wcscpy (in: _Dest=0x333828, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0159.382] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0159.382] wcscat (in: _Dest=0x333828, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0159.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e351b8 [0159.383] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0159.383] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0159.383] wcscat (in: _Dest=0x3e351b8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" [0159.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d852d8 [0159.383] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0159.383] wcscmp (_String1=".", _String2=".") returned 0 [0159.383] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.383] wcscmp (_String1="..", _String2=".") returned 1 [0159.383] wcscmp (_String1="..", _String2="..") returned 0 [0159.383] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0159.383] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0159.383] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0159.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8b88 [0159.383] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0159.383] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0159.383] wcscat (in: _Dest=0x2c8b88, _Source="resource.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" [0159.384] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20 [0159.384] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.384] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.384] GetLastError () returned 0x5 [0159.384] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 [0159.384] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0159.384] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0159.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852d8) returned 1 [0159.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.385] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0159.390] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0159.390] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0159.390] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8343e21, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8343e21, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0159.390] wcscmp (_String1="print_pref.ico", _String2=".") returned 1 [0159.390] wcscmp (_String1="print_pref.ico", _String2="..") returned 1 [0159.390] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8369f80, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8369f80, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0159.390] wcscmp (_String1="print_property.ico", _String2=".") returned 1 [0159.390] wcscmp (_String1="print_property.ico", _String2="..") returned 1 [0159.390] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0159.390] wcscmp (_String1="print_queue.ico", _String2=".") returned 1 [0159.390] wcscmp (_String1="print_queue.ico", _String2="..") returned 1 [0159.390] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0159.390] wcscmp (_String1="scan_.ico", _String2=".") returned 1 [0159.390] wcscmp (_String1="scan_.ico", _String2="..") returned 1 [0159.390] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0159.390] wcscmp (_String1="scan_property.ico", _String2=".") returned 1 [0159.390] wcscmp (_String1="scan_property.ico", _String2="..") returned 1 [0159.390] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83dc39d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83dc39d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0159.391] wcscmp (_String1="scan_settings.ico", _String2=".") returned 1 [0159.391] wcscmp (_String1="scan_settings.ico", _String2="..") returned 1 [0159.391] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0159.391] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0159.391] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0159.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e351b8 [0159.391] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0159.391] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0159.391] wcscat (in: _Dest=0x3e351b8, _Source="tasks.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" [0159.391] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20 [0159.391] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0159.391] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.392] GetLastError () returned 0x5 [0159.392] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0159.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.392] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0159.392] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0159.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0159.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff68b0) returned 1 [0159.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 [0159.394] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0159.394] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0159.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80906e0) returned 1 [0159.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39fc8) returned 1 [0159.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 2083 os_tid = 0x1c2c [0152.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11788 [0152.252] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0152.252] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\" [0152.252] wcscat (in: _Dest=0x3e11788, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*" [0152.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a470 [0152.252] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d90 [0152.963] wcscmp (_String1=".", _String2=".") returned 0 [0152.963] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.963] wcscmp (_String1="..", _String2=".") returned 1 [0152.963] wcscmp (_String1="..", _String2="..") returned 0 [0152.963] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0152.963] wcscmp (_String1="support", _String2=".") returned 1 [0152.963] wcscmp (_String1="support", _String2="..") returned 1 [0152.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81867a0 [0152.963] wcscpy (in: _Dest=0x81867a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0152.963] wcscat (in: _Dest=0x81867a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\" [0152.963] wcscat (in: _Dest=0x81867a0, _Source="support" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0156.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81867a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0156.649] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0156.649] FindClose (in: hFindFile=0x8098d90 | out: hFindFile=0x8098d90) returned 1 [0156.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a470) returned 1 [0156.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 [0156.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ab28) returned 1 Thread: id = 2084 os_tid = 0x1c30 [0152.253] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\cxl1scvuqp44ui7s.mp3")) returned 0x20 [0152.253] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3", dwFileAttributes=0x20) returned 1 [0156.827] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\cxl1scvuqp44ui7s.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fb0 [0156.828] GetFileSizeEx (in: hFile=0x1fb0, lpFileSize=0xc8bfb88 | out: lpFileSize=0xc8bfb88*=52020) returned 1 [0156.828] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0xcb30, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.828] ReadFile (in: hFile=0x1fb0, lpBuffer=0xc8bfb94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc8bfb70, lpOverlapped=0x0 | out: lpBuffer=0xc8bfb94*, lpNumberOfBytesRead=0xc8bfb70*=0x4, lpOverlapped=0x0) returned 1 [0156.830] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0156.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0156.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0156.830] NtQuerySystemTime (in: CurrentTime=0xc8bfb10 | out: CurrentTime=0xc8bfb10*=132471540253320000) returned 0x0 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x7c346ed3 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x1e52e7d7 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x4ca0ef0e [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x6d1dd8f1 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x2bc3f27b [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0xeace656 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x34c6b753 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x4ed68f60 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x5e2bb2a1 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x49bdf598 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x7183e861 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x1caf30bd [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x546ad916 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x7f72abca [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x7787a343 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x2340bb78 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x7eb7ab74 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x5dde2bd5 [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x4c0e5f3d [0156.830] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x28cacabf [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0xe5be44a [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x7632bc70 [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x7600546d [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x1cf74c2a [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x35b38a68 [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x2edf42a6 [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x4b80098d [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x4a964cbc [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0xcdbafba [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x3261674 [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0x2419a02f [0156.831] RtlRandomEx (in: Seed=0xc8bfb08 | out: Seed=0xc8bfb08) returned 0xf0ec17d [0156.843] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.843] ReadFile (in: hFile=0x1fb0, lpBuffer=0x8159080, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc8bfb10, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesRead=0xc8bfb10*=0x3c00, lpOverlapped=0x0) returned 1 [0156.843] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x830a300 [0156.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0156.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0156.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bdc0) returned 1 [0156.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0156.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0156.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0156.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0156.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0156.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a300) returned 1 [0156.844] WriteFile (in: hFile=0x1fb0, lpBuffer=0x815cc88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc8bfb10, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesWritten=0xc8bfb10*=0x3c00, lpOverlapped=0x0) returned 1 [0156.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0156.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0156.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37c18 [0156.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0156.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37b58 [0156.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0156.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0156.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0156.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0156.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309388) returned 1 [0156.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d575f0 [0156.970] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.970] WriteFile (in: hFile=0x1fb0, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xc8bfb7c, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0xc8bfb7c*=0x11a, lpOverlapped=0x0) returned 1 [0157.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0157.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37b58) returned 1 [0157.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0157.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37c18) returned 1 [0157.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bdc0) returned 1 [0157.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0157.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1a8) returned 1 [0157.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0157.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dbd28 [0157.008] wcscpy (in: _Dest=0x81dbd28, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3" [0157.008] wcscat (in: _Dest=0x81dbd28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3.f0dbec" [0157.008] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3.f0dbec", NtPathName=0xc8bfb00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\cxl1ScVuQp44uI7s.mp3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0157.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x81e1d78 [0157.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1d78) returned 1 [0157.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81cf6a0) returned 1 [0157.024] NtQueryInformationFile (in: FileHandle=0x1fb0, IoStatusBlock=0xc8bfad8, FileInformation=0xc8bfae0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc8bfad8, FileInformation=0xc8bfae0) returned 0x0 [0157.024] NtSetInformationFile (FileHandle=0x1fb0, IoStatusBlock=0xc8bfad8, FileInformation=0xc8bfae0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0157.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbd28) returned 1 [0157.038] FlushFileBuffers (hFile=0x1fb0) returned 1 [0157.042] CloseHandle (hObject=0x1fb0) returned 1 [0157.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81ddd08 [0157.052] wcscpy (in: _Dest=0x81ddd08, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" [0157.052] wcscat (in: _Dest=0x81ddd08, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt" [0157.052] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\f0dbec-readme.txt")) returned 0xffffffff [0157.052] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fb0 [0157.058] WriteFile (in: hFile=0x1fb0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc8bfb24, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc8bfb24*=0x70c, lpOverlapped=0x0) returned 1 [0158.896] CloseHandle (hObject=0x1fb0) returned 1 [0159.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd08) returned 1 [0159.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a8c8) returned 1 Thread: id = 2085 os_tid = 0x1c34 [0152.253] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\l6zmef0ht.m4a")) returned 0x20 [0152.253] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a", dwFileAttributes=0x20) returned 1 [0156.807] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\l6zmef0ht.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fb4 [0156.808] GetFileSizeEx (in: hFile=0x1fb4, lpFileSize=0xa53fe00 | out: lpFileSize=0xa53fe00*=12065) returned 1 [0156.808] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x2f1d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.808] ReadFile (in: hFile=0x1fb4, lpBuffer=0xa53fe0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa53fde8, lpOverlapped=0x0 | out: lpBuffer=0xa53fe0c*, lpNumberOfBytesRead=0xa53fde8*=0x4, lpOverlapped=0x0) returned 1 [0156.810] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0156.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0156.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0156.810] NtQuerySystemTime (in: CurrentTime=0xa53fd88 | out: CurrentTime=0xa53fd88*=132471540253008000) returned 0x0 [0156.810] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0xe0c1b2f [0156.810] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x21d3691d [0156.810] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x2b232195 [0156.810] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x416e9a81 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x1e061aa7 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x4e01eaeb [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x30e94db6 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x674261c3 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x14192420 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x663922a8 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x6ef19a4 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x767e0c57 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x769ca4cb [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x325c4842 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x76ac11e0 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x17ccff7c [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x4069e7f8 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x12a91aef [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x4eabb6a0 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x301c1af3 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x66299544 [0156.811] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x4d2c0fbf [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x3ccb7803 [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x1542f453 [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x62f1c2a [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x1fede447 [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x12d388f9 [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x6d1dd8f1 [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x3ce7670 [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x4551fea7 [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x3424e191 [0156.812] RtlRandomEx (in: Seed=0xa53fd80 | out: Seed=0xa53fd80) returned 0x44bec3e9 [0156.826] ReadFile (in: hFile=0x1fb4, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x2f21, lpNumberOfBytesRead=0xa53fd7c, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0xa53fd7c*=0x2f21, lpOverlapped=0x0) returned 1 [0156.827] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.827] WriteFile (in: hFile=0x1fb4, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x2f21, lpNumberOfBytesWritten=0xa53fd80, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xa53fd80*=0x2f21, lpOverlapped=0x0) returned 1 [0156.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0156.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0156.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0156.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0156.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0156.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0156.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309388) returned 1 [0156.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70128 [0156.966] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.966] WriteFile (in: hFile=0x1fb4, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa53fdf4, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xa53fdf4*=0x10c, lpOverlapped=0x0) returned 1 [0158.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0158.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700f8) returned 1 [0158.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0158.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70128) returned 1 [0158.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0158.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0158.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0158.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0158.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ce18 [0158.815] wcscpy (in: _Dest=0x32ce18, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a" [0158.815] wcscat (in: _Dest=0x32ce18, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a.f0dbec" [0158.815] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a.f0dbec", NtPathName=0xa53fd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\L6ZmeF0HT.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187b50 [0158.816] NtSetInformationFile (FileHandle=0x1fb4, IoStatusBlock=0xa53fd80, FileInformation=0x8187b50, Length=0xa0, FileInformationClass=0xa) returned 0x0 [0159.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187b50) returned 1 [0159.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b0958) returned 1 [0159.343] NtQueryInformationFile (in: FileHandle=0x1fb4, IoStatusBlock=0xa53fd50, FileInformation=0xa53fd58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa53fd50, FileInformation=0xa53fd58) returned 0x0 [0159.343] NtSetInformationFile (FileHandle=0x1fb4, IoStatusBlock=0xa53fd50, FileInformation=0xa53fd58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0159.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ce18) returned 1 [0159.345] FlushFileBuffers (hFile=0x1fb4) returned 1 [0159.346] CloseHandle (hObject=0x1fb4) returned 1 [0159.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de608 [0159.347] wcscpy (in: _Dest=0x81de608, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" [0159.347] wcscat (in: _Dest=0x81de608, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt" [0159.347] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\f0dbec-readme.txt")) returned 0x20 [0159.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de608) returned 1 [0159.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 2086 os_tid = 0x1c38 [0152.255] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\y_hoxjqabwoal2auq5w.m4a")) returned 0x20 [0152.255] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a", dwFileAttributes=0x20) returned 1 [0162.094] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\y_hoxjqabwoal2auq5w.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fb8 [0162.094] GetFileSizeEx (in: hFile=0x1fb8, lpFileSize=0xc48fa58 | out: lpFileSize=0xc48fa58*=30584) returned 1 [0162.094] SetFilePointerEx (in: hFile=0x1fb8, liDistanceToMove=0x7774, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.094] ReadFile (in: hFile=0x1fb8, lpBuffer=0xc48fa64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc48fa40, lpOverlapped=0x0 | out: lpBuffer=0xc48fa64*, lpNumberOfBytesRead=0xc48fa40*=0x4, lpOverlapped=0x0) returned 1 [0162.096] SetFilePointerEx (in: hFile=0x1fb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0162.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0162.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0162.096] NtQuerySystemTime (in: CurrentTime=0xc48f9e0 | out: CurrentTime=0xc48f9e0*=132471540303240000) returned 0x0 [0162.096] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x47065c4a [0162.096] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x49b2cae1 [0162.096] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x486228f1 [0162.096] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x9301bdc [0162.096] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x6c08f0e9 [0162.096] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x329af9e9 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x42008380 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x701c2529 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x2ce9d500 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x639f0cfb [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x29e69780 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x154c72a4 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x6d120d27 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x4e91b1b8 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x711a6d5a [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x18d8286 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x203a3b15 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x5fec5090 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x5a5744bd [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x38ee5696 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x3a37b4c7 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x72d45496 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0xc7f8419 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x168d6b03 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x3fc1d620 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x6ebb1cde [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0xee1d526 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x32339967 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x3af15837 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x34e55320 [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x54b770ec [0162.097] RtlRandomEx (in: Seed=0xc48f9d8 | out: Seed=0xc48f9d8) returned 0x46ee3c2f [0162.106] SetFilePointerEx (in: hFile=0x1fb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.106] ReadFile (in: hFile=0x1fb8, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc48f9e0, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0xc48f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0162.106] SetFilePointerEx (in: hFile=0x1fb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e6650 [0162.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32c28 [0162.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0162.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0162.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bfca8 [0162.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0162.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0162.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0162.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0162.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6650) returned 1 [0162.107] WriteFile (in: hFile=0x1fb8, lpBuffer=0x80bfca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc48f9e0, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesWritten=0xc48f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0164.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0164.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0164.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x8309fa0 [0164.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0164.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x8309460 [0164.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0164.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ea8 [0164.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ea8) returned 1 [0164.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0164.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f50) returned 1 [0164.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d575f0 [0164.763] SetFilePointerEx (in: hFile=0x1fb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.763] WriteFile (in: hFile=0x1fb8, lpBuffer=0x3d575f0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xc48fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3d575f0*, lpNumberOfBytesWritten=0xc48fa4c*=0x120, lpOverlapped=0x0) returned 1 [0167.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0167.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309460) returned 1 [0167.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0167.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309fa0) returned 1 [0167.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0167.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0167.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0167.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0167.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186c38 [0167.024] wcscpy (in: _Dest=0x8186c38, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a" [0167.024] wcscat (in: _Dest=0x8186c38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a.f0dbec" [0167.024] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a.f0dbec", NtPathName=0xc48f9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\Y_hoxjqAbWoaL2aUq5w.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333e28 [0167.027] FlushFileBuffers (hFile=0x1fb8) returned 1 [0167.029] CloseHandle (hObject=0x1fb8) returned 1 [0167.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de218 [0167.030] wcscpy (in: _Dest=0x81de218, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\" [0167.030] wcscat (in: _Dest=0x81de218, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt" [0167.030] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\niLM\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\nilm\\f0dbec-readme.txt")) returned 0x20 [0167.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 [0167.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b2e0) returned 1 Thread: id = 2087 os_tid = 0x1c3c [0152.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json")) returned 0x20 [0152.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0152.964] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.964] GetLastError () returned 0x5 [0152.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0152.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6070) returned 1 Thread: id = 2088 os_tid = 0x1c40 [0152.256] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d")) returned 0x2026 [0152.258] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x20) returned 0 [0152.258] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.258] GetLastError () returned 0x5 [0152.258] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x2026) returned 0 [0152.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187568) returned 1 Thread: id = 2089 os_tid = 0x1c44 [0152.259] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w")) returned 0x2026 [0152.259] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x20) returned 0 [0152.259] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.259] GetLastError () returned 0x5 [0152.259] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x2026) returned 0 [0152.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186458) returned 1 Thread: id = 2090 os_tid = 0x1c48 [0152.266] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w")) returned 0x2026 [0152.266] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x20) returned 0 [0152.267] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.267] GetLastError () returned 0x5 [0152.267] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x2026) returned 0 [0152.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186500) returned 1 Thread: id = 2091 os_tid = 0x1c4c [0152.268] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h")) returned 0x2026 [0152.268] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x20) returned 0 [0152.268] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.268] GetLastError () returned 0x5 [0152.268] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x2026) returned 0 [0152.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 2092 os_tid = 0x1c50 [0152.269] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d")) returned 0x2026 [0152.270] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x20) returned 0 [0152.270] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.270] GetLastError () returned 0x5 [0152.270] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x2026) returned 0 [0152.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 Thread: id = 2093 os_tid = 0x1c54 [0152.276] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck")) returned 0x2026 [0152.276] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0152.276] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.277] GetLastError () returned 0x5 [0152.277] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x2026) returned 0 [0152.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81867a0) returned 1 Thread: id = 2094 os_tid = 0x1c58 [0152.278] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q")) returned 0x2026 [0152.278] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x20) returned 0 [0152.279] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.279] GetLastError () returned 0x5 [0152.279] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x2026) returned 0 [0152.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e657a0) returned 1 Thread: id = 2095 os_tid = 0x1c5c [0152.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\access-bridge.jar")) returned 0x20 [0152.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar", dwFileAttributes=0x20) returned 0 [0152.283] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\access-bridge.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.283] GetLastError () returned 0x5 [0152.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar", dwFileAttributes=0x20) returned 0 [0152.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32868) returned 1 Thread: id = 2096 os_tid = 0x1c60 [0152.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\dnsns.jar")) returned 0x20 [0152.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar", dwFileAttributes=0x20) returned 0 [0152.285] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.285] GetLastError () returned 0x5 [0152.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar", dwFileAttributes=0x20) returned 0 [0152.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d1d0) returned 1 Thread: id = 2097 os_tid = 0x1c64 [0152.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\jaccess.jar")) returned 0x20 [0152.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar", dwFileAttributes=0x20) returned 0 [0152.287] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.287] GetLastError () returned 0x5 [0152.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar", dwFileAttributes=0x20) returned 0 [0152.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c810) returned 1 Thread: id = 2098 os_tid = 0x1c68 [0152.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\localedata.jar")) returned 0x20 [0152.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar", dwFileAttributes=0x20) returned 0 [0152.289] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.289] GetLastError () returned 0x5 [0152.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar", dwFileAttributes=0x20) returned 0 [0152.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a038) returned 1 Thread: id = 2099 os_tid = 0x1c6c [0152.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\meta-index")) returned 0x20 [0153.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index", dwFileAttributes=0x20) returned 0 [0153.786] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.251] GetLastError () returned 0x5 [0155.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index", dwFileAttributes=0x20) returned 0 [0155.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cbb8) returned 1 Thread: id = 2100 os_tid = 0x1c70 [0152.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunec.jar")) returned 0x20 [0155.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar", dwFileAttributes=0x20) returned 0 [0155.825] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.825] GetLastError () returned 0x5 [0155.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar", dwFileAttributes=0x20) returned 0 [0155.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e8f8) returned 1 Thread: id = 2101 os_tid = 0x1c74 [0152.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0155.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x20) returned 0 [0155.827] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.827] GetLastError () returned 0x5 [0155.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x20) returned 0 [0155.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 Thread: id = 2102 os_tid = 0x1c78 [0152.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0155.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x20) returned 0 [0155.253] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.253] GetLastError () returned 0x5 [0155.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x20) returned 0 [0155.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f399a8) returned 1 Thread: id = 2103 os_tid = 0x1c7c [0152.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0155.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x20) returned 0 [0155.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.829] GetLastError () returned 0x5 [0155.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x20) returned 0 [0155.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a3b8) returned 1 Thread: id = 2104 os_tid = 0x1c80 [0152.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\zipfs.jar")) returned 0x20 [0155.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar", dwFileAttributes=0x20) returned 0 [0155.241] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.249] GetLastError () returned 0x5 [0155.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar", dwFileAttributes=0x20) returned 0 [0155.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 Thread: id = 2105 os_tid = 0x1c84 [0152.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e248c0 [0152.303] wcscpy (in: _Dest=0x3e248c0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0152.303] wcscat (in: _Dest=0x3e248c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0152.303] wcscat (in: _Dest=0x3e248c0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*" [0152.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0152.304] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0152.304] wcscmp (_String1=".", _String2=".") returned 0 [0152.304] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.304] wcscmp (_String1="..", _String2=".") returned 1 [0152.304] wcscmp (_String1="..", _String2="..") returned 0 [0152.304] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0152.304] wcscmp (_String1="Accessories", _String2=".") returned 1 [0152.304] wcscmp (_String1="Accessories", _String2="..") returned 1 [0152.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d1590 [0152.304] wcscpy (in: _Dest=0x81d1590, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0152.304] wcscat (in: _Dest=0x81d1590, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0152.304] wcscat (in: _Dest=0x81d1590, _Source="Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0156.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d1590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0156.360] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0156.360] wcscmp (_String1="Administrative Tools", _String2=".") returned 1 [0156.361] wcscmp (_String1="Administrative Tools", _String2="..") returned 1 [0156.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8188090 [0156.361] wcscpy (in: _Dest=0x8188090, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.361] wcscat (in: _Dest=0x8188090, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.361] wcscat (in: _Dest=0x8188090, _Source="Administrative Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0156.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8188090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2964 [0156.363] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f02380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1f02380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1f02380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0156.363] wcscmp (_String1="Adobe Reader X.lnk", _String2=".") returned 1 [0156.363] wcscmp (_String1="Adobe Reader X.lnk", _String2="..") returned 1 [0156.363] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3b1d58, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0156.363] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0156.363] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0156.363] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0156.364] wcscmp (_String1="Games", _String2=".") returned 1 [0156.364] wcscmp (_String1="Games", _String2="..") returned 1 [0156.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf118 [0156.365] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.365] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.365] wcscat (in: _Dest=0x81bf118, _Source="Games" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0156.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2968 [0156.366] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21b3df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21b3df0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21b3df0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0156.366] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1 [0156.366] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1 [0156.366] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0156.366] wcscmp (_String1="Java", _String2=".") returned 1 [0156.367] wcscmp (_String1="Java", _String2="..") returned 1 [0156.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bef80 [0156.367] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.367] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.367] wcscat (in: _Dest=0x81bef80, _Source="Java" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0156.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x296c [0156.368] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0156.368] wcscmp (_String1="Maintenance", _String2=".") returned 1 [0156.368] wcscmp (_String1="Maintenance", _String2="..") returned 1 [0156.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d13c8 [0156.369] wcscpy (in: _Dest=0x81d13c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.369] wcscat (in: _Dest=0x81d13c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.369] wcscat (in: _Dest=0x81d13c8, _Source="Maintenance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0156.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d13c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2970 [0156.370] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7b8cc0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed7b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0156.370] wcscmp (_String1="Media Center.lnk", _String2=".") returned 1 [0156.370] wcscmp (_String1="Media Center.lnk", _String2="..") returned 1 [0156.370] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0156.370] wcscmp (_String1="Microsoft Office", _String2=".") returned 1 [0156.370] wcscmp (_String1="Microsoft Office", _String2="..") returned 1 [0156.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c74b8 [0156.370] wcscpy (in: _Dest=0x2c74b8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.370] wcscat (in: _Dest=0x2c74b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.371] wcscat (in: _Dest=0x2c74b8, _Source="Microsoft Office" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0156.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c74b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2974 [0156.372] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77031ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x77057c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x77057c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0156.372] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1 [0156.372] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1 [0156.372] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0156.372] wcscmp (_String1="SharePoint", _String2=".") returned 1 [0156.372] wcscmp (_String1="SharePoint", _String2="..") returned 1 [0156.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1bb8 [0156.372] wcscpy (in: _Dest=0x3eb1bb8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.372] wcscat (in: _Dest=0x3eb1bb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.372] wcscat (in: _Dest=0x3eb1bb8, _Source="SharePoint" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0156.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb1bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2978 [0156.374] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4ae24a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e4ae24a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e4d43aa, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0156.374] wcscmp (_String1="Sidebar.lnk", _String2=".") returned 1 [0156.374] wcscmp (_String1="Sidebar.lnk", _String2="..") returned 1 [0156.374] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0156.378] wcscmp (_String1="Startup", _String2=".") returned 1 [0156.378] wcscmp (_String1="Startup", _String2="..") returned 1 [0156.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2278 [0156.378] wcscpy (in: _Dest=0x3eb2278, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.378] wcscat (in: _Dest=0x3eb2278, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.378] wcscat (in: _Dest=0x3eb2278, _Source="Startup" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0156.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb2278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x297c [0156.380] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0156.380] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0156.380] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0156.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2308 [0156.380] wcscpy (in: _Dest=0x3eb2308, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.380] wcscat (in: _Dest=0x3eb2308, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.380] wcscat (in: _Dest=0x3eb2308, _Source="Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0156.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3eb2308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2980 [0156.382] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecb6c98, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ecb6c98, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ecb6c98, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0156.382] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2=".") returned 1 [0156.382] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2="..") returned 1 [0156.382] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea595d60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea595d60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5bbec0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0156.382] wcscmp (_String1="Windows DVD Maker.lnk", _String2=".") returned 1 [0156.382] wcscmp (_String1="Windows DVD Maker.lnk", _String2="..") returned 1 [0156.382] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b74de96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b74de96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b74de96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0156.382] wcscmp (_String1="Windows Fax and Scan.lnk", _String2=".") returned 1 [0156.382] wcscmp (_String1="Windows Fax and Scan.lnk", _String2="..") returned 1 [0156.382] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1172b3fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1172b3fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x27a4769c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0156.382] wcscmp (_String1="Windows Media Player.lnk", _String2=".") returned 1 [0156.382] wcscmp (_String1="Windows Media Player.lnk", _String2="..") returned 1 [0156.382] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0156.382] wcscmp (_String1="XPS Viewer.lnk", _String2=".") returned 1 [0156.382] wcscmp (_String1="XPS Viewer.lnk", _String2="..") returned 1 [0156.382] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 0 [0156.382] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0156.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0156.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e248c0) returned 1 [0156.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf408) returned 1 Thread: id = 2106 os_tid = 0x1c88 [0152.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e244c0 [0152.305] wcscpy (in: _Dest=0x3e244c0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" [0152.305] wcscat (in: _Dest=0x3e244c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\" [0152.305] wcscat (in: _Dest=0x3e244c0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*" [0152.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0152.305] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0152.305] wcscmp (_String1=".", _String2=".") returned 0 [0152.305] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.305] wcscmp (_String1="..", _String2=".") returned 1 [0152.305] wcscmp (_String1="..", _String2="..") returned 0 [0152.306] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.306] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0152.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0152.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e244c0) returned 1 [0152.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67fe8) returned 1 Thread: id = 2107 os_tid = 0x1c8c [0152.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67fe8 [0152.307] wcscpy (in: _Dest=0x3e67fe8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" [0152.307] wcscat (in: _Dest=0x3e67fe8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\" [0152.307] wcscat (in: _Dest=0x3e67fe8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*" [0152.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0152.307] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0152.307] wcscmp (_String1=".", _String2=".") returned 0 [0152.307] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.307] wcscmp (_String1="..", _String2=".") returned 1 [0152.307] wcscmp (_String1="..", _String2="..") returned 0 [0152.307] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.308] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0152.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0152.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67fe8) returned 1 [0152.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f331c8) returned 1 Thread: id = 2108 os_tid = 0x1c90 [0152.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin")) returned 0x20 [0152.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", dwFileAttributes=0x20) returned 0 [0152.309] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.309] GetLastError () returned 0x5 [0152.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", dwFileAttributes=0x20) returned 0 [0152.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bf50) returned 1 Thread: id = 2109 os_tid = 0x1c94 [0152.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2818 [0152.311] wcscpy (in: _Dest=0x3eb2818, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" [0152.311] wcscat (in: _Dest=0x3eb2818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\" [0152.311] wcscat (in: _Dest=0x3eb2818, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*" [0152.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0152.311] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f00bc1a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f00bc1a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0152.311] wcscmp (_String1=".", _String2=".") returned 0 [0152.311] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f00bc1a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f00bc1a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.311] wcscmp (_String1="..", _String2=".") returned 1 [0152.311] wcscmp (_String1="..", _String2="..") returned 0 [0152.311] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0152.311] wcscmp (_String1="enu-dsk", _String2=".") returned 1 [0152.311] wcscmp (_String1="enu-dsk", _String2="..") returned 1 [0152.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e12228 [0152.311] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" [0152.311] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\" [0152.311] wcscat (in: _Dest=0x3e12228, _Source="enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0154.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20cc [0154.765] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b89235, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b89235, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0154.765] wcscmp (_String1="MSTTSFrontendENU.dll", _String2=".") returned 1 [0154.765] wcscmp (_String1="MSTTSFrontendENU.dll", _String2="..") returned 1 [0154.765] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e78632, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34e78632, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x289c1100, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0154.765] wcscmp (_String1="MSTTSLoc.dll.mui", _String2=".") returned 1 [0154.765] wcscmp (_String1="MSTTSLoc.dll.mui", _String2="..") returned 1 [0154.765] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e78632, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34e78632, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x289c1100, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0154.765] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0154.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0154.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2818) returned 1 [0154.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35880) returned 1 Thread: id = 2110 os_tid = 0x1c98 [0152.312] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\5sfxpcptv-maoy7v9x.png")) returned 0x20 [0152.312] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png", dwFileAttributes=0x20) returned 1 [0156.785] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\5sfxpcptv-maoy7v9x.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fc4 [0156.785] GetFileSizeEx (in: hFile=0x1fc4, lpFileSize=0xe84fc60 | out: lpFileSize=0xe84fc60*=91623) returned 1 [0156.785] SetFilePointerEx (in: hFile=0x1fc4, liDistanceToMove=0x165e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.785] ReadFile (in: hFile=0x1fc4, lpBuffer=0xe84fc6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe84fc48, lpOverlapped=0x0 | out: lpBuffer=0xe84fc6c*, lpNumberOfBytesRead=0xe84fc48*=0x4, lpOverlapped=0x0) returned 1 [0156.787] SetFilePointerEx (in: hFile=0x1fc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0156.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca68 [0156.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0156.790] NtQuerySystemTime (in: CurrentTime=0xe84fbe8 | out: CurrentTime=0xe84fbe8*=132471540252852000) returned 0x0 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x5a705aa4 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x1f229bb5 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x6e70900 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x478d7a43 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x76866c10 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0xa14182b [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x1fbc8353 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x16ff78e [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x30ff53cf [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x7bae9275 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x53e6bec2 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x3003bfcd [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x78e8710f [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x15edcf2 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x586adf1a [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x604f675b [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x24fdb095 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x58698c21 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x4573a863 [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x28fc696d [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x2d205e3f [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x6f1515cf [0156.790] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x76566060 [0156.791] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x6433cf77 [0156.791] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x7af9c20f [0156.791] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x13744142 [0156.791] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x511380ed [0156.791] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x77d7cdb5 [0156.791] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x63fee816 [0156.791] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x4d2f7e7d [0156.791] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x4c2acb82 [0156.791] RtlRandomEx (in: Seed=0xe84fbe0 | out: Seed=0xe84fbe0) returned 0x651990e7 [0156.805] SetFilePointerEx (in: hFile=0x1fc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.805] ReadFile (in: hFile=0x1fc4, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xe84fbe8, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0xe84fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.806] SetFilePointerEx (in: hFile=0x1fc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309388 [0156.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0156.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0156.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0156.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0156.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0156.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0156.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bdc0) returned 1 [0156.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0156.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309388) returned 1 [0156.807] WriteFile (in: hFile=0x1fc4, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xe84fbe8, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0xe84fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0156.961] SetFilePointerEx (in: hFile=0x1fc4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.962] ReadFile (in: hFile=0x1fc4, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xe84fbe8, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0xe84fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.962] SetFilePointerEx (in: hFile=0x1fc4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cca0 [0156.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32700 [0156.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0156.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0156.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0156.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0156.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0156.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0156.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0156.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0156.963] WriteFile (in: hFile=0x1fc4, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xe84fbe8, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0xe84fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0156.966] SetFilePointerEx (in: hFile=0x1fc4, liDistanceToMove=0x129e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.966] ReadFile (in: hFile=0x1fc4, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xe84fbe8, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0xe84fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.966] SetFilePointerEx (in: hFile=0x1fc4, liDistanceToMove=0x129e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309388 [0156.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b730 [0156.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0156.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0156.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0156.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0156.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0156.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0156.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0156.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309388) returned 1 [0156.967] WriteFile (in: hFile=0x1fc4, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xe84fbe8, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0xe84fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0156.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e550 [0158.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0158.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x81e36d8 [0158.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4d020 [0158.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49bc8 [0158.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0158.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0158.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3690) returned 1 [0158.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dcdcd0 [0158.115] SetFilePointerEx (in: hFile=0x1fc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.115] WriteFile (in: hFile=0x1fc4, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0xe84fc54, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0xe84fc54*=0x15e, lpOverlapped=0x0) returned 1 [0158.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0158.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e36d8) returned 1 [0158.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0158.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3648) returned 1 [0158.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 [0158.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0158.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0158.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0158.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8488 [0158.755] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png" [0158.755] wcscat (in: _Dest=0x2c8488, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png.f0dbec" [0158.756] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png.f0dbec", NtPathName=0xe84fbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\5SFxpCptv-Maoy7V9X.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dad468 [0158.756] NtSetInformationFile (FileHandle=0x1fc4, IoStatusBlock=0xe84fbe0, FileInformation=0x3dad468, Length=0xec, FileInformationClass=0xa) returned 0x0 [0159.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 [0159.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b00b8) returned 1 [0159.262] NtQueryInformationFile (in: FileHandle=0x1fc4, IoStatusBlock=0xe84fbb0, FileInformation=0xe84fbb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe84fbb0, FileInformation=0xe84fbb8) returned 0x0 [0159.262] NtSetInformationFile (FileHandle=0x1fc4, IoStatusBlock=0xe84fbb0, FileInformation=0xe84fbb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0159.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 [0159.264] FlushFileBuffers (hFile=0x1fc4) returned 1 [0159.274] CloseHandle (hObject=0x1fc4) returned 1 [0159.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e351b8 [0159.276] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0159.276] wcscat (in: _Dest=0x3e351b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" [0159.276] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\f0dbec-readme.txt")) returned 0xffffffff [0159.276] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc4 [0159.277] WriteFile (in: hFile=0x1fc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe84fbfc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe84fbfc*=0x70c, lpOverlapped=0x0) returned 1 [0159.279] CloseHandle (hObject=0x1fc4) returned 1 [0159.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b898) returned 1 Thread: id = 2111 os_tid = 0x1c9c [0152.312] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\hbk4hum3htutybnbw.jpg")) returned 0x20 [0152.312] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg", dwFileAttributes=0x20) returned 1 [0162.068] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\hbk4hum3htutybnbw.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fc8 [0162.068] GetFileSizeEx (in: hFile=0x1fc8, lpFileSize=0x7f3f9a8 | out: lpFileSize=0x7f3f9a8*=32334) returned 1 [0162.068] SetFilePointerEx (in: hFile=0x1fc8, liDistanceToMove=0x7e4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.068] ReadFile (in: hFile=0x1fc8, lpBuffer=0x7f3f9b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f3f990, lpOverlapped=0x0 | out: lpBuffer=0x7f3f9b4*, lpNumberOfBytesRead=0x7f3f990*=0x4, lpOverlapped=0x0) returned 1 [0162.070] SetFilePointerEx (in: hFile=0x1fc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0162.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd20 [0162.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0162.070] NtQuerySystemTime (in: CurrentTime=0x7f3f930 | out: CurrentTime=0x7f3f930*=132471540303084000) returned 0x0 [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x59bbccbd [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x827353d [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x5103480d [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x50dbb01e [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0xbe89d6f [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x6d127d2c [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x3153051d [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x8c4b465 [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x2638d3fd [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x42cae0f0 [0162.070] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x389324c1 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x49128ede [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x295ea4a8 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x77d1eb38 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x2276f6bf [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x388d6ce3 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x6d799f4b [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x103125a [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x65d11fd5 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x12fdd3d7 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x17f3cb89 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0xcab9af0 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x57f1986d [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x388c9c9b [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x4d72cc6e [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x1809dacf [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x519f6544 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x77b1fda1 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x153a3353 [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x65ae749c [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x3cca56da [0162.071] RtlRandomEx (in: Seed=0x7f3f928 | out: Seed=0x7f3f928) returned 0x133d75c3 [0162.081] SetFilePointerEx (in: hFile=0x1fc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.081] ReadFile (in: hFile=0x1fc8, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7f3f930, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0x7f3f930*=0x3c00, lpOverlapped=0x0) returned 1 [0162.082] SetFilePointerEx (in: hFile=0x1fc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d3b8 [0162.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32c28 [0162.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0162.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0162.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0162.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0162.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0162.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0162.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0162.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d3b8) returned 1 [0162.082] WriteFile (in: hFile=0x1fc8, lpBuffer=0x80a5870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7f3f930, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesWritten=0x7f3f930*=0x3c00, lpOverlapped=0x0) returned 1 [0164.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0164.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0164.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x8099350 [0164.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0164.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x8098850 [0164.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0164.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0164.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0164.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0164.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309fa0) returned 1 [0164.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d565c0 [0164.761] SetFilePointerEx (in: hFile=0x1fc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.761] WriteFile (in: hFile=0x1fc8, lpBuffer=0x3d565c0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x7f3f99c, lpOverlapped=0x0 | out: lpBuffer=0x3d565c0*, lpNumberOfBytesWritten=0x7f3f99c*=0x11c, lpOverlapped=0x0) returned 1 [0167.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 [0167.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8098850) returned 1 [0167.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0167.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099350) returned 1 [0167.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0167.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd20) returned 1 [0167.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0167.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0167.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c97c8 [0167.016] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg" [0167.016] wcscat (in: _Dest=0x2c97c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg.f0dbec" [0167.016] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg.f0dbec", NtPathName=0x7f3f920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\HBK4Hum3hTUTYBnBW.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae008 [0167.019] FlushFileBuffers (hFile=0x1fc8) returned 1 [0167.021] CloseHandle (hObject=0x1fc8) returned 1 [0167.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6908 [0167.022] wcscpy (in: _Dest=0x81d6908, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0167.022] wcscat (in: _Dest=0x81d6908, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" [0167.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\f0dbec-readme.txt")) returned 0x20 [0167.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6908) returned 1 [0167.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b558) returned 1 Thread: id = 2112 os_tid = 0x1ca0 [0152.313] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\j-vc2wd8.gif")) returned 0x20 [0152.313] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif", dwFileAttributes=0x20) returned 1 [0157.255] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\j-vc2wd8.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fcc [0157.255] GetFileSizeEx (in: hFile=0x1fcc, lpFileSize=0xc55f928 | out: lpFileSize=0xc55f928*=100645) returned 1 [0157.255] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x18921, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.255] ReadFile (in: hFile=0x1fcc, lpBuffer=0xc55f934, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc55f910, lpOverlapped=0x0 | out: lpBuffer=0xc55f934*, lpNumberOfBytesRead=0xc55f910*=0x4, lpOverlapped=0x0) returned 1 [0157.257] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0157.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0157.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0157.257] NtQuerySystemTime (in: CurrentTime=0xc55f8b0 | out: CurrentTime=0xc55f8b0*=132471540257532000) returned 0x0 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x783f6758 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x3a8ea404 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x3d87dd5e [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x59f334c7 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x2bc2f817 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x3dd7b33 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x57ced0bb [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0xafaa5e1 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x5165ac47 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x28e34e06 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x373eb1e9 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x7e77327f [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x35a2bdfc [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x45ecd682 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x16e29e9 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x4dd57ae0 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x4c47e279 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x6cb7c036 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x1dd69d3d [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x4e33d8ac [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x21c03186 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x188f4967 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x7ef15793 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x6f857378 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x20ae898f [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x44287645 [0157.257] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x79f13c5d [0157.258] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x22f21337 [0157.258] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x54dd73b0 [0157.258] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x3a6055f0 [0157.258] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x67d11e72 [0157.258] RtlRandomEx (in: Seed=0xc55f8a8 | out: Seed=0xc55f8a8) returned 0x3527aee0 [0157.267] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.267] ReadFile (in: hFile=0x1fcc, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc55f8b0, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0xc55f8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0157.268] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5b68 [0157.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0157.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0157.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0157.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0157.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0157.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0157.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0157.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0157.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5b68) returned 1 [0157.268] WriteFile (in: hFile=0x1fcc, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc55f8b0, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0xc55f8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0158.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0158.501] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.501] ReadFile (in: hFile=0x1fcc, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc55f8b0, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0xc55f8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0158.501] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4c38 [0158.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0158.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5f8 [0158.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0158.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0158.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5f8 [0158.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0158.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0158.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0158.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4c38) returned 1 [0158.502] WriteFile (in: hFile=0x1fcc, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc55f8b0, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0xc55f8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0161.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0161.352] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x14d25, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.352] ReadFile (in: hFile=0x1fcc, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc55f8b0, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0xc55f8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0161.352] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x14d25, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d250 [0161.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30150d0 [0161.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0161.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0161.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0161.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0161.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0161.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0161.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0161.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d250) returned 1 [0161.353] WriteFile (in: hFile=0x1fcc, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc55f8b0, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0xc55f8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0161.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0161.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fcea58 [0161.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0161.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6f918 [0161.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0161.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0161.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0161.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0161.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d250) returned 1 [0161.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e16628 [0161.355] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.355] WriteFile (in: hFile=0x1fcc, lpBuffer=0x3e16628*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xc55f91c, lpOverlapped=0x0 | out: lpBuffer=0x3e16628*, lpNumberOfBytesWritten=0xc55f91c*=0x14a, lpOverlapped=0x0) returned 1 [0162.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16628) returned 1 [0162.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f918) returned 1 [0162.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0162.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700f8) returned 1 [0162.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcea58) returned 1 [0162.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0162.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7f8) returned 1 [0162.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0162.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1b218 [0162.665] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif" [0162.665] wcscat (in: _Dest=0x3e1b218, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif.f0dbec" [0162.665] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif.f0dbec", NtPathName=0xc55f8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\J-Vc2wd8.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0162.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8b88 [0162.744] FlushFileBuffers (hFile=0x1fcc) returned 1 [0162.745] CloseHandle (hObject=0x1fcc) returned 1 [0162.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e7c88 [0162.747] wcscpy (in: _Dest=0x81e7c88, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0162.747] wcscat (in: _Dest=0x81e7c88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" [0162.747] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\f0dbec-readme.txt")) returned 0x20 [0162.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7c88) returned 1 [0162.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 2113 os_tid = 0x1ca4 [0152.313] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\pkbhmnd.png")) returned 0x20 [0152.313] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png", dwFileAttributes=0x20) returned 1 [0157.270] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\pkbhmnd.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fd0 [0157.270] GetFileSizeEx (in: hFile=0x1fd0, lpFileSize=0xa9bfe80 | out: lpFileSize=0xa9bfe80*=70644) returned 1 [0157.270] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x113f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.270] ReadFile (in: hFile=0x1fd0, lpBuffer=0xa9bfe8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa9bfe68, lpOverlapped=0x0 | out: lpBuffer=0xa9bfe8c*, lpNumberOfBytesRead=0xa9bfe68*=0x4, lpOverlapped=0x0) returned 1 [0157.271] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0157.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0157.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0157.272] NtQuerySystemTime (in: CurrentTime=0xa9bfe08 | out: CurrentTime=0xa9bfe08*=132471540257688000) returned 0x0 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x5ce00877 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x88e952a [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x73baaa2e [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0xf67c213 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x6a54f3c2 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x3874bf22 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x1d894f8d [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x313a4488 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x1df2ea3b [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x2353cf76 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x59509128 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x289de144 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x709c8c76 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x773b3023 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x33ba53b1 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x572d14f [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x24b01396 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x17d6824a [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x6c4a8e1f [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x6b592f6b [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x60936735 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x60d2189f [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x2b2e51f0 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x6539f4db [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x488ea0a [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x269fb829 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x7f51a42e [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x27cc3508 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x1fe36ea2 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x58003b0c [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x4ffb8fe5 [0157.272] RtlRandomEx (in: Seed=0xa9bfe00 | out: Seed=0xa9bfe00) returned 0x36f2b738 [0157.281] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.281] ReadFile (in: hFile=0x1fd0, lpBuffer=0x80b0c88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa9bfe08, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesRead=0xa9bfe08*=0x3c00, lpOverlapped=0x0) returned 1 [0157.281] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5b68 [0157.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0157.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0157.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0157.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0157.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0157.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0157.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0157.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0157.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5b68) returned 1 [0157.282] WriteFile (in: hFile=0x1fd0, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa9bfe08, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0xa9bfe08*=0x3c00, lpOverlapped=0x0) returned 1 [0158.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0158.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0158.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e70188 [0158.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4c38 [0158.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0158.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0158.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0158.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e70158 [0158.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0158.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49880 [0158.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49880) returned 1 [0158.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0158.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4c38) returned 1 [0158.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3deb9f0 [0158.504] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.504] WriteFile (in: hFile=0x1fd0, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xa9bfe74, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0xa9bfe74*=0x108, lpOverlapped=0x0) returned 1 [0162.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0162.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70158) returned 1 [0162.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0162.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0162.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0162.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0162.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0162.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0162.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e7c88 [0162.669] wcscpy (in: _Dest=0x81e7c88, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png" [0162.669] wcscat (in: _Dest=0x81e7c88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png.f0dbec" [0162.669] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png.f0dbec", NtPathName=0xa9bfdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\pkBHMND.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0162.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8568 [0162.733] FlushFileBuffers (hFile=0x1fd0) returned 1 [0162.737] CloseHandle (hObject=0x1fd0) returned 1 [0162.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e7c88 [0162.738] wcscpy (in: _Dest=0x81e7c88, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0162.738] wcscat (in: _Dest=0x81e7c88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" [0162.738] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\f0dbec-readme.txt")) returned 0x20 [0162.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7c88) returned 1 [0162.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 2114 os_tid = 0x1ca8 [0152.313] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\xfdaw65uokqj.bmp")) returned 0x20 [0152.314] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp", dwFileAttributes=0x20) returned 1 [0157.238] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\xfdaw65uokqj.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fd4 [0157.238] GetFileSizeEx (in: hFile=0x1fd4, lpFileSize=0xea6feb8 | out: lpFileSize=0xea6feb8*=87875) returned 1 [0157.238] SetFilePointerEx (in: hFile=0x1fd4, liDistanceToMove=0x1573f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.238] ReadFile (in: hFile=0x1fd4, lpBuffer=0xea6fec4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xea6fea0, lpOverlapped=0x0 | out: lpBuffer=0xea6fec4*, lpNumberOfBytesRead=0xea6fea0*=0x4, lpOverlapped=0x0) returned 1 [0157.240] SetFilePointerEx (in: hFile=0x1fd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0157.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0157.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0157.240] NtQuerySystemTime (in: CurrentTime=0xea6fe40 | out: CurrentTime=0xea6fe40*=132471540257376000) returned 0x0 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x306ebfd3 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x3869db41 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x4b9a8e2 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x6550ec05 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x4e593201 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x4ffbd8df [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x51a9469e [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x183682e7 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x402508e2 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x6fd5bf9 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x6301241e [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x6ece46a0 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x1d59ea28 [0157.240] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x8967509 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x4e560520 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x732453f1 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x57a15392 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x3a9efe9e [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x4145f2c1 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0xedbedf8 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x61f87773 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0xfc991b6 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x53755291 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x2af21fdf [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x6c470c33 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x9e72e2d [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x5f757257 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x357f0874 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x4356ef3d [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x3abe7f02 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x621ca71 [0157.241] RtlRandomEx (in: Seed=0xea6fe38 | out: Seed=0xea6fe38) returned 0x2a963958 [0157.252] SetFilePointerEx (in: hFile=0x1fd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.252] ReadFile (in: hFile=0x1fd4, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xea6fe40, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0xea6fe40*=0x3c00, lpOverlapped=0x0) returned 1 [0157.252] SetFilePointerEx (in: hFile=0x1fd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5b68 [0157.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0157.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0157.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0157.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0157.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0157.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0157.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0157.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0157.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5b68) returned 1 [0157.253] WriteFile (in: hFile=0x1fd4, lpBuffer=0x80a5870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xea6fe40, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesWritten=0xea6fe40*=0x3c00, lpOverlapped=0x0) returned 1 [0158.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0158.499] SetFilePointerEx (in: hFile=0x1fd4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.499] ReadFile (in: hFile=0x1fd4, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xea6fe40, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0xea6fe40*=0x3c00, lpOverlapped=0x0) returned 1 [0158.499] SetFilePointerEx (in: hFile=0x1fd4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4c38 [0158.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0158.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0158.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0158.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0158.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0158.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5f8 [0158.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0158.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0158.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4c38) returned 1 [0158.500] WriteFile (in: hFile=0x1fd4, lpBuffer=0x80a5870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xea6fe40, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesWritten=0xea6fe40*=0x3c00, lpOverlapped=0x0) returned 1 [0161.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0161.343] SetFilePointerEx (in: hFile=0x1fd4, liDistanceToMove=0x11b43, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.344] ReadFile (in: hFile=0x1fd4, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xea6fe40, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0xea6fe40*=0x3c00, lpOverlapped=0x0) returned 1 [0161.344] SetFilePointerEx (in: hFile=0x1fd4, liDistanceToMove=0x11b43, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d250 [0161.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30150d0 [0161.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0161.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0161.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0161.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0161.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0161.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0161.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0161.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d250) returned 1 [0161.345] WriteFile (in: hFile=0x1fd4, lpBuffer=0x80a5870*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xea6fe40, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesWritten=0xea6fe40*=0x3c00, lpOverlapped=0x0) returned 1 [0161.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0161.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fce780 [0161.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0161.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77e18 [0161.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0161.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0161.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0161.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0161.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d250) returned 1 [0161.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x152) returned 0x3dcdcd0 [0161.348] SetFilePointerEx (in: hFile=0x1fd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.348] WriteFile (in: hFile=0x1fd4, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0xea6feac, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0xea6feac*=0x152, lpOverlapped=0x0) returned 1 [0162.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0162.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0162.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0162.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0162.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce780) returned 1 [0162.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0162.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0162.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0162.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e65290 [0162.667] wcscpy (in: _Dest=0x3e65290, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp" [0162.667] wcscat (in: _Dest=0x3e65290, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp.f0dbec" [0162.668] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp.f0dbec", NtPathName=0xea6fe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\xFdaW65UOKQj.bmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0162.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a168 [0162.751] FlushFileBuffers (hFile=0x1fd4) returned 1 [0162.754] CloseHandle (hObject=0x1fd4) returned 1 [0162.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e7d50 [0162.755] wcscpy (in: _Dest=0x81e7d50, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0162.755] wcscat (in: _Dest=0x81e7d50, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" [0162.755] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\f0dbec-readme.txt")) returned 0x20 [0162.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7d50) returned 1 [0162.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5af8) returned 1 Thread: id = 2115 os_tid = 0x1cac [0152.320] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\z0yrs.png")) returned 0x20 [0152.320] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png", dwFileAttributes=0x20) returned 1 [0157.315] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\z0yrs.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fd8 [0157.315] GetFileSizeEx (in: hFile=0x1fd8, lpFileSize=0xadff980 | out: lpFileSize=0xadff980*=1071) returned 1 [0157.315] SetFilePointerEx (in: hFile=0x1fd8, liDistanceToMove=0x42b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.315] ReadFile (in: hFile=0x1fd8, lpBuffer=0xadff98c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xadff968, lpOverlapped=0x0 | out: lpBuffer=0xadff98c*, lpNumberOfBytesRead=0xadff968*=0x4, lpOverlapped=0x0) returned 1 [0157.317] SetFilePointerEx (in: hFile=0x1fd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0157.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0157.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0157.317] NtQuerySystemTime (in: CurrentTime=0xadff908 | out: CurrentTime=0xadff908*=132471540258156000) returned 0x0 [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x4a071be6 [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x70f7aa0a [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x3b1694a5 [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x3073d8cf [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x682dc9a1 [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x6573cb60 [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x155ec739 [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x48273d0b [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x3eaaa918 [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x7fb9bfa3 [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x114b1742 [0157.317] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x1558ea96 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x6e3ce805 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x50ac3bb3 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x7f55fdbe [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x755d8cc8 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x5c5d6f6f [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x68057b76 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x54ed3054 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x4f4b1ff9 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x77d1f082 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x42308df0 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x955dd68 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x65679735 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x571b6410 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x6fad88ef [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x59c0acd4 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x89602e9 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x5e732280 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0xebb3202 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x606dc11 [0157.318] RtlRandomEx (in: Seed=0xadff900 | out: Seed=0xadff900) returned 0x76be3cdd [0157.326] ReadFile (in: hFile=0x1fd8, lpBuffer=0x80c74b8, nNumberOfBytesToRead=0x42f, lpNumberOfBytesRead=0xadff8fc, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesRead=0xadff8fc*=0x42f, lpOverlapped=0x0) returned 1 [0157.326] SetFilePointerEx (in: hFile=0x1fd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.326] WriteFile (in: hFile=0x1fd8, lpBuffer=0x80cb0c0*, nNumberOfBytesToWrite=0x42f, lpNumberOfBytesWritten=0xadff900, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesWritten=0xadff900*=0x42f, lpOverlapped=0x0) returned 1 [0158.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0158.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0158.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0158.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0158.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0158.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0158.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5b68) returned 1 [0158.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0158.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5b68 [0158.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0158.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b040 [0158.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b040) returned 1 [0158.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b040 [0158.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49c18 [0158.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4acd0 [0158.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4acd0) returned 1 [0158.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0158.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5b68) returned 1 [0158.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3dec080 [0158.510] SetFilePointerEx (in: hFile=0x1fd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.510] WriteFile (in: hFile=0x1fd8, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xadff974, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xadff974*=0x104, lpOverlapped=0x0) returned 1 [0162.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0162.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b040) returned 1 [0162.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49c18) returned 1 [0162.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0162.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0162.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0162.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0162.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0162.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81e7d50 [0162.672] wcscpy (in: _Dest=0x81e7d50, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png" [0162.672] wcscat (in: _Dest=0x81e7d50, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png.f0dbec" [0162.672] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png.f0dbec", NtPathName=0xadff8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\z0YRS.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0162.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8f08 [0162.748] FlushFileBuffers (hFile=0x1fd8) returned 1 [0162.751] CloseHandle (hObject=0x1fd8) returned 1 [0162.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e7d50 [0162.752] wcscpy (in: _Dest=0x81e7d50, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0162.752] wcscat (in: _Dest=0x81e7d50, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" [0162.752] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\f0dbec-readme.txt")) returned 0x20 [0162.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7d50) returned 1 [0162.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 2116 os_tid = 0x1cb0 [0152.320] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\_-vchgnso5gojhdiyvkp.jpg")) returned 0x20 [0152.320] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg", dwFileAttributes=0x20) returned 1 [0157.283] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\_-vchgnso5gojhdiyvkp.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fdc [0157.283] GetFileSizeEx (in: hFile=0x1fdc, lpFileSize=0xb68fb40 | out: lpFileSize=0xb68fb40*=17747) returned 1 [0157.283] SetFilePointerEx (in: hFile=0x1fdc, liDistanceToMove=0x454f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.284] ReadFile (in: hFile=0x1fdc, lpBuffer=0xb68fb4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb68fb28, lpOverlapped=0x0 | out: lpBuffer=0xb68fb4c*, lpNumberOfBytesRead=0xb68fb28*=0x4, lpOverlapped=0x0) returned 1 [0157.285] SetFilePointerEx (in: hFile=0x1fdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0157.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0157.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0157.285] NtQuerySystemTime (in: CurrentTime=0xb68fac8 | out: CurrentTime=0xb68fac8*=132471540257844000) returned 0x0 [0157.285] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x2f1ff8ba [0157.285] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x6fd1bcae [0157.285] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0xc427476 [0157.285] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x27168f8b [0157.285] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x303ed08c [0157.285] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x49fc01a0 [0157.285] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x46395802 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x656bc520 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x25cc5ee6 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x7b1c6e7b [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x70f664f7 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0xd243540 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x4dbec098 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x64aa8d4a [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x2bba23e8 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x3d4838af [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x54f38948 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0xacf57cf [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x4c94d0e6 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x780d6703 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x3a5dcceb [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x2e6b2613 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x7d89f28d [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x367d6d36 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x67dad6a2 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0xf6e0f9 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x7e7d6fa5 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x24de8142 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x1b9e72c4 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x5ddbb2f5 [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x4202385b [0157.286] RtlRandomEx (in: Seed=0xb68fac0 | out: Seed=0xb68fac0) returned 0x5b147be8 [0157.295] SetFilePointerEx (in: hFile=0x1fdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.295] ReadFile (in: hFile=0x1fdc, lpBuffer=0x80b8498, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb68fac8, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesRead=0xb68fac8*=0x3c00, lpOverlapped=0x0) returned 1 [0157.295] SetFilePointerEx (in: hFile=0x1fdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5b68 [0157.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0157.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0157.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0157.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bc0a0 [0157.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0157.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0157.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0157.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0157.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5b68) returned 1 [0157.296] WriteFile (in: hFile=0x1fdc, lpBuffer=0x80bc0a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb68fac8, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesWritten=0xb68fac8*=0x3c00, lpOverlapped=0x0) returned 1 [0158.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0158.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0158.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x81b4c38 [0158.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5610 [0158.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0158.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49880 [0158.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49880) returned 1 [0158.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x81b5a00 [0158.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49880 [0158.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b018 [0158.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b018) returned 1 [0158.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0158.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5610) returned 1 [0158.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ef7d68 [0158.505] SetFilePointerEx (in: hFile=0x1fdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.505] WriteFile (in: hFile=0x1fdc, lpBuffer=0x3ef7d68*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xb68fb34, lpOverlapped=0x0 | out: lpBuffer=0x3ef7d68*, lpNumberOfBytesWritten=0xb68fb34*=0x122, lpOverlapped=0x0) returned 1 [0158.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0158.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5a00) returned 1 [0158.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49880) returned 1 [0158.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4c38) returned 1 [0158.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0158.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0158.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0158.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0158.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39ce0 [0158.779] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg" [0158.779] wcscat (in: _Dest=0x3e39ce0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg.f0dbec" [0158.779] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg.f0dbec", NtPathName=0xb68fab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_-vcHGNsO5GojHDIyvkP.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadc28 [0158.779] NtSetInformationFile (FileHandle=0x1fdc, IoStatusBlock=0xb68fac0, FileInformation=0x3dadc28, Length=0xf0, FileInformationClass=0xa) returned 0x0 [0159.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 [0159.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b0508) returned 1 [0159.272] NtQueryInformationFile (in: FileHandle=0x1fdc, IoStatusBlock=0xb68fa90, FileInformation=0xb68fa98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb68fa90, FileInformation=0xb68fa98) returned 0x0 [0159.272] NtSetInformationFile (FileHandle=0x1fdc, IoStatusBlock=0xb68fa90, FileInformation=0xb68fa98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0159.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 [0159.273] FlushFileBuffers (hFile=0x1fdc) returned 1 [0159.285] CloseHandle (hObject=0x1fdc) returned 1 [0159.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e351b8 [0159.287] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0159.287] wcscat (in: _Dest=0x3e351b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" [0159.287] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\f0dbec-readme.txt")) returned 0x20 [0159.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0159.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 Thread: id = 2117 os_tid = 0x1cb4 [0152.321] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\_guvf30pw.jpg")) returned 0x20 [0152.321] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg", dwFileAttributes=0x20) returned 1 [0157.299] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\_guvf30pw.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fe0 [0157.300] GetFileSizeEx (in: hFile=0x1fe0, lpFileSize=0xb64f820 | out: lpFileSize=0xb64f820*=51644) returned 1 [0157.300] SetFilePointerEx (in: hFile=0x1fe0, liDistanceToMove=0xc9b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.300] ReadFile (in: hFile=0x1fe0, lpBuffer=0xb64f82c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb64f808, lpOverlapped=0x0 | out: lpBuffer=0xb64f82c*, lpNumberOfBytesRead=0xb64f808*=0x4, lpOverlapped=0x0) returned 1 [0157.301] SetFilePointerEx (in: hFile=0x1fe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0157.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0157.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0157.302] NtQuerySystemTime (in: CurrentTime=0xb64f7a8 | out: CurrentTime=0xb64f7a8*=132471540258000000) returned 0x0 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x7dba7ba6 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x1f76dcb9 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0xb2fe767 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x24e628f6 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x6ed8ce30 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x14fe1f68 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x4e0053a0 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x5ed740ab [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x58a86b31 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x526f5e6f [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x18001c0b [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x181571f6 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x73c1eb92 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x34c18054 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x5854d879 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x431b0d58 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x5918c318 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x2cc7d263 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x19300e49 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x44e66ed1 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x2e5f8b0f [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x5b7f5887 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x524e5d79 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x49b10d02 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x2cf0ba7f [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x4a64f9d4 [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x361295ad [0157.302] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x368f555e [0157.303] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x30ec036d [0157.303] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x42c43b0f [0157.303] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0x5e2cba6 [0157.303] RtlRandomEx (in: Seed=0xb64f7a0 | out: Seed=0xb64f7a0) returned 0xeaee8e6 [0157.312] SetFilePointerEx (in: hFile=0x1fe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.312] ReadFile (in: hFile=0x1fe0, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb64f7a8, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0xb64f7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0157.312] SetFilePointerEx (in: hFile=0x1fe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5b68 [0157.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0157.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0157.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0157.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c38b0 [0157.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0157.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0157.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0157.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0157.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5b68) returned 1 [0157.313] WriteFile (in: hFile=0x1fe0, lpBuffer=0x80c38b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb64f7a8, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesWritten=0xb64f7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0158.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0158.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0158.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fd98 [0158.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5610 [0158.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b7a8 [0158.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b018 [0158.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b018) returned 1 [0158.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e701b8 [0158.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b018 [0158.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0158.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0158.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0158.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5610) returned 1 [0158.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec5f8 [0158.509] SetFilePointerEx (in: hFile=0x1fe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.509] WriteFile (in: hFile=0x1fe0, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb64f814, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xb64f814*=0x10c, lpOverlapped=0x0) returned 1 [0162.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0162.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0162.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b018) returned 1 [0162.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd98) returned 1 [0162.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0162.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0162.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0162.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0162.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1b148 [0162.670] wcscpy (in: _Dest=0x3e1b148, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg" [0162.670] wcscat (in: _Dest=0x3e1b148, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg.f0dbec") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg.f0dbec" [0162.670] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg.f0dbec", NtPathName=0xb64f798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\_guvf30pW.jpg.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0162.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a7c0 [0162.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a7c0) returned 1 [0162.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830b370) returned 1 [0162.730] NtQueryInformationFile (in: FileHandle=0x1fe0, IoStatusBlock=0xb64f770, FileInformation=0xb64f778, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb64f770, FileInformation=0xb64f778) returned 0x0 [0162.730] NtSetInformationFile (FileHandle=0x1fe0, IoStatusBlock=0xb64f770, FileInformation=0xb64f778, Length=0x28, FileInformationClass=0x4) returned 0x0 [0162.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b148) returned 1 [0162.732] FlushFileBuffers (hFile=0x1fe0) returned 1 [0162.734] CloseHandle (hObject=0x1fe0) returned 1 [0162.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e7c88 [0162.735] wcscpy (in: _Dest=0x81e7c88, _Source="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\" [0162.735] wcscat (in: _Dest=0x81e7c88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" [0162.735] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\lzaA15LKh0WzL3 lfAU\\LY SzQON188wz\\1DMY5JNwmes_Dsak\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\lzaa15lkh0wzl3 lfau\\ly szqon188wz\\1dmy5jnwmes_dsak\\f0dbec-readme.txt")) returned 0x20 [0162.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7c88) returned 1 [0162.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 2118 os_tid = 0x1cb8 [0152.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip")) returned 0x20 [0152.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", dwFileAttributes=0x20) returned 0 [0152.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.323] GetLastError () returned 0x5 [0152.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", dwFileAttributes=0x20) returned 0 [0152.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b3b8) returned 1 Thread: id = 2119 os_tid = 0x1cbc [0152.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip")) returned 0x20 [0152.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", dwFileAttributes=0x20) returned 0 [0152.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.325] GetLastError () returned 0x5 [0152.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", dwFileAttributes=0x20) returned 0 [0152.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 Thread: id = 2120 os_tid = 0x1cc0 [0152.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip")) returned 0x20 [0152.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", dwFileAttributes=0x20) returned 0 [0152.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.326] GetLastError () returned 0x5 [0152.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", dwFileAttributes=0x20) returned 0 [0152.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 2121 os_tid = 0x1cc4 [0152.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip")) returned 0x20 [0153.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", dwFileAttributes=0x20) returned 0 [0153.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.257] GetLastError () returned 0x5 [0155.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", dwFileAttributes=0x20) returned 0 [0155.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64438) returned 1 Thread: id = 2122 os_tid = 0x1cc8 [0152.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip")) returned 0x20 [0155.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0155.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.870] GetLastError () returned 0x5 [0155.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0155.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a080) returned 1 Thread: id = 2123 os_tid = 0x1ccc [0152.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip")) returned 0x20 [0155.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0155.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.259] GetLastError () returned 0x5 [0155.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0155.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ee0) returned 1 Thread: id = 2124 os_tid = 0x1cd0 [0152.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip")) returned 0x20 [0155.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", dwFileAttributes=0x20) returned 0 [0155.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.851] GetLastError () returned 0x5 [0155.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", dwFileAttributes=0x20) returned 0 [0155.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab98) returned 1 Thread: id = 2125 os_tid = 0x1cd4 [0152.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip")) returned 0x20 [0155.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", dwFileAttributes=0x20) returned 0 [0155.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.853] GetLastError () returned 0x5 [0155.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", dwFileAttributes=0x20) returned 0 [0155.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c3f8) returned 1 Thread: id = 2126 os_tid = 0x1cd8 [0152.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip")) returned 0x20 [0155.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0155.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.855] GetLastError () returned 0x5 [0155.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0155.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e656c8) returned 1 Thread: id = 2127 os_tid = 0x1cdc [0152.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip")) returned 0x20 [0155.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0155.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.857] GetLastError () returned 0x5 [0155.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0155.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5e18) returned 1 Thread: id = 2128 os_tid = 0x1ce0 [0152.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip")) returned 0x20 [0155.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", dwFileAttributes=0x20) returned 0 [0155.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.859] GetLastError () returned 0x5 [0155.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", dwFileAttributes=0x20) returned 0 [0155.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c598) returned 1 Thread: id = 2129 os_tid = 0x1ce4 [0152.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip")) returned 0x20 [0155.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0155.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.863] GetLastError () returned 0x5 [0155.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0155.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c738) returned 1 Thread: id = 2130 os_tid = 0x1ce8 [0152.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip")) returned 0x20 [0155.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", dwFileAttributes=0x20) returned 0 [0155.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.868] GetLastError () returned 0x5 [0155.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", dwFileAttributes=0x20) returned 0 [0155.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b148) returned 1 Thread: id = 2131 os_tid = 0x1cec [0152.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip")) returned 0x20 [0155.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0155.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.877] GetLastError () returned 0x5 [0155.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0155.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 Thread: id = 2132 os_tid = 0x1cf0 [0152.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip")) returned 0x20 [0155.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", dwFileAttributes=0x20) returned 0 [0155.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.866] GetLastError () returned 0x5 [0155.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", dwFileAttributes=0x20) returned 0 [0155.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c258) returned 1 Thread: id = 2133 os_tid = 0x1cf4 [0152.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip")) returned 0x20 [0155.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0155.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.256] GetLastError () returned 0x5 [0155.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0155.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 2134 os_tid = 0x1cf8 [0152.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip")) returned 0x20 [0155.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", dwFileAttributes=0x20) returned 0 [0155.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.865] GetLastError () returned 0x5 [0155.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", dwFileAttributes=0x20) returned 0 [0155.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c4c8) returned 1 Thread: id = 2135 os_tid = 0x1cfc [0152.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip")) returned 0x20 [0155.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0155.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.873] GetLastError () returned 0x5 [0155.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0155.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65518) returned 1 Thread: id = 2136 os_tid = 0x1d00 [0152.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip")) returned 0x20 [0155.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", dwFileAttributes=0x20) returned 0 [0155.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.875] GetLastError () returned 0x5 [0155.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", dwFileAttributes=0x20) returned 0 [0155.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64288) returned 1 Thread: id = 2137 os_tid = 0x1d04 [0152.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip")) returned 0x20 [0155.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", dwFileAttributes=0x20) returned 0 [0155.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.872] GetLastError () returned 0x5 [0155.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", dwFileAttributes=0x20) returned 0 [0155.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c668) returned 1 Thread: id = 2138 os_tid = 0x1d08 [0152.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f331c8 [0152.337] wcscpy (in: _Dest=0x3f331c8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0152.337] wcscat (in: _Dest=0x3f331c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0152.337] wcscat (in: _Dest=0x3f331c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*" [0152.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a6d8 [0152.337] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80997d0 [0152.970] wcscmp (_String1=".", _String2=".") returned 0 [0152.970] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.970] wcscmp (_String1="..", _String2=".") returned 1 [0152.970] wcscmp (_String1="..", _String2="..") returned 0 [0152.970] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47d0310, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe47d0310, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x887094a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0152.970] wcscmp (_String1="rdrmessage.zip", _String2=".") returned 1 [0152.971] wcscmp (_String1="rdrmessage.zip", _String2="..") returned 1 [0152.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2938 [0152.971] wcscpy (in: _Dest=0x3eb2938, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0152.971] wcscat (in: _Dest=0x3eb2938, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0152.971] wcscat (in: _Dest=0x3eb2938, _Source="rdrmessage.zip" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" [0156.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0156.652] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7b19f10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd7b19f10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x7f2b59c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0156.652] wcscmp (_String1="ReaderMessages", _String2=".") returned 1 [0156.652] wcscmp (_String1="ReaderMessages", _String2="..") returned 1 [0156.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ddc78 [0156.652] wcscpy (in: _Dest=0x81ddc78, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0156.652] wcscat (in: _Dest=0x81ddc78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0156.652] wcscat (in: _Dest=0x81ddc78, _Source="ReaderMessages" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" [0156.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa0 [0156.653] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0156.653] wcscmp (_String1="Search", _String2=".") returned 1 [0156.653] wcscmp (_String1="Search", _String2="..") returned 1 [0156.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc3e88 [0156.654] wcscpy (in: _Dest=0x3dc3e88, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0156.654] wcscat (in: _Dest=0x3dc3e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0156.654] wcscat (in: _Dest=0x3dc3e88, _Source="Search" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" [0156.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dc3e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa4 [0156.655] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0156.655] FindClose (in: hFindFile=0x80997d0 | out: hFindFile=0x80997d0) returned 1 [0156.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a6d8) returned 1 [0156.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f331c8) returned 1 [0156.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b4d8) returned 1 Thread: id = 2139 os_tid = 0x1d0c [0152.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e244c0 [0152.340] wcscpy (in: _Dest=0x3e244c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0152.340] wcscat (in: _Dest=0x3e244c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0152.340] wcscat (in: _Dest=0x3e244c0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*" [0152.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0152.340] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38158 [0157.227] wcscmp (_String1=".", _String2=".") returned 0 [0157.228] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.228] wcscmp (_String1="..", _String2=".") returned 1 [0157.228] wcscmp (_String1="..", _String2="..") returned 0 [0157.228] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="ACCESS~1.CAT")) returned 1 [0157.228] wcscmp (_String1="accessibility.CAT", _String2=".") returned 1 [0157.228] wcscmp (_String1="accessibility.CAT", _String2="..") returned 1 [0157.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc688 [0157.228] wcscpy (in: _Dest=0x81dc688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0157.228] wcscat (in: _Dest=0x81dc688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0157.228] wcscat (in: _Dest=0x81dc688, _Source="accessibility.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" [0160.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat")) returned 0x20 [0160.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", dwFileAttributes=0x20) returned 0 [0160.905] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.905] GetLastError () returned 0x5 [0160.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", dwFileAttributes=0x20) returned 0 [0160.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc688) returned 1 [0160.905] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1 [0160.905] wcscmp (_String1="Acroform.CAT", _String2=".") returned 1 [0160.905] wcscmp (_String1="Acroform.CAT", _String2="..") returned 1 [0160.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dee78 [0160.905] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0160.905] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0160.906] wcscat (in: _Dest=0x81dee78, _Source="Acroform.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" [0160.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat")) returned 0x20 [0160.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", dwFileAttributes=0x20) returned 0 [0160.952] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.952] GetLastError () returned 0x5 [0160.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", dwFileAttributes=0x20) returned 0 [0160.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0160.952] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="ADOBEC~1.CAT")) returned 1 [0160.952] wcscmp (_String1="AdobeCollabSync.CAT", _String2=".") returned 1 [0160.952] wcscmp (_String1="AdobeCollabSync.CAT", _String2="..") returned 1 [0160.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc7c8 [0160.953] wcscpy (in: _Dest=0x81dc7c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0160.953] wcscat (in: _Dest=0x81dc7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0160.953] wcscat (in: _Dest=0x81dc7c8, _Source="AdobeCollabSync.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" [0160.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat")) returned 0x20 [0160.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", dwFileAttributes=0x20) returned 0 [0160.953] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.953] GetLastError () returned 0x5 [0160.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", dwFileAttributes=0x20) returned 0 [0160.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7c8) returned 1 [0160.953] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1 [0160.953] wcscmp (_String1="Annots.CAT", _String2=".") returned 1 [0160.953] wcscmp (_String1="Annots.CAT", _String2="..") returned 1 [0160.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dee78 [0160.954] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0160.954] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0160.954] wcscat (in: _Dest=0x81dee78, _Source="Annots.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" [0160.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat")) returned 0x20 [0160.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", dwFileAttributes=0x20) returned 0 [0160.972] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.972] GetLastError () returned 0x5 [0160.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", dwFileAttributes=0x20) returned 0 [0160.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0160.972] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="BRDLAN~1.CAT")) returned 1 [0160.972] wcscmp (_String1="BRdlang32.CAT", _String2=".") returned 1 [0160.973] wcscmp (_String1="BRdlang32.CAT", _String2="..") returned 1 [0160.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.973] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0160.973] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0160.973] wcscat (in: _Dest=0x3e3cf58, _Source="BRdlang32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" [0160.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat")) returned 0x20 [0160.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", dwFileAttributes=0x20) returned 0 [0160.973] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.974] GetLastError () returned 0x5 [0160.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", dwFileAttributes=0x20) returned 0 [0160.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.974] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1 [0160.974] wcscmp (_String1="Checkers.CAT", _String2=".") returned 1 [0160.974] wcscmp (_String1="Checkers.CAT", _String2="..") returned 1 [0160.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dee78 [0160.974] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0160.974] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0160.974] wcscat (in: _Dest=0x81dee78, _Source="Checkers.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" [0160.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat")) returned 0x20 [0160.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", dwFileAttributes=0x20) returned 0 [0160.975] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.975] GetLastError () returned 0x5 [0160.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", dwFileAttributes=0x20) returned 0 [0160.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0160.975] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1 [0160.975] wcscmp (_String1="DigSig.CAT", _String2=".") returned 1 [0160.975] wcscmp (_String1="DigSig.CAT", _String2="..") returned 1 [0160.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dee78 [0160.975] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0160.975] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0160.976] wcscat (in: _Dest=0x81dee78, _Source="DigSig.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" [0160.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat")) returned 0x20 [0161.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", dwFileAttributes=0x20) returned 0 [0161.012] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.012] GetLastError () returned 0x5 [0161.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", dwFileAttributes=0x20) returned 0 [0161.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.012] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1 [0161.012] wcscmp (_String1="DVA.CAT", _String2=".") returned 1 [0161.012] wcscmp (_String1="DVA.CAT", _String2="..") returned 1 [0161.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81c0190 [0161.012] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.012] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.012] wcscat (in: _Dest=0x81c0190, _Source="DVA.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" [0161.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat")) returned 0x20 [0161.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", dwFileAttributes=0x20) returned 0 [0161.013] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.013] GetLastError () returned 0x5 [0161.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", dwFileAttributes=0x20) returned 0 [0161.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 [0161.013] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1 [0161.013] wcscmp (_String1="eBook.CAT", _String2=".") returned 1 [0161.013] wcscmp (_String1="eBook.CAT", _String2="..") returned 1 [0161.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dee78 [0161.013] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.014] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.014] wcscat (in: _Dest=0x81dee78, _Source="eBook.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" [0161.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat")) returned 0x20 [0161.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", dwFileAttributes=0x20) returned 0 [0161.014] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.014] GetLastError () returned 0x5 [0161.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", dwFileAttributes=0x20) returned 0 [0161.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.014] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1 [0161.014] wcscmp (_String1="EScript.CAT", _String2=".") returned 1 [0161.014] wcscmp (_String1="EScript.CAT", _String2="..") returned 1 [0161.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dee78 [0161.015] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.015] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.015] wcscat (in: _Dest=0x81dee78, _Source="EScript.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" [0161.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat")) returned 0x20 [0161.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", dwFileAttributes=0x20) returned 0 [0161.015] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.015] GetLastError () returned 0x5 [0161.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", dwFileAttributes=0x20) returned 0 [0161.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.015] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1 [0161.015] wcscmp (_String1="IA32.CAT", _String2=".") returned 1 [0161.015] wcscmp (_String1="IA32.CAT", _String2="..") returned 1 [0161.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0161.016] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.016] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.016] wcscat (in: _Dest=0x81c0190, _Source="IA32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" [0161.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat")) returned 0x20 [0161.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", dwFileAttributes=0x20) returned 0 [0161.016] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.016] GetLastError () returned 0x5 [0161.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", dwFileAttributes=0x20) returned 0 [0161.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 [0161.017] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="MAKEAC~1.CAT")) returned 1 [0161.017] wcscmp (_String1="makeaccessible.CAT", _String2=".") returned 1 [0161.017] wcscmp (_String1="makeaccessible.CAT", _String2="..") returned 1 [0161.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc908 [0161.017] wcscpy (in: _Dest=0x81dc908, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.017] wcscat (in: _Dest=0x81dc908, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.017] wcscat (in: _Dest=0x81dc908, _Source="makeaccessible.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" [0161.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat")) returned 0x20 [0161.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", dwFileAttributes=0x20) returned 0 [0161.017] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.017] GetLastError () returned 0x5 [0161.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", dwFileAttributes=0x20) returned 0 [0161.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc908) returned 1 [0161.018] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="MULTIM~1.CAT")) returned 1 [0161.018] wcscmp (_String1="Multimedia.CAT", _String2=".") returned 1 [0161.018] wcscmp (_String1="Multimedia.CAT", _String2="..") returned 1 [0161.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0161.018] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.018] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.018] wcscat (in: _Dest=0x3e3cf58, _Source="Multimedia.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" [0161.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat")) returned 0x20 [0161.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", dwFileAttributes=0x20) returned 0 [0161.019] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.019] GetLastError () returned 0x5 [0161.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", dwFileAttributes=0x20) returned 0 [0161.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.019] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1 [0161.019] wcscmp (_String1="pddom.CAT", _String2=".") returned 1 [0161.019] wcscmp (_String1="pddom.CAT", _String2="..") returned 1 [0161.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dee78 [0161.019] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.019] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.019] wcscat (in: _Dest=0x81dee78, _Source="pddom.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" [0161.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat")) returned 0x20 [0161.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", dwFileAttributes=0x20) returned 0 [0161.071] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.072] GetLastError () returned 0x5 [0161.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", dwFileAttributes=0x20) returned 0 [0161.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.072] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1 [0161.072] wcscmp (_String1="PPKLite.CAT", _String2=".") returned 1 [0161.072] wcscmp (_String1="PPKLite.CAT", _String2="..") returned 1 [0161.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dee78 [0161.072] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.072] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.072] wcscat (in: _Dest=0x81dee78, _Source="PPKLite.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" [0161.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat")) returned 0x20 [0161.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", dwFileAttributes=0x20) returned 0 [0161.073] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.073] GetLastError () returned 0x5 [0161.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", dwFileAttributes=0x20) returned 0 [0161.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.073] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd68e5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1 [0161.073] wcscmp (_String1="RdLang32.CAT", _String2=".") returned 1 [0161.073] wcscmp (_String1="RdLang32.CAT", _String2="..") returned 1 [0161.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dee78 [0161.073] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.073] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.073] wcscat (in: _Dest=0x81dee78, _Source="RdLang32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" [0161.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat")) returned 0x20 [0161.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", dwFileAttributes=0x20) returned 0 [0161.074] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.074] GetLastError () returned 0x5 [0161.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", dwFileAttributes=0x20) returned 0 [0161.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.074] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="READOU~1.CAT")) returned 1 [0161.074] wcscmp (_String1="ReadOutLoud.CAT", _String2=".") returned 1 [0161.074] wcscmp (_String1="ReadOutLoud.CAT", _String2="..") returned 1 [0161.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cf58 [0161.074] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.075] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.075] wcscat (in: _Dest=0x3e3cf58, _Source="ReadOutLoud.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" [0161.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat")) returned 0x20 [0161.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", dwFileAttributes=0x20) returned 0 [0161.133] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.133] GetLastError () returned 0x5 [0161.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", dwFileAttributes=0x20) returned 0 [0161.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.134] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1 [0161.134] wcscmp (_String1="reflow.CAT", _String2=".") returned 1 [0161.134] wcscmp (_String1="reflow.CAT", _String2="..") returned 1 [0161.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def98 [0161.134] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.134] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.134] wcscat (in: _Dest=0x81def98, _Source="reflow.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" [0161.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat")) returned 0x20 [0161.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", dwFileAttributes=0x20) returned 0 [0161.135] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.135] GetLastError () returned 0x5 [0161.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", dwFileAttributes=0x20) returned 0 [0161.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0161.136] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="SAVEAS~1.CAT")) returned 1 [0161.136] wcscmp (_String1="SaveAsRTF.CAT", _String2=".") returned 1 [0161.136] wcscmp (_String1="SaveAsRTF.CAT", _String2="..") returned 1 [0161.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0161.136] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.136] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.136] wcscat (in: _Dest=0x3e3cf58, _Source="SaveAsRTF.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" [0161.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat")) returned 0x20 [0161.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", dwFileAttributes=0x20) returned 0 [0161.137] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.137] GetLastError () returned 0x5 [0161.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", dwFileAttributes=0x20) returned 0 [0161.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.138] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1 [0161.138] wcscmp (_String1="Search.CAT", _String2=".") returned 1 [0161.138] wcscmp (_String1="Search.CAT", _String2="..") returned 1 [0161.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def98 [0161.138] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.138] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.138] wcscat (in: _Dest=0x81def98, _Source="Search.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" [0161.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat")) returned 0x20 [0161.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", dwFileAttributes=0x20) returned 0 [0161.139] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.139] GetLastError () returned 0x5 [0161.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", dwFileAttributes=0x20) returned 0 [0161.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0161.140] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1 [0161.140] wcscmp (_String1="SendMail.CAT", _String2=".") returned 1 [0161.140] wcscmp (_String1="SendMail.CAT", _String2="..") returned 1 [0161.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def98 [0161.140] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.140] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.140] wcscat (in: _Dest=0x81def98, _Source="SendMail.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" [0161.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat")) returned 0x20 [0161.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", dwFileAttributes=0x20) returned 0 [0161.141] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.141] GetLastError () returned 0x5 [0161.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", dwFileAttributes=0x20) returned 0 [0161.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0161.141] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0161.142] wcscmp (_String1="Services", _String2=".") returned 1 [0161.142] wcscmp (_String1="Services", _String2="..") returned 1 [0161.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bea30 [0161.142] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0161.142] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0161.142] wcscat (in: _Dest=0x81bea30, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0161.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def98 [0161.142] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0161.142] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\" [0161.142] wcscat (in: _Dest=0x81def98, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*" [0161.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fedf8 [0161.142] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0161.143] wcscmp (_String1=".", _String2=".") returned 0 [0161.143] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.143] wcscmp (_String1="..", _String2=".") returned 1 [0161.143] wcscmp (_String1="..", _String2="..") returned 0 [0161.143] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0161.143] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0161.143] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0161.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81872c8 [0161.143] wcscpy (in: _Dest=0x81872c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0161.143] wcscat (in: _Dest=0x81872c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\" [0161.143] wcscat (in: _Dest=0x81872c8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" [0161.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx")) returned 0x20 [0161.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0161.144] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.145] GetLastError () returned 0x5 [0161.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0161.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81872c8) returned 1 [0161.145] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0161.145] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0161.145] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0161.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81872c8 [0161.145] wcscpy (in: _Dest=0x81872c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0161.146] wcscat (in: _Dest=0x81872c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\" [0161.146] wcscat (in: _Dest=0x81872c8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" [0161.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx")) returned 0x20 [0162.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0162.287] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.287] GetLastError () returned 0x5 [0162.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0162.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81872c8) returned 1 [0162.288] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0162.288] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0162.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fedf8) returned 1 [0162.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0162.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 [0162.288] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1 [0162.288] wcscmp (_String1="Spelling.CAT", _String2=".") returned 1 [0162.288] wcscmp (_String1="Spelling.CAT", _String2="..") returned 1 [0162.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def98 [0162.289] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0162.289] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0162.289] wcscat (in: _Dest=0x81def98, _Source="Spelling.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" [0165.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2898 [0165.405] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1 [0165.405] wcscmp (_String1="updater.CAT", _String2=".") returned 1 [0165.405] wcscmp (_String1="updater.CAT", _String2="..") returned 1 [0165.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df538 [0165.405] wcscpy (in: _Dest=0x81df538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0165.405] wcscat (in: _Dest=0x81df538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0165.405] wcscat (in: _Dest=0x81df538, _Source="updater.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" [0165.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2664 [0165.416] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1 [0165.416] wcscmp (_String1="WebLink.CAT", _String2=".") returned 1 [0165.416] wcscmp (_String1="WebLink.CAT", _String2="..") returned 1 [0165.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dd6d8 [0165.416] wcscpy (in: _Dest=0x81dd6d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0165.416] wcscat (in: _Dest=0x81dd6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0165.416] wcscat (in: _Dest=0x81dd6d8, _Source="WebLink.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" [0165.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2668 [0165.417] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0 [0165.417] FindClose (in: hFindFile=0x3f38158 | out: hFindFile=0x3f38158) returned 1 [0165.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0165.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e244c0) returned 1 [0165.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 Thread: id = 2140 os_tid = 0x1d10 [0152.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e23dc0 [0152.343] wcscpy (in: _Dest=0x3e23dc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0152.343] wcscat (in: _Dest=0x3e23dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0152.343] wcscat (in: _Dest=0x3e23dc0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*" [0152.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8102080 [0152.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55708 [0155.264] wcscmp (_String1=".", _String2=".") returned 0 [0155.264] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.264] wcscmp (_String1="..", _String2=".") returned 1 [0155.264] wcscmp (_String1="..", _String2="..") returned 0 [0155.265] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="ACCESS~1.CZE")) returned 1 [0155.265] wcscmp (_String1="accessibility.CZE", _String2=".") returned 1 [0155.265] wcscmp (_String1="accessibility.CZE", _String2="..") returned 1 [0155.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819bb78 [0155.265] wcscpy (in: _Dest=0x819bb78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0155.265] wcscat (in: _Dest=0x819bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0155.265] wcscat (in: _Dest=0x819bb78, _Source="accessibility.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" [0159.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze")) returned 0x20 [0159.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", dwFileAttributes=0x20) returned 0 [0159.582] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.583] GetLastError () returned 0x5 [0159.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", dwFileAttributes=0x20) returned 0 [0159.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bb78) returned 1 [0159.583] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1 [0159.583] wcscmp (_String1="Acroform.CZE", _String2=".") returned 1 [0159.583] wcscmp (_String1="Acroform.CZE", _String2="..") returned 1 [0159.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de608 [0159.583] wcscpy (in: _Dest=0x81de608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0159.583] wcscat (in: _Dest=0x81de608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0159.583] wcscat (in: _Dest=0x81de608, _Source="Acroform.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" [0159.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze")) returned 0x20 [0159.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", dwFileAttributes=0x20) returned 0 [0159.598] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.598] GetLastError () returned 0x5 [0159.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", dwFileAttributes=0x20) returned 0 [0159.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de608) returned 1 [0159.599] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="ADOBEC~1.CZE")) returned 1 [0159.599] wcscmp (_String1="AdobeCollabSync.CZE", _String2=".") returned 1 [0159.599] wcscmp (_String1="AdobeCollabSync.CZE", _String2="..") returned 1 [0159.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bfd8 [0159.599] wcscpy (in: _Dest=0x819bfd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0159.599] wcscat (in: _Dest=0x819bfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0159.599] wcscat (in: _Dest=0x819bfd8, _Source="AdobeCollabSync.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" [0159.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze")) returned 0x20 [0159.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", dwFileAttributes=0x20) returned 0 [0159.627] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.628] GetLastError () returned 0x5 [0159.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", dwFileAttributes=0x20) returned 0 [0159.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bfd8) returned 1 [0159.628] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1 [0159.628] wcscmp (_String1="Annots.CZE", _String2=".") returned 1 [0159.628] wcscmp (_String1="Annots.CZE", _String2="..") returned 1 [0159.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de608 [0159.628] wcscpy (in: _Dest=0x81de608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0159.628] wcscat (in: _Dest=0x81de608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0159.628] wcscat (in: _Dest=0x81de608, _Source="Annots.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" [0159.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze")) returned 0x20 [0162.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", dwFileAttributes=0x20) returned 0 [0162.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.124] GetLastError () returned 0x5 [0162.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", dwFileAttributes=0x20) returned 0 [0162.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de608) returned 1 [0162.124] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="BRDLAN~1.CZE")) returned 1 [0162.124] wcscmp (_String1="BRdlang32.CZE", _String2=".") returned 1 [0162.124] wcscmp (_String1="BRdlang32.CZE", _String2="..") returned 1 [0162.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3d5e0 [0162.124] wcscpy (in: _Dest=0x3e3d5e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0162.124] wcscat (in: _Dest=0x3e3d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0162.124] wcscat (in: _Dest=0x3e3d5e0, _Source="BRdlang32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" [0164.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a3c [0164.508] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1 [0164.508] wcscmp (_String1="Checkers.CZE", _String2=".") returned 1 [0164.508] wcscmp (_String1="Checkers.CZE", _String2="..") returned 1 [0164.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dd6d8 [0164.508] wcscpy (in: _Dest=0x81dd6d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.508] wcscat (in: _Dest=0x81dd6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.508] wcscat (in: _Dest=0x81dd6d8, _Source="Checkers.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" [0164.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0164.509] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1 [0164.510] wcscmp (_String1="DigSig.CZE", _String2=".") returned 1 [0164.510] wcscmp (_String1="DigSig.CZE", _String2="..") returned 1 [0164.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df538 [0164.510] wcscpy (in: _Dest=0x81df538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.510] wcscat (in: _Dest=0x81df538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.510] wcscat (in: _Dest=0x81df538, _Source="DigSig.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" [0164.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0164.511] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1 [0164.511] wcscmp (_String1="DVA.CZE", _String2=".") returned 1 [0164.511] wcscmp (_String1="DVA.CZE", _String2="..") returned 1 [0164.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf2b0 [0164.511] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.511] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.511] wcscat (in: _Dest=0x81bf2b0, _Source="DVA.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" [0164.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0164.512] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1 [0164.512] wcscmp (_String1="eBook.CZE", _String2=".") returned 1 [0164.512] wcscmp (_String1="eBook.CZE", _String2="..") returned 1 [0164.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df4a8 [0164.512] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.512] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.512] wcscat (in: _Dest=0x81df4a8, _Source="eBook.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" [0164.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0164.513] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1 [0164.513] wcscmp (_String1="EScript.CZE", _String2=".") returned 1 [0164.513] wcscmp (_String1="EScript.CZE", _String2="..") returned 1 [0164.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81def08 [0164.513] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.513] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.513] wcscat (in: _Dest=0x81def08, _Source="EScript.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" [0164.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0164.514] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1 [0164.514] wcscmp (_String1="IA32.CZE", _String2=".") returned 1 [0164.514] wcscmp (_String1="IA32.CZE", _String2="..") returned 1 [0164.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0080 [0164.514] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.514] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.514] wcscat (in: _Dest=0x81c0080, _Source="IA32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" [0164.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0164.515] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa5ed80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="MAKEAC~1.CZE")) returned 1 [0164.515] wcscmp (_String1="makeaccessible.CZE", _String2=".") returned 1 [0164.515] wcscmp (_String1="makeaccessible.CZE", _String2="..") returned 1 [0164.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b218 [0164.516] wcscpy (in: _Dest=0x819b218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.516] wcscat (in: _Dest=0x819b218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.516] wcscat (in: _Dest=0x819b218, _Source="makeaccessible.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" [0164.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0164.517] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="MULTIM~1.CZE")) returned 1 [0164.517] wcscmp (_String1="Multimedia.CZE", _String2=".") returned 1 [0164.517] wcscmp (_String1="Multimedia.CZE", _String2="..") returned 1 [0164.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d13c8 [0164.517] wcscpy (in: _Dest=0x81d13c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.517] wcscat (in: _Dest=0x81d13c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.517] wcscat (in: _Dest=0x81d13c8, _Source="Multimedia.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" [0164.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d13c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0164.518] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1 [0164.518] wcscmp (_String1="pddom.CZE", _String2=".") returned 1 [0164.518] wcscmp (_String1="pddom.CZE", _String2="..") returned 1 [0164.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df418 [0164.518] wcscpy (in: _Dest=0x81df418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.518] wcscat (in: _Dest=0x81df418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.518] wcscat (in: _Dest=0x81df418, _Source="pddom.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" [0164.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0164.519] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1 [0164.519] wcscmp (_String1="PPKLite.CZE", _String2=".") returned 1 [0164.519] wcscmp (_String1="PPKLite.CZE", _String2="..") returned 1 [0164.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df1d8 [0164.519] wcscpy (in: _Dest=0x81df1d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.519] wcscat (in: _Dest=0x81df1d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.519] wcscat (in: _Dest=0x81df1d8, _Source="PPKLite.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" [0164.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0164.520] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd0e71a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1 [0164.520] wcscmp (_String1="RdLang32.CZE", _String2=".") returned 1 [0164.520] wcscmp (_String1="RdLang32.CZE", _String2="..") returned 1 [0164.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0164.520] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.520] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.520] wcscat (in: _Dest=0x81de8d8, _Source="RdLang32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" [0164.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0164.521] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="READOU~1.CZE")) returned 1 [0164.521] wcscmp (_String1="ReadOutLoud.CZE", _String2=".") returned 1 [0164.521] wcscmp (_String1="ReadOutLoud.CZE", _String2="..") returned 1 [0164.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1168 [0164.522] wcscpy (in: _Dest=0x81d1168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.522] wcscat (in: _Dest=0x81d1168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.522] wcscat (in: _Dest=0x81d1168, _Source="ReadOutLoud.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" [0164.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0164.526] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1 [0164.526] wcscmp (_String1="reflow.CZE", _String2=".") returned 1 [0164.526] wcscmp (_String1="reflow.CZE", _String2="..") returned 1 [0164.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de4e8 [0164.526] wcscpy (in: _Dest=0x81de4e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.526] wcscat (in: _Dest=0x81de4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.526] wcscat (in: _Dest=0x81de4e8, _Source="reflow.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" [0164.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b58 [0164.527] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="SAVEAS~1.CZE")) returned 1 [0164.527] wcscmp (_String1="SaveAsRTF.CZE", _String2=".") returned 1 [0164.527] wcscmp (_String1="SaveAsRTF.CZE", _String2="..") returned 1 [0164.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d19b8 [0164.527] wcscpy (in: _Dest=0x81d19b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.527] wcscat (in: _Dest=0x81d19b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.527] wcscat (in: _Dest=0x81d19b8, _Source="SaveAsRTF.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" [0164.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d19b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26bc [0164.528] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1 [0164.528] wcscmp (_String1="Search.CZE", _String2=".") returned 1 [0164.529] wcscmp (_String1="Search.CZE", _String2="..") returned 1 [0164.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de3c8 [0164.529] wcscpy (in: _Dest=0x81de3c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.529] wcscat (in: _Dest=0x81de3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.529] wcscat (in: _Dest=0x81de3c8, _Source="Search.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" [0164.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0164.530] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1 [0164.530] wcscmp (_String1="SendMail.CZE", _String2=".") returned 1 [0164.530] wcscmp (_String1="SendMail.CZE", _String2="..") returned 1 [0164.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de338 [0164.530] wcscpy (in: _Dest=0x81de338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.530] wcscat (in: _Dest=0x81de338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.530] wcscat (in: _Dest=0x81de338, _Source="SendMail.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" [0164.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0164.531] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.531] wcscmp (_String1="Services", _String2=".") returned 1 [0164.531] wcscmp (_String1="Services", _String2="..") returned 1 [0164.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf3c0 [0164.531] wcscpy (in: _Dest=0x81bf3c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.531] wcscat (in: _Dest=0x81bf3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.531] wcscat (in: _Dest=0x81bf3c0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0164.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bf3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0c [0164.532] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1 [0164.532] wcscmp (_String1="Spelling.CZE", _String2=".") returned 1 [0164.532] wcscmp (_String1="Spelling.CZE", _String2="..") returned 1 [0164.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de188 [0164.533] wcscpy (in: _Dest=0x81de188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.533] wcscat (in: _Dest=0x81de188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.533] wcscat (in: _Dest=0x81de188, _Source="Spelling.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" [0164.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0164.534] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1 [0164.534] wcscmp (_String1="updater.CZE", _String2=".") returned 1 [0164.534] wcscmp (_String1="updater.CZE", _String2="..") returned 1 [0164.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de458 [0164.534] wcscpy (in: _Dest=0x81de458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.534] wcscat (in: _Dest=0x81de458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.534] wcscat (in: _Dest=0x81de458, _Source="updater.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" [0164.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b30 [0164.535] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1 [0164.535] wcscmp (_String1="WebLink.CZE", _String2=".") returned 1 [0164.535] wcscmp (_String1="WebLink.CZE", _String2="..") returned 1 [0164.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de2a8 [0164.535] wcscpy (in: _Dest=0x81de2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0164.535] wcscat (in: _Dest=0x81de2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0164.535] wcscat (in: _Dest=0x81de2a8, _Source="WebLink.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" [0164.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0164.536] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 0 [0164.536] FindClose (in: hFindFile=0x3e55708 | out: hFindFile=0x3e55708) returned 1 [0164.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8102080) returned 1 [0164.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23dc0) returned 1 [0164.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0ba00) returned 1 Thread: id = 2141 os_tid = 0x1d14 [0152.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24a40 [0152.345] wcscpy (in: _Dest=0x3e24a40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0152.345] wcscat (in: _Dest=0x3e24a40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0152.345] wcscat (in: _Dest=0x3e24a40, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*" [0152.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101210 [0152.345] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9cfb1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0157.234] wcscmp (_String1=".", _String2=".") returned 0 [0157.234] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9cfb1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.234] wcscmp (_String1="..", _String2=".") returned 1 [0157.234] wcscmp (_String1="..", _String2="..") returned 0 [0157.234] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="ACCESS~1.DAN")) returned 1 [0157.234] wcscmp (_String1="accessibility.DAN", _String2=".") returned 1 [0157.234] wcscmp (_String1="accessibility.DAN", _String2="..") returned 1 [0157.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc9a8 [0157.234] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0157.234] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0157.234] wcscat (in: _Dest=0x81dc9a8, _Source="accessibility.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" [0161.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan")) returned 0x20 [0161.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN", dwFileAttributes=0x20) returned 0 [0161.021] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.021] GetLastError () returned 0x5 [0161.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN", dwFileAttributes=0x20) returned 0 [0161.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 [0161.021] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1 [0161.021] wcscmp (_String1="Acroform.DAN", _String2=".") returned 1 [0161.021] wcscmp (_String1="Acroform.DAN", _String2="..") returned 1 [0161.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df148 [0161.021] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.021] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.022] wcscat (in: _Dest=0x81df148, _Source="Acroform.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" [0161.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan")) returned 0x20 [0161.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN", dwFileAttributes=0x20) returned 0 [0161.022] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.022] GetLastError () returned 0x5 [0161.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN", dwFileAttributes=0x20) returned 0 [0161.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.023] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="ADOBEC~1.DAN")) returned 1 [0161.023] wcscmp (_String1="AdobeCollabSync.DAN", _String2=".") returned 1 [0161.023] wcscmp (_String1="AdobeCollabSync.DAN", _String2="..") returned 1 [0161.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc9a8 [0161.023] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.023] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.023] wcscat (in: _Dest=0x81dc9a8, _Source="AdobeCollabSync.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" [0161.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan")) returned 0x20 [0161.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN", dwFileAttributes=0x20) returned 0 [0161.024] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.024] GetLastError () returned 0x5 [0161.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN", dwFileAttributes=0x20) returned 0 [0161.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 [0161.024] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1 [0161.024] wcscmp (_String1="Annots.DAN", _String2=".") returned 1 [0161.024] wcscmp (_String1="Annots.DAN", _String2="..") returned 1 [0161.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df148 [0161.025] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.025] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.025] wcscat (in: _Dest=0x81df148, _Source="Annots.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" [0161.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan")) returned 0x20 [0161.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN", dwFileAttributes=0x20) returned 0 [0161.025] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.026] GetLastError () returned 0x5 [0161.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN", dwFileAttributes=0x20) returned 0 [0161.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.026] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="BRDLAN~1.DAN")) returned 1 [0161.026] wcscmp (_String1="BRdlang32.DAN", _String2=".") returned 1 [0161.026] wcscmp (_String1="BRdlang32.DAN", _String2="..") returned 1 [0161.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0161.026] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.026] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.026] wcscat (in: _Dest=0x3e3cf58, _Source="BRdlang32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" [0161.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan")) returned 0x20 [0161.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN", dwFileAttributes=0x20) returned 0 [0161.027] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.027] GetLastError () returned 0x5 [0161.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN", dwFileAttributes=0x20) returned 0 [0161.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.027] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1 [0161.028] wcscmp (_String1="Checkers.DAN", _String2=".") returned 1 [0161.028] wcscmp (_String1="Checkers.DAN", _String2="..") returned 1 [0161.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df148 [0161.028] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.028] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.028] wcscat (in: _Dest=0x81df148, _Source="Checkers.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" [0161.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan")) returned 0x20 [0161.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN", dwFileAttributes=0x20) returned 0 [0161.076] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.077] GetLastError () returned 0x5 [0161.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN", dwFileAttributes=0x20) returned 0 [0161.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.077] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1 [0161.077] wcscmp (_String1="DigSig.DAN", _String2=".") returned 1 [0161.077] wcscmp (_String1="DigSig.DAN", _String2="..") returned 1 [0161.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df148 [0161.077] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.077] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.078] wcscat (in: _Dest=0x81df148, _Source="DigSig.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" [0161.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan")) returned 0x20 [0161.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN", dwFileAttributes=0x20) returned 0 [0161.078] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.079] GetLastError () returned 0x5 [0161.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN", dwFileAttributes=0x20) returned 0 [0161.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.079] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1 [0161.079] wcscmp (_String1="DVA.DAN", _String2=".") returned 1 [0161.079] wcscmp (_String1="DVA.DAN", _String2="..") returned 1 [0161.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bea30 [0161.080] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.080] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.080] wcscat (in: _Dest=0x81bea30, _Source="DVA.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" [0161.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan")) returned 0x20 [0161.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN", dwFileAttributes=0x20) returned 0 [0161.081] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.081] GetLastError () returned 0x5 [0161.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN", dwFileAttributes=0x20) returned 0 [0161.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 [0161.081] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1 [0161.082] wcscmp (_String1="eBook.DAN", _String2=".") returned 1 [0161.082] wcscmp (_String1="eBook.DAN", _String2="..") returned 1 [0161.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df148 [0161.082] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.082] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.082] wcscat (in: _Dest=0x81df148, _Source="eBook.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" [0161.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan")) returned 0x20 [0161.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN", dwFileAttributes=0x20) returned 0 [0161.082] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.083] GetLastError () returned 0x5 [0161.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN", dwFileAttributes=0x20) returned 0 [0161.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.083] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1 [0161.083] wcscmp (_String1="EScript.DAN", _String2=".") returned 1 [0161.083] wcscmp (_String1="EScript.DAN", _String2="..") returned 1 [0161.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df148 [0161.083] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.083] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.083] wcscat (in: _Dest=0x81df148, _Source="EScript.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" [0161.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan")) returned 0x20 [0161.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN", dwFileAttributes=0x20) returned 0 [0161.153] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.153] GetLastError () returned 0x5 [0161.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN", dwFileAttributes=0x20) returned 0 [0161.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.154] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1 [0161.154] wcscmp (_String1="IA32.DAN", _String2=".") returned 1 [0161.154] wcscmp (_String1="IA32.DAN", _String2="..") returned 1 [0161.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf228 [0161.154] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.154] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.154] wcscat (in: _Dest=0x81bf228, _Source="IA32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" [0161.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan")) returned 0x20 [0161.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN", dwFileAttributes=0x20) returned 0 [0161.155] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.155] GetLastError () returned 0x5 [0161.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN", dwFileAttributes=0x20) returned 0 [0161.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 [0161.156] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="MAKEAC~1.DAN")) returned 1 [0161.156] wcscmp (_String1="makeaccessible.DAN", _String2=".") returned 1 [0161.156] wcscmp (_String1="makeaccessible.DAN", _String2="..") returned 1 [0161.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc9a8 [0161.156] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.156] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.156] wcscat (in: _Dest=0x81dc9a8, _Source="makeaccessible.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" [0161.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan")) returned 0x20 [0161.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN", dwFileAttributes=0x20) returned 0 [0161.157] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.158] GetLastError () returned 0x5 [0161.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN", dwFileAttributes=0x20) returned 0 [0161.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 [0161.158] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9ddfa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="MULTIM~1.DAN")) returned 1 [0161.158] wcscmp (_String1="Multimedia.DAN", _String2=".") returned 1 [0161.158] wcscmp (_String1="Multimedia.DAN", _String2="..") returned 1 [0161.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0161.159] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.159] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.159] wcscat (in: _Dest=0x3e3cf58, _Source="Multimedia.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" [0161.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan")) returned 0x20 [0161.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN", dwFileAttributes=0x20) returned 0 [0161.160] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.160] GetLastError () returned 0x5 [0161.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN", dwFileAttributes=0x20) returned 0 [0161.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.160] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1 [0161.160] wcscmp (_String1="pddom.DAN", _String2=".") returned 1 [0161.161] wcscmp (_String1="pddom.DAN", _String2="..") returned 1 [0161.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df148 [0161.161] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.161] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.161] wcscat (in: _Dest=0x81df148, _Source="pddom.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" [0161.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan")) returned 0x20 [0161.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN", dwFileAttributes=0x20) returned 0 [0161.162] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.162] GetLastError () returned 0x5 [0161.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN", dwFileAttributes=0x20) returned 0 [0161.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.162] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1 [0161.162] wcscmp (_String1="PPKLITE.DAN", _String2=".") returned 1 [0161.163] wcscmp (_String1="PPKLITE.DAN", _String2="..") returned 1 [0161.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df148 [0161.163] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.163] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.163] wcscat (in: _Dest=0x81df148, _Source="PPKLITE.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" [0161.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan")) returned 0x20 [0161.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN", dwFileAttributes=0x20) returned 0 [0161.164] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.167] GetLastError () returned 0x5 [0161.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN", dwFileAttributes=0x20) returned 0 [0161.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.167] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1 [0161.167] wcscmp (_String1="RdLang32.DAN", _String2=".") returned 1 [0161.167] wcscmp (_String1="RdLang32.DAN", _String2="..") returned 1 [0161.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df148 [0161.167] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.167] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.168] wcscat (in: _Dest=0x81df148, _Source="RdLang32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" [0161.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan")) returned 0x20 [0161.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN", dwFileAttributes=0x20) returned 0 [0161.168] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.169] GetLastError () returned 0x5 [0161.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN", dwFileAttributes=0x20) returned 0 [0161.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.169] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="READOU~1.DAN")) returned 1 [0161.169] wcscmp (_String1="ReadOutLoud.DAN", _String2=".") returned 1 [0161.169] wcscmp (_String1="ReadOutLoud.DAN", _String2="..") returned 1 [0161.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cf58 [0161.169] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.169] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.169] wcscat (in: _Dest=0x3e3cf58, _Source="ReadOutLoud.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" [0161.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan")) returned 0x20 [0161.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN", dwFileAttributes=0x20) returned 0 [0161.170] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.170] GetLastError () returned 0x5 [0161.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN", dwFileAttributes=0x20) returned 0 [0161.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.170] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1 [0161.170] wcscmp (_String1="reflow.DAN", _String2=".") returned 1 [0161.170] wcscmp (_String1="reflow.DAN", _String2="..") returned 1 [0161.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df148 [0161.170] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.170] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.170] wcscat (in: _Dest=0x81df148, _Source="reflow.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" [0161.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan")) returned 0x20 [0161.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN", dwFileAttributes=0x20) returned 0 [0161.171] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.171] GetLastError () returned 0x5 [0161.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN", dwFileAttributes=0x20) returned 0 [0161.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.171] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="SAVEAS~1.DAN")) returned 1 [0161.171] wcscmp (_String1="SaveAsRTF.DAN", _String2=".") returned 1 [0161.171] wcscmp (_String1="SaveAsRTF.DAN", _String2="..") returned 1 [0161.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0161.171] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.172] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.172] wcscat (in: _Dest=0x3e3cf58, _Source="SaveAsRTF.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" [0161.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan")) returned 0x20 [0161.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN", dwFileAttributes=0x20) returned 0 [0161.172] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.172] GetLastError () returned 0x5 [0161.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN", dwFileAttributes=0x20) returned 0 [0161.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.173] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1 [0161.173] wcscmp (_String1="Search.DAN", _String2=".") returned 1 [0161.173] wcscmp (_String1="Search.DAN", _String2="..") returned 1 [0161.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df148 [0161.173] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.173] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.173] wcscat (in: _Dest=0x81df148, _Source="Search.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" [0161.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan")) returned 0x20 [0161.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN", dwFileAttributes=0x20) returned 0 [0161.173] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.173] GetLastError () returned 0x5 [0161.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN", dwFileAttributes=0x20) returned 0 [0161.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.174] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1 [0161.174] wcscmp (_String1="SendMail.DAN", _String2=".") returned 1 [0161.174] wcscmp (_String1="SendMail.DAN", _String2="..") returned 1 [0161.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df148 [0161.174] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.174] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.174] wcscat (in: _Dest=0x81df148, _Source="SendMail.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" [0161.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan")) returned 0x20 [0161.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN", dwFileAttributes=0x20) returned 0 [0161.175] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.175] GetLastError () returned 0x5 [0161.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN", dwFileAttributes=0x20) returned 0 [0161.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0161.175] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0161.175] wcscmp (_String1="Services", _String2=".") returned 1 [0161.175] wcscmp (_String1="Services", _String2="..") returned 1 [0161.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf228 [0161.175] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0161.175] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0161.175] wcscat (in: _Dest=0x81bf228, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0161.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df148 [0161.176] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0161.176] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\" [0161.176] wcscat (in: _Dest=0x81df148, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*" [0161.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09c58 [0161.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0161.176] wcscmp (_String1=".", _String2=".") returned 0 [0161.176] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.176] wcscmp (_String1="..", _String2=".") returned 1 [0161.176] wcscmp (_String1="..", _String2="..") returned 0 [0161.176] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0161.176] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0161.176] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0161.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186a40 [0161.176] wcscpy (in: _Dest=0x8186a40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0161.176] wcscat (in: _Dest=0x8186a40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\" [0161.177] wcscat (in: _Dest=0x8186a40, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" [0161.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx")) returned 0x20 [0161.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0161.177] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.177] GetLastError () returned 0x5 [0161.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0161.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a40) returned 1 [0161.178] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0161.178] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0161.178] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0161.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186a40 [0161.178] wcscpy (in: _Dest=0x8186a40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0161.178] wcscat (in: _Dest=0x8186a40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\" [0161.178] wcscat (in: _Dest=0x8186a40, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" [0161.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx")) returned 0x20 [0161.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0161.178] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.179] GetLastError () returned 0x5 [0161.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0161.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a40) returned 1 [0162.289] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0162.289] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0162.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09c58) returned 1 [0162.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 [0162.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 [0162.290] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1 [0162.290] wcscmp (_String1="Spelling.DAN", _String2=".") returned 1 [0162.290] wcscmp (_String1="Spelling.DAN", _String2="..") returned 1 [0162.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df148 [0162.290] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0162.290] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0162.290] wcscat (in: _Dest=0x81df148, _Source="Spelling.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" [0163.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a0 [0163.141] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1 [0163.141] wcscmp (_String1="updater.DAN", _String2=".") returned 1 [0163.141] wcscmp (_String1="updater.DAN", _String2="..") returned 1 [0163.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35400 [0163.141] wcscpy (in: _Dest=0x3f35400, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0163.141] wcscat (in: _Dest=0x3f35400, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0163.141] wcscat (in: _Dest=0x3f35400, _Source="updater.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" [0163.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0163.142] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1 [0163.142] wcscmp (_String1="Weblink.DAN", _String2=".") returned 1 [0163.142] wcscmp (_String1="Weblink.DAN", _String2="..") returned 1 [0163.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f357f0 [0163.142] wcscpy (in: _Dest=0x3f357f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0163.142] wcscat (in: _Dest=0x3f357f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0163.142] wcscat (in: _Dest=0x3f357f0, _Source="Weblink.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" [0163.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f357f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0163.143] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 0 [0163.143] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0163.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101210) returned 1 [0163.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24a40) returned 1 [0163.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bb68) returned 1 Thread: id = 2142 os_tid = 0x1d18 [0152.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24540 [0152.346] wcscpy (in: _Dest=0x3e24540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0152.346] wcscat (in: _Dest=0x3e24540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0152.346] wcscat (in: _Dest=0x3e24540, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*" [0152.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff060 [0152.346] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0158.439] wcscmp (_String1=".", _String2=".") returned 0 [0158.439] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.439] wcscmp (_String1="..", _String2=".") returned 1 [0158.439] wcscmp (_String1="..", _String2="..") returned 0 [0158.439] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DEU", cAlternateFileName="ACCESS~1.DEU")) returned 1 [0158.439] wcscmp (_String1="accessibility.DEU", _String2=".") returned 1 [0158.440] wcscmp (_String1="accessibility.DEU", _String2="..") returned 1 [0158.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dcf48 [0158.440] wcscpy (in: _Dest=0x81dcf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0158.440] wcscat (in: _Dest=0x81dcf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0158.440] wcscat (in: _Dest=0x81dcf48, _Source="accessibility.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" [0159.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu")) returned 0x20 [0159.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU", dwFileAttributes=0x20) returned 0 [0159.851] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.851] GetLastError () returned 0x5 [0159.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU", dwFileAttributes=0x20) returned 0 [0159.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcf48) returned 1 [0159.851] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DEU", cAlternateFileName="")) returned 1 [0159.851] wcscmp (_String1="Acroform.DEU", _String2=".") returned 1 [0159.851] wcscmp (_String1="Acroform.DEU", _String2="..") returned 1 [0159.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0159.851] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.851] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.851] wcscat (in: _Dest=0x81de728, _Source="Acroform.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" [0159.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu")) returned 0x20 [0159.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU", dwFileAttributes=0x20) returned 0 [0159.867] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.867] GetLastError () returned 0x5 [0159.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU", dwFileAttributes=0x20) returned 0 [0159.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.868] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DEU", cAlternateFileName="ADOBEC~1.DEU")) returned 1 [0159.868] wcscmp (_String1="AdobeCollabSync.DEU", _String2=".") returned 1 [0159.868] wcscmp (_String1="AdobeCollabSync.DEU", _String2="..") returned 1 [0159.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcf48 [0159.868] wcscpy (in: _Dest=0x81dcf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.868] wcscat (in: _Dest=0x81dcf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.868] wcscat (in: _Dest=0x81dcf48, _Source="AdobeCollabSync.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" [0159.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu")) returned 0x20 [0159.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU", dwFileAttributes=0x20) returned 0 [0159.873] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.873] GetLastError () returned 0x5 [0159.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU", dwFileAttributes=0x20) returned 0 [0159.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcf48) returned 1 [0159.873] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f63320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DEU", cAlternateFileName="")) returned 1 [0159.873] wcscmp (_String1="Annots.DEU", _String2=".") returned 1 [0159.873] wcscmp (_String1="Annots.DEU", _String2="..") returned 1 [0159.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de698 [0159.873] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.873] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.873] wcscat (in: _Dest=0x81de698, _Source="Annots.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" [0159.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu")) returned 0x20 [0159.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU", dwFileAttributes=0x20) returned 0 [0159.874] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.874] GetLastError () returned 0x5 [0159.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU", dwFileAttributes=0x20) returned 0 [0159.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 [0159.874] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DEU", cAlternateFileName="BRDLAN~1.DEU")) returned 1 [0159.874] wcscmp (_String1="BRdlang32.DEU", _String2=".") returned 1 [0159.874] wcscmp (_String1="BRdlang32.DEU", _String2="..") returned 1 [0159.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0159.874] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.874] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.874] wcscat (in: _Dest=0x32cf48, _Source="BRdlang32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" [0159.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu")) returned 0x20 [0159.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU", dwFileAttributes=0x20) returned 0 [0159.883] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.884] GetLastError () returned 0x5 [0159.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU", dwFileAttributes=0x20) returned 0 [0159.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.884] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DEU", cAlternateFileName="")) returned 1 [0159.884] wcscmp (_String1="Checkers.DEU", _String2=".") returned 1 [0159.884] wcscmp (_String1="Checkers.DEU", _String2="..") returned 1 [0159.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de698 [0159.884] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.884] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.884] wcscat (in: _Dest=0x81de698, _Source="Checkers.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" [0159.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu")) returned 0x20 [0159.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU", dwFileAttributes=0x20) returned 0 [0159.905] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.905] GetLastError () returned 0x5 [0159.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU", dwFileAttributes=0x20) returned 0 [0159.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 [0159.905] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DEU", cAlternateFileName="")) returned 1 [0159.905] wcscmp (_String1="DigSig.DEU", _String2=".") returned 1 [0159.905] wcscmp (_String1="DigSig.DEU", _String2="..") returned 1 [0159.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de698 [0159.905] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.905] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.905] wcscat (in: _Dest=0x81de698, _Source="DigSig.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" [0159.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu")) returned 0x20 [0159.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU", dwFileAttributes=0x20) returned 0 [0159.920] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.920] GetLastError () returned 0x5 [0159.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU", dwFileAttributes=0x20) returned 0 [0159.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 [0159.920] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DEU", cAlternateFileName="")) returned 1 [0159.920] wcscmp (_String1="DVA.DEU", _String2=".") returned 1 [0159.920] wcscmp (_String1="DVA.DEU", _String2="..") returned 1 [0159.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bebc8 [0159.920] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.920] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.920] wcscat (in: _Dest=0x81bebc8, _Source="DVA.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" [0159.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu")) returned 0x20 [0159.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU", dwFileAttributes=0x20) returned 0 [0159.950] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.950] GetLastError () returned 0x5 [0159.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU", dwFileAttributes=0x20) returned 0 [0159.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0159.950] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DEU", cAlternateFileName="")) returned 1 [0159.950] wcscmp (_String1="eBook.DEU", _String2=".") returned 1 [0159.950] wcscmp (_String1="eBook.DEU", _String2="..") returned 1 [0159.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2668 [0159.950] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.950] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.950] wcscat (in: _Dest=0x3eb2668, _Source="eBook.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" [0159.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu")) returned 0x20 [0159.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU", dwFileAttributes=0x20) returned 0 [0159.966] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.966] GetLastError () returned 0x5 [0159.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU", dwFileAttributes=0x20) returned 0 [0159.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 [0159.966] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Escript.deu", cAlternateFileName="")) returned 1 [0159.967] wcscmp (_String1="Escript.deu", _String2=".") returned 1 [0159.967] wcscmp (_String1="Escript.deu", _String2="..") returned 1 [0159.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2668 [0159.967] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.967] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.967] wcscat (in: _Dest=0x3eb2668, _Source="Escript.deu" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" [0159.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu")) returned 0x20 [0159.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu", dwFileAttributes=0x20) returned 0 [0159.967] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.967] GetLastError () returned 0x5 [0159.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu", dwFileAttributes=0x20) returned 0 [0159.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 [0159.967] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DEU", cAlternateFileName="")) returned 1 [0159.967] wcscmp (_String1="IA32.DEU", _String2=".") returned 1 [0159.967] wcscmp (_String1="IA32.DEU", _String2="..") returned 1 [0159.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0159.968] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.968] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.968] wcscat (in: _Dest=0x81bebc8, _Source="IA32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" [0159.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu")) returned 0x20 [0159.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU", dwFileAttributes=0x20) returned 0 [0159.968] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.968] GetLastError () returned 0x5 [0159.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU", dwFileAttributes=0x20) returned 0 [0159.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0159.968] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DEU", cAlternateFileName="MAKEAC~1.DEU")) returned 1 [0159.968] wcscmp (_String1="makeaccessible.DEU", _String2=".") returned 1 [0159.968] wcscmp (_String1="makeaccessible.DEU", _String2="..") returned 1 [0159.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a6d8 [0159.969] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.969] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.969] wcscat (in: _Dest=0x819a6d8, _Source="makeaccessible.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" [0159.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu")) returned 0x20 [0159.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU", dwFileAttributes=0x20) returned 0 [0159.987] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.987] GetLastError () returned 0x5 [0159.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU", dwFileAttributes=0x20) returned 0 [0159.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 [0159.988] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2c8760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DEU", cAlternateFileName="MULTIM~1.DEU")) returned 1 [0159.988] wcscmp (_String1="Multimedia.DEU", _String2=".") returned 1 [0159.988] wcscmp (_String1="Multimedia.DEU", _String2="..") returned 1 [0159.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cf48 [0159.988] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.988] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.988] wcscat (in: _Dest=0x32cf48, _Source="Multimedia.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" [0159.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu")) returned 0x20 [0159.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU", dwFileAttributes=0x20) returned 0 [0159.988] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.988] GetLastError () returned 0x5 [0159.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU", dwFileAttributes=0x20) returned 0 [0159.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.989] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DEU", cAlternateFileName="")) returned 1 [0159.989] wcscmp (_String1="pddom.DEU", _String2=".") returned 1 [0159.989] wcscmp (_String1="pddom.DEU", _String2="..") returned 1 [0159.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0159.989] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.989] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.989] wcscat (in: _Dest=0x81de7b8, _Source="pddom.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" [0159.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu")) returned 0x20 [0159.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU", dwFileAttributes=0x20) returned 0 [0159.998] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.998] GetLastError () returned 0x5 [0159.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU", dwFileAttributes=0x20) returned 0 [0159.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0159.998] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x88400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DEU", cAlternateFileName="")) returned 1 [0159.998] wcscmp (_String1="PPKLITE.DEU", _String2=".") returned 1 [0159.998] wcscmp (_String1="PPKLITE.DEU", _String2="..") returned 1 [0159.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0159.998] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.998] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.998] wcscat (in: _Dest=0x81de7b8, _Source="PPKLITE.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" [0159.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu")) returned 0x20 [0159.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU", dwFileAttributes=0x20) returned 0 [0159.999] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.999] GetLastError () returned 0x5 [0159.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU", dwFileAttributes=0x20) returned 0 [0159.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0159.999] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb645b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DEU", cAlternateFileName="")) returned 1 [0159.999] wcscmp (_String1="RdLang32.DEU", _String2=".") returned 1 [0159.999] wcscmp (_String1="RdLang32.DEU", _String2="..") returned 1 [0159.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0159.999] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.999] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.999] wcscat (in: _Dest=0x81de7b8, _Source="RdLang32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" [0159.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu")) returned 0x20 [0160.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU", dwFileAttributes=0x20) returned 0 [0160.015] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.015] GetLastError () returned 0x5 [0160.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU", dwFileAttributes=0x20) returned 0 [0160.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.015] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DEU", cAlternateFileName="READOU~1.DEU")) returned 1 [0160.015] wcscmp (_String1="ReadOutLoud.DEU", _String2=".") returned 1 [0160.015] wcscmp (_String1="ReadOutLoud.DEU", _String2="..") returned 1 [0160.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32c8c0 [0160.015] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0160.015] wcscat (in: _Dest=0x32c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0160.015] wcscat (in: _Dest=0x32c8c0, _Source="ReadOutLoud.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" [0160.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu")) returned 0x20 [0160.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU", dwFileAttributes=0x20) returned 0 [0160.016] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.016] GetLastError () returned 0x5 [0160.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU", dwFileAttributes=0x20) returned 0 [0160.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 [0160.016] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DEU", cAlternateFileName="")) returned 1 [0160.016] wcscmp (_String1="reflow.DEU", _String2=".") returned 1 [0160.016] wcscmp (_String1="reflow.DEU", _String2="..") returned 1 [0160.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.016] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0160.016] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0160.016] wcscat (in: _Dest=0x81de7b8, _Source="reflow.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" [0160.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu")) returned 0x20 [0160.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU", dwFileAttributes=0x20) returned 0 [0160.017] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.017] GetLastError () returned 0x5 [0160.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU", dwFileAttributes=0x20) returned 0 [0160.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.017] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DEU", cAlternateFileName="SAVEAS~1.DEU")) returned 1 [0160.017] wcscmp (_String1="SaveAsRTF.DEU", _String2=".") returned 1 [0160.017] wcscmp (_String1="SaveAsRTF.DEU", _String2="..") returned 1 [0160.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c8c0 [0160.017] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0160.017] wcscat (in: _Dest=0x32c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0160.017] wcscat (in: _Dest=0x32c8c0, _Source="SaveAsRTF.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" [0160.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu")) returned 0x20 [0160.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU", dwFileAttributes=0x20) returned 0 [0160.040] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.040] GetLastError () returned 0x5 [0160.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU", dwFileAttributes=0x20) returned 0 [0160.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 [0160.040] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DEU", cAlternateFileName="")) returned 1 [0160.040] wcscmp (_String1="Search.DEU", _String2=".") returned 1 [0160.040] wcscmp (_String1="Search.DEU", _String2="..") returned 1 [0160.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de848 [0160.040] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0160.040] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0160.040] wcscat (in: _Dest=0x81de848, _Source="Search.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" [0160.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu")) returned 0x20 [0160.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU", dwFileAttributes=0x20) returned 0 [0160.041] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.041] GetLastError () returned 0x5 [0160.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU", dwFileAttributes=0x20) returned 0 [0160.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 [0160.041] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.deu", cAlternateFileName="")) returned 1 [0160.041] wcscmp (_String1="SendMail.deu", _String2=".") returned 1 [0160.041] wcscmp (_String1="SendMail.deu", _String2="..") returned 1 [0160.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de848 [0160.041] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0160.041] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0160.041] wcscat (in: _Dest=0x81de848, _Source="SendMail.deu" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" [0160.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu")) returned 0x20 [0160.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu", dwFileAttributes=0x20) returned 0 [0160.042] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.042] GetLastError () returned 0x5 [0160.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu", dwFileAttributes=0x20) returned 0 [0160.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 [0160.042] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.042] wcscmp (_String1="Services", _String2=".") returned 1 [0160.042] wcscmp (_String1="Services", _String2="..") returned 1 [0160.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be458 [0160.042] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0160.042] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0160.042] wcscat (in: _Dest=0x81be458, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0160.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de848 [0160.043] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0160.043] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\" [0160.043] wcscat (in: _Dest=0x81de848, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*" [0160.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe390 [0160.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e555c8 [0160.059] wcscmp (_String1=".", _String2=".") returned 0 [0160.060] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.060] wcscmp (_String1="..", _String2=".") returned 1 [0160.060] wcscmp (_String1="..", _String2="..") returned 0 [0160.060] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.060] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.060] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187418 [0160.060] wcscpy (in: _Dest=0x8187418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0160.060] wcscat (in: _Dest=0x8187418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\" [0160.060] wcscat (in: _Dest=0x8187418, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" [0160.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx")) returned 0x20 [0160.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.065] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.066] GetLastError () returned 0x5 [0160.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187418) returned 1 [0160.066] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0160.066] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0160.066] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0160.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187418 [0160.066] wcscpy (in: _Dest=0x8187418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0160.066] wcscat (in: _Dest=0x8187418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\" [0160.066] wcscat (in: _Dest=0x8187418, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" [0160.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx")) returned 0x20 [0160.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.073] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.074] GetLastError () returned 0x5 [0160.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187418) returned 1 [0160.074] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0160.074] FindClose (in: hFindFile=0x3e555c8 | out: hFindFile=0x3e555c8) returned 1 [0160.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe390) returned 1 [0160.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 [0160.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0160.074] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DEU", cAlternateFileName="")) returned 1 [0160.074] wcscmp (_String1="Spelling.DEU", _String2=".") returned 1 [0160.074] wcscmp (_String1="Spelling.DEU", _String2="..") returned 1 [0160.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de848 [0160.075] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0160.075] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0160.075] wcscat (in: _Dest=0x81de848, _Source="Spelling.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" [0160.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu")) returned 0x20 [0160.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU", dwFileAttributes=0x20) returned 0 [0160.151] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.151] GetLastError () returned 0x5 [0160.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU", dwFileAttributes=0x20) returned 0 [0160.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 [0160.152] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DEU", cAlternateFileName="")) returned 1 [0160.152] wcscmp (_String1="updater.DEU", _String2=".") returned 1 [0160.152] wcscmp (_String1="updater.DEU", _String2="..") returned 1 [0160.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de848 [0160.152] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0160.152] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0160.152] wcscat (in: _Dest=0x81de848, _Source="updater.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" [0160.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu")) returned 0x20 [0162.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU", dwFileAttributes=0x20) returned 0 [0162.226] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.226] GetLastError () returned 0x5 [0162.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU", dwFileAttributes=0x20) returned 0 [0162.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 [0162.227] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 1 [0162.227] wcscmp (_String1="Weblink.DEU", _String2=".") returned 1 [0162.227] wcscmp (_String1="Weblink.DEU", _String2="..") returned 1 [0162.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de848 [0162.227] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0162.227] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0162.227] wcscat (in: _Dest=0x81de848, _Source="Weblink.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" [0169.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b94 [0169.217] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 0 [0169.217] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0172.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff060) returned 1 [0172.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24540) returned 1 [0172.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c018) returned 1 Thread: id = 2143 os_tid = 0x1d1c [0152.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e23d40 [0152.351] wcscpy (in: _Dest=0x3e23d40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0152.351] wcscat (in: _Dest=0x3e23d40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0152.351] wcscat (in: _Dest=0x3e23d40, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*" [0152.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049320 [0152.351] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37858 [0157.228] wcscmp (_String1=".", _String2=".") returned 0 [0157.228] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.228] wcscmp (_String1="..", _String2=".") returned 1 [0157.228] wcscmp (_String1="..", _String2="..") returned 0 [0157.229] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ESP", cAlternateFileName="ACCESS~1.ESP")) returned 1 [0157.229] wcscmp (_String1="accessibility.ESP", _String2=".") returned 1 [0157.229] wcscmp (_String1="accessibility.ESP", _String2="..") returned 1 [0157.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc728 [0157.229] wcscpy (in: _Dest=0x81dc728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0157.229] wcscat (in: _Dest=0x81dc728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0157.229] wcscat (in: _Dest=0x81dc728, _Source="accessibility.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" [0160.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp")) returned 0x20 [0160.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP", dwFileAttributes=0x20) returned 0 [0160.903] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.903] GetLastError () returned 0x5 [0160.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP", dwFileAttributes=0x20) returned 0 [0160.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc728) returned 1 [0160.903] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ESP", cAlternateFileName="")) returned 1 [0160.903] wcscmp (_String1="Acroform.ESP", _String2=".") returned 1 [0160.904] wcscmp (_String1="Acroform.ESP", _String2="..") returned 1 [0160.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dede8 [0160.904] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.904] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.904] wcscat (in: _Dest=0x81dede8, _Source="Acroform.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" [0160.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp")) returned 0x20 [0160.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP", dwFileAttributes=0x20) returned 0 [0160.947] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.947] GetLastError () returned 0x5 [0160.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP", dwFileAttributes=0x20) returned 0 [0160.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0160.947] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ESP", cAlternateFileName="ADOBEC~1.ESP")) returned 1 [0160.948] wcscmp (_String1="AdobeCollabSync.ESP", _String2=".") returned 1 [0160.948] wcscmp (_String1="AdobeCollabSync.ESP", _String2="..") returned 1 [0160.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc7c8 [0160.948] wcscpy (in: _Dest=0x81dc7c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.948] wcscat (in: _Dest=0x81dc7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.948] wcscat (in: _Dest=0x81dc7c8, _Source="AdobeCollabSync.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" [0160.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp")) returned 0x20 [0160.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP", dwFileAttributes=0x20) returned 0 [0160.948] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.948] GetLastError () returned 0x5 [0160.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP", dwFileAttributes=0x20) returned 0 [0160.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7c8) returned 1 [0160.948] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ESP", cAlternateFileName="")) returned 1 [0160.949] wcscmp (_String1="Annots.ESP", _String2=".") returned 1 [0160.949] wcscmp (_String1="Annots.ESP", _String2="..") returned 1 [0160.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dede8 [0160.949] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.949] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.949] wcscat (in: _Dest=0x81dede8, _Source="Annots.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" [0160.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp")) returned 0x20 [0160.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP", dwFileAttributes=0x20) returned 0 [0160.949] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.949] GetLastError () returned 0x5 [0160.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP", dwFileAttributes=0x20) returned 0 [0160.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0160.949] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ESP", cAlternateFileName="BRDLAN~1.ESP")) returned 1 [0160.950] wcscmp (_String1="BRdlang32.ESP", _String2=".") returned 1 [0160.950] wcscmp (_String1="BRdlang32.ESP", _String2="..") returned 1 [0160.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.950] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.950] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.950] wcscat (in: _Dest=0x3e3cf58, _Source="BRdlang32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" [0160.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp")) returned 0x20 [0160.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP", dwFileAttributes=0x20) returned 0 [0160.950] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.950] GetLastError () returned 0x5 [0160.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP", dwFileAttributes=0x20) returned 0 [0160.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.950] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ESP", cAlternateFileName="")) returned 1 [0160.950] wcscmp (_String1="Checkers.ESP", _String2=".") returned 1 [0160.951] wcscmp (_String1="Checkers.ESP", _String2="..") returned 1 [0160.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dede8 [0160.951] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.951] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.951] wcscat (in: _Dest=0x81dede8, _Source="Checkers.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" [0160.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp")) returned 0x20 [0160.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP", dwFileAttributes=0x20) returned 0 [0160.967] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.967] GetLastError () returned 0x5 [0160.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP", dwFileAttributes=0x20) returned 0 [0160.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0160.967] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ESP", cAlternateFileName="")) returned 1 [0160.967] wcscmp (_String1="DigSig.ESP", _String2=".") returned 1 [0160.968] wcscmp (_String1="DigSig.ESP", _String2="..") returned 1 [0160.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dede8 [0160.968] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.968] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.968] wcscat (in: _Dest=0x81dede8, _Source="DigSig.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" [0160.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp")) returned 0x20 [0160.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP", dwFileAttributes=0x20) returned 0 [0160.968] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.968] GetLastError () returned 0x5 [0160.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP", dwFileAttributes=0x20) returned 0 [0160.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0160.969] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ESP", cAlternateFileName="")) returned 1 [0160.969] wcscmp (_String1="DVA.ESP", _String2=".") returned 1 [0160.969] wcscmp (_String1="DVA.ESP", _String2="..") returned 1 [0160.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf1a0 [0160.969] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.969] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.969] wcscat (in: _Dest=0x81bf1a0, _Source="DVA.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" [0160.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp")) returned 0x20 [0160.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP", dwFileAttributes=0x20) returned 0 [0160.969] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.969] GetLastError () returned 0x5 [0160.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP", dwFileAttributes=0x20) returned 0 [0160.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0160.970] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ESP", cAlternateFileName="")) returned 1 [0160.970] wcscmp (_String1="eBook.ESP", _String2=".") returned 1 [0160.970] wcscmp (_String1="eBook.ESP", _String2="..") returned 1 [0160.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dede8 [0160.970] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.970] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.970] wcscat (in: _Dest=0x81dede8, _Source="eBook.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" [0160.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp")) returned 0x20 [0160.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP", dwFileAttributes=0x20) returned 0 [0160.970] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.970] GetLastError () returned 0x5 [0160.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP", dwFileAttributes=0x20) returned 0 [0160.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0160.971] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ESP", cAlternateFileName="")) returned 1 [0160.971] wcscmp (_String1="EScript.ESP", _String2=".") returned 1 [0160.971] wcscmp (_String1="EScript.ESP", _String2="..") returned 1 [0160.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dede8 [0160.971] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.971] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.971] wcscat (in: _Dest=0x81dede8, _Source="EScript.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" [0160.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp")) returned 0x20 [0160.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP", dwFileAttributes=0x20) returned 0 [0160.993] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.994] GetLastError () returned 0x5 [0160.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP", dwFileAttributes=0x20) returned 0 [0160.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0160.994] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ESP", cAlternateFileName="")) returned 1 [0160.994] wcscmp (_String1="IA32.ESP", _String2=".") returned 1 [0160.994] wcscmp (_String1="IA32.ESP", _String2="..") returned 1 [0160.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0160.994] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.994] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.994] wcscat (in: _Dest=0x81bf1a0, _Source="IA32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" [0160.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp")) returned 0x20 [0160.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP", dwFileAttributes=0x20) returned 0 [0160.995] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.995] GetLastError () returned 0x5 [0160.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP", dwFileAttributes=0x20) returned 0 [0160.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0160.995] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ESP", cAlternateFileName="MAKEAC~1.ESP")) returned 1 [0160.995] wcscmp (_String1="makeaccessible.ESP", _String2=".") returned 1 [0160.995] wcscmp (_String1="makeaccessible.ESP", _String2="..") returned 1 [0160.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc908 [0160.995] wcscpy (in: _Dest=0x81dc908, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.995] wcscat (in: _Dest=0x81dc908, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.995] wcscat (in: _Dest=0x81dc908, _Source="makeaccessible.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" [0160.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp")) returned 0x20 [0160.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP", dwFileAttributes=0x20) returned 0 [0160.996] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.996] GetLastError () returned 0x5 [0160.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP", dwFileAttributes=0x20) returned 0 [0160.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc908) returned 1 [0160.996] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ESP", cAlternateFileName="MULTIM~1.ESP")) returned 1 [0160.997] wcscmp (_String1="Multimedia.ESP", _String2=".") returned 1 [0160.997] wcscmp (_String1="Multimedia.ESP", _String2="..") returned 1 [0160.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0160.997] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.997] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.997] wcscat (in: _Dest=0x3e3cf58, _Source="Multimedia.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" [0160.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp")) returned 0x20 [0160.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP", dwFileAttributes=0x20) returned 0 [0160.997] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.997] GetLastError () returned 0x5 [0160.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP", dwFileAttributes=0x20) returned 0 [0160.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.998] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ESP", cAlternateFileName="")) returned 1 [0160.998] wcscmp (_String1="pddom.ESP", _String2=".") returned 1 [0160.998] wcscmp (_String1="pddom.ESP", _String2="..") returned 1 [0160.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dede8 [0160.998] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.998] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.998] wcscat (in: _Dest=0x81dede8, _Source="pddom.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" [0160.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp")) returned 0x20 [0160.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP", dwFileAttributes=0x20) returned 0 [0160.998] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.999] GetLastError () returned 0x5 [0160.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP", dwFileAttributes=0x20) returned 0 [0160.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0160.999] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x83c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ESP", cAlternateFileName="")) returned 1 [0160.999] wcscmp (_String1="PPKLITE.ESP", _String2=".") returned 1 [0160.999] wcscmp (_String1="PPKLITE.ESP", _String2="..") returned 1 [0160.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dede8 [0160.999] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.999] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0161.000] wcscat (in: _Dest=0x81dede8, _Source="PPKLITE.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" [0161.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp")) returned 0x20 [0161.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP", dwFileAttributes=0x20) returned 0 [0161.000] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.001] GetLastError () returned 0x5 [0161.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP", dwFileAttributes=0x20) returned 0 [0161.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0161.001] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb6b7fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x156a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ESP", cAlternateFileName="")) returned 1 [0161.001] wcscmp (_String1="RdLang32.ESP", _String2=".") returned 1 [0161.001] wcscmp (_String1="RdLang32.ESP", _String2="..") returned 1 [0161.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dede8 [0161.001] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0161.001] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0161.001] wcscat (in: _Dest=0x81dede8, _Source="RdLang32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" [0161.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp")) returned 0x20 [0161.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP", dwFileAttributes=0x20) returned 0 [0161.002] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.002] GetLastError () returned 0x5 [0161.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP", dwFileAttributes=0x20) returned 0 [0161.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0161.002] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ESP", cAlternateFileName="READOU~1.ESP")) returned 1 [0161.002] wcscmp (_String1="ReadOutLoud.ESP", _String2=".") returned 1 [0161.002] wcscmp (_String1="ReadOutLoud.ESP", _String2="..") returned 1 [0161.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cf58 [0161.002] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0161.003] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0161.003] wcscat (in: _Dest=0x3e3cf58, _Source="ReadOutLoud.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" [0161.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp")) returned 0x20 [0161.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP", dwFileAttributes=0x20) returned 0 [0161.003] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.004] GetLastError () returned 0x5 [0161.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP", dwFileAttributes=0x20) returned 0 [0161.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.004] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ESP", cAlternateFileName="")) returned 1 [0161.004] wcscmp (_String1="reflow.ESP", _String2=".") returned 1 [0161.004] wcscmp (_String1="reflow.ESP", _String2="..") returned 1 [0161.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dede8 [0161.004] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0161.004] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0161.004] wcscat (in: _Dest=0x81dede8, _Source="reflow.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" [0161.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp")) returned 0x20 [0161.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP", dwFileAttributes=0x20) returned 0 [0161.005] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.005] GetLastError () returned 0x5 [0161.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP", dwFileAttributes=0x20) returned 0 [0161.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0161.006] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ESP", cAlternateFileName="SAVEAS~1.ESP")) returned 1 [0161.006] wcscmp (_String1="SaveAsRTF.ESP", _String2=".") returned 1 [0161.006] wcscmp (_String1="SaveAsRTF.ESP", _String2="..") returned 1 [0161.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0161.006] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0161.006] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0161.006] wcscat (in: _Dest=0x3e3cf58, _Source="SaveAsRTF.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" [0161.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp")) returned 0x20 [0161.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP", dwFileAttributes=0x20) returned 0 [0161.007] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.007] GetLastError () returned 0x5 [0161.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP", dwFileAttributes=0x20) returned 0 [0161.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.007] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ESP", cAlternateFileName="")) returned 1 [0161.007] wcscmp (_String1="Search.ESP", _String2=".") returned 1 [0161.007] wcscmp (_String1="Search.ESP", _String2="..") returned 1 [0161.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dede8 [0161.007] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0161.007] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0161.007] wcscat (in: _Dest=0x81dede8, _Source="Search.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" [0161.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp")) returned 0x20 [0161.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP", dwFileAttributes=0x20) returned 0 [0161.008] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.008] GetLastError () returned 0x5 [0161.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP", dwFileAttributes=0x20) returned 0 [0161.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0161.008] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ESP", cAlternateFileName="")) returned 1 [0161.009] wcscmp (_String1="SendMail.ESP", _String2=".") returned 1 [0161.009] wcscmp (_String1="SendMail.ESP", _String2="..") returned 1 [0161.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dede8 [0161.009] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0161.009] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0161.009] wcscat (in: _Dest=0x81dede8, _Source="SendMail.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" [0161.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp")) returned 0x20 [0161.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP", dwFileAttributes=0x20) returned 0 [0161.009] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.010] GetLastError () returned 0x5 [0161.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP", dwFileAttributes=0x20) returned 0 [0161.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0161.010] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd700a00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0161.010] wcscmp (_String1="Services", _String2=".") returned 1 [0161.010] wcscmp (_String1="Services", _String2="..") returned 1 [0161.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0161.010] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0161.010] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0161.010] wcscat (in: _Dest=0x81bf1a0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0161.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dede8 [0161.010] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0161.010] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\" [0161.011] wcscat (in: _Dest=0x81dede8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*" [0161.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0161.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd700a00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0161.065] wcscmp (_String1=".", _String2=".") returned 0 [0161.065] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd700a00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.065] wcscmp (_String1="..", _String2=".") returned 1 [0161.065] wcscmp (_String1="..", _String2="..") returned 0 [0161.065] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0161.065] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0161.065] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0161.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186b90 [0161.066] wcscpy (in: _Dest=0x8186b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0161.066] wcscat (in: _Dest=0x8186b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\" [0161.066] wcscat (in: _Dest=0x8186b90, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" [0161.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx")) returned 0x20 [0161.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0161.067] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.067] GetLastError () returned 0x5 [0161.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0161.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186b90) returned 1 [0161.067] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0161.067] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0161.067] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0161.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186b90 [0161.068] wcscpy (in: _Dest=0x8186b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0161.068] wcscat (in: _Dest=0x8186b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\" [0161.068] wcscat (in: _Dest=0x8186b90, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" [0161.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx")) returned 0x20 [0162.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0162.867] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.867] GetLastError () returned 0x5 [0162.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0162.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186b90) returned 1 [0162.868] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0162.868] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0162.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0162.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 [0162.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0162.868] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ESP", cAlternateFileName="")) returned 1 [0162.868] wcscmp (_String1="Spelling.ESP", _String2=".") returned 1 [0162.869] wcscmp (_String1="Spelling.ESP", _String2="..") returned 1 [0162.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dede8 [0162.869] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0162.869] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0162.869] wcscat (in: _Dest=0x81dede8, _Source="Spelling.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" [0164.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2868 [0164.609] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ESP", cAlternateFileName="")) returned 1 [0164.609] wcscmp (_String1="updater.ESP", _String2=".") returned 1 [0164.609] wcscmp (_String1="updater.ESP", _String2="..") returned 1 [0164.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f36210 [0164.609] wcscpy (in: _Dest=0x3f36210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0164.609] wcscat (in: _Dest=0x3f36210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0164.609] wcscat (in: _Dest=0x3f36210, _Source="updater.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" [0164.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2864 [0164.610] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 1 [0164.610] wcscmp (_String1="Weblink.ESP", _String2=".") returned 1 [0164.610] wcscmp (_String1="Weblink.ESP", _String2="..") returned 1 [0164.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34a70 [0164.610] wcscpy (in: _Dest=0x3f34a70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0164.610] wcscat (in: _Dest=0x3f34a70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0164.610] wcscat (in: _Dest=0x3f34a70, _Source="Weblink.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" [0164.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2860 [0164.611] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 0 [0164.611] FindClose (in: hFindFile=0x3f37858 | out: hFindFile=0x3f37858) returned 1 [0164.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049320) returned 1 [0164.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23d40) returned 1 [0164.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0be38) returned 1 Thread: id = 2144 os_tid = 0x1d20 [0152.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e23ec0 [0152.351] wcscpy (in: _Dest=0x3e23ec0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0152.351] wcscat (in: _Dest=0x3e23ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0152.352] wcscat (in: _Dest=0x3e23ec0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*" [0152.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80473d8 [0152.352] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0157.229] wcscmp (_String1=".", _String2=".") returned 0 [0157.229] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.229] wcscmp (_String1="..", _String2=".") returned 1 [0157.229] wcscmp (_String1="..", _String2="..") returned 0 [0157.229] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.EUQ", cAlternateFileName="ACCESS~1.EUQ")) returned 1 [0157.229] wcscmp (_String1="accessibility.EUQ", _String2=".") returned 1 [0157.229] wcscmp (_String1="accessibility.EUQ", _String2="..") returned 1 [0157.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc7c8 [0157.230] wcscpy (in: _Dest=0x81dc7c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0157.230] wcscat (in: _Dest=0x81dc7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0157.230] wcscat (in: _Dest=0x81dc7c8, _Source="accessibility.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" [0160.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq")) returned 0x20 [0160.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ", dwFileAttributes=0x20) returned 0 [0160.945] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.946] GetLastError () returned 0x5 [0160.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ", dwFileAttributes=0x20) returned 0 [0160.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7c8) returned 1 [0160.946] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x66c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.EUQ", cAlternateFileName="")) returned 1 [0160.946] wcscmp (_String1="Acroform.EUQ", _String2=".") returned 1 [0160.946] wcscmp (_String1="Acroform.EUQ", _String2="..") returned 1 [0160.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def98 [0160.946] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.946] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.946] wcscat (in: _Dest=0x81def98, _Source="Acroform.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" [0160.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq")) returned 0x20 [0160.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ", dwFileAttributes=0x20) returned 0 [0160.964] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.964] GetLastError () returned 0x5 [0160.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ", dwFileAttributes=0x20) returned 0 [0160.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0160.964] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.EUQ", cAlternateFileName="ADOBEC~1.EUQ")) returned 1 [0160.965] wcscmp (_String1="AdobeCollabSync.EUQ", _String2=".") returned 1 [0160.965] wcscmp (_String1="AdobeCollabSync.EUQ", _String2="..") returned 1 [0160.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc868 [0160.965] wcscpy (in: _Dest=0x81dc868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.965] wcscat (in: _Dest=0x81dc868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.965] wcscat (in: _Dest=0x81dc868, _Source="AdobeCollabSync.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" [0160.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq")) returned 0x20 [0160.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ", dwFileAttributes=0x20) returned 0 [0160.966] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.966] GetLastError () returned 0x5 [0160.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ", dwFileAttributes=0x20) returned 0 [0160.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc868) returned 1 [0160.966] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.EUQ", cAlternateFileName="")) returned 1 [0160.966] wcscmp (_String1="Annots.EUQ", _String2=".") returned 1 [0160.966] wcscmp (_String1="Annots.EUQ", _String2="..") returned 1 [0160.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def98 [0160.966] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.966] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.966] wcscat (in: _Dest=0x81def98, _Source="Annots.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" [0160.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq")) returned 0x20 [0160.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ", dwFileAttributes=0x20) returned 0 [0160.985] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.985] GetLastError () returned 0x5 [0160.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ", dwFileAttributes=0x20) returned 0 [0160.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0160.985] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.EUQ", cAlternateFileName="BRDLAN~1.EUQ")) returned 1 [0160.986] wcscmp (_String1="BRdlang32.EUQ", _String2=".") returned 1 [0160.986] wcscmp (_String1="BRdlang32.EUQ", _String2="..") returned 1 [0160.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.986] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.986] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.986] wcscat (in: _Dest=0x3e3cf58, _Source="BRdlang32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" [0160.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq")) returned 0x20 [0160.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ", dwFileAttributes=0x20) returned 0 [0160.986] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.986] GetLastError () returned 0x5 [0160.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ", dwFileAttributes=0x20) returned 0 [0160.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.987] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.EUQ", cAlternateFileName="")) returned 1 [0160.987] wcscmp (_String1="Checkers.EUQ", _String2=".") returned 1 [0160.987] wcscmp (_String1="Checkers.EUQ", _String2="..") returned 1 [0160.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def98 [0160.987] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.987] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.987] wcscat (in: _Dest=0x81def98, _Source="Checkers.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" [0160.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq")) returned 0x20 [0160.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ", dwFileAttributes=0x20) returned 0 [0160.987] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.988] GetLastError () returned 0x5 [0160.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ", dwFileAttributes=0x20) returned 0 [0160.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0160.988] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.EUQ", cAlternateFileName="")) returned 1 [0160.988] wcscmp (_String1="DigSig.EUQ", _String2=".") returned 1 [0160.988] wcscmp (_String1="DigSig.EUQ", _String2="..") returned 1 [0160.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def98 [0160.988] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.988] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.988] wcscat (in: _Dest=0x81def98, _Source="DigSig.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" [0160.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq")) returned 0x20 [0160.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ", dwFileAttributes=0x20) returned 0 [0160.989] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.989] GetLastError () returned 0x5 [0160.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ", dwFileAttributes=0x20) returned 0 [0160.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0160.989] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.EUQ", cAlternateFileName="")) returned 1 [0160.989] wcscmp (_String1="DVA.EUQ", _String2=".") returned 1 [0160.989] wcscmp (_String1="DVA.EUQ", _String2="..") returned 1 [0160.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf1a0 [0160.989] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.989] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.989] wcscat (in: _Dest=0x81bf1a0, _Source="DVA.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" [0160.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq")) returned 0x20 [0160.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ", dwFileAttributes=0x20) returned 0 [0160.990] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.990] GetLastError () returned 0x5 [0160.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ", dwFileAttributes=0x20) returned 0 [0160.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0160.990] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.EUQ", cAlternateFileName="")) returned 1 [0160.990] wcscmp (_String1="eBook.EUQ", _String2=".") returned 1 [0160.990] wcscmp (_String1="eBook.EUQ", _String2="..") returned 1 [0160.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81def98 [0160.991] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.991] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.991] wcscat (in: _Dest=0x81def98, _Source="eBook.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" [0160.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq")) returned 0x20 [0160.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ", dwFileAttributes=0x20) returned 0 [0160.991] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.991] GetLastError () returned 0x5 [0160.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ", dwFileAttributes=0x20) returned 0 [0160.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0160.991] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.EUQ", cAlternateFileName="")) returned 1 [0160.991] wcscmp (_String1="EScript.EUQ", _String2=".") returned 1 [0160.992] wcscmp (_String1="EScript.EUQ", _String2="..") returned 1 [0160.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81def98 [0160.992] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.992] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.992] wcscat (in: _Dest=0x81def98, _Source="EScript.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" [0160.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq")) returned 0x20 [0161.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ", dwFileAttributes=0x20) returned 0 [0161.063] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.063] GetLastError () returned 0x5 [0161.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ", dwFileAttributes=0x20) returned 0 [0161.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 [0161.063] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.EUQ", cAlternateFileName="")) returned 1 [0161.063] wcscmp (_String1="IA32.EUQ", _String2=".") returned 1 [0161.063] wcscmp (_String1="IA32.EUQ", _String2="..") returned 1 [0161.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0080 [0161.064] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.064] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.064] wcscat (in: _Dest=0x81c0080, _Source="IA32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" [0161.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq")) returned 0x20 [0161.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ", dwFileAttributes=0x20) returned 0 [0161.104] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.104] GetLastError () returned 0x5 [0161.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ", dwFileAttributes=0x20) returned 0 [0161.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 [0161.105] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.EUQ", cAlternateFileName="MAKEAC~1.EUQ")) returned 1 [0161.105] wcscmp (_String1="makeaccessible.EUQ", _String2=".") returned 1 [0161.105] wcscmp (_String1="makeaccessible.EUQ", _String2="..") returned 1 [0161.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc9a8 [0161.105] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.105] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.105] wcscat (in: _Dest=0x81dc9a8, _Source="makeaccessible.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" [0161.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq")) returned 0x20 [0161.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ", dwFileAttributes=0x20) returned 0 [0161.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.106] GetLastError () returned 0x5 [0161.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ", dwFileAttributes=0x20) returned 0 [0161.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 [0161.107] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.EUQ", cAlternateFileName="MULTIM~1.EUQ")) returned 1 [0161.107] wcscmp (_String1="Multimedia.EUQ", _String2=".") returned 1 [0161.107] wcscmp (_String1="Multimedia.EUQ", _String2="..") returned 1 [0161.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cd90 [0161.107] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.107] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.107] wcscat (in: _Dest=0x3e3cd90, _Source="Multimedia.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" [0161.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq")) returned 0x20 [0161.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ", dwFileAttributes=0x20) returned 0 [0161.108] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.108] GetLastError () returned 0x5 [0161.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ", dwFileAttributes=0x20) returned 0 [0161.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0161.109] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.EUQ", cAlternateFileName="")) returned 1 [0161.109] wcscmp (_String1="pddom.EUQ", _String2=".") returned 1 [0161.109] wcscmp (_String1="pddom.EUQ", _String2="..") returned 1 [0161.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dee78 [0161.109] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.109] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.110] wcscat (in: _Dest=0x81dee78, _Source="pddom.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" [0161.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq")) returned 0x20 [0161.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ", dwFileAttributes=0x20) returned 0 [0161.111] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.111] GetLastError () returned 0x5 [0161.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ", dwFileAttributes=0x20) returned 0 [0161.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.112] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.EUQ", cAlternateFileName="")) returned 1 [0161.112] wcscmp (_String1="PPKLite.EUQ", _String2=".") returned 1 [0161.112] wcscmp (_String1="PPKLite.EUQ", _String2="..") returned 1 [0161.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dee78 [0161.112] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.112] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.112] wcscat (in: _Dest=0x81dee78, _Source="PPKLite.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" [0161.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq")) returned 0x20 [0161.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ", dwFileAttributes=0x20) returned 0 [0161.113] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.113] GetLastError () returned 0x5 [0161.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ", dwFileAttributes=0x20) returned 0 [0161.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.114] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd68e5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.EUQ", cAlternateFileName="")) returned 1 [0161.114] wcscmp (_String1="RdLang32.EUQ", _String2=".") returned 1 [0161.114] wcscmp (_String1="RdLang32.EUQ", _String2="..") returned 1 [0161.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dee78 [0161.114] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.114] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.114] wcscat (in: _Dest=0x81dee78, _Source="RdLang32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" [0161.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq")) returned 0x20 [0161.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ", dwFileAttributes=0x20) returned 0 [0161.115] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.115] GetLastError () returned 0x5 [0161.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ", dwFileAttributes=0x20) returned 0 [0161.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.116] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.EUQ", cAlternateFileName="READOU~1.EUQ")) returned 1 [0161.116] wcscmp (_String1="ReadOutLoud.EUQ", _String2=".") returned 1 [0161.116] wcscmp (_String1="ReadOutLoud.EUQ", _String2="..") returned 1 [0161.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cd90 [0161.116] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.116] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.117] wcscat (in: _Dest=0x3e3cd90, _Source="ReadOutLoud.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" [0161.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq")) returned 0x20 [0161.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ", dwFileAttributes=0x20) returned 0 [0161.118] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.118] GetLastError () returned 0x5 [0161.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ", dwFileAttributes=0x20) returned 0 [0161.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0161.119] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.EUQ", cAlternateFileName="")) returned 1 [0161.119] wcscmp (_String1="reflow.EUQ", _String2=".") returned 1 [0161.119] wcscmp (_String1="reflow.EUQ", _String2="..") returned 1 [0161.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dee78 [0161.119] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.119] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.119] wcscat (in: _Dest=0x81dee78, _Source="reflow.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" [0161.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq")) returned 0x20 [0161.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ", dwFileAttributes=0x20) returned 0 [0161.120] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.120] GetLastError () returned 0x5 [0161.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ", dwFileAttributes=0x20) returned 0 [0161.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.121] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.EUQ", cAlternateFileName="SAVEAS~1.EUQ")) returned 1 [0161.121] wcscmp (_String1="SaveAsRTF.EUQ", _String2=".") returned 1 [0161.121] wcscmp (_String1="SaveAsRTF.EUQ", _String2="..") returned 1 [0161.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cd90 [0161.121] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.121] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.121] wcscat (in: _Dest=0x3e3cd90, _Source="SaveAsRTF.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" [0161.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq")) returned 0x20 [0161.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ", dwFileAttributes=0x20) returned 0 [0161.122] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.122] GetLastError () returned 0x5 [0161.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ", dwFileAttributes=0x20) returned 0 [0161.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0161.123] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.EUQ", cAlternateFileName="")) returned 1 [0161.123] wcscmp (_String1="Search.EUQ", _String2=".") returned 1 [0161.123] wcscmp (_String1="Search.EUQ", _String2="..") returned 1 [0161.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dee78 [0161.123] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.123] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.123] wcscat (in: _Dest=0x81dee78, _Source="Search.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" [0161.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq")) returned 0x20 [0161.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ", dwFileAttributes=0x20) returned 0 [0161.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.125] GetLastError () returned 0x5 [0161.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ", dwFileAttributes=0x20) returned 0 [0161.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.125] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.EUQ", cAlternateFileName="")) returned 1 [0161.125] wcscmp (_String1="SendMail.EUQ", _String2=".") returned 1 [0161.125] wcscmp (_String1="SendMail.EUQ", _String2="..") returned 1 [0161.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dee78 [0161.126] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.126] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.126] wcscat (in: _Dest=0x81dee78, _Source="SendMail.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" [0161.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq")) returned 0x20 [0161.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ", dwFileAttributes=0x20) returned 0 [0161.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.127] GetLastError () returned 0x5 [0161.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ", dwFileAttributes=0x20) returned 0 [0161.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0161.127] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0161.128] wcscmp (_String1="Services", _String2=".") returned 1 [0161.128] wcscmp (_String1="Services", _String2="..") returned 1 [0161.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0080 [0161.128] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0161.128] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0161.128] wcscat (in: _Dest=0x81c0080, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0161.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dee78 [0161.129] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0161.129] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\" [0161.129] wcscat (in: _Dest=0x81dee78, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*" [0161.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101478 [0161.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0161.129] wcscmp (_String1=".", _String2=".") returned 0 [0161.129] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.130] wcscmp (_String1="..", _String2=".") returned 1 [0161.130] wcscmp (_String1="..", _String2="..") returned 0 [0161.130] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9251, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0161.130] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0161.130] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0161.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81872c8 [0161.130] wcscpy (in: _Dest=0x81872c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0161.130] wcscat (in: _Dest=0x81872c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\" [0161.130] wcscat (in: _Dest=0x81872c8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" [0161.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx")) returned 0x20 [0161.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0161.131] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.131] GetLastError () returned 0x5 [0161.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0161.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81872c8) returned 1 [0161.132] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0162.286] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0162.286] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0162.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187a00 [0162.286] wcscpy (in: _Dest=0x8187a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0162.286] wcscat (in: _Dest=0x8187a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\" [0162.286] wcscat (in: _Dest=0x8187a00, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" [0163.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c8 [0163.011] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0163.011] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0163.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101478) returned 1 [0163.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 [0163.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 [0163.012] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.EUQ", cAlternateFileName="")) returned 1 [0163.012] wcscmp (_String1="Spelling.EUQ", _String2=".") returned 1 [0163.012] wcscmp (_String1="Spelling.EUQ", _String2="..") returned 1 [0163.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dee78 [0163.012] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0163.012] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0163.012] wcscat (in: _Dest=0x81dee78, _Source="Spelling.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" [0163.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dee78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0163.013] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.EUQ", cAlternateFileName="")) returned 1 [0163.013] wcscmp (_String1="updater.EUQ", _String2=".") returned 1 [0163.013] wcscmp (_String1="updater.EUQ", _String2="..") returned 1 [0163.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f356d0 [0163.013] wcscpy (in: _Dest=0x3f356d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0163.014] wcscat (in: _Dest=0x3f356d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0163.014] wcscat (in: _Dest=0x3f356d0, _Source="updater.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" [0163.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f356d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0163.015] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 1 [0163.015] wcscmp (_String1="WebLink.EUQ", _String2=".") returned 1 [0163.015] wcscmp (_String1="WebLink.EUQ", _String2="..") returned 1 [0163.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f36180 [0163.015] wcscpy (in: _Dest=0x3f36180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0163.015] wcscat (in: _Dest=0x3f36180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0163.015] wcscat (in: _Dest=0x3f36180, _Source="WebLink.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" [0163.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2988 [0163.016] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 0 [0163.016] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0163.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80473d8) returned 1 [0163.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23ec0) returned 1 [0163.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c270) returned 1 Thread: id = 2145 os_tid = 0x1d24 [0152.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24140 [0152.352] wcscpy (in: _Dest=0x3e24140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0152.352] wcscat (in: _Dest=0x3e24140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0152.352] wcscat (in: _Dest=0x3e24140, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*" [0152.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047640 [0152.352] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0157.226] wcscmp (_String1=".", _String2=".") returned 0 [0157.226] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.226] wcscmp (_String1="..", _String2=".") returned 1 [0157.226] wcscmp (_String1="..", _String2="..") returned 0 [0157.226] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SUO", cAlternateFileName="ACCESS~1.SUO")) returned 1 [0157.226] wcscmp (_String1="accessibility.SUO", _String2=".") returned 1 [0157.226] wcscmp (_String1="accessibility.SUO", _String2="..") returned 1 [0157.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc548 [0157.226] wcscpy (in: _Dest=0x81dc548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0157.226] wcscat (in: _Dest=0x81dc548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0157.226] wcscat (in: _Dest=0x81dc548, _Source="accessibility.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" [0160.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo")) returned 0x20 [0160.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO", dwFileAttributes=0x20) returned 0 [0160.655] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.655] GetLastError () returned 0x5 [0160.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO", dwFileAttributes=0x20) returned 0 [0160.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc548) returned 1 [0160.655] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SUO", cAlternateFileName="")) returned 1 [0160.655] wcscmp (_String1="Acroform.SUO", _String2=".") returned 1 [0160.656] wcscmp (_String1="Acroform.SUO", _String2="..") returned 1 [0160.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0160.656] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.656] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.656] wcscat (in: _Dest=0x81deb18, _Source="Acroform.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" [0160.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo")) returned 0x20 [0160.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO", dwFileAttributes=0x20) returned 0 [0160.738] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.738] GetLastError () returned 0x5 [0160.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO", dwFileAttributes=0x20) returned 0 [0160.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.739] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SUO", cAlternateFileName="ADOBEC~1.SUO")) returned 1 [0160.739] wcscmp (_String1="AdobeCollabSync.SUO", _String2=".") returned 1 [0160.739] wcscmp (_String1="AdobeCollabSync.SUO", _String2="..") returned 1 [0160.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc5e8 [0160.739] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.739] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.739] wcscat (in: _Dest=0x81dc5e8, _Source="AdobeCollabSync.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" [0160.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo")) returned 0x20 [0160.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO", dwFileAttributes=0x20) returned 0 [0160.740] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.740] GetLastError () returned 0x5 [0160.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO", dwFileAttributes=0x20) returned 0 [0160.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 [0160.740] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x77800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SUO", cAlternateFileName="")) returned 1 [0160.740] wcscmp (_String1="Annots.SUO", _String2=".") returned 1 [0160.740] wcscmp (_String1="Annots.SUO", _String2="..") returned 1 [0160.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deb18 [0160.740] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.740] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.741] wcscat (in: _Dest=0x81deb18, _Source="Annots.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" [0160.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo")) returned 0x20 [0160.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO", dwFileAttributes=0x20) returned 0 [0160.741] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.741] GetLastError () returned 0x5 [0160.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO", dwFileAttributes=0x20) returned 0 [0160.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.742] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SUO", cAlternateFileName="BRDLAN~1.SUO")) returned 1 [0160.742] wcscmp (_String1="BRdlang32.SUO", _String2=".") returned 1 [0160.742] wcscmp (_String1="BRdlang32.SUO", _String2="..") returned 1 [0160.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3de30 [0160.742] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.742] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.742] wcscat (in: _Dest=0x3e3de30, _Source="BRdlang32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" [0160.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo")) returned 0x20 [0160.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO", dwFileAttributes=0x20) returned 0 [0160.743] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.743] GetLastError () returned 0x5 [0160.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO", dwFileAttributes=0x20) returned 0 [0160.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.744] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SUO", cAlternateFileName="")) returned 1 [0160.744] wcscmp (_String1="Checkers.SUO", _String2=".") returned 1 [0160.744] wcscmp (_String1="Checkers.SUO", _String2="..") returned 1 [0160.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0160.744] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.744] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.744] wcscat (in: _Dest=0x81deb18, _Source="Checkers.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" [0160.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo")) returned 0x20 [0160.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", dwFileAttributes=0x20) returned 0 [0160.745] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.745] GetLastError () returned 0x5 [0160.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", dwFileAttributes=0x20) returned 0 [0160.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.745] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SUO", cAlternateFileName="")) returned 1 [0160.745] wcscmp (_String1="DigSig.SUO", _String2=".") returned 1 [0160.745] wcscmp (_String1="DigSig.SUO", _String2="..") returned 1 [0160.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deb18 [0160.745] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.745] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.745] wcscat (in: _Dest=0x81deb18, _Source="DigSig.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" [0160.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo")) returned 0x20 [0160.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", dwFileAttributes=0x20) returned 0 [0160.746] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.746] GetLastError () returned 0x5 [0160.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", dwFileAttributes=0x20) returned 0 [0160.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.746] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SUO", cAlternateFileName="")) returned 1 [0160.746] wcscmp (_String1="DVA.SUO", _String2=".") returned 1 [0160.746] wcscmp (_String1="DVA.SUO", _String2="..") returned 1 [0160.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf1a0 [0160.746] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.746] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.746] wcscat (in: _Dest=0x81bf1a0, _Source="DVA.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" [0160.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo")) returned 0x20 [0160.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", dwFileAttributes=0x20) returned 0 [0160.747] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.747] GetLastError () returned 0x5 [0160.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", dwFileAttributes=0x20) returned 0 [0160.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0160.747] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SUO", cAlternateFileName="")) returned 1 [0160.747] wcscmp (_String1="eBook.SUO", _String2=".") returned 1 [0160.747] wcscmp (_String1="eBook.SUO", _String2="..") returned 1 [0160.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81deb18 [0160.747] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.748] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.748] wcscat (in: _Dest=0x81deb18, _Source="eBook.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" [0160.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo")) returned 0x20 [0160.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", dwFileAttributes=0x20) returned 0 [0160.748] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.748] GetLastError () returned 0x5 [0160.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", dwFileAttributes=0x20) returned 0 [0160.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.748] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SUO", cAlternateFileName="")) returned 1 [0160.748] wcscmp (_String1="EScript.SUO", _String2=".") returned 1 [0160.748] wcscmp (_String1="EScript.SUO", _String2="..") returned 1 [0160.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81deb18 [0160.748] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.749] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.749] wcscat (in: _Dest=0x81deb18, _Source="EScript.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" [0160.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo")) returned 0x20 [0160.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", dwFileAttributes=0x20) returned 0 [0160.749] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.749] GetLastError () returned 0x5 [0160.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", dwFileAttributes=0x20) returned 0 [0160.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.749] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SUO", cAlternateFileName="")) returned 1 [0160.749] wcscmp (_String1="IA32.SUO", _String2=".") returned 1 [0160.750] wcscmp (_String1="IA32.SUO", _String2="..") returned 1 [0160.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0160.750] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.750] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.750] wcscat (in: _Dest=0x81bf1a0, _Source="IA32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" [0160.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo")) returned 0x20 [0160.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", dwFileAttributes=0x20) returned 0 [0160.866] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.867] GetLastError () returned 0x5 [0160.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", dwFileAttributes=0x20) returned 0 [0160.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0160.867] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SUO", cAlternateFileName="MAKEAC~1.SUO")) returned 1 [0160.867] wcscmp (_String1="makeaccessible.SUO", _String2=".") returned 1 [0160.867] wcscmp (_String1="makeaccessible.SUO", _String2="..") returned 1 [0160.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc5e8 [0160.867] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.868] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.868] wcscat (in: _Dest=0x81dc5e8, _Source="makeaccessible.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" [0160.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo")) returned 0x20 [0160.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", dwFileAttributes=0x20) returned 0 [0160.868] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.869] GetLastError () returned 0x5 [0160.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", dwFileAttributes=0x20) returned 0 [0160.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 [0160.869] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2a2600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SUO", cAlternateFileName="MULTIM~1.SUO")) returned 1 [0160.869] wcscmp (_String1="Multimedia.SUO", _String2=".") returned 1 [0160.869] wcscmp (_String1="Multimedia.SUO", _String2="..") returned 1 [0160.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0160.869] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.869] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.870] wcscat (in: _Dest=0x3e3cf58, _Source="Multimedia.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" [0160.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo")) returned 0x20 [0160.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", dwFileAttributes=0x20) returned 0 [0160.870] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.870] GetLastError () returned 0x5 [0160.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", dwFileAttributes=0x20) returned 0 [0160.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.871] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6809c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SUO", cAlternateFileName="")) returned 1 [0160.871] wcscmp (_String1="pddom.SUO", _String2=".") returned 1 [0160.871] wcscmp (_String1="pddom.SUO", _String2="..") returned 1 [0160.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de968 [0160.871] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.871] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.871] wcscat (in: _Dest=0x81de968, _Source="pddom.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" [0160.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo")) returned 0x20 [0160.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", dwFileAttributes=0x20) returned 0 [0160.872] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.872] GetLastError () returned 0x5 [0160.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", dwFileAttributes=0x20) returned 0 [0160.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.872] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SUO", cAlternateFileName="")) returned 1 [0160.872] wcscmp (_String1="PPKLITE.SUO", _String2=".") returned 1 [0160.872] wcscmp (_String1="PPKLITE.SUO", _String2="..") returned 1 [0160.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de968 [0160.873] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.873] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.873] wcscat (in: _Dest=0x81de968, _Source="PPKLITE.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" [0160.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo")) returned 0x20 [0160.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", dwFileAttributes=0x20) returned 0 [0160.873] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.873] GetLastError () returned 0x5 [0160.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", dwFileAttributes=0x20) returned 0 [0160.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.874] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SUO", cAlternateFileName="")) returned 1 [0160.874] wcscmp (_String1="RdLang32.SUO", _String2=".") returned 1 [0160.874] wcscmp (_String1="RdLang32.SUO", _String2="..") returned 1 [0160.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.874] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.874] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.874] wcscat (in: _Dest=0x81de968, _Source="RdLang32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" [0160.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo")) returned 0x20 [0160.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", dwFileAttributes=0x20) returned 0 [0160.875] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.875] GetLastError () returned 0x5 [0160.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", dwFileAttributes=0x20) returned 0 [0160.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.875] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SUO", cAlternateFileName="READOU~1.SUO")) returned 1 [0160.875] wcscmp (_String1="ReadOutLoud.SUO", _String2=".") returned 1 [0160.875] wcscmp (_String1="ReadOutLoud.SUO", _String2="..") returned 1 [0160.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cf58 [0160.875] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.875] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.875] wcscat (in: _Dest=0x3e3cf58, _Source="ReadOutLoud.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" [0160.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo")) returned 0x20 [0160.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", dwFileAttributes=0x20) returned 0 [0160.876] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.876] GetLastError () returned 0x5 [0160.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", dwFileAttributes=0x20) returned 0 [0160.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.876] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SUO", cAlternateFileName="")) returned 1 [0160.877] wcscmp (_String1="reflow.SUO", _String2=".") returned 1 [0160.877] wcscmp (_String1="reflow.SUO", _String2="..") returned 1 [0160.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0160.877] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.877] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.877] wcscat (in: _Dest=0x81de968, _Source="reflow.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" [0160.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo")) returned 0x20 [0160.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", dwFileAttributes=0x20) returned 0 [0160.877] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.877] GetLastError () returned 0x5 [0160.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", dwFileAttributes=0x20) returned 0 [0160.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.878] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SUO", cAlternateFileName="SAVEAS~1.SUO")) returned 1 [0160.878] wcscmp (_String1="SaveAsRTF.SUO", _String2=".") returned 1 [0160.878] wcscmp (_String1="SaveAsRTF.SUO", _String2="..") returned 1 [0160.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.878] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.878] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.878] wcscat (in: _Dest=0x3e3cf58, _Source="SaveAsRTF.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" [0160.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo")) returned 0x20 [0160.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", dwFileAttributes=0x20) returned 0 [0160.879] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.879] GetLastError () returned 0x5 [0160.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", dwFileAttributes=0x20) returned 0 [0160.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.879] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SUO", cAlternateFileName="")) returned 1 [0160.879] wcscmp (_String1="Search.SUO", _String2=".") returned 1 [0160.879] wcscmp (_String1="Search.SUO", _String2="..") returned 1 [0160.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0160.879] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.879] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.879] wcscat (in: _Dest=0x81de968, _Source="Search.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" [0160.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo")) returned 0x20 [0160.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", dwFileAttributes=0x20) returned 0 [0160.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.880] GetLastError () returned 0x5 [0160.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", dwFileAttributes=0x20) returned 0 [0160.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.880] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SUO", cAlternateFileName="")) returned 1 [0160.880] wcscmp (_String1="SendMail.SUO", _String2=".") returned 1 [0160.880] wcscmp (_String1="SendMail.SUO", _String2="..") returned 1 [0160.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.881] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.881] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.881] wcscat (in: _Dest=0x81de968, _Source="SendMail.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" [0160.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo")) returned 0x20 [0160.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", dwFileAttributes=0x20) returned 0 [0160.881] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.881] GetLastError () returned 0x5 [0160.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", dwFileAttributes=0x20) returned 0 [0160.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.881] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.882] wcscmp (_String1="Services", _String2=".") returned 1 [0160.882] wcscmp (_String1="Services", _String2="..") returned 1 [0160.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0160.882] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.882] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.882] wcscat (in: _Dest=0x81bf1a0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0160.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0160.882] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0160.882] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\" [0160.882] wcscat (in: _Dest=0x81de968, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*" [0160.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100ad8 [0160.882] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0160.882] wcscmp (_String1=".", _String2=".") returned 0 [0160.882] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.882] wcscmp (_String1="..", _String2=".") returned 1 [0160.883] wcscmp (_String1="..", _String2="..") returned 0 [0160.883] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.883] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.883] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187370 [0160.883] wcscpy (in: _Dest=0x8187370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0160.883] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\" [0160.883] wcscat (in: _Dest=0x8187370, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" [0160.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx")) returned 0x20 [0160.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.883] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.883] GetLastError () returned 0x5 [0160.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 [0160.884] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0160.884] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0160.884] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0160.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187370 [0160.884] wcscpy (in: _Dest=0x8187370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0160.884] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\" [0160.884] wcscat (in: _Dest=0x8187370, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" [0160.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx")) returned 0x20 [0160.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.884] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.884] GetLastError () returned 0x5 [0160.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 [0160.885] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0160.885] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0160.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100ad8) returned 1 [0160.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0160.885] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SUO", cAlternateFileName="")) returned 1 [0160.885] wcscmp (_String1="Spelling.SUO", _String2=".") returned 1 [0160.885] wcscmp (_String1="Spelling.SUO", _String2="..") returned 1 [0160.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.885] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.885] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.885] wcscat (in: _Dest=0x81de968, _Source="Spelling.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" [0160.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo")) returned 0x20 [0162.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", dwFileAttributes=0x20) returned 0 [0162.275] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.275] GetLastError () returned 0x5 [0162.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", dwFileAttributes=0x20) returned 0 [0162.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0162.276] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SUO", cAlternateFileName="")) returned 1 [0162.276] wcscmp (_String1="updater.SUO", _String2=".") returned 1 [0162.276] wcscmp (_String1="updater.SUO", _String2="..") returned 1 [0162.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de968 [0162.276] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0162.276] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0162.276] wcscat (in: _Dest=0x81de968, _Source="updater.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" [0167.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0167.206] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 1 [0167.206] wcscmp (_String1="Weblink.SUO", _String2=".") returned 1 [0167.206] wcscmp (_String1="Weblink.SUO", _String2="..") returned 1 [0167.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df418 [0167.206] wcscpy (in: _Dest=0x81df418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0167.206] wcscat (in: _Dest=0x81df418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0167.206] wcscat (in: _Dest=0x81df418, _Source="Weblink.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" [0167.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0167.207] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 0 [0167.207] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0167.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047640) returned 1 [0167.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24140) returned 1 [0167.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c180) returned 1 Thread: id = 2146 os_tid = 0x1d28 [0152.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e241c0 [0152.353] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0152.353] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0152.353] wcscat (in: _Dest=0x3e241c0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*" [0152.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efb370 [0152.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0157.145] wcscmp (_String1=".", _String2=".") returned 0 [0157.145] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.145] wcscmp (_String1="..", _String2=".") returned 1 [0157.145] wcscmp (_String1="..", _String2="..") returned 0 [0157.145] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.FRA", cAlternateFileName="ACCESS~1.FRA")) returned 1 [0157.145] wcscmp (_String1="accessibility.FRA", _String2=".") returned 1 [0157.146] wcscmp (_String1="accessibility.FRA", _String2="..") returned 1 [0157.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbc88 [0157.146] wcscpy (in: _Dest=0x81dbc88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0157.146] wcscat (in: _Dest=0x81dbc88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0157.146] wcscat (in: _Dest=0x81dbc88, _Source="accessibility.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" [0160.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra")) returned 0x20 [0160.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", dwFileAttributes=0x20) returned 0 [0160.175] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.175] GetLastError () returned 0x5 [0160.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", dwFileAttributes=0x20) returned 0 [0160.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbc88) returned 1 [0160.176] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.FRA", cAlternateFileName="")) returned 1 [0160.176] wcscmp (_String1="Acroform.FRA", _String2=".") returned 1 [0160.176] wcscmp (_String1="Acroform.FRA", _String2="..") returned 1 [0160.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0160.176] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.176] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.176] wcscat (in: _Dest=0x81de7b8, _Source="Acroform.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" [0160.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra")) returned 0x20 [0160.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", dwFileAttributes=0x20) returned 0 [0160.187] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.187] GetLastError () returned 0x5 [0160.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", dwFileAttributes=0x20) returned 0 [0160.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.188] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.FRA", cAlternateFileName="ADOBEC~1.FRA")) returned 1 [0160.188] wcscmp (_String1="AdobeCollabSync.FRA", _String2=".") returned 1 [0160.188] wcscmp (_String1="AdobeCollabSync.FRA", _String2="..") returned 1 [0160.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbc88 [0160.188] wcscpy (in: _Dest=0x81dbc88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.188] wcscat (in: _Dest=0x81dbc88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.188] wcscat (in: _Dest=0x81dbc88, _Source="AdobeCollabSync.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" [0160.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra")) returned 0x20 [0160.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", dwFileAttributes=0x20) returned 0 [0160.188] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.188] GetLastError () returned 0x5 [0160.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", dwFileAttributes=0x20) returned 0 [0160.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbc88) returned 1 [0160.189] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.FRA", cAlternateFileName="")) returned 1 [0160.189] wcscmp (_String1="Annots.FRA", _String2=".") returned 1 [0160.189] wcscmp (_String1="Annots.FRA", _String2="..") returned 1 [0160.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.189] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.189] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.189] wcscat (in: _Dest=0x81de7b8, _Source="Annots.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" [0160.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra")) returned 0x20 [0160.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", dwFileAttributes=0x20) returned 0 [0160.189] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.189] GetLastError () returned 0x5 [0160.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", dwFileAttributes=0x20) returned 0 [0160.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.190] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.FRA", cAlternateFileName="BRDLAN~1.FRA")) returned 1 [0160.190] wcscmp (_String1="BRdlang32.FRA", _String2=".") returned 1 [0160.190] wcscmp (_String1="BRdlang32.FRA", _String2="..") returned 1 [0160.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.190] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.190] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.190] wcscat (in: _Dest=0x3e3db38, _Source="BRdlang32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" [0160.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra")) returned 0x20 [0160.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", dwFileAttributes=0x20) returned 0 [0160.190] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.190] GetLastError () returned 0x5 [0160.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", dwFileAttributes=0x20) returned 0 [0160.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.191] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.FRA", cAlternateFileName="")) returned 1 [0160.191] wcscmp (_String1="Checkers.FRA", _String2=".") returned 1 [0160.191] wcscmp (_String1="Checkers.FRA", _String2="..") returned 1 [0160.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0160.191] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.191] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.191] wcscat (in: _Dest=0x81de7b8, _Source="Checkers.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" [0160.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra")) returned 0x20 [0160.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", dwFileAttributes=0x20) returned 0 [0160.191] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.191] GetLastError () returned 0x5 [0160.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", dwFileAttributes=0x20) returned 0 [0160.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.192] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.FRA", cAlternateFileName="")) returned 1 [0160.192] wcscmp (_String1="DigSig.FRA", _String2=".") returned 1 [0160.192] wcscmp (_String1="DigSig.FRA", _String2="..") returned 1 [0160.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.192] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.192] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.192] wcscat (in: _Dest=0x81de7b8, _Source="DigSig.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" [0160.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra")) returned 0x20 [0160.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", dwFileAttributes=0x20) returned 0 [0160.201] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.201] GetLastError () returned 0x5 [0160.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", dwFileAttributes=0x20) returned 0 [0160.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.201] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.FRA", cAlternateFileName="")) returned 1 [0160.201] wcscmp (_String1="DVA.FRA", _String2=".") returned 1 [0160.201] wcscmp (_String1="DVA.FRA", _String2="..") returned 1 [0160.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bebc8 [0160.201] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.201] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.201] wcscat (in: _Dest=0x81bebc8, _Source="DVA.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" [0160.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra")) returned 0x20 [0160.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", dwFileAttributes=0x20) returned 0 [0160.202] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.202] GetLastError () returned 0x5 [0160.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", dwFileAttributes=0x20) returned 0 [0160.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.202] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.FRA", cAlternateFileName="")) returned 1 [0160.202] wcscmp (_String1="eBook.FRA", _String2=".") returned 1 [0160.202] wcscmp (_String1="eBook.FRA", _String2="..") returned 1 [0160.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0160.202] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.202] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.202] wcscat (in: _Dest=0x81de7b8, _Source="eBook.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" [0160.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra")) returned 0x20 [0160.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", dwFileAttributes=0x20) returned 0 [0160.203] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.203] GetLastError () returned 0x5 [0160.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", dwFileAttributes=0x20) returned 0 [0160.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.203] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.fra", cAlternateFileName="")) returned 1 [0160.203] wcscmp (_String1="EScript.fra", _String2=".") returned 1 [0160.203] wcscmp (_String1="EScript.fra", _String2="..") returned 1 [0160.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0160.203] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.203] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.203] wcscat (in: _Dest=0x81de7b8, _Source="EScript.fra" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" [0160.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra")) returned 0x20 [0160.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", dwFileAttributes=0x20) returned 0 [0160.204] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.204] GetLastError () returned 0x5 [0160.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", dwFileAttributes=0x20) returned 0 [0160.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.204] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.FRA", cAlternateFileName="")) returned 1 [0160.204] wcscmp (_String1="IA32.FRA", _String2=".") returned 1 [0160.204] wcscmp (_String1="IA32.FRA", _String2="..") returned 1 [0160.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0160.204] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.204] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.204] wcscat (in: _Dest=0x81bebc8, _Source="IA32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" [0160.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra")) returned 0x20 [0160.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", dwFileAttributes=0x20) returned 0 [0160.205] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.205] GetLastError () returned 0x5 [0160.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", dwFileAttributes=0x20) returned 0 [0160.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.205] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.FRA", cAlternateFileName="MAKEAC~1.FRA")) returned 1 [0160.205] wcscmp (_String1="makeaccessible.FRA", _String2=".") returned 1 [0160.205] wcscmp (_String1="makeaccessible.FRA", _String2="..") returned 1 [0160.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81db8c8 [0160.205] wcscpy (in: _Dest=0x81db8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.205] wcscat (in: _Dest=0x81db8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.206] wcscat (in: _Dest=0x81db8c8, _Source="makeaccessible.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" [0160.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra")) returned 0x20 [0160.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", dwFileAttributes=0x20) returned 0 [0160.206] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.206] GetLastError () returned 0x5 [0160.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", dwFileAttributes=0x20) returned 0 [0160.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db8c8) returned 1 [0160.206] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.FRA", cAlternateFileName="MULTIM~1.FRA")) returned 1 [0160.206] wcscmp (_String1="Multimedia.FRA", _String2=".") returned 1 [0160.207] wcscmp (_String1="Multimedia.FRA", _String2="..") returned 1 [0160.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3d120 [0160.207] wcscpy (in: _Dest=0x3e3d120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.207] wcscat (in: _Dest=0x3e3d120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.207] wcscat (in: _Dest=0x3e3d120, _Source="Multimedia.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" [0160.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra")) returned 0x20 [0160.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", dwFileAttributes=0x20) returned 0 [0160.207] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.207] GetLastError () returned 0x5 [0160.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", dwFileAttributes=0x20) returned 0 [0160.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 [0160.208] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.FRA", cAlternateFileName="")) returned 1 [0160.208] wcscmp (_String1="pddom.FRA", _String2=".") returned 1 [0160.208] wcscmp (_String1="pddom.FRA", _String2="..") returned 1 [0160.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0160.208] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.208] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.208] wcscat (in: _Dest=0x81de7b8, _Source="pddom.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" [0160.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra")) returned 0x20 [0160.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", dwFileAttributes=0x20) returned 0 [0160.220] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.220] GetLastError () returned 0x5 [0160.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", dwFileAttributes=0x20) returned 0 [0160.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.221] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x88000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.FRA", cAlternateFileName="")) returned 1 [0160.221] wcscmp (_String1="PPKLITE.FRA", _String2=".") returned 1 [0160.221] wcscmp (_String1="PPKLITE.FRA", _String2="..") returned 1 [0160.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0160.221] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.221] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.221] wcscat (in: _Dest=0x81de7b8, _Source="PPKLITE.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" [0160.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra")) returned 0x20 [0160.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", dwFileAttributes=0x20) returned 0 [0160.221] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.222] GetLastError () returned 0x5 [0160.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", dwFileAttributes=0x20) returned 0 [0160.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.222] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb691e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.FRA", cAlternateFileName="")) returned 1 [0160.222] wcscmp (_String1="RdLang32.FRA", _String2=".") returned 1 [0160.222] wcscmp (_String1="RdLang32.FRA", _String2="..") returned 1 [0160.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0160.222] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.222] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.222] wcscat (in: _Dest=0x81de7b8, _Source="RdLang32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" [0160.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra")) returned 0x20 [0160.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", dwFileAttributes=0x20) returned 0 [0160.223] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.223] GetLastError () returned 0x5 [0160.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", dwFileAttributes=0x20) returned 0 [0160.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.223] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.FRA", cAlternateFileName="READOU~1.FRA")) returned 1 [0160.223] wcscmp (_String1="ReadOutLoud.FRA", _String2=".") returned 1 [0160.223] wcscmp (_String1="ReadOutLoud.FRA", _String2="..") returned 1 [0160.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3db38 [0160.223] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.223] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.223] wcscat (in: _Dest=0x3e3db38, _Source="ReadOutLoud.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" [0160.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra")) returned 0x20 [0160.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", dwFileAttributes=0x20) returned 0 [0160.224] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.224] GetLastError () returned 0x5 [0160.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", dwFileAttributes=0x20) returned 0 [0160.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.224] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.FRA", cAlternateFileName="")) returned 1 [0160.224] wcscmp (_String1="reflow.FRA", _String2=".") returned 1 [0160.224] wcscmp (_String1="reflow.FRA", _String2="..") returned 1 [0160.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.224] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.224] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.224] wcscat (in: _Dest=0x81de7b8, _Source="reflow.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" [0160.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra")) returned 0x20 [0160.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", dwFileAttributes=0x20) returned 0 [0160.225] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.225] GetLastError () returned 0x5 [0160.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", dwFileAttributes=0x20) returned 0 [0160.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.225] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.FRA", cAlternateFileName="SAVEAS~1.FRA")) returned 1 [0160.225] wcscmp (_String1="SaveAsRTF.FRA", _String2=".") returned 1 [0160.225] wcscmp (_String1="SaveAsRTF.FRA", _String2="..") returned 1 [0160.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.225] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.225] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.226] wcscat (in: _Dest=0x3e3db38, _Source="SaveAsRTF.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" [0160.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra")) returned 0x20 [0160.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", dwFileAttributes=0x20) returned 0 [0160.240] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.240] GetLastError () returned 0x5 [0160.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", dwFileAttributes=0x20) returned 0 [0160.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.240] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.FRA", cAlternateFileName="")) returned 1 [0160.240] wcscmp (_String1="Search.FRA", _String2=".") returned 1 [0160.240] wcscmp (_String1="Search.FRA", _String2="..") returned 1 [0160.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.240] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.240] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.240] wcscat (in: _Dest=0x81de728, _Source="Search.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" [0160.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra")) returned 0x20 [0160.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", dwFileAttributes=0x20) returned 0 [0160.241] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.241] GetLastError () returned 0x5 [0160.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", dwFileAttributes=0x20) returned 0 [0160.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.241] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.fra", cAlternateFileName="")) returned 1 [0160.241] wcscmp (_String1="SendMail.fra", _String2=".") returned 1 [0160.241] wcscmp (_String1="SendMail.fra", _String2="..") returned 1 [0160.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.241] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.241] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.241] wcscat (in: _Dest=0x81de728, _Source="SendMail.fra" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" [0160.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra")) returned 0x20 [0160.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", dwFileAttributes=0x20) returned 0 [0160.242] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.242] GetLastError () returned 0x5 [0160.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", dwFileAttributes=0x20) returned 0 [0160.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.242] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.242] wcscmp (_String1="Services", _String2=".") returned 1 [0160.242] wcscmp (_String1="Services", _String2="..") returned 1 [0160.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0160.242] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.242] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.242] wcscat (in: _Dest=0x81bee70, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0160.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.243] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0160.243] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\" [0160.243] wcscat (in: _Dest=0x81de728, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*" [0160.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0160.247] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0160.260] wcscmp (_String1=".", _String2=".") returned 0 [0160.260] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.260] wcscmp (_String1="..", _String2=".") returned 1 [0160.260] wcscmp (_String1="..", _String2="..") returned 0 [0160.260] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.260] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.260] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186848 [0160.261] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0160.261] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\" [0160.261] wcscat (in: _Dest=0x8186848, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" [0160.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx")) returned 0x20 [0160.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.282] GetLastError () returned 0x5 [0160.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 [0160.282] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0160.282] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0160.282] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0160.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186848 [0160.282] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0160.282] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\" [0160.282] wcscat (in: _Dest=0x8186848, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" [0160.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx")) returned 0x20 [0160.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.283] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.283] GetLastError () returned 0x5 [0160.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 [0160.283] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0160.283] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0160.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0160.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.284] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.FRA", cAlternateFileName="")) returned 1 [0160.284] wcscmp (_String1="Spelling.FRA", _String2=".") returned 1 [0160.284] wcscmp (_String1="Spelling.FRA", _String2="..") returned 1 [0160.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.284] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.284] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.284] wcscat (in: _Dest=0x81de728, _Source="Spelling.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" [0160.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra")) returned 0x20 [0160.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", dwFileAttributes=0x20) returned 0 [0160.284] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.284] GetLastError () returned 0x5 [0160.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", dwFileAttributes=0x20) returned 0 [0160.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.285] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.FRA", cAlternateFileName="")) returned 1 [0160.285] wcscmp (_String1="updater.FRA", _String2=".") returned 1 [0160.285] wcscmp (_String1="updater.FRA", _String2="..") returned 1 [0160.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0160.285] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.285] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.285] wcscat (in: _Dest=0x81de728, _Source="updater.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" [0160.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra")) returned 0x20 [0160.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", dwFileAttributes=0x20) returned 0 [0160.311] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.311] GetLastError () returned 0x5 [0160.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", dwFileAttributes=0x20) returned 0 [0160.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.311] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 1 [0160.312] wcscmp (_String1="Weblink.FRA", _String2=".") returned 1 [0160.312] wcscmp (_String1="Weblink.FRA", _String2="..") returned 1 [0160.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0160.312] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.312] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.312] wcscat (in: _Dest=0x81de728, _Source="Weblink.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" [0160.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra")) returned 0x20 [0160.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", dwFileAttributes=0x20) returned 0 [0160.312] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.313] GetLastError () returned 0x5 [0160.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", dwFileAttributes=0x20) returned 0 [0160.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.313] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efb370 | out: lpFindFileData=0x3efb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 0 [0160.313] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0160.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb370) returned 1 [0160.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e241c0) returned 1 [0160.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b898) returned 1 Thread: id = 2147 os_tid = 0x1d2c [0152.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e23cc0 [0152.354] wcscpy (in: _Dest=0x3e23cc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0152.354] wcscat (in: _Dest=0x3e23cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0152.354] wcscat (in: _Dest=0x3e23cc0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*" [0152.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efb5d8 [0152.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38218 [0157.225] wcscmp (_String1=".", _String2=".") returned 0 [0157.225] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.225] wcscmp (_String1="..", _String2=".") returned 1 [0157.225] wcscmp (_String1="..", _String2="..") returned 0 [0157.225] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.HRV", cAlternateFileName="ACCESS~1.HRV")) returned 1 [0157.225] wcscmp (_String1="Accessibility.HRV", _String2=".") returned 1 [0157.226] wcscmp (_String1="Accessibility.HRV", _String2="..") returned 1 [0157.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc4a8 [0157.226] wcscpy (in: _Dest=0x81dc4a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0157.226] wcscat (in: _Dest=0x81dc4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0157.226] wcscat (in: _Dest=0x81dc4a8, _Source="Accessibility.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" [0160.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv")) returned 0x20 [0160.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", dwFileAttributes=0x20) returned 0 [0160.571] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.571] GetLastError () returned 0x5 [0160.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", dwFileAttributes=0x20) returned 0 [0160.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc4a8) returned 1 [0160.572] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HRV", cAlternateFileName="")) returned 1 [0160.572] wcscmp (_String1="Acroform.HRV", _String2=".") returned 1 [0160.572] wcscmp (_String1="Acroform.HRV", _String2="..") returned 1 [0160.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deba8 [0160.572] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.572] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.572] wcscat (in: _Dest=0x81deba8, _Source="Acroform.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" [0160.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv")) returned 0x20 [0160.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", dwFileAttributes=0x20) returned 0 [0160.657] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.657] GetLastError () returned 0x5 [0160.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", dwFileAttributes=0x20) returned 0 [0160.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.658] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HRV", cAlternateFileName="ADOBEC~1.HRV")) returned 1 [0160.658] wcscmp (_String1="AdobeCollabSync.HRV", _String2=".") returned 1 [0160.658] wcscmp (_String1="AdobeCollabSync.HRV", _String2="..") returned 1 [0160.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc548 [0160.658] wcscpy (in: _Dest=0x81dc548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.658] wcscat (in: _Dest=0x81dc548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.658] wcscat (in: _Dest=0x81dc548, _Source="AdobeCollabSync.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" [0160.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv")) returned 0x20 [0160.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", dwFileAttributes=0x20) returned 0 [0160.659] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.659] GetLastError () returned 0x5 [0160.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", dwFileAttributes=0x20) returned 0 [0160.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc548) returned 1 [0160.659] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HRV", cAlternateFileName="")) returned 1 [0160.659] wcscmp (_String1="Annots.HRV", _String2=".") returned 1 [0160.659] wcscmp (_String1="Annots.HRV", _String2="..") returned 1 [0160.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deba8 [0160.659] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.660] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.660] wcscat (in: _Dest=0x81deba8, _Source="Annots.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" [0160.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv")) returned 0x20 [0160.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", dwFileAttributes=0x20) returned 0 [0160.751] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.751] GetLastError () returned 0x5 [0160.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", dwFileAttributes=0x20) returned 0 [0160.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.751] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HRV", cAlternateFileName="BRDLAN~1.HRV")) returned 1 [0160.751] wcscmp (_String1="BRdlang32.HRV", _String2=".") returned 1 [0160.751] wcscmp (_String1="BRdlang32.HRV", _String2="..") returned 1 [0160.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3de30 [0160.752] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.752] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.752] wcscat (in: _Dest=0x3e3de30, _Source="BRdlang32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" [0160.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv")) returned 0x20 [0160.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", dwFileAttributes=0x20) returned 0 [0160.752] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.752] GetLastError () returned 0x5 [0160.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", dwFileAttributes=0x20) returned 0 [0160.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.752] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HRV", cAlternateFileName="")) returned 1 [0160.752] wcscmp (_String1="Checkers.HRV", _String2=".") returned 1 [0160.753] wcscmp (_String1="Checkers.HRV", _String2="..") returned 1 [0160.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deba8 [0160.753] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.753] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.753] wcscat (in: _Dest=0x81deba8, _Source="Checkers.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" [0160.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv")) returned 0x20 [0160.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", dwFileAttributes=0x20) returned 0 [0160.753] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.753] GetLastError () returned 0x5 [0160.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", dwFileAttributes=0x20) returned 0 [0160.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.754] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HRV", cAlternateFileName="")) returned 1 [0160.754] wcscmp (_String1="DigSig.HRV", _String2=".") returned 1 [0160.754] wcscmp (_String1="DigSig.HRV", _String2="..") returned 1 [0160.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deba8 [0160.754] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.754] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.754] wcscat (in: _Dest=0x81deba8, _Source="DigSig.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" [0160.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv")) returned 0x20 [0160.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", dwFileAttributes=0x20) returned 0 [0160.886] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.887] GetLastError () returned 0x5 [0160.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", dwFileAttributes=0x20) returned 0 [0160.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.887] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HRV", cAlternateFileName="")) returned 1 [0160.887] wcscmp (_String1="DVA.HRV", _String2=".") returned 1 [0160.887] wcscmp (_String1="DVA.HRV", _String2="..") returned 1 [0160.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf1a0 [0160.887] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.887] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.887] wcscat (in: _Dest=0x81bf1a0, _Source="DVA.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" [0160.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv")) returned 0x20 [0160.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", dwFileAttributes=0x20) returned 0 [0160.888] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.888] GetLastError () returned 0x5 [0160.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", dwFileAttributes=0x20) returned 0 [0160.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0160.888] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HRV", cAlternateFileName="")) returned 1 [0160.888] wcscmp (_String1="eBook.HRV", _String2=".") returned 1 [0160.888] wcscmp (_String1="eBook.HRV", _String2="..") returned 1 [0160.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81deba8 [0160.888] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.888] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.888] wcscat (in: _Dest=0x81deba8, _Source="eBook.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" [0160.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv")) returned 0x20 [0160.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", dwFileAttributes=0x20) returned 0 [0160.889] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.889] GetLastError () returned 0x5 [0160.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", dwFileAttributes=0x20) returned 0 [0160.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.889] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HRV", cAlternateFileName="")) returned 1 [0160.889] wcscmp (_String1="EScript.HRV", _String2=".") returned 1 [0160.889] wcscmp (_String1="EScript.HRV", _String2="..") returned 1 [0160.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81deba8 [0160.889] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.889] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.889] wcscat (in: _Dest=0x81deba8, _Source="EScript.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" [0160.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv")) returned 0x20 [0160.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", dwFileAttributes=0x20) returned 0 [0160.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.890] GetLastError () returned 0x5 [0160.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", dwFileAttributes=0x20) returned 0 [0160.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.890] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HRV", cAlternateFileName="")) returned 1 [0160.890] wcscmp (_String1="IA32.HRV", _String2=".") returned 1 [0160.890] wcscmp (_String1="IA32.HRV", _String2="..") returned 1 [0160.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf1a0 [0160.891] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.891] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.891] wcscat (in: _Dest=0x81bf1a0, _Source="IA32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" [0160.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv")) returned 0x20 [0160.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", dwFileAttributes=0x20) returned 0 [0160.891] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.891] GetLastError () returned 0x5 [0160.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", dwFileAttributes=0x20) returned 0 [0160.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0160.891] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa5ed80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.HRV", cAlternateFileName="MAKEAC~1.HRV")) returned 1 [0160.892] wcscmp (_String1="MakeAccessible.HRV", _String2=".") returned 1 [0160.892] wcscmp (_String1="MakeAccessible.HRV", _String2="..") returned 1 [0160.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc5e8 [0160.892] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.892] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.892] wcscat (in: _Dest=0x81dc5e8, _Source="MakeAccessible.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" [0160.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv")) returned 0x20 [0160.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", dwFileAttributes=0x20) returned 0 [0160.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.893] GetLastError () returned 0x5 [0160.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", dwFileAttributes=0x20) returned 0 [0160.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 [0160.893] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HRV", cAlternateFileName="MULTIM~1.HRV")) returned 1 [0160.893] wcscmp (_String1="Multimedia.HRV", _String2=".") returned 1 [0160.893] wcscmp (_String1="Multimedia.HRV", _String2="..") returned 1 [0160.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0160.893] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.893] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.893] wcscat (in: _Dest=0x3e3cf58, _Source="Multimedia.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" [0160.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv")) returned 0x20 [0160.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", dwFileAttributes=0x20) returned 0 [0160.894] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.894] GetLastError () returned 0x5 [0160.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", dwFileAttributes=0x20) returned 0 [0160.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.894] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.HRV", cAlternateFileName="")) returned 1 [0160.894] wcscmp (_String1="PDDom.HRV", _String2=".") returned 1 [0160.894] wcscmp (_String1="PDDom.HRV", _String2="..") returned 1 [0160.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81deba8 [0160.894] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.895] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.895] wcscat (in: _Dest=0x81deba8, _Source="PDDom.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" [0160.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv")) returned 0x20 [0160.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", dwFileAttributes=0x20) returned 0 [0160.895] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.895] GetLastError () returned 0x5 [0160.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", dwFileAttributes=0x20) returned 0 [0160.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.895] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.HRV", cAlternateFileName="")) returned 1 [0160.895] wcscmp (_String1="PPKLITE.HRV", _String2=".") returned 1 [0160.895] wcscmp (_String1="PPKLITE.HRV", _String2="..") returned 1 [0160.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81deba8 [0160.896] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.896] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.896] wcscat (in: _Dest=0x81deba8, _Source="PPKLITE.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" [0160.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv")) returned 0x20 [0160.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", dwFileAttributes=0x20) returned 0 [0160.920] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.921] GetLastError () returned 0x5 [0160.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", dwFileAttributes=0x20) returned 0 [0160.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.921] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HRV", cAlternateFileName="")) returned 1 [0160.921] wcscmp (_String1="RdLang32.HRV", _String2=".") returned 1 [0160.921] wcscmp (_String1="RdLang32.HRV", _String2="..") returned 1 [0160.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deba8 [0160.921] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.921] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.921] wcscat (in: _Dest=0x81deba8, _Source="RdLang32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" [0160.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv")) returned 0x20 [0160.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", dwFileAttributes=0x20) returned 0 [0160.922] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.922] GetLastError () returned 0x5 [0160.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", dwFileAttributes=0x20) returned 0 [0160.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.922] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HRV", cAlternateFileName="READOU~1.HRV")) returned 1 [0160.922] wcscmp (_String1="ReadOutLoud.HRV", _String2=".") returned 1 [0160.922] wcscmp (_String1="ReadOutLoud.HRV", _String2="..") returned 1 [0160.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cf58 [0160.922] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.922] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.922] wcscat (in: _Dest=0x3e3cf58, _Source="ReadOutLoud.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" [0160.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv")) returned 0x20 [0160.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", dwFileAttributes=0x20) returned 0 [0160.923] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.923] GetLastError () returned 0x5 [0160.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", dwFileAttributes=0x20) returned 0 [0160.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.923] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.HRV", cAlternateFileName="")) returned 1 [0160.923] wcscmp (_String1="Reflow.HRV", _String2=".") returned 1 [0160.923] wcscmp (_String1="Reflow.HRV", _String2="..") returned 1 [0160.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deba8 [0160.923] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.923] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.923] wcscat (in: _Dest=0x81deba8, _Source="Reflow.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" [0160.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv")) returned 0x20 [0160.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", dwFileAttributes=0x20) returned 0 [0160.924] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.924] GetLastError () returned 0x5 [0160.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", dwFileAttributes=0x20) returned 0 [0160.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.924] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HRV", cAlternateFileName="SAVEAS~1.HRV")) returned 1 [0160.924] wcscmp (_String1="SaveAsRTF.HRV", _String2=".") returned 1 [0160.924] wcscmp (_String1="SaveAsRTF.HRV", _String2="..") returned 1 [0160.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.924] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.924] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.925] wcscat (in: _Dest=0x3e3cf58, _Source="SaveAsRTF.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" [0160.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv")) returned 0x20 [0160.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", dwFileAttributes=0x20) returned 0 [0160.925] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.925] GetLastError () returned 0x5 [0160.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", dwFileAttributes=0x20) returned 0 [0160.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.925] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HRV", cAlternateFileName="")) returned 1 [0160.926] wcscmp (_String1="Search.HRV", _String2=".") returned 1 [0160.926] wcscmp (_String1="Search.HRV", _String2="..") returned 1 [0160.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deba8 [0160.926] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.926] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.926] wcscat (in: _Dest=0x81deba8, _Source="Search.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" [0160.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv")) returned 0x20 [0160.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", dwFileAttributes=0x20) returned 0 [0160.926] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.926] GetLastError () returned 0x5 [0160.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", dwFileAttributes=0x20) returned 0 [0160.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.927] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HRV", cAlternateFileName="")) returned 1 [0160.927] wcscmp (_String1="SendMail.HRV", _String2=".") returned 1 [0160.927] wcscmp (_String1="SendMail.HRV", _String2="..") returned 1 [0160.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deba8 [0160.927] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.927] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.927] wcscat (in: _Dest=0x81deba8, _Source="SendMail.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" [0160.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv")) returned 0x20 [0160.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", dwFileAttributes=0x20) returned 0 [0160.927] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.927] GetLastError () returned 0x5 [0160.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", dwFileAttributes=0x20) returned 0 [0160.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.928] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.928] wcscmp (_String1="Services", _String2=".") returned 1 [0160.928] wcscmp (_String1="Services", _String2="..") returned 1 [0160.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf338 [0160.928] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.928] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.928] wcscat (in: _Dest=0x81bf338, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0160.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deba8 [0160.928] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0160.928] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\" [0160.928] wcscat (in: _Dest=0x81deba8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*" [0160.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100ad8 [0160.928] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0162.865] wcscmp (_String1=".", _String2=".") returned 0 [0162.865] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.865] wcscmp (_String1="..", _String2=".") returned 1 [0162.865] wcscmp (_String1="..", _String2="..") returned 0 [0162.865] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9049, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0162.865] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0162.865] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0162.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187568 [0162.866] wcscpy (in: _Dest=0x8187568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0162.866] wcscat (in: _Dest=0x8187568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\" [0162.866] wcscat (in: _Dest=0x8187568, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" [0164.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0164.459] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0164.459] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0164.459] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0164.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81865a8 [0164.459] wcscpy (in: _Dest=0x81865a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0164.459] wcscat (in: _Dest=0x81865a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\" [0164.459] wcscat (in: _Dest=0x81865a8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" [0164.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81865a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0164.461] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0164.461] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0164.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100ad8) returned 1 [0164.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0164.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 [0164.461] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HRV", cAlternateFileName="")) returned 1 [0164.461] wcscmp (_String1="Spelling.HRV", _String2=".") returned 1 [0164.461] wcscmp (_String1="Spelling.HRV", _String2="..") returned 1 [0164.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deba8 [0164.462] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0164.462] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0164.462] wcscat (in: _Dest=0x81deba8, _Source="Spelling.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" [0164.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81deba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0164.463] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.HRV", cAlternateFileName="")) returned 1 [0164.463] wcscmp (_String1="Updater.HRV", _String2=".") returned 1 [0164.463] wcscmp (_String1="Updater.HRV", _String2="..") returned 1 [0164.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81ded58 [0164.463] wcscpy (in: _Dest=0x81ded58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0164.463] wcscat (in: _Dest=0x81ded58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0164.463] wcscat (in: _Dest=0x81ded58, _Source="Updater.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" [0164.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ded58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0164.464] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 1 [0164.464] wcscmp (_String1="Weblink.HRV", _String2=".") returned 1 [0164.464] wcscmp (_String1="Weblink.HRV", _String2="..") returned 1 [0164.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de608 [0164.464] wcscpy (in: _Dest=0x81de608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0164.464] wcscat (in: _Dest=0x81de608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0164.464] wcscat (in: _Dest=0x81de608, _Source="Weblink.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" [0164.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0164.465] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3efb5d8 | out: lpFindFileData=0x3efb5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 0 [0164.465] FindClose (in: hFindFile=0x3f38218 | out: hFindFile=0x3f38218) returned 1 [0164.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb5d8) returned 1 [0164.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23cc0) returned 1 [0164.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 Thread: id = 2148 os_tid = 0x1d30 [0152.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24240 [0152.354] wcscpy (in: _Dest=0x3e24240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0152.354] wcscat (in: _Dest=0x3e24240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0152.354] wcscat (in: _Dest=0x3e24240, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*" [0152.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efb840 [0152.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f375d8 [0158.437] wcscmp (_String1=".", _String2=".") returned 0 [0158.438] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.438] wcscmp (_String1="..", _String2=".") returned 1 [0158.438] wcscmp (_String1="..", _String2="..") returned 0 [0158.438] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.HUN", cAlternateFileName="ACCESS~1.HUN")) returned 1 [0158.438] wcscmp (_String1="accessibility.HUN", _String2=".") returned 1 [0158.438] wcscmp (_String1="accessibility.HUN", _String2="..") returned 1 [0158.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e12408 [0158.438] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0158.438] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0158.438] wcscat (in: _Dest=0x3e12408, _Source="accessibility.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" [0159.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun")) returned 0x20 [0159.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", dwFileAttributes=0x20) returned 0 [0159.820] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.820] GetLastError () returned 0x5 [0159.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", dwFileAttributes=0x20) returned 0 [0159.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 [0159.821] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x68600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HUN", cAlternateFileName="")) returned 1 [0159.821] wcscmp (_String1="Acroform.HUN", _String2=".") returned 1 [0159.821] wcscmp (_String1="Acroform.HUN", _String2="..") returned 1 [0159.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35250 [0159.821] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0159.821] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0159.821] wcscat (in: _Dest=0x3f35250, _Source="Acroform.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" [0159.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun")) returned 0x20 [0159.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", dwFileAttributes=0x20) returned 0 [0159.828] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.828] GetLastError () returned 0x5 [0159.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", dwFileAttributes=0x20) returned 0 [0159.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0159.828] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HUN", cAlternateFileName="ADOBEC~1.HUN")) returned 1 [0159.828] wcscmp (_String1="AdobeCollabSync.HUN", _String2=".") returned 1 [0159.829] wcscmp (_String1="AdobeCollabSync.HUN", _String2="..") returned 1 [0159.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12408 [0159.829] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0159.829] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0159.829] wcscat (in: _Dest=0x3e12408, _Source="AdobeCollabSync.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" [0159.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun")) returned 0x20 [0159.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", dwFileAttributes=0x20) returned 0 [0159.829] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.829] GetLastError () returned 0x5 [0159.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", dwFileAttributes=0x20) returned 0 [0159.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 [0159.830] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HUN", cAlternateFileName="")) returned 1 [0159.830] wcscmp (_String1="Annots.HUN", _String2=".") returned 1 [0159.830] wcscmp (_String1="Annots.HUN", _String2="..") returned 1 [0159.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35250 [0159.830] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0159.830] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0159.830] wcscat (in: _Dest=0x3f35250, _Source="Annots.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" [0159.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun")) returned 0x20 [0162.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", dwFileAttributes=0x20) returned 0 [0162.157] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.157] GetLastError () returned 0x5 [0162.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", dwFileAttributes=0x20) returned 0 [0162.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 [0162.157] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HUN", cAlternateFileName="BRDLAN~1.HUN")) returned 1 [0162.157] wcscmp (_String1="BRdlang32.HUN", _String2=".") returned 1 [0162.157] wcscmp (_String1="BRdlang32.HUN", _String2="..") returned 1 [0162.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cc50 [0162.157] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0162.157] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0162.157] wcscat (in: _Dest=0x32cc50, _Source="BRdlang32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" [0167.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2598 [0167.221] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HUN", cAlternateFileName="")) returned 1 [0167.221] wcscmp (_String1="Checkers.HUN", _String2=".") returned 1 [0167.221] wcscmp (_String1="Checkers.HUN", _String2="..") returned 1 [0167.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df1d8 [0167.221] wcscpy (in: _Dest=0x81df1d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.221] wcscat (in: _Dest=0x81df1d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.222] wcscat (in: _Dest=0x81df1d8, _Source="Checkers.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" [0167.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0167.223] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HUN", cAlternateFileName="")) returned 1 [0167.223] wcscmp (_String1="DigSig.HUN", _String2=".") returned 1 [0167.223] wcscmp (_String1="DigSig.HUN", _String2="..") returned 1 [0167.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de8d8 [0167.223] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.223] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.223] wcscat (in: _Dest=0x81de8d8, _Source="DigSig.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" [0167.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d0 [0167.224] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HUN", cAlternateFileName="")) returned 1 [0167.224] wcscmp (_String1="DVA.HUN", _String2=".") returned 1 [0167.224] wcscmp (_String1="DVA.HUN", _String2="..") returned 1 [0167.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81be4e0 [0167.225] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.225] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.225] wcscat (in: _Dest=0x81be4e0, _Source="DVA.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" [0167.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0167.226] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HUN", cAlternateFileName="")) returned 1 [0167.226] wcscmp (_String1="eBook.HUN", _String2=".") returned 1 [0167.226] wcscmp (_String1="eBook.HUN", _String2="..") returned 1 [0167.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de4e8 [0167.226] wcscpy (in: _Dest=0x81de4e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.226] wcscat (in: _Dest=0x81de4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.226] wcscat (in: _Dest=0x81de4e8, _Source="eBook.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" [0167.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0167.227] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HUN", cAlternateFileName="")) returned 1 [0167.227] wcscmp (_String1="EScript.HUN", _String2=".") returned 1 [0167.227] wcscmp (_String1="EScript.HUN", _String2="..") returned 1 [0167.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de3c8 [0167.227] wcscpy (in: _Dest=0x81de3c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.227] wcscat (in: _Dest=0x81de3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.227] wcscat (in: _Dest=0x81de3c8, _Source="EScript.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" [0167.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0167.229] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HUN", cAlternateFileName="")) returned 1 [0167.229] wcscmp (_String1="IA32.HUN", _String2=".") returned 1 [0167.229] wcscmp (_String1="IA32.HUN", _String2="..") returned 1 [0167.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0080 [0167.229] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.229] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.229] wcscat (in: _Dest=0x81c0080, _Source="IA32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" [0167.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0167.230] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda86fba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.HUN", cAlternateFileName="MAKEAC~1.HUN")) returned 1 [0167.230] wcscmp (_String1="makeaccessible.HUN", _String2=".") returned 1 [0167.230] wcscmp (_String1="makeaccessible.HUN", _String2="..") returned 1 [0167.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b8f8 [0167.230] wcscpy (in: _Dest=0x819b8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.230] wcscat (in: _Dest=0x819b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.230] wcscat (in: _Dest=0x819b8f8, _Source="makeaccessible.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" [0167.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0167.231] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HUN", cAlternateFileName="MULTIM~1.HUN")) returned 1 [0167.231] wcscmp (_String1="Multimedia.HUN", _String2=".") returned 1 [0167.231] wcscmp (_String1="Multimedia.HUN", _String2="..") returned 1 [0167.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b2e0 [0167.231] wcscpy (in: _Dest=0x3e2b2e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.231] wcscat (in: _Dest=0x3e2b2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.231] wcscat (in: _Dest=0x3e2b2e0, _Source="Multimedia.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" [0167.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0167.232] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.HUN", cAlternateFileName="")) returned 1 [0167.232] wcscmp (_String1="pddom.HUN", _String2=".") returned 1 [0167.232] wcscmp (_String1="pddom.HUN", _String2="..") returned 1 [0167.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de338 [0167.233] wcscpy (in: _Dest=0x81de338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.233] wcscat (in: _Dest=0x81de338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.233] wcscat (in: _Dest=0x81de338, _Source="pddom.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" [0167.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0167.234] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.HUN", cAlternateFileName="")) returned 1 [0167.234] wcscmp (_String1="PPKLite.HUN", _String2=".") returned 1 [0167.234] wcscmp (_String1="PPKLite.HUN", _String2="..") returned 1 [0167.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de458 [0167.234] wcscpy (in: _Dest=0x81de458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.234] wcscat (in: _Dest=0x81de458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.234] wcscat (in: _Dest=0x81de458, _Source="PPKLite.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" [0167.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0167.235] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd0c1040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x151a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HUN", cAlternateFileName="")) returned 1 [0167.235] wcscmp (_String1="RdLang32.HUN", _String2=".") returned 1 [0167.235] wcscmp (_String1="RdLang32.HUN", _String2="..") returned 1 [0167.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de2a8 [0167.235] wcscpy (in: _Dest=0x81de2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.235] wcscat (in: _Dest=0x81de2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.235] wcscat (in: _Dest=0x81de2a8, _Source="RdLang32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" [0167.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0167.237] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HUN", cAlternateFileName="READOU~1.HUN")) returned 1 [0167.237] wcscmp (_String1="ReadOutLoud.HUN", _String2=".") returned 1 [0167.237] wcscmp (_String1="ReadOutLoud.HUN", _String2="..") returned 1 [0167.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2ab28 [0167.237] wcscpy (in: _Dest=0x3e2ab28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.237] wcscat (in: _Dest=0x3e2ab28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.237] wcscat (in: _Dest=0x3e2ab28, _Source="ReadOutLoud.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" [0167.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ab28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0167.238] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.HUN", cAlternateFileName="")) returned 1 [0167.238] wcscmp (_String1="reflow.HUN", _String2=".") returned 1 [0167.238] wcscmp (_String1="reflow.HUN", _String2="..") returned 1 [0167.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def08 [0167.238] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.239] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.239] wcscat (in: _Dest=0x81def08, _Source="reflow.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" [0167.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0167.240] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HUN", cAlternateFileName="SAVEAS~1.HUN")) returned 1 [0167.240] wcscmp (_String1="SaveAsRTF.HUN", _String2=".") returned 1 [0167.240] wcscmp (_String1="SaveAsRTF.HUN", _String2="..") returned 1 [0167.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2bd90 [0167.240] wcscpy (in: _Dest=0x3e2bd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.240] wcscat (in: _Dest=0x3e2bd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.240] wcscat (in: _Dest=0x3e2bd90, _Source="SaveAsRTF.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" [0167.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0167.241] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HUN", cAlternateFileName="")) returned 1 [0167.241] wcscmp (_String1="Search.HUN", _String2=".") returned 1 [0167.241] wcscmp (_String1="Search.HUN", _String2="..") returned 1 [0167.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de188 [0167.241] wcscpy (in: _Dest=0x81de188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.241] wcscat (in: _Dest=0x81de188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.241] wcscat (in: _Dest=0x81de188, _Source="Search.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" [0167.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0167.242] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HUN", cAlternateFileName="")) returned 1 [0167.242] wcscmp (_String1="SendMail.HUN", _String2=".") returned 1 [0167.242] wcscmp (_String1="SendMail.HUN", _String2="..") returned 1 [0167.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df028 [0167.242] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.242] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.242] wcscat (in: _Dest=0x81df028, _Source="SendMail.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" [0167.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0167.243] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0167.243] wcscmp (_String1="Services", _String2=".") returned 1 [0167.243] wcscmp (_String1="Services", _String2="..") returned 1 [0167.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf090 [0167.243] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.243] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.244] wcscat (in: _Dest=0x81bf090, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0167.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0167.244] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HUN", cAlternateFileName="")) returned 1 [0167.244] wcscmp (_String1="Spelling.HUN", _String2=".") returned 1 [0167.245] wcscmp (_String1="Spelling.HUN", _String2="..") returned 1 [0167.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df2f8 [0167.245] wcscpy (in: _Dest=0x81df2f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.245] wcscat (in: _Dest=0x81df2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.245] wcscat (in: _Dest=0x81df2f8, _Source="Spelling.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" [0167.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0167.246] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.HUN", cAlternateFileName="")) returned 1 [0167.246] wcscmp (_String1="updater.HUN", _String2=".") returned 1 [0167.246] wcscmp (_String1="updater.HUN", _String2="..") returned 1 [0167.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81def98 [0167.246] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.246] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.246] wcscat (in: _Dest=0x81def98, _Source="updater.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" [0167.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2070 [0167.247] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 1 [0167.247] wcscmp (_String1="WebLink.HUN", _String2=".") returned 1 [0167.260] wcscmp (_String1="WebLink.HUN", _String2="..") returned 1 [0167.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2938 [0167.261] wcscpy (in: _Dest=0x3eb2938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0167.261] wcscat (in: _Dest=0x3eb2938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0167.261] wcscat (in: _Dest=0x3eb2938, _Source="WebLink.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" [0167.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0167.262] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3efb840 | out: lpFindFileData=0x3efb840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 0 [0167.262] FindClose (in: hFindFile=0x3f375d8 | out: hFindFile=0x3f375d8) returned 1 [0167.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb840) returned 1 [0167.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24240) returned 1 [0167.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0beb0) returned 1 Thread: id = 2149 os_tid = 0x1d34 [0152.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24740 [0152.355] wcscpy (in: _Dest=0x3e24740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0152.355] wcscat (in: _Dest=0x3e24740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0152.355] wcscat (in: _Dest=0x3e24740, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*" [0152.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efbaa8 [0152.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b18 [0157.227] wcscmp (_String1=".", _String2=".") returned 0 [0157.227] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.227] wcscmp (_String1="..", _String2=".") returned 1 [0157.227] wcscmp (_String1="..", _String2="..") returned 0 [0157.227] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ITA", cAlternateFileName="ACCESS~1.ITA")) returned 1 [0157.227] wcscmp (_String1="accessibility.ITA", _String2=".") returned 1 [0157.227] wcscmp (_String1="accessibility.ITA", _String2="..") returned 1 [0157.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc5e8 [0157.227] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0157.227] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0157.227] wcscat (in: _Dest=0x81dc5e8, _Source="accessibility.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" [0160.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita")) returned 0x20 [0160.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA", dwFileAttributes=0x20) returned 0 [0160.736] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.736] GetLastError () returned 0x5 [0160.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA", dwFileAttributes=0x20) returned 0 [0160.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 [0160.737] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f63320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ITA", cAlternateFileName="")) returned 1 [0160.737] wcscmp (_String1="Acroform.ITA", _String2=".") returned 1 [0160.737] wcscmp (_String1="Acroform.ITA", _String2="..") returned 1 [0160.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.737] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.737] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.737] wcscat (in: _Dest=0x81de968, _Source="Acroform.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" [0160.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita")) returned 0x20 [0160.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA", dwFileAttributes=0x20) returned 0 [0160.852] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.853] GetLastError () returned 0x5 [0160.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA", dwFileAttributes=0x20) returned 0 [0160.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.853] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ITA", cAlternateFileName="ADOBEC~1.ITA")) returned 1 [0160.853] wcscmp (_String1="AdobeCollabSync.ITA", _String2=".") returned 1 [0160.853] wcscmp (_String1="AdobeCollabSync.ITA", _String2="..") returned 1 [0160.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc5e8 [0160.853] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.853] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.853] wcscat (in: _Dest=0x81dc5e8, _Source="AdobeCollabSync.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" [0160.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita")) returned 0x20 [0160.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA", dwFileAttributes=0x20) returned 0 [0160.854] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.854] GetLastError () returned 0x5 [0160.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA", dwFileAttributes=0x20) returned 0 [0160.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 [0160.854] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ITA", cAlternateFileName="")) returned 1 [0160.854] wcscmp (_String1="Annots.ITA", _String2=".") returned 1 [0160.854] wcscmp (_String1="Annots.ITA", _String2="..") returned 1 [0160.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0160.854] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.855] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.855] wcscat (in: _Dest=0x81de968, _Source="Annots.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" [0160.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita")) returned 0x20 [0160.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA", dwFileAttributes=0x20) returned 0 [0160.855] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.855] GetLastError () returned 0x5 [0160.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA", dwFileAttributes=0x20) returned 0 [0160.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.856] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ITA", cAlternateFileName="BRDLAN~1.ITA")) returned 1 [0160.856] wcscmp (_String1="BRdlang32.ITA", _String2=".") returned 1 [0160.856] wcscmp (_String1="BRdlang32.ITA", _String2="..") returned 1 [0160.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.856] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.856] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.856] wcscat (in: _Dest=0x3e3cf58, _Source="BRdlang32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" [0160.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita")) returned 0x20 [0160.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA", dwFileAttributes=0x20) returned 0 [0160.857] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.857] GetLastError () returned 0x5 [0160.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA", dwFileAttributes=0x20) returned 0 [0160.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.857] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ITA", cAlternateFileName="")) returned 1 [0160.857] wcscmp (_String1="Checkers.ITA", _String2=".") returned 1 [0160.857] wcscmp (_String1="Checkers.ITA", _String2="..") returned 1 [0160.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.858] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.858] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.858] wcscat (in: _Dest=0x81de968, _Source="Checkers.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" [0160.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita")) returned 0x20 [0160.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA", dwFileAttributes=0x20) returned 0 [0160.858] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.859] GetLastError () returned 0x5 [0160.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA", dwFileAttributes=0x20) returned 0 [0160.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.859] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ITA", cAlternateFileName="")) returned 1 [0160.859] wcscmp (_String1="DigSig.ITA", _String2=".") returned 1 [0160.859] wcscmp (_String1="DigSig.ITA", _String2="..") returned 1 [0160.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0160.859] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.859] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.859] wcscat (in: _Dest=0x81de968, _Source="DigSig.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" [0160.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita")) returned 0x20 [0160.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA", dwFileAttributes=0x20) returned 0 [0160.860] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.860] GetLastError () returned 0x5 [0160.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA", dwFileAttributes=0x20) returned 0 [0160.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.860] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ITA", cAlternateFileName="")) returned 1 [0160.860] wcscmp (_String1="DVA.ITA", _String2=".") returned 1 [0160.860] wcscmp (_String1="DVA.ITA", _String2="..") returned 1 [0160.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81c02a0 [0160.861] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.861] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.861] wcscat (in: _Dest=0x81c02a0, _Source="DVA.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" [0160.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita")) returned 0x20 [0160.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA", dwFileAttributes=0x20) returned 0 [0160.861] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.862] GetLastError () returned 0x5 [0160.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA", dwFileAttributes=0x20) returned 0 [0160.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 [0160.862] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ITA", cAlternateFileName="")) returned 1 [0160.862] wcscmp (_String1="eBook.ITA", _String2=".") returned 1 [0160.862] wcscmp (_String1="eBook.ITA", _String2="..") returned 1 [0160.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de968 [0160.862] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.862] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.862] wcscat (in: _Dest=0x81de968, _Source="eBook.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" [0160.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita")) returned 0x20 [0160.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA", dwFileAttributes=0x20) returned 0 [0160.863] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.863] GetLastError () returned 0x5 [0160.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA", dwFileAttributes=0x20) returned 0 [0160.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.863] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ITA", cAlternateFileName="")) returned 1 [0160.863] wcscmp (_String1="EScript.ITA", _String2=".") returned 1 [0160.863] wcscmp (_String1="EScript.ITA", _String2="..") returned 1 [0160.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de968 [0160.863] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.863] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.864] wcscat (in: _Dest=0x81de968, _Source="EScript.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" [0160.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita")) returned 0x20 [0160.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA", dwFileAttributes=0x20) returned 0 [0160.864] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.864] GetLastError () returned 0x5 [0160.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA", dwFileAttributes=0x20) returned 0 [0160.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.865] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ITA", cAlternateFileName="")) returned 1 [0160.865] wcscmp (_String1="IA32.ITA", _String2=".") returned 1 [0160.865] wcscmp (_String1="IA32.ITA", _String2="..") returned 1 [0160.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c02a0 [0160.865] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.865] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.865] wcscat (in: _Dest=0x81c02a0, _Source="IA32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" [0160.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita")) returned 0x20 [0160.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA", dwFileAttributes=0x20) returned 0 [0160.907] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.907] GetLastError () returned 0x5 [0160.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA", dwFileAttributes=0x20) returned 0 [0160.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 [0160.907] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ITA", cAlternateFileName="MAKEAC~1.ITA")) returned 1 [0160.907] wcscmp (_String1="makeaccessible.ITA", _String2=".") returned 1 [0160.907] wcscmp (_String1="makeaccessible.ITA", _String2="..") returned 1 [0160.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc688 [0160.907] wcscpy (in: _Dest=0x81dc688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.907] wcscat (in: _Dest=0x81dc688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.907] wcscat (in: _Dest=0x81dc688, _Source="makeaccessible.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" [0160.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita")) returned 0x20 [0160.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA", dwFileAttributes=0x20) returned 0 [0160.908] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.908] GetLastError () returned 0x5 [0160.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA", dwFileAttributes=0x20) returned 0 [0160.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc688) returned 1 [0160.908] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ITA", cAlternateFileName="MULTIM~1.ITA")) returned 1 [0160.908] wcscmp (_String1="Multimedia.ITA", _String2=".") returned 1 [0160.908] wcscmp (_String1="Multimedia.ITA", _String2="..") returned 1 [0160.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0160.908] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.909] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.909] wcscat (in: _Dest=0x3e3cf58, _Source="Multimedia.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" [0160.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita")) returned 0x20 [0160.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA", dwFileAttributes=0x20) returned 0 [0160.909] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.909] GetLastError () returned 0x5 [0160.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA", dwFileAttributes=0x20) returned 0 [0160.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.910] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ITA", cAlternateFileName="")) returned 1 [0160.910] wcscmp (_String1="pddom.ITA", _String2=".") returned 1 [0160.910] wcscmp (_String1="pddom.ITA", _String2="..") returned 1 [0160.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81def08 [0160.910] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.910] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.910] wcscat (in: _Dest=0x81def08, _Source="pddom.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" [0160.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita")) returned 0x20 [0160.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA", dwFileAttributes=0x20) returned 0 [0160.910] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.911] GetLastError () returned 0x5 [0160.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA", dwFileAttributes=0x20) returned 0 [0160.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 [0160.911] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0faf5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ITA", cAlternateFileName="")) returned 1 [0160.911] wcscmp (_String1="PPKLITE.ITA", _String2=".") returned 1 [0160.911] wcscmp (_String1="PPKLITE.ITA", _String2="..") returned 1 [0160.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81def08 [0160.911] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.911] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.911] wcscat (in: _Dest=0x81def08, _Source="PPKLITE.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" [0160.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita")) returned 0x20 [0160.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA", dwFileAttributes=0x20) returned 0 [0160.912] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.912] GetLastError () returned 0x5 [0160.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA", dwFileAttributes=0x20) returned 0 [0160.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 [0160.912] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb61fa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x157000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ITA", cAlternateFileName="")) returned 1 [0160.912] wcscmp (_String1="RdLang32.ITA", _String2=".") returned 1 [0160.912] wcscmp (_String1="RdLang32.ITA", _String2="..") returned 1 [0160.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def08 [0160.912] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.912] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.912] wcscat (in: _Dest=0x81def08, _Source="RdLang32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" [0160.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita")) returned 0x20 [0160.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA", dwFileAttributes=0x20) returned 0 [0160.913] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.913] GetLastError () returned 0x5 [0160.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA", dwFileAttributes=0x20) returned 0 [0160.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 [0160.913] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ITA", cAlternateFileName="READOU~1.ITA")) returned 1 [0160.913] wcscmp (_String1="ReadOutLoud.ITA", _String2=".") returned 1 [0160.913] wcscmp (_String1="ReadOutLoud.ITA", _String2="..") returned 1 [0160.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cf58 [0160.913] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.913] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.913] wcscat (in: _Dest=0x3e3cf58, _Source="ReadOutLoud.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" [0160.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita")) returned 0x20 [0160.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA", dwFileAttributes=0x20) returned 0 [0160.914] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.914] GetLastError () returned 0x5 [0160.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA", dwFileAttributes=0x20) returned 0 [0160.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.914] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ITA", cAlternateFileName="")) returned 1 [0160.915] wcscmp (_String1="reflow.ITA", _String2=".") returned 1 [0160.915] wcscmp (_String1="reflow.ITA", _String2="..") returned 1 [0160.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def08 [0160.915] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.915] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.915] wcscat (in: _Dest=0x81def08, _Source="reflow.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" [0160.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita")) returned 0x20 [0160.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA", dwFileAttributes=0x20) returned 0 [0160.915] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.915] GetLastError () returned 0x5 [0160.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA", dwFileAttributes=0x20) returned 0 [0160.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 [0160.916] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ITA", cAlternateFileName="SAVEAS~1.ITA")) returned 1 [0160.916] wcscmp (_String1="SaveAsRTF.ITA", _String2=".") returned 1 [0160.916] wcscmp (_String1="SaveAsRTF.ITA", _String2="..") returned 1 [0160.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.916] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.916] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.916] wcscat (in: _Dest=0x3e3cf58, _Source="SaveAsRTF.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" [0160.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita")) returned 0x20 [0160.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA", dwFileAttributes=0x20) returned 0 [0160.916] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.916] GetLastError () returned 0x5 [0160.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA", dwFileAttributes=0x20) returned 0 [0160.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.917] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0faf5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ITA", cAlternateFileName="")) returned 1 [0160.917] wcscmp (_String1="Search.ITA", _String2=".") returned 1 [0160.917] wcscmp (_String1="Search.ITA", _String2="..") returned 1 [0160.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def08 [0160.917] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.917] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.917] wcscat (in: _Dest=0x81def08, _Source="Search.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" [0160.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita")) returned 0x20 [0160.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA", dwFileAttributes=0x20) returned 0 [0160.917] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.918] GetLastError () returned 0x5 [0160.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA", dwFileAttributes=0x20) returned 0 [0160.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 [0160.918] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0faf5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ITA", cAlternateFileName="")) returned 1 [0160.918] wcscmp (_String1="SendMail.ITA", _String2=".") returned 1 [0160.918] wcscmp (_String1="SendMail.ITA", _String2="..") returned 1 [0160.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def08 [0160.918] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.918] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.918] wcscat (in: _Dest=0x81def08, _Source="SendMail.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" [0160.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita")) returned 0x20 [0160.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA", dwFileAttributes=0x20) returned 0 [0160.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.919] GetLastError () returned 0x5 [0160.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA", dwFileAttributes=0x20) returned 0 [0160.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 [0160.919] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.919] wcscmp (_String1="Services", _String2=".") returned 1 [0160.919] wcscmp (_String1="Services", _String2="..") returned 1 [0160.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c02a0 [0160.919] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.919] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.919] wcscat (in: _Dest=0x81c02a0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0160.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def08 [0160.919] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0160.919] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\" [0160.919] wcscat (in: _Dest=0x81def08, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*" [0160.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0160.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0160.955] wcscmp (_String1=".", _String2=".") returned 0 [0160.955] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.955] wcscmp (_String1="..", _String2=".") returned 1 [0160.955] wcscmp (_String1="..", _String2="..") returned 0 [0160.955] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8fdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.955] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.955] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187a00 [0160.955] wcscpy (in: _Dest=0x8187a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0160.955] wcscat (in: _Dest=0x8187a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\" [0160.955] wcscat (in: _Dest=0x8187a00, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" [0160.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx")) returned 0x20 [0160.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.977] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.977] GetLastError () returned 0x5 [0160.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a00) returned 1 [0160.977] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0160.977] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0160.977] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0160.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187a00 [0160.977] wcscpy (in: _Dest=0x8187a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0160.978] wcscat (in: _Dest=0x8187a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\" [0160.978] wcscat (in: _Dest=0x8187a00, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" [0160.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx")) returned 0x20 [0162.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0162.279] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.279] GetLastError () returned 0x5 [0162.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0162.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a00) returned 1 [0162.280] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0162.280] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0162.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0162.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 [0162.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 [0162.281] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ITA", cAlternateFileName="")) returned 1 [0162.281] wcscmp (_String1="Spelling.ITA", _String2=".") returned 1 [0162.281] wcscmp (_String1="Spelling.ITA", _String2="..") returned 1 [0162.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def08 [0162.281] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0162.281] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0162.281] wcscat (in: _Dest=0x81def08, _Source="Spelling.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" [0163.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2890 [0163.003] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ITA", cAlternateFileName="")) returned 1 [0163.003] wcscmp (_String1="updater.ITA", _String2=".") returned 1 [0163.003] wcscmp (_String1="updater.ITA", _String2="..") returned 1 [0163.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df4a8 [0163.003] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0163.003] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0163.004] wcscat (in: _Dest=0x81df4a8, _Source="updater.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" [0163.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2994 [0163.005] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 1 [0163.005] wcscmp (_String1="Weblink.ITA", _String2=".") returned 1 [0163.005] wcscmp (_String1="Weblink.ITA", _String2="..") returned 1 [0163.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df538 [0163.005] wcscpy (in: _Dest=0x81df538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0163.005] wcscat (in: _Dest=0x81df538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0163.005] wcscat (in: _Dest=0x81df538, _Source="Weblink.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" [0163.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2990 [0163.007] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efbaa8 | out: lpFindFileData=0x3efbaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 0 [0163.007] FindClose (in: hFindFile=0x3f37b18 | out: hFindFile=0x3f37b18) returned 1 [0163.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efbaa8) returned 1 [0163.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24740) returned 1 [0163.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 Thread: id = 2150 os_tid = 0x1d38 [0152.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24640 [0152.356] wcscpy (in: _Dest=0x3e24640, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0152.356] wcscat (in: _Dest=0x3e24640, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0152.356] wcscat (in: _Dest=0x3e24640, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*" [0152.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efbd10 [0152.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0157.224] wcscmp (_String1=".", _String2=".") returned 0 [0157.225] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.225] wcscmp (_String1="..", _String2=".") returned 1 [0157.225] wcscmp (_String1="..", _String2="..") returned 0 [0157.225] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.JPN", cAlternateFileName="ACCESS~1.JPN")) returned 1 [0157.225] wcscmp (_String1="accessibility.JPN", _String2=".") returned 1 [0157.225] wcscmp (_String1="accessibility.JPN", _String2="..") returned 1 [0157.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc408 [0157.225] wcscpy (in: _Dest=0x81dc408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0157.225] wcscat (in: _Dest=0x81dc408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0157.225] wcscat (in: _Dest=0x81dc408, _Source="accessibility.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" [0160.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn")) returned 0x20 [0160.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN", dwFileAttributes=0x20) returned 0 [0160.474] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.474] GetLastError () returned 0x5 [0160.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN", dwFileAttributes=0x20) returned 0 [0160.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc408) returned 1 [0160.475] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.JPN", cAlternateFileName="")) returned 1 [0160.475] wcscmp (_String1="Acroform.JPN", _String2=".") returned 1 [0160.475] wcscmp (_String1="Acroform.JPN", _String2="..") returned 1 [0160.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.475] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.475] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.475] wcscat (in: _Dest=0x81de728, _Source="Acroform.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" [0160.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn")) returned 0x20 [0160.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN", dwFileAttributes=0x20) returned 0 [0160.537] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.537] GetLastError () returned 0x5 [0160.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN", dwFileAttributes=0x20) returned 0 [0160.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.538] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd406e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.JPN", cAlternateFileName="ADOBEC~1.JPN")) returned 1 [0160.538] wcscmp (_String1="AdobeCollabSync.JPN", _String2=".") returned 1 [0160.538] wcscmp (_String1="AdobeCollabSync.JPN", _String2="..") returned 1 [0160.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc368 [0160.538] wcscpy (in: _Dest=0x81dc368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.538] wcscat (in: _Dest=0x81dc368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.538] wcscat (in: _Dest=0x81dc368, _Source="AdobeCollabSync.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" [0160.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn")) returned 0x20 [0160.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN", dwFileAttributes=0x20) returned 0 [0160.538] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.539] GetLastError () returned 0x5 [0160.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN", dwFileAttributes=0x20) returned 0 [0160.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc368) returned 1 [0160.539] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.JPN", cAlternateFileName="")) returned 1 [0160.539] wcscmp (_String1="Annots.JPN", _String2=".") returned 1 [0160.539] wcscmp (_String1="Annots.JPN", _String2="..") returned 1 [0160.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.539] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.539] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.539] wcscat (in: _Dest=0x81de728, _Source="Annots.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" [0160.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn")) returned 0x20 [0160.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN", dwFileAttributes=0x20) returned 0 [0160.540] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.540] GetLastError () returned 0x5 [0160.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN", dwFileAttributes=0x20) returned 0 [0160.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.540] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.JPN", cAlternateFileName="BRDLAN~1.JPN")) returned 1 [0160.540] wcscmp (_String1="BRdlang32.JPN", _String2=".") returned 1 [0160.540] wcscmp (_String1="BRdlang32.JPN", _String2="..") returned 1 [0160.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3dd00 [0160.540] wcscpy (in: _Dest=0x3e3dd00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.540] wcscat (in: _Dest=0x3e3dd00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.540] wcscat (in: _Dest=0x3e3dd00, _Source="BRdlang32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" [0160.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn")) returned 0x20 [0160.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN", dwFileAttributes=0x20) returned 0 [0160.604] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.604] GetLastError () returned 0x5 [0160.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN", dwFileAttributes=0x20) returned 0 [0160.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd00) returned 1 [0160.605] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.JPN", cAlternateFileName="")) returned 1 [0160.605] wcscmp (_String1="Checkers.JPN", _String2=".") returned 1 [0160.605] wcscmp (_String1="Checkers.JPN", _String2="..") returned 1 [0160.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dec38 [0160.605] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.605] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.605] wcscat (in: _Dest=0x81dec38, _Source="Checkers.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" [0160.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn")) returned 0x20 [0160.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN", dwFileAttributes=0x20) returned 0 [0160.661] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.661] GetLastError () returned 0x5 [0160.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN", dwFileAttributes=0x20) returned 0 [0160.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.662] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.JPN", cAlternateFileName="")) returned 1 [0160.662] wcscmp (_String1="DigSig.JPN", _String2=".") returned 1 [0160.662] wcscmp (_String1="DigSig.JPN", _String2="..") returned 1 [0160.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dec38 [0160.662] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.662] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.662] wcscat (in: _Dest=0x81dec38, _Source="DigSig.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" [0160.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn")) returned 0x20 [0160.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN", dwFileAttributes=0x20) returned 0 [0160.663] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.663] GetLastError () returned 0x5 [0160.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN", dwFileAttributes=0x20) returned 0 [0160.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.663] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.JPN", cAlternateFileName="")) returned 1 [0160.663] wcscmp (_String1="DVA.JPN", _String2=".") returned 1 [0160.663] wcscmp (_String1="DVA.JPN", _String2="..") returned 1 [0160.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf338 [0160.663] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.663] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.664] wcscat (in: _Dest=0x81bf338, _Source="DVA.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" [0160.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn")) returned 0x20 [0160.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN", dwFileAttributes=0x20) returned 0 [0160.664] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.664] GetLastError () returned 0x5 [0160.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN", dwFileAttributes=0x20) returned 0 [0160.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 [0160.665] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.JPN", cAlternateFileName="")) returned 1 [0160.665] wcscmp (_String1="eBook.JPN", _String2=".") returned 1 [0160.665] wcscmp (_String1="eBook.JPN", _String2="..") returned 1 [0160.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dec38 [0160.665] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.665] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.665] wcscat (in: _Dest=0x81dec38, _Source="eBook.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" [0160.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn")) returned 0x20 [0160.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN", dwFileAttributes=0x20) returned 0 [0160.666] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.666] GetLastError () returned 0x5 [0160.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN", dwFileAttributes=0x20) returned 0 [0160.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.666] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.JPN", cAlternateFileName="")) returned 1 [0160.666] wcscmp (_String1="EScript.JPN", _String2=".") returned 1 [0160.666] wcscmp (_String1="EScript.JPN", _String2="..") returned 1 [0160.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dec38 [0160.666] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.666] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.666] wcscat (in: _Dest=0x81dec38, _Source="EScript.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" [0160.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn")) returned 0x20 [0160.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN", dwFileAttributes=0x20) returned 0 [0160.755] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.755] GetLastError () returned 0x5 [0160.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN", dwFileAttributes=0x20) returned 0 [0160.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.756] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.JPN", cAlternateFileName="")) returned 1 [0160.756] wcscmp (_String1="IA32.JPN", _String2=".") returned 1 [0160.756] wcscmp (_String1="IA32.JPN", _String2="..") returned 1 [0160.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be4e0 [0160.756] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.756] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.756] wcscat (in: _Dest=0x81be4e0, _Source="IA32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" [0160.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn")) returned 0x20 [0160.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN", dwFileAttributes=0x20) returned 0 [0160.757] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.757] GetLastError () returned 0x5 [0160.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN", dwFileAttributes=0x20) returned 0 [0160.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 [0160.757] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.JPN", cAlternateFileName="MAKEAC~1.JPN")) returned 1 [0160.757] wcscmp (_String1="makeaccessible.JPN", _String2=".") returned 1 [0160.757] wcscmp (_String1="makeaccessible.JPN", _String2="..") returned 1 [0160.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc5e8 [0160.757] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.757] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.757] wcscat (in: _Dest=0x81dc5e8, _Source="makeaccessible.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" [0160.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn")) returned 0x20 [0160.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN", dwFileAttributes=0x20) returned 0 [0160.758] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.758] GetLastError () returned 0x5 [0160.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN", dwFileAttributes=0x20) returned 0 [0160.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 [0160.759] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.JPN", cAlternateFileName="MULTIM~1.JPN")) returned 1 [0160.759] wcscmp (_String1="Multimedia.JPN", _String2=".") returned 1 [0160.759] wcscmp (_String1="Multimedia.JPN", _String2="..") returned 1 [0160.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3de30 [0160.759] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.759] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.759] wcscat (in: _Dest=0x3e3de30, _Source="Multimedia.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" [0160.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn")) returned 0x20 [0160.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN", dwFileAttributes=0x20) returned 0 [0160.760] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.760] GetLastError () returned 0x5 [0160.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN", dwFileAttributes=0x20) returned 0 [0160.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.761] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.JPN", cAlternateFileName="")) returned 1 [0160.761] wcscmp (_String1="pddom.JPN", _String2=".") returned 1 [0160.761] wcscmp (_String1="pddom.JPN", _String2="..") returned 1 [0160.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dec38 [0160.761] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.761] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.761] wcscat (in: _Dest=0x81dec38, _Source="pddom.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" [0160.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn")) returned 0x20 [0160.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN", dwFileAttributes=0x20) returned 0 [0160.762] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.762] GetLastError () returned 0x5 [0160.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN", dwFileAttributes=0x20) returned 0 [0160.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.763] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.JPN", cAlternateFileName="")) returned 1 [0160.763] wcscmp (_String1="PPKLite.JPN", _String2=".") returned 1 [0160.763] wcscmp (_String1="PPKLite.JPN", _String2="..") returned 1 [0160.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dec38 [0160.763] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.763] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.763] wcscat (in: _Dest=0x81dec38, _Source="PPKLite.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" [0160.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn")) returned 0x20 [0160.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN", dwFileAttributes=0x20) returned 0 [0160.764] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.764] GetLastError () returned 0x5 [0160.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN", dwFileAttributes=0x20) returned 0 [0160.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.765] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb6b7fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.JPN", cAlternateFileName="")) returned 1 [0160.765] wcscmp (_String1="RdLang32.JPN", _String2=".") returned 1 [0160.765] wcscmp (_String1="RdLang32.JPN", _String2="..") returned 1 [0160.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dec38 [0160.765] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.765] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.765] wcscat (in: _Dest=0x81dec38, _Source="RdLang32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" [0160.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn")) returned 0x20 [0160.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN", dwFileAttributes=0x20) returned 0 [0160.766] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.766] GetLastError () returned 0x5 [0160.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN", dwFileAttributes=0x20) returned 0 [0160.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.767] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.JPN", cAlternateFileName="READOU~1.JPN")) returned 1 [0160.767] wcscmp (_String1="ReadOutLoud.JPN", _String2=".") returned 1 [0160.767] wcscmp (_String1="ReadOutLoud.JPN", _String2="..") returned 1 [0160.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3de30 [0160.767] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.767] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.767] wcscat (in: _Dest=0x3e3de30, _Source="ReadOutLoud.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" [0160.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn")) returned 0x20 [0160.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN", dwFileAttributes=0x20) returned 0 [0160.768] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.769] GetLastError () returned 0x5 [0160.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN", dwFileAttributes=0x20) returned 0 [0160.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.769] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.JPN", cAlternateFileName="")) returned 1 [0160.770] wcscmp (_String1="reflow.JPN", _String2=".") returned 1 [0160.770] wcscmp (_String1="reflow.JPN", _String2="..") returned 1 [0160.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dec38 [0160.770] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.770] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.770] wcscat (in: _Dest=0x81dec38, _Source="reflow.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" [0160.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn")) returned 0x20 [0160.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN", dwFileAttributes=0x20) returned 0 [0160.771] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.771] GetLastError () returned 0x5 [0160.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN", dwFileAttributes=0x20) returned 0 [0160.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.772] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.JPN", cAlternateFileName="SAVEAS~1.JPN")) returned 1 [0160.772] wcscmp (_String1="SaveAsRTF.JPN", _String2=".") returned 1 [0160.772] wcscmp (_String1="SaveAsRTF.JPN", _String2="..") returned 1 [0160.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3de30 [0160.772] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.772] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.772] wcscat (in: _Dest=0x3e3de30, _Source="SaveAsRTF.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" [0160.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn")) returned 0x20 [0160.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN", dwFileAttributes=0x20) returned 0 [0160.773] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.773] GetLastError () returned 0x5 [0160.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN", dwFileAttributes=0x20) returned 0 [0160.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0162.268] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.JPN", cAlternateFileName="")) returned 1 [0162.268] wcscmp (_String1="Search.JPN", _String2=".") returned 1 [0162.268] wcscmp (_String1="Search.JPN", _String2="..") returned 1 [0162.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dde28 [0162.268] wcscpy (in: _Dest=0x81dde28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0162.268] wcscat (in: _Dest=0x81dde28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0162.268] wcscat (in: _Dest=0x81dde28, _Source="Search.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" [0164.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dde28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d0 [0164.615] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.JPN", cAlternateFileName="")) returned 1 [0164.615] wcscmp (_String1="SendMail.JPN", _String2=".") returned 1 [0164.615] wcscmp (_String1="SendMail.JPN", _String2="..") returned 1 [0164.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34c20 [0164.615] wcscpy (in: _Dest=0x3f34c20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.615] wcscat (in: _Dest=0x3f34c20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.615] wcscat (in: _Dest=0x3f34c20, _Source="SendMail.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" [0164.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x285c [0164.616] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.616] wcscmp (_String1="Services", _String2=".") returned 1 [0164.616] wcscmp (_String1="Services", _String2="..") returned 1 [0164.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfdd8 [0164.616] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.616] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.616] wcscat (in: _Dest=0x81bfdd8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0164.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2858 [0164.617] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.JPN", cAlternateFileName="")) returned 1 [0164.617] wcscmp (_String1="Spelling.JPN", _String2=".") returned 1 [0164.617] wcscmp (_String1="Spelling.JPN", _String2="..") returned 1 [0164.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f347a0 [0164.617] wcscpy (in: _Dest=0x3f347a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.618] wcscat (in: _Dest=0x3f347a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.618] wcscat (in: _Dest=0x3f347a0, _Source="Spelling.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" [0164.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f347a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2854 [0164.618] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.JPN", cAlternateFileName="")) returned 1 [0164.618] wcscmp (_String1="updater.JPN", _String2=".") returned 1 [0164.619] wcscmp (_String1="updater.JPN", _String2="..") returned 1 [0164.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f34cb0 [0164.619] wcscpy (in: _Dest=0x3f34cb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.619] wcscat (in: _Dest=0x3f34cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.619] wcscat (in: _Dest=0x3f34cb0, _Source="updater.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" [0164.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2850 [0164.620] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 1 [0164.620] wcscmp (_String1="Weblink.JPN", _String2=".") returned 1 [0164.620] wcscmp (_String1="Weblink.JPN", _String2="..") returned 1 [0164.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f36330 [0164.620] wcscpy (in: _Dest=0x3f36330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.620] wcscat (in: _Dest=0x3f36330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.620] wcscat (in: _Dest=0x3f36330, _Source="Weblink.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" [0164.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x284c [0164.621] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3efbd10 | out: lpFindFileData=0x3efbd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 0 [0164.621] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0164.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efbd10) returned 1 [0164.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24640) returned 1 [0164.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 Thread: id = 2151 os_tid = 0x1d3c [0152.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e249c0 [0152.356] wcscpy (in: _Dest=0x3e249c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0152.356] wcscat (in: _Dest=0x3e249c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0152.356] wcscat (in: _Dest=0x3e249c0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*" [0152.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efbf78 [0152.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a4d900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0157.224] wcscmp (_String1=".", _String2=".") returned 0 [0157.224] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a4d900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.224] wcscmp (_String1="..", _String2=".") returned 1 [0157.224] wcscmp (_String1="..", _String2="..") returned 0 [0157.224] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda65a860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.KOR", cAlternateFileName="ACCESS~1.KOR")) returned 1 [0157.224] wcscmp (_String1="accessibility.KOR", _String2=".") returned 1 [0157.224] wcscmp (_String1="accessibility.KOR", _String2="..") returned 1 [0157.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc368 [0157.224] wcscpy (in: _Dest=0x81dc368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0157.224] wcscat (in: _Dest=0x81dc368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0157.224] wcscat (in: _Dest=0x81dc368, _Source="accessibility.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" [0160.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor")) returned 0x20 [0160.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR", dwFileAttributes=0x20) returned 0 [0160.431] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.431] GetLastError () returned 0x5 [0160.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR", dwFileAttributes=0x20) returned 0 [0160.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc368) returned 1 [0160.431] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.KOR", cAlternateFileName="")) returned 1 [0160.432] wcscmp (_String1="Acroform.KOR", _String2=".") returned 1 [0160.432] wcscmp (_String1="Acroform.KOR", _String2="..") returned 1 [0160.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deba8 [0160.432] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.432] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.432] wcscat (in: _Dest=0x81deba8, _Source="Acroform.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" [0160.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor")) returned 0x20 [0160.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR", dwFileAttributes=0x20) returned 0 [0160.432] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.433] GetLastError () returned 0x5 [0160.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR", dwFileAttributes=0x20) returned 0 [0160.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.433] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.KOR", cAlternateFileName="ADOBEC~1.KOR")) returned 1 [0160.433] wcscmp (_String1="AdobeCollabSync.KOR", _String2=".") returned 1 [0160.433] wcscmp (_String1="AdobeCollabSync.KOR", _String2="..") returned 1 [0160.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc368 [0160.433] wcscpy (in: _Dest=0x81dc368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.433] wcscat (in: _Dest=0x81dc368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.433] wcscat (in: _Dest=0x81dc368, _Source="AdobeCollabSync.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" [0160.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor")) returned 0x20 [0160.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR", dwFileAttributes=0x20) returned 0 [0160.434] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.434] GetLastError () returned 0x5 [0160.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR", dwFileAttributes=0x20) returned 0 [0160.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc368) returned 1 [0160.434] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.KOR", cAlternateFileName="")) returned 1 [0160.434] wcscmp (_String1="Annots.KOR", _String2=".") returned 1 [0160.434] wcscmp (_String1="Annots.KOR", _String2="..") returned 1 [0160.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deba8 [0160.434] wcscpy (in: _Dest=0x81deba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.434] wcscat (in: _Dest=0x81deba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.435] wcscat (in: _Dest=0x81deba8, _Source="Annots.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" [0160.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor")) returned 0x20 [0160.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR", dwFileAttributes=0x20) returned 0 [0160.476] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.476] GetLastError () returned 0x5 [0160.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR", dwFileAttributes=0x20) returned 0 [0160.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 [0160.477] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.KOR", cAlternateFileName="BRDLAN~1.KOR")) returned 1 [0160.477] wcscmp (_String1="BRdlang32.KOR", _String2=".") returned 1 [0160.477] wcscmp (_String1="BRdlang32.KOR", _String2="..") returned 1 [0160.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c540 [0160.477] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.477] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.477] wcscat (in: _Dest=0x3e3c540, _Source="BRdlang32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" [0160.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor")) returned 0x20 [0160.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR", dwFileAttributes=0x20) returned 0 [0160.541] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.541] GetLastError () returned 0x5 [0160.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR", dwFileAttributes=0x20) returned 0 [0160.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0160.542] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.KOR", cAlternateFileName="")) returned 1 [0160.542] wcscmp (_String1="Checkers.KOR", _String2=".") returned 1 [0160.542] wcscmp (_String1="Checkers.KOR", _String2="..") returned 1 [0160.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.542] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.542] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.542] wcscat (in: _Dest=0x81de728, _Source="Checkers.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" [0160.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor")) returned 0x20 [0160.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR", dwFileAttributes=0x20) returned 0 [0160.606] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.606] GetLastError () returned 0x5 [0160.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR", dwFileAttributes=0x20) returned 0 [0160.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.606] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.KOR", cAlternateFileName="")) returned 1 [0160.606] wcscmp (_String1="DigSig.KOR", _String2=".") returned 1 [0160.606] wcscmp (_String1="DigSig.KOR", _String2="..") returned 1 [0160.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.606] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.607] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.607] wcscat (in: _Dest=0x81de728, _Source="DigSig.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" [0160.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor")) returned 0x20 [0160.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR", dwFileAttributes=0x20) returned 0 [0160.607] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.607] GetLastError () returned 0x5 [0160.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR", dwFileAttributes=0x20) returned 0 [0160.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.607] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.KOR", cAlternateFileName="")) returned 1 [0160.607] wcscmp (_String1="DVA.KOR", _String2=".") returned 1 [0160.608] wcscmp (_String1="DVA.KOR", _String2="..") returned 1 [0160.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bebc8 [0160.608] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.608] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.608] wcscat (in: _Dest=0x81bebc8, _Source="DVA.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" [0160.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor")) returned 0x20 [0160.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR", dwFileAttributes=0x20) returned 0 [0160.608] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.608] GetLastError () returned 0x5 [0160.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR", dwFileAttributes=0x20) returned 0 [0160.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.608] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.KOR", cAlternateFileName="")) returned 1 [0160.608] wcscmp (_String1="eBook.KOR", _String2=".") returned 1 [0160.608] wcscmp (_String1="eBook.KOR", _String2="..") returned 1 [0160.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0160.609] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.609] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.609] wcscat (in: _Dest=0x81de728, _Source="eBook.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" [0160.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor")) returned 0x20 [0160.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR", dwFileAttributes=0x20) returned 0 [0160.609] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.609] GetLastError () returned 0x5 [0160.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR", dwFileAttributes=0x20) returned 0 [0160.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.609] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.KOR", cAlternateFileName="")) returned 1 [0160.609] wcscmp (_String1="EScript.KOR", _String2=".") returned 1 [0160.609] wcscmp (_String1="EScript.KOR", _String2="..") returned 1 [0160.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0160.610] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.610] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.610] wcscat (in: _Dest=0x81de728, _Source="EScript.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" [0160.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor")) returned 0x20 [0160.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR", dwFileAttributes=0x20) returned 0 [0160.610] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.610] GetLastError () returned 0x5 [0160.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR", dwFileAttributes=0x20) returned 0 [0160.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.610] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.KOR", cAlternateFileName="")) returned 1 [0160.610] wcscmp (_String1="IA32.KOR", _String2=".") returned 1 [0160.610] wcscmp (_String1="IA32.KOR", _String2="..") returned 1 [0160.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0160.611] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.611] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.611] wcscat (in: _Dest=0x81bebc8, _Source="IA32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" [0160.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor")) returned 0x20 [0160.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR", dwFileAttributes=0x20) returned 0 [0160.668] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.668] GetLastError () returned 0x5 [0160.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR", dwFileAttributes=0x20) returned 0 [0160.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.669] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.KOR", cAlternateFileName="MAKEAC~1.KOR")) returned 1 [0160.669] wcscmp (_String1="makeaccessible.KOR", _String2=".") returned 1 [0160.669] wcscmp (_String1="makeaccessible.KOR", _String2="..") returned 1 [0160.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc548 [0160.669] wcscpy (in: _Dest=0x81dc548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.669] wcscat (in: _Dest=0x81dc548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.669] wcscat (in: _Dest=0x81dc548, _Source="makeaccessible.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" [0160.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor")) returned 0x20 [0160.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR", dwFileAttributes=0x20) returned 0 [0160.670] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.670] GetLastError () returned 0x5 [0160.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR", dwFileAttributes=0x20) returned 0 [0160.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc548) returned 1 [0160.670] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.KOR", cAlternateFileName="MULTIM~1.KOR")) returned 1 [0160.670] wcscmp (_String1="Multimedia.KOR", _String2=".") returned 1 [0160.670] wcscmp (_String1="Multimedia.KOR", _String2="..") returned 1 [0160.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cd90 [0160.670] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.670] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.671] wcscat (in: _Dest=0x3e3cd90, _Source="Multimedia.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" [0160.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor")) returned 0x20 [0160.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR", dwFileAttributes=0x20) returned 0 [0160.671] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.671] GetLastError () returned 0x5 [0160.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR", dwFileAttributes=0x20) returned 0 [0160.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.672] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.KOR", cAlternateFileName="")) returned 1 [0160.672] wcscmp (_String1="pddom.KOR", _String2=".") returned 1 [0160.672] wcscmp (_String1="pddom.KOR", _String2="..") returned 1 [0160.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81decc8 [0160.672] wcscpy (in: _Dest=0x81decc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.672] wcscat (in: _Dest=0x81decc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.672] wcscat (in: _Dest=0x81decc8, _Source="pddom.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" [0160.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor")) returned 0x20 [0160.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR", dwFileAttributes=0x20) returned 0 [0160.673] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.673] GetLastError () returned 0x5 [0160.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR", dwFileAttributes=0x20) returned 0 [0160.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81decc8) returned 1 [0160.674] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.KOR", cAlternateFileName="")) returned 1 [0160.674] wcscmp (_String1="PPKLITE.KOR", _String2=".") returned 1 [0160.674] wcscmp (_String1="PPKLITE.KOR", _String2="..") returned 1 [0160.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81decc8 [0160.674] wcscpy (in: _Dest=0x81decc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.674] wcscat (in: _Dest=0x81decc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.674] wcscat (in: _Dest=0x81decc8, _Source="PPKLITE.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" [0160.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor")) returned 0x20 [0160.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR", dwFileAttributes=0x20) returned 0 [0160.675] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.675] GetLastError () returned 0x5 [0160.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR", dwFileAttributes=0x20) returned 0 [0160.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81decc8) returned 1 [0160.675] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba70200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.KOR", cAlternateFileName="")) returned 1 [0160.675] wcscmp (_String1="RdLang32.KOR", _String2=".") returned 1 [0160.676] wcscmp (_String1="RdLang32.KOR", _String2="..") returned 1 [0160.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81decc8 [0160.676] wcscpy (in: _Dest=0x81decc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.676] wcscat (in: _Dest=0x81decc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.676] wcscat (in: _Dest=0x81decc8, _Source="RdLang32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" [0160.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor")) returned 0x20 [0160.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR", dwFileAttributes=0x20) returned 0 [0160.677] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.677] GetLastError () returned 0x5 [0160.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR", dwFileAttributes=0x20) returned 0 [0160.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81decc8) returned 1 [0160.677] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.KOR", cAlternateFileName="READOU~1.KOR")) returned 1 [0160.677] wcscmp (_String1="ReadOutLoud.KOR", _String2=".") returned 1 [0160.678] wcscmp (_String1="ReadOutLoud.KOR", _String2="..") returned 1 [0160.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cd90 [0160.678] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.678] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.678] wcscat (in: _Dest=0x3e3cd90, _Source="ReadOutLoud.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" [0160.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor")) returned 0x20 [0160.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR", dwFileAttributes=0x20) returned 0 [0160.679] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.679] GetLastError () returned 0x5 [0160.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR", dwFileAttributes=0x20) returned 0 [0160.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.679] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.KOR", cAlternateFileName="")) returned 1 [0160.679] wcscmp (_String1="reflow.KOR", _String2=".") returned 1 [0160.680] wcscmp (_String1="reflow.KOR", _String2="..") returned 1 [0160.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81decc8 [0160.680] wcscpy (in: _Dest=0x81decc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.680] wcscat (in: _Dest=0x81decc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.680] wcscat (in: _Dest=0x81decc8, _Source="reflow.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" [0160.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor")) returned 0x20 [0160.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR", dwFileAttributes=0x20) returned 0 [0160.681] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.681] GetLastError () returned 0x5 [0160.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR", dwFileAttributes=0x20) returned 0 [0160.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81decc8) returned 1 [0160.682] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.KOR", cAlternateFileName="SAVEAS~1.KOR")) returned 1 [0160.682] wcscmp (_String1="SaveAsRTF.KOR", _String2=".") returned 1 [0160.682] wcscmp (_String1="SaveAsRTF.KOR", _String2="..") returned 1 [0160.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cd90 [0160.682] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.682] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.682] wcscat (in: _Dest=0x3e3cd90, _Source="SaveAsRTF.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" [0160.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor")) returned 0x20 [0160.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR", dwFileAttributes=0x20) returned 0 [0160.683] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.683] GetLastError () returned 0x5 [0160.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR", dwFileAttributes=0x20) returned 0 [0160.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.684] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.KOR", cAlternateFileName="")) returned 1 [0160.684] wcscmp (_String1="Search.KOR", _String2=".") returned 1 [0160.684] wcscmp (_String1="Search.KOR", _String2="..") returned 1 [0160.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81decc8 [0160.684] wcscpy (in: _Dest=0x81decc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.684] wcscat (in: _Dest=0x81decc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.684] wcscat (in: _Dest=0x81decc8, _Source="Search.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" [0160.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor")) returned 0x20 [0160.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR", dwFileAttributes=0x20) returned 0 [0160.685] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.685] GetLastError () returned 0x5 [0160.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR", dwFileAttributes=0x20) returned 0 [0160.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81decc8) returned 1 [0160.686] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.KOR", cAlternateFileName="")) returned 1 [0160.686] wcscmp (_String1="SendMail.KOR", _String2=".") returned 1 [0160.686] wcscmp (_String1="SendMail.KOR", _String2="..") returned 1 [0160.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81decc8 [0160.686] wcscpy (in: _Dest=0x81decc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.686] wcscat (in: _Dest=0x81decc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.686] wcscat (in: _Dest=0x81decc8, _Source="SendMail.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" [0160.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor")) returned 0x20 [0160.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR", dwFileAttributes=0x20) returned 0 [0160.687] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.687] GetLastError () returned 0x5 [0160.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR", dwFileAttributes=0x20) returned 0 [0160.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81decc8) returned 1 [0160.688] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.688] wcscmp (_String1="Services", _String2=".") returned 1 [0160.688] wcscmp (_String1="Services", _String2="..") returned 1 [0160.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0160.688] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.688] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.688] wcscat (in: _Dest=0x81bebc8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0160.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81decc8 [0160.689] wcscpy (in: _Dest=0x81decc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0160.689] wcscat (in: _Dest=0x81decc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\" [0160.689] wcscat (in: _Dest=0x81decc8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*" [0160.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0160.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0162.263] wcscmp (_String1=".", _String2=".") returned 0 [0162.263] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.263] wcscmp (_String1="..", _String2=".") returned 1 [0162.263] wcscmp (_String1="..", _String2="..") returned 0 [0162.263] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0162.263] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0162.263] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0162.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187f40 [0162.264] wcscpy (in: _Dest=0x8187f40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0162.264] wcscat (in: _Dest=0x8187f40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\" [0162.264] wcscat (in: _Dest=0x8187f40, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" [0165.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c70 [0165.958] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0165.958] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0165.958] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0165.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186d88 [0165.958] wcscpy (in: _Dest=0x8186d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0165.958] wcscat (in: _Dest=0x8186d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\" [0165.958] wcscat (in: _Dest=0x8186d88, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" [0165.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a4 [0165.959] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0165.959] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0165.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0165.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81decc8) returned 1 [0165.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0165.960] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.KOR", cAlternateFileName="")) returned 1 [0165.960] wcscmp (_String1="Spelling.KOR", _String2=".") returned 1 [0165.960] wcscmp (_String1="Spelling.KOR", _String2="..") returned 1 [0165.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81decc8 [0165.960] wcscpy (in: _Dest=0x81decc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0165.960] wcscat (in: _Dest=0x81decc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0165.960] wcscat (in: _Dest=0x81decc8, _Source="Spelling.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" [0165.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81decc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ac [0165.961] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.KOR", cAlternateFileName="")) returned 1 [0165.961] wcscmp (_String1="updater.KOR", _String2=".") returned 1 [0165.961] wcscmp (_String1="updater.KOR", _String2="..") returned 1 [0165.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dd6d8 [0165.961] wcscpy (in: _Dest=0x81dd6d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0165.961] wcscat (in: _Dest=0x81dd6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0165.961] wcscat (in: _Dest=0x81dd6d8, _Source="updater.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" [0165.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a0 [0165.962] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 1 [0165.962] wcscmp (_String1="Weblink.KOR", _String2=".") returned 1 [0165.962] wcscmp (_String1="Weblink.KOR", _String2="..") returned 1 [0165.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df148 [0165.962] wcscpy (in: _Dest=0x81df148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0165.962] wcscat (in: _Dest=0x81df148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0165.963] wcscat (in: _Dest=0x81df148, _Source="Weblink.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" [0165.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x279c [0165.963] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3efbf78 | out: lpFindFileData=0x3efbf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 0 [0165.964] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0165.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efbf78) returned 1 [0165.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e249c0) returned 1 [0165.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 Thread: id = 2152 os_tid = 0x1d40 [0152.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e23fc0 [0152.357] wcscpy (in: _Dest=0x3e23fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0152.357] wcscat (in: _Dest=0x3e23fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0152.357] wcscat (in: _Dest=0x3e23fc0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*" [0152.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efc1e0 [0152.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37498 [0157.223] wcscmp (_String1=".", _String2=".") returned 0 [0157.223] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.223] wcscmp (_String1="..", _String2=".") returned 1 [0157.223] wcscmp (_String1="..", _String2="..") returned 0 [0157.223] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NOR", cAlternateFileName="ACCESS~1.NOR")) returned 1 [0157.223] wcscmp (_String1="accessibility.NOR", _String2=".") returned 1 [0157.223] wcscmp (_String1="accessibility.NOR", _String2="..") returned 1 [0157.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc2c8 [0157.223] wcscpy (in: _Dest=0x81dc2c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0157.223] wcscat (in: _Dest=0x81dc2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0157.223] wcscat (in: _Dest=0x81dc2c8, _Source="accessibility.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" [0160.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor")) returned 0x20 [0160.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR", dwFileAttributes=0x20) returned 0 [0160.393] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.393] GetLastError () returned 0x5 [0160.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR", dwFileAttributes=0x20) returned 0 [0160.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc2c8) returned 1 [0160.393] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x61e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NOR", cAlternateFileName="")) returned 1 [0160.393] wcscmp (_String1="Acroform.NOR", _String2=".") returned 1 [0160.393] wcscmp (_String1="Acroform.NOR", _String2="..") returned 1 [0160.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dea88 [0160.394] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.394] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.394] wcscat (in: _Dest=0x81dea88, _Source="Acroform.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" [0160.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor")) returned 0x20 [0160.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR", dwFileAttributes=0x20) returned 0 [0160.436] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.436] GetLastError () returned 0x5 [0160.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR", dwFileAttributes=0x20) returned 0 [0160.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.436] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NOR", cAlternateFileName="ADOBEC~1.NOR")) returned 1 [0160.436] wcscmp (_String1="AdobeCollabSync.NOR", _String2=".") returned 1 [0160.436] wcscmp (_String1="AdobeCollabSync.NOR", _String2="..") returned 1 [0160.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc368 [0160.436] wcscpy (in: _Dest=0x81dc368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.437] wcscat (in: _Dest=0x81dc368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.437] wcscat (in: _Dest=0x81dc368, _Source="AdobeCollabSync.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" [0160.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor")) returned 0x20 [0160.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR", dwFileAttributes=0x20) returned 0 [0160.437] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.437] GetLastError () returned 0x5 [0160.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR", dwFileAttributes=0x20) returned 0 [0160.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc368) returned 1 [0160.438] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x75c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NOR", cAlternateFileName="")) returned 1 [0160.438] wcscmp (_String1="Annots.NOR", _String2=".") returned 1 [0160.438] wcscmp (_String1="Annots.NOR", _String2="..") returned 1 [0160.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dea88 [0160.438] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.438] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.438] wcscat (in: _Dest=0x81dea88, _Source="Annots.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" [0160.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor")) returned 0x20 [0160.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR", dwFileAttributes=0x20) returned 0 [0160.478] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.478] GetLastError () returned 0x5 [0160.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR", dwFileAttributes=0x20) returned 0 [0160.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.479] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NOR", cAlternateFileName="BRDLAN~1.NOR")) returned 1 [0160.479] wcscmp (_String1="BRdlang32.NOR", _String2=".") returned 1 [0160.479] wcscmp (_String1="BRdlang32.NOR", _String2="..") returned 1 [0160.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.479] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.479] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.479] wcscat (in: _Dest=0x3e3cf58, _Source="BRdlang32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" [0160.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor")) returned 0x20 [0160.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR", dwFileAttributes=0x20) returned 0 [0160.543] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.543] GetLastError () returned 0x5 [0160.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR", dwFileAttributes=0x20) returned 0 [0160.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.543] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NOR", cAlternateFileName="")) returned 1 [0160.543] wcscmp (_String1="Checkers.NOR", _String2=".") returned 1 [0160.543] wcscmp (_String1="Checkers.NOR", _String2="..") returned 1 [0160.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.543] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.543] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.543] wcscat (in: _Dest=0x81de968, _Source="Checkers.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" [0160.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor")) returned 0x20 [0160.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR", dwFileAttributes=0x20) returned 0 [0160.612] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.612] GetLastError () returned 0x5 [0160.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR", dwFileAttributes=0x20) returned 0 [0160.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.612] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NOR", cAlternateFileName="")) returned 1 [0160.612] wcscmp (_String1="DigSig.NOR", _String2=".") returned 1 [0160.612] wcscmp (_String1="DigSig.NOR", _String2="..") returned 1 [0160.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0160.612] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.612] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.613] wcscat (in: _Dest=0x81de968, _Source="DigSig.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" [0160.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor")) returned 0x20 [0160.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR", dwFileAttributes=0x20) returned 0 [0160.691] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.691] GetLastError () returned 0x5 [0160.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR", dwFileAttributes=0x20) returned 0 [0160.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.691] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NOR", cAlternateFileName="")) returned 1 [0160.691] wcscmp (_String1="DVA.NOR", _String2=".") returned 1 [0160.691] wcscmp (_String1="DVA.NOR", _String2="..") returned 1 [0160.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf338 [0160.692] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.692] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.692] wcscat (in: _Dest=0x81bf338, _Source="DVA.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" [0160.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor")) returned 0x20 [0160.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR", dwFileAttributes=0x20) returned 0 [0160.693] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.693] GetLastError () returned 0x5 [0160.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR", dwFileAttributes=0x20) returned 0 [0160.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 [0160.693] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NOR", cAlternateFileName="")) returned 1 [0160.693] wcscmp (_String1="eBook.NOR", _String2=".") returned 1 [0160.693] wcscmp (_String1="eBook.NOR", _String2="..") returned 1 [0160.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de968 [0160.693] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.694] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.694] wcscat (in: _Dest=0x81de968, _Source="eBook.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" [0160.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor")) returned 0x20 [0160.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR", dwFileAttributes=0x20) returned 0 [0160.694] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.695] GetLastError () returned 0x5 [0160.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR", dwFileAttributes=0x20) returned 0 [0160.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.695] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NOR", cAlternateFileName="")) returned 1 [0160.695] wcscmp (_String1="EScript.NOR", _String2=".") returned 1 [0160.695] wcscmp (_String1="EScript.NOR", _String2="..") returned 1 [0160.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de968 [0160.695] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.695] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.696] wcscat (in: _Dest=0x81de968, _Source="EScript.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" [0160.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor")) returned 0x20 [0160.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR", dwFileAttributes=0x20) returned 0 [0160.696] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.697] GetLastError () returned 0x5 [0160.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR", dwFileAttributes=0x20) returned 0 [0160.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.697] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NOR", cAlternateFileName="")) returned 1 [0160.697] wcscmp (_String1="IA32.NOR", _String2=".") returned 1 [0160.697] wcscmp (_String1="IA32.NOR", _String2="..") returned 1 [0160.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf338 [0160.697] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.697] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.697] wcscat (in: _Dest=0x81bf338, _Source="IA32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" [0160.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor")) returned 0x20 [0160.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR", dwFileAttributes=0x20) returned 0 [0160.698] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.698] GetLastError () returned 0x5 [0160.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR", dwFileAttributes=0x20) returned 0 [0160.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 [0160.699] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NOR", cAlternateFileName="MAKEAC~1.NOR")) returned 1 [0160.699] wcscmp (_String1="makeaccessible.NOR", _String2=".") returned 1 [0160.699] wcscmp (_String1="makeaccessible.NOR", _String2="..") returned 1 [0160.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc548 [0160.699] wcscpy (in: _Dest=0x81dc548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.699] wcscat (in: _Dest=0x81dc548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.699] wcscat (in: _Dest=0x81dc548, _Source="makeaccessible.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" [0160.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor")) returned 0x20 [0160.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR", dwFileAttributes=0x20) returned 0 [0160.700] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.700] GetLastError () returned 0x5 [0160.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR", dwFileAttributes=0x20) returned 0 [0160.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc548) returned 1 [0160.701] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2c8760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NOR", cAlternateFileName="MULTIM~1.NOR")) returned 1 [0160.701] wcscmp (_String1="Multimedia.NOR", _String2=".") returned 1 [0160.701] wcscmp (_String1="Multimedia.NOR", _String2="..") returned 1 [0160.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cd90 [0160.701] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.701] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.701] wcscat (in: _Dest=0x3e3cd90, _Source="Multimedia.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" [0160.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor")) returned 0x20 [0160.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR", dwFileAttributes=0x20) returned 0 [0160.702] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.702] GetLastError () returned 0x5 [0160.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR", dwFileAttributes=0x20) returned 0 [0160.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.703] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NOR", cAlternateFileName="")) returned 1 [0160.703] wcscmp (_String1="pddom.NOR", _String2=".") returned 1 [0160.703] wcscmp (_String1="pddom.NOR", _String2="..") returned 1 [0160.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de968 [0160.703] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.703] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.703] wcscat (in: _Dest=0x81de968, _Source="pddom.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" [0160.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor")) returned 0x20 [0160.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR", dwFileAttributes=0x20) returned 0 [0160.704] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.704] GetLastError () returned 0x5 [0160.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR", dwFileAttributes=0x20) returned 0 [0160.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.705] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NOR", cAlternateFileName="")) returned 1 [0160.705] wcscmp (_String1="PPKLITE.NOR", _String2=".") returned 1 [0160.705] wcscmp (_String1="PPKLITE.NOR", _String2="..") returned 1 [0160.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de968 [0160.705] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.705] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.705] wcscat (in: _Dest=0x81de968, _Source="PPKLITE.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" [0160.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor")) returned 0x20 [0160.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR", dwFileAttributes=0x20) returned 0 [0160.706] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.706] GetLastError () returned 0x5 [0160.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR", dwFileAttributes=0x20) returned 0 [0160.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.707] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbbc6e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x140400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NOR", cAlternateFileName="")) returned 1 [0160.707] wcscmp (_String1="RdLang32.NOR", _String2=".") returned 1 [0160.707] wcscmp (_String1="RdLang32.NOR", _String2="..") returned 1 [0160.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.707] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.707] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.707] wcscat (in: _Dest=0x81de968, _Source="RdLang32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" [0160.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor")) returned 0x20 [0160.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR", dwFileAttributes=0x20) returned 0 [0160.708] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.708] GetLastError () returned 0x5 [0160.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR", dwFileAttributes=0x20) returned 0 [0160.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.709] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NOR", cAlternateFileName="READOU~1.NOR")) returned 1 [0160.709] wcscmp (_String1="ReadOutLoud.NOR", _String2=".") returned 1 [0160.709] wcscmp (_String1="ReadOutLoud.NOR", _String2="..") returned 1 [0160.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cd90 [0160.709] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.709] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.709] wcscat (in: _Dest=0x3e3cd90, _Source="ReadOutLoud.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" [0160.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor")) returned 0x20 [0160.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR", dwFileAttributes=0x20) returned 0 [0160.710] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.710] GetLastError () returned 0x5 [0160.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR", dwFileAttributes=0x20) returned 0 [0160.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.711] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NOR", cAlternateFileName="")) returned 1 [0160.711] wcscmp (_String1="reflow.NOR", _String2=".") returned 1 [0162.264] wcscmp (_String1="reflow.NOR", _String2="..") returned 1 [0162.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de608 [0162.264] wcscpy (in: _Dest=0x81de608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0162.264] wcscat (in: _Dest=0x81de608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0162.264] wcscat (in: _Dest=0x81de608, _Source="reflow.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" [0163.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2668 [0163.122] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NOR", cAlternateFileName="SAVEAS~1.NOR")) returned 1 [0163.122] wcscmp (_String1="SaveAsRTF.NOR", _String2=".") returned 1 [0163.122] wcscmp (_String1="SaveAsRTF.NOR", _String2="..") returned 1 [0163.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d19b8 [0163.122] wcscpy (in: _Dest=0x81d19b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0163.122] wcscat (in: _Dest=0x81d19b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0163.122] wcscat (in: _Dest=0x81d19b8, _Source="SaveAsRTF.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" [0163.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d19b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2664 [0163.123] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NOR", cAlternateFileName="")) returned 1 [0163.123] wcscmp (_String1="Search.NOR", _String2=".") returned 1 [0163.124] wcscmp (_String1="Search.NOR", _String2="..") returned 1 [0163.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb2818 [0163.124] wcscpy (in: _Dest=0x3eb2818, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0163.124] wcscat (in: _Dest=0x3eb2818, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0163.124] wcscat (in: _Dest=0x3eb2818, _Source="Search.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" [0163.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2660 [0163.125] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NOR", cAlternateFileName="")) returned 1 [0163.125] wcscmp (_String1="SendMail.NOR", _String2=".") returned 1 [0163.125] wcscmp (_String1="SendMail.NOR", _String2="..") returned 1 [0163.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1c48 [0163.125] wcscpy (in: _Dest=0x3eb1c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0163.125] wcscat (in: _Dest=0x3eb1c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0163.125] wcscat (in: _Dest=0x3eb1c48, _Source="SendMail.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" [0163.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x265c [0163.126] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0163.126] wcscmp (_String1="Services", _String2=".") returned 1 [0163.126] wcscmp (_String1="Services", _String2="..") returned 1 [0163.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf800 [0163.126] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0163.126] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0163.126] wcscat (in: _Dest=0x81bf800, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0163.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2658 [0163.127] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NOR", cAlternateFileName="")) returned 1 [0163.127] wcscmp (_String1="Spelling.NOR", _String2=".") returned 1 [0163.127] wcscmp (_String1="Spelling.NOR", _String2="..") returned 1 [0163.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1738 [0163.127] wcscpy (in: _Dest=0x3eb1738, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0163.127] wcscat (in: _Dest=0x3eb1738, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0163.128] wcscat (in: _Dest=0x3eb1738, _Source="Spelling.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" [0163.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2654 [0163.129] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NOR", cAlternateFileName="")) returned 1 [0163.129] wcscmp (_String1="updater.NOR", _String2=".") returned 1 [0163.129] wcscmp (_String1="updater.NOR", _String2="..") returned 1 [0163.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb26f8 [0163.129] wcscpy (in: _Dest=0x3eb26f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0163.129] wcscat (in: _Dest=0x3eb26f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0163.129] wcscat (in: _Dest=0x3eb26f8, _Source="updater.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" [0163.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb26f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2650 [0163.130] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 1 [0163.130] wcscmp (_String1="Weblink.NOR", _String2=".") returned 1 [0163.130] wcscmp (_String1="Weblink.NOR", _String2="..") returned 1 [0163.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2668 [0163.131] wcscpy (in: _Dest=0x3eb2668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0163.131] wcscat (in: _Dest=0x3eb2668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0163.131] wcscat (in: _Dest=0x3eb2668, _Source="Weblink.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" [0163.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264c [0163.131] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3efc1e0 | out: lpFindFileData=0x3efc1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 0 [0163.132] FindClose (in: hFindFile=0x3f37498 | out: hFindFile=0x3f37498) returned 1 [0163.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efc1e0) returned 1 [0163.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23fc0) returned 1 [0163.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df89e8) returned 1 Thread: id = 2153 os_tid = 0x1d44 [0152.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e23e40 [0152.358] wcscpy (in: _Dest=0x3e23e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0152.358] wcscat (in: _Dest=0x3e23e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0152.358] wcscat (in: _Dest=0x3e23e40, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*" [0152.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efc448 [0152.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda33ab80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37958 [0157.222] wcscmp (_String1=".", _String2=".") returned 0 [0157.222] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda33ab80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.222] wcscmp (_String1="..", _String2=".") returned 1 [0157.222] wcscmp (_String1="..", _String2="..") returned 0 [0157.222] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NLD", cAlternateFileName="ACCESS~1.NLD")) returned 1 [0157.223] wcscmp (_String1="accessibility.NLD", _String2=".") returned 1 [0157.223] wcscmp (_String1="accessibility.NLD", _String2="..") returned 1 [0157.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc228 [0157.223] wcscpy (in: _Dest=0x81dc228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0157.223] wcscat (in: _Dest=0x81dc228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0157.223] wcscat (in: _Dest=0x81dc228, _Source="accessibility.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" [0160.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld")) returned 0x20 [0160.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD", dwFileAttributes=0x20) returned 0 [0160.351] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.351] GetLastError () returned 0x5 [0160.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD", dwFileAttributes=0x20) returned 0 [0160.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc228) returned 1 [0160.352] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NLD", cAlternateFileName="")) returned 1 [0160.352] wcscmp (_String1="Acroform.NLD", _String2=".") returned 1 [0160.352] wcscmp (_String1="Acroform.NLD", _String2="..") returned 1 [0160.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0160.352] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.352] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.352] wcscat (in: _Dest=0x81de7b8, _Source="Acroform.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" [0160.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld")) returned 0x20 [0160.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD", dwFileAttributes=0x20) returned 0 [0160.395] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.395] GetLastError () returned 0x5 [0160.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD", dwFileAttributes=0x20) returned 0 [0160.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.395] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NLD", cAlternateFileName="ADOBEC~1.NLD")) returned 1 [0160.395] wcscmp (_String1="AdobeCollabSync.NLD", _String2=".") returned 1 [0160.395] wcscmp (_String1="AdobeCollabSync.NLD", _String2="..") returned 1 [0160.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc2c8 [0160.395] wcscpy (in: _Dest=0x81dc2c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.395] wcscat (in: _Dest=0x81dc2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.395] wcscat (in: _Dest=0x81dc2c8, _Source="AdobeCollabSync.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" [0160.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld")) returned 0x20 [0160.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD", dwFileAttributes=0x20) returned 0 [0160.439] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.439] GetLastError () returned 0x5 [0160.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD", dwFileAttributes=0x20) returned 0 [0160.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc2c8) returned 1 [0160.440] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NLD", cAlternateFileName="")) returned 1 [0160.440] wcscmp (_String1="Annots.NLD", _String2=".") returned 1 [0160.440] wcscmp (_String1="Annots.NLD", _String2="..") returned 1 [0160.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dec38 [0160.440] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.440] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.440] wcscat (in: _Dest=0x81dec38, _Source="Annots.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" [0160.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld")) returned 0x20 [0160.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD", dwFileAttributes=0x20) returned 0 [0160.440] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.441] GetLastError () returned 0x5 [0160.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD", dwFileAttributes=0x20) returned 0 [0160.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.441] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NLD", cAlternateFileName="BRDLAN~1.NLD")) returned 1 [0160.441] wcscmp (_String1="BRdlang32.NLD", _String2=".") returned 1 [0160.441] wcscmp (_String1="BRdlang32.NLD", _String2="..") returned 1 [0160.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.441] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.441] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.441] wcscat (in: _Dest=0x3e3db38, _Source="BRdlang32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" [0160.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld")) returned 0x20 [0160.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD", dwFileAttributes=0x20) returned 0 [0160.480] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.480] GetLastError () returned 0x5 [0160.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD", dwFileAttributes=0x20) returned 0 [0160.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.481] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NLD", cAlternateFileName="")) returned 1 [0160.481] wcscmp (_String1="Checkers.NLD", _String2=".") returned 1 [0160.481] wcscmp (_String1="Checkers.NLD", _String2="..") returned 1 [0160.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dea88 [0160.481] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.481] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.481] wcscat (in: _Dest=0x81dea88, _Source="Checkers.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" [0160.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld")) returned 0x20 [0160.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD", dwFileAttributes=0x20) returned 0 [0160.481] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.482] GetLastError () returned 0x5 [0160.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD", dwFileAttributes=0x20) returned 0 [0160.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.482] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NLD", cAlternateFileName="")) returned 1 [0160.482] wcscmp (_String1="DigSig.NLD", _String2=".") returned 1 [0160.482] wcscmp (_String1="DigSig.NLD", _String2="..") returned 1 [0160.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dea88 [0160.482] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.482] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.482] wcscat (in: _Dest=0x81dea88, _Source="DigSig.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" [0160.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld")) returned 0x20 [0160.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD", dwFileAttributes=0x20) returned 0 [0160.483] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.483] GetLastError () returned 0x5 [0160.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD", dwFileAttributes=0x20) returned 0 [0160.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.483] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NLD", cAlternateFileName="")) returned 1 [0160.483] wcscmp (_String1="DVA.NLD", _String2=".") returned 1 [0160.483] wcscmp (_String1="DVA.NLD", _String2="..") returned 1 [0160.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bebc8 [0160.483] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.483] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.483] wcscat (in: _Dest=0x81bebc8, _Source="DVA.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" [0160.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld")) returned 0x20 [0160.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD", dwFileAttributes=0x20) returned 0 [0160.484] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.484] GetLastError () returned 0x5 [0160.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD", dwFileAttributes=0x20) returned 0 [0160.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.484] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NLD", cAlternateFileName="")) returned 1 [0160.484] wcscmp (_String1="eBook.NLD", _String2=".") returned 1 [0160.484] wcscmp (_String1="eBook.NLD", _String2="..") returned 1 [0160.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dea88 [0160.485] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.485] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.485] wcscat (in: _Dest=0x81dea88, _Source="eBook.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" [0160.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld")) returned 0x20 [0160.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD", dwFileAttributes=0x20) returned 0 [0160.485] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.485] GetLastError () returned 0x5 [0160.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD", dwFileAttributes=0x20) returned 0 [0160.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.486] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NLD", cAlternateFileName="")) returned 1 [0160.486] wcscmp (_String1="EScript.NLD", _String2=".") returned 1 [0160.486] wcscmp (_String1="EScript.NLD", _String2="..") returned 1 [0160.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dea88 [0160.486] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.486] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.486] wcscat (in: _Dest=0x81dea88, _Source="EScript.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" [0160.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld")) returned 0x20 [0160.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD", dwFileAttributes=0x20) returned 0 [0160.487] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.487] GetLastError () returned 0x5 [0160.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD", dwFileAttributes=0x20) returned 0 [0160.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.487] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NLD", cAlternateFileName="")) returned 1 [0160.487] wcscmp (_String1="IA32.NLD", _String2=".") returned 1 [0160.487] wcscmp (_String1="IA32.NLD", _String2="..") returned 1 [0160.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0160.487] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.487] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.487] wcscat (in: _Dest=0x81bebc8, _Source="IA32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" [0160.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld")) returned 0x20 [0160.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD", dwFileAttributes=0x20) returned 0 [0160.552] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.552] GetLastError () returned 0x5 [0160.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD", dwFileAttributes=0x20) returned 0 [0160.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.552] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NLD", cAlternateFileName="MAKEAC~1.NLD")) returned 1 [0160.553] wcscmp (_String1="makeaccessible.NLD", _String2=".") returned 1 [0160.553] wcscmp (_String1="makeaccessible.NLD", _String2="..") returned 1 [0160.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc368 [0160.553] wcscpy (in: _Dest=0x81dc368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.553] wcscat (in: _Dest=0x81dc368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.553] wcscat (in: _Dest=0x81dc368, _Source="makeaccessible.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" [0160.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld")) returned 0x20 [0160.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD", dwFileAttributes=0x20) returned 0 [0160.616] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.616] GetLastError () returned 0x5 [0160.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD", dwFileAttributes=0x20) returned 0 [0160.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc368) returned 1 [0160.616] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NLD", cAlternateFileName="MULTIM~1.NLD")) returned 1 [0160.616] wcscmp (_String1="Multimedia.NLD", _String2=".") returned 1 [0160.616] wcscmp (_String1="Multimedia.NLD", _String2="..") returned 1 [0160.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3dd00 [0160.616] wcscpy (in: _Dest=0x3e3dd00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.616] wcscat (in: _Dest=0x3e3dd00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.616] wcscat (in: _Dest=0x3e3dd00, _Source="Multimedia.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" [0160.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld")) returned 0x20 [0160.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD", dwFileAttributes=0x20) returned 0 [0160.617] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.617] GetLastError () returned 0x5 [0160.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD", dwFileAttributes=0x20) returned 0 [0160.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd00) returned 1 [0160.618] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NLD", cAlternateFileName="")) returned 1 [0160.618] wcscmp (_String1="pddom.NLD", _String2=".") returned 1 [0160.618] wcscmp (_String1="pddom.NLD", _String2="..") returned 1 [0160.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0160.618] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.618] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.618] wcscat (in: _Dest=0x81de728, _Source="pddom.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" [0160.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld")) returned 0x20 [0160.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD", dwFileAttributes=0x20) returned 0 [0160.618] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.619] GetLastError () returned 0x5 [0160.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD", dwFileAttributes=0x20) returned 0 [0160.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.619] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NLD", cAlternateFileName="")) returned 1 [0160.619] wcscmp (_String1="PPKLITE.NLD", _String2=".") returned 1 [0160.619] wcscmp (_String1="PPKLITE.NLD", _String2="..") returned 1 [0160.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0160.619] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.619] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.619] wcscat (in: _Dest=0x81de728, _Source="PPKLITE.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" [0160.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld")) returned 0x20 [0160.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD", dwFileAttributes=0x20) returned 0 [0160.619] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.620] GetLastError () returned 0x5 [0160.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD", dwFileAttributes=0x20) returned 0 [0160.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.620] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x155c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NLD", cAlternateFileName="")) returned 1 [0160.620] wcscmp (_String1="RdLang32.NLD", _String2=".") returned 1 [0160.620] wcscmp (_String1="RdLang32.NLD", _String2="..") returned 1 [0160.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.620] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.620] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.620] wcscat (in: _Dest=0x81de728, _Source="RdLang32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" [0160.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld")) returned 0x20 [0160.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD", dwFileAttributes=0x20) returned 0 [0160.621] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.621] GetLastError () returned 0x5 [0160.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD", dwFileAttributes=0x20) returned 0 [0160.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.621] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NLD", cAlternateFileName="READOU~1.NLD")) returned 1 [0160.621] wcscmp (_String1="ReadOutLoud.NLD", _String2=".") returned 1 [0160.621] wcscmp (_String1="ReadOutLoud.NLD", _String2="..") returned 1 [0160.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3dd00 [0160.621] wcscpy (in: _Dest=0x3e3dd00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.621] wcscat (in: _Dest=0x3e3dd00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.621] wcscat (in: _Dest=0x3e3dd00, _Source="ReadOutLoud.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" [0160.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld")) returned 0x20 [0160.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD", dwFileAttributes=0x20) returned 0 [0160.622] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.622] GetLastError () returned 0x5 [0160.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD", dwFileAttributes=0x20) returned 0 [0160.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd00) returned 1 [0160.622] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NLD", cAlternateFileName="")) returned 1 [0160.622] wcscmp (_String1="reflow.NLD", _String2=".") returned 1 [0160.622] wcscmp (_String1="reflow.NLD", _String2="..") returned 1 [0160.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.622] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.622] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.623] wcscat (in: _Dest=0x81de728, _Source="reflow.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" [0160.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld")) returned 0x20 [0160.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD", dwFileAttributes=0x20) returned 0 [0160.623] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.623] GetLastError () returned 0x5 [0160.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD", dwFileAttributes=0x20) returned 0 [0160.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.623] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NLD", cAlternateFileName="SAVEAS~1.NLD")) returned 1 [0160.623] wcscmp (_String1="SaveAsRTF.NLD", _String2=".") returned 1 [0160.623] wcscmp (_String1="SaveAsRTF.NLD", _String2="..") returned 1 [0160.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3dd00 [0160.623] wcscpy (in: _Dest=0x3e3dd00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.623] wcscat (in: _Dest=0x3e3dd00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.623] wcscat (in: _Dest=0x3e3dd00, _Source="SaveAsRTF.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" [0160.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld")) returned 0x20 [0160.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD", dwFileAttributes=0x20) returned 0 [0160.624] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.624] GetLastError () returned 0x5 [0160.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD", dwFileAttributes=0x20) returned 0 [0160.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd00) returned 1 [0160.624] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NLD", cAlternateFileName="")) returned 1 [0160.624] wcscmp (_String1="Search.NLD", _String2=".") returned 1 [0160.624] wcscmp (_String1="Search.NLD", _String2="..") returned 1 [0160.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.624] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.624] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.624] wcscat (in: _Dest=0x81de728, _Source="Search.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" [0160.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld")) returned 0x20 [0160.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD", dwFileAttributes=0x20) returned 0 [0160.625] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.625] GetLastError () returned 0x5 [0160.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD", dwFileAttributes=0x20) returned 0 [0160.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.625] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NLD", cAlternateFileName="")) returned 1 [0160.625] wcscmp (_String1="SendMail.NLD", _String2=".") returned 1 [0160.625] wcscmp (_String1="SendMail.NLD", _String2="..") returned 1 [0160.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.625] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.625] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.625] wcscat (in: _Dest=0x81de728, _Source="SendMail.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" [0160.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld")) returned 0x20 [0160.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD", dwFileAttributes=0x20) returned 0 [0160.626] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.626] GetLastError () returned 0x5 [0160.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD", dwFileAttributes=0x20) returned 0 [0160.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.626] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.626] wcscmp (_String1="Services", _String2=".") returned 1 [0160.626] wcscmp (_String1="Services", _String2="..") returned 1 [0160.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0160.626] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.626] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.626] wcscat (in: _Dest=0x81bee70, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0160.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.627] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0160.627] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\" [0160.627] wcscat (in: _Dest=0x81de728, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*" [0160.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe928 [0160.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0160.715] wcscmp (_String1=".", _String2=".") returned 0 [0160.715] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.715] wcscmp (_String1="..", _String2=".") returned 1 [0160.715] wcscmp (_String1="..", _String2="..") returned 0 [0160.715] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x924e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.716] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.716] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186998 [0160.716] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0160.716] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\" [0160.716] wcscat (in: _Dest=0x8186998, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" [0160.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx")) returned 0x20 [0160.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.775] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.775] GetLastError () returned 0x5 [0160.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0160.775] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0160.775] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0160.775] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0160.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186998 [0160.776] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0160.776] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\" [0160.776] wcscat (in: _Dest=0x8186998, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" [0160.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx")) returned 0x20 [0162.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0162.269] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.269] GetLastError () returned 0x5 [0162.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0162.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 [0162.269] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0162.269] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0162.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe928) returned 1 [0162.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0162.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0162.270] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NLD", cAlternateFileName="")) returned 1 [0162.270] wcscmp (_String1="Spelling.NLD", _String2=".") returned 1 [0162.270] wcscmp (_String1="Spelling.NLD", _String2="..") returned 1 [0162.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0162.270] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0162.270] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0162.270] wcscat (in: _Dest=0x81de728, _Source="Spelling.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" [0166.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a0 [0166.013] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NLD", cAlternateFileName="")) returned 1 [0166.014] wcscmp (_String1="updater.NLD", _String2=".") returned 1 [0166.014] wcscmp (_String1="updater.NLD", _String2="..") returned 1 [0166.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df538 [0166.014] wcscpy (in: _Dest=0x81df538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0166.014] wcscat (in: _Dest=0x81df538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0166.014] wcscat (in: _Dest=0x81df538, _Source="updater.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" [0166.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26fc [0166.015] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 1 [0166.015] wcscmp (_String1="Weblink.NLD", _String2=".") returned 1 [0166.015] wcscmp (_String1="Weblink.NLD", _String2="..") returned 1 [0166.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81def98 [0166.015] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0166.015] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0166.015] wcscat (in: _Dest=0x81def98, _Source="Weblink.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" [0166.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x252c [0166.017] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3efc448 | out: lpFindFileData=0x3efc448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 0 [0166.017] FindClose (in: hFindFile=0x3f37958 | out: hFindFile=0x3f37958) returned 1 [0166.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efc448) returned 1 [0166.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23e40) returned 1 [0166.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687e0) returned 1 Thread: id = 2154 os_tid = 0x1d48 [0152.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e242c0 [0152.358] wcscpy (in: _Dest=0x3e242c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0152.358] wcscat (in: _Dest=0x3e242c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0152.358] wcscat (in: _Dest=0x3e242c0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*" [0152.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efc6b0 [0152.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37918 [0157.221] wcscmp (_String1=".", _String2=".") returned 0 [0157.222] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.222] wcscmp (_String1="..", _String2=".") returned 1 [0157.222] wcscmp (_String1="..", _String2="..") returned 0 [0157.222] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.POL", cAlternateFileName="ACCESS~1.POL")) returned 1 [0157.222] wcscmp (_String1="accessibility.POL", _String2=".") returned 1 [0157.222] wcscmp (_String1="accessibility.POL", _String2="..") returned 1 [0157.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc188 [0157.222] wcscpy (in: _Dest=0x81dc188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0157.222] wcscat (in: _Dest=0x81dc188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0157.222] wcscat (in: _Dest=0x81dc188, _Source="accessibility.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" [0160.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol")) returned 0x20 [0160.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL", dwFileAttributes=0x20) returned 0 [0160.315] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.315] GetLastError () returned 0x5 [0160.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL", dwFileAttributes=0x20) returned 0 [0160.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc188) returned 1 [0160.315] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.POL", cAlternateFileName="")) returned 1 [0160.315] wcscmp (_String1="Acroform.POL", _String2=".") returned 1 [0160.316] wcscmp (_String1="Acroform.POL", _String2="..") returned 1 [0160.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.316] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.316] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.316] wcscat (in: _Dest=0x81de728, _Source="Acroform.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" [0160.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol")) returned 0x20 [0160.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL", dwFileAttributes=0x20) returned 0 [0160.368] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.368] GetLastError () returned 0x5 [0160.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL", dwFileAttributes=0x20) returned 0 [0160.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.368] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.POL", cAlternateFileName="ADOBEC~1.POL")) returned 1 [0160.368] wcscmp (_String1="AdobeCollabSync.POL", _String2=".") returned 1 [0160.368] wcscmp (_String1="AdobeCollabSync.POL", _String2="..") returned 1 [0160.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc228 [0160.369] wcscpy (in: _Dest=0x81dc228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.369] wcscat (in: _Dest=0x81dc228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.369] wcscat (in: _Dest=0x81dc228, _Source="AdobeCollabSync.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" [0160.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol")) returned 0x20 [0160.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL", dwFileAttributes=0x20) returned 0 [0160.369] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.369] GetLastError () returned 0x5 [0160.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL", dwFileAttributes=0x20) returned 0 [0160.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc228) returned 1 [0160.369] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.POL", cAlternateFileName="")) returned 1 [0160.369] wcscmp (_String1="Annots.POL", _String2=".") returned 1 [0160.370] wcscmp (_String1="Annots.POL", _String2="..") returned 1 [0160.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.370] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.370] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.370] wcscat (in: _Dest=0x81de728, _Source="Annots.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" [0160.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol")) returned 0x20 [0160.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL", dwFileAttributes=0x20) returned 0 [0160.370] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.370] GetLastError () returned 0x5 [0160.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL", dwFileAttributes=0x20) returned 0 [0160.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.370] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.POL", cAlternateFileName="BRDLAN~1.POL")) returned 1 [0160.371] wcscmp (_String1="BRdlang32.POL", _String2=".") returned 1 [0160.371] wcscmp (_String1="BRdlang32.POL", _String2="..") returned 1 [0160.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c540 [0160.371] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.371] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.371] wcscat (in: _Dest=0x3e3c540, _Source="BRdlang32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" [0160.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol")) returned 0x20 [0160.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL", dwFileAttributes=0x20) returned 0 [0160.401] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.401] GetLastError () returned 0x5 [0160.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL", dwFileAttributes=0x20) returned 0 [0160.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0160.401] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.POL", cAlternateFileName="")) returned 1 [0160.401] wcscmp (_String1="Checkers.POL", _String2=".") returned 1 [0160.401] wcscmp (_String1="Checkers.POL", _String2="..") returned 1 [0160.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0160.401] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.401] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.401] wcscat (in: _Dest=0x81de7b8, _Source="Checkers.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" [0160.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol")) returned 0x20 [0160.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL", dwFileAttributes=0x20) returned 0 [0160.402] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.402] GetLastError () returned 0x5 [0160.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL", dwFileAttributes=0x20) returned 0 [0160.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.402] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.POL", cAlternateFileName="")) returned 1 [0160.402] wcscmp (_String1="DigSig.POL", _String2=".") returned 1 [0160.402] wcscmp (_String1="DigSig.POL", _String2="..") returned 1 [0160.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.402] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.402] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.402] wcscat (in: _Dest=0x81de7b8, _Source="DigSig.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" [0160.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol")) returned 0x20 [0160.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL", dwFileAttributes=0x20) returned 0 [0160.403] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.403] GetLastError () returned 0x5 [0160.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL", dwFileAttributes=0x20) returned 0 [0160.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.403] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.POL", cAlternateFileName="")) returned 1 [0160.403] wcscmp (_String1="DVA.POL", _String2=".") returned 1 [0160.403] wcscmp (_String1="DVA.POL", _String2="..") returned 1 [0160.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bebc8 [0160.403] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.403] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.403] wcscat (in: _Dest=0x81bebc8, _Source="DVA.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" [0160.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol")) returned 0x20 [0160.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL", dwFileAttributes=0x20) returned 0 [0160.404] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.404] GetLastError () returned 0x5 [0160.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL", dwFileAttributes=0x20) returned 0 [0160.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.404] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.POL", cAlternateFileName="")) returned 1 [0160.404] wcscmp (_String1="eBook.POL", _String2=".") returned 1 [0160.404] wcscmp (_String1="eBook.POL", _String2="..") returned 1 [0160.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0160.404] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.405] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.405] wcscat (in: _Dest=0x81de7b8, _Source="eBook.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" [0160.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol")) returned 0x20 [0160.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL", dwFileAttributes=0x20) returned 0 [0160.442] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.443] GetLastError () returned 0x5 [0160.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL", dwFileAttributes=0x20) returned 0 [0160.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.443] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.POL", cAlternateFileName="")) returned 1 [0160.443] wcscmp (_String1="EScript.POL", _String2=".") returned 1 [0160.443] wcscmp (_String1="EScript.POL", _String2="..") returned 1 [0160.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0160.443] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.443] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.443] wcscat (in: _Dest=0x81de7b8, _Source="EScript.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" [0160.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol")) returned 0x20 [0160.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL", dwFileAttributes=0x20) returned 0 [0160.489] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.489] GetLastError () returned 0x5 [0160.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL", dwFileAttributes=0x20) returned 0 [0160.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.489] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.POL", cAlternateFileName="")) returned 1 [0160.489] wcscmp (_String1="IA32.POL", _String2=".") returned 1 [0160.489] wcscmp (_String1="IA32.POL", _String2="..") returned 1 [0160.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0160.489] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.489] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.489] wcscat (in: _Dest=0x81bee70, _Source="IA32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" [0160.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol")) returned 0x20 [0160.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL", dwFileAttributes=0x20) returned 0 [0160.490] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.490] GetLastError () returned 0x5 [0160.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL", dwFileAttributes=0x20) returned 0 [0160.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.490] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda86fba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.POL", cAlternateFileName="MAKEAC~1.POL")) returned 1 [0160.491] wcscmp (_String1="makeaccessible.POL", _String2=".") returned 1 [0160.491] wcscmp (_String1="makeaccessible.POL", _String2="..") returned 1 [0160.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc408 [0160.491] wcscpy (in: _Dest=0x81dc408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.491] wcscat (in: _Dest=0x81dc408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.491] wcscat (in: _Dest=0x81dc408, _Source="makeaccessible.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" [0160.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol")) returned 0x20 [0160.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL", dwFileAttributes=0x20) returned 0 [0160.554] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.554] GetLastError () returned 0x5 [0160.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL", dwFileAttributes=0x20) returned 0 [0160.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc408) returned 1 [0160.555] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.POL", cAlternateFileName="MULTIM~1.POL")) returned 1 [0160.555] wcscmp (_String1="Multimedia.POL", _String2=".") returned 1 [0160.555] wcscmp (_String1="Multimedia.POL", _String2="..") returned 1 [0160.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0160.555] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.555] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.555] wcscat (in: _Dest=0x3e3cf58, _Source="Multimedia.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" [0160.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol")) returned 0x20 [0160.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL", dwFileAttributes=0x20) returned 0 [0160.556] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.556] GetLastError () returned 0x5 [0160.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL", dwFileAttributes=0x20) returned 0 [0160.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.557] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.POL", cAlternateFileName="")) returned 1 [0160.557] wcscmp (_String1="pddom.POL", _String2=".") returned 1 [0160.557] wcscmp (_String1="pddom.POL", _String2="..") returned 1 [0160.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de9f8 [0160.557] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.557] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.557] wcscat (in: _Dest=0x81de9f8, _Source="pddom.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" [0160.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol")) returned 0x20 [0160.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL", dwFileAttributes=0x20) returned 0 [0160.628] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.628] GetLastError () returned 0x5 [0160.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL", dwFileAttributes=0x20) returned 0 [0160.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.628] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.POL", cAlternateFileName="")) returned 1 [0160.628] wcscmp (_String1="PPKLite.POL", _String2=".") returned 1 [0160.628] wcscmp (_String1="PPKLite.POL", _String2="..") returned 1 [0160.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de9f8 [0160.628] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.628] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.628] wcscat (in: _Dest=0x81de9f8, _Source="PPKLite.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" [0160.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol")) returned 0x20 [0160.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL", dwFileAttributes=0x20) returned 0 [0160.629] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.629] GetLastError () returned 0x5 [0160.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL", dwFileAttributes=0x20) returned 0 [0160.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.629] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd0c1040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.POL", cAlternateFileName="")) returned 1 [0160.629] wcscmp (_String1="RdLang32.POL", _String2=".") returned 1 [0160.629] wcscmp (_String1="RdLang32.POL", _String2="..") returned 1 [0160.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de9f8 [0160.629] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.629] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.629] wcscat (in: _Dest=0x81de9f8, _Source="RdLang32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" [0160.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol")) returned 0x20 [0160.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL", dwFileAttributes=0x20) returned 0 [0160.630] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.630] GetLastError () returned 0x5 [0160.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL", dwFileAttributes=0x20) returned 0 [0160.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.630] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.POL", cAlternateFileName="READOU~1.POL")) returned 1 [0160.630] wcscmp (_String1="ReadOutLoud.POL", _String2=".") returned 1 [0160.630] wcscmp (_String1="ReadOutLoud.POL", _String2="..") returned 1 [0160.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3dd00 [0160.630] wcscpy (in: _Dest=0x3e3dd00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.630] wcscat (in: _Dest=0x3e3dd00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.630] wcscat (in: _Dest=0x3e3dd00, _Source="ReadOutLoud.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" [0160.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol")) returned 0x20 [0160.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL", dwFileAttributes=0x20) returned 0 [0160.717] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.717] GetLastError () returned 0x5 [0160.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL", dwFileAttributes=0x20) returned 0 [0160.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd00) returned 1 [0160.717] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.POL", cAlternateFileName="")) returned 1 [0160.717] wcscmp (_String1="reflow.POL", _String2=".") returned 1 [0160.717] wcscmp (_String1="reflow.POL", _String2="..") returned 1 [0160.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0160.717] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.718] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.718] wcscat (in: _Dest=0x81de968, _Source="reflow.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" [0160.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol")) returned 0x20 [0160.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL", dwFileAttributes=0x20) returned 0 [0160.718] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.718] GetLastError () returned 0x5 [0160.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL", dwFileAttributes=0x20) returned 0 [0160.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.718] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.POL", cAlternateFileName="SAVEAS~1.POL")) returned 1 [0160.718] wcscmp (_String1="SaveAsRTF.POL", _String2=".") returned 1 [0160.719] wcscmp (_String1="SaveAsRTF.POL", _String2="..") returned 1 [0160.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3dd00 [0160.719] wcscpy (in: _Dest=0x3e3dd00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.719] wcscat (in: _Dest=0x3e3dd00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.719] wcscat (in: _Dest=0x3e3dd00, _Source="SaveAsRTF.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" [0160.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol")) returned 0x20 [0160.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL", dwFileAttributes=0x20) returned 0 [0160.777] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.777] GetLastError () returned 0x5 [0160.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL", dwFileAttributes=0x20) returned 0 [0160.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd00) returned 1 [0160.778] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.POL", cAlternateFileName="")) returned 1 [0160.778] wcscmp (_String1="Search.POL", _String2=".") returned 1 [0160.778] wcscmp (_String1="Search.POL", _String2="..") returned 1 [0160.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dec38 [0160.778] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.778] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.778] wcscat (in: _Dest=0x81dec38, _Source="Search.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" [0160.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol")) returned 0x20 [0160.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL", dwFileAttributes=0x20) returned 0 [0160.779] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.779] GetLastError () returned 0x5 [0160.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL", dwFileAttributes=0x20) returned 0 [0160.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.779] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.POL", cAlternateFileName="")) returned 1 [0160.779] wcscmp (_String1="SendMail.POL", _String2=".") returned 1 [0160.779] wcscmp (_String1="SendMail.POL", _String2="..") returned 1 [0160.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dec38 [0160.779] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.779] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.779] wcscat (in: _Dest=0x81dec38, _Source="SendMail.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" [0160.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol")) returned 0x20 [0160.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL", dwFileAttributes=0x20) returned 0 [0160.780] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.780] GetLastError () returned 0x5 [0160.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL", dwFileAttributes=0x20) returned 0 [0160.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.780] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.780] wcscmp (_String1="Services", _String2=".") returned 1 [0160.781] wcscmp (_String1="Services", _String2="..") returned 1 [0160.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be4e0 [0160.781] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.781] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.781] wcscat (in: _Dest=0x81be4e0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0160.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dec38 [0160.781] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0160.781] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\" [0160.781] wcscat (in: _Dest=0x81dec38, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*" [0160.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0160.781] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0160.781] wcscmp (_String1=".", _String2=".") returned 0 [0160.781] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.782] wcscmp (_String1="..", _String2=".") returned 1 [0160.782] wcscmp (_String1="..", _String2="..") returned 0 [0160.782] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x94c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.782] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.782] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187808 [0160.782] wcscpy (in: _Dest=0x8187808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0160.782] wcscat (in: _Dest=0x8187808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\" [0160.782] wcscat (in: _Dest=0x8187808, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" [0160.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx")) returned 0x20 [0160.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.782] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.782] GetLastError () returned 0x5 [0160.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187808) returned 1 [0160.783] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0160.783] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0160.783] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0160.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187808 [0160.783] wcscpy (in: _Dest=0x8187808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0160.783] wcscat (in: _Dest=0x8187808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\" [0160.783] wcscat (in: _Dest=0x8187808, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" [0160.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx")) returned 0x20 [0160.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.784] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.784] GetLastError () returned 0x5 [0160.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187808) returned 1 [0160.784] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0160.784] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0160.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0160.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0160.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 [0160.784] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.POL", cAlternateFileName="")) returned 1 [0160.785] wcscmp (_String1="Spelling.POL", _String2=".") returned 1 [0160.785] wcscmp (_String1="Spelling.POL", _String2="..") returned 1 [0160.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dec38 [0160.785] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.785] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.785] wcscat (in: _Dest=0x81dec38, _Source="Spelling.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" [0160.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol")) returned 0x20 [0162.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL", dwFileAttributes=0x20) returned 0 [0162.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.271] GetLastError () returned 0x5 [0162.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL", dwFileAttributes=0x20) returned 0 [0162.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 [0162.271] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.POL", cAlternateFileName="")) returned 1 [0162.271] wcscmp (_String1="updater.POL", _String2=".") returned 1 [0162.271] wcscmp (_String1="updater.POL", _String2="..") returned 1 [0162.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dec38 [0162.271] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0162.271] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0162.272] wcscat (in: _Dest=0x81dec38, _Source="updater.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" [0162.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dec38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a8 [0162.983] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 1 [0162.984] wcscmp (_String1="WebLink.POL", _String2=".") returned 1 [0162.984] wcscmp (_String1="WebLink.POL", _String2="..") returned 1 [0162.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df2f8 [0162.984] wcscpy (in: _Dest=0x81df2f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0162.984] wcscat (in: _Dest=0x81df2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0162.984] wcscat (in: _Dest=0x81df2f8, _Source="WebLink.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" [0162.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x299c [0162.985] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3efc6b0 | out: lpFindFileData=0x3efc6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 0 [0162.985] FindClose (in: hFindFile=0x3f37918 | out: hFindFile=0x3f37918) returned 1 [0162.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efc6b0) returned 1 [0162.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e242c0) returned 1 [0162.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b28) returned 1 Thread: id = 2155 os_tid = 0x1d4c [0152.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24940 [0152.359] wcscpy (in: _Dest=0x3e24940, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0152.359] wcscat (in: _Dest=0x3e24940, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0152.359] wcscat (in: _Dest=0x3e24940, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*" [0152.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efc918 [0152.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f382d8 [0157.221] wcscmp (_String1=".", _String2=".") returned 0 [0157.221] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.221] wcscmp (_String1="..", _String2=".") returned 1 [0157.221] wcscmp (_String1="..", _String2="..") returned 0 [0157.221] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.PTB", cAlternateFileName="ACCESS~1.PTB")) returned 1 [0157.221] wcscmp (_String1="accessibility.PTB", _String2=".") returned 1 [0157.221] wcscmp (_String1="accessibility.PTB", _String2="..") returned 1 [0157.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc0e8 [0157.221] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0157.221] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0157.221] wcscat (in: _Dest=0x81dc0e8, _Source="accessibility.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" [0160.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb")) returned 0x20 [0160.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB", dwFileAttributes=0x20) returned 0 [0160.294] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.294] GetLastError () returned 0x5 [0160.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB", dwFileAttributes=0x20) returned 0 [0160.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 [0160.294] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.PTB", cAlternateFileName="")) returned 1 [0160.294] wcscmp (_String1="Acroform.PTB", _String2=".") returned 1 [0160.295] wcscmp (_String1="Acroform.PTB", _String2="..") returned 1 [0160.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0160.295] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.295] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.295] wcscat (in: _Dest=0x81deb18, _Source="Acroform.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" [0160.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb")) returned 0x20 [0160.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB", dwFileAttributes=0x20) returned 0 [0160.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.317] GetLastError () returned 0x5 [0160.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB", dwFileAttributes=0x20) returned 0 [0160.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.317] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.PTB", cAlternateFileName="ADOBEC~1.PTB")) returned 1 [0160.317] wcscmp (_String1="AdobeCollabSync.PTB", _String2=".") returned 1 [0160.317] wcscmp (_String1="AdobeCollabSync.PTB", _String2="..") returned 1 [0160.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc188 [0160.317] wcscpy (in: _Dest=0x81dc188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.317] wcscat (in: _Dest=0x81dc188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.317] wcscat (in: _Dest=0x81dc188, _Source="AdobeCollabSync.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" [0160.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb")) returned 0x20 [0160.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB", dwFileAttributes=0x20) returned 0 [0160.372] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.372] GetLastError () returned 0x5 [0160.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB", dwFileAttributes=0x20) returned 0 [0160.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc188) returned 1 [0160.372] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.PTB", cAlternateFileName="")) returned 1 [0160.373] wcscmp (_String1="Annots.PTB", _String2=".") returned 1 [0160.373] wcscmp (_String1="Annots.PTB", _String2="..") returned 1 [0160.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.373] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.373] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.373] wcscat (in: _Dest=0x81de728, _Source="Annots.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" [0160.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb")) returned 0x20 [0160.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB", dwFileAttributes=0x20) returned 0 [0160.373] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.373] GetLastError () returned 0x5 [0160.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB", dwFileAttributes=0x20) returned 0 [0160.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.374] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.PTB", cAlternateFileName="BRDLAN~1.PTB")) returned 1 [0160.374] wcscmp (_String1="BRdlang32.PTB", _String2=".") returned 1 [0160.374] wcscmp (_String1="BRdlang32.PTB", _String2="..") returned 1 [0160.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.374] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.374] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.374] wcscat (in: _Dest=0x3e3db38, _Source="BRdlang32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" [0160.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb")) returned 0x20 [0160.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB", dwFileAttributes=0x20) returned 0 [0160.405] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.406] GetLastError () returned 0x5 [0160.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB", dwFileAttributes=0x20) returned 0 [0160.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.406] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.PTB", cAlternateFileName="")) returned 1 [0160.406] wcscmp (_String1="Checkers.PTB", _String2=".") returned 1 [0160.406] wcscmp (_String1="Checkers.PTB", _String2="..") returned 1 [0160.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0160.406] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.406] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.406] wcscat (in: _Dest=0x81de8d8, _Source="Checkers.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" [0160.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb")) returned 0x20 [0160.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB", dwFileAttributes=0x20) returned 0 [0160.444] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.445] GetLastError () returned 0x5 [0160.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB", dwFileAttributes=0x20) returned 0 [0160.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.445] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.PTB", cAlternateFileName="")) returned 1 [0160.445] wcscmp (_String1="DigSig.PTB", _String2=".") returned 1 [0160.445] wcscmp (_String1="DigSig.PTB", _String2="..") returned 1 [0160.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de8d8 [0160.445] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.445] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.445] wcscat (in: _Dest=0x81de8d8, _Source="DigSig.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" [0160.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb")) returned 0x20 [0160.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB", dwFileAttributes=0x20) returned 0 [0160.446] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.447] GetLastError () returned 0x5 [0160.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB", dwFileAttributes=0x20) returned 0 [0160.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.447] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.PTB", cAlternateFileName="")) returned 1 [0160.447] wcscmp (_String1="DVA.PTB", _String2=".") returned 1 [0160.447] wcscmp (_String1="DVA.PTB", _String2="..") returned 1 [0160.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bee70 [0160.447] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.447] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.447] wcscat (in: _Dest=0x81bee70, _Source="DVA.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" [0160.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb")) returned 0x20 [0160.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB", dwFileAttributes=0x20) returned 0 [0160.448] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.448] GetLastError () returned 0x5 [0160.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB", dwFileAttributes=0x20) returned 0 [0160.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.448] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.PTB", cAlternateFileName="")) returned 1 [0160.448] wcscmp (_String1="eBook.PTB", _String2=".") returned 1 [0160.448] wcscmp (_String1="eBook.PTB", _String2="..") returned 1 [0160.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de8d8 [0160.448] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.448] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.448] wcscat (in: _Dest=0x81de8d8, _Source="eBook.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" [0160.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb")) returned 0x20 [0160.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB", dwFileAttributes=0x20) returned 0 [0160.449] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.449] GetLastError () returned 0x5 [0160.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB", dwFileAttributes=0x20) returned 0 [0160.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.449] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.PTB", cAlternateFileName="")) returned 1 [0160.449] wcscmp (_String1="EScript.PTB", _String2=".") returned 1 [0160.449] wcscmp (_String1="EScript.PTB", _String2="..") returned 1 [0160.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de8d8 [0160.450] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.450] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.450] wcscat (in: _Dest=0x81de8d8, _Source="EScript.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" [0160.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb")) returned 0x20 [0160.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB", dwFileAttributes=0x20) returned 0 [0160.450] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.450] GetLastError () returned 0x5 [0160.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB", dwFileAttributes=0x20) returned 0 [0160.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.451] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.PTB", cAlternateFileName="")) returned 1 [0160.451] wcscmp (_String1="IA32.PTB", _String2=".") returned 1 [0160.451] wcscmp (_String1="IA32.PTB", _String2="..") returned 1 [0160.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0160.451] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.451] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.451] wcscat (in: _Dest=0x81bee70, _Source="IA32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" [0160.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb")) returned 0x20 [0160.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB", dwFileAttributes=0x20) returned 0 [0160.451] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.452] GetLastError () returned 0x5 [0160.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB", dwFileAttributes=0x20) returned 0 [0160.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.452] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.PTB", cAlternateFileName="MAKEAC~1.PTB")) returned 1 [0160.452] wcscmp (_String1="makeaccessible.PTB", _String2=".") returned 1 [0160.452] wcscmp (_String1="makeaccessible.PTB", _String2="..") returned 1 [0160.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc2c8 [0160.452] wcscpy (in: _Dest=0x81dc2c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.452] wcscat (in: _Dest=0x81dc2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.452] wcscat (in: _Dest=0x81dc2c8, _Source="makeaccessible.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" [0160.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb")) returned 0x20 [0160.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB", dwFileAttributes=0x20) returned 0 [0160.453] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.453] GetLastError () returned 0x5 [0160.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB", dwFileAttributes=0x20) returned 0 [0160.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc2c8) returned 1 [0160.453] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.PTB", cAlternateFileName="MULTIM~1.PTB")) returned 1 [0160.453] wcscmp (_String1="Multimedia.PTB", _String2=".") returned 1 [0160.453] wcscmp (_String1="Multimedia.PTB", _String2="..") returned 1 [0160.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c540 [0160.453] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.453] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.453] wcscat (in: _Dest=0x3e3c540, _Source="Multimedia.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" [0160.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb")) returned 0x20 [0160.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB", dwFileAttributes=0x20) returned 0 [0160.454] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.454] GetLastError () returned 0x5 [0160.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB", dwFileAttributes=0x20) returned 0 [0160.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0160.454] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.PTB", cAlternateFileName="")) returned 1 [0160.454] wcscmp (_String1="pddom.PTB", _String2=".") returned 1 [0160.454] wcscmp (_String1="pddom.PTB", _String2="..") returned 1 [0160.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de8d8 [0160.455] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.455] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.455] wcscat (in: _Dest=0x81de8d8, _Source="pddom.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" [0160.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb")) returned 0x20 [0160.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB", dwFileAttributes=0x20) returned 0 [0160.455] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.455] GetLastError () returned 0x5 [0160.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB", dwFileAttributes=0x20) returned 0 [0160.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.456] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.PTB", cAlternateFileName="")) returned 1 [0160.456] wcscmp (_String1="PPKLITE.PTB", _String2=".") returned 1 [0160.456] wcscmp (_String1="PPKLITE.PTB", _String2="..") returned 1 [0160.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de8d8 [0160.456] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.456] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.456] wcscat (in: _Dest=0x81de8d8, _Source="PPKLITE.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" [0160.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb")) returned 0x20 [0160.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB", dwFileAttributes=0x20) returned 0 [0160.456] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.457] GetLastError () returned 0x5 [0160.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB", dwFileAttributes=0x20) returned 0 [0160.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.457] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb6de100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x150600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.PTB", cAlternateFileName="")) returned 1 [0160.457] wcscmp (_String1="RdLang32.PTB", _String2=".") returned 1 [0160.457] wcscmp (_String1="RdLang32.PTB", _String2="..") returned 1 [0160.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0160.457] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.457] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.457] wcscat (in: _Dest=0x81de8d8, _Source="RdLang32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" [0160.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb")) returned 0x20 [0160.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB", dwFileAttributes=0x20) returned 0 [0160.492] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.492] GetLastError () returned 0x5 [0160.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB", dwFileAttributes=0x20) returned 0 [0160.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.493] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.PTB", cAlternateFileName="READOU~1.PTB")) returned 1 [0160.493] wcscmp (_String1="ReadOutLoud.PTB", _String2=".") returned 1 [0160.493] wcscmp (_String1="ReadOutLoud.PTB", _String2="..") returned 1 [0160.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3db38 [0160.493] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.493] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.493] wcscat (in: _Dest=0x3e3db38, _Source="ReadOutLoud.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" [0160.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb")) returned 0x20 [0160.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB", dwFileAttributes=0x20) returned 0 [0160.558] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.558] GetLastError () returned 0x5 [0160.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB", dwFileAttributes=0x20) returned 0 [0160.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.559] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.PTB", cAlternateFileName="")) returned 1 [0160.559] wcscmp (_String1="reflow.PTB", _String2=".") returned 1 [0160.559] wcscmp (_String1="reflow.PTB", _String2="..") returned 1 [0160.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dea88 [0160.559] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.559] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.559] wcscat (in: _Dest=0x81dea88, _Source="reflow.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" [0160.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb")) returned 0x20 [0160.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB", dwFileAttributes=0x20) returned 0 [0160.632] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.632] GetLastError () returned 0x5 [0160.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB", dwFileAttributes=0x20) returned 0 [0160.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.632] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.PTB", cAlternateFileName="SAVEAS~1.PTB")) returned 1 [0160.632] wcscmp (_String1="SaveAsRTF.PTB", _String2=".") returned 1 [0160.632] wcscmp (_String1="SaveAsRTF.PTB", _String2="..") returned 1 [0160.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cd90 [0160.632] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.632] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.632] wcscat (in: _Dest=0x3e3cd90, _Source="SaveAsRTF.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" [0160.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb")) returned 0x20 [0160.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB", dwFileAttributes=0x20) returned 0 [0160.633] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.633] GetLastError () returned 0x5 [0160.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB", dwFileAttributes=0x20) returned 0 [0160.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.634] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.PTB", cAlternateFileName="")) returned 1 [0160.634] wcscmp (_String1="Search.PTB", _String2=".") returned 1 [0160.634] wcscmp (_String1="Search.PTB", _String2="..") returned 1 [0160.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dea88 [0160.634] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.634] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.634] wcscat (in: _Dest=0x81dea88, _Source="Search.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" [0160.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb")) returned 0x20 [0160.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB", dwFileAttributes=0x20) returned 0 [0160.634] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.635] GetLastError () returned 0x5 [0160.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB", dwFileAttributes=0x20) returned 0 [0160.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.635] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.PTB", cAlternateFileName="")) returned 1 [0160.635] wcscmp (_String1="SendMail.PTB", _String2=".") returned 1 [0160.635] wcscmp (_String1="SendMail.PTB", _String2="..") returned 1 [0160.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dea88 [0160.635] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.635] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.635] wcscat (in: _Dest=0x81dea88, _Source="SendMail.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" [0160.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb")) returned 0x20 [0160.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB", dwFileAttributes=0x20) returned 0 [0160.636] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.636] GetLastError () returned 0x5 [0160.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB", dwFileAttributes=0x20) returned 0 [0160.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.636] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.636] wcscmp (_String1="Services", _String2=".") returned 1 [0160.636] wcscmp (_String1="Services", _String2="..") returned 1 [0160.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beef8 [0160.637] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.637] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.637] wcscat (in: _Dest=0x81beef8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0160.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dea88 [0160.637] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0160.637] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\" [0160.637] wcscat (in: _Dest=0x81dea88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*" [0160.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0160.637] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0160.720] wcscmp (_String1=".", _String2=".") returned 0 [0160.720] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.720] wcscmp (_String1="..", _String2=".") returned 1 [0160.720] wcscmp (_String1="..", _String2="..") returned 0 [0160.720] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8fab, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.720] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.720] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186848 [0160.720] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0160.720] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\" [0160.720] wcscat (in: _Dest=0x8186848, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" [0160.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx")) returned 0x20 [0162.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.265] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.265] GetLastError () returned 0x5 [0162.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 [0162.266] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0162.266] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0162.266] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0162.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186848 [0162.266] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0162.266] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\" [0162.266] wcscat (in: _Dest=0x8186848, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" [0162.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0162.974] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0162.974] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0162.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0162.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0162.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 [0162.975] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.PTB", cAlternateFileName="")) returned 1 [0162.975] wcscmp (_String1="Spelling.PTB", _String2=".") returned 1 [0162.975] wcscmp (_String1="Spelling.PTB", _String2="..") returned 1 [0162.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dea88 [0162.975] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0162.975] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0162.975] wcscat (in: _Dest=0x81dea88, _Source="Spelling.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" [0162.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dea88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0162.977] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.PTB", cAlternateFileName="")) returned 1 [0162.977] wcscmp (_String1="updater.PTB", _String2=".") returned 1 [0162.977] wcscmp (_String1="updater.PTB", _String2="..") returned 1 [0162.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81ddd98 [0162.977] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0162.977] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0162.977] wcscat (in: _Dest=0x81ddd98, _Source="updater.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" [0162.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444 [0162.978] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 1 [0162.978] wcscmp (_String1="Weblink.PTB", _String2=".") returned 1 [0162.978] wcscmp (_String1="Weblink.PTB", _String2="..") returned 1 [0162.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df268 [0162.978] wcscpy (in: _Dest=0x81df268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0162.978] wcscat (in: _Dest=0x81df268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0162.978] wcscat (in: _Dest=0x81df268, _Source="Weblink.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" [0162.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b3c [0162.980] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3efc918 | out: lpFindFileData=0x3efc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 0 [0162.980] FindClose (in: hFindFile=0x3f382d8 | out: hFindFile=0x3f382d8) returned 1 [0162.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efc918) returned 1 [0162.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24940) returned 1 [0162.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 Thread: id = 2156 os_tid = 0x1d50 [0152.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24040 [0152.360] wcscpy (in: _Dest=0x3e24040, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0152.360] wcscat (in: _Dest=0x3e24040, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0152.360] wcscat (in: _Dest=0x3e24040, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*" [0152.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efcb80 [0152.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0157.220] wcscmp (_String1=".", _String2=".") returned 0 [0157.220] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.220] wcscmp (_String1="..", _String2=".") returned 1 [0157.220] wcscmp (_String1="..", _String2="..") returned 0 [0157.220] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUM", cAlternateFileName="ACCESS~1.RUM")) returned 1 [0157.220] wcscmp (_String1="Accessibility.RUM", _String2=".") returned 1 [0157.220] wcscmp (_String1="Accessibility.RUM", _String2="..") returned 1 [0157.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc048 [0157.220] wcscpy (in: _Dest=0x81dc048, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0157.220] wcscat (in: _Dest=0x81dc048, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0157.220] wcscat (in: _Dest=0x81dc048, _Source="Accessibility.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" [0160.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum")) returned 0x20 [0160.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM", dwFileAttributes=0x20) returned 0 [0160.267] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.267] GetLastError () returned 0x5 [0160.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM", dwFileAttributes=0x20) returned 0 [0160.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc048) returned 1 [0160.267] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUM", cAlternateFileName="")) returned 1 [0160.267] wcscmp (_String1="Acroform.RUM", _String2=".") returned 1 [0160.267] wcscmp (_String1="Acroform.RUM", _String2="..") returned 1 [0160.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.267] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.267] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.267] wcscat (in: _Dest=0x81de968, _Source="Acroform.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" [0160.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum")) returned 0x20 [0160.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM", dwFileAttributes=0x20) returned 0 [0160.298] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.298] GetLastError () returned 0x5 [0160.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM", dwFileAttributes=0x20) returned 0 [0160.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.298] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUM", cAlternateFileName="ADOBEC~1.RUM")) returned 1 [0160.298] wcscmp (_String1="AdobeCollabSync.RUM", _String2=".") returned 1 [0160.298] wcscmp (_String1="AdobeCollabSync.RUM", _String2="..") returned 1 [0160.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc0e8 [0160.299] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.299] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.299] wcscat (in: _Dest=0x81dc0e8, _Source="AdobeCollabSync.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" [0160.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum")) returned 0x20 [0160.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM", dwFileAttributes=0x20) returned 0 [0160.299] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.299] GetLastError () returned 0x5 [0160.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM", dwFileAttributes=0x20) returned 0 [0160.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 [0160.299] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUM", cAlternateFileName="")) returned 1 [0160.300] wcscmp (_String1="Annots.RUM", _String2=".") returned 1 [0160.300] wcscmp (_String1="Annots.RUM", _String2="..") returned 1 [0160.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0160.300] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.300] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.300] wcscat (in: _Dest=0x81de968, _Source="Annots.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" [0160.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum")) returned 0x20 [0160.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM", dwFileAttributes=0x20) returned 0 [0160.319] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.319] GetLastError () returned 0x5 [0160.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM", dwFileAttributes=0x20) returned 0 [0160.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.319] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUM", cAlternateFileName="BRDLAN~1.RUM")) returned 1 [0160.319] wcscmp (_String1="BRdlang32.RUM", _String2=".") returned 1 [0160.319] wcscmp (_String1="BRdlang32.RUM", _String2="..") returned 1 [0160.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3de30 [0160.319] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.319] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.319] wcscat (in: _Dest=0x3e3de30, _Source="BRdlang32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" [0160.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum")) returned 0x20 [0160.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM", dwFileAttributes=0x20) returned 0 [0160.375] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.375] GetLastError () returned 0x5 [0160.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM", dwFileAttributes=0x20) returned 0 [0160.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.375] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUM", cAlternateFileName="")) returned 1 [0160.375] wcscmp (_String1="Checkers.RUM", _String2=".") returned 1 [0160.375] wcscmp (_String1="Checkers.RUM", _String2="..") returned 1 [0160.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.375] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.375] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.375] wcscat (in: _Dest=0x81de728, _Source="Checkers.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" [0160.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum")) returned 0x20 [0160.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM", dwFileAttributes=0x20) returned 0 [0160.376] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.376] GetLastError () returned 0x5 [0160.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM", dwFileAttributes=0x20) returned 0 [0160.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.376] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUM", cAlternateFileName="")) returned 1 [0160.376] wcscmp (_String1="DigSig.RUM", _String2=".") returned 1 [0160.376] wcscmp (_String1="DigSig.RUM", _String2="..") returned 1 [0160.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0160.376] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.376] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.377] wcscat (in: _Dest=0x81de728, _Source="DigSig.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" [0160.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum")) returned 0x20 [0160.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM", dwFileAttributes=0x20) returned 0 [0160.407] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.407] GetLastError () returned 0x5 [0160.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM", dwFileAttributes=0x20) returned 0 [0160.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.407] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUM", cAlternateFileName="")) returned 1 [0160.407] wcscmp (_String1="DVA.RUM", _String2=".") returned 1 [0160.407] wcscmp (_String1="DVA.RUM", _String2="..") returned 1 [0160.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bebc8 [0160.408] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.408] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.408] wcscat (in: _Dest=0x81bebc8, _Source="DVA.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" [0160.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum")) returned 0x20 [0160.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM", dwFileAttributes=0x20) returned 0 [0160.408] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.408] GetLastError () returned 0x5 [0160.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM", dwFileAttributes=0x20) returned 0 [0160.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.408] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUM", cAlternateFileName="")) returned 1 [0160.408] wcscmp (_String1="eBook.RUM", _String2=".") returned 1 [0160.408] wcscmp (_String1="eBook.RUM", _String2="..") returned 1 [0160.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0160.409] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.409] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.409] wcscat (in: _Dest=0x81de728, _Source="eBook.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" [0160.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum")) returned 0x20 [0160.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM", dwFileAttributes=0x20) returned 0 [0160.458] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.459] GetLastError () returned 0x5 [0160.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM", dwFileAttributes=0x20) returned 0 [0160.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.459] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUM", cAlternateFileName="")) returned 1 [0160.459] wcscmp (_String1="EScript.RUM", _String2=".") returned 1 [0160.459] wcscmp (_String1="EScript.RUM", _String2="..") returned 1 [0160.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0160.459] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.459] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.459] wcscat (in: _Dest=0x81de728, _Source="EScript.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" [0160.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum")) returned 0x20 [0160.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM", dwFileAttributes=0x20) returned 0 [0160.460] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.460] GetLastError () returned 0x5 [0160.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM", dwFileAttributes=0x20) returned 0 [0160.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.460] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUM", cAlternateFileName="")) returned 1 [0160.460] wcscmp (_String1="IA32.RUM", _String2=".") returned 1 [0160.460] wcscmp (_String1="IA32.RUM", _String2="..") returned 1 [0160.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0160.460] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.461] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.461] wcscat (in: _Dest=0x81bee70, _Source="IA32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" [0160.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum")) returned 0x20 [0160.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM", dwFileAttributes=0x20) returned 0 [0160.461] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.461] GetLastError () returned 0x5 [0160.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM", dwFileAttributes=0x20) returned 0 [0160.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.462] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUM", cAlternateFileName="MAKEAC~1.RUM")) returned 1 [0160.462] wcscmp (_String1="MakeAccessible.RUM", _String2=".") returned 1 [0160.462] wcscmp (_String1="MakeAccessible.RUM", _String2="..") returned 1 [0160.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc2c8 [0160.462] wcscpy (in: _Dest=0x81dc2c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.462] wcscat (in: _Dest=0x81dc2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.462] wcscat (in: _Dest=0x81dc2c8, _Source="MakeAccessible.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" [0160.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum")) returned 0x20 [0160.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM", dwFileAttributes=0x20) returned 0 [0160.495] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.495] GetLastError () returned 0x5 [0160.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM", dwFileAttributes=0x20) returned 0 [0160.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc2c8) returned 1 [0160.496] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUM", cAlternateFileName="MULTIM~1.RUM")) returned 1 [0160.496] wcscmp (_String1="Multimedia.RUM", _String2=".") returned 1 [0160.496] wcscmp (_String1="Multimedia.RUM", _String2="..") returned 1 [0160.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3de30 [0160.496] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.496] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.496] wcscat (in: _Dest=0x3e3de30, _Source="Multimedia.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" [0160.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum")) returned 0x20 [0160.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM", dwFileAttributes=0x20) returned 0 [0160.497] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.497] GetLastError () returned 0x5 [0160.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM", dwFileAttributes=0x20) returned 0 [0160.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.497] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUM", cAlternateFileName="")) returned 1 [0160.497] wcscmp (_String1="PDDom.RUM", _String2=".") returned 1 [0160.497] wcscmp (_String1="PDDom.RUM", _String2="..") returned 1 [0160.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de8d8 [0160.497] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.497] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.497] wcscat (in: _Dest=0x81de8d8, _Source="PDDom.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" [0160.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum")) returned 0x20 [0160.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM", dwFileAttributes=0x20) returned 0 [0160.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.498] GetLastError () returned 0x5 [0160.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM", dwFileAttributes=0x20) returned 0 [0160.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.498] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUM", cAlternateFileName="")) returned 1 [0160.498] wcscmp (_String1="PPKLITE.RUM", _String2=".") returned 1 [0160.498] wcscmp (_String1="PPKLITE.RUM", _String2="..") returned 1 [0160.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de8d8 [0160.498] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.498] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.498] wcscat (in: _Dest=0x81de8d8, _Source="PPKLITE.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" [0160.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum")) returned 0x20 [0160.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM", dwFileAttributes=0x20) returned 0 [0160.560] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.560] GetLastError () returned 0x5 [0160.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM", dwFileAttributes=0x20) returned 0 [0160.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.561] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd09aee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x154600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUM", cAlternateFileName="")) returned 1 [0160.561] wcscmp (_String1="RdLang32.RUM", _String2=".") returned 1 [0160.561] wcscmp (_String1="RdLang32.RUM", _String2="..") returned 1 [0160.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0160.561] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.561] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.561] wcscat (in: _Dest=0x81de8d8, _Source="RdLang32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" [0160.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum")) returned 0x20 [0160.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM", dwFileAttributes=0x20) returned 0 [0160.639] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.639] GetLastError () returned 0x5 [0160.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM", dwFileAttributes=0x20) returned 0 [0160.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.640] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUM", cAlternateFileName="READOU~1.RUM")) returned 1 [0160.640] wcscmp (_String1="ReadOutLoud.RUM", _String2=".") returned 1 [0160.640] wcscmp (_String1="ReadOutLoud.RUM", _String2="..") returned 1 [0160.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cd90 [0160.640] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.640] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.640] wcscat (in: _Dest=0x3e3cd90, _Source="ReadOutLoud.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" [0160.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum")) returned 0x20 [0160.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM", dwFileAttributes=0x20) returned 0 [0160.640] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.641] GetLastError () returned 0x5 [0160.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM", dwFileAttributes=0x20) returned 0 [0160.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.641] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUM", cAlternateFileName="")) returned 1 [0160.641] wcscmp (_String1="Reflow.RUM", _String2=".") returned 1 [0160.641] wcscmp (_String1="Reflow.RUM", _String2="..") returned 1 [0160.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de8d8 [0160.641] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.641] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.641] wcscat (in: _Dest=0x81de8d8, _Source="Reflow.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" [0160.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum")) returned 0x20 [0160.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM", dwFileAttributes=0x20) returned 0 [0160.721] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.721] GetLastError () returned 0x5 [0160.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM", dwFileAttributes=0x20) returned 0 [0160.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.722] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUM", cAlternateFileName="SAVEAS~1.RUM")) returned 1 [0160.722] wcscmp (_String1="SaveAsRTF.RUM", _String2=".") returned 1 [0160.722] wcscmp (_String1="SaveAsRTF.RUM", _String2="..") returned 1 [0160.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cd90 [0160.722] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.722] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.722] wcscat (in: _Dest=0x3e3cd90, _Source="SaveAsRTF.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" [0160.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum")) returned 0x20 [0160.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM", dwFileAttributes=0x20) returned 0 [0160.786] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.786] GetLastError () returned 0x5 [0160.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM", dwFileAttributes=0x20) returned 0 [0160.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.786] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUM", cAlternateFileName="")) returned 1 [0160.786] wcscmp (_String1="Search.RUM", _String2=".") returned 1 [0160.786] wcscmp (_String1="Search.RUM", _String2="..") returned 1 [0160.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deb18 [0160.787] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.787] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.787] wcscat (in: _Dest=0x81deb18, _Source="Search.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" [0160.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum")) returned 0x20 [0160.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM", dwFileAttributes=0x20) returned 0 [0160.787] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.787] GetLastError () returned 0x5 [0160.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM", dwFileAttributes=0x20) returned 0 [0160.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.788] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUM", cAlternateFileName="")) returned 1 [0160.788] wcscmp (_String1="SendMail.RUM", _String2=".") returned 1 [0160.788] wcscmp (_String1="SendMail.RUM", _String2="..") returned 1 [0160.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0160.788] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.788] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.788] wcscat (in: _Dest=0x81deb18, _Source="SendMail.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" [0160.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum")) returned 0x20 [0160.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM", dwFileAttributes=0x20) returned 0 [0160.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.817] GetLastError () returned 0x5 [0160.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM", dwFileAttributes=0x20) returned 0 [0160.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.838] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.838] wcscmp (_String1="Services", _String2=".") returned 1 [0160.838] wcscmp (_String1="Services", _String2="..") returned 1 [0160.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be4e0 [0160.838] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.838] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.838] wcscat (in: _Dest=0x81be4e0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0160.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deb18 [0160.839] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0160.839] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\" [0160.839] wcscat (in: _Dest=0x81deb18, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*" [0160.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0160.839] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0160.839] wcscmp (_String1=".", _String2=".") returned 0 [0160.839] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.840] wcscmp (_String1="..", _String2=".") returned 1 [0160.840] wcscmp (_String1="..", _String2="..") returned 0 [0160.840] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x93a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.840] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.840] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187808 [0160.840] wcscpy (in: _Dest=0x8187808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0160.840] wcscat (in: _Dest=0x8187808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\" [0160.840] wcscat (in: _Dest=0x8187808, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" [0160.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx")) returned 0x20 [0162.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.272] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.272] GetLastError () returned 0x5 [0162.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187808) returned 1 [0162.273] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0162.273] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0162.273] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0162.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187808 [0162.273] wcscpy (in: _Dest=0x8187808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0162.273] wcscat (in: _Dest=0x8187808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\" [0162.273] wcscat (in: _Dest=0x8187808, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" [0167.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a4 [0167.101] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0167.101] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0167.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0167.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0167.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 [0167.102] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUM", cAlternateFileName="")) returned 1 [0167.102] wcscmp (_String1="Spelling.RUM", _String2=".") returned 1 [0167.102] wcscmp (_String1="Spelling.RUM", _String2="..") returned 1 [0167.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0167.102] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0167.102] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0167.102] wcscat (in: _Dest=0x81deb18, _Source="Spelling.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" [0167.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81deb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0167.103] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUM", cAlternateFileName="")) returned 1 [0167.103] wcscmp (_String1="Updater.RUM", _String2=".") returned 1 [0167.103] wcscmp (_String1="Updater.RUM", _String2="..") returned 1 [0167.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de218 [0167.104] wcscpy (in: _Dest=0x81de218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0167.104] wcscat (in: _Dest=0x81de218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0167.104] wcscat (in: _Dest=0x81de218, _Source="Updater.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" [0167.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0167.105] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 1 [0167.105] wcscmp (_String1="Weblink.RUM", _String2=".") returned 1 [0167.105] wcscmp (_String1="Weblink.RUM", _String2="..") returned 1 [0167.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de0f8 [0167.105] wcscpy (in: _Dest=0x81de0f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0167.105] wcscat (in: _Dest=0x81de0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0167.105] wcscat (in: _Dest=0x81de0f8, _Source="Weblink.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" [0167.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0167.106] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x3efcb80 | out: lpFindFileData=0x3efcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 0 [0167.106] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0167.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efcb80) returned 1 [0167.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24040) returned 1 [0167.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 Thread: id = 2157 os_tid = 0x1d54 [0152.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24340 [0152.360] wcscpy (in: _Dest=0x3e24340, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0152.360] wcscat (in: _Dest=0x3e24340, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0152.360] wcscat (in: _Dest=0x3e24340, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*" [0152.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efcde8 [0152.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37bd8 [0157.219] wcscmp (_String1=".", _String2=".") returned 0 [0157.219] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.219] wcscmp (_String1="..", _String2=".") returned 1 [0157.219] wcscmp (_String1="..", _String2="..") returned 0 [0157.219] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUS", cAlternateFileName="ACCESS~1.RUS")) returned 1 [0157.219] wcscmp (_String1="Accessibility.RUS", _String2=".") returned 1 [0157.219] wcscmp (_String1="Accessibility.RUS", _String2="..") returned 1 [0157.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbfa8 [0157.219] wcscpy (in: _Dest=0x81dbfa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0157.219] wcscat (in: _Dest=0x81dbfa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0157.219] wcscat (in: _Dest=0x81dbfa8, _Source="Accessibility.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" [0160.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus")) returned 0x20 [0160.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS", dwFileAttributes=0x20) returned 0 [0160.268] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.268] GetLastError () returned 0x5 [0160.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS", dwFileAttributes=0x20) returned 0 [0160.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbfa8) returned 1 [0160.269] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x65e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUS", cAlternateFileName="")) returned 1 [0160.269] wcscmp (_String1="Acroform.RUS", _String2=".") returned 1 [0160.269] wcscmp (_String1="Acroform.RUS", _String2="..") returned 1 [0160.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de9f8 [0160.269] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.269] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.269] wcscat (in: _Dest=0x81de9f8, _Source="Acroform.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" [0160.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus")) returned 0x20 [0160.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS", dwFileAttributes=0x20) returned 0 [0160.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.301] GetLastError () returned 0x5 [0160.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS", dwFileAttributes=0x20) returned 0 [0160.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.301] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUS", cAlternateFileName="ADOBEC~1.RUS")) returned 1 [0160.301] wcscmp (_String1="AdobeCollabSync.RUS", _String2=".") returned 1 [0160.301] wcscmp (_String1="AdobeCollabSync.RUS", _String2="..") returned 1 [0160.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc0e8 [0160.301] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.301] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.301] wcscat (in: _Dest=0x81dc0e8, _Source="AdobeCollabSync.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" [0160.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus")) returned 0x20 [0160.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS", dwFileAttributes=0x20) returned 0 [0160.302] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.302] GetLastError () returned 0x5 [0160.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS", dwFileAttributes=0x20) returned 0 [0160.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 [0160.302] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUS", cAlternateFileName="")) returned 1 [0160.302] wcscmp (_String1="Annots.RUS", _String2=".") returned 1 [0160.302] wcscmp (_String1="Annots.RUS", _String2="..") returned 1 [0160.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de9f8 [0160.302] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.302] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.302] wcscat (in: _Dest=0x81de9f8, _Source="Annots.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" [0160.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus")) returned 0x20 [0160.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS", dwFileAttributes=0x20) returned 0 [0160.320] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.320] GetLastError () returned 0x5 [0160.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS", dwFileAttributes=0x20) returned 0 [0160.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.320] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUS", cAlternateFileName="BRDLAN~1.RUS")) returned 1 [0160.320] wcscmp (_String1="BRdlang32.RUS", _String2=".") returned 1 [0160.320] wcscmp (_String1="BRdlang32.RUS", _String2="..") returned 1 [0160.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.321] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.321] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.321] wcscat (in: _Dest=0x3e3cf58, _Source="BRdlang32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" [0160.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus")) returned 0x20 [0160.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS", dwFileAttributes=0x20) returned 0 [0160.377] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.378] GetLastError () returned 0x5 [0160.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS", dwFileAttributes=0x20) returned 0 [0160.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.378] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUS", cAlternateFileName="")) returned 1 [0160.378] wcscmp (_String1="Checkers.RUS", _String2=".") returned 1 [0160.378] wcscmp (_String1="Checkers.RUS", _String2="..") returned 1 [0160.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0160.378] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.378] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.378] wcscat (in: _Dest=0x81deb18, _Source="Checkers.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" [0160.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus")) returned 0x20 [0160.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS", dwFileAttributes=0x20) returned 0 [0160.378] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.379] GetLastError () returned 0x5 [0160.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS", dwFileAttributes=0x20) returned 0 [0160.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.379] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUS", cAlternateFileName="")) returned 1 [0160.379] wcscmp (_String1="DigSig.RUS", _String2=".") returned 1 [0160.379] wcscmp (_String1="DigSig.RUS", _String2="..") returned 1 [0160.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deb18 [0160.379] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.379] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.379] wcscat (in: _Dest=0x81deb18, _Source="DigSig.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" [0160.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus")) returned 0x20 [0160.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS", dwFileAttributes=0x20) returned 0 [0160.379] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.380] GetLastError () returned 0x5 [0160.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS", dwFileAttributes=0x20) returned 0 [0160.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.380] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUS", cAlternateFileName="")) returned 1 [0160.380] wcscmp (_String1="DVA.RUS", _String2=".") returned 1 [0160.380] wcscmp (_String1="DVA.RUS", _String2="..") returned 1 [0160.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bee70 [0160.380] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.380] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.380] wcscat (in: _Dest=0x81bee70, _Source="DVA.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" [0160.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus")) returned 0x20 [0160.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS", dwFileAttributes=0x20) returned 0 [0160.380] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.381] GetLastError () returned 0x5 [0160.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS", dwFileAttributes=0x20) returned 0 [0160.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.381] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUS", cAlternateFileName="")) returned 1 [0160.381] wcscmp (_String1="eBook.RUS", _String2=".") returned 1 [0160.381] wcscmp (_String1="eBook.RUS", _String2="..") returned 1 [0160.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81deb18 [0160.381] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.381] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.381] wcscat (in: _Dest=0x81deb18, _Source="eBook.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" [0160.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus")) returned 0x20 [0160.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS", dwFileAttributes=0x20) returned 0 [0160.410] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.410] GetLastError () returned 0x5 [0160.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS", dwFileAttributes=0x20) returned 0 [0160.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.410] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUS", cAlternateFileName="")) returned 1 [0160.410] wcscmp (_String1="EScript.RUS", _String2=".") returned 1 [0160.410] wcscmp (_String1="EScript.RUS", _String2="..") returned 1 [0160.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81deb18 [0160.410] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.410] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.410] wcscat (in: _Dest=0x81deb18, _Source="EScript.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" [0160.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus")) returned 0x20 [0160.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS", dwFileAttributes=0x20) returned 0 [0160.411] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.411] GetLastError () returned 0x5 [0160.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS", dwFileAttributes=0x20) returned 0 [0160.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.411] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUS", cAlternateFileName="")) returned 1 [0160.411] wcscmp (_String1="IA32.RUS", _String2=".") returned 1 [0160.411] wcscmp (_String1="IA32.RUS", _String2="..") returned 1 [0160.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0160.411] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.411] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.411] wcscat (in: _Dest=0x81bebc8, _Source="IA32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" [0160.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus")) returned 0x20 [0160.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS", dwFileAttributes=0x20) returned 0 [0160.463] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.463] GetLastError () returned 0x5 [0160.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS", dwFileAttributes=0x20) returned 0 [0160.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.464] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUS", cAlternateFileName="MAKEAC~1.RUS")) returned 1 [0160.464] wcscmp (_String1="MakeAccessible.RUS", _String2=".") returned 1 [0160.464] wcscmp (_String1="MakeAccessible.RUS", _String2="..") returned 1 [0160.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc368 [0160.464] wcscpy (in: _Dest=0x81dc368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.464] wcscat (in: _Dest=0x81dc368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.464] wcscat (in: _Dest=0x81dc368, _Source="MakeAccessible.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" [0160.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus")) returned 0x20 [0160.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS", dwFileAttributes=0x20) returned 0 [0160.499] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.500] GetLastError () returned 0x5 [0160.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS", dwFileAttributes=0x20) returned 0 [0160.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc368) returned 1 [0160.500] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUS", cAlternateFileName="MULTIM~1.RUS")) returned 1 [0160.500] wcscmp (_String1="Multimedia.RUS", _String2=".") returned 1 [0160.500] wcscmp (_String1="Multimedia.RUS", _String2="..") returned 1 [0160.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3de30 [0160.500] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.500] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.500] wcscat (in: _Dest=0x3e3de30, _Source="Multimedia.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" [0160.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus")) returned 0x20 [0160.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS", dwFileAttributes=0x20) returned 0 [0160.501] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.501] GetLastError () returned 0x5 [0160.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS", dwFileAttributes=0x20) returned 0 [0160.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.501] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUS", cAlternateFileName="")) returned 1 [0160.501] wcscmp (_String1="PDDom.RUS", _String2=".") returned 1 [0160.502] wcscmp (_String1="PDDom.RUS", _String2="..") returned 1 [0160.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0160.502] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.502] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.502] wcscat (in: _Dest=0x81de7b8, _Source="PDDom.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" [0160.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus")) returned 0x20 [0160.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS", dwFileAttributes=0x20) returned 0 [0160.502] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.502] GetLastError () returned 0x5 [0160.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS", dwFileAttributes=0x20) returned 0 [0160.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.503] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUS", cAlternateFileName="")) returned 1 [0160.503] wcscmp (_String1="PPKLITE.RUS", _String2=".") returned 1 [0160.503] wcscmp (_String1="PPKLITE.RUS", _String2="..") returned 1 [0160.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0160.503] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.503] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.503] wcscat (in: _Dest=0x81de7b8, _Source="PPKLITE.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" [0160.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus")) returned 0x20 [0160.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS", dwFileAttributes=0x20) returned 0 [0160.503] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.503] GetLastError () returned 0x5 [0160.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS", dwFileAttributes=0x20) returned 0 [0160.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.504] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd074d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUS", cAlternateFileName="")) returned 1 [0160.504] wcscmp (_String1="RdLang32.RUS", _String2=".") returned 1 [0160.504] wcscmp (_String1="RdLang32.RUS", _String2="..") returned 1 [0160.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0160.504] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.504] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.504] wcscat (in: _Dest=0x81de7b8, _Source="RdLang32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" [0160.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus")) returned 0x20 [0160.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS", dwFileAttributes=0x20) returned 0 [0160.562] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.562] GetLastError () returned 0x5 [0160.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS", dwFileAttributes=0x20) returned 0 [0160.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.563] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUS", cAlternateFileName="READOU~1.RUS")) returned 1 [0160.563] wcscmp (_String1="ReadOutLoud.RUS", _String2=".") returned 1 [0160.563] wcscmp (_String1="ReadOutLoud.RUS", _String2="..") returned 1 [0160.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3db38 [0160.563] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.563] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.563] wcscat (in: _Dest=0x3e3db38, _Source="ReadOutLoud.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" [0160.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus")) returned 0x20 [0160.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS", dwFileAttributes=0x20) returned 0 [0160.643] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.643] GetLastError () returned 0x5 [0160.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS", dwFileAttributes=0x20) returned 0 [0160.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.643] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUS", cAlternateFileName="")) returned 1 [0160.643] wcscmp (_String1="Reflow.RUS", _String2=".") returned 1 [0160.643] wcscmp (_String1="Reflow.RUS", _String2="..") returned 1 [0160.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de9f8 [0160.643] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.643] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.643] wcscat (in: _Dest=0x81de9f8, _Source="Reflow.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" [0160.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus")) returned 0x20 [0160.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS", dwFileAttributes=0x20) returned 0 [0160.723] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.723] GetLastError () returned 0x5 [0160.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS", dwFileAttributes=0x20) returned 0 [0160.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.723] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUS", cAlternateFileName="SAVEAS~1.RUS")) returned 1 [0160.723] wcscmp (_String1="SaveAsRTF.RUS", _String2=".") returned 1 [0160.723] wcscmp (_String1="SaveAsRTF.RUS", _String2="..") returned 1 [0160.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.723] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.723] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.723] wcscat (in: _Dest=0x3e3cf58, _Source="SaveAsRTF.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" [0160.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus")) returned 0x20 [0160.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS", dwFileAttributes=0x20) returned 0 [0160.842] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.842] GetLastError () returned 0x5 [0160.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS", dwFileAttributes=0x20) returned 0 [0160.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.842] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUS", cAlternateFileName="")) returned 1 [0160.842] wcscmp (_String1="Search.RUS", _String2=".") returned 1 [0160.842] wcscmp (_String1="Search.RUS", _String2="..") returned 1 [0160.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ded58 [0160.843] wcscpy (in: _Dest=0x81ded58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.843] wcscat (in: _Dest=0x81ded58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.843] wcscat (in: _Dest=0x81ded58, _Source="Search.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" [0160.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus")) returned 0x20 [0160.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS", dwFileAttributes=0x20) returned 0 [0160.844] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.844] GetLastError () returned 0x5 [0160.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS", dwFileAttributes=0x20) returned 0 [0160.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ded58) returned 1 [0160.844] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUS", cAlternateFileName="")) returned 1 [0160.844] wcscmp (_String1="SendMail.RUS", _String2=".") returned 1 [0160.844] wcscmp (_String1="SendMail.RUS", _String2="..") returned 1 [0160.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ded58 [0160.844] wcscpy (in: _Dest=0x81ded58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.845] wcscat (in: _Dest=0x81ded58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.845] wcscat (in: _Dest=0x81ded58, _Source="SendMail.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" [0160.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus")) returned 0x20 [0160.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS", dwFileAttributes=0x20) returned 0 [0160.845] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.845] GetLastError () returned 0x5 [0160.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS", dwFileAttributes=0x20) returned 0 [0160.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ded58) returned 1 [0160.846] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.846] wcscmp (_String1="Services", _String2=".") returned 1 [0160.846] wcscmp (_String1="Services", _String2="..") returned 1 [0160.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c03b0 [0160.846] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.846] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.846] wcscat (in: _Dest=0x81c03b0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0160.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ded58 [0160.847] wcscpy (in: _Dest=0x81ded58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0160.847] wcscat (in: _Dest=0x81ded58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\" [0160.847] wcscat (in: _Dest=0x81ded58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*" [0160.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101e18 [0160.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0160.897] wcscmp (_String1=".", _String2=".") returned 0 [0160.897] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.897] wcscmp (_String1="..", _String2=".") returned 1 [0160.897] wcscmp (_String1="..", _String2="..") returned 0 [0160.897] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb6ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.897] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.897] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187370 [0160.897] wcscpy (in: _Dest=0x8187370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0160.897] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\" [0160.897] wcscat (in: _Dest=0x8187370, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" [0160.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx")) returned 0x20 [0160.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.944] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.944] GetLastError () returned 0x5 [0160.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 [0160.945] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0160.945] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0160.945] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0160.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187370 [0160.945] wcscpy (in: _Dest=0x8187370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0160.945] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\" [0162.278] wcscat (in: _Dest=0x8187370, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" [0163.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b4 [0163.133] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0163.133] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0163.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101e18) returned 1 [0163.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ded58) returned 1 [0163.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 [0163.134] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUS", cAlternateFileName="")) returned 1 [0163.134] wcscmp (_String1="Spelling.RUS", _String2=".") returned 1 [0163.134] wcscmp (_String1="Spelling.RUS", _String2="..") returned 1 [0163.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ded58 [0163.134] wcscpy (in: _Dest=0x81ded58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0163.134] wcscat (in: _Dest=0x81ded58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0163.134] wcscat (in: _Dest=0x81ded58, _Source="Spelling.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" [0163.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ded58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2878 [0163.135] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUS", cAlternateFileName="")) returned 1 [0163.135] wcscmp (_String1="Updater.RUS", _String2=".") returned 1 [0163.135] wcscmp (_String1="Updater.RUS", _String2="..") returned 1 [0163.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35250 [0163.135] wcscpy (in: _Dest=0x3f35250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0163.135] wcscat (in: _Dest=0x3f35250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0163.135] wcscat (in: _Dest=0x3f35250, _Source="Updater.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" [0163.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2648 [0163.136] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 1 [0163.136] wcscmp (_String1="Weblink.RUS", _String2=".") returned 1 [0163.136] wcscmp (_String1="Weblink.RUS", _String2="..") returned 1 [0163.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f360f0 [0163.136] wcscpy (in: _Dest=0x3f360f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0163.136] wcscat (in: _Dest=0x3f360f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0163.136] wcscat (in: _Dest=0x3f360f0, _Source="Weblink.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" [0163.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f360f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0163.137] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3efcde8 | out: lpFindFileData=0x3efcde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 0 [0163.137] FindClose (in: hFindFile=0x3f37bd8 | out: hFindFile=0x3f37bd8) returned 1 [0163.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efcde8) returned 1 [0163.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24340) returned 1 [0163.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 Thread: id = 2158 os_tid = 0x1d58 [0152.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831aed8 [0152.361] wcscpy (in: _Dest=0x831aed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0152.361] wcscat (in: _Dest=0x831aed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0152.361] wcscat (in: _Dest=0x831aed8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*" [0152.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efd050 [0152.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0157.218] wcscmp (_String1=".", _String2=".") returned 0 [0157.218] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.218] wcscmp (_String1="..", _String2=".") returned 1 [0157.218] wcscmp (_String1="..", _String2="..") returned 0 [0157.218] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SKY", cAlternateFileName="ACCESS~1.SKY")) returned 1 [0157.218] wcscmp (_String1="accessibility.SKY", _String2=".") returned 1 [0157.218] wcscmp (_String1="accessibility.SKY", _String2="..") returned 1 [0157.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbf08 [0157.218] wcscpy (in: _Dest=0x81dbf08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0157.218] wcscat (in: _Dest=0x81dbf08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0157.219] wcscat (in: _Dest=0x81dbf08, _Source="accessibility.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" [0159.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c94 [0159.175] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x65800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SKY", cAlternateFileName="")) returned 1 [0159.175] wcscmp (_String1="Acroform.SKY", _String2=".") returned 1 [0159.175] wcscmp (_String1="Acroform.SKY", _String2="..") returned 1 [0159.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ddd98 [0159.176] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.176] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.176] wcscat (in: _Dest=0x81ddd98, _Source="Acroform.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" [0159.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c98 [0159.177] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SKY", cAlternateFileName="ADOBEC~1.SKY")) returned 1 [0159.177] wcscmp (_String1="AdobeCollabSync.SKY", _String2=".") returned 1 [0159.177] wcscmp (_String1="AdobeCollabSync.SKY", _String2="..") returned 1 [0159.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b998 [0159.177] wcscpy (in: _Dest=0x819b998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.177] wcscat (in: _Dest=0x819b998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.177] wcscat (in: _Dest=0x819b998, _Source="AdobeCollabSync.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" [0159.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c [0159.179] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x79800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SKY", cAlternateFileName="")) returned 1 [0159.179] wcscmp (_String1="Annots.SKY", _String2=".") returned 1 [0159.179] wcscmp (_String1="Annots.SKY", _String2="..") returned 1 [0159.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dde28 [0159.179] wcscpy (in: _Dest=0x81dde28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.179] wcscat (in: _Dest=0x81dde28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.179] wcscat (in: _Dest=0x81dde28, _Source="Annots.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" [0159.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dde28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0 [0159.181] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SKY", cAlternateFileName="BRDLAN~1.SKY")) returned 1 [0159.181] wcscmp (_String1="BRdlang32.SKY", _String2=".") returned 1 [0159.181] wcscmp (_String1="BRdlang32.SKY", _String2="..") returned 1 [0159.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d1de0 [0159.181] wcscpy (in: _Dest=0x81d1de0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.181] wcscat (in: _Dest=0x81d1de0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.181] wcscat (in: _Dest=0x81d1de0, _Source="BRdlang32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" [0159.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca4 [0159.183] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SKY", cAlternateFileName="")) returned 1 [0159.183] wcscmp (_String1="Checkers.SKY", _String2=".") returned 1 [0159.183] wcscmp (_String1="Checkers.SKY", _String2="..") returned 1 [0159.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ddeb8 [0159.183] wcscpy (in: _Dest=0x81ddeb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.183] wcscat (in: _Dest=0x81ddeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.183] wcscat (in: _Dest=0x81ddeb8, _Source="Checkers.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" [0159.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca8 [0159.185] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SKY", cAlternateFileName="")) returned 1 [0159.185] wcscmp (_String1="DigSig.SKY", _String2=".") returned 1 [0159.185] wcscmp (_String1="DigSig.SKY", _String2="..") returned 1 [0159.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ddf48 [0159.185] wcscpy (in: _Dest=0x81ddf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.185] wcscat (in: _Dest=0x81ddf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.185] wcscat (in: _Dest=0x81ddf48, _Source="DigSig.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" [0159.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cac [0159.187] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SKY", cAlternateFileName="")) returned 1 [0159.187] wcscmp (_String1="DVA.SKY", _String2=".") returned 1 [0159.187] wcscmp (_String1="DVA.SKY", _String2="..") returned 1 [0159.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bef80 [0159.187] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.187] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.187] wcscat (in: _Dest=0x81bef80, _Source="DVA.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" [0159.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb0 [0159.188] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SKY", cAlternateFileName="")) returned 1 [0159.188] wcscmp (_String1="eBook.SKY", _String2=".") returned 1 [0159.188] wcscmp (_String1="eBook.SKY", _String2="..") returned 1 [0159.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddfd8 [0159.188] wcscpy (in: _Dest=0x81ddfd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.189] wcscat (in: _Dest=0x81ddfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.189] wcscat (in: _Dest=0x81ddfd8, _Source="eBook.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" [0159.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddfd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb4 [0159.191] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SKY", cAlternateFileName="")) returned 1 [0159.191] wcscmp (_String1="EScript.SKY", _String2=".") returned 1 [0159.191] wcscmp (_String1="EScript.SKY", _String2="..") returned 1 [0159.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de068 [0159.191] wcscpy (in: _Dest=0x81de068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.191] wcscat (in: _Dest=0x81de068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.191] wcscat (in: _Dest=0x81de068, _Source="EScript.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" [0159.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb8 [0159.192] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SKY", cAlternateFileName="")) returned 1 [0159.192] wcscmp (_String1="IA32.SKY", _String2=".") returned 1 [0159.192] wcscmp (_String1="IA32.SKY", _String2="..") returned 1 [0159.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81be9a8 [0159.193] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.193] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.193] wcscat (in: _Dest=0x81be9a8, _Source="IA32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" [0159.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cbc [0159.194] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SKY", cAlternateFileName="MAKEAC~1.SKY")) returned 1 [0159.194] wcscmp (_String1="makeaccessible.SKY", _String2=".") returned 1 [0159.194] wcscmp (_String1="makeaccessible.SKY", _String2="..") returned 1 [0159.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b218 [0159.194] wcscpy (in: _Dest=0x819b218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.194] wcscat (in: _Dest=0x819b218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.194] wcscat (in: _Dest=0x819b218, _Source="makeaccessible.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" [0159.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc0 [0159.195] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SKY", cAlternateFileName="MULTIM~1.SKY")) returned 1 [0159.195] wcscmp (_String1="Multimedia.SKY", _String2=".") returned 1 [0159.195] wcscmp (_String1="Multimedia.SKY", _String2="..") returned 1 [0159.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1b80 [0159.195] wcscpy (in: _Dest=0x81d1b80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.195] wcscat (in: _Dest=0x81d1b80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.195] wcscat (in: _Dest=0x81d1b80, _Source="Multimedia.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" [0159.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc4 [0159.196] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SKY", cAlternateFileName="")) returned 1 [0159.196] wcscmp (_String1="pddom.SKY", _String2=".") returned 1 [0159.196] wcscmp (_String1="pddom.SKY", _String2="..") returned 1 [0159.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de0f8 [0159.196] wcscpy (in: _Dest=0x81de0f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.196] wcscat (in: _Dest=0x81de0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.196] wcscat (in: _Dest=0x81de0f8, _Source="pddom.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" [0159.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc8 [0159.197] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.SKY", cAlternateFileName="")) returned 1 [0159.197] wcscmp (_String1="PPKLite.SKY", _String2=".") returned 1 [0159.197] wcscmp (_String1="PPKLite.SKY", _String2="..") returned 1 [0159.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de188 [0159.197] wcscpy (in: _Dest=0x81de188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.197] wcscat (in: _Dest=0x81de188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.198] wcscat (in: _Dest=0x81de188, _Source="PPKLite.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" [0159.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ccc [0159.198] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd04ec20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SKY", cAlternateFileName="")) returned 1 [0159.198] wcscmp (_String1="RdLang32.SKY", _String2=".") returned 1 [0159.198] wcscmp (_String1="RdLang32.SKY", _String2="..") returned 1 [0159.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de218 [0159.199] wcscpy (in: _Dest=0x81de218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.199] wcscat (in: _Dest=0x81de218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.199] wcscat (in: _Dest=0x81de218, _Source="RdLang32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" [0159.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd0 [0159.200] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SKY", cAlternateFileName="READOU~1.SKY")) returned 1 [0159.200] wcscmp (_String1="ReadOutLoud.SKY", _String2=".") returned 1 [0159.200] wcscmp (_String1="ReadOutLoud.SKY", _String2="..") returned 1 [0159.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1330 [0159.200] wcscpy (in: _Dest=0x81d1330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.200] wcscat (in: _Dest=0x81d1330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.200] wcscat (in: _Dest=0x81d1330, _Source="ReadOutLoud.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" [0159.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd4 [0159.201] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SKY", cAlternateFileName="")) returned 1 [0159.201] wcscmp (_String1="reflow.SKY", _String2=".") returned 1 [0159.201] wcscmp (_String1="reflow.SKY", _String2="..") returned 1 [0159.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de2a8 [0159.201] wcscpy (in: _Dest=0x81de2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.201] wcscat (in: _Dest=0x81de2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.201] wcscat (in: _Dest=0x81de2a8, _Source="reflow.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" [0159.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd8 [0159.202] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SKY", cAlternateFileName="SAVEAS~1.SKY")) returned 1 [0159.202] wcscmp (_String1="SaveAsRTF.SKY", _String2=".") returned 1 [0159.202] wcscmp (_String1="SaveAsRTF.SKY", _String2="..") returned 1 [0159.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d1e78 [0159.202] wcscpy (in: _Dest=0x81d1e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.202] wcscat (in: _Dest=0x81d1e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.202] wcscat (in: _Dest=0x81d1e78, _Source="SaveAsRTF.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" [0159.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cdc [0159.203] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SKY", cAlternateFileName="")) returned 1 [0159.203] wcscmp (_String1="Search.SKY", _String2=".") returned 1 [0159.203] wcscmp (_String1="Search.SKY", _String2="..") returned 1 [0159.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de338 [0159.204] wcscpy (in: _Dest=0x81de338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.204] wcscat (in: _Dest=0x81de338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.204] wcscat (in: _Dest=0x81de338, _Source="Search.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" [0159.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce0 [0159.205] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SKY", cAlternateFileName="")) returned 1 [0159.205] wcscmp (_String1="SendMail.SKY", _String2=".") returned 1 [0159.205] wcscmp (_String1="SendMail.SKY", _String2="..") returned 1 [0159.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de3c8 [0159.205] wcscpy (in: _Dest=0x81de3c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.205] wcscat (in: _Dest=0x81de3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.205] wcscat (in: _Dest=0x81de3c8, _Source="SendMail.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" [0159.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce4 [0159.206] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0159.206] wcscmp (_String1="Services", _String2=".") returned 1 [0159.206] wcscmp (_String1="Services", _String2="..") returned 1 [0159.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bec50 [0159.206] wcscpy (in: _Dest=0x81bec50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.206] wcscat (in: _Dest=0x81bec50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.206] wcscat (in: _Dest=0x81bec50, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0159.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce8 [0159.207] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SKY", cAlternateFileName="")) returned 1 [0159.207] wcscmp (_String1="Spelling.SKY", _String2=".") returned 1 [0159.208] wcscmp (_String1="Spelling.SKY", _String2="..") returned 1 [0159.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de458 [0159.208] wcscpy (in: _Dest=0x81de458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.208] wcscat (in: _Dest=0x81de458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.208] wcscat (in: _Dest=0x81de458, _Source="Spelling.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" [0159.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cec [0159.209] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SKY", cAlternateFileName="")) returned 1 [0159.209] wcscmp (_String1="updater.SKY", _String2=".") returned 1 [0159.209] wcscmp (_String1="updater.SKY", _String2="..") returned 1 [0159.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de4e8 [0159.209] wcscpy (in: _Dest=0x81de4e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.209] wcscat (in: _Dest=0x81de4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.209] wcscat (in: _Dest=0x81de4e8, _Source="updater.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" [0159.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf0 [0159.210] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 1 [0159.210] wcscmp (_String1="WebLink.SKY", _String2=".") returned 1 [0159.210] wcscmp (_String1="WebLink.SKY", _String2="..") returned 1 [0159.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de578 [0159.210] wcscpy (in: _Dest=0x81de578, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.210] wcscat (in: _Dest=0x81de578, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0159.210] wcscat (in: _Dest=0x81de578, _Source="WebLink.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" [0159.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf4 [0159.211] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efd050 | out: lpFindFileData=0x3efd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 0 [0159.212] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0159.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efd050) returned 1 [0159.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831aed8) returned 1 [0159.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 Thread: id = 2159 os_tid = 0x1d5c [0152.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831af58 [0152.362] wcscpy (in: _Dest=0x831af58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0152.362] wcscat (in: _Dest=0x831af58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0152.362] wcscat (in: _Dest=0x831af58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*" [0152.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efd2b8 [0152.362] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38318 [0157.217] wcscmp (_String1=".", _String2=".") returned 0 [0157.217] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.217] wcscmp (_String1="..", _String2=".") returned 1 [0157.217] wcscmp (_String1="..", _String2="..") returned 0 [0157.217] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.SLV", cAlternateFileName="ACCESS~1.SLV")) returned 1 [0157.217] wcscmp (_String1="Accessibility.SLV", _String2=".") returned 1 [0157.217] wcscmp (_String1="Accessibility.SLV", _String2="..") returned 1 [0157.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbe68 [0157.218] wcscpy (in: _Dest=0x81dbe68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0157.218] wcscat (in: _Dest=0x81dbe68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0157.218] wcscat (in: _Dest=0x81dbe68, _Source="Accessibility.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" [0160.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv")) returned 0x20 [0160.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV", dwFileAttributes=0x20) returned 0 [0160.255] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.256] GetLastError () returned 0x5 [0160.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV", dwFileAttributes=0x20) returned 0 [0160.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbe68) returned 1 [0160.256] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SLV", cAlternateFileName="")) returned 1 [0160.256] wcscmp (_String1="Acroform.SLV", _String2=".") returned 1 [0160.256] wcscmp (_String1="Acroform.SLV", _String2="..") returned 1 [0160.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0160.256] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.256] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.256] wcscat (in: _Dest=0x81de8d8, _Source="Acroform.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" [0160.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv")) returned 0x20 [0160.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV", dwFileAttributes=0x20) returned 0 [0160.274] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.274] GetLastError () returned 0x5 [0160.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV", dwFileAttributes=0x20) returned 0 [0160.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.274] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SLV", cAlternateFileName="ADOBEC~1.SLV")) returned 1 [0160.274] wcscmp (_String1="AdobeCollabSync.SLV", _String2=".") returned 1 [0160.274] wcscmp (_String1="AdobeCollabSync.SLV", _String2="..") returned 1 [0160.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbfa8 [0160.274] wcscpy (in: _Dest=0x81dbfa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.274] wcscat (in: _Dest=0x81dbfa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.274] wcscat (in: _Dest=0x81dbfa8, _Source="AdobeCollabSync.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" [0160.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv")) returned 0x20 [0160.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV", dwFileAttributes=0x20) returned 0 [0160.275] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.275] GetLastError () returned 0x5 [0160.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV", dwFileAttributes=0x20) returned 0 [0160.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbfa8) returned 1 [0160.275] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x75800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SLV", cAlternateFileName="")) returned 1 [0160.275] wcscmp (_String1="Annots.SLV", _String2=".") returned 1 [0160.275] wcscmp (_String1="Annots.SLV", _String2="..") returned 1 [0160.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de8d8 [0160.275] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.275] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.275] wcscat (in: _Dest=0x81de8d8, _Source="Annots.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" [0160.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv")) returned 0x20 [0160.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV", dwFileAttributes=0x20) returned 0 [0160.305] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.305] GetLastError () returned 0x5 [0160.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV", dwFileAttributes=0x20) returned 0 [0160.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.306] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SLV", cAlternateFileName="BRDLAN~1.SLV")) returned 1 [0160.306] wcscmp (_String1="BRdlang32.SLV", _String2=".") returned 1 [0160.306] wcscmp (_String1="BRdlang32.SLV", _String2="..") returned 1 [0160.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.306] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.306] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.306] wcscat (in: _Dest=0x3e3db38, _Source="BRdlang32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" [0160.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv")) returned 0x20 [0160.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV", dwFileAttributes=0x20) returned 0 [0160.323] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.323] GetLastError () returned 0x5 [0160.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV", dwFileAttributes=0x20) returned 0 [0160.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.323] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SLV", cAlternateFileName="")) returned 1 [0160.324] wcscmp (_String1="Checkers.SLV", _String2=".") returned 1 [0160.324] wcscmp (_String1="Checkers.SLV", _String2="..") returned 1 [0160.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de9f8 [0160.324] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.324] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.324] wcscat (in: _Dest=0x81de9f8, _Source="Checkers.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" [0160.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv")) returned 0x20 [0160.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV", dwFileAttributes=0x20) returned 0 [0160.324] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.324] GetLastError () returned 0x5 [0160.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV", dwFileAttributes=0x20) returned 0 [0160.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.324] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SLV", cAlternateFileName="")) returned 1 [0160.325] wcscmp (_String1="DigSig.SLV", _String2=".") returned 1 [0160.325] wcscmp (_String1="DigSig.SLV", _String2="..") returned 1 [0160.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de9f8 [0160.325] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.325] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.325] wcscat (in: _Dest=0x81de9f8, _Source="DigSig.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" [0160.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv")) returned 0x20 [0160.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV", dwFileAttributes=0x20) returned 0 [0160.325] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.325] GetLastError () returned 0x5 [0160.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV", dwFileAttributes=0x20) returned 0 [0160.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.325] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SLV", cAlternateFileName="")) returned 1 [0160.325] wcscmp (_String1="DVA.SLV", _String2=".") returned 1 [0160.326] wcscmp (_String1="DVA.SLV", _String2="..") returned 1 [0160.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bee70 [0160.326] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.326] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.326] wcscat (in: _Dest=0x81bee70, _Source="DVA.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" [0160.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv")) returned 0x20 [0160.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV", dwFileAttributes=0x20) returned 0 [0160.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.326] GetLastError () returned 0x5 [0160.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV", dwFileAttributes=0x20) returned 0 [0160.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.326] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SLV", cAlternateFileName="")) returned 1 [0160.326] wcscmp (_String1="eBook.SLV", _String2=".") returned 1 [0160.326] wcscmp (_String1="eBook.SLV", _String2="..") returned 1 [0160.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de9f8 [0160.327] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.327] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.327] wcscat (in: _Dest=0x81de9f8, _Source="eBook.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" [0160.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv")) returned 0x20 [0160.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV", dwFileAttributes=0x20) returned 0 [0160.386] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.386] GetLastError () returned 0x5 [0160.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV", dwFileAttributes=0x20) returned 0 [0160.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.386] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SLV", cAlternateFileName="")) returned 1 [0160.386] wcscmp (_String1="EScript.SLV", _String2=".") returned 1 [0160.386] wcscmp (_String1="EScript.SLV", _String2="..") returned 1 [0160.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de9f8 [0160.386] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.386] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.386] wcscat (in: _Dest=0x81de9f8, _Source="EScript.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" [0160.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv")) returned 0x20 [0160.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV", dwFileAttributes=0x20) returned 0 [0160.417] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.417] GetLastError () returned 0x5 [0160.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV", dwFileAttributes=0x20) returned 0 [0160.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.418] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SLV", cAlternateFileName="")) returned 1 [0160.418] wcscmp (_String1="IA32.SLV", _String2=".") returned 1 [0160.418] wcscmp (_String1="IA32.SLV", _String2="..") returned 1 [0160.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81beef8 [0160.418] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.418] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.418] wcscat (in: _Dest=0x81beef8, _Source="IA32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" [0160.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv")) returned 0x20 [0160.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV", dwFileAttributes=0x20) returned 0 [0160.418] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.419] GetLastError () returned 0x5 [0160.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV", dwFileAttributes=0x20) returned 0 [0160.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 [0160.419] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.SLV", cAlternateFileName="MAKEAC~1.SLV")) returned 1 [0160.419] wcscmp (_String1="MakeAccessible.SLV", _String2=".") returned 1 [0160.419] wcscmp (_String1="MakeAccessible.SLV", _String2="..") returned 1 [0160.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc0e8 [0160.419] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.419] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.419] wcscat (in: _Dest=0x81dc0e8, _Source="MakeAccessible.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" [0160.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv")) returned 0x20 [0160.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV", dwFileAttributes=0x20) returned 0 [0160.420] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.420] GetLastError () returned 0x5 [0160.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV", dwFileAttributes=0x20) returned 0 [0160.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 [0160.420] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SLV", cAlternateFileName="MULTIM~1.SLV")) returned 1 [0160.420] wcscmp (_String1="Multimedia.SLV", _String2=".") returned 1 [0160.420] wcscmp (_String1="Multimedia.SLV", _String2="..") returned 1 [0160.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0160.420] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.420] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.420] wcscat (in: _Dest=0x3e3db38, _Source="Multimedia.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" [0160.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv")) returned 0x20 [0160.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV", dwFileAttributes=0x20) returned 0 [0160.421] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.421] GetLastError () returned 0x5 [0160.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV", dwFileAttributes=0x20) returned 0 [0160.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.421] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.SLV", cAlternateFileName="")) returned 1 [0160.421] wcscmp (_String1="PDDom.SLV", _String2=".") returned 1 [0160.422] wcscmp (_String1="PDDom.SLV", _String2="..") returned 1 [0160.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de9f8 [0160.422] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.422] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.422] wcscat (in: _Dest=0x81de9f8, _Source="PDDom.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" [0160.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv")) returned 0x20 [0160.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV", dwFileAttributes=0x20) returned 0 [0160.465] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.465] GetLastError () returned 0x5 [0160.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV", dwFileAttributes=0x20) returned 0 [0160.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.466] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SLV", cAlternateFileName="")) returned 1 [0160.466] wcscmp (_String1="PPKLITE.SLV", _String2=".") returned 1 [0160.466] wcscmp (_String1="PPKLITE.SLV", _String2="..") returned 1 [0160.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de9f8 [0160.466] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.466] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.466] wcscat (in: _Dest=0x81de9f8, _Source="PPKLITE.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" [0160.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv")) returned 0x20 [0160.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV", dwFileAttributes=0x20) returned 0 [0160.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.467] GetLastError () returned 0x5 [0160.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV", dwFileAttributes=0x20) returned 0 [0160.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.467] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd04ec20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x146000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SLV", cAlternateFileName="")) returned 1 [0160.467] wcscmp (_String1="RdLang32.SLV", _String2=".") returned 1 [0160.467] wcscmp (_String1="RdLang32.SLV", _String2="..") returned 1 [0160.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de9f8 [0160.467] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.467] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.467] wcscat (in: _Dest=0x81de9f8, _Source="RdLang32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" [0160.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv")) returned 0x20 [0160.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV", dwFileAttributes=0x20) returned 0 [0160.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.505] GetLastError () returned 0x5 [0160.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV", dwFileAttributes=0x20) returned 0 [0160.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.506] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SLV", cAlternateFileName="READOU~1.SLV")) returned 1 [0160.506] wcscmp (_String1="ReadOutLoud.SLV", _String2=".") returned 1 [0160.506] wcscmp (_String1="ReadOutLoud.SLV", _String2="..") returned 1 [0160.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3de30 [0160.506] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.506] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.506] wcscat (in: _Dest=0x3e3de30, _Source="ReadOutLoud.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" [0160.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv")) returned 0x20 [0160.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV", dwFileAttributes=0x20) returned 0 [0160.564] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.564] GetLastError () returned 0x5 [0160.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV", dwFileAttributes=0x20) returned 0 [0160.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.565] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.SLV", cAlternateFileName="")) returned 1 [0160.565] wcscmp (_String1="Reflow.SLV", _String2=".") returned 1 [0160.565] wcscmp (_String1="Reflow.SLV", _String2="..") returned 1 [0160.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.565] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.565] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.565] wcscat (in: _Dest=0x81de7b8, _Source="Reflow.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" [0160.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv")) returned 0x20 [0160.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV", dwFileAttributes=0x20) returned 0 [0160.645] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.645] GetLastError () returned 0x5 [0160.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV", dwFileAttributes=0x20) returned 0 [0160.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.645] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SLV", cAlternateFileName="SAVEAS~1.SLV")) returned 1 [0160.645] wcscmp (_String1="SaveAsRTF.SLV", _String2=".") returned 1 [0160.645] wcscmp (_String1="SaveAsRTF.SLV", _String2="..") returned 1 [0160.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.645] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.646] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.646] wcscat (in: _Dest=0x3e3db38, _Source="SaveAsRTF.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" [0160.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv")) returned 0x20 [0160.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV", dwFileAttributes=0x20) returned 0 [0160.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.725] GetLastError () returned 0x5 [0160.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV", dwFileAttributes=0x20) returned 0 [0160.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.725] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SLV", cAlternateFileName="")) returned 1 [0160.725] wcscmp (_String1="Search.SLV", _String2=".") returned 1 [0160.725] wcscmp (_String1="Search.SLV", _String2="..") returned 1 [0160.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de9f8 [0160.725] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.725] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.725] wcscat (in: _Dest=0x81de9f8, _Source="Search.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" [0160.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv")) returned 0x20 [0160.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV", dwFileAttributes=0x20) returned 0 [0160.726] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.726] GetLastError () returned 0x5 [0160.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV", dwFileAttributes=0x20) returned 0 [0160.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.726] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SLV", cAlternateFileName="")) returned 1 [0160.726] wcscmp (_String1="SendMail.SLV", _String2=".") returned 1 [0160.726] wcscmp (_String1="SendMail.SLV", _String2="..") returned 1 [0160.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de9f8 [0160.726] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.726] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.726] wcscat (in: _Dest=0x81de9f8, _Source="SendMail.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" [0160.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv")) returned 0x20 [0160.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV", dwFileAttributes=0x20) returned 0 [0160.727] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.727] GetLastError () returned 0x5 [0160.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV", dwFileAttributes=0x20) returned 0 [0160.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.728] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.728] wcscmp (_String1="Services", _String2=".") returned 1 [0160.728] wcscmp (_String1="Services", _String2="..") returned 1 [0160.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf338 [0160.728] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.728] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.728] wcscat (in: _Dest=0x81bf338, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0160.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de9f8 [0160.728] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0160.728] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\" [0160.728] wcscat (in: _Dest=0x81de9f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*" [0160.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0160.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0160.848] wcscmp (_String1=".", _String2=".") returned 0 [0160.848] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.848] wcscmp (_String1="..", _String2=".") returned 1 [0160.848] wcscmp (_String1="..", _String2="..") returned 0 [0160.848] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9103, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.848] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.849] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187a00 [0160.849] wcscpy (in: _Dest=0x8187a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0160.849] wcscat (in: _Dest=0x8187a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\" [0160.849] wcscat (in: _Dest=0x8187a00, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" [0160.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx")) returned 0x20 [0160.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.898] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.898] GetLastError () returned 0x5 [0160.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0160.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a00) returned 1 [0160.899] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0160.899] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0160.899] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0160.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187a00 [0160.899] wcscpy (in: _Dest=0x8187a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0160.899] wcscat (in: _Dest=0x8187a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\" [0160.899] wcscat (in: _Dest=0x8187a00, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" [0160.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx")) returned 0x20 [0160.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.900] GetLastError () returned 0x5 [0160.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0160.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a00) returned 1 [0160.900] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0160.900] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0160.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0160.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0160.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 [0160.900] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SLV", cAlternateFileName="")) returned 1 [0160.900] wcscmp (_String1="Spelling.SLV", _String2=".") returned 1 [0160.900] wcscmp (_String1="Spelling.SLV", _String2="..") returned 1 [0160.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de9f8 [0160.900] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.900] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.900] wcscat (in: _Dest=0x81de9f8, _Source="Spelling.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" [0160.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv")) returned 0x20 [0162.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV", dwFileAttributes=0x20) returned 0 [0162.277] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.277] GetLastError () returned 0x5 [0162.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV", dwFileAttributes=0x20) returned 0 [0162.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0162.277] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.SLV", cAlternateFileName="")) returned 1 [0162.277] wcscmp (_String1="Updater.SLV", _String2=".") returned 1 [0162.277] wcscmp (_String1="Updater.SLV", _String2="..") returned 1 [0162.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de9f8 [0162.277] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0162.278] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0162.278] wcscat (in: _Dest=0x81de9f8, _Source="Updater.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" [0165.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2894 [0165.400] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 1 [0165.400] wcscmp (_String1="Weblink.SLV", _String2=".") returned 1 [0165.400] wcscmp (_String1="Weblink.SLV", _String2="..") returned 1 [0165.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81ddd98 [0165.400] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0165.400] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0165.400] wcscat (in: _Dest=0x81ddd98, _Source="Weblink.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" [0165.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2660 [0165.401] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3efd2b8 | out: lpFindFileData=0x3efd2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 0 [0165.401] FindClose (in: hFindFile=0x3f38318 | out: hFindFile=0x3f38318) returned 1 [0165.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efd2b8) returned 1 [0165.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831af58) returned 1 [0165.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 Thread: id = 2160 os_tid = 0x1d60 [0152.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831afd8 [0152.362] wcscpy (in: _Dest=0x831afd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0152.362] wcscat (in: _Dest=0x831afd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0152.362] wcscat (in: _Dest=0x831afd8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*" [0152.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efd520 [0152.362] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0157.216] wcscmp (_String1=".", _String2=".") returned 0 [0157.216] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.216] wcscmp (_String1="..", _String2=".") returned 1 [0157.216] wcscmp (_String1="..", _String2="..") returned 0 [0157.216] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SVE", cAlternateFileName="ACCESS~1.SVE")) returned 1 [0157.216] wcscmp (_String1="accessibility.SVE", _String2=".") returned 1 [0157.216] wcscmp (_String1="accessibility.SVE", _String2="..") returned 1 [0157.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbdc8 [0157.217] wcscpy (in: _Dest=0x81dbdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0157.217] wcscat (in: _Dest=0x81dbdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0157.217] wcscat (in: _Dest=0x81dbdc8, _Source="accessibility.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" [0160.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve")) returned 0x20 [0160.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE", dwFileAttributes=0x20) returned 0 [0160.235] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.235] GetLastError () returned 0x5 [0160.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE", dwFileAttributes=0x20) returned 0 [0160.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbdc8) returned 1 [0160.235] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SVE", cAlternateFileName="")) returned 1 [0160.236] wcscmp (_String1="Acroform.SVE", _String2=".") returned 1 [0160.236] wcscmp (_String1="Acroform.SVE", _String2="..") returned 1 [0160.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0160.236] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.236] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.236] wcscat (in: _Dest=0x81de7b8, _Source="Acroform.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" [0160.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve")) returned 0x20 [0160.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE", dwFileAttributes=0x20) returned 0 [0160.257] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.257] GetLastError () returned 0x5 [0160.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE", dwFileAttributes=0x20) returned 0 [0160.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.257] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SVE", cAlternateFileName="ADOBEC~1.SVE")) returned 1 [0160.258] wcscmp (_String1="AdobeCollabSync.SVE", _String2=".") returned 1 [0160.258] wcscmp (_String1="AdobeCollabSync.SVE", _String2="..") returned 1 [0160.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbe68 [0160.258] wcscpy (in: _Dest=0x81dbe68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.258] wcscat (in: _Dest=0x81dbe68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.258] wcscat (in: _Dest=0x81dbe68, _Source="AdobeCollabSync.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" [0160.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve")) returned 0x20 [0160.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE", dwFileAttributes=0x20) returned 0 [0160.276] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.276] GetLastError () returned 0x5 [0160.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE", dwFileAttributes=0x20) returned 0 [0160.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbe68) returned 1 [0160.277] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SVE", cAlternateFileName="")) returned 1 [0160.277] wcscmp (_String1="Annots.SVE", _String2=".") returned 1 [0160.277] wcscmp (_String1="Annots.SVE", _String2="..") returned 1 [0160.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dea88 [0160.277] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.277] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.277] wcscat (in: _Dest=0x81dea88, _Source="Annots.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" [0160.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve")) returned 0x20 [0160.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE", dwFileAttributes=0x20) returned 0 [0160.307] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.307] GetLastError () returned 0x5 [0160.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE", dwFileAttributes=0x20) returned 0 [0160.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 [0160.307] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SVE", cAlternateFileName="BRDLAN~1.SVE")) returned 1 [0160.307] wcscmp (_String1="BRdlang32.SVE", _String2=".") returned 1 [0160.307] wcscmp (_String1="BRdlang32.SVE", _String2="..") returned 1 [0160.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c540 [0160.307] wcscpy (in: _Dest=0x3e3c540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.307] wcscat (in: _Dest=0x3e3c540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.308] wcscat (in: _Dest=0x3e3c540, _Source="BRdlang32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" [0160.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve")) returned 0x20 [0160.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE", dwFileAttributes=0x20) returned 0 [0160.328] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.328] GetLastError () returned 0x5 [0160.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE", dwFileAttributes=0x20) returned 0 [0160.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 [0160.328] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SVE", cAlternateFileName="")) returned 1 [0160.328] wcscmp (_String1="Checkers.SVE", _String2=".") returned 1 [0160.328] wcscmp (_String1="Checkers.SVE", _String2="..") returned 1 [0160.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.328] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.328] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.328] wcscat (in: _Dest=0x81de968, _Source="Checkers.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" [0160.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve")) returned 0x20 [0160.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE", dwFileAttributes=0x20) returned 0 [0160.329] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.329] GetLastError () returned 0x5 [0160.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE", dwFileAttributes=0x20) returned 0 [0160.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.329] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SVE", cAlternateFileName="")) returned 1 [0160.329] wcscmp (_String1="DigSig.SVE", _String2=".") returned 1 [0160.329] wcscmp (_String1="DigSig.SVE", _String2="..") returned 1 [0160.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de968 [0160.329] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.329] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.329] wcscat (in: _Dest=0x81de968, _Source="DigSig.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" [0160.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve")) returned 0x20 [0160.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE", dwFileAttributes=0x20) returned 0 [0160.329] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.330] GetLastError () returned 0x5 [0160.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE", dwFileAttributes=0x20) returned 0 [0160.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.330] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SVE", cAlternateFileName="")) returned 1 [0160.330] wcscmp (_String1="DVA.SVE", _String2=".") returned 1 [0160.330] wcscmp (_String1="DVA.SVE", _String2="..") returned 1 [0160.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bee70 [0160.330] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.330] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.330] wcscat (in: _Dest=0x81bee70, _Source="DVA.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" [0160.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve")) returned 0x20 [0160.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE", dwFileAttributes=0x20) returned 0 [0160.330] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.331] GetLastError () returned 0x5 [0160.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE", dwFileAttributes=0x20) returned 0 [0160.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.331] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SVE", cAlternateFileName="")) returned 1 [0160.331] wcscmp (_String1="eBook.SVE", _String2=".") returned 1 [0160.331] wcscmp (_String1="eBook.SVE", _String2="..") returned 1 [0160.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de968 [0160.331] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.331] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.331] wcscat (in: _Dest=0x81de968, _Source="eBook.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" [0160.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve")) returned 0x20 [0160.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE", dwFileAttributes=0x20) returned 0 [0160.387] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.388] GetLastError () returned 0x5 [0160.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE", dwFileAttributes=0x20) returned 0 [0160.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.388] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SVE", cAlternateFileName="")) returned 1 [0160.388] wcscmp (_String1="EScript.SVE", _String2=".") returned 1 [0160.388] wcscmp (_String1="EScript.SVE", _String2="..") returned 1 [0160.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de968 [0160.388] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.388] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.388] wcscat (in: _Dest=0x81de968, _Source="EScript.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" [0160.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve")) returned 0x20 [0160.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE", dwFileAttributes=0x20) returned 0 [0160.388] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.389] GetLastError () returned 0x5 [0160.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE", dwFileAttributes=0x20) returned 0 [0160.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.389] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SVE", cAlternateFileName="")) returned 1 [0160.389] wcscmp (_String1="IA32.SVE", _String2=".") returned 1 [0160.389] wcscmp (_String1="IA32.SVE", _String2="..") returned 1 [0160.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0160.389] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.389] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.389] wcscat (in: _Dest=0x81bee70, _Source="IA32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" [0160.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve")) returned 0x20 [0160.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE", dwFileAttributes=0x20) returned 0 [0160.423] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.424] GetLastError () returned 0x5 [0160.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE", dwFileAttributes=0x20) returned 0 [0160.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.424] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SVE", cAlternateFileName="MAKEAC~1.SVE")) returned 1 [0160.424] wcscmp (_String1="makeaccessible.SVE", _String2=".") returned 1 [0160.424] wcscmp (_String1="makeaccessible.SVE", _String2="..") returned 1 [0160.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc0e8 [0160.424] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.424] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.424] wcscat (in: _Dest=0x81dc0e8, _Source="makeaccessible.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" [0160.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve")) returned 0x20 [0160.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE", dwFileAttributes=0x20) returned 0 [0160.425] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.425] GetLastError () returned 0x5 [0160.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE", dwFileAttributes=0x20) returned 0 [0160.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 [0160.425] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2c8760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SVE", cAlternateFileName="MULTIM~1.SVE")) returned 1 [0160.425] wcscmp (_String1="Multimedia.SVE", _String2=".") returned 1 [0160.425] wcscmp (_String1="Multimedia.SVE", _String2="..") returned 1 [0160.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3db38 [0160.426] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.426] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.426] wcscat (in: _Dest=0x3e3db38, _Source="Multimedia.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" [0160.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve")) returned 0x20 [0160.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE", dwFileAttributes=0x20) returned 0 [0160.426] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.426] GetLastError () returned 0x5 [0160.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE", dwFileAttributes=0x20) returned 0 [0160.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.427] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SVE", cAlternateFileName="")) returned 1 [0160.427] wcscmp (_String1="pddom.SVE", _String2=".") returned 1 [0160.427] wcscmp (_String1="pddom.SVE", _String2="..") returned 1 [0160.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81deb18 [0160.427] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.427] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.427] wcscat (in: _Dest=0x81deb18, _Source="pddom.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" [0160.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve")) returned 0x20 [0160.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE", dwFileAttributes=0x20) returned 0 [0160.468] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.469] GetLastError () returned 0x5 [0160.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE", dwFileAttributes=0x20) returned 0 [0160.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.469] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SVE", cAlternateFileName="")) returned 1 [0160.469] wcscmp (_String1="PPKLITE.SVE", _String2=".") returned 1 [0160.469] wcscmp (_String1="PPKLITE.SVE", _String2="..") returned 1 [0160.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81deb18 [0160.469] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.469] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.469] wcscat (in: _Dest=0x81deb18, _Source="PPKLITE.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" [0160.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve")) returned 0x20 [0160.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE", dwFileAttributes=0x20) returned 0 [0160.470] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.470] GetLastError () returned 0x5 [0160.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE", dwFileAttributes=0x20) returned 0 [0160.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.470] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb704260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x141800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SVE", cAlternateFileName="")) returned 1 [0160.470] wcscmp (_String1="RdLang32.SVE", _String2=".") returned 1 [0160.470] wcscmp (_String1="RdLang32.SVE", _String2="..") returned 1 [0160.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0160.470] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.470] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.470] wcscat (in: _Dest=0x81deb18, _Source="RdLang32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" [0160.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve")) returned 0x20 [0160.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE", dwFileAttributes=0x20) returned 0 [0160.507] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.507] GetLastError () returned 0x5 [0160.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE", dwFileAttributes=0x20) returned 0 [0160.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.507] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SVE", cAlternateFileName="READOU~1.SVE")) returned 1 [0160.508] wcscmp (_String1="ReadOutLoud.SVE", _String2=".") returned 1 [0160.508] wcscmp (_String1="ReadOutLoud.SVE", _String2="..") returned 1 [0160.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cd90 [0160.508] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.508] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.508] wcscat (in: _Dest=0x3e3cd90, _Source="ReadOutLoud.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" [0160.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve")) returned 0x20 [0160.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE", dwFileAttributes=0x20) returned 0 [0160.515] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.515] GetLastError () returned 0x5 [0160.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE", dwFileAttributes=0x20) returned 0 [0160.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.515] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SVE", cAlternateFileName="")) returned 1 [0160.515] wcscmp (_String1="reflow.SVE", _String2=".") returned 1 [0160.515] wcscmp (_String1="reflow.SVE", _String2="..") returned 1 [0160.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deb18 [0160.516] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.516] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.516] wcscat (in: _Dest=0x81deb18, _Source="reflow.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" [0160.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve")) returned 0x20 [0160.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE", dwFileAttributes=0x20) returned 0 [0160.566] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.567] GetLastError () returned 0x5 [0160.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE", dwFileAttributes=0x20) returned 0 [0160.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.567] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SVE", cAlternateFileName="SAVEAS~1.SVE")) returned 1 [0160.567] wcscmp (_String1="SaveAsRTF.SVE", _String2=".") returned 1 [0160.567] wcscmp (_String1="SaveAsRTF.SVE", _String2="..") returned 1 [0160.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3de30 [0160.567] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.567] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.567] wcscat (in: _Dest=0x3e3de30, _Source="SaveAsRTF.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" [0160.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve")) returned 0x20 [0160.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE", dwFileAttributes=0x20) returned 0 [0160.647] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.647] GetLastError () returned 0x5 [0160.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE", dwFileAttributes=0x20) returned 0 [0160.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.647] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SVE", cAlternateFileName="")) returned 1 [0160.647] wcscmp (_String1="Search.SVE", _String2=".") returned 1 [0160.648] wcscmp (_String1="Search.SVE", _String2="..") returned 1 [0160.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.648] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.648] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.648] wcscat (in: _Dest=0x81de7b8, _Source="Search.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" [0160.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve")) returned 0x20 [0160.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE", dwFileAttributes=0x20) returned 0 [0160.648] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.649] GetLastError () returned 0x5 [0160.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE", dwFileAttributes=0x20) returned 0 [0160.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.649] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SVE", cAlternateFileName="")) returned 1 [0160.649] wcscmp (_String1="SendMail.SVE", _String2=".") returned 1 [0160.649] wcscmp (_String1="SendMail.SVE", _String2="..") returned 1 [0160.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0160.649] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.649] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.649] wcscat (in: _Dest=0x81de7b8, _Source="SendMail.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" [0160.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve")) returned 0x20 [0160.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE", dwFileAttributes=0x20) returned 0 [0160.650] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.650] GetLastError () returned 0x5 [0160.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE", dwFileAttributes=0x20) returned 0 [0160.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.650] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.651] wcscmp (_String1="Services", _String2=".") returned 1 [0160.651] wcscmp (_String1="Services", _String2="..") returned 1 [0160.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf008 [0160.651] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.651] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.651] wcscat (in: _Dest=0x81bf008, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0160.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.651] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0160.651] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\" [0160.651] wcscat (in: _Dest=0x81de7b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*" [0160.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0160.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0160.729] wcscmp (_String1=".", _String2=".") returned 0 [0160.729] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.729] wcscmp (_String1="..", _String2=".") returned 1 [0160.729] wcscmp (_String1="..", _String2="..") returned 0 [0160.729] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.729] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.729] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187418 [0160.729] wcscpy (in: _Dest=0x8187418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0160.729] wcscat (in: _Dest=0x8187418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\" [0160.730] wcscat (in: _Dest=0x8187418, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" [0160.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx")) returned 0x20 [0162.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.267] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.267] GetLastError () returned 0x5 [0162.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187418) returned 1 [0162.267] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0162.267] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0162.267] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0162.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187418 [0162.267] wcscpy (in: _Dest=0x8187418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0162.267] wcscat (in: _Dest=0x8187418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\" [0162.267] wcscat (in: _Dest=0x8187418, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" [0165.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x259c [0165.393] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0165.393] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0165.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0165.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0165.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 [0165.393] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SVE", cAlternateFileName="")) returned 1 [0165.393] wcscmp (_String1="Spelling.SVE", _String2=".") returned 1 [0165.393] wcscmp (_String1="Spelling.SVE", _String2="..") returned 1 [0165.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0165.394] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0165.394] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0165.394] wcscat (in: _Dest=0x81de7b8, _Source="Spelling.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" [0165.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0165.395] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SVE", cAlternateFileName="")) returned 1 [0165.395] wcscmp (_String1="updater.SVE", _String2=".") returned 1 [0165.395] wcscmp (_String1="updater.SVE", _String2="..") returned 1 [0165.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dde28 [0165.395] wcscpy (in: _Dest=0x81dde28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0165.395] wcscat (in: _Dest=0x81dde28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0165.395] wcscat (in: _Dest=0x81dde28, _Source="updater.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" [0165.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dde28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2658 [0165.396] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 1 [0165.396] wcscmp (_String1="Weblink.SVE", _String2=".") returned 1 [0165.396] wcscmp (_String1="Weblink.SVE", _String2="..") returned 1 [0165.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dede8 [0165.396] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0165.396] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0165.397] wcscat (in: _Dest=0x81dede8, _Source="Weblink.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" [0165.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x265c [0165.398] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3efd520 | out: lpFindFileData=0x3efd520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 0 [0165.398] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0165.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efd520) returned 1 [0165.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831afd8) returned 1 [0165.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 Thread: id = 2161 os_tid = 0x1d64 [0152.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831b058 [0152.363] wcscpy (in: _Dest=0x831b058, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0152.363] wcscat (in: _Dest=0x831b058, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0152.363] wcscat (in: _Dest=0x831b058, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*" [0152.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efd788 [0152.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f379d8 [0157.215] wcscmp (_String1=".", _String2=".") returned 0 [0157.215] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.215] wcscmp (_String1="..", _String2=".") returned 1 [0157.215] wcscmp (_String1="..", _String2="..") returned 0 [0157.215] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.TUR", cAlternateFileName="ACCESS~1.TUR")) returned 1 [0157.215] wcscmp (_String1="Accessibility.TUR", _String2=".") returned 1 [0157.215] wcscmp (_String1="Accessibility.TUR", _String2="..") returned 1 [0157.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbd28 [0157.216] wcscpy (in: _Dest=0x81dbd28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0157.216] wcscat (in: _Dest=0x81dbd28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0157.216] wcscat (in: _Dest=0x81dbd28, _Source="Accessibility.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" [0160.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur")) returned 0x20 [0160.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR", dwFileAttributes=0x20) returned 0 [0160.219] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.219] GetLastError () returned 0x5 [0160.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR", dwFileAttributes=0x20) returned 0 [0160.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbd28) returned 1 [0160.219] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x61200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.TUR", cAlternateFileName="")) returned 1 [0160.219] wcscmp (_String1="Acroform.TUR", _String2=".") returned 1 [0160.219] wcscmp (_String1="Acroform.TUR", _String2="..") returned 1 [0160.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0160.219] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.219] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.219] wcscat (in: _Dest=0x81de728, _Source="Acroform.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" [0160.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur")) returned 0x20 [0160.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR", dwFileAttributes=0x20) returned 0 [0160.237] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.237] GetLastError () returned 0x5 [0160.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR", dwFileAttributes=0x20) returned 0 [0160.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0160.237] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.TUR", cAlternateFileName="ADOBEC~1.TUR")) returned 1 [0160.237] wcscmp (_String1="AdobeCollabSync.TUR", _String2=".") returned 1 [0160.237] wcscmp (_String1="AdobeCollabSync.TUR", _String2="..") returned 1 [0160.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbdc8 [0160.237] wcscpy (in: _Dest=0x81dbdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.237] wcscat (in: _Dest=0x81dbdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.237] wcscat (in: _Dest=0x81dbdc8, _Source="AdobeCollabSync.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" [0160.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur")) returned 0x20 [0160.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR", dwFileAttributes=0x20) returned 0 [0160.259] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.259] GetLastError () returned 0x5 [0160.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR", dwFileAttributes=0x20) returned 0 [0160.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbdc8) returned 1 [0160.259] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x75000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.TUR", cAlternateFileName="")) returned 1 [0160.259] wcscmp (_String1="Annots.TUR", _String2=".") returned 1 [0160.259] wcscmp (_String1="Annots.TUR", _String2="..") returned 1 [0160.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.259] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.259] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.259] wcscat (in: _Dest=0x81de7b8, _Source="Annots.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" [0160.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur")) returned 0x20 [0160.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR", dwFileAttributes=0x20) returned 0 [0160.278] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.278] GetLastError () returned 0x5 [0160.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR", dwFileAttributes=0x20) returned 0 [0160.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.278] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.TUR", cAlternateFileName="BRDLAN~1.TUR")) returned 1 [0160.278] wcscmp (_String1="BRdlang32.TUR", _String2=".") returned 1 [0160.278] wcscmp (_String1="BRdlang32.TUR", _String2="..") returned 1 [0160.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3db38 [0160.278] wcscpy (in: _Dest=0x3e3db38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.278] wcscat (in: _Dest=0x3e3db38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.279] wcscat (in: _Dest=0x3e3db38, _Source="BRdlang32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" [0160.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur")) returned 0x20 [0160.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR", dwFileAttributes=0x20) returned 0 [0160.279] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.279] GetLastError () returned 0x5 [0160.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR", dwFileAttributes=0x20) returned 0 [0160.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 [0160.279] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.TUR", cAlternateFileName="")) returned 1 [0160.279] wcscmp (_String1="Checkers.TUR", _String2=".") returned 1 [0160.279] wcscmp (_String1="Checkers.TUR", _String2="..") returned 1 [0160.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de7b8 [0160.280] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.280] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.280] wcscat (in: _Dest=0x81de7b8, _Source="Checkers.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" [0160.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur")) returned 0x20 [0160.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR", dwFileAttributes=0x20) returned 0 [0160.280] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.280] GetLastError () returned 0x5 [0160.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR", dwFileAttributes=0x20) returned 0 [0160.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.280] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.TUR", cAlternateFileName="")) returned 1 [0160.280] wcscmp (_String1="DigSig.TUR", _String2=".") returned 1 [0160.281] wcscmp (_String1="DigSig.TUR", _String2="..") returned 1 [0160.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0160.281] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.281] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.281] wcscat (in: _Dest=0x81de7b8, _Source="DigSig.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" [0160.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur")) returned 0x20 [0160.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR", dwFileAttributes=0x20) returned 0 [0160.309] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.309] GetLastError () returned 0x5 [0160.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR", dwFileAttributes=0x20) returned 0 [0160.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.309] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.TUR", cAlternateFileName="")) returned 1 [0160.309] wcscmp (_String1="DVA.TUR", _String2=".") returned 1 [0160.309] wcscmp (_String1="DVA.TUR", _String2="..") returned 1 [0160.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bebc8 [0160.309] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.309] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.309] wcscat (in: _Dest=0x81bebc8, _Source="DVA.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" [0160.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur")) returned 0x20 [0160.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR", dwFileAttributes=0x20) returned 0 [0160.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.310] GetLastError () returned 0x5 [0160.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR", dwFileAttributes=0x20) returned 0 [0160.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0160.310] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.TUR", cAlternateFileName="")) returned 1 [0160.310] wcscmp (_String1="eBook.TUR", _String2=".") returned 1 [0160.310] wcscmp (_String1="eBook.TUR", _String2="..") returned 1 [0160.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0160.310] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.310] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.310] wcscat (in: _Dest=0x81de7b8, _Source="eBook.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" [0160.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur")) returned 0x20 [0160.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR", dwFileAttributes=0x20) returned 0 [0160.332] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.332] GetLastError () returned 0x5 [0160.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR", dwFileAttributes=0x20) returned 0 [0160.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.333] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.TUR", cAlternateFileName="")) returned 1 [0160.333] wcscmp (_String1="EScript.TUR", _String2=".") returned 1 [0160.333] wcscmp (_String1="EScript.TUR", _String2="..") returned 1 [0160.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0160.333] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.333] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.333] wcscat (in: _Dest=0x81de7b8, _Source="EScript.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" [0160.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur")) returned 0x20 [0160.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR", dwFileAttributes=0x20) returned 0 [0160.333] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.333] GetLastError () returned 0x5 [0160.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR", dwFileAttributes=0x20) returned 0 [0160.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 [0160.334] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.TUR", cAlternateFileName="")) returned 1 [0160.334] wcscmp (_String1="IA32.TUR", _String2=".") returned 1 [0160.334] wcscmp (_String1="IA32.TUR", _String2="..") returned 1 [0160.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bee70 [0160.334] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.334] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.334] wcscat (in: _Dest=0x81bee70, _Source="IA32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" [0160.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur")) returned 0x20 [0160.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR", dwFileAttributes=0x20) returned 0 [0160.334] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.334] GetLastError () returned 0x5 [0160.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR", dwFileAttributes=0x20) returned 0 [0160.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 [0160.335] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.TUR", cAlternateFileName="MAKEAC~1.TUR")) returned 1 [0160.335] wcscmp (_String1="MakeAccessible.TUR", _String2=".") returned 1 [0160.335] wcscmp (_String1="MakeAccessible.TUR", _String2="..") returned 1 [0160.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc0e8 [0160.335] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.335] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.335] wcscat (in: _Dest=0x81dc0e8, _Source="MakeAccessible.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" [0160.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur")) returned 0x20 [0160.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR", dwFileAttributes=0x20) returned 0 [0160.390] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.391] GetLastError () returned 0x5 [0160.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR", dwFileAttributes=0x20) returned 0 [0160.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 [0160.391] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.TUR", cAlternateFileName="MULTIM~1.TUR")) returned 1 [0160.391] wcscmp (_String1="Multimedia.TUR", _String2=".") returned 1 [0160.391] wcscmp (_String1="Multimedia.TUR", _String2="..") returned 1 [0160.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0160.391] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.391] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.391] wcscat (in: _Dest=0x3e3cf58, _Source="Multimedia.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" [0160.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur")) returned 0x20 [0160.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR", dwFileAttributes=0x20) returned 0 [0160.391] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.392] GetLastError () returned 0x5 [0160.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR", dwFileAttributes=0x20) returned 0 [0160.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.392] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.TUR", cAlternateFileName="")) returned 1 [0160.392] wcscmp (_String1="PDDom.TUR", _String2=".") returned 1 [0160.392] wcscmp (_String1="PDDom.TUR", _String2="..") returned 1 [0160.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de968 [0160.392] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.392] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.392] wcscat (in: _Dest=0x81de968, _Source="PDDom.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" [0160.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur")) returned 0x20 [0160.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR", dwFileAttributes=0x20) returned 0 [0160.428] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.429] GetLastError () returned 0x5 [0160.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR", dwFileAttributes=0x20) returned 0 [0160.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.TUR", cAlternateFileName="")) returned 1 [0160.429] wcscmp (_String1="PPKLITE.TUR", _String2=".") returned 1 [0160.429] wcscmp (_String1="PPKLITE.TUR", _String2="..") returned 1 [0160.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de968 [0160.429] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.429] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.429] wcscat (in: _Dest=0x81de968, _Source="PPKLITE.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" [0160.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur")) returned 0x20 [0160.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR", dwFileAttributes=0x20) returned 0 [0160.472] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.472] GetLastError () returned 0x5 [0160.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR", dwFileAttributes=0x20) returned 0 [0160.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.472] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd028ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.TUR", cAlternateFileName="")) returned 1 [0160.472] wcscmp (_String1="RdLang32.TUR", _String2=".") returned 1 [0160.472] wcscmp (_String1="RdLang32.TUR", _String2="..") returned 1 [0160.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de968 [0160.472] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.472] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.472] wcscat (in: _Dest=0x81de968, _Source="RdLang32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" [0160.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur")) returned 0x20 [0160.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR", dwFileAttributes=0x20) returned 0 [0160.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.517] GetLastError () returned 0x5 [0160.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR", dwFileAttributes=0x20) returned 0 [0160.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 [0160.517] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.TUR", cAlternateFileName="READOU~1.TUR")) returned 1 [0160.517] wcscmp (_String1="ReadOutLoud.TUR", _String2=".") returned 1 [0160.517] wcscmp (_String1="ReadOutLoud.TUR", _String2="..") returned 1 [0160.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cd90 [0160.517] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.517] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.518] wcscat (in: _Dest=0x3e3cd90, _Source="ReadOutLoud.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" [0160.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur")) returned 0x20 [0160.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR", dwFileAttributes=0x20) returned 0 [0160.569] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.569] GetLastError () returned 0x5 [0160.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR", dwFileAttributes=0x20) returned 0 [0160.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0160.569] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.TUR", cAlternateFileName="")) returned 1 [0160.569] wcscmp (_String1="Reflow.TUR", _String2=".") returned 1 [0160.569] wcscmp (_String1="Reflow.TUR", _String2="..") returned 1 [0160.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81deb18 [0160.569] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.570] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.570] wcscat (in: _Dest=0x81deb18, _Source="Reflow.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" [0160.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur")) returned 0x20 [0160.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR", dwFileAttributes=0x20) returned 0 [0160.652] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.653] GetLastError () returned 0x5 [0160.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR", dwFileAttributes=0x20) returned 0 [0160.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 [0160.653] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.TUR", cAlternateFileName="SAVEAS~1.TUR")) returned 1 [0160.653] wcscmp (_String1="SaveAsRTF.TUR", _String2=".") returned 1 [0160.653] wcscmp (_String1="SaveAsRTF.TUR", _String2="..") returned 1 [0160.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3de30 [0160.653] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.653] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.653] wcscat (in: _Dest=0x3e3de30, _Source="SaveAsRTF.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" [0160.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur")) returned 0x20 [0160.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR", dwFileAttributes=0x20) returned 0 [0160.731] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.731] GetLastError () returned 0x5 [0160.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR", dwFileAttributes=0x20) returned 0 [0160.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0160.731] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.TUR", cAlternateFileName="")) returned 1 [0160.731] wcscmp (_String1="Search.TUR", _String2=".") returned 1 [0160.731] wcscmp (_String1="Search.TUR", _String2="..") returned 1 [0160.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de8d8 [0160.731] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.731] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.731] wcscat (in: _Dest=0x81de8d8, _Source="Search.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" [0160.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur")) returned 0x20 [0160.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR", dwFileAttributes=0x20) returned 0 [0160.732] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.732] GetLastError () returned 0x5 [0160.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR", dwFileAttributes=0x20) returned 0 [0160.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.733] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.TUR", cAlternateFileName="")) returned 1 [0160.733] wcscmp (_String1="SendMail.TUR", _String2=".") returned 1 [0160.733] wcscmp (_String1="SendMail.TUR", _String2="..") returned 1 [0160.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0160.733] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.733] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.733] wcscat (in: _Dest=0x81de8d8, _Source="SendMail.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" [0160.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur")) returned 0x20 [0160.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR", dwFileAttributes=0x20) returned 0 [0160.733] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.734] GetLastError () returned 0x5 [0160.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR", dwFileAttributes=0x20) returned 0 [0160.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0160.734] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0160.734] wcscmp (_String1="Services", _String2=".") returned 1 [0160.734] wcscmp (_String1="Services", _String2="..") returned 1 [0160.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf2b0 [0160.734] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.734] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.734] wcscat (in: _Dest=0x81bf2b0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0160.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de8d8 [0160.735] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0160.735] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\" [0160.735] wcscat (in: _Dest=0x81de8d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*" [0160.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100870 [0160.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0160.850] wcscmp (_String1=".", _String2=".") returned 0 [0160.850] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.850] wcscmp (_String1="..", _String2=".") returned 1 [0160.850] wcscmp (_String1="..", _String2="..") returned 0 [0160.850] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9270, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0160.850] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0160.850] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0160.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8188138 [0160.851] wcscpy (in: _Dest=0x8188138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0160.851] wcscat (in: _Dest=0x8188138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\" [0160.851] wcscat (in: _Dest=0x8188138, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" [0160.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx")) returned 0x20 [0162.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.274] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.274] GetLastError () returned 0x5 [0162.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188138) returned 1 [0162.274] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0162.274] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0162.274] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0162.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8188138 [0162.274] wcscpy (in: _Dest=0x8188138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0162.274] wcscat (in: _Dest=0x8188138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\" [0162.274] wcscat (in: _Dest=0x8188138, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" [0162.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28ac [0162.987] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0162.987] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0162.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100870) returned 1 [0162.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 [0162.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 [0162.987] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.TUR", cAlternateFileName="")) returned 1 [0162.987] wcscmp (_String1="Spelling.TUR", _String2=".") returned 1 [0162.987] wcscmp (_String1="Spelling.TUR", _String2="..") returned 1 [0162.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0162.988] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0162.988] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0162.988] wcscat (in: _Dest=0x81de8d8, _Source="Spelling.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" [0162.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0162.997] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.TUR", cAlternateFileName="")) returned 1 [0162.997] wcscmp (_String1="Updater.TUR", _String2=".") returned 1 [0162.997] wcscmp (_String1="Updater.TUR", _String2="..") returned 1 [0162.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df1d8 [0162.997] wcscpy (in: _Dest=0x81df1d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0162.997] wcscat (in: _Dest=0x81df1d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0162.997] wcscat (in: _Dest=0x81df1d8, _Source="Updater.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" [0162.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0162.998] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 1 [0162.998] wcscmp (_String1="Weblink.TUR", _String2=".") returned 1 [0162.998] wcscmp (_String1="Weblink.TUR", _String2="..") returned 1 [0162.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df418 [0162.998] wcscpy (in: _Dest=0x81df418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0162.998] wcscat (in: _Dest=0x81df418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0162.998] wcscat (in: _Dest=0x81df418, _Source="Weblink.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" [0162.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2998 [0162.999] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3efd788 | out: lpFindFileData=0x3efd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 0 [0162.999] FindClose (in: hFindFile=0x3f379d8 | out: hFindFile=0x3f379d8) returned 1 [0163.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efd788) returned 1 [0163.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b058) returned 1 [0163.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 Thread: id = 2162 os_tid = 0x1d68 [0152.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831a9d8 [0152.364] wcscpy (in: _Dest=0x831a9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0152.364] wcscat (in: _Dest=0x831a9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0152.364] wcscat (in: _Dest=0x831a9d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*" [0152.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efd9f0 [0152.364] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37998 [0157.231] wcscmp (_String1=".", _String2=".") returned 0 [0157.231] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.231] wcscmp (_String1="..", _String2=".") returned 1 [0157.231] wcscmp (_String1="..", _String2="..") returned 0 [0157.231] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.UKR", cAlternateFileName="ACCESS~1.UKR")) returned 1 [0157.231] wcscmp (_String1="Accessibility.UKR", _String2=".") returned 1 [0157.231] wcscmp (_String1="Accessibility.UKR", _String2="..") returned 1 [0157.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc908 [0157.231] wcscpy (in: _Dest=0x81dc908, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0157.231] wcscat (in: _Dest=0x81dc908, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0157.231] wcscat (in: _Dest=0x81dc908, _Source="Accessibility.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" [0160.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr")) returned 0x20 [0160.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR", dwFileAttributes=0x20) returned 0 [0160.979] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.979] GetLastError () returned 0x5 [0160.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR", dwFileAttributes=0x20) returned 0 [0160.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc908) returned 1 [0160.979] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1745c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x65600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.UKR", cAlternateFileName="")) returned 1 [0160.979] wcscmp (_String1="Acroform.UKR", _String2=".") returned 1 [0160.979] wcscmp (_String1="Acroform.UKR", _String2="..") returned 1 [0160.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df0b8 [0160.980] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0160.980] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0160.980] wcscat (in: _Dest=0x81df0b8, _Source="Acroform.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" [0160.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr")) returned 0x20 [0161.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR", dwFileAttributes=0x20) returned 0 [0161.029] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.029] GetLastError () returned 0x5 [0161.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR", dwFileAttributes=0x20) returned 0 [0161.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0161.030] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.UKR", cAlternateFileName="ADOBEC~1.UKR")) returned 1 [0161.030] wcscmp (_String1="AdobeCollabSync.UKR", _String2=".") returned 1 [0161.030] wcscmp (_String1="AdobeCollabSync.UKR", _String2="..") returned 1 [0161.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc9a8 [0161.030] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.030] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.030] wcscat (in: _Dest=0x81dc9a8, _Source="AdobeCollabSync.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" [0161.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr")) returned 0x20 [0161.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR", dwFileAttributes=0x20) returned 0 [0161.031] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.031] GetLastError () returned 0x5 [0161.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR", dwFileAttributes=0x20) returned 0 [0161.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 [0161.032] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.UKR", cAlternateFileName="")) returned 1 [0161.032] wcscmp (_String1="Annots.UKR", _String2=".") returned 1 [0161.032] wcscmp (_String1="Annots.UKR", _String2="..") returned 1 [0161.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df0b8 [0161.032] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.032] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.032] wcscat (in: _Dest=0x81df0b8, _Source="Annots.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" [0161.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr")) returned 0x20 [0161.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR", dwFileAttributes=0x20) returned 0 [0161.033] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.033] GetLastError () returned 0x5 [0161.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR", dwFileAttributes=0x20) returned 0 [0161.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0161.033] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.UKR", cAlternateFileName="BRDLAN~1.UKR")) returned 1 [0161.034] wcscmp (_String1="BRdlang32.UKR", _String2=".") returned 1 [0161.034] wcscmp (_String1="BRdlang32.UKR", _String2="..") returned 1 [0161.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0161.034] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.034] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.034] wcscat (in: _Dest=0x3e3cf58, _Source="BRdlang32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" [0161.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr")) returned 0x20 [0161.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR", dwFileAttributes=0x20) returned 0 [0161.035] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.035] GetLastError () returned 0x5 [0161.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR", dwFileAttributes=0x20) returned 0 [0161.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.035] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1745c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.UKR", cAlternateFileName="")) returned 1 [0161.035] wcscmp (_String1="Checkers.UKR", _String2=".") returned 1 [0161.035] wcscmp (_String1="Checkers.UKR", _String2="..") returned 1 [0161.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df0b8 [0161.035] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.036] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.036] wcscat (in: _Dest=0x81df0b8, _Source="Checkers.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" [0161.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr")) returned 0x20 [0161.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR", dwFileAttributes=0x20) returned 0 [0161.036] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.037] GetLastError () returned 0x5 [0161.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR", dwFileAttributes=0x20) returned 0 [0161.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0161.037] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.UKR", cAlternateFileName="")) returned 1 [0161.037] wcscmp (_String1="DigSig.UKR", _String2=".") returned 1 [0161.037] wcscmp (_String1="DigSig.UKR", _String2="..") returned 1 [0161.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df0b8 [0161.037] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.037] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.037] wcscat (in: _Dest=0x81df0b8, _Source="DigSig.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" [0161.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr")) returned 0x20 [0161.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR", dwFileAttributes=0x20) returned 0 [0161.038] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.039] GetLastError () returned 0x5 [0161.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR", dwFileAttributes=0x20) returned 0 [0161.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0161.039] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.UKR", cAlternateFileName="")) returned 1 [0161.039] wcscmp (_String1="DVA.UKR", _String2=".") returned 1 [0161.039] wcscmp (_String1="DVA.UKR", _String2="..") returned 1 [0161.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81c0190 [0161.039] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.039] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.039] wcscat (in: _Dest=0x81c0190, _Source="DVA.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" [0161.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr")) returned 0x20 [0161.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR", dwFileAttributes=0x20) returned 0 [0161.040] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.040] GetLastError () returned 0x5 [0161.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR", dwFileAttributes=0x20) returned 0 [0161.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 [0161.041] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.UKR", cAlternateFileName="")) returned 1 [0161.041] wcscmp (_String1="eBook.UKR", _String2=".") returned 1 [0161.041] wcscmp (_String1="eBook.UKR", _String2="..") returned 1 [0161.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df0b8 [0161.041] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.041] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.041] wcscat (in: _Dest=0x81df0b8, _Source="eBook.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" [0161.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr")) returned 0x20 [0161.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR", dwFileAttributes=0x20) returned 0 [0161.042] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.042] GetLastError () returned 0x5 [0161.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR", dwFileAttributes=0x20) returned 0 [0161.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0161.042] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.UKR", cAlternateFileName="")) returned 1 [0161.042] wcscmp (_String1="EScript.UKR", _String2=".") returned 1 [0161.042] wcscmp (_String1="EScript.UKR", _String2="..") returned 1 [0161.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df0b8 [0161.042] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.042] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.043] wcscat (in: _Dest=0x81df0b8, _Source="EScript.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" [0161.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr")) returned 0x20 [0161.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR", dwFileAttributes=0x20) returned 0 [0161.085] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.086] GetLastError () returned 0x5 [0161.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR", dwFileAttributes=0x20) returned 0 [0161.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0161.086] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.UKR", cAlternateFileName="")) returned 1 [0161.086] wcscmp (_String1="IA32.UKR", _String2=".") returned 1 [0161.086] wcscmp (_String1="IA32.UKR", _String2="..") returned 1 [0161.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bea30 [0161.086] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.087] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.087] wcscat (in: _Dest=0x81bea30, _Source="IA32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" [0161.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr")) returned 0x20 [0161.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR", dwFileAttributes=0x20) returned 0 [0161.087] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.087] GetLastError () returned 0x5 [0161.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR", dwFileAttributes=0x20) returned 0 [0161.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 [0161.088] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.UKR", cAlternateFileName="MAKEAC~1.UKR")) returned 1 [0161.088] wcscmp (_String1="MakeAccessible.UKR", _String2=".") returned 1 [0161.088] wcscmp (_String1="MakeAccessible.UKR", _String2="..") returned 1 [0161.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc9a8 [0161.088] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.088] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.088] wcscat (in: _Dest=0x81dc9a8, _Source="MakeAccessible.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" [0161.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr")) returned 0x20 [0161.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR", dwFileAttributes=0x20) returned 0 [0161.089] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.090] GetLastError () returned 0x5 [0161.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR", dwFileAttributes=0x20) returned 0 [0161.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 [0161.090] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.UKR", cAlternateFileName="MULTIM~1.UKR")) returned 1 [0161.090] wcscmp (_String1="Multimedia.UKR", _String2=".") returned 1 [0161.090] wcscmp (_String1="Multimedia.UKR", _String2="..") returned 1 [0161.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cd90 [0161.091] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.091] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.091] wcscat (in: _Dest=0x3e3cd90, _Source="Multimedia.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" [0161.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr")) returned 0x20 [0161.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR", dwFileAttributes=0x20) returned 0 [0161.091] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.092] GetLastError () returned 0x5 [0161.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR", dwFileAttributes=0x20) returned 0 [0161.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0161.092] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.UKR", cAlternateFileName="")) returned 1 [0161.092] wcscmp (_String1="PDDom.UKR", _String2=".") returned 1 [0161.092] wcscmp (_String1="PDDom.UKR", _String2="..") returned 1 [0161.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df0b8 [0161.093] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.093] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.093] wcscat (in: _Dest=0x81df0b8, _Source="PDDom.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" [0161.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr")) returned 0x20 [0161.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR", dwFileAttributes=0x20) returned 0 [0161.094] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.094] GetLastError () returned 0x5 [0161.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR", dwFileAttributes=0x20) returned 0 [0161.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0161.095] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.UKR", cAlternateFileName="")) returned 1 [0161.095] wcscmp (_String1="PPKLITE.UKR", _String2=".") returned 1 [0161.095] wcscmp (_String1="PPKLITE.UKR", _String2="..") returned 1 [0161.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df0b8 [0161.095] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.095] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.095] wcscat (in: _Dest=0x81df0b8, _Source="PPKLITE.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" [0161.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr")) returned 0x20 [0161.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR", dwFileAttributes=0x20) returned 0 [0161.096] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.096] GetLastError () returned 0x5 [0161.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR", dwFileAttributes=0x20) returned 0 [0161.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0161.096] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd002960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.UKR", cAlternateFileName="")) returned 1 [0161.096] wcscmp (_String1="RdLang32.UKR", _String2=".") returned 1 [0161.096] wcscmp (_String1="RdLang32.UKR", _String2="..") returned 1 [0161.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df0b8 [0161.096] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.096] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.096] wcscat (in: _Dest=0x81df0b8, _Source="RdLang32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" [0161.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr")) returned 0x20 [0161.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR", dwFileAttributes=0x20) returned 0 [0161.097] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.097] GetLastError () returned 0x5 [0161.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR", dwFileAttributes=0x20) returned 0 [0161.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0161.098] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.UKR", cAlternateFileName="READOU~1.UKR")) returned 1 [0161.098] wcscmp (_String1="ReadOutLoud.UKR", _String2=".") returned 1 [0161.098] wcscmp (_String1="ReadOutLoud.UKR", _String2="..") returned 1 [0161.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cd90 [0161.098] wcscpy (in: _Dest=0x3e3cd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.098] wcscat (in: _Dest=0x3e3cd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.098] wcscat (in: _Dest=0x3e3cd90, _Source="ReadOutLoud.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" [0161.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr")) returned 0x20 [0161.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR", dwFileAttributes=0x20) returned 0 [0161.099] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.099] GetLastError () returned 0x5 [0161.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR", dwFileAttributes=0x20) returned 0 [0161.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 [0161.100] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.UKR", cAlternateFileName="")) returned 1 [0161.100] wcscmp (_String1="Reflow.UKR", _String2=".") returned 1 [0161.100] wcscmp (_String1="Reflow.UKR", _String2="..") returned 1 [0161.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df0b8 [0161.100] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0161.100] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0161.100] wcscat (in: _Dest=0x81df0b8, _Source="Reflow.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" [0161.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr")) returned 0x20 [0162.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR", dwFileAttributes=0x20) returned 0 [0162.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.282] GetLastError () returned 0x5 [0162.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR", dwFileAttributes=0x20) returned 0 [0162.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 [0162.283] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.UKR", cAlternateFileName="SAVEAS~1.UKR")) returned 1 [0162.283] wcscmp (_String1="SaveAsRTF.UKR", _String2=".") returned 1 [0162.283] wcscmp (_String1="SaveAsRTF.UKR", _String2="..") returned 1 [0162.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3de30 [0162.283] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0162.283] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0162.283] wcscat (in: _Dest=0x3e3de30, _Source="SaveAsRTF.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" [0166.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3de30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b0 [0166.021] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.UKR", cAlternateFileName="")) returned 1 [0166.021] wcscmp (_String1="Search.UKR", _String2=".") returned 1 [0166.021] wcscmp (_String1="Search.UKR", _String2="..") returned 1 [0166.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ddd98 [0166.021] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0166.021] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0166.021] wcscat (in: _Dest=0x81ddd98, _Source="Search.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" [0166.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26f8 [0166.022] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.UKR", cAlternateFileName="")) returned 1 [0166.022] wcscmp (_String1="SendMail.UKR", _String2=".") returned 1 [0166.022] wcscmp (_String1="SendMail.UKR", _String2="..") returned 1 [0166.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de9f8 [0166.022] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0166.022] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0166.022] wcscat (in: _Dest=0x81de9f8, _Source="SendMail.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" [0166.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2524 [0166.023] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0166.023] wcscmp (_String1="Services", _String2=".") returned 1 [0166.023] wcscmp (_String1="Services", _String2="..") returned 1 [0166.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0166.023] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0166.023] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0166.023] wcscat (in: _Dest=0x81bebc8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0166.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26f4 [0166.024] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.UKR", cAlternateFileName="")) returned 1 [0166.024] wcscmp (_String1="Spelling.UKR", _String2=".") returned 1 [0166.024] wcscmp (_String1="Spelling.UKR", _String2="..") returned 1 [0166.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dede8 [0166.024] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0166.024] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0166.025] wcscat (in: _Dest=0x81dede8, _Source="Spelling.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" [0166.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x251c [0166.026] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.UKR", cAlternateFileName="")) returned 1 [0166.026] wcscmp (_String1="Updater.UKR", _String2=".") returned 1 [0166.026] wcscmp (_String1="Updater.UKR", _String2="..") returned 1 [0166.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81dde28 [0166.026] wcscpy (in: _Dest=0x81dde28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0166.026] wcscat (in: _Dest=0x81dde28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0166.026] wcscat (in: _Dest=0x81dde28, _Source="Updater.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" [0166.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dde28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26f0 [0166.027] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 1 [0166.027] wcscmp (_String1="Weblink.UKR", _String2=".") returned 1 [0166.027] wcscmp (_String1="Weblink.UKR", _String2="..") returned 1 [0166.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de7b8 [0166.027] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0166.027] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0166.027] wcscat (in: _Dest=0x81de7b8, _Source="Weblink.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" [0166.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2514 [0166.028] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3efd9f0 | out: lpFindFileData=0x3efd9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 0 [0166.028] FindClose (in: hFindFile=0x3f37998 | out: hFindFile=0x3f37998) returned 1 [0166.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efd9f0) returned 1 [0166.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a9d8) returned 1 [0166.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68240) returned 1 Thread: id = 2163 os_tid = 0x1d6c [0152.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831b258 [0152.364] wcscpy (in: _Dest=0x831b258, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0152.364] wcscat (in: _Dest=0x831b258, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0152.364] wcscat (in: _Dest=0x831b258, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*" [0152.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efdc58 [0152.365] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9942f60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37cd8 [0157.230] wcscmp (_String1=".", _String2=".") returned 0 [0157.230] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9942f60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.230] wcscmp (_String1="..", _String2=".") returned 1 [0157.230] wcscmp (_String1="..", _String2="..") returned 0 [0157.230] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHS", cAlternateFileName="ACCESS~1.CHS")) returned 1 [0157.230] wcscmp (_String1="accessibility.CHS", _String2=".") returned 1 [0157.230] wcscmp (_String1="accessibility.CHS", _String2="..") returned 1 [0157.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc868 [0157.230] wcscpy (in: _Dest=0x81dc868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0157.230] wcscat (in: _Dest=0x81dc868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0157.231] wcscat (in: _Dest=0x81dc868, _Source="accessibility.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" [0160.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs")) returned 0x20 [0160.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS", dwFileAttributes=0x20) returned 0 [0160.956] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.956] GetLastError () returned 0x5 [0160.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS", dwFileAttributes=0x20) returned 0 [0160.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc868) returned 1 [0160.956] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHS", cAlternateFileName="")) returned 1 [0160.957] wcscmp (_String1="Acroform.CHS", _String2=".") returned 1 [0160.957] wcscmp (_String1="Acroform.CHS", _String2="..") returned 1 [0160.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df028 [0160.957] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.957] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.957] wcscat (in: _Dest=0x81df028, _Source="Acroform.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" [0160.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs")) returned 0x20 [0160.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS", dwFileAttributes=0x20) returned 0 [0160.957] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.957] GetLastError () returned 0x5 [0160.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS", dwFileAttributes=0x20) returned 0 [0160.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0160.958] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHS", cAlternateFileName="ADOBEC~1.CHS")) returned 1 [0160.958] wcscmp (_String1="AdobeCollabSync.CHS", _String2=".") returned 1 [0160.958] wcscmp (_String1="AdobeCollabSync.CHS", _String2="..") returned 1 [0160.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc868 [0160.958] wcscpy (in: _Dest=0x81dc868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.958] wcscat (in: _Dest=0x81dc868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.958] wcscat (in: _Dest=0x81dc868, _Source="AdobeCollabSync.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" [0160.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs")) returned 0x20 [0160.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS", dwFileAttributes=0x20) returned 0 [0160.958] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.959] GetLastError () returned 0x5 [0160.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS", dwFileAttributes=0x20) returned 0 [0160.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc868) returned 1 [0160.959] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHS", cAlternateFileName="")) returned 1 [0160.959] wcscmp (_String1="Annots.CHS", _String2=".") returned 1 [0160.959] wcscmp (_String1="Annots.CHS", _String2="..") returned 1 [0160.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df028 [0160.959] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.959] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.959] wcscat (in: _Dest=0x81df028, _Source="Annots.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" [0160.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs")) returned 0x20 [0160.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS", dwFileAttributes=0x20) returned 0 [0160.960] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.960] GetLastError () returned 0x5 [0160.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS", dwFileAttributes=0x20) returned 0 [0160.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0160.960] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHS", cAlternateFileName="BRDLAN~1.CHS")) returned 1 [0160.960] wcscmp (_String1="BRdlang32.CHS", _String2=".") returned 1 [0160.960] wcscmp (_String1="BRdlang32.CHS", _String2="..") returned 1 [0160.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0160.960] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.961] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.961] wcscat (in: _Dest=0x3e3cf58, _Source="BRdlang32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" [0160.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs")) returned 0x20 [0160.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS", dwFileAttributes=0x20) returned 0 [0160.961] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.961] GetLastError () returned 0x5 [0160.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS", dwFileAttributes=0x20) returned 0 [0160.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0160.961] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHS", cAlternateFileName="")) returned 1 [0160.961] wcscmp (_String1="Checkers.CHS", _String2=".") returned 1 [0160.962] wcscmp (_String1="Checkers.CHS", _String2="..") returned 1 [0160.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df028 [0160.962] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.962] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.962] wcscat (in: _Dest=0x81df028, _Source="Checkers.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" [0160.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs")) returned 0x20 [0160.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS", dwFileAttributes=0x20) returned 0 [0160.962] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.962] GetLastError () returned 0x5 [0160.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS", dwFileAttributes=0x20) returned 0 [0160.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0160.963] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHS", cAlternateFileName="")) returned 1 [0160.963] wcscmp (_String1="DigSig.CHS", _String2=".") returned 1 [0160.963] wcscmp (_String1="DigSig.CHS", _String2="..") returned 1 [0160.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df028 [0160.963] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.963] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.963] wcscat (in: _Dest=0x81df028, _Source="DigSig.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" [0160.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs")) returned 0x20 [0160.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS", dwFileAttributes=0x20) returned 0 [0160.981] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.981] GetLastError () returned 0x5 [0160.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS", dwFileAttributes=0x20) returned 0 [0160.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0160.981] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHS", cAlternateFileName="")) returned 1 [0160.981] wcscmp (_String1="DVA.CHS", _String2=".") returned 1 [0160.981] wcscmp (_String1="DVA.CHS", _String2="..") returned 1 [0160.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf1a0 [0160.981] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.982] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.982] wcscat (in: _Dest=0x81bf1a0, _Source="DVA.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" [0160.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs")) returned 0x20 [0160.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS", dwFileAttributes=0x20) returned 0 [0160.982] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.982] GetLastError () returned 0x5 [0160.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS", dwFileAttributes=0x20) returned 0 [0160.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 [0160.982] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHS", cAlternateFileName="")) returned 1 [0160.983] wcscmp (_String1="eBook.CHS", _String2=".") returned 1 [0160.983] wcscmp (_String1="eBook.CHS", _String2="..") returned 1 [0160.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df028 [0160.983] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.983] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.983] wcscat (in: _Dest=0x81df028, _Source="eBook.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" [0160.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs")) returned 0x20 [0160.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS", dwFileAttributes=0x20) returned 0 [0160.983] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.983] GetLastError () returned 0x5 [0160.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS", dwFileAttributes=0x20) returned 0 [0160.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0160.984] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHS", cAlternateFileName="")) returned 1 [0160.984] wcscmp (_String1="EScript.CHS", _String2=".") returned 1 [0160.984] wcscmp (_String1="EScript.CHS", _String2="..") returned 1 [0160.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df028 [0160.984] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.984] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.984] wcscat (in: _Dest=0x81df028, _Source="EScript.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" [0160.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs")) returned 0x20 [0161.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS", dwFileAttributes=0x20) returned 0 [0161.044] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.044] GetLastError () returned 0x5 [0161.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS", dwFileAttributes=0x20) returned 0 [0161.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0161.045] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHS", cAlternateFileName="")) returned 1 [0161.045] wcscmp (_String1="IA32.CHS", _String2=".") returned 1 [0161.045] wcscmp (_String1="IA32.CHS", _String2="..") returned 1 [0161.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0161.045] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.045] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.045] wcscat (in: _Dest=0x81c0190, _Source="IA32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" [0161.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs")) returned 0x20 [0161.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS", dwFileAttributes=0x20) returned 0 [0161.046] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.046] GetLastError () returned 0x5 [0161.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS", dwFileAttributes=0x20) returned 0 [0161.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 [0161.046] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHS", cAlternateFileName="MAKEAC~1.CHS")) returned 1 [0161.046] wcscmp (_String1="makeaccessible.CHS", _String2=".") returned 1 [0161.046] wcscmp (_String1="makeaccessible.CHS", _String2="..") returned 1 [0161.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc9a8 [0161.047] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.047] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.047] wcscat (in: _Dest=0x81dc9a8, _Source="makeaccessible.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" [0161.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs")) returned 0x20 [0161.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS", dwFileAttributes=0x20) returned 0 [0161.047] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.047] GetLastError () returned 0x5 [0161.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS", dwFileAttributes=0x20) returned 0 [0161.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 [0161.048] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9942f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHS", cAlternateFileName="MULTIM~1.CHS")) returned 1 [0161.048] wcscmp (_String1="Multimedia.CHS", _String2=".") returned 1 [0161.048] wcscmp (_String1="Multimedia.CHS", _String2="..") returned 1 [0161.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3cf58 [0161.048] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.048] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.048] wcscat (in: _Dest=0x3e3cf58, _Source="Multimedia.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" [0161.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs")) returned 0x20 [0161.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS", dwFileAttributes=0x20) returned 0 [0161.048] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.048] GetLastError () returned 0x5 [0161.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS", dwFileAttributes=0x20) returned 0 [0161.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.049] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHS", cAlternateFileName="")) returned 1 [0161.049] wcscmp (_String1="pddom.CHS", _String2=".") returned 1 [0161.049] wcscmp (_String1="pddom.CHS", _String2="..") returned 1 [0161.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df028 [0161.049] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.049] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.049] wcscat (in: _Dest=0x81df028, _Source="pddom.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" [0161.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs")) returned 0x20 [0161.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS", dwFileAttributes=0x20) returned 0 [0161.049] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.050] GetLastError () returned 0x5 [0161.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS", dwFileAttributes=0x20) returned 0 [0161.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0161.050] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHS", cAlternateFileName="")) returned 1 [0161.050] wcscmp (_String1="PPKLITE.CHS", _String2=".") returned 1 [0161.050] wcscmp (_String1="PPKLITE.CHS", _String2="..") returned 1 [0161.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81df028 [0161.050] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.050] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.050] wcscat (in: _Dest=0x81df028, _Source="PPKLITE.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" [0161.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs")) returned 0x20 [0161.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS", dwFileAttributes=0x20) returned 0 [0161.050] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.051] GetLastError () returned 0x5 [0161.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS", dwFileAttributes=0x20) returned 0 [0161.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0161.051] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHS", cAlternateFileName="")) returned 1 [0161.051] wcscmp (_String1="RdLang32.CHS", _String2=".") returned 1 [0161.051] wcscmp (_String1="RdLang32.CHS", _String2="..") returned 1 [0161.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df028 [0161.051] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.051] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.051] wcscat (in: _Dest=0x81df028, _Source="RdLang32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" [0161.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs")) returned 0x20 [0161.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS", dwFileAttributes=0x20) returned 0 [0161.052] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.052] GetLastError () returned 0x5 [0161.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS", dwFileAttributes=0x20) returned 0 [0161.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0161.052] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHS", cAlternateFileName="READOU~1.CHS")) returned 1 [0161.052] wcscmp (_String1="ReadOutLoud.CHS", _String2=".") returned 1 [0161.052] wcscmp (_String1="ReadOutLoud.CHS", _String2="..") returned 1 [0161.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e3cf58 [0161.052] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.052] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.052] wcscat (in: _Dest=0x3e3cf58, _Source="ReadOutLoud.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" [0161.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs")) returned 0x20 [0161.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS", dwFileAttributes=0x20) returned 0 [0161.053] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.053] GetLastError () returned 0x5 [0161.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS", dwFileAttributes=0x20) returned 0 [0161.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.053] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHS", cAlternateFileName="")) returned 1 [0161.053] wcscmp (_String1="reflow.CHS", _String2=".") returned 1 [0161.053] wcscmp (_String1="reflow.CHS", _String2="..") returned 1 [0161.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df028 [0161.053] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.053] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.053] wcscat (in: _Dest=0x81df028, _Source="reflow.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" [0161.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs")) returned 0x20 [0161.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS", dwFileAttributes=0x20) returned 0 [0161.054] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.054] GetLastError () returned 0x5 [0161.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS", dwFileAttributes=0x20) returned 0 [0161.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0161.055] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHS", cAlternateFileName="SAVEAS~1.CHS")) returned 1 [0161.055] wcscmp (_String1="SaveAsRTF.CHS", _String2=".") returned 1 [0161.055] wcscmp (_String1="SaveAsRTF.CHS", _String2="..") returned 1 [0161.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3cf58 [0161.055] wcscpy (in: _Dest=0x3e3cf58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.055] wcscat (in: _Dest=0x3e3cf58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.055] wcscat (in: _Dest=0x3e3cf58, _Source="SaveAsRTF.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" [0161.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs")) returned 0x20 [0161.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS", dwFileAttributes=0x20) returned 0 [0161.056] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.056] GetLastError () returned 0x5 [0161.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS", dwFileAttributes=0x20) returned 0 [0161.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 [0161.057] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHS", cAlternateFileName="")) returned 1 [0161.057] wcscmp (_String1="Search.CHS", _String2=".") returned 1 [0161.057] wcscmp (_String1="Search.CHS", _String2="..") returned 1 [0161.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df028 [0161.057] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.057] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.057] wcscat (in: _Dest=0x81df028, _Source="Search.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" [0161.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs")) returned 0x20 [0161.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS", dwFileAttributes=0x20) returned 0 [0161.058] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.058] GetLastError () returned 0x5 [0161.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS", dwFileAttributes=0x20) returned 0 [0161.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0161.058] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHS", cAlternateFileName="")) returned 1 [0161.059] wcscmp (_String1="SendMail.CHS", _String2=".") returned 1 [0161.059] wcscmp (_String1="SendMail.CHS", _String2="..") returned 1 [0161.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df028 [0161.059] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.059] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.059] wcscat (in: _Dest=0x81df028, _Source="SendMail.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" [0161.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs")) returned 0x20 [0161.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS", dwFileAttributes=0x20) returned 0 [0161.060] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.060] GetLastError () returned 0x5 [0161.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS", dwFileAttributes=0x20) returned 0 [0161.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0161.060] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0161.060] wcscmp (_String1="Services", _String2=".") returned 1 [0161.061] wcscmp (_String1="Services", _String2="..") returned 1 [0161.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0190 [0161.061] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.061] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.061] wcscat (in: _Dest=0x81c0190, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0161.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df028 [0161.061] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0161.061] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\" [0161.061] wcscat (in: _Dest=0x81df028, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*" [0161.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81003a0 [0161.061] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0161.101] wcscmp (_String1=".", _String2=".") returned 0 [0161.101] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.102] wcscmp (_String1="..", _String2=".") returned 1 [0161.102] wcscmp (_String1="..", _String2="..") returned 0 [0161.102] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x899d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0161.102] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0161.102] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0161.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81874c0 [0161.102] wcscpy (in: _Dest=0x81874c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0161.102] wcscat (in: _Dest=0x81874c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\" [0161.102] wcscat (in: _Dest=0x81874c0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" [0161.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx")) returned 0x20 [0162.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.284] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.284] GetLastError () returned 0x5 [0162.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0162.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81874c0) returned 1 [0162.285] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0162.285] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0162.285] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0162.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81874c0 [0162.285] wcscpy (in: _Dest=0x81874c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0162.285] wcscat (in: _Dest=0x81874c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\" [0162.285] wcscat (in: _Dest=0x81874c0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" [0164.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81874c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28bc [0164.623] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0164.623] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0164.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81003a0) returned 1 [0164.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 [0164.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 [0164.623] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHS", cAlternateFileName="")) returned 1 [0164.623] wcscmp (_String1="Spelling.CHS", _String2=".") returned 1 [0164.623] wcscmp (_String1="Spelling.CHS", _String2="..") returned 1 [0164.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df028 [0164.623] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0164.623] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0164.623] wcscat (in: _Dest=0x81df028, _Source="Spelling.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" [0164.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae4 [0164.624] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHS", cAlternateFileName="")) returned 1 [0164.624] wcscmp (_String1="updater.CHS", _String2=".") returned 1 [0164.624] wcscmp (_String1="updater.CHS", _String2="..") returned 1 [0164.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de218 [0164.625] wcscpy (in: _Dest=0x81de218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0164.625] wcscat (in: _Dest=0x81de218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0164.625] wcscat (in: _Dest=0x81de218, _Source="updater.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" [0164.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2848 [0164.626] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 1 [0164.626] wcscmp (_String1="Weblink.CHS", _String2=".") returned 1 [0164.626] wcscmp (_String1="Weblink.CHS", _String2="..") returned 1 [0164.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de0f8 [0164.626] wcscpy (in: _Dest=0x81de0f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0164.626] wcscat (in: _Dest=0x81de0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0164.626] wcscat (in: _Dest=0x81de0f8, _Source="Weblink.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" [0164.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2844 [0164.627] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x3efdc58 | out: lpFindFileData=0x3efdc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 0 [0164.627] FindClose (in: hFindFile=0x3f37cd8 | out: hFindFile=0x3f37cd8) returned 1 [0164.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efdc58) returned 1 [0164.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b258) returned 1 [0164.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 Thread: id = 2164 os_tid = 0x1d70 [0152.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4b88 [0152.975] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0152.975] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0152.975] wcscat (in: _Dest=0x3dc4b88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*" [0152.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe6c0 [0152.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ad8 [0158.438] wcscmp (_String1=".", _String2=".") returned 0 [0158.438] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.438] wcscmp (_String1="..", _String2=".") returned 1 [0158.438] wcscmp (_String1="..", _String2="..") returned 0 [0158.438] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHT", cAlternateFileName="ACCESS~1.CHT")) returned 1 [0158.438] wcscmp (_String1="accessibility.CHT", _String2=".") returned 1 [0158.439] wcscmp (_String1="accessibility.CHT", _String2="..") returned 1 [0158.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dcea8 [0158.439] wcscpy (in: _Dest=0x81dcea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0158.439] wcscat (in: _Dest=0x81dcea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0158.439] wcscat (in: _Dest=0x81dcea8, _Source="accessibility.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" [0159.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht")) returned 0x20 [0159.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT", dwFileAttributes=0x20) returned 0 [0159.846] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.846] GetLastError () returned 0x5 [0159.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT", dwFileAttributes=0x20) returned 0 [0159.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcea8) returned 1 [0159.846] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHT", cAlternateFileName="")) returned 1 [0159.846] wcscmp (_String1="Acroform.CHT", _String2=".") returned 1 [0159.846] wcscmp (_String1="Acroform.CHT", _String2="..") returned 1 [0159.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de698 [0159.846] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.846] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.846] wcscat (in: _Dest=0x81de698, _Source="Acroform.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" [0159.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht")) returned 0x20 [0159.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT", dwFileAttributes=0x20) returned 0 [0159.852] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.852] GetLastError () returned 0x5 [0159.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT", dwFileAttributes=0x20) returned 0 [0159.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 [0159.853] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHT", cAlternateFileName="ADOBEC~1.CHT")) returned 1 [0159.853] wcscmp (_String1="AdobeCollabSync.CHT", _String2=".") returned 1 [0159.853] wcscmp (_String1="AdobeCollabSync.CHT", _String2="..") returned 1 [0159.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcf48 [0159.853] wcscpy (in: _Dest=0x81dcf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.853] wcscat (in: _Dest=0x81dcf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.853] wcscat (in: _Dest=0x81dcf48, _Source="AdobeCollabSync.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" [0159.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht")) returned 0x20 [0159.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT", dwFileAttributes=0x20) returned 0 [0159.854] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.854] GetLastError () returned 0x5 [0159.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT", dwFileAttributes=0x20) returned 0 [0159.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcf48) returned 1 [0159.854] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13b3b00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHT", cAlternateFileName="")) returned 1 [0159.854] wcscmp (_String1="Annots.CHT", _String2=".") returned 1 [0159.854] wcscmp (_String1="Annots.CHT", _String2="..") returned 1 [0159.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de698 [0159.854] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.854] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.854] wcscat (in: _Dest=0x81de698, _Source="Annots.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" [0159.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht")) returned 0x20 [0159.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT", dwFileAttributes=0x20) returned 0 [0159.855] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.855] GetLastError () returned 0x5 [0159.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT", dwFileAttributes=0x20) returned 0 [0159.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 [0159.855] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHT", cAlternateFileName="BRDLAN~1.CHT")) returned 1 [0159.855] wcscmp (_String1="BRdlang32.CHT", _String2=".") returned 1 [0159.855] wcscmp (_String1="BRdlang32.CHT", _String2="..") returned 1 [0159.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0159.855] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.855] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.855] wcscat (in: _Dest=0x32cf48, _Source="BRdlang32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" [0159.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht")) returned 0x20 [0159.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT", dwFileAttributes=0x20) returned 0 [0159.869] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.869] GetLastError () returned 0x5 [0159.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT", dwFileAttributes=0x20) returned 0 [0159.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.869] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHT", cAlternateFileName="")) returned 1 [0159.870] wcscmp (_String1="Checkers.CHT", _String2=".") returned 1 [0159.870] wcscmp (_String1="Checkers.CHT", _String2="..") returned 1 [0159.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de728 [0159.870] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.870] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.870] wcscat (in: _Dest=0x81de728, _Source="Checkers.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" [0159.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht")) returned 0x20 [0159.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT", dwFileAttributes=0x20) returned 0 [0159.875] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.875] GetLastError () returned 0x5 [0159.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT", dwFileAttributes=0x20) returned 0 [0159.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.875] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHT", cAlternateFileName="")) returned 1 [0159.875] wcscmp (_String1="DigSig.CHT", _String2=".") returned 1 [0159.876] wcscmp (_String1="DigSig.CHT", _String2="..") returned 1 [0159.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de728 [0159.876] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.876] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.876] wcscat (in: _Dest=0x81de728, _Source="DigSig.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" [0159.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht")) returned 0x20 [0159.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT", dwFileAttributes=0x20) returned 0 [0159.885] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.885] GetLastError () returned 0x5 [0159.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT", dwFileAttributes=0x20) returned 0 [0159.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.885] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHT", cAlternateFileName="")) returned 1 [0159.885] wcscmp (_String1="DVA.CHT", _String2=".") returned 1 [0159.886] wcscmp (_String1="DVA.CHT", _String2="..") returned 1 [0159.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81d3338 [0159.886] wcscpy (in: _Dest=0x81d3338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.886] wcscat (in: _Dest=0x81d3338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.886] wcscat (in: _Dest=0x81d3338, _Source="DVA.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" [0159.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht")) returned 0x20 [0159.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT", dwFileAttributes=0x20) returned 0 [0159.886] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.886] GetLastError () returned 0x5 [0159.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT", dwFileAttributes=0x20) returned 0 [0159.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3338) returned 1 [0159.886] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHT", cAlternateFileName="")) returned 1 [0159.886] wcscmp (_String1="eBook.CHT", _String2=".") returned 1 [0159.886] wcscmp (_String1="eBook.CHT", _String2="..") returned 1 [0159.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0159.887] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.887] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.887] wcscat (in: _Dest=0x81de728, _Source="eBook.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" [0159.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht")) returned 0x20 [0159.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT", dwFileAttributes=0x20) returned 0 [0159.906] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.906] GetLastError () returned 0x5 [0159.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT", dwFileAttributes=0x20) returned 0 [0159.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.906] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHT", cAlternateFileName="")) returned 1 [0159.907] wcscmp (_String1="EScript.CHT", _String2=".") returned 1 [0159.907] wcscmp (_String1="EScript.CHT", _String2="..") returned 1 [0159.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de728 [0159.907] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.907] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.907] wcscat (in: _Dest=0x81de728, _Source="EScript.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" [0159.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht")) returned 0x20 [0159.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT", dwFileAttributes=0x20) returned 0 [0159.907] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.907] GetLastError () returned 0x5 [0159.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT", dwFileAttributes=0x20) returned 0 [0159.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.908] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHT", cAlternateFileName="")) returned 1 [0159.908] wcscmp (_String1="IA32.CHT", _String2=".") returned 1 [0159.908] wcscmp (_String1="IA32.CHT", _String2="..") returned 1 [0159.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bebc8 [0159.908] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.908] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.908] wcscat (in: _Dest=0x81bebc8, _Source="IA32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" [0159.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht")) returned 0x20 [0159.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT", dwFileAttributes=0x20) returned 0 [0159.908] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.908] GetLastError () returned 0x5 [0159.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT", dwFileAttributes=0x20) returned 0 [0159.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 [0159.908] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHT", cAlternateFileName="MAKEAC~1.CHT")) returned 1 [0159.909] wcscmp (_String1="makeaccessible.CHT", _String2=".") returned 1 [0159.909] wcscmp (_String1="makeaccessible.CHT", _String2="..") returned 1 [0159.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a6d8 [0159.909] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.909] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.909] wcscat (in: _Dest=0x819a6d8, _Source="makeaccessible.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" [0159.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht")) returned 0x20 [0159.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT", dwFileAttributes=0x20) returned 0 [0159.921] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.922] GetLastError () returned 0x5 [0159.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT", dwFileAttributes=0x20) returned 0 [0159.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 [0159.922] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9884880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHT", cAlternateFileName="MULTIM~1.CHT")) returned 1 [0159.922] wcscmp (_String1="Multimedia.CHT", _String2=".") returned 1 [0159.922] wcscmp (_String1="Multimedia.CHT", _String2="..") returned 1 [0159.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cf48 [0159.922] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.922] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.922] wcscat (in: _Dest=0x32cf48, _Source="Multimedia.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" [0159.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht")) returned 0x20 [0159.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT", dwFileAttributes=0x20) returned 0 [0159.922] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.923] GetLastError () returned 0x5 [0159.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT", dwFileAttributes=0x20) returned 0 [0159.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.923] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHT", cAlternateFileName="")) returned 1 [0159.923] wcscmp (_String1="pddom.CHT", _String2=".") returned 1 [0159.923] wcscmp (_String1="pddom.CHT", _String2="..") returned 1 [0159.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de698 [0159.923] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.923] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.923] wcscat (in: _Dest=0x81de698, _Source="pddom.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" [0159.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht")) returned 0x20 [0159.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT", dwFileAttributes=0x20) returned 0 [0159.952] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.952] GetLastError () returned 0x5 [0159.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT", dwFileAttributes=0x20) returned 0 [0159.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 [0159.952] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHT", cAlternateFileName="")) returned 1 [0159.952] wcscmp (_String1="PPKLITE.CHT", _String2=".") returned 1 [0159.952] wcscmp (_String1="PPKLITE.CHT", _String2="..") returned 1 [0159.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x81de698 [0159.952] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.952] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.953] wcscat (in: _Dest=0x81de698, _Source="PPKLITE.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" [0159.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht")) returned 0x20 [0159.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT", dwFileAttributes=0x20) returned 0 [0159.953] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.953] GetLastError () returned 0x5 [0159.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT", dwFileAttributes=0x20) returned 0 [0159.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 [0159.954] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb704260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe0e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHT", cAlternateFileName="")) returned 1 [0159.954] wcscmp (_String1="RdLang32.CHT", _String2=".") returned 1 [0159.954] wcscmp (_String1="RdLang32.CHT", _String2="..") returned 1 [0159.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de698 [0159.954] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.954] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.954] wcscat (in: _Dest=0x81de698, _Source="RdLang32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" [0159.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht")) returned 0x20 [0159.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT", dwFileAttributes=0x20) returned 0 [0159.954] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.955] GetLastError () returned 0x5 [0159.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT", dwFileAttributes=0x20) returned 0 [0159.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 [0159.955] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHT", cAlternateFileName="READOU~1.CHT")) returned 1 [0159.955] wcscmp (_String1="ReadOutLoud.CHT", _String2=".") returned 1 [0159.955] wcscmp (_String1="ReadOutLoud.CHT", _String2="..") returned 1 [0159.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cf48 [0159.955] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.955] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.955] wcscat (in: _Dest=0x32cf48, _Source="ReadOutLoud.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" [0159.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht")) returned 0x20 [0159.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT", dwFileAttributes=0x20) returned 0 [0159.956] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.956] GetLastError () returned 0x5 [0159.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT", dwFileAttributes=0x20) returned 0 [0159.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.956] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHT", cAlternateFileName="")) returned 1 [0159.956] wcscmp (_String1="reflow.CHT", _String2=".") returned 1 [0159.956] wcscmp (_String1="reflow.CHT", _String2="..") returned 1 [0159.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de698 [0159.956] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.956] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0159.956] wcscat (in: _Dest=0x81de698, _Source="reflow.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" [0159.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht")) returned 0x20 [0162.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT", dwFileAttributes=0x20) returned 0 [0162.161] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.162] GetLastError () returned 0x5 [0162.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT", dwFileAttributes=0x20) returned 0 [0162.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 [0162.162] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHT", cAlternateFileName="SAVEAS~1.CHT")) returned 1 [0162.162] wcscmp (_String1="SaveAsRTF.CHT", _String2=".") returned 1 [0162.162] wcscmp (_String1="SaveAsRTF.CHT", _String2="..") returned 1 [0162.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d5d0 [0162.162] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0162.162] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0162.162] wcscat (in: _Dest=0x32d5d0, _Source="SaveAsRTF.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" [0164.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0164.589] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHT", cAlternateFileName="")) returned 1 [0164.589] wcscmp (_String1="Search.CHT", _String2=".") returned 1 [0164.589] wcscmp (_String1="Search.CHT", _String2="..") returned 1 [0164.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35370 [0164.589] wcscpy (in: _Dest=0x3f35370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.589] wcscat (in: _Dest=0x3f35370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.589] wcscat (in: _Dest=0x3f35370, _Source="Search.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" [0164.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x290c [0164.590] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHT", cAlternateFileName="")) returned 1 [0164.590] wcscmp (_String1="SendMail.CHT", _String2=".") returned 1 [0164.590] wcscmp (_String1="SendMail.CHT", _String2="..") returned 1 [0164.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f34d40 [0164.590] wcscpy (in: _Dest=0x3f34d40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.590] wcscat (in: _Dest=0x3f34d40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.590] wcscat (in: _Dest=0x3f34d40, _Source="SendMail.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" [0164.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0164.591] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.591] wcscmp (_String1="Services", _String2=".") returned 1 [0164.591] wcscmp (_String1="Services", _String2="..") returned 1 [0164.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81c0218 [0164.592] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.592] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.592] wcscat (in: _Dest=0x81c0218, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0164.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2908 [0164.593] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHT", cAlternateFileName="")) returned 1 [0164.593] wcscmp (_String1="Spelling.CHT", _String2=".") returned 1 [0164.593] wcscmp (_String1="Spelling.CHT", _String2="..") returned 1 [0164.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3f35f40 [0164.593] wcscpy (in: _Dest=0x3f35f40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.593] wcscat (in: _Dest=0x3f35f40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.593] wcscat (in: _Dest=0x3f35f40, _Source="Spelling.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" [0164.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2904 [0164.594] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHT", cAlternateFileName="")) returned 1 [0164.594] wcscmp (_String1="updater.CHT", _String2=".") returned 1 [0164.594] wcscmp (_String1="updater.CHT", _String2="..") returned 1 [0164.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f362a0 [0164.594] wcscpy (in: _Dest=0x3f362a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.594] wcscat (in: _Dest=0x3f362a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.594] wcscat (in: _Dest=0x3f362a0, _Source="updater.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" [0164.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f362a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2900 [0164.595] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 1 [0164.595] wcscmp (_String1="Weblink.CHT", _String2=".") returned 1 [0164.595] wcscmp (_String1="Weblink.CHT", _String2="..") returned 1 [0164.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3f35fd0 [0164.595] wcscpy (in: _Dest=0x3f35fd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.595] wcscat (in: _Dest=0x3f35fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.595] wcscat (in: _Dest=0x3f35fd0, _Source="Weblink.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" [0164.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28fc [0164.596] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 0 [0164.596] FindClose (in: hFindFile=0x3f37ad8 | out: hFindFile=0x3f37ad8) returned 1 [0164.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe6c0) returned 1 [0164.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 [0164.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 Thread: id = 2165 os_tid = 0x1d78 [0152.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb17c8 [0152.981] wcscpy (in: _Dest=0x3eb17c8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8" [0152.981] wcscat (in: _Dest=0x3eb17c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\" [0152.981] wcscat (in: _Dest=0x3eb17c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\*" [0152.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0152.981] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfac5ac60, ftCreationTime.dwHighDateTime=0x1d5e7a0, ftLastAccessTime.dwLowDateTime=0xf51a1be0, ftLastAccessTime.dwHighDateTime=0x1d5dd0d, ftLastWriteTime.dwLowDateTime=0xf51a1be0, ftLastWriteTime.dwHighDateTime=0x1d5dd0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098dd0 [0152.982] wcscmp (_String1=".", _String2=".") returned 0 [0152.982] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfac5ac60, ftCreationTime.dwHighDateTime=0x1d5e7a0, ftLastAccessTime.dwLowDateTime=0xf51a1be0, ftLastAccessTime.dwHighDateTime=0x1d5dd0d, ftLastWriteTime.dwLowDateTime=0xf51a1be0, ftLastWriteTime.dwHighDateTime=0x1d5dd0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.982] wcscmp (_String1="..", _String2=".") returned 1 [0152.982] wcscmp (_String1="..", _String2="..") returned 0 [0152.982] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e7b8d60, ftCreationTime.dwHighDateTime=0x1d5e45d, ftLastAccessTime.dwLowDateTime=0xe2fedb90, ftLastAccessTime.dwHighDateTime=0x1d5dd6b, ftLastWriteTime.dwLowDateTime=0xe2fedb90, ftLastWriteTime.dwHighDateTime=0x1d5dd6b, nFileSizeHigh=0x0, nFileSizeLow=0x14377, dwReserved0=0x0, dwReserved1=0x0, cFileName="X4cXVNkapMRYCW.flv", cAlternateFileName="X4CXVN~1.FLV")) returned 1 [0152.982] wcscmp (_String1="X4cXVNkapMRYCW.flv", _String2=".") returned 1 [0152.982] wcscmp (_String1="X4cXVNkapMRYCW.flv", _String2="..") returned 1 [0152.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7c18 [0152.982] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8" [0152.982] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\" [0152.982] wcscat (in: _Dest=0x2ff7c18, _Source="X4cXVNkapMRYCW.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv" [0159.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\-io0uwg7dr8\\x4cxvnkapmrycw.flv")) returned 0x20 [0159.356] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv", dwFileAttributes=0x20) returned 1 [0159.356] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\-io0uwg7dr8\\x4cxvnkapmrycw.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fb4 [0159.356] GetFileSizeEx (in: hFile=0x1fb4, lpFileSize=0x7a4fda8 | out: lpFileSize=0x7a4fda8*=82807) returned 1 [0159.356] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x14373, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.356] ReadFile (in: hFile=0x1fb4, lpBuffer=0x7a4fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7a4fd90, lpOverlapped=0x0 | out: lpBuffer=0x7a4fdb4*, lpNumberOfBytesRead=0x7a4fd90*=0x4, lpOverlapped=0x0) returned 1 [0159.358] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0159.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0159.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0159.358] NtQuerySystemTime (in: CurrentTime=0x7a4fd30 | out: CurrentTime=0x7a4fd30*=132471540275940000) returned 0x0 [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x5f88409a [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x1a02dd2d [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x6f2d70f5 [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x44a708aa [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x5f9ba9eb [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x4c796580 [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x5860d95f [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x7b4827f7 [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x16572512 [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x668d6a7c [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x342b5bea [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x4b61fdff [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x3a961ca0 [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x5f88409a [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x3855cae7 [0159.358] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x5ac3a1 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x48d01460 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x53e3cd22 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x382aef82 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x7de6f512 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0xbf42856 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x13ce7435 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x5b63815 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x3baf8016 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x6b9ff131 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x60ac0d29 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x32b17992 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x2c4fa3d8 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x4e835b47 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x6aa9ce48 [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x2c51009c [0159.359] RtlRandomEx (in: Seed=0x7a4fd28 | out: Seed=0x7a4fd28) returned 0x5712e2cf [0159.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0159.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67e80 [0159.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0159.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 [0159.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0159.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0159.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0159.368] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.368] ReadFile (in: hFile=0x1fb4, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a4fd30, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0x7a4fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0159.368] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5898 [0159.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67e80 [0159.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0159.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0159.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0159.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0159.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0159.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0159.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 [0159.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5898) returned 1 [0159.369] WriteFile (in: hFile=0x1fb4, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a4fd30, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x7a4fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0159.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0159.403] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.403] ReadFile (in: hFile=0x1fb4, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a4fd30, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0x7a4fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0159.403] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309610 [0159.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67e80 [0159.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0159.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0159.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0159.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0159.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0159.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0159.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 [0159.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309610) returned 1 [0159.404] WriteFile (in: hFile=0x1fb4, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a4fd30, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x7a4fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0159.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0159.419] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x10777, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.419] ReadFile (in: hFile=0x1fb4, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7a4fd30, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0x7a4fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0159.419] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x10777, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309610 [0159.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67e80 [0159.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0159.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0159.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0159.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0159.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0159.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0159.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 [0159.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309610) returned 1 [0159.420] WriteFile (in: hFile=0x1fb4, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7a4fd30, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x7a4fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0159.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0159.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e2e0 [0159.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0159.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0159.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0159.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0159.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x80991d0 [0159.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5538 [0159.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8970 [0159.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0159.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0159.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x8099310 [0159.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0159.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0159.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0159.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0159.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5538) returned 1 [0159.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dcdcd0 [0159.468] SetFilePointerEx (in: hFile=0x1fb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.468] WriteFile (in: hFile=0x1fb4, lpBuffer=0x3dcdcd0*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x7a4fd9c, lpOverlapped=0x0 | out: lpBuffer=0x3dcdcd0*, lpNumberOfBytesWritten=0x7a4fd9c*=0x156, lpOverlapped=0x0) returned 1 [0159.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdcd0) returned 1 [0159.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099310) returned 1 [0159.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0159.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80991d0) returned 1 [0159.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 [0159.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0159.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0159.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0159.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0159.501] wcscpy (in: _Dest=0x333828, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv" [0159.501] wcscat (in: _Dest=0x333828, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv.f0dbec" [0159.501] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv.f0dbec", NtPathName=0x7a4fd20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\X4cXVNkapMRYCW.flv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0159.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e65a28 [0159.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c33c8) returned 1 [0159.503] NtQueryInformationFile (in: FileHandle=0x1fb4, IoStatusBlock=0x7a4fcf8, FileInformation=0x7a4fd00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7a4fcf8, FileInformation=0x7a4fd00) returned 0x0 [0159.503] NtSetInformationFile (FileHandle=0x1fb4, IoStatusBlock=0x7a4fcf8, FileInformation=0x7a4fd00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0159.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0159.505] FlushFileBuffers (hFile=0x1fb4) returned 1 [0159.527] CloseHandle (hObject=0x1fb4) returned 1 [0159.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff72c0 [0159.528] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\" [0159.528] wcscat (in: _Dest=0x2ff72c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\F0DBEC-Readme.txt" [0159.528] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\-io0uwg7dr8\\f0dbec-readme.txt")) returned 0xffffffff [0159.528] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\-Io0UWg7Dr8\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\-io0uwg7dr8\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0159.551] WriteFile (in: hFile=0x3b0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7a4fd44, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7a4fd44*=0x70c, lpOverlapped=0x0) returned 1 [0159.553] CloseHandle (hObject=0x3b0) returned 1 [0159.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 [0159.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 [0159.554] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e7b8d60, ftCreationTime.dwHighDateTime=0x1d5e45d, ftLastAccessTime.dwLowDateTime=0xe2fedb90, ftLastAccessTime.dwHighDateTime=0x1d5dd6b, ftLastWriteTime.dwLowDateTime=0xe2fedb90, ftLastWriteTime.dwHighDateTime=0x1d5dd6b, nFileSizeHigh=0x0, nFileSizeLow=0x14377, dwReserved0=0x0, dwReserved1=0x0, cFileName="X4cXVNkapMRYCW.flv", cAlternateFileName="X4CXVN~1.FLV")) returned 0 [0159.554] FindClose (in: hFindFile=0x8098dd0 | out: hFindFile=0x8098dd0) returned 1 [0159.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0159.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb17c8) returned 1 [0159.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 Thread: id = 2166 os_tid = 0x1d7c [0152.982] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\gydb4bmk.mkv")) returned 0x20 [0152.983] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv", dwFileAttributes=0x20) returned 1 [0152.983] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\gydb4bmk.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20c0 [0152.983] GetFileSizeEx (in: hFile=0x20c0, lpFileSize=0x7aefe08 | out: lpFileSize=0x7aefe08*=75324) returned 1 [0152.983] SetFilePointerEx (in: hFile=0x20c0, liDistanceToMove=0x12638, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.983] ReadFile (in: hFile=0x20c0, lpBuffer=0x7aefe14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7aefdf0, lpOverlapped=0x0 | out: lpBuffer=0x7aefe14*, lpNumberOfBytesRead=0x7aefdf0*=0x4, lpOverlapped=0x0) returned 1 [0152.985] SetFilePointerEx (in: hFile=0x20c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0152.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1040 [0152.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1310 [0152.986] NtQuerySystemTime (in: CurrentTime=0x7aefd90 | out: CurrentTime=0x7aefd90*=132471540215568000) returned 0x0 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x3a62229a [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x651990e7 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x19c69614 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x3ea313e6 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x71103d55 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x3137c5c1 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x67465ecf [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x4ec8caa5 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x72611583 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x4a964cbc [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x1ee0c74b [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x3a62229a [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x188da4ae [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x5f8f0ffa [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x53960908 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x122e801d [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x604fe19e [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x4ffb8fe5 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x3b7babe3 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x3dc37199 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x752c7c7d [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x3a6d562d [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x14d27edb [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x663922a8 [0152.986] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x644ff091 [0152.987] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x59e07773 [0152.987] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x1f735d28 [0152.987] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x21d3691d [0152.987] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x2c726f1f [0152.987] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x3d0d5527 [0152.987] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x514de9c5 [0152.987] RtlRandomEx (in: Seed=0x7aefd88 | out: Seed=0x7aefd88) returned 0x48942565 [0152.998] SetFilePointerEx (in: hFile=0x20c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.999] ReadFile (in: hFile=0x20c0, lpBuffer=0x824c060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7aefd90, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesRead=0x7aefd90*=0x3c00, lpOverlapped=0x0) returned 1 [0152.999] SetFilePointerEx (in: hFile=0x20c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83099b8 [0152.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0152.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0152.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0152.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0152.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0153.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1310 [0153.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0153.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0153.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83099b8) returned 1 [0153.000] WriteFile (in: hFile=0x20c0, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7aefd90, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0x7aefd90*=0x3c00, lpOverlapped=0x0) returned 1 [0156.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0156.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0156.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6fdf8 [0156.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0156.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6fee8 [0156.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0156.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca170 [0156.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca170) returned 1 [0156.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0156.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0156.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec5f8 [0156.944] SetFilePointerEx (in: hFile=0x20c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.944] WriteFile (in: hFile=0x20c0, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x7aefdfc, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x7aefdfc*=0x10a, lpOverlapped=0x0) returned 1 [0156.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0156.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fee8) returned 1 [0156.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0156.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdf8) returned 1 [0156.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0156.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0156.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10b8) returned 1 [0156.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0156.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbb48 [0156.996] wcscpy (in: _Dest=0x81dbb48, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv" [0156.996] wcscat (in: _Dest=0x81dbb48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv.f0dbec" [0156.996] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv.f0dbec", NtPathName=0x7aefd80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\GyDB4bMk.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0156.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x81e1a98 [0157.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1a98) returned 1 [0157.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c9598) returned 1 [0157.062] NtQueryInformationFile (in: FileHandle=0x20c0, IoStatusBlock=0x7aefd58, FileInformation=0x7aefd60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7aefd58, FileInformation=0x7aefd60) returned 0x0 [0157.062] NtSetInformationFile (FileHandle=0x20c0, IoStatusBlock=0x7aefd58, FileInformation=0x7aefd60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0157.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbb48) returned 1 [0157.078] FlushFileBuffers (hFile=0x20c0) returned 1 [0157.094] CloseHandle (hObject=0x20c0) returned 1 [0157.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbbe8 [0157.095] wcscpy (in: _Dest=0x81dbbe8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" [0157.095] wcscat (in: _Dest=0x81dbbe8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt" [0157.095] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\f0dbec-readme.txt")) returned 0xffffffff [0157.095] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c0 [0157.095] WriteFile (in: hFile=0x20c0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7aefda4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7aefda4*=0x70c, lpOverlapped=0x0) returned 1 [0158.841] CloseHandle (hObject=0x20c0) returned 1 [0161.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbbe8) returned 1 [0161.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb13d8) returned 1 Thread: id = 2167 os_tid = 0x1d80 [0153.001] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\kyshcfps.swf")) returned 0x20 [0153.001] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf", dwFileAttributes=0x20) returned 1 [0153.001] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\kyshcfps.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20c4 [0153.002] GetFileSizeEx (in: hFile=0x20c4, lpFileSize=0x76ffd60 | out: lpFileSize=0x76ffd60*=69818) returned 1 [0153.002] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x110b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.002] ReadFile (in: hFile=0x20c4, lpBuffer=0x76ffd6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x76ffd48, lpOverlapped=0x0 | out: lpBuffer=0x76ffd6c*, lpNumberOfBytesRead=0x76ffd48*=0x4, lpOverlapped=0x0) returned 1 [0153.004] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1310 [0153.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0153.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0153.004] NtQuerySystemTime (in: CurrentTime=0x76ffce8 | out: CurrentTime=0x76ffce8*=132471540215724000) returned 0x0 [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x4e7dfc74 [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x71103d55 [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x20a89e1f [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x43b1573e [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x6800f7a8 [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x577db303 [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x6c675945 [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x47f0e022 [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x2c824381 [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x65955e9f [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x7813ae29 [0153.004] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x110bc639 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x2fee95e5 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x6c38f317 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0xcb8e69c [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x67cd155e [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x5f8f0ffa [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x1a03e18c [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x6075040c [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x188da4ae [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x4b748084 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x27e6bdf3 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x4ca92027 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x490a19ab [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x344d5011 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x60ed7064 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x43b1573e [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x5ff42f8f [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x64142071 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x30847726 [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x710c35ea [0153.005] RtlRandomEx (in: Seed=0x76ffce0 | out: Seed=0x76ffce0) returned 0x59296981 [0153.017] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.017] ReadFile (in: hFile=0x20c4, lpBuffer=0x814a060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x76ffce8, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesRead=0x76ffce8*=0x3c00, lpOverlapped=0x0) returned 1 [0153.018] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83092b0 [0153.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0153.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1310 [0153.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0153.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814dc68 [0153.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1310 [0153.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0153.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0153.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0153.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83092b0) returned 1 [0153.019] WriteFile (in: hFile=0x20c4, lpBuffer=0x814dc68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x76ffce8, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesWritten=0x76ffce8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0156.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0156.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6fd98 [0156.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0156.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e701b8 [0156.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac10 [0156.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ab8 [0156.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0156.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0156.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0156.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3deb9f0 [0156.950] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.950] WriteFile (in: hFile=0x20c4, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x76ffd54, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0x76ffd54*=0x10a, lpOverlapped=0x0) returned 1 [0156.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0156.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0156.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0156.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd98) returned 1 [0156.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0156.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0156.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0156.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0156.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbbe8 [0156.998] wcscpy (in: _Dest=0x81dbbe8, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf" [0156.998] wcscat (in: _Dest=0x81dbbe8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf.f0dbec" [0156.998] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf.f0dbec", NtPathName=0x76ffcd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\KySHcFPs.swf.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0156.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x81e1b50 [0157.093] FlushFileBuffers (hFile=0x20c4) returned 1 [0157.096] CloseHandle (hObject=0x20c4) returned 1 [0157.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbb48 [0157.097] wcscpy (in: _Dest=0x81dbb48, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" [0157.098] wcscat (in: _Dest=0x81dbb48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt" [0157.098] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\f0dbec-readme.txt")) returned 0x20 [0158.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbb48) returned 1 [0158.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2ed8) returned 1 Thread: id = 2168 os_tid = 0x1d84 [0153.024] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\nvkpw0suiedwavu3.mkv")) returned 0x20 [0153.024] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv", dwFileAttributes=0x20) returned 1 [0153.024] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\nvkpw0suiedwavu3.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20c8 [0153.025] GetFileSizeEx (in: hFile=0x20c8, lpFileSize=0x791fda8 | out: lpFileSize=0x791fda8*=43202) returned 1 [0153.025] SetFilePointerEx (in: hFile=0x20c8, liDistanceToMove=0xa8be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.025] ReadFile (in: hFile=0x20c8, lpBuffer=0x791fdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x791fd90, lpOverlapped=0x0 | out: lpBuffer=0x791fdb4*, lpNumberOfBytesRead=0x791fd90*=0x4, lpOverlapped=0x0) returned 1 [0153.027] SetFilePointerEx (in: hFile=0x20c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0153.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d70 [0153.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1108 [0153.027] NtQuerySystemTime (in: CurrentTime=0x791fd30 | out: CurrentTime=0x791fd30*=132471540216036000) returned 0x0 [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x2c726f1f [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x2da28de [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x8ff96b0 [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x163b7581 [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x30097258 [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x1f55f58d [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x7fa80ca4 [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x5795760a [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0xb6dee1 [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x1715f18a [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x5568238a [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x5a53007f [0153.027] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x76279171 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x40d4a7a8 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0xe9dc0d1 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x2ded38f3 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x50755af0 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x6d95f8d8 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0xcdbafba [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x1f735d28 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x3a6abb50 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x4017326b [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x1ded4835 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x1dde28c4 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x48858fde [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x2b31e2db [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x7f686919 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x24e38073 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x4d2b9c57 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x33fa1009 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x364555b9 [0153.028] RtlRandomEx (in: Seed=0x791fd28 | out: Seed=0x791fd28) returned 0x3d551fff [0153.040] SetFilePointerEx (in: hFile=0x20c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.040] ReadFile (in: hFile=0x20c8, lpBuffer=0x8151870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x791fd30, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesRead=0x791fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0153.041] SetFilePointerEx (in: hFile=0x20c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308ad0 [0153.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0153.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0153.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0153.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8155478 [0153.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0153.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1108 [0153.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1108) returned 1 [0153.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0153.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308ad0) returned 1 [0153.042] WriteFile (in: hFile=0x20c8, lpBuffer=0x8155478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x791fd30, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesWritten=0x791fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0156.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0156.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0156.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37fd8 [0156.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0156.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f37a18 [0156.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0156.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0156.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0156.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0156.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cca0) returned 1 [0156.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d574c8 [0156.955] SetFilePointerEx (in: hFile=0x20c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.955] WriteFile (in: hFile=0x20c8, lpBuffer=0x3d574c8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x791fd9c, lpOverlapped=0x0 | out: lpBuffer=0x3d574c8*, lpNumberOfBytesWritten=0x791fd9c*=0x11a, lpOverlapped=0x0) returned 1 [0157.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 [0157.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37a18) returned 1 [0157.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0157.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37fd8) returned 1 [0157.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0157.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0157.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0157.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0157.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da988 [0157.002] wcscpy (in: _Dest=0x81da988, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv" [0157.002] wcscat (in: _Dest=0x81da988, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv.f0dbec") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv.f0dbec" [0157.002] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv.f0dbec", NtPathName=0x791fd20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\NVKPW0suiEDwAvu3.mkv.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0157.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d65e8 [0157.109] FlushFileBuffers (hFile=0x20c8) returned 1 [0157.114] CloseHandle (hObject=0x20c8) returned 1 [0157.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11a08 [0157.115] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\" [0157.115] wcscat (in: _Dest=0x3e11a08, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt" [0157.116] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-hR0u\\A3j2zxFCXAE\\Im7reSDxIOq\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-hr0u\\a3j2zxfcxae\\im7resdxioq\\f0dbec-readme.txt")) returned 0x20 [0158.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 [0158.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e111e8) returned 1 Thread: id = 2169 os_tid = 0x1d88 [0153.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2a700 [0153.052] wcscpy (in: _Dest=0x3e2a700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0153.052] wcscat (in: _Dest=0x3e2a700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0153.052] wcscat (in: _Dest=0x3e2a700, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*" [0153.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0153.052] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099290 [0153.787] wcscmp (_String1=".", _String2=".") returned 0 [0153.787] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.787] wcscmp (_String1="..", _String2=".") returned 1 [0153.787] wcscmp (_String1="..", _String2="..") returned 0 [0153.788] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8872b4b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar", cAlternateFileName="")) returned 1 [0153.788] wcscmp (_String1="Calendar", _String2=".") returned 1 [0153.788] wcscmp (_String1="Calendar", _String2="..") returned 1 [0153.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81866f8 [0153.788] wcscpy (in: _Dest=0x81866f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0153.788] wcscat (in: _Dest=0x81866f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0153.788] wcscat (in: _Dest=0x81866f8, _Source="Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0154.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81866f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2558 [0154.746] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonData", cAlternateFileName="COMMON~1")) returned 1 [0154.746] wcscmp (_String1="CommonData", _String2=".") returned 1 [0154.746] wcscmp (_String1="CommonData", _String2="..") returned 1 [0154.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bc98 [0154.746] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.746] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.746] wcscat (in: _Dest=0x35bc98, _Source="CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0154.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x255c [0154.747] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77012130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c89e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1 [0154.747] wcscmp (_String1="Computers", _String2=".") returned 1 [0154.747] wcscmp (_String1="Computers", _String2="..") returned 1 [0154.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186848 [0154.748] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.748] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.748] wcscat (in: _Dest=0x8186848, _Source="Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0154.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8186848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2560 [0154.749] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7737e0d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876cdd70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion", cAlternateFileName="DISCUS~1")) returned 1 [0154.749] wcscmp (_String1="Discussion", _String2=".") returned 1 [0154.749] wcscmp (_String1="Discussion", _String2="..") returned 1 [0154.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b718 [0154.749] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.749] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.749] wcscat (in: _Dest=0x35b718, _Source="Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0154.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2564 [0154.750] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85365630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8538b790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentShare", cAlternateFileName="DOCUME~1")) returned 1 [0154.750] wcscmp (_String1="DocumentShare", _String2=".") returned 1 [0154.750] wcscmp (_String1="DocumentShare", _String2="..") returned 1 [0154.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c2c8 [0154.750] wcscpy (in: _Dest=0x35c2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.750] wcscat (in: _Dest=0x35c2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.750] wcscat (in: _Dest=0x35c2c8, _Source="DocumentShare" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" [0154.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2568 [0154.751] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveDocumentReview", cAlternateFileName="GROOVE~1")) returned 1 [0154.751] wcscmp (_String1="GrooveDocumentReview", _String2=".") returned 1 [0154.751] wcscmp (_String1="GrooveDocumentReview", _String2="..") returned 1 [0154.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3333a8 [0154.751] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.751] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.751] wcscat (in: _Dest=0x3333a8, _Source="GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0154.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x256c [0154.752] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769d2770, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms", cAlternateFileName="GROOVE~4")) returned 1 [0154.752] wcscmp (_String1="GrooveForms", _String2=".") returned 1 [0154.752] wcscmp (_String1="GrooveForms", _String2="..") returned 1 [0154.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c4d8 [0154.752] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.752] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.753] wcscat (in: _Dest=0x35c4d8, _Source="GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0154.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2570 [0154.753] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms3", cAlternateFileName="GROOVE~2")) returned 1 [0154.754] wcscmp (_String1="GrooveForms3", _String2=".") returned 1 [0154.754] wcscmp (_String1="GrooveForms3", _String2="..") returned 1 [0154.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c008 [0154.754] wcscpy (in: _Dest=0x35c008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.754] wcscat (in: _Dest=0x35c008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.754] wcscat (in: _Dest=0x35c008, _Source="GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0154.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2574 [0154.755] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms4", cAlternateFileName="GROOVE~3")) returned 1 [0154.755] wcscmp (_String1="GrooveForms4", _String2=".") returned 1 [0154.755] wcscmp (_String1="GrooveForms4", _String2="..") returned 1 [0154.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c428 [0154.755] wcscpy (in: _Dest=0x35c428, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.755] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.755] wcscat (in: _Dest=0x35c428, _Source="GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0154.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2578 [0154.756] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9220ac10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GR3B08~1")) returned 1 [0154.756] wcscmp (_String1="GrooveForms5", _String2=".") returned 1 [0154.756] wcscmp (_String1="GrooveForms5", _String2="..") returned 1 [0154.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c378 [0154.756] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.756] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.756] wcscat (in: _Dest=0x35c378, _Source="GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0154.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x257c [0154.757] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f2d8f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveProjectToolset", cAlternateFileName="GRA998~1")) returned 1 [0154.758] wcscmp (_String1="GrooveProjectToolset", _String2=".") returned 1 [0154.758] wcscmp (_String1="GrooveProjectToolset", _String2="..") returned 1 [0154.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333528 [0154.758] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.758] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.758] wcscat (in: _Dest=0x333528, _Source="GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0154.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2580 [0154.759] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 1 [0154.759] wcscmp (_String1="Welcome Tool", _String2=".") returned 1 [0154.759] wcscmp (_String1="Welcome Tool", _String2="..") returned 1 [0154.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bea8 [0154.759] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0154.759] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0154.759] wcscat (in: _Dest=0x35bea8, _Source="Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0154.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2584 [0154.761] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 0 [0154.761] FindClose (in: hFindFile=0x8099290 | out: hFindFile=0x8099290) returned 1 [0154.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0154.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a700) returned 1 [0154.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0458) returned 1 Thread: id = 2170 os_tid = 0x1d8c [0153.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd")) returned 0x20 [0153.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd", dwFileAttributes=0x20) returned 0 [0153.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.058] GetLastError () returned 0x5 [0153.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd", dwFileAttributes=0x20) returned 0 [0153.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6688) returned 1 Thread: id = 2171 os_tid = 0x1d90 [0153.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd")) returned 0x20 [0153.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd", dwFileAttributes=0x20) returned 0 [0153.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.060] GetLastError () returned 0x5 [0153.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd", dwFileAttributes=0x20) returned 0 [0153.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 2172 os_tid = 0x1d94 [0153.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml")) returned 0x20 [0154.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", dwFileAttributes=0x20) returned 0 [0154.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.448] GetLastError () returned 0x5 [0154.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", dwFileAttributes=0x20) returned 0 [0154.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c258) returned 1 Thread: id = 2173 os_tid = 0x1d98 [0153.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187370 [0153.069] wcscpy (in: _Dest=0x8187370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" [0153.069] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\" [0153.070] wcscat (in: _Dest=0x8187370, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*" [0153.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100870 [0153.070] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f383d8 [0154.449] wcscmp (_String1=".", _String2=".") returned 0 [0154.449] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.449] wcscmp (_String1="..", _String2=".") returned 1 [0154.449] wcscmp (_String1="..", _String2="..") returned 0 [0154.449] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.449] FindClose (in: hFindFile=0x3f383d8 | out: hFindFile=0x3f383d8) returned 1 [0154.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100870) returned 1 [0154.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 [0154.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c2f8) returned 1 Thread: id = 2174 os_tid = 0x1d9c [0153.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml")) returned 0x20 [0153.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0153.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.907] GetLastError () returned 0x5 [0153.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0153.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5648) returned 1 Thread: id = 2175 os_tid = 0x1da0 [0153.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml")) returned 0x20 [0154.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0154.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.447] GetLastError () returned 0x5 [0154.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0154.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5710) returned 1 Thread: id = 2176 os_tid = 0x1da4 [0153.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml")) returned 0x20 [0154.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", dwFileAttributes=0x20) returned 0 [0154.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.451] GetLastError () returned 0x5 [0154.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", dwFileAttributes=0x20) returned 0 [0154.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 2177 os_tid = 0x1da8 [0153.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4608 [0153.071] wcscpy (in: _Dest=0x3dc4608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0153.071] wcscat (in: _Dest=0x3dc4608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\" [0153.072] wcscat (in: _Dest=0x3dc4608, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*" [0153.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0153.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a98 [0153.899] wcscmp (_String1=".", _String2=".") returned 0 [0153.899] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.899] wcscmp (_String1="..", _String2=".") returned 1 [0153.899] wcscmp (_String1="..", _String2="..") returned 0 [0153.899] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0153.899] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0153.899] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0153.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a798 [0153.899] wcscpy (in: _Dest=0x3e2a798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0153.899] wcscat (in: _Dest=0x3e2a798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\" [0153.899] wcscat (in: _Dest=0x3e2a798, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" [0154.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c4 [0154.129] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0154.129] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0154.129] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0154.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1cb0 [0154.129] wcscpy (in: _Dest=0x81d1cb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0154.129] wcscat (in: _Dest=0x81d1cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\" [0154.129] wcscat (in: _Dest=0x81d1cb0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" [0154.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c8 [0154.130] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0154.130] FindClose (in: hFindFile=0x3f37a98 | out: hFindFile=0x3f37a98) returned 1 [0154.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0154.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4608) returned 1 [0154.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da61f0) returned 1 Thread: id = 2178 os_tid = 0x1dac [0153.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc3d08 [0153.072] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0153.072] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\" [0153.072] wcscat (in: _Dest=0x3dc3d08, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*" [0153.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81003a0 [0153.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099390 [0154.400] wcscmp (_String1=".", _String2=".") returned 0 [0154.401] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.401] wcscmp (_String1="..", _String2=".") returned 1 [0154.401] wcscmp (_String1="..", _String2="..") returned 0 [0154.401] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0154.401] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0154.401] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0154.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e3c248 [0154.401] wcscpy (in: _Dest=0x3e3c248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0154.401] wcscat (in: _Dest=0x3e3c248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\" [0154.401] wcscat (in: _Dest=0x3e3c248, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" [0156.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a18 [0156.486] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.486] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.486] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d2208 [0156.486] wcscpy (in: _Dest=0x81d2208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0156.486] wcscat (in: _Dest=0x81d2208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\" [0156.486] wcscat (in: _Dest=0x81d2208, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" [0156.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a1c [0156.488] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.488] FindClose (in: hFindFile=0x8099390 | out: hFindFile=0x8099390) returned 1 [0156.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81003a0) returned 1 [0156.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 [0156.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafa88) returned 1 Thread: id = 2179 os_tid = 0x1db0 [0153.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6688 [0153.073] wcscpy (in: _Dest=0x2ff6688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0153.073] wcscat (in: _Dest=0x2ff6688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0153.073] wcscat (in: _Dest=0x2ff6688, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*" [0153.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efdec0 [0153.073] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0153.992] wcscmp (_String1=".", _String2=".") returned 0 [0153.992] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.992] wcscmp (_String1="..", _String2=".") returned 1 [0153.992] wcscmp (_String1="..", _String2="..") returned 0 [0153.992] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="VERISI~2.CER")) returned 1 [0153.992] wcscmp (_String1="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", _String2=".") returned 1 [0153.992] wcscmp (_String1="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", _String2="..") returned 1 [0153.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2f97f0 [0153.992] wcscpy (in: _Dest=0x2f97f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0153.992] wcscat (in: _Dest=0x2f97f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0153.993] wcscat (in: _Dest=0x2f97f0, _Source="VeriSign_Class_3_Code_Signing_2001-4_CA.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" [0154.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2f97f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0154.160] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="VERISI~1.CER")) returned 1 [0154.160] wcscmp (_String1="VeriSign_Class_3_Public_Primary_CA.cer", _String2=".") returned 1 [0154.160] wcscmp (_String1="VeriSign_Class_3_Public_Primary_CA.cer", _String2="..") returned 1 [0154.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e24d40 [0154.160] wcscpy (in: _Dest=0x3e24d40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0154.160] wcscat (in: _Dest=0x3e24d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0154.160] wcscat (in: _Dest=0x3e24d40, _Source="VeriSign_Class_3_Public_Primary_CA.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" [0154.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0154.161] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8520e9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 1 [0154.161] wcscmp (_String1="VS_ComponentSigningIntermediate.cer", _String2=".") returned 1 [0154.161] wcscmp (_String1="VS_ComponentSigningIntermediate.cer", _String2="..") returned 1 [0154.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dada38 [0154.162] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0154.162] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0154.162] wcscat (in: _Dest=0x3dada38, _Source="VS_ComponentSigningIntermediate.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" [0154.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dada38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0154.163] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8520e9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 0 [0154.163] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efdec0) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6688) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 Thread: id = 2180 os_tid = 0x1db4 [0153.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b878 [0153.074] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" [0153.074] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\" [0153.074] wcscat (in: _Dest=0x35b878, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*" [0153.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe128 [0153.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x3efe128 | out: lpFindFileData=0x3efe128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5540ee90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55434ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0153.791] wcscmp (_String1=".", _String2=".") returned 0 [0153.791] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3efe128 | out: lpFindFileData=0x3efe128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5540ee90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55434ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.791] wcscmp (_String1="..", _String2=".") returned 1 [0153.791] wcscmp (_String1="..", _String2="..") returned 0 [0153.792] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3efe128 | out: lpFindFileData=0x3efe128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa429f800, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa429f800, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 1 [0153.792] wcscmp (_String1="Notebook03.onepkg", _String2=".") returned 1 [0153.792] wcscmp (_String1="Notebook03.onepkg", _String2="..") returned 1 [0153.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1b218 [0153.792] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" [0153.792] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\" [0153.792] wcscat (in: _Dest=0x3e1b218, _Source="Notebook03.onepkg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" [0159.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg")) returned 0x20 [0159.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg", dwFileAttributes=0x20) returned 0 [0159.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.340] GetLastError () returned 0x5 [0159.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg", dwFileAttributes=0x20) returned 0 [0159.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 [0159.340] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3efe128 | out: lpFindFileData=0x3efe128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa429f800, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa429f800, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 0 [0159.340] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0159.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe128) returned 1 [0159.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0159.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81878b0) returned 1 Thread: id = 2181 os_tid = 0x1db8 [0153.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e120e8 [0153.075] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0153.075] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0153.075] wcscat (in: _Dest=0x3e120e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*" [0153.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe390 [0153.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0153.792] wcscmp (_String1=".", _String2=".") returned 0 [0153.792] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.792] wcscmp (_String1="..", _String2=".") returned 1 [0153.792] wcscmp (_String1="..", _String2="..") returned 0 [0153.792] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf31a00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x55376910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3bf31a00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1 [0153.792] wcscmp (_String1="ACADEMIC.ONE", _String2=".") returned 1 [0153.792] wcscmp (_String1="ACADEMIC.ONE", _String2="..") returned 1 [0153.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c008 [0153.792] wcscpy (in: _Dest=0x35c008, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0153.792] wcscat (in: _Dest=0x35c008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0153.792] wcscat (in: _Dest=0x35c008, _Source="ACADEMIC.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" [0154.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0154.084] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf31a00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x55376910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3bf31a00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1 [0154.084] wcscmp (_String1="BLANK.ONE", _String2=".") returned 1 [0154.084] wcscmp (_String1="BLANK.ONE", _String2="..") returned 1 [0154.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c4d8 [0154.084] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0154.084] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0154.084] wcscat (in: _Dest=0x35c4d8, _Source="BLANK.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" [0154.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0154.088] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf31a00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x5539ca70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3bf31a00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1 [0154.088] wcscmp (_String1="BUSINESS.ONE", _String2=".") returned 1 [0154.088] wcscmp (_String1="BUSINESS.ONE", _String2="..") returned 1 [0154.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c2c8 [0154.088] wcscpy (in: _Dest=0x35c2c8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0154.088] wcscat (in: _Dest=0x35c2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0154.088] wcscat (in: _Dest=0x35c2c8, _Source="BUSINESS.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" [0154.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0154.089] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ac1ed00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ac1ed00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1 [0154.089] wcscmp (_String1="DESIGNER.ONE", _String2=".") returned 1 [0154.089] wcscmp (_String1="DESIGNER.ONE", _String2="..") returned 1 [0154.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b718 [0154.089] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0154.089] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0154.089] wcscat (in: _Dest=0x35b718, _Source="DESIGNER.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" [0154.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0154.090] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3990c000, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3990c000, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1 [0154.090] wcscmp (_String1="PLANNERS.ONE", _String2=".") returned 1 [0154.090] wcscmp (_String1="PLANNERS.ONE", _String2="..") returned 1 [0154.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35af88 [0154.090] wcscpy (in: _Dest=0x35af88, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0154.090] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0154.090] wcscat (in: _Dest=0x35af88, _Source="PLANNERS.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" [0154.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35af88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0154.091] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3990c000, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3990c000, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 0 [0154.091] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0154.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe390) returned 1 [0154.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 [0154.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cff0) returned 1 Thread: id = 2182 os_tid = 0x1dbc [0153.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg")) returned 0x20 [0153.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0153.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.077] GetLastError () returned 0x5 [0153.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0153.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a798) returned 1 Thread: id = 2183 os_tid = 0x1dc0 [0153.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip")) returned 0x20 [0153.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", dwFileAttributes=0x20) returned 0 [0153.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.081] GetLastError () returned 0x5 [0153.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", dwFileAttributes=0x20) returned 0 [0153.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 Thread: id = 2184 os_tid = 0x1dc4 [0153.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip")) returned 0x20 [0153.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0153.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.084] GetLastError () returned 0x5 [0153.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0153.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80207e0) returned 1 Thread: id = 2185 os_tid = 0x1dc8 [0153.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip")) returned 0x20 [0153.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0153.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.092] GetLastError () returned 0x5 [0153.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0153.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e657a0) returned 1 Thread: id = 2186 os_tid = 0x1dcc [0153.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip")) returned 0x20 [0153.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", dwFileAttributes=0x20) returned 0 [0153.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.100] GetLastError () returned 0x5 [0153.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", dwFileAttributes=0x20) returned 0 [0153.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65950) returned 1 Thread: id = 2187 os_tid = 0x1dd0 [0153.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip")) returned 0x20 [0153.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", dwFileAttributes=0x20) returned 0 [0153.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.103] GetLastError () returned 0x5 [0153.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", dwFileAttributes=0x20) returned 0 [0153.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e655f0) returned 1 Thread: id = 2188 os_tid = 0x1dd4 [0153.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip")) returned 0x20 [0153.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0153.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.115] GetLastError () returned 0x5 [0153.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0153.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39dc8) returned 1 Thread: id = 2189 os_tid = 0x1dd8 [0153.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip")) returned 0x20 [0153.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", dwFileAttributes=0x20) returned 0 [0153.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.117] GetLastError () returned 0x5 [0153.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", dwFileAttributes=0x20) returned 0 [0153.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b00) returned 1 Thread: id = 2190 os_tid = 0x1ddc [0153.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip")) returned 0x20 [0153.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0153.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.119] GetLastError () returned 0x5 [0153.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0153.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 Thread: id = 2191 os_tid = 0x1de0 [0153.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip")) returned 0x20 [0153.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", dwFileAttributes=0x20) returned 0 [0153.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.121] GetLastError () returned 0x5 [0153.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", dwFileAttributes=0x20) returned 0 [0153.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 2192 os_tid = 0x1de4 [0153.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip")) returned 0x20 [0153.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0153.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.123] GetLastError () returned 0x5 [0153.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0153.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 2193 os_tid = 0x1de8 [0153.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip")) returned 0x20 [0153.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", dwFileAttributes=0x20) returned 0 [0153.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.128] GetLastError () returned 0x5 [0153.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", dwFileAttributes=0x20) returned 0 [0153.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deeff0) returned 1 Thread: id = 2194 os_tid = 0x1dec [0153.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip")) returned 0x20 [0154.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0154.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.947] GetLastError () returned 0x5 [0154.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0154.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 Thread: id = 2195 os_tid = 0x1df0 [0153.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip")) returned 0x20 [0154.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0154.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.948] GetLastError () returned 0x5 [0154.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0154.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a168) returned 1 Thread: id = 2196 os_tid = 0x1df4 [0153.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip")) returned 0x20 [0154.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", dwFileAttributes=0x20) returned 0 [0154.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.452] GetLastError () returned 0x5 [0154.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", dwFileAttributes=0x20) returned 0 [0154.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 2197 os_tid = 0x1df8 [0153.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip")) returned 0x20 [0154.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", dwFileAttributes=0x20) returned 0 [0154.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.454] GetLastError () returned 0x5 [0154.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", dwFileAttributes=0x20) returned 0 [0154.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b3b8) returned 1 Thread: id = 2198 os_tid = 0x1dfc [0153.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip")) returned 0x20 [0154.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0154.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.945] GetLastError () returned 0x5 [0154.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0154.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 Thread: id = 2199 os_tid = 0x1e00 [0153.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3329e8 [0153.140] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0153.140] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0153.141] wcscat (in: _Dest=0x3329e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*" [0153.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe5f8 [0153.141] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*", lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099710 [0153.141] wcscmp (_String1=".", _String2=".") returned 0 [0153.141] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.141] wcscmp (_String1="..", _String2=".") returned 1 [0153.141] wcscmp (_String1="..", _String2="..") returned 0 [0153.141] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0153.141] wcscmp (_String1="x86", _String2=".") returned 1 [0153.141] wcscmp (_String1="x86", _String2="..") returned 1 [0153.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6070 [0153.141] wcscpy (in: _Dest=0x81d6070, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0153.142] wcscat (in: _Dest=0x81d6070, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0153.142] wcscat (in: _Dest=0x81d6070, _Source="x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0154.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0154.098] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0154.098] FindClose (in: hFindFile=0x8099710 | out: hFindFile=0x8099710) returned 1 [0154.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe5f8) returned 1 [0154.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 [0154.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 2200 os_tid = 0x1e04 [0153.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb16a8 [0153.142] wcscpy (in: _Dest=0x3eb16a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" [0153.142] wcscat (in: _Dest=0x3eb16a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\" [0153.142] wcscat (in: _Dest=0x3eb16a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*" [0153.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe860 [0153.142] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x3efe860 | out: lpFindFileData=0x3efe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80996d0 [0153.143] wcscmp (_String1=".", _String2=".") returned 0 [0153.143] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3efe860 | out: lpFindFileData=0x3efe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.143] wcscmp (_String1="..", _String2=".") returned 1 [0153.143] wcscmp (_String1="..", _String2="..") returned 0 [0153.143] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3efe860 | out: lpFindFileData=0x3efe860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f65fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0153.143] wcscmp (_String1="Built-In Building Blocks.dotx", _String2=".") returned 1 [0153.143] wcscmp (_String1="Built-In Building Blocks.dotx", _String2="..") returned 1 [0153.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d5c88 [0153.143] wcscpy (in: _Dest=0x81d5c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" [0153.143] wcscat (in: _Dest=0x81d5c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\" [0153.143] wcscat (in: _Dest=0x81d5c88, _Source="Built-In Building Blocks.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" [0154.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0154.100] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3efe860 | out: lpFindFileData=0x3efe860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f65fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0154.100] FindClose (in: hFindFile=0x80996d0 | out: hFindFile=0x80996d0) returned 1 [0154.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe860) returned 1 [0154.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb16a8) returned 1 [0154.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 Thread: id = 2201 os_tid = 0x1e08 [0153.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dad468 [0153.144] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0153.144] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\" [0153.144] wcscat (in: _Dest=0x3dad468, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*" [0153.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efeac8 [0153.144] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80990d0 [0153.144] wcscmp (_String1=".", _String2=".") returned 0 [0153.144] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.144] wcscmp (_String1="..", _String2=".") returned 1 [0153.144] wcscmp (_String1="..", _String2="..") returned 0 [0153.144] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f5c500, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x68f5c500, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x68f5c500, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0153.144] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0153.144] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0153.145] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0153.145] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0153.145] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0153.145] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0153.145] FindClose (in: hFindFile=0x80990d0 | out: hFindFile=0x80990d0) returned 1 [0153.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efeac8) returned 1 [0153.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 [0153.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 Thread: id = 2202 os_tid = 0x1e0c [0153.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32598 [0153.147] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0153.147] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\" [0153.147] wcscat (in: _Dest=0x3f32598, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*" [0153.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efeac8 [0153.147] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0153.993] wcscmp (_String1=".", _String2=".") returned 0 [0153.993] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.993] wcscmp (_String1="..", _String2=".") returned 1 [0153.993] wcscmp (_String1="..", _String2="..") returned 0 [0153.993] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0153.993] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0153.993] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0153.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfaa8 [0153.993] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0153.993] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\" [0153.993] wcscat (in: _Dest=0x81bfaa8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" [0155.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b8 [0155.697] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.697] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.697] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f356d0 [0155.697] wcscpy (in: _Dest=0x3f356d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0155.697] wcscat (in: _Dest=0x3f356d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\" [0155.697] wcscat (in: _Dest=0x3f356d0, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" [0155.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f356d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0155.698] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.699] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0155.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efeac8) returned 1 [0155.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0155.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055570) returned 1 Thread: id = 2203 os_tid = 0x1e10 [0153.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32e80 [0153.148] wcscpy (in: _Dest=0x3f32e80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0153.148] wcscat (in: _Dest=0x3f32e80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\" [0153.148] wcscat (in: _Dest=0x3f32e80, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*" [0153.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efed30 [0153.148] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3487a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b18 [0154.456] wcscmp (_String1=".", _String2=".") returned 0 [0154.456] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3487a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.456] wcscmp (_String1="..", _String2=".") returned 1 [0154.456] wcscmp (_String1="..", _String2="..") returned 0 [0154.456] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.456] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.456] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfff8 [0154.456] wcscpy (in: _Dest=0x81bfff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0154.456] wcscat (in: _Dest=0x81bfff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\" [0154.456] wcscat (in: _Dest=0x81bfff8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" [0156.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e4 [0156.281] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.281] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.281] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35c70 [0156.281] wcscpy (in: _Dest=0x3f35c70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0156.282] wcscat (in: _Dest=0x3f35c70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\" [0156.282] wcscat (in: _Dest=0x3f35c70, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" [0156.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2910 [0156.283] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.283] FindClose (in: hFindFile=0x3f37b18 | out: hFindFile=0x3f37b18) returned 1 [0156.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efed30) returned 1 [0156.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e80) returned 1 [0156.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f398c8) returned 1 Thread: id = 2204 os_tid = 0x1e14 [0153.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32868 [0153.149] wcscpy (in: _Dest=0x3f32868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0153.149] wcscat (in: _Dest=0x3f32868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\" [0153.149] wcscat (in: _Dest=0x3f32868, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*" [0153.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efef98 [0153.149] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c18 [0154.457] wcscmp (_String1=".", _String2=".") returned 0 [0154.457] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.457] wcscmp (_String1="..", _String2=".") returned 1 [0154.457] wcscmp (_String1="..", _String2="..") returned 0 [0154.457] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.457] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.457] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0108 [0154.457] wcscpy (in: _Dest=0x81c0108, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0154.457] wcscat (in: _Dest=0x81c0108, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\" [0154.458] wcscat (in: _Dest=0x81c0108, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" [0156.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2550 [0156.609] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.609] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.609] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35640 [0156.610] wcscpy (in: _Dest=0x3f35640, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0156.610] wcscat (in: _Dest=0x3f35640, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\" [0156.610] wcscat (in: _Dest=0x3f35640, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" [0156.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a70 [0156.611] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.611] FindClose (in: hFindFile=0x3f37c18 | out: hFindFile=0x3f37c18) returned 1 [0156.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efef98) returned 1 [0156.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32868) returned 1 [0156.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a038) returned 1 Thread: id = 2205 os_tid = 0x1e18 [0153.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f329d0 [0153.150] wcscpy (in: _Dest=0x3f329d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0153.150] wcscat (in: _Dest=0x3f329d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\" [0153.150] wcscat (in: _Dest=0x3f329d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*" [0153.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0153.150] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37958 [0153.932] wcscmp (_String1=".", _String2=".") returned 0 [0153.932] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.932] wcscmp (_String1="..", _String2=".") returned 1 [0153.932] wcscmp (_String1="..", _String2="..") returned 0 [0153.932] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0153.932] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0153.932] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0153.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30848 [0153.933] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0153.933] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\" [0153.933] wcscat (in: _Dest=0x3f30848, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" [0156.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a0 [0156.402] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.402] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.402] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dd648 [0156.402] wcscpy (in: _Dest=0x81dd648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0156.403] wcscat (in: _Dest=0x81dd648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\" [0156.403] wcscat (in: _Dest=0x81dd648, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" [0156.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a4 [0156.404] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.404] FindClose (in: hFindFile=0x3f37958 | out: hFindFile=0x3f37958) returned 1 [0156.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0156.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f329d0) returned 1 [0156.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a18) returned 1 Thread: id = 2206 os_tid = 0x1e1c [0153.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32430 [0153.151] wcscpy (in: _Dest=0x3f32430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0153.151] wcscat (in: _Dest=0x3f32430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\" [0153.151] wcscat (in: _Dest=0x3f32430, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*" [0153.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0153.152] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f383d8 [0154.455] wcscmp (_String1=".", _String2=".") returned 0 [0154.455] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.455] wcscmp (_String1="..", _String2=".") returned 1 [0154.455] wcscmp (_String1="..", _String2="..") returned 0 [0154.455] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.455] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.455] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bff70 [0154.455] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0154.455] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\" [0154.455] wcscat (in: _Dest=0x81bff70, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" [0163.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d4 [0163.151] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0163.151] wcscmp (_String1="license.html", _String2=".") returned 1 [0163.151] wcscmp (_String1="license.html", _String2="..") returned 1 [0163.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f36060 [0163.151] wcscpy (in: _Dest=0x3f36060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0163.151] wcscat (in: _Dest=0x3f36060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\" [0163.151] wcscat (in: _Dest=0x3f36060, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" [0163.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f36060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0163.152] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0163.152] FindClose (in: hFindFile=0x3f383d8 | out: hFindFile=0x3f383d8) returned 1 [0163.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0163.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0163.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a1f8) returned 1 Thread: id = 2207 os_tid = 0x1e20 [0153.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32958 [0153.158] wcscpy (in: _Dest=0x3f32958, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0153.158] wcscat (in: _Dest=0x3f32958, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\" [0153.158] wcscat (in: _Dest=0x3f32958, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*" [0153.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0153.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0154.461] wcscmp (_String1=".", _String2=".") returned 0 [0154.461] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.462] wcscmp (_String1="..", _String2=".") returned 1 [0154.462] wcscmp (_String1="..", _String2="..") returned 0 [0154.462] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.462] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.462] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c03b0 [0154.462] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0154.462] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\" [0154.462] wcscat (in: _Dest=0x81c03b0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" [0155.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2504 [0155.130] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.130] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.130] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1bb8 [0155.131] wcscpy (in: _Dest=0x3eb1bb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0155.131] wcscat (in: _Dest=0x3eb1bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\" [0155.131] wcscat (in: _Dest=0x3eb1bb8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" [0155.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e8 [0155.132] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.132] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0155.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0155.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0155.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39708) returned 1 Thread: id = 2208 os_tid = 0x1e24 [0153.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32f70 [0153.159] wcscpy (in: _Dest=0x3f32f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0153.159] wcscat (in: _Dest=0x3f32f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\" [0153.159] wcscat (in: _Dest=0x3f32f70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*" [0153.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cd58 [0153.159] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38398 [0154.456] wcscmp (_String1=".", _String2=".") returned 0 [0154.456] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.457] wcscmp (_String1="..", _String2=".") returned 1 [0154.457] wcscmp (_String1="..", _String2="..") returned 0 [0154.457] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.457] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.457] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0080 [0154.457] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0154.457] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\" [0154.457] wcscat (in: _Dest=0x81c0080, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" [0155.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e8 [0155.117] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.117] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.117] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354ab0 [0155.118] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0155.118] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\" [0155.118] wcscat (in: _Dest=0x354ab0, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" [0155.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26dc [0155.119] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.119] FindClose (in: hFindFile=0x3f38398 | out: hFindFile=0x3f38398) returned 1 [0155.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd58) returned 1 [0155.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 [0155.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d98) returned 1 Thread: id = 2209 os_tid = 0x1e28 [0153.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32e08 [0153.160] wcscpy (in: _Dest=0x3f32e08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0153.160] wcscat (in: _Dest=0x3f32e08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\" [0153.160] wcscat (in: _Dest=0x3f32e08, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*" [0153.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07370 [0153.160] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0154.460] wcscmp (_String1=".", _String2=".") returned 0 [0154.460] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.460] wcscmp (_String1="..", _String2=".") returned 1 [0154.460] wcscmp (_String1="..", _String2="..") returned 0 [0154.460] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.460] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.460] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c02a0 [0154.460] wcscpy (in: _Dest=0x81c02a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0154.460] wcscat (in: _Dest=0x81c02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\" [0154.460] wcscat (in: _Dest=0x81c02a0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" [0155.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24fc [0155.126] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.126] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.126] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2278 [0155.126] wcscpy (in: _Dest=0x3eb2278, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0155.126] wcscat (in: _Dest=0x3eb2278, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\" [0155.126] wcscat (in: _Dest=0x3eb2278, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" [0155.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e4 [0155.128] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.128] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0155.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07370) returned 1 [0155.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e08) returned 1 [0155.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39c48) returned 1 Thread: id = 2210 os_tid = 0x1e2c [0153.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32ef8 [0153.187] wcscpy (in: _Dest=0x3f32ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0153.187] wcscat (in: _Dest=0x3f32ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\" [0153.187] wcscat (in: _Dest=0x3f32ef8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*" [0153.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f075d8 [0153.187] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0154.458] wcscmp (_String1=".", _String2=".") returned 0 [0154.458] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.458] wcscmp (_String1="..", _String2=".") returned 1 [0154.458] wcscmp (_String1="..", _String2="..") returned 0 [0154.458] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.458] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.458] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0190 [0154.458] wcscpy (in: _Dest=0x81c0190, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0154.458] wcscat (in: _Dest=0x81c0190, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\" [0154.458] wcscat (in: _Dest=0x81c0190, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" [0155.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f4 [0155.122] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.122] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.122] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2308 [0155.122] wcscpy (in: _Dest=0x3eb2308, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0155.122] wcscat (in: _Dest=0x3eb2308, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\" [0155.122] wcscat (in: _Dest=0x3eb2308, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" [0155.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e0 [0155.123] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.123] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0155.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f075d8) returned 1 [0155.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 [0155.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a118) returned 1 Thread: id = 2211 os_tid = 0x1e30 [0153.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32d18 [0153.188] wcscpy (in: _Dest=0x3f32d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0153.188] wcscat (in: _Dest=0x3f32d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\" [0153.188] wcscat (in: _Dest=0x3f32d18, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*" [0153.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07840 [0153.188] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38218 [0154.462] wcscmp (_String1=".", _String2=".") returned 0 [0154.462] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.462] wcscmp (_String1="..", _String2=".") returned 1 [0154.462] wcscmp (_String1="..", _String2="..") returned 0 [0154.463] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.463] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.463] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053fc8 [0154.463] wcscpy (in: _Dest=0x8053fc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0154.463] wcscat (in: _Dest=0x8053fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\" [0154.463] wcscat (in: _Dest=0x8053fc8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" [0156.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2500 [0156.291] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.291] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.291] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb1978 [0156.291] wcscpy (in: _Dest=0x3eb1978, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0156.291] wcscat (in: _Dest=0x3eb1978, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\" [0156.291] wcscat (in: _Dest=0x3eb1978, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" [0156.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2918 [0156.292] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.292] FindClose (in: hFindFile=0x3f38218 | out: hFindFile=0x3f38218) returned 1 [0156.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07840) returned 1 [0156.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d18) returned 1 [0156.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a268) returned 1 Thread: id = 2212 os_tid = 0x1e34 [0153.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32778 [0153.189] wcscpy (in: _Dest=0x3f32778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0153.189] wcscat (in: _Dest=0x3f32778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\" [0153.189] wcscat (in: _Dest=0x3f32778, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*" [0153.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07aa8 [0153.189] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0154.463] wcscmp (_String1=".", _String2=".") returned 0 [0154.463] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.463] wcscmp (_String1="..", _String2=".") returned 1 [0154.463] wcscmp (_String1="..", _String2="..") returned 0 [0154.463] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.463] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.463] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x80540d8 [0154.464] wcscpy (in: _Dest=0x80540d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0154.464] wcscat (in: _Dest=0x80540d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\" [0154.464] wcscat (in: _Dest=0x80540d8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" [0155.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80540d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x250c [0155.135] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.135] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.135] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2788 [0155.135] wcscpy (in: _Dest=0x3eb2788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0155.135] wcscat (in: _Dest=0x3eb2788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\" [0155.135] wcscat (in: _Dest=0x3eb2788, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" [0155.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26ec [0155.136] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.136] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0155.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07aa8) returned 1 [0155.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0155.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f397e8) returned 1 Thread: id = 2213 os_tid = 0x1e38 [0153.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f332b8 [0153.190] wcscpy (in: _Dest=0x3f332b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0153.190] wcscat (in: _Dest=0x3f332b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\" [0153.190] wcscat (in: _Dest=0x3f332b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*" [0153.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07d10 [0153.190] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0154.459] wcscmp (_String1=".", _String2=".") returned 0 [0154.459] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.459] wcscmp (_String1="..", _String2=".") returned 1 [0154.459] wcscmp (_String1="..", _String2="..") returned 0 [0154.459] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.459] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.459] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0218 [0154.459] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0154.459] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\" [0154.459] wcscat (in: _Dest=0x81c0218, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" [0156.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f0 [0156.286] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.286] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.286] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f356d0 [0156.286] wcscpy (in: _Dest=0x3f356d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0156.286] wcscat (in: _Dest=0x3f356d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\" [0156.286] wcscat (in: _Dest=0x3f356d0, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" [0156.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f356d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2914 [0156.288] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.288] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0156.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07d10) returned 1 [0156.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0156.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39b68) returned 1 Thread: id = 2214 os_tid = 0x1e3c [0153.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32bb0 [0153.191] wcscpy (in: _Dest=0x3f32bb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0153.191] wcscat (in: _Dest=0x3f32bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\" [0153.191] wcscat (in: _Dest=0x3f32bb0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*" [0153.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07f78 [0153.191] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0154.464] wcscmp (_String1=".", _String2=".") returned 0 [0154.464] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.464] wcscmp (_String1="..", _String2=".") returned 1 [0154.464] wcscmp (_String1="..", _String2="..") returned 0 [0154.464] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.464] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.464] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053418 [0154.464] wcscpy (in: _Dest=0x8053418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0154.464] wcscat (in: _Dest=0x8053418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\" [0154.465] wcscat (in: _Dest=0x8053418, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" [0156.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f8 [0156.618] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.618] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.618] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddb58 [0156.618] wcscpy (in: _Dest=0x81ddb58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0156.619] wcscat (in: _Dest=0x81ddb58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\" [0156.619] wcscat (in: _Dest=0x81ddb58, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" [0156.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a74 [0156.620] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.620] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0156.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07f78) returned 1 [0156.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32bb0) returned 1 [0156.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e08) returned 1 Thread: id = 2215 os_tid = 0x1e40 [0153.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e13810 [0153.191] wcscpy (in: _Dest=0x3e13810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0153.191] wcscat (in: _Dest=0x3e13810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\" [0153.191] wcscat (in: _Dest=0x3e13810, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*" [0153.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f081e0 [0153.192] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0154.465] wcscmp (_String1=".", _String2=".") returned 0 [0154.465] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.465] wcscmp (_String1="..", _String2=".") returned 1 [0154.465] wcscmp (_String1="..", _String2="..") returned 0 [0154.465] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.465] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.465] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8054628 [0154.465] wcscpy (in: _Dest=0x8054628, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0154.465] wcscat (in: _Dest=0x8054628, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\" [0154.465] wcscat (in: _Dest=0x8054628, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" [0155.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2514 [0155.139] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.139] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.139] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb28a8 [0155.139] wcscpy (in: _Dest=0x3eb28a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0155.139] wcscat (in: _Dest=0x3eb28a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\" [0155.140] wcscat (in: _Dest=0x3eb28a8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" [0155.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb28a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26f0 [0155.141] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.141] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0155.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f081e0) returned 1 [0155.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e13810) returned 1 [0155.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39698) returned 1 Thread: id = 2216 os_tid = 0x1e44 [0153.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e13798 [0153.192] wcscpy (in: _Dest=0x3e13798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0153.192] wcscat (in: _Dest=0x3e13798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\" [0153.192] wcscat (in: _Dest=0x3e13798, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*" [0153.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08448 [0153.192] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0154.465] wcscmp (_String1=".", _String2=".") returned 0 [0154.466] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.466] wcscmp (_String1="..", _String2=".") returned 1 [0154.466] wcscmp (_String1="..", _String2="..") returned 0 [0154.466] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.466] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.466] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053c10 [0154.466] wcscpy (in: _Dest=0x8053c10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0154.466] wcscat (in: _Dest=0x8053c10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\" [0154.466] wcscat (in: _Dest=0x8053c10, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" [0156.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2510 [0156.295] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.295] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.295] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb28a8 [0156.295] wcscpy (in: _Dest=0x3eb28a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0156.295] wcscat (in: _Dest=0x3eb28a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\" [0156.295] wcscat (in: _Dest=0x3eb28a8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" [0156.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb28a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x291c [0156.297] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.297] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0156.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08448) returned 1 [0156.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e13798) returned 1 [0156.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a188) returned 1 Thread: id = 2217 os_tid = 0x1e48 [0153.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e140f8 [0153.193] wcscpy (in: _Dest=0x3e140f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0153.193] wcscat (in: _Dest=0x3e140f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\" [0153.193] wcscat (in: _Dest=0x3e140f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*" [0153.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f086b0 [0153.193] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0154.466] wcscmp (_String1=".", _String2=".") returned 0 [0154.466] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.466] wcscmp (_String1="..", _String2=".") returned 1 [0154.466] wcscmp (_String1="..", _String2="..") returned 0 [0154.467] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.467] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.467] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053d20 [0154.467] wcscpy (in: _Dest=0x8053d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0154.467] wcscat (in: _Dest=0x8053d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\" [0154.467] wcscat (in: _Dest=0x8053d20, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" [0155.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x251c [0155.144] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.144] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.144] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2158 [0155.144] wcscpy (in: _Dest=0x3eb2158, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0155.144] wcscat (in: _Dest=0x3eb2158, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\" [0155.144] wcscat (in: _Dest=0x3eb2158, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" [0155.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26f4 [0155.145] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.145] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0155.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f086b0) returned 1 [0155.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e140f8) returned 1 [0155.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39bd8) returned 1 Thread: id = 2218 os_tid = 0x1e4c [0153.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d51548 [0153.193] wcscpy (in: _Dest=0x3d51548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0153.194] wcscat (in: _Dest=0x3d51548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\" [0153.194] wcscat (in: _Dest=0x3d51548, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*" [0153.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08918 [0153.194] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0154.467] wcscmp (_String1=".", _String2=".") returned 0 [0154.467] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.467] wcscmp (_String1="..", _String2=".") returned 1 [0154.467] wcscmp (_String1="..", _String2="..") returned 0 [0154.467] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.467] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.467] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053b88 [0154.467] wcscpy (in: _Dest=0x8053b88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0154.467] wcscat (in: _Dest=0x8053b88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\" [0154.467] wcscat (in: _Dest=0x8053b88, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" [0165.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a10 [0165.173] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0165.173] wcscmp (_String1="license.html", _String2=".") returned 1 [0165.173] wcscmp (_String1="license.html", _String2="..") returned 1 [0165.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb18e8 [0165.173] wcscpy (in: _Dest=0x3eb18e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0165.173] wcscat (in: _Dest=0x3eb18e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\" [0165.173] wcscat (in: _Dest=0x3eb18e8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" [0165.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb18e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a0c [0165.174] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0165.174] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0165.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08918) returned 1 [0165.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51548) returned 1 [0165.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a88) returned 1 Thread: id = 2219 os_tid = 0x1e50 [0153.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d51728 [0153.194] wcscpy (in: _Dest=0x3d51728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0153.194] wcscat (in: _Dest=0x3d51728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\" [0153.194] wcscat (in: _Dest=0x3d51728, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*" [0153.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08b80 [0153.194] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0154.468] wcscmp (_String1=".", _String2=".") returned 0 [0154.468] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.468] wcscmp (_String1="..", _String2=".") returned 1 [0154.468] wcscmp (_String1="..", _String2="..") returned 0 [0154.468] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.468] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.468] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053a78 [0154.468] wcscpy (in: _Dest=0x8053a78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0154.468] wcscat (in: _Dest=0x8053a78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\" [0154.468] wcscat (in: _Dest=0x8053a78, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" [0155.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2524 [0155.147] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.147] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.147] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb21e8 [0155.147] wcscpy (in: _Dest=0x3eb21e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0155.147] wcscat (in: _Dest=0x3eb21e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\" [0155.148] wcscat (in: _Dest=0x3eb21e8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" [0155.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb21e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26f8 [0155.149] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.149] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0155.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08b80) returned 1 [0155.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0155.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39cb8) returned 1 Thread: id = 2220 os_tid = 0x1e54 [0153.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3014f68 [0153.195] wcscpy (in: _Dest=0x3014f68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0153.195] wcscat (in: _Dest=0x3014f68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\" [0153.195] wcscat (in: _Dest=0x3014f68, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*" [0153.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08de8 [0153.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0154.468] wcscmp (_String1=".", _String2=".") returned 0 [0154.469] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.469] wcscmp (_String1="..", _String2=".") returned 1 [0154.469] wcscmp (_String1="..", _String2="..") returned 0 [0154.469] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.469] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.469] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x80539f0 [0154.469] wcscpy (in: _Dest=0x80539f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0154.469] wcscat (in: _Dest=0x80539f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\" [0154.469] wcscat (in: _Dest=0x80539f0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" [0156.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80539f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2520 [0156.301] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.301] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.301] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2788 [0156.301] wcscpy (in: _Dest=0x3eb2788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0156.301] wcscat (in: _Dest=0x3eb2788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\" [0156.301] wcscat (in: _Dest=0x3eb2788, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" [0156.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2920 [0156.305] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.305] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0156.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08de8) returned 1 [0156.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0156.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055030) returned 1 Thread: id = 2221 os_tid = 0x1e58 [0153.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x30152b0 [0153.195] wcscpy (in: _Dest=0x30152b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0153.196] wcscat (in: _Dest=0x30152b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\" [0153.196] wcscat (in: _Dest=0x30152b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*" [0153.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09050 [0153.196] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0154.469] wcscmp (_String1=".", _String2=".") returned 0 [0154.469] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.469] wcscmp (_String1="..", _String2=".") returned 1 [0154.469] wcscmp (_String1="..", _String2="..") returned 0 [0154.469] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.469] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.469] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053968 [0154.470] wcscpy (in: _Dest=0x8053968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0154.470] wcscat (in: _Dest=0x8053968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\" [0154.470] wcscat (in: _Dest=0x8053968, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" [0155.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x252c [0155.151] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.151] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.152] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2378 [0155.152] wcscpy (in: _Dest=0x3df2378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0155.152] wcscat (in: _Dest=0x3df2378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\" [0155.152] wcscat (in: _Dest=0x3df2378, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" [0155.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26fc [0155.157] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.158] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0155.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09050) returned 1 [0155.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0155.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054bd0) returned 1 Thread: id = 2222 os_tid = 0x1e5c [0153.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0b7a8 [0153.196] wcscpy (in: _Dest=0x3f0b7a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0153.196] wcscat (in: _Dest=0x3f0b7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\" [0153.196] wcscat (in: _Dest=0x3f0b7a8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*" [0153.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f092b8 [0153.196] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0154.470] wcscmp (_String1=".", _String2=".") returned 0 [0154.470] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.470] wcscmp (_String1="..", _String2=".") returned 1 [0154.470] wcscmp (_String1="..", _String2="..") returned 0 [0154.470] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.470] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.470] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x80538e0 [0154.470] wcscpy (in: _Dest=0x80538e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0154.470] wcscat (in: _Dest=0x80538e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\" [0154.470] wcscat (in: _Dest=0x80538e0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" [0156.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80538e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2518 [0156.623] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.623] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.623] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddbe8 [0156.623] wcscpy (in: _Dest=0x81ddbe8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0156.623] wcscat (in: _Dest=0x81ddbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\" [0156.623] wcscat (in: _Dest=0x81ddbe8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" [0156.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a78 [0156.624] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.624] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0156.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f092b8) returned 1 [0156.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0156.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80555e0) returned 1 Thread: id = 2223 os_tid = 0x1e60 [0153.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x348f48 [0153.197] wcscpy (in: _Dest=0x348f48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0153.197] wcscat (in: _Dest=0x348f48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\" [0153.197] wcscat (in: _Dest=0x348f48, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*" [0153.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09520 [0153.197] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37998 [0154.471] wcscmp (_String1=".", _String2=".") returned 0 [0154.471] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.471] wcscmp (_String1="..", _String2=".") returned 1 [0154.471] wcscmp (_String1="..", _String2="..") returned 0 [0154.471] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.471] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.471] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x8053858 [0154.471] wcscpy (in: _Dest=0x8053858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0154.471] wcscat (in: _Dest=0x8053858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\" [0154.471] wcscat (in: _Dest=0x8053858, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" [0155.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2534 [0155.160] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.160] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.160] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2888 [0155.160] wcscpy (in: _Dest=0x3df2888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0155.160] wcscat (in: _Dest=0x3df2888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\" [0155.160] wcscat (in: _Dest=0x3df2888, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" [0155.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df2888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2700 [0155.162] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.162] FindClose (in: hFindFile=0x3f37998 | out: hFindFile=0x3f37998) returned 1 [0155.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09520) returned 1 [0155.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0155.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a80) returned 1 Thread: id = 2224 os_tid = 0x1e64 [0153.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32688 [0153.800] wcscpy (in: _Dest=0x3f32688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0153.800] wcscat (in: _Dest=0x3f32688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\" [0153.800] wcscat (in: _Dest=0x3f32688, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*" [0153.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0153.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0154.460] wcscmp (_String1=".", _String2=".") returned 0 [0154.461] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.461] wcscmp (_String1="..", _String2=".") returned 1 [0154.461] wcscmp (_String1="..", _String2="..") returned 0 [0154.461] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0154.461] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0154.461] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0154.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0328 [0154.461] wcscpy (in: _Dest=0x81c0328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0154.461] wcscat (in: _Dest=0x81c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\" [0154.461] wcscat (in: _Dest=0x81c0328, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" [0158.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2540 [0158.062] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0158.062] wcscmp (_String1="license.html", _String2=".") returned 1 [0158.062] wcscmp (_String1="license.html", _String2="..") returned 1 [0158.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35eb0 [0158.062] wcscpy (in: _Dest=0x3f35eb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0158.062] wcscat (in: _Dest=0x3f35eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\" [0158.062] wcscat (in: _Dest=0x3f35eb0, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" [0158.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bf0 [0158.064] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0158.064] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0158.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0158.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0158.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055420) returned 1 Thread: id = 2225 os_tid = 0x1e68 [0153.804] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp")) returned 0x2020 [0153.994] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", dwFileAttributes=0x20) returned 1 [0162.245] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a34 [0162.245] GetFileSizeEx (in: hFile=0x2a34, lpFileSize=0x775f9b0 | out: lpFileSize=0x775f9b0*=105456) returned 1 [0162.245] SetFilePointerEx (in: hFile=0x2a34, liDistanceToMove=0x19bec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.245] ReadFile (in: hFile=0x2a34, lpBuffer=0x775f9bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x775f998, lpOverlapped=0x0 | out: lpBuffer=0x775f9bc*, lpNumberOfBytesRead=0x775f998*=0x4, lpOverlapped=0x0) returned 1 [0162.248] SetFilePointerEx (in: hFile=0x2a34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0162.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0162.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0162.248] NtQuerySystemTime (in: CurrentTime=0x775f938 | out: CurrentTime=0x775f938*=132471540304800000) returned 0x0 [0162.248] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x4584302b [0162.248] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x6c78f234 [0162.248] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x49a65020 [0162.248] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x4dbc2eda [0162.248] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x86abf3e [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x508d9d9c [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x4ec3abe1 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x55d1c839 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x36d7f818 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x127ba728 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x9db761d [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x4c1bebb1 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x60e57c6 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x6ac438c0 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x265c0c3f [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x2fa58d87 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0xd6dce50 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x695602e6 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x8a672a3 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x171a9da0 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x6a5909db [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x36636530 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x6020ea80 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x42c183d4 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x29a8ceef [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x2d02e25c [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x5df4799a [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x6171fc7b [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x3daf82b6 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x2f09b0e0 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x32cc1242 [0162.249] RtlRandomEx (in: Seed=0x775f930 | out: Seed=0x775f930) returned 0x785f367e [0162.261] SetFilePointerEx (in: hFile=0x2a34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.261] ReadFile (in: hFile=0x2a34, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x775f938, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0x775f938*=0x3c00, lpOverlapped=0x0) returned 1 [0162.262] SetFilePointerEx (in: hFile=0x2a34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309070 [0162.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bbe0 [0162.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0162.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0162.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0162.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0162.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0162.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0162.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bbe0) returned 1 [0162.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309070) returned 1 [0162.263] WriteFile (in: hFile=0x2a34, lpBuffer=0x80b8498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x775f938, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesWritten=0x775f938*=0x3c00, lpOverlapped=0x0) returned 1 [0164.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0164.891] SetFilePointerEx (in: hFile=0x2a34, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.891] ReadFile (in: hFile=0x2a34, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x775f938, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0x775f938*=0x3c00, lpOverlapped=0x0) returned 1 [0165.224] SetFilePointerEx (in: hFile=0x2a34, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095a68 [0165.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51548 [0165.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0165.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0165.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0165.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0165.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0165.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10b8) returned 1 [0165.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51548) returned 1 [0165.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095a68) returned 1 [0165.225] WriteFile (in: hFile=0x2a34, lpBuffer=0x80cb0c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x775f938, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesWritten=0x775f938*=0x3c00, lpOverlapped=0x0) returned 1 [0166.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0166.549] SetFilePointerEx (in: hFile=0x2a34, liDistanceToMove=0x15ff0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.549] ReadFile (in: hFile=0x2a34, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x775f938, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0x775f938*=0x3c00, lpOverlapped=0x0) returned 1 [0166.550] SetFilePointerEx (in: hFile=0x2a34, liDistanceToMove=0x15ff0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4728 [0166.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e680d8 [0166.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0166.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0166.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0166.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0166.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b8b0 [0166.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b8b0) returned 1 [0166.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0166.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4728) returned 1 [0166.551] WriteFile (in: hFile=0x2a34, lpBuffer=0x80cb0c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x775f938, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesWritten=0x775f938*=0x3c00, lpOverlapped=0x0) returned 1 [0166.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0166.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fceb90 [0166.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0166.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ed4be8 [0166.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0166.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0166.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0166.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0166.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a228) returned 1 [0166.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x182) returned 0x30746a0 [0166.961] SetFilePointerEx (in: hFile=0x2a34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.961] WriteFile (in: hFile=0x2a34, lpBuffer=0x30746a0*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x775f9a4, lpOverlapped=0x0 | out: lpBuffer=0x30746a0*, lpNumberOfBytesWritten=0x775f9a4*=0x182, lpOverlapped=0x0) returned 1 [0166.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30746a0) returned 1 [0166.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4be8) returned 1 [0166.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0166.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce9f0) returned 1 [0166.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fceb90) returned 1 [0166.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0166.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0166.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0166.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae008 [0166.998] wcscpy (in: _Dest=0x3dae008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" [0166.998] wcscat (in: _Dest=0x3dae008, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp.f0dbec" [0166.998] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp.f0dbec", NtPathName=0x775f928, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0166.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec198 [0167.006] FlushFileBuffers (hFile=0x2a34) returned 1 [0167.009] CloseHandle (hObject=0x2a34) returned 1 [0167.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333228 [0167.011] wcscpy (in: _Dest=0x333228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" [0167.011] wcscat (in: _Dest=0x333228, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\F0DBEC-Readme.txt" [0167.011] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\f0dbec-readme.txt")) returned 0xffffffff [0167.011] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a34 [0167.011] WriteFile (in: hFile=0x2a34, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x775f94c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x775f94c*=0x70c, lpOverlapped=0x0) returned 1 [0167.254] CloseHandle (hObject=0x2a34) returned 1 [0167.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333228) returned 1 [0167.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80206f0) returned 1 Thread: id = 2226 os_tid = 0x1e6c [0153.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333228 [0153.805] wcscpy (in: _Dest=0x333228, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0153.805] wcscat (in: _Dest=0x333228, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0153.805] wcscat (in: _Dest=0x333228, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*" [0153.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09788 [0153.805] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0154.483] wcscmp (_String1=".", _String2=".") returned 0 [0154.483] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.483] wcscmp (_String1="..", _String2=".") returned 1 [0154.483] wcscmp (_String1="..", _String2="..") returned 0 [0154.483] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0154.483] wcscmp (_String1="all", _String2=".") returned 1 [0154.483] wcscmp (_String1="all", _String2="..") returned 1 [0154.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d5710 [0154.483] wcscpy (in: _Dest=0x81d5710, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0154.483] wcscat (in: _Dest=0x81d5710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0154.483] wcscat (in: _Dest=0x81d5710, _Source="all" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" [0158.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d5710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0158.076] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara", cAlternateFileName="")) returned 1 [0158.076] wcscmp (_String1="ara", _String2=".") returned 1 [0158.076] wcscmp (_String1="ara", _String2="..") returned 1 [0158.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6138 [0158.076] wcscpy (in: _Dest=0x81d6138, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.076] wcscat (in: _Dest=0x81d6138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.076] wcscat (in: _Dest=0x81d6138, _Source="ara" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara" [0158.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08 [0158.078] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0158.078] wcscmp (_String1="brt", _String2=".") returned 1 [0158.078] wcscmp (_String1="brt", _String2="..") returned 1 [0158.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d5bc0 [0158.078] wcscpy (in: _Dest=0x81d5bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.078] wcscat (in: _Dest=0x81d5bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.078] wcscat (in: _Dest=0x81d5bc0, _Source="brt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" [0158.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d5bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0c [0158.079] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0158.079] wcscmp (_String1="brz", _String2=".") returned 1 [0158.079] wcscmp (_String1="brz", _String2="..") returned 1 [0158.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d65e8 [0158.080] wcscpy (in: _Dest=0x81d65e8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.080] wcscat (in: _Dest=0x81d65e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.080] wcscat (in: _Dest=0x81d65e8, _Source="brz" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" [0158.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d65e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c10 [0158.081] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul", cAlternateFileName="")) returned 1 [0158.081] wcscmp (_String1="bul", _String2=".") returned 1 [0158.081] wcscmp (_String1="bul", _String2="..") returned 1 [0158.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d66b0 [0158.081] wcscpy (in: _Dest=0x81d66b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.081] wcscat (in: _Dest=0x81d66b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.081] wcscat (in: _Dest=0x81d66b0, _Source="bul" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul" [0158.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d66b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c14 [0158.083] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="can", cAlternateFileName="")) returned 1 [0158.083] wcscmp (_String1="can", _String2=".") returned 1 [0158.083] wcscmp (_String1="can", _String2="..") returned 1 [0158.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6520 [0158.083] wcscpy (in: _Dest=0x81d6520, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.083] wcscat (in: _Dest=0x81d6520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.083] wcscat (in: _Dest=0x81d6520, _Source="can" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can" [0158.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c18 [0158.085] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr", cAlternateFileName="")) returned 1 [0158.085] wcscmp (_String1="cfr", _String2=".") returned 1 [0158.085] wcscmp (_String1="cfr", _String2="..") returned 1 [0158.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6778 [0158.085] wcscpy (in: _Dest=0x81d6778, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.085] wcscat (in: _Dest=0x81d6778, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.085] wcscat (in: _Dest=0x81d6778, _Source="cfr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr" [0158.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c1c [0158.086] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl", cAlternateFileName="")) returned 1 [0158.086] wcscmp (_String1="ctl", _String2=".") returned 1 [0158.086] wcscmp (_String1="ctl", _String2="..") returned 1 [0158.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6840 [0158.086] wcscpy (in: _Dest=0x81d6840, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.086] wcscat (in: _Dest=0x81d6840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.087] wcscat (in: _Dest=0x81d6840, _Source="ctl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl" [0158.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c20 [0158.088] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze", cAlternateFileName="")) returned 1 [0158.088] wcscmp (_String1="cze", _String2=".") returned 1 [0158.088] wcscmp (_String1="cze", _String2="..") returned 1 [0158.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6908 [0158.088] wcscpy (in: _Dest=0x81d6908, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.088] wcscat (in: _Dest=0x81d6908, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.088] wcscat (in: _Dest=0x81d6908, _Source="cze" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze" [0158.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c24 [0158.090] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0158.090] wcscmp (_String1="dan", _String2=".") returned 1 [0158.090] wcscmp (_String1="dan", _String2="..") returned 1 [0158.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d69d0 [0158.090] wcscpy (in: _Dest=0x81d69d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.090] wcscat (in: _Dest=0x81d69d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.090] wcscat (in: _Dest=0x81d69d0, _Source="dan" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" [0158.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d69d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c28 [0158.091] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0158.091] wcscmp (_String1="dut", _String2=".") returned 1 [0158.091] wcscmp (_String1="dut", _String2="..") returned 1 [0158.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6a98 [0158.092] wcscpy (in: _Dest=0x81d6a98, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.092] wcscat (in: _Dest=0x81d6a98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.092] wcscat (in: _Dest=0x81d6a98, _Source="dut" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" [0158.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c2c [0158.093] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0158.093] wcscmp (_String1="eng", _String2=".") returned 1 [0158.093] wcscmp (_String1="eng", _String2="..") returned 1 [0158.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6b60 [0158.093] wcscpy (in: _Dest=0x81d6b60, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.093] wcscat (in: _Dest=0x81d6b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.093] wcscat (in: _Dest=0x81d6b60, _Source="eng" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" [0158.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c30 [0158.094] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="est", cAlternateFileName="")) returned 1 [0158.094] wcscmp (_String1="est", _String2=".") returned 1 [0158.094] wcscmp (_String1="est", _String2="..") returned 1 [0158.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6c28 [0158.094] wcscpy (in: _Dest=0x81d6c28, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.095] wcscat (in: _Dest=0x81d6c28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.095] wcscat (in: _Dest=0x81d6c28, _Source="est" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est" [0158.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c34 [0158.096] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin", cAlternateFileName="")) returned 1 [0158.096] wcscmp (_String1="fin", _String2=".") returned 1 [0158.096] wcscmp (_String1="fin", _String2="..") returned 1 [0158.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6cf0 [0158.096] wcscpy (in: _Dest=0x81d6cf0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.096] wcscat (in: _Dest=0x81d6cf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.096] wcscat (in: _Dest=0x81d6cf0, _Source="fin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin" [0158.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c38 [0158.097] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0158.098] wcscmp (_String1="frn", _String2=".") returned 1 [0158.098] wcscmp (_String1="frn", _String2="..") returned 1 [0158.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6db8 [0158.098] wcscpy (in: _Dest=0x81d6db8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.098] wcscat (in: _Dest=0x81d6db8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.098] wcscat (in: _Dest=0x81d6db8, _Source="frn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" [0158.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c3c [0158.099] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre", cAlternateFileName="")) returned 1 [0158.099] wcscmp (_String1="gre", _String2=".") returned 1 [0158.099] wcscmp (_String1="gre", _String2="..") returned 1 [0158.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6e80 [0158.099] wcscpy (in: _Dest=0x81d6e80, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.099] wcscat (in: _Dest=0x81d6e80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.099] wcscat (in: _Dest=0x81d6e80, _Source="gre" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre" [0158.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c40 [0158.100] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0158.100] wcscmp (_String1="grm", _String2=".") returned 1 [0158.101] wcscmp (_String1="grm", _String2="..") returned 1 [0158.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6f48 [0158.101] wcscpy (in: _Dest=0x81d6f48, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.101] wcscat (in: _Dest=0x81d6f48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.101] wcscat (in: _Dest=0x81d6f48, _Source="grm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" [0158.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c44 [0158.102] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb", cAlternateFileName="")) returned 1 [0158.102] wcscmp (_String1="heb", _String2=".") returned 1 [0158.102] wcscmp (_String1="heb", _String2="..") returned 1 [0158.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d7010 [0158.102] wcscpy (in: _Dest=0x81d7010, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.102] wcscat (in: _Dest=0x81d7010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.102] wcscat (in: _Dest=0x81d7010, _Source="heb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb" [0158.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d7010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c48 [0158.103] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv", cAlternateFileName="")) returned 1 [0158.103] wcscmp (_String1="hrv", _String2=".") returned 1 [0158.103] wcscmp (_String1="hrv", _String2="..") returned 1 [0158.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d70d8 [0158.104] wcscpy (in: _Dest=0x81d70d8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.104] wcscat (in: _Dest=0x81d70d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.104] wcscat (in: _Dest=0x81d70d8, _Source="hrv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv" [0158.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d70d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c4c [0158.105] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun", cAlternateFileName="")) returned 1 [0158.105] wcscmp (_String1="hun", _String2=".") returned 1 [0158.105] wcscmp (_String1="hun", _String2="..") returned 1 [0158.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d71a0 [0158.105] wcscpy (in: _Dest=0x81d71a0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.105] wcscat (in: _Dest=0x81d71a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.105] wcscat (in: _Dest=0x81d71a0, _Source="hun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun" [0158.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d71a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c50 [0158.106] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0158.106] wcscmp (_String1="itl", _String2=".") returned 1 [0158.106] wcscmp (_String1="itl", _String2="..") returned 1 [0158.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d7268 [0158.107] wcscpy (in: _Dest=0x81d7268, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.107] wcscat (in: _Dest=0x81d7268, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.107] wcscat (in: _Dest=0x81d7268, _Source="itl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" [0158.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d7268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c54 [0158.108] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav", cAlternateFileName="")) returned 1 [0158.108] wcscmp (_String1="lav", _String2=".") returned 1 [0158.108] wcscmp (_String1="lav", _String2="..") returned 1 [0158.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d7330 [0158.108] wcscpy (in: _Dest=0x81d7330, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.108] wcscat (in: _Dest=0x81d7330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.108] wcscat (in: _Dest=0x81d7330, _Source="lav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav" [0158.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d7330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c58 [0158.109] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit", cAlternateFileName="")) returned 1 [0158.109] wcscmp (_String1="lit", _String2=".") returned 1 [0158.109] wcscmp (_String1="lit", _String2="..") returned 1 [0158.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d73f8 [0158.109] wcscpy (in: _Dest=0x81d73f8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.109] wcscat (in: _Dest=0x81d73f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.110] wcscat (in: _Dest=0x81d73f8, _Source="lit" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit" [0158.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d73f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c5c [0158.111] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0158.111] wcscmp (_String1="nrw", _String2=".") returned 1 [0158.111] wcscmp (_String1="nrw", _String2="..") returned 1 [0158.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d74c0 [0158.111] wcscpy (in: _Dest=0x81d74c0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.111] wcscat (in: _Dest=0x81d74c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.111] wcscat (in: _Dest=0x81d74c0, _Source="nrw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" [0158.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d74c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c60 [0158.112] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn", cAlternateFileName="")) returned 1 [0158.112] wcscmp (_String1="nyn", _String2=".") returned 1 [0158.112] wcscmp (_String1="nyn", _String2="..") returned 1 [0158.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e354d8 [0158.112] wcscpy (in: _Dest=0x3e354d8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0158.112] wcscat (in: _Dest=0x3e354d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0158.112] wcscat (in: _Dest=0x3e354d8, _Source="nyn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn" [0158.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e354d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c64 [0161.291] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol", cAlternateFileName="")) returned 1 [0161.292] wcscmp (_String1="pol", _String2=".") returned 1 [0161.292] wcscmp (_String1="pol", _String2="..") returned 1 [0161.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e7bc0 [0161.292] wcscpy (in: _Dest=0x81e7bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0161.292] wcscat (in: _Dest=0x81e7bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0161.292] wcscat (in: _Dest=0x81e7bc0, _Source="pol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol" [0163.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e7bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0163.165] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0163.165] wcscmp (_String1="prt", _String2=".") returned 1 [0163.165] wcscmp (_String1="prt", _String2="..") returned 1 [0163.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e7c88 [0163.165] wcscpy (in: _Dest=0x81e7c88, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0163.165] wcscat (in: _Dest=0x81e7c88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0163.165] wcscat (in: _Dest=0x81e7c88, _Source="prt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" [0163.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e7c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0163.166] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum", cAlternateFileName="")) returned 1 [0163.166] wcscmp (_String1="rum", _String2=".") returned 1 [0163.166] wcscmp (_String1="rum", _String2="..") returned 1 [0163.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e7e18 [0163.166] wcscpy (in: _Dest=0x81e7e18, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0163.166] wcscat (in: _Dest=0x81e7e18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0163.166] wcscat (in: _Dest=0x81e7e18, _Source="rum" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum" [0163.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e7e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0163.167] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus", cAlternateFileName="")) returned 1 [0163.167] wcscmp (_String1="rus", _String2=".") returned 1 [0163.167] wcscmp (_String1="rus", _String2="..") returned 1 [0163.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e7ee0 [0163.167] wcscpy (in: _Dest=0x81e7ee0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0163.168] wcscat (in: _Dest=0x81e7ee0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0163.168] wcscat (in: _Dest=0x81e7ee0, _Source="rus" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus" [0163.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e7ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0163.168] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr", cAlternateFileName="")) returned 1 [0163.168] wcscmp (_String1="sgr", _String2=".") returned 1 [0163.169] wcscmp (_String1="sgr", _String2="..") returned 1 [0163.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e7fa8 [0163.169] wcscpy (in: _Dest=0x81e7fa8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0163.169] wcscat (in: _Dest=0x81e7fa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0163.169] wcscat (in: _Dest=0x81e7fa8, _Source="sgr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr" [0163.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e7fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0163.170] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo", cAlternateFileName="")) returned 1 [0163.170] wcscmp (_String1="slo", _String2=".") returned 1 [0163.170] wcscmp (_String1="slo", _String2="..") returned 1 [0163.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e8070 [0163.170] wcscpy (in: _Dest=0x81e8070, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0163.170] wcscat (in: _Dest=0x81e8070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0163.170] wcscat (in: _Dest=0x81e8070, _Source="slo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo" [0163.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e8070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0163.171] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0163.171] wcscmp (_String1="spn", _String2=".") returned 1 [0163.171] wcscmp (_String1="spn", _String2="..") returned 1 [0163.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e8138 [0163.171] wcscpy (in: _Dest=0x81e8138, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0163.171] wcscat (in: _Dest=0x81e8138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0163.171] wcscat (in: _Dest=0x81e8138, _Source="spn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" [0163.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e8138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0163.172] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0163.172] wcscmp (_String1="swd", _String2=".") returned 1 [0163.172] wcscmp (_String1="swd", _String2="..") returned 1 [0163.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e8200 [0163.172] wcscpy (in: _Dest=0x81e8200, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0163.172] wcscat (in: _Dest=0x81e8200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0163.172] wcscat (in: _Dest=0x81e8200, _Source="swd" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" [0163.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e8200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0163.174] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur", cAlternateFileName="")) returned 1 [0163.174] wcscmp (_String1="tur", _String2=".") returned 1 [0163.174] wcscmp (_String1="tur", _String2="..") returned 1 [0163.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e82c8 [0163.174] wcscpy (in: _Dest=0x81e82c8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0163.174] wcscat (in: _Dest=0x81e82c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0163.174] wcscat (in: _Dest=0x81e82c8, _Source="tur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur" [0163.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e82c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0163.175] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur", cAlternateFileName="")) returned 0 [0164.767] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0166.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09788) returned 1 [0166.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333228) returned 1 [0166.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 2227 os_tid = 0x1e70 [0153.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf")) returned 0x20 [0162.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF", dwFileAttributes=0x20) returned 0 [0162.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.597] GetLastError () returned 0x5 [0162.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF", dwFileAttributes=0x20) returned 0 [0162.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053eb8) returned 1 Thread: id = 2228 os_tid = 0x1e74 [0153.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf")) returned 0x20 [0162.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF", dwFileAttributes=0x20) returned 0 [0162.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.598] GetLastError () returned 0x5 [0162.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF", dwFileAttributes=0x20) returned 0 [0162.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eb40) returned 1 Thread: id = 2229 os_tid = 0x1e78 [0153.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf")) returned 0x20 [0162.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF", dwFileAttributes=0x20) returned 0 [0162.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.600] GetLastError () returned 0x5 [0162.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF", dwFileAttributes=0x20) returned 0 [0162.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f118) returned 1 Thread: id = 2230 os_tid = 0x1e7c [0153.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf")) returned 0x20 [0157.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF", dwFileAttributes=0x20) returned 0 [0157.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.596] GetLastError () returned 0x5 [0161.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF", dwFileAttributes=0x20) returned 0 [0161.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eef8) returned 1 Thread: id = 2231 os_tid = 0x1e80 [0153.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf")) returned 0x20 [0162.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF", dwFileAttributes=0x20) returned 0 [0162.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.601] GetLastError () returned 0x5 [0162.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF", dwFileAttributes=0x20) returned 0 [0162.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ede8) returned 1 Thread: id = 2232 os_tid = 0x1e84 [0153.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf")) returned 0x20 [0162.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF", dwFileAttributes=0x20) returned 0 [0162.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.545] GetLastError () returned 0x5 [0162.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF", dwFileAttributes=0x20) returned 0 [0162.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f090) returned 1 Thread: id = 2233 os_tid = 0x1e88 [0153.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf")) returned 0x20 [0162.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF", dwFileAttributes=0x20) returned 0 [0162.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.603] GetLastError () returned 0x5 [0162.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF", dwFileAttributes=0x20) returned 0 [0162.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 2234 os_tid = 0x1e8c [0153.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf")) returned 0x20 [0162.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF", dwFileAttributes=0x20) returned 0 [0162.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.604] GetLastError () returned 0x5 [0162.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF", dwFileAttributes=0x20) returned 0 [0162.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 2235 os_tid = 0x1e90 [0153.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf")) returned 0x20 [0162.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF", dwFileAttributes=0x20) returned 0 [0162.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.606] GetLastError () returned 0x5 [0162.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF", dwFileAttributes=0x20) returned 0 [0162.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f6f0) returned 1 Thread: id = 2236 os_tid = 0x1e94 [0153.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf")) returned 0x20 [0162.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF", dwFileAttributes=0x20) returned 0 [0162.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.621] GetLastError () returned 0x5 [0162.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF", dwFileAttributes=0x20) returned 0 [0162.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f1a0) returned 1 Thread: id = 2237 os_tid = 0x1e98 [0153.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf")) returned 0x20 [0162.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF", dwFileAttributes=0x20) returned 0 [0162.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.607] GetLastError () returned 0x5 [0162.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF", dwFileAttributes=0x20) returned 0 [0162.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 2238 os_tid = 0x1e9c [0153.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf")) returned 0x20 [0162.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF", dwFileAttributes=0x20) returned 0 [0162.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.609] GetLastError () returned 0x5 [0162.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF", dwFileAttributes=0x20) returned 0 [0162.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 2239 os_tid = 0x1ea0 [0153.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf")) returned 0x20 [0162.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF", dwFileAttributes=0x20) returned 0 [0162.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.610] GetLastError () returned 0x5 [0162.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF", dwFileAttributes=0x20) returned 0 [0162.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 2240 os_tid = 0x1ea4 [0153.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf")) returned 0x20 [0162.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF", dwFileAttributes=0x20) returned 0 [0162.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.469] GetLastError () returned 0x5 [0162.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF", dwFileAttributes=0x20) returned 0 [0162.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 2241 os_tid = 0x1ea8 [0153.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf")) returned 0x20 [0162.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF", dwFileAttributes=0x20) returned 0 [0162.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.612] GetLastError () returned 0x5 [0162.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF", dwFileAttributes=0x20) returned 0 [0162.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 2242 os_tid = 0x1eac [0153.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf")) returned 0x20 [0162.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF", dwFileAttributes=0x20) returned 0 [0162.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.613] GetLastError () returned 0x5 [0162.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF", dwFileAttributes=0x20) returned 0 [0162.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf5e0) returned 1 Thread: id = 2243 os_tid = 0x1eb0 [0153.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf")) returned 0x20 [0162.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF", dwFileAttributes=0x20) returned 0 [0162.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.615] GetLastError () returned 0x5 [0162.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF", dwFileAttributes=0x20) returned 0 [0162.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 2244 os_tid = 0x1eb4 [0153.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf")) returned 0x20 [0162.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF", dwFileAttributes=0x20) returned 0 [0162.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.521] GetLastError () returned 0x5 [0162.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF", dwFileAttributes=0x20) returned 0 [0162.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 2245 os_tid = 0x1eb8 [0153.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf")) returned 0x20 [0162.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF", dwFileAttributes=0x20) returned 0 [0162.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.616] GetLastError () returned 0x5 [0162.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF", dwFileAttributes=0x20) returned 0 [0162.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 2246 os_tid = 0x1ebc [0153.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif")) returned 0x20 [0162.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF", dwFileAttributes=0x20) returned 0 [0162.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.618] GetLastError () returned 0x5 [0162.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF", dwFileAttributes=0x20) returned 0 [0162.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 2247 os_tid = 0x1ec0 [0153.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf")) returned 0x20 [0162.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF", dwFileAttributes=0x20) returned 0 [0162.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.619] GetLastError () returned 0x5 [0162.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF", dwFileAttributes=0x20) returned 0 [0162.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf888) returned 1 Thread: id = 2248 os_tid = 0x1ec4 [0153.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf")) returned 0x20 [0161.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF", dwFileAttributes=0x20) returned 0 [0161.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.607] GetLastError () returned 0x5 [0161.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF", dwFileAttributes=0x20) returned 0 [0161.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 2249 os_tid = 0x1ec8 [0153.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf")) returned 0x20 [0162.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF", dwFileAttributes=0x20) returned 0 [0162.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.526] GetLastError () returned 0x5 [0162.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF", dwFileAttributes=0x20) returned 0 [0162.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf998) returned 1 Thread: id = 2250 os_tid = 0x1ecc [0153.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif")) returned 0x20 [0161.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF", dwFileAttributes=0x20) returned 0 [0161.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.521] GetLastError () returned 0x5 [0161.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF", dwFileAttributes=0x20) returned 0 [0161.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f348c0) returned 1 Thread: id = 2251 os_tid = 0x1ed0 [0153.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif")) returned 0x20 [0161.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF", dwFileAttributes=0x20) returned 0 [0161.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.467] GetLastError () returned 0x5 [0161.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF", dwFileAttributes=0x20) returned 0 [0161.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35760) returned 1 Thread: id = 2252 os_tid = 0x1ed4 [0153.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif")) returned 0x20 [0161.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF", dwFileAttributes=0x20) returned 0 [0161.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.542] GetLastError () returned 0x5 [0161.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF", dwFileAttributes=0x20) returned 0 [0161.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f359a0) returned 1 Thread: id = 2253 os_tid = 0x1ed8 [0153.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif")) returned 0x20 [0159.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF", dwFileAttributes=0x20) returned 0 [0159.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.025] GetLastError () returned 0x5 [0159.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF", dwFileAttributes=0x20) returned 0 [0159.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35f40) returned 1 Thread: id = 2254 os_tid = 0x1edc [0153.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif")) returned 0x20 [0161.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF", dwFileAttributes=0x20) returned 0 [0161.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.591] GetLastError () returned 0x5 [0161.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF", dwFileAttributes=0x20) returned 0 [0161.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f362a0) returned 1 Thread: id = 2255 os_tid = 0x1ee0 [0153.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif")) returned 0x20 [0161.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF", dwFileAttributes=0x20) returned 0 [0161.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.577] GetLastError () returned 0x5 [0161.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF", dwFileAttributes=0x20) returned 0 [0161.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35fd0) returned 1 Thread: id = 2256 os_tid = 0x1ee4 [0153.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif")) returned 0x20 [0161.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF", dwFileAttributes=0x20) returned 0 [0161.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.575] GetLastError () returned 0x5 [0161.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF", dwFileAttributes=0x20) returned 0 [0161.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36210) returned 1 Thread: id = 2257 os_tid = 0x1ee8 [0153.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif")) returned 0x20 [0161.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF", dwFileAttributes=0x20) returned 0 [0161.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.538] GetLastError () returned 0x5 [0161.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF", dwFileAttributes=0x20) returned 0 [0161.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f355b0) returned 1 Thread: id = 2258 os_tid = 0x1eec [0153.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif")) returned 0x20 [0161.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF", dwFileAttributes=0x20) returned 0 [0161.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.573] GetLastError () returned 0x5 [0161.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF", dwFileAttributes=0x20) returned 0 [0161.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34a70) returned 1 Thread: id = 2259 os_tid = 0x1ef0 [0153.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif")) returned 0x20 [0161.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF", dwFileAttributes=0x20) returned 0 [0161.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.536] GetLastError () returned 0x5 [0161.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF", dwFileAttributes=0x20) returned 0 [0161.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35d90) returned 1 Thread: id = 2260 os_tid = 0x1ef4 [0153.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif")) returned 0x20 [0161.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF", dwFileAttributes=0x20) returned 0 [0161.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.535] GetLastError () returned 0x5 [0161.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF", dwFileAttributes=0x20) returned 0 [0161.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34b00) returned 1 Thread: id = 2261 os_tid = 0x1ef8 [0153.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif")) returned 0x20 [0161.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF", dwFileAttributes=0x20) returned 0 [0161.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.572] GetLastError () returned 0x5 [0161.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF", dwFileAttributes=0x20) returned 0 [0161.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34c20) returned 1 Thread: id = 2262 os_tid = 0x1efc [0153.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif")) returned 0x20 [0161.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF", dwFileAttributes=0x20) returned 0 [0161.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.533] GetLastError () returned 0x5 [0161.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF", dwFileAttributes=0x20) returned 0 [0161.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34440) returned 1 Thread: id = 2263 os_tid = 0x1f00 [0153.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif")) returned 0x20 [0161.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF", dwFileAttributes=0x20) returned 0 [0161.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.531] GetLastError () returned 0x5 [0161.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF", dwFileAttributes=0x20) returned 0 [0161.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f349e0) returned 1 Thread: id = 2264 os_tid = 0x1f04 [0153.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif")) returned 0x20 [0161.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF", dwFileAttributes=0x20) returned 0 [0161.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.570] GetLastError () returned 0x5 [0161.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF", dwFileAttributes=0x20) returned 0 [0161.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f347a0) returned 1 Thread: id = 2265 os_tid = 0x1f08 [0153.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif")) returned 0x20 [0161.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF", dwFileAttributes=0x20) returned 0 [0161.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.530] GetLastError () returned 0x5 [0161.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF", dwFileAttributes=0x20) returned 0 [0161.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34e60) returned 1 Thread: id = 2266 os_tid = 0x1f0c [0153.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif")) returned 0x20 [0161.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF", dwFileAttributes=0x20) returned 0 [0161.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.569] GetLastError () returned 0x5 [0161.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF", dwFileAttributes=0x20) returned 0 [0161.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34cb0) returned 1 Thread: id = 2267 os_tid = 0x1f10 [0153.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif")) returned 0x20 [0161.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF", dwFileAttributes=0x20) returned 0 [0161.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.528] GetLastError () returned 0x5 [0161.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF", dwFileAttributes=0x20) returned 0 [0161.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34dd0) returned 1 Thread: id = 2268 os_tid = 0x1f14 [0153.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif")) returned 0x20 [0161.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF", dwFileAttributes=0x20) returned 0 [0161.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.567] GetLastError () returned 0x5 [0161.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF", dwFileAttributes=0x20) returned 0 [0161.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36330) returned 1 Thread: id = 2269 os_tid = 0x1f18 [0153.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif")) returned 0x20 [0161.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF", dwFileAttributes=0x20) returned 0 [0161.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.526] GetLastError () returned 0x5 [0161.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF", dwFileAttributes=0x20) returned 0 [0161.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35e20) returned 1 Thread: id = 2270 os_tid = 0x1f1c [0153.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif")) returned 0x20 [0161.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF", dwFileAttributes=0x20) returned 0 [0161.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.566] GetLastError () returned 0x5 [0161.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF", dwFileAttributes=0x20) returned 0 [0161.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f352e0) returned 1 Thread: id = 2271 os_tid = 0x1f20 [0153.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif")) returned 0x20 [0161.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF", dwFileAttributes=0x20) returned 0 [0161.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.525] GetLastError () returned 0x5 [0161.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF", dwFileAttributes=0x20) returned 0 [0161.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34ef0) returned 1 Thread: id = 2272 os_tid = 0x1f24 [0153.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif")) returned 0x20 [0161.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF", dwFileAttributes=0x20) returned 0 [0161.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.519] GetLastError () returned 0x5 [0161.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF", dwFileAttributes=0x20) returned 0 [0161.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35520) returned 1 Thread: id = 2273 os_tid = 0x1f28 [0153.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif")) returned 0x20 [0161.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF", dwFileAttributes=0x20) returned 0 [0161.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.523] GetLastError () returned 0x5 [0161.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF", dwFileAttributes=0x20) returned 0 [0161.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1738) returned 1 Thread: id = 2274 os_tid = 0x1f2c [0153.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif")) returned 0x20 [0161.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF", dwFileAttributes=0x20) returned 0 [0161.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.518] GetLastError () returned 0x5 [0161.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF", dwFileAttributes=0x20) returned 0 [0161.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb26f8) returned 1 Thread: id = 2275 os_tid = 0x1f30 [0153.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif")) returned 0x20 [0161.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF", dwFileAttributes=0x20) returned 0 [0161.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.557] GetLastError () returned 0x5 [0161.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF", dwFileAttributes=0x20) returned 0 [0161.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2428) returned 1 Thread: id = 2276 os_tid = 0x1f34 [0153.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif")) returned 0x20 [0161.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF", dwFileAttributes=0x20) returned 0 [0161.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.543] GetLastError () returned 0x5 [0161.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF", dwFileAttributes=0x20) returned 0 [0161.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1c48) returned 1 Thread: id = 2277 os_tid = 0x1f38 [0153.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h")) returned 0x20 [0155.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0156.024] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.513] GetLastError () returned 0x5 [0158.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0158.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec50) returned 1 Thread: id = 2278 os_tid = 0x1f3c [0153.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h")) returned 0x20 [0158.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", dwFileAttributes=0x20) returned 0 [0158.451] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.452] GetLastError () returned 0x5 [0158.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", dwFileAttributes=0x20) returned 0 [0158.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 2279 os_tid = 0x1f40 [0153.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2")) returned 0x20 [0158.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0158.538] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.538] GetLastError () returned 0x5 [0158.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0158.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 2280 os_tid = 0x1f44 [0153.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v")) returned 0x20 [0158.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", dwFileAttributes=0x20) returned 0 [0158.540] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.540] GetLastError () returned 0x5 [0158.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", dwFileAttributes=0x20) returned 0 [0158.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 2281 os_tid = 0x1f48 [0153.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h")) returned 0x20 [0158.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", dwFileAttributes=0x20) returned 0 [0158.541] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.541] GetLastError () returned 0x5 [0158.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", dwFileAttributes=0x20) returned 0 [0158.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 2282 os_tid = 0x1f4c [0154.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v")) returned 0x20 [0158.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", dwFileAttributes=0x20) returned 0 [0158.542] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.542] GetLastError () returned 0x5 [0158.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", dwFileAttributes=0x20) returned 0 [0158.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 2283 os_tid = 0x1f50 [0154.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h")) returned 0x20 [0158.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0158.543] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.544] GetLastError () returned 0x5 [0158.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0158.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 2284 os_tid = 0x1f54 [0154.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2")) returned 0x20 [0158.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0158.545] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.545] GetLastError () returned 0x5 [0158.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0158.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 2285 os_tid = 0x1f58 [0154.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c")) returned 0x20 [0158.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", dwFileAttributes=0x20) returned 0 [0158.546] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.546] GetLastError () returned 0x5 [0158.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", dwFileAttributes=0x20) returned 0 [0158.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 Thread: id = 2286 os_tid = 0x1f5c [0154.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h")) returned 0x20 [0158.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", dwFileAttributes=0x20) returned 0 [0158.547] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.547] GetLastError () returned 0x5 [0158.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", dwFileAttributes=0x20) returned 0 [0158.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4108) returned 1 Thread: id = 2287 os_tid = 0x1f60 [0154.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v")) returned 0x20 [0158.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", dwFileAttributes=0x20) returned 0 [0158.548] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.549] GetLastError () returned 0x5 [0158.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", dwFileAttributes=0x20) returned 0 [0158.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5008) returned 1 Thread: id = 2288 os_tid = 0x1f64 [0154.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0")) returned 0x20 [0158.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", dwFileAttributes=0x20) returned 0 [0158.550] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.555] GetLastError () returned 0x5 [0158.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", dwFileAttributes=0x20) returned 0 [0158.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 2289 os_tid = 0x1f68 [0154.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1")) returned 0x20 [0158.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", dwFileAttributes=0x20) returned 0 [0158.556] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.556] GetLastError () returned 0x5 [0158.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", dwFileAttributes=0x20) returned 0 [0158.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 2290 os_tid = 0x1f6c [0154.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2")) returned 0x20 [0158.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", dwFileAttributes=0x20) returned 0 [0158.622] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.622] GetLastError () returned 0x5 [0158.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", dwFileAttributes=0x20) returned 0 [0158.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f312e8) returned 1 Thread: id = 2291 os_tid = 0x1f70 [0154.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3")) returned 0x20 [0158.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", dwFileAttributes=0x20) returned 0 [0158.623] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.624] GetLastError () returned 0x5 [0158.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", dwFileAttributes=0x20) returned 0 [0158.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c00) returned 1 Thread: id = 2292 os_tid = 0x1f74 [0154.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4")) returned 0x20 [0157.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", dwFileAttributes=0x20) returned 0 [0157.377] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.377] GetLastError () returned 0x5 [0157.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", dwFileAttributes=0x20) returned 0 [0157.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 2293 os_tid = 0x1f78 [0154.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5")) returned 0x20 [0157.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", dwFileAttributes=0x20) returned 0 [0157.149] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.149] GetLastError () returned 0x5 [0157.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", dwFileAttributes=0x20) returned 0 [0157.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f858) returned 1 Thread: id = 2294 os_tid = 0x1f7c [0154.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc")) returned 0x20 [0158.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", dwFileAttributes=0x20) returned 0 [0158.537] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.537] GetLastError () returned 0x5 [0158.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", dwFileAttributes=0x20) returned 0 [0158.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2e48) returned 1 Thread: id = 2295 os_tid = 0x1f80 [0154.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5")) returned 0x20 [0158.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", dwFileAttributes=0x20) returned 0 [0158.535] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.536] GetLastError () returned 0x5 [0158.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", dwFileAttributes=0x20) returned 0 [0158.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb29c8) returned 1 Thread: id = 2296 os_tid = 0x1f84 [0154.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid")) returned 0x20 [0158.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", dwFileAttributes=0x20) returned 0 [0158.534] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.534] GetLastError () returned 0x5 [0158.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", dwFileAttributes=0x20) returned 0 [0158.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb12b8) returned 1 Thread: id = 2297 os_tid = 0x1f88 [0154.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host")) returned 0x20 [0158.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", dwFileAttributes=0x20) returned 0 [0158.533] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.533] GetLastError () returned 0x5 [0158.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", dwFileAttributes=0x20) returned 0 [0158.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb14f8) returned 1 Thread: id = 2298 os_tid = 0x1f8c [0154.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac")) returned 0x20 [0158.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", dwFileAttributes=0x20) returned 0 [0158.532] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.532] GetLastError () returned 0x5 [0158.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", dwFileAttributes=0x20) returned 0 [0158.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1588) returned 1 Thread: id = 2299 os_tid = 0x1f90 [0154.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2")) returned 0x20 [0158.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", dwFileAttributes=0x20) returned 0 [0158.530] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.530] GetLastError () returned 0x5 [0158.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", dwFileAttributes=0x20) returned 0 [0158.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1e88) returned 1 Thread: id = 2300 os_tid = 0x1f94 [0154.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0")) returned 0x20 [0158.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", dwFileAttributes=0x20) returned 0 [0158.529] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.529] GetLastError () returned 0x5 [0158.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", dwFileAttributes=0x20) returned 0 [0158.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 2301 os_tid = 0x1f98 [0154.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1")) returned 0x20 [0158.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", dwFileAttributes=0x20) returned 0 [0158.528] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.528] GetLastError () returned 0x5 [0158.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", dwFileAttributes=0x20) returned 0 [0158.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 Thread: id = 2302 os_tid = 0x1f9c [0154.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2")) returned 0x20 [0158.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", dwFileAttributes=0x20) returned 0 [0158.526] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.526] GetLastError () returned 0x5 [0158.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", dwFileAttributes=0x20) returned 0 [0158.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30518) returned 1 Thread: id = 2303 os_tid = 0x1fa0 [0154.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3")) returned 0x20 [0158.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", dwFileAttributes=0x20) returned 0 [0158.525] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.525] GetLastError () returned 0x5 [0158.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", dwFileAttributes=0x20) returned 0 [0158.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 2304 os_tid = 0x1fa4 [0154.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4")) returned 0x20 [0158.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", dwFileAttributes=0x20) returned 0 [0158.520] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.520] GetLastError () returned 0x5 [0158.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", dwFileAttributes=0x20) returned 0 [0158.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f418) returned 1 Thread: id = 2305 os_tid = 0x1fa8 [0154.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5")) returned 0x20 [0158.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", dwFileAttributes=0x20) returned 0 [0158.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.518] GetLastError () returned 0x5 [0158.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", dwFileAttributes=0x20) returned 0 [0158.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 2306 os_tid = 0x1fac [0154.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc")) returned 0x20 [0158.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", dwFileAttributes=0x20) returned 0 [0158.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.517] GetLastError () returned 0x5 [0158.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", dwFileAttributes=0x20) returned 0 [0158.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1618) returned 1 Thread: id = 2307 os_tid = 0x1fb0 [0154.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc")) returned 0x20 [0158.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0158.514] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.515] GetLastError () returned 0x5 [0158.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0158.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1858) returned 1 Thread: id = 2314 os_tid = 0x1fb4 [0154.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f35eb0 [0154.502] wcscpy (in: _Dest=0x3f35eb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0154.502] wcscat (in: _Dest=0x3f35eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0154.502] wcscat (in: _Dest=0x3f35eb0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*" [0154.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100870 [0154.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77038290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9052e150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55688 [0154.968] wcscmp (_String1=".", _String2=".") returned 0 [0154.968] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77038290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9052e150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.968] wcscmp (_String1="..", _String2=".") returned 1 [0154.968] wcscmp (_String1="..", _String2="..") returned 0 [0154.968] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7705e3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1 [0154.968] wcscmp (_String1="COUGH.WAV", _String2=".") returned 1 [0154.968] wcscmp (_String1="COUGH.WAV", _String2="..") returned 1 [0154.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b998 [0154.968] wcscpy (in: _Dest=0x819b998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0154.968] wcscat (in: _Dest=0x819b998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0154.968] wcscat (in: _Dest=0x819b998, _Source="COUGH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" [0158.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26bc [0158.049] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88692f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGGLE.WAV", cAlternateFileName="")) returned 1 [0158.049] wcscmp (_String1="GIGGLE.WAV", _String2=".") returned 1 [0158.049] wcscmp (_String1="GIGGLE.WAV", _String2="..") returned 1 [0158.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcb88 [0158.049] wcscpy (in: _Dest=0x81dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0158.049] wcscat (in: _Dest=0x81dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0158.049] wcscat (in: _Dest=0x81dcb88, _Source="GIGGLE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" [0158.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd8 [0158.051] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="HICCUP.WAV", cAlternateFileName="")) returned 1 [0158.051] wcscmp (_String1="HICCUP.WAV", _String2=".") returned 1 [0158.051] wcscmp (_String1="HICCUP.WAV", _String2="..") returned 1 [0158.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcc28 [0158.051] wcscpy (in: _Dest=0x81dcc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0158.051] wcscat (in: _Dest=0x81dcc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0158.051] wcscat (in: _Dest=0x81dcc28, _Source="HICCUP.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" [0158.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bdc [0158.052] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMHMM.WAV", cAlternateFileName="")) returned 1 [0158.052] wcscmp (_String1="MMHMM.WAV", _String2=".") returned 1 [0158.052] wcscmp (_String1="MMHMM.WAV", _String2="..") returned 1 [0158.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dccc8 [0158.052] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0158.053] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0158.053] wcscat (in: _Dest=0x81dccc8, _Source="MMHMM.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" [0158.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be0 [0158.054] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNEEZE.WAV", cAlternateFileName="")) returned 1 [0158.054] wcscmp (_String1="SNEEZE.WAV", _String2=".") returned 1 [0158.054] wcscmp (_String1="SNEEZE.WAV", _String2="..") returned 1 [0158.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcd68 [0158.054] wcscpy (in: _Dest=0x81dcd68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0158.054] wcscat (in: _Dest=0x81dcd68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0158.054] wcscat (in: _Dest=0x81dcd68, _Source="SNEEZE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" [0158.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be4 [0158.055] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="THROAT.WAV", cAlternateFileName="")) returned 1 [0158.055] wcscmp (_String1="THROAT.WAV", _String2=".") returned 1 [0158.055] wcscmp (_String1="THROAT.WAV", _String2="..") returned 1 [0158.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dce08 [0158.055] wcscpy (in: _Dest=0x81dce08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0158.055] wcscat (in: _Dest=0x81dce08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0158.056] wcscat (in: _Dest=0x81dce08, _Source="THROAT.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" [0158.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be8 [0158.057] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 1 [0158.057] wcscmp (_String1="Whistling.wav", _String2=".") returned 1 [0158.057] wcscmp (_String1="Whistling.wav", _String2="..") returned 1 [0158.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8188330 [0158.057] wcscpy (in: _Dest=0x8188330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0158.057] wcscat (in: _Dest=0x8188330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0158.057] wcscat (in: _Dest=0x8188330, _Source="Whistling.wav" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" [0158.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bec [0158.059] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 0 [0158.059] FindClose (in: hFindFile=0x3e55688 | out: hFindFile=0x3e55688) returned 1 [0158.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100870) returned 1 [0158.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35eb0) returned 1 [0158.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 2315 os_tid = 0x1fb8 [0154.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f36180 [0154.506] wcscpy (in: _Dest=0x3f36180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0154.506] wcscat (in: _Dest=0x3f36180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0154.506] wcscat (in: _Dest=0x3f36180, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*" [0154.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100d40 [0154.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9233b710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0154.968] wcscmp (_String1=".", _String2=".") returned 0 [0154.968] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9233b710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.968] wcscmp (_String1="..", _String2=".") returned 1 [0154.968] wcscmp (_String1="..", _String2="..") returned 0 [0154.968] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1 [0154.968] wcscmp (_String1="ALARM.WAV", _String2=".") returned 1 [0154.969] wcscmp (_String1="ALARM.WAV", _String2="..") returned 1 [0154.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b038 [0154.969] wcscpy (in: _Dest=0x819b038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0154.969] wcscat (in: _Dest=0x819b038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0154.969] wcscat (in: _Dest=0x819b038, _Source="ALARM.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" [0162.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x288c [0162.374] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUZZ.WAV", cAlternateFileName="")) returned 1 [0162.375] wcscmp (_String1="BUZZ.WAV", _String2=".") returned 1 [0162.375] wcscmp (_String1="BUZZ.WAV", _String2="..") returned 1 [0162.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dce08 [0162.375] wcscpy (in: _Dest=0x81dce08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0162.375] wcscat (in: _Dest=0x81dce08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0162.375] wcscat (in: _Dest=0x81dce08, _Source="BUZZ.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" [0162.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0162.376] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd686, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0162.376] wcscmp (_String1="LASER.WAV", _String2=".") returned 1 [0162.376] wcscmp (_String1="LASER.WAV", _String2="..") returned 1 [0162.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dcc28 [0162.376] wcscpy (in: _Dest=0x81dcc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0162.376] wcscat (in: _Dest=0x81dcc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0162.376] wcscat (in: _Dest=0x81dcc28, _Source="LASER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" [0162.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a30 [0162.377] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x100ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADAR.WAV", cAlternateFileName="")) returned 1 [0162.377] wcscmp (_String1="RADAR.WAV", _String2=".") returned 1 [0162.378] wcscmp (_String1="RADAR.WAV", _String2="..") returned 1 [0162.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dcb88 [0162.378] wcscpy (in: _Dest=0x81dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0162.378] wcscat (in: _Dest=0x81dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0162.378] wcscat (in: _Dest=0x81dcb88, _Source="RADAR.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" [0162.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0162.379] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOT.WAV", cAlternateFileName="")) returned 1 [0162.379] wcscmp (_String1="TOOT.WAV", _String2=".") returned 1 [0162.379] wcscmp (_String1="TOOT.WAV", _String2="..") returned 1 [0162.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dccc8 [0162.379] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0162.379] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0162.379] wcscat (in: _Dest=0x81dccc8, _Source="TOOT.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" [0162.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a2c [0162.381] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xea72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIBE.WAV", cAlternateFileName="")) returned 1 [0162.381] wcscmp (_String1="VIBE.WAV", _String2=".") returned 1 [0162.381] wcscmp (_String1="VIBE.WAV", _String2="..") returned 1 [0162.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dcd68 [0162.381] wcscpy (in: _Dest=0x81dcd68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0162.381] wcscat (in: _Dest=0x81dcd68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0162.381] wcscat (in: _Dest=0x81dcd68, _Source="VIBE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" [0162.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0162.383] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 1 [0162.383] wcscmp (_String1="WARN.WAV", _String2=".") returned 1 [0162.383] wcscmp (_String1="WARN.WAV", _String2="..") returned 1 [0162.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbf08 [0162.383] wcscpy (in: _Dest=0x81dbf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0162.383] wcscat (in: _Dest=0x81dbf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0162.383] wcscat (in: _Dest=0x81dbf08, _Source="WARN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" [0162.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a28 [0162.384] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 0 [0162.384] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0162.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100d40) returned 1 [0162.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36180) returned 1 [0162.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 2316 os_tid = 0x1fbc [0154.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1a08 [0154.509] wcscpy (in: _Dest=0x3eb1a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0154.509] wcscat (in: _Dest=0x3eb1a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0154.509] wcscat (in: _Dest=0x3eb1a08, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*" [0154.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0154.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55608 [0154.969] wcscmp (_String1=".", _String2=".") returned 0 [0154.969] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.969] wcscmp (_String1="..", _String2=".") returned 1 [0154.969] wcscmp (_String1="..", _String2="..") returned 0 [0154.969] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76ebb4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1 [0154.969] wcscmp (_String1="CAN.WAV", _String2=".") returned 1 [0154.969] wcscmp (_String1="CAN.WAV", _String2="..") returned 1 [0154.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d0d40 [0154.969] wcscpy (in: _Dest=0x81d0d40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0154.969] wcscat (in: _Dest=0x81d0d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0154.969] wcscat (in: _Dest=0x81d0d40, _Source="CAN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" [0163.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d4 [0163.020] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cd6150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPLER.WAV", cAlternateFileName="")) returned 1 [0163.020] wcscmp (_String1="COUPLER.WAV", _String2=".") returned 1 [0163.020] wcscmp (_String1="COUPLER.WAV", _String2="..") returned 1 [0163.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b038 [0163.020] wcscpy (in: _Dest=0x819b038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.020] wcscat (in: _Dest=0x819b038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.020] wcscat (in: _Dest=0x819b038, _Source="COUPLER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" [0163.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f0 [0163.021] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa412, dwReserved0=0x0, dwReserved1=0x0, cFileName="HORN.WAV", cAlternateFileName="")) returned 1 [0163.021] wcscmp (_String1="HORN.WAV", _String2=".") returned 1 [0163.021] wcscmp (_String1="HORN.WAV", _String2="..") returned 1 [0163.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819a598 [0163.022] wcscpy (in: _Dest=0x819a598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.022] wcscat (in: _Dest=0x819a598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.022] wcscat (in: _Dest=0x819a598, _Source="HORN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" [0163.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0163.023] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOT.WAV", cAlternateFileName="")) returned 1 [0163.023] wcscmp (_String1="SHOT.WAV", _String2=".") returned 1 [0163.023] wcscmp (_String1="SHOT.WAV", _String2="..") returned 1 [0163.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819ab38 [0163.023] wcscpy (in: _Dest=0x819ab38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.023] wcscat (in: _Dest=0x819ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.023] wcscat (in: _Dest=0x819ab38, _Source="SHOT.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" [0163.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2728 [0163.024] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf548, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOVEL.WAV", cAlternateFileName="")) returned 1 [0163.024] wcscmp (_String1="SHOVEL.WAV", _String2=".") returned 1 [0163.024] wcscmp (_String1="SHOVEL.WAV", _String2="..") returned 1 [0163.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bad8 [0163.025] wcscpy (in: _Dest=0x819bad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.025] wcscat (in: _Dest=0x819bad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.025] wcscat (in: _Dest=0x819bad8, _Source="SHOVEL.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" [0163.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2724 [0163.026] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xedd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPLASH.WAV", cAlternateFileName="")) returned 1 [0163.026] wcscmp (_String1="SPLASH.WAV", _String2=".") returned 1 [0163.026] wcscmp (_String1="SPLASH.WAV", _String2="..") returned 1 [0163.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a458 [0163.026] wcscpy (in: _Dest=0x819a458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.026] wcscat (in: _Dest=0x819a458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.026] wcscat (in: _Dest=0x819a458, _Source="SPLASH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" [0163.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2720 [0163.027] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0163.027] wcscmp (_String1="WHOOSH.WAV", _String2=".") returned 1 [0163.027] wcscmp (_String1="WHOOSH.WAV", _String2="..") returned 1 [0163.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b5d8 [0163.027] wcscpy (in: _Dest=0x819b5d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.027] wcscat (in: _Dest=0x819b5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.027] wcscat (in: _Dest=0x819b5d8, _Source="WHOOSH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" [0163.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x271c [0163.029] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 0 [0163.029] FindClose (in: hFindFile=0x3e55608 | out: hFindFile=0x3e55608) returned 1 [0163.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0163.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a08) returned 1 [0163.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 2317 os_tid = 0x1fc0 [0154.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf")) returned 0x20 [0155.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0155.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.947] GetLastError () returned 0x5 [0155.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0155.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81874c0) returned 1 Thread: id = 2318 os_tid = 0x1fc4 [0154.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf")) returned 0x20 [0155.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0155.949] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.949] GetLastError () returned 0x5 [0155.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0155.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c398) returned 1 Thread: id = 2319 os_tid = 0x1fc8 [0154.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf")) returned 0x20 [0155.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", dwFileAttributes=0x20) returned 0 [0155.950] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.951] GetLastError () returned 0x5 [0155.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", dwFileAttributes=0x20) returned 0 [0155.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81872c8) returned 1 Thread: id = 2320 os_tid = 0x1fcc [0154.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf")) returned 0x20 [0155.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", dwFileAttributes=0x20) returned 0 [0155.952] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.952] GetLastError () returned 0x5 [0155.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", dwFileAttributes=0x20) returned 0 [0155.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 2321 os_tid = 0x1fd0 [0154.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf")) returned 0x20 [0155.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", dwFileAttributes=0x20) returned 0 [0155.960] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.966] GetLastError () returned 0x5 [0155.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", dwFileAttributes=0x20) returned 0 [0155.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187220) returned 1 Thread: id = 2322 os_tid = 0x1fd4 [0154.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf")) returned 0x20 [0155.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", dwFileAttributes=0x20) returned 0 [0155.298] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.298] GetLastError () returned 0x5 [0155.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", dwFileAttributes=0x20) returned 0 [0155.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 2323 os_tid = 0x1fd8 [0154.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf")) returned 0x20 [0155.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", dwFileAttributes=0x20) returned 0 [0155.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.302] GetLastError () returned 0x5 [0155.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", dwFileAttributes=0x20) returned 0 [0155.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 2324 os_tid = 0x1fdc [0154.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf")) returned 0x20 [0155.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", dwFileAttributes=0x20) returned 0 [0155.300] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.300] GetLastError () returned 0x5 [0155.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", dwFileAttributes=0x20) returned 0 [0155.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 2325 os_tid = 0x1fe0 [0154.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf")) returned 0x20 [0154.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", dwFileAttributes=0x20) returned 0 [0154.526] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.526] GetLastError () returned 0x5 [0154.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", dwFileAttributes=0x20) returned 0 [0154.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a240) returned 1 Thread: id = 2326 os_tid = 0x1fe4 [0154.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl")) returned 0x20 [0154.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x20) returned 0 [0154.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.529] GetLastError () returned 0x5 [0154.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x20) returned 0 [0154.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c838) returned 1 Thread: id = 2327 os_tid = 0x1fe8 [0154.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl")) returned 0x20 [0154.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x20) returned 0 [0154.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.972] GetLastError () returned 0x5 [0154.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x20) returned 0 [0154.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0ae0) returned 1 Thread: id = 2328 os_tid = 0x1fec [0154.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl")) returned 0x20 [0154.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x20) returned 0 [0154.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.973] GetLastError () returned 0x5 [0154.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x20) returned 0 [0154.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1758) returned 1 Thread: id = 2329 os_tid = 0x1ff0 [0154.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl")) returned 0x20 [0155.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x20) returned 0 [0155.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.303] GetLastError () returned 0x5 [0155.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x20) returned 0 [0155.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 Thread: id = 2330 os_tid = 0x1ff4 [0154.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8020ba0 [0154.553] wcscpy (in: _Dest=0x8020ba0, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0154.553] wcscat (in: _Dest=0x8020ba0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\" [0154.553] wcscat (in: _Dest=0x8020ba0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" [0154.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0154.553] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55708 [0154.553] wcscmp (_String1=".", _String2=".") returned 0 [0154.553] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.553] wcscmp (_String1="..", _String2=".") returned 1 [0154.553] wcscmp (_String1="..", _String2="..") returned 0 [0154.553] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80ec00, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1d80ec00, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1d80ec00, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0154.553] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0154.553] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0154.553] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0154.553] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0154.553] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0154.554] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0154.554] FindClose (in: hFindFile=0x3e55708 | out: hFindFile=0x3e55708) returned 1 [0154.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0154.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020ba0) returned 1 [0154.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80209c0) returned 1 Thread: id = 2331 os_tid = 0x1ff8 [0154.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx")) returned 0x20 [0156.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx", dwFileAttributes=0x20) returned 0 [0157.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.772] GetLastError () returned 0x5 [0162.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx", dwFileAttributes=0x20) returned 0 [0163.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34d40) returned 1 Thread: id = 2332 os_tid = 0x1ffc [0154.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx")) returned 0x20 [0158.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx", dwFileAttributes=0x20) returned 0 [0158.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.918] GetLastError () returned 0x5 [0158.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx", dwFileAttributes=0x20) returned 0 [0158.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 Thread: id = 2333 os_tid = 0xfe4 [0154.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx")) returned 0x20 [0162.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx", dwFileAttributes=0x20) returned 0 [0163.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.774] GetLastError () returned 0x5 [0163.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx", dwFileAttributes=0x20) returned 0 [0163.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a98) returned 1 Thread: id = 2334 os_tid = 0x1d74 [0154.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx")) returned 0x20 [0162.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx", dwFileAttributes=0x20) returned 0 [0162.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.775] GetLastError () returned 0x5 [0163.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx", dwFileAttributes=0x20) returned 0 [0163.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f448) returned 1 Thread: id = 2335 os_tid = 0x2004 [0154.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx")) returned 0x20 [0163.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx", dwFileAttributes=0x20) returned 0 [0163.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.778] GetLastError () returned 0x5 [0163.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx", dwFileAttributes=0x20) returned 0 [0163.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d16c0) returned 1 Thread: id = 2336 os_tid = 0x2008 [0154.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx")) returned 0x20 [0163.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx", dwFileAttributes=0x20) returned 0 [0163.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.781] GetLastError () returned 0x5 [0163.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx", dwFileAttributes=0x20) returned 0 [0163.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 Thread: id = 2337 os_tid = 0x200c [0154.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx")) returned 0x20 [0163.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx", dwFileAttributes=0x20) returned 0 [0163.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.783] GetLastError () returned 0x5 [0163.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx", dwFileAttributes=0x20) returned 0 [0163.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d17f0) returned 1 Thread: id = 2338 os_tid = 0x2010 [0154.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx")) returned 0x20 [0163.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx", dwFileAttributes=0x20) returned 0 [0163.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.786] GetLastError () returned 0x5 [0163.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx", dwFileAttributes=0x20) returned 0 [0163.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0fe8) returned 1 Thread: id = 2339 os_tid = 0x2014 [0154.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx")) returned 0x20 [0163.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx", dwFileAttributes=0x20) returned 0 [0163.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.788] GetLastError () returned 0x5 [0163.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx", dwFileAttributes=0x20) returned 0 [0163.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2d28) returned 1 Thread: id = 2340 os_tid = 0x2018 [0154.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx")) returned 0x20 [0163.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx", dwFileAttributes=0x20) returned 0 [0163.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.790] GetLastError () returned 0x5 [0163.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx", dwFileAttributes=0x20) returned 0 [0163.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2c98) returned 1 Thread: id = 2341 os_tid = 0x201c [0154.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb1468 [0154.563] wcscpy (in: _Dest=0x3eb1468, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0154.563] wcscat (in: _Dest=0x3eb1468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0154.563] wcscat (in: _Dest=0x3eb1468, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*" [0154.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0154.564] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f53a50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c63d30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0162.480] wcscmp (_String1=".", _String2=".") returned 0 [0162.480] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f53a50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c63d30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.250] wcscmp (_String1="..", _String2=".") returned 1 [0163.250] wcscmp (_String1="..", _String2="..") returned 0 [0163.250] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ad9900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5ad9900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0163.250] wcscmp (_String1="Adjacency.xml", _String2=".") returned 1 [0163.250] wcscmp (_String1="Adjacency.xml", _String2="..") returned 1 [0163.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2db18 [0163.251] wcscpy (in: _Dest=0x3e2db18, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0163.251] wcscat (in: _Dest=0x3e2db18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0163.251] wcscat (in: _Dest=0x3e2db18, _Source="Adjacency.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" [0166.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2db18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28ac [0166.116] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9412000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9412000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0166.116] wcscmp (_String1="Angles.xml", _String2=".") returned 1 [0166.116] wcscmp (_String1="Angles.xml", _String2="..") returned 1 [0166.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187aa8 [0166.116] wcscpy (in: _Dest=0x8187aa8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.116] wcscat (in: _Dest=0x8187aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.116] wcscat (in: _Dest=0x8187aa8, _Source="Angles.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" [0166.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c8 [0166.117] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564f8900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x564f8900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0166.117] wcscmp (_String1="Apex.xml", _String2=".") returned 1 [0166.117] wcscmp (_String1="Apex.xml", _String2="..") returned 1 [0166.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a458 [0166.118] wcscpy (in: _Dest=0x819a458, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.118] wcscat (in: _Dest=0x819a458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.118] wcscat (in: _Dest=0x819a458, _Source="Apex.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" [0166.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c4 [0166.119] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x944cad00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x944cad00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0166.119] wcscmp (_String1="Apothecary.xml", _String2=".") returned 1 [0166.119] wcscmp (_String1="Apothecary.xml", _String2="..") returned 1 [0166.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d99b8 [0166.119] wcscpy (in: _Dest=0x81d99b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.119] wcscat (in: _Dest=0x81d99b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.119] wcscat (in: _Dest=0x81d99b8, _Source="Apothecary.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" [0166.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d99b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c0 [0166.120] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e31000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e31000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0166.120] wcscmp (_String1="Aspect.xml", _String2=".") returned 1 [0166.120] wcscmp (_String1="Aspect.xml", _String2="..") returned 1 [0166.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187bf8 [0166.121] wcscpy (in: _Dest=0x8187bf8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.121] wcscat (in: _Dest=0x8187bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.121] wcscat (in: _Dest=0x8187bf8, _Source="Aspect.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" [0166.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25bc [0166.122] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e03400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97e03400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0166.122] wcscmp (_String1="Austin.xml", _String2=".") returned 1 [0166.122] wcscmp (_String1="Austin.xml", _String2="..") returned 1 [0166.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ed8 [0166.122] wcscpy (in: _Dest=0x8186ed8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.122] wcscat (in: _Dest=0x8186ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.122] wcscat (in: _Dest=0x8186ed8, _Source="Austin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" [0166.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25b8 [0166.124] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd4a700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbcd4a700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0166.124] wcscmp (_String1="Black Tie.xml", _String2=".") returned 1 [0166.124] wcscmp (_String1="Black Tie.xml", _String2="..") returned 1 [0166.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81868f0 [0166.124] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.124] wcscat (in: _Dest=0x81868f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.124] wcscat (in: _Dest=0x81868f0, _Source="Black Tie.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" [0166.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81868f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25b4 [0166.125] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d769700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d769700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0166.125] wcscmp (_String1="Civic.xml", _String2=".") returned 1 [0166.125] wcscmp (_String1="Civic.xml", _String2="..") returned 1 [0166.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819c258 [0166.125] wcscpy (in: _Dest=0x819c258, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.126] wcscat (in: _Dest=0x819c258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.126] wcscat (in: _Dest=0x819c258, _Source="Civic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" [0166.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc0 [0166.127] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b73bb00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b73bb00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0166.127] wcscmp (_String1="Clarity.xml", _String2=".") returned 1 [0166.127] wcscmp (_String1="Clarity.xml", _String2="..") returned 1 [0166.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186458 [0166.127] wcscpy (in: _Dest=0x8186458, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.127] wcscat (in: _Dest=0x8186458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.127] wcscat (in: _Dest=0x8186458, _Source="Clarity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" [0166.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20cc [0166.128] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0682e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0682e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0166.129] wcscmp (_String1="Composite.xml", _String2=".") returned 1 [0166.129] wcscmp (_String1="Composite.xml", _String2="..") returned 1 [0166.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186ce0 [0166.129] wcscpy (in: _Dest=0x8186ce0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.129] wcscat (in: _Dest=0x8186ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.129] wcscat (in: _Dest=0x8186ce0, _Source="Composite.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" [0166.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2584 [0166.130] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610a1e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x610a1e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0166.130] wcscmp (_String1="Concourse.xml", _String2=".") returned 1 [0166.130] wcscmp (_String1="Concourse.xml", _String2="..") returned 1 [0166.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8188330 [0166.130] wcscpy (in: _Dest=0x8188330, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.130] wcscat (in: _Dest=0x8188330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.130] wcscat (in: _Dest=0x8188330, _Source="Concourse.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" [0166.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2568 [0166.132] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fbb500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3fbb500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0166.132] wcscmp (_String1="Couture.xml", _String2=".") returned 1 [0166.132] wcscmp (_String1="Couture.xml", _String2="..") returned 1 [0166.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186998 [0166.132] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.132] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.132] wcscat (in: _Dest=0x8186998, _Source="Couture.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" [0166.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2564 [0166.133] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c06900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8c06900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0166.133] wcscmp (_String1="Elemental.xml", _String2=".") returned 1 [0166.133] wcscmp (_String1="Elemental.xml", _String2="..") returned 1 [0166.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81872c8 [0166.133] wcscpy (in: _Dest=0x81872c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.133] wcscat (in: _Dest=0x81872c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.133] wcscat (in: _Dest=0x81872c8, _Source="Elemental.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" [0166.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81872c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2560 [0166.135] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c7800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x636c7800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0166.135] wcscmp (_String1="Equity.xml", _String2=".") returned 1 [0166.135] wcscmp (_String1="Equity.xml", _String2="..") returned 1 [0166.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187760 [0166.135] wcscpy (in: _Dest=0x8187760, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.135] wcscat (in: _Dest=0x8187760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.135] wcscat (in: _Dest=0x8187760, _Source="Equity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" [0166.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2470 [0166.137] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd61500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9dd61500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0166.137] wcscmp (_String1="Essential.xml", _String2=".") returned 1 [0166.137] wcscmp (_String1="Essential.xml", _String2="..") returned 1 [0166.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187e98 [0166.137] wcscpy (in: _Dest=0x8187e98, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.137] wcscat (in: _Dest=0x8187e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.137] wcscat (in: _Dest=0x8187e98, _Source="Essential.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" [0166.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x246c [0166.138] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc53f000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc53f000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0166.138] wcscmp (_String1="Executive.xml", _String2=".") returned 1 [0166.138] wcscmp (_String1="Executive.xml", _String2="..") returned 1 [0166.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186500 [0166.138] wcscpy (in: _Dest=0x8186500, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.138] wcscat (in: _Dest=0x8186500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.139] wcscat (in: _Dest=0x8186500, _Source="Executive.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" [0166.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0166.140] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a938600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a938600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0166.140] wcscmp (_String1="Flow.xml", _String2=".") returned 1 [0166.140] wcscmp (_String1="Flow.xml", _String2="..") returned 1 [0166.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c2f8 [0166.140] wcscpy (in: _Dest=0x819c2f8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.140] wcscat (in: _Dest=0x819c2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.140] wcscat (in: _Dest=0x819c2f8, _Source="Flow.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" [0166.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0166.142] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ffff00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66ffff00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0166.142] wcscmp (_String1="Foundry.xml", _String2=".") returned 1 [0166.142] wcscmp (_String1="Foundry.xml", _String2="..") returned 1 [0166.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81874c0 [0166.142] wcscpy (in: _Dest=0x81874c0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.142] wcscat (in: _Dest=0x81874c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.142] wcscat (in: _Dest=0x81874c0, _Source="Foundry.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" [0166.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81874c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0166.143] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e662000, ftCreationTime.dwHighDateTime=0x1c6baf0, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e662000, ftLastWriteTime.dwHighDateTime=0x1c6baf0, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1 [0166.143] wcscmp (_String1="Grayscale.xml", _String2=".") returned 1 [0166.143] wcscmp (_String1="Grayscale.xml", _String2="..") returned 1 [0166.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81865a8 [0166.144] wcscpy (in: _Dest=0x81865a8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.144] wcscat (in: _Dest=0x81865a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.144] wcscat (in: _Dest=0x81865a8, _Source="Grayscale.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" [0166.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81865a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x245c [0166.148] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1699c00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa1699c00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0166.148] wcscmp (_String1="Grid.xml", _String2=".") returned 1 [0166.148] wcscmp (_String1="Grid.xml", _String2="..") returned 1 [0166.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a778 [0166.148] wcscpy (in: _Dest=0x819a778, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.148] wcscat (in: _Dest=0x819a778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.148] wcscat (in: _Dest=0x819a778, _Source="Grid.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" [0166.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0166.150] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd2300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4fd2300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0166.150] wcscmp (_String1="Hardcover.xml", _String2=".") returned 1 [0166.150] wcscmp (_String1="Hardcover.xml", _String2="..") returned 1 [0166.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187568 [0166.150] wcscpy (in: _Dest=0x8187568, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.150] wcscat (in: _Dest=0x8187568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.150] wcscat (in: _Dest=0x8187568, _Source="Hardcover.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" [0166.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0166.151] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe77700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfe77700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0166.151] wcscmp (_String1="Horizon.xml", _String2=".") returned 1 [0166.151] wcscmp (_String1="Horizon.xml", _String2="..") returned 1 [0166.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186650 [0166.151] wcscpy (in: _Dest=0x8186650, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.151] wcscat (in: _Dest=0x8186650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.151] wcscat (in: _Dest=0x8186650, _Source="Horizon.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" [0166.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2450 [0166.152] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf5e000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cf5e000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0166.152] wcscmp (_String1="Median.xml", _String2=".") returned 1 [0166.152] wcscmp (_String1="Median.xml", _String2="..") returned 1 [0166.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187028 [0166.152] wcscpy (in: _Dest=0x8187028, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.152] wcscat (in: _Dest=0x8187028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.152] wcscat (in: _Dest=0x8187028, _Source="Median.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" [0166.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0166.153] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70896700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x70896700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0166.153] wcscmp (_String1="Metro.xml", _String2=".") returned 1 [0166.153] wcscmp (_String1="Metro.xml", _String2="..") returned 1 [0166.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b858 [0166.153] wcscpy (in: _Dest=0x819b858, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.153] wcscat (in: _Dest=0x819b858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.153] wcscat (in: _Dest=0x819b858, _Source="Metro.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" [0166.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0166.154] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x741cee00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x741cee00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0166.154] wcscmp (_String1="Module.xml", _String2=".") returned 1 [0166.154] wcscmp (_String1="Module.xml", _String2="..") returned 1 [0166.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187958 [0166.155] wcscpy (in: _Dest=0x8187958, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.155] wcscat (in: _Dest=0x8187958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.155] wcscat (in: _Dest=0x8187958, _Source="Module.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" [0166.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2444 [0166.157] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd249d100, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd249d100, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0166.157] wcscmp (_String1="Newsprint.xml", _String2=".") returned 1 [0166.157] wcscmp (_String1="Newsprint.xml", _String2="..") returned 1 [0166.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8188138 [0166.157] wcscpy (in: _Dest=0x8188138, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.157] wcscat (in: _Dest=0x8188138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.157] wcscat (in: _Dest=0x8188138, _Source="Newsprint.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" [0166.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0166.160] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b07500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b07500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0166.160] wcscmp (_String1="Opulent.xml", _String2=".") returned 1 [0166.160] wcscmp (_String1="Opulent.xml", _String2="..") returned 1 [0166.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186848 [0166.160] wcscpy (in: _Dest=0x8186848, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.160] wcscat (in: _Dest=0x8186848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.160] wcscat (in: _Dest=0x8186848, _Source="Opulent.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" [0166.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x243c [0166.693] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a12cf00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7a12cf00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0166.693] wcscmp (_String1="Oriel.xml", _String2=".") returned 1 [0166.693] wcscmp (_String1="Oriel.xml", _String2="..") returned 1 [0166.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bcb8 [0166.693] wcscpy (in: _Dest=0x819bcb8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0166.693] wcscat (in: _Dest=0x819bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0166.693] wcscat (in: _Dest=0x819bcb8, _Source="Oriel.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" [0169.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x258c [0169.162] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da65600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7da65600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0169.162] wcscmp (_String1="Origin.xml", _String2=".") returned 1 [0169.162] wcscmp (_String1="Origin.xml", _String2="..") returned 1 [0169.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2de60 [0169.163] wcscpy (in: _Dest=0x3e2de60, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0169.163] wcscat (in: _Dest=0x3e2de60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0169.163] wcscat (in: _Dest=0x3e2de60, _Source="Origin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" [0169.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2de60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x293c [0169.164] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8139dd00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8139dd00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0169.164] wcscmp (_String1="Paper.xml", _String2=".") returned 1 [0169.164] wcscmp (_String1="Paper.xml", _String2="..") returned 1 [0169.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b038 [0169.164] wcscpy (in: _Dest=0x819b038, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0169.164] wcscat (in: _Dest=0x819b038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0169.164] wcscat (in: _Dest=0x819b038, _Source="Paper.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" [0169.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2938 [0169.165] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75f7d00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa75f7d00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0169.165] wcscmp (_String1="Perspective.xml", _String2=".") returned 1 [0169.165] wcscmp (_String1="Perspective.xml", _String2="..") returned 1 [0169.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da358 [0169.165] wcscpy (in: _Dest=0x81da358, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0169.165] wcscat (in: _Dest=0x81da358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0169.165] wcscat (in: _Dest=0x81da358, _Source="Perspective.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" [0169.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0169.166] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaf30400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaf30400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0169.166] wcscmp (_String1="Pushpin.xml", _String2=".") returned 1 [0169.166] wcscmp (_String1="Pushpin.xml", _String2="..") returned 1 [0169.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d140 [0169.166] wcscpy (in: _Dest=0x3e2d140, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0169.166] wcscat (in: _Dest=0x3e2d140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0169.166] wcscat (in: _Dest=0x3e2d140, _Source="Pushpin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" [0169.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2934 [0169.167] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5dd5800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5dd5800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0169.167] wcscmp (_String1="Slipstream.xml", _String2=".") returned 1 [0169.167] wcscmp (_String1="Slipstream.xml", _String2="..") returned 1 [0169.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81daa38 [0169.167] wcscpy (in: _Dest=0x81daa38, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0169.167] wcscat (in: _Dest=0x81daa38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0169.168] wcscat (in: _Dest=0x81daa38, _Source="Slipstream.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" [0169.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daa38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2930 [0169.169] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x839c3700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x839c3700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0170.047] wcscmp (_String1="Solstice.xml", _String2=".") returned 1 [0170.047] wcscmp (_String1="Solstice.xml", _String2="..") returned 1 [0170.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2cff0 [0170.048] wcscpy (in: _Dest=0x3e2cff0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0170.048] wcscat (in: _Dest=0x3e2cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0170.048] wcscat (in: _Dest=0x3e2cff0, _Source="Solstice.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" [0170.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a0 [0170.259] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872fbe00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x872fbe00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0170.259] wcscmp (_String1="Technic.xml", _String2=".") returned 1 [0170.259] wcscmp (_String1="Technic.xml", _String2="..") returned 1 [0170.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2db18 [0170.259] wcscpy (in: _Dest=0x3e2db18, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0170.259] wcscat (in: _Dest=0x3e2db18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0170.260] wcscat (in: _Dest=0x3e2db18, _Source="Technic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" [0170.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2db18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ac [0170.261] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb7b800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafb7b800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0170.261] wcscmp (_String1="Thatch.xml", _String2=".") returned 1 [0170.261] wcscmp (_String1="Thatch.xml", _String2="..") returned 1 [0170.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2dbc0 [0170.261] wcscpy (in: _Dest=0x3e2dbc0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0170.261] wcscat (in: _Dest=0x3e2dbc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0170.261] wcscat (in: _Dest=0x3e2dbc0, _Source="Thatch.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" [0170.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dbc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a4 [0170.262] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac34500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ac34500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0170.262] wcscmp (_String1="Trek.xml", _String2=".") returned 1 [0170.262] wcscmp (_String1="Trek.xml", _String2="..") returned 1 [0170.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a958 [0170.262] wcscpy (in: _Dest=0x819a958, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0170.262] wcscat (in: _Dest=0x819a958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0170.262] wcscat (in: _Dest=0x819a958, _Source="Trek.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" [0170.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c70 [0170.263] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e56cc00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e56cc00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0170.263] wcscmp (_String1="Urban.xml", _String2=".") returned 1 [0170.263] wcscmp (_String1="Urban.xml", _String2="..") returned 1 [0170.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819abd8 [0170.263] wcscpy (in: _Dest=0x819abd8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0170.263] wcscat (in: _Dest=0x819abd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0170.264] wcscat (in: _Dest=0x819abd8, _Source="Urban.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" [0170.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819abd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0170.265] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b92600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90b92600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0170.265] wcscmp (_String1="Verve.xml", _String2=".") returned 1 [0170.265] wcscmp (_String1="Verve.xml", _String2="..") returned 1 [0170.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bf38 [0170.265] wcscpy (in: _Dest=0x819bf38, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0170.265] wcscat (in: _Dest=0x819bf38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0170.265] wcscat (in: _Dest=0x819bf38, _Source="Verve.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" [0170.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2810 [0170.266] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21a1200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb21a1200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0170.266] wcscmp (_String1="Waveform.xml", _String2=".") returned 1 [0170.266] wcscmp (_String1="Waveform.xml", _String2="..") returned 1 [0170.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2da70 [0170.266] wcscpy (in: _Dest=0x3e2da70, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0170.266] wcscat (in: _Dest=0x3e2da70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0170.266] wcscat (in: _Dest=0x3e2da70, _Source="Waveform.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" [0170.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2da70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2814 [0170.267] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21a1200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb21a1200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0171.441] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0171.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0171.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1468) returned 1 [0171.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2c08) returned 1 Thread: id = 2342 os_tid = 0x2020 [0154.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c838 [0154.564] wcscpy (in: _Dest=0x3e3c838, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0154.564] wcscat (in: _Dest=0x3e3c838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0154.564] wcscat (in: _Dest=0x3e3c838, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*" [0154.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81016e0 [0154.564] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0162.778] wcscmp (_String1=".", _String2=".") returned 0 [0162.778] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.780] wcscmp (_String1="..", _String2=".") returned 1 [0162.780] wcscmp (_String1="..", _String2="..") returned 0 [0162.780] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5492d100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94788d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5492d100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="ADJACE~1.EFT")) returned 1 [0162.780] wcscmp (_String1="Adjacency.eftx", _String2=".") returned 1 [0162.780] wcscmp (_String1="Adjacency.eftx", _String2="..") returned 1 [0162.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81d9c78 [0162.780] wcscpy (in: _Dest=0x81d9c78, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0162.780] wcscat (in: _Dest=0x81d9c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0162.780] wcscat (in: _Dest=0x81d9c78, _Source="Adjacency.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" [0163.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0163.201] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f52b00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe949ea30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56f52b00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="ANGLES~1.EFT")) returned 1 [0163.201] wcscmp (_String1="Angles.eftx", _String2=".") returned 1 [0163.201] wcscmp (_String1="Angles.eftx", _String2="..") returned 1 [0163.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81878b0 [0163.201] wcscpy (in: _Dest=0x81878b0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.201] wcscat (in: _Dest=0x81878b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.201] wcscat (in: _Dest=0x81878b0, _Source="Angles.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" [0163.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81878b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0163.202] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a13a00, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe949ea30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf1a13a00, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="APEX~1.EFT")) returned 1 [0163.202] wcscmp (_String1="Apex.eftx", _String2=".") returned 1 [0163.202] wcscmp (_String1="Apex.eftx", _String2="..") returned 1 [0163.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81865a8 [0163.202] wcscpy (in: _Dest=0x81865a8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.202] wcscat (in: _Dest=0x81865a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.202] wcscat (in: _Dest=0x81865a8, _Source="Apex.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" [0163.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81865a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0163.203] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3200b800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3200b800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="APOTHE~1.EFT")) returned 1 [0163.203] wcscmp (_String1="Apothecary.eftx", _String2=".") returned 1 [0163.203] wcscmp (_String1="Apothecary.eftx", _String2="..") returned 1 [0163.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d96f8 [0163.203] wcscpy (in: _Dest=0x81d96f8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.203] wcscat (in: _Dest=0x81d96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.203] wcscat (in: _Dest=0x81d96f8, _Source="Apothecary.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" [0163.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0163.204] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf534c100, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf534c100, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="ASPECT~1.EFT")) returned 1 [0163.204] wcscmp (_String1="Aspect.eftx", _String2=".") returned 1 [0163.204] wcscmp (_String1="Aspect.eftx", _String2="..") returned 1 [0163.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8188090 [0163.204] wcscpy (in: _Dest=0x8188090, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.204] wcscat (in: _Dest=0x8188090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.204] wcscat (in: _Dest=0x8188090, _Source="Aspect.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" [0163.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb4 [0163.205] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34631200, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94eacf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34631200, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="AUSTIN~1.EFT")) returned 1 [0163.205] wcscmp (_String1="Austin.eftx", _String2=".") returned 1 [0163.205] wcscmp (_String1="Austin.eftx", _String2="..") returned 1 [0163.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81866f8 [0163.205] wcscpy (in: _Dest=0x81866f8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.205] wcscat (in: _Dest=0x81866f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.205] wcscat (in: _Dest=0x81866f8, _Source="Austin.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" [0163.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81866f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0163.206] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb9df00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94eacf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5bb9df00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="BLACKT~1.EFT")) returned 1 [0163.206] wcscmp (_String1="Black Tie.eftx", _String2=".") returned 1 [0163.206] wcscmp (_String1="Black Tie.eftx", _String2="..") returned 1 [0163.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81d9858 [0163.206] wcscpy (in: _Dest=0x81d9858, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.206] wcscat (in: _Dest=0x81d9858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.206] wcscat (in: _Dest=0x81d9858, _Source="Black Tie.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" [0163.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0163.207] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8c84800, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9510e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8c84800, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="CIVIC~1.EFT")) returned 1 [0163.207] wcscmp (_String1="Civic.eftx", _String2=".") returned 1 [0163.207] wcscmp (_String1="Civic.eftx", _String2="..") returned 1 [0163.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186b90 [0163.207] wcscpy (in: _Dest=0x8186b90, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.207] wcscat (in: _Dest=0x8186b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.207] wcscat (in: _Dest=0x8186b90, _Source="Civic.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" [0163.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0163.208] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f69900, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9536fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37f69900, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="CLARIT~1.EFT")) returned 1 [0163.208] wcscmp (_String1="Clarity.eftx", _String2=".") returned 1 [0163.208] wcscmp (_String1="Clarity.eftx", _String2="..") returned 1 [0163.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x81881e0 [0163.209] wcscpy (in: _Dest=0x81881e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.209] wcscat (in: _Dest=0x81881e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.209] wcscat (in: _Dest=0x81881e0, _Source="Clarity.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" [0163.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81881e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0163.209] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4d6600, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe955d110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5f4d6600, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="COMPOS~1.EFT")) returned 1 [0163.210] wcscmp (_String1="Composite.eftx", _String2=".") returned 1 [0163.210] wcscmp (_String1="Composite.eftx", _String2="..") returned 1 [0163.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da358 [0163.210] wcscpy (in: _Dest=0x81da358, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.210] wcscat (in: _Dest=0x81da358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.210] wcscat (in: _Dest=0x81da358, _Source="Composite.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" [0163.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0163.210] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb2aa200, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9583270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfb2aa200, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="CONCOU~1.EFT")) returned 1 [0163.210] wcscmp (_String1="Concourse.eftx", _String2=".") returned 1 [0163.211] wcscmp (_String1="Concourse.eftx", _String2="..") returned 1 [0163.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da988 [0163.211] wcscpy (in: _Dest=0x81da988, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.211] wcscat (in: _Dest=0x81da988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.211] wcscat (in: _Dest=0x81da988, _Source="Concourse.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" [0163.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0163.211] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64121a00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe95cf530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64121a00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="COUTUR~1.EFT")) returned 1 [0163.212] wcscmp (_String1="Couture.eftx", _String2=".") returned 1 [0163.212] wcscmp (_String1="Couture.eftx", _String2="..") returned 1 [0163.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187df0 [0163.212] wcscpy (in: _Dest=0x8187df0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.212] wcscat (in: _Dest=0x8187df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.212] wcscat (in: _Dest=0x8187df0, _Source="Couture.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" [0163.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4 [0163.213] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6ce00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe961b7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68d6ce00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="ELEMEN~1.EFT")) returned 1 [0163.213] wcscmp (_String1="Elemental.eftx", _String2=".") returned 1 [0163.213] wcscmp (_String1="Elemental.eftx", _String2="..") returned 1 [0163.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81daa38 [0163.213] wcscpy (in: _Dest=0x81daa38, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.213] wcscat (in: _Dest=0x81daa38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.213] wcscat (in: _Dest=0x81daa38, _Source="Elemental.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" [0163.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daa38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0163.214] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfebe2900, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe961b7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfebe2900, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="EQUITY~1.EFT")) returned 1 [0163.214] wcscmp (_String1="Equity.eftx", _String2=".") returned 1 [0163.214] wcscmp (_String1="Equity.eftx", _String2="..") returned 1 [0163.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186a40 [0163.214] wcscpy (in: _Dest=0x8186a40, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.214] wcscat (in: _Dest=0x8186a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.214] wcscat (in: _Dest=0x8186a40, _Source="Equity.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" [0163.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0163.215] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8a2000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3b8a2000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="ESSENT~1.EFT")) returned 1 [0163.215] wcscmp (_String1="Essential.eftx", _String2=".") returned 1 [0163.215] wcscmp (_String1="Essential.eftx", _String2="..") returned 1 [0163.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da148 [0163.215] wcscpy (in: _Dest=0x81da148, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.215] wcscat (in: _Dest=0x81da148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.215] wcscat (in: _Dest=0x81da148, _Source="Essential.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" [0163.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0163.216] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b392800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b392800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="EXECUT~1.EFT")) returned 1 [0163.216] wcscmp (_String1="Executive.eftx", _String2=".") returned 1 [0163.216] wcscmp (_String1="Executive.eftx", _String2="..") returned 1 [0163.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da1f8 [0163.216] wcscpy (in: _Dest=0x81da1f8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.216] wcscat (in: _Dest=0x81da1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.217] wcscat (in: _Dest=0x81da1f8, _Source="Executive.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" [0163.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0163.217] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e53700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9667ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e53700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="FLOW~1.EFT")) returned 1 [0163.217] wcscmp (_String1="Flow.eftx", _String2=".") returned 1 [0163.217] wcscmp (_String1="Flow.eftx", _String2="..") returned 1 [0163.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187220 [0163.218] wcscpy (in: _Dest=0x8187220, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.218] wcscat (in: _Dest=0x8187220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.218] wcscat (in: _Dest=0x8187220, _Source="Flow.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" [0163.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98 [0163.218] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251b000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe968dc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x251b000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="FOUNDR~1.EFT")) returned 1 [0163.219] wcscmp (_String1="Foundry.eftx", _String2=".") returned 1 [0163.219] wcscmp (_String1="Foundry.eftx", _String2="..") returned 1 [0163.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187d48 [0163.219] wcscpy (in: _Dest=0x8187d48, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.219] wcscat (in: _Dest=0x8187d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.219] wcscat (in: _Dest=0x8187d48, _Source="Foundry.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" [0163.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0163.219] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1da700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe968dc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f1da700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="GRID~1.EFT")) returned 1 [0163.219] wcscmp (_String1="Grid.eftx", _String2=".") returned 1 [0163.220] wcscmp (_String1="Grid.eftx", _String2="..") returned 1 [0163.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187fe8 [0163.220] wcscpy (in: _Dest=0x8187fe8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.220] wcscat (in: _Dest=0x8187fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.220] wcscat (in: _Dest=0x8187fe8, _Source="Grid.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" [0163.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0163.220] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b12e00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96b3d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x42b12e00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="HARDCO~1.EFT")) returned 1 [0163.221] wcscmp (_String1="Hardcover.eftx", _String2=".") returned 1 [0163.221] wcscmp (_String1="Hardcover.eftx", _String2="..") returned 1 [0163.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da098 [0163.221] wcscpy (in: _Dest=0x81da098, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.221] wcscat (in: _Dest=0x81da098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.221] wcscat (in: _Dest=0x81da098, _Source="Hardcover.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" [0163.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0163.222] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eccaf00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6eccaf00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="HORIZO~1.EFT")) returned 1 [0163.222] wcscmp (_String1="Horizon.eftx", _String2=".") returned 1 [0163.222] wcscmp (_String1="Horizon.eftx", _String2="..") returned 1 [0163.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d290 [0163.222] wcscpy (in: _Dest=0x3e2d290, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.222] wcscat (in: _Dest=0x3e2d290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.222] wcscat (in: _Dest=0x3e2d290, _Source="Horizon.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" [0163.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0163.223] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x978be00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x978be00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="MEDIAN~1.EFT")) returned 1 [0163.223] wcscmp (_String1="Median.eftx", _String2=".") returned 1 [0163.223] wcscmp (_String1="Median.eftx", _String2="..") returned 1 [0163.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d140 [0163.223] wcscpy (in: _Dest=0x3e2d140, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.223] wcscat (in: _Dest=0x3e2d140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.223] wcscat (in: _Dest=0x3e2d140, _Source="Median.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" [0163.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b0 [0163.224] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb1800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9700030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbdb1800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="METRO~1.EFT")) returned 1 [0163.224] wcscmp (_String1="Metro.eftx", _String2=".") returned 1 [0163.224] wcscmp (_String1="Metro.eftx", _String2="..") returned 1 [0163.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d7d0 [0163.224] wcscpy (in: _Dest=0x3e2d7d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.224] wcscat (in: _Dest=0x3e2d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.224] wcscat (in: _Dest=0x3e2d7d0, _Source="Metro.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" [0163.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x288c [0163.225] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e9f00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9726190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf6e9f00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="MODULE~1.EFT")) returned 1 [0163.225] wcscmp (_String1="Module.eftx", _String2=".") returned 1 [0163.225] wcscmp (_String1="Module.eftx", _String2="..") returned 1 [0163.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2cff0 [0163.225] wcscpy (in: _Dest=0x3e2cff0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.225] wcscat (in: _Dest=0x3e2cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.225] wcscat (in: _Dest=0x3e2cff0, _Source="Module.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" [0163.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b8 [0163.226] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73916300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe974c2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73916300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="NEWSPR~1.EFT")) returned 1 [0163.226] wcscmp (_String1="Newsprint.eftx", _String2=".") returned 1 [0163.226] wcscmp (_String1="Newsprint.eftx", _String2="..") returned 1 [0163.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81d9fe8 [0163.226] wcscpy (in: _Dest=0x81d9fe8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.226] wcscat (in: _Dest=0x81d9fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.226] wcscat (in: _Dest=0x81d9fe8, _Source="Newsprint.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" [0163.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d2c [0163.227] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13022600, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe974c2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13022600, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="OPULEN~1.EFT")) returned 1 [0163.227] wcscmp (_String1="Opulent.eftx", _String2=".") returned 1 [0163.227] wcscmp (_String1="Opulent.eftx", _String2="..") returned 1 [0163.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d728 [0163.227] wcscpy (in: _Dest=0x3e2d728, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.227] wcscat (in: _Dest=0x3e2d728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.228] wcscat (in: _Dest=0x3e2d728, _Source="Opulent.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" [0163.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac [0163.228] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1695ad00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1695ad00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="ORIEL~1.EFT")) returned 1 [0163.228] wcscmp (_String1="Oriel.eftx", _String2=".") returned 1 [0163.228] wcscmp (_String1="Oriel.eftx", _String2="..") returned 1 [0163.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2ddb8 [0163.229] wcscpy (in: _Dest=0x3e2ddb8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.229] wcscat (in: _Dest=0x3e2ddb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.229] wcscat (in: _Dest=0x3e2ddb8, _Source="Oriel.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" [0163.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ddb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2498 [0163.230] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a293400, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1a293400, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="ORIGIN~1.EFT")) returned 1 [0163.230] wcscmp (_String1="Origin.eftx", _String2=".") returned 1 [0163.230] wcscmp (_String1="Origin.eftx", _String2="..") returned 1 [0163.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dd10 [0163.230] wcscpy (in: _Dest=0x3e2dd10, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.230] wcscat (in: _Dest=0x3e2dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.230] wcscat (in: _Dest=0x3e2dd10, _Source="Origin.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" [0163.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c0 [0163.231] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbcbb00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1dbcbb00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="PAPER~1.EFT")) returned 1 [0163.231] wcscmp (_String1="Paper.eftx", _String2=".") returned 1 [0163.231] wcscmp (_String1="Paper.eftx", _String2="..") returned 1 [0163.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2dc68 [0163.231] wcscpy (in: _Dest=0x3e2dc68, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0163.231] wcscat (in: _Dest=0x3e2dc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0163.231] wcscat (in: _Dest=0x3e2dc68, _Source="Paper.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" [0163.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0164.728] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4644b500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4644b500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="PERSPE~1.EFT")) returned 1 [0164.728] wcscmp (_String1="Perspective.eftx", _String2=".") returned 1 [0164.728] wcscmp (_String1="Perspective.eftx", _String2="..") returned 1 [0164.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d9c78 [0164.728] wcscpy (in: _Dest=0x81d9c78, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0164.728] wcscat (in: _Dest=0x81d9c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0164.728] wcscat (in: _Dest=0x81d9c78, _Source="Perspective.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" [0167.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0167.265] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d83c00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97be710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49d83c00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="PUSHPI~1.EFT")) returned 1 [0167.265] wcscmp (_String1="Pushpin.eftx", _String2=".") returned 1 [0167.265] wcscmp (_String1="Pushpin.eftx", _String2="..") returned 1 [0167.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186c38 [0167.265] wcscpy (in: _Dest=0x8186c38, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0167.265] wcscat (in: _Dest=0x8186c38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0167.265] wcscat (in: _Dest=0x8186c38, _Source="Pushpin.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" [0167.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a34 [0167.267] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f3bd00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97e4870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x75f3bd00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="SLIPST~1.EFT")) returned 1 [0167.267] wcscmp (_String1="Slipstream.eftx", _String2=".") returned 1 [0167.267] wcscmp (_String1="Slipstream.eftx", _String2="..") returned 1 [0167.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da2a8 [0167.267] wcscpy (in: _Dest=0x81da2a8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0167.267] wcscat (in: _Dest=0x81da2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0167.267] wcscat (in: _Dest=0x81da2a8, _Source="Slipstream.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" [0167.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b14 [0167.268] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201f1500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x201f1500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="SOLSTI~1.EFT")) returned 1 [0168.239] wcscmp (_String1="Solstice.eftx", _String2=".") returned 1 [0168.239] wcscmp (_String1="Solstice.eftx", _String2="..") returned 1 [0168.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da568 [0168.240] wcscpy (in: _Dest=0x81da568, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0168.240] wcscat (in: _Dest=0x81da568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0168.240] wcscat (in: _Dest=0x81da568, _Source="Solstice.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" [0169.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0169.205] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b29c00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23b29c00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="TECHNI~1.EFT")) returned 1 [0169.205] wcscmp (_String1="Technic.eftx", _String2=".") returned 1 [0169.205] wcscmp (_String1="Technic.eftx", _String2="..") returned 1 [0169.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2ddb8 [0169.205] wcscpy (in: _Dest=0x3e2ddb8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0169.205] wcscat (in: _Dest=0x3e2ddb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0169.205] wcscat (in: _Dest=0x3e2ddb8, _Source="Technic.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" [0169.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ddb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x263c [0169.206] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6bc300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9830b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d6bc300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="THATCH~1.EFT")) returned 1 [0169.206] wcscmp (_String1="Thatch.eftx", _String2=".") returned 1 [0169.206] wcscmp (_String1="Thatch.eftx", _String2="..") returned 1 [0169.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dd10 [0169.206] wcscpy (in: _Dest=0x3e2dd10, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0169.206] wcscat (in: _Dest=0x3e2dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0169.206] wcscat (in: _Dest=0x3e2dd10, _Source="Thatch.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" [0169.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2638 [0169.207] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27462300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9830b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x27462300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="TREK~1.EFT")) returned 1 [0169.207] wcscmp (_String1="Trek.eftx", _String2=".") returned 1 [0169.207] wcscmp (_String1="Trek.eftx", _String2="..") returned 1 [0169.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2dc68 [0169.207] wcscpy (in: _Dest=0x3e2dc68, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0169.207] wcscat (in: _Dest=0x3e2dc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0169.208] wcscat (in: _Dest=0x3e2dc68, _Source="Trek.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" [0169.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2634 [0169.208] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ad9aa00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9a1fd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2ad9aa00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="URBAN~1.EFT")) returned 1 [0169.208] wcscmp (_String1="Urban.eftx", _String2=".") returned 1 [0169.209] wcscmp (_String1="Urban.eftx", _String2="..") returned 1 [0169.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d290 [0169.209] wcscpy (in: _Dest=0x3e2d290, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0169.209] wcscat (in: _Dest=0x3e2d290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0169.209] wcscat (in: _Dest=0x3e2d290, _Source="Urban.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" [0169.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2630 [0169.210] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6d3100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9d8bcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e6d3100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="VERVE~1.EFT")) returned 1 [0169.210] wcscmp (_String1="Verve.eftx", _String2=".") returned 1 [0169.210] wcscmp (_String1="Verve.eftx", _String2="..") returned 1 [0169.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d7d0 [0169.210] wcscpy (in: _Dest=0x3e2d7d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0169.210] wcscat (in: _Dest=0x3e2d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0169.210] wcscat (in: _Dest=0x3e2d7d0, _Source="Verve.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" [0169.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x262c [0169.211] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ff4a00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x50ff4a00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 1 [0169.211] wcscmp (_String1="Waveform.eftx", _String2=".") returned 1 [0169.211] wcscmp (_String1="Waveform.eftx", _String2="..") returned 1 [0169.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d9858 [0169.211] wcscpy (in: _Dest=0x81d9858, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0169.211] wcscat (in: _Dest=0x81d9858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0169.211] wcscat (in: _Dest=0x81d9858, _Source="Waveform.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" [0169.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2628 [0169.212] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ff4a00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x50ff4a00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 0 [0169.212] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0173.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81016e0) returned 1 [0173.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c838) returned 1 [0173.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2b78) returned 1 Thread: id = 2343 os_tid = 0x2024 [0154.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb2a58 [0154.565] wcscpy (in: _Dest=0x3eb2a58, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0154.565] wcscat (in: _Dest=0x3eb2a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0154.565] wcscat (in: _Dest=0x3eb2a58, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*" [0154.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffc68 [0154.565] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d4fb90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x883e5670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b58 [0157.134] wcscmp (_String1=".", _String2=".") returned 0 [0157.134] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d4fb90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x883e5670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.315] wcscmp (_String1="..", _String2=".") returned 1 [0161.315] wcscmp (_String1="..", _String2="..") returned 0 [0161.316] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6dec600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6dec600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0161.316] wcscmp (_String1="Adjacency.xml", _String2=".") returned 1 [0161.316] wcscmp (_String1="Adjacency.xml", _String2="..") returned 1 [0161.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81867a0 [0161.316] wcscpy (in: _Dest=0x81867a0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0161.316] wcscat (in: _Dest=0x81867a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0161.316] wcscat (in: _Dest=0x81867a0, _Source="Adjacency.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" [0162.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81867a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b8 [0162.415] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9412000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9412000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0162.416] wcscmp (_String1="Angles.xml", _String2=".") returned 1 [0162.416] wcscmp (_String1="Angles.xml", _String2="..") returned 1 [0162.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819a8b8 [0162.416] wcscpy (in: _Dest=0x819a8b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.416] wcscat (in: _Dest=0x819a8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.416] wcscat (in: _Dest=0x819a8b8, _Source="Angles.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" [0162.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d28 [0162.417] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5780b600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5780b600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0162.417] wcscmp (_String1="Apex.xml", _String2=".") returned 1 [0162.417] wcscmp (_String1="Apex.xml", _String2="..") returned 1 [0162.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b858 [0162.417] wcscpy (in: _Dest=0x819b858, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.417] wcscat (in: _Dest=0x819b858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.418] wcscat (in: _Dest=0x819b858, _Source="Apex.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" [0162.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0162.419] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957dda00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x957dda00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0162.419] wcscmp (_String1="Apothecary.xml", _String2=".") returned 1 [0162.419] wcscmp (_String1="Apothecary.xml", _String2="..") returned 1 [0162.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8187760 [0162.419] wcscpy (in: _Dest=0x8187760, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.419] wcscat (in: _Dest=0x8187760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.419] wcscat (in: _Dest=0x8187760, _Source="Apothecary.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" [0162.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d24 [0162.421] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b143d00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b143d00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0162.421] wcscmp (_String1="Aspect.xml", _String2=".") returned 1 [0162.421] wcscmp (_String1="Aspect.xml", _String2="..") returned 1 [0162.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b998 [0162.421] wcscpy (in: _Dest=0x819b998, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.421] wcscat (in: _Dest=0x819b998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.421] wcscat (in: _Dest=0x819b998, _Source="Aspect.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" [0162.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d20 [0162.422] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e03400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97e03400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0162.422] wcscmp (_String1="Austin.xml", _String2=".") returned 1 [0162.422] wcscmp (_String1="Austin.xml", _String2="..") returned 1 [0162.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b0d8 [0162.422] wcscpy (in: _Dest=0x819b0d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.422] wcscat (in: _Dest=0x819b0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.422] wcscat (in: _Dest=0x819b0d8, _Source="Austin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" [0162.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d1c [0162.424] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd4a700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbcd4a700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0162.424] wcscmp (_String1="Black Tie.xml", _String2=".") returned 1 [0162.424] wcscmp (_String1="Black Tie.xml", _String2="..") returned 1 [0162.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81872c8 [0162.424] wcscpy (in: _Dest=0x81872c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.424] wcscat (in: _Dest=0x81872c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.424] wcscat (in: _Dest=0x81872c8, _Source="Black Tie.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" [0162.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81872c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d18 [0162.425] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d769700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d769700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0162.425] wcscmp (_String1="Civic.xml", _String2=".") returned 1 [0162.425] wcscmp (_String1="Civic.xml", _String2="..") returned 1 [0162.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c118 [0162.426] wcscpy (in: _Dest=0x819c118, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.426] wcscat (in: _Dest=0x819c118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.426] wcscat (in: _Dest=0x819c118, _Source="Civic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" [0162.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca8 [0162.427] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b73bb00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b73bb00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0162.427] wcscmp (_String1="Clarity.xml", _String2=".") returned 1 [0162.427] wcscmp (_String1="Clarity.xml", _String2="..") returned 1 [0162.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186998 [0162.427] wcscpy (in: _Dest=0x8186998, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.427] wcscat (in: _Dest=0x8186998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.427] wcscat (in: _Dest=0x8186998, _Source="Clarity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" [0162.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca4 [0162.429] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0682e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0682e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0162.429] wcscmp (_String1="Composite.xml", _String2=".") returned 1 [0162.429] wcscmp (_String1="Composite.xml", _String2="..") returned 1 [0162.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8188330 [0162.429] wcscpy (in: _Dest=0x8188330, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.429] wcscat (in: _Dest=0x8188330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.429] wcscat (in: _Dest=0x8188330, _Source="Composite.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" [0162.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0 [0162.430] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610a1e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x610a1e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0162.430] wcscmp (_String1="Concourse.xml", _String2=".") returned 1 [0162.430] wcscmp (_String1="Concourse.xml", _String2="..") returned 1 [0162.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186ce0 [0162.431] wcscpy (in: _Dest=0x8186ce0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.431] wcscat (in: _Dest=0x8186ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.431] wcscat (in: _Dest=0x8186ce0, _Source="Concourse.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" [0162.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c [0162.433] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52ce200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc52ce200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0162.433] wcscmp (_String1="Couture.xml", _String2=".") returned 1 [0162.433] wcscmp (_String1="Couture.xml", _String2="..") returned 1 [0162.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186458 [0162.433] wcscpy (in: _Dest=0x8186458, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.433] wcscat (in: _Dest=0x8186458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.433] wcscat (in: _Dest=0x8186458, _Source="Couture.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" [0162.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c98 [0162.434] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f19600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9f19600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0162.434] wcscmp (_String1="Elemental.xml", _String2=".") returned 1 [0162.434] wcscmp (_String1="Elemental.xml", _String2="..") returned 1 [0162.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81868f0 [0162.434] wcscpy (in: _Dest=0x81868f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.435] wcscat (in: _Dest=0x81868f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.435] wcscat (in: _Dest=0x81868f0, _Source="Elemental.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" [0162.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81868f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c94 [0162.436] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649da500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x649da500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0162.436] wcscmp (_String1="Equity.xml", _String2=".") returned 1 [0162.437] wcscmp (_String1="Equity.xml", _String2="..") returned 1 [0162.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819c1b8 [0162.437] wcscpy (in: _Dest=0x819c1b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.437] wcscat (in: _Dest=0x819c1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.437] wcscat (in: _Dest=0x819c1b8, _Source="Equity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" [0162.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c90 [0162.438] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f074200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f074200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0162.438] wcscmp (_String1="Essential.xml", _String2=".") returned 1 [0162.438] wcscmp (_String1="Essential.xml", _String2="..") returned 1 [0162.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186ed8 [0162.438] wcscpy (in: _Dest=0x8186ed8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.438] wcscat (in: _Dest=0x8186ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.438] wcscat (in: _Dest=0x8186ed8, _Source="Essential.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" [0162.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8c [0162.440] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc53f000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc53f000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0162.440] wcscmp (_String1="Executive.xml", _String2=".") returned 1 [0162.440] wcscmp (_String1="Executive.xml", _String2="..") returned 1 [0162.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187bf8 [0162.440] wcscpy (in: _Dest=0x8187bf8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.440] wcscat (in: _Dest=0x8187bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.440] wcscat (in: _Dest=0x8187bf8, _Source="Executive.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" [0162.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c88 [0162.441] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a938600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a938600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0162.441] wcscmp (_String1="Flow.xml", _String2=".") returned 1 [0162.441] wcscmp (_String1="Flow.xml", _String2="..") returned 1 [0162.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a6d8 [0162.442] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.442] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.442] wcscat (in: _Dest=0x819a6d8, _Source="Flow.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" [0162.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c84 [0162.443] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68312c00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68312c00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0162.443] wcscmp (_String1="Foundry.xml", _String2=".") returned 1 [0162.443] wcscmp (_String1="Foundry.xml", _String2="..") returned 1 [0162.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187aa8 [0162.443] wcscpy (in: _Dest=0x8187aa8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.443] wcscat (in: _Dest=0x8187aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.443] wcscat (in: _Dest=0x8187aa8, _Source="Foundry.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" [0162.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0162.445] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29ac900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa29ac900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0162.445] wcscmp (_String1="Grid.xml", _String2=".") returned 1 [0162.445] wcscmp (_String1="Grid.xml", _String2="..") returned 1 [0162.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ae58 [0162.445] wcscpy (in: _Dest=0x819ae58, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.445] wcscat (in: _Dest=0x819ae58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.445] wcscat (in: _Dest=0x819ae58, _Source="Grid.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" [0162.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ae58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0162.455] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd2300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4fd2300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0162.455] wcscmp (_String1="Hardcover.xml", _String2=".") returned 1 [0162.455] wcscmp (_String1="Hardcover.xml", _String2="..") returned 1 [0162.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186c38 [0162.455] wcscpy (in: _Dest=0x8186c38, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.455] wcscat (in: _Dest=0x8186c38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.455] wcscat (in: _Dest=0x8186c38, _Source="Hardcover.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" [0162.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0162.457] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe77700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfe77700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0162.457] wcscmp (_String1="Horizon.xml", _String2=".") returned 1 [0162.457] wcscmp (_String1="Horizon.xml", _String2="..") returned 1 [0162.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8187e98 [0162.457] wcscpy (in: _Dest=0x8187e98, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.457] wcscat (in: _Dest=0x8187e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.457] wcscat (in: _Dest=0x8187e98, _Source="Horizon.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" [0162.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0162.459] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e270d00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6e270d00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0162.459] wcscmp (_String1="Median.xml", _String2=".") returned 1 [0162.459] wcscmp (_String1="Median.xml", _String2="..") returned 1 [0162.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bd58 [0162.459] wcscpy (in: _Dest=0x819bd58, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.459] wcscat (in: _Dest=0x819bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.459] wcscat (in: _Dest=0x819bd58, _Source="Median.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" [0162.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0162.460] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ba9400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71ba9400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0162.460] wcscmp (_String1="Metro.xml", _String2=".") returned 1 [0162.460] wcscmp (_String1="Metro.xml", _String2="..") returned 1 [0162.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a818 [0162.461] wcscpy (in: _Dest=0x819a818, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.461] wcscat (in: _Dest=0x819a818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.461] wcscat (in: _Dest=0x819a818, _Source="Metro.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" [0162.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0162.462] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x741cee00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x741cee00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0162.462] wcscmp (_String1="Module.xml", _String2=".") returned 1 [0162.462] wcscmp (_String1="Module.xml", _String2="..") returned 1 [0162.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819ba38 [0162.462] wcscpy (in: _Dest=0x819ba38, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0162.462] wcscat (in: _Dest=0x819ba38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0162.463] wcscat (in: _Dest=0x819ba38, _Source="Module.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" [0162.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ba38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0163.233] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37afe00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd37afe00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0163.233] wcscmp (_String1="Newsprint.xml", _String2=".") returned 1 [0163.233] wcscmp (_String1="Newsprint.xml", _String2="..") returned 1 [0163.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dbc0 [0163.233] wcscpy (in: _Dest=0x3e2dbc0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0163.233] wcscat (in: _Dest=0x3e2dbc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0163.233] wcscat (in: _Dest=0x3e2dbc0, _Source="Newsprint.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" [0165.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dbc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0165.889] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bed00, ftCreationTime.dwHighDateTime=0x1c9b889, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851bed00, ftLastWriteTime.dwHighDateTime=0x1c9b889, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0165.890] wcscmp (_String1="Office 2.xml", _String2=".") returned 1 [0165.890] wcscmp (_String1="Office 2.xml", _String2="..") returned 1 [0165.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187418 [0165.890] wcscpy (in: _Dest=0x8187418, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.890] wcscat (in: _Dest=0x8187418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.890] wcscat (in: _Dest=0x8187418, _Source="Office 2.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" [0165.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2888 [0165.891] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bed00, ftCreationTime.dwHighDateTime=0x1c9b889, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851bed00, ftLastWriteTime.dwHighDateTime=0x1c9b889, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="OFFICE~3.XML")) returned 1 [0165.891] wcscmp (_String1="Office Classic 2.xml", _String2=".") returned 1 [0165.891] wcscmp (_String1="Office Classic 2.xml", _String2="..") returned 1 [0165.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x81e1d78 [0165.891] wcscpy (in: _Dest=0x81e1d78, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.891] wcscat (in: _Dest=0x81e1d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.891] wcscat (in: _Dest=0x81e1d78, _Source="Office Classic 2.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" [0165.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0165.892] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bed00, ftCreationTime.dwHighDateTime=0x1c9b889, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851bed00, ftLastWriteTime.dwHighDateTime=0x1c9b889, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0165.892] wcscmp (_String1="Office Classic.xml", _String2=".") returned 1 [0165.892] wcscmp (_String1="Office Classic.xml", _String2="..") returned 1 [0165.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da618 [0165.892] wcscpy (in: _Dest=0x81da618, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.892] wcscat (in: _Dest=0x81da618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.892] wcscat (in: _Dest=0x81da618, _Source="Office Classic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" [0165.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0165.893] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b07500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b07500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0165.893] wcscmp (_String1="Opulent.xml", _String2=".") returned 1 [0165.893] wcscmp (_String1="Opulent.xml", _String2="..") returned 1 [0165.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186f80 [0165.894] wcscpy (in: _Dest=0x8186f80, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.894] wcscat (in: _Dest=0x8186f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.894] wcscat (in: _Dest=0x8186f80, _Source="Opulent.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" [0165.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb8 [0165.895] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b43fc00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b43fc00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0165.895] wcscmp (_String1="Oriel.xml", _String2=".") returned 1 [0165.895] wcscmp (_String1="Oriel.xml", _String2="..") returned 1 [0165.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b7b8 [0165.895] wcscpy (in: _Dest=0x819b7b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.895] wcscat (in: _Dest=0x819b7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.895] wcscat (in: _Dest=0x819b7b8, _Source="Oriel.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" [0165.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0165.896] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed78300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7ed78300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0165.896] wcscmp (_String1="Origin.xml", _String2=".") returned 1 [0165.896] wcscmp (_String1="Origin.xml", _String2="..") returned 1 [0165.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819a638 [0165.896] wcscpy (in: _Dest=0x819a638, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.896] wcscat (in: _Dest=0x819a638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.896] wcscat (in: _Dest=0x819a638, _Source="Origin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" [0165.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc0 [0165.897] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8139dd00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8139dd00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0165.897] wcscmp (_String1="Paper.xml", _String2=".") returned 1 [0165.897] wcscmp (_String1="Paper.xml", _String2="..") returned 1 [0165.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a9f8 [0165.898] wcscpy (in: _Dest=0x819a9f8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.898] wcscat (in: _Dest=0x819a9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.898] wcscat (in: _Dest=0x819a9f8, _Source="Paper.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" [0165.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d54 [0165.899] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa890aa00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa890aa00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0165.899] wcscmp (_String1="Perspective.xml", _String2=".") returned 1 [0165.899] wcscmp (_String1="Perspective.xml", _String2="..") returned 1 [0165.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d9908 [0165.899] wcscpy (in: _Dest=0x81d9908, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.899] wcscat (in: _Dest=0x81d9908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.899] wcscat (in: _Dest=0x81d9908, _Source="Perspective.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" [0165.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d58 [0165.900] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac243100, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac243100, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0165.900] wcscmp (_String1="Pushpin.xml", _String2=".") returned 1 [0165.900] wcscmp (_String1="Pushpin.xml", _String2="..") returned 1 [0165.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x81870d0 [0165.900] wcscpy (in: _Dest=0x81870d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.900] wcscat (in: _Dest=0x81870d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.900] wcscat (in: _Dest=0x81870d0, _Source="Pushpin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" [0165.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81870d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0165.901] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd70e8500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd70e8500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0165.901] wcscmp (_String1="Slipstream.xml", _String2=".") returned 1 [0165.901] wcscmp (_String1="Slipstream.xml", _String2="..") returned 1 [0165.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186e30 [0165.901] wcscpy (in: _Dest=0x8186e30, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.901] wcscat (in: _Dest=0x8186e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.902] wcscat (in: _Dest=0x8186e30, _Source="Slipstream.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" [0165.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2828 [0165.902] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84cd6400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84cd6400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0165.903] wcscmp (_String1="Solstice.xml", _String2=".") returned 1 [0165.903] wcscmp (_String1="Solstice.xml", _String2="..") returned 1 [0165.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81876b8 [0165.903] wcscpy (in: _Dest=0x81876b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.903] wcscat (in: _Dest=0x81876b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.903] wcscat (in: _Dest=0x81876b8, _Source="Solstice.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" [0165.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81876b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2824 [0165.904] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8860eb00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8860eb00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0165.904] wcscmp (_String1="Technic.xml", _String2=".") returned 1 [0165.904] wcscmp (_String1="Technic.xml", _String2="..") returned 1 [0165.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x8186ae8 [0165.904] wcscpy (in: _Dest=0x8186ae8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.904] wcscat (in: _Dest=0x8186ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.904] wcscat (in: _Dest=0x8186ae8, _Source="Technic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" [0165.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2820 [0165.905] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb7b800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafb7b800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0165.905] wcscmp (_String1="Thatch.xml", _String2=".") returned 1 [0165.905] wcscmp (_String1="Thatch.xml", _String2="..") returned 1 [0165.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819ab38 [0165.905] wcscpy (in: _Dest=0x819ab38, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.905] wcscat (in: _Dest=0x819ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.905] wcscat (in: _Dest=0x819ab38, _Source="Thatch.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" [0165.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x281c [0165.906] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf47200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8bf47200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0165.906] wcscmp (_String1="Trek.xml", _String2=".") returned 1 [0165.906] wcscmp (_String1="Trek.xml", _String2="..") returned 1 [0165.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a598 [0165.906] wcscpy (in: _Dest=0x819a598, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.906] wcscat (in: _Dest=0x819a598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.906] wcscat (in: _Dest=0x819a598, _Source="Trek.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" [0165.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2818 [0165.907] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e56cc00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e56cc00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0165.907] wcscmp (_String1="Urban.xml", _String2=".") returned 1 [0165.907] wcscmp (_String1="Urban.xml", _String2="..") returned 1 [0165.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b038 [0165.907] wcscpy (in: _Dest=0x819b038, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.908] wcscat (in: _Dest=0x819b038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.908] wcscat (in: _Dest=0x819b038, _Source="Urban.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" [0165.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2814 [0165.908] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ea5300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91ea5300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0165.909] wcscmp (_String1="Verve.xml", _String2=".") returned 1 [0165.909] wcscmp (_String1="Verve.xml", _String2="..") returned 1 [0165.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b5d8 [0165.909] wcscpy (in: _Dest=0x819b5d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.909] wcscat (in: _Dest=0x819b5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.909] wcscat (in: _Dest=0x819b5d8, _Source="Verve.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" [0165.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2810 [0165.910] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34b3f00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb34b3f00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0165.910] wcscmp (_String1="Waveform.xml", _String2=".") returned 1 [0165.910] wcscmp (_String1="Waveform.xml", _String2="..") returned 1 [0165.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187610 [0165.910] wcscpy (in: _Dest=0x8187610, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0165.910] wcscat (in: _Dest=0x8187610, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0165.910] wcscat (in: _Dest=0x8187610, _Source="Waveform.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" [0165.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0165.911] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34b3f00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb34b3f00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0165.911] FindClose (in: hFindFile=0x3f37b58 | out: hFindFile=0x3f37b58) returned 1 [0165.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffc68) returned 1 [0165.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2a58) returned 1 [0165.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1228) returned 1 Thread: id = 2344 os_tid = 0x2028 [0154.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx")) returned 0x20 [0161.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx", dwFileAttributes=0x20) returned 0 [0162.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.779] GetLastError () returned 0x5 [0163.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx", dwFileAttributes=0x20) returned 0 [0163.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfc40) returned 1 Thread: id = 2345 os_tid = 0x202c [0154.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx")) returned 0x20 [0161.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx", dwFileAttributes=0x20) returned 0 [0162.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.772] GetLastError () returned 0x5 [0162.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx", dwFileAttributes=0x20) returned 0 [0163.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 2346 os_tid = 0x2030 [0154.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx")) returned 0x20 [0161.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx", dwFileAttributes=0x20) returned 0 [0162.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.773] GetLastError () returned 0x5 [0162.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx", dwFileAttributes=0x20) returned 0 [0162.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 2347 os_tid = 0x2034 [0154.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx")) returned 0x20 [0161.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx", dwFileAttributes=0x20) returned 0 [0162.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.773] GetLastError () returned 0x5 [0162.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx", dwFileAttributes=0x20) returned 0 [0162.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2ae8) returned 1 Thread: id = 2348 os_tid = 0x2038 [0154.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze")) returned 0x20 [0154.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", dwFileAttributes=0x20) returned 0 [0154.567] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.567] GetLastError () returned 0x5 [0154.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", dwFileAttributes=0x20) returned 0 [0154.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186e30) returned 1 Thread: id = 2349 os_tid = 0x203c [0154.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze")) returned 0x20 [0154.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", dwFileAttributes=0x20) returned 0 [0154.575] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.575] GetLastError () returned 0x5 [0154.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", dwFileAttributes=0x20) returned 0 [0154.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 2350 os_tid = 0x2040 [0154.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze")) returned 0x20 [0154.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", dwFileAttributes=0x20) returned 0 [0154.578] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.578] GetLastError () returned 0x5 [0154.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", dwFileAttributes=0x20) returned 0 [0154.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 2351 os_tid = 0x2044 [0154.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze")) returned 0x20 [0154.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", dwFileAttributes=0x20) returned 0 [0154.580] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.580] GetLastError () returned 0x5 [0154.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", dwFileAttributes=0x20) returned 0 [0154.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6c48) returned 1 Thread: id = 2352 os_tid = 0x2048 [0154.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum")) returned 0x20 [0154.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", dwFileAttributes=0x20) returned 0 [0154.582] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.582] GetLastError () returned 0x5 [0154.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", dwFileAttributes=0x20) returned 0 [0154.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186d88) returned 1 Thread: id = 2353 os_tid = 0x204c [0154.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum")) returned 0x20 [0154.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", dwFileAttributes=0x20) returned 0 [0154.584] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.584] GetLastError () returned 0x5 [0154.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", dwFileAttributes=0x20) returned 0 [0154.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2354 os_tid = 0x2050 [0154.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum")) returned 0x20 [0154.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", dwFileAttributes=0x20) returned 0 [0154.590] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.590] GetLastError () returned 0x5 [0154.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", dwFileAttributes=0x20) returned 0 [0154.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 2355 os_tid = 0x2054 [0154.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum")) returned 0x20 [0154.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", dwFileAttributes=0x20) returned 0 [0154.591] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.591] GetLastError () returned 0x5 [0154.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", dwFileAttributes=0x20) returned 0 [0154.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 2356 os_tid = 0x2058 [0154.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf")) returned 0x20 [0154.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0154.593] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.593] GetLastError () returned 0x5 [0154.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0154.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff67f8) returned 1 Thread: id = 2357 os_tid = 0x205c [0154.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf")) returned 0x20 [0154.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0154.594] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.594] GetLastError () returned 0x5 [0154.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0154.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 2358 os_tid = 0x2060 [0154.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf")) returned 0x20 [0154.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0154.596] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.596] GetLastError () returned 0x5 [0154.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0154.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5968) returned 1 Thread: id = 2359 os_tid = 0x2064 [0154.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one")) returned 0x20 [0154.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE", dwFileAttributes=0x20) returned 0 [0154.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.597] GetLastError () returned 0x5 [0154.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE", dwFileAttributes=0x20) returned 0 [0154.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 2360 os_tid = 0x2068 [0154.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one")) returned 0x20 [0154.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE", dwFileAttributes=0x20) returned 0 [0154.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.606] GetLastError () returned 0x5 [0154.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE", dwFileAttributes=0x20) returned 0 [0154.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 2361 os_tid = 0x206c [0154.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one")) returned 0x20 [0154.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE", dwFileAttributes=0x20) returned 0 [0154.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.609] GetLastError () returned 0x5 [0154.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE", dwFileAttributes=0x20) returned 0 [0154.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c2c8) returned 1 Thread: id = 2362 os_tid = 0x2070 [0154.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one")) returned 0x20 [0154.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE", dwFileAttributes=0x20) returned 0 [0154.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.611] GetLastError () returned 0x5 [0154.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE", dwFileAttributes=0x20) returned 0 [0154.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 2363 os_tid = 0x2074 [0154.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one")) returned 0x20 [0154.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE", dwFileAttributes=0x20) returned 0 [0154.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.980] GetLastError () returned 0x5 [0154.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE", dwFileAttributes=0x20) returned 0 [0154.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 Thread: id = 2364 os_tid = 0x2078 [0154.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr")) returned 0x20 [0154.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR", dwFileAttributes=0x20) returned 0 [0154.613] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.613] GetLastError () returned 0x5 [0154.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR", dwFileAttributes=0x20) returned 0 [0154.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 Thread: id = 2365 os_tid = 0x207c [0154.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr")) returned 0x20 [0154.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR", dwFileAttributes=0x20) returned 0 [0154.620] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.620] GetLastError () returned 0x5 [0154.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR", dwFileAttributes=0x20) returned 0 [0154.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 2366 os_tid = 0x2080 [0154.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr")) returned 0x20 [0154.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR", dwFileAttributes=0x20) returned 0 [0154.622] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.622] GetLastError () returned 0x5 [0154.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR", dwFileAttributes=0x20) returned 0 [0154.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c0b8) returned 1 Thread: id = 2367 os_tid = 0x2084 [0154.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr")) returned 0x20 [0154.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR", dwFileAttributes=0x20) returned 0 [0154.627] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.627] GetLastError () returned 0x5 [0154.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR", dwFileAttributes=0x20) returned 0 [0154.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 Thread: id = 2368 os_tid = 0x2088 [0154.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5968 [0154.638] wcscpy (in: _Dest=0x81d5968, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0154.638] wcscat (in: _Dest=0x81d5968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\" [0154.638] wcscat (in: _Dest=0x81d5968, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*" [0154.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0154.638] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55708 [0154.638] wcscmp (_String1=".", _String2=".") returned 0 [0154.638] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.638] wcscmp (_String1="..", _String2=".") returned 1 [0154.638] wcscmp (_String1="..", _String2="..") returned 0 [0154.638] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0154.638] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0154.639] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0154.639] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0154.639] FindClose (in: hFindFile=0x3e55708 | out: hFindFile=0x3e55708) returned 1 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5968) returned 1 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6070) returned 1 Thread: id = 2369 os_tid = 0x208c [0154.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx")) returned 0x20 [0154.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx", dwFileAttributes=0x20) returned 0 [0154.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.641] GetLastError () returned 0x5 [0154.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx", dwFileAttributes=0x20) returned 0 [0154.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5c88) returned 1 Thread: id = 2370 os_tid = 0x2090 [0154.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg")) returned 0x20 [0165.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.593] GetLastError () returned 0x5 [0165.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 2371 os_tid = 0x2094 [0154.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp")) returned 0x20 [0162.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0163.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.550] GetLastError () returned 0x5 [0165.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 2372 os_tid = 0x2098 [0154.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp")) returned 0x20 [0165.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", dwFileAttributes=0x20) returned 0 [0165.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.617] GetLastError () returned 0x5 [0165.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", dwFileAttributes=0x20) returned 0 [0165.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81870d0) returned 1 Thread: id = 2373 os_tid = 0x209c [0154.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp")) returned 0x20 [0165.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.622] GetLastError () returned 0x5 [0165.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c848) returned 1 Thread: id = 2374 os_tid = 0x20a0 [0154.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg")) returned 0x20 [0165.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", dwFileAttributes=0x20) returned 0 [0165.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.539] GetLastError () returned 0x5 [0165.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", dwFileAttributes=0x20) returned 0 [0165.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187178) returned 1 Thread: id = 2375 os_tid = 0x20a4 [0154.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp")) returned 0x20 [0165.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", dwFileAttributes=0x20) returned 0 [0165.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.595] GetLastError () returned 0x5 [0165.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", dwFileAttributes=0x20) returned 0 [0165.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c638) returned 1 Thread: id = 2376 os_tid = 0x20a8 [0154.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg")) returned 0x20 [0165.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.549] GetLastError () returned 0x5 [0165.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 2377 os_tid = 0x20ac [0154.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp")) returned 0x20 [0165.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.597] GetLastError () returned 0x5 [0165.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40118) returned 1 Thread: id = 2378 os_tid = 0x20b0 [0154.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg")) returned 0x20 [0165.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.620] GetLastError () returned 0x5 [0165.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 2379 os_tid = 0x20b4 [0154.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp")) returned 0x20 [0165.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.552] GetLastError () returned 0x5 [0165.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d401d0) returned 1 Thread: id = 2380 os_tid = 0x20b8 [0154.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg")) returned 0x20 [0165.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.554] GetLastError () returned 0x5 [0165.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40288) returned 1 Thread: id = 2381 os_tid = 0x20bc [0154.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp")) returned 0x20 [0163.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0163.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.547] GetLastError () returned 0x5 [0165.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 2382 os_tid = 0x20c0 [0154.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg")) returned 0x20 [0163.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg", dwFileAttributes=0x20) returned 0 [0163.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.892] GetLastError () returned 0x5 [0164.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg", dwFileAttributes=0x20) returned 0 [0164.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187028) returned 1 Thread: id = 2383 os_tid = 0x20c4 [0154.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp")) returned 0x20 [0158.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp", dwFileAttributes=0x20) returned 0 [0161.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.813] GetLastError () returned 0x5 [0164.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp", dwFileAttributes=0x20) returned 0 [0165.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf4b8) returned 1 Thread: id = 2384 os_tid = 0x20c8 [0154.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg")) returned 0x20 [0165.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x20) returned 0 [0165.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.553] GetLastError () returned 0x5 [0165.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x20) returned 0 [0165.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 Thread: id = 2385 os_tid = 0x20cc [0154.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp")) returned 0x20 [0165.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x20) returned 0 [0165.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.619] GetLastError () returned 0x5 [0165.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x20) returned 0 [0165.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1460) returned 1 Thread: id = 2386 os_tid = 0x20d0 [0154.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg")) returned 0x20 [0165.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x20) returned 0 [0165.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.625] GetLastError () returned 0x5 [0165.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x20) returned 0 [0165.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186f80) returned 1 Thread: id = 2387 os_tid = 0x20d4 [0154.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp")) returned 0x20 [0165.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x20) returned 0 [0165.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.624] GetLastError () returned 0x5 [0165.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x20) returned 0 [0165.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf148) returned 1 Thread: id = 2388 os_tid = 0x20d8 [0154.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg")) returned 0x20 [0165.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x20) returned 0 [0165.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.602] GetLastError () returned 0x5 [0165.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x20) returned 0 [0165.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40340) returned 1 Thread: id = 2389 os_tid = 0x20dc [0154.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg")) returned 0x20 [0165.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0165.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.576] GetLastError () returned 0x5 [0165.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0165.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0068) returned 1 Thread: id = 2390 os_tid = 0x20e0 [0154.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp")) returned 0x20 [0156.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0158.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.419] GetLastError () returned 0x5 [0158.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0158.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d403f8) returned 1 Thread: id = 2391 os_tid = 0x20e4 [0154.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt")) returned 0x20 [0154.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt", dwFileAttributes=0x20) returned 0 [0154.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.656] GetLastError () returned 0x5 [0154.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt", dwFileAttributes=0x20) returned 0 [0154.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a4a0) returned 1 Thread: id = 2392 os_tid = 0x20e8 [0154.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf")) returned 0x20 [0154.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0154.658] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.658] GetLastError () returned 0x5 [0154.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0154.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a798) returned 1 Thread: id = 2393 os_tid = 0x20ec [0154.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf")) returned 0x20 [0154.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0154.660] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.660] GetLastError () returned 0x5 [0154.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0154.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1cb0) returned 1 Thread: id = 2394 os_tid = 0x20f0 [0154.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt")) returned 0x20 [0154.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt", dwFileAttributes=0x20) returned 0 [0154.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.662] GetLastError () returned 0x5 [0154.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt", dwFileAttributes=0x20) returned 0 [0154.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1168) returned 1 Thread: id = 2395 os_tid = 0x20f4 [0154.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg")) returned 0x20 [0165.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.604] GetLastError () returned 0x5 [0165.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 2396 os_tid = 0x20f8 [0154.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp")) returned 0x20 [0165.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.605] GetLastError () returned 0x5 [0165.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5648) returned 1 Thread: id = 2397 os_tid = 0x20fc [0154.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg")) returned 0x20 [0165.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.607] GetLastError () returned 0x5 [0165.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404b0) returned 1 Thread: id = 2398 os_tid = 0x2100 [0154.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp")) returned 0x20 [0165.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.609] GetLastError () returned 0x5 [0165.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333e28) returned 1 Thread: id = 2399 os_tid = 0x2104 [0154.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg")) returned 0x20 [0165.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x20) returned 0 [0165.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.610] GetLastError () returned 0x5 [0165.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x20) returned 0 [0165.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf618) returned 1 Thread: id = 2400 os_tid = 0x2108 [0154.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg")) returned 0x20 [0165.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x20) returned 0 [0165.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.575] GetLastError () returned 0x5 [0165.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x20) returned 0 [0165.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40568) returned 1 Thread: id = 2401 os_tid = 0x210c [0154.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf")) returned 0x20 [0154.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0154.665] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.665] GetLastError () returned 0x5 [0154.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0154.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff75a0) returned 1 Thread: id = 2402 os_tid = 0x2110 [0154.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf")) returned 0x20 [0154.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0154.666] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.666] GetLastError () returned 0x5 [0154.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0154.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40620) returned 1 Thread: id = 2403 os_tid = 0x2114 [0154.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf")) returned 0x20 [0154.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0154.668] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.668] GetLastError () returned 0x5 [0154.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0154.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d57d8) returned 1 Thread: id = 2404 os_tid = 0x2118 [0154.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf")) returned 0x20 [0154.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0154.672] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.673] GetLastError () returned 0x5 [0154.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0154.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 Thread: id = 2405 os_tid = 0x211c [0154.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf")) returned 0x20 [0154.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0154.674] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.674] GetLastError () returned 0x5 [0154.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0154.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d406d8) returned 1 Thread: id = 2406 os_tid = 0x2120 [0154.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf")) returned 0x20 [0154.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0154.676] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.676] GetLastError () returned 0x5 [0154.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0154.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5fa8) returned 1 Thread: id = 2407 os_tid = 0x2124 [0154.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer")) returned 0x20 [0155.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x20) returned 0 [0155.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.325] GetLastError () returned 0x5 [0155.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x20) returned 0 [0155.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f97f0) returned 1 Thread: id = 2408 os_tid = 0x2128 [0154.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer")) returned 0x20 [0155.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x20) returned 0 [0155.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.340] GetLastError () returned 0x5 [0155.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x20) returned 0 [0155.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24d40) returned 1 Thread: id = 2409 os_tid = 0x212c [0154.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer")) returned 0x20 [0155.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x20) returned 0 [0155.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.327] GetLastError () returned 0x5 [0155.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x20) returned 0 [0155.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 Thread: id = 2410 os_tid = 0x2130 [0154.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx")) returned 0x20 [0155.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx", dwFileAttributes=0x20) returned 0 [0155.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.347] GetLastError () returned 0x5 [0155.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx", dwFileAttributes=0x20) returned 0 [0155.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2038) returned 1 Thread: id = 2411 os_tid = 0x2134 [0154.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx")) returned 0x20 [0155.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0155.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.349] GetLastError () returned 0x5 [0155.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0155.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355dd0) returned 1 Thread: id = 2412 os_tid = 0x2138 [0154.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx")) returned 0x20 [0155.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0155.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.351] GetLastError () returned 0x5 [0155.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0155.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d19b8) returned 1 Thread: id = 2413 os_tid = 0x213c [0154.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx")) returned 0x20 [0155.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx", dwFileAttributes=0x20) returned 0 [0155.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.353] GetLastError () returned 0x5 [0155.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx", dwFileAttributes=0x20) returned 0 [0155.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 Thread: id = 2414 os_tid = 0x2140 [0154.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx")) returned 0x20 [0154.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx", dwFileAttributes=0x20) returned 0 [0154.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.983] GetLastError () returned 0x5 [0154.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx", dwFileAttributes=0x20) returned 0 [0154.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 2415 os_tid = 0x2144 [0154.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx")) returned 0x20 [0154.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx", dwFileAttributes=0x20) returned 0 [0154.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.985] GetLastError () returned 0x5 [0154.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx", dwFileAttributes=0x20) returned 0 [0154.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355170) returned 1 Thread: id = 2416 os_tid = 0x2148 [0154.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3335e8 [0154.684] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0154.684] wcscat (in: _Dest=0x3335e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0154.684] wcscat (in: _Dest=0x3335e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*" [0154.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0154.684] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55708 [0154.685] wcscmp (_String1=".", _String2=".") returned 0 [0154.685] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.685] wcscmp (_String1="..", _String2=".") returned 1 [0154.685] wcscmp (_String1="..", _String2="..") returned 0 [0154.685] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0154.685] wcscmp (_String1="x86", _String2=".") returned 1 [0154.685] wcscmp (_String1="x86", _String2="..") returned 1 [0154.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d5fa8 [0154.685] wcscpy (in: _Dest=0x81d5fa8, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0154.685] wcscat (in: _Dest=0x81d5fa8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0154.685] wcscat (in: _Dest=0x81d5fa8, _Source="x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0155.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d5fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0155.190] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0155.190] FindClose (in: hFindFile=0x3e55708 | out: hFindFile=0x3e55708) returned 1 [0155.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0155.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3335e8) returned 1 [0155.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 2417 os_tid = 0x214c [0154.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d1168 [0154.695] wcscpy (in: _Dest=0x81d1168, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0154.695] wcscat (in: _Dest=0x81d1168, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0154.695] wcscat (in: _Dest=0x81d1168, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*" [0154.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f099f0 [0154.695] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e556c8 [0154.696] wcscmp (_String1=".", _String2=".") returned 0 [0154.696] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.696] wcscmp (_String1="..", _String2=".") returned 1 [0154.697] wcscmp (_String1="..", _String2="..") returned 0 [0154.697] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf171085c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0154.697] wcscmp (_String1="usertile10.bmp", _String2=".") returned 1 [0154.697] wcscmp (_String1="usertile10.bmp", _String2="..") returned 1 [0154.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c0b8 [0154.697] wcscpy (in: _Dest=0x35c0b8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0154.697] wcscat (in: _Dest=0x35c0b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0154.697] wcscat (in: _Dest=0x35c0b8, _Source="usertile10.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" [0155.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x254c [0155.192] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf17369bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0155.192] wcscmp (_String1="usertile11.bmp", _String2=".") returned 1 [0155.192] wcscmp (_String1="usertile11.bmp", _String2="..") returned 1 [0155.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eafcf8 [0155.193] wcscpy (in: _Dest=0x3eafcf8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.193] wcscat (in: _Dest=0x3eafcf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.193] wcscat (in: _Dest=0x3eafcf8, _Source="usertile11.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" [0155.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eafcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x272c [0155.194] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52733076, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52733076, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0155.194] wcscmp (_String1="usertile12.bmp", _String2=".") returned 1 [0155.194] wcscmp (_String1="usertile12.bmp", _String2="..") returned 1 [0155.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0488 [0155.194] wcscpy (in: _Dest=0x3eb0488, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.194] wcscat (in: _Dest=0x3eb0488, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.194] wcscat (in: _Dest=0x3eb0488, _Source="usertile12.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" [0155.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2730 [0155.196] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0155.196] wcscmp (_String1="usertile13.bmp", _String2=".") returned 1 [0155.196] wcscmp (_String1="usertile13.bmp", _String2="..") returned 1 [0155.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eafe58 [0155.196] wcscpy (in: _Dest=0x3eafe58, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.196] wcscat (in: _Dest=0x3eafe58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.196] wcscat (in: _Dest=0x3eafe58, _Source="usertile13.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" [0155.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eafe58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2734 [0155.197] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e5abbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0155.197] wcscmp (_String1="usertile14.bmp", _String2=".") returned 1 [0155.197] wcscmp (_String1="usertile14.bmp", _String2="..") returned 1 [0155.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0538 [0155.198] wcscpy (in: _Dest=0x3eb0538, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.198] wcscat (in: _Dest=0x3eb0538, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.198] wcscat (in: _Dest=0x3eb0538, _Source="usertile14.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" [0155.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2738 [0155.199] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5277f346, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5277f346, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e80d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0155.199] wcscmp (_String1="usertile15.bmp", _String2=".") returned 1 [0155.199] wcscmp (_String1="usertile15.bmp", _String2="..") returned 1 [0155.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb05e8 [0155.199] wcscpy (in: _Dest=0x3eb05e8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.199] wcscat (in: _Dest=0x3eb05e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.199] wcscat (in: _Dest=0x3eb05e8, _Source="usertile15.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" [0155.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb05e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x273c [0155.201] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527a54ae, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527a54ae, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0155.201] wcscmp (_String1="usertile16.bmp", _String2=".") returned 1 [0155.201] wcscmp (_String1="usertile16.bmp", _String2="..") returned 1 [0155.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0698 [0155.201] wcscpy (in: _Dest=0x3eb0698, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.201] wcscat (in: _Dest=0x3eb0698, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.201] wcscat (in: _Dest=0x3eb0698, _Source="usertile16.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" [0155.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2740 [0155.203] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0155.203] wcscmp (_String1="usertile17.bmp", _String2=".") returned 1 [0155.203] wcscmp (_String1="usertile17.bmp", _String2="..") returned 1 [0155.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0748 [0155.203] wcscpy (in: _Dest=0x3eb0748, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.203] wcscat (in: _Dest=0x3eb0748, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.203] wcscat (in: _Dest=0x3eb0748, _Source="usertile17.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" [0155.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2744 [0155.205] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1eccfdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0155.205] wcscmp (_String1="usertile18.bmp", _String2=".") returned 1 [0155.205] wcscmp (_String1="usertile18.bmp", _String2="..") returned 1 [0155.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb07f8 [0155.205] wcscpy (in: _Dest=0x3eb07f8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.205] wcscat (in: _Dest=0x3eb07f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.205] wcscat (in: _Dest=0x3eb07f8, _Source="usertile18.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" [0155.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb07f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2748 [0155.206] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ef313c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0155.206] wcscmp (_String1="usertile19.bmp", _String2=".") returned 1 [0155.207] wcscmp (_String1="usertile19.bmp", _String2="..") returned 1 [0155.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb08a8 [0155.207] wcscpy (in: _Dest=0x3eb08a8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.207] wcscat (in: _Dest=0x3eb08a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.207] wcscat (in: _Dest=0x3eb08a8, _Source="usertile19.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" [0155.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb08a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274c [0155.208] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0155.208] wcscmp (_String1="usertile20.bmp", _String2=".") returned 1 [0155.208] wcscmp (_String1="usertile20.bmp", _String2="..") returned 1 [0155.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0958 [0155.208] wcscpy (in: _Dest=0x3eb0958, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.209] wcscat (in: _Dest=0x3eb0958, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.209] wcscat (in: _Dest=0x3eb0958, _Source="usertile20.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" [0155.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2750 [0155.210] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528178e6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528178e6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0155.210] wcscmp (_String1="usertile21.bmp", _String2=".") returned 1 [0155.210] wcscmp (_String1="usertile21.bmp", _String2="..") returned 1 [0155.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0a08 [0155.210] wcscpy (in: _Dest=0x3eb0a08, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.211] wcscat (in: _Dest=0x3eb0a08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.211] wcscat (in: _Dest=0x3eb0a08, _Source="usertile21.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" [0155.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2754 [0155.212] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5283da4e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5283da4e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f3f3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0155.212] wcscmp (_String1="usertile22.bmp", _String2=".") returned 1 [0155.212] wcscmp (_String1="usertile22.bmp", _String2="..") returned 1 [0155.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0ab8 [0155.212] wcscpy (in: _Dest=0x3eb0ab8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.212] wcscat (in: _Dest=0x3eb0ab8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.212] wcscat (in: _Dest=0x3eb0ab8, _Source="usertile22.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" [0155.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2758 [0155.214] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52863bb6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52863bb6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f6555c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0155.214] wcscmp (_String1="usertile23.bmp", _String2=".") returned 1 [0155.214] wcscmp (_String1="usertile23.bmp", _String2="..") returned 1 [0155.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0b68 [0155.214] wcscpy (in: _Dest=0x3eb0b68, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.214] wcscat (in: _Dest=0x3eb0b68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.214] wcscat (in: _Dest=0x3eb0b68, _Source="usertile23.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" [0155.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x275c [0155.216] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528afe86, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528afe86, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2238f7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0155.216] wcscmp (_String1="usertile24.bmp", _String2=".") returned 1 [0155.216] wcscmp (_String1="usertile24.bmp", _String2="..") returned 1 [0155.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0c18 [0155.216] wcscpy (in: _Dest=0x3eb0c18, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.216] wcscat (in: _Dest=0x3eb0c18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.216] wcscat (in: _Dest=0x3eb0c18, _Source="usertile24.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" [0155.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2760 [0155.217] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf225f0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0155.217] wcscmp (_String1="usertile25.bmp", _String2=".") returned 1 [0155.217] wcscmp (_String1="usertile25.bmp", _String2="..") returned 1 [0155.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0cc8 [0155.217] wcscpy (in: _Dest=0x3eb0cc8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.217] wcscat (in: _Dest=0x3eb0cc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.217] wcscat (in: _Dest=0x3eb0cc8, _Source="usertile25.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" [0155.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2764 [0155.219] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf228523c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0155.219] wcscmp (_String1="usertile26.bmp", _String2=".") returned 1 [0155.219] wcscmp (_String1="usertile26.bmp", _String2="..") returned 1 [0155.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0d78 [0155.219] wcscpy (in: _Dest=0x3eb0d78, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.219] wcscat (in: _Dest=0x3eb0d78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.219] wcscat (in: _Dest=0x3eb0d78, _Source="usertile26.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" [0155.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2768 [0155.221] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529222be, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529222be, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0155.221] wcscmp (_String1="usertile27.bmp", _String2=".") returned 1 [0155.221] wcscmp (_String1="usertile27.bmp", _String2="..") returned 1 [0155.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0e28 [0155.221] wcscpy (in: _Dest=0x3eb0e28, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.221] wcscat (in: _Dest=0x3eb0e28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.221] wcscat (in: _Dest=0x3eb0e28, _Source="usertile27.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" [0155.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x276c [0155.222] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52948426, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52948426, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0155.222] wcscmp (_String1="usertile28.bmp", _String2=".") returned 1 [0155.222] wcscmp (_String1="usertile28.bmp", _String2="..") returned 1 [0155.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0ed8 [0155.222] wcscpy (in: _Dest=0x3eb0ed8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.223] wcscat (in: _Dest=0x3eb0ed8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.223] wcscat (in: _Dest=0x3eb0ed8, _Source="usertile28.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" [0155.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb0ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2770 [0155.224] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296e58e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5296e58e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22d14fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0155.224] wcscmp (_String1="usertile29.bmp", _String2=".") returned 1 [0155.224] wcscmp (_String1="usertile29.bmp", _String2="..") returned 1 [0155.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9648 [0155.224] wcscpy (in: _Dest=0x81d9648, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.224] wcscat (in: _Dest=0x81d9648, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.224] wcscat (in: _Dest=0x81d9648, _Source="usertile29.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" [0155.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2774 [0155.226] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529946f6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529946f6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0155.226] wcscmp (_String1="usertile30.bmp", _String2=".") returned 1 [0155.226] wcscmp (_String1="usertile30.bmp", _String2="..") returned 1 [0155.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d96f8 [0155.226] wcscpy (in: _Dest=0x81d96f8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.226] wcscat (in: _Dest=0x81d96f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.226] wcscat (in: _Dest=0x81d96f8, _Source="usertile30.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" [0155.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2778 [0155.228] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529ba85e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529ba85e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0155.228] wcscmp (_String1="usertile31.bmp", _String2=".") returned 1 [0155.228] wcscmp (_String1="usertile31.bmp", _String2="..") returned 1 [0155.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d97a8 [0155.228] wcscpy (in: _Dest=0x81d97a8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.228] wcscat (in: _Dest=0x81d97a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.228] wcscat (in: _Dest=0x81d97a8, _Source="usertile31.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" [0155.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d97a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x277c [0155.821] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a06b2e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a06b2e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0155.821] wcscmp (_String1="usertile32.bmp", _String2=".") returned 1 [0155.821] wcscmp (_String1="usertile32.bmp", _String2="..") returned 1 [0155.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9648 [0155.821] wcscpy (in: _Dest=0x81d9648, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0155.821] wcscat (in: _Dest=0x81d9648, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0155.821] wcscat (in: _Dest=0x81d9648, _Source="usertile32.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" [0156.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c4 [0156.525] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a52dfe, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a52dfe, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0156.525] wcscmp (_String1="usertile33.bmp", _String2=".") returned 1 [0156.525] wcscmp (_String1="usertile33.bmp", _String2="..") returned 1 [0156.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9dd8 [0156.525] wcscpy (in: _Dest=0x81d9dd8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.526] wcscat (in: _Dest=0x81d9dd8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.526] wcscat (in: _Dest=0x81d9dd8, _Source="usertile33.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" [0156.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a40 [0156.527] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a78f66, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a78f66, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23b5d3c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0156.527] wcscmp (_String1="usertile34.bmp", _String2=".") returned 1 [0156.527] wcscmp (_String1="usertile34.bmp", _String2="..") returned 1 [0156.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9e88 [0156.527] wcscpy (in: _Dest=0x81d9e88, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.527] wcscat (in: _Dest=0x81d9e88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.527] wcscat (in: _Dest=0x81d9e88, _Source="usertile34.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" [0156.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a44 [0156.529] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a9f0ce, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a9f0ce, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23dbe9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0156.529] wcscmp (_String1="usertile35.bmp", _String2=".") returned 1 [0156.529] wcscmp (_String1="usertile35.bmp", _String2="..") returned 1 [0156.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9f38 [0156.529] wcscpy (in: _Dest=0x81d9f38, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.529] wcscat (in: _Dest=0x81d9f38, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.529] wcscat (in: _Dest=0x81d9f38, _Source="usertile35.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" [0156.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a48 [0156.569] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2401ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0156.593] wcscmp (_String1="usertile36.bmp", _String2=".") returned 1 [0156.593] wcscmp (_String1="usertile36.bmp", _String2="..") returned 1 [0156.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9fe8 [0156.593] wcscpy (in: _Dest=0x81d9fe8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.593] wcscat (in: _Dest=0x81d9fe8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.593] wcscat (in: _Dest=0x81d9fe8, _Source="usertile36.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" [0156.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a4c [0156.595] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf242815c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0156.595] wcscmp (_String1="usertile37.bmp", _String2=".") returned 1 [0156.595] wcscmp (_String1="usertile37.bmp", _String2="..") returned 1 [0156.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da098 [0156.595] wcscpy (in: _Dest=0x81da098, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.595] wcscat (in: _Dest=0x81da098, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.595] wcscat (in: _Dest=0x81da098, _Source="usertile37.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" [0156.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a50 [0156.596] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b3766e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b3766e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf244e2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0156.597] wcscmp (_String1="usertile38.bmp", _String2=".") returned 1 [0156.597] wcscmp (_String1="usertile38.bmp", _String2="..") returned 1 [0156.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da148 [0156.597] wcscpy (in: _Dest=0x81da148, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.597] wcscat (in: _Dest=0x81da148, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.597] wcscat (in: _Dest=0x81da148, _Source="usertile38.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" [0156.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a54 [0156.598] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b5d7d6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b5d7d6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf247441c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0156.598] wcscmp (_String1="usertile39.bmp", _String2=".") returned 1 [0156.598] wcscmp (_String1="usertile39.bmp", _String2="..") returned 1 [0156.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da1f8 [0156.598] wcscpy (in: _Dest=0x81da1f8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.598] wcscat (in: _Dest=0x81da1f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.598] wcscat (in: _Dest=0x81da1f8, _Source="usertile39.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" [0156.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a58 [0156.599] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b8393e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b8393e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0156.599] wcscmp (_String1="usertile40.bmp", _String2=".") returned 1 [0156.599] wcscmp (_String1="usertile40.bmp", _String2="..") returned 1 [0156.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da2a8 [0156.599] wcscpy (in: _Dest=0x81da2a8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.600] wcscat (in: _Dest=0x81da2a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.600] wcscat (in: _Dest=0x81da2a8, _Source="usertile40.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" [0156.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a5c [0156.601] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ba9aa6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52ba9aa6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0156.601] wcscmp (_String1="usertile41.bmp", _String2=".") returned 1 [0156.601] wcscmp (_String1="usertile41.bmp", _String2="..") returned 1 [0156.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da358 [0156.601] wcscpy (in: _Dest=0x81da358, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.601] wcscat (in: _Dest=0x81da358, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.601] wcscat (in: _Dest=0x81da358, _Source="usertile41.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" [0156.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a60 [0156.602] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bcfc0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bcfc0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf257edbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0156.602] wcscmp (_String1="usertile42.bmp", _String2=".") returned 1 [0156.602] wcscmp (_String1="usertile42.bmp", _String2="..") returned 1 [0156.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da408 [0156.602] wcscpy (in: _Dest=0x81da408, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.602] wcscat (in: _Dest=0x81da408, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.602] wcscat (in: _Dest=0x81da408, _Source="usertile42.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" [0156.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a64 [0156.603] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bf5d76, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bf5d76, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25a4f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0156.603] wcscmp (_String1="usertile43.bmp", _String2=".") returned 1 [0156.603] wcscmp (_String1="usertile43.bmp", _String2="..") returned 1 [0156.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da4b8 [0156.603] wcscpy (in: _Dest=0x81da4b8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.603] wcscat (in: _Dest=0x81da4b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.603] wcscat (in: _Dest=0x81da4b8, _Source="usertile43.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" [0156.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a68 [0156.605] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0156.605] wcscmp (_String1="usertile44.bmp", _String2=".") returned 1 [0156.605] wcscmp (_String1="usertile44.bmp", _String2="..") returned 1 [0156.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da568 [0156.605] wcscpy (in: _Dest=0x81da568, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.605] wcscat (in: _Dest=0x81da568, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.605] wcscat (in: _Dest=0x81da568, _Source="usertile44.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" [0156.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c [0156.606] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0156.606] FindClose (in: hFindFile=0x3e556c8 | out: hFindFile=0x3e556c8) returned 1 [0156.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f099f0) returned 1 [0156.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1168) returned 1 [0156.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35640) returned 1 Thread: id = 2418 os_tid = 0x2150 [0154.708] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\eebsym5.dat")) returned 0x2020 [0154.709] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x20) returned 1 [0163.274] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\eebsym5.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x25b0 [0163.275] GetFileSizeEx (in: hFile=0x25b0, lpFileSize=0x1162fc80 | out: lpFileSize=0x1162fc80*=0) returned 1 [0163.275] FlushFileBuffers (hFile=0x25b0) returned 1 [0164.744] CloseHandle (hObject=0x25b0) returned 1 [0164.744] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x2020) returned 1 [0164.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 Thread: id = 2419 os_tid = 0x2154 [0154.715] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp")) returned 0x20 [0154.715] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0154.715] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.715] GetLastError () returned 0x5 [0154.715] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0154.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 2420 os_tid = 0x2158 [0154.717] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp")) returned 0x20 [0154.717] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0154.717] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.717] GetLastError () returned 0x5 [0154.717] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0154.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5288) returned 1 Thread: id = 2421 os_tid = 0x215c [0154.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf")) returned 0x20 [0154.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF", dwFileAttributes=0x20) returned 0 [0154.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.719] GetLastError () returned 0x5 [0154.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF", dwFileAttributes=0x20) returned 0 [0154.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1920) returned 1 Thread: id = 2422 os_tid = 0x2160 [0154.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf")) returned 0x20 [0154.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF", dwFileAttributes=0x20) returned 0 [0154.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.720] GetLastError () returned 0x5 [0154.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF", dwFileAttributes=0x20) returned 0 [0154.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1628) returned 1 Thread: id = 2423 os_tid = 0x2164 [0154.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf")) returned 0x20 [0154.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF", dwFileAttributes=0x20) returned 0 [0154.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.723] GetLastError () returned 0x5 [0154.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF", dwFileAttributes=0x20) returned 0 [0154.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d14f8) returned 1 Thread: id = 2424 os_tid = 0x2168 [0154.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf")) returned 0x20 [0155.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF", dwFileAttributes=0x20) returned 0 [0155.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.356] GetLastError () returned 0x5 [0155.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF", dwFileAttributes=0x20) returned 0 [0155.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1d48) returned 1 Thread: id = 2425 os_tid = 0x216c [0154.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf")) returned 0x20 [0155.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF", dwFileAttributes=0x20) returned 0 [0155.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.357] GetLastError () returned 0x5 [0155.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF", dwFileAttributes=0x20) returned 0 [0155.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1de0) returned 1 Thread: id = 2426 os_tid = 0x2170 [0154.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf")) returned 0x20 [0155.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF", dwFileAttributes=0x20) returned 0 [0155.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.359] GetLastError () returned 0x5 [0155.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF", dwFileAttributes=0x20) returned 0 [0155.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1e78) returned 1 Thread: id = 2427 os_tid = 0x2174 [0154.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf")) returned 0x20 [0155.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF", dwFileAttributes=0x20) returned 0 [0155.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.361] GetLastError () returned 0x5 [0155.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF", dwFileAttributes=0x20) returned 0 [0155.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1f10) returned 1 Thread: id = 2428 os_tid = 0x2178 [0154.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf")) returned 0x20 [0155.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF", dwFileAttributes=0x20) returned 0 [0155.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.363] GetLastError () returned 0x5 [0155.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF", dwFileAttributes=0x20) returned 0 [0155.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1fa8) returned 1 Thread: id = 2429 os_tid = 0x217c [0154.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf")) returned 0x20 [0155.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF", dwFileAttributes=0x20) returned 0 [0155.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.366] GetLastError () returned 0x5 [0155.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF", dwFileAttributes=0x20) returned 0 [0155.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2040) returned 1 Thread: id = 2430 os_tid = 0x2180 [0154.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf")) returned 0x20 [0155.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF", dwFileAttributes=0x20) returned 0 [0155.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.367] GetLastError () returned 0x5 [0155.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF", dwFileAttributes=0x20) returned 0 [0155.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d20d8) returned 1 Thread: id = 2431 os_tid = 0x2184 [0154.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf")) returned 0x20 [0155.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF", dwFileAttributes=0x20) returned 0 [0155.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.369] GetLastError () returned 0x5 [0155.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF", dwFileAttributes=0x20) returned 0 [0155.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2170) returned 1 Thread: id = 2432 os_tid = 0x2188 [0154.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf")) returned 0x20 [0155.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF", dwFileAttributes=0x20) returned 0 [0155.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.371] GetLastError () returned 0x5 [0155.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF", dwFileAttributes=0x20) returned 0 [0155.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2208) returned 1 Thread: id = 2433 os_tid = 0x218c [0154.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf")) returned 0x20 [0155.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF", dwFileAttributes=0x20) returned 0 [0155.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.372] GetLastError () returned 0x5 [0155.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF", dwFileAttributes=0x20) returned 0 [0155.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d22a0) returned 1 Thread: id = 2434 os_tid = 0x2190 [0154.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf")) returned 0x20 [0155.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF", dwFileAttributes=0x20) returned 0 [0155.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.374] GetLastError () returned 0x5 [0155.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF", dwFileAttributes=0x20) returned 0 [0155.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2338) returned 1 Thread: id = 2435 os_tid = 0x2194 [0154.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf")) returned 0x20 [0155.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF", dwFileAttributes=0x20) returned 0 [0155.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.376] GetLastError () returned 0x5 [0155.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF", dwFileAttributes=0x20) returned 0 [0155.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cff0) returned 1 Thread: id = 2436 os_tid = 0x2198 [0154.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf")) returned 0x20 [0155.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF", dwFileAttributes=0x20) returned 0 [0155.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.378] GetLastError () returned 0x5 [0155.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF", dwFileAttributes=0x20) returned 0 [0155.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ca00) returned 1 Thread: id = 2437 os_tid = 0x219c [0154.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf")) returned 0x20 [0155.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF", dwFileAttributes=0x20) returned 0 [0155.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.380] GetLastError () returned 0x5 [0155.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF", dwFileAttributes=0x20) returned 0 [0155.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3daa0) returned 1 Thread: id = 2438 os_tid = 0x21a0 [0154.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf")) returned 0x20 [0155.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF", dwFileAttributes=0x20) returned 0 [0155.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.382] GetLastError () returned 0x5 [0155.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF", dwFileAttributes=0x20) returned 0 [0155.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bf50) returned 1 Thread: id = 2439 os_tid = 0x21a4 [0154.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf")) returned 0x20 [0155.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF", dwFileAttributes=0x20) returned 0 [0155.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.384] GetLastError () returned 0x5 [0155.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF", dwFileAttributes=0x20) returned 0 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1b0) returned 1 Thread: id = 2440 os_tid = 0x21a8 [0154.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf")) returned 0x20 [0154.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF", dwFileAttributes=0x20) returned 0 [0154.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.993] GetLastError () returned 0x5 [0154.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF", dwFileAttributes=0x20) returned 0 [0154.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c7a0) returned 1 Thread: id = 2441 os_tid = 0x21ac [0154.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf")) returned 0x20 [0154.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF", dwFileAttributes=0x20) returned 0 [0154.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.995] GetLastError () returned 0x5 [0154.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF", dwFileAttributes=0x20) returned 0 [0154.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 Thread: id = 2442 os_tid = 0x21b0 [0154.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf")) returned 0x20 [0154.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF", dwFileAttributes=0x20) returned 0 [0154.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.997] GetLastError () returned 0x5 [0154.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF", dwFileAttributes=0x20) returned 0 [0154.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d1b8) returned 1 Thread: id = 2443 os_tid = 0x21b4 [0154.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35af88 [0154.998] wcscpy (in: _Dest=0x35af88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0154.998] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0154.998] wcscat (in: _Dest=0x35af88, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*" [0154.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80484b0 [0154.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8872b4b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0161.316] wcscmp (_String1=".", _String2=".") returned 0 [0161.316] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8872b4b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.316] wcscmp (_String1="..", _String2=".") returned 1 [0161.316] wcscmp (_String1="..", _String2="..") returned 0 [0161.317] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59eb0000, ftCreationTime.dwHighDateTime=0x1ca046d, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59eb0000, ftLastWriteTime.dwHighDateTime=0x1ca046d, nFileSizeHigh=0x0, nFileSizeLow=0x3424, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1 [0161.317] wcscmp (_String1="CalendarToolIconImages.jpg", _String2=".") returned 1 [0161.317] wcscmp (_String1="CalendarToolIconImages.jpg", _String2="..") returned 1 [0161.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8648 [0161.317] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0161.317] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0161.317] wcscat (in: _Dest=0x2c8648, _Source="CalendarToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" [0163.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d58 [0163.049] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50619800, ftCreationTime.dwHighDateTime=0x1ca046d, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50619800, ftLastWriteTime.dwHighDateTime=0x1ca046d, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1 [0163.049] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2=".") returned 1 [0163.049] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2="..") returned 1 [0163.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a168 [0163.049] wcscpy (in: _Dest=0x3e3a168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0163.049] wcscat (in: _Dest=0x3e3a168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0163.049] wcscat (in: _Dest=0x3e3a168, _Source="CalendarToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" [0163.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d54 [0163.050] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarViewButtonImages.jpg", cAlternateFileName="CALEND~2.JPG")) returned 1 [0163.050] wcscmp (_String1="CalendarViewButtonImages.jpg", _String2=".") returned 1 [0163.050] wcscmp (_String1="CalendarViewButtonImages.jpg", _String2="..") returned 1 [0163.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8b88 [0163.050] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0163.051] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0163.051] wcscat (in: _Dest=0x2c8b88, _Source="CalendarViewButtonImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" [0163.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc0 [0163.052] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b49, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImage.jpg", cAlternateFileName="GLOBEB~1.JPG")) returned 1 [0163.052] wcscmp (_String1="GlobeButtonImage.jpg", _String2=".") returned 1 [0163.052] wcscmp (_String1="GlobeButtonImage.jpg", _String2="..") returned 1 [0163.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b218 [0163.052] wcscpy (in: _Dest=0x3e1b218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0163.052] wcscat (in: _Dest=0x3e1b218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0163.052] wcscat (in: _Dest=0x3e1b218, _Source="GlobeButtonImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" [0163.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb8 [0163.053] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77ef2ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="GLOBEB~1.BMP")) returned 1 [0163.053] wcscmp (_String1="GlobeButtonImageMask.bmp", _String2=".") returned 1 [0163.053] wcscmp (_String1="GlobeButtonImageMask.bmp", _String2="..") returned 1 [0163.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e64288 [0163.053] wcscpy (in: _Dest=0x3e64288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0163.053] wcscat (in: _Dest=0x3e64288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0163.053] wcscat (in: _Dest=0x3e64288, _Source="GlobeButtonImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" [0163.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0163.054] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77ef2ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="GLOBEB~1.BMP")) returned 0 [0163.054] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0163.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80484b0) returned 1 [0163.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 [0163.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81866f8) returned 1 Thread: id = 2444 os_tid = 0x21b8 [0155.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eaf778 [0155.002] wcscpy (in: _Dest=0x3eaf778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0155.002] wcscat (in: _Dest=0x3eaf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0155.002] wcscat (in: _Dest=0x3eaf778, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*" [0155.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047fe0 [0155.002] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54ac8 [0158.516] wcscmp (_String1=".", _String2=".") returned 0 [0158.516] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.375] wcscmp (_String1="..", _String2=".") returned 1 [0161.375] wcscmp (_String1="..", _String2="..") returned 0 [0161.375] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf874c700, ftCreationTime.dwHighDateTime=0x1c9602c, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf874c700, ftLastWriteTime.dwHighDateTime=0x1c9602c, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="ALERTI~1.JPG")) returned 1 [0161.375] wcscmp (_String1="AlertImage_Auto.jpg", _String2=".") returned 1 [0161.375] wcscmp (_String1="AlertImage_Auto.jpg", _String2="..") returned 1 [0161.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e656c8 [0161.376] wcscpy (in: _Dest=0x3e656c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0161.376] wcscat (in: _Dest=0x3e656c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0161.376] wcscat (in: _Dest=0x3e656c8, _Source="AlertImage_Auto.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" [0165.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e656c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0165.181] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c5bf00, ftCreationTime.dwHighDateTime=0x1c9602c, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8c5bf00, ftLastWriteTime.dwHighDateTime=0x1c9602c, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_AutoMask.bmp", cAlternateFileName="ALERTI~1.BMP")) returned 1 [0165.181] wcscmp (_String1="AlertImage_AutoMask.bmp", _String2=".") returned 1 [0165.181] wcscmp (_String1="AlertImage_AutoMask.bmp", _String2="..") returned 1 [0165.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c96e8 [0165.181] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.181] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.181] wcscat (in: _Dest=0x2c96e8, _Source="AlertImage_AutoMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" [0165.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a00 [0165.182] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3356, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHigh.jpg", cAlternateFileName="AL8858~1.JPG")) returned 1 [0165.182] wcscmp (_String1="AlertImage_ContactHigh.jpg", _String2=".") returned 1 [0165.182] wcscmp (_String1="AlertImage_ContactHigh.jpg", _String2="..") returned 1 [0165.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c97c8 [0165.182] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.182] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.182] wcscat (in: _Dest=0x2c97c8, _Source="AlertImage_ContactHigh.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" [0165.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29fc [0165.183] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHighMask.bmp", cAlternateFileName="ALERTI~4.BMP")) returned 1 [0165.183] wcscmp (_String1="AlertImage_ContactHighMask.bmp", _String2=".") returned 1 [0165.183] wcscmp (_String1="AlertImage_ContactHighMask.bmp", _String2="..") returned 1 [0165.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b0d0 [0165.183] wcscpy (in: _Dest=0x3e3b0d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.183] wcscat (in: _Dest=0x3e3b0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.183] wcscat (in: _Dest=0x3e3b0d0, _Source="AlertImage_ContactHighMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" [0165.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f8 [0165.184] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLow.jpg", cAlternateFileName="ALERTI~2.JPG")) returned 1 [0165.184] wcscmp (_String1="AlertImage_ContactLow.jpg", _String2=".") returned 1 [0165.184] wcscmp (_String1="AlertImage_ContactLow.jpg", _String2="..") returned 1 [0165.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c98a8 [0165.184] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.184] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.184] wcscat (in: _Dest=0x2c98a8, _Source="AlertImage_ContactLow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" [0165.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f4 [0165.185] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLowMask.bmp", cAlternateFileName="ALERTI~2.BMP")) returned 1 [0165.185] wcscmp (_String1="AlertImage_ContactLowMask.bmp", _String2=".") returned 1 [0165.185] wcscmp (_String1="AlertImage_ContactLowMask.bmp", _String2="..") returned 1 [0165.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b1b8 [0165.185] wcscpy (in: _Dest=0x3e3b1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.185] wcscat (in: _Dest=0x3e3b1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.185] wcscat (in: _Dest=0x3e3b1b8, _Source="AlertImage_ContactLowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" [0165.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f0 [0165.186] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565adc00, ftCreationTime.dwHighDateTime=0x1c96038, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x565adc00, ftLastWriteTime.dwHighDateTime=0x1c96038, nFileSizeHigh=0x0, nFileSizeLow=0x480d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHigh.jpg", cAlternateFileName="AL56B2~1.JPG")) returned 1 [0165.186] wcscmp (_String1="AlertImage_FileHigh.jpg", _String2=".") returned 1 [0165.186] wcscmp (_String1="AlertImage_FileHigh.jpg", _String2="..") returned 1 [0165.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9988 [0165.186] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.186] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.186] wcscat (in: _Dest=0x2c9988, _Source="AlertImage_FileHigh.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" [0165.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec [0165.187] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd08a6100, ftCreationTime.dwHighDateTime=0x1c96036, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd08a6100, ftLastWriteTime.dwHighDateTime=0x1c96036, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHighMask.bmp", cAlternateFileName="ALE626~1.BMP")) returned 1 [0165.188] wcscmp (_String1="AlertImage_FileHighMask.bmp", _String2=".") returned 1 [0165.188] wcscmp (_String1="AlertImage_FileHighMask.bmp", _String2="..") returned 1 [0165.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3b2a0 [0165.188] wcscpy (in: _Dest=0x3e3b2a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.188] wcscat (in: _Dest=0x3e3b2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.188] wcscat (in: _Dest=0x3e3b2a0, _Source="AlertImage_FileHighMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" [0165.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e8 [0165.189] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1f9000, ftCreationTime.dwHighDateTime=0x1c96038, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b1f9000, ftLastWriteTime.dwHighDateTime=0x1c96038, nFileSizeHigh=0x0, nFileSizeLow=0x46de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOff.jpg", cAlternateFileName="ALERTI~3.JPG")) returned 1 [0165.189] wcscmp (_String1="AlertImage_FileOff.jpg", _String2=".") returned 1 [0165.189] wcscmp (_String1="AlertImage_FileOff.jpg", _String2="..") returned 1 [0165.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3def1a0 [0165.189] wcscpy (in: _Dest=0x3def1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.189] wcscat (in: _Dest=0x3def1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.189] wcscat (in: _Dest=0x3def1a0, _Source="AlertImage_FileOff.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" [0165.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3def1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e4 [0165.190] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7b16f00, ftCreationTime.dwHighDateTime=0x1c96036, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7b16f00, ftLastWriteTime.dwHighDateTime=0x1c96036, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOffMask.bmp", cAlternateFileName="ALERTI~3.BMP")) returned 1 [0165.190] wcscmp (_String1="AlertImage_FileOffMask.bmp", _String2=".") returned 1 [0165.190] wcscmp (_String1="AlertImage_FileOffMask.bmp", _String2="..") returned 1 [0165.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9a68 [0165.190] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.190] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.190] wcscat (in: _Dest=0x2c9a68, _Source="AlertImage_FileOffMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" [0165.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e0 [0165.191] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ecd600, ftCreationTime.dwHighDateTime=0x1c95f8f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37ecd600, ftLastWriteTime.dwHighDateTime=0x1c95f8f, nFileSizeHigh=0x0, nFileSizeLow=0x13ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_High.jpg", cAlternateFileName="ALERTI~4.JPG")) returned 1 [0165.191] wcscmp (_String1="AlertImage_High.jpg", _String2=".") returned 1 [0165.191] wcscmp (_String1="AlertImage_High.jpg", _String2="..") returned 1 [0165.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3def278 [0165.191] wcscpy (in: _Dest=0x3def278, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.191] wcscat (in: _Dest=0x3def278, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.191] wcscat (in: _Dest=0x3def278, _Source="AlertImage_High.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" [0165.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3def278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc [0165.192] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784c5400, ftCreationTime.dwHighDateTime=0x1c95f8f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x784c5400, ftLastWriteTime.dwHighDateTime=0x1c95f8f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_HighMask.bmp", cAlternateFileName="ALBBD8~1.BMP")) returned 1 [0165.192] wcscmp (_String1="AlertImage_HighMask.bmp", _String2=".") returned 1 [0165.192] wcscmp (_String1="AlertImage_HighMask.bmp", _String2="..") returned 1 [0165.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81e9648 [0165.193] wcscpy (in: _Dest=0x81e9648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.193] wcscat (in: _Dest=0x81e9648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.193] wcscat (in: _Dest=0x81e9648, _Source="AlertImage_HighMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" [0165.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d8 [0165.194] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851f8500, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851f8500, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Medium.jpg", cAlternateFileName="ALF33C~1.JPG")) returned 1 [0165.194] wcscmp (_String1="AlertImage_Medium.jpg", _String2=".") returned 1 [0165.194] wcscmp (_String1="AlertImage_Medium.jpg", _String2="..") returned 1 [0165.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3def350 [0165.194] wcscpy (in: _Dest=0x3def350, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.194] wcscat (in: _Dest=0x3def350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.194] wcscat (in: _Dest=0x3def350, _Source="AlertImage_Medium.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" [0165.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3def350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d4 [0165.195] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68834d00, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68834d00, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_MediumMAsk.bmp", cAlternateFileName="AL441A~1.BMP")) returned 1 [0165.195] wcscmp (_String1="AlertImage_MediumMAsk.bmp", _String2=".") returned 1 [0165.195] wcscmp (_String1="AlertImage_MediumMAsk.bmp", _String2="..") returned 1 [0165.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81e9728 [0165.195] wcscpy (in: _Dest=0x81e9728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.195] wcscat (in: _Dest=0x81e9728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.195] wcscat (in: _Dest=0x81e9728, _Source="AlertImage_MediumMAsk.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" [0165.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d0 [0165.197] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cd1f00, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd3cd1f00, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Off.jpg", cAlternateFileName="AL0F2A~1.JPG")) returned 1 [0165.197] wcscmp (_String1="AlertImage_Off.jpg", _String2=".") returned 1 [0165.197] wcscmp (_String1="AlertImage_Off.jpg", _String2="..") returned 1 [0165.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1c0b8 [0165.197] wcscpy (in: _Dest=0x3e1c0b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.197] wcscat (in: _Dest=0x3e1c0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.197] wcscat (in: _Dest=0x3e1c0b8, _Source="AlertImage_Off.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" [0165.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c4 [0165.198] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbac46e00, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbac46e00, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_OffMask.bmp", cAlternateFileName="ALA9A1~1.BMP")) returned 1 [0165.198] wcscmp (_String1="AlertImage_OffMask.bmp", _String2=".") returned 1 [0165.198] wcscmp (_String1="AlertImage_OffMask.bmp", _String2="..") returned 1 [0165.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3defbc0 [0165.198] wcscpy (in: _Dest=0x3defbc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.198] wcscat (in: _Dest=0x3defbc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.198] wcscat (in: _Dest=0x3defbc0, _Source="AlertImage_OffMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" [0165.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3defbc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c0 [0165.199] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ec3100, ftCreationTime.dwHighDateTime=0x1c9bd19, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90ec3100, ftLastWriteTime.dwHighDateTime=0x1c9bd19, nFileSizeHigh=0x0, nFileSizeLow=0x2256, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImage.jpg", cAlternateFileName="COMMSI~1.JPG")) returned 1 [0165.199] wcscmp (_String1="CommsIncomingImage.jpg", _String2=".") returned 1 [0165.199] wcscmp (_String1="CommsIncomingImage.jpg", _String2="..") returned 1 [0165.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e3f580 [0165.199] wcscpy (in: _Dest=0x3e3f580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.199] wcscat (in: _Dest=0x3e3f580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.199] wcscat (in: _Dest=0x3e3f580, _Source="CommsIncomingImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" [0165.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3f580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0165.201] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb24d1d00, ftCreationTime.dwHighDateTime=0x1c9bd19, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb24d1d00, ftLastWriteTime.dwHighDateTime=0x1c9bd19, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMask.bmp", cAlternateFileName="COMMSI~1.BMP")) returned 1 [0165.201] wcscmp (_String1="CommsIncomingImageMask.bmp", _String2=".") returned 1 [0165.201] wcscmp (_String1="CommsIncomingImageMask.bmp", _String2="..") returned 1 [0165.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81e9808 [0165.201] wcscpy (in: _Dest=0x81e9808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.201] wcscat (in: _Dest=0x81e9808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.201] wcscat (in: _Dest=0x81e9808, _Source="CommsIncomingImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" [0165.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2950 [0165.202] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMaskSmall.bmp", cAlternateFileName="COMMSI~2.BMP")) returned 1 [0165.202] wcscmp (_String1="CommsIncomingImageMaskSmall.bmp", _String2=".") returned 1 [0165.202] wcscmp (_String1="CommsIncomingImageMaskSmall.bmp", _String2="..") returned 1 [0165.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8020e70 [0165.202] wcscpy (in: _Dest=0x8020e70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.202] wcscat (in: _Dest=0x8020e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.202] wcscat (in: _Dest=0x8020e70, _Source="CommsIncomingImageMaskSmall.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" [0165.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294c [0165.203] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76fc5e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1de3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageSmall.jpg", cAlternateFileName="COMMSI~2.JPG")) returned 1 [0165.203] wcscmp (_String1="CommsIncomingImageSmall.jpg", _String2=".") returned 1 [0165.203] wcscmp (_String1="CommsIncomingImageSmall.jpg", _String2="..") returned 1 [0165.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3b388 [0165.203] wcscpy (in: _Dest=0x3e3b388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.203] wcscat (in: _Dest=0x3e3b388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.203] wcscat (in: _Dest=0x3e3b388, _Source="CommsIncomingImageSmall.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" [0165.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2784 [0165.204] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17b6e00, ftCreationTime.dwHighDateTime=0x1c9bd19, ftLastAccessTime.dwLowDateTime=0x76fc5e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf17b6e00, ftLastWriteTime.dwHighDateTime=0x1c9bd19, nFileSizeHigh=0x0, nFileSizeLow=0x22c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImage.jpg", cAlternateFileName="COMMSO~1.JPG")) returned 1 [0165.204] wcscmp (_String1="CommsOutgoingImage.jpg", _String2=".") returned 1 [0165.205] wcscmp (_String1="CommsOutgoingImage.jpg", _String2="..") returned 1 [0165.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e3f070 [0165.205] wcscpy (in: _Dest=0x3e3f070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.205] wcscat (in: _Dest=0x3e3f070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.205] wcscat (in: _Dest=0x3e3f070, _Source="CommsOutgoingImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" [0165.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3f070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270c [0165.206] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212a7600, ftCreationTime.dwHighDateTime=0x1c9bd1a, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x212a7600, ftLastWriteTime.dwHighDateTime=0x1c9bd1a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMask.bmp", cAlternateFileName="COMMSO~1.BMP")) returned 1 [0165.206] wcscmp (_String1="CommsOutgoingImageMask.bmp", _String2=".") returned 1 [0165.206] wcscmp (_String1="CommsOutgoingImageMask.bmp", _String2="..") returned 1 [0165.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81e98e8 [0165.206] wcscpy (in: _Dest=0x81e98e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.206] wcscat (in: _Dest=0x81e98e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.206] wcscat (in: _Dest=0x81e98e8, _Source="CommsOutgoingImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" [0165.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e98e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2708 [0165.207] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMaskSmall.bmp", cAlternateFileName="COMMSO~2.BMP")) returned 1 [0165.207] wcscmp (_String1="CommsOutgoingImageMaskSmall.bmp", _String2=".") returned 1 [0165.207] wcscmp (_String1="CommsOutgoingImageMaskSmall.bmp", _String2="..") returned 1 [0165.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8020f60 [0165.207] wcscpy (in: _Dest=0x8020f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.207] wcscat (in: _Dest=0x8020f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.207] wcscat (in: _Dest=0x8020f60, _Source="CommsOutgoingImageMaskSmall.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" [0165.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2704 [0165.208] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageSmall.jpg", cAlternateFileName="COMMSO~2.JPG")) returned 1 [0165.208] wcscmp (_String1="CommsOutgoingImageSmall.jpg", _String2=".") returned 1 [0165.208] wcscmp (_String1="CommsOutgoingImageSmall.jpg", _String2="..") returned 1 [0165.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3b470 [0165.209] wcscpy (in: _Dest=0x3e3b470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.209] wcscat (in: _Dest=0x3e3b470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.209] wcscat (in: _Dest=0x3e3b470, _Source="CommsOutgoingImageSmall.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" [0165.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2558 [0165.210] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1 [0165.210] wcscmp (_String1="MessageBoxIconImages.jpg", _String2=".") returned 1 [0165.210] wcscmp (_String1="MessageBoxIconImages.jpg", _String2="..") returned 1 [0165.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81e99c8 [0165.210] wcscpy (in: _Dest=0x81e99c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.210] wcscat (in: _Dest=0x81e99c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.210] wcscat (in: _Dest=0x81e99c8, _Source="MessageBoxIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" [0165.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e99c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0165.211] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1 [0165.211] wcscmp (_String1="MessageBoxIconImagesMask.bmp", _String2=".") returned 1 [0165.211] wcscmp (_String1="MessageBoxIconImagesMask.bmp", _String2="..") returned 1 [0165.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3b558 [0165.211] wcscpy (in: _Dest=0x3e3b558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.211] wcscat (in: _Dest=0x3e3b558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.211] wcscat (in: _Dest=0x3e3b558, _Source="MessageBoxIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" [0165.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0165.212] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1483400, ftCreationTime.dwHighDateTime=0x1ca0395, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1483400, ftLastWriteTime.dwHighDateTime=0x1ca0395, nFileSizeHigh=0x0, nFileSizeLow=0x1fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIcon.jpg", cAlternateFileName="UNREAD~1.JPG")) returned 1 [0165.213] wcscmp (_String1="UnreadIcon.jpg", _String2=".") returned 1 [0165.213] wcscmp (_String1="UnreadIcon.jpg", _String2="..") returned 1 [0165.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e8cf0 [0165.213] wcscpy (in: _Dest=0x81e8cf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.213] wcscat (in: _Dest=0x81e8cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.213] wcscat (in: _Dest=0x81e8cf0, _Source="UnreadIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" [0165.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0165.214] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec4a100, ftCreationTime.dwHighDateTime=0x1ca0395, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ec4a100, ftLastWriteTime.dwHighDateTime=0x1ca0395, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImages.jpg", cAlternateFileName="UNREAD~2.JPG")) returned 1 [0165.214] wcscmp (_String1="UnreadIconImages.jpg", _String2=".") returned 1 [0165.214] wcscmp (_String1="UnreadIconImages.jpg", _String2="..") returned 1 [0165.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e3ef98 [0165.214] wcscpy (in: _Dest=0x3e3ef98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.214] wcscat (in: _Dest=0x3e3ef98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.214] wcscat (in: _Dest=0x3e3ef98, _Source="UnreadIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" [0165.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ef98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0165.215] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e410000, ftCreationTime.dwHighDateTime=0x1ca03bf, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e410000, ftLastWriteTime.dwHighDateTime=0x1ca03bf, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 1 [0165.215] wcscmp (_String1="UnreadIconImagesMask.bmp", _String2=".") returned 1 [0165.215] wcscmp (_String1="UnreadIconImagesMask.bmp", _String2="..") returned 1 [0165.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81e9aa8 [0165.215] wcscpy (in: _Dest=0x81e9aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0165.215] wcscat (in: _Dest=0x81e9aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0165.215] wcscat (in: _Dest=0x81e9aa8, _Source="UnreadIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" [0165.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230c [0165.216] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e410000, ftCreationTime.dwHighDateTime=0x1ca03bf, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e410000, ftLastWriteTime.dwHighDateTime=0x1ca03bf, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 0 [0165.217] FindClose (in: hFindFile=0x3e54ac8 | out: hFindFile=0x3e54ac8) returned 1 [0165.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047fe0) returned 1 [0165.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf778) returned 1 [0165.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 2445 os_tid = 0x21bc [0155.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3eaf358 [0155.002] wcscpy (in: _Dest=0x3eaf358, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0155.002] wcscat (in: _Dest=0x3eaf358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\" [0155.002] wcscat (in: _Dest=0x3eaf358, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*" [0155.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0155.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77012130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c89e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0157.148] wcscmp (_String1=".", _String2=".") returned 0 [0157.148] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77012130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c89e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.148] wcscmp (_String1="..", _String2=".") returned 1 [0157.148] wcscmp (_String1="..", _String2="..") returned 0 [0157.148] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77012130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1 [0157.148] wcscmp (_String1="computericon.jpg", _String2=".") returned 1 [0157.148] wcscmp (_String1="computericon.jpg", _String2="..") returned 1 [0157.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c0b8 [0157.148] wcscpy (in: _Dest=0x3e1c0b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0157.148] wcscat (in: _Dest=0x3e1c0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\" [0157.148] wcscat (in: _Dest=0x3e1c0b8, _Source="computericon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" [0160.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg")) returned 0x20 [0160.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg", dwFileAttributes=0x20) returned 0 [0160.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.184] GetLastError () returned 0x5 [0160.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg", dwFileAttributes=0x20) returned 0 [0160.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c0b8) returned 1 [0160.185] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 1 [0160.185] wcscmp (_String1="computericonMask.bmp", _String2=".") returned 1 [0160.185] wcscmp (_String1="computericonMask.bmp", _String2="..") returned 1 [0160.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e64438 [0160.185] wcscpy (in: _Dest=0x3e64438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0160.185] wcscat (in: _Dest=0x3e64438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\" [0160.185] wcscat (in: _Dest=0x3e64438, _Source="computericonMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" [0160.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp")) returned 0x20 [0160.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp", dwFileAttributes=0x20) returned 0 [0160.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.186] GetLastError () returned 0x5 [0160.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp", dwFileAttributes=0x20) returned 0 [0160.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64438) returned 1 [0160.186] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 0 [0160.186] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0160.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0160.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 [0160.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 Thread: id = 2446 os_tid = 0x21c0 [0155.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3eb0278 [0155.003] wcscpy (in: _Dest=0x3eb0278, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0155.003] wcscat (in: _Dest=0x3eb0278, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\" [0155.003] wcscat (in: _Dest=0x3eb0278, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*" [0155.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09c58 [0155.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7737e0d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876cdd70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0157.371] wcscmp (_String1=".", _String2=".") returned 0 [0157.371] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7737e0d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876cdd70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.371] wcscmp (_String1="..", _String2=".") returned 1 [0157.371] wcscmp (_String1="..", _String2="..") returned 0 [0157.371] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45357600, ftCreationTime.dwHighDateTime=0x1ca05ed, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45357600, ftLastWriteTime.dwHighDateTime=0x1ca05ed, nFileSizeHigh=0x0, nFileSizeLow=0x393c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1 [0157.371] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2=".") returned 1 [0157.371] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2="..") returned 1 [0157.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a080 [0157.371] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0157.371] wcscat (in: _Dest=0x3e3a080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\" [0157.372] wcscat (in: _Dest=0x3e3a080, _Source="DiscussionToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" [0161.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg")) returned 0x20 [0161.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0161.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.148] GetLastError () returned 0x5 [0161.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0161.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a080) returned 1 [0161.149] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee17e00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5ee17e00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1 [0161.149] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2=".") returned 1 [0161.149] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2="..") returned 1 [0161.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x80208d0 [0161.149] wcscpy (in: _Dest=0x80208d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0161.149] wcscat (in: _Dest=0x80208d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\" [0161.149] wcscat (in: _Dest=0x80208d0, _Source="DiscussionToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" [0161.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp")) returned 0x20 [0161.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0161.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.150] GetLastError () returned 0x5 [0161.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0161.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80208d0) returned 1 [0161.151] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee17e00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5ee17e00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 0 [0161.151] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0161.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09c58) returned 1 [0161.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0278) returned 1 [0161.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 2447 os_tid = 0x21c4 [0155.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d41030 [0155.004] wcscpy (in: _Dest=0x3d41030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" [0155.004] wcscat (in: _Dest=0x3d41030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\" [0155.004] wcscat (in: _Dest=0x3d41030, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*" [0155.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09ec0 [0155.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85365630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8538b790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0158.450] wcscmp (_String1=".", _String2=".") returned 0 [0158.450] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85365630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8538b790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.450] wcscmp (_String1="..", _String2=".") returned 1 [0158.450] wcscmp (_String1="..", _String2="..") returned 0 [0158.450] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1 [0158.450] wcscmp (_String1="WSSFilesToolHomePageBackground.jpg", _String2=".") returned 1 [0158.450] wcscmp (_String1="WSSFilesToolHomePageBackground.jpg", _String2="..") returned 1 [0158.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dada38 [0158.451] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" [0158.451] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\" [0158.451] wcscat (in: _Dest=0x3dada38, _Source="WSSFilesToolHomePageBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" [0159.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg")) returned 0x20 [0159.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg", dwFileAttributes=0x20) returned 0 [0159.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.864] GetLastError () returned 0x5 [0159.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg", dwFileAttributes=0x20) returned 0 [0159.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 [0159.864] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 0 [0159.864] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0159.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09ec0) returned 1 [0159.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41030) returned 1 [0159.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c2c8) returned 1 Thread: id = 2448 os_tid = 0x21c8 [0155.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d5c88 [0155.005] wcscpy (in: _Dest=0x81d5c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0155.005] wcscat (in: _Dest=0x81d5c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0155.005] wcscat (in: _Dest=0x81d5c88, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*" [0155.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a128 [0155.005] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55008 [0158.512] wcscmp (_String1=".", _String2=".") returned 0 [0158.512] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.513] wcscmp (_String1="..", _String2=".") returned 1 [0158.513] wcscmp (_String1="..", _String2="..") returned 0 [0158.513] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85685310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="ACTIVE~1.JPG")) returned 1 [0158.513] wcscmp (_String1="ActiveTabImage.jpg", _String2=".") returned 1 [0158.513] wcscmp (_String1="ActiveTabImage.jpg", _String2="..") returned 1 [0158.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a168 [0158.513] wcscpy (in: _Dest=0x3e3a168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0158.513] wcscat (in: _Dest=0x3e3a168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0158.513] wcscat (in: _Dest=0x3e3a168, _Source="ActiveTabImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" [0159.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg")) returned 0x20 [0162.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0162.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.160] GetLastError () returned 0x5 [0162.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0162.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a168) returned 1 [0162.160] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImageMask.bmp", cAlternateFileName="ACTIVE~1.BMP")) returned 1 [0162.160] wcscmp (_String1="ActiveTabImageMask.bmp", _String2=".") returned 1 [0162.160] wcscmp (_String1="ActiveTabImageMask.bmp", _String2="..") returned 1 [0162.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x80207e0 [0162.161] wcscpy (in: _Dest=0x80207e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0162.161] wcscat (in: _Dest=0x80207e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0162.161] wcscat (in: _Dest=0x80207e0, _Source="ActiveTabImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" [0168.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80207e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0168.164] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ac0e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BodyPaneBackground.jpg", cAlternateFileName="BODYPA~1.JPG")) returned 1 [0168.164] wcscmp (_String1="BodyPaneBackground.jpg", _String2=".") returned 1 [0168.165] wcscmp (_String1="BodyPaneBackground.jpg", _String2="..") returned 1 [0168.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x8021140 [0168.165] wcscpy (in: _Dest=0x8021140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0168.165] wcscat (in: _Dest=0x8021140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0168.165] wcscat (in: _Dest=0x8021140, _Source="BodyPaneBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" [0168.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0168.166] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x24ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImage.jpg", cAlternateFileName="INACTI~1.JPG")) returned 1 [0168.166] wcscmp (_String1="InactiveTabImage.jpg", _String2=".") returned 1 [0168.166] wcscmp (_String1="InactiveTabImage.jpg", _String2="..") returned 1 [0168.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b0d0 [0168.166] wcscpy (in: _Dest=0x3e3b0d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0168.166] wcscat (in: _Dest=0x3e3b0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0168.166] wcscat (in: _Dest=0x3e3b0d0, _Source="InactiveTabImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" [0168.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4 [0168.168] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImageMask.bmp", cAlternateFileName="INACTI~1.BMP")) returned 1 [0168.168] wcscmp (_String1="InactiveTabImageMask.bmp", _String2=".") returned 1 [0168.168] wcscmp (_String1="InactiveTabImageMask.bmp", _String2="..") returned 1 [0168.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8020ba0 [0168.168] wcscpy (in: _Dest=0x8020ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0168.168] wcscat (in: _Dest=0x8020ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0168.168] wcscat (in: _Dest=0x8020ba0, _Source="InactiveTabImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" [0168.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0168.170] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImages.jpg", cAlternateFileName="MARKUP~1.JPG")) returned 1 [0168.170] wcscmp (_String1="MarkupIconImages.jpg", _String2=".") returned 1 [0168.170] wcscmp (_String1="MarkupIconImages.jpg", _String2="..") returned 1 [0168.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b470 [0168.170] wcscpy (in: _Dest=0x3e3b470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0168.170] wcscat (in: _Dest=0x3e3b470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0168.170] wcscat (in: _Dest=0x3e3b470, _Source="MarkupIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" [0168.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0168.171] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 1 [0168.171] wcscmp (_String1="MarkupIconImagesMask.bmp", _String2=".") returned 1 [0168.171] wcscmp (_String1="MarkupIconImagesMask.bmp", _String2="..") returned 1 [0168.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021500 [0168.171] wcscpy (in: _Dest=0x8021500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0168.171] wcscat (in: _Dest=0x8021500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0168.171] wcscat (in: _Dest=0x8021500, _Source="MarkupIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" [0168.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0168.173] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 0 [0168.173] FindClose (in: hFindFile=0x3e55008 | out: hFindFile=0x3e55008) returned 1 [0168.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a128) returned 1 [0168.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5c88) returned 1 [0168.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 2449 os_tid = 0x21cc [0155.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3eaf568 [0155.005] wcscpy (in: _Dest=0x3eaf568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0155.005] wcscat (in: _Dest=0x3eaf568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0155.005] wcscat (in: _Dest=0x3eaf568, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*" [0155.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a390 [0155.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769d2770, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0162.465] wcscmp (_String1=".", _String2=".") returned 0 [0162.465] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769d2770, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.738] wcscmp (_String1="..", _String2=".") returned 1 [0164.738] wcscmp (_String1="..", _String2="..") returned 0 [0164.738] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0164.738] wcscmp (_String1="AddToViewArrow.jpg", _String2=".") returned 1 [0164.738] wcscmp (_String1="AddToViewArrow.jpg", _String2="..") returned 1 [0164.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3deeff0 [0164.738] wcscpy (in: _Dest=0x3deeff0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0164.738] wcscat (in: _Dest=0x3deeff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0164.738] wcscat (in: _Dest=0x3deeff0, _Source="AddToViewArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" [0165.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3deeff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28cc [0165.421] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0165.421] wcscmp (_String1="AddToViewArrowMask.bmp", _String2=".") returned 1 [0165.421] wcscmp (_String1="AddToViewArrowMask.bmp", _String2="..") returned 1 [0165.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8568 [0165.421] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.421] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.421] wcscat (in: _Dest=0x2c8568, _Source="AddToViewArrowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" [0165.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2678 [0165.422] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0165.422] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0165.422] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0165.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e8db8 [0165.422] wcscpy (in: _Dest=0x81e8db8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.422] wcscat (in: _Dest=0x81e8db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.422] wcscat (in: _Dest=0x81e8db8, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" [0165.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b5c [0165.423] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0165.423] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0165.423] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0165.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e8e80 [0165.423] wcscpy (in: _Dest=0x81e8e80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.423] wcscat (in: _Dest=0x81e8e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.423] wcscat (in: _Dest=0x81e8e80, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" [0165.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2680 [0165.424] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0165.425] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0165.425] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0165.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e8f48 [0165.425] wcscpy (in: _Dest=0x81e8f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.425] wcscat (in: _Dest=0x81e8f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.425] wcscat (in: _Dest=0x81e8f48, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" [0165.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2684 [0165.426] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0165.426] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0165.426] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0165.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c738 [0165.426] wcscpy (in: _Dest=0x3e1c738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.426] wcscat (in: _Dest=0x3e1c738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.426] wcscat (in: _Dest=0x3e1c738, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" [0165.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bec [0165.427] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0165.427] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0165.427] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0165.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e9010 [0165.427] wcscpy (in: _Dest=0x81e9010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.427] wcscat (in: _Dest=0x81e9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.427] wcscat (in: _Dest=0x81e9010, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" [0165.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2984 [0165.428] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0165.428] wcscmp (_String1="bg_FormsHomePage.gif", _String2=".") returned 1 [0165.428] wcscmp (_String1="bg_FormsHomePage.gif", _String2="..") returned 1 [0165.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e3e650 [0165.428] wcscpy (in: _Dest=0x3e3e650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.428] wcscat (in: _Dest=0x3e3e650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.428] wcscat (in: _Dest=0x3e3e650, _Source="bg_FormsHomePage.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" [0165.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3e650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298c [0165.429] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0165.430] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2=".") returned 1 [0165.430] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2="..") returned 1 [0165.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81e9b88 [0165.430] wcscpy (in: _Dest=0x81e9b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.430] wcscat (in: _Dest=0x81e9b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.430] wcscat (in: _Dest=0x81e9b88, _Source="bg_FormsHomePageBlank.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" [0165.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2554 [0165.431] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0165.431] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0165.431] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0165.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c598 [0165.431] wcscpy (in: _Dest=0x3e1c598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.431] wcscat (in: _Dest=0x3e1c598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.432] wcscat (in: _Dest=0x3e1c598, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" [0165.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c68 [0165.433] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0165.433] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0165.433] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0165.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e90d8 [0165.433] wcscpy (in: _Dest=0x81e90d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.433] wcscat (in: _Dest=0x81e90d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.433] wcscat (in: _Dest=0x81e90d8, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" [0165.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e90d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0165.434] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0165.434] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0165.434] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0165.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x2e6650 [0165.434] wcscpy (in: _Dest=0x2e6650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.434] wcscat (in: _Dest=0x2e6650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.434] wcscat (in: _Dest=0x2e6650, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" [0165.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2e6650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c4 [0165.435] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0165.436] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0165.436] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0165.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1c3f8 [0165.436] wcscpy (in: _Dest=0x3e1c3f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.436] wcscat (in: _Dest=0x3e1c3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.436] wcscat (in: _Dest=0x3e1c3f8, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" [0165.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0165.437] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0165.437] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0165.437] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0165.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1ab98 [0165.437] wcscpy (in: _Dest=0x3e1ab98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.437] wcscat (in: _Dest=0x3e1ab98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.437] wcscat (in: _Dest=0x3e1ab98, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" [0165.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ab98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c8 [0165.438] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0165.438] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0165.438] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0165.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1bf18 [0165.438] wcscpy (in: _Dest=0x3e1bf18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.438] wcscat (in: _Dest=0x3e1bf18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.438] wcscat (in: _Dest=0x3e1bf18, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" [0165.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1bf18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25cc [0165.439] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0165.439] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0165.439] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0165.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e58d0 [0165.439] wcscpy (in: _Dest=0x2e58d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.439] wcscat (in: _Dest=0x2e58d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.439] wcscat (in: _Dest=0x2e58d0, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" [0165.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2e58d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d0 [0165.441] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0165.441] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0165.441] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0165.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1c808 [0165.441] wcscpy (in: _Dest=0x3e1c808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.441] wcscat (in: _Dest=0x3e1c808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.441] wcscat (in: _Dest=0x3e1c808, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" [0165.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0165.442] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BU6EE2~1.GIF")) returned 1 [0165.442] wcscmp (_String1="button_left.gif", _String2=".") returned 1 [0165.442] wcscmp (_String1="button_left.gif", _String2="..") returned 1 [0165.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c8d8 [0165.442] wcscpy (in: _Dest=0x3e1c8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.442] wcscat (in: _Dest=0x3e1c8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.442] wcscat (in: _Dest=0x3e1c8d8, _Source="button_left.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" [0165.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2718 [0165.443] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_disable.gif", cAlternateFileName="BUC0CB~1.GIF")) returned 1 [0165.443] wcscmp (_String1="button_left_disable.gif", _String2=".") returned 1 [0165.443] wcscmp (_String1="button_left_disable.gif", _String2="..") returned 1 [0165.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81e9c68 [0165.443] wcscpy (in: _Dest=0x81e9c68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.443] wcscat (in: _Dest=0x81e9c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.443] wcscat (in: _Dest=0x81e9c68, _Source="button_left_disable.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" [0165.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2548 [0165.445] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0165.445] wcscmp (_String1="button_left_over.gif", _String2=".") returned 1 [0165.445] wcscmp (_String1="button_left_over.gif", _String2="..") returned 1 [0165.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x2e6800 [0165.445] wcscpy (in: _Dest=0x2e6800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.445] wcscat (in: _Dest=0x2e6800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.445] wcscat (in: _Dest=0x2e6800, _Source="button_left_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" [0165.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2e6800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d4 [0165.447] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUB371~1.GIF")) returned 1 [0165.447] wcscmp (_String1="button_mid.gif", _String2=".") returned 1 [0165.447] wcscmp (_String1="button_mid.gif", _String2="..") returned 1 [0165.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c9a8 [0165.447] wcscpy (in: _Dest=0x3e1c9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.447] wcscat (in: _Dest=0x3e1c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.447] wcscat (in: _Dest=0x3e1c9a8, _Source="button_mid.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" [0165.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0165.448] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_disable.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0165.448] wcscmp (_String1="button_mid_disable.gif", _String2=".") returned 1 [0165.448] wcscmp (_String1="button_mid_disable.gif", _String2="..") returned 1 [0165.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81e9d48 [0165.448] wcscpy (in: _Dest=0x81e9d48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.448] wcscat (in: _Dest=0x81e9d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.448] wcscat (in: _Dest=0x81e9d48, _Source="button_mid_disable.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" [0165.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c8 [0165.449] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0165.449] wcscmp (_String1="button_mid_over.gif", _String2=".") returned 1 [0165.449] wcscmp (_String1="button_mid_over.gif", _String2="..") returned 1 [0165.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81eb648 [0165.449] wcscpy (in: _Dest=0x81eb648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.449] wcscat (in: _Dest=0x81eb648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.449] wcscat (in: _Dest=0x81eb648, _Source="button_mid_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" [0165.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2990 [0165.450] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0165.450] wcscmp (_String1="button_right.gif", _String2=".") returned 1 [0165.450] wcscmp (_String1="button_right.gif", _String2="..") returned 1 [0165.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1ca78 [0165.450] wcscpy (in: _Dest=0x3e1ca78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.450] wcscat (in: _Dest=0x3e1ca78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.450] wcscat (in: _Dest=0x3e1ca78, _Source="button_right.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" [0165.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ca78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2994 [0165.451] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_disable.gif", cAlternateFileName="BUC143~1.GIF")) returned 1 [0165.451] wcscmp (_String1="button_right_disable.gif", _String2=".") returned 1 [0165.452] wcscmp (_String1="button_right_disable.gif", _String2="..") returned 1 [0165.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81e9e28 [0165.452] wcscpy (in: _Dest=0x81e9e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.452] wcscat (in: _Dest=0x81e9e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.452] wcscat (in: _Dest=0x81e9e28, _Source="button_right_disable.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" [0165.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2890 [0165.453] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0165.453] wcscmp (_String1="button_right_over.gif", _String2=".") returned 1 [0165.453] wcscmp (_String1="button_right_over.gif", _String2="..") returned 1 [0165.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81eb720 [0165.453] wcscpy (in: _Dest=0x81eb720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.453] wcscat (in: _Dest=0x81eb720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.453] wcscat (in: _Dest=0x81eb720, _Source="button_right_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" [0165.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2998 [0165.454] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FieldTypePreview", cAlternateFileName="FIELDT~1")) returned 1 [0165.454] wcscmp (_String1="FieldTypePreview", _String2=".") returned 1 [0165.454] wcscmp (_String1="FieldTypePreview", _String2="..") returned 1 [0165.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3034e90 [0165.454] wcscpy (in: _Dest=0x3034e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.454] wcscat (in: _Dest=0x3034e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.454] wcscat (in: _Dest=0x3034e90, _Source="FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0165.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3034e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0165.455] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0165.456] wcscmp (_String1="FORM.ICO", _String2=".") returned 1 [0165.456] wcscmp (_String1="FORM.ICO", _String2="..") returned 1 [0165.456] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0165.456] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0165.456] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0165.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81eb7f8 [0165.456] wcscpy (in: _Dest=0x81eb7f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0165.456] wcscat (in: _Dest=0x81eb7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0165.456] wcscat (in: _Dest=0x81eb7f8, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" [0165.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0166.161] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0166.162] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0166.162] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0166.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8488 [0166.162] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0166.162] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0166.162] wcscat (in: _Dest=0x2c8488, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" [0167.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0167.303] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x805, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="FORMSD~1.HTM")) returned 1 [0167.319] wcscmp (_String1="FormsDoNotTrust.html", _String2=".") returned 1 [0167.319] wcscmp (_String1="FormsDoNotTrust.html", _String2="..") returned 1 [0167.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f1f90 [0167.319] wcscpy (in: _Dest=0x81f1f90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.319] wcscat (in: _Dest=0x81f1f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.319] wcscat (in: _Dest=0x81f1f90, _Source="FormsDoNotTrust.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" [0167.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bdc [0167.321] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc96, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0167.321] wcscmp (_String1="FormsHomePage.html", _String2=".") returned 1 [0167.321] wcscmp (_String1="FormsHomePage.html", _String2="..") returned 1 [0167.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f2068 [0167.321] wcscpy (in: _Dest=0x81f2068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.321] wcscat (in: _Dest=0x81f2068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.321] wcscat (in: _Dest=0x81f2068, _Source="FormsHomePage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" [0167.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0167.322] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0167.322] wcscmp (_String1="FormsHomePageScript.js", _String2=".") returned 1 [0167.322] wcscmp (_String1="FormsHomePageScript.js", _String2="..") returned 1 [0167.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81eafa8 [0167.323] wcscpy (in: _Dest=0x81eafa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.323] wcscat (in: _Dest=0x81eafa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.323] wcscat (in: _Dest=0x81eafa8, _Source="FormsHomePageScript.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" [0167.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eafa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0167.324] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0167.324] wcscmp (_String1="FormsHomePageStyle.css", _String2=".") returned 1 [0167.324] wcscmp (_String1="FormsHomePageStyle.css", _String2="..") returned 1 [0167.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81eb088 [0167.324] wcscpy (in: _Dest=0x81eb088, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.324] wcscat (in: _Dest=0x81eb088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.324] wcscat (in: _Dest=0x81eb088, _Source="FormsHomePageStyle.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" [0167.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2038 [0167.326] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0167.326] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0167.326] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0167.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81eb168 [0167.326] wcscpy (in: _Dest=0x81eb168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.326] wcscat (in: _Dest=0x81eb168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.326] wcscat (in: _Dest=0x81eb168, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" [0167.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0167.327] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0167.327] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0167.327] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0167.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81eb248 [0167.327] wcscpy (in: _Dest=0x81eb248, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.327] wcscat (in: _Dest=0x81eb248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.328] wcscat (in: _Dest=0x81eb248, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" [0167.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0167.329] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78d87170, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="FORMST~1")) returned 1 [0167.329] wcscmp (_String1="FormsTemplates", _String2=".") returned 1 [0167.329] wcscmp (_String1="FormsTemplates", _String2="..") returned 1 [0167.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81efcc8 [0167.329] wcscpy (in: _Dest=0x81efcc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.329] wcscat (in: _Dest=0x81efcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.329] wcscat (in: _Dest=0x81efcc8, _Source="FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0167.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81efcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0167.330] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0167.330] wcscmp (_String1="FormsVersion1Warning.htm", _String2=".") returned 1 [0167.330] wcscmp (_String1="FormsVersion1Warning.htm", _String2="..") returned 1 [0167.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81eb328 [0167.330] wcscpy (in: _Dest=0x81eb328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.330] wcscat (in: _Dest=0x81eb328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.330] wcscat (in: _Dest=0x81eb328, _Source="FormsVersion1Warning.htm" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" [0167.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2028 [0167.331] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0167.331] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0167.331] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0167.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3a080 [0167.331] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.331] wcscat (in: _Dest=0x3e3a080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.331] wcscat (in: _Dest=0x3e3a080, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" [0167.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2024 [0167.332] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0167.332] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0167.332] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0167.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8020c90 [0167.332] wcscpy (in: _Dest=0x8020c90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.332] wcscat (in: _Dest=0x8020c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.333] wcscat (in: _Dest=0x8020c90, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" [0167.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020 [0167.333] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0167.334] wcscmp (_String1="FormsViewFrame.html", _String2=".") returned 1 [0167.334] wcscmp (_String1="FormsViewFrame.html", _String2="..") returned 1 [0167.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2140 [0167.334] wcscpy (in: _Dest=0x81f2140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.334] wcscat (in: _Dest=0x81f2140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.334] wcscat (in: _Dest=0x81f2140, _Source="FormsViewFrame.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" [0167.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0167.335] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0167.335] wcscmp (_String1="FormToolImages.jpg", _String2=".") returned 1 [0167.335] wcscmp (_String1="FormToolImages.jpg", _String2="..") returned 1 [0167.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f2218 [0167.335] wcscpy (in: _Dest=0x81f2218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.335] wcscat (in: _Dest=0x81f2218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.335] wcscat (in: _Dest=0x81f2218, _Source="FormToolImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" [0167.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0167.336] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78d3aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x167d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0167.336] wcscmp (_String1="GrooveFormsMetaData.xml", _String2=".") returned 1 [0167.336] wcscmp (_String1="GrooveFormsMetaData.xml", _String2="..") returned 1 [0167.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81eb408 [0167.336] wcscpy (in: _Dest=0x81eb408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.336] wcscat (in: _Dest=0x81eb408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.336] wcscat (in: _Dest=0x81eb408, _Source="GrooveFormsMetaData.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" [0167.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x201c [0167.337] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1 [0167.337] wcscmp (_String1="MENUS.JS", _String2=".") returned 1 [0167.337] wcscmp (_String1="MENUS.JS", _String2="..") returned 1 [0167.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81dfd08 [0167.338] wcscpy (in: _Dest=0x81dfd08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.338] wcscat (in: _Dest=0x81dfd08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.338] wcscat (in: _Dest=0x81dfd08, _Source="MENUS.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" [0167.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0167.339] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="MENU_A~1.GIF")) returned 1 [0167.339] wcscmp (_String1="menu_arrow.gif", _String2=".") returned 1 [0167.339] wcscmp (_String1="menu_arrow.gif", _String2="..") returned 1 [0167.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81efbf8 [0167.339] wcscpy (in: _Dest=0x81efbf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.339] wcscat (in: _Dest=0x81efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.339] wcscat (in: _Dest=0x81efbf8, _Source="menu_arrow.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" [0167.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0167.340] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1 [0167.340] wcscmp (_String1="SEARCH.GIF", _String2=".") returned 1 [0167.340] wcscmp (_String1="SEARCH.GIF", _String2="..") returned 1 [0167.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d5ee0 [0167.340] wcscpy (in: _Dest=0x81d5ee0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.340] wcscat (in: _Dest=0x81d5ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.340] wcscat (in: _Dest=0x81d5ee0, _Source="SEARCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" [0167.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2014 [0167.341] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0167.341] wcscmp (_String1="SPACER.GIF", _String2=".") returned 1 [0167.342] wcscmp (_String1="SPACER.GIF", _String2="..") returned 1 [0167.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d5a30 [0167.342] wcscpy (in: _Dest=0x81d5a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.342] wcscat (in: _Dest=0x81d5a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.342] wcscat (in: _Dest=0x81d5a30, _Source="SPACER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" [0167.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bbc [0167.343] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0167.343] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0167.343] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0167.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81dfb88 [0167.343] wcscpy (in: _Dest=0x81dfb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.343] wcscat (in: _Dest=0x81dfb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.343] wcscat (in: _Dest=0x81dfb88, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" [0167.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2010 [0167.344] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0167.344] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0167.344] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0167.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f22f0 [0167.345] wcscpy (in: _Dest=0x81f22f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.345] wcscat (in: _Dest=0x81f22f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.345] wcscat (in: _Dest=0x81f22f0, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" [0167.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f22f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0167.346] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0167.346] wcscmp (_String1="validation.js", _String2=".") returned 1 [0167.346] wcscmp (_String1="validation.js", _String2="..") returned 1 [0167.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d73f8 [0167.346] wcscpy (in: _Dest=0x81d73f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.346] wcscat (in: _Dest=0x81d73f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.346] wcscat (in: _Dest=0x81d73f8, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" [0167.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d73f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0167.347] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1 [0167.347] wcscmp (_String1="VIEW.CSS", _String2=".") returned 1 [0167.347] wcscmp (_String1="VIEW.CSS", _String2="..") returned 1 [0167.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81df648 [0167.347] wcscpy (in: _Dest=0x81df648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.347] wcscat (in: _Dest=0x81df648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.347] wcscat (in: _Dest=0x81df648, _Source="VIEW.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" [0167.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0167.348] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0167.348] wcscmp (_String1="VIEW.ICO", _String2=".") returned 1 [0167.348] wcscmp (_String1="VIEW.ICO", _String2="..") returned 1 [0167.348] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0167.349] wcscmp (_String1="VIEW.JS", _String2=".") returned 1 [0167.349] wcscmp (_String1="VIEW.JS", _String2="..") returned 1 [0167.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81dfac8 [0167.349] wcscpy (in: _Dest=0x81dfac8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.349] wcscat (in: _Dest=0x81dfac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.349] wcscat (in: _Dest=0x81dfac8, _Source="VIEW.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" [0167.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc [0167.350] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1 [0167.350] wcscmp (_String1="VIEWBY.GIF", _String2=".") returned 1 [0167.350] wcscmp (_String1="VIEWBY.GIF", _String2="..") returned 1 [0167.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d65e8 [0167.350] wcscpy (in: _Dest=0x81d65e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.350] wcscat (in: _Dest=0x81d65e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.350] wcscat (in: _Dest=0x81d65e8, _Source="VIEWBY.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" [0167.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d65e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0167.351] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="VIEWDB~1.JS")) returned 1 [0167.351] wcscmp (_String1="viewDblClick.js", _String2=".") returned 1 [0167.351] wcscmp (_String1="viewDblClick.js", _String2="..") returned 1 [0167.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81efb28 [0167.351] wcscpy (in: _Dest=0x81efb28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.351] wcscat (in: _Dest=0x81efb28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.351] wcscat (in: _Dest=0x81efb28, _Source="viewDblClick.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" [0167.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efb28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0167.352] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0167.353] wcscmp (_String1="ViewHeaderPreview.jpg", _String2=".") returned 1 [0167.353] wcscmp (_String1="ViewHeaderPreview.jpg", _String2="..") returned 1 [0167.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f23c8 [0167.353] wcscpy (in: _Dest=0x81f23c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.353] wcscat (in: _Dest=0x81f23c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.353] wcscat (in: _Dest=0x81f23c8, _Source="ViewHeaderPreview.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" [0167.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f23c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1414 [0167.354] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 1 [0167.354] wcscmp (_String1="viewSelectionChanged.js", _String2=".") returned 1 [0167.354] wcscmp (_String1="viewSelectionChanged.js", _String2="..") returned 1 [0167.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81eb4e8 [0167.354] wcscpy (in: _Dest=0x81eb4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.354] wcscat (in: _Dest=0x81eb4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.354] wcscat (in: _Dest=0x81eb4e8, _Source="viewSelectionChanged.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" [0167.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0168.239] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 0 [0168.929] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0172.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a390) returned 1 [0172.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf568) returned 1 [0172.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 2450 os_tid = 0x21d0 [0155.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d410e8 [0155.006] wcscpy (in: _Dest=0x3d410e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0155.006] wcscat (in: _Dest=0x3d410e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0155.006] wcscat (in: _Dest=0x3d410e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*" [0155.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a5f8 [0155.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38198 [0162.466] wcscmp (_String1=".", _String2=".") returned 0 [0162.466] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.739] wcscmp (_String1="..", _String2=".") returned 1 [0164.739] wcscmp (_String1="..", _String2="..") returned 0 [0164.739] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0164.739] wcscmp (_String1="ADD.GIF", _String2=".") returned 1 [0164.739] wcscmp (_String1="ADD.GIF", _String2="..") returned 1 [0164.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81df7c8 [0164.739] wcscpy (in: _Dest=0x81df7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0164.739] wcscat (in: _Dest=0x81df7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0164.739] wcscat (in: _Dest=0x81df7c8, _Source="ADD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" [0165.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24cc [0165.969] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0165.969] wcscmp (_String1="AddToViewArrow.jpg", _String2=".") returned 1 [0165.969] wcscmp (_String1="AddToViewArrow.jpg", _String2="..") returned 1 [0165.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ebde0 [0165.969] wcscpy (in: _Dest=0x81ebde0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.969] wcscat (in: _Dest=0x81ebde0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.969] wcscat (in: _Dest=0x81ebde0, _Source="AddToViewArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" [0165.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2794 [0165.970] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0165.970] wcscmp (_String1="AddToViewArrowMask.bmp", _String2=".") returned 1 [0165.970] wcscmp (_String1="AddToViewArrowMask.bmp", _String2="..") returned 1 [0165.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81ea448 [0165.970] wcscpy (in: _Dest=0x81ea448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.970] wcscat (in: _Dest=0x81ea448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.970] wcscat (in: _Dest=0x81ea448, _Source="AddToViewArrowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" [0165.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2790 [0165.971] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0165.971] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0165.971] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0165.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1bb08 [0165.971] wcscpy (in: _Dest=0x3e1bb08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.971] wcscat (in: _Dest=0x3e1bb08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.971] wcscat (in: _Dest=0x3e1bb08, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" [0165.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1bb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278c [0165.973] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0165.973] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0165.973] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0165.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6070 [0165.973] wcscpy (in: _Dest=0x81d6070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.973] wcscat (in: _Dest=0x81d6070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.973] wcscat (in: _Dest=0x81d6070, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" [0165.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98 [0165.974] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0165.975] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0165.975] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0165.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3035780 [0165.975] wcscpy (in: _Dest=0x3035780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.975] wcscat (in: _Dest=0x3035780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.975] wcscat (in: _Dest=0x3035780, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" [0165.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3035780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x277c [0165.976] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0165.976] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0165.976] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0165.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036ca0 [0165.976] wcscpy (in: _Dest=0x3036ca0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.976] wcscat (in: _Dest=0x3036ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.976] wcscat (in: _Dest=0x3036ca0, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" [0165.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3036ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2778 [0165.977] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0165.977] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0165.978] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0165.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036890 [0165.978] wcscpy (in: _Dest=0x3036890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.978] wcscat (in: _Dest=0x3036890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.978] wcscat (in: _Dest=0x3036890, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" [0165.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3036890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2774 [0165.979] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0165.979] wcscmp (_String1="bg_FormsHomePage.gif", _String2=".") returned 1 [0165.979] wcscmp (_String1="bg_FormsHomePage.gif", _String2="..") returned 1 [0165.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81ebeb8 [0165.979] wcscpy (in: _Dest=0x81ebeb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.979] wcscat (in: _Dest=0x81ebeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.979] wcscat (in: _Dest=0x81ebeb8, _Source="bg_FormsHomePage.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" [0165.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2770 [0165.980] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1 [0165.980] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2=".") returned 1 [0165.980] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2="..") returned 1 [0165.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3b9e0 [0165.980] wcscpy (in: _Dest=0x3e3b9e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.980] wcscat (in: _Dest=0x3e3b9e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.980] wcscat (in: _Dest=0x3e3b9e0, _Source="bg_FormsHomePageBlank.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" [0165.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x276c [0165.982] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0165.982] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2=".") returned 1 [0165.982] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2="..") returned 1 [0165.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x81ed648 [0165.982] wcscpy (in: _Dest=0x81ed648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.982] wcscat (in: _Dest=0x81ed648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.982] wcscat (in: _Dest=0x81ed648, _Source="bg_FormsHomePageSlice.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" [0165.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2768 [0165.983] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0165.983] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0165.983] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0165.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x30352a0 [0165.983] wcscpy (in: _Dest=0x30352a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.983] wcscat (in: _Dest=0x30352a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.983] wcscat (in: _Dest=0x30352a0, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" [0165.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x30352a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2764 [0165.984] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0165.984] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0165.984] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0165.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036620 [0165.984] wcscpy (in: _Dest=0x3036620, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.984] wcscat (in: _Dest=0x3036620, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.984] wcscat (in: _Dest=0x3036620, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" [0165.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3036620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2760 [0165.985] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0165.986] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0165.986] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0165.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ebf90 [0165.986] wcscpy (in: _Dest=0x81ebf90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.986] wcscat (in: _Dest=0x81ebf90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.986] wcscat (in: _Dest=0x81ebf90, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" [0165.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x275c [0165.987] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0165.987] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0165.987] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0165.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81ec068 [0165.987] wcscpy (in: _Dest=0x81ec068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.987] wcscat (in: _Dest=0x81ec068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.987] wcscat (in: _Dest=0x81ec068, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" [0165.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2758 [0165.988] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0165.988] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0165.988] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0165.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x338dd8 [0165.988] wcscpy (in: _Dest=0x338dd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.988] wcscat (in: _Dest=0x338dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.988] wcscat (in: _Dest=0x338dd8, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" [0165.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x338dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2754 [0165.989] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0165.989] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0165.989] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0165.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x338418 [0165.990] wcscpy (in: _Dest=0x338418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.990] wcscat (in: _Dest=0x338418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.990] wcscat (in: _Dest=0x338418, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" [0165.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x338418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2750 [0165.991] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0165.991] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0165.991] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0165.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81ec140 [0165.991] wcscpy (in: _Dest=0x81ec140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.991] wcscat (in: _Dest=0x81ec140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.991] wcscat (in: _Dest=0x81ec140, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" [0165.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274c [0165.992] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0165.992] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0165.992] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0165.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81ec218 [0165.993] wcscpy (in: _Dest=0x81ec218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.993] wcscat (in: _Dest=0x81ec218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.993] wcscat (in: _Dest=0x81ec218, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" [0165.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2748 [0165.994] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0165.994] wcscmp (_String1="button_left.gif", _String2=".") returned 1 [0165.994] wcscmp (_String1="button_left.gif", _String2="..") returned 1 [0165.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x338278 [0165.994] wcscpy (in: _Dest=0x338278, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.994] wcscat (in: _Dest=0x338278, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.994] wcscat (in: _Dest=0x338278, _Source="button_left.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" [0165.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x338278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2744 [0165.995] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0165.995] wcscmp (_String1="button_left_over.gif", _String2=".") returned 1 [0165.995] wcscmp (_String1="button_left_over.gif", _String2="..") returned 1 [0165.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81ec2f0 [0165.995] wcscpy (in: _Dest=0x81ec2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.995] wcscat (in: _Dest=0x81ec2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.995] wcscat (in: _Dest=0x81ec2f0, _Source="button_left_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" [0165.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2740 [0165.996] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0165.997] wcscmp (_String1="button_mid.gif", _String2=".") returned 1 [0165.997] wcscmp (_String1="button_mid.gif", _String2="..") returned 1 [0165.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81ef648 [0165.997] wcscpy (in: _Dest=0x81ef648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.997] wcscat (in: _Dest=0x81ef648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.997] wcscat (in: _Dest=0x81ef648, _Source="button_mid.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" [0165.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x273c [0165.998] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0165.998] wcscmp (_String1="button_mid_over.gif", _String2=".") returned 1 [0165.998] wcscmp (_String1="button_mid_over.gif", _String2="..") returned 1 [0165.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81ec3c8 [0165.998] wcscpy (in: _Dest=0x81ec3c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.998] wcscat (in: _Dest=0x81ec3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.998] wcscat (in: _Dest=0x81ec3c8, _Source="button_mid_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" [0165.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2738 [0165.999] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1 [0165.999] wcscmp (_String1="button_right.gif", _String2=".") returned 1 [0165.999] wcscmp (_String1="button_right.gif", _String2="..") returned 1 [0165.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x81ef718 [0165.999] wcscpy (in: _Dest=0x81ef718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0165.999] wcscat (in: _Dest=0x81ef718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0165.999] wcscat (in: _Dest=0x81ef718, _Source="button_right.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" [0165.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2734 [0166.001] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0166.001] wcscmp (_String1="button_right_over.gif", _String2=".") returned 1 [0166.001] wcscmp (_String1="button_right_over.gif", _String2="..") returned 1 [0166.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81ea528 [0166.001] wcscpy (in: _Dest=0x81ea528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0166.001] wcscat (in: _Dest=0x81ea528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0166.001] wcscat (in: _Dest=0x81ea528, _Source="button_right_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" [0166.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2730 [0166.002] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0166.002] wcscmp (_String1="CALENDAR.GIF", _String2=".") returned 1 [0166.002] wcscmp (_String1="CALENDAR.GIF", _String2="..") returned 1 [0166.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d62c8 [0166.002] wcscpy (in: _Dest=0x81d62c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0166.002] wcscat (in: _Dest=0x81d62c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0166.002] wcscat (in: _Dest=0x81d62c8, _Source="CALENDAR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" [0166.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d62c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x272c [0166.003] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0166.003] wcscmp (_String1="DELETE.GIF", _String2=".") returned 1 [0166.003] wcscmp (_String1="DELETE.GIF", _String2="..") returned 1 [0166.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d5e18 [0166.003] wcscpy (in: _Dest=0x81d5e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0166.003] wcscat (in: _Dest=0x81d5e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0166.003] wcscat (in: _Dest=0x81d5e18, _Source="DELETE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" [0166.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x254c [0166.004] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0166.004] wcscmp (_String1="ERROR.GIF", _String2=".") returned 1 [0166.004] wcscmp (_String1="ERROR.GIF", _String2="..") returned 1 [0166.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d5fa8 [0166.005] wcscpy (in: _Dest=0x81d5fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0166.005] wcscat (in: _Dest=0x81d5fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0166.005] wcscat (in: _Dest=0x81d5fa8, _Source="ERROR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" [0166.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0166.005] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0166.006] wcscmp (_String1="FORM.ICO", _String2=".") returned 1 [0166.006] wcscmp (_String1="FORM.ICO", _String2="..") returned 1 [0166.006] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1388d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0166.006] wcscmp (_String1="FORM.JS", _String2=".") returned 1 [0166.006] wcscmp (_String1="FORM.JS", _String2="..") returned 1 [0166.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333528 [0166.006] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0166.006] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0166.006] wcscat (in: _Dest=0x333528, _Source="FORM.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" [0166.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0166.007] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0166.007] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0166.007] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0166.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81ec4a0 [0166.007] wcscpy (in: _Dest=0x81ec4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0166.007] wcscat (in: _Dest=0x81ec4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0166.007] wcscat (in: _Dest=0x81ec4a0, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" [0166.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x253c [0166.008] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0167.038] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0167.038] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0167.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c97c8 [0167.038] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.038] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.039] wcscat (in: _Dest=0x2c97c8, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" [0167.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0167.149] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0167.149] wcscmp (_String1="FormsColorChart.html", _String2=".") returned 1 [0167.149] wcscmp (_String1="FormsColorChart.html", _String2="..") returned 1 [0167.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f1720 [0167.149] wcscpy (in: _Dest=0x81f1720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.149] wcscat (in: _Dest=0x81f1720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.149] wcscat (in: _Dest=0x81f1720, _Source="FormsColorChart.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" [0167.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0167.150] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0167.150] wcscmp (_String1="FormsFormTemplate.html", _String2=".") returned 1 [0167.150] wcscmp (_String1="FormsFormTemplate.html", _String2="..") returned 1 [0167.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8e28 [0167.150] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.150] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.150] wcscat (in: _Dest=0x2c8e28, _Source="FormsFormTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" [0167.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0167.151] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0167.151] wcscmp (_String1="FormsHomePage.html", _String2=".") returned 1 [0167.151] wcscmp (_String1="FormsHomePage.html", _String2="..") returned 1 [0167.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f17f8 [0167.151] wcscpy (in: _Dest=0x81f17f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.152] wcscat (in: _Dest=0x81f17f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.152] wcscat (in: _Dest=0x81f17f8, _Source="FormsHomePage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" [0167.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f17f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0167.153] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1dda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0167.153] wcscmp (_String1="FormsHomePageScript.js", _String2=".") returned 1 [0167.153] wcscmp (_String1="FormsHomePageScript.js", _String2="..") returned 1 [0167.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81ea7c8 [0167.153] wcscpy (in: _Dest=0x81ea7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.153] wcscat (in: _Dest=0x81ea7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.153] wcscat (in: _Dest=0x81ea7c8, _Source="FormsHomePageScript.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" [0167.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0167.154] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0167.155] wcscmp (_String1="FormsHomePageStyle.css", _String2=".") returned 1 [0167.155] wcscmp (_String1="FormsHomePageStyle.css", _String2="..") returned 1 [0167.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81ea988 [0167.155] wcscpy (in: _Dest=0x81ea988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.155] wcscat (in: _Dest=0x81ea988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.155] wcscat (in: _Dest=0x81ea988, _Source="FormsHomePageStyle.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" [0167.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0167.156] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0167.156] wcscmp (_String1="FormsImageTemplate.html", _String2=".") returned 1 [0167.156] wcscmp (_String1="FormsImageTemplate.html", _String2="..") returned 1 [0167.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81eaa68 [0167.156] wcscpy (in: _Dest=0x81eaa68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.156] wcscat (in: _Dest=0x81eaa68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.156] wcscat (in: _Dest=0x81eaa68, _Source="FormsImageTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" [0167.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eaa68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0167.157] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x856, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0167.157] wcscmp (_String1="FormsMacroTemplate.html", _String2=".") returned 1 [0167.157] wcscmp (_String1="FormsMacroTemplate.html", _String2="..") returned 1 [0167.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81eab48 [0167.157] wcscpy (in: _Dest=0x81eab48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.157] wcscat (in: _Dest=0x81eab48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.157] wcscat (in: _Dest=0x81eab48, _Source="FormsMacroTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" [0167.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eab48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb4 [0167.158] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x46fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0167.158] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0167.158] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0167.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39ce0 [0167.158] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.158] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.158] wcscat (in: _Dest=0x3e39ce0, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" [0167.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0167.159] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0167.159] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0167.159] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0167.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81eac28 [0167.159] wcscpy (in: _Dest=0x81eac28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.159] wcscat (in: _Dest=0x81eac28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.160] wcscat (in: _Dest=0x81eac28, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" [0167.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eac28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0167.161] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0167.161] wcscmp (_String1="FormsStyles", _String2=".") returned 1 [0167.161] wcscmp (_String1="FormsStyles", _String2="..") returned 1 [0167.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d7268 [0167.161] wcscpy (in: _Dest=0x81d7268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.161] wcscat (in: _Dest=0x81d7268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.161] wcscat (in: _Dest=0x81d7268, _Source="FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0167.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d7268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0167.162] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0167.162] wcscmp (_String1="FormsVersion1Warning.htm", _String2=".") returned 1 [0167.162] wcscmp (_String1="FormsVersion1Warning.htm", _String2="..") returned 1 [0167.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81ead08 [0167.162] wcscpy (in: _Dest=0x81ead08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.162] wcscat (in: _Dest=0x81ead08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.162] wcscat (in: _Dest=0x81ead08, _Source="FormsVersion1Warning.htm" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" [0167.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ead08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0167.163] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0167.163] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0167.163] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0167.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a6d8 [0167.163] wcscpy (in: _Dest=0x3e3a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.163] wcscat (in: _Dest=0x3e3a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.163] wcscat (in: _Dest=0x3e3a6d8, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" [0167.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0167.164] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0167.165] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0167.165] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0167.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80219b0 [0167.165] wcscpy (in: _Dest=0x80219b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.165] wcscat (in: _Dest=0x80219b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.165] wcscat (in: _Dest=0x80219b0, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" [0167.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80219b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0167.166] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1313, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~3.HTM")) returned 1 [0167.166] wcscmp (_String1="FormsViewFrame.html", _String2=".") returned 1 [0167.166] wcscmp (_String1="FormsViewFrame.html", _String2="..") returned 1 [0167.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f18d0 [0167.166] wcscpy (in: _Dest=0x81f18d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.166] wcscat (in: _Dest=0x81f18d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.166] wcscat (in: _Dest=0x81f18d0, _Source="FormsViewFrame.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" [0167.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f18d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0167.167] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0167.167] wcscmp (_String1="FormsViewTemplate.html", _String2=".") returned 1 [0167.167] wcscmp (_String1="FormsViewTemplate.html", _String2="..") returned 1 [0167.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81eade8 [0167.167] wcscpy (in: _Dest=0x81eade8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.167] wcscat (in: _Dest=0x81eade8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.167] wcscat (in: _Dest=0x81eade8, _Source="FormsViewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" [0167.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eade8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0167.168] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0167.168] wcscmp (_String1="FormToolImages.jpg", _String2=".") returned 1 [0167.168] wcscmp (_String1="FormToolImages.jpg", _String2="..") returned 1 [0167.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f19a8 [0167.168] wcscpy (in: _Dest=0x81f19a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.168] wcscat (in: _Dest=0x81f19a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.169] wcscat (in: _Dest=0x81f19a8, _Source="FormToolImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" [0167.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f19a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x222c [0167.170] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x23ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0167.170] wcscmp (_String1="form_edit.js", _String2=".") returned 1 [0167.170] wcscmp (_String1="form_edit.js", _String2="..") returned 1 [0167.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6908 [0167.170] wcscpy (in: _Dest=0x81d6908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.170] wcscat (in: _Dest=0x81d6908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.170] wcscat (in: _Dest=0x81d6908, _Source="form_edit.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" [0167.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0167.171] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0167.171] wcscmp (_String1="LAUNCH.GIF", _String2=".") returned 1 [0167.171] wcscmp (_String1="LAUNCH.GIF", _String2="..") returned 1 [0167.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d6840 [0167.171] wcscpy (in: _Dest=0x81d6840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.171] wcscat (in: _Dest=0x81d6840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.171] wcscat (in: _Dest=0x81d6840, _Source="LAUNCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" [0167.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2224 [0167.172] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c42a00, ftCreationTime.dwHighDateTime=0x1c9ff01, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6c42a00, ftLastWriteTime.dwHighDateTime=0x1c9ff01, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0167.172] wcscmp (_String1="macroprogress.gif", _String2=".") returned 1 [0167.172] wcscmp (_String1="macroprogress.gif", _String2="..") returned 1 [0167.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f1a80 [0167.172] wcscpy (in: _Dest=0x81f1a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.173] wcscat (in: _Dest=0x81f1a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.173] wcscat (in: _Dest=0x81f1a80, _Source="macroprogress.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" [0167.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2220 [0167.174] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824160f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0167.174] wcscmp (_String1="PublicFunctions.js", _String2=".") returned 1 [0167.174] wcscmp (_String1="PublicFunctions.js", _String2="..") returned 1 [0167.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1b58 [0167.174] wcscpy (in: _Dest=0x81f1b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.174] wcscat (in: _Dest=0x81f1b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.174] wcscat (in: _Dest=0x81f1b58, _Source="PublicFunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" [0167.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c [0167.175] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0167.175] wcscmp (_String1="rtf_alignleft.gif", _String2=".") returned 1 [0167.175] wcscmp (_String1="rtf_alignleft.gif", _String2="..") returned 1 [0167.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f1c30 [0167.175] wcscpy (in: _Dest=0x81f1c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.175] wcscat (in: _Dest=0x81f1c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.175] wcscat (in: _Dest=0x81f1c30, _Source="rtf_alignleft.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" [0167.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2218 [0167.176] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0167.176] wcscmp (_String1="rtf_alignright.gif", _String2=".") returned 1 [0167.176] wcscmp (_String1="rtf_alignright.gif", _String2="..") returned 1 [0167.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1d08 [0167.176] wcscpy (in: _Dest=0x81f1d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.176] wcscat (in: _Dest=0x81f1d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.176] wcscat (in: _Dest=0x81f1d08, _Source="rtf_alignright.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" [0167.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2214 [0167.177] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0167.177] wcscmp (_String1="RTF_BOLD.GIF", _String2=".") returned 1 [0167.177] wcscmp (_String1="RTF_BOLD.GIF", _String2="..") returned 1 [0167.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6b60 [0167.177] wcscpy (in: _Dest=0x81d6b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.178] wcscat (in: _Dest=0x81d6b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.178] wcscat (in: _Dest=0x81d6b60, _Source="RTF_BOLD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" [0167.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2210 [0167.178] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0167.178] wcscmp (_String1="rtf_bullets.gif", _String2=".") returned 1 [0167.179] wcscmp (_String1="rtf_bullets.gif", _String2="..") returned 1 [0167.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81efe68 [0167.179] wcscpy (in: _Dest=0x81efe68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.179] wcscat (in: _Dest=0x81efe68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.179] wcscat (in: _Dest=0x81efe68, _Source="rtf_bullets.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" [0167.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efe68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0167.180] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0167.180] wcscmp (_String1="rtf_center.gif", _String2=".") returned 1 [0167.180] wcscmp (_String1="rtf_center.gif", _String2="..") returned 1 [0167.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81efd98 [0167.180] wcscpy (in: _Dest=0x81efd98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.180] wcscat (in: _Dest=0x81efd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.180] wcscat (in: _Dest=0x81efd98, _Source="rtf_center.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" [0167.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208 [0167.181] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5669c00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5669c00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1 [0167.181] wcscmp (_String1="rtf_choosecolor.gif", _String2=".") returned 1 [0167.181] wcscmp (_String1="rtf_choosecolor.gif", _String2="..") returned 1 [0167.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f1de0 [0167.181] wcscpy (in: _Dest=0x81f1de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.181] wcscat (in: _Dest=0x81f1de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.181] wcscat (in: _Dest=0x81f1de0, _Source="rtf_choosecolor.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" [0167.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0167.182] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0167.182] wcscmp (_String1="rtf_choosefont.gif", _String2=".") returned 1 [0167.182] wcscmp (_String1="rtf_choosefont.gif", _String2="..") returned 1 [0167.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1eb8 [0167.182] wcscpy (in: _Dest=0x81f1eb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.182] wcscat (in: _Dest=0x81f1eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.182] wcscat (in: _Dest=0x81f1eb8, _Source="rtf_choosefont.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" [0167.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200 [0167.195] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0167.195] wcscmp (_String1="rtf_decreaseindent.gif", _String2=".") returned 1 [0167.195] wcscmp (_String1="rtf_decreaseindent.gif", _String2="..") returned 1 [0167.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81eaec8 [0167.195] wcscpy (in: _Dest=0x81eaec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.195] wcscat (in: _Dest=0x81eaec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.195] wcscat (in: _Dest=0x81eaec8, _Source="rtf_decreaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" [0167.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eaec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0167.197] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0168.277] wcscmp (_String1="rtf_increaseindent.gif", _String2=".") returned 1 [0168.277] wcscmp (_String1="rtf_increaseindent.gif", _String2="..") returned 1 [0168.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8488 [0168.277] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0168.277] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0168.277] wcscat (in: _Dest=0x2c8488, _Source="rtf_increaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" [0169.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x292c [0169.169] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0169.170] wcscmp (_String1="rtf_italic.gif", _String2=".") returned 1 [0169.170] wcscmp (_String1="rtf_italic.gif", _String2="..") returned 1 [0169.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81f0008 [0169.170] wcscpy (in: _Dest=0x81f0008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.170] wcscat (in: _Dest=0x81f0008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.170] wcscat (in: _Dest=0x81f0008, _Source="rtf_italic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" [0169.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2928 [0169.171] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0169.171] wcscmp (_String1="rtf_justify.gif", _String2=".") returned 1 [0169.171] wcscmp (_String1="rtf_justify.gif", _String2="..") returned 1 [0169.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81eff38 [0169.171] wcscpy (in: _Dest=0x81eff38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.171] wcscat (in: _Dest=0x81eff38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.171] wcscat (in: _Dest=0x81eff38, _Source="rtf_justify.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" [0169.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eff38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2924 [0169.172] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0169.172] wcscmp (_String1="rtf_pressed.gif", _String2=".") returned 1 [0169.172] wcscmp (_String1="rtf_pressed.gif", _String2="..") returned 1 [0169.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f00d8 [0169.172] wcscpy (in: _Dest=0x81f00d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.172] wcscat (in: _Dest=0x81f00d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.172] wcscat (in: _Dest=0x81f00d8, _Source="rtf_pressed.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" [0169.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f00d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2530 [0169.173] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0169.173] wcscmp (_String1="rtf_underline.gif", _String2=".") returned 1 [0169.173] wcscmp (_String1="rtf_underline.gif", _String2="..") returned 1 [0169.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81ecec0 [0169.173] wcscpy (in: _Dest=0x81ecec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.173] wcscat (in: _Dest=0x81ecec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.173] wcscat (in: _Dest=0x81ecec0, _Source="rtf_underline.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" [0169.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2920 [0169.174] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedee9600, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedee9600, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0169.174] wcscmp (_String1="SAVE.GIF", _String2=".") returned 1 [0169.174] wcscmp (_String1="SAVE.GIF", _String2="..") returned 1 [0169.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x334068 [0169.174] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.174] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.174] wcscat (in: _Dest=0x334068, _Source="SAVE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" [0169.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2520 [0169.175] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x12b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0169.176] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0169.176] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0169.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e8e80 [0169.176] wcscpy (in: _Dest=0x81e8e80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.176] wcscat (in: _Dest=0x81e8e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.176] wcscat (in: _Dest=0x81e8e80, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" [0169.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x291c [0169.177] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8512a190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6e57, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0169.177] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0169.177] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0169.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81ecf98 [0169.177] wcscpy (in: _Dest=0x81ecf98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.177] wcscat (in: _Dest=0x81ecf98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.177] wcscat (in: _Dest=0x81ecf98, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" [0169.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecf98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2510 [0169.178] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6427, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0169.178] wcscmp (_String1="validation.js", _String2=".") returned 1 [0169.178] wcscmp (_String1="validation.js", _String2="..") returned 1 [0169.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81ef718 [0169.178] wcscpy (in: _Dest=0x81ef718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.178] wcscat (in: _Dest=0x81ef718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.178] wcscat (in: _Dest=0x81ef718, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" [0169.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2918 [0169.179] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0169.179] wcscmp (_String1="VIEW.ICO", _String2=".") returned 1 [0169.179] wcscmp (_String1="VIEW.ICO", _String2="..") returned 1 [0169.179] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1db1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0169.179] wcscmp (_String1="VIEW.JS", _String2=".") returned 1 [0169.179] wcscmp (_String1="VIEW.JS", _String2="..") returned 1 [0169.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333468 [0169.179] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.179] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.179] wcscat (in: _Dest=0x333468, _Source="VIEW.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" [0169.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2500 [0169.180] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0169.180] wcscmp (_String1="ViewHeaderPreview.jpg", _String2=".") returned 1 [0169.180] wcscmp (_String1="ViewHeaderPreview.jpg", _String2="..") returned 1 [0169.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c97c8 [0169.180] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0169.180] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0169.180] wcscat (in: _Dest=0x2c97c8, _Source="ViewHeaderPreview.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" [0169.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2910 [0169.181] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 0 [0171.417] FindClose (in: hFindFile=0x3f38198 | out: hFindFile=0x3f38198) returned 1 [0177.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a5f8) returned 1 [0177.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d410e8) returned 1 [0177.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 2451 os_tid = 0x21d4 [0155.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d411a0 [0155.007] wcscpy (in: _Dest=0x3d411a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0155.007] wcscat (in: _Dest=0x3d411a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0155.007] wcscat (in: _Dest=0x3d411a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*" [0155.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a860 [0155.007] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0162.467] wcscmp (_String1=".", _String2=".") returned 0 [0162.467] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.739] wcscmp (_String1="..", _String2=".") returned 1 [0164.739] wcscmp (_String1="..", _String2="..") returned 0 [0164.739] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0164.739] wcscmp (_String1="ADD.GIF", _String2=".") returned 1 [0164.740] wcscmp (_String1="ADD.GIF", _String2="..") returned 1 [0164.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81dfb88 [0164.740] wcscpy (in: _Dest=0x81dfb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0164.740] wcscat (in: _Dest=0x81dfb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0164.740] wcscat (in: _Dest=0x81dfb88, _Source="ADD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" [0166.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0166.650] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0166.650] wcscmp (_String1="AddToViewArrow.jpg", _String2=".") returned 1 [0166.650] wcscmp (_String1="AddToViewArrow.jpg", _String2="..") returned 1 [0166.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ec650 [0166.650] wcscpy (in: _Dest=0x81ec650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.650] wcscat (in: _Dest=0x81ec650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.650] wcscat (in: _Dest=0x81ec650, _Source="AddToViewArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" [0166.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0166.651] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0166.651] wcscmp (_String1="AddToViewArrowMask.bmp", _String2=".") returned 1 [0166.651] wcscmp (_String1="AddToViewArrowMask.bmp", _String2="..") returned 1 [0166.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81ea7c8 [0166.651] wcscpy (in: _Dest=0x81ea7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.651] wcscat (in: _Dest=0x81ea7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.651] wcscat (in: _Dest=0x81ea7c8, _Source="AddToViewArrowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" [0166.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0166.653] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0166.653] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0166.653] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0166.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81efb28 [0166.653] wcscpy (in: _Dest=0x81efb28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.653] wcscat (in: _Dest=0x81efb28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.653] wcscat (in: _Dest=0x81efb28, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" [0166.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efb28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x241c [0166.654] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0166.654] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0166.654] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0166.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d7268 [0166.654] wcscpy (in: _Dest=0x81d7268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.654] wcscat (in: _Dest=0x81d7268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.654] wcscat (in: _Dest=0x81d7268, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" [0166.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0166.656] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0166.656] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0166.656] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0166.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81efbf8 [0166.656] wcscpy (in: _Dest=0x81efbf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.656] wcscat (in: _Dest=0x81efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.656] wcscat (in: _Dest=0x81efbf8, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" [0166.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0166.657] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0166.658] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0166.658] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0166.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81efcc8 [0166.658] wcscpy (in: _Dest=0x81efcc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.658] wcscat (in: _Dest=0x81efcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.658] wcscat (in: _Dest=0x81efcc8, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" [0166.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0166.659] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0166.659] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0166.659] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0166.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81efd98 [0166.659] wcscpy (in: _Dest=0x81efd98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.659] wcscat (in: _Dest=0x81efd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.659] wcscat (in: _Dest=0x81efd98, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" [0166.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0166.660] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0166.660] wcscmp (_String1="bg_FormsHomePage.gif", _String2=".") returned 1 [0166.660] wcscmp (_String1="bg_FormsHomePage.gif", _String2="..") returned 1 [0166.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81ec728 [0166.660] wcscpy (in: _Dest=0x81ec728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.661] wcscat (in: _Dest=0x81ec728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.661] wcscat (in: _Dest=0x81ec728, _Source="bg_FormsHomePage.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" [0166.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0166.662] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0166.662] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2=".") returned 1 [0166.662] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2="..") returned 1 [0166.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a6d8 [0166.662] wcscpy (in: _Dest=0x3e3a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.662] wcscat (in: _Dest=0x3e3a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.662] wcscat (in: _Dest=0x3e3a6d8, _Source="bg_FormsHomePageBlank.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" [0166.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0166.663] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1 [0166.663] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2=".") returned 1 [0166.663] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2="..") returned 1 [0166.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39ce0 [0166.663] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.663] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.664] wcscat (in: _Dest=0x3e39ce0, _Source="bg_FormsHomePageSlice.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" [0166.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0166.669] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0166.669] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0166.669] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0166.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81efe68 [0166.669] wcscpy (in: _Dest=0x81efe68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.669] wcscat (in: _Dest=0x81efe68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.669] wcscat (in: _Dest=0x81efe68, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" [0166.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efe68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0166.671] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0166.671] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0166.671] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0166.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81eff38 [0166.671] wcscpy (in: _Dest=0x81eff38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.671] wcscat (in: _Dest=0x81eff38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.671] wcscat (in: _Dest=0x81eff38, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" [0166.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eff38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4 [0166.672] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0166.672] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0166.672] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0166.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ec800 [0166.672] wcscpy (in: _Dest=0x81ec800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.672] wcscat (in: _Dest=0x81ec800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.672] wcscat (in: _Dest=0x81ec800, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" [0166.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0166.674] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0166.674] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0166.674] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0166.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81ec8d8 [0166.674] wcscpy (in: _Dest=0x81ec8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.674] wcscat (in: _Dest=0x81ec8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.674] wcscat (in: _Dest=0x81ec8d8, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" [0166.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0166.675] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0166.675] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0166.676] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0166.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81f0008 [0166.676] wcscpy (in: _Dest=0x81f0008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.676] wcscat (in: _Dest=0x81f0008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.676] wcscat (in: _Dest=0x81f0008, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" [0166.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0166.677] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0166.677] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0166.677] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0166.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x81f00d8 [0166.677] wcscpy (in: _Dest=0x81f00d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.677] wcscat (in: _Dest=0x81f00d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.677] wcscat (in: _Dest=0x81f00d8, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" [0166.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f00d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0166.679] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0166.679] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0166.679] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0166.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81ec9b0 [0166.679] wcscpy (in: _Dest=0x81ec9b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.679] wcscat (in: _Dest=0x81ec9b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.679] wcscat (in: _Dest=0x81ec9b0, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" [0166.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec9b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0166.681] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0166.681] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0166.681] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0166.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81eca88 [0166.681] wcscpy (in: _Dest=0x81eca88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.681] wcscat (in: _Dest=0x81eca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.681] wcscat (in: _Dest=0x81eca88, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" [0166.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0166.682] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0166.682] wcscmp (_String1="button_left.gif", _String2=".") returned 1 [0166.682] wcscmp (_String1="button_left.gif", _String2="..") returned 1 [0166.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f01a8 [0166.682] wcscpy (in: _Dest=0x81f01a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.682] wcscat (in: _Dest=0x81f01a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.682] wcscat (in: _Dest=0x81f01a8, _Source="button_left.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" [0166.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f01a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0166.684] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0166.684] wcscmp (_String1="button_left_over.gif", _String2=".") returned 1 [0166.684] wcscmp (_String1="button_left_over.gif", _String2="..") returned 1 [0166.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81ecb60 [0166.684] wcscpy (in: _Dest=0x81ecb60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.684] wcscat (in: _Dest=0x81ecb60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.684] wcscat (in: _Dest=0x81ecb60, _Source="button_left_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" [0166.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0166.685] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0166.685] wcscmp (_String1="button_mid.gif", _String2=".") returned 1 [0166.686] wcscmp (_String1="button_mid.gif", _String2="..") returned 1 [0166.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81f0278 [0166.686] wcscpy (in: _Dest=0x81f0278, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.686] wcscat (in: _Dest=0x81f0278, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.686] wcscat (in: _Dest=0x81f0278, _Source="button_mid.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" [0166.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0166.688] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0166.688] wcscmp (_String1="button_mid_over.gif", _String2=".") returned 1 [0166.688] wcscmp (_String1="button_mid_over.gif", _String2="..") returned 1 [0166.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81ecc38 [0166.688] wcscpy (in: _Dest=0x81ecc38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.688] wcscat (in: _Dest=0x81ecc38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.688] wcscat (in: _Dest=0x81ecc38, _Source="button_mid_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" [0166.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecc38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0166.689] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1 [0166.689] wcscmp (_String1="button_right.gif", _String2=".") returned 1 [0166.689] wcscmp (_String1="button_right.gif", _String2="..") returned 1 [0166.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x81f0348 [0166.689] wcscpy (in: _Dest=0x81f0348, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.689] wcscat (in: _Dest=0x81f0348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.689] wcscat (in: _Dest=0x81f0348, _Source="button_right.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" [0166.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c8 [0166.690] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0166.690] wcscmp (_String1="button_right_over.gif", _String2=".") returned 1 [0166.690] wcscmp (_String1="button_right_over.gif", _String2="..") returned 1 [0166.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81ea8a8 [0166.690] wcscpy (in: _Dest=0x81ea8a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.690] wcscat (in: _Dest=0x81ea8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.691] wcscat (in: _Dest=0x81ea8a8, _Source="button_right_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" [0166.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c4 [0166.692] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0166.692] wcscmp (_String1="CALENDAR.GIF", _String2=".") returned 1 [0166.692] wcscmp (_String1="CALENDAR.GIF", _String2="..") returned 1 [0166.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d7330 [0166.692] wcscpy (in: _Dest=0x81d7330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0166.692] wcscat (in: _Dest=0x81d7330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0166.692] wcscat (in: _Dest=0x81d7330, _Source="CALENDAR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" [0166.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c0 [0167.355] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0167.355] wcscmp (_String1="DELETE.GIF", _String2=".") returned 1 [0167.355] wcscmp (_String1="DELETE.GIF", _String2="..") returned 1 [0167.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d5bc0 [0167.355] wcscpy (in: _Dest=0x81d5bc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0167.355] wcscat (in: _Dest=0x81d5bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0167.355] wcscat (in: _Dest=0x81d5bc0, _Source="DELETE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" [0168.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a50 [0168.592] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0168.592] wcscmp (_String1="ERROR.GIF", _String2=".") returned 1 [0168.592] wcscmp (_String1="ERROR.GIF", _String2="..") returned 1 [0168.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e7d50 [0168.592] wcscpy (in: _Dest=0x81e7d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0168.592] wcscat (in: _Dest=0x81e7d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0168.592] wcscat (in: _Dest=0x81e7d50, _Source="ERROR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" [0168.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e7d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0168.593] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0168.593] wcscmp (_String1="FORM.ICO", _String2=".") returned 1 [0168.593] wcscmp (_String1="FORM.ICO", _String2="..") returned 1 [0168.593] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x135f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0168.593] wcscmp (_String1="FORM.JS", _String2=".") returned 1 [0168.593] wcscmp (_String1="FORM.JS", _String2="..") returned 1 [0168.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3333a8 [0168.594] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0168.594] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0168.594] wcscat (in: _Dest=0x3333a8, _Source="FORM.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" [0168.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0168.597] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0168.597] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0168.597] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0168.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f1720 [0168.597] wcscpy (in: _Dest=0x81f1720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0168.597] wcscat (in: _Dest=0x81f1720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0168.597] wcscat (in: _Dest=0x81f1720, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" [0168.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0168.598] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0171.747] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0171.747] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0171.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8f08 [0171.747] wcscpy (in: _Dest=0x2c8f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0171.747] wcscat (in: _Dest=0x2c8f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0171.747] wcscat (in: _Dest=0x2c8f08, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" [0179.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0179.135] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0179.135] wcscmp (_String1="FormsColorChart.html", _String2=".") returned 1 [0179.135] wcscmp (_String1="FormsColorChart.html", _String2="..") returned 1 [0179.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f1b58 [0179.136] wcscpy (in: _Dest=0x81f1b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.136] wcscat (in: _Dest=0x81f1b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.136] wcscat (in: _Dest=0x81f1b58, _Source="FormsColorChart.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" [0179.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0179.138] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x115a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0179.138] wcscmp (_String1="FormsFormTemplate.html", _String2=".") returned 1 [0179.138] wcscmp (_String1="FormsFormTemplate.html", _String2="..") returned 1 [0179.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c97c8 [0179.138] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.138] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.138] wcscat (in: _Dest=0x2c97c8, _Source="FormsFormTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" [0179.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0179.139] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0179.139] wcscmp (_String1="FormsHomePage.html", _String2=".") returned 1 [0179.139] wcscmp (_String1="FormsHomePage.html", _String2="..") returned 1 [0179.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1d08 [0179.140] wcscpy (in: _Dest=0x81f1d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.140] wcscat (in: _Dest=0x81f1d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.140] wcscat (in: _Dest=0x81f1d08, _Source="FormsHomePage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" [0179.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0179.141] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0179.141] wcscmp (_String1="FormsHomePageScript.js", _String2=".") returned 1 [0179.141] wcscmp (_String1="FormsHomePageScript.js", _String2="..") returned 1 [0179.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8488 [0179.141] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.141] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.141] wcscat (in: _Dest=0x2c8488, _Source="FormsHomePageScript.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" [0179.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0179.143] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0179.143] wcscmp (_String1="FormsHomePageStyle.css", _String2=".") returned 1 [0179.143] wcscmp (_String1="FormsHomePageStyle.css", _String2="..") returned 1 [0179.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8fe8 [0179.143] wcscpy (in: _Dest=0x2c8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.143] wcscat (in: _Dest=0x2c8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.143] wcscat (in: _Dest=0x2c8fe8, _Source="FormsHomePageStyle.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" [0179.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0179.145] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0179.145] wcscmp (_String1="FormsImageTemplate.html", _String2=".") returned 1 [0179.145] wcscmp (_String1="FormsImageTemplate.html", _String2="..") returned 1 [0179.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c91a8 [0179.145] wcscpy (in: _Dest=0x2c91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.145] wcscat (in: _Dest=0x2c91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.145] wcscat (in: _Dest=0x2c91a8, _Source="FormsImageTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" [0179.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0179.146] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0179.146] wcscmp (_String1="FormsMacroTemplate.html", _String2=".") returned 1 [0179.146] wcscmp (_String1="FormsMacroTemplate.html", _String2="..") returned 1 [0179.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8e28 [0179.147] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.147] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.147] wcscat (in: _Dest=0x2c8e28, _Source="FormsMacroTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" [0179.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0179.148] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x46a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0179.148] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0179.148] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0179.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3b9e0 [0179.148] wcscpy (in: _Dest=0x3e3b9e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.148] wcscat (in: _Dest=0x3e3b9e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.148] wcscat (in: _Dest=0x3e3b9e0, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" [0179.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650 [0179.149] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0179.150] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0179.150] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0179.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c90c8 [0179.150] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.150] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.150] wcscat (in: _Dest=0x2c90c8, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" [0179.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c90c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0179.151] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0179.151] wcscmp (_String1="FormsStyles", _String2=".") returned 1 [0179.151] wcscmp (_String1="FormsStyles", _String2="..") returned 1 [0179.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d6840 [0179.151] wcscpy (in: _Dest=0x81d6840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.152] wcscat (in: _Dest=0x81d6840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.152] wcscat (in: _Dest=0x81d6840, _Source="FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0179.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d6840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4 [0179.153] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0179.153] wcscmp (_String1="FormsVersion1Warning.htm", _String2=".") returned 1 [0179.153] wcscmp (_String1="FormsVersion1Warning.htm", _String2="..") returned 1 [0179.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8aa8 [0179.153] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.153] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.153] wcscat (in: _Dest=0x2c8aa8, _Source="FormsVersion1Warning.htm" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" [0179.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0179.155] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0179.155] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0179.155] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0179.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e39ce0 [0179.155] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.155] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.155] wcscat (in: _Dest=0x3e39ce0, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" [0179.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0179.156] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0179.156] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0179.156] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0179.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021aa0 [0179.156] wcscpy (in: _Dest=0x8021aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.157] wcscat (in: _Dest=0x8021aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.157] wcscat (in: _Dest=0x8021aa0, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" [0179.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0179.158] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x164a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0179.158] wcscmp (_String1="FormsViewFrame.html", _String2=".") returned 1 [0179.158] wcscmp (_String1="FormsViewFrame.html", _String2="..") returned 1 [0179.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f18d0 [0179.158] wcscpy (in: _Dest=0x81f18d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.158] wcscat (in: _Dest=0x81f18d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.158] wcscat (in: _Dest=0x81f18d0, _Source="FormsViewFrame.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" [0179.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f18d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a4 [0179.159] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~3.HTM")) returned 1 [0179.159] wcscmp (_String1="FormsViewTemplate.html", _String2=".") returned 1 [0179.159] wcscmp (_String1="FormsViewTemplate.html", _String2="..") returned 1 [0179.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8b88 [0179.160] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.160] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.160] wcscat (in: _Dest=0x2c8b88, _Source="FormsViewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" [0179.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0179.161] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0179.161] wcscmp (_String1="FormToolImages.jpg", _String2=".") returned 1 [0179.161] wcscmp (_String1="FormToolImages.jpg", _String2="..") returned 1 [0179.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f19a8 [0179.161] wcscpy (in: _Dest=0x81f19a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.161] wcscat (in: _Dest=0x81f19a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.161] wcscat (in: _Dest=0x81f19a8, _Source="FormToolImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" [0179.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f19a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x159c [0179.163] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2577, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0179.163] wcscmp (_String1="form_edit.js", _String2=".") returned 1 [0179.163] wcscmp (_String1="form_edit.js", _String2="..") returned 1 [0179.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6b60 [0179.163] wcscpy (in: _Dest=0x81d6b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.163] wcscat (in: _Dest=0x81d6b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.163] wcscat (in: _Dest=0x81d6b60, _Source="form_edit.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" [0179.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598 [0179.164] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0179.165] wcscmp (_String1="LAUNCH.GIF", _String2=".") returned 1 [0179.165] wcscmp (_String1="LAUNCH.GIF", _String2="..") returned 1 [0179.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d6908 [0179.165] wcscpy (in: _Dest=0x81d6908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.165] wcscat (in: _Dest=0x81d6908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.165] wcscat (in: _Dest=0x81d6908, _Source="LAUNCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" [0179.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0179.166] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0179.166] wcscmp (_String1="macroprogress.gif", _String2=".") returned 1 [0179.166] wcscmp (_String1="macroprogress.gif", _String2="..") returned 1 [0179.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f1a80 [0179.166] wcscpy (in: _Dest=0x81f1a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.166] wcscat (in: _Dest=0x81f1a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.166] wcscat (in: _Dest=0x81f1a80, _Source="macroprogress.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" [0179.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0179.168] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903650d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0179.168] wcscmp (_String1="PublicFunctions.js", _String2=".") returned 1 [0179.168] wcscmp (_String1="PublicFunctions.js", _String2="..") returned 1 [0179.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f17f8 [0179.168] wcscpy (in: _Dest=0x81f17f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.168] wcscat (in: _Dest=0x81f17f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.168] wcscat (in: _Dest=0x81f17f8, _Source="PublicFunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" [0179.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f17f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c [0179.170] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0179.170] wcscmp (_String1="rtf_alignleft.gif", _String2=".") returned 1 [0179.170] wcscmp (_String1="rtf_alignleft.gif", _String2="..") returned 1 [0179.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f1c30 [0179.170] wcscpy (in: _Dest=0x81f1c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.170] wcscat (in: _Dest=0x81f1c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.170] wcscat (in: _Dest=0x81f1c30, _Source="rtf_alignleft.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" [0179.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1588 [0179.536] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0179.536] wcscmp (_String1="rtf_alignright.gif", _String2=".") returned 1 [0179.536] wcscmp (_String1="rtf_alignright.gif", _String2="..") returned 1 [0179.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f17f8 [0179.536] wcscpy (in: _Dest=0x81f17f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.536] wcscat (in: _Dest=0x81f17f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.536] wcscat (in: _Dest=0x81f17f8, _Source="rtf_alignright.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" [0179.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f17f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0179.885] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0179.885] wcscmp (_String1="RTF_BOLD.GIF", _String2=".") returned 1 [0179.885] wcscmp (_String1="RTF_BOLD.GIF", _String2="..") returned 1 [0179.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6908 [0179.885] wcscpy (in: _Dest=0x81d6908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.885] wcscat (in: _Dest=0x81d6908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.885] wcscat (in: _Dest=0x81d6908, _Source="RTF_BOLD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" [0179.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0179.886] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0179.886] wcscmp (_String1="rtf_bullets.gif", _String2=".") returned 1 [0179.886] wcscmp (_String1="rtf_bullets.gif", _String2="..") returned 1 [0179.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81ef718 [0179.886] wcscpy (in: _Dest=0x81ef718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.886] wcscat (in: _Dest=0x81ef718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.886] wcscat (in: _Dest=0x81ef718, _Source="rtf_bullets.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" [0179.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0179.888] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0179.888] wcscmp (_String1="rtf_center.gif", _String2=".") returned 1 [0179.888] wcscmp (_String1="rtf_center.gif", _String2="..") returned 1 [0179.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81ef648 [0179.888] wcscpy (in: _Dest=0x81ef648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.888] wcscat (in: _Dest=0x81ef648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.888] wcscat (in: _Dest=0x81ef648, _Source="rtf_center.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" [0179.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0179.889] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0179.889] wcscmp (_String1="rtf_choosecolor.gif", _String2=".") returned 1 [0179.889] wcscmp (_String1="rtf_choosecolor.gif", _String2="..") returned 1 [0179.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f1c30 [0179.890] wcscpy (in: _Dest=0x81f1c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.890] wcscat (in: _Dest=0x81f1c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.890] wcscat (in: _Dest=0x81f1c30, _Source="rtf_choosecolor.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" [0179.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0179.891] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1 [0179.891] wcscmp (_String1="rtf_choosefont.gif", _String2=".") returned 1 [0179.891] wcscmp (_String1="rtf_choosefont.gif", _String2="..") returned 1 [0179.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1a80 [0179.891] wcscpy (in: _Dest=0x81f1a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.891] wcscat (in: _Dest=0x81f1a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.891] wcscat (in: _Dest=0x81f1a80, _Source="rtf_choosefont.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" [0179.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0179.893] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0179.893] wcscmp (_String1="rtf_decreaseindent.gif", _String2=".") returned 1 [0179.893] wcscmp (_String1="rtf_decreaseindent.gif", _String2="..") returned 1 [0179.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8b88 [0179.893] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.893] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.893] wcscat (in: _Dest=0x2c8b88, _Source="rtf_decreaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" [0179.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0 [0179.894] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="RTF_HY~1.GIF")) returned 1 [0179.894] wcscmp (_String1="rtf_hyperlink.gif", _String2=".") returned 1 [0179.894] wcscmp (_String1="rtf_hyperlink.gif", _String2="..") returned 1 [0179.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f19a8 [0179.894] wcscpy (in: _Dest=0x81f19a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.894] wcscat (in: _Dest=0x81f19a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.894] wcscat (in: _Dest=0x81f19a8, _Source="rtf_hyperlink.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" [0179.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f19a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0179.895] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0179.895] wcscmp (_String1="rtf_increaseindent.gif", _String2=".") returned 1 [0179.896] wcscmp (_String1="rtf_increaseindent.gif", _String2="..") returned 1 [0179.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8aa8 [0179.896] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.896] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.896] wcscat (in: _Dest=0x2c8aa8, _Source="rtf_increaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" [0179.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0179.897] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0179.897] wcscmp (_String1="rtf_italic.gif", _String2=".") returned 1 [0179.897] wcscmp (_String1="rtf_italic.gif", _String2="..") returned 1 [0179.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81efe68 [0179.898] wcscpy (in: _Dest=0x81efe68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.898] wcscat (in: _Dest=0x81efe68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.898] wcscat (in: _Dest=0x81efe68, _Source="rtf_italic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" [0179.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efe68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0179.899] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0179.899] wcscmp (_String1="rtf_justify.gif", _String2=".") returned 1 [0179.899] wcscmp (_String1="rtf_justify.gif", _String2="..") returned 1 [0179.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81efd98 [0179.899] wcscpy (in: _Dest=0x81efd98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.899] wcscat (in: _Dest=0x81efd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.899] wcscat (in: _Dest=0x81efd98, _Source="rtf_justify.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" [0179.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0179.901] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0179.901] wcscmp (_String1="rtf_pressed.gif", _String2=".") returned 1 [0179.901] wcscmp (_String1="rtf_pressed.gif", _String2="..") returned 1 [0179.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81f0008 [0179.901] wcscpy (in: _Dest=0x81f0008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.901] wcscat (in: _Dest=0x81f0008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.901] wcscat (in: _Dest=0x81f0008, _Source="rtf_pressed.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" [0179.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0179.903] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="RTF_SP~1.GIF")) returned 1 [0179.903] wcscmp (_String1="rtf_spellcheck.gif", _String2=".") returned 1 [0179.903] wcscmp (_String1="rtf_spellcheck.gif", _String2="..") returned 1 [0179.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f18d0 [0179.903] wcscpy (in: _Dest=0x81f18d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.903] wcscat (in: _Dest=0x81f18d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.903] wcscat (in: _Dest=0x81f18d0, _Source="rtf_spellcheck.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" [0179.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f18d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0179.904] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0179.904] wcscmp (_String1="rtf_underline.gif", _String2=".") returned 1 [0179.904] wcscmp (_String1="rtf_underline.gif", _String2="..") returned 1 [0179.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f1d08 [0179.904] wcscpy (in: _Dest=0x81f1d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.905] wcscat (in: _Dest=0x81f1d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.905] wcscat (in: _Dest=0x81f1d08, _Source="rtf_underline.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" [0179.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0179.906] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0179.906] wcscmp (_String1="SAVE.GIF", _String2=".") returned 1 [0179.906] wcscmp (_String1="SAVE.GIF", _String2="..") returned 1 [0179.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x334068 [0179.906] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.906] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.906] wcscat (in: _Dest=0x334068, _Source="SAVE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" [0179.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0179.908] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14307, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0179.908] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0179.908] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0179.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6b60 [0179.908] wcscpy (in: _Dest=0x81d6b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.908] wcscat (in: _Dest=0x81d6b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.908] wcscat (in: _Dest=0x81d6b60, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" [0179.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0179.909] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0179.909] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0179.909] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0179.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f1b58 [0179.909] wcscpy (in: _Dest=0x81f1b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.909] wcscat (in: _Dest=0x81f1b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.909] wcscat (in: _Dest=0x81f1b58, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" [0179.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0179.911] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x64b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0179.911] wcscmp (_String1="validation.js", _String2=".") returned 1 [0179.911] wcscmp (_String1="validation.js", _String2="..") returned 1 [0179.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81eff38 [0179.911] wcscpy (in: _Dest=0x81eff38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.911] wcscat (in: _Dest=0x81eff38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.911] wcscat (in: _Dest=0x81eff38, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" [0179.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eff38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0179.912] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0179.912] wcscmp (_String1="VIEW.ICO", _String2=".") returned 1 [0179.913] wcscmp (_String1="VIEW.ICO", _String2="..") returned 1 [0179.913] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2095, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0179.913] wcscmp (_String1="VIEW.JS", _String2=".") returned 1 [0179.913] wcscmp (_String1="VIEW.JS", _String2="..") returned 1 [0179.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333468 [0179.913] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.913] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.913] wcscat (in: _Dest=0x333468, _Source="VIEW.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" [0179.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0179.914] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0179.914] wcscmp (_String1="ViewHeaderPreview.jpg", _String2=".") returned 1 [0179.914] wcscmp (_String1="ViewHeaderPreview.jpg", _String2="..") returned 1 [0179.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c90c8 [0179.915] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.915] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.915] wcscat (in: _Dest=0x2c90c8, _Source="ViewHeaderPreview.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" [0179.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c90c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0179.916] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 0 [0179.916] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0179.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a860) returned 1 [0179.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d411a0) returned 1 [0179.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 2452 os_tid = 0x21d8 [0155.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d41258 [0155.008] wcscpy (in: _Dest=0x3d41258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0155.008] wcscat (in: _Dest=0x3d41258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0155.008] wcscat (in: _Dest=0x3d41258, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*" [0155.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0aac8 [0155.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9220ac10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55688 [0158.512] wcscmp (_String1=".", _String2=".") returned 0 [0158.512] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9220ac10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.376] wcscmp (_String1="..", _String2=".") returned 1 [0161.376] wcscmp (_String1="..", _String2="..") returned 0 [0161.376] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0161.376] wcscmp (_String1="ADD.GIF", _String2=".") returned 1 [0161.376] wcscmp (_String1="ADD.GIF", _String2="..") returned 1 [0161.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3335e8 [0161.376] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0161.377] wcscat (in: _Dest=0x3335e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0161.377] wcscat (in: _Dest=0x3335e8, _Source="ADD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" [0164.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3335e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d50 [0164.644] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0164.644] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0164.644] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0164.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c258 [0164.644] wcscpy (in: _Dest=0x3e1c258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.644] wcscat (in: _Dest=0x3e1c258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.644] wcscat (in: _Dest=0x3e1c258, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" [0164.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d4c [0164.645] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9eba00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c9eba00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0164.645] wcscmp (_String1="CALENDAR.GIF", _String2=".") returned 1 [0164.645] wcscmp (_String1="CALENDAR.GIF", _String2="..") returned 1 [0164.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6390 [0164.645] wcscpy (in: _Dest=0x81d6390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.645] wcscat (in: _Dest=0x81d6390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.645] wcscat (in: _Dest=0x81d6390, _Source="CALENDAR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" [0164.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0164.646] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9eba00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c9eba00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0164.647] wcscmp (_String1="DELETE.GIF", _String2=".") returned 1 [0164.647] wcscmp (_String1="DELETE.GIF", _String2="..") returned 1 [0164.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81e89d0 [0164.647] wcscpy (in: _Dest=0x81e89d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.647] wcscat (in: _Dest=0x81e89d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.647] wcscat (in: _Dest=0x81e89d0, _Source="DELETE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" [0164.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e89d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0164.651] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0164.651] wcscmp (_String1="ERROR.GIF", _String2=".") returned 1 [0164.651] wcscmp (_String1="ERROR.GIF", _String2="..") returned 1 [0164.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e8a98 [0164.652] wcscpy (in: _Dest=0x81e8a98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.652] wcscat (in: _Dest=0x81e8a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.652] wcscat (in: _Dest=0x81e8a98, _Source="ERROR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" [0164.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0164.653] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18a400, ftCreationTime.dwHighDateTime=0x1ca5e25, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd18a400, ftLastWriteTime.dwHighDateTime=0x1ca5e25, nFileSizeHigh=0x0, nFileSizeLow=0x14484, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0164.653] wcscmp (_String1="FORM.JS", _String2=".") returned 1 [0164.653] wcscmp (_String1="FORM.JS", _String2="..") returned 1 [0164.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81dfa08 [0164.653] wcscpy (in: _Dest=0x81dfa08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.653] wcscat (in: _Dest=0x81dfa08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.653] wcscat (in: _Dest=0x81dfa08, _Source="FORM.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" [0164.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfa08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d48 [0164.655] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0164.656] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0164.656] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0164.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e64288 [0164.656] wcscpy (in: _Dest=0x3e64288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.656] wcscat (in: _Dest=0x3e64288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.656] wcscat (in: _Dest=0x3e64288, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" [0164.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d44 [0164.657] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x829, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0164.657] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0164.657] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0164.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8b88 [0164.657] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.657] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.657] wcscat (in: _Dest=0x2c8b88, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" [0164.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d40 [0164.658] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0164.658] wcscmp (_String1="FormsColorChart.html", _String2=".") returned 1 [0164.658] wcscmp (_String1="FormsColorChart.html", _String2="..") returned 1 [0164.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e64438 [0164.658] wcscpy (in: _Dest=0x3e64438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.658] wcscat (in: _Dest=0x3e64438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.658] wcscat (in: _Dest=0x3e64438, _Source="FormsColorChart.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" [0164.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e64438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d3c [0164.659] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~2.HTM")) returned 1 [0164.659] wcscmp (_String1="FormsFormTemplate.html", _String2=".") returned 1 [0164.659] wcscmp (_String1="FormsFormTemplate.html", _String2="..") returned 1 [0164.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8648 [0164.660] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.660] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.660] wcscat (in: _Dest=0x2c8648, _Source="FormsFormTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" [0164.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d38 [0164.690] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff336900, ftCreationTime.dwHighDateTime=0x1c7d367, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff336900, ftLastWriteTime.dwHighDateTime=0x1c7d367, nFileSizeHigh=0x0, nFileSizeLow=0x13c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplateRTL.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0164.690] wcscmp (_String1="FormsFormTemplateRTL.html", _String2=".") returned 1 [0164.690] wcscmp (_String1="FormsFormTemplateRTL.html", _String2="..") returned 1 [0164.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3ab60 [0164.690] wcscpy (in: _Dest=0x3e3ab60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.690] wcscat (in: _Dest=0x3e3ab60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.690] wcscat (in: _Dest=0x3e3ab60, _Source="FormsFormTemplateRTL.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" [0164.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ab60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf4 [0164.691] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0164.691] wcscmp (_String1="FormsImageTemplate.html", _String2=".") returned 1 [0164.691] wcscmp (_String1="FormsImageTemplate.html", _String2="..") returned 1 [0164.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9288 [0164.691] wcscpy (in: _Dest=0x2c9288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.691] wcscat (in: _Dest=0x2c9288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.692] wcscat (in: _Dest=0x2c9288, _Source="FormsImageTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" [0164.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf0 [0164.693] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0164.693] wcscmp (_String1="FormsMacroTemplate.html", _String2=".") returned 1 [0164.693] wcscmp (_String1="FormsMacroTemplate.html", _String2="..") returned 1 [0164.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9368 [0164.693] wcscpy (in: _Dest=0x2c9368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.693] wcscat (in: _Dest=0x2c9368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.693] wcscat (in: _Dest=0x2c9368, _Source="FormsMacroTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" [0164.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cec [0164.694] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x46ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~3.HTM")) returned 1 [0164.694] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0164.694] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0164.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3ac48 [0164.694] wcscpy (in: _Dest=0x3e3ac48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.694] wcscat (in: _Dest=0x3e3ac48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.694] wcscat (in: _Dest=0x3e3ac48, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" [0164.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ac48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce4 [0164.697] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b200, ftCreationTime.dwHighDateTime=0x1c7d368, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb2b200, ftLastWriteTime.dwHighDateTime=0x1c7d368, nFileSizeHigh=0x0, nFileSizeLow=0x4709, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplateRTL.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0164.697] wcscmp (_String1="FormsPreviewTemplateRTL.html", _String2=".") returned 1 [0164.697] wcscmp (_String1="FormsPreviewTemplateRTL.html", _String2="..") returned 1 [0164.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3ad30 [0164.697] wcscpy (in: _Dest=0x3e3ad30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.697] wcscat (in: _Dest=0x3e3ad30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.697] wcscat (in: _Dest=0x3e3ad30, _Source="FormsPreviewTemplateRTL.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" [0164.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ad30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce0 [0164.704] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~4.HTM")) returned 1 [0164.704] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0164.704] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0164.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9448 [0164.704] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.704] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.704] wcscat (in: _Dest=0x2c9448, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" [0164.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cdc [0164.708] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f632800, ftCreationTime.dwHighDateTime=0x1c7d368, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f632800, ftLastWriteTime.dwHighDateTime=0x1c7d368, nFileSizeHigh=0x0, nFileSizeLow=0x5c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplateRTL.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0164.708] wcscmp (_String1="FormsPrintTemplateRTL.html", _String2=".") returned 1 [0164.708] wcscmp (_String1="FormsPrintTemplateRTL.html", _String2="..") returned 1 [0164.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3ae18 [0164.708] wcscpy (in: _Dest=0x3e3ae18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.708] wcscat (in: _Dest=0x3e3ae18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.708] wcscat (in: _Dest=0x3e3ae18, _Source="FormsPrintTemplateRTL.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" [0164.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ae18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd8 [0164.709] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46282200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46282200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0164.709] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0164.710] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0164.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3af00 [0164.710] wcscpy (in: _Dest=0x3e3af00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.710] wcscat (in: _Dest=0x3e3af00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.710] wcscat (in: _Dest=0x3e3af00, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" [0164.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3af00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd4 [0164.711] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0164.711] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0164.711] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0164.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8020d80 [0164.711] wcscpy (in: _Dest=0x8020d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.711] wcscat (in: _Dest=0x8020d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.711] wcscat (in: _Dest=0x8020d80, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" [0164.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd0 [0164.712] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x26b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0164.712] wcscmp (_String1="form_edit.js", _String2=".") returned 1 [0164.712] wcscmp (_String1="form_edit.js", _String2="..") returned 1 [0164.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e8b60 [0164.712] wcscpy (in: _Dest=0x81e8b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.712] wcscat (in: _Dest=0x81e8b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.712] wcscat (in: _Dest=0x81e8b60, _Source="form_edit.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" [0164.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ccc [0164.713] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14316, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathWelcomeImage.jpg", cAlternateFileName="INFOPA~1.JPG")) returned 1 [0164.713] wcscmp (_String1="InfoPathWelcomeImage.jpg", _String2=".") returned 1 [0164.713] wcscmp (_String1="InfoPathWelcomeImage.jpg", _String2="..") returned 1 [0164.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9528 [0164.713] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.713] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.713] wcscat (in: _Dest=0x2c9528, _Source="InfoPathWelcomeImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" [0164.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc8 [0164.714] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0164.714] wcscmp (_String1="LAUNCH.GIF", _String2=".") returned 1 [0164.714] wcscmp (_String1="LAUNCH.GIF", _String2="..") returned 1 [0164.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81e8c28 [0164.714] wcscpy (in: _Dest=0x81e8c28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.714] wcscat (in: _Dest=0x81e8c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.715] wcscat (in: _Dest=0x81e8c28, _Source="LAUNCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" [0164.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc4 [0164.715] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c42a00, ftCreationTime.dwHighDateTime=0x1c9ff01, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6c42a00, ftLastWriteTime.dwHighDateTime=0x1c9ff01, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0164.716] wcscmp (_String1="macroprogress.gif", _String2=".") returned 1 [0164.716] wcscmp (_String1="macroprogress.gif", _String2="..") returned 1 [0164.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e65a28 [0164.716] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.716] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.716] wcscat (in: _Dest=0x3e65a28, _Source="macroprogress.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" [0164.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc0 [0164.717] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903650d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x275e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0164.717] wcscmp (_String1="PublicFunctions.js", _String2=".") returned 1 [0164.717] wcscmp (_String1="PublicFunctions.js", _String2="..") returned 1 [0164.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65b00 [0164.717] wcscpy (in: _Dest=0x3e65b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.717] wcscat (in: _Dest=0x3e65b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.717] wcscat (in: _Dest=0x3e65b00, _Source="PublicFunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" [0164.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cbc [0164.718] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0164.718] wcscmp (_String1="rtf_alignleft.gif", _String2=".") returned 1 [0164.718] wcscmp (_String1="rtf_alignleft.gif", _String2="..") returned 1 [0164.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e655f0 [0164.718] wcscpy (in: _Dest=0x3e655f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.718] wcscat (in: _Dest=0x3e655f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.718] wcscat (in: _Dest=0x3e655f0, _Source="rtf_alignleft.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" [0164.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e655f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb8 [0164.719] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0164.719] wcscmp (_String1="rtf_alignright.gif", _String2=".") returned 1 [0164.719] wcscmp (_String1="rtf_alignright.gif", _String2="..") returned 1 [0164.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65950 [0164.719] wcscpy (in: _Dest=0x3e65950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.719] wcscat (in: _Dest=0x3e65950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.720] wcscat (in: _Dest=0x3e65950, _Source="rtf_alignright.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" [0164.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb4 [0164.721] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0164.721] wcscmp (_String1="rtf_bullets.gif", _String2=".") returned 1 [0164.721] wcscmp (_String1="rtf_bullets.gif", _String2="..") returned 1 [0164.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1c668 [0164.721] wcscpy (in: _Dest=0x3e1c668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.721] wcscat (in: _Dest=0x3e1c668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.721] wcscat (in: _Dest=0x3e1c668, _Source="rtf_bullets.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" [0164.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb0 [0164.722] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0164.722] wcscmp (_String1="rtf_center.gif", _String2=".") returned 1 [0164.722] wcscmp (_String1="rtf_center.gif", _String2="..") returned 1 [0164.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c4c8 [0164.722] wcscpy (in: _Dest=0x3e1c4c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.722] wcscat (in: _Dest=0x3e1c4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.722] wcscat (in: _Dest=0x3e1c4c8, _Source="rtf_center.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" [0164.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cac [0164.723] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5669c00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5669c00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0164.723] wcscmp (_String1="rtf_choosecolor.gif", _String2=".") returned 1 [0164.723] wcscmp (_String1="rtf_choosecolor.gif", _String2="..") returned 1 [0164.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e657a0 [0164.723] wcscpy (in: _Dest=0x3e657a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.723] wcscat (in: _Dest=0x3e657a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.723] wcscat (in: _Dest=0x3e657a0, _Source="rtf_choosecolor.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" [0164.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e657a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0164.725] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0164.725] wcscmp (_String1="rtf_decreaseindent.gif", _String2=".") returned 1 [0164.725] wcscmp (_String1="rtf_decreaseindent.gif", _String2="..") returned 1 [0164.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9608 [0164.725] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0164.725] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0164.725] wcscat (in: _Dest=0x2c9608, _Source="rtf_decreaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" [0164.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae4 [0165.457] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="RTF_HY~1.GIF")) returned 1 [0165.457] wcscmp (_String1="rtf_hyperlink.gif", _String2=".") returned 1 [0165.457] wcscmp (_String1="rtf_hyperlink.gif", _String2="..") returned 1 [0165.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81eb8d0 [0165.457] wcscpy (in: _Dest=0x81eb8d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0165.457] wcscat (in: _Dest=0x81eb8d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0165.457] wcscat (in: _Dest=0x81eb8d0, _Source="rtf_hyperlink.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" [0166.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b74 [0166.637] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0166.637] wcscmp (_String1="rtf_increaseindent.gif", _String2=".") returned 1 [0166.637] wcscmp (_String1="rtf_increaseindent.gif", _String2="..") returned 1 [0166.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81ea6e8 [0166.637] wcscpy (in: _Dest=0x81ea6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0166.637] wcscat (in: _Dest=0x81ea6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0166.637] wcscat (in: _Dest=0x81ea6e8, _Source="rtf_increaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" [0166.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b70 [0166.638] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0166.638] wcscmp (_String1="rtf_justify.gif", _String2=".") returned 1 [0166.638] wcscmp (_String1="rtf_justify.gif", _String2="..") returned 1 [0166.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81ef8b8 [0166.638] wcscpy (in: _Dest=0x81ef8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0166.638] wcscat (in: _Dest=0x81ef8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0166.638] wcscat (in: _Dest=0x81ef8b8, _Source="rtf_justify.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" [0166.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b4c [0166.641] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0166.641] wcscmp (_String1="rtf_pressed.gif", _String2=".") returned 1 [0166.641] wcscmp (_String1="rtf_pressed.gif", _String2="..") returned 1 [0166.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x81ef988 [0166.642] wcscpy (in: _Dest=0x81ef988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0166.642] wcscat (in: _Dest=0x81ef988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0166.642] wcscat (in: _Dest=0x81ef988, _Source="rtf_pressed.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" [0166.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b50 [0166.643] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedee9600, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedee9600, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0166.643] wcscmp (_String1="SAVE.GIF", _String2=".") returned 1 [0166.643] wcscmp (_String1="SAVE.GIF", _String2="..") returned 1 [0166.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0166.643] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0166.643] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0166.643] wcscat (in: _Dest=0x3336a8, _Source="SAVE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" [0166.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b38 [0166.644] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca87b00, ftCreationTime.dwHighDateTime=0x1ca40ef, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbca87b00, ftLastWriteTime.dwHighDateTime=0x1ca40ef, nFileSizeHigh=0x0, nFileSizeLow=0x15162, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0166.644] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0166.645] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0166.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d71a0 [0166.645] wcscpy (in: _Dest=0x81d71a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0166.645] wcscat (in: _Dest=0x81d71a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0166.645] wcscat (in: _Dest=0x81d71a0, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" [0166.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d71a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0166.646] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xefe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0166.646] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0166.646] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0166.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81ec578 [0166.646] wcscpy (in: _Dest=0x81ec578, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0166.646] wcscat (in: _Dest=0x81ec578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0166.646] wcscat (in: _Dest=0x81ec578, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" [0166.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x242c [0166.647] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e91100, ftCreationTime.dwHighDateTime=0x1ca03b6, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8e91100, ftLastWriteTime.dwHighDateTime=0x1ca03b6, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0166.647] wcscmp (_String1="validation.js", _String2=".") returned 1 [0166.647] wcscmp (_String1="validation.js", _String2="..") returned 1 [0166.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81efa58 [0166.647] wcscpy (in: _Dest=0x81efa58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0166.647] wcscat (in: _Dest=0x81efa58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0166.647] wcscat (in: _Dest=0x81efa58, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" [0166.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efa58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0166.649] FindNextFileW (in: hFindFile=0x3e55688, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e91100, ftCreationTime.dwHighDateTime=0x1ca03b6, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8e91100, ftLastWriteTime.dwHighDateTime=0x1ca03b6, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 0 [0167.388] FindClose (in: hFindFile=0x3e55688 | out: hFindFile=0x3e55688) returned 1 [0169.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0aac8) returned 1 [0169.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41258) returned 1 [0169.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2453 os_tid = 0x21dc [0155.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81d6070 [0155.008] wcscpy (in: _Dest=0x81d6070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0155.009] wcscat (in: _Dest=0x81d6070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0155.009] wcscat (in: _Dest=0x81d6070, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*" [0155.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0ad30 [0155.009] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f2d8f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0161.330] wcscmp (_String1=".", _String2=".") returned 0 [0161.330] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f2d8f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.339] wcscmp (_String1="..", _String2=".") returned 1 [0161.339] wcscmp (_String1="..", _String2="..") returned 0 [0161.339] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIcon.jpg", cAlternateFileName="BRIEFC~1.JPG")) returned 1 [0161.339] wcscmp (_String1="BriefcaseIcon.jpg", _String2=".") returned 1 [0161.339] wcscmp (_String1="BriefcaseIcon.jpg", _String2="..") returned 1 [0161.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39dc8 [0161.339] wcscpy (in: _Dest=0x3e39dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0161.339] wcscat (in: _Dest=0x3e39dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0161.339] wcscat (in: _Dest=0x3e39dc8, _Source="BriefcaseIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" [0165.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a8 [0165.929] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIconMask.bmp", cAlternateFileName="BRIEFC~1.BMP")) returned 1 [0165.929] wcscmp (_String1="BriefcaseIconMask.bmp", _String2=".") returned 1 [0165.929] wcscmp (_String1="BriefcaseIconMask.bmp", _String2="..") returned 1 [0165.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80209c0 [0165.929] wcscpy (in: _Dest=0x80209c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.929] wcscat (in: _Dest=0x80209c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.929] wcscat (in: _Dest=0x80209c0, _Source="BriefcaseIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" [0165.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80209c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f4 [0165.930] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIcons.jpg", cAlternateFileName="CIRCLE~1.JPG")) returned 1 [0165.930] wcscmp (_String1="CircleIcons.jpg", _String2=".") returned 1 [0165.930] wcscmp (_String1="CircleIcons.jpg", _String2="..") returned 1 [0165.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81e9fe8 [0165.930] wcscpy (in: _Dest=0x81e9fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.930] wcscat (in: _Dest=0x81e9fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.930] wcscat (in: _Dest=0x81e9fe8, _Source="CircleIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" [0165.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f0 [0165.931] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x114c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIconsMask.bmp", cAlternateFileName="CIRCLE~1.BMP")) returned 1 [0165.931] wcscmp (_String1="CircleIconsMask.bmp", _String2=".") returned 1 [0165.931] wcscmp (_String1="CircleIconsMask.bmp", _String2="..") returned 1 [0165.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3a7c0 [0165.931] wcscpy (in: _Dest=0x3e3a7c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.932] wcscat (in: _Dest=0x3e3a7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.932] wcscat (in: _Dest=0x3e3a7c0, _Source="CircleIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" [0165.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ec [0165.933] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d18e430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x26ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIcon.jpg", cAlternateFileName="MEETIN~1.JPG")) returned 1 [0165.933] wcscmp (_String1="MeetingIcon.jpg", _String2=".") returned 1 [0165.933] wcscmp (_String1="MeetingIcon.jpg", _String2="..") returned 1 [0165.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81ea0c8 [0165.933] wcscpy (in: _Dest=0x81ea0c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.933] wcscat (in: _Dest=0x81ea0c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.933] wcscat (in: _Dest=0x81ea0c8, _Source="MeetingIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" [0165.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea0c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e8 [0165.934] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d18e430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIconMask.bmp", cAlternateFileName="MEETIN~1.BMP")) returned 1 [0165.934] wcscmp (_String1="MeetingIconMask.bmp", _String2=".") returned 1 [0165.934] wcscmp (_String1="MeetingIconMask.bmp", _String2="..") returned 1 [0165.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b640 [0165.934] wcscpy (in: _Dest=0x3e3b640, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.934] wcscat (in: _Dest=0x3e3b640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.934] wcscat (in: _Dest=0x3e3b640, _Source="MeetingIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" [0165.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e4 [0165.935] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x19e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIcons.jpg", cAlternateFileName="PROJEC~1.JPG")) returned 1 [0165.935] wcscmp (_String1="ProjectStatusIcons.jpg", _String2=".") returned 1 [0165.935] wcscmp (_String1="ProjectStatusIcons.jpg", _String2="..") returned 1 [0165.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x80208d0 [0165.935] wcscpy (in: _Dest=0x80208d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.935] wcscat (in: _Dest=0x80208d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.935] wcscat (in: _Dest=0x80208d0, _Source="ProjectStatusIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" [0165.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80208d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e0 [0165.936] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIconsMask.bmp", cAlternateFileName="PROJEC~2.BMP")) returned 1 [0165.937] wcscmp (_String1="ProjectStatusIconsMask.bmp", _String2=".") returned 1 [0165.937] wcscmp (_String1="ProjectStatusIconsMask.bmp", _String2="..") returned 1 [0165.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dade18 [0165.937] wcscpy (in: _Dest=0x3dade18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.937] wcscat (in: _Dest=0x3dade18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.937] wcscat (in: _Dest=0x3dade18, _Source="ProjectStatusIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" [0165.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dade18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27dc [0165.938] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIcon.jpg", cAlternateFileName="PROJEC~2.JPG")) returned 1 [0165.938] wcscmp (_String1="ProjectTaskIcon.jpg", _String2=".") returned 1 [0165.938] wcscmp (_String1="ProjectTaskIcon.jpg", _String2="..") returned 1 [0165.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b728 [0165.938] wcscpy (in: _Dest=0x3e3b728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.938] wcscat (in: _Dest=0x3e3b728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.938] wcscat (in: _Dest=0x3e3b728, _Source="ProjectTaskIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" [0165.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d8 [0165.939] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIconMask.bmp", cAlternateFileName="PROJEC~3.BMP")) returned 1 [0165.939] wcscmp (_String1="ProjectTaskIconMask.bmp", _String2=".") returned 1 [0165.939] wcscmp (_String1="ProjectTaskIconMask.bmp", _String2="..") returned 1 [0165.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8021320 [0165.939] wcscpy (in: _Dest=0x8021320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.939] wcscat (in: _Dest=0x8021320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.939] wcscat (in: _Dest=0x8021320, _Source="ProjectTaskIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" [0165.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d4 [0165.940] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77168d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTool", cAlternateFileName="PROJEC~1")) returned 1 [0165.940] wcscmp (_String1="ProjectTool", _String2=".") returned 1 [0165.940] wcscmp (_String1="ProjectTool", _String2="..") returned 1 [0165.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81eb9a8 [0165.940] wcscpy (in: _Dest=0x81eb9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.940] wcscat (in: _Dest=0x81eb9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.940] wcscat (in: _Dest=0x81eb9a8, _Source="ProjectTool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" [0165.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81eb9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d0 [0165.941] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImages.jpg", cAlternateFileName="PROJEC~3.JPG")) returned 1 [0165.941] wcscmp (_String1="ProjectToolsetIconImages.jpg", _String2=".") returned 1 [0165.941] wcscmp (_String1="ProjectToolsetIconImages.jpg", _String2="..") returned 1 [0165.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadf10 [0165.941] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.941] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.941] wcscat (in: _Dest=0x3dadf10, _Source="ProjectToolsetIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" [0165.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27cc [0165.942] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2338, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImagesMask.bmp", cAlternateFileName="PROJEC~1.BMP")) returned 1 [0165.942] wcscmp (_String1="ProjectToolsetIconImagesMask.bmp", _String2=".") returned 1 [0165.942] wcscmp (_String1="ProjectToolsetIconImagesMask.bmp", _String2="..") returned 1 [0165.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e25140 [0165.943] wcscpy (in: _Dest=0x3e25140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.943] wcscat (in: _Dest=0x3e25140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.943] wcscat (in: _Dest=0x3e25140, _Source="ProjectToolsetIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" [0165.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e25140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c8 [0165.943] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImage.jpg", cAlternateFileName="SPLASH~1.JPG")) returned 1 [0165.944] wcscmp (_String1="SplashImage.jpg", _String2=".") returned 1 [0165.944] wcscmp (_String1="SplashImage.jpg", _String2="..") returned 1 [0165.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81ea1a8 [0165.944] wcscpy (in: _Dest=0x81ea1a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.944] wcscat (in: _Dest=0x81ea1a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.944] wcscat (in: _Dest=0x81ea1a8, _Source="SplashImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" [0165.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c4 [0165.945] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImageMask.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0165.945] wcscmp (_String1="SplashImageMask.bmp", _String2=".") returned 1 [0165.945] wcscmp (_String1="SplashImageMask.bmp", _String2="..") returned 1 [0165.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b810 [0165.945] wcscpy (in: _Dest=0x3e3b810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.945] wcscat (in: _Dest=0x3e3b810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.945] wcscat (in: _Dest=0x3e3b810, _Source="SplashImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" [0165.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0165.946] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABMASK.BMP", cAlternateFileName="")) returned 1 [0165.946] wcscmp (_String1="TABMASK.BMP", _String2=".") returned 1 [0165.946] wcscmp (_String1="TABMASK.BMP", _String2="..") returned 1 [0165.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81eba80 [0165.946] wcscpy (in: _Dest=0x81eba80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.946] wcscat (in: _Dest=0x81eba80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.946] wcscat (in: _Dest=0x81eba80, _Source="TABMASK.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" [0165.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eba80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0165.947] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABOFF.JPG", cAlternateFileName="")) returned 1 [0165.947] wcscmp (_String1="TABOFF.JPG", _String2=".") returned 1 [0165.947] wcscmp (_String1="TABOFF.JPG", _String2="..") returned 1 [0165.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81ebb58 [0165.947] wcscpy (in: _Dest=0x81ebb58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.947] wcscat (in: _Dest=0x81ebb58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.947] wcscat (in: _Dest=0x81ebb58, _Source="TABOFF.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" [0165.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0165.948] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABON.JPG", cAlternateFileName="")) returned 1 [0165.948] wcscmp (_String1="TABON.JPG", _String2=".") returned 1 [0165.948] wcscmp (_String1="TABON.JPG", _String2="..") returned 1 [0165.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81ebc30 [0165.948] wcscpy (in: _Dest=0x81ebc30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.948] wcscat (in: _Dest=0x81ebc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.948] wcscat (in: _Dest=0x81ebc30, _Source="TABON.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" [0165.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b8 [0165.949] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHITEBOX.JPG", cAlternateFileName="")) returned 1 [0165.949] wcscmp (_String1="WHITEBOX.JPG", _String2=".") returned 1 [0165.949] wcscmp (_String1="WHITEBOX.JPG", _String2="..") returned 1 [0165.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81ebd08 [0165.950] wcscpy (in: _Dest=0x81ebd08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.950] wcscat (in: _Dest=0x81ebd08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.950] wcscat (in: _Dest=0x81ebd08, _Source="WHITEBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" [0165.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b4 [0165.951] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteboxMask.bmp", cAlternateFileName="WHITEB~1.BMP")) returned 1 [0165.951] wcscmp (_String1="WhiteboxMask.bmp", _String2=".") returned 1 [0165.951] wcscmp (_String1="WhiteboxMask.bmp", _String2="..") returned 1 [0165.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81ea288 [0165.951] wcscpy (in: _Dest=0x81ea288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.951] wcscat (in: _Dest=0x81ea288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.951] wcscat (in: _Dest=0x81ea288, _Source="WhiteboxMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" [0165.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b0 [0165.952] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1e0300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c1e0300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIcons.jpg", cAlternateFileName="ZOOMIC~1.JPG")) returned 1 [0165.952] wcscmp (_String1="ZoomIcons.jpg", _String2=".") returned 1 [0165.952] wcscmp (_String1="ZoomIcons.jpg", _String2="..") returned 1 [0165.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81ea368 [0165.952] wcscpy (in: _Dest=0x81ea368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.952] wcscat (in: _Dest=0x81ea368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.952] wcscat (in: _Dest=0x81ea368, _Source="ZoomIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" [0165.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ea368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ac [0165.953] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1e0300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c1e0300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 1 [0165.954] wcscmp (_String1="ZoomIconsMask.bmp", _String2=".") returned 1 [0165.954] wcscmp (_String1="ZoomIconsMask.bmp", _String2="..") returned 1 [0165.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3b8f8 [0165.954] wcscpy (in: _Dest=0x3e3b8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0165.954] wcscat (in: _Dest=0x3e3b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0165.954] wcscat (in: _Dest=0x3e3b8f8, _Source="ZoomIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" [0165.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a8 [0165.955] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1e0300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c1e0300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 0 [0165.955] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0165.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0ad30) returned 1 [0165.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6070) returned 1 [0165.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 2454 os_tid = 0x21e0 [0155.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d41310 [0155.009] wcscpy (in: _Dest=0x3d41310, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0155.009] wcscat (in: _Dest=0x3d41310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\" [0155.009] wcscat (in: _Dest=0x3d41310, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*" [0155.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0af98 [0155.009] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0158.442] wcscmp (_String1=".", _String2=".") returned 0 [0158.442] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.442] wcscmp (_String1="..", _String2=".") returned 1 [0158.442] wcscmp (_String1="..", _String2="..") returned 0 [0158.442] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e2b700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e1f6f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50e2b700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImages.jpg", cAlternateFileName="ICONIM~1.JPG")) returned 1 [0158.442] wcscmp (_String1="IconImages.jpg", _String2=".") returned 1 [0158.442] wcscmp (_String1="IconImages.jpg", _String2="..") returned 1 [0158.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c668 [0158.442] wcscpy (in: _Dest=0x3e1c668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0158.442] wcscat (in: _Dest=0x3e1c668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\" [0158.442] wcscat (in: _Dest=0x3e1c668, _Source="IconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" [0159.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg")) returned 0x20 [0159.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", dwFileAttributes=0x20) returned 0 [0159.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.849] GetLastError () returned 0x5 [0159.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", dwFileAttributes=0x20) returned 0 [0159.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c668) returned 1 [0159.850] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 1 [0159.850] wcscmp (_String1="IconImagesMask.bmp", _String2=".") returned 1 [0159.850] wcscmp (_String1="IconImagesMask.bmp", _String2="..") returned 1 [0159.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65a28 [0159.850] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0159.850] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\" [0159.850] wcscat (in: _Dest=0x3e65a28, _Source="IconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" [0159.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp")) returned 0x20 [0159.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0159.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.866] GetLastError () returned 0x5 [0159.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0159.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 [0159.866] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 0 [0159.866] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0159.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0af98) returned 1 [0159.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41310) returned 1 [0159.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 2455 os_tid = 0x21e4 [0155.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819c078 [0155.010] wcscpy (in: _Dest=0x819c078, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0155.010] wcscat (in: _Dest=0x819c078, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0155.010] wcscat (in: _Dest=0x819c078, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*" [0155.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efdec0 [0155.010] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a48 [0155.392] wcscmp (_String1=".", _String2=".") returned 0 [0155.392] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.392] wcscmp (_String1="..", _String2=".") returned 1 [0155.392] wcscmp (_String1="..", _String2="..") returned 0 [0155.392] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb848fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x7bb848fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x7bb848fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.APL", cAlternateFileName="")) returned 1 [0155.392] wcscmp (_String1="M1033DSK.APL", _String2=".") returned 1 [0155.392] wcscmp (_String1="M1033DSK.APL", _String2="..") returned 1 [0155.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41818 [0155.392] wcscpy (in: _Dest=0x3d41818, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0155.392] wcscat (in: _Dest=0x3d41818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0155.392] wcscat (in: _Dest=0x3d41818, _Source="M1033DSK.APL" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" [0159.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl")) returned 0x20 [0159.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL", dwFileAttributes=0x20) returned 0 [0159.625] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.625] GetLastError () returned 0x5 [0159.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL", dwFileAttributes=0x20) returned 0 [0159.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41818) returned 1 [0159.626] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7650f9d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7650f9d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7bc1ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x764f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CRT", cAlternateFileName="")) returned 1 [0159.626] wcscmp (_String1="M1033DSK.CRT", _String2=".") returned 1 [0159.626] wcscmp (_String1="M1033DSK.CRT", _String2="..") returned 1 [0159.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41818 [0159.626] wcscpy (in: _Dest=0x3d41818, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0159.626] wcscat (in: _Dest=0x3d41818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0159.626] wcscat (in: _Dest=0x3d41818, _Source="M1033DSK.CRT" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" [0159.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt")) returned 0x20 [0159.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", dwFileAttributes=0x20) returned 0 [0159.652] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.653] GetLastError () returned 0x5 [0159.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", dwFileAttributes=0x20) returned 0 [0159.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41818) returned 1 [0159.653] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77357d7, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc77357d7, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c84ff3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c6aed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CSD", cAlternateFileName="")) returned 1 [0159.654] wcscmp (_String1="M1033DSK.CSD", _String2=".") returned 1 [0159.654] wcscmp (_String1="M1033DSK.CSD", _String2="..") returned 1 [0159.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41818 [0159.654] wcscpy (in: _Dest=0x3d41818, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0159.654] wcscat (in: _Dest=0x3d41818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0159.654] wcscat (in: _Dest=0x3d41818, _Source="M1033DSK.CSD" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" [0159.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd")) returned 0x20 [0159.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD", dwFileAttributes=0x20) returned 0 [0159.654] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.654] GetLastError () returned 0x5 [0159.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD", dwFileAttributes=0x20) returned 0 [0159.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41818) returned 1 [0159.655] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9b2cc, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7d9b2cc, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c93477c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2059c, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.IDX", cAlternateFileName="")) returned 1 [0159.655] wcscmp (_String1="M1033DSK.IDX", _String2=".") returned 1 [0159.655] wcscmp (_String1="M1033DSK.IDX", _String2="..") returned 1 [0159.655] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e0d6e9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7e0d6e9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7da2a43c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe3770, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.LTS", cAlternateFileName="")) returned 1 [0159.655] wcscmp (_String1="M1033DSK.LTS", _String2=".") returned 1 [0159.655] wcscmp (_String1="M1033DSK.LTS", _String2="..") returned 1 [0159.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41818 [0159.655] wcscpy (in: _Dest=0x3d41818, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0159.655] wcscat (in: _Dest=0x3d41818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0159.655] wcscat (in: _Dest=0x3d41818, _Source="M1033DSK.LTS" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" [0159.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts")) returned 0x20 [0159.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS", dwFileAttributes=0x20) returned 0 [0159.655] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.656] GetLastError () returned 0x5 [0159.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS", dwFileAttributes=0x20) returned 0 [0159.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41818) returned 1 [0159.656] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8a49f, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7f8a49f, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dc3f77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2515b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.TTS", cAlternateFileName="")) returned 1 [0159.656] wcscmp (_String1="M1033DSK.TTS", _String2=".") returned 1 [0159.656] wcscmp (_String1="M1033DSK.TTS", _String2="..") returned 1 [0159.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41818 [0159.656] wcscpy (in: _Dest=0x3d41818, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0159.656] wcscat (in: _Dest=0x3d41818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0159.656] wcscat (in: _Dest=0x3d41818, _Source="M1033DSK.TTS" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" [0159.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts")) returned 0x20 [0159.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS", dwFileAttributes=0x20) returned 0 [0159.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.715] GetLastError () returned 0x5 [0159.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS", dwFileAttributes=0x20) returned 0 [0159.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41818) returned 1 [0159.716] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc812d3b4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc812d3b4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dcfde5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UDT", cAlternateFileName="")) returned 1 [0159.716] wcscmp (_String1="M1033DSK.UDT", _String2=".") returned 1 [0159.716] wcscmp (_String1="M1033DSK.UDT", _String2="..") returned 1 [0159.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41818 [0159.716] wcscpy (in: _Dest=0x3d41818, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0159.716] wcscat (in: _Dest=0x3d41818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0159.716] wcscat (in: _Dest=0x3d41818, _Source="M1033DSK.UDT" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" [0159.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt")) returned 0x20 [0159.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT", dwFileAttributes=0x20) returned 0 [0159.717] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.717] GetLastError () returned 0x5 [0159.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT", dwFileAttributes=0x20) returned 0 [0159.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41818) returned 1 [0159.717] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8153513, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc8153513, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7df1319c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x308e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UNT", cAlternateFileName="")) returned 1 [0159.717] wcscmp (_String1="M1033DSK.UNT", _String2=".") returned 1 [0159.717] wcscmp (_String1="M1033DSK.UNT", _String2="..") returned 1 [0159.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41818 [0159.717] wcscpy (in: _Dest=0x3d41818, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0159.717] wcscat (in: _Dest=0x3d41818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0159.717] wcscat (in: _Dest=0x3d41818, _Source="M1033DSK.UNT" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" [0159.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt")) returned 0x20 [0159.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT", dwFileAttributes=0x20) returned 0 [0159.718] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.718] GetLastError () returned 0x5 [0159.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT", dwFileAttributes=0x20) returned 0 [0159.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41818) returned 1 [0159.718] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 1 [0159.718] wcscmp (_String1="M1033DSK.WIH", _String2=".") returned 1 [0159.718] wcscmp (_String1="M1033DSK.WIH", _String2="..") returned 1 [0159.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41818 [0159.718] wcscpy (in: _Dest=0x3d41818, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0159.718] wcscat (in: _Dest=0x3d41818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0159.718] wcscat (in: _Dest=0x3d41818, _Source="M1033DSK.WIH" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" [0159.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih")) returned 0x20 [0159.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH", dwFileAttributes=0x20) returned 0 [0159.719] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.719] GetLastError () returned 0x5 [0159.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH", dwFileAttributes=0x20) returned 0 [0159.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41818) returned 1 [0159.719] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3efdec0 | out: lpFindFileData=0x3efdec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 0 [0159.719] FindClose (in: hFindFile=0x3e54a48 | out: hFindFile=0x3e54a48) returned 1 [0159.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efdec0) returned 1 [0159.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c078) returned 1 [0159.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 2456 os_tid = 0x21e8 [0155.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0155.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x20) returned 0 [0155.021] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.028] GetLastError () returned 0x5 [0155.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x20) returned 0 [0155.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 Thread: id = 2457 os_tid = 0x21ec [0155.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f68 [0155.033] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0155.033] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\" [0155.033] wcscat (in: _Dest=0x2fe6f68, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\*" [0155.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe860 [0155.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x3efe860 | out: lpFindFileData=0x3efe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0161.443] wcscmp (_String1=".", _String2=".") returned 0 [0161.443] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3efe860 | out: lpFindFileData=0x3efe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.443] wcscmp (_String1="..", _String2=".") returned 1 [0161.443] wcscmp (_String1="..", _String2="..") returned 0 [0161.443] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3efe860 | out: lpFindFileData=0x3efe860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="JQS~1.CON")) returned 1 [0161.443] wcscmp (_String1="jqs.conf", _String2=".") returned 1 [0161.443] wcscmp (_String1="jqs.conf", _String2="..") returned 1 [0161.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8054bd0 [0161.443] wcscpy (in: _Dest=0x8054bd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0161.443] wcscat (in: _Dest=0x8054bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\" [0161.443] wcscat (in: _Dest=0x8054bd0, _Source="jqs.conf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" [0168.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0168.585] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3efe860 | out: lpFindFileData=0x3efe860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 1 [0168.585] wcscmp (_String1="jqsmessages.properties", _String2=".") returned 1 [0168.585] wcscmp (_String1="jqsmessages.properties", _String2="..") returned 1 [0168.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0168.585] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0168.585] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\" [0168.585] wcscat (in: _Dest=0x81de7b8, _Source="jqsmessages.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" [0168.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0168.586] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3efe860 | out: lpFindFileData=0x3efe860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 0 [0168.587] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0168.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe860) returned 1 [0168.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0168.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 Thread: id = 2458 os_tid = 0x21f0 [0155.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages.properties")) returned 0x20 [0161.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties", dwFileAttributes=0x20) returned 0 [0161.444] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.444] GetLastError () returned 0x5 [0161.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties", dwFileAttributes=0x20) returned 0 [0161.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5288) returned 1 Thread: id = 2459 os_tid = 0x21f4 [0155.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_de.properties")) returned 0x20 [0161.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x20) returned 0 [0161.446] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.446] GetLastError () returned 0x5 [0161.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x20) returned 0 [0161.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 2460 os_tid = 0x21f8 [0155.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_es.properties")) returned 0x20 [0161.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x20) returned 0 [0161.447] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.447] GetLastError () returned 0x5 [0161.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x20) returned 0 [0161.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80537d0) returned 1 Thread: id = 2461 os_tid = 0x21fc [0155.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0161.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x20) returned 0 [0161.449] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.449] GetLastError () returned 0x5 [0161.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x20) returned 0 [0161.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053748) returned 1 Thread: id = 2462 os_tid = 0x2200 [0155.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_it.properties")) returned 0x20 [0161.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x20) returned 0 [0161.450] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.451] GetLastError () returned 0x5 [0161.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x20) returned 0 [0161.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80536c0) returned 1 Thread: id = 2463 os_tid = 0x2204 [0155.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0161.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x20) returned 0 [0161.452] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.452] GetLastError () returned 0x5 [0161.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x20) returned 0 [0161.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053638) returned 1 Thread: id = 2464 os_tid = 0x2208 [0155.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0161.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x20) returned 0 [0161.454] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.454] GetLastError () returned 0x5 [0161.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x20) returned 0 [0161.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053528) returned 1 Thread: id = 2465 os_tid = 0x220c [0155.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0161.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x20) returned 0 [0161.455] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.455] GetLastError () returned 0x5 [0161.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x20) returned 0 [0161.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80535b0) returned 1 Thread: id = 2466 os_tid = 0x2210 [0155.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0161.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x20) returned 0 [0161.457] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.457] GetLastError () returned 0x5 [0161.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x20) returned 0 [0161.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054408) returned 1 Thread: id = 2467 os_tid = 0x2214 [0155.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0161.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x20) returned 0 [0161.458] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.459] GetLastError () returned 0x5 [0161.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x20) returned 0 [0161.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054490) returned 1 Thread: id = 2468 os_tid = 0x2218 [0155.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0158.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x20) returned 0 [0158.626] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.626] GetLastError () returned 0x5 [0158.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x20) returned 0 [0158.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054160) returned 1 Thread: id = 2469 os_tid = 0x221c [0155.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0157.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x20) returned 0 [0157.378] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.378] GetLastError () returned 0x5 [0157.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x20) returned 0 [0157.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8052f50) returned 1 Thread: id = 2470 os_tid = 0x2220 [0155.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\splash.gif")) returned 0x20 [0157.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif", dwFileAttributes=0x20) returned 0 [0158.627] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.627] GetLastError () returned 0x5 [0158.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif", dwFileAttributes=0x20) returned 0 [0158.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39628) returned 1 Thread: id = 2471 os_tid = 0x2224 [0155.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif")) returned 0x20 [0161.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF", dwFileAttributes=0x20) returned 0 [0161.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.549] GetLastError () returned 0x5 [0161.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF", dwFileAttributes=0x20) returned 0 [0161.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb18e8) returned 1 Thread: id = 2472 os_tid = 0x2228 [0155.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif")) returned 0x20 [0161.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF", dwFileAttributes=0x20) returned 0 [0161.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.550] GetLastError () returned 0x5 [0161.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF", dwFileAttributes=0x20) returned 0 [0161.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35880) returned 1 Thread: id = 2473 os_tid = 0x222c [0155.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif")) returned 0x20 [0161.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF", dwFileAttributes=0x20) returned 0 [0161.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.545] GetLastError () returned 0x5 [0161.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF", dwFileAttributes=0x20) returned 0 [0161.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2818) returned 1 Thread: id = 2474 os_tid = 0x2230 [0155.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif")) returned 0x20 [0161.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF", dwFileAttributes=0x20) returned 0 [0161.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.552] GetLastError () returned 0x5 [0161.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF", dwFileAttributes=0x20) returned 0 [0161.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb25d8) returned 1 Thread: id = 2475 os_tid = 0x2234 [0155.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif")) returned 0x20 [0161.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF", dwFileAttributes=0x20) returned 0 [0161.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.547] GetLastError () returned 0x5 [0161.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF", dwFileAttributes=0x20) returned 0 [0161.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2548) returned 1 Thread: id = 2476 os_tid = 0x2238 [0155.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif")) returned 0x20 [0161.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF", dwFileAttributes=0x20) returned 0 [0161.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.554] GetLastError () returned 0x5 [0161.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF", dwFileAttributes=0x20) returned 0 [0161.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb24b8) returned 1 Thread: id = 2477 os_tid = 0x223c [0155.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif")) returned 0x20 [0161.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF", dwFileAttributes=0x20) returned 0 [0161.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.555] GetLastError () returned 0x5 [0161.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF", dwFileAttributes=0x20) returned 0 [0161.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2398) returned 1 Thread: id = 2478 os_tid = 0x2240 [0155.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg")) returned 0x20 [0165.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x20) returned 0 [0165.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.563] GetLastError () returned 0x5 [0165.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x20) returned 0 [0165.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb03d8) returned 1 Thread: id = 2479 os_tid = 0x2244 [0155.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg")) returned 0x20 [0165.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0165.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.562] GetLastError () returned 0x5 [0165.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0165.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d406d8) returned 1 Thread: id = 2480 os_tid = 0x2248 [0155.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg")) returned 0x20 [0165.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0165.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.581] GetLastError () returned 0x5 [0165.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0165.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40620) returned 1 Thread: id = 2481 os_tid = 0x224c [0155.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg")) returned 0x20 [0165.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0165.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.580] GetLastError () returned 0x5 [0165.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0165.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 2482 os_tid = 0x2250 [0155.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg")) returned 0x20 [0165.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0165.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.561] GetLastError () returned 0x5 [0165.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0165.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186d88) returned 1 Thread: id = 2483 os_tid = 0x2254 [0155.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp")) returned 0x20 [0165.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x20) returned 0 [0165.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.559] GetLastError () returned 0x5 [0165.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x20) returned 0 [0165.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 2484 os_tid = 0x2258 [0155.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp")) returned 0x20 [0165.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x20) returned 0 [0165.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.558] GetLastError () returned 0x5 [0165.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x20) returned 0 [0165.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 Thread: id = 2485 os_tid = 0x225c [0155.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg")) returned 0x20 [0165.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.578] GetLastError () returned 0x5 [0165.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c98) returned 1 Thread: id = 2486 os_tid = 0x2260 [0155.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp")) returned 0x20 [0165.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.557] GetLastError () returned 0x5 [0165.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 2487 os_tid = 0x2264 [0155.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg")) returned 0x20 [0165.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.615] GetLastError () returned 0x5 [0165.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 Thread: id = 2488 os_tid = 0x2268 [0155.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp")) returned 0x20 [0165.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.600] GetLastError () returned 0x5 [0165.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40d50) returned 1 Thread: id = 2489 os_tid = 0x226c [0155.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg")) returned 0x20 [0165.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.599] GetLastError () returned 0x5 [0165.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40e08) returned 1 Thread: id = 2490 os_tid = 0x2270 [0155.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp")) returned 0x20 [0165.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.612] GetLastError () returned 0x5 [0165.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333ee8) returned 1 Thread: id = 2491 os_tid = 0x2274 [0155.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg")) returned 0x20 [0165.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x20) returned 0 [0165.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.583] GetLastError () returned 0x5 [0165.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x20) returned 0 [0165.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c2f8) returned 1 Thread: id = 2492 os_tid = 0x2278 [0155.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp")) returned 0x20 [0165.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x20) returned 0 [0165.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.591] GetLastError () returned 0x5 [0165.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x20) returned 0 [0165.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186e30) returned 1 Thread: id = 2493 os_tid = 0x227c [0155.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg")) returned 0x20 [0165.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x20) returned 0 [0165.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.614] GetLastError () returned 0x5 [0165.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x20) returned 0 [0165.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eafa38) returned 1 Thread: id = 2494 os_tid = 0x2280 [0155.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp")) returned 0x20 [0165.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.573] GetLastError () returned 0x5 [0165.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ec0) returned 1 Thread: id = 2495 os_tid = 0x2284 [0155.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg")) returned 0x20 [0165.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0165.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.571] GetLastError () returned 0x5 [0165.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0165.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaefe8) returned 1 Thread: id = 2496 os_tid = 0x2288 [0155.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp")) returned 0x20 [0165.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.570] GetLastError () returned 0x5 [0165.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f78) returned 1 Thread: id = 2497 os_tid = 0x228c [0155.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp")) returned 0x20 [0165.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp", dwFileAttributes=0x20) returned 0 [0165.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.569] GetLastError () returned 0x5 [0165.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp", dwFileAttributes=0x20) returned 0 [0165.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ae8) returned 1 Thread: id = 2498 os_tid = 0x2290 [0155.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg")) returned 0x20 [0165.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg", dwFileAttributes=0x20) returned 0 [0165.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.568] GetLastError () returned 0x5 [0165.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg", dwFileAttributes=0x20) returned 0 [0165.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187610) returned 1 Thread: id = 2499 os_tid = 0x2294 [0155.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp")) returned 0x20 [0165.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp", dwFileAttributes=0x20) returned 0 [0165.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.566] GetLastError () returned 0x5 [0165.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp", dwFileAttributes=0x20) returned 0 [0165.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaffb8) returned 1 Thread: id = 2500 os_tid = 0x2298 [0155.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg")) returned 0x20 [0165.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x20) returned 0 [0165.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.555] GetLastError () returned 0x5 [0165.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x20) returned 0 [0165.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0458) returned 1 Thread: id = 2501 os_tid = 0x229c [0155.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp")) returned 0x20 [0165.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp", dwFileAttributes=0x20) returned 0 [0165.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.590] GetLastError () returned 0x5 [0165.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp", dwFileAttributes=0x20) returned 0 [0165.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c258) returned 1 Thread: id = 2502 os_tid = 0x22a0 [0155.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp")) returned 0x20 [0165.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp", dwFileAttributes=0x20) returned 0 [0165.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.588] GetLastError () returned 0x5 [0165.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp", dwFileAttributes=0x20) returned 0 [0165.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 2503 os_tid = 0x22a4 [0155.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp")) returned 0x20 [0165.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp", dwFileAttributes=0x20) returned 0 [0165.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.586] GetLastError () returned 0x5 [0165.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp", dwFileAttributes=0x20) returned 0 [0165.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d57d8) returned 1 Thread: id = 2504 os_tid = 0x22a8 [0155.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg")) returned 0x20 [0165.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg", dwFileAttributes=0x20) returned 0 [0165.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.565] GetLastError () returned 0x5 [0165.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg", dwFileAttributes=0x20) returned 0 [0165.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a778) returned 1 Thread: id = 2505 os_tid = 0x22ac [0155.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp")) returned 0x20 [0165.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp", dwFileAttributes=0x20) returned 0 [0165.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.585] GetLastError () returned 0x5 [0165.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp", dwFileAttributes=0x20) returned 0 [0165.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81876b8) returned 1 Thread: id = 2506 os_tid = 0x22b0 [0155.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf")) returned 0x20 [0162.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF", dwFileAttributes=0x20) returned 0 [0162.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.544] GetLastError () returned 0x5 [0162.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF", dwFileAttributes=0x20) returned 0 [0162.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 2507 os_tid = 0x22b4 [0155.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf")) returned 0x20 [0162.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF", dwFileAttributes=0x20) returned 0 [0162.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.542] GetLastError () returned 0x5 [0162.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF", dwFileAttributes=0x20) returned 0 [0162.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053280) returned 1 Thread: id = 2508 os_tid = 0x22b8 [0155.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf")) returned 0x20 [0162.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF", dwFileAttributes=0x20) returned 0 [0162.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.540] GetLastError () returned 0x5 [0162.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF", dwFileAttributes=0x20) returned 0 [0162.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053da8) returned 1 Thread: id = 2509 os_tid = 0x22bc [0155.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf")) returned 0x20 [0162.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF", dwFileAttributes=0x20) returned 0 [0162.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.595] GetLastError () returned 0x5 [0162.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF", dwFileAttributes=0x20) returned 0 [0162.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053390) returned 1 Thread: id = 2510 os_tid = 0x22c0 [0155.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf")) returned 0x20 [0162.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF", dwFileAttributes=0x20) returned 0 [0162.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.594] GetLastError () returned 0x5 [0162.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF", dwFileAttributes=0x20) returned 0 [0162.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 2511 os_tid = 0x22c4 [0155.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf")) returned 0x20 [0162.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF", dwFileAttributes=0x20) returned 0 [0162.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.592] GetLastError () returned 0x5 [0162.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF", dwFileAttributes=0x20) returned 0 [0162.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 2512 os_tid = 0x22c8 [0155.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf")) returned 0x20 [0162.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF", dwFileAttributes=0x20) returned 0 [0162.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.590] GetLastError () returned 0x5 [0162.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF", dwFileAttributes=0x20) returned 0 [0162.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 2513 os_tid = 0x22cc [0155.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif")) returned 0x20 [0162.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF", dwFileAttributes=0x20) returned 0 [0162.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.589] GetLastError () returned 0x5 [0162.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF", dwFileAttributes=0x20) returned 0 [0162.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 2514 os_tid = 0x22d0 [0155.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg")) returned 0x20 [0162.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG", dwFileAttributes=0x20) returned 0 [0162.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.588] GetLastError () returned 0x5 [0162.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG", dwFileAttributes=0x20) returned 0 [0162.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 2515 os_tid = 0x22d4 [0155.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf")) returned 0x20 [0162.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF", dwFileAttributes=0x20) returned 0 [0162.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.586] GetLastError () returned 0x5 [0162.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF", dwFileAttributes=0x20) returned 0 [0162.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 2516 os_tid = 0x22d8 [0155.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf")) returned 0x20 [0162.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF", dwFileAttributes=0x20) returned 0 [0162.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.584] GetLastError () returned 0x5 [0162.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF", dwFileAttributes=0x20) returned 0 [0162.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 2517 os_tid = 0x22dc [0155.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf")) returned 0x20 [0162.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF", dwFileAttributes=0x20) returned 0 [0162.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.583] GetLastError () returned 0x5 [0162.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF", dwFileAttributes=0x20) returned 0 [0162.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a5f8) returned 1 Thread: id = 2518 os_tid = 0x22e0 [0155.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf")) returned 0x20 [0162.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF", dwFileAttributes=0x20) returned 0 [0162.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.581] GetLastError () returned 0x5 [0162.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF", dwFileAttributes=0x20) returned 0 [0162.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a708) returned 1 Thread: id = 2519 os_tid = 0x22e4 [0155.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf")) returned 0x20 [0162.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF", dwFileAttributes=0x20) returned 0 [0162.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.580] GetLastError () returned 0x5 [0162.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF", dwFileAttributes=0x20) returned 0 [0162.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 2520 os_tid = 0x22e8 [0155.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf")) returned 0x20 [0162.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF", dwFileAttributes=0x20) returned 0 [0162.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.578] GetLastError () returned 0x5 [0162.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF", dwFileAttributes=0x20) returned 0 [0162.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 2521 os_tid = 0x22ec [0155.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf")) returned 0x20 [0162.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF", dwFileAttributes=0x20) returned 0 [0162.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.577] GetLastError () returned 0x5 [0162.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF", dwFileAttributes=0x20) returned 0 [0162.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2458) returned 1 Thread: id = 2522 os_tid = 0x22f0 [0155.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf")) returned 0x20 [0162.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF", dwFileAttributes=0x20) returned 0 [0162.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.575] GetLastError () returned 0x5 [0162.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF", dwFileAttributes=0x20) returned 0 [0162.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d24e0) returned 1 Thread: id = 2523 os_tid = 0x22f4 [0155.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf")) returned 0x20 [0162.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF", dwFileAttributes=0x20) returned 0 [0162.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.573] GetLastError () returned 0x5 [0162.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF", dwFileAttributes=0x20) returned 0 [0162.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2568) returned 1 Thread: id = 2524 os_tid = 0x22f8 [0155.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf")) returned 0x20 [0162.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF", dwFileAttributes=0x20) returned 0 [0162.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.572] GetLastError () returned 0x5 [0162.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF", dwFileAttributes=0x20) returned 0 [0162.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d25f0) returned 1 Thread: id = 2525 os_tid = 0x22fc [0155.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf")) returned 0x20 [0162.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF", dwFileAttributes=0x20) returned 0 [0162.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.566] GetLastError () returned 0x5 [0162.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF", dwFileAttributes=0x20) returned 0 [0162.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2678) returned 1 Thread: id = 2526 os_tid = 0x2300 [0155.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf")) returned 0x20 [0162.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF", dwFileAttributes=0x20) returned 0 [0162.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.565] GetLastError () returned 0x5 [0162.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF", dwFileAttributes=0x20) returned 0 [0162.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2700) returned 1 Thread: id = 2527 os_tid = 0x2304 [0155.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf")) returned 0x20 [0162.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF", dwFileAttributes=0x20) returned 0 [0162.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.563] GetLastError () returned 0x5 [0162.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF", dwFileAttributes=0x20) returned 0 [0162.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2788) returned 1 Thread: id = 2528 os_tid = 0x2308 [0155.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf")) returned 0x20 [0162.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF", dwFileAttributes=0x20) returned 0 [0162.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.562] GetLastError () returned 0x5 [0162.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF", dwFileAttributes=0x20) returned 0 [0162.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2810) returned 1 Thread: id = 2529 os_tid = 0x230c [0155.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf")) returned 0x20 [0162.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF", dwFileAttributes=0x20) returned 0 [0162.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.555] GetLastError () returned 0x5 [0162.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF", dwFileAttributes=0x20) returned 0 [0162.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2898) returned 1 Thread: id = 2530 os_tid = 0x2310 [0155.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf")) returned 0x20 [0162.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF", dwFileAttributes=0x20) returned 0 [0162.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.553] GetLastError () returned 0x5 [0162.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF", dwFileAttributes=0x20) returned 0 [0162.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2920) returned 1 Thread: id = 2531 os_tid = 0x2314 [0155.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf")) returned 0x20 [0162.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF", dwFileAttributes=0x20) returned 0 [0162.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.624] GetLastError () returned 0x5 [0162.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF", dwFileAttributes=0x20) returned 0 [0162.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d29a8) returned 1 Thread: id = 2532 os_tid = 0x2318 [0155.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf")) returned 0x20 [0162.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF", dwFileAttributes=0x20) returned 0 [0162.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.622] GetLastError () returned 0x5 [0162.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF", dwFileAttributes=0x20) returned 0 [0162.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2a30) returned 1 Thread: id = 2533 os_tid = 0x231c [0155.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf")) returned 0x20 [0155.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0155.412] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.412] GetLastError () returned 0x5 [0155.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0155.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d250) returned 1 Thread: id = 2534 os_tid = 0x2320 [0155.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf")) returned 0x20 [0155.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0155.414] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.414] GetLastError () returned 0x5 [0155.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0155.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d1b8) returned 1 Thread: id = 2535 os_tid = 0x2324 [0155.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf")) returned 0x20 [0155.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0155.419] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.419] GetLastError () returned 0x5 [0155.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0155.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d380) returned 1 Thread: id = 2536 os_tid = 0x2328 [0155.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf")) returned 0x20 [0155.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0155.421] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.421] GetLastError () returned 0x5 [0155.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0155.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 Thread: id = 2537 os_tid = 0x232c [0155.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf")) returned 0x20 [0155.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0155.424] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.424] GetLastError () returned 0x5 [0155.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0155.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d4b0) returned 1 Thread: id = 2538 os_tid = 0x2330 [0155.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf")) returned 0x20 [0155.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0155.432] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.433] GetLastError () returned 0x5 [0155.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0155.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c7a0) returned 1 Thread: id = 2539 os_tid = 0x2334 [0155.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf")) returned 0x20 [0155.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0155.435] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.435] GetLastError () returned 0x5 [0155.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0155.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d5e0) returned 1 Thread: id = 2540 os_tid = 0x2338 [0155.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf")) returned 0x20 [0155.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0155.437] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.437] GetLastError () returned 0x5 [0155.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0155.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d710) returned 1 Thread: id = 2541 os_tid = 0x233c [0155.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be458 [0155.439] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0155.439] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0155.439] wcscat (in: _Dest=0x81be458, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*" [0155.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0155.439] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f6bdf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e556c8 [0158.628] wcscmp (_String1=".", _String2=".") returned 0 [0158.628] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f6bdf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.628] wcscmp (_String1="..", _String2=".") returned 1 [0158.628] wcscmp (_String1="..", _String2="..") returned 0 [0158.628] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x2c360, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1 [0158.628] wcscmp (_String1="ANALYS32.XLL", _String2=".") returned 1 [0158.628] wcscmp (_String1="ANALYS32.XLL", _String2="..") returned 1 [0158.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819a6d8 [0158.628] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0158.629] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0158.629] wcscat (in: _Dest=0x819a6d8, _Source="ANALYS32.XLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" [0159.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll")) returned 0x20 [0159.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL", dwFileAttributes=0x20) returned 0 [0159.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.896] GetLastError () returned 0x5 [0159.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL", dwFileAttributes=0x20) returned 0 [0159.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 [0159.896] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0xd726, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="ATPVBA~1.XLA")) returned 1 [0159.896] wcscmp (_String1="ATPVBAEN.XLAM", _String2=".") returned 1 [0159.896] wcscmp (_String1="ATPVBAEN.XLAM", _String2="..") returned 1 [0159.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a6d8 [0159.896] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0159.896] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0159.896] wcscat (in: _Dest=0x819a6d8, _Source="ATPVBAEN.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" [0159.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam")) returned 0x20 [0159.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM", dwFileAttributes=0x20) returned 0 [0159.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.897] GetLastError () returned 0x5 [0159.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM", dwFileAttributes=0x20) returned 0 [0159.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 [0159.897] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x697b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUNCRES.XLAM", cAlternateFileName="FUNCRE~1.XLA")) returned 1 [0159.897] wcscmp (_String1="FUNCRES.XLAM", _String2=".") returned 1 [0159.897] wcscmp (_String1="FUNCRES.XLAM", _String2="..") returned 1 [0159.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819a6d8 [0159.897] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0159.897] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0159.897] wcscat (in: _Dest=0x819a6d8, _Source="FUNCRES.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" [0159.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam")) returned 0x20 [0159.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM", dwFileAttributes=0x20) returned 0 [0159.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.898] GetLastError () returned 0x5 [0159.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM", dwFileAttributes=0x20) returned 0 [0159.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 [0159.898] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7697800, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42f91f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7697800, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0xce45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 1 [0159.898] wcscmp (_String1="PROCDB.XLAM", _String2=".") returned 1 [0159.898] wcscmp (_String1="PROCDB.XLAM", _String2="..") returned 1 [0159.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cf48 [0159.898] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0159.898] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0159.898] wcscat (in: _Dest=0x32cf48, _Source="PROCDB.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" [0159.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam")) returned 0x20 [0159.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM", dwFileAttributes=0x20) returned 0 [0159.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.899] GetLastError () returned 0x5 [0159.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM", dwFileAttributes=0x20) returned 0 [0159.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.899] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7697800, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42f91f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7697800, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0xce45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 0 [0159.899] FindClose (in: hFindFile=0x3e556c8 | out: hFindFile=0x3e556c8) returned 1 [0159.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0159.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 [0159.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5608) returned 1 Thread: id = 2542 os_tid = 0x2340 [0155.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam")) returned 0x20 [0158.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM", dwFileAttributes=0x20) returned 0 [0158.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.434] GetLastError () returned 0x5 [0158.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM", dwFileAttributes=0x20) returned 0 [0158.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355170) returned 1 Thread: id = 2543 os_tid = 0x2344 [0155.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bdd8 [0155.443] wcscpy (in: _Dest=0x831bdd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" [0155.443] wcscat (in: _Dest=0x831bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\" [0155.443] wcscat (in: _Dest=0x831bdd8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*" [0155.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0155.443] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a98 [0158.436] wcscmp (_String1=".", _String2=".") returned 0 [0158.436] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.436] wcscmp (_String1="..", _String2=".") returned 1 [0158.436] wcscmp (_String1="..", _String2="..") returned 0 [0158.436] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x65460, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1 [0158.436] wcscmp (_String1="SOLVER.XLAM", _String2=".") returned 1 [0158.436] wcscmp (_String1="SOLVER.XLAM", _String2="..") returned 1 [0158.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cf48 [0158.436] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" [0158.436] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\" [0158.436] wcscat (in: _Dest=0x32cf48, _Source="SOLVER.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" [0159.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam")) returned 0x20 [0159.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM", dwFileAttributes=0x20) returned 0 [0159.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.823] GetLastError () returned 0x5 [0159.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM", dwFileAttributes=0x20) returned 0 [0159.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0159.823] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x27958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1 [0159.823] wcscmp (_String1="SOLVER32.DLL", _String2=".") returned 1 [0159.823] wcscmp (_String1="SOLVER32.DLL", _String2="..") returned 1 [0159.823] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x27958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0 [0159.823] FindClose (in: hFindFile=0x3f37a98 | out: hFindFile=0x3f37a98) returned 1 [0159.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0159.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bdd8) returned 1 [0159.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b558) returned 1 Thread: id = 2544 os_tid = 0x2348 [0155.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini")) returned 0x20 [0155.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.444] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.445] GetLastError () returned 0x5 [0155.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 2545 os_tid = 0x234c [0155.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html")) returned 0x20 [0155.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", dwFileAttributes=0x20) returned 0 [0155.451] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.451] GetLastError () returned 0x5 [0155.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", dwFileAttributes=0x20) returned 0 [0155.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 2546 os_tid = 0x2350 [0155.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini")) returned 0x20 [0155.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.453] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.454] GetLastError () returned 0x5 [0155.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 Thread: id = 2547 os_tid = 0x2354 [0155.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html")) returned 0x20 [0155.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", dwFileAttributes=0x20) returned 0 [0155.456] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.456] GetLastError () returned 0x5 [0155.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", dwFileAttributes=0x20) returned 0 [0155.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2308) returned 1 Thread: id = 2548 os_tid = 0x2358 [0155.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini")) returned 0x20 [0155.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.458] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.458] GetLastError () returned 0x5 [0155.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 Thread: id = 2549 os_tid = 0x235c [0155.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html")) returned 0x20 [0155.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", dwFileAttributes=0x20) returned 0 [0155.460] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.460] GetLastError () returned 0x5 [0155.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", dwFileAttributes=0x20) returned 0 [0155.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2278) returned 1 Thread: id = 2550 os_tid = 0x2360 [0155.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini")) returned 0x20 [0155.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.462] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.462] GetLastError () returned 0x5 [0155.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 2551 os_tid = 0x2364 [0155.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html")) returned 0x20 [0155.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", dwFileAttributes=0x20) returned 0 [0155.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.467] GetLastError () returned 0x5 [0155.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", dwFileAttributes=0x20) returned 0 [0155.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1bb8) returned 1 Thread: id = 2552 os_tid = 0x2368 [0155.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini")) returned 0x20 [0155.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.471] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.471] GetLastError () returned 0x5 [0155.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80540d8) returned 1 Thread: id = 2553 os_tid = 0x236c [0155.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html")) returned 0x20 [0155.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", dwFileAttributes=0x20) returned 0 [0155.473] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.473] GetLastError () returned 0x5 [0155.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", dwFileAttributes=0x20) returned 0 [0155.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2788) returned 1 Thread: id = 2554 os_tid = 0x2370 [0155.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini")) returned 0x20 [0155.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.480] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.480] GetLastError () returned 0x5 [0155.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054628) returned 1 Thread: id = 2555 os_tid = 0x2374 [0155.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html")) returned 0x20 [0155.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", dwFileAttributes=0x20) returned 0 [0155.482] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.482] GetLastError () returned 0x5 [0155.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", dwFileAttributes=0x20) returned 0 [0155.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28a8) returned 1 Thread: id = 2556 os_tid = 0x2378 [0155.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini")) returned 0x20 [0155.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.484] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.484] GetLastError () returned 0x5 [0155.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053d20) returned 1 Thread: id = 2557 os_tid = 0x237c [0155.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html")) returned 0x20 [0155.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", dwFileAttributes=0x20) returned 0 [0155.496] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.496] GetLastError () returned 0x5 [0155.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", dwFileAttributes=0x20) returned 0 [0155.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2158) returned 1 Thread: id = 2558 os_tid = 0x2380 [0155.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini")) returned 0x20 [0155.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.498] GetLastError () returned 0x5 [0155.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053a78) returned 1 Thread: id = 2559 os_tid = 0x2384 [0155.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html")) returned 0x20 [0155.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", dwFileAttributes=0x20) returned 0 [0155.500] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.500] GetLastError () returned 0x5 [0155.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", dwFileAttributes=0x20) returned 0 [0155.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21e8) returned 1 Thread: id = 2560 os_tid = 0x2388 [0155.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini")) returned 0x20 [0155.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.502] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.503] GetLastError () returned 0x5 [0155.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053968) returned 1 Thread: id = 2561 os_tid = 0x238c [0155.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html")) returned 0x20 [0155.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", dwFileAttributes=0x20) returned 0 [0155.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.505] GetLastError () returned 0x5 [0155.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", dwFileAttributes=0x20) returned 0 [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2378) returned 1 Thread: id = 2562 os_tid = 0x2390 [0155.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini")) returned 0x20 [0155.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.507] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.507] GetLastError () returned 0x5 [0155.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", dwFileAttributes=0x20) returned 0 [0155.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053858) returned 1 Thread: id = 2563 os_tid = 0x2394 [0155.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html")) returned 0x20 [0155.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", dwFileAttributes=0x20) returned 0 [0155.509] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.509] GetLastError () returned 0x5 [0155.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", dwFileAttributes=0x20) returned 0 [0155.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2888) returned 1 Thread: id = 2564 os_tid = 0x2398 [0155.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf")) returned 0x20 [0155.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.525] GetLastError () returned 0x5 [0155.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 2565 os_tid = 0x239c [0155.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf")) returned 0x20 [0163.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0163.260] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.267] GetLastError () returned 0x5 [0163.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0163.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0328) returned 1 Thread: id = 2566 os_tid = 0x23a0 [0155.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf")) returned 0x20 [0163.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0163.253] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.253] GetLastError () returned 0x5 [0163.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0163.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413c8) returned 1 Thread: id = 2567 os_tid = 0x23a4 [0155.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf")) returned 0x20 [0163.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0163.251] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.251] GetLastError () returned 0x5 [0163.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0163.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41480) returned 1 Thread: id = 2568 os_tid = 0x23a8 [0155.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf")) returned 0x20 [0161.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0162.481] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.481] GetLastError () returned 0x5 [0162.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0162.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41538) returned 1 Thread: id = 2569 os_tid = 0x23ac [0155.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf")) returned 0x20 [0161.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0162.762] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.762] GetLastError () returned 0x5 [0162.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0162.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5968) returned 1 Thread: id = 2570 os_tid = 0x23b0 [0155.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf")) returned 0x20 [0158.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.915] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.916] GetLastError () returned 0x5 [0158.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 Thread: id = 2571 os_tid = 0x23b4 [0155.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf")) returned 0x20 [0161.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.469] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.470] GetLastError () returned 0x5 [0161.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf2a8) returned 1 Thread: id = 2572 os_tid = 0x23b8 [0155.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf")) returned 0x20 [0161.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.502] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.503] GetLastError () returned 0x5 [0161.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d415f0) returned 1 Thread: id = 2573 os_tid = 0x23bc [0155.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf")) returned 0x20 [0161.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.504] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.504] GetLastError () returned 0x5 [0161.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d416a8) returned 1 Thread: id = 2574 os_tid = 0x23c0 [0155.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf")) returned 0x20 [0161.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.499] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.499] GetLastError () returned 0x5 [0161.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41760) returned 1 Thread: id = 2575 os_tid = 0x23c4 [0155.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf")) returned 0x20 [0161.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.501] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.501] GetLastError () returned 0x5 [0161.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d58a0) returned 1 Thread: id = 2576 os_tid = 0x23c8 [0155.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5ee0 [0155.609] wcscpy (in: _Dest=0x81d5ee0, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0155.609] wcscat (in: _Dest=0x81d5ee0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\" [0155.609] wcscat (in: _Dest=0x81d5ee0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*" [0155.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe5f8 [0155.609] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*", lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e555c8 [0155.610] wcscmp (_String1=".", _String2=".") returned 0 [0155.610] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.610] wcscmp (_String1="..", _String2=".") returned 1 [0155.610] wcscmp (_String1="..", _String2="..") returned 0 [0155.610] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0155.610] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0155.610] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0155.610] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0155.610] FindClose (in: hFindFile=0x3e555c8 | out: hFindFile=0x3e555c8) returned 1 [0155.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe5f8) returned 1 [0155.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ee0) returned 1 [0155.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5fa8) returned 1 Thread: id = 2577 os_tid = 0x23cc [0155.612] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp")) returned 0x20 [0155.612] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0155.612] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.613] GetLastError () returned 0x5 [0155.613] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0155.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c0b8) returned 1 Thread: id = 2578 os_tid = 0x23d0 [0155.614] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp")) returned 0x20 [0155.614] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0155.614] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.615] GetLastError () returned 0x5 [0155.615] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0155.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eafcf8) returned 1 Thread: id = 2579 os_tid = 0x23d4 [0155.616] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp")) returned 0x20 [0155.616] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0155.617] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.617] GetLastError () returned 0x5 [0155.617] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0155.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0488) returned 1 Thread: id = 2580 os_tid = 0x23d8 [0155.618] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp")) returned 0x20 [0155.618] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0155.619] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.619] GetLastError () returned 0x5 [0155.619] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0155.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eafe58) returned 1 Thread: id = 2581 os_tid = 0x23dc [0155.620] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp")) returned 0x20 [0155.620] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0155.621] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.621] GetLastError () returned 0x5 [0155.621] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0155.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0538) returned 1 Thread: id = 2582 os_tid = 0x23e0 [0155.622] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp")) returned 0x20 [0155.622] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0155.623] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.623] GetLastError () returned 0x5 [0155.623] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0155.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb05e8) returned 1 Thread: id = 2583 os_tid = 0x23e4 [0155.624] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp")) returned 0x20 [0155.624] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0155.625] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.625] GetLastError () returned 0x5 [0155.625] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0155.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0698) returned 1 Thread: id = 2584 os_tid = 0x23e8 [0155.626] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp")) returned 0x20 [0155.626] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0155.627] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.627] GetLastError () returned 0x5 [0155.627] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0155.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0748) returned 1 Thread: id = 2585 os_tid = 0x23ec [0155.635] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp")) returned 0x20 [0155.635] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0155.635] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.635] GetLastError () returned 0x5 [0155.635] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0155.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb07f8) returned 1 Thread: id = 2586 os_tid = 0x23f0 [0155.637] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp")) returned 0x20 [0155.637] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0155.637] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.637] GetLastError () returned 0x5 [0155.637] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0155.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb08a8) returned 1 Thread: id = 2587 os_tid = 0x23f4 [0155.639] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp")) returned 0x20 [0155.639] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0155.639] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.639] GetLastError () returned 0x5 [0155.639] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0155.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0958) returned 1 Thread: id = 2588 os_tid = 0x23f8 [0155.641] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp")) returned 0x20 [0155.641] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0155.641] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.642] GetLastError () returned 0x5 [0155.642] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0155.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0a08) returned 1 Thread: id = 2589 os_tid = 0x23fc [0155.643] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp")) returned 0x20 [0155.643] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0155.643] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.644] GetLastError () returned 0x5 [0155.644] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0155.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0ab8) returned 1 Thread: id = 2590 os_tid = 0x2400 [0155.645] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp")) returned 0x20 [0155.645] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0155.646] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.646] GetLastError () returned 0x5 [0155.646] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0155.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0b68) returned 1 Thread: id = 2591 os_tid = 0x2404 [0155.647] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp")) returned 0x20 [0155.648] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0155.648] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.648] GetLastError () returned 0x5 [0155.648] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0155.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0c18) returned 1 Thread: id = 2592 os_tid = 0x2408 [0155.656] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp")) returned 0x20 [0155.656] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0155.656] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.657] GetLastError () returned 0x5 [0155.657] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0155.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0cc8) returned 1 Thread: id = 2593 os_tid = 0x240c [0155.659] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp")) returned 0x20 [0155.659] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0155.659] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.659] GetLastError () returned 0x5 [0155.659] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0155.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0d78) returned 1 Thread: id = 2594 os_tid = 0x2410 [0155.661] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp")) returned 0x20 [0155.661] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0155.662] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.662] GetLastError () returned 0x5 [0155.662] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0155.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e28) returned 1 Thread: id = 2595 os_tid = 0x2414 [0155.666] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp")) returned 0x20 [0155.666] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0155.666] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.667] GetLastError () returned 0x5 [0155.667] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0155.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0ed8) returned 1 Thread: id = 2596 os_tid = 0x2418 [0155.668] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp")) returned 0x20 [0155.668] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0155.669] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.669] GetLastError () returned 0x5 [0155.669] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0155.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9648) returned 1 Thread: id = 2597 os_tid = 0x241c [0155.670] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp")) returned 0x20 [0155.670] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0155.671] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.671] GetLastError () returned 0x5 [0155.671] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0155.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d96f8) returned 1 Thread: id = 2598 os_tid = 0x2420 [0156.071] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp")) returned 0x20 [0156.071] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0156.072] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.072] GetLastError () returned 0x5 [0156.072] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0156.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d97a8) returned 1 Thread: id = 2599 os_tid = 0x2428 [0156.074] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js")) returned 0x2020 [0156.075] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", dwFileAttributes=0x20) returned 1 [0157.327] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2884 [0157.327] GetFileSizeEx (in: hFile=0x2884, lpFileSize=0x7c0fa40 | out: lpFileSize=0x7c0fa40*=0) returned 1 [0157.327] FlushFileBuffers (hFile=0x2884) returned 1 [0158.511] CloseHandle (hObject=0x2884) returned 1 [0158.511] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", dwFileAttributes=0x2020) returned 1 [0163.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c378) returned 1 Thread: id = 2600 os_tid = 0x242c [0156.076] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js")) returned 0x2020 [0156.076] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", dwFileAttributes=0x20) returned 1 [0157.329] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2888 [0157.329] GetFileSizeEx (in: hFile=0x2888, lpFileSize=0x7bcfcc0 | out: lpFileSize=0x7bcfcc0*=10) returned 1 [0157.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0157.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0157.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0157.329] NtQuerySystemTime (in: CurrentTime=0x7bcfc48 | out: CurrentTime=0x7bcfc48*=132471540258312000) returned 0x0 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x5be792b6 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x799e3e71 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x464aeefc [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x677477dc [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x5b5815f9 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x75c264a [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x57f66e72 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x3faec3fb [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x28a0e274 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x6b95aa0e [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x44147b3e [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0xe960b00 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x743f774d [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x6f6cf264 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x22f8841 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x797339c1 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x1859b827 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x55519af9 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x167595f6 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x518d1595 [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x22ef1dcc [0157.329] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x4925c5e0 [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x119fc3d1 [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x4219089c [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x48190f8a [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x63d3c0f5 [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x5115b33c [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0xb8abb83 [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x7c312f22 [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x2e3fac3e [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0x75299d0 [0157.330] RtlRandomEx (in: Seed=0x7bcfc40 | out: Seed=0x7bcfc40) returned 0xcfb2898 [0157.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0157.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0157.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0157.338] ReadFile (in: hFile=0x2888, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0xa, lpNumberOfBytesRead=0x7bcfc3c, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0x7bcfc3c*=0xa, lpOverlapped=0x0) returned 1 [0157.340] SetFilePointerEx (in: hFile=0x2888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.340] WriteFile (in: hFile=0x2888, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x7bcfc40, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x7bcfc40*=0xa, lpOverlapped=0x0) returned 1 [0161.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0161.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0161.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0161.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0161.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0161.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0161.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5f10) returned 1 [0161.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77c58 [0161.473] SetFilePointerEx (in: hFile=0x2888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.473] WriteFile (in: hFile=0x2888, lpBuffer=0x3d565c0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x7bcfcb4, lpOverlapped=0x0 | out: lpBuffer=0x3d565c0*, lpNumberOfBytesWritten=0x7bcfcb4*=0x112, lpOverlapped=0x0) returned 1 [0162.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 [0162.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77de0) returned 1 [0162.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0162.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c58) returned 1 [0162.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0162.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0162.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0162.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0162.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7150 [0162.674] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" [0162.675] wcscat (in: _Dest=0x2ff7150, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.f0dbec" [0162.675] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.f0dbec", NtPathName=0x7bcfc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0162.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1c258 [0162.699] FlushFileBuffers (hFile=0x2888) returned 1 [0162.703] CloseHandle (hObject=0x2888) returned 1 [0162.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9858 [0162.708] wcscpy (in: _Dest=0x81d9858, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0162.708] wcscat (in: _Dest=0x81d9858, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\F0DBEC-Readme.txt" [0162.708] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\f0dbec-readme.txt")) returned 0xffffffff [0162.708] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2888 [0162.717] WriteFile (in: hFile=0x2888, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7bcfc5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7bcfc5c*=0x70c, lpOverlapped=0x0) returned 1 [0162.726] CloseHandle (hObject=0x2888) returned 1 [0162.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9858) returned 1 [0162.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d96f8) returned 1 Thread: id = 2601 os_tid = 0x2430 [0156.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 0x20 [0156.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x20) returned 0 [0156.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.078] GetLastError () returned 0x5 [0156.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x20) returned 0 [0156.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 2602 os_tid = 0x2434 [0156.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 0x20 [0156.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x20) returned 0 [0156.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.081] GetLastError () returned 0x5 [0156.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x20) returned 0 [0156.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 2603 os_tid = 0x2438 [0156.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 0x20 [0156.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x20) returned 0 [0156.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.083] GetLastError () returned 0x5 [0156.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x20) returned 0 [0156.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2b40) returned 1 Thread: id = 2604 os_tid = 0x243c [0156.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 0x20 [0158.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x20) returned 0 [0158.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.637] GetLastError () returned 0x5 [0158.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x20) returned 0 [0158.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2ab8) returned 1 Thread: id = 2605 os_tid = 0x2440 [0156.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 0x20 [0158.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x20) returned 0 [0158.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.640] GetLastError () returned 0x5 [0158.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x20) returned 0 [0158.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2bc8) returned 1 Thread: id = 2606 os_tid = 0x2444 [0156.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0x20 [0158.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x20) returned 0 [0158.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.642] GetLastError () returned 0x5 [0158.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x20) returned 0 [0158.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2c50) returned 1 Thread: id = 2607 os_tid = 0x2448 [0156.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 0x20 [0158.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x20) returned 0 [0158.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.643] GetLastError () returned 0x5 [0158.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x20) returned 0 [0158.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2cd8) returned 1 Thread: id = 2608 os_tid = 0x244c [0156.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 0x20 [0158.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x20) returned 0 [0158.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.644] GetLastError () returned 0x5 [0158.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x20) returned 0 [0158.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2d60) returned 1 Thread: id = 2609 os_tid = 0x2450 [0156.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0x20 [0158.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x20) returned 0 [0158.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.646] GetLastError () returned 0x5 [0158.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x20) returned 0 [0158.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2de8) returned 1 Thread: id = 2610 os_tid = 0x2454 [0156.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 0x20 [0157.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x20) returned 0 [0157.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.388] GetLastError () returned 0x5 [0157.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x20) returned 0 [0157.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2e70) returned 1 Thread: id = 2611 os_tid = 0x2458 [0156.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 0x20 [0158.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x20) returned 0 [0158.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.635] GetLastError () returned 0x5 [0158.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x20) returned 0 [0158.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2ef8) returned 1 Thread: id = 2612 os_tid = 0x245c [0156.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0x20 [0158.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x20) returned 0 [0158.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.639] GetLastError () returned 0x5 [0158.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x20) returned 0 [0158.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2f80) returned 1 Thread: id = 2613 os_tid = 0x2460 [0156.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini")) returned 0x20 [0156.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", dwFileAttributes=0x20) returned 0 [0156.091] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.091] GetLastError () returned 0x5 [0156.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", dwFileAttributes=0x20) returned 0 [0156.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 2614 os_tid = 0x2464 [0156.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html")) returned 0x20 [0156.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", dwFileAttributes=0x20) returned 0 [0156.096] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.097] GetLastError () returned 0x5 [0156.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", dwFileAttributes=0x20) returned 0 [0156.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f356d0) returned 1 Thread: id = 2615 os_tid = 0x2468 [0156.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg")) returned 0x20 [0158.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x20) returned 0 [0158.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.649] GetLastError () returned 0x5 [0158.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x20) returned 0 [0158.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1b28) returned 1 Thread: id = 2616 os_tid = 0x246c [0156.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg")) returned 0x20 [0158.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x20) returned 0 [0158.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.650] GetLastError () returned 0x5 [0158.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x20) returned 0 [0158.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3090) returned 1 Thread: id = 2617 os_tid = 0x2470 [0156.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg")) returned 0x20 [0158.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x20) returned 0 [0158.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.652] GetLastError () returned 0x5 [0158.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x20) returned 0 [0158.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f357f0) returned 1 Thread: id = 2618 os_tid = 0x2474 [0156.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg")) returned 0x20 [0158.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x20) returned 0 [0158.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.653] GetLastError () returned 0x5 [0158.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x20) returned 0 [0158.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2888) returned 1 Thread: id = 2619 os_tid = 0x2478 [0156.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg")) returned 0x20 [0158.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x20) returned 0 [0158.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.655] GetLastError () returned 0x5 [0158.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x20) returned 0 [0158.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2378) returned 1 Thread: id = 2620 os_tid = 0x247c [0156.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg")) returned 0x20 [0158.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x20) returned 0 [0158.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.656] GetLastError () returned 0x5 [0158.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x20) returned 0 [0158.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2408) returned 1 Thread: id = 2621 os_tid = 0x2480 [0156.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg")) returned 0x20 [0158.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x20) returned 0 [0158.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.658] GetLastError () returned 0x5 [0158.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x20) returned 0 [0158.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3118) returned 1 Thread: id = 2622 os_tid = 0x2484 [0156.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg")) returned 0x20 [0158.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x20) returned 0 [0158.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.659] GetLastError () returned 0x5 [0158.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x20) returned 0 [0158.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1d48) returned 1 Thread: id = 2623 os_tid = 0x2488 [0156.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg")) returned 0x20 [0158.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x20) returned 0 [0158.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.648] GetLastError () returned 0x5 [0158.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x20) returned 0 [0158.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2be8) returned 1 Thread: id = 2624 os_tid = 0x248c [0156.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg")) returned 0x20 [0157.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x20) returned 0 [0157.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.392] GetLastError () returned 0x5 [0157.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x20) returned 0 [0157.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d31a0) returned 1 Thread: id = 2625 os_tid = 0x2490 [0156.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg")) returned 0x20 [0158.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x20) returned 0 [0158.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.661] GetLastError () returned 0x5 [0158.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x20) returned 0 [0158.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3228) returned 1 Thread: id = 2626 os_tid = 0x2494 [0156.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg")) returned 0x20 [0158.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x20) returned 0 [0158.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.662] GetLastError () returned 0x5 [0158.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x20) returned 0 [0158.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21e8) returned 1 Thread: id = 2627 os_tid = 0x2498 [0156.130] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url")) returned 0x20 [0158.665] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url", dwFileAttributes=0x20) returned 0 [0158.665] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.665] GetLastError () returned 0x5 [0158.665] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url", dwFileAttributes=0x20) returned 0 [0158.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a680) returned 1 Thread: id = 2628 os_tid = 0x249c [0156.133] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url")) returned 0x20 [0158.666] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url", dwFileAttributes=0x20) returned 0 [0158.666] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.667] GetLastError () returned 0x5 [0158.667] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url", dwFileAttributes=0x20) returned 0 [0158.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2158) returned 1 Thread: id = 2629 os_tid = 0x24a0 [0156.134] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url")) returned 0x20 [0157.393] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url", dwFileAttributes=0x20) returned 0 [0157.393] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.394] GetLastError () returned 0x5 [0157.394] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url", dwFileAttributes=0x20) returned 0 [0157.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d32b0) returned 1 Thread: id = 2630 os_tid = 0x24a4 [0156.134] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url")) returned 0x20 [0158.664] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url", dwFileAttributes=0x20) returned 0 [0158.664] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.664] GetLastError () returned 0x5 [0158.664] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url", dwFileAttributes=0x20) returned 0 [0158.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3338) returned 1 Thread: id = 2631 os_tid = 0x24a8 [0156.135] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms")) returned 0x20 [0156.135] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0156.136] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.136] GetLastError () returned 0x5 [0156.136] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0156.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddfa68) returned 1 Thread: id = 2632 os_tid = 0x24ac [0156.138] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms")) returned 0x20 [0156.138] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0156.138] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.139] GetLastError () returned 0x5 [0156.139] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0156.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80207e0) returned 1 Thread: id = 2633 os_tid = 0x24b0 [0156.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32ac0 [0156.146] wcscpy (in: _Dest=0x3f32ac0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0156.146] wcscat (in: _Dest=0x3f32ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\" [0156.146] wcscat (in: _Dest=0x3f32ac0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*" [0156.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091080 [0156.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099410 [0156.146] wcscmp (_String1=".", _String2=".") returned 0 [0156.146] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.146] wcscmp (_String1="..", _String2=".") returned 1 [0156.146] wcscmp (_String1="..", _String2="..") returned 0 [0156.146] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0156.146] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0156.146] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0156.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfaa8 [0156.147] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0156.147] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\" [0156.147] wcscat (in: _Dest=0x81bfaa8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" [0162.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2884 [0162.370] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0162.370] wcscmp (_String1="license.html", _String2=".") returned 1 [0162.370] wcscmp (_String1="license.html", _String2="..") returned 1 [0162.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df0b8 [0162.370] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0162.371] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\" [0162.371] wcscat (in: _Dest=0x81df0b8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" [0162.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2880 [0162.372] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0162.372] FindClose (in: hFindFile=0x8099410 | out: hFindFile=0x8099410) returned 1 [0162.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091080) returned 1 [0162.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0162.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80552d0) returned 1 Thread: id = 2634 os_tid = 0x24b4 [0156.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32598 [0156.209] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0156.209] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\" [0156.209] wcscat (in: _Dest=0x3f32598, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*" [0156.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090e18 [0156.209] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55008 [0156.209] wcscmp (_String1=".", _String2=".") returned 0 [0156.209] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.209] wcscmp (_String1="..", _String2=".") returned 1 [0156.209] wcscmp (_String1="..", _String2="..") returned 0 [0156.210] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0156.210] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0156.210] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0156.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf090 [0156.210] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0156.210] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\" [0156.210] wcscat (in: _Dest=0x81bf090, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" [0158.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2874 [0158.045] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0158.045] wcscmp (_String1="license.html", _String2=".") returned 1 [0158.045] wcscmp (_String1="license.html", _String2="..") returned 1 [0158.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb16a8 [0158.045] wcscpy (in: _Dest=0x3eb16a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0158.045] wcscat (in: _Dest=0x3eb16a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\" [0158.045] wcscat (in: _Dest=0x3eb16a8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" [0158.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb16a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd4 [0158.046] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0158.046] FindClose (in: hFindFile=0x3e55008 | out: hFindFile=0x3e55008) returned 1 [0158.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090e18) returned 1 [0158.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0158.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055570) returned 1 Thread: id = 2635 os_tid = 0x24b8 [0156.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32778 [0156.211] wcscpy (in: _Dest=0x3f32778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0156.211] wcscat (in: _Dest=0x3f32778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\" [0156.211] wcscat (in: _Dest=0x3f32778, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*" [0156.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80917b8 [0156.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54cc8 [0158.673] wcscmp (_String1=".", _String2=".") returned 0 [0158.673] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.673] wcscmp (_String1="..", _String2=".") returned 1 [0158.673] wcscmp (_String1="..", _String2="..") returned 0 [0158.673] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0158.673] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0158.673] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0158.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x309a680 [0158.674] wcscpy (in: _Dest=0x309a680, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0158.674] wcscat (in: _Dest=0x309a680, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\" [0158.674] wcscat (in: _Dest=0x309a680, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" [0159.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini")) returned 0x20 [0159.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", dwFileAttributes=0x20) returned 0 [0159.939] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.939] GetLastError () returned 0x5 [0159.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", dwFileAttributes=0x20) returned 0 [0159.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a680) returned 1 [0159.940] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0159.940] wcscmp (_String1="license.html", _String2=".") returned 1 [0159.940] wcscmp (_String1="license.html", _String2="..") returned 1 [0159.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0159.940] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0159.940] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\" [0159.940] wcscat (in: _Dest=0x81de728, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" [0159.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html")) returned 0x20 [0159.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", dwFileAttributes=0x20) returned 0 [0159.940] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.940] GetLastError () returned 0x5 [0159.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", dwFileAttributes=0x20) returned 0 [0159.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.941] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0159.941] FindClose (in: hFindFile=0x3e54cc8 | out: hFindFile=0x3e54cc8) returned 1 [0159.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80917b8) returned 1 [0159.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0159.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a80) returned 1 Thread: id = 2636 os_tid = 0x24bc [0156.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32958 [0156.218] wcscpy (in: _Dest=0x3f32958, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0156.218] wcscat (in: _Dest=0x3f32958, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\" [0156.218] wcscat (in: _Dest=0x3f32958, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*" [0156.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80912e8 [0156.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e18 [0158.919] wcscmp (_String1=".", _String2=".") returned 0 [0158.920] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.920] wcscmp (_String1="..", _String2=".") returned 1 [0158.920] wcscmp (_String1="..", _String2="..") returned 0 [0158.920] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0158.920] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0158.920] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0158.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1fff8 [0158.920] wcscpy (in: _Dest=0x3e1fff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0158.920] wcscat (in: _Dest=0x3e1fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\" [0158.920] wcscat (in: _Dest=0x3e1fff8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" [0159.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini")) returned 0x20 [0159.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", dwFileAttributes=0x20) returned 0 [0159.957] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.958] GetLastError () returned 0x5 [0159.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", dwFileAttributes=0x20) returned 0 [0159.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 [0159.958] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0159.958] wcscmp (_String1="license.html", _String2=".") returned 1 [0159.958] wcscmp (_String1="license.html", _String2="..") returned 1 [0159.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de728 [0159.958] wcscpy (in: _Dest=0x81de728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0159.958] wcscat (in: _Dest=0x81de728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\" [0159.958] wcscat (in: _Dest=0x81de728, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" [0159.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html")) returned 0x20 [0159.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", dwFileAttributes=0x20) returned 0 [0159.958] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.959] GetLastError () returned 0x5 [0159.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", dwFileAttributes=0x20) returned 0 [0159.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 [0159.959] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0159.959] FindClose (in: hFindFile=0x3f37e18 | out: hFindFile=0x3f37e18) returned 1 [0159.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80912e8) returned 1 [0159.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0159.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054bd0) returned 1 Thread: id = 2637 os_tid = 0x24c0 [0156.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat")) returned 0x20 [0158.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", dwFileAttributes=0x20) returned 0 [0158.497] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.498] GetLastError () returned 0x5 [0158.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", dwFileAttributes=0x20) returned 0 [0158.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 Thread: id = 2638 os_tid = 0x24c4 [0156.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs")) returned 0x20 [0158.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", dwFileAttributes=0x20) returned 0 [0158.676] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.676] GetLastError () returned 0x5 [0158.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", dwFileAttributes=0x20) returned 0 [0158.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 2639 os_tid = 0x24c8 [0156.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht")) returned 0x20 [0158.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", dwFileAttributes=0x20) returned 0 [0158.677] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.677] GetLastError () returned 0x5 [0158.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", dwFileAttributes=0x20) returned 0 [0158.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 2640 os_tid = 0x24cc [0156.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan")) returned 0x20 [0158.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", dwFileAttributes=0x20) returned 0 [0158.678] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.679] GetLastError () returned 0x5 [0158.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", dwFileAttributes=0x20) returned 0 [0158.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 2641 os_tid = 0x24d0 [0156.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu")) returned 0x20 [0158.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", dwFileAttributes=0x20) returned 0 [0158.680] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.680] GetLastError () returned 0x5 [0158.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", dwFileAttributes=0x20) returned 0 [0158.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 2642 os_tid = 0x24d4 [0156.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp")) returned 0x20 [0158.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", dwFileAttributes=0x20) returned 0 [0158.681] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.681] GetLastError () returned 0x5 [0158.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", dwFileAttributes=0x20) returned 0 [0158.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819adb8) returned 1 Thread: id = 2643 os_tid = 0x24d8 [0156.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq")) returned 0x20 [0158.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", dwFileAttributes=0x20) returned 0 [0158.683] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.683] GetLastError () returned 0x5 [0158.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", dwFileAttributes=0x20) returned 0 [0158.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bdf8) returned 1 Thread: id = 2644 os_tid = 0x24dc [0156.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra")) returned 0x20 [0158.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", dwFileAttributes=0x20) returned 0 [0158.684] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.685] GetLastError () returned 0x5 [0158.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", dwFileAttributes=0x20) returned 0 [0158.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b218) returned 1 Thread: id = 2645 os_tid = 0x24e0 [0156.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita")) returned 0x20 [0158.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", dwFileAttributes=0x20) returned 0 [0158.686] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.686] GetLastError () returned 0x5 [0158.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", dwFileAttributes=0x20) returned 0 [0158.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 2646 os_tid = 0x24e4 [0156.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn")) returned 0x20 [0158.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", dwFileAttributes=0x20) returned 0 [0158.687] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.687] GetLastError () returned 0x5 [0158.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", dwFileAttributes=0x20) returned 0 [0158.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 Thread: id = 2647 os_tid = 0x24e8 [0156.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor")) returned 0x20 [0158.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", dwFileAttributes=0x20) returned 0 [0158.688] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.689] GetLastError () returned 0x5 [0158.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", dwFileAttributes=0x20) returned 0 [0158.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db648) returned 1 Thread: id = 2648 os_tid = 0x24ec [0156.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp")) returned 0x20 [0158.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", dwFileAttributes=0x20) returned 0 [0158.690] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.690] GetLastError () returned 0x5 [0158.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", dwFileAttributes=0x20) returned 0 [0158.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db6e8) returned 1 Thread: id = 2649 os_tid = 0x24f0 [0156.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld")) returned 0x20 [0158.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", dwFileAttributes=0x20) returned 0 [0158.691] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.691] GetLastError () returned 0x5 [0158.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", dwFileAttributes=0x20) returned 0 [0158.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db788) returned 1 Thread: id = 2650 os_tid = 0x24f4 [0156.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor")) returned 0x20 [0158.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", dwFileAttributes=0x20) returned 0 [0158.705] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.705] GetLastError () returned 0x5 [0158.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", dwFileAttributes=0x20) returned 0 [0158.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db828) returned 1 Thread: id = 2651 os_tid = 0x24f8 [0156.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb")) returned 0x20 [0157.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", dwFileAttributes=0x20) returned 0 [0157.403] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.403] GetLastError () returned 0x5 [0157.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", dwFileAttributes=0x20) returned 0 [0157.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db8c8) returned 1 Thread: id = 2652 os_tid = 0x24fc [0156.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo")) returned 0x20 [0158.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", dwFileAttributes=0x20) returned 0 [0158.674] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.674] GetLastError () returned 0x5 [0158.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", dwFileAttributes=0x20) returned 0 [0158.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db968) returned 1 Thread: id = 2653 os_tid = 0x2500 [0156.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve")) returned 0x20 [0158.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", dwFileAttributes=0x20) returned 0 [0158.692] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.693] GetLastError () returned 0x5 [0158.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", dwFileAttributes=0x20) returned 0 [0158.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dba08) returned 1 Thread: id = 2654 os_tid = 0x2504 [0156.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat")) returned 0x20 [0158.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", dwFileAttributes=0x20) returned 0 [0158.694] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.694] GetLastError () returned 0x5 [0158.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", dwFileAttributes=0x20) returned 0 [0158.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 Thread: id = 2655 os_tid = 0x2508 [0156.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs")) returned 0x20 [0158.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", dwFileAttributes=0x20) returned 0 [0158.695] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.695] GetLastError () returned 0x5 [0158.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", dwFileAttributes=0x20) returned 0 [0158.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ed8) returned 1 Thread: id = 2656 os_tid = 0x250c [0156.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht")) returned 0x20 [0158.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", dwFileAttributes=0x20) returned 0 [0158.697] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.697] GetLastError () returned 0x5 [0158.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", dwFileAttributes=0x20) returned 0 [0158.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187bf8) returned 1 Thread: id = 2657 os_tid = 0x2510 [0156.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan")) returned 0x20 [0158.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", dwFileAttributes=0x20) returned 0 [0158.698] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.698] GetLastError () returned 0x5 [0158.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", dwFileAttributes=0x20) returned 0 [0158.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187aa8) returned 1 Thread: id = 2658 os_tid = 0x2514 [0156.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu")) returned 0x20 [0158.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", dwFileAttributes=0x20) returned 0 [0158.699] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.700] GetLastError () returned 0x5 [0158.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", dwFileAttributes=0x20) returned 0 [0158.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186c38) returned 1 Thread: id = 2659 os_tid = 0x2518 [0156.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp")) returned 0x20 [0158.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", dwFileAttributes=0x20) returned 0 [0158.701] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.701] GetLastError () returned 0x5 [0158.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", dwFileAttributes=0x20) returned 0 [0158.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187e98) returned 1 Thread: id = 2660 os_tid = 0x251c [0156.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq")) returned 0x20 [0158.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", dwFileAttributes=0x20) returned 0 [0158.702] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.702] GetLastError () returned 0x5 [0158.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", dwFileAttributes=0x20) returned 0 [0158.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81881e0) returned 1 Thread: id = 2661 os_tid = 0x2520 [0156.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra")) returned 0x20 [0158.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", dwFileAttributes=0x20) returned 0 [0158.703] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.704] GetLastError () returned 0x5 [0158.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", dwFileAttributes=0x20) returned 0 [0158.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187b50) returned 1 Thread: id = 2662 os_tid = 0x2524 [0157.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita")) returned 0x20 [0157.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", dwFileAttributes=0x20) returned 0 [0157.413] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.413] GetLastError () returned 0x5 [0157.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", dwFileAttributes=0x20) returned 0 [0157.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187fe8) returned 1 Thread: id = 2663 os_tid = 0x2528 [0157.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft")) returned 0x20 [0157.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft", dwFileAttributes=0x20) returned 0 [0157.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.417] GetLastError () returned 0x5 [0157.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft", dwFileAttributes=0x20) returned 0 [0157.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187d48) returned 1 Thread: id = 2664 os_tid = 0x252c [0157.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft")) returned 0x20 [0157.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft", dwFileAttributes=0x20) returned 0 [0157.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.422] GetLastError () returned 0x5 [0157.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft", dwFileAttributes=0x20) returned 0 [0157.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187220) returned 1 Thread: id = 2665 os_tid = 0x2530 [0157.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft")) returned 0x20 [0157.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft", dwFileAttributes=0x20) returned 0 [0157.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.443] GetLastError () returned 0x5 [0157.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft", dwFileAttributes=0x20) returned 0 [0157.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 2666 os_tid = 0x2534 [0157.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft")) returned 0x20 [0157.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft", dwFileAttributes=0x20) returned 0 [0157.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.457] GetLastError () returned 0x5 [0157.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft", dwFileAttributes=0x20) returned 0 [0157.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d97a8) returned 1 Thread: id = 2667 os_tid = 0x2538 [0157.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft")) returned 0x20 [0157.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft", dwFileAttributes=0x20) returned 0 [0157.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.458] GetLastError () returned 0x5 [0157.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft", dwFileAttributes=0x20) returned 0 [0157.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81872c8) returned 1 Thread: id = 2668 os_tid = 0x253c [0157.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft")) returned 0x20 [0157.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft", dwFileAttributes=0x20) returned 0 [0157.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.459] GetLastError () returned 0x5 [0157.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft", dwFileAttributes=0x20) returned 0 [0157.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81874c0) returned 1 Thread: id = 2669 os_tid = 0x2540 [0157.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft")) returned 0x20 [0157.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft", dwFileAttributes=0x20) returned 0 [0157.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.442] GetLastError () returned 0x5 [0157.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft", dwFileAttributes=0x20) returned 0 [0157.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 2670 os_tid = 0x2544 [0157.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft")) returned 0x20 [0157.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft", dwFileAttributes=0x20) returned 0 [0157.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.441] GetLastError () returned 0x5 [0157.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft", dwFileAttributes=0x20) returned 0 [0157.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a40) returned 1 Thread: id = 2671 os_tid = 0x2548 [0157.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft")) returned 0x20 [0157.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft", dwFileAttributes=0x20) returned 0 [0157.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.460] GetLastError () returned 0x5 [0157.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft", dwFileAttributes=0x20) returned 0 [0157.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbaa8) returned 1 Thread: id = 2672 os_tid = 0x254c [0157.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf")) returned 0x20 [0157.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.434] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.434] GetLastError () returned 0x5 [0157.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d678) returned 1 Thread: id = 2673 os_tid = 0x2550 [0157.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf")) returned 0x20 [0157.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.436] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.436] GetLastError () returned 0x5 [0157.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 2674 os_tid = 0x2554 [0157.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini")) returned 0x20 [0166.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.287] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.287] GetLastError () returned 0x5 [0166.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfff8) returned 1 Thread: id = 2675 os_tid = 0x2558 [0157.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html")) returned 0x20 [0165.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", dwFileAttributes=0x20) returned 0 [0165.855] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.855] GetLastError () returned 0x5 [0165.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", dwFileAttributes=0x20) returned 0 [0165.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35c70) returned 1 Thread: id = 2676 os_tid = 0x255c [0157.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini")) returned 0x20 [0161.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", dwFileAttributes=0x20) returned 0 [0161.510] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.510] GetLastError () returned 0x5 [0161.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", dwFileAttributes=0x20) returned 0 [0161.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 2677 os_tid = 0x2560 [0157.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html")) returned 0x20 [0162.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", dwFileAttributes=0x20) returned 0 [0162.821] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.821] GetLastError () returned 0x5 [0162.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", dwFileAttributes=0x20) returned 0 [0162.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f356d0) returned 1 Thread: id = 2678 os_tid = 0x2564 [0157.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini")) returned 0x20 [0166.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.298] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.298] GetLastError () returned 0x5 [0166.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053fc8) returned 1 Thread: id = 2679 os_tid = 0x2568 [0157.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html")) returned 0x20 [0166.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", dwFileAttributes=0x20) returned 0 [0166.300] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.300] GetLastError () returned 0x5 [0166.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", dwFileAttributes=0x20) returned 0 [0166.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1978) returned 1 Thread: id = 2680 os_tid = 0x256c [0157.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini")) returned 0x20 [0166.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.301] GetLastError () returned 0x5 [0166.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053c10) returned 1 Thread: id = 2681 os_tid = 0x2570 [0157.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html")) returned 0x20 [0166.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", dwFileAttributes=0x20) returned 0 [0166.303] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.303] GetLastError () returned 0x5 [0166.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", dwFileAttributes=0x20) returned 0 [0166.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28a8) returned 1 Thread: id = 2682 os_tid = 0x2574 [0157.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini")) returned 0x20 [0166.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.304] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.304] GetLastError () returned 0x5 [0166.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80539f0) returned 1 Thread: id = 2683 os_tid = 0x2578 [0157.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html")) returned 0x20 [0166.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", dwFileAttributes=0x20) returned 0 [0166.305] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.305] GetLastError () returned 0x5 [0166.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", dwFileAttributes=0x20) returned 0 [0166.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2788) returned 1 Thread: id = 2684 os_tid = 0x257c [0157.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf")) returned 0x20 [0165.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.641] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.641] GetLastError () returned 0x5 [0165.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 2685 os_tid = 0x2580 [0157.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf")) returned 0x20 [0163.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0163.772] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.638] GetLastError () returned 0x5 [0165.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0165.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9908) returned 1 Thread: id = 2686 os_tid = 0x2584 [0157.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf")) returned 0x20 [0165.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0165.648] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.648] GetLastError () returned 0x5 [0165.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0165.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 Thread: id = 2687 os_tid = 0x2588 [0157.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf")) returned 0x20 [0164.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.899] GetLastError () returned 0x5 [0164.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff75a0) returned 1 Thread: id = 2688 os_tid = 0x258c [0157.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf")) returned 0x20 [0165.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0165.639] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.640] GetLastError () returned 0x5 [0165.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0165.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 2689 os_tid = 0x2590 [0157.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf")) returned 0x20 [0164.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.741] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.634] GetLastError () returned 0x5 [0165.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0165.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5e18) returned 1 Thread: id = 2690 os_tid = 0x2594 [0157.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf")) returned 0x20 [0165.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.631] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.631] GetLastError () returned 0x5 [0165.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a70) returned 1 Thread: id = 2691 os_tid = 0x2598 [0157.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf")) returned 0x20 [0163.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0163.771] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.628] GetLastError () returned 0x5 [0165.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0165.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d99b8) returned 1 Thread: id = 2692 os_tid = 0x259c [0157.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf")) returned 0x20 [0165.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0165.633] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.633] GetLastError () returned 0x5 [0165.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0165.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff67f8) returned 1 Thread: id = 2693 os_tid = 0x25a0 [0157.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf")) returned 0x20 [0164.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.898] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.898] GetLastError () returned 0x5 [0164.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 2694 os_tid = 0x25a4 [0157.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf")) returned 0x20 [0165.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0165.630] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.630] GetLastError () returned 0x5 [0165.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0165.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6c48) returned 1 Thread: id = 2695 os_tid = 0x25a8 [0157.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf")) returned 0x20 [0164.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.741] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.627] GetLastError () returned 0x5 [0165.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0165.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5fa8) returned 1 Thread: id = 2696 os_tid = 0x25ac [0157.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0157.454] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" [0157.454] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\" [0157.454] wcscat (in: _Dest=0x2ff6740, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*" [0157.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0157.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8256cd50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8256cd50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0162.484] wcscmp (_String1=".", _String2=".") returned 0 [0162.484] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8256cd50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8256cd50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.484] wcscmp (_String1="..", _String2=".") returned 1 [0162.484] wcscmp (_String1="..", _String2="..") returned 0 [0162.484] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 1 [0162.484] wcscmp (_String1="SignedComponents.cer", _String2=".") returned 1 [0162.484] wcscmp (_String1="SignedComponents.cer", _String2="..") returned 1 [0162.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8aa8 [0162.484] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" [0162.484] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\" [0162.484] wcscat (in: _Dest=0x2c8aa8, _Source="SignedComponents.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" [0168.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0168.994] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 0 [0168.994] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0168.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0168.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 [0168.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 Thread: id = 2697 os_tid = 0x25b0 [0157.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81df888 [0157.455] wcscpy (in: _Dest=0x81df888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" [0157.455] wcscat (in: _Dest=0x81df888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\" [0157.455] wcscat (in: _Dest=0x81df888, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*" [0157.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0157.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x904e1e90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0161.481] wcscmp (_String1=".", _String2=".") returned 0 [0161.481] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x904e1e90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.481] wcscmp (_String1="..", _String2=".") returned 1 [0161.481] wcscmp (_String1="..", _String2="..") returned 0 [0161.481] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 1 [0161.481] wcscmp (_String1="SignedManagedObjects.cer", _String2=".") returned 1 [0161.481] wcscmp (_String1="SignedManagedObjects.cer", _String2="..") returned 1 [0161.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x80208d0 [0161.481] wcscpy (in: _Dest=0x80208d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" [0161.481] wcscat (in: _Dest=0x80208d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\" [0161.481] wcscat (in: _Dest=0x80208d0, _Source="SignedManagedObjects.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" [0163.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80208d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c68 [0163.059] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 0 [0163.059] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0163.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0163.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df888) returned 1 [0163.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 2698 os_tid = 0x25b4 [0157.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81dab98 [0157.456] wcscpy (in: _Dest=0x81dab98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0157.456] wcscat (in: _Dest=0x81dab98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\" [0157.456] wcscat (in: _Dest=0x81dab98, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*" [0157.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0157.456] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37558 [0161.933] wcscmp (_String1=".", _String2=".") returned 0 [0161.933] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.933] wcscmp (_String1="..", _String2=".") returned 1 [0161.933] wcscmp (_String1="..", _String2="..") returned 0 [0161.933] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Management.cer", cAlternateFileName="MANAGE~1.CER")) returned 1 [0161.933] wcscmp (_String1="Management.cer", _String2=".") returned 1 [0161.933] wcscmp (_String1="Management.cer", _String2="..") returned 1 [0161.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1bb08 [0161.933] wcscpy (in: _Dest=0x3e1bb08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0161.933] wcscat (in: _Dest=0x3e1bb08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\" [0161.933] wcscat (in: _Dest=0x3e1bb08, _Source="Management.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" [0164.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1bb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0164.579] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1 [0164.579] wcscmp (_String1="RELAY.CER", _String2=".") returned 1 [0164.579] wcscmp (_String1="RELAY.CER", _String2="..") returned 1 [0164.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81df648 [0164.579] wcscpy (in: _Dest=0x81df648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0164.579] wcscat (in: _Dest=0x81df648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\" [0164.579] wcscat (in: _Dest=0x81df648, _Source="RELAY.CER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" [0164.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2960 [0164.580] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 0 [0164.580] FindClose (in: hFindFile=0x3f37558 | out: hFindFile=0x3f37558) returned 1 [0164.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0164.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dab98) returned 1 [0164.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9a68) returned 1 Thread: id = 2699 os_tid = 0x25b8 [0157.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur")) returned 0x20 [0157.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR", dwFileAttributes=0x20) returned 0 [0157.461] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.461] GetLastError () returned 0x5 [0157.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR", dwFileAttributes=0x20) returned 0 [0157.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186b90) returned 1 Thread: id = 2700 os_tid = 0x25bc [0157.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur")) returned 0x20 [0157.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR", dwFileAttributes=0x20) returned 0 [0157.463] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.463] GetLastError () returned 0x5 [0157.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR", dwFileAttributes=0x20) returned 0 [0157.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9b18) returned 1 Thread: id = 2701 os_tid = 0x25c0 [0157.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur")) returned 0x20 [0157.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR", dwFileAttributes=0x20) returned 0 [0157.464] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.464] GetLastError () returned 0x5 [0157.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR", dwFileAttributes=0x20) returned 0 [0157.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9bc8) returned 1 Thread: id = 2702 os_tid = 0x25c4 [0157.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur")) returned 0x20 [0157.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR", dwFileAttributes=0x20) returned 0 [0157.466] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.466] GetLastError () returned 0x5 [0157.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR", dwFileAttributes=0x20) returned 0 [0157.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418d0) returned 1 Thread: id = 2703 os_tid = 0x25c8 [0157.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81df948 [0157.467] wcscpy (in: _Dest=0x81df948, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0157.467] wcscat (in: _Dest=0x81df948, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0157.467] wcscat (in: _Dest=0x81df948, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" [0157.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0157.467] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0157.469] wcscmp (_String1=".", _String2=".") returned 0 [0157.469] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.469] wcscmp (_String1="..", _String2=".") returned 1 [0157.469] wcscmp (_String1="..", _String2="..") returned 0 [0157.469] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa825f5e7, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa825f5e7, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7b99dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0157.469] wcscmp (_String1="background.png", _String2=".") returned 1 [0157.469] wcscmp (_String1="background.png", _String2="..") returned 1 [0157.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e64288 [0157.469] wcscpy (in: _Dest=0x3e64288, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0157.469] wcscat (in: _Dest=0x3e64288, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0157.469] wcscat (in: _Dest=0x3e64288, _Source="background.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" [0161.180] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20 [0161.180] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0161.180] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.180] GetLastError () returned 0x5 [0161.180] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0161.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64288) returned 1 [0161.180] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dad96bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1dad96bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1dad96bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0161.181] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0161.181] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0161.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e64288 [0161.181] wcscpy (in: _Dest=0x3e64288, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0161.181] wcscat (in: _Dest=0x3e64288, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0161.181] wcscat (in: _Dest=0x3e64288, _Source="behavior.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" [0161.181] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20 [0161.181] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0161.181] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.181] GetLastError () returned 0x5 [0161.182] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0161.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64288) returned 1 [0161.182] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8285746, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8285746, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7dfb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0161.182] wcscmp (_String1="device.png", _String2=".") returned 1 [0161.182] wcscmp (_String1="device.png", _String2="..") returned 1 [0161.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1bb08 [0161.182] wcscpy (in: _Dest=0x3e1bb08, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0161.182] wcscat (in: _Dest=0x3e1bb08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0161.182] wcscat (in: _Dest=0x3e1bb08, _Source="device.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" [0161.182] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20 [0161.182] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0161.183] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.183] GetLastError () returned 0x5 [0161.183] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0161.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bb08) returned 1 [0161.183] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82ab8a5, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82ab8a5, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0161.183] wcscmp (_String1="overlay.png", _String2=".") returned 1 [0161.183] wcscmp (_String1="overlay.png", _String2="..") returned 1 [0161.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1bb08 [0161.183] wcscpy (in: _Dest=0x3e1bb08, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0161.183] wcscat (in: _Dest=0x3e1bb08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0161.183] wcscat (in: _Dest=0x3e1bb08, _Source="overlay.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" [0161.184] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20 [0161.184] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0161.184] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.184] GetLastError () returned 0x5 [0161.184] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0161.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bb08) returned 1 [0161.185] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0161.185] wcscmp (_String1="superbar.png", _String2=".") returned 1 [0161.185] wcscmp (_String1="superbar.png", _String2="..") returned 1 [0161.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e64288 [0161.185] wcscpy (in: _Dest=0x3e64288, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0161.185] wcscat (in: _Dest=0x3e64288, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0161.185] wcscat (in: _Dest=0x3e64288, _Source="superbar.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" [0161.185] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20 [0161.185] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0161.186] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.186] GetLastError () returned 0x5 [0161.186] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0161.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64288) returned 1 [0161.186] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0161.186] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0161.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0161.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df948) returned 1 [0161.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7710) returned 1 Thread: id = 2704 os_tid = 0x25cc [0157.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81dfa08 [0157.470] wcscpy (in: _Dest=0x81dfa08, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0157.470] wcscat (in: _Dest=0x81dfa08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0157.470] wcscat (in: _Dest=0x81dfa08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" [0157.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0157.470] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0157.470] wcscmp (_String1=".", _String2=".") returned 0 [0157.470] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.470] wcscmp (_String1="..", _String2=".") returned 1 [0157.470] wcscmp (_String1="..", _String2="..") returned 0 [0157.470] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a06b8bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2a06b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0157.470] wcscmp (_String1="background.png", _String2=".") returned 1 [0157.470] wcscmp (_String1="background.png", _String2="..") returned 1 [0157.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e65518 [0157.471] wcscpy (in: _Dest=0x3e65518, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0157.471] wcscat (in: _Dest=0x3e65518, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0157.471] wcscat (in: _Dest=0x3e65518, _Source="background.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" [0161.189] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20 [0161.190] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0161.190] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.190] GetLastError () returned 0x5 [0161.190] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0161.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65518) returned 1 [0161.190] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64cf1c24, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64cf1c24, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0161.190] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0161.190] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0161.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e65518 [0161.190] wcscpy (in: _Dest=0x3e65518, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0161.191] wcscat (in: _Dest=0x3e65518, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0161.191] wcscat (in: _Dest=0x3e65518, _Source="behavior.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" [0161.191] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20 [0161.191] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0161.191] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.191] GetLastError () returned 0x5 [0161.191] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0161.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65518) returned 1 [0161.192] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0161.192] wcscmp (_String1="watermark.png", _String2=".") returned 1 [0161.192] wcscmp (_String1="watermark.png", _String2="..") returned 1 [0161.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e65518 [0161.192] wcscpy (in: _Dest=0x3e65518, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0161.192] wcscat (in: _Dest=0x3e65518, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0161.192] wcscat (in: _Dest=0x3e65518, _Source="watermark.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" [0161.192] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20 [0161.192] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0161.193] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.193] GetLastError () returned 0x5 [0161.193] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0161.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65518) returned 1 [0161.193] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0161.193] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0161.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0161.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfa08) returned 1 [0161.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41988) returned 1 Thread: id = 2705 os_tid = 0x25d0 [0157.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32bce0 [0157.477] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0157.477] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0157.477] wcscat (in: _Dest=0x32bce0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*" [0157.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0157.477] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0157.478] wcscmp (_String1=".", _String2=".") returned 0 [0157.478] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.478] wcscmp (_String1="..", _String2=".") returned 1 [0157.478] wcscmp (_String1="..", _String2="..") returned 0 [0157.478] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0157.478] wcscmp (_String1="Accessibility", _String2=".") returned 1 [0157.478] wcscmp (_String1="Accessibility", _String2="..") returned 1 [0157.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9bc8 [0157.478] wcscpy (in: _Dest=0x81d9bc8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0157.478] wcscat (in: _Dest=0x81d9bc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0157.478] wcscat (in: _Dest=0x81d9bc8, _Source="Accessibility" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0161.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d41988 [0161.195] wcscpy (in: _Dest=0x3d41988, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0161.195] wcscat (in: _Dest=0x3d41988, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\" [0161.195] wcscat (in: _Dest=0x3d41988, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*" [0161.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0161.195] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0161.195] wcscmp (_String1=".", _String2=".") returned 0 [0161.195] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.195] wcscmp (_String1="..", _String2=".") returned 1 [0161.195] wcscmp (_String1="..", _String2="..") returned 0 [0161.196] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93532dc2, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x93532dc2, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0161.196] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0161.196] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0161.196] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0161.196] wcscmp (_String1="Speech Recognition.lnk", _String2=".") returned 1 [0161.196] wcscmp (_String1="Speech Recognition.lnk", _String2="..") returned 1 [0161.196] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 0 [0161.196] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0161.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0161.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41988) returned 1 [0161.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9bc8) returned 1 [0161.196] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8b5f96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c8b5f96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c8b5f96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0161.196] wcscmp (_String1="Calculator.lnk", _String2=".") returned 1 [0161.196] wcscmp (_String1="Calculator.lnk", _String2="..") returned 1 [0161.197] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9350cc63, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9350cc63, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0161.197] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0161.197] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0161.197] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b19ca14, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b19ca14, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b19ca14, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0161.197] wcscmp (_String1="displayswitch.lnk", _String2=".") returned 1 [0161.197] wcscmp (_String1="displayswitch.lnk", _String2="..") returned 1 [0161.197] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea56fc00, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea56fc00, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea56fc00, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0161.197] wcscmp (_String1="Math Input Panel.lnk", _String2=".") returned 1 [0161.197] wcscmp (_String1="Math Input Panel.lnk", _String2="..") returned 1 [0161.197] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9479f40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe9479f40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe9479f40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0161.197] wcscmp (_String1="Mobility Center.lnk", _String2=".") returned 1 [0161.197] wcscmp (_String1="Mobility Center.lnk", _String2="..") returned 1 [0161.197] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a13760, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe6a13760, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe6a398c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0161.197] wcscmp (_String1="NetworkProjection.lnk", _String2=".") returned 1 [0161.197] wcscmp (_String1="NetworkProjection.lnk", _String2="..") returned 1 [0161.197] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f821656, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6f821656, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6f821656, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0161.197] wcscmp (_String1="Paint.lnk", _String2=".") returned 1 [0161.197] wcscmp (_String1="Paint.lnk", _String2="..") returned 1 [0161.197] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6c09bc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5f6c09bc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5f6c09bc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0161.197] wcscmp (_String1="Remote Desktop Connection.lnk", _String2=".") returned 1 [0161.197] wcscmp (_String1="Remote Desktop Connection.lnk", _String2="..") returned 1 [0161.197] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e2020, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5e2020, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0161.198] wcscmp (_String1="Snipping Tool.lnk", _String2=".") returned 1 [0161.198] wcscmp (_String1="Snipping Tool.lnk", _String2="..") returned 1 [0161.198] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e52066a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e52066a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e52066a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0161.198] wcscmp (_String1="Sound Recorder.lnk", _String2=".") returned 1 [0161.198] wcscmp (_String1="Sound Recorder.lnk", _String2="..") returned 1 [0161.198] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4fd7e0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea4fd7e0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea4fd7e0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0161.198] wcscmp (_String1="Sticky Notes.lnk", _String2=".") returned 1 [0161.198] wcscmp (_String1="Sticky Notes.lnk", _String2="..") returned 1 [0161.198] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae14945, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ae14945, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ae14945, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0161.198] wcscmp (_String1="Sync Center.lnk", _String2=".") returned 1 [0161.198] wcscmp (_String1="Sync Center.lnk", _String2="..") returned 1 [0161.198] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0161.198] wcscmp (_String1="System Tools", _String2=".") returned 1 [0161.198] wcscmp (_String1="System Tools", _String2="..") returned 1 [0161.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81d9bc8 [0161.198] wcscpy (in: _Dest=0x81d9bc8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0161.198] wcscat (in: _Dest=0x81d9bc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0161.198] wcscat (in: _Dest=0x81d9bc8, _Source="System Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0161.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da988 [0161.199] wcscpy (in: _Dest=0x81da988, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0161.199] wcscat (in: _Dest=0x81da988, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\" [0161.199] wcscat (in: _Dest=0x81da988, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*" [0161.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0161.199] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0161.199] wcscmp (_String1=".", _String2=".") returned 0 [0161.199] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.199] wcscmp (_String1="..", _String2=".") returned 1 [0161.199] wcscmp (_String1="..", _String2="..") returned 0 [0161.199] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c902257, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c902257, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c9283b7, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0161.199] wcscmp (_String1="Character Map.lnk", _String2=".") returned 1 [0161.199] wcscmp (_String1="Character Map.lnk", _String2="..") returned 1 [0161.199] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9357f080, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9357f080, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0161.199] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0161.199] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0161.200] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00af8f, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6c00af8f, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6c00af8f, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0161.200] wcscmp (_String1="dfrgui.lnk", _String2=".") returned 1 [0161.200] wcscmp (_String1="dfrgui.lnk", _String2="..") returned 1 [0161.200] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3e1ef0, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b3e1ef0, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b3e1ef0, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0161.200] wcscmp (_String1="Disk Cleanup.lnk", _String2=".") returned 1 [0161.200] wcscmp (_String1="Disk Cleanup.lnk", _String2="..") returned 1 [0161.200] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d2e5e1a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d2e5e1a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d2e5e1a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0161.200] wcscmp (_String1="Resource Monitor.lnk", _String2=".") returned 1 [0161.200] wcscmp (_String1="Resource Monitor.lnk", _String2="..") returned 1 [0161.200] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5597fb3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5597fb3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5597fb3a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0161.200] wcscmp (_String1="System Information.lnk", _String2=".") returned 1 [0161.200] wcscmp (_String1="System Information.lnk", _String2="..") returned 1 [0161.200] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad30103, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ad30103, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ad30103, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0161.200] wcscmp (_String1="System Restore.lnk", _String2=".") returned 1 [0161.200] wcscmp (_String1="System Restore.lnk", _String2="..") returned 1 [0161.200] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df49088, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6df49088, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6df49088, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0161.200] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0161.200] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0161.200] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e62b00c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e62b00c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0161.200] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2=".") returned 1 [0161.200] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2="..") returned 1 [0161.200] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0161.201] wcscmp (_String1="Windows Easy Transfer.lnk", _String2=".") returned 1 [0161.201] wcscmp (_String1="Windows Easy Transfer.lnk", _String2="..") returned 1 [0161.201] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0161.201] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0161.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0161.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da988) returned 1 [0161.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9bc8) returned 1 [0161.201] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0161.201] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0161.201] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0161.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8186a40 [0161.201] wcscpy (in: _Dest=0x8186a40, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0161.201] wcscat (in: _Dest=0x8186a40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0161.201] wcscat (in: _Dest=0x8186a40, _Source="Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0161.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d9bc8 [0161.202] wcscpy (in: _Dest=0x81d9bc8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0161.202] wcscat (in: _Dest=0x81d9bc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\" [0161.202] wcscat (in: _Dest=0x81d9bc8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*" [0161.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0161.202] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0161.202] wcscmp (_String1=".", _String2=".") returned 0 [0161.202] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.202] wcscmp (_String1="..", _String2=".") returned 1 [0161.202] wcscmp (_String1="..", _String2="..") returned 0 [0161.202] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84e2d1b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0161.202] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0161.202] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0161.202] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95124c0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95124c0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95124c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0161.202] wcscmp (_String1="ShapeCollector.lnk", _String2=".") returned 1 [0161.202] wcscmp (_String1="ShapeCollector.lnk", _String2="..") returned 1 [0161.202] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95aaa40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95aaa40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95aaa40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0161.203] wcscmp (_String1="TabTip.lnk", _String2=".") returned 1 [0161.203] wcscmp (_String1="TabTip.lnk", _String2="..") returned 1 [0161.203] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0161.203] wcscmp (_String1="Windows Journal.lnk", _String2=".") returned 1 [0161.203] wcscmp (_String1="Windows Journal.lnk", _String2="..") returned 1 [0161.203] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0161.203] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0161.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0161.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9bc8) returned 1 [0161.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a40) returned 1 [0161.203] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec6a9d8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ec6a9d8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ec6a9d8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0161.203] wcscmp (_String1="Welcome Center.lnk", _String2=".") returned 1 [0161.203] wcscmp (_String1="Welcome Center.lnk", _String2="..") returned 1 [0161.203] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0161.203] wcscmp (_String1="Windows PowerShell", _String2=".") returned 1 [0161.203] wcscmp (_String1="Windows PowerShell", _String2="..") returned 1 [0161.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41988 [0161.204] wcscpy (in: _Dest=0x3d41988, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0161.204] wcscat (in: _Dest=0x3d41988, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0161.204] wcscat (in: _Dest=0x3d41988, _Source="Windows PowerShell" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0161.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81dfa08 [0161.204] wcscpy (in: _Dest=0x81dfa08, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0161.204] wcscat (in: _Dest=0x81dfa08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\" [0161.204] wcscat (in: _Dest=0x81dfa08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*" [0161.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0161.204] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0161.204] wcscmp (_String1=".", _String2=".") returned 0 [0161.204] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.205] wcscmp (_String1="..", _String2=".") returned 1 [0161.205] wcscmp (_String1="..", _String2="..") returned 0 [0161.205] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.205] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0161.205] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0161.205] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119d8cbf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0161.205] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2=".") returned 1 [0161.205] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2="..") returned 1 [0161.205] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0161.205] wcscmp (_String1="Windows PowerShell.lnk", _String2=".") returned 1 [0161.205] wcscmp (_String1="Windows PowerShell.lnk", _String2="..") returned 1 [0161.205] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0161.205] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0161.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0161.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfa08) returned 1 [0161.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41988) returned 1 [0161.205] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0161.205] wcscmp (_String1="Wordpad.lnk", _String2=".") returned 1 [0161.206] wcscmp (_String1="Wordpad.lnk", _String2="..") returned 1 [0161.206] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0161.206] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0161.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0161.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 [0161.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1590) returned 1 Thread: id = 2706 os_tid = 0x25d4 [0157.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x8186b90 [0157.478] wcscpy (in: _Dest=0x8186b90, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0157.478] wcscat (in: _Dest=0x8186b90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\" [0157.478] wcscat (in: _Dest=0x8186b90, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*" [0157.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0157.479] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0157.479] wcscmp (_String1=".", _String2=".") returned 0 [0157.479] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.479] wcscmp (_String1="..", _String2=".") returned 1 [0157.479] wcscmp (_String1="..", _String2="..") returned 0 [0157.479] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11bc7ea2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11bc7ea2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x11bc7ea2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0157.479] wcscmp (_String1="Component Services.lnk", _String2=".") returned 1 [0157.479] wcscmp (_String1="Component Services.lnk", _String2="..") returned 1 [0157.479] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ecb7b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a3ecb7b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a412cdb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0157.479] wcscmp (_String1="Computer Management.lnk", _String2=".") returned 1 [0157.479] wcscmp (_String1="Computer Management.lnk", _String2="..") returned 1 [0157.479] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffd732, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5dffd732, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5dffd732, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0157.479] wcscmp (_String1="Data Sources (ODBC).lnk", _String2=".") returned 1 [0157.479] wcscmp (_String1="Data Sources (ODBC).lnk", _String2="..") returned 1 [0157.479] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5571e536, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5571e536, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0157.479] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0157.479] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0157.479] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6de18586, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6de18586, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6de18586, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0157.479] wcscmp (_String1="Event Viewer.lnk", _String2=".") returned 1 [0157.479] wcscmp (_String1="Event Viewer.lnk", _String2="..") returned 1 [0157.479] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a77ec81, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a77ec81, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a77ec81, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0157.480] wcscmp (_String1="iSCSI Initiator.lnk", _String2=".") returned 1 [0157.480] wcscmp (_String1="iSCSI Initiator.lnk", _String2="..") returned 1 [0157.480] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556f83d6, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x556f83d6, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x556f83d6, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0157.480] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2=".") returned 1 [0157.480] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2="..") returned 1 [0157.480] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d227738, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d227738, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d227738, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0157.480] wcscmp (_String1="Performance Monitor.lnk", _String2=".") returned 1 [0157.480] wcscmp (_String1="Performance Monitor.lnk", _String2="..") returned 1 [0157.480] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a63280, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe4a63280, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe4a63280, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0157.480] wcscmp (_String1="Print Management.lnk", _String2=".") returned 1 [0157.480] wcscmp (_String1="Print Management.lnk", _String2="..") returned 1 [0157.480] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed792b60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed792b60, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0157.480] wcscmp (_String1="Security Configuration Management.lnk", _String2=".") returned 1 [0157.480] wcscmp (_String1="Security Configuration Management.lnk", _String2="..") returned 1 [0157.480] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645e65ce, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x645e65ce, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6460c72e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0157.480] wcscmp (_String1="services.lnk", _String2=".") returned 1 [0157.480] wcscmp (_String1="services.lnk", _String2="..") returned 1 [0157.480] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5590d719, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5590d719, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5593387a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0157.480] wcscmp (_String1="System Configuration.lnk", _String2=".") returned 1 [0157.480] wcscmp (_String1="System Configuration.lnk", _String2="..") returned 1 [0157.480] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6defcdc8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6defcdc8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6defcdc8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0157.480] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0157.480] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0157.480] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x614cdfb3, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x614cdfb3, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x615b27f5, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0157.480] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2=".") returned 1 [0157.480] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2="..") returned 1 [0157.480] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0157.480] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2=".") returned 1 [0157.481] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2="..") returned 1 [0157.481] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0157.481] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0157.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0157.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186b90) returned 1 [0157.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188090) returned 1 Thread: id = 2707 os_tid = 0x25d8 [0157.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddd98 [0157.481] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0157.482] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\" [0157.482] wcscat (in: _Dest=0x81ddd98, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*" [0157.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0157.482] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0157.482] wcscmp (_String1=".", _String2=".") returned 0 [0157.482] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.482] wcscmp (_String1="..", _String2=".") returned 1 [0157.482] wcscmp (_String1="..", _String2="..") returned 0 [0157.482] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x8ecb8f72, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x8ecb8f72, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0157.482] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0157.482] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0157.482] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0157.482] wcscmp (_String1="GameExplorer.lnk", _String2=".") returned 1 [0157.482] wcscmp (_String1="GameExplorer.lnk", _String2="..") returned 1 [0157.482] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 0 [0157.482] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0157.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0157.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 [0157.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 2708 os_tid = 0x25dc [0157.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf118 [0157.483] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0157.483] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\" [0157.483] wcscat (in: _Dest=0x81bf118, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*" [0157.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0157.483] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0157.485] wcscmp (_String1=".", _String2=".") returned 0 [0157.485] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.485] wcscmp (_String1="..", _String2=".") returned 1 [0157.485] wcscmp (_String1="..", _String2="..") returned 0 [0157.485] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0157.485] wcscmp (_String1="About Java.lnk", _String2=".") returned 1 [0157.485] wcscmp (_String1="About Java.lnk", _String2="..") returned 1 [0157.485] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0157.485] wcscmp (_String1="Check For Updates.lnk", _String2=".") returned 1 [0157.485] wcscmp (_String1="Check For Updates.lnk", _String2="..") returned 1 [0157.485] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6ae80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c6ae80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x78d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0157.485] wcscmp (_String1="Configure Java.lnk", _String2=".") returned 1 [0157.485] wcscmp (_String1="Configure Java.lnk", _String2="..") returned 1 [0157.485] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0157.485] wcscmp (_String1="Get Help.lnk", _String2=".") returned 1 [0157.485] wcscmp (_String1="Get Help.lnk", _String2="..") returned 1 [0157.485] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0157.485] wcscmp (_String1="Visit Java.com.lnk", _String2=".") returned 1 [0157.485] wcscmp (_String1="Visit Java.com.lnk", _String2="..") returned 1 [0157.485] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 0 [0157.486] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0157.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0157.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 [0157.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 2709 os_tid = 0x25e0 [0157.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32ce18 [0157.488] wcscpy (in: _Dest=0x32ce18, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0157.488] wcscat (in: _Dest=0x32ce18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\" [0157.488] wcscat (in: _Dest=0x32ce18, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*" [0157.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0157.488] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0157.488] wcscmp (_String1=".", _String2=".") returned 0 [0157.488] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.488] wcscmp (_String1="..", _String2=".") returned 1 [0157.488] wcscmp (_String1="..", _String2="..") returned 0 [0157.488] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd17c1c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7dd17c1c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7dd17c1c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0157.488] wcscmp (_String1="Backup and Restore Center.lnk", _String2=".") returned 1 [0157.488] wcscmp (_String1="Backup and Restore Center.lnk", _String2="..") returned 1 [0157.488] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f211e22, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0157.488] wcscmp (_String1="Create Recovery Disc.lnk", _String2=".") returned 1 [0157.489] wcscmp (_String1="Create Recovery Disc.lnk", _String2="..") returned 1 [0157.489] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x935a51df, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x935a51df, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0157.489] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0157.489] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0157.489] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0157.489] wcscmp (_String1="Remote Assistance.lnk", _String2=".") returned 1 [0157.489] wcscmp (_String1="Remote Assistance.lnk", _String2="..") returned 1 [0157.489] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 0 [0157.489] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0157.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0157.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ce18) returned 1 [0157.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d13c8) returned 1 Thread: id = 2710 os_tid = 0x25e4 [0157.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dbaa8 [0157.490] wcscpy (in: _Dest=0x81dbaa8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0157.490] wcscat (in: _Dest=0x81dbaa8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0157.490] wcscat (in: _Dest=0x81dbaa8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*" [0157.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0157.490] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0157.490] wcscmp (_String1=".", _String2=".") returned 0 [0157.490] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.490] wcscmp (_String1="..", _String2=".") returned 1 [0157.490] wcscmp (_String1="..", _String2="..") returned 0 [0157.490] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0157.490] wcscmp (_String1="Microsoft Access 2010.lnk", _String2=".") returned 1 [0157.491] wcscmp (_String1="Microsoft Access 2010.lnk", _String2="..") returned 1 [0157.491] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0157.491] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2=".") returned 1 [0157.491] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2="..") returned 1 [0157.491] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97214fd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0157.491] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2=".") returned 1 [0157.491] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2="..") returned 1 [0157.491] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8dc50b0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8dc50b0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0157.491] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2=".") returned 1 [0157.491] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2="..") returned 1 [0157.491] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0157.491] wcscmp (_String1="Microsoft Office 2010 Tools", _String2=".") returned 1 [0157.491] wcscmp (_String1="Microsoft Office 2010 Tools", _String2="..") returned 1 [0157.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e656c8 [0157.491] wcscpy (in: _Dest=0x3e656c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0157.491] wcscat (in: _Dest=0x3e656c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0157.491] wcscat (in: _Dest=0x3e656c8, _Source="Microsoft Office 2010 Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0161.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e65518 [0161.207] wcscpy (in: _Dest=0x3e65518, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0161.207] wcscat (in: _Dest=0x3e65518, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\" [0161.207] wcscat (in: _Dest=0x3e65518, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*" [0161.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0161.208] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0161.210] wcscmp (_String1=".", _String2=".") returned 0 [0161.210] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.210] wcscmp (_String1="..", _String2=".") returned 1 [0161.210] wcscmp (_String1="..", _String2="..") returned 0 [0161.210] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0161.210] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2=".") returned 1 [0161.210] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2="..") returned 1 [0161.210] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc226eed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc226eed0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0161.210] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2=".") returned 1 [0161.210] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2="..") returned 1 [0161.210] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0161.210] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2=".") returned 1 [0161.210] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2="..") returned 1 [0161.210] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0161.210] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2=".") returned 1 [0161.210] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2="..") returned 1 [0161.210] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971568f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0161.211] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2=".") returned 1 [0161.211] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2="..") returned 1 [0161.211] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0161.211] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2=".") returned 1 [0161.211] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2="..") returned 1 [0161.211] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 0 [0161.211] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0161.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0161.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65518) returned 1 [0161.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e656c8) returned 1 [0161.213] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0161.213] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2=".") returned 1 [0161.213] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2="..") returned 1 [0161.213] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0161.213] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2=".") returned 1 [0161.213] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2="..") returned 1 [0161.213] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0161.213] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2=".") returned 1 [0161.213] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2="..") returned 1 [0161.213] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8fa36d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8fa36d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0161.214] wcscmp (_String1="Microsoft Project 2010.lnk", _String2=".") returned 1 [0161.214] wcscmp (_String1="Microsoft Project 2010.lnk", _String2="..") returned 1 [0161.214] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0161.214] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2=".") returned 1 [0161.214] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2="..") returned 1 [0161.214] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0161.214] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0161.214] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0161.214] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22bb190, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0161.214] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2=".") returned 1 [0161.214] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2="..") returned 1 [0161.214] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0161.214] wcscmp (_String1="Microsoft Word 2010.lnk", _String2=".") returned 1 [0161.214] wcscmp (_String1="Microsoft Word 2010.lnk", _String2="..") returned 1 [0161.214] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 0 [0161.214] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0161.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0161.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbaa8) returned 1 [0161.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c74b8) returned 1 Thread: id = 2711 os_tid = 0x25e8 [0157.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d13c8 [0157.492] wcscpy (in: _Dest=0x81d13c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0157.492] wcscat (in: _Dest=0x81d13c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\" [0157.492] wcscat (in: _Dest=0x81d13c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*" [0157.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efef98 [0157.492] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0157.494] wcscmp (_String1=".", _String2=".") returned 0 [0157.494] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.494] wcscmp (_String1="..", _String2=".") returned 1 [0157.494] wcscmp (_String1="..", _String2="..") returned 0 [0157.494] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0157.494] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0157.494] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0157.494] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0 [0157.494] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0157.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efef98) returned 1 [0157.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d13c8) returned 1 [0157.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1bb8) returned 1 Thread: id = 2712 os_tid = 0x25ec [0157.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1bb8 [0157.497] wcscpy (in: _Dest=0x3eb1bb8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0157.497] wcscat (in: _Dest=0x3eb1bb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\" [0157.497] wcscat (in: _Dest=0x3eb1bb8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*" [0157.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efef98 [0157.497] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0157.498] wcscmp (_String1=".", _String2=".") returned 0 [0157.498] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.498] wcscmp (_String1="..", _String2=".") returned 1 [0157.498] wcscmp (_String1="..", _String2="..") returned 0 [0157.498] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0157.498] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0157.498] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0157.498] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0157.498] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0157.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efef98) returned 1 [0157.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1bb8) returned 1 [0157.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2278) returned 1 Thread: id = 2713 os_tid = 0x25f0 [0157.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d13c8 [0157.499] wcscpy (in: _Dest=0x81d13c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0157.499] wcscat (in: _Dest=0x81d13c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\" [0157.499] wcscat (in: _Dest=0x81d13c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*" [0157.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efef98 [0157.499] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0157.500] wcscmp (_String1=".", _String2=".") returned 0 [0157.500] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.500] wcscmp (_String1="..", _String2=".") returned 1 [0157.500] wcscmp (_String1="..", _String2="..") returned 0 [0157.500] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.500] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0157.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efef98) returned 1 [0157.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d13c8) returned 1 [0157.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2308) returned 1 Thread: id = 2714 os_tid = 0x25f4 [0157.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf")) returned 0x20 [0162.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0162.485] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.485] GetLastError () returned 0x5 [0162.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0162.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 Thread: id = 2715 os_tid = 0x25f8 [0157.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf")) returned 0x20 [0162.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0162.758] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.758] GetLastError () returned 0x5 [0162.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0162.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c78) returned 1 Thread: id = 2716 os_tid = 0x25fc [0157.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf")) returned 0x20 [0161.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.934] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.934] GetLastError () returned 0x5 [0161.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41a40) returned 1 Thread: id = 2717 os_tid = 0x2600 [0157.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf")) returned 0x20 [0162.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0162.759] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.759] GetLastError () returned 0x5 [0162.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0162.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ee0) returned 1 Thread: id = 2718 os_tid = 0x2604 [0157.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif")) returned 0x20 [0161.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF", dwFileAttributes=0x20) returned 0 [0161.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.514] GetLastError () returned 0x5 [0161.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF", dwFileAttributes=0x20) returned 0 [0161.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1f88) returned 1 Thread: id = 2719 os_tid = 0x2608 [0157.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif")) returned 0x20 [0161.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF", dwFileAttributes=0x20) returned 0 [0161.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.559] GetLastError () returned 0x5 [0161.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF", dwFileAttributes=0x20) returned 0 [0161.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2038) returned 1 Thread: id = 2720 os_tid = 0x260c [0157.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif")) returned 0x20 [0161.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF", dwFileAttributes=0x20) returned 0 [0161.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.560] GetLastError () returned 0x5 [0161.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF", dwFileAttributes=0x20) returned 0 [0161.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 2721 os_tid = 0x2610 [0157.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif")) returned 0x20 [0161.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF", dwFileAttributes=0x20) returned 0 [0161.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.562] GetLastError () returned 0x5 [0161.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF", dwFileAttributes=0x20) returned 0 [0161.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 Thread: id = 2722 os_tid = 0x2614 [0157.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif")) returned 0x20 [0161.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF", dwFileAttributes=0x20) returned 0 [0161.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.564] GetLastError () returned 0x5 [0161.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF", dwFileAttributes=0x20) returned 0 [0161.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355dd0) returned 1 Thread: id = 2723 os_tid = 0x2618 [0157.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini")) returned 0x20 [0166.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.307] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.307] GetLastError () returned 0x5 [0166.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 2724 os_tid = 0x261c [0157.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html")) returned 0x20 [0166.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", dwFileAttributes=0x20) returned 0 [0166.308] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.308] GetLastError () returned 0x5 [0166.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", dwFileAttributes=0x20) returned 0 [0166.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd648) returned 1 Thread: id = 2725 os_tid = 0x2620 [0157.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf")) returned 0x20 [0157.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.505] GetLastError () returned 0x5 [0157.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 2726 os_tid = 0x2624 [0157.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf")) returned 0x20 [0157.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.506] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.506] GetLastError () returned 0x5 [0157.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41af8) returned 1 Thread: id = 2727 os_tid = 0x2628 [0157.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf")) returned 0x20 [0157.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.507] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.507] GetLastError () returned 0x5 [0157.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5bc0) returned 1 Thread: id = 2728 os_tid = 0x262c [0157.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf")) returned 0x20 [0157.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.508] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.509] GetLastError () returned 0x5 [0157.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 Thread: id = 2729 os_tid = 0x2630 [0157.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf")) returned 0x20 [0157.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.509] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.510] GetLastError () returned 0x5 [0157.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41bb0) returned 1 Thread: id = 2730 os_tid = 0x2634 [0157.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf")) returned 0x20 [0157.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.511] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.511] GetLastError () returned 0x5 [0157.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6138) returned 1 Thread: id = 2731 os_tid = 0x2638 [0157.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf")) returned 0x20 [0157.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.512] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.512] GetLastError () returned 0x5 [0157.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff68b0) returned 1 Thread: id = 2732 os_tid = 0x263c [0157.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf")) returned 0x20 [0157.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.513] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.513] GetLastError () returned 0x5 [0157.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 Thread: id = 2733 os_tid = 0x2640 [0157.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf")) returned 0x20 [0157.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.514] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.515] GetLastError () returned 0x5 [0157.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6200) returned 1 Thread: id = 2734 os_tid = 0x2644 [0157.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8188090 [0157.515] wcscpy (in: _Dest=0x8188090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0157.515] wcscat (in: _Dest=0x8188090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\" [0157.515] wcscat (in: _Dest=0x8188090, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*" [0157.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efef98 [0157.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x896f0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x896f0670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0162.769] wcscmp (_String1=".", _String2=".") returned 0 [0162.769] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x896f0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x896f0670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.769] wcscmp (_String1="..", _String2=".") returned 1 [0162.769] wcscmp (_String1="..", _String2="..") returned 0 [0162.769] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a8325f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServicesV12", cAlternateFileName="INFOPA~1")) returned 1 [0162.769] wcscmp (_String1="InfoPathOMFormServicesV12", _String2=".") returned 1 [0162.769] wcscmp (_String1="InfoPathOMFormServicesV12", _String2="..") returned 1 [0162.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e65290 [0162.769] wcscpy (in: _Dest=0x3e65290, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0162.769] wcscat (in: _Dest=0x3e65290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\" [0162.769] wcscat (in: _Dest=0x3e65290, _Source="InfoPathOMFormServicesV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" [0163.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e65290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2684 [0163.105] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xb770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0163.105] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0163.105] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0163.105] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0163.105] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0163.105] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0163.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c91a8 [0163.106] wcscpy (in: _Dest=0x2c91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0163.106] wcscat (in: _Dest=0x2c91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\" [0163.106] wcscat (in: _Dest=0x2c91a8, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" [0163.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2680 [0163.106] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3efef98 | out: lpFindFileData=0x3efef98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0163.107] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0163.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efef98) returned 1 [0163.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188090) returned 1 [0163.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81865a8) returned 1 Thread: id = 2735 os_tid = 0x2648 [0157.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d13c8 [0157.518] wcscpy (in: _Dest=0x81d13c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" [0157.518] wcscat (in: _Dest=0x81d13c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\" [0157.518] wcscat (in: _Dest=0x81d13c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*" [0157.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efed30 [0157.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89253bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0162.034] wcscmp (_String1=".", _String2=".") returned 0 [0162.034] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89253bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.035] wcscmp (_String1="..", _String2=".") returned 1 [0162.035] wcscmp (_String1="..", _String2="..") returned 0 [0162.035] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xd770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0162.035] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0162.035] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0162.035] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0162.035] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0162.035] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0162.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c0b8 [0162.035] wcscpy (in: _Dest=0x3e1c0b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" [0162.035] wcscat (in: _Dest=0x3e1c0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\" [0162.035] wcscat (in: _Dest=0x3e1c0b8, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" [0164.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0164.506] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efed30 | out: lpFindFileData=0x3efed30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0164.506] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0164.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efed30) returned 1 [0164.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d13c8) returned 1 [0164.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd6d8) returned 1 Thread: id = 2736 os_tid = 0x264c [0157.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml")) returned 0x20 [0158.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0161.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.772] GetLastError () returned 0x5 [0163.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0163.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9d28) returned 1 Thread: id = 2737 os_tid = 0x2650 [0157.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc")) returned 0x20 [0157.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc", dwFileAttributes=0x20) returned 0 [0157.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.521] GetLastError () returned 0x5 [0157.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc", dwFileAttributes=0x20) returned 0 [0157.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e354d8) returned 1 Thread: id = 2738 os_tid = 0x2654 [0157.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc")) returned 0x20 [0157.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc", dwFileAttributes=0x20) returned 0 [0157.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.522] GetLastError () returned 0x5 [0157.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc", dwFileAttributes=0x20) returned 0 [0157.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3335e8) returned 1 Thread: id = 2739 os_tid = 0x2658 [0157.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx")) returned 0x20 [0157.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0157.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.523] GetLastError () returned 0x5 [0157.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0157.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0f08) returned 1 Thread: id = 2740 os_tid = 0x265c [0157.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx")) returned 0x20 [0157.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0157.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.524] GetLastError () returned 0x5 [0157.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0157.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1c18) returned 1 Thread: id = 2741 os_tid = 0x2660 [0157.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx")) returned 0x20 [0163.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx", dwFileAttributes=0x20) returned 0 [0163.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.867] GetLastError () returned 0x5 [0163.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx", dwFileAttributes=0x20) returned 0 [0163.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd768) returned 1 Thread: id = 2742 os_tid = 0x2664 [0157.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx")) returned 0x20 [0163.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx", dwFileAttributes=0x20) returned 0 [0163.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.869] GetLastError () returned 0x5 [0163.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx", dwFileAttributes=0x20) returned 0 [0163.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd7f8) returned 1 Thread: id = 2743 os_tid = 0x2668 [0157.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx")) returned 0x20 [0163.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx", dwFileAttributes=0x20) returned 0 [0163.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.871] GetLastError () returned 0x5 [0163.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx", dwFileAttributes=0x20) returned 0 [0163.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac78) returned 1 Thread: id = 2744 os_tid = 0x266c [0157.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx")) returned 0x20 [0163.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx", dwFileAttributes=0x20) returned 0 [0163.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.872] GetLastError () returned 0x5 [0163.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx", dwFileAttributes=0x20) returned 0 [0163.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f5b0) returned 1 Thread: id = 2745 os_tid = 0x2670 [0157.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx")) returned 0x20 [0163.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx", dwFileAttributes=0x20) returned 0 [0163.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.874] GetLastError () returned 0x5 [0163.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx", dwFileAttributes=0x20) returned 0 [0163.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bc18) returned 1 Thread: id = 2746 os_tid = 0x2674 [0157.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx")) returned 0x20 [0163.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX", dwFileAttributes=0x20) returned 0 [0163.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.876] GetLastError () returned 0x5 [0163.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX", dwFileAttributes=0x20) returned 0 [0163.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 2747 os_tid = 0x2678 [0157.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx")) returned 0x20 [0163.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx", dwFileAttributes=0x20) returned 0 [0163.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.878] GetLastError () returned 0x5 [0163.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx", dwFileAttributes=0x20) returned 0 [0163.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 2748 os_tid = 0x267c [0157.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx")) returned 0x20 [0163.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx", dwFileAttributes=0x20) returned 0 [0163.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.879] GetLastError () returned 0x5 [0163.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx", dwFileAttributes=0x20) returned 0 [0163.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd888) returned 1 Thread: id = 2749 os_tid = 0x2680 [0157.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx")) returned 0x20 [0163.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX", dwFileAttributes=0x20) returned 0 [0163.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.881] GetLastError () returned 0x5 [0163.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX", dwFileAttributes=0x20) returned 0 [0163.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 Thread: id = 2750 os_tid = 0x2684 [0157.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx")) returned 0x20 [0163.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx", dwFileAttributes=0x20) returned 0 [0163.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.883] GetLastError () returned 0x5 [0163.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx", dwFileAttributes=0x20) returned 0 [0163.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2b40) returned 1 Thread: id = 2751 os_tid = 0x2688 [0157.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx")) returned 0x20 [0163.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx", dwFileAttributes=0x20) returned 0 [0163.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.884] GetLastError () returned 0x5 [0163.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx", dwFileAttributes=0x20) returned 0 [0163.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d33c0) returned 1 Thread: id = 2752 os_tid = 0x268c [0157.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx")) returned 0x20 [0163.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx", dwFileAttributes=0x20) returned 0 [0163.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.886] GetLastError () returned 0x5 [0163.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx", dwFileAttributes=0x20) returned 0 [0163.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd918) returned 1 Thread: id = 2753 os_tid = 0x2690 [0157.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx")) returned 0x20 [0163.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0163.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.891] GetLastError () returned 0x5 [0163.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0163.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd9a8) returned 1 Thread: id = 2754 os_tid = 0x2694 [0157.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx")) returned 0x20 [0163.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0163.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.889] GetLastError () returned 0x5 [0163.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0163.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2338) returned 1 Thread: id = 2755 os_tid = 0x2698 [0157.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx")) returned 0x20 [0163.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0163.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.887] GetLastError () returned 0x5 [0163.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0163.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d22a0) returned 1 Thread: id = 2756 os_tid = 0x269c [0157.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx")) returned 0x20 [0163.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx", dwFileAttributes=0x20) returned 0 [0163.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.865] GetLastError () returned 0x5 [0163.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx", dwFileAttributes=0x20) returned 0 [0163.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dda38) returned 1 Thread: id = 2757 os_tid = 0x26a0 [0157.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx")) returned 0x20 [0163.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx", dwFileAttributes=0x20) returned 0 [0163.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.293] GetLastError () returned 0x5 [0163.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx", dwFileAttributes=0x20) returned 0 [0163.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddac8) returned 1 Thread: id = 2758 os_tid = 0x26a4 [0157.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx")) returned 0x20 [0161.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx", dwFileAttributes=0x20) returned 0 [0163.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.863] GetLastError () returned 0x5 [0163.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx", dwFileAttributes=0x20) returned 0 [0163.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187ca0) returned 1 Thread: id = 2759 os_tid = 0x26a8 [0157.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid")) returned 0x20 [0157.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", dwFileAttributes=0x20) returned 0 [0157.565] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.565] GetLastError () returned 0x5 [0157.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", dwFileAttributes=0x20) returned 0 [0157.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb16a8) returned 1 Thread: id = 2760 os_tid = 0x26ac [0157.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf")) returned 0x20 [0157.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.566] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.566] GetLastError () returned 0x5 [0157.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c248) returned 1 Thread: id = 2761 os_tid = 0x26b0 [0157.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf")) returned 0x20 [0157.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.567] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.568] GetLastError () returned 0x5 [0157.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2208) returned 1 Thread: id = 2762 os_tid = 0x26b4 [0157.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf")) returned 0x20 [0157.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.569] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.569] GetLastError () returned 0x5 [0157.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c5d8) returned 1 Thread: id = 2763 os_tid = 0x26b8 [0157.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf")) returned 0x20 [0157.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.570] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.570] GetLastError () returned 0x5 [0157.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2170) returned 1 Thread: id = 2764 os_tid = 0x26bc [0157.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf")) returned 0x20 [0157.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.571] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.572] GetLastError () returned 0x5 [0157.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c968) returned 1 Thread: id = 2765 os_tid = 0x26c0 [0157.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf")) returned 0x20 [0157.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.573] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.573] GetLastError () returned 0x5 [0157.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d20d8) returned 1 Thread: id = 2766 os_tid = 0x26c4 [0157.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf")) returned 0x20 [0157.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.574] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.574] GetLastError () returned 0x5 [0157.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cc60) returned 1 Thread: id = 2767 os_tid = 0x26c8 [0157.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf")) returned 0x20 [0157.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.575] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.575] GetLastError () returned 0x5 [0157.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2040) returned 1 Thread: id = 2768 os_tid = 0x26cc [0157.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf")) returned 0x20 [0157.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.576] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.576] GetLastError () returned 0x5 [0157.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c8d0) returned 1 Thread: id = 2769 os_tid = 0x26d0 [0157.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf")) returned 0x20 [0157.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.577] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.577] GetLastError () returned 0x5 [0157.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1fa8) returned 1 Thread: id = 2770 os_tid = 0x26d4 [0157.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf")) returned 0x20 [0157.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.578] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.578] GetLastError () returned 0x5 [0157.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cec0) returned 1 Thread: id = 2771 os_tid = 0x26d8 [0157.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf")) returned 0x20 [0157.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.579] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.580] GetLastError () returned 0x5 [0157.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1f10) returned 1 Thread: id = 2772 os_tid = 0x26dc [0157.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf")) returned 0x20 [0157.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.581] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.581] GetLastError () returned 0x5 [0157.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ccf8) returned 1 Thread: id = 2773 os_tid = 0x26e0 [0157.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf")) returned 0x20 [0157.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.582] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.582] GetLastError () returned 0x5 [0157.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1e78) returned 1 Thread: id = 2774 os_tid = 0x26e4 [0157.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf")) returned 0x20 [0157.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.583] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.583] GetLastError () returned 0x5 [0157.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd98) returned 1 Thread: id = 2775 os_tid = 0x26e8 [0157.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf")) returned 0x20 [0157.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.584] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.584] GetLastError () returned 0x5 [0157.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1de0) returned 1 Thread: id = 2776 os_tid = 0x26ec [0157.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf")) returned 0x20 [0157.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.585] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.585] GetLastError () returned 0x5 [0157.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c118) returned 1 Thread: id = 2777 os_tid = 0x26f0 [0157.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf")) returned 0x20 [0157.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.587] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.587] GetLastError () returned 0x5 [0157.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1d48) returned 1 Thread: id = 2778 os_tid = 0x26f4 [0157.587] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp")) returned 0x20 [0157.590] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0157.593] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.599] GetLastError () returned 0x5 [0157.599] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0157.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9648) returned 1 Thread: id = 2779 os_tid = 0x26f8 [0157.603] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp")) returned 0x20 [0157.605] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0157.609] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.614] GetLastError () returned 0x5 [0157.615] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0157.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9dd8) returned 1 Thread: id = 2780 os_tid = 0x26fc [0157.619] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp")) returned 0x20 [0157.622] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0157.625] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.630] GetLastError () returned 0x5 [0157.631] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0157.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9e88) returned 1 Thread: id = 2781 os_tid = 0x2700 [0157.639] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp")) returned 0x20 [0157.642] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0157.645] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.650] GetLastError () returned 0x5 [0157.650] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0157.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9f38) returned 1 Thread: id = 2782 os_tid = 0x2704 [0157.655] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp")) returned 0x20 [0157.658] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0157.661] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.666] GetLastError () returned 0x5 [0157.666] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0157.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9fe8) returned 1 Thread: id = 2783 os_tid = 0x2708 [0157.670] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp")) returned 0x20 [0157.673] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0157.676] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.681] GetLastError () returned 0x5 [0157.681] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0157.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da098) returned 1 Thread: id = 2784 os_tid = 0x270c [0157.685] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp")) returned 0x20 [0157.688] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0157.691] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.696] GetLastError () returned 0x5 [0157.696] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0157.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da148) returned 1 Thread: id = 2785 os_tid = 0x2710 [0157.700] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp")) returned 0x20 [0157.704] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0157.707] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.712] GetLastError () returned 0x5 [0157.712] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0157.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da1f8) returned 1 Thread: id = 2786 os_tid = 0x2714 [0157.715] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp")) returned 0x20 [0157.718] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0157.721] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.727] GetLastError () returned 0x5 [0157.727] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0157.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da2a8) returned 1 Thread: id = 2787 os_tid = 0x2718 [0157.730] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp")) returned 0x20 [0157.734] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0157.737] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.743] GetLastError () returned 0x5 [0157.743] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0157.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da358) returned 1 Thread: id = 2788 os_tid = 0x271c [0157.753] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp")) returned 0x20 [0157.755] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0157.758] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.764] GetLastError () returned 0x5 [0157.764] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0157.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da408) returned 1 Thread: id = 2789 os_tid = 0x2720 [0157.767] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp")) returned 0x20 [0157.770] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0157.773] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.778] GetLastError () returned 0x5 [0157.779] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0157.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da4b8) returned 1 Thread: id = 2790 os_tid = 0x2724 [0157.782] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp")) returned 0x20 [0157.785] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0157.788] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.793] GetLastError () returned 0x5 [0157.793] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0157.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da568) returned 1 Thread: id = 2791 os_tid = 0x2728 [0157.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini")) returned 0x20 [0166.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.310] GetLastError () returned 0x5 [0166.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0108) returned 1 Thread: id = 2792 os_tid = 0x272c [0157.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html")) returned 0x20 [0166.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", dwFileAttributes=0x20) returned 0 [0166.311] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.311] GetLastError () returned 0x5 [0166.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", dwFileAttributes=0x20) returned 0 [0166.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35640) returned 1 Thread: id = 2793 os_tid = 0x2730 [0157.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini")) returned 0x20 [0166.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.313] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.313] GetLastError () returned 0x5 [0166.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053418) returned 1 Thread: id = 2794 os_tid = 0x2734 [0157.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html")) returned 0x20 [0166.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", dwFileAttributes=0x20) returned 0 [0166.314] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.314] GetLastError () returned 0x5 [0166.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", dwFileAttributes=0x20) returned 0 [0166.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddb58) returned 1 Thread: id = 2795 os_tid = 0x2738 [0157.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini")) returned 0x20 [0166.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.315] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.315] GetLastError () returned 0x5 [0166.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80538e0) returned 1 Thread: id = 2796 os_tid = 0x273c [0157.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html")) returned 0x20 [0166.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", dwFileAttributes=0x20) returned 0 [0166.293] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.293] GetLastError () returned 0x5 [0166.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", dwFileAttributes=0x20) returned 0 [0166.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddbe8) returned 1 Thread: id = 2797 os_tid = 0x2740 [0157.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf")) returned 0x20 [0165.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.487] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.487] GetLastError () returned 0x5 [0165.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6688) returned 1 Thread: id = 2798 os_tid = 0x2744 [0157.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf")) returned 0x20 [0165.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0165.651] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.652] GetLastError () returned 0x5 [0165.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0165.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da618) returned 1 Thread: id = 2799 os_tid = 0x2748 [0157.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf")) returned 0x20 [0162.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0163.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.649] GetLastError () returned 0x5 [0165.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0165.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d20) returned 1 Thread: id = 2800 os_tid = 0x274c [0157.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf")) returned 0x20 [0164.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.919] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.919] GetLastError () returned 0x5 [0164.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41dd8) returned 1 Thread: id = 2801 os_tid = 0x2750 [0157.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf")) returned 0x20 [0165.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0165.650] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.650] GetLastError () returned 0x5 [0165.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0165.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e90) returned 1 Thread: id = 2802 os_tid = 0x2754 [0157.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf")) returned 0x20 [0164.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.755] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.755] GetLastError () returned 0x5 [0164.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d62c8) returned 1 Thread: id = 2803 os_tid = 0x2758 [0157.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx")) returned 0x20 [0157.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", dwFileAttributes=0x20) returned 0 [0157.810] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.816] GetLastError () returned 0x5 [0157.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", dwFileAttributes=0x20) returned 0 [0157.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 Thread: id = 2804 os_tid = 0x275c [0157.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx")) returned 0x20 [0157.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", dwFileAttributes=0x20) returned 0 [0157.825] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.830] GetLastError () returned 0x5 [0157.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", dwFileAttributes=0x20) returned 0 [0157.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188138) returned 1 Thread: id = 2805 os_tid = 0x2760 [0157.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json")) returned 0x20 [0157.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0157.840] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.845] GetLastError () returned 0x5 [0157.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0157.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6390) returned 1 Thread: id = 2806 os_tid = 0x2764 [0157.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx")) returned 0x20 [0157.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", dwFileAttributes=0x20) returned 0 [0157.865] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.870] GetLastError () returned 0x5 [0157.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", dwFileAttributes=0x20) returned 0 [0157.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188288) returned 1 Thread: id = 2807 os_tid = 0x2768 [0157.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx")) returned 0x20 [0157.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", dwFileAttributes=0x20) returned 0 [0157.879] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.884] GetLastError () returned 0x5 [0157.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", dwFileAttributes=0x20) returned 0 [0157.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6c8) returned 1 Thread: id = 2808 os_tid = 0x276c [0157.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da6c8 [0157.888] wcscpy (in: _Dest=0x81da6c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0157.888] wcscat (in: _Dest=0x81da6c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\" [0157.888] wcscat (in: _Dest=0x81da6c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*" [0157.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efeac8 [0157.888] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0157.888] wcscmp (_String1=".", _String2=".") returned 0 [0157.888] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.889] wcscmp (_String1="..", _String2=".") returned 1 [0157.889] wcscmp (_String1="..", _String2="..") returned 0 [0157.889] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0157.889] wcscmp (_String1="flashplayer", _String2=".") returned 1 [0157.889] wcscmp (_String1="flashplayer", _String2="..") returned 1 [0157.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3335e8 [0157.889] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0157.889] wcscat (in: _Dest=0x3335e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\" [0157.889] wcscat (in: _Dest=0x3335e8, _Source="flashplayer" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0161.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d5d50 [0161.216] wcscpy (in: _Dest=0x81d5d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0161.216] wcscat (in: _Dest=0x81d5d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\" [0161.216] wcscat (in: _Dest=0x81d5d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*" [0161.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0161.216] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0161.221] wcscmp (_String1=".", _String2=".") returned 0 [0161.221] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.221] wcscmp (_String1="..", _String2=".") returned 1 [0161.221] wcscmp (_String1="..", _String2="..") returned 0 [0161.221] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0161.221] wcscmp (_String1="sys", _String2=".") returned 1 [0161.221] wcscmp (_String1="sys", _String2="..") returned 1 [0161.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e7bc0 [0161.221] wcscpy (in: _Dest=0x81e7bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0161.221] wcscat (in: _Dest=0x81e7bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\" [0161.221] wcscat (in: _Dest=0x81e7bc0, _Source="sys" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0161.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1bb08 [0161.221] wcscpy (in: _Dest=0x3e1bb08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0161.222] wcscat (in: _Dest=0x3e1bb08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" [0161.222] wcscat (in: _Dest=0x3e1bb08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*" [0161.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0161.222] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0161.228] wcscmp (_String1=".", _String2=".") returned 0 [0161.228] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.228] wcscmp (_String1="..", _String2=".") returned 1 [0161.229] wcscmp (_String1="..", _String2="..") returned 0 [0161.229] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0161.229] wcscmp (_String1="settings.sol", _String2=".") returned 1 [0161.229] wcscmp (_String1="settings.sol", _String2="..") returned 1 [0161.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a080 [0161.229] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0161.229] wcscat (in: _Dest=0x3e3a080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" [0161.229] wcscat (in: _Dest=0x3e3a080, _Source="settings.sol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" [0161.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08 [0161.232] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0161.232] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0161.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0161.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bb08) returned 1 [0161.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7bc0) returned 1 [0161.232] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0 [0161.232] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0161.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0161.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5d50) returned 1 [0161.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3335e8) returned 1 [0161.233] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3efeac8 | out: lpFindFileData=0x3efeac8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0161.233] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0161.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efeac8) returned 1 [0161.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6c8) returned 1 [0161.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81867a0) returned 1 Thread: id = 2809 os_tid = 0x2770 [0157.889] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip")) returned 0x2020 [0157.892] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", dwFileAttributes=0x20) returned 1 [0163.313] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b34 [0163.313] GetFileSizeEx (in: hFile=0x2b34, lpFileSize=0x129af9d8 | out: lpFileSize=0x129af9d8*=42495) returned 1 [0163.313] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0xa5fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.314] ReadFile (in: hFile=0x2b34, lpBuffer=0x129af9e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x129af9c0, lpOverlapped=0x0 | out: lpBuffer=0x129af9e4*, lpNumberOfBytesRead=0x129af9c0*=0x4, lpOverlapped=0x0) returned 1 [0163.317] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0163.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0163.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0163.317] NtQuerySystemTime (in: CurrentTime=0x129af960 | out: CurrentTime=0x129af960*=132471540315564000) returned 0x0 [0163.317] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x2fdcf247 [0163.317] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x126aa196 [0163.317] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x4d872350 [0163.317] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x17da4998 [0163.317] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x5bd4e4f [0163.317] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x45ef17b [0163.317] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x18f1ede0 [0163.317] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x1cea779 [0163.317] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x193faa08 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x7064f1a2 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x94e2ad7 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x3a51d7b0 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x352e2354 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x5fc617be [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x6a90f6ae [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x77193597 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x243bb6bc [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0xe477e22 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x763de9e6 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x61cfcd6 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x5bf6c0ba [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x54287b31 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x13e3657a [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x7b5effc2 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x4130d5d6 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x5da8f93d [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x2de7116c [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x386b2b03 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x38e62a76 [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x1b23250d [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x4dc4eece [0163.318] RtlRandomEx (in: Seed=0x129af958 | out: Seed=0x129af958) returned 0x640cd257 [0163.331] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.331] ReadFile (in: hFile=0x2b34, lpBuffer=0x80b4890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x129af960, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesRead=0x129af960*=0x3c00, lpOverlapped=0x0) returned 1 [0163.338] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b39c8 [0163.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0163.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0163.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0163.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a458 [0163.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0163.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0163.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0163.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0163.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b39c8) returned 1 [0163.339] WriteFile (in: hFile=0x2b34, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x129af960, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0x129af960*=0x3c00, lpOverlapped=0x0) returned 1 [0163.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0163.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0163.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77c58 [0163.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0163.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77de0 [0163.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0163.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0163.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0163.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50e40) returned 1 [0163.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4238) returned 1 [0163.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3dec080 [0163.361] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.361] WriteFile (in: hFile=0x2b34, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x129af9cc, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x129af9cc*=0x10e, lpOverlapped=0x0) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77de0) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c58) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7e8) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0163.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bf38 [0163.366] wcscpy (in: _Dest=0x819bf38, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" [0163.366] wcscat (in: _Dest=0x819bf38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.f0dbec" [0163.366] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.f0dbec", NtPathName=0x129af950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0163.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d413c8 [0163.369] FlushFileBuffers (hFile=0x2b34) returned 1 [0166.533] CloseHandle (hObject=0x2b34) returned 1 [0166.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d2208 [0166.996] wcscpy (in: _Dest=0x81d2208, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0166.996] wcscat (in: _Dest=0x81d2208, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" [0166.996] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\f0dbec-readme.txt")) returned 0x2020 [0167.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2208) returned 1 [0167.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2938) returned 1 Thread: id = 2810 os_tid = 0x2774 [0157.896] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages")) returned 0x2020 [0157.896] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages", dwFileAttributes=0x20) returned 1 [0163.332] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b38 [0163.332] GetFileSizeEx (in: hFile=0x2b38, lpFileSize=0xbbaf8a0 | out: lpFileSize=0xbbaf8a0*=8192) returned 1 [0163.333] SetFilePointerEx (in: hFile=0x2b38, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.333] ReadFile (in: hFile=0x2b38, lpBuffer=0xbbaf8ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbbaf888, lpOverlapped=0x0 | out: lpBuffer=0xbbaf8ac*, lpNumberOfBytesRead=0xbbaf888*=0x4, lpOverlapped=0x0) returned 1 [0163.341] SetFilePointerEx (in: hFile=0x2b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0163.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0163.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0163.342] NtQuerySystemTime (in: CurrentTime=0xbbaf828 | out: CurrentTime=0xbbaf828*=132471540315720000) returned 0x0 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x52a6d310 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x3430d801 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x270b8254 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x72a91a5d [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x7ceadcf4 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x1b5a7f7e [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x4e7ab8e3 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x578f05bd [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x20e34683 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x33beed5 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x705db0b9 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x10b95505 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x74c911f0 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x876f986 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x206bd2ee [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x12e9cc76 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x6064fda0 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x35a95c76 [0163.342] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x24568ec8 [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x3693d1a9 [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x4ffa63ac [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x7ed1160f [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x3480a335 [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x287f5c4d [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x7ef9215d [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x35d72e41 [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x587ae8b4 [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x521e82bb [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x6095f699 [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x498bf924 [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x409f7efd [0163.343] RtlRandomEx (in: Seed=0xbbaf820 | out: Seed=0xbbaf820) returned 0x7b8e88ab [0163.359] ReadFile (in: hFile=0x2b38, lpBuffer=0x809e060, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xbbaf81c, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0xbbaf81c*=0x2000, lpOverlapped=0x0) returned 1 [0163.362] SetFilePointerEx (in: hFile=0x2b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.362] WriteFile (in: hFile=0x2b38, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0xbbaf820, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0xbbaf820*=0x2000, lpOverlapped=0x0) returned 1 [0163.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca68 [0163.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0163.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0163.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0163.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0163.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0163.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b39c8) returned 1 [0163.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77c58 [0163.371] SetFilePointerEx (in: hFile=0x2b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.371] WriteFile (in: hFile=0x2b38, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xbbaf894, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xbbaf894*=0x10e, lpOverlapped=0x0) returned 1 [0163.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0163.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77de0) returned 1 [0163.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0163.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c58) returned 1 [0163.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0163.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0163.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0163.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0163.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bf38 [0163.376] wcscpy (in: _Dest=0x819bf38, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" [0163.376] wcscat (in: _Dest=0x819bf38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages.f0dbec" [0163.376] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages.f0dbec", NtPathName=0xbbaf818, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0163.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d413c8 [0163.380] FlushFileBuffers (hFile=0x2b38) returned 1 [0166.516] CloseHandle (hObject=0x2b38) returned 1 [0166.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d1200 [0166.991] wcscpy (in: _Dest=0x81d1200, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0166.991] wcscat (in: _Dest=0x81d1200, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" [0166.991] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\f0dbec-readme.txt")) returned 0xffffffff [0166.991] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20b4 [0167.012] WriteFile (in: hFile=0x20b4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbbaf83c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbbaf83c*=0x70c, lpOverlapped=0x0) returned 1 [0167.258] CloseHandle (hObject=0x20b4) returned 1 [0167.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1200) returned 1 [0167.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddc78) returned 1 Thread: id = 2811 os_tid = 0x2778 [0157.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bef80 [0157.897] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" [0157.897] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\" [0157.897] wcscat (in: _Dest=0x81bef80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*" [0157.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe5f8 [0157.897] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0158.971] wcscmp (_String1=".", _String2=".") returned 0 [0158.971] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.971] wcscmp (_String1="..", _String2=".") returned 1 [0158.971] wcscmp (_String1="..", _String2="..") returned 0 [0158.971] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0158.971] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0158.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe5f8) returned 1 [0158.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 [0158.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e88) returned 1 Thread: id = 2812 os_tid = 0x277c [0157.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81db8c8 [0157.898] wcscpy (in: _Dest=0x81db8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0157.898] wcscat (in: _Dest=0x81db8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0157.898] wcscat (in: _Dest=0x81db8c8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*" [0157.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe390 [0157.898] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdceabd00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdced1e60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e555c8 [0158.994] wcscmp (_String1=".", _String2=".") returned 0 [0158.994] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdceabd00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdced1e60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.994] wcscmp (_String1="..", _String2=".") returned 1 [0158.994] wcscmp (_String1="..", _String2="..") returned 0 [0159.003] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0159.003] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0159.003] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0159.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d409b8 [0159.003] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0159.003] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0159.003] wcscat (in: _Dest=0x3d409b8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" [0159.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf")) returned 0x20 [0160.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.001] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.001] GetLastError () returned 0x5 [0160.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 [0160.002] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0160.002] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0160.002] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0160.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bea8 [0160.002] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0160.002] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0160.002] wcscat (in: _Dest=0x35bea8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" [0160.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf")) returned 0x20 [0160.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0160.002] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.002] GetLastError () returned 0x5 [0160.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0160.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 [0160.002] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0160.003] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0160.003] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0160.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d409b8 [0160.003] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0160.003] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0160.003] wcscat (in: _Dest=0x3d409b8, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" [0160.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf")) returned 0x20 [0160.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0160.003] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.003] GetLastError () returned 0x5 [0160.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0160.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 [0160.003] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0160.003] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0160.003] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0160.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d409b8 [0160.004] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0160.004] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0160.004] wcscat (in: _Dest=0x3d409b8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" [0160.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf")) returned 0x20 [0160.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.004] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.004] GetLastError () returned 0x5 [0160.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 [0160.004] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0160.004] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0160.004] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0160.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d409b8 [0160.004] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0160.004] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0160.005] wcscat (in: _Dest=0x3d409b8, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" [0160.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf")) returned 0x20 [0160.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0160.005] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.005] GetLastError () returned 0x5 [0160.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0160.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 [0160.005] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0160.005] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0160.005] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0160.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0160.005] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0160.005] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0160.005] wcscat (in: _Dest=0x3e351b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" [0160.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf")) returned 0x20 [0160.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.006] GetLastError () returned 0x5 [0160.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 [0160.006] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3efe390 | out: lpFindFileData=0x3efe390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0160.006] FindClose (in: hFindFile=0x3e555c8 | out: hFindFile=0x3e555c8) returned 1 [0160.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe390) returned 1 [0160.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db8c8) returned 1 [0160.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c1b8) returned 1 Thread: id = 2813 os_tid = 0x2780 [0157.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf")) returned 0x20 [0157.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", dwFileAttributes=0x20) returned 0 [0157.941] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.942] GetLastError () returned 0x5 [0157.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", dwFileAttributes=0x20) returned 0 [0157.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188330) returned 1 Thread: id = 2814 os_tid = 0x2784 [0157.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32700 [0157.900] wcscpy (in: _Dest=0x3f32700, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" [0157.900] wcscat (in: _Dest=0x3f32700, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\" [0157.900] wcscat (in: _Dest=0x3f32700, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" [0157.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f092b8 [0157.900] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0157.900] wcscmp (_String1=".", _String2=".") returned 0 [0157.901] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.901] wcscmp (_String1="..", _String2=".") returned 1 [0157.901] wcscmp (_String1="..", _String2="..") returned 0 [0157.901] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.901] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0157.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f092b8) returned 1 [0157.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0157.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39ee8) returned 1 Thread: id = 2815 os_tid = 0x2788 [0157.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x81d1d48 [0157.902] wcscpy (in: _Dest=0x81d1d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0157.902] wcscat (in: _Dest=0x81d1d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0157.902] wcscat (in: _Dest=0x81d1d48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*" [0157.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f092b8 [0157.902] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0157.950] wcscmp (_String1=".", _String2=".") returned 0 [0157.950] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.950] wcscmp (_String1="..", _String2=".") returned 1 [0157.950] wcscmp (_String1="..", _String2="..") returned 0 [0157.950] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0157.950] wcscmp (_String1="data_0", _String2=".") returned 1 [0157.950] wcscmp (_String1="data_0", _String2="..") returned 1 [0157.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dcae8 [0157.951] wcscpy (in: _Dest=0x81dcae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0157.951] wcscat (in: _Dest=0x81dcae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0157.951] wcscat (in: _Dest=0x81dcae8, _Source="data_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" [0159.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x289c [0159.215] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0159.215] wcscmp (_String1="data_1", _String2=".") returned 1 [0159.215] wcscmp (_String1="data_1", _String2="..") returned 1 [0159.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819bdf8 [0159.215] wcscpy (in: _Dest=0x819bdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0159.215] wcscat (in: _Dest=0x819bdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0159.216] wcscat (in: _Dest=0x819bdf8, _Source="data_1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" [0159.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf8 [0159.217] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0159.217] wcscmp (_String1="data_2", _String2=".") returned 1 [0159.217] wcscmp (_String1="data_2", _String2="..") returned 1 [0159.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819adb8 [0159.217] wcscpy (in: _Dest=0x819adb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0159.217] wcscat (in: _Dest=0x819adb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0159.217] wcscat (in: _Dest=0x819adb8, _Source="data_2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" [0159.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819adb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cfc [0159.218] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0159.218] wcscmp (_String1="data_3", _String2=".") returned 1 [0159.218] wcscmp (_String1="data_3", _String2="..") returned 1 [0159.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819b3f8 [0159.218] wcscpy (in: _Dest=0x819b3f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0159.218] wcscat (in: _Dest=0x819b3f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0159.218] wcscat (in: _Dest=0x819b3f8, _Source="data_3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" [0159.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d00 [0159.219] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0159.219] wcscmp (_String1="index", _String2=".") returned 1 [0159.219] wcscmp (_String1="index", _String2="..") returned 1 [0159.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819aa98 [0159.219] wcscpy (in: _Dest=0x819aa98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0159.219] wcscat (in: _Dest=0x819aa98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0159.219] wcscat (in: _Dest=0x819aa98, _Source="index" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" [0159.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d04 [0159.220] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 0 [0159.220] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0159.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f092b8) returned 1 [0159.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1d48) returned 1 [0159.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bd90) returned 1 Thread: id = 2816 os_tid = 0x278c [0157.903] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies")) returned 0x2020 [0157.951] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", dwFileAttributes=0x20) returned 1 [0163.383] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b4c [0163.384] GetFileSizeEx (in: hFile=0x2b4c, lpFileSize=0x12a5ff18 | out: lpFileSize=0x12a5ff18*=7168) returned 1 [0163.384] SetFilePointerEx (in: hFile=0x2b4c, liDistanceToMove=0x1bfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.384] ReadFile (in: hFile=0x2b4c, lpBuffer=0x12a5ff24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12a5ff00, lpOverlapped=0x0 | out: lpBuffer=0x12a5ff24*, lpNumberOfBytesRead=0x12a5ff00*=0x4, lpOverlapped=0x0) returned 1 [0163.408] SetFilePointerEx (in: hFile=0x2b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0163.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0163.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0163.409] NtQuerySystemTime (in: CurrentTime=0x12a5fea0 | out: CurrentTime=0x12a5fea0*=132471540316344000) returned 0x0 [0163.409] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x3574a8f4 [0163.409] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x21a7ac19 [0163.409] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x18c89e09 [0163.409] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x6ce6563d [0163.409] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x3a177f70 [0163.409] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x18721120 [0163.409] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x1e6db2a [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x10d38497 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x44672567 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x1771be26 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x1ff72399 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x6d3e4178 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x741f0315 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x45c934c9 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x3efd4600 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x763b34c [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x4a6c0c21 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x675af302 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x71e9f5ae [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x5b934a47 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x3693af3c [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x69bcd098 [0163.410] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x6d84dfcb [0163.411] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x3cb002e3 [0163.411] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x2ccee2e5 [0163.411] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x59da82b1 [0163.411] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x746d7fa [0163.411] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x5120ad23 [0163.411] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x829a3b3 [0163.411] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0x5a2ef03e [0163.411] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0xb6670c0 [0163.411] RtlRandomEx (in: Seed=0x12a5fe98 | out: Seed=0x12a5fe98) returned 0xc888564 [0163.424] ReadFile (in: hFile=0x2b4c, lpBuffer=0x80b4890, nNumberOfBytesToRead=0x1c00, lpNumberOfBytesRead=0x12a5fe94, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesRead=0x12a5fe94*=0x1c00, lpOverlapped=0x0) returned 1 [0163.428] SetFilePointerEx (in: hFile=0x2b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.428] WriteFile (in: hFile=0x2b4c, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x12a5fe98, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0x12a5fe98*=0x1c00, lpOverlapped=0x0) returned 1 [0163.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0163.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0163.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0163.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0163.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0163.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0163.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b39c8) returned 1 [0163.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x305b988 [0163.463] SetFilePointerEx (in: hFile=0x2b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.463] WriteFile (in: hFile=0x2b4c, lpBuffer=0x2f97f0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x12a5ff0c, lpOverlapped=0x0 | out: lpBuffer=0x2f97f0*, lpNumberOfBytesWritten=0x12a5ff0c*=0x100, lpOverlapped=0x0) returned 1 [0163.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f97f0) returned 1 [0163.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0163.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0163.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0163.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0163.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0163.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0163.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0163.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2da70 [0163.465] wcscpy (in: _Dest=0x3e2da70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" [0163.465] wcscat (in: _Dest=0x3e2da70, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.f0dbec" [0163.465] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.f0dbec", NtPathName=0x12a5fe90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0163.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81df948 [0163.469] FlushFileBuffers (hFile=0x2b4c) returned 1 [0166.516] CloseHandle (hObject=0x2b4c) returned 1 [0166.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da408 [0166.992] wcscpy (in: _Dest=0x81da408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0166.992] wcscat (in: _Dest=0x81da408, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0166.992] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0xffffffff [0167.499] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2964 [0172.918] WriteFile (in: hFile=0x2964, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12a5feb4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12a5feb4*=0x70c, lpOverlapped=0x0) returned 1 [0175.763] CloseHandle (hObject=0x2964) returned 1 [0183.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da408) returned 1 [0183.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ca98) returned 1 Thread: id = 2817 os_tid = 0x2790 [0157.904] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal")) returned 0x2020 [0157.951] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", dwFileAttributes=0x20) returned 1 [0163.386] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b50 [0163.386] GetFileSizeEx (in: hFile=0x2b50, lpFileSize=0x1295ff00 | out: lpFileSize=0x1295ff00*=0) returned 1 [0163.387] FlushFileBuffers (hFile=0x2b50) returned 1 [0166.516] CloseHandle (hObject=0x2b50) returned 1 [0166.516] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", dwFileAttributes=0x2020) returned 1 [0177.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d530) returned 1 Thread: id = 2818 os_tid = 0x2794 [0157.905] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current session")) returned 0x2020 [0157.959] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", dwFileAttributes=0x20) returned 1 [0163.449] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b68 [0163.449] GetFileSizeEx (in: hFile=0x2b68, lpFileSize=0x123afe98 | out: lpFileSize=0x123afe98*=489) returned 1 [0163.449] SetFilePointerEx (in: hFile=0x2b68, liDistanceToMove=0x1e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.449] ReadFile (in: hFile=0x2b68, lpBuffer=0x123afea4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x123afe80, lpOverlapped=0x0 | out: lpBuffer=0x123afea4*, lpNumberOfBytesRead=0x123afe80*=0x4, lpOverlapped=0x0) returned 1 [0163.451] SetFilePointerEx (in: hFile=0x2b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0163.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0163.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0163.452] NtQuerySystemTime (in: CurrentTime=0x123afe20 | out: CurrentTime=0x123afe20*=132471540316812000) returned 0x0 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x1c2b41fd [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x69912e26 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x9ff039 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x560aeac0 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x26f0465b [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x1cb49cb4 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0xae2cee0 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x6e2fb552 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x26bf8877 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x5de8079e [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x57cdef6a [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x416e2f3a [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x5cc8d6ab [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x3303bb82 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x666a06bf [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x24ed9214 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x49748a43 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x1c08aeea [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x777f0181 [0163.452] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x53c6a0ef [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x700fa016 [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x1e863eb [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x687e8d66 [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x196992b2 [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x3bd7d9d9 [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x5ce25673 [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x4c9fcdac [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x394d834c [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x7079ae4f [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x3c0d7402 [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x7d7c266 [0163.453] RtlRandomEx (in: Seed=0x123afe18 | out: Seed=0x123afe18) returned 0x74c11bc1 [0163.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7e8) returned 1 [0163.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0163.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a458 [0163.489] ReadFile (in: hFile=0x2b68, lpBuffer=0x80b4890, nNumberOfBytesToRead=0x1e9, lpNumberOfBytesRead=0x123afe14, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesRead=0x123afe14*=0x1e9, lpOverlapped=0x0) returned 1 [0163.489] SetFilePointerEx (in: hFile=0x2b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.489] WriteFile (in: hFile=0x2b68, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x1e9, lpNumberOfBytesWritten=0x123afe18, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0x123afe18*=0x1e9, lpOverlapped=0x0) returned 1 [0164.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0164.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e10 [0164.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0164.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0164.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0164.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0164.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b39c8) returned 1 [0164.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77c58 [0164.808] SetFilePointerEx (in: hFile=0x2b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.808] WriteFile (in: hFile=0x2b68, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x123afe8c, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0x123afe8c*=0x110, lpOverlapped=0x0) returned 1 [0166.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0166.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77de0) returned 1 [0166.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0166.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77c58) returned 1 [0166.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0166.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0166.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0166.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0166.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x81e1a98 [0166.989] wcscpy (in: _Dest=0x81e1a98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" [0166.989] wcscat (in: _Dest=0x81e1a98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.f0dbec" [0166.989] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.f0dbec", NtPathName=0x123afe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0166.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c598 [0172.540] FlushFileBuffers (hFile=0x2b68) returned 1 [0172.547] CloseHandle (hObject=0x2b68) returned 1 [0172.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da828 [0172.559] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.559] wcscat (in: _Dest=0x81da828, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0172.559] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0172.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 [0172.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d488) returned 1 Thread: id = 2819 os_tid = 0x2798 [0157.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current tabs")) returned 0x2020 [0157.952] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", dwFileAttributes=0x20) returned 1 [0163.388] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b54 [0163.389] GetFileSizeEx (in: hFile=0x2b54, lpFileSize=0x12b1fb80 | out: lpFileSize=0x12b1fb80*=294) returned 1 [0163.389] SetFilePointerEx (in: hFile=0x2b54, liDistanceToMove=0x122, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.389] ReadFile (in: hFile=0x2b54, lpBuffer=0x12b1fb8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12b1fb68, lpOverlapped=0x0 | out: lpBuffer=0x12b1fb8c*, lpNumberOfBytesRead=0x12b1fb68*=0x4, lpOverlapped=0x0) returned 1 [0163.431] SetFilePointerEx (in: hFile=0x2b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0163.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0163.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0163.431] NtQuerySystemTime (in: CurrentTime=0x12b1fb08 | out: CurrentTime=0x12b1fb08*=132471540316656000) returned 0x0 [0163.431] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x4f94ff4f [0163.431] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x4e64bad2 [0163.431] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x5cb1f41d [0163.431] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x2e80d06b [0163.431] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x68cbe22f [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x38ed7556 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x5880fca4 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x7afd646a [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x2b8f9f75 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x4c8b8647 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x5dc496cf [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x7b4cfb17 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x15275646 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x3f5fbf4e [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x650704fe [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x7b7cd5ac [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x39685725 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x23681358 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0xa50d04f [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x7015f07d [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x18c71520 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x4bb3d342 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x536e861b [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x18e70250 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0xab7f620 [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x2c26211c [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x5352040e [0163.432] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x1ee6be28 [0163.433] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x17e1befb [0163.433] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0xfa4c6b9 [0163.433] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x6ec0e862 [0163.433] RtlRandomEx (in: Seed=0x12b1fb00 | out: Seed=0x12b1fb00) returned 0x4f55bf6 [0163.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7e8) returned 1 [0163.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814a060 [0163.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814dc68 [0163.447] ReadFile (in: hFile=0x2b54, lpBuffer=0x814a060, nNumberOfBytesToRead=0x126, lpNumberOfBytesRead=0x12b1fafc, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesRead=0x12b1fafc*=0x126, lpOverlapped=0x0) returned 1 [0163.447] SetFilePointerEx (in: hFile=0x2b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.447] WriteFile (in: hFile=0x2b54, lpBuffer=0x814dc68*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x12b1fb00, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesWritten=0x12b1fb00*=0x126, lpOverlapped=0x0) returned 1 [0164.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ea8 [0164.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c80 [0164.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0164.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0164.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0164.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50e40) returned 1 [0164.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4238) returned 1 [0164.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e700f8 [0164.798] SetFilePointerEx (in: hFile=0x2b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.798] WriteFile (in: hFile=0x2b54, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x12b1fb74, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x12b1fb74*=0x10a, lpOverlapped=0x0) returned 1 [0165.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0165.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f918) returned 1 [0165.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0165.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700f8) returned 1 [0165.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ea8) returned 1 [0165.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0165.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0165.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0165.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da8d8 [0165.535] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" [0165.535] wcscat (in: _Dest=0x81da8d8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.f0dbec" [0165.535] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.f0dbec", NtPathName=0x12b1faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0165.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d6200 [0176.253] FlushFileBuffers (hFile=0x2b54) returned 1 [0182.346] CloseHandle (hObject=0x2b54) returned 1 [0182.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0182.491] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.491] wcscat (in: _Dest=0x35bdf8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0182.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0182.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 [0182.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 Thread: id = 2820 os_tid = 0x279c [0157.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d6390 [0157.911] wcscpy (in: _Dest=0x81d6390, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0157.911] wcscat (in: _Dest=0x81d6390, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0157.911] wcscat (in: _Dest=0x81d6390, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*" [0157.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07f78 [0157.911] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e554c8 [0159.012] wcscmp (_String1=".", _String2=".") returned 0 [0159.012] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.012] wcscmp (_String1="..", _String2=".") returned 1 [0159.012] wcscmp (_String1="..", _String2="..") returned 0 [0159.012] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0159.012] wcscmp (_String1="000003.log", _String2=".") returned 1 [0159.013] wcscmp (_String1="000003.log", _String2="..") returned 1 [0159.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e64438 [0159.013] wcscpy (in: _Dest=0x3e64438, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0159.013] wcscat (in: _Dest=0x3e64438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0159.013] wcscat (in: _Dest=0x3e64438, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" [0160.061] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log")) returned 0x2020 [0160.068] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", dwFileAttributes=0x20) returned 1 [0160.068] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1444 [0160.069] GetFileSizeEx (in: hFile=0x1444, lpFileSize=0x12b9fd80 | out: lpFileSize=0x12b9fd80*=0) returned 1 [0160.069] FlushFileBuffers (hFile=0x1444) returned 1 [0160.133] CloseHandle (hObject=0x1444) returned 1 [0160.133] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", dwFileAttributes=0x2020) returned 1 [0160.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64438) returned 1 [0160.133] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe382ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0160.133] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0160.133] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0160.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1b898 [0160.134] wcscpy (in: _Dest=0x3e1b898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0160.134] wcscat (in: _Dest=0x3e1b898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0160.134] wcscat (in: _Dest=0x3e1b898, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" [0160.134] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current")) returned 0x2020 [0160.134] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", dwFileAttributes=0x20) returned 1 [0160.134] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1444 [0160.135] GetFileSizeEx (in: hFile=0x1444, lpFileSize=0x12b9fd80 | out: lpFileSize=0x12b9fd80*=16) returned 1 [0160.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c80 [0160.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0160.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e10 [0160.135] NtQuerySystemTime (in: CurrentTime=0x12b9fd08 | out: CurrentTime=0x12b9fd08*=132471540283740000) returned 0x0 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0xabcaa91 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0xa5b24ba [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x75d9c8e3 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x6871c7d5 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x2732c690 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x48faed20 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0xa1e206b [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x9eb759a [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x160dae17 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x224d7ccc [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x16c7e39b [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x1335bb52 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x13cac109 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x496b7bfd [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x7f3de92f [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x65f1feda [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x3ebc0190 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x2a271aa3 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x47e0277c [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x40745679 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x17586bee [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x5e0e0ac4 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x5bc86904 [0160.135] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x59f3987c [0160.136] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x6969ebd1 [0160.136] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x1d021f7e [0160.136] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x1e904e0f [0160.136] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x4ef48602 [0160.136] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x2be12ec7 [0160.136] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x46683e7d [0160.136] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x36972fba [0160.136] RtlRandomEx (in: Seed=0x12b9fd00 | out: Seed=0x12b9fd00) returned 0x663ed55b [0160.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0160.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68600 [0160.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ed8 [0160.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 [0160.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0160.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0160.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308608 [0160.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68600 [0160.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c80 [0160.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0160.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0160.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bfca8 [0160.145] ReadFile (in: hFile=0x1444, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0x12b9fcfc, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0x12b9fcfc*=0x10, lpOverlapped=0x0) returned 1 [0160.146] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.147] WriteFile (in: hFile=0x1444, lpBuffer=0x80bfca8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x12b9fd00, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesWritten=0x12b9fd00*=0x10, lpOverlapped=0x0) returned 1 [0160.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ea8 [0160.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c80 [0160.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0160.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0160.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0160.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 [0160.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308608) returned 1 [0160.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef0c80 [0160.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308608 [0160.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68600 [0160.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e10 [0160.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0160.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef0e10 [0160.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0160.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0160.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0160.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 [0160.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308608) returned 1 [0160.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f97f0 [0160.161] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.161] WriteFile (in: hFile=0x1444, lpBuffer=0x2f97f0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x12b9fd74, lpOverlapped=0x0 | out: lpBuffer=0x2f97f0*, lpNumberOfBytesWritten=0x12b9fd74*=0x100, lpOverlapped=0x0) returned 1 [0160.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f97f0) returned 1 [0160.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0160.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0160.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0160.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ea8) returned 1 [0160.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0160.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0160.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0160.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8488 [0160.164] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" [0160.165] wcscat (in: _Dest=0x2c8488, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.f0dbec" [0160.165] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.f0dbec", NtPathName=0x12b9fcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dada38 [0162.679] FlushFileBuffers (hFile=0x1444) returned 1 [0162.683] CloseHandle (hObject=0x1444) returned 1 [0162.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3a6d8 [0162.694] wcscpy (in: _Dest=0x3e3a6d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0162.694] wcscat (in: _Dest=0x3e3a6d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt" [0162.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\f0dbec-readme.txt")) returned 0xffffffff [0162.694] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2888 [0162.703] WriteFile (in: hFile=0x2888, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12b9fd1c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12b9fd1c*=0x70c, lpOverlapped=0x0) returned 1 [0162.710] CloseHandle (hObject=0x2888) returned 1 [0162.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a6d8) returned 1 [0162.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b898) returned 1 [0162.716] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe34e4f50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0162.716] wcscmp (_String1="LOCK", _String2=".") returned 1 [0162.716] wcscmp (_String1="LOCK", _String2="..") returned 1 [0162.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1b898 [0162.716] wcscpy (in: _Dest=0x3e1b898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0162.716] wcscat (in: _Dest=0x3e1b898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0162.716] wcscat (in: _Dest=0x3e1b898, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" [0163.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c8 [0163.232] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0163.232] wcscmp (_String1="LOG", _String2=".") returned 1 [0163.232] wcscmp (_String1="LOG", _String2="..") returned 1 [0163.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e8390 [0163.232] wcscpy (in: _Dest=0x81e8390, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0163.232] wcscat (in: _Dest=0x81e8390, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0163.232] wcscat (in: _Dest=0x81e8390, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" [0164.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a8 [0164.523] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe350b0b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0164.523] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0164.523] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0164.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c91a8 [0164.524] wcscpy (in: _Dest=0x2c91a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0164.524] wcscat (in: _Dest=0x2c91a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0164.524] wcscat (in: _Dest=0x2c91a8, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" [0164.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e0 [0164.524] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe350b0b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0164.525] FindClose (in: hFindFile=0x3e554c8 | out: hFindFile=0x3e554c8) returned 1 [0164.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07f78) returned 1 [0164.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6390) returned 1 [0164.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df648) returned 1 Thread: id = 2821 os_tid = 0x27a0 [0157.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da568 [0157.912] wcscpy (in: _Dest=0x81da568, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0157.912] wcscat (in: _Dest=0x81da568, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0157.912] wcscat (in: _Dest=0x81da568, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*" [0157.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f099f0 [0157.912] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f94030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5030430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55588 [0159.009] wcscmp (_String1=".", _String2=".") returned 0 [0159.009] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f94030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5030430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.009] wcscmp (_String1="..", _String2=".") returned 1 [0159.009] wcscmp (_String1="..", _String2="..") returned 0 [0159.009] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5030430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0159.009] wcscmp (_String1="000003.log", _String2=".") returned 1 [0159.009] wcscmp (_String1="000003.log", _String2="..") returned 1 [0159.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81dfb88 [0159.009] wcscpy (in: _Dest=0x81dfb88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0159.009] wcscat (in: _Dest=0x81dfb88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0159.009] wcscat (in: _Dest=0x81dfb88, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" [0160.000] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log")) returned 0x2020 [0160.019] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", dwFileAttributes=0x20) returned 1 [0160.019] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b3c [0160.019] GetFileSizeEx (in: hFile=0x2b3c, lpFileSize=0x462fc08 | out: lpFileSize=0x462fc08*=380) returned 1 [0160.019] SetFilePointerEx (in: hFile=0x2b3c, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.019] ReadFile (in: hFile=0x2b3c, lpBuffer=0x462fc14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x462fbf0, lpOverlapped=0x0 | out: lpBuffer=0x462fc14*, lpNumberOfBytesRead=0x462fbf0*=0x4, lpOverlapped=0x0) returned 1 [0160.021] SetFilePointerEx (in: hFile=0x2b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0160.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0160.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0160.021] NtQuerySystemTime (in: CurrentTime=0x462fb90 | out: CurrentTime=0x462fb90*=132471540282492000) returned 0x0 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x486b74e2 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x5f7ef80c [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x2211e40e [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x157c2a61 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x61d29405 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x31518ffd [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0xf7ea5 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x75bb0e54 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x4da8fe2f [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x2bcc7296 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x62251841 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x9c5a4fa [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0xda59a64 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x64690e6 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x5fbdd4d6 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x53899c49 [0160.021] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x3582fb29 [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x2057d80a [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x52905e8a [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x1fef390d [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x2759ce34 [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x5e5b5379 [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x271a0e89 [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x56730414 [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x41764ed7 [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x3bba7fdf [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x1bbe6d1f [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x586c530b [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x4f4e9d32 [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x5138f99a [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0x2b84a704 [0160.022] RtlRandomEx (in: Seed=0x462fb88 | out: Seed=0x462fb88) returned 0xbe2776 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32958 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0160.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0160.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0160.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d630 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32958 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0160.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0160.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0160.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0160.031] ReadFile (in: hFile=0x2b3c, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x17c, lpNumberOfBytesRead=0x462fb84, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0x462fb84*=0x17c, lpOverlapped=0x0) returned 1 [0160.031] SetFilePointerEx (in: hFile=0x2b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.031] WriteFile (in: hFile=0x2b3c, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x462fb88, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x462fb88*=0x17c, lpOverlapped=0x0) returned 1 [0160.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0160.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0160.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0160.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0160.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0160.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0160.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d630) returned 1 [0160.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e70128 [0160.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d630 [0160.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32958 [0160.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0160.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0160.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e700f8 [0160.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0160.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0160.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0160.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0160.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d630) returned 1 [0160.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec828 [0160.048] SetFilePointerEx (in: hFile=0x2b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.048] WriteFile (in: hFile=0x2b3c, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x462fbfc, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x462fbfc*=0x106, lpOverlapped=0x0) returned 1 [0160.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0160.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700f8) returned 1 [0160.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0160.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70128) returned 1 [0160.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0160.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0160.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be88) returned 1 [0160.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5f0) returned 1 [0160.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c668 [0160.062] wcscpy (in: _Dest=0x3e1c668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" [0160.062] wcscat (in: _Dest=0x3e1c668, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.f0dbec" [0160.062] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.f0dbec", NtPathName=0x462fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8b88 [0162.677] FlushFileBuffers (hFile=0x2b3c) returned 1 [0162.681] CloseHandle (hObject=0x2b3c) returned 1 [0162.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c258 [0162.692] wcscpy (in: _Dest=0x3e1c258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0162.692] wcscat (in: _Dest=0x3e1c258, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt" [0162.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\f0dbec-readme.txt")) returned 0xffffffff [0162.692] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f9c [0162.700] WriteFile (in: hFile=0x1f9c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x462fba4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x462fba4*=0x70c, lpOverlapped=0x0) returned 1 [0162.706] CloseHandle (hObject=0x1f9c) returned 1 [0162.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c258) returned 1 [0162.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfb88) returned 1 [0162.712] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f98e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f98e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4fbb130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0162.712] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0162.712] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0162.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6d00 [0162.712] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0162.712] wcscat (in: _Dest=0x2ff6d00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0162.712] wcscat (in: _Dest=0x2ff6d00, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" [0163.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x268c [0163.103] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f96740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0163.103] wcscmp (_String1="LOCK", _String2=".") returned 1 [0163.103] wcscmp (_String1="LOCK", _String2="..") returned 1 [0163.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35af88 [0163.103] wcscpy (in: _Dest=0x35af88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0163.103] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0163.103] wcscat (in: _Dest=0x35af88, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" [0163.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35af88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2688 [0163.109] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0163.109] wcscmp (_String1="LOG", _String2=".") returned 1 [0163.109] wcscmp (_String1="LOG", _String2="..") returned 1 [0163.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bdf8 [0163.109] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0163.109] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0163.109] wcscat (in: _Dest=0x35bdf8, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" [0163.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0163.112] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f98e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0163.112] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0163.112] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0163.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5af8 [0163.112] wcscpy (in: _Dest=0x81d5af8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0163.112] wcscat (in: _Dest=0x81d5af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0163.112] wcscat (in: _Dest=0x81d5af8, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" [0163.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x267c [0163.113] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f98e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0163.113] FindClose (in: hFindFile=0x3e55588 | out: hFindFile=0x3e55588) returned 1 [0163.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f099f0) returned 1 [0163.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da568) returned 1 [0163.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d290) returned 1 Thread: id = 2822 os_tid = 0x27a4 [0157.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da4b8 [0157.913] wcscpy (in: _Dest=0x81da4b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0157.913] wcscat (in: _Dest=0x81da4b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0157.913] wcscat (in: _Dest=0x81da4b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*" [0157.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08de8 [0157.914] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c17230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55548 [0159.010] wcscmp (_String1=".", _String2=".") returned 0 [0159.010] FindNextFileW (in: hFindFile=0x3e55548, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c17230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.010] wcscmp (_String1="..", _String2=".") returned 1 [0159.010] wcscmp (_String1="..", _String2="..") returned 0 [0159.010] FindNextFileW (in: hFindFile=0x3e55548, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5c17230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x43b, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0159.010] wcscmp (_String1="000003.log", _String2=".") returned 1 [0159.010] wcscmp (_String1="000003.log", _String2="..") returned 1 [0159.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81dfc48 [0159.010] wcscpy (in: _Dest=0x81dfc48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0159.010] wcscat (in: _Dest=0x81dfc48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0159.010] wcscat (in: _Dest=0x81dfc48, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" [0160.018] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log")) returned 0x2020 [0160.044] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", dwFileAttributes=0x20) returned 1 [0160.045] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fb0 [0160.045] GetFileSizeEx (in: hFile=0x1fb0, lpFileSize=0x12befbf8 | out: lpFileSize=0x12befbf8*=1083) returned 1 [0160.045] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x437, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.045] ReadFile (in: hFile=0x1fb0, lpBuffer=0x12befc04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12befbe0, lpOverlapped=0x0 | out: lpBuffer=0x12befc04*, lpNumberOfBytesRead=0x12befbe0*=0x4, lpOverlapped=0x0) returned 1 [0160.121] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c80 [0160.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0160.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0160.121] NtQuerySystemTime (in: CurrentTime=0x12befb80 | out: CurrentTime=0x12befb80*=132471540283584000) returned 0x0 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x11af2413 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x77ed2878 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x70a9f555 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x30cb9a6d [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x19fb9354 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x5167ca60 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x6b3a40ac [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x140cbfba [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x35b9debb [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x45976aae [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x54fc1461 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x27a24472 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x1c3bd5b7 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x36afdfbd [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x3d8fef2a [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x1e895fb9 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x69191ec7 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x41625596 [0160.121] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0xf09cf97 [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x3caf8e2 [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0xd27ae78 [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x1ea4a60a [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x49a47abd [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x7df3a378 [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x61a9ac34 [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x501a662e [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x2420464d [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x3000ee98 [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x4a0e82fd [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x36114060 [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x72a13977 [0160.122] RtlRandomEx (in: Seed=0x12befb78 | out: Seed=0x12befb78) returned 0x466159d9 [0160.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0160.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67d18 [0160.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ca8 [0160.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0160.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0160.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0160.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8308f50 [0160.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67d18 [0160.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c80 [0160.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0160.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0160.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0160.130] ReadFile (in: hFile=0x1fb0, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x43b, lpNumberOfBytesRead=0x12befb74, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0x12befb74*=0x43b, lpOverlapped=0x0) returned 1 [0160.130] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.130] WriteFile (in: hFile=0x1fb0, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x43b, lpNumberOfBytesWritten=0x12befb78, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x12befb78*=0x43b, lpOverlapped=0x0) returned 1 [0164.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14f0 [0164.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0164.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0164.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0164.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0164.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0164.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f50) returned 1 [0164.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e6fd98 [0164.746] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.746] WriteFile (in: hFile=0x1fb0, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x12befbec, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x12befbec*=0x106, lpOverlapped=0x0) returned 1 [0166.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0166.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0166.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0166.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd98) returned 1 [0166.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14f0) returned 1 [0166.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0166.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0166.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ca8) returned 1 [0166.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81ef7e8 [0166.576] wcscpy (in: _Dest=0x81ef7e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" [0166.576] wcscat (in: _Dest=0x81ef7e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.f0dbec" [0166.576] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.f0dbec", NtPathName=0x12befb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0166.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81ea608 [0172.306] FlushFileBuffers (hFile=0x1fb0) returned 1 [0172.309] CloseHandle (hObject=0x1fb0) returned 1 [0172.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81ef7e8 [0172.315] wcscpy (in: _Dest=0x81ef7e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0172.315] wcscat (in: _Dest=0x81ef7e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt" [0172.315] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\f0dbec-readme.txt")) returned 0xffffffff [0172.315] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fb0 [0172.317] WriteFile (in: hFile=0x1fb0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12befb94, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12befb94*=0x70c, lpOverlapped=0x0) returned 1 [0172.319] CloseHandle (hObject=0x1fb0) returned 1 [0172.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef7e8) returned 1 [0172.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfc48) returned 1 [0172.319] FindNextFileW (in: hFindFile=0x3e55548, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a9a470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0172.319] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0172.319] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0172.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41258 [0172.320] wcscpy (in: _Dest=0x3d41258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0172.320] wcscat (in: _Dest=0x3d41258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0172.320] wcscat (in: _Dest=0x3d41258, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" [0173.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0173.493] FindNextFileW (in: hFindFile=0x3e55548, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a95650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0173.493] wcscmp (_String1="LOCK", _String2=".") returned 1 [0173.493] wcscmp (_String1="LOCK", _String2="..") returned 1 [0173.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da828 [0173.493] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0173.493] wcscat (in: _Dest=0x81da828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0173.494] wcscat (in: _Dest=0x81da828, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" [0173.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0173.495] FindNextFileW (in: hFindFile=0x3e55548, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0173.495] wcscmp (_String1="LOG", _String2=".") returned 1 [0173.495] wcscmp (_String1="LOG", _String2="..") returned 1 [0173.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9c78 [0173.495] wcscpy (in: _Dest=0x81d9c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0173.495] wcscat (in: _Dest=0x81d9c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0173.495] wcscat (in: _Dest=0x81d9c78, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" [0173.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0173.496] FindNextFileW (in: hFindFile=0x3e55548, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a95650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0173.496] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0173.496] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0173.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5968 [0173.496] wcscpy (in: _Dest=0x81d5968, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0173.496] wcscat (in: _Dest=0x81d5968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0173.496] wcscat (in: _Dest=0x81d5968, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" [0173.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0173.497] FindNextFileW (in: hFindFile=0x3e55548, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a95650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0173.498] FindClose (in: hFindFile=0x3e55548 | out: hFindFile=0x3e55548) returned 1 [0173.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08de8) returned 1 [0173.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da4b8) returned 1 [0173.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d680) returned 1 Thread: id = 2823 os_tid = 0x27a8 [0157.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dca48 [0157.915] wcscpy (in: _Dest=0x81dca48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0157.915] wcscat (in: _Dest=0x81dca48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0157.915] wcscat (in: _Dest=0x81dca48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*" [0157.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08448 [0157.915] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6173350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6173350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0159.011] wcscmp (_String1=".", _String2=".") returned 0 [0159.011] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6173350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6173350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.011] wcscmp (_String1="..", _String2=".") returned 1 [0159.011] wcscmp (_String1="..", _String2="..") returned 0 [0159.011] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6173350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6178170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6178170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0159.011] wcscmp (_String1="aapocclcgogkmnckokdopfmhonfmgoek", _String2=".") returned 1 [0159.011] wcscmp (_String1="aapocclcgogkmnckokdopfmhonfmgoek", _String2="..") returned 1 [0159.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8e28 [0159.012] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0159.012] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0159.012] wcscat (in: _Dest=0x2c8e28, _Source="aapocclcgogkmnckokdopfmhonfmgoek" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0160.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39ce0 [0160.043] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0160.044] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0160.044] wcscat (in: _Dest=0x3e39ce0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*" [0160.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe5f8 [0160.044] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6173350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6178170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6178170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0162.219] wcscmp (_String1=".", _String2=".") returned 0 [0162.219] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6173350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6178170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6178170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.219] wcscmp (_String1="..", _String2=".") returned 1 [0162.219] wcscmp (_String1="..", _String2="..") returned 0 [0162.219] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0162.219] wcscmp (_String1="0.9_0", _String2=".") returned 1 [0162.219] wcscmp (_String1="0.9_0", _String2="..") returned 1 [0162.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80209c0 [0162.219] wcscpy (in: _Dest=0x80209c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0162.220] wcscat (in: _Dest=0x80209c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0162.220] wcscat (in: _Dest=0x80209c0, _Source="0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0163.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80209c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0163.081] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0163.082] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0163.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe5f8) returned 1 [0163.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 [0163.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 [0163.082] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65fae00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65fae00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0163.082] wcscmp (_String1="aohghmighlieiainnegkcijnfilokake", _String2=".") returned 1 [0163.082] wcscmp (_String1="aohghmighlieiainnegkcijnfilokake", _String2="..") returned 1 [0163.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8e28 [0163.083] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0163.083] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0163.083] wcscat (in: _Dest=0x2c8e28, _Source="aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0163.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c8e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b4 [0163.084] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f9dc70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ff4960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ff4960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0163.084] wcscmp (_String1="apdfllckaahabafndbhieahigkjlhalf", _String2=".") returned 1 [0163.084] wcscmp (_String1="apdfllckaahabafndbhieahigkjlhalf", _String2="..") returned 1 [0163.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8f08 [0163.084] wcscpy (in: _Dest=0x2c8f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0163.084] wcscat (in: _Dest=0x2c8f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0163.084] wcscat (in: _Dest=0x2c8f08, _Source="apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0163.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c8f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a0 [0163.085] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe509e200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe853dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe853dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0163.085] wcscmp (_String1="blpcfgokakmgnkcojhhkbfbldkacnbeo", _String2=".") returned 1 [0163.085] wcscmp (_String1="blpcfgokakmgnkcojhhkbfbldkacnbeo", _String2="..") returned 1 [0163.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8568 [0163.085] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0163.085] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0163.085] wcscat (in: _Dest=0x2c8568, _Source="blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0163.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x269c [0163.087] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5c801e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c85000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c85000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0163.087] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2=".") returned 1 [0163.087] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2="..") returned 1 [0163.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8488 [0163.087] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0163.087] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0163.087] wcscat (in: _Dest=0x2c8488, _Source="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0163.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2698 [0163.088] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5427e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe542cc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe542cc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0163.088] wcscmp (_String1="nmmhkkegccagdldgiimedpiccmgmieda", _String2=".") returned 1 [0163.088] wcscmp (_String1="nmmhkkegccagdldgiimedpiccmgmieda", _String2="..") returned 1 [0163.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8fe8 [0163.088] wcscpy (in: _Dest=0x2c8fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0163.088] wcscat (in: _Dest=0x2c8fe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0163.088] wcscat (in: _Dest=0x2c8fe8, _Source="nmmhkkegccagdldgiimedpiccmgmieda" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0163.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2694 [0163.089] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efa340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b60b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b60b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0163.089] wcscmp (_String1="pjkljhegncpnkpknbcohdijeoejaedia", _String2=".") returned 1 [0163.089] wcscmp (_String1="pjkljhegncpnkpknbcohdijeoejaedia", _String2="..") returned 1 [0163.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c90c8 [0163.090] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0163.090] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0163.090] wcscat (in: _Dest=0x2c90c8, _Source="pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0163.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c90c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2690 [0163.091] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8538ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe85403f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0163.091] wcscmp (_String1="Temp", _String2=".") returned 1 [0163.091] wcscmp (_String1="Temp", _String2="..") returned 1 [0163.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x81866f8 [0163.091] wcscpy (in: _Dest=0x81866f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0163.091] wcscat (in: _Dest=0x81866f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0163.091] wcscat (in: _Dest=0x81866f8, _Source="Temp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp" [0163.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81866f8) returned 1 [0163.091] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8538ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe85403f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0163.091] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0163.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08448) returned 1 [0163.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dca48) returned 1 [0163.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11468) returned 1 Thread: id = 2824 os_tid = 0x27ac [0157.916] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons")) returned 0x2020 [0157.959] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", dwFileAttributes=0x20) returned 1 [0163.491] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b6c [0163.491] GetFileSizeEx (in: hFile=0x2b6c, lpFileSize=0x94cf8a8 | out: lpFileSize=0x94cf8a8*=20480) returned 1 [0163.492] SetFilePointerEx (in: hFile=0x2b6c, liDistanceToMove=0x4ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.492] ReadFile (in: hFile=0x2b6c, lpBuffer=0x94cf8b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94cf890, lpOverlapped=0x0 | out: lpBuffer=0x94cf8b4*, lpNumberOfBytesRead=0x94cf890*=0x4, lpOverlapped=0x0) returned 1 [0163.494] SetFilePointerEx (in: hFile=0x2b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0163.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0163.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0163.495] NtQuerySystemTime (in: CurrentTime=0x94cf830 | out: CurrentTime=0x94cf830*=132471540317280000) returned 0x0 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x7815eba0 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x32a4d5dd [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x5a00a114 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x3ab03da8 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x55ce4703 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x7373dfef [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x788cc463 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x3cbdec6e [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x2dddc3a0 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x3dcc1e94 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x27188e0d [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x2d5b2515 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x6581a5d9 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x42031ea [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x30007e02 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x45172c82 [0163.495] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x497b7760 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x6041ebdb [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x2db26a15 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x245ede96 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x47facb80 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x21610912 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x31bbb151 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x49dcbcd3 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x1b46e6ad [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x1569100b [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x2c1af554 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x61a30bd [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x4fb87fb5 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x1cc389a1 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x1d566c43 [0163.496] RtlRandomEx (in: Seed=0x94cf828 | out: Seed=0x94cf828) returned 0x372664d7 [0163.509] SetFilePointerEx (in: hFile=0x2b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.509] ReadFile (in: hFile=0x2b6c, lpBuffer=0x8151870, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94cf830, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesRead=0x94cf830*=0x3c00, lpOverlapped=0x0) returned 1 [0163.519] SetFilePointerEx (in: hFile=0x2b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3ff8 [0163.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50be8 [0163.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0163.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7e8) returned 1 [0163.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8155478 [0163.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0163.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0163.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0163.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50be8) returned 1 [0163.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3ff8) returned 1 [0163.521] WriteFile (in: hFile=0x2b6c, lpBuffer=0x8155478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94cf830, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesWritten=0x94cf830*=0x3c00, lpOverlapped=0x0) returned 1 [0165.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0165.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0165.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x305c1f8 [0165.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0165.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x305cb08 [0165.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0165.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0165.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0165.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0165.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d250) returned 1 [0165.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec080 [0165.502] SetFilePointerEx (in: hFile=0x2b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.502] WriteFile (in: hFile=0x2b6c, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x94cf89c, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x94cf89c*=0x102, lpOverlapped=0x0) returned 1 [0167.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0167.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0167.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0167.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0167.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7e8) returned 1 [0167.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0167.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0167.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0167.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187610 [0167.015] wcscpy (in: _Dest=0x8187610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" [0167.015] wcscat (in: _Dest=0x8187610, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.f0dbec" [0167.015] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.f0dbec", NtPathName=0x94cf820, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333ee8 [0172.550] FlushFileBuffers (hFile=0x2b6c) returned 1 [0172.558] CloseHandle (hObject=0x2b6c) returned 1 [0172.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da828 [0172.566] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.566] wcscat (in: _Dest=0x81da828, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0172.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0172.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 [0172.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c4a8) returned 1 Thread: id = 2825 os_tid = 0x27b0 [0157.933] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal")) returned 0x2020 [0157.959] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", dwFileAttributes=0x20) returned 1 [0163.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b70 [0163.510] GetFileSizeEx (in: hFile=0x2b70, lpFileSize=0x12d2feb0 | out: lpFileSize=0x12d2feb0*=0) returned 1 [0163.510] FlushFileBuffers (hFile=0x2b70) returned 1 [0166.521] CloseHandle (hObject=0x2b70) returned 1 [0166.521] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", dwFileAttributes=0x2020) returned 1 [0177.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d098) returned 1 Thread: id = 2826 os_tid = 0x27b4 [0157.934] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history")) returned 0x2020 [0157.949] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", dwFileAttributes=0x20) returned 1 [0163.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b44 [0163.337] GetFileSizeEx (in: hFile=0x2b44, lpFileSize=0xd2cff40 | out: lpFileSize=0xd2cff40*=102400) returned 1 [0163.337] SetFilePointerEx (in: hFile=0x2b44, liDistanceToMove=0x18ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.381] ReadFile (in: hFile=0x2b44, lpBuffer=0xd2cff4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd2cff28, lpOverlapped=0x0 | out: lpBuffer=0xd2cff4c*, lpNumberOfBytesRead=0xd2cff28*=0x4, lpOverlapped=0x0) returned 1 [0163.390] SetFilePointerEx (in: hFile=0x2b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0163.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0163.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0163.391] NtQuerySystemTime (in: CurrentTime=0xd2cfec8 | out: CurrentTime=0xd2cfec8*=132471540316188000) returned 0x0 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x46515a34 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x746180da [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x1e669eba [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x52f80567 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x6fe6c983 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x59740ba3 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x4b67190a [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x27a5d953 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x4ca8436e [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x45c0c625 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x6a0e798a [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x6a11f682 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x6e9d7977 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x106d71c [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x3be7d845 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x5b07cbdd [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0xb635920 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x178764d6 [0163.391] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x72557be9 [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0xded9ffd [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x54abff8 [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x682d6528 [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x644bf04c [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x11f638b7 [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x48b85d1d [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x122172f0 [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x6900ba15 [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x13155e6a [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x20be8053 [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x620543e4 [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x5e1c26e1 [0163.392] RtlRandomEx (in: Seed=0xd2cfec0 | out: Seed=0xd2cfec0) returned 0x1ba139ae [0163.408] SetFilePointerEx (in: hFile=0x2b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.408] ReadFile (in: hFile=0x2b44, lpBuffer=0x809e060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd2cfec8, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0xd2cfec8*=0x3c00, lpOverlapped=0x0) returned 1 [0163.425] SetFilePointerEx (in: hFile=0x2b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b4238 [0163.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50e40 [0163.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0163.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0163.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0163.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0163.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0163.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7e8) returned 1 [0163.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50e40) returned 1 [0163.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4238) returned 1 [0163.427] WriteFile (in: hFile=0x2b44, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd2cfec8, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0xd2cfec8*=0x3c00, lpOverlapped=0x0) returned 1 [0165.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0165.484] SetFilePointerEx (in: hFile=0x2b44, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.484] ReadFile (in: hFile=0x2b44, lpBuffer=0x809e060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd2cfec8, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0xd2cfec8*=0x3c00, lpOverlapped=0x0) returned 1 [0166.158] SetFilePointerEx (in: hFile=0x2b44, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e69f8 [0166.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e680d8 [0166.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0166.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0166.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0166.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0166.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0166.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0166.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0166.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e69f8) returned 1 [0166.159] WriteFile (in: hFile=0x2b44, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd2cfec8, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0xd2cfec8*=0x3c00, lpOverlapped=0x0) returned 1 [0166.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0166.958] SetFilePointerEx (in: hFile=0x2b44, liDistanceToMove=0x15400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.958] ReadFile (in: hFile=0x2b44, lpBuffer=0x809e060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd2cfec8, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0xd2cfec8*=0x3c00, lpOverlapped=0x0) returned 1 [0166.959] SetFilePointerEx (in: hFile=0x2b44, liDistanceToMove=0x15400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x830a228 [0166.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ac0 [0166.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0166.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0166.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0166.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0166.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d70 [0166.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0166.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0166.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a228) returned 1 [0166.960] WriteFile (in: hFile=0x2b44, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd2cfec8, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0xd2cfec8*=0x3c00, lpOverlapped=0x0) returned 1 [0168.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0168.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fce030 [0168.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0168.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x305ba50 [0168.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0168.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0168.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0168.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0168.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9bb0) returned 1 [0168.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef8c58 [0168.708] SetFilePointerEx (in: hFile=0x2b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.708] WriteFile (in: hFile=0x2b44, lpBuffer=0x3ef8c58*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0xd2cff34, lpOverlapped=0x0 | out: lpBuffer=0x3ef8c58*, lpNumberOfBytesWritten=0xd2cff34*=0x140, lpOverlapped=0x0) returned 1 [0172.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8c58) returned 1 [0172.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0172.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0172.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0172.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce030) returned 1 [0172.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0172.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0172.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0172.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8188330 [0172.325] wcscpy (in: _Dest=0x8188330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" [0172.325] wcscat (in: _Dest=0x8188330, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.f0dbec" [0172.325] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.f0dbec", NtPathName=0xd2cfeb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0172.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81dfc48 [0172.512] FlushFileBuffers (hFile=0x2b44) returned 1 [0172.532] CloseHandle (hObject=0x2b44) returned 1 [0172.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81d9c78 [0172.552] wcscpy (in: _Dest=0x81d9c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.552] wcscat (in: _Dest=0x81d9c78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0172.552] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0172.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c78) returned 1 [0172.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d710) returned 1 Thread: id = 2827 os_tid = 0x27b8 [0157.935] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache")) returned 0x2020 [0157.949] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", dwFileAttributes=0x20) returned 1 [0163.513] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b40 [0163.513] GetFileSizeEx (in: hFile=0x2b40, lpFileSize=0x12dcfb68 | out: lpFileSize=0x12dcfb68*=2015) returned 1 [0163.513] SetFilePointerEx (in: hFile=0x2b40, liDistanceToMove=0x7db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.513] ReadFile (in: hFile=0x2b40, lpBuffer=0x12dcfb74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x12dcfb74*, lpNumberOfBytesRead=0x12dcfb50*=0x4, lpOverlapped=0x0) returned 1 [0163.523] SetFilePointerEx (in: hFile=0x2b40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0163.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0163.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0163.523] NtQuerySystemTime (in: CurrentTime=0x12dcfaf0 | out: CurrentTime=0x12dcfaf0*=132471540317592000) returned 0x0 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x3f10b182 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x18f453e6 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x29fa0302 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x3656b7e8 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x3b5d6a50 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x1d243aa8 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x39b5b9e4 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x28e9c80 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x7a87ab68 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x6551abc5 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x780d0479 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x567147ef [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x470dd797 [0163.523] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0xa6244a0 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0xa68bafa [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x18f8521e [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x9b6e1a0 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x51242282 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x4534957f [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0xbe3e360 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x299dad84 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x4f1b9389 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x35bc7d4f [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x4f976443 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x2de3d266 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x71545932 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x6af87676 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x5f783941 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x4f73ca09 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0xa376be0 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x51ef5d60 [0163.524] RtlRandomEx (in: Seed=0x12dcfae8 | out: Seed=0x12dcfae8) returned 0x7f78e3a1 [0163.539] ReadFile (in: hFile=0x2b40, lpBuffer=0x8159080, nNumberOfBytesToRead=0x7df, lpNumberOfBytesRead=0x12dcfae4, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesRead=0x12dcfae4*=0x7df, lpOverlapped=0x0) returned 1 [0163.540] SetFilePointerEx (in: hFile=0x2b40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.540] WriteFile (in: hFile=0x2b40, lpBuffer=0x815cc88*, nNumberOfBytesToWrite=0x7df, lpNumberOfBytesWritten=0x12dcfae8, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesWritten=0x12dcfae8*=0x7df, lpOverlapped=0x0) returned 1 [0166.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14f0 [0166.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0166.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0166.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0166.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0166.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50be8) returned 1 [0166.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3ff8) returned 1 [0166.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30b3ff8 [0166.954] SetFilePointerEx (in: hFile=0x2b40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.954] WriteFile (in: hFile=0x2b40, lpBuffer=0x3d56f00*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x12dcfb5c, lpOverlapped=0x0 | out: lpBuffer=0x3d56f00*, lpNumberOfBytesWritten=0x12dcfb5c*=0x11e, lpOverlapped=0x0) returned 1 [0168.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 [0168.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a10) returned 1 [0168.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0168.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3ff8) returned 1 [0168.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14f0) returned 1 [0168.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0168.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0168.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0168.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e9010 [0168.813] wcscpy (in: _Dest=0x81e9010, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" [0168.813] wcscat (in: _Dest=0x81e9010, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.f0dbec" [0168.813] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.f0dbec", NtPathName=0x12dcfae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81ec650 [0172.437] FlushFileBuffers (hFile=0x2b40) returned 1 [0172.510] CloseHandle (hObject=0x2b40) returned 1 [0172.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da358 [0172.511] wcscpy (in: _Dest=0x81da358, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.511] wcscat (in: _Dest=0x81da358, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0172.511] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0172.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da358) returned 1 [0172.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41f48) returned 1 Thread: id = 2828 os_tid = 0x27bc [0157.936] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history-journal")) returned 0x2020 [0157.960] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", dwFileAttributes=0x20) returned 1 [0163.512] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b74 [0163.512] GetFileSizeEx (in: hFile=0x2b74, lpFileSize=0x1266fc98 | out: lpFileSize=0x1266fc98*=0) returned 1 [0163.512] FlushFileBuffers (hFile=0x2b74) returned 1 [0166.521] CloseHandle (hObject=0x2b74) returned 1 [0166.521] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", dwFileAttributes=0x2020) returned 1 [0186.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cf48) returned 1 Thread: id = 2829 os_tid = 0x27c0 [0157.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8188288 [0157.936] wcscpy (in: _Dest=0x8188288, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0157.936] wcscat (in: _Dest=0x8188288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\" [0157.937] wcscat (in: _Dest=0x8188288, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*" [0157.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07840 [0157.937] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38398 [0157.960] wcscmp (_String1=".", _String2=".") returned 0 [0157.960] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.960] wcscmp (_String1="..", _String2=".") returned 1 [0157.960] wcscmp (_String1="..", _String2="..") returned 0 [0157.960] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726ce90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726ce90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBA7.tmp", cAlternateFileName="")) returned 1 [0157.960] wcscmp (_String1="BBA7.tmp", _String2=".") returned 1 [0157.960] wcscmp (_String1="BBA7.tmp", _String2="..") returned 1 [0157.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d41c68 [0157.961] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0157.961] wcscat (in: _Dest=0x3d41c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\" [0157.961] wcscat (in: _Dest=0x3d41c68, _Source="BBA7.tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp" [0161.217] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba7.tmp")) returned 0x2020 [0162.360] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp", dwFileAttributes=0x20) returned 1 [0163.587] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba7.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b1c [0163.588] GetFileSizeEx (in: hFile=0x2b1c, lpFileSize=0x12eaf7d0 | out: lpFileSize=0x12eaf7d0*=0) returned 1 [0163.588] FlushFileBuffers (hFile=0x2b1c) returned 1 [0166.522] CloseHandle (hObject=0x2b1c) returned 1 [0166.522] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp", dwFileAttributes=0x2020) returned 1 [0167.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 [0167.406] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe726f5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBA8.tmp", cAlternateFileName="")) returned 1 [0167.407] wcscmp (_String1="BBA8.tmp", _String2=".") returned 1 [0167.407] wcscmp (_String1="BBA8.tmp", _String2="..") returned 1 [0167.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d41c68 [0167.407] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0167.407] wcscat (in: _Dest=0x3d41c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\" [0167.407] wcscat (in: _Dest=0x3d41c68, _Source="BBA8.tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp" [0169.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b1c [0169.132] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe726f5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBA8.tmp", cAlternateFileName="")) returned 0 [0169.132] FindClose (in: hFindFile=0x3f38398 | out: hFindFile=0x3f38398) returned 1 [0169.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07840) returned 1 [0169.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188288) returned 1 [0169.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2de60) returned 1 Thread: id = 2830 os_tid = 0x27c4 [0158.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81dfac8 [0158.378] wcscpy (in: _Dest=0x81dfac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0158.378] wcscat (in: _Dest=0x81dfac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\" [0158.378] wcscat (in: _Dest=0x81dfac8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*" [0158.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091550 [0158.378] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74cf430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74cf430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0162.497] wcscmp (_String1=".", _String2=".") returned 0 [0162.497] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74cf430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74cf430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.498] wcscmp (_String1="..", _String2=".") returned 1 [0162.498] wcscmp (_String1="..", _String2="..") returned 0 [0162.498] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0162.498] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2=".") returned 1 [0162.498] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2="..") returned 1 [0162.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e24d40 [0162.498] wcscpy (in: _Dest=0x3e24d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0162.498] wcscat (in: _Dest=0x3e24d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\" [0162.498] wcscat (in: _Dest=0x3e24d40, _Source="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0163.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e24d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b64 [0163.095] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 0 [0163.095] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0163.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091550) returned 1 [0163.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfac8) returned 1 [0163.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1648) returned 1 Thread: id = 2831 os_tid = 0x27c8 [0158.379] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data")) returned 0x2020 [0162.499] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", dwFileAttributes=0x20) returned 1 [0163.628] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2be8 [0163.628] GetFileSizeEx (in: hFile=0x2be8, lpFileSize=0x12d7fc30 | out: lpFileSize=0x12d7fc30*=18432) returned 1 [0163.628] SetFilePointerEx (in: hFile=0x2be8, liDistanceToMove=0x47fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.628] ReadFile (in: hFile=0x2be8, lpBuffer=0x12d7fc3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12d7fc18, lpOverlapped=0x0 | out: lpBuffer=0x12d7fc3c*, lpNumberOfBytesRead=0x12d7fc18*=0x4, lpOverlapped=0x0) returned 1 [0163.631] SetFilePointerEx (in: hFile=0x2be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0163.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0163.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0163.631] NtQuerySystemTime (in: CurrentTime=0x12d7fbb8 | out: CurrentTime=0x12d7fbb8*=132471540318528000) returned 0x0 [0163.631] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x156ad35b [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x60345602 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x679a4fb7 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x305410a3 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x4a354dc0 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x5e39c3f3 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x45fb3491 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x13f33a87 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x5220921a [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x48fa1986 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x377c768a [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x7138edb3 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x5e6a344d [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0xe9d35d0 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x5bbf735 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x6fec6309 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x44a2da2e [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x5a2ddb02 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x1f81441d [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x423cdf77 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x3cace5a9 [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x2a8f9e7a [0163.632] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x9365760 [0163.633] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0xcd880b [0163.633] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x7b59654d [0163.633] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x3fd6170a [0163.633] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x6c07af6e [0163.633] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x59d9555e [0163.633] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x3d2fbb37 [0163.633] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x1e058a8 [0163.633] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x4e3b7853 [0163.633] RtlRandomEx (in: Seed=0x12d7fbb0 | out: Seed=0x12d7fbb0) returned 0x1f4ce89e [0163.646] SetFilePointerEx (in: hFile=0x2be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.646] ReadFile (in: hFile=0x2be8, lpBuffer=0x816f8b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x12d7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesRead=0x12d7fbb8*=0x3c00, lpOverlapped=0x0) returned 1 [0163.647] SetFilePointerEx (in: hFile=0x2be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309220 [0163.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33240 [0163.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0163.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0163.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81734b8 [0163.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0163.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0163.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0163.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0163.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309220) returned 1 [0163.649] WriteFile (in: hFile=0x2be8, lpBuffer=0x81734b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x12d7fbb8, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesWritten=0x12d7fbb8*=0x3c00, lpOverlapped=0x0) returned 1 [0166.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0166.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0166.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e6fd98 [0166.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0166.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e701b8 [0166.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0166.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14f0 [0166.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14f0) returned 1 [0166.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0166.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9e80) returned 1 [0166.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec5f8 [0166.953] SetFilePointerEx (in: hFile=0x2be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.953] WriteFile (in: hFile=0x2be8, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x12d7fc24, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x12d7fc24*=0x106, lpOverlapped=0x0) returned 1 [0168.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0168.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0168.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0168.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd98) returned 1 [0168.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0168.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0168.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0168.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7f8) returned 1 [0168.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d9c78 [0168.811] wcscpy (in: _Dest=0x81d9c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" [0168.811] wcscat (in: _Dest=0x81d9c78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.f0dbec" [0168.811] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.f0dbec", NtPathName=0x12d7fba8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333228 [0172.545] FlushFileBuffers (hFile=0x2be8) returned 1 [0172.551] CloseHandle (hObject=0x2be8) returned 1 [0172.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da828 [0172.562] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.562] wcscat (in: _Dest=0x81da828, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0172.562] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0172.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 [0172.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 2832 os_tid = 0x27cc [0158.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal")) returned 0x2020 [0162.504] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", dwFileAttributes=0x20) returned 1 [0163.767] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2bbc [0163.768] GetFileSizeEx (in: hFile=0x2bbc, lpFileSize=0x12f4fb60 | out: lpFileSize=0x12f4fb60*=0) returned 1 [0163.768] FlushFileBuffers (hFile=0x2bbc) returned 1 [0166.532] CloseHandle (hObject=0x2bbc) returned 1 [0166.532] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", dwFileAttributes=0x2020) returned 1 [0177.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da778) returned 1 Thread: id = 2833 os_tid = 0x27d0 [0158.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor")) returned 0x2020 [0161.498] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", dwFileAttributes=0x20) returned 1 [0163.516] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a54 [0163.516] GetFileSizeEx (in: hFile=0x2a54, lpFileSize=0x1277fe78 | out: lpFileSize=0x1277fe78*=15360) returned 1 [0163.516] SetFilePointerEx (in: hFile=0x2a54, liDistanceToMove=0x3bfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.516] ReadFile (in: hFile=0x2a54, lpBuffer=0x1277fe84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1277fe60, lpOverlapped=0x0 | out: lpBuffer=0x1277fe84*, lpNumberOfBytesRead=0x1277fe60*=0x4, lpOverlapped=0x0) returned 1 [0163.543] SetFilePointerEx (in: hFile=0x2a54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0163.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0163.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0163.543] NtQuerySystemTime (in: CurrentTime=0x1277fe00 | out: CurrentTime=0x1277fe00*=132471540317748000) returned 0x0 [0163.543] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x583a26c7 [0163.543] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x2b74856e [0163.543] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x31e9722d [0163.543] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x605f3fcd [0163.543] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x61da40e5 [0163.543] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x3e8a39a4 [0163.543] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x3ecf7f18 [0163.543] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0xea9f184 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x404602d4 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x11ee8c31 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x30452898 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x1503c796 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x73cd2686 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x7a40526d [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x33fc46c [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x4be945b9 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x5fdf594 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0xb448c3f [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x39dace92 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x7d95f892 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x55001d02 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x811ba30 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x14564d88 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x5ced4275 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x3b9ae991 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x7f4dbfaf [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x75e7739c [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x1911e4a1 [0163.544] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x6e248b95 [0163.545] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x51f8fec3 [0163.545] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x77a680dd [0163.545] RtlRandomEx (in: Seed=0x1277fdf8 | out: Seed=0x1277fdf8) returned 0x39860b30 [0163.558] SetFilePointerEx (in: hFile=0x2a54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.558] ReadFile (in: hFile=0x2a54, lpBuffer=0x8160890, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x1277fe00, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesRead=0x1277fe00*=0x3c00, lpOverlapped=0x0) returned 1 [0163.560] SetFilePointerEx (in: hFile=0x2a54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3e48 [0163.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32430 [0163.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0163.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0163.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0163.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0163.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0163.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0163.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0163.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3e48) returned 1 [0163.561] WriteFile (in: hFile=0x2a54, lpBuffer=0x8164498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1277fe00, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesWritten=0x1277fe00*=0x3c00, lpOverlapped=0x0) returned 1 [0166.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0166.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0166.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x8308fe0 [0166.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0166.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x8309f58 [0166.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0166.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0166.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0166.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0166.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a228) returned 1 [0166.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ef7fd8 [0166.957] SetFilePointerEx (in: hFile=0x2a54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.957] WriteFile (in: hFile=0x2a54, lpBuffer=0x3ef7fd8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x1277fe6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef7fd8*, lpNumberOfBytesWritten=0x1277fe6c*=0x122, lpOverlapped=0x0) returned 1 [0172.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7fd8) returned 1 [0172.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309f58) returned 1 [0172.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0172.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308fe0) returned 1 [0172.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0172.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0172.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0172.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0172.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d65e8 [0172.294] wcscpy (in: _Dest=0x81d65e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" [0172.294] wcscat (in: _Dest=0x81d65e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.f0dbec" [0172.294] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.f0dbec", NtPathName=0x1277fdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0172.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81eb168 [0172.537] FlushFileBuffers (hFile=0x2a54) returned 1 [0172.544] CloseHandle (hObject=0x2a54) returned 1 [0172.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da828 [0172.557] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.557] wcscat (in: _Dest=0x81da828, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0172.557] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0172.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 [0172.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1700) returned 1 Thread: id = 2834 os_tid = 0x27d4 [0158.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal")) returned 0x2020 [0162.496] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", dwFileAttributes=0x20) returned 1 [0163.626] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1810 [0163.627] GetFileSizeEx (in: hFile=0x1810, lpFileSize=0x1300f938 | out: lpFileSize=0x1300f938*=0) returned 1 [0163.627] FlushFileBuffers (hFile=0x1810) returned 1 [0166.522] CloseHandle (hObject=0x1810) returned 1 [0166.523] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", dwFileAttributes=0x2020) returned 1 [0177.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6458) returned 1 Thread: id = 2835 os_tid = 0x27d8 [0158.381] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state")) returned 0x2020 [0162.499] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", dwFileAttributes=0x20) returned 1 [0163.652] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2be4 [0163.653] GetFileSizeEx (in: hFile=0x2be4, lpFileSize=0x12e0f880 | out: lpFileSize=0x12e0f880*=40) returned 1 [0163.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0163.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0163.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0163.653] NtQuerySystemTime (in: CurrentTime=0x12e0f808 | out: CurrentTime=0x12e0f808*=132471540318684000) returned 0x0 [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x2aea38f [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x75a4a0d8 [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x4ecc2ff0 [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x3ac2d0df [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x13a513f2 [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x7f607bcb [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x450f3efb [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x2bf4ac4f [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x2c8ca87e [0163.653] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x7b74de72 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x7ef81f60 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x31fb78c8 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x5e89e947 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x57b59ded [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x27ebc1ef [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x77237c33 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x37100fd7 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x361cb22a [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x18b07e35 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x4930b709 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x45328747 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x32572e86 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x7fd189e2 [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x550ad73f [0163.654] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x2a6512c2 [0163.655] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x3aa55fff [0163.655] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x2a33266e [0163.655] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x40a53ff0 [0163.655] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x4af52d45 [0163.655] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x39ba0c45 [0163.655] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x8601ba0 [0163.655] RtlRandomEx (in: Seed=0x12e0f800 | out: Seed=0x12e0f800) returned 0x22727cbc [0163.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0163.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81770c0 [0163.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817acc8 [0163.667] ReadFile (in: hFile=0x2be4, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0x12e0f7fc, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0x12e0f7fc*=0x28, lpOverlapped=0x0) returned 1 [0163.669] SetFilePointerEx (in: hFile=0x2be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.669] WriteFile (in: hFile=0x2be4, lpBuffer=0x817acc8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x12e0f800, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesWritten=0x12e0f800*=0x28, lpOverlapped=0x0) returned 1 [0164.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0164.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d70 [0164.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0164.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0164.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0164.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0164.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309220) returned 1 [0164.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x8309220 [0164.811] SetFilePointerEx (in: hFile=0x2be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.811] WriteFile (in: hFile=0x2be4, lpBuffer=0x3ef7fd8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x12e0f874, lpOverlapped=0x0 | out: lpBuffer=0x3ef7fd8*, lpNumberOfBytesWritten=0x12e0f874*=0x122, lpOverlapped=0x0) returned 1 [0165.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7fd8) returned 1 [0165.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f50) returned 1 [0165.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0165.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309220) returned 1 [0165.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0165.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0165.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0165.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0165.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e91a0 [0165.538] wcscpy (in: _Dest=0x81e91a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" [0165.538] wcscat (in: _Dest=0x81e91a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.f0dbec" [0165.538] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.f0dbec", NtPathName=0x12e0f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0165.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81e9f08 [0172.542] FlushFileBuffers (hFile=0x2be4) returned 1 [0172.556] CloseHandle (hObject=0x2be4) returned 1 [0172.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da828 [0172.564] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.564] wcscat (in: _Dest=0x81da828, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0172.564] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0172.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 [0172.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e17b8) returned 1 Thread: id = 2836 os_tid = 0x27dc [0158.381] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs")) returned 0x2020 [0162.500] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", dwFileAttributes=0x20) returned 1 [0163.671] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2be0 [0163.671] GetFileSizeEx (in: hFile=0x2be0, lpFileSize=0xf14f9d8 | out: lpFileSize=0xf14f9d8*=5120) returned 1 [0163.671] SetFilePointerEx (in: hFile=0x2be0, liDistanceToMove=0x13fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.672] ReadFile (in: hFile=0x2be0, lpBuffer=0xf14f9e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf14f9c0, lpOverlapped=0x0 | out: lpBuffer=0xf14f9e4*, lpNumberOfBytesRead=0xf14f9c0*=0x4, lpOverlapped=0x0) returned 1 [0163.674] SetFilePointerEx (in: hFile=0x2be0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0163.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0163.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0163.675] NtQuerySystemTime (in: CurrentTime=0xf14f960 | out: CurrentTime=0xf14f960*=132471540318840000) returned 0x0 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x6640ada6 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x5f9a38ff [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x26e7290 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x1d46c8fd [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x6c414c02 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x210815b1 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x4c97a4a3 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x6275f262 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x26f0f82a [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x1a16d447 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x724523c0 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x1163e57a [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x71ac6cd6 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x272d5c7b [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x411c0476 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x572a9d82 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x4fbb29f1 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x543bf1a3 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x71ce9e01 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x28b31b5b [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x46f9dd2d [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x8674c02 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x7c5181ac [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x3c51f392 [0163.675] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x79e0e7b0 [0163.676] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x7ad12f71 [0163.676] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x70c01036 [0163.676] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x223a91d2 [0163.676] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x1dbe4ce [0163.676] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x2ea30aae [0163.676] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x74759a19 [0163.676] RtlRandomEx (in: Seed=0xf14f958 | out: Seed=0xf14f958) returned 0x661abfd5 [0163.685] ReadFile (in: hFile=0x2be0, lpBuffer=0x817e8d0, nNumberOfBytesToRead=0x1400, lpNumberOfBytesRead=0xf14f954, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesRead=0xf14f954*=0x1400, lpOverlapped=0x0) returned 1 [0163.686] SetFilePointerEx (in: hFile=0x2be0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.686] WriteFile (in: hFile=0x2be0, lpBuffer=0x81824d8*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0xf14f958, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesWritten=0xf14f958*=0x1400, lpOverlapped=0x0) returned 1 [0166.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0166.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1518 [0166.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0166.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0166.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0166.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0166.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308fe0) returned 1 [0166.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e55608 [0166.955] SetFilePointerEx (in: hFile=0x2be0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.956] WriteFile (in: hFile=0x2be0, lpBuffer=0x3d57150*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xf14f9cc, lpOverlapped=0x0 | out: lpBuffer=0x3d57150*, lpNumberOfBytesWritten=0xf14f9cc*=0x116, lpOverlapped=0x0) returned 1 [0171.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 [0171.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55648) returned 1 [0171.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0171.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55608) returned 1 [0171.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1798) returned 1 [0171.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0171.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0171.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0171.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3335e8 [0171.556] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" [0171.556] wcscat (in: _Dest=0x3335e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.f0dbec" [0171.556] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.f0dbec", NtPathName=0xf14f950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0171.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3036a30 [0172.534] FlushFileBuffers (hFile=0x2be0) returned 1 [0172.537] CloseHandle (hObject=0x2be0) returned 1 [0172.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81d9c78 [0172.555] wcscpy (in: _Dest=0x81d9c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.555] wcscat (in: _Dest=0x81d9c78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0172.555] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0172.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c78) returned 1 [0172.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 Thread: id = 2837 os_tid = 0x27e0 [0158.382] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal")) returned 0x2020 [0162.500] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", dwFileAttributes=0x20) returned 1 [0163.686] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2bdc [0163.688] GetFileSizeEx (in: hFile=0x2bdc, lpFileSize=0x1305fe00 | out: lpFileSize=0x1305fe00*=0) returned 1 [0163.688] FlushFileBuffers (hFile=0x2bdc) returned 1 [0166.527] CloseHandle (hObject=0x2bdc) returned 1 [0166.527] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", dwFileAttributes=0x2020) returned 1 [0177.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df708) returned 1 Thread: id = 2838 os_tid = 0x27e4 [0158.673] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\preferences")) returned 0x2020 [0162.502] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", dwFileAttributes=0x20) returned 1 [0163.688] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2bd8 [0163.688] GetFileSizeEx (in: hFile=0x2bd8, lpFileSize=0x9cbff40 | out: lpFileSize=0x9cbff40*=6741) returned 1 [0163.688] SetFilePointerEx (in: hFile=0x2bd8, liDistanceToMove=0x1a51, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.688] ReadFile (in: hFile=0x2bd8, lpBuffer=0x9cbff4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9cbff28, lpOverlapped=0x0 | out: lpBuffer=0x9cbff4c*, lpNumberOfBytesRead=0x9cbff28*=0x4, lpOverlapped=0x0) returned 1 [0163.691] SetFilePointerEx (in: hFile=0x2bd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0163.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0163.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0163.691] NtQuerySystemTime (in: CurrentTime=0x9cbfec8 | out: CurrentTime=0x9cbfec8*=132471540319152000) returned 0x0 [0163.691] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x542498ac [0163.691] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x2a43796 [0163.691] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x677a3408 [0163.691] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x12289279 [0163.691] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x2b4eccc2 [0163.691] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x5f2d8b8b [0163.691] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x127edbe8 [0163.691] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x7f3027a9 [0163.691] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0xe8bb829 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x72f1b9ac [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x15ed000a [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x7b4b8a0 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x7068f632 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x128dcaf2 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x46602f13 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x2d2e5490 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x52be0d9d [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x49597736 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0xdb463cf [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x5e905ecc [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x83542e0 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x78f23721 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x1b39f1c3 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x5124f05f [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x527f91e8 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x7105ddf5 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x44b21bcb [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x15da18e7 [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x3207babd [0163.692] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x2807888f [0163.693] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x7e9cdefa [0163.693] RtlRandomEx (in: Seed=0x9cbfec0 | out: Seed=0x9cbfec0) returned 0x4324fdc3 [0163.704] ReadFile (in: hFile=0x2bd8, lpBuffer=0x8248458, nNumberOfBytesToRead=0x1a55, lpNumberOfBytesRead=0x9cbfebc, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0x9cbfebc*=0x1a55, lpOverlapped=0x0) returned 1 [0163.717] SetFilePointerEx (in: hFile=0x2bd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.717] WriteFile (in: hFile=0x2bd8, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x1a55, lpNumberOfBytesWritten=0x9cbfec0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0x9cbfec0*=0x1a55, lpOverlapped=0x0) returned 1 [0163.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0163.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0163.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0163.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0163.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0163.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0163.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309b68) returned 1 [0163.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e6fd98 [0163.720] SetFilePointerEx (in: hFile=0x2bd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.720] WriteFile (in: hFile=0x2bd8, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x9cbff34, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x9cbff34*=0x108, lpOverlapped=0x0) returned 1 [0163.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0163.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0163.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0163.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd98) returned 1 [0163.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0163.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0163.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0163.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0163.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3eb0328 [0163.722] wcscpy (in: _Dest=0x3eb0328, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" [0163.722] wcscat (in: _Dest=0x3eb0328, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.f0dbec" [0163.722] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.f0dbec", NtPathName=0x9cbfeb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0163.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x81e8458 [0163.726] FlushFileBuffers (hFile=0x2bd8) returned 1 [0166.527] CloseHandle (hObject=0x2bd8) returned 1 [0166.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da6c8 [0166.993] wcscpy (in: _Dest=0x81da6c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0166.993] wcscat (in: _Dest=0x81da6c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0166.994] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0xffffffff [0167.499] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2968 [0172.918] WriteFile (in: hFile=0x2968, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9cbfedc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9cbfedc*=0x70c, lpOverlapped=0x0) returned 1 [0182.216] CloseHandle (hObject=0x2968) returned 1 [0189.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6c8) returned 1 [0189.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 Thread: id = 2839 os_tid = 0x27e8 [0158.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3e88 [0158.991] wcscpy (in: _Dest=0x3dc3e88, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0158.991] wcscat (in: _Dest=0x3dc3e88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0158.991] wcscat (in: _Dest=0x3dc3e88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*" [0158.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3efe5f8 [0158.992] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0158.992] wcscmp (_String1=".", _String2=".") returned 0 [0158.992] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.992] wcscmp (_String1="..", _String2=".") returned 1 [0158.992] wcscmp (_String1="..", _String2="..") returned 0 [0158.993] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0158.993] wcscmp (_String1="directories.acrodata", _String2=".") returned 1 [0158.993] wcscmp (_String1="directories.acrodata", _String2="..") returned 1 [0158.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187418 [0158.993] wcscpy (in: _Dest=0x8187418, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0158.993] wcscat (in: _Dest=0x8187418, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0158.993] wcscat (in: _Dest=0x8187418, _Source="directories.acrodata" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" [0159.969] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata")) returned 0x2020 [0159.970] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x20) returned 0 [0159.970] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.970] GetLastError () returned 0x5 [0159.970] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x2020) returned 0 [0159.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187418) returned 1 [0159.970] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x3efe5f8 | out: lpFindFileData=0x3efe5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0159.970] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0159.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efe5f8) returned 1 [0159.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e88) returned 1 [0159.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 Thread: id = 2840 os_tid = 0x27ec [0159.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3dc5008 [0159.004] wcscpy (in: _Dest=0x3dc5008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0159.004] wcscat (in: _Dest=0x3dc5008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0159.004] wcscat (in: _Dest=0x3dc5008, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*" [0159.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07d10 [0159.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098dd0 [0161.512] wcscmp (_String1=".", _String2=".") returned 0 [0161.512] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.512] wcscmp (_String1="..", _String2=".") returned 1 [0161.512] wcscmp (_String1="..", _String2="..") returned 0 [0161.512] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3R.SAM", cAlternateFileName="")) returned 1 [0161.512] wcscmp (_String1="ACT3R.SAM", _String2=".") returned 1 [0161.512] wcscmp (_String1="ACT3R.SAM", _String2="..") returned 1 [0161.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb13d8 [0161.512] wcscpy (in: _Dest=0x3eb13d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0161.512] wcscat (in: _Dest=0x3eb13d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0161.512] wcscat (in: _Dest=0x3eb13d8, _Source="ACT3R.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" [0163.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb13d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2554 [0163.061] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1 [0163.061] wcscmp (_String1="DELIMR.FAE", _String2=".") returned 1 [0163.061] wcscmp (_String1="DELIMR.FAE", _String2="..") returned 1 [0163.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1a08 [0163.061] wcscpy (in: _Dest=0x3eb1a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.061] wcscat (in: _Dest=0x3eb1a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.061] wcscat (in: _Dest=0x3eb1a08, _Source="DELIMR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" [0163.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298c [0163.062] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x8b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1 [0163.062] wcscmp (_String1="LOCALDV.DLL", _String2=".") returned 1 [0163.062] wcscmp (_String1="LOCALDV.DLL", _String2="..") returned 1 [0163.062] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCR.SAM", cAlternateFileName="")) returned 1 [0163.062] wcscmp (_String1="ODBCR.SAM", _String2=".") returned 1 [0163.063] wcscmp (_String1="ODBCR.SAM", _String2="..") returned 1 [0163.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb2ae8 [0163.063] wcscpy (in: _Dest=0x3eb2ae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.063] wcscat (in: _Dest=0x3eb2ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.063] wcscat (in: _Dest=0x3eb2ae8, _Source="ODBCR.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" [0163.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2984 [0163.064] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1 [0163.064] wcscmp (_String1="OLADDR.FAE", _String2=".") returned 1 [0163.064] wcscmp (_String1="OLADDR.FAE", _String2="..") returned 1 [0163.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb1d68 [0163.064] wcscpy (in: _Dest=0x3eb1d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.064] wcscat (in: _Dest=0x3eb1d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.064] wcscat (in: _Dest=0x3eb1d68, _Source="OLADDR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" [0163.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb1d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0163.065] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1 [0163.065] wcscmp (_String1="OLAPPTR.FAE", _String2=".") returned 1 [0163.065] wcscmp (_String1="OLAPPTR.FAE", _String2="..") returned 1 [0163.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2038 [0163.065] wcscpy (in: _Dest=0x3eb2038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.065] wcscat (in: _Dest=0x3eb2038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.065] wcscat (in: _Dest=0x3eb2038, _Source="OLAPPTR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" [0163.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2914 [0163.066] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1 [0163.066] wcscmp (_String1="OLJRNLR.FAE", _String2=".") returned 1 [0163.066] wcscmp (_String1="OLJRNLR.FAE", _String2="..") returned 1 [0163.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2428 [0163.067] wcscpy (in: _Dest=0x3eb2428, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.067] wcscat (in: _Dest=0x3eb2428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.067] wcscat (in: _Dest=0x3eb2428, _Source="OLJRNLR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" [0163.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2788 [0163.068] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1 [0163.068] wcscmp (_String1="OLMAILR.FAE", _String2=".") returned 1 [0163.068] wcscmp (_String1="OLMAILR.FAE", _String2="..") returned 1 [0163.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb2398 [0163.068] wcscpy (in: _Dest=0x3eb2398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.068] wcscat (in: _Dest=0x3eb2398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.068] wcscat (in: _Dest=0x3eb2398, _Source="OLMAILR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" [0163.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2714 [0163.072] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x25b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1 [0163.072] wcscmp (_String1="OLNOTER.FAE", _String2=".") returned 1 [0163.072] wcscmp (_String1="OLNOTER.FAE", _String2="..") returned 1 [0163.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb24b8 [0163.072] wcscpy (in: _Dest=0x3eb24b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.072] wcscat (in: _Dest=0x3eb24b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.072] wcscat (in: _Dest=0x3eb24b8, _Source="OLNOTER.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" [0163.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb24b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2710 [0163.073] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1 [0163.073] wcscmp (_String1="OLR.SAM", _String2=".") returned 1 [0163.073] wcscmp (_String1="OLR.SAM", _String2="..") returned 1 [0163.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfbb8 [0163.073] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.073] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.073] wcscat (in: _Dest=0x81bfbb8, _Source="OLR.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" [0163.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26b0 [0163.074] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x29b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1 [0163.074] wcscmp (_String1="OLTASKR.FAE", _String2=".") returned 1 [0163.074] wcscmp (_String1="OLTASKR.FAE", _String2="..") returned 1 [0163.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3eb25d8 [0163.074] wcscpy (in: _Dest=0x3eb25d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.074] wcscat (in: _Dest=0x3eb25d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.074] wcscat (in: _Dest=0x3eb25d8, _Source="OLTASKR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" [0163.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb25d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26ac [0163.075] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x31a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97R.SAM", cAlternateFileName="")) returned 1 [0163.075] wcscmp (_String1="ORG97R.SAM", _String2=".") returned 1 [0163.075] wcscmp (_String1="ORG97R.SAM", _String2="..") returned 1 [0163.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3eb18e8 [0163.076] wcscpy (in: _Dest=0x3eb18e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.076] wcscat (in: _Dest=0x3eb18e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.076] wcscat (in: _Dest=0x3eb18e8, _Source="ORG97R.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" [0163.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb18e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a8 [0163.077] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PABR.SAM", cAlternateFileName="")) returned 1 [0163.077] wcscmp (_String1="PABR.SAM", _String2=".") returned 1 [0163.077] wcscmp (_String1="PABR.SAM", _String2="..") returned 1 [0163.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3eb2548 [0163.077] wcscpy (in: _Dest=0x3eb2548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0163.077] wcscat (in: _Dest=0x3eb2548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0163.077] wcscat (in: _Dest=0x3eb2548, _Source="PABR.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" [0163.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eb2548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a4 [0163.078] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1 [0163.078] wcscmp (_String1="TRANSMRR.DLL", _String2=".") returned 1 [0163.078] wcscmp (_String1="TRANSMRR.DLL", _String2="..") returned 1 [0163.078] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0 [0163.078] FindClose (in: hFindFile=0x8098dd0 | out: hFindFile=0x8098dd0) returned 1 [0163.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07d10) returned 1 [0163.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5008) returned 1 [0163.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 Thread: id = 2841 os_tid = 0x27f0 [0159.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam")) returned 0x20 [0159.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM", dwFileAttributes=0x20) returned 0 [0159.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.014] GetLastError () returned 0x5 [0159.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM", dwFileAttributes=0x20) returned 0 [0159.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5888) returned 1 Thread: id = 2842 os_tid = 0x27f4 [0159.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae")) returned 0x20 [0165.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE", dwFileAttributes=0x20) returned 0 [0165.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.851] GetLastError () returned 0x5 [0165.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE", dwFileAttributes=0x20) returned 0 [0165.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 2843 os_tid = 0x27f8 [0159.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae")) returned 0x20 [0166.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x20) returned 0 [0166.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.523] GetLastError () returned 0x5 [0167.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x20) returned 0 [0167.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 2844 os_tid = 0x27fc [0159.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam")) returned 0x20 [0167.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x20) returned 0 [0167.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.480] GetLastError () returned 0x5 [0167.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x20) returned 0 [0167.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 2845 os_tid = 0xe88 [0159.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam")) returned 0x20 [0166.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM", dwFileAttributes=0x20) returned 0 [0166.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.524] GetLastError () returned 0x5 [0167.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM", dwFileAttributes=0x20) returned 0 [0167.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5a08) returned 1 Thread: id = 2846 os_tid = 0xc24 [0159.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam")) returned 0x20 [0166.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM", dwFileAttributes=0x20) returned 0 [0166.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.526] GetLastError () returned 0x5 [0167.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM", dwFileAttributes=0x20) returned 0 [0167.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3f88) returned 1 Thread: id = 2847 os_tid = 0x2804 [0159.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae")) returned 0x20 [0166.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE", dwFileAttributes=0x20) returned 0 [0166.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.527] GetLastError () returned 0x5 [0167.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE", dwFileAttributes=0x20) returned 0 [0167.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81becd8) returned 1 Thread: id = 2848 os_tid = 0x2808 [0159.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae")) returned 0x20 [0166.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x20) returned 0 [0166.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.528] GetLastError () returned 0x5 [0167.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x20) returned 0 [0167.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 2849 os_tid = 0x280c [0159.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae")) returned 0x20 [0166.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x20) returned 0 [0166.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.529] GetLastError () returned 0x5 [0167.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x20) returned 0 [0167.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 2850 os_tid = 0x2810 [0159.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae")) returned 0x20 [0166.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x20) returned 0 [0166.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.530] GetLastError () returned 0x5 [0167.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x20) returned 0 [0167.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 2851 os_tid = 0x2814 [0159.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae")) returned 0x20 [0166.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x20) returned 0 [0166.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.531] GetLastError () returned 0x5 [0167.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x20) returned 0 [0167.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be678) returned 1 Thread: id = 2852 os_tid = 0x2818 [0159.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae")) returned 0x20 [0166.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x20) returned 0 [0166.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.533] GetLastError () returned 0x5 [0167.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x20) returned 0 [0167.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be568) returned 1 Thread: id = 2853 os_tid = 0x281c [0159.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam")) returned 0x20 [0166.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM", dwFileAttributes=0x20) returned 0 [0167.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.534] GetLastError () returned 0x5 [0167.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM", dwFileAttributes=0x20) returned 0 [0167.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be5f0) returned 1 Thread: id = 2854 os_tid = 0x2820 [0159.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam")) returned 0x20 [0165.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM", dwFileAttributes=0x20) returned 0 [0165.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.522] GetLastError () returned 0x5 [0167.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM", dwFileAttributes=0x20) returned 0 [0167.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5808) returned 1 Thread: id = 2855 os_tid = 0x2824 [0159.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv")) returned 0x20 [0162.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV", dwFileAttributes=0x20) returned 0 [0162.813] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.813] GetLastError () returned 0x5 [0162.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV", dwFileAttributes=0x20) returned 0 [0162.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187568) returned 1 Thread: id = 2856 os_tid = 0x2828 [0159.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv")) returned 0x20 [0162.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV", dwFileAttributes=0x20) returned 0 [0162.815] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.816] GetLastError () returned 0x5 [0162.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV", dwFileAttributes=0x20) returned 0 [0162.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da408) returned 1 Thread: id = 2857 os_tid = 0x282c [0159.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv")) returned 0x20 [0162.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV", dwFileAttributes=0x20) returned 0 [0162.111] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.111] GetLastError () returned 0x5 [0162.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV", dwFileAttributes=0x20) returned 0 [0162.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da358) returned 1 Thread: id = 2858 os_tid = 0x2830 [0159.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv")) returned 0x20 [0162.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV", dwFileAttributes=0x20) returned 0 [0162.811] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.811] GetLastError () returned 0x5 [0162.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV", dwFileAttributes=0x20) returned 0 [0162.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41bb0) returned 1 Thread: id = 2859 os_tid = 0x2834 [0159.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf")) returned 0x20 [0159.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0159.037] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.038] GetLastError () returned 0x5 [0159.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0159.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 Thread: id = 2860 os_tid = 0x2838 [0159.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf")) returned 0x20 [0159.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0159.040] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.040] GetLastError () returned 0x5 [0159.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0159.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1330) returned 1 Thread: id = 2861 os_tid = 0x283c [0159.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf")) returned 0x20 [0159.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0159.042] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.042] GetLastError () returned 0x5 [0159.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0159.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 Thread: id = 2862 os_tid = 0x2840 [0159.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf")) returned 0x20 [0159.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0159.045] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.045] GetLastError () returned 0x5 [0159.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0159.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1b80) returned 1 Thread: id = 2863 os_tid = 0x2844 [0159.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf")) returned 0x20 [0159.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0159.049] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.049] GetLastError () returned 0x5 [0159.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0159.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 Thread: id = 2864 os_tid = 0x2848 [0159.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf")) returned 0x20 [0159.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0159.051] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.051] GetLastError () returned 0x5 [0159.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0159.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1de0) returned 1 Thread: id = 2865 os_tid = 0x284c [0159.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json")) returned 0x20 [0162.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", dwFileAttributes=0x20) returned 0 [0162.113] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.113] GetLastError () returned 0x5 [0162.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", dwFileAttributes=0x20) returned 0 [0162.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9858) returned 1 Thread: id = 2866 os_tid = 0x2850 [0159.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81dfd08 [0159.054] wcscpy (in: _Dest=0x81dfd08, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" [0159.054] wcscat (in: _Dest=0x81dfd08, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\" [0159.054] wcscat (in: _Dest=0x81dfd08, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*" [0159.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09520 [0159.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c18 [0162.818] wcscmp (_String1=".", _String2=".") returned 0 [0162.818] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.818] wcscmp (_String1="..", _String2=".") returned 1 [0162.818] wcscmp (_String1="..", _String2="..") returned 0 [0162.818] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x86", cAlternateFileName="")) returned 1 [0162.818] wcscmp (_String1="win_x86", _String2=".") returned 1 [0162.818] wcscmp (_String1="win_x86", _String2="..") returned 1 [0162.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d5968 [0162.819] wcscpy (in: _Dest=0x81d5968, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" [0162.819] wcscat (in: _Dest=0x81d5968, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\" [0162.819] wcscat (in: _Dest=0x81d5968, _Source="win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0167.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d5968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0167.300] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x86", cAlternateFileName="")) returned 0 [0167.300] FindClose (in: hFindFile=0x3f37c18 | out: hFindFile=0x3f37c18) returned 1 [0167.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09520) returned 1 [0167.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfd08) returned 1 [0167.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41af8) returned 1 Thread: id = 2867 os_tid = 0x2854 [0159.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini")) returned 0x20 [0166.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.317] GetLastError () returned 0x5 [0166.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 2868 os_tid = 0x2858 [0159.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html")) returned 0x20 [0166.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", dwFileAttributes=0x20) returned 0 [0166.290] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.290] GetLastError () returned 0x5 [0166.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", dwFileAttributes=0x20) returned 0 [0166.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb16a8) returned 1 Thread: id = 2869 os_tid = 0x285c [0159.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z")) returned 0x20 [0159.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", dwFileAttributes=0x20) returned 0 [0159.056] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.057] GetLastError () returned 0x5 [0159.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", dwFileAttributes=0x20) returned 0 [0159.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187df0) returned 1 Thread: id = 2870 os_tid = 0x2860 [0159.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav")) returned 0x20 [0159.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x20) returned 0 [0159.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.076] GetLastError () returned 0x5 [0159.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x20) returned 0 [0159.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b998) returned 1 Thread: id = 2871 os_tid = 0x2864 [0159.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav")) returned 0x20 [0162.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x20) returned 0 [0162.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.132] GetLastError () returned 0x5 [0162.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x20) returned 0 [0162.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcb88) returned 1 Thread: id = 2872 os_tid = 0x2868 [0159.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav")) returned 0x20 [0162.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x20) returned 0 [0162.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.136] GetLastError () returned 0x5 [0162.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x20) returned 0 [0162.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcc28) returned 1 Thread: id = 2873 os_tid = 0x286c [0159.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav")) returned 0x20 [0162.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x20) returned 0 [0162.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.130] GetLastError () returned 0x5 [0162.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x20) returned 0 [0162.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 2874 os_tid = 0x2870 [0159.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav")) returned 0x20 [0162.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x20) returned 0 [0162.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.115] GetLastError () returned 0x5 [0162.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x20) returned 0 [0162.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcd68) returned 1 Thread: id = 2875 os_tid = 0x2874 [0159.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav")) returned 0x20 [0162.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x20) returned 0 [0162.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.149] GetLastError () returned 0x5 [0162.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x20) returned 0 [0162.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce08) returned 1 Thread: id = 2876 os_tid = 0x2878 [0159.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav")) returned 0x20 [0162.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x20) returned 0 [0162.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.134] GetLastError () returned 0x5 [0162.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x20) returned 0 [0162.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188330) returned 1 Thread: id = 2877 os_tid = 0x287c [0159.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini")) returned 0x20 [0166.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.288] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.289] GetLastError () returned 0x5 [0166.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0328) returned 1 Thread: id = 2878 os_tid = 0x2880 [0159.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html")) returned 0x20 [0166.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", dwFileAttributes=0x20) returned 0 [0166.238] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.238] GetLastError () returned 0x5 [0166.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", dwFileAttributes=0x20) returned 0 [0166.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35eb0) returned 1 Thread: id = 2879 os_tid = 0x2884 [0159.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf")) returned 0x20 [0164.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0164.921] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.921] GetLastError () returned 0x5 [0164.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0164.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6a20) returned 1 Thread: id = 2880 os_tid = 0x2888 [0159.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf")) returned 0x20 [0165.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0165.492] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.492] GetLastError () returned 0x5 [0165.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0165.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da2a8) returned 1 Thread: id = 2881 os_tid = 0x288c [0159.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf")) returned 0x20 [0165.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0165.494] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.494] GetLastError () returned 0x5 [0165.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0165.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418d0) returned 1 Thread: id = 2882 os_tid = 0x2890 [0159.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf")) returned 0x20 [0165.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0165.495] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.495] GetLastError () returned 0x5 [0165.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0165.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1cc0) returned 1 Thread: id = 2883 os_tid = 0x2894 [0159.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf")) returned 0x20 [0165.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0165.491] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.491] GetLastError () returned 0x5 [0165.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0165.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1928) returned 1 Thread: id = 2884 os_tid = 0x2898 [0159.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf")) returned 0x20 [0165.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0165.493] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.493] GetLastError () returned 0x5 [0165.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0165.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6200) returned 1 Thread: id = 2885 os_tid = 0x289c [0159.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e34d08 [0159.104] wcscpy (in: _Dest=0x3e34d08, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" [0159.104] wcscat (in: _Dest=0x3e34d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\" [0159.104] wcscat (in: _Dest=0x3e34d08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*" [0159.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09050 [0159.104] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54f08 [0159.105] wcscmp (_String1=".", _String2=".") returned 0 [0159.105] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.105] wcscmp (_String1="..", _String2=".") returned 1 [0159.105] wcscmp (_String1="..", _String2="..") returned 0 [0159.105] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0159.105] FindClose (in: hFindFile=0x3e54f08 | out: hFindFile=0x3e54f08) returned 1 [0159.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09050) returned 1 [0159.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34d08) returned 1 [0159.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5710) returned 1 Thread: id = 2886 os_tid = 0x28a0 [0159.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5710 [0159.112] wcscpy (in: _Dest=0x81d5710, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara" [0159.112] wcscat (in: _Dest=0x81d5710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\" [0159.112] wcscat (in: _Dest=0x81d5710, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\*" [0159.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09050 [0159.112] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\*", lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54f08 [0159.112] wcscmp (_String1=".", _String2=".") returned 0 [0159.112] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.113] wcscmp (_String1="..", _String2=".") returned 1 [0159.113] wcscmp (_String1="..", _String2="..") returned 0 [0159.113] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0159.113] FindClose (in: hFindFile=0x3e54f08 | out: hFindFile=0x3e54f08) returned 1 [0159.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09050) returned 1 [0159.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5710) returned 1 [0159.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6138) returned 1 Thread: id = 2887 os_tid = 0x28a4 [0159.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d6138 [0159.115] wcscpy (in: _Dest=0x81d6138, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" [0159.115] wcscat (in: _Dest=0x81d6138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\" [0159.115] wcscat (in: _Dest=0x81d6138, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*" [0159.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09050 [0159.115] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54f08 [0159.115] wcscmp (_String1=".", _String2=".") returned 0 [0159.115] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.115] wcscmp (_String1="..", _String2=".") returned 1 [0159.115] wcscmp (_String1="..", _String2="..") returned 0 [0159.115] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0159.115] FindClose (in: hFindFile=0x3e54f08 | out: hFindFile=0x3e54f08) returned 1 [0159.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09050) returned 1 [0159.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6138) returned 1 [0159.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5bc0) returned 1 Thread: id = 2888 os_tid = 0x28a8 [0159.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5bc0 [0159.117] wcscpy (in: _Dest=0x81d5bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" [0159.117] wcscat (in: _Dest=0x81d5bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\" [0159.117] wcscat (in: _Dest=0x81d5bc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*" [0159.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09050 [0159.117] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.778] wcscmp (_String1=".", _String2=".") returned 0 [0166.778] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.778] wcscmp (_String1="..", _String2=".") returned 1 [0166.778] wcscmp (_String1="..", _String2="..") returned 0 [0166.778] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.778] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09050) returned 1 [0166.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5bc0) returned 1 [0166.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d65e8) returned 1 Thread: id = 2889 os_tid = 0x28ac [0159.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d6138 [0159.120] wcscpy (in: _Dest=0x81d6138, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul" [0159.120] wcscat (in: _Dest=0x81d6138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\" [0159.120] wcscat (in: _Dest=0x81d6138, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\*" [0159.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08b80 [0159.120] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\*", lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0166.423] wcscmp (_String1=".", _String2=".") returned 0 [0166.423] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.423] wcscmp (_String1="..", _String2=".") returned 1 [0166.424] wcscmp (_String1="..", _String2="..") returned 0 [0166.424] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.424] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0166.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08b80) returned 1 [0166.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6138) returned 1 [0166.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d66b0) returned 1 Thread: id = 2890 os_tid = 0x28b0 [0159.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5710 [0159.122] wcscpy (in: _Dest=0x81d5710, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can" [0159.122] wcscat (in: _Dest=0x81d5710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\" [0159.122] wcscat (in: _Dest=0x81d5710, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\*" [0159.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f086b0 [0159.122] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\*", lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55588 [0166.699] wcscmp (_String1=".", _String2=".") returned 0 [0166.699] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.699] wcscmp (_String1="..", _String2=".") returned 1 [0166.699] wcscmp (_String1="..", _String2="..") returned 0 [0166.699] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.699] FindClose (in: hFindFile=0x3e55588 | out: hFindFile=0x3e55588) returned 1 [0166.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f086b0) returned 1 [0166.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5710) returned 1 [0166.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6520) returned 1 Thread: id = 2891 os_tid = 0x28b4 [0159.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e34d08 [0159.124] wcscpy (in: _Dest=0x3e34d08, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr" [0159.124] wcscat (in: _Dest=0x3e34d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\" [0159.124] wcscat (in: _Dest=0x3e34d08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\*" [0159.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f081e0 [0159.124] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\*", lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0166.254] wcscmp (_String1=".", _String2=".") returned 0 [0166.254] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.254] wcscmp (_String1="..", _String2=".") returned 1 [0166.254] wcscmp (_String1="..", _String2="..") returned 0 [0166.254] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.254] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0166.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f081e0) returned 1 [0166.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34d08) returned 1 [0166.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6778) returned 1 Thread: id = 2892 os_tid = 0x28b8 [0159.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35410 [0159.126] wcscpy (in: _Dest=0x3e35410, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl" [0159.126] wcscat (in: _Dest=0x3e35410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\" [0159.126] wcscat (in: _Dest=0x3e35410, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\*" [0159.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07aa8 [0159.126] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\*", lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.804] wcscmp (_String1=".", _String2=".") returned 0 [0166.804] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.804] wcscmp (_String1="..", _String2=".") returned 1 [0166.804] wcscmp (_String1="..", _String2="..") returned 0 [0166.804] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.804] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07aa8) returned 1 [0166.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35410) returned 1 [0166.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6840) returned 1 Thread: id = 2893 os_tid = 0x28bc [0159.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35988 [0159.127] wcscpy (in: _Dest=0x3e35988, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze" [0159.127] wcscat (in: _Dest=0x3e35988, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\" [0159.127] wcscat (in: _Dest=0x3e35988, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\*" [0159.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07370 [0159.127] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\*", lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.806] wcscmp (_String1=".", _String2=".") returned 0 [0166.806] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.806] wcscmp (_String1="..", _String2=".") returned 1 [0166.806] wcscmp (_String1="..", _String2="..") returned 0 [0166.806] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.806] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07370) returned 1 [0166.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35988) returned 1 [0166.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6908) returned 1 Thread: id = 2894 os_tid = 0x28c0 [0159.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e358c0 [0159.129] wcscpy (in: _Dest=0x3e358c0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" [0159.129] wcscat (in: _Dest=0x3e358c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\" [0159.129] wcscat (in: _Dest=0x3e358c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*" [0159.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f075d8 [0159.129] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0166.413] wcscmp (_String1=".", _String2=".") returned 0 [0166.414] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.414] wcscmp (_String1="..", _String2=".") returned 1 [0166.414] wcscmp (_String1="..", _String2="..") returned 0 [0166.414] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.414] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0166.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f075d8) returned 1 [0166.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e358c0) returned 1 [0166.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d69d0) returned 1 Thread: id = 2895 os_tid = 0x28c4 [0159.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e357f8 [0159.130] wcscpy (in: _Dest=0x3e357f8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" [0159.130] wcscat (in: _Dest=0x3e357f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\" [0159.130] wcscat (in: _Dest=0x3e357f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*" [0159.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b7b0 [0159.130] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0166.415] wcscmp (_String1=".", _String2=".") returned 0 [0166.415] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.415] wcscmp (_String1="..", _String2=".") returned 1 [0166.415] wcscmp (_String1="..", _String2="..") returned 0 [0166.415] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.415] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0166.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b7b0) returned 1 [0166.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e357f8) returned 1 [0166.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6a98) returned 1 Thread: id = 2896 os_tid = 0x28c8 [0159.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35730 [0159.133] wcscpy (in: _Dest=0x3e35730, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" [0159.133] wcscat (in: _Dest=0x3e35730, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\" [0159.133] wcscat (in: _Dest=0x3e35730, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*" [0159.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3aba8 [0159.133] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.803] wcscmp (_String1=".", _String2=".") returned 0 [0166.803] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.803] wcscmp (_String1="..", _String2=".") returned 1 [0166.803] wcscmp (_String1="..", _String2="..") returned 0 [0166.803] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.803] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3aba8) returned 1 [0166.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35730) returned 1 [0166.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6b60) returned 1 Thread: id = 2897 os_tid = 0x28cc [0159.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35280 [0159.135] wcscpy (in: _Dest=0x3e35280, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est" [0159.135] wcscat (in: _Dest=0x3e35280, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\" [0159.135] wcscat (in: _Dest=0x3e35280, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\*" [0159.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3e098 [0159.135] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\*", lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0166.417] wcscmp (_String1=".", _String2=".") returned 0 [0166.417] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.417] wcscmp (_String1="..", _String2=".") returned 1 [0166.417] wcscmp (_String1="..", _String2="..") returned 0 [0166.417] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.417] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0166.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e098) returned 1 [0166.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35280) returned 1 [0166.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6c28) returned 1 Thread: id = 2898 os_tid = 0x28d0 [0159.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e342e0 [0159.136] wcscpy (in: _Dest=0x3e342e0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin" [0159.136] wcscat (in: _Dest=0x3e342e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\" [0159.136] wcscat (in: _Dest=0x3e342e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\*" [0159.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a6d8 [0159.136] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\*", lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0166.418] wcscmp (_String1=".", _String2=".") returned 0 [0166.418] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.418] wcscmp (_String1="..", _String2=".") returned 1 [0166.418] wcscmp (_String1="..", _String2="..") returned 0 [0166.419] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.419] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0166.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a6d8) returned 1 [0166.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e342e0) returned 1 [0166.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6cf0) returned 1 Thread: id = 2899 os_tid = 0x28d4 [0159.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e355a0 [0159.137] wcscpy (in: _Dest=0x3e355a0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" [0159.137] wcscat (in: _Dest=0x3e355a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\" [0159.137] wcscat (in: _Dest=0x3e355a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*" [0159.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a470 [0159.137] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0166.420] wcscmp (_String1=".", _String2=".") returned 0 [0166.420] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.420] wcscmp (_String1="..", _String2=".") returned 1 [0166.420] wcscmp (_String1="..", _String2="..") returned 0 [0166.420] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.420] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0166.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a470) returned 1 [0166.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e355a0) returned 1 [0166.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6db8) returned 1 Thread: id = 2900 os_tid = 0x28d8 [0159.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35668 [0159.138] wcscpy (in: _Dest=0x3e35668, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre" [0159.138] wcscat (in: _Dest=0x3e35668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\" [0159.138] wcscat (in: _Dest=0x3e35668, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\*" [0159.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0159.138] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0166.422] wcscmp (_String1=".", _String2=".") returned 0 [0166.422] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.422] wcscmp (_String1="..", _String2=".") returned 1 [0166.422] wcscmp (_String1="..", _String2="..") returned 0 [0166.422] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.422] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0166.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0166.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35668) returned 1 [0166.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6e80) returned 1 Thread: id = 2901 os_tid = 0x28dc [0159.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e34c40 [0159.138] wcscpy (in: _Dest=0x3e34c40, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" [0159.138] wcscat (in: _Dest=0x3e34c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\" [0159.138] wcscat (in: _Dest=0x3e34c40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*" [0159.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ae10 [0159.139] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0166.256] wcscmp (_String1=".", _String2=".") returned 0 [0166.256] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.256] wcscmp (_String1="..", _String2=".") returned 1 [0166.256] wcscmp (_String1="..", _String2="..") returned 0 [0166.256] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.256] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0166.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ae10) returned 1 [0166.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 [0166.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6f48) returned 1 Thread: id = 2902 os_tid = 0x28e0 [0159.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e7648 [0159.139] wcscpy (in: _Dest=0x81e7648, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb" [0159.139] wcscat (in: _Dest=0x81e7648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\" [0159.139] wcscat (in: _Dest=0x81e7648, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\*" [0159.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b2e0 [0159.139] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\*", lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0166.427] wcscmp (_String1=".", _String2=".") returned 0 [0166.427] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.427] wcscmp (_String1="..", _String2=".") returned 1 [0166.427] wcscmp (_String1="..", _String2="..") returned 0 [0166.427] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.428] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0166.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b2e0) returned 1 [0166.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7648) returned 1 [0166.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7010) returned 1 Thread: id = 2903 os_tid = 0x28e4 [0159.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e7710 [0159.140] wcscpy (in: _Dest=0x81e7710, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv" [0159.140] wcscat (in: _Dest=0x81e7710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\" [0159.140] wcscat (in: _Dest=0x81e7710, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\*" [0159.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d490 [0159.140] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\*", lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0166.426] wcscmp (_String1=".", _String2=".") returned 0 [0166.426] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.426] wcscmp (_String1="..", _String2=".") returned 1 [0166.426] wcscmp (_String1="..", _String2="..") returned 0 [0166.426] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.426] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0166.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d490) returned 1 [0166.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7710) returned 1 [0166.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d70d8) returned 1 Thread: id = 2904 os_tid = 0x28e8 [0159.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e77d8 [0159.141] wcscpy (in: _Dest=0x81e77d8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun" [0159.141] wcscat (in: _Dest=0x81e77d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\" [0159.141] wcscat (in: _Dest=0x81e77d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\*" [0159.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0159.141] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0166.435] wcscmp (_String1=".", _String2=".") returned 0 [0166.435] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.435] wcscmp (_String1="..", _String2=".") returned 1 [0166.435] wcscmp (_String1="..", _String2="..") returned 0 [0166.435] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.435] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0166.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0166.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e77d8) returned 1 [0166.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d71a0) returned 1 Thread: id = 2905 os_tid = 0x28ec [0159.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e78a0 [0159.142] wcscpy (in: _Dest=0x81e78a0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" [0159.142] wcscat (in: _Dest=0x81e78a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\" [0159.142] wcscat (in: _Dest=0x81e78a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*" [0159.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0159.142] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0166.433] wcscmp (_String1=".", _String2=".") returned 0 [0166.433] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.433] wcscmp (_String1="..", _String2=".") returned 1 [0166.433] wcscmp (_String1="..", _String2="..") returned 0 [0166.433] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.433] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0166.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0166.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e78a0) returned 1 [0166.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7268) returned 1 Thread: id = 2906 os_tid = 0x28f0 [0159.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e7968 [0159.142] wcscpy (in: _Dest=0x81e7968, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav" [0159.142] wcscat (in: _Dest=0x81e7968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\" [0159.142] wcscat (in: _Dest=0x81e7968, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\*" [0159.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0159.143] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0166.432] wcscmp (_String1=".", _String2=".") returned 0 [0166.432] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.432] wcscmp (_String1="..", _String2=".") returned 1 [0166.432] wcscmp (_String1="..", _String2="..") returned 0 [0166.432] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.432] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0166.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0166.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7968) returned 1 [0166.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7330) returned 1 Thread: id = 2907 os_tid = 0x28f4 [0159.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e7a30 [0159.145] wcscpy (in: _Dest=0x81e7a30, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit" [0159.145] wcscat (in: _Dest=0x81e7a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\" [0159.145] wcscat (in: _Dest=0x81e7a30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\*" [0159.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cd58 [0159.146] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\*", lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.780] wcscmp (_String1=".", _String2=".") returned 0 [0166.780] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.780] wcscmp (_String1="..", _String2=".") returned 1 [0166.780] wcscmp (_String1="..", _String2="..") returned 0 [0166.780] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.780] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd58) returned 1 [0166.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7a30) returned 1 [0166.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d73f8) returned 1 Thread: id = 2908 os_tid = 0x28f8 [0159.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e7af8 [0159.150] wcscpy (in: _Dest=0x81e7af8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" [0159.150] wcscat (in: _Dest=0x81e7af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\" [0159.150] wcscat (in: _Dest=0x81e7af8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*" [0159.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0159.150] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0166.430] wcscmp (_String1=".", _String2=".") returned 0 [0166.430] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.430] wcscmp (_String1="..", _String2=".") returned 1 [0166.430] wcscmp (_String1="..", _String2="..") returned 0 [0166.430] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.430] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0166.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0166.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7af8) returned 1 [0166.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d74c0) returned 1 Thread: id = 2909 os_tid = 0x28fc [0161.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d58a0 [0161.612] wcscpy (in: _Dest=0x81d58a0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn" [0161.612] wcscat (in: _Dest=0x81d58a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\" [0161.612] wcscat (in: _Dest=0x81d58a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\*" [0161.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85ee0 [0161.612] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\*", lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0166.429] wcscmp (_String1=".", _String2=".") returned 0 [0166.429] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.429] wcscmp (_String1="..", _String2=".") returned 1 [0166.429] wcscmp (_String1="..", _String2="..") returned 0 [0166.429] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.429] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0166.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ee0) returned 1 [0166.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d58a0) returned 1 [0166.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e354d8) returned 1 Thread: id = 2910 os_tid = 0x2900 [0161.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx")) returned 0x20 [0161.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.627] GetLastError () returned 0x5 [0161.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1d68) returned 1 Thread: id = 2911 os_tid = 0x2904 [0161.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx")) returned 0x20 [0161.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.645] GetLastError () returned 0x5 [0161.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35f40) returned 1 Thread: id = 2912 os_tid = 0x2908 [0161.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx")) returned 0x20 [0161.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.665] GetLastError () returned 0x5 [0161.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36060) returned 1 Thread: id = 2913 os_tid = 0x290c [0161.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx")) returned 0x20 [0161.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.692] GetLastError () returned 0x5 [0161.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f357f0) returned 1 Thread: id = 2914 os_tid = 0x2910 [0161.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx")) returned 0x20 [0161.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.710] GetLastError () returned 0x5 [0161.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx", dwFileAttributes=0x20) returned 0 [0161.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35400) returned 1 Thread: id = 2915 os_tid = 0x2914 [0161.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn")) returned 0x20 [0161.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", dwFileAttributes=0x20) returned 0 [0161.718] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.719] GetLastError () returned 0x5 [0161.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", dwFileAttributes=0x20) returned 0 [0161.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d7d0) returned 1 Thread: id = 2916 os_tid = 0x2918 [0161.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor")) returned 0x20 [0161.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", dwFileAttributes=0x20) returned 0 [0161.725] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.725] GetLastError () returned 0x5 [0161.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", dwFileAttributes=0x20) returned 0 [0161.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187df0) returned 1 Thread: id = 2917 os_tid = 0x291c [0161.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp")) returned 0x20 [0161.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", dwFileAttributes=0x20) returned 0 [0161.729] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.729] GetLastError () returned 0x5 [0161.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", dwFileAttributes=0x20) returned 0 [0161.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81881e0) returned 1 Thread: id = 2918 os_tid = 0x2920 [0161.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld")) returned 0x20 [0161.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", dwFileAttributes=0x20) returned 0 [0161.731] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.731] GetLastError () returned 0x5 [0161.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", dwFileAttributes=0x20) returned 0 [0161.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187e98) returned 1 Thread: id = 2919 os_tid = 0x2924 [0161.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor")) returned 0x20 [0161.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", dwFileAttributes=0x20) returned 0 [0161.741] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.741] GetLastError () returned 0x5 [0161.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", dwFileAttributes=0x20) returned 0 [0161.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186c38) returned 1 Thread: id = 2920 os_tid = 0x2928 [0161.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb")) returned 0x20 [0161.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", dwFileAttributes=0x20) returned 0 [0161.744] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.744] GetLastError () returned 0x5 [0161.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", dwFileAttributes=0x20) returned 0 [0161.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187aa8) returned 1 Thread: id = 2921 os_tid = 0x292c [0161.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo")) returned 0x20 [0161.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", dwFileAttributes=0x20) returned 0 [0161.746] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.746] GetLastError () returned 0x5 [0161.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", dwFileAttributes=0x20) returned 0 [0161.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187bf8) returned 1 Thread: id = 2922 os_tid = 0x2930 [0161.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve")) returned 0x20 [0161.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", dwFileAttributes=0x20) returned 0 [0161.748] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.748] GetLastError () returned 0x5 [0161.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", dwFileAttributes=0x20) returned 0 [0161.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ed8) returned 1 Thread: id = 2923 os_tid = 0x2934 [0161.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky")) returned 0x20 [0161.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY", dwFileAttributes=0x20) returned 0 [0161.756] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.762] GetLastError () returned 0x5 [0161.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY", dwFileAttributes=0x20) returned 0 [0161.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbf08) returned 1 Thread: id = 2924 os_tid = 0x2938 [0161.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky")) returned 0x20 [0161.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY", dwFileAttributes=0x20) returned 0 [0161.775] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.781] GetLastError () returned 0x5 [0161.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY", dwFileAttributes=0x20) returned 0 [0161.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 2925 os_tid = 0x293c [0161.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky")) returned 0x20 [0161.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY", dwFileAttributes=0x20) returned 0 [0161.853] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.858] GetLastError () returned 0x5 [0161.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY", dwFileAttributes=0x20) returned 0 [0161.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b998) returned 1 Thread: id = 2927 os_tid = 0x2940 [0161.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky")) returned 0x20 [0161.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY", dwFileAttributes=0x20) returned 0 [0161.872] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.878] GetLastError () returned 0x5 [0161.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY", dwFileAttributes=0x20) returned 0 [0161.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dde28) returned 1 Thread: id = 2928 os_tid = 0x2944 [0161.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky")) returned 0x20 [0161.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY", dwFileAttributes=0x20) returned 0 [0161.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.895] GetLastError () returned 0x5 [0161.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY", dwFileAttributes=0x20) returned 0 [0161.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1de0) returned 1 Thread: id = 2929 os_tid = 0x2948 [0161.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky")) returned 0x20 [0161.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY", dwFileAttributes=0x20) returned 0 [0161.906] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.912] GetLastError () returned 0x5 [0161.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY", dwFileAttributes=0x20) returned 0 [0161.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddeb8) returned 1 Thread: id = 2930 os_tid = 0x294c [0161.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky")) returned 0x20 [0163.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY", dwFileAttributes=0x20) returned 0 [0163.939] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.939] GetLastError () returned 0x5 [0163.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY", dwFileAttributes=0x20) returned 0 [0163.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddf48) returned 1 Thread: id = 2931 os_tid = 0x2950 [0161.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky")) returned 0x20 [0163.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY", dwFileAttributes=0x20) returned 0 [0163.941] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.941] GetLastError () returned 0x5 [0163.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY", dwFileAttributes=0x20) returned 0 [0163.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 2932 os_tid = 0x2954 [0161.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky")) returned 0x20 [0163.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY", dwFileAttributes=0x20) returned 0 [0163.943] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.943] GetLastError () returned 0x5 [0163.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY", dwFileAttributes=0x20) returned 0 [0163.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddfd8) returned 1 Thread: id = 2933 os_tid = 0x2958 [0161.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky")) returned 0x20 [0163.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY", dwFileAttributes=0x20) returned 0 [0163.944] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.944] GetLastError () returned 0x5 [0163.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY", dwFileAttributes=0x20) returned 0 [0163.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de068) returned 1 Thread: id = 2934 os_tid = 0x295c [0161.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky")) returned 0x20 [0163.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY", dwFileAttributes=0x20) returned 0 [0163.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.946] GetLastError () returned 0x5 [0163.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY", dwFileAttributes=0x20) returned 0 [0163.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 2935 os_tid = 0x2960 [0161.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky")) returned 0x20 [0163.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY", dwFileAttributes=0x20) returned 0 [0163.947] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.947] GetLastError () returned 0x5 [0163.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY", dwFileAttributes=0x20) returned 0 [0163.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b218) returned 1 Thread: id = 2936 os_tid = 0x2964 [0161.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky")) returned 0x20 [0163.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY", dwFileAttributes=0x20) returned 0 [0163.949] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.949] GetLastError () returned 0x5 [0163.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY", dwFileAttributes=0x20) returned 0 [0163.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1b80) returned 1 Thread: id = 2937 os_tid = 0x2968 [0161.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky")) returned 0x20 [0164.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY", dwFileAttributes=0x20) returned 0 [0164.051] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.051] GetLastError () returned 0x5 [0164.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY", dwFileAttributes=0x20) returned 0 [0164.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de0f8) returned 1 Thread: id = 2938 os_tid = 0x296c [0161.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky")) returned 0x20 [0164.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY", dwFileAttributes=0x20) returned 0 [0164.065] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.065] GetLastError () returned 0x5 [0164.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY", dwFileAttributes=0x20) returned 0 [0164.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de188) returned 1 Thread: id = 2939 os_tid = 0x2970 [0161.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky")) returned 0x20 [0164.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY", dwFileAttributes=0x20) returned 0 [0164.053] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.053] GetLastError () returned 0x5 [0164.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY", dwFileAttributes=0x20) returned 0 [0164.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 Thread: id = 2940 os_tid = 0x2974 [0161.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky")) returned 0x20 [0164.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY", dwFileAttributes=0x20) returned 0 [0164.055] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.055] GetLastError () returned 0x5 [0164.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY", dwFileAttributes=0x20) returned 0 [0164.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1330) returned 1 Thread: id = 2941 os_tid = 0x2978 [0161.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky")) returned 0x20 [0164.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY", dwFileAttributes=0x20) returned 0 [0164.059] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.059] GetLastError () returned 0x5 [0164.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY", dwFileAttributes=0x20) returned 0 [0164.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de2a8) returned 1 Thread: id = 2942 os_tid = 0x297c [0161.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky")) returned 0x20 [0164.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY", dwFileAttributes=0x20) returned 0 [0164.061] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.061] GetLastError () returned 0x5 [0164.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY", dwFileAttributes=0x20) returned 0 [0164.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1e78) returned 1 Thread: id = 2943 os_tid = 0x2980 [0161.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky")) returned 0x20 [0164.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY", dwFileAttributes=0x20) returned 0 [0164.067] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.067] GetLastError () returned 0x5 [0164.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY", dwFileAttributes=0x20) returned 0 [0164.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de338) returned 1 Thread: id = 2944 os_tid = 0x2984 [0161.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky")) returned 0x20 [0164.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY", dwFileAttributes=0x20) returned 0 [0164.068] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.069] GetLastError () returned 0x5 [0164.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY", dwFileAttributes=0x20) returned 0 [0164.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de3c8) returned 1 Thread: id = 2945 os_tid = 0x2988 [0161.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81ddeb8 [0161.931] wcscpy (in: _Dest=0x81ddeb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0161.931] wcscat (in: _Dest=0x81ddeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\" [0161.931] wcscat (in: _Dest=0x81ddeb8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*" [0161.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85070 [0161.931] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0164.062] wcscmp (_String1=".", _String2=".") returned 0 [0164.062] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.062] wcscmp (_String1="..", _String2=".") returned 1 [0164.063] wcscmp (_String1="..", _String2="..") returned 0 [0164.063] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0164.063] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0164.063] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0164.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187ca0 [0164.063] wcscpy (in: _Dest=0x8187ca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0164.063] wcscat (in: _Dest=0x8187ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\" [0164.063] wcscat (in: _Dest=0x8187ca0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" [0170.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b8c [0170.114] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0170.114] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0170.114] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0170.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d728 [0170.115] wcscpy (in: _Dest=0x3e2d728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0170.115] wcscat (in: _Dest=0x3e2d728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\" [0170.115] wcscat (in: _Dest=0x3e2d728, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" [0170.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0170.116] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0170.116] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0171.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85070) returned 1 [0171.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddeb8) returned 1 [0171.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bec50) returned 1 Thread: id = 2946 os_tid = 0x298c [0161.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky")) returned 0x20 [0164.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY", dwFileAttributes=0x20) returned 0 [0164.063] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.064] GetLastError () returned 0x5 [0164.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY", dwFileAttributes=0x20) returned 0 [0164.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de458) returned 1 Thread: id = 2947 os_tid = 0x2990 [0161.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky")) returned 0x20 [0164.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY", dwFileAttributes=0x20) returned 0 [0164.070] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.070] GetLastError () returned 0x5 [0164.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY", dwFileAttributes=0x20) returned 0 [0164.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de4e8) returned 1 Thread: id = 2948 os_tid = 0x2994 [0161.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky")) returned 0x20 [0163.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY", dwFileAttributes=0x20) returned 0 [0163.937] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.937] GetLastError () returned 0x5 [0163.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY", dwFileAttributes=0x20) returned 0 [0163.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de578) returned 1 Thread: id = 2949 os_tid = 0x2998 [0161.936] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0")) returned 0x2020 [0161.936] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", dwFileAttributes=0x20) returned 1 [0165.467] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a44 [0165.467] GetFileSizeEx (in: hFile=0x2a44, lpFileSize=0xbeffde0 | out: lpFileSize=0xbeffde0*=45056) returned 1 [0165.467] SetFilePointerEx (in: hFile=0x2a44, liDistanceToMove=0xaffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.467] ReadFile (in: hFile=0x2a44, lpBuffer=0xbeffdec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbeffdc8, lpOverlapped=0x0 | out: lpBuffer=0xbeffdec*, lpNumberOfBytesRead=0xbeffdc8*=0x4, lpOverlapped=0x0) returned 1 [0165.468] SetFilePointerEx (in: hFile=0x2a44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0165.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0165.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0165.469] NtQuerySystemTime (in: CurrentTime=0xbeffd68 | out: CurrentTime=0xbeffd68*=132471540336780000) returned 0x0 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x6f2d51b8 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x676833a [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0xb88023b [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x44115679 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x494509c [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x3d3a244f [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x4727fdc8 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x67871a4 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x32e32e8 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x25f175cc [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x40cf42ad [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x1bddd71d [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0xec428fd [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x22093368 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x6a48295d [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0xd43a9a9 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x65fcbe5 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x754b0482 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x32f2324b [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x219e2dc [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x306fd79c [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x3ce4a769 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x92f1944 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x74e5ba52 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x4e2a4a8e [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x113e11e0 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x4622bead [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x50741737 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x5505b766 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x3b50ebf1 [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0x49b9277d [0165.469] RtlRandomEx (in: Seed=0xbeffd60 | out: Seed=0xbeffd60) returned 0xd3cb064 [0165.477] SetFilePointerEx (in: hFile=0x2a44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.477] ReadFile (in: hFile=0x2a44, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbeffd68, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0xbeffd68*=0x3c00, lpOverlapped=0x0) returned 1 [0166.514] SetFilePointerEx (in: hFile=0x2a44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b4728 [0166.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e680d8 [0166.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b310 [0166.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b310) returned 1 [0166.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0166.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b310 [0166.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0166.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0166.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0166.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4728) returned 1 [0166.515] WriteFile (in: hFile=0x2a44, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbeffd68, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0xbeffd68*=0x3c00, lpOverlapped=0x0) returned 1 [0168.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0168.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0168.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef46c8 [0168.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0168.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef0e10 [0168.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0168.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d70 [0168.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0168.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0168.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7580) returned 1 [0168.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef57b0 [0168.363] SetFilePointerEx (in: hFile=0x2a44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.365] WriteFile (in: hFile=0x2a44, lpBuffer=0x3ef57b0*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xbeffdd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef57b0*, lpNumberOfBytesWritten=0xbeffdd4*=0xfe, lpOverlapped=0x0) returned 1 [0171.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef57b0) returned 1 [0171.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0171.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0171.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0171.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b310) returned 1 [0171.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0171.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4a0) returned 1 [0171.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0171.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81daa38 [0171.771] wcscpy (in: _Dest=0x81daa38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" [0171.771] wcscat (in: _Dest=0x81daa38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.f0dbec" [0171.771] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.f0dbec", NtPathName=0xbeffd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0171.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81e7d50 [0176.888] FlushFileBuffers (hFile=0x2a44) returned 1 [0177.711] CloseHandle (hObject=0x2a44) returned 1 [0183.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41258 [0183.052] wcscpy (in: _Dest=0x3d41258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0183.052] wcscat (in: _Dest=0x3d41258, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" [0183.052] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f0dbec-readme.txt")) returned 0xffffffff [0184.650] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cdc [0190.195] WriteFile (in: hFile=0x1cdc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbeffd7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbeffd7c*=0x70c, lpOverlapped=0x0) returned 1 [0201.336] CloseHandle (hObject=0x1cdc) returned 1 [0202.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41258) returned 1 [0202.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcae8) returned 1 Thread: id = 2950 os_tid = 0x299c [0161.937] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1")) returned 0x2020 [0164.863] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", dwFileAttributes=0x20) returned 1 [0164.864] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x24bc [0164.864] GetFileSizeEx (in: hFile=0x24bc, lpFileSize=0xc41fd28 | out: lpFileSize=0xc41fd28*=270336) returned 1 [0164.864] SetFilePointerEx (in: hFile=0x24bc, liDistanceToMove=0x41ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.864] ReadFile (in: hFile=0x24bc, lpBuffer=0xc41fd34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc41fd10, lpOverlapped=0x0 | out: lpBuffer=0xc41fd34*, lpNumberOfBytesRead=0xc41fd10*=0x4, lpOverlapped=0x0) returned 1 [0164.866] SetFilePointerEx (in: hFile=0x24bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0164.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0164.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0164.866] NtQuerySystemTime (in: CurrentTime=0xc41fcb0 | out: CurrentTime=0xc41fcb0*=132471540330852000) returned 0x0 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x79121eb1 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x7e54bd02 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x62b9e005 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x286dee9e [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x7b13ccd2 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0xf15af31 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x22bc3699 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x106c1bd [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x54ab0183 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x47662804 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x7751537c [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x4bb60977 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x51c85bae [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x2f26107 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x7a2d0cdf [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x76aa3f82 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x633f3bc3 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x65988aa [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x1c07a7c3 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x1460b734 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x674bba56 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x7cb9d740 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x6775a9f8 [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x573e067c [0164.866] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x40b9ae8f [0164.867] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x48e935b5 [0164.867] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0xa66dfb6 [0164.867] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x6368a790 [0164.867] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x76351df7 [0164.867] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x7199e0b6 [0164.867] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x54bb12f6 [0164.867] RtlRandomEx (in: Seed=0xc41fca8 | out: Seed=0xc41fca8) returned 0x68bca79e [0164.874] SetFilePointerEx (in: hFile=0x24bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.874] ReadFile (in: hFile=0x24bc, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc41fcb0, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0xc41fcb0*=0x3c00, lpOverlapped=0x0) returned 1 [0164.915] SetFilePointerEx (in: hFile=0x24bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9e80 [0164.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f33240 [0164.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0164.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0164.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0164.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0164.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0164.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0164.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0164.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9e80) returned 1 [0164.915] WriteFile (in: hFile=0x24bc, lpBuffer=0x80b8498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc41fcb0, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesWritten=0xc41fcb0*=0x3c00, lpOverlapped=0x0) returned 1 [0166.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0166.737] SetFilePointerEx (in: hFile=0x24bc, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.737] ReadFile (in: hFile=0x24bc, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc41fcb0, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0xc41fcb0*=0x3c00, lpOverlapped=0x0) returned 1 [0166.738] SetFilePointerEx (in: hFile=0x24bc, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e43c8 [0166.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67f70 [0166.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0166.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0166.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0166.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0166.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0166.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0166.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0166.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e43c8) returned 1 [0166.738] WriteFile (in: hFile=0x24bc, lpBuffer=0x80b8498*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc41fcb0, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesWritten=0xc41fcb0*=0x3c00, lpOverlapped=0x0) returned 1 [0168.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0168.710] SetFilePointerEx (in: hFile=0x24bc, liDistanceToMove=0x3e400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.710] ReadFile (in: hFile=0x24bc, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc41fcb0, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0xc41fcb0*=0x3c00, lpOverlapped=0x0) returned 1 [0168.711] SetFilePointerEx (in: hFile=0x24bc, liDistanceToMove=0x3e400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3df9bb0 [0168.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9438 [0168.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0168.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0168.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8160890 [0168.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0168.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0168.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be88) returned 1 [0168.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0168.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9bb0) returned 1 [0168.712] WriteFile (in: hFile=0x24bc, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc41fcb0, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0xc41fcb0*=0x3c00, lpOverlapped=0x0) returned 1 [0174.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0174.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fcea58 [0174.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0174.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4b28 [0174.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0174.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d70 [0174.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0174.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0174.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3d08) returned 1 [0174.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef8c58 [0174.394] SetFilePointerEx (in: hFile=0x24bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.394] WriteFile (in: hFile=0x24bc, lpBuffer=0x3ef8c58*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0xc41fd1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef8c58*, lpNumberOfBytesWritten=0xc41fd1c*=0x13e, lpOverlapped=0x0) returned 1 [0174.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8c58) returned 1 [0174.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0174.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0174.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0174.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcea58) returned 1 [0174.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0174.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0174.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0174.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da1f8 [0174.579] wcscpy (in: _Dest=0x81da1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" [0174.579] wcscat (in: _Dest=0x81da1f8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.f0dbec" [0174.579] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.f0dbec", NtPathName=0xc41fca0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d65e8 [0176.886] FlushFileBuffers (hFile=0x24bc) returned 1 [0177.711] CloseHandle (hObject=0x24bc) returned 1 [0182.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d411a0 [0182.505] wcscpy (in: _Dest=0x3d411a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0182.505] wcscat (in: _Dest=0x3d411a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" [0182.505] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f0dbec-readme.txt")) returned 0xffffffff [0184.651] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19ac [0195.663] WriteFile (in: hFile=0x19ac, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc41fcc4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc41fcc4*=0x70c, lpOverlapped=0x0) returned 1 [0202.968] CloseHandle (hObject=0x19ac) returned 1 [0211.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d411a0) returned 1 [0211.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bdf8) returned 1 Thread: id = 2951 os_tid = 0x29a0 [0161.959] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2")) returned 0x2020 [0172.883] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", dwFileAttributes=0x20) returned 1 [0177.974] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ce4 [0190.196] GetFileSizeEx (in: hFile=0x1ce4, lpFileSize=0xa21fea8 | out: lpFileSize=0xa21fea8*=8192) returned 1 [0190.196] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.196] ReadFile (in: hFile=0x1ce4, lpBuffer=0xa21feb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa21fe90, lpOverlapped=0x0 | out: lpBuffer=0xa21feb4*, lpNumberOfBytesRead=0xa21fe90*=0x4, lpOverlapped=0x0) returned 1 [0190.198] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42740 [0190.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0190.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42790 [0190.201] NtQuerySystemTime (in: CurrentTime=0xa21fe30 | out: CurrentTime=0xa21fe30*=132471540581076000) returned 0x0 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x37893bef [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x70ef6fca [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x47d50e5b [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x1d7e07d4 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x7e001e19 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x36e3b5bd [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x211f4316 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x483ff2e6 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x3212ff5f [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x2386ef9b [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x236626f1 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x516f17ce [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x5381ec96 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x325b50be [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x6d2ba3d0 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x5560ec28 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x52ab5233 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x69b9d03b [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x6d6d3b4e [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x51ff5a4d [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0xe33cb47 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x146f0820 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x3c0ba64e [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x2a469082 [0190.201] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x63b3a4e [0190.202] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x42d35e0 [0190.202] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x3e83aeb8 [0190.202] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x75945260 [0190.202] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x1250a22b [0190.202] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x7590a44d [0190.202] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x42018985 [0190.202] RtlRandomEx (in: Seed=0xa21fe28 | out: Seed=0xa21fe28) returned 0x6d2372d7 [0190.210] ReadFile (in: hFile=0x1ce4, lpBuffer=0x809a458, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xa21fe24, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0xa21fe24*=0x2000, lpOverlapped=0x0) returned 1 [0190.212] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.212] WriteFile (in: hFile=0x1ce4, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0xa21fe28, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0xa21fe28*=0x2000, lpOverlapped=0x0) returned 1 [0190.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16a8 [0190.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0190.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0190.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0190.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0190.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0190.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b53d0) returned 1 [0190.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4740 [0190.583] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.583] WriteFile (in: hFile=0x1ce4, lpBuffer=0x3ef4d60*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xa21fe9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef4d60*, lpNumberOfBytesWritten=0xa21fe9c*=0xfe, lpOverlapped=0x0) returned 1 [0190.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d60) returned 1 [0190.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0190.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0190.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0190.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16a8) returned 1 [0190.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0190.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42808) returned 1 [0190.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0190.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da828 [0190.746] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" [0190.746] wcscat (in: _Dest=0x81da828, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.f0dbec" [0190.746] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.f0dbec", NtPathName=0xa21fe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e35668 [0195.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35668) returned 1 [0195.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8640) returned 1 [0195.408] NtQueryInformationFile (in: FileHandle=0x1ce4, IoStatusBlock=0xa21fdf8, FileInformation=0xa21fe00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa21fdf8, FileInformation=0xa21fe00) returned 0x0 [0195.408] NtSetInformationFile (FileHandle=0x1ce4, IoStatusBlock=0xa21fdf8, FileInformation=0xa21fe00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 [0196.387] FlushFileBuffers (hFile=0x1ce4) returned 1 [0196.392] CloseHandle (hObject=0x1ce4) returned 1 [0196.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41e90 [0196.727] wcscpy (in: _Dest=0x3d41e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0196.727] wcscat (in: _Dest=0x3d41e90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" [0196.727] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f0dbec-readme.txt")) returned 0x2020 [0202.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e90) returned 1 [0202.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819adb8) returned 1 Thread: id = 2952 os_tid = 0x29a4 [0161.960] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3")) returned 0x2020 [0172.883] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", dwFileAttributes=0x20) returned 1 [0177.547] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe00 [0177.548] GetFileSizeEx (in: hFile=0xe00, lpFileSize=0xc22fa50 | out: lpFileSize=0xc22fa50*=4202496) returned 1 [0177.548] SetFilePointerEx (in: hFile=0xe00, liDistanceToMove=0x401ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.548] ReadFile (in: hFile=0xe00, lpBuffer=0xc22fa5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc22fa38, lpOverlapped=0x0 | out: lpBuffer=0xc22fa5c*, lpNumberOfBytesRead=0xc22fa38*=0x4, lpOverlapped=0x0) returned 1 [0181.980] SetFilePointerEx (in: hFile=0xe00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0181.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42560 [0181.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42380 [0181.980] NtQuerySystemTime (in: CurrentTime=0xc22f9d8 | out: CurrentTime=0xc22f9d8*=132471540499644000) returned 0x0 [0181.980] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x5aa6c509 [0181.980] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x39c0f1d5 [0181.980] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x7ae01918 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x4706da06 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0xd85a357 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x76da33e2 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x31ef8dd5 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x25deae91 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x39fc793 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x1320d32d [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x4689e0cf [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x20cdc4c9 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x6c29af30 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x2aa52557 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0xbb29277 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x4825ae35 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x2fff4bdf [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x6a71ee5e [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x64abf447 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x55558cbc [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x3f1c0ab1 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x639841ee [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x5815240c [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x69a12ed6 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x49dd3699 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x460f1d02 [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x2211f92e [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x18c1eedd [0181.981] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x6d59bfff [0181.982] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x239ce2dc [0181.982] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x7d2806c2 [0181.982] RtlRandomEx (in: Seed=0xc22f9d0 | out: Seed=0xc22f9d0) returned 0x7ac1a40a [0181.992] SetFilePointerEx (in: hFile=0xe00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.992] ReadFile (in: hFile=0xe00, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc22f9d8, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0xc22f9d8*=0x3c00, lpOverlapped=0x0) returned 1 [0182.296] SetFilePointerEx (in: hFile=0xe00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81d49b0 [0182.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0182.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0182.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x835f160 [0182.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435a0 [0182.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435a0) returned 1 [0182.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0182.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d49b0) returned 1 [0182.297] WriteFile (in: hFile=0xe00, lpBuffer=0x835f160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc22f9d8, lpOverlapped=0x0 | out: lpBuffer=0x835f160*, lpNumberOfBytesWritten=0xc22f9d8*=0x3c00, lpOverlapped=0x0) returned 1 [0184.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835f160) returned 1 [0184.965] SetFilePointerEx (in: hFile=0xe00, liDistanceToMove=0x201c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.966] ReadFile (in: hFile=0xe00, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc22f9d8, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0xc22f9d8*=0x3c00, lpOverlapped=0x0) returned 1 [0184.969] SetFilePointerEx (in: hFile=0xe00, liDistanceToMove=0x201c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81d4f50 [0184.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d18 [0184.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0184.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0184.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x835f160 [0184.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0184.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0184.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428a8) returned 1 [0184.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d18) returned 1 [0184.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4f50) returned 1 [0184.970] WriteFile (in: hFile=0xe00, lpBuffer=0x835f160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc22f9d8, lpOverlapped=0x0 | out: lpBuffer=0x835f160*, lpNumberOfBytesWritten=0xc22f9d8*=0x3c00, lpOverlapped=0x0) returned 1 [0192.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835f160) returned 1 [0192.362] SetFilePointerEx (in: hFile=0xe00, liDistanceToMove=0x3fe400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.363] ReadFile (in: hFile=0xe00, lpBuffer=0x80bfca8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc22f9d8, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesRead=0xc22f9d8*=0x3c00, lpOverlapped=0x0) returned 1 [0192.369] SetFilePointerEx (in: hFile=0xe00, liDistanceToMove=0x3fe400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309fe8 [0192.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32ca0 [0192.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3c0 [0192.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3c0) returned 1 [0192.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x835f160 [0192.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3c0 [0192.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0192.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c928) returned 1 [0192.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0192.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309fe8) returned 1 [0192.369] WriteFile (in: hFile=0xe00, lpBuffer=0x835f160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc22f9d8, lpOverlapped=0x0 | out: lpBuffer=0x835f160*, lpNumberOfBytesWritten=0xc22f9d8*=0x3c00, lpOverlapped=0x0) returned 1 [0206.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835f160) returned 1 [0206.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eccd28 [0206.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0206.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d42a10 [0206.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435c8 [0206.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42830 [0206.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42830) returned 1 [0206.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0206.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5070) returned 1 [0206.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3db80 [0206.150] SetFilePointerEx (in: hFile=0xe00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.150] WriteFile (in: hFile=0xe00, lpBuffer=0x3e3db80*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0xc22fa44, lpOverlapped=0x0 | out: lpBuffer=0x3e3db80*, lpNumberOfBytesWritten=0xc22fa44*=0x13e, lpOverlapped=0x0) returned 1 [0212.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db80) returned 1 [0212.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0212.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435c8) returned 1 [0212.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0212.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccd28) returned 1 [0212.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42560) returned 1 [0212.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422e0) returned 1 [0212.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42268) returned 1 [0212.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b928 [0212.909] wcscpy (in: _Dest=0x35b928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" [0212.909] wcscat (in: _Dest=0x35b928, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.f0dbec" [0212.909] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.f0dbec", NtPathName=0xc22f9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0212.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x8332f70 [0215.599] FlushFileBuffers (hFile=0xe00) returned 1 [0215.600] CloseHandle (hObject=0xe00) returned 1 [0215.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6d00 [0215.766] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0215.766] wcscat (in: _Dest=0x2ff6d00, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" [0215.766] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f0dbec-readme.txt")) returned 0x2020 [0215.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0215.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b3f8) returned 1 Thread: id = 2953 os_tid = 0x29a8 [0161.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index")) returned 0x2020 [0172.886] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", dwFileAttributes=0x20) returned 1 [0184.617] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c4 [0195.789] GetFileSizeEx (in: hFile=0x10c4, lpFileSize=0xa2efaf8 | out: lpFileSize=0xa2efaf8*=524656) returned 1 [0195.789] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x8016c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.789] ReadFile (in: hFile=0x10c4, lpBuffer=0xa2efb04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa2efae0, lpOverlapped=0x0 | out: lpBuffer=0xa2efb04*, lpNumberOfBytesRead=0xa2efae0*=0x4, lpOverlapped=0x0) returned 1 [0195.791] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0195.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ea0 [0195.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0195.791] NtQuerySystemTime (in: CurrentTime=0xa2efa80 | out: CurrentTime=0xa2efa80*=132471540636768000) returned 0x0 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x296463d7 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x1c8a3ff4 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x4ce5dde0 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x61be1bc6 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x3cfbaec1 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x55c2ee01 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0xcf22edb [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x74ead42c [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x2723cbed [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x53254c87 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x6fb20325 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x24069b10 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x7001ca42 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x3073ef2 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x6a210de8 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x51a0239 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x5441f7e7 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x741fd651 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x62835148 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0xfde598c [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x7789189e [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x4d7dc8d7 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x2e81408d [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x6ca0bde2 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x242bd7c1 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x3bcfc181 [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x4eee773a [0195.792] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x3d496775 [0195.793] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x14a19ca1 [0195.793] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x720d2634 [0195.793] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0xab53e19 [0195.793] RtlRandomEx (in: Seed=0xa2efa78 | out: Seed=0xa2efa78) returned 0x20a20bca [0195.803] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.804] ReadFile (in: hFile=0x10c4, lpBuffer=0x14a46060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa2efa80, lpOverlapped=0x0 | out: lpBuffer=0x14a46060*, lpNumberOfBytesRead=0xa2efa80*=0x3c00, lpOverlapped=0x0) returned 1 [0195.807] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b49b0 [0195.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32598 [0195.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0195.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0195.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a49c68 [0195.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0195.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0195.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0195.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0195.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b49b0) returned 1 [0195.808] WriteFile (in: hFile=0x10c4, lpBuffer=0x14a49c68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa2efa80, lpOverlapped=0x0 | out: lpBuffer=0x14a49c68*, lpNumberOfBytesWritten=0xa2efa80*=0x3c00, lpOverlapped=0x0) returned 1 [0202.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a49c68) returned 1 [0202.704] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x43800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.704] ReadFile (in: hFile=0x10c4, lpBuffer=0x14a46060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa2efa80, lpOverlapped=0x0 | out: lpBuffer=0x14a46060*, lpNumberOfBytesRead=0xa2efa80*=0x3c00, lpOverlapped=0x0) returned 1 [0202.710] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x43800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d0e8 [0202.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32430 [0202.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d28 [0202.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d28) returned 1 [0202.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a49c68 [0202.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d28 [0202.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062cb0 [0202.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062cb0) returned 1 [0202.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0202.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d0e8) returned 1 [0202.711] WriteFile (in: hFile=0x10c4, lpBuffer=0x14a49c68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa2efa80, lpOverlapped=0x0 | out: lpBuffer=0x14a49c68*, lpNumberOfBytesWritten=0xa2efa80*=0x3c00, lpOverlapped=0x0) returned 1 [0203.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a49c68) returned 1 [0203.264] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x7c570, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.264] ReadFile (in: hFile=0x10c4, lpBuffer=0x14a46060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa2efa80, lpOverlapped=0x0 | out: lpBuffer=0x14a46060*, lpNumberOfBytesRead=0xa2efa80*=0x3c00, lpOverlapped=0x0) returned 1 [0203.264] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x7c570, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e62f0 [0203.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32520 [0203.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063430 [0203.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063430) returned 1 [0203.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a49c68 [0203.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063430 [0203.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063458 [0203.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063458) returned 1 [0203.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 [0203.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e62f0) returned 1 [0203.265] WriteFile (in: hFile=0x10c4, lpBuffer=0x14a49c68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa2efa80, lpOverlapped=0x0 | out: lpBuffer=0x14a49c68*, lpNumberOfBytesWritten=0xa2efa80*=0x3c00, lpOverlapped=0x0) returned 1 [0209.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a49c68) returned 1 [0209.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed4be8 [0209.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0209.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x8096d50 [0209.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0209.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0209.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0209.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0209.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309220) returned 1 [0209.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3e3ceb0 [0209.930] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.930] WriteFile (in: hFile=0x10c4, lpBuffer=0x3e3ceb0*, nNumberOfBytesToWrite=0x13c, lpNumberOfBytesWritten=0xa2efaec, lpOverlapped=0x0 | out: lpBuffer=0x3e3ceb0*, lpNumberOfBytesWritten=0xa2efaec*=0x13c, lpOverlapped=0x0) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ceb0) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8096d50) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8097d70) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4be8) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ea0) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca328) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0209.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da988 [0209.932] wcscpy (in: _Dest=0x81da988, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" [0209.932] wcscat (in: _Dest=0x81da988, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.f0dbec" [0209.932] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.f0dbec", NtPathName=0xa2efa70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x83331c8 [0209.935] FlushFileBuffers (hFile=0x10c4) returned 1 [0209.936] CloseHandle (hObject=0x10c4) returned 1 [0209.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41c68 [0209.938] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0209.938] wcscat (in: _Dest=0x3d41c68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" [0209.938] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f0dbec-readme.txt")) returned 0x2020 [0212.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 [0212.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aa98) returned 1 Thread: id = 2954 os_tid = 0x29ac [0161.964] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\lfcptu7e5w9r7xkg\\qfhfkhqdrh.wav")) returned 0x20 [0161.964] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav", dwFileAttributes=0x20) returned 1 [0161.965] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\lfcptu7e5w9r7xkg\\qfhfkhqdrh.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a40 [0161.965] GetFileSizeEx (in: hFile=0x2a40, lpFileSize=0x8acfa30 | out: lpFileSize=0x8acfa30*=100919) returned 1 [0161.965] SetFilePointerEx (in: hFile=0x2a40, liDistanceToMove=0x18a33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.965] ReadFile (in: hFile=0x2a40, lpBuffer=0x8acfa3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8acfa18, lpOverlapped=0x0 | out: lpBuffer=0x8acfa3c*, lpNumberOfBytesRead=0x8acfa18*=0x4, lpOverlapped=0x0) returned 1 [0161.967] SetFilePointerEx (in: hFile=0x2a40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0161.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0161.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0161.967] NtQuerySystemTime (in: CurrentTime=0x8acf9b8 | out: CurrentTime=0x8acf9b8*=132471540301992000) returned 0x0 [0161.967] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x2ece0e7a [0161.967] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x6f5c2f98 [0161.967] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0xf7ff5a6 [0161.967] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x13a308e4 [0161.967] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x25726b02 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x5cc9199c [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x615e90f9 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x2c4163c6 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x1f31975c [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x6715fb2e [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x64cf72e2 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x29a4edf4 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x675f0f52 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x25adb80b [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x8e73b46 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x5a9e0a4a [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x56a81f73 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x33a753d0 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x544f68c9 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x8ff3847 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x412dfcd5 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x67860c2a [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0xafb7401 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x164af029 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x1fa5421b [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x36b61166 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x1c43529f [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x13a2a651 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0xad8aa6c [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0xc9c5392 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x25fc3f10 [0161.968] RtlRandomEx (in: Seed=0x8acf9b0 | out: Seed=0x8acf9b0) returned 0x2697e1da [0161.978] SetFilePointerEx (in: hFile=0x2a40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.978] ReadFile (in: hFile=0x2a40, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8acf9b8, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0x8acf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0161.979] SetFilePointerEx (in: hFile=0x2a40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6d640 [0161.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32c28 [0161.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0161.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0161.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0161.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0161.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0161.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca90) returned 1 [0161.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0161.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d640) returned 1 [0161.980] WriteFile (in: hFile=0x2a40, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8acf9b8, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x8acf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0164.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0164.741] SetFilePointerEx (in: hFile=0x2a40, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.742] ReadFile (in: hFile=0x2a40, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8acf9b8, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0x8acf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0164.742] SetFilePointerEx (in: hFile=0x2a40, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83085c0 [0164.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e682b8 [0164.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1518 [0164.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0164.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0164.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1518 [0164.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14f0 [0164.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14f0) returned 1 [0164.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 [0164.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83085c0) returned 1 [0164.743] WriteFile (in: hFile=0x2a40, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8acf9b8, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x8acf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0165.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0165.477] SetFilePointerEx (in: hFile=0x2a40, liDistanceToMove=0x14e37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.477] ReadFile (in: hFile=0x2a40, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8acf9b8, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0x8acf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0165.478] SetFilePointerEx (in: hFile=0x2a40, liDistanceToMove=0x14e37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x8309268 [0165.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67ca0 [0165.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0165.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0165.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0165.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0165.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0165.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0165.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 [0165.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309268) returned 1 [0165.478] WriteFile (in: hFile=0x2a40, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8acf9b8, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x8acf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0166.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0166.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fce030 [0166.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0166.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e77e18 [0166.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0166.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0166.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0166.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0166.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e69f8) returned 1 [0166.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x3e16628 [0166.215] SetFilePointerEx (in: hFile=0x2a40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.215] WriteFile (in: hFile=0x2a40, lpBuffer=0x3e16628*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x8acfa24, lpOverlapped=0x0 | out: lpBuffer=0x3e16628*, lpNumberOfBytesWritten=0x8acfa24*=0x14e, lpOverlapped=0x0) returned 1 [0168.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16628) returned 1 [0168.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0168.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0168.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0168.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce030) returned 1 [0168.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0168.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5f0) returned 1 [0168.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be88) returned 1 [0168.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1c808 [0168.351] wcscpy (in: _Dest=0x3e1c808, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav" [0168.351] wcscat (in: _Dest=0x3e1c808, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav.f0dbec" [0168.351] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav.f0dbec", NtPathName=0x8acf9a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\qfHfKHqdrh.wav.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3a990 [0173.277] FlushFileBuffers (hFile=0x2a40) returned 1 [0173.858] CloseHandle (hObject=0x2a40) returned 1 [0174.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81f05b8 [0174.638] wcscpy (in: _Dest=0x81f05b8, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\" [0174.638] wcscat (in: _Dest=0x81f05b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\F0DBEC-Readme.txt" [0174.639] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\lfcptu7e5w9r7xkg\\f0dbec-readme.txt")) returned 0x20 [0175.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f05b8) returned 1 [0175.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35348) returned 1 Thread: id = 2955 os_tid = 0x29b0 [0161.980] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\lfcptu7e5w9r7xkg\\yonesu.m4a")) returned 0x20 [0161.980] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a", dwFileAttributes=0x20) returned 1 [0161.981] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\lfcptu7e5w9r7xkg\\yonesu.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x24c4 [0161.981] GetFileSizeEx (in: hFile=0x24c4, lpFileSize=0xc5dfeb8 | out: lpFileSize=0xc5dfeb8*=57601) returned 1 [0161.981] SetFilePointerEx (in: hFile=0x24c4, liDistanceToMove=0xe0fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.981] ReadFile (in: hFile=0x24c4, lpBuffer=0xc5dfec4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc5dfea0, lpOverlapped=0x0 | out: lpBuffer=0xc5dfec4*, lpNumberOfBytesRead=0xc5dfea0*=0x4, lpOverlapped=0x0) returned 1 [0161.983] SetFilePointerEx (in: hFile=0x24c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0161.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0161.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0161.983] NtQuerySystemTime (in: CurrentTime=0xc5dfe40 | out: CurrentTime=0xc5dfe40*=132471540302148000) returned 0x0 [0161.983] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x49fe72e4 [0161.983] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x49509ea0 [0161.983] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x733b7e37 [0161.983] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x2db2eae0 [0161.983] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x1973aa2d [0161.983] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x3baf8016 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x3cc4042a [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x59c90ef8 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x19f30260 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x584d01cf [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x6be9b64f [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x24d08e0c [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x5a76a2a [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x6366fbd1 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0xc244f60 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x1a1ddb20 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x3ed21994 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x9b31f69 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x27fff2bb [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x25dd2a6d [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x3125a6f6 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x1bef1ae2 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x6a1e796c [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x55cc1545 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x843dff3 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x574bc2bb [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x35de0896 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0xdc958be [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x41af766b [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x79c180c8 [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x681549bd [0161.984] RtlRandomEx (in: Seed=0xc5dfe38 | out: Seed=0xc5dfe38) returned 0x32c978fc [0161.996] SetFilePointerEx (in: hFile=0x24c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.996] ReadFile (in: hFile=0x24c4, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc5dfe40, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0xc5dfe40*=0x3c00, lpOverlapped=0x0) returned 1 [0161.997] SetFilePointerEx (in: hFile=0x24c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6cab8 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32c28 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0161.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca90) returned 1 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0161.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0161.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0161.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6cab8) returned 1 [0161.998] WriteFile (in: hFile=0x24c4, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc5dfe40, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0xc5dfe40*=0x3c00, lpOverlapped=0x0) returned 1 [0164.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0164.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0164.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e70188 [0164.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0164.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e70158 [0164.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ed8 [0164.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0164.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0164.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0164.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f50) returned 1 [0164.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3deb9f0 [0164.754] SetFilePointerEx (in: hFile=0x24c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.754] WriteFile (in: hFile=0x24c4, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xc5dfeac, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0xc5dfeac*=0x106, lpOverlapped=0x0) returned 1 [0167.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0167.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70158) returned 1 [0167.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0167.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0167.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca90) returned 1 [0167.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0167.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0167.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0167.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6908 [0167.032] wcscpy (in: _Dest=0x81d6908, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a" [0167.032] wcscat (in: _Dest=0x81d6908, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a.f0dbec") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a.f0dbec" [0167.032] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a.f0dbec", NtPathName=0xc5dfe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\yONESU.m4a.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c97c8 [0167.035] FlushFileBuffers (hFile=0x24c4) returned 1 [0167.036] CloseHandle (hObject=0x24c4) returned 1 [0167.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1b558 [0167.037] wcscpy (in: _Dest=0x3e1b558, _Source="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\" [0167.037] wcscat (in: _Dest=0x3e1b558, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\F0DBEC-Readme.txt" [0167.037] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\lfcptu7e5w9r7xkg\\f0dbec-readme.txt")) returned 0xffffffff [0167.037] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\cvNSdvuCZ088HtdBMJg\\h-zordla6pU\\04_sj\\lFCPtu7e5W9r7xKG\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\cvnsdvucz088htdbmjg\\h-zordla6pu\\04_sj\\lfcptu7e5w9r7xkg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ac0 [0172.788] WriteFile (in: hFile=0x2ac0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc5dfe54, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc5dfe54*=0x70c, lpOverlapped=0x0) returned 1 [0175.157] CloseHandle (hObject=0x2ac0) returned 1 [0177.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b558) returned 1 [0177.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfdc8) returned 1 Thread: id = 2956 os_tid = 0x29b4 [0161.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif")) returned 0x20 [0165.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF", dwFileAttributes=0x20) returned 0 [0165.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.789] GetLastError () returned 0x5 [0165.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF", dwFileAttributes=0x20) returned 0 [0165.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d088) returned 1 Thread: id = 2957 os_tid = 0x29b8 [0162.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif")) returned 0x20 [0165.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF", dwFileAttributes=0x20) returned 0 [0165.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.746] GetLastError () returned 0x5 [0165.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF", dwFileAttributes=0x20) returned 0 [0165.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bd90) returned 1 Thread: id = 2958 os_tid = 0x29bc [0162.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif")) returned 0x20 [0165.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF", dwFileAttributes=0x20) returned 0 [0165.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.754] GetLastError () returned 0x5 [0165.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF", dwFileAttributes=0x20) returned 0 [0165.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ab28) returned 1 Thread: id = 2959 os_tid = 0x29c0 [0162.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif")) returned 0x20 [0165.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF", dwFileAttributes=0x20) returned 0 [0165.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.498] GetLastError () returned 0x5 [0165.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF", dwFileAttributes=0x20) returned 0 [0165.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 Thread: id = 2960 os_tid = 0x29c4 [0162.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv")) returned 0x20 [0162.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", dwFileAttributes=0x20) returned 0 [0162.017] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.017] GetLastError () returned 0x5 [0162.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", dwFileAttributes=0x20) returned 0 [0162.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f0) returned 1 Thread: id = 2961 os_tid = 0x29c8 [0162.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv")) returned 0x20 [0162.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", dwFileAttributes=0x20) returned 0 [0162.020] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.020] GetLastError () returned 0x5 [0162.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", dwFileAttributes=0x20) returned 0 [0162.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 2962 os_tid = 0x29cc [0162.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv")) returned 0x20 [0162.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", dwFileAttributes=0x20) returned 0 [0162.022] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.023] GetLastError () returned 0x5 [0162.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", dwFileAttributes=0x20) returned 0 [0162.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35ba88) returned 1 Thread: id = 2963 os_tid = 0x29d0 [0162.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv")) returned 0x20 [0162.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", dwFileAttributes=0x20) returned 0 [0162.025] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.025] GetLastError () returned 0x5 [0162.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", dwFileAttributes=0x20) returned 0 [0162.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d403f8) returned 1 Thread: id = 2964 os_tid = 0x29d4 [0162.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky")) returned 0x20 [0162.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY", dwFileAttributes=0x20) returned 0 [0162.026] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.026] GetLastError () returned 0x5 [0162.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY", dwFileAttributes=0x20) returned 0 [0162.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186458) returned 1 Thread: id = 2965 os_tid = 0x29d8 [0162.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky")) returned 0x20 [0162.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY", dwFileAttributes=0x20) returned 0 [0162.028] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.028] GetLastError () returned 0x5 [0162.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY", dwFileAttributes=0x20) returned 0 [0162.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c798) returned 1 Thread: id = 2966 os_tid = 0x29dc [0162.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky")) returned 0x20 [0162.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY", dwFileAttributes=0x20) returned 0 [0162.030] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.030] GetLastError () returned 0x5 [0162.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY", dwFileAttributes=0x20) returned 0 [0162.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c0b8) returned 1 Thread: id = 2967 os_tid = 0x29e0 [0162.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky")) returned 0x20 [0162.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY", dwFileAttributes=0x20) returned 0 [0162.031] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.032] GetLastError () returned 0x5 [0162.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY", dwFileAttributes=0x20) returned 0 [0162.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1870) returned 1 Thread: id = 2968 os_tid = 0x29e4 [0162.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf")) returned 0x20 [0162.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0162.033] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.033] GetLastError () returned 0x5 [0162.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0162.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c410) returned 1 Thread: id = 2969 os_tid = 0x29e8 [0162.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf")) returned 0x20 [0162.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0162.036] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.036] GetLastError () returned 0x5 [0162.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0162.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1ae8) returned 1 Thread: id = 2970 os_tid = 0x29ec [0162.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf")) returned 0x20 [0162.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF", dwFileAttributes=0x20) returned 0 [0162.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.048] GetLastError () returned 0x5 [0162.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF", dwFileAttributes=0x20) returned 0 [0162.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d14f8) returned 1 Thread: id = 2971 os_tid = 0x29f0 [0162.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf")) returned 0x20 [0163.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF", dwFileAttributes=0x20) returned 0 [0163.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.893] GetLastError () returned 0x5 [0163.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF", dwFileAttributes=0x20) returned 0 [0163.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0fa0) returned 1 Thread: id = 2972 os_tid = 0x29f4 [0162.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf")) returned 0x20 [0163.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF", dwFileAttributes=0x20) returned 0 [0163.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.895] GetLastError () returned 0x5 [0163.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF", dwFileAttributes=0x20) returned 0 [0163.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1d48) returned 1 Thread: id = 2973 os_tid = 0x29f8 [0162.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf")) returned 0x20 [0163.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF", dwFileAttributes=0x20) returned 0 [0163.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.897] GetLastError () returned 0x5 [0163.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF", dwFileAttributes=0x20) returned 0 [0163.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1f10) returned 1 Thread: id = 2974 os_tid = 0x29fc [0162.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf")) returned 0x20 [0163.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF", dwFileAttributes=0x20) returned 0 [0163.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.898] GetLastError () returned 0x5 [0163.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF", dwFileAttributes=0x20) returned 0 [0163.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1fa8) returned 1 Thread: id = 2975 os_tid = 0x2a00 [0162.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf")) returned 0x20 [0163.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF", dwFileAttributes=0x20) returned 0 [0163.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.900] GetLastError () returned 0x5 [0163.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF", dwFileAttributes=0x20) returned 0 [0163.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2040) returned 1 Thread: id = 2976 os_tid = 0x2a04 [0162.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf")) returned 0x20 [0163.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF", dwFileAttributes=0x20) returned 0 [0163.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.902] GetLastError () returned 0x5 [0163.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF", dwFileAttributes=0x20) returned 0 [0163.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d20d8) returned 1 Thread: id = 2977 os_tid = 0x2a08 [0162.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf")) returned 0x20 [0163.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF", dwFileAttributes=0x20) returned 0 [0163.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.904] GetLastError () returned 0x5 [0163.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF", dwFileAttributes=0x20) returned 0 [0163.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2170) returned 1 Thread: id = 2978 os_tid = 0x2a0c [0162.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf")) returned 0x20 [0163.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF", dwFileAttributes=0x20) returned 0 [0163.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.906] GetLastError () returned 0x5 [0163.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF", dwFileAttributes=0x20) returned 0 [0163.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2208) returned 1 Thread: id = 2979 os_tid = 0x2a10 [0162.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf")) returned 0x20 [0163.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF", dwFileAttributes=0x20) returned 0 [0163.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.908] GetLastError () returned 0x5 [0163.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF", dwFileAttributes=0x20) returned 0 [0163.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1c18) returned 1 Thread: id = 2980 os_tid = 0x2a14 [0162.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf")) returned 0x20 [0163.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF", dwFileAttributes=0x20) returned 0 [0163.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.910] GetLastError () returned 0x5 [0163.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF", dwFileAttributes=0x20) returned 0 [0163.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0f08) returned 1 Thread: id = 2981 os_tid = 0x2a18 [0162.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf")) returned 0x20 [0162.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF", dwFileAttributes=0x20) returned 0 [0162.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.803] GetLastError () returned 0x5 [0162.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF", dwFileAttributes=0x20) returned 0 [0162.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1168) returned 1 Thread: id = 2982 os_tid = 0x2a1c [0162.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf")) returned 0x20 [0162.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF", dwFileAttributes=0x20) returned 0 [0162.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.806] GetLastError () returned 0x5 [0162.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF", dwFileAttributes=0x20) returned 0 [0162.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d19b8) returned 1 Thread: id = 2983 os_tid = 0x2a20 [0162.291] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol")) returned 0x2020 [0162.292] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", dwFileAttributes=0x20) returned 1 [0163.567] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b14 [0163.567] GetFileSizeEx (in: hFile=0x2b14, lpFileSize=0x7c9f7f0 | out: lpFileSize=0x7c9f7f0*=291) returned 1 [0163.567] SetFilePointerEx (in: hFile=0x2b14, liDistanceToMove=0x11f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.567] ReadFile (in: hFile=0x2b14, lpBuffer=0x7c9f7fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7c9f7d8, lpOverlapped=0x0 | out: lpBuffer=0x7c9f7fc*, lpNumberOfBytesRead=0x7c9f7d8*=0x4, lpOverlapped=0x0) returned 1 [0163.569] SetFilePointerEx (in: hFile=0x2b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0163.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0163.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0163.570] NtQuerySystemTime (in: CurrentTime=0x7c9f778 | out: CurrentTime=0x7c9f778*=132471540318060000) returned 0x0 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x3656e613 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x36debf2a [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x3c7e1602 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x553ae50d [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x68d51804 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x70eb22e1 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0xd96647a [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0xf93df1d [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0xb6cef2e [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x366fa8d0 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x622b50a8 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x9613020 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x28c69993 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x6b766bb7 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x1424bb5b [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x430e8cca [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x4b759294 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x1e6498bd [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0xb8e31e0 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x97ffe60 [0163.570] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x3444dce [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x475ba30f [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x41e4e31e [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x9ff491e [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x1e308ebb [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x75deba50 [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x2edae1a [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x57b8495c [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x21aa1867 [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x589b98ee [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x18e5e243 [0163.571] RtlRandomEx (in: Seed=0x7c9f770 | out: Seed=0x7c9f770) returned 0x3d2b6ef8 [0163.584] ReadFile (in: hFile=0x2b14, lpBuffer=0x81680a0, nNumberOfBytesToRead=0x123, lpNumberOfBytesRead=0x7c9f76c, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesRead=0x7c9f76c*=0x123, lpOverlapped=0x0) returned 1 [0163.584] SetFilePointerEx (in: hFile=0x2b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.585] WriteFile (in: hFile=0x2b14, lpBuffer=0x816bca8*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x7c9f770, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesWritten=0x7c9f770*=0x123, lpOverlapped=0x0) returned 1 [0164.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0164.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0164.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0164.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0164.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0164.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0164.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308c38) returned 1 [0164.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e6fd38 [0164.809] SetFilePointerEx (in: hFile=0x2b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.809] WriteFile (in: hFile=0x2b14, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x7c9f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x7c9f7e4*=0x10a, lpOverlapped=0x0) returned 1 [0165.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0165.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fca8) returned 1 [0165.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0165.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd38) returned 1 [0165.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0165.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0165.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0165.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0165.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021140 [0165.536] wcscpy (in: _Dest=0x8021140, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" [0165.536] wcscat (in: _Dest=0x8021140, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.f0dbec" [0165.536] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.f0dbec", NtPathName=0x7c9f768, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0165.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2faea0 [0167.001] FlushFileBuffers (hFile=0x2b14) returned 1 [0167.007] CloseHandle (hObject=0x2b14) returned 1 [0167.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8021140 [0167.008] wcscpy (in: _Dest=0x8021140, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" [0167.008] wcscat (in: _Dest=0x8021140, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\F0DBEC-Readme.txt" [0167.008] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\f0dbec-readme.txt")) returned 0xffffffff [0167.008] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b14 [0167.008] WriteFile (in: hFile=0x2b14, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7c9f78c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7c9f78c*=0x70c, lpOverlapped=0x0) returned 1 [0167.250] CloseHandle (hObject=0x2b14) returned 1 [0167.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021140) returned 1 [0167.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a080) returned 1 Thread: id = 2984 os_tid = 0x2a24 [0162.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf")) returned 0x20 [0162.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0162.294] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.294] GetLastError () returned 0x5 [0162.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0162.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 Thread: id = 2985 os_tid = 0x2a28 [0162.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf")) returned 0x20 [0162.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0162.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.301] GetLastError () returned 0x5 [0162.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0162.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41988) returned 1 Thread: id = 2986 os_tid = 0x2a2c [0162.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf")) returned 0x20 [0162.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0162.302] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.303] GetLastError () returned 0x5 [0162.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0162.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5d50) returned 1 Thread: id = 2987 os_tid = 0x2a30 [0162.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun")) returned 0x20 [0162.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", dwFileAttributes=0x20) returned 0 [0162.309] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.310] GetLastError () returned 0x5 [0162.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", dwFileAttributes=0x20) returned 0 [0162.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187760) returned 1 Thread: id = 2988 os_tid = 0x2a34 [0162.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun")) returned 0x20 [0162.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", dwFileAttributes=0x20) returned 0 [0162.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.326] GetLastError () returned 0x5 [0162.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", dwFileAttributes=0x20) returned 0 [0162.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6c8) returned 1 Thread: id = 2989 os_tid = 0x2a38 [0162.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun")) returned 0x20 [0162.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", dwFileAttributes=0x20) returned 0 [0162.329] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.329] GetLastError () returned 0x5 [0162.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", dwFileAttributes=0x20) returned 0 [0162.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9bc8) returned 1 Thread: id = 2990 os_tid = 0x2a3c [0162.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun")) returned 0x20 [0162.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", dwFileAttributes=0x20) returned 0 [0162.331] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.331] GetLastError () returned 0x5 [0162.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", dwFileAttributes=0x20) returned 0 [0162.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 Thread: id = 2991 os_tid = 0x2a40 [0162.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf")) returned 0x20 [0162.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0162.334] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.334] GetLastError () returned 0x5 [0162.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0162.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c2e0) returned 1 Thread: id = 2992 os_tid = 0x2a44 [0162.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf")) returned 0x20 [0162.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0162.343] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.343] GetLastError () returned 0x5 [0162.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0162.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1038) returned 1 Thread: id = 2993 os_tid = 0x2a48 [0162.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif")) returned 0x20 [0165.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF", dwFileAttributes=0x20) returned 0 [0165.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.769] GetLastError () returned 0x5 [0165.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF", dwFileAttributes=0x20) returned 0 [0165.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1298) returned 1 Thread: id = 2994 os_tid = 0x2a4c [0162.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif")) returned 0x20 [0165.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF", dwFileAttributes=0x20) returned 0 [0165.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.771] GetLastError () returned 0x5 [0165.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF", dwFileAttributes=0x20) returned 0 [0165.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1590) returned 1 Thread: id = 2995 os_tid = 0x2a50 [0162.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif")) returned 0x20 [0165.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF", dwFileAttributes=0x20) returned 0 [0165.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.768] GetLastError () returned 0x5 [0165.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF", dwFileAttributes=0x20) returned 0 [0165.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1888) returned 1 Thread: id = 2996 os_tid = 0x2a54 [0162.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif")) returned 0x20 [0165.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF", dwFileAttributes=0x20) returned 0 [0165.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.767] GetLastError () returned 0x5 [0165.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF", dwFileAttributes=0x20) returned 0 [0165.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1758) returned 1 Thread: id = 2997 os_tid = 0x2a58 [0162.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif")) returned 0x20 [0165.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF", dwFileAttributes=0x20) returned 0 [0165.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.765] GetLastError () returned 0x5 [0165.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF", dwFileAttributes=0x20) returned 0 [0165.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0ae0) returned 1 Thread: id = 2998 os_tid = 0x2a5c [0162.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif")) returned 0x20 [0165.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF", dwFileAttributes=0x20) returned 0 [0165.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.764] GetLastError () returned 0x5 [0165.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF", dwFileAttributes=0x20) returned 0 [0165.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0e70) returned 1 Thread: id = 2999 os_tid = 0x2a60 [0162.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif")) returned 0x20 [0165.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF", dwFileAttributes=0x20) returned 0 [0165.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.763] GetLastError () returned 0x5 [0165.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF", dwFileAttributes=0x20) returned 0 [0165.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1628) returned 1 Thread: id = 3000 os_tid = 0x2a64 [0162.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif")) returned 0x20 [0165.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF", dwFileAttributes=0x20) returned 0 [0165.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.762] GetLastError () returned 0x5 [0165.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF", dwFileAttributes=0x20) returned 0 [0165.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1920) returned 1 Thread: id = 3001 os_tid = 0x2a68 [0162.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif")) returned 0x20 [0165.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF", dwFileAttributes=0x20) returned 0 [0165.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.760] GetLastError () returned 0x5 [0165.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF", dwFileAttributes=0x20) returned 0 [0165.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1cb0) returned 1 Thread: id = 3002 os_tid = 0x2a6c [0162.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif")) returned 0x20 [0165.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF", dwFileAttributes=0x20) returned 0 [0165.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.772] GetLastError () returned 0x5 [0165.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF", dwFileAttributes=0x20) returned 0 [0165.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0dd8) returned 1 Thread: id = 3003 os_tid = 0x2a70 [0162.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif")) returned 0x20 [0165.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF", dwFileAttributes=0x20) returned 0 [0165.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.773] GetLastError () returned 0x5 [0165.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF", dwFileAttributes=0x20) returned 0 [0165.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0588) returned 1 Thread: id = 3004 os_tid = 0x2a74 [0162.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif")) returned 0x20 [0165.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF", dwFileAttributes=0x20) returned 0 [0165.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.759] GetLastError () returned 0x5 [0165.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF", dwFileAttributes=0x20) returned 0 [0165.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0620) returned 1 Thread: id = 3005 os_tid = 0x2a78 [0162.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif")) returned 0x20 [0165.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF", dwFileAttributes=0x20) returned 0 [0165.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.758] GetLastError () returned 0x5 [0165.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF", dwFileAttributes=0x20) returned 0 [0165.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0750) returned 1 Thread: id = 3006 os_tid = 0x2a7c [0162.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif")) returned 0x20 [0165.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF", dwFileAttributes=0x20) returned 0 [0165.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.780] GetLastError () returned 0x5 [0165.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF", dwFileAttributes=0x20) returned 0 [0165.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d07e8) returned 1 Thread: id = 3007 os_tid = 0x2a80 [0162.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif")) returned 0x20 [0165.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF", dwFileAttributes=0x20) returned 0 [0165.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.781] GetLastError () returned 0x5 [0165.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF", dwFileAttributes=0x20) returned 0 [0165.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0880) returned 1 Thread: id = 3008 os_tid = 0x2a84 [0162.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif")) returned 0x20 [0165.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF", dwFileAttributes=0x20) returned 0 [0165.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.783] GetLastError () returned 0x5 [0165.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF", dwFileAttributes=0x20) returned 0 [0165.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0918) returned 1 Thread: id = 3009 os_tid = 0x2a88 [0162.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif")) returned 0x20 [0165.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF", dwFileAttributes=0x20) returned 0 [0165.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.784] GetLastError () returned 0x5 [0165.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF", dwFileAttributes=0x20) returned 0 [0165.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d09b0) returned 1 Thread: id = 3010 os_tid = 0x2a8c [0162.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif")) returned 0x20 [0165.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF", dwFileAttributes=0x20) returned 0 [0165.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.785] GetLastError () returned 0x5 [0165.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF", dwFileAttributes=0x20) returned 0 [0165.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0b78) returned 1 Thread: id = 3011 os_tid = 0x2a90 [0162.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif")) returned 0x20 [0165.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF", dwFileAttributes=0x20) returned 0 [0165.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.786] GetLastError () returned 0x5 [0165.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF", dwFileAttributes=0x20) returned 0 [0165.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0c10) returned 1 Thread: id = 3012 os_tid = 0x2a94 [0162.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif")) returned 0x20 [0165.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF", dwFileAttributes=0x20) returned 0 [0165.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.756] GetLastError () returned 0x5 [0165.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF", dwFileAttributes=0x20) returned 0 [0165.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d04f0) returned 1 Thread: id = 3013 os_tid = 0x2a98 [0162.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif")) returned 0x20 [0165.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF", dwFileAttributes=0x20) returned 0 [0165.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.755] GetLastError () returned 0x5 [0165.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF", dwFileAttributes=0x20) returned 0 [0165.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d06b8) returned 1 Thread: id = 3014 os_tid = 0x2a9c [0162.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif")) returned 0x20 [0165.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF", dwFileAttributes=0x20) returned 0 [0165.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.788] GetLastError () returned 0x5 [0165.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF", dwFileAttributes=0x20) returned 0 [0165.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0a48) returned 1 Thread: id = 3015 os_tid = 0x2aa0 [0162.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif")) returned 0x20 [0165.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF", dwFileAttributes=0x20) returned 0 [0165.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.497] GetLastError () returned 0x5 [0165.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF", dwFileAttributes=0x20) returned 0 [0165.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0ca8) returned 1 Thread: id = 3016 os_tid = 0x2aa4 [0162.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif")) returned 0x20 [0165.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF", dwFileAttributes=0x20) returned 0 [0165.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.790] GetLastError () returned 0x5 [0165.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF", dwFileAttributes=0x20) returned 0 [0165.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 Thread: id = 3017 os_tid = 0x2aac [0162.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini")) returned 0x20 [0166.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.292] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.292] GetLastError () returned 0x5 [0166.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 3018 os_tid = 0x2ab0 [0162.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html")) returned 0x20 [0166.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", dwFileAttributes=0x20) returned 0 [0166.297] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.297] GetLastError () returned 0x5 [0166.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", dwFileAttributes=0x20) returned 0 [0166.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 Thread: id = 3019 os_tid = 0x2ab4 [0162.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav")) returned 0x20 [0162.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x20) returned 0 [0162.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.886] GetLastError () returned 0x5 [0162.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x20) returned 0 [0162.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b038) returned 1 Thread: id = 3020 os_tid = 0x2ab8 [0162.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav")) returned 0x20 [0164.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x20) returned 0 [0164.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.796] GetLastError () returned 0x5 [0164.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x20) returned 0 [0164.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce08) returned 1 Thread: id = 3021 os_tid = 0x2abc [0162.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav")) returned 0x20 [0164.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0164.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.782] GetLastError () returned 0x5 [0164.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0164.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcc28) returned 1 Thread: id = 3022 os_tid = 0x2ac0 [0162.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav")) returned 0x20 [0164.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x20) returned 0 [0164.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.803] GetLastError () returned 0x5 [0164.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x20) returned 0 [0164.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcb88) returned 1 Thread: id = 3023 os_tid = 0x2ac4 [0162.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav")) returned 0x20 [0164.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x20) returned 0 [0164.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.802] GetLastError () returned 0x5 [0164.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x20) returned 0 [0164.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 3024 os_tid = 0x2ac8 [0162.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav")) returned 0x20 [0164.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x20) returned 0 [0164.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.806] GetLastError () returned 0x5 [0164.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x20) returned 0 [0164.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcd68) returned 1 Thread: id = 3025 os_tid = 0x2acc [0162.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav")) returned 0x20 [0164.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x20) returned 0 [0164.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.804] GetLastError () returned 0x5 [0164.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x20) returned 0 [0164.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbf08) returned 1 Thread: id = 3026 os_tid = 0x2ad0 [0162.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf")) returned 0x20 [0166.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0167.686] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.684] GetLastError () returned 0x5 [0168.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0168.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40790) returned 1 Thread: id = 3027 os_tid = 0x2ad4 [0162.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf")) returned 0x20 [0168.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0168.284] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.284] GetLastError () returned 0x5 [0168.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0168.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9bc8) returned 1 Thread: id = 3028 os_tid = 0x2ad8 [0162.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf")) returned 0x20 [0168.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0168.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.282] GetLastError () returned 0x5 [0168.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0168.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 Thread: id = 3029 os_tid = 0x2adc [0162.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf")) returned 0x20 [0168.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0168.686] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.686] GetLastError () returned 0x5 [0168.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0168.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41988) returned 1 Thread: id = 3030 os_tid = 0x2ae0 [0162.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf")) returned 0x20 [0166.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0166.258] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.247] GetLastError () returned 0x5 [0168.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0168.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d403f8) returned 1 Thread: id = 3031 os_tid = 0x2ae4 [0162.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf")) returned 0x20 [0167.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0168.248] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.248] GetLastError () returned 0x5 [0168.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0168.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5d50) returned 1 Thread: id = 3032 os_tid = 0x2ae8 [0162.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol")) returned 0x20 [0164.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", dwFileAttributes=0x20) returned 0 [0164.922] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.923] GetLastError () returned 0x5 [0164.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", dwFileAttributes=0x20) returned 0 [0164.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186650) returned 1 Thread: id = 3033 os_tid = 0x2aec [0162.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol")) returned 0x20 [0165.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", dwFileAttributes=0x20) returned 0 [0165.503] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.503] GetLastError () returned 0x5 [0165.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", dwFileAttributes=0x20) returned 0 [0165.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6c8) returned 1 Thread: id = 3034 os_tid = 0x2af0 [0162.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol")) returned 0x20 [0165.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", dwFileAttributes=0x20) returned 0 [0165.506] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.506] GetLastError () returned 0x5 [0165.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", dwFileAttributes=0x20) returned 0 [0165.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8d8) returned 1 Thread: id = 3035 os_tid = 0x2af4 [0162.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol")) returned 0x20 [0165.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", dwFileAttributes=0x20) returned 0 [0165.504] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.504] GetLastError () returned 0x5 [0165.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", dwFileAttributes=0x20) returned 0 [0165.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41a40) returned 1 Thread: id = 3036 os_tid = 0x2af8 [0162.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf")) returned 0x20 [0162.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0162.905] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.905] GetLastError () returned 0x5 [0162.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0162.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dc68) returned 1 Thread: id = 3037 os_tid = 0x2afc [0162.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf")) returned 0x20 [0162.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0162.911] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.911] GetLastError () returned 0x5 [0162.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0162.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d10d0) returned 1 Thread: id = 3038 os_tid = 0x2b00 [0162.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml")) returned 0x20 [0162.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0162.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.913] GetLastError () returned 0x5 [0162.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0162.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81867a0) returned 1 Thread: id = 3039 os_tid = 0x2b04 [0162.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml")) returned 0x20 [0164.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", dwFileAttributes=0x20) returned 0 [0164.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.924] GetLastError () returned 0x5 [0164.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", dwFileAttributes=0x20) returned 0 [0164.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a8b8) returned 1 Thread: id = 3040 os_tid = 0x2b08 [0162.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml")) returned 0x20 [0165.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", dwFileAttributes=0x20) returned 0 [0165.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.534] GetLastError () returned 0x5 [0165.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", dwFileAttributes=0x20) returned 0 [0165.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b858) returned 1 Thread: id = 3041 os_tid = 0x2b0c [0162.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml")) returned 0x20 [0165.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0165.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.510] GetLastError () returned 0x5 [0165.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0165.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187760) returned 1 Thread: id = 3042 os_tid = 0x2b10 [0162.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml")) returned 0x20 [0165.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0165.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.515] GetLastError () returned 0x5 [0165.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0165.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b998) returned 1 Thread: id = 3043 os_tid = 0x2b14 [0162.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml")) returned 0x20 [0165.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", dwFileAttributes=0x20) returned 0 [0165.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.511] GetLastError () returned 0x5 [0165.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", dwFileAttributes=0x20) returned 0 [0165.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b0d8) returned 1 Thread: id = 3044 os_tid = 0x2b18 [0162.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml")) returned 0x20 [0165.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0165.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.512] GetLastError () returned 0x5 [0165.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0165.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81872c8) returned 1 Thread: id = 3045 os_tid = 0x2b1c [0162.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml")) returned 0x20 [0165.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", dwFileAttributes=0x20) returned 0 [0165.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.516] GetLastError () returned 0x5 [0165.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", dwFileAttributes=0x20) returned 0 [0165.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c118) returned 1 Thread: id = 3046 os_tid = 0x2b20 [0162.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml")) returned 0x20 [0165.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0165.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.517] GetLastError () returned 0x5 [0165.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0165.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 Thread: id = 3047 os_tid = 0x2b24 [0162.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml")) returned 0x20 [0165.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", dwFileAttributes=0x20) returned 0 [0165.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.519] GetLastError () returned 0x5 [0165.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", dwFileAttributes=0x20) returned 0 [0165.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188330) returned 1 Thread: id = 3048 os_tid = 0x2b28 [0162.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml")) returned 0x20 [0165.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0165.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.520] GetLastError () returned 0x5 [0165.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0165.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ce0) returned 1 Thread: id = 3049 os_tid = 0x2b2c [0162.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml")) returned 0x20 [0165.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", dwFileAttributes=0x20) returned 0 [0165.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.521] GetLastError () returned 0x5 [0165.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", dwFileAttributes=0x20) returned 0 [0165.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186458) returned 1 Thread: id = 3050 os_tid = 0x2b30 [0162.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml")) returned 0x20 [0165.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0165.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.523] GetLastError () returned 0x5 [0165.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0165.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f0) returned 1 Thread: id = 3051 os_tid = 0x2b34 [0162.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml")) returned 0x20 [0165.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", dwFileAttributes=0x20) returned 0 [0165.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.524] GetLastError () returned 0x5 [0165.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", dwFileAttributes=0x20) returned 0 [0165.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c1b8) returned 1 Thread: id = 3052 os_tid = 0x2b38 [0162.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml")) returned 0x20 [0165.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", dwFileAttributes=0x20) returned 0 [0165.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.525] GetLastError () returned 0x5 [0165.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", dwFileAttributes=0x20) returned 0 [0165.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ed8) returned 1 Thread: id = 3053 os_tid = 0x2b3c [0162.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml")) returned 0x20 [0165.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", dwFileAttributes=0x20) returned 0 [0165.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.526] GetLastError () returned 0x5 [0165.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", dwFileAttributes=0x20) returned 0 [0165.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187bf8) returned 1 Thread: id = 3054 os_tid = 0x2b40 [0162.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml")) returned 0x20 [0165.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", dwFileAttributes=0x20) returned 0 [0165.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.528] GetLastError () returned 0x5 [0165.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", dwFileAttributes=0x20) returned 0 [0165.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 Thread: id = 3055 os_tid = 0x2b44 [0162.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml")) returned 0x20 [0165.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0165.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.529] GetLastError () returned 0x5 [0165.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0165.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187aa8) returned 1 Thread: id = 3056 os_tid = 0x2b48 [0162.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml")) returned 0x20 [0165.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", dwFileAttributes=0x20) returned 0 [0165.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.530] GetLastError () returned 0x5 [0165.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", dwFileAttributes=0x20) returned 0 [0165.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ae58) returned 1 Thread: id = 3057 os_tid = 0x2b4c [0162.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml")) returned 0x20 [0165.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0165.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.531] GetLastError () returned 0x5 [0165.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0165.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186c38) returned 1 Thread: id = 3058 os_tid = 0x2b50 [0162.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml")) returned 0x20 [0165.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0165.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.507] GetLastError () returned 0x5 [0165.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0165.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187e98) returned 1 Thread: id = 3059 os_tid = 0x2b54 [0162.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml")) returned 0x20 [0165.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", dwFileAttributes=0x20) returned 0 [0165.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.509] GetLastError () returned 0x5 [0165.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", dwFileAttributes=0x20) returned 0 [0165.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bd58) returned 1 Thread: id = 3060 os_tid = 0x2b58 [0162.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml")) returned 0x20 [0165.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", dwFileAttributes=0x20) returned 0 [0165.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.532] GetLastError () returned 0x5 [0165.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", dwFileAttributes=0x20) returned 0 [0165.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a818) returned 1 Thread: id = 3061 os_tid = 0x2b5c [0164.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml")) returned 0x20 [0165.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", dwFileAttributes=0x20) returned 0 [0165.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.514] GetLastError () returned 0x5 [0165.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", dwFileAttributes=0x20) returned 0 [0165.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ba38) returned 1 Thread: id = 3062 os_tid = 0x2b60 [0164.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml")) returned 0x20 [0164.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", dwFileAttributes=0x20) returned 0 [0164.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.077] GetLastError () returned 0x5 [0164.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", dwFileAttributes=0x20) returned 0 [0164.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a30) returned 1 Thread: id = 3063 os_tid = 0x2b64 [0164.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml")) returned 0x20 [0164.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0164.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.079] GetLastError () returned 0x5 [0164.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0164.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81867a0) returned 1 Thread: id = 3064 os_tid = 0x2b68 [0164.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml")) returned 0x20 [0164.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", dwFileAttributes=0x20) returned 0 [0164.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.081] GetLastError () returned 0x5 [0164.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", dwFileAttributes=0x20) returned 0 [0164.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 3065 os_tid = 0x2b6c [0164.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml")) returned 0x20 [0164.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", dwFileAttributes=0x20) returned 0 [0164.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.083] GetLastError () returned 0x5 [0164.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", dwFileAttributes=0x20) returned 0 [0164.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41bb0) returned 1 Thread: id = 3066 os_tid = 0x2b70 [0164.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx")) returned 0x20 [0164.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.087] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.087] GetLastError () returned 0x5 [0164.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 Thread: id = 3067 os_tid = 0x2b74 [0164.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb")) returned 0x20 [0165.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB", dwFileAttributes=0x20) returned 0 [0165.668] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.668] GetLastError () returned 0x5 [0165.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB", dwFileAttributes=0x20) returned 0 [0165.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 Thread: id = 3068 os_tid = 0x2b78 [0164.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb")) returned 0x20 [0165.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB", dwFileAttributes=0x20) returned 0 [0165.084] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.084] GetLastError () returned 0x5 [0165.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB", dwFileAttributes=0x20) returned 0 [0165.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 3069 os_tid = 0x2b7c [0164.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb")) returned 0x20 [0165.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB", dwFileAttributes=0x20) returned 0 [0165.666] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.666] GetLastError () returned 0x5 [0165.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB", dwFileAttributes=0x20) returned 0 [0165.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df268) returned 1 Thread: id = 3070 os_tid = 0x2b80 [0164.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol")) returned 0x20 [0165.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL", dwFileAttributes=0x20) returned 0 [0165.669] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.370] GetLastError () returned 0x5 [0167.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL", dwFileAttributes=0x20) returned 0 [0167.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 Thread: id = 3071 os_tid = 0x2b84 [0164.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol")) returned 0x20 [0166.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL", dwFileAttributes=0x20) returned 0 [0166.702] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.702] GetLastError () returned 0x5 [0166.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL", dwFileAttributes=0x20) returned 0 [0166.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df2f8) returned 1 Thread: id = 3072 os_tid = 0x2b88 [0164.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx")) returned 0x20 [0164.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.097] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.098] GetLastError () returned 0x5 [0164.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188138) returned 1 Thread: id = 3073 os_tid = 0x2b8c [0164.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur")) returned 0x20 [0164.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR", dwFileAttributes=0x20) returned 0 [0164.100] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.100] GetLastError () returned 0x5 [0164.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR", dwFileAttributes=0x20) returned 0 [0164.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 Thread: id = 3074 os_tid = 0x2b90 [0164.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur")) returned 0x20 [0164.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR", dwFileAttributes=0x20) returned 0 [0164.102] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.102] GetLastError () returned 0x5 [0164.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR", dwFileAttributes=0x20) returned 0 [0164.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df1d8) returned 1 Thread: id = 3075 os_tid = 0x2b94 [0164.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur")) returned 0x20 [0164.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR", dwFileAttributes=0x20) returned 0 [0164.104] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.104] GetLastError () returned 0x5 [0164.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR", dwFileAttributes=0x20) returned 0 [0164.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df418) returned 1 Thread: id = 3076 os_tid = 0x2b98 [0164.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita")) returned 0x20 [0164.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA", dwFileAttributes=0x20) returned 0 [0164.108] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.108] GetLastError () returned 0x5 [0164.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA", dwFileAttributes=0x20) returned 0 [0164.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 Thread: id = 3077 os_tid = 0x2b9c [0164.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita")) returned 0x20 [0164.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA", dwFileAttributes=0x20) returned 0 [0164.113] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.113] GetLastError () returned 0x5 [0164.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA", dwFileAttributes=0x20) returned 0 [0164.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 Thread: id = 3078 os_tid = 0x2ba0 [0164.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita")) returned 0x20 [0164.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA", dwFileAttributes=0x20) returned 0 [0164.115] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.115] GetLastError () returned 0x5 [0164.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA", dwFileAttributes=0x20) returned 0 [0164.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df538) returned 1 Thread: id = 3079 os_tid = 0x2ba4 [0164.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx")) returned 0x20 [0164.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.119] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.119] GetLastError () returned 0x5 [0164.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a00) returned 1 Thread: id = 3080 os_tid = 0x2ba8 [0164.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq")) returned 0x20 [0164.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ", dwFileAttributes=0x20) returned 0 [0164.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.124] GetLastError () returned 0x5 [0164.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ", dwFileAttributes=0x20) returned 0 [0164.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 Thread: id = 3081 os_tid = 0x2bac [0164.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq")) returned 0x20 [0165.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ", dwFileAttributes=0x20) returned 0 [0165.670] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.372] GetLastError () returned 0x5 [0167.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ", dwFileAttributes=0x20) returned 0 [0167.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f356d0) returned 1 Thread: id = 3082 os_tid = 0x2bb0 [0164.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq")) returned 0x20 [0166.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ", dwFileAttributes=0x20) returned 0 [0166.705] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.705] GetLastError () returned 0x5 [0166.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ", dwFileAttributes=0x20) returned 0 [0166.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36180) returned 1 Thread: id = 3083 os_tid = 0x2bb4 [0164.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav")) returned 0x20 [0164.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x20) returned 0 [0164.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.130] GetLastError () returned 0x5 [0164.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x20) returned 0 [0164.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0d40) returned 1 Thread: id = 3084 os_tid = 0x2bb8 [0164.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav")) returned 0x20 [0165.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x20) returned 0 [0165.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.675] GetLastError () returned 0x5 [0165.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x20) returned 0 [0165.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b038) returned 1 Thread: id = 3085 os_tid = 0x2bbc [0164.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav")) returned 0x20 [0165.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x20) returned 0 [0165.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.676] GetLastError () returned 0x5 [0165.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x20) returned 0 [0165.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a598) returned 1 Thread: id = 3086 os_tid = 0x2bc0 [0164.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav")) returned 0x20 [0165.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x20) returned 0 [0165.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.677] GetLastError () returned 0x5 [0165.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x20) returned 0 [0165.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ab38) returned 1 Thread: id = 3087 os_tid = 0x2bc4 [0164.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav")) returned 0x20 [0165.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x20) returned 0 [0165.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.152] GetLastError () returned 0x5 [0165.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x20) returned 0 [0165.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bad8) returned 1 Thread: id = 3088 os_tid = 0x2bc8 [0164.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav")) returned 0x20 [0165.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x20) returned 0 [0165.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.671] GetLastError () returned 0x5 [0165.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x20) returned 0 [0165.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a458) returned 1 Thread: id = 3089 os_tid = 0x2bcc [0164.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav")) returned 0x20 [0165.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0165.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.674] GetLastError () returned 0x5 [0165.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0165.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b5d8) returned 1 Thread: id = 3090 os_tid = 0x2bd0 [0164.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf")) returned 0x20 [0164.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0164.149] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.149] GetLastError () returned 0x5 [0164.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0164.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40900) returned 1 Thread: id = 3091 os_tid = 0x2bd4 [0164.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf")) returned 0x20 [0164.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0164.153] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.153] GetLastError () returned 0x5 [0164.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0164.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da408) returned 1 Thread: id = 3092 os_tid = 0x2bd8 [0164.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf")) returned 0x20 [0164.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0164.155] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.156] GetLastError () returned 0x5 [0164.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0164.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41310) returned 1 Thread: id = 3093 os_tid = 0x2bdc [0164.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf")) returned 0x20 [0164.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.158] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.158] GetLastError () returned 0x5 [0164.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41538) returned 1 Thread: id = 3094 os_tid = 0x2be0 [0164.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf")) returned 0x20 [0164.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0164.160] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.160] GetLastError () returned 0x5 [0164.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0164.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d416a8) returned 1 Thread: id = 3095 os_tid = 0x2be4 [0164.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf")) returned 0x20 [0164.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.162] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.163] GetLastError () returned 0x5 [0164.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ee0) returned 1 Thread: id = 3096 os_tid = 0x2be8 [0164.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf")) returned 0x20 [0164.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0164.165] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.165] GetLastError () returned 0x5 [0164.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0164.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cbc8) returned 1 Thread: id = 3097 os_tid = 0x2bec [0164.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf")) returned 0x20 [0164.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0164.167] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.167] GetLastError () returned 0x5 [0164.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0164.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d10d0) returned 1 Thread: id = 3098 os_tid = 0x2bf0 [0164.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg")) returned 0x20 [0164.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.171] GetLastError () returned 0x5 [0164.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 3099 os_tid = 0x2bf4 [0164.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp")) returned 0x20 [0164.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.173] GetLastError () returned 0x5 [0164.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a168) returned 1 Thread: id = 3100 os_tid = 0x2bf8 [0164.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg")) returned 0x20 [0164.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg", dwFileAttributes=0x20) returned 0 [0164.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.181] GetLastError () returned 0x5 [0164.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg", dwFileAttributes=0x20) returned 0 [0164.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 Thread: id = 3101 os_tid = 0x2bfc [0164.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg")) returned 0x20 [0164.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg", dwFileAttributes=0x20) returned 0 [0164.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.186] GetLastError () returned 0x5 [0164.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg", dwFileAttributes=0x20) returned 0 [0164.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 Thread: id = 3102 os_tid = 0x2c00 [0164.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp")) returned 0x20 [0164.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp", dwFileAttributes=0x20) returned 0 [0164.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.189] GetLastError () returned 0x5 [0164.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp", dwFileAttributes=0x20) returned 0 [0164.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64288) returned 1 Thread: id = 3103 os_tid = 0x2c04 [0164.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer")) returned 0x20 [0164.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x20) returned 0 [0164.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.193] GetLastError () returned 0x5 [0164.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x20) returned 0 [0164.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80208d0) returned 1 Thread: id = 3104 os_tid = 0x2c08 [0164.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam")) returned 0x20 [0164.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM", dwFileAttributes=0x20) returned 0 [0164.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.197] GetLastError () returned 0x5 [0164.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM", dwFileAttributes=0x20) returned 0 [0164.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb13d8) returned 1 Thread: id = 3105 os_tid = 0x2c0c [0164.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae")) returned 0x20 [0164.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x20) returned 0 [0164.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.207] GetLastError () returned 0x5 [0164.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x20) returned 0 [0164.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a08) returned 1 Thread: id = 3106 os_tid = 0x2c10 [0164.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam")) returned 0x20 [0164.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM", dwFileAttributes=0x20) returned 0 [0164.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.211] GetLastError () returned 0x5 [0164.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM", dwFileAttributes=0x20) returned 0 [0164.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2ae8) returned 1 Thread: id = 3107 os_tid = 0x2c14 [0164.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae")) returned 0x20 [0165.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x20) returned 0 [0165.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.540] GetLastError () returned 0x5 [0165.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x20) returned 0 [0165.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1d68) returned 1 Thread: id = 3108 os_tid = 0x2c18 [0164.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae")) returned 0x20 [0165.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x20) returned 0 [0165.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.681] GetLastError () returned 0x5 [0165.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x20) returned 0 [0165.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2038) returned 1 Thread: id = 3109 os_tid = 0x2c1c [0164.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae")) returned 0x20 [0165.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x20) returned 0 [0165.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.682] GetLastError () returned 0x5 [0165.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x20) returned 0 [0165.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2428) returned 1 Thread: id = 3110 os_tid = 0x2c20 [0164.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae")) returned 0x20 [0165.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x20) returned 0 [0165.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.683] GetLastError () returned 0x5 [0165.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x20) returned 0 [0165.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2398) returned 1 Thread: id = 3111 os_tid = 0x2c24 [0164.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae")) returned 0x20 [0165.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x20) returned 0 [0165.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.684] GetLastError () returned 0x5 [0165.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x20) returned 0 [0165.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb24b8) returned 1 Thread: id = 3112 os_tid = 0x2c28 [0164.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam")) returned 0x20 [0165.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x20) returned 0 [0165.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.685] GetLastError () returned 0x5 [0165.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x20) returned 0 [0165.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 3113 os_tid = 0x2c2c [0164.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae")) returned 0x20 [0165.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x20) returned 0 [0165.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.687] GetLastError () returned 0x5 [0165.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x20) returned 0 [0165.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb25d8) returned 1 Thread: id = 3114 os_tid = 0x2c30 [0164.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam")) returned 0x20 [0165.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM", dwFileAttributes=0x20) returned 0 [0165.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.170] GetLastError () returned 0x5 [0165.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM", dwFileAttributes=0x20) returned 0 [0165.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb18e8) returned 1 Thread: id = 3115 os_tid = 0x2c34 [0164.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam")) returned 0x20 [0165.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM", dwFileAttributes=0x20) returned 0 [0165.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.679] GetLastError () returned 0x5 [0165.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM", dwFileAttributes=0x20) returned 0 [0165.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2548) returned 1 Thread: id = 3116 os_tid = 0x2c38 [0164.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80208d0 [0164.221] wcscpy (in: _Dest=0x80208d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0164.221] wcscat (in: _Dest=0x80208d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0164.221] wcscat (in: _Dest=0x80208d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*" [0164.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0164.221] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0164.918] wcscmp (_String1=".", _String2=".") returned 0 [0164.918] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.918] wcscmp (_String1="..", _String2=".") returned 1 [0164.918] wcscmp (_String1="..", _String2="..") returned 0 [0164.918] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fca670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0164.918] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0164.918] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0164.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x2f97f0 [0164.918] wcscpy (in: _Dest=0x2f97f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0164.918] wcscat (in: _Dest=0x2f97f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0164.918] wcscat (in: _Dest=0x2f97f0, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" [0165.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2f97f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x287c [0165.913] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fcf490, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0165.913] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0165.913] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0165.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2f93d0 [0165.913] wcscpy (in: _Dest=0x2f93d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0165.913] wcscat (in: _Dest=0x2f93d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0165.913] wcscat (in: _Dest=0x2f93d0, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" [0165.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2f93d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x280c [0165.914] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fd42b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fd90d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0165.914] wcscmp (_String1="main.html", _String2=".") returned 1 [0165.915] wcscmp (_String1="main.html", _String2="..") returned 1 [0165.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e25340 [0165.915] wcscpy (in: _Dest=0x3e25340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0165.915] wcscat (in: _Dest=0x3e25340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0165.915] wcscat (in: _Dest=0x3e25340, _Source="main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" [0165.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e25340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2808 [0165.916] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fdb7e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fddef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0165.916] wcscmp (_String1="main.js", _String2=".") returned 1 [0165.916] wcscmp (_String1="main.js", _String2="..") returned 1 [0165.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e25040 [0165.916] wcscpy (in: _Dest=0x3e25040, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0165.916] wcscat (in: _Dest=0x3e25040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0165.916] wcscat (in: _Dest=0x3e25040, _Source="main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" [0165.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e25040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2804 [0165.917] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fe2d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe615d3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0165.917] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0165.917] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0165.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef4f70 [0165.917] wcscpy (in: _Dest=0x3ef4f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0165.917] wcscat (in: _Dest=0x3ef4f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0165.918] wcscat (in: _Dest=0x3ef4f70, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" [0165.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef4f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27fc [0165.919] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e1cb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc3140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc3140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0165.919] wcscmp (_String1="_locales", _String2=".") returned 1 [0165.919] wcscmp (_String1="_locales", _String2="..") returned 1 [0165.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e25240 [0165.919] wcscpy (in: _Dest=0x3e25240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0165.919] wcscat (in: _Dest=0x3e25240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0165.919] wcscat (in: _Dest=0x3e25240, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0165.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e25240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c8 [0165.924] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0165.924] wcscmp (_String1="_metadata", _String2=".") returned 1 [0165.924] wcscmp (_String1="_metadata", _String2="..") returned 1 [0165.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e24f40 [0165.924] wcscpy (in: _Dest=0x3e24f40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0165.924] wcscat (in: _Dest=0x3e24f40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0165.924] wcscat (in: _Dest=0x3e24f40, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0165.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e24f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f8 [0165.925] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0165.925] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0165.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0165.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80208d0) returned 1 [0165.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80209c0) returned 1 Thread: id = 3117 os_tid = 0x2c3c [0164.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a168 [0164.225] wcscpy (in: _Dest=0x3e3a168, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0164.226] wcscat (in: _Dest=0x3e3a168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0164.226] wcscat (in: _Dest=0x3e3a168, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*" [0164.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0164.226] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65fae00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65fae00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098dd0 [0164.226] wcscmp (_String1=".", _String2=".") returned 0 [0164.226] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65fae00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65fae00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.226] wcscmp (_String1="..", _String2=".") returned 1 [0164.226] wcscmp (_String1="..", _String2="..") returned 0 [0164.226] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.0.0.6_0", cAlternateFileName="000~1.6_0")) returned 1 [0164.226] wcscmp (_String1="0.0.0.6_0", _String2=".") returned 1 [0164.226] wcscmp (_String1="0.0.0.6_0", _String2="..") returned 1 [0164.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dada38 [0164.226] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0164.226] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0164.227] wcscat (in: _Dest=0x3dada38, _Source="0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0167.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dada38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0167.097] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0167.097] wcscmp (_String1="0.9_0", _String2=".") returned 1 [0167.097] wcscmp (_String1="0.9_0", _String2="..") returned 1 [0167.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80217d0 [0167.097] wcscpy (in: _Dest=0x80217d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0167.097] wcscat (in: _Dest=0x80217d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0167.097] wcscat (in: _Dest=0x80217d0, _Source="0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0167.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80217d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8 [0167.098] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0167.098] FindClose (in: hFindFile=0x8098dd0 | out: hFindFile=0x8098dd0) returned 1 [0167.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0167.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a168) returned 1 [0167.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 Thread: id = 3118 os_tid = 0x2c40 [0164.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39ce0 [0164.231] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0164.231] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0164.231] wcscat (in: _Dest=0x3e39ce0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*" [0164.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85a10 [0164.231] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f9dc70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ff4960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ff4960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0164.231] wcscmp (_String1=".", _String2=".") returned 0 [0164.231] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f9dc70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ff4960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ff4960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.231] wcscmp (_String1="..", _String2=".") returned 1 [0164.231] wcscmp (_String1="..", _String2="..") returned 0 [0164.231] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c610f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 1 [0164.232] wcscmp (_String1="14.1_0", _String2=".") returned 1 [0164.232] wcscmp (_String1="14.1_0", _String2="..") returned 1 [0164.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x8020ba0 [0164.232] wcscpy (in: _Dest=0x8020ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0164.232] wcscat (in: _Dest=0x8020ba0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0164.232] wcscat (in: _Dest=0x8020ba0, _Source="14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0166.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8020ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2700 [0166.009] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.2_0", cAlternateFileName="")) returned 1 [0166.009] wcscmp (_String1="6.2_0", _String2=".") returned 1 [0166.009] wcscmp (_String1="6.2_0", _String2="..") returned 1 [0166.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8021410 [0166.009] wcscpy (in: _Dest=0x8021410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0166.009] wcscat (in: _Dest=0x8021410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0166.009] wcscat (in: _Dest=0x8021410, _Source="6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0166.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8021410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2534 [0166.011] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.2_0", cAlternateFileName="")) returned 0 [0166.011] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0166.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85a10) returned 1 [0166.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 [0166.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8f08) returned 1 Thread: id = 3119 os_tid = 0x2c44 [0164.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a7c0 [0164.234] wcscpy (in: _Dest=0x3e3a7c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0164.234] wcscat (in: _Dest=0x3e3a7c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0164.234] wcscat (in: _Dest=0x3e3a7c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*" [0164.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0164.234] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe509e200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe853dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe853dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0164.234] wcscmp (_String1=".", _String2=".") returned 0 [0164.234] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe509e200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe853dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe853dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.234] wcscmp (_String1="..", _String2=".") returned 1 [0164.234] wcscmp (_String1="..", _String2="..") returned 0 [0164.234] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe508f7a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.5_0", cAlternateFileName="4279B3~1.5_0")) returned 1 [0164.234] wcscmp (_String1="4.2.5_0", _String2=".") returned 1 [0164.234] wcscmp (_String1="4.2.5_0", _String2="..") returned 1 [0164.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8020c90 [0164.234] wcscpy (in: _Dest=0x8020c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0164.234] wcscat (in: _Dest=0x8020c90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0164.235] wcscat (in: _Dest=0x8020c90, _Source="4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0165.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8020c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2878 [0165.389] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 1 [0165.389] wcscmp (_String1="4.2.8_0", _String2=".") returned 1 [0165.389] wcscmp (_String1="4.2.8_0", _String2="..") returned 1 [0165.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8021050 [0165.390] wcscpy (in: _Dest=0x8021050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0165.390] wcscat (in: _Dest=0x8021050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0165.390] wcscat (in: _Dest=0x8021050, _Source="4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0165.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8021050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b4 [0165.391] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 0 [0165.391] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0165.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0165.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a7c0) returned 1 [0165.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 3120 os_tid = 0x2c48 [0164.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a6d8 [0164.236] wcscpy (in: _Dest=0x3e3a6d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0164.236] wcscat (in: _Dest=0x3e3a6d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0164.236] wcscat (in: _Dest=0x3e3a6d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*" [0164.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0164.236] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5c801e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c85000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c85000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0165.541] wcscmp (_String1=".", _String2=".") returned 0 [0165.541] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5c801e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c85000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c85000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.541] wcscmp (_String1="..", _String2=".") returned 1 [0165.542] wcscmp (_String1="..", _String2="..") returned 0 [0165.542] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 1 [0165.542] wcscmp (_String1="1.4_0", _String2=".") returned 1 [0165.542] wcscmp (_String1="1.4_0", _String2="..") returned 1 [0165.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8021230 [0165.542] wcscpy (in: _Dest=0x8021230, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0165.542] wcscat (in: _Dest=0x8021230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0165.542] wcscat (in: _Dest=0x8021230, _Source="1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0166.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8021230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c8 [0166.113] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 0 [0166.113] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0166.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0166.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a6d8) returned 1 [0166.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 3121 os_tid = 0x2c4c [0164.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a8a8 [0164.237] wcscpy (in: _Dest=0x3e3a8a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0164.237] wcscat (in: _Dest=0x3e3a8a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\" [0164.237] wcscat (in: _Dest=0x3e3a8a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*" [0164.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d852d8 [0164.237] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5427e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe542cc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe542cc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80992d0 [0164.856] wcscmp (_String1=".", _String2=".") returned 0 [0164.856] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5427e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe542cc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe542cc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.856] wcscmp (_String1="..", _String2=".") returned 1 [0164.856] wcscmp (_String1="..", _String2="..") returned 0 [0164.856] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 1 [0164.856] wcscmp (_String1="1.0.0.2_0", _String2=".") returned 1 [0164.857] wcscmp (_String1="1.0.0.2_0", _String2="..") returned 1 [0164.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadc28 [0164.857] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0164.857] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\" [0164.857] wcscat (in: _Dest=0x3dadc28, _Source="1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0167.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dadc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a4 [0167.110] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 0 [0167.110] FindClose (in: hFindFile=0x80992d0 | out: hFindFile=0x80992d0) returned 1 [0167.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852d8) returned 1 [0167.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a8a8) returned 1 [0167.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8fe8) returned 1 Thread: id = 3122 os_tid = 0x2c50 [0164.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a990 [0164.238] wcscpy (in: _Dest=0x3e3a990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0164.238] wcscat (in: _Dest=0x3e3a990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0164.238] wcscat (in: _Dest=0x3e3a990, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*" [0164.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86880 [0164.239] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efa340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b60b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b60b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0164.857] wcscmp (_String1=".", _String2=".") returned 0 [0164.857] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efa340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b60b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b60b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.857] wcscmp (_String1="..", _String2=".") returned 1 [0164.857] wcscmp (_String1="..", _String2="..") returned 0 [0164.857] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7_0", cAlternateFileName="")) returned 1 [0164.857] wcscmp (_String1="7_0", _String2=".") returned 1 [0164.857] wcscmp (_String1="7_0", _String2="..") returned 1 [0164.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3afe8 [0164.857] wcscpy (in: _Dest=0x3e3afe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0164.858] wcscat (in: _Dest=0x3e3afe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0164.858] wcscat (in: _Dest=0x3e3afe8, _Source="7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0167.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e3afe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0167.112] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1 [0167.112] wcscmp (_String1="8.1_0", _String2=".") returned 1 [0167.112] wcscmp (_String1="8.1_0", _String2="..") returned 1 [0167.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80218c0 [0167.112] wcscpy (in: _Dest=0x80218c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0167.112] wcscat (in: _Dest=0x80218c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0167.112] wcscat (in: _Dest=0x80218c0, _Source="8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0167.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80218c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0167.113] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 0 [0167.113] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0167.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86880) returned 1 [0167.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a990) returned 1 [0167.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c90c8) returned 1 Thread: id = 3123 os_tid = 0x2c54 [0164.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e25740 [0164.240] wcscpy (in: _Dest=0x3e25740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0164.240] wcscat (in: _Dest=0x3e25740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0164.240] wcscat (in: _Dest=0x3e25740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*" [0164.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0164.240] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099410 [0164.997] wcscmp (_String1=".", _String2=".") returned 0 [0164.997] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.997] wcscmp (_String1="..", _String2=".") returned 1 [0164.997] wcscmp (_String1="..", _String2="..") returned 0 [0164.997] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7d70bc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0164.998] wcscmp (_String1="000003.log", _String2=".") returned 1 [0164.998] wcscmp (_String1="000003.log", _String2="..") returned 1 [0164.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec710 [0164.998] wcscpy (in: _Dest=0x3dec710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0164.998] wcscat (in: _Dest=0x3dec710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0164.998] wcscat (in: _Dest=0x3dec710, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" [0167.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dec710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c4 [0167.212] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d4250, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0167.212] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0167.212] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0167.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deb9f0 [0167.212] wcscpy (in: _Dest=0x3deb9f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0167.212] wcscat (in: _Dest=0x3deb9f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0167.212] wcscat (in: _Dest=0x3deb9f0, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" [0167.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3deb9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0167.213] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d1b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0167.213] wcscmp (_String1="LOCK", _String2=".") returned 1 [0167.213] wcscmp (_String1="LOCK", _String2="..") returned 1 [0167.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef4d60 [0167.213] wcscpy (in: _Dest=0x3ef4d60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0167.213] wcscat (in: _Dest=0x3ef4d60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0167.213] wcscat (in: _Dest=0x3ef4d60, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" [0167.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef4d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0167.214] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0167.214] wcscmp (_String1="LOG", _String2=".") returned 1 [0167.215] wcscmp (_String1="LOG", _String2="..") returned 1 [0167.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5078 [0167.215] wcscpy (in: _Dest=0x3ef5078, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0167.215] wcscat (in: _Dest=0x3ef5078, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0167.215] wcscat (in: _Dest=0x3ef5078, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" [0167.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef5078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0167.216] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d1b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0167.216] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0167.216] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0167.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d575f0 [0167.216] wcscpy (in: _Dest=0x3d575f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0167.216] wcscat (in: _Dest=0x3d575f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0167.216] wcscat (in: _Dest=0x3d575f0, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" [0167.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d575f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0167.217] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d1b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0167.217] FindClose (in: hFindFile=0x8099410 | out: hFindFile=0x8099410) returned 1 [0167.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0167.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25740) returned 1 [0167.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24d40) returned 1 Thread: id = 3124 os_tid = 0x2c58 [0164.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf")) returned 0x20 [0164.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF", dwFileAttributes=0x20) returned 0 [0164.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.243] GetLastError () returned 0x5 [0164.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF", dwFileAttributes=0x20) returned 0 [0164.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf3c0) returned 1 Thread: id = 3125 os_tid = 0x2c5c [0164.249] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current")) returned 0x2020 [0166.083] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", dwFileAttributes=0x20) returned 1 [0167.390] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x26e4 [0167.390] GetFileSizeEx (in: hFile=0x26e4, lpFileSize=0xaccf8d0 | out: lpFileSize=0xaccf8d0*=16) returned 1 [0167.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0167.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca328 [0167.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0167.390] NtQuerySystemTime (in: CurrentTime=0xaccf858 | out: CurrentTime=0xaccf858*=132471540355968000) returned 0x0 [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x5e4d500d [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x7df41344 [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x2d33555b [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x3aeedd32 [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x3860f05c [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x7bbe3bab [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x1a47f233 [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x43f957a1 [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x19a2fa91 [0167.390] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x22be0d57 [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x4e4ae1a [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x2b7a0b74 [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x1f08b600 [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x606d4adc [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x79ef02ce [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x50fb38ef [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x633aadbb [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x57d65dda [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x5ab038fa [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x5991a8c [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x1940d03 [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x355b71f5 [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x5dd51a07 [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x792ec6c [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x7888e66f [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x46c06b73 [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x202c2f93 [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x4a492629 [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0xf83bf3d [0167.391] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x24d6a4ea [0167.392] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x79fb4b43 [0167.392] RtlRandomEx (in: Seed=0xaccf850 | out: Seed=0xaccf850) returned 0x20dee29e [0167.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0167.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c38b0 [0167.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0167.402] ReadFile (in: hFile=0x26e4, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xaccf84c, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0xaccf84c*=0x10, lpOverlapped=0x0) returned 1 [0167.404] SetFilePointerEx (in: hFile=0x26e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.404] WriteFile (in: hFile=0x26e4, lpBuffer=0x80cb0c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xaccf850, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesWritten=0xaccf850*=0x10, lpOverlapped=0x0) returned 1 [0168.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0168.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1040 [0168.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0168.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0168.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0168.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0168.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f390c0) returned 1 [0168.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1040 [0168.358] SetFilePointerEx (in: hFile=0x26e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.359] WriteFile (in: hFile=0x26e4, lpBuffer=0x3ef56a8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xaccf8c4, lpOverlapped=0x0 | out: lpBuffer=0x3ef56a8*, lpNumberOfBytesWritten=0xaccf8c4*=0x100, lpOverlapped=0x0) returned 1 [0168.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef56a8) returned 1 [0168.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0168.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0168.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0168.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0168.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca328) returned 1 [0168.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0168.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b08) returned 1 [0168.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81e8f48 [0168.819] wcscpy (in: _Dest=0x81e8f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" [0168.819] wcscat (in: _Dest=0x81e8f48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.f0dbec" [0168.819] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.f0dbec", NtPathName=0xaccf848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c90c8 [0174.884] FlushFileBuffers (hFile=0x26e4) returned 1 [0175.006] CloseHandle (hObject=0x26e4) returned 1 [0175.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81efa58 [0175.753] wcscpy (in: _Dest=0x81efa58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0175.753] wcscat (in: _Dest=0x81efa58, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt" [0175.753] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\f0dbec-readme.txt")) returned 0x2020 [0175.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efa58) returned 1 [0175.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 Thread: id = 3126 os_tid = 0x2c60 [0164.253] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock")) returned 0x2020 [0166.578] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", dwFileAttributes=0x20) returned 1 [0167.446] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2bd8 [0167.446] GetFileSizeEx (in: hFile=0x2bd8, lpFileSize=0xc27fc60 | out: lpFileSize=0xc27fc60*=0) returned 1 [0167.446] FlushFileBuffers (hFile=0x2bd8) returned 1 [0169.353] CloseHandle (hObject=0x2bd8) returned 1 [0169.353] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", dwFileAttributes=0x2020) returned 1 [0184.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 Thread: id = 3127 os_tid = 0x2c64 [0164.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8b88 [0164.253] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" [0164.253] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\" [0164.253] wcscat (in: _Dest=0x2c8b88, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*" [0164.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3caf0 [0164.254] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a8325f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0164.256] wcscmp (_String1=".", _String2=".") returned 0 [0164.256] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a8325f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.256] wcscmp (_String1="..", _String2=".") returned 1 [0164.256] wcscmp (_String1="..", _String2="..") returned 0 [0164.256] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xa770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0164.256] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0164.256] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0164.256] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7b377010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0164.256] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0164.256] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0164.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec080 [0164.256] wcscpy (in: _Dest=0x3dec080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" [0164.256] wcscat (in: _Dest=0x3dec080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\" [0164.256] wcscat (in: _Dest=0x3dec080, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" [0164.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dec080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26b8 [0164.539] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7b377010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0164.539] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0164.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3caf0) returned 1 [0164.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 [0164.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65290) returned 1 Thread: id = 3128 os_tid = 0x2c68 [0164.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml")) returned 0x20 [0164.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0164.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.261] GetLastError () returned 0x5 [0164.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0164.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c91a8) returned 1 Thread: id = 3129 os_tid = 0x2c6c [0164.262] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log")) returned 0x2020 [0166.577] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", dwFileAttributes=0x20) returned 1 [0167.415] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b34 [0167.416] GetFileSizeEx (in: hFile=0x2b34, lpFileSize=0xc0afc50 | out: lpFileSize=0xc0afc50*=141) returned 1 [0167.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0167.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0167.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0167.416] NtQuerySystemTime (in: CurrentTime=0xc0afbd8 | out: CurrentTime=0xc0afbd8*=132471540356124000) returned 0x0 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x3f91fc82 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x290711f6 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x73de07b5 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x1b296c77 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x66784fa3 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x17165f62 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x3a186f77 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x4e55feea [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x4d8ce5e6 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x6cf2bfbb [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x1643e5a3 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x15c59d3a [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x5c6c4d83 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x3ac97e8a [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x65883491 [0167.416] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x1b3513fe [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x1cb200c8 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x41b4f5c5 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x1c4820fb [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x38bf302e [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x2ed58eac [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x5f00ec93 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x3c47b400 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x21fdd4d5 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x28109481 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x67d419f2 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x53cdd4a [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0xd05194 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x7c872428 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x6870db4a [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x466b8a25 [0167.417] RtlRandomEx (in: Seed=0xc0afbd0 | out: Seed=0xc0afbd0) returned 0x3044cf4b [0167.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0167.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0167.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a458 [0167.426] ReadFile (in: hFile=0x2b34, lpBuffer=0x80d28d0, nNumberOfBytesToRead=0x8d, lpNumberOfBytesRead=0xc0afbcc, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesRead=0xc0afbcc*=0x8d, lpOverlapped=0x0) returned 1 [0167.428] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.428] WriteFile (in: hFile=0x2b34, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x8d, lpNumberOfBytesWritten=0xc0afbd0, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0xc0afbd0*=0x8d, lpOverlapped=0x0) returned 1 [0168.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0168.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1720 [0168.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0168.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0168.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0168.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0168.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7580) returned 1 [0168.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x8199b38 [0168.361] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.361] WriteFile (in: hFile=0x2b34, lpBuffer=0x3e25840*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xc0afc44, lpOverlapped=0x0 | out: lpBuffer=0x3e25840*, lpNumberOfBytesWritten=0xc0afc44*=0xf8, lpOverlapped=0x0) returned 1 [0168.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25840) returned 1 [0168.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8199178) returned 1 [0168.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0168.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8199b38) returned 1 [0168.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0168.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0168.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0168.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0168.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3339a8 [0168.908] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" [0168.908] wcscat (in: _Dest=0x3339a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.f0dbec" [0168.908] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.f0dbec", NtPathName=0xc0afbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81ecde8 [0174.768] FlushFileBuffers (hFile=0x2b34) returned 1 [0174.777] CloseHandle (hObject=0x2b34) returned 1 [0174.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81f0688 [0174.778] wcscpy (in: _Dest=0x81f0688, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0174.778] wcscat (in: _Dest=0x81f0688, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt" [0174.779] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\f0dbec-readme.txt")) returned 0x2020 [0174.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0688) returned 1 [0174.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 3130 os_tid = 0x2c70 [0164.263] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001")) returned 0x2020 [0166.577] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0167.430] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2bbc [0167.431] GetFileSizeEx (in: hFile=0x2bbc, lpFileSize=0xc55f7d0 | out: lpFileSize=0xc55f7d0*=41) returned 1 [0167.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0167.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0167.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c748 [0167.431] NtQuerySystemTime (in: CurrentTime=0xc55f758 | out: CurrentTime=0xc55f758*=132471540356280000) returned 0x0 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0xea30fa1 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x3925b33f [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x5a2e0c4b [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x1fa8bc81 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x733f8b49 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x6ed172b [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x7e513e80 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x4b523ab [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x332ea17 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x67042b38 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x3850bc3e [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x68bc8d77 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x38d7fb74 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x4d37624e [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x35983b40 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x33162cb1 [0167.431] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x7806e723 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x1ac91009 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0xee57156 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x620b45fc [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x5fdf3643 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x3429cc4f [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x528ea3a7 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x201adb82 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x6974ae6c [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x13c90242 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x6065c759 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x7a3b53e0 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x693e0e82 [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x4b8a663f [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x68e8674a [0167.432] RtlRandomEx (in: Seed=0xc55f750 | out: Seed=0xc55f750) returned 0x715a435b [0167.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0167.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bc0a0 [0167.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b0c88 [0167.442] ReadFile (in: hFile=0x2bbc, lpBuffer=0x80bc0a0, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0xc55f74c, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesRead=0xc55f74c*=0x29, lpOverlapped=0x0) returned 1 [0167.444] SetFilePointerEx (in: hFile=0x2bbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.444] WriteFile (in: hFile=0x2bbc, lpBuffer=0x80b0c88*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xc55f750, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesWritten=0xc55f750*=0x29, lpOverlapped=0x0) returned 1 [0168.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d70 [0168.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0168.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0168.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0168.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0168.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0168.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6c80) returned 1 [0168.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77d38 [0168.366] SetFilePointerEx (in: hFile=0x2bbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.366] WriteFile (in: hFile=0x2bbc, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xc55f7c4, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xc55f7c4*=0x110, lpOverlapped=0x0) returned 1 [0172.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0172.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0172.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0172.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0172.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0172.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0172.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0172.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0172.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1f90 [0172.292] wcscpy (in: _Dest=0x81f1f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" [0172.292] wcscat (in: _Dest=0x81f1f90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.f0dbec" [0172.292] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.f0dbec", NtPathName=0xc55f748, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0172.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8020c90 [0175.020] FlushFileBuffers (hFile=0x2bbc) returned 1 [0175.116] CloseHandle (hObject=0x2bbc) returned 1 [0175.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81efa58 [0175.948] wcscpy (in: _Dest=0x81efa58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0175.948] wcscat (in: _Dest=0x81efa58, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt" [0175.948] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\f0dbec-readme.txt")) returned 0x2020 [0175.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efa58) returned 1 [0175.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5af8) returned 1 Thread: id = 3131 os_tid = 0x2c74 [0164.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif")) returned 0x20 [0164.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF", dwFileAttributes=0x20) returned 0 [0164.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.264] GetLastError () returned 0x5 [0164.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF", dwFileAttributes=0x20) returned 0 [0164.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 3132 os_tid = 0x2c78 [0164.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf")) returned 0x20 [0164.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF", dwFileAttributes=0x20) returned 0 [0164.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.266] GetLastError () returned 0x5 [0164.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF", dwFileAttributes=0x20) returned 0 [0164.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 3133 os_tid = 0x2c7c [0164.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf")) returned 0x20 [0166.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF", dwFileAttributes=0x20) returned 0 [0166.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.369] GetLastError () returned 0x5 [0167.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF", dwFileAttributes=0x20) returned 0 [0167.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 3134 os_tid = 0x2c80 [0164.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf")) returned 0x20 [0164.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF", dwFileAttributes=0x20) returned 0 [0164.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.861] GetLastError () returned 0x5 [0164.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF", dwFileAttributes=0x20) returned 0 [0164.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 Thread: id = 3135 os_tid = 0x2c84 [0164.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf")) returned 0x20 [0164.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF", dwFileAttributes=0x20) returned 0 [0164.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.862] GetLastError () returned 0x5 [0164.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF", dwFileAttributes=0x20) returned 0 [0164.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 3136 os_tid = 0x2c88 [0164.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor")) returned 0x20 [0164.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR", dwFileAttributes=0x20) returned 0 [0164.274] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.274] GetLastError () returned 0x5 [0164.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR", dwFileAttributes=0x20) returned 0 [0164.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de608) returned 1 Thread: id = 3137 os_tid = 0x2c8c [0164.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor")) returned 0x20 [0164.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR", dwFileAttributes=0x20) returned 0 [0164.279] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.280] GetLastError () returned 0x5 [0164.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR", dwFileAttributes=0x20) returned 0 [0164.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d19b8) returned 1 Thread: id = 3138 os_tid = 0x2c90 [0164.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor")) returned 0x20 [0164.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR", dwFileAttributes=0x20) returned 0 [0164.287] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.287] GetLastError () returned 0x5 [0164.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR", dwFileAttributes=0x20) returned 0 [0164.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2818) returned 1 Thread: id = 3139 os_tid = 0x2c94 [0164.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor")) returned 0x20 [0164.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR", dwFileAttributes=0x20) returned 0 [0164.298] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.298] GetLastError () returned 0x5 [0164.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR", dwFileAttributes=0x20) returned 0 [0164.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1c48) returned 1 Thread: id = 3140 os_tid = 0x2c98 [0164.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3eb1c48 [0164.310] wcscpy (in: _Dest=0x3eb1c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0164.310] wcscat (in: _Dest=0x3eb1c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\" [0164.310] wcscat (in: _Dest=0x3eb1c48, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*" [0164.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0164.310] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0164.310] wcscmp (_String1=".", _String2=".") returned 0 [0164.311] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.311] wcscmp (_String1="..", _String2=".") returned 1 [0164.311] wcscmp (_String1="..", _String2="..") returned 0 [0164.311] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8b6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0164.311] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0164.311] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0164.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187a00 [0164.311] wcscpy (in: _Dest=0x8187a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0164.311] wcscat (in: _Dest=0x8187a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\" [0164.311] wcscat (in: _Dest=0x8187a00, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" [0164.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2594 [0164.541] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0164.541] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0164.541] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0164.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81878b0 [0164.542] wcscpy (in: _Dest=0x81878b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0164.542] wcscat (in: _Dest=0x81878b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\" [0164.542] wcscat (in: _Dest=0x81878b0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" [0164.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81878b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a1c [0164.543] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0164.543] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0164.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0164.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1c48) returned 1 [0164.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 3141 os_tid = 0x2c9c [0164.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor")) returned 0x20 [0165.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR", dwFileAttributes=0x20) returned 0 [0165.842] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.842] GetLastError () returned 0x5 [0165.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR", dwFileAttributes=0x20) returned 0 [0165.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1738) returned 1 Thread: id = 3142 os_tid = 0x2ca0 [0164.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor")) returned 0x20 [0166.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR", dwFileAttributes=0x20) returned 0 [0166.226] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.226] GetLastError () returned 0x5 [0166.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR", dwFileAttributes=0x20) returned 0 [0166.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb26f8) returned 1 Thread: id = 3143 os_tid = 0x2ca4 [0164.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor")) returned 0x20 [0166.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR", dwFileAttributes=0x20) returned 0 [0166.224] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.224] GetLastError () returned 0x5 [0166.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR", dwFileAttributes=0x20) returned 0 [0166.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2668) returned 1 Thread: id = 3144 os_tid = 0x2ca8 [0164.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx")) returned 0x20 [0164.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.341] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.341] GetLastError () returned 0x5 [0164.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 Thread: id = 3145 os_tid = 0x2cac [0164.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus")) returned 0x20 [0164.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS", dwFileAttributes=0x20) returned 0 [0164.344] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.344] GetLastError () returned 0x5 [0164.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS", dwFileAttributes=0x20) returned 0 [0164.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ded58) returned 1 Thread: id = 3146 os_tid = 0x2cb0 [0164.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus")) returned 0x20 [0166.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS", dwFileAttributes=0x20) returned 0 [0166.283] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.284] GetLastError () returned 0x5 [0166.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS", dwFileAttributes=0x20) returned 0 [0166.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35250) returned 1 Thread: id = 3147 os_tid = 0x2cb4 [0164.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus")) returned 0x20 [0165.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS", dwFileAttributes=0x20) returned 0 [0165.843] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.843] GetLastError () returned 0x5 [0165.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS", dwFileAttributes=0x20) returned 0 [0165.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f360f0) returned 1 Thread: id = 3148 os_tid = 0x2cb8 [0164.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan")) returned 0x20 [0165.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN", dwFileAttributes=0x20) returned 0 [0165.845] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.845] GetLastError () returned 0x5 [0165.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN", dwFileAttributes=0x20) returned 0 [0165.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 Thread: id = 3149 os_tid = 0x2cbc [0164.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan")) returned 0x20 [0166.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN", dwFileAttributes=0x20) returned 0 [0166.229] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.229] GetLastError () returned 0x5 [0166.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN", dwFileAttributes=0x20) returned 0 [0166.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35400) returned 1 Thread: id = 3150 os_tid = 0x2cc0 [0164.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan")) returned 0x20 [0166.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN", dwFileAttributes=0x20) returned 0 [0166.228] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.228] GetLastError () returned 0x5 [0166.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN", dwFileAttributes=0x20) returned 0 [0166.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f357f0) returned 1 Thread: id = 3151 os_tid = 0x2cc4 [0164.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf")) returned 0x20 [0164.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0164.361] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.362] GetLastError () returned 0x5 [0164.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0164.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d418) returned 1 Thread: id = 3152 os_tid = 0x2cc8 [0164.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf")) returned 0x20 [0164.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0164.366] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.366] GetLastError () returned 0x5 [0164.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0164.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1168) returned 1 Thread: id = 3153 os_tid = 0x2ccc [0164.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini")) returned 0x20 [0166.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.294] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.294] GetLastError () returned 0x5 [0166.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", dwFileAttributes=0x20) returned 0 [0166.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 3154 os_tid = 0x2cd0 [0164.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html")) returned 0x20 [0166.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", dwFileAttributes=0x20) returned 0 [0166.296] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.296] GetLastError () returned 0x5 [0166.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", dwFileAttributes=0x20) returned 0 [0166.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36060) returned 1 Thread: id = 3155 os_tid = 0x2cd4 [0164.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf")) returned 0x20 [0168.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0168.259] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.259] GetLastError () returned 0x5 [0168.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0168.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40848) returned 1 Thread: id = 3156 os_tid = 0x2cd8 [0164.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf")) returned 0x20 [0166.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0168.136] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.136] GetLastError () returned 0x5 [0168.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0168.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da568) returned 1 Thread: id = 3157 os_tid = 0x2cdc [0164.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf")) returned 0x20 [0166.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0167.564] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.568] GetLastError () returned 0x5 [0167.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0167.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1648) returned 1 Thread: id = 3158 os_tid = 0x2ce0 [0164.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf")) returned 0x20 [0168.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0168.265] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.271] GetLastError () returned 0x5 [0168.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0168.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1870) returned 1 Thread: id = 3159 os_tid = 0x2ce4 [0164.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf")) returned 0x20 [0168.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0168.260] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.260] GetLastError () returned 0x5 [0168.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0168.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1b50) returned 1 Thread: id = 3160 os_tid = 0x2ce8 [0164.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf")) returned 0x20 [0168.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0168.257] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.257] GetLastError () returned 0x5 [0168.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0168.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7d50) returned 1 Thread: id = 3161 os_tid = 0x2cec [0164.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5ee0 [0164.381] wcscpy (in: _Dest=0x81d5ee0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol" [0164.381] wcscat (in: _Dest=0x81d5ee0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\" [0164.381] wcscat (in: _Dest=0x81d5ee0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\*" [0164.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0164.381] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.801] wcscmp (_String1=".", _String2=".") returned 0 [0166.801] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.801] wcscmp (_String1="..", _String2=".") returned 1 [0166.801] wcscmp (_String1="..", _String2="..") returned 0 [0166.802] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.802] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0166.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ee0) returned 1 [0166.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7bc0) returned 1 Thread: id = 3162 os_tid = 0x2cf0 [0164.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81d5a30 [0164.382] wcscpy (in: _Dest=0x81d5a30, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" [0164.382] wcscat (in: _Dest=0x81d5a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\" [0164.382] wcscat (in: _Dest=0x81d5a30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*" [0164.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b548 [0164.382] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.800] wcscmp (_String1=".", _String2=".") returned 0 [0166.800] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.800] wcscmp (_String1="..", _String2=".") returned 1 [0166.800] wcscmp (_String1="..", _String2="..") returned 0 [0166.800] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.800] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b548) returned 1 [0166.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a30) returned 1 [0166.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7c88) returned 1 Thread: id = 3163 os_tid = 0x2cf4 [0164.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e8458 [0164.386] wcscpy (in: _Dest=0x81e8458, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum" [0164.386] wcscat (in: _Dest=0x81e8458, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\" [0164.386] wcscat (in: _Dest=0x81e8458, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\*" [0164.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0164.386] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.798] wcscmp (_String1=".", _String2=".") returned 0 [0166.798] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.798] wcscmp (_String1="..", _String2=".") returned 1 [0166.798] wcscmp (_String1="..", _String2="..") returned 0 [0166.798] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.798] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0166.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8458) returned 1 [0166.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7e18) returned 1 Thread: id = 3164 os_tid = 0x2cf8 [0164.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e8520 [0164.387] wcscpy (in: _Dest=0x81e8520, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus" [0164.387] wcscat (in: _Dest=0x81e8520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\" [0164.387] wcscat (in: _Dest=0x81e8520, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\*" [0164.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0164.387] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.797] wcscmp (_String1=".", _String2=".") returned 0 [0166.797] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.797] wcscmp (_String1="..", _String2=".") returned 1 [0166.797] wcscmp (_String1="..", _String2="..") returned 0 [0166.797] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.797] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0166.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8520) returned 1 [0166.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7ee0) returned 1 Thread: id = 3165 os_tid = 0x2cfc [0164.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e85e8 [0164.387] wcscpy (in: _Dest=0x81e85e8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr" [0164.387] wcscat (in: _Dest=0x81e85e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\" [0164.387] wcscat (in: _Dest=0x81e85e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\*" [0164.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0164.388] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.795] wcscmp (_String1=".", _String2=".") returned 0 [0166.795] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.795] wcscmp (_String1="..", _String2=".") returned 1 [0166.795] wcscmp (_String1="..", _String2="..") returned 0 [0166.796] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.796] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0166.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e85e8) returned 1 [0166.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7fa8) returned 1 Thread: id = 3166 os_tid = 0x2d00 [0164.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e86b0 [0164.389] wcscpy (in: _Dest=0x81e86b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo" [0164.389] wcscat (in: _Dest=0x81e86b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\" [0164.389] wcscat (in: _Dest=0x81e86b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\*" [0164.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091550 [0164.389] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\*", lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.793] wcscmp (_String1=".", _String2=".") returned 0 [0166.793] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.794] wcscmp (_String1="..", _String2=".") returned 1 [0166.794] wcscmp (_String1="..", _String2="..") returned 0 [0166.794] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.794] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091550) returned 1 [0166.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e86b0) returned 1 [0166.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8070) returned 1 Thread: id = 3167 os_tid = 0x2d04 [0164.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e8778 [0164.390] wcscpy (in: _Dest=0x81e8778, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" [0164.390] wcscat (in: _Dest=0x81e8778, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\" [0164.390] wcscat (in: _Dest=0x81e8778, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*" [0164.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091080 [0164.390] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.792] wcscmp (_String1=".", _String2=".") returned 0 [0166.792] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.792] wcscmp (_String1="..", _String2=".") returned 1 [0166.792] wcscmp (_String1="..", _String2="..") returned 0 [0166.792] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.792] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091080) returned 1 [0166.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8778) returned 1 [0166.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8138) returned 1 Thread: id = 3168 os_tid = 0x2d08 [0164.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e8840 [0164.391] wcscpy (in: _Dest=0x81e8840, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" [0164.391] wcscat (in: _Dest=0x81e8840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\" [0164.391] wcscat (in: _Dest=0x81e8840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*" [0164.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ea00 [0164.391] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.783] wcscmp (_String1=".", _String2=".") returned 0 [0166.783] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.784] wcscmp (_String1="..", _String2=".") returned 1 [0166.784] wcscmp (_String1="..", _String2="..") returned 0 [0166.784] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.784] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ea00) returned 1 [0166.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8840) returned 1 [0166.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8200) returned 1 Thread: id = 3169 os_tid = 0x2d0c [0164.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x81e8908 [0164.391] wcscpy (in: _Dest=0x81e8908, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur" [0164.391] wcscat (in: _Dest=0x81e8908, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\" [0164.392] wcscat (in: _Dest=0x81e8908, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\*" [0164.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80912e8 [0164.392] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\*", lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.782] wcscmp (_String1=".", _String2=".") returned 0 [0166.782] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.782] wcscmp (_String1="..", _String2=".") returned 1 [0166.782] wcscmp (_String1="..", _String2="..") returned 0 [0166.782] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.782] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0166.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80912e8) returned 1 [0166.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8908) returned 1 [0166.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e82c8) returned 1 Thread: id = 3170 os_tid = 0x2d10 [0164.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt")) returned 0x20 [0164.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", dwFileAttributes=0x20) returned 0 [0164.394] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.394] GetLastError () returned 0x5 [0164.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", dwFileAttributes=0x20) returned 0 [0164.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b28) returned 1 Thread: id = 3171 os_tid = 0x2d14 [0164.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt")) returned 0x20 [0164.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", dwFileAttributes=0x20) returned 0 [0164.396] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.397] GetLastError () returned 0x5 [0164.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", dwFileAttributes=0x20) returned 0 [0164.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1c08) returned 1 Thread: id = 3172 os_tid = 0x2d18 [0164.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt")) returned 0x20 [0164.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", dwFileAttributes=0x20) returned 0 [0164.398] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.398] GetLastError () returned 0x5 [0164.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", dwFileAttributes=0x20) returned 0 [0164.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfac8) returned 1 Thread: id = 3173 os_tid = 0x2d1c [0164.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt")) returned 0x20 [0164.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", dwFileAttributes=0x20) returned 0 [0164.400] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.401] GetLastError () returned 0x5 [0164.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", dwFileAttributes=0x20) returned 0 [0164.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df888) returned 1 Thread: id = 3174 os_tid = 0x2d20 [0164.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt")) returned 0x20 [0164.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", dwFileAttributes=0x20) returned 0 [0164.402] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.403] GetLastError () returned 0x5 [0164.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", dwFileAttributes=0x20) returned 0 [0164.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1a98) returned 1 Thread: id = 3175 os_tid = 0x2d24 [0164.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt")) returned 0x20 [0164.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", dwFileAttributes=0x20) returned 0 [0164.405] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.405] GetLastError () returned 0x5 [0164.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", dwFileAttributes=0x20) returned 0 [0164.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e19e0) returned 1 Thread: id = 3176 os_tid = 0x2d28 [0164.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt")) returned 0x20 [0164.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", dwFileAttributes=0x20) returned 0 [0164.407] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.407] GetLastError () returned 0x5 [0164.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", dwFileAttributes=0x20) returned 0 [0164.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfb88) returned 1 Thread: id = 3177 os_tid = 0x2d2c [0164.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt")) returned 0x20 [0164.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", dwFileAttributes=0x20) returned 0 [0164.409] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.409] GetLastError () returned 0x5 [0164.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", dwFileAttributes=0x20) returned 0 [0164.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1e30) returned 1 Thread: id = 3178 os_tid = 0x2d30 [0164.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt")) returned 0x20 [0164.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", dwFileAttributes=0x20) returned 0 [0164.411] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.411] GetLastError () returned 0x5 [0164.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", dwFileAttributes=0x20) returned 0 [0164.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1ee8) returned 1 Thread: id = 3179 os_tid = 0x2d34 [0164.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt")) returned 0x20 [0164.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", dwFileAttributes=0x20) returned 0 [0164.417] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.417] GetLastError () returned 0x5 [0164.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", dwFileAttributes=0x20) returned 0 [0164.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df7c8) returned 1 Thread: id = 3180 os_tid = 0x2d38 [0164.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt")) returned 0x20 [0164.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", dwFileAttributes=0x20) returned 0 [0164.421] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.421] GetLastError () returned 0x5 [0164.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", dwFileAttributes=0x20) returned 0 [0164.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfa08) returned 1 Thread: id = 3181 os_tid = 0x2d3c [0164.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x8187370 [0164.423] wcscpy (in: _Dest=0x8187370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0164.423] wcscat (in: _Dest=0x8187370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0164.423] wcscat (in: _Dest=0x8187370, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*" [0164.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80917b8 [0164.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099310 [0165.164] wcscmp (_String1=".", _String2=".") returned 0 [0165.164] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.164] wcscmp (_String1="..", _String2=".") returned 1 [0165.164] wcscmp (_String1="..", _String2="..") returned 0 [0165.164] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2664, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0165.164] wcscmp (_String1="CP1250.TXT", _String2=".") returned 1 [0165.164] wcscmp (_String1="CP1250.TXT", _String2="..") returned 1 [0165.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x81e1ee8 [0165.164] wcscpy (in: _Dest=0x81e1ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0165.164] wcscat (in: _Dest=0x81e1ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0165.164] wcscat (in: _Dest=0x81e1ee8, _Source="CP1250.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" [0169.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c4 [0169.144] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0169.144] wcscmp (_String1="CP1251.TXT", _String2=".") returned 1 [0169.144] wcscmp (_String1="CP1251.TXT", _String2="..") returned 1 [0169.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7098 [0169.144] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.144] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.144] wcscat (in: _Dest=0x2ff7098, _Source="CP1251.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" [0169.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a7c [0169.145] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0169.145] wcscmp (_String1="CP1252.TXT", _String2=".") returned 1 [0169.145] wcscmp (_String1="CP1252.TXT", _String2="..") returned 1 [0169.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6740 [0169.145] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.145] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.145] wcscat (in: _Dest=0x2ff6740, _Source="CP1252.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" [0169.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2538 [0169.146] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2414, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0169.146] wcscmp (_String1="CP1253.TXT", _String2=".") returned 1 [0169.146] wcscmp (_String1="CP1253.TXT", _String2="..") returned 1 [0169.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff63a8 [0169.146] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.146] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.146] wcscat (in: _Dest=0x2ff63a8, _Source="CP1253.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" [0169.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a78 [0169.147] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0169.147] wcscmp (_String1="CP1254.TXT", _String2=".") returned 1 [0169.147] wcscmp (_String1="CP1254.TXT", _String2="..") returned 1 [0169.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6e70 [0169.147] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.148] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.148] wcscat (in: _Dest=0x2ff6e70, _Source="CP1254.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" [0169.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2518 [0169.148] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x219a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1255.TXT", cAlternateFileName="")) returned 1 [0169.149] wcscmp (_String1="CP1255.TXT", _String2=".") returned 1 [0169.149] wcscmp (_String1="CP1255.TXT", _String2="..") returned 1 [0169.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6b90 [0169.149] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.149] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.149] wcscat (in: _Dest=0x2ff6b90, _Source="CP1255.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" [0169.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a74 [0169.150] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x22fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1256.TXT", cAlternateFileName="")) returned 1 [0169.150] wcscmp (_String1="CP1256.TXT", _String2=".") returned 1 [0169.150] wcscmp (_String1="CP1256.TXT", _String2="..") returned 1 [0169.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7ef8 [0169.150] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.150] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.150] wcscat (in: _Dest=0x2ff7ef8, _Source="CP1256.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" [0169.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f8 [0169.151] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0169.151] wcscmp (_String1="CP1257.TXT", _String2=".") returned 1 [0169.151] wcscmp (_String1="CP1257.TXT", _String2="..") returned 1 [0169.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff67f8 [0169.151] wcscpy (in: _Dest=0x2ff67f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.151] wcscat (in: _Dest=0x2ff67f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.151] wcscat (in: _Dest=0x2ff67f8, _Source="CP1257.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" [0169.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff67f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a70 [0169.152] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0169.152] wcscmp (_String1="CP1258.TXT", _String2=".") returned 1 [0169.152] wcscmp (_String1="CP1258.TXT", _String2="..") returned 1 [0169.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6c48 [0169.152] wcscpy (in: _Dest=0x2ff6c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.152] wcscat (in: _Dest=0x2ff6c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.152] wcscat (in: _Dest=0x2ff6c48, _Source="CP1258.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" [0169.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2550 [0169.153] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2221, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP874.TXT", cAlternateFileName="")) returned 1 [0169.153] wcscmp (_String1="CP874.TXT", _String2=".") returned 1 [0169.153] wcscmp (_String1="CP874.TXT", _String2="..") returned 1 [0169.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff79f0 [0169.154] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.154] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.154] wcscat (in: _Dest=0x2ff79f0, _Source="CP874.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" [0169.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a4 [0169.157] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c08800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP932.TXT", cAlternateFileName="")) returned 1 [0169.157] wcscmp (_String1="CP932.TXT", _String2=".") returned 1 [0169.157] wcscmp (_String1="CP932.TXT", _String2="..") returned 1 [0169.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6688 [0169.157] wcscpy (in: _Dest=0x2ff6688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.157] wcscat (in: _Dest=0x2ff6688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.157] wcscat (in: _Dest=0x2ff6688, _Source="CP932.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" [0169.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a0 [0169.158] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c08800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xccee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP936.TXT", cAlternateFileName="")) returned 1 [0169.158] wcscmp (_String1="CP936.TXT", _String2=".") returned 1 [0169.158] wcscmp (_String1="CP936.TXT", _String2="..") returned 1 [0169.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6a20 [0169.158] wcscpy (in: _Dest=0x2ff6a20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.158] wcscat (in: _Dest=0x2ff6a20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.158] wcscat (in: _Dest=0x2ff6a20, _Source="CP936.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" [0169.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff6a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2948 [0169.159] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP949.TXT", cAlternateFileName="")) returned 1 [0169.159] wcscmp (_String1="CP949.TXT", _String2=".") returned 1 [0169.159] wcscmp (_String1="CP949.TXT", _String2="..") returned 1 [0169.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff75a0 [0169.159] wcscpy (in: _Dest=0x2ff75a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.159] wcscat (in: _Dest=0x2ff75a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.159] wcscat (in: _Dest=0x2ff75a0, _Source="CP949.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" [0169.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff75a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2944 [0169.160] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 1 [0169.160] wcscmp (_String1="CP950.TXT", _String2=".") returned 1 [0169.160] wcscmp (_String1="CP950.TXT", _String2="..") returned 1 [0169.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7e40 [0169.160] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0169.160] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0169.160] wcscat (in: _Dest=0x2ff7e40, _Source="CP950.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" [0169.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2940 [0169.161] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 0 [0169.161] FindClose (in: hFindFile=0x8099310 | out: hFindFile=0x8099310) returned 1 [0172.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80917b8) returned 1 [0172.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187370) returned 1 [0172.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187b50) returned 1 Thread: id = 3182 os_tid = 0x2d40 [0164.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif")) returned 0x20 [0165.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF", dwFileAttributes=0x20) returned 0 [0165.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.793] GetLastError () returned 0x5 [0165.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF", dwFileAttributes=0x20) returned 0 [0165.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1038) returned 1 Thread: id = 3183 os_tid = 0x2d44 [0164.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif")) returned 0x20 [0165.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF", dwFileAttributes=0x20) returned 0 [0165.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.792] GetLastError () returned 0x5 [0165.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF", dwFileAttributes=0x20) returned 0 [0165.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d14f8) returned 1 Thread: id = 3184 os_tid = 0x2d48 [0164.435] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock")) returned 0x2020 [0164.436] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", dwFileAttributes=0x20) returned 1 [0164.436] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22c4 [0164.436] GetFileSizeEx (in: hFile=0x22c4, lpFileSize=0xe23f890 | out: lpFileSize=0xe23f890*=0) returned 1 [0164.436] FlushFileBuffers (hFile=0x22c4) returned 1 [0166.528] CloseHandle (hObject=0x22c4) returned 1 [0166.528] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", dwFileAttributes=0x2020) returned 1 [0167.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b898) returned 1 Thread: id = 3185 os_tid = 0x2d4c [0164.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx")) returned 0x20 [0164.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx", dwFileAttributes=0x20) returned 0 [0164.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.439] GetLastError () returned 0x5 [0164.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx", dwFileAttributes=0x20) returned 0 [0164.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c78) returned 1 Thread: id = 3186 os_tid = 0x2d50 [0164.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx")) returned 0x20 [0164.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx", dwFileAttributes=0x20) returned 0 [0164.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.441] GetLastError () returned 0x5 [0164.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx", dwFileAttributes=0x20) returned 0 [0164.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81878b0) returned 1 Thread: id = 3187 os_tid = 0x2d54 [0164.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx")) returned 0x20 [0164.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx", dwFileAttributes=0x20) returned 0 [0164.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.443] GetLastError () returned 0x5 [0164.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx", dwFileAttributes=0x20) returned 0 [0164.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81865a8) returned 1 Thread: id = 3188 os_tid = 0x2d58 [0164.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx")) returned 0x20 [0164.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx", dwFileAttributes=0x20) returned 0 [0164.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.448] GetLastError () returned 0x5 [0164.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx", dwFileAttributes=0x20) returned 0 [0164.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d96f8) returned 1 Thread: id = 3189 os_tid = 0x2d5c [0164.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx")) returned 0x20 [0168.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx", dwFileAttributes=0x20) returned 0 [0168.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.740] GetLastError () returned 0x5 [0168.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx", dwFileAttributes=0x20) returned 0 [0168.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188090) returned 1 Thread: id = 3190 os_tid = 0x2d60 [0164.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx")) returned 0x20 [0168.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx", dwFileAttributes=0x20) returned 0 [0168.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.736] GetLastError () returned 0x5 [0168.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx", dwFileAttributes=0x20) returned 0 [0168.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81866f8) returned 1 Thread: id = 3191 os_tid = 0x2d64 [0164.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx")) returned 0x20 [0168.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx", dwFileAttributes=0x20) returned 0 [0168.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.743] GetLastError () returned 0x5 [0168.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx", dwFileAttributes=0x20) returned 0 [0168.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9858) returned 1 Thread: id = 3192 os_tid = 0x2d68 [0164.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx")) returned 0x20 [0166.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx", dwFileAttributes=0x20) returned 0 [0167.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.716] GetLastError () returned 0x5 [0168.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx", dwFileAttributes=0x20) returned 0 [0168.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186b90) returned 1 Thread: id = 3193 os_tid = 0x2d6c [0164.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx")) returned 0x20 [0168.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx", dwFileAttributes=0x20) returned 0 [0168.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.735] GetLastError () returned 0x5 [0168.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx", dwFileAttributes=0x20) returned 0 [0168.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81881e0) returned 1 Thread: id = 3194 os_tid = 0x2d70 [0164.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx")) returned 0x20 [0168.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx", dwFileAttributes=0x20) returned 0 [0168.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.748] GetLastError () returned 0x5 [0168.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx", dwFileAttributes=0x20) returned 0 [0168.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da358) returned 1 Thread: id = 3195 os_tid = 0x2d74 [0164.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx")) returned 0x20 [0168.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx", dwFileAttributes=0x20) returned 0 [0168.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.734] GetLastError () returned 0x5 [0168.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx", dwFileAttributes=0x20) returned 0 [0168.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da988) returned 1 Thread: id = 3196 os_tid = 0x2d78 [0164.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx")) returned 0x20 [0168.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx", dwFileAttributes=0x20) returned 0 [0168.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.732] GetLastError () returned 0x5 [0168.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx", dwFileAttributes=0x20) returned 0 [0168.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187df0) returned 1 Thread: id = 3197 os_tid = 0x2d7c [0164.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx")) returned 0x20 [0168.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx", dwFileAttributes=0x20) returned 0 [0168.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.747] GetLastError () returned 0x5 [0168.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx", dwFileAttributes=0x20) returned 0 [0168.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa38) returned 1 Thread: id = 3198 os_tid = 0x2d80 [0164.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx")) returned 0x20 [0168.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx", dwFileAttributes=0x20) returned 0 [0168.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.731] GetLastError () returned 0x5 [0168.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx", dwFileAttributes=0x20) returned 0 [0168.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a40) returned 1 Thread: id = 3199 os_tid = 0x2d84 [0164.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx")) returned 0x20 [0168.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx", dwFileAttributes=0x20) returned 0 [0168.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.729] GetLastError () returned 0x5 [0168.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx", dwFileAttributes=0x20) returned 0 [0168.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da148) returned 1 Thread: id = 3200 os_tid = 0x2d88 [0164.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx")) returned 0x20 [0168.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx", dwFileAttributes=0x20) returned 0 [0168.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.727] GetLastError () returned 0x5 [0168.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx", dwFileAttributes=0x20) returned 0 [0168.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da1f8) returned 1 Thread: id = 3201 os_tid = 0x2d8c [0164.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx")) returned 0x20 [0168.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx", dwFileAttributes=0x20) returned 0 [0168.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.745] GetLastError () returned 0x5 [0168.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx", dwFileAttributes=0x20) returned 0 [0168.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187220) returned 1 Thread: id = 3202 os_tid = 0x2d90 [0164.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx")) returned 0x20 [0168.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx", dwFileAttributes=0x20) returned 0 [0168.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.726] GetLastError () returned 0x5 [0168.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx", dwFileAttributes=0x20) returned 0 [0168.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187d48) returned 1 Thread: id = 3203 os_tid = 0x2d94 [0164.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx")) returned 0x20 [0168.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx", dwFileAttributes=0x20) returned 0 [0168.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.724] GetLastError () returned 0x5 [0168.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx", dwFileAttributes=0x20) returned 0 [0168.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187fe8) returned 1 Thread: id = 3204 os_tid = 0x2d98 [0164.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx")) returned 0x20 [0168.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx", dwFileAttributes=0x20) returned 0 [0168.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.723] GetLastError () returned 0x5 [0168.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx", dwFileAttributes=0x20) returned 0 [0168.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da098) returned 1 Thread: id = 3205 os_tid = 0x2d9c [0164.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx")) returned 0x20 [0168.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx", dwFileAttributes=0x20) returned 0 [0168.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.722] GetLastError () returned 0x5 [0168.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx", dwFileAttributes=0x20) returned 0 [0168.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d290) returned 1 Thread: id = 3206 os_tid = 0x2da0 [0164.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx")) returned 0x20 [0168.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx", dwFileAttributes=0x20) returned 0 [0168.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.744] GetLastError () returned 0x5 [0168.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx", dwFileAttributes=0x20) returned 0 [0168.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d140) returned 1 Thread: id = 3207 os_tid = 0x2da4 [0164.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx")) returned 0x20 [0168.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx", dwFileAttributes=0x20) returned 0 [0168.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.721] GetLastError () returned 0x5 [0168.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx", dwFileAttributes=0x20) returned 0 [0168.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d7d0) returned 1 Thread: id = 3208 os_tid = 0x2da8 [0164.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx")) returned 0x20 [0168.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx", dwFileAttributes=0x20) returned 0 [0168.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.719] GetLastError () returned 0x5 [0168.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx", dwFileAttributes=0x20) returned 0 [0168.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cff0) returned 1 Thread: id = 3209 os_tid = 0x2dac [0164.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx")) returned 0x20 [0168.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx", dwFileAttributes=0x20) returned 0 [0168.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.718] GetLastError () returned 0x5 [0168.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx", dwFileAttributes=0x20) returned 0 [0168.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9fe8) returned 1 Thread: id = 3210 os_tid = 0x2db0 [0164.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx")) returned 0x20 [0168.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx", dwFileAttributes=0x20) returned 0 [0168.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.663] GetLastError () returned 0x5 [0168.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx", dwFileAttributes=0x20) returned 0 [0168.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d728) returned 1 Thread: id = 3211 os_tid = 0x2db4 [0164.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx")) returned 0x20 [0168.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx", dwFileAttributes=0x20) returned 0 [0168.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.741] GetLastError () returned 0x5 [0168.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx", dwFileAttributes=0x20) returned 0 [0168.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ddb8) returned 1 Thread: id = 3212 os_tid = 0x2db8 [0164.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx")) returned 0x20 [0168.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx", dwFileAttributes=0x20) returned 0 [0168.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.739] GetLastError () returned 0x5 [0168.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx", dwFileAttributes=0x20) returned 0 [0168.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dd10) returned 1 Thread: id = 3213 os_tid = 0x2dbc [0164.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx")) returned 0x20 [0168.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx", dwFileAttributes=0x20) returned 0 [0168.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.738] GetLastError () returned 0x5 [0168.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx", dwFileAttributes=0x20) returned 0 [0168.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dc68) returned 1 Thread: id = 3214 os_tid = 0x2dc0 [0164.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx")) returned 0x20 [0164.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.931] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.931] GetLastError () returned 0x5 [0164.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187568) returned 1 Thread: id = 3215 os_tid = 0x2dc4 [0164.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx")) returned 0x20 [0164.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.932] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.933] GetLastError () returned 0x5 [0164.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81865a8) returned 1 Thread: id = 3216 os_tid = 0x2dc8 [0164.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv")) returned 0x20 [0164.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", dwFileAttributes=0x20) returned 0 [0164.934] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.934] GetLastError () returned 0x5 [0164.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", dwFileAttributes=0x20) returned 0 [0164.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deba8) returned 1 Thread: id = 3217 os_tid = 0x2dcc [0164.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv")) returned 0x20 [0164.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", dwFileAttributes=0x20) returned 0 [0164.936] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.936] GetLastError () returned 0x5 [0164.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", dwFileAttributes=0x20) returned 0 [0164.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ded58) returned 1 Thread: id = 3218 os_tid = 0x2dd0 [0164.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv")) returned 0x20 [0164.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", dwFileAttributes=0x20) returned 0 [0164.937] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.938] GetLastError () returned 0x5 [0164.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", dwFileAttributes=0x20) returned 0 [0164.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de608) returned 1 Thread: id = 3219 os_tid = 0x2dd4 [0164.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml")) returned 0x20 [0164.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", dwFileAttributes=0x20) returned 0 [0164.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.939] GetLastError () returned 0x5 [0164.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", dwFileAttributes=0x20) returned 0 [0164.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65878) returned 1 Thread: id = 3220 os_tid = 0x2dd8 [0164.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl")) returned 0x20 [0164.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL", dwFileAttributes=0x20) returned 0 [0164.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.941] GetLastError () returned 0x5 [0164.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL", dwFileAttributes=0x20) returned 0 [0164.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 Thread: id = 3221 os_tid = 0x2ddc [0164.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb")) returned 0x20 [0164.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB", dwFileAttributes=0x20) returned 0 [0164.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.943] GetLastError () returned 0x5 [0164.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB", dwFileAttributes=0x20) returned 0 [0164.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bb68) returned 1 Thread: id = 3222 os_tid = 0x2de0 [0164.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest")) returned 0x20 [0164.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest", dwFileAttributes=0x20) returned 0 [0164.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.945] GetLastError () returned 0x5 [0164.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest", dwFileAttributes=0x20) returned 0 [0164.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 Thread: id = 3223 os_tid = 0x2de4 [0164.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf")) returned 0x20 [0171.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF", dwFileAttributes=0x20) returned 0 [0171.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.785] GetLastError () returned 0x5 [0171.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF", dwFileAttributes=0x20) returned 0 [0171.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c270) returned 1 Thread: id = 3224 os_tid = 0x2de8 [0164.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd")) returned 0x20 [0172.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD", dwFileAttributes=0x20) returned 0 [0172.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.382] GetLastError () returned 0x5 [0172.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD", dwFileAttributes=0x20) returned 0 [0172.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bbe0) returned 1 Thread: id = 3225 os_tid = 0x2dec [0164.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub")) returned 0x20 [0166.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub", dwFileAttributes=0x20) returned 0 [0166.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.729] GetLastError () returned 0x5 [0167.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub", dwFileAttributes=0x20) returned 0 [0167.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23cc0) returned 1 Thread: id = 3226 os_tid = 0x2df0 [0164.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub")) returned 0x20 [0172.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub", dwFileAttributes=0x20) returned 0 [0172.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.388] GetLastError () returned 0x5 [0172.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub", dwFileAttributes=0x20) returned 0 [0172.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24a40) returned 1 Thread: id = 3227 os_tid = 0x2df4 [0164.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub")) returned 0x20 [0172.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub", dwFileAttributes=0x20) returned 0 [0172.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.390] GetLastError () returned 0x5 [0172.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub", dwFileAttributes=0x20) returned 0 [0172.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24340) returned 1 Thread: id = 3228 os_tid = 0x2df8 [0164.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub")) returned 0x20 [0172.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub", dwFileAttributes=0x20) returned 0 [0172.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.386] GetLastError () returned 0x5 [0172.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub", dwFileAttributes=0x20) returned 0 [0172.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23fc0) returned 1 Thread: id = 3229 os_tid = 0x2dfc [0164.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub")) returned 0x20 [0167.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub", dwFileAttributes=0x20) returned 0 [0168.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.960] GetLastError () returned 0x5 [0171.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub", dwFileAttributes=0x20) returned 0 [0171.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23ec0) returned 1 Thread: id = 3230 os_tid = 0x2e00 [0164.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub")) returned 0x20 [0168.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub", dwFileAttributes=0x20) returned 0 [0168.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.914] GetLastError () returned 0x5 [0168.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub", dwFileAttributes=0x20) returned 0 [0168.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24740) returned 1 Thread: id = 3231 os_tid = 0x2e04 [0164.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic")) returned 0x20 [0172.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic", dwFileAttributes=0x20) returned 0 [0172.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.104] GetLastError () returned 0x5 [0172.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic", dwFileAttributes=0x20) returned 0 [0172.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 Thread: id = 3232 os_tid = 0x2e08 [0164.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic")) returned 0x20 [0172.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic", dwFileAttributes=0x20) returned 0 [0172.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.113] GetLastError () returned 0x5 [0172.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic", dwFileAttributes=0x20) returned 0 [0172.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b898) returned 1 Thread: id = 3233 os_tid = 0x2e0c [0164.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic")) returned 0x20 [0172.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic", dwFileAttributes=0x20) returned 0 [0172.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.132] GetLastError () returned 0x5 [0172.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic", dwFileAttributes=0x20) returned 0 [0172.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c1f8) returned 1 Thread: id = 3234 os_tid = 0x2e10 [0164.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic")) returned 0x20 [0172.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic", dwFileAttributes=0x20) returned 0 [0172.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.141] GetLastError () returned 0x5 [0172.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic", dwFileAttributes=0x20) returned 0 [0172.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b4d8) returned 1 Thread: id = 3235 os_tid = 0x2e14 [0164.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic")) returned 0x20 [0172.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic", dwFileAttributes=0x20) returned 0 [0172.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.158] GetLastError () returned 0x5 [0172.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic", dwFileAttributes=0x20) returned 0 [0172.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 Thread: id = 3236 os_tid = 0x2e18 [0164.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic")) returned 0x20 [0172.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic", dwFileAttributes=0x20) returned 0 [0172.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.189] GetLastError () returned 0x5 [0172.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic", dwFileAttributes=0x20) returned 0 [0172.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 Thread: id = 3237 os_tid = 0x2e1c [0164.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl")) returned 0x20 [0172.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL", dwFileAttributes=0x20) returned 0 [0172.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.196] GetLastError () returned 0x5 [0172.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL", dwFileAttributes=0x20) returned 0 [0172.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 Thread: id = 3238 os_tid = 0x2e20 [0164.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb")) returned 0x20 [0172.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB", dwFileAttributes=0x20) returned 0 [0172.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.202] GetLastError () returned 0x5 [0172.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB", dwFileAttributes=0x20) returned 0 [0172.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 Thread: id = 3239 os_tid = 0x2e24 [0164.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb")) returned 0x20 [0172.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB", dwFileAttributes=0x20) returned 0 [0172.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.121] GetLastError () returned 0x5 [0172.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB", dwFileAttributes=0x20) returned 0 [0172.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 Thread: id = 3240 os_tid = 0x2e28 [0164.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb")) returned 0x20 [0172.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB", dwFileAttributes=0x20) returned 0 [0172.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.211] GetLastError () returned 0x5 [0172.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB", dwFileAttributes=0x20) returned 0 [0172.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 Thread: id = 3241 os_tid = 0x2e2c [0164.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest")) returned 0x20 [0172.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest", dwFileAttributes=0x20) returned 0 [0172.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.383] GetLastError () returned 0x5 [0172.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest", dwFileAttributes=0x20) returned 0 [0172.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 3242 os_tid = 0x2e30 [0164.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb")) returned 0x20 [0172.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB", dwFileAttributes=0x20) returned 0 [0172.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.217] GetLastError () returned 0x5 [0172.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB", dwFileAttributes=0x20) returned 0 [0172.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 Thread: id = 3243 os_tid = 0x2e34 [0164.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb")) returned 0x20 [0172.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB", dwFileAttributes=0x20) returned 0 [0172.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.240] GetLastError () returned 0x5 [0172.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB", dwFileAttributes=0x20) returned 0 [0172.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 Thread: id = 3244 os_tid = 0x2e38 [0164.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml")) returned 0x20 [0164.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0164.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.969] GetLastError () returned 0x5 [0164.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0164.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c0b8) returned 1 Thread: id = 3245 os_tid = 0x2e3c [0164.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze")) returned 0x20 [0164.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", dwFileAttributes=0x20) returned 0 [0164.972] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.972] GetLastError () returned 0x5 [0164.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", dwFileAttributes=0x20) returned 0 [0164.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d5e0) returned 1 Thread: id = 3246 os_tid = 0x2e40 [0164.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze")) returned 0x20 [0164.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", dwFileAttributes=0x20) returned 0 [0164.973] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.974] GetLastError () returned 0x5 [0164.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", dwFileAttributes=0x20) returned 0 [0164.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd6d8) returned 1 Thread: id = 3247 os_tid = 0x2e44 [0164.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze")) returned 0x20 [0164.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", dwFileAttributes=0x20) returned 0 [0164.975] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.975] GetLastError () returned 0x5 [0164.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", dwFileAttributes=0x20) returned 0 [0164.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df538) returned 1 Thread: id = 3248 os_tid = 0x2e48 [0164.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze")) returned 0x20 [0164.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", dwFileAttributes=0x20) returned 0 [0164.977] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.977] GetLastError () returned 0x5 [0164.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", dwFileAttributes=0x20) returned 0 [0164.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 3249 os_tid = 0x2e4c [0164.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze")) returned 0x20 [0164.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", dwFileAttributes=0x20) returned 0 [0164.979] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.979] GetLastError () returned 0x5 [0164.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", dwFileAttributes=0x20) returned 0 [0164.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 Thread: id = 3250 os_tid = 0x2e50 [0164.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze")) returned 0x20 [0166.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", dwFileAttributes=0x20) returned 0 [0166.713] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.713] GetLastError () returned 0x5 [0166.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", dwFileAttributes=0x20) returned 0 [0166.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 Thread: id = 3251 os_tid = 0x2e54 [0164.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze")) returned 0x20 [0166.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", dwFileAttributes=0x20) returned 0 [0166.710] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.710] GetLastError () returned 0x5 [0166.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", dwFileAttributes=0x20) returned 0 [0166.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 3252 os_tid = 0x2e58 [0164.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze")) returned 0x20 [0166.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", dwFileAttributes=0x20) returned 0 [0166.732] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.732] GetLastError () returned 0x5 [0166.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", dwFileAttributes=0x20) returned 0 [0166.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b218) returned 1 Thread: id = 3253 os_tid = 0x2e5c [0164.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze")) returned 0x20 [0166.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", dwFileAttributes=0x20) returned 0 [0166.222] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.222] GetLastError () returned 0x5 [0166.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", dwFileAttributes=0x20) returned 0 [0166.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d13c8) returned 1 Thread: id = 3254 os_tid = 0x2e60 [0164.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze")) returned 0x20 [0166.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", dwFileAttributes=0x20) returned 0 [0166.731] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.731] GetLastError () returned 0x5 [0166.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", dwFileAttributes=0x20) returned 0 [0166.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df418) returned 1 Thread: id = 3255 os_tid = 0x2e64 [0164.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze")) returned 0x20 [0166.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", dwFileAttributes=0x20) returned 0 [0166.729] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.729] GetLastError () returned 0x5 [0166.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", dwFileAttributes=0x20) returned 0 [0166.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df1d8) returned 1 Thread: id = 3256 os_tid = 0x2e68 [0164.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze")) returned 0x20 [0166.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", dwFileAttributes=0x20) returned 0 [0166.728] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.728] GetLastError () returned 0x5 [0166.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", dwFileAttributes=0x20) returned 0 [0166.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 Thread: id = 3257 os_tid = 0x2e6c [0164.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze")) returned 0x20 [0166.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", dwFileAttributes=0x20) returned 0 [0166.727] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.727] GetLastError () returned 0x5 [0166.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", dwFileAttributes=0x20) returned 0 [0166.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1168) returned 1 Thread: id = 3258 os_tid = 0x2e70 [0164.983] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log")) returned 0x2020 [0164.983] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", dwFileAttributes=0x20) returned 1 [0164.983] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2ac8 [0164.984] GetFileSizeEx (in: hFile=0x2ac8, lpFileSize=0xa80f8a8 | out: lpFileSize=0xa80f8a8*=154) returned 1 [0164.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0164.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0164.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0164.984] NtQuerySystemTime (in: CurrentTime=0xa80f830 | out: CurrentTime=0xa80f830*=132471540331944000) returned 0x0 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x2652fbd8 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x7d04d02e [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x628c81 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x2d6e794d [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x58dcc00 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x164497e4 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x2eb7ff1b [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x1e0ab58e [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x46db50d7 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x2ed040c4 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x4a67e1ff [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x21044f6d [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x1ea76f9c [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x3043e455 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x38893f81 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x2988d95d [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x2d9254cb [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x48408839 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x5da38aff [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x5263ff57 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x8e0a5e0 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x34d05ceb [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x5a4d98b8 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x3307bd68 [0164.984] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x74c39924 [0164.985] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x156d43a0 [0164.985] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x6a8039c8 [0164.985] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x7b273883 [0164.985] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x5d4aa9c0 [0164.985] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x6f448982 [0164.985] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x718c6efd [0164.985] RtlRandomEx (in: Seed=0xa80f828 | out: Seed=0xa80f828) returned 0x776340a [0164.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0164.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0164.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a458 [0164.993] ReadFile (in: hFile=0x2ac8, lpBuffer=0x80b4890, nNumberOfBytesToRead=0x9a, lpNumberOfBytesRead=0xa80f824, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesRead=0xa80f824*=0x9a, lpOverlapped=0x0) returned 1 [0164.995] SetFilePointerEx (in: hFile=0x2ac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.995] WriteFile (in: hFile=0x2ac8, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0xa80f828, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0xa80f828*=0x9a, lpOverlapped=0x0) returned 1 [0165.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0165.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0165.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0165.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0165.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0165.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bb68) returned 1 [0165.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e45c0) returned 1 [0165.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x8199b38 [0165.659] SetFilePointerEx (in: hFile=0x2ac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.659] WriteFile (in: hFile=0x2ac8, lpBuffer=0x3e25840*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xa80f89c, lpOverlapped=0x0 | out: lpBuffer=0x3e25840*, lpNumberOfBytesWritten=0xa80f89c*=0xf8, lpOverlapped=0x0) returned 1 [0168.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25840) returned 1 [0168.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8199178) returned 1 [0168.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0168.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8199b38) returned 1 [0168.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0168.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0168.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0168.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0168.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f1f90 [0168.353] wcscpy (in: _Dest=0x81f1f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" [0168.353] wcscat (in: _Dest=0x81f1f90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.f0dbec" [0168.353] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.f0dbec", NtPathName=0xa80f820, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x8021aa0 [0172.290] FlushFileBuffers (hFile=0x2ac8) returned 1 [0172.306] CloseHandle (hObject=0x2ac8) returned 1 [0172.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3a080 [0172.313] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0172.313] wcscat (in: _Dest=0x3e3a080, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt" [0172.313] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\f0dbec-readme.txt")) returned 0x2020 [0172.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a080) returned 1 [0172.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8390) returned 1 Thread: id = 3259 os_tid = 0x2e74 [0164.997] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001")) returned 0x2020 [0164.997] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0175.138] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x279c [0175.138] GetFileSizeEx (in: hFile=0x279c, lpFileSize=0xa01fd60 | out: lpFileSize=0xa01fd60*=41) returned 1 [0175.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43500 [0175.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43140 [0175.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42cb8 [0175.138] NtQuerySystemTime (in: CurrentTime=0xa01fce8 | out: CurrentTime=0xa01fce8*=132471540432564000) returned 0x0 [0175.138] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x602e142c [0175.138] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x600a0f03 [0175.138] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x6aaff4ba [0175.138] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0xeee3f5c [0175.138] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x1c2708c5 [0175.138] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x781af1ac [0175.138] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x531d3f18 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x7342e60 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x130e5fb4 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x688e55ca [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x37ea88c [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x6034e7c3 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x5abdee4c [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x31f87dfa [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x608b7807 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x1e3123fc [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x427e6009 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x59c8c05b [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x7a01f15a [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x7e9791ca [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x7fa0caa0 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x6e83072d [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x1e499ab2 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x2cf39efa [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x6290020c [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x1ea53e5f [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x702c6809 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x338ba988 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x36726e7c [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x4c0cdba6 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x25fdf781 [0175.139] RtlRandomEx (in: Seed=0xa01fce0 | out: Seed=0xa01fce0) returned 0x4abfd494 [0175.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43500) returned 1 [0175.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81770c0 [0175.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8160890 [0175.151] ReadFile (in: hFile=0x279c, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0xa01fcdc, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0xa01fcdc*=0x29, lpOverlapped=0x0) returned 1 [0175.153] SetFilePointerEx (in: hFile=0x279c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.153] WriteFile (in: hFile=0x279c, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xa01fce0, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0xa01fce0*=0x29, lpOverlapped=0x0) returned 1 [0176.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0176.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0176.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0176.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0176.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0176.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0176.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4728) returned 1 [0176.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77e18 [0176.012] SetFilePointerEx (in: hFile=0x279c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.012] WriteFile (in: hFile=0x279c, lpBuffer=0x30bd140*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa01fd54, lpOverlapped=0x0 | out: lpBuffer=0x30bd140*, lpNumberOfBytesWritten=0xa01fd54*=0x110, lpOverlapped=0x0) returned 1 [0176.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0176.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0176.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0176.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0176.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0176.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43140) returned 1 [0176.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43410) returned 1 [0176.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0176.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8021050 [0176.020] wcscpy (in: _Dest=0x8021050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" [0176.020] wcscat (in: _Dest=0x8021050, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.f0dbec" [0176.020] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.f0dbec", NtPathName=0xa01fcd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef58b8 [0176.391] FlushFileBuffers (hFile=0x279c) returned 1 [0176.396] CloseHandle (hObject=0x279c) returned 1 [0176.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b1b8 [0176.834] wcscpy (in: _Dest=0x3e3b1b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0176.834] wcscat (in: _Dest=0x3e3b1b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt" [0176.834] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\f0dbec-readme.txt")) returned 0x2020 [0176.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b1b8) returned 1 [0176.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c91a8) returned 1 Thread: id = 3260 os_tid = 0x2e78 [0164.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze")) returned 0x20 [0166.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", dwFileAttributes=0x20) returned 0 [0166.721] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.722] GetLastError () returned 0x5 [0166.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", dwFileAttributes=0x20) returned 0 [0166.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de4e8) returned 1 Thread: id = 3261 os_tid = 0x2e7c [0164.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze")) returned 0x20 [0166.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", dwFileAttributes=0x20) returned 0 [0166.720] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.720] GetLastError () returned 0x5 [0166.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", dwFileAttributes=0x20) returned 0 [0166.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d19b8) returned 1 Thread: id = 3262 os_tid = 0x2e80 [0164.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze")) returned 0x20 [0166.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", dwFileAttributes=0x20) returned 0 [0166.719] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.719] GetLastError () returned 0x5 [0166.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", dwFileAttributes=0x20) returned 0 [0166.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de3c8) returned 1 Thread: id = 3263 os_tid = 0x2e84 [0164.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze")) returned 0x20 [0166.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", dwFileAttributes=0x20) returned 0 [0166.718] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.718] GetLastError () returned 0x5 [0166.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", dwFileAttributes=0x20) returned 0 [0166.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de338) returned 1 Thread: id = 3264 os_tid = 0x2e88 [0165.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df4a8 [0165.000] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0165.000] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\" [0165.000] wcscat (in: _Dest=0x81df4a8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*" [0165.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0165.000] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55588 [0166.716] wcscmp (_String1=".", _String2=".") returned 0 [0166.717] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.717] wcscmp (_String1="..", _String2=".") returned 1 [0166.717] wcscmp (_String1="..", _String2="..") returned 0 [0166.717] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0166.717] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0166.717] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0166.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2db18 [0166.717] wcscpy (in: _Dest=0x3e2db18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0166.717] wcscat (in: _Dest=0x3e2db18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\" [0166.717] wcscat (in: _Dest=0x3e2db18, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" [0168.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2db18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0168.186] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0168.186] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0168.186] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0168.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187808 [0168.186] wcscpy (in: _Dest=0x8187808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0168.186] wcscat (in: _Dest=0x8187808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\" [0168.186] wcscat (in: _Dest=0x8187808, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" [0168.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0168.188] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0168.188] FindClose (in: hFindFile=0x3e55588 | out: hFindFile=0x3e55588) returned 1 [0168.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0168.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 [0168.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf3c0) returned 1 Thread: id = 3265 os_tid = 0x2e8c [0165.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze")) returned 0x20 [0166.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", dwFileAttributes=0x20) returned 0 [0166.711] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.712] GetLastError () returned 0x5 [0166.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", dwFileAttributes=0x20) returned 0 [0166.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de188) returned 1 Thread: id = 3266 os_tid = 0x2e90 [0165.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze")) returned 0x20 [0166.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", dwFileAttributes=0x20) returned 0 [0166.715] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.715] GetLastError () returned 0x5 [0166.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", dwFileAttributes=0x20) returned 0 [0166.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de458) returned 1 Thread: id = 3267 os_tid = 0x2e94 [0165.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze")) returned 0x20 [0166.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", dwFileAttributes=0x20) returned 0 [0166.714] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.714] GetLastError () returned 0x5 [0166.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", dwFileAttributes=0x20) returned 0 [0166.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de2a8) returned 1 Thread: id = 3268 os_tid = 0x2e98 [0165.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml")) returned 0x20 [0165.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0165.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.002] GetLastError () returned 0x5 [0165.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0165.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 Thread: id = 3269 os_tid = 0x2e9c [0165.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx")) returned 0x20 [0165.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0165.007] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.008] GetLastError () returned 0x5 [0165.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0165.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a00) returned 1 Thread: id = 3270 os_tid = 0x2ea0 [0165.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx")) returned 0x20 [0165.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0165.009] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.009] GetLastError () returned 0x5 [0165.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0165.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81878b0) returned 1 Thread: id = 3271 os_tid = 0x2ea4 [0165.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo")) returned 0x20 [0165.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", dwFileAttributes=0x20) returned 0 [0165.012] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.012] GetLastError () returned 0x5 [0165.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", dwFileAttributes=0x20) returned 0 [0165.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf358) returned 1 Thread: id = 3272 os_tid = 0x2ea8 [0165.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve")) returned 0x20 [0165.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", dwFileAttributes=0x20) returned 0 [0165.020] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.020] GetLastError () returned 0x5 [0165.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", dwFileAttributes=0x20) returned 0 [0165.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d96f8) returned 1 Thread: id = 3273 os_tid = 0x2eac [0165.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf")) returned 0x20 [0165.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF", dwFileAttributes=0x20) returned 0 [0165.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.022] GetLastError () returned 0x5 [0165.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF", dwFileAttributes=0x20) returned 0 [0165.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf888) returned 1 Thread: id = 3274 os_tid = 0x2eb0 [0165.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf")) returned 0x20 [0168.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF", dwFileAttributes=0x20) returned 0 [0168.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.334] GetLastError () returned 0x5 [0168.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF", dwFileAttributes=0x20) returned 0 [0168.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 3275 os_tid = 0x2eb4 [0165.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf")) returned 0x20 [0168.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF", dwFileAttributes=0x20) returned 0 [0168.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.336] GetLastError () returned 0x5 [0168.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF", dwFileAttributes=0x20) returned 0 [0168.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 3276 os_tid = 0x2eb8 [0165.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf")) returned 0x20 [0168.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF", dwFileAttributes=0x20) returned 0 [0168.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.337] GetLastError () returned 0x5 [0168.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF", dwFileAttributes=0x20) returned 0 [0168.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 3277 os_tid = 0x2ebc [0165.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf")) returned 0x20 [0168.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF", dwFileAttributes=0x20) returned 0 [0168.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.338] GetLastError () returned 0x5 [0168.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF", dwFileAttributes=0x20) returned 0 [0168.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 3278 os_tid = 0x2ec0 [0165.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf")) returned 0x20 [0168.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF", dwFileAttributes=0x20) returned 0 [0168.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.340] GetLastError () returned 0x5 [0168.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF", dwFileAttributes=0x20) returned 0 [0168.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfc40) returned 1 Thread: id = 3279 os_tid = 0x2ec4 [0165.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf")) returned 0x20 [0168.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF", dwFileAttributes=0x20) returned 0 [0168.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.341] GetLastError () returned 0x5 [0168.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF", dwFileAttributes=0x20) returned 0 [0168.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 3280 os_tid = 0x2ec8 [0165.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif")) returned 0x20 [0168.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF", dwFileAttributes=0x20) returned 0 [0168.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.342] GetLastError () returned 0x5 [0168.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF", dwFileAttributes=0x20) returned 0 [0168.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 3281 os_tid = 0x2ecc [0165.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf")) returned 0x20 [0168.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF", dwFileAttributes=0x20) returned 0 [0168.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.344] GetLastError () returned 0x5 [0168.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF", dwFileAttributes=0x20) returned 0 [0168.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 3282 os_tid = 0x2ed0 [0165.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf")) returned 0x20 [0168.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF", dwFileAttributes=0x20) returned 0 [0168.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.346] GetLastError () returned 0x5 [0168.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF", dwFileAttributes=0x20) returned 0 [0168.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf5e0) returned 1 Thread: id = 3283 os_tid = 0x2ed4 [0165.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf")) returned 0x20 [0168.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF", dwFileAttributes=0x20) returned 0 [0168.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.347] GetLastError () returned 0x5 [0168.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF", dwFileAttributes=0x20) returned 0 [0168.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 3284 os_tid = 0x2ed8 [0165.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf")) returned 0x20 [0168.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF", dwFileAttributes=0x20) returned 0 [0168.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.348] GetLastError () returned 0x5 [0168.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF", dwFileAttributes=0x20) returned 0 [0168.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 3285 os_tid = 0x2edc [0165.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf")) returned 0x20 [0168.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF", dwFileAttributes=0x20) returned 0 [0168.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.350] GetLastError () returned 0x5 [0168.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF", dwFileAttributes=0x20) returned 0 [0168.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 3286 os_tid = 0x2ee0 [0165.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf")) returned 0x20 [0167.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF", dwFileAttributes=0x20) returned 0 [0167.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.949] GetLastError () returned 0x5 [0167.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF", dwFileAttributes=0x20) returned 0 [0167.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf998) returned 1 Thread: id = 3287 os_tid = 0x2ee4 [0165.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg")) returned 0x20 [0168.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG", dwFileAttributes=0x20) returned 0 [0168.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.324] GetLastError () returned 0x5 [0168.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG", dwFileAttributes=0x20) returned 0 [0168.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 3288 os_tid = 0x2ee8 [0165.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg")) returned 0x20 [0168.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG", dwFileAttributes=0x20) returned 0 [0168.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.240] GetLastError () returned 0x5 [0168.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG", dwFileAttributes=0x20) returned 0 [0168.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 3289 os_tid = 0x2eec [0165.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf")) returned 0x20 [0168.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF", dwFileAttributes=0x20) returned 0 [0168.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.242] GetLastError () returned 0x5 [0168.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF", dwFileAttributes=0x20) returned 0 [0168.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 3290 os_tid = 0x2ef0 [0165.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf")) returned 0x20 [0168.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF", dwFileAttributes=0x20) returned 0 [0168.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.325] GetLastError () returned 0x5 [0168.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF", dwFileAttributes=0x20) returned 0 [0168.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 3291 os_tid = 0x2ef4 [0165.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf")) returned 0x20 [0168.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF", dwFileAttributes=0x20) returned 0 [0168.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.326] GetLastError () returned 0x5 [0168.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF", dwFileAttributes=0x20) returned 0 [0168.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 Thread: id = 3292 os_tid = 0x2ef8 [0165.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg")) returned 0x20 [0168.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG", dwFileAttributes=0x20) returned 0 [0168.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.327] GetLastError () returned 0x5 [0168.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG", dwFileAttributes=0x20) returned 0 [0168.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 Thread: id = 3293 os_tid = 0x2efc [0165.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf")) returned 0x20 [0168.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF", dwFileAttributes=0x20) returned 0 [0168.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.329] GetLastError () returned 0x5 [0168.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF", dwFileAttributes=0x20) returned 0 [0168.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 3294 os_tid = 0x2f00 [0165.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf")) returned 0x20 [0168.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF", dwFileAttributes=0x20) returned 0 [0168.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.330] GetLastError () returned 0x5 [0168.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF", dwFileAttributes=0x20) returned 0 [0168.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 3295 os_tid = 0x2f04 [0165.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf")) returned 0x20 [0168.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF", dwFileAttributes=0x20) returned 0 [0168.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.332] GetLastError () returned 0x5 [0168.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF", dwFileAttributes=0x20) returned 0 [0168.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 3296 os_tid = 0x2f08 [0165.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf")) returned 0x20 [0168.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF", dwFileAttributes=0x20) returned 0 [0168.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.333] GetLastError () returned 0x5 [0168.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF", dwFileAttributes=0x20) returned 0 [0168.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 3297 os_tid = 0x2f0c [0165.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer")) returned 0x20 [0165.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x20) returned 0 [0165.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.664] GetLastError () returned 0x5 [0165.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x20) returned 0 [0165.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bb08) returned 1 Thread: id = 3298 os_tid = 0x2f10 [0165.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer")) returned 0x20 [0165.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x20) returned 0 [0165.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.665] GetLastError () returned 0x5 [0165.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x20) returned 0 [0165.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df648) returned 1 Thread: id = 3299 os_tid = 0x2f14 [0165.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt")) returned 0x20 [0168.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", dwFileAttributes=0x20) returned 0 [0168.756] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.756] GetLastError () returned 0x5 [0168.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", dwFileAttributes=0x20) returned 0 [0168.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65518) returned 1 Thread: id = 3300 os_tid = 0x2f18 [0165.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt")) returned 0x20 [0166.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", dwFileAttributes=0x20) returned 0 [0167.372] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.755] GetLastError () returned 0x5 [0168.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", dwFileAttributes=0x20) returned 0 [0168.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b218) returned 1 Thread: id = 3301 os_tid = 0x2f1c [0165.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt")) returned 0x20 [0168.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", dwFileAttributes=0x20) returned 0 [0168.758] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.758] GetLastError () returned 0x5 [0168.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", dwFileAttributes=0x20) returned 0 [0168.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65290) returned 1 Thread: id = 3302 os_tid = 0x2f20 [0165.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt")) returned 0x20 [0168.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.753] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.753] GetLastError () returned 0x5 [0168.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3aa78) returned 1 Thread: id = 3303 os_tid = 0x2f24 [0165.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt")) returned 0x20 [0168.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", dwFileAttributes=0x20) returned 0 [0168.757] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.757] GetLastError () returned 0x5 [0168.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", dwFileAttributes=0x20) returned 0 [0168.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b148) returned 1 Thread: id = 3304 os_tid = 0x2f28 [0165.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht")) returned 0x20 [0165.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT", dwFileAttributes=0x20) returned 0 [0165.072] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.072] GetLastError () returned 0x5 [0165.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT", dwFileAttributes=0x20) returned 0 [0165.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 3305 os_tid = 0x2f2c [0165.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht")) returned 0x20 [0165.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT", dwFileAttributes=0x20) returned 0 [0165.074] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.075] GetLastError () returned 0x5 [0165.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT", dwFileAttributes=0x20) returned 0 [0165.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35370) returned 1 Thread: id = 3306 os_tid = 0x2f30 [0165.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht")) returned 0x20 [0165.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT", dwFileAttributes=0x20) returned 0 [0165.076] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.077] GetLastError () returned 0x5 [0165.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT", dwFileAttributes=0x20) returned 0 [0165.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34d40) returned 1 Thread: id = 3307 os_tid = 0x2f34 [0165.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34d40 [0165.078] wcscpy (in: _Dest=0x3f34d40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0165.078] wcscat (in: _Dest=0x3f34d40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\" [0165.078] wcscat (in: _Dest=0x3f34d40, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*" [0165.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0165.078] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099010 [0165.079] wcscmp (_String1=".", _String2=".") returned 0 [0165.079] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.079] wcscmp (_String1="..", _String2=".") returned 1 [0165.079] wcscmp (_String1="..", _String2="..") returned 0 [0165.079] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x893f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.079] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.079] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81878b0 [0165.079] wcscpy (in: _Dest=0x81878b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0165.079] wcscat (in: _Dest=0x81878b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\" [0165.079] wcscat (in: _Dest=0x81878b0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" [0166.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81878b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28dc [0166.032] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0166.032] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0166.032] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0166.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187178 [0166.032] wcscpy (in: _Dest=0x8187178, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0166.032] wcscat (in: _Dest=0x8187178, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\" [0166.032] wcscat (in: _Dest=0x8187178, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" [0166.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26ec [0166.033] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0166.033] FindClose (in: hFindFile=0x8099010 | out: hFindFile=0x8099010) returned 1 [0166.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0166.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34d40) returned 1 [0166.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 3308 os_tid = 0x2f38 [0165.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht")) returned 0x20 [0165.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT", dwFileAttributes=0x20) returned 0 [0165.080] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.080] GetLastError () returned 0x5 [0165.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT", dwFileAttributes=0x20) returned 0 [0165.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35f40) returned 1 Thread: id = 3309 os_tid = 0x2f3c [0165.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht")) returned 0x20 [0165.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT", dwFileAttributes=0x20) returned 0 [0165.082] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.082] GetLastError () returned 0x5 [0165.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT", dwFileAttributes=0x20) returned 0 [0165.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f362a0) returned 1 Thread: id = 3310 os_tid = 0x2f40 [0165.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht")) returned 0x20 [0165.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT", dwFileAttributes=0x20) returned 0 [0165.086] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.086] GetLastError () returned 0x5 [0165.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT", dwFileAttributes=0x20) returned 0 [0165.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35fd0) returned 1 Thread: id = 3311 os_tid = 0x2f44 [0165.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif")) returned 0x20 [0165.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF", dwFileAttributes=0x20) returned 0 [0165.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.795] GetLastError () returned 0x5 [0165.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF", dwFileAttributes=0x20) returned 0 [0165.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1ae8) returned 1 Thread: id = 3312 os_tid = 0x2f48 [0165.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif")) returned 0x20 [0165.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF", dwFileAttributes=0x20) returned 0 [0165.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.797] GetLastError () returned 0x5 [0165.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF", dwFileAttributes=0x20) returned 0 [0165.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d10d0) returned 1 Thread: id = 3313 os_tid = 0x2f4c [0165.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif")) returned 0x20 [0165.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF", dwFileAttributes=0x20) returned 0 [0165.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.798] GetLastError () returned 0x5 [0165.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF", dwFileAttributes=0x20) returned 0 [0165.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0d40) returned 1 Thread: id = 3314 os_tid = 0x2f50 [0165.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif")) returned 0x20 [0165.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF", dwFileAttributes=0x20) returned 0 [0165.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.800] GetLastError () returned 0x5 [0165.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF", dwFileAttributes=0x20) returned 0 [0165.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1e78) returned 1 Thread: id = 3315 os_tid = 0x2f54 [0165.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif")) returned 0x20 [0165.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF", dwFileAttributes=0x20) returned 0 [0165.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.801] GetLastError () returned 0x5 [0165.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF", dwFileAttributes=0x20) returned 0 [0165.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1330) returned 1 Thread: id = 3316 os_tid = 0x2f58 [0165.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif")) returned 0x20 [0165.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF", dwFileAttributes=0x20) returned 0 [0165.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.794] GetLastError () returned 0x5 [0165.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF", dwFileAttributes=0x20) returned 0 [0165.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1b80) returned 1 Thread: id = 3317 os_tid = 0x2f5c [0165.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif")) returned 0x20 [0165.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF", dwFileAttributes=0x20) returned 0 [0165.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.295] GetLastError () returned 0x5 [0165.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF", dwFileAttributes=0x20) returned 0 [0165.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0f08) returned 1 Thread: id = 3318 os_tid = 0x2f60 [0165.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif")) returned 0x20 [0165.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF", dwFileAttributes=0x20) returned 0 [0165.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.752] GetLastError () returned 0x5 [0165.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF", dwFileAttributes=0x20) returned 0 [0165.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1c18) returned 1 Thread: id = 3319 os_tid = 0x2f64 [0165.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp")) returned 0x20 [0165.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP", dwFileAttributes=0x20) returned 0 [0165.093] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.093] GetLastError () returned 0x5 [0165.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP", dwFileAttributes=0x20) returned 0 [0165.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 Thread: id = 3320 os_tid = 0x2f68 [0165.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp")) returned 0x20 [0165.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP", dwFileAttributes=0x20) returned 0 [0165.095] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.096] GetLastError () returned 0x5 [0165.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP", dwFileAttributes=0x20) returned 0 [0165.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36210) returned 1 Thread: id = 3321 os_tid = 0x2f6c [0165.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp")) returned 0x20 [0165.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP", dwFileAttributes=0x20) returned 0 [0165.098] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.098] GetLastError () returned 0x5 [0165.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP", dwFileAttributes=0x20) returned 0 [0165.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34a70) returned 1 Thread: id = 3322 os_tid = 0x2f70 [0165.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn")) returned 0x20 [0165.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN", dwFileAttributes=0x20) returned 0 [0165.100] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.100] GetLastError () returned 0x5 [0165.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN", dwFileAttributes=0x20) returned 0 [0165.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dde28) returned 1 Thread: id = 3323 os_tid = 0x2f74 [0165.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn")) returned 0x20 [0165.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN", dwFileAttributes=0x20) returned 0 [0165.108] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.108] GetLastError () returned 0x5 [0165.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN", dwFileAttributes=0x20) returned 0 [0165.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34c20) returned 1 Thread: id = 3324 os_tid = 0x2f78 [0165.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3f34c20 [0165.115] wcscpy (in: _Dest=0x3f34c20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0165.115] wcscat (in: _Dest=0x3f34c20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\" [0165.115] wcscat (in: _Dest=0x3f34c20, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*" [0165.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0165.115] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0165.116] wcscmp (_String1=".", _String2=".") returned 0 [0165.116] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.116] wcscmp (_String1="..", _String2=".") returned 1 [0165.116] wcscmp (_String1="..", _String2="..") returned 0 [0165.116] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.116] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.116] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187a00 [0165.116] wcscpy (in: _Dest=0x8187a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0165.116] wcscat (in: _Dest=0x8187a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\" [0165.116] wcscat (in: _Dest=0x8187a00, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" [0166.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2abc [0166.035] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0166.035] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0166.035] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0166.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186c38 [0166.035] wcscpy (in: _Dest=0x8186c38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0166.035] wcscat (in: _Dest=0x8186c38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\" [0166.035] wcscat (in: _Dest=0x8186c38, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" [0166.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x250c [0166.037] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0166.037] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0166.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0166.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34c20) returned 1 [0166.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 3325 os_tid = 0x2f7c [0165.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn")) returned 0x20 [0165.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN", dwFileAttributes=0x20) returned 0 [0165.120] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.120] GetLastError () returned 0x5 [0165.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN", dwFileAttributes=0x20) returned 0 [0165.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f347a0) returned 1 Thread: id = 3326 os_tid = 0x2f80 [0165.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn")) returned 0x20 [0165.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN", dwFileAttributes=0x20) returned 0 [0165.122] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.122] GetLastError () returned 0x5 [0165.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN", dwFileAttributes=0x20) returned 0 [0165.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34cb0) returned 1 Thread: id = 3327 os_tid = 0x2f84 [0165.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn")) returned 0x20 [0165.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN", dwFileAttributes=0x20) returned 0 [0165.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.124] GetLastError () returned 0x5 [0165.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN", dwFileAttributes=0x20) returned 0 [0165.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36330) returned 1 Thread: id = 3328 os_tid = 0x2f88 [0165.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx")) returned 0x20 [0165.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0165.126] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.126] GetLastError () returned 0x5 [0165.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0165.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81874c0) returned 1 Thread: id = 3329 os_tid = 0x2f8c [0165.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs")) returned 0x20 [0166.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS", dwFileAttributes=0x20) returned 0 [0166.704] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.704] GetLastError () returned 0x5 [0166.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS", dwFileAttributes=0x20) returned 0 [0166.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 Thread: id = 3330 os_tid = 0x2f90 [0165.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs")) returned 0x20 [0166.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS", dwFileAttributes=0x20) returned 0 [0166.774] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.774] GetLastError () returned 0x5 [0166.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS", dwFileAttributes=0x20) returned 0 [0166.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 Thread: id = 3331 os_tid = 0x2f94 [0165.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs")) returned 0x20 [0166.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS", dwFileAttributes=0x20) returned 0 [0166.772] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.772] GetLastError () returned 0x5 [0166.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS", dwFileAttributes=0x20) returned 0 [0166.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de0f8) returned 1 Thread: id = 3332 os_tid = 0x2f98 [0165.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf")) returned 0x20 [0165.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0165.135] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.135] GetLastError () returned 0x5 [0165.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0165.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d548) returned 1 Thread: id = 3333 os_tid = 0x2f9c [0165.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf")) returned 0x20 [0165.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0165.137] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.137] GetLastError () returned 0x5 [0165.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0165.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2208) returned 1 Thread: id = 3334 os_tid = 0x2fa0 [0165.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde")) returned 0x20 [0165.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", dwFileAttributes=0x20) returned 0 [0165.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.140] GetLastError () returned 0x5 [0165.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", dwFileAttributes=0x20) returned 0 [0165.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34b90) returned 1 Thread: id = 3335 os_tid = 0x2fa4 [0165.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu")) returned 0x20 [0168.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", dwFileAttributes=0x20) returned 0 [0168.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.299] GetLastError () returned 0x5 [0168.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", dwFileAttributes=0x20) returned 0 [0168.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de068) returned 1 Thread: id = 3336 os_tid = 0x2fa8 [0165.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda")) returned 0x20 [0166.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", dwFileAttributes=0x20) returned 0 [0166.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.750] GetLastError () returned 0x5 [0168.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", dwFileAttributes=0x20) returned 0 [0168.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 Thread: id = 3337 os_tid = 0x2fac [0165.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus")) returned 0x20 [0165.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", dwFileAttributes=0x20) returned 0 [0165.143] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.143] GetLastError () returned 0x5 [0165.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", dwFileAttributes=0x20) returned 0 [0165.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186500) returned 1 Thread: id = 3338 os_tid = 0x2fb0 [0165.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus")) returned 0x20 [0165.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", dwFileAttributes=0x20) returned 0 [0165.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.145] GetLastError () returned 0x5 [0165.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", dwFileAttributes=0x20) returned 0 [0165.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9a68) returned 1 Thread: id = 3339 os_tid = 0x2fb4 [0165.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus")) returned 0x20 [0165.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", dwFileAttributes=0x20) returned 0 [0165.146] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.146] GetLastError () returned 0x5 [0165.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", dwFileAttributes=0x20) returned 0 [0165.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dab98) returned 1 Thread: id = 3340 os_tid = 0x2fb8 [0165.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus")) returned 0x20 [0165.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", dwFileAttributes=0x20) returned 0 [0165.148] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.148] GetLastError () returned 0x5 [0165.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", dwFileAttributes=0x20) returned 0 [0165.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1ee8) returned 1 Thread: id = 3341 os_tid = 0x2fbc [0165.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif")) returned 0x20 [0171.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0171.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.244] GetLastError () returned 0x5 [0171.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0171.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3335e8) returned 1 Thread: id = 3342 os_tid = 0x2fc0 [0165.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif")) returned 0x20 [0171.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif", dwFileAttributes=0x20) returned 0 [0171.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.095] GetLastError () returned 0x5 [0171.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif", dwFileAttributes=0x20) returned 0 [0171.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c258) returned 1 Thread: id = 3343 os_tid = 0x2fc4 [0165.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif")) returned 0x20 [0171.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0171.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.147] GetLastError () returned 0x5 [0171.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0171.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6390) returned 1 Thread: id = 3344 os_tid = 0x2fc8 [0165.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif")) returned 0x20 [0170.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0170.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.335] GetLastError () returned 0x5 [0170.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0170.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e89d0) returned 1 Thread: id = 3345 os_tid = 0x2fcc [0165.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif")) returned 0x20 [0170.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0170.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.335] GetLastError () returned 0x5 [0170.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0170.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8a98) returned 1 Thread: id = 3346 os_tid = 0x2fd0 [0165.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js")) returned 0x20 [0171.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS", dwFileAttributes=0x20) returned 0 [0171.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.093] GetLastError () returned 0x5 [0171.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS", dwFileAttributes=0x20) returned 0 [0171.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfa08) returned 1 Thread: id = 3347 os_tid = 0x2fd4 [0165.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html")) returned 0x20 [0171.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0171.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.154] GetLastError () returned 0x5 [0171.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0171.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64288) returned 1 Thread: id = 3348 os_tid = 0x2fd8 [0165.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html")) returned 0x20 [0171.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0171.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.242] GetLastError () returned 0x5 [0171.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0171.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 Thread: id = 3349 os_tid = 0x2fdc [0165.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html")) returned 0x20 [0170.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0170.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.079] GetLastError () returned 0x5 [0171.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0171.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64438) returned 1 Thread: id = 3350 os_tid = 0x2fe0 [0165.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html")) returned 0x20 [0170.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0170.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.090] GetLastError () returned 0x5 [0171.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0171.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 3351 os_tid = 0x2fe4 [0165.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html")) returned 0x20 [0170.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0170.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.082] GetLastError () returned 0x5 [0171.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0171.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ab60) returned 1 Thread: id = 3352 os_tid = 0x2fe8 [0165.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html")) returned 0x20 [0170.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0171.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.088] GetLastError () returned 0x5 [0171.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0171.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9288) returned 1 Thread: id = 3353 os_tid = 0x2fec [0165.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html")) returned 0x20 [0170.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0171.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.091] GetLastError () returned 0x5 [0171.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0171.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9368) returned 1 Thread: id = 3354 os_tid = 0x2ff0 [0165.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html")) returned 0x20 [0171.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0171.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.094] GetLastError () returned 0x5 [0171.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0171.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ac48) returned 1 Thread: id = 3355 os_tid = 0x2ff4 [0165.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html")) returned 0x20 [0171.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0171.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.086] GetLastError () returned 0x5 [0171.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0171.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ad30) returned 1 Thread: id = 3356 os_tid = 0x2ff8 [0165.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html")) returned 0x20 [0171.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0171.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.089] GetLastError () returned 0x5 [0171.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0171.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 3357 os_tid = 0x2ffc [0165.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html")) returned 0x20 [0170.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0170.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.336] GetLastError () returned 0x5 [0170.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0170.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ae18) returned 1 Thread: id = 3358 os_tid = 0xc70 [0165.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg")) returned 0x20 [0170.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0170.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.336] GetLastError () returned 0x5 [0170.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0170.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3af00) returned 1 Thread: id = 3359 os_tid = 0x488 [0165.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0170.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0170.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.336] GetLastError () returned 0x5 [0170.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0170.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020d80) returned 1 Thread: id = 3360 os_tid = 0xbc4 [0165.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js")) returned 0x20 [0170.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js", dwFileAttributes=0x20) returned 0 [0170.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.335] GetLastError () returned 0x5 [0170.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js", dwFileAttributes=0x20) returned 0 [0170.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8b60) returned 1 Thread: id = 3361 os_tid = 0xebc [0165.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg")) returned 0x20 [0170.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", dwFileAttributes=0x20) returned 0 [0170.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.335] GetLastError () returned 0x5 [0170.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", dwFileAttributes=0x20) returned 0 [0170.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 3362 os_tid = 0xed0 [0165.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif")) returned 0x20 [0170.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0170.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.334] GetLastError () returned 0x5 [0170.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0170.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8c28) returned 1 Thread: id = 3363 os_tid = 0x12a4 [0165.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif")) returned 0x20 [0168.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0168.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.322] GetLastError () returned 0x5 [0170.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0170.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 Thread: id = 3364 os_tid = 0xe0c [0165.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js")) returned 0x20 [0170.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0170.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.335] GetLastError () returned 0x5 [0170.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0170.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b00) returned 1 Thread: id = 3365 os_tid = 0xe14 [0165.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif")) returned 0x20 [0170.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0170.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.335] GetLastError () returned 0x5 [0170.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0170.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e655f0) returned 1 Thread: id = 3366 os_tid = 0x4e4 [0165.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif")) returned 0x20 [0171.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0171.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.143] GetLastError () returned 0x5 [0171.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0171.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65950) returned 1 Thread: id = 3367 os_tid = 0x124 [0165.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif")) returned 0x20 [0171.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0171.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.145] GetLastError () returned 0x5 [0171.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0171.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c668) returned 1 Thread: id = 3368 os_tid = 0xed8 [0165.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif")) returned 0x20 [0171.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0171.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.248] GetLastError () returned 0x5 [0171.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0171.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c4c8) returned 1 Thread: id = 3369 os_tid = 0xf38 [0165.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif")) returned 0x20 [0171.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0171.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.250] GetLastError () returned 0x5 [0171.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0171.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e657a0) returned 1 Thread: id = 3370 os_tid = 0xed4 [0165.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif")) returned 0x20 [0168.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0168.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.929] GetLastError () returned 0x5 [0168.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0170.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 Thread: id = 3371 os_tid = 0xecc [0165.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini")) returned 0x20 [0165.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0165.692] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.692] GetLastError () returned 0x5 [0165.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0165.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b88) returned 1 Thread: id = 3372 os_tid = 0x670 [0165.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html")) returned 0x20 [0165.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", dwFileAttributes=0x20) returned 0 [0165.694] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.694] GetLastError () returned 0x5 [0165.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", dwFileAttributes=0x20) returned 0 [0165.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb18e8) returned 1 Thread: id = 3373 os_tid = 0x8fc [0165.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf")) returned 0x20 [0165.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.695] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.695] GetLastError () returned 0x5 [0165.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 3374 os_tid = 0xb5c [0165.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf")) returned 0x20 [0165.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0165.697] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.697] GetLastError () returned 0x5 [0165.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0165.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1d78) returned 1 Thread: id = 3375 os_tid = 0xb18 [0165.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf")) returned 0x20 [0165.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0165.698] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.699] GetLastError () returned 0x5 [0165.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0165.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d62c8) returned 1 Thread: id = 3376 os_tid = 0xb78 [0165.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg")) returned 0x20 [0165.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg", dwFileAttributes=0x20) returned 0 [0165.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.701] GetLastError () returned 0x5 [0165.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg", dwFileAttributes=0x20) returned 0 [0165.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e656c8) returned 1 Thread: id = 3377 os_tid = 0xb0c [0165.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp")) returned 0x20 [0167.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp", dwFileAttributes=0x20) returned 0 [0167.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.460] GetLastError () returned 0x5 [0167.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp", dwFileAttributes=0x20) returned 0 [0167.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 3378 os_tid = 0x620 [0165.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg")) returned 0x20 [0166.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg", dwFileAttributes=0x20) returned 0 [0166.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.766] GetLastError () returned 0x5 [0166.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg", dwFileAttributes=0x20) returned 0 [0166.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 3379 os_tid = 0xb54 [0165.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp")) returned 0x20 [0167.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp", dwFileAttributes=0x20) returned 0 [0167.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.511] GetLastError () returned 0x5 [0167.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp", dwFileAttributes=0x20) returned 0 [0167.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b0d0) returned 1 Thread: id = 3380 os_tid = 0x1184 [0165.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg")) returned 0x20 [0167.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg", dwFileAttributes=0x20) returned 0 [0167.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.477] GetLastError () returned 0x5 [0167.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg", dwFileAttributes=0x20) returned 0 [0167.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 3381 os_tid = 0x4fc [0165.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp")) returned 0x20 [0167.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp", dwFileAttributes=0x20) returned 0 [0167.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.478] GetLastError () returned 0x5 [0167.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp", dwFileAttributes=0x20) returned 0 [0167.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b1b8) returned 1 Thread: id = 3382 os_tid = 0x1188 [0165.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg")) returned 0x20 [0167.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg", dwFileAttributes=0x20) returned 0 [0167.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.514] GetLastError () returned 0x5 [0167.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg", dwFileAttributes=0x20) returned 0 [0167.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 3383 os_tid = 0xb88 [0165.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp")) returned 0x20 [0167.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp", dwFileAttributes=0x20) returned 0 [0167.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.458] GetLastError () returned 0x5 [0167.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp", dwFileAttributes=0x20) returned 0 [0167.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b2a0) returned 1 Thread: id = 3384 os_tid = 0xa80 [0165.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg")) returned 0x20 [0167.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg", dwFileAttributes=0x20) returned 0 [0167.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.482] GetLastError () returned 0x5 [0167.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg", dwFileAttributes=0x20) returned 0 [0167.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def1a0) returned 1 Thread: id = 3385 os_tid = 0x1190 [0165.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp")) returned 0x20 [0167.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp", dwFileAttributes=0x20) returned 0 [0167.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.484] GetLastError () returned 0x5 [0167.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp", dwFileAttributes=0x20) returned 0 [0167.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 3386 os_tid = 0x1194 [0165.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg")) returned 0x20 [0167.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg", dwFileAttributes=0x20) returned 0 [0167.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.475] GetLastError () returned 0x5 [0167.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg", dwFileAttributes=0x20) returned 0 [0167.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def278) returned 1 Thread: id = 3387 os_tid = 0x358 [0165.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp")) returned 0x20 [0167.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp", dwFileAttributes=0x20) returned 0 [0167.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.486] GetLastError () returned 0x5 [0167.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp", dwFileAttributes=0x20) returned 0 [0167.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9648) returned 1 Thread: id = 3388 os_tid = 0x484 [0165.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg")) returned 0x20 [0167.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg", dwFileAttributes=0x20) returned 0 [0167.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.488] GetLastError () returned 0x5 [0167.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg", dwFileAttributes=0x20) returned 0 [0167.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def350) returned 1 Thread: id = 3389 os_tid = 0x264 [0165.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp")) returned 0x20 [0167.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp", dwFileAttributes=0x20) returned 0 [0167.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.462] GetLastError () returned 0x5 [0167.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp", dwFileAttributes=0x20) returned 0 [0167.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9728) returned 1 Thread: id = 3390 os_tid = 0xc4 [0165.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg")) returned 0x20 [0167.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg", dwFileAttributes=0x20) returned 0 [0167.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.489] GetLastError () returned 0x5 [0167.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg", dwFileAttributes=0x20) returned 0 [0167.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c0b8) returned 1 Thread: id = 3391 os_tid = 0x918 [0165.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp")) returned 0x20 [0167.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp", dwFileAttributes=0x20) returned 0 [0167.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.463] GetLastError () returned 0x5 [0167.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp", dwFileAttributes=0x20) returned 0 [0167.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defbc0) returned 1 Thread: id = 3392 os_tid = 0xdf4 [0165.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg")) returned 0x20 [0167.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg", dwFileAttributes=0x20) returned 0 [0167.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.491] GetLastError () returned 0x5 [0167.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg", dwFileAttributes=0x20) returned 0 [0167.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3f580) returned 1 Thread: id = 3393 os_tid = 0x5ec [0165.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp")) returned 0x20 [0167.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0167.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.493] GetLastError () returned 0x5 [0167.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0167.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9808) returned 1 Thread: id = 3394 os_tid = 0x14b0 [0165.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp")) returned 0x20 [0167.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0167.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.495] GetLastError () returned 0x5 [0167.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0167.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020e70) returned 1 Thread: id = 3395 os_tid = 0x11a8 [0165.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg")) returned 0x20 [0167.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0167.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.465] GetLastError () returned 0x5 [0167.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0167.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b388) returned 1 Thread: id = 3396 os_tid = 0x508 [0165.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg")) returned 0x20 [0167.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg", dwFileAttributes=0x20) returned 0 [0167.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.467] GetLastError () returned 0x5 [0167.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg", dwFileAttributes=0x20) returned 0 [0167.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3f070) returned 1 Thread: id = 3397 os_tid = 0xfd8 [0165.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp")) returned 0x20 [0167.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0167.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.496] GetLastError () returned 0x5 [0167.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0167.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e98e8) returned 1 Thread: id = 3398 os_tid = 0x1350 [0165.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp")) returned 0x20 [0167.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0167.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.503] GetLastError () returned 0x5 [0167.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0167.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020f60) returned 1 Thread: id = 3399 os_tid = 0x1004 [0165.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg")) returned 0x20 [0167.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0167.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.506] GetLastError () returned 0x5 [0167.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0167.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b470) returned 1 Thread: id = 3400 os_tid = 0x1354 [0165.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg")) returned 0x20 [0167.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg", dwFileAttributes=0x20) returned 0 [0167.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.469] GetLastError () returned 0x5 [0167.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg", dwFileAttributes=0x20) returned 0 [0167.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e99c8) returned 1 Thread: id = 3401 os_tid = 0x100c [0165.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp")) returned 0x20 [0167.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.471] GetLastError () returned 0x5 [0167.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b558) returned 1 Thread: id = 3402 os_tid = 0x135c [0165.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg")) returned 0x20 [0167.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg", dwFileAttributes=0x20) returned 0 [0167.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.473] GetLastError () returned 0x5 [0167.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg", dwFileAttributes=0x20) returned 0 [0167.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8cf0) returned 1 Thread: id = 3403 os_tid = 0x1014 [0165.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg")) returned 0x20 [0167.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg", dwFileAttributes=0x20) returned 0 [0167.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.508] GetLastError () returned 0x5 [0167.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg", dwFileAttributes=0x20) returned 0 [0167.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ef98) returned 1 Thread: id = 3404 os_tid = 0x101c [0165.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp")) returned 0x20 [0167.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.509] GetLastError () returned 0x5 [0167.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9aa8) returned 1 Thread: id = 3405 os_tid = 0x1024 [0165.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt")) returned 0x20 [0165.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt", dwFileAttributes=0x20) returned 0 [0165.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.722] GetLastError () returned 0x5 [0165.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt", dwFileAttributes=0x20) returned 0 [0165.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a9f8) returned 1 Thread: id = 3406 os_tid = 0x1064 [0165.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt")) returned 0x20 [0165.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt", dwFileAttributes=0x20) returned 0 [0165.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.723] GetLastError () returned 0x5 [0165.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt", dwFileAttributes=0x20) returned 0 [0165.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a638) returned 1 Thread: id = 3407 os_tid = 0x11bc [0165.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt")) returned 0x20 [0165.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt", dwFileAttributes=0x20) returned 0 [0165.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.725] GetLastError () returned 0x5 [0165.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt", dwFileAttributes=0x20) returned 0 [0165.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b7b8) returned 1 Thread: id = 3408 os_tid = 0x10c4 [0165.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt")) returned 0x20 [0166.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt", dwFileAttributes=0x20) returned 0 [0166.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.963] GetLastError () returned 0x5 [0166.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt", dwFileAttributes=0x20) returned 0 [0166.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bad8) returned 1 Thread: id = 3409 os_tid = 0x1360 [0165.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt")) returned 0x20 [0166.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt", dwFileAttributes=0x20) returned 0 [0166.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.965] GetLastError () returned 0x5 [0166.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt", dwFileAttributes=0x20) returned 0 [0166.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a8b8) returned 1 Thread: id = 3410 os_tid = 0x10c8 [0165.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt")) returned 0x20 [0166.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0166.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.966] GetLastError () returned 0x5 [0166.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0166.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bc18) returned 1 Thread: id = 3411 os_tid = 0x10d0 [0165.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt")) returned 0x20 [0166.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt", dwFileAttributes=0x20) returned 0 [0166.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.968] GetLastError () returned 0x5 [0166.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt", dwFileAttributes=0x20) returned 0 [0166.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac78) returned 1 Thread: id = 3412 os_tid = 0x1110 [0165.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt")) returned 0x20 [0166.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt", dwFileAttributes=0x20) returned 0 [0166.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.969] GetLastError () returned 0x5 [0166.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt", dwFileAttributes=0x20) returned 0 [0166.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bf38) returned 1 Thread: id = 3413 os_tid = 0x1114 [0165.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt")) returned 0x20 [0166.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0166.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.970] GetLastError () returned 0x5 [0166.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0166.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819abd8) returned 1 Thread: id = 3414 os_tid = 0x1118 [0165.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg")) returned 0x20 [0166.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0166.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.977] GetLastError () returned 0x5 [0166.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0166.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da408) returned 1 Thread: id = 3415 os_tid = 0x111c [0165.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp")) returned 0x20 [0167.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.517] GetLastError () returned 0x5 [0167.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1e30) returned 1 Thread: id = 3416 os_tid = 0x1364 [0165.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg")) returned 0x20 [0167.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg", dwFileAttributes=0x20) returned 0 [0167.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.519] GetLastError () returned 0x5 [0167.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg", dwFileAttributes=0x20) returned 0 [0167.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 3417 os_tid = 0x1368 [0165.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp")) returned 0x20 [0167.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp", dwFileAttributes=0x20) returned 0 [0167.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.521] GetLastError () returned 0x5 [0167.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp", dwFileAttributes=0x20) returned 0 [0167.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e19e0) returned 1 Thread: id = 3418 os_tid = 0x1144 [0165.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg")) returned 0x20 [0166.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0166.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.777] GetLastError () returned 0x5 [0166.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0166.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1a98) returned 1 Thread: id = 3419 os_tid = 0x1164 [0165.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp")) returned 0x20 [0167.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.515] GetLastError () returned 0x5 [0167.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df888) returned 1 Thread: id = 3420 os_tid = 0x1168 [0165.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt")) returned 0x20 [0166.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt", dwFileAttributes=0x20) returned 0 [0166.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.972] GetLastError () returned 0x5 [0166.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt", dwFileAttributes=0x20) returned 0 [0166.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2208) returned 1 Thread: id = 3421 os_tid = 0x11d8 [0165.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt")) returned 0x20 [0166.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt", dwFileAttributes=0x20) returned 0 [0166.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.973] GetLastError () returned 0x5 [0166.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt", dwFileAttributes=0x20) returned 0 [0166.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a958) returned 1 Thread: id = 3422 os_tid = 0x14e4 [0165.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt")) returned 0x20 [0166.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt", dwFileAttributes=0x20) returned 0 [0166.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.975] GetLastError () returned 0x5 [0166.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt", dwFileAttributes=0x20) returned 0 [0166.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b8f8) returned 1 Thread: id = 3423 os_tid = 0x116c [0165.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt")) returned 0x20 [0166.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt", dwFileAttributes=0x20) returned 0 [0166.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.976] GetLastError () returned 0x5 [0166.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt", dwFileAttributes=0x20) returned 0 [0166.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1200) returned 1 Thread: id = 3424 os_tid = 0x14ec [0165.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt")) returned 0x20 [0166.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0166.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.560] GetLastError () returned 0x5 [0166.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0166.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aef8) returned 1 Thread: id = 3425 os_tid = 0x11e8 [0165.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt")) returned 0x20 [0166.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt", dwFileAttributes=0x20) returned 0 [0166.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.562] GetLastError () returned 0x5 [0166.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt", dwFileAttributes=0x20) returned 0 [0166.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bcb8) returned 1 Thread: id = 3426 os_tid = 0x11ec [0165.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\logging.properties")) returned 0x20 [0165.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties", dwFileAttributes=0x20) returned 0 [0165.741] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\logging.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.741] GetLastError () returned 0x5 [0165.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties", dwFileAttributes=0x20) returned 0 [0165.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33c88) returned 1 Thread: id = 3427 os_tid = 0x1170 [0165.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe66c8 [0165.742] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0165.742] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0165.742] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\*" [0165.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0165.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54ac8 [0166.583] wcscmp (_String1=".", _String2=".") returned 0 [0166.583] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.583] wcscmp (_String1="..", _String2=".") returned 1 [0166.583] wcscmp (_String1="..", _String2="..") returned 0 [0166.583] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fda680, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67fda680, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67fda680, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0166.583] wcscmp (_String1="jmxremote.access", _String2=".") returned 1 [0166.583] wcscmp (_String1="jmxremote.access", _String2="..") returned 1 [0166.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4b88 [0166.583] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0166.583] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0166.583] wcscat (in: _Dest=0x3dc4b88, _Source="jmxremote.access" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access" [0168.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b0c [0168.177] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680007e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x680007e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x680007e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0168.177] wcscmp (_String1="jmxremote.password.template", _String2=".") returned 1 [0168.177] wcscmp (_String1="jmxremote.password.template", _String2="..") returned 1 [0168.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0168.177] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0168.177] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0168.177] wcscat (in: _Dest=0x32cc50, _Source="jmxremote.password.template" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template" [0168.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0168.179] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680007e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x680007e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x680007e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3711, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0168.179] wcscmp (_String1="management.properties", _String2=".") returned 1 [0168.179] wcscmp (_String1="management.properties", _String2="..") returned 1 [0168.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bfaa8 [0168.179] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0168.179] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0168.179] wcscat (in: _Dest=0x81bfaa8, _Source="management.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties" [0168.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0168.180] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0168.180] wcscmp (_String1="snmp.acl.template", _String2=".") returned 1 [0168.180] wcscmp (_String1="snmp.acl.template", _String2="..") returned 1 [0168.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24240 [0168.180] wcscpy (in: _Dest=0x3e24240, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0168.180] wcscat (in: _Dest=0x3e24240, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0168.180] wcscat (in: _Dest=0x3e24240, _Source="snmp.acl.template" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template" [0168.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0168.182] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0168.182] FindClose (in: hFindFile=0x3e54ac8 | out: hFindFile=0x3e54ac8) returned 1 [0168.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0168.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0168.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 Thread: id = 3428 os_tid = 0x1174 [0165.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\management-agent.jar")) returned 0x20 [0167.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar", dwFileAttributes=0x20) returned 0 [0167.539] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\management-agent.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.539] GetLastError () returned 0x5 [0167.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar", dwFileAttributes=0x20) returned 0 [0167.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a88) returned 1 Thread: id = 3429 os_tid = 0x1178 [0165.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\meta-index")) returned 0x20 [0167.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index", dwFileAttributes=0x20) returned 0 [0167.540] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\meta-index"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.541] GetLastError () returned 0x5 [0167.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index", dwFileAttributes=0x20) returned 0 [0167.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 3430 os_tid = 0x117c [0165.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\net.properties")) returned 0x20 [0167.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties", dwFileAttributes=0x20) returned 0 [0167.542] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\net.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.543] GetLastError () returned 0x5 [0167.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties", dwFileAttributes=0x20) returned 0 [0167.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce780) returned 1 Thread: id = 3431 os_tid = 0xbe8 [0165.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\plugin.jar")) returned 0x20 [0167.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar", dwFileAttributes=0x20) returned 0 [0167.544] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\plugin.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.545] GetLastError () returned 0x5 [0167.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar", dwFileAttributes=0x20) returned 0 [0167.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 Thread: id = 3432 os_tid = 0x1180 [0165.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre7\\lib\\psfont.properties.ja")) returned 0x20 [0167.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja", dwFileAttributes=0x20) returned 0 [0167.546] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre7\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.547] GetLastError () returned 0x5 [0167.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja", dwFileAttributes=0x20) returned 0 [0167.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a348) returned 1 Thread: id = 3433 os_tid = 0x1374 [0165.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\psfontj2d.properties")) returned 0x20 [0167.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties", dwFileAttributes=0x20) returned 0 [0167.548] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.548] GetLastError () returned 0x5 [0167.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties", dwFileAttributes=0x20) returned 0 [0167.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a1f8) returned 1 Thread: id = 3434 os_tid = 0x118c [0165.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\resources.jar")) returned 0x20 [0167.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar", dwFileAttributes=0x20) returned 0 [0167.550] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\resources.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.550] GetLastError () returned 0x5 [0167.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar", dwFileAttributes=0x20) returned 0 [0167.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcea58) returned 1 Thread: id = 3435 os_tid = 0x608 [0165.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\rt.jar")) returned 0x20 [0167.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar", dwFileAttributes=0x20) returned 0 [0167.554] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\rt.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.554] GetLastError () returned 0x5 [0167.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar", dwFileAttributes=0x20) returned 0 [0167.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e230c0) returned 1 Thread: id = 3436 os_tid = 0xad8 [0165.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7328 [0165.749] wcscpy (in: _Dest=0x2fe7328, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0165.749] wcscat (in: _Dest=0x2fe7328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0165.749] wcscat (in: _Dest=0x2fe7328, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\*" [0165.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0165.749] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681312e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0168.256] wcscmp (_String1=".", _String2=".") returned 0 [0168.256] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681312e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.256] wcscmp (_String1="..", _String2=".") returned 1 [0168.256] wcscmp (_String1="..", _String2="..") returned 0 [0168.256] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0168.256] wcscmp (_String1="blacklist", _String2=".") returned 1 [0168.256] wcscmp (_String1="blacklist", _String2="..") returned 1 [0168.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a1f8 [0168.256] wcscpy (in: _Dest=0x3f3a1f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0168.256] wcscat (in: _Dest=0x3f3a1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0168.256] wcscat (in: _Dest=0x3f3a1f8, _Source="blacklist" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist" [0169.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0169.120] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1429a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0169.120] wcscmp (_String1="cacerts", _String2=".") returned 1 [0169.120] wcscmp (_String1="cacerts", _String2="..") returned 1 [0169.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fce098 [0169.120] wcscpy (in: _Dest=0x2fce098, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0169.120] wcscat (in: _Dest=0x2fce098, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0169.120] wcscat (in: _Dest=0x2fce098, _Source="cacerts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts" [0169.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fce098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0169.122] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0169.122] wcscmp (_String1="java.policy", _String2=".") returned 1 [0169.122] wcscmp (_String1="java.policy", _String2="..") returned 1 [0169.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f394d8 [0169.122] wcscpy (in: _Dest=0x3f394d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0169.122] wcscat (in: _Dest=0x3f394d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0169.122] wcscat (in: _Dest=0x3f394d8, _Source="java.policy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy" [0169.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f394d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4 [0169.123] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0169.123] wcscmp (_String1="java.security", _String2=".") returned 1 [0169.123] wcscmp (_String1="java.security", _String2="..") returned 1 [0169.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df9690 [0169.123] wcscpy (in: _Dest=0x3df9690, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0169.123] wcscat (in: _Dest=0x3df9690, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0169.123] wcscat (in: _Dest=0x3df9690, _Source="java.security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security" [0169.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df9690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0169.124] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.policy", cAlternateFileName="JAVAFX~1.POL")) returned 1 [0169.124] wcscmp (_String1="javafx.policy", _String2=".") returned 1 [0169.124] wcscmp (_String1="javafx.policy", _String2="..") returned 1 [0169.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df8bc8 [0169.124] wcscpy (in: _Dest=0x3df8bc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0169.124] wcscat (in: _Dest=0x3df8bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0169.124] wcscat (in: _Dest=0x3df8bc8, _Source="javafx.policy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy" [0169.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0169.125] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0169.125] wcscmp (_String1="javaws.policy", _String2=".") returned 1 [0169.125] wcscmp (_String1="javaws.policy", _String2="..") returned 1 [0169.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f324a8 [0169.125] wcscpy (in: _Dest=0x3f324a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0169.125] wcscat (in: _Dest=0x3f324a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0169.125] wcscat (in: _Dest=0x3f324a8, _Source="javaws.policy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy" [0169.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f324a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0169.126] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0169.126] wcscmp (_String1="local_policy.jar", _String2=".") returned 1 [0169.126] wcscmp (_String1="local_policy.jar", _String2="..") returned 1 [0169.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831af58 [0169.126] wcscpy (in: _Dest=0x831af58, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0169.126] wcscat (in: _Dest=0x831af58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0169.127] wcscat (in: _Dest=0x831af58, _Source="local_policy.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar" [0169.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831af58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0169.127] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0169.128] wcscmp (_String1="trusted.libraries", _String2=".") returned 1 [0169.128] wcscmp (_String1="trusted.libraries", _String2="..") returned 1 [0169.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831afd8 [0169.128] wcscpy (in: _Dest=0x831afd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0169.128] wcscat (in: _Dest=0x831afd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0169.128] wcscat (in: _Dest=0x831afd8, _Source="trusted.libraries" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries" [0169.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831afd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0169.129] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0169.129] wcscmp (_String1="US_export_policy.jar", _String2=".") returned 1 [0169.129] wcscmp (_String1="US_export_policy.jar", _String2="..") returned 1 [0169.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81be9a8 [0169.129] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0169.129] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0169.129] wcscat (in: _Dest=0x81be9a8, _Source="US_export_policy.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar" [0169.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0169.131] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0169.131] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0173.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0173.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7328) returned 1 [0173.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23900) returned 1 Thread: id = 3437 os_tid = 0x1380 [0165.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\sound.properties")) returned 0x20 [0167.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties", dwFileAttributes=0x20) returned 0 [0167.556] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\sound.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.557] GetLastError () returned 0x5 [0167.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties", dwFileAttributes=0x20) returned 0 [0167.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce098) returned 1 Thread: id = 3438 os_tid = 0x1384 [0165.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre7\\lib\\tzmappings")) returned 0x20 [0166.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings", dwFileAttributes=0x20) returned 0 [0166.811] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre7\\lib\\tzmappings"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.812] GetLastError () returned 0x5 [0166.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings", dwFileAttributes=0x20) returned 0 [0166.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 3439 os_tid = 0x119c [0165.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e57438 [0165.751] wcscpy (in: _Dest=0x3e57438, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0165.751] wcscat (in: _Dest=0x3e57438, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0165.751] wcscat (in: _Dest=0x3e57438, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\*" [0165.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3caf0 [0165.751] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099350 [0168.250] wcscmp (_String1=".", _String2=".") returned 0 [0168.250] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.250] wcscmp (_String1="..", _String2=".") returned 1 [0168.250] wcscmp (_String1="..", _String2="..") returned 0 [0168.250] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Africa", cAlternateFileName="")) returned 1 [0168.250] wcscmp (_String1="Africa", _String2=".") returned 1 [0168.250] wcscmp (_String1="Africa", _String2="..") returned 1 [0168.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1508 [0168.250] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0168.250] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0168.250] wcscat (in: _Dest=0x2fe1508, _Source="Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe1508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae0 [0169.999] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="America", cAlternateFileName="")) returned 1 [0169.999] wcscmp (_String1="America", _String2=".") returned 1 [0169.999] wcscmp (_String1="America", _String2="..") returned 1 [0169.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7028 [0169.999] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0169.999] wcscat (in: _Dest=0x2fe7028, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0169.999] wcscat (in: _Dest=0x2fe7028, _Source="America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe7028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x257c [0170.003] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antarctica", cAlternateFileName="ANTARC~1")) returned 1 [0170.004] wcscmp (_String1="Antarctica", _String2=".") returned 1 [0170.004] wcscmp (_String1="Antarctica", _String2="..") returned 1 [0170.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x2fcea58 [0170.004] wcscpy (in: _Dest=0x2fcea58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.004] wcscat (in: _Dest=0x2fcea58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.004] wcscat (in: _Dest=0x2fcea58, _Source="Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0170.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fcea58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0170.006] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asia", cAlternateFileName="")) returned 1 [0170.006] wcscmp (_String1="Asia", _String2=".") returned 1 [0170.006] wcscmp (_String1="Asia", _String2="..") returned 1 [0170.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e230c0 [0170.006] wcscpy (in: _Dest=0x3e230c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.006] wcscat (in: _Dest=0x3e230c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.006] wcscat (in: _Dest=0x3e230c0, _Source="Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0170.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e230c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2534 [0170.008] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atlantic", cAlternateFileName="")) returned 1 [0170.008] wcscmp (_String1="Atlantic", _String2=".") returned 1 [0170.008] wcscmp (_String1="Atlantic", _String2="..") returned 1 [0170.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f68 [0170.008] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.008] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.008] wcscat (in: _Dest=0x2fe6f68, _Source="Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0170.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f8 [0170.010] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Australia", cAlternateFileName="AUSTRA~1")) returned 1 [0170.010] wcscmp (_String1="Australia", _String2=".") returned 1 [0170.010] wcscmp (_String1="Australia", _String2="..") returned 1 [0170.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe66c8 [0170.010] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.010] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.010] wcscat (in: _Dest=0x2fe66c8, _Source="Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0170.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd8 [0170.012] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CET", cAlternateFileName="")) returned 1 [0170.012] wcscmp (_String1="CET", _String2=".") returned 1 [0170.012] wcscmp (_String1="CET", _String2="..") returned 1 [0170.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e22e00 [0170.012] wcscpy (in: _Dest=0x3e22e00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.012] wcscat (in: _Dest=0x3e22e00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.012] wcscat (in: _Dest=0x3e22e00, _Source="CET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET" [0170.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e22e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b0c [0170.014] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0170.014] wcscmp (_String1="CST6CDT", _String2=".") returned 1 [0170.014] wcscmp (_String1="CST6CDT", _String2="..") returned 1 [0170.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6968 [0170.014] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.014] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.014] wcscat (in: _Dest=0x2fe6968, _Source="CST6CDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT" [0170.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0170.015] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="EET", cAlternateFileName="")) returned 1 [0170.016] wcscmp (_String1="EET", _String2=".") returned 1 [0170.016] wcscmp (_String1="EET", _String2="..") returned 1 [0170.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e231c8 [0170.016] wcscpy (in: _Dest=0x3e231c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.016] wcscat (in: _Dest=0x3e231c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.016] wcscat (in: _Dest=0x3e231c8, _Source="EET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET" [0170.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e231c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0170.017] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST", cAlternateFileName="")) returned 1 [0170.017] wcscmp (_String1="EST", _String2=".") returned 1 [0170.017] wcscmp (_String1="EST", _String2="..") returned 1 [0170.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e23698 [0170.017] wcscpy (in: _Dest=0x3e23698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.018] wcscat (in: _Dest=0x3e23698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.018] wcscat (in: _Dest=0x3e23698, _Source="EST" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST" [0170.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e23698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bdc [0170.019] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0170.019] wcscmp (_String1="EST5EDT", _String2=".") returned 1 [0170.019] wcscmp (_String1="EST5EDT", _String2="..") returned 1 [0170.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0170.019] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.019] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.019] wcscat (in: _Dest=0x2fe6c08, _Source="EST5EDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT" [0170.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0170.021] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Etc", cAlternateFileName="")) returned 1 [0170.021] wcscmp (_String1="Etc", _String2=".") returned 1 [0170.021] wcscmp (_String1="Etc", _String2="..") returned 1 [0170.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e22fb8 [0170.021] wcscpy (in: _Dest=0x3e22fb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.021] wcscat (in: _Dest=0x3e22fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.021] wcscat (in: _Dest=0x3e22fb8, _Source="Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0170.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e22fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0170.023] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Europe", cAlternateFileName="")) returned 1 [0170.023] wcscmp (_String1="Europe", _String2=".") returned 1 [0170.023] wcscmp (_String1="Europe", _String2="..") returned 1 [0170.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6cc8 [0170.023] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.023] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.024] wcscat (in: _Dest=0x2fe6cc8, _Source="Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0170.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0170.026] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0170.026] wcscmp (_String1="GMT", _String2=".") returned 1 [0170.026] wcscmp (_String1="GMT", _String2="..") returned 1 [0170.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e232d0 [0170.026] wcscpy (in: _Dest=0x3e232d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.027] wcscat (in: _Dest=0x3e232d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.027] wcscat (in: _Dest=0x3e232d0, _Source="GMT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT" [0170.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e232d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0170.028] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST", cAlternateFileName="")) returned 1 [0170.028] wcscmp (_String1="HST", _String2=".") returned 1 [0170.028] wcscmp (_String1="HST", _String2="..") returned 1 [0170.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x831c458 [0170.028] wcscpy (in: _Dest=0x831c458, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.028] wcscat (in: _Dest=0x831c458, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.029] wcscat (in: _Dest=0x831c458, _Source="HST" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST" [0170.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0170.030] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indian", cAlternateFileName="")) returned 1 [0170.030] wcscmp (_String1="Indian", _String2=".") returned 1 [0170.030] wcscmp (_String1="Indian", _String2="..") returned 1 [0170.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe67e8 [0170.030] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.030] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.030] wcscat (in: _Dest=0x2fe67e8, _Source="Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0170.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0170.031] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MET", cAlternateFileName="")) returned 1 [0170.031] wcscmp (_String1="MET", _String2=".") returned 1 [0170.031] wcscmp (_String1="MET", _String2="..") returned 1 [0170.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x831c4b0 [0170.031] wcscpy (in: _Dest=0x831c4b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.031] wcscat (in: _Dest=0x831c4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.032] wcscat (in: _Dest=0x831c4b0, _Source="MET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET" [0170.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831c4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c [0170.033] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST", cAlternateFileName="")) returned 1 [0170.033] wcscmp (_String1="MST", _String2=".") returned 1 [0170.033] wcscmp (_String1="MST", _String2="..") returned 1 [0170.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x831c718 [0170.033] wcscpy (in: _Dest=0x831c718, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.033] wcscat (in: _Dest=0x831c718, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.033] wcscat (in: _Dest=0x831c718, _Source="MST" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST" [0170.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831c718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0170.179] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0170.179] wcscmp (_String1="MST7MDT", _String2=".") returned 1 [0170.179] wcscmp (_String1="MST7MDT", _String2="..") returned 1 [0170.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe4b08 [0170.179] wcscpy (in: _Dest=0x2fe4b08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.179] wcscat (in: _Dest=0x2fe4b08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.180] wcscat (in: _Dest=0x2fe4b08, _Source="MST7MDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT" [0170.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe4b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c34 [0170.269] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pacific", cAlternateFileName="")) returned 1 [0170.269] wcscmp (_String1="Pacific", _String2=".") returned 1 [0170.269] wcscmp (_String1="Pacific", _String2="..") returned 1 [0170.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe74a8 [0170.269] wcscpy (in: _Dest=0x2fe74a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.269] wcscat (in: _Dest=0x2fe74a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.269] wcscat (in: _Dest=0x2fe74a8, _Source="Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0170.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe74a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2818 [0170.270] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0170.270] wcscmp (_String1="PST8PDT", _String2=".") returned 1 [0170.270] wcscmp (_String1="PST8PDT", _String2="..") returned 1 [0170.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe4a48 [0170.270] wcscpy (in: _Dest=0x2fe4a48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.270] wcscat (in: _Dest=0x2fe4a48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.270] wcscat (in: _Dest=0x2fe4a48, _Source="PST8PDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT" [0170.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe4a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x281c [0170.271] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemV", cAlternateFileName="")) returned 1 [0170.271] wcscmp (_String1="SystemV", _String2=".") returned 1 [0170.271] wcscmp (_String1="SystemV", _String2="..") returned 1 [0170.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe73e8 [0170.271] wcscpy (in: _Dest=0x2fe73e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.271] wcscat (in: _Dest=0x2fe73e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.271] wcscat (in: _Dest=0x2fe73e8, _Source="SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0170.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2fe73e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2820 [0170.272] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WET", cAlternateFileName="")) returned 1 [0170.273] wcscmp (_String1="WET", _String2=".") returned 1 [0170.273] wcscmp (_String1="WET", _String2="..") returned 1 [0170.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x831c7c8 [0170.273] wcscpy (in: _Dest=0x831c7c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.273] wcscat (in: _Dest=0x831c7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.273] wcscat (in: _Dest=0x831c7c8, _Source="WET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET" [0170.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831c7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2824 [0170.274] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 1 [0170.274] wcscmp (_String1="ZoneInfoMappings", _String2=".") returned 1 [0170.274] wcscmp (_String1="ZoneInfoMappings", _String2="..") returned 1 [0170.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39e78 [0170.274] wcscpy (in: _Dest=0x3f39e78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0170.274] wcscat (in: _Dest=0x3f39e78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0170.274] wcscat (in: _Dest=0x3f39e78, _Source="ZoneInfoMappings" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" [0170.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2828 [0170.275] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 0 [0171.443] FindClose (in: hFindFile=0x8099350 | out: hFindFile=0x8099350) returned 1 [0171.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3caf0) returned 1 [0171.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57438) returned 1 [0171.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 Thread: id = 3440 os_tid = 0xf7c [0165.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd")) returned 0x20 [0172.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD", dwFileAttributes=0x20) returned 0 [0172.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.066] GetLastError () returned 0x5 [0172.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD", dwFileAttributes=0x20) returned 0 [0172.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b6d8) returned 1 Thread: id = 3441 os_tid = 0xf78 [0165.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css")) returned 0x20 [0172.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS", dwFileAttributes=0x20) returned 0 [0172.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.075] GetLastError () returned 0x5 [0172.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS", dwFileAttributes=0x20) returned 0 [0172.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0088) returned 1 Thread: id = 3442 os_tid = 0x14fc [0165.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css")) returned 0x20 [0172.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS", dwFileAttributes=0x20) returned 0 [0172.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.081] GetLastError () returned 0x5 [0172.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS", dwFileAttributes=0x20) returned 0 [0172.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0f88) returned 1 Thread: id = 3443 os_tid = 0x804 [0165.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd")) returned 0x20 [0172.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD", dwFileAttributes=0x20) returned 0 [0172.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.093] GetLastError () returned 0x5 [0172.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD", dwFileAttributes=0x20) returned 0 [0172.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0a88) returned 1 Thread: id = 3444 os_tid = 0x1388 [0165.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl")) returned 0x20 [0172.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL", dwFileAttributes=0x20) returned 0 [0172.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.378] GetLastError () returned 0x5 [0172.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL", dwFileAttributes=0x20) returned 0 [0172.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0108) returned 1 Thread: id = 3445 os_tid = 0x121c [0165.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra")) returned 0x20 [0172.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA", dwFileAttributes=0x20) returned 0 [0172.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.449] GetLastError () returned 0x5 [0172.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA", dwFileAttributes=0x20) returned 0 [0172.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 3446 os_tid = 0x6b8 [0165.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs")) returned 0x20 [0172.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS", dwFileAttributes=0x20) returned 0 [0172.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.447] GetLastError () returned 0x5 [0172.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS", dwFileAttributes=0x20) returned 0 [0172.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf208) returned 1 Thread: id = 3447 os_tid = 0xf74 [0165.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc")) returned 0x20 [0172.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC", dwFileAttributes=0x20) returned 0 [0172.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.245] GetLastError () returned 0x5 [0172.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC", dwFileAttributes=0x20) returned 0 [0172.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 3448 os_tid = 0x1224 [0165.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dad468 [0165.810] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0165.810] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0165.810] wcscat (in: _Dest=0x3dad468, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*" [0165.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f608 [0165.810] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*", lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe508f7a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55708 [0166.585] wcscmp (_String1=".", _String2=".") returned 0 [0166.585] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe508f7a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.585] wcscmp (_String1="..", _String2=".") returned 1 [0166.585] wcscmp (_String1="..", _String2="..") returned 0 [0166.585] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5091eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0166.585] wcscmp (_String1="128.png", _String2=".") returned 1 [0166.585] wcscmp (_String1="128.png", _String2="..") returned 1 [0166.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e25e40 [0166.585] wcscpy (in: _Dest=0x3e25e40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0166.585] wcscat (in: _Dest=0x3e25e40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0166.585] wcscat (in: _Dest=0x3e25e40, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" [0167.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e25e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2434 [0167.309] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5088270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0167.309] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0167.309] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0167.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec080 [0167.309] wcscpy (in: _Dest=0x3dec080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0167.309] wcscat (in: _Dest=0x3dec080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0167.309] wcscat (in: _Dest=0x3dec080, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" [0167.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dec080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0167.310] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0167.311] wcscmp (_String1="_locales", _String2=".") returned 1 [0167.311] wcscmp (_String1="_locales", _String2="..") returned 1 [0167.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e24d40 [0167.311] wcscpy (in: _Dest=0x3e24d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0167.311] wcscat (in: _Dest=0x3e24d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0167.311] wcscat (in: _Dest=0x3e24d40, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0167.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e24d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048 [0167.312] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 1 [0167.312] wcscmp (_String1="__MACOSX", _String2=".") returned 1 [0167.312] wcscmp (_String1="__MACOSX", _String2="..") returned 1 [0167.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e25740 [0167.313] wcscpy (in: _Dest=0x3e25740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0167.313] wcscat (in: _Dest=0x3e25740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0167.313] wcscat (in: _Dest=0x3e25740, _Source="__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0167.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e25740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044 [0167.317] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 0 [0167.317] FindClose (in: hFindFile=0x3e55708 | out: hFindFile=0x3e55708) returned 1 [0167.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f608) returned 1 [0167.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 [0167.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020c90) returned 1 Thread: id = 3449 os_tid = 0xaf0 [0165.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadb30 [0165.810] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0165.810] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0165.810] wcscat (in: _Dest=0x3dadb30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*" [0165.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091c88 [0165.811] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099350 [0167.041] wcscmp (_String1=".", _String2=".") returned 0 [0167.041] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.041] wcscmp (_String1="..", _String2=".") returned 1 [0167.041] wcscmp (_String1="..", _String2="..") returned 0 [0167.041] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b998b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0167.041] wcscmp (_String1="128.png", _String2=".") returned 1 [0167.041] wcscmp (_String1="128.png", _String2="..") returned 1 [0167.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27040 [0167.042] wcscpy (in: _Dest=0x3e27040, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0167.042] wcscat (in: _Dest=0x3e27040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0167.042] wcscat (in: _Dest=0x3e27040, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" [0168.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e27040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23bc [0168.190] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b83920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe833f8d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8520820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0168.190] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0168.190] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0168.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec198 [0168.190] wcscpy (in: _Dest=0x3dec198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0168.190] wcscat (in: _Dest=0x3dec198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0168.190] wcscat (in: _Dest=0x3dec198, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" [0168.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dec198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0168.192] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ba34f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8335c90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8335c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0168.192] wcscmp (_String1="_locales", _String2=".") returned 1 [0168.192] wcscmp (_String1="_locales", _String2="..") returned 1 [0168.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e27440 [0168.192] wcscpy (in: _Dest=0x3e27440, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0168.192] wcscat (in: _Dest=0x3e27440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0168.192] wcscat (in: _Dest=0x3e27440, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0168.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0168.193] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0168.193] wcscmp (_String1="_metadata", _String2=".") returned 1 [0168.193] wcscmp (_String1="_metadata", _String2="..") returned 1 [0168.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef55a0 [0168.193] wcscpy (in: _Dest=0x3ef55a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0168.193] wcscat (in: _Dest=0x3ef55a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0168.193] wcscat (in: _Dest=0x3ef55a0, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0168.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef55a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0168.194] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0168.194] FindClose (in: hFindFile=0x8099350 | out: hFindFile=0x8099350) returned 1 [0168.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091c88) returned 1 [0168.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 [0168.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021050) returned 1 Thread: id = 3450 os_tid = 0xf70 [0165.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx")) returned 0x20 [0165.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0165.811] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.812] GetLastError () returned 0x5 [0165.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0165.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187418) returned 1 Thread: id = 3451 os_tid = 0x824 [0165.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve")) returned 0x20 [0165.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE", dwFileAttributes=0x20) returned 0 [0165.829] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.829] GetLastError () returned 0x5 [0165.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE", dwFileAttributes=0x20) returned 0 [0165.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 Thread: id = 3452 os_tid = 0x844 [0165.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve")) returned 0x20 [0165.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE", dwFileAttributes=0x20) returned 0 [0165.830] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.830] GetLastError () returned 0x5 [0165.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE", dwFileAttributes=0x20) returned 0 [0165.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dde28) returned 1 Thread: id = 3453 os_tid = 0x854 [0165.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve")) returned 0x20 [0165.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE", dwFileAttributes=0x20) returned 0 [0165.832] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.832] GetLastError () returned 0x5 [0165.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE", dwFileAttributes=0x20) returned 0 [0165.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 Thread: id = 3454 os_tid = 0x864 [0165.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv")) returned 0x20 [0165.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV", dwFileAttributes=0x20) returned 0 [0165.835] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.835] GetLastError () returned 0x5 [0165.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV", dwFileAttributes=0x20) returned 0 [0165.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 Thread: id = 3455 os_tid = 0x123c [0165.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv")) returned 0x20 [0165.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV", dwFileAttributes=0x20) returned 0 [0165.836] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.836] GetLastError () returned 0x5 [0165.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV", dwFileAttributes=0x20) returned 0 [0165.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 3456 os_tid = 0x874 [0165.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat")) returned 0x20 [0165.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", dwFileAttributes=0x20) returned 0 [0165.839] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.839] GetLastError () returned 0x5 [0165.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", dwFileAttributes=0x20) returned 0 [0165.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 Thread: id = 3457 os_tid = 0x11cc [0165.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat")) returned 0x20 [0165.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", dwFileAttributes=0x20) returned 0 [0165.841] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.841] GetLastError () returned 0x5 [0165.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", dwFileAttributes=0x20) returned 0 [0165.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df538) returned 1 Thread: id = 3458 os_tid = 0x11d4 [0165.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat")) returned 0x20 [0165.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", dwFileAttributes=0x20) returned 0 [0165.849] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.849] GetLastError () returned 0x5 [0165.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", dwFileAttributes=0x20) returned 0 [0165.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd6d8) returned 1 Thread: id = 3459 os_tid = 0x1248 [0165.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg")) returned 0x20 [0167.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0167.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.043] GetLastError () returned 0x5 [0167.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0167.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deeff0) returned 1 Thread: id = 3460 os_tid = 0x11dc [0165.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp")) returned 0x20 [0167.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0167.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.640] GetLastError () returned 0x5 [0167.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0167.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 3461 os_tid = 0x11e0 [0165.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif")) returned 0x20 [0167.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif", dwFileAttributes=0x20) returned 0 [0167.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.642] GetLastError () returned 0x5 [0167.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif", dwFileAttributes=0x20) returned 0 [0167.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8db8) returned 1 Thread: id = 3462 os_tid = 0x11e4 [0165.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif")) returned 0x20 [0167.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0167.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.657] GetLastError () returned 0x5 [0167.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0167.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8e80) returned 1 Thread: id = 3463 os_tid = 0x11f0 [0165.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif")) returned 0x20 [0167.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0167.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.678] GetLastError () returned 0x5 [0167.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0167.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8f48) returned 1 Thread: id = 3464 os_tid = 0x1258 [0165.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif")) returned 0x20 [0167.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0167.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.680] GetLastError () returned 0x5 [0167.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0167.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c738) returned 1 Thread: id = 3465 os_tid = 0x11f4 [0165.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif")) returned 0x20 [0167.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0167.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.682] GetLastError () returned 0x5 [0167.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0167.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9010) returned 1 Thread: id = 3466 os_tid = 0x1210 [0165.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif")) returned 0x20 [0167.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0167.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.659] GetLastError () returned 0x5 [0167.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0167.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3e650) returned 1 Thread: id = 3467 os_tid = 0x1214 [0165.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif")) returned 0x20 [0167.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0167.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.684] GetLastError () returned 0x5 [0167.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0167.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9b88) returned 1 Thread: id = 3468 os_tid = 0xc68 [0165.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif")) returned 0x20 [0166.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0166.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.948] GetLastError () returned 0x5 [0166.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0166.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c598) returned 1 Thread: id = 3469 os_tid = 0x518 [0165.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif")) returned 0x20 [0167.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0167.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.638] GetLastError () returned 0x5 [0167.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0167.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e90d8) returned 1 Thread: id = 3470 os_tid = 0xf30 [0165.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif")) returned 0x20 [0167.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0167.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.661] GetLastError () returned 0x5 [0167.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0167.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e6650) returned 1 Thread: id = 3471 os_tid = 0x74c [0165.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif")) returned 0x20 [0167.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0167.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.655] GetLastError () returned 0x5 [0167.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0167.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c3f8) returned 1 Thread: id = 3472 os_tid = 0x9ec [0165.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif")) returned 0x20 [0167.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0167.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.662] GetLastError () returned 0x5 [0167.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0167.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab98) returned 1 Thread: id = 3473 os_tid = 0x1394 [0165.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif")) returned 0x20 [0167.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0167.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.664] GetLastError () returned 0x5 [0167.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0167.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bf18) returned 1 Thread: id = 3474 os_tid = 0x2a8 [0165.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif")) returned 0x20 [0167.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0167.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.666] GetLastError () returned 0x5 [0167.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0167.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e58d0) returned 1 Thread: id = 3475 os_tid = 0x1510 [0165.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif")) returned 0x20 [0167.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0167.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.667] GetLastError () returned 0x5 [0167.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0167.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c808) returned 1 Thread: id = 3476 os_tid = 0x410 [0165.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif")) returned 0x20 [0167.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif", dwFileAttributes=0x20) returned 0 [0167.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.644] GetLastError () returned 0x5 [0167.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif", dwFileAttributes=0x20) returned 0 [0167.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c8d8) returned 1 Thread: id = 3477 os_tid = 0x1518 [0165.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif")) returned 0x20 [0167.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif", dwFileAttributes=0x20) returned 0 [0167.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.669] GetLastError () returned 0x5 [0167.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif", dwFileAttributes=0x20) returned 0 [0167.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9c68) returned 1 Thread: id = 3478 os_tid = 0xabc [0165.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif")) returned 0x20 [0167.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0167.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.645] GetLastError () returned 0x5 [0167.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0167.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e6800) returned 1 Thread: id = 3479 os_tid = 0x1398 [0165.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif")) returned 0x20 [0167.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0167.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.671] GetLastError () returned 0x5 [0167.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0167.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c9a8) returned 1 Thread: id = 3480 os_tid = 0xe8c [0165.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif")) returned 0x20 [0167.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif", dwFileAttributes=0x20) returned 0 [0167.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.647] GetLastError () returned 0x5 [0167.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif", dwFileAttributes=0x20) returned 0 [0167.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9d48) returned 1 Thread: id = 3481 os_tid = 0x12b4 [0165.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif")) returned 0x20 [0167.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0167.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.649] GetLastError () returned 0x5 [0167.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0167.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb648) returned 1 Thread: id = 3482 os_tid = 0xf48 [0165.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif")) returned 0x20 [0167.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif", dwFileAttributes=0x20) returned 0 [0167.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.673] GetLastError () returned 0x5 [0167.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif", dwFileAttributes=0x20) returned 0 [0167.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca78) returned 1 Thread: id = 3483 os_tid = 0xb50 [0165.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif")) returned 0x20 [0167.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif", dwFileAttributes=0x20) returned 0 [0167.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.675] GetLastError () returned 0x5 [0167.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif", dwFileAttributes=0x20) returned 0 [0167.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9e28) returned 1 Thread: id = 3484 os_tid = 0x2ac [0165.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif")) returned 0x20 [0167.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0167.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.677] GetLastError () returned 0x5 [0167.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0167.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb720) returned 1 Thread: id = 3485 os_tid = 0xb34 [0165.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e656c8 [0165.888] wcscpy (in: _Dest=0x3e656c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0165.888] wcscat (in: _Dest=0x3e656c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0165.888] wcscat (in: _Dest=0x3e656c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*" [0165.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f138 [0165.888] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099410 [0168.282] wcscmp (_String1=".", _String2=".") returned 0 [0168.282] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.282] wcscmp (_String1="..", _String2=".") returned 1 [0168.282] wcscmp (_String1="..", _String2="..") returned 0 [0168.282] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x368c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="ATTACH~1.JPG")) returned 1 [0168.282] wcscmp (_String1="Attachments.jpg", _String2=".") returned 1 [0168.282] wcscmp (_String1="Attachments.jpg", _String2="..") returned 1 [0168.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8021050 [0168.282] wcscpy (in: _Dest=0x8021050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0168.282] wcscat (in: _Dest=0x8021050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0168.282] wcscat (in: _Dest=0x8021050, _Source="Attachments.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" [0169.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0169.025] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1 [0169.025] wcscmp (_String1="BREAK.JPG", _String2=".") returned 1 [0169.025] wcscmp (_String1="BREAK.JPG", _String2="..") returned 1 [0169.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a8a8 [0169.025] wcscpy (in: _Dest=0x3e3a8a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.026] wcscat (in: _Dest=0x3e3a8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.026] wcscat (in: _Dest=0x3e3a8a8, _Source="BREAK.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" [0169.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0169.031] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1 [0169.031] wcscmp (_String1="BUTTON.JPG", _String2=".") returned 1 [0169.031] wcscmp (_String1="BUTTON.JPG", _String2="..") returned 1 [0169.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3a168 [0169.031] wcscpy (in: _Dest=0x3e3a168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.031] wcscat (in: _Dest=0x3e3a168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.031] wcscat (in: _Dest=0x3e3a168, _Source="BUTTON.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" [0169.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0169.032] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x33d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKBOX.JPG", cAlternateFileName="")) returned 1 [0169.032] wcscmp (_String1="CHECKBOX.JPG", _String2=".") returned 1 [0169.032] wcscmp (_String1="CHECKBOX.JPG", _String2="..") returned 1 [0169.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3aa78 [0169.032] wcscpy (in: _Dest=0x3e3aa78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.033] wcscat (in: _Dest=0x3e3aa78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.033] wcscat (in: _Dest=0x3e3aa78, _Source="CHECKBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" [0169.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3aa78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0169.034] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMBOBOX.JPG", cAlternateFileName="")) returned 1 [0169.034] wcscmp (_String1="COMBOBOX.JPG", _String2=".") returned 1 [0169.034] wcscmp (_String1="COMBOBOX.JPG", _String2="..") returned 1 [0169.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b1b8 [0169.034] wcscpy (in: _Dest=0x3e3b1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.034] wcscat (in: _Dest=0x3e3b1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.035] wcscat (in: _Dest=0x3e3b1b8, _Source="COMBOBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" [0169.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0169.036] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x36bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.JPG", cAlternateFileName="")) returned 1 [0169.036] wcscmp (_String1="CONTACT.JPG", _String2=".") returned 1 [0169.036] wcscmp (_String1="CONTACT.JPG", _String2="..") returned 1 [0169.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b558 [0169.036] wcscpy (in: _Dest=0x3e3b558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.036] wcscat (in: _Dest=0x3e3b558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.036] wcscat (in: _Dest=0x3e3b558, _Source="CONTACT.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" [0169.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0169.037] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.JPG", cAlternateFileName="")) returned 1 [0169.037] wcscmp (_String1="CURRENCY.JPG", _String2=".") returned 1 [0169.038] wcscmp (_String1="CURRENCY.JPG", _String2="..") returned 1 [0169.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b388 [0169.038] wcscpy (in: _Dest=0x3e3b388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.038] wcscat (in: _Dest=0x3e3b388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.038] wcscat (in: _Dest=0x3e3b388, _Source="CURRENCY.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" [0169.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0169.039] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x42af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATE.JPG", cAlternateFileName="")) returned 1 [0169.039] wcscmp (_String1="DATE.JPG", _String2=".") returned 1 [0169.039] wcscmp (_String1="DATE.JPG", _String2="..") returned 1 [0169.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8fe8 [0169.039] wcscpy (in: _Dest=0x2c8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.039] wcscat (in: _Dest=0x2c8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.039] wcscat (in: _Dest=0x2c8fe8, _Source="DATE.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" [0169.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0169.041] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4139, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATETIME.JPG", cAlternateFileName="")) returned 1 [0169.041] wcscmp (_String1="DATETIME.JPG", _String2=".") returned 1 [0169.041] wcscmp (_String1="DATETIME.JPG", _String2="..") returned 1 [0169.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b2a0 [0169.041] wcscpy (in: _Dest=0x3e3b2a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.041] wcscat (in: _Dest=0x3e3b2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.041] wcscat (in: _Dest=0x3e3b2a0, _Source="DATETIME.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" [0169.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0169.047] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalInk.jpg", cAlternateFileName="DIGITA~1.JPG")) returned 1 [0169.047] wcscmp (_String1="DigitalInk.jpg", _String2=".") returned 1 [0169.047] wcscmp (_String1="DigitalInk.jpg", _String2="..") returned 1 [0169.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x8021aa0 [0169.047] wcscpy (in: _Dest=0x8021aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.047] wcscat (in: _Dest=0x8021aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.047] wcscat (in: _Dest=0x8021aa0, _Source="DigitalInk.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" [0169.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0169.048] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8784ab30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbeddedView.jpg", cAlternateFileName="EMBEDD~1.JPG")) returned 1 [0169.048] wcscmp (_String1="EmbeddedView.jpg", _String2=".") returned 1 [0169.048] wcscmp (_String1="EmbeddedView.jpg", _String2="..") returned 1 [0169.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021140 [0169.048] wcscpy (in: _Dest=0x8021140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.048] wcscat (in: _Dest=0x8021140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.049] wcscat (in: _Dest=0x8021140, _Source="EmbeddedView.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" [0169.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0169.050] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADING.JPG", cAlternateFileName="")) returned 1 [0169.050] wcscmp (_String1="HEADING.JPG", _String2=".") returned 1 [0169.050] wcscmp (_String1="HEADING.JPG", _String2="..") returned 1 [0169.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x81ed730 [0169.050] wcscpy (in: _Dest=0x81ed730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.050] wcscat (in: _Dest=0x81ed730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.050] wcscat (in: _Dest=0x81ed730, _Source="HEADING.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" [0169.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0169.055] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x139a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMAGE.JPG", cAlternateFileName="")) returned 1 [0169.056] wcscmp (_String1="IMAGE.JPG", _String2=".") returned 1 [0169.056] wcscmp (_String1="IMAGE.JPG", _String2="..") returned 1 [0169.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x81ed818 [0169.056] wcscpy (in: _Dest=0x81ed818, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.056] wcscat (in: _Dest=0x81ed818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.056] wcscat (in: _Dest=0x81ed818, _Source="IMAGE.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" [0169.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0169.057] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe65, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINE.JPG", cAlternateFileName="")) returned 1 [0169.057] wcscmp (_String1="LINE.JPG", _String2=".") returned 1 [0169.057] wcscmp (_String1="LINE.JPG", _String2="..") returned 1 [0169.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8e28 [0169.057] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.057] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.057] wcscat (in: _Dest=0x2c8e28, _Source="LINE.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" [0169.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0169.058] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTBOX.JPG", cAlternateFileName="")) returned 1 [0169.058] wcscmp (_String1="LISTBOX.JPG", _String2=".") returned 1 [0169.058] wcscmp (_String1="LISTBOX.JPG", _String2="..") returned 1 [0169.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x81ed900 [0169.058] wcscpy (in: _Dest=0x81ed900, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.058] wcscat (in: _Dest=0x81ed900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.059] wcscat (in: _Dest=0x81ed900, _Source="LISTBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" [0169.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0169.064] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x443a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NUMERIC.JPG", cAlternateFileName="")) returned 1 [0169.064] wcscmp (_String1="NUMERIC.JPG", _String2=".") returned 1 [0169.064] wcscmp (_String1="NUMERIC.JPG", _String2="..") returned 1 [0169.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x81ed9e8 [0169.064] wcscpy (in: _Dest=0x81ed9e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.064] wcscat (in: _Dest=0x81ed9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.064] wcscat (in: _Dest=0x81ed9e8, _Source="NUMERIC.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" [0169.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0169.066] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x12f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSWORD.JPG", cAlternateFileName="")) returned 1 [0169.066] wcscmp (_String1="PASSWORD.JPG", _String2=".") returned 1 [0169.066] wcscmp (_String1="PASSWORD.JPG", _String2="..") returned 1 [0169.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x81edad0 [0169.066] wcscpy (in: _Dest=0x81edad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.066] wcscat (in: _Dest=0x81edad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.066] wcscat (in: _Dest=0x81edad0, _Source="PASSWORD.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" [0169.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81edad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0169.067] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903b1390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x43c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIO.JPG", cAlternateFileName="")) returned 1 [0169.067] wcscmp (_String1="RADIO.JPG", _String2=".") returned 1 [0169.067] wcscmp (_String1="RADIO.JPG", _String2="..") returned 1 [0169.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x81edbb8 [0169.067] wcscpy (in: _Dest=0x81edbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.067] wcscat (in: _Dest=0x81edbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.067] wcscat (in: _Dest=0x81edbb8, _Source="RADIO.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" [0169.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81edbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0169.068] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3ad9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SectionHeading.jpg", cAlternateFileName="SECTIO~1.JPG")) returned 1 [0169.068] wcscmp (_String1="SectionHeading.jpg", _String2=".") returned 1 [0169.068] wcscmp (_String1="SectionHeading.jpg", _String2="..") returned 1 [0169.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae100 [0169.068] wcscpy (in: _Dest=0x3dae100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.068] wcscat (in: _Dest=0x3dae100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.068] wcscat (in: _Dest=0x3dae100, _Source="SectionHeading.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" [0169.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25b0 [0169.070] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="StaticText.jpg", cAlternateFileName="STATIC~1.JPG")) returned 1 [0169.070] wcscmp (_String1="StaticText.jpg", _String2=".") returned 1 [0169.070] wcscmp (_String1="StaticText.jpg", _String2="..") returned 1 [0169.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x80207e0 [0169.070] wcscpy (in: _Dest=0x80207e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.070] wcscat (in: _Dest=0x80207e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.070] wcscat (in: _Dest=0x80207e0, _Source="StaticText.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" [0169.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80207e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x251c [0169.071] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3983, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTAREA.JPG", cAlternateFileName="")) returned 1 [0169.071] wcscmp (_String1="TEXTAREA.JPG", _String2=".") returned 1 [0169.071] wcscmp (_String1="TEXTAREA.JPG", _String2="..") returned 1 [0169.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x81edca0 [0169.071] wcscpy (in: _Dest=0x81edca0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.071] wcscat (in: _Dest=0x81edca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.071] wcscat (in: _Dest=0x81edca0, _Source="TEXTAREA.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" [0169.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81edca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2838 [0169.073] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90743490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTBOX.JPG", cAlternateFileName="")) returned 1 [0169.073] wcscmp (_String1="TEXTBOX.JPG", _String2=".") returned 1 [0169.073] wcscmp (_String1="TEXTBOX.JPG", _String2="..") returned 1 [0169.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x81edd88 [0169.073] wcscpy (in: _Dest=0x81edd88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.073] wcscat (in: _Dest=0x81edd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.073] wcscat (in: _Dest=0x81edd88, _Source="TEXTBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" [0169.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81edd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2954 [0169.074] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x42fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTVIEW.JPG", cAlternateFileName="")) returned 1 [0169.074] wcscmp (_String1="TEXTVIEW.JPG", _String2=".") returned 1 [0169.074] wcscmp (_String1="TEXTVIEW.JPG", _String2="..") returned 1 [0169.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x81ede70 [0169.074] wcscpy (in: _Dest=0x81ede70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.074] wcscat (in: _Dest=0x81ede70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.074] wcscat (in: _Dest=0x81ede70, _Source="TEXTVIEW.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" [0169.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ede70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2958 [0169.075] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 1 [0169.075] wcscmp (_String1="UnformattedNumeric.jpg", _String2=".") returned 1 [0169.075] wcscmp (_String1="UnformattedNumeric.jpg", _String2="..") returned 1 [0169.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e25840 [0169.075] wcscpy (in: _Dest=0x3e25840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0169.075] wcscat (in: _Dest=0x3e25840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0169.075] wcscat (in: _Dest=0x3e25840, _Source="UnformattedNumeric.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" [0169.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e25840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x295c [0169.076] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 0 [0169.076] FindClose (in: hFindFile=0x8099410 | out: hFindFile=0x8099410) returned 1 [0173.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f138) returned 1 [0173.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e656c8) returned 1 [0173.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3034e90) returned 1 Thread: id = 3486 os_tid = 0x1520 [0166.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html")) returned 0x20 [0167.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0167.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.653] GetLastError () returned 0x5 [0167.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0167.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb7f8) returned 1 Thread: id = 3487 os_tid = 0xf6c [0166.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml")) returned 0x20 [0167.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0167.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.587] GetLastError () returned 0x5 [0167.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0167.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dbc0) returned 1 Thread: id = 3488 os_tid = 0x3c8 [0166.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml")) returned 0x20 [0167.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", dwFileAttributes=0x20) returned 0 [0167.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.589] GetLastError () returned 0x5 [0167.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", dwFileAttributes=0x20) returned 0 [0167.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187418) returned 1 Thread: id = 3489 os_tid = 0xfb0 [0166.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml")) returned 0x20 [0167.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", dwFileAttributes=0x20) returned 0 [0167.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.591] GetLastError () returned 0x5 [0167.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", dwFileAttributes=0x20) returned 0 [0167.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1d78) returned 1 Thread: id = 3490 os_tid = 0xff4 [0166.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml")) returned 0x20 [0167.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", dwFileAttributes=0x20) returned 0 [0167.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.593] GetLastError () returned 0x5 [0167.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", dwFileAttributes=0x20) returned 0 [0167.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da618) returned 1 Thread: id = 3491 os_tid = 0x3f4 [0166.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml")) returned 0x20 [0167.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0167.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.616] GetLastError () returned 0x5 [0167.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0167.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186f80) returned 1 Thread: id = 3492 os_tid = 0x640 [0166.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml")) returned 0x20 [0167.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0167.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.618] GetLastError () returned 0x5 [0167.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0167.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b7b8) returned 1 Thread: id = 3493 os_tid = 0x434 [0166.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml")) returned 0x20 [0167.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", dwFileAttributes=0x20) returned 0 [0167.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.620] GetLastError () returned 0x5 [0167.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", dwFileAttributes=0x20) returned 0 [0167.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a638) returned 1 Thread: id = 3494 os_tid = 0xb20 [0166.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml")) returned 0x20 [0167.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", dwFileAttributes=0x20) returned 0 [0167.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.622] GetLastError () returned 0x5 [0167.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", dwFileAttributes=0x20) returned 0 [0167.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a9f8) returned 1 Thread: id = 3495 os_tid = 0x1528 [0166.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml")) returned 0x20 [0167.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0167.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.624] GetLastError () returned 0x5 [0167.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0167.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9908) returned 1 Thread: id = 3496 os_tid = 0x570 [0166.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml")) returned 0x20 [0167.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0167.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.626] GetLastError () returned 0x5 [0167.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0167.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81870d0) returned 1 Thread: id = 3497 os_tid = 0xbf4 [0166.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml")) returned 0x20 [0167.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0167.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.628] GetLastError () returned 0x5 [0167.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0167.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186e30) returned 1 Thread: id = 3498 os_tid = 0x584 [0166.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml")) returned 0x20 [0167.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0167.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.629] GetLastError () returned 0x5 [0167.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0167.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81876b8) returned 1 Thread: id = 3499 os_tid = 0xc14 [0166.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml")) returned 0x20 [0167.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", dwFileAttributes=0x20) returned 0 [0167.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.631] GetLastError () returned 0x5 [0167.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", dwFileAttributes=0x20) returned 0 [0167.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ae8) returned 1 Thread: id = 3500 os_tid = 0x6fc [0166.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml")) returned 0x20 [0167.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0167.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.633] GetLastError () returned 0x5 [0167.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0167.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ab38) returned 1 Thread: id = 3501 os_tid = 0xbf8 [0166.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml")) returned 0x20 [0167.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", dwFileAttributes=0x20) returned 0 [0167.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.635] GetLastError () returned 0x5 [0167.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", dwFileAttributes=0x20) returned 0 [0167.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a598) returned 1 Thread: id = 3502 os_tid = 0x564 [0166.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml")) returned 0x20 [0167.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", dwFileAttributes=0x20) returned 0 [0167.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.636] GetLastError () returned 0x5 [0167.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", dwFileAttributes=0x20) returned 0 [0167.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b038) returned 1 Thread: id = 3503 os_tid = 0x56c [0166.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml")) returned 0x20 [0166.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", dwFileAttributes=0x20) returned 0 [0166.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.930] GetLastError () returned 0x5 [0166.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", dwFileAttributes=0x20) returned 0 [0166.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b5d8) returned 1 Thread: id = 3504 os_tid = 0xb48 [0166.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml")) returned 0x20 [0166.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0166.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.932] GetLastError () returned 0x5 [0166.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0166.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187610) returned 1 Thread: id = 3505 os_tid = 0x848 [0166.373] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png")) returned 0x2020 [0168.933] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", dwFileAttributes=0x20) returned 1 [0175.194] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20f0 [0175.194] GetFileSizeEx (in: hFile=0x20f0, lpFileSize=0x87dfc20 | out: lpFileSize=0x87dfc20*=3372) returned 1 [0175.194] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0xd28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.195] ReadFile (in: hFile=0x20f0, lpBuffer=0x87dfc2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x87dfc08, lpOverlapped=0x0 | out: lpBuffer=0x87dfc2c*, lpNumberOfBytesRead=0x87dfc08*=0x4, lpOverlapped=0x0) returned 1 [0175.269] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0175.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42830 [0175.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d427b8 [0175.270] NtQuerySystemTime (in: CurrentTime=0x87dfba8 | out: CurrentTime=0x87dfba8*=132471540433812000) returned 0x0 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x3103df2e [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x4b49c1ef [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x321925fe [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x3bdb295e [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x1d52ddc3 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x78f79454 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x6e342772 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x1ce0af12 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x36318f38 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x68d3d975 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x37251e5d [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0xdba4e81 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x3083edcc [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x3a63f793 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x3545ebd [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x478dd6b3 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x5dfc890 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x6165e9b6 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x1242dab1 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x4a97171f [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x6b1c072 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x424e2f00 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x308aedfa [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x46489622 [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x11dfdade [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x6fd534de [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x4a3f3b2b [0175.270] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x54079dc2 [0175.271] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x26d590ea [0175.271] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x1ddcdf1e [0175.271] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x528cd335 [0175.271] RtlRandomEx (in: Seed=0x87dfba0 | out: Seed=0x87dfba0) returned 0x80a6a20 [0175.280] ReadFile (in: hFile=0x20f0, lpBuffer=0x81824d8, nNumberOfBytesToRead=0xd2c, lpNumberOfBytesRead=0x87dfb9c, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesRead=0x87dfb9c*=0xd2c, lpOverlapped=0x0) returned 1 [0175.281] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.281] WriteFile (in: hFile=0x20f0, lpBuffer=0x8159080*, nNumberOfBytesToWrite=0xd2c, lpNumberOfBytesWritten=0x87dfba0, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesWritten=0x87dfba0*=0xd2c, lpOverlapped=0x0) returned 1 [0176.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0176.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0176.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0176.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0176.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0176.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0176.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9f58) returned 1 [0176.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e68fd0 [0176.919] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.919] WriteFile (in: hFile=0x20f0, lpBuffer=0x30bc420*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x87dfc14, lpOverlapped=0x0 | out: lpBuffer=0x30bc420*, lpNumberOfBytesWritten=0x87dfc14*=0x10a, lpOverlapped=0x0) returned 1 [0176.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0176.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0176.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0176.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0176.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0176.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42830) returned 1 [0176.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42740) returned 1 [0176.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426a0) returned 1 [0176.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x30bc420 [0176.951] wcscpy (in: _Dest=0x30bc420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" [0176.951] wcscat (in: _Dest=0x30bc420, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.f0dbec" [0176.951] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.f0dbec", NtPathName=0x87dfb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8187110 [0182.893] FlushFileBuffers (hFile=0x20f0) returned 1 [0182.911] CloseHandle (hObject=0x20f0) returned 1 [0182.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8406880 [0182.977] wcscpy (in: _Dest=0x8406880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0182.977] wcscat (in: _Dest=0x8406880, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" [0182.977] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f0dbec-readme.txt")) returned 0x2020 [0182.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 [0182.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f97f0) returned 1 Thread: id = 3506 os_tid = 0x230 [0166.375] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png")) returned 0x2020 [0168.704] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", dwFileAttributes=0x20) returned 1 [0174.890] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a2c [0174.890] GetFileSizeEx (in: hFile=0x2a2c, lpFileSize=0x905fdf0 | out: lpFileSize=0x905fdf0*=160) returned 1 [0174.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0174.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0174.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0174.890] NtQuerySystemTime (in: CurrentTime=0x905fd78 | out: CurrentTime=0x905fd78*=132471540430068000) returned 0x0 [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x550fa22e [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x36c7eb38 [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x1b3c21eb [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x416b279d [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x48dde6b0 [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x34f80b9a [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x3cc2949e [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x7a7434e [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x41605f8b [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x26bfeb21 [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x3f4af180 [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x37d488e4 [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x7ad29d36 [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x4ad2ae79 [0174.890] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x4f35fdcb [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x534ad08b [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x5d30f1e6 [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x2b055a8c [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x42f557bb [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x24bd55f2 [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x7374020 [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x194ff2a2 [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x44d5c81e [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x78077bf [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x435f797e [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x1b09c7d7 [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x6a757b18 [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x5c2ed356 [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x75412873 [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x3e7f74e2 [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x6bdd075e [0174.891] RtlRandomEx (in: Seed=0x905fd70 | out: Seed=0x905fd70) returned 0x2501c635 [0174.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0174.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0174.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817e8d0 [0174.901] ReadFile (in: hFile=0x2a2c, lpBuffer=0x8164498, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0x905fd6c, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0x905fd6c*=0xa0, lpOverlapped=0x0) returned 1 [0174.903] SetFilePointerEx (in: hFile=0x2a2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.903] WriteFile (in: hFile=0x2a2c, lpBuffer=0x817e8d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x905fd70, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesWritten=0x905fd70*=0xa0, lpOverlapped=0x0) returned 1 [0175.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0175.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42498 [0175.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0175.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0175.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0175.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0175.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3c78) returned 1 [0175.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e68d00 [0175.515] SetFilePointerEx (in: hFile=0x2a2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.515] WriteFile (in: hFile=0x2a2c, lpBuffer=0x30bd028*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x905fde4, lpOverlapped=0x0 | out: lpBuffer=0x30bd028*, lpNumberOfBytesWritten=0x905fde4*=0x108, lpOverlapped=0x0) returned 1 [0175.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0175.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0175.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0175.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d00) returned 1 [0175.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428a8) returned 1 [0175.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0175.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0175.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0175.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bd028 [0175.946] wcscpy (in: _Dest=0x30bd028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" [0175.946] wcscat (in: _Dest=0x30bd028, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.f0dbec" [0175.946] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.f0dbec", NtPathName=0x905fd68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0175.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81e27a0 [0176.018] FlushFileBuffers (hFile=0x2a2c) returned 1 [0176.075] CloseHandle (hObject=0x2a2c) returned 1 [0176.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bbc78 [0176.076] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0176.076] wcscat (in: _Dest=0x30bbc78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" [0176.076] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f0dbec-readme.txt")) returned 0xffffffff [0176.076] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a2c [0176.076] WriteFile (in: hFile=0x2a2c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x905fd8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x905fd8c*=0x70c, lpOverlapped=0x0) returned 1 [0176.078] CloseHandle (hObject=0x2a2c) returned 1 [0176.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0176.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f93d0) returned 1 Thread: id = 3507 os_tid = 0xd08 [0166.376] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html")) returned 0x2020 [0168.933] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", dwFileAttributes=0x20) returned 1 [0177.113] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bac [0177.113] GetFileSizeEx (in: hFile=0x1bac, lpFileSize=0x918fca8 | out: lpFileSize=0x918fca8*=92) returned 1 [0177.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0177.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0177.114] NtQuerySystemTime (in: CurrentTime=0x918fc30 | out: CurrentTime=0x918fc30*=132471540451752000) returned 0x0 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x44f008a2 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x43e870bb [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x70488b66 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x39a81294 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x78b787dd [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x799be402 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x6d97ed01 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x722eb153 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x6522adcf [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x3ed01786 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x249e2e12 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x5df7cb36 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x2941966b [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x696c657c [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x234d341f [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x7fb2788e [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x721a6898 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x7a24a503 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x238c873b [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x2787354f [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x171a85ff [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x6972ef86 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x45570ae0 [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x49436cdd [0177.114] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x760d350e [0177.115] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x3e066a40 [0177.115] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x370263d0 [0177.115] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x6af07fe7 [0177.115] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x75772a9e [0177.115] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x15eb6f60 [0177.115] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x696c657c [0177.115] RtlRandomEx (in: Seed=0x918fc28 | out: Seed=0x918fc28) returned 0x1ab03fa7 [0177.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83ae180 [0177.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83b1d88 [0177.123] ReadFile (in: hFile=0x1bac, lpBuffer=0x83ae180, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0x918fc24, lpOverlapped=0x0 | out: lpBuffer=0x83ae180*, lpNumberOfBytesRead=0x918fc24*=0x5c, lpOverlapped=0x0) returned 1 [0181.839] SetFilePointerEx (in: hFile=0x1bac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.839] WriteFile (in: hFile=0x1bac, lpBuffer=0x83b1d88*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x918fc28, lpOverlapped=0x0 | out: lpBuffer=0x83b1d88*, lpNumberOfBytesWritten=0x918fc28*=0x5c, lpOverlapped=0x0) returned 1 [0189.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0189.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1040 [0189.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0189.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83b1d88) returned 1 [0189.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ae180) returned 1 [0189.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 [0189.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa1e0) returned 1 [0189.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1040 [0189.483] SetFilePointerEx (in: hFile=0x1bac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.483] WriteFile (in: hFile=0x1bac, lpBuffer=0x30bc880*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x918fc9c, lpOverlapped=0x0 | out: lpBuffer=0x30bc880*, lpNumberOfBytesWritten=0x918fc9c*=0x104, lpOverlapped=0x0) returned 1 [0190.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0190.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0190.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0190.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0190.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0190.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0190.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0190.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16a8) returned 1 [0190.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bc880 [0190.568] wcscpy (in: _Dest=0x30bc880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" [0190.568] wcscat (in: _Dest=0x30bc880, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.f0dbec" [0190.568] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.f0dbec", NtPathName=0x918fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e8428 [0190.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8428) returned 1 [0190.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07408) returned 1 [0190.891] NtQueryInformationFile (in: FileHandle=0x1bac, IoStatusBlock=0x918fbf8, FileInformation=0x918fc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x918fbf8, FileInformation=0x918fc00) returned 0x0 [0190.891] NtSetInformationFile (FileHandle=0x1bac, IoStatusBlock=0x918fbf8, FileInformation=0x918fc00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0193.206] FlushFileBuffers (hFile=0x1bac) returned 1 [0195.481] CloseHandle (hObject=0x1bac) returned 1 [0196.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bc0d8 [0196.424] wcscpy (in: _Dest=0x30bc0d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0196.424] wcscat (in: _Dest=0x30bc0d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" [0196.424] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f0dbec-readme.txt")) returned 0x2020 [0196.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0196.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25340) returned 1 Thread: id = 3508 os_tid = 0xd54 [0166.377] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js")) returned 0x2020 [0168.934] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", dwFileAttributes=0x20) returned 1 [0177.124] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ba4 [0177.124] GetFileSizeEx (in: hFile=0x1ba4, lpFileSize=0x91cfdc0 | out: lpFileSize=0x91cfdc0*=95) returned 1 [0177.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3200 [0177.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0177.124] NtQuerySystemTime (in: CurrentTime=0x91cfd48 | out: CurrentTime=0x91cfd48*=132471540451908000) returned 0x0 [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x1e7d99 [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x38b4134c [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x7d3cc3b3 [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x618857fa [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x5aaf9020 [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x32b3ec86 [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x79710b42 [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x382798ad [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x66fd018e [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x3ab6a6e7 [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x26e76b24 [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x1f81254 [0177.124] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x7869a8c7 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x2bc31ab7 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x14def90 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x65b9a108 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x21d4fb1c [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x2ad1f51d [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x50419ce3 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x318dcaa6 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x7d245fd [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x6ea0a994 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x1f7e1ea5 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x5c98ee70 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x50306484 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x55c13db8 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x1bb653da [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x247e7125 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x18ffa4c0 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x50ce7da6 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x7a775924 [0177.125] RtlRandomEx (in: Seed=0x91cfd40 | out: Seed=0x91cfd40) returned 0x38ad8da1 [0177.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83b5990 [0177.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83b9598 [0177.134] ReadFile (in: hFile=0x1ba4, lpBuffer=0x83b5990, nNumberOfBytesToRead=0x5f, lpNumberOfBytesRead=0x91cfd3c, lpOverlapped=0x0 | out: lpBuffer=0x83b5990*, lpNumberOfBytesRead=0x91cfd3c*=0x5f, lpOverlapped=0x0) returned 1 [0181.841] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.841] WriteFile (in: hFile=0x1ba4, lpBuffer=0x83b9598*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x91cfd40, lpOverlapped=0x0 | out: lpBuffer=0x83b9598*, lpNumberOfBytesWritten=0x91cfd40*=0x5f, lpOverlapped=0x0) returned 1 [0189.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0189.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0189.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0189.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83b9598) returned 1 [0189.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83b5990) returned 1 [0189.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 [0189.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa030) returned 1 [0189.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1298 [0189.489] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.490] WriteFile (in: hFile=0x1ba4, lpBuffer=0x3ef56a8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x91cfdb4, lpOverlapped=0x0 | out: lpBuffer=0x3ef56a8*, lpNumberOfBytesWritten=0x91cfdb4*=0x100, lpOverlapped=0x0) returned 1 [0190.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef56a8) returned 1 [0190.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0190.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0190.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0190.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0190.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0190.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0190.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0190.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3ef56a8 [0190.558] wcscpy (in: _Dest=0x3ef56a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" [0190.558] wcscat (in: _Dest=0x3ef56a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.f0dbec" [0190.558] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.f0dbec", NtPathName=0x91cfd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e8e90 [0190.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8e90) returned 1 [0190.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f70b0) returned 1 [0190.753] NtQueryInformationFile (in: FileHandle=0x1ba4, IoStatusBlock=0x91cfd10, FileInformation=0x91cfd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x91cfd10, FileInformation=0x91cfd18) returned 0x0 [0190.753] NtSetInformationFile (FileHandle=0x1ba4, IoStatusBlock=0x91cfd10, FileInformation=0x91cfd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef56a8) returned 1 [0190.873] FlushFileBuffers (hFile=0x1ba4) returned 1 [0192.132] CloseHandle (hObject=0x1ba4) returned 1 [0196.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x81dff08 [0196.022] wcscpy (in: _Dest=0x81dff08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0196.022] wcscat (in: _Dest=0x81dff08, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" [0196.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f0dbec-readme.txt")) returned 0x2020 [0196.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dff08) returned 1 [0196.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25040) returned 1 Thread: id = 3509 os_tid = 0xea0 [0166.378] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json")) returned 0x2020 [0168.936] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0175.166] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20f4 [0175.167] GetFileSizeEx (in: hFile=0x20f4, lpFileSize=0x759f860 | out: lpFileSize=0x759f860*=725) returned 1 [0175.167] SetFilePointerEx (in: hFile=0x20f4, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.167] ReadFile (in: hFile=0x20f4, lpBuffer=0x759f86c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x759f848, lpOverlapped=0x0 | out: lpBuffer=0x759f86c*, lpNumberOfBytesRead=0x759f848*=0x4, lpOverlapped=0x0) returned 1 [0175.298] SetFilePointerEx (in: hFile=0x20f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0175.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42628 [0175.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42498 [0175.298] NtQuerySystemTime (in: CurrentTime=0x759f7e8 | out: CurrentTime=0x759f7e8*=132471540434124000) returned 0x0 [0175.298] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x7bc3e97 [0175.298] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x54161e6 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0xe072f83 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0xc5ab803 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x103d7d09 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x7e1d7d82 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x462e4302 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x6d1c0571 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x118e9790 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x716b3195 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x2fbefa5 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x1f510521 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x21ed2c8e [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x590b3ae7 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x64f89765 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x56ee848e [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x4681776c [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0xa52c360 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x6c54b4fc [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x74cb0c03 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x63eba922 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x6723e357 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x2ba15527 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x3d64bcf6 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x374c9f4f [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x21b8708f [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x96bbf1d [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x57a07093 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x4ee342b4 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x6304c279 [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0x7b7bf1af [0175.299] RtlRandomEx (in: Seed=0x759f7e0 | out: Seed=0x759f7e0) returned 0xa4ce7aa [0175.309] ReadFile (in: hFile=0x20f4, lpBuffer=0x81734b8, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0x759f7dc, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesRead=0x759f7dc*=0x2d5, lpOverlapped=0x0) returned 1 [0175.309] SetFilePointerEx (in: hFile=0x20f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.309] WriteFile (in: hFile=0x20f4, lpBuffer=0x8151870*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0x759f7e0, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesWritten=0x759f7e0*=0x2d5, lpOverlapped=0x0) returned 1 [0177.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0177.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0177.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0177.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0177.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0177.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0177.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa7c8) returned 1 [0177.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e691e0 [0177.477] SetFilePointerEx (in: hFile=0x20f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.477] WriteFile (in: hFile=0x20f4, lpBuffer=0x30bbb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x759f854, lpOverlapped=0x0 | out: lpBuffer=0x30bbb60*, lpNumberOfBytesWritten=0x759f854*=0x10c, lpOverlapped=0x0) returned 1 [0182.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0182.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69210) returned 1 [0182.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0182.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691e0) returned 1 [0182.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0182.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42628) returned 1 [0182.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423d0) returned 1 [0182.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42330) returned 1 [0182.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bbb60 [0182.465] wcscpy (in: _Dest=0x30bbb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" [0182.465] wcscat (in: _Dest=0x30bbb60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.f0dbec" [0182.465] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.f0dbec", NtPathName=0x759f7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x2d2ac0 [0182.919] FlushFileBuffers (hFile=0x20f4) returned 1 [0182.920] CloseHandle (hObject=0x20f4) returned 1 [0182.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8406998 [0182.957] wcscpy (in: _Dest=0x8406998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0182.957] wcscat (in: _Dest=0x8406998, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" [0182.957] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f0dbec-readme.txt")) returned 0x2020 [0182.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 [0182.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f70) returned 1 Thread: id = 3510 os_tid = 0xe94 [0166.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e26340 [0166.378] wcscpy (in: _Dest=0x3e26340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0166.378] wcscat (in: _Dest=0x3e26340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0166.378] wcscat (in: _Dest=0x3e26340, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*" [0166.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101948 [0166.379] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e1cb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc3140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc3140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80992d0 [0168.413] wcscmp (_String1=".", _String2=".") returned 0 [0168.413] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e1cb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc3140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc3140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.413] wcscmp (_String1="..", _String2=".") returned 1 [0168.413] wcscmp (_String1="..", _String2="..") returned 0 [0168.413] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e21990, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e240a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e240a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0168.413] wcscmp (_String1="ar", _String2=".") returned 1 [0168.413] wcscmp (_String1="ar", _String2="..") returned 1 [0168.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef58b8 [0168.413] wcscpy (in: _Dest=0x3ef58b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.413] wcscat (in: _Dest=0x3ef58b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.413] wcscat (in: _Dest=0x3ef58b8, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0168.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef58b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c34 [0168.623] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e2b5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e2dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e2dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0168.623] wcscmp (_String1="bg", _String2=".") returned 1 [0168.623] wcscmp (_String1="bg", _String2="..") returned 1 [0168.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5bd0 [0168.623] wcscpy (in: _Dest=0x3ef5bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.623] wcscat (in: _Dest=0x3ef5bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.623] wcscat (in: _Dest=0x3ef5bd0, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0168.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c30 [0168.624] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e35210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3a030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e3a030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0168.624] wcscmp (_String1="ca", _String2=".") returned 1 [0168.624] wcscmp (_String1="ca", _String2="..") returned 1 [0168.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5cd8 [0168.625] wcscpy (in: _Dest=0x3ef5cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.625] wcscat (in: _Dest=0x3ef5cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.625] wcscat (in: _Dest=0x3ef5cd8, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0168.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c2c [0168.627] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e3ee50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e43c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e43c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0168.627] wcscmp (_String1="cs", _String2=".") returned 1 [0168.627] wcscmp (_String1="cs", _String2="..") returned 1 [0168.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5de0 [0168.627] wcscpy (in: _Dest=0x3ef5de0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.627] wcscat (in: _Dest=0x3ef5de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.627] wcscat (in: _Dest=0x3ef5de0, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0168.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c28 [0168.628] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e46380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e4b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0168.628] wcscmp (_String1="da", _String2=".") returned 1 [0168.628] wcscmp (_String1="da", _String2="..") returned 1 [0168.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5ee8 [0168.629] wcscpy (in: _Dest=0x3ef5ee8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.629] wcscat (in: _Dest=0x3ef5ee8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.629] wcscat (in: _Dest=0x3ef5ee8, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0168.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c24 [0168.630] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e526d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e54de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e54de0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0168.630] wcscmp (_String1="de", _String2=".") returned 1 [0168.630] wcscmp (_String1="de", _String2="..") returned 1 [0168.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5ff0 [0168.630] wcscpy (in: _Dest=0x3ef5ff0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.630] wcscat (in: _Dest=0x3ef5ff0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.630] wcscat (in: _Dest=0x3ef5ff0, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0168.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c20 [0168.635] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e5c310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e5ea20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e5ea20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0168.635] wcscmp (_String1="el", _String2=".") returned 1 [0168.635] wcscmp (_String1="el", _String2="..") returned 1 [0168.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef60f8 [0168.635] wcscpy (in: _Dest=0x3ef60f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.635] wcscat (in: _Dest=0x3ef60f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.636] wcscat (in: _Dest=0x3ef60f8, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0168.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef60f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c1c [0168.637] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e65f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e68660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e68660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0168.637] wcscmp (_String1="en_GB", _String2=".") returned 1 [0168.637] wcscmp (_String1="en_GB", _String2="..") returned 1 [0168.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3ef6200 [0168.637] wcscpy (in: _Dest=0x3ef6200, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.637] wcscat (in: _Dest=0x3ef6200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.637] wcscat (in: _Dest=0x3ef6200, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0168.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c18 [0168.638] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e6fb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e722a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e722a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0168.638] wcscmp (_String1="en_US", _String2=".") returned 1 [0168.638] wcscmp (_String1="en_US", _String2="..") returned 1 [0168.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3ef6308 [0168.638] wcscpy (in: _Dest=0x3ef6308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.638] wcscat (in: _Dest=0x3ef6308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.639] wcscat (in: _Dest=0x3ef6308, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0168.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c14 [0168.640] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e797d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e7bee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e7bee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0168.640] wcscmp (_String1="es", _String2=".") returned 1 [0168.640] wcscmp (_String1="es", _String2="..") returned 1 [0168.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6410 [0168.640] wcscpy (in: _Dest=0x3ef6410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.640] wcscat (in: _Dest=0x3ef6410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.640] wcscat (in: _Dest=0x3ef6410, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0168.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c10 [0168.641] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e83410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e85b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e85b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0168.641] wcscmp (_String1="es_419", _String2=".") returned 1 [0168.641] wcscmp (_String1="es_419", _String2="..") returned 1 [0168.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec940 [0168.641] wcscpy (in: _Dest=0x3dec940, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.641] wcscat (in: _Dest=0x3dec940, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.641] wcscat (in: _Dest=0x3dec940, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0168.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c04 [0168.642] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e8d050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8f760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e8f760, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0168.642] wcscmp (_String1="et", _String2=".") returned 1 [0168.642] wcscmp (_String1="et", _String2="..") returned 1 [0168.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6518 [0168.642] wcscpy (in: _Dest=0x3ef6518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.642] wcscat (in: _Dest=0x3ef6518, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.642] wcscat (in: _Dest=0x3ef6518, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0168.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c00 [0168.645] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e96c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9bab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e9bab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0168.645] wcscmp (_String1="fi", _String2=".") returned 1 [0168.645] wcscmp (_String1="fi", _String2="..") returned 1 [0168.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6620 [0168.645] wcscpy (in: _Dest=0x3ef6620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.645] wcscat (in: _Dest=0x3ef6620, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.645] wcscat (in: _Dest=0x3ef6620, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0168.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bfc [0168.648] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ea2fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea56f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ea56f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0168.648] wcscmp (_String1="fil", _String2=".") returned 1 [0168.648] wcscmp (_String1="fil", _String2="..") returned 1 [0168.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef6728 [0168.648] wcscpy (in: _Dest=0x3ef6728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.648] wcscat (in: _Dest=0x3ef6728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.648] wcscat (in: _Dest=0x3ef6728, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0168.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bf8 [0168.649] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eacc20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eaf330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eaf330, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0168.649] wcscmp (_String1="fr", _String2=".") returned 1 [0168.649] wcscmp (_String1="fr", _String2="..") returned 1 [0168.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6830 [0168.649] wcscpy (in: _Dest=0x3ef6830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.649] wcscat (in: _Dest=0x3ef6830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.649] wcscat (in: _Dest=0x3ef6830, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0168.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bf4 [0168.650] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eb1a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb6860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eb6860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0168.650] wcscmp (_String1="he", _String2=".") returned 1 [0168.650] wcscmp (_String1="he", _String2="..") returned 1 [0168.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6938 [0168.650] wcscpy (in: _Dest=0x3ef6938, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.650] wcscat (in: _Dest=0x3ef6938, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.650] wcscat (in: _Dest=0x3ef6938, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0168.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2508 [0168.651] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ebdd90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec04a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ec04a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0168.651] wcscmp (_String1="hi", _String2=".") returned 1 [0168.651] wcscmp (_String1="hi", _String2="..") returned 1 [0168.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6a40 [0168.652] wcscpy (in: _Dest=0x3ef6a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.652] wcscat (in: _Dest=0x3ef6a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.652] wcscat (in: _Dest=0x3ef6a40, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0168.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bf0 [0168.653] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ec52c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eca0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eca0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0168.653] wcscmp (_String1="hu", _String2=".") returned 1 [0168.653] wcscmp (_String1="hu", _String2="..") returned 1 [0168.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3648 [0168.653] wcscpy (in: _Dest=0x81f3648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.653] wcscat (in: _Dest=0x81f3648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.653] wcscat (in: _Dest=0x81f3648, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0168.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2540 [0168.654] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ed1610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed3d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ed3d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0168.654] wcscmp (_String1="id", _String2=".") returned 1 [0168.654] wcscmp (_String1="id", _String2="..") returned 1 [0168.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3750 [0168.654] wcscpy (in: _Dest=0x81f3750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.654] wcscat (in: _Dest=0x81f3750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.654] wcscat (in: _Dest=0x81f3750, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0168.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd4 [0168.655] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5edd960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee0070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee0070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0168.655] wcscmp (_String1="it", _String2=".") returned 1 [0168.655] wcscmp (_String1="it", _String2="..") returned 1 [0168.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3858 [0168.655] wcscpy (in: _Dest=0x81f3858, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.655] wcscat (in: _Dest=0x81f3858, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.655] wcscat (in: _Dest=0x81f3858, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0168.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2874 [0168.656] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee75a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee9cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee9cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0168.656] wcscmp (_String1="ja", _String2=".") returned 1 [0168.656] wcscmp (_String1="ja", _String2="..") returned 1 [0168.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3960 [0168.656] wcscpy (in: _Dest=0x81f3960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.656] wcscat (in: _Dest=0x81f3960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.656] wcscat (in: _Dest=0x81f3960, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0168.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd0 [0168.657] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ef11e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef38f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ef38f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0168.657] wcscmp (_String1="ko", _String2=".") returned 1 [0168.657] wcscmp (_String1="ko", _String2="..") returned 1 [0168.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3a68 [0168.657] wcscpy (in: _Dest=0x81f3a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.657] wcscat (in: _Dest=0x81f3a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.657] wcscat (in: _Dest=0x81f3a68, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0168.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb4 [0168.658] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5efae20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5efd530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5efd530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0168.658] wcscmp (_String1="lt", _String2=".") returned 1 [0168.659] wcscmp (_String1="lt", _String2="..") returned 1 [0168.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3b70 [0168.659] wcscpy (in: _Dest=0x81f3b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.659] wcscat (in: _Dest=0x81f3b70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.659] wcscat (in: _Dest=0x81f3b70, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0168.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb0 [0168.660] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f04a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f07170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f07170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0168.660] wcscmp (_String1="lv", _String2=".") returned 1 [0168.660] wcscmp (_String1="lv", _String2="..") returned 1 [0168.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3c78 [0168.660] wcscpy (in: _Dest=0x81f3c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0168.660] wcscat (in: _Dest=0x81f3c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0168.660] wcscat (in: _Dest=0x81f3c78, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0168.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bac [0169.349] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f0e6a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f10db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f10db0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0169.349] wcscmp (_String1="ms", _String2=".") returned 1 [0169.349] wcscmp (_String1="ms", _String2="..") returned 1 [0169.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f6bf0 [0169.349] wcscpy (in: _Dest=0x81f6bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0169.349] wcscat (in: _Dest=0x81f6bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0169.349] wcscat (in: _Dest=0x81f6bf0, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0170.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f6bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0170.086] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f182e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1a9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f1a9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0170.087] wcscmp (_String1="nl", _String2=".") returned 1 [0170.087] wcscmp (_String1="nl", _String2="..") returned 1 [0170.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8321dd0 [0170.087] wcscpy (in: _Dest=0x8321dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.087] wcscat (in: _Dest=0x8321dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.087] wcscat (in: _Dest=0x8321dd0, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0170.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae4 [0170.088] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f21f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f24630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f24630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0170.088] wcscmp (_String1="no", _String2=".") returned 1 [0170.088] wcscmp (_String1="no", _String2="..") returned 1 [0170.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8321ed8 [0170.088] wcscpy (in: _Dest=0x8321ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.088] wcscat (in: _Dest=0x8321ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.088] wcscat (in: _Dest=0x8321ed8, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0170.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e64 [0170.089] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f2bb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f2e270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f2e270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0170.090] wcscmp (_String1="pl", _String2=".") returned 1 [0170.090] wcscmp (_String1="pl", _String2="..") returned 1 [0170.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8321fe0 [0170.090] wcscpy (in: _Dest=0x8321fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.090] wcscat (in: _Dest=0x8321fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.090] wcscat (in: _Dest=0x8321fe0, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0170.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0170.091] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f357a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3a5c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f3a5c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0170.091] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0170.091] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0170.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83220e8 [0170.091] wcscpy (in: _Dest=0x83220e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.091] wcscat (in: _Dest=0x83220e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.091] wcscat (in: _Dest=0x83220e8, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0170.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83220e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0170.093] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f41af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f44200, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f44200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0170.093] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0170.093] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0170.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83221f0 [0170.093] wcscpy (in: _Dest=0x83221f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.093] wcscat (in: _Dest=0x83221f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.093] wcscat (in: _Dest=0x83221f0, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0170.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83221f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0170.094] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f4b730, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f4de40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f4de40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0170.094] wcscmp (_String1="ro", _String2=".") returned 1 [0170.094] wcscmp (_String1="ro", _String2="..") returned 1 [0170.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83222f8 [0170.094] wcscpy (in: _Dest=0x83222f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.094] wcscat (in: _Dest=0x83222f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.094] wcscat (in: _Dest=0x83222f8, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0170.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83222f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0170.096] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f55370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5a190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f5a190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0170.096] wcscmp (_String1="ru", _String2=".") returned 1 [0170.096] wcscmp (_String1="ru", _String2="..") returned 1 [0170.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8322400 [0170.096] wcscpy (in: _Dest=0x8322400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.096] wcscat (in: _Dest=0x8322400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.096] wcscat (in: _Dest=0x8322400, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0170.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8322400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0170.097] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f616c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f63dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f63dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0170.097] wcscmp (_String1="sk", _String2=".") returned 1 [0170.097] wcscmp (_String1="sk", _String2="..") returned 1 [0170.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8322508 [0170.097] wcscpy (in: _Dest=0x8322508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.097] wcscat (in: _Dest=0x8322508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.097] wcscat (in: _Dest=0x8322508, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0170.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8322508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0170.099] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f6b300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f70120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f70120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0170.099] wcscmp (_String1="sl", _String2=".") returned 1 [0170.099] wcscmp (_String1="sl", _String2="..") returned 1 [0170.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8322610 [0170.099] wcscpy (in: _Dest=0x8322610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.099] wcscat (in: _Dest=0x8322610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.099] wcscat (in: _Dest=0x8322610, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0170.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8322610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0170.100] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f79d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7c470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f7c470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0170.100] wcscmp (_String1="sr", _String2=".") returned 1 [0170.100] wcscmp (_String1="sr", _String2="..") returned 1 [0170.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8322718 [0170.100] wcscpy (in: _Dest=0x8322718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.100] wcscat (in: _Dest=0x8322718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.100] wcscat (in: _Dest=0x8322718, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0170.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8322718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0170.101] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f839a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f860b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f860b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0170.101] wcscmp (_String1="sv", _String2=".") returned 1 [0170.101] wcscmp (_String1="sv", _String2="..") returned 1 [0170.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8332930 [0170.102] wcscpy (in: _Dest=0x8332930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.102] wcscat (in: _Dest=0x8332930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.102] wcscat (in: _Dest=0x8332930, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0170.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a4 [0170.103] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f8d5e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f8fcf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f8fcf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0170.103] wcscmp (_String1="th", _String2=".") returned 1 [0170.103] wcscmp (_String1="th", _String2="..") returned 1 [0170.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8332a38 [0170.103] wcscpy (in: _Dest=0x8332a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.103] wcscat (in: _Dest=0x8332a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.103] wcscat (in: _Dest=0x8332a38, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0170.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0170.104] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f97220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f99930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f99930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0170.104] wcscmp (_String1="tr", _String2=".") returned 1 [0170.104] wcscmp (_String1="tr", _String2="..") returned 1 [0170.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8332b40 [0170.104] wcscpy (in: _Dest=0x8332b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.104] wcscat (in: _Dest=0x8332b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.105] wcscat (in: _Dest=0x8332b40, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0170.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0170.106] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fa0e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fa8390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fa8390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0170.106] wcscmp (_String1="uk", _String2=".") returned 1 [0170.106] wcscmp (_String1="uk", _String2="..") returned 1 [0170.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8332c48 [0170.106] wcscpy (in: _Dest=0x8332c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.106] wcscat (in: _Dest=0x8332c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.106] wcscat (in: _Dest=0x8332c48, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0170.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0170.107] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fad1b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb1fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fb1fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0170.107] wcscmp (_String1="vi", _String2=".") returned 1 [0170.107] wcscmp (_String1="vi", _String2="..") returned 1 [0170.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8332d50 [0170.107] wcscpy (in: _Dest=0x8332d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.107] wcscat (in: _Dest=0x8332d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.107] wcscat (in: _Dest=0x8332d50, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0170.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0170.108] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fb6df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbbc10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fbbc10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0170.108] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0170.108] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0170.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8332e58 [0170.108] wcscpy (in: _Dest=0x8332e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.108] wcscat (in: _Dest=0x8332e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.109] wcscat (in: _Dest=0x8332e58, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0170.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4 [0170.109] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0170.110] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0170.110] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0170.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8332f60 [0170.110] wcscpy (in: _Dest=0x8332f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0170.110] wcscat (in: _Dest=0x8332f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0170.110] wcscat (in: _Dest=0x8332f60, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0170.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0170.111] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0170.111] FindClose (in: hFindFile=0x80992d0 | out: hFindFile=0x80992d0) returned 1 [0171.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101948) returned 1 [0171.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e26340) returned 1 [0171.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25240) returned 1 Thread: id = 3511 os_tid = 0x8d0 [0166.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef4e68 [0166.379] wcscpy (in: _Dest=0x3ef4e68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0166.379] wcscat (in: _Dest=0x3ef4e68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0166.379] wcscat (in: _Dest=0x3ef4e68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*" [0166.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0166.379] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e554c8 [0168.935] wcscmp (_String1=".", _String2=".") returned 0 [0168.935] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.935] wcscmp (_String1="..", _String2=".") returned 1 [0168.935] wcscmp (_String1="..", _String2="..") returned 0 [0168.935] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe61b2af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b5200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0168.935] wcscmp (_String1="computed_hashes.json", _String2=".") returned 1 [0168.935] wcscmp (_String1="computed_hashes.json", _String2="..") returned 1 [0168.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d574c8 [0168.935] wcscpy (in: _Dest=0x3d574c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0168.935] wcscat (in: _Dest=0x3d574c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0168.935] wcscat (in: _Dest=0x3d574c8, _Source="computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" [0169.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d574c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8 [0169.214] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fe7b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fea240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0169.214] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0169.214] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0169.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8380 [0169.214] wcscpy (in: _Dest=0x3ef8380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0169.214] wcscat (in: _Dest=0x3ef8380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0169.214] wcscat (in: _Dest=0x3ef8380, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" [0169.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef8380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2624 [0169.215] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fe7b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fea240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0169.215] FindClose (in: hFindFile=0x3e554c8 | out: hFindFile=0x3e554c8) returned 1 [0169.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0169.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4e68) returned 1 [0169.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24f40) returned 1 Thread: id = 3512 os_tid = 0x924 [0166.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg")) returned 0x20 [0170.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", dwFileAttributes=0x20) returned 0 [0170.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.448] GetLastError () returned 0x5 [0170.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", dwFileAttributes=0x20) returned 0 [0170.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39dc8) returned 1 Thread: id = 3513 os_tid = 0x75c [0166.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp")) returned 0x20 [0170.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", dwFileAttributes=0x20) returned 0 [0170.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.507] GetLastError () returned 0x5 [0170.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", dwFileAttributes=0x20) returned 0 [0170.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80209c0) returned 1 Thread: id = 3514 os_tid = 0x8cc [0166.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg")) returned 0x20 [0167.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", dwFileAttributes=0x20) returned 0 [0168.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.332] GetLastError () returned 0x5 [0170.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", dwFileAttributes=0x20) returned 0 [0170.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9fe8) returned 1 Thread: id = 3515 os_tid = 0x920 [0166.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp")) returned 0x20 [0170.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0170.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.503] GetLastError () returned 0x5 [0170.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0170.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a7c0) returned 1 Thread: id = 3516 os_tid = 0x7f0 [0166.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg")) returned 0x20 [0170.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", dwFileAttributes=0x20) returned 0 [0170.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.512] GetLastError () returned 0x5 [0170.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", dwFileAttributes=0x20) returned 0 [0170.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea0c8) returned 1 Thread: id = 3517 os_tid = 0x8d8 [0166.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp")) returned 0x20 [0170.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", dwFileAttributes=0x20) returned 0 [0170.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.513] GetLastError () returned 0x5 [0170.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", dwFileAttributes=0x20) returned 0 [0170.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b640) returned 1 Thread: id = 3518 os_tid = 0x8ec [0166.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg")) returned 0x20 [0170.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", dwFileAttributes=0x20) returned 0 [0170.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.447] GetLastError () returned 0x5 [0170.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", dwFileAttributes=0x20) returned 0 [0170.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80208d0) returned 1 Thread: id = 3519 os_tid = 0x92c [0166.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp")) returned 0x20 [0170.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0170.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.449] GetLastError () returned 0x5 [0170.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0170.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dade18) returned 1 Thread: id = 3520 os_tid = 0x940 [0166.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg")) returned 0x20 [0170.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", dwFileAttributes=0x20) returned 0 [0170.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.496] GetLastError () returned 0x5 [0170.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", dwFileAttributes=0x20) returned 0 [0170.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b728) returned 1 Thread: id = 3521 os_tid = 0x12a0 [0166.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp")) returned 0x20 [0170.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", dwFileAttributes=0x20) returned 0 [0170.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.497] GetLastError () returned 0x5 [0170.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", dwFileAttributes=0x20) returned 0 [0170.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021320) returned 1 Thread: id = 3522 os_tid = 0x740 [0166.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8f08 [0166.386] wcscpy (in: _Dest=0x2c8f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" [0166.386] wcscat (in: _Dest=0x2c8f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\" [0166.386] wcscat (in: _Dest=0x2c8f08, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*" [0166.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffc68 [0166.386] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77168d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0170.498] wcscmp (_String1=".", _String2=".") returned 0 [0170.498] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77168d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.498] wcscmp (_String1="..", _String2=".") returned 1 [0170.498] wcscmp (_String1="..", _String2="..") returned 0 [0170.498] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 1 [0170.498] wcscmp (_String1="Project Report Type", _String2=".") returned 1 [0170.498] wcscmp (_String1="Project Report Type", _String2="..") returned 1 [0170.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27b40 [0170.498] wcscpy (in: _Dest=0x3e27b40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" [0170.498] wcscat (in: _Dest=0x3e27b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\" [0170.498] wcscat (in: _Dest=0x3e27b40, _Source="Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0170.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e0 [0170.549] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 0 [0170.549] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0171.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffc68) returned 1 [0171.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8f08) returned 1 [0171.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb9a8) returned 1 Thread: id = 3523 os_tid = 0x90c [0166.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg")) returned 0x20 [0170.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", dwFileAttributes=0x20) returned 0 [0170.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.499] GetLastError () returned 0x5 [0170.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", dwFileAttributes=0x20) returned 0 [0170.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 3524 os_tid = 0x91c [0166.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp")) returned 0x20 [0170.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0170.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.501] GetLastError () returned 0x5 [0170.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0170.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25140) returned 1 Thread: id = 3525 os_tid = 0xbe4 [0166.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg")) returned 0x20 [0170.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", dwFileAttributes=0x20) returned 0 [0170.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.502] GetLastError () returned 0x5 [0170.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", dwFileAttributes=0x20) returned 0 [0170.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea1a8) returned 1 Thread: id = 3526 os_tid = 0xc8 [0166.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp")) returned 0x20 [0170.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", dwFileAttributes=0x20) returned 0 [0170.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.509] GetLastError () returned 0x5 [0170.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", dwFileAttributes=0x20) returned 0 [0170.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b810) returned 1 Thread: id = 3527 os_tid = 0x7b4 [0166.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp")) returned 0x20 [0170.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP", dwFileAttributes=0x20) returned 0 [0170.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.505] GetLastError () returned 0x5 [0170.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP", dwFileAttributes=0x20) returned 0 [0170.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eba80) returned 1 Thread: id = 3528 os_tid = 0x960 [0166.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg")) returned 0x20 [0170.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG", dwFileAttributes=0x20) returned 0 [0170.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.504] GetLastError () returned 0x5 [0170.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG", dwFileAttributes=0x20) returned 0 [0170.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebb58) returned 1 Thread: id = 3529 os_tid = 0x970 [0166.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg")) returned 0x20 [0170.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG", dwFileAttributes=0x20) returned 0 [0170.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.504] GetLastError () returned 0x5 [0170.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG", dwFileAttributes=0x20) returned 0 [0170.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebc30) returned 1 Thread: id = 3530 os_tid = 0x990 [0166.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg")) returned 0x20 [0170.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG", dwFileAttributes=0x20) returned 0 [0170.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.506] GetLastError () returned 0x5 [0170.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG", dwFileAttributes=0x20) returned 0 [0170.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebd08) returned 1 Thread: id = 3531 os_tid = 0x9a0 [0166.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp")) returned 0x20 [0170.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", dwFileAttributes=0x20) returned 0 [0170.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.510] GetLastError () returned 0x5 [0170.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", dwFileAttributes=0x20) returned 0 [0170.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea288) returned 1 Thread: id = 3532 os_tid = 0x9b0 [0166.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg")) returned 0x20 [0170.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", dwFileAttributes=0x20) returned 0 [0170.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.508] GetLastError () returned 0x5 [0170.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", dwFileAttributes=0x20) returned 0 [0170.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea368) returned 1 Thread: id = 3533 os_tid = 0x9c0 [0166.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp")) returned 0x20 [0170.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0170.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.511] GetLastError () returned 0x5 [0170.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0170.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b8f8) returned 1 Thread: id = 3534 os_tid = 0x9d0 [0166.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx")) returned 0x20 [0166.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0166.391] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.392] GetLastError () returned 0x5 [0166.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0166.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187f40) returned 1 Thread: id = 3535 os_tid = 0x9e0 [0166.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx")) returned 0x20 [0166.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0166.393] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.393] GetLastError () returned 0x5 [0166.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0166.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186d88) returned 1 Thread: id = 3536 os_tid = 0x9f0 [0166.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor")) returned 0x20 [0166.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR", dwFileAttributes=0x20) returned 0 [0166.395] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.395] GetLastError () returned 0x5 [0166.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR", dwFileAttributes=0x20) returned 0 [0166.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81decc8) returned 1 Thread: id = 3537 os_tid = 0xa00 [0166.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor")) returned 0x20 [0166.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR", dwFileAttributes=0x20) returned 0 [0166.396] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.397] GetLastError () returned 0x5 [0166.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR", dwFileAttributes=0x20) returned 0 [0166.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd6d8) returned 1 Thread: id = 3538 os_tid = 0xa10 [0166.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor")) returned 0x20 [0166.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR", dwFileAttributes=0x20) returned 0 [0166.398] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.398] GetLastError () returned 0x5 [0166.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR", dwFileAttributes=0x20) returned 0 [0166.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 Thread: id = 3539 os_tid = 0xa30 [0166.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf")) returned 0x20 [0166.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0166.400] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.400] GetLastError () returned 0x5 [0166.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0166.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d2e8) returned 1 Thread: id = 3540 os_tid = 0x130c [0166.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf")) returned 0x20 [0166.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0166.402] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.402] GetLastError () returned 0x5 [0166.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0166.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1330) returned 1 Thread: id = 3541 os_tid = 0xa50 [0166.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif")) returned 0x20 [0172.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0173.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.747] GetLastError () returned 0x5 [0175.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0176.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df7c8) returned 1 Thread: id = 3542 os_tid = 0xa60 [0166.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg")) returned 0x20 [0177.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0177.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.738] GetLastError () returned 0x5 [0177.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0177.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebde0) returned 1 Thread: id = 3543 os_tid = 0x1310 [0166.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp")) returned 0x20 [0177.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0177.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.739] GetLastError () returned 0x5 [0177.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0177.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea448) returned 1 Thread: id = 3544 os_tid = 0x1314 [0166.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif")) returned 0x20 [0177.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif", dwFileAttributes=0x20) returned 0 [0177.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.741] GetLastError () returned 0x5 [0177.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif", dwFileAttributes=0x20) returned 0 [0177.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bb08) returned 1 Thread: id = 3545 os_tid = 0x1318 [0166.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif")) returned 0x20 [0177.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0177.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.681] GetLastError () returned 0x5 [0177.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0177.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6070) returned 1 Thread: id = 3546 os_tid = 0x131c [0166.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif")) returned 0x20 [0172.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0173.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.168] GetLastError () returned 0x5 [0176.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0177.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3035780) returned 1 Thread: id = 3547 os_tid = 0xb6c [0166.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif")) returned 0x20 [0177.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0177.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.749] GetLastError () returned 0x5 [0177.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0177.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036ca0) returned 1 Thread: id = 3548 os_tid = 0xb60 [0166.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif")) returned 0x20 [0177.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0177.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.750] GetLastError () returned 0x5 [0177.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0177.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036890) returned 1 Thread: id = 3549 os_tid = 0xbac [0166.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif")) returned 0x20 [0177.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0177.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.743] GetLastError () returned 0x5 [0177.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0177.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebeb8) returned 1 Thread: id = 3550 os_tid = 0xbc0 [0166.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif")) returned 0x20 [0177.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0177.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.744] GetLastError () returned 0x5 [0177.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0177.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b9e0) returned 1 Thread: id = 3551 os_tid = 0x1320 [0166.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif")) returned 0x20 [0177.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0177.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.746] GetLastError () returned 0x5 [0177.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0177.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed648) returned 1 Thread: id = 3552 os_tid = 0x1324 [0166.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif")) returned 0x20 [0177.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0177.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.747] GetLastError () returned 0x5 [0177.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0177.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 Thread: id = 3553 os_tid = 0x1328 [0166.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif")) returned 0x20 [0177.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0177.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.699] GetLastError () returned 0x5 [0177.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0177.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036620) returned 1 Thread: id = 3554 os_tid = 0x132c [0166.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif")) returned 0x20 [0177.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0177.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.701] GetLastError () returned 0x5 [0177.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0177.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebf90) returned 1 Thread: id = 3555 os_tid = 0xb68 [0166.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif")) returned 0x20 [0177.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0177.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.757] GetLastError () returned 0x5 [0177.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0177.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec068) returned 1 Thread: id = 3556 os_tid = 0x1534 [0166.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif")) returned 0x20 [0177.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0177.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.727] GetLastError () returned 0x5 [0177.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0177.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x338dd8) returned 1 Thread: id = 3557 os_tid = 0x1330 [0166.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif")) returned 0x20 [0177.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0177.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.728] GetLastError () returned 0x5 [0177.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0177.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x338418) returned 1 Thread: id = 3558 os_tid = 0x1334 [0166.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif")) returned 0x20 [0177.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0177.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.730] GetLastError () returned 0x5 [0177.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0177.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec140) returned 1 Thread: id = 3559 os_tid = 0x1540 [0166.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif")) returned 0x20 [0177.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0177.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.752] GetLastError () returned 0x5 [0177.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0177.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec218) returned 1 Thread: id = 3560 os_tid = 0x1340 [0166.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif")) returned 0x20 [0177.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif", dwFileAttributes=0x20) returned 0 [0177.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.732] GetLastError () returned 0x5 [0177.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif", dwFileAttributes=0x20) returned 0 [0177.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x338278) returned 1 Thread: id = 3561 os_tid = 0x588 [0166.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif")) returned 0x20 [0177.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0177.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.733] GetLastError () returned 0x5 [0177.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0177.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec2f0) returned 1 Thread: id = 3562 os_tid = 0xab0 [0166.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif")) returned 0x20 [0177.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0177.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.754] GetLastError () returned 0x5 [0177.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0177.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef648) returned 1 Thread: id = 3563 os_tid = 0xad4 [0166.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif")) returned 0x20 [0177.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0177.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.755] GetLastError () returned 0x5 [0177.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0177.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec3c8) returned 1 Thread: id = 3564 os_tid = 0xb74 [0166.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif")) returned 0x20 [0167.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif", dwFileAttributes=0x20) returned 0 [0167.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.606] GetLastError () returned 0x5 [0167.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif", dwFileAttributes=0x20) returned 0 [0167.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef718) returned 1 Thread: id = 3565 os_tid = 0xbb4 [0166.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif")) returned 0x20 [0177.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0177.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.735] GetLastError () returned 0x5 [0177.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0177.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea528) returned 1 Thread: id = 3566 os_tid = 0x1554 [0166.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif")) returned 0x20 [0177.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0177.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.688] GetLastError () returned 0x5 [0177.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0177.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d62c8) returned 1 Thread: id = 3567 os_tid = 0xc64 [0166.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif")) returned 0x20 [0177.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0177.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.687] GetLastError () returned 0x5 [0177.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0177.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5e18) returned 1 Thread: id = 3568 os_tid = 0xb14 [0166.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif")) returned 0x20 [0177.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0177.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.685] GetLastError () returned 0x5 [0177.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0177.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5fa8) returned 1 Thread: id = 3569 os_tid = 0x155c [0166.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js")) returned 0x20 [0177.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS", dwFileAttributes=0x20) returned 0 [0177.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.682] GetLastError () returned 0x5 [0177.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS", dwFileAttributes=0x20) returned 0 [0177.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 3570 os_tid = 0x1c4 [0166.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html")) returned 0x20 [0177.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0177.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.736] GetLastError () returned 0x5 [0177.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0177.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec4a0) returned 1 Thread: id = 3571 os_tid = 0x1564 [0166.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021500 [0166.442] wcscpy (in: _Dest=0x8021500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0166.442] wcscat (in: _Dest=0x8021500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0166.442] wcscat (in: _Dest=0x8021500, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*" [0166.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0166.443] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c610f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0166.949] wcscmp (_String1=".", _String2=".") returned 0 [0166.949] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c610f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.949] wcscmp (_String1="..", _String2=".") returned 1 [0166.949] wcscmp (_String1="..", _String2="..") returned 0 [0166.949] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c6ad30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0166.949] wcscmp (_String1="128.png", _String2=".") returned 1 [0166.949] wcscmp (_String1="128.png", _String2="..") returned 1 [0166.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e24e40 [0166.949] wcscpy (in: _Dest=0x3e24e40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0166.950] wcscat (in: _Dest=0x3e24e40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0166.950] wcscat (in: _Dest=0x3e24e40, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" [0167.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0167.198] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c63800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e4bc80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fd74a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0167.198] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0167.198] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0167.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2faea0 [0167.198] wcscpy (in: _Dest=0x2faea0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0167.198] wcscat (in: _Dest=0x2faea0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0167.198] wcscat (in: _Dest=0x2faea0, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" [0167.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2faea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0167.199] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c72260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e42040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e42040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0167.199] wcscmp (_String1="_locales", _String2=".") returned 1 [0167.199] wcscmp (_String1="_locales", _String2="..") returned 1 [0167.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27140 [0167.200] wcscpy (in: _Dest=0x3e27140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0167.200] wcscat (in: _Dest=0x3e27140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0167.200] wcscat (in: _Dest=0x3e27140, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0167.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0167.201] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0167.201] wcscmp (_String1="_metadata", _String2=".") returned 1 [0167.201] wcscmp (_String1="_metadata", _String2="..") returned 1 [0167.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e27240 [0167.201] wcscpy (in: _Dest=0x3e27240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0167.201] wcscat (in: _Dest=0x3e27240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0167.201] wcscat (in: _Dest=0x3e27240, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0167.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0167.202] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0167.202] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0167.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0167.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021500) returned 1 [0167.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020ba0) returned 1 Thread: id = 3572 os_tid = 0x1568 [0166.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80215f0 [0166.445] wcscpy (in: _Dest=0x80215f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0166.445] wcscat (in: _Dest=0x80215f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0166.445] wcscat (in: _Dest=0x80215f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*" [0166.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0166.445] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0166.950] wcscmp (_String1=".", _String2=".") returned 0 [0166.950] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.950] wcscmp (_String1="..", _String2=".") returned 1 [0166.950] wcscmp (_String1="..", _String2="..") returned 0 [0166.950] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1d7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0166.950] wcscmp (_String1="128.png", _String2=".") returned 1 [0166.950] wcscmp (_String1="128.png", _String2="..") returned 1 [0166.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e26f40 [0166.950] wcscpy (in: _Dest=0x3e26f40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0166.950] wcscat (in: _Dest=0x3e26f40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0166.951] wcscat (in: _Dest=0x3e26f40, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" [0169.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e26f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e4 [0169.182] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ab880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0169.182] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0169.182] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0169.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5328 [0169.183] wcscpy (in: _Dest=0x81f5328, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0169.183] wcscat (in: _Dest=0x81f5328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0169.183] wcscat (in: _Dest=0x81f5328, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" [0169.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f5328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2644 [0169.193] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0169.193] wcscmp (_String1="_locales", _String2=".") returned 1 [0169.193] wcscmp (_String1="_locales", _String2="..") returned 1 [0169.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e27740 [0169.193] wcscpy (in: _Dest=0x3e27740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0169.193] wcscat (in: _Dest=0x3e27740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0169.193] wcscat (in: _Dest=0x3e27740, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0169.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2640 [0169.202] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 0 [0169.202] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0169.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0169.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80215f0) returned 1 [0169.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021410) returned 1 Thread: id = 3573 os_tid = 0x156c [0166.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld")) returned 0x20 [0166.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD", dwFileAttributes=0x20) returned 0 [0166.448] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.448] GetLastError () returned 0x5 [0166.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD", dwFileAttributes=0x20) returned 0 [0166.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 Thread: id = 3574 os_tid = 0x1570 [0166.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld")) returned 0x20 [0166.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD", dwFileAttributes=0x20) returned 0 [0166.450] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.450] GetLastError () returned 0x5 [0166.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD", dwFileAttributes=0x20) returned 0 [0166.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df538) returned 1 Thread: id = 3575 os_tid = 0x1574 [0166.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld")) returned 0x20 [0166.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD", dwFileAttributes=0x20) returned 0 [0166.460] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.460] GetLastError () returned 0x5 [0166.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD", dwFileAttributes=0x20) returned 0 [0166.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 Thread: id = 3576 os_tid = 0x1578 [0166.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr")) returned 0x20 [0166.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR", dwFileAttributes=0x20) returned 0 [0166.463] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.463] GetLastError () returned 0x5 [0166.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR", dwFileAttributes=0x20) returned 0 [0166.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 Thread: id = 3577 os_tid = 0x7fc [0166.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr")) returned 0x20 [0166.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR", dwFileAttributes=0x20) returned 0 [0166.465] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.465] GetLastError () returned 0x5 [0166.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR", dwFileAttributes=0x20) returned 0 [0166.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 3578 os_tid = 0x98c [0166.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr")) returned 0x20 [0166.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR", dwFileAttributes=0x20) returned 0 [0166.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.467] GetLastError () returned 0x5 [0166.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR", dwFileAttributes=0x20) returned 0 [0166.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 Thread: id = 3579 os_tid = 0xde4 [0166.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de9f8 [0166.468] wcscpy (in: _Dest=0x81de9f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0166.468] wcscat (in: _Dest=0x81de9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\" [0166.468] wcscat (in: _Dest=0x81de9f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*" [0166.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0166.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0166.469] wcscmp (_String1=".", _String2=".") returned 0 [0166.469] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.469] wcscmp (_String1="..", _String2=".") returned 1 [0166.469] wcscmp (_String1="..", _String2="..") returned 0 [0166.469] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbab1, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0166.469] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0166.469] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0166.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8186d88 [0166.469] wcscpy (in: _Dest=0x8186d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0166.469] wcscat (in: _Dest=0x8186d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\" [0166.469] wcscat (in: _Dest=0x8186d88, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" [0167.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0167.304] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0167.304] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0167.304] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0167.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x8187a00 [0167.305] wcscpy (in: _Dest=0x8187a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0167.305] wcscat (in: _Dest=0x8187a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\" [0167.305] wcscat (in: _Dest=0x8187a00, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" [0167.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050 [0167.306] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0167.306] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0167.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0167.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de9f8) returned 1 [0167.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 3580 os_tid = 0xe44 [0166.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr")) returned 0x20 [0168.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR", dwFileAttributes=0x20) returned 0 [0168.926] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.926] GetLastError () returned 0x5 [0168.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR", dwFileAttributes=0x20) returned 0 [0168.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 Thread: id = 3581 os_tid = 0x490 [0166.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr")) returned 0x20 [0168.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR", dwFileAttributes=0x20) returned 0 [0168.400] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.400] GetLastError () returned 0x5 [0168.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR", dwFileAttributes=0x20) returned 0 [0168.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dde28) returned 1 Thread: id = 3582 os_tid = 0xfd0 [0166.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr")) returned 0x20 [0168.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR", dwFileAttributes=0x20) returned 0 [0168.402] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.402] GetLastError () returned 0x5 [0168.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR", dwFileAttributes=0x20) returned 0 [0168.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 Thread: id = 3583 os_tid = 0xfd4 [0166.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx")) returned 0x20 [0166.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0166.478] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.479] GetLastError () returned 0x5 [0166.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0166.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81878b0) returned 1 Thread: id = 3584 os_tid = 0xfdc [0166.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx")) returned 0x20 [0166.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0166.480] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.480] GetLastError () returned 0x5 [0166.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0166.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187178) returned 1 Thread: id = 3585 os_tid = 0x1598 [0166.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx")) returned 0x20 [0166.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0166.495] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.495] GetLastError () returned 0x5 [0166.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0166.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a00) returned 1 Thread: id = 3586 os_tid = 0x1020 [0166.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx")) returned 0x20 [0166.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0166.501] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.501] GetLastError () returned 0x5 [0166.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0166.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186c38) returned 1 Thread: id = 3587 os_tid = 0x10e0 [0166.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf")) returned 0x20 [0166.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0166.507] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.508] GetLastError () returned 0x5 [0166.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0166.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c708) returned 1 Thread: id = 3588 os_tid = 0x10e4 [0166.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf")) returned 0x20 [0166.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0166.510] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.510] GetLastError () returned 0x5 [0166.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0166.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1e78) returned 1 Thread: id = 3589 os_tid = 0x10e8 [0166.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat")) returned 0x20 [0172.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT", dwFileAttributes=0x20) returned 0 [0172.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.380] GetLastError () returned 0x5 [0172.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT", dwFileAttributes=0x20) returned 0 [0172.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 Thread: id = 3590 os_tid = 0x15ac [0166.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat")) returned 0x20 [0172.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT", dwFileAttributes=0x20) returned 0 [0172.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.444] GetLastError () returned 0x5 [0172.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT", dwFileAttributes=0x20) returned 0 [0172.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68240) returned 1 Thread: id = 3591 os_tid = 0x15b0 [0166.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat")) returned 0x20 [0172.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT", dwFileAttributes=0x20) returned 0 [0172.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.276] GetLastError () returned 0x5 [0172.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT", dwFileAttributes=0x20) returned 0 [0172.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687e0) returned 1 Thread: id = 3592 os_tid = 0x15b4 [0166.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml")) returned 0x20 [0172.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML", dwFileAttributes=0x20) returned 0 [0172.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.376] GetLastError () returned 0x5 [0172.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML", dwFileAttributes=0x20) returned 0 [0172.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 Thread: id = 3593 os_tid = 0x15b8 [0166.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml")) returned 0x20 [0172.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML", dwFileAttributes=0x20) returned 0 [0172.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.375] GetLastError () returned 0x5 [0172.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML", dwFileAttributes=0x20) returned 0 [0172.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 Thread: id = 3594 os_tid = 0x10ec [0166.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl")) returned 0x20 [0172.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL", dwFileAttributes=0x20) returned 0 [0172.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.373] GetLastError () returned 0x5 [0172.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL", dwFileAttributes=0x20) returned 0 [0172.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 Thread: id = 3595 os_tid = 0x15bc [0166.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e680d8 [0166.581] wcscpy (in: _Dest=0x3e680d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0166.581] wcscat (in: _Dest=0x3e680d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0166.581] wcscat (in: _Dest=0x3e680d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*" [0166.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0166.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e57dc70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0172.915] wcscmp (_String1=".", _String2=".") returned 0 [0172.915] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e57dc70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.915] wcscmp (_String1="..", _String2=".") returned 1 [0172.915] wcscmp (_String1="..", _String2="..") returned 0 [0172.915] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b31f300, ftCreationTime.dwHighDateTime=0x1c8e688, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b31f300, ftLastWriteTime.dwHighDateTime=0x1c8e688, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="SENDTO~1.XML")) returned 1 [0172.915] wcscmp (_String1="SendToOneNote-PipelineConfig.xml", _String2=".") returned 1 [0172.915] wcscmp (_String1="SendToOneNote-PipelineConfig.xml", _String2="..") returned 1 [0172.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81daae8 [0172.915] wcscpy (in: _Dest=0x81daae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0172.915] wcscat (in: _Dest=0x81daae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0172.915] wcscat (in: _Dest=0x81daae8, _Source="SendToOneNote-PipelineConfig.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" [0174.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c4 [0174.271] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4b5100, ftCreationTime.dwHighDateTime=0x1c9d897, ftLastAccessTime.dwLowDateTime=0x819ac0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c4b5100, ftLastWriteTime.dwHighDateTime=0x1c9d897, nFileSizeHigh=0x0, nFileSizeLow=0x2580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.gpd", cAlternateFileName="SENDTO~1.GPD")) returned 1 [0174.271] wcscmp (_String1="SendToOneNote.gpd", _String2=".") returned 1 [0174.271] wcscmp (_String1="SendToOneNote.gpd", _String2="..") returned 1 [0174.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3c838 [0174.271] wcscpy (in: _Dest=0x3e3c838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0174.271] wcscat (in: _Dest=0x3e3c838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0174.271] wcscat (in: _Dest=0x3e3c838, _Source="SendToOneNote.gpd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" [0174.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3c838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0174.272] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12acbb00, ftCreationTime.dwHighDateTime=0x1c8e2bf, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12acbb00, ftLastWriteTime.dwHighDateTime=0x1c8e2bf, nFileSizeHigh=0x0, nFileSizeLow=0x7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.ini", cAlternateFileName="SENDTO~1.INI")) returned 1 [0174.272] wcscmp (_String1="SendToOneNote.ini", _String2=".") returned 1 [0174.272] wcscmp (_String1="SendToOneNote.ini", _String2="..") returned 1 [0174.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e3dbd0 [0174.272] wcscpy (in: _Dest=0x3e3dbd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0174.273] wcscat (in: _Dest=0x3e3dbd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0174.273] wcscat (in: _Dest=0x3e3dbd0, _Source="SendToOneNote.ini" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" [0174.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3dbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f0 [0174.273] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x819ac0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x16f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNOteFilter.dll", cAlternateFileName="SENDTO~1.DLL")) returned 1 [0174.273] wcscmp (_String1="SendToOneNOteFilter.dll", _String2=".") returned 1 [0174.273] wcscmp (_String1="SendToOneNOteFilter.dll", _String2="..") returned 1 [0174.273] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aecb200, ftCreationTime.dwHighDateTime=0x1c8ee63, ftLastAccessTime.dwLowDateTime=0x819ac0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8aecb200, ftLastWriteTime.dwHighDateTime=0x1c8ee63, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendtoOneNoteFilter.gpd", cAlternateFileName="SENDTO~2.GPD")) returned 1 [0174.274] wcscmp (_String1="SendtoOneNoteFilter.gpd", _String2=".") returned 1 [0174.274] wcscmp (_String1="SendtoOneNoteFilter.gpd", _String2="..") returned 1 [0174.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12408 [0174.274] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0174.274] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0174.274] wcscat (in: _Dest=0x3e12408, _Source="SendtoOneNoteFilter.gpd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" [0174.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2988 [0174.275] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf54b700, ftCreationTime.dwHighDateTime=0x1c8e688, ftLastAccessTime.dwLowDateTime=0x819f8370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf54b700, ftLastWriteTime.dwHighDateTime=0x1c8e688, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="SENDTO~3.GPD")) returned 1 [0174.275] wcscmp (_String1="SendToOneNoteNames.gpd", _String2=".") returned 1 [0174.275] wcscmp (_String1="SendToOneNoteNames.gpd", _String2="..") returned 1 [0174.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11968 [0174.275] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0174.275] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0174.275] wcscat (in: _Dest=0x3e11968, _Source="SendToOneNoteNames.gpd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" [0174.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0174.276] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xd580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="SENDTO~2.DLL")) returned 1 [0174.276] wcscmp (_String1="SendToOneNoteUI.dll", _String2=".") returned 1 [0174.276] wcscmp (_String1="SendToOneNoteUI.dll", _String2="..") returned 1 [0174.276] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xd580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="SENDTO~2.DLL")) returned 0 [0174.276] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0174.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0174.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0174.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33c88) returned 1 Thread: id = 3596 os_tid = 0x10f4 [0166.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml")) returned 0x20 [0172.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML", dwFileAttributes=0x20) returned 0 [0172.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.272] GetLastError () returned 0x5 [0172.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML", dwFileAttributes=0x20) returned 0 [0172.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 Thread: id = 3597 os_tid = 0x10fc [0166.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl")) returned 0x20 [0172.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL", dwFileAttributes=0x20) returned 0 [0172.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.369] GetLastError () returned 0x5 [0172.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL", dwFileAttributes=0x20) returned 0 [0172.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 Thread: id = 3598 os_tid = 0x15c8 [0166.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm")) returned 0x20 [0172.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM", dwFileAttributes=0x20) returned 0 [0172.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.297] GetLastError () returned 0x5 [0172.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM", dwFileAttributes=0x20) returned 0 [0172.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f337b8) returned 1 Thread: id = 3599 os_tid = 0x1100 [0166.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs")) returned 0x20 [0172.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS", dwFileAttributes=0x20) returned 0 [0172.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.284] GetLastError () returned 0x5 [0172.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS", dwFileAttributes=0x20) returned 0 [0172.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f334a8) returned 1 Thread: id = 3600 os_tid = 0x1104 [0166.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat")) returned 0x20 [0172.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT", dwFileAttributes=0x20) returned 0 [0172.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.279] GetLastError () returned 0x5 [0172.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT", dwFileAttributes=0x20) returned 0 [0172.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 Thread: id = 3601 os_tid = 0x110c [0166.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest")) returned 0x20 [0171.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST", dwFileAttributes=0x20) returned 0 [0171.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.962] GetLastError () returned 0x5 [0171.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST", dwFileAttributes=0x20) returned 0 [0171.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 3602 os_tid = 0x15cc [0166.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddd98 [0166.593] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0166.593] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0166.593] wcscat (in: _Dest=0x81ddd98, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*" [0166.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b2e0 [0166.593] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0172.710] wcscmp (_String1=".", _String2=".") returned 0 [0172.710] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.444] wcscmp (_String1="..", _String2=".") returned 1 [0174.444] wcscmp (_String1="..", _String2="..") returned 0 [0174.444] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMERITECH.NET.XML", cAlternateFileName="AMERIT~1.XML")) returned 1 [0174.444] wcscmp (_String1="AMERITECH.NET.XML", _String2=".") returned 1 [0174.444] wcscmp (_String1="AMERITECH.NET.XML", _String2="..") returned 1 [0174.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da148 [0174.444] wcscpy (in: _Dest=0x81da148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0174.444] wcscat (in: _Dest=0x81da148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0174.444] wcscat (in: _Dest=0x81da148, _Source="AMERITECH.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" [0179.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0179.447] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="BTINTE~1.XML")) returned 1 [0179.447] wcscmp (_String1="BTINTERNET.NET.XML", _String2=".") returned 1 [0179.447] wcscmp (_String1="BTINTERNET.NET.XML", _String2="..") returned 1 [0179.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b7c8 [0179.447] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.447] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.447] wcscat (in: _Dest=0x35b7c8, _Source="BTINTERNET.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" [0179.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0179.449] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="BTOPEN~1.XML")) returned 1 [0179.449] wcscmp (_String1="BTOPENWORLD.COM.XML", _String2=".") returned 1 [0179.449] wcscmp (_String1="BTOPENWORLD.COM.XML", _String2="..") returned 1 [0179.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c4d8 [0179.449] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.449] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.449] wcscat (in: _Dest=0x35c4d8, _Source="BTOPENWORLD.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" [0179.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0179.461] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x77d038d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLASH.NET.XML", cAlternateFileName="FLASHN~1.XML")) returned 1 [0179.461] wcscmp (_String1="FLASH.NET.XML", _String2=".") returned 1 [0179.461] wcscmp (_String1="FLASH.NET.XML", _String2="..") returned 1 [0179.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d290 [0179.462] wcscpy (in: _Dest=0x3e2d290, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.462] wcscat (in: _Dest=0x3e2d290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.462] wcscat (in: _Dest=0x3e2d290, _Source="FLASH.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" [0179.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0179.471] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8df64410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="NLROGE~1.XML")) returned 1 [0179.471] wcscmp (_String1="NL.ROGERS.COM.XML", _String2=".") returned 1 [0179.471] wcscmp (_String1="NL.ROGERS.COM.XML", _String2="..") returned 1 [0179.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c378 [0179.471] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.471] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.471] wcscat (in: _Dest=0x35c378, _Source="NL.ROGERS.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" [0179.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0179.480] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVBELL.NET.XML", cAlternateFileName="NVBELL~1.XML")) returned 1 [0179.480] wcscmp (_String1="NVBELL.NET.XML", _String2=".") returned 1 [0179.480] wcscmp (_String1="NVBELL.NET.XML", _String2="..") returned 1 [0179.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2ddb8 [0179.480] wcscpy (in: _Dest=0x3e2ddb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.480] wcscat (in: _Dest=0x3e2ddb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.480] wcscat (in: _Dest=0x3e2ddb8, _Source="NVBELL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" [0179.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ddb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0179.505] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8f8aedd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PACBELL.NET.XML", cAlternateFileName="PACBEL~1.XML")) returned 1 [0179.505] wcscmp (_String1="PACBELL.NET.XML", _String2=".") returned 1 [0179.505] wcscmp (_String1="PACBELL.NET.XML", _String2="..") returned 1 [0179.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2cff0 [0179.505] wcscpy (in: _Dest=0x3e2cff0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.505] wcscat (in: _Dest=0x3e2cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.505] wcscat (in: _Dest=0x3e2cff0, _Source="PACBELL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" [0179.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0179.507] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRODIGY.NET.XML", cAlternateFileName="PRODIG~1.XML")) returned 1 [0179.507] wcscmp (_String1="PRODIGY.NET.XML", _String2=".") returned 1 [0179.507] wcscmp (_String1="PRODIGY.NET.XML", _String2="..") returned 1 [0179.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dbc0 [0179.507] wcscpy (in: _Dest=0x3e2dbc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.507] wcscat (in: _Dest=0x3e2dbc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.507] wcscat (in: _Dest=0x3e2dbc0, _Source="PRODIGY.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" [0179.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dbc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0179.532] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROGERS.COM.XML", cAlternateFileName="ROGERS~1.XML")) returned 1 [0179.532] wcscmp (_String1="ROGERS.COM.XML", _String2=".") returned 1 [0179.532] wcscmp (_String1="ROGERS.COM.XML", _String2="..") returned 1 [0179.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d140 [0179.532] wcscpy (in: _Dest=0x3e2d140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.532] wcscat (in: _Dest=0x3e2d140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.532] wcscat (in: _Dest=0x3e2d140, _Source="ROGERS.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" [0179.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0179.534] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="SBCGLO~1.XML")) returned 1 [0179.534] wcscmp (_String1="SBCGLOBAL.NET.XML", _String2=".") returned 1 [0179.534] wcscmp (_String1="SBCGLOBAL.NET.XML", _String2="..") returned 1 [0179.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bc98 [0179.534] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.534] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.534] wcscat (in: _Dest=0x35bc98, _Source="SBCGLOBAL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" [0179.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0179.759] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNET.NET.XML", cAlternateFileName="SNETNE~1.XML")) returned 1 [0179.759] wcscmp (_String1="SNET.NET.XML", _String2=".") returned 1 [0179.759] wcscmp (_String1="SNET.NET.XML", _String2="..") returned 1 [0179.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11a08 [0179.759] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0179.759] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0179.759] wcscat (in: _Dest=0x3e11a08, _Source="SNET.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" [0180.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2900 [0180.272] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWBELL.NET.XML", cAlternateFileName="SWBELL~1.XML")) returned 1 [0180.272] wcscmp (_String1="SWBELL.NET.XML", _String2=".") returned 1 [0180.272] wcscmp (_String1="SWBELL.NET.XML", _String2="..") returned 1 [0180.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2ddb8 [0180.272] wcscpy (in: _Dest=0x3e2ddb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.272] wcscat (in: _Dest=0x3e2ddb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.272] wcscat (in: _Dest=0x3e2ddb8, _Source="SWBELL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" [0180.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ddb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0180.273] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TALK21.COM.XML", cAlternateFileName="TALK21~1.XML")) returned 1 [0180.274] wcscmp (_String1="TALK21.COM.XML", _String2=".") returned 1 [0180.274] wcscmp (_String1="TALK21.COM.XML", _String2="..") returned 1 [0180.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d290 [0180.274] wcscpy (in: _Dest=0x3e2d290, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.274] wcscat (in: _Dest=0x3e2d290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.274] wcscat (in: _Dest=0x3e2d290, _Source="TALK21.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" [0180.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0180.281] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="WANS.NET.XML", cAlternateFileName="WANSNE~1.XML")) returned 1 [0180.281] wcscmp (_String1="WANS.NET.XML", _String2=".") returned 1 [0180.281] wcscmp (_String1="WANS.NET.XML", _String2="..") returned 1 [0180.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e116e8 [0180.281] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.281] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.281] wcscat (in: _Dest=0x3e116e8, _Source="WANS.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" [0180.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0180.282] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CA.XML", cAlternateFileName="YAHOOC~2.XML")) returned 1 [0180.282] wcscmp (_String1="YAHOO.CA.XML", _String2=".") returned 1 [0180.282] wcscmp (_String1="YAHOO.CA.XML", _String2="..") returned 1 [0180.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e120e8 [0180.282] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.282] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.282] wcscat (in: _Dest=0x3e120e8, _Source="YAHOO.CA.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" [0180.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0180.285] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="YA6C44~1.XML")) returned 1 [0180.285] wcscmp (_String1="YAHOO.CO.ID.XML", _String2=".") returned 1 [0180.285] wcscmp (_String1="YAHOO.CO.ID.XML", _String2="..") returned 1 [0180.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2de60 [0180.285] wcscpy (in: _Dest=0x3e2de60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.285] wcscat (in: _Dest=0x3e2de60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.285] wcscat (in: _Dest=0x3e2de60, _Source="YAHOO.CO.ID.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" [0180.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2de60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0180.286] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="YA8E91~1.XML")) returned 1 [0180.286] wcscmp (_String1="YAHOO.CO.IN.XML", _String2=".") returned 1 [0180.286] wcscmp (_String1="YAHOO.CO.IN.XML", _String2="..") returned 1 [0180.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d728 [0180.287] wcscpy (in: _Dest=0x3e2d728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.287] wcscat (in: _Dest=0x3e2d728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.287] wcscat (in: _Dest=0x3e2d728, _Source="YAHOO.CO.IN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" [0180.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0180.288] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c8900, ftCreationTime.dwHighDateTime=0x1c6eae1, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x954c8900, ftLastWriteTime.dwHighDateTime=0x1c6eae1, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="YAHOOC~3.XML")) returned 1 [0180.288] wcscmp (_String1="YAHOO.CO.JP.XML", _String2=".") returned 1 [0180.288] wcscmp (_String1="YAHOO.CO.JP.XML", _String2="..") returned 1 [0180.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2db18 [0180.288] wcscpy (in: _Dest=0x3e2db18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.288] wcscat (in: _Dest=0x3e2db18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.288] wcscat (in: _Dest=0x3e2db18, _Source="YAHOO.CO.JP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" [0180.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2db18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0180.290] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="YAEF96~1.XML")) returned 1 [0180.290] wcscmp (_String1="YAHOO.CO.KR.XML", _String2=".") returned 1 [0180.290] wcscmp (_String1="YAHOO.CO.KR.XML", _String2="..") returned 1 [0180.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d9c8 [0180.290] wcscpy (in: _Dest=0x3e2d9c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.290] wcscat (in: _Dest=0x3e2d9c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.290] wcscat (in: _Dest=0x3e2d9c8, _Source="YAHOO.CO.KR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" [0180.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0180.291] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="YA186B~1.XML")) returned 1 [0180.291] wcscmp (_String1="YAHOO.CO.NZ.XML", _String2=".") returned 1 [0180.291] wcscmp (_String1="YAHOO.CO.NZ.XML", _String2="..") returned 1 [0180.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d920 [0180.291] wcscpy (in: _Dest=0x3e2d920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.291] wcscat (in: _Dest=0x3e2d920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.291] wcscat (in: _Dest=0x3e2d920, _Source="YAHOO.CO.NZ.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" [0180.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0180.292] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="YACB7D~1.XML")) returned 1 [0180.292] wcscmp (_String1="YAHOO.CO.TH.XML", _String2=".") returned 1 [0180.293] wcscmp (_String1="YAHOO.CO.TH.XML", _String2="..") returned 1 [0180.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d878 [0180.293] wcscpy (in: _Dest=0x3e2d878, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.293] wcscat (in: _Dest=0x3e2d878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.293] wcscat (in: _Dest=0x3e2d878, _Source="YAHOO.CO.TH.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" [0180.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0180.294] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="YAE791~1.XML")) returned 1 [0180.294] wcscmp (_String1="YAHOO.CO.UK.XML", _String2=".") returned 1 [0180.294] wcscmp (_String1="YAHOO.CO.UK.XML", _String2="..") returned 1 [0180.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d5d8 [0180.294] wcscpy (in: _Dest=0x3e2d5d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.294] wcscat (in: _Dest=0x3e2d5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.294] wcscat (in: _Dest=0x3e2d5d8, _Source="YAHOO.CO.UK.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" [0180.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0 [0180.295] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="YA81CD~1.XML")) returned 1 [0180.295] wcscmp (_String1="YAHOO.COM.AR.XML", _String2=".") returned 1 [0180.295] wcscmp (_String1="YAHOO.COM.AR.XML", _String2="..") returned 1 [0180.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d3e0 [0180.295] wcscpy (in: _Dest=0x3e2d3e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.295] wcscat (in: _Dest=0x3e2d3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.295] wcscat (in: _Dest=0x3e2d3e0, _Source="YAHOO.COM.AR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" [0180.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0180.297] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="YA02CD~1.XML")) returned 1 [0180.297] wcscmp (_String1="YAHOO.COM.AU.XML", _String2=".") returned 1 [0180.297] wcscmp (_String1="YAHOO.COM.AU.XML", _String2="..") returned 1 [0180.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d1e8 [0180.297] wcscpy (in: _Dest=0x3e2d1e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.297] wcscat (in: _Dest=0x3e2d1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.297] wcscat (in: _Dest=0x3e2d1e8, _Source="YAHOO.COM.AU.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" [0180.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0180.298] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="YAHOOC~1.XML")) returned 1 [0180.298] wcscmp (_String1="YAHOO.COM.BR.XML", _String2=".") returned 1 [0180.298] wcscmp (_String1="YAHOO.COM.BR.XML", _String2="..") returned 1 [0180.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x83ec930 [0180.298] wcscpy (in: _Dest=0x83ec930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.298] wcscat (in: _Dest=0x83ec930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.298] wcscat (in: _Dest=0x83ec930, _Source="YAHOO.COM.BR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" [0180.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ec930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0180.300] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="YAHOOC~4.XML")) returned 1 [0180.300] wcscmp (_String1="YAHOO.COM.CN.XML", _String2=".") returned 1 [0180.300] wcscmp (_String1="YAHOO.COM.CN.XML", _String2="..") returned 1 [0180.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x83ec9d8 [0180.300] wcscpy (in: _Dest=0x83ec9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.300] wcscat (in: _Dest=0x83ec9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.300] wcscat (in: _Dest=0x83ec9d8, _Source="YAHOO.COM.CN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" [0180.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ec9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0180.304] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="YA56AC~1.XML")) returned 1 [0180.304] wcscmp (_String1="YAHOO.COM.HK.XML", _String2=".") returned 1 [0180.304] wcscmp (_String1="YAHOO.COM.HK.XML", _String2="..") returned 1 [0180.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x83eca80 [0180.304] wcscpy (in: _Dest=0x83eca80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.304] wcscat (in: _Dest=0x83eca80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.304] wcscat (in: _Dest=0x83eca80, _Source="YAHOO.COM.HK.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" [0180.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83eca80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0180.305] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="YAEA08~1.XML")) returned 1 [0180.305] wcscmp (_String1="YAHOO.COM.MX.XML", _String2=".") returned 1 [0180.305] wcscmp (_String1="YAHOO.COM.MX.XML", _String2="..") returned 1 [0180.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x83ecb28 [0180.305] wcscpy (in: _Dest=0x83ecb28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.305] wcscat (in: _Dest=0x83ecb28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.305] wcscat (in: _Dest=0x83ecb28, _Source="YAHOO.COM.MX.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" [0180.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ecb28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0180.309] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="YA0670~1.XML")) returned 1 [0180.309] wcscmp (_String1="YAHOO.COM.MY.XML", _String2=".") returned 1 [0180.309] wcscmp (_String1="YAHOO.COM.MY.XML", _String2="..") returned 1 [0180.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x83ecbd0 [0180.309] wcscpy (in: _Dest=0x83ecbd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.309] wcscat (in: _Dest=0x83ecbd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.309] wcscat (in: _Dest=0x83ecbd0, _Source="YAHOO.COM.MY.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" [0180.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ecbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0180.310] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="YA6D1B~1.XML")) returned 1 [0180.310] wcscmp (_String1="YAHOO.COM.PH.XML", _String2=".") returned 1 [0180.310] wcscmp (_String1="YAHOO.COM.PH.XML", _String2="..") returned 1 [0180.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x83ecc78 [0180.310] wcscpy (in: _Dest=0x83ecc78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.310] wcscat (in: _Dest=0x83ecc78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.310] wcscat (in: _Dest=0x83ecc78, _Source="YAHOO.COM.PH.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" [0180.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ecc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0180.311] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="YAC50A~1.XML")) returned 1 [0180.311] wcscmp (_String1="YAHOO.COM.SG.XML", _String2=".") returned 1 [0180.311] wcscmp (_String1="YAHOO.COM.SG.XML", _String2="..") returned 1 [0180.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x83ecd20 [0180.312] wcscpy (in: _Dest=0x83ecd20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.312] wcscat (in: _Dest=0x83ecd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.312] wcscat (in: _Dest=0x83ecd20, _Source="YAHOO.COM.SG.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" [0180.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ecd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0180.534] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="YAB0F6~1.XML")) returned 1 [0181.613] wcscmp (_String1="YAHOO.COM.TW.XML", _String2=".") returned 1 [0181.613] wcscmp (_String1="YAHOO.COM.TW.XML", _String2="..") returned 1 [0181.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d488 [0181.613] wcscpy (in: _Dest=0x3e2d488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0181.613] wcscat (in: _Dest=0x3e2d488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0181.613] wcscat (in: _Dest=0x3e2d488, _Source="YAHOO.COM.TW.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" [0183.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27cc [0183.589] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.VN.XML", cAlternateFileName="YA38FD~1.XML")) returned 1 [0183.589] wcscmp (_String1="YAHOO.COM.VN.XML", _String2=".") returned 1 [0183.589] wcscmp (_String1="YAHOO.COM.VN.XML", _String2="..") returned 1 [0183.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2cff0 [0183.590] wcscpy (in: _Dest=0x3e2cff0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.590] wcscat (in: _Dest=0x3e2cff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.590] wcscat (in: _Dest=0x3e2cff0, _Source="YAHOO.COM.VN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" [0183.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2cff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0183.591] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.XML", cAlternateFileName="YA531A~1.XML")) returned 1 [0183.591] wcscmp (_String1="YAHOO.COM.XML", _String2=".") returned 1 [0183.591] wcscmp (_String1="YAHOO.COM.XML", _String2="..") returned 1 [0183.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2ddb8 [0183.591] wcscpy (in: _Dest=0x3e2ddb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.591] wcscat (in: _Dest=0x3e2ddb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.591] wcscat (in: _Dest=0x3e2ddb8, _Source="YAHOO.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" [0183.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ddb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0183.592] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.DE.XML", cAlternateFileName="YAHOOD~1.XML")) returned 1 [0183.593] wcscmp (_String1="YAHOO.DE.XML", _String2=".") returned 1 [0183.593] wcscmp (_String1="YAHOO.DE.XML", _String2="..") returned 1 [0183.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11788 [0183.593] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.593] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.593] wcscat (in: _Dest=0x3e11788, _Source="YAHOO.DE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" [0183.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b60 [0183.594] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.ES.XML", cAlternateFileName="YAHOOE~1.XML")) returned 1 [0183.594] wcscmp (_String1="YAHOO.ES.XML", _String2=".") returned 1 [0183.595] wcscmp (_String1="YAHOO.ES.XML", _String2="..") returned 1 [0183.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dcd68 [0183.595] wcscpy (in: _Dest=0x81dcd68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.595] wcscat (in: _Dest=0x81dcd68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.595] wcscat (in: _Dest=0x81dcd68, _Source="YAHOO.ES.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" [0183.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0183.596] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.FR.XML", cAlternateFileName="YAHOOF~1.XML")) returned 1 [0183.596] wcscmp (_String1="YAHOO.FR.XML", _String2=".") returned 1 [0183.596] wcscmp (_String1="YAHOO.FR.XML", _String2="..") returned 1 [0183.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dbf08 [0183.597] wcscpy (in: _Dest=0x81dbf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.597] wcscat (in: _Dest=0x81dbf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.597] wcscat (in: _Dest=0x81dbf08, _Source="YAHOO.FR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" [0183.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0183.598] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.HK.XML", cAlternateFileName="YAHOOH~1.XML")) returned 1 [0183.598] wcscmp (_String1="YAHOO.HK.XML", _String2=".") returned 1 [0183.598] wcscmp (_String1="YAHOO.HK.XML", _String2="..") returned 1 [0183.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dcb88 [0183.598] wcscpy (in: _Dest=0x81dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.598] wcscat (in: _Dest=0x81dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.598] wcscat (in: _Dest=0x81dcb88, _Source="YAHOO.HK.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" [0183.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0183.600] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IE.XML", cAlternateFileName="YAHOOI~1.XML")) returned 1 [0183.600] wcscmp (_String1="YAHOO.IE.XML", _String2=".") returned 1 [0183.600] wcscmp (_String1="YAHOO.IE.XML", _String2="..") returned 1 [0183.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dccc8 [0183.600] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.600] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.600] wcscat (in: _Dest=0x81dccc8, _Source="YAHOO.IE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" [0183.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2964 [0183.601] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IT.XML", cAlternateFileName="YAHOOI~2.XML")) returned 1 [0183.601] wcscmp (_String1="YAHOO.IT.XML", _String2=".") returned 1 [0183.601] wcscmp (_String1="YAHOO.IT.XML", _String2="..") returned 1 [0183.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dce08 [0183.602] wcscpy (in: _Dest=0x81dce08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.602] wcscat (in: _Dest=0x81dce08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.602] wcscat (in: _Dest=0x81dce08, _Source="YAHOO.IT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" [0183.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0183.603] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c8900, ftCreationTime.dwHighDateTime=0x1c6eae1, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x954c8900, ftLastWriteTime.dwHighDateTime=0x1c6eae1, nFileSizeHigh=0x0, nFileSizeLow=0x331, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.JP.XML", cAlternateFileName="YAHOOJ~1.XML")) returned 1 [0183.603] wcscmp (_String1="YAHOO.JP.XML", _String2=".") returned 1 [0183.603] wcscmp (_String1="YAHOO.JP.XML", _String2="..") returned 1 [0183.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dcc28 [0183.603] wcscpy (in: _Dest=0x81dcc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.603] wcscat (in: _Dest=0x81dcc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.603] wcscat (in: _Dest=0x81dcc28, _Source="YAHOO.JP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" [0183.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0183.604] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.NO.XML", cAlternateFileName="YAHOON~1.XML")) returned 1 [0183.604] wcscmp (_String1="YAHOO.NO.XML", _String2=".") returned 1 [0183.604] wcscmp (_String1="YAHOO.NO.XML", _String2="..") returned 1 [0183.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dca48 [0183.604] wcscpy (in: _Dest=0x81dca48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.604] wcscat (in: _Dest=0x81dca48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.605] wcscat (in: _Dest=0x81dca48, _Source="YAHOO.NO.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" [0183.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dca48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0183.606] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.PL.XML", cAlternateFileName="YAHOOP~1.XML")) returned 1 [0183.606] wcscmp (_String1="YAHOO.PL.XML", _String2=".") returned 1 [0183.606] wcscmp (_String1="YAHOO.PL.XML", _String2="..") returned 1 [0183.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dbbe8 [0183.606] wcscpy (in: _Dest=0x81dbbe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.607] wcscat (in: _Dest=0x81dbbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.607] wcscat (in: _Dest=0x81dbbe8, _Source="YAHOO.PL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" [0183.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0183.608] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 1 [0183.608] wcscmp (_String1="YAHOO.SE.XML", _String2=".") returned 1 [0183.608] wcscmp (_String1="YAHOO.SE.XML", _String2="..") returned 1 [0183.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x81dbaa8 [0183.608] wcscpy (in: _Dest=0x81dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0183.608] wcscat (in: _Dest=0x81dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0183.608] wcscat (in: _Dest=0x81dbaa8, _Source="YAHOO.SE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" [0183.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c14 [0183.609] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 0 [0183.609] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0183.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b2e0) returned 1 [0183.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 [0183.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 3603 os_tid = 0x64c [0166.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80216e0 [0166.594] wcscpy (in: _Dest=0x80216e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0166.594] wcscat (in: _Dest=0x80216e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0166.594] wcscat (in: _Dest=0x80216e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*" [0166.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d490 [0166.594] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38158 [0167.691] wcscmp (_String1=".", _String2=".") returned 0 [0167.692] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.692] wcscmp (_String1="..", _String2=".") returned 1 [0167.692] wcscmp (_String1="..", _String2="..") returned 0 [0167.692] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe561c600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0167.692] wcscmp (_String1="128.png", _String2=".") returned 1 [0167.692] wcscmp (_String1="128.png", _String2="..") returned 1 [0167.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e27340 [0167.692] wcscpy (in: _Dest=0x3e27340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0167.692] wcscat (in: _Dest=0x3e27340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0167.692] wcscat (in: _Dest=0x3e27340, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" [0169.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e27340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b78 [0169.134] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5935d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5935d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="contentscript_bin_prod.js", cAlternateFileName="CONTEN~1.JS")) returned 1 [0169.134] wcscmp (_String1="contentscript_bin_prod.js", _String2=".") returned 1 [0169.134] wcscmp (_String1="contentscript_bin_prod.js", _String2="..") returned 1 [0169.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d57278 [0169.134] wcscpy (in: _Dest=0x3d57278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0169.134] wcscat (in: _Dest=0x3d57278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0169.134] wcscat (in: _Dest=0x3d57278, _Source="contentscript_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" [0169.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb4 [0169.135] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe593d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe593d280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="dasherSettingSchema.json", cAlternateFileName="DASHER~1.JSO")) returned 1 [0169.135] wcscmp (_String1="dasherSettingSchema.json", _String2=".") returned 1 [0169.135] wcscmp (_String1="dasherSettingSchema.json", _String2="..") returned 1 [0169.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d565c0 [0169.136] wcscpy (in: _Dest=0x3d565c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0169.136] wcscat (in: _Dest=0x3d565c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0169.136] wcscat (in: _Dest=0x3d565c0, _Source="dasherSettingSchema.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" [0169.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d565c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0169.137] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe59420a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe59420a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventpage_bin_prod.js", cAlternateFileName="EVENTP~1.JS")) returned 1 [0169.137] wcscmp (_String1="eventpage_bin_prod.js", _String2=".") returned 1 [0169.137] wcscmp (_String1="eventpage_bin_prod.js", _String2="..") returned 1 [0169.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x300e668 [0169.137] wcscpy (in: _Dest=0x300e668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0169.137] wcscat (in: _Dest=0x300e668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0169.137] wcscat (in: _Dest=0x300e668, _Source="eventpage_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" [0169.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x300e668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2544 [0169.138] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe59495d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c67b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0169.138] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0169.138] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0169.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5220 [0169.138] wcscpy (in: _Dest=0x81f5220, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0169.138] wcscat (in: _Dest=0x81f5220, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0169.138] wcscat (in: _Dest=0x81f5220, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" [0169.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f5220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d14 [0169.139] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe594e3f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe594e3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="page_embed_script.js", cAlternateFileName="PAGE_E~1.JS")) returned 1 [0169.139] wcscmp (_String1="page_embed_script.js", _String2=".") returned 1 [0169.139] wcscmp (_String1="page_embed_script.js", _String2="..") returned 1 [0169.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bb4d0 [0169.139] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0169.139] wcscat (in: _Dest=0x30bb4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0169.139] wcscat (in: _Dest=0x30bb4d0, _Source="page_embed_script.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" [0169.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x30bb4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0169.140] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5623b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592c110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592c110, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0169.140] wcscmp (_String1="_locales", _String2=".") returned 1 [0169.140] wcscmp (_String1="_locales", _String2="..") returned 1 [0169.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e27540 [0169.140] wcscpy (in: _Dest=0x3e27540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0169.140] wcscat (in: _Dest=0x3e27540, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0169.140] wcscat (in: _Dest=0x3e27540, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0169.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a84 [0169.141] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0169.141] wcscmp (_String1="_metadata", _String2=".") returned 1 [0169.141] wcscmp (_String1="_metadata", _String2="..") returned 1 [0169.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27640 [0169.142] wcscpy (in: _Dest=0x3e27640, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0169.142] wcscat (in: _Dest=0x3e27640, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0169.142] wcscat (in: _Dest=0x3e27640, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0169.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a80 [0169.143] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0169.143] FindClose (in: hFindFile=0x3f38158 | out: hFindFile=0x3f38158) returned 1 [0173.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d490) returned 1 [0173.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80216e0) returned 1 [0173.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021230) returned 1 Thread: id = 3604 os_tid = 0x1304 [0166.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml")) returned 0x20 [0166.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0166.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.600] GetLastError () returned 0x5 [0166.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0166.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2db18) returned 1 Thread: id = 3605 os_tid = 0xfc4 [0166.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml")) returned 0x20 [0172.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", dwFileAttributes=0x20) returned 0 [0172.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.278] GetLastError () returned 0x5 [0172.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", dwFileAttributes=0x20) returned 0 [0172.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187aa8) returned 1 Thread: id = 3606 os_tid = 0x980 [0166.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml")) returned 0x20 [0172.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", dwFileAttributes=0x20) returned 0 [0172.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.274] GetLastError () returned 0x5 [0172.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", dwFileAttributes=0x20) returned 0 [0172.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a458) returned 1 Thread: id = 3607 os_tid = 0x1348 [0166.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml")) returned 0x20 [0172.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0172.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.285] GetLastError () returned 0x5 [0172.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0172.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d99b8) returned 1 Thread: id = 3608 os_tid = 0x1148 [0166.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml")) returned 0x20 [0172.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0172.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.282] GetLastError () returned 0x5 [0172.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0172.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187bf8) returned 1 Thread: id = 3609 os_tid = 0xec4 [0166.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml")) returned 0x20 [0172.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", dwFileAttributes=0x20) returned 0 [0172.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.281] GetLastError () returned 0x5 [0172.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", dwFileAttributes=0x20) returned 0 [0172.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ed8) returned 1 Thread: id = 3610 os_tid = 0x1150 [0166.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml")) returned 0x20 [0172.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0172.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.114] GetLastError () returned 0x5 [0172.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0172.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f0) returned 1 Thread: id = 3611 os_tid = 0x1154 [0166.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml")) returned 0x20 [0172.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", dwFileAttributes=0x20) returned 0 [0172.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.134] GetLastError () returned 0x5 [0172.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", dwFileAttributes=0x20) returned 0 [0172.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c258) returned 1 Thread: id = 3612 os_tid = 0x1158 [0166.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml")) returned 0x20 [0172.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0172.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.270] GetLastError () returned 0x5 [0172.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0172.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186458) returned 1 Thread: id = 3613 os_tid = 0x1160 [0166.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml")) returned 0x20 [0172.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", dwFileAttributes=0x20) returned 0 [0172.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.122] GetLastError () returned 0x5 [0172.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", dwFileAttributes=0x20) returned 0 [0172.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ce0) returned 1 Thread: id = 3614 os_tid = 0x147c [0166.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml")) returned 0x20 [0172.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0172.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.298] GetLastError () returned 0x5 [0172.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0172.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188330) returned 1 Thread: id = 3615 os_tid = 0x1480 [0166.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml")) returned 0x20 [0172.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", dwFileAttributes=0x20) returned 0 [0172.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.242] GetLastError () returned 0x5 [0172.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", dwFileAttributes=0x20) returned 0 [0172.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186998) returned 1 Thread: id = 3616 os_tid = 0x6cc [0166.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml")) returned 0x20 [0171.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0171.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.825] GetLastError () returned 0x5 [0171.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0171.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81872c8) returned 1 Thread: id = 3617 os_tid = 0x1484 [0166.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml")) returned 0x20 [0172.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", dwFileAttributes=0x20) returned 0 [0172.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.219] GetLastError () returned 0x5 [0172.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", dwFileAttributes=0x20) returned 0 [0172.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187760) returned 1 Thread: id = 3618 os_tid = 0xf3c [0166.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml")) returned 0x20 [0172.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", dwFileAttributes=0x20) returned 0 [0172.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.060] GetLastError () returned 0x5 [0172.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", dwFileAttributes=0x20) returned 0 [0172.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187e98) returned 1 Thread: id = 3619 os_tid = 0xef8 [0166.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml")) returned 0x20 [0172.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", dwFileAttributes=0x20) returned 0 [0172.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.068] GetLastError () returned 0x5 [0172.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", dwFileAttributes=0x20) returned 0 [0172.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186500) returned 1 Thread: id = 3620 os_tid = 0x1488 [0166.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml")) returned 0x20 [0172.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", dwFileAttributes=0x20) returned 0 [0172.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.213] GetLastError () returned 0x5 [0172.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", dwFileAttributes=0x20) returned 0 [0172.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c2f8) returned 1 Thread: id = 3621 os_tid = 0x158 [0166.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml")) returned 0x20 [0172.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0172.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.204] GetLastError () returned 0x5 [0172.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0172.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81874c0) returned 1 Thread: id = 3622 os_tid = 0x148c [0166.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml")) returned 0x20 [0172.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x20) returned 0 [0172.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.076] GetLastError () returned 0x5 [0172.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x20) returned 0 [0172.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81865a8) returned 1 Thread: id = 3623 os_tid = 0x1490 [0166.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml")) returned 0x20 [0172.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", dwFileAttributes=0x20) returned 0 [0172.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.198] GetLastError () returned 0x5 [0172.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", dwFileAttributes=0x20) returned 0 [0172.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a778) returned 1 Thread: id = 3624 os_tid = 0x1494 [0166.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml")) returned 0x20 [0172.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0172.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.083] GetLastError () returned 0x5 [0172.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0172.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187568) returned 1 Thread: id = 3625 os_tid = 0x1498 [0166.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml")) returned 0x20 [0172.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0172.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.192] GetLastError () returned 0x5 [0172.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0172.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186650) returned 1 Thread: id = 3626 os_tid = 0x149c [0166.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml")) returned 0x20 [0172.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", dwFileAttributes=0x20) returned 0 [0172.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.178] GetLastError () returned 0x5 [0172.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", dwFileAttributes=0x20) returned 0 [0172.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187028) returned 1 Thread: id = 3627 os_tid = 0x162c [0166.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml")) returned 0x20 [0172.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", dwFileAttributes=0x20) returned 0 [0172.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.152] GetLastError () returned 0x5 [0172.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", dwFileAttributes=0x20) returned 0 [0172.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b858) returned 1 Thread: id = 3628 os_tid = 0x1198 [0166.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml")) returned 0x20 [0172.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", dwFileAttributes=0x20) returned 0 [0172.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.143] GetLastError () returned 0x5 [0172.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", dwFileAttributes=0x20) returned 0 [0172.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187958) returned 1 Thread: id = 3629 os_tid = 0x14a8 [0166.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml")) returned 0x20 [0172.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0172.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.095] GetLastError () returned 0x5 [0172.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0172.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188138) returned 1 Thread: id = 3630 os_tid = 0x1634 [0167.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml")) returned 0x20 [0172.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0172.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.106] GetLastError () returned 0x5 [0172.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0172.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186848) returned 1 Thread: id = 3632 os_tid = 0x11a0 [0167.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif")) returned 0x20 [0171.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0171.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.150] GetLastError () returned 0x5 [0171.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0171.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb8d0) returned 1 Thread: id = 3633 os_tid = 0x163c [0167.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif")) returned 0x20 [0171.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0171.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.153] GetLastError () returned 0x5 [0171.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0171.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea6e8) returned 1 Thread: id = 3634 os_tid = 0x11a4 [0167.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif")) returned 0x20 [0171.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0171.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.251] GetLastError () returned 0x5 [0171.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0171.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef8b8) returned 1 Thread: id = 3635 os_tid = 0x14ac [0167.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif")) returned 0x20 [0171.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0171.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.711] GetLastError () returned 0x5 [0171.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0171.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef988) returned 1 Thread: id = 3636 os_tid = 0x14b4 [0167.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif")) returned 0x20 [0171.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0171.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.151] GetLastError () returned 0x5 [0171.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0171.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 3637 os_tid = 0x134c [0167.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js")) returned 0x20 [0171.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0171.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.246] GetLastError () returned 0x5 [0171.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0171.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d71a0) returned 1 Thread: id = 3638 os_tid = 0x1640 [0167.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js")) returned 0x20 [0171.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0171.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.084] GetLastError () returned 0x5 [0171.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0171.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec578) returned 1 Thread: id = 3639 os_tid = 0x14b8 [0167.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js")) returned 0x20 [0169.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js", dwFileAttributes=0x20) returned 0 [0170.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.514] GetLastError () returned 0x5 [0170.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js", dwFileAttributes=0x20) returned 0 [0171.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efa58) returned 1 Thread: id = 3640 os_tid = 0x1358 [0167.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif")) returned 0x20 [0167.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0167.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.050] GetLastError () returned 0x5 [0167.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0167.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfb88) returned 1 Thread: id = 3641 os_tid = 0x1644 [0167.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg")) returned 0x20 [0167.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0167.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.051] GetLastError () returned 0x5 [0167.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0167.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec650) returned 1 Thread: id = 3642 os_tid = 0x14bc [0167.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp")) returned 0x20 [0167.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0167.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.053] GetLastError () returned 0x5 [0167.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0167.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea7c8) returned 1 Thread: id = 3643 os_tid = 0x1648 [0167.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif")) returned 0x20 [0167.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif", dwFileAttributes=0x20) returned 0 [0167.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.055] GetLastError () returned 0x5 [0167.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif", dwFileAttributes=0x20) returned 0 [0167.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efb28) returned 1 Thread: id = 3644 os_tid = 0x1338 [0167.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif")) returned 0x20 [0167.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0167.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.056] GetLastError () returned 0x5 [0167.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0167.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7268) returned 1 Thread: id = 3645 os_tid = 0x14c0 [0167.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif")) returned 0x20 [0167.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0167.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.058] GetLastError () returned 0x5 [0167.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0167.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efbf8) returned 1 Thread: id = 3646 os_tid = 0x164c [0167.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif")) returned 0x20 [0167.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0167.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.060] GetLastError () returned 0x5 [0167.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0167.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efcc8) returned 1 Thread: id = 3647 os_tid = 0x814 [0167.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif")) returned 0x20 [0167.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0167.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.076] GetLastError () returned 0x5 [0167.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0167.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efd98) returned 1 Thread: id = 3648 os_tid = 0xe08 [0167.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif")) returned 0x20 [0167.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0167.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.078] GetLastError () returned 0x5 [0167.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0167.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec728) returned 1 Thread: id = 3649 os_tid = 0x14c4 [0167.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif")) returned 0x20 [0167.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0167.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.079] GetLastError () returned 0x5 [0167.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0167.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a6d8) returned 1 Thread: id = 3650 os_tid = 0xe54 [0167.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif")) returned 0x20 [0167.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0167.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.081] GetLastError () returned 0x5 [0167.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0167.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 Thread: id = 3651 os_tid = 0x14c8 [0167.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif")) returned 0x20 [0167.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0167.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.083] GetLastError () returned 0x5 [0167.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0167.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efe68) returned 1 Thread: id = 3652 os_tid = 0x834 [0167.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif")) returned 0x20 [0167.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0167.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.084] GetLastError () returned 0x5 [0167.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0167.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff38) returned 1 Thread: id = 3653 os_tid = 0x14cc [0167.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif")) returned 0x20 [0167.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0167.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.086] GetLastError () returned 0x5 [0167.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0167.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec800) returned 1 Thread: id = 3654 os_tid = 0x14d0 [0167.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif")) returned 0x20 [0167.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0167.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.088] GetLastError () returned 0x5 [0167.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0167.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec8d8) returned 1 Thread: id = 3655 os_tid = 0x14d4 [0167.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif")) returned 0x20 [0167.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0167.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.089] GetLastError () returned 0x5 [0167.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0167.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0008) returned 1 Thread: id = 3656 os_tid = 0x14d8 [0167.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif")) returned 0x20 [0167.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0167.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.091] GetLastError () returned 0x5 [0167.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0167.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f00d8) returned 1 Thread: id = 3657 os_tid = 0x730 [0167.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif")) returned 0x20 [0172.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0172.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.061] GetLastError () returned 0x5 [0172.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0172.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec9b0) returned 1 Thread: id = 3658 os_tid = 0x884 [0167.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif")) returned 0x20 [0172.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0172.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.077] GetLastError () returned 0x5 [0172.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0172.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eca88) returned 1 Thread: id = 3659 os_tid = 0x14dc [0167.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif")) returned 0x20 [0172.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif", dwFileAttributes=0x20) returned 0 [0172.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.097] GetLastError () returned 0x5 [0172.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif", dwFileAttributes=0x20) returned 0 [0172.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f01a8) returned 1 Thread: id = 3660 os_tid = 0x11d0 [0167.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif")) returned 0x20 [0172.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0172.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.108] GetLastError () returned 0x5 [0172.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0172.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecb60) returned 1 Thread: id = 3661 os_tid = 0x14e0 [0167.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif")) returned 0x20 [0172.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0172.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.116] GetLastError () returned 0x5 [0172.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0172.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0278) returned 1 Thread: id = 3662 os_tid = 0x14e8 [0167.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif")) returned 0x20 [0172.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0172.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.124] GetLastError () returned 0x5 [0172.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0172.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecc38) returned 1 Thread: id = 3663 os_tid = 0x1650 [0167.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif")) returned 0x20 [0172.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif", dwFileAttributes=0x20) returned 0 [0172.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.070] GetLastError () returned 0x5 [0172.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif", dwFileAttributes=0x20) returned 0 [0172.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0348) returned 1 Thread: id = 3664 os_tid = 0x1654 [0167.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif")) returned 0x20 [0172.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0172.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.084] GetLastError () returned 0x5 [0172.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0172.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea8a8) returned 1 Thread: id = 3665 os_tid = 0x1658 [0167.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif")) returned 0x20 [0171.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0171.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.917] GetLastError () returned 0x5 [0171.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0171.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7330) returned 1 Thread: id = 3666 os_tid = 0x14f0 [0167.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dad468 [0167.746] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0167.746] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0167.746] wcscat (in: _Dest=0x3dad468, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*" [0167.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f608 [0167.746] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*", lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0171.646] wcscmp (_String1=".", _String2=".") returned 0 [0171.646] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.646] wcscmp (_String1="..", _String2=".") returned 1 [0171.646] wcscmp (_String1="..", _String2="..") returned 0 [0171.646] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0171.646] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0171.647] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0171.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x300dc90 [0171.647] wcscpy (in: _Dest=0x300dc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0171.647] wcscat (in: _Dest=0x300dc90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0171.647] wcscat (in: _Dest=0x300dc90, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" [0172.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x300dc90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ac [0172.582] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0172.582] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0172.582] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0172.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bcbc8 [0172.582] wcscpy (in: _Dest=0x30bcbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0172.582] wcscat (in: _Dest=0x30bcbc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0172.582] wcscat (in: _Dest=0x30bcbc8, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" [0172.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x30bcbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b6c [0172.584] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2eab4b00, ftLastWriteTime.dwHighDateTime=0x1cd9c10, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0172.584] wcscmp (_String1="main.html", _String2=".") returned 1 [0172.584] wcscmp (_String1="main.html", _String2="..") returned 1 [0172.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef55a0 [0172.584] wcscpy (in: _Dest=0x3ef55a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0172.584] wcscat (in: _Dest=0x3ef55a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0172.584] wcscat (in: _Dest=0x3ef55a0, _Source="main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" [0172.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef55a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be4 [0172.585] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2eab4b00, ftLastWriteTime.dwHighDateTime=0x1cd9c10, nFileSizeHigh=0x0, nFileSizeLow=0x4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0172.585] wcscmp (_String1="main.js", _String2=".") returned 1 [0172.585] wcscmp (_String1="main.js", _String2="..") returned 1 [0172.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5ac8 [0172.585] wcscpy (in: _Dest=0x3ef5ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0172.585] wcscat (in: _Dest=0x3ef5ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0172.585] wcscat (in: _Dest=0x3ef5ac8, _Source="main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" [0172.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef5ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be8 [0172.619] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0172.619] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0172.619] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0172.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bcf10 [0172.620] wcscpy (in: _Dest=0x30bcf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0172.620] wcscat (in: _Dest=0x30bcf10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0172.620] wcscat (in: _Dest=0x30bcf10, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json" [0180.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x30bcf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0180.724] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 1 [0180.724] wcscmp (_String1="__MACOSX", _String2=".") returned 1 [0180.724] wcscmp (_String1="__MACOSX", _String2="..") returned 1 [0180.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x83efab8 [0180.724] wcscpy (in: _Dest=0x83efab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0180.724] wcscat (in: _Dest=0x83efab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0180.724] wcscat (in: _Dest=0x83efab8, _Source="__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0180.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83efab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a4 [0180.726] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 0 [0180.726] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0180.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f608) returned 1 [0180.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 [0180.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 Thread: id = 3667 os_tid = 0x14f4 [0167.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8020f60 [0167.747] wcscpy (in: _Dest=0x8020f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0167.747] wcscat (in: _Dest=0x8020f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0167.747] wcscat (in: _Dest=0x8020f60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*" [0167.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e530 [0167.747] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55588 [0171.647] wcscmp (_String1=".", _String2=".") returned 0 [0171.647] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.647] wcscmp (_String1="..", _String2=".") returned 1 [0171.647] wcscmp (_String1="..", _String2="..") returned 0 [0171.647] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe644d300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0171.647] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0171.647] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0171.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x83222f8 [0171.647] wcscpy (in: _Dest=0x83222f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0171.647] wcscat (in: _Dest=0x83222f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0171.647] wcscat (in: _Dest=0x83222f8, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" [0174.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83222f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24dc [0174.247] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6454830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0174.247] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0174.248] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0174.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8322400 [0174.248] wcscpy (in: _Dest=0x8322400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0174.248] wcscat (in: _Dest=0x8322400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0174.248] wcscat (in: _Dest=0x8322400, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" [0174.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8322400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0174.249] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6459650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe645bd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0174.249] wcscmp (_String1="main.html", _String2=".") returned 1 [0174.249] wcscmp (_String1="main.html", _String2="..") returned 1 [0174.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e24f40 [0174.249] wcscpy (in: _Dest=0x3e24f40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0174.249] wcscat (in: _Dest=0x3e24f40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0174.249] wcscat (in: _Dest=0x3e24f40, _Source="main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" [0174.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26ac [0174.250] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6460b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6460b80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0174.250] wcscmp (_String1="main.js", _String2=".") returned 1 [0174.250] wcscmp (_String1="main.js", _String2="..") returned 1 [0174.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e27140 [0174.250] wcscpy (in: _Dest=0x3e27140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0174.250] wcscat (in: _Dest=0x3e27140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0174.250] wcscat (in: _Dest=0x3e27140, _Source="main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" [0174.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26b0 [0174.251] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64659a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e0050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0174.251] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0174.251] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0174.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8322508 [0174.251] wcscpy (in: _Dest=0x8322508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0174.251] wcscat (in: _Dest=0x8322508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0174.251] wcscat (in: _Dest=0x8322508, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" [0174.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8322508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2710 [0174.252] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe626eac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6445dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6445dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0174.252] wcscmp (_String1="_locales", _String2=".") returned 1 [0174.252] wcscmp (_String1="_locales", _String2="..") returned 1 [0174.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e25240 [0174.252] wcscpy (in: _Dest=0x3e25240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0174.252] wcscat (in: _Dest=0x3e25240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0174.252] wcscat (in: _Dest=0x3e25240, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0174.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e25240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2714 [0174.253] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0174.253] wcscmp (_String1="_metadata", _String2=".") returned 1 [0174.253] wcscmp (_String1="_metadata", _String2="..") returned 1 [0174.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e26340 [0174.254] wcscpy (in: _Dest=0x3e26340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0174.254] wcscat (in: _Dest=0x3e26340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0174.254] wcscat (in: _Dest=0x3e26340, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0174.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e26340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2788 [0174.254] FindNextFileW (in: hFindFile=0x3e55588, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0174.255] FindClose (in: hFindFile=0x3e55588 | out: hFindFile=0x3e55588) returned 1 [0174.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e530) returned 1 [0174.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020f60) returned 1 [0174.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80217d0) returned 1 Thread: id = 3668 os_tid = 0x165c [0167.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx")) returned 0x20 [0167.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0167.755] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.762] GetLastError () returned 0x5 [0167.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0167.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187808) returned 1 Thread: id = 3669 os_tid = 0x1660 [0167.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum")) returned 0x20 [0167.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM", dwFileAttributes=0x20) returned 0 [0167.775] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.785] GetLastError () returned 0x5 [0167.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM", dwFileAttributes=0x20) returned 0 [0167.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 Thread: id = 3670 os_tid = 0x1664 [0167.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum")) returned 0x20 [0167.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM", dwFileAttributes=0x20) returned 0 [0167.807] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.815] GetLastError () returned 0x5 [0167.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM", dwFileAttributes=0x20) returned 0 [0167.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 Thread: id = 3671 os_tid = 0xc20 [0167.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum")) returned 0x20 [0167.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM", dwFileAttributes=0x20) returned 0 [0167.858] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.865] GetLastError () returned 0x5 [0167.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM", dwFileAttributes=0x20) returned 0 [0167.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de0f8) returned 1 Thread: id = 3672 os_tid = 0x1668 [0167.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae008 [0167.876] wcscpy (in: _Dest=0x3dae008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0167.877] wcscat (in: _Dest=0x3dae008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0167.877] wcscat (in: _Dest=0x3dae008, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*" [0167.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091550 [0167.877] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54ac8 [0171.648] wcscmp (_String1=".", _String2=".") returned 0 [0171.648] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.648] wcscmp (_String1="..", _String2=".") returned 1 [0171.648] wcscmp (_String1="..", _String2="..") returned 0 [0171.648] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4ce01e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce09b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x12dfc600, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_background.js", cAlternateFileName="CRAW_B~1.JS")) returned 1 [0171.648] wcscmp (_String1="craw_background.js", _String2=".") returned 1 [0171.648] wcscmp (_String1="craw_background.js", _String2="..") returned 1 [0171.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bcab0 [0171.648] wcscpy (in: _Dest=0x30bcab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0171.648] wcscat (in: _Dest=0x30bcab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0171.648] wcscat (in: _Dest=0x30bcab0, _Source="craw_background.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" [0180.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x30bcab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2acc [0180.260] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4ce01e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e38d80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x12dfc600, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x3b059, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.js", cAlternateFileName="CRAW_W~1.JS")) returned 1 [0180.260] wcscmp (_String1="craw_window.js", _String2=".") returned 1 [0180.260] wcscmp (_String1="craw_window.js", _String2="..") returned 1 [0180.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x81df878 [0180.260] wcscpy (in: _Dest=0x81df878, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0180.260] wcscat (in: _Dest=0x81df878, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0180.260] wcscat (in: _Dest=0x81df878, _Source="craw_window.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" [0180.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac4 [0180.261] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0180.261] wcscmp (_String1="css", _String2=".") returned 1 [0180.261] wcscmp (_String1="css", _String2="..") returned 1 [0180.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e27740 [0180.261] wcscpy (in: _Dest=0x3e27740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0180.261] wcscat (in: _Dest=0x3e27740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0180.261] wcscat (in: _Dest=0x3e27740, _Source="css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" [0180.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4 [0180.262] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1 [0180.262] wcscmp (_String1="html", _String2=".") returned 1 [0180.262] wcscmp (_String1="html", _String2="..") returned 1 [0180.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e27840 [0180.263] wcscpy (in: _Dest=0x3e27840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0180.263] wcscat (in: _Dest=0x3e27840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0180.263] wcscat (in: _Dest=0x3e27840, _Source="html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" [0180.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab0 [0180.264] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54145b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0180.264] wcscmp (_String1="images", _String2=".") returned 1 [0180.264] wcscmp (_String1="images", _String2="..") returned 1 [0180.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e26340 [0180.264] wcscpy (in: _Dest=0x3e26340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0180.264] wcscat (in: _Dest=0x3e26340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0180.264] wcscat (in: _Dest=0x3e26340, _Source="images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0180.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e26340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0180.265] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f4cb90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe540a970, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0180.265] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0180.265] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0180.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x81df990 [0180.266] wcscpy (in: _Dest=0x81df990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0180.266] wcscat (in: _Dest=0x81df990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0180.266] wcscat (in: _Dest=0x81df990, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" [0180.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0180.267] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0180.267] wcscmp (_String1="_locales", _String2=".") returned 1 [0180.267] wcscmp (_String1="_locales", _String2="..") returned 1 [0180.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8320b40 [0180.267] wcscpy (in: _Dest=0x8320b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0180.267] wcscat (in: _Dest=0x8320b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0180.267] wcscat (in: _Dest=0x8320b40, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0180.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8320b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0180.268] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0180.268] wcscmp (_String1="_metadata", _String2=".") returned 1 [0180.268] wcscmp (_String1="_metadata", _String2="..") returned 1 [0180.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83eb9b0 [0180.268] wcscpy (in: _Dest=0x83eb9b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0180.268] wcscat (in: _Dest=0x83eb9b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0180.268] wcscat (in: _Dest=0x83eb9b0, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" [0180.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb9b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0180.270] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x8091550 | out: lpFindFileData=0x8091550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0180.270] FindClose (in: hFindFile=0x3e54ac8 | out: hFindFile=0x3e54ac8) returned 1 [0185.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091550) returned 1 [0185.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae008) returned 1 [0185.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 Thread: id = 3673 os_tid = 0x166c [0167.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8020e70 [0167.877] wcscpy (in: _Dest=0x8020e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0167.877] wcscat (in: _Dest=0x8020e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0167.878] wcscat (in: _Dest=0x8020e70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*" [0167.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091080 [0167.878] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*", lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098dd0 [0168.555] wcscmp (_String1=".", _String2=".") returned 0 [0168.555] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.555] wcscmp (_String1="..", _String2=".") returned 1 [0168.555] wcscmp (_String1="..", _String2="..") returned 0 [0168.555] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x170c, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0168.555] wcscmp (_String1="128.png", _String2=".") returned 1 [0168.555] wcscmp (_String1="128.png", _String2="..") returned 1 [0168.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadb30 [0168.556] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0168.556] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0168.556] wcscat (in: _Dest=0x3dadb30, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" [0170.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b14 [0170.079] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44624a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bf9290, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0170.079] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0170.079] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0170.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8321cc8 [0170.079] wcscpy (in: _Dest=0x8321cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0170.079] wcscat (in: _Dest=0x8321cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0170.079] wcscat (in: _Dest=0x8321cc8, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" [0170.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8321cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0170.080] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0170.081] wcscmp (_String1="_locales", _String2=".") returned 1 [0170.081] wcscmp (_String1="_locales", _String2="..") returned 1 [0170.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae1f8 [0170.081] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0170.081] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0170.081] wcscat (in: _Dest=0x3dae1f8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0170.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2598 [0170.082] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 1 [0170.082] wcscmp (_String1="__MACOSX", _String2=".") returned 1 [0170.082] wcscmp (_String1="__MACOSX", _String2="..") returned 1 [0170.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae2f0 [0170.082] wcscpy (in: _Dest=0x3dae2f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0170.082] wcscat (in: _Dest=0x3dae2f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0170.082] wcscat (in: _Dest=0x3dae2f0, _Source="__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" [0170.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dae2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0170.083] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 0 [0170.083] FindClose (in: hFindFile=0x8098dd0 | out: hFindFile=0x8098dd0) returned 1 [0170.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091080) returned 1 [0170.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020e70) returned 1 [0170.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3afe8) returned 1 Thread: id = 3674 os_tid = 0x11f8 [0167.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80206f0 [0167.878] wcscpy (in: _Dest=0x80206f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0167.878] wcscat (in: _Dest=0x80206f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0167.878] wcscat (in: _Dest=0x80206f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*" [0167.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ea00 [0167.878] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55008 [0171.648] wcscmp (_String1=".", _String2=".") returned 0 [0171.648] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.648] wcscmp (_String1="..", _String2=".") returned 1 [0171.648] wcscmp (_String1="..", _String2="..") returned 0 [0171.648] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6870c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0171.648] wcscmp (_String1="128.png", _String2=".") returned 1 [0171.648] wcscmp (_String1="128.png", _String2="..") returned 1 [0171.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e25140 [0171.648] wcscpy (in: _Dest=0x3e25140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0171.649] wcscat (in: _Dest=0x3e25140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0171.649] wcscat (in: _Dest=0x3e25140, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" [0178.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e25140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2654 [0178.137] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe686be00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b484c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0178.137] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0178.137] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0178.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335ab8 [0178.137] wcscpy (in: _Dest=0x8335ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0178.137] wcscat (in: _Dest=0x8335ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0178.137] wcscat (in: _Dest=0x8335ab8, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" [0178.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8335ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0178.138] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6878150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6911e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6911e40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0178.138] wcscmp (_String1="_locales", _String2=".") returned 1 [0178.138] wcscmp (_String1="_locales", _String2="..") returned 1 [0178.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e27a40 [0178.139] wcscpy (in: _Dest=0x3e27a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0178.139] wcscat (in: _Dest=0x3e27a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0178.139] wcscat (in: _Dest=0x3e27a40, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0178.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0178.140] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0178.140] wcscmp (_String1="_metadata", _String2=".") returned 1 [0178.140] wcscmp (_String1="_metadata", _String2="..") returned 1 [0178.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e25740 [0178.140] wcscpy (in: _Dest=0x3e25740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0178.140] wcscat (in: _Dest=0x3e25740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0178.140] wcscat (in: _Dest=0x3e25740, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0178.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e25740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0178.142] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x808ea00 | out: lpFindFileData=0x808ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0178.142] FindClose (in: hFindFile=0x3e55008 | out: hFindFile=0x3e55008) returned 1 [0185.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ea00) returned 1 [0185.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80206f0) returned 1 [0185.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80218c0) returned 1 Thread: id = 3675 os_tid = 0x136c [0167.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt")) returned 0x20 [0168.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", dwFileAttributes=0x20) returned 0 [0168.764] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.764] GetLastError () returned 0x5 [0168.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", dwFileAttributes=0x20) returned 0 [0168.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65878) returned 1 Thread: id = 3676 os_tid = 0x1670 [0167.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt")) returned 0x20 [0168.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", dwFileAttributes=0x20) returned 0 [0168.762] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.763] GetLastError () returned 0x5 [0168.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", dwFileAttributes=0x20) returned 0 [0168.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f00d8) returned 1 Thread: id = 3677 os_tid = 0x1674 [0167.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt")) returned 0x20 [0168.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", dwFileAttributes=0x20) returned 0 [0168.761] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.761] GetLastError () returned 0x5 [0168.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", dwFileAttributes=0x20) returned 0 [0168.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec8d8) returned 1 Thread: id = 3678 os_tid = 0xc94 [0167.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt")) returned 0x20 [0168.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", dwFileAttributes=0x20) returned 0 [0168.760] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.760] GetLastError () returned 0x5 [0168.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", dwFileAttributes=0x20) returned 0 [0168.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec800) returned 1 Thread: id = 3679 os_tid = 0x1678 [0167.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt")) returned 0x20 [0168.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", dwFileAttributes=0x20) returned 0 [0168.752] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.752] GetLastError () returned 0x5 [0168.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", dwFileAttributes=0x20) returned 0 [0168.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec728) returned 1 Thread: id = 3680 os_tid = 0x167c [0167.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt")) returned 0x20 [0168.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.315] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.315] GetLastError () returned 0x5 [0168.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a990) returned 1 Thread: id = 3681 os_tid = 0xdf8 [0167.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt")) returned 0x20 [0168.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", dwFileAttributes=0x20) returned 0 [0168.796] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.797] GetLastError () returned 0x5 [0168.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", dwFileAttributes=0x20) returned 0 [0168.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0008) returned 1 Thread: id = 3682 os_tid = 0x1370 [0167.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt")) returned 0x20 [0168.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", dwFileAttributes=0x20) returned 0 [0168.795] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.795] GetLastError () returned 0x5 [0168.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", dwFileAttributes=0x20) returned 0 [0168.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec650) returned 1 Thread: id = 3683 os_tid = 0x614 [0167.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt")) returned 0x20 [0168.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.790] GetLastError () returned 0x5 [0168.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a8a8) returned 1 Thread: id = 3684 os_tid = 0x1378 [0167.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt")) returned 0x20 [0168.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", dwFileAttributes=0x20) returned 0 [0168.788] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.788] GetLastError () returned 0x5 [0168.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", dwFileAttributes=0x20) returned 0 [0168.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecd10) returned 1 Thread: id = 3685 os_tid = 0x137c [0167.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt")) returned 0x20 [0168.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", dwFileAttributes=0x20) returned 0 [0168.786] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.786] GetLastError () returned 0x5 [0168.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", dwFileAttributes=0x20) returned 0 [0168.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecde8) returned 1 Thread: id = 3686 os_tid = 0x11fc [0167.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt")) returned 0x20 [0168.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", dwFileAttributes=0x20) returned 0 [0168.784] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.785] GetLastError () returned 0x5 [0168.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", dwFileAttributes=0x20) returned 0 [0168.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c90c8) returned 1 Thread: id = 3687 os_tid = 0x1208 [0167.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt")) returned 0x20 [0168.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", dwFileAttributes=0x20) returned 0 [0168.783] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.783] GetLastError () returned 0x5 [0168.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", dwFileAttributes=0x20) returned 0 [0168.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecec0) returned 1 Thread: id = 3688 os_tid = 0x1680 [0167.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt")) returned 0x20 [0168.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", dwFileAttributes=0x20) returned 0 [0168.781] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.781] GetLastError () returned 0x5 [0168.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", dwFileAttributes=0x20) returned 0 [0168.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8fe8) returned 1 Thread: id = 3689 os_tid = 0x668 [0167.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt")) returned 0x20 [0168.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", dwFileAttributes=0x20) returned 0 [0168.779] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.780] GetLastError () returned 0x5 [0168.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", dwFileAttributes=0x20) returned 0 [0168.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff38) returned 1 Thread: id = 3690 os_tid = 0x1684 [0167.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt")) returned 0x20 [0168.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", dwFileAttributes=0x20) returned 0 [0168.778] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.778] GetLastError () returned 0x5 [0168.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", dwFileAttributes=0x20) returned 0 [0168.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecf98) returned 1 Thread: id = 3691 os_tid = 0x96c [0167.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt")) returned 0x20 [0168.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", dwFileAttributes=0x20) returned 0 [0168.776] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.776] GetLastError () returned 0x5 [0168.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", dwFileAttributes=0x20) returned 0 [0168.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed070) returned 1 Thread: id = 3692 os_tid = 0x1688 [0167.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt")) returned 0x20 [0168.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", dwFileAttributes=0x20) returned 0 [0168.774] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.774] GetLastError () returned 0x5 [0168.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", dwFileAttributes=0x20) returned 0 [0168.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed148) returned 1 Thread: id = 3693 os_tid = 0x168c [0167.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt")) returned 0x20 [0168.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", dwFileAttributes=0x20) returned 0 [0168.773] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.773] GetLastError () returned 0x5 [0168.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", dwFileAttributes=0x20) returned 0 [0168.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed220) returned 1 Thread: id = 3694 os_tid = 0x1690 [0167.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt")) returned 0x20 [0168.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", dwFileAttributes=0x20) returned 0 [0168.771] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.772] GetLastError () returned 0x5 [0168.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", dwFileAttributes=0x20) returned 0 [0168.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed2f8) returned 1 Thread: id = 3695 os_tid = 0x120c [0167.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt")) returned 0x20 [0168.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", dwFileAttributes=0x20) returned 0 [0168.770] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.770] GetLastError () returned 0x5 [0168.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", dwFileAttributes=0x20) returned 0 [0168.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed3d0) returned 1 Thread: id = 3696 os_tid = 0x1694 [0167.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt")) returned 0x20 [0168.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", dwFileAttributes=0x20) returned 0 [0168.769] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.769] GetLastError () returned 0x5 [0168.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", dwFileAttributes=0x20) returned 0 [0168.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed4a8) returned 1 Thread: id = 3697 os_tid = 0x14f8 [0167.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt")) returned 0x20 [0168.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", dwFileAttributes=0x20) returned 0 [0168.768] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.768] GetLastError () returned 0x5 [0168.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", dwFileAttributes=0x20) returned 0 [0168.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deeff0) returned 1 Thread: id = 3698 os_tid = 0x1504 [0167.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt")) returned 0x20 [0168.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.766] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.766] GetLastError () returned 0x5 [0168.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a168) returned 1 Thread: id = 3699 os_tid = 0x138c [0167.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt")) returned 0x20 [0168.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", dwFileAttributes=0x20) returned 0 [0168.765] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.765] GetLastError () returned 0x5 [0168.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", dwFileAttributes=0x20) returned 0 [0168.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1648) returned 1 Thread: id = 3700 os_tid = 0x1220 [0167.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html")) returned 0x20 [0167.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0167.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.903] GetLastError () returned 0x5 [0167.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0167.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 3701 os_tid = 0x1008 [0167.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html")) returned 0x20 [0167.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0167.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.910] GetLastError () returned 0x5 [0167.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0167.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1720) returned 1 Thread: id = 3702 os_tid = 0x1228 [0167.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html")) returned 0x20 [0167.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0167.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.912] GetLastError () returned 0x5 [0167.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0167.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 Thread: id = 3703 os_tid = 0x122c [0167.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html")) returned 0x20 [0177.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0177.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.702] GetLastError () returned 0x5 [0177.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0177.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f17f8) returned 1 Thread: id = 3704 os_tid = 0x1230 [0167.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js")) returned 0x20 [0177.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0177.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.704] GetLastError () returned 0x5 [0177.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0177.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea7c8) returned 1 Thread: id = 3705 os_tid = 0x1234 [0167.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css")) returned 0x20 [0177.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0177.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.679] GetLastError () returned 0x5 [0177.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0177.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea988) returned 1 Thread: id = 3706 os_tid = 0xb84 [0167.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html")) returned 0x20 [0177.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0177.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.678] GetLastError () returned 0x5 [0177.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0177.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eaa68) returned 1 Thread: id = 3707 os_tid = 0x1238 [0167.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html")) returned 0x20 [0177.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0177.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.676] GetLastError () returned 0x5 [0177.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0177.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eab48) returned 1 Thread: id = 3708 os_tid = 0x1028 [0167.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html")) returned 0x20 [0177.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0177.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.725] GetLastError () returned 0x5 [0177.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0177.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 Thread: id = 3709 os_tid = 0x102c [0167.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html")) returned 0x20 [0177.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0177.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.723] GetLastError () returned 0x5 [0177.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0177.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eac28) returned 1 Thread: id = 3710 os_tid = 0x1244 [0167.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c738 [0167.926] wcscpy (in: _Dest=0x3e1c738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0167.927] wcscat (in: _Dest=0x3e1c738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0167.927] wcscat (in: _Dest=0x3e1c738, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*" [0167.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80912e8 [0167.927] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099350 [0182.309] wcscmp (_String1=".", _String2=".") returned 0 [0182.309] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.350] wcscmp (_String1="..", _String2=".") returned 1 [0182.350] wcscmp (_String1="..", _String2="..") returned 0 [0182.350] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0182.351] wcscmp (_String1="Adobe.css", _String2=".") returned 1 [0182.351] wcscmp (_String1="Adobe.css", _String2="..") returned 1 [0182.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c90c8 [0182.351] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0182.352] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0182.352] wcscat (in: _Dest=0x2c90c8, _Source="Adobe.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" [0187.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c90c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0187.682] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1 [0187.682] wcscmp (_String1="Americana", _String2=".") returned 1 [0187.683] wcscmp (_String1="Americana", _String2="..") returned 1 [0187.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8b88 [0187.683] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.683] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.683] wcscat (in: _Dest=0x2c8b88, _Source="Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0187.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0187.684] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1 [0187.684] wcscmp (_String1="Americana.css", _String2=".") returned 1 [0187.684] wcscmp (_String1="Americana.css", _String2="..") returned 1 [0187.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39ce0 [0187.684] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.684] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.685] wcscat (in: _Dest=0x3e39ce0, _Source="Americana.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" [0187.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0187.686] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0187.686] wcscmp (_String1="BabyBlue", _String2=".") returned 1 [0187.686] wcscmp (_String1="BabyBlue", _String2="..") returned 1 [0187.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f1648 [0187.686] wcscpy (in: _Dest=0x81f1648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.686] wcscat (in: _Dest=0x81f1648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.686] wcscat (in: _Dest=0x81f1648, _Source="BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0187.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f1648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0187.687] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0187.687] wcscmp (_String1="BabyBlue.css", _String2=".") returned 1 [0187.687] wcscmp (_String1="BabyBlue.css", _String2="..") returned 1 [0187.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8e28 [0187.687] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.687] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.687] wcscat (in: _Dest=0x2c8e28, _Source="BabyBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" [0187.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0187.689] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0187.689] wcscmp (_String1="Biscay", _String2=".") returned 1 [0187.689] wcscmp (_String1="Biscay", _String2="..") returned 1 [0187.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1b58 [0187.689] wcscpy (in: _Dest=0x81f1b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.689] wcscat (in: _Dest=0x81f1b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.689] wcscat (in: _Dest=0x81f1b58, _Source="Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0187.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f1b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0187.690] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0187.690] wcscmp (_String1="Biscay.css", _String2=".") returned 1 [0187.690] wcscmp (_String1="Biscay.css", _String2="..") returned 1 [0187.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c91a8 [0187.690] wcscpy (in: _Dest=0x2c91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.690] wcscat (in: _Dest=0x2c91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.690] wcscat (in: _Dest=0x2c91a8, _Source="Biscay.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" [0187.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0187.692] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1 [0187.692] wcscmp (_String1="BrightOrange", _String2=".") returned 1 [0187.692] wcscmp (_String1="BrightOrange", _String2="..") returned 1 [0187.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8fe8 [0187.692] wcscpy (in: _Dest=0x2c8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.692] wcscat (in: _Dest=0x2c8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.692] wcscat (in: _Dest=0x2c8fe8, _Source="BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0187.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0187.693] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1 [0187.693] wcscmp (_String1="BrightOrange.css", _String2=".") returned 1 [0187.693] wcscmp (_String1="BrightOrange.css", _String2="..") returned 1 [0187.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a990 [0187.693] wcscpy (in: _Dest=0x3e3a990, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.693] wcscat (in: _Dest=0x3e3a990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.693] wcscat (in: _Dest=0x3e3a990, _Source="BrightOrange.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" [0187.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0187.694] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1 [0187.694] wcscmp (_String1="BrightYellow", _String2=".") returned 1 [0187.695] wcscmp (_String1="BrightYellow", _String2="..") returned 1 [0187.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8488 [0187.695] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.695] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.695] wcscat (in: _Dest=0x2c8488, _Source="BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0187.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0187.703] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1 [0187.703] wcscmp (_String1="BrightYellow.css", _String2=".") returned 1 [0187.703] wcscmp (_String1="BrightYellow.css", _String2="..") returned 1 [0187.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b9e0 [0187.703] wcscpy (in: _Dest=0x3e3b9e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.703] wcscat (in: _Dest=0x3e3b9e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.703] wcscat (in: _Dest=0x3e3b9e0, _Source="BrightYellow.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" [0187.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0187.704] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0187.704] wcscmp (_String1="Casual.css", _String2=".") returned 1 [0187.704] wcscmp (_String1="Casual.css", _String2="..") returned 1 [0187.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c97c8 [0187.705] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.705] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.705] wcscat (in: _Dest=0x2c97c8, _Source="Casual.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" [0187.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0187.719] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7705e3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0187.719] wcscmp (_String1="Country.css", _String2=".") returned 1 [0187.719] wcscmp (_String1="Country.css", _String2="..") returned 1 [0187.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8f08 [0187.720] wcscpy (in: _Dest=0x2c8f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.720] wcscat (in: _Dest=0x2c8f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.720] wcscat (in: _Dest=0x2c8f08, _Source="Country.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" [0187.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0187.721] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0187.721] wcscmp (_String1="Desert", _String2=".") returned 1 [0187.721] wcscmp (_String1="Desert", _String2="..") returned 1 [0187.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1d08 [0187.722] wcscpy (in: _Dest=0x81f1d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.722] wcscat (in: _Dest=0x81f1d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.722] wcscat (in: _Dest=0x81f1d08, _Source="Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0187.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f1d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0187.723] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x977, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0187.723] wcscmp (_String1="Desert.css", _String2=".") returned 1 [0187.723] wcscmp (_String1="Desert.css", _String2="..") returned 1 [0187.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9368 [0187.723] wcscpy (in: _Dest=0x2c9368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.723] wcscat (in: _Dest=0x2c9368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.724] wcscat (in: _Dest=0x2c9368, _Source="Desert.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" [0187.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0187.725] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8771a030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0187.725] wcscmp (_String1="Earthy.css", _String2=".") returned 1 [0187.725] wcscmp (_String1="Earthy.css", _String2="..") returned 1 [0187.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8648 [0187.725] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.725] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.725] wcscat (in: _Dest=0x2c8648, _Source="Earthy.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" [0187.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0187.726] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1 [0187.726] wcscmp (_String1="GrayCheck", _String2=".") returned 1 [0187.726] wcscmp (_String1="GrayCheck", _String2="..") returned 1 [0187.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9448 [0187.727] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.727] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.727] wcscat (in: _Dest=0x2c9448, _Source="GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0187.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0187.728] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xaf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1 [0187.728] wcscmp (_String1="GrayCheck.css", _String2=".") returned 1 [0187.728] wcscmp (_String1="GrayCheck.css", _String2="..") returned 1 [0187.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a6d8 [0187.729] wcscpy (in: _Dest=0x3e3a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.729] wcscat (in: _Dest=0x3e3a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.729] wcscat (in: _Dest=0x3e3a6d8, _Source="GrayCheck.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" [0187.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0187.737] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0187.737] wcscmp (_String1="GreenTea.css", _String2=".") returned 1 [0187.738] wcscmp (_String1="GreenTea.css", _String2="..") returned 1 [0187.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9288 [0187.738] wcscpy (in: _Dest=0x2c9288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.738] wcscat (in: _Dest=0x2c9288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.738] wcscat (in: _Dest=0x2c9288, _Source="GreenTea.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" [0187.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0187.739] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1 [0187.739] wcscmp (_String1="LightSpirit.css", _String2=".") returned 1 [0187.740] wcscmp (_String1="LightSpirit.css", _String2="..") returned 1 [0187.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b1b8 [0187.740] wcscpy (in: _Dest=0x3e3b1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.740] wcscat (in: _Dest=0x3e3b1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.740] wcscat (in: _Dest=0x3e3b1b8, _Source="LightSpirit.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" [0187.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0187.742] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0187.742] wcscmp (_String1="Lime", _String2=".") returned 1 [0187.742] wcscmp (_String1="Lime", _String2="..") returned 1 [0187.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x81efcc8 [0187.742] wcscpy (in: _Dest=0x81efcc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.742] wcscat (in: _Dest=0x81efcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.742] wcscat (in: _Dest=0x81efcc8, _Source="Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0187.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81efcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0187.744] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0187.744] wcscmp (_String1="Lime.css", _String2=".") returned 1 [0187.745] wcscmp (_String1="Lime.css", _String2="..") returned 1 [0187.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f18d0 [0187.745] wcscpy (in: _Dest=0x81f18d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.745] wcscat (in: _Dest=0x81f18d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.745] wcscat (in: _Dest=0x81f18d0, _Source="Lime.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" [0187.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f18d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0187.747] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0187.747] wcscmp (_String1="Maroon.css", _String2=".") returned 1 [0187.747] wcscmp (_String1="Maroon.css", _String2="..") returned 1 [0187.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9528 [0187.747] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.747] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.748] wcscat (in: _Dest=0x2c9528, _Source="Maroon.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" [0187.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0187.749] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0187.749] wcscmp (_String1="Oasis", _String2=".") returned 1 [0187.749] wcscmp (_String1="Oasis", _String2="..") returned 1 [0187.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f19a8 [0187.749] wcscpy (in: _Dest=0x81f19a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.749] wcscat (in: _Dest=0x81f19a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.749] wcscat (in: _Dest=0x81f19a8, _Source="Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0187.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f19a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0187.895] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0187.895] wcscmp (_String1="Oasis.css", _String2=".") returned 1 [0187.895] wcscmp (_String1="Oasis.css", _String2="..") returned 1 [0187.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81f5d48 [0187.895] wcscpy (in: _Dest=0x81f5d48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0187.895] wcscat (in: _Dest=0x81f5d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0187.895] wcscat (in: _Dest=0x81f5d48, _Source="Oasis.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" [0188.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f5d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0188.026] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81619fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1 [0188.026] wcscmp (_String1="OliveGreen.css", _String2=".") returned 1 [0188.026] wcscmp (_String1="OliveGreen.css", _String2="..") returned 1 [0188.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3b640 [0188.026] wcscpy (in: _Dest=0x3e3b640, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.026] wcscat (in: _Dest=0x3e3b640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.026] wcscat (in: _Dest=0x3e3b640, _Source="OliveGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" [0188.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0188.027] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8205de90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0188.027] wcscmp (_String1="Premium.css", _String2=".") returned 1 [0188.028] wcscmp (_String1="Premium.css", _String2="..") returned 1 [0188.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81f60c8 [0188.028] wcscpy (in: _Dest=0x81f60c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.028] wcscat (in: _Dest=0x81f60c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.028] wcscat (in: _Dest=0x81f60c8, _Source="Premium.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" [0188.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f60c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0188.029] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0188.029] wcscmp (_String1="Slate", _String2=".") returned 1 [0188.029] wcscmp (_String1="Slate", _String2="..") returned 1 [0188.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f2d10 [0188.029] wcscpy (in: _Dest=0x81f2d10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.029] wcscat (in: _Dest=0x81f2d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.029] wcscat (in: _Dest=0x81f2d10, _Source="Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0188.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f2d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0188.031] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0188.031] wcscmp (_String1="Slate.css", _String2=".") returned 1 [0188.031] wcscmp (_String1="Slate.css", _String2="..") returned 1 [0188.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81f61a8 [0188.031] wcscpy (in: _Dest=0x81f61a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.031] wcscat (in: _Dest=0x81f61a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.031] wcscat (in: _Dest=0x81f61a8, _Source="Slate.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" [0188.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f61a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0188.033] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1 [0188.033] wcscmp (_String1="SlateBlue.css", _String2=".") returned 1 [0188.033] wcscmp (_String1="SlateBlue.css", _String2="..") returned 1 [0188.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3b8f8 [0188.033] wcscpy (in: _Dest=0x3e3b8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.033] wcscat (in: _Dest=0x3e3b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.033] wcscat (in: _Dest=0x3e3b8f8, _Source="SlateBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" [0188.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0188.035] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0188.035] wcscmp (_String1="SoftBlue", _String2=".") returned 1 [0188.035] wcscmp (_String1="SoftBlue", _String2="..") returned 1 [0188.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f2de8 [0188.035] wcscpy (in: _Dest=0x81f2de8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.035] wcscat (in: _Dest=0x81f2de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.035] wcscat (in: _Dest=0x81f2de8, _Source="SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0188.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f2de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0188.037] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe34, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0188.037] wcscmp (_String1="SoftBlue.css", _String2=".") returned 1 [0188.037] wcscmp (_String1="SoftBlue.css", _String2="..") returned 1 [0188.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81f6288 [0188.037] wcscpy (in: _Dest=0x81f6288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.037] wcscat (in: _Dest=0x81f6288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.037] wcscat (in: _Dest=0x81f6288, _Source="SoftBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" [0188.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f6288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0188.039] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1 [0188.039] wcscmp (_String1="SpringGreen", _String2=".") returned 1 [0188.039] wcscmp (_String1="SpringGreen", _String2="..") returned 1 [0188.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81f6368 [0188.039] wcscpy (in: _Dest=0x81f6368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.039] wcscat (in: _Dest=0x81f6368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.039] wcscat (in: _Dest=0x81f6368, _Source="SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0188.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f6368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0188.041] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1 [0188.041] wcscmp (_String1="SpringGreen.css", _String2=".") returned 1 [0188.041] wcscmp (_String1="SpringGreen.css", _String2="..") returned 1 [0188.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b810 [0188.041] wcscpy (in: _Dest=0x3e3b810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.041] wcscat (in: _Dest=0x3e3b810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.041] wcscat (in: _Dest=0x3e3b810, _Source="SpringGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" [0188.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0188.043] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x736, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0189.012] wcscmp (_String1="Sts.css", _String2=".") returned 1 [0189.012] wcscmp (_String1="Sts.css", _String2="..") returned 1 [0189.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f3070 [0189.012] wcscpy (in: _Dest=0x81f3070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0189.012] wcscat (in: _Dest=0x81f3070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0189.012] wcscat (in: _Dest=0x81f3070, _Source="Sts.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" [0189.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0189.023] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0189.023] wcscmp (_String1="STS2", _String2=".") returned 1 [0189.024] wcscmp (_String1="STS2", _String2="..") returned 1 [0189.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x81efbf8 [0189.024] wcscpy (in: _Dest=0x81efbf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0189.024] wcscat (in: _Dest=0x81efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0189.024] wcscat (in: _Dest=0x81efbf8, _Source="STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0189.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0189.025] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0189.026] wcscmp (_String1="Sts2.css", _String2=".") returned 1 [0189.026] wcscmp (_String1="Sts2.css", _String2="..") returned 1 [0189.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f32f8 [0189.026] wcscpy (in: _Dest=0x81f32f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0189.026] wcscat (in: _Dest=0x81f32f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0189.026] wcscat (in: _Dest=0x81f32f8, _Source="Sts2.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" [0189.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f32f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0189.028] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88457a90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0189.028] wcscmp (_String1="Swirl", _String2=".") returned 1 [0189.028] wcscmp (_String1="Swirl", _String2="..") returned 1 [0189.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f1720 [0189.028] wcscpy (in: _Dest=0x81f1720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0189.028] wcscat (in: _Dest=0x81f1720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0189.028] wcscat (in: _Dest=0x81f1720, _Source="Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0189.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f1720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0189.029] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0189.029] wcscmp (_String1="Swirl.css", _String2=".") returned 1 [0189.029] wcscmp (_String1="Swirl.css", _String2="..") returned 1 [0189.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81f6c28 [0189.030] wcscpy (in: _Dest=0x81f6c28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0189.030] wcscat (in: _Dest=0x81f6c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0189.030] wcscat (in: _Dest=0x81f6c28, _Source="Swirl.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" [0189.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f6c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0189.031] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90743490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0189.031] wcscmp (_String1="Teal.css", _String2=".") returned 1 [0189.031] wcscmp (_String1="Teal.css", _String2="..") returned 1 [0189.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f22f0 [0189.031] wcscpy (in: _Dest=0x81f22f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0189.032] wcscat (in: _Dest=0x81f22f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0189.032] wcscat (in: _Dest=0x81f22f0, _Source="Teal.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" [0189.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f22f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0189.033] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1 [0189.033] wcscmp (_String1="TexturedBlue.css", _String2=".") returned 1 [0189.033] wcscmp (_String1="TexturedBlue.css", _String2="..") returned 1 [0189.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a080 [0189.033] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0189.033] wcscat (in: _Dest=0x3e3a080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0189.033] wcscat (in: _Dest=0x3e3a080, _Source="TexturedBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" [0189.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d4 [0189.035] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1 [0189.035] wcscmp (_String1="VelvetRose.css", _String2=".") returned 1 [0189.035] wcscmp (_String1="VelvetRose.css", _String2="..") returned 1 [0189.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3afe8 [0189.035] wcscpy (in: _Dest=0x3e3afe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0189.035] wcscat (in: _Dest=0x3e3afe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0189.035] wcscat (in: _Dest=0x3e3afe8, _Source="VelvetRose.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" [0189.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3afe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca8 [0189.037] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x80912e8 | out: lpFindFileData=0x80912e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0 [0189.302] FindClose (in: hFindFile=0x8099350 | out: hFindFile=0x8099350) returned 1 [0189.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80912e8) returned 1 [0189.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c738) returned 1 [0189.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7268) returned 1 Thread: id = 3711 os_tid = 0x124c [0167.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm")) returned 0x20 [0177.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0177.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.720] GetLastError () returned 0x5 [0177.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0177.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ead08) returned 1 Thread: id = 3712 os_tid = 0x1254 [0167.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg")) returned 0x20 [0177.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0177.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.718] GetLastError () returned 0x5 [0177.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0177.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a6d8) returned 1 Thread: id = 3713 os_tid = 0x125c [0167.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0177.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0177.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.716] GetLastError () returned 0x5 [0177.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0177.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80219b0) returned 1 Thread: id = 3714 os_tid = 0x1260 [0167.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html")) returned 0x20 [0177.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0177.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.767] GetLastError () returned 0x5 [0177.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0177.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f18d0) returned 1 Thread: id = 3715 os_tid = 0x1264 [0167.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html")) returned 0x20 [0177.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0177.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.715] GetLastError () returned 0x5 [0177.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0177.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eade8) returned 1 Thread: id = 3716 os_tid = 0x150c [0167.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg")) returned 0x20 [0177.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0177.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.713] GetLastError () returned 0x5 [0177.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0177.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f19a8) returned 1 Thread: id = 3717 os_tid = 0x1268 [0167.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js")) returned 0x20 [0177.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js", dwFileAttributes=0x20) returned 0 [0177.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.707] GetLastError () returned 0x5 [0177.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js", dwFileAttributes=0x20) returned 0 [0177.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6908) returned 1 Thread: id = 3718 os_tid = 0xc0c [0167.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif")) returned 0x20 [0177.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0177.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.765] GetLastError () returned 0x5 [0177.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0177.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6840) returned 1 Thread: id = 3719 os_tid = 0x1060 [0167.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif")) returned 0x20 [0177.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0177.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.705] GetLastError () returned 0x5 [0177.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0177.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1a80) returned 1 Thread: id = 3720 os_tid = 0x126c [0167.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js")) returned 0x20 [0177.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0177.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.772] GetLastError () returned 0x5 [0177.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0177.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1b58) returned 1 Thread: id = 3721 os_tid = 0x1068 [0167.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif")) returned 0x20 [0177.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0177.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.697] GetLastError () returned 0x5 [0177.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0177.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1c30) returned 1 Thread: id = 3722 os_tid = 0x1390 [0167.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif")) returned 0x20 [0177.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0177.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.770] GetLastError () returned 0x5 [0177.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0177.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1d08) returned 1 Thread: id = 3723 os_tid = 0x1270 [0167.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif")) returned 0x20 [0177.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0177.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.764] GetLastError () returned 0x5 [0177.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0177.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6b60) returned 1 Thread: id = 3724 os_tid = 0x1278 [0167.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif")) returned 0x20 [0177.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0177.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.696] GetLastError () returned 0x5 [0177.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0177.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efe68) returned 1 Thread: id = 3725 os_tid = 0x127c [0167.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif")) returned 0x20 [0177.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0177.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.694] GetLastError () returned 0x5 [0177.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0177.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efd98) returned 1 Thread: id = 3726 os_tid = 0x1280 [0167.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif")) returned 0x20 [0177.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0177.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.693] GetLastError () returned 0x5 [0177.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0177.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1de0) returned 1 Thread: id = 3727 os_tid = 0x139c [0167.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif")) returned 0x20 [0177.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0177.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.691] GetLastError () returned 0x5 [0177.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0177.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1eb8) returned 1 Thread: id = 3728 os_tid = 0x13a0 [0167.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif")) returned 0x20 [0177.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0177.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.690] GetLastError () returned 0x5 [0177.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0177.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eaec8) returned 1 Thread: id = 3729 os_tid = 0x13a4 [0167.941] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png")) returned 0x2020 [0168.804] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", dwFileAttributes=0x20) returned 1 [0175.758] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c64 [0175.758] GetFileSizeEx (in: hFile=0x1c64, lpFileSize=0xd9bfac0 | out: lpFileSize=0xd9bfac0*=6707) returned 1 [0175.758] SetFilePointerEx (in: hFile=0x1c64, liDistanceToMove=0x1a2f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.758] ReadFile (in: hFile=0x1c64, lpBuffer=0xd9bfacc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd9bfaa8, lpOverlapped=0x0 | out: lpBuffer=0xd9bfacc*, lpNumberOfBytesRead=0xd9bfaa8*=0x4, lpOverlapped=0x0) returned 1 [0175.780] SetFilePointerEx (in: hFile=0x1c64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0175.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0175.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0175.780] NtQuerySystemTime (in: CurrentTime=0xd9bfa48 | out: CurrentTime=0xd9bfa48*=132471540438804000) returned 0x0 [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x5789580f [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x14e35494 [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x24e0809b [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x23024818 [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x77fbb2a8 [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x4c8d3732 [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x19bf648b [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x62ad39f2 [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x7ae0f43e [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x763d4446 [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x6836f4d8 [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x8e67ab0 [0175.780] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x47d8e5ef [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x367fb3d8 [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x7555183 [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x3cafcf69 [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x4fd9ee8b [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x7979a49 [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x7328ac3e [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x2dd31cec [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x3e429c25 [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x7c00448c [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x3a518c9f [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x106584b0 [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x22979679 [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x411825eb [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x219f0f8c [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x1b98948c [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x1e914aa2 [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x6f39da4a [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x4e6987c [0175.781] RtlRandomEx (in: Seed=0xd9bfa40 | out: Seed=0xd9bfa40) returned 0x5dcde28c [0175.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0175.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0175.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817e8d0 [0175.791] ReadFile (in: hFile=0x1c64, lpBuffer=0x8164498, nNumberOfBytesToRead=0x1a33, lpNumberOfBytesRead=0xd9bfa3c, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0xd9bfa3c*=0x1a33, lpOverlapped=0x0) returned 1 [0175.802] SetFilePointerEx (in: hFile=0x1c64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.803] WriteFile (in: hFile=0x1c64, lpBuffer=0x817e8d0*, nNumberOfBytesToWrite=0x1a33, lpNumberOfBytesWritten=0xd9bfa40, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesWritten=0xd9bfa40*=0x1a33, lpOverlapped=0x0) returned 1 [0176.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0176.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0176.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0176.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0176.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0176.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0176.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6b18) returned 1 [0176.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x305c590 [0176.074] SetFilePointerEx (in: hFile=0x1c64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.074] WriteFile (in: hFile=0x1c64, lpBuffer=0x81f5e88*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xd9bfab4, lpOverlapped=0x0 | out: lpBuffer=0x81f5e88*, lpNumberOfBytesWritten=0xd9bfab4*=0x100, lpOverlapped=0x0) returned 1 [0176.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5e88) returned 1 [0176.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0176.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0176.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0176.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0176.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0176.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0176.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0176.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbc78 [0176.081] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" [0176.081] wcscat (in: _Dest=0x30bbc78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.f0dbec" [0176.081] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.f0dbec", NtPathName=0xd9bfa38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81e27a0 [0176.084] FlushFileBuffers (hFile=0x1c64) returned 1 [0176.085] CloseHandle (hObject=0x1c64) returned 1 [0176.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x30bbc78 [0176.086] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0176.086] wcscat (in: _Dest=0x30bbc78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\F0DBEC-Readme.txt" [0176.086] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\f0dbec-readme.txt")) returned 0xffffffff [0176.086] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c64 [0176.087] WriteFile (in: hFile=0x1c64, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd9bfa5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd9bfa5c*=0x70c, lpOverlapped=0x0) returned 1 [0176.088] CloseHandle (hObject=0x1c64) returned 1 [0176.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0176.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24e40) returned 1 Thread: id = 3730 os_tid = 0x151c [0167.944] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json")) returned 0x2020 [0168.317] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0175.135] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x27b4 [0175.135] GetFileSizeEx (in: hFile=0x27b4, lpFileSize=0xdacfbc8 | out: lpFileSize=0xdacfbc8*=1004) returned 1 [0175.136] SetFilePointerEx (in: hFile=0x27b4, liDistanceToMove=0x3e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.136] ReadFile (in: hFile=0x27b4, lpBuffer=0xdacfbd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdacfbb0, lpOverlapped=0x0 | out: lpBuffer=0xdacfbd4*, lpNumberOfBytesRead=0xdacfbb0*=0x4, lpOverlapped=0x0) returned 1 [0175.286] SetFilePointerEx (in: hFile=0x27b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0175.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d427b8 [0175.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42628 [0175.287] NtQuerySystemTime (in: CurrentTime=0xdacfb50 | out: CurrentTime=0xdacfb50*=132471540433968000) returned 0x0 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x4922f485 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0xf458de8 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x16b94765 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x228a820f [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x74054f10 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0xe1b019b [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x2ee13bbf [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x5527cd90 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0xae59a22 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x1957bf7e [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x337f2bef [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x327dbd87 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x7829c9ba [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x670e7ee5 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x68e119c9 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x6c4d5534 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x56b81561 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x3fe98d7c [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x63afa316 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0xc8590c3 [0175.287] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x5fcb5f62 [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0xb374b6c [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x220a4881 [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x11bb98ba [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x6146b7e0 [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x1d80bc72 [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x4c4da36d [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x28f7ed9e [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x3f7a0397 [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x5c444850 [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x6c4591e [0175.288] RtlRandomEx (in: Seed=0xdacfb48 | out: Seed=0xdacfb48) returned 0x7cf8e7c5 [0175.298] ReadFile (in: hFile=0x27b4, lpBuffer=0x815cc88, nNumberOfBytesToRead=0x3ec, lpNumberOfBytesRead=0xdacfb44, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesRead=0xdacfb44*=0x3ec, lpOverlapped=0x0) returned 1 [0175.298] SetFilePointerEx (in: hFile=0x27b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.298] WriteFile (in: hFile=0x27b4, lpBuffer=0x816f8b0*, nNumberOfBytesToWrite=0x3ec, lpNumberOfBytesWritten=0xdacfb48, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesWritten=0xdacfb48*=0x3ec, lpOverlapped=0x0) returned 1 [0176.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1900 [0176.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0176.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0176.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0176.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0176.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0176.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9a90) returned 1 [0176.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68f70 [0176.903] SetFilePointerEx (in: hFile=0x27b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.903] WriteFile (in: hFile=0x27b4, lpBuffer=0x30bcce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdacfbbc, lpOverlapped=0x0 | out: lpBuffer=0x30bcce0*, lpNumberOfBytesWritten=0xdacfbbc*=0x10c, lpOverlapped=0x0) returned 1 [0176.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0176.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ee0) returned 1 [0176.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0176.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f70) returned 1 [0176.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0176.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427b8) returned 1 [0176.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0176.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42510) returned 1 [0176.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x30bcce0 [0176.922] wcscpy (in: _Dest=0x30bcce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" [0176.922] wcscat (in: _Dest=0x30bcce0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.f0dbec" [0176.922] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.f0dbec", NtPathName=0xdacfb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef7fd8 [0176.925] FlushFileBuffers (hFile=0x27b4) returned 1 [0177.711] CloseHandle (hObject=0x27b4) returned 1 [0182.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x8406ab0 [0182.499] wcscpy (in: _Dest=0x8406ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0182.499] wcscat (in: _Dest=0x8406ab0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\F0DBEC-Readme.txt" [0182.499] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\f0dbec-readme.txt")) returned 0x2020 [0182.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ab0) returned 1 [0182.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2faea0) returned 1 Thread: id = 3731 os_tid = 0x1284 [0167.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5180 [0167.945] wcscpy (in: _Dest=0x3ef5180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0167.945] wcscat (in: _Dest=0x3ef5180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0167.945] wcscat (in: _Dest=0x3ef5180, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*" [0167.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80906e0 [0167.945] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c72260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e42040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e42040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098850 [0168.806] wcscmp (_String1=".", _String2=".") returned 0 [0168.806] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c72260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e42040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e42040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.806] wcscmp (_String1="..", _String2=".") returned 1 [0168.806] wcscmp (_String1="..", _String2="..") returned 0 [0168.806] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c77080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c79790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0168.806] wcscmp (_String1="ar", _String2=".") returned 1 [0168.806] wcscmp (_String1="ar", _String2="..") returned 1 [0168.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f3d80 [0168.806] wcscpy (in: _Dest=0x81f3d80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0168.806] wcscat (in: _Dest=0x81f3d80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0168.807] wcscat (in: _Dest=0x81f3d80, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0169.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba4 [0169.312] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c80cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c833d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0169.312] wcscmp (_String1="bg", _String2=".") returned 1 [0169.312] wcscmp (_String1="bg", _String2="..") returned 1 [0169.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef5288 [0169.312] wcscpy (in: _Dest=0x3ef5288, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.312] wcscat (in: _Dest=0x3ef5288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.312] wcscat (in: _Dest=0x3ef5288, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0169.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0169.313] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c8a900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c8d010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0169.313] wcscmp (_String1="ca", _String2=".") returned 1 [0169.313] wcscmp (_String1="ca", _String2="..") returned 1 [0169.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef4e68 [0169.313] wcscpy (in: _Dest=0x3ef4e68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.313] wcscat (in: _Dest=0x3ef4e68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.313] wcscat (in: _Dest=0x3ef4e68, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0169.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef4e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0169.314] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c94540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c96c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0169.314] wcscmp (_String1="cs", _String2=".") returned 1 [0169.314] wcscmp (_String1="cs", _String2="..") returned 1 [0169.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5430 [0169.314] wcscpy (in: _Dest=0x81f5430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.314] wcscat (in: _Dest=0x81f5430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.314] wcscat (in: _Dest=0x81f5430, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0169.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0169.315] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c9e180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ca2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0169.315] wcscmp (_String1="da", _String2=".") returned 1 [0169.316] wcscmp (_String1="da", _String2="..") returned 1 [0169.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5648 [0169.316] wcscpy (in: _Dest=0x81f5648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.316] wcscat (in: _Dest=0x81f5648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.316] wcscat (in: _Dest=0x81f5648, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0169.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0169.317] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ca7dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cacbe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0169.317] wcscmp (_String1="de", _String2=".") returned 1 [0169.317] wcscmp (_String1="de", _String2="..") returned 1 [0169.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5750 [0169.317] wcscpy (in: _Dest=0x81f5750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.317] wcscat (in: _Dest=0x81f5750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.317] wcscat (in: _Dest=0x81f5750, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0169.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70 [0169.318] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cb4110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cb6820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0169.318] wcscmp (_String1="el", _String2=".") returned 1 [0169.318] wcscmp (_String1="el", _String2="..") returned 1 [0169.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5858 [0169.318] wcscpy (in: _Dest=0x81f5858, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.318] wcscat (in: _Dest=0x81f5858, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.318] wcscat (in: _Dest=0x81f5858, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0169.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0169.320] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cbdd50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cd8b00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0169.320] wcscmp (_String1="en_GB", _String2=".") returned 1 [0169.320] wcscmp (_String1="en_GB", _String2="..") returned 1 [0169.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb5e8 [0169.320] wcscpy (in: _Dest=0x30bb5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.320] wcscat (in: _Dest=0x30bb5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.320] wcscat (in: _Dest=0x30bb5e8, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0169.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bb5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64 [0169.321] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce0030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ce2740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0169.321] wcscmp (_String1="en_US", _String2=".") returned 1 [0169.321] wcscmp (_String1="en_US", _String2="..") returned 1 [0169.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb700 [0169.321] wcscpy (in: _Dest=0x30bb700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.321] wcscat (in: _Dest=0x30bb700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.321] wcscat (in: _Dest=0x30bb700, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0169.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bb700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0169.323] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce9c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cec380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cec380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0169.324] wcscmp (_String1="es", _String2=".") returned 1 [0169.324] wcscmp (_String1="es", _String2="..") returned 1 [0169.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5960 [0169.324] wcscpy (in: _Dest=0x81f5960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.324] wcscat (in: _Dest=0x81f5960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.324] wcscat (in: _Dest=0x81f5960, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0169.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0169.325] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cf38b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cf5fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0169.325] wcscmp (_String1="es_419", _String2=".") returned 1 [0169.325] wcscmp (_String1="es_419", _String2="..") returned 1 [0169.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bb818 [0169.325] wcscpy (in: _Dest=0x30bb818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.325] wcscat (in: _Dest=0x30bb818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.325] wcscat (in: _Dest=0x30bb818, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0169.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bb818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0169.326] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cfade0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cffc00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0169.326] wcscmp (_String1="et", _String2=".") returned 1 [0169.326] wcscmp (_String1="et", _String2="..") returned 1 [0169.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5a68 [0169.326] wcscpy (in: _Dest=0x81f5a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.326] wcscat (in: _Dest=0x81f5a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.326] wcscat (in: _Dest=0x81f5a68, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0169.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0169.327] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d07130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d09840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0169.327] wcscmp (_String1="eu", _String2=".") returned 1 [0169.327] wcscmp (_String1="eu", _String2="..") returned 1 [0169.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5b70 [0169.328] wcscpy (in: _Dest=0x81f5b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.328] wcscat (in: _Dest=0x81f5b70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.328] wcscat (in: _Dest=0x81f5b70, _Source="eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0169.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0169.329] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d10d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d13480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0169.329] wcscmp (_String1="fi", _String2=".") returned 1 [0169.329] wcscmp (_String1="fi", _String2="..") returned 1 [0169.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5c78 [0169.329] wcscpy (in: _Dest=0x81f5c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.329] wcscat (in: _Dest=0x81f5c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.329] wcscat (in: _Dest=0x81f5c78, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0169.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0169.330] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d1a9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1d0c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d1d0c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0169.330] wcscmp (_String1="fil", _String2=".") returned 1 [0169.330] wcscmp (_String1="fil", _String2="..") returned 1 [0169.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5d80 [0169.330] wcscpy (in: _Dest=0x81f5d80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.330] wcscat (in: _Dest=0x81f5d80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.330] wcscat (in: _Dest=0x81f5d80, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0169.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0169.331] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d245f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d26d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d26d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0169.331] wcscmp (_String1="fr", _String2=".") returned 1 [0169.331] wcscmp (_String1="fr", _String2="..") returned 1 [0169.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5e88 [0169.331] wcscpy (in: _Dest=0x81f5e88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.331] wcscat (in: _Dest=0x81f5e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.332] wcscat (in: _Dest=0x81f5e88, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0169.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0169.332] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d2e230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d33050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0169.333] wcscmp (_String1="he", _String2=".") returned 1 [0169.333] wcscmp (_String1="he", _String2="..") returned 1 [0169.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f5f90 [0169.333] wcscpy (in: _Dest=0x81f5f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.333] wcscat (in: _Dest=0x81f5f90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.333] wcscat (in: _Dest=0x81f5f90, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0169.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c [0169.334] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d37e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d3cc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0169.334] wcscmp (_String1="hi", _String2=".") returned 1 [0169.334] wcscmp (_String1="hi", _String2="..") returned 1 [0169.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f6098 [0169.334] wcscpy (in: _Dest=0x81f6098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.334] wcscat (in: _Dest=0x81f6098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.335] wcscat (in: _Dest=0x81f6098, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0169.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f6098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0169.336] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d441c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d468d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0169.336] wcscmp (_String1="hr", _String2=".") returned 1 [0169.336] wcscmp (_String1="hr", _String2="..") returned 1 [0169.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f61a0 [0169.336] wcscpy (in: _Dest=0x81f61a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.336] wcscat (in: _Dest=0x81f61a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.336] wcscat (in: _Dest=0x81f61a0, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0169.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f61a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0169.337] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d4de00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d50510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0169.337] wcscmp (_String1="hu", _String2=".") returned 1 [0169.337] wcscmp (_String1="hu", _String2="..") returned 1 [0169.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f62a8 [0169.337] wcscpy (in: _Dest=0x81f62a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.337] wcscat (in: _Dest=0x81f62a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.337] wcscat (in: _Dest=0x81f62a8, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0169.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f62a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0169.339] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d57a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d5a150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0169.339] wcscmp (_String1="id", _String2=".") returned 1 [0169.339] wcscmp (_String1="id", _String2="..") returned 1 [0169.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f63b0 [0169.339] wcscpy (in: _Dest=0x81f63b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.339] wcscat (in: _Dest=0x81f63b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.339] wcscat (in: _Dest=0x81f63b0, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0169.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b6c [0169.340] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d61680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d664a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0169.340] wcscmp (_String1="it", _String2=".") returned 1 [0169.340] wcscmp (_String1="it", _String2="..") returned 1 [0169.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f64b8 [0169.340] wcscpy (in: _Dest=0x81f64b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.340] wcscat (in: _Dest=0x81f64b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.340] wcscat (in: _Dest=0x81f64b8, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0169.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f64b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0169.341] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d6d9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d727f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0169.341] wcscmp (_String1="ja", _String2=".") returned 1 [0169.341] wcscmp (_String1="ja", _String2="..") returned 1 [0169.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f65c0 [0169.341] wcscpy (in: _Dest=0x81f65c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.341] wcscat (in: _Dest=0x81f65c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.341] wcscat (in: _Dest=0x81f65c0, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0169.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f65c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e0 [0169.342] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d77610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d7c430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0169.342] wcscmp (_String1="ko", _String2=".") returned 1 [0169.342] wcscmp (_String1="ko", _String2="..") returned 1 [0169.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f66c8 [0169.343] wcscpy (in: _Dest=0x81f66c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.343] wcscat (in: _Dest=0x81f66c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.343] wcscat (in: _Dest=0x81f66c8, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0169.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0169.344] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d83960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d86070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0169.344] wcscmp (_String1="lt", _String2=".") returned 1 [0169.344] wcscmp (_String1="lt", _String2="..") returned 1 [0169.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f67d0 [0169.344] wcscpy (in: _Dest=0x81f67d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.344] wcscat (in: _Dest=0x81f67d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.344] wcscat (in: _Dest=0x81f67d0, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0169.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f67d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0169.345] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d8d5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d8fcb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d8fcb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0169.345] wcscmp (_String1="lv", _String2=".") returned 1 [0169.345] wcscmp (_String1="lv", _String2="..") returned 1 [0169.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f68d8 [0169.345] wcscpy (in: _Dest=0x81f68d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.345] wcscat (in: _Dest=0x81f68d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.345] wcscat (in: _Dest=0x81f68d8, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0169.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f68d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0169.346] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d923c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d998f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0169.346] wcscmp (_String1="ms", _String2=".") returned 1 [0169.346] wcscmp (_String1="ms", _String2="..") returned 1 [0169.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f69e0 [0169.346] wcscpy (in: _Dest=0x81f69e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.346] wcscat (in: _Dest=0x81f69e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.346] wcscat (in: _Dest=0x81f69e0, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0169.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f69e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0169.348] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d9e710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6da3530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0169.348] wcscmp (_String1="nl", _String2=".") returned 1 [0169.348] wcscmp (_String1="nl", _String2="..") returned 1 [0169.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f6ae8 [0169.348] wcscpy (in: _Dest=0x81f6ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0169.348] wcscat (in: _Dest=0x81f6ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0169.348] wcscat (in: _Dest=0x81f6ae8, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0169.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f6ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0170.035] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6daaa60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dad170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0170.035] wcscmp (_String1="no", _String2=".") returned 1 [0170.035] wcscmp (_String1="no", _String2="..") returned 1 [0170.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8321ab8 [0170.035] wcscpy (in: _Dest=0x8321ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.035] wcscat (in: _Dest=0x8321ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.035] wcscat (in: _Dest=0x8321ab8, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0170.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25ac [0170.117] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6db46a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6db94c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0170.117] wcscmp (_String1="pl", _String2=".") returned 1 [0170.117] wcscmp (_String1="pl", _String2="..") returned 1 [0170.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef58b8 [0170.117] wcscpy (in: _Dest=0x3ef58b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.117] wcscat (in: _Dest=0x3ef58b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.117] wcscat (in: _Dest=0x3ef58b8, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0170.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef58b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0170.118] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dc09f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dc3100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0170.118] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0170.118] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0170.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbd90 [0170.119] wcscpy (in: _Dest=0x30bbd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.119] wcscat (in: _Dest=0x30bbd90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.119] wcscat (in: _Dest=0x30bbd90, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0170.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bbd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0170.120] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dca630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dccd40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0170.120] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0170.120] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0170.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbea8 [0170.120] wcscpy (in: _Dest=0x30bbea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.120] wcscat (in: _Dest=0x30bbea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.120] wcscat (in: _Dest=0x30bbea8, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0170.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bbea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0170.121] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dd4270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd6980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dd6980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0170.121] wcscmp (_String1="ro", _String2=".") returned 1 [0170.121] wcscmp (_String1="ro", _String2="..") returned 1 [0170.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef56a8 [0170.121] wcscpy (in: _Dest=0x3ef56a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.121] wcscat (in: _Dest=0x3ef56a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.121] wcscat (in: _Dest=0x3ef56a8, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0170.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef56a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0170.122] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dddeb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6de2cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0170.122] wcscmp (_String1="ru", _String2=".") returned 1 [0170.122] wcscmp (_String1="ru", _String2="..") returned 1 [0170.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8333068 [0170.122] wcscpy (in: _Dest=0x8333068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.122] wcscat (in: _Dest=0x8333068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.122] wcscat (in: _Dest=0x8333068, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0170.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0170.123] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6de7af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dec910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0170.124] wcscmp (_String1="sk", _String2=".") returned 1 [0170.124] wcscmp (_String1="sk", _String2="..") returned 1 [0170.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8333170 [0170.124] wcscpy (in: _Dest=0x8333170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.124] wcscat (in: _Dest=0x8333170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.124] wcscat (in: _Dest=0x8333170, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0170.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0170.125] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6df3e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6df6550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0170.125] wcscmp (_String1="sl", _String2=".") returned 1 [0170.125] wcscmp (_String1="sl", _String2="..") returned 1 [0170.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8333278 [0170.125] wcscpy (in: _Dest=0x8333278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.125] wcscat (in: _Dest=0x8333278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.125] wcscat (in: _Dest=0x8333278, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0170.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x241c [0170.126] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dfda80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e00190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0170.126] wcscmp (_String1="sr", _String2=".") returned 1 [0170.126] wcscmp (_String1="sr", _String2="..") returned 1 [0170.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8333380 [0170.126] wcscpy (in: _Dest=0x8333380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.126] wcscat (in: _Dest=0x8333380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.126] wcscat (in: _Dest=0x8333380, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0170.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0170.127] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e076c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e09dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0170.128] wcscmp (_String1="sv", _String2=".") returned 1 [0170.128] wcscmp (_String1="sv", _String2="..") returned 1 [0170.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8333488 [0170.128] wcscpy (in: _Dest=0x8333488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.128] wcscat (in: _Dest=0x8333488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.128] wcscat (in: _Dest=0x8333488, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0170.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0170.129] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e11300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e16120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0170.129] wcscmp (_String1="th", _String2=".") returned 1 [0170.129] wcscmp (_String1="th", _String2="..") returned 1 [0170.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8333590 [0170.129] wcscpy (in: _Dest=0x8333590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.129] wcscat (in: _Dest=0x8333590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.129] wcscat (in: _Dest=0x8333590, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0170.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0170.130] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e1af40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e1fd60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0170.130] wcscmp (_String1="tr", _String2=".") returned 1 [0170.130] wcscmp (_String1="tr", _String2="..") returned 1 [0170.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8333698 [0170.130] wcscpy (in: _Dest=0x8333698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.130] wcscat (in: _Dest=0x8333698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.130] wcscat (in: _Dest=0x8333698, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0170.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28ac [0170.131] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e24b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e299a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0170.131] wcscmp (_String1="uk", _String2=".") returned 1 [0170.131] wcscmp (_String1="uk", _String2="..") returned 1 [0170.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x83337a0 [0170.132] wcscpy (in: _Dest=0x83337a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.132] wcscat (in: _Dest=0x83337a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.132] wcscat (in: _Dest=0x83337a0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0170.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83337a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0170.133] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e2e7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0170.133] wcscmp (_String1="vi", _String2=".") returned 1 [0170.133] wcscmp (_String1="vi", _String2="..") returned 1 [0170.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x83338a8 [0170.133] wcscpy (in: _Dest=0x83338a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.133] wcscat (in: _Dest=0x83338a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.133] wcscat (in: _Dest=0x83338a8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0170.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83338a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e8 [0170.135] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e38400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e3ab10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0170.135] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0170.135] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0170.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbfc0 [0170.135] wcscpy (in: _Dest=0x30bbfc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.135] wcscat (in: _Dest=0x30bbfc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.135] wcscat (in: _Dest=0x30bbfc0, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0170.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bbfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a14 [0170.141] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0170.141] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0170.142] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0170.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc0d8 [0170.142] wcscpy (in: _Dest=0x30bc0d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0170.142] wcscat (in: _Dest=0x30bc0d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0170.142] wcscat (in: _Dest=0x30bc0d8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0170.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bc0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x250c [0170.143] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0170.143] FindClose (in: hFindFile=0x8098850 | out: hFindFile=0x8098850) returned 1 [0172.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80906e0) returned 1 [0172.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5180) returned 1 [0172.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27140) returned 1 Thread: id = 3732 os_tid = 0x13a8 [0167.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef5288 [0167.951] wcscpy (in: _Dest=0x3ef5288, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0167.951] wcscat (in: _Dest=0x3ef5288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" [0167.951] wcscat (in: _Dest=0x3ef5288, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*" [0167.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090bb0 [0167.951] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0168.803] wcscmp (_String1=".", _String2=".") returned 0 [0168.803] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.803] wcscmp (_String1="..", _String2=".") returned 1 [0168.804] wcscmp (_String1="..", _String2="..") returned 0 [0168.804] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e5a6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5cdf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0168.804] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0168.804] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0168.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef7d68 [0168.804] wcscpy (in: _Dest=0x3ef7d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0168.804] wcscat (in: _Dest=0x3ef7d68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" [0168.804] wcscat (in: _Dest=0x3ef7d68, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" [0169.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef7d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0169.310] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e5a6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5cdf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0169.310] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0169.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090bb0) returned 1 [0169.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5288) returned 1 [0169.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27240) returned 1 Thread: id = 3733 os_tid = 0x13ac [0167.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo")) returned 0x20 [0167.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", dwFileAttributes=0x20) returned 0 [0167.959] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.967] GetLastError () returned 0x5 [0167.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", dwFileAttributes=0x20) returned 0 [0167.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 Thread: id = 3734 os_tid = 0x13b0 [0167.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo")) returned 0x20 [0167.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", dwFileAttributes=0x20) returned 0 [0167.979] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.987] GetLastError () returned 0x5 [0167.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", dwFileAttributes=0x20) returned 0 [0167.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df418) returned 1 Thread: id = 3735 os_tid = 0x13b4 [0167.992] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log")) returned 0x2020 [0170.061] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", dwFileAttributes=0x20) returned 1 [0172.674] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2064 [0172.675] GetFileSizeEx (in: hFile=0x2064, lpFileSize=0xdddfbf8 | out: lpFileSize=0xdddfbf8*=0) returned 1 [0172.675] FlushFileBuffers (hFile=0x2064) returned 1 [0173.242] CloseHandle (hObject=0x2064) returned 1 [0173.267] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", dwFileAttributes=0x2020) returned 1 [0177.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 Thread: id = 3736 os_tid = 0x13b8 [0167.996] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current")) returned 0x2020 [0170.184] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", dwFileAttributes=0x20) returned 1 [0172.677] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2734 [0172.677] GetFileSizeEx (in: hFile=0x2734, lpFileSize=0xe29f9e8 | out: lpFileSize=0xe29f9e8*=16) returned 1 [0172.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0172.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0172.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0172.677] NtQuerySystemTime (in: CurrentTime=0xe29f970 | out: CurrentTime=0xe29f970*=132471540408540000) returned 0x0 [0172.677] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x51490164 [0172.677] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x268b42c7 [0172.677] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x10bf4996 [0172.677] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x3e830d51 [0172.677] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x667736b0 [0172.677] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x77ab602a [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x2fb132c7 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x5bad351f [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x49a2be01 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x1822d6c5 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x2b437dbd [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x468f2ee8 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x121b163d [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x27c9470b [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x950fb34 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x65e01004 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x3bd5805 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x66441c8d [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0xcbb04bb [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x5b8ace5f [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x77acc5b6 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0xdd24389 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x3877d668 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0xc17d58d [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x33d900f8 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x72bfd4eb [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x27cd9303 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0xc704920 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x6af380a3 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x21671d97 [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x3e1c909b [0172.678] RtlRandomEx (in: Seed=0xe29f968 | out: Seed=0xe29f968) returned 0x58619d11 [0172.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0172.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0172.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817e8d0 [0172.687] ReadFile (in: hFile=0x2734, lpBuffer=0x8164498, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xe29f964, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0xe29f964*=0x10, lpOverlapped=0x0) returned 1 [0172.689] SetFilePointerEx (in: hFile=0x2734, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.689] WriteFile (in: hFile=0x2734, lpBuffer=0x817e8d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xe29f968, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesWritten=0xe29f968*=0x10, lpOverlapped=0x0) returned 1 [0174.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d70 [0174.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0174.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0174.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0174.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0174.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0174.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cdc0) returned 1 [0174.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4bf0 [0174.438] SetFilePointerEx (in: hFile=0x2734, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.438] WriteFile (in: hFile=0x2734, lpBuffer=0x83221f0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xe29f9dc, lpOverlapped=0x0 | out: lpBuffer=0x83221f0*, lpNumberOfBytesWritten=0xe29f9dc*=0x100, lpOverlapped=0x0) returned 1 [0174.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83221f0) returned 1 [0174.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0174.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0174.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0174.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0174.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0174.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0174.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0174.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x83486b8 [0174.770] wcscpy (in: _Dest=0x83486b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" [0174.770] wcscat (in: _Dest=0x83486b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.f0dbec" [0174.770] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.f0dbec", NtPathName=0xe29f960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef7fd8 [0174.773] FlushFileBuffers (hFile=0x2734) returned 1 [0174.822] CloseHandle (hObject=0x2734) returned 1 [0174.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d8300 [0174.823] wcscpy (in: _Dest=0x81d8300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0174.823] wcscat (in: _Dest=0x81d8300, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt" [0174.823] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\f0dbec-readme.txt")) returned 0xffffffff [0174.824] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2734 [0174.825] WriteFile (in: hFile=0x2734, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe29f984, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe29f984*=0x70c, lpOverlapped=0x0) returned 1 [0174.826] CloseHandle (hObject=0x2734) returned 1 [0174.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8300) returned 1 [0174.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 Thread: id = 3737 os_tid = 0x13bc [0167.996] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock")) returned 0x2020 [0170.189] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", dwFileAttributes=0x20) returned 1 [0177.147] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b9c [0177.147] GetFileSizeEx (in: hFile=0x1b9c, lpFileSize=0xe67f7c8 | out: lpFileSize=0xe67f7c8*=0) returned 1 [0177.147] FlushFileBuffers (hFile=0x1b9c) returned 1 [0177.974] CloseHandle (hObject=0x1b9c) returned 1 [0177.974] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", dwFileAttributes=0x2020) returned 1 [0189.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d60) returned 1 Thread: id = 3738 os_tid = 0x13c0 [0167.997] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log")) returned 0x2020 [0170.189] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", dwFileAttributes=0x20) returned 1 [0177.134] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ba0 [0177.134] GetFileSizeEx (in: hFile=0x1ba0, lpFileSize=0xab1f8d0 | out: lpFileSize=0xab1f8d0*=183) returned 1 [0177.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0177.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0177.135] NtQuerySystemTime (in: CurrentTime=0xab1f858 | out: CurrentTime=0xab1f858*=132471540451908000) returned 0x0 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x6f1c0b24 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x4f19d4a3 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x6ff9c818 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x371f1ca6 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x2a1c56e5 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x4af24122 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x6d037c8e [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x4bddfe3a [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x301a6178 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x7d756a45 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x2b18d814 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x708f5d5a [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x3b8c9dd9 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x2453ddbb [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0xe7b3c5 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x7b8b889f [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x66209843 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x688527a3 [0177.135] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x31555068 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x800586d [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x7d3f3bd6 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x79463282 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x2b238513 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x331244b7 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x6690ac19 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x7cd7f1b6 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x1e25254d [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x3df8f9b3 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x4f5c624 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x7cd7f1b6 [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x27fe88cb [0177.136] RtlRandomEx (in: Seed=0xab1f850 | out: Seed=0xab1f850) returned 0x702f0c42 [0177.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83bd1a0 [0177.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83c0da8 [0177.146] ReadFile (in: hFile=0x1ba0, lpBuffer=0x83bd1a0, nNumberOfBytesToRead=0xb7, lpNumberOfBytesRead=0xab1f84c, lpOverlapped=0x0 | out: lpBuffer=0x83bd1a0*, lpNumberOfBytesRead=0xab1f84c*=0xb7, lpOverlapped=0x0) returned 1 [0181.844] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.844] WriteFile (in: hFile=0x1ba0, lpBuffer=0x83c0da8*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0xab1f850, lpOverlapped=0x0 | out: lpBuffer=0x83c0da8*, lpNumberOfBytesWritten=0xab1f850*=0xb7, lpOverlapped=0x0) returned 1 [0189.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ea8 [0189.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0189.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0189.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83c0da8) returned 1 [0189.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83bd1a0) returned 1 [0189.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 [0189.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9fe8) returned 1 [0189.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x819a298 [0189.488] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.488] WriteFile (in: hFile=0x1ba0, lpBuffer=0x3e27540*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xab1f8c4, lpOverlapped=0x0 | out: lpBuffer=0x3e27540*, lpNumberOfBytesWritten=0xab1f8c4*=0xf8, lpOverlapped=0x0) returned 1 [0190.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27540) returned 1 [0190.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8199198) returned 1 [0190.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0190.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a298) returned 1 [0190.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ea8) returned 1 [0190.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0190.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2648) returned 1 [0190.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0190.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bbc78 [0190.561] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" [0190.561] wcscat (in: _Dest=0x30bbc78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.f0dbec" [0190.561] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.f0dbec", NtPathName=0xab1f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81e81d8 [0190.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e81d8) returned 1 [0190.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f4590) returned 1 [0190.875] NtQueryInformationFile (in: FileHandle=0x1ba0, IoStatusBlock=0xab1f820, FileInformation=0xab1f828, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xab1f820, FileInformation=0xab1f828) returned 0x0 [0190.875] NtSetInformationFile (FileHandle=0x1ba0, IoStatusBlock=0xab1f820, FileInformation=0xab1f828, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0193.167] FlushFileBuffers (hFile=0x1ba0) returned 1 [0195.480] CloseHandle (hObject=0x1ba0) returned 1 [0196.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81efd38 [0196.413] wcscpy (in: _Dest=0x81efd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0196.413] wcscat (in: _Dest=0x81efd38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt" [0196.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\f0dbec-readme.txt")) returned 0x2020 [0196.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efd38) returned 1 [0196.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5078) returned 1 Thread: id = 3739 os_tid = 0x13c4 [0167.999] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001")) returned 0x2020 [0170.189] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0177.147] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b98 [0177.148] GetFileSizeEx (in: hFile=0x1b98, lpFileSize=0xe55f8a0 | out: lpFileSize=0xe55f8a0*=41) returned 1 [0177.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0177.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0cd0 [0177.148] NtQuerySystemTime (in: CurrentTime=0xe55f828 | out: CurrentTime=0xe55f828*=132471540452064000) returned 0x0 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x2a1c56e5 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x44f324b3 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x4229c82b [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x66c1152b [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x121d3f7e [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x733713f8 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x70fad4db [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x3cc0a6a [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x5b62f7c2 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x4c343ac7 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0xb47174a [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x5c8eb5db [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x5b9ecd1f [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x79463282 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x48862f50 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x3d9f0097 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x132327b1 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x48862f50 [0177.148] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x688527a3 [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x356a464 [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x2f70340c [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x6eb7290f [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x26a3363f [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x3187229 [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x19cf198a [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x6015164e [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x49d3e5f3 [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x21556a2a [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x48c43a91 [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x5f4f8b4d [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0xf5d30a [0177.149] RtlRandomEx (in: Seed=0xe55f820 | out: Seed=0xe55f820) returned 0x253f8952 [0177.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83c49b0 [0177.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0177.160] ReadFile (in: hFile=0x1b98, lpBuffer=0x83c49b0, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0xe55f81c, lpOverlapped=0x0 | out: lpBuffer=0x83c49b0*, lpNumberOfBytesRead=0xe55f81c*=0x29, lpOverlapped=0x0) returned 1 [0181.846] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.846] WriteFile (in: hFile=0x1b98, lpBuffer=0x80a5870*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xe55f820, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesWritten=0xe55f820*=0x29, lpOverlapped=0x0) returned 1 [0189.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d98 [0189.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0189.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0189.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0189.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83c49b0) returned 1 [0189.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e683a8) returned 1 [0189.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9df0) returned 1 [0189.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77e18 [0189.492] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.492] WriteFile (in: hFile=0x1b98, lpBuffer=0x30bbc78*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xe55f894, lpOverlapped=0x0 | out: lpBuffer=0x30bbc78*, lpNumberOfBytesWritten=0xe55f894*=0x110, lpOverlapped=0x0) returned 1 [0190.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0190.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0190.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0190.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0190.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d98) returned 1 [0190.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0190.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0190.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3638) returned 1 [0190.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e8fb8 [0190.553] wcscpy (in: _Dest=0x81e8fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" [0190.553] wcscat (in: _Dest=0x81e8fb8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.f0dbec" [0190.553] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.f0dbec", NtPathName=0xe55f818, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3efa4b0 [0190.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa4b0) returned 1 [0190.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8640) returned 1 [0190.716] NtQueryInformationFile (in: FileHandle=0x1b98, IoStatusBlock=0xe55f7f0, FileInformation=0xe55f7f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe55f7f0, FileInformation=0xe55f7f8) returned 0x0 [0190.716] NtSetInformationFile (FileHandle=0x1b98, IoStatusBlock=0xe55f7f0, FileInformation=0xe55f7f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8fb8) returned 1 [0190.863] FlushFileBuffers (hFile=0x1b98) returned 1 [0190.880] CloseHandle (hObject=0x1b98) returned 1 [0193.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81ef898 [0193.190] wcscpy (in: _Dest=0x81ef898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0193.190] wcscat (in: _Dest=0x81ef898, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt" [0193.190] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\f0dbec-readme.txt")) returned 0x2020 [0193.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef898) returned 1 [0193.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 Thread: id = 3740 os_tid = 0x13c8 [0167.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun")) returned 0x20 [0168.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", dwFileAttributes=0x20) returned 0 [0168.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.014] GetLastError () returned 0x5 [0168.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", dwFileAttributes=0x20) returned 0 [0168.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 3741 os_tid = 0x13cc [0168.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun")) returned 0x20 [0168.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", dwFileAttributes=0x20) returned 0 [0168.027] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.036] GetLastError () returned 0x5 [0168.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", dwFileAttributes=0x20) returned 0 [0168.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df1d8) returned 1 Thread: id = 3742 os_tid = 0x13d0 [0168.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun")) returned 0x20 [0171.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", dwFileAttributes=0x20) returned 0 [0171.778] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.778] GetLastError () returned 0x5 [0171.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", dwFileAttributes=0x20) returned 0 [0171.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 Thread: id = 3743 os_tid = 0x13d4 [0168.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun")) returned 0x20 [0171.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", dwFileAttributes=0x20) returned 0 [0171.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.918] GetLastError () returned 0x5 [0171.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", dwFileAttributes=0x20) returned 0 [0171.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 Thread: id = 3744 os_tid = 0x13d8 [0168.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun")) returned 0x20 [0171.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", dwFileAttributes=0x20) returned 0 [0171.776] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.776] GetLastError () returned 0x5 [0171.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", dwFileAttributes=0x20) returned 0 [0171.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de4e8) returned 1 Thread: id = 3745 os_tid = 0x16d0 [0168.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun")) returned 0x20 [0172.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", dwFileAttributes=0x20) returned 0 [0172.180] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.180] GetLastError () returned 0x5 [0172.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", dwFileAttributes=0x20) returned 0 [0172.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de3c8) returned 1 Thread: id = 3746 os_tid = 0x13dc [0168.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun")) returned 0x20 [0172.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", dwFileAttributes=0x20) returned 0 [0172.154] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.154] GetLastError () returned 0x5 [0172.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", dwFileAttributes=0x20) returned 0 [0172.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 3747 os_tid = 0x13e0 [0168.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun")) returned 0x20 [0172.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", dwFileAttributes=0x20) returned 0 [0172.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.145] GetLastError () returned 0x5 [0172.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", dwFileAttributes=0x20) returned 0 [0172.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b8f8) returned 1 Thread: id = 3748 os_tid = 0x13e4 [0168.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun")) returned 0x20 [0172.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", dwFileAttributes=0x20) returned 0 [0172.136] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.137] GetLastError () returned 0x5 [0172.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", dwFileAttributes=0x20) returned 0 [0172.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b2e0) returned 1 Thread: id = 3749 os_tid = 0x13e8 [0168.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun")) returned 0x20 [0172.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", dwFileAttributes=0x20) returned 0 [0172.129] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.129] GetLastError () returned 0x5 [0172.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", dwFileAttributes=0x20) returned 0 [0172.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de338) returned 1 Thread: id = 3750 os_tid = 0x13ec [0168.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun")) returned 0x20 [0171.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", dwFileAttributes=0x20) returned 0 [0171.735] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.735] GetLastError () returned 0x5 [0171.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", dwFileAttributes=0x20) returned 0 [0171.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de458) returned 1 Thread: id = 3751 os_tid = 0x16d8 [0168.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun")) returned 0x20 [0172.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN", dwFileAttributes=0x20) returned 0 [0172.117] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.117] GetLastError () returned 0x5 [0172.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN", dwFileAttributes=0x20) returned 0 [0172.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de2a8) returned 1 Thread: id = 3752 os_tid = 0x16dc [0168.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun")) returned 0x20 [0172.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN", dwFileAttributes=0x20) returned 0 [0172.109] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.109] GetLastError () returned 0x5 [0172.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN", dwFileAttributes=0x20) returned 0 [0172.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ab28) returned 1 Thread: id = 3753 os_tid = 0x16e0 [0168.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun")) returned 0x20 [0172.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN", dwFileAttributes=0x20) returned 0 [0172.099] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.100] GetLastError () returned 0x5 [0172.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN", dwFileAttributes=0x20) returned 0 [0172.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 Thread: id = 3754 os_tid = 0x16e4 [0168.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun")) returned 0x20 [0172.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN", dwFileAttributes=0x20) returned 0 [0172.088] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.088] GetLastError () returned 0x5 [0172.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN", dwFileAttributes=0x20) returned 0 [0172.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bd90) returned 1 Thread: id = 3755 os_tid = 0x13f0 [0168.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun")) returned 0x20 [0171.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN", dwFileAttributes=0x20) returned 0 [0171.520] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.520] GetLastError () returned 0x5 [0171.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN", dwFileAttributes=0x20) returned 0 [0171.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de188) returned 1 Thread: id = 3756 os_tid = 0x13f4 [0168.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun")) returned 0x20 [0172.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN", dwFileAttributes=0x20) returned 0 [0172.185] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.185] GetLastError () returned 0x5 [0172.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN", dwFileAttributes=0x20) returned 0 [0172.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 Thread: id = 3757 os_tid = 0x13f8 [0168.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df1d8 [0168.053] wcscpy (in: _Dest=0x81df1d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0168.053] wcscat (in: _Dest=0x81df1d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\" [0168.053] wcscat (in: _Dest=0x81df1d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*" [0168.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090210 [0168.053] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098850 [0172.079] wcscmp (_String1=".", _String2=".") returned 0 [0172.079] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.079] wcscmp (_String1="..", _String2=".") returned 1 [0172.079] wcscmp (_String1="..", _String2="..") returned 0 [0172.079] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9598, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0172.079] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0172.079] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0172.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x81865a8 [0172.079] wcscpy (in: _Dest=0x81865a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0172.079] wcscat (in: _Dest=0x81865a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\" [0172.079] wcscat (in: _Dest=0x81865a8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" [0173.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81865a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x265c [0173.501] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0173.501] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0173.501] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0173.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d680 [0173.501] wcscpy (in: _Dest=0x3e2d680, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0173.501] wcscat (in: _Dest=0x3e2d680, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\" [0173.501] wcscat (in: _Dest=0x3e2d680, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" [0173.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0173.502] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0173.502] FindClose (in: hFindFile=0x8098850 | out: hFindFile=0x8098850) returned 1 [0173.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090210) returned 1 [0173.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df1d8) returned 1 [0173.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 3758 os_tid = 0x16ec [0168.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun")) returned 0x20 [0172.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN", dwFileAttributes=0x20) returned 0 [0172.071] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.071] GetLastError () returned 0x5 [0172.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN", dwFileAttributes=0x20) returned 0 [0172.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df2f8) returned 1 Thread: id = 3759 os_tid = 0x13fc [0168.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun")) returned 0x20 [0172.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN", dwFileAttributes=0x20) returned 0 [0172.063] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.063] GetLastError () returned 0x5 [0172.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN", dwFileAttributes=0x20) returned 0 [0172.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 Thread: id = 3760 os_tid = 0x16f4 [0168.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun")) returned 0x20 [0172.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN", dwFileAttributes=0x20) returned 0 [0172.182] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.183] GetLastError () returned 0x5 [0172.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN", dwFileAttributes=0x20) returned 0 [0172.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2938) returned 1 Thread: id = 3761 os_tid = 0x1400 [0168.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx")) returned 0x20 [0168.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx", dwFileAttributes=0x20) returned 0 [0168.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.749] GetLastError () returned 0x5 [0168.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx", dwFileAttributes=0x20) returned 0 [0168.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c78) returned 1 Thread: id = 3762 os_tid = 0x1404 [0168.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx")) returned 0x20 [0168.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx", dwFileAttributes=0x20) returned 0 [0168.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.715] GetLastError () returned 0x5 [0168.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx", dwFileAttributes=0x20) returned 0 [0168.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186c38) returned 1 Thread: id = 3763 os_tid = 0x152c [0168.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx")) returned 0x20 [0168.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx", dwFileAttributes=0x20) returned 0 [0168.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.297] GetLastError () returned 0x5 [0168.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx", dwFileAttributes=0x20) returned 0 [0168.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da2a8) returned 1 Thread: id = 3764 os_tid = 0x1288 [0168.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df89e8 [0168.057] wcscpy (in: _Dest=0x3df89e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0168.057] wcscat (in: _Dest=0x3df89e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0168.057] wcscat (in: _Dest=0x3df89e8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*" [0168.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090e18 [0168.058] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb5ad600, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38318 [0168.060] wcscmp (_String1=".", _String2=".") returned 0 [0168.060] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb5ad600, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.060] wcscmp (_String1="..", _String2=".") returned 1 [0168.060] wcscmp (_String1="..", _String2="..") returned 0 [0168.060] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFM", cAlternateFileName="")) returned 1 [0168.061] wcscmp (_String1="SY______.PFM", _String2=".") returned 1 [0168.061] wcscmp (_String1="SY______.PFM", _String2="..") returned 1 [0168.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81df418 [0168.061] wcscpy (in: _Dest=0x81df418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0168.061] wcscat (in: _Dest=0x81df418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0168.061] wcscat (in: _Dest=0x81df418, _Source="SY______.PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" [0168.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0168.989] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="zx______.pfm", cAlternateFileName="")) returned 1 [0168.989] wcscmp (_String1="zx______.pfm", _String2=".") returned 1 [0168.989] wcscmp (_String1="zx______.pfm", _String2="..") returned 1 [0168.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dede8 [0168.989] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0168.989] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0168.989] wcscat (in: _Dest=0x81dede8, _Source="zx______.pfm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" [0168.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8c [0168.991] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 1 [0168.991] wcscmp (_String1="zy______.pfm", _String2=".") returned 1 [0168.991] wcscmp (_String1="zy______.pfm", _String2="..") returned 1 [0168.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81dde28 [0168.991] wcscpy (in: _Dest=0x81dde28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0168.991] wcscat (in: _Dest=0x81dde28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0168.991] wcscat (in: _Dest=0x81dde28, _Source="zy______.pfm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" [0168.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dde28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a88 [0168.992] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 0 [0168.992] FindClose (in: hFindFile=0x3f38318 | out: hFindFile=0x3f38318) returned 1 [0171.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090e18) returned 1 [0171.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df89e8) returned 1 [0171.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 Thread: id = 3765 os_tid = 0x128c [0168.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\sy______.pfb")) returned 0x20 [0168.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB", dwFileAttributes=0x20) returned 0 [0168.062] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\sy______.pfb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.062] GetLastError () returned 0x5 [0168.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB", dwFileAttributes=0x20) returned 0 [0168.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0108) returned 1 Thread: id = 3766 os_tid = 0x1290 [0168.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zx______.pfb")) returned 0x20 [0168.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB", dwFileAttributes=0x20) returned 0 [0168.064] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zx______.pfb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.064] GetLastError () returned 0x5 [0168.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB", dwFileAttributes=0x20) returned 0 [0168.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 3767 os_tid = 0x1294 [0168.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zy______.pfb")) returned 0x20 [0168.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB", dwFileAttributes=0x20) returned 0 [0168.066] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zy______.pfb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.066] GetLastError () returned 0x5 [0168.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB", dwFileAttributes=0x20) returned 0 [0168.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 3768 os_tid = 0x1298 [0168.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h")) returned 0x20 [0168.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", dwFileAttributes=0x20) returned 0 [0168.068] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.068] GetLastError () returned 0x5 [0168.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", dwFileAttributes=0x20) returned 0 [0168.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a858) returned 1 Thread: id = 3769 os_tid = 0x129c [0168.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v")) returned 0x20 [0168.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", dwFileAttributes=0x20) returned 0 [0168.070] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.070] GetLastError () returned 0x5 [0168.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", dwFileAttributes=0x20) returned 0 [0168.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24240) returned 1 Thread: id = 3770 os_tid = 0x1408 [0168.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg")) returned 0x20 [0168.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x20) returned 0 [0168.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.086] GetLastError () returned 0x5 [0168.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x20) returned 0 [0168.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 Thread: id = 3771 os_tid = 0xe7c [0168.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg")) returned 0x20 [0168.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x20) returned 0 [0168.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.396] GetLastError () returned 0x5 [0168.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x20) returned 0 [0168.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2788) returned 1 Thread: id = 3772 os_tid = 0xe68 [0168.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg")) returned 0x20 [0168.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x20) returned 0 [0168.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.398] GetLastError () returned 0x5 [0168.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x20) returned 0 [0168.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28a8) returned 1 Thread: id = 3773 os_tid = 0x12a8 [0168.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg")) returned 0x20 [0171.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x20) returned 0 [0171.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.605] GetLastError () returned 0x5 [0171.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x20) returned 0 [0171.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1978) returned 1 Thread: id = 3774 os_tid = 0x12ac [0168.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1ca78 [0168.118] wcscpy (in: _Dest=0x3e1ca78, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0168.118] wcscat (in: _Dest=0x3e1ca78, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\" [0168.118] wcscat (in: _Dest=0x3e1ca78, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\*" [0168.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f870 [0168.118] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\*", lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0168.399] wcscmp (_String1=".", _String2=".") returned 0 [0168.399] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.399] wcscmp (_String1="..", _String2=".") returned 1 [0168.399] wcscmp (_String1="..", _String2="..") returned 0 [0168.399] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26edca8f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x432ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0168.399] wcscmp (_String1="widevinecdm.dll", _String2=".") returned 1 [0168.399] wcscmp (_String1="widevinecdm.dll", _String2="..") returned 1 [0168.399] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26ef2a28, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0168.399] wcscmp (_String1="widevinecdm.dll.sig", _String2=".") returned 1 [0168.399] wcscmp (_String1="widevinecdm.dll.sig", _String2="..") returned 1 [0168.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021b90 [0168.399] wcscpy (in: _Dest=0x8021b90, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0168.399] wcscat (in: _Dest=0x8021b90, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\" [0168.399] wcscat (in: _Dest=0x8021b90, _Source="widevinecdm.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig" [0169.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2780 [0169.254] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20f5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20f5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfd413b84, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x35b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0169.254] wcscmp (_String1="widevinecdmadapter.dll", _String2=".") returned 1 [0169.254] wcscmp (_String1="widevinecdmadapter.dll", _String2="..") returned 1 [0169.254] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfd56b0ae, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0169.254] wcscmp (_String1="widevinecdmadapter.dll.sig", _String2=".") returned 1 [0169.255] wcscmp (_String1="widevinecdmadapter.dll.sig", _String2="..") returned 1 [0169.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e24f40 [0169.255] wcscpy (in: _Dest=0x3e24f40, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0169.255] wcscat (in: _Dest=0x3e24f40, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\" [0169.255] wcscat (in: _Dest=0x3e24f40, _Source="widevinecdmadapter.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig" [0169.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0169.256] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfd56b0ae, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0 [0169.256] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0172.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f870) returned 1 [0172.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca78) returned 1 [0172.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5968) returned 1 Thread: id = 3775 os_tid = 0x1140 [0168.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html")) returned 0x20 [0168.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0168.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.122] GetLastError () returned 0x5 [0168.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0168.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 3776 os_tid = 0x170c [0168.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx")) returned 0x20 [0168.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0168.922] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.923] GetLastError () returned 0x5 [0168.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0168.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186d88) returned 1 Thread: id = 3777 os_tid = 0x12b0 [0168.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx")) returned 0x20 [0168.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0168.924] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.924] GetLastError () returned 0x5 [0168.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0168.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a00) returned 1 Thread: id = 3778 os_tid = 0x1718 [0168.125] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png")) returned 0x2020 [0172.847] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png", dwFileAttributes=0x20) returned 1 [0176.318] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d84 [0176.318] GetFileSizeEx (in: hFile=0x1d84, lpFileSize=0x101efc20 | out: lpFileSize=0x101efc20*=3479) returned 1 [0176.318] SetFilePointerEx (in: hFile=0x1d84, liDistanceToMove=0xd93, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.318] ReadFile (in: hFile=0x1d84, lpBuffer=0x101efc2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x101efc08, lpOverlapped=0x0 | out: lpBuffer=0x101efc2c*, lpNumberOfBytesRead=0x101efc08*=0x4, lpOverlapped=0x0) returned 1 [0176.407] SetFilePointerEx (in: hFile=0x1d84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49da8 [0176.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd28 [0176.407] NtQuerySystemTime (in: CurrentTime=0x101efba8 | out: CurrentTime=0x101efba8*=132471540444888000) returned 0x0 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x5b0b1719 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x43ab5d61 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x28aef933 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x2f84805d [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x27c781cb [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x65cdb3fb [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x8ca7a20 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x1080ce05 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x41d28dd1 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x27253966 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x12a2dac3 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x5d9f2e60 [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x1462e9bd [0176.407] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x5e6032f0 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x7d1851c3 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x5f6b320d [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x3b518d7b [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x542c8b87 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x3b52dbca [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x830b054 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x49d377d5 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x6e95d65f [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x5e01d4cb [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x1a48803 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x4d2fd763 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x68186238 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x5fad8cef [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x4610d271 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x46fad85f [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x2de29ef6 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x110b9077 [0176.408] RtlRandomEx (in: Seed=0x101efba0 | out: Seed=0x101efba0) returned 0x3d35db79 [0176.416] ReadFile (in: hFile=0x1d84, lpBuffer=0x80ad080, nNumberOfBytesToRead=0xd97, lpNumberOfBytesRead=0x101efb9c, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesRead=0x101efb9c*=0xd97, lpOverlapped=0x0) returned 1 [0176.416] SetFilePointerEx (in: hFile=0x1d84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.417] WriteFile (in: hFile=0x1d84, lpBuffer=0x80b0c88*, nNumberOfBytesToWrite=0xd97, lpNumberOfBytesWritten=0x101efba0, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesWritten=0x101efba0*=0xd97, lpOverlapped=0x0) returned 1 [0176.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0eb0 [0176.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0176.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0176.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0176.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0176.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32868) returned 1 [0176.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f08) returned 1 [0176.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4808 [0176.906] SetFilePointerEx (in: hFile=0x1d84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.906] WriteFile (in: hFile=0x1d84, lpBuffer=0x3ef5498*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x101efc14, lpOverlapped=0x0 | out: lpBuffer=0x3ef5498*, lpNumberOfBytesWritten=0x101efc14*=0x100, lpOverlapped=0x0) returned 1 [0182.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5498) returned 1 [0182.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef13d8) returned 1 [0182.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0182.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0182.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0eb0) returned 1 [0182.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49da8) returned 1 [0182.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0182.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0182.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3dec3c8 [0182.488] wcscpy (in: _Dest=0x3dec3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" [0182.488] wcscat (in: _Dest=0x3dec3c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.f0dbec" [0182.488] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.f0dbec", NtPathName=0x101efb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8187dc8 [0183.160] FlushFileBuffers (hFile=0x1d84) returned 1 [0183.164] CloseHandle (hObject=0x1d84) returned 1 [0183.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec3c8 [0183.168] wcscpy (in: _Dest=0x3dec3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0183.168] wcscat (in: _Dest=0x3dec3c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\F0DBEC-Readme.txt" [0183.168] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\f0dbec-readme.txt")) returned 0x2020 [0183.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0183.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25e40) returned 1 Thread: id = 3779 os_tid = 0x171c [0168.125] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json")) returned 0x2020 [0173.321] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0177.164] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b88 [0177.164] GetFileSizeEx (in: hFile=0x1b88, lpFileSize=0x1069f878 | out: lpFileSize=0x1069f878*=745) returned 1 [0177.164] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x2e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.164] ReadFile (in: hFile=0x1b88, lpBuffer=0x1069f884, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1069f860, lpOverlapped=0x0 | out: lpBuffer=0x1069f884*, lpNumberOfBytesRead=0x1069f860*=0x4, lpOverlapped=0x0) returned 1 [0182.179] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0182.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0182.180] NtQuerySystemTime (in: CurrentTime=0x1069f800 | out: CurrentTime=0x1069f800*=132471540501672000) returned 0x0 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x3c00761c [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x4f134a99 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x1f37580c [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x46d12b3 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x596edb3c [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x43c59339 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x21458b02 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x74ff5da2 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x553d2300 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x63eeabb3 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x9e63d16 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x440cf402 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x25ce5fdf [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x642138a9 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x6f5c9b3 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x23783385 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x56b3bfcf [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x2064d730 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x3b8008d5 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x4b6f198d [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x65c2c932 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x78ba0598 [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x16655c9f [0182.180] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x68cf0857 [0182.181] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x458e92c2 [0182.181] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x2ec3894b [0182.181] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x1a26dd08 [0182.181] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x577d4210 [0182.181] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x38e8de5f [0182.181] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x70a4c0f6 [0182.181] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x9beaf0a [0182.181] RtlRandomEx (in: Seed=0x1069f7f8 | out: Seed=0x1069f7f8) returned 0x751f9c98 [0182.191] ReadFile (in: hFile=0x1b88, lpBuffer=0x82aa0a0, nNumberOfBytesToRead=0x2e9, lpNumberOfBytesRead=0x1069f7f4, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesRead=0x1069f7f4*=0x2e9, lpOverlapped=0x0) returned 1 [0182.191] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.191] WriteFile (in: hFile=0x1b88, lpBuffer=0x82adca8*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0x1069f7f8, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesWritten=0x1069f7f8*=0x2e9, lpOverlapped=0x0) returned 1 [0182.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0182.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0182.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0182.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82adca8) returned 1 [0182.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0182.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0182.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4800) returned 1 [0182.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69960 [0182.423] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.423] WriteFile (in: hFile=0x1b88, lpBuffer=0x8406768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1069f86c, lpOverlapped=0x0 | out: lpBuffer=0x8406768*, lpNumberOfBytesWritten=0x1069f86c*=0x10c, lpOverlapped=0x0) returned 1 [0182.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406768) returned 1 [0182.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69990) returned 1 [0182.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0182.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69960) returned 1 [0182.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0182.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428a8) returned 1 [0182.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0182.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0182.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406768 [0182.616] wcscpy (in: _Dest=0x8406768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" [0182.617] wcscat (in: _Dest=0x8406768, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json.f0dbec" [0182.617] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json.f0dbec", NtPathName=0x1069f7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a1ed8 [0182.863] FlushFileBuffers (hFile=0x1b88) returned 1 [0182.867] CloseHandle (hObject=0x1b88) returned 1 [0182.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bbb60 [0182.922] wcscpy (in: _Dest=0x30bbb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0182.922] wcscat (in: _Dest=0x30bbb60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\F0DBEC-Readme.txt" [0182.922] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\f0dbec-readme.txt")) returned 0xffffffff [0182.922] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d88 [0183.160] WriteFile (in: hFile=0x1d88, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1069f814, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1069f814*=0x70c, lpOverlapped=0x0) returned 1 [0183.190] CloseHandle (hObject=0x1d88) returned 1 [0183.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0183.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 Thread: id = 3780 os_tid = 0x12b8 [0168.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef5390 [0168.126] wcscpy (in: _Dest=0x3ef5390, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0168.126] wcscat (in: _Dest=0x3ef5390, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0168.126] wcscat (in: _Dest=0x3ef5390, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*" [0168.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e060 [0168.126] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*", lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d10 [0174.441] wcscmp (_String1=".", _String2=".") returned 0 [0174.441] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.441] wcscmp (_String1="..", _String2=".") returned 1 [0174.441] wcscmp (_String1="..", _String2="..") returned 0 [0174.441] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0174.441] wcscmp (_String1="ar", _String2=".") returned 1 [0174.441] wcscmp (_String1="ar", _String2="..") returned 1 [0174.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8320b40 [0174.441] wcscpy (in: _Dest=0x8320b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0174.441] wcscat (in: _Dest=0x8320b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0174.441] wcscat (in: _Dest=0x8320b40, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0177.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8320b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2900 [0177.619] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0177.619] wcscmp (_String1="bg", _String2=".") returned 1 [0177.619] wcscmp (_String1="bg", _String2="..") returned 1 [0177.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334508 [0177.619] wcscpy (in: _Dest=0x8334508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.619] wcscat (in: _Dest=0x8334508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.619] wcscat (in: _Dest=0x8334508, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0177.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0177.621] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0177.621] wcscmp (_String1="ca", _String2=".") returned 1 [0177.621] wcscmp (_String1="ca", _String2="..") returned 1 [0177.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8332c48 [0177.621] wcscpy (in: _Dest=0x8332c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.621] wcscat (in: _Dest=0x8332c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.621] wcscat (in: _Dest=0x8332c48, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0177.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0177.623] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfaa40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dfaa40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0177.623] wcscmp (_String1="cs", _String2=".") returned 1 [0177.623] wcscmp (_String1="cs", _String2="..") returned 1 [0177.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334610 [0177.623] wcscpy (in: _Dest=0x8334610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.623] wcscat (in: _Dest=0x8334610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.623] wcscat (in: _Dest=0x8334610, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0177.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0177.624] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0177.624] wcscmp (_String1="da", _String2=".") returned 1 [0177.624] wcscmp (_String1="da", _String2="..") returned 1 [0177.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333ed8 [0177.624] wcscpy (in: _Dest=0x8333ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.624] wcscat (in: _Dest=0x8333ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.624] wcscat (in: _Dest=0x8333ed8, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0177.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0177.626] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0177.626] wcscmp (_String1="de", _String2=".") returned 1 [0177.626] wcscmp (_String1="de", _String2="..") returned 1 [0177.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333fe0 [0177.626] wcscpy (in: _Dest=0x8333fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.626] wcscat (in: _Dest=0x8333fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.626] wcscat (in: _Dest=0x8333fe0, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0177.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0177.627] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0177.627] wcscmp (_String1="el", _String2=".") returned 1 [0177.627] wcscmp (_String1="el", _String2="..") returned 1 [0177.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83340e8 [0177.627] wcscpy (in: _Dest=0x83340e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.627] wcscat (in: _Dest=0x83340e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.627] wcscat (in: _Dest=0x83340e8, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0177.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83340e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0177.629] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0177.629] wcscmp (_String1="en", _String2=".") returned 1 [0177.629] wcscmp (_String1="en", _String2="..") returned 1 [0177.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83341f0 [0177.629] wcscpy (in: _Dest=0x83341f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.629] wcscat (in: _Dest=0x83341f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.629] wcscat (in: _Dest=0x83341f0, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0177.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83341f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0177.630] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0177.630] wcscmp (_String1="es", _String2=".") returned 1 [0177.630] wcscmp (_String1="es", _String2="..") returned 1 [0177.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8332930 [0177.630] wcscpy (in: _Dest=0x8332930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.630] wcscat (in: _Dest=0x8332930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.631] wcscat (in: _Dest=0x8332930, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0177.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0177.632] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0177.632] wcscmp (_String1="fi", _String2=".") returned 1 [0177.632] wcscmp (_String1="fi", _String2="..") returned 1 [0177.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83342f8 [0177.632] wcscpy (in: _Dest=0x83342f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.632] wcscat (in: _Dest=0x83342f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.632] wcscat (in: _Dest=0x83342f8, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0177.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83342f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0177.633] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0177.633] wcscmp (_String1="fil", _String2=".") returned 1 [0177.633] wcscmp (_String1="fil", _String2="..") returned 1 [0177.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8320e58 [0177.633] wcscpy (in: _Dest=0x8320e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.633] wcscat (in: _Dest=0x8320e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.633] wcscat (in: _Dest=0x8320e58, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0177.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8320e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0177.635] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0177.635] wcscmp (_String1="fr", _String2=".") returned 1 [0177.635] wcscmp (_String1="fr", _String2="..") returned 1 [0177.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321bc0 [0177.635] wcscpy (in: _Dest=0x8321bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.635] wcscat (in: _Dest=0x8321bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.635] wcscat (in: _Dest=0x8321bc0, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0177.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c [0177.636] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0177.636] wcscmp (_String1="he", _String2=".") returned 1 [0177.636] wcscmp (_String1="he", _String2="..") returned 1 [0177.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83219b0 [0177.637] wcscpy (in: _Dest=0x83219b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.637] wcscat (in: _Dest=0x83219b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.637] wcscat (in: _Dest=0x83219b0, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0177.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83219b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0177.638] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0177.638] wcscmp (_String1="hi", _String2=".") returned 1 [0177.638] wcscmp (_String1="hi", _String2="..") returned 1 [0177.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83218a8 [0177.638] wcscpy (in: _Dest=0x83218a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.638] wcscat (in: _Dest=0x83218a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.638] wcscat (in: _Dest=0x83218a8, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0177.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83218a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0177.639] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0177.639] wcscmp (_String1="hr", _String2=".") returned 1 [0177.639] wcscmp (_String1="hr", _String2="..") returned 1 [0177.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83217a0 [0177.639] wcscpy (in: _Dest=0x83217a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.639] wcscat (in: _Dest=0x83217a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.639] wcscat (in: _Dest=0x83217a0, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0177.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83217a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0177.641] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0177.641] wcscmp (_String1="hu", _String2=".") returned 1 [0177.641] wcscmp (_String1="hu", _String2="..") returned 1 [0177.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321698 [0177.641] wcscpy (in: _Dest=0x8321698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.641] wcscat (in: _Dest=0x8321698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.641] wcscat (in: _Dest=0x8321698, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0177.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0177.642] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0177.642] wcscmp (_String1="id", _String2=".") returned 1 [0177.642] wcscmp (_String1="id", _String2="..") returned 1 [0177.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321590 [0177.642] wcscpy (in: _Dest=0x8321590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.642] wcscat (in: _Dest=0x8321590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.642] wcscat (in: _Dest=0x8321590, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0177.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0177.644] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0177.644] wcscmp (_String1="it", _String2=".") returned 1 [0177.644] wcscmp (_String1="it", _String2="..") returned 1 [0177.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321488 [0177.644] wcscpy (in: _Dest=0x8321488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.644] wcscat (in: _Dest=0x8321488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.644] wcscat (in: _Dest=0x8321488, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0177.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0177.645] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0177.645] wcscmp (_String1="ja", _String2=".") returned 1 [0177.645] wcscmp (_String1="ja", _String2="..") returned 1 [0177.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321380 [0177.645] wcscpy (in: _Dest=0x8321380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.645] wcscat (in: _Dest=0x8321380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.645] wcscat (in: _Dest=0x8321380, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0177.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0177.647] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0177.647] wcscmp (_String1="ko", _String2=".") returned 1 [0177.647] wcscmp (_String1="ko", _String2="..") returned 1 [0177.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321dd0 [0177.647] wcscpy (in: _Dest=0x8321dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.647] wcscat (in: _Dest=0x8321dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.647] wcscat (in: _Dest=0x8321dd0, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0177.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0177.648] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41d8e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0177.648] wcscmp (_String1="lt", _String2=".") returned 1 [0177.648] wcscmp (_String1="lt", _String2="..") returned 1 [0177.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321ed8 [0177.648] wcscpy (in: _Dest=0x8321ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.649] wcscat (in: _Dest=0x8321ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.649] wcscat (in: _Dest=0x8321ed8, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0177.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0177.650] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0177.650] wcscmp (_String1="lv", _String2=".") returned 1 [0177.650] wcscmp (_String1="lv", _String2="..") returned 1 [0177.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321fe0 [0177.650] wcscpy (in: _Dest=0x8321fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.650] wcscat (in: _Dest=0x8321fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.650] wcscat (in: _Dest=0x8321fe0, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0177.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0177.651] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0177.651] wcscmp (_String1="nl", _String2=".") returned 1 [0177.651] wcscmp (_String1="nl", _String2="..") returned 1 [0177.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83220e8 [0177.652] wcscpy (in: _Dest=0x83220e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.652] wcscat (in: _Dest=0x83220e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.652] wcscat (in: _Dest=0x83220e8, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0177.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83220e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0177.653] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0177.653] wcscmp (_String1="no", _String2=".") returned 1 [0177.653] wcscmp (_String1="no", _String2="..") returned 1 [0177.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321278 [0177.653] wcscpy (in: _Dest=0x8321278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.653] wcscat (in: _Dest=0x8321278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.653] wcscat (in: _Dest=0x8321278, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0177.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0177.654] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0177.654] wcscmp (_String1="pl", _String2=".") returned 1 [0177.654] wcscmp (_String1="pl", _String2="..") returned 1 [0177.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321170 [0177.654] wcscpy (in: _Dest=0x8321170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.654] wcscat (in: _Dest=0x8321170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.654] wcscat (in: _Dest=0x8321170, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0177.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0177.964] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0177.964] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0177.964] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0177.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8346c78 [0177.964] wcscpy (in: _Dest=0x8346c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0177.965] wcscat (in: _Dest=0x8346c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0177.965] wcscat (in: _Dest=0x8346c78, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0178.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8346c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0178.908] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0178.908] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0178.908] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0178.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8347768 [0178.908] wcscpy (in: _Dest=0x8347768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.908] wcscat (in: _Dest=0x8347768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.908] wcscat (in: _Dest=0x8347768, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0178.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8347768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0178.909] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0178.909] wcscmp (_String1="ro", _String2=".") returned 1 [0178.909] wcscmp (_String1="ro", _String2="..") returned 1 [0178.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8336400 [0178.909] wcscpy (in: _Dest=0x8336400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.910] wcscat (in: _Dest=0x8336400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.910] wcscat (in: _Dest=0x8336400, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0178.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8336400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0178.911] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0178.911] wcscmp (_String1="ru", _String2=".") returned 1 [0178.911] wcscmp (_String1="ru", _String2="..") returned 1 [0178.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8336508 [0178.911] wcscpy (in: _Dest=0x8336508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.911] wcscat (in: _Dest=0x8336508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.911] wcscat (in: _Dest=0x8336508, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0178.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8336508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0178.913] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0178.913] wcscmp (_String1="sk", _String2=".") returned 1 [0178.913] wcscmp (_String1="sk", _String2="..") returned 1 [0178.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8336610 [0178.913] wcscpy (in: _Dest=0x8336610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.913] wcscat (in: _Dest=0x8336610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.913] wcscat (in: _Dest=0x8336610, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0178.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8336610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0178.914] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0178.914] wcscmp (_String1="sl", _String2=".") returned 1 [0178.914] wcscmp (_String1="sl", _String2="..") returned 1 [0178.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef5ee8 [0178.915] wcscpy (in: _Dest=0x3ef5ee8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.915] wcscat (in: _Dest=0x3ef5ee8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.915] wcscat (in: _Dest=0x3ef5ee8, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0178.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0178.916] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0178.916] wcscmp (_String1="sr", _String2=".") returned 1 [0178.916] wcscmp (_String1="sr", _String2="..") returned 1 [0178.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef5ff0 [0178.916] wcscpy (in: _Dest=0x3ef5ff0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.916] wcscat (in: _Dest=0x3ef5ff0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.917] wcscat (in: _Dest=0x3ef5ff0, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0178.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0178.918] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0178.918] wcscmp (_String1="sv", _String2=".") returned 1 [0178.918] wcscmp (_String1="sv", _String2="..") returned 1 [0178.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8320a38 [0178.918] wcscpy (in: _Dest=0x8320a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.918] wcscat (in: _Dest=0x8320a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.918] wcscat (in: _Dest=0x8320a38, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0178.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8320a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0178.924] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0178.924] wcscmp (_String1="th", _String2=".") returned 1 [0178.924] wcscmp (_String1="th", _String2="..") returned 1 [0178.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5960 [0178.924] wcscpy (in: _Dest=0x81f5960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.924] wcscat (in: _Dest=0x81f5960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.924] wcscat (in: _Dest=0x81f5960, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0178.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0178.932] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0178.932] wcscmp (_String1="tr", _String2=".") returned 1 [0178.932] wcscmp (_String1="tr", _String2="..") returned 1 [0178.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81eb648 [0178.933] wcscpy (in: _Dest=0x81eb648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.933] wcscat (in: _Dest=0x81eb648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.933] wcscat (in: _Dest=0x81eb648, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0178.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81eb648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0178.934] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0178.934] wcscmp (_String1="uk", _String2=".") returned 1 [0178.934] wcscmp (_String1="uk", _String2="..") returned 1 [0178.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81eb750 [0178.935] wcscpy (in: _Dest=0x81eb750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.935] wcscat (in: _Dest=0x81eb750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.935] wcscat (in: _Dest=0x81eb750, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0178.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81eb750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0178.937] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0178.937] wcscmp (_String1="vi", _String2=".") returned 1 [0178.937] wcscmp (_String1="vi", _String2="..") returned 1 [0178.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81eb858 [0178.937] wcscpy (in: _Dest=0x81eb858, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.937] wcscat (in: _Dest=0x81eb858, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.937] wcscat (in: _Dest=0x81eb858, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0178.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81eb858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0178.939] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0178.939] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0178.939] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0178.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8347880 [0178.939] wcscpy (in: _Dest=0x8347880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0178.939] wcscat (in: _Dest=0x8347880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0178.939] wcscat (in: _Dest=0x8347880, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0178.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8347880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0178.940] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0181.557] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0181.557] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0181.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x83486b8 [0181.557] wcscpy (in: _Dest=0x83486b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0181.557] wcscat (in: _Dest=0x83486b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0181.557] wcscat (in: _Dest=0x83486b8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0183.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83486b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0183.584] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x808e060 | out: lpFindFileData=0x808e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0183.584] FindClose (in: hFindFile=0x8098d10 | out: hFindFile=0x8098d10) returned 1 [0183.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e060) returned 1 [0183.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5390) returned 1 [0183.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24d40) returned 1 Thread: id = 3781 os_tid = 0xe20 [0168.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef5498 [0168.127] wcscpy (in: _Dest=0x3ef5498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0168.127] wcscat (in: _Dest=0x3ef5498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\" [0168.127] wcscat (in: _Dest=0x3ef5498, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*" [0168.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091a20 [0168.127] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*", lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0173.320] wcscmp (_String1=".", _String2=".") returned 0 [0173.320] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.320] wcscmp (_String1="..", _String2=".") returned 1 [0173.321] wcscmp (_String1="..", _String2="..") returned 0 [0173.321] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0173.321] wcscmp (_String1="_locales", _String2=".") returned 1 [0173.321] wcscmp (_String1="_locales", _String2="..") returned 1 [0173.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x8348140 [0173.321] wcscpy (in: _Dest=0x8348140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0173.321] wcscat (in: _Dest=0x8348140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\" [0173.321] wcscat (in: _Dest=0x8348140, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0176.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8348140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e8 [0176.101] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 0 [0176.101] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0176.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091a20) returned 1 [0176.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5498) returned 1 [0176.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25740) returned 1 Thread: id = 3782 os_tid = 0x1728 [0168.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html")) returned 0x20 [0168.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html", dwFileAttributes=0x20) returned 0 [0168.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.128] GetLastError () returned 0x5 [0168.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html", dwFileAttributes=0x20) returned 0 [0168.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1f90) returned 1 Thread: id = 3783 os_tid = 0x172c [0168.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html")) returned 0x20 [0171.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0171.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.920] GetLastError () returned 0x5 [0171.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0171.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2068) returned 1 Thread: id = 3784 os_tid = 0x1730 [0168.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js")) returned 0x20 [0172.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0172.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.065] GetLastError () returned 0x5 [0172.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0172.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eafa8) returned 1 Thread: id = 3785 os_tid = 0x12bc [0168.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css")) returned 0x20 [0171.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0171.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.782] GetLastError () returned 0x5 [0171.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0171.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb088) returned 1 Thread: id = 3786 os_tid = 0x1738 [0168.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html")) returned 0x20 [0172.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0172.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.215] GetLastError () returned 0x5 [0172.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0172.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb168) returned 1 Thread: id = 3787 os_tid = 0x173c [0168.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html")) returned 0x20 [0172.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0172.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.206] GetLastError () returned 0x5 [0172.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0172.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb248) returned 1 Thread: id = 3788 os_tid = 0x1740 [0168.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1c9a8 [0168.154] wcscpy (in: _Dest=0x3e1c9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0168.155] wcscat (in: _Dest=0x3e1c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0168.155] wcscat (in: _Dest=0x3e1c9a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*" [0168.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808eed0 [0168.155] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78d87170, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0172.842] wcscmp (_String1=".", _String2=".") returned 0 [0172.842] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78d87170, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.842] wcscmp (_String1="..", _String2=".") returned 1 [0172.842] wcscmp (_String1="..", _String2="..") returned 0 [0172.842] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="CUSTOM~1.FDT")) returned 1 [0172.843] wcscmp (_String1="Customer Support.fdt", _String2=".") returned 1 [0172.843] wcscmp (_String1="Customer Support.fdt", _String2="..") returned 1 [0172.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadf10 [0172.843] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0172.843] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0172.843] wcscat (in: _Dest=0x3dadf10, _Source="Customer Support.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" [0180.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0180.208] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x20b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardware Tracker.fdt", cAlternateFileName="HARDWA~1.FDT")) returned 1 [0180.208] wcscmp (_String1="Hardware Tracker.fdt", _String2=".") returned 1 [0180.209] wcscmp (_String1="Hardware Tracker.fdt", _String2="..") returned 1 [0180.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae100 [0180.209] wcscpy (in: _Dest=0x3dae100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0180.209] wcscat (in: _Dest=0x3dae100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0180.209] wcscat (in: _Dest=0x3dae100, _Source="Hardware Tracker.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" [0180.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0180.210] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x24051, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition - Customized.fdt", cAlternateFileName="HIRING~1.FDT")) returned 1 [0180.210] wcscmp (_String1="Hiring Requisition - Customized.fdt", _String2=".") returned 1 [0180.210] wcscmp (_String1="Hiring Requisition - Customized.fdt", _String2="..") returned 1 [0180.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x81dfaa8 [0180.210] wcscpy (in: _Dest=0x81dfaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0180.210] wcscat (in: _Dest=0x81dfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0180.210] wcscat (in: _Dest=0x81dfaa8, _Source="Hiring Requisition - Customized.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" [0180.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0180.228] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x248db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition.fdt", cAlternateFileName="HIRING~2.FDT")) returned 1 [0180.228] wcscmp (_String1="Hiring Requisition.fdt", _String2=".") returned 1 [0180.228] wcscmp (_String1="Hiring Requisition.fdt", _String2="..") returned 1 [0180.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae3e8 [0180.228] wcscpy (in: _Dest=0x3dae3e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0180.228] wcscat (in: _Dest=0x3dae3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0180.228] wcscat (in: _Dest=0x3dae3e8, _Source="Hiring Requisition.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" [0180.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0180.229] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8fc8d190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POLICIES.FDT", cAlternateFileName="")) returned 1 [0180.229] wcscmp (_String1="POLICIES.FDT", _String2=".") returned 1 [0180.229] wcscmp (_String1="POLICIES.FDT", _String2="..") returned 1 [0180.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e39ce0 [0180.230] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0180.230] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0180.230] wcscat (in: _Dest=0x3e39ce0, _Source="POLICIES.FDT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" [0180.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0180.231] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820aa150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Process Library.fdt", cAlternateFileName="PROCES~1.FDT")) returned 1 [0180.231] wcscmp (_String1="Process Library.fdt", _String2=".") returned 1 [0180.231] wcscmp (_String1="Process Library.fdt", _String2="..") returned 1 [0180.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dade18 [0180.231] wcscpy (in: _Dest=0x3dade18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0180.231] wcscat (in: _Dest=0x3dade18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0180.231] wcscat (in: _Dest=0x3dade18, _Source="Process Library.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" [0180.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dade18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0180.233] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x18ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status Report.fdt", cAlternateFileName="STATUS~1.FDT")) returned 1 [0180.233] wcscmp (_String1="Status Report.fdt", _String2=".") returned 1 [0180.233] wcscmp (_String1="Status Report.fdt", _String2="..") returned 1 [0180.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8021aa0 [0180.233] wcscpy (in: _Dest=0x8021aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0180.233] wcscat (in: _Dest=0x8021aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0180.233] wcscat (in: _Dest=0x8021aa0, _Source="Status Report.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" [0180.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0180.234] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 1 [0180.234] wcscmp (_String1="Track Issues.fdt", _String2=".") returned 1 [0180.234] wcscmp (_String1="Track Issues.fdt", _String2="..") returned 1 [0180.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x8021050 [0180.234] wcscpy (in: _Dest=0x8021050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0180.234] wcscat (in: _Dest=0x8021050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0180.234] wcscat (in: _Dest=0x8021050, _Source="Track Issues.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" [0180.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0180.236] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808eed0 | out: lpFindFileData=0x808eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 0 [0180.236] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0185.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808eed0) returned 1 [0185.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c9a8) returned 1 [0185.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efcc8) returned 1 Thread: id = 3789 os_tid = 0x12c0 [0168.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm")) returned 0x20 [0172.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0172.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.200] GetLastError () returned 0x5 [0172.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0172.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb328) returned 1 Thread: id = 3790 os_tid = 0x12c4 [0168.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg")) returned 0x20 [0172.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0172.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.194] GetLastError () returned 0x5 [0172.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0172.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a080) returned 1 Thread: id = 3791 os_tid = 0x12c8 [0168.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0172.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0172.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.187] GetLastError () returned 0x5 [0172.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0172.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020c90) returned 1 Thread: id = 3792 os_tid = 0x12cc [0168.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html")) returned 0x20 [0172.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0172.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.156] GetLastError () returned 0x5 [0172.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0172.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2140) returned 1 Thread: id = 3793 os_tid = 0x1754 [0168.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg")) returned 0x20 [0171.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0171.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.557] GetLastError () returned 0x5 [0171.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0171.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2218) returned 1 Thread: id = 3794 os_tid = 0x12d0 [0168.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml")) returned 0x20 [0172.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml", dwFileAttributes=0x20) returned 0 [0172.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.147] GetLastError () returned 0x5 [0172.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml", dwFileAttributes=0x20) returned 0 [0172.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb408) returned 1 Thread: id = 3795 os_tid = 0x140c [0168.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js")) returned 0x20 [0172.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS", dwFileAttributes=0x20) returned 0 [0172.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.139] GetLastError () returned 0x5 [0172.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS", dwFileAttributes=0x20) returned 0 [0172.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfd08) returned 1 Thread: id = 3796 os_tid = 0x1410 [0168.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif")) returned 0x20 [0172.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif", dwFileAttributes=0x20) returned 0 [0172.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.131] GetLastError () returned 0x5 [0172.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif", dwFileAttributes=0x20) returned 0 [0172.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efbf8) returned 1 Thread: id = 3797 os_tid = 0x1768 [0168.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif")) returned 0x20 [0172.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF", dwFileAttributes=0x20) returned 0 [0172.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.119] GetLastError () returned 0x5 [0172.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF", dwFileAttributes=0x20) returned 0 [0172.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ee0) returned 1 Thread: id = 3798 os_tid = 0x176c [0168.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif")) returned 0x20 [0172.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0172.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.111] GetLastError () returned 0x5 [0172.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0172.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a30) returned 1 Thread: id = 3799 os_tid = 0x1770 [0168.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js")) returned 0x20 [0172.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0172.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.238] GetLastError () returned 0x5 [0172.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0172.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfb88) returned 1 Thread: id = 3800 os_tid = 0x1774 [0168.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js")) returned 0x20 [0172.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0172.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.102] GetLastError () returned 0x5 [0172.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0172.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f22f0) returned 1 Thread: id = 3801 os_tid = 0x1778 [0168.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js")) returned 0x20 [0172.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js", dwFileAttributes=0x20) returned 0 [0172.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.091] GetLastError () returned 0x5 [0172.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js", dwFileAttributes=0x20) returned 0 [0172.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d73f8) returned 1 Thread: id = 3802 os_tid = 0x177c [0168.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css")) returned 0x20 [0172.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS", dwFileAttributes=0x20) returned 0 [0172.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.080] GetLastError () returned 0x5 [0172.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS", dwFileAttributes=0x20) returned 0 [0172.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df648) returned 1 Thread: id = 3803 os_tid = 0x1780 [0168.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js")) returned 0x20 [0172.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0172.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.073] GetLastError () returned 0x5 [0172.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0172.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfac8) returned 1 Thread: id = 3804 os_tid = 0x1784 [0168.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif")) returned 0x20 [0172.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF", dwFileAttributes=0x20) returned 0 [0172.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.236] GetLastError () returned 0x5 [0172.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF", dwFileAttributes=0x20) returned 0 [0172.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d65e8) returned 1 Thread: id = 3805 os_tid = 0x1788 [0168.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js")) returned 0x20 [0172.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js", dwFileAttributes=0x20) returned 0 [0172.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.234] GetLastError () returned 0x5 [0172.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js", dwFileAttributes=0x20) returned 0 [0172.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efb28) returned 1 Thread: id = 3806 os_tid = 0x178c [0168.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg")) returned 0x20 [0171.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0171.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.736] GetLastError () returned 0x5 [0171.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0171.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f23c8) returned 1 Thread: id = 3807 os_tid = 0x1790 [0168.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js")) returned 0x20 [0171.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js", dwFileAttributes=0x20) returned 0 [0171.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.780] GetLastError () returned 0x5 [0171.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js", dwFileAttributes=0x20) returned 0 [0171.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb4e8) returned 1 Thread: id = 3808 os_tid = 0x1798 [0168.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp")) returned 0x20 [0168.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0168.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.427] GetLastError () returned 0x5 [0168.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0168.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80207e0) returned 1 Thread: id = 3809 os_tid = 0x179c [0168.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg")) returned 0x20 [0168.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg", dwFileAttributes=0x20) returned 0 [0168.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.443] GetLastError () returned 0x5 [0168.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg", dwFileAttributes=0x20) returned 0 [0168.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021140) returned 1 Thread: id = 3810 os_tid = 0x17a0 [0168.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg")) returned 0x20 [0171.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0171.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.732] GetLastError () returned 0x5 [0171.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0171.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b0d0) returned 1 Thread: id = 3811 os_tid = 0x17a4 [0168.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp")) returned 0x20 [0171.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0171.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.763] GetLastError () returned 0x5 [0171.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0171.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020ba0) returned 1 Thread: id = 3812 os_tid = 0x17a8 [0168.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg")) returned 0x20 [0171.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg", dwFileAttributes=0x20) returned 0 [0171.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.748] GetLastError () returned 0x5 [0171.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg", dwFileAttributes=0x20) returned 0 [0171.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b470) returned 1 Thread: id = 3813 os_tid = 0x17ac [0168.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp")) returned 0x20 [0171.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0171.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.375] GetLastError () returned 0x5 [0171.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0171.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021500) returned 1 Thread: id = 3814 os_tid = 0x17b0 [0168.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.access")) returned 0x20 [0168.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access", dwFileAttributes=0x20) returned 0 [0168.457] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.462] GetLastError () returned 0x5 [0168.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access", dwFileAttributes=0x20) returned 0 [0168.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 3815 os_tid = 0x17b4 [0168.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.password.template")) returned 0x20 [0168.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x20) returned 0 [0168.472] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.478] GetLastError () returned 0x5 [0168.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x20) returned 0 [0168.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 3816 os_tid = 0x17b8 [0168.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\management.properties")) returned 0x20 [0168.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties", dwFileAttributes=0x20) returned 0 [0168.493] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\management.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.499] GetLastError () returned 0x5 [0168.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties", dwFileAttributes=0x20) returned 0 [0168.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 3817 os_tid = 0x17bc [0168.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\snmp.acl.template")) returned 0x20 [0168.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template", dwFileAttributes=0x20) returned 0 [0168.510] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.516] GetLastError () returned 0x5 [0168.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template", dwFileAttributes=0x20) returned 0 [0168.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24240) returned 1 Thread: id = 3818 os_tid = 0x17c0 [0168.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx")) returned 0x20 [0168.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0168.523] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.524] GetLastError () returned 0x5 [0168.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0168.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2db18) returned 1 Thread: id = 3819 os_tid = 0x17c4 [0168.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx")) returned 0x20 [0168.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0168.529] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.530] GetLastError () returned 0x5 [0168.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0168.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187808) returned 1 Thread: id = 3820 os_tid = 0x12d4 [0168.535] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png")) returned 0x2020 [0171.731] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", dwFileAttributes=0x20) returned 1 [0177.160] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b94 [0177.161] GetFileSizeEx (in: hFile=0x1b94, lpFileSize=0x7a6f9e8 | out: lpFileSize=0x7a6f9e8*=3406) returned 1 [0177.161] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0xd4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.161] ReadFile (in: hFile=0x1b94, lpBuffer=0x7a6f9f4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7a6f9d0, lpOverlapped=0x0 | out: lpBuffer=0x7a6f9f4*, lpNumberOfBytesRead=0x7a6f9d0*=0x4, lpOverlapped=0x0) returned 1 [0182.153] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0182.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42588 [0182.153] NtQuerySystemTime (in: CurrentTime=0x7a6f970 | out: CurrentTime=0x7a6f970*=132471540501360000) returned 0x0 [0182.153] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x5b482a67 [0182.153] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x460b6a4f [0182.153] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x7b8ec90 [0182.153] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x32335faa [0182.153] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x424e2c10 [0182.153] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x4437ccc2 [0182.153] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x6ec91395 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x16389a11 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x4826902d [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x4871cfca [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x584dda31 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x42044872 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x706efec1 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x128f22c6 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x4c7a715c [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x156cf37d [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x4cfa5e65 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x6b2cdc31 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x10073f49 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x300b005b [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x44071c26 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x5389a76c [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x75aa03d3 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x79034683 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x54cabd5f [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x1332862c [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x4237b6df [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x749e9e62 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x51ef03fc [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x4e8376df [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x5bcb69a0 [0182.154] RtlRandomEx (in: Seed=0x7a6f968 | out: Seed=0x7a6f968) returned 0x5343c6f [0182.165] ReadFile (in: hFile=0x1b94, lpBuffer=0x829b080, nNumberOfBytesToRead=0xd4e, lpNumberOfBytesRead=0x7a6f964, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesRead=0x7a6f964*=0xd4e, lpOverlapped=0x0) returned 1 [0182.165] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.165] WriteFile (in: hFile=0x1b94, lpBuffer=0x829ec88*, nNumberOfBytesToWrite=0xd4e, lpNumberOfBytesWritten=0x7a6f968, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesWritten=0x7a6f968*=0xd4e, lpOverlapped=0x0) returned 1 [0184.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0184.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0184.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc58) returned 1 [0184.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0184.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0184.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0184.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6260) returned 1 [0184.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x305bc58 [0184.720] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.720] WriteFile (in: hFile=0x1b94, lpBuffer=0x84047a0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7a6f9dc, lpOverlapped=0x0 | out: lpBuffer=0x84047a0*, lpNumberOfBytesWritten=0x7a6f9dc*=0x100, lpOverlapped=0x0) returned 1 [0189.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84047a0) returned 1 [0189.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0189.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cab8) returned 1 [0189.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc58) returned 1 [0189.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc08) returned 1 [0189.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0189.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43410) returned 1 [0189.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43140) returned 1 [0189.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8405fc0 [0189.508] wcscpy (in: _Dest=0x8405fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" [0189.508] wcscat (in: _Dest=0x8405fc0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.f0dbec" [0189.508] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.f0dbec", NtPathName=0x7a6f960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a2060 [0192.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2060) returned 1 [0192.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08770) returned 1 [0192.935] NtQueryInformationFile (in: FileHandle=0x1b94, IoStatusBlock=0x7a6f938, FileInformation=0x7a6f940, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7a6f938, FileInformation=0x7a6f940) returned 0x0 [0192.935] NtSetInformationFile (FileHandle=0x1b94, IoStatusBlock=0x7a6f938, FileInformation=0x7a6f940, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405fc0) returned 1 [0196.179] FlushFileBuffers (hFile=0x1b94) returned 1 [0196.180] CloseHandle (hObject=0x1b94) returned 1 [0196.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x300e668 [0196.604] wcscpy (in: _Dest=0x300e668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0196.604] wcscat (in: _Dest=0x300e668, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\F0DBEC-Readme.txt" [0196.604] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\f0dbec-readme.txt")) returned 0x2020 [0196.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0196.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27040) returned 1 Thread: id = 3821 os_tid = 0x12d8 [0168.537] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json")) returned 0x2020 [0171.731] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0175.763] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2964 [0175.763] GetFileSizeEx (in: hFile=0x2964, lpFileSize=0x783fe50 | out: lpFileSize=0x783fe50*=728) returned 1 [0175.763] SetFilePointerEx (in: hFile=0x2964, liDistanceToMove=0x2d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.763] ReadFile (in: hFile=0x2964, lpBuffer=0x783fe5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x783fe38, lpOverlapped=0x0 | out: lpBuffer=0x783fe5c*, lpNumberOfBytesRead=0x783fe38*=0x4, lpOverlapped=0x0) returned 1 [0175.791] SetFilePointerEx (in: hFile=0x2964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0175.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0175.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0175.792] NtQuerySystemTime (in: CurrentTime=0x783fdd8 | out: CurrentTime=0x783fdd8*=132471540438960000) returned 0x0 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x678611de [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x1cdf6e73 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x4244e19a [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x407bf2e5 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x264b6c86 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x4727f725 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x4fc83db3 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x5aea1fa [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x3df38710 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x10b4bb83 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x5a6374f9 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x3ba36a59 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x633d5b3d [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x40fb139b [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x2520e8b4 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x33148971 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x4b289abe [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x163b4429 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x566c8fb8 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x125ae882 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x267dbe80 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x5ade5808 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x1ad9aa9c [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x34fbf7a5 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x31050472 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x58fee337 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x3b0e48b2 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x66ba319f [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x784a3ba9 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x4afa723b [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0xcb06983 [0175.792] RtlRandomEx (in: Seed=0x783fdd0 | out: Seed=0x783fdd0) returned 0x1c9ccc2e [0175.801] ReadFile (in: hFile=0x2964, lpBuffer=0x8155478, nNumberOfBytesToRead=0x2d8, lpNumberOfBytesRead=0x783fdcc, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesRead=0x783fdcc*=0x2d8, lpOverlapped=0x0) returned 1 [0175.802] SetFilePointerEx (in: hFile=0x2964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.802] WriteFile (in: hFile=0x2964, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x783fdd0, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0x783fdd0*=0x2d8, lpOverlapped=0x0) returned 1 [0177.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3040f8 [0177.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303fe0 [0177.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303fe0) returned 1 [0177.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0177.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0177.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0177.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e57b0) returned 1 [0177.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e50 [0177.332] SetFilePointerEx (in: hFile=0x2964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.332] WriteFile (in: hFile=0x2964, lpBuffer=0x30bcce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x783fe44, lpOverlapped=0x0 | out: lpBuffer=0x30bcce0*, lpNumberOfBytesWritten=0x783fe44*=0x10c, lpOverlapped=0x0) returned 1 [0182.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0182.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68df0) returned 1 [0182.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303fe0) returned 1 [0182.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e50) returned 1 [0182.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040f8) returned 1 [0182.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bdc0) returned 1 [0182.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0182.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0182.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bcce0 [0182.467] wcscpy (in: _Dest=0x30bcce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" [0182.467] wcscat (in: _Dest=0x30bcce0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.f0dbec" [0182.468] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.f0dbec", NtPathName=0x783fdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a0060 [0182.909] FlushFileBuffers (hFile=0x2964) returned 1 [0183.164] CloseHandle (hObject=0x2964) returned 1 [0183.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec5f8 [0183.169] wcscpy (in: _Dest=0x3dec5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0183.169] wcscat (in: _Dest=0x3dec5f8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\F0DBEC-Readme.txt" [0183.169] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\f0dbec-readme.txt")) returned 0xffffffff [0183.169] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2964 [0183.170] WriteFile (in: hFile=0x2964, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x783fdec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x783fdec*=0x70c, lpOverlapped=0x0) returned 1 [0183.171] CloseHandle (hObject=0x2964) returned 1 [0183.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0183.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 Thread: id = 3822 os_tid = 0x17d0 [0168.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef59c0 [0168.538] wcscpy (in: _Dest=0x3ef59c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0168.538] wcscat (in: _Dest=0x3ef59c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0168.538] wcscat (in: _Dest=0x3ef59c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*" [0168.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091c88 [0168.538] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ba34f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8335c90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8335c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55708 [0171.672] wcscmp (_String1=".", _String2=".") returned 0 [0171.672] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ba34f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8335c90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8335c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.673] wcscmp (_String1="..", _String2=".") returned 1 [0171.673] wcscmp (_String1="..", _String2="..") returned 0 [0171.673] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7baaa20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7baf840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0171.673] wcscmp (_String1="ar", _String2=".") returned 1 [0171.673] wcscmp (_String1="ar", _String2="..") returned 1 [0171.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334a38 [0171.673] wcscpy (in: _Dest=0x8334a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0171.673] wcscat (in: _Dest=0x8334a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0171.673] wcscat (in: _Dest=0x8334a38, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0172.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b68 [0172.587] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bbbb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bc7ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0172.587] wcscmp (_String1="bg", _String2=".") returned 1 [0172.587] wcscmp (_String1="bg", _String2="..") returned 1 [0172.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef5180 [0172.588] wcscpy (in: _Dest=0x3ef5180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.588] wcscat (in: _Dest=0x3ef5180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.588] wcscat (in: _Dest=0x3ef5180, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0172.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a54 [0172.589] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bd1b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd6940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bd6940, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0172.589] wcscmp (_String1="ca", _String2=".") returned 1 [0172.589] wcscmp (_String1="ca", _String2="..") returned 1 [0172.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef57b0 [0172.589] wcscpy (in: _Dest=0x3ef57b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.589] wcscat (in: _Dest=0x3ef57b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.589] wcscat (in: _Dest=0x3ef57b0, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0172.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef57b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be0 [0172.590] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7be2c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7beefe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0172.590] wcscmp (_String1="cs", _String2=".") returned 1 [0172.590] wcscmp (_String1="cs", _String2="..") returned 1 [0172.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef58b8 [0172.590] wcscpy (in: _Dest=0x3ef58b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.590] wcscat (in: _Dest=0x3ef58b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.590] wcscat (in: _Dest=0x3ef58b8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0172.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef58b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b44 [0172.591] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bf8c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bfda40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0172.591] wcscmp (_String1="da", _String2=".") returned 1 [0172.591] wcscmp (_String1="da", _String2="..") returned 1 [0172.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335698 [0172.592] wcscpy (in: _Dest=0x8335698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.592] wcscat (in: _Dest=0x8335698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.592] wcscat (in: _Dest=0x8335698, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0172.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b40 [0172.593] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c04f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c0c4a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0172.593] wcscmp (_String1="de", _String2=".") returned 1 [0172.593] wcscmp (_String1="de", _String2="..") returned 1 [0172.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83357a0 [0172.593] wcscpy (in: _Dest=0x83357a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.593] wcscat (in: _Dest=0x83357a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.593] wcscat (in: _Dest=0x83357a0, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0172.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83357a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2840 [0172.594] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c1d610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c22430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0172.594] wcscmp (_String1="el", _String2=".") returned 1 [0172.594] wcscmp (_String1="el", _String2="..") returned 1 [0172.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83358a8 [0172.594] wcscpy (in: _Dest=0x83358a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.594] wcscat (in: _Dest=0x83358a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.594] wcscat (in: _Dest=0x83358a8, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0172.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83358a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d8 [0172.595] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c2c070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fce340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0172.595] wcscmp (_String1="en", _String2=".") returned 1 [0172.595] wcscmp (_String1="en", _String2="..") returned 1 [0172.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83359b0 [0172.595] wcscpy (in: _Dest=0x83359b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.595] wcscat (in: _Dest=0x83359b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.595] wcscat (in: _Dest=0x83359b0, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0172.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83359b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2844 [0172.596] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7fda690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fe69e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0172.596] wcscmp (_String1="es", _String2=".") returned 1 [0172.596] wcscmp (_String1="es", _String2="..") returned 1 [0172.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335ab8 [0172.596] wcscpy (in: _Dest=0x8335ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.596] wcscat (in: _Dest=0x8335ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.596] wcscat (in: _Dest=0x8335ab8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0172.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2848 [0172.597] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ff2d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7ffa260, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0172.597] wcscmp (_String1="fi", _String2=".") returned 1 [0172.597] wcscmp (_String1="fi", _String2="..") returned 1 [0172.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335bc0 [0172.597] wcscpy (in: _Dest=0x8335bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.597] wcscat (in: _Dest=0x8335bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.598] wcscat (in: _Dest=0x8335bc0, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0172.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae4 [0172.599] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8012900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8019e30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8019e30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0172.599] wcscmp (_String1="fil", _String2=".") returned 1 [0172.599] wcscmp (_String1="fil", _String2="..") returned 1 [0172.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8335cc8 [0172.599] wcscpy (in: _Dest=0x8335cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.599] wcscat (in: _Dest=0x8335cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.599] wcscat (in: _Dest=0x8335cc8, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0172.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28bc [0172.600] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe802afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8034be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0172.600] wcscmp (_String1="fr", _String2=".") returned 1 [0172.600] wcscmp (_String1="fr", _String2="..") returned 1 [0172.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335dd0 [0172.600] wcscpy (in: _Dest=0x8335dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.600] wcscat (in: _Dest=0x8335dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.600] wcscat (in: _Dest=0x8335dd0, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0172.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x284c [0172.601] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8040f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8045d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0172.601] wcscmp (_String1="he", _String2=".") returned 1 [0172.601] wcscmp (_String1="he", _String2="..") returned 1 [0172.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335ed8 [0172.601] wcscpy (in: _Dest=0x8335ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.601] wcscat (in: _Dest=0x8335ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.601] wcscat (in: _Dest=0x8335ed8, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0172.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2850 [0172.602] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe804d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80520a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80520a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0172.602] wcscmp (_String1="hi", _String2=".") returned 1 [0172.603] wcscmp (_String1="hi", _String2="..") returned 1 [0172.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335fe0 [0172.603] wcscpy (in: _Dest=0x8335fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.603] wcscat (in: _Dest=0x8335fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.603] wcscat (in: _Dest=0x8335fe0, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0172.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2854 [0172.604] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe809b480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a02a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80a02a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0172.604] wcscmp (_String1="hr", _String2=".") returned 1 [0172.604] wcscmp (_String1="hr", _String2="..") returned 1 [0172.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83360e8 [0172.604] wcscpy (in: _Dest=0x83360e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.604] wcscat (in: _Dest=0x83360e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.604] wcscat (in: _Dest=0x83360e8, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0172.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83360e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2858 [0172.605] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80b3b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80bb050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0172.605] wcscmp (_String1="hu", _String2=".") returned 1 [0172.605] wcscmp (_String1="hu", _String2="..") returned 1 [0172.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83361f0 [0172.605] wcscpy (in: _Dest=0x83361f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.605] wcscat (in: _Dest=0x83361f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.605] wcscat (in: _Dest=0x83361f0, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0172.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83361f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x285c [0172.606] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80c73a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d36f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80d36f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0172.606] wcscmp (_String1="id", _String2=".") returned 1 [0172.606] wcscmp (_String1="id", _String2="..") returned 1 [0172.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83362f8 [0172.606] wcscpy (in: _Dest=0x83362f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.606] wcscat (in: _Dest=0x83362f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.606] wcscat (in: _Dest=0x83362f8, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0172.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83362f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0172.607] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80e2150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80e6f70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0172.607] wcscmp (_String1="it", _String2=".") returned 1 [0172.607] wcscmp (_String1="it", _String2="..") returned 1 [0172.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8336400 [0172.607] wcscpy (in: _Dest=0x8336400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.607] wcscat (in: _Dest=0x8336400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.608] wcscat (in: _Dest=0x8336400, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0172.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8336400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d0 [0172.609] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80f32c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fa7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80fa7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0172.609] wcscmp (_String1="ja", _String2=".") returned 1 [0172.609] wcscmp (_String1="ja", _String2="..") returned 1 [0172.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8336508 [0172.609] wcscpy (in: _Dest=0x8336508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.609] wcscat (in: _Dest=0x8336508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.609] wcscat (in: _Dest=0x8336508, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0172.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8336508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2860 [0172.610] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8106b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe810b960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0172.610] wcscmp (_String1="ko", _String2=".") returned 1 [0172.610] wcscmp (_String1="ko", _String2="..") returned 1 [0172.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8336610 [0172.610] wcscpy (in: _Dest=0x8336610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.610] wcscat (in: _Dest=0x8336610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.610] wcscat (in: _Dest=0x8336610, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0172.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8336610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2864 [0172.611] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8112e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8117cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0172.611] wcscmp (_String1="lt", _String2=".") returned 1 [0172.611] wcscmp (_String1="lt", _String2="..") returned 1 [0172.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8336718 [0172.611] wcscpy (in: _Dest=0x8336718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.611] wcscat (in: _Dest=0x8336718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.611] wcscat (in: _Dest=0x8336718, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0172.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8336718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2868 [0172.612] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8126710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe812b530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe812b530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0172.612] wcscmp (_String1="lv", _String2=".") returned 1 [0172.612] wcscmp (_String1="lv", _String2="..") returned 1 [0172.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333dd0 [0172.612] wcscpy (in: _Dest=0x8333dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.612] wcscat (in: _Dest=0x8333dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.613] wcscat (in: _Dest=0x8333dd0, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0172.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x286c [0172.613] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8232ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8235700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0172.613] wcscmp (_String1="nl", _String2=".") returned 1 [0172.613] wcscmp (_String1="nl", _String2="..") returned 1 [0172.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x80547e0 [0172.614] wcscpy (in: _Dest=0x80547e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.614] wcscat (in: _Dest=0x80547e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.614] wcscat (in: _Dest=0x80547e0, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0172.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80547e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2870 [0172.615] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8241a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8246870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0172.615] wcscmp (_String1="no", _String2=".") returned 1 [0172.615] wcscmp (_String1="no", _String2="..") returned 1 [0172.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x80548e8 [0172.615] wcscpy (in: _Dest=0x80548e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.615] wcscat (in: _Dest=0x80548e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.615] wcscat (in: _Dest=0x80548e8, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0172.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80548e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e8 [0172.616] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8288720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe828ae30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0172.616] wcscmp (_String1="pl", _String2=".") returned 1 [0172.616] wcscmp (_String1="pl", _String2="..") returned 1 [0172.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x80549f0 [0172.616] wcscpy (in: _Dest=0x80549f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.616] wcscat (in: _Dest=0x80549f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.616] wcscat (in: _Dest=0x80549f0, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0172.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x80549f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28ec [0172.617] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8297180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe829bfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0172.617] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0172.617] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0172.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bcce0 [0172.617] wcscpy (in: _Dest=0x30bcce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.617] wcscat (in: _Dest=0x30bcce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.617] wcscat (in: _Dest=0x30bcce0, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0172.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bcce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f0 [0172.618] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82a34d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a5be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82a5be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0172.618] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0172.618] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0172.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bcdf8 [0172.619] wcscpy (in: _Dest=0x30bcdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0172.619] wcscat (in: _Dest=0x30bcdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0172.619] wcscat (in: _Dest=0x30bcdf8, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0172.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bcdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f4 [0173.152] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82ad110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82af820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82af820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0173.152] wcscmp (_String1="ro", _String2=".") returned 1 [0173.153] wcscmp (_String1="ro", _String2="..") returned 1 [0173.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8054af8 [0173.153] wcscpy (in: _Dest=0x8054af8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0173.153] wcscat (in: _Dest=0x8054af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0173.153] wcscat (in: _Dest=0x8054af8, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0175.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c8 [0175.575] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82bbb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82be280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82be280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0175.575] wcscmp (_String1="ru", _String2=".") returned 1 [0175.575] wcscmp (_String1="ru", _String2="..") returned 1 [0175.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f62a8 [0175.575] wcscpy (in: _Dest=0x81f62a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.575] wcscat (in: _Dest=0x81f62a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.575] wcscat (in: _Dest=0x81f62a8, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0175.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f62a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0175.577] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82c57b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82ccce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0175.577] wcscmp (_String1="sk", _String2=".") returned 1 [0175.577] wcscmp (_String1="sk", _String2="..") returned 1 [0175.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f61a0 [0175.577] wcscpy (in: _Dest=0x81f61a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.577] wcscat (in: _Dest=0x81f61a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.577] wcscat (in: _Dest=0x81f61a0, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0175.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f61a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0175.578] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82d4210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82d6920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0175.578] wcscmp (_String1="sl", _String2=".") returned 1 [0175.578] wcscmp (_String1="sl", _String2="..") returned 1 [0175.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f6098 [0175.578] wcscpy (in: _Dest=0x81f6098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.578] wcscat (in: _Dest=0x81f6098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.579] wcscat (in: _Dest=0x81f6098, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0175.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f6098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0175.580] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82e2c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e5380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82e5380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0175.580] wcscmp (_String1="sr", _String2=".") returned 1 [0175.580] wcscmp (_String1="sr", _String2="..") returned 1 [0175.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5f90 [0175.580] wcscpy (in: _Dest=0x81f5f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.580] wcscat (in: _Dest=0x81f5f90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.580] wcscat (in: _Dest=0x81f5f90, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0175.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0175.581] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82eefc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f16d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82f16d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0175.581] wcscmp (_String1="sv", _String2=".") returned 1 [0175.581] wcscmp (_String1="sv", _String2="..") returned 1 [0175.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5a68 [0175.581] wcscpy (in: _Dest=0x81f5a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.581] wcscat (in: _Dest=0x81f5a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.581] wcscat (in: _Dest=0x81f5a68, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0175.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0175.582] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82f8c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fb310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82fb310, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0175.582] wcscmp (_String1="th", _String2=".") returned 1 [0175.582] wcscmp (_String1="th", _String2="..") returned 1 [0175.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5c78 [0175.582] wcscpy (in: _Dest=0x81f5c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.582] wcscat (in: _Dest=0x81f5c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.582] wcscat (in: _Dest=0x81f5c78, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0175.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0175.586] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8304f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8309d70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0175.586] wcscmp (_String1="tr", _String2=".") returned 1 [0175.586] wcscmp (_String1="tr", _String2="..") returned 1 [0175.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83359b0 [0175.586] wcscpy (in: _Dest=0x83359b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.586] wcscat (in: _Dest=0x83359b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.586] wcscat (in: _Dest=0x83359b0, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0175.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83359b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b34 [0175.587] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83112a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83160c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83160c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0175.587] wcscmp (_String1="uk", _String2=".") returned 1 [0175.587] wcscmp (_String1="uk", _String2="..") returned 1 [0175.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334a38 [0175.587] wcscpy (in: _Dest=0x8334a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.587] wcscat (in: _Dest=0x8334a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.587] wcscat (in: _Dest=0x8334a38, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0175.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0175.588] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe831d5f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe831fd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe831fd00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0175.588] wcscmp (_String1="vi", _String2=".") returned 1 [0175.588] wcscmp (_String1="vi", _String2="..") returned 1 [0175.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f4098 [0175.588] wcscpy (in: _Dest=0x81f4098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.588] wcscat (in: _Dest=0x81f4098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.588] wcscat (in: _Dest=0x81f4098, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0175.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f4098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0175.589] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8327230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe832c050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0175.589] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0175.589] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0175.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8346c78 [0175.589] wcscpy (in: _Dest=0x8346c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.589] wcscat (in: _Dest=0x8346c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.589] wcscat (in: _Dest=0x8346c78, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0175.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8346c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0175.590] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0175.591] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0175.591] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0175.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x83486b8 [0175.591] wcscpy (in: _Dest=0x83486b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0175.591] wcscat (in: _Dest=0x83486b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0175.591] wcscat (in: _Dest=0x83486b8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0175.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83486b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0175.592] FindNextFileW (in: hFindFile=0x3e55708, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0175.592] FindClose (in: hFindFile=0x3e55708 | out: hFindFile=0x3e55708) returned 1 [0175.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091c88) returned 1 [0175.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0175.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27440) returned 1 Thread: id = 3823 os_tid = 0x17d4 [0168.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef5ac8 [0168.541] wcscpy (in: _Dest=0x3ef5ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0168.541] wcscat (in: _Dest=0x3ef5ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" [0168.541] wcscat (in: _Dest=0x3ef5ac8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*" [0168.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ffa8 [0168.541] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0171.646] wcscmp (_String1=".", _String2=".") returned 0 [0171.646] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.646] wcscmp (_String1="..", _String2=".") returned 1 [0171.646] wcscmp (_String1="..", _String2="..") returned 0 [0171.646] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8346e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8349510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf7bfcd00, ftLastWriteTime.dwHighDateTime=0x1d0f616, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0171.646] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0171.646] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0171.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef84b8 [0171.646] wcscpy (in: _Dest=0x3ef84b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0171.646] wcscat (in: _Dest=0x3ef84b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" [0171.646] wcscat (in: _Dest=0x3ef84b8, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" [0172.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef84b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c0 [0172.580] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8346e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8349510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf7bfcd00, ftLastWriteTime.dwHighDateTime=0x1d0f616, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0172.580] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0172.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ffa8) returned 1 [0172.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ac8) returned 1 [0172.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef55a0) returned 1 Thread: id = 3824 os_tid = 0x17d8 [0168.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif")) returned 0x20 [0171.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF", dwFileAttributes=0x20) returned 0 [0171.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.966] GetLastError () returned 0x5 [0171.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF", dwFileAttributes=0x20) returned 0 [0171.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1a50) returned 1 Thread: id = 3825 os_tid = 0x1414 [0168.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif")) returned 0x20 [0171.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF", dwFileAttributes=0x20) returned 0 [0171.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.970] GetLastError () returned 0x5 [0171.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF", dwFileAttributes=0x20) returned 0 [0171.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 3826 os_tid = 0x17e0 [0168.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif")) returned 0x20 [0171.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF", dwFileAttributes=0x20) returned 0 [0171.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.973] GetLastError () returned 0x5 [0171.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF", dwFileAttributes=0x20) returned 0 [0171.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 3827 os_tid = 0x17e4 [0168.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif")) returned 0x20 [0171.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF", dwFileAttributes=0x20) returned 0 [0171.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.976] GetLastError () returned 0x5 [0171.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF", dwFileAttributes=0x20) returned 0 [0171.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 3828 os_tid = 0x17e8 [0168.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif")) returned 0x20 [0171.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF", dwFileAttributes=0x20) returned 0 [0171.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.978] GetLastError () returned 0x5 [0171.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF", dwFileAttributes=0x20) returned 0 [0171.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 3829 os_tid = 0x17ec [0168.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif")) returned 0x20 [0171.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF", dwFileAttributes=0x20) returned 0 [0171.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.981] GetLastError () returned 0x5 [0171.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF", dwFileAttributes=0x20) returned 0 [0171.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 Thread: id = 3830 os_tid = 0x17f0 [0168.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif")) returned 0x20 [0171.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF", dwFileAttributes=0x20) returned 0 [0171.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.983] GetLastError () returned 0x5 [0171.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF", dwFileAttributes=0x20) returned 0 [0171.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 Thread: id = 3831 os_tid = 0x17f4 [0168.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif")) returned 0x20 [0171.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF", dwFileAttributes=0x20) returned 0 [0171.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.986] GetLastError () returned 0x5 [0171.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF", dwFileAttributes=0x20) returned 0 [0171.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ce18) returned 1 Thread: id = 3832 os_tid = 0x17f8 [0168.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif")) returned 0x20 [0171.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF", dwFileAttributes=0x20) returned 0 [0171.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.988] GetLastError () returned 0x5 [0171.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF", dwFileAttributes=0x20) returned 0 [0171.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 3833 os_tid = 0x17fc [0168.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif")) returned 0x20 [0171.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF", dwFileAttributes=0x20) returned 0 [0171.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.991] GetLastError () returned 0x5 [0171.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF", dwFileAttributes=0x20) returned 0 [0171.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cbb8) returned 1 Thread: id = 3834 os_tid = 0x7dc [0168.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif")) returned 0x20 [0171.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF", dwFileAttributes=0x20) returned 0 [0171.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.993] GetLastError () returned 0x5 [0171.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF", dwFileAttributes=0x20) returned 0 [0171.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 3835 os_tid = 0x3ec [0168.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif")) returned 0x20 [0171.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF", dwFileAttributes=0x20) returned 0 [0171.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.995] GetLastError () returned 0x5 [0171.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF", dwFileAttributes=0x20) returned 0 [0171.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c828) returned 1 Thread: id = 3836 os_tid = 0x2a4 [0168.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif")) returned 0x20 [0171.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF", dwFileAttributes=0x20) returned 0 [0171.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.998] GetLastError () returned 0x5 [0171.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF", dwFileAttributes=0x20) returned 0 [0171.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 3837 os_tid = 0xec0 [0168.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif")) returned 0x20 [0172.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF", dwFileAttributes=0x20) returned 0 [0172.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.000] GetLastError () returned 0x5 [0172.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF", dwFileAttributes=0x20) returned 0 [0172.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c958) returned 1 Thread: id = 3838 os_tid = 0x218 [0168.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif")) returned 0x20 [0172.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF", dwFileAttributes=0x20) returned 0 [0172.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.003] GetLastError () returned 0x5 [0172.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF", dwFileAttributes=0x20) returned 0 [0172.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 3839 os_tid = 0x300 [0168.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif")) returned 0x20 [0172.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF", dwFileAttributes=0x20) returned 0 [0172.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.006] GetLastError () returned 0x5 [0172.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF", dwFileAttributes=0x20) returned 0 [0172.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 3840 os_tid = 0x7a8 [0168.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif")) returned 0x20 [0171.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF", dwFileAttributes=0x20) returned 0 [0171.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.733] GetLastError () returned 0x5 [0171.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF", dwFileAttributes=0x20) returned 0 [0171.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 Thread: id = 3841 os_tid = 0x4d0 [0168.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif")) returned 0x20 [0171.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF", dwFileAttributes=0x20) returned 0 [0171.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.768] GetLastError () returned 0x5 [0171.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF", dwFileAttributes=0x20) returned 0 [0171.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 3842 os_tid = 0x784 [0168.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif")) returned 0x20 [0172.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF", dwFileAttributes=0x20) returned 0 [0172.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.008] GetLastError () returned 0x5 [0172.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF", dwFileAttributes=0x20) returned 0 [0172.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 3843 os_tid = 0x5e8 [0168.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif")) returned 0x20 [0171.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF", dwFileAttributes=0x20) returned 0 [0171.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.496] GetLastError () returned 0x5 [0171.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF", dwFileAttributes=0x20) returned 0 [0171.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c708) returned 1 Thread: id = 3844 os_tid = 0xeec [0168.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif")) returned 0x20 [0172.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF", dwFileAttributes=0x20) returned 0 [0172.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.046] GetLastError () returned 0x5 [0172.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF", dwFileAttributes=0x20) returned 0 [0172.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 Thread: id = 3845 os_tid = 0xef0 [0168.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif")) returned 0x20 [0172.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF", dwFileAttributes=0x20) returned 0 [0172.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.044] GetLastError () returned 0x5 [0172.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF", dwFileAttributes=0x20) returned 0 [0172.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d2e8) returned 1 Thread: id = 3846 os_tid = 0xef4 [0168.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif")) returned 0x20 [0172.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF", dwFileAttributes=0x20) returned 0 [0172.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.041] GetLastError () returned 0x5 [0172.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF", dwFileAttributes=0x20) returned 0 [0172.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 Thread: id = 3847 os_tid = 0xa20 [0168.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif")) returned 0x20 [0172.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF", dwFileAttributes=0x20) returned 0 [0172.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.038] GetLastError () returned 0x5 [0172.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF", dwFileAttributes=0x20) returned 0 [0172.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d088) returned 1 Thread: id = 3848 os_tid = 0xee8 [0168.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif")) returned 0x20 [0172.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF", dwFileAttributes=0x20) returned 0 [0172.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.035] GetLastError () returned 0x5 [0172.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF", dwFileAttributes=0x20) returned 0 [0172.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d548) returned 1 Thread: id = 3849 os_tid = 0xee4 [0168.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif")) returned 0x20 [0172.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF", dwFileAttributes=0x20) returned 0 [0172.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.033] GetLastError () returned 0x5 [0172.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF", dwFileAttributes=0x20) returned 0 [0172.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d5e0) returned 1 Thread: id = 3850 os_tid = 0x720 [0168.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif")) returned 0x20 [0172.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF", dwFileAttributes=0x20) returned 0 [0172.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.029] GetLastError () returned 0x5 [0172.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF", dwFileAttributes=0x20) returned 0 [0172.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d418) returned 1 Thread: id = 3851 os_tid = 0xa70 [0168.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif")) returned 0x20 [0172.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF", dwFileAttributes=0x20) returned 0 [0172.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.026] GetLastError () returned 0x5 [0172.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF", dwFileAttributes=0x20) returned 0 [0172.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cbc8) returned 1 Thread: id = 3852 os_tid = 0x1418 [0168.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif")) returned 0x20 [0172.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF", dwFileAttributes=0x20) returned 0 [0172.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.024] GetLastError () returned 0x5 [0172.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF", dwFileAttributes=0x20) returned 0 [0172.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c378) returned 1 Thread: id = 3853 os_tid = 0x1420 [0168.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif")) returned 0x20 [0172.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF", dwFileAttributes=0x20) returned 0 [0172.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.020] GetLastError () returned 0x5 [0172.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF", dwFileAttributes=0x20) returned 0 [0172.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dc68) returned 1 Thread: id = 3854 os_tid = 0x1428 [0168.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif")) returned 0x20 [0172.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF", dwFileAttributes=0x20) returned 0 [0172.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.018] GetLastError () returned 0x5 [0172.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF", dwFileAttributes=0x20) returned 0 [0172.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c2e0) returned 1 Thread: id = 3855 os_tid = 0x142c [0168.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif")) returned 0x20 [0172.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF", dwFileAttributes=0x20) returned 0 [0172.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.015] GetLastError () returned 0x5 [0172.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF", dwFileAttributes=0x20) returned 0 [0172.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c410) returned 1 Thread: id = 3856 os_tid = 0x12dc [0168.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif")) returned 0x20 [0172.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF", dwFileAttributes=0x20) returned 0 [0172.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.013] GetLastError () returned 0x5 [0172.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF", dwFileAttributes=0x20) returned 0 [0172.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd00) returned 1 Thread: id = 3857 os_tid = 0x1430 [0168.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif")) returned 0x20 [0172.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF", dwFileAttributes=0x20) returned 0 [0172.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.010] GetLastError () returned 0x5 [0172.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF", dwFileAttributes=0x20) returned 0 [0172.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 Thread: id = 3858 os_tid = 0x12e8 [0168.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf")) returned 0x20 [0171.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", dwFileAttributes=0x20) returned 0 [0171.657] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.673] GetLastError () returned 0x5 [0171.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", dwFileAttributes=0x20) returned 0 [0171.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054bd0) returned 1 Thread: id = 3859 os_tid = 0x12ec [0168.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties")) returned 0x20 [0171.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", dwFileAttributes=0x20) returned 0 [0171.651] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.651] GetLastError () returned 0x5 [0171.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", dwFileAttributes=0x20) returned 0 [0171.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 Thread: id = 3860 os_tid = 0x368 [0168.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif")) returned 0x20 [0171.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0171.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.915] GetLastError () returned 0x5 [0171.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0171.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5bc0) returned 1 Thread: id = 3861 os_tid = 0x1538 [0168.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif")) returned 0x20 [0171.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0171.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.508] GetLastError () returned 0x5 [0171.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0171.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7d50) returned 1 Thread: id = 3862 os_tid = 0xb94 [0168.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js")) returned 0x20 [0172.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS", dwFileAttributes=0x20) returned 0 [0172.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.127] GetLastError () returned 0x5 [0172.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS", dwFileAttributes=0x20) returned 0 [0172.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 3863 os_tid = 0x153c [0168.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html")) returned 0x20 [0172.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0172.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.126] GetLastError () returned 0x5 [0172.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0172.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1720) returned 1 Thread: id = 3864 os_tid = 0xba0 [0168.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h")) returned 0x20 [0168.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", dwFileAttributes=0x20) returned 0 [0168.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.947] GetLastError () returned 0x5 [0168.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", dwFileAttributes=0x20) returned 0 [0168.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24140) returned 1 Thread: id = 3865 os_tid = 0xba8 [0168.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2")) returned 0x20 [0172.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", dwFileAttributes=0x20) returned 0 [0172.779] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.779] GetLastError () returned 0x5 [0172.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", dwFileAttributes=0x20) returned 0 [0172.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 3866 os_tid = 0xb90 [0168.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v")) returned 0x20 [0172.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", dwFileAttributes=0x20) returned 0 [0172.784] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.784] GetLastError () returned 0x5 [0172.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", dwFileAttributes=0x20) returned 0 [0172.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24240) returned 1 Thread: id = 3867 os_tid = 0xbc8 [0168.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h")) returned 0x20 [0172.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", dwFileAttributes=0x20) returned 0 [0172.782] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.782] GetLastError () returned 0x5 [0172.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", dwFileAttributes=0x20) returned 0 [0172.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 3868 os_tid = 0xbd0 [0168.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v")) returned 0x20 [0172.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", dwFileAttributes=0x20) returned 0 [0172.785] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.785] GetLastError () returned 0x5 [0172.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", dwFileAttributes=0x20) returned 0 [0172.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 3869 os_tid = 0xbe0 [0168.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h")) returned 0x20 [0172.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", dwFileAttributes=0x20) returned 0 [0172.787] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.787] GetLastError () returned 0x5 [0172.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", dwFileAttributes=0x20) returned 0 [0172.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23cc0) returned 1 Thread: id = 3870 os_tid = 0xbec [0168.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v")) returned 0x20 [0172.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", dwFileAttributes=0x20) returned 0 [0172.758] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.758] GetLastError () returned 0x5 [0172.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", dwFileAttributes=0x20) returned 0 [0172.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24040) returned 1 Thread: id = 3871 os_tid = 0xc3c [0168.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-h")) returned 0x20 [0172.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", dwFileAttributes=0x20) returned 0 [0172.781] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.781] GetLastError () returned 0x5 [0172.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", dwFileAttributes=0x20) returned 0 [0172.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 Thread: id = 3872 os_tid = 0xc28 [0168.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-v")) returned 0x20 [0172.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V", dwFileAttributes=0x20) returned 0 [0172.794] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.794] GetLastError () returned 0x5 [0172.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V", dwFileAttributes=0x20) returned 0 [0172.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 Thread: id = 3873 os_tid = 0xc2c [0168.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h")) returned 0x20 [0172.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H", dwFileAttributes=0x20) returned 0 [0172.841] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.841] GetLastError () returned 0x5 [0172.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H", dwFileAttributes=0x20) returned 0 [0172.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23e40) returned 1 Thread: id = 3874 os_tid = 0xc30 [0168.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v")) returned 0x20 [0172.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V", dwFileAttributes=0x20) returned 0 [0172.843] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.843] GetLastError () returned 0x5 [0172.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V", dwFileAttributes=0x20) returned 0 [0172.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e249c0) returned 1 Thread: id = 3875 os_tid = 0xc00 [0168.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h")) returned 0x20 [0172.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H", dwFileAttributes=0x20) returned 0 [0172.793] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.793] GetLastError () returned 0x5 [0172.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H", dwFileAttributes=0x20) returned 0 [0172.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e244c0) returned 1 Thread: id = 3876 os_tid = 0xbfc [0168.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v")) returned 0x20 [0172.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V", dwFileAttributes=0x20) returned 0 [0172.845] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.845] GetLastError () returned 0x5 [0172.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V", dwFileAttributes=0x20) returned 0 [0172.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24640) returned 1 Thread: id = 3877 os_tid = 0x4bc [0168.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h")) returned 0x20 [0172.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H", dwFileAttributes=0x20) returned 0 [0172.807] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.807] GetLastError () returned 0x5 [0172.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H", dwFileAttributes=0x20) returned 0 [0172.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23d40) returned 1 Thread: id = 3878 os_tid = 0x8b4 [0168.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2")) returned 0x20 [0172.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0172.815] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.815] GetLastError () returned 0x5 [0172.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0172.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 3879 os_tid = 0x248 [0168.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v")) returned 0x20 [0172.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V", dwFileAttributes=0x20) returned 0 [0172.817] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.817] GetLastError () returned 0x5 [0172.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V", dwFileAttributes=0x20) returned 0 [0172.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23dc0) returned 1 Thread: id = 3880 os_tid = 0x8c4 [0168.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef56a8 [0168.959] wcscpy (in: _Dest=0x3ef56a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0168.959] wcscat (in: _Dest=0x3ef56a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" [0168.959] wcscat (in: _Dest=0x3ef56a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*" [0168.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f3a0 [0168.960] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e21990, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e240a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e240a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0168.960] wcscmp (_String1=".", _String2=".") returned 0 [0168.960] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e21990, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e240a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e240a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.960] wcscmp (_String1="..", _String2=".") returned 1 [0168.960] wcscmp (_String1="..", _String2="..") returned 0 [0168.960] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e240a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e267b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0168.960] wcscmp (_String1="messages.json", _String2=".") returned 1 [0168.960] wcscmp (_String1="messages.json", _String2="..") returned 1 [0168.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56f00 [0168.960] wcscpy (in: _Dest=0x3d56f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0168.960] wcscat (in: _Dest=0x3d56f00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" [0168.960] wcscat (in: _Dest=0x3d56f00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" [0170.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d56f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8 [0170.112] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e240a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e267b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0170.112] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0170.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f3a0) returned 1 [0170.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef56a8) returned 1 [0170.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef58b8) returned 1 Thread: id = 3881 os_tid = 0x1544 [0168.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f3e88 [0168.961] wcscpy (in: _Dest=0x81f3e88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0168.961] wcscat (in: _Dest=0x81f3e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" [0168.961] wcscat (in: _Dest=0x81f3e88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*" [0168.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fd40 [0168.961] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e2b5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e2dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e2dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0172.456] wcscmp (_String1=".", _String2=".") returned 0 [0172.456] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e2b5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e2dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e2dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.456] wcscmp (_String1="..", _String2=".") returned 1 [0172.456] wcscmp (_String1="..", _String2="..") returned 0 [0172.456] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e2dce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e32b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.456] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.456] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2018 [0172.456] wcscpy (in: _Dest=0x81d2018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0172.456] wcscat (in: _Dest=0x81d2018, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" [0172.456] wcscat (in: _Dest=0x81d2018, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" [0173.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0173.506] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e2dce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e32b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.506] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0173.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fd40) returned 1 [0173.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3e88) returned 1 [0173.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 Thread: id = 3882 os_tid = 0x12f0 [0168.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f3f90 [0168.962] wcscpy (in: _Dest=0x81f3f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0168.962] wcscat (in: _Dest=0x81f3f90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" [0168.962] wcscat (in: _Dest=0x81f3f90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*" [0168.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090478 [0168.962] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e35210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3a030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e3a030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c18 [0172.457] wcscmp (_String1=".", _String2=".") returned 0 [0172.457] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e35210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3a030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e3a030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.457] wcscmp (_String1="..", _String2=".") returned 1 [0172.457] wcscmp (_String1="..", _String2="..") returned 0 [0172.457] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e3a030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3c740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.457] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.457] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2140 [0172.457] wcscpy (in: _Dest=0x81d2140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0172.457] wcscat (in: _Dest=0x81d2140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" [0172.457] wcscat (in: _Dest=0x81d2140, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" [0173.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0173.509] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e3a030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3c740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.509] FindClose (in: hFindFile=0x3f37c18 | out: hFindFile=0x3f37c18) returned 1 [0173.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090478) returned 1 [0173.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3f90) returned 1 [0173.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cd8) returned 1 Thread: id = 3883 os_tid = 0x3c4 [0168.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f4098 [0168.963] wcscpy (in: _Dest=0x81f4098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0168.963] wcscat (in: _Dest=0x81f4098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" [0168.963] wcscat (in: _Dest=0x81f4098, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*" [0168.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fad8 [0168.963] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e3ee50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e43c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e43c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f375d8 [0172.458] wcscmp (_String1=".", _String2=".") returned 0 [0172.458] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e3ee50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e43c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e43c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.458] wcscmp (_String1="..", _String2=".") returned 1 [0172.458] wcscmp (_String1="..", _String2="..") returned 0 [0172.458] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e43c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e46380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.458] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.458] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2268 [0172.458] wcscpy (in: _Dest=0x81d2268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0172.458] wcscat (in: _Dest=0x81d2268, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" [0172.458] wcscat (in: _Dest=0x81d2268, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" [0173.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0173.511] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e43c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e46380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.511] FindClose (in: hFindFile=0x3f375d8 | out: hFindFile=0x3f375d8) returned 1 [0173.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fad8) returned 1 [0173.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4098) returned 1 [0173.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 Thread: id = 3884 os_tid = 0x1548 [0168.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f41a0 [0168.964] wcscpy (in: _Dest=0x81f41a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0168.964] wcscat (in: _Dest=0x81f41a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" [0168.964] wcscat (in: _Dest=0x81f41a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*" [0168.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090948 [0168.964] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e46380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e4b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0172.459] wcscmp (_String1=".", _String2=".") returned 0 [0172.459] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e46380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e4b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.459] wcscmp (_String1="..", _String2=".") returned 1 [0172.459] wcscmp (_String1="..", _String2="..") returned 0 [0172.459] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e4b1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4d8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.459] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.459] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2458 [0172.459] wcscpy (in: _Dest=0x81d2458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0172.459] wcscat (in: _Dest=0x81d2458, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" [0172.459] wcscat (in: _Dest=0x81d2458, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" [0173.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0173.513] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e4b1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4d8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.513] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0173.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090948) returned 1 [0173.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f41a0) returned 1 [0173.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ee8) returned 1 Thread: id = 3885 os_tid = 0xc84 [0168.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f42a8 [0168.965] wcscpy (in: _Dest=0x81f42a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0168.965] wcscat (in: _Dest=0x81f42a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" [0168.965] wcscat (in: _Dest=0x81f42a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*" [0168.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e2c8 [0168.965] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e526d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e54de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e54de0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0172.460] wcscmp (_String1=".", _String2=".") returned 0 [0172.460] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e526d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e54de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e54de0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.460] wcscmp (_String1="..", _String2=".") returned 1 [0172.460] wcscmp (_String1="..", _String2="..") returned 0 [0172.460] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e54de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e574f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.460] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.460] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2580 [0172.460] wcscpy (in: _Dest=0x81d2580, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0172.460] wcscat (in: _Dest=0x81d2580, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" [0172.460] wcscat (in: _Dest=0x81d2580, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" [0173.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0173.515] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e54de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e574f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.515] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0173.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e2c8) returned 1 [0173.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f42a8) returned 1 [0173.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 Thread: id = 3886 os_tid = 0x908 [0168.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f43b0 [0168.966] wcscpy (in: _Dest=0x81f43b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0168.966] wcscat (in: _Dest=0x81f43b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" [0168.966] wcscat (in: _Dest=0x81f43b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*" [0168.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e798 [0168.966] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e5c310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e5ea20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e5ea20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0172.461] wcscmp (_String1=".", _String2=".") returned 0 [0172.461] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e5c310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e5ea20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e5ea20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.461] wcscmp (_String1="..", _String2=".") returned 1 [0172.461] wcscmp (_String1="..", _String2="..") returned 0 [0172.461] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e5ea20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e61130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.461] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.461] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d26a8 [0172.461] wcscpy (in: _Dest=0x81d26a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0172.461] wcscat (in: _Dest=0x81d26a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" [0172.461] wcscat (in: _Dest=0x81d26a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" [0173.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d26a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0173.517] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e5ea20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e61130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.517] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0173.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e798) returned 1 [0173.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f43b0) returned 1 [0173.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60f8) returned 1 Thread: id = 3887 os_tid = 0x7cc [0168.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3dec5f8 [0168.967] wcscpy (in: _Dest=0x3dec5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0168.967] wcscat (in: _Dest=0x3dec5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" [0168.967] wcscat (in: _Dest=0x3dec5f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*" [0168.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047640 [0168.967] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e65f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e68660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e68660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0172.461] wcscmp (_String1=".", _String2=".") returned 0 [0172.461] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e65f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e68660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e68660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.462] wcscmp (_String1="..", _String2=".") returned 1 [0172.462] wcscmp (_String1="..", _String2="..") returned 0 [0172.462] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e68660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e6d480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.462] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.462] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d27d0 [0172.462] wcscpy (in: _Dest=0x81d27d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0172.462] wcscat (in: _Dest=0x81d27d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" [0172.462] wcscat (in: _Dest=0x81d27d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" [0173.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d27d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0173.519] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e68660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e6d480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.519] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0173.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047640) returned 1 [0173.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0173.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6200) returned 1 Thread: id = 3888 os_tid = 0x928 [0168.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3dec3c8 [0168.967] wcscpy (in: _Dest=0x3dec3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0168.967] wcscat (in: _Dest=0x3dec3c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" [0168.967] wcscat (in: _Dest=0x3dec3c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*" [0168.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80490b8 [0168.968] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e6fb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e722a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e722a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37998 [0172.462] wcscmp (_String1=".", _String2=".") returned 0 [0172.462] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e6fb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e722a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e722a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.462] wcscmp (_String1="..", _String2=".") returned 1 [0172.463] wcscmp (_String1="..", _String2="..") returned 0 [0172.463] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e722a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e770c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.463] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.463] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d28f8 [0172.463] wcscpy (in: _Dest=0x81d28f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0172.463] wcscat (in: _Dest=0x81d28f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" [0172.463] wcscat (in: _Dest=0x81d28f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" [0173.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d28f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0173.525] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e722a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e770c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.525] FindClose (in: hFindFile=0x3f37998 | out: hFindFile=0x3f37998) returned 1 [0173.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80490b8) returned 1 [0173.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0173.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6308) returned 1 Thread: id = 3889 os_tid = 0x95c [0168.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f44b8 [0168.968] wcscpy (in: _Dest=0x81f44b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0168.968] wcscat (in: _Dest=0x81f44b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" [0168.968] wcscat (in: _Dest=0x81f44b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*" [0168.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047fe0 [0168.968] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e797d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e7bee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e7bee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37958 [0172.463] wcscmp (_String1=".", _String2=".") returned 0 [0172.463] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e797d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e7bee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e7bee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.463] wcscmp (_String1="..", _String2=".") returned 1 [0172.463] wcscmp (_String1="..", _String2="..") returned 0 [0172.463] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e7bee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e80d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.463] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.464] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2a20 [0172.464] wcscpy (in: _Dest=0x81d2a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0172.464] wcscat (in: _Dest=0x81d2a20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" [0172.464] wcscat (in: _Dest=0x81d2a20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" [0173.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0173.528] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e7bee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e80d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.528] FindClose (in: hFindFile=0x3f37958 | out: hFindFile=0x3f37958) returned 1 [0173.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047fe0) returned 1 [0173.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f44b8) returned 1 [0173.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6410) returned 1 Thread: id = 3890 os_tid = 0x97c [0168.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec4e0 [0168.969] wcscpy (in: _Dest=0x3dec4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0168.969] wcscat (in: _Dest=0x3dec4e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" [0168.969] wcscat (in: _Dest=0x3dec4e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*" [0168.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048248 [0168.969] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e83410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e85b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e85b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38358 [0172.464] wcscmp (_String1=".", _String2=".") returned 0 [0172.464] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e83410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e85b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e85b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.464] wcscmp (_String1="..", _String2=".") returned 1 [0172.464] wcscmp (_String1="..", _String2="..") returned 0 [0172.464] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e85b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8a940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.464] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.464] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81d2b48 [0172.465] wcscpy (in: _Dest=0x81d2b48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0172.465] wcscat (in: _Dest=0x81d2b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" [0172.465] wcscat (in: _Dest=0x81d2b48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" [0175.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a8 [0175.594] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e85b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8a940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.594] FindClose (in: hFindFile=0x3f38358 | out: hFindFile=0x3f38358) returned 1 [0175.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048248) returned 1 [0175.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0175.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 Thread: id = 3891 os_tid = 0x154c [0168.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f45c0 [0168.970] wcscpy (in: _Dest=0x81f45c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0168.970] wcscat (in: _Dest=0x81f45c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" [0168.970] wcscat (in: _Dest=0x81f45c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*" [0168.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049320 [0168.970] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e8d050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8f760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e8f760, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0172.465] wcscmp (_String1=".", _String2=".") returned 0 [0172.465] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e8d050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8f760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e8f760, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.465] wcscmp (_String1="..", _String2=".") returned 1 [0172.465] wcscmp (_String1="..", _String2="..") returned 0 [0172.465] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e8f760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e94580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.465] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.465] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2c70 [0172.466] wcscpy (in: _Dest=0x81d2c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0172.466] wcscat (in: _Dest=0x81d2c70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" [0172.466] wcscat (in: _Dest=0x81d2c70, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" [0175.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0175.597] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e8f760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e94580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.597] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0175.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049320) returned 1 [0175.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f45c0) returned 1 [0175.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6518) returned 1 Thread: id = 3892 os_tid = 0x1550 [0168.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f46c8 [0168.970] wcscpy (in: _Dest=0x81f46c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0168.970] wcscat (in: _Dest=0x81f46c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" [0168.971] wcscat (in: _Dest=0x81f46c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*" [0168.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a190 [0168.971] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e96c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9bab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e9bab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0172.466] wcscmp (_String1=".", _String2=".") returned 0 [0172.466] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e96c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9bab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e9bab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.466] wcscmp (_String1="..", _String2=".") returned 1 [0172.466] wcscmp (_String1="..", _String2="..") returned 0 [0172.466] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e993a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9e1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.466] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.466] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2d98 [0172.466] wcscpy (in: _Dest=0x81d2d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0172.467] wcscat (in: _Dest=0x81d2d98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" [0172.467] wcscat (in: _Dest=0x81d2d98, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" [0175.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0175.599] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e993a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9e1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.599] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0175.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a190) returned 1 [0175.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f46c8) returned 1 [0175.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6620) returned 1 Thread: id = 3893 os_tid = 0x1558 [0168.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f47d0 [0168.971] wcscpy (in: _Dest=0x81f47d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0168.971] wcscat (in: _Dest=0x81f47d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" [0168.971] wcscat (in: _Dest=0x81f47d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*" [0168.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80484b0 [0168.971] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ea2fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea56f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ea56f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b58 [0172.467] wcscmp (_String1=".", _String2=".") returned 0 [0172.467] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ea2fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea56f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ea56f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.467] wcscmp (_String1="..", _String2=".") returned 1 [0172.467] wcscmp (_String1="..", _String2="..") returned 0 [0172.467] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ea56f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea7e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.467] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.467] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d2ec0 [0172.467] wcscpy (in: _Dest=0x81d2ec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0172.468] wcscat (in: _Dest=0x81d2ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" [0172.468] wcscat (in: _Dest=0x81d2ec0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" [0175.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0175.601] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ea56f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea7e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.601] FindClose (in: hFindFile=0x3f37b58 | out: hFindFile=0x3f37b58) returned 1 [0175.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80484b0) returned 1 [0175.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f47d0) returned 1 [0175.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6728) returned 1 Thread: id = 3894 os_tid = 0x72c [0168.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f48d8 [0168.972] wcscpy (in: _Dest=0x81f48d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0168.972] wcscat (in: _Dest=0x81f48d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" [0168.972] wcscat (in: _Dest=0x81f48d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*" [0168.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80497f0 [0168.972] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eacc20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eaf330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eaf330, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37698 [0172.468] wcscmp (_String1=".", _String2=".") returned 0 [0172.468] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eacc20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eaf330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eaf330, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.468] wcscmp (_String1="..", _String2=".") returned 1 [0172.468] wcscmp (_String1="..", _String2="..") returned 0 [0172.468] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eaf330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb1a40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.468] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.468] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2fe8 [0172.469] wcscpy (in: _Dest=0x81d2fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0172.469] wcscat (in: _Dest=0x81d2fe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" [0172.469] wcscat (in: _Dest=0x81d2fe8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" [0175.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0175.604] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eaf330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb1a40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.604] FindClose (in: hFindFile=0x3f37698 | out: hFindFile=0x3f37698) returned 1 [0175.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80497f0) returned 1 [0175.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f48d8) returned 1 [0175.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6830) returned 1 Thread: id = 3895 os_tid = 0x1560 [0168.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f49e0 [0168.973] wcscpy (in: _Dest=0x81f49e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0168.973] wcscat (in: _Dest=0x81f49e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" [0168.973] wcscat (in: _Dest=0x81f49e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*" [0168.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80473d8 [0168.973] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eb1a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb6860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eb6860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0172.469] wcscmp (_String1=".", _String2=".") returned 0 [0172.469] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eb1a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb6860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eb6860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.469] wcscmp (_String1="..", _String2=".") returned 1 [0172.469] wcscmp (_String1="..", _String2="..") returned 0 [0172.469] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eb6860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb8f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.469] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.469] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d3110 [0172.470] wcscpy (in: _Dest=0x81d3110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0172.470] wcscat (in: _Dest=0x81d3110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" [0172.470] wcscat (in: _Dest=0x81d3110, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" [0175.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0175.606] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eb6860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb8f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.606] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0175.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80473d8) returned 1 [0175.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f49e0) returned 1 [0175.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6938) returned 1 Thread: id = 3896 os_tid = 0x157c [0168.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f4ae8 [0168.974] wcscpy (in: _Dest=0x81f4ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0168.974] wcscat (in: _Dest=0x81f4ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" [0168.974] wcscat (in: _Dest=0x81f4ae8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*" [0168.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048718 [0168.974] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ebdd90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec04a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ec04a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38058 [0172.470] wcscmp (_String1=".", _String2=".") returned 0 [0172.470] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ebdd90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec04a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ec04a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.470] wcscmp (_String1="..", _String2=".") returned 1 [0172.470] wcscmp (_String1="..", _String2="..") returned 0 [0172.470] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ec04a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec2bb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.470] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.470] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d3238 [0172.470] wcscpy (in: _Dest=0x81d3238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0172.470] wcscat (in: _Dest=0x81d3238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" [0172.471] wcscat (in: _Dest=0x81d3238, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" [0175.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0175.608] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ec04a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec2bb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.608] FindClose (in: hFindFile=0x3f38058 | out: hFindFile=0x3f38058) returned 1 [0175.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048718) returned 1 [0175.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4ae8) returned 1 [0175.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6a40) returned 1 Thread: id = 3897 os_tid = 0x1580 [0168.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f4bf0 [0168.974] wcscpy (in: _Dest=0x81f4bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0168.974] wcscat (in: _Dest=0x81f4bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" [0168.974] wcscat (in: _Dest=0x81f4bf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*" [0168.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0168.974] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ec52c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eca0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eca0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37cd8 [0172.471] wcscmp (_String1=".", _String2=".") returned 0 [0172.471] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ec52c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eca0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eca0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.471] wcscmp (_String1="..", _String2=".") returned 1 [0172.471] wcscmp (_String1="..", _String2="..") returned 0 [0172.471] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eca0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ecc7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.471] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.471] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d3360 [0172.471] wcscpy (in: _Dest=0x81d3360, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0172.471] wcscat (in: _Dest=0x81d3360, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" [0172.472] wcscat (in: _Dest=0x81d3360, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" [0175.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0175.611] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eca0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ecc7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.611] FindClose (in: hFindFile=0x3f37cd8 | out: hFindFile=0x3f37cd8) returned 1 [0175.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0175.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4bf0) returned 1 [0175.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3648) returned 1 Thread: id = 3898 os_tid = 0x534 [0168.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f4cf8 [0168.975] wcscpy (in: _Dest=0x81f4cf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0168.975] wcscat (in: _Dest=0x81f4cf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" [0168.975] wcscat (in: _Dest=0x81f4cf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*" [0168.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047b10 [0168.975] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ed1610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed3d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ed3d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0172.472] wcscmp (_String1=".", _String2=".") returned 0 [0172.472] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ed1610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed3d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ed3d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.472] wcscmp (_String1="..", _String2=".") returned 1 [0172.472] wcscmp (_String1="..", _String2="..") returned 0 [0172.472] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed3d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed8b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.473] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.473] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d3488 [0172.473] wcscpy (in: _Dest=0x81d3488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0172.473] wcscat (in: _Dest=0x81d3488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" [0172.473] wcscat (in: _Dest=0x81d3488, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" [0175.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0175.613] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed3d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed8b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.613] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0175.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047b10) returned 1 [0175.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4cf8) returned 1 [0175.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3750) returned 1 Thread: id = 3899 os_tid = 0x1584 [0168.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f4e00 [0168.976] wcscpy (in: _Dest=0x81f4e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0168.976] wcscat (in: _Dest=0x81f4e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" [0168.976] wcscat (in: _Dest=0x81f4e00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*" [0168.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049f28 [0168.976] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5edd960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee0070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee0070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37858 [0172.473] wcscmp (_String1=".", _String2=".") returned 0 [0172.473] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5edd960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee0070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee0070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.473] wcscmp (_String1="..", _String2=".") returned 1 [0172.473] wcscmp (_String1="..", _String2="..") returned 0 [0172.473] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee0070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee2780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.474] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.474] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d35b0 [0172.474] wcscpy (in: _Dest=0x81d35b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0172.474] wcscat (in: _Dest=0x81d35b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" [0172.474] wcscat (in: _Dest=0x81d35b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" [0175.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d35b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0175.615] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee0070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee2780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.615] FindClose (in: hFindFile=0x3f37858 | out: hFindFile=0x3f37858) returned 1 [0175.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049f28) returned 1 [0175.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4e00) returned 1 [0175.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3858) returned 1 Thread: id = 3900 os_tid = 0x1588 [0168.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f4f08 [0168.977] wcscpy (in: _Dest=0x81f4f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0168.977] wcscat (in: _Dest=0x81f4f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" [0168.977] wcscat (in: _Dest=0x81f4f08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*" [0168.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a3f8 [0168.977] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee75a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee9cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee9cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0172.476] wcscmp (_String1=".", _String2=".") returned 0 [0172.476] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee75a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee9cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee9cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.477] wcscmp (_String1="..", _String2=".") returned 1 [0172.477] wcscmp (_String1="..", _String2="..") returned 0 [0172.477] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee9cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eec3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.477] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.477] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d3928 [0172.477] wcscpy (in: _Dest=0x81d3928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0172.477] wcscat (in: _Dest=0x81d3928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" [0172.477] wcscat (in: _Dest=0x81d3928, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" [0175.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0175.621] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee9cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eec3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.621] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0175.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a3f8) returned 1 [0175.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4f08) returned 1 [0175.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3960) returned 1 Thread: id = 3901 os_tid = 0x12f8 [0168.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5010 [0168.982] wcscpy (in: _Dest=0x81f5010, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0168.982] wcscat (in: _Dest=0x81f5010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" [0168.982] wcscat (in: _Dest=0x81f5010, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*" [0168.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047d78 [0168.982] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ef11e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef38f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ef38f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ad8 [0172.474] wcscmp (_String1=".", _String2=".") returned 0 [0172.475] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ef11e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef38f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ef38f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.475] wcscmp (_String1="..", _String2=".") returned 1 [0172.475] wcscmp (_String1="..", _String2="..") returned 0 [0172.475] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ef38f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef6000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.475] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.475] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d36d8 [0172.475] wcscpy (in: _Dest=0x81d36d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0172.475] wcscat (in: _Dest=0x81d36d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" [0172.475] wcscat (in: _Dest=0x81d36d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" [0175.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d36d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0175.617] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ef38f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef6000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.617] FindClose (in: hFindFile=0x3f37ad8 | out: hFindFile=0x3f37ad8) returned 1 [0175.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047d78) returned 1 [0175.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5010) returned 1 [0175.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3a68) returned 1 Thread: id = 3902 os_tid = 0x474 [0168.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5118 [0168.982] wcscpy (in: _Dest=0x81f5118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0168.982] wcscat (in: _Dest=0x81f5118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" [0168.982] wcscat (in: _Dest=0x81f5118, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*" [0168.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047170 [0168.983] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5efae20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5efd530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5efd530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37558 [0172.475] wcscmp (_String1=".", _String2=".") returned 0 [0172.475] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5efae20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5efd530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5efd530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.475] wcscmp (_String1="..", _String2=".") returned 1 [0172.476] wcscmp (_String1="..", _String2="..") returned 0 [0172.476] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5efd530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5effc40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.476] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.476] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d3800 [0172.476] wcscpy (in: _Dest=0x81d3800, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0172.476] wcscat (in: _Dest=0x81d3800, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" [0172.476] wcscat (in: _Dest=0x81d3800, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" [0175.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0175.619] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5efd530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5effc40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.619] FindClose (in: hFindFile=0x3f37558 | out: hFindFile=0x3f37558) returned 1 [0175.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047170) returned 1 [0175.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5118) returned 1 [0175.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3b70) returned 1 Thread: id = 3903 os_tid = 0xedc [0169.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f6cf8 [0169.371] wcscpy (in: _Dest=0x81f6cf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0169.371] wcscat (in: _Dest=0x81f6cf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" [0169.371] wcscat (in: _Dest=0x81f6cf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*" [0169.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0aac8 [0169.371] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f04a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f07170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f07170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0171.741] wcscmp (_String1=".", _String2=".") returned 0 [0171.741] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f04a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f07170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f07170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.741] wcscmp (_String1="..", _String2=".") returned 1 [0171.741] wcscmp (_String1="..", _String2="..") returned 0 [0171.741] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f07170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f09880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.741] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.741] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56498 [0171.741] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0171.741] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" [0171.741] wcscat (in: _Dest=0x3d56498, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" [0179.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0179.132] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f07170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f09880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.132] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0179.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0aac8) returned 1 [0179.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6cf8) returned 1 [0179.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3c78) returned 1 Thread: id = 3904 os_tid = 0xe80 [0169.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf")) returned 0x20 [0171.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x20) returned 0 [0171.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.821] GetLastError () returned 0x5 [0171.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x20) returned 0 [0171.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3008) returned 1 Thread: id = 3905 os_tid = 0xe6c [0169.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf")) returned 0x20 [0171.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x20) returned 0 [0171.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.819] GetLastError () returned 0x5 [0171.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x20) returned 0 [0171.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 Thread: id = 3906 os_tid = 0xe70 [0169.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf")) returned 0x20 [0171.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x20) returned 0 [0171.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.432] GetLastError () returned 0x5 [0171.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x20) returned 0 [0171.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf5e0) returned 1 Thread: id = 3907 os_tid = 0xee0 [0169.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm")) returned 0x20 [0172.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM", dwFileAttributes=0x20) returned 0 [0172.720] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.725] GetLastError () returned 0x5 [0172.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM", dwFileAttributes=0x20) returned 0 [0172.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df418) returned 1 Thread: id = 3908 os_tid = 0x158c [0169.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm")) returned 0x20 [0172.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm", dwFileAttributes=0x20) returned 0 [0172.621] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.621] GetLastError () returned 0x5 [0172.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm", dwFileAttributes=0x20) returned 0 [0172.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 Thread: id = 3909 os_tid = 0xe78 [0169.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm")) returned 0x20 [0172.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm", dwFileAttributes=0x20) returned 0 [0172.209] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.209] GetLastError () returned 0x5 [0172.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm", dwFileAttributes=0x20) returned 0 [0172.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dde28) returned 1 Thread: id = 3910 os_tid = 0xe84 [0169.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer")) returned 0x20 [0172.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x20) returned 0 [0172.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.393] GetLastError () returned 0x5 [0172.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x20) returned 0 [0172.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 3911 os_tid = 0xe64 [0169.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32ac0 [0169.375] wcscpy (in: _Dest=0x3f32ac0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0169.375] wcscat (in: _Dest=0x3f32ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0169.375] wcscat (in: _Dest=0x3f32ac0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*" [0169.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07840 [0169.375] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ebaf70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fba8950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0172.919] wcscmp (_String1=".", _String2=".") returned 0 [0172.919] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ebaf70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fba8950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.919] wcscmp (_String1="..", _String2=".") returned 1 [0172.919] wcscmp (_String1="..", _String2="..") returned 0 [0172.920] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b58100, ftCreationTime.dwHighDateTime=0x1ca114b, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46b58100, ftLastWriteTime.dwHighDateTime=0x1ca114b, nFileSizeHigh=0x0, nFileSizeLow=0xfb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL001.XML", cAlternateFileName="")) returned 1 [0172.920] wcscmp (_String1="PGLBL001.XML", _String2=".") returned 1 [0172.920] wcscmp (_String1="PGLBL001.XML", _String2="..") returned 1 [0172.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df418 [0172.920] wcscpy (in: _Dest=0x81df418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0172.920] wcscat (in: _Dest=0x81df418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0172.920] wcscat (in: _Dest=0x81df418, _Source="PGLBL001.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" [0177.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac8 [0177.483] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf70e7800, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf70e7800, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0x15b1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL002.XML", cAlternateFileName="")) returned 1 [0177.483] wcscmp (_String1="PGLBL002.XML", _String2=".") returned 1 [0177.483] wcscmp (_String1="PGLBL002.XML", _String2="..") returned 1 [0177.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dede8 [0177.483] wcscpy (in: _Dest=0x81dede8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.483] wcscat (in: _Dest=0x81dede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.483] wcscat (in: _Dest=0x81dede8, _Source="PGLBL002.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" [0177.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0177.484] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b1c900, ftCreationTime.dwHighDateTime=0x1c9f507, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1b1c900, ftLastWriteTime.dwHighDateTime=0x1c9f507, nFileSizeHigh=0x0, nFileSizeLow=0x33a1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL010.XML", cAlternateFileName="")) returned 1 [0177.484] wcscmp (_String1="PGLBL010.XML", _String2=".") returned 1 [0177.484] wcscmp (_String1="PGLBL010.XML", _String2="..") returned 1 [0177.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df1d8 [0177.484] wcscpy (in: _Dest=0x81df1d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.484] wcscat (in: _Dest=0x81df1d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.484] wcscat (in: _Dest=0x81df1d8, _Source="PGLBL010.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" [0177.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0177.486] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8640e00, ftCreationTime.dwHighDateTime=0x1c6626a, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8640e00, ftLastWriteTime.dwHighDateTime=0x1c6626a, nFileSizeHigh=0x0, nFileSizeLow=0x1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL011.XML", cAlternateFileName="")) returned 1 [0177.486] wcscmp (_String1="PGLBL011.XML", _String2=".") returned 1 [0177.486] wcscmp (_String1="PGLBL011.XML", _String2="..") returned 1 [0177.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de848 [0177.486] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.486] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.486] wcscat (in: _Dest=0x81de848, _Source="PGLBL011.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" [0177.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0177.487] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x331f0700, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x331f0700, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0xa5178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL012.XML", cAlternateFileName="")) returned 1 [0177.487] wcscmp (_String1="PGLBL012.XML", _String2=".") returned 1 [0177.487] wcscmp (_String1="PGLBL012.XML", _String2="..") returned 1 [0177.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dde28 [0177.487] wcscpy (in: _Dest=0x81dde28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.487] wcscat (in: _Dest=0x81dde28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.487] wcscat (in: _Dest=0x81dde28, _Source="PGLBL012.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" [0177.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dde28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0177.488] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fce2100, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5fce2100, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0x22cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL016.XML", cAlternateFileName="")) returned 1 [0177.488] wcscmp (_String1="PGLBL016.XML", _String2=".") returned 1 [0177.488] wcscmp (_String1="PGLBL016.XML", _String2="..") returned 1 [0177.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df028 [0177.489] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.489] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.489] wcscat (in: _Dest=0x81df028, _Source="PGLBL016.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" [0177.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0177.490] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff0e8c00, ftCreationTime.dwHighDateTime=0x1c6c230, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff0e8c00, ftLastWriteTime.dwHighDateTime=0x1c6c230, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL020.XML", cAlternateFileName="")) returned 1 [0177.490] wcscmp (_String1="PGLBL020.XML", _String2=".") returned 1 [0177.490] wcscmp (_String1="PGLBL020.XML", _String2="..") returned 1 [0177.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de3c8 [0177.490] wcscpy (in: _Dest=0x81de3c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.490] wcscat (in: _Dest=0x81de3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.490] wcscat (in: _Dest=0x81de3c8, _Source="PGLBL020.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" [0177.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0177.491] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a94100, ftCreationTime.dwHighDateTime=0x1ca1b8d, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28a94100, ftLastWriteTime.dwHighDateTime=0x1ca1b8d, nFileSizeHigh=0x0, nFileSizeLow=0x24c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL022.XML", cAlternateFileName="")) returned 1 [0177.491] wcscmp (_String1="PGLBL022.XML", _String2=".") returned 1 [0177.491] wcscmp (_String1="PGLBL022.XML", _String2="..") returned 1 [0177.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de338 [0177.491] wcscpy (in: _Dest=0x81de338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.492] wcscat (in: _Dest=0x81de338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.492] wcscat (in: _Dest=0x81de338, _Source="PGLBL022.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" [0177.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0177.493] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8640e00, ftCreationTime.dwHighDateTime=0x1c6626a, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8640e00, ftLastWriteTime.dwHighDateTime=0x1c6626a, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL026.XML", cAlternateFileName="")) returned 1 [0177.493] wcscmp (_String1="PGLBL026.XML", _String2=".") returned 1 [0177.493] wcscmp (_String1="PGLBL026.XML", _String2="..") returned 1 [0177.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de2a8 [0177.493] wcscpy (in: _Dest=0x81de2a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.493] wcscat (in: _Dest=0x81de2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.493] wcscat (in: _Dest=0x81de2a8, _Source="PGLBL026.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" [0177.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0177.494] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe96d7200, ftCreationTime.dwHighDateTime=0x1c9f66a, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe96d7200, ftLastWriteTime.dwHighDateTime=0x1c9f66a, nFileSizeHigh=0x0, nFileSizeLow=0x6d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL027.XML", cAlternateFileName="")) returned 1 [0177.494] wcscmp (_String1="PGLBL027.XML", _String2=".") returned 1 [0177.494] wcscmp (_String1="PGLBL027.XML", _String2="..") returned 1 [0177.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81def08 [0177.494] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.494] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.494] wcscat (in: _Dest=0x81def08, _Source="PGLBL027.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" [0177.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0177.496] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98e76800, ftCreationTime.dwHighDateTime=0x1c9e462, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x98e76800, ftLastWriteTime.dwHighDateTime=0x1c9e462, nFileSizeHigh=0x0, nFileSizeLow=0x266a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL044.XML", cAlternateFileName="")) returned 1 [0177.496] wcscmp (_String1="PGLBL044.XML", _String2=".") returned 1 [0177.496] wcscmp (_String1="PGLBL044.XML", _String2="..") returned 1 [0177.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df2f8 [0177.496] wcscpy (in: _Dest=0x81df2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.496] wcscat (in: _Dest=0x81df2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.496] wcscat (in: _Dest=0x81df2f8, _Source="PGLBL044.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" [0177.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0177.498] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadaf8500, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xadaf8500, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x10e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL048.XML", cAlternateFileName="")) returned 1 [0177.498] wcscmp (_String1="PGLBL048.XML", _String2=".") returned 1 [0177.498] wcscmp (_String1="PGLBL048.XML", _String2="..") returned 1 [0177.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81def98 [0177.498] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.499] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.499] wcscat (in: _Dest=0x81def98, _Source="PGLBL048.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" [0177.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0177.500] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87603d00, ftCreationTime.dwHighDateTime=0x1c9f669, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87603d00, ftLastWriteTime.dwHighDateTime=0x1c9f669, nFileSizeHigh=0x0, nFileSizeLow=0x59f76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL054.XML", cAlternateFileName="")) returned 1 [0177.500] wcscmp (_String1="PGLBL054.XML", _String2=".") returned 1 [0177.500] wcscmp (_String1="PGLBL054.XML", _String2="..") returned 1 [0177.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de968 [0177.500] wcscpy (in: _Dest=0x81de968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.500] wcscat (in: _Dest=0x81de968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.500] wcscat (in: _Dest=0x81de968, _Source="PGLBL054.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" [0177.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0177.501] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4017300, ftCreationTime.dwHighDateTime=0x1c6b721, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4017300, ftLastWriteTime.dwHighDateTime=0x1c6b721, nFileSizeHigh=0x0, nFileSizeLow=0x26c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL058.XML", cAlternateFileName="")) returned 1 [0177.501] wcscmp (_String1="PGLBL058.XML", _String2=".") returned 1 [0177.501] wcscmp (_String1="PGLBL058.XML", _String2="..") returned 1 [0177.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de218 [0177.501] wcscpy (in: _Dest=0x81de218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.501] wcscat (in: _Dest=0x81de218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.502] wcscat (in: _Dest=0x81de218, _Source="PGLBL058.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" [0177.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0177.503] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fcb000, ftCreationTime.dwHighDateTime=0x1c68f54, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1fcb000, ftLastWriteTime.dwHighDateTime=0x1c68f54, nFileSizeHigh=0x0, nFileSizeLow=0x165d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL065.XML", cAlternateFileName="")) returned 1 [0177.503] wcscmp (_String1="PGLBL065.XML", _String2=".") returned 1 [0177.503] wcscmp (_String1="PGLBL065.XML", _String2="..") returned 1 [0177.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81deb18 [0177.503] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.503] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.503] wcscat (in: _Dest=0x81deb18, _Source="PGLBL065.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" [0177.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81deb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0177.504] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25625600, ftCreationTime.dwHighDateTime=0x1c69b23, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25625600, ftLastWriteTime.dwHighDateTime=0x1c69b23, nFileSizeHigh=0x0, nFileSizeLow=0xacb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL075.XML", cAlternateFileName="")) returned 1 [0177.504] wcscmp (_String1="PGLBL075.XML", _String2=".") returned 1 [0177.504] wcscmp (_String1="PGLBL075.XML", _String2="..") returned 1 [0177.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dec38 [0177.505] wcscpy (in: _Dest=0x81dec38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.505] wcscat (in: _Dest=0x81dec38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.505] wcscat (in: _Dest=0x81dec38, _Source="PGLBL075.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" [0177.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dec38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0177.506] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9101f600, ftCreationTime.dwHighDateTime=0x1c6c59d, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9101f600, ftLastWriteTime.dwHighDateTime=0x1c6c59d, nFileSizeHigh=0x0, nFileSizeLow=0x6134, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL077.XML", cAlternateFileName="")) returned 1 [0177.506] wcscmp (_String1="PGLBL077.XML", _String2=".") returned 1 [0177.506] wcscmp (_String1="PGLBL077.XML", _String2="..") returned 1 [0177.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df4a8 [0177.506] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.506] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.506] wcscat (in: _Dest=0x81df4a8, _Source="PGLBL077.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" [0177.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0177.507] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8b8100, ftCreationTime.dwHighDateTime=0x1c6bf3f, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c8b8100, ftLastWriteTime.dwHighDateTime=0x1c6bf3f, nFileSizeHigh=0x0, nFileSizeLow=0x753, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL078.XML", cAlternateFileName="")) returned 1 [0177.508] wcscmp (_String1="PGLBL078.XML", _String2=".") returned 1 [0177.508] wcscmp (_String1="PGLBL078.XML", _String2="..") returned 1 [0177.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de698 [0177.508] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.508] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.508] wcscat (in: _Dest=0x81de698, _Source="PGLBL078.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" [0177.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0177.509] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27334500, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fb103d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27334500, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0xe944e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL081.XML", cAlternateFileName="")) returned 1 [0177.509] wcscmp (_String1="PGLBL081.XML", _String2=".") returned 1 [0177.509] wcscmp (_String1="PGLBL081.XML", _String2="..") returned 1 [0177.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de0f8 [0177.509] wcscpy (in: _Dest=0x81de0f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.509] wcscat (in: _Dest=0x81de0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.509] wcscat (in: _Dest=0x81de0f8, _Source="PGLBL081.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" [0177.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0177.510] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc685900, ftCreationTime.dwHighDateTime=0x1ca0bba, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc685900, ftLastWriteTime.dwHighDateTime=0x1ca0bba, nFileSizeHigh=0x0, nFileSizeLow=0x38d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL082.XML", cAlternateFileName="")) returned 1 [0177.511] wcscmp (_String1="PGLBL082.XML", _String2=".") returned 1 [0177.511] wcscmp (_String1="PGLBL082.XML", _String2="..") returned 1 [0177.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de8d8 [0177.511] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.511] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.511] wcscat (in: _Dest=0x81de8d8, _Source="PGLBL082.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" [0177.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0177.512] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64451000, ftCreationTime.dwHighDateTime=0x1ca264f, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64451000, ftLastWriteTime.dwHighDateTime=0x1ca264f, nFileSizeHigh=0x0, nFileSizeLow=0x8cda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL083.XML", cAlternateFileName="")) returned 1 [0177.512] wcscmp (_String1="PGLBL083.XML", _String2=".") returned 1 [0177.512] wcscmp (_String1="PGLBL083.XML", _String2="..") returned 1 [0177.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de4e8 [0177.512] wcscpy (in: _Dest=0x81de4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.512] wcscat (in: _Dest=0x81de4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.513] wcscat (in: _Dest=0x81de4e8, _Source="PGLBL083.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" [0177.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0177.514] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e48ff00, ftCreationTime.dwHighDateTime=0x1c6d8fb, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e48ff00, ftLastWriteTime.dwHighDateTime=0x1c6d8fb, nFileSizeHigh=0x0, nFileSizeLow=0xab732, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL086.XML", cAlternateFileName="")) returned 1 [0177.514] wcscmp (_String1="PGLBL086.XML", _String2=".") returned 1 [0177.514] wcscmp (_String1="PGLBL086.XML", _String2="..") returned 1 [0177.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de458 [0177.514] wcscpy (in: _Dest=0x81de458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.514] wcscat (in: _Dest=0x81de458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.514] wcscat (in: _Dest=0x81de458, _Source="PGLBL086.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" [0177.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0177.516] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e0b7800, ftCreationTime.dwHighDateTime=0x1c6bf44, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e0b7800, ftLastWriteTime.dwHighDateTime=0x1c6bf44, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL087.XML", cAlternateFileName="")) returned 1 [0177.516] wcscmp (_String1="PGLBL087.XML", _String2=".") returned 1 [0177.516] wcscmp (_String1="PGLBL087.XML", _String2="..") returned 1 [0177.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddeb8 [0177.516] wcscpy (in: _Dest=0x81ddeb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.516] wcscat (in: _Dest=0x81ddeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.516] wcscat (in: _Dest=0x81ddeb8, _Source="PGLBL087.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" [0177.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0177.517] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc8ad00, ftCreationTime.dwHighDateTime=0x1ca0969, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dc8ad00, ftLastWriteTime.dwHighDateTime=0x1ca0969, nFileSizeHigh=0x0, nFileSizeLow=0xb532, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL089.XML", cAlternateFileName="")) returned 1 [0177.517] wcscmp (_String1="PGLBL089.XML", _String2=".") returned 1 [0177.517] wcscmp (_String1="PGLBL089.XML", _String2="..") returned 1 [0177.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0177.518] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.518] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.518] wcscat (in: _Dest=0x81de7b8, _Source="PGLBL089.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" [0177.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0177.655] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf912800, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf912800, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x124b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL090.XML", cAlternateFileName="")) returned 1 [0177.655] wcscmp (_String1="PGLBL090.XML", _String2=".") returned 1 [0177.655] wcscmp (_String1="PGLBL090.XML", _String2="..") returned 1 [0177.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de188 [0177.656] wcscpy (in: _Dest=0x81de188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.656] wcscat (in: _Dest=0x81de188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.656] wcscat (in: _Dest=0x81de188, _Source="PGLBL090.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" [0179.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0179.099] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59976f00, ftCreationTime.dwHighDateTime=0x1ca1ba9, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59976f00, ftLastWriteTime.dwHighDateTime=0x1ca1ba9, nFileSizeHigh=0x0, nFileSizeLow=0x19a22, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL092.XML", cAlternateFileName="")) returned 1 [0179.100] wcscmp (_String1="PGLBL092.XML", _String2=".") returned 1 [0179.100] wcscmp (_String1="PGLBL092.XML", _String2="..") returned 1 [0179.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddb58 [0179.100] wcscpy (in: _Dest=0x81ddb58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.100] wcscat (in: _Dest=0x81ddb58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.100] wcscat (in: _Dest=0x81ddb58, _Source="PGLBL092.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" [0179.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0179.101] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a2c900, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5a2c900, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0xb3da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL093.XML", cAlternateFileName="")) returned 1 [0179.101] wcscmp (_String1="PGLBL093.XML", _String2=".") returned 1 [0179.101] wcscmp (_String1="PGLBL093.XML", _String2="..") returned 1 [0179.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dd648 [0179.102] wcscpy (in: _Dest=0x81dd648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.102] wcscat (in: _Dest=0x81dd648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.102] wcscat (in: _Dest=0x81dd648, _Source="PGLBL093.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" [0179.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0179.103] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e96300, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7e96300, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x1a1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL095.XML", cAlternateFileName="")) returned 1 [0179.103] wcscmp (_String1="PGLBL095.XML", _String2=".") returned 1 [0179.103] wcscmp (_String1="PGLBL095.XML", _String2="..") returned 1 [0179.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df0b8 [0179.103] wcscpy (in: _Dest=0x81df0b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.103] wcscat (in: _Dest=0x81df0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.103] wcscat (in: _Dest=0x81df0b8, _Source="PGLBL095.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" [0179.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0179.105] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf107100, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf107100, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x19ede, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL096.XML", cAlternateFileName="")) returned 1 [0179.105] wcscmp (_String1="PGLBL096.XML", _String2=".") returned 1 [0179.105] wcscmp (_String1="PGLBL096.XML", _String2="..") returned 1 [0179.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddbe8 [0179.105] wcscpy (in: _Dest=0x81ddbe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.105] wcscat (in: _Dest=0x81ddbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.105] wcscat (in: _Dest=0x81ddbe8, _Source="PGLBL096.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" [0179.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0179.107] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4984100, ftCreationTime.dwHighDateTime=0x1c9ef7e, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4984100, ftLastWriteTime.dwHighDateTime=0x1c9ef7e, nFileSizeHigh=0x0, nFileSizeLow=0x80ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL097.XML", cAlternateFileName="")) returned 1 [0179.107] wcscmp (_String1="PGLBL097.XML", _String2=".") returned 1 [0179.107] wcscmp (_String1="PGLBL097.XML", _String2="..") returned 1 [0179.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dea88 [0179.107] wcscpy (in: _Dest=0x81dea88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.107] wcscat (in: _Dest=0x81dea88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.107] wcscat (in: _Dest=0x81dea88, _Source="PGLBL097.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" [0179.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dea88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0179.115] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16a5500, ftCreationTime.dwHighDateTime=0x1c6d8fb, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc16a5500, ftLastWriteTime.dwHighDateTime=0x1c6d8fb, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL102.XML", cAlternateFileName="")) returned 1 [0179.115] wcscmp (_String1="PGLBL102.XML", _String2=".") returned 1 [0179.115] wcscmp (_String1="PGLBL102.XML", _String2="..") returned 1 [0179.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df268 [0179.115] wcscpy (in: _Dest=0x81df268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.115] wcscat (in: _Dest=0x81df268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.115] wcscat (in: _Dest=0x81df268, _Source="PGLBL102.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" [0179.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0179.116] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda375800, ftCreationTime.dwHighDateTime=0x1ca0f79, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda375800, ftLastWriteTime.dwHighDateTime=0x1ca0f79, nFileSizeHigh=0x0, nFileSizeLow=0x27aee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL103.XML", cAlternateFileName="")) returned 1 [0179.117] wcscmp (_String1="PGLBL103.XML", _String2=".") returned 1 [0179.117] wcscmp (_String1="PGLBL103.XML", _String2="..") returned 1 [0179.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81dee78 [0179.117] wcscpy (in: _Dest=0x81dee78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.117] wcscat (in: _Dest=0x81dee78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.117] wcscat (in: _Dest=0x81dee78, _Source="PGLBL103.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" [0179.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dee78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0179.118] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b52a500, ftCreationTime.dwHighDateTime=0x1ca1767, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8b52a500, ftLastWriteTime.dwHighDateTime=0x1ca1767, nFileSizeHigh=0x0, nFileSizeLow=0x1fcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL104.XML", cAlternateFileName="")) returned 1 [0179.118] wcscmp (_String1="PGLBL104.XML", _String2=".") returned 1 [0179.118] wcscmp (_String1="PGLBL104.XML", _String2="..") returned 1 [0179.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de608 [0179.118] wcscpy (in: _Dest=0x81de608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.118] wcscat (in: _Dest=0x81de608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.118] wcscat (in: _Dest=0x81de608, _Source="PGLBL104.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" [0179.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0179.120] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15339200, ftCreationTime.dwHighDateTime=0x1c9fa87, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15339200, ftLastWriteTime.dwHighDateTime=0x1c9fa87, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL105.XML", cAlternateFileName="")) returned 1 [0182.338] wcscmp (_String1="PGLBL105.XML", _String2=".") returned 1 [0182.338] wcscmp (_String1="PGLBL105.XML", _String2="..") returned 1 [0182.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f35130 [0182.338] wcscpy (in: _Dest=0x3f35130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0182.338] wcscat (in: _Dest=0x3f35130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0182.338] wcscat (in: _Dest=0x3f35130, _Source="PGLBL105.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" [0187.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f35130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2adc [0187.386] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68305700, ftCreationTime.dwHighDateTime=0x1ca1ba6, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68305700, ftLastWriteTime.dwHighDateTime=0x1ca1ba6, nFileSizeHigh=0x0, nFileSizeLow=0x9ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL106.XML", cAlternateFileName="")) returned 1 [0187.386] wcscmp (_String1="PGLBL106.XML", _String2=".") returned 1 [0187.386] wcscmp (_String1="PGLBL106.XML", _String2="..") returned 1 [0187.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddeb8 [0187.386] wcscpy (in: _Dest=0x81ddeb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.386] wcscat (in: _Dest=0x81ddeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.386] wcscat (in: _Dest=0x81ddeb8, _Source="PGLBL106.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" [0187.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0187.388] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda566b00, ftCreationTime.dwHighDateTime=0x1ca1ba9, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda566b00, ftLastWriteTime.dwHighDateTime=0x1ca1ba9, nFileSizeHigh=0x0, nFileSizeLow=0x1d5c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL107.XML", cAlternateFileName="")) returned 1 [0187.388] wcscmp (_String1="PGLBL107.XML", _String2=".") returned 1 [0187.388] wcscmp (_String1="PGLBL107.XML", _String2="..") returned 1 [0187.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de458 [0187.388] wcscpy (in: _Dest=0x81de458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.388] wcscat (in: _Dest=0x81de458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.389] wcscat (in: _Dest=0x81de458, _Source="PGLBL107.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" [0187.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0187.390] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181e0800, ftCreationTime.dwHighDateTime=0x1c9f506, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x181e0800, ftLastWriteTime.dwHighDateTime=0x1c9f506, nFileSizeHigh=0x0, nFileSizeLow=0x2dbec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL108.XML", cAlternateFileName="")) returned 1 [0187.390] wcscmp (_String1="PGLBL108.XML", _String2=".") returned 1 [0187.390] wcscmp (_String1="PGLBL108.XML", _String2="..") returned 1 [0187.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de4e8 [0187.390] wcscpy (in: _Dest=0x81de4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.390] wcscat (in: _Dest=0x81de4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.390] wcscat (in: _Dest=0x81de4e8, _Source="PGLBL108.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" [0187.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0187.391] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa03ff600, ftCreationTime.dwHighDateTime=0x1ca1525, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa03ff600, ftLastWriteTime.dwHighDateTime=0x1ca1525, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL109.XML", cAlternateFileName="")) returned 1 [0187.391] wcscmp (_String1="PGLBL109.XML", _String2=".") returned 1 [0187.391] wcscmp (_String1="PGLBL109.XML", _String2="..") returned 1 [0187.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de8d8 [0187.391] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.392] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.392] wcscat (in: _Dest=0x81de8d8, _Source="PGLBL109.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" [0187.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0187.399] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf970d200, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf970d200, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0xcdbee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL110.XML", cAlternateFileName="")) returned 1 [0187.399] wcscmp (_String1="PGLBL110.XML", _String2=".") returned 1 [0187.400] wcscmp (_String1="PGLBL110.XML", _String2="..") returned 1 [0187.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de0f8 [0187.400] wcscpy (in: _Dest=0x81de0f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.400] wcscat (in: _Dest=0x81de0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.400] wcscat (in: _Dest=0x81de0f8, _Source="PGLBL110.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" [0187.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0187.405] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaa1ff00, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfaa1ff00, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0x40198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL111.XML", cAlternateFileName="")) returned 1 [0187.405] wcscmp (_String1="PGLBL111.XML", _String2=".") returned 1 [0187.405] wcscmp (_String1="PGLBL111.XML", _String2="..") returned 1 [0187.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de698 [0187.405] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.405] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.405] wcscat (in: _Dest=0x81de698, _Source="PGLBL111.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" [0187.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0187.407] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35aee100, ftCreationTime.dwHighDateTime=0x1ca2cb0, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35aee100, ftLastWriteTime.dwHighDateTime=0x1ca2cb0, nFileSizeHigh=0x0, nFileSizeLow=0x2247e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN001.XML", cAlternateFileName="")) returned 1 [0187.407] wcscmp (_String1="PGMN001.XML", _String2=".") returned 1 [0187.407] wcscmp (_String1="PGMN001.XML", _String2="..") returned 1 [0187.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30628 [0187.407] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.407] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.407] wcscat (in: _Dest=0x3f30628, _Source="PGMN001.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" [0187.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0187.408] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd32c00, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfbd32c00, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0xeb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN002.XML", cAlternateFileName="")) returned 1 [0187.408] wcscmp (_String1="PGMN002.XML", _String2=".") returned 1 [0187.409] wcscmp (_String1="PGMN002.XML", _String2="..") returned 1 [0187.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f4a0 [0187.409] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.409] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.409] wcscat (in: _Dest=0x3f2f4a0, _Source="PGMN002.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" [0187.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0187.410] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b1c900, ftCreationTime.dwHighDateTime=0x1c9f507, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1b1c900, ftLastWriteTime.dwHighDateTime=0x1c9f507, nFileSizeHigh=0x0, nFileSizeLow=0x1bc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN010.XML", cAlternateFileName="")) returned 1 [0187.410] wcscmp (_String1="PGMN010.XML", _String2=".") returned 1 [0187.410] wcscmp (_String1="PGMN010.XML", _String2="..") returned 1 [0187.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31040 [0187.411] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.411] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.411] wcscat (in: _Dest=0x3f31040, _Source="PGMN010.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" [0187.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0187.412] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2f3500, ftCreationTime.dwHighDateTime=0x1ca1b9e, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a2f3500, ftLastWriteTime.dwHighDateTime=0x1ca1b9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN011.XML", cAlternateFileName="")) returned 1 [0187.412] wcscmp (_String1="PGMN011.XML", _String2=".") returned 1 [0187.412] wcscmp (_String1="PGMN011.XML", _String2="..") returned 1 [0187.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f306b0 [0187.412] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.412] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.412] wcscat (in: _Dest=0x3f306b0, _Source="PGMN011.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" [0187.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0187.420] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9198b500, ftCreationTime.dwHighDateTime=0x1ca1b9d, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9198b500, ftLastWriteTime.dwHighDateTime=0x1ca1b9d, nFileSizeHigh=0x0, nFileSizeLow=0x2936, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN020.XML", cAlternateFileName="")) returned 1 [0187.420] wcscmp (_String1="PGMN020.XML", _String2=".") returned 1 [0187.420] wcscmp (_String1="PGMN020.XML", _String2="..") returned 1 [0187.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2ff40 [0187.420] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.420] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.420] wcscat (in: _Dest=0x3f2ff40, _Source="PGMN020.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" [0187.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0187.422] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace3e200, ftCreationTime.dwHighDateTime=0x1ca070f, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace3e200, ftLastWriteTime.dwHighDateTime=0x1ca070f, nFileSizeHigh=0x0, nFileSizeLow=0x167d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN022.XML", cAlternateFileName="")) returned 1 [0187.422] wcscmp (_String1="PGMN022.XML", _String2=".") returned 1 [0187.422] wcscmp (_String1="PGMN022.XML", _String2="..") returned 1 [0187.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f9f0 [0187.422] wcscpy (in: _Dest=0x3f2f9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.422] wcscat (in: _Dest=0x3f2f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.422] wcscat (in: _Dest=0x3f2f9f0, _Source="PGMN022.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" [0187.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0187.423] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8640e00, ftCreationTime.dwHighDateTime=0x1c6626a, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8640e00, ftLastWriteTime.dwHighDateTime=0x1c6626a, nFileSizeHigh=0x0, nFileSizeLow=0x21be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN026.XML", cAlternateFileName="")) returned 1 [0187.423] wcscmp (_String1="PGMN026.XML", _String2=".") returned 1 [0187.424] wcscmp (_String1="PGMN026.XML", _String2="..") returned 1 [0187.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30380 [0187.424] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.424] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.424] wcscat (in: _Dest=0x3f30380, _Source="PGMN026.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" [0187.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0187.425] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe96d7200, ftCreationTime.dwHighDateTime=0x1c9f66a, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe96d7200, ftLastWriteTime.dwHighDateTime=0x1c9f66a, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN027.XML", cAlternateFileName="")) returned 1 [0187.425] wcscmp (_String1="PGMN027.XML", _String2=".") returned 1 [0187.425] wcscmp (_String1="PGMN027.XML", _String2="..") returned 1 [0187.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f638 [0187.426] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.426] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.426] wcscat (in: _Dest=0x3f2f638, _Source="PGMN027.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" [0187.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0187.434] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf57d5100, ftCreationTime.dwHighDateTime=0x1c9e396, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf57d5100, ftLastWriteTime.dwHighDateTime=0x1c9e396, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN044.XML", cAlternateFileName="")) returned 1 [0187.434] wcscmp (_String1="PGMN044.XML", _String2=".") returned 1 [0187.434] wcscmp (_String1="PGMN044.XML", _String2="..") returned 1 [0187.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30738 [0187.434] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.434] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.435] wcscat (in: _Dest=0x3f30738, _Source="PGMN044.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" [0187.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0187.436] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd768ac00, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd768ac00, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x9c4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN048.XML", cAlternateFileName="")) returned 1 [0187.436] wcscmp (_String1="PGMN048.XML", _String2=".") returned 1 [0187.436] wcscmp (_String1="PGMN048.XML", _String2="..") returned 1 [0187.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f305a0 [0187.436] wcscpy (in: _Dest=0x3f305a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.436] wcscat (in: _Dest=0x3f305a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.436] wcscat (in: _Dest=0x3f305a0, _Source="PGMN048.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" [0187.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f305a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0187.438] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb648f00, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb648f00, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0x8250, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN054.XML", cAlternateFileName="")) returned 1 [0187.438] wcscmp (_String1="PGMN054.XML", _String2=".") returned 1 [0187.438] wcscmp (_String1="PGMN054.XML", _String2="..") returned 1 [0187.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30f30 [0187.438] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.438] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.438] wcscat (in: _Dest=0x3f30f30, _Source="PGMN054.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" [0187.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0187.440] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5d28800, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5d28800, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0x8e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN058.XML", cAlternateFileName="")) returned 1 [0187.440] wcscmp (_String1="PGMN058.XML", _String2=".") returned 1 [0187.440] wcscmp (_String1="PGMN058.XML", _String2="..") returned 1 [0187.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30848 [0187.440] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.440] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.440] wcscat (in: _Dest=0x3f30848, _Source="PGMN058.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" [0187.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0187.442] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1be4a00, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1be4a00, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0x1326, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN065.XML", cAlternateFileName="")) returned 1 [0187.442] wcscmp (_String1="PGMN065.XML", _String2=".") returned 1 [0187.442] wcscmp (_String1="PGMN065.XML", _String2="..") returned 1 [0187.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30fb8 [0187.442] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.442] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.442] wcscat (in: _Dest=0x3f30fb8, _Source="PGMN065.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" [0187.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0187.443] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd97300, ftCreationTime.dwHighDateTime=0x1c694d2, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4cd97300, ftLastWriteTime.dwHighDateTime=0x1c694d2, nFileSizeHigh=0x0, nFileSizeLow=0x9ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN075.XML", cAlternateFileName="")) returned 1 [0187.443] wcscmp (_String1="PGMN075.XML", _String2=".") returned 1 [0187.443] wcscmp (_String1="PGMN075.XML", _String2="..") returned 1 [0187.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2fd20 [0187.443] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.443] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.443] wcscat (in: _Dest=0x3f2fd20, _Source="PGMN075.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" [0187.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0187.445] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd9b100, ftCreationTime.dwHighDateTime=0x1ca04b7, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5bd9b100, ftLastWriteTime.dwHighDateTime=0x1ca04b7, nFileSizeHigh=0x0, nFileSizeLow=0x101198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN081.XML", cAlternateFileName="")) returned 1 [0187.445] wcscmp (_String1="PGMN081.XML", _String2=".") returned 1 [0187.445] wcscmp (_String1="PGMN081.XML", _String2="..") returned 1 [0187.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f528 [0187.445] wcscpy (in: _Dest=0x3f2f528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.445] wcscat (in: _Dest=0x3f2f528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.445] wcscat (in: _Dest=0x3f2f528, _Source="PGMN081.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" [0187.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0187.446] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb372c00, ftCreationTime.dwHighDateTime=0x1ca0bba, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb372c00, ftLastWriteTime.dwHighDateTime=0x1ca0bba, nFileSizeHigh=0x0, nFileSizeLow=0x31a78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN082.XML", cAlternateFileName="")) returned 1 [0187.446] wcscmp (_String1="PGMN082.XML", _String2=".") returned 1 [0187.446] wcscmp (_String1="PGMN082.XML", _String2="..") returned 1 [0187.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f748 [0187.446] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.446] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.446] wcscat (in: _Dest=0x3f2f748, _Source="PGMN082.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" [0187.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc [0187.447] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb55bf00, ftCreationTime.dwHighDateTime=0x1c6a693, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb55bf00, ftLastWriteTime.dwHighDateTime=0x1c6a693, nFileSizeHigh=0x0, nFileSizeLow=0x2d34, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN086.XML", cAlternateFileName="")) returned 1 [0187.447] wcscmp (_String1="PGMN086.XML", _String2=".") returned 1 [0187.447] wcscmp (_String1="PGMN086.XML", _String2="..") returned 1 [0187.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f5b0 [0187.448] wcscpy (in: _Dest=0x3f2f5b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.448] wcscat (in: _Dest=0x3f2f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.448] wcscat (in: _Dest=0x3f2f5b0, _Source="PGMN086.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" [0187.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0187.751] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc8ad00, ftCreationTime.dwHighDateTime=0x1ca0969, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dc8ad00, ftLastWriteTime.dwHighDateTime=0x1ca0969, nFileSizeHigh=0x0, nFileSizeLow=0x11a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN089.XML", cAlternateFileName="")) returned 1 [0187.751] wcscmp (_String1="PGMN089.XML", _String2=".") returned 1 [0187.751] wcscmp (_String1="PGMN089.XML", _String2="..") returned 1 [0187.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f418 [0187.751] wcscpy (in: _Dest=0x3f2f418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0187.751] wcscat (in: _Dest=0x3f2f418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0187.751] wcscat (in: _Dest=0x3f2f418, _Source="PGMN089.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" [0188.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0188.323] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f92d00, ftCreationTime.dwHighDateTime=0x1c6b560, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14f92d00, ftLastWriteTime.dwHighDateTime=0x1c6b560, nFileSizeHigh=0x0, nFileSizeLow=0xa246, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN090.XML", cAlternateFileName="")) returned 1 [0188.323] wcscmp (_String1="PGMN090.XML", _String2=".") returned 1 [0188.323] wcscmp (_String1="PGMN090.XML", _String2="..") returned 1 [0188.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f310c8 [0188.323] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.323] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.323] wcscat (in: _Dest=0x3f310c8, _Source="PGMN090.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" [0188.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0188.327] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf90cd300, ftCreationTime.dwHighDateTime=0x1c679d5, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf90cd300, ftLastWriteTime.dwHighDateTime=0x1c679d5, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN092.XML", cAlternateFileName="")) returned 1 [0188.327] wcscmp (_String1="PGMN092.XML", _String2=".") returned 1 [0188.327] wcscmp (_String1="PGMN092.XML", _String2="..") returned 1 [0188.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e202a0 [0188.327] wcscpy (in: _Dest=0x3e202a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.327] wcscat (in: _Dest=0x3e202a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.327] wcscat (in: _Dest=0x3e202a0, _Source="PGMN092.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" [0188.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e202a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0188.328] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebaca900, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xebaca900, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x7aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN095.XML", cAlternateFileName="")) returned 1 [0188.328] wcscmp (_String1="PGMN095.XML", _String2=".") returned 1 [0188.329] wcscmp (_String1="PGMN095.XML", _String2="..") returned 1 [0188.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f6f0 [0188.329] wcscpy (in: _Dest=0x3e1f6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.329] wcscat (in: _Dest=0x3e1f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.329] wcscat (in: _Dest=0x3e1f6f0, _Source="PGMN095.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" [0188.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0188.330] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a28a00, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1a28a00, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN096.XML", cAlternateFileName="")) returned 1 [0188.330] wcscmp (_String1="PGMN096.XML", _String2=".") returned 1 [0188.330] wcscmp (_String1="PGMN096.XML", _String2="..") returned 1 [0188.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ecd8 [0188.330] wcscpy (in: _Dest=0x3e1ecd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.330] wcscat (in: _Dest=0x3e1ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.330] wcscat (in: _Dest=0x3e1ecd8, _Source="PGMN096.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" [0188.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0188.332] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74afb200, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74afb200, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0x11424, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN097.XML", cAlternateFileName="")) returned 1 [0188.332] wcscmp (_String1="PGMN097.XML", _String2=".") returned 1 [0188.332] wcscmp (_String1="PGMN097.XML", _String2="..") returned 1 [0188.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f998 [0188.332] wcscpy (in: _Dest=0x3e1f998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.332] wcscat (in: _Dest=0x3e1f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.332] wcscat (in: _Dest=0x3e1f998, _Source="PGMN097.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" [0188.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0188.334] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c2eb600, ftCreationTime.dwHighDateTime=0x1c6c606, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c2eb600, ftLastWriteTime.dwHighDateTime=0x1c6c606, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN102.XML", cAlternateFileName="")) returned 1 [0188.334] wcscmp (_String1="PGMN102.XML", _String2=".") returned 1 [0188.334] wcscmp (_String1="PGMN102.XML", _String2="..") returned 1 [0188.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ede8 [0188.334] wcscpy (in: _Dest=0x3e1ede8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.334] wcscat (in: _Dest=0x3e1ede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.334] wcscat (in: _Dest=0x3e1ede8, _Source="PGMN102.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" [0188.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0188.335] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea9b0300, ftCreationTime.dwHighDateTime=0x1ca0f78, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xea9b0300, ftLastWriteTime.dwHighDateTime=0x1ca0f78, nFileSizeHigh=0x0, nFileSizeLow=0xde0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN103.XML", cAlternateFileName="")) returned 1 [0188.336] wcscmp (_String1="PGMN103.XML", _String2=".") returned 1 [0188.336] wcscmp (_String1="PGMN103.XML", _String2="..") returned 1 [0188.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f118 [0188.336] wcscpy (in: _Dest=0x3e1f118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.336] wcscat (in: _Dest=0x3e1f118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.336] wcscat (in: _Dest=0x3e1f118, _Source="PGMN103.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" [0188.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0188.337] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15339200, ftCreationTime.dwHighDateTime=0x1c9fa87, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15339200, ftLastWriteTime.dwHighDateTime=0x1c9fa87, nFileSizeHigh=0x0, nFileSizeLow=0xff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN105.XML", cAlternateFileName="")) returned 1 [0188.337] wcscmp (_String1="PGMN105.XML", _String2=".") returned 1 [0188.337] wcscmp (_String1="PGMN105.XML", _String2="..") returned 1 [0188.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1eb40 [0188.337] wcscpy (in: _Dest=0x3e1eb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.337] wcscat (in: _Dest=0x3e1eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.337] wcscat (in: _Dest=0x3e1eb40, _Source="PGMN105.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" [0188.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0188.339] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cebdc00, ftCreationTime.dwHighDateTime=0x1c9fa8b, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7cebdc00, ftLastWriteTime.dwHighDateTime=0x1c9fa8b, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN107.XML", cAlternateFileName="")) returned 1 [0188.339] wcscmp (_String1="PGMN107.XML", _String2=".") returned 1 [0188.339] wcscmp (_String1="PGMN107.XML", _String2="..") returned 1 [0188.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1f090 [0188.339] wcscpy (in: _Dest=0x3e1f090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.339] wcscat (in: _Dest=0x3e1f090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.339] wcscat (in: _Dest=0x3e1f090, _Source="PGMN107.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" [0188.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0188.341] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181e0800, ftCreationTime.dwHighDateTime=0x1c9f506, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x181e0800, ftLastWriteTime.dwHighDateTime=0x1c9f506, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN108.XML", cAlternateFileName="")) returned 1 [0188.871] wcscmp (_String1="PGMN108.XML", _String2=".") returned 1 [0188.871] wcscmp (_String1="PGMN108.XML", _String2="..") returned 1 [0188.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ef80 [0188.871] wcscpy (in: _Dest=0x3e1ef80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.871] wcscat (in: _Dest=0x3e1ef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.871] wcscat (in: _Dest=0x3e1ef80, _Source="PGMN108.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" [0188.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0188.926] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c3a600, ftCreationTime.dwHighDateTime=0x1ca1526, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25c3a600, ftLastWriteTime.dwHighDateTime=0x1ca1526, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN109.XML", cAlternateFileName="")) returned 1 [0188.926] wcscmp (_String1="PGMN109.XML", _String2=".") returned 1 [0188.927] wcscmp (_String1="PGMN109.XML", _String2="..") returned 1 [0188.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1fbb8 [0188.927] wcscpy (in: _Dest=0x3e1fbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.927] wcscat (in: _Dest=0x3e1fbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.927] wcscat (in: _Dest=0x3e1fbb8, _Source="PGMN109.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" [0188.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0188.928] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd045900, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd045900, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0xcae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN110.XML", cAlternateFileName="")) returned 1 [0188.928] wcscmp (_String1="PGMN110.XML", _String2=".") returned 1 [0188.928] wcscmp (_String1="PGMN110.XML", _String2="..") returned 1 [0188.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ec50 [0188.929] wcscpy (in: _Dest=0x3e1ec50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.929] wcscat (in: _Dest=0x3e1ec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.929] wcscat (in: _Dest=0x3e1ec50, _Source="PGMN110.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" [0188.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0188.931] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe358600, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfe358600, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0x45792, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN111.XML", cAlternateFileName="")) returned 1 [0188.931] wcscmp (_String1="PGMN111.XML", _String2=".") returned 1 [0188.931] wcscmp (_String1="PGMN111.XML", _String2="..") returned 1 [0188.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bea30 [0188.931] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.931] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.931] wcscat (in: _Dest=0x81bea30, _Source="PGMN111.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" [0188.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0188.932] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f088a00, ftCreationTime.dwHighDateTime=0x1ca2cb0, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f088a00, ftLastWriteTime.dwHighDateTime=0x1ca2cb0, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 1 [0188.932] wcscmp (_String1="PG_INDEX.XML", _String2=".") returned 1 [0188.932] wcscmp (_String1="PG_INDEX.XML", _String2="..") returned 1 [0188.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81ddd98 [0188.932] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.932] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.932] wcscat (in: _Dest=0x81ddd98, _Source="PG_INDEX.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" [0188.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0188.933] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f088a00, ftCreationTime.dwHighDateTime=0x1ca2cb0, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f088a00, ftLastWriteTime.dwHighDateTime=0x1ca2cb0, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 0 [0189.509] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0189.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07840) returned 1 [0189.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0189.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34008) returned 1 Thread: id = 3912 os_tid = 0xf00 [0169.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest")) returned 0x20 [0171.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest", dwFileAttributes=0x20) returned 0 [0171.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.784] GetLastError () returned 0x5 [0171.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest", dwFileAttributes=0x20) returned 0 [0171.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de068) returned 1 Thread: id = 3913 os_tid = 0xe50 [0169.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml")) returned 0x20 [0172.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML", dwFileAttributes=0x20) returned 0 [0172.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.453] GetLastError () returned 0x5 [0172.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML", dwFileAttributes=0x20) returned 0 [0172.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 Thread: id = 3914 os_tid = 0xe58 [0169.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml")) returned 0x20 [0172.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML", dwFileAttributes=0x20) returned 0 [0172.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.451] GetLastError () returned 0x5 [0172.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML", dwFileAttributes=0x20) returned 0 [0172.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 Thread: id = 3915 os_tid = 0xf10 [0169.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f395b8 [0169.392] wcscpy (in: _Dest=0x3f395b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0169.392] wcscat (in: _Dest=0x3f395b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0169.392] wcscat (in: _Dest=0x3f395b8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*" [0169.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a128 [0169.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b97b9f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xdf9a4690, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdf9a4690, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0172.917] wcscmp (_String1=".", _String2=".") returned 0 [0172.917] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b97b9f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xdf9a4690, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdf9a4690, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.917] wcscmp (_String1="..", _String2=".") returned 1 [0172.917] wcscmp (_String1="..", _String2="..") returned 0 [0172.917] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51037b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x51037b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51037b90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0172.917] wcscmp (_String1="1033", _String2=".") returned 1 [0172.917] wcscmp (_String1="1033", _String2="..") returned 1 [0172.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df8a60 [0172.917] wcscpy (in: _Dest=0x3df8a60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.917] wcscat (in: _Dest=0x3df8a60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.917] wcscat (in: _Dest=0x3df8a60, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" [0177.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3df8a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0177.889] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc970910, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xdc970910, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdc970910, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0177.889] wcscmp (_String1="1036", _String2=".") returned 1 [0177.889] wcscmp (_String1="1036", _String2="..") returned 1 [0177.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68240 [0177.889] wcscpy (in: _Dest=0x3e68240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.889] wcscat (in: _Dest=0x3e68240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.889] wcscat (in: _Dest=0x3e68240, _Source="1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" [0177.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e68240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0177.890] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b9ede10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4b9ede10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b9ede10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0177.890] wcscmp (_String1="3082", _String2=".") returned 1 [0177.890] wcscmp (_String1="3082", _String2="..") returned 1 [0177.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e680d8 [0177.891] wcscpy (in: _Dest=0x3e680d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.891] wcscat (in: _Dest=0x3e680d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.891] wcscat (in: _Dest=0x3e680d8, _Source="3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" [0177.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e680d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0177.892] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe85f700, ftCreationTime.dwHighDateTime=0x1c4aa04, ftLastAccessTime.dwLowDateTime=0x515defd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfe85f700, ftLastWriteTime.dwHighDateTime=0x1c4aa04, nFileSizeHigh=0x0, nFileSizeLow=0x39cf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.LEX", cAlternateFileName="")) returned 1 [0177.892] wcscmp (_String1="MSGR3EN.LEX", _String2=".") returned 1 [0177.892] wcscmp (_String1="MSGR3EN.LEX", _String2="..") returned 1 [0177.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf668 [0177.892] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.892] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.892] wcscat (in: _Dest=0x81bf668, _Source="MSGR3EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" [0177.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0177.893] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431ab100, ftCreationTime.dwHighDateTime=0x1c0458a, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x431ab100, ftLastWriteTime.dwHighDateTime=0x1c0458a, nFileSizeHigh=0x0, nFileSizeLow=0x4112e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.LEX", cAlternateFileName="")) returned 1 [0177.893] wcscmp (_String1="MSGR3ES.LEX", _String2=".") returned 1 [0177.893] wcscmp (_String1="MSGR3ES.LEX", _String2="..") returned 1 [0177.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bec50 [0177.893] wcscpy (in: _Dest=0x81bec50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.894] wcscat (in: _Dest=0x81bec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.894] wcscat (in: _Dest=0x81bec50, _Source="MSGR3ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" [0177.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0177.895] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a18ce00, ftCreationTime.dwHighDateTime=0x1cba0b6, ftLastAccessTime.dwLowDateTime=0xdca7b2b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x9a18ce00, ftLastWriteTime.dwHighDateTime=0x1cba0b6, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.LEX", cAlternateFileName="")) returned 1 [0177.895] wcscmp (_String1="MSGR3FR.LEX", _String2=".") returned 1 [0177.895] wcscmp (_String1="MSGR3FR.LEX", _String2="..") returned 1 [0177.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfe60 [0177.895] wcscpy (in: _Dest=0x81bfe60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.895] wcscat (in: _Dest=0x81bfe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.895] wcscat (in: _Dest=0x81bfe60, _Source="MSGR3FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" [0177.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0177.896] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9554700, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xd886d030, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa9554700, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x2c788, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.DLL", cAlternateFileName="")) returned 1 [0177.896] wcscmp (_String1="MSHY7EN.DLL", _String2=".") returned 1 [0177.896] wcscmp (_String1="MSHY7EN.DLL", _String2="..") returned 1 [0177.896] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafc200, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd8893190, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7eafc200, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x74000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.LEX", cAlternateFileName="")) returned 1 [0177.896] wcscmp (_String1="MSHY7EN.LEX", _String2=".") returned 1 [0177.896] wcscmp (_String1="MSHY7EN.LEX", _String2="..") returned 1 [0177.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c03b0 [0177.896] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.896] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.896] wcscat (in: _Dest=0x81c03b0, _Source="MSHY7EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" [0177.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0177.898] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb96c2700, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf7691f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb96c2700, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x2c788, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.DLL", cAlternateFileName="")) returned 1 [0177.898] wcscmp (_String1="MSHY7ES.DLL", _String2=".") returned 1 [0177.898] wcscmp (_String1="MSHY7ES.DLL", _String2="..") returned 1 [0177.898] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82434900, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf78f350, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x82434900, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.LEX", cAlternateFileName="")) returned 1 [0177.898] wcscmp (_String1="MSHY7ES.LEX", _String2=".") returned 1 [0177.898] wcscmp (_String1="MSHY7ES.LEX", _String2="..") returned 1 [0177.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf448 [0177.898] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.898] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.898] wcscat (in: _Dest=0x81bf448, _Source="MSHY7ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" [0177.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0177.899] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3764600, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdcb39990, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3764600, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x2c788, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.DLL", cAlternateFileName="")) returned 1 [0177.900] wcscmp (_String1="MSHY7FR.DLL", _String2=".") returned 1 [0177.900] wcscmp (_String1="MSHY7FR.DLL", _String2="..") returned 1 [0177.900] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe0ef00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcb5faf0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7fe0ef00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x43c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.LEX", cAlternateFileName="")) returned 1 [0177.900] wcscmp (_String1="MSHY7FR.LEX", _String2=".") returned 1 [0177.900] wcscmp (_String1="MSHY7FR.LEX", _String2="..") returned 1 [0177.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf090 [0177.900] wcscpy (in: _Dest=0x81bf090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.900] wcscat (in: _Dest=0x81bf090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.900] wcscat (in: _Dest=0x81bf090, _Source="MSHY7FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" [0177.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0177.901] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3cd5a00, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xd899db30, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3cd5a00, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x183b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.DLL", cAlternateFileName="")) returned 1 [0177.901] wcscmp (_String1="MSSP7EN.DLL", _String2=".") returned 1 [0177.901] wcscmp (_String1="MSSP7EN.DLL", _String2="..") returned 1 [0177.901] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaacb4300, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd8f44f70, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xaacb4300, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.dub", cAlternateFileName="")) returned 1 [0177.901] wcscmp (_String1="MSSP7EN.dub", _String2=".") returned 1 [0177.901] wcscmp (_String1="MSSP7EN.dub", _String2="..") returned 1 [0177.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf558 [0177.902] wcscpy (in: _Dest=0x81bf558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.902] wcscat (in: _Dest=0x81bf558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.902] wcscat (in: _Dest=0x81bf558, _Source="MSSP7EN.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" [0177.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0177.903] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72857c00, ftCreationTime.dwHighDateTime=0x1cbae92, ftLastAccessTime.dwLowDateTime=0xd88b92f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x72857c00, ftLastWriteTime.dwHighDateTime=0x1cbae92, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.LEX", cAlternateFileName="")) returned 1 [0177.903] wcscmp (_String1="MSSP7EN.LEX", _String2=".") returned 1 [0177.903] wcscmp (_String1="MSSP7EN.LEX", _String2="..") returned 1 [0177.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bef80 [0177.903] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.903] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.903] wcscat (in: _Dest=0x81bef80, _Source="MSSP7EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" [0177.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0177.904] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3cd5a00, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xdf8bfe50, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3cd5a00, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x183b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.DLL", cAlternateFileName="")) returned 1 [0177.905] wcscmp (_String1="MSSP7ES.DLL", _String2=".") returned 1 [0177.905] wcscmp (_String1="MSSP7ES.DLL", _String2="..") returned 1 [0177.905] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3237e00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf65e850, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3237e00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.dub", cAlternateFileName="")) returned 1 [0177.905] wcscmp (_String1="MSSP7ES.dub", _String2=".") returned 1 [0177.905] wcscmp (_String1="MSSP7ES.dub", _String2="..") returned 1 [0177.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfcc8 [0177.905] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.905] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.905] wcscat (in: _Dest=0x81bfcc8, _Source="MSSP7ES.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" [0177.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0177.906] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3237e00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf7b54b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3237e00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x1e0400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.LEX", cAlternateFileName="")) returned 1 [0177.906] wcscmp (_String1="MSSP7ES.LEX", _String2=".") returned 1 [0177.906] wcscmp (_String1="MSSP7ES.LEX", _String2="..") returned 1 [0177.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfc40 [0177.907] wcscpy (in: _Dest=0x81bfc40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.907] wcscat (in: _Dest=0x81bfc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.907] wcscat (in: _Dest=0x81bfc40, _Source="MSSP7ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" [0177.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0177.908] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e19800, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xdccb6750, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa7e19800, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x183b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.DLL", cAlternateFileName="")) returned 1 [0177.908] wcscmp (_String1="MSSP7FR.DLL", _String2=".") returned 1 [0177.908] wcscmp (_String1="MSSP7FR.DLL", _String2="..") returned 1 [0177.908] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5eca00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdd094b10, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xae5eca00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.dub", cAlternateFileName="")) returned 1 [0177.908] wcscmp (_String1="MSSP7FR.dub", _String2=".") returned 1 [0177.908] wcscmp (_String1="MSSP7FR.dub", _String2="..") returned 1 [0177.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfa20 [0177.908] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.908] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.909] wcscat (in: _Dest=0x81bfa20, _Source="MSSP7FR.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" [0177.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0177.910] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5eca00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcbabdb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xae5eca00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x1b1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.LEX", cAlternateFileName="")) returned 1 [0177.910] wcscmp (_String1="MSSP7FR.LEX", _String2=".") returned 1 [0177.910] wcscmp (_String1="MSSP7FR.LEX", _String2="..") returned 1 [0177.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfaa8 [0177.910] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.910] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.910] wcscat (in: _Dest=0x81bfaa8, _Source="MSSP7FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" [0177.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0177.911] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec171f00, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xd8a82370, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xec171f00, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x53780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.DLL", cAlternateFileName="")) returned 1 [0177.911] wcscmp (_String1="MSTH7EN.DLL", _String2=".") returned 1 [0177.912] wcscmp (_String1="MSTH7EN.DLL", _String2="..") returned 1 [0177.912] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e25d00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd8a0ff50, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x60e25d00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x40dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.LEX", cAlternateFileName="")) returned 1 [0177.912] wcscmp (_String1="MSTH7EN.LEX", _String2=".") returned 1 [0177.912] wcscmp (_String1="MSTH7EN.LEX", _String2="..") returned 1 [0177.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf910 [0177.912] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.912] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.912] wcscat (in: _Dest=0x81bf910, _Source="MSTH7EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" [0177.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0177.913] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1e0b00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf9ca7f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xab1e0b00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x53780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.DLL", cAlternateFileName="")) returned 1 [0177.913] wcscmp (_String1="MSTH7ES.DLL", _String2=".") returned 1 [0177.913] wcscmp (_String1="MSTH7ES.DLL", _String2="..") returned 1 [0177.913] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693a9800, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf932270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x693a9800, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x5b3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.LEX", cAlternateFileName="")) returned 1 [0177.914] wcscmp (_String1="MSTH7ES.LEX", _String2=".") returned 1 [0177.914] wcscmp (_String1="MSTH7ES.LEX", _String2="..") returned 1 [0177.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf800 [0177.914] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.914] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.914] wcscat (in: _Dest=0x81bf800, _Source="MSTH7ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" [0177.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0177.915] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35f6600, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdce59670, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa35f6600, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x53780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.DLL", cAlternateFileName="")) returned 1 [0177.915] wcscmp (_String1="MSTH7FR.DLL", _String2=".") returned 1 [0177.915] wcscmp (_String1="MSTH7FR.DLL", _String2="..") returned 1 [0177.915] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62138a00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcdc10f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x62138a00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xc6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 1 [0177.915] wcscmp (_String1="MSTH7FR.LEX", _String2=".") returned 1 [0177.915] wcscmp (_String1="MSTH7FR.LEX", _String2="..") returned 1 [0177.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf338 [0177.915] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.915] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.915] wcscat (in: _Dest=0x81bf338, _Source="MSTH7FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" [0177.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0177.917] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62138a00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcdc10f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x62138a00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xc6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 0 [0177.917] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0185.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a128) returned 1 [0185.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f395b8) returned 1 [0185.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a348) returned 1 Thread: id = 3916 os_tid = 0x150 [0169.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39fc8 [0169.393] wcscpy (in: _Dest=0x3f39fc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0169.393] wcscat (in: _Dest=0x3f39fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0169.393] wcscat (in: _Dest=0x3f39fc8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*" [0169.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09520 [0169.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80bd60d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd28f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0172.918] wcscmp (_String1=".", _String2=".") returned 0 [0172.918] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80bd60d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd28f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.919] wcscmp (_String1="..", _String2=".") returned 1 [0172.919] wcscmp (_String1="..", _String2="..") returned 0 [0172.919] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB10.BDR", cAlternateFileName="")) returned 1 [0172.919] wcscmp (_String1="MSPUB10.BDR", _String2=".") returned 1 [0172.919] wcscmp (_String1="MSPUB10.BDR", _String2="..") returned 1 [0172.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf778 [0172.919] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0172.919] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0172.919] wcscat (in: _Dest=0x81bf778, _Source="MSPUB10.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" [0178.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2960 [0178.527] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x69e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB11.BDR", cAlternateFileName="")) returned 1 [0178.527] wcscmp (_String1="MSPUB11.BDR", _String2=".") returned 1 [0178.527] wcscmp (_String1="MSPUB11.BDR", _String2="..") returned 1 [0178.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0080 [0178.527] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.527] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.527] wcscat (in: _Dest=0x81c0080, _Source="MSPUB11.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" [0178.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0178.528] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xf254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1A.BDR", cAlternateFileName="")) returned 1 [0178.528] wcscmp (_String1="MSPUB1A.BDR", _String2=".") returned 1 [0178.529] wcscmp (_String1="MSPUB1A.BDR", _String2="..") returned 1 [0178.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfdd8 [0178.529] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.529] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.529] wcscat (in: _Dest=0x81bfdd8, _Source="MSPUB1A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" [0178.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0178.530] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1B.BDR", cAlternateFileName="")) returned 1 [0178.530] wcscmp (_String1="MSPUB1B.BDR", _String2=".") returned 1 [0178.530] wcscmp (_String1="MSPUB1B.BDR", _String2="..") returned 1 [0178.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfb30 [0178.530] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.530] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.530] wcscat (in: _Dest=0x81bfb30, _Source="MSPUB1B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" [0178.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0178.532] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xc8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2A.BDR", cAlternateFileName="")) returned 1 [0178.532] wcscmp (_String1="MSPUB2A.BDR", _String2=".") returned 1 [0178.532] wcscmp (_String1="MSPUB2A.BDR", _String2="..") returned 1 [0178.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81beab8 [0178.532] wcscpy (in: _Dest=0x81beab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.532] wcscat (in: _Dest=0x81beab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.532] wcscat (in: _Dest=0x81beab8, _Source="MSPUB2A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" [0178.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0178.534] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2B.BDR", cAlternateFileName="")) returned 1 [0178.534] wcscmp (_String1="MSPUB2B.BDR", _String2=".") returned 1 [0178.534] wcscmp (_String1="MSPUB2B.BDR", _String2="..") returned 1 [0178.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bee70 [0178.534] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.534] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.534] wcscat (in: _Dest=0x81bee70, _Source="MSPUB2B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" [0178.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0178.535] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xde58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3A.BDR", cAlternateFileName="")) returned 1 [0178.535] wcscmp (_String1="MSPUB3A.BDR", _String2=".") returned 1 [0178.535] wcscmp (_String1="MSPUB3A.BDR", _String2="..") returned 1 [0178.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf228 [0178.536] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.536] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.536] wcscat (in: _Dest=0x81bf228, _Source="MSPUB3A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" [0178.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0178.537] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xf4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3B.BDR", cAlternateFileName="")) returned 1 [0178.537] wcscmp (_String1="MSPUB3B.BDR", _String2=".") returned 1 [0178.537] wcscmp (_String1="MSPUB3B.BDR", _String2="..") returned 1 [0178.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf6f0 [0178.537] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.537] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.537] wcscat (in: _Dest=0x81bf6f0, _Source="MSPUB3B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" [0178.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710 [0178.539] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xc144, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB4.BDR", cAlternateFileName="")) returned 1 [0178.539] wcscmp (_String1="MSPUB4.BDR", _String2=".") returned 1 [0178.539] wcscmp (_String1="MSPUB4.BDR", _String2="..") returned 1 [0178.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831af58 [0178.539] wcscpy (in: _Dest=0x831af58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.539] wcscat (in: _Dest=0x831af58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.539] wcscat (in: _Dest=0x831af58, _Source="MSPUB4.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" [0178.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831af58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0178.540] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xcfb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5A.BDR", cAlternateFileName="")) returned 1 [0178.540] wcscmp (_String1="MSPUB5A.BDR", _String2=".") returned 1 [0178.540] wcscmp (_String1="MSPUB5A.BDR", _String2="..") returned 1 [0178.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf4d0 [0178.541] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.541] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.541] wcscat (in: _Dest=0x81bf4d0, _Source="MSPUB5A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" [0178.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0178.542] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x2476, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5B.BDR", cAlternateFileName="")) returned 1 [0178.542] wcscmp (_String1="MSPUB5B.BDR", _String2=".") returned 1 [0178.542] wcscmp (_String1="MSPUB5B.BDR", _String2="..") returned 1 [0178.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81be4e0 [0178.542] wcscpy (in: _Dest=0x81be4e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.542] wcscat (in: _Dest=0x81be4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.542] wcscat (in: _Dest=0x81be4e0, _Source="MSPUB5B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" [0178.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0178.544] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x7f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB6.BDR", cAlternateFileName="")) returned 1 [0178.544] wcscmp (_String1="MSPUB6.BDR", _String2=".") returned 1 [0178.544] wcscmp (_String1="MSPUB6.BDR", _String2="..") returned 1 [0178.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831acd8 [0178.544] wcscpy (in: _Dest=0x831acd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.544] wcscat (in: _Dest=0x831acd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.544] wcscat (in: _Dest=0x831acd8, _Source="MSPUB6.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" [0178.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831acd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0178.545] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x799a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB7.BDR", cAlternateFileName="")) returned 1 [0178.545] wcscmp (_String1="MSPUB7.BDR", _String2=".") returned 1 [0178.545] wcscmp (_String1="MSPUB7.BDR", _String2="..") returned 1 [0178.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831afd8 [0178.546] wcscpy (in: _Dest=0x831afd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.546] wcscat (in: _Dest=0x831afd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.546] wcscat (in: _Dest=0x831afd8, _Source="MSPUB7.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" [0178.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831afd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0178.547] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB8.BDR", cAlternateFileName="")) returned 1 [0178.547] wcscmp (_String1="MSPUB8.BDR", _String2=".") returned 1 [0178.547] wcscmp (_String1="MSPUB8.BDR", _String2="..") returned 1 [0178.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bb58 [0178.547] wcscpy (in: _Dest=0x831bb58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.547] wcscat (in: _Dest=0x831bb58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.547] wcscat (in: _Dest=0x831bb58, _Source="MSPUB8.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" [0178.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0178.548] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 1 [0178.549] wcscmp (_String1="MSPUB9.BDR", _String2=".") returned 1 [0178.549] wcscmp (_String1="MSPUB9.BDR", _String2="..") returned 1 [0178.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a858 [0178.549] wcscpy (in: _Dest=0x831a858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.549] wcscat (in: _Dest=0x831a858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.549] wcscat (in: _Dest=0x831a858, _Source="MSPUB9.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" [0178.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0178.550] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 0 [0178.550] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0185.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09520) returned 1 [0185.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39fc8) returned 1 [0185.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a88) returned 1 Thread: id = 3917 os_tid = 0x11c [0169.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39628 [0169.397] wcscpy (in: _Dest=0x3f39628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0169.397] wcscat (in: _Dest=0x3f39628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0169.397] wcscat (in: _Dest=0x3f39628, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*" [0169.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07370 [0169.397] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924460b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0173.326] wcscmp (_String1=".", _String2=".") returned 0 [0173.327] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924460b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.432] wcscmp (_String1="..", _String2=".") returned 1 [0174.432] wcscmp (_String1="..", _String2="..") returned 0 [0174.432] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x855ecd90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCSBAR.POC", cAlternateFileName="")) returned 1 [0174.432] wcscmp (_String1="ACCSBAR.POC", _String2=".") returned 1 [0174.432] wcscmp (_String1="ACCSBAR.POC", _String2="..") returned 1 [0174.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81be9a8 [0174.433] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.433] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.433] wcscat (in: _Dest=0x81be9a8, _Source="ACCSBAR.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" [0179.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2734 [0179.942] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x855ecd90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1cba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCTBOX.POC", cAlternateFileName="")) returned 1 [0179.942] wcscmp (_String1="ACCTBOX.POC", _String2=".") returned 1 [0179.942] wcscmp (_String1="ACCTBOX.POC", _String2="..") returned 1 [0179.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f306b0 [0179.942] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.942] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.942] wcscat (in: _Dest=0x3f306b0, _Source="ACCTBOX.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" [0179.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0179.944] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbe0b00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabbe0b00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x5f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.DPV", cAlternateFileName="")) returned 1 [0179.944] wcscmp (_String1="AD.DPV", _String2=".") returned 1 [0179.944] wcscmp (_String1="AD.DPV", _String2="..") returned 1 [0179.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e24640 [0179.944] wcscpy (in: _Dest=0x3e24640, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.944] wcscat (in: _Dest=0x3e24640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.944] wcscat (in: _Dest=0x3e24640, _Source="AD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" [0179.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0179.945] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82f2f00, ftCreationTime.dwHighDateTime=0x1c91826, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe82f2f00, ftLastWriteTime.dwHighDateTime=0x1c91826, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.XML", cAlternateFileName="")) returned 1 [0179.946] wcscmp (_String1="AD.XML", _String2=".") returned 1 [0179.946] wcscmp (_String1="AD.XML", _String2="..") returned 1 [0179.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e249c0 [0179.946] wcscpy (in: _Dest=0x3e249c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.946] wcscat (in: _Dest=0x3e249c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.946] wcscat (in: _Dest=0x3e249c0, _Source="AD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" [0179.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e249c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0179.948] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xb95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD98.POC", cAlternateFileName="")) returned 1 [0179.948] wcscmp (_String1="AD98.POC", _String2=".") returned 1 [0179.948] wcscmp (_String1="AD98.POC", _String2="..") returned 1 [0179.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e24440 [0179.948] wcscpy (in: _Dest=0x3e24440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.948] wcscat (in: _Dest=0x3e24440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.948] wcscat (in: _Dest=0x3e24440, _Source="AD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" [0179.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0179.949] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76535cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x854, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADRESPEL.POC", cAlternateFileName="")) returned 1 [0179.949] wcscmp (_String1="ADRESPEL.POC", _String2=".") returned 1 [0179.949] wcscmp (_String1="ADRESPEL.POC", _String2="..") returned 1 [0179.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30160 [0179.949] wcscpy (in: _Dest=0x3f30160, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.949] wcscat (in: _Dest=0x3f30160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.949] wcscat (in: _Dest=0x3f30160, _Source="ADRESPEL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" [0179.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0179.950] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x594c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR98.POC", cAlternateFileName="")) returned 1 [0179.950] wcscmp (_String1="AIR98.POC", _String2=".") returned 1 [0179.950] wcscmp (_String1="AIR98.POC", _String2="..") returned 1 [0179.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e248c0 [0179.950] wcscpy (in: _Dest=0x3e248c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.951] wcscat (in: _Dest=0x3e248c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.951] wcscat (in: _Dest=0x3e248c0, _Source="AIR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" [0179.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e248c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0179.952] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa402, dwReserved0=0x0, dwReserved1=0x0, cFileName="AWARDHM.POC", cAlternateFileName="")) returned 1 [0179.952] wcscmp (_String1="AWARDHM.POC", _String2=".") returned 1 [0179.952] wcscmp (_String1="AWARDHM.POC", _String2="..") returned 1 [0179.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f301e8 [0179.952] wcscpy (in: _Dest=0x3f301e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.952] wcscat (in: _Dest=0x3f301e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.952] wcscat (in: _Dest=0x3f301e8, _Source="AWARDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" [0179.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f301e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0179.953] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x91cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BAN98.POC", cAlternateFileName="")) returned 1 [0179.953] wcscmp (_String1="BAN98.POC", _String2=".") returned 1 [0179.953] wcscmp (_String1="BAN98.POC", _String2="..") returned 1 [0179.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e241c0 [0179.953] wcscpy (in: _Dest=0x3e241c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.953] wcscat (in: _Dest=0x3e241c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.953] wcscat (in: _Dest=0x3e241c0, _Source="BAN98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" [0179.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e241c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0179.954] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbe0b00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabbe0b00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xd2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.DPV", cAlternateFileName="")) returned 1 [0179.954] wcscmp (_String1="BANNER.DPV", _String2=".") returned 1 [0179.954] wcscmp (_String1="BANNER.DPV", _String2="..") returned 1 [0179.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f310c8 [0179.954] wcscpy (in: _Dest=0x3f310c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.955] wcscat (in: _Dest=0x3f310c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.955] wcscat (in: _Dest=0x3f310c8, _Source="BANNER.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" [0179.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f310c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0179.956] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5075b00, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5075b00, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0x236c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.XML", cAlternateFileName="")) returned 1 [0179.956] wcscmp (_String1="BANNER.XML", _String2=".") returned 1 [0179.956] wcscmp (_String1="BANNER.XML", _String2="..") returned 1 [0179.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30270 [0179.956] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.956] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.956] wcscat (in: _Dest=0x3f30270, _Source="BANNER.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" [0179.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0179.957] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x4d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BDRTKFUL.POC", cAlternateFileName="")) returned 1 [0179.957] wcscmp (_String1="BDRTKFUL.POC", _String2=".") returned 1 [0179.957] wcscmp (_String1="BDRTKFUL.POC", _String2="..") returned 1 [0179.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2feb8 [0179.957] wcscpy (in: _Dest=0x3f2feb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.957] wcscat (in: _Dest=0x3f2feb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.957] wcscat (in: _Dest=0x3f2feb8, _Source="BDRTKFUL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" [0179.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2feb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0179.959] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae206500, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae206500, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x3f40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.DPV", cAlternateFileName="")) returned 1 [0179.959] wcscmp (_String1="BIZCARD.DPV", _String2=".") returned 1 [0179.959] wcscmp (_String1="BIZCARD.DPV", _String2="..") returned 1 [0179.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f300d8 [0179.959] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.959] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.959] wcscat (in: _Dest=0x3f300d8, _Source="BIZCARD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" [0179.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0179.960] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd02c200, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd02c200, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x31ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.XML", cAlternateFileName="")) returned 1 [0179.960] wcscmp (_String1="BIZCARD.XML", _String2=".") returned 1 [0179.960] wcscmp (_String1="BIZCARD.XML", _String2="..") returned 1 [0179.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30050 [0179.960] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.960] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.960] wcscat (in: _Dest=0x3f30050, _Source="BIZCARD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" [0179.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0179.961] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0c4700, ftCreationTime.dwHighDateTime=0x1c5eecc, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f0c4700, ftLastWriteTime.dwHighDateTime=0x1c5eecc, nFileSizeHigh=0x0, nFileSizeLow=0x1b7ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.DPV", cAlternateFileName="")) returned 1 [0179.961] wcscmp (_String1="BIZFORM.DPV", _String2=".") returned 1 [0179.962] wcscmp (_String1="BIZFORM.DPV", _String2="..") returned 1 [0179.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30958 [0179.962] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.962] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.962] wcscat (in: _Dest=0x3f30958, _Source="BIZFORM.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" [0179.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0179.963] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceb4a500, ftCreationTime.dwHighDateTime=0x1ca5cbd, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xceb4a500, ftLastWriteTime.dwHighDateTime=0x1ca5cbd, nFileSizeHigh=0x0, nFileSizeLow=0x10a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.XML", cAlternateFileName="")) returned 1 [0179.963] wcscmp (_String1="BIZFORM.XML", _String2=".") returned 1 [0179.963] wcscmp (_String1="BIZFORM.XML", _String2="..") returned 1 [0179.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f31370 [0179.963] wcscpy (in: _Dest=0x3f31370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.963] wcscat (in: _Dest=0x3f31370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.963] wcscat (in: _Dest=0x3f31370, _Source="BIZFORM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" [0179.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0179.964] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3378a00, ftCreationTime.dwHighDateTime=0x1c9c8e6, ftLastAccessTime.dwLowDateTime=0x76d185b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3378a00, ftLastWriteTime.dwHighDateTime=0x1c9c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xf0ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.DPV", cAlternateFileName="")) returned 1 [0179.964] wcscmp (_String1="BORDERBB.DPV", _String2=".") returned 1 [0179.964] wcscmp (_String1="BORDERBB.DPV", _String2="..") returned 1 [0179.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2fe30 [0179.965] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.965] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.965] wcscat (in: _Dest=0x3f2fe30, _Source="BORDERBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" [0179.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0179.966] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd923ec00, ftCreationTime.dwHighDateTime=0x1c97a67, ftLastAccessTime.dwLowDateTime=0x86ac0e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd923ec00, ftLastWriteTime.dwHighDateTime=0x1c97a67, nFileSizeHigh=0x0, nFileSizeLow=0x4e42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.POC", cAlternateFileName="")) returned 1 [0179.966] wcscmp (_String1="BORDERBB.POC", _String2=".") returned 1 [0179.966] wcscmp (_String1="BORDERBB.POC", _String2="..") returned 1 [0179.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f307c0 [0179.966] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.966] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.966] wcscat (in: _Dest=0x3f307c0, _Source="BORDERBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" [0179.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0179.967] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450d6300, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86ac0e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x450d6300, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3f046, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCH98SP.POC", cAlternateFileName="")) returned 1 [0179.967] wcscmp (_String1="BRCH98SP.POC", _String2=".") returned 1 [0179.967] wcscmp (_String1="BRCH98SP.POC", _String2="..") returned 1 [0179.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2fc10 [0179.968] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.968] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.968] wcscat (in: _Dest=0x3f2fc10, _Source="BRCH98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" [0179.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0179.969] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc7f800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4fc7f800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x98f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR11.POC", cAlternateFileName="")) returned 1 [0179.969] wcscmp (_String1="BRCHUR11.POC", _String2=".") returned 1 [0179.969] wcscmp (_String1="BRCHUR11.POC", _String2="..") returned 1 [0179.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30490 [0179.969] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.969] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.969] wcscat (in: _Dest=0x3f30490, _Source="BRCHUR11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" [0179.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0179.970] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x243f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR98.POC", cAlternateFileName="")) returned 1 [0179.970] wcscmp (_String1="BRCHUR98.POC", _String2=".") returned 1 [0179.970] wcscmp (_String1="BRCHUR98.POC", _String2="..") returned 1 [0179.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30e20 [0179.970] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.970] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.970] wcscat (in: _Dest=0x3f30e20, _Source="BRCHUR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" [0179.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0179.972] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1333500, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1333500, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xa7190, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.DPV", cAlternateFileName="")) returned 1 [0179.972] wcscmp (_String1="BROCHURE.DPV", _String2=".") returned 1 [0179.972] wcscmp (_String1="BROCHURE.DPV", _String2="..") returned 1 [0179.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30408 [0179.972] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.972] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.972] wcscat (in: _Dest=0x3f30408, _Source="BROCHURE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" [0179.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0179.973] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad53ba00, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad53ba00, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x757a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.XML", cAlternateFileName="")) returned 1 [0179.973] wcscmp (_String1="BROCHURE.XML", _String2=".") returned 1 [0179.973] wcscmp (_String1="BROCHURE.XML", _String2="..") returned 1 [0179.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30c00 [0179.973] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.973] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.974] wcscat (in: _Dest=0x3f30c00, _Source="BROCHURE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" [0179.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0179.975] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS2BARB.POC", cAlternateFileName="")) returned 1 [0179.975] wcscmp (_String1="BS2BARB.POC", _String2=".") returned 1 [0179.975] wcscmp (_String1="BS2BARB.POC", _String2="..") returned 1 [0179.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f312e8 [0179.975] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.975] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.975] wcscat (in: _Dest=0x3f312e8, _Source="BS2BARB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" [0179.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0179.976] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS4BOXES.POC", cAlternateFileName="")) returned 1 [0179.976] wcscmp (_String1="BS4BOXES.POC", _String2=".") returned 1 [0179.976] wcscmp (_String1="BS4BOXES.POC", _String2="..") returned 1 [0179.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f302f8 [0179.977] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.977] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.977] wcscat (in: _Dest=0x3f302f8, _Source="BS4BOXES.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" [0179.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0179.978] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS53BOXS.POC", cAlternateFileName="")) returned 1 [0179.978] wcscmp (_String1="BS53BOXS.POC", _String2=".") returned 1 [0179.978] wcscmp (_String1="BS53BOXS.POC", _String2="..") returned 1 [0179.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30b78 [0179.978] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0179.978] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0179.978] wcscat (in: _Dest=0x3f30b78, _Source="BS53BOXS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" [0179.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0 [0180.313] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x12c2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARD11.POC", cAlternateFileName="")) returned 1 [0180.313] wcscmp (_String1="BZCARD11.POC", _String2=".") returned 1 [0180.313] wcscmp (_String1="BZCARD11.POC", _String2="..") returned 1 [0180.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f7d0 [0180.313] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0180.313] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0180.313] wcscat (in: _Dest=0x3f2f7d0, _Source="BZCARD11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" [0180.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2570 [0180.709] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff7b700, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ff7b700, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xe6f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARDHM.POC", cAlternateFileName="")) returned 1 [0180.709] wcscmp (_String1="BZCARDHM.POC", _String2=".") returned 1 [0180.709] wcscmp (_String1="BZCARDHM.POC", _String2="..") returned 1 [0180.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30ea8 [0180.710] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0180.710] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0180.710] wcscat (in: _Dest=0x3f30ea8, _Source="BZCARDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" [0180.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1588 [0180.711] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff7b700, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ff7b700, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x6214, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCD98SP.POC", cAlternateFileName="")) returned 1 [0180.711] wcscmp (_String1="BZCD98SP.POC", _String2=".") returned 1 [0180.711] wcscmp (_String1="BZCD98SP.POC", _String2="..") returned 1 [0180.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f308d0 [0180.712] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0180.712] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0180.712] wcscat (in: _Dest=0x3f308d0, _Source="BZCD98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" [0180.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c [0180.713] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738b3e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76dd6c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x738b3e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3caa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCRD98.POC", cAlternateFileName="")) returned 1 [0180.713] wcscmp (_String1="BZCRD98.POC", _String2=".") returned 1 [0180.713] wcscmp (_String1="BZCRD98.POC", _String2="..") returned 1 [0180.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30628 [0180.713] wcscpy (in: _Dest=0x3f30628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0180.713] wcscat (in: _Dest=0x3f30628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0180.713] wcscat (in: _Dest=0x3f30628, _Source="BZCRD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" [0180.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0180.714] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbedca00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcbedca00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x148f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.DPV", cAlternateFileName="")) returned 1 [0180.715] wcscmp (_String1="CALENDAR.DPV", _String2=".") returned 1 [0180.715] wcscmp (_String1="CALENDAR.DPV", _String2="..") returned 1 [0180.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f4a0 [0180.715] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0180.715] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0180.715] wcscat (in: _Dest=0x3f2f4a0, _Source="CALENDAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" [0180.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0180.716] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34656b00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34656b00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x2614, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.XML", cAlternateFileName="")) returned 1 [0180.716] wcscmp (_String1="CALENDAR.XML", _String2=".") returned 1 [0180.716] wcscmp (_String1="CALENDAR.XML", _String2="..") returned 1 [0180.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f31040 [0180.716] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0180.716] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0180.717] wcscat (in: _Dest=0x3f31040, _Source="CALENDAR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" [0180.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598 [0180.718] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771ec500, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x771ec500, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x329e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALHM.POC", cAlternateFileName="")) returned 1 [0180.718] wcscmp (_String1="CALHM.POC", _String2=".") returned 1 [0180.718] wcscmp (_String1="CALHM.POC", _String2="..") returned 1 [0180.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e243c0 [0180.718] wcscpy (in: _Dest=0x3e243c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0180.718] wcscat (in: _Dest=0x3e243c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0180.718] wcscat (in: _Dest=0x3e243c0, _Source="CALHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" [0180.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e243c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x159c [0180.719] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e759200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76e490b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9e759200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1a6da2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR98.POC", cAlternateFileName="")) returned 1 [0181.713] wcscmp (_String1="CALNDR98.POC", _String2=".") returned 1 [0181.713] wcscmp (_String1="CALNDR98.POC", _String2="..") returned 1 [0181.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bede8 [0181.713] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.713] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.713] wcscat (in: _Dest=0x81bede8, _Source="CALNDR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" [0185.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0185.630] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2091900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86bcb7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2091900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1b8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO11.POC", cAlternateFileName="")) returned 1 [0185.630] wcscmp (_String1="CALSO11.POC", _String2=".") returned 1 [0185.630] wcscmp (_String1="CALSO11.POC", _String2="..") returned 1 [0185.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053d20 [0185.630] wcscpy (in: _Dest=0x8053d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.630] wcscat (in: _Dest=0x8053d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.630] wcscat (in: _Dest=0x8053d20, _Source="CALSO11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" [0185.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0185.632] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3ae00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86bcb7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacc3ae00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x696d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO98.POC", cAlternateFileName="")) returned 1 [0185.632] wcscmp (_String1="CALSO98.POC", _String2=".") returned 1 [0185.632] wcscmp (_String1="CALSO98.POC", _String2="..") returned 1 [0185.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8054628 [0185.632] wcscpy (in: _Dest=0x8054628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.632] wcscat (in: _Dest=0x8054628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.632] wcscat (in: _Dest=0x8054628, _Source="CALSO98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" [0185.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8054628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0185.633] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0c2700, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba0c2700, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x4e4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.DPV", cAlternateFileName="")) returned 1 [0185.633] wcscmp (_String1="CATALOG.DPV", _String2=".") returned 1 [0185.633] wcscmp (_String1="CATALOG.DPV", _String2="..") returned 1 [0185.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x80540d8 [0185.633] wcscpy (in: _Dest=0x80540d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.633] wcscat (in: _Dest=0x80540d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.633] wcscat (in: _Dest=0x80540d8, _Source="CATALOG.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" [0185.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80540d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0185.634] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8c7900, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b8c7900, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.XML", cAlternateFileName="")) returned 1 [0185.634] wcscmp (_String1="CATALOG.XML", _String2=".") returned 1 [0185.634] wcscmp (_String1="CATALOG.XML", _String2="..") returned 1 [0185.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30c88 [0185.634] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.634] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.634] wcscat (in: _Dest=0x3f30c88, _Source="CATALOG.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" [0185.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0185.635] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1886200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1886200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x62f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ.POC", cAlternateFileName="")) returned 1 [0185.635] wcscmp (_String1="CATWIZ.POC", _String2=".") returned 1 [0185.635] wcscmp (_String1="CATWIZ.POC", _String2="..") returned 1 [0185.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30a68 [0185.636] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.636] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.636] wcscat (in: _Dest=0x3f30a68, _Source="CATWIZ.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" [0185.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0185.637] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eabc00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3eabc00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x24f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ11.POC", cAlternateFileName="")) returned 1 [0185.637] wcscmp (_String1="CATWIZ11.POC", _String2=".") returned 1 [0185.637] wcscmp (_String1="CATWIZ11.POC", _String2="..") returned 1 [0185.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f968 [0185.637] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.637] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.637] wcscat (in: _Dest=0x3f2f968, _Source="CATWIZ11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" [0185.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0185.638] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e92000, ftCreationTime.dwHighDateTime=0x1c6528d, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e92000, ftLastWriteTime.dwHighDateTime=0x1c6528d, nFileSizeHigh=0x0, nFileSizeLow=0x2c1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.DPV", cAlternateFileName="")) returned 1 [0185.638] wcscmp (_String1="CERT.DPV", _String2=".") returned 1 [0185.638] wcscmp (_String1="CERT.DPV", _String2="..") returned 1 [0185.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831aed8 [0185.638] wcscpy (in: _Dest=0x831aed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.638] wcscat (in: _Dest=0x831aed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.638] wcscat (in: _Dest=0x831aed8, _Source="CERT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" [0185.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831aed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0185.639] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46470e00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46470e00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x170a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.XML", cAlternateFileName="")) returned 1 [0185.639] wcscmp (_String1="CERT.XML", _String2=".") returned 1 [0185.639] wcscmp (_String1="CERT.XML", _String2="..") returned 1 [0185.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831b9d8 [0185.639] wcscpy (in: _Dest=0x831b9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.639] wcscat (in: _Dest=0x831b9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.639] wcscat (in: _Dest=0x831b9d8, _Source="CERT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" [0185.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0185.640] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eabc00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3eabc00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x11b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98.POC", cAlternateFileName="")) returned 1 [0185.640] wcscmp (_String1="CERT98.POC", _String2=".") returned 1 [0185.640] wcscmp (_String1="CERT98.POC", _String2="..") returned 1 [0185.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2fda8 [0185.640] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.640] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.640] wcscat (in: _Dest=0x3f2fda8, _Source="CERT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" [0185.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0185.641] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eabc00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3eabc00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x53bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98SP.POC", cAlternateFileName="")) returned 1 [0185.641] wcscmp (_String1="CERT98SP.POC", _String2=".") returned 1 [0185.641] wcscmp (_String1="CERT98SP.POC", _String2="..") returned 1 [0185.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30270 [0185.641] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.641] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.641] wcscat (in: _Dest=0x3f30270, _Source="CERT98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" [0185.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0185.643] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51be900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb51be900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x170e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKER.POC", cAlternateFileName="")) returned 1 [0185.643] wcscmp (_String1="CHECKER.POC", _String2=".") returned 1 [0185.643] wcscmp (_String1="CHECKER.POC", _String2="..") returned 1 [0185.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30050 [0185.643] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.643] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.643] wcscat (in: _Dest=0x3f30050, _Source="CHECKER.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" [0185.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0185.644] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28637200, ftCreationTime.dwHighDateTime=0x1c9c765, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28637200, ftLastWriteTime.dwHighDateTime=0x1c9c765, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.DPV", cAlternateFileName="CONTAC~1.DPV")) returned 1 [0185.644] wcscmp (_String1="CONTACTINFOBB.DPV", _String2=".") returned 1 [0185.644] wcscmp (_String1="CONTACTINFOBB.DPV", _String2="..") returned 1 [0185.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df268 [0185.644] wcscpy (in: _Dest=0x81df268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.644] wcscat (in: _Dest=0x81df268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.644] wcscat (in: _Dest=0x81df268, _Source="CONTACTINFOBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" [0185.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0 [0185.645] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a82ab00, ftCreationTime.dwHighDateTime=0x1c9c379, ftLastAccessTime.dwLowDateTime=0x86cafff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a82ab00, ftLastWriteTime.dwHighDateTime=0x1c9c379, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.POC", cAlternateFileName="CONTAC~1.POC")) returned 1 [0185.645] wcscmp (_String1="CONTACTINFOBB.POC", _String2=".") returned 1 [0185.645] wcscmp (_String1="CONTACTINFOBB.POC", _String2="..") returned 1 [0185.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df388 [0185.646] wcscpy (in: _Dest=0x81df388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.646] wcscat (in: _Dest=0x81df388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.646] wcscat (in: _Dest=0x81df388, _Source="CONTACTINFOBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" [0185.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0185.647] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51be900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86cd6150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb51be900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xc692, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPON.POC", cAlternateFileName="")) returned 1 [0185.647] wcscmp (_String1="COUPON.POC", _String2=".") returned 1 [0185.647] wcscmp (_String1="COUPON.POC", _String2="..") returned 1 [0185.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30958 [0185.647] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.647] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.647] wcscat (in: _Dest=0x3f30958, _Source="COUPON.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" [0185.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0185.648] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25252000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25252000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.DPV", cAlternateFileName="")) returned 1 [0185.648] wcscmp (_String1="DGACCBAR.DPV", _String2=".") returned 1 [0185.648] wcscmp (_String1="DGACCBAR.DPV", _String2="..") returned 1 [0185.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f31370 [0185.648] wcscpy (in: _Dest=0x3f31370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.648] wcscat (in: _Dest=0x3f31370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.648] wcscat (in: _Dest=0x3f31370, _Source="DGACCBAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" [0185.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0185.650] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f42cd00, ftCreationTime.dwHighDateTime=0x1c98dfc, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f42cd00, ftLastWriteTime.dwHighDateTime=0x1c98dfc, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.XML", cAlternateFileName="")) returned 1 [0185.650] wcscmp (_String1="DGACCBAR.XML", _String2=".") returned 1 [0185.650] wcscmp (_String1="DGACCBAR.XML", _String2="..") returned 1 [0185.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30c00 [0185.650] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.650] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.650] wcscat (in: _Dest=0x3f30c00, _Source="DGACCBAR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" [0185.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0185.651] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f3f300, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23f3f300, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.DPV", cAlternateFileName="")) returned 1 [0185.651] wcscmp (_String1="DGACCBOX.DPV", _String2=".") returned 1 [0185.651] wcscmp (_String1="DGACCBOX.DPV", _String2="..") returned 1 [0185.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f312e8 [0185.651] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.651] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.651] wcscat (in: _Dest=0x3f312e8, _Source="DGACCBOX.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" [0185.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0185.652] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b375400, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b375400, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.XML", cAlternateFileName="")) returned 1 [0185.652] wcscmp (_String1="DGACCBOX.XML", _String2=".") returned 1 [0185.652] wcscmp (_String1="DGACCBOX.XML", _String2="..") returned 1 [0185.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f302f8 [0185.653] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.653] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.653] wcscat (in: _Dest=0x3f302f8, _Source="DGACCBOX.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" [0185.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0186.425] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d61c100, ftCreationTime.dwHighDateTime=0x1c60006, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d61c100, ftLastWriteTime.dwHighDateTime=0x1c60006, nFileSizeHigh=0x0, nFileSizeLow=0x4b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.DPV", cAlternateFileName="")) returned 1 [0186.425] wcscmp (_String1="DGAD.DPV", _String2=".") returned 1 [0186.425] wcscmp (_String1="DGAD.DPV", _String2="..") returned 1 [0186.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831bd58 [0186.425] wcscpy (in: _Dest=0x831bd58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0186.425] wcscat (in: _Dest=0x831bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0186.425] wcscat (in: _Dest=0x831bd58, _Source="DGAD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" [0187.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2664 [0187.331] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38f8f00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa38f8f00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.XML", cAlternateFileName="")) returned 1 [0187.331] wcscmp (_String1="DGAD.XML", _String2=".") returned 1 [0187.331] wcscmp (_String1="DGAD.XML", _String2="..") returned 1 [0187.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831b4d8 [0187.331] wcscpy (in: _Dest=0x831b4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.331] wcscat (in: _Dest=0x831b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.331] wcscat (in: _Dest=0x831b4d8, _Source="DGAD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" [0187.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0187.333] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e64a900, ftCreationTime.dwHighDateTime=0x1c7e927, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e64a900, ftLastWriteTime.dwHighDateTime=0x1c7e927, nFileSizeHigh=0x0, nFileSizeLow=0x5269, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.DPV", cAlternateFileName="")) returned 1 [0187.333] wcscmp (_String1="DGATNGET.DPV", _String2=".") returned 1 [0187.333] wcscmp (_String1="DGATNGET.DPV", _String2="..") returned 1 [0187.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f300d8 [0187.333] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.333] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.333] wcscat (in: _Dest=0x3f300d8, _Source="DGATNGET.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" [0187.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0187.334] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe7ca00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabe7ca00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.XML", cAlternateFileName="")) returned 1 [0187.334] wcscmp (_String1="DGATNGET.XML", _String2=".") returned 1 [0187.334] wcscmp (_String1="DGATNGET.XML", _String2="..") returned 1 [0187.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2fe30 [0187.334] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.335] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.335] wcscat (in: _Dest=0x3f2fe30, _Source="DGATNGET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" [0187.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0187.336] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7d5b00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d7d5b00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.DPV", cAlternateFileName="")) returned 1 [0187.336] wcscmp (_String1="DGBARBLL.DPV", _String2=".") returned 1 [0187.336] wcscmp (_String1="DGBARBLL.DPV", _String2="..") returned 1 [0187.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f307c0 [0187.336] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.336] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.336] wcscat (in: _Dest=0x3f307c0, _Source="DGBARBLL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" [0187.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0187.338] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f42cd00, ftCreationTime.dwHighDateTime=0x1c98dfc, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f42cd00, ftLastWriteTime.dwHighDateTime=0x1c98dfc, nFileSizeHigh=0x0, nFileSizeLow=0x456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.XML", cAlternateFileName="")) returned 1 [0187.338] wcscmp (_String1="DGBARBLL.XML", _String2=".") returned 1 [0187.338] wcscmp (_String1="DGBARBLL.XML", _String2="..") returned 1 [0187.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2fc10 [0187.338] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.338] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.338] wcscat (in: _Dest=0x3f2fc10, _Source="DGBARBLL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" [0187.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0187.339] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7d5b00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d7d5b00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.DPV", cAlternateFileName="")) returned 1 [0187.339] wcscmp (_String1="DGBORDER.DPV", _String2=".") returned 1 [0187.339] wcscmp (_String1="DGBORDER.DPV", _String2="..") returned 1 [0187.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30490 [0187.339] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.339] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.339] wcscat (in: _Dest=0x3f30490, _Source="DGBORDER.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" [0187.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0187.367] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec72200, ftCreationTime.dwHighDateTime=0x1c9a1b2, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7ec72200, ftLastWriteTime.dwHighDateTime=0x1c9a1b2, nFileSizeHigh=0x0, nFileSizeLow=0x9a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.XML", cAlternateFileName="")) returned 1 [0187.368] wcscmp (_String1="DGBORDER.XML", _String2=".") returned 1 [0187.368] wcscmp (_String1="DGBORDER.XML", _String2="..") returned 1 [0187.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30e20 [0187.368] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.368] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.368] wcscat (in: _Dest=0x3f30e20, _Source="DGBORDER.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" [0187.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0187.370] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7d5b00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d7d5b00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.DPV", cAlternateFileName="")) returned 1 [0187.370] wcscmp (_String1="DGBOXES.DPV", _String2=".") returned 1 [0187.370] wcscmp (_String1="DGBOXES.DPV", _String2="..") returned 1 [0187.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30408 [0187.370] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.370] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.370] wcscat (in: _Dest=0x3f30408, _Source="DGBOXES.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" [0187.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0187.371] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc752d500, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc752d500, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.XML", cAlternateFileName="")) returned 1 [0187.372] wcscmp (_String1="DGBOXES.XML", _String2=".") returned 1 [0187.372] wcscmp (_String1="DGBOXES.XML", _String2="..") returned 1 [0187.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30b78 [0187.372] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.372] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.372] wcscat (in: _Dest=0x3f30b78, _Source="DGBOXES.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" [0187.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0187.373] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ccc200, ftCreationTime.dwHighDateTime=0x1c685d3, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9ccc200, ftLastWriteTime.dwHighDateTime=0x1c685d3, nFileSizeHigh=0x0, nFileSizeLow=0x35468, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.DPV", cAlternateFileName="")) returned 1 [0187.373] wcscmp (_String1="DGCAL.DPV", _String2=".") returned 1 [0187.373] wcscmp (_String1="DGCAL.DPV", _String2="..") returned 1 [0187.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b058 [0187.373] wcscpy (in: _Dest=0x831b058, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.373] wcscat (in: _Dest=0x831b058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.373] wcscat (in: _Dest=0x831b058, _Source="DGCAL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" [0187.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0187.374] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0dc3d00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0dc3d00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x1e66, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.XML", cAlternateFileName="")) returned 1 [0187.374] wcscmp (_String1="DGCAL.XML", _String2=".") returned 1 [0187.374] wcscmp (_String1="DGCAL.XML", _String2="..") returned 1 [0187.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b8d8 [0187.375] wcscpy (in: _Dest=0x831b8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.375] wcscat (in: _Dest=0x831b8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.375] wcscat (in: _Dest=0x831b8d8, _Source="DGCAL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" [0187.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0187.376] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f8ebd00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f8ebd00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.DPV", cAlternateFileName="")) returned 1 [0187.376] wcscmp (_String1="DGCHKBRD.DPV", _String2=".") returned 1 [0187.376] wcscmp (_String1="DGCHKBRD.DPV", _String2="..") returned 1 [0187.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f7d0 [0187.376] wcscpy (in: _Dest=0x3f2f7d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.376] wcscat (in: _Dest=0x3f2f7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.376] wcscat (in: _Dest=0x3f2f7d0, _Source="DGCHKBRD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" [0187.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0187.377] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f42cd00, ftCreationTime.dwHighDateTime=0x1c98dfc, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f42cd00, ftLastWriteTime.dwHighDateTime=0x1c98dfc, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.XML", cAlternateFileName="")) returned 1 [0187.377] wcscmp (_String1="DGCHKBRD.XML", _String2=".") returned 1 [0187.377] wcscmp (_String1="DGCHKBRD.XML", _String2="..") returned 1 [0187.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30ea8 [0187.377] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.377] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.377] wcscat (in: _Dest=0x3f30ea8, _Source="DGCHKBRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" [0187.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b4 [0187.378] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9b3ce00, ftCreationTime.dwHighDateTime=0x1c9c4f3, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9b3ce00, ftLastWriteTime.dwHighDateTime=0x1c9c4f3, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCINFO.XML", cAlternateFileName="")) returned 1 [0187.378] wcscmp (_String1="DGCINFO.XML", _String2=".") returned 1 [0187.378] wcscmp (_String1="DGCINFO.XML", _String2="..") returned 1 [0187.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f308d0 [0187.379] wcscpy (in: _Dest=0x3f308d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0187.379] wcscat (in: _Dest=0x3f308d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0187.379] wcscat (in: _Dest=0x3f308d0, _Source="DGCINFO.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" [0187.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0187.380] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99ffd000, ftCreationTime.dwHighDateTime=0x1c5e958, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99ffd000, ftLastWriteTime.dwHighDateTime=0x1c5e958, nFileSizeHigh=0x0, nFileSizeLow=0x6082, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.DPV", cAlternateFileName="")) returned 1 [0189.570] wcscmp (_String1="DGCOUPON.DPV", _String2=".") returned 1 [0189.570] wcscmp (_String1="DGCOUPON.DPV", _String2="..") returned 1 [0189.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f668 [0189.570] wcscpy (in: _Dest=0x3e1f668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.570] wcscat (in: _Dest=0x3e1f668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.570] wcscat (in: _Dest=0x3e1f668, _Source="DGCOUPON.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" [0191.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c94 [0191.819] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18cb300, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe18cb300, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.XML", cAlternateFileName="")) returned 1 [0191.819] wcscmp (_String1="DGCOUPON.XML", _String2=".") returned 1 [0191.819] wcscmp (_String1="DGCOUPON.XML", _String2="..") returned 1 [0191.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30270 [0191.819] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.819] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.819] wcscat (in: _Dest=0x3f30270, _Source="DGCOUPON.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" [0191.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2670 [0191.820] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5c2200, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d5c2200, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.DPV", cAlternateFileName="")) returned 1 [0191.820] wcscmp (_String1="DGDOTS.DPV", _String2=".") returned 1 [0191.820] wcscmp (_String1="DGDOTS.DPV", _String2="..") returned 1 [0191.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2ffc8 [0191.821] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.821] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.821] wcscat (in: _Dest=0x3f2ffc8, _Source="DGDOTS.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" [0191.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0191.822] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f092000, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f092000, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.XML", cAlternateFileName="")) returned 1 [0191.822] wcscmp (_String1="DGDOTS.XML", _String2=".") returned 1 [0191.822] wcscmp (_String1="DGDOTS.XML", _String2="..") returned 1 [0191.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30050 [0191.822] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.822] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.822] wcscat (in: _Dest=0x3f30050, _Source="DGDOTS.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" [0191.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0191.824] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd977c00, ftCreationTime.dwHighDateTime=0x1ca0949, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd977c00, ftLastWriteTime.dwHighDateTime=0x1ca0949, nFileSizeHigh=0x0, nFileSizeLow=0x1ba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGHEADING.XML", cAlternateFileName="DGHEAD~1.XML")) returned 1 [0191.824] wcscmp (_String1="DGHEADING.XML", _String2=".") returned 1 [0191.824] wcscmp (_String1="DGHEADING.XML", _String2="..") returned 1 [0191.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f2f858 [0191.824] wcscpy (in: _Dest=0x3f2f858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.824] wcscat (in: _Dest=0x3f2f858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.824] wcscat (in: _Dest=0x3f2f858, _Source="DGHEADING.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" [0191.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0191.825] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5c2200, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d5c2200, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.DPV", cAlternateFileName="")) returned 1 [0191.825] wcscmp (_String1="DGLINACC.DPV", _String2=".") returned 1 [0191.825] wcscmp (_String1="DGLINACC.DPV", _String2="..") returned 1 [0191.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30958 [0191.826] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.826] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.826] wcscat (in: _Dest=0x3f30958, _Source="DGLINACC.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" [0191.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0191.827] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37615b00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37615b00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.XML", cAlternateFileName="")) returned 1 [0191.827] wcscmp (_String1="DGLINACC.XML", _String2=".") returned 1 [0191.827] wcscmp (_String1="DGLINACC.XML", _String2="..") returned 1 [0191.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30c88 [0191.827] wcscpy (in: _Dest=0x3f30c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.827] wcscat (in: _Dest=0x3f30c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.827] wcscat (in: _Dest=0x3f30c88, _Source="DGLINACC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" [0191.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0191.828] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84833000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84833000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2ebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.DPV", cAlternateFileName="")) returned 1 [0191.828] wcscmp (_String1="DGLOGO.DPV", _String2=".") returned 1 [0191.828] wcscmp (_String1="DGLOGO.DPV", _String2="..") returned 1 [0191.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2f4a0 [0191.828] wcscpy (in: _Dest=0x3f2f4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.829] wcscat (in: _Dest=0x3f2f4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.829] wcscat (in: _Dest=0x3f2f4a0, _Source="DGLOGO.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" [0191.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ec [0191.830] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb99600, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3fb99600, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x7ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.XML", cAlternateFileName="")) returned 1 [0191.830] wcscmp (_String1="DGLOGO.XML", _String2=".") returned 1 [0191.830] wcscmp (_String1="DGLOGO.XML", _String2="..") returned 1 [0191.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2fc10 [0191.830] wcscpy (in: _Dest=0x3f2fc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.830] wcscat (in: _Dest=0x3f2fc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.830] wcscat (in: _Dest=0x3f2fc10, _Source="DGLOGO.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" [0191.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x296c [0191.831] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5606a200, ftCreationTime.dwHighDateTime=0x1ca5800, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5606a200, ftLastWriteTime.dwHighDateTime=0x1ca5800, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMAIN.XML", cAlternateFileName="")) returned 1 [0191.831] wcscmp (_String1="DGMAIN.XML", _String2=".") returned 1 [0191.831] wcscmp (_String1="DGMAIN.XML", _String2="..") returned 1 [0191.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfb30 [0191.832] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.832] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.832] wcscat (in: _Dest=0x81bfb30, _Source="DGMAIN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" [0191.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2970 [0191.833] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84833000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84833000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.DPV", cAlternateFileName="")) returned 1 [0191.833] wcscmp (_String1="DGMARQ.DPV", _String2=".") returned 1 [0191.833] wcscmp (_String1="DGMARQ.DPV", _String2="..") returned 1 [0191.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf4d0 [0191.833] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.833] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.833] wcscat (in: _Dest=0x81bf4d0, _Source="DGMARQ.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" [0191.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0191.834] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f38df00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f38df00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.XML", cAlternateFileName="")) returned 1 [0191.834] wcscmp (_String1="DGMARQ.XML", _String2=".") returned 1 [0191.834] wcscmp (_String1="DGMARQ.XML", _String2="..") returned 1 [0191.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf6f0 [0191.835] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.835] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.835] wcscat (in: _Dest=0x81bf6f0, _Source="DGMARQ.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" [0191.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0191.836] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335b500, ftCreationTime.dwHighDateTime=0x1c7e92d, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x335b500, ftLastWriteTime.dwHighDateTime=0x1c7e92d, nFileSizeHigh=0x0, nFileSizeLow=0x50f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMASTHD.DPV", cAlternateFileName="")) returned 1 [0191.836] wcscmp (_String1="DGMASTHD.DPV", _String2=".") returned 1 [0191.836] wcscmp (_String1="DGMASTHD.DPV", _String2="..") returned 1 [0191.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfdd8 [0191.836] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.836] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.836] wcscat (in: _Dest=0x81bfdd8, _Source="DGMASTHD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" [0191.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a0 [0191.837] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df85b00, ftCreationTime.dwHighDateTime=0x1c62793, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3df85b00, ftLastWriteTime.dwHighDateTime=0x1c62793, nFileSizeHigh=0x0, nFileSizeLow=0x71a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.DPV", cAlternateFileName="")) returned 1 [0191.837] wcscmp (_String1="DGNAVBAR.DPV", _String2=".") returned 1 [0191.837] wcscmp (_String1="DGNAVBAR.DPV", _String2="..") returned 1 [0191.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81c0080 [0191.837] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.838] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.838] wcscat (in: _Dest=0x81c0080, _Source="DGNAVBAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" [0191.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0191.839] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fe6600, ftCreationTime.dwHighDateTime=0x1c944f8, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24fe6600, ftLastWriteTime.dwHighDateTime=0x1c944f8, nFileSizeHigh=0x0, nFileSizeLow=0x11c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.XML", cAlternateFileName="")) returned 1 [0191.839] wcscmp (_String1="DGNAVBAR.XML", _String2=".") returned 1 [0191.839] wcscmp (_String1="DGNAVBAR.XML", _String2="..") returned 1 [0191.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf778 [0191.839] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.839] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.839] wcscat (in: _Dest=0x81bf778, _Source="DGNAVBAR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" [0191.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2648 [0191.840] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c35500, ftCreationTime.dwHighDateTime=0x1c9a70e, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x70c35500, ftLastWriteTime.dwHighDateTime=0x1c9a70e, nFileSizeHigh=0x0, nFileSizeLow=0x1eeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.DPV", cAlternateFileName="")) returned 1 [0191.840] wcscmp (_String1="DGPICCAP.DPV", _String2=".") returned 1 [0191.840] wcscmp (_String1="DGPICCAP.DPV", _String2="..") returned 1 [0191.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfa20 [0191.841] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.841] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.841] wcscat (in: _Dest=0x81bfa20, _Source="DGPICCAP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" [0191.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e0 [0191.842] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cbf3e00, ftCreationTime.dwHighDateTime=0x1c9a725, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4cbf3e00, ftLastWriteTime.dwHighDateTime=0x1c9a725, nFileSizeHigh=0x0, nFileSizeLow=0x1aca, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.XML", cAlternateFileName="")) returned 1 [0191.842] wcscmp (_String1="DGPICCAP.XML", _String2=".") returned 1 [0191.842] wcscmp (_String1="DGPICCAP.XML", _String2="..") returned 1 [0191.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfaa8 [0191.842] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.842] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.842] wcscat (in: _Dest=0x81bfaa8, _Source="DGPICCAP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" [0191.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e4 [0191.843] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1e5a00, ftCreationTime.dwHighDateTime=0x1c7e47b, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc1e5a00, ftLastWriteTime.dwHighDateTime=0x1c7e47b, nFileSizeHigh=0x0, nFileSizeLow=0x938f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.DPV", cAlternateFileName="")) returned 1 [0191.843] wcscmp (_String1="DGPQUOT.DPV", _String2=".") returned 1 [0191.843] wcscmp (_String1="DGPQUOT.DPV", _String2="..") returned 1 [0191.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf910 [0191.843] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.844] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.844] wcscat (in: _Dest=0x81bf910, _Source="DGPQUOT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" [0191.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0191.845] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849e300, ftCreationTime.dwHighDateTime=0x1c97a6a, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7849e300, ftLastWriteTime.dwHighDateTime=0x1c97a6a, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.XML", cAlternateFileName="")) returned 1 [0191.845] wcscmp (_String1="DGPQUOT.XML", _String2=".") returned 1 [0191.845] wcscmp (_String1="DGPQUOT.XML", _String2="..") returned 1 [0191.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf800 [0191.845] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.845] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.845] wcscat (in: _Dest=0x81bf800, _Source="DGPQUOT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" [0191.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0191.846] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09eb100, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb09eb100, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.DPV", cAlternateFileName="")) returned 1 [0191.846] wcscmp (_String1="DGPUNCT.DPV", _String2=".") returned 1 [0191.846] wcscmp (_String1="DGPUNCT.DPV", _String2="..") returned 1 [0191.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf338 [0191.847] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.847] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.847] wcscat (in: _Dest=0x81bf338, _Source="DGPUNCT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" [0191.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0191.848] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe56edf00, ftCreationTime.dwHighDateTime=0x1c9c8c9, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe56edf00, ftLastWriteTime.dwHighDateTime=0x1c9c8c9, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.XML", cAlternateFileName="")) returned 1 [0191.848] wcscmp (_String1="DGPUNCT.XML", _String2=".") returned 1 [0191.848] wcscmp (_String1="DGPUNCT.XML", _String2="..") returned 1 [0191.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf668 [0191.848] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.848] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.848] wcscat (in: _Dest=0x81bf668, _Source="DGPUNCT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" [0191.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0191.850] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb99ad500, ftCreationTime.dwHighDateTime=0x1c685d8, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb99ad500, ftLastWriteTime.dwHighDateTime=0x1c685d8, nFileSizeHigh=0x0, nFileSizeLow=0x6e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.DPV", cAlternateFileName="")) returned 1 [0191.850] wcscmp (_String1="DGREPFRM.DPV", _String2=".") returned 1 [0191.850] wcscmp (_String1="DGREPFRM.DPV", _String2="..") returned 1 [0191.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfe60 [0191.850] wcscpy (in: _Dest=0x81bfe60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.850] wcscat (in: _Dest=0x81bfe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.850] wcscat (in: _Dest=0x81bfe60, _Source="DGREPFRM.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" [0191.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0191.855] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c04d600, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8c04d600, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.XML", cAlternateFileName="")) returned 1 [0191.855] wcscmp (_String1="DGREPFRM.XML", _String2=".") returned 1 [0191.855] wcscmp (_String1="DGREPFRM.XML", _String2="..") returned 1 [0191.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81c03b0 [0191.855] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.855] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.856] wcscat (in: _Dest=0x81c03b0, _Source="DGREPFRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" [0191.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0191.857] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a0aa00, ftCreationTime.dwHighDateTime=0x1c685d9, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10a0aa00, ftLastWriteTime.dwHighDateTime=0x1c685d9, nFileSizeHigh=0x0, nFileSizeLow=0xae41, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.DPV", cAlternateFileName="")) returned 1 [0191.857] wcscmp (_String1="DGSIDEBR.DPV", _String2=".") returned 1 [0191.857] wcscmp (_String1="DGSIDEBR.DPV", _String2="..") returned 1 [0191.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf448 [0191.857] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.857] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.857] wcscat (in: _Dest=0x81bf448, _Source="DGSIDEBR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" [0191.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0 [0191.858] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8806b600, ftCreationTime.dwHighDateTime=0x1c97750, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8806b600, ftLastWriteTime.dwHighDateTime=0x1c97750, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.XML", cAlternateFileName="")) returned 1 [0191.858] wcscmp (_String1="DGSIDEBR.XML", _String2=".") returned 1 [0191.858] wcscmp (_String1="DGSIDEBR.XML", _String2="..") returned 1 [0191.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bef80 [0191.859] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.859] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.859] wcscat (in: _Dest=0x81bef80, _Source="DGSIDEBR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" [0191.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0192.084] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d41b00, ftCreationTime.dwHighDateTime=0x1c97750, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5d41b00, ftLastWriteTime.dwHighDateTime=0x1c97750, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBRV.XML", cAlternateFileName="DGSIDE~1.XML")) returned 1 [0192.084] wcscmp (_String1="DGSIDEBRV.XML", _String2=".") returned 1 [0192.084] wcscmp (_String1="DGSIDEBRV.XML", _String2="..") returned 1 [0192.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30270 [0192.084] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.084] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.084] wcscat (in: _Dest=0x3f30270, _Source="DGSIDEBRV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" [0192.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e8 [0192.542] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c1700, ftCreationTime.dwHighDateTime=0x1c9774d, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x930c1700, ftLastWriteTime.dwHighDateTime=0x1c9774d, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORY.XML", cAlternateFileName="")) returned 1 [0192.542] wcscmp (_String1="DGSTORY.XML", _String2=".") returned 1 [0192.542] wcscmp (_String1="DGSTORY.XML", _String2="..") returned 1 [0192.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfcc8 [0192.542] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.542] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.542] wcscat (in: _Dest=0x81bfcc8, _Source="DGSTORY.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" [0192.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0192.543] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b645200, ftCreationTime.dwHighDateTime=0x1c9774d, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b645200, ftLastWriteTime.dwHighDateTime=0x1c9774d, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORYVERT.XML", cAlternateFileName="DGSTOR~1.XML")) returned 1 [0192.543] wcscmp (_String1="DGSTORYVERT.XML", _String2=".") returned 1 [0192.543] wcscmp (_String1="DGSTORYVERT.XML", _String2="..") returned 1 [0192.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de7b8 [0192.544] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.544] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.544] wcscat (in: _Dest=0x81de7b8, _Source="DGSTORYVERT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" [0192.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0192.545] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa8d000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa8d000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTEAR.DPV", cAlternateFileName="")) returned 1 [0192.545] wcscmp (_String1="DGTEAR.DPV", _String2=".") returned 1 [0192.545] wcscmp (_String1="DGTEAR.DPV", _String2="..") returned 1 [0192.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bee70 [0192.545] wcscpy (in: _Dest=0x81bee70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.545] wcscat (in: _Dest=0x81bee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.545] wcscat (in: _Dest=0x81bee70, _Source="DGTEAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" [0192.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0192.546] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8442b700, ftCreationTime.dwHighDateTime=0x1c685d9, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8442b700, ftLastWriteTime.dwHighDateTime=0x1c685d9, nFileSizeHigh=0x0, nFileSizeLow=0xe50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.DPV", cAlternateFileName="")) returned 1 [0192.546] wcscmp (_String1="DGTOC.DPV", _String2=".") returned 1 [0192.546] wcscmp (_String1="DGTOC.DPV", _String2="..") returned 1 [0192.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5108 [0192.546] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.546] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.546] wcscat (in: _Dest=0x3dc5108, _Source="DGTOC.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" [0192.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0192.547] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2ab2d00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2ab2d00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x1712, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.XML", cAlternateFileName="")) returned 1 [0192.547] wcscmp (_String1="DGTOC.XML", _String2=".") returned 1 [0192.547] wcscmp (_String1="DGTOC.XML", _String2="..") returned 1 [0192.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5508 [0192.547] wcscpy (in: _Dest=0x3dc5508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.547] wcscat (in: _Dest=0x3dc5508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.547] wcscat (in: _Dest=0x3dc5508, _Source="DGTOC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" [0192.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0192.548] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d23b00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9d23b00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBAD.XML", cAlternateFileName="")) returned 1 [0192.548] wcscmp (_String1="DGWEBAD.XML", _String2=".") returned 1 [0192.548] wcscmp (_String1="DGWEBAD.XML", _String2="..") returned 1 [0192.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfbb8 [0192.548] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.548] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.548] wcscat (in: _Dest=0x81bfbb8, _Source="DGWEBAD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" [0192.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0192.549] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdfb500, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2fdfb500, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.DPV", cAlternateFileName="")) returned 1 [0192.549] wcscmp (_String1="DGWEBBTN.DPV", _String2=".") returned 1 [0192.549] wcscmp (_String1="DGWEBBTN.DPV", _String2="..") returned 1 [0192.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfd50 [0192.549] wcscpy (in: _Dest=0x81bfd50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.549] wcscat (in: _Dest=0x81bfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.549] wcscat (in: _Dest=0x81bfd50, _Source="DGWEBBTN.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" [0192.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0192.550] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22a7600, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb22a7600, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x110e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.XML", cAlternateFileName="")) returned 1 [0192.550] wcscmp (_String1="DGWEBBTN.XML", _String2=".") returned 1 [0192.551] wcscmp (_String1="DGWEBBTN.XML", _String2="..") returned 1 [0192.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf118 [0192.551] wcscpy (in: _Dest=0x81bf118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.551] wcscat (in: _Dest=0x81bf118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.551] wcscat (in: _Dest=0x81bf118, _Source="DGWEBBTN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" [0192.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aac [0192.552] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0264e00, ftCreationTime.dwHighDateTime=0x1c685d2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0264e00, ftLastWriteTime.dwHighDateTime=0x1c685d2, nFileSizeHigh=0x0, nFileSizeLow=0x301be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.DPV", cAlternateFileName="")) returned 1 [0195.815] wcscmp (_String1="DGWEBCAL.DPV", _String2=".") returned 1 [0195.815] wcscmp (_String1="DGWEBCAL.DPV", _String2="..") returned 1 [0195.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30270 [0195.815] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0195.815] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0195.815] wcscat (in: _Dest=0x3f30270, _Source="DGWEBCAL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" [0198.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0198.484] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8205700, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8205700, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.XML", cAlternateFileName="")) returned 1 [0198.484] wcscmp (_String1="DGWEBCAL.XML", _String2=".") returned 1 [0198.484] wcscmp (_String1="DGWEBCAL.XML", _String2="..") returned 1 [0198.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30490 [0198.484] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.484] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.484] wcscat (in: _Dest=0x3f30490, _Source="DGWEBCAL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" [0198.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0198.485] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd84c9c00, ftCreationTime.dwHighDateTime=0x1c685d7, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd84c9c00, ftLastWriteTime.dwHighDateTime=0x1c685d7, nFileSizeHigh=0x0, nFileSizeLow=0x2f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.DPV", cAlternateFileName="")) returned 1 [0198.485] wcscmp (_String1="DGWEBHD.DPV", _String2=".") returned 1 [0198.485] wcscmp (_String1="DGWEBHD.DPV", _String2="..") returned 1 [0198.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30408 [0198.486] wcscpy (in: _Dest=0x3f30408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.486] wcscat (in: _Dest=0x3f30408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.486] wcscat (in: _Dest=0x3f30408, _Source="DGWEBHD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" [0198.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2534 [0198.487] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf476500, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf476500, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x1dbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.XML", cAlternateFileName="")) returned 1 [0198.487] wcscmp (_String1="DGWEBHD.XML", _String2=".") returned 1 [0198.487] wcscmp (_String1="DGWEBHD.XML", _String2="..") returned 1 [0198.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30fb8 [0198.487] wcscpy (in: _Dest=0x3f30fb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.487] wcscat (in: _Dest=0x3f30fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.487] wcscat (in: _Dest=0x3f30fb8, _Source="DGWEBHD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" [0198.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0198.488] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c0a800, ftCreationTime.dwHighDateTime=0x1c615e0, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8c0a800, ftLastWriteTime.dwHighDateTime=0x1c615e0, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.DPV", cAlternateFileName="")) returned 1 [0198.489] wcscmp (_String1="DGWEBPQT.DPV", _String2=".") returned 1 [0198.489] wcscmp (_String1="DGWEBPQT.DPV", _String2="..") returned 1 [0198.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f31370 [0198.489] wcscpy (in: _Dest=0x3f31370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.489] wcscat (in: _Dest=0x3f31370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.489] wcscat (in: _Dest=0x3f31370, _Source="DGWEBPQT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" [0198.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0198.490] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc79fa000, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc79fa000, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.XML", cAlternateFileName="")) returned 1 [0198.490] wcscmp (_String1="DGWEBPQT.XML", _String2=".") returned 1 [0198.490] wcscmp (_String1="DGWEBPQT.XML", _String2="..") returned 1 [0198.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30c00 [0198.490] wcscpy (in: _Dest=0x3f30c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.490] wcscat (in: _Dest=0x3f30c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.490] wcscat (in: _Dest=0x3f30c00, _Source="DGWEBPQT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" [0198.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29cc [0198.491] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5e2800, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc5e2800, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBREF.XML", cAlternateFileName="")) returned 1 [0198.491] wcscmp (_String1="DGWEBREF.XML", _String2=".") returned 1 [0198.492] wcscmp (_String1="DGWEBREF.XML", _String2="..") returned 1 [0198.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30b78 [0198.492] wcscpy (in: _Dest=0x3f30b78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.492] wcscat (in: _Dest=0x3f30b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.492] wcscat (in: _Dest=0x3f30b78, _Source="DGWEBREF.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" [0198.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0198.507] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ca9400, ftCreationTime.dwHighDateTime=0x1c685d8, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd9ca9400, ftLastWriteTime.dwHighDateTime=0x1c685d8, nFileSizeHigh=0x0, nFileSizeLow=0x6df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.DPV", cAlternateFileName="")) returned 1 [0198.508] wcscmp (_String1="DGWEBSBR.DPV", _String2=".") returned 1 [0198.508] wcscmp (_String1="DGWEBSBR.DPV", _String2="..") returned 1 [0198.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30380 [0198.508] wcscpy (in: _Dest=0x3f30380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.508] wcscat (in: _Dest=0x3f30380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.508] wcscat (in: _Dest=0x3f30380, _Source="DGWEBSBR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" [0198.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0198.510] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdedf00, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xecdedf00, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.XML", cAlternateFileName="")) returned 1 [0198.510] wcscmp (_String1="DGWEBSBR.XML", _String2=".") returned 1 [0198.510] wcscmp (_String1="DGWEBSBR.XML", _String2="..") returned 1 [0198.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f638 [0198.510] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.510] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.510] wcscat (in: _Dest=0x3f2f638, _Source="DGWEBSBR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" [0198.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0198.512] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc09bc00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc09bc00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIP.DPV", cAlternateFileName="")) returned 1 [0198.512] wcscmp (_String1="DGZIP.DPV", _String2=".") returned 1 [0198.512] wcscmp (_String1="DGZIP.DPV", _String2="..") returned 1 [0198.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a6d8 [0198.512] wcscpy (in: _Dest=0x831a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.512] wcscat (in: _Dest=0x831a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.512] wcscat (in: _Dest=0x831a6d8, _Source="DGZIP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" [0198.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0198.514] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc1f000, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdfc1f000, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIPC.XML", cAlternateFileName="")) returned 1 [0198.514] wcscmp (_String1="DGZIPC.XML", _String2=".") returned 1 [0198.514] wcscmp (_String1="DGZIPC.XML", _String2="..") returned 1 [0198.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30738 [0198.514] wcscpy (in: _Dest=0x3f30738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.514] wcscat (in: _Dest=0x3f30738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.514] wcscat (in: _Dest=0x3f30738, _Source="DGZIPC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" [0198.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0198.516] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51be900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb51be900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1c56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOTS.POC", cAlternateFileName="")) returned 1 [0198.516] wcscmp (_String1="DOTS.POC", _String2=".") returned 1 [0198.516] wcscmp (_String1="DOTS.POC", _String2="..") returned 1 [0198.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x831a858 [0198.516] wcscpy (in: _Dest=0x831a858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.516] wcscat (in: _Dest=0x831a858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.516] wcscat (in: _Dest=0x831a858, _Source="DOTS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" [0198.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0198.518] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d1600, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb64d1600, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x10c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDHM.POC", cAlternateFileName="")) returned 1 [0198.518] wcscmp (_String1="DVDHM.POC", _String2=".") returned 1 [0198.518] wcscmp (_String1="DVDHM.POC", _String2="..") returned 1 [0198.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bb58 [0198.518] wcscpy (in: _Dest=0x831bb58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.518] wcscat (in: _Dest=0x831bb58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.518] wcscat (in: _Dest=0x831bb58, _Source="DVDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" [0198.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0198.519] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae206500, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8784ab30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae206500, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x7dc55, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.DPV", cAlternateFileName="")) returned 1 [0198.519] wcscmp (_String1="EMAIL.DPV", _String2=".") returned 1 [0198.519] wcscmp (_String1="EMAIL.DPV", _String2="..") returned 1 [0198.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a9d8 [0198.519] wcscpy (in: _Dest=0x831a9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.519] wcscat (in: _Dest=0x831a9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.519] wcscat (in: _Dest=0x831a9d8, _Source="EMAIL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" [0198.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0198.521] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6e1c00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x8784ab30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d6e1c00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0xd066, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.XML", cAlternateFileName="")) returned 1 [0198.521] wcscmp (_String1="EMAIL.XML", _String2=".") returned 1 [0198.521] wcscmp (_String1="EMAIL.XML", _String2="..") returned 1 [0198.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a5d8 [0198.522] wcscpy (in: _Dest=0x831a5d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.522] wcscat (in: _Dest=0x831a5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.522] wcscat (in: _Dest=0x831a5d8, _Source="EMAIL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" [0198.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0198.523] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd67e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd67e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xbc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL11.POC", cAlternateFileName="")) returned 1 [0198.523] wcscmp (_String1="EMAIL11.POC", _String2=".") returned 1 [0198.523] wcscmp (_String1="EMAIL11.POC", _String2="..") returned 1 [0198.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30f30 [0198.523] wcscpy (in: _Dest=0x3f30f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.523] wcscat (in: _Dest=0x3f30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.523] wcscat (in: _Dest=0x3f30f30, _Source="EMAIL11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" [0198.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0198.525] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4302b400, ftCreationTime.dwHighDateTime=0x1c51435, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302b400, ftLastWriteTime.dwHighDateTime=0x1c51435, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAILMOD.POC", cAlternateFileName="")) returned 1 [0198.525] wcscmp (_String1="EMAILMOD.POC", _String2=".") returned 1 [0198.525] wcscmp (_String1="EMAILMOD.POC", _String2="..") returned 1 [0198.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f31040 [0198.525] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.525] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.525] wcscat (in: _Dest=0x3f31040, _Source="EMAILMOD.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" [0198.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0198.528] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd67e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd67e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xc5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV11.POC", cAlternateFileName="")) returned 1 [0198.528] wcscmp (_String1="ENV11.POC", _String2=".") returned 1 [0198.528] wcscmp (_String1="ENV11.POC", _String2="..") returned 1 [0198.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831af58 [0198.528] wcscpy (in: _Dest=0x831af58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.528] wcscat (in: _Dest=0x831af58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.528] wcscat (in: _Dest=0x831af58, _Source="ENV11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" [0198.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831af58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0198.530] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x878bcf50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x2a052, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98.POC", cAlternateFileName="")) returned 1 [0198.530] wcscmp (_String1="ENV98.POC", _String2=".") returned 1 [0198.530] wcscmp (_String1="ENV98.POC", _String2="..") returned 1 [0198.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a7d8 [0198.530] wcscpy (in: _Dest=0x831a7d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.530] wcscat (in: _Dest=0x831a7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.530] wcscat (in: _Dest=0x831a7d8, _Source="ENV98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" [0198.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0198.531] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x878bcf50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x4af4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98SP.POC", cAlternateFileName="")) returned 1 [0198.531] wcscmp (_String1="ENV98SP.POC", _String2=".") returned 1 [0198.531] wcscmp (_String1="ENV98SP.POC", _String2="..") returned 1 [0198.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2ff40 [0198.531] wcscpy (in: _Dest=0x3f2ff40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.532] wcscat (in: _Dest=0x3f2ff40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.532] wcscat (in: _Dest=0x3f2ff40, _Source="ENV98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" [0198.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0198.550] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf519200, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf519200, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x24efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DPV", cAlternateFileName="")) returned 1 [0198.550] wcscmp (_String1="ENVELOPE.DPV", _String2=".") returned 1 [0198.550] wcscmp (_String1="ENVELOPE.DPV", _String2="..") returned 1 [0198.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2f418 [0198.551] wcscpy (in: _Dest=0x3f2f418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.551] wcscat (in: _Dest=0x3f2f418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.551] wcscat (in: _Dest=0x3f2f418, _Source="ENVELOPE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" [0198.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0198.552] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3286200, ftCreationTime.dwHighDateTime=0x1c9d3fb, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3286200, ftLastWriteTime.dwHighDateTime=0x1c9d3fb, nFileSizeHigh=0x0, nFileSizeLow=0x30de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.XML", cAlternateFileName="")) returned 1 [0198.552] wcscmp (_String1="ENVELOPE.XML", _String2=".") returned 1 [0198.552] wcscmp (_String1="ENVELOPE.XML", _String2="..") returned 1 [0198.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f668 [0198.553] wcscpy (in: _Dest=0x3e1f668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0198.553] wcscat (in: _Dest=0x3e1f668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0198.553] wcscat (in: _Dest=0x3e1f668, _Source="ENVELOPE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" [0198.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0201.500] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x8a32, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVHM.POC", cAlternateFileName="")) returned 1 [0201.501] wcscmp (_String1="ENVHM.POC", _String2=".") returned 1 [0201.501] wcscmp (_String1="ENVHM.POC", _String2="..") returned 1 [0201.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5508 [0201.501] wcscpy (in: _Dest=0x3dc5508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.501] wcscat (in: _Dest=0x3dc5508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.501] wcscat (in: _Dest=0x3dc5508, _Source="ENVHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" [0202.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0202.857] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="FEZIP.POC", cAlternateFileName="")) returned 1 [0202.857] wcscmp (_String1="FEZIP.POC", _String2=".") returned 1 [0202.857] wcscmp (_String1="FEZIP.POC", _String2="..") returned 1 [0202.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5108 [0202.857] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.857] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.857] wcscat (in: _Dest=0x3dc5108, _Source="FEZIP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" [0202.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c8 [0202.858] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36a0500, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc36a0500, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xfd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLY98SP.POC", cAlternateFileName="")) returned 1 [0202.858] wcscmp (_String1="FLY98SP.POC", _String2=".") returned 1 [0202.858] wcscmp (_String1="FLY98SP.POC", _String2="..") returned 1 [0202.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30050 [0202.858] wcscpy (in: _Dest=0x3f30050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.858] wcscat (in: _Dest=0x3f30050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.858] wcscat (in: _Dest=0x3f30050, _Source="FLY98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" [0202.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc0 [0202.859] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30b2c00, ftCreationTime.dwHighDateTime=0x1c8f1f7, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30b2c00, ftLastWriteTime.dwHighDateTime=0x1c8f1f7, nFileSizeHigh=0x0, nFileSizeLow=0x15369c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.DPV", cAlternateFileName="")) returned 1 [0202.860] wcscmp (_String1="FLYER.DPV", _String2=".") returned 1 [0202.860] wcscmp (_String1="FLYER.DPV", _String2="..") returned 1 [0202.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4608 [0202.860] wcscpy (in: _Dest=0x3dc4608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.860] wcscat (in: _Dest=0x3dc4608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.860] wcscat (in: _Dest=0x3dc4608, _Source="FLYER.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" [0202.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd8 [0202.861] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea57c00, ftCreationTime.dwHighDateTime=0x1ca57fe, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ea57c00, ftLastWriteTime.dwHighDateTime=0x1ca57fe, nFileSizeHigh=0x0, nFileSizeLow=0x13d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.XML", cAlternateFileName="")) returned 1 [0202.861] wcscmp (_String1="FLYER.XML", _String2=".") returned 1 [0202.861] wcscmp (_String1="FLYER.XML", _String2="..") returned 1 [0202.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5708 [0202.861] wcscpy (in: _Dest=0x3dc5708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.861] wcscat (in: _Dest=0x3dc5708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.861] wcscat (in: _Dest=0x3dc5708, _Source="FLYER.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" [0202.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd4 [0202.862] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cc5f00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x883993b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5cc5f00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x369a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER11.POC", cAlternateFileName="")) returned 1 [0202.862] wcscmp (_String1="FLYER11.POC", _String2=".") returned 1 [0202.862] wcscmp (_String1="FLYER11.POC", _String2="..") returned 1 [0202.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30958 [0202.862] wcscpy (in: _Dest=0x3f30958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.862] wcscat (in: _Dest=0x3f30958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.862] wcscat (in: _Dest=0x3f30958, _Source="FLYER11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" [0202.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd0 [0202.863] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2e94e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd2e94e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xe498e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER98.POC", cAlternateFileName="")) returned 1 [0202.863] wcscmp (_String1="FLYER98.POC", _String2=".") returned 1 [0202.863] wcscmp (_String1="FLYER98.POC", _String2="..") returned 1 [0202.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2ffc8 [0202.863] wcscpy (in: _Dest=0x3f2ffc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.863] wcscat (in: _Dest=0x3f2ffc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.863] wcscat (in: _Dest=0x3f2ffc8, _Source="FLYER98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" [0202.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2674 [0202.864] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41a7b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd41a7b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xd988, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYERHM.POC", cAlternateFileName="")) returned 1 [0202.864] wcscmp (_String1="FLYERHM.POC", _String2=".") returned 1 [0202.865] wcscmp (_String1="FLYERHM.POC", _String2="..") returned 1 [0202.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30270 [0202.865] wcscpy (in: _Dest=0x3f30270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.865] wcscat (in: _Dest=0x3f30270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.865] wcscat (in: _Dest=0x3f30270, _Source="FLYERHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" [0202.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d0 [0202.866] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5477300, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5477300, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x56ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.DPV", cAlternateFileName="")) returned 1 [0202.866] wcscmp (_String1="FOLDPROJ.DPV", _String2=".") returned 1 [0202.866] wcscmp (_String1="FOLDPROJ.DPV", _String2="..") returned 1 [0202.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f302f8 [0202.866] wcscpy (in: _Dest=0x3f302f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.866] wcscat (in: _Dest=0x3f302f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.866] wcscat (in: _Dest=0x3f302f8, _Source="FOLDPROJ.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" [0202.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f302f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c [0202.867] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecf0800, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ecf0800, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.XML", cAlternateFileName="")) returned 1 [0202.867] wcscmp (_String1="FOLDPROJ.XML", _String2=".") returned 1 [0202.867] wcscmp (_String1="FOLDPROJ.XML", _String2="..") returned 1 [0202.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1f558 [0202.867] wcscpy (in: _Dest=0x3e1f558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.867] wcscat (in: _Dest=0x3e1f558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.867] wcscat (in: _Dest=0x3e1f558, _Source="FOLDPROJ.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" [0202.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0202.868] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded51000, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded51000, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x8c952, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM98.POC", cAlternateFileName="")) returned 1 [0202.868] wcscmp (_String1="FORM98.POC", _String2=".") returned 1 [0202.868] wcscmp (_String1="FORM98.POC", _String2="..") returned 1 [0202.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1f5e0 [0202.868] wcscpy (in: _Dest=0x3e1f5e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.868] wcscat (in: _Dest=0x3e1f5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.869] wcscat (in: _Dest=0x3e1f5e0, _Source="FORM98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" [0202.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0202.869] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded51000, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded51000, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMCTL.POC", cAlternateFileName="")) returned 1 [0202.869] wcscmp (_String1="FORMCTL.POC", _String2=".") returned 1 [0202.870] wcscmp (_String1="FORMCTL.POC", _String2="..") returned 1 [0202.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f778 [0202.870] wcscpy (in: _Dest=0x3e1f778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0202.870] wcscat (in: _Dest=0x3e1f778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0202.870] wcscat (in: _Dest=0x3e1f778, _Source="FORMCTL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" [0202.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc8 [0202.871] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded51000, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77e80690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded51000, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FS3BOX.POC", cAlternateFileName="")) returned 1 [0204.800] wcscmp (_String1="FS3BOX.POC", _String2=".") returned 1 [0204.800] wcscmp (_String1="FS3BOX.POC", _String2="..") returned 1 [0204.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81be810 [0204.800] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0204.800] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0204.800] wcscat (in: _Dest=0x81be810, _Source="FS3BOX.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" [0205.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0205.562] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf519200, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x77ea67f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf519200, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xb0c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.DPV", cAlternateFileName="")) returned 1 [0205.562] wcscmp (_String1="GIFT.DPV", _String2=".") returned 1 [0205.562] wcscmp (_String1="GIFT.DPV", _String2="..") returned 1 [0205.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5708 [0205.562] wcscpy (in: _Dest=0x3dc5708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.562] wcscat (in: _Dest=0x3dc5708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.562] wcscat (in: _Dest=0x3dc5708, _Source="GIFT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" [0205.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0205.563] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79899d00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x77ea67f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79899d00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x14c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.XML", cAlternateFileName="")) returned 1 [0205.563] wcscmp (_String1="GIFT.XML", _String2=".") returned 1 [0205.563] wcscmp (_String1="GIFT.XML", _String2="..") returned 1 [0205.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5b88 [0205.563] wcscpy (in: _Dest=0x3dc5b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.563] wcscat (in: _Dest=0x3dc5b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.563] wcscat (in: _Dest=0x3dc5b88, _Source="GIFT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" [0205.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0205.564] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0063d00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x88692f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0063d00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x22cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT98.POC", cAlternateFileName="")) returned 1 [0205.564] wcscmp (_String1="GIFT98.POC", _String2=".") returned 1 [0205.564] wcscmp (_String1="GIFT98.POC", _String2="..") returned 1 [0205.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf888 [0205.564] wcscpy (in: _Dest=0x81bf888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.564] wcscat (in: _Dest=0x81bf888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.564] wcscat (in: _Dest=0x81bf888, _Source="GIFT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" [0205.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0205.565] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee545900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xee545900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xd6314, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREET11.POC", cAlternateFileName="")) returned 1 [0205.565] wcscmp (_String1="GREET11.POC", _String2=".") returned 1 [0205.565] wcscmp (_String1="GREET11.POC", _String2="..") returned 1 [0205.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf2b0 [0205.566] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.566] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.566] wcscat (in: _Dest=0x81bf2b0, _Source="GREET11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" [0205.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a8 [0205.567] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd560100, ftCreationTime.dwHighDateTime=0x1c5dc2c, ftLastAccessTime.dwLowDateTime=0x888f4530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd560100, ftLastWriteTime.dwHighDateTime=0x1c5dc2c, nFileSizeHigh=0x0, nFileSizeLow=0x124b3b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.DPV", cAlternateFileName="")) returned 1 [0205.567] wcscmp (_String1="GREETING.DPV", _String2=".") returned 1 [0205.567] wcscmp (_String1="GREETING.DPV", _String2="..") returned 1 [0205.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bede8 [0205.567] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.567] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.567] wcscat (in: _Dest=0x81bede8, _Source="GREETING.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" [0205.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25cc [0205.568] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa11cb700, ftCreationTime.dwHighDateTime=0x1ca57f8, ftLastAccessTime.dwLowDateTime=0x888f4530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa11cb700, ftLastWriteTime.dwHighDateTime=0x1ca57f8, nFileSizeHigh=0x0, nFileSizeLow=0xfb0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.XML", cAlternateFileName="")) returned 1 [0205.568] wcscmp (_String1="GREETING.XML", _String2=".") returned 1 [0205.568] wcscmp (_String1="GREETING.XML", _String2="..") returned 1 [0205.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81c03b0 [0205.568] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.568] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.568] wcscat (in: _Dest=0x81c03b0, _Source="GREETING.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" [0205.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d0 [0205.569] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ffc3100, ftCreationTime.dwHighDateTime=0x1c97723, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ffc3100, ftLastWriteTime.dwHighDateTime=0x1c97723, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.DPV", cAlternateFileName="HEADIN~1.DPV")) returned 1 [0205.569] wcscmp (_String1="HEADINGBB.DPV", _String2=".") returned 1 [0205.569] wcscmp (_String1="HEADINGBB.DPV", _String2="..") returned 1 [0205.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf448 [0205.569] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.569] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.569] wcscat (in: _Dest=0x81bf448, _Source="HEADINGBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" [0205.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0205.570] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c78100, ftCreationTime.dwHighDateTime=0x1c97a9d, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c78100, ftLastWriteTime.dwHighDateTime=0x1c97a9d, nFileSizeHigh=0x0, nFileSizeLow=0x27e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.POC", cAlternateFileName="HEADIN~1.POC")) returned 1 [0205.571] wcscmp (_String1="HEADINGBB.POC", _String2=".") returned 1 [0205.571] wcscmp (_String1="HEADINGBB.POC", _String2="..") returned 1 [0205.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf778 [0205.571] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.571] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.571] wcscat (in: _Dest=0x81bf778, _Source="HEADINGBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" [0205.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0205.572] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9f8e00, ftCreationTime.dwHighDateTime=0x1c5dc20, ftLastAccessTime.dwLowDateTime=0x88d1ebb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc9f8e00, ftLastWriteTime.dwHighDateTime=0x1c5dc20, nFileSizeHigh=0x0, nFileSizeLow=0x3cbaf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.DPV", cAlternateFileName="")) returned 1 [0205.572] wcscmp (_String1="INVITE.DPV", _String2=".") returned 1 [0205.572] wcscmp (_String1="INVITE.DPV", _String2="..") returned 1 [0205.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfaa8 [0205.572] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.572] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.572] wcscat (in: _Dest=0x81bfaa8, _Source="INVITE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" [0205.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0205.574] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12f7ff00, ftCreationTime.dwHighDateTime=0x1ca57ff, ftLastAccessTime.dwLowDateTime=0x790ccfb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12f7ff00, ftLastWriteTime.dwHighDateTime=0x1ca57ff, nFileSizeHigh=0x0, nFileSizeLow=0x49c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.XML", cAlternateFileName="")) returned 1 [0205.574] wcscmp (_String1="INVITE.XML", _String2=".") returned 1 [0205.574] wcscmp (_String1="INVITE.XML", _String2="..") returned 1 [0205.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bef80 [0205.574] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.574] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.574] wcscat (in: _Dest=0x81bef80, _Source="INVITE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" [0205.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0205.575] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ddc100, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x88d1ebb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7ddc100, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xbc448, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE11.POC", cAlternateFileName="")) returned 1 [0205.575] wcscmp (_String1="INVITE11.POC", _String2=".") returned 1 [0205.575] wcscmp (_String1="INVITE11.POC", _String2="..") returned 1 [0205.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf6f0 [0205.575] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.575] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.575] wcscat (in: _Dest=0x81bf6f0, _Source="INVITE11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" [0205.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0205.576] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e51900, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2e51900, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x2a1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.DPV", cAlternateFileName="")) returned 1 [0205.576] wcscmp (_String1="LABEL.DPV", _String2=".") returned 1 [0205.576] wcscmp (_String1="LABEL.DPV", _String2="..") returned 1 [0205.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4688 [0205.576] wcscpy (in: _Dest=0x3dc4688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.577] wcscat (in: _Dest=0x3dc4688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.577] wcscat (in: _Dest=0x3dc4688, _Source="LABEL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" [0205.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0205.578] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f69100, ftCreationTime.dwHighDateTime=0x1ca57ff, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31f69100, ftLastWriteTime.dwHighDateTime=0x1ca57ff, nFileSizeHigh=0x0, nFileSizeLow=0x48c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.XML", cAlternateFileName="")) returned 1 [0205.578] wcscmp (_String1="LABEL.XML", _String2=".") returned 1 [0205.578] wcscmp (_String1="LABEL.XML", _String2="..") returned 1 [0205.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5288 [0205.578] wcscpy (in: _Dest=0x3dc5288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.578] wcscat (in: _Dest=0x3dc5288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.578] wcscat (in: _Dest=0x3dc5288, _Source="LABEL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" [0205.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0205.579] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa401b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa401b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x27842, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL98.POC", cAlternateFileName="")) returned 1 [0205.579] wcscmp (_String1="LABEL98.POC", _String2=".") returned 1 [0205.579] wcscmp (_String1="LABEL98.POC", _String2="..") returned 1 [0205.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfb30 [0205.579] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.579] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.579] wcscat (in: _Dest=0x81bfb30, _Source="LABEL98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" [0205.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0205.580] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa401b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa401b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3464, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABELHM.POC", cAlternateFileName="")) returned 1 [0205.580] wcscmp (_String1="LABELHM.POC", _String2=".") returned 1 [0205.580] wcscmp (_String1="LABELHM.POC", _String2="..") returned 1 [0205.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf668 [0205.580] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.580] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.581] wcscat (in: _Dest=0x81bf668, _Source="LABELHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" [0205.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0205.582] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4164600, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4164600, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x1f89d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.DPV", cAlternateFileName="")) returned 1 [0205.582] wcscmp (_String1="LETTHEAD.DPV", _String2=".") returned 1 [0205.582] wcscmp (_String1="LETTHEAD.DPV", _String2="..") returned 1 [0205.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf338 [0205.582] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.588] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.588] wcscat (in: _Dest=0x81bf338, _Source="LETTHEAD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" [0205.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0205.589] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf146bf00, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf146bf00, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x309e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.XML", cAlternateFileName="")) returned 1 [0205.589] wcscmp (_String1="LETTHEAD.XML", _String2=".") returned 1 [0205.589] wcscmp (_String1="LETTHEAD.XML", _String2="..") returned 1 [0205.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfa20 [0205.589] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.589] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.589] wcscat (in: _Dest=0x81bfa20, _Source="LETTHEAD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" [0205.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0205.590] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa401b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa401b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEACT.POC", cAlternateFileName="")) returned 1 [0205.590] wcscmp (_String1="LINEACT.POC", _String2=".") returned 1 [0205.590] wcscmp (_String1="LINEACT.POC", _String2="..") returned 1 [0205.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf4d0 [0205.590] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.590] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.590] wcscat (in: _Dest=0x81bf4d0, _Source="LINEACT.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" [0205.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0205.591] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb714800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb714800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xb026, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGO98.POC", cAlternateFileName="")) returned 1 [0205.591] wcscmp (_String1="LOGO98.POC", _String2=".") returned 1 [0205.591] wcscmp (_String1="LOGO98.POC", _String2="..") returned 1 [0205.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfdd8 [0205.591] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.591] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.591] wcscat (in: _Dest=0x81bfdd8, _Source="LOGO98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" [0205.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0205.592] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb714800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb714800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD11.POC", cAlternateFileName="")) returned 1 [0205.593] wcscmp (_String1="LTHD11.POC", _String2=".") returned 1 [0205.593] wcscmp (_String1="LTHD11.POC", _String2="..") returned 1 [0205.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf800 [0205.593] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.593] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.593] wcscat (in: _Dest=0x81bf800, _Source="LTHD11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" [0205.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0205.594] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x2383c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98.POC", cAlternateFileName="")) returned 1 [0205.594] wcscmp (_String1="LTHD98.POC", _String2=".") returned 1 [0205.594] wcscmp (_String1="LTHD98.POC", _String2="..") returned 1 [0205.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf008 [0205.594] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.594] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.594] wcscat (in: _Dest=0x81bf008, _Source="LTHD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" [0205.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0205.595] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98SP.POC", cAlternateFileName="")) returned 1 [0205.595] wcscmp (_String1="LTHD98SP.POC", _String2=".") returned 1 [0205.595] wcscmp (_String1="LTHD98SP.POC", _String2="..") returned 1 [0205.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81be898 [0205.599] wcscpy (in: _Dest=0x81be898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.599] wcscat (in: _Dest=0x81be898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.599] wcscat (in: _Dest=0x81be898, _Source="LTHD98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" [0205.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0205.600] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x9a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHDHM.POC", cAlternateFileName="")) returned 1 [0205.600] wcscmp (_String1="LTHDHM.POC", _String2=".") returned 1 [0205.600] wcscmp (_String1="LTHDHM.POC", _String2="..") returned 1 [0205.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bff70 [0205.601] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.601] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.601] wcscat (in: _Dest=0x81bff70, _Source="LTHDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" [0205.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0205.602] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0bdf00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e0bdf00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x2694, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIN.XML", cAlternateFileName="")) returned 1 [0205.602] wcscmp (_String1="MAIN.XML", _String2=".") returned 1 [0205.602] wcscmp (_String1="MAIN.XML", _String2="..") returned 1 [0205.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5808 [0205.602] wcscpy (in: _Dest=0x3dc5808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.602] wcscat (in: _Dest=0x3dc5808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.602] wcscat (in: _Dest=0x3dc5808, _Source="MAIN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" [0205.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0205.603] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7f2b1870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="MARQUEE.POC", cAlternateFileName="")) returned 1 [0205.603] wcscmp (_String1="MARQUEE.POC", _String2=".") returned 1 [0205.603] wcscmp (_String1="MARQUEE.POC", _String2="..") returned 1 [0205.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf1a0 [0205.603] wcscpy (in: _Dest=0x81bf1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.603] wcscat (in: _Dest=0x81bf1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.603] wcscat (in: _Dest=0x81bf1a0, _Source="MARQUEE.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" [0205.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aac [0205.604] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0ba200, ftCreationTime.dwHighDateTime=0x1c61dd8, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad0ba200, ftLastWriteTime.dwHighDateTime=0x1c61dd8, nFileSizeHigh=0x0, nFileSizeLow=0x14a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.DPV", cAlternateFileName="")) returned 1 [0205.604] wcscmp (_String1="MENU.DPV", _String2=".") returned 1 [0205.604] wcscmp (_String1="MENU.DPV", _String2="..") returned 1 [0205.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4188 [0205.604] wcscpy (in: _Dest=0x3dc4188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.604] wcscat (in: _Dest=0x3dc4188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.604] wcscat (in: _Dest=0x3dc4188, _Source="MENU.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" [0205.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0205.605] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26641a00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26641a00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x138a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.XML", cAlternateFileName="")) returned 1 [0205.605] wcscmp (_String1="MENU.XML", _String2=".") returned 1 [0205.605] wcscmp (_String1="MENU.XML", _String2="..") returned 1 [0205.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc3e88 [0205.605] wcscpy (in: _Dest=0x3dc3e88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.605] wcscat (in: _Dest=0x3dc3e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.605] wcscat (in: _Dest=0x3dc3e88, _Source="MENU.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" [0205.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0205.606] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1672900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x7f3e2370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1672900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU98.POC", cAlternateFileName="")) returned 1 [0205.606] wcscmp (_String1="MENU98.POC", _String2=".") returned 1 [0205.606] wcscmp (_String1="MENU98.POC", _String2="..") returned 1 [0205.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c0218 [0205.606] wcscpy (in: _Dest=0x81c0218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0205.606] wcscat (in: _Dest=0x81c0218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0205.606] wcscat (in: _Dest=0x81c0218, _Source="MENU98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" [0205.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0206.139] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c98300, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8dd4f0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c98300, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x208fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTHED98.POC", cAlternateFileName="")) returned 1 [0206.139] wcscmp (_String1="MSTHED98.POC", _String2=".") returned 1 [0206.139] wcscmp (_String1="MSTHED98.POC", _String2="..") returned 1 [0206.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81beb40 [0206.139] wcscpy (in: _Dest=0x81beb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0206.140] wcscat (in: _Dest=0x81beb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0206.140] wcscat (in: _Dest=0x81beb40, _Source="MSTHED98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" [0206.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0206.141] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab000, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4fab000, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1da0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBAR11.POC", cAlternateFileName="")) returned 1 [0206.141] wcscmp (_String1="NAVBAR11.POC", _String2=".") returned 1 [0206.141] wcscmp (_String1="NAVBAR11.POC", _String2="..") returned 1 [0206.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81beef8 [0206.141] wcscpy (in: _Dest=0x81beef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0206.141] wcscat (in: _Dest=0x81beef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0206.141] wcscat (in: _Dest=0x81beef8, _Source="NAVBAR11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" [0206.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81beef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0206.142] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bdd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62bdd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1ccde, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBARV.POC", cAlternateFileName="")) returned 1 [0206.142] wcscmp (_String1="NAVBARV.POC", _String2=".") returned 1 [0206.142] wcscmp (_String1="NAVBARV.POC", _String2="..") returned 1 [0206.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bebc8 [0206.142] wcscpy (in: _Dest=0x81bebc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0206.142] wcscat (in: _Dest=0x81bebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0206.142] wcscat (in: _Dest=0x81bebc8, _Source="NAVBARV.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" [0206.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0206.144] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bdd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62bdd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH1.POC", cAlternateFileName="")) returned 1 [0206.144] wcscmp (_String1="NAVBRPH1.POC", _String2=".") returned 1 [0206.144] wcscmp (_String1="NAVBRPH1.POC", _String2="..") returned 1 [0206.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf008 [0206.144] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0206.144] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0206.144] wcscat (in: _Dest=0x81bf008, _Source="NAVBRPH1.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" [0206.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0206.145] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bdd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62bdd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH2.POC", cAlternateFileName="")) returned 1 [0206.145] wcscmp (_String1="NAVBRPH2.POC", _String2=".") returned 1 [0206.145] wcscmp (_String1="NAVBRPH2.POC", _String2="..") returned 1 [0206.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf800 [0206.145] wcscpy (in: _Dest=0x81bf800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0206.145] wcscat (in: _Dest=0x81bf800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0206.145] wcscat (in: _Dest=0x81bf800, _Source="NAVBRPH2.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" [0206.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0206.147] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7291600, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7291600, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x9965a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.DPV", cAlternateFileName="")) returned 1 [0209.939] wcscmp (_String1="NEWS.DPV", _String2=".") returned 1 [0209.939] wcscmp (_String1="NEWS.DPV", _String2="..") returned 1 [0209.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5108 [0209.940] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0209.940] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0209.940] wcscat (in: _Dest=0x3dc5108, _Source="NEWS.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" [0211.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0211.606] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8bec500, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8bec500, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x4260, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.XML", cAlternateFileName="")) returned 1 [0211.606] wcscmp (_String1="NEWS.XML", _String2=".") returned 1 [0211.606] wcscmp (_String1="NEWS.XML", _String2="..") returned 1 [0211.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4b88 [0211.606] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.606] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.606] wcscat (in: _Dest=0x3dc4b88, _Source="NEWS.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" [0211.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0211.617] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52eb00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x80d52e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd52eb00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x87d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS11.POC", cAlternateFileName="")) returned 1 [0211.617] wcscmp (_String1="NEWS11.POC", _String2=".") returned 1 [0211.617] wcscmp (_String1="NEWS11.POC", _String2="..") returned 1 [0211.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bed60 [0211.617] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.617] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.617] wcscat (in: _Dest=0x81bed60, _Source="NEWS11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" [0211.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d30 [0211.618] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1ee200, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de59a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4a1ee200, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2dc320, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS98.POC", cAlternateFileName="")) returned 1 [0211.618] wcscmp (_String1="NEWS98.POC", _String2=".") returned 1 [0211.618] wcscmp (_String1="NEWS98.POC", _String2="..") returned 1 [0211.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf008 [0211.619] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.619] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.619] wcscat (in: _Dest=0x81bf008, _Source="NEWS98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" [0211.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d28 [0211.620] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de7fbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x5166c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWSHM.POC", cAlternateFileName="")) returned 1 [0211.620] wcscmp (_String1="NEWSHM.POC", _String2=".") returned 1 [0211.620] wcscmp (_String1="NEWSHM.POC", _String2="..") returned 1 [0211.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bfdd8 [0211.621] wcscpy (in: _Dest=0x81bfdd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.621] wcscat (in: _Dest=0x81bfdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.621] wcscat (in: _Dest=0x81bfdd8, _Source="NEWSHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" [0211.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b98 [0211.622] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x82e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORIG98.POC", cAlternateFileName="")) returned 1 [0211.622] wcscmp (_String1="ORIG98.POC", _String2=".") returned 1 [0211.622] wcscmp (_String1="ORIG98.POC", _String2="..") returned 1 [0211.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf4d0 [0211.622] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.622] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.622] wcscat (in: _Dest=0x81bf4d0, _Source="ORIG98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" [0211.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2798 [0211.623] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31056900, ftCreationTime.dwHighDateTime=0x1c9a720, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31056900, ftLastWriteTime.dwHighDateTime=0x1c9a720, nFileSizeHigh=0x0, nFileSizeLow=0x4eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICCAP98.POC", cAlternateFileName="")) returned 1 [0211.623] wcscmp (_String1="PICCAP98.POC", _String2=".") returned 1 [0211.623] wcscmp (_String1="PICCAP98.POC", _String2="..") returned 1 [0211.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfa20 [0211.623] wcscpy (in: _Dest=0x81bfa20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.623] wcscat (in: _Dest=0x81bfa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.623] wcscat (in: _Dest=0x81bfa20, _Source="PICCAP98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" [0211.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b8 [0211.624] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x306fa900, ftCreationTime.dwHighDateTime=0x1c99074, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x306fa900, ftLastWriteTime.dwHighDateTime=0x1c99074, nFileSizeHigh=0x0, nFileSizeLow=0x1eac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICSTYLES.DPV", cAlternateFileName="PICSTY~1.DPV")) returned 1 [0211.624] wcscmp (_String1="PICSTYLES.DPV", _String2=".") returned 1 [0211.625] wcscmp (_String1="PICSTYLES.DPV", _String2="..") returned 1 [0211.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf338 [0211.625] wcscpy (in: _Dest=0x81bf338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.625] wcscat (in: _Dest=0x81bf338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.625] wcscat (in: _Dest=0x81bf338, _Source="PICSTYLES.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" [0211.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac0 [0211.626] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTPH.POC", cAlternateFileName="")) returned 1 [0211.626] wcscmp (_String1="PICTPH.POC", _String2=".") returned 1 [0211.626] wcscmp (_String1="PICTPH.POC", _String2="..") returned 1 [0211.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf668 [0211.626] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.626] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.626] wcscat (in: _Dest=0x81bf668, _Source="PICTPH.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" [0211.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0211.627] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8fc8d190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1722, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNCTUATE.POC", cAlternateFileName="")) returned 1 [0211.627] wcscmp (_String1="PNCTUATE.POC", _String2=".") returned 1 [0211.627] wcscmp (_String1="PNCTUATE.POC", _String2="..") returned 1 [0211.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfb30 [0211.627] wcscpy (in: _Dest=0x81bfb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.627] wcscat (in: _Dest=0x81bfb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.627] wcscat (in: _Dest=0x81bfb30, _Source="PNCTUATE.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" [0211.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0211.628] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x81feba70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xb9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST98SP.POC", cAlternateFileName="")) returned 1 [0211.628] wcscmp (_String1="POST98SP.POC", _String2=".") returned 1 [0211.629] wcscmp (_String1="POST98SP.POC", _String2="..") returned 1 [0211.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf6f0 [0211.629] wcscpy (in: _Dest=0x81bf6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.629] wcscat (in: _Dest=0x81bf6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.629] wcscat (in: _Dest=0x81bf6f0, _Source="POST98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" [0211.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0211.630] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8994e00, ftCreationTime.dwHighDateTime=0x1c66496, ftLastAccessTime.dwLowDateTime=0x81feba70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8994e00, ftLastWriteTime.dwHighDateTime=0x1c66496, nFileSizeHigh=0x0, nFileSizeLow=0xa194b, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCARD.DPV", cAlternateFileName="")) returned 1 [0211.630] wcscmp (_String1="POSTCARD.DPV", _String2=".") returned 1 [0211.630] wcscmp (_String1="POSTCARD.DPV", _String2="..") returned 1 [0211.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bef80 [0211.630] wcscpy (in: _Dest=0x81bef80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.630] wcscat (in: _Dest=0x81bef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.630] wcscat (in: _Dest=0x81bef80, _Source="POSTCARD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" [0211.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0211.632] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f138000, ftCreationTime.dwHighDateTime=0x1ca57ff, ftLastAccessTime.dwLowDateTime=0x82011bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f138000, ftLastWriteTime.dwHighDateTime=0x1ca57ff, nFileSizeHigh=0x0, nFileSizeLow=0x9a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCARD.XML", cAlternateFileName="")) returned 1 [0211.632] wcscmp (_String1="POSTCARD.XML", _String2=".") returned 1 [0211.632] wcscmp (_String1="POSTCARD.XML", _String2="..") returned 1 [0211.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfaa8 [0211.632] wcscpy (in: _Dest=0x81bfaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.632] wcscat (in: _Dest=0x81bfaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.632] wcscat (in: _Dest=0x81bfaa8, _Source="POSTCARD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" [0211.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0211.634] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5014c300, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8fcd9450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5014c300, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCD11.POC", cAlternateFileName="")) returned 1 [0211.634] wcscmp (_String1="POSTCD11.POC", _String2=".") returned 1 [0211.634] wcscmp (_String1="POSTCD11.POC", _String2="..") returned 1 [0211.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf778 [0211.634] wcscpy (in: _Dest=0x81bf778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.634] wcscat (in: _Dest=0x81bf778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.634] wcscat (in: _Dest=0x81bf778, _Source="POSTCD11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" [0211.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0211.635] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82011bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xa84e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCD98.POC", cAlternateFileName="")) returned 1 [0211.635] wcscmp (_String1="POSTCD98.POC", _String2=".") returned 1 [0211.635] wcscmp (_String1="POSTCD98.POC", _String2="..") returned 1 [0211.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf448 [0211.635] wcscpy (in: _Dest=0x81bf448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.635] wcscat (in: _Dest=0x81bf448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.635] wcscat (in: _Dest=0x81bf448, _Source="POSTCD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" [0211.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0211.636] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xaf86, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROG98.POC", cAlternateFileName="")) returned 1 [0211.636] wcscmp (_String1="PROG98.POC", _String2=".") returned 1 [0211.636] wcscmp (_String1="PROG98.POC", _String2="..") returned 1 [0211.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81c03b0 [0211.636] wcscpy (in: _Dest=0x81c03b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.636] wcscat (in: _Dest=0x81c03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.636] wcscat (in: _Dest=0x81c03b0, _Source="PROG98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" [0211.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0211.637] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb678a000, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb678a000, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROGRAM.DPV", cAlternateFileName="")) returned 1 [0211.637] wcscmp (_String1="PROGRAM.DPV", _String2=".") returned 1 [0211.637] wcscmp (_String1="PROGRAM.DPV", _String2="..") returned 1 [0211.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bede8 [0211.637] wcscpy (in: _Dest=0x81bede8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.637] wcscat (in: _Dest=0x81bede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.637] wcscat (in: _Dest=0x81bede8, _Source="PROGRAM.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" [0211.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0211.638] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4562ac00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4562ac00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x26c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROGRAM.XML", cAlternateFileName="")) returned 1 [0211.639] wcscmp (_String1="PROGRAM.XML", _String2=".") returned 1 [0211.639] wcscmp (_String1="PROGRAM.XML", _String2="..") returned 1 [0211.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf2b0 [0211.639] wcscpy (in: _Dest=0x81bf2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.639] wcscat (in: _Dest=0x81bf2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.639] wcscat (in: _Dest=0x81bf2b0, _Source="PROGRAM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" [0211.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0211.640] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x934, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS10TARG.POC", cAlternateFileName="")) returned 1 [0211.640] wcscmp (_String1="PS10TARG.POC", _String2=".") returned 1 [0211.640] wcscmp (_String1="PS10TARG.POC", _String2="..") returned 1 [0211.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf888 [0211.640] wcscpy (in: _Dest=0x81bf888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.640] wcscat (in: _Dest=0x81bf888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.640] wcscat (in: _Dest=0x81bf888, _Source="PS10TARG.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" [0211.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0211.641] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS2SWOOS.POC", cAlternateFileName="")) returned 1 [0211.641] wcscmp (_String1="PS2SWOOS.POC", _String2=".") returned 1 [0211.641] wcscmp (_String1="PS2SWOOS.POC", _String2="..") returned 1 [0211.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81be810 [0211.641] wcscpy (in: _Dest=0x81be810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.641] wcscat (in: _Dest=0x81be810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.641] wcscat (in: _Dest=0x81be810, _Source="PS2SWOOS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" [0211.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0211.642] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS9CRNRH.POC", cAlternateFileName="")) returned 1 [0211.642] wcscmp (_String1="PS9CRNRH.POC", _String2=".") returned 1 [0211.642] wcscmp (_String1="PS9CRNRH.POC", _String2="..") returned 1 [0211.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81be9a8 [0211.643] wcscpy (in: _Dest=0x81be9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.643] wcscat (in: _Dest=0x81be9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.643] wcscat (in: _Dest=0x81be9a8, _Source="PS9CRNRH.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" [0211.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0211.644] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1403e800, ftCreationTime.dwHighDateTime=0x1c97727, ftLastAccessTime.dwLowDateTime=0x9038b230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1403e800, ftLastWriteTime.dwHighDateTime=0x1c97727, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULLQUOTEBB.DPV", cAlternateFileName="PULLQU~1.DPV")) returned 1 [0211.644] wcscmp (_String1="PULLQUOTEBB.DPV", _String2=".") returned 1 [0211.644] wcscmp (_String1="PULLQUOTEBB.DPV", _String2="..") returned 1 [0211.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81def98 [0211.644] wcscpy (in: _Dest=0x81def98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.644] wcscat (in: _Dest=0x81def98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.644] wcscat (in: _Dest=0x81def98, _Source="PULLQUOTEBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" [0211.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0211.645] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed371000, ftCreationTime.dwHighDateTime=0x1c97a9e, ftLastAccessTime.dwLowDateTime=0x9038b230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed371000, ftLastWriteTime.dwHighDateTime=0x1c97a9e, nFileSizeHigh=0x0, nFileSizeLow=0x18c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULLQUOTEBB.POC", cAlternateFileName="PULLQU~1.POC")) returned 1 [0211.645] wcscmp (_String1="PULLQUOTEBB.POC", _String2=".") returned 1 [0211.645] wcscmp (_String1="PULLQUOTEBB.POC", _String2="..") returned 1 [0211.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de698 [0211.645] wcscpy (in: _Dest=0x81de698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.645] wcscat (in: _Dest=0x81de698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.645] wcscat (in: _Dest=0x81de698, _Source="PULLQUOTEBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" [0211.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0211.647] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5acf5800, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5acf5800, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULQOT98.POC", cAlternateFileName="")) returned 1 [0211.647] wcscmp (_String1="PULQOT98.POC", _String2=".") returned 1 [0211.647] wcscmp (_String1="PULQOT98.POC", _String2="..") returned 1 [0211.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81be920 [0211.647] wcscpy (in: _Dest=0x81be920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.647] wcscat (in: _Dest=0x81be920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.647] wcscat (in: _Dest=0x81be920, _Source="PULQOT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" [0211.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0211.648] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17250f00, ftCreationTime.dwHighDateTime=0x1c8f1ad, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17250f00, ftLastWriteTime.dwHighDateTime=0x1c8f1ad, nFileSizeHigh=0x0, nFileSizeLow=0x8d1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="QP.DPV", cAlternateFileName="")) returned 1 [0211.648] wcscmp (_String1="QP.DPV", _String2=".") returned 1 [0211.648] wcscmp (_String1="QP.DPV", _String2="..") returned 1 [0211.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5508 [0211.648] wcscpy (in: _Dest=0x3dc5508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.648] wcscat (in: _Dest=0x3dc5508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.649] wcscat (in: _Dest=0x3dc5508, _Source="QP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" [0211.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0211.650] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c89ba00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c89ba00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x33e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="QP.XML", cAlternateFileName="")) returned 1 [0211.650] wcscmp (_String1="QP.XML", _String2=".") returned 1 [0211.650] wcscmp (_String1="QP.XML", _String2="..") returned 1 [0211.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc4608 [0211.650] wcscpy (in: _Dest=0x3dc4608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.650] wcscat (in: _Dest=0x3dc4608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.650] wcscat (in: _Dest=0x3dc4608, _Source="QP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" [0211.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0212.203] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60c53900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60c53900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x6f882, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUIKPUBS.POC", cAlternateFileName="")) returned 1 [0212.203] wcscmp (_String1="QUIKPUBS.POC", _String2=".") returned 1 [0212.203] wcscmp (_String1="QUIKPUBS.POC", _String2="..") returned 1 [0212.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf4d0 [0212.203] wcscpy (in: _Dest=0x81bf4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.203] wcscat (in: _Dest=0x81bf4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.203] wcscat (in: _Dest=0x81bf4d0, _Source="QUIKPUBS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" [0212.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0212.751] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6458c000, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6458c000, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x4d57e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPTWIZ.POC", cAlternateFileName="")) returned 1 [0212.751] wcscmp (_String1="REPTWIZ.POC", _String2=".") returned 1 [0212.751] wcscmp (_String1="REPTWIZ.POC", _String2="..") returned 1 [0212.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf998 [0212.751] wcscpy (in: _Dest=0x81bf998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.751] wcscat (in: _Dest=0x81bf998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.751] wcscat (in: _Dest=0x81bf998, _Source="REPTWIZ.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" [0212.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0212.752] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6458c000, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6458c000, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x5df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RES98.POC", cAlternateFileName="")) returned 1 [0212.752] wcscmp (_String1="RES98.POC", _String2=".") returned 1 [0212.752] wcscmp (_String1="RES98.POC", _String2="..") returned 1 [0212.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc3e88 [0212.753] wcscpy (in: _Dest=0x3dc3e88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.753] wcscat (in: _Dest=0x3dc3e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.753] wcscat (in: _Dest=0x3dc3e88, _Source="RES98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" [0212.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc3e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a04 [0212.754] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabdf4c00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabdf4c00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1effa, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESP98.POC", cAlternateFileName="")) returned 1 [0212.754] wcscmp (_String1="RESP98.POC", _String2=".") returned 1 [0212.754] wcscmp (_String1="RESP98.POC", _String2="..") returned 1 [0212.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf910 [0212.754] wcscpy (in: _Dest=0x81bf910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.754] wcscat (in: _Dest=0x81bf910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.754] wcscat (in: _Dest=0x81bf910, _Source="RESP98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" [0212.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0212.755] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a9cd00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7a9cd00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESUME.DPV", cAlternateFileName="")) returned 1 [0212.755] wcscmp (_String1="RESUME.DPV", _String2=".") returned 1 [0212.755] wcscmp (_String1="RESUME.DPV", _String2="..") returned 1 [0212.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bff70 [0212.755] wcscpy (in: _Dest=0x81bff70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.755] wcscat (in: _Dest=0x81bff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.755] wcscat (in: _Dest=0x81bff70, _Source="RESUME.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" [0212.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0212.756] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e1f500, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54e1f500, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESUME.XML", cAlternateFileName="")) returned 1 [0212.756] wcscmp (_String1="RESUME.XML", _String2=".") returned 1 [0212.756] wcscmp (_String1="RESUME.XML", _String2="..") returned 1 [0212.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81be458 [0212.756] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.756] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.756] wcscat (in: _Dest=0x81be458, _Source="RESUME.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" [0212.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca8 [0212.757] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabdf4c00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabdf4c00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSPMECH.POC", cAlternateFileName="")) returned 1 [0212.757] wcscmp (_String1="RSPMECH.POC", _String2=".") returned 1 [0212.757] wcscmp (_String1="RSPMECH.POC", _String2="..") returned 1 [0212.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bfcc8 [0212.757] wcscpy (in: _Dest=0x81bfcc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.757] wcscat (in: _Dest=0x81bfcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.757] wcscat (in: _Dest=0x81bfcc8, _Source="RSPMECH.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" [0212.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0212.758] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad107900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad107900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDBAR98.POC", cAlternateFileName="")) returned 1 [0212.758] wcscmp (_String1="SIDBAR98.POC", _String2=".") returned 1 [0212.758] wcscmp (_String1="SIDBAR98.POC", _String2="..") returned 1 [0212.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bfbb8 [0212.758] wcscpy (in: _Dest=0x81bfbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.758] wcscat (in: _Dest=0x81bfbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.758] wcscat (in: _Dest=0x81bfbb8, _Source="SIDBAR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" [0212.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bfbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c [0212.759] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9201100, ftCreationTime.dwHighDateTime=0x1c9c774, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9201100, ftLastWriteTime.dwHighDateTime=0x1c9c774, nFileSizeHigh=0x0, nFileSizeLow=0x4c4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARBB.DPV", cAlternateFileName="SIDEBA~1.DPV")) returned 1 [0213.218] wcscmp (_String1="SIDEBARBB.DPV", _String2=".") returned 1 [0213.218] wcscmp (_String1="SIDEBARBB.DPV", _String2="..") returned 1 [0213.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f30490 [0213.218] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.218] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.218] wcscat (in: _Dest=0x3f30490, _Source="SIDEBARBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" [0213.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0213.219] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3938000, ftCreationTime.dwHighDateTime=0x1c98def, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf3938000, ftLastWriteTime.dwHighDateTime=0x1c98def, nFileSizeHigh=0x0, nFileSizeLow=0xb08a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARBB.POC", cAlternateFileName="SIDEBA~1.POC")) returned 1 [0213.219] wcscmp (_String1="SIDEBARBB.POC", _String2=".") returned 1 [0213.219] wcscmp (_String1="SIDEBARBB.POC", _String2="..") returned 1 [0213.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f31040 [0213.219] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.219] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.219] wcscat (in: _Dest=0x3f31040, _Source="SIDEBARBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" [0213.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0213.220] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf953fd00, ftCreationTime.dwHighDateTime=0x1c9c772, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf953fd00, ftLastWriteTime.dwHighDateTime=0x1c9c772, nFileSizeHigh=0x0, nFileSizeLow=0x49e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARVERTBB.DPV", cAlternateFileName="SIDEBA~2.DPV")) returned 1 [0213.220] wcscmp (_String1="SIDEBARVERTBB.DPV", _String2=".") returned 1 [0213.220] wcscmp (_String1="SIDEBARVERTBB.DPV", _String2="..") returned 1 [0213.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df4a8 [0213.221] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.221] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.221] wcscat (in: _Dest=0x81df4a8, _Source="SIDEBARVERTBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" [0213.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0213.222] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963fb00, ftCreationTime.dwHighDateTime=0x1c98df1, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7963fb00, ftLastWriteTime.dwHighDateTime=0x1c98df1, nFileSizeHigh=0x0, nFileSizeLow=0xa71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARVERTBB.POC", cAlternateFileName="SIDEBA~2.POC")) returned 1 [0213.222] wcscmp (_String1="SIDEBARVERTBB.POC", _String2=".") returned 1 [0213.222] wcscmp (_String1="SIDEBARVERTBB.POC", _String2="..") returned 1 [0213.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def08 [0213.222] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.222] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.222] wcscat (in: _Dest=0x81def08, _Source="SIDEBARVERTBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" [0213.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0213.223] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacef3800, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacef3800, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x17e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.DPV", cAlternateFileName="")) returned 1 [0213.223] wcscmp (_String1="SIGN.DPV", _String2=".") returned 1 [0213.223] wcscmp (_String1="SIGN.DPV", _String2="..") returned 1 [0213.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5708 [0213.223] wcscpy (in: _Dest=0x3dc5708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.223] wcscat (in: _Dest=0x3dc5708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.223] wcscat (in: _Dest=0x3dc5708, _Source="SIGN.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" [0213.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0213.224] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6c1d00, ftCreationTime.dwHighDateTime=0x1ca1b40, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f6c1d00, ftLastWriteTime.dwHighDateTime=0x1ca1b40, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.XML", cAlternateFileName="")) returned 1 [0213.224] wcscmp (_String1="SIGN.XML", _String2=".") returned 1 [0213.224] wcscmp (_String1="SIGN.XML", _String2="..") returned 1 [0213.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5b88 [0213.224] wcscpy (in: _Dest=0x3dc5b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.224] wcscat (in: _Dest=0x3dc5b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.224] wcscat (in: _Dest=0x3dc5b88, _Source="SIGN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" [0213.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0213.225] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad107900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad107900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xbb82, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN98.POC", cAlternateFileName="")) returned 1 [0213.225] wcscmp (_String1="SIGN98.POC", _String2=".") returned 1 [0213.225] wcscmp (_String1="SIGN98.POC", _String2="..") returned 1 [0213.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2f638 [0213.225] wcscpy (in: _Dest=0x3f2f638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.225] wcscat (in: _Dest=0x3f2f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.225] wcscat (in: _Dest=0x3f2f638, _Source="SIGN98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" [0213.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0213.226] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x6d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNHM.POC", cAlternateFileName="")) returned 1 [0213.227] wcscmp (_String1="SIGNHM.POC", _String2=".") returned 1 [0213.227] wcscmp (_String1="SIGNHM.POC", _String2="..") returned 1 [0213.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30e20 [0213.227] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.227] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.227] wcscat (in: _Dest=0x3f30e20, _Source="SIGNHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" [0213.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0213.228] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x760e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNIPE.POC", cAlternateFileName="")) returned 1 [0213.228] wcscmp (_String1="SNIPE.POC", _String2=".") returned 1 [0213.228] wcscmp (_String1="SNIPE.POC", _String2="..") returned 1 [0213.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc4b88 [0213.228] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.228] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.228] wcscat (in: _Dest=0x3dc4b88, _Source="SNIPE.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" [0213.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0213.229] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd44100, ftCreationTime.dwHighDateTime=0x1ca107b, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd44100, ftLastWriteTime.dwHighDateTime=0x1ca107b, nFileSizeHigh=0x0, nFileSizeLow=0x5f93b, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYBB.DPV", cAlternateFileName="")) returned 1 [0213.229] wcscmp (_String1="STORYBB.DPV", _String2=".") returned 1 [0213.229] wcscmp (_String1="STORYBB.DPV", _String2="..") returned 1 [0213.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f311d8 [0213.229] wcscpy (in: _Dest=0x3f311d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.229] wcscat (in: _Dest=0x3f311d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.229] wcscat (in: _Dest=0x3f311d8, _Source="STORYBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" [0213.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f311d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c7c [0213.230] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71360a00, ftCreationTime.dwHighDateTime=0x1ca1077, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71360a00, ftLastWriteTime.dwHighDateTime=0x1ca1077, nFileSizeHigh=0x0, nFileSizeLow=0x7d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYBB.POC", cAlternateFileName="")) returned 1 [0213.230] wcscmp (_String1="STORYBB.POC", _String2=".") returned 1 [0213.230] wcscmp (_String1="STORYBB.POC", _String2="..") returned 1 [0213.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f306b0 [0213.230] wcscpy (in: _Dest=0x3f306b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.230] wcscat (in: _Dest=0x3f306b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.230] wcscat (in: _Dest=0x3f306b0, _Source="STORYBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" [0213.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f306b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0213.231] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9746c800, ftCreationTime.dwHighDateTime=0x1c9c771, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9746c800, ftLastWriteTime.dwHighDateTime=0x1c9c771, nFileSizeHigh=0x0, nFileSizeLow=0x4c9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYVERTBB.DPV", cAlternateFileName="STORYV~1.DPV")) returned 1 [0213.231] wcscmp (_String1="STORYVERTBB.DPV", _String2=".") returned 1 [0213.231] wcscmp (_String1="STORYVERTBB.DPV", _String2="..") returned 1 [0213.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de2a8 [0213.231] wcscpy (in: _Dest=0x81de2a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.231] wcscat (in: _Dest=0x81de2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.231] wcscat (in: _Dest=0x81de2a8, _Source="STORYVERTBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" [0213.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0213.233] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e47ba00, ftCreationTime.dwHighDateTime=0x1c98df6, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e47ba00, ftLastWriteTime.dwHighDateTime=0x1c98df6, nFileSizeHigh=0x0, nFileSizeLow=0x6f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYVERTBB.POC", cAlternateFileName="STORYV~1.POC")) returned 1 [0213.233] wcscmp (_String1="STORYVERTBB.POC", _String2=".") returned 1 [0213.233] wcscmp (_String1="STORYVERTBB.POC", _String2="..") returned 1 [0213.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x81de338 [0213.233] wcscpy (in: _Dest=0x81de338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.233] wcscat (in: _Dest=0x81de338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.233] wcscat (in: _Dest=0x81de338, _Source="STORYVERTBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" [0213.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0213.234] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRBRST.POC", cAlternateFileName="")) returned 1 [0213.234] wcscmp (_String1="STRBRST.POC", _String2=".") returned 1 [0213.234] wcscmp (_String1="STRBRST.POC", _String2="..") returned 1 [0213.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f968 [0213.234] wcscpy (in: _Dest=0x3f2f968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.234] wcscat (in: _Dest=0x3f2f968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.234] wcscat (in: _Dest=0x3f2f968, _Source="STRBRST.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" [0213.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0213.235] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEAROFF.POC", cAlternateFileName="")) returned 1 [0213.235] wcscmp (_String1="TEAROFF.POC", _String2=".") returned 1 [0213.235] wcscmp (_String1="TEAROFF.POC", _String2="..") returned 1 [0213.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30a68 [0213.236] wcscpy (in: _Dest=0x3f30a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.236] wcscat (in: _Dest=0x3f30a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.236] wcscat (in: _Dest=0x3f30a68, _Source="TEAROFF.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" [0213.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0213.237] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3065a00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3065a00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x40a0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOC98.POC", cAlternateFileName="")) returned 1 [0213.237] wcscmp (_String1="TOC98.POC", _String2=".") returned 1 [0213.237] wcscmp (_String1="TOC98.POC", _String2="..") returned 1 [0213.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5108 [0213.237] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.237] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.237] wcscat (in: _Dest=0x3dc5108, _Source="TOC98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" [0213.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0 [0213.238] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb568b400, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb568b400, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1eab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCOMP98.POC", cAlternateFileName="")) returned 1 [0213.238] wcscmp (_String1="WCOMP98.POC", _String2=".") returned 1 [0213.238] wcscmp (_String1="WCOMP98.POC", _String2="..") returned 1 [0213.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f8e0 [0213.238] wcscpy (in: _Dest=0x3f2f8e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.238] wcscat (in: _Dest=0x3f2f8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.238] wcscat (in: _Dest=0x3f2f8e0, _Source="WCOMP98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" [0213.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b4 [0213.239] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaddde00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaddde00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x166484, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEB11.POC", cAlternateFileName="")) returned 1 [0213.239] wcscmp (_String1="WEB11.POC", _String2=".") returned 1 [0213.239] wcscmp (_String1="WEB11.POC", _String2="..") returned 1 [0213.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3dc5608 [0213.239] wcscpy (in: _Dest=0x3dc5608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.239] wcscat (in: _Dest=0x3dc5608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.240] wcscat (in: _Dest=0x3dc5608, _Source="WEB11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" [0213.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0213.241] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBCALSO.POC", cAlternateFileName="")) returned 1 [0213.241] wcscmp (_String1="WEBCALSO.POC", _String2=".") returned 1 [0213.241] wcscmp (_String1="WEBCALSO.POC", _String2="..") returned 1 [0213.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2fda8 [0213.241] wcscpy (in: _Dest=0x3f2fda8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.241] wcscat (in: _Dest=0x3f2fda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.241] wcscat (in: _Dest=0x3f2fda8, _Source="WEBCALSO.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" [0213.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29fc [0213.242] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBEMAIL.POC", cAlternateFileName="")) returned 1 [0213.242] wcscmp (_String1="WEBEMAIL.POC", _String2=".") returned 1 [0213.242] wcscmp (_String1="WEBEMAIL.POC", _String2="..") returned 1 [0213.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f300d8 [0213.242] wcscpy (in: _Dest=0x3f300d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.242] wcscat (in: _Dest=0x3f300d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.242] wcscat (in: _Dest=0x3f300d8, _Source="WEBEMAIL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" [0213.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f300d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0213.244] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x12a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBHED98.POC", cAlternateFileName="")) returned 1 [0213.244] wcscmp (_String1="WEBHED98.POC", _String2=".") returned 1 [0213.244] wcscmp (_String1="WEBHED98.POC", _String2="..") returned 1 [0213.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f307c0 [0213.244] wcscpy (in: _Dest=0x3f307c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.244] wcscat (in: _Dest=0x3f307c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.244] wcscat (in: _Dest=0x3f307c0, _Source="WEBHED98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" [0213.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f307c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0213.245] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBHOME.POC", cAlternateFileName="")) returned 1 [0213.245] wcscmp (_String1="WEBHOME.POC", _String2=".") returned 1 [0213.245] wcscmp (_String1="WEBHOME.POC", _String2="..") returned 1 [0213.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f312e8 [0213.245] wcscpy (in: _Dest=0x3f312e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.245] wcscat (in: _Dest=0x3f312e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.245] wcscat (in: _Dest=0x3f312e8, _Source="WEBHOME.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" [0213.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f312e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0213.246] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x34a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBLINK.POC", cAlternateFileName="")) returned 1 [0213.246] wcscmp (_String1="WEBLINK.POC", _String2=".") returned 1 [0213.247] wcscmp (_String1="WEBLINK.POC", _String2="..") returned 1 [0213.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30ea8 [0213.247] wcscpy (in: _Dest=0x3f30ea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.247] wcscat (in: _Dest=0x3f30ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.247] wcscat (in: _Dest=0x3f30ea8, _Source="WEBLINK.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" [0213.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0213.248] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f50d00, ftCreationTime.dwHighDateTime=0x1c5d98b, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f50d00, ftLastWriteTime.dwHighDateTime=0x1c5d98b, nFileSizeHigh=0x0, nFileSizeLow=0xfeb9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBPAGE.DPV", cAlternateFileName="")) returned 1 [0213.248] wcscmp (_String1="WEBPAGE.DPV", _String2=".") returned 1 [0213.248] wcscmp (_String1="WEBPAGE.DPV", _String2="..") returned 1 [0213.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30848 [0213.249] wcscpy (in: _Dest=0x3f30848, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.249] wcscat (in: _Dest=0x3f30848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.249] wcscat (in: _Dest=0x3f30848, _Source="WEBPAGE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" [0213.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0213.250] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72af5a00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72af5a00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x3d6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBPAGE.XML", cAlternateFileName="")) returned 1 [0213.250] wcscmp (_String1="WEBPAGE.XML", _String2=".") returned 1 [0213.250] wcscmp (_String1="WEBPAGE.XML", _String2="..") returned 1 [0213.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2f748 [0213.250] wcscpy (in: _Dest=0x3f2f748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.250] wcscat (in: _Dest=0x3f2f748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.250] wcscat (in: _Dest=0x3f2f748, _Source="WEBPAGE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" [0213.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2f748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0213.251] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a9cd00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8533f4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7a9cd00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xba14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WITHCOMP.DPV", cAlternateFileName="")) returned 1 [0213.251] wcscmp (_String1="WITHCOMP.DPV", _String2=".") returned 1 [0213.252] wcscmp (_String1="WITHCOMP.DPV", _String2="..") returned 1 [0213.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f2fe30 [0213.252] wcscpy (in: _Dest=0x3f2fe30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.252] wcscat (in: _Dest=0x3f2fe30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.252] wcscat (in: _Dest=0x3f2fe30, _Source="WITHCOMP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" [0213.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0213.256] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b079500, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b079500, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x1716, dwReserved0=0x0, dwReserved1=0x0, cFileName="WITHCOMP.XML", cAlternateFileName="")) returned 1 [0213.256] wcscmp (_String1="WITHCOMP.XML", _String2=".") returned 1 [0213.256] wcscmp (_String1="WITHCOMP.XML", _String2="..") returned 1 [0213.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81c0080 [0213.256] wcscpy (in: _Dest=0x81c0080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.256] wcscat (in: _Dest=0x81c0080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.256] wcscat (in: _Dest=0x81c0080, _Source="WITHCOMP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" [0213.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81c0080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0213.477] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb082bf00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb082bf00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x79e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDREP.DPV", cAlternateFileName="")) returned 1 [0213.477] wcscmp (_String1="WORDREP.DPV", _String2=".") returned 1 [0213.477] wcscmp (_String1="WORDREP.DPV", _String2="..") returned 1 [0213.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30e20 [0213.477] wcscpy (in: _Dest=0x3f30e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.477] wcscat (in: _Dest=0x3f30e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.477] wcscat (in: _Dest=0x3f30e20, _Source="WORDREP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" [0213.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0213.647] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8490fd00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8490fd00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x1854, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDREP.XML", cAlternateFileName="")) returned 1 [0213.647] wcscmp (_String1="WORDREP.XML", _String2=".") returned 1 [0213.648] wcscmp (_String1="WORDREP.XML", _String2="..") returned 1 [0213.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f31040 [0213.648] wcscpy (in: _Dest=0x3f31040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.648] wcscat (in: _Dest=0x3f31040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.648] wcscat (in: _Dest=0x3f31040, _Source="WORDREP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" [0213.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f31040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0213.649] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92bfa00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd92bfa00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPULQT98.POC", cAlternateFileName="")) returned 1 [0213.650] wcscmp (_String1="WPULQT98.POC", _String2=".") returned 1 [0213.650] wcscmp (_String1="WPULQT98.POC", _String2="..") returned 1 [0213.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f30490 [0213.650] wcscpy (in: _Dest=0x3f30490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.650] wcscat (in: _Dest=0x3f30490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.650] wcscat (in: _Dest=0x3f30490, _Source="WPULQT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" [0213.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0213.651] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92bfa00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd92bfa00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 1 [0213.651] wcscmp (_String1="WSIDBR98.POC", _String2=".") returned 1 [0213.651] wcscmp (_String1="WSIDBR98.POC", _String2="..") returned 1 [0213.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bf668 [0213.651] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.651] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.651] wcscat (in: _Dest=0x81bf668, _Source="WSIDBR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" [0213.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0213.665] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3f07370 | out: lpFindFileData=0x3f07370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92bfa00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd92bfa00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 0 [0215.282] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0219.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07370) returned 1 [0219.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39628) returned 1 [0219.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39938) returned 1 Thread: id = 3918 os_tid = 0xf34 [0169.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f33240 [0169.405] wcscpy (in: _Dest=0x3f33240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0169.405] wcscat (in: _Dest=0x3f33240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0169.405] wcscat (in: _Dest=0x3f33240, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*" [0169.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07aa8 [0169.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ef99d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f1fb30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099310 [0172.913] wcscmp (_String1=".", _String2=".") returned 0 [0172.913] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ef99d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f1fb30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.913] wcscmp (_String1="..", _String2=".") returned 1 [0172.913] wcscmp (_String1="..", _String2="..") returned 0 [0172.913] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde45ee00, ftCreationTime.dwHighDateTime=0x1bf9825, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde45ee00, ftLastWriteTime.dwHighDateTime=0x1bf9825, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Currency Rates.iqy", cAlternateFileName="MSNMON~1.IQY")) returned 1 [0172.913] wcscmp (_String1="MSN MoneyCentral Investor Currency Rates.iqy", _String2=".") returned 1 [0172.913] wcscmp (_String1="MSN MoneyCentral Investor Currency Rates.iqy", _String2="..") returned 1 [0172.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81d6200 [0172.914] wcscpy (in: _Dest=0x81d6200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0172.914] wcscat (in: _Dest=0x81d6200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0172.914] wcscat (in: _Dest=0x81d6200, _Source="MSN MoneyCentral Investor Currency Rates.iqy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" [0177.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0177.477] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd9ae00, ftCreationTime.dwHighDateTime=0x1c2d919, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2fd9ae00, ftLastWriteTime.dwHighDateTime=0x1c2d919, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Major Indicies.iqy", cAlternateFileName="MSNMON~2.IQY")) returned 1 [0177.478] wcscmp (_String1="MSN MoneyCentral Investor Major Indicies.iqy", _String2=".") returned 1 [0177.478] wcscmp (_String1="MSN MoneyCentral Investor Major Indicies.iqy", _String2="..") returned 1 [0177.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x81e7d50 [0177.478] wcscpy (in: _Dest=0x81e7d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0177.478] wcscat (in: _Dest=0x81e7d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0177.478] wcscat (in: _Dest=0x81e7d50, _Source="MSN MoneyCentral Investor Major Indicies.iqy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" [0177.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e7d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b40 [0177.479] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa04d00, ftCreationTime.dwHighDateTime=0x1bf11b5, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3aa04d00, ftLastWriteTime.dwHighDateTime=0x1bf11b5, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="MSNMON~3.IQY")) returned 1 [0177.479] wcscmp (_String1="MSN MoneyCentral Investor Stock Quotes.iqy", _String2=".") returned 1 [0177.479] wcscmp (_String1="MSN MoneyCentral Investor Stock Quotes.iqy", _String2="..") returned 1 [0177.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81e8f48 [0177.479] wcscpy (in: _Dest=0x81e8f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0177.479] wcscat (in: _Dest=0x81e8f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0177.479] wcscat (in: _Dest=0x81e8f48, _Source="MSN MoneyCentral Investor Stock Quotes.iqy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" [0177.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b3c [0177.481] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f07aa8 | out: lpFindFileData=0x3f07aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa04d00, ftCreationTime.dwHighDateTime=0x1bf11b5, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3aa04d00, ftLastWriteTime.dwHighDateTime=0x1bf11b5, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="MSNMON~3.IQY")) returned 0 [0177.481] FindClose (in: hFindFile=0x8099310 | out: hFindFile=0x8099310) returned 1 [0184.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07aa8) returned 1 [0184.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0184.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a0a8) returned 1 Thread: id = 3919 os_tid = 0xe10 [0169.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav")) returned 0x20 [0172.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV", dwFileAttributes=0x20) returned 0 [0172.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.413] GetLastError () returned 0x5 [0172.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV", dwFileAttributes=0x20) returned 0 [0172.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 Thread: id = 3920 os_tid = 0xe24 [0169.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm")) returned 0x20 [0172.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM", dwFileAttributes=0x20) returned 0 [0172.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.411] GetLastError () returned 0x5 [0172.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM", dwFileAttributes=0x20) returned 0 [0172.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 Thread: id = 3921 os_tid = 0xe1c [0169.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg")) returned 0x20 [0175.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg", dwFileAttributes=0x20) returned 0 [0175.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.470] GetLastError () returned 0x5 [0175.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg", dwFileAttributes=0x20) returned 0 [0175.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021050) returned 1 Thread: id = 3922 os_tid = 0xe18 [0169.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg")) returned 0x20 [0175.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG", dwFileAttributes=0x20) returned 0 [0175.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.451] GetLastError () returned 0x5 [0175.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG", dwFileAttributes=0x20) returned 0 [0175.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a8a8) returned 1 Thread: id = 3923 os_tid = 0xe60 [0169.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg")) returned 0x20 [0175.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG", dwFileAttributes=0x20) returned 0 [0175.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.226] GetLastError () returned 0x5 [0175.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG", dwFileAttributes=0x20) returned 0 [0175.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a168) returned 1 Thread: id = 3924 os_tid = 0x650 [0169.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg")) returned 0x20 [0175.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG", dwFileAttributes=0x20) returned 0 [0175.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.498] GetLastError () returned 0x5 [0175.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG", dwFileAttributes=0x20) returned 0 [0175.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3aa78) returned 1 Thread: id = 3925 os_tid = 0x7c4 [0169.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg")) returned 0x20 [0175.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG", dwFileAttributes=0x20) returned 0 [0175.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.497] GetLastError () returned 0x5 [0175.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG", dwFileAttributes=0x20) returned 0 [0175.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b1b8) returned 1 Thread: id = 3926 os_tid = 0x7b0 [0169.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg")) returned 0x20 [0175.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG", dwFileAttributes=0x20) returned 0 [0175.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.472] GetLastError () returned 0x5 [0175.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG", dwFileAttributes=0x20) returned 0 [0175.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b558) returned 1 Thread: id = 3927 os_tid = 0xb44 [0169.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg")) returned 0x20 [0175.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG", dwFileAttributes=0x20) returned 0 [0175.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.487] GetLastError () returned 0x5 [0175.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG", dwFileAttributes=0x20) returned 0 [0175.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b388) returned 1 Thread: id = 3928 os_tid = 0x728 [0169.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg")) returned 0x20 [0175.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG", dwFileAttributes=0x20) returned 0 [0175.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.486] GetLastError () returned 0x5 [0175.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG", dwFileAttributes=0x20) returned 0 [0175.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8fe8) returned 1 Thread: id = 3929 os_tid = 0xf9c [0169.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg")) returned 0x20 [0175.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG", dwFileAttributes=0x20) returned 0 [0175.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.474] GetLastError () returned 0x5 [0175.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG", dwFileAttributes=0x20) returned 0 [0175.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b2a0) returned 1 Thread: id = 3930 os_tid = 0x5f8 [0169.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg")) returned 0x20 [0175.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg", dwFileAttributes=0x20) returned 0 [0175.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.468] GetLastError () returned 0x5 [0175.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg", dwFileAttributes=0x20) returned 0 [0175.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021aa0) returned 1 Thread: id = 3931 os_tid = 0xd1c [0169.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg")) returned 0x20 [0175.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg", dwFileAttributes=0x20) returned 0 [0175.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.462] GetLastError () returned 0x5 [0175.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg", dwFileAttributes=0x20) returned 0 [0175.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021140) returned 1 Thread: id = 3932 os_tid = 0x7b8 [0169.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg")) returned 0x20 [0175.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG", dwFileAttributes=0x20) returned 0 [0175.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.485] GetLastError () returned 0x5 [0175.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG", dwFileAttributes=0x20) returned 0 [0175.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed730) returned 1 Thread: id = 3933 os_tid = 0x950 [0169.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg")) returned 0x20 [0175.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG", dwFileAttributes=0x20) returned 0 [0175.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.483] GetLastError () returned 0x5 [0175.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG", dwFileAttributes=0x20) returned 0 [0175.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed818) returned 1 Thread: id = 3934 os_tid = 0xa40 [0169.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg")) returned 0x20 [0175.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG", dwFileAttributes=0x20) returned 0 [0175.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.481] GetLastError () returned 0x5 [0175.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG", dwFileAttributes=0x20) returned 0 [0175.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 Thread: id = 3935 os_tid = 0xaa0 [0169.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg")) returned 0x20 [0175.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG", dwFileAttributes=0x20) returned 0 [0175.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.475] GetLastError () returned 0x5 [0175.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG", dwFileAttributes=0x20) returned 0 [0175.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed900) returned 1 Thread: id = 3936 os_tid = 0x1590 [0169.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg")) returned 0x20 [0175.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG", dwFileAttributes=0x20) returned 0 [0175.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.477] GetLastError () returned 0x5 [0175.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG", dwFileAttributes=0x20) returned 0 [0175.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed9e8) returned 1 Thread: id = 3937 os_tid = 0x1594 [0169.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg")) returned 0x20 [0175.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG", dwFileAttributes=0x20) returned 0 [0175.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.478] GetLastError () returned 0x5 [0175.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG", dwFileAttributes=0x20) returned 0 [0175.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81edad0) returned 1 Thread: id = 3938 os_tid = 0x6b0 [0169.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg")) returned 0x20 [0175.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG", dwFileAttributes=0x20) returned 0 [0175.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.480] GetLastError () returned 0x5 [0175.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG", dwFileAttributes=0x20) returned 0 [0175.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81edbb8) returned 1 Thread: id = 3939 os_tid = 0xc78 [0169.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg")) returned 0x20 [0175.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg", dwFileAttributes=0x20) returned 0 [0175.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.460] GetLastError () returned 0x5 [0175.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg", dwFileAttributes=0x20) returned 0 [0175.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae100) returned 1 Thread: id = 3940 os_tid = 0xc6c [0169.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg")) returned 0x20 [0175.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg", dwFileAttributes=0x20) returned 0 [0175.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.458] GetLastError () returned 0x5 [0175.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg", dwFileAttributes=0x20) returned 0 [0175.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80207e0) returned 1 Thread: id = 3941 os_tid = 0xc7c [0169.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg")) returned 0x20 [0175.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG", dwFileAttributes=0x20) returned 0 [0175.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.434] GetLastError () returned 0x5 [0175.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG", dwFileAttributes=0x20) returned 0 [0175.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81edca0) returned 1 Thread: id = 3942 os_tid = 0xb10 [0169.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg")) returned 0x20 [0174.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG", dwFileAttributes=0x20) returned 0 [0174.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.131] GetLastError () returned 0x5 [0175.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG", dwFileAttributes=0x20) returned 0 [0175.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81edd88) returned 1 Thread: id = 3943 os_tid = 0x5d4 [0169.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg")) returned 0x20 [0175.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG", dwFileAttributes=0x20) returned 0 [0175.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.471] GetLastError () returned 0x5 [0175.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG", dwFileAttributes=0x20) returned 0 [0175.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ede70) returned 1 Thread: id = 3944 os_tid = 0xc10 [0169.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg")) returned 0x20 [0174.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg", dwFileAttributes=0x20) returned 0 [0174.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.452] GetLastError () returned 0x5 [0175.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg", dwFileAttributes=0x20) returned 0 [0175.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25840) returned 1 Thread: id = 3945 os_tid = 0xdfc [0169.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h")) returned 0x20 [0172.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H", dwFileAttributes=0x20) returned 0 [0172.819] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.819] GetLastError () returned 0x5 [0172.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H", dwFileAttributes=0x20) returned 0 [0172.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e242c0) returned 1 Thread: id = 3946 os_tid = 0xe00 [0169.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v")) returned 0x20 [0172.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V", dwFileAttributes=0x20) returned 0 [0172.820] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.820] GetLastError () returned 0x5 [0172.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V", dwFileAttributes=0x20) returned 0 [0172.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24140) returned 1 Thread: id = 3947 os_tid = 0xe04 [0169.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h")) returned 0x20 [0172.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H", dwFileAttributes=0x20) returned 0 [0172.822] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.822] GetLastError () returned 0x5 [0172.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H", dwFileAttributes=0x20) returned 0 [0172.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24740) returned 1 Thread: id = 3948 os_tid = 0xdec [0169.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v")) returned 0x20 [0172.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V", dwFileAttributes=0x20) returned 0 [0172.824] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.824] GetLastError () returned 0x5 [0172.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V", dwFileAttributes=0x20) returned 0 [0172.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24940) returned 1 Thread: id = 3949 os_tid = 0xad0 [0169.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h")) returned 0x20 [0172.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H", dwFileAttributes=0x20) returned 0 [0172.826] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.826] GetLastError () returned 0x5 [0172.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H", dwFileAttributes=0x20) returned 0 [0172.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e243c0) returned 1 Thread: id = 3950 os_tid = 0x4c0 [0169.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2")) returned 0x20 [0172.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0172.828] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.828] GetLastError () returned 0x5 [0172.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0172.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 3951 os_tid = 0x110 [0169.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c")) returned 0x20 [0172.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0172.830] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.830] GetLastError () returned 0x5 [0172.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0172.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 3952 os_tid = 0x20c [0169.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v")) returned 0x20 [0172.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V", dwFileAttributes=0x20) returned 0 [0172.832] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.833] GetLastError () returned 0x5 [0172.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V", dwFileAttributes=0x20) returned 0 [0172.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e241c0) returned 1 Thread: id = 3953 os_tid = 0x9bc [0169.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h")) returned 0x20 [0172.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H", dwFileAttributes=0x20) returned 0 [0172.834] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.834] GetLastError () returned 0x5 [0172.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H", dwFileAttributes=0x20) returned 0 [0172.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e248c0) returned 1 Thread: id = 3954 os_tid = 0x106c [0169.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v")) returned 0x20 [0172.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V", dwFileAttributes=0x20) returned 0 [0172.836] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.836] GetLastError () returned 0x5 [0172.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V", dwFileAttributes=0x20) returned 0 [0172.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24440) returned 1 Thread: id = 3955 os_tid = 0x6d4 [0169.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\h")) returned 0x20 [0172.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H", dwFileAttributes=0x20) returned 0 [0172.838] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.838] GetLastError () returned 0x5 [0172.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H", dwFileAttributes=0x20) returned 0 [0172.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39858) returned 1 Thread: id = 3956 os_tid = 0xc50 [0169.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h")) returned 0x20 [0172.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H", dwFileAttributes=0x20) returned 0 [0172.791] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.791] GetLastError () returned 0x5 [0172.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H", dwFileAttributes=0x20) returned 0 [0172.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a858) returned 1 Thread: id = 3957 os_tid = 0x48c [0169.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v")) returned 0x20 [0172.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V", dwFileAttributes=0x20) returned 0 [0172.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.789] GetLastError () returned 0x5 [0172.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V", dwFileAttributes=0x20) returned 0 [0172.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a9d8) returned 1 Thread: id = 3958 os_tid = 0x11ac [0169.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h")) returned 0x20 [0172.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H", dwFileAttributes=0x20) returned 0 [0172.839] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.839] GetLastError () returned 0x5 [0172.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H", dwFileAttributes=0x20) returned 0 [0172.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831acd8) returned 1 Thread: id = 3959 os_tid = 0x11b0 [0169.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v")) returned 0x20 [0172.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V", dwFileAttributes=0x20) returned 0 [0172.806] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.806] GetLastError () returned 0x5 [0172.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V", dwFileAttributes=0x20) returned 0 [0172.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bb58) returned 1 Thread: id = 3960 os_tid = 0x11b4 [0169.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h")) returned 0x20 [0172.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H", dwFileAttributes=0x20) returned 0 [0172.804] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.804] GetLastError () returned 0x5 [0172.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H", dwFileAttributes=0x20) returned 0 [0172.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 3961 os_tid = 0x11b8 [0169.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v")) returned 0x20 [0172.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V", dwFileAttributes=0x20) returned 0 [0172.803] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.803] GetLastError () returned 0x5 [0172.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V", dwFileAttributes=0x20) returned 0 [0172.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfc40) returned 1 Thread: id = 3962 os_tid = 0x6c0 [0169.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h")) returned 0x20 [0172.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H", dwFileAttributes=0x20) returned 0 [0172.801] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.801] GetLastError () returned 0x5 [0172.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H", dwFileAttributes=0x20) returned 0 [0172.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 3963 os_tid = 0x11c0 [0169.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v")) returned 0x20 [0172.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V", dwFileAttributes=0x20) returned 0 [0172.798] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.798] GetLastError () returned 0x5 [0172.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V", dwFileAttributes=0x20) returned 0 [0172.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 3964 os_tid = 0x11c4 [0169.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\blacklist")) returned 0x20 [0174.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist", dwFileAttributes=0x20) returned 0 [0174.412] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\blacklist"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.412] GetLastError () returned 0x5 [0174.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist", dwFileAttributes=0x20) returned 0 [0174.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a1f8) returned 1 Thread: id = 3965 os_tid = 0x11c8 [0169.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\cacerts")) returned 0x20 [0173.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts", dwFileAttributes=0x20) returned 0 [0173.661] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\cacerts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.661] GetLastError () returned 0x5 [0173.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts", dwFileAttributes=0x20) returned 0 [0173.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce098) returned 1 Thread: id = 3966 os_tid = 0xbd8 [0169.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.policy")) returned 0x20 [0173.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy", dwFileAttributes=0x20) returned 0 [0173.653] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.policy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.654] GetLastError () returned 0x5 [0173.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy", dwFileAttributes=0x20) returned 0 [0173.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f394d8) returned 1 Thread: id = 3967 os_tid = 0xbd4 [0169.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.security")) returned 0x20 [0174.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security", dwFileAttributes=0x20) returned 0 [0174.420] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.security"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.420] GetLastError () returned 0x5 [0174.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security", dwFileAttributes=0x20) returned 0 [0174.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 Thread: id = 3968 os_tid = 0xc34 [0169.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javafx.policy")) returned 0x20 [0174.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy", dwFileAttributes=0x20) returned 0 [0174.418] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javafx.policy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.418] GetLastError () returned 0x5 [0174.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy", dwFileAttributes=0x20) returned 0 [0174.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 Thread: id = 3969 os_tid = 0xc40 [0169.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javaws.policy")) returned 0x20 [0174.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy", dwFileAttributes=0x20) returned 0 [0174.417] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.417] GetLastError () returned 0x5 [0174.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy", dwFileAttributes=0x20) returned 0 [0174.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 Thread: id = 3970 os_tid = 0xc38 [0169.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\local_policy.jar")) returned 0x20 [0174.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar", dwFileAttributes=0x20) returned 0 [0174.415] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.415] GetLastError () returned 0x5 [0174.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar", dwFileAttributes=0x20) returned 0 [0174.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831af58) returned 1 Thread: id = 3971 os_tid = 0x1200 [0169.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\trusted.libraries")) returned 0x20 [0174.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries", dwFileAttributes=0x20) returned 0 [0174.413] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.414] GetLastError () returned 0x5 [0174.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries", dwFileAttributes=0x20) returned 0 [0174.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831afd8) returned 1 Thread: id = 3972 os_tid = 0x1204 [0169.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\us_export_policy.jar")) returned 0x20 [0174.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x20) returned 0 [0174.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.406] GetLastError () returned 0x5 [0174.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x20) returned 0 [0174.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 3973 os_tid = 0x1218 [0169.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba8.tmp")) returned 0x2020 [0172.884] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp", dwFileAttributes=0x20) returned 1 [0176.275] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba8.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c68 [0176.276] GetFileSizeEx (in: hFile=0x1c68, lpFileSize=0xe6ffc38 | out: lpFileSize=0xe6ffc38*=0) returned 1 [0176.276] FlushFileBuffers (hFile=0x1c68) returned 1 [0178.984] CloseHandle (hObject=0x1c68) returned 1 [0178.984] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp", dwFileAttributes=0x2020) returned 1 [0189.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 Thread: id = 3974 os_tid = 0x644 [0169.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png")) returned 0x2020 [0173.442] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", dwFileAttributes=0x20) returned 1 [0177.245] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b64 [0177.245] GetFileSizeEx (in: hFile=0x1b64, lpFileSize=0x7fbfed8 | out: lpFileSize=0x7fbfed8*=4984) returned 1 [0177.245] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x1374, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.245] ReadFile (in: hFile=0x1b64, lpBuffer=0x7fbfee4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7fbfec0, lpOverlapped=0x0 | out: lpBuffer=0x7fbfee4*, lpNumberOfBytesRead=0x7fbfec0*=0x4, lpOverlapped=0x0) returned 1 [0182.230] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0182.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42218 [0182.230] NtQuerySystemTime (in: CurrentTime=0x7fbfe60 | out: CurrentTime=0x7fbfe60*=132471540502140000) returned 0x0 [0182.230] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x5fb838a1 [0182.230] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x450c0464 [0182.230] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x455f1dbe [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x10843c71 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x615bb35c [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x3a0bbadd [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x3bfe43fb [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x7fa05d0d [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x21298e7a [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x7223a72f [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x2c87339 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x52a60652 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x29e89653 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x1a5443f5 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x7302d491 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x316083c8 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x659703cc [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x1a200495 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x2eb9b03 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x7937ed1f [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x36405877 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x3de64ffe [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x59315a97 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x496cc828 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x1f4fe85e [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x7f57552a [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x438c69c2 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x540f39f1 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x2b9a1509 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x12a6460 [0182.231] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x33f0312f [0182.232] RtlRandomEx (in: Seed=0x7fbfe58 | out: Seed=0x7fbfe58) returned 0x380f0562 [0182.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0182.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x834c538 [0182.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8350140 [0182.243] ReadFile (in: hFile=0x1b64, lpBuffer=0x834c538, nNumberOfBytesToRead=0x1378, lpNumberOfBytesRead=0x7fbfe54, lpOverlapped=0x0 | out: lpBuffer=0x834c538*, lpNumberOfBytesRead=0x7fbfe54*=0x1378, lpOverlapped=0x0) returned 1 [0184.519] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.519] WriteFile (in: hFile=0x1b64, lpBuffer=0x8350140*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0x7fbfe58, lpOverlapped=0x0 | out: lpBuffer=0x8350140*, lpNumberOfBytesWritten=0x7fbfe58*=0x1378, lpOverlapped=0x0) returned 1 [0189.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0189.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42bc8 [0189.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0189.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8350140) returned 1 [0189.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x834c538) returned 1 [0189.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0189.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4920) returned 1 [0189.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d42bc8 [0189.412] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.412] WriteFile (in: hFile=0x1b64, lpBuffer=0x3ef59c0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7fbfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ef59c0*, lpNumberOfBytesWritten=0x7fbfecc*=0x100, lpOverlapped=0x0) returned 1 [0190.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0190.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0190.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0190.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0190.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0190.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0190.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421a0) returned 1 [0190.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42128) returned 1 [0190.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3ef59c0 [0190.520] wcscpy (in: _Dest=0x3ef59c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" [0190.520] wcscat (in: _Dest=0x3ef59c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.f0dbec" [0190.520] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.f0dbec", NtPathName=0x7fbfe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e8c40 [0193.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8c40) returned 1 [0193.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fcf90) returned 1 [0193.725] NtQueryInformationFile (in: FileHandle=0x1b64, IoStatusBlock=0x7fbfe28, FileInformation=0x7fbfe30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7fbfe28, FileInformation=0x7fbfe30) returned 0x0 [0193.725] NtSetInformationFile (FileHandle=0x1b64, IoStatusBlock=0x7fbfe28, FileInformation=0x7fbfe30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0196.111] FlushFileBuffers (hFile=0x1b64) returned 1 [0196.119] CloseHandle (hObject=0x1b64) returned 1 [0196.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300e668 [0196.588] wcscpy (in: _Dest=0x300e668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0196.588] wcscat (in: _Dest=0x300e668, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" [0196.588] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\f0dbec-readme.txt")) returned 0x2020 [0196.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0196.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27340) returned 1 Thread: id = 3975 os_tid = 0x9ac [0169.616] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js")) returned 0x2020 [0173.158] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", dwFileAttributes=0x20) returned 1 [0177.162] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b90 [0177.162] GetFileSizeEx (in: hFile=0x1b90, lpFileSize=0xe5ff880 | out: lpFileSize=0xe5ff880*=4355) returned 1 [0177.162] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x10ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.162] ReadFile (in: hFile=0x1b90, lpBuffer=0xe5ff88c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe5ff868, lpOverlapped=0x0 | out: lpBuffer=0xe5ff88c*, lpNumberOfBytesRead=0xe5ff868*=0x4, lpOverlapped=0x0) returned 1 [0182.165] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42588 [0182.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0182.166] NtQuerySystemTime (in: CurrentTime=0xe5ff808 | out: CurrentTime=0xe5ff808*=132471540501516000) returned 0x0 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x3330e157 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0xd2581ba [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x5019677 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x5659ece9 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x789c5b2e [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x206f85eb [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x5097b10e [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x2211f92e [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x26069321 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x4ad9add7 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x2e0dc48e [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x73d152f6 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x76d88442 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x12fdc174 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x1f39f957 [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x1620576c [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x20b737b [0182.166] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x21716997 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x2b2db96a [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x1c03f2d8 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x2d1b9936 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x42882adf [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x267290a9 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x426028b5 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x7e56e0f6 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x3b7ec6d3 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x3aaf83d6 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x184ab4e [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x1bf9ae16 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x3e35e9f8 [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x6690279e [0182.167] RtlRandomEx (in: Seed=0xe5ff800 | out: Seed=0xe5ff800) returned 0x200caa0f [0182.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0182.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0182.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a6498 [0182.179] ReadFile (in: hFile=0x1b90, lpBuffer=0x82a2890, nNumberOfBytesToRead=0x1103, lpNumberOfBytesRead=0xe5ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesRead=0xe5ff7fc*=0x1103, lpOverlapped=0x0) returned 1 [0182.347] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.347] WriteFile (in: hFile=0x1b90, lpBuffer=0x82a6498*, nNumberOfBytesToWrite=0x1103, lpNumberOfBytesWritten=0xe5ff800, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesWritten=0xe5ff800*=0x1103, lpOverlapped=0x0) returned 1 [0184.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0184.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0184.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0184.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0184.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0184.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d18) returned 1 [0184.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d47b8) returned 1 [0184.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81d47b8 [0184.948] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.948] WriteFile (in: hFile=0x1b90, lpBuffer=0x3ef7d68*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0xe5ff874, lpOverlapped=0x0 | out: lpBuffer=0x3ef7d68*, lpNumberOfBytesWritten=0xe5ff874*=0x124, lpOverlapped=0x0) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4f98) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d47b8) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42920) returned 1 [0189.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef7d68 [0189.405] wcscpy (in: _Dest=0x3ef7d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" [0189.405] wcscat (in: _Dest=0x3ef7d68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.f0dbec" [0189.405] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.f0dbec", NtPathName=0xe5ff7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef92c0 [0193.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef92c0) returned 1 [0193.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fcb40) returned 1 [0193.725] NtQueryInformationFile (in: FileHandle=0x1b90, IoStatusBlock=0xe5ff7d0, FileInformation=0xe5ff7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe5ff7d0, FileInformation=0xe5ff7d8) returned 0x0 [0193.725] NtSetInformationFile (FileHandle=0x1b90, IoStatusBlock=0xe5ff7d0, FileInformation=0xe5ff7d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0196.108] FlushFileBuffers (hFile=0x1b90) returned 1 [0196.115] CloseHandle (hObject=0x1b90) returned 1 [0196.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300e668 [0196.579] wcscpy (in: _Dest=0x300e668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0196.579] wcscat (in: _Dest=0x300e668, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" [0196.579] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\f0dbec-readme.txt")) returned 0x2020 [0196.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0196.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 Thread: id = 3976 os_tid = 0xf54 [0169.616] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json")) returned 0x2020 [0173.599] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", dwFileAttributes=0x20) returned 1 [0177.258] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1418 [0177.259] GetFileSizeEx (in: hFile=0x1418, lpFileSize=0xe25fe40 | out: lpFileSize=0xe25fe40*=854) returned 1 [0177.259] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x352, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.259] ReadFile (in: hFile=0x1418, lpBuffer=0xe25fe4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe25fe28, lpOverlapped=0x0 | out: lpBuffer=0xe25fe4c*, lpNumberOfBytesRead=0xe25fe28*=0x4, lpOverlapped=0x0) returned 1 [0182.276] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420b0 [0182.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435a0 [0182.277] NtQuerySystemTime (in: CurrentTime=0xe25fdc8 | out: CurrentTime=0xe25fdc8*=132471540502608000) returned 0x0 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x1bfd5890 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x6b121c1e [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x4c379136 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x1e31ac19 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x695c4ded [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x695c4ded [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x535c1314 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x583c326 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x4aeabeb0 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x676c566e [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x63ba5a2 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x28d219bc [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x78ca0ccd [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0xbdc02be [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x53995ea6 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x3716d796 [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x60c74a6a [0182.277] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x6c9b300e [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x1cb1949 [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x427ae27b [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x4c2d8616 [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x430bdf82 [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x1cbeb3e6 [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x2b0602db [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x7dedb840 [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x6b04f103 [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x3e94f5aa [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x21221b43 [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x739ba194 [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x3a1a1516 [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x4ed9919c [0182.278] RtlRandomEx (in: Seed=0xe25fdc0 | out: Seed=0xe25fdc0) returned 0x12f1719b [0182.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0182.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x836e180 [0182.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x835b558 [0182.289] ReadFile (in: hFile=0x1418, lpBuffer=0x836e180, nNumberOfBytesToRead=0x356, lpNumberOfBytesRead=0xe25fdbc, lpOverlapped=0x0 | out: lpBuffer=0x836e180*, lpNumberOfBytesRead=0xe25fdbc*=0x356, lpOverlapped=0x0) returned 1 [0182.290] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.290] WriteFile (in: hFile=0x1418, lpBuffer=0x835b558*, nNumberOfBytesToWrite=0x356, lpNumberOfBytesWritten=0xe25fdc0, lpOverlapped=0x0 | out: lpBuffer=0x835b558*, lpNumberOfBytesWritten=0xe25fdc0*=0x356, lpOverlapped=0x0) returned 1 [0184.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0184.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c40 [0184.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c40) returned 1 [0184.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835b558) returned 1 [0184.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836e180) returned 1 [0184.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33150) returned 1 [0184.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4968) returned 1 [0184.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x81d4968 [0184.727] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.727] WriteFile (in: hFile=0x1418, lpBuffer=0x3ef84b8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xe25fe34, lpOverlapped=0x0 | out: lpBuffer=0x3ef84b8*, lpNumberOfBytesWritten=0xe25fe34*=0x122, lpOverlapped=0x0) returned 1 [0189.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef84b8) returned 1 [0189.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4890) returned 1 [0189.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c40) returned 1 [0189.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4968) returned 1 [0189.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0189.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420b0) returned 1 [0189.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42448) returned 1 [0189.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426f0) returned 1 [0189.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ef84b8 [0189.375] wcscpy (in: _Dest=0x3ef84b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" [0189.375] wcscat (in: _Dest=0x3ef84b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.f0dbec" [0189.375] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.f0dbec", NtPathName=0xe25fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x138) returned 0x3ef8c58 [0190.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8c58) returned 1 [0190.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830f648) returned 1 [0190.595] NtQueryInformationFile (in: FileHandle=0x1418, IoStatusBlock=0xe25fd90, FileInformation=0xe25fd98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe25fd90, FileInformation=0xe25fd98) returned 0x0 [0190.595] NtSetInformationFile (FileHandle=0x1418, IoStatusBlock=0xe25fd90, FileInformation=0xe25fd98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef84b8) returned 1 [0190.772] FlushFileBuffers (hFile=0x1418) returned 1 [0190.776] CloseHandle (hObject=0x1418) returned 1 [0192.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x81e12b8 [0192.156] wcscpy (in: _Dest=0x81e12b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0192.156] wcscat (in: _Dest=0x81e12b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" [0192.156] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\f0dbec-readme.txt")) returned 0x2020 [0192.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e12b8) returned 1 [0192.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 Thread: id = 3977 os_tid = 0x9fc [0169.617] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js")) returned 0x2020 [0173.599] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", dwFileAttributes=0x20) returned 1 [0177.258] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b5c [0177.258] GetFileSizeEx (in: hFile=0x1b5c, lpFileSize=0xd05fa90 | out: lpFileSize=0xd05fa90*=23404) returned 1 [0177.258] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x5b68, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.258] ReadFile (in: hFile=0x1b5c, lpBuffer=0xd05fa9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd05fa78, lpOverlapped=0x0 | out: lpBuffer=0xd05fa9c*, lpNumberOfBytesRead=0xd05fa78*=0x4, lpOverlapped=0x0) returned 1 [0182.263] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42218 [0182.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420b0 [0182.264] NtQuerySystemTime (in: CurrentTime=0xd05fa18 | out: CurrentTime=0xd05fa18*=132471540502452000) returned 0x0 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x928dafc [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x4c73a79e [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x4bf1d3dc [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x4202ebe5 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x4ef68110 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x4323cd96 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x4cd8dccf [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x1b389b8 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x78ca0ccd [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x6be8d2b7 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0xd6e370a [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x1782850b [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x7993cc57 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x1e10f7fd [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x13a9b952 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x4782ff46 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x7950367d [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x6a0768b0 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x4825ae35 [0182.264] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x3486efc2 [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x6dce0e3f [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x24c6b30f [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x4782ff46 [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x675c8329 [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x591c8a6e [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x79a70d7e [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x984fb63 [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x569f2a30 [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x2a87ce66 [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x5b0eae92 [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x273a50e0 [0182.265] RtlRandomEx (in: Seed=0xd05fa10 | out: Seed=0xd05fa10) returned 0x766d0995 [0182.275] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.275] ReadFile (in: hFile=0x1b5c, lpBuffer=0x836a578, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd05fa18, lpOverlapped=0x0 | out: lpBuffer=0x836a578*, lpNumberOfBytesRead=0xd05fa18*=0x3c00, lpOverlapped=0x0) returned 1 [0182.348] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e97f8 [0182.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32688 [0182.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a60 [0182.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0182.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8348930 [0182.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a60 [0182.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42060 [0182.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42060) returned 1 [0182.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0182.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e97f8) returned 1 [0182.349] WriteFile (in: hFile=0x1b5c, lpBuffer=0x8348930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd05fa18, lpOverlapped=0x0 | out: lpBuffer=0x8348930*, lpNumberOfBytesWritten=0xd05fa18*=0x3c00, lpOverlapped=0x0) returned 1 [0184.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348930) returned 1 [0184.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836a578) returned 1 [0184.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x8099750 [0184.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0184.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x8098dd0 [0184.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0184.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0184.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0184.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d18) returned 1 [0184.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4f50) returned 1 [0184.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8401148 [0184.949] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.950] WriteFile (in: hFile=0x1b5c, lpBuffer=0x8401148*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xd05fa84, lpOverlapped=0x0 | out: lpBuffer=0x8401148*, lpNumberOfBytesWritten=0xd05fa84*=0x11c, lpOverlapped=0x0) returned 1 [0189.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401148) returned 1 [0189.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8098dd0) returned 1 [0189.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0189.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099750) returned 1 [0189.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0189.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42218) returned 1 [0189.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0189.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0189.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8401148 [0189.406] wcscpy (in: _Dest=0x8401148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" [0189.407] wcscat (in: _Dest=0x8401148, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.f0dbec" [0189.407] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.f0dbec", NtPathName=0xd05fa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3efa9d0 [0193.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa9d0) returned 1 [0193.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f0b58) returned 1 [0193.724] NtQueryInformationFile (in: FileHandle=0x1b5c, IoStatusBlock=0xd05f9e0, FileInformation=0xd05f9e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd05f9e0, FileInformation=0xd05f9e8) returned 0x0 [0193.724] NtSetInformationFile (FileHandle=0x1b5c, IoStatusBlock=0xd05f9e0, FileInformation=0xd05f9e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401148) returned 1 [0196.106] FlushFileBuffers (hFile=0x1b5c) returned 1 [0196.109] CloseHandle (hObject=0x1b5c) returned 1 [0196.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x81e0368 [0196.572] wcscpy (in: _Dest=0x81e0368, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0196.572] wcscat (in: _Dest=0x81e0368, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" [0196.572] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\f0dbec-readme.txt")) returned 0x2020 [0196.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0368) returned 1 [0196.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 Thread: id = 3978 os_tid = 0xa0c [0169.617] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json")) returned 0x2020 [0173.442] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0177.244] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b68 [0177.245] GetFileSizeEx (in: hFile=0x1b68, lpFileSize=0xe80f848 | out: lpFileSize=0xe80f848*=1457) returned 1 [0177.245] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x5ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.245] ReadFile (in: hFile=0x1b68, lpBuffer=0xe80f854, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe80f830, lpOverlapped=0x0 | out: lpBuffer=0xe80f854*, lpNumberOfBytesRead=0xe80f830*=0x4, lpOverlapped=0x0) returned 1 [0182.217] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42dd0 [0182.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0182.217] NtQuerySystemTime (in: CurrentTime=0xe80f7d0 | out: CurrentTime=0xe80f7d0*=132471540501984000) returned 0x0 [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x323033cf [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x25490b32 [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x3a61ebf9 [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x30538df4 [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x6ac8206a [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x2527b0b2 [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x3d1d5296 [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x157cff7e [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x466c82af [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x6a2a842f [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x1fe186fc [0182.217] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x60dd363a [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x2b13fb2b [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x72410cd6 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x776d18a7 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x2527b0b2 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x5dcf5084 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x29bfad46 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x1782850b [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x38289539 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x755af3f [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x1085d0d2 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x30722fa2 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0xa5e4572 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x58493d70 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x56b28cdc [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x20523a20 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x53e13d7f [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x5fb838a1 [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0xfce5a5f [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x278d633e [0182.218] RtlRandomEx (in: Seed=0xe80f7c8 | out: Seed=0xe80f7c8) returned 0x820a60f [0182.229] ReadFile (in: hFile=0x1b68, lpBuffer=0x82c08d0, nNumberOfBytesToRead=0x5b1, lpNumberOfBytesRead=0xe80f7c4, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesRead=0xe80f7c4*=0x5b1, lpOverlapped=0x0) returned 1 [0182.229] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.229] WriteFile (in: hFile=0x1b68, lpBuffer=0x82c44d8*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0xe80f7c8, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesWritten=0xe80f7c8*=0x5b1, lpOverlapped=0x0) returned 1 [0182.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b018 [0182.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b040 [0182.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b040) returned 1 [0182.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0182.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0182.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 [0182.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d48d8) returned 1 [0182.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e699c0 [0182.429] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.429] WriteFile (in: hFile=0x1b68, lpBuffer=0x8406880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe80f83c, lpOverlapped=0x0 | out: lpBuffer=0x8406880*, lpNumberOfBytesWritten=0xe80f83c*=0x10c, lpOverlapped=0x0) returned 1 [0182.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 [0182.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699f0) returned 1 [0182.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b040) returned 1 [0182.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699c0) returned 1 [0182.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b018) returned 1 [0182.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0182.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0182.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42290) returned 1 [0182.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x8406880 [0182.622] wcscpy (in: _Dest=0x8406880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" [0182.622] wcscat (in: _Dest=0x8406880, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.f0dbec" [0182.622] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.f0dbec", NtPathName=0xe80f7c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a4060 [0182.962] FlushFileBuffers (hFile=0x1b68) returned 1 [0182.963] CloseHandle (hObject=0x1b68) returned 1 [0182.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x81df648 [0182.992] wcscpy (in: _Dest=0x81df648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0182.992] wcscat (in: _Dest=0x81df648, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" [0182.992] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\f0dbec-readme.txt")) returned 0xffffffff [0182.993] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bcc [0183.017] WriteFile (in: hFile=0x1bcc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe80f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe80f7e4*=0x70c, lpOverlapped=0x0) returned 1 [0183.031] CloseHandle (hObject=0x1bcc) returned 1 [0183.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df648) returned 1 [0183.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5220) returned 1 Thread: id = 3979 os_tid = 0xa1c [0169.618] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js")) returned 0x2020 [0173.598] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", dwFileAttributes=0x20) returned 1 [0177.245] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b60 [0177.246] GetFileSizeEx (in: hFile=0x1b60, lpFileSize=0xe78ff70 | out: lpFileSize=0xe78ff70*=224) returned 1 [0177.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0177.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0177.246] NtQuerySystemTime (in: CurrentTime=0xe78fef8 | out: CurrentTime=0xe78fef8*=132471540452688000) returned 0x0 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x33828023 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x43eb1b81 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x75722b00 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x6db452b4 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x6fb55be9 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x6690279e [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0xa01e3a4 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x4e7228f7 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x2dbe86d8 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0xb67c82e [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x786ff6c2 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x397810a8 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x1f0657c7 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x6e1fbbb3 [0177.246] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x469d9eb6 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x5c98ee70 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x674a6f1d [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x4921d825 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x791b59c2 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x78b5a4ad [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x5f28437d [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x127d48cd [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x15f01d68 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x43e53bd3 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x2cac885f [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x6b2513f2 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x518dd3c1 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x74b3c2c0 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x1de098f7 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x144c79fa [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x34822290 [0177.247] RtlRandomEx (in: Seed=0xe78fef0 | out: Seed=0xe78fef0) returned 0x129f6c2d [0177.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0177.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8248458 [0177.258] ReadFile (in: hFile=0x1b60, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xe78feec, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xe78feec*=0xe0, lpOverlapped=0x0) returned 1 [0181.923] SetFilePointerEx (in: hFile=0x1b60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.923] WriteFile (in: hFile=0x1b60, lpBuffer=0x8248458*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xe78fef0, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesWritten=0xe78fef0*=0xe0, lpOverlapped=0x0) returned 1 [0182.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0182.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d422b8 [0182.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422b8) returned 1 [0182.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0182.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0182.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 [0182.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4260) returned 1 [0182.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x80991d0 [0182.384] SetFilePointerEx (in: hFile=0x1b60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.385] WriteFile (in: hFile=0x1b60, lpBuffer=0x8401398*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xe78ff64, lpOverlapped=0x0 | out: lpBuffer=0x8401398*, lpNumberOfBytesWritten=0xe78ff64*=0x11a, lpOverlapped=0x0) returned 1 [0182.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401398) returned 1 [0182.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80996d0) returned 1 [0182.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422b8) returned 1 [0182.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80991d0) returned 1 [0182.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0182.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0182.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0182.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0182.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8401398 [0182.571] wcscpy (in: _Dest=0x8401398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" [0182.571] wcscat (in: _Dest=0x8401398, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.f0dbec" [0182.571] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.f0dbec", NtPathName=0xe78fee8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x130) returned 0x148a12a8 [0182.909] FlushFileBuffers (hFile=0x1b60) returned 1 [0183.231] CloseHandle (hObject=0x1b60) returned 1 [0183.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x81df760 [0183.306] wcscpy (in: _Dest=0x81df760, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0183.306] wcscat (in: _Dest=0x81df760, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" [0183.306] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\f0dbec-readme.txt")) returned 0x2020 [0183.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df760) returned 1 [0183.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 Thread: id = 3980 os_tid = 0xa2c [0169.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e27240 [0169.619] wcscpy (in: _Dest=0x3e27240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0169.619] wcscat (in: _Dest=0x3e27240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0169.619] wcscat (in: _Dest=0x3e27240, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*" [0169.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09050 [0169.619] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5623b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592c110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592c110, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0174.318] wcscmp (_String1=".", _String2=".") returned 0 [0174.318] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5623b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592c110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592c110, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.161] wcscmp (_String1="..", _String2=".") returned 1 [0175.161] wcscmp (_String1="..", _String2="..") returned 0 [0175.161] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5628950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe562d770, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0175.161] wcscmp (_String1="af", _String2=".") returned 1 [0175.161] wcscmp (_String1="af", _String2="..") returned 1 [0175.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f41a0 [0175.161] wcscpy (in: _Dest=0x81f41a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0175.161] wcscat (in: _Dest=0x81f41a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0175.161] wcscat (in: _Dest=0x81f41a0, _Source="af" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0176.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f41a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0176.112] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5634ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56373b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56373b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0176.112] wcscmp (_String1="am", _String2=".") returned 1 [0176.112] wcscmp (_String1="am", _String2="..") returned 1 [0176.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8335590 [0176.112] wcscpy (in: _Dest=0x8335590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.112] wcscat (in: _Dest=0x8335590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.112] wcscat (in: _Dest=0x8335590, _Source="am" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0176.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264c [0176.113] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe563e8e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5643700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0176.113] wcscmp (_String1="ar", _String2=".") returned 1 [0176.113] wcscmp (_String1="ar", _String2="..") returned 1 [0176.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8334f60 [0176.113] wcscpy (in: _Dest=0x8334f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.113] wcscat (in: _Dest=0x8334f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.113] wcscat (in: _Dest=0x8334f60, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0176.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e4 [0176.115] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5648520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe564d340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1 [0176.115] wcscmp (_String1="az", _String2=".") returned 1 [0176.115] wcscmp (_String1="az", _String2="..") returned 1 [0176.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83358a8 [0176.115] wcscpy (in: _Dest=0x83358a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.115] wcscat (in: _Dest=0x83358a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.115] wcscat (in: _Dest=0x83358a8, _Source="az" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0176.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83358a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e0 [0176.116] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5656f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5659690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5659690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0176.116] wcscmp (_String1="bg", _String2=".") returned 1 [0176.116] wcscmp (_String1="bg", _String2="..") returned 1 [0176.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83357a0 [0176.117] wcscpy (in: _Dest=0x83357a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.117] wcscat (in: _Dest=0x83357a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.117] wcscat (in: _Dest=0x83357a0, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0176.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83357a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2648 [0176.118] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56632d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56659e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0176.118] wcscmp (_String1="bn", _String2=".") returned 1 [0176.118] wcscmp (_String1="bn", _String2="..") returned 1 [0176.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8335698 [0176.118] wcscpy (in: _Dest=0x8335698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.118] wcscat (in: _Dest=0x8335698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.118] wcscat (in: _Dest=0x8335698, _Source="bn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0176.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0176.120] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe566cf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe566f620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe566f620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0176.120] wcscmp (_String1="ca", _String2=".") returned 1 [0176.120] wcscmp (_String1="ca", _String2="..") returned 1 [0176.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8336718 [0176.120] wcscpy (in: _Dest=0x8336718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.120] wcscat (in: _Dest=0x8336718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.120] wcscat (in: _Dest=0x8336718, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0176.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8336718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a0 [0176.121] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5676b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5687cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0176.121] wcscmp (_String1="cs", _String2=".") returned 1 [0176.121] wcscmp (_String1="cs", _String2="..") returned 1 [0176.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3960 [0176.121] wcscpy (in: _Dest=0x81f3960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.121] wcscat (in: _Dest=0x81f3960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.121] wcscat (in: _Dest=0x81f3960, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0176.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0176.123] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe568f1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5691900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0176.123] wcscmp (_String1="da", _String2=".") returned 1 [0176.123] wcscmp (_String1="da", _String2="..") returned 1 [0176.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f4f08 [0176.123] wcscpy (in: _Dest=0x81f4f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.123] wcscat (in: _Dest=0x81f4f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.123] wcscat (in: _Dest=0x81f4f08, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0176.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f4f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0176.124] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5698e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe569dc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0176.124] wcscmp (_String1="de", _String2=".") returned 1 [0176.124] wcscmp (_String1="de", _String2="..") returned 1 [0176.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3b70 [0176.125] wcscpy (in: _Dest=0x81f3b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.125] wcscat (in: _Dest=0x81f3b70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.125] wcscat (in: _Dest=0x81f3b70, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0176.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc [0176.126] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ac6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56aedc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56aedc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0176.126] wcscmp (_String1="el", _String2=".") returned 1 [0176.126] wcscmp (_String1="el", _String2="..") returned 1 [0176.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f5118 [0176.126] wcscpy (in: _Dest=0x81f5118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.126] wcscat (in: _Dest=0x81f5118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.126] wcscat (in: _Dest=0x81f5118, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0176.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d8 [0176.127] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b62f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b8a00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56b8a00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0176.127] wcscmp (_String1="en_GB", _String2=".") returned 1 [0176.127] wcscmp (_String1="en_GB", _String2="..") returned 1 [0176.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f3a68 [0176.127] wcscpy (in: _Dest=0x81f3a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.127] wcscat (in: _Dest=0x81f3a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.127] wcscat (in: _Dest=0x81f3a68, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0176.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d4 [0176.128] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56bff30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c2640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56c2640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0176.129] wcscmp (_String1="en_US", _String2=".") returned 1 [0176.129] wcscmp (_String1="en_US", _String2="..") returned 1 [0176.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f5010 [0176.129] wcscpy (in: _Dest=0x81f5010, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.129] wcscat (in: _Dest=0x81f5010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.129] wcscat (in: _Dest=0x81f5010, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0176.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0176.130] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56cc280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56d10a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0176.130] wcscmp (_String1="es", _String2=".") returned 1 [0176.130] wcscmp (_String1="es", _String2="..") returned 1 [0176.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3858 [0176.130] wcscpy (in: _Dest=0x81f3858, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.130] wcscat (in: _Dest=0x81f3858, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.130] wcscat (in: _Dest=0x81f3858, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0176.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2970 [0176.139] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56d85d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56dace0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0176.139] wcscmp (_String1="es_419", _String2=".") returned 1 [0176.139] wcscmp (_String1="es_419", _String2="..") returned 1 [0176.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd140 [0176.139] wcscpy (in: _Dest=0x30bd140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.139] wcscat (in: _Dest=0x30bd140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.139] wcscat (in: _Dest=0x30bd140, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0176.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bd140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x296c [0176.140] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56e2210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56e4920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0176.140] wcscmp (_String1="et", _String2=".") returned 1 [0176.140] wcscmp (_String1="et", _String2="..") returned 1 [0176.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f4e00 [0176.140] wcscpy (in: _Dest=0x81f4e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.140] wcscat (in: _Dest=0x81f4e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.140] wcscat (in: _Dest=0x81f4e00, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0176.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f4e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ec [0176.142] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ebe50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56f0c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0176.142] wcscmp (_String1="eu", _String2=".") returned 1 [0176.142] wcscmp (_String1="eu", _String2="..") returned 1 [0176.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3750 [0176.142] wcscpy (in: _Dest=0x81f3750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.142] wcscat (in: _Dest=0x81f3750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.142] wcscat (in: _Dest=0x81f3750, _Source="eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0176.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0176.143] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56f81a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56fcfc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0176.143] wcscmp (_String1="fa", _String2=".") returned 1 [0176.144] wcscmp (_String1="fa", _String2="..") returned 1 [0176.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f4cf8 [0176.144] wcscpy (in: _Dest=0x81f4cf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.144] wcscat (in: _Dest=0x81f4cf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.144] wcscat (in: _Dest=0x81f4cf8, _Source="fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0176.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f4cf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0176.145] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57044f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5706c00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0176.145] wcscmp (_String1="fi", _String2=".") returned 1 [0176.145] wcscmp (_String1="fi", _String2="..") returned 1 [0176.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f3648 [0176.145] wcscpy (in: _Dest=0x81f3648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.145] wcscat (in: _Dest=0x81f3648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.145] wcscat (in: _Dest=0x81f3648, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0176.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0176.147] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe570e130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5710840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0176.147] wcscmp (_String1="fil", _String2=".") returned 1 [0176.147] wcscmp (_String1="fil", _String2="..") returned 1 [0176.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f4bf0 [0176.147] wcscpy (in: _Dest=0x81f4bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.147] wcscat (in: _Dest=0x81f4bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.147] wcscat (in: _Dest=0x81f4bf0, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0176.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f4bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0176.148] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5717d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571a480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe571a480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0176.148] wcscmp (_String1="fr", _String2=".") returned 1 [0176.148] wcscmp (_String1="fr", _String2="..") returned 1 [0176.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f4ae8 [0176.148] wcscpy (in: _Dest=0x81f4ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.148] wcscat (in: _Dest=0x81f4ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.148] wcscat (in: _Dest=0x81f4ae8, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0176.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f4ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0176.150] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57240c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57267d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1 [0176.150] wcscmp (_String1="fr_CA", _String2=".") returned 1 [0176.150] wcscmp (_String1="fr_CA", _String2="..") returned 1 [0176.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f49e0 [0176.150] wcscpy (in: _Dest=0x81f49e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.150] wcscat (in: _Dest=0x81f49e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.150] wcscat (in: _Dest=0x81f49e0, _Source="fr_CA" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0176.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f49e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0176.151] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5730410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5732b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0176.151] wcscmp (_String1="gl", _String2=".") returned 1 [0176.151] wcscmp (_String1="gl", _String2="..") returned 1 [0176.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f48d8 [0176.152] wcscpy (in: _Dest=0x81f48d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.152] wcscat (in: _Dest=0x81f48d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.152] wcscat (in: _Dest=0x81f48d8, _Source="gl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0176.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f48d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0176.153] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe573a050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe573ee70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0176.153] wcscmp (_String1="gu", _String2=".") returned 1 [0176.153] wcscmp (_String1="gu", _String2="..") returned 1 [0176.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f47d0 [0176.153] wcscpy (in: _Dest=0x81f47d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.153] wcscat (in: _Dest=0x81f47d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.153] wcscat (in: _Dest=0x81f47d0, _Source="gu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0176.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f47d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0176.154] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5748ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe574b1c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0176.154] wcscmp (_String1="hi", _String2=".") returned 1 [0176.154] wcscmp (_String1="hi", _String2="..") returned 1 [0176.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f46c8 [0176.154] wcscpy (in: _Dest=0x81f46c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.155] wcscat (in: _Dest=0x81f46c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.155] wcscat (in: _Dest=0x81f46c8, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0176.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f46c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0176.156] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57526f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5754e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0176.156] wcscmp (_String1="hr", _String2=".") returned 1 [0176.156] wcscmp (_String1="hr", _String2="..") returned 1 [0176.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f45c0 [0176.156] wcscpy (in: _Dest=0x81f45c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0176.156] wcscat (in: _Dest=0x81f45c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0176.156] wcscat (in: _Dest=0x81f45c0, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0176.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f45c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0177.519] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe575c330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5761150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0177.519] wcscmp (_String1="hu", _String2=".") returned 1 [0177.519] wcscmp (_String1="hu", _String2="..") returned 1 [0177.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8334400 [0177.519] wcscpy (in: _Dest=0x8334400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0177.519] wcscat (in: _Dest=0x8334400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0177.519] wcscat (in: _Dest=0x8334400, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0180.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0180.153] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5765f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe576ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0180.153] wcscmp (_String1="hy", _String2=".") returned 1 [0180.153] wcscmp (_String1="hy", _String2="..") returned 1 [0180.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8332c48 [0180.153] wcscpy (in: _Dest=0x8332c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.153] wcscat (in: _Dest=0x8332c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.153] wcscat (in: _Dest=0x8332c48, _Source="hy" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0180.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0180.155] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57749d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57770e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57770e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0180.155] wcscmp (_String1="id", _String2=".") returned 1 [0180.155] wcscmp (_String1="id", _String2="..") returned 1 [0180.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8334508 [0180.155] wcscpy (in: _Dest=0x8334508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.155] wcscat (in: _Dest=0x8334508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.155] wcscat (in: _Dest=0x8334508, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0180.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0180.157] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe577e610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5783430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0180.157] wcscmp (_String1="is", _String2=".") returned 1 [0180.157] wcscmp (_String1="is", _String2="..") returned 1 [0180.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8054e10 [0180.157] wcscpy (in: _Dest=0x8054e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.157] wcscat (in: _Dest=0x8054e10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.157] wcscat (in: _Dest=0x8054e10, _Source="is" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0180.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0180.158] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5788250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe578d070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0180.158] wcscmp (_String1="it", _String2=".") returned 1 [0180.158] wcscmp (_String1="it", _String2="..") returned 1 [0180.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8054f18 [0180.158] wcscpy (in: _Dest=0x8054f18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.158] wcscat (in: _Dest=0x8054f18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.158] wcscat (in: _Dest=0x8054f18, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0180.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0180.160] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5791e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57993c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0180.160] wcscmp (_String1="iw", _String2=".") returned 1 [0180.160] wcscmp (_String1="iw", _String2="..") returned 1 [0180.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055020 [0180.160] wcscpy (in: _Dest=0x8055020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.160] wcscat (in: _Dest=0x8055020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.160] wcscat (in: _Dest=0x8055020, _Source="iw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0180.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0180.162] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57a08f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57a5710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0180.162] wcscmp (_String1="ja", _String2=".") returned 1 [0180.162] wcscmp (_String1="ja", _String2="..") returned 1 [0180.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055128 [0180.162] wcscpy (in: _Dest=0x8055128, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.162] wcscat (in: _Dest=0x8055128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.162] wcscat (in: _Dest=0x8055128, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0180.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0180.164] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57aa530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57af350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0180.164] wcscmp (_String1="ka", _String2=".") returned 1 [0180.164] wcscmp (_String1="ka", _String2="..") returned 1 [0180.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055230 [0180.164] wcscpy (in: _Dest=0x8055230, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.165] wcscat (in: _Dest=0x8055230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.165] wcscat (in: _Dest=0x8055230, _Source="ka" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0180.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0180.166] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57b4170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57b8f90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1 [0180.166] wcscmp (_String1="km", _String2=".") returned 1 [0180.166] wcscmp (_String1="km", _String2="..") returned 1 [0180.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055338 [0180.166] wcscpy (in: _Dest=0x8055338, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.166] wcscat (in: _Dest=0x8055338, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.167] wcscat (in: _Dest=0x8055338, _Source="km" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0180.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0180.168] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57c04c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57c52e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0180.168] wcscmp (_String1="kn", _String2=".") returned 1 [0180.168] wcscmp (_String1="kn", _String2="..") returned 1 [0180.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055440 [0180.168] wcscpy (in: _Dest=0x8055440, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.168] wcscat (in: _Dest=0x8055440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.168] wcscat (in: _Dest=0x8055440, _Source="kn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0180.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0180.170] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57cc810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57d1630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0180.170] wcscmp (_String1="ko", _String2=".") returned 1 [0180.170] wcscmp (_String1="ko", _String2="..") returned 1 [0180.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055548 [0180.170] wcscpy (in: _Dest=0x8055548, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.170] wcscat (in: _Dest=0x8055548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.170] wcscat (in: _Dest=0x8055548, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0180.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0180.172] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57d8b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57db270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1 [0180.172] wcscmp (_String1="lo", _String2=".") returned 1 [0180.172] wcscmp (_String1="lo", _String2="..") returned 1 [0180.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055650 [0180.172] wcscpy (in: _Dest=0x8055650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.172] wcscat (in: _Dest=0x8055650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.172] wcscat (in: _Dest=0x8055650, _Source="lo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" [0180.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0180.173] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57e27a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57e4eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0181.447] wcscmp (_String1="lt", _String2=".") returned 1 [0181.447] wcscmp (_String1="lt", _String2="..") returned 1 [0181.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2f9a00 [0181.448] wcscpy (in: _Dest=0x2f9a00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.448] wcscat (in: _Dest=0x2f9a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.448] wcscat (in: _Dest=0x2f9a00, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0181.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2f9a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0181.470] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57f1200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57f3910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0181.470] wcscmp (_String1="lv", _String2=".") returned 1 [0181.470] wcscmp (_String1="lv", _String2="..") returned 1 [0181.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83efab8 [0181.471] wcscpy (in: _Dest=0x83efab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.471] wcscat (in: _Dest=0x83efab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.471] wcscat (in: _Dest=0x83efab8, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0181.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83efab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0181.488] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57fae40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57fd550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0181.488] wcscmp (_String1="ml", _String2=".") returned 1 [0181.488] wcscmp (_String1="ml", _String2="..") returned 1 [0181.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83efbc0 [0181.488] wcscpy (in: _Dest=0x83efbc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.488] wcscat (in: _Dest=0x83efbc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.488] wcscat (in: _Dest=0x83efbc0, _Source="ml" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0181.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83efbc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0181.509] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5804a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5807190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0181.509] wcscmp (_String1="mn", _String2=".") returned 1 [0181.509] wcscmp (_String1="mn", _String2="..") returned 1 [0181.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83efcc8 [0181.509] wcscpy (in: _Dest=0x83efcc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.509] wcscat (in: _Dest=0x83efcc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.509] wcscat (in: _Dest=0x83efcc8, _Source="mn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0181.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83efcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0181.512] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5810dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5815bf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0181.513] wcscmp (_String1="mr", _String2=".") returned 1 [0181.513] wcscmp (_String1="mr", _String2="..") returned 1 [0181.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83efdd0 [0181.513] wcscpy (in: _Dest=0x83efdd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.513] wcscat (in: _Dest=0x83efdd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.513] wcscat (in: _Dest=0x83efdd0, _Source="mr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0181.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83efdd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0181.515] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe581d120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe581f830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe581f830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0181.515] wcscmp (_String1="ms", _String2=".") returned 1 [0181.515] wcscmp (_String1="ms", _String2="..") returned 1 [0181.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83efed8 [0181.515] wcscpy (in: _Dest=0x83efed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.515] wcscat (in: _Dest=0x83efed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.515] wcscat (in: _Dest=0x83efed8, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0181.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83efed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0181.517] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5826d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe582bb80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1 [0181.517] wcscmp (_String1="ne", _String2=".") returned 1 [0181.517] wcscmp (_String1="ne", _String2="..") returned 1 [0181.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83effe0 [0181.517] wcscpy (in: _Dest=0x83effe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.517] wcscat (in: _Dest=0x83effe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.517] wcscat (in: _Dest=0x83effe0, _Source="ne" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0181.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83effe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0181.519] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58309a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5841b10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0181.519] wcscmp (_String1="nl", _String2=".") returned 1 [0181.519] wcscmp (_String1="nl", _String2="..") returned 1 [0181.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83f00e8 [0181.519] wcscpy (in: _Dest=0x83f00e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.519] wcscat (in: _Dest=0x83f00e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.519] wcscat (in: _Dest=0x83f00e8, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0181.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83f00e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0181.520] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5849040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe584b750, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0181.520] wcscmp (_String1="no", _String2=".") returned 1 [0181.520] wcscmp (_String1="no", _String2="..") returned 1 [0181.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83f01f0 [0181.521] wcscpy (in: _Dest=0x83f01f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.521] wcscat (in: _Dest=0x83f01f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.521] wcscat (in: _Dest=0x83f01f0, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" [0181.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83f01f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0181.522] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5852c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5855390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0181.522] wcscmp (_String1="pl", _String2=".") returned 1 [0181.522] wcscmp (_String1="pl", _String2="..") returned 1 [0181.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83f02f8 [0181.523] wcscpy (in: _Dest=0x83f02f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.523] wcscat (in: _Dest=0x83f02f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.523] wcscat (in: _Dest=0x83f02f8, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" [0181.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83f02f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0181.524] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe585c8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe585efd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0181.524] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0181.524] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0181.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83f0400 [0181.524] wcscpy (in: _Dest=0x83f0400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.524] wcscat (in: _Dest=0x83f0400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.524] wcscat (in: _Dest=0x83f0400, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" [0181.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83f0400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0181.526] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5866500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5868c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5868c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0181.526] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0181.526] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0181.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83f0508 [0181.526] wcscpy (in: _Dest=0x83f0508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.526] wcscat (in: _Dest=0x83f0508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.527] wcscat (in: _Dest=0x83f0508, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" [0181.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83f0508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0181.528] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5874f60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5877670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0181.528] wcscmp (_String1="ro", _String2=".") returned 1 [0181.528] wcscmp (_String1="ro", _String2="..") returned 1 [0181.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83f0610 [0181.528] wcscpy (in: _Dest=0x83f0610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.528] wcscat (in: _Dest=0x83f0610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.529] wcscat (in: _Dest=0x83f0610, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" [0181.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83f0610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0181.530] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe587eba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58812b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0181.530] wcscmp (_String1="ru", _String2=".") returned 1 [0181.530] wcscmp (_String1="ru", _String2="..") returned 1 [0181.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83f0718 [0181.530] wcscpy (in: _Dest=0x83f0718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.530] wcscat (in: _Dest=0x83f0718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.530] wcscat (in: _Dest=0x83f0718, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" [0181.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83f0718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0181.532] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58887e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe588d600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0181.532] wcscmp (_String1="si", _String2=".") returned 1 [0181.532] wcscmp (_String1="si", _String2="..") returned 1 [0181.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8403930 [0181.532] wcscpy (in: _Dest=0x8403930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.532] wcscat (in: _Dest=0x8403930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.532] wcscat (in: _Dest=0x8403930, _Source="si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" [0181.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8403930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0181.533] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5894b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5897240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0181.533] wcscmp (_String1="sk", _String2=".") returned 1 [0181.534] wcscmp (_String1="sk", _String2="..") returned 1 [0181.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8403a38 [0181.534] wcscpy (in: _Dest=0x8403a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.534] wcscat (in: _Dest=0x8403a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.534] wcscat (in: _Dest=0x8403a38, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" [0181.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8403a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0181.535] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe589e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a0e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58a0e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0181.535] wcscmp (_String1="sl", _String2=".") returned 1 [0181.535] wcscmp (_String1="sl", _String2="..") returned 1 [0181.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8403b40 [0181.535] wcscpy (in: _Dest=0x8403b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.535] wcscat (in: _Dest=0x8403b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.535] wcscat (in: _Dest=0x8403b40, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" [0181.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8403b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0181.537] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58a83b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ad1d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0181.537] wcscmp (_String1="sr", _String2=".") returned 1 [0181.537] wcscmp (_String1="sr", _String2="..") returned 1 [0181.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8403c48 [0181.537] wcscpy (in: _Dest=0x8403c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0181.537] wcscat (in: _Dest=0x8403c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0181.537] wcscat (in: _Dest=0x8403c48, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" [0181.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8403c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0183.745] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58b1ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58b6e10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0183.745] wcscmp (_String1="sv", _String2=".") returned 1 [0183.745] wcscmp (_String1="sv", _String2="..") returned 1 [0183.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333488 [0183.745] wcscpy (in: _Dest=0x8333488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0183.745] wcscat (in: _Dest=0x8333488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0183.745] wcscat (in: _Dest=0x8333488, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0188.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0188.364] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58bbc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58c0a50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0188.364] wcscmp (_String1="sw", _String2=".") returned 1 [0188.364] wcscmp (_String1="sw", _String2="..") returned 1 [0188.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333fe0 [0188.365] wcscpy (in: _Dest=0x8333fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.365] wcscat (in: _Dest=0x8333fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.365] wcscat (in: _Dest=0x8333fe0, _Source="sw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0188.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0188.367] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ca690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0188.367] wcscmp (_String1="ta", _String2=".") returned 1 [0188.367] wcscmp (_String1="ta", _String2="..") returned 1 [0188.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333ed8 [0188.367] wcscpy (in: _Dest=0x8333ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.367] wcscat (in: _Dest=0x8333ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.367] wcscat (in: _Dest=0x8333ed8, _Source="ta" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0188.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0188.369] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58cf4b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58d42d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0188.369] wcscmp (_String1="te", _String2=".") returned 1 [0188.369] wcscmp (_String1="te", _String2="..") returned 1 [0188.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333698 [0188.369] wcscpy (in: _Dest=0x8333698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.369] wcscat (in: _Dest=0x8333698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.369] wcscat (in: _Dest=0x8333698, _Source="te" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0188.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0188.370] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58d90f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ddf10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0188.370] wcscmp (_String1="th", _String2=".") returned 1 [0188.370] wcscmp (_String1="th", _String2="..") returned 1 [0188.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333278 [0188.370] wcscpy (in: _Dest=0x8333278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.371] wcscat (in: _Dest=0x8333278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.371] wcscat (in: _Dest=0x8333278, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0188.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0188.372] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58e5440, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58e7b50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58e7b50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0188.372] wcscmp (_String1="tr", _String2=".") returned 1 [0188.372] wcscmp (_String1="tr", _String2="..") returned 1 [0188.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333170 [0188.372] wcscpy (in: _Dest=0x8333170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.373] wcscat (in: _Dest=0x8333170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.373] wcscat (in: _Dest=0x8333170, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0188.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0188.374] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58ef080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f1790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58f1790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0188.374] wcscmp (_String1="uk", _String2=".") returned 1 [0188.374] wcscmp (_String1="uk", _String2="..") returned 1 [0188.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83338a8 [0188.374] wcscpy (in: _Dest=0x83338a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.374] wcscat (in: _Dest=0x83338a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.375] wcscat (in: _Dest=0x83338a8, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" [0188.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83338a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0188.395] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58f8cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58fb3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1 [0188.395] wcscmp (_String1="ur", _String2=".") returned 1 [0188.395] wcscmp (_String1="ur", _String2="..") returned 1 [0188.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83337a0 [0188.396] wcscpy (in: _Dest=0x83337a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.396] wcscat (in: _Dest=0x83337a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.396] wcscat (in: _Dest=0x83337a0, _Source="ur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" [0188.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83337a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0188.397] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5902900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5907720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0188.397] wcscmp (_String1="vi", _String2=".") returned 1 [0188.397] wcscmp (_String1="vi", _String2="..") returned 1 [0188.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333dd0 [0188.397] wcscpy (in: _Dest=0x8333dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.398] wcscat (in: _Dest=0x8333dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.398] wcscat (in: _Dest=0x8333dd0, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" [0188.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0188.399] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe590c540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5911360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0188.399] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0188.399] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0188.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8334718 [0188.399] wcscpy (in: _Dest=0x8334718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.399] wcscat (in: _Dest=0x8334718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.399] wcscat (in: _Dest=0x8334718, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" [0188.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0188.401] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5918890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe591afa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1 [0188.401] wcscmp (_String1="zh_HK", _String2=".") returned 1 [0188.401] wcscmp (_String1="zh_HK", _String2="..") returned 1 [0188.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8332e58 [0188.401] wcscpy (in: _Dest=0x8332e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.401] wcscat (in: _Dest=0x8332e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.401] wcscat (in: _Dest=0x8332e58, _Source="zh_HK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0188.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8332e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0188.403] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe59224d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5924be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0188.403] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0188.403] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0188.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8333ab8 [0188.403] wcscpy (in: _Dest=0x8333ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.403] wcscat (in: _Dest=0x8333ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.403] wcscat (in: _Dest=0x8333ab8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0188.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0188.404] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1 [0188.405] wcscmp (_String1="zu", _String2=".") returned 1 [0188.405] wcscmp (_String1="zu", _String2="..") returned 1 [0188.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333bc0 [0188.405] wcscpy (in: _Dest=0x8333bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.405] wcscat (in: _Dest=0x8333bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.405] wcscat (in: _Dest=0x8333bc0, _Source="zu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" [0188.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0188.407] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 0 [0188.407] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0188.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09050) returned 1 [0188.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27240) returned 1 [0188.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27540) returned 1 Thread: id = 3981 os_tid = 0xa3c [0169.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f6e00 [0169.620] wcscpy (in: _Dest=0x81f6e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0169.620] wcscat (in: _Dest=0x81f6e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0169.620] wcscat (in: _Dest=0x81f6e00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*" [0169.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f086b0 [0169.620] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38158 [0173.595] wcscmp (_String1=".", _String2=".") returned 0 [0173.595] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.595] wcscmp (_String1="..", _String2=".") returned 1 [0173.595] wcscmp (_String1="..", _String2="..") returned 0 [0173.595] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5cd5910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0173.595] wcscmp (_String1="computed_hashes.json", _String2=".") returned 1 [0173.595] wcscmp (_String1="computed_hashes.json", _String2="..") returned 1 [0173.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d80b0 [0173.595] wcscpy (in: _Dest=0x81d80b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0173.595] wcscat (in: _Dest=0x81d80b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0173.595] wcscat (in: _Dest=0x81d80b0, _Source="computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" [0175.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d80b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d30 [0175.681] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5955920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5955920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0175.681] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0175.681] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0175.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef85f0 [0175.681] wcscpy (in: _Dest=0x3ef85f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0175.681] wcscat (in: _Dest=0x3ef85f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0175.681] wcscat (in: _Dest=0x3ef85f0, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" [0175.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef85f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c [0175.682] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5955920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5955920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0175.682] FindClose (in: hFindFile=0x3f38158 | out: hFindFile=0x3f38158) returned 1 [0175.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f086b0) returned 1 [0175.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6e00) returned 1 [0175.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27640) returned 1 Thread: id = 3982 os_tid = 0xa4c [0169.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt")) returned 0x20 [0174.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", dwFileAttributes=0x20) returned 0 [0174.373] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.373] GetLastError () returned 0x5 [0174.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", dwFileAttributes=0x20) returned 0 [0174.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1ee8) returned 1 Thread: id = 3983 os_tid = 0xa5c [0169.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt")) returned 0x20 [0174.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", dwFileAttributes=0x20) returned 0 [0174.374] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.375] GetLastError () returned 0x5 [0174.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", dwFileAttributes=0x20) returned 0 [0174.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 Thread: id = 3984 os_tid = 0xa6c [0169.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt")) returned 0x20 [0174.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", dwFileAttributes=0x20) returned 0 [0174.376] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.376] GetLastError () returned 0x5 [0174.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", dwFileAttributes=0x20) returned 0 [0174.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 3985 os_tid = 0xa7c [0169.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt")) returned 0x20 [0174.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", dwFileAttributes=0x20) returned 0 [0174.378] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.378] GetLastError () returned 0x5 [0174.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", dwFileAttributes=0x20) returned 0 [0174.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 3986 os_tid = 0xa8c [0169.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt")) returned 0x20 [0174.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", dwFileAttributes=0x20) returned 0 [0174.379] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.379] GetLastError () returned 0x5 [0174.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", dwFileAttributes=0x20) returned 0 [0174.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 Thread: id = 3987 os_tid = 0xa9c [0169.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt")) returned 0x20 [0174.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", dwFileAttributes=0x20) returned 0 [0174.381] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.381] GetLastError () returned 0x5 [0174.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", dwFileAttributes=0x20) returned 0 [0174.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 3988 os_tid = 0xaac [0169.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt")) returned 0x20 [0174.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", dwFileAttributes=0x20) returned 0 [0174.382] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.382] GetLastError () returned 0x5 [0174.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", dwFileAttributes=0x20) returned 0 [0174.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 3989 os_tid = 0xac0 [0169.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt")) returned 0x20 [0174.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", dwFileAttributes=0x20) returned 0 [0174.384] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.384] GetLastError () returned 0x5 [0174.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", dwFileAttributes=0x20) returned 0 [0174.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff67f8) returned 1 Thread: id = 3990 os_tid = 0xacc [0169.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt")) returned 0x20 [0174.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", dwFileAttributes=0x20) returned 0 [0174.385] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.385] GetLastError () returned 0x5 [0174.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", dwFileAttributes=0x20) returned 0 [0174.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6c48) returned 1 Thread: id = 3991 os_tid = 0xb58 [0169.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt")) returned 0x20 [0174.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", dwFileAttributes=0x20) returned 0 [0174.387] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.387] GetLastError () returned 0x5 [0174.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", dwFileAttributes=0x20) returned 0 [0174.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 3992 os_tid = 0x43c [0169.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt")) returned 0x20 [0174.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", dwFileAttributes=0x20) returned 0 [0174.388] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.388] GetLastError () returned 0x5 [0174.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", dwFileAttributes=0x20) returned 0 [0174.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6688) returned 1 Thread: id = 3993 os_tid = 0xdb4 [0169.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt")) returned 0x20 [0173.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", dwFileAttributes=0x20) returned 0 [0173.611] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.612] GetLastError () returned 0x5 [0173.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", dwFileAttributes=0x20) returned 0 [0173.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6a20) returned 1 Thread: id = 3994 os_tid = 0xdf0 [0169.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt")) returned 0x20 [0173.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", dwFileAttributes=0x20) returned 0 [0173.613] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.613] GetLastError () returned 0x5 [0173.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", dwFileAttributes=0x20) returned 0 [0173.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff75a0) returned 1 Thread: id = 3995 os_tid = 0xde8 [0169.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt")) returned 0x20 [0173.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", dwFileAttributes=0x20) returned 0 [0173.614] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.615] GetLastError () returned 0x5 [0173.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", dwFileAttributes=0x20) returned 0 [0173.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 3996 os_tid = 0x68c [0169.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml")) returned 0x20 [0172.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0172.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.300] GetLastError () returned 0x5 [0172.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0172.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bcb8) returned 1 Thread: id = 3997 os_tid = 0xe98 [0169.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml")) returned 0x20 [0172.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml", dwFileAttributes=0x20) returned 0 [0172.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.339] GetLastError () returned 0x5 [0172.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml", dwFileAttributes=0x20) returned 0 [0172.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2de60) returned 1 Thread: id = 3998 os_tid = 0xe9c [0169.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml")) returned 0x20 [0172.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml", dwFileAttributes=0x20) returned 0 [0172.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.341] GetLastError () returned 0x5 [0172.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml", dwFileAttributes=0x20) returned 0 [0172.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b038) returned 1 Thread: id = 3999 os_tid = 0xeb0 [0169.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml")) returned 0x20 [0172.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0172.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.343] GetLastError () returned 0x5 [0172.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0172.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da358) returned 1 Thread: id = 4000 os_tid = 0xeac [0169.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml")) returned 0x20 [0172.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0172.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.345] GetLastError () returned 0x5 [0172.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0172.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d140) returned 1 Thread: id = 4001 os_tid = 0xea8 [0169.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml")) returned 0x20 [0171.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0171.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.742] GetLastError () returned 0x5 [0171.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0171.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa38) returned 1 Thread: id = 4002 os_tid = 0xeb4 [0169.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif")) returned 0x20 [0177.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0177.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.667] GetLastError () returned 0x5 [0177.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0177.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 4003 os_tid = 0xeb8 [0169.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif")) returned 0x20 [0177.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0177.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.672] GetLastError () returned 0x5 [0177.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0177.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0008) returned 1 Thread: id = 4004 os_tid = 0x159c [0169.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif")) returned 0x20 [0177.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0177.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.543] GetLastError () returned 0x5 [0177.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0177.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff38) returned 1 Thread: id = 4005 os_tid = 0x15a0 [0169.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif")) returned 0x20 [0177.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0177.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.775] GetLastError () returned 0x5 [0177.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0177.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f00d8) returned 1 Thread: id = 4006 os_tid = 0x15a4 [0169.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif")) returned 0x20 [0177.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0177.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.674] GetLastError () returned 0x5 [0177.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0177.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecec0) returned 1 Thread: id = 4007 os_tid = 0x15a8 [0169.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif")) returned 0x20 [0177.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0177.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.768] GetLastError () returned 0x5 [0177.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0177.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 4008 os_tid = 0x1434 [0169.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js")) returned 0x20 [0177.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0177.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.762] GetLastError () returned 0x5 [0177.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0177.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8e80) returned 1 Thread: id = 4009 os_tid = 0x15c0 [0169.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js")) returned 0x20 [0172.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0173.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.747] GetLastError () returned 0x5 [0175.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0177.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecf98) returned 1 Thread: id = 4010 os_tid = 0x15c4 [0169.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js")) returned 0x20 [0177.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js", dwFileAttributes=0x20) returned 0 [0177.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.773] GetLastError () returned 0x5 [0177.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js", dwFileAttributes=0x20) returned 0 [0177.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef718) returned 1 Thread: id = 4011 os_tid = 0x12fc [0169.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js")) returned 0x20 [0177.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0177.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.758] GetLastError () returned 0x5 [0177.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0177.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 4012 os_tid = 0x1300 [0169.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg")) returned 0x20 [0177.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0177.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.776] GetLastError () returned 0x5 [0177.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0177.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 4013 os_tid = 0x1308 [0169.676] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png")) returned 0x2020 [0172.885] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png", dwFileAttributes=0x20) returned 1 [0176.276] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c6c [0176.276] GetFileSizeEx (in: hFile=0x1c6c, lpFileSize=0xe63fb70 | out: lpFileSize=0xe63fb70*=7547) returned 1 [0176.276] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x1d77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.276] ReadFile (in: hFile=0x1c6c, lpBuffer=0xe63fb7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe63fb58, lpOverlapped=0x0 | out: lpBuffer=0xe63fb7c*, lpNumberOfBytesRead=0xe63fb58*=0x4, lpOverlapped=0x0) returned 1 [0176.396] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49880 [0176.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49da8 [0176.397] NtQuerySystemTime (in: CurrentTime=0xe63faf8 | out: CurrentTime=0xe63faf8*=132471540444732000) returned 0x0 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x6c9399da [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x5951512 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0xc8553f9 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x29eee5d7 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x1e3d7828 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x7d6e7731 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x728efd8a [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x148219c5 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x8609bad [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0xca3cfd0 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x2da72c62 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x258a6dbf [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x6988ba1c [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x51b5a2a4 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x4eec857d [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x6cb88264 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x3df36ee8 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x46e88287 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x34a52e92 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x63b689f6 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x1fa3983 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x779dcc43 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x634b681c [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x2e4917c5 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x3a840025 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x26209365 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x2c2c224d [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x33f8df78 [0176.397] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x1bdf4873 [0176.398] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x3edc53e3 [0176.398] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x2f234e30 [0176.398] RtlRandomEx (in: Seed=0xe63faf0 | out: Seed=0xe63faf0) returned 0x5f320708 [0176.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0176.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0176.406] ReadFile (in: hFile=0x1c6c, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x1d7b, lpNumberOfBytesRead=0xe63faec, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0xe63faec*=0x1d7b, lpOverlapped=0x0) returned 1 [0176.417] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.417] WriteFile (in: hFile=0x1c6c, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x1d7b, lpNumberOfBytesWritten=0xe63faf0, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0xe63faf0*=0x1d7b, lpOverlapped=0x0) returned 1 [0176.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d98 [0176.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0176.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0176.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0176.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0176.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32bb0) returned 1 [0176.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308cc8) returned 1 [0176.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef3188 [0176.908] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.908] WriteFile (in: hFile=0x1c6c, lpBuffer=0x3ef57b0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xe63fb64, lpOverlapped=0x0 | out: lpBuffer=0x3ef57b0*, lpNumberOfBytesWritten=0xe63fb64*=0x100, lpOverlapped=0x0) returned 1 [0176.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef57b0) returned 1 [0176.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2120) returned 1 [0176.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0176.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0176.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d98) returned 1 [0176.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49880) returned 1 [0176.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4abb8) returned 1 [0176.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a848) returned 1 [0176.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3ef57b0 [0176.949] wcscpy (in: _Dest=0x3ef57b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" [0176.949] wcscat (in: _Dest=0x3ef57b0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.f0dbec" [0176.949] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.f0dbec", NtPathName=0xe63fae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8186fe8 [0176.957] FlushFileBuffers (hFile=0x1c6c) returned 1 [0177.710] CloseHandle (hObject=0x1c6c) returned 1 [0182.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8406998 [0182.431] wcscpy (in: _Dest=0x8406998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0182.431] wcscat (in: _Dest=0x8406998, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\F0DBEC-Readme.txt" [0182.431] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\f0dbec-readme.txt")) returned 0xffffffff [0182.431] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bec [0182.700] WriteFile (in: hFile=0x1bec, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe63fb0c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe63fb0c*=0x70c, lpOverlapped=0x0) returned 1 [0182.899] CloseHandle (hObject=0x1bec) returned 1 [0182.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 [0182.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e26f40) returned 1 Thread: id = 4014 os_tid = 0x15d0 [0169.676] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json")) returned 0x2020 [0173.324] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0177.164] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b84 [0177.165] GetFileSizeEx (in: hFile=0x1b84, lpFileSize=0x105afe90 | out: lpFileSize=0x105afe90*=981) returned 1 [0177.165] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x3d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.165] ReadFile (in: hFile=0x1b84, lpBuffer=0x105afe9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x105afe78, lpOverlapped=0x0 | out: lpBuffer=0x105afe9c*, lpNumberOfBytesRead=0x105afe78*=0x4, lpOverlapped=0x0) returned 1 [0182.192] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0182.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b50 [0182.192] NtQuerySystemTime (in: CurrentTime=0x105afe18 | out: CurrentTime=0x105afe18*=132471540501828000) returned 0x0 [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x3779ffb4 [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x46808aaa [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x43c6fd03 [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x4a36bf16 [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x4422c44d [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x736bbad [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x39a8af96 [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x28ff1a41 [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x49cfdbba [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x32810fbb [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x4e1bcee7 [0182.192] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x39fa4b47 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x7a115384 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x239ce2dc [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x4f628ca5 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x6276abf9 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x69a0b7c5 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x34139a16 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x481f3815 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x27b12697 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0xfce5a5f [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x789856b7 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x13a7e834 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x6b57ed27 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x591c8a6e [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x776d18a7 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x3054af2d [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x7ffc1a7f [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x3a87a119 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x76c8f649 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x18c6065 [0182.193] RtlRandomEx (in: Seed=0x105afe10 | out: Seed=0x105afe10) returned 0x637da513 [0182.202] ReadFile (in: hFile=0x1b84, lpBuffer=0x82b18b0, nNumberOfBytesToRead=0x3d5, lpNumberOfBytesRead=0x105afe0c, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesRead=0x105afe0c*=0x3d5, lpOverlapped=0x0) returned 1 [0182.203] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.203] WriteFile (in: hFile=0x1b84, lpBuffer=0x82b54b8*, nNumberOfBytesToWrite=0x3d5, lpNumberOfBytesWritten=0x105afe10, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesWritten=0x105afe10*=0x3d5, lpOverlapped=0x0) returned 1 [0185.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0185.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43460 [0185.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0185.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0185.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0185.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0185.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4848) returned 1 [0185.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0185.226] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.226] WriteFile (in: hFile=0x1b84, lpBuffer=0x81dfbc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x105afe84, lpOverlapped=0x0 | out: lpBuffer=0x81dfbc0*, lpNumberOfBytesWritten=0x105afe84*=0x10c, lpOverlapped=0x0) returned 1 [0189.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfbc0) returned 1 [0189.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0189.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0189.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0189.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0189.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0189.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0189.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0189.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x81dfbc0 [0189.409] wcscpy (in: _Dest=0x81dfbc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" [0189.409] wcscat (in: _Dest=0x81dfbc0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json.f0dbec" [0189.409] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json.f0dbec", NtPathName=0x105afe08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ef8998 [0190.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8998) returned 1 [0190.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f0d80) returned 1 [0190.581] NtQueryInformationFile (in: FileHandle=0x1b84, IoStatusBlock=0x105afde0, FileInformation=0x105afde8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x105afde0, FileInformation=0x105afde8) returned 0x0 [0190.581] NtSetInformationFile (FileHandle=0x1b84, IoStatusBlock=0x105afde0, FileInformation=0x105afde8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfbc0) returned 1 [0190.736] FlushFileBuffers (hFile=0x1b84) returned 1 [0190.747] CloseHandle (hObject=0x1b84) returned 1 [0190.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bcf10 [0190.843] wcscpy (in: _Dest=0x30bcf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0190.843] wcscat (in: _Dest=0x30bcf10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\F0DBEC-Readme.txt" [0190.843] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\f0dbec-readme.txt")) returned 0x2020 [0190.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0190.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5328) returned 1 Thread: id = 4015 os_tid = 0x15d4 [0169.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e27840 [0169.677] wcscpy (in: _Dest=0x3e27840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0169.677] wcscat (in: _Dest=0x3e27840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0169.677] wcscat (in: _Dest=0x3e27840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*" [0169.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09788 [0169.677] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*", lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37958 [0173.529] wcscmp (_String1=".", _String2=".") returned 0 [0173.529] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.529] wcscmp (_String1="..", _String2=".") returned 1 [0173.529] wcscmp (_String1="..", _String2="..") returned 0 [0173.530] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0173.530] wcscmp (_String1="ar", _String2=".") returned 1 [0173.530] wcscmp (_String1="ar", _String2="..") returned 1 [0173.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6410 [0173.530] wcscpy (in: _Dest=0x3ef6410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.530] wcscat (in: _Dest=0x3ef6410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.530] wcscat (in: _Dest=0x3ef6410, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0173.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0173.531] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0173.531] wcscmp (_String1="bg", _String2=".") returned 1 [0173.531] wcscmp (_String1="bg", _String2="..") returned 1 [0173.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6308 [0173.531] wcscpy (in: _Dest=0x3ef6308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.531] wcscat (in: _Dest=0x3ef6308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.531] wcscat (in: _Dest=0x3ef6308, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0173.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0173.532] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0173.532] wcscmp (_String1="ca", _String2=".") returned 1 [0173.532] wcscmp (_String1="ca", _String2="..") returned 1 [0173.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6200 [0173.532] wcscpy (in: _Dest=0x3ef6200, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.533] wcscat (in: _Dest=0x3ef6200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.533] wcscat (in: _Dest=0x3ef6200, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0173.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c0 [0173.533] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0173.534] wcscmp (_String1="cs", _String2=".") returned 1 [0173.534] wcscmp (_String1="cs", _String2="..") returned 1 [0173.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef60f8 [0173.534] wcscpy (in: _Dest=0x3ef60f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.534] wcscat (in: _Dest=0x3ef60f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.534] wcscat (in: _Dest=0x3ef60f8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0173.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef60f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0173.535] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0173.535] wcscmp (_String1="da", _String2=".") returned 1 [0173.535] wcscmp (_String1="da", _String2="..") returned 1 [0173.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5ff0 [0173.535] wcscpy (in: _Dest=0x3ef5ff0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.535] wcscat (in: _Dest=0x3ef5ff0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.535] wcscat (in: _Dest=0x3ef5ff0, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0173.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0173.536] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0173.536] wcscmp (_String1="de", _String2=".") returned 1 [0173.536] wcscmp (_String1="de", _String2="..") returned 1 [0173.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5ee8 [0173.536] wcscpy (in: _Dest=0x3ef5ee8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.536] wcscat (in: _Dest=0x3ef5ee8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.536] wcscat (in: _Dest=0x3ef5ee8, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0173.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0173.537] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0173.537] wcscmp (_String1="el", _String2=".") returned 1 [0173.538] wcscmp (_String1="el", _String2="..") returned 1 [0173.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5de0 [0173.538] wcscpy (in: _Dest=0x3ef5de0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.538] wcscat (in: _Dest=0x3ef5de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.538] wcscat (in: _Dest=0x3ef5de0, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0173.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0173.539] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0173.539] wcscmp (_String1="en_GB", _String2=".") returned 1 [0173.539] wcscmp (_String1="en_GB", _String2="..") returned 1 [0173.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3ef5cd8 [0173.539] wcscpy (in: _Dest=0x3ef5cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.539] wcscat (in: _Dest=0x3ef5cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.539] wcscat (in: _Dest=0x3ef5cd8, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0173.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0173.540] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0173.540] wcscmp (_String1="en_US", _String2=".") returned 1 [0173.540] wcscmp (_String1="en_US", _String2="..") returned 1 [0173.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3ef5bd0 [0173.540] wcscpy (in: _Dest=0x3ef5bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.540] wcscat (in: _Dest=0x3ef5bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.540] wcscat (in: _Dest=0x3ef5bd0, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0173.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0173.541] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0173.541] wcscmp (_String1="es", _String2=".") returned 1 [0173.541] wcscmp (_String1="es", _String2="..") returned 1 [0173.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef56a8 [0173.541] wcscpy (in: _Dest=0x3ef56a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.541] wcscat (in: _Dest=0x3ef56a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.542] wcscat (in: _Dest=0x3ef56a8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0173.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef56a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0173.543] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0173.543] wcscmp (_String1="es_419", _String2=".") returned 1 [0173.543] wcscmp (_String1="es_419", _String2="..") returned 1 [0173.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec3c8 [0173.543] wcscpy (in: _Dest=0x3dec3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.543] wcscat (in: _Dest=0x3dec3c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.543] wcscat (in: _Dest=0x3dec3c8, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0173.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0173.544] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0173.544] wcscmp (_String1="et", _String2=".") returned 1 [0173.544] wcscmp (_String1="et", _String2="..") returned 1 [0173.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8054c00 [0173.544] wcscpy (in: _Dest=0x8054c00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.544] wcscat (in: _Dest=0x8054c00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.544] wcscat (in: _Dest=0x8054c00, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0173.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2558 [0173.547] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0173.547] wcscmp (_String1="eu", _String2=".") returned 1 [0173.547] wcscmp (_String1="eu", _String2="..") returned 1 [0173.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8054d08 [0173.547] wcscpy (in: _Dest=0x8054d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.547] wcscat (in: _Dest=0x8054d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.547] wcscat (in: _Dest=0x8054d08, _Source="eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0173.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c8 [0173.548] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0173.549] wcscmp (_String1="fi", _String2=".") returned 1 [0173.549] wcscmp (_String1="fi", _String2="..") returned 1 [0173.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8054e10 [0173.549] wcscpy (in: _Dest=0x8054e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.549] wcscat (in: _Dest=0x8054e10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.549] wcscat (in: _Dest=0x8054e10, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0173.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0173.550] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0173.550] wcscmp (_String1="fil", _String2=".") returned 1 [0173.550] wcscmp (_String1="fil", _String2="..") returned 1 [0173.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8054f18 [0173.551] wcscpy (in: _Dest=0x8054f18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.551] wcscat (in: _Dest=0x8054f18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.551] wcscat (in: _Dest=0x8054f18, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0173.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8054f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1894 [0173.552] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0173.552] wcscmp (_String1="fr", _String2=".") returned 1 [0173.552] wcscmp (_String1="fr", _String2="..") returned 1 [0173.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055020 [0173.552] wcscpy (in: _Dest=0x8055020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.552] wcscat (in: _Dest=0x8055020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.552] wcscat (in: _Dest=0x8055020, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0173.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2704 [0173.577] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0173.577] wcscmp (_String1="he", _String2=".") returned 1 [0173.578] wcscmp (_String1="he", _String2="..") returned 1 [0173.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055128 [0173.578] wcscpy (in: _Dest=0x8055128, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.578] wcscat (in: _Dest=0x8055128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.578] wcscat (in: _Dest=0x8055128, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0173.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2708 [0173.579] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0173.579] wcscmp (_String1="hi", _String2=".") returned 1 [0173.579] wcscmp (_String1="hi", _String2="..") returned 1 [0173.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055230 [0173.579] wcscpy (in: _Dest=0x8055230, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.580] wcscat (in: _Dest=0x8055230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.580] wcscat (in: _Dest=0x8055230, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0173.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270c [0173.581] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0173.581] wcscmp (_String1="hr", _String2=".") returned 1 [0173.581] wcscmp (_String1="hr", _String2="..") returned 1 [0173.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055338 [0173.581] wcscpy (in: _Dest=0x8055338, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.581] wcscat (in: _Dest=0x8055338, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.581] wcscat (in: _Dest=0x8055338, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0173.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2784 [0173.583] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0173.583] wcscmp (_String1="hu", _String2=".") returned 1 [0173.583] wcscmp (_String1="hu", _String2="..") returned 1 [0173.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055440 [0173.583] wcscpy (in: _Dest=0x8055440, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.583] wcscat (in: _Dest=0x8055440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.583] wcscat (in: _Dest=0x8055440, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0173.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294c [0173.584] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0173.584] wcscmp (_String1="id", _String2=".") returned 1 [0173.584] wcscmp (_String1="id", _String2="..") returned 1 [0173.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055548 [0173.584] wcscpy (in: _Dest=0x8055548, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.585] wcscat (in: _Dest=0x8055548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.585] wcscat (in: _Dest=0x8055548, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0173.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2950 [0173.586] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0173.586] wcscmp (_String1="it", _String2=".") returned 1 [0173.586] wcscmp (_String1="it", _String2="..") returned 1 [0173.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8055650 [0173.586] wcscpy (in: _Dest=0x8055650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.586] wcscat (in: _Dest=0x8055650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.586] wcscat (in: _Dest=0x8055650, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0173.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8055650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0173.587] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0173.587] wcscmp (_String1="ja", _String2=".") returned 1 [0173.587] wcscmp (_String1="ja", _String2="..") returned 1 [0173.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8334b40 [0173.588] wcscpy (in: _Dest=0x8334b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.588] wcscat (in: _Dest=0x8334b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.588] wcscat (in: _Dest=0x8334b40, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0173.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c0 [0173.589] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0173.589] wcscmp (_String1="ko", _String2=".") returned 1 [0173.589] wcscmp (_String1="ko", _String2="..") returned 1 [0173.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8334c48 [0173.589] wcscpy (in: _Dest=0x8334c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0173.589] wcscat (in: _Dest=0x8334c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0173.589] wcscat (in: _Dest=0x8334c48, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0173.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c4 [0174.317] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0174.317] wcscmp (_String1="lt", _String2=".") returned 1 [0174.317] wcscmp (_String1="lt", _String2="..") returned 1 [0174.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8322610 [0174.317] wcscpy (in: _Dest=0x8322610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0174.317] wcscat (in: _Dest=0x8322610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0174.317] wcscat (in: _Dest=0x8322610, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" [0180.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8322610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0180.175] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0180.175] wcscmp (_String1="lv", _String2=".") returned 1 [0180.175] wcscmp (_String1="lv", _String2="..") returned 1 [0180.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83221f0 [0180.175] wcscpy (in: _Dest=0x83221f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.175] wcscat (in: _Dest=0x83221f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.175] wcscat (in: _Dest=0x83221f0, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" [0180.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83221f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0180.177] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0180.177] wcscmp (_String1="ms", _String2=".") returned 1 [0180.177] wcscmp (_String1="ms", _String2="..") returned 1 [0180.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8321ab8 [0180.177] wcscpy (in: _Dest=0x8321ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.177] wcscat (in: _Dest=0x8321ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.177] wcscat (in: _Dest=0x8321ab8, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" [0180.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0180.179] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0180.179] wcscmp (_String1="nl", _String2=".") returned 1 [0180.179] wcscmp (_String1="nl", _String2="..") returned 1 [0180.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8334930 [0180.179] wcscpy (in: _Dest=0x8334930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.179] wcscat (in: _Dest=0x8334930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.179] wcscat (in: _Dest=0x8334930, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" [0180.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8334930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0180.181] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0180.181] wcscmp (_String1="no", _String2=".") returned 1 [0180.181] wcscmp (_String1="no", _String2="..") returned 1 [0180.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83ea930 [0180.181] wcscpy (in: _Dest=0x83ea930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.181] wcscat (in: _Dest=0x83ea930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.181] wcscat (in: _Dest=0x83ea930, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" [0180.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83ea930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc [0180.182] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0180.182] wcscmp (_String1="pl", _String2=".") returned 1 [0180.182] wcscmp (_String1="pl", _String2="..") returned 1 [0180.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eaa38 [0180.182] wcscpy (in: _Dest=0x83eaa38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.182] wcscat (in: _Dest=0x83eaa38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.183] wcscat (in: _Dest=0x83eaa38, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" [0180.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eaa38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0180.184] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0180.184] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0180.184] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0180.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83eab40 [0180.184] wcscpy (in: _Dest=0x83eab40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.184] wcscat (in: _Dest=0x83eab40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.185] wcscat (in: _Dest=0x83eab40, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" [0180.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eab40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0180.186] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0180.186] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0180.186] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0180.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83eac48 [0180.186] wcscpy (in: _Dest=0x83eac48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.186] wcscat (in: _Dest=0x83eac48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.186] wcscat (in: _Dest=0x83eac48, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" [0180.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eac48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0180.188] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0180.188] wcscmp (_String1="ro", _String2=".") returned 1 [0180.188] wcscmp (_String1="ro", _String2="..") returned 1 [0180.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83ead50 [0180.188] wcscpy (in: _Dest=0x83ead50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.188] wcscat (in: _Dest=0x83ead50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.188] wcscat (in: _Dest=0x83ead50, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" [0180.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83ead50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0180.190] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0180.190] wcscmp (_String1="ru", _String2=".") returned 1 [0180.190] wcscmp (_String1="ru", _String2="..") returned 1 [0180.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eae58 [0180.190] wcscpy (in: _Dest=0x83eae58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.190] wcscat (in: _Dest=0x83eae58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.190] wcscat (in: _Dest=0x83eae58, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" [0180.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eae58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0180.191] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0180.191] wcscmp (_String1="sk", _String2=".") returned 1 [0180.191] wcscmp (_String1="sk", _String2="..") returned 1 [0180.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eaf60 [0180.191] wcscpy (in: _Dest=0x83eaf60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.191] wcscat (in: _Dest=0x83eaf60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.192] wcscat (in: _Dest=0x83eaf60, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" [0180.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eaf60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0180.193] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0180.193] wcscmp (_String1="sl", _String2=".") returned 1 [0180.193] wcscmp (_String1="sl", _String2="..") returned 1 [0180.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eb068 [0180.193] wcscpy (in: _Dest=0x83eb068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.193] wcscat (in: _Dest=0x83eb068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.193] wcscat (in: _Dest=0x83eb068, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" [0180.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0180.194] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0180.194] wcscmp (_String1="sr", _String2=".") returned 1 [0180.194] wcscmp (_String1="sr", _String2="..") returned 1 [0180.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eb170 [0180.195] wcscpy (in: _Dest=0x83eb170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.195] wcscat (in: _Dest=0x83eb170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.195] wcscat (in: _Dest=0x83eb170, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" [0180.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0180.196] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0180.196] wcscmp (_String1="sv", _String2=".") returned 1 [0180.196] wcscmp (_String1="sv", _String2="..") returned 1 [0180.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eb278 [0180.196] wcscpy (in: _Dest=0x83eb278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.196] wcscat (in: _Dest=0x83eb278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.196] wcscat (in: _Dest=0x83eb278, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" [0180.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0180.197] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0180.197] wcscmp (_String1="th", _String2=".") returned 1 [0180.197] wcscmp (_String1="th", _String2="..") returned 1 [0180.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eb380 [0180.197] wcscpy (in: _Dest=0x83eb380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.197] wcscat (in: _Dest=0x83eb380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.197] wcscat (in: _Dest=0x83eb380, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" [0180.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0180.198] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0180.198] wcscmp (_String1="tr", _String2=".") returned 1 [0180.198] wcscmp (_String1="tr", _String2="..") returned 1 [0180.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eb488 [0180.199] wcscpy (in: _Dest=0x83eb488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.199] wcscat (in: _Dest=0x83eb488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.199] wcscat (in: _Dest=0x83eb488, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" [0180.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0180.200] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0180.200] wcscmp (_String1="uk", _String2=".") returned 1 [0180.200] wcscmp (_String1="uk", _String2="..") returned 1 [0180.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eb590 [0180.200] wcscpy (in: _Dest=0x83eb590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.200] wcscat (in: _Dest=0x83eb590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.200] wcscat (in: _Dest=0x83eb590, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" [0180.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0180.201] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0180.201] wcscmp (_String1="vi", _String2=".") returned 1 [0180.201] wcscmp (_String1="vi", _String2="..") returned 1 [0180.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83eb698 [0180.202] wcscpy (in: _Dest=0x83eb698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.202] wcscat (in: _Dest=0x83eb698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.202] wcscat (in: _Dest=0x83eb698, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" [0180.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0180.203] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0180.203] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0180.203] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0180.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83eb7a0 [0180.203] wcscpy (in: _Dest=0x83eb7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.203] wcscat (in: _Dest=0x83eb7a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.203] wcscat (in: _Dest=0x83eb7a0, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" [0180.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0180.204] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0180.204] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0180.204] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0180.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83eb8a8 [0180.204] wcscpy (in: _Dest=0x83eb8a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.205] wcscat (in: _Dest=0x83eb8a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0180.205] wcscat (in: _Dest=0x83eb8a8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" [0180.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83eb8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0180.206] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0180.206] FindClose (in: hFindFile=0x3f37958 | out: hFindFile=0x3f37958) returned 1 [0180.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09788) returned 1 [0180.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27840) returned 1 [0180.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27740) returned 1 Thread: id = 4016 os_tid = 0x15d8 [0169.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx")) returned 0x20 [0175.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx", dwFileAttributes=0x20) returned 0 [0175.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.199] GetLastError () returned 0x5 [0175.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx", dwFileAttributes=0x20) returned 0 [0175.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da568) returned 1 Thread: id = 4017 os_tid = 0x15dc [0169.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx")) returned 0x20 [0173.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx", dwFileAttributes=0x20) returned 0 [0173.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.441] GetLastError () returned 0x5 [0175.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx", dwFileAttributes=0x20) returned 0 [0175.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ddb8) returned 1 Thread: id = 4018 os_tid = 0x15e0 [0169.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx")) returned 0x20 [0175.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx", dwFileAttributes=0x20) returned 0 [0175.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.448] GetLastError () returned 0x5 [0175.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx", dwFileAttributes=0x20) returned 0 [0175.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dd10) returned 1 Thread: id = 4019 os_tid = 0x15e4 [0169.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx")) returned 0x20 [0175.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx", dwFileAttributes=0x20) returned 0 [0175.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.447] GetLastError () returned 0x5 [0175.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx", dwFileAttributes=0x20) returned 0 [0175.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dc68) returned 1 Thread: id = 4020 os_tid = 0x15e8 [0169.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx")) returned 0x20 [0175.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx", dwFileAttributes=0x20) returned 0 [0175.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.444] GetLastError () returned 0x5 [0175.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx", dwFileAttributes=0x20) returned 0 [0175.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d290) returned 1 Thread: id = 4021 os_tid = 0x15ec [0169.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx")) returned 0x20 [0175.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx", dwFileAttributes=0x20) returned 0 [0175.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.445] GetLastError () returned 0x5 [0175.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx", dwFileAttributes=0x20) returned 0 [0175.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d7d0) returned 1 Thread: id = 4022 os_tid = 0x1600 [0169.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx")) returned 0x20 [0175.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx", dwFileAttributes=0x20) returned 0 [0175.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.442] GetLastError () returned 0x5 [0175.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx", dwFileAttributes=0x20) returned 0 [0175.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9858) returned 1 Thread: id = 4023 os_tid = 0x1604 [0169.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json")) returned 0x2020 [0175.128] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", dwFileAttributes=0x20) returned 1 [0184.585] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1810 [0184.585] GetFileSizeEx (in: hFile=0x1810, lpFileSize=0x109dfd00 | out: lpFileSize=0x109dfd00*=352) returned 1 [0184.585] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x15c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.585] ReadFile (in: hFile=0x1810, lpBuffer=0x109dfd0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x109dfce8, lpOverlapped=0x0 | out: lpBuffer=0x109dfd0c*, lpNumberOfBytesRead=0x109dfce8*=0x4, lpOverlapped=0x0) returned 1 [0184.587] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0184.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0184.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0184.587] NtQuerySystemTime (in: CurrentTime=0x109dfc88 | out: CurrentTime=0x109dfc88*=132471540525072000) returned 0x0 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x5387d97d [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x798c53b8 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x4f2ae6fe [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x7fcedfaa [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x5c878623 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x2ac71ac2 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x2072b4ee [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x2434ad47 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x388b978f [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x5552a789 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x50ae3eaa [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x37445be [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x1c799108 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x2a3e52a8 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x3567499c [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x1b464004 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x3f19b3c2 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x48c26433 [0184.587] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x2f2304a0 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x437c014f [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x3d715ece [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x78e648e4 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0xd51f817 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x44c28d99 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x7db07eec [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x62253fe6 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x5d15eb37 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x7c9c0e37 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x744bd0c0 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x1f67f6e4 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x7bf9ad54 [0184.588] RtlRandomEx (in: Seed=0x109dfc80 | out: Seed=0x109dfc80) returned 0x2f03d7e3 [0184.597] ReadFile (in: hFile=0x1810, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x160, lpNumberOfBytesRead=0x109dfc7c, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0x109dfc7c*=0x160, lpOverlapped=0x0) returned 1 [0184.597] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.597] WriteFile (in: hFile=0x1810, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x109dfc80, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x109dfc80*=0x160, lpOverlapped=0x0) returned 1 [0189.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d30 [0189.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42218 [0189.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42218) returned 1 [0189.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0189.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0189.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bdc0) returned 1 [0189.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4968) returned 1 [0189.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x8099750 [0189.419] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.419] WriteFile (in: hFile=0x1810, lpBuffer=0x81e8e90*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x109dfcf4, lpOverlapped=0x0 | out: lpBuffer=0x81e8e90*, lpNumberOfBytesWritten=0x109dfcf4*=0x11a, lpOverlapped=0x0) returned 1 [0190.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8e90) returned 1 [0190.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8098dd0) returned 1 [0190.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42218) returned 1 [0190.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8099750) returned 1 [0190.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0190.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b578) returned 1 [0190.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0190.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0190.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x84042f0 [0190.531] wcscpy (in: _Dest=0x84042f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" [0190.531] wcscat (in: _Dest=0x84042f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.f0dbec" [0190.531] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.f0dbec", NtPathName=0x109dfc78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e16f90 [0190.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16f90) returned 1 [0190.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fc4c8) returned 1 [0190.897] NtQueryInformationFile (in: FileHandle=0x1810, IoStatusBlock=0x109dfc50, FileInformation=0x109dfc58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x109dfc50, FileInformation=0x109dfc58) returned 0x0 [0190.897] NtSetInformationFile (FileHandle=0x1810, IoStatusBlock=0x109dfc50, FileInformation=0x109dfc58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84042f0) returned 1 [0193.205] FlushFileBuffers (hFile=0x1810) returned 1 [0195.480] CloseHandle (hObject=0x1810) returned 1 [0196.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81efc10 [0196.412] wcscpy (in: _Dest=0x81efc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0196.412] wcscat (in: _Dest=0x81efc10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\F0DBEC-Readme.txt" [0196.412] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\f0dbec-readme.txt")) returned 0xffffffff [0196.412] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13dc [0196.757] WriteFile (in: hFile=0x13dc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x109dfc9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x109dfc9c*=0x70c, lpOverlapped=0x0) returned 1 [0197.411] CloseHandle (hObject=0x13dc) returned 1 [0197.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efc10) returned 1 [0197.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 Thread: id = 4024 os_tid = 0x1608 [0169.695] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json")) returned 0x2020 [0175.432] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0184.611] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ef4 [0184.611] GetFileSizeEx (in: hFile=0x1ef4, lpFileSize=0xe3afba8 | out: lpFileSize=0xe3afba8*=11094) returned 1 [0184.611] SetFilePointerEx (in: hFile=0x1ef4, liDistanceToMove=0x2b52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.611] ReadFile (in: hFile=0x1ef4, lpBuffer=0xe3afbb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe3afb90, lpOverlapped=0x0 | out: lpBuffer=0xe3afbb4*, lpNumberOfBytesRead=0xe3afb90*=0x4, lpOverlapped=0x0) returned 1 [0184.627] SetFilePointerEx (in: hFile=0x1ef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0184.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0184.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0184.627] NtQuerySystemTime (in: CurrentTime=0xe3afb30 | out: CurrentTime=0xe3afb30*=132471540525540000) returned 0x0 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x4ad5e455 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x2a520af8 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x429645c6 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x76c74481 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x7e789140 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x4630533c [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x2ff43822 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x7c55dd27 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x3177cae [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x521596c2 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x40209016 [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x4944664b [0184.627] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x25fd2ea1 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x1961818a [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x709d69a [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x31170f7d [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x6b80eb8d [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0xab77600 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x63c7fa31 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x6f9333f8 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x2fcb9b3e [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x72bb0407 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x4ab0a3b7 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x6ed9b735 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x51a25171 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x4d494d59 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x358202d3 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x2b3b5850 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x68f1aca2 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x4c3f9d57 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x2a716942 [0184.628] RtlRandomEx (in: Seed=0xe3afb28 | out: Seed=0xe3afb28) returned 0x11434fa3 [0184.636] ReadFile (in: hFile=0x1ef4, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x2b56, lpNumberOfBytesRead=0xe3afb24, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xe3afb24*=0x2b56, lpOverlapped=0x0) returned 1 [0184.639] SetFilePointerEx (in: hFile=0x1ef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.639] WriteFile (in: hFile=0x1ef4, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0xe3afb28, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0xe3afb28*=0x2b56, lpOverlapped=0x0) returned 1 [0189.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42920 [0189.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42498 [0189.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0189.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0189.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0189.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0189.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce08) returned 1 [0189.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5ce08 [0189.425] SetFilePointerEx (in: hFile=0x1ef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.425] WriteFile (in: hFile=0x1ef4, lpBuffer=0x81e8fb8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xe3afb9c, lpOverlapped=0x0 | out: lpBuffer=0x81e8fb8*, lpNumberOfBytesWritten=0xe3afb9c*=0x11e, lpOverlapped=0x0) returned 1 [0190.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8fb8) returned 1 [0190.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d7e0) returned 1 [0190.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0190.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce08) returned 1 [0190.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42920) returned 1 [0190.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0190.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0190.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0190.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ef9a70 [0190.534] wcscpy (in: _Dest=0x3ef9a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" [0190.534] wcscat (in: _Dest=0x3ef9a70, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.f0dbec" [0190.534] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.f0dbec", NtPathName=0xe3afb20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e177a0 [0190.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e177a0) returned 1 [0190.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fc6f0) returned 1 [0190.890] NtQueryInformationFile (in: FileHandle=0x1ef4, IoStatusBlock=0xe3afaf8, FileInformation=0xe3afb00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe3afaf8, FileInformation=0xe3afb00) returned 0x0 [0190.890] NtSetInformationFile (FileHandle=0x1ef4, IoStatusBlock=0xe3afaf8, FileInformation=0xe3afb00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9a70) returned 1 [0193.202] FlushFileBuffers (hFile=0x1ef4) returned 1 [0195.481] CloseHandle (hObject=0x1ef4) returned 1 [0196.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81efd38 [0196.417] wcscpy (in: _Dest=0x81efd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0196.417] wcscat (in: _Dest=0x81efd38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\F0DBEC-Readme.txt" [0196.417] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\f0dbec-readme.txt")) returned 0x2020 [0198.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efd38) returned 1 [0198.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8380) returned 1 Thread: id = 4025 os_tid = 0x160c [0169.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu")) returned 0x20 [0173.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU", dwFileAttributes=0x20) returned 0 [0173.224] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.224] GetLastError () returned 0x5 [0173.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU", dwFileAttributes=0x20) returned 0 [0173.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 Thread: id = 4026 os_tid = 0x1610 [0169.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak")) returned 0x20 [0173.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", dwFileAttributes=0x20) returned 0 [0173.604] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.604] GetLastError () returned 0x5 [0173.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", dwFileAttributes=0x20) returned 0 [0173.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 Thread: id = 4027 os_tid = 0x1614 [0169.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak")) returned 0x20 [0174.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", dwFileAttributes=0x20) returned 0 [0174.371] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.371] GetLastError () returned 0x5 [0174.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", dwFileAttributes=0x20) returned 0 [0174.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 4028 os_tid = 0x154 [0169.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak")) returned 0x20 [0174.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", dwFileAttributes=0x20) returned 0 [0174.369] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.370] GetLastError () returned 0x5 [0174.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", dwFileAttributes=0x20) returned 0 [0174.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 Thread: id = 4029 os_tid = 0x1618 [0169.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak")) returned 0x20 [0174.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", dwFileAttributes=0x20) returned 0 [0174.363] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.363] GetLastError () returned 0x5 [0174.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", dwFileAttributes=0x20) returned 0 [0174.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d7a8) returned 1 Thread: id = 4030 os_tid = 0x161c [0169.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak")) returned 0x20 [0174.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", dwFileAttributes=0x20) returned 0 [0174.361] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.362] GetLastError () returned 0x5 [0174.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", dwFileAttributes=0x20) returned 0 [0174.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d4b0) returned 1 Thread: id = 4031 os_tid = 0x1620 [0169.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak")) returned 0x20 [0174.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", dwFileAttributes=0x20) returned 0 [0174.360] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.360] GetLastError () returned 0x5 [0174.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", dwFileAttributes=0x20) returned 0 [0174.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cb30) returned 1 Thread: id = 4032 os_tid = 0x1624 [0169.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak")) returned 0x20 [0174.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", dwFileAttributes=0x20) returned 0 [0174.358] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.358] GetLastError () returned 0x5 [0174.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", dwFileAttributes=0x20) returned 0 [0174.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c7a0) returned 1 Thread: id = 4033 os_tid = 0x1438 [0169.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak")) returned 0x20 [0174.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", dwFileAttributes=0x20) returned 0 [0174.356] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.357] GetLastError () returned 0x5 [0174.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", dwFileAttributes=0x20) returned 0 [0174.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c118) returned 1 Thread: id = 4034 os_tid = 0x1628 [0169.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak")) returned 0x20 [0174.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", dwFileAttributes=0x20) returned 0 [0174.355] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.355] GetLastError () returned 0x5 [0174.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", dwFileAttributes=0x20) returned 0 [0174.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a598) returned 1 Thread: id = 4035 os_tid = 0xbbc [0169.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak")) returned 0x20 [0174.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", dwFileAttributes=0x20) returned 0 [0174.353] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.353] GetLastError () returned 0x5 [0174.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", dwFileAttributes=0x20) returned 0 [0174.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ab38) returned 1 Thread: id = 4036 os_tid = 0x1630 [0169.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak")) returned 0x20 [0174.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", dwFileAttributes=0x20) returned 0 [0174.351] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.352] GetLastError () returned 0x5 [0174.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", dwFileAttributes=0x20) returned 0 [0174.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd98) returned 1 Thread: id = 4037 os_tid = 0x143c [0169.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak")) returned 0x20 [0174.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", dwFileAttributes=0x20) returned 0 [0174.350] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.350] GetLastError () returned 0x5 [0174.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", dwFileAttributes=0x20) returned 0 [0174.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ccf8) returned 1 Thread: id = 4038 os_tid = 0xb80 [0169.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak")) returned 0x20 [0174.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", dwFileAttributes=0x20) returned 0 [0174.348] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.348] GetLastError () returned 0x5 [0174.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", dwFileAttributes=0x20) returned 0 [0174.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cec0) returned 1 Thread: id = 4039 os_tid = 0xb70 [0169.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak")) returned 0x20 [0174.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", dwFileAttributes=0x20) returned 0 [0174.330] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.330] GetLastError () returned 0x5 [0174.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", dwFileAttributes=0x20) returned 0 [0174.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c8d0) returned 1 Thread: id = 4040 os_tid = 0x1440 [0169.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak")) returned 0x20 [0174.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", dwFileAttributes=0x20) returned 0 [0174.329] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.329] GetLastError () returned 0x5 [0174.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", dwFileAttributes=0x20) returned 0 [0174.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cc60) returned 1 Thread: id = 4041 os_tid = 0xb7c [0169.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak")) returned 0x20 [0174.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", dwFileAttributes=0x20) returned 0 [0174.327] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.327] GetLastError () returned 0x5 [0174.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", dwFileAttributes=0x20) returned 0 [0174.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c968) returned 1 Thread: id = 4042 os_tid = 0xb64 [0169.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak")) returned 0x20 [0174.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", dwFileAttributes=0x20) returned 0 [0174.326] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.326] GetLastError () returned 0x5 [0174.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", dwFileAttributes=0x20) returned 0 [0174.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c5d8) returned 1 Thread: id = 4043 os_tid = 0x1444 [0169.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak")) returned 0x20 [0174.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", dwFileAttributes=0x20) returned 0 [0174.325] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.325] GetLastError () returned 0x5 [0174.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", dwFileAttributes=0x20) returned 0 [0174.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c248) returned 1 Thread: id = 4044 os_tid = 0xde0 [0169.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak")) returned 0x20 [0174.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", dwFileAttributes=0x20) returned 0 [0174.323] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.323] GetLastError () returned 0x5 [0174.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", dwFileAttributes=0x20) returned 0 [0174.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d678) returned 1 Thread: id = 4045 os_tid = 0x133c [0169.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak")) returned 0x20 [0174.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", dwFileAttributes=0x20) returned 0 [0174.322] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.322] GetLastError () returned 0x5 [0174.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", dwFileAttributes=0x20) returned 0 [0174.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d380) returned 1 Thread: id = 4046 os_tid = 0xe48 [0169.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak")) returned 0x20 [0174.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", dwFileAttributes=0x20) returned 0 [0174.321] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.321] GetLastError () returned 0x5 [0174.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", dwFileAttributes=0x20) returned 0 [0174.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d1b8) returned 1 Thread: id = 4047 os_tid = 0x1344 [0169.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak")) returned 0x20 [0174.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", dwFileAttributes=0x20) returned 0 [0174.320] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.320] GetLastError () returned 0x5 [0174.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", dwFileAttributes=0x20) returned 0 [0174.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d250) returned 1 Thread: id = 4048 os_tid = 0x1448 [0169.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak")) returned 0x20 [0173.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", dwFileAttributes=0x20) returned 0 [0173.606] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.606] GetLastError () returned 0x5 [0173.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", dwFileAttributes=0x20) returned 0 [0173.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1b0) returned 1 Thread: id = 4049 os_tid = 0x144c [0169.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak")) returned 0x20 [0174.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", dwFileAttributes=0x20) returned 0 [0174.368] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.368] GetLastError () returned 0x5 [0174.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", dwFileAttributes=0x20) returned 0 [0174.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a9f8) returned 1 Thread: id = 4050 os_tid = 0x145c [0169.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak")) returned 0x20 [0174.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", dwFileAttributes=0x20) returned 0 [0174.366] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.366] GetLastError () returned 0x5 [0174.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", dwFileAttributes=0x20) returned 0 [0174.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a638) returned 1 Thread: id = 4051 os_tid = 0x1460 [0169.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig")) returned 0x20 [0172.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig", dwFileAttributes=0x20) returned 0 [0173.234] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.234] GetLastError () returned 0x5 [0173.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig", dwFileAttributes=0x20) returned 0 [0173.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021b90) returned 1 Thread: id = 4052 os_tid = 0x1464 [0169.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig")) returned 0x20 [0173.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig", dwFileAttributes=0x20) returned 0 [0173.226] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.226] GetLastError () returned 0x5 [0173.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig", dwFileAttributes=0x20) returned 0 [0173.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24f40) returned 1 Thread: id = 4053 os_tid = 0x1468 [0169.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt")) returned 0x20 [0171.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", dwFileAttributes=0x20) returned 0 [0171.818] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.818] GetLastError () returned 0x5 [0171.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", dwFileAttributes=0x20) returned 0 [0171.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f24a0) returned 1 Thread: id = 4054 os_tid = 0x146c [0169.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt")) returned 0x20 [0171.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", dwFileAttributes=0x20) returned 0 [0171.786] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.787] GetLastError () returned 0x5 [0171.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", dwFileAttributes=0x20) returned 0 [0171.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed070) returned 1 Thread: id = 4055 os_tid = 0x1470 [0169.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt")) returned 0x20 [0171.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", dwFileAttributes=0x20) returned 0 [0171.429] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.430] GetLastError () returned 0x5 [0171.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", dwFileAttributes=0x20) returned 0 [0171.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed148) returned 1 Thread: id = 4056 os_tid = 0xac4 [0169.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt")) returned 0x20 [0171.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", dwFileAttributes=0x20) returned 0 [0171.816] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.816] GetLastError () returned 0x5 [0171.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", dwFileAttributes=0x20) returned 0 [0171.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed220) returned 1 Thread: id = 4057 os_tid = 0x520 [0169.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt")) returned 0x20 [0171.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", dwFileAttributes=0x20) returned 0 [0171.815] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.815] GetLastError () returned 0x5 [0171.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", dwFileAttributes=0x20) returned 0 [0171.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed2f8) returned 1 Thread: id = 4058 os_tid = 0x1474 [0169.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt")) returned 0x20 [0171.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", dwFileAttributes=0x20) returned 0 [0171.814] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.814] GetLastError () returned 0x5 [0171.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", dwFileAttributes=0x20) returned 0 [0171.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed3d0) returned 1 Thread: id = 4059 os_tid = 0xb0 [0169.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt")) returned 0x20 [0171.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", dwFileAttributes=0x20) returned 0 [0171.812] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.813] GetLastError () returned 0x5 [0171.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", dwFileAttributes=0x20) returned 0 [0171.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed4a8) returned 1 Thread: id = 4060 os_tid = 0x1478 [0169.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt")) returned 0x20 [0171.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", dwFileAttributes=0x20) returned 0 [0171.811] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.811] GetLastError () returned 0x5 [0171.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", dwFileAttributes=0x20) returned 0 [0171.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec8d8) returned 1 Thread: id = 4061 os_tid = 0x2c0 [0169.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt")) returned 0x20 [0171.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", dwFileAttributes=0x20) returned 0 [0171.803] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.803] GetLastError () returned 0x5 [0171.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", dwFileAttributes=0x20) returned 0 [0171.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec800) returned 1 Thread: id = 4062 os_tid = 0x414 [0169.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt")) returned 0x20 [0171.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", dwFileAttributes=0x20) returned 0 [0171.801] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.801] GetLastError () returned 0x5 [0171.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", dwFileAttributes=0x20) returned 0 [0171.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec728) returned 1 Thread: id = 4063 os_tid = 0xb08 [0169.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt")) returned 0x20 [0171.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", dwFileAttributes=0x20) returned 0 [0171.800] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.800] GetLastError () returned 0x5 [0171.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", dwFileAttributes=0x20) returned 0 [0171.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb720) returned 1 Thread: id = 4064 os_tid = 0x7bc [0169.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt")) returned 0x20 [0171.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0171.798] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.798] GetLastError () returned 0x5 [0171.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0171.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81edf58) returned 1 Thread: id = 4065 os_tid = 0xfc8 [0169.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt")) returned 0x20 [0171.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", dwFileAttributes=0x20) returned 0 [0171.797] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.797] GetLastError () returned 0x5 [0171.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", dwFileAttributes=0x20) returned 0 [0171.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0418) returned 1 Thread: id = 4066 os_tid = 0x16a0 [0169.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt")) returned 0x20 [0171.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", dwFileAttributes=0x20) returned 0 [0171.795] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.795] GetLastError () returned 0x5 [0171.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", dwFileAttributes=0x20) returned 0 [0171.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb7f8) returned 1 Thread: id = 4067 os_tid = 0x16a4 [0169.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt")) returned 0x20 [0171.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", dwFileAttributes=0x20) returned 0 [0171.810] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.810] GetLastError () returned 0x5 [0171.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", dwFileAttributes=0x20) returned 0 [0171.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f04e8) returned 1 Thread: id = 4068 os_tid = 0x16a8 [0169.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt")) returned 0x20 [0171.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", dwFileAttributes=0x20) returned 0 [0171.808] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.809] GetLastError () returned 0x5 [0171.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", dwFileAttributes=0x20) returned 0 [0171.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb648) returned 1 Thread: id = 4069 os_tid = 0x16ac [0169.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt")) returned 0x20 [0171.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0171.794] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.794] GetLastError () returned 0x5 [0171.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0171.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ee040) returned 1 Thread: id = 4070 os_tid = 0x16b0 [0169.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt")) returned 0x20 [0171.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", dwFileAttributes=0x20) returned 0 [0171.807] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.807] GetLastError () returned 0x5 [0171.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", dwFileAttributes=0x20) returned 0 [0171.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1648) returned 1 Thread: id = 4071 os_tid = 0x1010 [0169.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt")) returned 0x20 [0171.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", dwFileAttributes=0x20) returned 0 [0171.805] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.805] GetLastError () returned 0x5 [0171.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", dwFileAttributes=0x20) returned 0 [0171.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2578) returned 1 Thread: id = 4072 os_tid = 0x16b4 [0169.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt")) returned 0x20 [0171.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0171.804] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.804] GetLastError () returned 0x5 [0171.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0171.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ee128) returned 1 Thread: id = 4073 os_tid = 0x1018 [0169.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt")) returned 0x20 [0171.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", dwFileAttributes=0x20) returned 0 [0171.793] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.793] GetLastError () returned 0x5 [0171.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", dwFileAttributes=0x20) returned 0 [0171.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f05b8) returned 1 Thread: id = 4074 os_tid = 0x16b8 [0169.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt")) returned 0x20 [0171.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", dwFileAttributes=0x20) returned 0 [0171.792] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.792] GetLastError () returned 0x5 [0171.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", dwFileAttributes=0x20) returned 0 [0171.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2650) returned 1 Thread: id = 4075 os_tid = 0x16bc [0169.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt")) returned 0x20 [0171.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", dwFileAttributes=0x20) returned 0 [0171.790] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.791] GetLastError () returned 0x5 [0171.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", dwFileAttributes=0x20) returned 0 [0171.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0688) returned 1 Thread: id = 4076 os_tid = 0x16c0 [0169.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt")) returned 0x20 [0171.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", dwFileAttributes=0x20) returned 0 [0171.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.789] GetLastError () returned 0x5 [0171.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", dwFileAttributes=0x20) returned 0 [0171.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2728) returned 1 Thread: id = 4077 os_tid = 0x1030 [0169.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt")) returned 0x20 [0171.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", dwFileAttributes=0x20) returned 0 [0171.788] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.788] GetLastError () returned 0x5 [0171.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", dwFileAttributes=0x20) returned 0 [0171.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0758) returned 1 Thread: id = 4078 os_tid = 0x1034 [0169.914] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json")) returned 0x2020 [0173.648] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0176.278] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c70 [0176.278] GetFileSizeEx (in: hFile=0x1c70, lpFileSize=0x1248f808 | out: lpFileSize=0x1248f808*=11221) returned 1 [0176.278] SetFilePointerEx (in: hFile=0x1c70, liDistanceToMove=0x2bd1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.278] ReadFile (in: hFile=0x1c70, lpBuffer=0x1248f814, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1248f7f0, lpOverlapped=0x0 | out: lpBuffer=0x1248f814*, lpNumberOfBytesRead=0x1248f7f0*=0x4, lpOverlapped=0x0) returned 1 [0176.282] SetFilePointerEx (in: hFile=0x1c70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0176.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49c18 [0176.282] NtQuerySystemTime (in: CurrentTime=0x1248f790 | out: CurrentTime=0x1248f790*=132471540443796000) returned 0x0 [0176.282] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0xac7cdd1 [0176.282] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x19a77e2b [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x4b9e2755 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x5c67f48d [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x7f309f1f [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x72a78c3 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x631bba7 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x9aa5334 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x4697b5ce [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x28fd4519 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x5ed31f3b [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x44fbcf4a [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x120a558 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x59a3ae58 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x13b4f4d2 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x3892be19 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x4f2192bf [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x7056c665 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x47fb2dda [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x658de663 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x4eb25e52 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x56f18367 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x799fa1e5 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x3e1405d9 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x775726a0 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x3e45378b [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x2370309e [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x5857cea9 [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x1e9bd20c [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x7a94196b [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x3a6d23c [0176.283] RtlRandomEx (in: Seed=0x1248f788 | out: Seed=0x1248f788) returned 0x2bf43b04 [0176.292] ReadFile (in: hFile=0x1c70, lpBuffer=0x8164498, nNumberOfBytesToRead=0x2bd5, lpNumberOfBytesRead=0x1248f784, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0x1248f784*=0x2bd5, lpOverlapped=0x0) returned 1 [0176.293] SetFilePointerEx (in: hFile=0x1c70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.293] WriteFile (in: hFile=0x1c70, lpBuffer=0x817e8d0*, nNumberOfBytesToWrite=0x2bd5, lpNumberOfBytesWritten=0x1248f788, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesWritten=0x1248f788*=0x2bd5, lpOverlapped=0x0) returned 1 [0181.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ce0 [0181.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42088 [0181.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42088) returned 1 [0181.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0181.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0181.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df89e8) returned 1 [0181.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e69b0) returned 1 [0181.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x81e69b0 [0181.749] SetFilePointerEx (in: hFile=0x1c70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.749] WriteFile (in: hFile=0x1c70, lpBuffer=0x8400ef8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x1248f7fc, lpOverlapped=0x0 | out: lpBuffer=0x8400ef8*, lpNumberOfBytesWritten=0x1248f7fc*=0x11e, lpOverlapped=0x0) returned 1 [0182.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400ef8) returned 1 [0182.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d46e0) returned 1 [0182.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42088) returned 1 [0182.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e69b0) returned 1 [0182.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ce0) returned 1 [0182.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0182.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b040) returned 1 [0182.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b018) returned 1 [0182.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x3ef8c58 [0182.427] wcscpy (in: _Dest=0x3ef8c58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" [0182.427] wcscat (in: _Dest=0x3ef8c58, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.f0dbec" [0182.427] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.f0dbec", NtPathName=0x1248f780, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e16628 [0182.671] FlushFileBuffers (hFile=0x1c70) returned 1 [0182.677] CloseHandle (hObject=0x1c70) returned 1 [0182.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x84014c0 [0182.812] wcscpy (in: _Dest=0x84014c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" [0182.812] wcscat (in: _Dest=0x84014c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\F0DBEC-Readme.txt" [0182.812] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\f0dbec-readme.txt")) returned 0xffffffff [0182.812] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c04 [0182.931] WriteFile (in: hFile=0x1c04, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1248f7a4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1248f7a4*=0x70c, lpOverlapped=0x0) returned 1 [0183.085] CloseHandle (hObject=0x1c04) returned 1 [0183.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84014c0) returned 1 [0183.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 Thread: id = 4079 os_tid = 0x1038 [0169.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f6f08 [0169.915] wcscpy (in: _Dest=0x81f6f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0169.915] wcscat (in: _Dest=0x81f6f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" [0169.915] wcscat (in: _Dest=0x81f6f08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*" [0169.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08b80 [0169.915] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c77080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c79790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80992d0 [0171.968] wcscmp (_String1=".", _String2=".") returned 0 [0171.968] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c77080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c79790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.968] wcscmp (_String1="..", _String2=".") returned 1 [0171.968] wcscmp (_String1="..", _String2="..") returned 0 [0171.968] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c79790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.969] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.969] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d57840 [0171.969] wcscpy (in: _Dest=0x3d57840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0171.969] wcscat (in: _Dest=0x3d57840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" [0171.969] wcscat (in: _Dest=0x3d57840, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" [0179.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0179.347] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c79790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.347] FindClose (in: hFindFile=0x80992d0 | out: hFindFile=0x80992d0) returned 1 [0179.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08b80) returned 1 [0179.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6f08) returned 1 [0179.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3d80) returned 1 Thread: id = 4080 os_tid = 0x103c [0169.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f7010 [0169.925] wcscpy (in: _Dest=0x81f7010, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0169.925] wcscat (in: _Dest=0x81f7010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" [0169.925] wcscat (in: _Dest=0x81f7010, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*" [0169.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f075d8 [0169.925] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c80cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c833d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0171.972] wcscmp (_String1=".", _String2=".") returned 0 [0171.972] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c80cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c833d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.972] wcscmp (_String1="..", _String2=".") returned 1 [0171.972] wcscmp (_String1="..", _String2="..") returned 0 [0171.972] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c833d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.972] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.972] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d57968 [0171.972] wcscpy (in: _Dest=0x3d57968, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0171.972] wcscat (in: _Dest=0x3d57968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" [0171.972] wcscat (in: _Dest=0x3d57968, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" [0179.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb8 [0179.349] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c833d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.349] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0179.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f075d8) returned 1 [0179.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7010) returned 1 [0179.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5288) returned 1 Thread: id = 4081 os_tid = 0x1040 [0169.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f7118 [0169.932] wcscpy (in: _Dest=0x81f7118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0169.932] wcscat (in: _Dest=0x81f7118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" [0169.932] wcscat (in: _Dest=0x81f7118, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*" [0169.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f081e0 [0169.932] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c8a900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c8d010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098dd0 [0171.975] wcscmp (_String1=".", _String2=".") returned 0 [0171.975] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c8a900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c8d010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.975] wcscmp (_String1="..", _String2=".") returned 1 [0171.975] wcscmp (_String1="..", _String2="..") returned 0 [0171.975] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c8d010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.975] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.975] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d57a90 [0171.975] wcscpy (in: _Dest=0x3d57a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0171.975] wcscat (in: _Dest=0x3d57a90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" [0171.975] wcscat (in: _Dest=0x3d57a90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" [0179.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cbc [0179.352] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c8d010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.352] FindClose (in: hFindFile=0x8098dd0 | out: hFindFile=0x8098dd0) returned 1 [0179.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f081e0) returned 1 [0179.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7118) returned 1 [0179.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4e68) returned 1 Thread: id = 4082 os_tid = 0x1044 [0169.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f7220 [0169.938] wcscpy (in: _Dest=0x81f7220, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0169.939] wcscat (in: _Dest=0x81f7220, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" [0169.939] wcscat (in: _Dest=0x81f7220, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*" [0169.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0ad30 [0169.939] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c94540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c96c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0171.977] wcscmp (_String1=".", _String2=".") returned 0 [0171.977] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c94540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c96c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.977] wcscmp (_String1="..", _String2=".") returned 1 [0171.977] wcscmp (_String1="..", _String2="..") returned 0 [0171.977] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c96c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.977] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.977] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d57bb8 [0171.977] wcscpy (in: _Dest=0x3d57bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0171.978] wcscat (in: _Dest=0x3d57bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" [0171.978] wcscat (in: _Dest=0x3d57bb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" [0179.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc4 [0179.355] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c96c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.355] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0179.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0ad30) returned 1 [0179.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7220) returned 1 [0179.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5430) returned 1 Thread: id = 4083 os_tid = 0x1048 [0169.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f7328 [0169.940] wcscpy (in: _Dest=0x81f7328, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0169.940] wcscat (in: _Dest=0x81f7328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" [0169.940] wcscat (in: _Dest=0x81f7328, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*" [0169.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08918 [0169.940] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c9e180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ca2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80996d0 [0171.980] wcscmp (_String1=".", _String2=".") returned 0 [0171.980] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c9e180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ca2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.980] wcscmp (_String1="..", _String2=".") returned 1 [0171.980] wcscmp (_String1="..", _String2="..") returned 0 [0171.980] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ca2fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.980] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.980] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d57ce0 [0171.980] wcscpy (in: _Dest=0x3d57ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0171.980] wcscat (in: _Dest=0x3d57ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" [0171.980] wcscat (in: _Dest=0x3d57ce0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" [0179.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc8 [0179.357] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ca2fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.358] FindClose (in: hFindFile=0x80996d0 | out: hFindFile=0x80996d0) returned 1 [0179.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08918) returned 1 [0179.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7328) returned 1 [0179.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5648) returned 1 Thread: id = 4084 os_tid = 0x104c [0169.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f7430 [0169.941] wcscpy (in: _Dest=0x81f7430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0169.941] wcscat (in: _Dest=0x81f7430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" [0169.941] wcscat (in: _Dest=0x81f7430, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*" [0169.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07f78 [0169.941] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ca7dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cacbe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0171.982] wcscmp (_String1=".", _String2=".") returned 0 [0171.982] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ca7dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cacbe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.983] wcscmp (_String1="..", _String2=".") returned 1 [0171.983] wcscmp (_String1="..", _String2="..") returned 0 [0171.983] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cacbe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.983] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.983] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d57e08 [0171.983] wcscpy (in: _Dest=0x3d57e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0171.983] wcscat (in: _Dest=0x3d57e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" [0171.983] wcscat (in: _Dest=0x3d57e08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" [0179.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0179.360] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cacbe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.360] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0179.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07f78) returned 1 [0179.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7430) returned 1 [0179.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5750) returned 1 Thread: id = 4085 os_tid = 0x1050 [0169.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8320930 [0169.942] wcscpy (in: _Dest=0x8320930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0169.942] wcscat (in: _Dest=0x8320930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" [0169.942] wcscat (in: _Dest=0x8320930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*" [0169.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f099f0 [0169.942] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cb4110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cb6820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099010 [0171.985] wcscmp (_String1=".", _String2=".") returned 0 [0171.985] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cb4110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cb6820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.985] wcscmp (_String1="..", _String2=".") returned 1 [0171.985] wcscmp (_String1="..", _String2="..") returned 0 [0171.985] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cb6820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.985] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.985] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d57f30 [0171.985] wcscpy (in: _Dest=0x3d57f30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0171.985] wcscat (in: _Dest=0x3d57f30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" [0171.985] wcscat (in: _Dest=0x3d57f30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" [0179.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0179.363] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cb6820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.363] FindClose (in: hFindFile=0x8099010 | out: hFindFile=0x8099010) returned 1 [0179.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f099f0) returned 1 [0179.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320930) returned 1 [0179.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5858) returned 1 Thread: id = 4086 os_tid = 0x1054 [0169.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bb930 [0169.943] wcscpy (in: _Dest=0x30bb930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0169.943] wcscat (in: _Dest=0x30bb930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" [0169.943] wcscat (in: _Dest=0x30bb930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*" [0169.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08448 [0169.943] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cbdd50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cd8b00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0171.987] wcscmp (_String1=".", _String2=".") returned 0 [0171.987] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cbdd50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cd8b00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.987] wcscmp (_String1="..", _String2=".") returned 1 [0171.987] wcscmp (_String1="..", _String2="..") returned 0 [0171.987] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cd8b00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.987] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.987] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d58058 [0171.988] wcscpy (in: _Dest=0x3d58058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0171.988] wcscat (in: _Dest=0x3d58058, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" [0171.988] wcscat (in: _Dest=0x3d58058, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" [0179.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d58058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f0 [0179.365] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cd8b00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.365] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0179.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08448) returned 1 [0179.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 [0179.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 Thread: id = 4087 os_tid = 0x1058 [0169.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bba48 [0169.944] wcscpy (in: _Dest=0x30bba48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0169.944] wcscat (in: _Dest=0x30bba48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" [0169.944] wcscat (in: _Dest=0x30bba48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*" [0169.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07d10 [0169.944] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce0030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ce2740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099250 [0172.037] wcscmp (_String1=".", _String2=".") returned 0 [0172.037] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce0030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ce2740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.037] wcscmp (_String1="..", _String2=".") returned 1 [0172.037] wcscmp (_String1="..", _String2="..") returned 0 [0172.037] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ce2740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.037] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.037] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81d0d98 [0172.038] wcscpy (in: _Dest=0x81d0d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0172.038] wcscat (in: _Dest=0x81d0d98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" [0172.038] wcscat (in: _Dest=0x81d0d98, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" [0173.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c68 [0173.458] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ce2740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.458] FindClose (in: hFindFile=0x8099250 | out: hFindFile=0x8099250) returned 1 [0173.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07d10) returned 1 [0173.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba48) returned 1 [0173.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 Thread: id = 4088 os_tid = 0x105c [0169.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8320a38 [0169.946] wcscpy (in: _Dest=0x8320a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0169.946] wcscat (in: _Dest=0x8320a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" [0169.946] wcscat (in: _Dest=0x8320a38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*" [0169.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09c58 [0169.946] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce9c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cec380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cec380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38318 [0171.822] wcscmp (_String1=".", _String2=".") returned 0 [0171.822] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce9c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cec380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cec380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.822] wcscmp (_String1="..", _String2=".") returned 1 [0171.822] wcscmp (_String1="..", _String2="..") returned 0 [0171.822] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cec380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ceea90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.822] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.822] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d573a0 [0171.822] wcscpy (in: _Dest=0x3d573a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0171.823] wcscat (in: _Dest=0x3d573a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" [0171.823] wcscat (in: _Dest=0x3d573a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" [0178.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d573a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0178.746] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cec380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ceea90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.746] FindClose (in: hFindFile=0x3f38318 | out: hFindFile=0x3f38318) returned 1 [0178.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09c58) returned 1 [0178.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320a38) returned 1 [0178.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5960) returned 1 Thread: id = 4089 os_tid = 0x16c4 [0169.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bbb60 [0169.947] wcscpy (in: _Dest=0x30bbb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0169.947] wcscat (in: _Dest=0x30bbb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" [0169.947] wcscat (in: _Dest=0x30bbb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*" [0169.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0af98 [0169.947] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cf38b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cf5fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099110 [0172.031] wcscmp (_String1=".", _String2=".") returned 0 [0172.031] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cf38b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cf5fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.031] wcscmp (_String1="..", _String2=".") returned 1 [0172.031] wcscmp (_String1="..", _String2="..") returned 0 [0172.031] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cf5fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.032] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.032] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d0b48 [0172.032] wcscpy (in: _Dest=0x81d0b48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0172.032] wcscat (in: _Dest=0x81d0b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" [0172.032] wcscat (in: _Dest=0x81d0b48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" [0173.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c4 [0173.454] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cf5fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.454] FindClose (in: hFindFile=0x8099110 | out: hFindFile=0x8099110) returned 1 [0173.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0af98) returned 1 [0173.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0173.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 Thread: id = 4090 os_tid = 0x16c8 [0169.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8320b40 [0169.948] wcscpy (in: _Dest=0x8320b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0169.949] wcscat (in: _Dest=0x8320b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" [0169.949] wcscat (in: _Dest=0x8320b40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*" [0169.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09ec0 [0169.949] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cfade0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cffc00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80990d0 [0172.034] wcscmp (_String1=".", _String2=".") returned 0 [0172.034] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cfade0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cffc00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.034] wcscmp (_String1="..", _String2=".") returned 1 [0172.034] wcscmp (_String1="..", _String2="..") returned 0 [0172.035] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cffc00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.035] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.035] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d0c70 [0172.035] wcscpy (in: _Dest=0x81d0c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0172.035] wcscat (in: _Dest=0x81d0c70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" [0172.035] wcscat (in: _Dest=0x81d0c70, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" [0173.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0173.456] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cffc00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.456] FindClose (in: hFindFile=0x80990d0 | out: hFindFile=0x80990d0) returned 1 [0173.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09ec0) returned 1 [0173.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320b40) returned 1 [0173.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5a68) returned 1 Thread: id = 4091 os_tid = 0x1070 [0169.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8320c48 [0169.956] wcscpy (in: _Dest=0x8320c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0169.956] wcscat (in: _Dest=0x8320c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" [0169.956] wcscat (in: _Dest=0x8320c48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*" [0169.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f092b8 [0169.956] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d07130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d09840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80997d0 [0172.025] wcscmp (_String1=".", _String2=".") returned 0 [0172.025] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d07130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d09840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.025] wcscmp (_String1="..", _String2=".") returned 1 [0172.025] wcscmp (_String1="..", _String2="..") returned 0 [0172.025] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d09840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.025] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.026] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d08f8 [0172.026] wcscpy (in: _Dest=0x81d08f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0172.026] wcscat (in: _Dest=0x81d08f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" [0172.026] wcscat (in: _Dest=0x81d08f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" [0173.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d08f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a3c [0173.449] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d09840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.449] FindClose (in: hFindFile=0x80997d0 | out: hFindFile=0x80997d0) returned 1 [0173.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f092b8) returned 1 [0173.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320c48) returned 1 [0173.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5b70) returned 1 Thread: id = 4092 os_tid = 0x1074 [0169.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8320d50 [0169.962] wcscpy (in: _Dest=0x8320d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0169.962] wcscat (in: _Dest=0x8320d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" [0169.962] wcscat (in: _Dest=0x8320d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*" [0169.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0169.962] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d10d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d13480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d90 [0172.028] wcscmp (_String1=".", _String2=".") returned 0 [0172.028] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d10d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d13480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.028] wcscmp (_String1="..", _String2=".") returned 1 [0172.028] wcscmp (_String1="..", _String2="..") returned 0 [0172.028] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d13480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.028] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.028] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d0a20 [0172.028] wcscpy (in: _Dest=0x81d0a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0172.028] wcscat (in: _Dest=0x81d0a20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" [0172.028] wcscat (in: _Dest=0x81d0a20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" [0173.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0173.451] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d13480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.452] FindClose (in: hFindFile=0x8098d90 | out: hFindFile=0x8098d90) returned 1 [0173.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0173.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320d50) returned 1 [0173.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5c78) returned 1 Thread: id = 4093 os_tid = 0x1078 [0169.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbc78 [0169.963] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0169.964] wcscat (in: _Dest=0x30bbc78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" [0169.964] wcscat (in: _Dest=0x30bbc78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*" [0169.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0169.964] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d1a9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1d0c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d1d0c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099290 [0172.009] wcscmp (_String1=".", _String2=".") returned 0 [0172.009] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d1a9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1d0c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d1d0c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.009] wcscmp (_String1="..", _String2=".") returned 1 [0172.009] wcscmp (_String1="..", _String2="..") returned 0 [0172.009] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d1d0c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1f7d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.009] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.010] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x330cd0 [0172.010] wcscpy (in: _Dest=0x330cd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0172.010] wcscat (in: _Dest=0x330cd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" [0172.010] wcscat (in: _Dest=0x330cd0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" [0176.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x330cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d4 [0176.069] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d1d0c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1f7d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.069] FindClose (in: hFindFile=0x8099290 | out: hFindFile=0x8099290) returned 1 [0176.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0176.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0176.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5d80) returned 1 Thread: id = 4094 os_tid = 0x107c [0169.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8320e58 [0169.969] wcscpy (in: _Dest=0x8320e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0169.969] wcscat (in: _Dest=0x8320e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" [0169.970] wcscat (in: _Dest=0x8320e58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*" [0169.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0169.970] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d245f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d26d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d26d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099450 [0172.012] wcscmp (_String1=".", _String2=".") returned 0 [0172.012] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d245f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d26d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d26d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.012] wcscmp (_String1="..", _String2=".") returned 1 [0172.012] wcscmp (_String1="..", _String2="..") returned 0 [0172.012] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d26d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d29410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.012] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.012] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x331860 [0172.012] wcscpy (in: _Dest=0x331860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0172.012] wcscat (in: _Dest=0x331860, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" [0172.012] wcscat (in: _Dest=0x331860, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" [0176.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x331860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2548 [0176.071] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d26d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d29410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.071] FindClose (in: hFindFile=0x8099450 | out: hFindFile=0x8099450) returned 1 [0176.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0176.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320e58) returned 1 [0176.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5e88) returned 1 Thread: id = 4095 os_tid = 0x1080 [0169.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8320f60 [0169.976] wcscpy (in: _Dest=0x8320f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0169.977] wcscat (in: _Dest=0x8320f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" [0169.977] wcscat (in: _Dest=0x8320f60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*" [0169.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101bb0 [0169.977] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d2e230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d33050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0172.014] wcscmp (_String1=".", _String2=".") returned 0 [0172.014] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d2e230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d33050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.014] wcscmp (_String1="..", _String2=".") returned 1 [0172.014] wcscmp (_String1="..", _String2="..") returned 0 [0172.014] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d33050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.014] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.014] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d0458 [0172.014] wcscpy (in: _Dest=0x81d0458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0172.014] wcscat (in: _Dest=0x81d0458, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" [0172.015] wcscat (in: _Dest=0x81d0458, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" [0175.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0175.565] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d33050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.565] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0175.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101bb0) returned 1 [0175.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320f60) returned 1 [0175.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5f90) returned 1 Thread: id = 4096 os_tid = 0x1088 [0169.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321068 [0169.985] wcscpy (in: _Dest=0x8321068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0169.985] wcscat (in: _Dest=0x8321068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" [0169.985] wcscat (in: _Dest=0x8321068, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*" [0169.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81003a0 [0169.985] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d37e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d3cc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099590 [0172.017] wcscmp (_String1=".", _String2=".") returned 0 [0172.017] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d37e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d3cc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.017] wcscmp (_String1="..", _String2=".") returned 1 [0172.017] wcscmp (_String1="..", _String2="..") returned 0 [0172.017] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d3a580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.017] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.017] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d0580 [0172.017] wcscpy (in: _Dest=0x81d0580, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0172.017] wcscat (in: _Dest=0x81d0580, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" [0172.017] wcscat (in: _Dest=0x81d0580, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" [0175.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0175.568] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d3a580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.568] FindClose (in: hFindFile=0x8099590 | out: hFindFile=0x8099590) returned 1 [0175.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81003a0) returned 1 [0175.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321068) returned 1 [0175.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6098) returned 1 Thread: id = 4097 os_tid = 0x108c [0169.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321170 [0169.986] wcscpy (in: _Dest=0x8321170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0169.986] wcscat (in: _Dest=0x8321170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" [0169.987] wcscat (in: _Dest=0x8321170, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*" [0169.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe6c0 [0169.987] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d441c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d468d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099610 [0172.019] wcscmp (_String1=".", _String2=".") returned 0 [0172.019] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d441c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d468d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.019] wcscmp (_String1="..", _String2=".") returned 1 [0172.019] wcscmp (_String1="..", _String2="..") returned 0 [0172.019] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d468d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.019] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.019] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d06a8 [0172.019] wcscpy (in: _Dest=0x81d06a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0172.019] wcscat (in: _Dest=0x81d06a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" [0172.019] wcscat (in: _Dest=0x81d06a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" [0175.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d06a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d0 [0175.570] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d468d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.570] FindClose (in: hFindFile=0x8099610 | out: hFindFile=0x8099610) returned 1 [0175.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe6c0) returned 1 [0175.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321170) returned 1 [0175.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f61a0) returned 1 Thread: id = 4098 os_tid = 0x1090 [0169.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321278 [0169.988] wcscpy (in: _Dest=0x8321278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0169.988] wcscat (in: _Dest=0x8321278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" [0169.988] wcscat (in: _Dest=0x8321278, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*" [0169.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8102080 [0169.988] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d4de00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d50510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80995d0 [0172.022] wcscmp (_String1=".", _String2=".") returned 0 [0172.022] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d4de00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d50510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.022] wcscmp (_String1="..", _String2=".") returned 1 [0172.022] wcscmp (_String1="..", _String2="..") returned 0 [0172.023] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d50510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.023] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.023] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d07d0 [0172.023] wcscpy (in: _Dest=0x81d07d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0172.023] wcscat (in: _Dest=0x81d07d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" [0172.023] wcscat (in: _Dest=0x81d07d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" [0175.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d07d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25cc [0175.573] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d50510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.573] FindClose (in: hFindFile=0x80995d0 | out: hFindFile=0x80995d0) returned 1 [0175.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8102080) returned 1 [0175.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321278) returned 1 [0175.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f62a8) returned 1 Thread: id = 4099 os_tid = 0x1094 [0169.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321380 [0169.989] wcscpy (in: _Dest=0x8321380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0169.989] wcscat (in: _Dest=0x8321380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" [0169.989] wcscat (in: _Dest=0x8321380, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*" [0169.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100ad8 [0169.989] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d57a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d5a150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0171.990] wcscmp (_String1=".", _String2=".") returned 0 [0171.990] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d57a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d5a150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.990] wcscmp (_String1="..", _String2=".") returned 1 [0171.990] wcscmp (_String1="..", _String2="..") returned 0 [0171.990] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d5a150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.990] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.990] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d58180 [0171.990] wcscpy (in: _Dest=0x3d58180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0171.990] wcscat (in: _Dest=0x3d58180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" [0171.990] wcscat (in: _Dest=0x3d58180, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" [0176.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d58180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2674 [0176.053] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d5a150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.053] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0176.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100ad8) returned 1 [0176.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321380) returned 1 [0176.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f63b0) returned 1 Thread: id = 4100 os_tid = 0x1098 [0169.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321488 [0169.990] wcscpy (in: _Dest=0x8321488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0169.990] wcscat (in: _Dest=0x8321488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" [0169.990] wcscat (in: _Dest=0x8321488, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*" [0169.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101210 [0169.990] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d61680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d664a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0171.992] wcscmp (_String1=".", _String2=".") returned 0 [0171.992] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d61680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d664a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.992] wcscmp (_String1="..", _String2=".") returned 1 [0171.992] wcscmp (_String1="..", _String2="..") returned 0 [0171.992] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d664a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.992] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.992] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d582a8 [0171.992] wcscpy (in: _Dest=0x3d582a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0171.993] wcscat (in: _Dest=0x3d582a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" [0171.993] wcscat (in: _Dest=0x3d582a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" [0176.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d582a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd0 [0176.055] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d664a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.055] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0176.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101210) returned 1 [0176.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321488) returned 1 [0176.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f64b8) returned 1 Thread: id = 4101 os_tid = 0x109c [0169.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321590 [0169.991] wcscpy (in: _Dest=0x8321590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0169.991] wcscat (in: _Dest=0x8321590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" [0169.991] wcscat (in: _Dest=0x8321590, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*" [0169.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101e18 [0169.991] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d6d9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d727f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0171.994] wcscmp (_String1=".", _String2=".") returned 0 [0171.994] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d6d9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d727f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.995] wcscmp (_String1="..", _String2=".") returned 1 [0171.995] wcscmp (_String1="..", _String2="..") returned 0 [0171.995] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d727f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.995] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.995] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3042500 [0171.995] wcscpy (in: _Dest=0x3042500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0171.995] wcscat (in: _Dest=0x3042500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" [0171.995] wcscat (in: _Dest=0x3042500, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" [0176.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3042500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd4 [0176.057] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d727f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.057] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0176.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101e18) returned 1 [0176.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321590) returned 1 [0176.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f65c0) returned 1 Thread: id = 4102 os_tid = 0x10a0 [0169.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321698 [0169.992] wcscpy (in: _Dest=0x8321698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0169.992] wcscat (in: _Dest=0x8321698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" [0169.992] wcscat (in: _Dest=0x8321698, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*" [0169.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100fa8 [0169.992] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d77610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d7c430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099090 [0171.997] wcscmp (_String1=".", _String2=".") returned 0 [0171.997] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d77610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d7c430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.997] wcscmp (_String1="..", _String2=".") returned 1 [0171.997] wcscmp (_String1="..", _String2="..") returned 0 [0171.997] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d7c430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.997] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.997] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3041720 [0171.997] wcscpy (in: _Dest=0x3041720, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0171.997] wcscat (in: _Dest=0x3041720, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" [0171.997] wcscat (in: _Dest=0x3041720, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" [0176.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3041720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd8 [0176.059] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d7c430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.059] FindClose (in: hFindFile=0x8099090 | out: hFindFile=0x8099090) returned 1 [0176.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100fa8) returned 1 [0176.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321698) returned 1 [0176.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f66c8) returned 1 Thread: id = 4103 os_tid = 0x10a4 [0169.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83217a0 [0169.993] wcscpy (in: _Dest=0x83217a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0169.993] wcscat (in: _Dest=0x83217a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" [0169.993] wcscat (in: _Dest=0x83217a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*" [0169.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0169.993] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d83960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d86070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099790 [0171.999] wcscmp (_String1=".", _String2=".") returned 0 [0171.999] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d83960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d86070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.999] wcscmp (_String1="..", _String2=".") returned 1 [0171.999] wcscmp (_String1="..", _String2="..") returned 0 [0171.999] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d86070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.999] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.999] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3041e10 [0171.999] wcscpy (in: _Dest=0x3041e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0171.999] wcscat (in: _Dest=0x3041e10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" [0171.999] wcscat (in: _Dest=0x3041e10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" [0176.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3041e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc0 [0176.060] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d86070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.061] FindClose (in: hFindFile=0x8099790 | out: hFindFile=0x8099790) returned 1 [0176.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0176.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83217a0) returned 1 [0176.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f67d0) returned 1 Thread: id = 4104 os_tid = 0x10a8 [0169.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83218a8 [0169.994] wcscpy (in: _Dest=0x83218a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0169.994] wcscat (in: _Dest=0x83218a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" [0169.994] wcscat (in: _Dest=0x83218a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*" [0169.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101478 [0169.994] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d8d5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d8fcb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d8fcb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098fd0 [0172.001] wcscmp (_String1=".", _String2=".") returned 0 [0172.001] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d8d5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d8fcb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d8fcb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.002] wcscmp (_String1="..", _String2=".") returned 1 [0172.002] wcscmp (_String1="..", _String2="..") returned 0 [0172.002] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d8fcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d923c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.002] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.002] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3041f38 [0172.002] wcscpy (in: _Dest=0x3041f38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0172.002] wcscat (in: _Dest=0x3041f38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" [0172.002] wcscat (in: _Dest=0x3041f38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" [0176.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3041f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c8 [0176.062] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d8fcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d923c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.063] FindClose (in: hFindFile=0x8098fd0 | out: hFindFile=0x8098fd0) returned 1 [0176.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101478) returned 1 [0176.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83218a8) returned 1 [0176.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f68d8) returned 1 Thread: id = 4105 os_tid = 0x10ac [0169.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x83219b0 [0169.995] wcscpy (in: _Dest=0x83219b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0169.995] wcscat (in: _Dest=0x83219b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" [0169.995] wcscat (in: _Dest=0x83219b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*" [0169.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100870 [0169.996] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d923c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d998f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098890 [0172.004] wcscmp (_String1=".", _String2=".") returned 0 [0172.004] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d923c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d998f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.004] wcscmp (_String1="..", _String2=".") returned 1 [0172.004] wcscmp (_String1="..", _String2="..") returned 0 [0172.004] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d998f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.004] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.004] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3040a68 [0172.005] wcscpy (in: _Dest=0x3040a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0172.005] wcscat (in: _Dest=0x3040a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" [0172.005] wcscat (in: _Dest=0x3040a68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" [0176.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3040a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0176.064] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d998f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.064] FindClose (in: hFindFile=0x8098890 | out: hFindFile=0x8098890) returned 1 [0176.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100870) returned 1 [0176.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83219b0) returned 1 [0176.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f69e0) returned 1 Thread: id = 4106 os_tid = 0x10b0 [0170.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321bc0 [0170.066] wcscpy (in: _Dest=0x8321bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0170.066] wcscat (in: _Dest=0x8321bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" [0170.066] wcscat (in: _Dest=0x8321bc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*" [0170.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0170.066] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d9e710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6da3530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c10 [0172.007] wcscmp (_String1=".", _String2=".") returned 0 [0172.007] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d9e710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6da3530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.007] wcscmp (_String1="..", _String2=".") returned 1 [0172.007] wcscmp (_String1="..", _String2="..") returned 0 [0172.007] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6da3530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.007] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.007] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x331610 [0172.007] wcscpy (in: _Dest=0x331610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0172.007] wcscat (in: _Dest=0x331610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" [0172.007] wcscat (in: _Dest=0x331610, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" [0176.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x331610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2990 [0176.066] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6da3530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0176.066] FindClose (in: hFindFile=0x8098c10 | out: hFindFile=0x8098c10) returned 1 [0176.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0176.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321bc0) returned 1 [0176.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6ae8) returned 1 Thread: id = 4107 os_tid = 0x10b4 [0170.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6b48 [0170.067] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0170.067] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0170.067] wcscat (in: _Dest=0x2fe6b48, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\*" [0170.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0170.067] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0172.690] wcscmp (_String1=".", _String2=".") returned 0 [0172.690] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.759] wcscmp (_String1="..", _String2=".") returned 1 [0173.759] wcscmp (_String1="..", _String2="..") returned 0 [0173.759] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Abidjan", cAlternateFileName="")) returned 1 [0173.759] wcscmp (_String1="Abidjan", _String2=".") returned 1 [0173.759] wcscmp (_String1="Abidjan", _String2="..") returned 1 [0173.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f394d8 [0173.759] wcscpy (in: _Dest=0x3f394d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0173.759] wcscat (in: _Dest=0x3f394d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0173.759] wcscat (in: _Dest=0x3f394d8, _Source="Abidjan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" [0175.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f394d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0175.685] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accra", cAlternateFileName="")) returned 1 [0175.686] wcscmp (_String1="Accra", _String2=".") returned 1 [0175.686] wcscmp (_String1="Accra", _String2="..") returned 1 [0175.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46060 [0175.686] wcscpy (in: _Dest=0x3d46060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.686] wcscat (in: _Dest=0x3d46060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.686] wcscat (in: _Dest=0x3d46060, _Source="Accra" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra" [0175.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0175.687] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Addis_Ababa", cAlternateFileName="ADDIS_~1")) returned 1 [0175.687] wcscmp (_String1="Addis_Ababa", _String2=".") returned 1 [0175.687] wcscmp (_String1="Addis_Ababa", _String2="..") returned 1 [0175.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3df9438 [0175.687] wcscpy (in: _Dest=0x3df9438, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.687] wcscat (in: _Dest=0x3df9438, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.687] wcscat (in: _Dest=0x3df9438, _Source="Addis_Ababa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" [0175.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df9438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0175.688] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Algiers", cAlternateFileName="")) returned 1 [0175.688] wcscmp (_String1="Algiers", _String2=".") returned 1 [0175.688] wcscmp (_String1="Algiers", _String2="..") returned 1 [0175.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a038 [0175.688] wcscpy (in: _Dest=0x3f3a038, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.688] wcscat (in: _Dest=0x3f3a038, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.688] wcscat (in: _Dest=0x3f3a038, _Source="Algiers" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers" [0175.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0175.689] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asmara", cAlternateFileName="")) returned 1 [0175.689] wcscmp (_String1="Asmara", _String2=".") returned 1 [0175.689] wcscmp (_String1="Asmara", _String2="..") returned 1 [0175.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d470a0 [0175.689] wcscpy (in: _Dest=0x3d470a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.689] wcscat (in: _Dest=0x3d470a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.689] wcscat (in: _Dest=0x3d470a0, _Source="Asmara" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara" [0175.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d470a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0175.690] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bamako", cAlternateFileName="")) returned 1 [0175.691] wcscmp (_String1="Bamako", _String2=".") returned 1 [0175.691] wcscmp (_String1="Bamako", _String2="..") returned 1 [0175.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d467b0 [0175.691] wcscpy (in: _Dest=0x3d467b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.691] wcscat (in: _Dest=0x3d467b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.691] wcscat (in: _Dest=0x3d467b0, _Source="Bamako" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako" [0175.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d467b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0175.692] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangui", cAlternateFileName="")) returned 1 [0175.692] wcscmp (_String1="Bangui", _String2=".") returned 1 [0175.692] wcscmp (_String1="Bangui", _String2="..") returned 1 [0175.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46818 [0175.692] wcscpy (in: _Dest=0x3d46818, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.692] wcscat (in: _Dest=0x3d46818, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.692] wcscat (in: _Dest=0x3d46818, _Source="Bangui" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui" [0175.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0175.693] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banjul", cAlternateFileName="")) returned 1 [0175.693] wcscmp (_String1="Banjul", _String2=".") returned 1 [0175.693] wcscmp (_String1="Banjul", _String2="..") returned 1 [0175.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46880 [0175.693] wcscpy (in: _Dest=0x3d46880, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.693] wcscat (in: _Dest=0x3d46880, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.693] wcscat (in: _Dest=0x3d46880, _Source="Banjul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul" [0175.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0175.694] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bissau", cAlternateFileName="")) returned 1 [0175.694] wcscmp (_String1="Bissau", _String2=".") returned 1 [0175.694] wcscmp (_String1="Bissau", _String2="..") returned 1 [0175.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d468e8 [0175.694] wcscpy (in: _Dest=0x3d468e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.694] wcscat (in: _Dest=0x3d468e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.694] wcscat (in: _Dest=0x3d468e8, _Source="Bissau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau" [0175.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d468e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0175.695] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blantyre", cAlternateFileName="")) returned 1 [0175.695] wcscmp (_String1="Blantyre", _String2=".") returned 1 [0175.695] wcscmp (_String1="Blantyre", _String2="..") returned 1 [0175.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39b68 [0175.695] wcscpy (in: _Dest=0x3f39b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.695] wcscat (in: _Dest=0x3f39b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.696] wcscat (in: _Dest=0x3f39b68, _Source="Blantyre" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" [0175.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0175.697] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brazzaville", cAlternateFileName="BRAZZA~1")) returned 1 [0175.697] wcscmp (_String1="Brazzaville", _String2=".") returned 1 [0175.697] wcscmp (_String1="Brazzaville", _String2="..") returned 1 [0175.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3df8970 [0175.697] wcscpy (in: _Dest=0x3df8970, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.697] wcscat (in: _Dest=0x3df8970, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.697] wcscat (in: _Dest=0x3df8970, _Source="Brazzaville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" [0175.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0175.698] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bujumbura", cAlternateFileName="BUJUMB~1")) returned 1 [0175.698] wcscmp (_String1="Bujumbura", _String2=".") returned 1 [0175.698] wcscmp (_String1="Bujumbura", _String2="..") returned 1 [0175.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33438 [0175.698] wcscpy (in: _Dest=0x3f33438, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.698] wcscat (in: _Dest=0x3f33438, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.698] wcscat (in: _Dest=0x3f33438, _Source="Bujumbura" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" [0175.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0175.699] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cairo", cAlternateFileName="")) returned 1 [0175.699] wcscmp (_String1="Cairo", _String2=".") returned 1 [0175.699] wcscmp (_String1="Cairo", _String2="..") returned 1 [0175.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46470 [0175.699] wcscpy (in: _Dest=0x3d46470, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.699] wcscat (in: _Dest=0x3d46470, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.699] wcscat (in: _Dest=0x3d46470, _Source="Cairo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo" [0175.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0175.700] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casablanca", cAlternateFileName="CASABL~1")) returned 1 [0175.701] wcscmp (_String1="Casablanca", _String2=".") returned 1 [0175.701] wcscmp (_String1="Casablanca", _String2="..") returned 1 [0175.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f34388 [0175.701] wcscpy (in: _Dest=0x3f34388, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.701] wcscat (in: _Dest=0x3f34388, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.701] wcscat (in: _Dest=0x3f34388, _Source="Casablanca" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" [0175.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0175.702] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ceuta", cAlternateFileName="")) returned 1 [0175.702] wcscmp (_String1="Ceuta", _String2=".") returned 1 [0175.702] wcscmp (_String1="Ceuta", _String2="..") returned 1 [0175.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46408 [0175.702] wcscpy (in: _Dest=0x3d46408, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.702] wcscat (in: _Dest=0x3d46408, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.702] wcscat (in: _Dest=0x3d46408, _Source="Ceuta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" [0175.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0175.703] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Conakry", cAlternateFileName="")) returned 1 [0175.703] wcscmp (_String1="Conakry", _String2=".") returned 1 [0175.703] wcscmp (_String1="Conakry", _String2="..") returned 1 [0175.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33ac8 [0175.703] wcscpy (in: _Dest=0x3f33ac8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.703] wcscat (in: _Dest=0x3f33ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.703] wcscat (in: _Dest=0x3f33ac8, _Source="Conakry" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry" [0175.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0175.704] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dakar", cAlternateFileName="")) returned 1 [0175.704] wcscmp (_String1="Dakar", _String2=".") returned 1 [0175.704] wcscmp (_String1="Dakar", _String2="..") returned 1 [0175.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d463a0 [0175.704] wcscpy (in: _Dest=0x3d463a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.704] wcscat (in: _Dest=0x3d463a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.705] wcscat (in: _Dest=0x3d463a0, _Source="Dakar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar" [0175.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d463a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0175.705] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dar_es_Salaam", cAlternateFileName="DAR_ES~1")) returned 1 [0175.706] wcscmp (_String1="Dar_es_Salaam", _String2=".") returned 1 [0175.706] wcscmp (_String1="Dar_es_Salaam", _String2="..") returned 1 [0175.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3df8b50 [0175.706] wcscpy (in: _Dest=0x3df8b50, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.706] wcscat (in: _Dest=0x3df8b50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.706] wcscat (in: _Dest=0x3df8b50, _Source="Dar_es_Salaam" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" [0175.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0175.707] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Djibouti", cAlternateFileName="")) returned 1 [0175.707] wcscmp (_String1="Djibouti", _String2=".") returned 1 [0175.707] wcscmp (_String1="Djibouti", _String2="..") returned 1 [0175.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33eb8 [0175.707] wcscpy (in: _Dest=0x3f33eb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.707] wcscat (in: _Dest=0x3f33eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.707] wcscat (in: _Dest=0x3f33eb8, _Source="Djibouti" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" [0175.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0175.708] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Douala", cAlternateFileName="")) returned 1 [0175.708] wcscmp (_String1="Douala", _String2=".") returned 1 [0175.708] wcscmp (_String1="Douala", _String2="..") returned 1 [0175.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d462d0 [0175.708] wcscpy (in: _Dest=0x3d462d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.708] wcscat (in: _Dest=0x3d462d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.708] wcscat (in: _Dest=0x3d462d0, _Source="Douala" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala" [0175.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d462d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0175.709] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Aaiun", cAlternateFileName="")) returned 1 [0175.709] wcscmp (_String1="El_Aaiun", _String2=".") returned 1 [0175.709] wcscmp (_String1="El_Aaiun", _String2="..") returned 1 [0175.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33908 [0175.709] wcscpy (in: _Dest=0x3f33908, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.709] wcscat (in: _Dest=0x3f33908, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.709] wcscat (in: _Dest=0x3f33908, _Source="El_Aaiun" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" [0175.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0175.710] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Freetown", cAlternateFileName="")) returned 1 [0175.710] wcscmp (_String1="Freetown", _String2=".") returned 1 [0175.710] wcscmp (_String1="Freetown", _String2="..") returned 1 [0175.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33ba8 [0175.710] wcscpy (in: _Dest=0x3f33ba8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.710] wcscat (in: _Dest=0x3f33ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.710] wcscat (in: _Dest=0x3f33ba8, _Source="Freetown" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown" [0175.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0175.711] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaborone", cAlternateFileName="")) returned 1 [0175.711] wcscmp (_String1="Gaborone", _String2=".") returned 1 [0175.711] wcscmp (_String1="Gaborone", _String2="..") returned 1 [0175.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33898 [0175.712] wcscpy (in: _Dest=0x3f33898, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.712] wcscat (in: _Dest=0x3f33898, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.712] wcscat (in: _Dest=0x3f33898, _Source="Gaborone" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" [0175.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0175.713] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harare", cAlternateFileName="")) returned 1 [0175.713] wcscmp (_String1="Harare", _String2=".") returned 1 [0175.713] wcscmp (_String1="Harare", _String2="..") returned 1 [0175.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46268 [0175.713] wcscpy (in: _Dest=0x3d46268, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.713] wcscat (in: _Dest=0x3d46268, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.713] wcscat (in: _Dest=0x3d46268, _Source="Harare" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare" [0175.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0175.714] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johannesburg", cAlternateFileName="JOHANN~1")) returned 1 [0175.714] wcscmp (_String1="Johannesburg", _String2=".") returned 1 [0175.714] wcscmp (_String1="Johannesburg", _String2="..") returned 1 [0175.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f32598 [0175.714] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.714] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.714] wcscat (in: _Dest=0x3f32598, _Source="Johannesburg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" [0175.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0175.715] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juba", cAlternateFileName="")) returned 1 [0175.715] wcscmp (_String1="Juba", _String2=".") returned 1 [0175.715] wcscmp (_String1="Juba", _String2="..") returned 1 [0175.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d46200 [0175.715] wcscpy (in: _Dest=0x3d46200, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.715] wcscat (in: _Dest=0x3d46200, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.715] wcscat (in: _Dest=0x3d46200, _Source="Juba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba" [0175.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0175.716] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kampala", cAlternateFileName="")) returned 1 [0175.716] wcscmp (_String1="Kampala", _String2=".") returned 1 [0175.716] wcscmp (_String1="Kampala", _String2="..") returned 1 [0175.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f336d8 [0175.716] wcscpy (in: _Dest=0x3f336d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.716] wcscat (in: _Dest=0x3f336d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.716] wcscat (in: _Dest=0x3f336d8, _Source="Kampala" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala" [0175.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f336d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0175.717] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khartoum", cAlternateFileName="")) returned 1 [0175.717] wcscmp (_String1="Khartoum", _String2=".") returned 1 [0175.717] wcscmp (_String1="Khartoum", _String2="..") returned 1 [0175.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33748 [0175.717] wcscpy (in: _Dest=0x3f33748, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.717] wcscat (in: _Dest=0x3f33748, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.717] wcscat (in: _Dest=0x3f33748, _Source="Khartoum" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" [0175.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0175.718] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kigali", cAlternateFileName="")) returned 1 [0175.719] wcscmp (_String1="Kigali", _String2=".") returned 1 [0175.719] wcscmp (_String1="Kigali", _String2="..") returned 1 [0175.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46198 [0175.719] wcscpy (in: _Dest=0x3d46198, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.719] wcscat (in: _Dest=0x3d46198, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.719] wcscat (in: _Dest=0x3d46198, _Source="Kigali" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali" [0175.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0175.720] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kinshasa", cAlternateFileName="")) returned 1 [0175.720] wcscmp (_String1="Kinshasa", _String2=".") returned 1 [0175.720] wcscmp (_String1="Kinshasa", _String2="..") returned 1 [0175.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f340e8 [0175.720] wcscpy (in: _Dest=0x3f340e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.720] wcscat (in: _Dest=0x3f340e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.720] wcscat (in: _Dest=0x3f340e8, _Source="Kinshasa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" [0175.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f340e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0175.721] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lagos", cAlternateFileName="")) returned 1 [0175.721] wcscmp (_String1="Lagos", _String2=".") returned 1 [0175.721] wcscmp (_String1="Lagos", _String2="..") returned 1 [0175.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46130 [0175.721] wcscpy (in: _Dest=0x3d46130, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.721] wcscat (in: _Dest=0x3d46130, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.721] wcscat (in: _Dest=0x3d46130, _Source="Lagos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos" [0175.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0175.722] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libreville", cAlternateFileName="LIBREV~1")) returned 1 [0175.722] wcscmp (_String1="Libreville", _String2=".") returned 1 [0175.722] wcscmp (_String1="Libreville", _String2="..") returned 1 [0175.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f342a8 [0175.722] wcscpy (in: _Dest=0x3f342a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0175.722] wcscat (in: _Dest=0x3f342a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0175.722] wcscat (in: _Dest=0x3f342a8, _Source="Libreville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville" [0175.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f342a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0176.158] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lome", cAlternateFileName="")) returned 1 [0176.158] wcscmp (_String1="Lome", _String2=".") returned 1 [0176.158] wcscmp (_String1="Lome", _String2="..") returned 1 [0176.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d46060 [0176.158] wcscpy (in: _Dest=0x3d46060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0176.158] wcscat (in: _Dest=0x3d46060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0176.158] wcscat (in: _Dest=0x3d46060, _Source="Lome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome" [0178.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0178.741] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luanda", cAlternateFileName="")) returned 1 [0178.741] wcscmp (_String1="Luanda", _String2=".") returned 1 [0178.741] wcscmp (_String1="Luanda", _String2="..") returned 1 [0178.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d478c0 [0178.741] wcscpy (in: _Dest=0x3d478c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0178.741] wcscat (in: _Dest=0x3d478c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0178.741] wcscat (in: _Dest=0x3d478c0, _Source="Luanda" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda" [0178.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d478c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0178.743] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lubumbashi", cAlternateFileName="LUBUMB~1")) returned 1 [0178.743] wcscmp (_String1="Lubumbashi", _String2=".") returned 1 [0178.743] wcscmp (_String1="Lubumbashi", _String2="..") returned 1 [0178.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1638 [0178.743] wcscpy (in: _Dest=0x3db1638, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0178.743] wcscat (in: _Dest=0x3db1638, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0178.743] wcscat (in: _Dest=0x3db1638, _Source="Lubumbashi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" [0178.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0178.745] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lusaka", cAlternateFileName="")) returned 1 [0181.326] wcscmp (_String1="Lusaka", _String2=".") returned 1 [0181.327] wcscmp (_String1="Lusaka", _String2="..") returned 1 [0181.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e4e8 [0181.327] wcscpy (in: _Dest=0x3d8e4e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.327] wcscat (in: _Dest=0x3d8e4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.327] wcscat (in: _Dest=0x3d8e4e8, _Source="Lusaka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" [0181.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0181.338] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malabo", cAlternateFileName="")) returned 1 [0181.338] wcscmp (_String1="Malabo", _String2=".") returned 1 [0181.338] wcscmp (_String1="Malabo", _String2="..") returned 1 [0181.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e008 [0181.338] wcscpy (in: _Dest=0x3d8e008, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.338] wcscat (in: _Dest=0x3d8e008, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.338] wcscat (in: _Dest=0x3d8e008, _Source="Malabo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo" [0181.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0181.342] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maputo", cAlternateFileName="")) returned 1 [0181.342] wcscmp (_String1="Maputo", _String2=".") returned 1 [0181.342] wcscmp (_String1="Maputo", _String2="..") returned 1 [0181.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bb10 [0181.342] wcscpy (in: _Dest=0x3d8bb10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.342] wcscat (in: _Dest=0x3d8bb10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.343] wcscat (in: _Dest=0x3d8bb10, _Source="Maputo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo" [0181.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8bb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d4 [0181.357] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maseru", cAlternateFileName="")) returned 1 [0181.357] wcscmp (_String1="Maseru", _String2=".") returned 1 [0181.357] wcscmp (_String1="Maseru", _String2="..") returned 1 [0181.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c810 [0181.357] wcscpy (in: _Dest=0x3d8c810, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.358] wcscat (in: _Dest=0x3d8c810, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.358] wcscat (in: _Dest=0x3d8c810, _Source="Maseru" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru" [0181.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0181.366] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mbabane", cAlternateFileName="")) returned 1 [0181.366] wcscmp (_String1="Mbabane", _String2=".") returned 1 [0181.366] wcscmp (_String1="Mbabane", _String2="..") returned 1 [0181.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33e48 [0181.366] wcscpy (in: _Dest=0x3f33e48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.366] wcscat (in: _Dest=0x3f33e48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.366] wcscat (in: _Dest=0x3f33e48, _Source="Mbabane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" [0181.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0181.372] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mogadishu", cAlternateFileName="MOGADI~1")) returned 1 [0181.372] wcscmp (_String1="Mogadishu", _String2=".") returned 1 [0181.372] wcscmp (_String1="Mogadishu", _String2="..") returned 1 [0181.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33588 [0181.372] wcscpy (in: _Dest=0x3f33588, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.372] wcscat (in: _Dest=0x3f33588, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.372] wcscat (in: _Dest=0x3f33588, _Source="Mogadishu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" [0181.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0181.378] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monrovia", cAlternateFileName="")) returned 1 [0181.378] wcscmp (_String1="Monrovia", _String2=".") returned 1 [0181.378] wcscmp (_String1="Monrovia", _String2="..") returned 1 [0181.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39ee8 [0181.378] wcscpy (in: _Dest=0x3f39ee8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.378] wcscat (in: _Dest=0x3f39ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.379] wcscat (in: _Dest=0x3f39ee8, _Source="Monrovia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" [0181.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0181.386] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nairobi", cAlternateFileName="")) returned 1 [0181.386] wcscmp (_String1="Nairobi", _String2=".") returned 1 [0181.386] wcscmp (_String1="Nairobi", _String2="..") returned 1 [0181.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e15700 [0181.387] wcscpy (in: _Dest=0x3e15700, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.387] wcscat (in: _Dest=0x3e15700, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.387] wcscat (in: _Dest=0x3e15700, _Source="Nairobi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" [0181.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e15700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0181.388] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ndjamena", cAlternateFileName="")) returned 1 [0181.388] wcscmp (_String1="Ndjamena", _String2=".") returned 1 [0181.389] wcscmp (_String1="Ndjamena", _String2="..") returned 1 [0181.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3519c0 [0181.389] wcscpy (in: _Dest=0x3519c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.389] wcscat (in: _Dest=0x3519c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.389] wcscat (in: _Dest=0x3519c0, _Source="Ndjamena" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" [0181.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3519c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0181.390] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niamey", cAlternateFileName="")) returned 1 [0181.390] wcscmp (_String1="Niamey", _String2=".") returned 1 [0181.390] wcscmp (_String1="Niamey", _String2="..") returned 1 [0181.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e348 [0181.390] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.390] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.390] wcscat (in: _Dest=0x3d8e348, _Source="Niamey" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey" [0181.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0181.391] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nouakchott", cAlternateFileName="NOUAKC~1")) returned 1 [0181.391] wcscmp (_String1="Nouakchott", _String2=".") returned 1 [0181.392] wcscmp (_String1="Nouakchott", _String2="..") returned 1 [0181.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x364a80 [0181.392] wcscpy (in: _Dest=0x364a80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.392] wcscat (in: _Dest=0x364a80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.392] wcscat (in: _Dest=0x364a80, _Source="Nouakchott" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" [0181.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x364a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0181.393] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ouagadougou", cAlternateFileName="OUAGAD~1")) returned 1 [0181.393] wcscmp (_String1="Ouagadougou", _String2=".") returned 1 [0181.393] wcscmp (_String1="Ouagadougou", _String2="..") returned 1 [0181.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32fe8 [0181.393] wcscpy (in: _Dest=0x3f32fe8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.393] wcscat (in: _Dest=0x3f32fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.393] wcscat (in: _Dest=0x3f32fe8, _Source="Ouagadougou" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" [0181.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0181.394] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto-Novo", cAlternateFileName="PORTO-~1")) returned 1 [0181.394] wcscmp (_String1="Porto-Novo", _String2=".") returned 1 [0181.394] wcscmp (_String1="Porto-Novo", _String2="..") returned 1 [0181.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e2ccd8 [0181.394] wcscpy (in: _Dest=0x3e2ccd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.394] wcscat (in: _Dest=0x3e2ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.394] wcscat (in: _Dest=0x3e2ccd8, _Source="Porto-Novo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" [0181.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0181.395] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Tome", cAlternateFileName="")) returned 1 [0181.395] wcscmp (_String1="Sao_Tome", _String2=".") returned 1 [0181.395] wcscmp (_String1="Sao_Tome", _String2="..") returned 1 [0181.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8402930 [0181.395] wcscpy (in: _Dest=0x8402930, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.395] wcscat (in: _Dest=0x8402930, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.395] wcscat (in: _Dest=0x8402930, _Source="Sao_Tome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" [0181.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0181.397] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tripoli", cAlternateFileName="")) returned 1 [0181.397] wcscmp (_String1="Tripoli", _String2=".") returned 1 [0181.397] wcscmp (_String1="Tripoli", _String2="..") returned 1 [0181.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x84029a0 [0181.397] wcscpy (in: _Dest=0x84029a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.397] wcscat (in: _Dest=0x84029a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.397] wcscat (in: _Dest=0x84029a0, _Source="Tripoli" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" [0181.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84029a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2578 [0181.398] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tunis", cAlternateFileName="")) returned 1 [0181.398] wcscmp (_String1="Tunis", _String2=".") returned 1 [0181.398] wcscmp (_String1="Tunis", _String2="..") returned 1 [0181.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e890 [0181.398] wcscpy (in: _Dest=0x3d8e890, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.399] wcscat (in: _Dest=0x3d8e890, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.399] wcscat (in: _Dest=0x3d8e890, _Source="Tunis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis" [0181.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0181.399] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 1 [0181.400] wcscmp (_String1="Windhoek", _String2=".") returned 1 [0181.400] wcscmp (_String1="Windhoek", _String2="..") returned 1 [0181.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8402a10 [0181.400] wcscpy (in: _Dest=0x8402a10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0181.400] wcscat (in: _Dest=0x8402a10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0181.400] wcscat (in: _Dest=0x8402a10, _Source="Windhoek" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" [0181.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0181.401] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 0 [0183.519] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 [0186.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 Thread: id = 4108 os_tid = 0x10b8 [0170.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5b28 [0170.068] wcscpy (in: _Dest=0x2fe5b28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0170.068] wcscat (in: _Dest=0x2fe5b28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0170.068] wcscat (in: _Dest=0x2fe5b28, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\*" [0170.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100d40 [0170.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0173.316] wcscmp (_String1=".", _String2=".") returned 0 [0173.316] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.443] wcscmp (_String1="..", _String2=".") returned 1 [0174.443] wcscmp (_String1="..", _String2="..") returned 0 [0174.443] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adak", cAlternateFileName="")) returned 1 [0174.443] wcscmp (_String1="Adak", _String2=".") returned 1 [0174.443] wcscmp (_String1="Adak", _String2="..") returned 1 [0174.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x2fce780 [0174.443] wcscpy (in: _Dest=0x2fce780, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0174.443] wcscat (in: _Dest=0x2fce780, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0174.443] wcscat (in: _Dest=0x2fce780, _Source="Adak" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak" [0178.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fce780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0178.380] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anchorage", cAlternateFileName="ANCHOR~1")) returned 1 [0178.380] wcscmp (_String1="Anchorage", _String2=".") returned 1 [0178.380] wcscmp (_String1="Anchorage", _String2="..") returned 1 [0178.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33e48 [0178.380] wcscpy (in: _Dest=0x3f33e48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.380] wcscat (in: _Dest=0x3f33e48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.380] wcscat (in: _Dest=0x3f33e48, _Source="Anchorage" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage" [0178.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0178.381] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anguilla", cAlternateFileName="")) returned 1 [0178.381] wcscmp (_String1="Anguilla", _String2=".") returned 1 [0178.381] wcscmp (_String1="Anguilla", _String2="..") returned 1 [0178.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33dd8 [0178.382] wcscpy (in: _Dest=0x3f33dd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.382] wcscat (in: _Dest=0x3f33dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.382] wcscat (in: _Dest=0x3f33dd8, _Source="Anguilla" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla" [0178.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0178.383] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antigua", cAlternateFileName="")) returned 1 [0178.383] wcscmp (_String1="Antigua", _String2=".") returned 1 [0178.383] wcscmp (_String1="Antigua", _String2="..") returned 1 [0178.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33f28 [0178.383] wcscpy (in: _Dest=0x3f33f28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.383] wcscat (in: _Dest=0x3f33f28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.383] wcscat (in: _Dest=0x3f33f28, _Source="Antigua" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua" [0178.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0178.385] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Araguaina", cAlternateFileName="ARAGUA~1")) returned 1 [0178.385] wcscmp (_String1="Araguaina", _String2=".") returned 1 [0178.385] wcscmp (_String1="Araguaina", _String2="..") returned 1 [0178.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33c18 [0178.385] wcscpy (in: _Dest=0x3f33c18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.385] wcscat (in: _Dest=0x3f33c18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.385] wcscat (in: _Dest=0x3f33c18, _Source="Araguaina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina" [0178.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0178.386] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Argentina", cAlternateFileName="ARGENT~1")) returned 1 [0178.386] wcscmp (_String1="Argentina", _String2=".") returned 1 [0178.386] wcscmp (_String1="Argentina", _String2="..") returned 1 [0178.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33828 [0178.386] wcscpy (in: _Dest=0x3f33828, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.387] wcscat (in: _Dest=0x3f33828, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.387] wcscat (in: _Dest=0x3f33828, _Source="Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0178.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3f33828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0178.388] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aruba", cAlternateFileName="")) returned 1 [0178.388] wcscmp (_String1="Aruba", _String2=".") returned 1 [0178.388] wcscmp (_String1="Aruba", _String2="..") returned 1 [0178.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47170 [0178.388] wcscpy (in: _Dest=0x3d47170, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.388] wcscat (in: _Dest=0x3d47170, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.388] wcscat (in: _Dest=0x3d47170, _Source="Aruba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba" [0178.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0178.390] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asuncion", cAlternateFileName="")) returned 1 [0178.390] wcscmp (_String1="Asuncion", _String2=".") returned 1 [0178.390] wcscmp (_String1="Asuncion", _String2="..") returned 1 [0178.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33588 [0178.390] wcscpy (in: _Dest=0x3f33588, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.390] wcscat (in: _Dest=0x3f33588, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.390] wcscat (in: _Dest=0x3f33588, _Source="Asuncion" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion" [0178.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0178.391] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atikokan", cAlternateFileName="")) returned 1 [0178.391] wcscmp (_String1="Atikokan", _String2=".") returned 1 [0178.391] wcscmp (_String1="Atikokan", _String2="..") returned 1 [0178.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33518 [0178.391] wcscpy (in: _Dest=0x3f33518, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.391] wcscat (in: _Dest=0x3f33518, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.391] wcscat (in: _Dest=0x3f33518, _Source="Atikokan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan" [0178.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0178.393] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x229, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia", cAlternateFileName="")) returned 1 [0178.393] wcscmp (_String1="Bahia", _String2=".") returned 1 [0178.393] wcscmp (_String1="Bahia", _String2="..") returned 1 [0178.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47928 [0178.393] wcscpy (in: _Dest=0x3d47928, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.393] wcscat (in: _Dest=0x3d47928, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.393] wcscat (in: _Dest=0x3d47928, _Source="Bahia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia" [0178.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0178.395] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia_Banderas", cAlternateFileName="BAHIA_~1")) returned 1 [0178.395] wcscmp (_String1="Bahia_Banderas", _String2=".") returned 1 [0178.395] wcscmp (_String1="Bahia_Banderas", _String2="..") returned 1 [0178.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831af58 [0178.395] wcscpy (in: _Dest=0x831af58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.395] wcscat (in: _Dest=0x831af58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.395] wcscat (in: _Dest=0x831af58, _Source="Bahia_Banderas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" [0178.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831af58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0178.396] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Barbados", cAlternateFileName="")) returned 1 [0178.396] wcscmp (_String1="Barbados", _String2=".") returned 1 [0178.396] wcscmp (_String1="Barbados", _String2="..") returned 1 [0178.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1718 [0178.397] wcscpy (in: _Dest=0x3db1718, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.397] wcscat (in: _Dest=0x3db1718, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.397] wcscat (in: _Dest=0x3db1718, _Source="Barbados" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados" [0178.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0178.398] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belem", cAlternateFileName="")) returned 1 [0178.398] wcscmp (_String1="Belem", _String2=".") returned 1 [0178.398] wcscmp (_String1="Belem", _String2="..") returned 1 [0178.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47fa8 [0178.398] wcscpy (in: _Dest=0x3d47fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.398] wcscat (in: _Dest=0x3d47fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.398] wcscat (in: _Dest=0x3d47fa8, _Source="Belem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem" [0178.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0178.400] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belize", cAlternateFileName="")) returned 1 [0178.400] wcscmp (_String1="Belize", _String2=".") returned 1 [0178.400] wcscmp (_String1="Belize", _String2="..") returned 1 [0178.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1a28 [0178.400] wcscpy (in: _Dest=0x3db1a28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.400] wcscat (in: _Dest=0x3db1a28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.400] wcscat (in: _Dest=0x3db1a28, _Source="Belize" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize" [0178.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0178.401] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blanc-Sablon", cAlternateFileName="BLANC-~1")) returned 1 [0178.402] wcscmp (_String1="Blanc-Sablon", _String2=".") returned 1 [0178.402] wcscmp (_String1="Blanc-Sablon", _String2="..") returned 1 [0178.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e67e08 [0178.402] wcscpy (in: _Dest=0x3e67e08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.402] wcscat (in: _Dest=0x3e67e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.402] wcscat (in: _Dest=0x3e67e08, _Source="Blanc-Sablon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" [0178.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0178.403] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boa_Vista", cAlternateFileName="BOA_VI~1")) returned 1 [0178.403] wcscmp (_String1="Boa_Vista", _String2=".") returned 1 [0178.403] wcscmp (_String1="Boa_Vista", _String2="..") returned 1 [0178.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1be8 [0178.403] wcscpy (in: _Dest=0x3db1be8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.403] wcscat (in: _Dest=0x3db1be8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.403] wcscat (in: _Dest=0x3db1be8, _Source="Boa_Vista" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" [0178.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0178.405] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bogota", cAlternateFileName="")) returned 1 [0178.405] wcscmp (_String1="Bogota", _String2=".") returned 1 [0178.405] wcscmp (_String1="Bogota", _String2="..") returned 1 [0178.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1b78 [0178.405] wcscpy (in: _Dest=0x3db1b78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.405] wcscat (in: _Dest=0x3db1b78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.405] wcscat (in: _Dest=0x3db1b78, _Source="Bogota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota" [0178.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0178.406] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boise", cAlternateFileName="")) returned 1 [0178.406] wcscmp (_String1="Boise", _String2=".") returned 1 [0178.406] wcscmp (_String1="Boise", _String2="..") returned 1 [0178.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d478c0 [0178.407] wcscpy (in: _Dest=0x3d478c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.407] wcscat (in: _Dest=0x3d478c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.407] wcscat (in: _Dest=0x3d478c0, _Source="Boise" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise" [0178.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d478c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0178.408] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cambridge_Bay", cAlternateFileName="CAMBRI~1")) returned 1 [0178.408] wcscmp (_String1="Cambridge_Bay", _String2=".") returned 1 [0178.408] wcscmp (_String1="Cambridge_Bay", _String2="..") returned 1 [0178.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68858 [0178.408] wcscpy (in: _Dest=0x3e68858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.408] wcscat (in: _Dest=0x3e68858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.408] wcscat (in: _Dest=0x3e68858, _Source="Cambridge_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" [0178.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0178.410] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campo_Grande", cAlternateFileName="CAMPO_~1")) returned 1 [0178.410] wcscmp (_String1="Campo_Grande", _String2=".") returned 1 [0178.410] wcscmp (_String1="Campo_Grande", _String2="..") returned 1 [0178.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68060 [0178.410] wcscpy (in: _Dest=0x3e68060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.410] wcscat (in: _Dest=0x3e68060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.410] wcscat (in: _Dest=0x3e68060, _Source="Campo_Grande" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" [0178.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0178.412] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cancun", cAlternateFileName="")) returned 1 [0178.412] wcscmp (_String1="Cancun", _String2=".") returned 1 [0178.412] wcscmp (_String1="Cancun", _String2="..") returned 1 [0178.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1a98 [0178.412] wcscpy (in: _Dest=0x3db1a98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.412] wcscat (in: _Dest=0x3db1a98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.412] wcscat (in: _Dest=0x3db1a98, _Source="Cancun" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun" [0178.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0178.413] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caracas", cAlternateFileName="")) returned 1 [0178.413] wcscmp (_String1="Caracas", _String2=".") returned 1 [0178.413] wcscmp (_String1="Caracas", _String2="..") returned 1 [0178.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1cc8 [0178.413] wcscpy (in: _Dest=0x3db1cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.414] wcscat (in: _Dest=0x3db1cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.414] wcscat (in: _Dest=0x3db1cc8, _Source="Caracas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas" [0178.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0178.415] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayenne", cAlternateFileName="")) returned 1 [0178.415] wcscmp (_String1="Cayenne", _String2=".") returned 1 [0178.415] wcscmp (_String1="Cayenne", _String2="..") returned 1 [0178.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1638 [0178.415] wcscpy (in: _Dest=0x3db1638, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.415] wcscat (in: _Dest=0x3db1638, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.415] wcscat (in: _Dest=0x3db1638, _Source="Cayenne" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne" [0178.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0178.612] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayman", cAlternateFileName="")) returned 1 [0178.612] wcscmp (_String1="Cayman", _String2=".") returned 1 [0178.612] wcscmp (_String1="Cayman", _String2="..") returned 1 [0178.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1cc8 [0178.612] wcscpy (in: _Dest=0x3db1cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.612] wcscat (in: _Dest=0x3db1cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.612] wcscat (in: _Dest=0x3db1cc8, _Source="Cayman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman" [0180.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b48 [0180.243] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chicago", cAlternateFileName="")) returned 1 [0180.243] wcscmp (_String1="Chicago", _String2=".") returned 1 [0180.243] wcscmp (_String1="Chicago", _String2="..") returned 1 [0180.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5400 [0180.243] wcscpy (in: _Dest=0x2ff5400, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.243] wcscat (in: _Dest=0x2ff5400, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.243] wcscat (in: _Dest=0x2ff5400, _Source="Chicago" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago" [0180.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce8 [0180.244] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chihuahua", cAlternateFileName="CHIHUA~1")) returned 1 [0180.244] wcscmp (_String1="Chihuahua", _String2=".") returned 1 [0180.244] wcscmp (_String1="Chihuahua", _String2="..") returned 1 [0180.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x2ff5080 [0180.244] wcscpy (in: _Dest=0x2ff5080, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.244] wcscat (in: _Dest=0x2ff5080, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.244] wcscat (in: _Dest=0x2ff5080, _Source="Chihuahua" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua" [0180.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b00 [0180.246] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Costa_Rica", cAlternateFileName="COSTA_~1")) returned 1 [0180.246] wcscmp (_String1="Costa_Rica", _String2=".") returned 1 [0180.246] wcscmp (_String1="Costa_Rica", _String2="..") returned 1 [0180.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0bdc0 [0180.246] wcscpy (in: _Dest=0x3f0bdc0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.246] wcscat (in: _Dest=0x3f0bdc0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.246] wcscat (in: _Dest=0x3f0bdc0, _Source="Costa_Rica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" [0180.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0bdc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2afc [0180.247] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Creston", cAlternateFileName="")) returned 1 [0180.247] wcscmp (_String1="Creston", _String2=".") returned 1 [0180.247] wcscmp (_String1="Creston", _String2="..") returned 1 [0180.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5390 [0180.247] wcscpy (in: _Dest=0x2ff5390, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.247] wcscat (in: _Dest=0x2ff5390, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.247] wcscat (in: _Dest=0x2ff5390, _Source="Creston" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston" [0180.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af8 [0180.248] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cuiaba", cAlternateFileName="")) returned 1 [0180.248] wcscmp (_String1="Cuiaba", _String2=".") returned 1 [0180.248] wcscmp (_String1="Cuiaba", _String2="..") returned 1 [0180.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5010 [0180.249] wcscpy (in: _Dest=0x2ff5010, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.249] wcscat (in: _Dest=0x2ff5010, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.249] wcscat (in: _Dest=0x2ff5010, _Source="Cuiaba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba" [0180.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af4 [0180.250] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Curacao", cAlternateFileName="")) returned 1 [0180.250] wcscmp (_String1="Curacao", _String2=".") returned 1 [0180.250] wcscmp (_String1="Curacao", _String2="..") returned 1 [0180.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5160 [0180.250] wcscpy (in: _Dest=0x2ff5160, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.250] wcscat (in: _Dest=0x2ff5160, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.250] wcscat (in: _Dest=0x2ff5160, _Source="Curacao" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao" [0180.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af0 [0180.251] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="Danmarkshavn", cAlternateFileName="DANMAR~1")) returned 1 [0180.251] wcscmp (_String1="Danmarkshavn", _String2=".") returned 1 [0180.251] wcscmp (_String1="Danmarkshavn", _String2="..") returned 1 [0180.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b5c8 [0180.252] wcscpy (in: _Dest=0x3f0b5c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.252] wcscat (in: _Dest=0x3f0b5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.252] wcscat (in: _Dest=0x3f0b5c8, _Source="Danmarkshavn" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" [0180.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aec [0180.253] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson", cAlternateFileName="")) returned 1 [0180.253] wcscmp (_String1="Dawson", _String2=".") returned 1 [0180.253] wcscmp (_String1="Dawson", _String2="..") returned 1 [0180.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff50f0 [0180.253] wcscpy (in: _Dest=0x2ff50f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.253] wcscat (in: _Dest=0x2ff50f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.253] wcscat (in: _Dest=0x2ff50f0, _Source="Dawson" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson" [0180.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff50f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae8 [0180.254] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson_Creek", cAlternateFileName="DAWSON~1")) returned 1 [0180.254] wcscmp (_String1="Dawson_Creek", _String2=".") returned 1 [0180.254] wcscmp (_String1="Dawson_Creek", _String2="..") returned 1 [0180.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0beb0 [0180.254] wcscpy (in: _Dest=0x3f0beb0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.254] wcscat (in: _Dest=0x3f0beb0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.254] wcscat (in: _Dest=0x3f0beb0, _Source="Dawson_Creek" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" [0180.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0beb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ad8 [0180.255] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="Denver", cAlternateFileName="")) returned 1 [0180.255] wcscmp (_String1="Denver", _String2=".") returned 1 [0180.255] wcscmp (_String1="Denver", _String2="..") returned 1 [0180.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5320 [0180.255] wcscpy (in: _Dest=0x2ff5320, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.255] wcscat (in: _Dest=0x2ff5320, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.255] wcscat (in: _Dest=0x2ff5320, _Source="Denver" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver" [0180.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ad4 [0180.257] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detroit", cAlternateFileName="")) returned 1 [0180.257] wcscmp (_String1="Detroit", _String2=".") returned 1 [0180.257] wcscmp (_String1="Detroit", _String2="..") returned 1 [0180.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33518 [0180.257] wcscpy (in: _Dest=0x3f33518, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.257] wcscat (in: _Dest=0x3f33518, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.257] wcscat (in: _Dest=0x3f33518, _Source="Detroit" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit" [0180.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ad0 [0180.258] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dominica", cAlternateFileName="")) returned 1 [0182.146] wcscmp (_String1="Dominica", _String2=".") returned 1 [0182.146] wcscmp (_String1="Dominica", _String2="..") returned 1 [0182.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x2ff52b0 [0182.146] wcscpy (in: _Dest=0x2ff52b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0182.146] wcscat (in: _Dest=0x2ff52b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0182.146] wcscat (in: _Dest=0x2ff52b0, _Source="Dominica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica" [0184.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff52b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aac [0184.885] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edmonton", cAlternateFileName="")) returned 1 [0184.885] wcscmp (_String1="Edmonton", _String2=".") returned 1 [0184.885] wcscmp (_String1="Edmonton", _String2="..") returned 1 [0184.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8402bd0 [0184.885] wcscpy (in: _Dest=0x8402bd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.885] wcscat (in: _Dest=0x8402bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.885] wcscat (in: _Dest=0x8402bd0, _Source="Edmonton" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton" [0184.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0184.887] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eirunepe", cAlternateFileName="")) returned 1 [0184.887] wcscmp (_String1="Eirunepe", _String2=".") returned 1 [0184.887] wcscmp (_String1="Eirunepe", _String2="..") returned 1 [0184.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8402e00 [0184.887] wcscpy (in: _Dest=0x8402e00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.887] wcscat (in: _Dest=0x8402e00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.887] wcscat (in: _Dest=0x8402e00, _Source="Eirunepe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe" [0184.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0184.888] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Salvador", cAlternateFileName="EL_SAL~1")) returned 1 [0184.888] wcscmp (_String1="El_Salvador", _String2=".") returned 1 [0184.888] wcscmp (_String1="El_Salvador", _String2="..") returned 1 [0184.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68ba0 [0184.888] wcscpy (in: _Dest=0x3e68ba0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.888] wcscat (in: _Dest=0x3e68ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.888] wcscat (in: _Dest=0x3e68ba0, _Source="El_Salvador" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador" [0184.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0184.889] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fortaleza", cAlternateFileName="FORTAL~1")) returned 1 [0184.889] wcscmp (_String1="Fortaleza", _String2=".") returned 1 [0184.889] wcscmp (_String1="Fortaleza", _String2="..") returned 1 [0184.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8402e70 [0184.889] wcscpy (in: _Dest=0x8402e70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.890] wcscat (in: _Dest=0x8402e70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.890] wcscat (in: _Dest=0x8402e70, _Source="Fortaleza" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza" [0184.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0184.892] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glace_Bay", cAlternateFileName="GLACE_~1")) returned 1 [0184.892] wcscmp (_String1="Glace_Bay", _String2=".") returned 1 [0184.892] wcscmp (_String1="Glace_Bay", _String2="..") returned 1 [0184.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8402ee0 [0184.892] wcscpy (in: _Dest=0x8402ee0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.892] wcscat (in: _Dest=0x8402ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.892] wcscat (in: _Dest=0x8402ee0, _Source="Glace_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" [0184.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0184.893] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Godthab", cAlternateFileName="")) returned 1 [0184.893] wcscmp (_String1="Godthab", _String2=".") returned 1 [0184.893] wcscmp (_String1="Godthab", _String2="..") returned 1 [0184.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8402f50 [0184.893] wcscpy (in: _Dest=0x8402f50, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.893] wcscat (in: _Dest=0x8402f50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.893] wcscat (in: _Dest=0x8402f50, _Source="Godthab" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab" [0184.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0184.894] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Goose_Bay", cAlternateFileName="GOOSE_~1")) returned 1 [0184.894] wcscmp (_String1="Goose_Bay", _String2=".") returned 1 [0184.894] wcscmp (_String1="Goose_Bay", _String2="..") returned 1 [0184.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8402fc0 [0184.894] wcscpy (in: _Dest=0x8402fc0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.894] wcscat (in: _Dest=0x8402fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.894] wcscat (in: _Dest=0x8402fc0, _Source="Goose_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" [0184.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0184.896] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grand_Turk", cAlternateFileName="GRAND_~1")) returned 1 [0184.896] wcscmp (_String1="Grand_Turk", _String2=".") returned 1 [0184.896] wcscmp (_String1="Grand_Turk", _String2="..") returned 1 [0184.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68060 [0184.896] wcscpy (in: _Dest=0x3e68060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.896] wcscat (in: _Dest=0x3e68060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.896] wcscat (in: _Dest=0x3e68060, _Source="Grand_Turk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" [0184.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e8 [0184.897] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grenada", cAlternateFileName="")) returned 1 [0184.897] wcscmp (_String1="Grenada", _String2=".") returned 1 [0184.897] wcscmp (_String1="Grenada", _String2="..") returned 1 [0184.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8403030 [0184.897] wcscpy (in: _Dest=0x8403030, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.897] wcscat (in: _Dest=0x8403030, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.897] wcscat (in: _Dest=0x8403030, _Source="Grenada" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada" [0184.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0 [0184.898] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadeloupe", cAlternateFileName="GUADEL~1")) returned 1 [0184.898] wcscmp (_String1="Guadeloupe", _String2=".") returned 1 [0184.898] wcscmp (_String1="Guadeloupe", _String2="..") returned 1 [0184.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68420 [0184.898] wcscpy (in: _Dest=0x3e68420, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.898] wcscat (in: _Dest=0x3e68420, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.898] wcscat (in: _Dest=0x3e68420, _Source="Guadeloupe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" [0184.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0184.899] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guatemala", cAlternateFileName="GUATEM~1")) returned 1 [0184.899] wcscmp (_String1="Guatemala", _String2=".") returned 1 [0184.899] wcscmp (_String1="Guatemala", _String2="..") returned 1 [0184.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x84030a0 [0184.900] wcscpy (in: _Dest=0x84030a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.900] wcscat (in: _Dest=0x84030a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.900] wcscat (in: _Dest=0x84030a0, _Source="Guatemala" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala" [0184.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84030a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0184.901] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guayaquil", cAlternateFileName="GUAYAQ~1")) returned 1 [0184.901] wcscmp (_String1="Guayaquil", _String2=".") returned 1 [0184.901] wcscmp (_String1="Guayaquil", _String2="..") returned 1 [0184.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8403110 [0184.901] wcscpy (in: _Dest=0x8403110, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.901] wcscat (in: _Dest=0x8403110, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.901] wcscat (in: _Dest=0x8403110, _Source="Guayaquil" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil" [0184.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0184.903] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guyana", cAlternateFileName="")) returned 1 [0184.903] wcscmp (_String1="Guyana", _String2=".") returned 1 [0184.903] wcscmp (_String1="Guyana", _String2="..") returned 1 [0184.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8403180 [0184.903] wcscpy (in: _Dest=0x8403180, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.903] wcscat (in: _Dest=0x8403180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.903] wcscat (in: _Dest=0x8403180, _Source="Guyana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana" [0184.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0184.904] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="Halifax", cAlternateFileName="")) returned 1 [0184.904] wcscmp (_String1="Halifax", _String2=".") returned 1 [0184.904] wcscmp (_String1="Halifax", _String2="..") returned 1 [0184.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x84031f0 [0184.905] wcscpy (in: _Dest=0x84031f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.905] wcscat (in: _Dest=0x84031f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.905] wcscat (in: _Dest=0x84031f0, _Source="Halifax" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax" [0184.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84031f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0184.906] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Havana", cAlternateFileName="")) returned 1 [0184.906] wcscmp (_String1="Havana", _String2=".") returned 1 [0184.906] wcscmp (_String1="Havana", _String2="..") returned 1 [0184.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8403260 [0184.906] wcscpy (in: _Dest=0x8403260, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.906] wcscat (in: _Dest=0x8403260, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.907] wcscat (in: _Dest=0x8403260, _Source="Havana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana" [0184.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0184.908] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hermosillo", cAlternateFileName="HERMOS~1")) returned 1 [0184.908] wcscmp (_String1="Hermosillo", _String2=".") returned 1 [0184.908] wcscmp (_String1="Hermosillo", _String2="..") returned 1 [0184.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68498 [0184.908] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.908] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.908] wcscat (in: _Dest=0x3e68498, _Source="Hermosillo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo" [0184.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0184.909] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indiana", cAlternateFileName="")) returned 1 [0184.909] wcscmp (_String1="Indiana", _String2=".") returned 1 [0184.909] wcscmp (_String1="Indiana", _String2="..") returned 1 [0184.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x84032d0 [0184.909] wcscpy (in: _Dest=0x84032d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.909] wcscat (in: _Dest=0x84032d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.909] wcscat (in: _Dest=0x84032d0, _Source="Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0184.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x84032d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0184.910] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inuvik", cAlternateFileName="")) returned 1 [0184.910] wcscmp (_String1="Inuvik", _String2=".") returned 1 [0184.910] wcscmp (_String1="Inuvik", _String2="..") returned 1 [0184.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8403340 [0184.911] wcscpy (in: _Dest=0x8403340, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.911] wcscat (in: _Dest=0x8403340, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.911] wcscat (in: _Dest=0x8403340, _Source="Inuvik" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik" [0184.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0184.912] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Iqaluit", cAlternateFileName="")) returned 1 [0184.912] wcscmp (_String1="Iqaluit", _String2=".") returned 1 [0184.912] wcscmp (_String1="Iqaluit", _String2="..") returned 1 [0184.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x84033b0 [0184.912] wcscpy (in: _Dest=0x84033b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.912] wcscat (in: _Dest=0x84033b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.912] wcscat (in: _Dest=0x84033b0, _Source="Iqaluit" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit" [0184.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84033b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0184.914] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jamaica", cAlternateFileName="")) returned 1 [0184.914] wcscmp (_String1="Jamaica", _String2=".") returned 1 [0184.914] wcscmp (_String1="Jamaica", _String2="..") returned 1 [0184.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8403420 [0184.914] wcscpy (in: _Dest=0x8403420, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.914] wcscat (in: _Dest=0x8403420, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.914] wcscat (in: _Dest=0x8403420, _Source="Jamaica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica" [0184.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0184.915] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juneau", cAlternateFileName="")) returned 1 [0184.915] wcscmp (_String1="Juneau", _String2=".") returned 1 [0184.915] wcscmp (_String1="Juneau", _String2="..") returned 1 [0184.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8403490 [0184.915] wcscpy (in: _Dest=0x8403490, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.915] wcscat (in: _Dest=0x8403490, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.915] wcscat (in: _Dest=0x8403490, _Source="Juneau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau" [0184.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0184.916] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kentucky", cAlternateFileName="")) returned 1 [0184.916] wcscmp (_String1="Kentucky", _String2=".") returned 1 [0184.916] wcscmp (_String1="Kentucky", _String2="..") returned 1 [0184.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8403500 [0184.916] wcscpy (in: _Dest=0x8403500, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.916] wcscat (in: _Dest=0x8403500, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.916] wcscat (in: _Dest=0x8403500, _Source="Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0184.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8403500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0184.918] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Paz", cAlternateFileName="")) returned 1 [0184.918] wcscmp (_String1="La_Paz", _String2=".") returned 1 [0184.918] wcscmp (_String1="La_Paz", _String2="..") returned 1 [0184.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8403570 [0184.918] wcscpy (in: _Dest=0x8403570, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.918] wcscat (in: _Dest=0x8403570, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.918] wcscat (in: _Dest=0x8403570, _Source="La_Paz" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz" [0184.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0184.919] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lima", cAlternateFileName="")) returned 1 [0184.920] wcscmp (_String1="Lima", _String2=".") returned 1 [0184.920] wcscmp (_String1="Lima", _String2="..") returned 1 [0184.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ecd340 [0184.920] wcscpy (in: _Dest=0x3ecd340, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.920] wcscat (in: _Dest=0x3ecd340, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.920] wcscat (in: _Dest=0x3ecd340, _Source="Lima" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima" [0184.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ecd340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0184.921] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Los_Angeles", cAlternateFileName="LOS_AN~1")) returned 1 [0184.921] wcscmp (_String1="Los_Angeles", _String2=".") returned 1 [0184.921] wcscmp (_String1="Los_Angeles", _String2="..") returned 1 [0184.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e682b8 [0184.921] wcscpy (in: _Dest=0x3e682b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.921] wcscat (in: _Dest=0x3e682b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.921] wcscat (in: _Dest=0x3e682b8, _Source="Los_Angeles" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" [0184.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e682b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0184.922] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maceio", cAlternateFileName="")) returned 1 [0184.922] wcscmp (_String1="Maceio", _String2=".") returned 1 [0184.922] wcscmp (_String1="Maceio", _String2="..") returned 1 [0184.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x84035e0 [0184.922] wcscpy (in: _Dest=0x84035e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.922] wcscat (in: _Dest=0x84035e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.922] wcscat (in: _Dest=0x84035e0, _Source="Maceio" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio" [0184.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84035e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0184.923] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Managua", cAlternateFileName="")) returned 1 [0184.924] wcscmp (_String1="Managua", _String2=".") returned 1 [0184.924] wcscmp (_String1="Managua", _String2="..") returned 1 [0184.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8403650 [0184.924] wcscpy (in: _Dest=0x8403650, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.924] wcscat (in: _Dest=0x8403650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.924] wcscat (in: _Dest=0x8403650, _Source="Managua" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua" [0184.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0184.925] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manaus", cAlternateFileName="")) returned 1 [0184.925] wcscmp (_String1="Manaus", _String2=".") returned 1 [0184.925] wcscmp (_String1="Manaus", _String2="..") returned 1 [0184.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x84036c0 [0184.925] wcscpy (in: _Dest=0x84036c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0184.925] wcscat (in: _Dest=0x84036c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0184.925] wcscat (in: _Dest=0x84036c0, _Source="Manaus" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus" [0184.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84036c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0185.655] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Martinique", cAlternateFileName="MARTIN~1")) returned 1 [0185.655] wcscmp (_String1="Martinique", _String2=".") returned 1 [0185.655] wcscmp (_String1="Martinique", _String2="..") returned 1 [0185.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68420 [0185.655] wcscpy (in: _Dest=0x3e68420, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0185.655] wcscat (in: _Dest=0x3e68420, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0185.655] wcscat (in: _Dest=0x3e68420, _Source="Martinique" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique" [0188.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0188.014] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Matamoros", cAlternateFileName="MATAMO~1")) returned 1 [0188.014] wcscmp (_String1="Matamoros", _String2=".") returned 1 [0188.014] wcscmp (_String1="Matamoros", _String2="..") returned 1 [0188.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8403500 [0188.014] wcscpy (in: _Dest=0x8403500, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0188.014] wcscat (in: _Dest=0x8403500, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0188.015] wcscat (in: _Dest=0x8403500, _Source="Matamoros" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros" [0188.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0188.016] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mazatlan", cAlternateFileName="")) returned 1 [0188.016] wcscmp (_String1="Mazatlan", _String2=".") returned 1 [0188.016] wcscmp (_String1="Mazatlan", _String2="..") returned 1 [0188.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x84036c0 [0188.016] wcscpy (in: _Dest=0x84036c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0188.016] wcscat (in: _Dest=0x84036c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0188.016] wcscat (in: _Dest=0x84036c0, _Source="Mazatlan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan" [0188.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84036c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0188.017] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menominee", cAlternateFileName="MENOMI~1")) returned 1 [0188.017] wcscmp (_String1="Menominee", _String2=".") returned 1 [0188.018] wcscmp (_String1="Menominee", _String2="..") returned 1 [0188.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8403650 [0188.018] wcscpy (in: _Dest=0x8403650, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0188.018] wcscat (in: _Dest=0x8403650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0188.018] wcscat (in: _Dest=0x8403650, _Source="Menominee" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee" [0188.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0188.019] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Merida", cAlternateFileName="")) returned 1 [0188.019] wcscmp (_String1="Merida", _String2=".") returned 1 [0188.019] wcscmp (_String1="Merida", _String2="..") returned 1 [0188.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x84035e0 [0188.019] wcscpy (in: _Dest=0x84035e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0188.019] wcscat (in: _Dest=0x84035e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0188.019] wcscat (in: _Dest=0x84035e0, _Source="Merida" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida" [0188.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84035e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0188.021] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metlakatla", cAlternateFileName="METLAK~1")) returned 1 [0188.021] wcscmp (_String1="Metlakatla", _String2=".") returned 1 [0188.021] wcscmp (_String1="Metlakatla", _String2="..") returned 1 [0188.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68498 [0188.021] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0188.021] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0188.021] wcscat (in: _Dest=0x3e68498, _Source="Metlakatla" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla" [0188.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b4 [0188.023] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mexico_City", cAlternateFileName="MEXICO~1")) returned 1 [0188.023] wcscmp (_String1="Mexico_City", _String2=".") returned 1 [0188.023] wcscmp (_String1="Mexico_City", _String2="..") returned 1 [0188.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68858 [0188.023] wcscpy (in: _Dest=0x3e68858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0188.023] wcscat (in: _Dest=0x3e68858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0188.023] wcscat (in: _Dest=0x3e68858, _Source="Mexico_City" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City" [0188.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0 [0188.024] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Miquelon", cAlternateFileName="")) returned 1 [0189.297] wcscmp (_String1="Miquelon", _String2=".") returned 1 [0189.297] wcscmp (_String1="Miquelon", _String2="..") returned 1 [0189.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db19b8 [0189.297] wcscpy (in: _Dest=0x3db19b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.297] wcscat (in: _Dest=0x3db19b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.297] wcscat (in: _Dest=0x3db19b8, _Source="Miquelon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon" [0189.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db19b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0189.312] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moncton", cAlternateFileName="")) returned 1 [0189.312] wcscmp (_String1="Moncton", _String2=".") returned 1 [0189.312] wcscmp (_String1="Moncton", _String2="..") returned 1 [0189.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1be8 [0189.312] wcscpy (in: _Dest=0x3db1be8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.312] wcscat (in: _Dest=0x3db1be8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.312] wcscat (in: _Dest=0x3db1be8, _Source="Moncton" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton" [0189.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a44 [0189.316] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monterrey", cAlternateFileName="MONTER~1")) returned 1 [0189.316] wcscmp (_String1="Monterrey", _String2=".") returned 1 [0189.316] wcscmp (_String1="Monterrey", _String2="..") returned 1 [0189.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1638 [0189.316] wcscpy (in: _Dest=0x3db1638, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.317] wcscat (in: _Dest=0x3db1638, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.317] wcscat (in: _Dest=0x3db1638, _Source="Monterrey" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey" [0189.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1584 [0189.320] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montevideo", cAlternateFileName="MONTEV~1")) returned 1 [0189.320] wcscmp (_String1="Montevideo", _String2=".") returned 1 [0189.320] wcscmp (_String1="Montevideo", _String2="..") returned 1 [0189.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e680d8 [0189.320] wcscpy (in: _Dest=0x3e680d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.320] wcscat (in: _Dest=0x3e680d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.320] wcscat (in: _Dest=0x3e680d8, _Source="Montevideo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo" [0189.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e680d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0189.322] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montreal", cAlternateFileName="")) returned 1 [0189.322] wcscmp (_String1="Montreal", _String2=".") returned 1 [0189.322] wcscmp (_String1="Montreal", _String2="..") returned 1 [0189.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1328 [0189.322] wcscpy (in: _Dest=0x3db1328, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.322] wcscat (in: _Dest=0x3db1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.322] wcscat (in: _Dest=0x3db1328, _Source="Montreal" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal" [0189.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0189.324] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montserrat", cAlternateFileName="MONTSE~1")) returned 1 [0189.324] wcscmp (_String1="Montserrat", _String2=".") returned 1 [0189.324] wcscmp (_String1="Montserrat", _String2="..") returned 1 [0189.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67ef8 [0189.324] wcscpy (in: _Dest=0x3e67ef8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.324] wcscat (in: _Dest=0x3e67ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.324] wcscat (in: _Dest=0x3e67ef8, _Source="Montserrat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat" [0189.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29fc [0189.325] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nassau", cAlternateFileName="")) returned 1 [0189.325] wcscmp (_String1="Nassau", _String2=".") returned 1 [0189.325] wcscmp (_String1="Nassau", _String2="..") returned 1 [0189.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db16a8 [0189.325] wcscpy (in: _Dest=0x3db16a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.325] wcscat (in: _Dest=0x3db16a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.325] wcscat (in: _Dest=0x3db16a8, _Source="Nassau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau" [0189.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db16a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0189.326] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_York", cAlternateFileName="")) returned 1 [0189.326] wcscmp (_String1="New_York", _String2=".") returned 1 [0189.326] wcscmp (_String1="New_York", _String2="..") returned 1 [0189.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1a28 [0189.326] wcscpy (in: _Dest=0x3db1a28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.326] wcscat (in: _Dest=0x3db1a28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.327] wcscat (in: _Dest=0x3db1a28, _Source="New_York" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York" [0189.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0189.327] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nipigon", cAlternateFileName="")) returned 1 [0189.327] wcscmp (_String1="Nipigon", _String2=".") returned 1 [0189.328] wcscmp (_String1="Nipigon", _String2="..") returned 1 [0189.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1718 [0189.328] wcscpy (in: _Dest=0x3db1718, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.328] wcscat (in: _Dest=0x3db1718, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.328] wcscat (in: _Dest=0x3db1718, _Source="Nipigon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon" [0189.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0189.329] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nome", cAlternateFileName="")) returned 1 [0189.329] wcscmp (_String1="Nome", _String2=".") returned 1 [0189.329] wcscmp (_String1="Nome", _String2="..") returned 1 [0189.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46338 [0189.329] wcscpy (in: _Dest=0x3d46338, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.329] wcscat (in: _Dest=0x3d46338, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.329] wcscat (in: _Dest=0x3d46338, _Source="Nome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome" [0189.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0189.330] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noronha", cAlternateFileName="")) returned 1 [0189.330] wcscmp (_String1="Noronha", _String2=".") returned 1 [0189.330] wcscmp (_String1="Noronha", _String2="..") returned 1 [0189.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1b78 [0189.330] wcscpy (in: _Dest=0x3db1b78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.331] wcscat (in: _Dest=0x3db1b78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.331] wcscat (in: _Dest=0x3db1b78, _Source="Noronha" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha" [0189.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0189.337] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="North_Dakota", cAlternateFileName="NORTH_~1")) returned 1 [0189.337] wcscmp (_String1="North_Dakota", _String2=".") returned 1 [0189.337] wcscmp (_String1="North_Dakota", _String2="..") returned 1 [0189.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68b28 [0189.337] wcscpy (in: _Dest=0x3e68b28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.337] wcscat (in: _Dest=0x3e68b28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.337] wcscat (in: _Dest=0x3e68b28, _Source="North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0189.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e68b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0189.338] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ojinaga", cAlternateFileName="")) returned 1 [0189.338] wcscmp (_String1="Ojinaga", _String2=".") returned 1 [0189.338] wcscmp (_String1="Ojinaga", _String2="..") returned 1 [0189.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1948 [0189.338] wcscpy (in: _Dest=0x3db1948, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.339] wcscat (in: _Dest=0x3db1948, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.339] wcscat (in: _Dest=0x3db1948, _Source="Ojinaga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga" [0189.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0189.340] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panama", cAlternateFileName="")) returned 1 [0189.340] wcscmp (_String1="Panama", _String2=".") returned 1 [0189.340] wcscmp (_String1="Panama", _String2="..") returned 1 [0189.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1a98 [0189.340] wcscpy (in: _Dest=0x3db1a98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.340] wcscat (in: _Dest=0x3db1a98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.340] wcscat (in: _Dest=0x3db1a98, _Source="Panama" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama" [0189.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0189.341] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pangnirtung", cAlternateFileName="PANGNI~1")) returned 1 [0189.341] wcscmp (_String1="Pangnirtung", _String2=".") returned 1 [0189.341] wcscmp (_String1="Pangnirtung", _String2="..") returned 1 [0189.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68ab0 [0189.341] wcscpy (in: _Dest=0x3e68ab0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.341] wcscat (in: _Dest=0x3e68ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.341] wcscat (in: _Dest=0x3e68ab0, _Source="Pangnirtung" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" [0189.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c98 [0189.342] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paramaribo", cAlternateFileName="PARAMA~1")) returned 1 [0189.342] wcscmp (_String1="Paramaribo", _String2=".") returned 1 [0189.342] wcscmp (_String1="Paramaribo", _String2="..") returned 1 [0189.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e682b8 [0189.343] wcscpy (in: _Dest=0x3e682b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.343] wcscat (in: _Dest=0x3e682b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.343] wcscat (in: _Dest=0x3e682b8, _Source="Paramaribo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo" [0189.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e682b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0189.344] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phoenix", cAlternateFileName="")) returned 1 [0189.344] wcscmp (_String1="Phoenix", _String2=".") returned 1 [0189.344] wcscmp (_String1="Phoenix", _String2="..") returned 1 [0189.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1cc8 [0189.344] wcscpy (in: _Dest=0x3db1cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.344] wcscat (in: _Dest=0x3db1cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.344] wcscat (in: _Dest=0x3db1cc8, _Source="Phoenix" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix" [0189.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0189.345] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port-au-Prince", cAlternateFileName="PORT-A~1")) returned 1 [0189.345] wcscmp (_String1="Port-au-Prince", _String2=".") returned 1 [0189.345] wcscmp (_String1="Port-au-Prince", _String2="..") returned 1 [0189.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3dc5108 [0189.345] wcscpy (in: _Dest=0x3dc5108, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.345] wcscat (in: _Dest=0x3dc5108, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.345] wcscat (in: _Dest=0x3dc5108, _Source="Port-au-Prince" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" [0189.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dc5108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a24 [0189.346] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto_Velho", cAlternateFileName="PORTO_~1")) returned 1 [0189.346] wcscmp (_String1="Porto_Velho", _String2=".") returned 1 [0189.346] wcscmp (_String1="Porto_Velho", _String2="..") returned 1 [0189.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e67e08 [0189.346] wcscpy (in: _Dest=0x3e67e08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.346] wcscat (in: _Dest=0x3e67e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.346] wcscat (in: _Dest=0x3e67e08, _Source="Porto_Velho" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" [0189.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca4 [0189.851] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_of_Spain", cAlternateFileName="PORT_O~1")) returned 1 [0189.851] wcscmp (_String1="Port_of_Spain", _String2=".") returned 1 [0189.851] wcscmp (_String1="Port_of_Spain", _String2="..") returned 1 [0189.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68498 [0189.851] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0189.851] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0189.851] wcscat (in: _Dest=0x3e68498, _Source="Port_of_Spain" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" [0192.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b04 [0192.606] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Puerto_Rico", cAlternateFileName="PUERTO~1")) returned 1 [0192.606] wcscmp (_String1="Puerto_Rico", _String2=".") returned 1 [0192.606] wcscmp (_String1="Puerto_Rico", _String2="..") returned 1 [0192.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68b28 [0192.606] wcscpy (in: _Dest=0x3e68b28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.606] wcscat (in: _Dest=0x3e68b28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.606] wcscat (in: _Dest=0x3e68b28, _Source="Puerto_Rico" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" [0192.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4 [0192.608] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rainy_River", cAlternateFileName="RAINY_~1")) returned 1 [0192.608] wcscmp (_String1="Rainy_River", _String2=".") returned 1 [0192.608] wcscmp (_String1="Rainy_River", _String2="..") returned 1 [0192.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e682b8 [0192.608] wcscpy (in: _Dest=0x3e682b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.608] wcscat (in: _Dest=0x3e682b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.608] wcscat (in: _Dest=0x3e682b8, _Source="Rainy_River" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River" [0192.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e682b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0192.609] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rankin_Inlet", cAlternateFileName="RANKIN~1")) returned 1 [0192.609] wcscmp (_String1="Rankin_Inlet", _String2=".") returned 1 [0192.609] wcscmp (_String1="Rankin_Inlet", _String2="..") returned 1 [0192.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e68ab0 [0192.609] wcscpy (in: _Dest=0x3e68ab0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.609] wcscat (in: _Dest=0x3e68ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.609] wcscat (in: _Dest=0x3e68ab0, _Source="Rankin_Inlet" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" [0192.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0192.610] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recife", cAlternateFileName="")) returned 1 [0192.610] wcscmp (_String1="Recife", _String2=".") returned 1 [0192.610] wcscmp (_String1="Recife", _String2="..") returned 1 [0192.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1b78 [0192.610] wcscpy (in: _Dest=0x3db1b78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.610] wcscat (in: _Dest=0x3db1b78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.610] wcscat (in: _Dest=0x3db1b78, _Source="Recife" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife" [0192.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e8 [0192.611] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Regina", cAlternateFileName="")) returned 1 [0192.612] wcscmp (_String1="Regina", _String2=".") returned 1 [0192.612] wcscmp (_String1="Regina", _String2="..") returned 1 [0192.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1a28 [0192.612] wcscpy (in: _Dest=0x3db1a28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.612] wcscat (in: _Dest=0x3db1a28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.612] wcscat (in: _Dest=0x3db1a28, _Source="Regina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina" [0192.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0192.613] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resolute", cAlternateFileName="")) returned 1 [0192.613] wcscmp (_String1="Resolute", _String2=".") returned 1 [0192.613] wcscmp (_String1="Resolute", _String2="..") returned 1 [0192.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1718 [0192.613] wcscpy (in: _Dest=0x3db1718, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.613] wcscat (in: _Dest=0x3db1718, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.613] wcscat (in: _Dest=0x3db1718, _Source="Resolute" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute" [0192.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0192.614] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Branco", cAlternateFileName="RIO_BR~1")) returned 1 [0192.614] wcscmp (_String1="Rio_Branco", _String2=".") returned 1 [0192.614] wcscmp (_String1="Rio_Branco", _String2="..") returned 1 [0192.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67ef8 [0192.614] wcscpy (in: _Dest=0x3e67ef8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.614] wcscat (in: _Dest=0x3e67ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.614] wcscat (in: _Dest=0x3e67ef8, _Source="Rio_Branco" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" [0192.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15bc [0192.615] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santarem", cAlternateFileName="")) returned 1 [0192.615] wcscmp (_String1="Santarem", _String2=".") returned 1 [0192.615] wcscmp (_String1="Santarem", _String2="..") returned 1 [0192.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1948 [0192.615] wcscpy (in: _Dest=0x3db1948, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.615] wcscat (in: _Dest=0x3db1948, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.616] wcscat (in: _Dest=0x3db1948, _Source="Santarem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem" [0192.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0192.616] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santa_Isabel", cAlternateFileName="SANTA_~1")) returned 1 [0192.616] wcscmp (_String1="Santa_Isabel", _String2=".") returned 1 [0192.616] wcscmp (_String1="Santa_Isabel", _String2="..") returned 1 [0192.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e680d8 [0192.617] wcscpy (in: _Dest=0x3e680d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.617] wcscat (in: _Dest=0x3e680d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.617] wcscat (in: _Dest=0x3e680d8, _Source="Santa_Isabel" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" [0192.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e680d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0192.618] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santiago", cAlternateFileName="")) returned 1 [0192.618] wcscmp (_String1="Santiago", _String2=".") returned 1 [0192.618] wcscmp (_String1="Santiago", _String2="..") returned 1 [0192.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1a98 [0192.618] wcscpy (in: _Dest=0x3db1a98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.618] wcscat (in: _Dest=0x3db1a98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.618] wcscat (in: _Dest=0x3db1a98, _Source="Santiago" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago" [0192.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2718 [0192.619] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santo_Domingo", cAlternateFileName="SANTO_~1")) returned 1 [0192.619] wcscmp (_String1="Santo_Domingo", _String2=".") returned 1 [0192.619] wcscmp (_String1="Santo_Domingo", _String2="..") returned 1 [0192.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67e08 [0192.619] wcscpy (in: _Dest=0x3e67e08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.620] wcscat (in: _Dest=0x3e67e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.620] wcscat (in: _Dest=0x3e67e08, _Source="Santo_Domingo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" [0192.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0192.621] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Paulo", cAlternateFileName="SAO_PA~1")) returned 1 [0192.621] wcscmp (_String1="Sao_Paulo", _String2=".") returned 1 [0192.621] wcscmp (_String1="Sao_Paulo", _String2="..") returned 1 [0192.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1328 [0192.621] wcscpy (in: _Dest=0x3db1328, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.621] wcscat (in: _Dest=0x3db1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.621] wcscat (in: _Dest=0x3db1328, _Source="Sao_Paulo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" [0192.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0192.623] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scoresbysund", cAlternateFileName="SCORES~1")) returned 1 [0192.623] wcscmp (_String1="Scoresbysund", _String2=".") returned 1 [0192.623] wcscmp (_String1="Scoresbysund", _String2="..") returned 1 [0192.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32ca0 [0192.623] wcscpy (in: _Dest=0x3f32ca0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.623] wcscat (in: _Dest=0x3f32ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.623] wcscat (in: _Dest=0x3f32ca0, _Source="Scoresbysund" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" [0192.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0192.624] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sitka", cAlternateFileName="")) returned 1 [0192.624] wcscmp (_String1="Sitka", _String2=".") returned 1 [0192.624] wcscmp (_String1="Sitka", _String2="..") returned 1 [0192.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46338 [0192.624] wcscpy (in: _Dest=0x3d46338, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.624] wcscat (in: _Dest=0x3d46338, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.624] wcscat (in: _Dest=0x3d46338, _Source="Sitka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka" [0192.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba4 [0192.626] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Johns", cAlternateFileName="")) returned 1 [0192.626] wcscmp (_String1="St_Johns", _String2=".") returned 1 [0192.626] wcscmp (_String1="St_Johns", _String2="..") returned 1 [0192.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1638 [0192.626] wcscpy (in: _Dest=0x3db1638, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.626] wcscat (in: _Dest=0x3db1638, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.626] wcscat (in: _Dest=0x3db1638, _Source="St_Johns" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns" [0192.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0192.628] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Kitts", cAlternateFileName="")) returned 1 [0192.628] wcscmp (_String1="St_Kitts", _String2=".") returned 1 [0192.628] wcscmp (_String1="St_Kitts", _String2="..") returned 1 [0192.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1cc8 [0192.628] wcscpy (in: _Dest=0x3db1cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.628] wcscat (in: _Dest=0x3db1cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.628] wcscat (in: _Dest=0x3db1cc8, _Source="St_Kitts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts" [0192.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2670 [0192.629] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Lucia", cAlternateFileName="")) returned 1 [0192.629] wcscmp (_String1="St_Lucia", _String2=".") returned 1 [0192.629] wcscmp (_String1="St_Lucia", _String2="..") returned 1 [0192.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db16a8 [0192.630] wcscpy (in: _Dest=0x3db16a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.630] wcscat (in: _Dest=0x3db16a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.630] wcscat (in: _Dest=0x3db16a8, _Source="St_Lucia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia" [0192.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db16a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c94 [0192.631] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Thomas", cAlternateFileName="ST_THO~1")) returned 1 [0192.631] wcscmp (_String1="St_Thomas", _String2=".") returned 1 [0192.631] wcscmp (_String1="St_Thomas", _String2="..") returned 1 [0192.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1be8 [0192.631] wcscpy (in: _Dest=0x3db1be8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.631] wcscat (in: _Dest=0x3db1be8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.631] wcscat (in: _Dest=0x3db1be8, _Source="St_Thomas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas" [0192.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a2c [0192.632] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Vincent", cAlternateFileName="ST_VIN~1")) returned 1 [0192.633] wcscmp (_String1="St_Vincent", _String2=".") returned 1 [0192.633] wcscmp (_String1="St_Vincent", _String2="..") returned 1 [0192.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32b38 [0192.633] wcscpy (in: _Dest=0x3f32b38, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.633] wcscat (in: _Dest=0x3f32b38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.633] wcscat (in: _Dest=0x3f32b38, _Source="St_Vincent" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent" [0192.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0192.634] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swift_Current", cAlternateFileName="SWIFT_~1")) returned 1 [0192.634] wcscmp (_String1="Swift_Current", _String2=".") returned 1 [0192.634] wcscmp (_String1="Swift_Current", _String2="..") returned 1 [0192.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32d90 [0192.634] wcscpy (in: _Dest=0x3f32d90, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.634] wcscat (in: _Dest=0x3f32d90, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.634] wcscat (in: _Dest=0x3f32d90, _Source="Swift_Current" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current" [0192.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0192.636] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tegucigalpa", cAlternateFileName="TEGUCI~1")) returned 1 [0192.636] wcscmp (_String1="Tegucigalpa", _String2=".") returned 1 [0192.636] wcscmp (_String1="Tegucigalpa", _String2="..") returned 1 [0192.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f329d0 [0192.636] wcscpy (in: _Dest=0x3f329d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.636] wcscat (in: _Dest=0x3f329d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.636] wcscat (in: _Dest=0x3f329d0, _Source="Tegucigalpa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" [0192.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f329d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0192.641] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thule", cAlternateFileName="")) returned 1 [0192.642] wcscmp (_String1="Thule", _String2=".") returned 1 [0192.642] wcscmp (_String1="Thule", _String2="..") returned 1 [0192.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d465a8 [0192.642] wcscpy (in: _Dest=0x3d465a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.642] wcscat (in: _Dest=0x3d465a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.642] wcscat (in: _Dest=0x3d465a8, _Source="Thule" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule" [0192.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d465a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0192.643] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thunder_Bay", cAlternateFileName="THUNDE~1")) returned 1 [0192.643] wcscmp (_String1="Thunder_Bay", _String2=".") returned 1 [0192.643] wcscmp (_String1="Thunder_Bay", _String2="..") returned 1 [0192.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f33330 [0192.643] wcscpy (in: _Dest=0x3f33330, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.643] wcscat (in: _Dest=0x3f33330, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.643] wcscat (in: _Dest=0x3f33330, _Source="Thunder_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" [0192.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24dc [0192.645] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tijuana", cAlternateFileName="")) returned 1 [0192.645] wcscmp (_String1="Tijuana", _String2=".") returned 1 [0192.645] wcscmp (_String1="Tijuana", _String2="..") returned 1 [0192.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db19b8 [0192.645] wcscpy (in: _Dest=0x3db19b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.645] wcscat (in: _Dest=0x3db19b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.645] wcscat (in: _Dest=0x3db19b8, _Source="Tijuana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana" [0192.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db19b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a08 [0192.647] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Toronto", cAlternateFileName="")) returned 1 [0192.647] wcscmp (_String1="Toronto", _String2=".") returned 1 [0192.647] wcscmp (_String1="Toronto", _String2="..") returned 1 [0192.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1b08 [0192.647] wcscpy (in: _Dest=0x3db1b08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.647] wcscat (in: _Dest=0x3db1b08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.647] wcscat (in: _Dest=0x3db1b08, _Source="Toronto" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto" [0192.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0192.648] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tortola", cAlternateFileName="")) returned 1 [0192.648] wcscmp (_String1="Tortola", _String2=".") returned 1 [0192.648] wcscmp (_String1="Tortola", _String2="..") returned 1 [0192.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x84032d0 [0192.648] wcscpy (in: _Dest=0x84032d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.648] wcscat (in: _Dest=0x84032d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.649] wcscat (in: _Dest=0x84032d0, _Source="Tortola" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola" [0192.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84032d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0192.650] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vancouver", cAlternateFileName="VANCOU~1")) returned 1 [0192.650] wcscmp (_String1="Vancouver", _String2=".") returned 1 [0192.650] wcscmp (_String1="Vancouver", _String2="..") returned 1 [0192.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8403260 [0192.650] wcscpy (in: _Dest=0x8403260, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.650] wcscat (in: _Dest=0x8403260, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.650] wcscat (in: _Dest=0x8403260, _Source="Vancouver" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver" [0192.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0192.655] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whitehorse", cAlternateFileName="WHITEH~1")) returned 1 [0192.655] wcscmp (_String1="Whitehorse", _String2=".") returned 1 [0192.655] wcscmp (_String1="Whitehorse", _String2="..") returned 1 [0192.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32430 [0192.655] wcscpy (in: _Dest=0x3f32430, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.655] wcscat (in: _Dest=0x3f32430, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.655] wcscat (in: _Dest=0x3f32430, _Source="Whitehorse" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse" [0192.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0192.998] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winnipeg", cAlternateFileName="")) returned 1 [0192.998] wcscmp (_String1="Winnipeg", _String2=".") returned 1 [0192.998] wcscmp (_String1="Winnipeg", _String2="..") returned 1 [0192.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x84036c0 [0192.998] wcscpy (in: _Dest=0x84036c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0192.998] wcscat (in: _Dest=0x84036c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0192.998] wcscat (in: _Dest=0x84036c0, _Source="Winnipeg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg" [0194.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84036c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0194.023] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutat", cAlternateFileName="")) returned 1 [0194.023] wcscmp (_String1="Yakutat", _String2=".") returned 1 [0194.023] wcscmp (_String1="Yakutat", _String2="..") returned 1 [0194.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x84029a0 [0194.023] wcscpy (in: _Dest=0x84029a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0194.023] wcscat (in: _Dest=0x84029a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0194.023] wcscat (in: _Dest=0x84029a0, _Source="Yakutat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat" [0194.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84029a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0194.024] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="YELLOW~1")) returned 1 [0194.025] wcscmp (_String1="Yellowknife", _String2=".") returned 1 [0194.025] wcscmp (_String1="Yellowknife", _String2="..") returned 1 [0194.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68948 [0194.025] wcscpy (in: _Dest=0x3e68948, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0194.025] wcscat (in: _Dest=0x3e68948, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0194.025] wcscat (in: _Dest=0x3e68948, _Source="Yellowknife" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife" [0194.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0194.026] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="YELLOW~1")) returned 0 [0195.478] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0195.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100d40) returned 1 [0195.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5b28) returned 1 [0195.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 Thread: id = 4109 os_tid = 0x10bc [0170.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x2fce780 [0170.068] wcscpy (in: _Dest=0x2fce780, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0170.068] wcscat (in: _Dest=0x2fce780, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0170.068] wcscat (in: _Dest=0x2fce780, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\*" [0170.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fedf8 [0170.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54c88 [0172.695] wcscmp (_String1=".", _String2=".") returned 0 [0172.695] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.695] wcscmp (_String1="..", _String2=".") returned 1 [0172.695] wcscmp (_String1="..", _String2="..") returned 0 [0172.695] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casey", cAlternateFileName="")) returned 1 [0172.695] wcscmp (_String1="Casey", _String2=".") returned 1 [0172.695] wcscmp (_String1="Casey", _String2="..") returned 1 [0172.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f337b8 [0172.695] wcscpy (in: _Dest=0x3f337b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0172.695] wcscat (in: _Dest=0x3f337b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0172.695] wcscat (in: _Dest=0x3f337b8, _Source="Casey" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" [0174.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f337b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0174.258] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Davis", cAlternateFileName="")) returned 1 [0174.258] wcscmp (_String1="Davis", _String2=".") returned 1 [0174.258] wcscmp (_String1="Davis", _String2="..") returned 1 [0174.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a038 [0174.258] wcscpy (in: _Dest=0x3f3a038, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0174.258] wcscat (in: _Dest=0x3f3a038, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0174.258] wcscat (in: _Dest=0x3f3a038, _Source="Davis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" [0174.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2914 [0174.259] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="DumontDUrville", cAlternateFileName="DUMONT~1")) returned 1 [0174.259] wcscmp (_String1="DumontDUrville", _String2=".") returned 1 [0174.259] wcscmp (_String1="DumontDUrville", _String2="..") returned 1 [0174.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e24640 [0174.259] wcscpy (in: _Dest=0x3e24640, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0174.259] wcscat (in: _Dest=0x3e24640, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0174.259] wcscat (in: _Dest=0x3e24640, _Source="DumontDUrville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" [0174.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e24640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0174.260] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macquarie", cAlternateFileName="MACQUA~1")) returned 1 [0174.260] wcscmp (_String1="Macquarie", _String2=".") returned 1 [0174.260] wcscmp (_String1="Macquarie", _String2="..") returned 1 [0174.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f32700 [0174.260] wcscpy (in: _Dest=0x3f32700, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0174.260] wcscat (in: _Dest=0x3f32700, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0174.260] wcscat (in: _Dest=0x3f32700, _Source="Macquarie" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" [0174.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2528 [0174.261] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mawson", cAlternateFileName="")) returned 1 [0174.261] wcscmp (_String1="Mawson", _String2=".") returned 1 [0174.261] wcscmp (_String1="Mawson", _String2="..") returned 1 [0174.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39e78 [0174.261] wcscpy (in: _Dest=0x3f39e78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0174.261] wcscat (in: _Dest=0x3f39e78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0174.261] wcscat (in: _Dest=0x3f39e78, _Source="Mawson" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" [0174.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a0c [0174.262] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="McMurdo", cAlternateFileName="")) returned 1 [0174.262] wcscmp (_String1="McMurdo", _String2=".") returned 1 [0174.262] wcscmp (_String1="McMurdo", _String2="..") returned 1 [0174.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f33060 [0174.262] wcscpy (in: _Dest=0x3f33060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0174.262] wcscat (in: _Dest=0x3f33060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0174.262] wcscat (in: _Dest=0x3f33060, _Source="McMurdo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" [0174.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a10 [0174.263] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palmer", cAlternateFileName="")) returned 1 [0174.263] wcscmp (_String1="Palmer", _String2=".") returned 1 [0174.263] wcscmp (_String1="Palmer", _String2="..") returned 1 [0174.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a268 [0174.264] wcscpy (in: _Dest=0x3f3a268, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0174.264] wcscat (in: _Dest=0x3f3a268, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0174.264] wcscat (in: _Dest=0x3f3a268, _Source="Palmer" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" [0174.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x271c [0174.264] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rothera", cAlternateFileName="")) returned 1 [0174.265] wcscmp (_String1="Rothera", _String2=".") returned 1 [0174.265] wcscmp (_String1="Rothera", _String2="..") returned 1 [0174.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32598 [0174.265] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0174.265] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0174.265] wcscat (in: _Dest=0x3f32598, _Source="Rothera" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" [0174.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2720 [0174.266] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Syowa", cAlternateFileName="")) returned 1 [0174.266] wcscmp (_String1="Syowa", _String2=".") returned 1 [0174.266] wcscmp (_String1="Syowa", _String2="..") returned 1 [0174.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39b68 [0174.266] wcscpy (in: _Dest=0x3f39b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0174.266] wcscat (in: _Dest=0x3f39b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0174.266] wcscat (in: _Dest=0x3f39b68, _Source="Syowa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" [0174.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2724 [0174.267] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 1 [0174.267] wcscmp (_String1="Vostok", _String2=".") returned 1 [0174.267] wcscmp (_String1="Vostok", _String2="..") returned 1 [0174.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f398c8 [0174.267] wcscpy (in: _Dest=0x3f398c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0174.267] wcscat (in: _Dest=0x3f398c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0174.267] wcscat (in: _Dest=0x3f398c8, _Source="Vostok" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" [0174.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f398c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2728 [0174.268] FindNextFileW (in: hFindFile=0x3e54c88, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 0 [0174.268] FindClose (in: hFindFile=0x3e54c88 | out: hFindFile=0x3e54c88) returned 1 [0174.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fedf8) returned 1 [0174.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce780) returned 1 [0174.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcea58) returned 1 Thread: id = 4110 os_tid = 0x10c0 [0170.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6a88 [0170.069] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0170.069] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0170.069] wcscat (in: _Dest=0x2fe6a88, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\*" [0170.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0170.069] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55608 [0171.604] wcscmp (_String1=".", _String2=".") returned 0 [0171.604] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.607] wcscmp (_String1="..", _String2=".") returned 1 [0171.607] wcscmp (_String1="..", _String2="..") returned 0 [0171.607] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aden", cAlternateFileName="")) returned 1 [0171.607] wcscmp (_String1="Aden", _String2=".") returned 1 [0171.607] wcscmp (_String1="Aden", _String2="..") returned 1 [0171.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0cc8 [0171.607] wcscpy (in: _Dest=0x2fe0cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.607] wcscat (in: _Dest=0x2fe0cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.607] wcscat (in: _Dest=0x2fe0cc8, _Source="Aden" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden" [0171.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe0cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a4c [0171.608] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Almaty", cAlternateFileName="")) returned 1 [0171.608] wcscmp (_String1="Almaty", _String2=".") returned 1 [0171.608] wcscmp (_String1="Almaty", _String2="..") returned 1 [0171.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d470a0 [0171.608] wcscpy (in: _Dest=0x3d470a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.608] wcscat (in: _Dest=0x3d470a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.608] wcscat (in: _Dest=0x3d470a0, _Source="Almaty" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty" [0171.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d470a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658 [0171.611] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amman", cAlternateFileName="")) returned 1 [0171.611] wcscmp (_String1="Amman", _String2=".") returned 1 [0171.611] wcscmp (_String1="Amman", _String2="..") returned 1 [0171.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d46950 [0171.611] wcscpy (in: _Dest=0x3d46950, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.611] wcscat (in: _Dest=0x3d46950, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.611] wcscat (in: _Dest=0x3d46950, _Source="Amman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman" [0171.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c78 [0171.612] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anadyr", cAlternateFileName="")) returned 1 [0171.612] wcscmp (_String1="Anadyr", _String2=".") returned 1 [0171.612] wcscmp (_String1="Anadyr", _String2="..") returned 1 [0171.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d468e8 [0171.612] wcscpy (in: _Dest=0x3d468e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.612] wcscat (in: _Dest=0x3d468e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.612] wcscat (in: _Dest=0x3d468e8, _Source="Anadyr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" [0171.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d468e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0171.613] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtau", cAlternateFileName="")) returned 1 [0171.613] wcscmp (_String1="Aqtau", _String2=".") returned 1 [0171.613] wcscmp (_String1="Aqtau", _String2="..") returned 1 [0171.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d46880 [0171.613] wcscpy (in: _Dest=0x3d46880, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.613] wcscat (in: _Dest=0x3d46880, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.613] wcscat (in: _Dest=0x3d46880, _Source="Aqtau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" [0171.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b4c [0171.614] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtobe", cAlternateFileName="")) returned 1 [0171.614] wcscmp (_String1="Aqtobe", _String2=".") returned 1 [0171.614] wcscmp (_String1="Aqtobe", _String2="..") returned 1 [0171.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d46818 [0171.614] wcscpy (in: _Dest=0x3d46818, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.614] wcscat (in: _Dest=0x3d46818, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.614] wcscat (in: _Dest=0x3d46818, _Source="Aqtobe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" [0171.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0171.615] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ashgabat", cAlternateFileName="")) returned 1 [0171.615] wcscmp (_String1="Ashgabat", _String2=".") returned 1 [0171.615] wcscmp (_String1="Ashgabat", _String2="..") returned 1 [0171.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d467b0 [0171.615] wcscpy (in: _Dest=0x3d467b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.615] wcscat (in: _Dest=0x3d467b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.616] wcscat (in: _Dest=0x3d467b0, _Source="Ashgabat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" [0171.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d467b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cac [0171.616] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baghdad", cAlternateFileName="")) returned 1 [0171.616] wcscmp (_String1="Baghdad", _String2=".") returned 1 [0171.616] wcscmp (_String1="Baghdad", _String2="..") returned 1 [0171.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46748 [0171.617] wcscpy (in: _Dest=0x3d46748, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.617] wcscat (in: _Dest=0x3d46748, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.617] wcscat (in: _Dest=0x3d46748, _Source="Baghdad" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" [0171.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d40 [0171.617] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahrain", cAlternateFileName="")) returned 1 [0171.618] wcscmp (_String1="Bahrain", _String2=".") returned 1 [0171.618] wcscmp (_String1="Bahrain", _String2="..") returned 1 [0171.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d466e0 [0171.618] wcscpy (in: _Dest=0x3d466e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.618] wcscat (in: _Dest=0x3d466e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.618] wcscat (in: _Dest=0x3d466e0, _Source="Bahrain" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" [0171.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d466e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d50 [0171.619] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baku", cAlternateFileName="")) returned 1 [0171.619] wcscmp (_String1="Baku", _String2=".") returned 1 [0171.619] wcscmp (_String1="Baku", _String2="..") returned 1 [0171.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe68a8 [0171.619] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.619] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.619] wcscat (in: _Dest=0x2fe68a8, _Source="Baku" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku" [0171.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d44 [0171.620] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangkok", cAlternateFileName="")) returned 1 [0171.620] wcscmp (_String1="Bangkok", _String2=".") returned 1 [0171.620] wcscmp (_String1="Bangkok", _String2="..") returned 1 [0171.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46678 [0171.620] wcscpy (in: _Dest=0x3d46678, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.620] wcscat (in: _Dest=0x3d46678, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.620] wcscat (in: _Dest=0x3d46678, _Source="Bangkok" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" [0171.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b38 [0171.621] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beirut", cAlternateFileName="")) returned 1 [0171.621] wcscmp (_String1="Beirut", _String2=".") returned 1 [0171.621] wcscmp (_String1="Beirut", _String2="..") returned 1 [0171.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d46610 [0171.621] wcscpy (in: _Dest=0x3d46610, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.621] wcscat (in: _Dest=0x3d46610, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.621] wcscat (in: _Dest=0x3d46610, _Source="Beirut" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut" [0171.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b70 [0171.622] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bishkek", cAlternateFileName="")) returned 1 [0171.622] wcscmp (_String1="Bishkek", _String2=".") returned 1 [0171.622] wcscmp (_String1="Bishkek", _String2="..") returned 1 [0171.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d465a8 [0171.622] wcscpy (in: _Dest=0x3d465a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.622] wcscat (in: _Dest=0x3d465a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.622] wcscat (in: _Dest=0x3d465a8, _Source="Bishkek" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" [0171.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d465a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b74 [0171.623] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brunei", cAlternateFileName="")) returned 1 [0171.623] wcscmp (_String1="Brunei", _String2=".") returned 1 [0171.623] wcscmp (_String1="Brunei", _String2="..") returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d46540 [0171.623] wcscpy (in: _Dest=0x3d46540, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.623] wcscat (in: _Dest=0x3d46540, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.623] wcscat (in: _Dest=0x3d46540, _Source="Brunei" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei" [0171.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0171.624] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Choibalsan", cAlternateFileName="CHOIBA~1")) returned 1 [0171.624] wcscmp (_String1="Choibalsan", _String2=".") returned 1 [0171.624] wcscmp (_String1="Choibalsan", _String2="..") returned 1 [0171.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39548 [0171.624] wcscpy (in: _Dest=0x3f39548, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.624] wcscat (in: _Dest=0x3f39548, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.625] wcscat (in: _Dest=0x3f39548, _Source="Choibalsan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" [0171.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb0 [0171.625] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chongqing", cAlternateFileName="CHONGQ~1")) returned 1 [0171.625] wcscmp (_String1="Chongqing", _String2=".") returned 1 [0171.625] wcscmp (_String1="Chongqing", _String2="..") returned 1 [0171.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39a18 [0171.626] wcscpy (in: _Dest=0x3f39a18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.626] wcscat (in: _Dest=0x3f39a18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.626] wcscat (in: _Dest=0x3f39a18, _Source="Chongqing" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" [0171.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb4 [0171.627] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Colombo", cAlternateFileName="")) returned 1 [0171.627] wcscmp (_String1="Colombo", _String2=".") returned 1 [0171.627] wcscmp (_String1="Colombo", _String2="..") returned 1 [0171.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46470 [0171.627] wcscpy (in: _Dest=0x3d46470, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.627] wcscat (in: _Dest=0x3d46470, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.627] wcscat (in: _Dest=0x3d46470, _Source="Colombo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo" [0171.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d4c [0171.627] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Damascus", cAlternateFileName="")) returned 1 [0171.627] wcscmp (_String1="Damascus", _String2=".") returned 1 [0171.628] wcscmp (_String1="Damascus", _String2="..") returned 1 [0171.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46408 [0171.628] wcscpy (in: _Dest=0x3d46408, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.628] wcscat (in: _Dest=0x3d46408, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.628] wcscat (in: _Dest=0x3d46408, _Source="Damascus" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus" [0171.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cdc [0171.629] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dhaka", cAlternateFileName="")) returned 1 [0171.629] wcscmp (_String1="Dhaka", _String2=".") returned 1 [0171.629] wcscmp (_String1="Dhaka", _String2="..") returned 1 [0171.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d463a0 [0171.629] wcscpy (in: _Dest=0x3d463a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.629] wcscat (in: _Dest=0x3d463a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.629] wcscat (in: _Dest=0x3d463a0, _Source="Dhaka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" [0171.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d463a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce0 [0171.630] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dili", cAlternateFileName="")) returned 1 [0171.630] wcscmp (_String1="Dili", _String2=".") returned 1 [0171.630] wcscmp (_String1="Dili", _String2="..") returned 1 [0171.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7148 [0171.630] wcscpy (in: _Dest=0x2fe7148, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.630] wcscat (in: _Dest=0x2fe7148, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.630] wcscat (in: _Dest=0x2fe7148, _Source="Dili" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili" [0171.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce4 [0171.631] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dubai", cAlternateFileName="")) returned 1 [0171.631] wcscmp (_String1="Dubai", _String2=".") returned 1 [0171.631] wcscmp (_String1="Dubai", _String2="..") returned 1 [0171.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d462d0 [0171.631] wcscpy (in: _Dest=0x3d462d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.631] wcscat (in: _Dest=0x3d462d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.631] wcscat (in: _Dest=0x3d462d0, _Source="Dubai" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai" [0171.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d462d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cec [0171.632] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dushanbe", cAlternateFileName="")) returned 1 [0171.632] wcscmp (_String1="Dushanbe", _String2=".") returned 1 [0171.632] wcscmp (_String1="Dushanbe", _String2="..") returned 1 [0171.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46268 [0171.632] wcscpy (in: _Dest=0x3d46268, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.632] wcscat (in: _Dest=0x3d46268, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.632] wcscat (in: _Dest=0x3d46268, _Source="Dushanbe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" [0171.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf0 [0171.633] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaza", cAlternateFileName="")) returned 1 [0171.633] wcscmp (_String1="Gaza", _String2=".") returned 1 [0171.633] wcscmp (_String1="Gaza", _String2="..") returned 1 [0171.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe71a8 [0171.633] wcscpy (in: _Dest=0x2fe71a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.633] wcscat (in: _Dest=0x2fe71a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.633] wcscat (in: _Dest=0x2fe71a8, _Source="Gaza" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza" [0171.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe71a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d38 [0171.634] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harbin", cAlternateFileName="")) returned 1 [0171.634] wcscmp (_String1="Harbin", _String2=".") returned 1 [0171.634] wcscmp (_String1="Harbin", _String2="..") returned 1 [0171.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d46200 [0171.634] wcscpy (in: _Dest=0x3d46200, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.634] wcscat (in: _Dest=0x3d46200, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.634] wcscat (in: _Dest=0x3d46200, _Source="Harbin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin" [0171.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d48 [0171.635] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hebron", cAlternateFileName="")) returned 1 [0171.635] wcscmp (_String1="Hebron", _String2=".") returned 1 [0171.635] wcscmp (_String1="Hebron", _String2="..") returned 1 [0171.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d46198 [0171.635] wcscpy (in: _Dest=0x3d46198, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.635] wcscat (in: _Dest=0x3d46198, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.635] wcscat (in: _Dest=0x3d46198, _Source="Hebron" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron" [0171.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0171.636] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hong_Kong", cAlternateFileName="HONG_K~1")) returned 1 [0171.636] wcscmp (_String1="Hong_Kong", _String2=".") returned 1 [0171.636] wcscmp (_String1="Hong_Kong", _String2="..") returned 1 [0171.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39af8 [0171.636] wcscpy (in: _Dest=0x3f39af8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.636] wcscat (in: _Dest=0x3f39af8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.636] wcscat (in: _Dest=0x3f39af8, _Source="Hong_Kong" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" [0171.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x242c [0171.637] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hovd", cAlternateFileName="")) returned 1 [0171.637] wcscmp (_String1="Hovd", _String2=".") returned 1 [0171.637] wcscmp (_String1="Hovd", _String2="..") returned 1 [0171.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d28 [0171.637] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.637] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.637] wcscat (in: _Dest=0x2fe6d28, _Source="Hovd" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd" [0171.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf4 [0171.638] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ho_Chi_Minh", cAlternateFileName="HO_CHI~1")) returned 1 [0171.638] wcscmp (_String1="Ho_Chi_Minh", _String2=".") returned 1 [0171.638] wcscmp (_String1="Ho_Chi_Minh", _String2="..") returned 1 [0171.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39468 [0171.638] wcscpy (in: _Dest=0x3f39468, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.638] wcscat (in: _Dest=0x3f39468, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.638] wcscat (in: _Dest=0x3f39468, _Source="Ho_Chi_Minh" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" [0171.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d3c [0171.639] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Irkutsk", cAlternateFileName="")) returned 1 [0171.639] wcscmp (_String1="Irkutsk", _String2=".") returned 1 [0171.639] wcscmp (_String1="Irkutsk", _String2="..") returned 1 [0171.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46130 [0171.639] wcscpy (in: _Dest=0x3d46130, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0171.639] wcscat (in: _Dest=0x3d46130, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0171.639] wcscat (in: _Dest=0x3d46130, _Source="Irkutsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" [0171.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b0 [0172.620] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jakarta", cAlternateFileName="")) returned 1 [0172.620] wcscmp (_String1="Jakarta", _String2=".") returned 1 [0172.620] wcscmp (_String1="Jakarta", _String2="..") returned 1 [0172.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46950 [0172.620] wcscpy (in: _Dest=0x3d46950, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.620] wcscat (in: _Dest=0x3d46950, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.620] wcscat (in: _Dest=0x3d46950, _Source="Jakarta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" [0180.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e8 [0180.142] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jayapura", cAlternateFileName="")) returned 1 [0180.142] wcscmp (_String1="Jayapura", _String2=".") returned 1 [0180.142] wcscmp (_String1="Jayapura", _String2="..") returned 1 [0180.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d477f0 [0180.142] wcscpy (in: _Dest=0x3d477f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0180.142] wcscat (in: _Dest=0x3d477f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0180.142] wcscat (in: _Dest=0x3d477f0, _Source="Jayapura" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" [0180.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d477f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0180.144] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jerusalem", cAlternateFileName="JERUSA~1")) returned 1 [0180.144] wcscmp (_String1="Jerusalem", _String2=".") returned 1 [0180.144] wcscmp (_String1="Jerusalem", _String2="..") returned 1 [0180.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5470 [0180.144] wcscpy (in: _Dest=0x2ff5470, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0180.144] wcscat (in: _Dest=0x2ff5470, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0180.144] wcscat (in: _Dest=0x2ff5470, _Source="Jerusalem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" [0180.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0180.145] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kabul", cAlternateFileName="")) returned 1 [0180.145] wcscmp (_String1="Kabul", _String2=".") returned 1 [0180.145] wcscmp (_String1="Kabul", _String2="..") returned 1 [0180.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d460c8 [0180.146] wcscpy (in: _Dest=0x3d460c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0180.146] wcscat (in: _Dest=0x3d460c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0180.146] wcscat (in: _Dest=0x3d460c8, _Source="Kabul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul" [0180.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d460c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0180.147] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kamchatka", cAlternateFileName="KAMCHA~1")) returned 1 [0180.147] wcscmp (_String1="Kamchatka", _String2=".") returned 1 [0180.147] wcscmp (_String1="Kamchatka", _String2="..") returned 1 [0180.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff52b0 [0180.147] wcscpy (in: _Dest=0x2ff52b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0180.147] wcscat (in: _Dest=0x2ff52b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0180.147] wcscat (in: _Dest=0x2ff52b0, _Source="Kamchatka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" [0180.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff52b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0180.149] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Karachi", cAlternateFileName="")) returned 1 [0180.149] wcscmp (_String1="Karachi", _String2=".") returned 1 [0180.149] wcscmp (_String1="Karachi", _String2="..") returned 1 [0180.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47fa8 [0180.149] wcscpy (in: _Dest=0x3d47fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0180.149] wcscat (in: _Dest=0x3d47fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0180.149] wcscat (in: _Dest=0x3d47fa8, _Source="Karachi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi" [0180.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0180.150] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kashgar", cAlternateFileName="")) returned 1 [0180.150] wcscmp (_String1="Kashgar", _String2=".") returned 1 [0180.150] wcscmp (_String1="Kashgar", _String2="..") returned 1 [0180.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47b98 [0180.150] wcscpy (in: _Dest=0x3d47b98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0180.150] wcscat (in: _Dest=0x3d47b98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0180.150] wcscat (in: _Dest=0x3d47b98, _Source="Kashgar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" [0180.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0180.152] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kathmandu", cAlternateFileName="KATHMA~1")) returned 1 [0182.145] wcscmp (_String1="Kathmandu", _String2=".") returned 1 [0182.145] wcscmp (_String1="Kathmandu", _String2="..") returned 1 [0182.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ff5010 [0182.146] wcscpy (in: _Dest=0x2ff5010, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.146] wcscat (in: _Dest=0x2ff5010, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.146] wcscat (in: _Dest=0x2ff5010, _Source="Kathmandu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" [0183.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0183.616] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x259, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khandyga", cAlternateFileName="")) returned 1 [0183.616] wcscmp (_String1="Khandyga", _String2=".") returned 1 [0183.616] wcscmp (_String1="Khandyga", _String2="..") returned 1 [0183.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e9c8 [0183.616] wcscpy (in: _Dest=0x3d8e9c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.616] wcscat (in: _Dest=0x3d8e9c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.616] wcscat (in: _Dest=0x3d8e9c8, _Source="Khandyga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" [0183.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0183.617] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kolkata", cAlternateFileName="")) returned 1 [0183.617] wcscmp (_String1="Kolkata", _String2=".") returned 1 [0183.617] wcscmp (_String1="Kolkata", _String2="..") returned 1 [0183.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c128 [0183.618] wcscpy (in: _Dest=0x3d8c128, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.618] wcscat (in: _Dest=0x3d8c128, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.618] wcscat (in: _Dest=0x3d8c128, _Source="Kolkata" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" [0183.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0183.637] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Krasnoyarsk", cAlternateFileName="KRASNO~1")) returned 1 [0183.637] wcscmp (_String1="Krasnoyarsk", _String2=".") returned 1 [0183.637] wcscmp (_String1="Krasnoyarsk", _String2="..") returned 1 [0183.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8402a80 [0183.637] wcscpy (in: _Dest=0x8402a80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.637] wcscat (in: _Dest=0x8402a80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.637] wcscat (in: _Dest=0x8402a80, _Source="Krasnoyarsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" [0183.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0183.647] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuala_Lumpur", cAlternateFileName="KUALA_~1")) returned 1 [0183.647] wcscmp (_String1="Kuala_Lumpur", _String2=".") returned 1 [0183.647] wcscmp (_String1="Kuala_Lumpur", _String2="..") returned 1 [0183.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8402af0 [0183.647] wcscpy (in: _Dest=0x8402af0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.648] wcscat (in: _Dest=0x8402af0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.648] wcscat (in: _Dest=0x8402af0, _Source="Kuala_Lumpur" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" [0183.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0183.649] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuching", cAlternateFileName="")) returned 1 [0183.649] wcscmp (_String1="Kuching", _String2=".") returned 1 [0183.649] wcscmp (_String1="Kuching", _String2="..") returned 1 [0183.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c330 [0183.649] wcscpy (in: _Dest=0x3d8c330, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.649] wcscat (in: _Dest=0x3d8c330, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.649] wcscat (in: _Dest=0x3d8c330, _Source="Kuching" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching" [0183.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0183.651] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuwait", cAlternateFileName="")) returned 1 [0183.651] wcscmp (_String1="Kuwait", _String2=".") returned 1 [0183.651] wcscmp (_String1="Kuwait", _String2="..") returned 1 [0183.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e2e0 [0183.651] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.651] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.651] wcscat (in: _Dest=0x3d8e2e0, _Source="Kuwait" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" [0183.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0183.652] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macau", cAlternateFileName="")) returned 1 [0183.652] wcscmp (_String1="Macau", _String2=".") returned 1 [0183.652] wcscmp (_String1="Macau", _String2="..") returned 1 [0183.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8cbb8 [0183.652] wcscpy (in: _Dest=0x3d8cbb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.652] wcscat (in: _Dest=0x3d8cbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.652] wcscat (in: _Dest=0x3d8cbb8, _Source="Macau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau" [0183.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0183.658] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magadan", cAlternateFileName="")) returned 1 [0183.658] wcscmp (_String1="Magadan", _String2=".") returned 1 [0183.658] wcscmp (_String1="Magadan", _String2="..") returned 1 [0183.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e550 [0183.658] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.658] wcscat (in: _Dest=0x3d8e550, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.658] wcscat (in: _Dest=0x3d8e550, _Source="Magadan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan" [0183.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0183.659] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Makassar", cAlternateFileName="")) returned 1 [0183.659] wcscmp (_String1="Makassar", _String2=".") returned 1 [0183.659] wcscmp (_String1="Makassar", _String2="..") returned 1 [0183.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d1d0 [0183.660] wcscpy (in: _Dest=0x3d8d1d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.660] wcscat (in: _Dest=0x3d8d1d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.660] wcscat (in: _Dest=0x3d8d1d0, _Source="Makassar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar" [0183.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0183.661] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manila", cAlternateFileName="")) returned 1 [0183.661] wcscmp (_String1="Manila", _String2=".") returned 1 [0183.661] wcscmp (_String1="Manila", _String2="..") returned 1 [0183.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bff0 [0183.661] wcscpy (in: _Dest=0x3d8bff0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.661] wcscat (in: _Dest=0x3d8bff0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.661] wcscat (in: _Dest=0x3d8bff0, _Source="Manila" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila" [0183.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8bff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0183.663] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Muscat", cAlternateFileName="")) returned 1 [0183.663] wcscmp (_String1="Muscat", _String2=".") returned 1 [0183.663] wcscmp (_String1="Muscat", _String2="..") returned 1 [0183.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e8f8 [0183.663] wcscpy (in: _Dest=0x3d8e8f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.663] wcscat (in: _Dest=0x3d8e8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.663] wcscat (in: _Dest=0x3d8e8f8, _Source="Muscat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat" [0183.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0183.664] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nicosia", cAlternateFileName="")) returned 1 [0183.664] wcscmp (_String1="Nicosia", _String2=".") returned 1 [0183.664] wcscmp (_String1="Nicosia", _String2="..") returned 1 [0183.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dc60 [0183.665] wcscpy (in: _Dest=0x3d8dc60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.665] wcscat (in: _Dest=0x3d8dc60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.665] wcscat (in: _Dest=0x3d8dc60, _Source="Nicosia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" [0183.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8dc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0183.666] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novokuznetsk", cAlternateFileName="NOVOKU~1")) returned 1 [0183.666] wcscmp (_String1="Novokuznetsk", _String2=".") returned 1 [0183.666] wcscmp (_String1="Novokuznetsk", _String2="..") returned 1 [0183.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8402b60 [0183.666] wcscpy (in: _Dest=0x8402b60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.666] wcscat (in: _Dest=0x8402b60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.666] wcscat (in: _Dest=0x8402b60, _Source="Novokuznetsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" [0183.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0183.716] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novosibirsk", cAlternateFileName="NOVOSI~1")) returned 1 [0183.716] wcscmp (_String1="Novosibirsk", _String2=".") returned 1 [0183.716] wcscmp (_String1="Novosibirsk", _String2="..") returned 1 [0183.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33cf8 [0183.717] wcscpy (in: _Dest=0x3f33cf8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.717] wcscat (in: _Dest=0x3f33cf8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.717] wcscat (in: _Dest=0x3f33cf8, _Source="Novosibirsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" [0183.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33cf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0183.718] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Omsk", cAlternateFileName="")) returned 1 [0183.718] wcscmp (_String1="Omsk", _String2=".") returned 1 [0183.718] wcscmp (_String1="Omsk", _String2="..") returned 1 [0183.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6908 [0183.719] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.719] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.719] wcscat (in: _Dest=0x2fe6908, _Source="Omsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk" [0183.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0183.720] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oral", cAlternateFileName="")) returned 1 [0183.720] wcscmp (_String1="Oral", _String2=".") returned 1 [0183.720] wcscmp (_String1="Oral", _String2="..") returned 1 [0183.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6728 [0183.721] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.721] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.721] wcscat (in: _Dest=0x2fe6728, _Source="Oral" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral" [0183.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2710 [0183.722] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phnom_Penh", cAlternateFileName="PHNOM_~1")) returned 1 [0183.722] wcscmp (_String1="Phnom_Penh", _String2=".") returned 1 [0183.722] wcscmp (_String1="Phnom_Penh", _String2="..") returned 1 [0183.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x8402c40 [0183.722] wcscpy (in: _Dest=0x8402c40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.722] wcscat (in: _Dest=0x8402c40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.722] wcscat (in: _Dest=0x8402c40, _Source="Phnom_Penh" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" [0183.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26b0 [0183.725] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pontianak", cAlternateFileName="PONTIA~1")) returned 1 [0183.725] wcscmp (_String1="Pontianak", _String2=".") returned 1 [0183.725] wcscmp (_String1="Pontianak", _String2="..") returned 1 [0183.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8402cb0 [0183.725] wcscpy (in: _Dest=0x8402cb0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.725] wcscat (in: _Dest=0x8402cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.725] wcscat (in: _Dest=0x8402cb0, _Source="Pontianak" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" [0183.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26ac [0183.727] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pyongyang", cAlternateFileName="PYONGY~1")) returned 1 [0183.727] wcscmp (_String1="Pyongyang", _String2=".") returned 1 [0183.727] wcscmp (_String1="Pyongyang", _String2="..") returned 1 [0183.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8402d20 [0183.727] wcscpy (in: _Dest=0x8402d20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.727] wcscat (in: _Dest=0x8402d20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.727] wcscat (in: _Dest=0x8402d20, _Source="Pyongyang" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" [0183.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0183.728] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qatar", cAlternateFileName="")) returned 1 [0183.728] wcscmp (_String1="Qatar", _String2=".") returned 1 [0183.728] wcscmp (_String1="Qatar", _String2="..") returned 1 [0183.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e688 [0183.728] wcscpy (in: _Dest=0x3d8e688, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.729] wcscat (in: _Dest=0x3d8e688, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.729] wcscat (in: _Dest=0x3d8e688, _Source="Qatar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar" [0183.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x283c [0183.739] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qyzylorda", cAlternateFileName="QYZYLO~1")) returned 1 [0183.739] wcscmp (_String1="Qyzylorda", _String2=".") returned 1 [0183.739] wcscmp (_String1="Qyzylorda", _String2="..") returned 1 [0183.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x8402d90 [0183.739] wcscpy (in: _Dest=0x8402d90, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.739] wcscat (in: _Dest=0x8402d90, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.739] wcscat (in: _Dest=0x8402d90, _Source="Qyzylorda" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" [0183.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0183.742] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rangoon", cAlternateFileName="")) returned 1 [0183.742] wcscmp (_String1="Rangoon", _String2=".") returned 1 [0183.742] wcscmp (_String1="Rangoon", _String2="..") returned 1 [0183.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dfa0 [0183.742] wcscpy (in: _Dest=0x3d8dfa0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.742] wcscat (in: _Dest=0x3d8dfa0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.742] wcscat (in: _Dest=0x3d8dfa0, _Source="Rangoon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" [0183.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8dfa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2834 [0183.743] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh", cAlternateFileName="")) returned 1 [0183.744] wcscmp (_String1="Riyadh", _String2=".") returned 1 [0183.744] wcscmp (_String1="Riyadh", _String2="..") returned 1 [0183.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d4a8 [0183.744] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.744] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.744] wcscat (in: _Dest=0x3d8d4a8, _Source="Riyadh" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" [0183.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2830 [0184.926] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh87", cAlternateFileName="")) returned 1 [0184.926] wcscmp (_String1="Riyadh87", _String2=".") returned 1 [0184.926] wcscmp (_String1="Riyadh87", _String2="..") returned 1 [0184.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eccd28 [0184.926] wcscpy (in: _Dest=0x3eccd28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0184.926] wcscat (in: _Dest=0x3eccd28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0184.926] wcscat (in: _Dest=0x3eccd28, _Source="Riyadh87" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" [0186.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eccd28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2684 [0186.835] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x127d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh88", cAlternateFileName="")) returned 1 [0186.835] wcscmp (_String1="Riyadh88", _String2=".") returned 1 [0186.835] wcscmp (_String1="Riyadh88", _String2="..") returned 1 [0186.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46610 [0186.835] wcscpy (in: _Dest=0x3d46610, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.836] wcscat (in: _Dest=0x3d46610, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.836] wcscat (in: _Dest=0x3d46610, _Source="Riyadh88" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" [0186.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0186.860] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x129d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh89", cAlternateFileName="")) returned 1 [0186.860] wcscmp (_String1="Riyadh89", _String2=".") returned 1 [0186.860] wcscmp (_String1="Riyadh89", _String2="..") returned 1 [0186.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46678 [0186.860] wcscpy (in: _Dest=0x3d46678, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.860] wcscat (in: _Dest=0x3d46678, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.860] wcscat (in: _Dest=0x3d46678, _Source="Riyadh89" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" [0186.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0186.862] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sakhalin", cAlternateFileName="")) returned 1 [0186.862] wcscmp (_String1="Sakhalin", _String2=".") returned 1 [0186.862] wcscmp (_String1="Sakhalin", _String2="..") returned 1 [0186.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d469b8 [0186.862] wcscpy (in: _Dest=0x3d469b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.862] wcscat (in: _Dest=0x3d469b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.862] wcscat (in: _Dest=0x3d469b8, _Source="Sakhalin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" [0186.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d469b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0186.863] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samarkand", cAlternateFileName="SAMARK~1")) returned 1 [0186.864] wcscmp (_String1="Samarkand", _String2=".") returned 1 [0186.864] wcscmp (_String1="Samarkand", _String2="..") returned 1 [0186.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39e08 [0186.864] wcscpy (in: _Dest=0x3f39e08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.864] wcscat (in: _Dest=0x3f39e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.864] wcscat (in: _Dest=0x3f39e08, _Source="Samarkand" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" [0186.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e0 [0186.865] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seoul", cAlternateFileName="")) returned 1 [0186.865] wcscmp (_String1="Seoul", _String2=".") returned 1 [0186.865] wcscmp (_String1="Seoul", _String2="..") returned 1 [0186.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47650 [0186.865] wcscpy (in: _Dest=0x3d47650, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.865] wcscat (in: _Dest=0x3d47650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.865] wcscat (in: _Dest=0x3d47650, _Source="Seoul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul" [0186.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0186.866] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shanghai", cAlternateFileName="")) returned 1 [0186.867] wcscmp (_String1="Shanghai", _String2=".") returned 1 [0186.867] wcscmp (_String1="Shanghai", _String2="..") returned 1 [0186.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47720 [0186.867] wcscpy (in: _Dest=0x3d47720, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.867] wcscat (in: _Dest=0x3d47720, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.867] wcscat (in: _Dest=0x3d47720, _Source="Shanghai" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" [0186.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0186.868] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Singapore", cAlternateFileName="SINGAP~1")) returned 1 [0186.868] wcscmp (_String1="Singapore", _String2=".") returned 1 [0186.868] wcscmp (_String1="Singapore", _String2="..") returned 1 [0186.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a188 [0186.868] wcscpy (in: _Dest=0x3f3a188, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.868] wcscat (in: _Dest=0x3f3a188, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.869] wcscat (in: _Dest=0x3f3a188, _Source="Singapore" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore" [0186.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0186.870] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Taipei", cAlternateFileName="")) returned 1 [0186.870] wcscmp (_String1="Taipei", _String2=".") returned 1 [0186.870] wcscmp (_String1="Taipei", _String2="..") returned 1 [0186.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d466e0 [0186.870] wcscpy (in: _Dest=0x3d466e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.870] wcscat (in: _Dest=0x3d466e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.870] wcscat (in: _Dest=0x3d466e0, _Source="Taipei" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei" [0186.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d466e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0186.873] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tashkent", cAlternateFileName="")) returned 1 [0186.873] wcscmp (_String1="Tashkent", _String2=".") returned 1 [0186.874] wcscmp (_String1="Tashkent", _String2="..") returned 1 [0186.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46338 [0186.874] wcscpy (in: _Dest=0x3d46338, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.874] wcscat (in: _Dest=0x3d46338, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.874] wcscat (in: _Dest=0x3d46338, _Source="Tashkent" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" [0186.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0186.875] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tbilisi", cAlternateFileName="")) returned 1 [0186.875] wcscmp (_String1="Tbilisi", _String2=".") returned 1 [0186.875] wcscmp (_String1="Tbilisi", _String2="..") returned 1 [0186.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d465a8 [0186.875] wcscpy (in: _Dest=0x3d465a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.875] wcscat (in: _Dest=0x3d465a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.875] wcscat (in: _Dest=0x3d465a8, _Source="Tbilisi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" [0186.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d465a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0186.879] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tehran", cAlternateFileName="")) returned 1 [0186.879] wcscmp (_String1="Tehran", _String2=".") returned 1 [0186.879] wcscmp (_String1="Tehran", _String2="..") returned 1 [0186.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d46540 [0186.879] wcscpy (in: _Dest=0x3d46540, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0186.879] wcscat (in: _Dest=0x3d46540, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0186.880] wcscat (in: _Dest=0x3d46540, _Source="Tehran" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran" [0186.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0186.884] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thimphu", cAlternateFileName="")) returned 1 [0188.859] wcscmp (_String1="Thimphu", _String2=".") returned 1 [0188.859] wcscmp (_String1="Thimphu", _String2="..") returned 1 [0188.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e890 [0188.859] wcscpy (in: _Dest=0x3d8e890, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.859] wcscat (in: _Dest=0x3d8e890, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.859] wcscat (in: _Dest=0x3d8e890, _Source="Thimphu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" [0188.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d24 [0188.863] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tokyo", cAlternateFileName="")) returned 1 [0188.863] wcscmp (_String1="Tokyo", _String2=".") returned 1 [0188.863] wcscmp (_String1="Tokyo", _String2="..") returned 1 [0188.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bb10 [0188.863] wcscpy (in: _Dest=0x3d8bb10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.863] wcscat (in: _Dest=0x3d8bb10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.864] wcscat (in: _Dest=0x3d8bb10, _Source="Tokyo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" [0188.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8bb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d1c [0188.865] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ulaanbaatar", cAlternateFileName="ULAANB~1")) returned 1 [0188.865] wcscmp (_String1="Ulaanbaatar", _String2=".") returned 1 [0188.865] wcscmp (_String1="Ulaanbaatar", _String2="..") returned 1 [0188.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39ee8 [0188.865] wcscpy (in: _Dest=0x3f39ee8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.865] wcscat (in: _Dest=0x3f39ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.865] wcscat (in: _Dest=0x3f39ee8, _Source="Ulaanbaatar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" [0188.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c90 [0188.866] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urumqi", cAlternateFileName="")) returned 1 [0188.866] wcscmp (_String1="Urumqi", _String2=".") returned 1 [0188.866] wcscmp (_String1="Urumqi", _String2="..") returned 1 [0188.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e008 [0188.866] wcscpy (in: _Dest=0x3d8e008, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.866] wcscat (in: _Dest=0x3d8e008, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.867] wcscat (in: _Dest=0x3d8e008, _Source="Urumqi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" [0188.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0188.868] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ust-Nera", cAlternateFileName="")) returned 1 [0188.868] wcscmp (_String1="Ust-Nera", _String2=".") returned 1 [0188.868] wcscmp (_String1="Ust-Nera", _String2="..") returned 1 [0188.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c810 [0188.868] wcscpy (in: _Dest=0x3d8c810, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.868] wcscat (in: _Dest=0x3d8c810, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.868] wcscat (in: _Dest=0x3d8c810, _Source="Ust-Nera" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" [0188.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0188.869] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vientiane", cAlternateFileName="VIENTI~1")) returned 1 [0188.869] wcscmp (_String1="Vientiane", _String2=".") returned 1 [0188.869] wcscmp (_String1="Vientiane", _String2="..") returned 1 [0188.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a038 [0188.870] wcscpy (in: _Dest=0x3f3a038, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.870] wcscat (in: _Dest=0x3f3a038, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.870] wcscat (in: _Dest=0x3f3a038, _Source="Vientiane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" [0188.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0188.887] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vladivostok", cAlternateFileName="VLADIV~1")) returned 1 [0188.887] wcscmp (_String1="Vladivostok", _String2=".") returned 1 [0188.887] wcscmp (_String1="Vladivostok", _String2="..") returned 1 [0188.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a118 [0188.887] wcscpy (in: _Dest=0x3f3a118, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.887] wcscat (in: _Dest=0x3f3a118, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.887] wcscat (in: _Dest=0x3f3a118, _Source="Vladivostok" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" [0188.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0188.889] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutsk", cAlternateFileName="")) returned 1 [0188.889] wcscmp (_String1="Yakutsk", _String2=".") returned 1 [0188.889] wcscmp (_String1="Yakutsk", _String2="..") returned 1 [0188.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e348 [0188.889] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.889] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.889] wcscat (in: _Dest=0x3d8e348, _Source="Yakutsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" [0188.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0188.904] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yekaterinburg", cAlternateFileName="YEKATE~1")) returned 1 [0188.904] wcscmp (_String1="Yekaterinburg", _String2=".") returned 1 [0188.904] wcscmp (_String1="Yekaterinburg", _String2="..") returned 1 [0188.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f32598 [0188.904] wcscpy (in: _Dest=0x3f32598, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.904] wcscat (in: _Dest=0x3f32598, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.904] wcscat (in: _Dest=0x3f32598, _Source="Yekaterinburg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" [0188.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f32598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0188.906] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 1 [0188.906] wcscmp (_String1="Yerevan", _String2=".") returned 1 [0188.906] wcscmp (_String1="Yerevan", _String2="..") returned 1 [0188.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e4e8 [0188.906] wcscpy (in: _Dest=0x3d8e4e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0188.906] wcscat (in: _Dest=0x3d8e4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0188.906] wcscat (in: _Dest=0x3d8e4e8, _Source="Yerevan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" [0188.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d8e4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b18 [0188.908] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 0 [0189.746] FindClose (in: hFindFile=0x3e55608 | out: hFindFile=0x3e55608) returned 1 [0192.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0192.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 [0192.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e230c0) returned 1 Thread: id = 4111 os_tid = 0x16cc [0170.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x2fceb90 [0170.070] wcscpy (in: _Dest=0x2fceb90, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0170.070] wcscat (in: _Dest=0x2fceb90, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0170.070] wcscat (in: _Dest=0x2fceb90, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\*" [0170.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe928 [0170.070] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0172.709] wcscmp (_String1=".", _String2=".") returned 0 [0172.709] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.709] wcscmp (_String1="..", _String2=".") returned 1 [0172.709] wcscmp (_String1="..", _String2="..") returned 0 [0172.709] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Azores", cAlternateFileName="")) returned 1 [0172.709] wcscmp (_String1="Azores", _String2=".") returned 1 [0172.709] wcscmp (_String1="Azores", _String2="..") returned 1 [0172.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f334a8 [0172.709] wcscpy (in: _Dest=0x3f334a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0172.709] wcscat (in: _Dest=0x3f334a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0172.710] wcscat (in: _Dest=0x3f334a8, _Source="Azores" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" [0179.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f334a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0179.423] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bermuda", cAlternateFileName="")) returned 1 [0179.423] wcscmp (_String1="Bermuda", _String2=".") returned 1 [0179.423] wcscmp (_String1="Bermuda", _String2="..") returned 1 [0179.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1a98 [0179.423] wcscpy (in: _Dest=0x3db1a98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0179.423] wcscat (in: _Dest=0x3db1a98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0179.423] wcscat (in: _Dest=0x3db1a98, _Source="Bermuda" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" [0179.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0179.424] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Canary", cAlternateFileName="")) returned 1 [0179.424] wcscmp (_String1="Canary", _String2=".") returned 1 [0179.424] wcscmp (_String1="Canary", _String2="..") returned 1 [0179.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1b78 [0179.425] wcscpy (in: _Dest=0x3db1b78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0179.425] wcscat (in: _Dest=0x3db1b78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0179.425] wcscat (in: _Dest=0x3db1b78, _Source="Canary" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" [0179.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0179.426] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cape_Verde", cAlternateFileName="CAPE_V~1")) returned 1 [0179.426] wcscmp (_String1="Cape_Verde", _String2=".") returned 1 [0179.426] wcscmp (_String1="Cape_Verde", _String2="..") returned 1 [0179.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e67e08 [0179.426] wcscpy (in: _Dest=0x3e67e08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0179.426] wcscat (in: _Dest=0x3e67e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0179.426] wcscat (in: _Dest=0x3e67e08, _Source="Cape_Verde" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" [0179.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0179.428] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faroe", cAlternateFileName="")) returned 1 [0179.428] wcscmp (_String1="Faroe", _String2=".") returned 1 [0179.428] wcscmp (_String1="Faroe", _String2="..") returned 1 [0179.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3db1be8 [0179.428] wcscpy (in: _Dest=0x3db1be8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0179.428] wcscat (in: _Dest=0x3db1be8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0179.428] wcscat (in: _Dest=0x3db1be8, _Source="Faroe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" [0179.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0179.429] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madeira", cAlternateFileName="")) returned 1 [0179.429] wcscmp (_String1="Madeira", _String2=".") returned 1 [0179.429] wcscmp (_String1="Madeira", _String2="..") returned 1 [0179.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1a28 [0179.430] wcscpy (in: _Dest=0x3db1a28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0179.430] wcscat (in: _Dest=0x3db1a28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0179.430] wcscat (in: _Dest=0x3db1a28, _Source="Madeira" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" [0179.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0179.431] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reykjavik", cAlternateFileName="REYKJA~1")) returned 1 [0179.431] wcscmp (_String1="Reykjavik", _String2=".") returned 1 [0179.431] wcscmp (_String1="Reykjavik", _String2="..") returned 1 [0179.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68858 [0179.431] wcscpy (in: _Dest=0x3e68858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0179.431] wcscat (in: _Dest=0x3e68858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0179.431] wcscat (in: _Dest=0x3e68858, _Source="Reykjavik" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" [0179.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e68858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0179.433] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="South_Georgia", cAlternateFileName="SOUTH_~1")) returned 1 [0179.433] wcscmp (_String1="South_Georgia", _String2=".") returned 1 [0179.433] wcscmp (_String1="South_Georgia", _String2="..") returned 1 [0179.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831a7d8 [0179.433] wcscpy (in: _Dest=0x831a7d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0179.433] wcscat (in: _Dest=0x831a7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0179.433] wcscat (in: _Dest=0x831a7d8, _Source="South_Georgia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" [0179.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0179.434] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stanley", cAlternateFileName="")) returned 1 [0179.434] wcscmp (_String1="Stanley", _String2=".") returned 1 [0179.434] wcscmp (_String1="Stanley", _String2="..") returned 1 [0179.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1718 [0179.435] wcscpy (in: _Dest=0x3db1718, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0179.435] wcscat (in: _Dest=0x3db1718, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0179.435] wcscat (in: _Dest=0x3db1718, _Source="Stanley" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" [0179.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0179.436] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="ST_HEL~1")) returned 1 [0179.436] wcscmp (_String1="St_Helena", _String2=".") returned 1 [0179.436] wcscmp (_String1="St_Helena", _String2="..") returned 1 [0179.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e67fe8 [0179.437] wcscpy (in: _Dest=0x3e67fe8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0179.437] wcscat (in: _Dest=0x3e67fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0179.437] wcscat (in: _Dest=0x3e67fe8, _Source="St_Helena" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" [0179.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e67fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0179.439] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="ST_HEL~1")) returned 0 [0179.439] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0185.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe928) returned 1 [0185.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fceb90) returned 1 [0185.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 Thread: id = 4112 os_tid = 0x10cc [0170.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x2fce9f0 [0170.070] wcscpy (in: _Dest=0x2fce9f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0170.070] wcscat (in: _Dest=0x2fce9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0170.070] wcscat (in: _Dest=0x2fce9f0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\*" [0170.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0170.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0172.711] wcscmp (_String1=".", _String2=".") returned 0 [0172.711] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.711] wcscmp (_String1="..", _String2=".") returned 1 [0172.711] wcscmp (_String1="..", _String2="..") returned 0 [0172.711] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adelaide", cAlternateFileName="")) returned 1 [0172.711] wcscmp (_String1="Adelaide", _String2=".") returned 1 [0172.711] wcscmp (_String1="Adelaide", _String2="..") returned 1 [0172.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3df88f8 [0172.711] wcscpy (in: _Dest=0x3df88f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.711] wcscat (in: _Dest=0x3df88f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.712] wcscat (in: _Dest=0x3df88f8, _Source="Adelaide" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" [0180.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df88f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0180.122] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brisbane", cAlternateFileName="")) returned 1 [0180.122] wcscmp (_String1="Brisbane", _String2=".") returned 1 [0180.122] wcscmp (_String1="Brisbane", _String2="..") returned 1 [0180.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b4d8 [0180.122] wcscpy (in: _Dest=0x3f0b4d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.122] wcscat (in: _Dest=0x3f0b4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.122] wcscat (in: _Dest=0x3f0b4d8, _Source="Brisbane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" [0180.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0180.123] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Broken_Hill", cAlternateFileName="BROKEN~1")) returned 1 [0180.123] wcscmp (_String1="Broken_Hill", _String2=".") returned 1 [0180.123] wcscmp (_String1="Broken_Hill", _String2="..") returned 1 [0180.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0b988 [0180.124] wcscpy (in: _Dest=0x3f0b988, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.124] wcscat (in: _Dest=0x3f0b988, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.124] wcscat (in: _Dest=0x3f0b988, _Source="Broken_Hill" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" [0180.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0180.125] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currie", cAlternateFileName="")) returned 1 [0180.125] wcscmp (_String1="Currie", _String2=".") returned 1 [0180.125] wcscmp (_String1="Currie", _String2="..") returned 1 [0180.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db19b8 [0180.125] wcscpy (in: _Dest=0x3db19b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.125] wcscat (in: _Dest=0x3db19b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.125] wcscat (in: _Dest=0x3db19b8, _Source="Currie" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie" [0180.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db19b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0180.127] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Darwin", cAlternateFileName="")) returned 1 [0180.127] wcscmp (_String1="Darwin", _String2=".") returned 1 [0180.127] wcscmp (_String1="Darwin", _String2="..") returned 1 [0180.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db1328 [0180.127] wcscpy (in: _Dest=0x3db1328, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.127] wcscat (in: _Dest=0x3db1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.127] wcscat (in: _Dest=0x3db1328, _Source="Darwin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin" [0180.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0180.128] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eucla", cAlternateFileName="")) returned 1 [0180.128] wcscmp (_String1="Eucla", _String2=".") returned 1 [0180.128] wcscmp (_String1="Eucla", _String2="..") returned 1 [0180.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1948 [0180.129] wcscpy (in: _Dest=0x3db1948, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.129] wcscat (in: _Dest=0x3db1948, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.129] wcscat (in: _Dest=0x3db1948, _Source="Eucla" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla" [0180.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db1948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0180.130] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hobart", cAlternateFileName="")) returned 1 [0180.130] wcscmp (_String1="Hobart", _String2=".") returned 1 [0180.130] wcscmp (_String1="Hobart", _String2="..") returned 1 [0180.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3db16a8 [0180.130] wcscpy (in: _Dest=0x3db16a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.130] wcscat (in: _Dest=0x3db16a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.130] wcscat (in: _Dest=0x3db16a8, _Source="Hobart" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart" [0180.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3db16a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0180.132] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lindeman", cAlternateFileName="")) returned 1 [0180.132] wcscmp (_String1="Lindeman", _String2=".") returned 1 [0180.132] wcscmp (_String1="Lindeman", _String2="..") returned 1 [0180.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b7a8 [0180.132] wcscpy (in: _Dest=0x3f0b7a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.132] wcscat (in: _Dest=0x3f0b7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.132] wcscat (in: _Dest=0x3f0b7a8, _Source="Lindeman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" [0180.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0180.133] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lord_Howe", cAlternateFileName="LORD_H~1")) returned 1 [0180.133] wcscmp (_String1="Lord_Howe", _String2=".") returned 1 [0180.133] wcscmp (_String1="Lord_Howe", _String2="..") returned 1 [0180.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0bbe0 [0180.134] wcscpy (in: _Dest=0x3f0bbe0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.134] wcscat (in: _Dest=0x3f0bbe0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.134] wcscat (in: _Dest=0x3f0bbe0, _Source="Lord_Howe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" [0180.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0bbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0180.135] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Melbourne", cAlternateFileName="MELBOU~1")) returned 1 [0180.135] wcscmp (_String1="Melbourne", _String2=".") returned 1 [0180.135] wcscmp (_String1="Melbourne", _String2="..") returned 1 [0180.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f0c018 [0180.135] wcscpy (in: _Dest=0x3f0c018, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.135] wcscat (in: _Dest=0x3f0c018, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.136] wcscat (in: _Dest=0x3f0c018, _Source="Melbourne" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" [0180.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0180.137] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perth", cAlternateFileName="")) returned 1 [0180.137] wcscmp (_String1="Perth", _String2=".") returned 1 [0180.137] wcscmp (_String1="Perth", _String2="..") returned 1 [0180.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x2ff5240 [0180.137] wcscpy (in: _Dest=0x2ff5240, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.137] wcscat (in: _Dest=0x2ff5240, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.137] wcscat (in: _Dest=0x2ff5240, _Source="Perth" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth" [0180.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff5240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0180.139] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 1 [0180.139] wcscmp (_String1="Sydney", _String2=".") returned 1 [0180.139] wcscmp (_String1="Sydney", _String2="..") returned 1 [0180.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x2ff51d0 [0180.139] wcscpy (in: _Dest=0x2ff51d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0180.139] wcscat (in: _Dest=0x2ff51d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0180.139] wcscat (in: _Dest=0x2ff51d0, _Source="Sydney" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney" [0180.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2ff51d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0180.140] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 0 [0180.140] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0185.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0185.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce9f0) returned 1 [0185.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 Thread: id = 4113 os_tid = 0x16d4 [0170.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cet")) returned 0x20 [0171.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET", dwFileAttributes=0x20) returned 0 [0171.907] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.907] GetLastError () returned 0x5 [0171.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET", dwFileAttributes=0x20) returned 0 [0171.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22e00) returned 1 Thread: id = 4114 os_tid = 0x10d4 [0170.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cst6cdt")) returned 0x20 [0171.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT", dwFileAttributes=0x20) returned 0 [0171.905] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cst6cdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.905] GetLastError () returned 0x5 [0171.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT", dwFileAttributes=0x20) returned 0 [0171.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 Thread: id = 4115 os_tid = 0x10d8 [0170.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\eet")) returned 0x20 [0171.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET", dwFileAttributes=0x20) returned 0 [0171.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\eet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.904] GetLastError () returned 0x5 [0171.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET", dwFileAttributes=0x20) returned 0 [0171.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e231c8) returned 1 Thread: id = 4116 os_tid = 0x10dc [0170.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est")) returned 0x20 [0171.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST", dwFileAttributes=0x20) returned 0 [0171.902] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.902] GetLastError () returned 0x5 [0171.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST", dwFileAttributes=0x20) returned 0 [0171.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23698) returned 1 Thread: id = 4117 os_tid = 0x10f0 [0170.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est5edt")) returned 0x20 [0171.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT", dwFileAttributes=0x20) returned 0 [0171.901] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est5edt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.901] GetLastError () returned 0x5 [0171.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT", dwFileAttributes=0x20) returned 0 [0171.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 4118 os_tid = 0x16e8 [0170.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x831c770 [0170.074] wcscpy (in: _Dest=0x831c770, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0170.074] wcscat (in: _Dest=0x831c770, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0170.074] wcscat (in: _Dest=0x831c770, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\*" [0170.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0170.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d08 [0172.707] wcscmp (_String1=".", _String2=".") returned 0 [0172.707] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.707] wcscmp (_String1="..", _String2=".") returned 1 [0172.707] wcscmp (_String1="..", _String2="..") returned 0 [0172.707] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0172.707] wcscmp (_String1="GMT", _String2=".") returned 1 [0172.707] wcscmp (_String1="GMT", _String2="..") returned 1 [0172.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe0cc8 [0172.707] wcscpy (in: _Dest=0x2fe0cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0172.707] wcscat (in: _Dest=0x2fe0cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0172.707] wcscat (in: _Dest=0x2fe0cc8, _Source="GMT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT" [0179.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe0cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0179.721] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+1", cAlternateFileName="GMT_1~1")) returned 1 [0179.721] wcscmp (_String1="GMT+1", _String2=".") returned 1 [0179.721] wcscmp (_String1="GMT+1", _String2="..") returned 1 [0179.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7148 [0179.721] wcscpy (in: _Dest=0x2fe7148, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.721] wcscat (in: _Dest=0x2fe7148, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.721] wcscat (in: _Dest=0x2fe7148, _Source="GMT+1" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" [0179.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0179.723] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+10", cAlternateFileName="GMT_10~1")) returned 1 [0179.723] wcscmp (_String1="GMT+10", _String2=".") returned 1 [0179.723] wcscmp (_String1="GMT+10", _String2="..") returned 1 [0179.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47fa8 [0179.723] wcscpy (in: _Dest=0x3d47fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.723] wcscat (in: _Dest=0x3d47fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.723] wcscat (in: _Dest=0x3d47fa8, _Source="GMT+10" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" [0179.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0179.724] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+11", cAlternateFileName="GMT_11~1")) returned 1 [0179.725] wcscmp (_String1="GMT+11", _String2=".") returned 1 [0179.725] wcscmp (_String1="GMT+11", _String2="..") returned 1 [0179.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47928 [0179.725] wcscpy (in: _Dest=0x3d47928, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.725] wcscat (in: _Dest=0x3d47928, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.725] wcscat (in: _Dest=0x3d47928, _Source="GMT+11" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" [0179.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0179.726] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+12", cAlternateFileName="GMT_12~1")) returned 1 [0179.726] wcscmp (_String1="GMT+12", _String2=".") returned 1 [0179.726] wcscmp (_String1="GMT+12", _String2="..") returned 1 [0179.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47170 [0179.726] wcscpy (in: _Dest=0x3d47170, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.726] wcscat (in: _Dest=0x3d47170, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.726] wcscat (in: _Dest=0x3d47170, _Source="GMT+12" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" [0179.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0179.727] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+2", cAlternateFileName="GMT_2~1")) returned 1 [0179.727] wcscmp (_String1="GMT+2", _String2=".") returned 1 [0179.727] wcscmp (_String1="GMT+2", _String2="..") returned 1 [0179.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6848 [0179.727] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.728] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.728] wcscat (in: _Dest=0x2fe6848, _Source="GMT+2" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" [0179.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0179.729] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+3", cAlternateFileName="GMT_3~1")) returned 1 [0179.729] wcscmp (_String1="GMT+3", _String2=".") returned 1 [0179.729] wcscmp (_String1="GMT+3", _String2="..") returned 1 [0179.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe73e8 [0179.729] wcscpy (in: _Dest=0x2fe73e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.729] wcscat (in: _Dest=0x2fe73e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.729] wcscat (in: _Dest=0x2fe73e8, _Source="GMT+3" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" [0179.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe73e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0179.730] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+4", cAlternateFileName="GMT_4~1")) returned 1 [0179.730] wcscmp (_String1="GMT+4", _String2=".") returned 1 [0179.730] wcscmp (_String1="GMT+4", _String2="..") returned 1 [0179.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe68a8 [0179.730] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.730] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.730] wcscat (in: _Dest=0x2fe68a8, _Source="GMT+4" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" [0179.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0179.732] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+5", cAlternateFileName="GMT_5~1")) returned 1 [0179.732] wcscmp (_String1="GMT+5", _String2=".") returned 1 [0179.732] wcscmp (_String1="GMT+5", _String2="..") returned 1 [0179.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe71a8 [0179.732] wcscpy (in: _Dest=0x2fe71a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.732] wcscat (in: _Dest=0x2fe71a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.732] wcscat (in: _Dest=0x2fe71a8, _Source="GMT+5" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" [0179.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe71a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0 [0179.733] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+6", cAlternateFileName="GMT_6~1")) returned 1 [0179.733] wcscmp (_String1="GMT+6", _String2=".") returned 1 [0179.733] wcscmp (_String1="GMT+6", _String2="..") returned 1 [0179.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d28 [0179.733] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.733] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.733] wcscat (in: _Dest=0x2fe6d28, _Source="GMT+6" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" [0179.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0179.734] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+7", cAlternateFileName="GMT_7~1")) returned 1 [0179.734] wcscmp (_String1="GMT+7", _String2=".") returned 1 [0179.734] wcscmp (_String1="GMT+7", _String2="..") returned 1 [0179.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6968 [0179.735] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.735] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.735] wcscat (in: _Dest=0x2fe6968, _Source="GMT+7" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" [0179.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0179.736] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+8", cAlternateFileName="GMT_8~1")) returned 1 [0179.736] wcscmp (_String1="GMT+8", _String2=".") returned 1 [0179.736] wcscmp (_String1="GMT+8", _String2="..") returned 1 [0179.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7328 [0179.736] wcscpy (in: _Dest=0x2fe7328, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.736] wcscat (in: _Dest=0x2fe7328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.736] wcscat (in: _Dest=0x2fe7328, _Source="GMT+8" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" [0179.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0179.737] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+9", cAlternateFileName="GMT_9~1")) returned 1 [0179.737] wcscmp (_String1="GMT+9", _String2=".") returned 1 [0179.737] wcscmp (_String1="GMT+9", _String2="..") returned 1 [0179.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c08 [0179.737] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.737] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.737] wcscat (in: _Dest=0x2fe6c08, _Source="GMT+9" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" [0179.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0179.739] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-1", cAlternateFileName="")) returned 1 [0179.739] wcscmp (_String1="GMT-1", _String2=".") returned 1 [0179.739] wcscmp (_String1="GMT-1", _String2="..") returned 1 [0179.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe4b08 [0179.739] wcscpy (in: _Dest=0x2fe4b08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.739] wcscat (in: _Dest=0x2fe4b08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.739] wcscat (in: _Dest=0x2fe4b08, _Source="GMT-1" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" [0179.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe4b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0179.741] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-10", cAlternateFileName="")) returned 1 [0179.741] wcscmp (_String1="GMT-10", _String2=".") returned 1 [0179.741] wcscmp (_String1="GMT-10", _String2="..") returned 1 [0179.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47990 [0179.741] wcscpy (in: _Dest=0x3d47990, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.741] wcscat (in: _Dest=0x3d47990, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.741] wcscat (in: _Dest=0x3d47990, _Source="GMT-10" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" [0179.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0179.742] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-11", cAlternateFileName="")) returned 1 [0179.743] wcscmp (_String1="GMT-11", _String2=".") returned 1 [0179.743] wcscmp (_String1="GMT-11", _String2="..") returned 1 [0179.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d479f8 [0179.743] wcscpy (in: _Dest=0x3d479f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.743] wcscat (in: _Dest=0x3d479f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.743] wcscat (in: _Dest=0x3d479f8, _Source="GMT-11" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" [0179.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d479f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0179.744] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-12", cAlternateFileName="")) returned 1 [0179.744] wcscmp (_String1="GMT-12", _String2=".") returned 1 [0179.744] wcscmp (_String1="GMT-12", _String2="..") returned 1 [0179.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47a60 [0179.745] wcscpy (in: _Dest=0x3d47a60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.745] wcscat (in: _Dest=0x3d47a60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.745] wcscat (in: _Dest=0x3d47a60, _Source="GMT-12" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" [0179.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0179.746] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-13", cAlternateFileName="")) returned 1 [0179.746] wcscmp (_String1="GMT-13", _String2=".") returned 1 [0179.746] wcscmp (_String1="GMT-13", _String2="..") returned 1 [0179.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47ac8 [0179.747] wcscpy (in: _Dest=0x3d47ac8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.747] wcscat (in: _Dest=0x3d47ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.747] wcscat (in: _Dest=0x3d47ac8, _Source="GMT-13" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" [0179.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0179.748] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-14", cAlternateFileName="")) returned 1 [0179.748] wcscmp (_String1="GMT-14", _String2=".") returned 1 [0179.749] wcscmp (_String1="GMT-14", _String2="..") returned 1 [0179.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47b30 [0179.749] wcscpy (in: _Dest=0x3d47b30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.749] wcscat (in: _Dest=0x3d47b30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.749] wcscat (in: _Dest=0x3d47b30, _Source="GMT-14" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" [0179.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0179.750] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-2", cAlternateFileName="")) returned 1 [0179.750] wcscmp (_String1="GMT-2", _String2=".") returned 1 [0179.750] wcscmp (_String1="GMT-2", _String2="..") returned 1 [0179.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe4a48 [0179.750] wcscpy (in: _Dest=0x2fe4a48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.750] wcscat (in: _Dest=0x2fe4a48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.751] wcscat (in: _Dest=0x2fe4a48, _Source="GMT-2" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" [0179.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe4a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0179.752] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-3", cAlternateFileName="")) returned 1 [0179.752] wcscmp (_String1="GMT-3", _String2=".") returned 1 [0179.752] wcscmp (_String1="GMT-3", _String2="..") returned 1 [0179.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6908 [0179.752] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.752] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.752] wcscat (in: _Dest=0x2fe6908, _Source="GMT-3" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" [0179.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0179.753] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-4", cAlternateFileName="")) returned 1 [0179.754] wcscmp (_String1="GMT-4", _String2=".") returned 1 [0179.754] wcscmp (_String1="GMT-4", _String2="..") returned 1 [0179.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0179.754] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.754] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.754] wcscat (in: _Dest=0x2fe6548, _Source="GMT-4" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" [0179.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0179.755] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-5", cAlternateFileName="")) returned 1 [0179.755] wcscmp (_String1="GMT-5", _String2=".") returned 1 [0179.755] wcscmp (_String1="GMT-5", _String2="..") returned 1 [0179.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe70e8 [0179.755] wcscpy (in: _Dest=0x2fe70e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.755] wcscat (in: _Dest=0x2fe70e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.755] wcscat (in: _Dest=0x2fe70e8, _Source="GMT-5" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" [0179.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe70e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0179.757] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-6", cAlternateFileName="")) returned 1 [0179.757] wcscmp (_String1="GMT-6", _String2=".") returned 1 [0179.757] wcscmp (_String1="GMT-6", _String2="..") returned 1 [0179.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6728 [0179.757] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.757] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.757] wcscat (in: _Dest=0x2fe6728, _Source="GMT-6" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" [0179.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0179.847] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-7", cAlternateFileName="")) returned 1 [0179.847] wcscmp (_String1="GMT-7", _String2=".") returned 1 [0179.847] wcscmp (_String1="GMT-7", _String2="..") returned 1 [0179.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7148 [0179.847] wcscpy (in: _Dest=0x2fe7148, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.847] wcscat (in: _Dest=0x2fe7148, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.847] wcscat (in: _Dest=0x2fe7148, _Source="GMT-7" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" [0179.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c74 [0179.926] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-8", cAlternateFileName="")) returned 1 [0179.926] wcscmp (_String1="GMT-8", _String2=".") returned 1 [0179.927] wcscmp (_String1="GMT-8", _String2="..") returned 1 [0179.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0cc8 [0179.927] wcscpy (in: _Dest=0x2fe0cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.927] wcscat (in: _Dest=0x2fe0cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.927] wcscat (in: _Dest=0x2fe0cc8, _Source="GMT-8" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" [0179.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe0cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0179.928] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-9", cAlternateFileName="")) returned 1 [0179.928] wcscmp (_String1="GMT-9", _String2=".") returned 1 [0179.928] wcscmp (_String1="GMT-9", _String2="..") returned 1 [0179.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7268 [0179.928] wcscpy (in: _Dest=0x2fe7268, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.928] wcscat (in: _Dest=0x2fe7268, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.928] wcscat (in: _Dest=0x2fe7268, _Source="GMT-9" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" [0179.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe7268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0179.930] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCT", cAlternateFileName="")) returned 1 [0179.930] wcscmp (_String1="UCT", _String2=".") returned 1 [0179.930] wcscmp (_String1="UCT", _String2="..") returned 1 [0179.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6fc8 [0179.930] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.930] wcscat (in: _Dest=0x2fe6fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.930] wcscat (in: _Dest=0x2fe6fc8, _Source="UCT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT" [0179.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0179.932] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 1 [0179.932] wcscmp (_String1="UTC", _String2=".") returned 1 [0179.932] wcscmp (_String1="UTC", _String2="..") returned 1 [0179.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe72c8 [0179.932] wcscpy (in: _Dest=0x2fe72c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0179.932] wcscat (in: _Dest=0x2fe72c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0179.932] wcscat (in: _Dest=0x2fe72c8, _Source="UTC" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC" [0179.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fe72c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0179.933] FindNextFileW (in: hFindFile=0x3e54d08, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 0 [0181.695] FindClose (in: hFindFile=0x3e54d08 | out: hFindFile=0x3e54d08) returned 1 [0184.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0184.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831c770) returned 1 [0184.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22fb8) returned 1 Thread: id = 4119 os_tid = 0x10f8 [0170.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6788 [0170.075] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0170.075] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0170.075] wcscat (in: _Dest=0x2fe6788, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\*" [0170.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0170.075] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55488 [0172.703] wcscmp (_String1=".", _String2=".") returned 0 [0172.703] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.317] wcscmp (_String1="..", _String2=".") returned 1 [0173.317] wcscmp (_String1="..", _String2="..") returned 0 [0173.317] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amsterdam", cAlternateFileName="AMSTER~1")) returned 1 [0173.317] wcscmp (_String1="Amsterdam", _String2=".") returned 1 [0173.317] wcscmp (_String1="Amsterdam", _String2="..") returned 1 [0173.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39ee8 [0173.317] wcscpy (in: _Dest=0x3f39ee8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.317] wcscat (in: _Dest=0x3f39ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.317] wcscat (in: _Dest=0x3f39ee8, _Source="Amsterdam" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" [0180.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0180.486] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Andorra", cAlternateFileName="")) returned 1 [0180.486] wcscmp (_String1="Andorra", _String2=".") returned 1 [0180.486] wcscmp (_String1="Andorra", _String2="..") returned 1 [0180.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33588 [0180.486] wcscpy (in: _Dest=0x3f33588, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.486] wcscat (in: _Dest=0x3f33588, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.486] wcscat (in: _Dest=0x3f33588, _Source="Andorra" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra" [0180.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0180.488] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Athens", cAlternateFileName="")) returned 1 [0180.488] wcscmp (_String1="Athens", _String2=".") returned 1 [0180.488] wcscmp (_String1="Athens", _String2="..") returned 1 [0180.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47c00 [0180.488] wcscpy (in: _Dest=0x3d47c00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.488] wcscat (in: _Dest=0x3d47c00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.488] wcscat (in: _Dest=0x3d47c00, _Source="Athens" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens" [0180.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0180.500] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belgrade", cAlternateFileName="")) returned 1 [0180.500] wcscmp (_String1="Belgrade", _String2=".") returned 1 [0180.500] wcscmp (_String1="Belgrade", _String2="..") returned 1 [0180.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33c18 [0180.500] wcscpy (in: _Dest=0x3f33c18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.500] wcscat (in: _Dest=0x3f33c18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.500] wcscat (in: _Dest=0x3f33c18, _Source="Belgrade" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" [0180.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0180.502] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berlin", cAlternateFileName="")) returned 1 [0180.502] wcscmp (_String1="Berlin", _String2=".") returned 1 [0180.502] wcscmp (_String1="Berlin", _String2="..") returned 1 [0180.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47c68 [0180.502] wcscpy (in: _Dest=0x3d47c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.502] wcscat (in: _Dest=0x3d47c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.502] wcscat (in: _Dest=0x3d47c68, _Source="Berlin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin" [0180.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0180.507] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brussels", cAlternateFileName="")) returned 1 [0180.507] wcscmp (_String1="Brussels", _String2=".") returned 1 [0180.507] wcscmp (_String1="Brussels", _String2="..") returned 1 [0180.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33f28 [0180.508] wcscpy (in: _Dest=0x3f33f28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.508] wcscat (in: _Dest=0x3f33f28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.508] wcscat (in: _Dest=0x3f33f28, _Source="Brussels" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels" [0180.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0180.516] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bucharest", cAlternateFileName="BUCHAR~1")) returned 1 [0180.516] wcscmp (_String1="Bucharest", _String2=".") returned 1 [0180.516] wcscmp (_String1="Bucharest", _String2="..") returned 1 [0180.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33dd8 [0180.516] wcscpy (in: _Dest=0x3f33dd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.516] wcscat (in: _Dest=0x3f33dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.516] wcscat (in: _Dest=0x3f33dd8, _Source="Bucharest" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" [0180.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0180.518] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Budapest", cAlternateFileName="")) returned 1 [0180.518] wcscmp (_String1="Budapest", _String2=".") returned 1 [0180.518] wcscmp (_String1="Budapest", _String2="..") returned 1 [0180.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33e48 [0180.518] wcscpy (in: _Dest=0x3f33e48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.518] wcscat (in: _Dest=0x3f33e48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.518] wcscat (in: _Dest=0x3f33e48, _Source="Budapest" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest" [0180.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0180.520] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chisinau", cAlternateFileName="")) returned 1 [0180.520] wcscmp (_String1="Chisinau", _String2=".") returned 1 [0180.520] wcscmp (_String1="Chisinau", _String2="..") returned 1 [0180.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e15700 [0180.520] wcscpy (in: _Dest=0x3e15700, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.520] wcscat (in: _Dest=0x3e15700, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.520] wcscat (in: _Dest=0x3e15700, _Source="Chisinau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" [0180.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e15700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0180.521] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Copenhagen", cAlternateFileName="COPENH~1")) returned 1 [0180.521] wcscmp (_String1="Copenhagen", _String2=".") returned 1 [0180.522] wcscmp (_String1="Copenhagen", _String2="..") returned 1 [0180.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3519c0 [0180.522] wcscpy (in: _Dest=0x3519c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.522] wcscat (in: _Dest=0x3519c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.522] wcscat (in: _Dest=0x3519c0, _Source="Copenhagen" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" [0180.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3519c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0180.523] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dublin", cAlternateFileName="")) returned 1 [0180.524] wcscmp (_String1="Dublin", _String2=".") returned 1 [0180.524] wcscmp (_String1="Dublin", _String2="..") returned 1 [0180.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47cd0 [0180.524] wcscpy (in: _Dest=0x3d47cd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.524] wcscat (in: _Dest=0x3d47cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.524] wcscat (in: _Dest=0x3d47cd0, _Source="Dublin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin" [0180.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0180.525] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gibraltar", cAlternateFileName="GIBRAL~1")) returned 1 [0180.525] wcscmp (_String1="Gibraltar", _String2=".") returned 1 [0180.525] wcscmp (_String1="Gibraltar", _String2="..") returned 1 [0180.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x364a80 [0180.526] wcscpy (in: _Dest=0x364a80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.526] wcscat (in: _Dest=0x364a80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.526] wcscat (in: _Dest=0x364a80, _Source="Gibraltar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" [0180.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x364a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0180.527] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Helsinki", cAlternateFileName="")) returned 1 [0180.527] wcscmp (_String1="Helsinki", _String2=".") returned 1 [0180.527] wcscmp (_String1="Helsinki", _String2="..") returned 1 [0180.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e2ccd8 [0180.527] wcscpy (in: _Dest=0x3e2ccd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.527] wcscat (in: _Dest=0x3e2ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.527] wcscat (in: _Dest=0x3e2ccd8, _Source="Helsinki" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" [0180.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0180.529] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Istanbul", cAlternateFileName="")) returned 1 [0180.529] wcscmp (_String1="Istanbul", _String2=".") returned 1 [0180.529] wcscmp (_String1="Istanbul", _String2="..") returned 1 [0180.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x81d4458 [0180.529] wcscpy (in: _Dest=0x81d4458, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.529] wcscat (in: _Dest=0x81d4458, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.529] wcscat (in: _Dest=0x81d4458, _Source="Istanbul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" [0180.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d4458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0180.530] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kaliningrad", cAlternateFileName="KALINI~1")) returned 1 [0180.531] wcscmp (_String1="Kaliningrad", _String2=".") returned 1 [0180.531] wcscmp (_String1="Kaliningrad", _String2="..") returned 1 [0180.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f0b3e8 [0180.531] wcscpy (in: _Dest=0x3f0b3e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.531] wcscat (in: _Dest=0x3f0b3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.531] wcscat (in: _Dest=0x3f0b3e8, _Source="Kaliningrad" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" [0180.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2578 [0180.532] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiev", cAlternateFileName="")) returned 1 [0180.532] wcscmp (_String1="Kiev", _String2=".") returned 1 [0180.532] wcscmp (_String1="Kiev", _String2="..") returned 1 [0180.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47d38 [0180.532] wcscpy (in: _Dest=0x3d47d38, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.532] wcscat (in: _Dest=0x3d47d38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.532] wcscat (in: _Dest=0x3d47d38, _Source="Kiev" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev" [0180.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2574 [0180.731] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisbon", cAlternateFileName="")) returned 1 [0180.731] wcscmp (_String1="Lisbon", _String2=".") returned 1 [0180.732] wcscmp (_String1="Lisbon", _String2="..") returned 1 [0180.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47cd0 [0180.732] wcscpy (in: _Dest=0x3d47cd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.732] wcscat (in: _Dest=0x3d47cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.732] wcscat (in: _Dest=0x3d47cd0, _Source="Lisbon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" [0180.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0180.741] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="London", cAlternateFileName="")) returned 1 [0180.741] wcscmp (_String1="London", _String2=".") returned 1 [0180.741] wcscmp (_String1="London", _String2="..") returned 1 [0180.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47c68 [0180.742] wcscpy (in: _Dest=0x3d47c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.742] wcscat (in: _Dest=0x3d47c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.742] wcscat (in: _Dest=0x3d47c68, _Source="London" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London" [0180.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0180.748] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luxembourg", cAlternateFileName="LUXEMB~1")) returned 1 [0180.749] wcscmp (_String1="Luxembourg", _String2=".") returned 1 [0180.749] wcscmp (_String1="Luxembourg", _String2="..") returned 1 [0180.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e2ccd8 [0180.749] wcscpy (in: _Dest=0x3e2ccd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.749] wcscat (in: _Dest=0x3e2ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.749] wcscat (in: _Dest=0x3e2ccd8, _Source="Luxembourg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" [0180.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0180.750] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madrid", cAlternateFileName="")) returned 1 [0180.750] wcscmp (_String1="Madrid", _String2=".") returned 1 [0180.750] wcscmp (_String1="Madrid", _String2="..") returned 1 [0180.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47c00 [0180.750] wcscpy (in: _Dest=0x3d47c00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.751] wcscat (in: _Dest=0x3d47c00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.751] wcscat (in: _Dest=0x3d47c00, _Source="Madrid" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid" [0180.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2578 [0180.752] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malta", cAlternateFileName="")) returned 1 [0180.752] wcscmp (_String1="Malta", _String2=".") returned 1 [0180.752] wcscmp (_String1="Malta", _String2="..") returned 1 [0180.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47e08 [0180.752] wcscpy (in: _Dest=0x3d47e08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.752] wcscat (in: _Dest=0x3d47e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.752] wcscat (in: _Dest=0x3d47e08, _Source="Malta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta" [0180.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0180.753] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x25d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Minsk", cAlternateFileName="")) returned 1 [0180.753] wcscmp (_String1="Minsk", _String2=".") returned 1 [0180.753] wcscmp (_String1="Minsk", _String2="..") returned 1 [0180.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47e70 [0180.753] wcscpy (in: _Dest=0x3d47e70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.754] wcscat (in: _Dest=0x3d47e70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.754] wcscat (in: _Dest=0x3d47e70, _Source="Minsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk" [0180.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0180.755] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x628, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monaco", cAlternateFileName="")) returned 1 [0180.755] wcscmp (_String1="Monaco", _String2=".") returned 1 [0180.755] wcscmp (_String1="Monaco", _String2="..") returned 1 [0180.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47ed8 [0180.755] wcscpy (in: _Dest=0x3d47ed8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.755] wcscat (in: _Dest=0x3d47ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.755] wcscat (in: _Dest=0x3d47ed8, _Source="Monaco" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco" [0180.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0180.756] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moscow", cAlternateFileName="")) returned 1 [0180.756] wcscmp (_String1="Moscow", _String2=".") returned 1 [0180.757] wcscmp (_String1="Moscow", _String2="..") returned 1 [0180.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47f40 [0180.757] wcscpy (in: _Dest=0x3d47f40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.757] wcscat (in: _Dest=0x3d47f40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.757] wcscat (in: _Dest=0x3d47f40, _Source="Moscow" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow" [0180.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0180.759] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oslo", cAlternateFileName="")) returned 1 [0180.759] wcscmp (_String1="Oslo", _String2=".") returned 1 [0180.759] wcscmp (_String1="Oslo", _String2="..") returned 1 [0180.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47310 [0180.759] wcscpy (in: _Dest=0x3d47310, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.759] wcscat (in: _Dest=0x3d47310, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.759] wcscat (in: _Dest=0x3d47310, _Source="Oslo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo" [0180.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0180.773] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paris", cAlternateFileName="")) returned 1 [0180.773] wcscmp (_String1="Paris", _String2=".") returned 1 [0180.773] wcscmp (_String1="Paris", _String2="..") returned 1 [0180.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46a88 [0180.773] wcscpy (in: _Dest=0x3d46a88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.773] wcscat (in: _Dest=0x3d46a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.773] wcscat (in: _Dest=0x3d46a88, _Source="Paris" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris" [0180.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0180.775] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prague", cAlternateFileName="")) returned 1 [0180.775] wcscmp (_String1="Prague", _String2=".") returned 1 [0180.775] wcscmp (_String1="Prague", _String2="..") returned 1 [0180.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47108 [0180.775] wcscpy (in: _Dest=0x3d47108, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.776] wcscat (in: _Dest=0x3d47108, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.776] wcscat (in: _Dest=0x3d47108, _Source="Prague" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague" [0180.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0180.777] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riga", cAlternateFileName="")) returned 1 [0180.777] wcscmp (_String1="Riga", _String2=".") returned 1 [0180.777] wcscmp (_String1="Riga", _String2="..") returned 1 [0180.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47858 [0180.777] wcscpy (in: _Dest=0x3d47858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.777] wcscat (in: _Dest=0x3d47858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.777] wcscat (in: _Dest=0x3d47858, _Source="Riga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga" [0180.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0180.779] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rome", cAlternateFileName="")) returned 1 [0180.779] wcscmp (_String1="Rome", _String2=".") returned 1 [0180.779] wcscmp (_String1="Rome", _String2="..") returned 1 [0180.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47378 [0180.779] wcscpy (in: _Dest=0x3d47378, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.779] wcscat (in: _Dest=0x3d47378, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.779] wcscat (in: _Dest=0x3d47378, _Source="Rome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome" [0180.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0180.780] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samara", cAlternateFileName="")) returned 1 [0180.781] wcscmp (_String1="Samara", _String2=".") returned 1 [0180.781] wcscmp (_String1="Samara", _String2="..") returned 1 [0180.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47240 [0180.781] wcscpy (in: _Dest=0x3d47240, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.781] wcscat (in: _Dest=0x3d47240, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.781] wcscat (in: _Dest=0x3d47240, _Source="Samara" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara" [0180.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0180.782] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simferopol", cAlternateFileName="SIMFER~1")) returned 1 [0180.782] wcscmp (_String1="Simferopol", _String2=".") returned 1 [0180.782] wcscmp (_String1="Simferopol", _String2="..") returned 1 [0180.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33e48 [0180.782] wcscpy (in: _Dest=0x3f33e48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.782] wcscat (in: _Dest=0x3f33e48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.783] wcscat (in: _Dest=0x3f33e48, _Source="Simferopol" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" [0180.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0180.784] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sofia", cAlternateFileName="")) returned 1 [0180.784] wcscmp (_String1="Sofia", _String2=".") returned 1 [0180.784] wcscmp (_String1="Sofia", _String2="..") returned 1 [0180.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d471d8 [0180.784] wcscpy (in: _Dest=0x3d471d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.784] wcscat (in: _Dest=0x3d471d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.784] wcscat (in: _Dest=0x3d471d8, _Source="Sofia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia" [0180.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d471d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0180.786] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stockholm", cAlternateFileName="STOCKH~1")) returned 1 [0180.786] wcscmp (_String1="Stockholm", _String2=".") returned 1 [0180.786] wcscmp (_String1="Stockholm", _String2="..") returned 1 [0180.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33dd8 [0180.786] wcscpy (in: _Dest=0x3f33dd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.786] wcscat (in: _Dest=0x3f33dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.786] wcscat (in: _Dest=0x3f33dd8, _Source="Stockholm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" [0180.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0180.787] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tallinn", cAlternateFileName="")) returned 1 [0180.787] wcscmp (_String1="Tallinn", _String2=".") returned 1 [0180.787] wcscmp (_String1="Tallinn", _String2="..") returned 1 [0180.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33f28 [0180.787] wcscpy (in: _Dest=0x3f33f28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.787] wcscat (in: _Dest=0x3f33f28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.788] wcscat (in: _Dest=0x3f33f28, _Source="Tallinn" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" [0180.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0180.789] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tirane", cAlternateFileName="")) returned 1 [0180.789] wcscmp (_String1="Tirane", _String2=".") returned 1 [0180.789] wcscmp (_String1="Tirane", _String2="..") returned 1 [0180.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d472a8 [0180.789] wcscpy (in: _Dest=0x3d472a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.789] wcscat (in: _Dest=0x3d472a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.789] wcscat (in: _Dest=0x3d472a8, _Source="Tirane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane" [0180.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d472a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0180.791] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uzhgorod", cAlternateFileName="")) returned 1 [0180.791] wcscmp (_String1="Uzhgorod", _String2=".") returned 1 [0180.791] wcscmp (_String1="Uzhgorod", _String2="..") returned 1 [0180.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33c18 [0180.791] wcscpy (in: _Dest=0x3f33c18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.791] wcscat (in: _Dest=0x3f33c18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.791] wcscat (in: _Dest=0x3f33c18, _Source="Uzhgorod" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" [0180.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0180.793] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vaduz", cAlternateFileName="")) returned 1 [0180.793] wcscmp (_String1="Vaduz", _String2=".") returned 1 [0180.793] wcscmp (_String1="Vaduz", _String2="..") returned 1 [0180.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eccd28 [0180.793] wcscpy (in: _Dest=0x3eccd28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.793] wcscat (in: _Dest=0x3eccd28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.793] wcscat (in: _Dest=0x3eccd28, _Source="Vaduz" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" [0180.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3eccd28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0180.897] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vienna", cAlternateFileName="")) returned 1 [0180.897] wcscmp (_String1="Vienna", _String2=".") returned 1 [0180.897] wcscmp (_String1="Vienna", _String2="..") returned 1 [0180.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d472a8 [0180.897] wcscpy (in: _Dest=0x3d472a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.897] wcscat (in: _Dest=0x3d472a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.898] wcscat (in: _Dest=0x3d472a8, _Source="Vienna" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna" [0180.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d472a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0180.899] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vilnius", cAlternateFileName="")) returned 1 [0180.899] wcscmp (_String1="Vilnius", _String2=".") returned 1 [0180.899] wcscmp (_String1="Vilnius", _String2="..") returned 1 [0180.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33c18 [0180.899] wcscpy (in: _Dest=0x3f33c18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.900] wcscat (in: _Dest=0x3f33c18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.900] wcscat (in: _Dest=0x3f33c18, _Source="Vilnius" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" [0180.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0180.901] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Volgograd", cAlternateFileName="VOLGOG~1")) returned 1 [0180.901] wcscmp (_String1="Volgograd", _String2=".") returned 1 [0180.901] wcscmp (_String1="Volgograd", _String2="..") returned 1 [0180.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33f28 [0180.901] wcscpy (in: _Dest=0x3f33f28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.901] wcscat (in: _Dest=0x3f33f28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.901] wcscat (in: _Dest=0x3f33f28, _Source="Volgograd" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" [0180.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0180.903] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Warsaw", cAlternateFileName="")) returned 1 [0180.903] wcscmp (_String1="Warsaw", _String2=".") returned 1 [0180.903] wcscmp (_String1="Warsaw", _String2="..") returned 1 [0180.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d471d8 [0180.903] wcscpy (in: _Dest=0x3d471d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.903] wcscat (in: _Dest=0x3d471d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.903] wcscat (in: _Dest=0x3d471d8, _Source="Warsaw" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" [0180.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d471d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0180.904] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zaporozhye", cAlternateFileName="ZAPORO~1")) returned 1 [0180.904] wcscmp (_String1="Zaporozhye", _String2=".") returned 1 [0180.904] wcscmp (_String1="Zaporozhye", _String2="..") returned 1 [0180.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f33dd8 [0180.905] wcscpy (in: _Dest=0x3f33dd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.905] wcscat (in: _Dest=0x3f33dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.905] wcscat (in: _Dest=0x3f33dd8, _Source="Zaporozhye" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" [0180.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0180.906] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 1 [0180.906] wcscmp (_String1="Zurich", _String2=".") returned 1 [0180.906] wcscmp (_String1="Zurich", _String2="..") returned 1 [0180.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47240 [0180.906] wcscpy (in: _Dest=0x3d47240, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0180.906] wcscat (in: _Dest=0x3d47240, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0180.906] wcscat (in: _Dest=0x3d47240, _Source="Zurich" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich" [0180.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a4 [0180.907] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 0 [0180.907] FindClose (in: hFindFile=0x3e55488 | out: hFindFile=0x3e55488) returned 1 [0184.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0184.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0184.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 4120 os_tid = 0x16f0 [0170.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\gmt")) returned 0x20 [0171.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT", dwFileAttributes=0x20) returned 0 [0171.897] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\gmt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.897] GetLastError () returned 0x5 [0171.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT", dwFileAttributes=0x20) returned 0 [0171.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e232d0) returned 1 Thread: id = 4121 os_tid = 0x1108 [0170.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\hst")) returned 0x20 [0171.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST", dwFileAttributes=0x20) returned 0 [0171.895] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\hst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.895] GetLastError () returned 0x5 [0171.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST", dwFileAttributes=0x20) returned 0 [0171.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831c458) returned 1 Thread: id = 4122 os_tid = 0x16f8 [0170.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7448 [0170.077] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0170.077] wcscat (in: _Dest=0x2fe7448, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0170.077] wcscat (in: _Dest=0x2fe7448, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\*" [0170.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0170.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54f08 [0172.700] wcscmp (_String1=".", _String2=".") returned 0 [0172.700] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.700] wcscmp (_String1="..", _String2=".") returned 1 [0172.700] wcscmp (_String1="..", _String2="..") returned 0 [0172.701] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antananarivo", cAlternateFileName="ANTANA~1")) returned 1 [0172.701] wcscmp (_String1="Antananarivo", _String2=".") returned 1 [0172.701] wcscmp (_String1="Antananarivo", _String2="..") returned 1 [0172.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df8ad8 [0172.701] wcscpy (in: _Dest=0x3df8ad8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0172.701] wcscat (in: _Dest=0x3df8ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0172.701] wcscat (in: _Dest=0x3df8ad8, _Source="Antananarivo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" [0178.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0178.143] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chagos", cAlternateFileName="")) returned 1 [0178.143] wcscmp (_String1="Chagos", _String2=".") returned 1 [0178.143] wcscmp (_String1="Chagos", _String2="..") returned 1 [0178.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46540 [0178.144] wcscpy (in: _Dest=0x3d46540, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.144] wcscat (in: _Dest=0x3d46540, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.144] wcscat (in: _Dest=0x3d46540, _Source="Chagos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos" [0178.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0178.145] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Christmas", cAlternateFileName="CHRIST~1")) returned 1 [0178.145] wcscmp (_String1="Christmas", _String2=".") returned 1 [0178.145] wcscmp (_String1="Christmas", _String2="..") returned 1 [0178.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a188 [0178.145] wcscpy (in: _Dest=0x3f3a188, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.145] wcscat (in: _Dest=0x3f3a188, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.145] wcscat (in: _Dest=0x3f3a188, _Source="Christmas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas" [0178.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0178.147] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cocos", cAlternateFileName="")) returned 1 [0178.147] wcscmp (_String1="Cocos", _String2=".") returned 1 [0178.147] wcscmp (_String1="Cocos", _String2="..") returned 1 [0178.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d469b8 [0178.147] wcscpy (in: _Dest=0x3d469b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.147] wcscat (in: _Dest=0x3d469b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.147] wcscat (in: _Dest=0x3d469b8, _Source="Cocos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos" [0178.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d469b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0178.149] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comoro", cAlternateFileName="")) returned 1 [0178.149] wcscmp (_String1="Comoro", _String2=".") returned 1 [0178.149] wcscmp (_String1="Comoro", _String2="..") returned 1 [0178.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47650 [0178.149] wcscpy (in: _Dest=0x3d47650, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.149] wcscat (in: _Dest=0x3d47650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.149] wcscat (in: _Dest=0x3d47650, _Source="Comoro" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro" [0178.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0178.151] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kerguelen", cAlternateFileName="KERGUE~1")) returned 1 [0178.151] wcscmp (_String1="Kerguelen", _String2=".") returned 1 [0178.151] wcscmp (_String1="Kerguelen", _String2="..") returned 1 [0178.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f33f98 [0178.151] wcscpy (in: _Dest=0x3f33f98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.151] wcscat (in: _Dest=0x3f33f98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.151] wcscat (in: _Dest=0x3f33f98, _Source="Kerguelen" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" [0178.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0178.153] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mahe", cAlternateFileName="")) returned 1 [0178.153] wcscmp (_String1="Mahe", _String2=".") returned 1 [0178.153] wcscmp (_String1="Mahe", _String2="..") returned 1 [0178.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47720 [0178.153] wcscpy (in: _Dest=0x3d47720, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.153] wcscat (in: _Dest=0x3d47720, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.153] wcscat (in: _Dest=0x3d47720, _Source="Mahe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe" [0178.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d47720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0178.154] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maldives", cAlternateFileName="")) returned 1 [0178.154] wcscmp (_String1="Maldives", _String2=".") returned 1 [0178.154] wcscmp (_String1="Maldives", _String2="..") returned 1 [0178.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33a58 [0178.154] wcscpy (in: _Dest=0x3f33a58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.154] wcscat (in: _Dest=0x3f33a58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.155] wcscat (in: _Dest=0x3f33a58, _Source="Maldives" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives" [0178.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0178.156] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mauritius", cAlternateFileName="MAURIT~1")) returned 1 [0178.156] wcscmp (_String1="Mauritius", _String2=".") returned 1 [0178.156] wcscmp (_String1="Mauritius", _String2="..") returned 1 [0178.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f34238 [0178.156] wcscpy (in: _Dest=0x3f34238, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.156] wcscat (in: _Dest=0x3f34238, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.156] wcscat (in: _Dest=0x3f34238, _Source="Mauritius" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" [0178.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0178.158] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mayotte", cAlternateFileName="")) returned 1 [0178.158] wcscmp (_String1="Mayotte", _String2=".") returned 1 [0178.158] wcscmp (_String1="Mayotte", _String2="..") returned 1 [0178.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f339e8 [0178.158] wcscpy (in: _Dest=0x3f339e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.158] wcscat (in: _Dest=0x3f339e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.158] wcscat (in: _Dest=0x3f339e8, _Source="Mayotte" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" [0178.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f339e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x186c [0178.159] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 1 [0178.159] wcscmp (_String1="Reunion", _String2=".") returned 1 [0178.159] wcscmp (_String1="Reunion", _String2="..") returned 1 [0178.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33978 [0178.159] wcscpy (in: _Dest=0x3f33978, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.159] wcscat (in: _Dest=0x3f33978, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.159] wcscat (in: _Dest=0x3f33978, _Source="Reunion" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion" [0178.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0178.161] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 0 [0178.161] FindClose (in: hFindFile=0x3e54f08 | out: hFindFile=0x3e54f08) returned 1 [0185.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0185.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 [0185.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 4123 os_tid = 0x16fc [0170.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\met")) returned 0x20 [0171.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET", dwFileAttributes=0x20) returned 0 [0171.892] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\met"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.892] GetLastError () returned 0x5 [0171.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET", dwFileAttributes=0x20) returned 0 [0171.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831c4b0) returned 1 Thread: id = 4124 os_tid = 0x1704 [0170.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst")) returned 0x20 [0171.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST", dwFileAttributes=0x20) returned 0 [0171.886] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.886] GetLastError () returned 0x5 [0171.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST", dwFileAttributes=0x20) returned 0 [0171.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831c718) returned 1 Thread: id = 4125 os_tid = 0x1120 [0170.190] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png")) returned 0x2020 [0172.888] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png", dwFileAttributes=0x20) returned 1 [0176.293] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x290c [0176.293] GetFileSizeEx (in: hFile=0x290c, lpFileSize=0x1373fdd8 | out: lpFileSize=0x1373fdd8*=5900) returned 1 [0176.293] SetFilePointerEx (in: hFile=0x290c, liDistanceToMove=0x1708, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.293] ReadFile (in: hFile=0x290c, lpBuffer=0x1373fde4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1373fdc0, lpOverlapped=0x0 | out: lpBuffer=0x1373fde4*, lpNumberOfBytesRead=0x1373fdc0*=0x4, lpOverlapped=0x0) returned 1 [0176.296] SetFilePointerEx (in: hFile=0x290c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49c18 [0176.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0176.296] NtQuerySystemTime (in: CurrentTime=0x1373fd60 | out: CurrentTime=0x1373fd60*=132471540443952000) returned 0x0 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0xd33d6a0 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x5b06d4ac [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x2eeab66f [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x5fc47b71 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x3f4ded19 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x40709c6d [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x7223e87f [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x7456a730 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x5680b1ba [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x47da7577 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x21c94a3 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x7da68829 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x43b34ad2 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0xe85fe93 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x58dcab61 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x67db6ddf [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x5048fb18 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x148219c5 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x2b6fc867 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x7748eba0 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x64e59653 [0176.296] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x72a3bd5b [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x59fd8c4d [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x2f5a97b3 [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x3306a050 [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x9eeb36a [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x955373e [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x1676f02 [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x11576b3d [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x4a767acc [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x2c22c885 [0176.297] RtlRandomEx (in: Seed=0x1373fd58 | out: Seed=0x1373fd58) returned 0x34ac3ff2 [0176.305] ReadFile (in: hFile=0x290c, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x170c, lpNumberOfBytesRead=0x1373fd54, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0x1373fd54*=0x170c, lpOverlapped=0x0) returned 1 [0176.306] SetFilePointerEx (in: hFile=0x290c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.306] WriteFile (in: hFile=0x290c, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0x170c, lpNumberOfBytesWritten=0x1373fd58, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0x1373fd58*=0x170c, lpOverlapped=0x0) returned 1 [0176.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1a18 [0176.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3480 [0176.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0176.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0176.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0176.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0176.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6968) returned 1 [0176.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef3480 [0176.905] SetFilePointerEx (in: hFile=0x290c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.905] WriteFile (in: hFile=0x290c, lpBuffer=0x3ef58b8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1373fdcc, lpOverlapped=0x0 | out: lpBuffer=0x3ef58b8*, lpNumberOfBytesWritten=0x1373fdcc*=0x100, lpOverlapped=0x0) returned 1 [0176.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef58b8) returned 1 [0176.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0176.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1108) returned 1 [0176.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0176.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1a18) returned 1 [0176.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49c18) returned 1 [0176.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0176.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0176.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef58b8 [0176.928] wcscpy (in: _Dest=0x3ef58b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" [0176.928] wcscat (in: _Dest=0x3ef58b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.f0dbec" [0176.928] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.f0dbec", NtPathName=0x1373fd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x8186fe8 [0176.958] FlushFileBuffers (hFile=0x290c) returned 1 [0177.711] CloseHandle (hObject=0x290c) returned 1 [0182.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3dec5f8 [0182.496] wcscpy (in: _Dest=0x3dec5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0182.496] wcscat (in: _Dest=0x3dec5f8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\F0DBEC-Readme.txt" [0182.496] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\f0dbec-readme.txt")) returned 0xffffffff [0182.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c04 [0182.701] WriteFile (in: hFile=0x1c04, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1373fd74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1373fd74*=0x70c, lpOverlapped=0x0) returned 1 [0182.902] CloseHandle (hObject=0x1c04) returned 1 [0182.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0182.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 4126 os_tid = 0x1124 [0170.191] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json")) returned 0x2020 [0173.326] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0177.165] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b80 [0177.165] GetFileSizeEx (in: hFile=0x1b80, lpFileSize=0x136df828 | out: lpFileSize=0x136df828*=755) returned 1 [0177.165] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x2ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.165] ReadFile (in: hFile=0x1b80, lpBuffer=0x136df834, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x136df810, lpOverlapped=0x0 | out: lpBuffer=0x136df834*, lpNumberOfBytesRead=0x136df810*=0x4, lpOverlapped=0x0) returned 1 [0182.203] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b50 [0182.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42dd0 [0182.205] NtQuerySystemTime (in: CurrentTime=0x136df7b0 | out: CurrentTime=0x136df7b0*=132471540501828000) returned 0x0 [0182.205] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x4dec77a1 [0182.205] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x6cdf7c92 [0182.205] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x3a37e97f [0182.205] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x12a6460 [0182.205] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x6f381fbb [0182.205] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x2f79c75e [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x72aaec98 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x146a6e68 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x6dce0e3f [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x3aa45524 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x296ffb21 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x43e21b42 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x3cb1c69b [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x43082dc1 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x481f3815 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x33f0312f [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x31fcc442 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x30538df4 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x17f8a659 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x6081e5fd [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x2b7d12d [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x616050d3 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x72410cd6 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x6335933a [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0xeea8e4 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x637da513 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x6b974c8 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x3c023584 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x902b467 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x4622c4 [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x6772183f [0182.206] RtlRandomEx (in: Seed=0x136df7a8 | out: Seed=0x136df7a8) returned 0x6c66b4bd [0182.216] ReadFile (in: hFile=0x1b80, lpBuffer=0x82b90c0, nNumberOfBytesToRead=0x2f3, lpNumberOfBytesRead=0x136df7a4, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesRead=0x136df7a4*=0x2f3, lpOverlapped=0x0) returned 1 [0182.216] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.216] WriteFile (in: hFile=0x1b80, lpBuffer=0x82bccc8*, nNumberOfBytesToWrite=0x2f3, lpNumberOfBytesWritten=0x136df7a8, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesWritten=0x136df7a8*=0x2f3, lpOverlapped=0x0) returned 1 [0184.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0184.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0184.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0184.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0184.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0184.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0184.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4890) returned 1 [0184.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69180 [0184.722] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.722] WriteFile (in: hFile=0x1b80, lpBuffer=0x30bb4d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x136df81c, lpOverlapped=0x0 | out: lpBuffer=0x30bb4d0*, lpNumberOfBytesWritten=0x136df81c*=0x10c, lpOverlapped=0x0) returned 1 [0189.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0189.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0189.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0189.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0189.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbb8) returned 1 [0189.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b50) returned 1 [0189.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e20) returned 1 [0189.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0189.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bb4d0 [0189.371] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" [0189.371] wcscat (in: _Dest=0x30bb4d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json.f0dbec" [0189.371] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json.f0dbec", NtPathName=0x136df7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81e8c40 [0190.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8c40) returned 1 [0190.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830f420) returned 1 [0190.069] NtQueryInformationFile (in: FileHandle=0x1b80, IoStatusBlock=0x136df778, FileInformation=0x136df780, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x136df778, FileInformation=0x136df780) returned 0x0 [0190.069] NtSetInformationFile (FileHandle=0x1b80, IoStatusBlock=0x136df778, FileInformation=0x136df780, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0190.749] FlushFileBuffers (hFile=0x1b80) returned 1 [0190.752] CloseHandle (hObject=0x1b80) returned 1 [0190.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bcf10 [0190.853] wcscpy (in: _Dest=0x30bcf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0190.853] wcscat (in: _Dest=0x30bcf10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\F0DBEC-Readme.txt" [0190.853] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\f0dbec-readme.txt")) returned 0x2020 [0190.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0190.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321cc8) returned 1 Thread: id = 4127 os_tid = 0x1128 [0170.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e27940 [0170.191] wcscpy (in: _Dest=0x3e27940, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0170.191] wcscat (in: _Dest=0x3e27940, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0170.191] wcscat (in: _Dest=0x3e27940, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*" [0170.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f3a0 [0170.191] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*", lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f10 [0174.442] wcscmp (_String1=".", _String2=".") returned 0 [0174.442] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.442] wcscmp (_String1="..", _String2=".") returned 1 [0174.442] wcscmp (_String1="..", _String2="..") returned 0 [0174.442] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0174.442] wcscmp (_String1="ar", _String2=".") returned 1 [0174.442] wcscmp (_String1="ar", _String2="..") returned 1 [0174.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27c40 [0174.442] wcscpy (in: _Dest=0x3e27c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0174.442] wcscat (in: _Dest=0x3e27c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0174.442] wcscat (in: _Dest=0x3e27c40, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" [0178.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0178.575] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0178.575] wcscmp (_String1="bg", _String2=".") returned 1 [0178.575] wcscmp (_String1="bg", _String2="..") returned 1 [0178.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27640 [0178.575] wcscpy (in: _Dest=0x3e27640, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.575] wcscat (in: _Dest=0x3e27640, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.575] wcscat (in: _Dest=0x3e27640, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" [0178.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0178.577] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0178.577] wcscmp (_String1="ca", _String2=".") returned 1 [0178.577] wcscmp (_String1="ca", _String2="..") returned 1 [0178.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27440 [0178.577] wcscpy (in: _Dest=0x3e27440, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.577] wcscat (in: _Dest=0x3e27440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.577] wcscat (in: _Dest=0x3e27440, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" [0178.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0178.579] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0178.579] wcscmp (_String1="cs", _String2=".") returned 1 [0178.579] wcscmp (_String1="cs", _String2="..") returned 1 [0178.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e25840 [0178.579] wcscpy (in: _Dest=0x3e25840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.579] wcscat (in: _Dest=0x3e25840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.579] wcscat (in: _Dest=0x3e25840, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" [0178.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e25840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0178.580] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0178.580] wcscmp (_String1="da", _String2=".") returned 1 [0178.580] wcscmp (_String1="da", _String2="..") returned 1 [0178.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27e40 [0178.581] wcscpy (in: _Dest=0x3e27e40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.581] wcscat (in: _Dest=0x3e27e40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.581] wcscat (in: _Dest=0x3e27e40, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" [0178.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0178.582] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0178.582] wcscmp (_String1="de", _String2=".") returned 1 [0178.582] wcscmp (_String1="de", _String2="..") returned 1 [0178.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27f40 [0178.583] wcscpy (in: _Dest=0x3e27f40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.583] wcscat (in: _Dest=0x3e27f40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.583] wcscat (in: _Dest=0x3e27f40, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" [0178.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0178.584] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0178.584] wcscmp (_String1="el", _String2=".") returned 1 [0178.584] wcscmp (_String1="el", _String2="..") returned 1 [0178.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e28040 [0178.584] wcscpy (in: _Dest=0x3e28040, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.584] wcscat (in: _Dest=0x3e28040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.584] wcscat (in: _Dest=0x3e28040, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" [0178.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0178.586] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0178.586] wcscmp (_String1="en", _String2=".") returned 1 [0178.586] wcscmp (_String1="en", _String2="..") returned 1 [0178.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e28140 [0178.586] wcscpy (in: _Dest=0x3e28140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.586] wcscat (in: _Dest=0x3e28140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.586] wcscat (in: _Dest=0x3e28140, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" [0178.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0178.587] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f516a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0178.587] wcscmp (_String1="es", _String2=".") returned 1 [0178.588] wcscmp (_String1="es", _String2="..") returned 1 [0178.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e28240 [0178.588] wcscpy (in: _Dest=0x3e28240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.588] wcscat (in: _Dest=0x3e28240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.588] wcscat (in: _Dest=0x3e28240, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" [0178.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0178.589] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0178.589] wcscmp (_String1="fi", _String2=".") returned 1 [0178.589] wcscmp (_String1="fi", _String2="..") returned 1 [0178.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e28340 [0178.589] wcscpy (in: _Dest=0x3e28340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.590] wcscat (in: _Dest=0x3e28340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.590] wcscat (in: _Dest=0x3e28340, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" [0178.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0178.591] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0178.591] wcscmp (_String1="fil", _String2=".") returned 1 [0178.591] wcscmp (_String1="fil", _String2="..") returned 1 [0178.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e28440 [0178.591] wcscpy (in: _Dest=0x3e28440, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.591] wcscat (in: _Dest=0x3e28440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.591] wcscat (in: _Dest=0x3e28440, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" [0178.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0178.593] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0178.593] wcscmp (_String1="fr", _String2=".") returned 1 [0178.593] wcscmp (_String1="fr", _String2="..") returned 1 [0178.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e28540 [0178.593] wcscpy (in: _Dest=0x3e28540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.593] wcscat (in: _Dest=0x3e28540, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.593] wcscat (in: _Dest=0x3e28540, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" [0178.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0178.594] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0178.594] wcscmp (_String1="hi", _String2=".") returned 1 [0178.594] wcscmp (_String1="hi", _String2="..") returned 1 [0178.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e28640 [0178.594] wcscpy (in: _Dest=0x3e28640, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.594] wcscat (in: _Dest=0x3e28640, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.595] wcscat (in: _Dest=0x3e28640, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" [0178.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0178.596] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0178.596] wcscmp (_String1="hr", _String2=".") returned 1 [0178.596] wcscmp (_String1="hr", _String2="..") returned 1 [0178.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e28740 [0178.596] wcscpy (in: _Dest=0x3e28740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.596] wcscat (in: _Dest=0x3e28740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.596] wcscat (in: _Dest=0x3e28740, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" [0178.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0178.598] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0178.598] wcscmp (_String1="hu", _String2=".") returned 1 [0178.598] wcscmp (_String1="hu", _String2="..") returned 1 [0178.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e28840 [0178.598] wcscpy (in: _Dest=0x3e28840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.598] wcscat (in: _Dest=0x3e28840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.598] wcscat (in: _Dest=0x3e28840, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" [0178.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0178.599] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0178.599] wcscmp (_String1="id", _String2=".") returned 1 [0178.599] wcscmp (_String1="id", _String2="..") returned 1 [0178.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e28940 [0178.600] wcscpy (in: _Dest=0x3e28940, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.600] wcscat (in: _Dest=0x3e28940, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.600] wcscat (in: _Dest=0x3e28940, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" [0178.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e28940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0178.601] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0178.601] wcscmp (_String1="it", _String2=".") returned 1 [0178.601] wcscmp (_String1="it", _String2="..") returned 1 [0178.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x2f7ac8 [0178.601] wcscpy (in: _Dest=0x2f7ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.601] wcscat (in: _Dest=0x2f7ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.602] wcscat (in: _Dest=0x2f7ac8, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" [0178.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2f7ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0178.603] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0178.603] wcscmp (_String1="ja", _String2=".") returned 1 [0178.603] wcscmp (_String1="ja", _String2="..") returned 1 [0178.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x8059fe0 [0178.603] wcscpy (in: _Dest=0x8059fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.603] wcscat (in: _Dest=0x8059fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.603] wcscat (in: _Dest=0x8059fe0, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" [0178.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8059fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0178.605] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0178.605] wcscmp (_String1="ko", _String2=".") returned 1 [0178.605] wcscmp (_String1="ko", _String2="..") returned 1 [0178.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a0e0 [0178.605] wcscpy (in: _Dest=0x805a0e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.605] wcscat (in: _Dest=0x805a0e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.605] wcscat (in: _Dest=0x805a0e0, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" [0178.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a0e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0178.607] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0178.607] wcscmp (_String1="lt", _String2=".") returned 1 [0178.607] wcscmp (_String1="lt", _String2="..") returned 1 [0178.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a1e0 [0178.607] wcscpy (in: _Dest=0x805a1e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.607] wcscat (in: _Dest=0x805a1e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.607] wcscat (in: _Dest=0x805a1e0, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" [0178.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0178.608] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0178.609] wcscmp (_String1="lv", _String2=".") returned 1 [0178.609] wcscmp (_String1="lv", _String2="..") returned 1 [0178.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a2e0 [0178.609] wcscpy (in: _Dest=0x805a2e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.609] wcscat (in: _Dest=0x805a2e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.609] wcscat (in: _Dest=0x805a2e0, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" [0178.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0178.610] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0178.610] wcscmp (_String1="nl", _String2=".") returned 1 [0178.610] wcscmp (_String1="nl", _String2="..") returned 1 [0178.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a3e0 [0178.610] wcscpy (in: _Dest=0x805a3e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.610] wcscat (in: _Dest=0x805a3e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.611] wcscat (in: _Dest=0x805a3e0, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" [0178.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0178.800] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0178.800] wcscmp (_String1="no", _String2=".") returned 1 [0178.800] wcscmp (_String1="no", _String2="..") returned 1 [0178.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a4e0 [0178.800] wcscpy (in: _Dest=0x805a4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0178.800] wcscat (in: _Dest=0x805a4e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0178.800] wcscat (in: _Dest=0x805a4e0, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" [0179.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0179.321] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0179.321] wcscmp (_String1="pl", _String2=".") returned 1 [0179.321] wcscmp (_String1="pl", _String2="..") returned 1 [0179.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27c40 [0179.321] wcscpy (in: _Dest=0x3e27c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.321] wcscat (in: _Dest=0x3e27c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.321] wcscat (in: _Dest=0x3e27c40, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" [0179.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e27c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x157c [0179.323] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0179.323] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0179.323] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0179.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f3c78 [0179.323] wcscpy (in: _Dest=0x81f3c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.323] wcscat (in: _Dest=0x81f3c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.323] wcscat (in: _Dest=0x81f3c78, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" [0179.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0179.324] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0179.324] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0179.325] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0179.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81eb960 [0179.325] wcscpy (in: _Dest=0x81eb960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.325] wcscat (in: _Dest=0x81eb960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.325] wcscat (in: _Dest=0x81eb960, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" [0179.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81eb960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0179.326] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0179.326] wcscmp (_String1="ro", _String2=".") returned 1 [0179.326] wcscmp (_String1="ro", _String2="..") returned 1 [0179.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a5e0 [0179.326] wcscpy (in: _Dest=0x805a5e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.326] wcscat (in: _Dest=0x805a5e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.326] wcscat (in: _Dest=0x805a5e0, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" [0179.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0179.327] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0179.327] wcscmp (_String1="ru", _String2=".") returned 1 [0179.328] wcscmp (_String1="ru", _String2="..") returned 1 [0179.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a6e0 [0179.328] wcscpy (in: _Dest=0x805a6e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.328] wcscat (in: _Dest=0x805a6e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.328] wcscat (in: _Dest=0x805a6e0, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" [0179.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0179.329] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0179.329] wcscmp (_String1="se", _String2=".") returned 1 [0179.329] wcscmp (_String1="se", _String2="..") returned 1 [0179.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a7e0 [0179.329] wcscpy (in: _Dest=0x805a7e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.329] wcscat (in: _Dest=0x805a7e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.330] wcscat (in: _Dest=0x805a7e0, _Source="se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" [0179.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0179.331] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0179.331] wcscmp (_String1="sk", _String2=".") returned 1 [0179.331] wcscmp (_String1="sk", _String2="..") returned 1 [0179.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a8e0 [0179.331] wcscpy (in: _Dest=0x805a8e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.331] wcscat (in: _Dest=0x805a8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.331] wcscat (in: _Dest=0x805a8e0, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" [0179.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0179.332] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0179.333] wcscmp (_String1="sl", _String2=".") returned 1 [0179.333] wcscmp (_String1="sl", _String2="..") returned 1 [0179.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805a9e0 [0179.333] wcscpy (in: _Dest=0x805a9e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.333] wcscat (in: _Dest=0x805a9e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.333] wcscat (in: _Dest=0x805a9e0, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" [0179.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805a9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0179.334] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0179.334] wcscmp (_String1="sr", _String2=".") returned 1 [0179.334] wcscmp (_String1="sr", _String2="..") returned 1 [0179.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805aae0 [0179.334] wcscpy (in: _Dest=0x805aae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.334] wcscat (in: _Dest=0x805aae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.334] wcscat (in: _Dest=0x805aae0, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" [0179.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805aae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0179.335] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0179.335] wcscmp (_String1="th", _String2=".") returned 1 [0179.336] wcscmp (_String1="th", _String2="..") returned 1 [0179.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805abe0 [0179.336] wcscpy (in: _Dest=0x805abe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.336] wcscat (in: _Dest=0x805abe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.336] wcscat (in: _Dest=0x805abe0, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" [0179.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805abe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0179.338] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0179.338] wcscmp (_String1="tr", _String2=".") returned 1 [0179.338] wcscmp (_String1="tr", _String2="..") returned 1 [0179.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805ace0 [0179.338] wcscpy (in: _Dest=0x805ace0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.338] wcscat (in: _Dest=0x805ace0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.338] wcscat (in: _Dest=0x805ace0, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" [0179.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805ace0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0179.339] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0179.339] wcscmp (_String1="uk", _String2=".") returned 1 [0179.339] wcscmp (_String1="uk", _String2="..") returned 1 [0179.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805ade0 [0179.340] wcscpy (in: _Dest=0x805ade0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.340] wcscat (in: _Dest=0x805ade0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.340] wcscat (in: _Dest=0x805ade0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" [0179.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805ade0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0179.341] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0179.341] wcscmp (_String1="vi", _String2=".") returned 1 [0179.341] wcscmp (_String1="vi", _String2="..") returned 1 [0179.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x805aee0 [0179.341] wcscpy (in: _Dest=0x805aee0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.341] wcscat (in: _Dest=0x805aee0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.341] wcscat (in: _Dest=0x805aee0, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" [0179.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x805aee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0179.342] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0179.342] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0179.342] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0179.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81eba68 [0179.342] wcscpy (in: _Dest=0x81eba68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.342] wcscat (in: _Dest=0x81eba68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.342] wcscat (in: _Dest=0x81eba68, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" [0179.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81eba68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0179.344] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0179.344] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0179.344] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0179.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81ebb70 [0179.344] wcscpy (in: _Dest=0x81ebb70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0179.344] wcscat (in: _Dest=0x81ebb70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0179.344] wcscat (in: _Dest=0x81ebb70, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" [0179.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ebb70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0179.345] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0181.596] FindClose (in: hFindFile=0x8098f10 | out: hFindFile=0x8098f10) returned 1 [0182.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f3a0) returned 1 [0182.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27940) returned 1 [0182.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 4128 os_tid = 0x112c [0170.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e27a40 [0170.192] wcscpy (in: _Dest=0x3e27a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" [0170.192] wcscat (in: _Dest=0x3e27a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\" [0170.192] wcscat (in: _Dest=0x3e27a40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*" [0170.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091080 [0170.192] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*", lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0173.325] wcscmp (_String1=".", _String2=".") returned 0 [0173.325] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.325] wcscmp (_String1="..", _String2=".") returned 1 [0173.325] wcscmp (_String1="..", _String2="..") returned 0 [0173.325] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0173.325] wcscmp (_String1="_locales", _String2=".") returned 1 [0173.325] wcscmp (_String1="_locales", _String2="..") returned 1 [0173.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8348258 [0173.325] wcscpy (in: _Dest=0x8348258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" [0173.325] wcscat (in: _Dest=0x8348258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\" [0173.325] wcscat (in: _Dest=0x8348258, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales" [0176.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8348258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0176.103] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 0 [0176.103] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0176.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091080) returned 1 [0176.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27a40) returned 1 [0176.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae2f0) returned 1 Thread: id = 4129 os_tid = 0x1130 [0170.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83339b0 [0170.193] wcscpy (in: _Dest=0x83339b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0170.193] wcscat (in: _Dest=0x83339b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" [0170.193] wcscat (in: _Dest=0x83339b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*" [0170.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090bb0 [0170.193] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f0e6a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f10db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f10db0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0172.478] wcscmp (_String1=".", _String2=".") returned 0 [0172.478] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f0e6a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f10db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f10db0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.478] wcscmp (_String1="..", _String2=".") returned 1 [0172.478] wcscmp (_String1="..", _String2="..") returned 0 [0172.479] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f10db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f134c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.479] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.479] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d3b78 [0172.479] wcscpy (in: _Dest=0x81d3b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0172.479] wcscat (in: _Dest=0x81d3b78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" [0172.479] wcscat (in: _Dest=0x81d3b78, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" [0175.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0175.625] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f10db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f134c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.625] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0175.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090bb0) returned 1 [0175.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83339b0) returned 1 [0175.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6bf0) returned 1 Thread: id = 4130 os_tid = 0x1134 [0170.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333ab8 [0170.194] wcscpy (in: _Dest=0x8333ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0170.194] wcscat (in: _Dest=0x8333ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" [0170.194] wcscat (in: _Dest=0x8333ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*" [0170.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0170.194] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f182e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1a9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f1a9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0172.482] wcscmp (_String1=".", _String2=".") returned 0 [0172.482] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f182e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1a9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f1a9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.482] wcscmp (_String1="..", _String2=".") returned 1 [0172.483] wcscmp (_String1="..", _String2="..") returned 0 [0172.483] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f1a9f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1f810, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.483] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.483] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d4018 [0172.483] wcscpy (in: _Dest=0x81d4018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0172.483] wcscat (in: _Dest=0x81d4018, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" [0172.483] wcscat (in: _Dest=0x81d4018, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" [0175.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d4018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0175.633] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f1a9f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1f810, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.633] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0175.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0175.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ab8) returned 1 [0175.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321dd0) returned 1 Thread: id = 4131 os_tid = 0x1138 [0170.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333bc0 [0170.194] wcscpy (in: _Dest=0x8333bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0170.194] wcscat (in: _Dest=0x8333bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" [0170.194] wcscat (in: _Dest=0x8333bc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*" [0170.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3aba8 [0170.194] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f21f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f24630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f24630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f383d8 [0172.481] wcscmp (_String1=".", _String2=".") returned 0 [0172.482] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f21f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f24630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f24630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.482] wcscmp (_String1="..", _String2=".") returned 1 [0172.482] wcscmp (_String1="..", _String2="..") returned 0 [0172.482] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f24630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f29450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.482] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.482] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d3ef0 [0172.482] wcscpy (in: _Dest=0x81d3ef0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0172.482] wcscat (in: _Dest=0x81d3ef0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" [0172.482] wcscat (in: _Dest=0x81d3ef0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" [0175.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0175.631] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f24630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f29450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.631] FindClose (in: hFindFile=0x3f383d8 | out: hFindFile=0x3f383d8) returned 1 [0175.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3aba8) returned 1 [0175.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333bc0) returned 1 [0175.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321ed8) returned 1 Thread: id = 4132 os_tid = 0x113c [0170.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333cc8 [0170.203] wcscpy (in: _Dest=0x8333cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0170.203] wcscat (in: _Dest=0x8333cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" [0170.203] wcscat (in: _Dest=0x8333cc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*" [0170.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0170.203] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f2bb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f2e270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f2e270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0172.481] wcscmp (_String1=".", _String2=".") returned 0 [0172.481] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f2bb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f2e270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f2e270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.481] wcscmp (_String1="..", _String2=".") returned 1 [0172.481] wcscmp (_String1="..", _String2="..") returned 0 [0172.481] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f2e270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f33090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.481] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.481] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d3dc8 [0172.481] wcscpy (in: _Dest=0x81d3dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0172.481] wcscat (in: _Dest=0x81d3dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" [0172.481] wcscat (in: _Dest=0x81d3dc8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" [0175.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0175.629] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f2e270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f33090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.629] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0175.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0175.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333cc8) returned 1 [0175.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321fe0) returned 1 Thread: id = 4133 os_tid = 0x1710 [0170.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bc1f0 [0170.204] wcscpy (in: _Dest=0x30bc1f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0170.204] wcscat (in: _Dest=0x30bc1f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" [0170.204] wcscat (in: _Dest=0x30bc1f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*" [0170.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b548 [0170.204] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f357a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3a5c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f3a5c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38098 [0172.479] wcscmp (_String1=".", _String2=".") returned 0 [0172.479] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f357a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3a5c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f3a5c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.480] wcscmp (_String1="..", _String2=".") returned 1 [0172.480] wcscmp (_String1="..", _String2="..") returned 0 [0172.480] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f3a5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3ccd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.480] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.480] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d3ca0 [0172.480] wcscpy (in: _Dest=0x81d3ca0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0172.480] wcscat (in: _Dest=0x81d3ca0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" [0172.480] wcscat (in: _Dest=0x81d3ca0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" [0175.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0175.627] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f3a5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3ccd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.627] FindClose (in: hFindFile=0x3f38098 | out: hFindFile=0x3f38098) returned 1 [0175.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b548) returned 1 [0175.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0175.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83220e8) returned 1 Thread: id = 4134 os_tid = 0x1714 [0170.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bc308 [0170.205] wcscpy (in: _Dest=0x30bc308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0170.205] wcscat (in: _Dest=0x30bc308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" [0170.205] wcscat (in: _Dest=0x30bc308, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*" [0170.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0170.205] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f41af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f44200, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f44200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38398 [0172.455] wcscmp (_String1=".", _String2=".") returned 0 [0172.455] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f41af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f44200, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f44200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.455] wcscmp (_String1="..", _String2=".") returned 1 [0172.455] wcscmp (_String1="..", _String2="..") returned 0 [0172.455] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f44200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f46910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.455] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.455] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d1ef0 [0172.455] wcscpy (in: _Dest=0x81d1ef0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0172.455] wcscat (in: _Dest=0x81d1ef0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" [0172.455] wcscat (in: _Dest=0x81d1ef0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" [0173.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2658 [0173.504] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f44200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f46910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.504] FindClose (in: hFindFile=0x3f38398 | out: hFindFile=0x3f38398) returned 1 [0173.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0173.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0173.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83221f0) returned 1 Thread: id = 4135 os_tid = 0x1720 [0170.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333dd0 [0170.206] wcscpy (in: _Dest=0x8333dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0170.206] wcscat (in: _Dest=0x8333dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" [0170.206] wcscat (in: _Dest=0x8333dd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*" [0170.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0170.206] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f4b730, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f4de40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f4de40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55608 [0171.599] wcscmp (_String1=".", _String2=".") returned 0 [0171.599] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f4b730, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f4de40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f4de40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.599] wcscmp (_String1="..", _String2=".") returned 1 [0171.599] wcscmp (_String1="..", _String2="..") returned 0 [0171.599] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f4de40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f50550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.599] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.599] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d57150 [0171.599] wcscpy (in: _Dest=0x3d57150, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0171.599] wcscat (in: _Dest=0x3d57150, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" [0171.599] wcscat (in: _Dest=0x3d57150, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" [0171.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a8 [0171.600] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f4de40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f50550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0171.600] FindClose (in: hFindFile=0x3e55608 | out: hFindFile=0x3e55608) returned 1 [0171.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0171.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333dd0) returned 1 [0171.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83222f8) returned 1 Thread: id = 4136 os_tid = 0x1724 [0170.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333ed8 [0170.207] wcscpy (in: _Dest=0x8333ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0170.207] wcscat (in: _Dest=0x8333ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" [0170.207] wcscat (in: _Dest=0x8333ed8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*" [0170.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0170.207] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f55370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5a190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f5a190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37918 [0172.492] wcscmp (_String1=".", _String2=".") returned 0 [0172.492] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f55370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5a190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f5a190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.492] wcscmp (_String1="..", _String2=".") returned 1 [0172.493] wcscmp (_String1="..", _String2="..") returned 0 [0172.493] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f5a190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5c8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.493] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.493] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7e60 [0172.493] wcscpy (in: _Dest=0x81d7e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0172.493] wcscat (in: _Dest=0x81d7e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" [0172.493] wcscat (in: _Dest=0x81d7e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" [0173.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x283c [0174.246] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f5a190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5c8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0174.246] FindClose (in: hFindFile=0x3f37918 | out: hFindFile=0x3f37918) returned 1 [0174.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0174.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ed8) returned 1 [0174.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322400) returned 1 Thread: id = 4137 os_tid = 0x1734 [0170.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333fe0 [0170.207] wcscpy (in: _Dest=0x8333fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0170.208] wcscat (in: _Dest=0x8333fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" [0170.208] wcscat (in: _Dest=0x8333fe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*" [0170.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cd58 [0170.208] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f616c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f63dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f63dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f379d8 [0172.491] wcscmp (_String1=".", _String2=".") returned 0 [0172.491] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f616c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f63dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f63dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.491] wcscmp (_String1="..", _String2=".") returned 1 [0172.491] wcscmp (_String1="..", _String2="..") returned 0 [0172.491] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f63dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f664e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.492] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.492] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7d38 [0172.492] wcscpy (in: _Dest=0x81d7d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0172.492] wcscat (in: _Dest=0x81d7d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" [0172.492] wcscat (in: _Dest=0x81d7d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" [0173.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0173.801] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f63dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f664e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.801] FindClose (in: hFindFile=0x3f379d8 | out: hFindFile=0x3f379d8) returned 1 [0173.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd58) returned 1 [0173.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333fe0) returned 1 [0173.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322508) returned 1 Thread: id = 4138 os_tid = 0x1744 [0170.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83340e8 [0170.208] wcscpy (in: _Dest=0x83340e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0170.208] wcscat (in: _Dest=0x83340e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" [0170.209] wcscat (in: _Dest=0x83340e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*" [0170.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0170.209] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f6b300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f70120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f70120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b18 [0172.490] wcscmp (_String1=".", _String2=".") returned 0 [0172.490] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f6b300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f70120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f70120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.491] wcscmp (_String1="..", _String2=".") returned 1 [0172.491] wcscmp (_String1="..", _String2="..") returned 0 [0172.491] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f70120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f72830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.491] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.491] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7c10 [0172.491] wcscpy (in: _Dest=0x81d7c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0172.491] wcscat (in: _Dest=0x81d7c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" [0172.491] wcscat (in: _Dest=0x81d7c10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" [0173.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2834 [0173.792] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f70120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f72830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.792] FindClose (in: hFindFile=0x3f37b18 | out: hFindFile=0x3f37b18) returned 1 [0173.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0173.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83340e8) returned 1 [0173.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322610) returned 1 Thread: id = 4139 os_tid = 0x1748 [0170.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83341f0 [0170.209] wcscpy (in: _Dest=0x83341f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0170.209] wcscat (in: _Dest=0x83341f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" [0170.209] wcscat (in: _Dest=0x83341f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*" [0170.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a470 [0170.209] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f79d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7c470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f7c470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0172.490] wcscmp (_String1=".", _String2=".") returned 0 [0172.490] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f79d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7c470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f7c470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.490] wcscmp (_String1="..", _String2=".") returned 1 [0172.490] wcscmp (_String1="..", _String2="..") returned 0 [0172.490] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f7c470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7eb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.490] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.490] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7ae8 [0172.490] wcscpy (in: _Dest=0x81d7ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0172.490] wcscat (in: _Dest=0x81d7ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" [0172.490] wcscat (in: _Dest=0x81d7ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" [0173.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2830 [0173.789] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f7c470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7eb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.789] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0173.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a470) returned 1 [0173.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83341f0) returned 1 [0173.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322718) returned 1 Thread: id = 4140 os_tid = 0x174c [0170.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83342f8 [0170.210] wcscpy (in: _Dest=0x83342f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0170.210] wcscat (in: _Dest=0x83342f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" [0170.210] wcscat (in: _Dest=0x83342f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*" [0170.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a6d8 [0170.210] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f839a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f860b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f860b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0172.488] wcscmp (_String1=".", _String2=".") returned 0 [0172.488] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f839a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f860b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f860b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.489] wcscmp (_String1="..", _String2=".") returned 1 [0172.489] wcscmp (_String1="..", _String2="..") returned 0 [0172.489] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f860b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f887c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.489] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.489] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d79c0 [0172.489] wcscpy (in: _Dest=0x81d79c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0172.489] wcscat (in: _Dest=0x81d79c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" [0172.489] wcscat (in: _Dest=0x81d79c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" [0173.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d79c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a04 [0173.786] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f860b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f887c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.786] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0173.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a6d8) returned 1 [0173.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83342f8) returned 1 [0173.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332930) returned 1 Thread: id = 4141 os_tid = 0x1750 [0170.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334400 [0170.211] wcscpy (in: _Dest=0x8334400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0170.211] wcscat (in: _Dest=0x8334400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" [0170.211] wcscat (in: _Dest=0x8334400, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*" [0170.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3e098 [0170.211] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f8d5e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f8fcf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f8fcf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0172.488] wcscmp (_String1=".", _String2=".") returned 0 [0172.488] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f8d5e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f8fcf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f8fcf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.488] wcscmp (_String1="..", _String2=".") returned 1 [0172.488] wcscmp (_String1="..", _String2="..") returned 0 [0172.488] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f8fcf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f92400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.488] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.488] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7898 [0172.488] wcscpy (in: _Dest=0x81d7898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0172.488] wcscat (in: _Dest=0x81d7898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" [0172.488] wcscat (in: _Dest=0x81d7898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" [0175.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0175.262] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f8fcf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f92400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.262] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0175.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e098) returned 1 [0175.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334400) returned 1 [0175.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332a38) returned 1 Thread: id = 4142 os_tid = 0x175c [0170.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334508 [0170.212] wcscpy (in: _Dest=0x8334508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0170.212] wcscat (in: _Dest=0x8334508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" [0170.212] wcscat (in: _Dest=0x8334508, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*" [0170.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b7b0 [0170.212] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f97220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f99930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f99930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0172.487] wcscmp (_String1=".", _String2=".") returned 0 [0172.487] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f97220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f99930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f99930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.487] wcscmp (_String1="..", _String2=".") returned 1 [0172.487] wcscmp (_String1="..", _String2="..") returned 0 [0172.487] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f99930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f9e750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.487] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.487] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7770 [0172.487] wcscpy (in: _Dest=0x81d7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0172.487] wcscat (in: _Dest=0x81d7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" [0172.487] wcscat (in: _Dest=0x81d7770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" [0175.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230c [0175.260] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f99930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f9e750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.260] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0175.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b7b0) returned 1 [0175.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334508) returned 1 [0175.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332b40) returned 1 Thread: id = 4143 os_tid = 0x1764 [0170.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334610 [0170.213] wcscpy (in: _Dest=0x8334610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0170.213] wcscat (in: _Dest=0x8334610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" [0170.213] wcscat (in: _Dest=0x8334610, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*" [0170.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ae10 [0170.213] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fa0e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fa8390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fa8390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37498 [0172.486] wcscmp (_String1=".", _String2=".") returned 0 [0172.486] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fa0e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fa8390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fa8390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.486] wcscmp (_String1="..", _String2=".") returned 1 [0172.486] wcscmp (_String1="..", _String2="..") returned 0 [0172.486] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fa8390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5faaaa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.486] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.486] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7648 [0172.486] wcscpy (in: _Dest=0x81d7648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0172.486] wcscat (in: _Dest=0x81d7648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" [0172.486] wcscat (in: _Dest=0x81d7648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" [0175.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0175.257] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fa8390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5faaaa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.257] FindClose (in: hFindFile=0x3f37498 | out: hFindFile=0x3f37498) returned 1 [0175.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ae10) returned 1 [0175.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334610) returned 1 [0175.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332c48) returned 1 Thread: id = 4144 os_tid = 0x17c8 [0170.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334718 [0170.214] wcscpy (in: _Dest=0x8334718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0170.214] wcscat (in: _Dest=0x8334718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" [0170.214] wcscat (in: _Dest=0x8334718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*" [0170.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bee8 [0170.214] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fad1b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb1fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fb1fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37bd8 [0172.485] wcscmp (_String1=".", _String2=".") returned 0 [0172.485] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fad1b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb1fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fb1fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.485] wcscmp (_String1="..", _String2=".") returned 1 [0172.485] wcscmp (_String1="..", _String2="..") returned 0 [0172.485] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fb1fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb46e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.485] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.485] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d4268 [0172.485] wcscpy (in: _Dest=0x81d4268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0172.485] wcscat (in: _Dest=0x81d4268, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" [0172.485] wcscat (in: _Dest=0x81d4268, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" [0175.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d4268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0175.637] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fb1fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb46e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.637] FindClose (in: hFindFile=0x3f37bd8 | out: hFindFile=0x3f37bd8) returned 1 [0175.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bee8) returned 1 [0175.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334718) returned 1 [0175.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332d50) returned 1 Thread: id = 4145 os_tid = 0x17cc [0170.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bc420 [0170.215] wcscpy (in: _Dest=0x30bc420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0170.215] wcscat (in: _Dest=0x30bc420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" [0170.215] wcscat (in: _Dest=0x30bc420, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*" [0170.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ba18 [0170.215] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fb6df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbbc10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fbbc10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0172.483] wcscmp (_String1=".", _String2=".") returned 0 [0172.483] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fb6df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbbc10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fbbc10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.483] wcscmp (_String1="..", _String2=".") returned 1 [0172.483] wcscmp (_String1="..", _String2="..") returned 0 [0172.484] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fbbc10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbe320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.484] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.484] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d4140 [0172.484] wcscpy (in: _Dest=0x81d4140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0172.484] wcscat (in: _Dest=0x81d4140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" [0172.484] wcscat (in: _Dest=0x81d4140, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" [0175.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d4140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0175.635] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fbbc10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbe320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.635] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0175.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ba18) returned 1 [0175.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0175.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332e58) returned 1 Thread: id = 4146 os_tid = 0x17dc [0170.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bc538 [0170.216] wcscpy (in: _Dest=0x30bc538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0170.216] wcscat (in: _Dest=0x30bc538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" [0170.216] wcscat (in: _Dest=0x30bc538, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*" [0170.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0170.216] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38218 [0172.477] wcscmp (_String1=".", _String2=".") returned 0 [0172.477] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.478] wcscmp (_String1="..", _String2=".") returned 1 [0172.478] wcscmp (_String1="..", _String2="..") returned 0 [0172.478] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fc5850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc7f60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.478] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.478] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d3a50 [0172.478] wcscpy (in: _Dest=0x81d3a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0172.478] wcscat (in: _Dest=0x81d3a50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" [0172.478] wcscat (in: _Dest=0x81d3a50, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" [0175.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d3a50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0175.623] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fc5850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc7f60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.623] FindClose (in: hFindFile=0x3f38218 | out: hFindFile=0x3f38218) returned 1 [0175.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0175.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc538) returned 1 [0175.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332f60) returned 1 Thread: id = 4147 os_tid = 0xac8 [0170.217] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020 [0175.433] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0184.599] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ef0 [0184.599] GetFileSizeEx (in: hFile=0x1ef0, lpFileSize=0x137ff9d0 | out: lpFileSize=0x137ff9d0*=257) returned 1 [0184.599] SetFilePointerEx (in: hFile=0x1ef0, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.599] ReadFile (in: hFile=0x1ef0, lpBuffer=0x137ff9dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x137ff9b8, lpOverlapped=0x0 | out: lpBuffer=0x137ff9dc*, lpNumberOfBytesRead=0x137ff9b8*=0x4, lpOverlapped=0x0) returned 1 [0184.601] SetFilePointerEx (in: hFile=0x1ef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0184.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0184.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0184.601] NtQuerySystemTime (in: CurrentTime=0x137ff958 | out: CurrentTime=0x137ff958*=132471540525228000) returned 0x0 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x7c962562 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x10315c17 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x430e6fc8 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x559fee15 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x76e0a106 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x1097da3c [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x2851def3 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x78261cde [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x5b31e11d [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x16b92df3 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x6dc38eef [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x7b28f3c3 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x279d5811 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x44d600 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x2bcd4833 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x51e2c58c [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x6352d253 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x2745fa52 [0184.601] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x2b213a4d [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x620025bb [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x3d63578c [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x1279cb3f [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x7f2f64e7 [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x7816db7 [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x4e8fb4ba [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x5e457dc5 [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x882a1f [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x7afce099 [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x64a92a82 [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x4ff3323e [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0xca3e9b5 [0184.602] RtlRandomEx (in: Seed=0x137ff950 | out: Seed=0x137ff950) returned 0x3cdbcce6 [0184.609] ReadFile (in: hFile=0x1ef0, lpBuffer=0x809a458, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0x137ff94c, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0x137ff94c*=0x101, lpOverlapped=0x0) returned 1 [0184.610] SetFilePointerEx (in: hFile=0x1ef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.610] WriteFile (in: hFile=0x1ef0, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x137ff950, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0x137ff950*=0x101, lpOverlapped=0x0) returned 1 [0189.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a60 [0189.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0189.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0189.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0189.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0189.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b898) returned 1 [0189.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6b60) returned 1 [0189.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0189.422] SetFilePointerEx (in: hFile=0x1ef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.422] WriteFile (in: hFile=0x1ef0, lpBuffer=0x81e0250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x137ff9c4, lpOverlapped=0x0 | out: lpBuffer=0x81e0250*, lpNumberOfBytesWritten=0x137ff9c4*=0x10c, lpOverlapped=0x0) returned 1 [0190.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0250) returned 1 [0190.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0190.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0190.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0190.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0190.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b398) returned 1 [0190.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c860) returned 1 [0190.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0190.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84041b8 [0190.527] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" [0190.527] wcscat (in: _Dest=0x84041b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.f0dbec" [0190.527] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.f0dbec", NtPathName=0x137ff948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9bb8 [0190.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9bb8) returned 1 [0190.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fbe50) returned 1 [0190.672] NtQueryInformationFile (in: FileHandle=0x1ef0, IoStatusBlock=0x137ff920, FileInformation=0x137ff928, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x137ff920, FileInformation=0x137ff928) returned 0x0 [0190.672] NtSetInformationFile (FileHandle=0x1ef0, IoStatusBlock=0x137ff920, FileInformation=0x137ff928, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84041b8) returned 1 [0190.811] FlushFileBuffers (hFile=0x1ef0) returned 1 [0190.828] CloseHandle (hObject=0x1ef0) returned 1 [0193.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ef770 [0193.150] wcscpy (in: _Dest=0x81ef770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" [0193.150] wcscat (in: _Dest=0x81ef770, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\F0DBEC-Readme.txt" [0193.150] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\f0dbec-readme.txt")) returned 0xffffffff [0193.150] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b94 [0196.445] WriteFile (in: hFile=0x1b94, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x137ff96c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x137ff96c*=0x70c, lpOverlapped=0x0) returned 1 [0197.492] CloseHandle (hObject=0x1b94) returned 1 [0198.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef770) returned 1 [0198.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 Thread: id = 4148 os_tid = 0x7ec [0170.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx")) returned 0x20 [0172.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.737] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.744] GetLastError () returned 0x5 [0172.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187ca0) returned 1 Thread: id = 4149 os_tid = 0x598 [0170.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx")) returned 0x20 [0172.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.227] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.227] GetLastError () returned 0x5 [0172.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d728) returned 1 Thread: id = 4150 os_tid = 0xb4c [0170.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8334930 [0170.219] wcscpy (in: _Dest=0x8334930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0170.219] wcscat (in: _Dest=0x8334930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" [0170.219] wcscat (in: _Dest=0x8334930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*" [0170.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0170.219] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6daaa60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dad170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099350 [0171.965] wcscmp (_String1=".", _String2=".") returned 0 [0171.965] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6daaa60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dad170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.965] wcscmp (_String1="..", _String2=".") returned 1 [0171.965] wcscmp (_String1="..", _String2="..") returned 0 [0171.965] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dad170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.965] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.965] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d57718 [0171.966] wcscpy (in: _Dest=0x3d57718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0171.966] wcscat (in: _Dest=0x3d57718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" [0171.966] wcscat (in: _Dest=0x3d57718, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" [0179.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0179.935] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dad170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.935] FindClose (in: hFindFile=0x8099350 | out: hFindFile=0x8099350) returned 1 [0179.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0179.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334930) returned 1 [0179.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321ab8) returned 1 Thread: id = 4151 os_tid = 0x6a8 [0170.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8334a38 [0170.220] wcscpy (in: _Dest=0x8334a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0170.220] wcscat (in: _Dest=0x8334a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" [0170.221] wcscat (in: _Dest=0x8334a38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*" [0170.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0170.221] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6db46a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6db94c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54848 [0171.498] wcscmp (_String1=".", _String2=".") returned 0 [0171.498] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6db46a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6db94c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.498] wcscmp (_String1="..", _String2=".") returned 1 [0171.498] wcscmp (_String1="..", _String2="..") returned 0 [0171.498] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6db94c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0171.498] wcscmp (_String1="messages.json", _String2=".") returned 1 [0171.498] wcscmp (_String1="messages.json", _String2="..") returned 1 [0171.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3041bc0 [0171.498] wcscpy (in: _Dest=0x3041bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0171.498] wcscat (in: _Dest=0x3041bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" [0171.498] wcscat (in: _Dest=0x3041bc0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" [0171.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3041bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x624 [0171.499] FindNextFileW (in: hFindFile=0x3e54848, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6db94c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0171.499] FindClose (in: hFindFile=0x3e54848 | out: hFindFile=0x3e54848) returned 1 [0171.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0171.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334a38) returned 1 [0171.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef58b8) returned 1 Thread: id = 4152 os_tid = 0x6a4 [0170.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc650 [0170.221] wcscpy (in: _Dest=0x30bc650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0170.221] wcscat (in: _Dest=0x30bc650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" [0170.221] wcscat (in: _Dest=0x30bc650, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*" [0170.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0170.222] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dc09f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dc3100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b88 [0172.058] wcscmp (_String1=".", _String2=".") returned 0 [0172.058] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dc09f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dc3100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.058] wcscmp (_String1="..", _String2=".") returned 1 [0172.058] wcscmp (_String1="..", _String2="..") returned 0 [0172.058] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dc3100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.058] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.058] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81d1dc8 [0172.058] wcscpy (in: _Dest=0x81d1dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0172.058] wcscat (in: _Dest=0x81d1dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" [0172.058] wcscat (in: _Dest=0x81d1dc8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" [0173.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2894 [0173.490] FindNextFileW (in: hFindFile=0x3e54b88, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dc3100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.490] FindClose (in: hFindFile=0x3e54b88 | out: hFindFile=0x3e54b88) returned 1 [0173.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0173.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0173.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 Thread: id = 4153 os_tid = 0x448 [0170.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc768 [0170.222] wcscpy (in: _Dest=0x30bc768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0170.222] wcscat (in: _Dest=0x30bc768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" [0170.222] wcscat (in: _Dest=0x30bc768, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*" [0170.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0170.223] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dca630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dccd40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a48 [0172.057] wcscmp (_String1=".", _String2=".") returned 0 [0172.057] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dca630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dccd40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.057] wcscmp (_String1="..", _String2=".") returned 1 [0172.057] wcscmp (_String1="..", _String2="..") returned 0 [0172.057] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dccd40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.057] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.057] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81d1ca0 [0172.057] wcscpy (in: _Dest=0x81d1ca0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0172.057] wcscat (in: _Dest=0x81d1ca0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" [0172.057] wcscat (in: _Dest=0x81d1ca0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" [0173.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2660 [0173.489] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dccd40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.489] FindClose (in: hFindFile=0x3e54a48 | out: hFindFile=0x3e54a48) returned 1 [0173.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0173.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0173.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbea8) returned 1 Thread: id = 4154 os_tid = 0x524 [0170.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8334b40 [0170.230] wcscpy (in: _Dest=0x8334b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0170.231] wcscat (in: _Dest=0x8334b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" [0170.231] wcscat (in: _Dest=0x8334b40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*" [0170.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0170.231] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dd4270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd6980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dd6980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e556c8 [0172.056] wcscmp (_String1=".", _String2=".") returned 0 [0172.056] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dd4270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd6980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dd6980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.056] wcscmp (_String1="..", _String2=".") returned 1 [0172.056] wcscmp (_String1="..", _String2="..") returned 0 [0172.056] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dd6980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd9090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.056] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.056] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d1b78 [0172.056] wcscpy (in: _Dest=0x81d1b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0172.056] wcscat (in: _Dest=0x81d1b78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" [0172.056] wcscat (in: _Dest=0x81d1b78, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" [0173.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2898 [0173.487] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dd6980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd9090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.487] FindClose (in: hFindFile=0x3e556c8 | out: hFindFile=0x3e556c8) returned 1 [0173.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0173.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334b40) returned 1 [0173.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef56a8) returned 1 Thread: id = 4155 os_tid = 0x14c [0170.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8334c48 [0170.232] wcscpy (in: _Dest=0x8334c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0170.232] wcscat (in: _Dest=0x8334c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" [0170.232] wcscat (in: _Dest=0x8334c48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*" [0170.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0170.232] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dddeb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6de2cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54cc8 [0172.055] wcscmp (_String1=".", _String2=".") returned 0 [0172.055] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dddeb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6de2cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.055] wcscmp (_String1="..", _String2=".") returned 1 [0172.055] wcscmp (_String1="..", _String2="..") returned 0 [0172.055] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6de2cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.055] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.055] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d1a50 [0172.055] wcscpy (in: _Dest=0x81d1a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0172.055] wcscat (in: _Dest=0x81d1a50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" [0172.055] wcscat (in: _Dest=0x81d1a50, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" [0173.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1a50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2664 [0173.485] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6de2cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.485] FindClose (in: hFindFile=0x3e54cc8 | out: hFindFile=0x3e54cc8) returned 1 [0173.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0173.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334c48) returned 1 [0173.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333068) returned 1 Thread: id = 4156 os_tid = 0x4f8 [0170.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8334d50 [0170.233] wcscpy (in: _Dest=0x8334d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0170.233] wcscat (in: _Dest=0x8334d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" [0170.233] wcscat (in: _Dest=0x8334d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*" [0170.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0170.233] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6de7af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dec910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099710 [0172.043] wcscmp (_String1=".", _String2=".") returned 0 [0172.043] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6de7af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dec910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.043] wcscmp (_String1="..", _String2=".") returned 1 [0172.043] wcscmp (_String1="..", _String2="..") returned 0 [0172.043] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dec910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.043] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.043] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d0fe8 [0172.043] wcscpy (in: _Dest=0x81d0fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0172.043] wcscat (in: _Dest=0x81d0fe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" [0172.043] wcscat (in: _Dest=0x81d0fe8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" [0173.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298c [0173.463] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dec910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.463] FindClose (in: hFindFile=0x8099710 | out: hFindFile=0x8099710) returned 1 [0173.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0173.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334d50) returned 1 [0173.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333170) returned 1 Thread: id = 4157 os_tid = 0x754 [0170.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8334e58 [0170.234] wcscpy (in: _Dest=0x8334e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0170.234] wcscat (in: _Dest=0x8334e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" [0170.234] wcscat (in: _Dest=0x8334e58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*" [0170.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0170.234] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6df3e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6df6550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80993d0 [0172.040] wcscmp (_String1=".", _String2=".") returned 0 [0172.040] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6df3e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6df6550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.040] wcscmp (_String1="..", _String2=".") returned 1 [0172.040] wcscmp (_String1="..", _String2="..") returned 0 [0172.040] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6df6550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.040] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.040] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d0ec0 [0172.040] wcscpy (in: _Dest=0x81d0ec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0172.040] wcscat (in: _Dest=0x81d0ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" [0172.040] wcscat (in: _Dest=0x81d0ec0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" [0173.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2554 [0173.461] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6df6550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.461] FindClose (in: hFindFile=0x80993d0 | out: hFindFile=0x80993d0) returned 1 [0173.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0173.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334e58) returned 1 [0173.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333278) returned 1 Thread: id = 4158 os_tid = 0x894 [0170.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8334f60 [0170.236] wcscpy (in: _Dest=0x8334f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0170.236] wcscat (in: _Dest=0x8334f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" [0170.236] wcscat (in: _Dest=0x8334f60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*" [0170.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0170.236] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dfda80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e00190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e555c8 [0172.054] wcscmp (_String1=".", _String2=".") returned 0 [0172.054] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dfda80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e00190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.054] wcscmp (_String1="..", _String2=".") returned 1 [0172.054] wcscmp (_String1="..", _String2="..") returned 0 [0172.054] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e00190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.054] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.054] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d1928 [0172.054] wcscpy (in: _Dest=0x81d1928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0172.055] wcscat (in: _Dest=0x81d1928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" [0172.055] wcscat (in: _Dest=0x81d1928, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" [0173.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2668 [0173.483] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e00190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.483] FindClose (in: hFindFile=0x3e555c8 | out: hFindFile=0x3e555c8) returned 1 [0173.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0173.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334f60) returned 1 [0173.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333380) returned 1 Thread: id = 4159 os_tid = 0xba4 [0170.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8335068 [0170.237] wcscpy (in: _Dest=0x8335068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0170.237] wcscat (in: _Dest=0x8335068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" [0170.237] wcscat (in: _Dest=0x8335068, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*" [0170.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0170.237] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e076c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e09dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0172.053] wcscmp (_String1=".", _String2=".") returned 0 [0172.053] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e076c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e09dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.053] wcscmp (_String1="..", _String2=".") returned 1 [0172.053] wcscmp (_String1="..", _String2="..") returned 0 [0172.053] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e09dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.053] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.054] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d1800 [0172.054] wcscpy (in: _Dest=0x81d1800, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0172.054] wcscat (in: _Dest=0x81d1800, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" [0172.054] wcscat (in: _Dest=0x81d1800, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" [0173.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28cc [0173.480] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e09dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.481] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0173.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0173.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335068) returned 1 [0173.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333488) returned 1 Thread: id = 4160 os_tid = 0xb9c [0170.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8335170 [0170.238] wcscpy (in: _Dest=0x8335170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0170.238] wcscat (in: _Dest=0x8335170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" [0170.238] wcscat (in: _Dest=0x8335170, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*" [0170.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0170.238] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e11300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e16120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0172.052] wcscmp (_String1=".", _String2=".") returned 0 [0172.052] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e11300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e16120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.052] wcscmp (_String1="..", _String2=".") returned 1 [0172.052] wcscmp (_String1="..", _String2="..") returned 0 [0172.052] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e16120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.052] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.052] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d16d8 [0172.053] wcscpy (in: _Dest=0x81d16d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0172.053] wcscat (in: _Dest=0x81d16d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" [0172.053] wcscat (in: _Dest=0x81d16d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" [0173.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d16d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2678 [0173.478] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e16120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.478] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0173.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0173.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335170) returned 1 [0173.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333590) returned 1 Thread: id = 4161 os_tid = 0xb98 [0170.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8335278 [0170.239] wcscpy (in: _Dest=0x8335278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0170.239] wcscat (in: _Dest=0x8335278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" [0170.239] wcscat (in: _Dest=0x8335278, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*" [0170.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0170.239] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e1af40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e1fd60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0172.051] wcscmp (_String1=".", _String2=".") returned 0 [0172.051] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e1af40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e1fd60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.051] wcscmp (_String1="..", _String2=".") returned 1 [0172.051] wcscmp (_String1="..", _String2="..") returned 0 [0172.051] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e1fd60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.051] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.051] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d15b0 [0172.051] wcscpy (in: _Dest=0x81d15b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0172.051] wcscat (in: _Dest=0x81d15b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" [0172.051] wcscat (in: _Dest=0x81d15b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" [0173.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d15b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b5c [0173.476] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e1fd60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.476] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0173.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0173.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335278) returned 1 [0173.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333698) returned 1 Thread: id = 4162 os_tid = 0xbb8 [0170.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8335380 [0170.240] wcscpy (in: _Dest=0x8335380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0170.240] wcscat (in: _Dest=0x8335380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" [0170.240] wcscat (in: _Dest=0x8335380, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*" [0170.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0170.240] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e24b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e299a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099510 [0172.050] wcscmp (_String1=".", _String2=".") returned 0 [0172.050] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e24b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e299a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.050] wcscmp (_String1="..", _String2=".") returned 1 [0172.050] wcscmp (_String1="..", _String2="..") returned 0 [0172.050] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e299a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.050] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.050] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d1488 [0172.050] wcscpy (in: _Dest=0x81d1488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0172.050] wcscat (in: _Dest=0x81d1488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" [0172.050] wcscat (in: _Dest=0x81d1488, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" [0173.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2680 [0173.473] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e299a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.473] FindClose (in: hFindFile=0x8099510 | out: hFindFile=0x8099510) returned 1 [0173.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0173.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335380) returned 1 [0173.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83337a0) returned 1 Thread: id = 4163 os_tid = 0x8d4 [0170.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8335488 [0170.241] wcscpy (in: _Dest=0x8335488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0170.241] wcscat (in: _Dest=0x8335488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" [0170.241] wcscat (in: _Dest=0x8335488, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*" [0170.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0170.242] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e2e7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80994d0 [0172.049] wcscmp (_String1=".", _String2=".") returned 0 [0172.049] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e2e7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.049] wcscmp (_String1="..", _String2=".") returned 1 [0172.049] wcscmp (_String1="..", _String2="..") returned 0 [0172.049] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.049] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.049] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d1360 [0172.049] wcscpy (in: _Dest=0x81d1360, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0172.049] wcscat (in: _Dest=0x81d1360, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" [0172.050] wcscat (in: _Dest=0x81d1360, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" [0173.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2684 [0173.470] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.471] FindClose (in: hFindFile=0x80994d0 | out: hFindFile=0x80994d0) returned 1 [0173.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0173.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335488) returned 1 [0173.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83338a8) returned 1 Thread: id = 4164 os_tid = 0x8e8 [0170.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc880 [0170.242] wcscpy (in: _Dest=0x30bc880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0170.242] wcscat (in: _Dest=0x30bc880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" [0170.242] wcscat (in: _Dest=0x30bc880, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*" [0170.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0170.242] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e38400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e3ab10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80988d0 [0172.048] wcscmp (_String1=".", _String2=".") returned 0 [0172.048] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e38400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e3ab10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.048] wcscmp (_String1="..", _String2=".") returned 1 [0172.048] wcscmp (_String1="..", _String2="..") returned 0 [0172.048] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e3ab10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.048] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.048] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81d1238 [0172.048] wcscpy (in: _Dest=0x81d1238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0172.049] wcscat (in: _Dest=0x81d1238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" [0172.049] wcscat (in: _Dest=0x81d1238, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" [0173.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bec [0173.468] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e3ab10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.468] FindClose (in: hFindFile=0x80988d0 | out: hFindFile=0x80988d0) returned 1 [0173.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0173.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0173.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 Thread: id = 4165 os_tid = 0x8f8 [0170.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc998 [0170.243] wcscpy (in: _Dest=0x30bc998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0170.243] wcscat (in: _Dest=0x30bc998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" [0170.243] wcscat (in: _Dest=0x30bc998, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*" [0170.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0170.243] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099390 [0172.045] wcscmp (_String1=".", _String2=".") returned 0 [0172.045] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.045] wcscmp (_String1="..", _String2=".") returned 1 [0172.046] wcscmp (_String1="..", _String2="..") returned 0 [0172.046] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e46e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.046] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.046] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81d1110 [0172.046] wcscpy (in: _Dest=0x81d1110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0172.046] wcscat (in: _Dest=0x81d1110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" [0172.046] wcscat (in: _Dest=0x81d1110, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" [0173.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2984 [0173.465] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e46e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0173.465] FindClose (in: hFindFile=0x8099390 | out: hFindFile=0x8099390) returned 1 [0173.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0173.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0173.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 Thread: id = 4166 os_tid = 0xadc [0170.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt")) returned 0x20 [0172.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT", dwFileAttributes=0x20) returned 0 [0172.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.399] GetLastError () returned 0x5 [0172.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT", dwFileAttributes=0x20) returned 0 [0172.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 Thread: id = 4167 os_tid = 0x7e0 [0170.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk")) returned 0x20 [0172.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0172.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.401] GetLastError () returned 0x5 [0172.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0172.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 4168 os_tid = 0x578 [0170.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk")) returned 0x20 [0172.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0172.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.403] GetLastError () returned 0x5 [0172.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0172.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 4169 os_tid = 0x32c [0170.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll")) returned 0x20 [0172.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0172.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.406] GetLastError () returned 0x5 [0172.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0172.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bf50) returned 1 Thread: id = 4170 os_tid = 0x5f4 [0170.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll")) returned 0x20 [0172.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0172.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.408] GetLastError () returned 0x5 [0172.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0172.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3daa0) returned 1 Thread: id = 4171 os_tid = 0x5d8 [0170.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn")) returned 0x20 [0171.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn", dwFileAttributes=0x20) returned 0 [0171.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.922] GetLastError () returned 0x5 [0171.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn", dwFileAttributes=0x20) returned 0 [0171.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b7b8) returned 1 Thread: id = 4172 os_tid = 0x99c [0170.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs")) returned 0x20 [0171.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS", dwFileAttributes=0x20) returned 0 [0171.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.781] GetLastError () returned 0x5 [0171.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS", dwFileAttributes=0x20) returned 0 [0171.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b4d8) returned 1 Thread: id = 4173 os_tid = 0xe4c [0170.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81bea30 [0170.254] wcscpy (in: _Dest=0x81bea30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0170.254] wcscat (in: _Dest=0x81bea30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0170.254] wcscat (in: _Dest=0x81bea30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*" [0170.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86880 [0170.254] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f79a10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a08 [0172.705] wcscmp (_String1=".", _String2=".") returned 0 [0172.705] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f79a10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.705] wcscmp (_String1="..", _String2=".") returned 1 [0172.705] wcscmp (_String1="..", _String2="..") returned 0 [0172.705] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6c1f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a6c1f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0172.705] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0172.705] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0172.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e10a68 [0172.705] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0172.705] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0172.705] wcscat (in: _Dest=0x3e10a68, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" [0177.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0177.820] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6c1f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a6c1f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0177.820] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0177.820] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0177.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11968 [0177.821] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.821] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.821] wcscat (in: _Dest=0x3e11968, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" [0177.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0177.822] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0177.822] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0177.822] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0177.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e12408 [0177.822] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.822] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.822] wcscat (in: _Dest=0x3e12408, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" [0177.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0177.824] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0177.824] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0177.824] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0177.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12228 [0177.824] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.824] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.824] wcscat (in: _Dest=0x3e12228, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" [0177.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0177.826] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0177.826] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0177.826] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0177.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d098 [0177.826] wcscpy (in: _Dest=0x3e2d098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.826] wcscat (in: _Dest=0x3e2d098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.826] wcscat (in: _Dest=0x3e2d098, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" [0177.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0177.828] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0177.828] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0177.828] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0177.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11d28 [0177.828] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.828] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.828] wcscat (in: _Dest=0x3e11d28, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" [0177.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0177.829] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0177.829] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0177.829] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0177.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d530 [0177.829] wcscpy (in: _Dest=0x3e2d530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.829] wcscat (in: _Dest=0x3e2d530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.829] wcscat (in: _Dest=0x3e2d530, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" [0177.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0177.831] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0177.831] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0177.831] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0177.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dd10 [0177.831] wcscpy (in: _Dest=0x3e2dd10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.831] wcscat (in: _Dest=0x3e2dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.831] wcscat (in: _Dest=0x3e2dd10, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" [0177.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0177.832] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0177.832] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0177.832] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0177.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11148 [0177.832] wcscpy (in: _Dest=0x3e11148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.832] wcscat (in: _Dest=0x3e11148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.833] wcscat (in: _Dest=0x3e11148, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" [0177.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0177.834] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0177.834] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0177.834] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0177.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2dc68 [0177.834] wcscpy (in: _Dest=0x3e2dc68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.834] wcscat (in: _Dest=0x3e2dc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.834] wcscat (in: _Dest=0x3e2dc68, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" [0177.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2dc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0177.836] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0177.836] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0177.836] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0177.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c008 [0177.836] wcscpy (in: _Dest=0x35c008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.836] wcscat (in: _Dest=0x35c008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.836] wcscat (in: _Dest=0x35c008, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" [0177.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35c008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0177.837] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0177.837] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0177.837] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0177.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2d7d0 [0177.837] wcscpy (in: _Dest=0x3e2d7d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.837] wcscat (in: _Dest=0x3e2d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.837] wcscat (in: _Dest=0x3e2d7d0, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" [0177.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0177.838] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0177.839] wcscmp (_String1="FormsStyles", _String2=".") returned 1 [0177.839] wcscmp (_String1="FormsStyles", _String2="..") returned 1 [0177.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e10608 [0177.839] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0177.839] wcscat (in: _Dest=0x3e10608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0177.839] wcscat (in: _Dest=0x3e10608, _Source="FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0177.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e10608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0177.840] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3d86880 | out: lpFindFileData=0x3d86880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 0 [0177.840] FindClose (in: hFindFile=0x3e54a08 | out: hFindFile=0x3e54a08) returned 1 [0185.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86880) returned 1 [0185.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 [0185.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 4174 os_tid = 0x9cc [0170.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc")) returned 0x20 [0171.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC", dwFileAttributes=0x20) returned 0 [0171.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.938] GetLastError () returned 0x5 [0171.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC", dwFileAttributes=0x20) returned 0 [0171.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 4175 os_tid = 0x9dc [0170.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt")) returned 0x20 [0171.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT", dwFileAttributes=0x20) returned 0 [0171.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.936] GetLastError () returned 0x5 [0171.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT", dwFileAttributes=0x20) returned 0 [0171.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 4176 os_tid = 0xf50 [0170.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk")) returned 0x20 [0171.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.934] GetLastError () returned 0x5 [0171.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 Thread: id = 4177 os_tid = 0xe74 [0170.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk")) returned 0x20 [0171.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.933] GetLastError () returned 0x5 [0171.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 Thread: id = 4178 os_tid = 0x6f0 [0170.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl")) returned 0x20 [0171.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL", dwFileAttributes=0x20) returned 0 [0171.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.931] GetLastError () returned 0x5 [0171.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL", dwFileAttributes=0x20) returned 0 [0171.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bd58) returned 1 Thread: id = 4179 os_tid = 0x714 [0170.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd")) returned 0x20 [0171.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD", dwFileAttributes=0x20) returned 0 [0171.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.583] GetLastError () returned 0x5 [0171.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD", dwFileAttributes=0x20) returned 0 [0171.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 Thread: id = 4180 os_tid = 0x710 [0170.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml")) returned 0x20 [0172.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0172.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.352] GetLastError () returned 0x5 [0172.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0172.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cff0) returned 1 Thread: id = 4181 os_tid = 0x1804 [0170.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml")) returned 0x20 [0171.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml", dwFileAttributes=0x20) returned 0 [0171.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.824] GetLastError () returned 0x5 [0171.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml", dwFileAttributes=0x20) returned 0 [0171.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2db18) returned 1 Thread: id = 4182 os_tid = 0x1808 [0170.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml")) returned 0x20 [0172.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0172.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.350] GetLastError () returned 0x5 [0172.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0172.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dbc0) returned 1 Thread: id = 4183 os_tid = 0x180c [0170.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml")) returned 0x20 [0171.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml", dwFileAttributes=0x20) returned 0 [0171.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.580] GetLastError () returned 0x5 [0171.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml", dwFileAttributes=0x20) returned 0 [0171.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a958) returned 1 Thread: id = 4184 os_tid = 0x1810 [0170.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml")) returned 0x20 [0172.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml", dwFileAttributes=0x20) returned 0 [0172.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.349] GetLastError () returned 0x5 [0172.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml", dwFileAttributes=0x20) returned 0 [0172.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819abd8) returned 1 Thread: id = 4185 os_tid = 0x1814 [0170.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml")) returned 0x20 [0172.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml", dwFileAttributes=0x20) returned 0 [0172.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.346] GetLastError () returned 0x5 [0172.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml", dwFileAttributes=0x20) returned 0 [0172.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bf38) returned 1 Thread: id = 4186 os_tid = 0x1818 [0170.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml")) returned 0x20 [0172.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0172.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.363] GetLastError () returned 0x5 [0172.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0172.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2da70) returned 1 Thread: id = 4187 os_tid = 0x181c [0170.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst7mdt")) returned 0x20 [0171.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT", dwFileAttributes=0x20) returned 0 [0171.882] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst7mdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.882] GetLastError () returned 0x5 [0171.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT", dwFileAttributes=0x20) returned 0 [0171.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4b08) returned 1 Thread: id = 4188 os_tid = 0x1820 [0170.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7388 [0170.308] wcscpy (in: _Dest=0x2fe7388, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0170.308] wcscat (in: _Dest=0x2fe7388, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0170.308] wcscat (in: _Dest=0x2fe7388, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\*" [0170.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d852d8 [0170.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0172.711] wcscmp (_String1=".", _String2=".") returned 0 [0172.711] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.315] wcscmp (_String1="..", _String2=".") returned 1 [0173.315] wcscmp (_String1="..", _String2="..") returned 0 [0173.315] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apia", cAlternateFileName="")) returned 1 [0173.315] wcscmp (_String1="Apia", _String2=".") returned 1 [0173.315] wcscmp (_String1="Apia", _String2="..") returned 1 [0173.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46060 [0173.315] wcscpy (in: _Dest=0x3d46060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.316] wcscat (in: _Dest=0x3d46060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.316] wcscat (in: _Dest=0x3d46060, _Source="Apia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia" [0175.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e4 [0175.068] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="Auckland", cAlternateFileName="")) returned 1 [0175.068] wcscmp (_String1="Auckland", _String2=".") returned 1 [0175.068] wcscmp (_String1="Auckland", _String2="..") returned 1 [0175.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f3a038 [0175.068] wcscpy (in: _Dest=0x3f3a038, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.069] wcscat (in: _Dest=0x3f3a038, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.069] wcscat (in: _Dest=0x3f3a038, _Source="Auckland" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" [0175.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0175.070] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chatham", cAlternateFileName="")) returned 1 [0175.070] wcscmp (_String1="Chatham", _String2=".") returned 1 [0175.070] wcscmp (_String1="Chatham", _String2="..") returned 1 [0175.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39af8 [0175.070] wcscpy (in: _Dest=0x3f39af8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.070] wcscat (in: _Dest=0x3f39af8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.070] wcscat (in: _Dest=0x3f39af8, _Source="Chatham" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" [0175.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a30 [0175.071] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chuuk", cAlternateFileName="")) returned 1 [0175.071] wcscmp (_String1="Chuuk", _String2=".") returned 1 [0175.071] wcscmp (_String1="Chuuk", _String2="..") returned 1 [0175.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fcea58 [0175.071] wcscpy (in: _Dest=0x2fcea58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.071] wcscat (in: _Dest=0x2fcea58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.072] wcscat (in: _Dest=0x2fcea58, _Source="Chuuk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" [0175.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fcea58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0175.073] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Easter", cAlternateFileName="")) returned 1 [0175.073] wcscmp (_String1="Easter", _String2=".") returned 1 [0175.073] wcscmp (_String1="Easter", _String2="..") returned 1 [0175.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39468 [0175.073] wcscpy (in: _Dest=0x3f39468, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.073] wcscat (in: _Dest=0x3f39468, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.073] wcscat (in: _Dest=0x3f39468, _Source="Easter" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter" [0175.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2880 [0175.074] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Efate", cAlternateFileName="")) returned 1 [0175.074] wcscmp (_String1="Efate", _String2=".") returned 1 [0175.074] wcscmp (_String1="Efate", _String2="..") returned 1 [0175.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fce098 [0175.074] wcscpy (in: _Dest=0x2fce098, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.074] wcscat (in: _Dest=0x2fce098, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.074] wcscat (in: _Dest=0x2fce098, _Source="Efate" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate" [0175.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fce098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2884 [0175.075] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Enderbury", cAlternateFileName="ENDERB~1")) returned 1 [0175.076] wcscmp (_String1="Enderbury", _String2=".") returned 1 [0175.076] wcscmp (_String1="Enderbury", _String2="..") returned 1 [0175.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39548 [0175.076] wcscpy (in: _Dest=0x3f39548, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.076] wcscat (in: _Dest=0x3f39548, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.076] wcscat (in: _Dest=0x3f39548, _Source="Enderbury" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" [0175.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a58 [0175.077] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fakaofo", cAlternateFileName="")) returned 1 [0175.077] wcscmp (_String1="Fakaofo", _String2=".") returned 1 [0175.077] wcscmp (_String1="Fakaofo", _String2="..") returned 1 [0175.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a1f8 [0175.077] wcscpy (in: _Dest=0x3f3a1f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.077] wcscat (in: _Dest=0x3f3a1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.077] wcscat (in: _Dest=0x3f3a1f8, _Source="Fakaofo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" [0175.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a5c [0175.079] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fiji", cAlternateFileName="")) returned 1 [0175.079] wcscmp (_String1="Fiji", _String2=".") returned 1 [0175.079] wcscmp (_String1="Fiji", _String2="..") returned 1 [0175.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x2fce030 [0175.079] wcscpy (in: _Dest=0x2fce030, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.079] wcscat (in: _Dest=0x2fce030, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.079] wcscat (in: _Dest=0x2fce030, _Source="Fiji" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" [0175.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2fce030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a60 [0175.080] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Funafuti", cAlternateFileName="")) returned 1 [0175.080] wcscmp (_String1="Funafuti", _String2=".") returned 1 [0175.080] wcscmp (_String1="Funafuti", _String2="..") returned 1 [0175.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39a18 [0175.080] wcscpy (in: _Dest=0x3f39a18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.080] wcscat (in: _Dest=0x3f39a18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.080] wcscat (in: _Dest=0x3f39a18, _Source="Funafuti" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" [0175.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a64 [0175.081] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Galapagos", cAlternateFileName="GALAPA~1")) returned 1 [0175.081] wcscmp (_String1="Galapagos", _String2=".") returned 1 [0175.081] wcscmp (_String1="Galapagos", _String2="..") returned 1 [0175.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f3a3b8 [0175.082] wcscpy (in: _Dest=0x3f3a3b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.082] wcscat (in: _Dest=0x3f3a3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.082] wcscat (in: _Dest=0x3f3a3b8, _Source="Galapagos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" [0175.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a68 [0175.083] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gambier", cAlternateFileName="")) returned 1 [0175.083] wcscmp (_String1="Gambier", _String2=".") returned 1 [0175.083] wcscmp (_String1="Gambier", _String2="..") returned 1 [0175.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f399a8 [0175.083] wcscpy (in: _Dest=0x3f399a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.083] wcscat (in: _Dest=0x3f399a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.083] wcscat (in: _Dest=0x3f399a8, _Source="Gambier" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" [0175.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f399a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c [0175.084] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadalcanal", cAlternateFileName="GUADAL~1")) returned 1 [0175.084] wcscmp (_String1="Guadalcanal", _String2=".") returned 1 [0175.084] wcscmp (_String1="Guadalcanal", _String2="..") returned 1 [0175.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3df9690 [0175.085] wcscpy (in: _Dest=0x3df9690, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.085] wcscat (in: _Dest=0x3df9690, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.085] wcscat (in: _Dest=0x3df9690, _Source="Guadalcanal" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" [0175.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df9690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0175.086] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guam", cAlternateFileName="")) returned 1 [0175.086] wcscmp (_String1="Guam", _String2=".") returned 1 [0175.086] wcscmp (_String1="Guam", _String2="..") returned 1 [0175.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ed4df0 [0175.086] wcscpy (in: _Dest=0x3ed4df0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.086] wcscat (in: _Dest=0x3ed4df0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.086] wcscat (in: _Dest=0x3ed4df0, _Source="Guam" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam" [0175.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ed4df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a90 [0175.087] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Honolulu", cAlternateFileName="")) returned 1 [0175.087] wcscmp (_String1="Honolulu", _String2=".") returned 1 [0175.087] wcscmp (_String1="Honolulu", _String2="..") returned 1 [0175.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39cb8 [0175.087] wcscpy (in: _Dest=0x3f39cb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.087] wcscat (in: _Dest=0x3f39cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.087] wcscat (in: _Dest=0x3f39cb8, _Source="Honolulu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" [0175.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a94 [0175.088] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johnston", cAlternateFileName="")) returned 1 [0175.088] wcscmp (_String1="Johnston", _String2=".") returned 1 [0175.088] wcscmp (_String1="Johnston", _String2="..") returned 1 [0175.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f39bd8 [0175.089] wcscpy (in: _Dest=0x3f39bd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.089] wcscat (in: _Dest=0x3f39bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.089] wcscat (in: _Dest=0x3f39bd8, _Source="Johnston" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" [0175.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a98 [0175.090] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiritimati", cAlternateFileName="KIRITI~1")) returned 1 [0175.090] wcscmp (_String1="Kiritimati", _String2=".") returned 1 [0175.090] wcscmp (_String1="Kiritimati", _String2="..") returned 1 [0175.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3df8bc8 [0175.090] wcscpy (in: _Dest=0x3df8bc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.090] wcscat (in: _Dest=0x3df8bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.090] wcscat (in: _Dest=0x3df8bc8, _Source="Kiritimati" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" [0175.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3df8bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0175.091] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kosrae", cAlternateFileName="")) returned 1 [0175.091] wcscmp (_String1="Kosrae", _String2=".") returned 1 [0175.091] wcscmp (_String1="Kosrae", _String2="..") returned 1 [0175.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39698 [0175.091] wcscpy (in: _Dest=0x3f39698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.091] wcscat (in: _Dest=0x3f39698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.091] wcscat (in: _Dest=0x3f39698, _Source="Kosrae" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" [0175.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa4 [0175.093] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kwajalein", cAlternateFileName="KWAJAL~1")) returned 1 [0175.093] wcscmp (_String1="Kwajalein", _String2=".") returned 1 [0175.093] wcscmp (_String1="Kwajalein", _String2="..") returned 1 [0175.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f397e8 [0175.093] wcscpy (in: _Dest=0x3f397e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.093] wcscat (in: _Dest=0x3f397e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.093] wcscat (in: _Dest=0x3f397e8, _Source="Kwajalein" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" [0175.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f397e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0175.095] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Majuro", cAlternateFileName="")) returned 1 [0175.095] wcscmp (_String1="Majuro", _String2=".") returned 1 [0175.095] wcscmp (_String1="Majuro", _String2="..") returned 1 [0175.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39708 [0175.095] wcscpy (in: _Dest=0x3f39708, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.095] wcscat (in: _Dest=0x3f39708, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.095] wcscat (in: _Dest=0x3f39708, _Source="Majuro" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" [0175.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa8 [0175.096] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marquesas", cAlternateFileName="MARQUE~1")) returned 1 [0175.096] wcscmp (_String1="Marquesas", _String2=".") returned 1 [0175.096] wcscmp (_String1="Marquesas", _String2="..") returned 1 [0175.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39c48 [0175.096] wcscpy (in: _Dest=0x3f39c48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.096] wcscat (in: _Dest=0x3f39c48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.096] wcscat (in: _Dest=0x3f39c48, _Source="Marquesas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" [0175.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0175.098] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Midway", cAlternateFileName="")) returned 1 [0175.098] wcscmp (_String1="Midway", _String2=".") returned 1 [0175.098] wcscmp (_String1="Midway", _String2="..") returned 1 [0175.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f3a118 [0175.098] wcscpy (in: _Dest=0x3f3a118, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.098] wcscat (in: _Dest=0x3f3a118, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.098] wcscat (in: _Dest=0x3f3a118, _Source="Midway" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway" [0175.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0175.099] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nauru", cAlternateFileName="")) returned 1 [0175.099] wcscmp (_String1="Nauru", _String2=".") returned 1 [0175.099] wcscmp (_String1="Nauru", _String2="..") returned 1 [0175.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ed3db0 [0175.099] wcscpy (in: _Dest=0x3ed3db0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.099] wcscat (in: _Dest=0x3ed3db0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.099] wcscat (in: _Dest=0x3ed3db0, _Source="Nauru" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" [0175.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ed3db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c [0175.101] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niue", cAlternateFileName="")) returned 1 [0175.101] wcscmp (_String1="Niue", _String2=".") returned 1 [0175.101] wcscmp (_String1="Niue", _String2="..") returned 1 [0175.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ed4be8 [0175.101] wcscpy (in: _Dest=0x3ed4be8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.101] wcscat (in: _Dest=0x3ed4be8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.101] wcscat (in: _Dest=0x3ed4be8, _Source="Niue" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue" [0175.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ed4be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80 [0175.102] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Norfolk", cAlternateFileName="")) returned 1 [0175.102] wcscmp (_String1="Norfolk", _String2=".") returned 1 [0175.102] wcscmp (_String1="Norfolk", _String2="..") returned 1 [0175.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39d98 [0175.102] wcscpy (in: _Dest=0x3f39d98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.102] wcscat (in: _Dest=0x3f39d98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.102] wcscat (in: _Dest=0x3f39d98, _Source="Norfolk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" [0175.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0175.104] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noumea", cAlternateFileName="")) returned 1 [0175.104] wcscmp (_String1="Noumea", _String2=".") returned 1 [0175.104] wcscmp (_String1="Noumea", _String2="..") returned 1 [0175.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f39d28 [0175.104] wcscpy (in: _Dest=0x3f39d28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.104] wcscat (in: _Dest=0x3f39d28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.104] wcscat (in: _Dest=0x3f39d28, _Source="Noumea" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" [0175.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc4 [0175.105] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pago_Pago", cAlternateFileName="PAGO_P~1")) returned 1 [0175.105] wcscmp (_String1="Pago_Pago", _String2=".") returned 1 [0175.105] wcscmp (_String1="Pago_Pago", _String2="..") returned 1 [0175.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f337b8 [0175.105] wcscpy (in: _Dest=0x3f337b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.105] wcscat (in: _Dest=0x3f337b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.105] wcscat (in: _Dest=0x3f337b8, _Source="Pago_Pago" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" [0175.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f337b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a0 [0175.412] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palau", cAlternateFileName="")) returned 1 [0175.412] wcscmp (_String1="Palau", _String2=".") returned 1 [0175.412] wcscmp (_String1="Palau", _String2="..") returned 1 [0175.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46748 [0175.412] wcscpy (in: _Dest=0x3d46748, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0175.412] wcscat (in: _Dest=0x3d46748, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0175.412] wcscat (in: _Dest=0x3d46748, _Source="Palau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau" [0176.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2718 [0176.072] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitcairn", cAlternateFileName="")) returned 1 [0176.072] wcscmp (_String1="Pitcairn", _String2=".") returned 1 [0176.073] wcscmp (_String1="Pitcairn", _String2="..") returned 1 [0176.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f394d8 [0176.090] wcscpy (in: _Dest=0x3f394d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0176.090] wcscat (in: _Dest=0x3f394d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0176.090] wcscat (in: _Dest=0x3f394d8, _Source="Pitcairn" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" [0176.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f394d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0176.091] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pohnpei", cAlternateFileName="")) returned 1 [0176.091] wcscmp (_String1="Pohnpei", _String2=".") returned 1 [0176.091] wcscmp (_String1="Pohnpei", _String2="..") returned 1 [0176.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a268 [0176.091] wcscpy (in: _Dest=0x3f3a268, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0176.091] wcscat (in: _Dest=0x3f3a268, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0176.091] wcscat (in: _Dest=0x3f3a268, _Source="Pohnpei" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" [0176.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a2c [0176.092] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_Moresby", cAlternateFileName="PORT_M~1")) returned 1 [0176.092] wcscmp (_String1="Port_Moresby", _String2=".") returned 1 [0176.092] wcscmp (_String1="Port_Moresby", _String2="..") returned 1 [0176.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f33060 [0176.092] wcscpy (in: _Dest=0x3f33060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0176.092] wcscat (in: _Dest=0x3f33060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0176.092] wcscat (in: _Dest=0x3f33060, _Source="Port_Moresby" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" [0176.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2670 [0176.093] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rarotonga", cAlternateFileName="RAROTO~1")) returned 1 [0176.093] wcscmp (_String1="Rarotonga", _String2=".") returned 1 [0176.093] wcscmp (_String1="Rarotonga", _String2="..") returned 1 [0176.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f39e78 [0176.093] wcscpy (in: _Dest=0x3f39e78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0176.093] wcscat (in: _Dest=0x3f39e78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0176.093] wcscat (in: _Dest=0x3f39e78, _Source="Rarotonga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" [0176.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x266c [0176.094] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saipan", cAlternateFileName="")) returned 1 [0176.094] wcscmp (_String1="Saipan", _String2=".") returned 1 [0176.094] wcscmp (_String1="Saipan", _String2="..") returned 1 [0176.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f398c8 [0176.094] wcscpy (in: _Dest=0x3f398c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0176.094] wcscat (in: _Dest=0x3f398c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0176.095] wcscat (in: _Dest=0x3f398c8, _Source="Saipan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" [0176.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f398c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f8 [0176.096] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tahiti", cAlternateFileName="")) returned 1 [0176.096] wcscmp (_String1="Tahiti", _String2=".") returned 1 [0176.096] wcscmp (_String1="Tahiti", _String2="..") returned 1 [0176.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f341c8 [0176.096] wcscpy (in: _Dest=0x3f341c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0176.096] wcscat (in: _Dest=0x3f341c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0176.096] wcscat (in: _Dest=0x3f341c8, _Source="Tahiti" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" [0176.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f341c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f4 [0176.097] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tarawa", cAlternateFileName="")) returned 1 [0176.097] wcscmp (_String1="Tarawa", _String2=".") returned 1 [0176.097] wcscmp (_String1="Tarawa", _String2="..") returned 1 [0176.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33b38 [0176.097] wcscpy (in: _Dest=0x3f33b38, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0176.097] wcscat (in: _Dest=0x3f33b38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0176.097] wcscat (in: _Dest=0x3f33b38, _Source="Tarawa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" [0176.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f0 [0176.098] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tongatapu", cAlternateFileName="TONGAT~1")) returned 1 [0176.098] wcscmp (_String1="Tongatapu", _String2=".") returned 1 [0176.098] wcscmp (_String1="Tongatapu", _String2="..") returned 1 [0176.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f34318 [0176.098] wcscpy (in: _Dest=0x3f34318, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0176.098] wcscat (in: _Dest=0x3f34318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0176.098] wcscat (in: _Dest=0x3f34318, _Source="Tongatapu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" [0176.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec [0176.099] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wake", cAlternateFileName="")) returned 1 [0177.565] wcscmp (_String1="Wake", _String2=".") returned 1 [0177.565] wcscmp (_String1="Wake", _String2="..") returned 1 [0177.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d464d8 [0177.565] wcscpy (in: _Dest=0x3d464d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0177.565] wcscat (in: _Dest=0x3d464d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0177.565] wcscat (in: _Dest=0x3d464d8, _Source="Wake" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake" [0178.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d464d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0178.377] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 1 [0178.377] wcscmp (_String1="Wallis", _String2=".") returned 1 [0178.377] wcscmp (_String1="Wallis", _String2="..") returned 1 [0178.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f33d68 [0178.377] wcscpy (in: _Dest=0x3f33d68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0178.377] wcscat (in: _Dest=0x3f33d68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0178.377] wcscat (in: _Dest=0x3f33d68, _Source="Wallis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" [0178.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0178.378] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3d852d8 | out: lpFindFileData=0x3d852d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 0 [0181.548] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0186.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852d8) returned 1 [0186.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7388) returned 1 [0186.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe74a8) returned 1 Thread: id = 4189 os_tid = 0x1824 [0170.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pst8pdt")) returned 0x20 [0171.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT", dwFileAttributes=0x20) returned 0 [0171.832] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pst8pdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.832] GetLastError () returned 0x5 [0171.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT", dwFileAttributes=0x20) returned 0 [0171.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4a48) returned 1 Thread: id = 4190 os_tid = 0x1828 [0170.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6848 [0170.309] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0170.309] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0170.309] wcscat (in: _Dest=0x2fe6848, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\*" [0170.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0170.309] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e554c8 [0172.694] wcscmp (_String1=".", _String2=".") returned 0 [0172.694] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.694] wcscmp (_String1="..", _String2=".") returned 1 [0172.694] wcscmp (_String1="..", _String2="..") returned 0 [0172.694] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4", cAlternateFileName="")) returned 1 [0172.694] wcscmp (_String1="AST4", _String2=".") returned 1 [0172.694] wcscmp (_String1="AST4", _String2="..") returned 1 [0172.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d470a0 [0172.694] wcscpy (in: _Dest=0x3d470a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0172.695] wcscat (in: _Dest=0x3d470a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0172.695] wcscat (in: _Dest=0x3d470a0, _Source="AST4" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4" [0175.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d470a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0175.320] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4ADT", cAlternateFileName="")) returned 1 [0175.320] wcscmp (_String1="AST4ADT", _String2=".") returned 1 [0175.320] wcscmp (_String1="AST4ADT", _String2="..") returned 1 [0175.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f3a038 [0175.321] wcscpy (in: _Dest=0x3f3a038, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.321] wcscat (in: _Dest=0x3f3a038, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.321] wcscat (in: _Dest=0x3f3a038, _Source="AST4ADT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" [0175.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f3a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0175.322] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6", cAlternateFileName="")) returned 1 [0175.322] wcscmp (_String1="CST6", _String2=".") returned 1 [0175.322] wcscmp (_String1="CST6", _String2="..") returned 1 [0175.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46060 [0175.322] wcscpy (in: _Dest=0x3d46060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.322] wcscat (in: _Dest=0x3d46060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.322] wcscat (in: _Dest=0x3d46060, _Source="CST6" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6" [0175.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0175.323] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0175.323] wcscmp (_String1="CST6CDT", _String2=".") returned 1 [0175.323] wcscmp (_String1="CST6CDT", _String2="..") returned 1 [0175.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39858 [0175.324] wcscpy (in: _Dest=0x3f39858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.324] wcscat (in: _Dest=0x3f39858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.324] wcscat (in: _Dest=0x3f39858, _Source="CST6CDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" [0175.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0175.325] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5", cAlternateFileName="")) returned 1 [0175.325] wcscmp (_String1="EST5", _String2=".") returned 1 [0175.325] wcscmp (_String1="EST5", _String2="..") returned 1 [0175.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46338 [0175.325] wcscpy (in: _Dest=0x3d46338, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.325] wcscat (in: _Dest=0x3d46338, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.325] wcscat (in: _Dest=0x3d46338, _Source="EST5" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5" [0175.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0175.326] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0175.326] wcscmp (_String1="EST5EDT", _String2=".") returned 1 [0175.326] wcscmp (_String1="EST5EDT", _String2="..") returned 1 [0175.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f39e08 [0175.326] wcscpy (in: _Dest=0x3f39e08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.327] wcscat (in: _Dest=0x3f39e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.327] wcscat (in: _Dest=0x3f39e08, _Source="EST5EDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" [0175.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f39e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0175.331] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST10", cAlternateFileName="")) returned 1 [0175.331] wcscmp (_String1="HST10", _String2=".") returned 1 [0175.332] wcscmp (_String1="HST10", _String2="..") returned 1 [0175.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d465a8 [0175.332] wcscpy (in: _Dest=0x3d465a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.332] wcscat (in: _Dest=0x3d465a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.332] wcscat (in: _Dest=0x3d465a8, _Source="HST10" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10" [0175.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d465a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0175.333] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7", cAlternateFileName="")) returned 1 [0175.333] wcscmp (_String1="MST7", _String2=".") returned 1 [0175.333] wcscmp (_String1="MST7", _String2="..") returned 1 [0175.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46610 [0175.333] wcscpy (in: _Dest=0x3d46610, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.333] wcscat (in: _Dest=0x3d46610, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.333] wcscat (in: _Dest=0x3d46610, _Source="MST7" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7" [0175.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0175.334] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0175.334] wcscmp (_String1="MST7MDT", _String2=".") returned 1 [0175.335] wcscmp (_String1="MST7MDT", _String2="..") returned 1 [0175.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f33c88 [0175.335] wcscpy (in: _Dest=0x3f33c88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.335] wcscat (in: _Dest=0x3f33c88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.335] wcscat (in: _Dest=0x3f33c88, _Source="MST7MDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" [0175.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f33c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0175.336] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8", cAlternateFileName="")) returned 1 [0175.336] wcscmp (_String1="PST8", _String2=".") returned 1 [0175.336] wcscmp (_String1="PST8", _String2="..") returned 1 [0175.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46678 [0175.336] wcscpy (in: _Dest=0x3d46678, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.336] wcscat (in: _Dest=0x3d46678, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.336] wcscat (in: _Dest=0x3d46678, _Source="PST8" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8" [0175.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d46678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0175.337] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0175.337] wcscmp (_String1="PST8PDT", _String2=".") returned 1 [0175.337] wcscmp (_String1="PST8PDT", _String2="..") returned 1 [0175.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f335f8 [0175.338] wcscpy (in: _Dest=0x3f335f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.338] wcscat (in: _Dest=0x3f335f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.338] wcscat (in: _Dest=0x3f335f8, _Source="PST8PDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" [0175.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f335f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0175.339] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9", cAlternateFileName="")) returned 1 [0175.339] wcscmp (_String1="YST9", _String2=".") returned 1 [0175.339] wcscmp (_String1="YST9", _String2="..") returned 1 [0175.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d466e0 [0175.339] wcscpy (in: _Dest=0x3d466e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.339] wcscat (in: _Dest=0x3d466e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.339] wcscat (in: _Dest=0x3d466e0, _Source="YST9" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9" [0175.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d466e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0175.340] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 1 [0175.340] wcscmp (_String1="YST9YDT", _String2=".") returned 1 [0175.340] wcscmp (_String1="YST9YDT", _String2="..") returned 1 [0175.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f34078 [0175.340] wcscpy (in: _Dest=0x3f34078, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0175.340] wcscat (in: _Dest=0x3f34078, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0175.340] wcscat (in: _Dest=0x3f34078, _Source="YST9YDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" [0175.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f34078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad8 [0175.341] FindNextFileW (in: hFindFile=0x3e554c8, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 0 [0175.342] FindClose (in: hFindFile=0x3e554c8 | out: hFindFile=0x3e554c8) returned 1 [0175.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0175.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0175.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe73e8) returned 1 Thread: id = 4191 os_tid = 0x182c [0170.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\wet")) returned 0x20 [0171.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET", dwFileAttributes=0x20) returned 0 [0171.890] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\wet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.890] GetLastError () returned 0x5 [0171.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET", dwFileAttributes=0x20) returned 0 [0171.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831c7c8) returned 1 Thread: id = 4192 os_tid = 0x1830 [0170.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\zoneinfomappings")) returned 0x20 [0171.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", dwFileAttributes=0x20) returned 0 [0171.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\zoneinfomappings"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.829] GetLastError () returned 0x5 [0171.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", dwFileAttributes=0x20) returned 0 [0171.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e78) returned 1 Thread: id = 4193 os_tid = 0x1834 [0170.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd")) returned 0x20 [0171.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD", dwFileAttributes=0x20) returned 0 [0171.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.929] GetLastError () returned 0x5 [0171.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD", dwFileAttributes=0x20) returned 0 [0171.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 4194 os_tid = 0x1838 [0170.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs")) returned 0x20 [0171.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS", dwFileAttributes=0x20) returned 0 [0171.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.927] GetLastError () returned 0x5 [0171.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS", dwFileAttributes=0x20) returned 0 [0171.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 4195 os_tid = 0x1844 [0170.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs")) returned 0x20 [0171.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS", dwFileAttributes=0x20) returned 0 [0171.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.956] GetLastError () returned 0x5 [0171.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS", dwFileAttributes=0x20) returned 0 [0171.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 Thread: id = 4196 os_tid = 0x1848 [0170.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc")) returned 0x20 [0171.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC", dwFileAttributes=0x20) returned 0 [0171.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.954] GetLastError () returned 0x5 [0171.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC", dwFileAttributes=0x20) returned 0 [0171.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ca00) returned 1 Thread: id = 4197 os_tid = 0x184c [0170.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt")) returned 0x20 [0171.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT", dwFileAttributes=0x20) returned 0 [0171.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.952] GetLastError () returned 0x5 [0171.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT", dwFileAttributes=0x20) returned 0 [0171.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cff0) returned 1 Thread: id = 4198 os_tid = 0x1850 [0170.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk")) returned 0x20 [0171.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.950] GetLastError () returned 0x5 [0171.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac78) returned 1 Thread: id = 4199 os_tid = 0x1854 [0170.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk")) returned 0x20 [0171.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.948] GetLastError () returned 0x5 [0171.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bc18) returned 1 Thread: id = 4200 os_tid = 0x1858 [0170.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc")) returned 0x20 [0171.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC", dwFileAttributes=0x20) returned 0 [0171.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.925] GetLastError () returned 0x5 [0171.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC", dwFileAttributes=0x20) returned 0 [0171.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de0f8) returned 1 Thread: id = 4201 os_tid = 0x185c [0170.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt")) returned 0x20 [0171.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT", dwFileAttributes=0x20) returned 0 [0171.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.946] GetLastError () returned 0x5 [0171.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT", dwFileAttributes=0x20) returned 0 [0171.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 Thread: id = 4202 os_tid = 0x1860 [0170.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk")) returned 0x20 [0171.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.944] GetLastError () returned 0x5 [0171.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 Thread: id = 4203 os_tid = 0x1864 [0170.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk")) returned 0x20 [0171.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.942] GetLastError () returned 0x5 [0171.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0171.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 Thread: id = 4204 os_tid = 0x1868 [0170.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd")) returned 0x20 [0171.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD", dwFileAttributes=0x20) returned 0 [0171.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.940] GetLastError () returned 0x5 [0171.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD", dwFileAttributes=0x20) returned 0 [0171.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 4205 os_tid = 0x1870 [0170.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd")) returned 0x20 [0171.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD", dwFileAttributes=0x20) returned 0 [0171.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.924] GetLastError () returned 0x5 [0171.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD", dwFileAttributes=0x20) returned 0 [0171.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 4213 os_tid = 0x1874 [0171.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8335590 [0171.063] wcscpy (in: _Dest=0x8335590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0171.063] wcscat (in: _Dest=0x8335590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\" [0171.063] wcscat (in: _Dest=0x8335590, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*" [0171.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85ee0 [0171.063] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0172.397] wcscmp (_String1=".", _String2=".") returned 0 [0172.397] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.397] wcscmp (_String1="..", _String2=".") returned 1 [0172.398] wcscmp (_String1="..", _String2="..") returned 0 [0172.398] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7718eef0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Basic", cAlternateFileName="")) returned 1 [0172.398] wcscmp (_String1="Basic", _String2=".") returned 1 [0172.398] wcscmp (_String1="Basic", _String2="..") returned 1 [0172.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec828 [0172.398] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0172.398] wcscat (in: _Dest=0x3dec828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\" [0172.398] wcscat (in: _Dest=0x3dec828, _Source="Basic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" [0176.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0176.107] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 1 [0176.107] wcscmp (_String1="Fancy", _String2=".") returned 1 [0176.107] wcscmp (_String1="Fancy", _String2="..") returned 1 [0176.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbc78 [0176.107] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0176.107] wcscat (in: _Dest=0x30bbc78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\" [0176.107] wcscat (in: _Dest=0x30bbc78, _Source="Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0176.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x30bbc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2650 [0176.108] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 0 [0176.108] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0176.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ee0) returned 1 [0176.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335590) returned 1 [0176.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27b40) returned 1 Thread: id = 4214 os_tid = 0x187c [0172.059] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json")) returned 0x2020 [0173.652] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0176.306] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c74 [0176.307] GetFileSizeEx (in: hFile=0x1c74, lpFileSize=0x7defd30 | out: lpFileSize=0x7defd30*=257) returned 1 [0176.307] SetFilePointerEx (in: hFile=0x1c74, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.307] ReadFile (in: hFile=0x1c74, lpBuffer=0x7defd3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7defd18, lpOverlapped=0x0 | out: lpBuffer=0x7defd3c*, lpNumberOfBytesRead=0x7defd18*=0x4, lpOverlapped=0x0) returned 1 [0176.309] SetFilePointerEx (in: hFile=0x1c74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0176.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b838 [0176.309] NtQuerySystemTime (in: CurrentTime=0x7defcb8 | out: CurrentTime=0x7defcb8*=132471540443952000) returned 0x0 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x308c9e0b [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x1a64bd8a [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x5d3c6ad6 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x5af956c [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x7de04019 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x263b7df0 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x2a4a6cd0 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x32924607 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0xbeeed9c [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x6988ba1c [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x757245d8 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x19e60c9a [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x76421400 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x4c24a47d [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x6ea802ff [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x359ba69d [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x51e83e53 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x2c1f3d19 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x1f63dd32 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x323920ba [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x3edc53e3 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x4be380b8 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x210ef549 [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x24e2336b [0176.309] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x256c6eef [0176.310] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x8040d59 [0176.310] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x2a00f2c9 [0176.310] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x6fb70f80 [0176.310] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x12a2dac3 [0176.310] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x382fc9c6 [0176.310] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0xfd1ecb2 [0176.310] RtlRandomEx (in: Seed=0x7defcb0 | out: Seed=0x7defcb0) returned 0x3306a050 [0176.317] ReadFile (in: hFile=0x1c74, lpBuffer=0x817acc8, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0x7defcac, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesRead=0x7defcac*=0x101, lpOverlapped=0x0) returned 1 [0176.317] SetFilePointerEx (in: hFile=0x1c74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.317] WriteFile (in: hFile=0x1c74, lpBuffer=0x81680a0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x7defcb0, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesWritten=0x7defcb0*=0x101, lpOverlapped=0x0) returned 1 [0177.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0177.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304238 [0177.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304238) returned 1 [0177.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0177.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0177.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0177.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6b18) returned 1 [0177.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0177.329] SetFilePointerEx (in: hFile=0x1c74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.329] WriteFile (in: hFile=0x1c74, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7defd24, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x7defd24*=0x10c, lpOverlapped=0x0) returned 1 [0182.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0182.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0182.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304238) returned 1 [0182.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0182.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0182.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0182.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cee0) returned 1 [0182.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0182.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a4060 [0182.943] wcscpy (in: _Dest=0x148a4060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" [0182.943] wcscat (in: _Dest=0x148a4060, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.f0dbec" [0182.943] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0x7defca8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef92c0 [0182.997] FlushFileBuffers (hFile=0x1c74) returned 1 [0183.007] CloseHandle (hObject=0x1c74) returned 1 [0183.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ef8998 [0183.020] wcscpy (in: _Dest=0x3ef8998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" [0183.020] wcscat (in: _Dest=0x3ef8998, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\F0DBEC-Readme.txt" [0183.021] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0183.021] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28fc [0183.053] WriteFile (in: hFile=0x28fc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7defccc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7defccc*=0x70c, lpOverlapped=0x0) returned 1 [0183.060] CloseHandle (hObject=0x28fc) returned 1 [0183.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8998) returned 1 [0183.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041bc0) returned 1 Thread: id = 4215 os_tid = 0x1880 [0172.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020 [0175.433] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0184.619] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f0c [0184.619] GetFileSizeEx (in: hFile=0x1f0c, lpFileSize=0x788fb00 | out: lpFileSize=0x788fb00*=222) returned 1 [0184.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0184.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0184.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0184.619] NtQuerySystemTime (in: CurrentTime=0x788fa88 | out: CurrentTime=0x788fa88*=132471540525384000) returned 0x0 [0184.619] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x197a4302 [0184.619] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x77ee09c8 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x24aec07e [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x50c5e963 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x27bcc6f [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x34b11dfa [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x3f947cdb [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x21d992c [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x9468a3 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x51d5b58d [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x78f3855 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x53eafc43 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x806f959 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x6c1b0291 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x1585e177 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x9db9264 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x371bc9a9 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x1c8753f0 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x7d52a48a [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x55295c9d [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x6f0980c1 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x3724e40c [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x103c8e24 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x6112f250 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x783207ba [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x48593b87 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x23fde1f0 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x38b62417 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x3ef93bce [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x1035b9a [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x1f51cc94 [0184.620] RtlRandomEx (in: Seed=0x788fa80 | out: Seed=0x788fa80) returned 0x200bd1da [0184.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0184.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0184.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81824d8 [0184.642] ReadFile (in: hFile=0x1f0c, lpBuffer=0x80ad080, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0x788fa7c, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesRead=0x788fa7c*=0xde, lpOverlapped=0x0) returned 1 [0184.643] SetFilePointerEx (in: hFile=0x1f0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.643] WriteFile (in: hFile=0x1f0c, lpBuffer=0x81824d8*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x788fa80, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesWritten=0x788fa80*=0xde, lpOverlapped=0x0) returned 1 [0189.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42588 [0189.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0189.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0189.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0189.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0189.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0189.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dc18) returned 1 [0189.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69180 [0189.428] SetFilePointerEx (in: hFile=0x1f0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.428] WriteFile (in: hFile=0x1f0c, lpBuffer=0x81e0480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x788faf4, lpOverlapped=0x0 | out: lpBuffer=0x81e0480*, lpNumberOfBytesWritten=0x788faf4*=0x10c, lpOverlapped=0x0) returned 1 [0190.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0480) returned 1 [0190.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0190.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0190.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0190.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0190.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0190.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0190.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c928) returned 1 [0190.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404428 [0190.535] wcscpy (in: _Dest=0x8404428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" [0190.535] wcscat (in: _Dest=0x8404428, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.f0dbec" [0190.535] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0x788fa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9928 [0190.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9928) returned 1 [0190.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83faae8) returned 1 [0190.675] NtQueryInformationFile (in: FileHandle=0x1f0c, IoStatusBlock=0x788fa50, FileInformation=0x788fa58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x788fa50, FileInformation=0x788fa58) returned 0x0 [0190.675] NtSetInformationFile (FileHandle=0x1f0c, IoStatusBlock=0x788fa50, FileInformation=0x788fa58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404428) returned 1 [0190.817] FlushFileBuffers (hFile=0x1f0c) returned 1 [0190.830] CloseHandle (hObject=0x1f0c) returned 1 [0193.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ef648 [0193.147] wcscpy (in: _Dest=0x81ef648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" [0193.147] wcscat (in: _Dest=0x81ef648, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\F0DBEC-Readme.txt" [0193.147] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0193.147] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ce4 [0196.441] WriteFile (in: hFile=0x1ce4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x788fa9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x788fa9c*=0x70c, lpOverlapped=0x0) returned 1 [0197.484] CloseHandle (hObject=0x1ce4) returned 1 [0198.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef648) returned 1 [0198.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 Thread: id = 4216 os_tid = 0x1884 [0172.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aden")) returned 0x20 [0172.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden", dwFileAttributes=0x20) returned 0 [0172.494] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aden"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.494] GetLastError () returned 0x5 [0172.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden", dwFileAttributes=0x20) returned 0 [0172.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0cc8) returned 1 Thread: id = 4217 os_tid = 0x1888 [0172.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\almaty")) returned 0x20 [0172.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty", dwFileAttributes=0x20) returned 0 [0172.499] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\almaty"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.499] GetLastError () returned 0x5 [0172.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty", dwFileAttributes=0x20) returned 0 [0172.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d470a0) returned 1 Thread: id = 4218 os_tid = 0x188c [0172.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\amman")) returned 0x20 [0172.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman", dwFileAttributes=0x20) returned 0 [0172.520] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\amman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.520] GetLastError () returned 0x5 [0172.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman", dwFileAttributes=0x20) returned 0 [0172.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46950) returned 1 Thread: id = 4219 os_tid = 0x1890 [0172.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\anadyr")) returned 0x20 [0174.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr", dwFileAttributes=0x20) returned 0 [0174.480] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\anadyr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.480] GetLastError () returned 0x5 [0174.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr", dwFileAttributes=0x20) returned 0 [0174.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d468e8) returned 1 Thread: id = 4220 os_tid = 0x1894 [0172.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtau")) returned 0x20 [0174.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau", dwFileAttributes=0x20) returned 0 [0174.482] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.482] GetLastError () returned 0x5 [0174.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau", dwFileAttributes=0x20) returned 0 [0174.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46880) returned 1 Thread: id = 4221 os_tid = 0x1898 [0172.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtobe")) returned 0x20 [0174.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe", dwFileAttributes=0x20) returned 0 [0174.490] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtobe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.490] GetLastError () returned 0x5 [0174.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe", dwFileAttributes=0x20) returned 0 [0174.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46818) returned 1 Thread: id = 4222 os_tid = 0x189c [0172.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ashgabat")) returned 0x20 [0174.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat", dwFileAttributes=0x20) returned 0 [0174.492] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ashgabat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.492] GetLastError () returned 0x5 [0174.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat", dwFileAttributes=0x20) returned 0 [0174.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d467b0) returned 1 Thread: id = 4223 os_tid = 0x18a0 [0172.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baghdad")) returned 0x20 [0174.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad", dwFileAttributes=0x20) returned 0 [0174.494] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baghdad"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.494] GetLastError () returned 0x5 [0174.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad", dwFileAttributes=0x20) returned 0 [0174.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46748) returned 1 Thread: id = 4224 os_tid = 0x18a4 [0172.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bahrain")) returned 0x20 [0174.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain", dwFileAttributes=0x20) returned 0 [0174.495] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bahrain"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.496] GetLastError () returned 0x5 [0174.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain", dwFileAttributes=0x20) returned 0 [0174.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d466e0) returned 1 Thread: id = 4225 os_tid = 0x18a8 [0172.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baku")) returned 0x20 [0174.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku", dwFileAttributes=0x20) returned 0 [0174.497] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baku"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.497] GetLastError () returned 0x5 [0174.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku", dwFileAttributes=0x20) returned 0 [0174.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 Thread: id = 4226 os_tid = 0x18ac [0172.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bangkok")) returned 0x20 [0174.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok", dwFileAttributes=0x20) returned 0 [0174.499] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bangkok"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.499] GetLastError () returned 0x5 [0174.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok", dwFileAttributes=0x20) returned 0 [0174.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46678) returned 1 Thread: id = 4227 os_tid = 0x18b0 [0172.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\beirut")) returned 0x20 [0174.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut", dwFileAttributes=0x20) returned 0 [0174.500] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\beirut"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.501] GetLastError () returned 0x5 [0174.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut", dwFileAttributes=0x20) returned 0 [0174.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46610) returned 1 Thread: id = 4228 os_tid = 0x18b4 [0172.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bishkek")) returned 0x20 [0174.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek", dwFileAttributes=0x20) returned 0 [0174.502] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bishkek"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.502] GetLastError () returned 0x5 [0174.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek", dwFileAttributes=0x20) returned 0 [0174.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d465a8) returned 1 Thread: id = 4229 os_tid = 0x18c4 [0172.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\brunei")) returned 0x20 [0173.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei", dwFileAttributes=0x20) returned 0 [0173.845] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\brunei"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.845] GetLastError () returned 0x5 [0173.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei", dwFileAttributes=0x20) returned 0 [0173.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46540) returned 1 Thread: id = 4230 os_tid = 0x18c8 [0172.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\choibalsan")) returned 0x20 [0174.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan", dwFileAttributes=0x20) returned 0 [0174.446] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\choibalsan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.446] GetLastError () returned 0x5 [0174.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan", dwFileAttributes=0x20) returned 0 [0174.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39548) returned 1 Thread: id = 4231 os_tid = 0x18cc [0172.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\chongqing")) returned 0x20 [0174.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing", dwFileAttributes=0x20) returned 0 [0174.395] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\chongqing"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.395] GetLastError () returned 0x5 [0174.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing", dwFileAttributes=0x20) returned 0 [0174.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a18) returned 1 Thread: id = 4232 os_tid = 0x18d0 [0172.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\colombo")) returned 0x20 [0174.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo", dwFileAttributes=0x20) returned 0 [0174.478] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\colombo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.478] GetLastError () returned 0x5 [0174.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo", dwFileAttributes=0x20) returned 0 [0174.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46470) returned 1 Thread: id = 4233 os_tid = 0x18d4 [0172.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\damascus")) returned 0x20 [0174.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus", dwFileAttributes=0x20) returned 0 [0174.464] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\damascus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.465] GetLastError () returned 0x5 [0174.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus", dwFileAttributes=0x20) returned 0 [0174.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46408) returned 1 Thread: id = 4234 os_tid = 0x18dc [0172.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dhaka")) returned 0x20 [0174.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka", dwFileAttributes=0x20) returned 0 [0174.463] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dhaka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.463] GetLastError () returned 0x5 [0174.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka", dwFileAttributes=0x20) returned 0 [0174.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d463a0) returned 1 Thread: id = 4235 os_tid = 0x18e0 [0172.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dili")) returned 0x20 [0174.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili", dwFileAttributes=0x20) returned 0 [0174.462] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dili"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.462] GetLastError () returned 0x5 [0174.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili", dwFileAttributes=0x20) returned 0 [0174.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7148) returned 1 Thread: id = 4236 os_tid = 0x18e4 [0172.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dubai")) returned 0x20 [0174.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai", dwFileAttributes=0x20) returned 0 [0174.459] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dubai"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.459] GetLastError () returned 0x5 [0174.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai", dwFileAttributes=0x20) returned 0 [0174.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d462d0) returned 1 Thread: id = 4237 os_tid = 0x18e8 [0172.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dushanbe")) returned 0x20 [0174.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe", dwFileAttributes=0x20) returned 0 [0174.457] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dushanbe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.457] GetLastError () returned 0x5 [0174.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe", dwFileAttributes=0x20) returned 0 [0174.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46268) returned 1 Thread: id = 4238 os_tid = 0x18ec [0172.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\gaza")) returned 0x20 [0174.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza", dwFileAttributes=0x20) returned 0 [0174.456] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\gaza"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.456] GetLastError () returned 0x5 [0174.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza", dwFileAttributes=0x20) returned 0 [0174.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe71a8) returned 1 Thread: id = 4239 os_tid = 0x18f0 [0172.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\harbin")) returned 0x20 [0174.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin", dwFileAttributes=0x20) returned 0 [0174.454] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\harbin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.454] GetLastError () returned 0x5 [0174.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin", dwFileAttributes=0x20) returned 0 [0174.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46200) returned 1 Thread: id = 4240 os_tid = 0x18f8 [0172.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hebron")) returned 0x20 [0174.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron", dwFileAttributes=0x20) returned 0 [0174.452] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hebron"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.453] GetLastError () returned 0x5 [0174.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron", dwFileAttributes=0x20) returned 0 [0174.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46198) returned 1 Thread: id = 4241 os_tid = 0x18fc [0172.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hong_kong")) returned 0x20 [0174.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong", dwFileAttributes=0x20) returned 0 [0174.451] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hong_kong"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.451] GetLastError () returned 0x5 [0174.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong", dwFileAttributes=0x20) returned 0 [0174.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39af8) returned 1 Thread: id = 4242 os_tid = 0x1900 [0172.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hovd")) returned 0x20 [0174.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd", dwFileAttributes=0x20) returned 0 [0174.449] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hovd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.450] GetLastError () returned 0x5 [0174.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd", dwFileAttributes=0x20) returned 0 [0174.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 Thread: id = 4243 os_tid = 0x1904 [0172.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh")) returned 0x20 [0174.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh", dwFileAttributes=0x20) returned 0 [0174.448] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.448] GetLastError () returned 0x5 [0174.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh", dwFileAttributes=0x20) returned 0 [0174.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39468) returned 1 Thread: id = 4244 os_tid = 0x1908 [0172.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\irkutsk")) returned 0x20 [0174.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk", dwFileAttributes=0x20) returned 0 [0174.444] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\irkutsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.445] GetLastError () returned 0x5 [0174.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk", dwFileAttributes=0x20) returned 0 [0174.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46130) returned 1 Thread: id = 4245 os_tid = 0x190c [0172.950] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json")) returned 0x2020 [0173.686] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0176.528] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c10 [0176.528] GetFileSizeEx (in: hFile=0x1c10, lpFileSize=0x46ef990 | out: lpFileSize=0x46ef990*=10089) returned 1 [0176.528] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x2765, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.528] ReadFile (in: hFile=0x1c10, lpBuffer=0x46ef99c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x46ef978, lpOverlapped=0x0 | out: lpBuffer=0x46ef99c*, lpNumberOfBytesRead=0x46ef978*=0x4, lpOverlapped=0x0) returned 1 [0176.597] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0176.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0176.597] NtQuerySystemTime (in: CurrentTime=0x46ef918 | out: CurrentTime=0x46ef918*=132471540446760000) returned 0x0 [0176.597] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x4548bddb [0176.597] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x60cfe5f7 [0176.597] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x15cd0c71 [0176.597] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x558e6baf [0176.597] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x34943d3b [0176.597] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x288f4cf6 [0176.597] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x7595670e [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x3fc42b92 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x657c69ea [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x71761124 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x280201b0 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x4c6bec2e [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0xc926586 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x66fe2403 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x723cf184 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x1f06729f [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x15a5850e [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x779dcc43 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0xc9bcc8e [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x4eaca18f [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x6b6a338e [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x77dca3aa [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x4d6ea912 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x216dc6a0 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x6484bf66 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x10c32f7e [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x351c7c4e [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x3b7ec0b7 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x698a4a96 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x298c7c13 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x167a1991 [0176.598] RtlRandomEx (in: Seed=0x46ef910 | out: Seed=0x46ef910) returned 0x57bdef94 [0176.608] ReadFile (in: hFile=0x1c10, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x2769, lpNumberOfBytesRead=0x46ef90c, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0x46ef90c*=0x2769, lpOverlapped=0x0) returned 1 [0176.641] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.641] WriteFile (in: hFile=0x1c10, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x2769, lpNumberOfBytesWritten=0x46ef910, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0x46ef910*=0x2769, lpOverlapped=0x0) returned 1 [0177.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d58 [0177.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42830 [0177.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42830) returned 1 [0177.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0177.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0177.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0177.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5da20) returned 1 [0177.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5da20 [0177.709] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.709] WriteFile (in: hFile=0x1c10, lpBuffer=0x8187dc8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x46ef984, lpOverlapped=0x0 | out: lpBuffer=0x8187dc8*, lpNumberOfBytesWritten=0x46ef984*=0x11e, lpOverlapped=0x0) returned 1 [0182.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187dc8) returned 1 [0182.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4ec0) returned 1 [0182.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42830) returned 1 [0182.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5da20) returned 1 [0182.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d58) returned 1 [0182.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0182.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0182.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0182.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ef92c0 [0182.457] wcscpy (in: _Dest=0x3ef92c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" [0182.457] wcscat (in: _Dest=0x3ef92c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.f0dbec" [0182.457] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.f0dbec", NtPathName=0x46ef908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e177a0 [0182.695] FlushFileBuffers (hFile=0x1c10) returned 1 [0182.698] CloseHandle (hObject=0x1c10) returned 1 [0182.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401838 [0182.826] wcscpy (in: _Dest=0x8401838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" [0182.826] wcscat (in: _Dest=0x8401838, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\F0DBEC-Readme.txt" [0182.826] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\f0dbec-readme.txt")) returned 0xffffffff [0182.826] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1480 [0182.933] WriteFile (in: hFile=0x1480, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x46ef92c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x46ef92c*=0x70c, lpOverlapped=0x0) returned 1 [0183.104] CloseHandle (hObject=0x1480) returned 1 [0183.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401838) returned 1 [0183.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef84b8) returned 1 Thread: id = 4246 os_tid = 0x1910 [0172.951] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png")) returned 0x2020 [0172.951] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png", dwFileAttributes=0x20) returned 1 [0176.530] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c0c [0176.530] GetFileSizeEx (in: hFile=0x1c0c, lpFileSize=0x441fb80 | out: lpFileSize=0x441fb80*=3000) returned 1 [0176.530] SetFilePointerEx (in: hFile=0x1c0c, liDistanceToMove=0xbb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.530] ReadFile (in: hFile=0x1c0c, lpBuffer=0x441fb8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x441fb68, lpOverlapped=0x0 | out: lpBuffer=0x441fb8c*, lpNumberOfBytesRead=0x441fb68*=0x4, lpOverlapped=0x0) returned 1 [0176.609] SetFilePointerEx (in: hFile=0x1c0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0176.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0176.609] NtQuerySystemTime (in: CurrentTime=0x441fb08 | out: CurrentTime=0x441fb08*=132471540446916000) returned 0x0 [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x7fcce240 [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x511672dd [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0xad8a9d6 [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x5633282 [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x1db4dc56 [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0xdff88 [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x694881b3 [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x3f4e5e3f [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0xe381c75 [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x188a3321 [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x1677badc [0176.609] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x38024212 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x27f7c3cb [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x1521b02d [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x7ee7a3b0 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x411a65c9 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x376e60d1 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x10148cc2 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x14d0af33 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x7ea14a82 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x4d2fd763 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x3896eef5 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x156293e3 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x732ac518 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x6b6e6458 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x1593d14d [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x5913edb4 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x54c73613 [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x2462779b [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x2069647d [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x364927ba [0176.610] RtlRandomEx (in: Seed=0x441fb00 | out: Seed=0x441fb00) returned 0x6822a2ed [0176.620] ReadFile (in: hFile=0x1c0c, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0xbb8, lpNumberOfBytesRead=0x441fafc, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0x441fafc*=0xbb8, lpOverlapped=0x0) returned 1 [0176.620] SetFilePointerEx (in: hFile=0x1c0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.620] WriteFile (in: hFile=0x1c0c, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0xbb8, lpNumberOfBytesWritten=0x441fb00, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0x441fb00*=0xbb8, lpOverlapped=0x0) returned 1 [0177.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431b8 [0177.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d427b8 [0177.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427b8) returned 1 [0177.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0177.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0177.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68240) returned 1 [0177.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5da68) returned 1 [0177.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e68d00 [0177.723] SetFilePointerEx (in: hFile=0x1c0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.723] WriteFile (in: hFile=0x1c0c, lpBuffer=0x81df760*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x441fb74, lpOverlapped=0x0 | out: lpBuffer=0x81df760*, lpNumberOfBytesWritten=0x441fb74*=0x10a, lpOverlapped=0x0) returned 1 [0182.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df760) returned 1 [0182.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692a0) returned 1 [0182.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427b8) returned 1 [0182.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d00) returned 1 [0182.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0182.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0182.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0182.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0182.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x8400ef8 [0182.453] wcscpy (in: _Dest=0x8400ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" [0182.453] wcscat (in: _Dest=0x8400ef8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.f0dbec" [0182.453] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.f0dbec", NtPathName=0x441faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3dd8df0 [0182.910] FlushFileBuffers (hFile=0x1c0c) returned 1 [0183.307] CloseHandle (hObject=0x1c0c) returned 1 [0183.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bb4d0 [0183.309] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0183.309] wcscat (in: _Dest=0x30bb4d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt" [0183.309] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\f0dbec-readme.txt")) returned 0x2020 [0183.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0183.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 Thread: id = 4247 os_tid = 0x1914 [0172.952] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png")) returned 0x2020 [0172.952] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png", dwFileAttributes=0x20) returned 1 [0176.532] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c08 [0176.532] GetFileSizeEx (in: hFile=0x1c08, lpFileSize=0x755f8c0 | out: lpFileSize=0x755f8c0*=143) returned 1 [0176.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0176.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9dd8 [0176.532] NtQuerySystemTime (in: CurrentTime=0x755f848 | out: CurrentTime=0x755f848*=132471540446136000) returned 0x0 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x13c53369 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x98043c7 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x261157cd [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x2df323d0 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0xf926013 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x3fb57db [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x78e66531 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x22dc49cd [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x74811503 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x3779eb79 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x37807725 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x5a8d2648 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x48404e50 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x7b4f8944 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x6bc8f18b [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x4e004237 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x52c7d354 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x7b50eb0c [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x3aba0c94 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0xfd75a78 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x3c009a80 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x77951fce [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x7b4f8944 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x44e77b1d [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0xa1b3532 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x3aba0c94 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x7a5155d5 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0xc7d5f4d [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x34f7d55e [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x13b67d52 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x10a9bf44 [0176.533] RtlRandomEx (in: Seed=0x755f840 | out: Seed=0x755f840) returned 0x42d5b5cb [0176.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0176.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0176.542] ReadFile (in: hFile=0x1c08, lpBuffer=0x8257478, nNumberOfBytesToRead=0x8f, lpNumberOfBytesRead=0x755f83c, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0x755f83c*=0x8f, lpOverlapped=0x0) returned 1 [0176.546] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.546] WriteFile (in: hFile=0x1c08, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x755f840, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0x755f840*=0x8f, lpOverlapped=0x0) returned 1 [0176.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0176.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1a18 [0176.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1a18) returned 1 [0176.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0176.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0176.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0176.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308458) returned 1 [0176.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e68fd0 [0176.848] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.848] WriteFile (in: hFile=0x1c08, lpBuffer=0x30bc420*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x755f8b4, lpOverlapped=0x0 | out: lpBuffer=0x30bc420*, lpNumberOfBytesWritten=0x755f8b4*=0x108, lpOverlapped=0x0) returned 1 [0176.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0176.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0176.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1a18) returned 1 [0176.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0176.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0176.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0176.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0176.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0176.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc420 [0176.868] wcscpy (in: _Dest=0x30bc420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" [0176.868] wcscat (in: _Dest=0x30bc420, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.f0dbec" [0176.868] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.f0dbec", NtPathName=0x755f838, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8110 [0176.871] FlushFileBuffers (hFile=0x1c08) returned 1 [0177.710] CloseHandle (hObject=0x1c08) returned 1 [0182.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406ab0 [0182.506] wcscpy (in: _Dest=0x8406ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0182.506] wcscat (in: _Dest=0x8406ab0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt" [0182.506] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\f0dbec-readme.txt")) returned 0xffffffff [0182.700] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1058 [0183.206] WriteFile (in: hFile=0x1058, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x755f85c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x755f85c*=0x70c, lpOverlapped=0x0) returned 1 [0183.209] CloseHandle (hObject=0x1058) returned 1 [0183.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ab0) returned 1 [0183.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 Thread: id = 4248 os_tid = 0x1918 [0172.960] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html")) returned 0x2020 [0173.333] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html", dwFileAttributes=0x20) returned 1 [0177.165] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b7c [0177.165] GetFileSizeEx (in: hFile=0x1b7c, lpFileSize=0x76cfcf0 | out: lpFileSize=0x76cfcf0*=92) returned 1 [0177.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0cd0 [0177.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0177.166] NtQuerySystemTime (in: CurrentTime=0x76cfc78 | out: CurrentTime=0x76cfc78*=132471540452220000) returned 0x0 [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x470ec998 [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x6eb7290f [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x51b54aff [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x2aebc65d [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x3d9687e [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x7910728e [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x19cf198a [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x34c0b9c0 [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x489a848d [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x7fc9414a [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x3e846e3a [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x49a973d0 [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x407c011 [0177.166] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x5a0f5885 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x6d3075f6 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x5e165c04 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x2a641fa5 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0xc5ecf6c [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x16cf4597 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0xf5d30a [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x2469d022 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x62e13cc0 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x271f6456 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x18f47075 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x656d1b22 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x776498b0 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x2a641fa5 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x4e3d322d [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x26b8113b [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x517b2a0c [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x19636c38 [0177.167] RtlRandomEx (in: Seed=0x76cfc70 | out: Seed=0x76cfc70) returned 0x7c13b00e [0177.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0177.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0177.232] ReadFile (in: hFile=0x1b7c, lpBuffer=0x80a9478, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0x76cfc6c, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0x76cfc6c*=0x5c, lpOverlapped=0x0) returned 1 [0181.868] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.868] WriteFile (in: hFile=0x1b7c, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x76cfc70, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0x76cfc70*=0x5c, lpOverlapped=0x0) returned 1 [0182.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42060 [0182.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420d8 [0182.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420d8) returned 1 [0182.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0182.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0182.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 [0182.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4f50) returned 1 [0182.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420d8 [0182.380] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.380] WriteFile (in: hFile=0x1b7c, lpBuffer=0x8405a48*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x76cfce4, lpOverlapped=0x0 | out: lpBuffer=0x8405a48*, lpNumberOfBytesWritten=0x76cfce4*=0x104, lpOverlapped=0x0) returned 1 [0182.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405a48) returned 1 [0182.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42150) returned 1 [0182.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421c8) returned 1 [0182.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420d8) returned 1 [0182.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42060) returned 1 [0182.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0cd0) returned 1 [0182.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0182.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0182.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x8405a48 [0182.568] wcscpy (in: _Dest=0x8405a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" [0182.568] wcscat (in: _Dest=0x8405a48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html.f0dbec" [0182.568] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html.f0dbec", NtPathName=0x76cfc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a1170 [0183.001] FlushFileBuffers (hFile=0x1b7c) returned 1 [0183.013] CloseHandle (hObject=0x1b7c) returned 1 [0183.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8405a48 [0183.026] wcscpy (in: _Dest=0x8405a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0183.026] wcscat (in: _Dest=0x8405a48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt" [0183.026] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\f0dbec-readme.txt")) returned 0x2020 [0183.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405a48) returned 1 [0183.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef55a0) returned 1 Thread: id = 4249 os_tid = 0x191c [0172.963] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js")) returned 0x2020 [0173.333] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js", dwFileAttributes=0x20) returned 1 [0177.232] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b78 [0177.233] GetFileSizeEx (in: hFile=0x1b78, lpFileSize=0x455f910 | out: lpFileSize=0x455f910*=79) returned 1 [0177.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0177.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0177.233] NtQuerySystemTime (in: CurrentTime=0x455f898 | out: CurrentTime=0x455f898*=132471540452688000) returned 0x0 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x3a7697f6 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x1aed4353 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x25db13c0 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x4a72f03c [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x130a9413 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x470ec998 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x1449394c [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x5a8b869c [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x4c038fe5 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x318dcaa6 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x265a1fde [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x4f2b40ec [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0xa01e3a4 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x37747e91 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x38d100e6 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x37747e91 [0177.233] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x4f5c624 [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x626d876e [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x3ccfa48e [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x4938094a [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x26a3363f [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x1cb12310 [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x3fcaf1b2 [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x457cfbe0 [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x7910728e [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x6690ac19 [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x371f1ca6 [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x33a6b89 [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x7d3f3bd6 [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x8ead6ee [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x7f16ed8e [0177.234] RtlRandomEx (in: Seed=0x455f890 | out: Seed=0x455f890) returned 0x5904acf5 [0177.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b0c88 [0177.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0177.244] ReadFile (in: hFile=0x1b78, lpBuffer=0x80b0c88, nNumberOfBytesToRead=0x4f, lpNumberOfBytesRead=0x455f88c, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesRead=0x455f88c*=0x4f, lpOverlapped=0x0) returned 1 [0181.902] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.902] WriteFile (in: hFile=0x1b78, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0x455f890, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0x455f890*=0x4f, lpOverlapped=0x0) returned 1 [0183.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0c80 [0183.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1040 [0183.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0183.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0183.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0183.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 [0183.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4608) returned 1 [0183.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1040 [0183.423] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.423] WriteFile (in: hFile=0x1b78, lpBuffer=0x8322400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x455f904, lpOverlapped=0x0 | out: lpBuffer=0x8322400*, lpNumberOfBytesWritten=0x455f904*=0x100, lpOverlapped=0x0) returned 1 [0183.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322400) returned 1 [0183.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0183.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0183.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0183.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0183.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0183.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0183.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0183.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300dc90 [0183.426] wcscpy (in: _Dest=0x300dc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" [0183.426] wcscat (in: _Dest=0x300dc90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js.f0dbec" [0183.426] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js.f0dbec", NtPathName=0x455f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8401838 [0183.430] FlushFileBuffers (hFile=0x1b78) returned 1 [0183.509] CloseHandle (hObject=0x1b78) returned 1 [0183.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x300dc90 [0183.511] wcscpy (in: _Dest=0x300dc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0183.511] wcscat (in: _Dest=0x300dc90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt" [0183.511] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\f0dbec-readme.txt")) returned 0x2020 [0183.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0183.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ac8) returned 1 Thread: id = 4250 os_tid = 0x1920 [0172.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd028 [0172.964] wcscpy (in: _Dest=0x30bd028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0172.965] wcscat (in: _Dest=0x30bd028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" [0172.965] wcscat (in: _Dest=0x30bd028, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*" [0172.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f870 [0172.965] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7baaa20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7baf840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0172.965] wcscmp (_String1=".", _String2=".") returned 0 [0172.965] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7baaa20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7baf840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.965] wcscmp (_String1="..", _String2=".") returned 1 [0172.965] wcscmp (_String1="..", _String2="..") returned 0 [0172.965] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7baf840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0172.965] wcscmp (_String1="messages.json", _String2=".") returned 1 [0172.965] wcscmp (_String1="messages.json", _String2="..") returned 1 [0172.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d7f88 [0172.966] wcscpy (in: _Dest=0x81d7f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0172.966] wcscat (in: _Dest=0x81d7f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" [0172.966] wcscat (in: _Dest=0x81d7f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" [0175.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c8 [0175.346] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7baf840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.346] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0175.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f870) returned 1 [0175.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0175.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334a38) returned 1 Thread: id = 4251 os_tid = 0x1924 [0172.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd140 [0172.966] wcscpy (in: _Dest=0x30bd140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0172.966] wcscat (in: _Dest=0x30bd140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" [0172.967] wcscat (in: _Dest=0x30bd140, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*" [0172.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80917b8 [0172.967] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bbbb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bc7ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0175.216] wcscmp (_String1=".", _String2=".") returned 0 [0175.216] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bbbb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bc7ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.216] wcscmp (_String1="..", _String2=".") returned 1 [0175.216] wcscmp (_String1="..", _String2="..") returned 0 [0175.216] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bc7ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.216] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.216] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e1ae8 [0175.216] wcscpy (in: _Dest=0x81e1ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0175.216] wcscat (in: _Dest=0x81e1ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" [0175.217] wcscat (in: _Dest=0x81e1ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" [0175.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b0 [0175.668] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bc7ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.669] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0175.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80917b8) returned 1 [0175.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0175.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5180) returned 1 Thread: id = 4252 os_tid = 0x1928 [0172.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd258 [0172.976] wcscpy (in: _Dest=0x30bd258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0172.976] wcscat (in: _Dest=0x30bd258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" [0172.976] wcscat (in: _Dest=0x30bd258, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*" [0172.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ffa8 [0172.976] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bd1b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd6940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bd6940, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a98 [0175.217] wcscmp (_String1=".", _String2=".") returned 0 [0175.217] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bd1b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd6940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bd6940, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.217] wcscmp (_String1="..", _String2=".") returned 1 [0175.217] wcscmp (_String1="..", _String2="..") returned 0 [0175.217] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bd6940, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd9050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.217] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.217] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e1c10 [0175.217] wcscpy (in: _Dest=0x81e1c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0175.217] wcscat (in: _Dest=0x81e1c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" [0175.217] wcscat (in: _Dest=0x81e1c10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" [0175.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bbc [0175.670] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bd6940, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd9050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.670] FindClose (in: hFindFile=0x3f37a98 | out: hFindFile=0x3f37a98) returned 1 [0175.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ffa8) returned 1 [0175.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0175.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef57b0) returned 1 Thread: id = 4253 os_tid = 0x192c [0172.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd370 [0172.981] wcscpy (in: _Dest=0x30bd370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0172.981] wcscat (in: _Dest=0x30bd370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" [0172.981] wcscat (in: _Dest=0x30bd370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*" [0172.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80906e0 [0172.981] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7be2c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7beefe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f18 [0175.218] wcscmp (_String1=".", _String2=".") returned 0 [0175.218] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7be2c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7beefe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.218] wcscmp (_String1="..", _String2=".") returned 1 [0175.218] wcscmp (_String1="..", _String2="..") returned 0 [0175.218] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7beefe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.218] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.218] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e1d38 [0175.218] wcscpy (in: _Dest=0x81e1d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0175.218] wcscat (in: _Dest=0x81e1d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" [0175.218] wcscat (in: _Dest=0x81e1d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" [0175.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc8 [0175.672] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7beefe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.672] FindClose (in: hFindFile=0x3f37f18 | out: hFindFile=0x3f37f18) returned 1 [0175.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80906e0) returned 1 [0175.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0175.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef58b8) returned 1 Thread: id = 4254 os_tid = 0x1930 [0172.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346930 [0172.983] wcscpy (in: _Dest=0x8346930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0172.983] wcscat (in: _Dest=0x8346930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" [0172.983] wcscat (in: _Dest=0x8346930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*" [0172.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090e18 [0172.983] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bf8c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bfda40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d98 [0175.219] wcscmp (_String1=".", _String2=".") returned 0 [0175.219] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bf8c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bfda40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.219] wcscmp (_String1="..", _String2=".") returned 1 [0175.219] wcscmp (_String1="..", _String2="..") returned 0 [0175.219] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bfb330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.219] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.219] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e1e60 [0175.219] wcscpy (in: _Dest=0x81e1e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0175.219] wcscat (in: _Dest=0x81e1e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" [0175.219] wcscat (in: _Dest=0x81e1e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" [0175.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0175.675] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bfb330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.675] FindClose (in: hFindFile=0x3f37d98 | out: hFindFile=0x3f37d98) returned 1 [0175.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090e18) returned 1 [0175.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346930) returned 1 [0175.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335698) returned 1 Thread: id = 4255 os_tid = 0x1934 [0172.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346a48 [0172.984] wcscpy (in: _Dest=0x8346a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0172.984] wcscat (in: _Dest=0x8346a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" [0172.984] wcscat (in: _Dest=0x8346a48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*" [0172.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85070 [0172.984] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c04f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c0c4a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0175.220] wcscmp (_String1=".", _String2=".") returned 0 [0175.220] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c04f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c0c4a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.220] wcscmp (_String1="..", _String2=".") returned 1 [0175.220] wcscmp (_String1="..", _String2="..") returned 0 [0175.220] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c0c4a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.220] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.220] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e1f88 [0175.220] wcscpy (in: _Dest=0x81e1f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0175.220] wcscat (in: _Dest=0x81e1f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" [0175.220] wcscat (in: _Dest=0x81e1f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" [0175.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0175.677] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c0c4a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.677] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0175.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85070) returned 1 [0175.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346a48) returned 1 [0175.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83357a0) returned 1 Thread: id = 4256 os_tid = 0x1938 [0172.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346b60 [0172.996] wcscpy (in: _Dest=0x8346b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0172.996] wcscat (in: _Dest=0x8346b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" [0172.996] wcscat (in: _Dest=0x8346b60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*" [0172.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0172.996] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c1d610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c22430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38118 [0175.221] wcscmp (_String1=".", _String2=".") returned 0 [0175.221] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c1d610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c22430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.221] wcscmp (_String1="..", _String2=".") returned 1 [0175.221] wcscmp (_String1="..", _String2="..") returned 0 [0175.221] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c22430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.221] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.221] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e20b0 [0175.221] wcscpy (in: _Dest=0x81e20b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0175.221] wcscat (in: _Dest=0x81e20b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" [0175.221] wcscat (in: _Dest=0x81e20b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" [0175.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e20b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d28 [0175.679] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c22430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.679] FindClose (in: hFindFile=0x3f38118 | out: hFindFile=0x3f38118) returned 1 [0175.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0175.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346b60) returned 1 [0175.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83358a8) returned 1 Thread: id = 4257 os_tid = 0x193c [0173.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346c78 [0173.019] wcscpy (in: _Dest=0x8346c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0173.019] wcscat (in: _Dest=0x8346c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" [0173.019] wcscat (in: _Dest=0x8346c78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*" [0173.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85a10 [0173.023] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c2c070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fce340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098850 [0174.881] wcscmp (_String1=".", _String2=".") returned 0 [0174.881] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c2c070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fce340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.881] wcscmp (_String1="..", _String2=".") returned 1 [0174.881] wcscmp (_String1="..", _String2="..") returned 0 [0174.881] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fce340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0174.881] wcscmp (_String1="messages.json", _String2=".") returned 1 [0174.881] wcscmp (_String1="messages.json", _String2="..") returned 1 [0174.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d8300 [0174.882] wcscpy (in: _Dest=0x81d8300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0174.882] wcscat (in: _Dest=0x81d8300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" [0174.882] wcscat (in: _Dest=0x81d8300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" [0175.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d8300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0175.584] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fce340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.584] FindClose (in: hFindFile=0x8098850 | out: hFindFile=0x8098850) returned 1 [0175.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85a10) returned 1 [0175.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346c78) returned 1 [0175.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83359b0) returned 1 Thread: id = 4258 os_tid = 0x1940 [0173.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346d90 [0173.024] wcscpy (in: _Dest=0x8346d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0173.024] wcscat (in: _Dest=0x8346d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" [0173.024] wcscat (in: _Dest=0x8346d90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*" [0173.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0173.024] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7fda690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fe69e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c18 [0175.210] wcscmp (_String1=".", _String2=".") returned 0 [0175.210] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7fda690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fe69e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.210] wcscmp (_String1="..", _String2=".") returned 1 [0175.210] wcscmp (_String1="..", _String2="..") returned 0 [0175.210] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fe69e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.210] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.210] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d9208 [0175.210] wcscpy (in: _Dest=0x81d9208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0175.210] wcscat (in: _Dest=0x81d9208, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" [0175.211] wcscat (in: _Dest=0x81d9208, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" [0178.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0178.129] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fe69e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.129] FindClose (in: hFindFile=0x3f37c18 | out: hFindFile=0x3f37c18) returned 1 [0178.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0178.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346d90) returned 1 [0178.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335ab8) returned 1 Thread: id = 4259 os_tid = 0x1944 [0173.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346ea8 [0173.025] wcscpy (in: _Dest=0x8346ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0173.025] wcscat (in: _Dest=0x8346ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" [0173.025] wcscat (in: _Dest=0x8346ea8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*" [0173.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0173.025] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ff2d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7ffa260, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f375d8 [0175.209] wcscmp (_String1=".", _String2=".") returned 0 [0175.209] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ff2d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7ffa260, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.209] wcscmp (_String1="..", _String2=".") returned 1 [0175.209] wcscmp (_String1="..", _String2="..") returned 0 [0175.209] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7ffa260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.209] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.209] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d90e0 [0175.210] wcscpy (in: _Dest=0x81d90e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0175.210] wcscat (in: _Dest=0x81d90e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" [0175.210] wcscat (in: _Dest=0x81d90e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" [0178.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d90e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0178.126] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7ffa260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.127] FindClose (in: hFindFile=0x3f375d8 | out: hFindFile=0x3f375d8) returned 1 [0178.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0178.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346ea8) returned 1 [0178.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335bc0) returned 1 Thread: id = 4260 os_tid = 0x1948 [0173.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8346fc0 [0173.026] wcscpy (in: _Dest=0x8346fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0173.026] wcscat (in: _Dest=0x8346fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" [0173.026] wcscat (in: _Dest=0x8346fc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*" [0173.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048e50 [0173.026] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8012900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8019e30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8019e30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0175.208] wcscmp (_String1=".", _String2=".") returned 0 [0175.208] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8012900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8019e30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8019e30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.208] wcscmp (_String1="..", _String2=".") returned 1 [0175.209] wcscmp (_String1="..", _String2="..") returned 0 [0175.209] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8019e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe801c540, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.209] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.209] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d8fb8 [0175.209] wcscpy (in: _Dest=0x81d8fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0175.209] wcscat (in: _Dest=0x81d8fb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" [0175.209] wcscat (in: _Dest=0x81d8fb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" [0178.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d8fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0178.123] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8019e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe801c540, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.123] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0178.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048e50) returned 1 [0178.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346fc0) returned 1 [0178.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335cc8) returned 1 Thread: id = 4261 os_tid = 0x194c [0173.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x83470d8 [0173.030] wcscpy (in: _Dest=0x83470d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0173.030] wcscat (in: _Dest=0x83470d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" [0173.031] wcscat (in: _Dest=0x83470d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*" [0173.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0173.031] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe802afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8034be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0175.208] wcscmp (_String1=".", _String2=".") returned 0 [0175.208] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe802afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8034be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.208] wcscmp (_String1="..", _String2=".") returned 1 [0175.208] wcscmp (_String1="..", _String2="..") returned 0 [0175.208] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8034be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.208] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.208] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d8e90 [0175.208] wcscpy (in: _Dest=0x81d8e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0175.208] wcscat (in: _Dest=0x81d8e90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" [0175.208] wcscat (in: _Dest=0x81d8e90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" [0178.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d8e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0178.120] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8034be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.120] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0178.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0178.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83470d8) returned 1 [0178.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335dd0) returned 1 Thread: id = 4262 os_tid = 0x1950 [0173.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x83471f0 [0173.031] wcscpy (in: _Dest=0x83471f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0173.032] wcscat (in: _Dest=0x83471f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" [0173.032] wcscat (in: _Dest=0x83471f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*" [0173.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046f08 [0173.032] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8040f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8045d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0175.207] wcscmp (_String1=".", _String2=".") returned 0 [0175.207] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8040f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8045d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.207] wcscmp (_String1="..", _String2=".") returned 1 [0175.207] wcscmp (_String1="..", _String2="..") returned 0 [0175.207] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8045d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.207] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.207] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d8d68 [0175.207] wcscpy (in: _Dest=0x81d8d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0175.207] wcscat (in: _Dest=0x81d8d68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" [0175.207] wcscat (in: _Dest=0x81d8d68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" [0178.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0178.118] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8045d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.118] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0178.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046f08) returned 1 [0178.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83471f0) returned 1 [0178.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335ed8) returned 1 Thread: id = 4263 os_tid = 0x1954 [0173.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347308 [0173.032] wcscpy (in: _Dest=0x8347308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0173.032] wcscat (in: _Dest=0x8347308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" [0173.033] wcscat (in: _Dest=0x8347308, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*" [0173.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0173.033] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe804d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80520a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80520a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0175.206] wcscmp (_String1=".", _String2=".") returned 0 [0175.206] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe804d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80520a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80520a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.206] wcscmp (_String1="..", _String2=".") returned 1 [0175.206] wcscmp (_String1="..", _String2="..") returned 0 [0175.206] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80520a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80806d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.206] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.206] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d8c40 [0175.206] wcscpy (in: _Dest=0x81d8c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0175.206] wcscat (in: _Dest=0x81d8c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" [0175.206] wcscat (in: _Dest=0x81d8c40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" [0178.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d8c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0178.115] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80520a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80806d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.115] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0178.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0178.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347308) returned 1 [0178.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335fe0) returned 1 Thread: id = 4264 os_tid = 0x1958 [0173.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347420 [0173.033] wcscpy (in: _Dest=0x8347420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0173.033] wcscat (in: _Dest=0x8347420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" [0173.033] wcscat (in: _Dest=0x8347420, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*" [0173.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0173.034] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe809b480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a02a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80a02a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37998 [0175.205] wcscmp (_String1=".", _String2=".") returned 0 [0175.205] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe809b480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a02a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80a02a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.205] wcscmp (_String1="..", _String2=".") returned 1 [0175.205] wcscmp (_String1="..", _String2="..") returned 0 [0175.205] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80a02a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a29b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.205] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.205] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d8b18 [0175.205] wcscpy (in: _Dest=0x81d8b18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0175.205] wcscat (in: _Dest=0x81d8b18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" [0175.205] wcscat (in: _Dest=0x81d8b18, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" [0178.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d8b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c7c [0178.113] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80a02a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a29b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.113] FindClose (in: hFindFile=0x3f37998 | out: hFindFile=0x3f37998) returned 1 [0178.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0178.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347420) returned 1 [0178.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83360e8) returned 1 Thread: id = 4265 os_tid = 0x195c [0173.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347538 [0173.034] wcscpy (in: _Dest=0x8347538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0173.034] wcscat (in: _Dest=0x8347538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" [0173.034] wcscat (in: _Dest=0x8347538, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*" [0173.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80467d0 [0173.034] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80b3b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80bb050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0175.204] wcscmp (_String1=".", _String2=".") returned 0 [0175.204] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80b3b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80bb050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.204] wcscmp (_String1="..", _String2=".") returned 1 [0175.204] wcscmp (_String1="..", _String2="..") returned 0 [0175.204] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80bb050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.204] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.204] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d89f0 [0175.205] wcscpy (in: _Dest=0x81d89f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0175.205] wcscat (in: _Dest=0x81d89f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" [0175.205] wcscat (in: _Dest=0x81d89f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" [0178.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d89f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b90 [0178.110] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80bb050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.110] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0178.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80467d0) returned 1 [0178.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347538) returned 1 [0178.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83361f0) returned 1 Thread: id = 4266 os_tid = 0x1960 [0173.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347650 [0173.035] wcscpy (in: _Dest=0x8347650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0173.035] wcscat (in: _Dest=0x8347650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" [0173.035] wcscat (in: _Dest=0x8347650, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*" [0173.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049cc0 [0173.035] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80c73a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d36f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80d36f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0175.203] wcscmp (_String1=".", _String2=".") returned 0 [0175.203] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80c73a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d36f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80d36f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.203] wcscmp (_String1="..", _String2=".") returned 1 [0175.203] wcscmp (_String1="..", _String2="..") returned 0 [0175.203] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80d36f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d5e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.204] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.204] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d88c8 [0175.204] wcscpy (in: _Dest=0x81d88c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0175.204] wcscat (in: _Dest=0x81d88c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" [0175.204] wcscat (in: _Dest=0x81d88c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" [0178.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d88c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0178.107] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80d36f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d5e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.107] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0178.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049cc0) returned 1 [0178.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347650) returned 1 [0178.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83362f8) returned 1 Thread: id = 4267 os_tid = 0x1964 [0173.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347768 [0173.036] wcscpy (in: _Dest=0x8347768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0173.036] wcscat (in: _Dest=0x8347768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" [0173.036] wcscat (in: _Dest=0x8347768, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*" [0173.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff060 [0173.036] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80e2150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80e6f70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b18 [0175.202] wcscmp (_String1=".", _String2=".") returned 0 [0175.202] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80e2150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80e6f70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.202] wcscmp (_String1="..", _String2=".") returned 1 [0175.203] wcscmp (_String1="..", _String2="..") returned 0 [0175.203] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80e6f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.203] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.203] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d87a0 [0175.203] wcscpy (in: _Dest=0x81d87a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0175.203] wcscat (in: _Dest=0x81d87a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" [0175.203] wcscat (in: _Dest=0x81d87a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" [0178.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d87a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a28 [0178.905] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80e6f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.905] FindClose (in: hFindFile=0x3f37b18 | out: hFindFile=0x3f37b18) returned 1 [0178.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff060) returned 1 [0178.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347768) returned 1 [0178.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336400) returned 1 Thread: id = 4268 os_tid = 0x1968 [0173.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347880 [0173.037] wcscpy (in: _Dest=0x8347880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0173.037] wcscat (in: _Dest=0x8347880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" [0173.037] wcscat (in: _Dest=0x8347880, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*" [0173.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101948 [0173.037] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80f32c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fa7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80fa7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f379d8 [0175.201] wcscmp (_String1=".", _String2=".") returned 0 [0175.202] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80f32c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fa7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80fa7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.202] wcscmp (_String1="..", _String2=".") returned 1 [0175.202] wcscmp (_String1="..", _String2="..") returned 0 [0175.202] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80fa7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fcf00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.202] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.202] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d8678 [0175.202] wcscpy (in: _Dest=0x81d8678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0175.202] wcscat (in: _Dest=0x81d8678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" [0175.202] wcscat (in: _Dest=0x81d8678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" [0178.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d8678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0178.902] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80fa7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fcf00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.903] FindClose (in: hFindFile=0x3f379d8 | out: hFindFile=0x3f379d8) returned 1 [0178.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101948) returned 1 [0178.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347880) returned 1 [0178.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336508) returned 1 Thread: id = 4269 os_tid = 0x196c [0173.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347998 [0173.038] wcscpy (in: _Dest=0x8347998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0173.038] wcscat (in: _Dest=0x8347998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" [0173.038] wcscat (in: _Dest=0x8347998, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*" [0173.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0173.038] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8106b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe810b960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0175.160] wcscmp (_String1=".", _String2=".") returned 0 [0175.160] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8106b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe810b960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.160] wcscmp (_String1="..", _String2=".") returned 1 [0175.160] wcscmp (_String1="..", _String2="..") returned 0 [0175.160] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe810b960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.160] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.160] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d8428 [0175.160] wcscpy (in: _Dest=0x81d8428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0175.160] wcscat (in: _Dest=0x81d8428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" [0175.160] wcscat (in: _Dest=0x81d8428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" [0178.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d8428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0178.897] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe810b960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.897] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0178.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0178.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347998) returned 1 [0178.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336610) returned 1 Thread: id = 4270 os_tid = 0x1970 [0173.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347ab0 [0173.039] wcscpy (in: _Dest=0x8347ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0173.039] wcscat (in: _Dest=0x8347ab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" [0173.039] wcscat (in: _Dest=0x8347ab0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*" [0173.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffc68 [0173.039] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8112e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8117cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0175.215] wcscmp (_String1=".", _String2=".") returned 0 [0175.215] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8112e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8117cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.215] wcscmp (_String1="..", _String2=".") returned 1 [0175.215] wcscmp (_String1="..", _String2="..") returned 0 [0175.215] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8117cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.215] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.215] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e19c0 [0175.216] wcscpy (in: _Dest=0x81e19c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0175.216] wcscat (in: _Dest=0x81e19c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" [0175.216] wcscat (in: _Dest=0x81e19c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" [0175.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e19c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b98 [0175.667] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8117cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.667] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0175.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffc68) returned 1 [0175.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347ab0) returned 1 [0175.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336718) returned 1 Thread: id = 4271 os_tid = 0x1974 [0173.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347bc8 [0173.040] wcscpy (in: _Dest=0x8347bc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0173.040] wcscat (in: _Dest=0x8347bc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" [0173.040] wcscat (in: _Dest=0x8347bc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*" [0173.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3caf0 [0173.040] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8126710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe812b530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe812b530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e18 [0175.214] wcscmp (_String1=".", _String2=".") returned 0 [0175.214] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8126710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe812b530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe812b530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.214] wcscmp (_String1="..", _String2=".") returned 1 [0175.214] wcscmp (_String1="..", _String2="..") returned 0 [0175.214] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe812b530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8130350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.215] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.215] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e1898 [0175.215] wcscpy (in: _Dest=0x81e1898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0175.215] wcscat (in: _Dest=0x81e1898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" [0175.215] wcscat (in: _Dest=0x81e1898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" [0175.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2798 [0175.665] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe812b530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8130350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.665] FindClose (in: hFindFile=0x3f37e18 | out: hFindFile=0x3f37e18) returned 1 [0175.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3caf0) returned 1 [0175.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347bc8) returned 1 [0175.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333dd0) returned 1 Thread: id = 4272 os_tid = 0x1978 [0173.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347ce0 [0173.040] wcscpy (in: _Dest=0x8347ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0173.040] wcscat (in: _Dest=0x8347ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" [0173.040] wcscat (in: _Dest=0x8347ce0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*" [0173.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0173.040] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8232ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8235700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f382d8 [0175.213] wcscmp (_String1=".", _String2=".") returned 0 [0175.213] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8232ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8235700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.214] wcscmp (_String1="..", _String2=".") returned 1 [0175.214] wcscmp (_String1="..", _String2="..") returned 0 [0175.214] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8235700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.214] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.214] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e1770 [0175.214] wcscpy (in: _Dest=0x81e1770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0175.214] wcscat (in: _Dest=0x81e1770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" [0175.214] wcscat (in: _Dest=0x81e1770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" [0175.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b8 [0175.663] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8235700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.663] FindClose (in: hFindFile=0x3f382d8 | out: hFindFile=0x3f382d8) returned 1 [0175.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0175.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347ce0) returned 1 [0175.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80547e0) returned 1 Thread: id = 4273 os_tid = 0x197c [0173.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347df8 [0173.041] wcscpy (in: _Dest=0x8347df8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0173.041] wcscat (in: _Dest=0x8347df8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" [0173.041] wcscat (in: _Dest=0x8347df8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*" [0173.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0173.041] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8241a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8246870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0175.213] wcscmp (_String1=".", _String2=".") returned 0 [0175.213] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8241a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8246870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.213] wcscmp (_String1="..", _String2=".") returned 1 [0175.213] wcscmp (_String1="..", _String2="..") returned 0 [0175.213] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8246870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3147db00, ftLastWriteTime.dwHighDateTime=0x1d0f453, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.213] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.213] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e1648 [0175.213] wcscpy (in: _Dest=0x81e1648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0175.213] wcscat (in: _Dest=0x81e1648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" [0175.213] wcscat (in: _Dest=0x81e1648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" [0175.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e1648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac0 [0175.661] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8246870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3147db00, ftLastWriteTime.dwHighDateTime=0x1d0f453, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.661] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0175.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0175.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347df8) returned 1 [0175.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80548e8) returned 1 Thread: id = 4274 os_tid = 0x1980 [0173.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347f10 [0173.042] wcscpy (in: _Dest=0x8347f10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0173.042] wcscat (in: _Dest=0x8347f10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" [0173.042] wcscat (in: _Dest=0x8347f10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*" [0173.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a390 [0173.042] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8288720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe828ae30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38398 [0175.212] wcscmp (_String1=".", _String2=".") returned 0 [0175.212] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8288720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe828ae30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.212] wcscmp (_String1="..", _String2=".") returned 1 [0175.212] wcscmp (_String1="..", _String2="..") returned 0 [0175.212] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe828ae30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.212] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.212] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81d9458 [0175.212] wcscpy (in: _Dest=0x81d9458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0175.212] wcscat (in: _Dest=0x81d9458, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" [0175.212] wcscat (in: _Dest=0x81d9458, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" [0175.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0175.659] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe828ae30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.659] FindClose (in: hFindFile=0x3f38398 | out: hFindFile=0x3f38398) returned 1 [0175.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a390) returned 1 [0175.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347f10) returned 1 [0175.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80549f0) returned 1 Thread: id = 4275 os_tid = 0x1984 [0173.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8348028 [0173.043] wcscpy (in: _Dest=0x8348028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0173.043] wcscat (in: _Dest=0x8348028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" [0173.043] wcscat (in: _Dest=0x8348028, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*" [0173.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805dfe0 [0173.043] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8297180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe829bfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0175.211] wcscmp (_String1=".", _String2=".") returned 0 [0175.211] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8297180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe829bfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.211] wcscmp (_String1="..", _String2=".") returned 1 [0175.211] wcscmp (_String1="..", _String2="..") returned 0 [0175.211] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe829bfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.211] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.211] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d9330 [0175.211] wcscpy (in: _Dest=0x81d9330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0175.211] wcscat (in: _Dest=0x81d9330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" [0175.211] wcscat (in: _Dest=0x81d9330, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" [0175.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0175.656] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe829bfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.657] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0175.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805dfe0) returned 1 [0175.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348028) returned 1 [0175.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 Thread: id = 4276 os_tid = 0x1988 [0173.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8348370 [0173.368] wcscpy (in: _Dest=0x8348370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0173.368] wcscat (in: _Dest=0x8348370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" [0173.368] wcscat (in: _Dest=0x8348370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*" [0173.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e248 [0173.368] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82a34d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a5be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82a5be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37918 [0175.200] wcscmp (_String1=".", _String2=".") returned 0 [0175.201] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82a34d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a5be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82a5be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.201] wcscmp (_String1="..", _String2=".") returned 1 [0175.201] wcscmp (_String1="..", _String2="..") returned 0 [0175.201] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82a5be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a82f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.201] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.201] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8550 [0175.201] wcscpy (in: _Dest=0x81d8550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0175.201] wcscat (in: _Dest=0x81d8550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" [0175.201] wcscat (in: _Dest=0x81d8550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" [0178.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d8550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0178.900] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82a5be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a82f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.900] FindClose (in: hFindFile=0x3f37918 | out: hFindFile=0x3f37918) returned 1 [0178.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e248) returned 1 [0178.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348370) returned 1 [0178.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 Thread: id = 4277 os_tid = 0x198c [0173.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3df89e8 [0173.369] wcscpy (in: _Dest=0x3df89e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" [0173.369] wcscat (in: _Dest=0x3df89e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\" [0173.369] wcscat (in: _Dest=0x3df89e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*" [0173.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e4b0 [0173.369] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4302a4d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0173.369] wcscmp (_String1=".", _String2=".") returned 0 [0173.369] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4302a4d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.369] wcscmp (_String1="..", _String2=".") returned 1 [0173.369] wcscmp (_String1="..", _String2="..") returned 0 [0173.369] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56499600, ftCreationTime.dwHighDateTime=0x1c30843, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56499600, ftLastWriteTime.dwHighDateTime=0x1c30843, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 1 [0173.369] wcscmp (_String1="SOLVSAMP.XLS", _String2=".") returned 1 [0173.370] wcscmp (_String1="SOLVSAMP.XLS", _String2="..") returned 1 [0173.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x81bf668 [0173.370] wcscpy (in: _Dest=0x81bf668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" [0173.370] wcscat (in: _Dest=0x81bf668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\" [0173.370] wcscat (in: _Dest=0x81bf668, _Source="SOLVSAMP.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" [0176.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0176.105] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56499600, ftCreationTime.dwHighDateTime=0x1c30843, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56499600, ftLastWriteTime.dwHighDateTime=0x1c30843, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 0 [0176.105] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0176.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e4b0) returned 1 [0176.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df89e8) returned 1 [0176.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a188) returned 1 Thread: id = 4278 os_tid = 0x1990 [0173.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf")) returned 0x20 [0173.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf", dwFileAttributes=0x20) returned 0 [0173.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.371] GetLastError () returned 0x5 [0173.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf", dwFileAttributes=0x20) returned 0 [0173.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24640) returned 1 Thread: id = 4279 os_tid = 0x1994 [0173.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml")) returned 0x20 [0175.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", dwFileAttributes=0x20) returned 0 [0175.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.438] GetLastError () returned 0x5 [0175.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", dwFileAttributes=0x20) returned 0 [0175.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 Thread: id = 4280 os_tid = 0x1998 [0173.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml")) returned 0x20 [0175.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML", dwFileAttributes=0x20) returned 0 [0175.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.436] GetLastError () returned 0x5 [0175.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML", dwFileAttributes=0x20) returned 0 [0175.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 Thread: id = 4281 os_tid = 0x199c [0173.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng")) returned 0x20 [0175.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG", dwFileAttributes=0x20) returned 0 [0175.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.439] GetLastError () returned 0x5 [0175.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG", dwFileAttributes=0x20) returned 0 [0175.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 Thread: id = 4282 os_tid = 0x19a0 [0173.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp")) returned 0x20 [0175.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", dwFileAttributes=0x20) returned 0 [0175.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.228] GetLastError () returned 0x5 [0175.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", dwFileAttributes=0x20) returned 0 [0175.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e249c0) returned 1 Thread: id = 4283 os_tid = 0x19a4 [0173.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f327f0 [0173.388] wcscpy (in: _Dest=0x3f327f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" [0173.388] wcscat (in: _Dest=0x3f327f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\" [0173.388] wcscat (in: _Dest=0x3f327f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*" [0173.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e718 [0173.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0175.133] wcscmp (_String1=".", _String2=".") returned 0 [0175.133] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.133] wcscmp (_String1="..", _String2=".") returned 1 [0175.133] wcscmp (_String1="..", _String2="..") returned 0 [0175.133] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0175.133] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0175.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e718) returned 1 [0175.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0175.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39858) returned 1 Thread: id = 4284 os_tid = 0x19a8 [0173.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif")) returned 0x20 [0187.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF", dwFileAttributes=0x20) returned 0 [0187.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.541] GetLastError () returned 0x5 [0187.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF", dwFileAttributes=0x20) returned 0 [0187.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ca00) returned 1 Thread: id = 4285 os_tid = 0x19ac [0173.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif")) returned 0x20 [0187.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF", dwFileAttributes=0x20) returned 0 [0187.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.542] GetLastError () returned 0x5 [0187.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF", dwFileAttributes=0x20) returned 0 [0187.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c4a8) returned 1 Thread: id = 4286 os_tid = 0x19b0 [0173.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif")) returned 0x20 [0187.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF", dwFileAttributes=0x20) returned 0 [0187.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.544] GetLastError () returned 0x5 [0187.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF", dwFileAttributes=0x20) returned 0 [0187.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d710) returned 1 Thread: id = 4287 os_tid = 0x19b4 [0173.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif")) returned 0x20 [0187.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF", dwFileAttributes=0x20) returned 0 [0187.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.545] GetLastError () returned 0x5 [0187.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF", dwFileAttributes=0x20) returned 0 [0187.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3daa0) returned 1 Thread: id = 4288 os_tid = 0x19b8 [0173.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif")) returned 0x20 [0184.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF", dwFileAttributes=0x20) returned 0 [0184.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.247] GetLastError () returned 0x5 [0187.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF", dwFileAttributes=0x20) returned 0 [0187.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bf50) returned 1 Thread: id = 4289 os_tid = 0x19bc [0173.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif")) returned 0x20 [0187.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF", dwFileAttributes=0x20) returned 0 [0187.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.582] GetLastError () returned 0x5 [0187.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF", dwFileAttributes=0x20) returned 0 [0187.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d2e8) returned 1 Thread: id = 4290 os_tid = 0x19c0 [0173.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif")) returned 0x20 [0187.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF", dwFileAttributes=0x20) returned 0 [0187.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.584] GetLastError () returned 0x5 [0187.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF", dwFileAttributes=0x20) returned 0 [0187.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cf58) returned 1 Thread: id = 4291 os_tid = 0x19c4 [0173.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif")) returned 0x20 [0187.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF", dwFileAttributes=0x20) returned 0 [0187.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.586] GetLastError () returned 0x5 [0187.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF", dwFileAttributes=0x20) returned 0 [0187.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d088) returned 1 Thread: id = 4292 os_tid = 0x19c8 [0173.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif")) returned 0x20 [0186.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF", dwFileAttributes=0x20) returned 0 [0187.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.497] GetLastError () returned 0x5 [0187.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF", dwFileAttributes=0x20) returned 0 [0187.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d548) returned 1 Thread: id = 4293 os_tid = 0x19cc [0173.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif")) returned 0x20 [0187.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF", dwFileAttributes=0x20) returned 0 [0187.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.547] GetLastError () returned 0x5 [0187.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF", dwFileAttributes=0x20) returned 0 [0187.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d5e0) returned 1 Thread: id = 4294 os_tid = 0x19d0 [0173.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif")) returned 0x20 [0187.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF", dwFileAttributes=0x20) returned 0 [0187.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.480] GetLastError () returned 0x5 [0187.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF", dwFileAttributes=0x20) returned 0 [0187.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d418) returned 1 Thread: id = 4295 os_tid = 0x19d8 [0173.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif")) returned 0x20 [0187.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF", dwFileAttributes=0x20) returned 0 [0187.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.500] GetLastError () returned 0x5 [0187.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF", dwFileAttributes=0x20) returned 0 [0187.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cbc8) returned 1 Thread: id = 4296 os_tid = 0x19dc [0173.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif")) returned 0x20 [0187.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF", dwFileAttributes=0x20) returned 0 [0187.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.549] GetLastError () returned 0x5 [0187.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF", dwFileAttributes=0x20) returned 0 [0187.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c378) returned 1 Thread: id = 4297 os_tid = 0x19e0 [0173.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif")) returned 0x20 [0187.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF", dwFileAttributes=0x20) returned 0 [0187.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.557] GetLastError () returned 0x5 [0187.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF", dwFileAttributes=0x20) returned 0 [0187.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dc68) returned 1 Thread: id = 4298 os_tid = 0x19e4 [0173.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif")) returned 0x20 [0186.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF", dwFileAttributes=0x20) returned 0 [0187.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.501] GetLastError () returned 0x5 [0187.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF", dwFileAttributes=0x20) returned 0 [0187.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c2e0) returned 1 Thread: id = 4299 os_tid = 0x19e8 [0173.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif")) returned 0x20 [0186.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF", dwFileAttributes=0x20) returned 0 [0187.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.509] GetLastError () returned 0x5 [0187.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF", dwFileAttributes=0x20) returned 0 [0187.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c410) returned 1 Thread: id = 4300 os_tid = 0x19ec [0173.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif")) returned 0x20 [0186.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF", dwFileAttributes=0x20) returned 0 [0187.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.136] GetLastError () returned 0x5 [0187.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF", dwFileAttributes=0x20) returned 0 [0187.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dd00) returned 1 Thread: id = 4301 os_tid = 0x19f0 [0173.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif")) returned 0x20 [0186.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF", dwFileAttributes=0x20) returned 0 [0187.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.506] GetLastError () returned 0x5 [0187.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF", dwFileAttributes=0x20) returned 0 [0187.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db38) returned 1 Thread: id = 4302 os_tid = 0x19f4 [0173.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif")) returned 0x20 [0186.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF", dwFileAttributes=0x20) returned 0 [0187.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.491] GetLastError () returned 0x5 [0187.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF", dwFileAttributes=0x20) returned 0 [0187.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cff0) returned 1 Thread: id = 4303 os_tid = 0x19f8 [0173.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif")) returned 0x20 [0185.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF", dwFileAttributes=0x20) returned 0 [0185.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.245] GetLastError () returned 0x5 [0187.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF", dwFileAttributes=0x20) returned 0 [0187.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c708) returned 1 Thread: id = 4304 os_tid = 0x19fc [0173.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif")) returned 0x20 [0187.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF", dwFileAttributes=0x20) returned 0 [0187.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.580] GetLastError () returned 0x5 [0187.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF", dwFileAttributes=0x20) returned 0 [0187.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd90) returned 1 Thread: id = 4305 os_tid = 0x1a00 [0173.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif")) returned 0x20 [0184.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF", dwFileAttributes=0x20) returned 0 [0184.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.762] GetLastError () returned 0x5 [0185.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF", dwFileAttributes=0x20) returned 0 [0185.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d840) returned 1 Thread: id = 4306 os_tid = 0x1a04 [0173.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif")) returned 0x20 [0187.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF", dwFileAttributes=0x20) returned 0 [0187.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.505] GetLastError () returned 0x5 [0187.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF", dwFileAttributes=0x20) returned 0 [0187.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d8d8) returned 1 Thread: id = 4307 os_tid = 0x1a08 [0173.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif")) returned 0x20 [0187.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF", dwFileAttributes=0x20) returned 0 [0187.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.503] GetLastError () returned 0x5 [0187.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF", dwFileAttributes=0x20) returned 0 [0187.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d970) returned 1 Thread: id = 4308 os_tid = 0x1a0c [0173.675] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json")) returned 0x2020 [0173.675] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", dwFileAttributes=0x20) returned 1 [0176.320] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d88 [0176.321] GetFileSizeEx (in: hFile=0x1d88, lpFileSize=0x8e7f908 | out: lpFileSize=0x8e7f908*=243) returned 1 [0176.321] SetFilePointerEx (in: hFile=0x1d88, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.321] ReadFile (in: hFile=0x1d88, lpBuffer=0x8e7f914, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e7f8f0, lpOverlapped=0x0 | out: lpBuffer=0x8e7f914*, lpNumberOfBytesRead=0x8e7f8f0*=0x4, lpOverlapped=0x0) returned 1 [0176.322] SetFilePointerEx (in: hFile=0x1d88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b838 [0176.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0176.323] NtQuerySystemTime (in: CurrentTime=0x8e7f890 | out: CurrentTime=0x8e7f890*=132471540444108000) returned 0x0 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x161ce2f7 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x5e6032f0 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x15f33cbf [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x1c7b6322 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x3901c389 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x7c8f44cf [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x5d3c6ad6 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x4e828579 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x43ab5d61 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x9d6ee0f [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x11c0dada [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x1c5dcf27 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x3df36ee8 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x1c22625f [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x71b7133e [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x2e4917c5 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x58021d66 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x773bc0 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x1d1545ee [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x27f19008 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0xeda2fe7 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x6fa3ae4a [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x626e6f8d [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0xd0fd09f [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x68186238 [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x16e7a2fd [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x4a767acc [0176.323] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x256c6eef [0176.324] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x29334aca [0176.324] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x1f2217f5 [0176.324] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x6e08eb03 [0176.324] RtlRandomEx (in: Seed=0x8e7f888 | out: Seed=0x8e7f888) returned 0x610ee8ee [0176.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816bca8 [0176.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814a060 [0176.332] ReadFile (in: hFile=0x1d88, lpBuffer=0x816bca8, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0x8e7f884, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesRead=0x8e7f884*=0xf3, lpOverlapped=0x0) returned 1 [0176.332] SetFilePointerEx (in: hFile=0x1d88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.332] WriteFile (in: hFile=0x1d88, lpBuffer=0x814a060*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x8e7f888, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesWritten=0x8e7f888*=0xf3, lpOverlapped=0x0) returned 1 [0177.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304170 [0177.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3043f0 [0177.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3043f0) returned 1 [0177.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0177.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0177.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0177.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83097c0) returned 1 [0177.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e20 [0177.334] SetFilePointerEx (in: hFile=0x1d88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.334] WriteFile (in: hFile=0x1d88, lpBuffer=0x30bd028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8e7f8fc, lpOverlapped=0x0 | out: lpBuffer=0x30bd028*, lpNumberOfBytesWritten=0x8e7f8fc*=0x10c, lpOverlapped=0x0) returned 1 [0182.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d60) returned 1 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3043f0) returned 1 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e20) returned 1 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304170) returned 1 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b838) returned 1 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4acd0) returned 1 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ac80) returned 1 [0182.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a0678 [0182.523] wcscpy (in: _Dest=0x148a0678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" [0182.523] wcscat (in: _Dest=0x148a0678, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.f0dbec" [0182.523] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.f0dbec", NtPathName=0x8e7f880, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9928 [0182.722] FlushFileBuffers (hFile=0x1d88) returned 1 [0182.735] CloseHandle (hObject=0x1d88) returned 1 [0182.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a1038 [0182.840] wcscpy (in: _Dest=0x148a1038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" [0182.840] wcscat (in: _Dest=0x148a1038, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\F0DBEC-Readme.txt" [0182.840] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\f0dbec-readme.txt")) returned 0xffffffff [0182.840] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b50 [0182.935] WriteFile (in: hFile=0x1b50, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8e7f8a4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8e7f8a4*=0x70c, lpOverlapped=0x0) returned 1 [0183.121] CloseHandle (hObject=0x1b50) returned 1 [0183.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1038) returned 1 [0183.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d08f8) returned 1 Thread: id = 4309 os_tid = 0x1a10 [0173.677] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json")) returned 0x2020 [0173.677] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0176.332] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d90 [0176.333] GetFileSizeEx (in: hFile=0x1d90, lpFileSize=0x8a1f8a8 | out: lpFileSize=0x8a1f8a8*=257) returned 1 [0176.333] SetFilePointerEx (in: hFile=0x1d90, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.333] ReadFile (in: hFile=0x1d90, lpBuffer=0x8a1f8b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a1f890, lpOverlapped=0x0 | out: lpBuffer=0x8a1f8b4*, lpNumberOfBytesRead=0x8a1f890*=0x4, lpOverlapped=0x0) returned 1 [0176.334] SetFilePointerEx (in: hFile=0x1d90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0176.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfe0 [0176.334] NtQuerySystemTime (in: CurrentTime=0x8a1f830 | out: CurrentTime=0x8a1f830*=132471540444264000) returned 0x0 [0176.334] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x1cf60c3 [0176.334] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x19b89c2f [0176.334] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x211ab57b [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x7c8f44cf [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x6d51475e [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x7794975b [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x161ce2f7 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x7cf9a483 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0xeda2fe7 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x110b9077 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x311d52a1 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x4b2adbe [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x53b7b4fd [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x7f03820c [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x7d2a4c69 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0xe94cf84 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x3c989593 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x291d11bf [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x71c07caa [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x1bf4c050 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x29306977 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x1e121e35 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x6647f6b8 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x63b689f6 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x3df71683 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x442f51c4 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x178d5b4d [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x79896879 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x24eaac0c [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x4a3ee0d9 [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x19850b9f [0176.335] RtlRandomEx (in: Seed=0x8a1f828 | out: Seed=0x8a1f828) returned 0x1776e814 [0176.343] ReadFile (in: hFile=0x1d90, lpBuffer=0x814dc68, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0x8a1f824, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesRead=0x8a1f824*=0x101, lpOverlapped=0x0) returned 1 [0176.343] SetFilePointerEx (in: hFile=0x1d90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.343] WriteFile (in: hFile=0x1d90, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x8a1f828, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0x8a1f828*=0x101, lpOverlapped=0x0) returned 1 [0181.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ec0 [0181.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e98 [0181.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0181.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0181.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0181.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0181.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a108) returned 1 [0181.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e693c0 [0181.786] SetFilePointerEx (in: hFile=0x1d90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.786] WriteFile (in: hFile=0x1d90, lpBuffer=0x30bd258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8a1f89c, lpOverlapped=0x0 | out: lpBuffer=0x30bd258*, lpNumberOfBytesWritten=0x8a1f89c*=0x10c, lpOverlapped=0x0) returned 1 [0182.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0182.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693f0) returned 1 [0182.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0182.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693c0) returned 1 [0182.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ec0) returned 1 [0182.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf90) returned 1 [0182.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0182.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0182.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8860 [0182.445] wcscpy (in: _Dest=0x3ef8860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" [0182.445] wcscat (in: _Dest=0x3ef8860, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.f0dbec" [0182.445] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0x8a1f820, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef8ee8 [0182.675] FlushFileBuffers (hFile=0x1d90) returned 1 [0182.685] CloseHandle (hObject=0x1d90) returned 1 [0182.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a1c68 [0182.815] wcscpy (in: _Dest=0x148a1c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" [0182.815] wcscat (in: _Dest=0x148a1c68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\F0DBEC-Readme.txt" [0182.815] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0182.815] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c10 [0182.932] WriteFile (in: hFile=0x1c10, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8a1f844, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8a1f844*=0x70c, lpOverlapped=0x0) returned 1 [0183.096] CloseHandle (hObject=0x1c10) returned 1 [0183.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1c68) returned 1 [0183.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0a20) returned 1 Thread: id = 4310 os_tid = 0x1a14 [0173.677] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0173.678] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0176.344] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d98 [0176.344] GetFileSizeEx (in: hFile=0x1d98, lpFileSize=0x9a8f7e0 | out: lpFileSize=0x9a8f7e0*=259) returned 1 [0176.344] SetFilePointerEx (in: hFile=0x1d98, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.344] ReadFile (in: hFile=0x1d98, lpBuffer=0x9a8f7ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a8f7c8, lpOverlapped=0x0 | out: lpBuffer=0x9a8f7ec*, lpNumberOfBytesRead=0x9a8f7c8*=0x4, lpOverlapped=0x0) returned 1 [0176.346] SetFilePointerEx (in: hFile=0x1d98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfe0 [0176.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49880 [0176.346] NtQuerySystemTime (in: CurrentTime=0x9a8f768 | out: CurrentTime=0x9a8f768*=132471540444420000) returned 0x0 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x63df0970 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x1b84847f [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x1dae6f0 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x405539b0 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x5c05ccbf [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x71f80a62 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x735e9cee [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x5f6b320d [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x7d76b668 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x179af43 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x6571ad0d [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x47943077 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x74a8a183 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0xb0cdcd [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x72c69d98 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x4fd124de [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0xbf0306b [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x5206261a [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x580f9456 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x24a06a85 [0176.346] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x14ed683 [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x24e2336b [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x707caf4d [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0xd4fb181 [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x21457f00 [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x17a6636a [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x6bb45f93 [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x74a8a183 [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x564d024c [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x4ef0a6c5 [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x3d22ac37 [0176.347] RtlRandomEx (in: Seed=0x9a8f760 | out: Seed=0x9a8f760) returned 0x1cf60c3 [0176.355] ReadFile (in: hFile=0x1d98, lpBuffer=0x809e060, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x9a8f75c, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0x9a8f75c*=0x103, lpOverlapped=0x0) returned 1 [0176.355] SetFilePointerEx (in: hFile=0x1d98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.355] WriteFile (in: hFile=0x1d98, lpBuffer=0x80a1c68*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x9a8f760, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesWritten=0x9a8f760*=0x103, lpOverlapped=0x0) returned 1 [0177.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303dd8 [0177.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f40 [0177.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f40) returned 1 [0177.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0177.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0177.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f331c8) returned 1 [0177.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83096e8) returned 1 [0177.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e80 [0177.331] SetFilePointerEx (in: hFile=0x1d98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.331] WriteFile (in: hFile=0x1d98, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9a8f7d4, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0x9a8f7d4*=0x10c, lpOverlapped=0x0) returned 1 [0182.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0182.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68eb0) returned 1 [0182.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f40) returned 1 [0182.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e80) returned 1 [0182.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303dd8) returned 1 [0182.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0182.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0182.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0182.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x148a07b0 [0182.528] wcscpy (in: _Dest=0x148a07b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" [0182.528] wcscat (in: _Dest=0x148a07b0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.f0dbec" [0182.528] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.f0dbec", NtPathName=0x9a8f758, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e16f90 [0182.727] FlushFileBuffers (hFile=0x1d98) returned 1 [0182.740] CloseHandle (hObject=0x1d98) returned 1 [0182.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x2d2ac0 [0182.866] wcscpy (in: _Dest=0x2d2ac0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" [0182.866] wcscat (in: _Dest=0x2d2ac0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\F0DBEC-Readme.txt" [0182.866] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\f0dbec-readme.txt")) returned 0xffffffff [0182.866] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b54 [0182.935] WriteFile (in: hFile=0x1b54, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9a8f77c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9a8f77c*=0x70c, lpOverlapped=0x0) returned 1 [0183.126] CloseHandle (hObject=0x1b54) returned 1 [0183.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d2ac0) returned 1 [0183.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0b48) returned 1 Thread: id = 4311 os_tid = 0x1a18 [0173.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json")) returned 0x2020 [0173.679] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0176.417] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x279c [0176.418] GetFileSizeEx (in: hFile=0x279c, lpFileSize=0xa0bf970 | out: lpFileSize=0xa0bf970*=251) returned 1 [0176.418] SetFilePointerEx (in: hFile=0x279c, liDistanceToMove=0xf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.418] ReadFile (in: hFile=0x279c, lpBuffer=0xa0bf97c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa0bf958, lpOverlapped=0x0 | out: lpBuffer=0xa0bf97c*, lpNumberOfBytesRead=0xa0bf958*=0x4, lpOverlapped=0x0) returned 1 [0176.419] SetFilePointerEx (in: hFile=0x279c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd28 [0176.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49ad8 [0176.420] NtQuerySystemTime (in: CurrentTime=0xa0bf8f8 | out: CurrentTime=0xa0bf8f8*=132471540444888000) returned 0x0 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x2e3b9e40 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x1ae9dd17 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x6b59764f [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x3976ed06 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x1a989560 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x773bc0 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x51888ca [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x32369139 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x4c24a47d [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x1ca12fdf [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x7d2a4c69 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x52c78004 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x47f522bb [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x1a450b05 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x71f06d38 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x5377efe0 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x14de303a [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x3dab9de2 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x69137d53 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x5ff038a0 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x2446618f [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x6e7b658d [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x78150010 [0176.420] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x70c38e93 [0176.421] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x355f1353 [0176.421] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x19656b43 [0176.421] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x173bac4a [0176.421] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x36de750a [0176.421] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x45cc16e8 [0176.421] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x19656b43 [0176.421] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x18f79f22 [0176.421] RtlRandomEx (in: Seed=0xa0bf8f0 | out: Seed=0xa0bf8f0) returned 0x447e09dd [0176.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0176.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0176.428] ReadFile (in: hFile=0x279c, lpBuffer=0x80b4890, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0xa0bf8ec, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesRead=0xa0bf8ec*=0xfb, lpOverlapped=0x0) returned 1 [0176.429] SetFilePointerEx (in: hFile=0x279c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.429] WriteFile (in: hFile=0x279c, lpBuffer=0x80b8498*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0xa0bf8f0, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesWritten=0xa0bf8f0*=0xfb, lpOverlapped=0x0) returned 1 [0181.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42cb8 [0181.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f10 [0181.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0181.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0181.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0181.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f329d0) returned 1 [0181.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f50) returned 1 [0181.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69360 [0181.784] SetFilePointerEx (in: hFile=0x279c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.784] WriteFile (in: hFile=0x279c, lpBuffer=0x8347650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa0bf964, lpOverlapped=0x0 | out: lpBuffer=0x8347650*, lpNumberOfBytesWritten=0xa0bf964*=0x10c, lpOverlapped=0x0) returned 1 [0182.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347650) returned 1 [0182.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69390) returned 1 [0182.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0182.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69360) returned 1 [0182.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0182.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd28) returned 1 [0182.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c030) returned 1 [0182.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d498f8) returned 1 [0182.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8998 [0182.448] wcscpy (in: _Dest=0x3ef8998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" [0182.448] wcscat (in: _Dest=0x3ef8998, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.f0dbec" [0182.448] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.f0dbec", NtPathName=0xa0bf8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9030 [0182.679] FlushFileBuffers (hFile=0x279c) returned 1 [0182.693] CloseHandle (hObject=0x279c) returned 1 [0182.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a1da0 [0182.818] wcscpy (in: _Dest=0x148a1da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" [0182.818] wcscat (in: _Dest=0x148a1da0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\F0DBEC-Readme.txt" [0182.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\f0dbec-readme.txt")) returned 0xffffffff [0182.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bec [0182.932] WriteFile (in: hFile=0x1bec, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa0bf90c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa0bf90c*=0x70c, lpOverlapped=0x0) returned 1 [0183.093] CloseHandle (hObject=0x1bec) returned 1 [0183.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1da0) returned 1 [0183.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0c70) returned 1 Thread: id = 4312 os_tid = 0x1a1c [0173.681] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0173.681] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0176.437] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1da0 [0176.437] GetFileSizeEx (in: hFile=0x1da0, lpFileSize=0x5c6f828 | out: lpFileSize=0x5c6f828*=249) returned 1 [0176.437] SetFilePointerEx (in: hFile=0x1da0, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.437] ReadFile (in: hFile=0x1da0, lpBuffer=0x5c6f834, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c6f810, lpOverlapped=0x0 | out: lpBuffer=0x5c6f834*, lpNumberOfBytesRead=0x5c6f810*=0x4, lpOverlapped=0x0) returned 1 [0176.439] SetFilePointerEx (in: hFile=0x1da0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49ad8 [0176.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0176.439] NtQuerySystemTime (in: CurrentTime=0x5c6f7b0 | out: CurrentTime=0x5c6f7b0*=132471540445200000) returned 0x0 [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0xce4c43 [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0xb1ca977 [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x718c252e [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x62b7fd21 [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0xffbd55c [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x7d7368ee [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x22d0e7e7 [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x18a3e2c9 [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x5e9bc2e3 [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x16e7a2fd [0176.439] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x61c36982 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x2a7940a1 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x3e96cf5c [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0xf92503 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x46c7c151 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x6c5de4c7 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x3c009a80 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x4de8727f [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x3e96cf5c [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x245bc508 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x308c9e0b [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x220f73b4 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0xf103364 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x65b75cb4 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x71f80a62 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x717ea30d [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x12698064 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x730d23b0 [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x4175d02b [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x953ae2b [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x6726565e [0176.440] RtlRandomEx (in: Seed=0x5c6f7a8 | out: Seed=0x5c6f7a8) returned 0x717ea30d [0176.448] ReadFile (in: hFile=0x1da0, lpBuffer=0x80bc0a0, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x5c6f7a4, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesRead=0x5c6f7a4*=0xf9, lpOverlapped=0x0) returned 1 [0176.448] SetFilePointerEx (in: hFile=0x1da0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.448] WriteFile (in: hFile=0x1da0, lpBuffer=0x80bfca8*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x5c6f7a8, lpOverlapped=0x0 | out: lpBuffer=0x80bfca8*, lpNumberOfBytesWritten=0x5c6f7a8*=0xf9, lpOverlapped=0x0) returned 1 [0177.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0177.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0177.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0177.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfca8) returned 1 [0177.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0177.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d18) returned 1 [0177.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309268) returned 1 [0177.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69180 [0177.425] SetFilePointerEx (in: hFile=0x1da0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.425] WriteFile (in: hFile=0x1da0, lpBuffer=0x30bba48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5c6f81c, lpOverlapped=0x0 | out: lpBuffer=0x30bba48*, lpNumberOfBytesWritten=0x5c6f81c*=0x10c, lpOverlapped=0x0) returned 1 [0182.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba48) returned 1 [0182.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0182.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0182.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0182.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0182.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0182.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0182.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0182.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef8ad0 [0182.930] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" [0182.930] wcscat (in: _Dest=0x3ef8ad0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.f0dbec" [0182.930] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.f0dbec", NtPathName=0x5c6f7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17240 [0182.988] FlushFileBuffers (hFile=0x1da0) returned 1 [0182.996] CloseHandle (hObject=0x1da0) returned 1 [0183.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef7fd8 [0183.019] wcscpy (in: _Dest=0x3ef7fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" [0183.019] wcscat (in: _Dest=0x3ef7fd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\F0DBEC-Readme.txt" [0183.019] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\f0dbec-readme.txt")) returned 0xffffffff [0183.019] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bcc [0183.034] WriteFile (in: hFile=0x1bcc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x5c6f7c4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x5c6f7c4*=0x70c, lpOverlapped=0x0) returned 1 [0183.083] CloseHandle (hObject=0x1bcc) returned 1 [0183.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7fd8) returned 1 [0183.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0d98) returned 1 Thread: id = 4313 os_tid = 0x1a20 [0173.681] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json")) returned 0x2020 [0173.681] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0176.452] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c24 [0176.452] GetFileSizeEx (in: hFile=0x1c24, lpFileSize=0x999fb28 | out: lpFileSize=0x999fb28*=268) returned 1 [0176.452] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.452] ReadFile (in: hFile=0x1c24, lpBuffer=0x999fb34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x999fb10, lpOverlapped=0x0 | out: lpBuffer=0x999fb34*, lpNumberOfBytesRead=0x999fb10*=0x4, lpOverlapped=0x0) returned 1 [0176.454] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0176.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd10 [0176.454] NtQuerySystemTime (in: CurrentTime=0x999fab0 | out: CurrentTime=0x999fab0*=132471540445356000) returned 0x0 [0176.454] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x5a27fa20 [0176.454] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0xc8acea5 [0176.454] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x3494f8b9 [0176.454] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x69e1dc5a [0176.454] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x379746c [0176.454] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x1b8e7422 [0176.454] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x10aeaed2 [0176.454] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x6358f6f7 [0176.454] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x5880494c [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x413a9030 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x50ea7f59 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x344a3ffc [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x4dc203 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x3744d71 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x123ff95e [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x73918759 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x21b83dea [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x1ea291b5 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x4e7b8126 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x555d6bba [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x37fc1564 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x2f6b0a9e [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x6196362c [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0xd99fe15 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x447a0d9e [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x5f46808 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x6acebcf6 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x25a87217 [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x7a885b8d [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x71c07caa [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x143c27cc [0176.455] RtlRandomEx (in: Seed=0x999faa8 | out: Seed=0x999faa8) returned 0x36de750a [0176.464] ReadFile (in: hFile=0x1c24, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0x999faa4, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0x999faa4*=0x10c, lpOverlapped=0x0) returned 1 [0176.464] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.464] WriteFile (in: hFile=0x1c24, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x999faa8, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0x999faa8*=0x10c, lpOverlapped=0x0) returned 1 [0177.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ce8 [0177.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d88 [0177.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d88) returned 1 [0177.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0177.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0177.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0177.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309778) returned 1 [0177.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e690c0 [0177.342] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.342] WriteFile (in: hFile=0x1c24, lpBuffer=0x30bbd90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x999fb1c, lpOverlapped=0x0 | out: lpBuffer=0x30bbd90*, lpNumberOfBytesWritten=0x999fb1c*=0x10c, lpOverlapped=0x0) returned 1 [0182.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 [0182.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690f0) returned 1 [0182.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d88) returned 1 [0182.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690c0) returned 1 [0182.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ce8) returned 1 [0182.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0182.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc8000) returned 1 [0182.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b08) returned 1 [0182.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a0dc8 [0182.546] wcscpy (in: _Dest=0x148a0dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" [0182.546] wcscat (in: _Dest=0x148a0dc8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.f0dbec" [0182.546] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0x999faa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9e48 [0182.751] FlushFileBuffers (hFile=0x1c24) returned 1 [0182.766] CloseHandle (hObject=0x1c24) returned 1 [0182.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a4678 [0182.876] wcscpy (in: _Dest=0x148a4678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" [0182.877] wcscat (in: _Dest=0x148a4678, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\F0DBEC-Readme.txt" [0182.877] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0182.877] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0182.938] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x999fac4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x999fac4*=0x70c, lpOverlapped=0x0) returned 1 [0183.137] CloseHandle (hObject=0x1bf8) returned 1 [0183.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4678) returned 1 [0183.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0ec0) returned 1 Thread: id = 4314 os_tid = 0x1a24 [0173.683] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json")) returned 0x2020 [0173.683] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0176.465] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c20 [0176.465] GetFileSizeEx (in: hFile=0x1c20, lpFileSize=0x990fb50 | out: lpFileSize=0x990fb50*=274) returned 1 [0176.465] SetFilePointerEx (in: hFile=0x1c20, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.465] ReadFile (in: hFile=0x1c20, lpBuffer=0x990fb5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x990fb38, lpOverlapped=0x0 | out: lpBuffer=0x990fb5c*, lpNumberOfBytesRead=0x990fb38*=0x4, lpOverlapped=0x0) returned 1 [0176.467] SetFilePointerEx (in: hFile=0x1c20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd10 [0176.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0176.467] NtQuerySystemTime (in: CurrentTime=0x990fad8 | out: CurrentTime=0x990fad8*=132471540445512000) returned 0x0 [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x3523a82 [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x7a92bdce [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x604aff49 [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x3f50a3e6 [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x38fb662e [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x69137d53 [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x22e943 [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x3ac44235 [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0xc54798f [0176.467] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x796e1b51 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x789ac3 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x77851e0d [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x1ca12fdf [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x6a41d35f [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x3161d458 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x591b7b0d [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x3f61f692 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x51888ca [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x37807725 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x5d39c107 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x2d2e6079 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x4cf93774 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x1e2d56c4 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x70c38e93 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0xb2c2248 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x338fe3dd [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x10467eb4 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x4256278 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x364e09ac [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x3f50a3e6 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x20429492 [0176.468] RtlRandomEx (in: Seed=0x990fad0 | out: Seed=0x990fad0) returned 0x1462e9bd [0176.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0176.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0176.478] ReadFile (in: hFile=0x1c20, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0x112, lpNumberOfBytesRead=0x990facc, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0x990facc*=0x112, lpOverlapped=0x0) returned 1 [0176.478] SetFilePointerEx (in: hFile=0x1c20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.478] WriteFile (in: hFile=0x1c20, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x990fad0, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0x990fad0*=0x112, lpOverlapped=0x0) returned 1 [0181.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a88 [0181.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d429e8 [0181.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0181.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0181.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0181.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e80) returned 1 [0181.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83091d8) returned 1 [0181.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69540 [0181.795] SetFilePointerEx (in: hFile=0x1c20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.795] WriteFile (in: hFile=0x1c20, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x990fb44, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0x990fb44*=0x10c, lpOverlapped=0x0) returned 1 [0182.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0182.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69570) returned 1 [0182.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0182.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69540) returned 1 [0182.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0182.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd10) returned 1 [0182.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca328) returned 1 [0182.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0182.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a0540 [0182.484] wcscpy (in: _Dest=0x148a0540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" [0182.484] wcscat (in: _Dest=0x148a0540, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.f0dbec" [0182.484] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0x990fac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef97e0 [0182.715] FlushFileBuffers (hFile=0x1c20) returned 1 [0182.731] CloseHandle (hObject=0x1c20) returned 1 [0182.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a13e0 [0182.838] wcscpy (in: _Dest=0x148a13e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" [0182.838] wcscat (in: _Dest=0x148a13e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\F0DBEC-Readme.txt" [0182.838] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0182.838] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4c [0182.935] WriteFile (in: hFile=0x1b4c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x990faec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x990faec*=0x70c, lpOverlapped=0x0) returned 1 [0183.124] CloseHandle (hObject=0x1b4c) returned 1 [0183.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a13e0) returned 1 [0183.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0fe8) returned 1 Thread: id = 4315 os_tid = 0x1a28 [0173.683] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0173.683] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0176.479] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c1c [0176.479] GetFileSizeEx (in: hFile=0x1c1c, lpFileSize=0x9cff7a0 | out: lpFileSize=0x9cff7a0*=267) returned 1 [0176.479] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.479] ReadFile (in: hFile=0x1c1c, lpBuffer=0x9cff7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9cff788, lpOverlapped=0x0 | out: lpBuffer=0x9cff7ac*, lpNumberOfBytesRead=0x9cff788*=0x4, lpOverlapped=0x0) returned 1 [0176.481] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0176.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0176.481] NtQuerySystemTime (in: CurrentTime=0x9cff728 | out: CurrentTime=0x9cff728*=132471540445512000) returned 0x0 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x3fcedf3d [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0xce4c43 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x22e943 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0xf926013 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x245bc508 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x42d5b5cb [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x731445de [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x2c2f3cc8 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x62698fc8 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x3b9151e4 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x1ae9dd17 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0xa3c5c3c [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x749929fd [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x64c9eee6 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x69cd3389 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x434974de [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x6063cfa4 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x355f1353 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x75f2307 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x4d3b0be9 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x7caaa211 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x5377efe0 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x36e596b2 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x1337143e [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x1b8e7422 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x64f26ff4 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x4f9a5085 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x75f2307 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x4d3b0be9 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x66f8faa6 [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0xffbd55c [0176.482] RtlRandomEx (in: Seed=0x9cff720 | out: Seed=0x9cff720) returned 0x2df8ff70 [0176.490] ReadFile (in: hFile=0x1c1c, lpBuffer=0x80d28d0, nNumberOfBytesToRead=0x10b, lpNumberOfBytesRead=0x9cff71c, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesRead=0x9cff71c*=0x10b, lpOverlapped=0x0) returned 1 [0176.490] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.490] WriteFile (in: hFile=0x1c1c, lpBuffer=0x80d64d8*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x9cff720, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesWritten=0x9cff720*=0x10b, lpOverlapped=0x0) returned 1 [0176.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3480 [0176.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0176.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0176.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0176.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0176.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e08) returned 1 [0176.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a030) returned 1 [0176.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0176.843] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.843] WriteFile (in: hFile=0x1c1c, lpBuffer=0x30bd028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9cff794, lpOverlapped=0x0 | out: lpBuffer=0x30bd028*, lpNumberOfBytesWritten=0x9cff794*=0x10c, lpOverlapped=0x0) returned 1 [0176.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0176.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0176.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0176.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0176.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0176.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0176.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d88) returned 1 [0176.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ce8) returned 1 [0176.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef7fd8 [0176.864] wcscpy (in: _Dest=0x3ef7fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" [0176.864] wcscat (in: _Dest=0x3ef7fd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.f0dbec" [0176.864] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.f0dbec", NtPathName=0x9cff718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16628 [0176.881] FlushFileBuffers (hFile=0x1c1c) returned 1 [0177.710] CloseHandle (hObject=0x1c1c) returned 1 [0182.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef7fd8 [0182.433] wcscpy (in: _Dest=0x3ef7fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" [0182.433] wcscat (in: _Dest=0x3ef7fd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" [0182.433] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\f0dbec-readme.txt")) returned 0xffffffff [0182.433] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c10 [0182.699] WriteFile (in: hFile=0x1c10, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9cff73c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9cff73c*=0x70c, lpOverlapped=0x0) returned 1 [0182.896] CloseHandle (hObject=0x1c10) returned 1 [0182.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7fd8) returned 1 [0182.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1110) returned 1 Thread: id = 4316 os_tid = 0x1a2c [0173.684] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0173.685] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0176.500] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c18 [0176.501] GetFileSizeEx (in: hFile=0x1c18, lpFileSize=0x9f3f7f0 | out: lpFileSize=0x9f3f7f0*=273) returned 1 [0176.501] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x10d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.501] ReadFile (in: hFile=0x1c18, lpBuffer=0x9f3f7fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f3f7d8, lpOverlapped=0x0 | out: lpBuffer=0x9f3f7fc*, lpNumberOfBytesRead=0x9f3f7d8*=0x4, lpOverlapped=0x0) returned 1 [0176.503] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0176.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ea0 [0176.503] NtQuerySystemTime (in: CurrentTime=0x9f3f778 | out: CurrentTime=0x9f3f778*=132471540445824000) returned 0x0 [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x718c252e [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x1a30ed7d [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x1493e3a6 [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x7f6e6ca3 [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x123ff95e [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0xf6e1ee9 [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x64f26ff4 [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x5a7f2cb [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x5eeb1d53 [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x7fd0c3d8 [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x16d85645 [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x7979a6c5 [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x4b0c2c5e [0176.503] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x677fe6e6 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x64adb9ad [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x5891c105 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x52aced40 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x23db6738 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x640fe45 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x77755df4 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x19385ff5 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x7464c005 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x3412108c [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x7d8b990d [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x47c1838a [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x1ecd6bc8 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x5129fd85 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x54108cf9 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x4cf93774 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x167a1991 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x18f79f22 [0176.504] RtlRandomEx (in: Seed=0x9f3f770 | out: Seed=0x9f3f770) returned 0x7d8b990d [0176.513] ReadFile (in: hFile=0x1c18, lpBuffer=0x8248458, nNumberOfBytesToRead=0x111, lpNumberOfBytesRead=0x9f3f76c, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0x9f3f76c*=0x111, lpOverlapped=0x0) returned 1 [0176.513] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.513] WriteFile (in: hFile=0x1c18, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x9f3f770, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0x9f3f770*=0x111, lpOverlapped=0x0) returned 1 [0176.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0176.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1900 [0176.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0176.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0176.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0176.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 [0176.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309100) returned 1 [0176.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68f70 [0176.847] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.847] WriteFile (in: hFile=0x1c18, lpBuffer=0x30bcce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9f3f7e4, lpOverlapped=0x0 | out: lpBuffer=0x30bcce0*, lpNumberOfBytesWritten=0x9f3f7e4*=0x10c, lpOverlapped=0x0) returned 1 [0176.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0176.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ee0) returned 1 [0176.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0176.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f70) returned 1 [0176.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0176.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0176.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0176.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0176.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef8110 [0176.873] wcscpy (in: _Dest=0x3ef8110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" [0176.873] wcscat (in: _Dest=0x3ef8110, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.f0dbec" [0176.873] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0x9f3f768, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16ce0 [0176.876] FlushFileBuffers (hFile=0x1c18) returned 1 [0177.709] CloseHandle (hObject=0x1c18) returned 1 [0182.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef8728 [0182.371] wcscpy (in: _Dest=0x3ef8728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" [0182.371] wcscat (in: _Dest=0x3ef8728, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0182.371] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0182.372] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ae8 [0182.563] WriteFile (in: hFile=0x1ae8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9f3f78c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9f3f78c*=0x70c, lpOverlapped=0x0) returned 1 [0182.704] CloseHandle (hObject=0x1ae8) returned 1 [0182.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8728) returned 1 [0182.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1238) returned 1 Thread: id = 4317 os_tid = 0x1a30 [0173.685] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json")) returned 0x2020 [0173.685] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0176.514] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c14 [0176.514] GetFileSizeEx (in: hFile=0x1c14, lpFileSize=0xa37fbd8 | out: lpFileSize=0xa37fbd8*=279) returned 1 [0176.514] SetFilePointerEx (in: hFile=0x1c14, liDistanceToMove=0x113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.514] ReadFile (in: hFile=0x1c14, lpBuffer=0xa37fbe4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa37fbc0, lpOverlapped=0x0 | out: lpBuffer=0xa37fbe4*, lpNumberOfBytesRead=0xa37fbc0*=0x4, lpOverlapped=0x0) returned 1 [0176.517] SetFilePointerEx (in: hFile=0x1c14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ea0 [0176.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0176.517] NtQuerySystemTime (in: CurrentTime=0xa37fb60 | out: CurrentTime=0xa37fb60*=132471540445980000) returned 0x0 [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x544f78da [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x3d457b65 [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x47f522bb [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x219121f8 [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x66f4208d [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x68c9316c [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x196d713a [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x25ec9672 [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x4437e29f [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x2c2f3cc8 [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x5579dceb [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x7079cb0 [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x2446618f [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x3c1158cd [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x716321f2 [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x54108cf9 [0176.517] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x7b682bb1 [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x604aff49 [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x695518e [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x219121f8 [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x47816c24 [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x546858ea [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x291c983c [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x21da861d [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x69cd3389 [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x6874ea8d [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x3ebb17a3 [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x7fa25f02 [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0xe1e8161 [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x65a252cd [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x6b7a7e19 [0176.518] RtlRandomEx (in: Seed=0xa37fb58 | out: Seed=0xa37fb58) returned 0x71f118d [0176.527] ReadFile (in: hFile=0x1c14, lpBuffer=0x824fc68, nNumberOfBytesToRead=0x117, lpNumberOfBytesRead=0xa37fb54, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesRead=0xa37fb54*=0x117, lpOverlapped=0x0) returned 1 [0176.527] SetFilePointerEx (in: hFile=0x1c14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.527] WriteFile (in: hFile=0x1c14, lpBuffer=0x8253870*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0xa37fb58, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesWritten=0xa37fb58*=0x117, lpOverlapped=0x0) returned 1 [0177.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304468 [0177.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0177.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f18) returned 1 [0177.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0177.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0177.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 [0177.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309a48) returned 1 [0177.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68dc0 [0177.337] SetFilePointerEx (in: hFile=0x1c14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.337] WriteFile (in: hFile=0x1c14, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa37fbcc, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0xa37fbcc*=0x10c, lpOverlapped=0x0) returned 1 [0182.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0182.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d90) returned 1 [0182.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f18) returned 1 [0182.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68dc0) returned 1 [0182.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304468) returned 1 [0182.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ea0) returned 1 [0182.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0182.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f68) returned 1 [0182.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a0a20 [0182.537] wcscpy (in: _Dest=0x148a0a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" [0182.537] wcscat (in: _Dest=0x148a0a20, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.f0dbec" [0182.537] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0xa37fb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9a70 [0182.737] FlushFileBuffers (hFile=0x1c14) returned 1 [0182.753] CloseHandle (hObject=0x1c14) returned 1 [0182.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a42d0 [0182.870] wcscpy (in: _Dest=0x148a42d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" [0182.870] wcscat (in: _Dest=0x148a42d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\F0DBEC-Readme.txt" [0182.870] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0182.870] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf0 [0182.937] WriteFile (in: hFile=0x1bf0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa37fb74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa37fb74*=0x70c, lpOverlapped=0x0) returned 1 [0183.133] CloseHandle (hObject=0x1bf0) returned 1 [0183.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a42d0) returned 1 [0183.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1360) returned 1 Thread: id = 4318 os_tid = 0x1a34 [0173.688] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json")) returned 0x2020 [0173.688] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0176.546] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c04 [0176.547] GetFileSizeEx (in: hFile=0x1c04, lpFileSize=0x94afd28 | out: lpFileSize=0x94afd28*=353) returned 1 [0176.547] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x15d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.547] ReadFile (in: hFile=0x1c04, lpBuffer=0x94afd34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94afd10, lpOverlapped=0x0 | out: lpBuffer=0x94afd34*, lpNumberOfBytesRead=0x94afd10*=0x4, lpOverlapped=0x0) returned 1 [0176.548] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9dd8 [0176.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca170 [0176.549] NtQuerySystemTime (in: CurrentTime=0x94afcb0 | out: CurrentTime=0x94afcb0*=132471540446292000) returned 0x0 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x25cc90c [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x75a3554f [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x4961fcc [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x23b27a28 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x6a51b8f8 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x3bea258 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x6aa8c079 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x4a6f575d [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0xf6e1ee9 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x1f2f4c58 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x6b6a338e [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x590c4bc0 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x6bdf03ee [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x5bef0d89 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x1dfab77a [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x77b7046b [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x16d61636 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x72885fb8 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x176fb63 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x392140e [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x4f830b76 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x7d939e2d [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x655cbf0 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x68931617 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x64adb9ad [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x5a3292f4 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x6bdf03ee [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x58bc45e2 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x5e335801 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x1d0b9dc6 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x3ebb17a3 [0176.549] RtlRandomEx (in: Seed=0x94afca8 | out: Seed=0x94afca8) returned 0x3ea2fd25 [0176.558] ReadFile (in: hFile=0x1c04, lpBuffer=0x825ec88, nNumberOfBytesToRead=0x161, lpNumberOfBytesRead=0x94afca4, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0x94afca4*=0x161, lpOverlapped=0x0) returned 1 [0176.558] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.558] WriteFile (in: hFile=0x1c04, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x94afca8, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0x94afca8*=0x161, lpOverlapped=0x0) returned 1 [0181.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e48 [0181.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42df8 [0181.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0181.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0181.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0181.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 [0181.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d048) returned 1 [0181.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69420 [0181.788] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.788] WriteFile (in: hFile=0x1c04, lpBuffer=0x30bc768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x94afd1c, lpOverlapped=0x0 | out: lpBuffer=0x30bc768*, lpNumberOfBytesWritten=0x94afd1c*=0x10c, lpOverlapped=0x0) returned 1 [0182.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0182.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69450) returned 1 [0182.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0182.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69420) returned 1 [0182.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0182.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9dd8) returned 1 [0182.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0182.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0182.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a0198 [0182.475] wcscpy (in: _Dest=0x148a0198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" [0182.475] wcscat (in: _Dest=0x148a0198, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.f0dbec" [0182.475] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x94afca0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9408 [0182.691] FlushFileBuffers (hFile=0x1c04) returned 1 [0182.697] CloseHandle (hObject=0x1c04) returned 1 [0182.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a19f8 [0182.821] wcscpy (in: _Dest=0x148a19f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" [0182.821] wcscat (in: _Dest=0x148a19f8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\F0DBEC-Readme.txt" [0182.822] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0182.822] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11c4 [0182.933] WriteFile (in: hFile=0x11c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x94afcc4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x94afcc4*=0x70c, lpOverlapped=0x0) returned 1 [0183.102] CloseHandle (hObject=0x11c4) returned 1 [0183.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a19f8) returned 1 [0183.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1488) returned 1 Thread: id = 4319 os_tid = 0x1a38 [0173.691] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json")) returned 0x2020 [0173.691] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0176.566] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c00 [0176.567] GetFileSizeEx (in: hFile=0x1c00, lpFileSize=0x7e2f7c8 | out: lpFileSize=0x7e2f7c8*=270) returned 1 [0176.567] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.567] ReadFile (in: hFile=0x1c00, lpBuffer=0x7e2f7d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e2f7b0, lpOverlapped=0x0 | out: lpBuffer=0x7e2f7d4*, lpNumberOfBytesRead=0x7e2f7b0*=0x4, lpOverlapped=0x0) returned 1 [0176.569] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca170 [0176.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca378 [0176.569] NtQuerySystemTime (in: CurrentTime=0x7e2f750 | out: CurrentTime=0x7e2f750*=132471540446448000) returned 0x0 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x24b44a1e [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x1446c129 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x27b957b0 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x5e8b6999 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x7caaa211 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x742dd250 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x9fe3262 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x42c315d3 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x730d23b0 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x2fdbe15e [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x72885fb8 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x2d44c73c [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x64c9eee6 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x2826d879 [0176.569] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x658f29e6 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x3a094086 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x6bc8f18b [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x71f22bff [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x1bfd4b86 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x2170d071 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x6a51b8f8 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x18e6e11f [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x1d2b2ffd [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x227733 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x2eb21d92 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x3a19c97 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x333f2853 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x645f192b [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x4d8682ba [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x546858ea [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0xdf7a8e3 [0176.570] RtlRandomEx (in: Seed=0x7e2f748 | out: Seed=0x7e2f748) returned 0x36d98a17 [0176.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8266498 [0176.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0176.580] ReadFile (in: hFile=0x1c00, lpBuffer=0x8266498, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0x7e2f744, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0x7e2f744*=0x10e, lpOverlapped=0x0) returned 1 [0176.580] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.580] WriteFile (in: hFile=0x1c00, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x7e2f748, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0x7e2f748*=0x10e, lpOverlapped=0x0) returned 1 [0177.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0177.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0177.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0177.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0177.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0177.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32610) returned 1 [0177.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1b0) returned 1 [0177.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69000 [0177.338] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.339] WriteFile (in: hFile=0x1c00, lpBuffer=0x30bc538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7e2f7bc, lpOverlapped=0x0 | out: lpBuffer=0x30bc538*, lpNumberOfBytesWritten=0x7e2f7bc*=0x10c, lpOverlapped=0x0) returned 1 [0182.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc538) returned 1 [0182.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69030) returned 1 [0182.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0182.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69000) returned 1 [0182.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0182.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca170) returned 1 [0182.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0182.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0182.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a0b58 [0182.541] wcscpy (in: _Dest=0x148a0b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" [0182.541] wcscat (in: _Dest=0x148a0b58, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.f0dbec" [0182.541] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0x7e2f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9bb8 [0182.742] FlushFileBuffers (hFile=0x1c00) returned 1 [0182.759] CloseHandle (hObject=0x1c00) returned 1 [0182.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a4408 [0182.873] wcscpy (in: _Dest=0x148a4408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" [0182.873] wcscat (in: _Dest=0x148a4408, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\F0DBEC-Readme.txt" [0182.873] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0182.873] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bd0 [0182.936] WriteFile (in: hFile=0x1bd0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7e2f764, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7e2f764*=0x70c, lpOverlapped=0x0) returned 1 [0183.131] CloseHandle (hObject=0x1bd0) returned 1 [0183.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4408) returned 1 [0183.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d15b0) returned 1 Thread: id = 4320 os_tid = 0x1a3c [0173.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json")) returned 0x2020 [0173.692] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0176.581] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bfc [0176.581] GetFileSizeEx (in: hFile=0x1bfc, lpFileSize=0xa58fb88 | out: lpFileSize=0xa58fb88*=356) returned 1 [0176.581] SetFilePointerEx (in: hFile=0x1bfc, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.581] ReadFile (in: hFile=0x1bfc, lpBuffer=0xa58fb94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa58fb70, lpOverlapped=0x0 | out: lpBuffer=0xa58fb94*, lpNumberOfBytesRead=0xa58fb70*=0x4, lpOverlapped=0x0) returned 1 [0176.583] SetFilePointerEx (in: hFile=0x1bfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca378 [0176.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0176.583] NtQuerySystemTime (in: CurrentTime=0xa58fb10 | out: CurrentTime=0xa58fb10*=132471540446604000) returned 0x0 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x7f21d4c2 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x61aea736 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x726944c3 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x7b201d57 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0xee8b9fe [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x20e2a654 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x54a5274f [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x11d92957 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x5eeb1d53 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x7f778642 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x7e52d07f [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0xf9f0a0e [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x2d71c36b [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x7f4cad82 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0xc8e8404 [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x749929fd [0176.583] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x7fcd37c2 [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x16d85645 [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x30104dd7 [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x3096f7c5 [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x6eaa8a89 [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x9988f0e [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x6a41d35f [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x37081f9e [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x66f4208d [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x4f5d6c30 [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x434ef77 [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x3853d25d [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x2105c4ce [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x11d92957 [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x34472965 [0176.584] RtlRandomEx (in: Seed=0xa58fb08 | out: Seed=0xa58fb08) returned 0x2d908b0b [0176.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0176.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0176.593] ReadFile (in: hFile=0x1bfc, lpBuffer=0x826dca8, nNumberOfBytesToRead=0x164, lpNumberOfBytesRead=0xa58fb04, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0xa58fb04*=0x164, lpOverlapped=0x0) returned 1 [0176.594] SetFilePointerEx (in: hFile=0x1bfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.594] WriteFile (in: hFile=0x1bfc, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0xa58fb08, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0xa58fb08*=0x164, lpOverlapped=0x0) returned 1 [0181.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42da8 [0181.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c18 [0181.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0181.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0181.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0181.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f330d8) returned 1 [0181.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d120) returned 1 [0181.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69480 [0181.791] SetFilePointerEx (in: hFile=0x1bfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.791] WriteFile (in: hFile=0x1bfc, lpBuffer=0x30bd370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa58fb7c, lpOverlapped=0x0 | out: lpBuffer=0x30bd370*, lpNumberOfBytesWritten=0xa58fb7c*=0x10c, lpOverlapped=0x0) returned 1 [0182.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0182.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694b0) returned 1 [0182.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0182.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69480) returned 1 [0182.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0182.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca378) returned 1 [0182.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0182.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0182.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a02d0 [0182.478] wcscpy (in: _Dest=0x148a02d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" [0182.478] wcscat (in: _Dest=0x148a02d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.f0dbec" [0182.478] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0xa58fb00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9550 [0182.709] FlushFileBuffers (hFile=0x1bfc) returned 1 [0182.713] CloseHandle (hObject=0x1bfc) returned 1 [0182.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a1650 [0182.834] wcscpy (in: _Dest=0x148a1650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" [0182.834] wcscat (in: _Dest=0x148a1650, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\F0DBEC-Readme.txt" [0182.834] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0182.835] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0182.934] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa58fb24, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa58fb24*=0x70c, lpOverlapped=0x0) returned 1 [0183.110] CloseHandle (hObject=0x1b48) returned 1 [0183.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1650) returned 1 [0183.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d16d8) returned 1 Thread: id = 4321 os_tid = 0x1a40 [0173.693] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json")) returned 0x2020 [0173.693] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0176.595] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf8 [0176.595] GetFileSizeEx (in: hFile=0x1bf8, lpFileSize=0xa14fcb8 | out: lpFileSize=0xa14fcb8*=253) returned 1 [0176.595] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.595] ReadFile (in: hFile=0x1bf8, lpBuffer=0xa14fcc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa14fca0, lpOverlapped=0x0 | out: lpBuffer=0xa14fcc4*, lpNumberOfBytesRead=0xa14fca0*=0x4, lpOverlapped=0x0) returned 1 [0176.642] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0176.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0176.642] NtQuerySystemTime (in: CurrentTime=0xa14fc40 | out: CurrentTime=0xa14fc40*=132471540447072000) returned 0x0 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x70d5d6ac [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x5345f0c6 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x54a28891 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x5246a8e5 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x7a5ca4c4 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x1bac000e [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0xc9f6484 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x4eef66d0 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x3981732 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x18a8c28e [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x7f040833 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x380d573a [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x2d982943 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x726944c3 [0176.642] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x661c7c12 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x391eed72 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x4b2488d4 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x4692ff20 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x5b2cb2c [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x4ea3b6c9 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x33374e6d [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x442bdb2f [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x4c62b978 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x6568d704 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0xc82cf55 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x59aa1ab3 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x7fe41626 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x13066adf [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x506fc195 [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x199e742f [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x3ef02c0c [0176.643] RtlRandomEx (in: Seed=0xa14fc38 | out: Seed=0xa14fc38) returned 0x2fd75138 [0176.652] ReadFile (in: hFile=0x1bf8, lpBuffer=0x82844d8, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0xa14fc34, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0xa14fc34*=0xfd, lpOverlapped=0x0) returned 1 [0176.652] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.652] WriteFile (in: hFile=0x1bf8, lpBuffer=0x8348930*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0xa14fc38, lpOverlapped=0x0 | out: lpBuffer=0x8348930*, lpNumberOfBytesWritten=0xa14fc38*=0xfd, lpOverlapped=0x0) returned 1 [0177.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0177.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0177.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0177.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348930) returned 1 [0177.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82844d8) returned 1 [0177.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 [0177.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d630) returned 1 [0177.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69060 [0177.340] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.340] WriteFile (in: hFile=0x1bf8, lpBuffer=0x30bc308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa14fcac, lpOverlapped=0x0 | out: lpBuffer=0x30bc308*, lpNumberOfBytesWritten=0xa14fcac*=0x10c, lpOverlapped=0x0) returned 1 [0182.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0182.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69090) returned 1 [0182.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0182.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69060) returned 1 [0182.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0182.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0182.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0182.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0182.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a0c90 [0182.543] wcscpy (in: _Dest=0x148a0c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" [0182.543] wcscat (in: _Dest=0x148a0c90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.f0dbec" [0182.543] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.f0dbec", NtPathName=0xa14fc30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9d00 [0182.747] FlushFileBuffers (hFile=0x1bf8) returned 1 [0182.762] CloseHandle (hObject=0x1bf8) returned 1 [0182.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a4540 [0182.875] wcscpy (in: _Dest=0x148a4540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" [0182.875] wcscat (in: _Dest=0x148a4540, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\F0DBEC-Readme.txt" [0182.875] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\f0dbec-readme.txt")) returned 0xffffffff [0182.875] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c24 [0182.937] WriteFile (in: hFile=0x1c24, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa14fc54, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa14fc54*=0x70c, lpOverlapped=0x0) returned 1 [0183.135] CloseHandle (hObject=0x1c24) returned 1 [0183.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4540) returned 1 [0183.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1800) returned 1 Thread: id = 4322 os_tid = 0x1a44 [0173.693] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json")) returned 0x2020 [0173.694] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0176.652] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf4 [0176.653] GetFileSizeEx (in: hFile=0x1bf4, lpFileSize=0xa65fe40 | out: lpFileSize=0xa65fe40*=287) returned 1 [0176.653] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x11b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.653] ReadFile (in: hFile=0x1bf4, lpBuffer=0xa65fe4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa65fe28, lpOverlapped=0x0 | out: lpBuffer=0xa65fe4c*, lpNumberOfBytesRead=0xa65fe28*=0x4, lpOverlapped=0x0) returned 1 [0176.655] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0176.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0176.655] NtQuerySystemTime (in: CurrentTime=0xa65fdc8 | out: CurrentTime=0xa65fdc8*=132471540447228000) returned 0x0 [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x1a3d310a [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x30acbec [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x16d61636 [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x54440d15 [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x3cc40eb6 [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x11b76c1c [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x85bdf66 [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x141f4668 [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x325b415f [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x96a875c [0176.655] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x72f69ff5 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x6b94dc48 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0xc54798f [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x2edb34a8 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x228a2721 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x52ff16a2 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x493da92b [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x3c0d0bc6 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x7ef6fc02 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x581dc0bc [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x752ee7d3 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x2e8351a4 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x409e7bd1 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x4b4d1907 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x32dbd472 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x71503aaf [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x79bb3b2b [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x4256278 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x518bf091 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x1f67106 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x55c9ec01 [0176.656] RtlRandomEx (in: Seed=0xa65fdc0 | out: Seed=0xa65fdc0) returned 0x5d408d41 [0176.664] ReadFile (in: hFile=0x1bf4, lpBuffer=0x834c538, nNumberOfBytesToRead=0x11f, lpNumberOfBytesRead=0xa65fdbc, lpOverlapped=0x0 | out: lpBuffer=0x834c538*, lpNumberOfBytesRead=0xa65fdbc*=0x11f, lpOverlapped=0x0) returned 1 [0176.664] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.664] WriteFile (in: hFile=0x1bf4, lpBuffer=0x8350140*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0xa65fdc0, lpOverlapped=0x0 | out: lpBuffer=0x8350140*, lpNumberOfBytesWritten=0xa65fdc0*=0x11f, lpOverlapped=0x0) returned 1 [0181.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b78 [0181.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0181.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0181.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8350140) returned 1 [0181.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x834c538) returned 1 [0181.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 [0181.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d8b8) returned 1 [0181.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e694e0 [0181.793] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.793] WriteFile (in: hFile=0x1bf4, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa65fe34, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xa65fe34*=0x10c, lpOverlapped=0x0) returned 1 [0182.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0182.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69510) returned 1 [0182.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0182.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694e0) returned 1 [0182.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0182.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0182.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0182.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0182.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a0408 [0182.482] wcscpy (in: _Dest=0x148a0408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" [0182.482] wcscat (in: _Dest=0x148a0408, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.f0dbec" [0182.482] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0xa65fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9698 [0182.712] FlushFileBuffers (hFile=0x1bf4) returned 1 [0182.724] CloseHandle (hObject=0x1bf4) returned 1 [0182.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a1518 [0182.836] wcscpy (in: _Dest=0x148a1518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" [0182.836] wcscat (in: _Dest=0x148a1518, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\F0DBEC-Readme.txt" [0182.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0182.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1db4 [0182.934] WriteFile (in: hFile=0x1db4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa65fddc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa65fddc*=0x70c, lpOverlapped=0x0) returned 1 [0183.113] CloseHandle (hObject=0x1db4) returned 1 [0183.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1518) returned 1 [0183.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1928) returned 1 Thread: id = 4323 os_tid = 0x1a48 [0173.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json")) returned 0x2020 [0173.694] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0176.677] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf0 [0176.677] GetFileSizeEx (in: hFile=0x1bf0, lpFileSize=0x7eff860 | out: lpFileSize=0x7eff860*=338) returned 1 [0176.677] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x14e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.677] ReadFile (in: hFile=0x1bf0, lpBuffer=0x7eff86c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7eff848, lpOverlapped=0x0 | out: lpBuffer=0x7eff86c*, lpNumberOfBytesRead=0x7eff848*=0x4, lpOverlapped=0x0) returned 1 [0176.679] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0176.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0176.679] NtQuerySystemTime (in: CurrentTime=0x7eff7e8 | out: CurrentTime=0x7eff7e8*=132471540447384000) returned 0x0 [0176.679] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x357214e6 [0176.679] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x30943b78 [0176.679] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x2aeffe5b [0176.679] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x10f6e79c [0176.679] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x75d5ad4d [0176.679] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x6f1f5669 [0176.679] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x6b9718ab [0176.679] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x6c24d798 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x61a25cb0 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x196db6ab [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0xde7fec4 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x4221777f [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x62dba351 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x7bd34db7 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x7335b27 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x3fba96c7 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x73a2ebe5 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x1eda869f [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x21b27b0e [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x147dc5d1 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x5fffe9ee [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x2648087f [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x7b9b4856 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x57adabc3 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x3dfa8790 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x43ff4240 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0xf28170f [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x35963ff2 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x1eaf3d8e [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x5a0b60b0 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x22957b56 [0176.680] RtlRandomEx (in: Seed=0x7eff7e0 | out: Seed=0x7eff7e0) returned 0x251511cc [0176.691] ReadFile (in: hFile=0x1bf0, lpBuffer=0x8353d48, nNumberOfBytesToRead=0x152, lpNumberOfBytesRead=0x7eff7dc, lpOverlapped=0x0 | out: lpBuffer=0x8353d48*, lpNumberOfBytesRead=0x7eff7dc*=0x152, lpOverlapped=0x0) returned 1 [0176.691] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.691] WriteFile (in: hFile=0x1bf0, lpBuffer=0x8357950*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x7eff7e0, lpOverlapped=0x0 | out: lpBuffer=0x8357950*, lpNumberOfBytesWritten=0x7eff7e0*=0x152, lpOverlapped=0x0) returned 1 [0177.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0177.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0177.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8357950) returned 1 [0177.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8353d48) returned 1 [0177.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0177.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d8) returned 1 [0177.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fd0 [0177.326] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.326] WriteFile (in: hFile=0x1bf0, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7eff854, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x7eff854*=0x10c, lpOverlapped=0x0) returned 1 [0182.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0182.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0182.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0182.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0182.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0182.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0182.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0182.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0182.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a1038 [0182.557] wcscpy (in: _Dest=0x148a1038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" [0182.557] wcscat (in: _Dest=0x148a1038, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.f0dbec" [0182.557] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.f0dbec", NtPathName=0x7eff7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3efa0d8 [0182.761] FlushFileBuffers (hFile=0x1bf0) returned 1 [0182.771] CloseHandle (hObject=0x1bf0) returned 1 [0182.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a47b0 [0182.878] wcscpy (in: _Dest=0x148a47b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" [0182.878] wcscat (in: _Dest=0x148a47b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\F0DBEC-Readme.txt" [0182.878] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\f0dbec-readme.txt")) returned 0xffffffff [0182.878] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c14 [0182.938] WriteFile (in: hFile=0x1c14, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7eff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7eff7fc*=0x70c, lpOverlapped=0x0) returned 1 [0183.147] CloseHandle (hObject=0x1c14) returned 1 [0183.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a47b0) returned 1 [0183.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1a50) returned 1 Thread: id = 4324 os_tid = 0x1a54 [0173.695] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json")) returned 0x2020 [0173.695] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0176.698] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bec [0176.698] GetFileSizeEx (in: hFile=0x1bec, lpFileSize=0xa25f7a8 | out: lpFileSize=0xa25f7a8*=281) returned 1 [0176.698] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.698] ReadFile (in: hFile=0x1bec, lpBuffer=0xa25f7b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa25f790, lpOverlapped=0x0 | out: lpBuffer=0xa25f7b4*, lpNumberOfBytesRead=0xa25f790*=0x4, lpOverlapped=0x0) returned 1 [0176.701] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0176.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0176.701] NtQuerySystemTime (in: CurrentTime=0xa25f730 | out: CurrentTime=0xa25f730*=132471540447696000) returned 0x0 [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x5824633e [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x5b015fa [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x44291586 [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x27b8f60e [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x4c2074de [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x22134ea7 [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x7ecc2342 [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x73b5ae26 [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x7be70f98 [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x3a3b98d2 [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x3376fad6 [0176.701] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x5e38e4c4 [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x25e3c209 [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x1ccaee7a [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x42b3b2dd [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x69350d98 [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x760b264b [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x7dcb0ec2 [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x737ad9b [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x3a36f6ef [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x125a420a [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x4894b923 [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x6b0600ec [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x4bd638f7 [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x153fc12b [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x6b52c9a2 [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x1ff731ff [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x439d52df [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x3b171f23 [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x35a75b0d [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x6fb6e287 [0176.702] RtlRandomEx (in: Seed=0xa25f728 | out: Seed=0xa25f728) returned 0x46176e18 [0176.711] ReadFile (in: hFile=0x1bec, lpBuffer=0x835b558, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xa25f724, lpOverlapped=0x0 | out: lpBuffer=0x835b558*, lpNumberOfBytesRead=0xa25f724*=0x119, lpOverlapped=0x0) returned 1 [0176.711] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.711] WriteFile (in: hFile=0x1bec, lpBuffer=0x835f160*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xa25f728, lpOverlapped=0x0 | out: lpBuffer=0x835f160*, lpNumberOfBytesWritten=0xa25f728*=0x119, lpOverlapped=0x0) returned 1 [0181.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42100 [0181.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0181.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0181.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835f160) returned 1 [0181.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835b558) returned 1 [0181.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0181.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0d8) returned 1 [0181.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fa0 [0181.780] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.780] WriteFile (in: hFile=0x1bec, lpBuffer=0x8347420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa25f79c, lpOverlapped=0x0 | out: lpBuffer=0x8347420*, lpNumberOfBytesWritten=0xa25f79c*=0x10c, lpOverlapped=0x0) returned 1 [0182.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347420) returned 1 [0182.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692d0) returned 1 [0182.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0182.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fa0) returned 1 [0182.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42100) returned 1 [0182.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1798) returned 1 [0182.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0182.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0182.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3dd8b80 [0182.454] wcscpy (in: _Dest=0x3dd8b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" [0182.454] wcscat (in: _Dest=0x3dd8b80, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.f0dbec" [0182.454] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0xa25f720, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9178 [0182.687] FlushFileBuffers (hFile=0x1bec) returned 1 [0182.698] CloseHandle (hObject=0x1bec) returned 1 [0182.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a18c0 [0182.823] wcscpy (in: _Dest=0x148a18c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" [0182.823] wcscat (in: _Dest=0x148a18c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\F0DBEC-Readme.txt" [0182.823] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0182.823] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe28 [0182.934] WriteFile (in: hFile=0xe28, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa25f744, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa25f744*=0x70c, lpOverlapped=0x0) returned 1 [0183.108] CloseHandle (hObject=0xe28) returned 1 [0183.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a18c0) returned 1 [0183.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1b78) returned 1 Thread: id = 4325 os_tid = 0x1a58 [0173.695] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0173.696] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0176.712] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1be8 [0176.712] GetFileSizeEx (in: hFile=0x1be8, lpFileSize=0xa48fdc8 | out: lpFileSize=0xa48fdc8*=264) returned 1 [0176.712] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.712] ReadFile (in: hFile=0x1be8, lpBuffer=0xa48fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa48fdb0, lpOverlapped=0x0 | out: lpBuffer=0xa48fdd4*, lpNumberOfBytesRead=0xa48fdb0*=0x4, lpOverlapped=0x0) returned 1 [0176.714] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3368 [0176.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0176.714] NtQuerySystemTime (in: CurrentTime=0xa48fd50 | out: CurrentTime=0xa48fd50*=132471540447696000) returned 0x0 [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x5c3aa5c [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x658afb43 [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x6c8b0fb8 [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x4b31e060 [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x138eb619 [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x744197bf [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x4ba3a07a [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x6240d33f [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x640fe45 [0176.714] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x4648676e [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x624e3d9e [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x3e605c9 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x34feb2c2 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x4a16423e [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x7993ef1c [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x4d71055b [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x6ad35483 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x27b8f60e [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x5f3aa49f [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x67cf40f7 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x7dcb0ec2 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x1846abb [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x12493f6d [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x5f572fef [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x6385e29 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x442251c4 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x12a2478e [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x3955cc69 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x67cf40f7 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0xf0fdda8 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x100960e1 [0176.715] RtlRandomEx (in: Seed=0xa48fd48 | out: Seed=0xa48fd48) returned 0x5942582f [0176.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8362d68 [0176.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8366970 [0176.726] ReadFile (in: hFile=0x1be8, lpBuffer=0x8362d68, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xa48fd44, lpOverlapped=0x0 | out: lpBuffer=0x8362d68*, lpNumberOfBytesRead=0xa48fd44*=0x108, lpOverlapped=0x0) returned 1 [0176.726] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.726] WriteFile (in: hFile=0x1be8, lpBuffer=0x8366970*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xa48fd48, lpOverlapped=0x0 | out: lpBuffer=0x8366970*, lpNumberOfBytesWritten=0xa48fd48*=0x108, lpOverlapped=0x0) returned 1 [0177.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0177.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0177.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0177.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8366970) returned 1 [0177.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8362d68) returned 1 [0177.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 [0177.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d7e0) returned 1 [0177.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68f70 [0177.327] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.327] WriteFile (in: hFile=0x1be8, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa48fdbc, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xa48fdbc*=0x10c, lpOverlapped=0x0) returned 1 [0182.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0182.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ee0) returned 1 [0182.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0182.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f70) returned 1 [0182.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0182.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0182.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0182.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0182.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x148a08e8 [0182.534] wcscpy (in: _Dest=0x148a08e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" [0182.534] wcscat (in: _Dest=0x148a08e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.f0dbec" [0182.534] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0xa48fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17240 [0182.733] FlushFileBuffers (hFile=0x1be8) returned 1 [0182.749] CloseHandle (hObject=0x1be8) returned 1 [0182.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x148a4198 [0182.868] wcscpy (in: _Dest=0x148a4198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" [0182.868] wcscat (in: _Dest=0x148a4198, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0182.868] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0182.869] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b58 [0182.936] WriteFile (in: hFile=0x1b58, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa48fd64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa48fd64*=0x70c, lpOverlapped=0x0) returned 1 [0183.129] CloseHandle (hObject=0x1b58) returned 1 [0183.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4198) returned 1 [0183.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1ca0) returned 1 Thread: id = 4326 os_tid = 0x1a5c [0173.696] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0173.696] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0176.734] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1be4 [0176.734] GetFileSizeEx (in: hFile=0x1be4, lpFileSize=0x9d3fb38 | out: lpFileSize=0x9d3fb38*=246) returned 1 [0176.734] SetFilePointerEx (in: hFile=0x1be4, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.734] ReadFile (in: hFile=0x1be4, lpBuffer=0x9d3fb44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d3fb20, lpOverlapped=0x0 | out: lpBuffer=0x9d3fb44*, lpNumberOfBytesRead=0x9d3fb20*=0x4, lpOverlapped=0x0) returned 1 [0176.736] SetFilePointerEx (in: hFile=0x1be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0176.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0176.736] NtQuerySystemTime (in: CurrentTime=0x9d3fac0 | out: CurrentTime=0x9d3fac0*=132471540448008000) returned 0x0 [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x5f572fef [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x127c7dbf [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x2b1ffe3a [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x49436cdd [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x5942582f [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x25241236 [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x7f1199ca [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x770d1e5a [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x7e639704 [0176.736] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x7e171c3c [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x5a962d4b [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x1783c337 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x9b6ac23 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x34feb2c2 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x77f7a059 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x5d24308b [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x1f8dc8e0 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x40018cfa [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x6f723fcb [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x4ba3a07a [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x230412de [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x5c3aa5c [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0xe0d9f53 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x2fcbec52 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x7bfc6d69 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x5127e54c [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x47152bcf [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x4de06c88 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x210ba54b [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x488a0cc1 [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x2dbf710e [0176.737] RtlRandomEx (in: Seed=0x9d3fab8 | out: Seed=0x9d3fab8) returned 0x2871aa8f [0176.745] ReadFile (in: hFile=0x1be4, lpBuffer=0x836a578, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0x9d3fab4, lpOverlapped=0x0 | out: lpBuffer=0x836a578*, lpNumberOfBytesRead=0x9d3fab4*=0xf6, lpOverlapped=0x0) returned 1 [0176.745] SetFilePointerEx (in: hFile=0x1be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.745] WriteFile (in: hFile=0x1be4, lpBuffer=0x836e180*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x9d3fab8, lpOverlapped=0x0 | out: lpBuffer=0x836e180*, lpNumberOfBytesWritten=0x9d3fab8*=0xf6, lpOverlapped=0x0) returned 1 [0181.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43500 [0181.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0181.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0181.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836e180) returned 1 [0181.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836a578) returned 1 [0181.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687e0) returned 1 [0181.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d5a0) returned 1 [0181.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69300 [0181.782] SetFilePointerEx (in: hFile=0x1be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.782] WriteFile (in: hFile=0x1be4, lpBuffer=0x8347538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9d3fb2c, lpOverlapped=0x0 | out: lpBuffer=0x8347538*, lpNumberOfBytesWritten=0x9d3fb2c*=0x10c, lpOverlapped=0x0) returned 1 [0182.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347538) returned 1 [0182.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69330) returned 1 [0182.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0182.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69300) returned 1 [0182.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43500) returned 1 [0182.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0182.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ca8) returned 1 [0182.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14f0) returned 1 [0182.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef8ad0 [0182.451] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" [0182.451] wcscat (in: _Dest=0x3ef8ad0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.f0dbec" [0182.451] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0x9d3fab0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16ce0 [0182.683] FlushFileBuffers (hFile=0x1be4) returned 1 [0182.695] CloseHandle (hObject=0x1be4) returned 1 [0182.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x148a1b30 [0182.820] wcscpy (in: _Dest=0x148a1b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" [0182.820] wcscat (in: _Dest=0x148a1b30, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0182.820] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0182.820] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b88 [0182.933] WriteFile (in: hFile=0x1b88, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9d3fad4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9d3fad4*=0x70c, lpOverlapped=0x0) returned 1 [0183.099] CloseHandle (hObject=0x1b88) returned 1 [0183.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1b30) returned 1 [0183.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1dc8) returned 1 Thread: id = 4327 os_tid = 0x1a60 [0173.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx")) returned 0x20 [0173.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.697] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.697] GetLastError () returned 0x5 [0173.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81865a8) returned 1 Thread: id = 4328 os_tid = 0x1a64 [0173.698] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current")) returned 0x2020 [0173.699] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", dwFileAttributes=0x20) returned 1 [0176.752] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1be0 [0176.752] GetFileSizeEx (in: hFile=0x1be0, lpFileSize=0x9e1fec8 | out: lpFileSize=0x9e1fec8*=16) returned 1 [0176.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0176.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0176.752] NtQuerySystemTime (in: CurrentTime=0x9e1fe50 | out: CurrentTime=0x9e1fe50*=132471540448164000) returned 0x0 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x194e7943 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0xc633c2a [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x7e7671c2 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x7b49cf6a [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x2b3b3d78 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x4bdea0e8 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x33d08902 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x39cb2c4a [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x1096b971 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x7e20c042 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x73992fba [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x100960e1 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x70e269f1 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x4807dfff [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x167faa9a [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x64b07e9d [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x36f9d049 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x4f55f2d5 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x35a75b0d [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x226f5a9a [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x2a106854 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x66d14ac5 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x6f2e60b3 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x5b565d98 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x4322422e [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x57c00001 [0176.753] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x6f6043ae [0176.754] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x7d240e7e [0176.754] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x6376b7f2 [0176.754] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x39d397a1 [0176.754] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x17712548 [0176.754] RtlRandomEx (in: Seed=0x9e1fe48 | out: Seed=0x9e1fe48) returned 0x2ce71c6e [0176.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8371d88 [0176.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8375990 [0176.763] ReadFile (in: hFile=0x1be0, lpBuffer=0x8371d88, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0x9e1fe44, lpOverlapped=0x0 | out: lpBuffer=0x8371d88*, lpNumberOfBytesRead=0x9e1fe44*=0x10, lpOverlapped=0x0) returned 1 [0176.765] SetFilePointerEx (in: hFile=0x1be0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.765] WriteFile (in: hFile=0x1be0, lpBuffer=0x8375990*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x9e1fe48, lpOverlapped=0x0 | out: lpBuffer=0x8375990*, lpNumberOfBytesWritten=0x9e1fe48*=0x10, lpOverlapped=0x0) returned 1 [0177.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0177.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0177.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0177.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8375990) returned 1 [0177.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8371d88) returned 1 [0177.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0177.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d990) returned 1 [0177.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x305c3b0 [0177.346] SetFilePointerEx (in: hFile=0x1be0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.346] WriteFile (in: hFile=0x1be0, lpBuffer=0x3ef58b8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x9e1febc, lpOverlapped=0x0 | out: lpBuffer=0x3ef58b8*, lpNumberOfBytesWritten=0x9e1febc*=0x100, lpOverlapped=0x0) returned 1 [0182.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef58b8) returned 1 [0182.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0182.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0182.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0182.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0182.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0182.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0182.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0182.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x81d6b60 [0182.550] wcscpy (in: _Dest=0x81d6b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" [0182.551] wcscat (in: _Dest=0x81d6b60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.f0dbec" [0182.551] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.f0dbec", NtPathName=0x9e1fe40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8b88 [0182.982] FlushFileBuffers (hFile=0x1be0) returned 1 [0182.991] CloseHandle (hObject=0x1be0) returned 1 [0183.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81eff38 [0183.015] wcscpy (in: _Dest=0x81eff38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0183.015] wcscat (in: _Dest=0x81eff38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt" [0183.015] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\f0dbec-readme.txt")) returned 0x2020 [0183.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff38) returned 1 [0183.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41258) returned 1 Thread: id = 4329 os_tid = 0x1a68 [0173.699] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock")) returned 0x2020 [0173.699] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", dwFileAttributes=0x20) returned 1 [0176.765] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bdc [0176.765] GetFileSizeEx (in: hFile=0x1bdc, lpFileSize=0xa84fb40 | out: lpFileSize=0xa84fb40*=0) returned 1 [0176.765] FlushFileBuffers (hFile=0x1bdc) returned 1 [0177.545] CloseHandle (hObject=0x1bdc) returned 1 [0177.545] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", dwFileAttributes=0x2020) returned 1 [0189.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 Thread: id = 4330 os_tid = 0x1a6c [0173.700] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log")) returned 0x2020 [0173.700] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", dwFileAttributes=0x20) returned 1 [0176.766] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bd8 [0176.766] GetFileSizeEx (in: hFile=0x1bd8, lpFileSize=0xa98fbc0 | out: lpFileSize=0xa98fbc0*=141) returned 1 [0176.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0176.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0176.766] NtQuerySystemTime (in: CurrentTime=0xa98fb48 | out: CurrentTime=0xa98fb48*=132471540448320000) returned 0x0 [0176.766] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x10a9bf44 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x27e6fd46 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x5890f9 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x3b171f23 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x71558ea3 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x336d6e57 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x7fbf83e [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x27d80a6 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x55fc5b1c [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x7ec21ec [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x6f41d870 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x21fba585 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x2a58af69 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x4797587e [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x7993ef1c [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x6daf2c0 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x33c5ec0e [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x5c3a54ff [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x1c4e5c65 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x5ea0e16d [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x2774b66a [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x217358c3 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x7517d08 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x46176e18 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x4e165bd [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x13ed6b07 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x56827b4a [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x183e054b [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x3872e1a8 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x477459f0 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x2c9a6f11 [0176.767] RtlRandomEx (in: Seed=0xa98fb40 | out: Seed=0xa98fb40) returned 0x547fffa5 [0176.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8379598 [0176.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x837d1a0 [0176.776] ReadFile (in: hFile=0x1bd8, lpBuffer=0x8379598, nNumberOfBytesToRead=0x8d, lpNumberOfBytesRead=0xa98fb3c, lpOverlapped=0x0 | out: lpBuffer=0x8379598*, lpNumberOfBytesRead=0xa98fb3c*=0x8d, lpOverlapped=0x0) returned 1 [0176.779] SetFilePointerEx (in: hFile=0x1bd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.779] WriteFile (in: hFile=0x1bd8, lpBuffer=0x837d1a0*, nNumberOfBytesToWrite=0x8d, lpNumberOfBytesWritten=0xa98fb40, lpOverlapped=0x0 | out: lpBuffer=0x837d1a0*, lpNumberOfBytesWritten=0xa98fb40*=0x8d, lpOverlapped=0x0) returned 1 [0177.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0177.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0177.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0177.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x837d1a0) returned 1 [0177.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8379598) returned 1 [0177.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 [0177.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd30) returned 1 [0177.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e58838 [0177.344] SetFilePointerEx (in: hFile=0x1bd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.344] WriteFile (in: hFile=0x1bd8, lpBuffer=0x3e27b40*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xa98fbb4, lpOverlapped=0x0 | out: lpBuffer=0x3e27b40*, lpNumberOfBytesWritten=0xa98fbb4*=0xf8, lpOverlapped=0x0) returned 1 [0182.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27b40) returned 1 [0182.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58f98) returned 1 [0182.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0182.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58838) returned 1 [0182.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0182.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0182.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ea8) returned 1 [0182.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0182.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333468 [0182.946] wcscpy (in: _Dest=0x333468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" [0182.946] wcscat (in: _Dest=0x333468, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.f0dbec" [0182.946] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.f0dbec", NtPathName=0xa98fb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f1b58 [0183.009] FlushFileBuffers (hFile=0x1bd8) returned 1 [0183.017] CloseHandle (hObject=0x1bd8) returned 1 [0183.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81eff38 [0183.032] wcscpy (in: _Dest=0x81eff38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0183.032] wcscat (in: _Dest=0x81eff38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt" [0183.032] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\f0dbec-readme.txt")) returned 0x2020 [0183.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff38) returned 1 [0183.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c78) returned 1 Thread: id = 4331 os_tid = 0x1a70 [0173.700] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001")) returned 0x2020 [0173.700] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0176.780] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bd4 [0176.780] GetFileSizeEx (in: hFile=0x1bd4, lpFileSize=0xa7ef938 | out: lpFileSize=0xa7ef938*=41) returned 1 [0176.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0176.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0176.780] NtQuerySystemTime (in: CurrentTime=0xa7ef8c0 | out: CurrentTime=0xa7ef8c0*=132471540448476000) returned 0x0 [0176.780] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x2113dd5f [0176.780] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x2ebd331e [0176.780] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x23a961f9 [0176.780] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x31dd3a04 [0176.780] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x44e4f1ea [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x61cd74d3 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x167faa9a [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x74b4623c [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x183e054b [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x9310c15 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x4b51177b [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x4de06c88 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x2e7eb725 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x54cf6a3e [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x6b4b4fdc [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x1d425b9e [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x336d6e57 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0xc98c202 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x25b7c81d [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x2e7eb725 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x2e5974cd [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x26d6d61a [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x124fb9c1 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x49c0e702 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x5dbce997 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x787d2596 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x142ba0eb [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x7e4b9902 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x1bd07230 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x34ea966c [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x59961a63 [0176.781] RtlRandomEx (in: Seed=0xa7ef8b8 | out: Seed=0xa7ef8b8) returned 0x51ff4671 [0176.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8380da8 [0176.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83849b0 [0176.790] ReadFile (in: hFile=0x1bd4, lpBuffer=0x8380da8, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0xa7ef8b4, lpOverlapped=0x0 | out: lpBuffer=0x8380da8*, lpNumberOfBytesRead=0xa7ef8b4*=0x29, lpOverlapped=0x0) returned 1 [0176.792] SetFilePointerEx (in: hFile=0x1bd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.792] WriteFile (in: hFile=0x1bd4, lpBuffer=0x83849b0*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xa7ef8b8, lpOverlapped=0x0 | out: lpBuffer=0x83849b0*, lpNumberOfBytesWritten=0xa7ef8b8*=0x29, lpOverlapped=0x0) returned 1 [0182.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0182.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0182.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0182.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83849b0) returned 1 [0182.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8380da8) returned 1 [0182.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0182.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5daf8) returned 1 [0182.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77e18 [0182.954] SetFilePointerEx (in: hFile=0x1bd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.954] WriteFile (in: hFile=0x1bd4, lpBuffer=0x81df760*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa7ef92c, lpOverlapped=0x0 | out: lpBuffer=0x81df760*, lpNumberOfBytesWritten=0xa7ef92c*=0x110, lpOverlapped=0x0) returned 1 [0183.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df760) returned 1 [0183.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0183.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0183.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0183.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0183.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0183.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0183.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0183.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1b58 [0183.296] wcscpy (in: _Dest=0x81f1b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" [0183.296] wcscat (in: _Dest=0x81f1b58, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.f0dbec" [0183.296] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.f0dbec", NtPathName=0xa7ef8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8021140 [0183.300] FlushFileBuffers (hFile=0x1bd4) returned 1 [0183.302] CloseHandle (hObject=0x1bd4) returned 1 [0183.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x81eff38 [0183.304] wcscpy (in: _Dest=0x81eff38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0183.304] wcscat (in: _Dest=0x81eff38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt" [0183.304] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\f0dbec-readme.txt")) returned 0x2020 [0183.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff38) returned 1 [0183.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5968) returned 1 Thread: id = 4332 os_tid = 0x1a74 [0173.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e3de30 [0173.701] wcscpy (in: _Dest=0x3e3de30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0173.701] wcscat (in: _Dest=0x3e3de30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0173.701] wcscat (in: _Dest=0x3e3de30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*" [0173.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f138 [0173.701] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099410 [0173.701] wcscmp (_String1=".", _String2=".") returned 0 [0173.701] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.702] wcscmp (_String1="..", _String2=".") returned 1 [0173.702] wcscmp (_String1="..", _String2="..") returned 0 [0173.702] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c6cdb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x88e79960, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1 [0173.702] wcscmp (_String1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", _String2=".") returned 1 [0173.702] wcscmp (_String1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", _String2="..") returned 1 [0173.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80216e0 [0173.702] wcscpy (in: _Dest=0x80216e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0173.702] wcscat (in: _Dest=0x80216e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0173.702] wcscat (in: _Dest=0x80216e0, _Source="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" [0178.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80216e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0178.132] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c6cdb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x88e79960, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1 [0178.132] wcscmp (_String1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", _String2=".") returned 1 [0178.132] wcscmp (_String1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", _String2="..") returned 1 [0178.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80219b0 [0178.132] wcscpy (in: _Dest=0x80219b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0178.133] wcscat (in: _Dest=0x80219b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0178.133] wcscat (in: _Dest=0x80219b0, _Source="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" [0178.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80219b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0178.134] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c6cdb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x88e79960, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 0 [0178.134] FindClose (in: hFindFile=0x8099410 | out: hFindFile=0x8099410) returned 1 [0178.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f138) returned 1 [0178.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 [0178.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b2e0) returned 1 Thread: id = 4333 os_tid = 0x1a78 [0173.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx")) returned 0x20 [0173.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.709] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.709] GetLastError () returned 0x5 [0173.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d680) returned 1 Thread: id = 4334 os_tid = 0x1a7c [0173.710] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0173.711] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0176.793] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bd0 [0176.793] GetFileSizeEx (in: hFile=0x1bd0, lpFileSize=0xa9dfd40 | out: lpFileSize=0xa9dfd40*=224) returned 1 [0176.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0176.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1068 [0176.793] NtQuerySystemTime (in: CurrentTime=0xa9dfcc8 | out: CurrentTime=0xa9dfcc8*=132471540448476000) returned 0x0 [0176.793] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x68c75a58 [0176.793] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x79c5ce41 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x3ce39dee [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x53635445 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x43ba7736 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x3955cc69 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x59a598cc [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x1a12d1a4 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x624e3d9e [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x2937d7e5 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x6945035b [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x77c01fa9 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x36b267a1 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x14b275e5 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x7c453532 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x34964bed [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x56989c3e [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x532cf417 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x131ce6e3 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x7e97f78b [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x2d5ec7d4 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x30a0c08c [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x77f7a059 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x2937d7e5 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x1a12d1a4 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x737495f0 [0176.794] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x7c07c219 [0176.795] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x387b790a [0176.795] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x52a1bc66 [0176.795] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x125a420a [0176.795] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x5a184712 [0176.795] RtlRandomEx (in: Seed=0xa9dfcc0 | out: Seed=0xa9dfcc0) returned 0x585fcf45 [0176.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8388930 [0176.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x838c538 [0176.817] ReadFile (in: hFile=0x1bd0, lpBuffer=0x8388930, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xa9dfcbc, lpOverlapped=0x0 | out: lpBuffer=0x8388930*, lpNumberOfBytesRead=0xa9dfcbc*=0xe0, lpOverlapped=0x0) returned 1 [0176.819] SetFilePointerEx (in: hFile=0x1bd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.819] WriteFile (in: hFile=0x1bd0, lpBuffer=0x838c538*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xa9dfcc0, lpOverlapped=0x0 | out: lpBuffer=0x838c538*, lpNumberOfBytesWritten=0xa9dfcc0*=0xe0, lpOverlapped=0x0) returned 1 [0177.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0177.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0177.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0177.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x838c538) returned 1 [0177.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8388930) returned 1 [0177.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 [0177.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d750) returned 1 [0177.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69120 [0177.348] SetFilePointerEx (in: hFile=0x1bd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.348] WriteFile (in: hFile=0x1bd0, lpBuffer=0x30bc650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa9dfd34, lpOverlapped=0x0 | out: lpBuffer=0x30bc650*, lpNumberOfBytesWritten=0xa9dfd34*=0x10c, lpOverlapped=0x0) returned 1 [0182.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0182.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69150) returned 1 [0182.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0182.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69120) returned 1 [0182.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0182.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10b8) returned 1 [0182.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1838) returned 1 [0182.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0182.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x148a0f00 [0182.554] wcscpy (in: _Dest=0x148a0f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" [0182.554] wcscat (in: _Dest=0x148a0f00, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.f0dbec" [0182.554] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0xa9dfcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef9f90 [0182.757] FlushFileBuffers (hFile=0x1bd0) returned 1 [0182.772] CloseHandle (hObject=0x1bd0) returned 1 [0182.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x148a48e8 [0182.880] wcscpy (in: _Dest=0x148a48e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" [0182.880] wcscat (in: _Dest=0x148a48e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0182.881] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0182.881] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c00 [0182.938] WriteFile (in: hFile=0x1c00, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa9dfcdc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa9dfcdc*=0x70c, lpOverlapped=0x0) returned 1 [0183.144] CloseHandle (hObject=0x1c00) returned 1 [0183.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a48e8) returned 1 [0183.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1ef0) returned 1 Thread: id = 4335 os_tid = 0x1a80 [0173.711] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020 [0173.711] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0176.819] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bcc [0176.819] GetFileSizeEx (in: hFile=0x1bcc, lpFileSize=0xa8dfb18 | out: lpFileSize=0xa8dfb18*=272) returned 1 [0176.819] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.819] ReadFile (in: hFile=0x1bcc, lpBuffer=0xa8dfb24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa8dfb00, lpOverlapped=0x0 | out: lpBuffer=0xa8dfb24*, lpNumberOfBytesRead=0xa8dfb00*=0x4, lpOverlapped=0x0) returned 1 [0176.821] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1068 [0176.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0176.821] NtQuerySystemTime (in: CurrentTime=0xa8dfaa0 | out: CurrentTime=0xa8dfaa0*=132471540448788000) returned 0x0 [0176.821] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x3924e11d [0176.821] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x1013e5ce [0176.821] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x12c2242a [0176.821] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x7087920c [0176.821] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x7fd157cd [0176.821] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x3db5c953 [0176.821] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x26e76b24 [0176.821] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x27b38537 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x1925c34f [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x39666dbf [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x4c68344c [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x44f324b3 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x33e234ed [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x3ab4783f [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x7e15cadc [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x68b79318 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x29f7836e [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x7e71eb74 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x344c5913 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x711396d8 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x2510e7f6 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x73992fba [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x33e234ed [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x25db13c0 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x2d1b3f0d [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x7c9f2182 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x5e99d745 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x6385e29 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x2cccfe85 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x1bb653da [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0x53cb3437 [0176.822] RtlRandomEx (in: Seed=0xa8dfa98 | out: Seed=0xa8dfa98) returned 0xb57f860 [0176.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0176.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0176.895] ReadFile (in: hFile=0x1bcc, lpBuffer=0x8257478, nNumberOfBytesToRead=0x110, lpNumberOfBytesRead=0xa8dfa94, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xa8dfa94*=0x110, lpOverlapped=0x0) returned 1 [0176.895] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.895] WriteFile (in: hFile=0x1bcc, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa8dfa98, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xa8dfa98*=0x110, lpOverlapped=0x0) returned 1 [0177.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd20 [0177.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0177.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0177.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0177.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0177.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0177.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308458) returned 1 [0177.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69240 [0177.612] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.612] WriteFile (in: hFile=0x1bcc, lpBuffer=0x81df648*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa8dfb0c, lpOverlapped=0x0 | out: lpBuffer=0x81df648*, lpNumberOfBytesWritten=0xa8dfb0c*=0x10c, lpOverlapped=0x0) returned 1 [0182.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df648) returned 1 [0182.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69270) returned 1 [0182.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0182.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69240) returned 1 [0182.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd20) returned 1 [0182.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1068) returned 1 [0182.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0182.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0182.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef7fd8 [0182.952] wcscpy (in: _Dest=0x3ef7fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" [0182.952] wcscat (in: _Dest=0x3ef7fd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.f0dbec" [0182.952] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0xa8dfa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8c58 [0183.005] FlushFileBuffers (hFile=0x1bcc) returned 1 [0183.016] CloseHandle (hObject=0x1bcc) returned 1 [0183.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401710 [0183.029] wcscpy (in: _Dest=0x8401710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" [0183.029] wcscat (in: _Dest=0x8401710, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\F0DBEC-Readme.txt" [0183.029] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0183.029] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ae8 [0183.081] WriteFile (in: hFile=0x1ae8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa8dfab4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa8dfab4*=0x70c, lpOverlapped=0x0) returned 1 [0183.178] CloseHandle (hObject=0x1ae8) returned 1 [0183.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401710) returned 1 [0183.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2018) returned 1 Thread: id = 4336 os_tid = 0x1a84 [0173.712] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020 [0173.712] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0176.896] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x28fc [0176.896] GetFileSizeEx (in: hFile=0x28fc, lpFileSize=0xaf2f980 | out: lpFileSize=0xaf2f980*=224) returned 1 [0176.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0176.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0176.897] NtQuerySystemTime (in: CurrentTime=0xaf2f908 | out: CurrentTime=0xaf2f908*=132471540449568000) returned 0x0 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x6945035b [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x223088bf [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x320528c0 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x7666639f [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x347d348 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x592edcdc [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x367e38f9 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x3db5c953 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x7f0cd6c1 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x5e99d745 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x64cfb072 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x4e87977a [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x4bdfd80e [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x2db5fb91 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x7d4a8482 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x1925c34f [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x696597b1 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x46326d61 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x31c230d2 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x76cc484d [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x57d27371 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x2e5974cd [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x70177f20 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x74d7674 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x2aad4238 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x2260037a [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x7bc8e5c2 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x5f4f8b4d [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x639bbb2a [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x20ac5261 [0176.897] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x2a42cebd [0176.898] RtlRandomEx (in: Seed=0xaf2f900 | out: Seed=0xaf2f900) returned 0x3ab4783f [0176.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81824d8 [0176.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8159080 [0176.936] ReadFile (in: hFile=0x28fc, lpBuffer=0x81824d8, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xaf2f8fc, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesRead=0xaf2f8fc*=0xe0, lpOverlapped=0x0) returned 1 [0176.938] SetFilePointerEx (in: hFile=0x28fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.938] WriteFile (in: hFile=0x28fc, lpBuffer=0x8159080*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xaf2f900, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesWritten=0xaf2f900*=0xe0, lpOverlapped=0x0) returned 1 [0182.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac10 [0182.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0182.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0182.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0182.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0182.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0182.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9f58) returned 1 [0182.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69240 [0182.953] SetFilePointerEx (in: hFile=0x28fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.953] WriteFile (in: hFile=0x28fc, lpBuffer=0x81df648*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf2f974, lpOverlapped=0x0 | out: lpBuffer=0x81df648*, lpNumberOfBytesWritten=0xaf2f974*=0x10c, lpOverlapped=0x0) returned 1 [0182.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df648) returned 1 [0182.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69270) returned 1 [0182.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0182.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69240) returned 1 [0182.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0182.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0182.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0182.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0182.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8ad0 [0182.990] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" [0182.990] wcscat (in: _Dest=0x3ef8ad0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.f0dbec" [0182.990] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0xaf2f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8c58 [0183.022] FlushFileBuffers (hFile=0x28fc) returned 1 [0183.024] CloseHandle (hObject=0x28fc) returned 1 [0183.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401398 [0183.055] wcscpy (in: _Dest=0x8401398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" [0183.055] wcscat (in: _Dest=0x8401398, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\F0DBEC-Readme.txt" [0183.055] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0183.056] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28fc [0183.061] WriteFile (in: hFile=0x28fc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xaf2f91c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xaf2f91c*=0x70c, lpOverlapped=0x0) returned 1 [0183.064] CloseHandle (hObject=0x28fc) returned 1 [0183.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401398) returned 1 [0183.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2140) returned 1 Thread: id = 4337 os_tid = 0x1a88 [0173.726] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020 [0173.726] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0176.939] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f80 [0176.939] GetFileSizeEx (in: hFile=0x1f80, lpFileSize=0xb38fa78 | out: lpFileSize=0xb38fa78*=224) returned 1 [0176.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0176.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49c18 [0176.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef17e8 [0176.939] NtQuerySystemTime (in: CurrentTime=0xb38fa00 | out: CurrentTime=0xb38fa00*=132471540450036000) returned 0x0 [0176.939] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x4925591 [0176.939] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0xb160fe5 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x36c9298e [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x3af76b55 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x5a5267f3 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0xe4ce403 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x7fd157cd [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x5228f2cb [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x541590d3 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x52bd373b [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x5c1566c0 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x10744ee8 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x4eb828f7 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x49344f8b [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x5a3d2340 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0xf00061e [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x2317a805 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x7cf4d302 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x779af88a [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0xb73b5a7 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x35005c8e [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x1bfd718a [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x16db5543 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x52f065c2 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x14eeaf3b [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x74db4b08 [0176.940] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x220f73b4 [0176.941] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x71659d2a [0176.941] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x4bdea0e8 [0176.941] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x82e040c [0176.941] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x6c481edf [0176.941] RtlRandomEx (in: Seed=0xb38f9f8 | out: Seed=0xb38f9f8) returned 0x3b6f80b8 [0176.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0176.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81770c0 [0176.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8160890 [0176.963] ReadFile (in: hFile=0x1f80, lpBuffer=0x81770c0, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xb38f9f4, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0xb38f9f4*=0xe0, lpOverlapped=0x0) returned 1 [0176.966] SetFilePointerEx (in: hFile=0x1f80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.966] WriteFile (in: hFile=0x1f80, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xb38f9f8, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0xb38f9f8*=0xe0, lpOverlapped=0x0) returned 1 [0184.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0184.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0184.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0184.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0184.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0184.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32bb0) returned 1 [0184.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9a90) returned 1 [0184.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0184.664] SetFilePointerEx (in: hFile=0x1f80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.664] WriteFile (in: hFile=0x1f80, lpBuffer=0x30bc880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb38fa6c, lpOverlapped=0x0 | out: lpBuffer=0x30bc880*, lpNumberOfBytesWritten=0xb38fa6c*=0x10c, lpOverlapped=0x0) returned 1 [0189.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0189.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0189.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0189.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0189.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0189.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49c18) returned 1 [0189.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426a0) returned 1 [0189.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42740) returned 1 [0189.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403930 [0189.475] wcscpy (in: _Dest=0x8403930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" [0189.475] wcscat (in: _Dest=0x8403930, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.f0dbec" [0189.475] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0xb38f9f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa4b0 [0190.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa4b0) returned 1 [0190.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8640) returned 1 [0190.549] NtQueryInformationFile (in: FileHandle=0x1f80, IoStatusBlock=0xb38f9c8, FileInformation=0xb38f9d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb38f9c8, FileInformation=0xb38f9d0) returned 0x0 [0190.549] NtSetInformationFile (FileHandle=0x1f80, IoStatusBlock=0xb38f9c8, FileInformation=0xb38f9d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403930) returned 1 [0190.700] FlushFileBuffers (hFile=0x1f80) returned 1 [0190.717] CloseHandle (hObject=0x1f80) returned 1 [0190.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e9458 [0190.836] wcscpy (in: _Dest=0x81e9458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" [0190.836] wcscat (in: _Dest=0x81e9458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\F0DBEC-Readme.txt" [0190.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0190.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1274 [0193.710] WriteFile (in: hFile=0x1274, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb38fa14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb38fa14*=0x70c, lpOverlapped=0x0) returned 1 [0200.189] CloseHandle (hObject=0x1274) returned 1 [0205.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9458) returned 1 [0205.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2268) returned 1 Thread: id = 4338 os_tid = 0x1a8c [0173.728] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020 [0173.728] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0177.032] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x28f8 [0177.033] GetFileSizeEx (in: hFile=0x28f8, lpFileSize=0xa06fab8 | out: lpFileSize=0xa06fab8*=224) returned 1 [0177.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a848 [0177.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4abb8 [0177.033] NtQuerySystemTime (in: CurrentTime=0xa06fa40 | out: CurrentTime=0xa06fa40*=132471540450972000) returned 0x0 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x1cff616a [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x43ba7736 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x7cf4d302 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x456d160e [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x5e0fee63 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x54e9908e [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0xfc32bad [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x602293d2 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x4235e3b9 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0xa105955 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x6493b5ea [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x79d1acd9 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x1e5472be [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0xc29ba36 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x7c8dab9a [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x73034b17 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x1475283a [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x5f3aa49f [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x77cd67a5 [0177.033] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x1013e5ce [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x4e4876e4 [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x3cb113a9 [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0xa196726 [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x3664f02f [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x4b5155a2 [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x1fa7dd77 [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x6f595e50 [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x3e09eede [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x3b584432 [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x6494010a [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x504b946c [0177.034] RtlRandomEx (in: Seed=0xa06fa38 | out: Seed=0xa06fa38) returned 0x2aad4238 [0177.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0177.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816f8b0 [0177.043] ReadFile (in: hFile=0x28f8, lpBuffer=0x815cc88, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xa06fa34, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesRead=0xa06fa34*=0xe0, lpOverlapped=0x0) returned 1 [0181.289] SetFilePointerEx (in: hFile=0x28f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.289] WriteFile (in: hFile=0x28f8, lpBuffer=0x816f8b0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xa06fa38, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesWritten=0xa06fa38*=0xe0, lpOverlapped=0x0) returned 1 [0185.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0185.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0185.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0185.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0185.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0185.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32868) returned 1 [0185.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9d18) returned 1 [0185.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69840 [0185.987] SetFilePointerEx (in: hFile=0x28f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.987] WriteFile (in: hFile=0x28f8, lpBuffer=0x81e0b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa06faac, lpOverlapped=0x0 | out: lpBuffer=0x81e0b10*, lpNumberOfBytesWritten=0xa06faac*=0x10c, lpOverlapped=0x0) returned 1 [0189.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0b10) returned 1 [0189.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69870) returned 1 [0189.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0189.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69840) returned 1 [0189.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0189.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a848) returned 1 [0189.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49880) returned 1 [0189.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0189.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8df0 [0189.439] wcscpy (in: _Dest=0x3dd8df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" [0189.439] wcscat (in: _Dest=0x3dd8df0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.f0dbec" [0189.439] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.f0dbec", NtPathName=0xa06fa30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa5f8 [0190.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa5f8) returned 1 [0190.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f4590) returned 1 [0190.544] NtQueryInformationFile (in: FileHandle=0x28f8, IoStatusBlock=0xa06fa08, FileInformation=0xa06fa10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa06fa08, FileInformation=0xa06fa10) returned 0x0 [0190.544] NtSetInformationFile (FileHandle=0x28f8, IoStatusBlock=0xa06fa08, FileInformation=0xa06fa10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8df0) returned 1 [0190.688] FlushFileBuffers (hFile=0x28f8) returned 1 [0190.712] CloseHandle (hObject=0x28f8) returned 1 [0190.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e8d68 [0190.832] wcscpy (in: _Dest=0x81e8d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" [0190.832] wcscat (in: _Dest=0x81e8d68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\F0DBEC-Readme.txt" [0190.832] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\f0dbec-readme.txt")) returned 0xffffffff [0190.832] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1550 [0193.708] WriteFile (in: hFile=0x1550, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa06fa54, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa06fa54*=0x70c, lpOverlapped=0x0) returned 1 [0200.161] CloseHandle (hObject=0x1550) returned 1 [0205.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8d68) returned 1 [0205.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2458) returned 1 Thread: id = 4339 os_tid = 0x1a90 [0173.729] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020 [0173.729] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0177.043] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2908 [0177.044] GetFileSizeEx (in: hFile=0x2908, lpFileSize=0xa7afc78 | out: lpFileSize=0xa7afc78*=234) returned 1 [0177.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4abb8 [0177.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0177.044] NtQuerySystemTime (in: CurrentTime=0xa7afc00 | out: CurrentTime=0xa7afc00*=132471540450972000) returned 0x0 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x18966251 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x62edd406 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x664b1a27 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x2bb75e14 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x3a3b98d2 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x7780a467 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x3560a1e0 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x38214377 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x49aee43 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0xda9415e [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x6d3075f6 [0177.044] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x1e590f74 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x5297b468 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x7a474702 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x7b485b82 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x69c4b815 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0xd2e1a6c [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x4f14e9a6 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x71ff91a5 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x1660dcfd [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x2634b0a1 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x167bd0e2 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x4a36bf16 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x1fe13bfa [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x20ac5261 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x5a184712 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x37fee4ff [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x1ae63288 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x7d755d42 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x3447fa55 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x31555068 [0177.045] RtlRandomEx (in: Seed=0xa7afbf8 | out: Seed=0xa7afbf8) returned 0x1660dcfd [0177.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8390140 [0177.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8393d48 [0177.056] ReadFile (in: hFile=0x2908, lpBuffer=0x8390140, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xa7afbf4, lpOverlapped=0x0 | out: lpBuffer=0x8390140*, lpNumberOfBytesRead=0xa7afbf4*=0xea, lpOverlapped=0x0) returned 1 [0181.798] SetFilePointerEx (in: hFile=0x2908, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.799] WriteFile (in: hFile=0x2908, lpBuffer=0x8393d48*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa7afbf8, lpOverlapped=0x0 | out: lpBuffer=0x8393d48*, lpNumberOfBytesWritten=0xa7afbf8*=0xea, lpOverlapped=0x0) returned 1 [0185.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0185.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0185.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0185.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8393d48) returned 1 [0185.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8390140) returned 1 [0185.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0185.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9ec8) returned 1 [0185.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69960 [0185.692] SetFilePointerEx (in: hFile=0x2908, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.692] WriteFile (in: hFile=0x2908, lpBuffer=0x81e07c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa7afc6c, lpOverlapped=0x0 | out: lpBuffer=0x81e07c8*, lpNumberOfBytesWritten=0xa7afc6c*=0x10c, lpOverlapped=0x0) returned 1 [0189.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e07c8) returned 1 [0189.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69990) returned 1 [0189.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0189.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69960) returned 1 [0189.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0189.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4abb8) returned 1 [0189.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0189.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d98) returned 1 [0189.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8ad0 [0189.431] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" [0189.432] wcscat (in: _Dest=0x3ef8ad0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.f0dbec" [0189.432] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0xa7afbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa888 [0190.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa888) returned 1 [0190.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f7b78) returned 1 [0190.538] NtQueryInformationFile (in: FileHandle=0x2908, IoStatusBlock=0xa7afbc8, FileInformation=0xa7afbd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa7afbc8, FileInformation=0xa7afbd0) returned 0x0 [0190.538] NtSetInformationFile (FileHandle=0x2908, IoStatusBlock=0xa7afbc8, FileInformation=0xa7afbd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8ad0) returned 1 [0190.677] FlushFileBuffers (hFile=0x2908) returned 1 [0190.710] CloseHandle (hObject=0x2908) returned 1 [0190.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e90e0 [0190.830] wcscpy (in: _Dest=0x81e90e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" [0190.830] wcscat (in: _Dest=0x81e90e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\F0DBEC-Readme.txt" [0190.830] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0190.830] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xad0 [0193.708] WriteFile (in: hFile=0xad0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa7afc14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa7afc14*=0x70c, lpOverlapped=0x0) returned 1 [0200.163] CloseHandle (hObject=0xad0) returned 1 [0205.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e90e0) returned 1 [0205.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2580) returned 1 Thread: id = 4340 os_tid = 0x1a94 [0173.730] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020 [0173.730] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0177.056] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2904 [0177.056] GetFileSizeEx (in: hFile=0x2904, lpFileSize=0x47bfc10 | out: lpFileSize=0x47bfc10*=274) returned 1 [0177.057] SetFilePointerEx (in: hFile=0x2904, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.057] ReadFile (in: hFile=0x2904, lpBuffer=0x47bfc1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x47bfbf8, lpOverlapped=0x0 | out: lpBuffer=0x47bfc1c*, lpNumberOfBytesRead=0x47bfbf8*=0x4, lpOverlapped=0x0) returned 1 [0181.801] SetFilePointerEx (in: hFile=0x2904, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0181.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0181.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42880 [0181.801] NtQuerySystemTime (in: CurrentTime=0x47bfb98 | out: CurrentTime=0x47bfb98*=132471540497772000) returned 0x0 [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x2d0340db [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x12b313db [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x63f58e90 [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x77ef6c82 [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x6d8eee02 [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x3c34db7c [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x367ccda8 [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x6e1c34d9 [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0xdbd4f34 [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x3c34db7c [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x659703cc [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x3c3c2279 [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x5680e69a [0181.801] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x1b61b062 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x5ff8c5ad [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x568b120b [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x48f00610 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x48114602 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x197ecd05 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x1abc7a83 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x3c1ba5b8 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x128f22c6 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x270339bc [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x185a2438 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x304d7cce [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x75f44d25 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x180917ef [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x1320d32d [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x4bf34390 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x17b52b03 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x206fee04 [0181.802] RtlRandomEx (in: Seed=0x47bfb90 | out: Seed=0x47bfb90) returned 0x2f689a5b [0181.816] ReadFile (in: hFile=0x2904, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0x112, lpNumberOfBytesRead=0x47bfb8c, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0x47bfb8c*=0x112, lpOverlapped=0x0) returned 1 [0181.816] SetFilePointerEx (in: hFile=0x2904, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.816] WriteFile (in: hFile=0x2904, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x47bfb90, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0x47bfb90*=0x112, lpOverlapped=0x0) returned 1 [0185.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0185.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0185.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0185.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0185.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0185.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e80) returned 1 [0185.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83091d8) returned 1 [0185.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e698a0 [0185.746] SetFilePointerEx (in: hFile=0x2904, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.746] WriteFile (in: hFile=0x2904, lpBuffer=0x81e08e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x47bfc04, lpOverlapped=0x0 | out: lpBuffer=0x81e08e0*, lpNumberOfBytesWritten=0x47bfc04*=0x10c, lpOverlapped=0x0) returned 1 [0189.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e08e0) returned 1 [0189.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698d0) returned 1 [0189.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0189.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698a0) returned 1 [0189.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0189.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0189.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42808) returned 1 [0189.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42790) returned 1 [0189.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8860 [0189.435] wcscpy (in: _Dest=0x3ef8860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" [0189.435] wcscat (in: _Dest=0x3ef8860, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.f0dbec" [0189.435] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0x47bfb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa740 [0190.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa740) returned 1 [0190.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8418) returned 1 [0190.541] NtQueryInformationFile (in: FileHandle=0x2904, IoStatusBlock=0x47bfb60, FileInformation=0x47bfb68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x47bfb60, FileInformation=0x47bfb68) returned 0x0 [0190.541] NtSetInformationFile (FileHandle=0x2904, IoStatusBlock=0x47bfb60, FileInformation=0x47bfb68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8860) returned 1 [0190.680] FlushFileBuffers (hFile=0x2904) returned 1 [0190.698] CloseHandle (hObject=0x2904) returned 1 [0190.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e8e90 [0190.827] wcscpy (in: _Dest=0x81e8e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" [0190.827] wcscat (in: _Dest=0x81e8e90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\F0DBEC-Readme.txt" [0190.827] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0190.827] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560 [0193.709] WriteFile (in: hFile=0x560, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x47bfbac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x47bfbac*=0x70c, lpOverlapped=0x0) returned 1 [0200.185] CloseHandle (hObject=0x560) returned 1 [0205.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8e90) returned 1 [0205.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d26a8) returned 1 Thread: id = 4341 os_tid = 0x1a9c [0173.732] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0173.733] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0177.065] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc8 [0177.065] GetFileSizeEx (in: hFile=0x1bc8, lpFileSize=0xaaafef8 | out: lpFileSize=0xaaafef8*=214) returned 1 [0177.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0177.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0177.066] NtQuerySystemTime (in: CurrentTime=0xaaafe80 | out: CurrentTime=0xaaafe80*=132471540451284000) returned 0x0 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x1096b971 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0xd374392 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x121d3f7e [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x53cb3437 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x5cac0d57 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x6ff9c818 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x4c343ac7 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x45570ae0 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x5297b468 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x1118e620 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x592edcdc [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x7ba3223c [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x3eefd31d [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x6446ed97 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x793d5bc [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x585fcf45 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0xb717db9 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x58b0260c [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x3ce39dee [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x387e4030 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0xd2e1a6c [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x6d1b6255 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x320a1f21 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x32be2f74 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x6ef56f20 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x590fecb4 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x102b0e3b [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x1fe13bfa [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x3b584432 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x7d1fabc2 [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x800586d [0177.066] RtlRandomEx (in: Seed=0xaaafe78 | out: Seed=0xaaafe78) returned 0x382798ad [0177.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8397950 [0177.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x839b558 [0177.075] ReadFile (in: hFile=0x1bc8, lpBuffer=0x8397950, nNumberOfBytesToRead=0xd6, lpNumberOfBytesRead=0xaaafe74, lpOverlapped=0x0 | out: lpBuffer=0x8397950*, lpNumberOfBytesRead=0xaaafe74*=0xd6, lpOverlapped=0x0) returned 1 [0181.818] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.819] WriteFile (in: hFile=0x1bc8, lpBuffer=0x839b558*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0xaaafe78, lpOverlapped=0x0 | out: lpBuffer=0x839b558*, lpNumberOfBytesWritten=0xaaafe78*=0xd6, lpOverlapped=0x0) returned 1 [0189.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1068 [0189.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef10b8 [0189.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10b8) returned 1 [0189.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x839b558) returned 1 [0189.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8397950) returned 1 [0189.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 [0189.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9bb0) returned 1 [0189.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69720 [0189.052] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.052] WriteFile (in: hFile=0x1bc8, lpBuffer=0x81dfaa8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaaafeec, lpOverlapped=0x0 | out: lpBuffer=0x81dfaa8*, lpNumberOfBytesWritten=0xaaafeec*=0x10c, lpOverlapped=0x0) returned 1 [0189.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfaa8) returned 1 [0189.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0189.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10b8) returned 1 [0189.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0189.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1068) returned 1 [0189.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0189.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0189.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2120) returned 1 [0189.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8403ba0 [0189.494] wcscpy (in: _Dest=0x8403ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" [0189.494] wcscat (in: _Dest=0x8403ba0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.f0dbec" [0189.494] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.f0dbec", NtPathName=0xaaafe70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3efa220 [0190.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa220) returned 1 [0190.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07408) returned 1 [0190.567] NtQueryInformationFile (in: FileHandle=0x1bc8, IoStatusBlock=0xaaafe48, FileInformation=0xaaafe50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaaafe48, FileInformation=0xaaafe50) returned 0x0 [0190.567] NtSetInformationFile (FileHandle=0x1bc8, IoStatusBlock=0xaaafe48, FileInformation=0xaaafe50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403ba0) returned 1 [0190.715] FlushFileBuffers (hFile=0x1bc8) returned 1 [0190.739] CloseHandle (hObject=0x1bc8) returned 1 [0190.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404080 [0190.841] wcscpy (in: _Dest=0x8404080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" [0190.841] wcscat (in: _Dest=0x8404080, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\F0DBEC-Readme.txt" [0190.841] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\f0dbec-readme.txt")) returned 0xffffffff [0190.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc4c [0193.711] WriteFile (in: hFile=0xc4c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xaaafe94, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xaaafe94*=0x70c, lpOverlapped=0x0) returned 1 [0200.192] CloseHandle (hObject=0xc4c) returned 1 [0205.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404080) returned 1 [0205.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d27d0) returned 1 Thread: id = 4342 os_tid = 0x1aa0 [0173.733] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0173.733] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0177.078] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc4 [0177.079] GetFileSizeEx (in: hFile=0x1bc4, lpFileSize=0xb4bff78 | out: lpFileSize=0xb4bff78*=215) returned 1 [0177.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0177.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1a18 [0177.079] NtQuerySystemTime (in: CurrentTime=0xb4bff00 | out: CurrentTime=0xb4bff00*=132471540451440000) returned 0x0 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x5333e1c5 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x89221b5 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x5a9a73c1 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x206fee04 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x71f7c5c [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x2a58af69 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x4826902d [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x56989c3e [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x2b333357 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x155e584f [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x3f349dfc [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x3ce15b0f [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x5835fcb8 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x721a6898 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x7840ce55 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x7006ba0e [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x491dde8b [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x25a2ea49 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x67ec637 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x1f9b8602 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x30c2ae8e [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x767e06d0 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x6b0600ec [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x54fb3bc4 [0177.079] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0xe5d084e [0177.080] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0xda9415e [0177.080] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x36c9298e [0177.080] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0xd374392 [0177.080] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x6bf4ecbe [0177.080] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x4847f8e1 [0177.080] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x5835fcb8 [0177.080] RtlRandomEx (in: Seed=0xb4bfef8 | out: Seed=0xb4bfef8) returned 0x61636055 [0177.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x839f160 [0177.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83a2d68 [0177.088] ReadFile (in: hFile=0x1bc4, lpBuffer=0x839f160, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0xb4bfef4, lpOverlapped=0x0 | out: lpBuffer=0x839f160*, lpNumberOfBytesRead=0xb4bfef4*=0xd7, lpOverlapped=0x0) returned 1 [0181.821] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.821] WriteFile (in: hFile=0x1bc4, lpBuffer=0x83a2d68*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0xb4bfef8, lpOverlapped=0x0 | out: lpBuffer=0x83a2d68*, lpNumberOfBytesWritten=0xb4bfef8*=0xd7, lpOverlapped=0x0) returned 1 [0189.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32c8 [0189.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0189.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0189.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83a2d68) returned 1 [0189.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x839f160) returned 1 [0189.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e08) returned 1 [0189.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9d60) returned 1 [0189.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0189.170] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.170] WriteFile (in: hFile=0x1bc4, lpBuffer=0x81e0f70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb4bff6c, lpOverlapped=0x0 | out: lpBuffer=0x81e0f70*, lpNumberOfBytesWritten=0xb4bff6c*=0x10c, lpOverlapped=0x0) returned 1 [0189.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0f70) returned 1 [0189.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0189.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0189.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0189.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32c8) returned 1 [0189.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0189.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0189.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1108) returned 1 [0189.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8403e10 [0189.501] wcscpy (in: _Dest=0x8403e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" [0189.501] wcscat (in: _Dest=0x8403e10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.f0dbec" [0189.501] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.f0dbec", NtPathName=0xb4bfef0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef9f90 [0190.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9f90) returned 1 [0190.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e046c0) returned 1 [0190.572] NtQueryInformationFile (in: FileHandle=0x1bc4, IoStatusBlock=0xb4bfec8, FileInformation=0xb4bfed0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb4bfec8, FileInformation=0xb4bfed0) returned 0x0 [0190.572] NtSetInformationFile (FileHandle=0x1bc4, IoStatusBlock=0xb4bfec8, FileInformation=0xb4bfed0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403e10) returned 1 [0190.722] FlushFileBuffers (hFile=0x1bc4) returned 1 [0190.751] CloseHandle (hObject=0x1bc4) returned 1 [0190.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8403cd8 [0190.847] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" [0190.847] wcscat (in: _Dest=0x8403cd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\F0DBEC-Readme.txt" [0190.847] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\f0dbec-readme.txt")) returned 0xffffffff [0190.847] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13dc [0193.706] WriteFile (in: hFile=0x13dc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb4bff14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb4bff14*=0x70c, lpOverlapped=0x0) returned 1 [0196.448] CloseHandle (hObject=0x13dc) returned 1 [0197.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403cd8) returned 1 [0197.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d28f8) returned 1 Thread: id = 4343 os_tid = 0x1aa4 [0173.734] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020 [0173.734] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0177.092] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc0 [0177.092] GetFileSizeEx (in: hFile=0x1bc0, lpFileSize=0xaf7fc20 | out: lpFileSize=0xaf7fc20*=223) returned 1 [0177.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1a18 [0177.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0177.092] NtQuerySystemTime (in: CurrentTime=0xaf7fba8 | out: CurrentTime=0xaf7fba8*=132471540451596000) returned 0x0 [0177.092] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x5861e566 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x517b2a0c [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x41c5f086 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0xd59ed4 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x6d9d3541 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x66fd018e [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x37fee4ff [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x79c6bcc2 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x3ce15b0f [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x6cc3b6ea [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x48837ecf [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x4229c82b [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x12c2242a [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x347d348 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x4710939b [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x3cd9e9e5 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x57385b6 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x4ad9b7c8 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x6d49dc8f [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x58f2ad25 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x7df73650 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x501ce679 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x7a474702 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x7b170176 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x638fc727 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x27b28d0c [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x7a24a503 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x38214377 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x5cf8ff9b [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0xa196726 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x3d919af2 [0177.093] RtlRandomEx (in: Seed=0xaf7fba0 | out: Seed=0xaf7fba0) returned 0x1f86eab8 [0177.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83a6970 [0177.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83aa578 [0177.102] ReadFile (in: hFile=0x1bc0, lpBuffer=0x83a6970, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0xaf7fb9c, lpOverlapped=0x0 | out: lpBuffer=0x83a6970*, lpNumberOfBytesRead=0xaf7fb9c*=0xdf, lpOverlapped=0x0) returned 1 [0181.823] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.823] WriteFile (in: hFile=0x1bc0, lpBuffer=0x83aa578*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0xaf7fba0, lpOverlapped=0x0 | out: lpBuffer=0x83aa578*, lpNumberOfBytesWritten=0xaf7fba0*=0xdf, lpOverlapped=0x0) returned 1 [0189.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0189.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0189.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0189.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83aa578) returned 1 [0189.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83a6970) returned 1 [0189.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b28) returned 1 [0189.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dfa108) returned 1 [0189.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69660 [0189.171] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.172] WriteFile (in: hFile=0x1bc0, lpBuffer=0x81e1088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf7fc14, lpOverlapped=0x0 | out: lpBuffer=0x81e1088*, lpNumberOfBytesWritten=0xaf7fc14*=0x10c, lpOverlapped=0x0) returned 1 [0189.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1088) returned 1 [0189.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69690) returned 1 [0189.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0189.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69660) returned 1 [0189.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0189.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1a18) returned 1 [0189.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0189.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0189.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403cd8 [0189.500] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" [0189.500] wcscat (in: _Dest=0x8403cd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.f0dbec" [0189.500] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0xaf7fb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa0d8 [0190.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa0d8) returned 1 [0190.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09238) returned 1 [0190.570] NtQueryInformationFile (in: FileHandle=0x1bc0, IoStatusBlock=0xaf7fb70, FileInformation=0xaf7fb78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaf7fb70, FileInformation=0xaf7fb78) returned 0x0 [0190.570] NtSetInformationFile (FileHandle=0x1bc0, IoStatusBlock=0xaf7fb70, FileInformation=0xaf7fb78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403cd8) returned 1 [0190.719] FlushFileBuffers (hFile=0x1bc0) returned 1 [0190.733] CloseHandle (hObject=0x1bc0) returned 1 [0190.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81eb648 [0190.838] wcscpy (in: _Dest=0x81eb648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" [0190.838] wcscat (in: _Dest=0x81eb648, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\F0DBEC-Readme.txt" [0190.838] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0190.839] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1548 [0193.710] WriteFile (in: hFile=0x1548, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xaf7fbbc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xaf7fbbc*=0x70c, lpOverlapped=0x0) returned 1 [0200.191] CloseHandle (hObject=0x1548) returned 1 [0205.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb648) returned 1 [0205.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2a20) returned 1 Thread: id = 4344 os_tid = 0x1aa8 [0173.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334f60 [0173.737] wcscpy (in: _Dest=0x8334f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0173.737] wcscat (in: _Dest=0x8334f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" [0173.737] wcscat (in: _Dest=0x8334f60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*" [0173.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e798 [0173.737] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*", lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0173.737] wcscmp (_String1=".", _String2=".") returned 0 [0173.737] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.737] wcscmp (_String1="..", _String2=".") returned 1 [0173.737] wcscmp (_String1="..", _String2="..") returned 0 [0173.738] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3b3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0173.738] wcscmp (_String1="messages.json", _String2=".") returned 1 [0173.738] wcscmp (_String1="messages.json", _String2="..") returned 1 [0173.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d81d8 [0173.738] wcscpy (in: _Dest=0x81d81d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0173.738] wcscat (in: _Dest=0x81d81d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" [0173.738] wcscat (in: _Dest=0x81d81d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" [0175.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d81d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d0 [0175.684] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3b3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0175.684] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0175.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e798) returned 1 [0175.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334f60) returned 1 [0175.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6410) returned 1 Thread: id = 4345 os_tid = 0x1ab0 [0173.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335068 [0173.739] wcscpy (in: _Dest=0x8335068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0173.739] wcscat (in: _Dest=0x8335068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" [0173.739] wcscat (in: _Dest=0x8335068, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*" [0173.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e2c8 [0173.739] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*", lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0176.235] wcscmp (_String1=".", _String2=".") returned 0 [0176.235] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.235] wcscmp (_String1="..", _String2=".") returned 1 [0176.235] wcscmp (_String1="..", _String2="..") returned 0 [0176.235] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.235] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.235] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e2e90 [0176.235] wcscpy (in: _Dest=0x81e2e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0176.235] wcscat (in: _Dest=0x81e2e90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" [0176.235] wcscat (in: _Dest=0x81e2e90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" [0177.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e2e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0177.844] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.844] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0177.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e2c8) returned 1 [0177.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335068) returned 1 [0177.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6308) returned 1 Thread: id = 4346 os_tid = 0x1ab4 [0173.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335170 [0173.740] wcscpy (in: _Dest=0x8335170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0173.740] wcscat (in: _Dest=0x8335170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" [0173.740] wcscat (in: _Dest=0x8335170, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*" [0173.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090948 [0173.740] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*", lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098850 [0175.754] wcscmp (_String1=".", _String2=".") returned 0 [0175.755] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.755] wcscmp (_String1="..", _String2=".") returned 1 [0175.755] wcscmp (_String1="..", _String2="..") returned 0 [0175.755] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.755] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.755] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e2428 [0175.755] wcscpy (in: _Dest=0x81e2428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0175.755] wcscat (in: _Dest=0x81e2428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" [0175.755] wcscat (in: _Dest=0x81e2428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" [0177.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e2428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0177.918] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.918] FindClose (in: hFindFile=0x8098850 | out: hFindFile=0x8098850) returned 1 [0177.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090948) returned 1 [0177.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335170) returned 1 [0177.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6200) returned 1 Thread: id = 4347 os_tid = 0x1ab8 [0173.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335278 [0173.741] wcscpy (in: _Dest=0x8335278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0173.741] wcscat (in: _Dest=0x8335278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" [0173.741] wcscat (in: _Dest=0x8335278, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*" [0173.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fad8 [0173.741] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*", lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80995d0 [0175.755] wcscmp (_String1=".", _String2=".") returned 0 [0175.755] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.755] wcscmp (_String1="..", _String2=".") returned 1 [0175.755] wcscmp (_String1="..", _String2="..") returned 0 [0175.755] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.755] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.755] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e2550 [0175.755] wcscpy (in: _Dest=0x81e2550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0175.755] wcscat (in: _Dest=0x81e2550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" [0175.756] wcscat (in: _Dest=0x81e2550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" [0177.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e2550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0177.921] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.921] FindClose (in: hFindFile=0x80995d0 | out: hFindFile=0x80995d0) returned 1 [0177.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fad8) returned 1 [0177.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335278) returned 1 [0177.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60f8) returned 1 Thread: id = 4348 os_tid = 0x1abc [0173.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335380 [0173.741] wcscpy (in: _Dest=0x8335380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0173.742] wcscat (in: _Dest=0x8335380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" [0173.742] wcscat (in: _Dest=0x8335380, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*" [0173.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090478 [0173.742] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*", lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38158 [0176.218] wcscmp (_String1=".", _String2=".") returned 0 [0176.218] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.218] wcscmp (_String1="..", _String2=".") returned 1 [0176.218] wcscmp (_String1="..", _String2="..") returned 0 [0176.218] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.218] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.221] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e27a0 [0176.221] wcscpy (in: _Dest=0x81e27a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0176.222] wcscat (in: _Dest=0x81e27a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" [0176.223] wcscat (in: _Dest=0x81e27a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" [0178.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e27a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0178.514] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.514] FindClose (in: hFindFile=0x3f38158 | out: hFindFile=0x3f38158) returned 1 [0178.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090478) returned 1 [0178.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335380) returned 1 [0178.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 Thread: id = 4349 os_tid = 0x1ac4 [0173.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335488 [0173.742] wcscpy (in: _Dest=0x8335488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0173.742] wcscat (in: _Dest=0x8335488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" [0173.742] wcscat (in: _Dest=0x8335488, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*" [0173.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fd40 [0173.742] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*", lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38118 [0176.226] wcscmp (_String1=".", _String2=".") returned 0 [0176.226] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.226] wcscmp (_String1="..", _String2=".") returned 1 [0176.226] wcscmp (_String1="..", _String2="..") returned 0 [0176.226] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3df9aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.226] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.226] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e28c8 [0176.227] wcscpy (in: _Dest=0x81e28c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0176.227] wcscat (in: _Dest=0x81e28c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" [0176.227] wcscat (in: _Dest=0x81e28c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" [0178.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e28c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a38 [0178.516] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3df9aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.516] FindClose (in: hFindFile=0x3f38118 | out: hFindFile=0x3f38118) returned 1 [0178.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fd40) returned 1 [0178.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335488) returned 1 [0178.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ee8) returned 1 Thread: id = 4350 os_tid = 0x1ac8 [0173.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334d50 [0173.743] wcscpy (in: _Dest=0x8334d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0173.743] wcscat (in: _Dest=0x8334d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" [0173.743] wcscat (in: _Dest=0x8334d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*" [0173.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090210 [0173.743] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*", lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0176.227] wcscmp (_String1=".", _String2=".") returned 0 [0176.227] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.227] wcscmp (_String1="..", _String2=".") returned 1 [0176.227] wcscmp (_String1="..", _String2="..") returned 0 [0176.227] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.227] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.227] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e29f0 [0176.227] wcscpy (in: _Dest=0x81e29f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0176.227] wcscat (in: _Dest=0x81e29f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" [0176.227] wcscat (in: _Dest=0x81e29f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" [0178.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e29f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba0 [0178.519] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.519] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0178.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090210) returned 1 [0178.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334d50) returned 1 [0178.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 Thread: id = 4351 os_tid = 0x1acc [0173.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3dec5f8 [0173.744] wcscpy (in: _Dest=0x3dec5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0173.744] wcscat (in: _Dest=0x3dec5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" [0173.744] wcscat (in: _Dest=0x3dec5f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*" [0173.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e980 [0173.744] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*", lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d98 [0176.228] wcscmp (_String1=".", _String2=".") returned 0 [0176.228] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.228] wcscmp (_String1="..", _String2=".") returned 1 [0176.228] wcscmp (_String1="..", _String2="..") returned 0 [0176.228] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.228] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.228] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e2b18 [0176.228] wcscpy (in: _Dest=0x81e2b18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0176.228] wcscat (in: _Dest=0x81e2b18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" [0176.228] wcscat (in: _Dest=0x81e2b18, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" [0178.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e2b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0178.521] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.522] FindClose (in: hFindFile=0x3f37d98 | out: hFindFile=0x3f37d98) returned 1 [0178.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e980) returned 1 [0178.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0178.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cd8) returned 1 Thread: id = 4352 os_tid = 0x1ad0 [0173.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8348488 [0173.745] wcscpy (in: _Dest=0x8348488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0173.745] wcscat (in: _Dest=0x8348488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" [0173.745] wcscat (in: _Dest=0x8348488, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*" [0173.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ebe8 [0173.745] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*", lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f18 [0176.228] wcscmp (_String1=".", _String2=".") returned 0 [0176.228] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.228] wcscmp (_String1="..", _String2=".") returned 1 [0176.229] wcscmp (_String1="..", _String2="..") returned 0 [0176.229] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6c690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.229] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.229] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e2c40 [0176.229] wcscpy (in: _Dest=0x81e2c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0176.229] wcscat (in: _Dest=0x81e2c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" [0176.229] wcscat (in: _Dest=0x81e2c40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" [0178.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e2c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b8 [0178.524] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6c690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.524] FindClose (in: hFindFile=0x3f37f18 | out: hFindFile=0x3f37f18) returned 1 [0178.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ebe8) returned 1 [0178.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348488) returned 1 [0178.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 Thread: id = 4353 os_tid = 0x1ad8 [0173.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334e58 [0173.746] wcscpy (in: _Dest=0x8334e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0173.746] wcscat (in: _Dest=0x8334e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" [0173.746] wcscat (in: _Dest=0x8334e58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*" [0173.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ee50 [0173.746] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*", lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0175.754] wcscmp (_String1=".", _String2=".") returned 0 [0175.754] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.754] wcscmp (_String1="..", _String2=".") returned 1 [0175.754] wcscmp (_String1="..", _String2="..") returned 0 [0175.754] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.754] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.754] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e2300 [0175.754] wcscpy (in: _Dest=0x81e2300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0175.754] wcscat (in: _Dest=0x81e2300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" [0175.754] wcscat (in: _Dest=0x81e2300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" [0179.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e2300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ccc [0179.385] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.385] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0179.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ee50) returned 1 [0179.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334e58) returned 1 [0179.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef56a8) returned 1 Thread: id = 4354 os_tid = 0x1ae0 [0173.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x83485a0 [0173.752] wcscpy (in: _Dest=0x83485a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0173.752] wcscat (in: _Dest=0x83485a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" [0173.752] wcscat (in: _Dest=0x83485a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*" [0173.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f0b8 [0173.752] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*", lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0176.250] wcscmp (_String1=".", _String2=".") returned 0 [0176.250] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.250] wcscmp (_String1="..", _String2=".") returned 1 [0176.250] wcscmp (_String1="..", _String2="..") returned 0 [0176.250] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.250] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.250] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8186c70 [0176.250] wcscpy (in: _Dest=0x8186c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0176.251] wcscat (in: _Dest=0x8186c70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" [0176.251] wcscat (in: _Dest=0x8186c70, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" [0177.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0177.877] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.877] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0177.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f0b8) returned 1 [0177.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83485a0) returned 1 [0177.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 Thread: id = 4355 os_tid = 0x1ae8 [0173.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333068 [0173.760] wcscpy (in: _Dest=0x8333068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0173.760] wcscat (in: _Dest=0x8333068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" [0173.760] wcscat (in: _Dest=0x8333068, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*" [0173.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f320 [0173.761] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*", lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38098 [0176.250] wcscmp (_String1=".", _String2=".") returned 0 [0176.250] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.250] wcscmp (_String1="..", _String2=".") returned 1 [0176.250] wcscmp (_String1="..", _String2="..") returned 0 [0176.250] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb8180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.250] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.250] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8186b48 [0176.250] wcscpy (in: _Dest=0x8186b48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0176.250] wcscat (in: _Dest=0x8186b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" [0176.250] wcscat (in: _Dest=0x8186b48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" [0177.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0177.874] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb8180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.874] FindClose (in: hFindFile=0x3f38098 | out: hFindFile=0x3f38098) returned 1 [0177.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f320) returned 1 [0177.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333068) returned 1 [0177.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054c00) returned 1 Thread: id = 4356 os_tid = 0x1aec [0173.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333380 [0173.761] wcscpy (in: _Dest=0x8333380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0173.761] wcscat (in: _Dest=0x8333380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" [0173.761] wcscat (in: _Dest=0x8333380, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*" [0173.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f588 [0173.761] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*", lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0176.249] wcscmp (_String1=".", _String2=".") returned 0 [0176.249] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.249] wcscmp (_String1="..", _String2=".") returned 1 [0176.249] wcscmp (_String1="..", _String2="..") returned 0 [0176.249] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.249] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.249] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8186a20 [0176.249] wcscpy (in: _Dest=0x8186a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0176.249] wcscat (in: _Dest=0x8186a20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" [0176.249] wcscat (in: _Dest=0x8186a20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" [0177.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0177.872] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.872] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0177.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f588) returned 1 [0177.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333380) returned 1 [0177.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054d08) returned 1 Thread: id = 4357 os_tid = 0x1af0 [0173.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333488 [0173.762] wcscpy (in: _Dest=0x8333488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0173.762] wcscat (in: _Dest=0x8333488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" [0173.762] wcscat (in: _Dest=0x8333488, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*" [0173.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f7f0 [0173.762] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*", lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f383d8 [0176.248] wcscmp (_String1=".", _String2=".") returned 0 [0176.248] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.248] wcscmp (_String1="..", _String2=".") returned 1 [0176.248] wcscmp (_String1="..", _String2="..") returned 0 [0176.248] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f76860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.249] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.249] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81868f8 [0176.249] wcscpy (in: _Dest=0x81868f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0176.249] wcscat (in: _Dest=0x81868f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" [0176.249] wcscat (in: _Dest=0x81868f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" [0177.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81868f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0177.869] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f76860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.869] FindClose (in: hFindFile=0x3f383d8 | out: hFindFile=0x3f383d8) returned 1 [0177.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f7f0) returned 1 [0177.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333488) returned 1 [0177.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054e10) returned 1 Thread: id = 4358 os_tid = 0x1b04 [0173.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8333590 [0173.763] wcscpy (in: _Dest=0x8333590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0173.763] wcscat (in: _Dest=0x8333590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" [0173.763] wcscat (in: _Dest=0x8333590, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*" [0173.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805fa58 [0173.763] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*", lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0176.248] wcscmp (_String1=".", _String2=".") returned 0 [0176.248] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.248] wcscmp (_String1="..", _String2=".") returned 1 [0176.248] wcscmp (_String1="..", _String2="..") returned 0 [0176.248] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.248] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.248] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81867d0 [0176.248] wcscpy (in: _Dest=0x81867d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0176.248] wcscat (in: _Dest=0x81867d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" [0176.248] wcscat (in: _Dest=0x81867d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" [0177.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81867d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0177.867] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.867] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0177.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805fa58) returned 1 [0177.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333590) returned 1 [0177.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054f18) returned 1 Thread: id = 4359 os_tid = 0x1b08 [0173.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333698 [0173.764] wcscpy (in: _Dest=0x8333698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0173.764] wcscat (in: _Dest=0x8333698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" [0173.764] wcscat (in: _Dest=0x8333698, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*" [0173.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805fcc0 [0173.764] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*", lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0176.247] wcscmp (_String1=".", _String2=".") returned 0 [0176.247] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.247] wcscmp (_String1="..", _String2=".") returned 1 [0176.247] wcscmp (_String1="..", _String2="..") returned 0 [0176.247] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.247] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.247] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81866a8 [0176.247] wcscpy (in: _Dest=0x81866a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0176.247] wcscat (in: _Dest=0x81866a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" [0176.247] wcscat (in: _Dest=0x81866a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" [0177.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81866a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0177.864] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.864] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0177.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805fcc0) returned 1 [0177.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333698) returned 1 [0177.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055020) returned 1 Thread: id = 4360 os_tid = 0x1b0c [0173.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83337a0 [0173.776] wcscpy (in: _Dest=0x83337a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0173.776] wcscat (in: _Dest=0x83337a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" [0173.776] wcscat (in: _Dest=0x83337a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*" [0173.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ff28 [0173.776] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*", lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37bd8 [0176.246] wcscmp (_String1=".", _String2=".") returned 0 [0176.246] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.246] wcscmp (_String1="..", _String2=".") returned 1 [0176.246] wcscmp (_String1="..", _String2="..") returned 0 [0176.246] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.246] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.246] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8186580 [0176.246] wcscpy (in: _Dest=0x8186580, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0176.247] wcscat (in: _Dest=0x8186580, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" [0176.247] wcscat (in: _Dest=0x8186580, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" [0177.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0177.862] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.862] FindClose (in: hFindFile=0x3f37bd8 | out: hFindFile=0x3f37bd8) returned 1 [0177.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ff28) returned 1 [0177.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83337a0) returned 1 [0177.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055128) returned 1 Thread: id = 4361 os_tid = 0x1b10 [0173.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83338a8 [0173.779] wcscpy (in: _Dest=0x83338a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0173.779] wcscat (in: _Dest=0x83338a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" [0173.779] wcscat (in: _Dest=0x83338a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*" [0173.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060190 [0173.780] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*", lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0176.246] wcscmp (_String1=".", _String2=".") returned 0 [0176.246] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.246] wcscmp (_String1="..", _String2=".") returned 1 [0176.246] wcscmp (_String1="..", _String2="..") returned 0 [0176.246] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.246] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.246] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8186458 [0176.246] wcscpy (in: _Dest=0x8186458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0176.246] wcscat (in: _Dest=0x8186458, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" [0176.246] wcscat (in: _Dest=0x8186458, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" [0177.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0177.859] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.859] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0177.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060190) returned 1 [0177.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83338a8) returned 1 [0177.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055230) returned 1 Thread: id = 4362 os_tid = 0x1b14 [0173.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333170 [0173.780] wcscpy (in: _Dest=0x8333170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0173.780] wcscat (in: _Dest=0x8333170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" [0173.780] wcscat (in: _Dest=0x8333170, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*" [0173.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80603f8 [0173.780] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*", lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38398 [0176.245] wcscmp (_String1=".", _String2=".") returned 0 [0176.245] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.245] wcscmp (_String1="..", _String2=".") returned 1 [0176.245] wcscmp (_String1="..", _String2="..") returned 0 [0176.245] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4034f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.245] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.245] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e3458 [0176.245] wcscpy (in: _Dest=0x81e3458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0176.245] wcscat (in: _Dest=0x81e3458, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" [0176.245] wcscat (in: _Dest=0x81e3458, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" [0177.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e3458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0177.857] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4034f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.857] FindClose (in: hFindFile=0x3f38398 | out: hFindFile=0x3f38398) returned 1 [0177.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80603f8) returned 1 [0177.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333170) returned 1 [0177.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055338) returned 1 Thread: id = 4363 os_tid = 0x1b18 [0173.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333278 [0173.781] wcscpy (in: _Dest=0x8333278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0173.781] wcscat (in: _Dest=0x8333278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" [0173.781] wcscat (in: _Dest=0x8333278, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*" [0173.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060660 [0173.781] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*", lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0176.244] wcscmp (_String1=".", _String2=".") returned 0 [0176.244] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.244] wcscmp (_String1="..", _String2=".") returned 1 [0176.244] wcscmp (_String1="..", _String2="..") returned 0 [0176.244] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.245] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.245] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e3330 [0176.245] wcscpy (in: _Dest=0x81e3330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0176.245] wcscat (in: _Dest=0x81e3330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" [0176.245] wcscat (in: _Dest=0x81e3330, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" [0177.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e3330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0177.854] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.855] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0177.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060660) returned 1 [0177.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333278) returned 1 [0177.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055440) returned 1 Thread: id = 4364 os_tid = 0x1b1c [0173.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f44b8 [0173.782] wcscpy (in: _Dest=0x81f44b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0173.782] wcscat (in: _Dest=0x81f44b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" [0173.782] wcscat (in: _Dest=0x81f44b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*" [0173.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80608c8 [0173.782] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*", lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f382d8 [0176.244] wcscmp (_String1=".", _String2=".") returned 0 [0176.244] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.244] wcscmp (_String1="..", _String2=".") returned 1 [0176.244] wcscmp (_String1="..", _String2="..") returned 0 [0176.244] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.244] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.244] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e3208 [0176.244] wcscpy (in: _Dest=0x81e3208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0176.244] wcscat (in: _Dest=0x81e3208, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" [0176.244] wcscat (in: _Dest=0x81e3208, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" [0177.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e3208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0177.852] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.852] FindClose (in: hFindFile=0x3f382d8 | out: hFindFile=0x3f382d8) returned 1 [0177.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80608c8) returned 1 [0177.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f44b8) returned 1 [0177.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055548) returned 1 Thread: id = 4365 os_tid = 0x1b34 [0173.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f43b0 [0173.783] wcscpy (in: _Dest=0x81f43b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0173.783] wcscat (in: _Dest=0x81f43b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" [0173.783] wcscat (in: _Dest=0x81f43b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*" [0173.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060b30 [0173.783] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*", lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e18 [0176.238] wcscmp (_String1=".", _String2=".") returned 0 [0176.238] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.238] wcscmp (_String1="..", _String2=".") returned 1 [0176.238] wcscmp (_String1="..", _String2="..") returned 0 [0176.238] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a7b30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.238] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.238] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e30e0 [0176.238] wcscpy (in: _Dest=0x81e30e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0176.238] wcscat (in: _Dest=0x81e30e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" [0176.238] wcscat (in: _Dest=0x81e30e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" [0177.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e30e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0177.849] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a7b30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.850] FindClose (in: hFindFile=0x3f37e18 | out: hFindFile=0x3f37e18) returned 1 [0177.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060b30) returned 1 [0177.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f43b0) returned 1 [0177.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055650) returned 1 Thread: id = 4366 os_tid = 0x1b64 [0173.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f42a8 [0173.784] wcscpy (in: _Dest=0x81f42a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0173.784] wcscat (in: _Dest=0x81f42a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" [0173.784] wcscat (in: _Dest=0x81f42a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*" [0173.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060d98 [0173.784] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*", lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0176.235] wcscmp (_String1=".", _String2=".") returned 0 [0176.235] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.235] wcscmp (_String1="..", _String2=".") returned 1 [0176.235] wcscmp (_String1="..", _String2="..") returned 0 [0176.235] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.235] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.235] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e2fb8 [0176.236] wcscpy (in: _Dest=0x81e2fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0176.236] wcscat (in: _Dest=0x81e2fb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" [0176.236] wcscat (in: _Dest=0x81e2fb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" [0177.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e2fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0177.847] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.847] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0177.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060d98) returned 1 [0177.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f42a8) returned 1 [0177.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334b40) returned 1 Thread: id = 4367 os_tid = 0x1b68 [0174.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8322718 [0174.427] wcscpy (in: _Dest=0x8322718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0174.427] wcscat (in: _Dest=0x8322718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" [0174.427] wcscat (in: _Dest=0x8322718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*" [0174.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ec68 [0174.427] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*", lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a98 [0176.234] wcscmp (_String1=".", _String2=".") returned 0 [0176.234] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.234] wcscmp (_String1="..", _String2=".") returned 1 [0176.234] wcscmp (_String1="..", _String2="..") returned 0 [0176.234] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f3620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.234] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.234] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e2d68 [0176.234] wcscpy (in: _Dest=0x81e2d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0176.234] wcscat (in: _Dest=0x81e2d68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" [0176.234] wcscat (in: _Dest=0x81e2d68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" [0177.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e2d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27dc [0177.842] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f3620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.842] FindClose (in: hFindFile=0x3f37a98 | out: hFindFile=0x3f37a98) returned 1 [0177.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ec68) returned 1 [0177.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322718) returned 1 [0177.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334c48) returned 1 Thread: id = 4368 os_tid = 0x1b6c [0174.428] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020 [0174.428] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0177.259] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b58 [0177.260] GetFileSizeEx (in: hFile=0x1b58, lpFileSize=0xcb9fcf0 | out: lpFileSize=0xcb9fcf0*=226) returned 1 [0177.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0177.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a970 [0177.260] NtQuerySystemTime (in: CurrentTime=0xcb9fc78 | out: CurrentTime=0xcb9fc78*=132471540452844000) returned 0x0 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x7bf91e5a [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x3965c420 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x5f7ce306 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x78451e02 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x33828023 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x78f08102 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x702f0c42 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x3007372c [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x50306484 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x231efc19 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x26b8113b [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x407c011 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x10476e4e [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x10634bb6 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x3667a458 [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0xb23e38f [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x16e7b99d [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x4c68344c [0177.260] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x3a34a5b5 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x14def90 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x5bde690f [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x29eaeaf1 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x6b77a2e6 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x31ba3d1c [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x7d46eee9 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x306700f0 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x751dee70 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x4b5c4e33 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x63b4f2b6 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0xa0aa48 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x4f19d4a3 [0177.261] RtlRandomEx (in: Seed=0xcb9fc70 | out: Seed=0xcb9fc70) returned 0x50ce7da6 [0177.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0177.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8288458 [0177.271] ReadFile (in: hFile=0x1b58, lpBuffer=0x824c060, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xcb9fc6c, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesRead=0xcb9fc6c*=0xe2, lpOverlapped=0x0) returned 1 [0181.930] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.930] WriteFile (in: hFile=0x1b58, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xcb9fc70, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xcb9fc70*=0xe2, lpOverlapped=0x0) returned 1 [0182.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42358 [0182.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423f8 [0182.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423f8) returned 1 [0182.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0182.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0182.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68150) returned 1 [0182.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3eb8) returned 1 [0182.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e695a0 [0182.387] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.387] WriteFile (in: hFile=0x1b58, lpBuffer=0x8405b60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcb9fce4, lpOverlapped=0x0 | out: lpBuffer=0x8405b60*, lpNumberOfBytesWritten=0xcb9fce4*=0x10c, lpOverlapped=0x0) returned 1 [0182.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405b60) returned 1 [0182.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695d0) returned 1 [0182.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423f8) returned 1 [0182.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695a0) returned 1 [0182.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42358) returned 1 [0182.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0182.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0182.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0182.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x148a13e0 [0182.573] wcscpy (in: _Dest=0x148a13e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" [0182.573] wcscat (in: _Dest=0x148a13e0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.f0dbec" [0182.573] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.f0dbec", NtPathName=0xcb9fc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa220 [0182.765] FlushFileBuffers (hFile=0x1b58) returned 1 [0182.773] CloseHandle (hObject=0x1b58) returned 1 [0182.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401960 [0182.882] wcscpy (in: _Dest=0x8401960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" [0182.882] wcscat (in: _Dest=0x8401960, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\F0DBEC-Readme.txt" [0182.882] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\f0dbec-readme.txt")) returned 0xffffffff [0182.882] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1be8 [0182.939] WriteFile (in: hFile=0x1be8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xcb9fc8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xcb9fc8c*=0x70c, lpOverlapped=0x0) returned 1 [0183.149] CloseHandle (hObject=0x1be8) returned 1 [0183.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401960) returned 1 [0183.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d79c0) returned 1 Thread: id = 4369 os_tid = 0x1b70 [0174.429] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020 [0174.429] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0177.272] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b54 [0177.272] GetFileSizeEx (in: hFile=0x1b54, lpFileSize=0xa43fa98 | out: lpFileSize=0xa43fa98*=260) returned 1 [0177.272] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.272] ReadFile (in: hFile=0x1b54, lpBuffer=0xa43faa4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa43fa80, lpOverlapped=0x0 | out: lpBuffer=0xa43faa4*, lpNumberOfBytesRead=0xa43fa80*=0x4, lpOverlapped=0x0) returned 1 [0181.932] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0181.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42880 [0181.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42718 [0181.933] NtQuerySystemTime (in: CurrentTime=0xa43fa20 | out: CurrentTime=0xa43fa20*=132471540499176000) returned 0x0 [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x66a892c0 [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x577a4456 [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x6d8eee02 [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x460e58cb [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x4de7e5c1 [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x7dc50a7c [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x2a286599 [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x35dc9f3a [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x37fbc620 [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x51faece [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x3e70eff [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x3a21bce3 [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x4fb07fc6 [0181.933] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x5b209a0a [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x70052a8e [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x18321622 [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0xa4e312c [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x5b1d827 [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x4dcfb436 [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x312a30ca [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x118c4a6a [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x468fa742 [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x4082198c [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x1d22be3a [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x1a8d3941 [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x34d29319 [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x2f9e2328 [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x20462515 [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x332f860e [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x5b61bb5d [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x786345c8 [0181.934] RtlRandomEx (in: Seed=0xa43fa18 | out: Seed=0xa43fa18) returned 0x6f21e196 [0181.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0181.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a458 [0181.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0181.947] ReadFile (in: hFile=0x1b54, lpBuffer=0x809a458, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xa43fa14, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0xa43fa14*=0x104, lpOverlapped=0x0) returned 1 [0181.947] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.947] WriteFile (in: hFile=0x1b54, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xa43fa18, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0xa43fa18*=0x104, lpOverlapped=0x0) returned 1 [0182.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d424c0 [0182.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42538 [0182.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42538) returned 1 [0182.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0182.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0182.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f330d8) returned 1 [0182.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830a108) returned 1 [0182.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69600 [0182.389] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.389] WriteFile (in: hFile=0x1b54, lpBuffer=0x8405c78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa43fa8c, lpOverlapped=0x0 | out: lpBuffer=0x8405c78*, lpNumberOfBytesWritten=0xa43fa8c*=0x10c, lpOverlapped=0x0) returned 1 [0182.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405c78) returned 1 [0182.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69630) returned 1 [0182.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42538) returned 1 [0182.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69600) returned 1 [0182.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424c0) returned 1 [0182.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42880) returned 1 [0182.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42678) returned 1 [0182.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42600) returned 1 [0182.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x148a1518 [0182.576] wcscpy (in: _Dest=0x148a1518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" [0182.576] wcscat (in: _Dest=0x148a1518, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.f0dbec" [0182.576] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0xa43fa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa368 [0182.769] FlushFileBuffers (hFile=0x1b54) returned 1 [0182.781] CloseHandle (hObject=0x1b54) returned 1 [0182.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401a88 [0182.884] wcscpy (in: _Dest=0x8401a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" [0182.884] wcscat (in: _Dest=0x8401a88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\F0DBEC-Readme.txt" [0182.884] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0182.884] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d98 [0182.939] WriteFile (in: hFile=0x1d98, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa43fa34, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa43fa34*=0x70c, lpOverlapped=0x0) returned 1 [0183.154] CloseHandle (hObject=0x1d98) returned 1 [0183.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401a88) returned 1 [0183.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7ae8) returned 1 Thread: id = 4370 os_tid = 0x1b74 [0174.430] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020 [0174.430] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0177.272] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b50 [0177.273] GetFileSizeEx (in: hFile=0x1b50, lpFileSize=0xd09ff18 | out: lpFileSize=0xd09ff18*=223) returned 1 [0177.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a970 [0177.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0177.273] NtQuerySystemTime (in: CurrentTime=0xd09fea0 | out: CurrentTime=0xd09fea0*=132471540453000000) returned 0x0 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x7309f78e [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x69a3b4d4 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0xd515d6a [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x3dabd67d [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x2cb6718c [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x487bdd5e [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x24b6d436 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x49dd3699 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x7f5dca32 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x3bb0137 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x3965c420 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x24cc3d0d [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x590fecb4 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x6985db1b [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x2aa1bda3 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x45f97dc0 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x71968b88 [0177.273] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x1a710b2 [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x3780050e [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x189d54d7 [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x794d50a9 [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x36e7334b [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x39e1cae4 [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x79f19582 [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x27bfe19f [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x13facb4 [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x47c1c41c [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x63a9506f [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x42889d3b [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x7fe3fef7 [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x4da9c222 [0177.274] RtlRandomEx (in: Seed=0xd09fe98 | out: Seed=0xd09fe98) returned 0x674a6f1d [0177.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828c060 [0177.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828fc68 [0177.284] ReadFile (in: hFile=0x1b50, lpBuffer=0x828c060, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0xd09fe94, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesRead=0xd09fe94*=0xdf, lpOverlapped=0x0) returned 1 [0181.950] SetFilePointerEx (in: hFile=0x1b50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.950] WriteFile (in: hFile=0x1b50, lpBuffer=0x828fc68*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0xd09fe98, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesWritten=0xd09fe98*=0xdf, lpOverlapped=0x0) returned 1 [0182.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42768 [0182.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42650 [0182.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42650) returned 1 [0182.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828fc68) returned 1 [0182.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0182.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68588) returned 1 [0182.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5268) returned 1 [0182.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0182.398] SetFilePointerEx (in: hFile=0x1b50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.398] WriteFile (in: hFile=0x1b50, lpBuffer=0x8405ea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd09ff0c, lpOverlapped=0x0 | out: lpBuffer=0x8405ea8*, lpNumberOfBytesWritten=0xd09ff0c*=0x10c, lpOverlapped=0x0) returned 1 [0182.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405ea8) returned 1 [0182.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0182.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42650) returned 1 [0182.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0182.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42768) returned 1 [0182.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0182.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a880) returned 1 [0182.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0182.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x148a1788 [0182.582] wcscpy (in: _Dest=0x148a1788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" [0182.582] wcscat (in: _Dest=0x148a1788, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.f0dbec" [0182.582] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0xd09fe90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa5f8 [0182.779] FlushFileBuffers (hFile=0x1b50) returned 1 [0182.795] CloseHandle (hObject=0x1b50) returned 1 [0182.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401bb0 [0182.886] wcscpy (in: _Dest=0x8401bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" [0182.886] wcscat (in: _Dest=0x8401bb0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\F0DBEC-Readme.txt" [0182.886] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0182.886] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c20 [0182.941] WriteFile (in: hFile=0x1c20, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd09feb4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd09feb4*=0x70c, lpOverlapped=0x0) returned 1 [0183.162] CloseHandle (hObject=0x1c20) returned 1 [0183.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401bb0) returned 1 [0183.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7c10) returned 1 Thread: id = 4371 os_tid = 0x1b78 [0174.430] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020 [0174.431] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0177.285] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b4c [0177.285] GetFileSizeEx (in: hFile=0x1b4c, lpFileSize=0xd1ff880 | out: lpFileSize=0xd1ff880*=227) returned 1 [0177.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0177.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0177.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0177.285] NtQuerySystemTime (in: CurrentTime=0xd1ff808 | out: CurrentTime=0xd1ff808*=132471540453156000) returned 0x0 [0177.285] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x7c9cef72 [0177.285] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x12487d23 [0177.285] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x1d3649fa [0177.285] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x6843ca8d [0177.285] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x2f70340c [0177.285] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x2453ddbb [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x37a14955 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0xde232f1 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x36a3024 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x34822290 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x49c40d66 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0xd695333 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x49522f0c [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x3cc42fab [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x4140b9ca [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x7b8b889f [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x758ed3eb [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x27bfe19f [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x2bfc3bd8 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x781e1999 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x786ff6c2 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x5e541751 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x3cc42fab [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x2aa1bda3 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x112a5e8f [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x36be81b1 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x45e47021 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x7a3535d [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x1cb12310 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x6186ad0 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x80cf5b8 [0177.286] RtlRandomEx (in: Seed=0xd1ff800 | out: Seed=0xd1ff800) returned 0x5c20f9ce [0177.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0177.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8293870 [0177.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8297478 [0177.297] ReadFile (in: hFile=0x1b4c, lpBuffer=0x8293870, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xd1ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesRead=0xd1ff7fc*=0xe3, lpOverlapped=0x0) returned 1 [0181.952] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.952] WriteFile (in: hFile=0x1b4c, lpBuffer=0x8297478*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xd1ff800, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesWritten=0xd1ff800*=0xe3, lpOverlapped=0x0) returned 1 [0182.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425b0 [0182.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d427e0 [0182.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427e0) returned 1 [0182.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0182.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8293870) returned 1 [0182.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 [0182.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5148) returned 1 [0182.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69660 [0182.397] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.397] WriteFile (in: hFile=0x1b4c, lpBuffer=0x8405d90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd1ff874, lpOverlapped=0x0 | out: lpBuffer=0x8405d90*, lpNumberOfBytesWritten=0xd1ff874*=0x10c, lpOverlapped=0x0) returned 1 [0182.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405d90) returned 1 [0182.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69690) returned 1 [0182.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427e0) returned 1 [0182.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69660) returned 1 [0182.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425b0) returned 1 [0182.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0182.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a920) returned 1 [0182.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0182.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x148a1650 [0182.581] wcscpy (in: _Dest=0x148a1650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" [0182.581] wcscat (in: _Dest=0x148a1650, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.f0dbec" [0182.581] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0xd1ff7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa4b0 [0182.775] FlushFileBuffers (hFile=0x1b4c) returned 1 [0182.791] CloseHandle (hObject=0x1b4c) returned 1 [0182.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401cd8 [0182.887] wcscpy (in: _Dest=0x8401cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" [0182.888] wcscat (in: _Dest=0x8401cd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\F0DBEC-Readme.txt" [0182.888] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0182.888] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d88 [0182.940] WriteFile (in: hFile=0x1d88, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd1ff81c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd1ff81c*=0x70c, lpOverlapped=0x0) returned 1 [0183.156] CloseHandle (hObject=0x1d88) returned 1 [0183.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401cd8) returned 1 [0183.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7d38) returned 1 Thread: id = 4372 os_tid = 0x1b7c [0174.432] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020 [0174.432] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0177.297] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b48 [0177.297] GetFileSizeEx (in: hFile=0x1b48, lpFileSize=0xc73fb90 | out: lpFileSize=0xc73fb90*=272) returned 1 [0177.297] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.297] ReadFile (in: hFile=0x1b48, lpBuffer=0xc73fb9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc73fb78, lpOverlapped=0x0 | out: lpBuffer=0xc73fb9c*, lpNumberOfBytesRead=0xc73fb78*=0x4, lpOverlapped=0x0) returned 1 [0181.954] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0181.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42718 [0181.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42560 [0181.955] NtQuerySystemTime (in: CurrentTime=0xc73fb18 | out: CurrentTime=0xc73fb18*=132471540499332000) returned 0x0 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x60720333 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0xc9a83a4 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x29447530 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x4622df68 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x44248314 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x4f28c8c9 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x635fa0 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x4fb07fc6 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x1ebf628a [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x5c3e3c02 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x7c50fd89 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x3bf5192d [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x4c038fe5 [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x491c288a [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x2b3989ec [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x7faddaec [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x26e186ed [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x6d59bfff [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x2d614a2a [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x3ec3f76d [0181.955] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x549e6d5 [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x1fe186fc [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x6a38baf1 [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x4664ce82 [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0xe98262c [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x358e3250 [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x5afa3e45 [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x16edecc6 [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x4931a7fa [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x3cf11da9 [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x3cf729ae [0181.956] RtlRandomEx (in: Seed=0xc73fb10 | out: Seed=0xc73fb10) returned 0x47f7b1c3 [0181.967] ReadFile (in: hFile=0x1b48, lpBuffer=0x80b8498, nNumberOfBytesToRead=0x110, lpNumberOfBytesRead=0xc73fb0c, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesRead=0xc73fb0c*=0x110, lpOverlapped=0x0) returned 1 [0181.967] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.967] WriteFile (in: hFile=0x1b48, lpBuffer=0x80bc0a0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xc73fb10, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesWritten=0xc73fb10*=0x110, lpOverlapped=0x0) returned 1 [0182.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f88 [0182.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d80 [0182.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d80) returned 1 [0182.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0182.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0182.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 [0182.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8308f50) returned 1 [0182.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69780 [0182.405] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.405] WriteFile (in: hFile=0x1b48, lpBuffer=0x84060d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc73fb84, lpOverlapped=0x0 | out: lpBuffer=0x84060d8*, lpNumberOfBytesWritten=0xc73fb84*=0x10c, lpOverlapped=0x0) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697b0) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d80) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69780) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f88) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42718) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424e8) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42420) returned 1 [0182.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x148a19f8 [0182.596] wcscpy (in: _Dest=0x148a19f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" [0182.596] wcscat (in: _Dest=0x148a19f8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.f0dbec" [0182.596] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.f0dbec", NtPathName=0xc73fb08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa888 [0182.789] FlushFileBuffers (hFile=0x1b48) returned 1 [0182.803] CloseHandle (hObject=0x1b48) returned 1 [0182.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401f28 [0182.891] wcscpy (in: _Dest=0x8401f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" [0182.891] wcscat (in: _Dest=0x8401f28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\F0DBEC-Readme.txt" [0182.891] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\f0dbec-readme.txt")) returned 0xffffffff [0182.891] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bfc [0182.941] WriteFile (in: hFile=0x1bfc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc73fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc73fb2c*=0x70c, lpOverlapped=0x0) returned 1 [0183.074] CloseHandle (hObject=0x1bfc) returned 1 [0183.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401f28) returned 1 [0183.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7e60) returned 1 Thread: id = 4373 os_tid = 0x1b80 [0174.870] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal")) returned 0x2020 [0174.871] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", dwFileAttributes=0x20) returned 1 [0176.274] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcf4 [0176.274] GetFileSizeEx (in: hFile=0xcf4, lpFileSize=0xcfbfcf0 | out: lpFileSize=0xcfbfcf0*=0) returned 1 [0176.274] FlushFileBuffers (hFile=0xcf4) returned 1 [0178.984] CloseHandle (hObject=0xcf4) returned 1 [0178.985] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", dwFileAttributes=0x2020) returned 1 [0189.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3335e8) returned 1 Thread: id = 4374 os_tid = 0x1b84 [0174.887] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\readme")) returned 0x2020 [0177.787] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README", dwFileAttributes=0x20) returned 1 [0189.921] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\readme"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b80 [0190.970] GetFileSizeEx (in: hFile=0x1b80, lpFileSize=0xa0ffe48 | out: lpFileSize=0xa0ffe48*=180) returned 1 [0190.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0190.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42880 [0190.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0190.970] NtQuerySystemTime (in: CurrentTime=0xa0ffdd0 | out: CurrentTime=0xa0ffdd0*=132471540588720000) returned 0x0 [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x6bc81665 [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x27276d8e [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x47222ba4 [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x17fb3e6d [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x2e68f45c [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x4ce9be2c [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x50ff499a [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x3f3a4bc2 [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x693c5ce0 [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x2641854 [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x3a9dda0d [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0xf6bd0e5 [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x564810ee [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x35d03a9a [0190.970] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x1790a0a1 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x629058a0 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x6d42d6d3 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x6276f53b [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x4b2a2223 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x4ee1dab2 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x408aee0e [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x2a022ea3 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x3b5fed40 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x7d41e9ec [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x21533906 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x3e7d68f4 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x54f649db [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x6bdb5007 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x37099943 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x6ace7ce1 [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x5b409acf [0190.971] RtlRandomEx (in: Seed=0xa0ffdc8 | out: Seed=0xa0ffdc8) returned 0x40a11da0 [0190.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0190.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82bccc8 [0190.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0190.982] ReadFile (in: hFile=0x1b80, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0xb4, lpNumberOfBytesRead=0xa0ffdc4, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0xa0ffdc4*=0xb4, lpOverlapped=0x0) returned 1 [0190.984] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.984] WriteFile (in: hFile=0x1b80, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0xa0ffdc8, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0xa0ffdc8*=0xb4, lpOverlapped=0x0) returned 1 [0193.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0193.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0193.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0193.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0193.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0193.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0193.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5918) returned 1 [0193.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c608 [0193.770] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.770] WriteFile (in: hFile=0x1b80, lpBuffer=0x8321cc8*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xa0ffe3c, lpOverlapped=0x0 | out: lpBuffer=0x8321cc8*, lpNumberOfBytesWritten=0xa0ffe3c*=0xfe, lpOverlapped=0x0) returned 1 [0196.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321cc8) returned 1 [0196.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0196.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0196.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0196.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0196.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42880) returned 1 [0196.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428d0) returned 1 [0196.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42380) returned 1 [0196.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2dd10 [0196.138] wcscpy (in: _Dest=0x3e2dd10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" [0196.162] wcscat (in: _Dest=0x3e2dd10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.f0dbec" [0196.162] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.f0dbec", NtPathName=0xa0ffdc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41f48 [0197.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41f48) returned 1 [0197.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f2310) returned 1 [0197.677] NtQueryInformationFile (in: FileHandle=0x1b80, IoStatusBlock=0xa0ffd98, FileInformation=0xa0ffda0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa0ffd98, FileInformation=0xa0ffda0) returned 0x0 [0197.677] NtSetInformationFile (FileHandle=0x1b80, IoStatusBlock=0xa0ffd98, FileInformation=0xa0ffda0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dd10) returned 1 [0197.748] FlushFileBuffers (hFile=0x1b80) returned 1 [0197.758] CloseHandle (hObject=0x1b80) returned 1 [0197.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da828 [0197.769] wcscpy (in: _Dest=0x81da828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0197.769] wcscat (in: _Dest=0x81da828, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0197.769] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0197.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 [0197.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1b0) returned 1 Thread: id = 4375 os_tid = 0x1b88 [0174.940] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences")) returned 0x2020 [0178.028] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", dwFileAttributes=0x20) returned 1 [0189.947] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc4 [0190.985] GetFileSizeEx (in: hFile=0x1bc4, lpFileSize=0xc59fe68 | out: lpFileSize=0xc59fe68*=30617) returned 1 [0190.986] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x7795, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.986] ReadFile (in: hFile=0x1bc4, lpBuffer=0xc59fe74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc59fe50, lpOverlapped=0x0 | out: lpBuffer=0xc59fe74*, lpNumberOfBytesRead=0xc59fe50*=0x4, lpOverlapped=0x0) returned 1 [0192.007] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0192.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ea8 [0192.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0192.007] NtQuerySystemTime (in: CurrentTime=0xc59fdf0 | out: CurrentTime=0xc59fdf0*=132471540599172000) returned 0x0 [0192.007] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x3d39e58a [0192.007] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x5198f873 [0192.007] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x76325051 [0192.007] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x40eeec5a [0192.007] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x79ae7702 [0192.007] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x5b71c741 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0xbf98225 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x6e2b9d85 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x5e9fdd81 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x7d46873e [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x2642041e [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x357cc891 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x5fbc381a [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x36e1e401 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x34741e04 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x3e6c400d [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x33e2db02 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x4c12f891 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x8e75234 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x45905646 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x72c4b01f [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x3b3c87a1 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x5668ecbd [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x3d39e58a [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x230d0fae [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x62f1069c [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x71787cd3 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x4ede7f2c [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x11f57794 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x47261d26 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x1c7e0027 [0192.008] RtlRandomEx (in: Seed=0xc59fde8 | out: Seed=0xc59fde8) returned 0x62620639 [0192.016] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.016] ReadFile (in: hFile=0x1bc4, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc59fdf0, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0xc59fdf0*=0x3c00, lpOverlapped=0x0) returned 1 [0192.928] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4fe0 [0192.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68498 [0192.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0192.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0192.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0192.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0192.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0192.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0192.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0192.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4fe0) returned 1 [0192.929] WriteFile (in: hFile=0x1bc4, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc59fdf0, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0xc59fdf0*=0x3c00, lpOverlapped=0x0) returned 1 [0201.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0201.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0201.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067080 [0201.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063138) returned 1 [0201.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066d80 [0201.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063138 [0201.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063160 [0201.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063160) returned 1 [0201.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80547e0) returned 1 [0201.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d8) returned 1 [0201.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8400dd0 [0201.635] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.635] WriteFile (in: hFile=0x1bc4, lpBuffer=0x8400dd0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xc59fe5c, lpOverlapped=0x0 | out: lpBuffer=0x8400dd0*, lpNumberOfBytesWritten=0xc59fe5c*=0x116, lpOverlapped=0x0) returned 1 [0203.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400dd0) returned 1 [0203.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d80) returned 1 [0203.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063138) returned 1 [0203.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067080) returned 1 [0203.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0203.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ea8) returned 1 [0203.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3200) returned 1 [0203.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0203.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81d5b88 [0203.882] wcscpy (in: _Dest=0x81d5b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" [0203.882] wcscat (in: _Dest=0x81d5b88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.f0dbec" [0203.882] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.f0dbec", NtPathName=0xc59fde0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e1c4c8 [0208.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c4c8) returned 1 [0208.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f8bd8) returned 1 [0208.878] NtQueryInformationFile (in: FileHandle=0x1bc4, IoStatusBlock=0xc59fdb8, FileInformation=0xc59fdc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc59fdb8, FileInformation=0xc59fdc0) returned 0x0 [0208.878] NtSetInformationFile (FileHandle=0x1bc4, IoStatusBlock=0xc59fdb8, FileInformation=0xc59fdc0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5b88) returned 1 [0208.934] FlushFileBuffers (hFile=0x1bc4) returned 1 [0208.936] CloseHandle (hObject=0x1bc4) returned 1 [0208.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da8d8 [0208.951] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0208.951] wcscat (in: _Dest=0x81da8d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0208.951] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0208.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8d8) returned 1 [0208.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da4b8) returned 1 Thread: id = 4376 os_tid = 0x1b8c [0174.941] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts")) returned 0x2020 [0178.029] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", dwFileAttributes=0x20) returned 1 [0189.948] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bcc [0190.988] GetFileSizeEx (in: hFile=0x1bcc, lpFileSize=0xb7efd60 | out: lpFileSize=0xb7efd60*=12288) returned 1 [0190.988] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.988] ReadFile (in: hFile=0x1bcc, lpBuffer=0xb7efd6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb7efd48, lpOverlapped=0x0 | out: lpBuffer=0xb7efd6c*, lpNumberOfBytesRead=0xb7efd48*=0x4, lpOverlapped=0x0) returned 1 [0191.961] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0191.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0191.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0191.961] NtQuerySystemTime (in: CurrentTime=0xb7efce8 | out: CurrentTime=0xb7efce8*=132471540598704000) returned 0x0 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x7e1aea9 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x1ebdd75c [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x4c28acf0 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x5927d478 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0xe92004f [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x49086021 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x4fd5e374 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x733e6340 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x67bd384e [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x7d46873e [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x3eb5959a [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x1423e2a3 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x5e7504c1 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x33ac8da4 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x5611846c [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x35c8e8b9 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x6e2b9d85 [0191.961] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x2eca2bf2 [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x262b5a74 [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x33ac8da4 [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x678931e7 [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x4cc75b8d [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x4916d940 [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0xf7835a0 [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x62a08f2c [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x75e495ca [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x7a3e26e2 [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x637ae47c [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x19fb8fcf [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x65c40255 [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x2c4fe332 [0191.962] RtlRandomEx (in: Seed=0xb7efce0 | out: Seed=0xb7efce0) returned 0x1fcff377 [0191.972] ReadFile (in: hFile=0x1bcc, lpBuffer=0x816bca8, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0xb7efcdc, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesRead=0xb7efcdc*=0x3000, lpOverlapped=0x0) returned 1 [0192.146] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.146] WriteFile (in: hFile=0x1bcc, lpBuffer=0x816f8b0*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0xb7efce0, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesWritten=0xb7efce0*=0x3000, lpOverlapped=0x0) returned 1 [0201.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0201.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0201.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0201.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f328e0) returned 1 [0201.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ed0) returned 1 [0201.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.513] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.513] WriteFile (in: hFile=0x1bcc, lpBuffer=0x8405a48*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xb7efd54, lpOverlapped=0x0 | out: lpBuffer=0x8405a48*, lpNumberOfBytesWritten=0xb7efd54*=0x104, lpOverlapped=0x0) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405a48) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062238) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80622b0) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2648) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0203.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d7d0 [0203.732] wcscpy (in: _Dest=0x3e2d7d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" [0203.732] wcscat (in: _Dest=0x3e2d7d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.f0dbec" [0203.733] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.f0dbec", NtPathName=0xb7efcd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81d5708 [0208.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5708) returned 1 [0208.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fa470) returned 1 [0208.877] NtQueryInformationFile (in: FileHandle=0x1bcc, IoStatusBlock=0xb7efcb0, FileInformation=0xb7efcb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb7efcb0, FileInformation=0xb7efcb8) returned 0x0 [0208.877] NtSetInformationFile (FileHandle=0x1bcc, IoStatusBlock=0xb7efcb0, FileInformation=0xb7efcb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d7d0) returned 1 [0208.929] FlushFileBuffers (hFile=0x1bcc) returned 1 [0208.935] CloseHandle (hObject=0x1bcc) returned 1 [0208.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da8d8 [0208.949] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0208.949] wcscat (in: _Dest=0x81da8d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0208.949] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0208.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8d8) returned 1 [0208.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11468) returned 1 Thread: id = 4377 os_tid = 0x1b90 [0174.942] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal")) returned 0x2020 [0178.029] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", dwFileAttributes=0x20) returned 1 [0189.948] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b84 [0190.991] GetFileSizeEx (in: hFile=0x1b84, lpFileSize=0xa6ffa68 | out: lpFileSize=0xa6ffa68*=0) returned 1 [0190.991] FlushFileBuffers (hFile=0x1b84) returned 1 [0195.483] CloseHandle (hObject=0x1b84) returned 1 [0195.483] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", dwFileAttributes=0x2020) returned 1 [0210.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da358) returned 1 Thread: id = 4378 os_tid = 0x1b94 [0174.949] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites")) returned 0x2020 [0178.030] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", dwFileAttributes=0x20) returned 1 [0189.948] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc8 [0190.991] GetFileSizeEx (in: hFile=0x1bc8, lpFileSize=0xd25f790 | out: lpFileSize=0xd25f790*=20480) returned 1 [0190.991] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x4ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.991] ReadFile (in: hFile=0x1bc8, lpBuffer=0xd25f79c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd25f778, lpOverlapped=0x0 | out: lpBuffer=0xd25f79c*, lpNumberOfBytesRead=0xd25f778*=0x4, lpOverlapped=0x0) returned 1 [0192.017] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0192.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e38 [0192.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0192.017] NtQuerySystemTime (in: CurrentTime=0xd25f718 | out: CurrentTime=0xd25f718*=132471540599172000) returned 0x0 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x151b8fb4 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x2e632688 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0xa44fe5e [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x5bc5aa24 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x5d693d67 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x7e727dde [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x28678be3 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x32fab882 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x5dde0a34 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x73d91076 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x357cc891 [0192.017] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x16f7147a [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x7978e2e7 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x7c253e8c [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x2e632688 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0xfd284be [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x61f4856d [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x4bfa3f53 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x1eb8da79 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x303e999f [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x2686aed1 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x15a736b7 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x2e7ca31e [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x31eddc07 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x14919646 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x2874d928 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x533538a5 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x234dc5b2 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x5518905 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x7c253e8c [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x310a7d56 [0192.018] RtlRandomEx (in: Seed=0xd25f710 | out: Seed=0xd25f710) returned 0x2c258d29 [0192.026] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.026] ReadFile (in: hFile=0x1bc8, lpBuffer=0x817acc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd25f718, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesRead=0xd25f718*=0x3c00, lpOverlapped=0x0) returned 1 [0192.926] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4fe0 [0192.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68498 [0192.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fa0 [0192.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fa0) returned 1 [0192.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c38b0 [0192.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fa0 [0192.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0192.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0192.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0192.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4fe0) returned 1 [0192.927] WriteFile (in: hFile=0x1bc8, lpBuffer=0x80c38b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd25f718, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesWritten=0xd25f718*=0x3c00, lpOverlapped=0x0) returned 1 [0201.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0201.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0201.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80630c0 [0201.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80630e8) returned 1 [0201.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80630e8 [0201.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063110 [0201.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063138 [0201.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063138) returned 1 [0201.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80547e0) returned 1 [0201.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d8) returned 1 [0201.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x81e0b10 [0201.632] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.632] WriteFile (in: hFile=0x1bc8, lpBuffer=0x81e0b10*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xd25f784, lpOverlapped=0x0 | out: lpBuffer=0x81e0b10*, lpNumberOfBytesWritten=0xd25f784*=0x104, lpOverlapped=0x0) returned 1 [0203.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0b10) returned 1 [0203.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80630e8) returned 1 [0203.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063110) returned 1 [0203.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80630c0) returned 1 [0203.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fa0) returned 1 [0203.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e38) returned 1 [0203.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef17e8) returned 1 [0203.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0203.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d098 [0203.884] wcscpy (in: _Dest=0x3e2d098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" [0203.884] wcscat (in: _Dest=0x3e2d098, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.f0dbec" [0203.884] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.f0dbec", NtPathName=0xd25f708, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81d5ac8 [0208.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ac8) returned 1 [0208.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82040f8) returned 1 [0208.876] NtQueryInformationFile (in: FileHandle=0x1bc8, IoStatusBlock=0xd25f6e0, FileInformation=0xd25f6e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd25f6e0, FileInformation=0xd25f6e8) returned 0x0 [0208.876] NtSetInformationFile (FileHandle=0x1bc8, IoStatusBlock=0xd25f6e0, FileInformation=0xd25f6e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d098) returned 1 [0208.927] FlushFileBuffers (hFile=0x1bc8) returned 1 [0208.928] CloseHandle (hObject=0x1bc8) returned 1 [0208.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da8d8 [0208.947] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0208.947] wcscat (in: _Dest=0x81da8d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0208.947] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0208.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8d8) returned 1 [0208.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11328) returned 1 Thread: id = 4379 os_tid = 0x1b98 [0174.950] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal")) returned 0x2020 [0178.030] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", dwFileAttributes=0x20) returned 1 [0189.948] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc0 [0190.993] GetFileSizeEx (in: hFile=0x1bc0, lpFileSize=0xd29fbb0 | out: lpFileSize=0xd29fbb0*=0) returned 1 [0190.994] FlushFileBuffers (hFile=0x1bc0) returned 1 [0195.482] CloseHandle (hObject=0x1bc0) returned 1 [0195.482] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", dwFileAttributes=0x2020) returned 1 [0210.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d99b8) returned 1 Thread: id = 4380 os_tid = 0x1b9c [0174.950] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity")) returned 0x2020 [0177.978] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", dwFileAttributes=0x20) returned 1 [0189.919] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1418 [0190.967] GetFileSizeEx (in: hFile=0x1418, lpFileSize=0xba3fc50 | out: lpFileSize=0xba3fc50*=632) returned 1 [0190.967] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x274, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.967] ReadFile (in: hFile=0x1418, lpBuffer=0xba3fc5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xba3fc38, lpOverlapped=0x0 | out: lpBuffer=0xba3fc5c*, lpNumberOfBytesRead=0xba3fc38*=0x4, lpOverlapped=0x0) returned 1 [0192.035] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0192.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0192.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3638 [0192.035] NtQuerySystemTime (in: CurrentTime=0xba3fbd8 | out: CurrentTime=0xba3fbd8*=132471540599328000) returned 0x0 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x157a104b [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x4ecd38e7 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x211a5bb3 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x433e87a2 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x6de4013d [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x3c003327 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0xb0d88be [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x1b99328f [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x4f86bc93 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x18067825 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x32fab882 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x6b1ac5bc [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x5d693d67 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x456199da [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x1b725ce6 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x40fe519 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x5ff6a381 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x41c9a0cf [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x360e83f5 [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x7635693a [0192.035] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x427544e1 [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x1035e5ae [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x6c9f5a6d [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x9a32d5e [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x53c127e8 [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x1987c56e [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0xc1a092f [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x768670 [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x5c87dc8c [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x1c6b3168 [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x44c40de2 [0192.036] RtlRandomEx (in: Seed=0xba3fbd0 | out: Seed=0xba3fbd0) returned 0x3931bb44 [0192.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0192.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817e8d0 [0192.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81824d8 [0192.044] ReadFile (in: hFile=0x1418, lpBuffer=0x817e8d0, nNumberOfBytesToRead=0x278, lpNumberOfBytesRead=0xba3fbcc, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesRead=0xba3fbcc*=0x278, lpOverlapped=0x0) returned 1 [0192.044] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.044] WriteFile (in: hFile=0x1418, lpBuffer=0x81824d8*, nNumberOfBytesToWrite=0x278, lpNumberOfBytesWritten=0xba3fbd0, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesWritten=0xba3fbd0*=0x278, lpOverlapped=0x0) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1a8 [0198.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baa0 [0198.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0198.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0198.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0198.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32bb0) returned 1 [0198.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5960) returned 1 [0198.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e77e18 [0198.702] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.702] WriteFile (in: hFile=0x1418, lpBuffer=0x8400ca8*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xba3fc44, lpOverlapped=0x0 | out: lpBuffer=0x8400ca8*, lpNumberOfBytesWritten=0xba3fc44*=0x114, lpOverlapped=0x0) returned 1 [0202.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400ca8) returned 1 [0202.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0202.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0202.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0202.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1a8) returned 1 [0202.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0202.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0202.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0202.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41c68 [0202.096] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" [0202.096] wcscat (in: _Dest=0x3d41c68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.f0dbec" [0202.096] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.f0dbec", NtPathName=0xba3fbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e1c598 [0209.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c598) returned 1 [0209.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fe970) returned 1 [0209.694] NtQueryInformationFile (in: FileHandle=0x1418, IoStatusBlock=0xba3fba0, FileInformation=0xba3fba8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xba3fba0, FileInformation=0xba3fba8) returned 0x0 [0209.694] NtSetInformationFile (FileHandle=0x1418, IoStatusBlock=0xba3fba0, FileInformation=0xba3fba8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 [0209.696] FlushFileBuffers (hFile=0x1418) returned 1 [0209.737] CloseHandle (hObject=0x1418) returned 1 [0209.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da4b8 [0209.738] wcscpy (in: _Dest=0x81da4b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0209.738] wcscat (in: _Dest=0x81da4b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0209.738] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0209.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da4b8) returned 1 [0209.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da988) returned 1 Thread: id = 4381 os_tid = 0x1ba0 [0174.951] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\visited links")) returned 0x2020 [0177.788] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", dwFileAttributes=0x20) returned 1 [0189.918] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2574 [0190.964] GetFileSizeEx (in: hFile=0x2574, lpFileSize=0xd17fcd8 | out: lpFileSize=0xd17fcd8*=131072) returned 1 [0190.964] SetFilePointerEx (in: hFile=0x2574, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.964] ReadFile (in: hFile=0x2574, lpBuffer=0xd17fce4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd17fcc0, lpOverlapped=0x0 | out: lpBuffer=0xd17fce4*, lpNumberOfBytesRead=0xd17fcc0*=0x4, lpOverlapped=0x0) returned 1 [0191.997] SetFilePointerEx (in: hFile=0x2574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0191.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0191.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ea8 [0191.997] NtQuerySystemTime (in: CurrentTime=0xd17fc60 | out: CurrentTime=0xd17fc60*=132471540599016000) returned 0x0 [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x58738de [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x29640d12 [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x47d1ebc4 [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x1b23adae [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x4d04eeb9 [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x3b330f47 [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x7040c1ef [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x3fd240fa [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x2e6e399d [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x10b5ee9e [0191.997] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0xd78bbdf [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x8f14246 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x24e743f8 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x390c6266 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0xdc36ed5 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x11fffd25 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x698c3a81 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x5c64b939 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x6e99ae78 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x7591ff7a [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x62f60190 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x408b4140 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x354d98ce [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x4bd7a5cc [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x48029c40 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x7d21148f [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x5ff39139 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x6663480e [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x667218e9 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x5bc778c1 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x914e583 [0191.998] RtlRandomEx (in: Seed=0xd17fc58 | out: Seed=0xd17fc58) returned 0x7d6ada7a [0192.007] SetFilePointerEx (in: hFile=0x2574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.007] ReadFile (in: hFile=0x2574, lpBuffer=0x81734b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd17fc60, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesRead=0xd17fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0192.929] SetFilePointerEx (in: hFile=0x2574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4fe0 [0192.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68498 [0192.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0192.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0192.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8388930 [0192.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0192.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0192.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0192.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0192.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4fe0) returned 1 [0192.930] WriteFile (in: hFile=0x2574, lpBuffer=0x8388930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd17fc60, lpOverlapped=0x0 | out: lpBuffer=0x8388930*, lpNumberOfBytesWritten=0xd17fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0201.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8388930) returned 1 [0201.532] SetFilePointerEx (in: hFile=0x2574, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.532] ReadFile (in: hFile=0x2574, lpBuffer=0x81734b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd17fc60, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesRead=0xd17fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0201.533] SetFilePointerEx (in: hFile=0x2574, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e61d0 [0201.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0201.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80625a8 [0201.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625a8) returned 1 [0201.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8388930 [0201.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80625a8 [0201.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80625d0 [0201.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625d0) returned 1 [0201.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0201.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e61d0) returned 1 [0201.534] WriteFile (in: hFile=0x2574, lpBuffer=0x8388930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd17fc60, lpOverlapped=0x0 | out: lpBuffer=0x8388930*, lpNumberOfBytesWritten=0xd17fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0201.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8388930) returned 1 [0201.637] SetFilePointerEx (in: hFile=0x2574, liDistanceToMove=0x1c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.637] ReadFile (in: hFile=0x2574, lpBuffer=0x81734b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd17fc60, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesRead=0xd17fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0201.638] SetFilePointerEx (in: hFile=0x2574, liDistanceToMove=0x1c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d9d8 [0201.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x80547e0 [0201.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063160 [0201.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063160) returned 1 [0201.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8388930 [0201.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063160 [0201.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063188 [0201.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063188) returned 1 [0201.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80547e0) returned 1 [0201.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d8) returned 1 [0201.638] WriteFile (in: hFile=0x2574, lpBuffer=0x8388930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd17fc60, lpOverlapped=0x0 | out: lpBuffer=0x8388930*, lpNumberOfBytesWritten=0xd17fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0201.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8388930) returned 1 [0201.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46338 [0201.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0201.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69810 [0201.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0201.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80625a8 [0201.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625a8) returned 1 [0201.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80547e0) returned 1 [0201.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d8) returned 1 [0201.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e16ce0 [0201.650] SetFilePointerEx (in: hFile=0x2574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.650] WriteFile (in: hFile=0x2574, lpBuffer=0x3e16ce0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xd17fccc, lpOverlapped=0x0 | out: lpBuffer=0x3e16ce0*, lpNumberOfBytesWritten=0xd17fccc*=0x14c, lpOverlapped=0x0) returned 1 [0203.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0203.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0203.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0203.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0203.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46338) returned 1 [0203.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0203.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0203.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0203.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da8d8 [0203.891] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" [0203.891] wcscat (in: _Dest=0x81da8d8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.f0dbec" [0203.891] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.f0dbec", NtPathName=0xd17fc50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x8332930 [0208.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332930) returned 1 [0208.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8205010) returned 1 [0208.875] NtQueryInformationFile (in: FileHandle=0x2574, IoStatusBlock=0xd17fc28, FileInformation=0xd17fc30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd17fc28, FileInformation=0xd17fc30) returned 0x0 [0208.875] NtSetInformationFile (FileHandle=0x2574, IoStatusBlock=0xd17fc28, FileInformation=0xd17fc30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8d8) returned 1 [0208.924] FlushFileBuffers (hFile=0x2574) returned 1 [0208.925] CloseHandle (hObject=0x2574) returned 1 [0208.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da8d8 [0208.945] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0208.945] wcscat (in: _Dest=0x81da8d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0208.945] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0208.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8d8) returned 1 [0208.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d680) returned 1 Thread: id = 4382 os_tid = 0x1ba4 [0174.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0174.951] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0174.952] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0174.952] wcscat (in: _Dest=0x35bdf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*" [0174.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e530 [0174.952] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6626d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6626d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099610 [0177.989] wcscmp (_String1=".", _String2=".") returned 0 [0177.989] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6626d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6626d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.989] wcscmp (_String1="..", _String2=".") returned 1 [0177.989] wcscmp (_String1="..", _String2="..") returned 0 [0177.989] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1 [0177.989] wcscmp (_String1="_crx_aohghmighlieiainnegkcijnfilokake", _String2=".") returned 1 [0177.989] wcscmp (_String1="_crx_aohghmighlieiainnegkcijnfilokake", _String2="..") returned 1 [0177.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae2f0 [0177.989] wcscpy (in: _Dest=0x3dae2f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0177.990] wcscat (in: _Dest=0x3dae2f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0177.990] wcscat (in: _Dest=0x3dae2f0, _Source="_crx_aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0180.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dae2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0180.721] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0 [0180.721] FindClose (in: hFindFile=0x8099610 | out: hFindFile=0x8099610) returned 1 [0180.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e530) returned 1 [0180.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 [0180.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d488) returned 1 Thread: id = 4383 os_tid = 0x1ba8 [0174.952] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data")) returned 0x2020 [0177.787] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", dwFileAttributes=0x20) returned 1 [0189.949] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cec [0190.198] GetFileSizeEx (in: hFile=0x1cec, lpFileSize=0xd35f8e0 | out: lpFileSize=0xd35f8e0*=69632) returned 1 [0190.198] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.211] ReadFile (in: hFile=0x1cec, lpBuffer=0xd35f8ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd35f8c8, lpOverlapped=0x0 | out: lpBuffer=0xd35f8ec*, lpNumberOfBytesRead=0xd35f8c8*=0x4, lpOverlapped=0x0) returned 1 [0190.222] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42740 [0190.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42790 [0190.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.222] NtQuerySystemTime (in: CurrentTime=0xd35f868 | out: CurrentTime=0xd35f868*=132471540581232000) returned 0x0 [0190.222] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x5d6bac7 [0190.222] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x604a020 [0190.222] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x6eb12581 [0190.222] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x2b16fefd [0190.222] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x1859c8ee [0190.222] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x2e87ba70 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x7bb6e07f [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x1829efff [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x76a15f84 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x49c4a87 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x35bc1cb [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x7304fd53 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x4d2436c4 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x2da0b69a [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x56d1a6db [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x1f000931 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x2e634a98 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x1513c2f5 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x4f2b8fb3 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x6ecae1c [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x169b0c6c [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x79e2fee [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x69a62fdd [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x61f92957 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x7c3057c2 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x6e864cc1 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x70fa1dd2 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x280c46d7 [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x236aa9fb [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x7f58570f [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x7602680c [0190.223] RtlRandomEx (in: Seed=0xd35f860 | out: Seed=0xd35f860) returned 0x415dffd0 [0190.231] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.231] ReadFile (in: hFile=0x1cec, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd35f868, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0xd35f868*=0x3c00, lpOverlapped=0x0) returned 1 [0190.233] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b54f0 [0190.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68420 [0190.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42740 [0190.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42740) returned 1 [0190.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0190.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42740 [0190.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0190.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 [0190.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b54f0) returned 1 [0190.234] WriteFile (in: hFile=0x1cec, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd35f868, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0xd35f868*=0x3c00, lpOverlapped=0x0) returned 1 [0192.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0192.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0192.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef10e0 [0192.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0192.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4970 [0192.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0192.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0fa0 [0192.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0fa0) returned 1 [0192.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0192.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4fe0) returned 1 [0192.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81dfbc0 [0192.918] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.919] WriteFile (in: hFile=0x1cec, lpBuffer=0x81dfbc0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xd35f8d4, lpOverlapped=0x0 | out: lpBuffer=0x81dfbc0*, lpNumberOfBytesWritten=0xd35f8d4*=0x102, lpOverlapped=0x0) returned 1 [0196.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfbc0) returned 1 [0196.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0196.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0196.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0196.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42740) returned 1 [0196.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42790) returned 1 [0196.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b00) returned 1 [0196.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d437a8) returned 1 [0196.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dc68 [0196.034] wcscpy (in: _Dest=0x3e2dc68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" [0196.034] wcscat (in: _Dest=0x3e2dc68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.f0dbec" [0196.034] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.f0dbec", NtPathName=0xd35f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0196.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 [0196.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04048) returned 1 [0196.496] NtQueryInformationFile (in: FileHandle=0x1cec, IoStatusBlock=0xd35f830, FileInformation=0xd35f838, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd35f830, FileInformation=0xd35f838) returned 0x0 [0196.496] NtSetInformationFile (FileHandle=0x1cec, IoStatusBlock=0xd35f830, FileInformation=0xd35f838, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dc68) returned 1 [0197.678] FlushFileBuffers (hFile=0x1cec) returned 1 [0198.351] CloseHandle (hObject=0x1cec) returned 1 [0198.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81daa38 [0198.361] wcscpy (in: _Dest=0x81daa38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0198.361] wcscat (in: _Dest=0x81daa38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" [0198.361] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\f0dbec-readme.txt")) returned 0x2020 [0198.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa38) returned 1 [0198.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d120) returned 1 Thread: id = 4384 os_tid = 0x1bac [0174.953] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal")) returned 0x2020 [0178.028] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", dwFileAttributes=0x20) returned 1 [0189.947] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xccc [0190.985] GetFileSizeEx (in: hFile=0xccc, lpFileSize=0x8b2fa90 | out: lpFileSize=0x8b2fa90*=0) returned 1 [0190.985] FlushFileBuffers (hFile=0xccc) returned 1 [0193.058] CloseHandle (hObject=0xccc) returned 1 [0193.058] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", dwFileAttributes=0x2020) returned 1 [0205.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2da70) returned 1 Thread: id = 4385 os_tid = 0x1bb0 [0174.953] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png")) returned 0x2020 [0175.757] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", dwFileAttributes=0x20) returned 1 [0178.271] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xccc [0178.271] GetFileSizeEx (in: hFile=0xccc, lpFileSize=0xccdfcb0 | out: lpFileSize=0xccdfcb0*=3213) returned 1 [0178.271] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0xc89, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.271] ReadFile (in: hFile=0xccc, lpBuffer=0xccdfcbc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xccdfc98, lpOverlapped=0x0 | out: lpBuffer=0xccdfcbc*, lpNumberOfBytesRead=0xccdfc98*=0x4, lpOverlapped=0x0) returned 1 [0182.324] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435a0 [0182.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d437a8 [0182.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a60 [0182.325] NtQuerySystemTime (in: CurrentTime=0xccdfc38 | out: CurrentTime=0xccdfc38*=132471540503076000) returned 0x0 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x54afd7ba [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x929d9d8 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x3b7e9759 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x42e106c2 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x681194cd [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x52a60652 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x50f88470 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x3857ec2c [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x12e9054d [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x7c3a3318 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x43b74282 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x699db894 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x50844d7e [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x51195b79 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x2b538588 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x72ece496 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x69498ae8 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x477b8b2e [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0xef19ed8 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x2417c9ed [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x6d0363a4 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x55b50489 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x42607c82 [0182.325] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x37bd7bcb [0182.326] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0xcef6188 [0182.326] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x2b9da057 [0182.326] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x2caaf616 [0182.326] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x6eeab99f [0182.326] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x5299d37e [0182.326] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0xbd0b175 [0182.326] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x2c12673 [0182.326] RtlRandomEx (in: Seed=0xccdfc30 | out: Seed=0xccdfc30) returned 0x1a200495 [0182.336] ReadFile (in: hFile=0xccc, lpBuffer=0x8379598, nNumberOfBytesToRead=0xc8d, lpNumberOfBytesRead=0xccdfc2c, lpOverlapped=0x0 | out: lpBuffer=0x8379598*, lpNumberOfBytesRead=0xccdfc2c*=0xc8d, lpOverlapped=0x0) returned 1 [0182.336] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.336] WriteFile (in: hFile=0xccc, lpBuffer=0x837d1a0*, nNumberOfBytesToWrite=0xc8d, lpNumberOfBytesWritten=0xccdfc30, lpOverlapped=0x0 | out: lpBuffer=0x837d1a0*, lpNumberOfBytesWritten=0xccdfc30*=0xc8d, lpOverlapped=0x0) returned 1 [0184.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42290 [0184.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0184.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0184.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x837d1a0) returned 1 [0184.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8379598) returned 1 [0184.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32610) returned 1 [0184.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d49f8) returned 1 [0184.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e697e0 [0184.729] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.729] WriteFile (in: hFile=0xccc, lpBuffer=0x30bcbc8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xccdfca4, lpOverlapped=0x0 | out: lpBuffer=0x30bcbc8*, lpNumberOfBytesWritten=0xccdfca4*=0x10a, lpOverlapped=0x0) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42290) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d437a8) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b00) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0189.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x30bcbc8 [0189.403] wcscpy (in: _Dest=0x30bcbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" [0189.403] wcscat (in: _Dest=0x30bcbc8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.f0dbec" [0189.403] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.f0dbec", NtPathName=0xccdfc28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e8d68 [0190.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8d68) returned 1 [0190.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fc918) returned 1 [0190.587] NtQueryInformationFile (in: FileHandle=0xccc, IoStatusBlock=0xccdfc00, FileInformation=0xccdfc08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xccdfc00, FileInformation=0xccdfc08) returned 0x0 [0190.587] NtSetInformationFile (FileHandle=0xccc, IoStatusBlock=0xccdfc00, FileInformation=0xccdfc08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0190.744] FlushFileBuffers (hFile=0xccc) returned 1 [0190.752] CloseHandle (hObject=0xccc) returned 1 [0190.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bcf10 [0190.850] wcscpy (in: _Dest=0x30bcf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0190.850] wcscat (in: _Dest=0x30bcf10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" [0190.850] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\f0dbec-readme.txt")) returned 0x2020 [0190.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0190.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83222f8) returned 1 Thread: id = 4386 os_tid = 0x1bb8 [0174.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png")) returned 0x2020 [0175.757] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", dwFileAttributes=0x20) returned 1 [0178.258] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc90 [0178.258] GetFileSizeEx (in: hFile=0xc90, lpFileSize=0xd5bf9a8 | out: lpFileSize=0xd5bf9a8*=143) returned 1 [0178.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0178.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0178.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0178.259] NtQuerySystemTime (in: CurrentTime=0xd5bf930 | out: CurrentTime=0xd5bf930*=132471540462828000) returned 0x0 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x802dac3 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x15eb2849 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x24cc3d0d [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x4235e3b9 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x3330e157 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x5264f194 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x4e7228f7 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0xb089189 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x3634957f [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x1abc7a83 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x45ecc890 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x49d3e5f3 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x31033350 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x4f5c50f2 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x5817e421 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x513c3821 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x7c1940c0 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x2249d174 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0xe27210f [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x5f1f9299 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x46397232 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x5838b0e1 [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x149697cf [0178.259] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x802dac3 [0178.260] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x6db9c6c2 [0178.260] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x31ef8dd5 [0178.260] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x66a892c0 [0178.260] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x269ae14a [0178.260] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x76d8357b [0178.260] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x447b7e90 [0178.260] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x820a60f [0178.260] RtlRandomEx (in: Seed=0xd5bf928 | out: Seed=0xd5bf928) returned 0x1ebf628a [0178.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ceb8) returned 1 [0178.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82844d8 [0178.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8266498 [0178.270] ReadFile (in: hFile=0xc90, lpBuffer=0x82844d8, nNumberOfBytesToRead=0x8f, lpNumberOfBytesRead=0xd5bf924, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0xd5bf924*=0x8f, lpOverlapped=0x0) returned 1 [0182.098] SetFilePointerEx (in: hFile=0xc90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.098] WriteFile (in: hFile=0xc90, lpBuffer=0x8266498*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0xd5bf928, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesWritten=0xd5bf928*=0x8f, lpOverlapped=0x0) returned 1 [0182.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0182.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0182.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0182.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0182.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82844d8) returned 1 [0182.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 [0182.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69db0) returned 1 [0182.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e69900 [0182.418] SetFilePointerEx (in: hFile=0xc90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.418] WriteFile (in: hFile=0xc90, lpBuffer=0x8406538*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xd5bf99c, lpOverlapped=0x0 | out: lpBuffer=0x8406538*, lpNumberOfBytesWritten=0xd5bf99c*=0x108, lpOverlapped=0x0) returned 1 [0182.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406538) returned 1 [0182.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0182.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0182.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0182.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0182.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0182.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0182.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be88) returned 1 [0182.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8406538 [0182.620] wcscpy (in: _Dest=0x8406538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" [0182.620] wcscat (in: _Dest=0x8406538, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.f0dbec" [0182.620] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.f0dbec", NtPathName=0xd5bf920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8401710 [0183.277] FlushFileBuffers (hFile=0xc90) returned 1 [0183.286] CloseHandle (hObject=0xc90) returned 1 [0183.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8406650 [0183.288] wcscpy (in: _Dest=0x8406650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0183.288] wcscat (in: _Dest=0x8406650, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" [0183.288] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\f0dbec-readme.txt")) returned 0x2020 [0183.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 [0183.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322400) returned 1 Thread: id = 4387 os_tid = 0x1bbc [0174.962] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html")) returned 0x2020 [0175.757] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", dwFileAttributes=0x20) returned 1 [0178.246] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe0c [0178.246] GetFileSizeEx (in: hFile=0xe0c, lpFileSize=0xcf0f898 | out: lpFileSize=0xcf0f898*=92) returned 1 [0178.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0178.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8c0 [0178.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0178.247] NtQuerySystemTime (in: CurrentTime=0xcf0f820 | out: CurrentTime=0xcf0f820*=132471540462828000) returned 0x0 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0xe6d473c [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x5267121c [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x50370e8d [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x6e5faae0 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x4f6eb049 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x684c5901 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0xff5f836 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x42248207 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x24b23e0c [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x28e53f99 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x60d2fd46 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x2839191b [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x6d49dc8f [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x6511ae54 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x35159566 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x31144893 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x1fba9896 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x5c052605 [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x62a46b5b [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x487bdd5e [0178.247] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x2ab585c3 [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x304d7cce [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x127d48cd [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x2f51199a [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x7b6c0d33 [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x694c97b7 [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x44e14533 [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x6b824eb4 [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x10707350 [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x6fcc9e0c [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x746035c1 [0178.248] RtlRandomEx (in: Seed=0xcf0f818 | out: Seed=0xcf0f818) returned 0x64c1bdcd [0178.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ceb8) returned 1 [0178.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0178.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0178.258] ReadFile (in: hFile=0xe0c, lpBuffer=0x8257478, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0xcf0f814, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xcf0f814*=0x5c, lpOverlapped=0x0) returned 1 [0182.095] SetFilePointerEx (in: hFile=0xe0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.095] WriteFile (in: hFile=0xe0c, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xcf0f818, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xcf0f818*=0x5c, lpOverlapped=0x0) returned 1 [0182.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43460 [0182.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434d8 [0182.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434d8) returned 1 [0182.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0182.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0182.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0182.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a308) returned 1 [0182.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434d8 [0182.421] SetFilePointerEx (in: hFile=0xe0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.422] WriteFile (in: hFile=0xe0c, lpBuffer=0x8406650*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xcf0f88c, lpOverlapped=0x0 | out: lpBuffer=0x8406650*, lpNumberOfBytesWritten=0xcf0f88c*=0x104, lpOverlapped=0x0) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43578) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43618) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434d8) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8c0) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b8b0) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0182.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8406650 [0182.614] wcscpy (in: _Dest=0x8406650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" [0182.615] wcscat (in: _Dest=0x8406650, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.f0dbec" [0182.615] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.f0dbec", NtPathName=0xcf0f810, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x84015e8 [0183.281] FlushFileBuffers (hFile=0xe0c) returned 1 [0183.290] CloseHandle (hObject=0xe0c) returned 1 [0183.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8406650 [0183.291] wcscpy (in: _Dest=0x8406650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0183.291] wcscat (in: _Dest=0x8406650, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" [0183.291] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\f0dbec-readme.txt")) returned 0x2020 [0183.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 [0183.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24f40) returned 1 Thread: id = 4388 os_tid = 0x1bc8 [0174.963] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js")) returned 0x2020 [0175.758] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", dwFileAttributes=0x20) returned 1 [0178.234] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe08 [0178.234] GetFileSizeEx (in: hFile=0xe08, lpFileSize=0xd70f970 | out: lpFileSize=0xd70f970*=91) returned 1 [0178.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0178.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b978 [0178.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8c0 [0178.234] NtQuerySystemTime (in: CurrentTime=0xd70f8f8 | out: CurrentTime=0xd70f8f8*=132471540462672000) returned 0x0 [0178.234] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x66353e61 [0178.234] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x5838b0e1 [0178.234] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x3a34a5b5 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0xcb37630 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x789053d0 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x4fc7b0f4 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x38d100e6 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x49522f0c [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x6a379a96 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x60d2fd46 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x6aefc8e3 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0xa0aa48 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x7b23dfbe [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x722ecc2b [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x6de49f82 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x557253ee [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x24a859cf [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x55c57057 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x3ba7444f [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x425d3436 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x28d0c4ce [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0xdc6641d [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x72c58b45 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x684c5901 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x312a30ca [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x7e3cbe9e [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x2b3bc1cb [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x4b0559b3 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x132198dc [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x76842338 [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x76d8357b [0178.235] RtlRandomEx (in: Seed=0xd70f8f0 | out: Seed=0xd70f8f0) returned 0x23be6476 [0178.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ceb8) returned 1 [0178.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82754b8 [0178.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0178.246] ReadFile (in: hFile=0xe08, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x5b, lpNumberOfBytesRead=0xd70f8ec, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0xd70f8ec*=0x5b, lpOverlapped=0x0) returned 1 [0182.092] SetFilePointerEx (in: hFile=0xe08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.092] WriteFile (in: hFile=0xe08, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xd70f8f0, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0xd70f8f0*=0x5b, lpOverlapped=0x0) returned 1 [0182.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0182.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43730 [0182.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0182.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0182.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0182.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 [0182.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ed0) returned 1 [0182.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d43730 [0182.411] SetFilePointerEx (in: hFile=0xe08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.411] WriteFile (in: hFile=0xe08, lpBuffer=0x8403d50*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xd70f964, lpOverlapped=0x0 | out: lpBuffer=0x8403d50*, lpNumberOfBytesWritten=0xd70f964*=0x100, lpOverlapped=0x0) returned 1 [0182.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403d50) returned 1 [0182.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430a0) returned 1 [0182.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43118) returned 1 [0182.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0182.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436b8) returned 1 [0182.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b978) returned 1 [0182.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0182.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf30) returned 1 [0182.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8403d50 [0182.605] wcscpy (in: _Dest=0x8403d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" [0182.605] wcscat (in: _Dest=0x8403d50, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.f0dbec" [0182.605] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.f0dbec", NtPathName=0xd70f8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x84014c0 [0182.910] FlushFileBuffers (hFile=0xe08) returned 1 [0183.237] CloseHandle (hObject=0xe08) returned 1 [0183.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8406650 [0183.293] wcscpy (in: _Dest=0x8406650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0183.293] wcscat (in: _Dest=0x8406650, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" [0183.293] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\f0dbec-readme.txt")) returned 0x2020 [0183.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 [0183.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27140) returned 1 Thread: id = 4389 os_tid = 0x1bd0 [0174.964] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json")) returned 0x2020 [0175.505] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0178.233] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1058 [0178.233] GetFileSizeEx (in: hFile=0x1058, lpFileSize=0xd7df9a8 | out: lpFileSize=0xd7df9a8*=725) returned 1 [0178.233] SetFilePointerEx (in: hFile=0x1058, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.233] ReadFile (in: hFile=0x1058, lpBuffer=0xd7df9b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd7df990, lpOverlapped=0x0 | out: lpBuffer=0xd7df9b4*, lpNumberOfBytesRead=0xd7df990*=0x4, lpOverlapped=0x0) returned 1 [0182.311] SetFilePointerEx (in: hFile=0x1058, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435a0 [0182.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c40 [0182.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d437a8 [0182.311] NtQuerySystemTime (in: CurrentTime=0xd7df930 | out: CurrentTime=0xd7df930*=132471540502920000) returned 0x0 [0182.311] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x7db5de2e [0182.311] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x3a1523a9 [0182.311] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x85f7845 [0182.311] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x2386a850 [0182.311] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x43b74282 [0182.311] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x1cb1949 [0182.311] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x63ba5a2 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x6f2a851b [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x6335933a [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x52340116 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x7468d6c6 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x7a975993 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0xda56de8 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x1a5443f5 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x3bfe43fb [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x797e3e65 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x5d169eb8 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x43e86802 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x6a837dd9 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x1a2d3772 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x345646e0 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x569750fd [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x511604e5 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x1bb5633f [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x18d43b65 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x79a70d7e [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x62ce8ff5 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x7653cd14 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x1a29acca [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0xba2d4a4 [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0xd79e07c [0182.312] RtlRandomEx (in: Seed=0xd7df928 | out: Seed=0xd7df928) returned 0x43c2bfe5 [0182.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435a0) returned 1 [0182.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8371d88 [0182.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8375990 [0182.324] ReadFile (in: hFile=0x1058, lpBuffer=0x8371d88, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0xd7df924, lpOverlapped=0x0 | out: lpBuffer=0x8371d88*, lpNumberOfBytesRead=0xd7df924*=0x2d5, lpOverlapped=0x0) returned 1 [0182.324] SetFilePointerEx (in: hFile=0x1058, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.324] WriteFile (in: hFile=0x1058, lpBuffer=0x8375990*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0xd7df928, lpOverlapped=0x0 | out: lpBuffer=0x8375990*, lpNumberOfBytesWritten=0xd7df928*=0x2d5, lpOverlapped=0x0) returned 1 [0182.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49bc8 [0182.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1040 [0182.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0182.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8375990) returned 1 [0182.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8371d88) returned 1 [0182.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0182.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d49b0) returned 1 [0182.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0182.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0182.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69810 [0182.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42290 [0182.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0182.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0182.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0182.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d49b0) returned 1 [0182.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x8406420 [0182.629] SetFilePointerEx (in: hFile=0x1058, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.629] WriteFile (in: hFile=0x1058, lpBuffer=0x8406420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd7df99c, lpOverlapped=0x0 | out: lpBuffer=0x8406420*, lpNumberOfBytesWritten=0xd7df99c*=0x10c, lpOverlapped=0x0) returned 1 [0182.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406420) returned 1 [0182.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0182.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42290) returned 1 [0182.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0182.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0182.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c40) returned 1 [0182.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0182.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0182.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x8406420 [0182.830] wcscpy (in: _Dest=0x8406420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" [0182.830] wcscat (in: _Dest=0x8406420, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.f0dbec" [0182.830] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.f0dbec", NtPathName=0xd7df920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x148a1788 [0183.194] FlushFileBuffers (hFile=0x1058) returned 1 [0183.199] CloseHandle (hObject=0x1058) returned 1 [0183.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec080 [0183.200] wcscpy (in: _Dest=0x3dec080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0183.200] wcscat (in: _Dest=0x3dec080, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" [0183.201] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\f0dbec-readme.txt")) returned 0xffffffff [0183.201] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1058 [0183.201] WriteFile (in: hFile=0x1058, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd7df944, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd7df944*=0x70c, lpOverlapped=0x0) returned 1 [0183.204] CloseHandle (hObject=0x1058) returned 1 [0183.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0183.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322508) returned 1 Thread: id = 4390 os_tid = 0x1bd4 [0174.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e27d40 [0174.965] wcscpy (in: _Dest=0x3e27d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0174.965] wcscat (in: _Dest=0x3e27d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0174.965] wcscat (in: _Dest=0x3e27d40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*" [0174.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8061000 [0174.965] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe626eac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6445dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6445dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099590 [0175.995] wcscmp (_String1=".", _String2=".") returned 0 [0175.995] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe626eac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6445dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6445dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.995] wcscmp (_String1="..", _String2=".") returned 1 [0175.995] wcscmp (_String1="..", _String2="..") returned 0 [0175.995] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62738e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6275ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6275ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0175.995] wcscmp (_String1="ar", _String2=".") returned 1 [0175.995] wcscmp (_String1="ar", _String2="..") returned 1 [0175.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6410 [0175.995] wcscpy (in: _Dest=0x3ef6410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0175.995] wcscat (in: _Dest=0x3ef6410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0175.995] wcscat (in: _Dest=0x3ef6410, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0177.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29fc [0177.926] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe627d520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe627fc30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe627fc30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0177.926] wcscmp (_String1="bg", _String2=".") returned 1 [0177.927] wcscmp (_String1="bg", _String2="..") returned 1 [0177.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef60f8 [0177.927] wcscpy (in: _Dest=0x3ef60f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.927] wcscat (in: _Dest=0x3ef60f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.927] wcscat (in: _Dest=0x3ef60f8, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0177.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef60f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0177.928] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6287160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe628bf80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe628bf80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0177.928] wcscmp (_String1="ca", _String2=".") returned 1 [0177.928] wcscmp (_String1="ca", _String2="..") returned 1 [0177.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6200 [0177.928] wcscpy (in: _Dest=0x3ef6200, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.928] wcscat (in: _Dest=0x3ef6200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.928] wcscat (in: _Dest=0x3ef6200, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0177.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0177.930] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62b0970, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62b5790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0177.930] wcscmp (_String1="cs", _String2=".") returned 1 [0177.930] wcscmp (_String1="cs", _String2="..") returned 1 [0177.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5180 [0177.930] wcscpy (in: _Dest=0x3ef5180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.930] wcscat (in: _Dest=0x3ef5180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.930] wcscat (in: _Dest=0x3ef5180, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0177.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0177.931] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62ba5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62bf3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0177.931] wcscmp (_String1="da", _String2=".") returned 1 [0177.931] wcscmp (_String1="da", _String2="..") returned 1 [0177.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef57b0 [0177.932] wcscpy (in: _Dest=0x3ef57b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.932] wcscat (in: _Dest=0x3ef57b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.932] wcscat (in: _Dest=0x3ef57b0, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0177.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef57b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0177.933] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62c6900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62c9010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0177.933] wcscmp (_String1="de", _String2=".") returned 1 [0177.933] wcscmp (_String1="de", _String2="..") returned 1 [0177.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6308 [0177.933] wcscpy (in: _Dest=0x3ef6308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.933] wcscat (in: _Dest=0x3ef6308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.933] wcscat (in: _Dest=0x3ef6308, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0177.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0177.935] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62d0540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62d2c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0177.935] wcscmp (_String1="el", _String2=".") returned 1 [0177.935] wcscmp (_String1="el", _String2="..") returned 1 [0177.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f5e88 [0177.935] wcscpy (in: _Dest=0x81f5e88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.935] wcscat (in: _Dest=0x81f5e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.935] wcscat (in: _Dest=0x81f5e88, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0177.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0177.936] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62dc890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62defa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62defa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0177.936] wcscmp (_String1="en_GB", _String2=".") returned 1 [0177.937] wcscmp (_String1="en_GB", _String2="..") returned 1 [0177.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f5d80 [0177.937] wcscpy (in: _Dest=0x81f5d80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.937] wcscat (in: _Dest=0x81f5d80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.937] wcscat (in: _Dest=0x81f5d80, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0177.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0177.938] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62e64d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62e8be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0177.938] wcscmp (_String1="en_US", _String2=".") returned 1 [0177.938] wcscmp (_String1="en_US", _String2="..") returned 1 [0177.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f6ae8 [0177.938] wcscpy (in: _Dest=0x81f6ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.938] wcscat (in: _Dest=0x81f6ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.938] wcscat (in: _Dest=0x81f6ae8, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0177.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f6ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0177.940] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62f2820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62f4f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0177.940] wcscmp (_String1="es", _String2=".") returned 1 [0177.940] wcscmp (_String1="es", _String2="..") returned 1 [0177.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f69e0 [0177.940] wcscpy (in: _Dest=0x81f69e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.940] wcscat (in: _Dest=0x81f69e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.940] wcscat (in: _Dest=0x81f69e0, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0177.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f69e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0177.942] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62fc460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62feb70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62feb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0177.942] wcscmp (_String1="es_419", _String2=".") returned 1 [0177.942] wcscmp (_String1="es_419", _String2="..") returned 1 [0177.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346b60 [0177.942] wcscpy (in: _Dest=0x8346b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.942] wcscat (in: _Dest=0x8346b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.942] wcscat (in: _Dest=0x8346b60, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0177.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8346b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0177.943] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe630d5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe630fce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe630fce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0177.943] wcscmp (_String1="et", _String2=".") returned 1 [0177.943] wcscmp (_String1="et", _String2="..") returned 1 [0177.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f68d8 [0177.944] wcscpy (in: _Dest=0x81f68d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.944] wcscat (in: _Dest=0x81f68d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.944] wcscat (in: _Dest=0x81f68d8, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0177.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f68d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0177.945] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6317210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe631c030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0177.945] wcscmp (_String1="fi", _String2=".") returned 1 [0177.945] wcscmp (_String1="fi", _String2="..") returned 1 [0177.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f67d0 [0177.945] wcscpy (in: _Dest=0x81f67d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.945] wcscat (in: _Dest=0x81f67d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.945] wcscat (in: _Dest=0x81f67d0, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0177.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f67d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0177.947] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6320e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6325c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0177.947] wcscmp (_String1="fil", _String2=".") returned 1 [0177.947] wcscmp (_String1="fil", _String2="..") returned 1 [0177.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x81f66c8 [0177.947] wcscpy (in: _Dest=0x81f66c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.947] wcscat (in: _Dest=0x81f66c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.947] wcscat (in: _Dest=0x81f66c8, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0177.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0177.949] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe632d1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe632f8b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0177.949] wcscmp (_String1="fr", _String2=".") returned 1 [0177.949] wcscmp (_String1="fr", _String2="..") returned 1 [0177.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f65c0 [0177.949] wcscpy (in: _Dest=0x81f65c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.949] wcscat (in: _Dest=0x81f65c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.949] wcscat (in: _Dest=0x81f65c0, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0177.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f65c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0177.951] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6336de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63394f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0177.951] wcscmp (_String1="he", _String2=".") returned 1 [0177.951] wcscmp (_String1="he", _String2="..") returned 1 [0177.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f64b8 [0177.951] wcscpy (in: _Dest=0x81f64b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.951] wcscat (in: _Dest=0x81f64b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.951] wcscat (in: _Dest=0x81f64b8, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0177.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f64b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0177.952] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6340a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6343130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6343130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0177.952] wcscmp (_String1="hi", _String2=".") returned 1 [0177.953] wcscmp (_String1="hi", _String2="..") returned 1 [0177.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f63b0 [0177.953] wcscpy (in: _Dest=0x81f63b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.953] wcscat (in: _Dest=0x81f63b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.953] wcscat (in: _Dest=0x81f63b0, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0177.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0177.954] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe634a660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634cd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe634cd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0177.954] wcscmp (_String1="hu", _String2=".") returned 1 [0177.954] wcscmp (_String1="hu", _String2="..") returned 1 [0177.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f6e00 [0177.954] wcscpy (in: _Dest=0x81f6e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.954] wcscat (in: _Dest=0x81f6e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.954] wcscat (in: _Dest=0x81f6e00, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0177.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f6e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0177.956] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63542a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63569b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63569b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0177.956] wcscmp (_String1="id", _String2=".") returned 1 [0177.956] wcscmp (_String1="id", _String2="..") returned 1 [0177.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f6bf0 [0177.956] wcscpy (in: _Dest=0x81f6bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.956] wcscat (in: _Dest=0x81f6bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.956] wcscat (in: _Dest=0x81f6bf0, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0177.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f6bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0177.958] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe635dee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63605f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63605f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0177.958] wcscmp (_String1="it", _String2=".") returned 1 [0177.958] wcscmp (_String1="it", _String2="..") returned 1 [0177.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f5b70 [0177.958] wcscpy (in: _Dest=0x81f5b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.958] wcscat (in: _Dest=0x81f5b70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.958] wcscat (in: _Dest=0x81f5b70, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0177.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0177.959] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6367b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636a230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe636a230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0177.959] wcscmp (_String1="ja", _String2=".") returned 1 [0177.959] wcscmp (_String1="ja", _String2="..") returned 1 [0177.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333068 [0177.959] wcscpy (in: _Dest=0x8333068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.959] wcscat (in: _Dest=0x8333068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.960] wcscat (in: _Dest=0x8333068, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0177.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0177.961] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6371760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6373e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6373e70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0177.961] wcscmp (_String1="ko", _String2=".") returned 1 [0177.961] wcscmp (_String1="ko", _String2="..") returned 1 [0177.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333380 [0177.961] wcscpy (in: _Dest=0x8333380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.961] wcscat (in: _Dest=0x8333380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.961] wcscat (in: _Dest=0x8333380, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0177.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0177.963] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe637b3a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe637dab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe637dab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0177.963] wcscmp (_String1="lt", _String2=".") returned 1 [0177.963] wcscmp (_String1="lt", _String2="..") returned 1 [0177.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333488 [0177.963] wcscpy (in: _Dest=0x8333488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0177.963] wcscat (in: _Dest=0x8333488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0177.963] wcscat (in: _Dest=0x8333488, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0177.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0178.215] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6389e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe638c510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0178.215] wcscmp (_String1="lv", _String2=".") returned 1 [0178.215] wcscmp (_String1="lv", _String2="..") returned 1 [0178.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8335bc0 [0178.215] wcscpy (in: _Dest=0x8335bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0178.215] wcscat (in: _Dest=0x8335bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0178.215] wcscat (in: _Dest=0x8335bc0, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0179.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8335bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0179.388] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6393a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6398860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0179.389] wcscmp (_String1="ms", _String2=".") returned 1 [0179.389] wcscmp (_String1="ms", _String2="..") returned 1 [0179.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef56a8 [0179.389] wcscpy (in: _Dest=0x3ef56a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.389] wcscat (in: _Dest=0x3ef56a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.389] wcscat (in: _Dest=0x3ef56a8, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0179.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef56a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0179.390] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe639d680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a24a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0179.390] wcscmp (_String1="nl", _String2=".") returned 1 [0179.390] wcscmp (_String1="nl", _String2="..") returned 1 [0179.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef4e68 [0179.391] wcscpy (in: _Dest=0x3ef4e68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.391] wcscat (in: _Dest=0x3ef4e68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.391] wcscat (in: _Dest=0x3ef4e68, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0179.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef4e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0179.392] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63a99d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ae7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0179.392] wcscmp (_String1="no", _String2=".") returned 1 [0179.392] wcscmp (_String1="no", _String2="..") returned 1 [0179.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5288 [0179.392] wcscpy (in: _Dest=0x3ef5288, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.392] wcscat (in: _Dest=0x3ef5288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.392] wcscat (in: _Dest=0x3ef5288, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0179.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0179.394] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63b3610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63b8430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0179.394] wcscmp (_String1="pl", _String2=".") returned 1 [0179.394] wcscmp (_String1="pl", _String2="..") returned 1 [0179.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ebc78 [0179.394] wcscpy (in: _Dest=0x81ebc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.394] wcscat (in: _Dest=0x81ebc78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.394] wcscat (in: _Dest=0x81ebc78, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0179.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ebc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0179.395] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63bf960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c2070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c2070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0179.395] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0179.395] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0179.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81ebd80 [0179.395] wcscpy (in: _Dest=0x81ebd80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.395] wcscat (in: _Dest=0x81ebd80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.395] wcscat (in: _Dest=0x81ebd80, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0179.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ebd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0179.397] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63cbcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ce3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0179.397] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0179.397] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0179.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81ebe88 [0179.397] wcscpy (in: _Dest=0x81ebe88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.397] wcscat (in: _Dest=0x81ebe88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.397] wcscat (in: _Dest=0x81ebe88, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0179.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ebe88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0179.399] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63d58f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63d8000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63d8000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0179.399] wcscmp (_String1="ro", _String2=".") returned 1 [0179.399] wcscmp (_String1="ro", _String2="..") returned 1 [0179.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ebf90 [0179.399] wcscpy (in: _Dest=0x81ebf90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.399] wcscat (in: _Dest=0x81ebf90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.399] wcscat (in: _Dest=0x81ebf90, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0179.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ebf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0179.401] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63df530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e1c40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63e1c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0179.401] wcscmp (_String1="ru", _String2=".") returned 1 [0179.401] wcscmp (_String1="ru", _String2="..") returned 1 [0179.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ec098 [0179.401] wcscpy (in: _Dest=0x81ec098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.401] wcscat (in: _Dest=0x81ec098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.401] wcscat (in: _Dest=0x81ec098, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0179.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0179.402] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63e9170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63edf90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0179.403] wcscmp (_String1="sk", _String2=".") returned 1 [0179.403] wcscmp (_String1="sk", _String2="..") returned 1 [0179.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ec1a0 [0179.403] wcscpy (in: _Dest=0x81ec1a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.403] wcscat (in: _Dest=0x81ec1a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.403] wcscat (in: _Dest=0x81ec1a0, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0179.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0179.404] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63f54c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63f7bd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0179.404] wcscmp (_String1="sl", _String2=".") returned 1 [0179.404] wcscmp (_String1="sl", _String2="..") returned 1 [0179.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ec2a8 [0179.405] wcscpy (in: _Dest=0x81ec2a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.405] wcscat (in: _Dest=0x81ec2a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.405] wcscat (in: _Dest=0x81ec2a8, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0179.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0179.406] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63ff100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6403f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0179.406] wcscmp (_String1="sr", _String2=".") returned 1 [0179.406] wcscmp (_String1="sr", _String2="..") returned 1 [0179.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ec3b0 [0179.406] wcscpy (in: _Dest=0x81ec3b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.406] wcscat (in: _Dest=0x81ec3b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.406] wcscat (in: _Dest=0x81ec3b0, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0179.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0179.408] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe640b450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe640db60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0179.408] wcscmp (_String1="sv", _String2=".") returned 1 [0179.408] wcscmp (_String1="sv", _String2="..") returned 1 [0179.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ec4b8 [0179.408] wcscpy (in: _Dest=0x81ec4b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.408] wcscat (in: _Dest=0x81ec4b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.408] wcscat (in: _Dest=0x81ec4b8, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0179.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0179.410] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6412980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64177a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0179.410] wcscmp (_String1="th", _String2=".") returned 1 [0179.410] wcscmp (_String1="th", _String2="..") returned 1 [0179.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ec5c0 [0179.410] wcscpy (in: _Dest=0x81ec5c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.410] wcscat (in: _Dest=0x81ec5c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.410] wcscat (in: _Dest=0x81ec5c0, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0179.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0179.411] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe641ecd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64213e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0179.411] wcscmp (_String1="tr", _String2=".") returned 1 [0179.412] wcscmp (_String1="tr", _String2="..") returned 1 [0179.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ec6c8 [0179.412] wcscpy (in: _Dest=0x81ec6c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.412] wcscat (in: _Dest=0x81ec6c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.412] wcscat (in: _Dest=0x81ec6c8, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0179.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0179.413] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6428910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe642b020, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0179.413] wcscmp (_String1="uk", _String2=".") returned 1 [0179.413] wcscmp (_String1="uk", _String2="..") returned 1 [0179.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ec7d0 [0179.413] wcscpy (in: _Dest=0x81ec7d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.413] wcscat (in: _Dest=0x81ec7d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.413] wcscat (in: _Dest=0x81ec7d0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0179.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0179.415] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6432550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6434c60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0179.415] wcscmp (_String1="vi", _String2=".") returned 1 [0179.415] wcscmp (_String1="vi", _String2="..") returned 1 [0179.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ec8d8 [0179.415] wcscpy (in: _Dest=0x81ec8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.416] wcscat (in: _Dest=0x81ec8d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.416] wcscat (in: _Dest=0x81ec8d8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0179.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0179.417] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe643c190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe643e8a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0179.417] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0179.417] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0179.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81ec9e0 [0179.417] wcscpy (in: _Dest=0x81ec9e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.417] wcscat (in: _Dest=0x81ec9e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.417] wcscat (in: _Dest=0x81ec9e0, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0179.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ec9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0179.419] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0179.419] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0179.419] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0179.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81ecae8 [0179.419] wcscpy (in: _Dest=0x81ecae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0179.419] wcscat (in: _Dest=0x81ecae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0179.419] wcscat (in: _Dest=0x81ecae8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0179.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81ecae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c [0179.421] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0179.421] FindClose (in: hFindFile=0x8099590 | out: hFindFile=0x8099590) returned 1 [0183.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061000) returned 1 [0183.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27d40) returned 1 [0183.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25240) returned 1 Thread: id = 4391 os_tid = 0x1bd8 [0174.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83221f0 [0174.965] wcscpy (in: _Dest=0x83221f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0174.966] wcscat (in: _Dest=0x83221f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0174.966] wcscat (in: _Dest=0x83221f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*" [0174.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8061268 [0174.966] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0175.502] wcscmp (_String1=".", _String2=".") returned 0 [0175.502] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.502] wcscmp (_String1="..", _String2=".") returned 1 [0175.502] wcscmp (_String1="..", _String2="..") returned 0 [0175.502] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe665c880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0175.502] wcscmp (_String1="computed_hashes.json", _String2=".") returned 1 [0175.502] wcscmp (_String1="computed_hashes.json", _String2="..") returned 1 [0175.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e21d8 [0175.503] wcscpy (in: _Dest=0x81e21d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0175.503] wcscat (in: _Dest=0x81e21d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0175.503] wcscat (in: _Dest=0x81e21d8, _Source="computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" [0179.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e21d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a8 [0179.938] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe646ced0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0179.938] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0179.938] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0179.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8110 [0179.938] wcscpy (in: _Dest=0x3ef8110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0179.938] wcscat (in: _Dest=0x3ef8110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0179.938] wcscat (in: _Dest=0x3ef8110, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" [0179.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef8110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0179.939] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe646ced0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0179.939] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0179.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061268) returned 1 [0179.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83221f0) returned 1 [0179.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e26340) returned 1 Thread: id = 4392 os_tid = 0x1bdc [0175.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\casey")) returned 0x20 [0175.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey", dwFileAttributes=0x20) returned 0 [0175.027] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\casey"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.027] GetLastError () returned 0x5 [0175.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey", dwFileAttributes=0x20) returned 0 [0175.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f337b8) returned 1 Thread: id = 4393 os_tid = 0x1be0 [0175.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\davis")) returned 0x20 [0175.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis", dwFileAttributes=0x20) returned 0 [0175.030] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\davis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.030] GetLastError () returned 0x5 [0175.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis", dwFileAttributes=0x20) returned 0 [0175.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a038) returned 1 Thread: id = 4394 os_tid = 0x1be4 [0175.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville")) returned 0x20 [0175.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville", dwFileAttributes=0x20) returned 0 [0175.740] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.740] GetLastError () returned 0x5 [0175.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville", dwFileAttributes=0x20) returned 0 [0175.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24640) returned 1 Thread: id = 4395 os_tid = 0x1be8 [0175.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\macquarie")) returned 0x20 [0175.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie", dwFileAttributes=0x20) returned 0 [0175.741] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\macquarie"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.741] GetLastError () returned 0x5 [0175.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie", dwFileAttributes=0x20) returned 0 [0175.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 Thread: id = 4396 os_tid = 0x1bec [0175.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mawson")) returned 0x20 [0175.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson", dwFileAttributes=0x20) returned 0 [0175.742] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mawson"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.742] GetLastError () returned 0x5 [0175.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson", dwFileAttributes=0x20) returned 0 [0175.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e78) returned 1 Thread: id = 4397 os_tid = 0x1bf0 [0175.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo")) returned 0x20 [0175.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo", dwFileAttributes=0x20) returned 0 [0175.743] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.743] GetLastError () returned 0x5 [0175.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo", dwFileAttributes=0x20) returned 0 [0175.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 Thread: id = 4398 os_tid = 0x1bf4 [0175.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\palmer")) returned 0x20 [0175.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer", dwFileAttributes=0x20) returned 0 [0175.745] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\palmer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.745] GetLastError () returned 0x5 [0175.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer", dwFileAttributes=0x20) returned 0 [0175.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a268) returned 1 Thread: id = 4399 os_tid = 0x1bf8 [0175.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\rothera")) returned 0x20 [0175.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera", dwFileAttributes=0x20) returned 0 [0175.428] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\rothera"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.428] GetLastError () returned 0x5 [0175.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera", dwFileAttributes=0x20) returned 0 [0175.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 Thread: id = 4400 os_tid = 0x1bfc [0175.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\syowa")) returned 0x20 [0175.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa", dwFileAttributes=0x20) returned 0 [0175.429] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\syowa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.429] GetLastError () returned 0x5 [0175.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa", dwFileAttributes=0x20) returned 0 [0175.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39b68) returned 1 Thread: id = 4401 os_tid = 0x1c00 [0175.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\vostok")) returned 0x20 [0175.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok", dwFileAttributes=0x20) returned 0 [0175.738] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\vostok"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.738] GetLastError () returned 0x5 [0175.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok", dwFileAttributes=0x20) returned 0 [0175.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f398c8) returned 1 Thread: id = 4402 os_tid = 0x1c04 [0175.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml")) returned 0x20 [0175.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", dwFileAttributes=0x20) returned 0 [0175.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.724] GetLastError () returned 0x5 [0175.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", dwFileAttributes=0x20) returned 0 [0175.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daae8) returned 1 Thread: id = 4403 os_tid = 0x1c08 [0175.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd")) returned 0x20 [0175.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd", dwFileAttributes=0x20) returned 0 [0175.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.725] GetLastError () returned 0x5 [0175.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd", dwFileAttributes=0x20) returned 0 [0175.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c838) returned 1 Thread: id = 4404 os_tid = 0x1c0c [0175.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini")) returned 0x20 [0175.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini", dwFileAttributes=0x20) returned 0 [0175.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.727] GetLastError () returned 0x5 [0175.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini", dwFileAttributes=0x20) returned 0 [0175.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dbd0) returned 1 Thread: id = 4405 os_tid = 0x1c10 [0175.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd")) returned 0x20 [0175.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd", dwFileAttributes=0x20) returned 0 [0175.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.422] GetLastError () returned 0x5 [0175.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd", dwFileAttributes=0x20) returned 0 [0175.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 4406 os_tid = 0x1c14 [0175.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd")) returned 0x20 [0175.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd", dwFileAttributes=0x20) returned 0 [0175.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.424] GetLastError () returned 0x5 [0175.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd", dwFileAttributes=0x20) returned 0 [0175.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 4407 os_tid = 0x1c20 [0175.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt")) returned 0x20 [0175.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", dwFileAttributes=0x20) returned 0 [0175.045] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.045] GetLastError () returned 0x5 [0175.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", dwFileAttributes=0x20) returned 0 [0175.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb9a8) returned 1 Thread: id = 4408 os_tid = 0x1c24 [0175.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt")) returned 0x20 [0175.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", dwFileAttributes=0x20) returned 0 [0175.047] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.047] GetLastError () returned 0x5 [0175.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", dwFileAttributes=0x20) returned 0 [0175.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3034e90) returned 1 Thread: id = 4409 os_tid = 0x1c28 [0175.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt")) returned 0x20 [0175.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", dwFileAttributes=0x20) returned 0 [0175.049] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.049] GetLastError () returned 0x5 [0175.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", dwFileAttributes=0x20) returned 0 [0175.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e656c8) returned 1 Thread: id = 4410 os_tid = 0x1c2c [0175.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt")) returned 0x20 [0188.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", dwFileAttributes=0x20) returned 0 [0188.541] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.664] GetLastError () returned 0x5 [0188.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", dwFileAttributes=0x20) returned 0 [0188.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e657a0) returned 1 Thread: id = 4411 os_tid = 0x1c30 [0175.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt")) returned 0x20 [0183.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0185.752] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.520] GetLastError () returned 0x5 [0186.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0186.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a990) returned 1 Thread: id = 4412 os_tid = 0x1c34 [0175.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt")) returned 0x20 [0188.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", dwFileAttributes=0x20) returned 0 [0188.773] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.782] GetLastError () returned 0x5 [0188.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", dwFileAttributes=0x20) returned 0 [0188.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036a30) returned 1 Thread: id = 4413 os_tid = 0x1c3c [0175.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt")) returned 0x20 [0188.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", dwFileAttributes=0x20) returned 0 [0188.719] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.730] GetLastError () returned 0x5 [0188.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", dwFileAttributes=0x20) returned 0 [0188.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64288) returned 1 Thread: id = 4414 os_tid = 0x1c40 [0175.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt")) returned 0x20 [0188.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0188.775] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.785] GetLastError () returned 0x5 [0188.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0188.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80217d0) returned 1 Thread: id = 4415 os_tid = 0x1c44 [0175.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt")) returned 0x20 [0188.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", dwFileAttributes=0x20) returned 0 [0188.721] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.739] GetLastError () returned 0x5 [0188.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", dwFileAttributes=0x20) returned 0 [0188.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef7e8) returned 1 Thread: id = 4416 os_tid = 0x1c48 [0175.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt")) returned 0x20 [0188.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", dwFileAttributes=0x20) returned 0 [0188.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.743] GetLastError () returned 0x5 [0188.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", dwFileAttributes=0x20) returned 0 [0188.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65950) returned 1 Thread: id = 4417 os_tid = 0x1c4c [0175.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt")) returned 0x20 [0188.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", dwFileAttributes=0x20) returned 0 [0188.727] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.748] GetLastError () returned 0x5 [0188.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", dwFileAttributes=0x20) returned 0 [0188.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efb28) returned 1 Thread: id = 4418 os_tid = 0x1c50 [0175.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt")) returned 0x20 [0188.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", dwFileAttributes=0x20) returned 0 [0188.731] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.752] GetLastError () returned 0x5 [0188.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", dwFileAttributes=0x20) returned 0 [0188.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64438) returned 1 Thread: id = 4419 os_tid = 0x1c54 [0175.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt")) returned 0x20 [0188.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", dwFileAttributes=0x20) returned 0 [0188.778] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.793] GetLastError () returned 0x5 [0188.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", dwFileAttributes=0x20) returned 0 [0188.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efbf8) returned 1 Thread: id = 4420 os_tid = 0x1c58 [0175.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt")) returned 0x20 [0188.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", dwFileAttributes=0x20) returned 0 [0188.587] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.697] GetLastError () returned 0x5 [0188.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", dwFileAttributes=0x20) returned 0 [0188.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e655f0) returned 1 Thread: id = 4421 os_tid = 0x1c5c [0175.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt")) returned 0x20 [0188.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", dwFileAttributes=0x20) returned 0 [0188.780] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.790] GetLastError () returned 0x5 [0188.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", dwFileAttributes=0x20) returned 0 [0188.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0278) returned 1 Thread: id = 4422 os_tid = 0x1c60 [0175.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt")) returned 0x20 [0187.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", dwFileAttributes=0x20) returned 0 [0187.753] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.665] GetLastError () returned 0x5 [0188.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", dwFileAttributes=0x20) returned 0 [0188.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b00) returned 1 Thread: id = 4423 os_tid = 0x1c64 [0175.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt")) returned 0x20 [0188.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", dwFileAttributes=0x20) returned 0 [0188.627] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.703] GetLastError () returned 0x5 [0188.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", dwFileAttributes=0x20) returned 0 [0188.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f01a8) returned 1 Thread: id = 4424 os_tid = 0x1c68 [0175.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt")) returned 0x20 [0188.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", dwFileAttributes=0x20) returned 0 [0188.797] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.797] GetLastError () returned 0x5 [0188.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", dwFileAttributes=0x20) returned 0 [0188.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 Thread: id = 4425 os_tid = 0x1c6c [0175.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt")) returned 0x20 [0188.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0188.697] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.715] GetLastError () returned 0x5 [0188.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0188.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a080) returned 1 Thread: id = 4426 os_tid = 0x1c70 [0175.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt")) returned 0x20 [0188.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", dwFileAttributes=0x20) returned 0 [0188.703] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.731] GetLastError () returned 0x5 [0188.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", dwFileAttributes=0x20) returned 0 [0188.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65878) returned 1 Thread: id = 4427 os_tid = 0x1c74 [0175.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt")) returned 0x20 [0188.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0188.708] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.739] GetLastError () returned 0x5 [0188.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0188.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b470) returned 1 Thread: id = 4428 os_tid = 0x1c78 [0175.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt")) returned 0x20 [0187.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", dwFileAttributes=0x20) returned 0 [0187.752] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.540] GetLastError () returned 0x5 [0188.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", dwFileAttributes=0x20) returned 0 [0188.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65290) returned 1 Thread: id = 4429 os_tid = 0x1c7c [0175.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt")) returned 0x20 [0188.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", dwFileAttributes=0x20) returned 0 [0188.711] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.724] GetLastError () returned 0x5 [0188.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", dwFileAttributes=0x20) returned 0 [0188.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0348) returned 1 Thread: id = 4430 os_tid = 0x1c80 [0175.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt")) returned 0x20 [0188.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", dwFileAttributes=0x20) returned 0 [0188.715] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.727] GetLastError () returned 0x5 [0188.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", dwFileAttributes=0x20) returned 0 [0188.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65518) returned 1 Thread: id = 4431 os_tid = 0x1c84 [0175.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt")) returned 0x20 [0188.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", dwFileAttributes=0x20) returned 0 [0188.739] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.757] GetLastError () returned 0x5 [0188.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", dwFileAttributes=0x20) returned 0 [0188.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2140) returned 1 Thread: id = 4432 os_tid = 0x1c88 [0175.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt")) returned 0x20 [0188.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", dwFileAttributes=0x20) returned 0 [0188.782] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.794] GetLastError () returned 0x5 [0188.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", dwFileAttributes=0x20) returned 0 [0188.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1720) returned 1 Thread: id = 4433 os_tid = 0x1c8c [0175.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt")) returned 0x20 [0188.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0188.786] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.789] GetLastError () returned 0x5 [0188.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0188.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b0d0) returned 1 Thread: id = 4434 os_tid = 0x1c90 [0175.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt")) returned 0x20 [0188.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", dwFileAttributes=0x20) returned 0 [0188.795] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.795] GetLastError () returned 0x5 [0188.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", dwFileAttributes=0x20) returned 0 [0188.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f04e8) returned 1 Thread: id = 4435 os_tid = 0x1c94 [0175.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt")) returned 0x20 [0188.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", dwFileAttributes=0x20) returned 0 [0188.787] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.788] GetLastError () returned 0x5 [0188.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", dwFileAttributes=0x20) returned 0 [0188.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f22f0) returned 1 Thread: id = 4436 os_tid = 0x1c98 [0175.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt")) returned 0x20 [0188.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", dwFileAttributes=0x20) returned 0 [0188.664] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.707] GetLastError () returned 0x5 [0188.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", dwFileAttributes=0x20) returned 0 [0188.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0418) returned 1 Thread: id = 4437 os_tid = 0x1cb0 [0175.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt")) returned 0x20 [0188.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", dwFileAttributes=0x20) returned 0 [0188.692] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.711] GetLastError () returned 0x5 [0188.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", dwFileAttributes=0x20) returned 0 [0188.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2068) returned 1 Thread: id = 4438 os_tid = 0x1cb8 [0175.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\apia")) returned 0x20 [0175.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia", dwFileAttributes=0x20) returned 0 [0175.236] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\apia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.236] GetLastError () returned 0x5 [0175.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia", dwFileAttributes=0x20) returned 0 [0175.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46060) returned 1 Thread: id = 4439 os_tid = 0x1cbc [0175.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\auckland")) returned 0x20 [0175.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland", dwFileAttributes=0x20) returned 0 [0175.238] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\auckland"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.238] GetLastError () returned 0x5 [0175.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland", dwFileAttributes=0x20) returned 0 [0175.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a038) returned 1 Thread: id = 4440 os_tid = 0x1cc0 [0175.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chatham")) returned 0x20 [0187.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham", dwFileAttributes=0x20) returned 0 [0187.490] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chatham"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.661] GetLastError () returned 0x5 [0188.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham", dwFileAttributes=0x20) returned 0 [0188.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39af8) returned 1 Thread: id = 4441 os_tid = 0x1cc4 [0175.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chuuk")) returned 0x20 [0187.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk", dwFileAttributes=0x20) returned 0 [0187.778] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chuuk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.550] GetLastError () returned 0x5 [0188.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk", dwFileAttributes=0x20) returned 0 [0188.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcea58) returned 1 Thread: id = 4442 os_tid = 0x1cc8 [0175.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\easter")) returned 0x20 [0184.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter", dwFileAttributes=0x20) returned 0 [0184.999] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\easter"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.999] GetLastError () returned 0x5 [0184.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter", dwFileAttributes=0x20) returned 0 [0184.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39468) returned 1 Thread: id = 4443 os_tid = 0x1ccc [0175.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\efate")) returned 0x20 [0188.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate", dwFileAttributes=0x20) returned 0 [0188.670] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\efate"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.670] GetLastError () returned 0x5 [0188.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate", dwFileAttributes=0x20) returned 0 [0188.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce098) returned 1 Thread: id = 4444 os_tid = 0x1cd0 [0175.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\enderbury")) returned 0x20 [0188.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury", dwFileAttributes=0x20) returned 0 [0188.675] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\enderbury"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.675] GetLastError () returned 0x5 [0188.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury", dwFileAttributes=0x20) returned 0 [0188.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39548) returned 1 Thread: id = 4445 os_tid = 0x1cd4 [0175.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fakaofo")) returned 0x20 [0188.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo", dwFileAttributes=0x20) returned 0 [0188.669] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fakaofo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.669] GetLastError () returned 0x5 [0188.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo", dwFileAttributes=0x20) returned 0 [0188.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a1f8) returned 1 Thread: id = 4446 os_tid = 0x1cd8 [0175.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fiji")) returned 0x20 [0188.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji", dwFileAttributes=0x20) returned 0 [0188.668] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fiji"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.668] GetLastError () returned 0x5 [0188.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji", dwFileAttributes=0x20) returned 0 [0188.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce030) returned 1 Thread: id = 4447 os_tid = 0x1cdc [0175.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\funafuti")) returned 0x20 [0187.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti", dwFileAttributes=0x20) returned 0 [0187.777] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\funafuti"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.549] GetLastError () returned 0x5 [0188.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti", dwFileAttributes=0x20) returned 0 [0188.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a18) returned 1 Thread: id = 4448 os_tid = 0x1ce0 [0175.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\galapagos")) returned 0x20 [0188.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos", dwFileAttributes=0x20) returned 0 [0188.676] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\galapagos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.677] GetLastError () returned 0x5 [0188.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos", dwFileAttributes=0x20) returned 0 [0188.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a3b8) returned 1 Thread: id = 4449 os_tid = 0x1ce4 [0175.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\gambier")) returned 0x20 [0188.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier", dwFileAttributes=0x20) returned 0 [0188.687] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\gambier"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.687] GetLastError () returned 0x5 [0188.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier", dwFileAttributes=0x20) returned 0 [0188.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f399a8) returned 1 Thread: id = 4450 os_tid = 0x1ce8 [0175.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guadalcanal")) returned 0x20 [0188.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal", dwFileAttributes=0x20) returned 0 [0188.678] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guadalcanal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.678] GetLastError () returned 0x5 [0188.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal", dwFileAttributes=0x20) returned 0 [0188.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 Thread: id = 4451 os_tid = 0x1cec [0175.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guam")) returned 0x20 [0187.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam", dwFileAttributes=0x20) returned 0 [0188.172] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.624] GetLastError () returned 0x5 [0188.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam", dwFileAttributes=0x20) returned 0 [0188.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4df0) returned 1 Thread: id = 4452 os_tid = 0x1cf0 [0175.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\honolulu")) returned 0x20 [0187.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu", dwFileAttributes=0x20) returned 0 [0187.777] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\honolulu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.549] GetLastError () returned 0x5 [0188.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu", dwFileAttributes=0x20) returned 0 [0188.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39cb8) returned 1 Thread: id = 4453 os_tid = 0x1cf4 [0175.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\johnston")) returned 0x20 [0185.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston", dwFileAttributes=0x20) returned 0 [0186.524] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\johnston"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.551] GetLastError () returned 0x5 [0188.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston", dwFileAttributes=0x20) returned 0 [0188.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39bd8) returned 1 Thread: id = 4454 os_tid = 0x1cf8 [0175.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kiritimati")) returned 0x20 [0188.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati", dwFileAttributes=0x20) returned 0 [0188.681] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kiritimati"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.682] GetLastError () returned 0x5 [0188.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati", dwFileAttributes=0x20) returned 0 [0188.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 Thread: id = 4455 os_tid = 0x1cfc [0175.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kosrae")) returned 0x20 [0188.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae", dwFileAttributes=0x20) returned 0 [0188.662] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kosrae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.662] GetLastError () returned 0x5 [0188.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae", dwFileAttributes=0x20) returned 0 [0188.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39698) returned 1 Thread: id = 4456 os_tid = 0x1d00 [0175.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kwajalein")) returned 0x20 [0188.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein", dwFileAttributes=0x20) returned 0 [0188.683] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kwajalein"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.684] GetLastError () returned 0x5 [0188.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein", dwFileAttributes=0x20) returned 0 [0188.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f397e8) returned 1 Thread: id = 4457 os_tid = 0x1d04 [0175.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\majuro")) returned 0x20 [0188.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro", dwFileAttributes=0x20) returned 0 [0188.659] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\majuro"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.660] GetLastError () returned 0x5 [0188.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro", dwFileAttributes=0x20) returned 0 [0188.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39708) returned 1 Thread: id = 4458 os_tid = 0x1d08 [0175.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\marquesas")) returned 0x20 [0188.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas", dwFileAttributes=0x20) returned 0 [0188.685] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\marquesas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.685] GetLastError () returned 0x5 [0188.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas", dwFileAttributes=0x20) returned 0 [0188.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39c48) returned 1 Thread: id = 4459 os_tid = 0x1d28 [0175.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\midway")) returned 0x20 [0188.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway", dwFileAttributes=0x20) returned 0 [0188.690] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\midway"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.690] GetLastError () returned 0x5 [0188.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway", dwFileAttributes=0x20) returned 0 [0188.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a118) returned 1 Thread: id = 4460 os_tid = 0x1d58 [0175.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\nauru")) returned 0x20 [0188.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru", dwFileAttributes=0x20) returned 0 [0188.688] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\nauru"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.689] GetLastError () returned 0x5 [0188.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru", dwFileAttributes=0x20) returned 0 [0188.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed3db0) returned 1 Thread: id = 4461 os_tid = 0x1d78 [0175.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\niue")) returned 0x20 [0188.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue", dwFileAttributes=0x20) returned 0 [0188.686] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\niue"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.686] GetLastError () returned 0x5 [0188.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue", dwFileAttributes=0x20) returned 0 [0188.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ed4be8) returned 1 Thread: id = 4462 os_tid = 0x1d80 [0175.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\norfolk")) returned 0x20 [0188.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk", dwFileAttributes=0x20) returned 0 [0188.672] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\norfolk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.672] GetLastError () returned 0x5 [0188.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk", dwFileAttributes=0x20) returned 0 [0188.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d98) returned 1 Thread: id = 4463 os_tid = 0x1d84 [0175.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\noumea")) returned 0x20 [0187.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea", dwFileAttributes=0x20) returned 0 [0187.778] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\noumea"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.550] GetLastError () returned 0x5 [0188.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea", dwFileAttributes=0x20) returned 0 [0188.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39d28) returned 1 Thread: id = 4464 os_tid = 0x1d88 [0175.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pago_pago")) returned 0x20 [0185.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago", dwFileAttributes=0x20) returned 0 [0185.240] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pago_pago"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.099] GetLastError () returned 0x5 [0187.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago", dwFileAttributes=0x20) returned 0 [0187.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f337b8) returned 1 Thread: id = 4465 os_tid = 0x1d8c [0175.517] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020 [0175.517] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0178.232] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11c4 [0178.233] GetFileSizeEx (in: hFile=0x11c4, lpFileSize=0x977fe10 | out: lpFileSize=0x977fe10*=270) returned 1 [0178.233] SetFilePointerEx (in: hFile=0x11c4, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.233] ReadFile (in: hFile=0x11c4, lpBuffer=0x977fe1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x977fdf8, lpOverlapped=0x0 | out: lpBuffer=0x977fe1c*, lpNumberOfBytesRead=0x977fdf8*=0x4, lpOverlapped=0x0) returned 1 [0182.076] SetFilePointerEx (in: hFile=0x11c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421f0 [0182.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0182.076] NtQuerySystemTime (in: CurrentTime=0x977fd98 | out: CurrentTime=0x977fd98*=132471540500580000) returned 0x0 [0182.076] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x135ce0ae [0182.076] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x6f16b8d2 [0182.076] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x450e0882 [0182.076] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x77b2d603 [0182.076] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x22d89d1d [0182.076] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0xce97a96 [0182.076] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x27b12697 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x28292224 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x18c0792b [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x74b3c2c0 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x590f0c8f [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x12aab4a9 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x65f4bc93 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x282542fa [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x5d13a1da [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x58c4040c [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x6a60a74b [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x2d71b364 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x526cfc0c [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x358b4920 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x6a38baf1 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x70958003 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x7ef80c46 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x3d31b800 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x55f9667 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x4a86a845 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x5fa8baaf [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x4e0162b5 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x25036696 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x67ff6385 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0xb7aa355 [0182.077] RtlRandomEx (in: Seed=0x977fd90 | out: Seed=0x977fd90) returned 0x1f476c85 [0182.087] ReadFile (in: hFile=0x11c4, lpBuffer=0x809e060, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0x977fd8c, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0x977fd8c*=0x10e, lpOverlapped=0x0) returned 1 [0182.088] SetFilePointerEx (in: hFile=0x11c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.088] WriteFile (in: hFile=0x11c4, lpBuffer=0x80a1c68*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x977fd90, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesWritten=0x977fd90*=0x10e, lpOverlapped=0x0) returned 1 [0182.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43190 [0182.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0182.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0182.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0182.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0182.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f329d0) returned 1 [0182.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4770) returned 1 [0182.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69840 [0182.412] SetFilePointerEx (in: hFile=0x11c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.413] WriteFile (in: hFile=0x11c4, lpBuffer=0x8406308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x977fe04, lpOverlapped=0x0 | out: lpBuffer=0x8406308*, lpNumberOfBytesWritten=0x977fe04*=0x10c, lpOverlapped=0x0) returned 1 [0182.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406308) returned 1 [0182.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69870) returned 1 [0182.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0182.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69840) returned 1 [0182.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43190) returned 1 [0182.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421f0) returned 1 [0182.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43e60) returned 1 [0182.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42510) returned 1 [0182.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x148a1c68 [0182.608] wcscpy (in: _Dest=0x148a1c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" [0182.608] wcscat (in: _Dest=0x148a1c68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.f0dbec" [0182.608] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x977fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x148a2060 [0182.802] FlushFileBuffers (hFile=0x11c4) returned 1 [0182.816] CloseHandle (hObject=0x11c4) returned 1 [0182.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8400ef8 [0182.915] wcscpy (in: _Dest=0x8400ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" [0182.915] wcscat (in: _Dest=0x8400ef8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\F0DBEC-Readme.txt" [0182.915] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0182.916] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20f0 [0182.928] WriteFile (in: hFile=0x20f0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x977fdac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x977fdac*=0x70c, lpOverlapped=0x0) returned 1 [0182.972] CloseHandle (hObject=0x20f0) returned 1 [0183.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400ef8) returned 1 [0183.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7648) returned 1 Thread: id = 4466 os_tid = 0x1d90 [0175.517] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020 [0175.518] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0178.220] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe28 [0178.220] GetFileSizeEx (in: hFile=0xe28, lpFileSize=0x7d9fc08 | out: lpFileSize=0x7d9fc08*=221) returned 1 [0178.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0178.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0178.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b978 [0178.220] NtQuerySystemTime (in: CurrentTime=0x7d9fb90 | out: CurrentTime=0x7d9fb90*=132471540462516000) returned 0x0 [0178.220] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x596731ab [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x75cc5f77 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x5bb2e7b6 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x781a4542 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x7f4b5cf9 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0xd6bb4eb [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x34e70350 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x7df618fb [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x7e1857e7 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0xd7b7acc [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x196c0514 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x12d9f869 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x399fb123 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x8b06e1a [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x4ed9919c [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x4bddfe3a [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x5da1b13 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x7bf91e5a [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x8172129 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x1559e59a [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x4b5c4e33 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x5215db19 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x69a3b4d4 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x7f3c9807 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x680a4816 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x69ea5a77 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x2f46ee29 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x369f117f [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x6233e187 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x1dabde84 [0178.221] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x5b2c03e5 [0178.222] RtlRandomEx (in: Seed=0x7d9fb88 | out: Seed=0x7d9fb88) returned 0x738e9fab [0178.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ceb8) returned 1 [0178.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x827ccc8 [0178.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0178.232] ReadFile (in: hFile=0xe28, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x7d9fb84, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0x7d9fb84*=0xdd, lpOverlapped=0x0) returned 1 [0182.074] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.074] WriteFile (in: hFile=0xe28, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x7d9fb88, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0x7d9fb88*=0xdd, lpOverlapped=0x0) returned 1 [0182.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43370 [0182.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43640 [0182.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43640) returned 1 [0182.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0182.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0182.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 [0182.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a818) returned 1 [0182.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0182.407] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.407] WriteFile (in: hFile=0xe28, lpBuffer=0x84061f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7d9fbfc, lpOverlapped=0x0 | out: lpBuffer=0x84061f0*, lpNumberOfBytesWritten=0x7d9fbfc*=0x10c, lpOverlapped=0x0) returned 1 [0182.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84061f0) returned 1 [0182.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0182.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43640) returned 1 [0182.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0182.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0182.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0182.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf40) returned 1 [0182.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb70) returned 1 [0182.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x148a1b30 [0182.599] wcscpy (in: _Dest=0x148a1b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" [0182.599] wcscat (in: _Dest=0x148a1b30, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.f0dbec" [0182.600] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0x7d9fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa9d0 [0182.793] FlushFileBuffers (hFile=0xe28) returned 1 [0182.807] CloseHandle (hObject=0xe28) returned 1 [0182.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d1238 [0182.907] wcscpy (in: _Dest=0x81d1238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" [0182.907] wcscat (in: _Dest=0x81d1238, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\F0DBEC-Readme.txt" [0182.907] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0182.907] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ae8 [0182.942] WriteFile (in: hFile=0x1ae8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7d9fba4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7d9fba4*=0x70c, lpOverlapped=0x0) returned 1 [0183.077] CloseHandle (hObject=0x1ae8) returned 1 [0183.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1238) returned 1 [0183.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7770) returned 1 Thread: id = 4467 os_tid = 0x1d94 [0175.518] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020 [0175.518] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0178.219] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1db4 [0178.220] GetFileSizeEx (in: hFile=0x1db4, lpFileSize=0xa5dfa58 | out: lpFileSize=0xa5dfa58*=260) returned 1 [0178.220] SetFilePointerEx (in: hFile=0x1db4, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.220] ReadFile (in: hFile=0x1db4, lpBuffer=0xa5dfa64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa5dfa40, lpOverlapped=0x0 | out: lpBuffer=0xa5dfa64*, lpNumberOfBytesRead=0xa5dfa40*=0x4, lpOverlapped=0x0) returned 1 [0182.034] SetFilePointerEx (in: hFile=0x1db4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0182.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42380 [0182.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421f0 [0182.035] NtQuerySystemTime (in: CurrentTime=0xa5df9e0 | out: CurrentTime=0xa5df9e0*=132471540500112000) returned 0x0 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x5657b98c [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x58c6f2e1 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x6dd4f3df [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x42777aba [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x17956136 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x634559d4 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x7d3608e4 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x5da4564c [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x5c69b1a [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0xaf63fc6 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x192fc25e [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x1a0bae93 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x5a823025 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x577f29f4 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x2b20bb35 [0182.035] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x76553ed [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x6800581a [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x90517a3 [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x5f7d8c9f [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x1fa301b8 [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x356ec852 [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x5e6276fe [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x20358c4b [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x370be9d9 [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x3b116445 [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x3fd3d19 [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x7e26cd98 [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x104c117c [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x7b118dfb [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0xcc4f3b5 [0182.036] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x167e2bad [0182.056] RtlRandomEx (in: Seed=0xa5df9d8 | out: Seed=0xa5df9d8) returned 0x3188299d [0182.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0182.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c38b0 [0182.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80c74b8 [0182.071] ReadFile (in: hFile=0x1db4, lpBuffer=0x80c38b0, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xa5df9d4, lpOverlapped=0x0 | out: lpBuffer=0x80c38b0*, lpNumberOfBytesRead=0xa5df9d4*=0x104, lpOverlapped=0x0) returned 1 [0182.071] SetFilePointerEx (in: hFile=0x1db4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.071] WriteFile (in: hFile=0x1db4, lpBuffer=0x80c74b8*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xa5df9d8, lpOverlapped=0x0 | out: lpBuffer=0x80c74b8*, lpNumberOfBytesWritten=0xa5df9d8*=0x104, lpOverlapped=0x0) returned 1 [0182.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428d0 [0182.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42858 [0182.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42858) returned 1 [0182.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c74b8) returned 1 [0182.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c38b0) returned 1 [0182.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0182.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4728) returned 1 [0182.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69720 [0182.403] SetFilePointerEx (in: hFile=0x1db4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.403] WriteFile (in: hFile=0x1db4, lpBuffer=0x8405fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa5dfa4c, lpOverlapped=0x0 | out: lpBuffer=0x8405fc0*, lpNumberOfBytesWritten=0xa5dfa4c*=0x10c, lpOverlapped=0x0) returned 1 [0182.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405fc0) returned 1 [0182.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0182.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42858) returned 1 [0182.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0182.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428d0) returned 1 [0182.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42380) returned 1 [0182.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42178) returned 1 [0182.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42470) returned 1 [0182.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x148a18c0 [0182.585] wcscpy (in: _Dest=0x148a18c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" [0182.585] wcscat (in: _Dest=0x148a18c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.f0dbec" [0182.585] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0xa5df9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa740 [0182.783] FlushFileBuffers (hFile=0x1db4) returned 1 [0182.798] CloseHandle (hObject=0x1db4) returned 1 [0182.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401e00 [0182.889] wcscpy (in: _Dest=0x8401e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" [0182.890] wcscat (in: _Dest=0x8401e00, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\F0DBEC-Readme.txt" [0182.890] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0182.890] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf4 [0182.941] WriteFile (in: hFile=0x1bf4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa5df9f4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa5df9f4*=0x70c, lpOverlapped=0x0) returned 1 [0183.070] CloseHandle (hObject=0x1bf4) returned 1 [0183.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401e00) returned 1 [0183.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7898) returned 1 Thread: id = 4468 os_tid = 0x1d98 [0175.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif")) returned 0x20 [0187.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF", dwFileAttributes=0x20) returned 0 [0187.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.527] GetLastError () returned 0x5 [0187.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF", dwFileAttributes=0x20) returned 0 [0187.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3da08) returned 1 Thread: id = 4469 os_tid = 0x1d9c [0175.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif")) returned 0x20 [0187.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF", dwFileAttributes=0x20) returned 0 [0187.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.520] GetLastError () returned 0x5 [0187.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF", dwFileAttributes=0x20) returned 0 [0187.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 4470 os_tid = 0x1da0 [0175.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif")) returned 0x20 [0187.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF", dwFileAttributes=0x20) returned 0 [0187.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.508] GetLastError () returned 0x5 [0187.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF", dwFileAttributes=0x20) returned 0 [0187.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 4471 os_tid = 0x1da4 [0175.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif")) returned 0x20 [0187.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF", dwFileAttributes=0x20) returned 0 [0187.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.578] GetLastError () returned 0x5 [0187.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF", dwFileAttributes=0x20) returned 0 [0187.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 4472 os_tid = 0x1da8 [0175.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif")) returned 0x20 [0187.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF", dwFileAttributes=0x20) returned 0 [0187.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.511] GetLastError () returned 0x5 [0187.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF", dwFileAttributes=0x20) returned 0 [0187.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c958) returned 1 Thread: id = 4473 os_tid = 0x1dac [0175.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif")) returned 0x20 [0187.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF", dwFileAttributes=0x20) returned 0 [0187.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.574] GetLastError () returned 0x5 [0187.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF", dwFileAttributes=0x20) returned 0 [0187.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 4474 os_tid = 0x1db0 [0175.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif")) returned 0x20 [0187.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF", dwFileAttributes=0x20) returned 0 [0187.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.536] GetLastError () returned 0x5 [0187.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF", dwFileAttributes=0x20) returned 0 [0187.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c828) returned 1 Thread: id = 4475 os_tid = 0x1db4 [0175.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif")) returned 0x20 [0187.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF", dwFileAttributes=0x20) returned 0 [0187.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.535] GetLastError () returned 0x5 [0187.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF", dwFileAttributes=0x20) returned 0 [0187.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 4476 os_tid = 0x1db8 [0175.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif")) returned 0x20 [0187.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF", dwFileAttributes=0x20) returned 0 [0187.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.533] GetLastError () returned 0x5 [0187.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF", dwFileAttributes=0x20) returned 0 [0187.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cbb8) returned 1 Thread: id = 4477 os_tid = 0x1dbc [0175.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif")) returned 0x20 [0187.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF", dwFileAttributes=0x20) returned 0 [0187.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.531] GetLastError () returned 0x5 [0187.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF", dwFileAttributes=0x20) returned 0 [0187.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 4478 os_tid = 0x1dc0 [0175.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4")) returned 0x20 [0175.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4", dwFileAttributes=0x20) returned 0 [0175.533] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.533] GetLastError () returned 0x5 [0175.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4", dwFileAttributes=0x20) returned 0 [0175.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d470a0) returned 1 Thread: id = 4479 os_tid = 0x1dc4 [0175.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4adt")) returned 0x20 [0175.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT", dwFileAttributes=0x20) returned 0 [0175.535] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4adt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.535] GetLastError () returned 0x5 [0175.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT", dwFileAttributes=0x20) returned 0 [0175.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a038) returned 1 Thread: id = 4480 os_tid = 0x1dc8 [0175.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6")) returned 0x20 [0175.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6", dwFileAttributes=0x20) returned 0 [0175.537] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.537] GetLastError () returned 0x5 [0175.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6", dwFileAttributes=0x20) returned 0 [0175.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46060) returned 1 Thread: id = 4481 os_tid = 0x1dcc [0175.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6cdt")) returned 0x20 [0184.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT", dwFileAttributes=0x20) returned 0 [0184.930] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6cdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.879] GetLastError () returned 0x5 [0185.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT", dwFileAttributes=0x20) returned 0 [0185.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39858) returned 1 Thread: id = 4482 os_tid = 0x1dd0 [0175.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5")) returned 0x20 [0186.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5", dwFileAttributes=0x20) returned 0 [0186.432] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.433] GetLastError () returned 0x5 [0186.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5", dwFileAttributes=0x20) returned 0 [0186.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46338) returned 1 Thread: id = 4483 os_tid = 0x1dd4 [0175.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5edt")) returned 0x20 [0186.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT", dwFileAttributes=0x20) returned 0 [0186.693] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5edt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.693] GetLastError () returned 0x5 [0186.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT", dwFileAttributes=0x20) returned 0 [0186.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e08) returned 1 Thread: id = 4484 os_tid = 0x1dd8 [0175.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\hst10")) returned 0x20 [0186.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10", dwFileAttributes=0x20) returned 0 [0186.287] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\hst10"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.287] GetLastError () returned 0x5 [0186.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10", dwFileAttributes=0x20) returned 0 [0186.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d465a8) returned 1 Thread: id = 4485 os_tid = 0x1ddc [0175.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7")) returned 0x20 [0186.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7", dwFileAttributes=0x20) returned 0 [0186.689] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.689] GetLastError () returned 0x5 [0186.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7", dwFileAttributes=0x20) returned 0 [0186.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46610) returned 1 Thread: id = 4486 os_tid = 0x1de0 [0175.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7mdt")) returned 0x20 [0186.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT", dwFileAttributes=0x20) returned 0 [0186.687] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7mdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.687] GetLastError () returned 0x5 [0186.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT", dwFileAttributes=0x20) returned 0 [0186.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33c88) returned 1 Thread: id = 4487 os_tid = 0x1de4 [0175.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8")) returned 0x20 [0186.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8", dwFileAttributes=0x20) returned 0 [0186.685] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.685] GetLastError () returned 0x5 [0186.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8", dwFileAttributes=0x20) returned 0 [0186.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46678) returned 1 Thread: id = 4488 os_tid = 0x1de8 [0175.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8pdt")) returned 0x20 [0186.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT", dwFileAttributes=0x20) returned 0 [0186.683] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8pdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.683] GetLastError () returned 0x5 [0186.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT", dwFileAttributes=0x20) returned 0 [0186.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f335f8) returned 1 Thread: id = 4489 os_tid = 0x1dec [0175.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9")) returned 0x20 [0186.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9", dwFileAttributes=0x20) returned 0 [0186.434] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.435] GetLastError () returned 0x5 [0186.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9", dwFileAttributes=0x20) returned 0 [0186.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d466e0) returned 1 Thread: id = 4490 os_tid = 0x1df0 [0175.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9ydt")) returned 0x20 [0186.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT", dwFileAttributes=0x20) returned 0 [0186.691] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9ydt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.691] GetLastError () returned 0x5 [0186.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT", dwFileAttributes=0x20) returned 0 [0186.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34078) returned 1 Thread: id = 4491 os_tid = 0x1df4 [0175.545] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json")) returned 0x2020 [0175.545] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0178.271] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1480 [0178.272] GetFileSizeEx (in: hFile=0x1480, lpFileSize=0x790f9a0 | out: lpFileSize=0x790f9a0*=179) returned 1 [0178.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0178.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0178.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7f8 [0178.272] NtQuerySystemTime (in: CurrentTime=0x790f928 | out: CurrentTime=0x790f928*=132471540462984000) returned 0x0 [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x28e53f99 [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x6fcc9e0c [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0xa5c9ca9 [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x3634957f [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x596edb3c [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x68b72ade [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x358b4920 [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x23c5b547 [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x6ffb5d03 [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x70d6770c [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x2c4c32e9 [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x42248207 [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x2053757e [0178.272] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x16aa186d [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x10eba0dc [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0xc92e567 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x4bf34390 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x1a8d3941 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x6db452b4 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x6d641542 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x21522942 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x332f860e [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x5b61bb5d [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x1b5143ea [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x1a679edd [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x568b120b [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x7d2806c2 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x7ef80c46 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x60b48bf5 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x3d45fbf4 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x78bbf995 [0178.273] RtlRandomEx (in: Seed=0x790f920 | out: Seed=0x790f920) returned 0x4e51f565 [0178.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ceb8) returned 1 [0178.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0178.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0178.283] ReadFile (in: hFile=0x1480, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x790f91c, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0x790f91c*=0xb3, lpOverlapped=0x0) returned 1 [0182.108] SetFilePointerEx (in: hFile=0x1480, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.108] WriteFile (in: hFile=0x1480, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x790f920, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0x790f920*=0xb3, lpOverlapped=0x0) returned 1 [0182.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43258 [0182.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432d0 [0182.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432d0) returned 1 [0182.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0182.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0182.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0182.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ac98) returned 1 [0182.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e698a0 [0182.417] SetFilePointerEx (in: hFile=0x1480, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.417] WriteFile (in: hFile=0x1480, lpBuffer=0x8406420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x790f994, lpOverlapped=0x0 | out: lpBuffer=0x8406420*, lpNumberOfBytesWritten=0x790f994*=0x10c, lpOverlapped=0x0) returned 1 [0182.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406420) returned 1 [0182.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698d0) returned 1 [0182.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432d0) returned 1 [0182.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698a0) returned 1 [0182.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0182.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0182.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0182.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0182.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x148a1da0 [0182.611] wcscpy (in: _Dest=0x148a1da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" [0182.611] wcscat (in: _Dest=0x148a1da0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.f0dbec" [0182.611] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.f0dbec", NtPathName=0x790f918, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x148a21a8 [0182.800] FlushFileBuffers (hFile=0x1480) returned 1 [0182.813] CloseHandle (hObject=0x1480) returned 1 [0182.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8728 [0182.914] wcscpy (in: _Dest=0x3ef8728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" [0182.914] wcscat (in: _Dest=0x3ef8728, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\F0DBEC-Readme.txt" [0182.914] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\f0dbec-readme.txt")) returned 0xffffffff [0182.914] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20f4 [0182.927] WriteFile (in: hFile=0x20f4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x790f93c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x790f93c*=0x70c, lpOverlapped=0x0) returned 1 [0182.970] CloseHandle (hObject=0x20f4) returned 1 [0183.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8728) returned 1 [0183.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7f88) returned 1 Thread: id = 4492 os_tid = 0x1df8 [0175.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf")) returned 0x20 [0175.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x20) returned 0 [0175.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.546] GetLastError () returned 0x5 [0175.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x20) returned 0 [0175.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bec50) returned 1 Thread: id = 4493 os_tid = 0x1dfc [0175.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf")) returned 0x20 [0175.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x20) returned 0 [0175.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.548] GetLastError () returned 0x5 [0175.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x20) returned 0 [0175.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80538e0) returned 1 Thread: id = 4494 os_tid = 0x1e00 [0175.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf")) returned 0x20 [0185.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x20) returned 0 [0185.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.781] GetLastError () returned 0x5 [0185.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x20) returned 0 [0185.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80534a0) returned 1 Thread: id = 4495 os_tid = 0x1e04 [0175.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf")) returned 0x20 [0185.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x20) returned 0 [0185.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.146] GetLastError () returned 0x5 [0185.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x20) returned 0 [0185.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053418) returned 1 Thread: id = 4496 os_tid = 0x1e08 [0175.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf")) returned 0x20 [0185.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x20) returned 0 [0185.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.788] GetLastError () returned 0x5 [0185.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x20) returned 0 [0185.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80539f0) returned 1 Thread: id = 4497 os_tid = 0x1e0c [0175.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf")) returned 0x20 [0185.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x20) returned 0 [0185.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.657] GetLastError () returned 0x5 [0185.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x20) returned 0 [0185.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053c10) returned 1 Thread: id = 4498 os_tid = 0x1e10 [0175.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf")) returned 0x20 [0185.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x20) returned 0 [0185.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.786] GetLastError () returned 0x5 [0185.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x20) returned 0 [0185.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053fc8) returned 1 Thread: id = 4499 os_tid = 0x1e14 [0175.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf")) returned 0x20 [0185.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x20) returned 0 [0185.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.779] GetLastError () returned 0x5 [0185.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x20) returned 0 [0185.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b88) returned 1 Thread: id = 4500 os_tid = 0x1e18 [0175.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid")) returned 0x20 [0185.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x20) returned 0 [0185.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.783] GetLastError () returned 0x5 [0185.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x20) returned 0 [0185.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053eb8) returned 1 Thread: id = 4501 os_tid = 0x1e20 [0175.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x20 [0185.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x20) returned 0 [0185.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.822] GetLastError () returned 0x5 [0185.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x20) returned 0 [0185.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053390) returned 1 Thread: id = 4502 os_tid = 0x1e24 [0175.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x20 [0185.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x20) returned 0 [0185.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.776] GetLastError () returned 0x5 [0185.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x20) returned 0 [0185.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053280) returned 1 Thread: id = 4503 os_tid = 0x1e28 [0175.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x20 [0185.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x20) returned 0 [0185.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.820] GetLastError () returned 0x5 [0185.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x20) returned 0 [0185.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053da8) returned 1 Thread: id = 4504 os_tid = 0x1e2c [0175.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x20 [0185.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x20) returned 0 [0185.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.817] GetLastError () returned 0x5 [0185.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x20) returned 0 [0185.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054490) returned 1 Thread: id = 4505 os_tid = 0x1e30 [0175.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x20 [0185.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x20) returned 0 [0185.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.814] GetLastError () returned 0x5 [0185.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x20) returned 0 [0185.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054408) returned 1 Thread: id = 4506 os_tid = 0x1e34 [0175.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x20 [0185.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x20) returned 0 [0185.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.811] GetLastError () returned 0x5 [0185.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x20) returned 0 [0185.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80535b0) returned 1 Thread: id = 4507 os_tid = 0x1e38 [0175.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x20 [0185.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x20) returned 0 [0185.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.809] GetLastError () returned 0x5 [0185.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x20) returned 0 [0185.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053528) returned 1 Thread: id = 4508 os_tid = 0x1e3c [0175.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x20 [0185.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x20) returned 0 [0185.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.806] GetLastError () returned 0x5 [0185.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x20) returned 0 [0185.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053638) returned 1 Thread: id = 4509 os_tid = 0x1e40 [0175.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x20 [0185.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x20) returned 0 [0185.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.804] GetLastError () returned 0x5 [0185.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x20) returned 0 [0185.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80536c0) returned 1 Thread: id = 4510 os_tid = 0x1e44 [0175.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x20 [0185.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x20) returned 0 [0185.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.802] GetLastError () returned 0x5 [0185.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x20) returned 0 [0185.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053748) returned 1 Thread: id = 4511 os_tid = 0x1e48 [0175.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x20 [0185.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x20) returned 0 [0185.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.799] GetLastError () returned 0x5 [0185.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x20) returned 0 [0185.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80537d0) returned 1 Thread: id = 4512 os_tid = 0x1e50 [0175.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x20 [0185.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x20) returned 0 [0185.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.797] GetLastError () returned 0x5 [0185.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x20) returned 0 [0185.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054160) returned 1 Thread: id = 4513 os_tid = 0x1e54 [0175.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x20 [0185.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x20) returned 0 [0185.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.794] GetLastError () returned 0x5 [0185.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x20) returned 0 [0185.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8052f50) returned 1 Thread: id = 4514 os_tid = 0x1e58 [0175.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x20 [0185.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x20) returned 0 [0185.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.792] GetLastError () returned 0x5 [0185.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x20) returned 0 [0185.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b00) returned 1 Thread: id = 4515 os_tid = 0x1e5c [0175.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x20 [0185.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x20) returned 0 [0185.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.790] GetLastError () returned 0x5 [0185.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x20) returned 0 [0185.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053858) returned 1 Thread: id = 4516 os_tid = 0x1e60 [0175.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x20 [0185.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x20) returned 0 [0185.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.838] GetLastError () returned 0x5 [0185.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x20) returned 0 [0185.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053968) returned 1 Thread: id = 4517 os_tid = 0x1e64 [0175.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json")) returned 0x2020 [0175.818] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0184.570] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1eec [0184.570] GetFileSizeEx (in: hFile=0x1eec, lpFileSize=0x7bbf998 | out: lpFileSize=0x7bbf998*=278) returned 1 [0184.570] SetFilePointerEx (in: hFile=0x1eec, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.570] ReadFile (in: hFile=0x1eec, lpBuffer=0x7bbf9a4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7bbf980, lpOverlapped=0x0 | out: lpBuffer=0x7bbf9a4*, lpNumberOfBytesRead=0x7bbf980*=0x4, lpOverlapped=0x0) returned 1 [0184.572] SetFilePointerEx (in: hFile=0x1eec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0184.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0184.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0184.572] NtQuerySystemTime (in: CurrentTime=0x7bbf920 | out: CurrentTime=0x7bbf920*=132471540524916000) returned 0x0 [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x4b0ff699 [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x10d88f77 [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x18f7b973 [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x230209fb [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x2df53102 [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x2af1f382 [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x1d9c9d3f [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x5f0ea34b [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x871c234 [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x1b85c932 [0184.572] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x1fde369d [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x10abd587 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x73b7abce [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x150f7f78 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x69788fe7 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x36efce8c [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x428b5542 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x425e2bc1 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x3d06ffd4 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x5aafb7ac [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x2aa6d7a7 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x785c2ae8 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x6619d182 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x7945ae15 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0xd98123d [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x41d31867 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x3a2d8098 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x610412ac [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x7fb19196 [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x569750fd [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0x5ae7b35c [0184.573] RtlRandomEx (in: Seed=0x7bbf918 | out: Seed=0x7bbf918) returned 0xc60e8f3 [0184.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bc0a0 [0184.584] ReadFile (in: hFile=0x1eec, lpBuffer=0x80b8498, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0x7bbf914, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesRead=0x7bbf914*=0x116, lpOverlapped=0x0) returned 1 [0184.584] SetFilePointerEx (in: hFile=0x1eec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.584] WriteFile (in: hFile=0x1eec, lpBuffer=0x80bc0a0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x7bbf918, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesWritten=0x7bbf918*=0x116, lpOverlapped=0x0) returned 1 [0189.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43460 [0189.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42bf0 [0189.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0189.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0189.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0189.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0beb0) returned 1 [0189.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4de8) returned 1 [0189.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0189.415] SetFilePointerEx (in: hFile=0x1eec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.415] WriteFile (in: hFile=0x1eec, lpBuffer=0x81e0138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7bbf98c, lpOverlapped=0x0 | out: lpBuffer=0x81e0138*, lpNumberOfBytesWritten=0x7bbf98c*=0x10c, lpOverlapped=0x0) returned 1 [0190.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0138) returned 1 [0190.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0190.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0190.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0190.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0190.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca90) returned 1 [0190.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0190.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0190.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404080 [0190.521] wcscpy (in: _Dest=0x8404080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" [0190.521] wcscat (in: _Dest=0x8404080, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.f0dbec" [0190.521] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.f0dbec", NtPathName=0x7bbf910, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9d00 [0190.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9d00) returned 1 [0190.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f1848) returned 1 [0190.669] NtQueryInformationFile (in: FileHandle=0x1eec, IoStatusBlock=0x7bbf8e8, FileInformation=0x7bbf8f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7bbf8e8, FileInformation=0x7bbf8f0) returned 0x0 [0190.669] NtSetInformationFile (FileHandle=0x1eec, IoStatusBlock=0x7bbf8e8, FileInformation=0x7bbf8f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404080) returned 1 [0190.804] FlushFileBuffers (hFile=0x1eec) returned 1 [0190.819] CloseHandle (hObject=0x1eec) returned 1 [0193.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x8404698 [0193.155] wcscpy (in: _Dest=0x8404698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" [0193.155] wcscat (in: _Dest=0x8404698, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\F0DBEC-Readme.txt" [0193.155] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\f0dbec-readme.txt")) returned 0xffffffff [0193.155] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b64 [0196.446] WriteFile (in: hFile=0x1b64, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7bbf934, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7bbf934*=0x70c, lpOverlapped=0x0) returned 1 [0197.495] CloseHandle (hObject=0x1b64) returned 1 [0198.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404698) returned 1 [0198.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0458) returned 1 Thread: id = 4518 os_tid = 0x1ed8 [0175.819] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json")) returned 0x2020 [0177.990] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.920] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16dc [0190.282] GetFileSizeEx (in: hFile=0x16dc, lpFileSize=0xb09fe50 | out: lpFileSize=0xb09fe50*=345) returned 1 [0190.282] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x155, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.282] ReadFile (in: hFile=0x16dc, lpBuffer=0xb09fe5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb09fe38, lpOverlapped=0x0 | out: lpBuffer=0xb09fe5c*, lpNumberOfBytesRead=0xb09fe38*=0x4, lpOverlapped=0x0) returned 1 [0190.284] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42290 [0190.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0190.284] NtQuerySystemTime (in: CurrentTime=0xb09fdd8 | out: CurrentTime=0xb09fdd8*=132471540581856000) returned 0x0 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x3a74e3dd [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x3ad041ba [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x76b8638a [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x7ebe7f4b [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x303816 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x61573203 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x43619102 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x402148f0 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x3a8e9a22 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x6fcf64f6 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x6bb1bd07 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x509d2cc5 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x31bad1c7 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x3fa59ae8 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x7c30b189 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x3154f222 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x23fd3872 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x4d0d1fd2 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x79e54aa4 [0190.284] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x52ee7b14 [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x60fa7bd7 [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x7f73cd2f [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x8326d9 [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0xb4eb778 [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0xf3b50be [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x4e1372b1 [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x4467a23b [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x71898a41 [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x2bce343a [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x336fb553 [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x6ddae9c1 [0190.285] RtlRandomEx (in: Seed=0xb09fdd0 | out: Seed=0xb09fdd0) returned 0x7c74ad8e [0190.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0190.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0190.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bc0a0 [0190.294] ReadFile (in: hFile=0x16dc, lpBuffer=0x80b8498, nNumberOfBytesToRead=0x159, lpNumberOfBytesRead=0xb09fdcc, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesRead=0xb09fdcc*=0x159, lpOverlapped=0x0) returned 1 [0190.294] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.294] WriteFile (in: hFile=0x16dc, lpBuffer=0x80bc0a0*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0xb09fdd0, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesWritten=0xb09fdd0*=0x159, lpOverlapped=0x0) returned 1 [0190.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42588 [0190.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0190.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0190.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0190.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 [0190.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b54f0) returned 1 [0190.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69180 [0190.625] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.625] WriteFile (in: hFile=0x16dc, lpBuffer=0x30bbb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb09fe44, lpOverlapped=0x0 | out: lpBuffer=0x30bbb60*, lpNumberOfBytesWritten=0xb09fe44*=0x10c, lpOverlapped=0x0) returned 1 [0190.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0190.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0190.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0190.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0190.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0190.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42290) returned 1 [0190.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426f0) returned 1 [0190.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42448) returned 1 [0190.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8860 [0190.786] wcscpy (in: _Dest=0x3ef8860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" [0190.786] wcscat (in: _Dest=0x3ef8860, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.f0dbec" [0190.787] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0xb09fdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9928 [0193.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9928) returned 1 [0193.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83faae8) returned 1 [0193.134] NtQueryInformationFile (in: FileHandle=0x16dc, IoStatusBlock=0xb09fda0, FileInformation=0xb09fda8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb09fda0, FileInformation=0xb09fda8) returned 0x0 [0193.134] NtSetInformationFile (FileHandle=0x16dc, IoStatusBlock=0xb09fda0, FileInformation=0xb09fda8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8860) returned 1 [0196.070] FlushFileBuffers (hFile=0x16dc) returned 1 [0196.073] CloseHandle (hObject=0x16dc) returned 1 [0196.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x8404560 [0196.532] wcscpy (in: _Dest=0x8404560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" [0196.532] wcscat (in: _Dest=0x8404560, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\F0DBEC-Readme.txt" [0196.532] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0196.532] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.375] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb09fdec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb09fdec*=0x70c, lpOverlapped=0x0) returned 1 [0197.377] CloseHandle (hObject=0x1204) returned 1 [0197.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404560) returned 1 [0197.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0580) returned 1 Thread: id = 4519 os_tid = 0x1f38 [0175.819] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json")) returned 0x2020 [0177.991] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.951] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1708 [0190.449] GetFileSizeEx (in: hFile=0x1708, lpFileSize=0xac1fe70 | out: lpFileSize=0xac1fe70*=263) returned 1 [0190.449] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.449] ReadFile (in: hFile=0x1708, lpBuffer=0xac1fe7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac1fe58, lpOverlapped=0x0 | out: lpBuffer=0xac1fe7c*, lpNumberOfBytesRead=0xac1fe58*=0x4, lpOverlapped=0x0) returned 1 [0190.451] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42178 [0190.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42858 [0190.451] NtQuerySystemTime (in: CurrentTime=0xac1fdf8 | out: CurrentTime=0xac1fdf8*=132471540583572000) returned 0x0 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x30269154 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x757e0801 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x31689c95 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x647b22d1 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x28987066 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x18a3bf28 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x6eeecefb [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x91abc9d [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x64c16072 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x1c477503 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x2f9c58a [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x25e9a78e [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0xff082a8 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x7274d3f8 [0190.451] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x71e44c5c [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x4dfea20a [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x12d0854b [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x4ff2bf41 [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x6c039981 [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x74df561b [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x3335720e [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x14ad2673 [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x5288de2d [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x6b1eab10 [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x537adf8e [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x622d094 [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x6c2e7241 [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x69f8a134 [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x5161a83a [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x49b8ac14 [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x152139b3 [0190.452] RtlRandomEx (in: Seed=0xac1fdf0 | out: Seed=0xac1fdf0) returned 0x7bb81413 [0190.460] ReadFile (in: hFile=0x1708, lpBuffer=0x8288458, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0xac1fdec, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesRead=0xac1fdec*=0x107, lpOverlapped=0x0) returned 1 [0190.460] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.460] WriteFile (in: hFile=0x1708, lpBuffer=0x828c060*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0xac1fdf0, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesWritten=0xac1fdf0*=0x107, lpOverlapped=0x0) returned 1 [0193.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1310 [0193.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0193.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1798) returned 1 [0193.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0193.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0193.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 [0193.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b63d8) returned 1 [0193.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0193.074] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.074] WriteFile (in: hFile=0x1708, lpBuffer=0x81dfaa8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xac1fe64, lpOverlapped=0x0 | out: lpBuffer=0x81dfaa8*, lpNumberOfBytesWritten=0xac1fe64*=0x10c, lpOverlapped=0x0) returned 1 [0196.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfaa8) returned 1 [0196.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0196.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1798) returned 1 [0196.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0196.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0196.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42178) returned 1 [0196.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42768) returned 1 [0196.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42650) returned 1 [0196.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404a40 [0196.048] wcscpy (in: _Dest=0x8404a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" [0196.048] wcscat (in: _Dest=0x8404a40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.f0dbec" [0196.048] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.f0dbec", NtPathName=0xac1fde8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9f90 [0196.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9f90) returned 1 [0196.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e060a0) returned 1 [0196.499] NtQueryInformationFile (in: FileHandle=0x1708, IoStatusBlock=0xac1fdc0, FileInformation=0xac1fdc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xac1fdc0, FileInformation=0xac1fdc8) returned 0x0 [0196.500] NtSetInformationFile (FileHandle=0x1708, IoStatusBlock=0xac1fdc0, FileInformation=0xac1fdc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404a40) returned 1 [0196.790] FlushFileBuffers (hFile=0x1708) returned 1 [0196.808] CloseHandle (hObject=0x1708) returned 1 [0197.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f4140 [0197.036] wcscpy (in: _Dest=0x81f4140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" [0197.036] wcscat (in: _Dest=0x81f4140, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\F0DBEC-Readme.txt" [0197.036] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\f0dbec-readme.txt")) returned 0xffffffff [0197.037] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2534 [0197.440] WriteFile (in: hFile=0x2534, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xac1fe0c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xac1fe0c*=0x70c, lpOverlapped=0x0) returned 1 [0197.836] CloseHandle (hObject=0x2534) returned 1 [0197.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4140) returned 1 [0197.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d06a8) returned 1 Thread: id = 4520 os_tid = 0x1f3c [0175.819] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json")) returned 0x2020 [0177.991] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0189.951] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x170c [0190.461] GetFileSizeEx (in: hFile=0x170c, lpFileSize=0xa18f9d0 | out: lpFileSize=0xa18f9d0*=264) returned 1 [0190.461] SetFilePointerEx (in: hFile=0x170c, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.462] ReadFile (in: hFile=0x170c, lpBuffer=0xa18f9dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa18f9b8, lpOverlapped=0x0 | out: lpBuffer=0xa18f9dc*, lpNumberOfBytesRead=0xa18f9b8*=0x4, lpOverlapped=0x0) returned 1 [0190.463] SetFilePointerEx (in: hFile=0x170c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42858 [0190.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425b0 [0190.463] NtQuerySystemTime (in: CurrentTime=0xa18f958 | out: CurrentTime=0xa18f958*=132471540583728000) returned 0x0 [0190.463] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x656f7c8f [0190.463] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x9b376a4 [0190.463] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x60ad0d8b [0190.463] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x4d0e965c [0190.463] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x6e0def71 [0190.463] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x5b967461 [0190.463] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x34058640 [0190.463] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x60ee8d26 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x650b081e [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x403bf27e [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x73f4040 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x19a3203f [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x62254cc9 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x4189b05 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x1caebaa0 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x802a782 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x21e2c74c [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x48af800a [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x7e53f950 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x7de4cc02 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x5e293da7 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x11d9c476 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x5408388f [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x3a3c1eb9 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x3416e6b3 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0xbae4a75 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x5eb57c22 [0190.464] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x50cf4b42 [0190.465] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x30d36d06 [0190.465] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x3e0d0abd [0190.465] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x6c8423c1 [0190.465] RtlRandomEx (in: Seed=0xa18f950 | out: Seed=0xa18f950) returned 0x7d7b37e2 [0190.473] ReadFile (in: hFile=0x170c, lpBuffer=0x828fc68, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xa18f94c, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesRead=0xa18f94c*=0x108, lpOverlapped=0x0) returned 1 [0190.473] SetFilePointerEx (in: hFile=0x170c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.473] WriteFile (in: hFile=0x170c, lpBuffer=0x8293870*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xa18f950, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesWritten=0xa18f950*=0x108, lpOverlapped=0x0) returned 1 [0193.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0193.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1090 [0193.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0193.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8293870) returned 1 [0193.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828fc68) returned 1 [0193.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68588) returned 1 [0193.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4c38) returned 1 [0193.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69180 [0193.077] SetFilePointerEx (in: hFile=0x170c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.077] WriteFile (in: hFile=0x170c, lpBuffer=0x81e0368*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa18f9c4, lpOverlapped=0x0 | out: lpBuffer=0x81e0368*, lpNumberOfBytesWritten=0xa18f9c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0368) returned 1 [0196.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0196.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0196.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0196.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0196.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42858) returned 1 [0196.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427e0) returned 1 [0196.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42600) returned 1 [0196.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404f20 [0196.059] wcscpy (in: _Dest=0x8404f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" [0196.059] wcscat (in: _Dest=0x8404f20, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.f0dbec" [0196.059] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0xa18f948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9d00 [0196.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9d00) returned 1 [0196.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0a150) returned 1 [0196.525] NtQueryInformationFile (in: FileHandle=0x170c, IoStatusBlock=0xa18f920, FileInformation=0xa18f928, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa18f920, FileInformation=0xa18f928) returned 0x0 [0196.525] NtSetInformationFile (FileHandle=0x170c, IoStatusBlock=0xa18f920, FileInformation=0xa18f928, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404f20) returned 1 [0196.813] FlushFileBuffers (hFile=0x170c) returned 1 [0196.821] CloseHandle (hObject=0x170c) returned 1 [0197.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f3c60 [0197.044] wcscpy (in: _Dest=0x81f3c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" [0197.044] wcscat (in: _Dest=0x81f3c60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\F0DBEC-Readme.txt" [0197.044] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0197.044] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1920 [0197.442] WriteFile (in: hFile=0x1920, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa18f96c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa18f96c*=0x70c, lpOverlapped=0x0) returned 1 [0197.852] CloseHandle (hObject=0x1920) returned 1 [0197.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3c60) returned 1 [0197.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d07d0) returned 1 Thread: id = 4521 os_tid = 0x1f40 [0175.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346b60 [0175.823] wcscpy (in: _Dest=0x8346b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0175.823] wcscat (in: _Dest=0x8346b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" [0175.823] wcscat (in: _Dest=0x8346b60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*" [0175.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e798 [0175.823] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82ad110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82af820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82af820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099610 [0175.823] wcscmp (_String1=".", _String2=".") returned 0 [0175.823] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82ad110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82af820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82af820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.823] wcscmp (_String1="..", _String2=".") returned 1 [0175.823] wcscmp (_String1="..", _String2="..") returned 0 [0175.824] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82af820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82b1f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0175.824] wcscmp (_String1="messages.json", _String2=".") returned 1 [0175.824] wcscmp (_String1="messages.json", _String2="..") returned 1 [0175.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e2678 [0175.824] wcscpy (in: _Dest=0x81e2678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0175.824] wcscat (in: _Dest=0x81e2678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" [0175.824] wcscat (in: _Dest=0x81e2678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" [0177.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e2678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0177.924] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82af820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82b1f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.924] FindClose (in: hFindFile=0x8099610 | out: hFindFile=0x8099610) returned 1 [0177.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e798) returned 1 [0177.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346b60) returned 1 [0177.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054af8) returned 1 Thread: id = 4522 os_tid = 0x1f44 [0175.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346a48 [0175.824] wcscpy (in: _Dest=0x8346a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0175.824] wcscat (in: _Dest=0x8346a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\" [0175.824] wcscat (in: _Dest=0x8346a48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*" [0175.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090e18 [0175.825] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82bbb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82be280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82be280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0177.529] wcscmp (_String1=".", _String2=".") returned 0 [0177.529] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82bbb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82be280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82be280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.530] wcscmp (_String1="..", _String2=".") returned 1 [0177.530] wcscmp (_String1="..", _String2="..") returned 0 [0177.530] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82be280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82c0990, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.530] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.530] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8187488 [0177.530] wcscpy (in: _Dest=0x8187488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0177.530] wcscat (in: _Dest=0x8187488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\" [0177.530] wcscat (in: _Dest=0x8187488, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" [0179.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0179.444] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82be280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82c0990, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.444] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0179.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090e18) returned 1 [0179.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346a48) returned 1 [0179.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f62a8) returned 1 Thread: id = 4523 os_tid = 0x1f48 [0175.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346930 [0175.828] wcscpy (in: _Dest=0x8346930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0175.829] wcscat (in: _Dest=0x8346930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" [0175.829] wcscat (in: _Dest=0x8346930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*" [0175.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80906e0 [0175.829] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82c57b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82ccce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37cd8 [0177.530] wcscmp (_String1=".", _String2=".") returned 0 [0177.530] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82c57b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82ccce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.530] wcscmp (_String1="..", _String2=".") returned 1 [0177.530] wcscmp (_String1="..", _String2="..") returned 0 [0177.531] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82ccce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.531] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.531] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81875b0 [0177.531] wcscpy (in: _Dest=0x81875b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0177.531] wcscat (in: _Dest=0x81875b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" [0177.531] wcscat (in: _Dest=0x81875b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" [0178.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81875b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0178.566] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82ccce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.566] FindClose (in: hFindFile=0x3f37cd8 | out: hFindFile=0x3f37cd8) returned 1 [0178.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80906e0) returned 1 [0178.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346930) returned 1 [0178.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f61a0) returned 1 Thread: id = 4524 os_tid = 0x1f4c [0175.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347ab0 [0175.830] wcscpy (in: _Dest=0x8347ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0175.830] wcscat (in: _Dest=0x8347ab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" [0175.830] wcscat (in: _Dest=0x8347ab0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*" [0175.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ffa8 [0175.830] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82d4210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82d6920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38058 [0177.531] wcscmp (_String1=".", _String2=".") returned 0 [0177.531] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82d4210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82d6920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.531] wcscmp (_String1="..", _String2=".") returned 1 [0177.532] wcscmp (_String1="..", _String2="..") returned 0 [0177.532] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82d6920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.532] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.532] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81876d8 [0177.532] wcscpy (in: _Dest=0x81876d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0177.532] wcscat (in: _Dest=0x81876d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" [0177.532] wcscat (in: _Dest=0x81876d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" [0178.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81876d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0178.569] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82d6920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.569] FindClose (in: hFindFile=0x3f38058 | out: hFindFile=0x3f38058) returned 1 [0178.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ffa8) returned 1 [0178.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347ab0) returned 1 [0178.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6098) returned 1 Thread: id = 4525 os_tid = 0x1f50 [0175.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347bc8 [0175.836] wcscpy (in: _Dest=0x8347bc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0175.836] wcscat (in: _Dest=0x8347bc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" [0175.836] wcscat (in: _Dest=0x8347bc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*" [0175.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80917b8 [0175.836] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82e2c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e5380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82e5380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0177.532] wcscmp (_String1=".", _String2=".") returned 0 [0177.532] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82e2c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e5380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82e5380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.533] wcscmp (_String1="..", _String2=".") returned 1 [0177.533] wcscmp (_String1="..", _String2="..") returned 0 [0177.533] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82e5380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e7a90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.533] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.533] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8187800 [0177.533] wcscpy (in: _Dest=0x8187800, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0177.533] wcscat (in: _Dest=0x8187800, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" [0177.533] wcscat (in: _Dest=0x8187800, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" [0178.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0178.572] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82e5380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e7a90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.572] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0178.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80917b8) returned 1 [0178.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347bc8) returned 1 [0178.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5f90) returned 1 Thread: id = 4526 os_tid = 0x1f54 [0175.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347ce0 [0175.842] wcscpy (in: _Dest=0x8347ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0175.842] wcscat (in: _Dest=0x8347ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" [0175.842] wcscat (in: _Dest=0x8347ce0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*" [0175.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090bb0 [0175.842] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82eefc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f16d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82f16d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37698 [0177.533] wcscmp (_String1=".", _String2=".") returned 0 [0177.533] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82eefc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f16d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82f16d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.533] wcscmp (_String1="..", _String2=".") returned 1 [0177.533] wcscmp (_String1="..", _String2="..") returned 0 [0177.533] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82f16d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f3de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.533] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.534] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8187928 [0177.534] wcscpy (in: _Dest=0x8187928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0177.534] wcscat (in: _Dest=0x8187928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" [0177.534] wcscat (in: _Dest=0x8187928, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" [0178.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0178.366] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82f16d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f3de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.366] FindClose (in: hFindFile=0x3f37698 | out: hFindFile=0x3f37698) returned 1 [0178.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090bb0) returned 1 [0178.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347ce0) returned 1 [0178.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5a68) returned 1 Thread: id = 4527 os_tid = 0x1f58 [0175.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347df8 [0175.844] wcscpy (in: _Dest=0x8347df8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0175.844] wcscat (in: _Dest=0x8347df8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" [0175.844] wcscat (in: _Dest=0x8347df8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*" [0175.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091c88 [0175.844] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82f8c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fb310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82fb310, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b58 [0177.534] wcscmp (_String1=".", _String2=".") returned 0 [0177.534] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82f8c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fb310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82fb310, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.534] wcscmp (_String1="..", _String2=".") returned 1 [0177.534] wcscmp (_String1="..", _String2="..") returned 0 [0177.534] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82fb310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fda20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.534] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.534] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8187a50 [0177.535] wcscpy (in: _Dest=0x8187a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0177.535] wcscat (in: _Dest=0x8187a50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" [0177.535] wcscat (in: _Dest=0x8187a50, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" [0178.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187a50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0178.369] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82fb310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fda20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.369] FindClose (in: hFindFile=0x3f37b58 | out: hFindFile=0x3f37b58) returned 1 [0178.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091c88) returned 1 [0178.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347df8) returned 1 [0178.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5c78) returned 1 Thread: id = 4528 os_tid = 0x1f5c [0175.850] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json")) returned 0x2020 [0177.992] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0189.920] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x27d4 [0193.240] GetFileSizeEx (in: hFile=0x27d4, lpFileSize=0xcb2ff38 | out: lpFileSize=0xcb2ff38*=179) returned 1 [0193.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43370 [0193.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0eb0 [0193.240] NtQuerySystemTime (in: CurrentTime=0xcb2fec0 | out: CurrentTime=0xcb2fec0*=132471540611496000) returned 0x0 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x56ff9c08 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x6a5f0698 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x7a3028bd [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x6a5f0698 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x2686aed1 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x72a5ff5b [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x4e6fb566 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x5dde0a34 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x37495578 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x5abcd767 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x2c9ea8dd [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x207210f2 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x4e38e401 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x78d03067 [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x82b749e [0193.240] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x6ae88d9c [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x18163d05 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x10f49945 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x70d394b6 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x45b52778 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0xc2d93ee [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x71be0487 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x6830130c [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x75800b74 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x24758727 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0xbde394 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0xdf15e0f [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x61eb3166 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x11adaff1 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x361ef767 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x4e0e0b41 [0193.241] RtlRandomEx (in: Seed=0xcb2feb8 | out: Seed=0xcb2feb8) returned 0x69af3d52 [0193.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8293870 [0193.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8288458 [0193.249] ReadFile (in: hFile=0x27d4, lpBuffer=0x8293870, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xcb2feb4, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesRead=0xcb2feb4*=0xb3, lpOverlapped=0x0) returned 1 [0193.251] SetFilePointerEx (in: hFile=0x27d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.251] WriteFile (in: hFile=0x27d4, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xcb2feb8, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xcb2feb8*=0xb3, lpOverlapped=0x0) returned 1 [0201.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062760 [0201.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062788 [0201.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062788) returned 1 [0201.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0201.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8293870) returned 1 [0201.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0201.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e54a8) returned 1 [0201.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fc18 [0201.548] SetFilePointerEx (in: hFile=0x27d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.548] WriteFile (in: hFile=0x27d4, lpBuffer=0x30bb700*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcb2ff2c, lpOverlapped=0x0 | out: lpBuffer=0x30bb700*, lpNumberOfBytesWritten=0xcb2ff2c*=0x10c, lpOverlapped=0x0) returned 1 [0203.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0203.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fbe8) returned 1 [0203.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062788) returned 1 [0203.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc18) returned 1 [0203.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062760) returned 1 [0203.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0203.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3368) returned 1 [0203.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1720) returned 1 [0203.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x84042f0 [0203.758] wcscpy (in: _Dest=0x84042f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" [0203.758] wcscat (in: _Dest=0x84042f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.f0dbec" [0203.758] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.f0dbec", NtPathName=0xcb2feb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9408 [0204.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9408) returned 1 [0204.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8314838) returned 1 [0204.251] NtQueryInformationFile (in: FileHandle=0x27d4, IoStatusBlock=0xcb2fe88, FileInformation=0xcb2fe90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcb2fe88, FileInformation=0xcb2fe90) returned 0x0 [0204.251] NtSetInformationFile (FileHandle=0x27d4, IoStatusBlock=0xcb2fe88, FileInformation=0xcb2fe90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84042f0) returned 1 [0204.635] FlushFileBuffers (hFile=0x27d4) returned 1 [0204.650] CloseHandle (hObject=0x27d4) returned 1 [0207.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83471b8 [0207.793] wcscpy (in: _Dest=0x83471b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" [0207.793] wcscat (in: _Dest=0x83471b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\F0DBEC-Readme.txt" [0207.793] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\f0dbec-readme.txt")) returned 0xffffffff [0207.793] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18f0 [0208.358] WriteFile (in: hFile=0x18f0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xcb2fed4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xcb2fed4*=0x70c, lpOverlapped=0x0) returned 1 [0209.120] CloseHandle (hObject=0x18f0) returned 1 [0209.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83471b8) returned 1 [0209.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8300) returned 1 Thread: id = 4529 os_tid = 0x1f60 [0175.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347f10 [0175.853] wcscpy (in: _Dest=0x8347f10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0175.853] wcscat (in: _Dest=0x8347f10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" [0175.853] wcscat (in: _Dest=0x8347f10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*" [0175.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f870 [0175.853] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8304f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8309d70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0177.535] wcscmp (_String1=".", _String2=".") returned 0 [0177.535] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8304f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8309d70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.535] wcscmp (_String1="..", _String2=".") returned 1 [0177.535] wcscmp (_String1="..", _String2="..") returned 0 [0177.535] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8309d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.535] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.535] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8187b78 [0177.535] wcscpy (in: _Dest=0x8187b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0177.535] wcscat (in: _Dest=0x8187b78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" [0177.536] wcscat (in: _Dest=0x8187b78, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" [0178.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0178.371] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8309d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.371] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0178.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f870) returned 1 [0178.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347f10) returned 1 [0178.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83359b0) returned 1 Thread: id = 4530 os_tid = 0x1f64 [0175.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8348028 [0175.855] wcscpy (in: _Dest=0x8348028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0175.855] wcscat (in: _Dest=0x8348028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" [0175.855] wcscat (in: _Dest=0x8348028, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*" [0175.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805dfe0 [0175.855] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83112a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83160c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83160c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0177.536] wcscmp (_String1=".", _String2=".") returned 0 [0177.536] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83112a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83160c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83160c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.536] wcscmp (_String1="..", _String2=".") returned 1 [0177.536] wcscmp (_String1="..", _String2="..") returned 0 [0177.536] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83160c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83187d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.536] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.536] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8187ca0 [0177.536] wcscpy (in: _Dest=0x8187ca0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0177.536] wcscat (in: _Dest=0x8187ca0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" [0177.536] wcscat (in: _Dest=0x8187ca0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" [0178.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0178.374] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83160c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83187d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0178.374] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0178.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805dfe0) returned 1 [0178.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348028) returned 1 [0178.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334a38) returned 1 Thread: id = 4531 os_tid = 0x1f68 [0175.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x83487d0 [0175.861] wcscpy (in: _Dest=0x83487d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0175.861] wcscat (in: _Dest=0x83487d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" [0175.861] wcscat (in: _Dest=0x83487d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*" [0175.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e718 [0175.861] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe831d5f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe831fd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe831fd00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38218 [0176.271] wcscmp (_String1=".", _String2=".") returned 0 [0176.271] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe831d5f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe831fd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe831fd00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.271] wcscmp (_String1="..", _String2=".") returned 1 [0176.271] wcscmp (_String1="..", _String2="..") returned 0 [0176.271] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe831fd00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8322410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.272] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.272] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8186d98 [0176.272] wcscpy (in: _Dest=0x8186d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0176.272] wcscat (in: _Dest=0x8186d98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" [0176.272] wcscat (in: _Dest=0x8186d98, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" [0177.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0177.879] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe831fd00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8322410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.879] FindClose (in: hFindFile=0x3f38218 | out: hFindFile=0x3f38218) returned 1 [0177.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e718) returned 1 [0177.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83487d0) returned 1 [0177.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4098) returned 1 Thread: id = 4532 os_tid = 0x1f6c [0175.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bd370 [0175.863] wcscpy (in: _Dest=0x30bd370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0175.863] wcscat (in: _Dest=0x30bd370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" [0175.863] wcscat (in: _Dest=0x30bd370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*" [0175.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80614d0 [0175.863] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8327230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe832c050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0176.272] wcscmp (_String1=".", _String2=".") returned 0 [0176.272] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8327230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe832c050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.272] wcscmp (_String1="..", _String2=".") returned 1 [0176.272] wcscmp (_String1="..", _String2="..") returned 0 [0176.272] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe832c050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0176.272] wcscmp (_String1="messages.json", _String2=".") returned 1 [0176.272] wcscmp (_String1="messages.json", _String2="..") returned 1 [0176.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8186ec0 [0176.273] wcscpy (in: _Dest=0x8186ec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0176.273] wcscat (in: _Dest=0x8186ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" [0176.273] wcscat (in: _Dest=0x8186ec0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" [0177.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0177.881] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe832c050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.882] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0177.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80614d0) returned 1 [0177.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0177.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346c78) returned 1 Thread: id = 4533 os_tid = 0x1f70 [0175.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bd258 [0175.864] wcscpy (in: _Dest=0x30bd258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0175.864] wcscat (in: _Dest=0x30bd258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\" [0175.864] wcscat (in: _Dest=0x30bd258, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*" [0175.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8061738 [0175.864] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x8061738 | out: lpFindFileData=0x8061738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37858 [0177.528] wcscmp (_String1=".", _String2=".") returned 0 [0177.528] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8061738 | out: lpFindFileData=0x8061738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.529] wcscmp (_String1="..", _String2=".") returned 1 [0177.529] wcscmp (_String1="..", _String2="..") returned 0 [0177.529] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8061738 | out: lpFindFileData=0x8061738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83383a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe833aab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8538ec0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.529] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.529] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8187360 [0177.529] wcscpy (in: _Dest=0x8187360, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0177.529] wcscat (in: _Dest=0x8187360, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\" [0177.529] wcscat (in: _Dest=0x8187360, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" [0180.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0180.729] FindNextFileW (in: hFindFile=0x3f37858, lpFindFileData=0x8061738 | out: lpFindFileData=0x8061738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83383a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe833aab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8538ec0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0180.729] FindClose (in: hFindFile=0x3f37858 | out: hFindFile=0x3f37858) returned 1 [0180.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061738) returned 1 [0180.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0180.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83486b8) returned 1 Thread: id = 4534 os_tid = 0x1f74 [0175.865] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0184.440] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0194.655] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1914 [0194.655] GetFileSizeEx (in: hFile=0x1914, lpFileSize=0xd8cfc00 | out: lpFileSize=0xd8cfc00*=221) returned 1 [0194.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0194.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304238 [0194.656] NtQuerySystemTime (in: CurrentTime=0xd8cfb88 | out: CurrentTime=0xd8cfb88*=132471540625380000) returned 0x0 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x7962d36 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x422db0c5 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x4155b241 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x3c5e7506 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x1ccf415e [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x82bd0f2 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x4b8aea9c [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x3b48d398 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x76662499 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x4d2a6f0a [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x60ed68b8 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x2cd16cf1 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x458180e [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x718953fb [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x497f7e99 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x49eaca29 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x2c788dd1 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x31ce4ec7 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x3012da5 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0xb4ef8ba [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x29ea2d74 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x6f478dd0 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x3c864b8a [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x68a359e7 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x22644d31 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x7b31198c [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x7f7e75be [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x5b0e9725 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0xad265e9 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x804f3d [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0x63986d77 [0194.656] RtlRandomEx (in: Seed=0xd8cfb80 | out: Seed=0xd8cfb80) returned 0xb4ef8ba [0194.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304468 [0194.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30152b0 [0194.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0194.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0194.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304238) returned 1 [0194.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e5388 [0194.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30152b0 [0194.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149c6060 [0194.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149c9c68 [0194.670] ReadFile (in: hFile=0x1914, lpBuffer=0x149c6060, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xd8cfb7c, lpOverlapped=0x0 | out: lpBuffer=0x149c6060*, lpNumberOfBytesRead=0xd8cfb7c*=0xdd, lpOverlapped=0x0) returned 1 [0194.677] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.677] WriteFile (in: hFile=0x1914, lpBuffer=0x149c9c68*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xd8cfb80, lpOverlapped=0x0 | out: lpBuffer=0x149c9c68*, lpNumberOfBytesWritten=0xd8cfb80*=0xdd, lpOverlapped=0x0) returned 1 [0196.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432d0 [0196.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434d8 [0196.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434d8) returned 1 [0196.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149c9c68) returned 1 [0196.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149c6060) returned 1 [0196.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0196.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5388) returned 1 [0196.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e700c8 [0196.320] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.320] WriteFile (in: hFile=0x1914, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd8cfbf4, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0xd8cfbf4*=0x10c, lpOverlapped=0x0) returned 1 [0196.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0196.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70098) returned 1 [0196.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434d8) returned 1 [0196.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700c8) returned 1 [0196.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432d0) returned 1 [0196.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0196.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304468) returned 1 [0196.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f18) returned 1 [0196.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x81f6890 [0196.709] wcscpy (in: _Dest=0x81f6890, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" [0196.709] wcscat (in: _Dest=0x81f6890, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.f0dbec" [0196.709] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.f0dbec", NtPathName=0xd8cfb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e177a0 [0196.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e177a0) returned 1 [0196.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fd608) returned 1 [0196.917] NtQueryInformationFile (in: FileHandle=0x1914, IoStatusBlock=0xd8cfb50, FileInformation=0xd8cfb58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd8cfb50, FileInformation=0xd8cfb58) returned 0x0 [0196.917] NtSetInformationFile (FileHandle=0x1914, IoStatusBlock=0xd8cfb50, FileInformation=0xd8cfb58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6890) returned 1 [0197.206] FlushFileBuffers (hFile=0x1914) returned 1 [0197.217] CloseHandle (hObject=0x1914) returned 1 [0197.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f6c38 [0197.344] wcscpy (in: _Dest=0x81f6c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" [0197.344] wcscat (in: _Dest=0x81f6c38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\F0DBEC-Readme.txt" [0197.344] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\f0dbec-readme.txt")) returned 0xffffffff [0197.344] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1724 [0197.477] WriteFile (in: hFile=0x1724, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd8cfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd8cfb9c*=0x70c, lpOverlapped=0x0) returned 1 [0198.108] CloseHandle (hObject=0x1724) returned 1 [0198.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6c38) returned 1 [0198.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2b48) returned 1 Thread: id = 4535 os_tid = 0x1f78 [0175.865] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020 [0184.441] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0194.677] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1900 [0194.678] GetFileSizeEx (in: hFile=0x1900, lpFileSize=0xd79fc48 | out: lpFileSize=0xd79fc48*=214) returned 1 [0194.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304238 [0194.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303dd8 [0194.678] NtQuerySystemTime (in: CurrentTime=0xd79fbd0 | out: CurrentTime=0xd79fbd0*=132471540625692000) returned 0x0 [0194.678] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x3f28b081 [0194.678] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x804f3d [0194.678] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x6450fdcc [0194.678] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x67da5a7a [0194.678] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x347282ae [0194.678] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x2f4ea2c6 [0194.678] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x2757a8f0 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0xc205929 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x2cf80714 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x2ebdce8b [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x6dd93f9a [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x3a4f9c41 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x4f70af07 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x60ed68b8 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x3b9d18de [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x147cc5ed [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x347282ae [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x5b58e6ed [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x275ad3f0 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x76fa6d79 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x1d3f7b52 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x6926c02a [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x1dfbb3cc [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x4068d21f [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x3ed2ff01 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x152a11a9 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x68f705da [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x599d623f [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x644d5b67 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x4c3da2b7 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x33b7d324 [0194.679] RtlRandomEx (in: Seed=0xd79fbc8 | out: Seed=0xd79fbc8) returned 0x6f1b657 [0194.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f40 [0194.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0194.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304170 [0194.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0194.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303dd8) returned 1 [0194.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4f50 [0194.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0194.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149cd870 [0194.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149d1478 [0194.688] ReadFile (in: hFile=0x1900, lpBuffer=0x149cd870, nNumberOfBytesToRead=0xd6, lpNumberOfBytesRead=0xd79fbc4, lpOverlapped=0x0 | out: lpBuffer=0x149cd870*, lpNumberOfBytesRead=0xd79fbc4*=0xd6, lpOverlapped=0x0) returned 1 [0194.690] SetFilePointerEx (in: hFile=0x1900, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.690] WriteFile (in: hFile=0x1900, lpBuffer=0x149d1478*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0xd79fbc8, lpOverlapped=0x0 | out: lpBuffer=0x149d1478*, lpNumberOfBytesWritten=0xd79fbc8*=0xd6, lpOverlapped=0x0) returned 1 [0201.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062dc8 [0201.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062df0 [0201.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062df0) returned 1 [0201.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149d1478) returned 1 [0201.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149cd870) returned 1 [0201.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0201.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4f50) returned 1 [0201.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0201.607] SetFilePointerEx (in: hFile=0x1900, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.607] WriteFile (in: hFile=0x1900, lpBuffer=0x81e07c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd79fc3c, lpOverlapped=0x0 | out: lpBuffer=0x81e07c8*, lpNumberOfBytesWritten=0xd79fc3c*=0x10c, lpOverlapped=0x0) returned 1 [0202.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e07c8) returned 1 [0202.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0202.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062df0) returned 1 [0202.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0202.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062dc8) returned 1 [0202.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304238) returned 1 [0202.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f40) returned 1 [0202.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304170) returned 1 [0202.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403cd8 [0202.114] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" [0202.114] wcscat (in: _Dest=0x8403cd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.f0dbec" [0202.114] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.f0dbec", NtPathName=0xd79fbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa9d0 [0203.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa9d0) returned 1 [0203.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82040f8) returned 1 [0203.864] NtQueryInformationFile (in: FileHandle=0x1900, IoStatusBlock=0xd79fb98, FileInformation=0xd79fba0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd79fb98, FileInformation=0xd79fba0) returned 0x0 [0203.864] NtSetInformationFile (FileHandle=0x1900, IoStatusBlock=0xd79fb98, FileInformation=0xd79fba0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403cd8) returned 1 [0207.213] FlushFileBuffers (hFile=0x1900) returned 1 [0207.224] CloseHandle (hObject=0x1900) returned 1 [0208.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81efc10 [0208.239] wcscpy (in: _Dest=0x81efc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" [0208.239] wcscat (in: _Dest=0x81efc10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\F0DBEC-Readme.txt" [0208.239] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\f0dbec-readme.txt")) returned 0xffffffff [0208.239] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc4 [0208.873] WriteFile (in: hFile=0x2cc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd79fbe4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd79fbe4*=0x70c, lpOverlapped=0x0) returned 1 [0209.448] CloseHandle (hObject=0x2cc4) returned 1 [0209.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efc10) returned 1 [0209.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2c70) returned 1 Thread: id = 4536 os_tid = 0x1f7c [0175.866] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020 [0184.442] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0194.690] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18fc [0194.691] GetFileSizeEx (in: hFile=0x18fc, lpFileSize=0xb68fc00 | out: lpFileSize=0xb68fc00*=217) returned 1 [0194.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303dd8 [0194.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3043f0 [0194.691] NtQuerySystemTime (in: CurrentTime=0xb68fb88 | out: CurrentTime=0xb68fb88*=132471540625848000) returned 0x0 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x6aa314a4 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x5d132734 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x14f2924d [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x74a73e0e [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x3d34d560 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x41770e00 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x13a1f8f0 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x91bb856 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x91bb856 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x4ef4401f [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x23dcd182 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x6ec29d72 [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x3b6cb79c [0194.691] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x1bd0f22b [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x25b9bae0 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0xcf39db4 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x1e05c104 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x54e11f0b [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x1072d6e [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x2a41b74 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x28eb17c [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x64539bec [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0xcea8f94 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x3445609a [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x182d4f29 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x4ff2cf80 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x61126400 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x2cb4f7b6 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x58ff13ed [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x56026a54 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x71e7b355 [0194.692] RtlRandomEx (in: Seed=0xb68fb80 | out: Seed=0xb68fb80) returned 0x49eaca29 [0194.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3040f8 [0194.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014f68 [0194.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303fe0 [0194.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0194.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3043f0) returned 1 [0194.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e40f8 [0194.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014f68 [0194.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149d5080 [0194.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149d8c88 [0194.704] ReadFile (in: hFile=0x18fc, lpBuffer=0x149d5080, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0xb68fb7c, lpOverlapped=0x0 | out: lpBuffer=0x149d5080*, lpNumberOfBytesRead=0xb68fb7c*=0xd9, lpOverlapped=0x0) returned 1 [0194.707] SetFilePointerEx (in: hFile=0x18fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.707] WriteFile (in: hFile=0x18fc, lpBuffer=0x149d8c88*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0xb68fb80, lpOverlapped=0x0 | out: lpBuffer=0x149d8c88*, lpNumberOfBytesWritten=0xb68fb80*=0xd9, lpOverlapped=0x0) returned 1 [0201.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062e18 [0201.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062e40 [0201.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e40) returned 1 [0201.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149d8c88) returned 1 [0201.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149d5080) returned 1 [0201.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014f68) returned 1 [0201.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e40f8) returned 1 [0201.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0201.609] SetFilePointerEx (in: hFile=0x18fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.610] WriteFile (in: hFile=0x18fc, lpBuffer=0x81dfdf0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb68fbf4, lpOverlapped=0x0 | out: lpBuffer=0x81dfdf0*, lpNumberOfBytesWritten=0xb68fbf4*=0x10c, lpOverlapped=0x0) returned 1 [0202.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfdf0) returned 1 [0202.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0202.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e40) returned 1 [0202.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0202.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e18) returned 1 [0202.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303dd8) returned 1 [0202.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040f8) returned 1 [0202.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303fe0) returned 1 [0202.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405538 [0202.124] wcscpy (in: _Dest=0x8405538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" [0202.124] wcscat (in: _Dest=0x8405538, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.f0dbec" [0202.124] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0xb68fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8c58 [0203.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8c58) returned 1 [0203.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fae58) returned 1 [0203.869] NtQueryInformationFile (in: FileHandle=0x18fc, IoStatusBlock=0xb68fb50, FileInformation=0xb68fb58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb68fb50, FileInformation=0xb68fb58) returned 0x0 [0203.869] NtSetInformationFile (FileHandle=0x18fc, IoStatusBlock=0xb68fb50, FileInformation=0xb68fb58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405538) returned 1 [0207.226] FlushFileBuffers (hFile=0x18fc) returned 1 [0207.239] CloseHandle (hObject=0x18fc) returned 1 [0208.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f01d8 [0208.254] wcscpy (in: _Dest=0x81f01d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" [0208.254] wcscat (in: _Dest=0x81f01d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\F0DBEC-Readme.txt" [0208.254] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0208.254] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19cc [0208.874] WriteFile (in: hFile=0x19cc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb68fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb68fb9c*=0x70c, lpOverlapped=0x0) returned 1 [0209.454] CloseHandle (hObject=0x19cc) returned 1 [0209.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f01d8) returned 1 [0209.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2d98) returned 1 Thread: id = 4537 os_tid = 0x1f80 [0175.866] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020 [0184.443] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0194.707] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18f8 [0194.708] GetFileSizeEx (in: hFile=0x18f8, lpFileSize=0x22bfe58 | out: lpFileSize=0x22bfe58*=224) returned 1 [0194.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3043f0 [0194.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16a8 [0194.708] NtQuerySystemTime (in: CurrentTime=0x22bfde0 | out: CurrentTime=0x22bfde0*=132471540626004000) returned 0x0 [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x762e3890 [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x3012da5 [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x122e60e1 [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x4cd06ede [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x72d37d8a [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x764ebf3c [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x19f79f3d [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x19923b5e [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x5c0d09b6 [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x5b4694f1 [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x4d7dc8d7 [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x5f1ca45c [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x71aa549 [0194.708] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x57747658 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x78a1398c [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x5e246afa [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x28fa4fc0 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x69720a24 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x5208a127 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x678c202c [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x3825bc9d [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x133234dc [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x7f75b453 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x3e774fb6 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x7d05ddc9 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x41ca895 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x22d53cd1 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x3ea82641 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0xf2396a9 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x2c788dd1 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x4ff2cf80 [0194.709] RtlRandomEx (in: Seed=0x22bfdd8 | out: Seed=0x22bfdd8) returned 0x45a3e66f [0194.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1900 [0194.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0194.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0194.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0194.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16a8) returned 1 [0194.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4650 [0194.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0194.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149dc890 [0194.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149e0498 [0194.719] ReadFile (in: hFile=0x18f8, lpBuffer=0x149dc890, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0x22bfdd4, lpOverlapped=0x0 | out: lpBuffer=0x149dc890*, lpNumberOfBytesRead=0x22bfdd4*=0xe0, lpOverlapped=0x0) returned 1 [0194.721] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.721] WriteFile (in: hFile=0x18f8, lpBuffer=0x149e0498*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x22bfdd8, lpOverlapped=0x0 | out: lpBuffer=0x149e0498*, lpNumberOfBytesWritten=0x22bfdd8*=0xe0, lpOverlapped=0x0) returned 1 [0201.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062e68 [0201.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062e90 [0201.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e90) returned 1 [0201.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149e0498) returned 1 [0201.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149dc890) returned 1 [0201.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0201.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4650) returned 1 [0201.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69240 [0201.611] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.611] WriteFile (in: hFile=0x18f8, lpBuffer=0x81dfbc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x22bfe4c, lpOverlapped=0x0 | out: lpBuffer=0x81dfbc0*, lpNumberOfBytesWritten=0x22bfe4c*=0x10c, lpOverlapped=0x0) returned 1 [0202.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfbc0) returned 1 [0202.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69270) returned 1 [0202.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e90) returned 1 [0202.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69240) returned 1 [0202.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e68) returned 1 [0202.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3043f0) returned 1 [0202.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1900) returned 1 [0202.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0202.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8405670 [0202.123] wcscpy (in: _Dest=0x8405670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" [0202.123] wcscat (in: _Dest=0x8405670, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.f0dbec" [0202.123] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0x22bfdd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9e48 [0203.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9e48) returned 1 [0203.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fa390) returned 1 [0203.867] NtQueryInformationFile (in: FileHandle=0x18f8, IoStatusBlock=0x22bfda8, FileInformation=0x22bfdb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x22bfda8, FileInformation=0x22bfdb0) returned 0x0 [0203.867] NtSetInformationFile (FileHandle=0x18f8, IoStatusBlock=0x22bfda8, FileInformation=0x22bfdb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405670) returned 1 [0209.092] FlushFileBuffers (hFile=0x18f8) returned 1 [0209.506] CloseHandle (hObject=0x18f8) returned 1 [0209.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f6758 [0209.509] wcscpy (in: _Dest=0x81f6758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" [0209.509] wcscat (in: _Dest=0x81f6758, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\F0DBEC-Readme.txt" [0209.509] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0209.509] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c0 [0209.520] WriteFile (in: hFile=0x13c0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x22bfdf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x22bfdf4*=0x70c, lpOverlapped=0x0) returned 1 [0209.522] CloseHandle (hObject=0x13c0) returned 1 [0209.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6758) returned 1 [0209.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2ec0) returned 1 Thread: id = 4538 os_tid = 0x1f84 [0175.866] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020 [0184.444] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0194.722] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18f4 [0194.722] GetFileSizeEx (in: hFile=0x18f4, lpFileSize=0x775ff58 | out: lpFileSize=0x775ff58*=222) returned 1 [0194.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16a8 [0194.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0194.722] NtQuerySystemTime (in: CurrentTime=0x775fee0 | out: CurrentTime=0x775fee0*=132471540626160000) returned 0x0 [0194.722] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x136329 [0194.722] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x4f68b7ba [0194.722] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x5c0d09b6 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x6c4ed7ca [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x605bc8dd [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x66cc3a4b [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x293537f3 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x23aa8edb [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x150986c5 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0xcac2e73 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x1a79cbec [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x2483ad77 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x12633d40 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x30c00593 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x1d683102 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x2f4ea2c6 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x3b64aafa [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x37cc55b6 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x33071283 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x3f4bc484 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x55485e7 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x38bd2fef [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x4b8aea9c [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x30ac1df [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x2c111931 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x12405cc9 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x584f8346 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x6f1b657 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x4599892a [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x290ab206 [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x6ceb4ebe [0194.723] RtlRandomEx (in: Seed=0x775fed8 | out: Seed=0x775fed8) returned 0x463927fd [0194.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32c8 [0194.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e13798 [0194.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0194.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e13798) returned 1 [0194.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0194.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5dc18 [0194.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e13798 [0194.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149e40a0 [0194.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149e7ca8 [0194.733] ReadFile (in: hFile=0x18f4, lpBuffer=0x149e40a0, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0x775fed4, lpOverlapped=0x0 | out: lpBuffer=0x149e40a0*, lpNumberOfBytesRead=0x775fed4*=0xde, lpOverlapped=0x0) returned 1 [0194.736] SetFilePointerEx (in: hFile=0x18f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.736] WriteFile (in: hFile=0x18f4, lpBuffer=0x149e7ca8*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x775fed8, lpOverlapped=0x0 | out: lpBuffer=0x149e7ca8*, lpNumberOfBytesWritten=0x775fed8*=0xde, lpOverlapped=0x0) returned 1 [0201.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062eb8 [0201.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062ee0 [0201.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ee0) returned 1 [0201.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149e7ca8) returned 1 [0201.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149e40a0) returned 1 [0201.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e13798) returned 1 [0201.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dc18) returned 1 [0201.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69660 [0201.613] SetFilePointerEx (in: hFile=0x18f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.613] WriteFile (in: hFile=0x18f4, lpBuffer=0x81e0480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x775ff4c, lpOverlapped=0x0 | out: lpBuffer=0x81e0480*, lpNumberOfBytesWritten=0x775ff4c*=0x10c, lpOverlapped=0x0) returned 1 [0203.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0480) returned 1 [0203.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69690) returned 1 [0203.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ee0) returned 1 [0203.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69660) returned 1 [0203.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062eb8) returned 1 [0203.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16a8) returned 1 [0203.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32c8) returned 1 [0203.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0203.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6620 [0203.855] wcscpy (in: _Dest=0x81f6620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" [0203.855] wcscat (in: _Dest=0x81f6620, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.f0dbec" [0203.855] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0x775fed0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d518 [0207.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d518) returned 1 [0207.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336fa8) returned 1 [0207.201] NtQueryInformationFile (in: FileHandle=0x18f4, IoStatusBlock=0x775fea8, FileInformation=0x775feb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x775fea8, FileInformation=0x775feb0) returned 0x0 [0207.201] NtSetInformationFile (FileHandle=0x18f4, IoStatusBlock=0x775fea8, FileInformation=0x775feb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6620) returned 1 [0208.232] FlushFileBuffers (hFile=0x18f4) returned 1 [0208.243] CloseHandle (hObject=0x18f4) returned 1 [0208.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d35b0 [0208.551] wcscpy (in: _Dest=0x81d35b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" [0208.551] wcscat (in: _Dest=0x81d35b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\F0DBEC-Readme.txt" [0208.551] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0208.551] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.019] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x775fef4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x775fef4*=0x70c, lpOverlapped=0x0) returned 1 [0209.020] CloseHandle (hObject=0x1bc4) returned 1 [0209.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d35b0) returned 1 [0209.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2fe8) returned 1 Thread: id = 4539 os_tid = 0x1f88 [0175.867] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020 [0184.445] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0194.736] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf6c [0194.737] GetFileSizeEx (in: hFile=0xf6c, lpFileSize=0xc00fa48 | out: lpFileSize=0xc00fa48*=225) returned 1 [0194.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0de8 [0194.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3480 [0194.737] NtQuerySystemTime (in: CurrentTime=0xc00f9d0 | out: CurrentTime=0xc00f9d0*=132471540626316000) returned 0x0 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x398be02c [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x7eb2e0a1 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x76fa6d79 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x127f9b67 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x2689a868 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x4318ab9d [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x568c33da [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x6e42e6d8 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x4a68c4cb [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x39e8afe4 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x32ef1749 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x6f7f67df [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x76de1216 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x568f8055 [0194.737] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x2f86beed [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x3df66863 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x8aaffc [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x574c36e [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x16519dd4 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x16961bde [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x6f7f67df [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0xa9d89a1 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x5ed069f7 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x53aae7c6 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x37de0ace [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x290ab206 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x1d3f7b52 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x55f99421 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x3e10990d [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x4e1af6b2 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x3505b141 [0194.738] RtlRandomEx (in: Seed=0xc00f9c8 | out: Seed=0xc00f9c8) returned 0x5a203e09 [0194.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1108 [0194.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e140f8 [0194.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0194.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e140f8) returned 1 [0194.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0194.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d1b0 [0194.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e140f8 [0194.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149eb8b0 [0194.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149ef4b8 [0194.750] ReadFile (in: hFile=0xf6c, lpBuffer=0x149eb8b0, nNumberOfBytesToRead=0xe1, lpNumberOfBytesRead=0xc00f9c4, lpOverlapped=0x0 | out: lpBuffer=0x149eb8b0*, lpNumberOfBytesRead=0xc00f9c4*=0xe1, lpOverlapped=0x0) returned 1 [0194.752] SetFilePointerEx (in: hFile=0xf6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.752] WriteFile (in: hFile=0xf6c, lpBuffer=0x149ef4b8*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0xc00f9c8, lpOverlapped=0x0 | out: lpBuffer=0x149ef4b8*, lpNumberOfBytesWritten=0xc00f9c8*=0xe1, lpOverlapped=0x0) returned 1 [0201.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d78 [0201.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062da0 [0201.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062da0) returned 1 [0201.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149ef4b8) returned 1 [0201.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149eb8b0) returned 1 [0201.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e140f8) returned 1 [0201.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1b0) returned 1 [0201.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69720 [0201.606] SetFilePointerEx (in: hFile=0xf6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.606] WriteFile (in: hFile=0xf6c, lpBuffer=0x81e0598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc00fa3c, lpOverlapped=0x0 | out: lpBuffer=0x81e0598*, lpNumberOfBytesWritten=0xc00fa3c*=0x10c, lpOverlapped=0x0) returned 1 [0202.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0598) returned 1 [0202.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0202.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062da0) returned 1 [0202.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0202.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d78) returned 1 [0202.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0de8) returned 1 [0202.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1108) returned 1 [0202.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0202.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404560 [0202.116] wcscpy (in: _Dest=0x8404560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" [0202.116] wcscat (in: _Dest=0x8404560, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.f0dbec" [0202.116] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.f0dbec", NtPathName=0xc00f9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9f90 [0203.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9f90) returned 1 [0203.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f8bd8) returned 1 [0203.865] NtQueryInformationFile (in: FileHandle=0xf6c, IoStatusBlock=0xc00f998, FileInformation=0xc00f9a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc00f998, FileInformation=0xc00f9a0) returned 0x0 [0203.865] NtSetInformationFile (FileHandle=0xf6c, IoStatusBlock=0xc00f998, FileInformation=0xc00f9a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404560) returned 1 [0207.220] FlushFileBuffers (hFile=0xf6c) returned 1 [0207.232] CloseHandle (hObject=0xf6c) returned 1 [0208.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0300 [0208.246] wcscpy (in: _Dest=0x81f0300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" [0208.246] wcscat (in: _Dest=0x81f0300, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\F0DBEC-Readme.txt" [0208.246] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\f0dbec-readme.txt")) returned 0xffffffff [0208.246] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cbc [0208.873] WriteFile (in: hFile=0x2cbc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc00f9e4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc00f9e4*=0x70c, lpOverlapped=0x0) returned 1 [0209.451] CloseHandle (hObject=0x2cbc) returned 1 [0209.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0300) returned 1 [0209.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3110) returned 1 Thread: id = 4540 os_tid = 0x1f8c [0175.867] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020 [0184.520] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0194.641] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1918 [0194.642] GetFileSizeEx (in: hFile=0x1918, lpFileSize=0xc85f900 | out: lpFileSize=0xc85f900*=291) returned 1 [0194.642] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x11f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.642] ReadFile (in: hFile=0x1918, lpBuffer=0xc85f90c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc85f8e8, lpOverlapped=0x0 | out: lpBuffer=0xc85f90c*, lpNumberOfBytesRead=0xc85f8e8*=0x4, lpOverlapped=0x0) returned 1 [0194.644] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43528 [0194.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0194.644] NtQuerySystemTime (in: CurrentTime=0xc85f888 | out: CurrentTime=0xc85f888*=132471540625380000) returned 0x0 [0194.644] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x4044621f [0194.644] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x38eb3d14 [0194.644] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x888c2d [0194.644] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x2ad7a3bb [0194.644] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x3fd41381 [0194.644] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x3fa93ac1 [0194.644] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x6f483fa [0194.644] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x58c991e0 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x710ee900 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x7f7e75be [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x1975728e [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x114e0e80 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x71550eb [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x34f6311d [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0xd58bcb2 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x50f83e4a [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x40ec5270 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x971a4bf [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x25a2f22 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x5cccf363 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x60cd54a2 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x458180e [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x619de29 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x62f7002f [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x7db93471 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x5c1fbf68 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x718953fb [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x35986602 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x31900c52 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x26784849 [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x1bd0f22b [0194.645] RtlRandomEx (in: Seed=0xc85f880 | out: Seed=0xc85f880) returned 0x6dea8423 [0194.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0194.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30150d0 [0194.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0194.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0194.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0194.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e37f8 [0194.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30150d0 [0194.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149be4d8 [0194.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149c20e0 [0194.654] ReadFile (in: hFile=0x1918, lpBuffer=0x149be4d8, nNumberOfBytesToRead=0x123, lpNumberOfBytesRead=0xc85f87c, lpOverlapped=0x0 | out: lpBuffer=0x149be4d8*, lpNumberOfBytesRead=0xc85f87c*=0x123, lpOverlapped=0x0) returned 1 [0194.654] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.654] WriteFile (in: hFile=0x1918, lpBuffer=0x149c20e0*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0xc85f880, lpOverlapped=0x0 | out: lpBuffer=0x149c20e0*, lpNumberOfBytesWritten=0xc85f880*=0x123, lpOverlapped=0x0) returned 1 [0201.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d00 [0201.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d28 [0201.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d28) returned 1 [0201.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149c20e0) returned 1 [0201.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149be4d8) returned 1 [0201.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30150d0) returned 1 [0201.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e37f8) returned 1 [0201.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0201.601] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.602] WriteFile (in: hFile=0x1918, lpBuffer=0x81e06b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc85f8f4, lpOverlapped=0x0 | out: lpBuffer=0x81e06b0*, lpNumberOfBytesWritten=0xc85f8f4*=0x10c, lpOverlapped=0x0) returned 1 [0202.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e06b0) returned 1 [0202.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0202.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d28) returned 1 [0202.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0202.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d00) returned 1 [0202.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43528) returned 1 [0202.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43280) returned 1 [0202.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0202.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84041b8 [0202.109] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" [0202.109] wcscat (in: _Dest=0x84041b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.f0dbec" [0202.109] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0xc85f878, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef92c0 [0203.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef92c0) returned 1 [0203.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f1ec0) returned 1 [0203.862] NtQueryInformationFile (in: FileHandle=0x1918, IoStatusBlock=0xc85f850, FileInformation=0xc85f858, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc85f850, FileInformation=0xc85f858) returned 0x0 [0203.862] NtSetInformationFile (FileHandle=0x1918, IoStatusBlock=0xc85f850, FileInformation=0xc85f858, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84041b8) returned 1 [0207.209] FlushFileBuffers (hFile=0x1918) returned 1 [0207.222] CloseHandle (hObject=0x1918) returned 1 [0208.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81efae8 [0208.244] wcscpy (in: _Dest=0x81efae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" [0208.244] wcscat (in: _Dest=0x81efae8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\F0DBEC-Readme.txt" [0208.245] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0208.245] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a24 [0208.873] WriteFile (in: hFile=0x1a24, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc85f89c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc85f89c*=0x70c, lpOverlapped=0x0) returned 1 [0209.445] CloseHandle (hObject=0x1a24) returned 1 [0209.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efae8) returned 1 [0209.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3238) returned 1 Thread: id = 4541 os_tid = 0x1f90 [0175.872] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020 [0184.427] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0194.624] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x191c [0194.625] GetFileSizeEx (in: hFile=0x191c, lpFileSize=0x462fe10 | out: lpFileSize=0x462fe10*=230) returned 1 [0194.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0194.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43528 [0194.626] NtQuerySystemTime (in: CurrentTime=0x462fd98 | out: CurrentTime=0x462fd98*=132471540625224000) returned 0x0 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x36f3d47 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x7849a4fd [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x1781e75a [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x3e8eb007 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x73c618cd [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x66cf07b1 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0xd9e706b [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x5348ba2d [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x6cb2ad5 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x6b76895 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x3f1087db [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x3f538941 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x4654ba00 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x594656cb [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x6a13b13a [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x3d4466b7 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x6dd93f9a [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x2c0cda5d [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x7655f399 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x73d485cf [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x4cec8223 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x79450c4 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x73640e32 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x316a0a9 [0194.626] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x58f0dbfe [0194.627] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x192239a1 [0194.627] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x13043105 [0194.627] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0xe0aebba [0194.627] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x45d25b87 [0194.627] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0xadc183c [0194.627] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x4a9f3db [0194.627] RtlRandomEx (in: Seed=0x462fd90 | out: Seed=0x462fd90) returned 0x45717543 [0194.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ad8 [0194.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50e40 [0194.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0194.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50e40) returned 1 [0194.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43528) returned 1 [0194.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e3d50 [0194.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50e40 [0194.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149b6cc8 [0194.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149ba8d0 [0194.638] ReadFile (in: hFile=0x191c, lpBuffer=0x149b6cc8, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0x462fd8c, lpOverlapped=0x0 | out: lpBuffer=0x149b6cc8*, lpNumberOfBytesRead=0x462fd8c*=0xe6, lpOverlapped=0x0) returned 1 [0194.640] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.640] WriteFile (in: hFile=0x191c, lpBuffer=0x149ba8d0*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x462fd90, lpOverlapped=0x0 | out: lpBuffer=0x149ba8d0*, lpNumberOfBytesWritten=0x462fd90*=0xe6, lpOverlapped=0x0) returned 1 [0201.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f58 [0201.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f80 [0201.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f80) returned 1 [0201.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149ba8d0) returned 1 [0201.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149b6cc8) returned 1 [0201.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50e40) returned 1 [0201.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3d50) returned 1 [0201.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69180 [0201.617] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.617] WriteFile (in: hFile=0x191c, lpBuffer=0x81e0f70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x462fe04, lpOverlapped=0x0 | out: lpBuffer=0x81e0f70*, lpNumberOfBytesWritten=0x462fe04*=0x10c, lpOverlapped=0x0) returned 1 [0202.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0f70) returned 1 [0202.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0202.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f80) returned 1 [0202.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0202.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f58) returned 1 [0202.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0202.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ad8) returned 1 [0202.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0202.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84052c8 [0202.132] wcscpy (in: _Dest=0x84052c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" [0202.132] wcscat (in: _Dest=0x84052c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.f0dbec" [0202.132] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0x462fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9d00 [0203.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9d00) returned 1 [0203.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8204548) returned 1 [0203.906] NtQueryInformationFile (in: FileHandle=0x191c, IoStatusBlock=0x462fd60, FileInformation=0x462fd68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x462fd60, FileInformation=0x462fd68) returned 0x0 [0203.906] NtSetInformationFile (FileHandle=0x191c, IoStatusBlock=0x462fd60, FileInformation=0x462fd68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84052c8) returned 1 [0207.249] FlushFileBuffers (hFile=0x191c) returned 1 [0207.261] CloseHandle (hObject=0x191c) returned 1 [0208.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f09f0 [0208.339] wcscpy (in: _Dest=0x81f09f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" [0208.339] wcscat (in: _Dest=0x81f09f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\F0DBEC-Readme.txt" [0208.339] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0208.339] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1144 [0208.877] WriteFile (in: hFile=0x1144, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x462fdac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x462fdac*=0x70c, lpOverlapped=0x0) returned 1 [0209.466] CloseHandle (hObject=0x1144) returned 1 [0209.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f09f0) returned 1 [0209.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3360) returned 1 Thread: id = 4542 os_tid = 0x1f94 [0175.873] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020 [0184.428] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0194.410] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b9c [0194.411] GetFileSizeEx (in: hFile=0x2b9c, lpFileSize=0xc0dfdd8 | out: lpFileSize=0xc0dfdd8*=208) returned 1 [0194.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4acd0 [0194.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0194.411] NtQuerySystemTime (in: CurrentTime=0xc0dfd60 | out: CurrentTime=0xc0dfd60*=132471540623196000) returned 0x0 [0194.411] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x24a602d7 [0194.411] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x18f345df [0194.411] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x3653d8c1 [0194.411] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x519cecc6 [0194.411] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x1a0eff8e [0194.411] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x66ba34b6 [0194.411] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x1cea44e6 [0194.411] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x1f78eabb [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x1bf7d2cd [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x3d1353ae [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x61e7eb2e [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x27c0fcdd [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x6f59ffd6 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x7c484729 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x65a6cfb6 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x4735a92c [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x19eb7ea [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x10b7f182 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x68b36d1b [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x95eeae7 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x47a0fd9b [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x10215ee [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x41808b01 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x346e3834 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x24a6bcbf [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x682b9a3 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x187f375d [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x2df4def1 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x20a59ebe [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x58e943a8 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x175ed943 [0194.412] RtlRandomEx (in: Seed=0xc0dfd58 | out: Seed=0xc0dfd58) returned 0x3cf0b56a [0194.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49da8 [0194.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df88f8 [0194.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd10 [0194.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0194.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0194.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4188 [0194.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df88f8 [0194.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149640a0 [0194.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14967ca8 [0194.421] ReadFile (in: hFile=0x2b9c, lpBuffer=0x149640a0, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0xc0dfd54, lpOverlapped=0x0 | out: lpBuffer=0x149640a0*, lpNumberOfBytesRead=0xc0dfd54*=0xd0, lpOverlapped=0x0) returned 1 [0194.423] SetFilePointerEx (in: hFile=0x2b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.423] WriteFile (in: hFile=0x2b9c, lpBuffer=0x14967ca8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0xc0dfd58, lpOverlapped=0x0 | out: lpBuffer=0x14967ca8*, lpNumberOfBytesWritten=0xc0dfd58*=0xd0, lpOverlapped=0x0) returned 1 [0201.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f08 [0201.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f30 [0201.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f30) returned 1 [0201.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14967ca8) returned 1 [0201.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149640a0) returned 1 [0201.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0201.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4188) returned 1 [0201.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69780 [0201.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f30) returned 1 [0201.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697b0 [0201.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f30 [0201.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f58 [0201.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f58) returned 1 [0201.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0201.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4188) returned 1 [0201.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x81e0250 [0201.615] SetFilePointerEx (in: hFile=0x2b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.615] WriteFile (in: hFile=0x2b9c, lpBuffer=0x81e0250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc0dfdcc, lpOverlapped=0x0 | out: lpBuffer=0x81e0250*, lpNumberOfBytesWritten=0xc0dfdcc*=0x10c, lpOverlapped=0x0) returned 1 [0202.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0250) returned 1 [0202.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697b0) returned 1 [0202.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f30) returned 1 [0202.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69780) returned 1 [0202.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f08) returned 1 [0202.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4acd0) returned 1 [0202.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49da8) returned 1 [0202.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd10) returned 1 [0202.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405400 [0202.127] wcscpy (in: _Dest=0x8405400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" [0202.127] wcscat (in: _Dest=0x8405400, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.f0dbec" [0202.127] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0xc0dfd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa368 [0203.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa368) returned 1 [0203.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8204998) returned 1 [0203.871] NtQueryInformationFile (in: FileHandle=0x2b9c, IoStatusBlock=0xc0dfd28, FileInformation=0xc0dfd30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc0dfd28, FileInformation=0xc0dfd30) returned 0x0 [0203.871] NtSetInformationFile (FileHandle=0x2b9c, IoStatusBlock=0xc0dfd28, FileInformation=0xc0dfd30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405400) returned 1 [0207.229] FlushFileBuffers (hFile=0x2b9c) returned 1 [0207.242] CloseHandle (hObject=0x2b9c) returned 1 [0208.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8188268 [0208.303] wcscpy (in: _Dest=0x8188268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" [0208.303] wcscat (in: _Dest=0x8188268, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\F0DBEC-Readme.txt" [0208.303] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0208.303] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22a8 [0208.876] WriteFile (in: hFile=0x22a8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc0dfd74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc0dfd74*=0x70c, lpOverlapped=0x0) returned 1 [0209.463] CloseHandle (hObject=0x22a8) returned 1 [0209.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188268) returned 1 [0209.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3488) returned 1 Thread: id = 4543 os_tid = 0x1f98 [0175.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020 [0184.429] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0194.424] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x197c [0194.424] GetFileSizeEx (in: hFile=0x197c, lpFileSize=0x969f920 | out: lpFileSize=0x969f920*=221) returned 1 [0194.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0194.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d498f8 [0194.425] NtQuerySystemTime (in: CurrentTime=0x969f8a8 | out: CurrentTime=0x969f8a8*=132471540623352000) returned 0x0 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x17f97fa6 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x7e3a1aa1 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x7279d4d8 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x44c852cb [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x8bbc7a4 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x3c636a24 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x7755c99b [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x65963b21 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x42011541 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x173a358b [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x561e74fa [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x4be8c5d0 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x7e8c113d [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x551e930d [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x41ab63c1 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0xa23a65e [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0xd88cd96 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x5eefbea8 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0xc618b36 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x7b8ee50b [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x3706d554 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0xce0c828 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x4cbf2e66 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x3c98a4f2 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x3df21f9 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x3f993de7 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x4ebcdce9 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x72508ee5 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x705a876a [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x50750614 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x31900c52 [0194.425] RtlRandomEx (in: Seed=0x969f8a0 | out: Seed=0x969f8a0) returned 0x66aff1e5 [0194.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c030 [0194.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0194.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd28 [0194.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0194.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d498f8) returned 1 [0194.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e5220 [0194.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8ad8 [0194.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1496b8b0 [0194.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1496f4b8 [0194.434] ReadFile (in: hFile=0x197c, lpBuffer=0x1496b8b0, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x969f89c, lpOverlapped=0x0 | out: lpBuffer=0x1496b8b0*, lpNumberOfBytesRead=0x969f89c*=0xdd, lpOverlapped=0x0) returned 1 [0194.436] SetFilePointerEx (in: hFile=0x197c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.436] WriteFile (in: hFile=0x197c, lpBuffer=0x1496f4b8*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x969f8a0, lpOverlapped=0x0 | out: lpBuffer=0x1496f4b8*, lpNumberOfBytesWritten=0x969f8a0*=0xdd, lpOverlapped=0x0) returned 1 [0196.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0196.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42dd0 [0196.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0196.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1496f4b8) returned 1 [0196.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1496b8b0) returned 1 [0196.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0196.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5220) returned 1 [0196.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69b40 [0196.286] SetFilePointerEx (in: hFile=0x197c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.286] WriteFile (in: hFile=0x197c, lpBuffer=0x81e11a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x969f914, lpOverlapped=0x0 | out: lpBuffer=0x81e11a0*, lpNumberOfBytesWritten=0x969f914*=0x10c, lpOverlapped=0x0) returned 1 [0196.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e11a0) returned 1 [0196.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b70) returned 1 [0196.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0196.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b40) returned 1 [0196.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0196.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0196.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c030) returned 1 [0196.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd28) returned 1 [0196.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5c60 [0196.667] wcscpy (in: _Dest=0x81f5c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" [0196.667] wcscat (in: _Dest=0x81f5c60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.f0dbec" [0196.667] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0x969f898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8334188 [0196.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334188) returned 1 [0196.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fe0d0) returned 1 [0196.900] NtQueryInformationFile (in: FileHandle=0x197c, IoStatusBlock=0x969f870, FileInformation=0x969f878, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x969f870, FileInformation=0x969f878) returned 0x0 [0196.900] NtSetInformationFile (FileHandle=0x197c, IoStatusBlock=0x969f870, FileInformation=0x969f878, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5c60) returned 1 [0197.171] FlushFileBuffers (hFile=0x197c) returned 1 [0197.184] CloseHandle (hObject=0x197c) returned 1 [0197.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8332ef8 [0197.328] wcscpy (in: _Dest=0x8332ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" [0197.328] wcscat (in: _Dest=0x8332ef8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\F0DBEC-Readme.txt" [0197.328] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0197.328] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.369] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x969f8bc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x969f8bc*=0x70c, lpOverlapped=0x0) returned 1 [0197.371] CloseHandle (hObject=0x1204) returned 1 [0197.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332ef8) returned 1 [0197.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d35b0) returned 1 Thread: id = 4544 os_tid = 0x1f9c [0175.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020 [0184.431] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0194.450] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1944 [0194.450] GetFileSizeEx (in: hFile=0x1944, lpFileSize=0xc11f7c8 | out: lpFileSize=0xc11f7c8*=230) returned 1 [0194.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0194.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0194.450] NtQuerySystemTime (in: CurrentTime=0xc11f750 | out: CurrentTime=0xc11f750*=132471540623508000) returned 0x0 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x77872793 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x1d8713bd [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x140afd03 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x3d4466b7 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x4cc1c6d3 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x3130c6dd [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x67da5a7a [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x54dd1e4a [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x71a2bd3c [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x1b467cc1 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x253fa7ca [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x59ebed51 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x51f7850b [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x271ee755 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x3650edb0 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x497e4d26 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x1916ebde [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x2ae9d6d1 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x183a4c5d [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x71a2bd3c [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0xb74ddfb [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x76ae2ad3 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x4e985f63 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x4be6a136 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x560e1853 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x28eb17c [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x30759ee5 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x5de83bfa [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x64f639a8 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x32936740 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x30759ee5 [0194.451] RtlRandomEx (in: Seed=0xc11f748 | out: Seed=0xc11f748) returned 0x61f71459 [0194.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49fb0 [0194.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8b50 [0194.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0194.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0194.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0194.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e3d98 [0194.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8b50 [0194.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1497a8d0 [0194.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1497e4d8 [0194.474] ReadFile (in: hFile=0x1944, lpBuffer=0x1497a8d0, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0xc11f744, lpOverlapped=0x0 | out: lpBuffer=0x1497a8d0*, lpNumberOfBytesRead=0xc11f744*=0xe6, lpOverlapped=0x0) returned 1 [0194.476] SetFilePointerEx (in: hFile=0x1944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.476] WriteFile (in: hFile=0x1944, lpBuffer=0x1497e4d8*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xc11f748, lpOverlapped=0x0 | out: lpBuffer=0x1497e4d8*, lpNumberOfBytesWritten=0xc11f748*=0xe6, lpOverlapped=0x0) returned 1 [0196.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d427e0 [0196.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42858 [0196.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42858) returned 1 [0196.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1497e4d8) returned 1 [0196.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1497a8d0) returned 1 [0196.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0196.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3d98) returned 1 [0196.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69c00 [0196.291] SetFilePointerEx (in: hFile=0x1944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.291] WriteFile (in: hFile=0x1944, lpBuffer=0x81e13d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc11f7bc, lpOverlapped=0x0 | out: lpBuffer=0x81e13d0*, lpNumberOfBytesWritten=0xc11f7bc*=0x10c, lpOverlapped=0x0) returned 1 [0196.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e13d0) returned 1 [0196.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c30) returned 1 [0196.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42858) returned 1 [0196.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c00) returned 1 [0196.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427e0) returned 1 [0196.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0196.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49fb0) returned 1 [0196.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0196.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5ed0 [0196.677] wcscpy (in: _Dest=0x81f5ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" [0196.677] wcscat (in: _Dest=0x81f5ed0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.f0dbec" [0196.677] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0xc11f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8334418 [0196.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334418) returned 1 [0196.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f9330) returned 1 [0196.904] NtQueryInformationFile (in: FileHandle=0x1944, IoStatusBlock=0xc11f718, FileInformation=0xc11f720, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc11f718, FileInformation=0xc11f720) returned 0x0 [0196.904] NtSetInformationFile (FileHandle=0x1944, IoStatusBlock=0xc11f718, FileInformation=0xc11f720, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5ed0) returned 1 [0197.179] FlushFileBuffers (hFile=0x1944) returned 1 [0197.193] CloseHandle (hObject=0x1944) returned 1 [0197.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8333020 [0197.330] wcscpy (in: _Dest=0x8333020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" [0197.330] wcscat (in: _Dest=0x8333020, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\F0DBEC-Readme.txt" [0197.330] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0197.330] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.366] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc11f764, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc11f764*=0x70c, lpOverlapped=0x0) returned 1 [0197.368] CloseHandle (hObject=0x1204) returned 1 [0197.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333020) returned 1 [0197.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d36d8) returned 1 Thread: id = 4545 os_tid = 0x1fa0 [0175.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020 [0184.432] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0194.477] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x193c [0194.477] GetFileSizeEx (in: hFile=0x193c, lpFileSize=0x9fdfc30 | out: lpFileSize=0x9fdfc30*=228) returned 1 [0194.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd88 [0194.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a4d8 [0194.477] NtQuerySystemTime (in: CurrentTime=0x9fdfbb8 | out: CurrentTime=0x9fdfbb8*=132471540623820000) returned 0x0 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x46a3c536 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x32a5a321 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x1ca09174 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x7acddcd8 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x1f5e690c [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x535e885 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x1a6004e3 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x2945d670 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x4fdf8b28 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x2a8c8378 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x6274d380 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x63881696 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x3d9a8ce [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x3ab22147 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0xfe40d14 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x5368f1e [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x67d4a9aa [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x19a27a40 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x1fea2060 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x212435f6 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x6afcb4a8 [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x6186338a [0194.478] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x5a7d776d [0194.479] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x3a4f9c41 [0194.479] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x7ecc7cb7 [0194.479] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x3b381b14 [0194.479] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x2e4f495c [0194.479] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x80855ba [0194.479] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x4ff3e4ec [0194.479] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x1a26c968 [0194.479] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x5f79a8bd [0194.479] RtlRandomEx (in: Seed=0x9fdfbb0 | out: Seed=0x9fdfbb0) returned 0x7e41acdc [0194.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0194.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df89e8 [0194.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b360 [0194.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df89e8) returned 1 [0194.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a4d8) returned 1 [0194.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4380 [0194.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df89e8 [0194.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149820e0 [0194.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14986060 [0194.494] ReadFile (in: hFile=0x193c, lpBuffer=0x149820e0, nNumberOfBytesToRead=0xe4, lpNumberOfBytesRead=0x9fdfbac, lpOverlapped=0x0 | out: lpBuffer=0x149820e0*, lpNumberOfBytesRead=0x9fdfbac*=0xe4, lpOverlapped=0x0) returned 1 [0194.523] SetFilePointerEx (in: hFile=0x193c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.523] WriteFile (in: hFile=0x193c, lpBuffer=0x14986060*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x9fdfbb0, lpOverlapped=0x0 | out: lpBuffer=0x14986060*, lpNumberOfBytesWritten=0x9fdfbb0*=0xe4, lpOverlapped=0x0) returned 1 [0196.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421f0 [0196.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43258 [0196.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0196.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14986060) returned 1 [0196.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149820e0) returned 1 [0196.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df89e8) returned 1 [0196.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4380) returned 1 [0196.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e701b8 [0196.297] SetFilePointerEx (in: hFile=0x193c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.297] WriteFile (in: hFile=0x193c, lpBuffer=0x81df648*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9fdfc24, lpOverlapped=0x0 | out: lpBuffer=0x81df648*, lpNumberOfBytesWritten=0x9fdfc24*=0x10c, lpOverlapped=0x0) returned 1 [0196.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df648) returned 1 [0196.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0196.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0196.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0196.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421f0) returned 1 [0196.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0196.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ceb8) returned 1 [0196.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b360) returned 1 [0196.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6140 [0196.684] wcscpy (in: _Dest=0x81f6140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" [0196.684] wcscat (in: _Dest=0x81f6140, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.f0dbec" [0196.684] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0x9fdfba8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83346a8 [0196.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83346a8) returned 1 [0196.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f9bd0) returned 1 [0196.907] NtQueryInformationFile (in: FileHandle=0x193c, IoStatusBlock=0x9fdfb80, FileInformation=0x9fdfb88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9fdfb80, FileInformation=0x9fdfb88) returned 0x0 [0196.907] NtSetInformationFile (FileHandle=0x193c, IoStatusBlock=0x9fdfb80, FileInformation=0x9fdfb88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6140) returned 1 [0197.185] FlushFileBuffers (hFile=0x193c) returned 1 [0197.198] CloseHandle (hObject=0x193c) returned 1 [0197.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8333270 [0197.333] wcscpy (in: _Dest=0x8333270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" [0197.333] wcscat (in: _Dest=0x8333270, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\F0DBEC-Readme.txt" [0197.333] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0197.333] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a68 [0197.475] WriteFile (in: hFile=0x1a68, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9fdfbcc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9fdfbcc*=0x70c, lpOverlapped=0x0) returned 1 [0198.076] CloseHandle (hObject=0x1a68) returned 1 [0198.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333270) returned 1 [0198.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3800) returned 1 Thread: id = 4546 os_tid = 0x1fa4 [0175.875] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020 [0184.433] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0194.523] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1938 [0194.524] GetFileSizeEx (in: hFile=0x1938, lpFileSize=0xb75fbc0 | out: lpFileSize=0xb75fbc0*=236) returned 1 [0194.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a4d8 [0194.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0194.524] NtQuerySystemTime (in: CurrentTime=0xb75fb48 | out: CurrentTime=0xb75fb48*=132471540624132000) returned 0x0 [0194.524] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x110f4e17 [0194.524] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x730249e1 [0194.524] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x46b986e0 [0194.524] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x2a2e74e5 [0194.524] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x335bfebb [0194.524] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x2151ffe3 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x1f2892f3 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0xee585e3 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x6f69f8ae [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x5bec8128 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x61369916 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x67459d06 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x78d8be0e [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x58a36ced [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x3797cd38 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x32a5a321 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x3df21f9 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x4ee45db9 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x253fa7ca [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x150b3a2e [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x73dc95cb [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x3edadf1c [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x79494ac2 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x17bad3a3 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x19632d06 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x3bd61ede [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x4d95f3a7 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x6bf246c5 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x2bc7df9c [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x85a45ce [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x54bb3646 [0194.525] RtlRandomEx (in: Seed=0xb75fb40 | out: Seed=0xb75fb40) returned 0x7cdce6f3 [0194.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0194.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0194.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0194.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0194.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49b28) returned 1 [0194.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e3fd8 [0194.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9528 [0194.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14989c68 [0194.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1498d870 [0194.535] ReadFile (in: hFile=0x1938, lpBuffer=0x14989c68, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0xb75fb3c, lpOverlapped=0x0 | out: lpBuffer=0x14989c68*, lpNumberOfBytesRead=0xb75fb3c*=0xec, lpOverlapped=0x0) returned 1 [0194.542] SetFilePointerEx (in: hFile=0x1938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.542] WriteFile (in: hFile=0x1938, lpBuffer=0x1498d870*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xb75fb40, lpOverlapped=0x0 | out: lpBuffer=0x1498d870*, lpNumberOfBytesWritten=0xb75fb40*=0xec, lpOverlapped=0x0) returned 1 [0196.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43118 [0196.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43730 [0196.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0196.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1498d870) returned 1 [0196.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14989c68) returned 1 [0196.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0196.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3fd8) returned 1 [0196.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70128 [0196.296] SetFilePointerEx (in: hFile=0x1938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.296] WriteFile (in: hFile=0x1938, lpBuffer=0x81df760*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb75fbb4, lpOverlapped=0x0 | out: lpBuffer=0x81df760*, lpNumberOfBytesWritten=0xb75fbb4*=0x10c, lpOverlapped=0x0) returned 1 [0196.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df760) returned 1 [0196.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd98) returned 1 [0196.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0196.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70128) returned 1 [0196.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43118) returned 1 [0196.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a4d8) returned 1 [0196.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0196.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0196.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6008 [0196.680] wcscpy (in: _Dest=0x81f6008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" [0196.680] wcscat (in: _Dest=0x81f6008, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.f0dbec" [0196.680] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0xb75fb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8334560 [0196.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334560) returned 1 [0196.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f3228) returned 1 [0196.906] NtQueryInformationFile (in: FileHandle=0x1938, IoStatusBlock=0xb75fb10, FileInformation=0xb75fb18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb75fb10, FileInformation=0xb75fb18) returned 0x0 [0196.906] NtSetInformationFile (FileHandle=0x1938, IoStatusBlock=0xb75fb10, FileInformation=0xb75fb18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6008) returned 1 [0197.182] FlushFileBuffers (hFile=0x1938) returned 1 [0197.195] CloseHandle (hObject=0x1938) returned 1 [0197.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8333148 [0197.332] wcscpy (in: _Dest=0x8333148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" [0197.332] wcscat (in: _Dest=0x8333148, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\F0DBEC-Readme.txt" [0197.332] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0197.332] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.372] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb75fb5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb75fb5c*=0x70c, lpOverlapped=0x0) returned 1 [0197.374] CloseHandle (hObject=0x1204) returned 1 [0197.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333148) returned 1 [0197.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3928) returned 1 Thread: id = 4547 os_tid = 0x1fa8 [0175.875] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0184.434] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0194.543] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1934 [0194.543] GetFileSizeEx (in: hFile=0x1934, lpFileSize=0xceafb08 | out: lpFileSize=0xceafb08*=209) returned 1 [0194.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0194.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a880 [0194.544] NtQuerySystemTime (in: CurrentTime=0xceafa90 | out: CurrentTime=0xceafa90*=132471540624288000) returned 0x0 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x2cb3f328 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x5a107bf5 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x46a5a6c6 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x32936740 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x1a6004e3 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x87c21ee [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x74739565 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x5b54b90a [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x7855d7d0 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x69a71746 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x552fc592 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x71dbc623 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x40d52801 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x7a3b4be4 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x3877c29c [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x4582b53e [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x470e1b36 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x9f6d313 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x6dd25a24 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x232d9a0d [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x6f483fa [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x1fb5593d [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x66ba34b6 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x41bbb42c [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x40549dc1 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x4af1d41f [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x67f97728 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x3b97f26e [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x1a113c67 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x17b63c1f [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x176c3460 [0194.544] RtlRandomEx (in: Seed=0xceafa88 | out: Seed=0xceafa88) returned 0x1c8448d7 [0194.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a970 [0194.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9438 [0194.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0194.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0194.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a880) returned 1 [0194.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4800 [0194.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9438 [0194.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14991478 [0194.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14995080 [0194.554] ReadFile (in: hFile=0x1934, lpBuffer=0x14991478, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0xceafa84, lpOverlapped=0x0 | out: lpBuffer=0x14991478*, lpNumberOfBytesRead=0xceafa84*=0xd1, lpOverlapped=0x0) returned 1 [0194.556] SetFilePointerEx (in: hFile=0x1934, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.556] WriteFile (in: hFile=0x1934, lpBuffer=0x14995080*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0xceafa88, lpOverlapped=0x0 | out: lpBuffer=0x14995080*, lpNumberOfBytesWritten=0xceafa88*=0xd1, lpOverlapped=0x0) returned 1 [0196.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43578 [0196.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14995080) returned 1 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14991478) returned 1 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4800) returned 1 [0196.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70158 [0196.299] SetFilePointerEx (in: hFile=0x1934, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.299] WriteFile (in: hFile=0x1934, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xceafafc, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0xceafafc*=0x10c, lpOverlapped=0x0) returned 1 [0196.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0196.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd38) returned 1 [0196.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0196.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70158) returned 1 [0196.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43578) returned 1 [0196.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49b28) returned 1 [0196.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0196.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0196.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f6278 [0196.687] wcscpy (in: _Dest=0x81f6278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" [0196.687] wcscat (in: _Dest=0x81f6278, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.f0dbec" [0196.687] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.f0dbec", NtPathName=0xceafa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x8346930 [0196.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346930) returned 1 [0196.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f4c08) returned 1 [0196.909] NtQueryInformationFile (in: FileHandle=0x1934, IoStatusBlock=0xceafa58, FileInformation=0xceafa60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xceafa58, FileInformation=0xceafa60) returned 0x0 [0196.909] NtSetInformationFile (FileHandle=0x1934, IoStatusBlock=0xceafa58, FileInformation=0xceafa60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6278) returned 1 [0197.189] FlushFileBuffers (hFile=0x1934) returned 1 [0197.201] CloseHandle (hObject=0x1934) returned 1 [0197.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f58b8 [0197.334] wcscpy (in: _Dest=0x81f58b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" [0197.334] wcscat (in: _Dest=0x81f58b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" [0197.334] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\f0dbec-readme.txt")) returned 0xffffffff [0197.334] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ef0 [0197.476] WriteFile (in: hFile=0x1ef0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xceafaa4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xceafaa4*=0x70c, lpOverlapped=0x0) returned 1 [0198.086] CloseHandle (hObject=0x1ef0) returned 1 [0198.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f58b8) returned 1 [0198.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3a50) returned 1 Thread: id = 4548 os_tid = 0x1fac [0175.879] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020 [0184.435] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0194.557] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1930 [0194.557] GetFileSizeEx (in: hFile=0x1930, lpFileSize=0xbe5fdc8 | out: lpFileSize=0xbe5fdc8*=210) returned 1 [0194.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a880 [0194.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a920 [0194.558] NtQuerySystemTime (in: CurrentTime=0xbe5fd50 | out: CurrentTime=0xbe5fd50*=132471540624444000) returned 0x0 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x4d158336 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x330c11c1 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x6dda7507 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x60cd54a2 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x5b7f2650 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x2e768d7b [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x139d7580 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x4fcf4a67 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0xdc6a5e4 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x7d1025a8 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x42aa5ff5 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x4ca5286c [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x5a645100 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x15247c95 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x3779799f [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x2d695005 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x7cb5c597 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x5a857e9 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x41d3bdf7 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x4cc1c6d3 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x29c8a9ed [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x21ec14e [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x4f50f3ff [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x796d6723 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x50054080 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x29b48d67 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0xbbd1d25 [0194.558] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x637d1b82 [0194.559] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x680ba5c2 [0194.559] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x6040095c [0194.559] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x46a9afe1 [0194.559] RtlRandomEx (in: Seed=0xbe5fd48 | out: Seed=0xbe5fd48) returned 0x412ad981 [0194.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0194.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50be8 [0194.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcb0 [0194.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50be8) returned 1 [0194.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a920) returned 1 [0194.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e51d8 [0194.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50be8 [0194.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14998c88 [0194.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1499c890 [0194.569] ReadFile (in: hFile=0x1930, lpBuffer=0x14998c88, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xbe5fd44, lpOverlapped=0x0 | out: lpBuffer=0x14998c88*, lpNumberOfBytesRead=0xbe5fd44*=0xd2, lpOverlapped=0x0) returned 1 [0194.571] SetFilePointerEx (in: hFile=0x1930, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.572] WriteFile (in: hFile=0x1930, lpBuffer=0x1499c890*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xbe5fd48, lpOverlapped=0x0 | out: lpBuffer=0x1499c890*, lpNumberOfBytesWritten=0xbe5fd48*=0xd2, lpOverlapped=0x0) returned 1 [0196.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c40 [0196.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0196.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0196.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1499c890) returned 1 [0196.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14998c88) returned 1 [0196.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50be8) returned 1 [0196.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e51d8) returned 1 [0196.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fca8 [0196.301] SetFilePointerEx (in: hFile=0x1930, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.301] WriteFile (in: hFile=0x1930, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbe5fdbc, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xbe5fdbc*=0x10c, lpOverlapped=0x0) returned 1 [0196.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0196.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700f8) returned 1 [0196.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0196.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fca8) returned 1 [0196.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c40) returned 1 [0196.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a880) returned 1 [0196.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0196.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0196.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f63b0 [0196.691] wcscpy (in: _Dest=0x81f63b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" [0196.691] wcscat (in: _Dest=0x81f63b0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.f0dbec" [0196.691] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.f0dbec", NtPathName=0xbe5fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8346a78 [0196.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346a78) returned 1 [0196.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8ee0) returned 1 [0196.910] NtQueryInformationFile (in: FileHandle=0x1930, IoStatusBlock=0xbe5fd18, FileInformation=0xbe5fd20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbe5fd18, FileInformation=0xbe5fd20) returned 0x0 [0196.910] NtSetInformationFile (FileHandle=0x1930, IoStatusBlock=0xbe5fd18, FileInformation=0xbe5fd20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f63b0) returned 1 [0197.195] FlushFileBuffers (hFile=0x1930) returned 1 [0197.717] CloseHandle (hObject=0x1930) returned 1 [0197.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401148 [0197.760] wcscpy (in: _Dest=0x8401148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" [0197.760] wcscat (in: _Dest=0x8401148, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\F0DBEC-Readme.txt" [0197.760] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\f0dbec-readme.txt")) returned 0xffffffff [0197.761] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29cc [0197.773] WriteFile (in: hFile=0x29cc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbe5fd64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbe5fd64*=0x70c, lpOverlapped=0x0) returned 1 [0197.776] CloseHandle (hObject=0x29cc) returned 1 [0197.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401148) returned 1 [0197.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3b78) returned 1 Thread: id = 4549 os_tid = 0x1fb0 [0175.880] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0184.436] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0194.572] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x192c [0194.573] GetFileSizeEx (in: hFile=0x192c, lpFileSize=0xd95f860 | out: lpFileSize=0xd95f860*=222) returned 1 [0194.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a920 [0194.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0194.573] NtQuerySystemTime (in: CurrentTime=0xd95f7e8 | out: CurrentTime=0xd95f7e8*=132471540624600000) returned 0x0 [0194.573] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x45c560f7 [0194.573] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x4972226c [0194.573] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x46b08bb2 [0194.573] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x3b7f573e [0194.573] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x4029c501 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x422bee01 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x2eecaab9 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x1ea19661 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x67f97728 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x66670329 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x407f7681 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x1886caec [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x5076119b [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x7a0ce828 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x41bbb42c [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x28396c5e [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x4e0b141d [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x5e3bdb88 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x4482570d [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x3aff158b [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x2ac9c082 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x2235a669 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x31c8641c [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x636cc47a [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x779251fa [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0xa920433 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x59d66847 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x7274fe9b [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x2ed5e0d0 [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0xfc2bb3e [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x33b6cae [0194.574] RtlRandomEx (in: Seed=0xd95f7e0 | out: Seed=0xd95f7e0) returned 0x6d7ece07 [0194.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0194.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0194.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0194.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0194.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0194.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e3e28 [0194.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0194.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149a0498 [0194.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149a40a0 [0194.586] ReadFile (in: hFile=0x192c, lpBuffer=0x149a0498, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xd95f7dc, lpOverlapped=0x0 | out: lpBuffer=0x149a0498*, lpNumberOfBytesRead=0xd95f7dc*=0xde, lpOverlapped=0x0) returned 1 [0194.588] SetFilePointerEx (in: hFile=0x192c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.588] WriteFile (in: hFile=0x192c, lpBuffer=0x149a40a0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xd95f7e0, lpOverlapped=0x0 | out: lpBuffer=0x149a40a0*, lpNumberOfBytesWritten=0xd95f7e0*=0xde, lpOverlapped=0x0) returned 1 [0196.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0196.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42650 [0196.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42650) returned 1 [0196.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149a40a0) returned 1 [0196.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149a0498) returned 1 [0196.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0196.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3e28) returned 1 [0196.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f918 [0196.303] SetFilePointerEx (in: hFile=0x192c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.303] WriteFile (in: hFile=0x192c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd95f854, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xd95f854*=0x10c, lpOverlapped=0x0) returned 1 [0196.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0196.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd08) returned 1 [0196.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42650) returned 1 [0196.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f918) returned 1 [0196.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0196.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a920) returned 1 [0196.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0196.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0196.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f64e8 [0196.693] wcscpy (in: _Dest=0x81f64e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" [0196.693] wcscat (in: _Dest=0x81f64e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.f0dbec" [0196.694] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0xd95f7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x8346bc0 [0196.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346bc0) returned 1 [0196.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fc4c8) returned 1 [0196.912] NtQueryInformationFile (in: FileHandle=0x192c, IoStatusBlock=0xd95f7b0, FileInformation=0xd95f7b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd95f7b0, FileInformation=0xd95f7b8) returned 0x0 [0196.912] NtSetInformationFile (FileHandle=0x192c, IoStatusBlock=0xd95f7b0, FileInformation=0xd95f7b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f64e8) returned 1 [0197.197] FlushFileBuffers (hFile=0x192c) returned 1 [0197.205] CloseHandle (hObject=0x192c) returned 1 [0197.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f5648 [0197.336] wcscpy (in: _Dest=0x81f5648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" [0197.336] wcscat (in: _Dest=0x81f5648, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0197.336] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0197.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a5c [0197.475] WriteFile (in: hFile=0x1a5c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd95f7fc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd95f7fc*=0x70c, lpOverlapped=0x0) returned 1 [0198.082] CloseHandle (hObject=0x1a5c) returned 1 [0198.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5648) returned 1 [0198.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3ca0) returned 1 Thread: id = 4550 os_tid = 0x1fb4 [0175.880] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020 [0184.437] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0194.589] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1928 [0194.590] GetFileSizeEx (in: hFile=0x1928, lpFileSize=0xd57fb68 | out: lpFileSize=0xd57fb68*=217) returned 1 [0194.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0194.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0194.590] NtQuerySystemTime (in: CurrentTime=0xd57faf0 | out: CurrentTime=0xd57faf0*=132471540624756000) returned 0x0 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x2ad7487d [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x33895af [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x3130c6dd [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x69d6cde1 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x1eedbcc1 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x46b986e0 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x188983e0 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x6e692a [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x644ed565 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x71032fa8 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x1e66643e [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x21f6bdd6 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x5fca9026 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x724e275d [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x2d580a13 [0194.590] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x3baa0d17 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x1fc8bc65 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x13bfc30d [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x3c98a4f2 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x486fadd8 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x5fa176b8 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x24e2e88e [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x1735903c [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0xf3a1517 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x181f2e5c [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x4dcebd48 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x7f484d57 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x6b17ace2 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x2c10f156 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x2837f294 [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x55a8af5f [0194.591] RtlRandomEx (in: Seed=0xd57fae8 | out: Seed=0xd57fae8) returned 0x17bad3a3 [0194.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0194.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51548 [0194.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0194.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51548) returned 1 [0194.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0194.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4968 [0194.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51548 [0194.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149a7ca8 [0194.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149ab8b0 [0194.603] ReadFile (in: hFile=0x1928, lpBuffer=0x149a7ca8, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0xd57fae4, lpOverlapped=0x0 | out: lpBuffer=0x149a7ca8*, lpNumberOfBytesRead=0xd57fae4*=0xd9, lpOverlapped=0x0) returned 1 [0194.606] SetFilePointerEx (in: hFile=0x1928, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.606] WriteFile (in: hFile=0x1928, lpBuffer=0x149ab8b0*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0xd57fae8, lpOverlapped=0x0 | out: lpBuffer=0x149ab8b0*, lpNumberOfBytesWritten=0xd57fae8*=0xd9, lpOverlapped=0x0) returned 1 [0196.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0196.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43190 [0196.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43190) returned 1 [0196.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149ab8b0) returned 1 [0196.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149a7ca8) returned 1 [0196.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51548) returned 1 [0196.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4968) returned 1 [0196.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fd68 [0196.308] SetFilePointerEx (in: hFile=0x1928, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.308] WriteFile (in: hFile=0x1928, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd57fb5c, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xd57fb5c*=0x10c, lpOverlapped=0x0) returned 1 [0196.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0196.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6feb8) returned 1 [0196.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43190) returned 1 [0196.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd68) returned 1 [0196.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0196.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0196.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0196.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0196.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6758 [0196.705] wcscpy (in: _Dest=0x81f6758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" [0196.705] wcscat (in: _Dest=0x81f6758, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.f0dbec" [0196.705] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0xd57fae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8346e50 [0196.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346e50) returned 1 [0196.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fc2a0) returned 1 [0196.916] NtQueryInformationFile (in: FileHandle=0x1928, IoStatusBlock=0xd57fab8, FileInformation=0xd57fac0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd57fab8, FileInformation=0xd57fac0) returned 0x0 [0196.916] NtSetInformationFile (FileHandle=0x1928, IoStatusBlock=0xd57fab8, FileInformation=0xd57fac0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6758) returned 1 [0197.203] FlushFileBuffers (hFile=0x1928) returned 1 [0197.211] CloseHandle (hObject=0x1928) returned 1 [0197.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x83334c0 [0197.339] wcscpy (in: _Dest=0x83334c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" [0197.339] wcscat (in: _Dest=0x83334c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\F0DBEC-Readme.txt" [0197.339] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0197.339] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1eec [0197.477] WriteFile (in: hFile=0x1eec, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd57fb04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd57fb04*=0x70c, lpOverlapped=0x0) returned 1 [0198.103] CloseHandle (hObject=0x1eec) returned 1 [0198.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83334c0) returned 1 [0198.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3dc8) returned 1 Thread: id = 4551 os_tid = 0x1fc0 [0175.880] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020 [0184.438] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0194.606] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1920 [0194.607] GetFileSizeEx (in: hFile=0x1920, lpFileSize=0xdb4f7e8 | out: lpFileSize=0xdb4f7e8*=203) returned 1 [0194.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0194.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0194.608] NtQuerySystemTime (in: CurrentTime=0xdb4f770 | out: CurrentTime=0xdb4f770*=132471540624912000) returned 0x0 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x783c9acf [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x705a876a [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x66f688e0 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x62d7114f [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x6825c689 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x2bf66122 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x6a245a63 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x46057975 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x24906002 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x19a27a40 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x2060a1 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x4882fac1 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x532497e6 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x3ffeec41 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x43c1dd0a [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x4ffc713e [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x18f95f1d [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x697df910 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x4868b3e1 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x7996e2c0 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x7709aaa8 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x776b0a9 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x2f2e5811 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x5c124149 [0194.608] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x510bdd5f [0194.609] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x6718a533 [0194.609] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x1c632821 [0194.609] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x6ebdcd60 [0194.609] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x36a78ef4 [0194.609] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x2462ba27 [0194.609] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x7dd07699 [0194.609] RtlRandomEx (in: Seed=0xdb4f768 | out: Seed=0xdb4f768) returned 0x5b6fcc9 [0194.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43028 [0194.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0194.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43050 [0194.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0194.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0194.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e3888 [0194.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0194.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149af4b8 [0194.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149b30c0 [0194.621] ReadFile (in: hFile=0x1920, lpBuffer=0x149af4b8, nNumberOfBytesToRead=0xcb, lpNumberOfBytesRead=0xdb4f764, lpOverlapped=0x0 | out: lpBuffer=0x149af4b8*, lpNumberOfBytesRead=0xdb4f764*=0xcb, lpOverlapped=0x0) returned 1 [0194.624] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.624] WriteFile (in: hFile=0x1920, lpBuffer=0x149b30c0*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0xdb4f768, lpOverlapped=0x0 | out: lpBuffer=0x149b30c0*, lpNumberOfBytesWritten=0xdb4f768*=0xcb, lpOverlapped=0x0) returned 1 [0196.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42768 [0196.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42178 [0196.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42178) returned 1 [0196.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149b30c0) returned 1 [0196.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149af4b8) returned 1 [0196.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0196.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3888) returned 1 [0196.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fdf8 [0196.307] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.307] WriteFile (in: hFile=0x1920, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdb4f7dc, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xdb4f7dc*=0x10c, lpOverlapped=0x0) returned 1 [0196.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0196.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fee8) returned 1 [0196.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42178) returned 1 [0196.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdf8) returned 1 [0196.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42768) returned 1 [0196.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0196.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43028) returned 1 [0196.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43050) returned 1 [0196.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6620 [0196.702] wcscpy (in: _Dest=0x81f6620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" [0196.702] wcscat (in: _Dest=0x81f6620, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.f0dbec" [0196.702] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.f0dbec", NtPathName=0xdb4f760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8346d08 [0196.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346d08) returned 1 [0196.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fcd68) returned 1 [0196.914] NtQueryInformationFile (in: FileHandle=0x1920, IoStatusBlock=0xdb4f738, FileInformation=0xdb4f740, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdb4f738, FileInformation=0xdb4f740) returned 0x0 [0196.914] NtSetInformationFile (FileHandle=0x1920, IoStatusBlock=0xdb4f738, FileInformation=0xdb4f740, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6620) returned 1 [0197.199] FlushFileBuffers (hFile=0x1920) returned 1 [0197.210] CloseHandle (hObject=0x1920) returned 1 [0197.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8333398 [0197.337] wcscpy (in: _Dest=0x8333398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" [0197.337] wcscat (in: _Dest=0x8333398, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\F0DBEC-Readme.txt" [0197.337] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\f0dbec-readme.txt")) returned 0xffffffff [0197.337] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b98 [0197.476] WriteFile (in: hFile=0x1b98, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdb4f784, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdb4f784*=0x70c, lpOverlapped=0x0) returned 1 [0198.098] CloseHandle (hObject=0x1b98) returned 1 [0198.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333398) returned 1 [0198.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3ef0) returned 1 Thread: id = 4552 os_tid = 0x1fc4 [0175.881] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020 [0184.439] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0194.384] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c68 [0194.385] GetFileSizeEx (in: hFile=0x1c68, lpFileSize=0xca6fb80 | out: lpFileSize=0xca6fb80*=221) returned 1 [0194.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0194.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4d020 [0194.385] NtQuerySystemTime (in: CurrentTime=0xca6fb08 | out: CurrentTime=0xca6fb08*=132471540622884000) returned 0x0 [0194.385] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x45b3610a [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x2dcd14e [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x3161b31 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x160d321a [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x28cdacae [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x4b36bffe [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x5d867882 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x665b398f [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x5c48a67 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x48721651 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x919c4ca [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x24151f65 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x7fe8f5c4 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x6de7cfed [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x5c21506f [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x5d867882 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x42f759cc [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x36511f38 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x5a4564e9 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x18ef179b [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x49d91028 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x57c59250 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x4ea1caad [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x39e4064d [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x316a83e5 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x190d2601 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x65d73cce [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x4c75ecce [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x42eafed0 [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x789fbf8e [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x7072238f [0194.386] RtlRandomEx (in: Seed=0xca6fb00 | out: Seed=0xca6fb00) returned 0x54678f03 [0194.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfe0 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8bc8 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ac80 [0194.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 [0194.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0194.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e45c0 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8bc8 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14955080 [0194.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14958c88 [0194.395] ReadFile (in: hFile=0x1c68, lpBuffer=0x14955080, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xca6fafc, lpOverlapped=0x0 | out: lpBuffer=0x14955080*, lpNumberOfBytesRead=0xca6fafc*=0xdd, lpOverlapped=0x0) returned 1 [0194.397] SetFilePointerEx (in: hFile=0x1c68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.397] WriteFile (in: hFile=0x1c68, lpBuffer=0x14958c88*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xca6fb00, lpOverlapped=0x0 | out: lpBuffer=0x14958c88*, lpNumberOfBytesWritten=0xca6fb00*=0xdd, lpOverlapped=0x0) returned 1 [0196.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43140 [0196.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43e60 [0196.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43e60) returned 1 [0196.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14958c88) returned 1 [0196.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14955080) returned 1 [0196.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 [0196.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e45c0) returned 1 [0196.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69720 [0196.279] SetFilePointerEx (in: hFile=0x1c68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.280] WriteFile (in: hFile=0x1c68, lpBuffer=0x81e0d40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xca6fb74, lpOverlapped=0x0 | out: lpBuffer=0x81e0d40*, lpNumberOfBytesWritten=0xca6fb74*=0x10c, lpOverlapped=0x0) returned 1 [0196.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0d40) returned 1 [0196.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0196.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43e60) returned 1 [0196.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0196.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43140) returned 1 [0196.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0196.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0196.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ac80) returned 1 [0196.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f59f0 [0196.661] wcscpy (in: _Dest=0x81f59f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" [0196.661] wcscat (in: _Dest=0x81f59f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.f0dbec" [0196.661] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.f0dbec", NtPathName=0xca6faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8333ef8 [0196.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ef8) returned 1 [0196.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f49e0) returned 1 [0196.897] NtQueryInformationFile (in: FileHandle=0x1c68, IoStatusBlock=0xca6fad0, FileInformation=0xca6fad8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xca6fad0, FileInformation=0xca6fad8) returned 0x0 [0196.897] NtSetInformationFile (FileHandle=0x1c68, IoStatusBlock=0xca6fad0, FileInformation=0xca6fad8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f59f0) returned 1 [0197.165] FlushFileBuffers (hFile=0x1c68) returned 1 [0197.177] CloseHandle (hObject=0x1c68) returned 1 [0197.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8332ca8 [0197.321] wcscpy (in: _Dest=0x8332ca8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" [0197.321] wcscat (in: _Dest=0x8332ca8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\F0DBEC-Readme.txt" [0197.321] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\f0dbec-readme.txt")) returned 0xffffffff [0197.321] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x181c [0197.474] WriteFile (in: hFile=0x181c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xca6fb1c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xca6fb1c*=0x70c, lpOverlapped=0x0) returned 1 [0198.071] CloseHandle (hObject=0x181c) returned 1 [0198.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332ca8) returned 1 [0198.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4018) returned 1 Thread: id = 4553 os_tid = 0x1fc8 [0175.881] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0184.446] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0194.397] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2664 [0194.398] GetFileSizeEx (in: hFile=0x2664, lpFileSize=0xc39fbd0 | out: lpFileSize=0xc39fbd0*=215) returned 1 [0194.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4d020 [0194.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4acd0 [0194.398] NtQuerySystemTime (in: CurrentTime=0xc39fb58 | out: CurrentTime=0xc39fb58*=132471540623040000) returned 0x0 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x731279ec [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x236253cf [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x47f9a8ad [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x46e84ae9 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x43e2c0a5 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x8932d56 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0xe99e467 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x57537b84 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x7acddcd8 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x4018cbb7 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x7479aea3 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x3639e3f6 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x1a8ebc8d [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x61f2fc28 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0xda8afa2 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x1831ecf2 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x12f9c926 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x3a5043e6 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x276d518c [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x11a529b8 [0194.398] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x4c794847 [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x1f00d8 [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x42ac7841 [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0xacef24d [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x290f46ee [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x182e4485 [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x4c487b7 [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x3fd3bbc4 [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x4189b8ff [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x1f2fe681 [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x76813b29 [0194.399] RtlRandomEx (in: Seed=0xc39fb50 | out: Seed=0xc39fb50) returned 0x71c5637e [0194.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b838 [0194.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9690 [0194.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0194.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0194.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4acd0) returned 1 [0194.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e50b8 [0194.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df9690 [0194.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1495c890 [0194.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14960498 [0194.408] ReadFile (in: hFile=0x2664, lpBuffer=0x1495c890, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0xc39fb4c, lpOverlapped=0x0 | out: lpBuffer=0x1495c890*, lpNumberOfBytesRead=0xc39fb4c*=0xd7, lpOverlapped=0x0) returned 1 [0194.410] SetFilePointerEx (in: hFile=0x2664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.410] WriteFile (in: hFile=0x2664, lpBuffer=0x14960498*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0xc39fb50, lpOverlapped=0x0 | out: lpBuffer=0x14960498*, lpNumberOfBytesWritten=0xc39fb50*=0xd7, lpOverlapped=0x0) returned 1 [0196.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42510 [0196.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43618 [0196.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43618) returned 1 [0196.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14960498) returned 1 [0196.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1495c890) returned 1 [0196.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0196.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e50b8) returned 1 [0196.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0196.282] SetFilePointerEx (in: hFile=0x2664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.282] WriteFile (in: hFile=0x2664, lpBuffer=0x81e0e58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc39fbc4, lpOverlapped=0x0 | out: lpBuffer=0x81e0e58*, lpNumberOfBytesWritten=0xc39fbc4*=0x10c, lpOverlapped=0x0) returned 1 [0196.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0e58) returned 1 [0196.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0196.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43618) returned 1 [0196.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0196.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42510) returned 1 [0196.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0196.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b838) returned 1 [0196.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0196.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f5b28 [0196.664] wcscpy (in: _Dest=0x81f5b28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" [0196.664] wcscat (in: _Dest=0x81f5b28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.f0dbec" [0196.664] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0xc39fb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x8334040 [0196.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334040) returned 1 [0196.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fbc28) returned 1 [0196.898] NtQueryInformationFile (in: FileHandle=0x2664, IoStatusBlock=0xc39fb20, FileInformation=0xc39fb28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc39fb20, FileInformation=0xc39fb28) returned 0x0 [0196.898] NtSetInformationFile (FileHandle=0x2664, IoStatusBlock=0xc39fb20, FileInformation=0xc39fb28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5b28) returned 1 [0197.168] FlushFileBuffers (hFile=0x2664) returned 1 [0197.180] CloseHandle (hObject=0x2664) returned 1 [0197.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f59f0 [0197.325] wcscpy (in: _Dest=0x81f59f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" [0197.325] wcscat (in: _Dest=0x81f59f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0197.325] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0197.326] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.358] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc39fb6c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc39fb6c*=0x70c, lpOverlapped=0x0) returned 1 [0197.360] CloseHandle (hObject=0x1204) returned 1 [0197.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f59f0) returned 1 [0197.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4140) returned 1 Thread: id = 4554 os_tid = 0x1fcc [0175.882] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020 [0184.430] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0194.437] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1948 [0194.437] GetFileSizeEx (in: hFile=0x1948, lpFileSize=0xb3cfe00 | out: lpFileSize=0xb3cfe00*=237) returned 1 [0194.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d498f8 [0194.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0194.437] NtQuerySystemTime (in: CurrentTime=0xb3cfd88 | out: CurrentTime=0xb3cfd88*=132471540623352000) returned 0x0 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x6306e614 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x3d1af549 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x4155b241 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x51f7850b [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x45edd9a2 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x24906002 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0xaed5b4b [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x609655d6 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x65abc822 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x2184ffd4 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x67fa6e07 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x873de84 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x62cbf63a [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x54dd1e4a [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x2b743473 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x6186338a [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x76b87756 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x7cc33a3e [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x1a29d161 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0xc2a2b7 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x398c9e2f [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x873de84 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x159f3ad4 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x41028933 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x41d63c81 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x30644337 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x507f9ac0 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x4c7d56bc [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x341ac099 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x66670329 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0x50400c14 [0194.438] RtlRandomEx (in: Seed=0xb3cfd80 | out: Seed=0xb3cfd80) returned 0xa920433 [0194.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0194.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0194.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0194.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0194.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0194.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4de8 [0194.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8a60 [0194.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149730c0 [0194.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14976cc8 [0194.447] ReadFile (in: hFile=0x1948, lpBuffer=0x149730c0, nNumberOfBytesToRead=0xed, lpNumberOfBytesRead=0xb3cfd7c, lpOverlapped=0x0 | out: lpBuffer=0x149730c0*, lpNumberOfBytesRead=0xb3cfd7c*=0xed, lpOverlapped=0x0) returned 1 [0194.449] SetFilePointerEx (in: hFile=0x1948, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.449] WriteFile (in: hFile=0x1948, lpBuffer=0x14976cc8*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0xb3cfd80, lpOverlapped=0x0 | out: lpBuffer=0x14976cc8*, lpNumberOfBytesWritten=0xb3cfd80*=0xed, lpOverlapped=0x0) returned 1 [0196.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43410 [0196.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42600 [0196.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42600) returned 1 [0196.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14976cc8) returned 1 [0196.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149730c0) returned 1 [0196.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0196.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4de8) returned 1 [0196.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ba0 [0196.289] SetFilePointerEx (in: hFile=0x1948, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.289] WriteFile (in: hFile=0x1948, lpBuffer=0x81e14e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb3cfdf4, lpOverlapped=0x0 | out: lpBuffer=0x81e14e8*, lpNumberOfBytesWritten=0xb3cfdf4*=0x10c, lpOverlapped=0x0) returned 1 [0196.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e14e8) returned 1 [0196.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bd0) returned 1 [0196.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42600) returned 1 [0196.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ba0) returned 1 [0196.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43410) returned 1 [0196.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d498f8) returned 1 [0196.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0196.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf90) returned 1 [0196.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5d98 [0196.671] wcscpy (in: _Dest=0x81f5d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" [0196.671] wcscat (in: _Dest=0x81f5d98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.f0dbec" [0196.671] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0xb3cfd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83342d0 [0196.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83342d0) returned 1 [0196.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fdea8) returned 1 [0196.902] NtQueryInformationFile (in: FileHandle=0x1948, IoStatusBlock=0xb3cfd50, FileInformation=0xb3cfd58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb3cfd50, FileInformation=0xb3cfd58) returned 0x0 [0196.902] NtSetInformationFile (FileHandle=0x1948, IoStatusBlock=0xb3cfd50, FileInformation=0xb3cfd58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5d98) returned 1 [0197.175] FlushFileBuffers (hFile=0x1948) returned 1 [0197.187] CloseHandle (hObject=0x1948) returned 1 [0197.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8332dd0 [0197.326] wcscpy (in: _Dest=0x8332dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" [0197.326] wcscat (in: _Dest=0x8332dd0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\F0DBEC-Readme.txt" [0197.326] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0197.327] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.362] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb3cfd9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb3cfd9c*=0x70c, lpOverlapped=0x0) returned 1 [0197.364] CloseHandle (hObject=0x1204) returned 1 [0197.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332dd0) returned 1 [0197.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4268) returned 1 Thread: id = 4555 os_tid = 0x1fd0 [0175.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt")) returned 0x20 [0188.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", dwFileAttributes=0x20) returned 0 [0188.771] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.780] GetLastError () returned 0x5 [0188.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", dwFileAttributes=0x20) returned 0 [0188.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e656c8) returned 1 Thread: id = 4556 os_tid = 0x1fd4 [0175.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt")) returned 0x20 [0187.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", dwFileAttributes=0x20) returned 0 [0188.149] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.587] GetLastError () returned 0x5 [0188.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", dwFileAttributes=0x20) returned 0 [0188.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f05b8) returned 1 Thread: id = 4557 os_tid = 0x1fd8 [0175.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt")) returned 0x20 [0188.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", dwFileAttributes=0x20) returned 0 [0188.560] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.692] GetLastError () returned 0x5 [0188.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", dwFileAttributes=0x20) returned 0 [0188.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1f90) returned 1 Thread: id = 4558 os_tid = 0x1fdc [0175.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt")) returned 0x20 [0183.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", dwFileAttributes=0x20) returned 0 [0184.927] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.928] GetLastError () returned 0x5 [0184.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", dwFileAttributes=0x20) returned 0 [0184.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0688) returned 1 Thread: id = 4559 os_tid = 0x1fe0 [0175.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt")) returned 0x20 [0188.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", dwFileAttributes=0x20) returned 0 [0188.770] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.777] GetLastError () returned 0x5 [0188.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", dwFileAttributes=0x20) returned 0 [0188.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f24a0) returned 1 Thread: id = 4560 os_tid = 0x1fe4 [0175.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt")) returned 0x20 [0188.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", dwFileAttributes=0x20) returned 0 [0188.768] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.774] GetLastError () returned 0x5 [0188.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", dwFileAttributes=0x20) returned 0 [0188.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0758) returned 1 Thread: id = 4561 os_tid = 0x1fe8 [0175.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt")) returned 0x20 [0185.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", dwFileAttributes=0x20) returned 0 [0185.152] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.451] GetLastError () returned 0x5 [0187.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", dwFileAttributes=0x20) returned 0 [0187.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1648) returned 1 Thread: id = 4562 os_tid = 0x1fec [0175.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt")) returned 0x20 [0188.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", dwFileAttributes=0x20) returned 0 [0188.743] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.765] GetLastError () returned 0x5 [0188.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", dwFileAttributes=0x20) returned 0 [0188.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2578) returned 1 Thread: id = 4563 os_tid = 0x1ff0 [0175.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt")) returned 0x20 [0188.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", dwFileAttributes=0x20) returned 0 [0188.748] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.768] GetLastError () returned 0x5 [0188.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", dwFileAttributes=0x20) returned 0 [0188.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef988) returned 1 Thread: id = 4564 os_tid = 0x1ff4 [0175.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt")) returned 0x20 [0188.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", dwFileAttributes=0x20) returned 0 [0188.753] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.778] GetLastError () returned 0x5 [0188.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", dwFileAttributes=0x20) returned 0 [0188.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2650) returned 1 Thread: id = 4565 os_tid = 0x1ffc [0175.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt")) returned 0x20 [0187.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", dwFileAttributes=0x20) returned 0 [0187.752] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.540] GetLastError () returned 0x5 [0188.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", dwFileAttributes=0x20) returned 0 [0188.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef8b8) returned 1 Thread: id = 4566 os_tid = 0x2038 [0175.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt")) returned 0x20 [0187.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", dwFileAttributes=0x20) returned 0 [0188.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.627] GetLastError () returned 0x5 [0188.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", dwFileAttributes=0x20) returned 0 [0188.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2728) returned 1 Thread: id = 4567 os_tid = 0x203c [0175.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt")) returned 0x20 [0188.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", dwFileAttributes=0x20) returned 0 [0188.757] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.781] GetLastError () returned 0x5 [0188.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", dwFileAttributes=0x20) returned 0 [0188.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f23c8) returned 1 Thread: id = 4568 os_tid = 0x2040 [0175.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt")) returned 0x20 [0187.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", dwFileAttributes=0x20) returned 0 [0187.477] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.628] GetLastError () returned 0x5 [0188.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", dwFileAttributes=0x20) returned 0 [0188.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2218) returned 1 Thread: id = 4569 os_tid = 0x2044 [0175.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt")) returned 0x20 [0188.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", dwFileAttributes=0x20) returned 0 [0188.766] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.772] GetLastError () returned 0x5 [0188.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", dwFileAttributes=0x20) returned 0 [0188.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3aa78) returned 1 Thread: id = 4570 os_tid = 0x2048 [0175.892] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0178.016] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0189.952] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1578 [0193.575] GetFileSizeEx (in: hFile=0x1578, lpFileSize=0xc66fc78 | out: lpFileSize=0xc66fc78*=179) returned 1 [0193.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0193.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0193.575] NtQuerySystemTime (in: CurrentTime=0xc66fc00 | out: CurrentTime=0xc66fc00*=132471540614772000) returned 0x0 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x1d4fe0e1 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x23a4a760 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x67a16a3c [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x1f6c67d0 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x396190e0 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x29cef362 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x1fb74cc9 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x58ba60c6 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x2711034d [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x3220b405 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x46c7ef0 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x109b1b06 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x5474b1d6 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x6a19d6d7 [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x4a60b31f [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x2fe6bffe [0193.575] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x79ac6cfd [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x420563b0 [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x1950abc7 [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x662112fe [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x3596ec04 [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x7814642e [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x76849209 [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x64082fc2 [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x3d451fce [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x7af01d91 [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x55181955 [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x5848fb3a [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x7742ac61 [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x4e87a30e [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x718831d2 [0193.576] RtlRandomEx (in: Seed=0xc66fbf8 | out: Seed=0xc66fbf8) returned 0x3c40c5a7 [0193.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148cd870 [0193.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148d1478 [0193.587] ReadFile (in: hFile=0x1578, lpBuffer=0x148cd870, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc66fbf4, lpOverlapped=0x0 | out: lpBuffer=0x148cd870*, lpNumberOfBytesRead=0xc66fbf4*=0xb3, lpOverlapped=0x0) returned 1 [0193.590] SetFilePointerEx (in: hFile=0x1578, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.590] WriteFile (in: hFile=0x1578, lpBuffer=0x148d1478*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc66fbf8, lpOverlapped=0x0 | out: lpBuffer=0x148d1478*, lpNumberOfBytesWritten=0xc66fbf8*=0xb3, lpOverlapped=0x0) returned 1 [0201.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062b20 [0201.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062b48 [0201.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062b48) returned 1 [0201.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148d1478) returned 1 [0201.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148cd870) returned 1 [0201.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bdc0) returned 1 [0201.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6578) returned 1 [0201.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f828 [0201.591] SetFilePointerEx (in: hFile=0x1578, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.591] WriteFile (in: hFile=0x1578, lpBuffer=0x81e14e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc66fc6c, lpOverlapped=0x0 | out: lpBuffer=0x81e14e8*, lpNumberOfBytesWritten=0xc66fc6c*=0x10c, lpOverlapped=0x0) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e14e8) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f8b8) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062b48) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f828) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062b20) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0203.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x81f59f0 [0203.819] wcscpy (in: _Dest=0x81f59f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" [0203.819] wcscat (in: _Dest=0x81f59f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.f0dbec" [0203.819] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0xc66fbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e16f90 [0207.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16f90) returned 1 [0207.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8344b98) returned 1 [0207.185] NtQueryInformationFile (in: FileHandle=0x1578, IoStatusBlock=0xc66fbc8, FileInformation=0xc66fbd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc66fbc8, FileInformation=0xc66fbd0) returned 0x0 [0207.185] NtSetInformationFile (FileHandle=0x1578, IoStatusBlock=0xc66fbc8, FileInformation=0xc66fbd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f59f0) returned 1 [0208.189] FlushFileBuffers (hFile=0x1578) returned 1 [0208.200] CloseHandle (hObject=0x1578) returned 1 [0208.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x83ef698 [0208.498] wcscpy (in: _Dest=0x83ef698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" [0208.498] wcscat (in: _Dest=0x83ef698, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0208.499] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0208.499] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c88 [0208.879] WriteFile (in: hFile=0x2c88, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc66fc14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc66fc14*=0x70c, lpOverlapped=0x0) returned 1 [0209.476] CloseHandle (hObject=0x2c88) returned 1 [0209.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef698) returned 1 [0209.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9330) returned 1 Thread: id = 4571 os_tid = 0x204c [0175.892] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json")) returned 0x2020 [0178.017] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0189.952] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1570 [0193.590] GetFileSizeEx (in: hFile=0x1570, lpFileSize=0xf64fa50 | out: lpFileSize=0xf64fa50*=179) returned 1 [0193.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0193.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0193.591] NtQuerySystemTime (in: CurrentTime=0xf64f9d8 | out: CurrentTime=0xf64f9d8*=132471540614928000) returned 0x0 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x5884faa3 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x74c6b8cd [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x52253f0c [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x3853ebc2 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x363a4aa7 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x4ba4328a [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x3d0d4efb [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x69ec0c6d [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x2762cefb [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x3a32152b [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x451c999d [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x5b9efd5a [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x4533678b [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x65c4fa18 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x192d3d2 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0xebfbefc [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x22b84557 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x61e81888 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0xb7c454f [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x4a366612 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0xfcb7eac [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x84d3b28 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x7d217df4 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x33345177 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x5b4a8d99 [0193.591] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x415f132d [0193.592] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x3b97656f [0193.592] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x4b0acdc1 [0193.592] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x393d8827 [0193.592] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x78326f5e [0193.592] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x5d05ff82 [0193.592] RtlRandomEx (in: Seed=0xf64f9d0 | out: Seed=0xf64f9d0) returned 0x3b636774 [0193.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148d5080 [0193.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148d8c88 [0193.603] ReadFile (in: hFile=0x1570, lpBuffer=0x148d5080, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xf64f9cc, lpOverlapped=0x0 | out: lpBuffer=0x148d5080*, lpNumberOfBytesRead=0xf64f9cc*=0xb3, lpOverlapped=0x0) returned 1 [0193.604] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.605] WriteFile (in: hFile=0x1570, lpBuffer=0x148d8c88*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xf64f9d0, lpOverlapped=0x0 | out: lpBuffer=0x148d8c88*, lpNumberOfBytesWritten=0xf64f9d0*=0xb3, lpOverlapped=0x0) returned 1 [0201.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062b70 [0201.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062b98 [0201.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062b98) returned 1 [0201.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148d8c88) returned 1 [0201.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148d5080) returned 1 [0201.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0beb0) returned 1 [0201.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6410) returned 1 [0201.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f528 [0201.593] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.593] WriteFile (in: hFile=0x1570, lpBuffer=0x81e11a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf64fa44, lpOverlapped=0x0 | out: lpBuffer=0x81e11a0*, lpNumberOfBytesWritten=0xf64fa44*=0x10c, lpOverlapped=0x0) returned 1 [0203.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e11a0) returned 1 [0203.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f3d8) returned 1 [0203.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062b98) returned 1 [0203.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f528) returned 1 [0203.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062b70) returned 1 [0203.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0203.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0203.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0203.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f63b0 [0203.849] wcscpy (in: _Dest=0x81f63b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" [0203.849] wcscat (in: _Dest=0x81f63b0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.f0dbec" [0203.849] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0xf64f9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3d288 [0207.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d288) returned 1 [0207.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8341c28) returned 1 [0207.198] NtQueryInformationFile (in: FileHandle=0x1570, IoStatusBlock=0xf64f9a0, FileInformation=0xf64f9a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf64f9a0, FileInformation=0xf64f9a8) returned 0x0 [0207.198] NtSetInformationFile (FileHandle=0x1570, IoStatusBlock=0xf64f9a0, FileInformation=0xf64f9a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f63b0) returned 1 [0208.226] FlushFileBuffers (hFile=0x1570) returned 1 [0208.233] CloseHandle (hObject=0x1570) returned 1 [0208.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f63b0 [0208.544] wcscpy (in: _Dest=0x81f63b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" [0208.544] wcscat (in: _Dest=0x81f63b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\F0DBEC-Readme.txt" [0208.544] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0208.544] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.012] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf64f9ec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf64f9ec*=0x70c, lpOverlapped=0x0) returned 1 [0209.013] CloseHandle (hObject=0x1bc4) returned 1 [0209.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f63b0) returned 1 [0209.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9458) returned 1 Thread: id = 4572 os_tid = 0x2050 [0175.893] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json")) returned 0x2020 [0178.017] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0189.952] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x156c [0193.605] GetFileSizeEx (in: hFile=0x156c, lpFileSize=0xf7ffb18 | out: lpFileSize=0xf7ffb18*=159) returned 1 [0193.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0193.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0193.605] NtQuerySystemTime (in: CurrentTime=0xf7ffaa0 | out: CurrentTime=0xf7ffaa0*=132471540615084000) returned 0x0 [0193.605] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x46a66041 [0193.605] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0xa196c18 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x6f756abc [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x7137c66f [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x5e636e08 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x39e3bd8f [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x20c320fc [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x424740a7 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x9a19951 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x120338a9 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x49e9502b [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x16e319c7 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x4212d341 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x71e055e8 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x7e4116a9 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x30860e98 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x1fd362e7 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x1b7616f2 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x63ad1aff [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x1090cc5f [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x2a249e1b [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x779e0cc6 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x5e993259 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x48f77d30 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x23fd32b0 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x5302b993 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x6cd9337f [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x56fd73fc [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x4b35a681 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x60940f51 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x6750a690 [0193.606] RtlRandomEx (in: Seed=0xf7ffa98 | out: Seed=0xf7ffa98) returned 0x4c13ba0d [0193.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148dc890 [0193.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148e0498 [0193.616] ReadFile (in: hFile=0x156c, lpBuffer=0x148dc890, nNumberOfBytesToRead=0x9f, lpNumberOfBytesRead=0xf7ffa94, lpOverlapped=0x0 | out: lpBuffer=0x148dc890*, lpNumberOfBytesRead=0xf7ffa94*=0x9f, lpOverlapped=0x0) returned 1 [0193.618] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.618] WriteFile (in: hFile=0x156c, lpBuffer=0x148e0498*, nNumberOfBytesToWrite=0x9f, lpNumberOfBytesWritten=0xf7ffa98, lpOverlapped=0x0 | out: lpBuffer=0x148e0498*, lpNumberOfBytesWritten=0xf7ffa98*=0x9f, lpOverlapped=0x0) returned 1 [0201.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062cb0 [0201.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062cd8 [0201.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062cd8) returned 1 [0201.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148e0498) returned 1 [0201.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148dc890) returned 1 [0201.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b6b8) returned 1 [0201.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e69f8) returned 1 [0201.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69b40 [0201.600] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.600] WriteFile (in: hFile=0x156c, lpBuffer=0x81e09f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf7ffb0c, lpOverlapped=0x0 | out: lpBuffer=0x81e09f8*, lpNumberOfBytesWritten=0xf7ffb0c*=0x10c, lpOverlapped=0x0) returned 1 [0202.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e09f8) returned 1 [0202.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b70) returned 1 [0202.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062cd8) returned 1 [0202.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b40) returned 1 [0202.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062cb0) returned 1 [0202.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0202.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0202.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0202.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x84057a8 [0202.106] wcscpy (in: _Dest=0x84057a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" [0202.106] wcscat (in: _Dest=0x84057a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.f0dbec" [0202.106] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.f0dbec", NtPathName=0xf7ffa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9a70 [0203.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9a70) returned 1 [0203.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f81f0) returned 1 [0203.861] NtQueryInformationFile (in: FileHandle=0x156c, IoStatusBlock=0xf7ffa68, FileInformation=0xf7ffa70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf7ffa68, FileInformation=0xf7ffa70) returned 0x0 [0203.861] NtSetInformationFile (FileHandle=0x156c, IoStatusBlock=0xf7ffa68, FileInformation=0xf7ffa70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84057a8) returned 1 [0207.204] FlushFileBuffers (hFile=0x156c) returned 1 [0207.215] CloseHandle (hObject=0x156c) returned 1 [0208.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6620 [0208.237] wcscpy (in: _Dest=0x81f6620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" [0208.237] wcscat (in: _Dest=0x81f6620, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\F0DBEC-Readme.txt" [0208.237] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\f0dbec-readme.txt")) returned 0xffffffff [0208.237] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ce4 [0208.872] WriteFile (in: hFile=0x1ce4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf7ffab4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf7ffab4*=0x70c, lpOverlapped=0x0) returned 1 [0209.442] CloseHandle (hObject=0x1ce4) returned 1 [0209.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6620) returned 1 [0209.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1648) returned 1 Thread: id = 4573 os_tid = 0x2054 [0175.893] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json")) returned 0x2020 [0178.018] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0189.944] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1610 [0193.415] GetFileSizeEx (in: hFile=0x1610, lpFileSize=0x853fca0 | out: lpFileSize=0x853fca0*=179) returned 1 [0193.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0193.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0193.415] NtQuerySystemTime (in: CurrentTime=0x853fc28 | out: CurrentTime=0x853fc28*=132471540613212000) returned 0x0 [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x349ca01e [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x2e897ebb [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x63b117a9 [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x72357f49 [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x720f1ac9 [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x51395b5d [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x248f9248 [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x789d09a7 [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x2e936637 [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x3446bb08 [0193.415] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x2ca00c28 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x7af01d91 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x61b95801 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x7544b200 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x18e8fae4 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x6d621c07 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x1f232e66 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x3a551697 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x3cff318b [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x3e62abd4 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x28433898 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x1d0fead3 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x1a55b186 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x2a6a4d05 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x7dc36065 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x4e371f19 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x7b08932c [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x1d950db2 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x5d5f14aa [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x2132fbb5 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x1a3fec51 [0193.416] RtlRandomEx (in: Seed=0x853fc20 | out: Seed=0x853fc20) returned 0x4f1a0736 [0193.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ad080 [0193.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809e060 [0193.425] ReadFile (in: hFile=0x1610, lpBuffer=0x80ad080, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x853fc1c, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesRead=0x853fc1c*=0xb3, lpOverlapped=0x0) returned 1 [0193.428] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.428] WriteFile (in: hFile=0x1610, lpBuffer=0x809e060*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x853fc20, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesWritten=0x853fc20*=0xb3, lpOverlapped=0x0) returned 1 [0201.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062c60 [0201.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062c88 [0201.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062c88) returned 1 [0201.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0201.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0201.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f330d8) returned 1 [0201.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6d10) returned 1 [0201.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ba0 [0201.598] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.598] WriteFile (in: hFile=0x1610, lpBuffer=0x81e0c28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x853fc94, lpOverlapped=0x0 | out: lpBuffer=0x81e0c28*, lpNumberOfBytesWritten=0x853fc94*=0x10c, lpOverlapped=0x0) returned 1 [0203.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0c28) returned 1 [0203.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bd0) returned 1 [0203.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062c88) returned 1 [0203.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ba0) returned 1 [0203.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062c60) returned 1 [0203.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0203.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0203.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbb8) returned 1 [0203.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5c60 [0203.825] wcscpy (in: _Dest=0x81f5c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" [0203.825] wcscat (in: _Dest=0x81f5c60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.f0dbec" [0203.825] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.f0dbec", NtPathName=0x853fc18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3cc20 [0207.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cc20) returned 1 [0207.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83417d8) returned 1 [0207.188] NtQueryInformationFile (in: FileHandle=0x1610, IoStatusBlock=0x853fbf0, FileInformation=0x853fbf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x853fbf0, FileInformation=0x853fbf8) returned 0x0 [0207.188] NtSetInformationFile (FileHandle=0x1610, IoStatusBlock=0x853fbf0, FileInformation=0x853fbf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5c60) returned 1 [0208.196] FlushFileBuffers (hFile=0x1610) returned 1 [0208.205] CloseHandle (hObject=0x1610) returned 1 [0208.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef428 [0208.502] wcscpy (in: _Dest=0x83ef428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" [0208.502] wcscat (in: _Dest=0x83ef428, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\F0DBEC-Readme.txt" [0208.502] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\f0dbec-readme.txt")) returned 0xffffffff [0208.502] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c0 [0208.880] WriteFile (in: hFile=0x13c0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x853fc3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x853fc3c*=0x70c, lpOverlapped=0x0) returned 1 [0209.489] CloseHandle (hObject=0x13c0) returned 1 [0209.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef428) returned 1 [0209.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1770) returned 1 Thread: id = 4574 os_tid = 0x2058 [0175.894] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json")) returned 0x2020 [0178.019] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0189.945] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x160c [0193.428] GetFileSizeEx (in: hFile=0x160c, lpFileSize=0x8b9fae0 | out: lpFileSize=0x8b9fae0*=179) returned 1 [0193.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0193.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0193.429] NtQuerySystemTime (in: CurrentTime=0x8b9fa68 | out: CurrentTime=0x8b9fa68*=132471540613368000) returned 0x0 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0xcd69cb7 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x659ca445 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x51de12e2 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x1d950db2 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x23ad907d [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x3a551697 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x7111a5ab [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x6604691d [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x46c197d [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x18d0463b [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0xcd1c8e1 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x456199da [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x145fb3b8 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x5a02d70e [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x6652455e [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x3e62abd4 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x48253751 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x4c36bb01 [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x1c3d58de [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x5fd2b12c [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x1d84401a [0193.429] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x68f075da [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x1d0fead3 [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x4c8c6c81 [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x67de0a9 [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x48da200d [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x2895a072 [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x132b627b [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x26c03c89 [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x571139a4 [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0x2c21f6dc [0193.430] RtlRandomEx (in: Seed=0x8b9fa60 | out: Seed=0x8b9fa60) returned 0xfec266a [0193.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a1c68 [0193.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b0c88 [0193.439] ReadFile (in: hFile=0x160c, lpBuffer=0x80a1c68, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x8b9fa5c, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesRead=0x8b9fa5c*=0xb3, lpOverlapped=0x0) returned 1 [0193.441] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.441] WriteFile (in: hFile=0x160c, lpBuffer=0x80b0c88*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x8b9fa60, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesWritten=0x8b9fa60*=0xb3, lpOverlapped=0x0) returned 1 [0201.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062800 [0201.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062828 [0201.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062828) returned 1 [0201.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0201.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0201.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32688) returned 1 [0201.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5d08) returned 1 [0201.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fb58 [0201.553] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.553] WriteFile (in: hFile=0x160c, lpBuffer=0x30bcf10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8b9fad4, lpOverlapped=0x0 | out: lpBuffer=0x30bcf10*, lpNumberOfBytesWritten=0x8b9fad4*=0x10c, lpOverlapped=0x0) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb28) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062828) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb58) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062800) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0203.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3dd8df0 [0203.802] wcscpy (in: _Dest=0x3dd8df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" [0203.802] wcscat (in: _Dest=0x3dd8df0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.f0dbec" [0203.802] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0x8b9fa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3c470 [0204.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c470) returned 1 [0204.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8319188) returned 1 [0204.275] NtQueryInformationFile (in: FileHandle=0x160c, IoStatusBlock=0x8b9fa30, FileInformation=0x8b9fa38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8b9fa30, FileInformation=0x8b9fa38) returned 0x0 [0204.276] NtSetInformationFile (FileHandle=0x160c, IoStatusBlock=0x8b9fa30, FileInformation=0x8b9fa38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8df0) returned 1 [0204.681] FlushFileBuffers (hFile=0x160c) returned 1 [0204.690] CloseHandle (hObject=0x160c) returned 1 [0207.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347f20 [0207.853] wcscpy (in: _Dest=0x8347f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" [0207.853] wcscat (in: _Dest=0x8347f20, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\F0DBEC-Readme.txt" [0207.853] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0207.853] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1608 [0208.378] WriteFile (in: hFile=0x1608, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8b9fa7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8b9fa7c*=0x70c, lpOverlapped=0x0) returned 1 [0209.159] CloseHandle (hObject=0x1608) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347f20) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1898) returned 1 Thread: id = 4575 os_tid = 0x205c [0175.894] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json")) returned 0x2020 [0178.020] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0189.945] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1608 [0193.442] GetFileSizeEx (in: hFile=0x1608, lpFileSize=0xee4f8d8 | out: lpFileSize=0xee4f8d8*=179) returned 1 [0193.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0193.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1a8 [0193.442] NtQuerySystemTime (in: CurrentTime=0xee4f860 | out: CurrentTime=0xee4f860*=132471540613524000) returned 0x0 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0xa8f8929 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x21239c27 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x36da48e3 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x2e747205 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0xb4ca1c2 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x2d43ecb0 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x7fc01e17 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x306634f9 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x61654c4d [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x2c395f9f [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x272a1727 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x114551bb [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x5965a69a [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x1fdfa876 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x2d22aa62 [0193.442] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x3c6e567a [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x60a9becf [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x6f5dd68f [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x48253751 [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x1cf1251c [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x4f1a0736 [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x4bffdbcc [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x7ba576fc [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x7fbef314 [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x634a52b9 [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x431266f5 [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x4920409b [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x2f522557 [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x57a8a4e5 [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x6fe0033e [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x64fccb1f [0193.443] RtlRandomEx (in: Seed=0xee4f858 | out: Seed=0xee4f858) returned 0x615f27c2 [0193.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d28d0 [0193.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0193.452] ReadFile (in: hFile=0x1608, lpBuffer=0x80d28d0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xee4f854, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesRead=0xee4f854*=0xb3, lpOverlapped=0x0) returned 1 [0193.454] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.454] WriteFile (in: hFile=0x1608, lpBuffer=0x80cb0c0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xee4f858, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesWritten=0xee4f858*=0xb3, lpOverlapped=0x0) returned 1 [0201.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062850 [0201.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062878 [0201.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062878) returned 1 [0201.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0201.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0201.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32f70) returned 1 [0201.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e59a8) returned 1 [0201.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6faf8 [0201.555] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.556] WriteFile (in: hFile=0x1608, lpBuffer=0x30bb4d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xee4f8cc, lpOverlapped=0x0 | out: lpBuffer=0x30bb4d0*, lpNumberOfBytesWritten=0xee4f8cc*=0x10c, lpOverlapped=0x0) returned 1 [0203.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0203.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fac8) returned 1 [0203.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062878) returned 1 [0203.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6faf8) returned 1 [0203.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062850) returned 1 [0203.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0203.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c720) returned 1 [0203.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0203.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5ed0 [0203.833] wcscpy (in: _Dest=0x81f5ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" [0203.833] wcscat (in: _Dest=0x81f5ed0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.f0dbec" [0203.833] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0xee4f850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3ceb0 [0207.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ceb0) returned 1 [0207.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8342078) returned 1 [0207.191] NtQueryInformationFile (in: FileHandle=0x1608, IoStatusBlock=0xee4f828, FileInformation=0xee4f830, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xee4f828, FileInformation=0xee4f830) returned 0x0 [0207.191] NtSetInformationFile (FileHandle=0x1608, IoStatusBlock=0xee4f828, FileInformation=0xee4f830, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5ed0) returned 1 [0208.203] FlushFileBuffers (hFile=0x1608) returned 1 [0208.377] CloseHandle (hObject=0x1608) returned 1 [0208.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6758 [0208.814] wcscpy (in: _Dest=0x81f6758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" [0208.814] wcscat (in: _Dest=0x81f6758, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\F0DBEC-Readme.txt" [0208.814] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0208.814] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c0 [0209.495] WriteFile (in: hFile=0x13c0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xee4f874, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xee4f874*=0x70c, lpOverlapped=0x0) returned 1 [0209.504] CloseHandle (hObject=0x13c0) returned 1 [0209.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6758) returned 1 [0209.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e19c0) returned 1 Thread: id = 4576 os_tid = 0x2060 [0175.895] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json")) returned 0x2020 [0178.020] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0189.920] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe3c [0193.252] GetFileSizeEx (in: hFile=0xe3c, lpFileSize=0xf6efb18 | out: lpFileSize=0xf6efb18*=179) returned 1 [0193.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0eb0 [0193.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0193.252] NtQuerySystemTime (in: CurrentTime=0xf6efaa0 | out: CurrentTime=0xf6efaa0*=132471540611496000) returned 0x0 [0193.252] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x5b1c15c1 [0193.252] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x71bba18e [0193.252] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x7ff57357 [0193.252] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x77aa8be3 [0193.252] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x4887e228 [0193.252] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x55c9edba [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x78cdbc20 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0xf3a71b2 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x77f2693f [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x1b817ef8 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x7c7ccb56 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x500f495f [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x188c573 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x27985ecb [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x55be7669 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x4e533e7a [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x257b0f1b [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x24bf11b4 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x3cff318b [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x1cce9e0c [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x2ae6d9ef [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x3aab5b79 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x6f336166 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x1eb8da79 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x15d49fe0 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x6fbf2286 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x770cc200 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x1d26c29 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x7e4fb1b0 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x215b172a [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x1c6b3168 [0193.253] RtlRandomEx (in: Seed=0xf6efa98 | out: Seed=0xf6efa98) returned 0x4bd6bafd [0193.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828c060 [0193.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x838c538 [0193.263] ReadFile (in: hFile=0xe3c, lpBuffer=0x828c060, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xf6efa94, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesRead=0xf6efa94*=0xb3, lpOverlapped=0x0) returned 1 [0193.265] SetFilePointerEx (in: hFile=0xe3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.265] WriteFile (in: hFile=0xe3c, lpBuffer=0x838c538*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xf6efa98, lpOverlapped=0x0 | out: lpBuffer=0x838c538*, lpNumberOfBytesWritten=0xf6efa98*=0xb3, lpOverlapped=0x0) returned 1 [0196.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42470 [0196.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43460 [0196.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0196.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x838c538) returned 1 [0196.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0196.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 [0196.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6530) returned 1 [0196.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69120 [0196.187] SetFilePointerEx (in: hFile=0xe3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.188] WriteFile (in: hFile=0xe3c, lpBuffer=0x8405fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf6efb0c, lpOverlapped=0x0 | out: lpBuffer=0x8405fc0*, lpNumberOfBytesWritten=0xf6efb0c*=0x10c, lpOverlapped=0x0) returned 1 [0196.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405fc0) returned 1 [0196.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69150) returned 1 [0196.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0196.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69120) returned 1 [0196.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42470) returned 1 [0196.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0eb0) returned 1 [0196.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0196.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0196.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x84041b8 [0196.615] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" [0196.615] wcscat (in: _Dest=0x84041b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.f0dbec" [0196.615] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0xf6efa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9408 [0196.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9408) returned 1 [0196.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8868) returned 1 [0196.868] NtQueryInformationFile (in: FileHandle=0xe3c, IoStatusBlock=0xf6efa68, FileInformation=0xf6efa70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf6efa68, FileInformation=0xf6efa70) returned 0x0 [0196.868] NtSetInformationFile (FileHandle=0xe3c, IoStatusBlock=0xf6efa68, FileInformation=0xf6efa70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84041b8) returned 1 [0197.055] FlushFileBuffers (hFile=0xe3c) returned 1 [0197.064] CloseHandle (hObject=0xe3c) returned 1 [0197.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f63b0 [0197.302] wcscpy (in: _Dest=0x81f63b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" [0197.302] wcscat (in: _Dest=0x81f63b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\F0DBEC-Readme.txt" [0197.302] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0197.302] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1200 [0197.466] WriteFile (in: hFile=0x1200, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf6efab4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf6efab4*=0x70c, lpOverlapped=0x0) returned 1 [0197.993] CloseHandle (hObject=0x1200) returned 1 [0197.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f63b0) returned 1 [0197.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1ae8) returned 1 Thread: id = 4577 os_tid = 0x2064 [0175.895] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json")) returned 0x2020 [0178.021] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0189.945] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1604 [0193.472] GetFileSizeEx (in: hFile=0x1604, lpFileSize=0x5e1fbd0 | out: lpFileSize=0x5e1fbd0*=179) returned 1 [0193.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1a8 [0193.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b8e8 [0193.472] NtQuerySystemTime (in: CurrentTime=0x5e1fb58 | out: CurrentTime=0x5e1fb58*=132471540613836000) returned 0x0 [0193.472] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x4d4c8b5d [0193.472] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x41750e89 [0193.472] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x398240e0 [0193.472] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x53b09bab [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x2515bf20 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x56d582ec [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x6639b787 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x1c59acdc [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x15033aa5 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x4595e244 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x193fdff0 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x6c4443d2 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x4be10981 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0xb497b23 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x1bf32616 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x4e5da1fa [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x17e570b7 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x3f0a5f00 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x72fe907e [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x60c9f22f [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0xa5b3a87 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x13dd8709 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x6cb37deb [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x7f96886c [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x67e1bd18 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x610c4bda [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x79b35762 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x375059f0 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x11b262bc [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x35107215 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x6fa9d38 [0193.473] RtlRandomEx (in: Seed=0x5e1fb50 | out: Seed=0x5e1fb50) returned 0x163aaa79 [0193.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0193.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8353d48 [0193.481] ReadFile (in: hFile=0x1604, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x5e1fb4c, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0x5e1fb4c*=0xb3, lpOverlapped=0x0) returned 1 [0193.483] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.483] WriteFile (in: hFile=0x1604, lpBuffer=0x8353d48*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x5e1fb50, lpOverlapped=0x0 | out: lpBuffer=0x8353d48*, lpNumberOfBytesWritten=0x5e1fb50*=0xb3, lpOverlapped=0x0) returned 1 [0196.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42718 [0196.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430a0 [0196.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430a0) returned 1 [0196.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8353d48) returned 1 [0196.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0196.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0196.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e69b0) returned 1 [0196.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fd0 [0196.209] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.209] WriteFile (in: hFile=0x1604, lpBuffer=0x81e1088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5e1fbc4, lpOverlapped=0x0 | out: lpBuffer=0x81e1088*, lpNumberOfBytesWritten=0x5e1fbc4*=0x10c, lpOverlapped=0x0) returned 1 [0196.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1088) returned 1 [0196.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0196.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430a0) returned 1 [0196.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0196.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42718) returned 1 [0196.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1a8) returned 1 [0196.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bac8) returned 1 [0196.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0196.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4c38 [0196.618] wcscpy (in: _Dest=0x81f4c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" [0196.618] wcscat (in: _Dest=0x81f4c38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.f0dbec" [0196.618] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0x5e1fb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9550 [0196.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9550) returned 1 [0196.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f54a8) returned 1 [0196.873] NtQueryInformationFile (in: FileHandle=0x1604, IoStatusBlock=0x5e1fb20, FileInformation=0x5e1fb28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5e1fb20, FileInformation=0x5e1fb28) returned 0x0 [0196.873] NtSetInformationFile (FileHandle=0x1604, IoStatusBlock=0x5e1fb20, FileInformation=0x5e1fb28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4c38) returned 1 [0197.066] FlushFileBuffers (hFile=0x1604) returned 1 [0197.074] CloseHandle (hObject=0x1604) returned 1 [0197.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6278 [0197.303] wcscpy (in: _Dest=0x81f6278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" [0197.303] wcscat (in: _Dest=0x81f6278, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\F0DBEC-Readme.txt" [0197.303] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0197.304] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0c [0197.467] WriteFile (in: hFile=0x1f0c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x5e1fb6c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x5e1fb6c*=0x70c, lpOverlapped=0x0) returned 1 [0197.999] CloseHandle (hObject=0x1f0c) returned 1 [0197.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6278) returned 1 [0197.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1c10) returned 1 Thread: id = 4578 os_tid = 0x2068 [0175.896] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json")) returned 0x2020 [0178.022] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0189.946] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1600 [0193.484] GetFileSizeEx (in: hFile=0x1600, lpFileSize=0x5e6f7b0 | out: lpFileSize=0x5e6f7b0*=179) returned 1 [0193.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b8e8 [0193.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0193.484] NtQuerySystemTime (in: CurrentTime=0x5e6f738 | out: CurrentTime=0x5e6f738*=132471540613836000) returned 0x0 [0193.484] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x4c6193c1 [0193.484] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x7dd419c7 [0193.484] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x3aeda2c9 [0193.484] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x26e0a24c [0193.484] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x6af14d24 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x3033cfa7 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x5b61252e [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x1c5b65ff [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x25f98454 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x6f756abc [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x31ccf868 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x3033cfa7 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x4070a516 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x432f8a9e [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x27162fb4 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x20f7cfa4 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x6f85e8d9 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x665dad6 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x32801467 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x467bbe1c [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x6798e6e6 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0xdf15e0f [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x405ccb76 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x14c20af5 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x44d7fa42 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x7d8c55d3 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x3b82644 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x3f9e5bb8 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x3b82644 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x47de214 [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x29be7e7c [0193.485] RtlRandomEx (in: Seed=0x5e6f730 | out: Seed=0x5e6f730) returned 0x5bbb74d3 [0193.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8380da8 [0193.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83849b0 [0193.494] ReadFile (in: hFile=0x1600, lpBuffer=0x8380da8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x5e6f72c, lpOverlapped=0x0 | out: lpBuffer=0x8380da8*, lpNumberOfBytesRead=0x5e6f72c*=0xb3, lpOverlapped=0x0) returned 1 [0193.496] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.496] WriteFile (in: hFile=0x1600, lpBuffer=0x83849b0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x5e6f730, lpOverlapped=0x0 | out: lpBuffer=0x83849b0*, lpNumberOfBytesWritten=0x5e6f730*=0xb3, lpOverlapped=0x0) returned 1 [0196.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d424c0 [0196.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42bc8 [0196.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0196.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83849b0) returned 1 [0196.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8380da8) returned 1 [0196.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0196.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e64e8) returned 1 [0196.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69600 [0196.217] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.217] WriteFile (in: hFile=0x1600, lpBuffer=0x81e0b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5e6f7a4, lpOverlapped=0x0 | out: lpBuffer=0x81e0b10*, lpNumberOfBytesWritten=0x5e6f7a4*=0x10c, lpOverlapped=0x0) returned 1 [0196.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0b10) returned 1 [0196.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69630) returned 1 [0196.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0196.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69600) returned 1 [0196.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424c0) returned 1 [0196.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b8e8) returned 1 [0196.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0196.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0196.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4ea8 [0196.623] wcscpy (in: _Dest=0x81f4ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" [0196.624] wcscat (in: _Dest=0x81f4ea8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.f0dbec" [0196.624] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0x5e6f728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef97e0 [0196.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef97e0) returned 1 [0196.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fe2f8) returned 1 [0196.875] NtQueryInformationFile (in: FileHandle=0x1600, IoStatusBlock=0x5e6f700, FileInformation=0x5e6f708, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5e6f700, FileInformation=0x5e6f708) returned 0x0 [0196.875] NtSetInformationFile (FileHandle=0x1600, IoStatusBlock=0x5e6f700, FileInformation=0x5e6f708, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4ea8) returned 1 [0197.072] FlushFileBuffers (hFile=0x1600) returned 1 [0197.080] CloseHandle (hObject=0x1600) returned 1 [0197.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6140 [0197.304] wcscpy (in: _Dest=0x81f6140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" [0197.304] wcscat (in: _Dest=0x81f6140, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\F0DBEC-Readme.txt" [0197.305] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0197.305] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b30 [0197.467] WriteFile (in: hFile=0x2b30, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x5e6f74c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x5e6f74c*=0x70c, lpOverlapped=0x0) returned 1 [0198.003] CloseHandle (hObject=0x2b30) returned 1 [0198.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6140) returned 1 [0198.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1d38) returned 1 Thread: id = 4579 os_tid = 0x206c [0175.896] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json")) returned 0x2020 [0178.023] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0189.946] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15fc [0193.497] GetFileSizeEx (in: hFile=0x15fc, lpFileSize=0xdeef840 | out: lpFileSize=0xdeef840*=179) returned 1 [0193.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0193.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0193.497] NtQuerySystemTime (in: CurrentTime=0xdeef7c8 | out: CurrentTime=0xdeef7c8*=132471540613992000) returned 0x0 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x373fc389 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x74d76ffb [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x2158c032 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x32801467 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x34534398 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x5b1deb80 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x5e86fb6e [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x27162fb4 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x2e81052a [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x8d00c00 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x172420a0 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x2158c032 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x3d0d4efb [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x63595331 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x34109528 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x539004d9 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x4b607f41 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x17e570b7 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x34bac4fb [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x63f7468f [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x838cba2 [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x2f261a5b [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x7a7688bc [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x6c01ae5e [0193.497] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x3bcffb63 [0193.498] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x2a5e528c [0193.498] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x42e8a7d8 [0193.498] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0xf257411 [0193.498] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x3df9787a [0193.498] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x44e37be [0193.498] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x39a2cfdf [0193.498] RtlRandomEx (in: Seed=0xdeef7c0 | out: Seed=0xdeef7c0) returned 0x947bc15 [0193.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8379598 [0193.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x837d1a0 [0193.506] ReadFile (in: hFile=0x15fc, lpBuffer=0x8379598, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xdeef7bc, lpOverlapped=0x0 | out: lpBuffer=0x8379598*, lpNumberOfBytesRead=0xdeef7bc*=0xb3, lpOverlapped=0x0) returned 1 [0193.508] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.508] WriteFile (in: hFile=0x15fc, lpBuffer=0x837d1a0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xdeef7c0, lpOverlapped=0x0 | out: lpBuffer=0x837d1a0*, lpNumberOfBytesWritten=0xdeef7c0*=0xb3, lpOverlapped=0x0) returned 1 [0196.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d424e8 [0196.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f88 [0196.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f88) returned 1 [0196.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x837d1a0) returned 1 [0196.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8379598) returned 1 [0196.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f331c8) returned 1 [0196.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6458) returned 1 [0196.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e695a0 [0196.215] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.215] WriteFile (in: hFile=0x15fc, lpBuffer=0x81e0138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdeef834, lpOverlapped=0x0 | out: lpBuffer=0x81e0138*, lpNumberOfBytesWritten=0xdeef834*=0x10c, lpOverlapped=0x0) returned 1 [0196.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0138) returned 1 [0196.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695d0) returned 1 [0196.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f88) returned 1 [0196.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695a0) returned 1 [0196.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424e8) returned 1 [0196.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0196.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0196.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0196.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4d70 [0196.621] wcscpy (in: _Dest=0x81f4d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" [0196.621] wcscat (in: _Dest=0x81f4d70, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.f0dbec" [0196.621] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.f0dbec", NtPathName=0xdeef7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9698 [0196.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9698) returned 1 [0196.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f6e88) returned 1 [0196.878] NtQueryInformationFile (in: FileHandle=0x15fc, IoStatusBlock=0xdeef790, FileInformation=0xdeef798, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdeef790, FileInformation=0xdeef798) returned 0x0 [0196.878] NtSetInformationFile (FileHandle=0x15fc, IoStatusBlock=0xdeef790, FileInformation=0xdeef798, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4d70) returned 1 [0197.082] FlushFileBuffers (hFile=0x15fc) returned 1 [0197.104] CloseHandle (hObject=0x15fc) returned 1 [0197.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5ed0 [0197.309] wcscpy (in: _Dest=0x81f5ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" [0197.309] wcscat (in: _Dest=0x81f5ed0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\F0DBEC-Readme.txt" [0197.309] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\f0dbec-readme.txt")) returned 0xffffffff [0197.309] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0c [0197.469] WriteFile (in: hFile=0xe0c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdeef7dc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdeef7dc*=0x70c, lpOverlapped=0x0) returned 1 [0198.011] CloseHandle (hObject=0xe0c) returned 1 [0198.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5ed0) returned 1 [0198.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1e60) returned 1 Thread: id = 4580 os_tid = 0x2070 [0175.897] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json")) returned 0x2020 [0178.023] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0189.947] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f8 [0193.508] GetFileSizeEx (in: hFile=0x15f8, lpFileSize=0x5d4fd88 | out: lpFileSize=0x5d4fd88*=179) returned 1 [0193.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0193.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0193.509] NtQuerySystemTime (in: CurrentTime=0x5d4fd10 | out: CurrentTime=0x5d4fd10*=132471540614148000) returned 0x0 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x41dc0e76 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x63ad1aff [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x44e37be [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x63595331 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x5f75b480 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x200b01ed [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x54e06673 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x1516a627 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x14e1e067 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x79cecf63 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x728d620d [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0xe90f477 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x4cfcbda0 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x4b8b5801 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x4ff11837 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x3da47d3b [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x274f3412 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x53b09bab [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x4b8b5801 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x63aa627a [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x49b94eb6 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0xcefc549 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x4c0be241 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x53bd330 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x720f1ac9 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x2a2d54a7 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x3f39dd15 [0193.509] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x303e0eb3 [0193.510] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x48b3ed24 [0193.510] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x42462773 [0193.510] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x58f4c648 [0193.510] RtlRandomEx (in: Seed=0x5d4fd08 | out: Seed=0x5d4fd08) returned 0x24a6dfc6 [0193.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x836a578 [0193.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8348930 [0193.519] ReadFile (in: hFile=0x15f8, lpBuffer=0x836a578, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x5d4fd04, lpOverlapped=0x0 | out: lpBuffer=0x836a578*, lpNumberOfBytesRead=0x5d4fd04*=0xb3, lpOverlapped=0x0) returned 1 [0193.521] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.521] WriteFile (in: hFile=0x15f8, lpBuffer=0x8348930*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x5d4fd08, lpOverlapped=0x0 | out: lpBuffer=0x8348930*, lpNumberOfBytesWritten=0x5d4fd08*=0xb3, lpOverlapped=0x0) returned 1 [0196.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423f8 [0196.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42380 [0196.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42380) returned 1 [0196.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348930) returned 1 [0196.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836a578) returned 1 [0196.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0196.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5a80) returned 1 [0196.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e698a0 [0196.221] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.221] WriteFile (in: hFile=0x15f8, lpBuffer=0x81dfaa8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5d4fd7c, lpOverlapped=0x0 | out: lpBuffer=0x81dfaa8*, lpNumberOfBytesWritten=0x5d4fd7c*=0x10c, lpOverlapped=0x0) returned 1 [0196.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfaa8) returned 1 [0196.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698d0) returned 1 [0196.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42380) returned 1 [0196.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698a0) returned 1 [0196.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423f8) returned 1 [0196.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0196.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0196.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0196.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4fe0 [0196.627] wcscpy (in: _Dest=0x81f4fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" [0196.627] wcscat (in: _Dest=0x81f4fe0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.f0dbec" [0196.627] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0x5d4fd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3efa4b0 [0196.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa4b0) returned 1 [0196.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400128) returned 1 [0196.877] NtQueryInformationFile (in: FileHandle=0x15f8, IoStatusBlock=0x5d4fcd8, FileInformation=0x5d4fce0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5d4fcd8, FileInformation=0x5d4fce0) returned 0x0 [0196.877] NtSetInformationFile (FileHandle=0x15f8, IoStatusBlock=0x5d4fcd8, FileInformation=0x5d4fce0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4fe0) returned 1 [0197.079] FlushFileBuffers (hFile=0x15f8) returned 1 [0197.087] CloseHandle (hObject=0x15f8) returned 1 [0197.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6008 [0197.307] wcscpy (in: _Dest=0x81f6008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" [0197.307] wcscat (in: _Dest=0x81f6008, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\F0DBEC-Readme.txt" [0197.307] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0197.308] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cfc [0197.469] WriteFile (in: hFile=0x1cfc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x5d4fd24, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x5d4fd24*=0x70c, lpOverlapped=0x0) returned 1 [0198.016] CloseHandle (hObject=0x1cfc) returned 1 [0198.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6008) returned 1 [0198.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1f88) returned 1 Thread: id = 4581 os_tid = 0x2074 [0175.897] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json")) returned 0x2020 [0178.024] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0189.920] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fb8 [0193.266] GetFileSizeEx (in: hFile=0x1fb8, lpFileSize=0xc9af788 | out: lpFileSize=0xc9af788*=179) returned 1 [0193.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0193.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0193.266] NtQuerySystemTime (in: CurrentTime=0xc9af710 | out: CurrentTime=0xc9af710*=132471540611652000) returned 0x0 [0193.266] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0xcea3b8 [0193.266] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x1943394a [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x4fe4b621 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x768670 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x655c12db [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x5358e102 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x1146a550 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x5700a33d [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x3945f88c [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x62070727 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x3033527 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x6fbf2286 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x24f39465 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x50762b4 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x241df7aa [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x1943394a [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x5f3464e1 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x7f23fd01 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x5f86ac4f [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x1e658152 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x4f8b8d26 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x3d1bca81 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x70540b4d [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x500f495f [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x5ee26263 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x20291f67 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x49c64305 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x53c127e8 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x1a17344a [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x4e50e7e4 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0x18163d05 [0193.267] RtlRandomEx (in: Seed=0xc9af708 | out: Seed=0xc9af708) returned 0xe8b8bf2 [0193.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8390140 [0193.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8393d48 [0193.276] ReadFile (in: hFile=0x1fb8, lpBuffer=0x8390140, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc9af704, lpOverlapped=0x0 | out: lpBuffer=0x8390140*, lpNumberOfBytesRead=0xc9af704*=0xb3, lpOverlapped=0x0) returned 1 [0193.278] SetFilePointerEx (in: hFile=0x1fb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.278] WriteFile (in: hFile=0x1fb8, lpBuffer=0x8393d48*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc9af708, lpOverlapped=0x0 | out: lpBuffer=0x8393d48*, lpNumberOfBytesWritten=0xc9af708*=0xb3, lpOverlapped=0x0) returned 1 [0201.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80627b0 [0201.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80627d8 [0201.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80627d8) returned 1 [0201.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8393d48) returned 1 [0201.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8390140) returned 1 [0201.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67fe8) returned 1 [0201.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6bf0) returned 1 [0201.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fbb8 [0201.550] SetFilePointerEx (in: hFile=0x1fb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.551] WriteFile (in: hFile=0x1fb8, lpBuffer=0x30bbfc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc9af77c, lpOverlapped=0x0 | out: lpBuffer=0x30bbfc0*, lpNumberOfBytesWritten=0xc9af77c*=0x10c, lpOverlapped=0x0) returned 1 [0203.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 [0203.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb88) returned 1 [0203.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80627d8) returned 1 [0203.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fbb8) returned 1 [0203.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80627b0) returned 1 [0203.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0203.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0203.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0203.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3dd8b80 [0203.785] wcscpy (in: _Dest=0x3dd8b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" [0203.786] wcscat (in: _Dest=0x3dd8b80, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.f0dbec" [0203.786] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0xc9af700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3c328 [0204.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c328) returned 1 [0204.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8318b10) returned 1 [0204.263] NtQueryInformationFile (in: FileHandle=0x1fb8, IoStatusBlock=0xc9af6d8, FileInformation=0xc9af6e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc9af6d8, FileInformation=0xc9af6e0) returned 0x0 [0204.263] NtSetInformationFile (FileHandle=0x1fb8, IoStatusBlock=0xc9af6d8, FileInformation=0xc9af6e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0204.669] FlushFileBuffers (hFile=0x1fb8) returned 1 [0204.678] CloseHandle (hObject=0x1fb8) returned 1 [0207.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347de8 [0207.837] wcscpy (in: _Dest=0x8347de8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" [0207.837] wcscat (in: _Dest=0x8347de8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\F0DBEC-Readme.txt" [0207.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0207.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11a4 [0208.374] WriteFile (in: hFile=0x11a4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc9af724, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc9af724*=0x70c, lpOverlapped=0x0) returned 1 [0209.154] CloseHandle (hObject=0x11a4) returned 1 [0209.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347de8) returned 1 [0209.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e20b0) returned 1 Thread: id = 4582 os_tid = 0x2078 [0175.898] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json")) returned 0x2020 [0178.025] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", dwFileAttributes=0x20) returned 1 [0190.015] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x189c [0195.078] GetFileSizeEx (in: hFile=0x189c, lpFileSize=0x7d1f888 | out: lpFileSize=0x7d1f888*=2803) returned 1 [0195.078] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0xaef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.078] ReadFile (in: hFile=0x189c, lpBuffer=0x7d1f894, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7d1f870, lpOverlapped=0x0 | out: lpBuffer=0x7d1f894*, lpNumberOfBytesRead=0x7d1f870*=0x4, lpOverlapped=0x0) returned 1 [0195.088] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc7f60 [0195.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0195.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0195.088] NtQuerySystemTime (in: CurrentTime=0x7d1f810 | out: CurrentTime=0x7d1f810*=132471540629748000) returned 0x0 [0195.088] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x59e06369 [0195.088] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x605a9d38 [0195.088] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x34dd59e2 [0195.088] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x14f2924d [0195.088] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x8a3b16b [0195.088] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x715e49a9 [0195.088] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x50d47666 [0195.088] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x559fe4d8 [0195.088] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x3f41a200 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x477d149b [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x4398737d [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x7abea874 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x1ae1a710 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x8cac58e [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x2e32e415 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x3c7b2481 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x70a80142 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x1ef8f514 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x125cd16b [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x244b35c6 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x637e50a9 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x1107b817 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x784b43a5 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x3e5274c1 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x7289dd71 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x3a78fb81 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x3ffdd5c3 [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x5e10cddf [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x4b489bbf [0195.089] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x497d92bf [0195.090] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x11e53d4 [0195.090] RtlRandomEx (in: Seed=0x7d1f808 | out: Seed=0x7d1f808) returned 0x38592647 [0195.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0195.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a3e4d8 [0195.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a420e0 [0195.103] ReadFile (in: hFile=0x189c, lpBuffer=0x14a3e4d8, nNumberOfBytesToRead=0xaf3, lpNumberOfBytesRead=0x7d1f804, lpOverlapped=0x0 | out: lpBuffer=0x14a3e4d8*, lpNumberOfBytesRead=0x7d1f804*=0xaf3, lpOverlapped=0x0) returned 1 [0195.103] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.103] WriteFile (in: hFile=0x189c, lpBuffer=0x14a420e0*, nNumberOfBytesToWrite=0xaf3, lpNumberOfBytesWritten=0x7d1f808, lpOverlapped=0x0 | out: lpBuffer=0x14a420e0*, lpNumberOfBytesWritten=0x7d1f808*=0xaf3, lpOverlapped=0x0) returned 1 [0201.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063020 [0201.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063048 [0201.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063048) returned 1 [0201.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a420e0) returned 1 [0201.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a3e4d8) returned 1 [0201.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a38) returned 1 [0201.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8309850) returned 1 [0201.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066f00 [0201.625] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.625] WriteFile (in: hFile=0x189c, lpBuffer=0x8401020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x7d1f87c, lpOverlapped=0x0 | out: lpBuffer=0x8401020*, lpNumberOfBytesWritten=0x7d1f87c*=0x11a, lpOverlapped=0x0) returned 1 [0203.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401020) returned 1 [0203.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 [0203.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063048) returned 1 [0203.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f00) returned 1 [0203.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063020) returned 1 [0203.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0203.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f68) returned 1 [0203.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0203.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x81f6890 [0203.875] wcscpy (in: _Dest=0x81f6890, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" [0203.875] wcscat (in: _Dest=0x81f6890, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.f0dbec" [0203.875] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.f0dbec", NtPathName=0x7d1f800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e16780 [0207.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16780) returned 1 [0207.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fae58) returned 1 [0207.238] NtQueryInformationFile (in: FileHandle=0x189c, IoStatusBlock=0x7d1f7d8, FileInformation=0x7d1f7e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7d1f7d8, FileInformation=0x7d1f7e0) returned 0x0 [0207.238] NtSetInformationFile (FileHandle=0x189c, IoStatusBlock=0x7d1f7d8, FileInformation=0x7d1f7e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6890) returned 1 [0208.075] FlushFileBuffers (hFile=0x189c) returned 1 [0208.078] CloseHandle (hObject=0x189c) returned 1 [0208.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81f0428 [0208.259] wcscpy (in: _Dest=0x81f0428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0208.259] wcscat (in: _Dest=0x81f0428, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\F0DBEC-Readme.txt" [0208.259] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\f0dbec-readme.txt")) returned 0x2020 [0208.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0428) returned 1 [0208.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d80b0) returned 1 Thread: id = 4583 os_tid = 0x207c [0175.898] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json")) returned 0x2020 [0178.026] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0189.920] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2534 [0194.933] GetFileSizeEx (in: hFile=0x2534, lpFileSize=0x7eaff30 | out: lpFileSize=0x7eaff30*=17492) returned 1 [0194.933] SetFilePointerEx (in: hFile=0x2534, liDistanceToMove=0x4450, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.933] ReadFile (in: hFile=0x2534, lpBuffer=0x7eaff3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7eaff18, lpOverlapped=0x0 | out: lpBuffer=0x7eaff3c*, lpNumberOfBytesRead=0x7eaff18*=0x4, lpOverlapped=0x0) returned 1 [0194.962] SetFilePointerEx (in: hFile=0x2534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0194.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d88 [0194.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc7f60 [0194.963] NtQuerySystemTime (in: CurrentTime=0x7eafeb8 | out: CurrentTime=0x7eafeb8*=132471540628500000) returned 0x0 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x4a7ea11e [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x5737f48c [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x4e9ed767 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x62957020 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x363e87ba [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x7ae1a2e [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x334a78a9 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x2b59135c [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x4b6464a9 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x644dac92 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x4d348761 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x6da3a1b3 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x540191d6 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x367b5b83 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x1d41df73 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x2eb2be [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x65ceea2b [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x408ce122 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x4fc2cbbb [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x2aa81280 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x39a0f1c6 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x3e08b29c [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x12a0f451 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x763fa00b [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x75ed1d2 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x20d5d5a1 [0194.963] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x66ca5e27 [0194.964] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x18dbba97 [0194.964] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x7b553efe [0194.964] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x5827bf93 [0194.964] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x72aeffcf [0194.964] RtlRandomEx (in: Seed=0x7eafeb0 | out: Seed=0x7eafeb0) returned 0x1da9b30d [0194.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0194.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x8054a38 [0194.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca170 [0194.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a38) returned 1 [0194.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0194.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0194.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a36cc8 [0194.976] SetFilePointerEx (in: hFile=0x2534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.977] ReadFile (in: hFile=0x2534, lpBuffer=0x14a36cc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7eafeb8, lpOverlapped=0x0 | out: lpBuffer=0x14a36cc8*, lpNumberOfBytesRead=0x7eafeb8*=0x3c00, lpOverlapped=0x0) returned 1 [0194.979] SetFilePointerEx (in: hFile=0x2534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x83089b0 [0194.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x8054a38 [0194.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0194.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0194.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a3a8d0 [0194.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0194.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc7f60 [0194.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0194.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a38) returned 1 [0194.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83089b0) returned 1 [0194.981] WriteFile (in: hFile=0x2534, lpBuffer=0x14a3a8d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7eafeb8, lpOverlapped=0x0 | out: lpBuffer=0x14a3a8d0*, lpNumberOfBytesWritten=0x7eafeb8*=0x3c00, lpOverlapped=0x0) returned 1 [0196.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a3a8d0) returned 1 [0196.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a36cc8) returned 1 [0196.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5cd30 [0196.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fb8) returned 1 [0196.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5d750 [0196.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8fb8 [0196.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8f18 [0196.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8f18) returned 1 [0196.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80549c0) returned 1 [0196.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d828) returned 1 [0196.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81efae8 [0196.389] SetFilePointerEx (in: hFile=0x2534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.389] WriteFile (in: hFile=0x2534, lpBuffer=0x81efae8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x7eaff24, lpOverlapped=0x0 | out: lpBuffer=0x81efae8*, lpNumberOfBytesWritten=0x7eaff24*=0x11e, lpOverlapped=0x0) returned 1 [0196.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efae8) returned 1 [0196.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d750) returned 1 [0196.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fb8) returned 1 [0196.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd30) returned 1 [0196.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0196.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d88) returned 1 [0196.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0196.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca170) returned 1 [0196.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x8347228 [0196.729] wcscpy (in: _Dest=0x8347228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" [0196.729] wcscat (in: _Dest=0x8347228, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.f0dbec" [0196.729] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.f0dbec", NtPathName=0x7eafea8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e16ce0 [0196.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0196.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fa698) returned 1 [0196.921] NtQueryInformationFile (in: FileHandle=0x2534, IoStatusBlock=0x7eafe80, FileInformation=0x7eafe88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7eafe80, FileInformation=0x7eafe88) returned 0x0 [0196.921] NtSetInformationFile (FileHandle=0x2534, IoStatusBlock=0x7eafe80, FileInformation=0x7eafe88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347228) returned 1 [0197.212] FlushFileBuffers (hFile=0x2534) returned 1 [0197.219] CloseHandle (hObject=0x2534) returned 1 [0197.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8333710 [0197.347] wcscpy (in: _Dest=0x8333710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0197.347] wcscat (in: _Dest=0x8333710, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\F0DBEC-Readme.txt" [0197.347] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\f0dbec-readme.txt")) returned 0xffffffff [0197.347] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16f0 [0197.479] WriteFile (in: hFile=0x16f0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7eafecc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7eafecc*=0x70c, lpOverlapped=0x0) returned 1 [0198.116] CloseHandle (hObject=0x16f0) returned 1 [0198.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333710) returned 1 [0198.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef85f0) returned 1 Thread: id = 4584 os_tid = 0x2080 [0175.899] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json")) returned 0x2020 [0178.026] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0189.921] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a5c [0191.255] GetFileSizeEx (in: hFile=0x1a5c, lpFileSize=0x878fdf8 | out: lpFileSize=0x878fdf8*=278) returned 1 [0191.255] SetFilePointerEx (in: hFile=0x1a5c, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.255] ReadFile (in: hFile=0x1a5c, lpBuffer=0x878fe04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x878fde0, lpOverlapped=0x0 | out: lpBuffer=0x878fe04*, lpNumberOfBytesRead=0x878fde0*=0x4, lpOverlapped=0x0) returned 1 [0191.257] SetFilePointerEx (in: hFile=0x1a5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f88 [0191.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42718 [0191.257] NtQuerySystemTime (in: CurrentTime=0x878fd80 | out: CurrentTime=0x878fd80*=132471540591684000) returned 0x0 [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x6412b9de [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x4f014a4d [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x6a572201 [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x63d01cc1 [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x7c557484 [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x2bed705f [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x5a8a2cc0 [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x6551adc1 [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x3aee3046 [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x18823ca7 [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x64eb9ad6 [0191.257] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0xece54e0 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x76aeee19 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x4ca14e41 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x1295f2da [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x6dc5afa2 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x38824a54 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x7b5dfa23 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x204c9051 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x2838ec16 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x1f2e830c [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x6adeced8 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x21f94d7d [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x3192bb1 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x507f26b8 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x7da20e37 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x7813ed0b [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x45cde759 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x3767a651 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x467b2a4 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x6a945f36 [0191.258] RtlRandomEx (in: Seed=0x878fd78 | out: Seed=0x878fd78) returned 0x65b48592 [0191.265] ReadFile (in: hFile=0x1a5c, lpBuffer=0x8357950, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0x878fd74, lpOverlapped=0x0 | out: lpBuffer=0x8357950*, lpNumberOfBytesRead=0x878fd74*=0x116, lpOverlapped=0x0) returned 1 [0191.266] SetFilePointerEx (in: hFile=0x1a5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.266] WriteFile (in: hFile=0x1a5c, lpBuffer=0x8371d88*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x878fd78, lpOverlapped=0x0 | out: lpBuffer=0x8371d88*, lpNumberOfBytesWritten=0x878fd78*=0x116, lpOverlapped=0x0) returned 1 [0193.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0193.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0193.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0193.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8371d88) returned 1 [0193.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8357950) returned 1 [0193.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 [0193.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4770) returned 1 [0193.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fd0 [0193.776] SetFilePointerEx (in: hFile=0x1a5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.776] WriteFile (in: hFile=0x1a5c, lpBuffer=0x30bbfc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x878fdec, lpOverlapped=0x0 | out: lpBuffer=0x30bbfc0*, lpNumberOfBytesWritten=0x878fdec*=0x10c, lpOverlapped=0x0) returned 1 [0196.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 [0196.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0196.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0196.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0196.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0196.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f88) returned 1 [0196.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424e8) returned 1 [0196.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430a0) returned 1 [0196.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403a68 [0196.169] wcscpy (in: _Dest=0x8403a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" [0196.169] wcscat (in: _Dest=0x8403a68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json.f0dbec" [0196.169] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json.f0dbec", NtPathName=0x878fd70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9550 [0196.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9550) returned 1 [0196.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f54a8) returned 1 [0196.601] NtQueryInformationFile (in: FileHandle=0x1a5c, IoStatusBlock=0x878fd48, FileInformation=0x878fd50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x878fd48, FileInformation=0x878fd50) returned 0x0 [0196.602] NtSetInformationFile (FileHandle=0x1a5c, IoStatusBlock=0x878fd48, FileInformation=0x878fd50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403a68) returned 1 [0196.859] FlushFileBuffers (hFile=0x1a5c) returned 1 [0196.873] CloseHandle (hObject=0x1a5c) returned 1 [0197.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f00b0 [0197.068] wcscpy (in: _Dest=0x81f00b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" [0197.068] wcscat (in: _Dest=0x81f00b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\F0DBEC-Readme.txt" [0197.069] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\f0dbec-readme.txt")) returned 0xffffffff [0197.069] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2664 [0197.451] WriteFile (in: hFile=0x2664, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x878fd94, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x878fd94*=0x70c, lpOverlapped=0x0) returned 1 [0197.885] CloseHandle (hObject=0x2664) returned 1 [0197.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f00b0) returned 1 [0197.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d81d8) returned 1 Thread: id = 4585 os_tid = 0x2084 [0175.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\abidjan")) returned 0x20 [0175.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", dwFileAttributes=0x20) returned 0 [0175.900] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\abidjan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.900] GetLastError () returned 0x5 [0175.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", dwFileAttributes=0x20) returned 0 [0175.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f394d8) returned 1 Thread: id = 4586 os_tid = 0x2088 [0175.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\accra")) returned 0x20 [0175.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra", dwFileAttributes=0x20) returned 0 [0175.902] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\accra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.902] GetLastError () returned 0x5 [0175.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra", dwFileAttributes=0x20) returned 0 [0175.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46060) returned 1 Thread: id = 4587 os_tid = 0x208c [0175.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\addis_ababa")) returned 0x20 [0175.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", dwFileAttributes=0x20) returned 0 [0175.907] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\addis_ababa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.907] GetLastError () returned 0x5 [0175.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", dwFileAttributes=0x20) returned 0 [0175.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 Thread: id = 4588 os_tid = 0x20e0 [0175.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\algiers")) returned 0x20 [0188.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers", dwFileAttributes=0x20) returned 0 [0188.755] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\algiers"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.755] GetLastError () returned 0x5 [0188.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers", dwFileAttributes=0x20) returned 0 [0188.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a038) returned 1 Thread: id = 4589 os_tid = 0x20e4 [0175.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\asmara")) returned 0x20 [0187.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara", dwFileAttributes=0x20) returned 0 [0187.917] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\asmara"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.567] GetLastError () returned 0x5 [0188.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara", dwFileAttributes=0x20) returned 0 [0188.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d470a0) returned 1 Thread: id = 4590 os_tid = 0x20e8 [0175.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bamako")) returned 0x20 [0187.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako", dwFileAttributes=0x20) returned 0 [0187.918] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bamako"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.568] GetLastError () returned 0x5 [0188.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako", dwFileAttributes=0x20) returned 0 [0188.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d467b0) returned 1 Thread: id = 4591 os_tid = 0x20ec [0175.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bangui")) returned 0x20 [0187.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui", dwFileAttributes=0x20) returned 0 [0187.918] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bangui"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.568] GetLastError () returned 0x5 [0188.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui", dwFileAttributes=0x20) returned 0 [0188.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46818) returned 1 Thread: id = 4592 os_tid = 0x20f0 [0175.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\banjul")) returned 0x20 [0187.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul", dwFileAttributes=0x20) returned 0 [0187.917] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\banjul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.567] GetLastError () returned 0x5 [0188.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul", dwFileAttributes=0x20) returned 0 [0188.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46880) returned 1 Thread: id = 4593 os_tid = 0x210c [0175.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bissau")) returned 0x20 [0187.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau", dwFileAttributes=0x20) returned 0 [0187.917] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bissau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.567] GetLastError () returned 0x5 [0188.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau", dwFileAttributes=0x20) returned 0 [0188.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d468e8) returned 1 Thread: id = 4594 os_tid = 0x2110 [0175.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\blantyre")) returned 0x20 [0187.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", dwFileAttributes=0x20) returned 0 [0187.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\blantyre"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.567] GetLastError () returned 0x5 [0188.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", dwFileAttributes=0x20) returned 0 [0188.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39b68) returned 1 Thread: id = 4595 os_tid = 0x2114 [0175.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\brazzaville")) returned 0x20 [0187.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", dwFileAttributes=0x20) returned 0 [0187.927] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\brazzaville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.695] GetLastError () returned 0x5 [0188.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", dwFileAttributes=0x20) returned 0 [0188.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 Thread: id = 4596 os_tid = 0x2118 [0175.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bujumbura")) returned 0x20 [0187.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", dwFileAttributes=0x20) returned 0 [0188.456] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bujumbura"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.635] GetLastError () returned 0x5 [0188.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", dwFileAttributes=0x20) returned 0 [0188.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33438) returned 1 Thread: id = 4597 os_tid = 0x211c [0175.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\cairo")) returned 0x20 [0187.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo", dwFileAttributes=0x20) returned 0 [0187.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\cairo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.566] GetLastError () returned 0x5 [0188.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo", dwFileAttributes=0x20) returned 0 [0188.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46470) returned 1 Thread: id = 4598 os_tid = 0x2120 [0175.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\casablanca")) returned 0x20 [0188.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", dwFileAttributes=0x20) returned 0 [0188.547] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\casablanca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.667] GetLastError () returned 0x5 [0188.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", dwFileAttributes=0x20) returned 0 [0188.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34388) returned 1 Thread: id = 4599 os_tid = 0x2124 [0175.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ceuta")) returned 0x20 [0187.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", dwFileAttributes=0x20) returned 0 [0187.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ceuta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.566] GetLastError () returned 0x5 [0188.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", dwFileAttributes=0x20) returned 0 [0188.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46408) returned 1 Thread: id = 4600 os_tid = 0x2128 [0175.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\conakry")) returned 0x20 [0187.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry", dwFileAttributes=0x20) returned 0 [0187.775] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\conakry"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.547] GetLastError () returned 0x5 [0188.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry", dwFileAttributes=0x20) returned 0 [0188.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33ac8) returned 1 Thread: id = 4601 os_tid = 0x212c [0176.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dakar")) returned 0x20 [0187.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar", dwFileAttributes=0x20) returned 0 [0187.915] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dakar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.566] GetLastError () returned 0x5 [0188.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar", dwFileAttributes=0x20) returned 0 [0188.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d463a0) returned 1 Thread: id = 4602 os_tid = 0x2130 [0176.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam")) returned 0x20 [0184.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", dwFileAttributes=0x20) returned 0 [0184.951] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.665] GetLastError () returned 0x5 [0185.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", dwFileAttributes=0x20) returned 0 [0185.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 Thread: id = 4603 os_tid = 0x2134 [0176.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\djibouti")) returned 0x20 [0187.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", dwFileAttributes=0x20) returned 0 [0187.775] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\djibouti"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.546] GetLastError () returned 0x5 [0188.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", dwFileAttributes=0x20) returned 0 [0188.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33eb8) returned 1 Thread: id = 4604 os_tid = 0x2138 [0176.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\douala")) returned 0x20 [0186.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala", dwFileAttributes=0x20) returned 0 [0187.645] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\douala"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.544] GetLastError () returned 0x5 [0188.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala", dwFileAttributes=0x20) returned 0 [0188.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d462d0) returned 1 Thread: id = 4605 os_tid = 0x213c [0176.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\el_aaiun")) returned 0x20 [0187.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", dwFileAttributes=0x20) returned 0 [0187.918] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\el_aaiun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.568] GetLastError () returned 0x5 [0188.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", dwFileAttributes=0x20) returned 0 [0188.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33908) returned 1 Thread: id = 4606 os_tid = 0x2140 [0176.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\freetown")) returned 0x20 [0187.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown", dwFileAttributes=0x20) returned 0 [0187.918] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\freetown"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.568] GetLastError () returned 0x5 [0188.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown", dwFileAttributes=0x20) returned 0 [0188.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33ba8) returned 1 Thread: id = 4607 os_tid = 0x2144 [0176.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\gaborone")) returned 0x20 [0187.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", dwFileAttributes=0x20) returned 0 [0187.920] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\gaborone"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.569] GetLastError () returned 0x5 [0188.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", dwFileAttributes=0x20) returned 0 [0188.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33898) returned 1 Thread: id = 4608 os_tid = 0x2148 [0176.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\harare")) returned 0x20 [0187.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare", dwFileAttributes=0x20) returned 0 [0187.921] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\harare"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.569] GetLastError () returned 0x5 [0188.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare", dwFileAttributes=0x20) returned 0 [0188.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46268) returned 1 Thread: id = 4609 os_tid = 0x214c [0176.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\johannesburg")) returned 0x20 [0188.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", dwFileAttributes=0x20) returned 0 [0188.732] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\johannesburg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.753] GetLastError () returned 0x5 [0188.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", dwFileAttributes=0x20) returned 0 [0188.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 Thread: id = 4610 os_tid = 0x2154 [0176.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\juba")) returned 0x20 [0187.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba", dwFileAttributes=0x20) returned 0 [0187.921] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\juba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.569] GetLastError () returned 0x5 [0188.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba", dwFileAttributes=0x20) returned 0 [0188.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46200) returned 1 Thread: id = 4611 os_tid = 0x2158 [0176.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kampala")) returned 0x20 [0187.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala", dwFileAttributes=0x20) returned 0 [0187.921] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kampala"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.569] GetLastError () returned 0x5 [0188.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala", dwFileAttributes=0x20) returned 0 [0188.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f336d8) returned 1 Thread: id = 4612 os_tid = 0x215c [0176.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\khartoum")) returned 0x20 [0187.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", dwFileAttributes=0x20) returned 0 [0187.922] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\khartoum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.570] GetLastError () returned 0x5 [0188.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", dwFileAttributes=0x20) returned 0 [0188.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33748) returned 1 Thread: id = 4613 os_tid = 0x2160 [0176.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kigali")) returned 0x20 [0187.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali", dwFileAttributes=0x20) returned 0 [0187.924] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kigali"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.570] GetLastError () returned 0x5 [0188.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali", dwFileAttributes=0x20) returned 0 [0188.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46198) returned 1 Thread: id = 4614 os_tid = 0x2164 [0176.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kinshasa")) returned 0x20 [0187.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", dwFileAttributes=0x20) returned 0 [0187.927] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kinshasa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.570] GetLastError () returned 0x5 [0188.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", dwFileAttributes=0x20) returned 0 [0188.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f340e8) returned 1 Thread: id = 4615 os_tid = 0x2168 [0176.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lagos")) returned 0x20 [0187.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos", dwFileAttributes=0x20) returned 0 [0187.774] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lagos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.546] GetLastError () returned 0x5 [0188.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos", dwFileAttributes=0x20) returned 0 [0188.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46130) returned 1 Thread: id = 4616 os_tid = 0x216c [0177.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\libreville")) returned 0x20 [0186.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville", dwFileAttributes=0x20) returned 0 [0187.138] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\libreville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.139] GetLastError () returned 0x5 [0187.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville", dwFileAttributes=0x20) returned 0 [0187.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f342a8) returned 1 Thread: id = 4617 os_tid = 0x2170 [0177.303] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json")) returned 0x2020 [0177.979] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0189.921] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e0 [0190.295] GetFileSizeEx (in: hFile=0x16e0, lpFileSize=0x472f7a0 | out: lpFileSize=0x472f7a0*=261) returned 1 [0190.295] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x101, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.295] ReadFile (in: hFile=0x16e0, lpBuffer=0x472f7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x472f788, lpOverlapped=0x0 | out: lpBuffer=0x472f7ac*, lpNumberOfBytesRead=0x472f788*=0x4, lpOverlapped=0x0) returned 1 [0190.297] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0190.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420b0 [0190.297] NtQuerySystemTime (in: CurrentTime=0x472f728 | out: CurrentTime=0x472f728*=132471540582012000) returned 0x0 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x600b38b6 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x797ebd53 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x3b11632d [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x499ecda2 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x7dfe3e03 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x2a9c4202 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x20dd5d2c [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x52d58a55 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x2777cee8 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x2198fd55 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x26133886 [0190.297] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x306f72a7 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x90fdd56 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x5b0bb456 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x3af7c7e1 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x233e2fc5 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x21d554cf [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x365498bb [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x36b23b9a [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x1f909ba2 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x3d1d5296 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x10733a3a [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x21296399 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x1c7b1798 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x5a0a3e5 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x3949c3bd [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x6bb676e2 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x48c84a48 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x7c8dc2e1 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x469b9022 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0x27614bf0 [0190.298] RtlRandomEx (in: Seed=0x472f720 | out: Seed=0x472f720) returned 0xeaae774 [0190.306] ReadFile (in: hFile=0x16e0, lpBuffer=0x809e060, nNumberOfBytesToRead=0x105, lpNumberOfBytesRead=0x472f71c, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0x472f71c*=0x105, lpOverlapped=0x0) returned 1 [0190.306] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.306] WriteFile (in: hFile=0x16e0, lpBuffer=0x80a1c68*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x472f720, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesWritten=0x472f720*=0x105, lpOverlapped=0x0) returned 1 [0193.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0193.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0d70 [0193.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0193.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0193.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0193.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67fe8) returned 1 [0193.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5da8) returned 1 [0193.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69240 [0193.078] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.078] WriteFile (in: hFile=0x16e0, lpBuffer=0x81e0b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x472f794, lpOverlapped=0x0 | out: lpBuffer=0x81e0b10*, lpNumberOfBytesWritten=0x472f794*=0x10c, lpOverlapped=0x0) returned 1 [0196.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0b10) returned 1 [0196.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69270) returned 1 [0196.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0196.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69240) returned 1 [0196.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0196.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0196.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0196.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c40) returned 1 [0196.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404b78 [0196.050] wcscpy (in: _Dest=0x8404b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" [0196.050] wcscat (in: _Dest=0x8404b78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.f0dbec" [0196.050] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0x472f718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9e48 [0196.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9e48) returned 1 [0196.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02f08) returned 1 [0196.501] NtQueryInformationFile (in: FileHandle=0x16e0, IoStatusBlock=0x472f6f0, FileInformation=0x472f6f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x472f6f0, FileInformation=0x472f6f8) returned 0x0 [0196.501] NtSetInformationFile (FileHandle=0x16e0, IoStatusBlock=0x472f6f0, FileInformation=0x472f6f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404b78) returned 1 [0196.795] FlushFileBuffers (hFile=0x16e0) returned 1 [0196.815] CloseHandle (hObject=0x16e0) returned 1 [0197.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f4008 [0197.038] wcscpy (in: _Dest=0x81f4008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" [0197.038] wcscat (in: _Dest=0x81f4008, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\F0DBEC-Readme.txt" [0197.038] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0197.038] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a00 [0197.441] WriteFile (in: hFile=0x2a00, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x472f73c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x472f73c*=0x70c, lpOverlapped=0x0) returned 1 [0197.844] CloseHandle (hObject=0x2a00) returned 1 [0197.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4008) returned 1 [0197.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58180) returned 1 Thread: id = 4618 os_tid = 0x2174 [0177.309] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json")) returned 0x2020 [0177.980] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0189.925] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f0 [0190.342] GetFileSizeEx (in: hFile=0x16f0, lpFileSize=0xacafef8 | out: lpFileSize=0xacafef8*=258) returned 1 [0190.342] SetFilePointerEx (in: hFile=0x16f0, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.342] ReadFile (in: hFile=0x16f0, lpBuffer=0xacaff04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xacafee0, lpOverlapped=0x0 | out: lpBuffer=0xacaff04*, lpNumberOfBytesRead=0xacafee0*=0x4, lpOverlapped=0x0) returned 1 [0190.344] SetFilePointerEx (in: hFile=0x16f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43618 [0190.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432d0 [0190.344] NtQuerySystemTime (in: CurrentTime=0xacafe80 | out: CurrentTime=0xacafe80*=132471540582480000) returned 0x0 [0190.344] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x7fb7646 [0190.344] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x6660e454 [0190.344] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x2a53662d [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x7da8deda [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x4ab328e9 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x678c8431 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x11919ffe [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x1a7b3f05 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x16e6ddc5 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x4712349a [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x441e06ab [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x786211f3 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x472f466d [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x4a701c0f [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x2cf2ac0a [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x35a82382 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x4cc46bca [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x7bc8f2de [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x35e387b4 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x3fbc693 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x3e5adace [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x6d2f86c1 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x24f0a98c [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x291c399b [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x2f3f1d22 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x1160edda [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x6d5a5f81 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x6b8053a9 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x7d161bc5 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x56efe709 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x1c477503 [0190.345] RtlRandomEx (in: Seed=0xacafe78 | out: Seed=0xacafe78) returned 0x781424ea [0190.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0190.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8380da8 [0190.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83849b0 [0190.354] ReadFile (in: hFile=0x16f0, lpBuffer=0x8380da8, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0xacafe74, lpOverlapped=0x0 | out: lpBuffer=0x8380da8*, lpNumberOfBytesRead=0xacafe74*=0x102, lpOverlapped=0x0) returned 1 [0190.354] SetFilePointerEx (in: hFile=0x16f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.354] WriteFile (in: hFile=0x16f0, lpBuffer=0x83849b0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xacafe78, lpOverlapped=0x0 | out: lpBuffer=0x83849b0*, lpNumberOfBytesWritten=0xacafe78*=0x102, lpOverlapped=0x0) returned 1 [0193.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0193.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0193.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0193.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83849b0) returned 1 [0193.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8380da8) returned 1 [0193.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 [0193.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b44e8) returned 1 [0193.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e699c0 [0193.082] SetFilePointerEx (in: hFile=0x16f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.082] WriteFile (in: hFile=0x16f0, lpBuffer=0x81e08e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xacafeec, lpOverlapped=0x0 | out: lpBuffer=0x81e08e0*, lpNumberOfBytesWritten=0xacafeec*=0x10c, lpOverlapped=0x0) returned 1 [0196.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e08e0) returned 1 [0196.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699f0) returned 1 [0196.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0196.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699c0) returned 1 [0196.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0196.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43618) returned 1 [0196.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42510) returned 1 [0196.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43e60) returned 1 [0196.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8405058 [0196.063] wcscpy (in: _Dest=0x8405058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" [0196.063] wcscat (in: _Dest=0x8405058, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.f0dbec" [0196.063] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0xacafe70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9bb8 [0196.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9bb8) returned 1 [0196.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03580) returned 1 [0196.528] NtQueryInformationFile (in: FileHandle=0x16f0, IoStatusBlock=0xacafe48, FileInformation=0xacafe50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xacafe48, FileInformation=0xacafe50) returned 0x0 [0196.528] NtSetInformationFile (FileHandle=0x16f0, IoStatusBlock=0xacafe48, FileInformation=0xacafe50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405058) returned 1 [0196.817] FlushFileBuffers (hFile=0x16f0) returned 1 [0196.837] CloseHandle (hObject=0x16f0) returned 1 [0197.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f39f0 [0197.046] wcscpy (in: _Dest=0x81f39f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" [0197.046] wcscat (in: _Dest=0x81f39f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\F0DBEC-Readme.txt" [0197.046] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0197.046] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1934 [0197.443] WriteFile (in: hFile=0x1934, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xacafe94, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xacafe94*=0x70c, lpOverlapped=0x0) returned 1 [0197.859] CloseHandle (hObject=0x1934) returned 1 [0197.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f39f0) returned 1 [0197.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d582a8) returned 1 Thread: id = 4619 os_tid = 0x2178 [0177.312] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json")) returned 0x2020 [0177.981] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0189.925] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec [0190.331] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0xd84fa28 | out: lpFileSize=0xd84fa28*=293) returned 1 [0190.331] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x121, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.331] ReadFile (in: hFile=0x16ec, lpBuffer=0xd84fa34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd84fa10, lpOverlapped=0x0 | out: lpBuffer=0xd84fa34*, lpNumberOfBytesRead=0xd84fa10*=0x4, lpOverlapped=0x0) returned 1 [0190.332] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0190.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43618 [0190.333] NtQuerySystemTime (in: CurrentTime=0xd84f9b0 | out: CurrentTime=0xd84f9b0*=132471540582324000) returned 0x0 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x6764031a [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x7e3f13c8 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x2a0f53a6 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x60ee457a [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x387207a3 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x2717dbc7 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x4ffb2a8c [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x2c6560c4 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x589431d4 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x61eac6a9 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x605701e0 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x36007514 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0xaa75612 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x23559166 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x30ae0c33 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x2a53662d [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x622d094 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x35e387b4 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x70de2741 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x5f28c458 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x4fa548a2 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x4d2ff1cd [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x384c096d [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x23af1561 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x4ca20b22 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x5c43fa01 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x6dd45265 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x3b65e27e [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x5a93f1e9 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0xbc9e0a4 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x89fec68 [0190.333] RtlRandomEx (in: Seed=0xd84f9a8 | out: Seed=0xd84f9a8) returned 0x403bf27e [0190.341] ReadFile (in: hFile=0x16ec, lpBuffer=0x834c538, nNumberOfBytesToRead=0x125, lpNumberOfBytesRead=0xd84f9a4, lpOverlapped=0x0 | out: lpBuffer=0x834c538*, lpNumberOfBytesRead=0xd84f9a4*=0x125, lpOverlapped=0x0) returned 1 [0190.341] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.341] WriteFile (in: hFile=0x16ec, lpBuffer=0x8350140*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0xd84f9a8, lpOverlapped=0x0 | out: lpBuffer=0x8350140*, lpNumberOfBytesWritten=0xd84f9a8*=0x125, lpOverlapped=0x0) returned 1 [0193.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1478 [0193.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1450 [0193.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0193.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8350140) returned 1 [0193.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x834c538) returned 1 [0193.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 [0193.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5f10) returned 1 [0193.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69660 [0193.068] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.068] WriteFile (in: hFile=0x16ec, lpBuffer=0x81e0138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd84fa1c, lpOverlapped=0x0 | out: lpBuffer=0x81e0138*, lpNumberOfBytesWritten=0xd84fa1c*=0x10c, lpOverlapped=0x0) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0138) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69690) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1450) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69660) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1478) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43578) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0196.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404cb0 [0196.053] wcscpy (in: _Dest=0x8404cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" [0196.053] wcscat (in: _Dest=0x8404cb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.f0dbec" [0196.053] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0xd84f9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef8c58 [0196.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8c58) returned 1 [0196.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e05e78) returned 1 [0196.502] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0xd84f978, FileInformation=0xd84f980, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd84f978, FileInformation=0xd84f980) returned 0x0 [0196.502] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0xd84f978, FileInformation=0xd84f980, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404cb0) returned 1 [0196.799] FlushFileBuffers (hFile=0x16ec) returned 1 [0196.819] CloseHandle (hObject=0x16ec) returned 1 [0197.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f3ed0 [0197.040] wcscpy (in: _Dest=0x81f3ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" [0197.040] wcscat (in: _Dest=0x81f3ed0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\F0DBEC-Readme.txt" [0197.040] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0197.040] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1928 [0197.441] WriteFile (in: hFile=0x1928, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd84f9c4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd84f9c4*=0x70c, lpOverlapped=0x0) returned 1 [0197.847] CloseHandle (hObject=0x1928) returned 1 [0197.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3ed0) returned 1 [0197.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 Thread: id = 4620 os_tid = 0x217c [0177.314] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json")) returned 0x2020 [0177.982] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0189.925] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e8 [0190.319] GetFileSizeEx (in: hFile=0x16e8, lpFileSize=0xc61fa38 | out: lpFileSize=0xc61fa38*=281) returned 1 [0190.319] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.319] ReadFile (in: hFile=0x16e8, lpBuffer=0xc61fa44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc61fa20, lpOverlapped=0x0 | out: lpBuffer=0xc61fa44*, lpNumberOfBytesRead=0xc61fa20*=0x4, lpOverlapped=0x0) returned 1 [0190.321] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e70 [0190.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0190.321] NtQuerySystemTime (in: CurrentTime=0xc61f9c0 | out: CurrentTime=0xc61f9c0*=132471540582324000) returned 0x0 [0190.321] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x5ce26fb6 [0190.321] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x4fb846a5 [0190.321] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x4db9ce06 [0190.321] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0xe95673f [0190.321] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x73a1e1ff [0190.321] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x4cface64 [0190.321] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x6dc2956 [0190.321] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x34d23603 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x4e51d438 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x390018fc [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x380aed47 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x25481892 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x6878e39e [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x1a306b85 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x59430355 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x4d2ff1cd [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x5f4a6bc6 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x5f75bd89 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x760b3c4b [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x48517b7 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x44938410 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x2aa2810d [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x61f64af3 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x304e7c7c [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x2ceadf9a [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x34720bd8 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x6116cff1 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x39e1ddf6 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x2cfc45be [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0xdd75306 [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x57e5e7ad [0190.322] RtlRandomEx (in: Seed=0xc61f9b8 | out: Seed=0xc61f9b8) returned 0x4be0e37b [0190.330] ReadFile (in: hFile=0x16e8, lpBuffer=0x80b0c88, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xc61f9b4, lpOverlapped=0x0 | out: lpBuffer=0x80b0c88*, lpNumberOfBytesRead=0xc61f9b4*=0x119, lpOverlapped=0x0) returned 1 [0190.330] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.330] WriteFile (in: hFile=0x16e8, lpBuffer=0x80d28d0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xc61f9b8, lpOverlapped=0x0 | out: lpBuffer=0x80d28d0*, lpNumberOfBytesWritten=0xc61f9b8*=0x119, lpOverlapped=0x0) returned 1 [0193.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0193.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0193.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0193.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d28d0) returned 1 [0193.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0c88) returned 1 [0193.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 [0193.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4848) returned 1 [0193.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69720 [0193.064] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.064] WriteFile (in: hFile=0x16e8, lpBuffer=0x81e0250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc61fa2c, lpOverlapped=0x0 | out: lpBuffer=0x81e0250*, lpNumberOfBytesWritten=0xc61fa2c*=0x10c, lpOverlapped=0x0) returned 1 [0196.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0250) returned 1 [0196.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0196.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0196.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0196.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1680) returned 1 [0196.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0196.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435a0) returned 1 [0196.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434d8) returned 1 [0196.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x84047d0 [0196.040] wcscpy (in: _Dest=0x84047d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" [0196.040] wcscat (in: _Dest=0x84047d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.f0dbec" [0196.040] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0xc61f9b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3efa9d0 [0196.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa9d0) returned 1 [0196.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09010) returned 1 [0196.496] NtQueryInformationFile (in: FileHandle=0x16e8, IoStatusBlock=0xc61f988, FileInformation=0xc61f990, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc61f988, FileInformation=0xc61f990) returned 0x0 [0196.496] NtSetInformationFile (FileHandle=0x16e8, IoStatusBlock=0xc61f988, FileInformation=0xc61f990, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84047d0) returned 1 [0196.780] FlushFileBuffers (hFile=0x16e8) returned 1 [0196.793] CloseHandle (hObject=0x16e8) returned 1 [0197.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f43b0 [0197.032] wcscpy (in: _Dest=0x81f43b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" [0197.032] wcscat (in: _Dest=0x81f43b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\F0DBEC-Readme.txt" [0197.032] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0197.032] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.439] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc61f9d4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc61f9d4*=0x70c, lpOverlapped=0x0) returned 1 [0197.832] CloseHandle (hObject=0x1204) returned 1 [0197.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f43b0) returned 1 [0197.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 Thread: id = 4621 os_tid = 0x2180 [0177.315] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json")) returned 0x2020 [0177.982] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0189.949] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f6c [0190.356] GetFileSizeEx (in: hFile=0x1f6c, lpFileSize=0x7d5fc68 | out: lpFileSize=0x7d5fc68*=285) returned 1 [0190.357] SetFilePointerEx (in: hFile=0x1f6c, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.357] ReadFile (in: hFile=0x1f6c, lpBuffer=0x7d5fc74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7d5fc50, lpOverlapped=0x0 | out: lpBuffer=0x7d5fc74*, lpNumberOfBytesRead=0x7d5fc50*=0x4, lpOverlapped=0x0) returned 1 [0190.358] SetFilePointerEx (in: hFile=0x1f6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432d0 [0190.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421f0 [0190.359] NtQuerySystemTime (in: CurrentTime=0x7d5fbf0 | out: CurrentTime=0x7d5fbf0*=132471540582636000) returned 0x0 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x3f671f57 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x2f9c58a [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0xaa75612 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x45947ecf [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x3b28a8de [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x1b8f152c [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x7a322c3a [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x438c5f7d [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x2a20545e [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x79ec3e53 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0xff082a8 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x1967e03b [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x66385412 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x2c6560c4 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x4bdeec16 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x2cb087be [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x24b72f5f [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x7213cf80 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x713cb06a [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x2d56a07b [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x4be1543 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x36007514 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x6a6b4fa7 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x44cd449 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x7a9b68b3 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x10276bae [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x4bdeec16 [0190.359] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x30b69794 [0190.360] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x55abc3a2 [0190.360] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x1b8f152c [0190.360] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x46086e29 [0190.360] RtlRandomEx (in: Seed=0x7d5fbe8 | out: Seed=0x7d5fbe8) returned 0x13c32427 [0190.369] ReadFile (in: hFile=0x1f6c, lpBuffer=0x836a578, nNumberOfBytesToRead=0x11d, lpNumberOfBytesRead=0x7d5fbe4, lpOverlapped=0x0 | out: lpBuffer=0x836a578*, lpNumberOfBytesRead=0x7d5fbe4*=0x11d, lpOverlapped=0x0) returned 1 [0190.369] SetFilePointerEx (in: hFile=0x1f6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.369] WriteFile (in: hFile=0x1f6c, lpBuffer=0x8348930*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x7d5fbe8, lpOverlapped=0x0 | out: lpBuffer=0x8348930*, lpNumberOfBytesWritten=0x7d5fbe8*=0x11d, lpOverlapped=0x0) returned 1 [0193.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ca8 [0193.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef14f0 [0193.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14f0) returned 1 [0193.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348930) returned 1 [0193.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836a578) returned 1 [0193.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68240) returned 1 [0193.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5070) returned 1 [0193.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0193.070] SetFilePointerEx (in: hFile=0x1f6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.070] WriteFile (in: hFile=0x1f6c, lpBuffer=0x81e0f70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7d5fc5c, lpOverlapped=0x0 | out: lpBuffer=0x81e0f70*, lpNumberOfBytesWritten=0x7d5fc5c*=0x10c, lpOverlapped=0x0) returned 1 [0196.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0f70) returned 1 [0196.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0196.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14f0) returned 1 [0196.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0196.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ca8) returned 1 [0196.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432d0) returned 1 [0196.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43190) returned 1 [0196.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0196.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404908 [0196.043] wcscpy (in: _Dest=0x8404908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" [0196.043] wcscat (in: _Dest=0x8404908, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.f0dbec" [0196.043] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0x7d5fbe0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9a70 [0196.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9a70) returned 1 [0196.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e048e8) returned 1 [0196.498] NtQueryInformationFile (in: FileHandle=0x1f6c, IoStatusBlock=0x7d5fbb8, FileInformation=0x7d5fbc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7d5fbb8, FileInformation=0x7d5fbc0) returned 0x0 [0196.498] NtSetInformationFile (FileHandle=0x1f6c, IoStatusBlock=0x7d5fbb8, FileInformation=0x7d5fbc0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404908) returned 1 [0196.786] FlushFileBuffers (hFile=0x1f6c) returned 1 [0196.804] CloseHandle (hObject=0x1f6c) returned 1 [0197.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f4278 [0197.034] wcscpy (in: _Dest=0x81f4278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" [0197.034] wcscat (in: _Dest=0x81f4278, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\F0DBEC-Readme.txt" [0197.034] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0197.034] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1914 [0197.440] WriteFile (in: hFile=0x1914, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7d5fc04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7d5fc04*=0x70c, lpOverlapped=0x0) returned 1 [0197.840] CloseHandle (hObject=0x1914) returned 1 [0197.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4278) returned 1 [0197.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041e10) returned 1 Thread: id = 4622 os_tid = 0x2184 [0177.315] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json")) returned 0x2020 [0177.983] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0189.950] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f4 [0190.373] GetFileSizeEx (in: hFile=0x16f4, lpFileSize=0xdb8fac8 | out: lpFileSize=0xdb8fac8*=258) returned 1 [0190.373] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.373] ReadFile (in: hFile=0x16f4, lpBuffer=0xdb8fad4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdb8fab0, lpOverlapped=0x0 | out: lpBuffer=0xdb8fad4*, lpNumberOfBytesRead=0xdb8fab0*=0x4, lpOverlapped=0x0) returned 1 [0190.375] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421f0 [0190.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0190.375] NtQuerySystemTime (in: CurrentTime=0xdb8fa50 | out: CurrentTime=0xdb8fa50*=132471540582792000) returned 0x0 [0190.375] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x17d526a4 [0190.375] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x4f223186 [0190.375] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x5a6799cc [0190.375] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x12a0ff4f [0190.375] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x53034838 [0190.375] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x5d3a6d85 [0190.375] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x3b9234f3 [0190.375] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x30ae0c33 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x12a0ff4f [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x5e77218e [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x671413e6 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x384c096d [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0xec67ca3 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x7ead0c0f [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x11225551 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x581b5d2b [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x5c1ebcb8 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0xabfcb9d [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x63a8ff05 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x4c614190 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x5929b35d [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x4efee63c [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x1d49c7d5 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x137425f1 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x40969989 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x2bae5e68 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x4fa548a2 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x29d817b7 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x6e1e646f [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x52a88622 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x43b1eb53 [0190.376] RtlRandomEx (in: Seed=0xdb8fa48 | out: Seed=0xdb8fa48) returned 0x52c6b127 [0190.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0190.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8379598 [0190.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x837d1a0 [0190.384] ReadFile (in: hFile=0x16f4, lpBuffer=0x8379598, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0xdb8fa44, lpOverlapped=0x0 | out: lpBuffer=0x8379598*, lpNumberOfBytesRead=0xdb8fa44*=0x102, lpOverlapped=0x0) returned 1 [0190.384] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.385] WriteFile (in: hFile=0x16f4, lpBuffer=0x837d1a0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xdb8fa48, lpOverlapped=0x0 | out: lpBuffer=0x837d1a0*, lpNumberOfBytesWritten=0xdb8fa48*=0x102, lpOverlapped=0x0) returned 1 [0193.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0193.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0193.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0193.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x837d1a0) returned 1 [0193.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8379598) returned 1 [0193.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0193.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b6228) returned 1 [0193.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69780 [0193.072] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.072] WriteFile (in: hFile=0x16f4, lpBuffer=0x81e1088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdb8fabc, lpOverlapped=0x0 | out: lpBuffer=0x81e1088*, lpNumberOfBytesWritten=0xdb8fabc*=0x10c, lpOverlapped=0x0) returned 1 [0196.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1088) returned 1 [0196.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697b0) returned 1 [0196.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0196.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69780) returned 1 [0196.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0196.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421f0) returned 1 [0196.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0196.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43118) returned 1 [0196.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404de8 [0196.057] wcscpy (in: _Dest=0x8404de8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" [0196.057] wcscat (in: _Dest=0x8404de8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.f0dbec" [0196.057] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0xdb8fa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3efa368 [0196.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa368) returned 1 [0196.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09f28) returned 1 [0196.504] NtQueryInformationFile (in: FileHandle=0x16f4, IoStatusBlock=0xdb8fa18, FileInformation=0xdb8fa20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdb8fa18, FileInformation=0xdb8fa20) returned 0x0 [0196.504] NtSetInformationFile (FileHandle=0x16f4, IoStatusBlock=0xdb8fa18, FileInformation=0xdb8fa20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404de8) returned 1 [0196.806] FlushFileBuffers (hFile=0x16f4) returned 1 [0196.821] CloseHandle (hObject=0x16f4) returned 1 [0197.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f3d98 [0197.042] wcscpy (in: _Dest=0x81f3d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" [0197.042] wcscat (in: _Dest=0x81f3d98, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\F0DBEC-Readme.txt" [0197.042] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0197.042] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x192c [0197.442] WriteFile (in: hFile=0x192c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdb8fa64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdb8fa64*=0x70c, lpOverlapped=0x0) returned 1 [0197.855] CloseHandle (hObject=0x192c) returned 1 [0197.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3d98) returned 1 [0197.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041f38) returned 1 Thread: id = 4623 os_tid = 0x2188 [0177.316] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json")) returned 0x2020 [0177.984] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0189.950] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8 [0190.385] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x8a7fc50 | out: lpFileSize=0x8a7fc50*=254) returned 1 [0190.385] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.386] ReadFile (in: hFile=0x16f8, lpBuffer=0x8a7fc5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a7fc38, lpOverlapped=0x0 | out: lpBuffer=0x8a7fc5c*, lpNumberOfBytesRead=0x8a7fc38*=0x4, lpOverlapped=0x0) returned 1 [0190.387] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0190.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430a0 [0190.387] NtQuerySystemTime (in: CurrentTime=0x8a7fbd8 | out: CurrentTime=0x8a7fbd8*=132471540582948000) returned 0x0 [0190.387] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x58af0122 [0190.387] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x52d612df [0190.387] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x15bbfc1 [0190.387] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x441e06ab [0190.387] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x6112a31c [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x75693418 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x2d2dd9b3 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x235110a3 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x6b90ec27 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x3b54e066 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x418be8d8 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x6cd9d541 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x5432b86c [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x337992ce [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x6dbd5c6d [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x23559166 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x2f73feab [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x7df2a13b [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x2fd0d465 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x40dfaa23 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x7516afdc [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x6d853841 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x3d236fa1 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x1a41b4a8 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x47465f7 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x753935c0 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0xaf252f [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x70460944 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x329912a1 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x2ea454e5 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x75c68106 [0190.388] RtlRandomEx (in: Seed=0x8a7fbd0 | out: Seed=0x8a7fbd0) returned 0x7d8d7b42 [0190.396] ReadFile (in: hFile=0x16f8, lpBuffer=0x836e180, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0x8a7fbcc, lpOverlapped=0x0 | out: lpBuffer=0x836e180*, lpNumberOfBytesRead=0x8a7fbcc*=0xfe, lpOverlapped=0x0) returned 1 [0190.396] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.396] WriteFile (in: hFile=0x16f8, lpBuffer=0x835b558*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x8a7fbd0, lpOverlapped=0x0 | out: lpBuffer=0x835b558*, lpNumberOfBytesWritten=0x8a7fbd0*=0xfe, lpOverlapped=0x0) returned 1 [0190.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42498 [0190.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d30 [0190.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0190.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835b558) returned 1 [0190.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836e180) returned 1 [0190.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 [0190.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b49f8) returned 1 [0190.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0190.639] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.639] WriteFile (in: hFile=0x16f8, lpBuffer=0x30bcdf8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8a7fc44, lpOverlapped=0x0 | out: lpBuffer=0x30bcdf8*, lpNumberOfBytesWritten=0x8a7fc44*=0x10c, lpOverlapped=0x0) returned 1 [0190.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0190.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0190.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0190.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0190.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0190.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436b8) returned 1 [0190.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0190.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43640) returned 1 [0190.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef84b8 [0190.781] wcscpy (in: _Dest=0x3ef84b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" [0190.781] wcscat (in: _Dest=0x3ef84b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.f0dbec" [0190.781] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.f0dbec", NtPathName=0x8a7fbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3efa4b0 [0193.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa4b0) returned 1 [0193.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f70b0) returned 1 [0193.131] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x8a7fba0, FileInformation=0x8a7fba8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8a7fba0, FileInformation=0x8a7fba8) returned 0x0 [0193.131] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x8a7fba0, FileInformation=0x8a7fba8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef84b8) returned 1 [0196.067] FlushFileBuffers (hFile=0x16f8) returned 1 [0196.080] CloseHandle (hObject=0x16f8) returned 1 [0196.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f44e8 [0196.534] wcscpy (in: _Dest=0x81f44e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" [0196.534] wcscat (in: _Dest=0x81f44e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\F0DBEC-Readme.txt" [0196.534] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\f0dbec-readme.txt")) returned 0xffffffff [0196.534] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.379] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8a7fbec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8a7fbec*=0x70c, lpOverlapped=0x0) returned 1 [0197.381] CloseHandle (hObject=0x1204) returned 1 [0197.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f44e8) returned 1 [0197.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 Thread: id = 4624 os_tid = 0x218c [0177.316] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json")) returned 0x2020 [0177.985] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0189.950] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16fc [0190.397] GetFileSizeEx (in: hFile=0x16fc, lpFileSize=0xd75fc50 | out: lpFileSize=0xd75fc50*=242) returned 1 [0190.397] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.397] ReadFile (in: hFile=0x16fc, lpBuffer=0xd75fc5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd75fc38, lpOverlapped=0x0 | out: lpBuffer=0xd75fc5c*, lpNumberOfBytesRead=0xd75fc38*=0x4, lpOverlapped=0x0) returned 1 [0190.399] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430a0 [0190.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42420 [0190.399] NtQuerySystemTime (in: CurrentTime=0xd75fbd8 | out: CurrentTime=0xd75fbd8*=132471540583104000) returned 0x0 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x2d8ff359 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x6116cff1 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x7051aed6 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x7bc8f2de [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x5c680c24 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x41fa3833 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x7a06c3c [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x9bb9840 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x44af33a1 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x60df31f5 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x6321c115 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x5be45460 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x3d7d73e4 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x236ae668 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x6cbcccb3 [0190.399] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x43783a29 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x4fe8b717 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x3993736e [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x6a6737b1 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x450c0464 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x4b96000f [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x1abdb6cb [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x13c32427 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0xaec1e12 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x589431d4 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x78d03c71 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x516cb514 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x6caefc81 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0xd779853 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x25ddd136 [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x304e7c7c [0190.400] RtlRandomEx (in: Seed=0xd75fbd0 | out: Seed=0xd75fbd0) returned 0x1b1358ec [0190.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0190.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8371d88 [0190.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8375990 [0190.422] ReadFile (in: hFile=0x16fc, lpBuffer=0x8371d88, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0xd75fbcc, lpOverlapped=0x0 | out: lpBuffer=0x8371d88*, lpNumberOfBytesRead=0xd75fbcc*=0xf2, lpOverlapped=0x0) returned 1 [0190.422] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.422] WriteFile (in: hFile=0x16fc, lpBuffer=0x8375990*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0xd75fbd0, lpOverlapped=0x0 | out: lpBuffer=0x8375990*, lpNumberOfBytesWritten=0xd75fbd0*=0xf2, lpOverlapped=0x0) returned 1 [0190.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0190.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43460 [0190.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0190.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8375990) returned 1 [0190.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8371d88) returned 1 [0190.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0190.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b6198) returned 1 [0190.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69780 [0190.657] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.657] WriteFile (in: hFile=0x16fc, lpBuffer=0x30bb818*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd75fc44, lpOverlapped=0x0 | out: lpBuffer=0x30bb818*, lpNumberOfBytesWritten=0xd75fc44*=0x10c, lpOverlapped=0x0) returned 1 [0190.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0190.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697b0) returned 1 [0190.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0190.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69780) returned 1 [0190.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0190.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430a0) returned 1 [0190.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424e8) returned 1 [0190.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42718) returned 1 [0190.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8998 [0190.793] wcscpy (in: _Dest=0x3ef8998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" [0190.793] wcscat (in: _Dest=0x3ef8998, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.f0dbec" [0190.793] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.f0dbec", NtPathName=0xd75fbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9d00 [0193.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9d00) returned 1 [0193.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f1848) returned 1 [0193.139] NtQueryInformationFile (in: FileHandle=0x16fc, IoStatusBlock=0xd75fba0, FileInformation=0xd75fba8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd75fba0, FileInformation=0xd75fba8) returned 0x0 [0193.139] NtSetInformationFile (FileHandle=0x16fc, IoStatusBlock=0xd75fba0, FileInformation=0xd75fba8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8998) returned 1 [0196.078] FlushFileBuffers (hFile=0x16fc) returned 1 [0196.086] CloseHandle (hObject=0x16fc) returned 1 [0196.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f4758 [0196.539] wcscpy (in: _Dest=0x81f4758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" [0196.539] wcscat (in: _Dest=0x81f4758, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\F0DBEC-Readme.txt" [0196.539] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\f0dbec-readme.txt")) returned 0xffffffff [0196.539] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.382] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd75fbec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd75fbec*=0x70c, lpOverlapped=0x0) returned 1 [0197.384] CloseHandle (hObject=0x1204) returned 1 [0197.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4758) returned 1 [0197.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x331610) returned 1 Thread: id = 4625 os_tid = 0x2190 [0177.316] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json")) returned 0x2020 [0177.985] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0189.950] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1700 [0190.423] GetFileSizeEx (in: hFile=0x1700, lpFileSize=0xdc4fec8 | out: lpFileSize=0xdc4fec8*=260) returned 1 [0190.423] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.423] ReadFile (in: hFile=0x1700, lpBuffer=0xdc4fed4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdc4feb0, lpOverlapped=0x0 | out: lpBuffer=0xdc4fed4*, lpNumberOfBytesRead=0xdc4feb0*=0x4, lpOverlapped=0x0) returned 1 [0190.425] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42420 [0190.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f88 [0190.425] NtQuerySystemTime (in: CurrentTime=0xdc4fe50 | out: CurrentTime=0xdc4fe50*=132471540583260000) returned 0x0 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x7936fb94 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x4fa45e35 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x29c4ebc8 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x77d7f894 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x378b5ca2 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x33f7c454 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x6660e454 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x7512b601 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x7e1e115b [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x3e9a5603 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x573d4552 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x4a701c0f [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x6173ad40 [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x6aa8ff4f [0190.425] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x76e2b00 [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x38cace40 [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x1ea9257a [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0xb8279ee [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x2a300113 [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x176c05aa [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x67c5d6b9 [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x1a7b3f05 [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x6429a08a [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x4060803b [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x142c7475 [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x484bf1cd [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x6d639ddc [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x69966c7e [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x74240eae [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x1e0c27 [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x2ba9e476 [0190.426] RtlRandomEx (in: Seed=0xdc4fe48 | out: Seed=0xdc4fe48) returned 0x46b2c4b5 [0190.434] ReadFile (in: hFile=0x1700, lpBuffer=0x8362d68, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xdc4fe44, lpOverlapped=0x0 | out: lpBuffer=0x8362d68*, lpNumberOfBytesRead=0xdc4fe44*=0x104, lpOverlapped=0x0) returned 1 [0190.434] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.434] WriteFile (in: hFile=0x1700, lpBuffer=0x8366970*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xdc4fe48, lpOverlapped=0x0 | out: lpBuffer=0x8366970*, lpNumberOfBytesWritten=0xdc4fe48*=0x104, lpOverlapped=0x0) returned 1 [0190.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42218 [0190.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a60 [0190.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0190.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8366970) returned 1 [0190.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8362d68) returned 1 [0190.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 [0190.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5a00) returned 1 [0190.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0190.649] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.649] WriteFile (in: hFile=0x1700, lpBuffer=0x30bc998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdc4febc, lpOverlapped=0x0 | out: lpBuffer=0x30bc998*, lpNumberOfBytesWritten=0xdc4febc*=0x10c, lpOverlapped=0x0) returned 1 [0190.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0190.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0190.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0190.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0190.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42218) returned 1 [0190.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42420) returned 1 [0190.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d80) returned 1 [0190.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42470) returned 1 [0190.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef8ad0 [0190.790] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" [0190.790] wcscat (in: _Dest=0x3ef8ad0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.f0dbec" [0190.790] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0xdc4fe40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9bb8 [0193.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9bb8) returned 1 [0193.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fbe50) returned 1 [0193.138] NtQueryInformationFile (in: FileHandle=0x1700, IoStatusBlock=0xdc4fe18, FileInformation=0xdc4fe20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdc4fe18, FileInformation=0xdc4fe20) returned 0x0 [0193.138] NtSetInformationFile (FileHandle=0x1700, IoStatusBlock=0xdc4fe18, FileInformation=0xdc4fe20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8ad0) returned 1 [0196.075] FlushFileBuffers (hFile=0x1700) returned 1 [0196.085] CloseHandle (hObject=0x1700) returned 1 [0196.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4620 [0196.536] wcscpy (in: _Dest=0x81f4620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" [0196.536] wcscat (in: _Dest=0x81f4620, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\F0DBEC-Readme.txt" [0196.536] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0196.536] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.385] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdc4fe64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdc4fe64*=0x70c, lpOverlapped=0x0) returned 1 [0197.392] CloseHandle (hObject=0x1204) returned 1 [0197.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4620) returned 1 [0197.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330cd0) returned 1 Thread: id = 4626 os_tid = 0x2194 [0177.317] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json")) returned 0x2020 [0177.986] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.951] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1704 [0190.435] GetFileSizeEx (in: hFile=0x1704, lpFileSize=0xff7fd78 | out: lpFileSize=0xff7fd78*=252) returned 1 [0190.435] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.435] ReadFile (in: hFile=0x1704, lpBuffer=0xff7fd84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xff7fd60, lpOverlapped=0x0 | out: lpBuffer=0xff7fd84*, lpNumberOfBytesRead=0xff7fd60*=0x4, lpOverlapped=0x0) returned 1 [0190.437] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f88 [0190.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42178 [0190.438] NtQuerySystemTime (in: CurrentTime=0xff7fd00 | out: CurrentTime=0xff7fd00*=132471540583416000) returned 0x0 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x5f66168 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x2c0d550e [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x49a31016 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x26076558 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0xa82b9ed [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x3386ba5 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x6ac89f51 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x5663c726 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x215c47bc [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x5bdc4afd [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x4d73540a [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x1eac0ad8 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x63044081 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x7de32505 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0xd9749ec [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x40a8a9d6 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x5ab99b1e [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x5bb23ea2 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x430529c2 [0190.438] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x61b8b9a2 [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x57e73c8f [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x1e0dfc67 [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x136c5ed9 [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x566749f2 [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x577c46e9 [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x7a224f4a [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x64bbf722 [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x671004c1 [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x2b24adbc [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x2102f252 [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x42ceed18 [0190.439] RtlRandomEx (in: Seed=0xff7fcf8 | out: Seed=0xff7fcf8) returned 0x3fbc693 [0190.448] ReadFile (in: hFile=0x1704, lpBuffer=0x8353d48, nNumberOfBytesToRead=0xfc, lpNumberOfBytesRead=0xff7fcf4, lpOverlapped=0x0 | out: lpBuffer=0x8353d48*, lpNumberOfBytesRead=0xff7fcf4*=0xfc, lpOverlapped=0x0) returned 1 [0190.448] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.448] WriteFile (in: hFile=0x1704, lpBuffer=0x8357950*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0xff7fcf8, lpOverlapped=0x0 | out: lpBuffer=0x8357950*, lpNumberOfBytesWritten=0xff7fcf8*=0xfc, lpOverlapped=0x0) returned 1 [0190.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42bf0 [0190.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42128 [0190.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42128) returned 1 [0190.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8357950) returned 1 [0190.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8353d48) returned 1 [0190.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0190.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b56e8) returned 1 [0190.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0190.660] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.661] WriteFile (in: hFile=0x1704, lpBuffer=0x30bd140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xff7fd6c, lpOverlapped=0x0 | out: lpBuffer=0x30bd140*, lpNumberOfBytesWritten=0xff7fd6c*=0x10c, lpOverlapped=0x0) returned 1 [0190.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0190.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0190.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42128) returned 1 [0190.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0190.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0190.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f88) returned 1 [0190.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42380) returned 1 [0190.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428d0) returned 1 [0190.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8403f48 [0190.796] wcscpy (in: _Dest=0x8403f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" [0190.797] wcscat (in: _Dest=0x8403f48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.f0dbec" [0190.797] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0xff7fcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3efa368 [0193.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa368) returned 1 [0193.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fd3e0) returned 1 [0193.140] NtQueryInformationFile (in: FileHandle=0x1704, IoStatusBlock=0xff7fcc8, FileInformation=0xff7fcd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xff7fcc8, FileInformation=0xff7fcd0) returned 0x0 [0193.140] NtSetInformationFile (FileHandle=0x1704, IoStatusBlock=0xff7fcc8, FileInformation=0xff7fcd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f48) returned 1 [0196.082] FlushFileBuffers (hFile=0x1704) returned 1 [0196.087] CloseHandle (hObject=0x1704) returned 1 [0196.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f4890 [0196.540] wcscpy (in: _Dest=0x81f4890, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" [0196.541] wcscat (in: _Dest=0x81f4890, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\F0DBEC-Readme.txt" [0196.541] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0196.541] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.394] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xff7fd14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xff7fd14*=0x70c, lpOverlapped=0x0) returned 1 [0197.396] CloseHandle (hObject=0x1204) returned 1 [0197.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4890) returned 1 [0197.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x331860) returned 1 Thread: id = 4627 os_tid = 0x2198 [0177.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\palau")) returned 0x20 [0187.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau", dwFileAttributes=0x20) returned 0 [0187.778] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\palau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.550] GetLastError () returned 0x5 [0188.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau", dwFileAttributes=0x20) returned 0 [0188.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46748) returned 1 Thread: id = 4628 os_tid = 0x219c [0177.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pitcairn")) returned 0x20 [0187.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn", dwFileAttributes=0x20) returned 0 [0187.776] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pitcairn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.548] GetLastError () returned 0x5 [0188.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn", dwFileAttributes=0x20) returned 0 [0188.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f394d8) returned 1 Thread: id = 4629 os_tid = 0x21a0 [0177.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pohnpei")) returned 0x20 [0187.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei", dwFileAttributes=0x20) returned 0 [0187.776] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pohnpei"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.548] GetLastError () returned 0x5 [0188.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei", dwFileAttributes=0x20) returned 0 [0188.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a268) returned 1 Thread: id = 4630 os_tid = 0x21a4 [0177.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\port_moresby")) returned 0x20 [0187.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby", dwFileAttributes=0x20) returned 0 [0187.778] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\port_moresby"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.550] GetLastError () returned 0x5 [0188.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby", dwFileAttributes=0x20) returned 0 [0188.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 Thread: id = 4631 os_tid = 0x21a8 [0177.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\rarotonga")) returned 0x20 [0188.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga", dwFileAttributes=0x20) returned 0 [0188.673] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\rarotonga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.673] GetLastError () returned 0x5 [0188.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga", dwFileAttributes=0x20) returned 0 [0188.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e78) returned 1 Thread: id = 4632 os_tid = 0x21ac [0177.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\saipan")) returned 0x20 [0188.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan", dwFileAttributes=0x20) returned 0 [0188.680] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\saipan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.680] GetLastError () returned 0x5 [0188.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan", dwFileAttributes=0x20) returned 0 [0188.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f398c8) returned 1 Thread: id = 4633 os_tid = 0x21b0 [0177.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tahiti")) returned 0x20 [0188.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti", dwFileAttributes=0x20) returned 0 [0188.679] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tahiti"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.679] GetLastError () returned 0x5 [0188.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti", dwFileAttributes=0x20) returned 0 [0188.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f341c8) returned 1 Thread: id = 4634 os_tid = 0x21bc [0177.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tarawa")) returned 0x20 [0187.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa", dwFileAttributes=0x20) returned 0 [0187.777] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tarawa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.549] GetLastError () returned 0x5 [0188.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa", dwFileAttributes=0x20) returned 0 [0188.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33b38) returned 1 Thread: id = 4635 os_tid = 0x21c0 [0177.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tongatapu")) returned 0x20 [0188.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu", dwFileAttributes=0x20) returned 0 [0188.674] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tongatapu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.674] GetLastError () returned 0x5 [0188.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu", dwFileAttributes=0x20) returned 0 [0188.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34318) returned 1 Thread: id = 4636 os_tid = 0x21c4 [0177.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x30bbea8 [0177.356] wcscpy (in: _Dest=0x30bbea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0177.356] wcscat (in: _Dest=0x30bbea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0177.356] wcscat (in: _Dest=0x30bbea8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*" [0177.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85ee0 [0177.356] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*", lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0182.310] wcscmp (_String1=".", _String2=".") returned 0 [0182.310] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.310] wcscmp (_String1="..", _String2=".") returned 1 [0182.310] wcscmp (_String1="..", _String2="..") returned 0 [0182.310] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0182.310] wcscmp (_String1="ar", _String2=".") returned 1 [0182.310] wcscmp (_String1="ar", _String2="..") returned 1 [0182.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8405930 [0182.310] wcscpy (in: _Dest=0x8405930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0182.310] wcscat (in: _Dest=0x8405930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0182.310] wcscat (in: _Dest=0x8405930, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" [0186.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8405930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0186.343] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0186.343] wcscmp (_String1="bg", _String2=".") returned 1 [0186.343] wcscmp (_String1="bg", _String2="..") returned 1 [0186.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec828 [0186.343] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.344] wcscat (in: _Dest=0x3dec828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.344] wcscat (in: _Dest=0x3dec828, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" [0186.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0186.345] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0186.345] wcscmp (_String1="ca", _String2=".") returned 1 [0186.345] wcscmp (_String1="ca", _String2="..") returned 1 [0186.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec080 [0186.345] wcscpy (in: _Dest=0x3dec080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.345] wcscat (in: _Dest=0x3dec080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.346] wcscat (in: _Dest=0x3dec080, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" [0186.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0186.347] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0186.347] wcscmp (_String1="cs", _String2=".") returned 1 [0186.347] wcscmp (_String1="cs", _String2="..") returned 1 [0186.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec3c8 [0186.347] wcscpy (in: _Dest=0x3dec3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.347] wcscat (in: _Dest=0x3dec3c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.347] wcscat (in: _Dest=0x3dec3c8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" [0186.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0186.349] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0186.349] wcscmp (_String1="da", _String2=".") returned 1 [0186.349] wcscmp (_String1="da", _String2="..") returned 1 [0186.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec198 [0186.349] wcscpy (in: _Dest=0x3dec198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.349] wcscat (in: _Dest=0x3dec198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.349] wcscat (in: _Dest=0x3dec198, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" [0186.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0186.365] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0186.365] wcscmp (_String1="de", _String2=".") returned 1 [0186.365] wcscmp (_String1="de", _String2="..") returned 1 [0186.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec5f8 [0186.365] wcscpy (in: _Dest=0x3dec5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.366] wcscat (in: _Dest=0x3dec5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.366] wcscat (in: _Dest=0x3dec5f8, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" [0186.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0186.367] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0186.367] wcscmp (_String1="el", _String2=".") returned 1 [0186.367] wcscmp (_String1="el", _String2="..") returned 1 [0186.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec4e0 [0186.367] wcscpy (in: _Dest=0x3dec4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.367] wcscat (in: _Dest=0x3dec4e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.367] wcscat (in: _Dest=0x3dec4e0, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" [0186.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0186.369] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0186.369] wcscmp (_String1="en", _String2=".") returned 1 [0186.369] wcscmp (_String1="en", _String2="..") returned 1 [0186.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec710 [0186.369] wcscpy (in: _Dest=0x3dec710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.369] wcscat (in: _Dest=0x3dec710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.369] wcscat (in: _Dest=0x3dec710, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" [0186.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0186.371] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0186.371] wcscmp (_String1="es", _String2=".") returned 1 [0186.371] wcscmp (_String1="es", _String2="..") returned 1 [0186.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec940 [0186.371] wcscpy (in: _Dest=0x3dec940, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.371] wcscat (in: _Dest=0x3dec940, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.371] wcscat (in: _Dest=0x3dec940, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" [0186.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3dec940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0186.385] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0186.385] wcscmp (_String1="fi", _String2=".") returned 1 [0186.385] wcscmp (_String1="fi", _String2="..") returned 1 [0186.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3deb9f0 [0186.385] wcscpy (in: _Dest=0x3deb9f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.385] wcscat (in: _Dest=0x3deb9f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.385] wcscat (in: _Dest=0x3deb9f0, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" [0186.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3deb9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0186.387] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0186.387] wcscmp (_String1="fil", _String2=".") returned 1 [0186.387] wcscmp (_String1="fil", _String2="..") returned 1 [0186.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x81e7770 [0186.388] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.388] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.388] wcscat (in: _Dest=0x81e7770, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" [0186.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81e7770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15bc [0186.395] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0186.395] wcscmp (_String1="fr", _String2=".") returned 1 [0186.395] wcscmp (_String1="fr", _String2="..") returned 1 [0186.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406538 [0186.395] wcscpy (in: _Dest=0x8406538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.395] wcscat (in: _Dest=0x8406538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.395] wcscat (in: _Dest=0x8406538, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" [0186.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8406538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0186.407] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0186.407] wcscmp (_String1="he", _String2=".") returned 1 [0186.407] wcscmp (_String1="he", _String2="..") returned 1 [0186.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406ab0 [0186.408] wcscpy (in: _Dest=0x8406ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.408] wcscat (in: _Dest=0x8406ab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.408] wcscat (in: _Dest=0x8406ab0, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" [0186.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8406ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0186.410] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0186.410] wcscmp (_String1="hi", _String2=".") returned 1 [0186.410] wcscmp (_String1="hi", _String2="..") returned 1 [0186.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406420 [0186.411] wcscpy (in: _Dest=0x8406420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.411] wcscat (in: _Dest=0x8406420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.411] wcscat (in: _Dest=0x8406420, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" [0186.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8406420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0186.412] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0186.412] wcscmp (_String1="hr", _String2=".") returned 1 [0186.412] wcscmp (_String1="hr", _String2="..") returned 1 [0186.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8405a48 [0186.412] wcscpy (in: _Dest=0x8405a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.412] wcscat (in: _Dest=0x8405a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.413] wcscat (in: _Dest=0x8405a48, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" [0186.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8405a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0186.414] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0186.414] wcscmp (_String1="hu", _String2=".") returned 1 [0186.414] wcscmp (_String1="hu", _String2="..") returned 1 [0186.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406880 [0186.414] wcscpy (in: _Dest=0x8406880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.414] wcscat (in: _Dest=0x8406880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.414] wcscat (in: _Dest=0x8406880, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" [0186.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8406880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0186.416] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0186.416] wcscmp (_String1="id", _String2=".") returned 1 [0186.416] wcscmp (_String1="id", _String2="..") returned 1 [0186.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406998 [0186.416] wcscpy (in: _Dest=0x8406998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.416] wcscat (in: _Dest=0x8406998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.416] wcscat (in: _Dest=0x8406998, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" [0186.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8406998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0186.418] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0186.418] wcscmp (_String1="it", _String2=".") returned 1 [0186.418] wcscmp (_String1="it", _String2="..") returned 1 [0186.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406768 [0186.418] wcscpy (in: _Dest=0x8406768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.418] wcscat (in: _Dest=0x8406768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.418] wcscat (in: _Dest=0x8406768, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" [0186.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8406768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0186.419] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0186.419] wcscmp (_String1="ja", _String2=".") returned 1 [0186.419] wcscmp (_String1="ja", _String2="..") returned 1 [0186.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406308 [0186.420] wcscpy (in: _Dest=0x8406308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.420] wcscat (in: _Dest=0x8406308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.420] wcscat (in: _Dest=0x8406308, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" [0186.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8406308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0186.421] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0186.421] wcscmp (_String1="ko", _String2=".") returned 1 [0186.421] wcscmp (_String1="ko", _String2="..") returned 1 [0186.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x84061f0 [0186.421] wcscpy (in: _Dest=0x84061f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.422] wcscat (in: _Dest=0x84061f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.422] wcscat (in: _Dest=0x84061f0, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" [0186.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x84061f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0186.423] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0186.423] wcscmp (_String1="lt", _String2=".") returned 1 [0186.423] wcscmp (_String1="lt", _String2="..") returned 1 [0186.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x84060d8 [0186.423] wcscpy (in: _Dest=0x84060d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0186.423] wcscat (in: _Dest=0x84060d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0186.423] wcscat (in: _Dest=0x84060d8, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" [0186.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x84060d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0187.082] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0187.082] wcscmp (_String1="lv", _String2=".") returned 1 [0187.082] wcscmp (_String1="lv", _String2="..") returned 1 [0187.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8406650 [0187.082] wcscpy (in: _Dest=0x8406650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0187.082] wcscat (in: _Dest=0x8406650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0187.082] wcscat (in: _Dest=0x8406650, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" [0188.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8406650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0188.056] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0188.056] wcscmp (_String1="nl", _String2=".") returned 1 [0188.056] wcscmp (_String1="nl", _String2="..") returned 1 [0188.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x83486b8 [0188.056] wcscpy (in: _Dest=0x83486b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.056] wcscat (in: _Dest=0x83486b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.056] wcscat (in: _Dest=0x83486b8, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" [0188.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83486b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0188.057] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0188.057] wcscmp (_String1="no", _String2=".") returned 1 [0188.057] wcscmp (_String1="no", _String2="..") returned 1 [0188.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x83485a0 [0188.058] wcscpy (in: _Dest=0x83485a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.058] wcscat (in: _Dest=0x83485a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.058] wcscat (in: _Dest=0x83485a0, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" [0188.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83485a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0188.059] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0188.059] wcscmp (_String1="pl", _String2=".") returned 1 [0188.059] wcscmp (_String1="pl", _String2="..") returned 1 [0188.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x83487d0 [0188.059] wcscpy (in: _Dest=0x83487d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.060] wcscat (in: _Dest=0x83487d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.060] wcscat (in: _Dest=0x83487d0, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" [0188.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83487d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0188.061] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0188.061] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0188.061] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0188.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401a88 [0188.061] wcscpy (in: _Dest=0x8401a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.062] wcscat (in: _Dest=0x8401a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.062] wcscat (in: _Dest=0x8401a88, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" [0188.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8401a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0188.063] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0188.063] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0188.063] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0188.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401960 [0188.063] wcscpy (in: _Dest=0x8401960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.063] wcscat (in: _Dest=0x8401960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.063] wcscat (in: _Dest=0x8401960, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" [0188.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8401960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0188.065] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0188.065] wcscmp (_String1="ro", _String2=".") returned 1 [0188.065] wcscmp (_String1="ro", _String2="..") returned 1 [0188.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8346b60 [0188.065] wcscpy (in: _Dest=0x8346b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.065] wcscat (in: _Dest=0x8346b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.065] wcscat (in: _Dest=0x8346b60, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" [0188.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8346b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0188.067] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0188.067] wcscmp (_String1="ru", _String2=".") returned 1 [0188.067] wcscmp (_String1="ru", _String2="..") returned 1 [0188.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8346c78 [0188.067] wcscpy (in: _Dest=0x8346c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.067] wcscat (in: _Dest=0x8346c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.067] wcscat (in: _Dest=0x8346c78, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" [0188.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8346c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0188.068] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0188.069] wcscmp (_String1="sk", _String2=".") returned 1 [0188.069] wcscmp (_String1="sk", _String2="..") returned 1 [0188.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8348370 [0188.069] wcscpy (in: _Dest=0x8348370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.069] wcscat (in: _Dest=0x8348370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.069] wcscat (in: _Dest=0x8348370, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" [0188.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8348370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0188.070] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0188.070] wcscmp (_String1="sl", _String2=".") returned 1 [0188.070] wcscmp (_String1="sl", _String2="..") returned 1 [0188.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8347768 [0188.071] wcscpy (in: _Dest=0x8347768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.071] wcscat (in: _Dest=0x8347768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.071] wcscat (in: _Dest=0x8347768, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" [0188.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8347768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0188.072] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0188.072] wcscmp (_String1="sr", _String2=".") returned 1 [0188.072] wcscmp (_String1="sr", _String2="..") returned 1 [0188.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8347998 [0188.072] wcscpy (in: _Dest=0x8347998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.072] wcscat (in: _Dest=0x8347998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.072] wcscat (in: _Dest=0x8347998, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" [0188.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8347998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0188.074] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0188.074] wcscmp (_String1="sv", _String2=".") returned 1 [0188.074] wcscmp (_String1="sv", _String2="..") returned 1 [0188.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8347bc8 [0188.074] wcscpy (in: _Dest=0x8347bc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.074] wcscat (in: _Dest=0x8347bc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.074] wcscat (in: _Dest=0x8347bc8, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" [0188.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8347bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0188.076] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0188.076] wcscmp (_String1="th", _String2=".") returned 1 [0188.076] wcscmp (_String1="th", _String2="..") returned 1 [0188.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8347ab0 [0188.076] wcscpy (in: _Dest=0x8347ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.076] wcscat (in: _Dest=0x8347ab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.076] wcscat (in: _Dest=0x8347ab0, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" [0188.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8347ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0188.078] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0188.078] wcscmp (_String1="tr", _String2=".") returned 1 [0188.078] wcscmp (_String1="tr", _String2="..") returned 1 [0188.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8346930 [0188.078] wcscpy (in: _Dest=0x8346930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.078] wcscat (in: _Dest=0x8346930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.078] wcscat (in: _Dest=0x8346930, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" [0188.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8346930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0188.079] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0188.079] wcscmp (_String1="uk", _String2=".") returned 1 [0188.079] wcscmp (_String1="uk", _String2="..") returned 1 [0188.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8348488 [0188.080] wcscpy (in: _Dest=0x8348488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.080] wcscat (in: _Dest=0x8348488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.080] wcscat (in: _Dest=0x8348488, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" [0188.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8348488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0188.081] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0188.081] wcscmp (_String1="vi", _String2=".") returned 1 [0188.081] wcscmp (_String1="vi", _String2="..") returned 1 [0188.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x8348028 [0188.081] wcscpy (in: _Dest=0x8348028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.081] wcscat (in: _Dest=0x8348028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.081] wcscat (in: _Dest=0x8348028, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" [0188.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8348028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0188.083] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0188.083] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0188.083] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0188.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401cd8 [0188.083] wcscpy (in: _Dest=0x8401cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.083] wcscat (in: _Dest=0x8401cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.083] wcscat (in: _Dest=0x8401cd8, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" [0188.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8401cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0188.085] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0188.085] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0188.085] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0188.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401bb0 [0188.085] wcscpy (in: _Dest=0x8401bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0188.085] wcscat (in: _Dest=0x8401bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0188.085] wcscat (in: _Dest=0x8401bb0, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" [0188.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8401bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0188.087] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3d85ee0 | out: lpFindFileData=0x3d85ee0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0188.087] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0191.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ee0) returned 1 [0191.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbea8) returned 1 [0191.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348140) returned 1 Thread: id = 4637 os_tid = 0x21e0 [0177.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc768 [0177.356] wcscpy (in: _Dest=0x30bc768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales" [0177.356] wcscat (in: _Dest=0x30bc768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\" [0177.356] wcscat (in: _Dest=0x30bc768, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*" [0177.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0177.356] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099610 [0177.987] wcscmp (_String1=".", _String2=".") returned 0 [0177.987] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.987] wcscmp (_String1="..", _String2=".") returned 1 [0177.987] wcscmp (_String1="..", _String2="..") returned 0 [0177.987] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0177.987] FindClose (in: hFindFile=0x8099610 | out: hFindFile=0x8099610) returned 1 [0177.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0177.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0177.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348258) returned 1 Thread: id = 4638 os_tid = 0x21e4 [0177.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls")) returned 0x20 [0177.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS", dwFileAttributes=0x20) returned 0 [0177.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.366] GetLastError () returned 0x5 [0177.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS", dwFileAttributes=0x20) returned 0 [0177.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 4639 os_tid = 0x21e8 [0177.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bbfc0 [0177.376] wcscpy (in: _Dest=0x30bbfc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" [0177.376] wcscat (in: _Dest=0x30bbfc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\" [0177.376] wcscat (in: _Dest=0x30bbfc0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*" [0177.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85070 [0177.376] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7718eef0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099610 [0182.295] wcscmp (_String1=".", _String2=".") returned 0 [0182.295] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7718eef0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.295] wcscmp (_String1="..", _String2=".") returned 1 [0182.295] wcscmp (_String1="..", _String2="..") returned 0 [0182.295] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 1 [0182.296] wcscmp (_String1="DEFAULT.XSL", _String2=".") returned 1 [0182.296] wcscmp (_String1="DEFAULT.XSL", _String2="..") returned 1 [0182.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8401270 [0182.296] wcscpy (in: _Dest=0x8401270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" [0182.296] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\" [0182.296] wcscat (in: _Dest=0x8401270, _Source="DEFAULT.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" [0186.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0186.340] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x3d85070 | out: lpFindFileData=0x3d85070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 0 [0186.340] FindClose (in: hFindFile=0x8099610 | out: hFindFile=0x8099610) returned 1 [0186.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85070) returned 1 [0186.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 [0186.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 Thread: id = 4640 os_tid = 0x2218 [0177.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc880 [0177.394] wcscpy (in: _Dest=0x30bc880, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0177.394] wcscat (in: _Dest=0x30bc880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0177.394] wcscat (in: _Dest=0x30bc880, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*" [0177.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85a10 [0177.394] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f10 [0182.294] wcscmp (_String1=".", _String2=".") returned 0 [0182.294] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.294] wcscmp (_String1="..", _String2=".") returned 1 [0182.294] wcscmp (_String1="..", _String2="..") returned 0 [0182.294] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.js", cAlternateFileName="HIERAR~1.JS")) returned 1 [0182.294] wcscmp (_String1="Hierarchy.js", _String2=".") returned 1 [0182.294] wcscmp (_String1="Hierarchy.js", _String2="..") returned 1 [0182.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8401148 [0182.295] wcscpy (in: _Dest=0x8401148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0182.295] wcscat (in: _Dest=0x8401148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0182.295] wcscat (in: _Dest=0x8401148, _Source="Hierarchy.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" [0183.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2734 [0183.623] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x157e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.xsl", cAlternateFileName="HIERAR~1.XSL")) returned 1 [0183.623] wcscmp (_String1="Hierarchy.xsl", _String2=".") returned 1 [0183.623] wcscmp (_String1="Hierarchy.xsl", _String2="..") returned 1 [0183.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8401bb0 [0183.623] wcscpy (in: _Dest=0x8401bb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0183.624] wcscat (in: _Dest=0x8401bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0183.624] wcscat (in: _Dest=0x8401bb0, _Source="Hierarchy.xsl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" [0183.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0183.628] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x807f7d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="MINUS.GIF", cAlternateFileName="")) returned 1 [0183.628] wcscmp (_String1="MINUS.GIF", _String2=".") returned 1 [0183.628] wcscmp (_String1="MINUS.GIF", _String2="..") returned 1 [0183.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401cd8 [0183.628] wcscpy (in: _Dest=0x8401cd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0183.628] wcscat (in: _Dest=0x8401cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0183.628] wcscat (in: _Dest=0x8401cd8, _Source="MINUS.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" [0183.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0183.630] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8fc8d190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUS.GIF", cAlternateFileName="")) returned 1 [0183.630] wcscmp (_String1="PLUS.GIF", _String2=".") returned 1 [0183.630] wcscmp (_String1="PLUS.GIF", _String2="..") returned 1 [0183.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401a88 [0183.630] wcscpy (in: _Dest=0x8401a88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0183.630] wcscat (in: _Dest=0x8401a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0183.630] wcscat (in: _Dest=0x8401a88, _Source="PLUS.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" [0183.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0183.632] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0183.632] wcscmp (_String1="SPACER.GIF", _String2=".") returned 1 [0183.632] wcscmp (_String1="SPACER.GIF", _String2="..") returned 1 [0183.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x8401960 [0183.632] wcscpy (in: _Dest=0x8401960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0183.632] wcscat (in: _Dest=0x8401960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0183.632] wcscat (in: _Dest=0x8401960, _Source="SPACER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" [0183.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0183.633] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3d85a10 | out: lpFindFileData=0x3d85a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 0 [0183.634] FindClose (in: hFindFile=0x8098f10 | out: hFindFile=0x8098f10) returned 1 [0183.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85a10) returned 1 [0183.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0183.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 Thread: id = 4641 os_tid = 0x221c [0177.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef57b0 [0177.404] wcscpy (in: _Dest=0x3ef57b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0177.404] wcscat (in: _Dest=0x3ef57b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" [0177.404] wcscat (in: _Dest=0x3ef57b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*" [0177.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0177.404] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5628950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe562d770, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37558 [0177.405] wcscmp (_String1=".", _String2=".") returned 0 [0177.405] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5628950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe562d770, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.405] wcscmp (_String1="..", _String2=".") returned 1 [0177.405] wcscmp (_String1="..", _String2="..") returned 0 [0177.405] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe562d770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562fe80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.405] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.405] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8186fe8 [0177.405] wcscpy (in: _Dest=0x8186fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0177.405] wcscat (in: _Dest=0x8186fe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" [0177.405] wcscat (in: _Dest=0x8186fe8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" [0177.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8186fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1adc [0177.884] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe562d770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562fe80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.884] FindClose (in: hFindFile=0x3f37558 | out: hFindFile=0x3f37558) returned 1 [0177.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0177.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef57b0) returned 1 [0177.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f41a0) returned 1 Thread: id = 4642 os_tid = 0x2220 [0177.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef5180 [0177.406] wcscpy (in: _Dest=0x3ef5180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0177.406] wcscat (in: _Dest=0x3ef5180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" [0177.406] wcscat (in: _Dest=0x3ef5180, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*" [0177.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e4b0 [0177.406] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5634ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56373b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56373b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ad8 [0177.406] wcscmp (_String1=".", _String2=".") returned 0 [0177.406] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5634ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56373b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56373b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.406] wcscmp (_String1="..", _String2=".") returned 1 [0177.406] wcscmp (_String1="..", _String2="..") returned 0 [0177.406] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56373b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5639ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.406] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.406] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8187238 [0177.407] wcscpy (in: _Dest=0x8187238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0177.407] wcscat (in: _Dest=0x8187238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" [0177.407] wcscat (in: _Dest=0x8187238, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" [0177.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0177.886] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56373b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5639ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0177.886] FindClose (in: hFindFile=0x3f37ad8 | out: hFindFile=0x3f37ad8) returned 1 [0177.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e4b0) returned 1 [0177.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5180) returned 1 [0177.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335590) returned 1 Thread: id = 4643 os_tid = 0x231c [0177.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef6a40 [0177.407] wcscpy (in: _Dest=0x3ef6a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0177.407] wcscat (in: _Dest=0x3ef6a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" [0177.407] wcscat (in: _Dest=0x3ef6a40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*" [0177.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80619a0 [0177.407] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x80619a0 | out: lpFindFileData=0x80619a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe563e8e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5643700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfe90 [0185.680] wcscmp (_String1=".", _String2=".") returned 0 [0185.680] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x80619a0 | out: lpFindFileData=0x80619a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe563e8e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5643700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.680] wcscmp (_String1="..", _String2=".") returned 1 [0185.680] wcscmp (_String1="..", _String2="..") returned 0 [0185.680] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x80619a0 | out: lpFindFileData=0x80619a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5643700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.680] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.680] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a2878 [0185.681] wcscpy (in: _Dest=0x148a2878, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0185.681] wcscat (in: _Dest=0x148a2878, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" [0185.681] wcscat (in: _Dest=0x148a2878, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" [0187.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ec [0187.275] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x80619a0 | out: lpFindFileData=0x80619a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5643700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.275] FindClose (in: hFindFile=0x3dcfe90 | out: hFindFile=0x3dcfe90) returned 1 [0187.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80619a0) returned 1 [0187.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6a40) returned 1 [0187.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334f60) returned 1 Thread: id = 4644 os_tid = 0x2320 [0177.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef6938 [0177.408] wcscpy (in: _Dest=0x3ef6938, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0177.408] wcscat (in: _Dest=0x3ef6938, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" [0177.408] wcscat (in: _Dest=0x3ef6938, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*" [0177.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8061c08 [0177.408] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5648520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe564d340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb50 [0185.681] wcscmp (_String1=".", _String2=".") returned 0 [0185.681] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5648520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe564d340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.681] wcscmp (_String1="..", _String2=".") returned 1 [0185.681] wcscmp (_String1="..", _String2="..") returned 0 [0185.681] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe564d340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.681] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.681] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a29a0 [0185.681] wcscpy (in: _Dest=0x148a29a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0185.681] wcscat (in: _Dest=0x148a29a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" [0185.681] wcscat (in: _Dest=0x148a29a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" [0186.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a29a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0186.885] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe564d340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.885] FindClose (in: hFindFile=0x3dcfb50 | out: hFindFile=0x3dcfb50) returned 1 [0186.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061c08) returned 1 [0186.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6938) returned 1 [0186.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83358a8) returned 1 Thread: id = 4645 os_tid = 0x2324 [0177.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef6830 [0177.408] wcscpy (in: _Dest=0x3ef6830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0177.408] wcscat (in: _Dest=0x3ef6830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" [0177.408] wcscat (in: _Dest=0x3ef6830, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*" [0177.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3caf0 [0177.409] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5656f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5659690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5659690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff50 [0185.682] wcscmp (_String1=".", _String2=".") returned 0 [0185.682] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5656f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5659690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5659690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.682] wcscmp (_String1="..", _String2=".") returned 1 [0185.682] wcscmp (_String1="..", _String2="..") returned 0 [0185.682] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5659690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe565bda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.682] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.682] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a2ac8 [0185.682] wcscpy (in: _Dest=0x148a2ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0185.682] wcscat (in: _Dest=0x148a2ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" [0185.682] wcscat (in: _Dest=0x148a2ac8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" [0186.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0186.890] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5659690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe565bda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.891] FindClose (in: hFindFile=0x3dcff50 | out: hFindFile=0x3dcff50) returned 1 [0186.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3caf0) returned 1 [0186.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6830) returned 1 [0186.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83357a0) returned 1 Thread: id = 4646 os_tid = 0x2328 [0177.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef6728 [0177.409] wcscpy (in: _Dest=0x3ef6728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0177.409] wcscat (in: _Dest=0x3ef6728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" [0177.409] wcscat (in: _Dest=0x3ef6728, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*" [0177.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0177.409] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56632d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56659e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd00d0 [0185.683] wcscmp (_String1=".", _String2=".") returned 0 [0185.683] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56632d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56659e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.683] wcscmp (_String1="..", _String2=".") returned 1 [0185.683] wcscmp (_String1="..", _String2="..") returned 0 [0185.683] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56659e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.683] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.683] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a2bf0 [0185.683] wcscpy (in: _Dest=0x148a2bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0185.683] wcscat (in: _Dest=0x148a2bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" [0185.683] wcscat (in: _Dest=0x148a2bf0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" [0186.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0186.894] FindNextFileW (in: hFindFile=0x3dd00d0, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56659e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.894] FindClose (in: hFindFile=0x3dd00d0 | out: hFindFile=0x3dd00d0) returned 1 [0186.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0186.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6728) returned 1 [0186.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335698) returned 1 Thread: id = 4647 os_tid = 0x232c [0177.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef6620 [0177.410] wcscpy (in: _Dest=0x3ef6620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0177.410] wcscat (in: _Dest=0x3ef6620, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" [0177.410] wcscat (in: _Dest=0x3ef6620, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*" [0177.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bee8 [0177.410] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe566cf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe566f620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe566f620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0185.683] wcscmp (_String1=".", _String2=".") returned 0 [0185.683] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe566cf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe566f620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe566f620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.683] wcscmp (_String1="..", _String2=".") returned 1 [0185.683] wcscmp (_String1="..", _String2="..") returned 0 [0185.683] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe566f620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5671d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.683] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.684] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a2d18 [0185.684] wcscpy (in: _Dest=0x148a2d18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0185.684] wcscat (in: _Dest=0x148a2d18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" [0185.684] wcscat (in: _Dest=0x148a2d18, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" [0186.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0186.897] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe566f620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5671d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.897] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0186.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bee8) returned 1 [0186.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6620) returned 1 [0186.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336718) returned 1 Thread: id = 4648 os_tid = 0x2330 [0177.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef6518 [0177.410] wcscpy (in: _Dest=0x3ef6518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0177.410] wcscat (in: _Dest=0x3ef6518, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" [0177.410] wcscat (in: _Dest=0x3ef6518, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*" [0177.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ba18 [0177.411] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5676b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5687cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c98 [0185.684] wcscmp (_String1=".", _String2=".") returned 0 [0185.684] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5676b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5687cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.684] wcscmp (_String1="..", _String2=".") returned 1 [0185.684] wcscmp (_String1="..", _String2="..") returned 0 [0185.684] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5687cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.684] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.684] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a2e40 [0185.684] wcscpy (in: _Dest=0x148a2e40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0185.684] wcscat (in: _Dest=0x148a2e40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" [0185.684] wcscat (in: _Dest=0x148a2e40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" [0186.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0186.899] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5687cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.899] FindClose (in: hFindFile=0x3f37c98 | out: hFindFile=0x3f37c98) returned 1 [0186.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ba18) returned 1 [0186.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6518) returned 1 [0186.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3960) returned 1 Thread: id = 4649 os_tid = 0x2334 [0177.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef59c0 [0177.411] wcscpy (in: _Dest=0x3ef59c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0177.411] wcscat (in: _Dest=0x3ef59c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" [0177.411] wcscat (in: _Dest=0x3ef59c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*" [0177.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0177.411] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe568f1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5691900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0183.408] wcscmp (_String1=".", _String2=".") returned 0 [0183.408] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe568f1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5691900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.408] wcscmp (_String1="..", _String2=".") returned 1 [0183.408] wcscmp (_String1="..", _String2="..") returned 0 [0183.408] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5691900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.408] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.408] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d57718 [0183.409] wcscpy (in: _Dest=0x3d57718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0183.409] wcscat (in: _Dest=0x3d57718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" [0183.409] wcscat (in: _Dest=0x3d57718, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" [0188.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0188.413] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5691900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.413] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0188.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0188.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0188.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4f08) returned 1 Thread: id = 4650 os_tid = 0x2338 [0177.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f3f90 [0177.412] wcscpy (in: _Dest=0x81f3f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0177.412] wcscat (in: _Dest=0x81f3f90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" [0177.412] wcscat (in: _Dest=0x81f3f90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*" [0177.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3aba8 [0177.412] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5698e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe569dc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfbd0 [0185.677] wcscmp (_String1=".", _String2=".") returned 0 [0185.677] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5698e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe569dc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.677] wcscmp (_String1="..", _String2=".") returned 1 [0185.677] wcscmp (_String1="..", _String2="..") returned 0 [0185.677] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe569dc50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.677] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.677] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a23d8 [0185.677] wcscpy (in: _Dest=0x148a23d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0185.678] wcscat (in: _Dest=0x148a23d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" [0185.678] wcscat (in: _Dest=0x148a23d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" [0188.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a23d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0188.047] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe569dc50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.047] FindClose (in: hFindFile=0x3dcfbd0 | out: hFindFile=0x3dcfbd0) returned 1 [0188.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3aba8) returned 1 [0188.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3f90) returned 1 [0188.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3b70) returned 1 Thread: id = 4651 os_tid = 0x233c [0177.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f3e88 [0177.413] wcscpy (in: _Dest=0x81f3e88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0177.413] wcscat (in: _Dest=0x81f3e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" [0177.413] wcscat (in: _Dest=0x81f3e88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*" [0177.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0177.413] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ac6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56aedc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56aedc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfdd0 [0185.679] wcscmp (_String1=".", _String2=".") returned 0 [0185.679] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ac6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56aedc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56aedc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.679] wcscmp (_String1="..", _String2=".") returned 1 [0185.679] wcscmp (_String1="..", _String2="..") returned 0 [0185.679] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56aedc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b14d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.679] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.679] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a2628 [0185.679] wcscpy (in: _Dest=0x148a2628, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0185.679] wcscat (in: _Dest=0x148a2628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" [0185.679] wcscat (in: _Dest=0x148a2628, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" [0188.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0188.053] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56aedc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b14d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.053] FindClose (in: hFindFile=0x3dcfdd0 | out: hFindFile=0x3dcfdd0) returned 1 [0188.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0188.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3e88) returned 1 [0188.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5118) returned 1 Thread: id = 4652 os_tid = 0x2340 [0177.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bc0d8 [0177.413] wcscpy (in: _Dest=0x30bc0d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0177.413] wcscat (in: _Dest=0x30bc0d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" [0177.413] wcscat (in: _Dest=0x30bc0d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*" [0177.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b548 [0177.413] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b62f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b8a00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56b8a00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37958 [0181.739] wcscmp (_String1=".", _String2=".") returned 0 [0181.739] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b62f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b8a00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56b8a00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.739] wcscmp (_String1="..", _String2=".") returned 1 [0181.739] wcscmp (_String1="..", _String2="..") returned 0 [0181.739] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56b8a00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56bb110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0181.739] wcscmp (_String1="messages.json", _String2=".") returned 1 [0181.739] wcscmp (_String1="messages.json", _String2="..") returned 1 [0181.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8400ca8 [0181.739] wcscpy (in: _Dest=0x8400ca8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0181.739] wcscat (in: _Dest=0x8400ca8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" [0181.739] wcscat (in: _Dest=0x8400ca8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" [0184.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8400ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e4 [0184.877] FindNextFileW (in: hFindFile=0x3f37958, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56b8a00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56bb110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.877] FindClose (in: hFindFile=0x3f37958 | out: hFindFile=0x3f37958) returned 1 [0184.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b548) returned 1 [0184.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0184.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3a68) returned 1 Thread: id = 4653 os_tid = 0x2344 [0177.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bc998 [0177.414] wcscpy (in: _Dest=0x30bc998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0177.414] wcscat (in: _Dest=0x30bc998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" [0177.414] wcscat (in: _Dest=0x30bc998, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*" [0177.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3e098 [0177.414] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56bff30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c2640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56c2640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0185.718] wcscmp (_String1=".", _String2=".") returned 0 [0185.718] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56bff30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c2640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56c2640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.718] wcscmp (_String1="..", _String2=".") returned 1 [0185.718] wcscmp (_String1="..", _String2="..") returned 0 [0185.718] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56c2640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c4d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.718] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.718] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x84085e8 [0185.719] wcscpy (in: _Dest=0x84085e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0185.719] wcscat (in: _Dest=0x84085e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" [0185.719] wcscat (in: _Dest=0x84085e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" [0186.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84085e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0186.972] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56c2640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c4d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.972] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0186.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e098) returned 1 [0186.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0186.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5010) returned 1 Thread: id = 4654 os_tid = 0x2348 [0177.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333dd0 [0177.415] wcscpy (in: _Dest=0x8333dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0177.415] wcscat (in: _Dest=0x8333dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" [0177.415] wcscat (in: _Dest=0x8333dd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*" [0177.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b7b0 [0177.415] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56cc280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56d10a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ad8 [0185.713] wcscmp (_String1=".", _String2=".") returned 0 [0185.713] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56cc280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56d10a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.713] wcscmp (_String1="..", _String2=".") returned 1 [0185.713] wcscmp (_String1="..", _String2="..") returned 0 [0185.713] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56d10a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.713] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.713] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x84084c0 [0185.713] wcscpy (in: _Dest=0x84084c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0185.713] wcscat (in: _Dest=0x84084c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" [0185.713] wcscat (in: _Dest=0x84084c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" [0186.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84084c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0186.969] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56d10a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.969] FindClose (in: hFindFile=0x3f37ad8 | out: hFindFile=0x3f37ad8) returned 1 [0186.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b7b0) returned 1 [0186.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333dd0) returned 1 [0186.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3858) returned 1 Thread: id = 4655 os_tid = 0x234c [0177.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bb700 [0177.415] wcscpy (in: _Dest=0x30bb700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0177.415] wcscat (in: _Dest=0x30bb700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" [0177.416] wcscat (in: _Dest=0x30bb700, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*" [0177.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ae10 [0177.416] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56d85d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56dace0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37898 [0185.686] wcscmp (_String1=".", _String2=".") returned 0 [0185.686] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56d85d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56dace0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.686] wcscmp (_String1="..", _String2=".") returned 1 [0185.686] wcscmp (_String1="..", _String2="..") returned 0 [0185.686] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56dace0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.686] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.686] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x148a3090 [0185.686] wcscpy (in: _Dest=0x148a3090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0185.686] wcscat (in: _Dest=0x148a3090, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" [0185.686] wcscat (in: _Dest=0x148a3090, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" [0186.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a3090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0186.904] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56dace0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.905] FindClose (in: hFindFile=0x3f37898 | out: hFindFile=0x3f37898) returned 1 [0186.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ae10) returned 1 [0186.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0186.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 Thread: id = 4656 os_tid = 0x2350 [0177.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8332d50 [0177.416] wcscpy (in: _Dest=0x8332d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0177.416] wcscat (in: _Dest=0x8332d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" [0177.416] wcscat (in: _Dest=0x8332d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*" [0177.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d6f8 [0177.416] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56e2210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56e4920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f374d8 [0185.685] wcscmp (_String1=".", _String2=".") returned 0 [0185.685] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56e2210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56e4920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.685] wcscmp (_String1="..", _String2=".") returned 1 [0185.685] wcscmp (_String1="..", _String2="..") returned 0 [0185.685] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56e4920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.685] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.685] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a2f68 [0185.685] wcscpy (in: _Dest=0x148a2f68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0185.685] wcscat (in: _Dest=0x148a2f68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" [0185.685] wcscat (in: _Dest=0x148a2f68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" [0186.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0186.902] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x3f3d6f8 | out: lpFindFileData=0x3f3d6f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56e4920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.902] FindClose (in: hFindFile=0x3f374d8 | out: hFindFile=0x3f374d8) returned 1 [0186.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6f8) returned 1 [0186.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332d50) returned 1 [0186.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4e00) returned 1 Thread: id = 4657 os_tid = 0x2354 [0177.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334718 [0177.425] wcscpy (in: _Dest=0x8334718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0177.425] wcscat (in: _Dest=0x8334718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" [0177.426] wcscat (in: _Dest=0x8334718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*" [0177.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0177.426] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ebe50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56f0c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38098 [0185.707] wcscmp (_String1=".", _String2=".") returned 0 [0185.707] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ebe50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56f0c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.707] wcscmp (_String1="..", _String2=".") returned 1 [0185.707] wcscmp (_String1="..", _String2="..") returned 0 [0185.707] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56f0c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.707] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.707] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8407ef8 [0185.707] wcscpy (in: _Dest=0x8407ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0185.707] wcscat (in: _Dest=0x8407ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" [0185.707] wcscat (in: _Dest=0x8407ef8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" [0186.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8407ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0186.955] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56f0c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.955] FindClose (in: hFindFile=0x3f38098 | out: hFindFile=0x3f38098) returned 1 [0186.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0186.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334718) returned 1 [0186.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3750) returned 1 Thread: id = 4658 os_tid = 0x2358 [0177.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8332e58 [0177.428] wcscpy (in: _Dest=0x8332e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0177.428] wcscat (in: _Dest=0x8332e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" [0177.428] wcscat (in: _Dest=0x8332e58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*" [0177.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cd58 [0177.428] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56f81a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56fcfc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0185.706] wcscmp (_String1=".", _String2=".") returned 0 [0185.706] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56f81a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56fcfc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.706] wcscmp (_String1="..", _String2=".") returned 1 [0185.706] wcscmp (_String1="..", _String2="..") returned 0 [0185.706] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56fcfc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.706] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.706] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8407dd0 [0185.707] wcscpy (in: _Dest=0x8407dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0185.707] wcscat (in: _Dest=0x8407dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" [0185.707] wcscat (in: _Dest=0x8407dd0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" [0186.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8407dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0186.953] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56fcfc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.953] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0186.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd58) returned 1 [0186.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332e58) returned 1 [0186.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4cf8) returned 1 Thread: id = 4659 os_tid = 0x235c [0177.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333ab8 [0177.435] wcscpy (in: _Dest=0x8333ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0177.435] wcscat (in: _Dest=0x8333ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" [0177.435] wcscat (in: _Dest=0x8333ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*" [0177.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0177.435] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57044f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5706c00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f383d8 [0185.705] wcscmp (_String1=".", _String2=".") returned 0 [0185.705] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57044f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5706c00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.705] wcscmp (_String1="..", _String2=".") returned 1 [0185.705] wcscmp (_String1="..", _String2="..") returned 0 [0185.705] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5706c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.705] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.706] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8407ca8 [0185.706] wcscpy (in: _Dest=0x8407ca8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0185.706] wcscat (in: _Dest=0x8407ca8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" [0185.706] wcscat (in: _Dest=0x8407ca8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" [0186.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8407ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0186.950] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5706c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.950] FindClose (in: hFindFile=0x3f383d8 | out: hFindFile=0x3f383d8) returned 1 [0186.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0186.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ab8) returned 1 [0186.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3648) returned 1 Thread: id = 4660 os_tid = 0x2360 [0177.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8333bc0 [0177.445] wcscpy (in: _Dest=0x8333bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0177.445] wcscat (in: _Dest=0x8333bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" [0177.445] wcscat (in: _Dest=0x8333bc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*" [0177.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a470 [0177.445] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe570e130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5710840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0185.704] wcscmp (_String1=".", _String2=".") returned 0 [0185.705] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe570e130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5710840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.705] wcscmp (_String1="..", _String2=".") returned 1 [0185.705] wcscmp (_String1="..", _String2="..") returned 0 [0185.705] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5710840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.705] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.705] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x8407b80 [0185.705] wcscpy (in: _Dest=0x8407b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0185.705] wcscat (in: _Dest=0x8407b80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" [0185.705] wcscat (in: _Dest=0x8407b80, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" [0186.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8407b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0186.947] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x3f3a470 | out: lpFindFileData=0x3f3a470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5710840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.948] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0186.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a470) returned 1 [0186.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333bc0) returned 1 [0186.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4bf0) returned 1 Thread: id = 4661 os_tid = 0x2364 [0177.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333cc8 [0177.457] wcscpy (in: _Dest=0x8333cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0177.457] wcscat (in: _Dest=0x8333cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" [0177.457] wcscat (in: _Dest=0x8333cc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*" [0177.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a6d8 [0177.457] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5717d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571a480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe571a480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0185.704] wcscmp (_String1=".", _String2=".") returned 0 [0185.704] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5717d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571a480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe571a480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.704] wcscmp (_String1="..", _String2=".") returned 1 [0185.704] wcscmp (_String1="..", _String2="..") returned 0 [0185.704] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe571a480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571cb90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.704] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.704] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8407a58 [0185.704] wcscpy (in: _Dest=0x8407a58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0185.704] wcscat (in: _Dest=0x8407a58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" [0185.704] wcscat (in: _Dest=0x8407a58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" [0186.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8407a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0186.945] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x3f3a6d8 | out: lpFindFileData=0x3f3a6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe571a480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571cb90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.945] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0186.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a6d8) returned 1 [0186.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333cc8) returned 1 [0186.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4ae8) returned 1 Thread: id = 4662 os_tid = 0x2368 [0177.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bb818 [0177.467] wcscpy (in: _Dest=0x30bb818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0177.467] wcscat (in: _Dest=0x30bb818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" [0177.467] wcscat (in: _Dest=0x30bb818, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*" [0177.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d490 [0177.467] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57240c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57267d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37bd8 [0185.703] wcscmp (_String1=".", _String2=".") returned 0 [0185.703] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57240c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57267d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.703] wcscmp (_String1="..", _String2=".") returned 1 [0185.703] wcscmp (_String1="..", _String2="..") returned 0 [0185.703] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57267d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.703] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.703] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8407930 [0185.703] wcscpy (in: _Dest=0x8407930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0185.703] wcscat (in: _Dest=0x8407930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" [0185.704] wcscat (in: _Dest=0x8407930, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" [0186.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8407930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0186.942] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x3f3d490 | out: lpFindFileData=0x3f3d490*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57267d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.942] FindClose (in: hFindFile=0x3f37bd8 | out: hFindFile=0x3f37bd8) returned 1 [0186.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d490) returned 1 [0186.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0186.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f49e0) returned 1 Thread: id = 4663 os_tid = 0x236c [0177.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83339b0 [0177.468] wcscpy (in: _Dest=0x83339b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0177.468] wcscat (in: _Dest=0x83339b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" [0177.468] wcscat (in: _Dest=0x83339b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*" [0177.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3d960 [0177.468] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5730410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5732b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0185.702] wcscmp (_String1=".", _String2=".") returned 0 [0185.702] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5730410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5732b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.702] wcscmp (_String1="..", _String2=".") returned 1 [0185.702] wcscmp (_String1="..", _String2="..") returned 0 [0185.703] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5732b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.703] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.703] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a3e70 [0185.703] wcscpy (in: _Dest=0x148a3e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0185.703] wcscat (in: _Dest=0x148a3e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" [0185.703] wcscat (in: _Dest=0x148a3e70, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" [0186.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a3e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0186.940] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x3f3d960 | out: lpFindFileData=0x3f3d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5732b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.940] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0186.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d960) returned 1 [0186.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83339b0) returned 1 [0186.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f48d8) returned 1 Thread: id = 4664 os_tid = 0x2370 [0177.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8332f60 [0177.469] wcscpy (in: _Dest=0x8332f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0177.469] wcscat (in: _Dest=0x8332f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" [0177.469] wcscat (in: _Dest=0x8332f60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*" [0177.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0177.469] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe573a050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe573ee70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38398 [0185.701] wcscmp (_String1=".", _String2=".") returned 0 [0185.701] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe573a050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe573ee70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.702] wcscmp (_String1="..", _String2=".") returned 1 [0185.702] wcscmp (_String1="..", _String2="..") returned 0 [0185.702] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe573ee70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.702] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.702] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a3d48 [0185.702] wcscpy (in: _Dest=0x148a3d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0185.702] wcscat (in: _Dest=0x148a3d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" [0185.702] wcscat (in: _Dest=0x148a3d48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" [0186.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a3d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0186.937] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe573ee70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.937] FindClose (in: hFindFile=0x3f38398 | out: hFindFile=0x3f38398) returned 1 [0186.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0186.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332f60) returned 1 [0186.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f47d0) returned 1 Thread: id = 4665 os_tid = 0x2374 [0177.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8332a38 [0177.474] wcscpy (in: _Dest=0x8332a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0177.474] wcscat (in: _Dest=0x8332a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" [0177.474] wcscat (in: _Dest=0x8332a38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*" [0177.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0177.474] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5748ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe574b1c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0185.701] wcscmp (_String1=".", _String2=".") returned 0 [0185.701] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5748ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe574b1c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.701] wcscmp (_String1="..", _String2=".") returned 1 [0185.701] wcscmp (_String1="..", _String2="..") returned 0 [0185.701] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe574b1c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.701] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.701] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a3c20 [0185.701] wcscpy (in: _Dest=0x148a3c20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0185.701] wcscat (in: _Dest=0x148a3c20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" [0185.701] wcscat (in: _Dest=0x148a3c20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" [0186.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a3c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0186.934] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe574b1c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.934] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0186.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0186.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332a38) returned 1 [0186.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f46c8) returned 1 Thread: id = 4666 os_tid = 0x2378 [0177.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8332b40 [0177.577] wcscpy (in: _Dest=0x8332b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0177.577] wcscat (in: _Dest=0x8332b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" [0177.577] wcscat (in: _Dest=0x8332b40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*" [0177.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0177.577] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57526f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5754e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f382d8 [0185.700] wcscmp (_String1=".", _String2=".") returned 0 [0185.700] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57526f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5754e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.700] wcscmp (_String1="..", _String2=".") returned 1 [0185.700] wcscmp (_String1="..", _String2="..") returned 0 [0185.700] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5754e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.700] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.700] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a3af8 [0185.700] wcscpy (in: _Dest=0x148a3af8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0185.700] wcscat (in: _Dest=0x148a3af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" [0185.700] wcscat (in: _Dest=0x148a3af8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" [0186.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a3af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0186.932] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5754e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.932] FindClose (in: hFindFile=0x3f382d8 | out: hFindFile=0x3f382d8) returned 1 [0186.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0186.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332b40) returned 1 [0186.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f45c0) returned 1 Thread: id = 4667 os_tid = 0x2380 [0177.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy")) returned 0x20 [0184.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy", dwFileAttributes=0x20) returned 0 [0185.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.104] GetLastError () returned 0x5 [0185.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy", dwFileAttributes=0x20) returned 0 [0185.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6200) returned 1 Thread: id = 4668 os_tid = 0x2384 [0177.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy")) returned 0x20 [0185.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy", dwFileAttributes=0x20) returned 0 [0185.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.102] GetLastError () returned 0x5 [0185.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy", dwFileAttributes=0x20) returned 0 [0185.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7d50) returned 1 Thread: id = 4669 os_tid = 0x2388 [0177.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy")) returned 0x20 [0185.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy", dwFileAttributes=0x20) returned 0 [0185.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.925] GetLastError () returned 0x5 [0185.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy", dwFileAttributes=0x20) returned 0 [0185.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8f48) returned 1 Thread: id = 4670 os_tid = 0x238c [0177.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml")) returned 0x20 [0184.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML", dwFileAttributes=0x20) returned 0 [0184.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.524] GetLastError () returned 0x5 [0184.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML", dwFileAttributes=0x20) returned 0 [0184.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df418) returned 1 Thread: id = 4671 os_tid = 0x2390 [0177.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml")) returned 0x20 [0184.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML", dwFileAttributes=0x20) returned 0 [0184.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.527] GetLastError () returned 0x5 [0184.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML", dwFileAttributes=0x20) returned 0 [0184.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dede8) returned 1 Thread: id = 4672 os_tid = 0x2394 [0177.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml")) returned 0x20 [0184.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML", dwFileAttributes=0x20) returned 0 [0184.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.529] GetLastError () returned 0x5 [0184.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML", dwFileAttributes=0x20) returned 0 [0184.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df1d8) returned 1 Thread: id = 4673 os_tid = 0x2398 [0177.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml")) returned 0x20 [0184.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML", dwFileAttributes=0x20) returned 0 [0184.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.531] GetLastError () returned 0x5 [0184.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML", dwFileAttributes=0x20) returned 0 [0184.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 Thread: id = 4674 os_tid = 0x23b0 [0177.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml")) returned 0x20 [0184.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML", dwFileAttributes=0x20) returned 0 [0184.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.533] GetLastError () returned 0x5 [0184.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML", dwFileAttributes=0x20) returned 0 [0184.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dde28) returned 1 Thread: id = 4675 os_tid = 0x23c8 [0177.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml")) returned 0x20 [0184.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML", dwFileAttributes=0x20) returned 0 [0184.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.535] GetLastError () returned 0x5 [0184.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML", dwFileAttributes=0x20) returned 0 [0184.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 Thread: id = 4676 os_tid = 0x23cc [0177.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml")) returned 0x20 [0184.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML", dwFileAttributes=0x20) returned 0 [0184.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.537] GetLastError () returned 0x5 [0184.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML", dwFileAttributes=0x20) returned 0 [0184.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de3c8) returned 1 Thread: id = 4677 os_tid = 0x23d0 [0177.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml")) returned 0x20 [0184.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML", dwFileAttributes=0x20) returned 0 [0184.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.539] GetLastError () returned 0x5 [0184.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML", dwFileAttributes=0x20) returned 0 [0184.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de338) returned 1 Thread: id = 4678 os_tid = 0x23d4 [0177.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml")) returned 0x20 [0184.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML", dwFileAttributes=0x20) returned 0 [0184.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.541] GetLastError () returned 0x5 [0184.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML", dwFileAttributes=0x20) returned 0 [0184.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de2a8) returned 1 Thread: id = 4679 os_tid = 0x23d8 [0177.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml")) returned 0x20 [0184.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML", dwFileAttributes=0x20) returned 0 [0184.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.543] GetLastError () returned 0x5 [0184.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML", dwFileAttributes=0x20) returned 0 [0184.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 Thread: id = 4680 os_tid = 0x23dc [0177.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml")) returned 0x20 [0184.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML", dwFileAttributes=0x20) returned 0 [0184.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.544] GetLastError () returned 0x5 [0184.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML", dwFileAttributes=0x20) returned 0 [0184.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df2f8) returned 1 Thread: id = 4681 os_tid = 0x23e0 [0177.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml")) returned 0x20 [0184.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML", dwFileAttributes=0x20) returned 0 [0184.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.546] GetLastError () returned 0x5 [0184.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML", dwFileAttributes=0x20) returned 0 [0184.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 Thread: id = 4682 os_tid = 0x23e4 [0177.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml")) returned 0x20 [0184.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML", dwFileAttributes=0x20) returned 0 [0184.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.548] GetLastError () returned 0x5 [0184.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML", dwFileAttributes=0x20) returned 0 [0184.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 Thread: id = 4683 os_tid = 0x23e8 [0177.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml")) returned 0x20 [0184.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML", dwFileAttributes=0x20) returned 0 [0184.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.549] GetLastError () returned 0x5 [0184.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML", dwFileAttributes=0x20) returned 0 [0184.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 Thread: id = 4684 os_tid = 0x23ec [0177.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml")) returned 0x20 [0184.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML", dwFileAttributes=0x20) returned 0 [0184.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.551] GetLastError () returned 0x5 [0184.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML", dwFileAttributes=0x20) returned 0 [0184.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 Thread: id = 4685 os_tid = 0x23f0 [0177.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml")) returned 0x20 [0184.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML", dwFileAttributes=0x20) returned 0 [0184.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.552] GetLastError () returned 0x5 [0184.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML", dwFileAttributes=0x20) returned 0 [0184.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 Thread: id = 4686 os_tid = 0x23f4 [0177.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml")) returned 0x20 [0184.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML", dwFileAttributes=0x20) returned 0 [0184.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.554] GetLastError () returned 0x5 [0184.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML", dwFileAttributes=0x20) returned 0 [0184.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 Thread: id = 4687 os_tid = 0x23f8 [0177.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml")) returned 0x20 [0184.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML", dwFileAttributes=0x20) returned 0 [0184.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.556] GetLastError () returned 0x5 [0184.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML", dwFileAttributes=0x20) returned 0 [0184.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 Thread: id = 4688 os_tid = 0x23fc [0177.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml")) returned 0x20 [0184.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML", dwFileAttributes=0x20) returned 0 [0184.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.557] GetLastError () returned 0x5 [0184.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML", dwFileAttributes=0x20) returned 0 [0184.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de0f8) returned 1 Thread: id = 4689 os_tid = 0x2400 [0177.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml")) returned 0x20 [0184.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML", dwFileAttributes=0x20) returned 0 [0184.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.559] GetLastError () returned 0x5 [0184.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML", dwFileAttributes=0x20) returned 0 [0184.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 Thread: id = 4690 os_tid = 0x2404 [0177.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml")) returned 0x20 [0184.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML", dwFileAttributes=0x20) returned 0 [0184.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.562] GetLastError () returned 0x5 [0184.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML", dwFileAttributes=0x20) returned 0 [0184.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de4e8) returned 1 Thread: id = 4691 os_tid = 0x2408 [0177.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml")) returned 0x20 [0184.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML", dwFileAttributes=0x20) returned 0 [0184.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.564] GetLastError () returned 0x5 [0184.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML", dwFileAttributes=0x20) returned 0 [0184.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de458) returned 1 Thread: id = 4692 os_tid = 0x240c [0177.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml")) returned 0x20 [0184.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML", dwFileAttributes=0x20) returned 0 [0184.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.565] GetLastError () returned 0x5 [0184.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML", dwFileAttributes=0x20) returned 0 [0184.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddeb8) returned 1 Thread: id = 4693 os_tid = 0x2410 [0177.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml")) returned 0x20 [0184.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML", dwFileAttributes=0x20) returned 0 [0184.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.567] GetLastError () returned 0x5 [0184.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML", dwFileAttributes=0x20) returned 0 [0184.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 Thread: id = 4694 os_tid = 0x2414 [0177.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81df878 [0177.790] wcscpy (in: _Dest=0x81df878, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0177.790] wcscat (in: _Dest=0x81df878, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" [0177.790] wcscat (in: _Dest=0x81df878, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*" [0177.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a5f8 [0177.791] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*", lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38198 [0177.791] wcscmp (_String1=".", _String2=".") returned 0 [0177.791] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.791] wcscmp (_String1="..", _String2=".") returned 1 [0177.791] wcscmp (_String1="..", _String2="..") returned 0 [0177.791] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3dad0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.791] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.791] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8187ef0 [0177.791] wcscpy (in: _Dest=0x8187ef0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0177.792] wcscat (in: _Dest=0x8187ef0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" [0177.792] wcscat (in: _Dest=0x8187ef0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json" [0180.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d08 [0180.239] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3dad0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0180.239] FindClose (in: hFindFile=0x3f38198 | out: hFindFile=0x3f38198) returned 1 [0180.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a5f8) returned 1 [0180.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df878) returned 1 [0180.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320b40) returned 1 Thread: id = 4695 os_tid = 0x2418 [0177.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81df990 [0177.792] wcscpy (in: _Dest=0x81df990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0177.792] wcscat (in: _Dest=0x81df990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" [0177.792] wcscat (in: _Dest=0x81df990, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*" [0177.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f086b0 [0177.792] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*", lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0177.793] wcscmp (_String1=".", _String2=".") returned 0 [0177.793] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.793] wcscmp (_String1="..", _String2=".") returned 1 [0177.793] wcscmp (_String1="..", _String2="..") returned 0 [0177.793] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.793] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.793] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8188018 [0177.793] wcscpy (in: _Dest=0x8188018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0177.793] wcscat (in: _Dest=0x8188018, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" [0177.793] wcscat (in: _Dest=0x8188018, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" [0180.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0180.116] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0180.116] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0180.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f086b0) returned 1 [0180.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df990) returned 1 [0180.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334508) returned 1 Thread: id = 4696 os_tid = 0x241c [0177.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81dfaa8 [0177.794] wcscpy (in: _Dest=0x81dfaa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0177.794] wcscat (in: _Dest=0x81dfaa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" [0177.794] wcscat (in: _Dest=0x81dfaa8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*" [0177.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a390 [0177.794] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*", lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38358 [0177.794] wcscmp (_String1=".", _String2=".") returned 0 [0177.794] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.794] wcscmp (_String1="..", _String2=".") returned 1 [0177.794] wcscmp (_String1="..", _String2="..") returned 0 [0177.794] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3db06c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0177.795] wcscmp (_String1="messages.json", _String2=".") returned 1 [0177.795] wcscmp (_String1="messages.json", _String2="..") returned 1 [0177.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8188140 [0177.795] wcscpy (in: _Dest=0x8188140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0177.795] wcscat (in: _Dest=0x8188140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" [0177.795] wcscat (in: _Dest=0x8188140, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" [0180.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0180.119] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3db06c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0180.119] FindClose (in: hFindFile=0x3f38358 | out: hFindFile=0x3f38358) returned 1 [0180.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a390) returned 1 [0180.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfaa8) returned 1 [0180.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332c48) returned 1 Thread: id = 4697 os_tid = 0x2420 [0177.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81dfbc0 [0177.795] wcscpy (in: _Dest=0x81dfbc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0177.795] wcscat (in: _Dest=0x81dfbc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" [0177.795] wcscat (in: _Dest=0x81dfbc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*" [0177.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08de8 [0177.795] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*", lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfaa40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dfaa40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80996d0 [0183.519] wcscmp (_String1=".", _String2=".") returned 0 [0183.519] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfaa40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dfaa40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.520] wcscmp (_String1="..", _String2=".") returned 1 [0183.520] wcscmp (_String1="..", _String2="..") returned 0 [0183.520] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfc1b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.520] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.520] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8401838 [0183.520] wcscpy (in: _Dest=0x8401838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0183.520] wcscat (in: _Dest=0x8401838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" [0183.520] wcscat (in: _Dest=0x8401838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" [0184.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4 [0184.862] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f08de8 | out: lpFindFileData=0x3f08de8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfc1b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.863] FindClose (in: hFindFile=0x80996d0 | out: hFindFile=0x80996d0) returned 1 [0184.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08de8) returned 1 [0184.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfbc0) returned 1 [0184.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334610) returned 1 Thread: id = 4698 os_tid = 0x2430 [0177.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81dfcd8 [0177.796] wcscpy (in: _Dest=0x81dfcd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0177.796] wcscat (in: _Dest=0x81dfcd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" [0177.796] wcscat (in: _Dest=0x81dfcd8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*" [0177.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07d10 [0177.796] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*", lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f10 [0183.749] wcscmp (_String1=".", _String2=".") returned 0 [0183.749] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.749] wcscmp (_String1="..", _String2=".") returned 1 [0183.749] wcscmp (_String1="..", _String2="..") returned 0 [0183.749] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.749] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.749] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8401f28 [0183.749] wcscpy (in: _Dest=0x8401f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0183.750] wcscat (in: _Dest=0x8401f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" [0183.750] wcscat (in: _Dest=0x8401f28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" [0188.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0188.320] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.320] FindClose (in: hFindFile=0x8098f10 | out: hFindFile=0x8098f10) returned 1 [0188.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07d10) returned 1 [0188.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfcd8) returned 1 [0188.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ed8) returned 1 Thread: id = 4699 os_tid = 0x2434 [0177.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81dfdf0 [0177.797] wcscpy (in: _Dest=0x81dfdf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0177.797] wcscat (in: _Dest=0x81dfdf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" [0177.797] wcscat (in: _Dest=0x81dfdf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*" [0177.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09ec0 [0177.797] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*", lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099490 [0183.748] wcscmp (_String1=".", _String2=".") returned 0 [0183.748] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.748] wcscmp (_String1="..", _String2=".") returned 1 [0183.748] wcscmp (_String1="..", _String2="..") returned 0 [0183.748] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6eda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.748] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.748] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x84015e8 [0183.749] wcscpy (in: _Dest=0x84015e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0183.749] wcscat (in: _Dest=0x84015e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" [0183.749] wcscat (in: _Dest=0x84015e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" [0188.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84015e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0188.342] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6eda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.342] FindClose (in: hFindFile=0x8099490 | out: hFindFile=0x8099490) returned 1 [0188.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09ec0) returned 1 [0188.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfdf0) returned 1 [0188.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333fe0) returned 1 Thread: id = 4700 os_tid = 0x2438 [0177.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81dff08 [0177.798] wcscpy (in: _Dest=0x81dff08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0177.798] wcscat (in: _Dest=0x81dff08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" [0177.798] wcscat (in: _Dest=0x81dff08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*" [0177.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0af98 [0177.798] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*", lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e18 [0184.388] wcscmp (_String1=".", _String2=".") returned 0 [0184.388] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.388] wcscmp (_String1="..", _String2=".") returned 1 [0184.388] wcscmp (_String1="..", _String2="..") returned 0 [0184.388] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.388] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.388] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a09a0 [0184.388] wcscpy (in: _Dest=0x148a09a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0184.388] wcscat (in: _Dest=0x148a09a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" [0184.388] wcscat (in: _Dest=0x148a09a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" [0185.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a09a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0185.545] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.545] FindClose (in: hFindFile=0x3f37e18 | out: hFindFile=0x3f37e18) returned 1 [0185.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0af98) returned 1 [0185.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dff08) returned 1 [0185.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83340e8) returned 1 Thread: id = 4701 os_tid = 0x243c [0177.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0020 [0177.798] wcscpy (in: _Dest=0x81e0020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0177.798] wcscat (in: _Dest=0x81e0020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" [0177.798] wcscat (in: _Dest=0x81e0020, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*" [0177.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f092b8 [0177.799] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*", lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f382d8 [0184.387] wcscmp (_String1=".", _String2=".") returned 0 [0184.387] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.387] wcscmp (_String1="..", _String2=".") returned 1 [0184.387] wcscmp (_String1="..", _String2="..") returned 0 [0184.387] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.387] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.387] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0878 [0184.387] wcscpy (in: _Dest=0x148a0878, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0184.387] wcscat (in: _Dest=0x148a0878, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" [0184.387] wcscat (in: _Dest=0x148a0878, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" [0185.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0185.543] FindNextFileW (in: hFindFile=0x3f382d8, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.543] FindClose (in: hFindFile=0x3f382d8 | out: hFindFile=0x3f382d8) returned 1 [0185.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f092b8) returned 1 [0185.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0020) returned 1 [0185.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83341f0) returned 1 Thread: id = 4702 os_tid = 0x2440 [0177.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0138 [0177.804] wcscpy (in: _Dest=0x81e0138, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0177.804] wcscat (in: _Dest=0x81e0138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" [0177.804] wcscat (in: _Dest=0x81e0138, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*" [0177.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0177.804] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38018 [0184.385] wcscmp (_String1=".", _String2=".") returned 0 [0184.386] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.386] wcscmp (_String1="..", _String2=".") returned 1 [0184.386] wcscmp (_String1="..", _String2="..") returned 0 [0184.386] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.386] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.386] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0750 [0184.386] wcscpy (in: _Dest=0x148a0750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0184.386] wcscat (in: _Dest=0x148a0750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" [0184.386] wcscat (in: _Dest=0x148a0750, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" [0185.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0185.540] FindNextFileW (in: hFindFile=0x3f38018, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.540] FindClose (in: hFindFile=0x3f38018 | out: hFindFile=0x3f38018) returned 1 [0185.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0185.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0138) returned 1 [0185.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332930) returned 1 Thread: id = 4703 os_tid = 0x2444 [0177.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0250 [0177.807] wcscpy (in: _Dest=0x81e0250, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0177.807] wcscat (in: _Dest=0x81e0250, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" [0177.807] wcscat (in: _Dest=0x81e0250, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*" [0177.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100870 [0177.807] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*", lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38398 [0184.384] wcscmp (_String1=".", _String2=".") returned 0 [0184.384] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.384] wcscmp (_String1="..", _String2=".") returned 1 [0184.385] wcscmp (_String1="..", _String2="..") returned 0 [0184.385] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.385] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.385] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0628 [0184.385] wcscpy (in: _Dest=0x148a0628, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0184.385] wcscat (in: _Dest=0x148a0628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" [0184.385] wcscat (in: _Dest=0x148a0628, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" [0185.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0185.537] FindNextFileW (in: hFindFile=0x3f38398, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.537] FindClose (in: hFindFile=0x3f38398 | out: hFindFile=0x3f38398) returned 1 [0185.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100870) returned 1 [0185.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0250) returned 1 [0185.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83342f8) returned 1 Thread: id = 4704 os_tid = 0x2448 [0177.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x81e0368 [0177.809] wcscpy (in: _Dest=0x81e0368, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0177.809] wcscat (in: _Dest=0x81e0368, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" [0177.809] wcscat (in: _Dest=0x81e0368, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*" [0177.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101478 [0177.810] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*", lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37658 [0181.752] wcscmp (_String1=".", _String2=".") returned 0 [0181.752] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.752] wcscmp (_String1="..", _String2=".") returned 1 [0181.752] wcscmp (_String1="..", _String2="..") returned 0 [0181.752] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0181.752] wcscmp (_String1="messages.json", _String2=".") returned 1 [0181.752] wcscmp (_String1="messages.json", _String2="..") returned 1 [0181.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8401020 [0181.752] wcscpy (in: _Dest=0x8401020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0181.752] wcscat (in: _Dest=0x8401020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" [0181.752] wcscat (in: _Dest=0x8401020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" [0184.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0184.881] FindNextFileW (in: hFindFile=0x3f37658, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.881] FindClose (in: hFindFile=0x3f37658 | out: hFindFile=0x3f37658) returned 1 [0184.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101478) returned 1 [0184.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0368) returned 1 [0184.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320e58) returned 1 Thread: id = 4705 os_tid = 0x244c [0177.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0480 [0177.810] wcscpy (in: _Dest=0x81e0480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0177.810] wcscat (in: _Dest=0x81e0480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" [0177.810] wcscat (in: _Dest=0x81e0480, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*" [0177.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0177.810] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37818 [0184.383] wcscmp (_String1=".", _String2=".") returned 0 [0184.383] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.383] wcscmp (_String1="..", _String2=".") returned 1 [0184.383] wcscmp (_String1="..", _String2="..") returned 0 [0184.383] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.384] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.384] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0500 [0184.384] wcscpy (in: _Dest=0x148a0500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0184.384] wcscat (in: _Dest=0x148a0500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" [0184.384] wcscat (in: _Dest=0x148a0500, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" [0185.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2974 [0185.535] FindNextFileW (in: hFindFile=0x3f37818, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.535] FindClose (in: hFindFile=0x3f37818 | out: hFindFile=0x3f37818) returned 1 [0185.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0185.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0480) returned 1 [0185.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321bc0) returned 1 Thread: id = 4706 os_tid = 0x2450 [0177.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0598 [0177.811] wcscpy (in: _Dest=0x81e0598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0177.811] wcscat (in: _Dest=0x81e0598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" [0177.811] wcscat (in: _Dest=0x81e0598, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*" [0177.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100fa8 [0177.811] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*", lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37bd8 [0184.382] wcscmp (_String1=".", _String2=".") returned 0 [0184.382] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.382] wcscmp (_String1="..", _String2=".") returned 1 [0184.382] wcscmp (_String1="..", _String2="..") returned 0 [0184.382] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.382] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.382] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a03d8 [0184.383] wcscpy (in: _Dest=0x148a03d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0184.383] wcscat (in: _Dest=0x148a03d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" [0184.383] wcscat (in: _Dest=0x148a03d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" [0185.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a03d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0185.532] FindNextFileW (in: hFindFile=0x3f37bd8, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.532] FindClose (in: hFindFile=0x3f37bd8 | out: hFindFile=0x3f37bd8) returned 1 [0185.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100fa8) returned 1 [0185.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0598) returned 1 [0185.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83219b0) returned 1 Thread: id = 4707 os_tid = 0x2454 [0177.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e06b0 [0177.811] wcscpy (in: _Dest=0x81e06b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0177.811] wcscat (in: _Dest=0x81e06b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" [0177.812] wcscat (in: _Dest=0x81e06b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*" [0177.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101e18 [0177.812] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*", lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ed8 [0184.381] wcscmp (_String1=".", _String2=".") returned 0 [0184.381] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.381] wcscmp (_String1="..", _String2=".") returned 1 [0184.381] wcscmp (_String1="..", _String2="..") returned 0 [0184.381] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.381] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.381] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a02b0 [0184.381] wcscpy (in: _Dest=0x148a02b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0184.381] wcscat (in: _Dest=0x148a02b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" [0184.382] wcscat (in: _Dest=0x148a02b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" [0185.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a02b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c8 [0185.530] FindNextFileW (in: hFindFile=0x3f37ed8, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.530] FindClose (in: hFindFile=0x3f37ed8 | out: hFindFile=0x3f37ed8) returned 1 [0185.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101e18) returned 1 [0185.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e06b0) returned 1 [0185.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83218a8) returned 1 Thread: id = 4708 os_tid = 0x2458 [0177.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e07c8 [0177.812] wcscpy (in: _Dest=0x81e07c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0177.812] wcscat (in: _Dest=0x81e07c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" [0177.812] wcscat (in: _Dest=0x81e07c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*" [0177.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101210 [0177.812] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*", lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0184.408] wcscmp (_String1=".", _String2=".") returned 0 [0184.408] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.408] wcscmp (_String1="..", _String2=".") returned 1 [0184.408] wcscmp (_String1="..", _String2="..") returned 0 [0184.408] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.409] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.409] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a1e70 [0184.409] wcscpy (in: _Dest=0x148a1e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0184.409] wcscat (in: _Dest=0x148a1e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" [0184.409] wcscat (in: _Dest=0x148a1e70, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" [0185.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a1e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0185.653] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.654] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0185.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101210) returned 1 [0185.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e07c8) returned 1 [0185.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83217a0) returned 1 Thread: id = 4709 os_tid = 0x245c [0177.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e08e0 [0177.813] wcscpy (in: _Dest=0x81e08e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0177.813] wcscat (in: _Dest=0x81e08e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" [0177.813] wcscat (in: _Dest=0x81e08e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*" [0177.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100ad8 [0177.813] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*", lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfbd0 [0184.407] wcscmp (_String1=".", _String2=".") returned 0 [0184.407] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.407] wcscmp (_String1="..", _String2=".") returned 1 [0184.407] wcscmp (_String1="..", _String2="..") returned 0 [0184.407] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.407] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.407] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a1d48 [0184.408] wcscpy (in: _Dest=0x148a1d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0184.408] wcscat (in: _Dest=0x148a1d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" [0184.408] wcscat (in: _Dest=0x148a1d48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" [0185.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0185.617] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.617] FindClose (in: hFindFile=0x3dcfbd0 | out: hFindFile=0x3dcfbd0) returned 1 [0185.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100ad8) returned 1 [0185.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e08e0) returned 1 [0185.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321698) returned 1 Thread: id = 4710 os_tid = 0x2460 [0177.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e09f8 [0177.814] wcscpy (in: _Dest=0x81e09f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0177.814] wcscat (in: _Dest=0x81e09f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" [0177.814] wcscat (in: _Dest=0x81e09f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*" [0177.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffc68 [0177.814] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*", lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f58 [0184.380] wcscmp (_String1=".", _String2=".") returned 0 [0184.380] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.380] wcscmp (_String1="..", _String2=".") returned 1 [0184.380] wcscmp (_String1="..", _String2="..") returned 0 [0184.380] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.380] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.380] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0188 [0184.380] wcscpy (in: _Dest=0x148a0188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0184.380] wcscat (in: _Dest=0x148a0188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" [0184.380] wcscat (in: _Dest=0x148a0188, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" [0185.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0185.527] FindNextFileW (in: hFindFile=0x3f37f58, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.527] FindClose (in: hFindFile=0x3f37f58 | out: hFindFile=0x3f37f58) returned 1 [0185.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffc68) returned 1 [0185.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e09f8) returned 1 [0185.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321590) returned 1 Thread: id = 4711 os_tid = 0x2464 [0177.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0b10 [0177.814] wcscpy (in: _Dest=0x81e0b10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0177.814] wcscat (in: _Dest=0x81e0b10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" [0177.814] wcscat (in: _Dest=0x81e0b10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*" [0177.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8102080 [0177.815] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*", lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0050 [0184.406] wcscmp (_String1=".", _String2=".") returned 0 [0184.406] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.406] wcscmp (_String1="..", _String2=".") returned 1 [0184.406] wcscmp (_String1="..", _String2="..") returned 0 [0184.406] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.406] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.406] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a1c20 [0184.406] wcscpy (in: _Dest=0x148a1c20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0184.407] wcscat (in: _Dest=0x148a1c20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" [0184.407] wcscat (in: _Dest=0x148a1c20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" [0185.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a1c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0185.615] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.615] FindClose (in: hFindFile=0x3dd0050 | out: hFindFile=0x3dd0050) returned 1 [0185.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8102080) returned 1 [0185.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0b10) returned 1 [0185.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321488) returned 1 Thread: id = 4712 os_tid = 0x2468 [0177.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0c28 [0177.815] wcscpy (in: _Dest=0x81e0c28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0177.815] wcscat (in: _Dest=0x81e0c28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" [0177.815] wcscat (in: _Dest=0x81e0c28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*" [0177.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe6c0 [0177.815] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*", lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f383d8 [0184.379] wcscmp (_String1=".", _String2=".") returned 0 [0184.379] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.379] wcscmp (_String1="..", _String2=".") returned 1 [0184.379] wcscmp (_String1="..", _String2="..") returned 0 [0184.379] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.379] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.379] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0060 [0184.379] wcscpy (in: _Dest=0x148a0060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0184.379] wcscat (in: _Dest=0x148a0060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" [0184.379] wcscat (in: _Dest=0x148a0060, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" [0185.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0185.524] FindNextFileW (in: hFindFile=0x3f383d8, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.524] FindClose (in: hFindFile=0x3f383d8 | out: hFindFile=0x3f383d8) returned 1 [0185.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe6c0) returned 1 [0185.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0c28) returned 1 [0185.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321380) returned 1 Thread: id = 4713 os_tid = 0x246c [0177.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0d40 [0177.816] wcscpy (in: _Dest=0x81e0d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0177.816] wcscat (in: _Dest=0x81e0d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" [0177.816] wcscat (in: _Dest=0x81e0d40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*" [0177.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81003a0 [0177.816] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*", lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f376d8 [0184.378] wcscmp (_String1=".", _String2=".") returned 0 [0184.378] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.378] wcscmp (_String1="..", _String2=".") returned 1 [0184.378] wcscmp (_String1="..", _String2="..") returned 0 [0184.378] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.378] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.378] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a5e70 [0184.378] wcscpy (in: _Dest=0x148a5e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0184.378] wcscat (in: _Dest=0x148a5e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" [0184.378] wcscat (in: _Dest=0x148a5e70, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" [0185.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a5e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0185.521] FindNextFileW (in: hFindFile=0x3f376d8, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.521] FindClose (in: hFindFile=0x3f376d8 | out: hFindFile=0x3f376d8) returned 1 [0185.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81003a0) returned 1 [0185.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0d40) returned 1 [0185.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321dd0) returned 1 Thread: id = 4714 os_tid = 0x2470 [0177.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0e58 [0177.816] wcscpy (in: _Dest=0x81e0e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0177.816] wcscat (in: _Dest=0x81e0e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" [0177.817] wcscat (in: _Dest=0x81e0e58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*" [0177.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101bb0 [0177.817] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*", lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41d8e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38098 [0184.375] wcscmp (_String1=".", _String2=".") returned 0 [0184.375] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41d8e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.375] wcscmp (_String1="..", _String2=".") returned 1 [0184.376] wcscmp (_String1="..", _String2="..") returned 0 [0184.376] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.376] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.376] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a5d48 [0184.376] wcscpy (in: _Dest=0x148a5d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0184.376] wcscat (in: _Dest=0x148a5d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" [0184.376] wcscat (in: _Dest=0x148a5d48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" [0185.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a5d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0185.519] FindNextFileW (in: hFindFile=0x3f38098, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.519] FindClose (in: hFindFile=0x3f38098 | out: hFindFile=0x3f38098) returned 1 [0185.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101bb0) returned 1 [0185.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0e58) returned 1 [0185.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321ed8) returned 1 Thread: id = 4715 os_tid = 0x2474 [0177.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e0f70 [0177.817] wcscpy (in: _Dest=0x81e0f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0177.817] wcscat (in: _Dest=0x81e0f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" [0177.817] wcscat (in: _Dest=0x81e0f70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*" [0177.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fedf8 [0177.817] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*", lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfdd0 [0184.405] wcscmp (_String1=".", _String2=".") returned 0 [0184.405] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.405] wcscmp (_String1="..", _String2=".") returned 1 [0184.405] wcscmp (_String1="..", _String2="..") returned 0 [0184.405] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.405] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.405] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a1af8 [0184.405] wcscpy (in: _Dest=0x148a1af8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0184.405] wcscat (in: _Dest=0x148a1af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" [0184.405] wcscat (in: _Dest=0x148a1af8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" [0185.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a1af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0185.612] FindNextFileW (in: hFindFile=0x3dcfdd0, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.612] FindClose (in: hFindFile=0x3dcfdd0 | out: hFindFile=0x3dcfdd0) returned 1 [0185.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fedf8) returned 1 [0185.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0f70) returned 1 [0185.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321fe0) returned 1 Thread: id = 4716 os_tid = 0x2478 [0177.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e1088 [0177.818] wcscpy (in: _Dest=0x81e1088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0177.818] wcscat (in: _Dest=0x81e1088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" [0177.818] wcscat (in: _Dest=0x81e1088, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*" [0177.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81016e0 [0177.818] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*", lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0184.404] wcscmp (_String1=".", _String2=".") returned 0 [0184.404] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.404] wcscmp (_String1="..", _String2=".") returned 1 [0184.404] wcscmp (_String1="..", _String2="..") returned 0 [0184.404] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.404] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.404] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a19d0 [0184.404] wcscpy (in: _Dest=0x148a19d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0184.404] wcscat (in: _Dest=0x148a19d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" [0184.404] wcscat (in: _Dest=0x148a19d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json" [0185.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a19d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0185.609] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.609] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0185.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81016e0) returned 1 [0185.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1088) returned 1 [0185.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83220e8) returned 1 Thread: id = 4717 os_tid = 0x247c [0177.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x81e11a0 [0177.818] wcscpy (in: _Dest=0x81e11a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0177.819] wcscat (in: _Dest=0x81e11a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" [0177.819] wcscat (in: _Dest=0x81e11a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*" [0177.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0177.819] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0184.374] wcscmp (_String1=".", _String2=".") returned 0 [0184.374] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.374] wcscmp (_String1="..", _String2=".") returned 1 [0184.374] wcscmp (_String1="..", _String2="..") returned 0 [0184.374] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf6f13200, ftLastWriteTime.dwHighDateTime=0x1cced15, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.374] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.374] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a5c20 [0184.375] wcscpy (in: _Dest=0x148a5c20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0184.375] wcscat (in: _Dest=0x148a5c20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" [0184.375] wcscat (in: _Dest=0x148a5c20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" [0185.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a5c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0185.516] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf6f13200, ftLastWriteTime.dwHighDateTime=0x1cced15, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.516] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0185.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0185.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e11a0) returned 1 [0185.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321278) returned 1 Thread: id = 4718 os_tid = 0x2480 [0178.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8348258 [0178.032] wcscpy (in: _Dest=0x8348258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0178.033] wcscat (in: _Dest=0x8348258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" [0178.033] wcscat (in: _Dest=0x8348258, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*" [0178.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85c78 [0178.033] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*", lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38218 [0184.373] wcscmp (_String1=".", _String2=".") returned 0 [0184.373] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.373] wcscmp (_String1="..", _String2=".") returned 1 [0184.373] wcscmp (_String1="..", _String2="..") returned 0 [0184.373] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.373] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.373] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a5af8 [0184.373] wcscpy (in: _Dest=0x148a5af8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0184.373] wcscat (in: _Dest=0x148a5af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" [0184.374] wcscat (in: _Dest=0x148a5af8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" [0185.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a5af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0185.514] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x3d85c78 | out: lpFindFileData=0x3d85c78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.514] FindClose (in: hFindFile=0x3f38218 | out: hFindFile=0x3f38218) returned 1 [0185.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85c78) returned 1 [0185.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348258) returned 1 [0185.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321170) returned 1 Thread: id = 4719 os_tid = 0x2484 [0178.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif")) returned 0x20 [0186.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0186.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.552] GetLastError () returned 0x5 [0186.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0186.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 4720 os_tid = 0x2488 [0178.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif")) returned 0x20 [0186.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0186.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.595] GetLastError () returned 0x5 [0186.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0186.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 4721 os_tid = 0x248c [0178.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif")) returned 0x20 [0186.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0186.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.593] GetLastError () returned 0x5 [0186.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0186.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 4722 os_tid = 0x2490 [0178.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif")) returned 0x20 [0186.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0186.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.589] GetLastError () returned 0x5 [0186.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0186.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 4723 os_tid = 0x2494 [0178.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif")) returned 0x20 [0186.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0186.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.585] GetLastError () returned 0x5 [0186.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0186.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d098) returned 1 Thread: id = 4724 os_tid = 0x2498 [0178.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif")) returned 0x20 [0186.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0186.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.575] GetLastError () returned 0x5 [0186.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0186.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 Thread: id = 4725 os_tid = 0x249c [0178.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif")) returned 0x20 [0186.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0186.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.563] GetLastError () returned 0x5 [0186.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0186.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d530) returned 1 Thread: id = 4726 os_tid = 0x24a0 [0178.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif")) returned 0x20 [0186.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0186.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.561] GetLastError () returned 0x5 [0186.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0186.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dd10) returned 1 Thread: id = 4727 os_tid = 0x24a4 [0178.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif")) returned 0x20 [0186.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0186.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.559] GetLastError () returned 0x5 [0186.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0186.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11148) returned 1 Thread: id = 4728 os_tid = 0x24a8 [0178.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif")) returned 0x20 [0186.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0186.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.558] GetLastError () returned 0x5 [0186.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0186.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dc68) returned 1 Thread: id = 4729 os_tid = 0x24ac [0178.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif")) returned 0x20 [0186.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0186.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.556] GetLastError () returned 0x5 [0186.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0186.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 4730 os_tid = 0x24b4 [0178.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif")) returned 0x20 [0186.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0186.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.554] GetLastError () returned 0x5 [0186.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0186.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d7d0) returned 1 Thread: id = 4731 os_tid = 0x24b8 [0178.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e111e8 [0178.038] wcscpy (in: _Dest=0x3e111e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0178.038] wcscat (in: _Dest=0x3e111e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0178.038] wcscat (in: _Dest=0x3e111e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*" [0178.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86148 [0178.038] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099010 [0189.305] wcscmp (_String1=".", _String2=".") returned 0 [0189.306] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.318] wcscmp (_String1="..", _String2=".") returned 1 [0189.318] wcscmp (_String1="..", _String2="..") returned 0 [0189.318] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0189.318] wcscmp (_String1="Adobe.css", _String2=".") returned 1 [0189.318] wcscmp (_String1="Adobe.css", _String2="..") returned 1 [0189.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bc98 [0189.318] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0189.318] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0189.318] wcscat (in: _Dest=0x35bc98, _Source="Adobe.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" [0191.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0191.490] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1 [0191.491] wcscmp (_String1="Americana", _String2=".") returned 1 [0191.491] wcscmp (_String1="Americana", _String2="..") returned 1 [0191.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da6c8 [0191.491] wcscpy (in: _Dest=0x81da6c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.491] wcscat (in: _Dest=0x81da6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.491] wcscat (in: _Dest=0x81da6c8, _Source="Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0191.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81da6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0191.492] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1 [0191.492] wcscmp (_String1="Americana.css", _String2=".") returned 1 [0191.492] wcscmp (_String1="Americana.css", _String2="..") returned 1 [0191.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41c68 [0191.492] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.492] wcscat (in: _Dest=0x3d41c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.492] wcscat (in: _Dest=0x3d41c68, _Source="Americana.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" [0191.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0191.493] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f79a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0191.493] wcscmp (_String1="BabyBlue", _String2=".") returned 1 [0191.493] wcscmp (_String1="BabyBlue", _String2="..") returned 1 [0191.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da408 [0191.493] wcscpy (in: _Dest=0x81da408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.493] wcscat (in: _Dest=0x81da408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.493] wcscat (in: _Dest=0x81da408, _Source="BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0191.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81da408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0191.494] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0191.494] wcscmp (_String1="BabyBlue.css", _String2=".") returned 1 [0191.494] wcscmp (_String1="BabyBlue.css", _String2="..") returned 1 [0191.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d410e8 [0191.495] wcscpy (in: _Dest=0x3d410e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.495] wcscat (in: _Dest=0x3d410e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.495] wcscat (in: _Dest=0x3d410e8, _Source="BabyBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" [0191.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d410e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0191.496] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beige.css", cAlternateFileName="")) returned 1 [0191.496] wcscmp (_String1="Beige.css", _String2=".") returned 1 [0191.496] wcscmp (_String1="Beige.css", _String2="..") returned 1 [0191.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9c78 [0191.496] wcscpy (in: _Dest=0x81d9c78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.496] wcscat (in: _Dest=0x81d9c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.496] wcscat (in: _Dest=0x81d9c78, _Source="Beige.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" [0191.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0191.497] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0191.497] wcscmp (_String1="Biscay", _String2=".") returned 1 [0191.497] wcscmp (_String1="Biscay", _String2="..") returned 1 [0191.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d098 [0191.497] wcscpy (in: _Dest=0x3e2d098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.497] wcscat (in: _Dest=0x3e2d098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.497] wcscat (in: _Dest=0x3e2d098, _Source="Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0191.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0191.498] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0191.498] wcscmp (_String1="Biscay.css", _String2=".") returned 1 [0191.498] wcscmp (_String1="Biscay.css", _String2="..") returned 1 [0191.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da148 [0191.498] wcscpy (in: _Dest=0x81da148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.498] wcscat (in: _Dest=0x81da148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.498] wcscat (in: _Dest=0x81da148, _Source="Biscay.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" [0191.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0191.499] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1 [0191.499] wcscmp (_String1="BrightOrange", _String2=".") returned 1 [0191.499] wcscmp (_String1="BrightOrange", _String2="..") returned 1 [0191.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d41f48 [0191.499] wcscpy (in: _Dest=0x3d41f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.499] wcscat (in: _Dest=0x3d41f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.500] wcscat (in: _Dest=0x3d41f48, _Source="BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0191.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d41f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0191.500] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1 [0191.500] wcscmp (_String1="BrightOrange.css", _String2=".") returned 1 [0191.501] wcscmp (_String1="BrightOrange.css", _String2="..") returned 1 [0191.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5d08 [0191.501] wcscpy (in: _Dest=0x81d5d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.501] wcscat (in: _Dest=0x81d5d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.501] wcscat (in: _Dest=0x81d5d08, _Source="BrightOrange.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" [0191.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0191.502] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1 [0191.502] wcscmp (_String1="BrightYellow", _String2=".") returned 1 [0191.502] wcscmp (_String1="BrightYellow", _String2="..") returned 1 [0191.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d41988 [0191.502] wcscpy (in: _Dest=0x3d41988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.502] wcscat (in: _Dest=0x3d41988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.502] wcscat (in: _Dest=0x3d41988, _Source="BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0191.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d41988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0191.503] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd03, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1 [0191.503] wcscmp (_String1="BrightYellow.css", _String2=".") returned 1 [0191.503] wcscmp (_String1="BrightYellow.css", _String2="..") returned 1 [0191.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5dc8 [0191.503] wcscpy (in: _Dest=0x81d5dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.503] wcscat (in: _Dest=0x81d5dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.503] wcscat (in: _Dest=0x81d5dc8, _Source="BrightYellow.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" [0191.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0191.504] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0191.504] wcscmp (_String1="Casual.css", _String2=".") returned 1 [0191.504] wcscmp (_String1="Casual.css", _String2="..") returned 1 [0191.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da778 [0191.504] wcscpy (in: _Dest=0x81da778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.504] wcscat (in: _Dest=0x81da778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.504] wcscat (in: _Dest=0x81da778, _Source="Casual.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" [0191.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0191.505] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0191.505] wcscmp (_String1="Desert", _String2=".") returned 1 [0191.505] wcscmp (_String1="Desert", _String2="..") returned 1 [0191.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d530 [0191.506] wcscpy (in: _Dest=0x3e2d530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.506] wcscat (in: _Dest=0x3e2d530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.506] wcscat (in: _Dest=0x3e2d530, _Source="Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0191.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0191.507] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0191.507] wcscmp (_String1="Desert.css", _String2=".") returned 1 [0191.507] wcscmp (_String1="Desert.css", _String2="..") returned 1 [0191.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81daa38 [0191.507] wcscpy (in: _Dest=0x81daa38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.507] wcscat (in: _Dest=0x81daa38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.507] wcscat (in: _Dest=0x81daa38, _Source="Desert.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" [0191.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daa38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0191.508] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x173, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.css", cAlternateFileName="DISCUS~1.CSS")) returned 1 [0191.508] wcscmp (_String1="Discussion.css", _String2=".") returned 1 [0191.508] wcscmp (_String1="Discussion.css", _String2="..") returned 1 [0191.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d40790 [0191.509] wcscpy (in: _Dest=0x3d40790, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.509] wcscat (in: _Dest=0x3d40790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.509] wcscat (in: _Dest=0x3d40790, _Source="Discussion.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" [0191.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0191.510] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0191.510] wcscmp (_String1="Earthy.css", _String2=".") returned 1 [0191.510] wcscmp (_String1="Earthy.css", _String2="..") returned 1 [0191.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da1f8 [0191.510] wcscpy (in: _Dest=0x81da1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.510] wcscat (in: _Dest=0x81da1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.510] wcscat (in: _Dest=0x81da1f8, _Source="Earthy.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" [0191.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0191.511] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1 [0191.512] wcscmp (_String1="GrayCheck", _String2=".") returned 1 [0191.512] wcscmp (_String1="GrayCheck", _String2="..") returned 1 [0191.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da8d8 [0191.512] wcscpy (in: _Dest=0x81da8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.512] wcscat (in: _Dest=0x81da8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.512] wcscat (in: _Dest=0x81da8d8, _Source="GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0191.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81da8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0191.513] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x46011f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1 [0191.513] wcscmp (_String1="GrayCheck.css", _String2=".") returned 1 [0191.513] wcscmp (_String1="GrayCheck.css", _String2="..") returned 1 [0191.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d409b8 [0191.513] wcscpy (in: _Dest=0x3d409b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.513] wcscat (in: _Dest=0x3d409b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.513] wcscat (in: _Dest=0x3d409b8, _Source="GrayCheck.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" [0191.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d409b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0191.514] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x46011f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0191.514] wcscmp (_String1="GreenTea.css", _String2=".") returned 1 [0191.515] wcscmp (_String1="GreenTea.css", _String2="..") returned 1 [0191.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40848 [0191.515] wcscpy (in: _Dest=0x3d40848, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.515] wcscat (in: _Dest=0x3d40848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.515] wcscat (in: _Dest=0x3d40848, _Source="GreenTea.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" [0191.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0191.516] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1 [0191.516] wcscmp (_String1="LightSpirit.css", _String2=".") returned 1 [0191.516] wcscmp (_String1="LightSpirit.css", _String2="..") returned 1 [0191.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81d5e88 [0191.516] wcscpy (in: _Dest=0x81d5e88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.516] wcscat (in: _Dest=0x81d5e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.516] wcscat (in: _Dest=0x81d5e88, _Source="LightSpirit.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" [0191.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0191.517] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0191.517] wcscmp (_String1="Lime", _String2=".") returned 1 [0191.517] wcscmp (_String1="Lime", _String2="..") returned 1 [0191.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2dd10 [0191.518] wcscpy (in: _Dest=0x3e2dd10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.518] wcscat (in: _Dest=0x3e2dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.518] wcscat (in: _Dest=0x3e2dd10, _Source="Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0191.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0191.519] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0191.519] wcscmp (_String1="Lime.css", _String2=".") returned 1 [0191.519] wcscmp (_String1="Lime.css", _String2="..") returned 1 [0191.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81daae8 [0191.519] wcscpy (in: _Dest=0x81daae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.519] wcscat (in: _Dest=0x81daae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.519] wcscat (in: _Dest=0x81daae8, _Source="Lime.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" [0191.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4 [0191.520] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x715, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0191.520] wcscmp (_String1="Maroon.css", _String2=".") returned 1 [0191.520] wcscmp (_String1="Maroon.css", _String2="..") returned 1 [0191.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81d9858 [0191.521] wcscpy (in: _Dest=0x81d9858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.521] wcscat (in: _Dest=0x81d9858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.521] wcscat (in: _Dest=0x81d9858, _Source="Maroon.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" [0191.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0191.522] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0191.522] wcscmp (_String1="Oasis", _String2=".") returned 1 [0191.522] wcscmp (_String1="Oasis", _String2="..") returned 1 [0191.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dc68 [0191.522] wcscpy (in: _Dest=0x3e2dc68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.522] wcscat (in: _Dest=0x3e2dc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.522] wcscat (in: _Dest=0x3e2dc68, _Source="Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0191.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2dc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0191.524] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0191.524] wcscmp (_String1="Oasis.css", _String2=".") returned 1 [0191.524] wcscmp (_String1="Oasis.css", _String2="..") returned 1 [0191.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da568 [0191.524] wcscpy (in: _Dest=0x81da568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.524] wcscat (in: _Dest=0x81da568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.524] wcscat (in: _Dest=0x81da568, _Source="Oasis.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" [0191.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0191.525] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1 [0191.525] wcscmp (_String1="OliveGreen.css", _String2=".") returned 1 [0191.525] wcscmp (_String1="OliveGreen.css", _String2="..") returned 1 [0191.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d403f8 [0191.526] wcscpy (in: _Dest=0x3d403f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.526] wcscat (in: _Dest=0x3d403f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.526] wcscat (in: _Dest=0x3d403f8, _Source="OliveGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" [0191.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d403f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0191.860] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0191.860] wcscmp (_String1="Premium.css", _String2=".") returned 1 [0191.860] wcscmp (_String1="Premium.css", _String2="..") returned 1 [0191.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d404b0 [0191.860] wcscpy (in: _Dest=0x3d404b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.860] wcscat (in: _Dest=0x3d404b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.860] wcscat (in: _Dest=0x3d404b0, _Source="Premium.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" [0192.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d404b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec [0192.811] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0192.811] wcscmp (_String1="RTF_BOLD.GIF", _String2=".") returned 1 [0192.811] wcscmp (_String1="RTF_BOLD.GIF", _String2="..") returned 1 [0192.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d40340 [0192.811] wcscpy (in: _Dest=0x3d40340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0192.811] wcscat (in: _Dest=0x3d40340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0192.811] wcscat (in: _Dest=0x3d40340, _Source="RTF_BOLD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" [0192.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a8 [0192.812] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe371600, ftCreationTime.dwHighDateTime=0x1ca2bd5, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe371600, ftLastWriteTime.dwHighDateTime=0x1ca2bd5, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0192.812] wcscmp (_String1="rtf_choosefont.gif", _String2=".") returned 1 [0192.812] wcscmp (_String1="rtf_choosefont.gif", _String2="..") returned 1 [0192.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3329e8 [0192.812] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0192.812] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0192.812] wcscat (in: _Dest=0x3329e8, _Source="rtf_choosefont.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" [0192.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c [0192.813] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0192.813] wcscmp (_String1="rtf_italic.gif", _String2=".") returned 1 [0192.814] wcscmp (_String1="rtf_italic.gif", _String2="..") returned 1 [0192.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d40d50 [0192.814] wcscpy (in: _Dest=0x3d40d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0192.814] wcscat (in: _Dest=0x3d40d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0192.814] wcscat (in: _Dest=0x3d40d50, _Source="rtf_italic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" [0192.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0192.815] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf614c600, ftCreationTime.dwHighDateTime=0x1ca2bd7, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf614c600, ftLastWriteTime.dwHighDateTime=0x1ca2bd7, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="RTF_SP~1.GIF")) returned 1 [0192.815] wcscmp (_String1="rtf_spellcheck.gif", _String2=".") returned 1 [0192.815] wcscmp (_String1="rtf_spellcheck.gif", _String2="..") returned 1 [0192.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333768 [0192.815] wcscpy (in: _Dest=0x333768, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0192.815] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0192.815] wcscat (in: _Dest=0x333768, _Source="rtf_spellcheck.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" [0192.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0192.816] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0192.816] wcscmp (_String1="rtf_underline.gif", _String2=".") returned 1 [0192.816] wcscmp (_String1="rtf_underline.gif", _String2="..") returned 1 [0192.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3338e8 [0192.817] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0192.817] wcscat (in: _Dest=0x3338e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0192.817] wcscat (in: _Dest=0x3338e8, _Source="rtf_underline.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" [0192.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3338e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0192.818] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0193.217] wcscmp (_String1="Slate", _String2=".") returned 1 [0193.217] wcscmp (_String1="Slate", _String2="..") returned 1 [0193.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2cf48 [0193.217] wcscpy (in: _Dest=0x3e2cf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0193.217] wcscat (in: _Dest=0x3e2cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0193.217] wcscat (in: _Dest=0x3e2cf48, _Source="Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0198.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0198.314] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xdbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0198.314] wcscmp (_String1="Slate.css", _String2=".") returned 1 [0198.314] wcscmp (_String1="Slate.css", _String2="..") returned 1 [0198.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da2a8 [0198.314] wcscpy (in: _Dest=0x81da2a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.314] wcscat (in: _Dest=0x81da2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.314] wcscat (in: _Dest=0x81da2a8, _Source="Slate.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" [0198.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b30 [0198.315] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1 [0198.315] wcscmp (_String1="SlateBlue.css", _String2=".") returned 1 [0198.315] wcscmp (_String1="SlateBlue.css", _String2="..") returned 1 [0198.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41f48 [0198.316] wcscpy (in: _Dest=0x3d41f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.316] wcscat (in: _Dest=0x3d41f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.316] wcscat (in: _Dest=0x3d41f48, _Source="SlateBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" [0198.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0198.317] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0198.317] wcscmp (_String1="SoftBlue", _String2=".") returned 1 [0198.317] wcscmp (_String1="SoftBlue", _String2="..") returned 1 [0198.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da828 [0198.317] wcscpy (in: _Dest=0x81da828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.317] wcscat (in: _Dest=0x81da828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.317] wcscat (in: _Dest=0x81da828, _Source="SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0198.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81da828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0198.318] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0198.319] wcscmp (_String1="SoftBlue.css", _String2=".") returned 1 [0198.319] wcscmp (_String1="SoftBlue.css", _String2="..") returned 1 [0198.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d41988 [0198.319] wcscpy (in: _Dest=0x3d41988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.319] wcscat (in: _Dest=0x3d41988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.319] wcscat (in: _Dest=0x3d41988, _Source="SoftBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" [0198.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d0 [0198.320] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x460d0670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions", cAlternateFileName="SOLUTI~1")) returned 1 [0198.320] wcscmp (_String1="Solutions", _String2=".") returned 1 [0198.320] wcscmp (_String1="Solutions", _String2="..") returned 1 [0198.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81d9bc8 [0198.320] wcscpy (in: _Dest=0x81d9bc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.320] wcscat (in: _Dest=0x81d9bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.320] wcscat (in: _Dest=0x81d9bc8, _Source="Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0198.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81d9bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0198.322] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x19cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions.css", cAlternateFileName="SOLUTI~1.CSS")) returned 1 [0198.322] wcscmp (_String1="Solutions.css", _String2=".") returned 1 [0198.322] wcscmp (_String1="Solutions.css", _String2="..") returned 1 [0198.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d41d20 [0198.322] wcscpy (in: _Dest=0x3d41d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.322] wcscat (in: _Dest=0x3d41d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.322] wcscat (in: _Dest=0x3d41d20, _Source="Solutions.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" [0198.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0198.324] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Doc.css", cAlternateFileName="SOLUTI~2.CSS")) returned 1 [0198.324] wcscmp (_String1="Solutions_Doc.css", _String2=".") returned 1 [0198.324] wcscmp (_String1="Solutions_Doc.css", _String2="..") returned 1 [0198.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333828 [0198.324] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.324] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.324] wcscat (in: _Dest=0x333828, _Source="Solutions_Doc.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" [0198.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0198.325] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Generic.css", cAlternateFileName="SOLUTI~3.CSS")) returned 1 [0198.326] wcscmp (_String1="Solutions_Generic.css", _String2=".") returned 1 [0198.326] wcscmp (_String1="Solutions_Generic.css", _String2="..") returned 1 [0198.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e35410 [0198.326] wcscpy (in: _Dest=0x3e35410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.326] wcscat (in: _Dest=0x3e35410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.326] wcscat (in: _Dest=0x3e35410, _Source="Solutions_Generic.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" [0198.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0198.327] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Person.css", cAlternateFileName="SOLUTI~4.CSS")) returned 1 [0198.327] wcscmp (_String1="Solutions_Person.css", _String2=".") returned 1 [0198.327] wcscmp (_String1="Solutions_Person.css", _String2="..") returned 1 [0198.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e35988 [0198.327] wcscpy (in: _Dest=0x3e35988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.327] wcscat (in: _Dest=0x3e35988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.327] wcscat (in: _Dest=0x3e35988, _Source="Solutions_Person.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" [0198.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0198.329] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Response.css", cAlternateFileName="SOB0ED~1.CSS")) returned 1 [0198.329] wcscmp (_String1="Solutions_Response.css", _String2=".") returned 1 [0198.329] wcscmp (_String1="Solutions_Response.css", _String2="..") returned 1 [0198.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e354d8 [0198.329] wcscpy (in: _Dest=0x3e354d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.329] wcscat (in: _Dest=0x3e354d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.329] wcscat (in: _Dest=0x3e354d8, _Source="Solutions_Response.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" [0198.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e354d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0 [0198.330] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1 [0198.330] wcscmp (_String1="SpringGreen", _String2=".") returned 1 [0198.330] wcscmp (_String1="SpringGreen", _String2="..") returned 1 [0198.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d40d50 [0198.331] wcscpy (in: _Dest=0x3d40d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.331] wcscat (in: _Dest=0x3d40d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.331] wcscat (in: _Dest=0x3d40d50, _Source="SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0198.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3d40d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0198.332] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1 [0198.332] wcscmp (_String1="SpringGreen.css", _String2=".") returned 1 [0198.332] wcscmp (_String1="SpringGreen.css", _String2="..") returned 1 [0198.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333a68 [0198.332] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.332] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.332] wcscat (in: _Dest=0x333a68, _Source="SpringGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" [0198.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0198.333] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0198.333] wcscmp (_String1="Sts.css", _String2=".") returned 1 [0198.334] wcscmp (_String1="Sts.css", _String2="..") returned 1 [0198.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d9fe8 [0198.334] wcscpy (in: _Dest=0x81d9fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.334] wcscat (in: _Dest=0x81d9fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.334] wcscat (in: _Dest=0x81d9fe8, _Source="Sts.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" [0198.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0198.335] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0198.335] wcscmp (_String1="STS2", _String2=".") returned 1 [0198.335] wcscmp (_String1="STS2", _String2="..") returned 1 [0198.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e2d530 [0198.335] wcscpy (in: _Dest=0x3e2d530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.335] wcscat (in: _Dest=0x3e2d530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.335] wcscat (in: _Dest=0x3e2d530, _Source="STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0198.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2d530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0198.337] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0198.337] wcscmp (_String1="Sts2.css", _String2=".") returned 1 [0198.337] wcscmp (_String1="Sts2.css", _String2="..") returned 1 [0198.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81d9c78 [0198.337] wcscpy (in: _Dest=0x81d9c78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.337] wcscat (in: _Dest=0x81d9c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.337] wcscat (in: _Dest=0x81d9c78, _Source="Sts2.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" [0198.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0198.339] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0198.339] wcscmp (_String1="Swirl", _String2=".") returned 1 [0198.339] wcscmp (_String1="Swirl", _String2="..") returned 1 [0198.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e2dd10 [0198.339] wcscpy (in: _Dest=0x3e2dd10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.339] wcscat (in: _Dest=0x3e2dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.340] wcscat (in: _Dest=0x3e2dd10, _Source="Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0198.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e2dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0198.341] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0198.341] wcscmp (_String1="Swirl.css", _String2=".") returned 1 [0198.341] wcscmp (_String1="Swirl.css", _String2="..") returned 1 [0198.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x81da1f8 [0198.341] wcscpy (in: _Dest=0x81da1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.341] wcscat (in: _Dest=0x81da1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.341] wcscat (in: _Dest=0x81da1f8, _Source="Swirl.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" [0198.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0198.352] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0198.352] wcscmp (_String1="Teal.css", _String2=".") returned 1 [0198.352] wcscmp (_String1="Teal.css", _String2="..") returned 1 [0198.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da778 [0198.352] wcscpy (in: _Dest=0x81da778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.352] wcscat (in: _Dest=0x81da778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.352] wcscat (in: _Dest=0x81da778, _Source="Teal.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" [0198.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0198.353] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x727, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1 [0198.353] wcscmp (_String1="TexturedBlue.css", _String2=".") returned 1 [0198.353] wcscmp (_String1="TexturedBlue.css", _String2="..") returned 1 [0198.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0198.354] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.354] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.354] wcscat (in: _Dest=0x3333a8, _Source="TexturedBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" [0198.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0198.401] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1 [0198.401] wcscmp (_String1="VelvetRose.css", _String2=".") returned 1 [0198.401] wcscmp (_String1="VelvetRose.css", _String2="..") returned 1 [0198.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d40340 [0198.401] wcscpy (in: _Dest=0x3d40340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0198.401] wcscat (in: _Dest=0x3d40340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0198.401] wcscat (in: _Dest=0x3d40340, _Source="VelvetRose.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" [0198.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0198.403] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3d86148 | out: lpFindFileData=0x3d86148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0 [0198.403] FindClose (in: hFindFile=0x8099010 | out: hFindFile=0x8099010) returned 1 [0198.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86148) returned 1 [0198.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e111e8) returned 1 [0198.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 Thread: id = 4732 os_tid = 0x24bc [0178.039] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json")) returned 0x2020 [0178.039] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0189.949] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d04 [0191.367] GetFileSizeEx (in: hFile=0x1d04, lpFileSize=0xafbfcd8 | out: lpFileSize=0xafbfcd8*=281) returned 1 [0191.367] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.367] ReadFile (in: hFile=0x1d04, lpBuffer=0xafbfce4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xafbfcc0, lpOverlapped=0x0 | out: lpBuffer=0xafbfce4*, lpNumberOfBytesRead=0xafbfcc0*=0x4, lpOverlapped=0x0) returned 1 [0191.369] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d429e8 [0191.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42da8 [0191.369] NtQuerySystemTime (in: CurrentTime=0xafbfc60 | out: CurrentTime=0xafbfc60*=132471540592776000) returned 0x0 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x2bebd1c7 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x79251817 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x52c147be [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x6b577e38 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x52f2824a [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x7bfb58bb [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x7b644e14 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x3a2ffbd3 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x3d430342 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x8f3eac1 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x1ab64e0a [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x5ed97e30 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x70e20a1a [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x8d0241f [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x1e5ddcfe [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x2af2d684 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x6357f19e [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x4bc83b71 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x197e6124 [0191.369] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x2d542fe8 [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x3f80abd5 [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x30300ba7 [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x53b5c3ad [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x2191d139 [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x287c95c2 [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x55a3fa4d [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x3d430342 [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x276dbb4e [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x38eab762 [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x204b59dd [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0x2237d807 [0191.370] RtlRandomEx (in: Seed=0xafbfc58 | out: Seed=0xafbfc58) returned 0xd716b24 [0191.377] ReadFile (in: hFile=0x1d04, lpBuffer=0x8262890, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xafbfc54, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesRead=0xafbfc54*=0x119, lpOverlapped=0x0) returned 1 [0191.377] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.378] WriteFile (in: hFile=0x1d04, lpBuffer=0x8266498*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xafbfc58, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesWritten=0xafbfc58*=0x119, lpOverlapped=0x0) returned 1 [0195.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e28 [0195.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9680 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9680) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5028) returned 1 [0195.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69540 [0195.955] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.955] WriteFile (in: hFile=0x1d04, lpBuffer=0x30bba48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xafbfccc, lpOverlapped=0x0 | out: lpBuffer=0x30bba48*, lpNumberOfBytesWritten=0xafbfccc*=0x10c, lpOverlapped=0x0) returned 1 [0196.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba48) returned 1 [0196.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69570) returned 1 [0196.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9680) returned 1 [0196.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69540) returned 1 [0196.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e28) returned 1 [0196.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0196.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0196.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0196.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8b80 [0196.427] wcscpy (in: _Dest=0x3dd8b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" [0196.427] wcscat (in: _Dest=0x3dd8b80, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json.f0dbec" [0196.427] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0xafbfc50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8332d08 [0196.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332d08) returned 1 [0196.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04f60) returned 1 [0196.748] NtQueryInformationFile (in: FileHandle=0x1d04, IoStatusBlock=0xafbfc28, FileInformation=0xafbfc30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xafbfc28, FileInformation=0xafbfc30) returned 0x0 [0196.748] NtSetInformationFile (FileHandle=0x1d04, IoStatusBlock=0xafbfc28, FileInformation=0xafbfc30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0196.954] FlushFileBuffers (hFile=0x1d04) returned 1 [0196.969] CloseHandle (hObject=0x1d04) returned 1 [0197.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0678 [0197.228] wcscpy (in: _Dest=0x81f0678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" [0197.229] wcscat (in: _Dest=0x81f0678, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\F0DBEC-Readme.txt" [0197.229] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0197.229] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15fc [0197.456] WriteFile (in: hFile=0x15fc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xafbfc74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xafbfc74*=0x70c, lpOverlapped=0x0) returned 1 [0197.924] CloseHandle (hObject=0x15fc) returned 1 [0197.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0678) returned 1 [0197.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2d68) returned 1 Thread: id = 4733 os_tid = 0x24c0 [0178.040] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json")) returned 0x2020 [0182.024] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0189.958] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a84 [0191.550] GetFileSizeEx (in: hFile=0x2a84, lpFileSize=0x983f9d8 | out: lpFileSize=0x983f9d8*=319) returned 1 [0191.550] SetFilePointerEx (in: hFile=0x2a84, liDistanceToMove=0x13b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.550] ReadFile (in: hFile=0x2a84, lpBuffer=0x983f9e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x983f9c0, lpOverlapped=0x0 | out: lpBuffer=0x983f9e4*, lpNumberOfBytesRead=0x983f9c0*=0x4, lpOverlapped=0x0) returned 1 [0191.552] SetFilePointerEx (in: hFile=0x2a84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42df8 [0191.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42628 [0191.553] NtQuerySystemTime (in: CurrentTime=0x983f960 | out: CurrentTime=0x983f960*=132471540594648000) returned 0x0 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x236f4734 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x6f3b2653 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x39a2b08d [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x2cab33c9 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x3b5f937a [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x173b7ae7 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x31c5cd54 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x54b52056 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x7cb3943c [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x43f2f5cc [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x54874eed [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x231e20f3 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x178fd5 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x5abbc3eb [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x6f00fe56 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x351d2b38 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x350f2820 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x7221b7e0 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x6999b0c0 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x4b687fa4 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x3aa205a4 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x7f7f1ad7 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x53a98451 [0191.553] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x5347a127 [0191.554] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x66e2baa [0191.554] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x68df5e8c [0191.554] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x62f9e101 [0191.554] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x6513f596 [0191.554] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x6f033bb0 [0191.554] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x1bad1b51 [0191.554] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x16758447 [0191.554] RtlRandomEx (in: Seed=0x983f958 | out: Seed=0x983f958) returned 0x8f4aacf [0191.564] ReadFile (in: hFile=0x2a84, lpBuffer=0x82718b0, nNumberOfBytesToRead=0x13f, lpNumberOfBytesRead=0x983f954, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesRead=0x983f954*=0x13f, lpOverlapped=0x0) returned 1 [0191.564] SetFilePointerEx (in: hFile=0x2a84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.564] WriteFile (in: hFile=0x2a84, lpBuffer=0x82754b8*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x983f958, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesWritten=0x983f958*=0x13f, lpOverlapped=0x0) returned 1 [0195.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312ae0 [0195.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312a90 [0195.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312a90) returned 1 [0195.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0195.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0195.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 [0195.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a110) returned 1 [0195.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69480 [0195.993] SetFilePointerEx (in: hFile=0x2a84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.993] WriteFile (in: hFile=0x2a84, lpBuffer=0x30bc420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x983f9cc, lpOverlapped=0x0 | out: lpBuffer=0x30bc420*, lpNumberOfBytesWritten=0x983f9cc*=0x10c, lpOverlapped=0x0) returned 1 [0196.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0196.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694b0) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312a90) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69480) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312ae0) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d58) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42830) returned 1 [0196.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f3648 [0196.437] wcscpy (in: _Dest=0x81f3648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" [0196.437] wcscat (in: _Dest=0x81f3648, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json.f0dbec" [0196.437] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0x983f950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8332f98 [0196.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332f98) returned 1 [0196.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09ad8) returned 1 [0196.756] NtQueryInformationFile (in: FileHandle=0x2a84, IoStatusBlock=0x983f928, FileInformation=0x983f930, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x983f928, FileInformation=0x983f930) returned 0x0 [0196.756] NtSetInformationFile (FileHandle=0x2a84, IoStatusBlock=0x983f928, FileInformation=0x983f930, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3648) returned 1 [0196.971] FlushFileBuffers (hFile=0x2a84) returned 1 [0196.977] CloseHandle (hObject=0x2a84) returned 1 [0197.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f09f0 [0197.279] wcscpy (in: _Dest=0x81f09f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" [0197.279] wcscat (in: _Dest=0x81f09f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\F0DBEC-Readme.txt" [0197.279] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0197.279] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15f8 [0197.457] WriteFile (in: hFile=0x15f8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x983f974, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x983f974*=0x70c, lpOverlapped=0x0) returned 1 [0197.931] CloseHandle (hObject=0x15f8) returned 1 [0197.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f09f0) returned 1 [0197.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2e90) returned 1 Thread: id = 4734 os_tid = 0x24c4 [0178.041] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json")) returned 0x2020 [0182.025] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0189.943] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cf8 [0191.328] GetFileSizeEx (in: hFile=0x1cf8, lpFileSize=0xadafba0 | out: lpFileSize=0xadafba0*=293) returned 1 [0191.328] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x121, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.328] ReadFile (in: hFile=0x1cf8, lpBuffer=0xadafbac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xadafb88, lpOverlapped=0x0 | out: lpBuffer=0xadafbac*, lpNumberOfBytesRead=0xadafb88*=0x4, lpOverlapped=0x0) returned 1 [0191.330] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0191.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d422b8 [0191.330] NtQuerySystemTime (in: CurrentTime=0xadafb28 | out: CurrentTime=0xadafb28*=132471540592308000) returned 0x0 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x66e11317 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x5d4498f6 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x6276f53b [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x442ca817 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0xad19c40 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x1538c60f [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x1d4c9de0 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x634f9281 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x5c277c46 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x628983a4 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x564e819 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x2909f737 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x66aa5ff1 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x133e1b97 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x15751d29 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x3a9f12b [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x4cee75af [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x615d7594 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x48cd5fc0 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x3b4dd0ef [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x1074a8a4 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x2c361c0d [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x53a573b5 [0191.330] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x4e616db [0191.331] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x582a0d3d [0191.331] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x9a80ac9 [0191.331] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x34dc2e1c [0191.331] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x1c9f2dff [0191.331] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x2dd74dde [0191.331] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x50d44b43 [0191.331] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x1785bb78 [0191.331] RtlRandomEx (in: Seed=0xadafb20 | out: Seed=0xadafb20) returned 0x46dc8621 [0191.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0191.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0191.339] ReadFile (in: hFile=0x1cf8, lpBuffer=0x824c060, nNumberOfBytesToRead=0x125, lpNumberOfBytesRead=0xadafb1c, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesRead=0xadafb1c*=0x125, lpOverlapped=0x0) returned 1 [0191.339] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.339] WriteFile (in: hFile=0x1cf8, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0xadafb20, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0xadafb20*=0x125, lpOverlapped=0x0) returned 1 [0195.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0195.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca378 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca378) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3768) returned 1 [0195.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68f70 [0195.941] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.941] WriteFile (in: hFile=0x1cf8, lpBuffer=0x30bb5e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xadafb94, lpOverlapped=0x0 | out: lpBuffer=0x30bb5e8*, lpNumberOfBytesWritten=0xadafb94*=0x10c, lpOverlapped=0x0) returned 1 [0196.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0196.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ee0) returned 1 [0196.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca378) returned 1 [0196.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f70) returned 1 [0196.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0196.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436b8) returned 1 [0196.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42060) returned 1 [0196.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420d8) returned 1 [0196.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405670 [0196.407] wcscpy (in: _Dest=0x8405670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" [0196.407] wcscat (in: _Dest=0x8405670, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json.f0dbec" [0196.407] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0xadafb18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8332930 [0196.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332930) returned 1 [0196.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f2760) returned 1 [0196.744] NtQueryInformationFile (in: FileHandle=0x1cf8, IoStatusBlock=0xadafaf0, FileInformation=0xadafaf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xadafaf0, FileInformation=0xadafaf8) returned 0x0 [0196.744] NtSetInformationFile (FileHandle=0x1cf8, IoStatusBlock=0xadafaf0, FileInformation=0xadafaf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405670) returned 1 [0196.945] FlushFileBuffers (hFile=0x1cf8) returned 1 [0196.964] CloseHandle (hObject=0x1cf8) returned 1 [0197.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0550 [0197.227] wcscpy (in: _Dest=0x81f0550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" [0197.227] wcscat (in: _Dest=0x81f0550, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\F0DBEC-Readme.txt" [0197.227] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0197.227] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1940 [0197.455] WriteFile (in: hFile=0x1940, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xadafb3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xadafb3c*=0x70c, lpOverlapped=0x0) returned 1 [0197.916] CloseHandle (hObject=0x1940) returned 1 [0197.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0550) returned 1 [0197.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2fb8) returned 1 Thread: id = 4735 os_tid = 0x24c8 [0178.042] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json")) returned 0x2020 [0182.025] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0189.944] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cfc [0191.341] GetFileSizeEx (in: hFile=0x1cfc, lpFileSize=0xb33f8d0 | out: lpFileSize=0xb33f8d0*=258) returned 1 [0191.341] SetFilePointerEx (in: hFile=0x1cfc, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.341] ReadFile (in: hFile=0x1cfc, lpBuffer=0xb33f8dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb33f8b8, lpOverlapped=0x0 | out: lpBuffer=0xb33f8dc*, lpNumberOfBytesRead=0xb33f8b8*=0x4, lpOverlapped=0x0) returned 1 [0191.342] SetFilePointerEx (in: hFile=0x1cfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d422b8 [0191.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421c8 [0191.342] NtQuerySystemTime (in: CurrentTime=0xb33f858 | out: CurrentTime=0xb33f858*=132471540592464000) returned 0x0 [0191.342] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x34b82948 [0191.342] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x66a7fa2a [0191.342] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x7ccec3d1 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x3a48d442 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x6fa17203 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x71e77701 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x442ca817 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x7c270f01 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x39763b00 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x4ead6d2e [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x6796afa2 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x4826e4a3 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x483068c1 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x6a124fd5 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x41fdce6a [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x2bb889d9 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0xe06773a [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x101b49e0 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x2f19c673 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x66470a14 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x5347a127 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x75afd9bb [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x24f6aafa [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x34dc2e1c [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x480540c3 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x4cee75af [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x53942cb [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x23bf49bd [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x627956c1 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x6fa17203 [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x276dbb4e [0191.343] RtlRandomEx (in: Seed=0xb33f850 | out: Seed=0xb33f850) returned 0x7dc3f2de [0191.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8253870 [0191.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0191.352] ReadFile (in: hFile=0x1cfc, lpBuffer=0x8253870, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0xb33f84c, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0xb33f84c*=0x102, lpOverlapped=0x0) returned 1 [0191.352] SetFilePointerEx (in: hFile=0x1cfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.352] WriteFile (in: hFile=0x1cfc, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xb33f850, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0xb33f850*=0x102, lpOverlapped=0x0) returned 1 [0195.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca300 [0195.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ab8 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3f48) returned 1 [0195.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e80 [0195.945] SetFilePointerEx (in: hFile=0x1cfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.945] WriteFile (in: hFile=0x1cfc, lpBuffer=0x30bb930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb33f8c4, lpOverlapped=0x0 | out: lpBuffer=0x30bb930*, lpNumberOfBytesWritten=0xb33f8c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 [0196.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68eb0) returned 1 [0196.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0196.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e80) returned 1 [0196.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0196.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422b8) returned 1 [0196.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42150) returned 1 [0196.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0196.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84057a8 [0196.410] wcscpy (in: _Dest=0x84057a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" [0196.410] wcscat (in: _Dest=0x84057a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json.f0dbec" [0196.410] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0xb33f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8332a78 [0196.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332a78) returned 1 [0196.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fff00) returned 1 [0196.749] NtQueryInformationFile (in: FileHandle=0x1cfc, IoStatusBlock=0xb33f820, FileInformation=0xb33f828, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb33f820, FileInformation=0xb33f828) returned 0x0 [0196.749] NtSetInformationFile (FileHandle=0x1cfc, IoStatusBlock=0xb33f820, FileInformation=0xb33f828, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84057a8) returned 1 [0196.958] FlushFileBuffers (hFile=0x1cfc) returned 1 [0196.973] CloseHandle (hObject=0x1cfc) returned 1 [0197.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f07a0 [0197.231] wcscpy (in: _Dest=0x81f07a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" [0197.231] wcscat (in: _Dest=0x81f07a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\F0DBEC-Readme.txt" [0197.231] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0197.231] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194c [0197.455] WriteFile (in: hFile=0x194c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb33f86c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb33f86c*=0x70c, lpOverlapped=0x0) returned 1 [0197.920] CloseHandle (hObject=0x194c) returned 1 [0197.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f07a0) returned 1 [0197.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e30e0) returned 1 Thread: id = 4736 os_tid = 0x24cc [0178.042] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json")) returned 0x2020 [0178.042] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0189.944] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d00 [0191.353] GetFileSizeEx (in: hFile=0x1d00, lpFileSize=0xb04f998 | out: lpFileSize=0xb04f998*=261) returned 1 [0191.353] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x101, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.353] ReadFile (in: hFile=0x1d00, lpBuffer=0xb04f9a4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb04f980, lpOverlapped=0x0 | out: lpBuffer=0xb04f9a4*, lpNumberOfBytesRead=0xb04f980*=0x4, lpOverlapped=0x0) returned 1 [0191.355] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421c8 [0191.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d429e8 [0191.355] NtQuerySystemTime (in: CurrentTime=0xb04f920 | out: CurrentTime=0xb04f920*=132471540592620000) returned 0x0 [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x37469b2c [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x5d4498f6 [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x41b701c8 [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x57cc2439 [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x38b9dae [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0xb43b9ac [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x4853c28c [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x6965d7 [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x77aadcb6 [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x755c6837 [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x25684992 [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x137e32fb [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x28f2a260 [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x558e7b0e [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x38b9dae [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x38056bed [0191.355] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0xab662bb [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x2ad65761 [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x5bdaaf2d [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x167b23a4 [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x1cd1e399 [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x3a48d442 [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x75542e59 [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x65732cd8 [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x66a7fa2a [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x62cf0841 [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x3b5f937a [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x513962fe [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x747b84df [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x1ac268c3 [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x6a124fd5 [0191.356] RtlRandomEx (in: Seed=0xb04f918 | out: Seed=0xb04f918) returned 0x303d0d0 [0191.365] ReadFile (in: hFile=0x1d00, lpBuffer=0x825b080, nNumberOfBytesToRead=0x105, lpNumberOfBytesRead=0xb04f914, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesRead=0xb04f914*=0x105, lpOverlapped=0x0) returned 1 [0191.365] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.365] WriteFile (in: hFile=0x1d00, lpBuffer=0x825ec88*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0xb04f918, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesWritten=0xb04f918*=0x105, lpOverlapped=0x0) returned 1 [0195.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9dd8 [0195.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3690) returned 1 [0195.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e20 [0195.950] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.950] WriteFile (in: hFile=0x1d00, lpBuffer=0x30bc0d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb04f98c, lpOverlapped=0x0 | out: lpBuffer=0x30bc0d8*, lpNumberOfBytesWritten=0xb04f98c*=0x10c, lpOverlapped=0x0) returned 1 [0196.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0196.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d60) returned 1 [0196.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0196.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e20) returned 1 [0196.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9dd8) returned 1 [0196.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421c8) returned 1 [0196.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0196.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0196.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8df0 [0196.419] wcscpy (in: _Dest=0x3dd8df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" [0196.419] wcscat (in: _Dest=0x3dd8df0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json.f0dbec" [0196.419] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0xb04f910, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8332bc0 [0196.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332bc0) returned 1 [0196.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830af20) returned 1 [0196.745] NtQueryInformationFile (in: FileHandle=0x1d00, IoStatusBlock=0xb04f8e8, FileInformation=0xb04f8f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb04f8e8, FileInformation=0xb04f8f0) returned 0x0 [0196.746] NtSetInformationFile (FileHandle=0x1d00, IoStatusBlock=0xb04f8e8, FileInformation=0xb04f8f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8df0) returned 1 [0196.949] FlushFileBuffers (hFile=0x1d00) returned 1 [0196.960] CloseHandle (hObject=0x1d00) returned 1 [0197.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0428 [0197.225] wcscpy (in: _Dest=0x81f0428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" [0197.225] wcscat (in: _Dest=0x81f0428, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\F0DBEC-Readme.txt" [0197.225] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0197.226] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1910 [0197.454] WriteFile (in: hFile=0x1910, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb04f934, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb04f934*=0x70c, lpOverlapped=0x0) returned 1 [0197.913] CloseHandle (hObject=0x1910) returned 1 [0197.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0428) returned 1 [0197.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3208) returned 1 Thread: id = 4737 os_tid = 0x24d0 [0178.043] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json")) returned 0x2020 [0182.026] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0189.969] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcdc [0191.642] GetFileSizeEx (in: hFile=0xcdc, lpFileSize=0xb63f940 | out: lpFileSize=0xb63f940*=264) returned 1 [0191.642] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.642] ReadFile (in: hFile=0xcdc, lpBuffer=0xb63f94c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb63f928, lpOverlapped=0x0 | out: lpBuffer=0xb63f94c*, lpNumberOfBytesRead=0xb63f928*=0x4, lpOverlapped=0x0) returned 1 [0191.644] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43758 [0191.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0191.645] NtQuerySystemTime (in: CurrentTime=0xb63f8c8 | out: CurrentTime=0xb63f8c8*=132471540595428000) returned 0x0 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0xa3ae36 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x49b23924 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x494771f6 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x2f427058 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x6330af3 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x7643725a [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0xaad3544 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x73d91fc4 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x2d54198d [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x7426f432 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x5dccf63a [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x5899df97 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x5e705ae2 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x1c637ed1 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x12276d60 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x1ecc3931 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x5fcbcac1 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0xab662bb [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x60217c41 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x5c199bd2 [0191.645] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x385a7d77 [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x42bb5b26 [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x5af5a21f [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0xc40edcf [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x2683b807 [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x4ff5bef2 [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x59bca223 [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x1390e43d [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x7576803e [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x1fa28db0 [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x433026e8 [0191.646] RtlRandomEx (in: Seed=0xb63f8c0 | out: Seed=0xb63f8c0) returned 0x77cd48a3 [0191.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148bc890 [0191.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148c0498 [0191.657] ReadFile (in: hFile=0xcdc, lpBuffer=0x148bc890, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xb63f8bc, lpOverlapped=0x0 | out: lpBuffer=0x148bc890*, lpNumberOfBytesRead=0xb63f8bc*=0x108, lpOverlapped=0x0) returned 1 [0191.657] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.657] WriteFile (in: hFile=0xcdc, lpBuffer=0x148c0498*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xb63f8c0, lpOverlapped=0x0 | out: lpBuffer=0x148c0498*, lpNumberOfBytesWritten=0xb63f8c0*=0x108, lpOverlapped=0x0) returned 1 [0196.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344418 [0196.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3443a0 [0196.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3443a0) returned 1 [0196.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148c0498) returned 1 [0196.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148bc890) returned 1 [0196.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 [0196.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aae8) returned 1 [0196.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69300 [0196.009] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.009] WriteFile (in: hFile=0xcdc, lpBuffer=0x30bd028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb63f934, lpOverlapped=0x0 | out: lpBuffer=0x30bd028*, lpNumberOfBytesWritten=0xb63f934*=0x10c, lpOverlapped=0x0) returned 1 [0196.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0196.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69330) returned 1 [0196.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3443a0) returned 1 [0196.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69300) returned 1 [0196.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344418) returned 1 [0196.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43758) returned 1 [0196.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432a8) returned 1 [0196.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43320) returned 1 [0196.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f3d98 [0196.476] wcscpy (in: _Dest=0x81f3d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" [0196.476] wcscat (in: _Dest=0x81f3d98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json.f0dbec" [0196.476] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0xb63f8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8333748 [0196.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333748) returned 1 [0196.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f5d48) returned 1 [0196.768] NtQueryInformationFile (in: FileHandle=0xcdc, IoStatusBlock=0xb63f890, FileInformation=0xb63f898, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb63f890, FileInformation=0xb63f898) returned 0x0 [0196.768] NtSetInformationFile (FileHandle=0xcdc, IoStatusBlock=0xb63f890, FileInformation=0xb63f898, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3d98) returned 1 [0196.998] FlushFileBuffers (hFile=0xcdc) returned 1 [0197.013] CloseHandle (hObject=0xcdc) returned 1 [0197.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0e90 [0197.292] wcscpy (in: _Dest=0x81f0e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" [0197.292] wcscat (in: _Dest=0x81f0e90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\F0DBEC-Readme.txt" [0197.292] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0197.292] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c8 [0197.462] WriteFile (in: hFile=0x22c8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb63f8dc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb63f8dc*=0x70c, lpOverlapped=0x0) returned 1 [0197.961] CloseHandle (hObject=0x22c8) returned 1 [0197.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0e90) returned 1 [0197.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3330) returned 1 Thread: id = 4738 os_tid = 0x24d4 [0178.044] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json")) returned 0x2020 [0178.044] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.969] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd04 [0191.658] GetFileSizeEx (in: hFile=0xd04, lpFileSize=0xad6fa60 | out: lpFileSize=0xad6fa60*=263) returned 1 [0191.658] SetFilePointerEx (in: hFile=0xd04, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.658] ReadFile (in: hFile=0xd04, lpBuffer=0xad6fa6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad6fa48, lpOverlapped=0x0 | out: lpBuffer=0xad6fa6c*, lpNumberOfBytesRead=0xad6fa48*=0x4, lpOverlapped=0x0) returned 1 [0191.660] SetFilePointerEx (in: hFile=0xd04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0191.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43398 [0191.661] NtQuerySystemTime (in: CurrentTime=0xad6f9e8 | out: CurrentTime=0xad6f9e8*=132471540595584000) returned 0x0 [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x65ae68c1 [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x7a7b1d3a [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x7f43ed6 [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x25c5d97c [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x1aba9989 [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x1f5810ee [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x3da54324 [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x29fa539d [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0xc661eb4 [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x542a55a3 [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x49e294be [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x4e67454b [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x46aefba4 [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x469d436a [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x7b24e32 [0191.661] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x3149c517 [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x41474b93 [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x1dd20d90 [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x3ab3b7ae [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x5cfc40be [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x10693aad [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x5542d42f [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x31cf39a9 [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x1505fa42 [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x3deca132 [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x26aa8587 [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x105d7696 [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x57d4b46e [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x37161b7d [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x3ad61c2e [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x26a5fb7e [0191.662] RtlRandomEx (in: Seed=0xad6f9e0 | out: Seed=0xad6f9e0) returned 0x596da935 [0191.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0191.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814a060 [0191.674] ReadFile (in: hFile=0xd04, lpBuffer=0x8146458, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0xad6f9dc, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesRead=0xad6f9dc*=0x107, lpOverlapped=0x0) returned 1 [0191.674] SetFilePointerEx (in: hFile=0xd04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.674] WriteFile (in: hFile=0xd04, lpBuffer=0x814a060*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0xad6f9e0, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesWritten=0xad6f9e0*=0x107, lpOverlapped=0x0) returned 1 [0196.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344288 [0196.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344350 [0196.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344350) returned 1 [0196.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0196.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0196.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0196.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3f00) returned 1 [0196.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69360 [0196.011] SetFilePointerEx (in: hFile=0xd04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.011] WriteFile (in: hFile=0xd04, lpBuffer=0x30bd370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xad6fa54, lpOverlapped=0x0 | out: lpBuffer=0x30bd370*, lpNumberOfBytesWritten=0xad6fa54*=0x10c, lpOverlapped=0x0) returned 1 [0196.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0196.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69390) returned 1 [0196.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344350) returned 1 [0196.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69360) returned 1 [0196.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344288) returned 1 [0196.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0196.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0196.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434b0) returned 1 [0196.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f3ed0 [0196.479] wcscpy (in: _Dest=0x81f3ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" [0196.479] wcscat (in: _Dest=0x81f3ed0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json.f0dbec" [0196.479] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json.f0dbec", NtPathName=0xad6f9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8333890 [0196.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333890) returned 1 [0196.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f9df8) returned 1 [0196.769] NtQueryInformationFile (in: FileHandle=0xd04, IoStatusBlock=0xad6f9b0, FileInformation=0xad6f9b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xad6f9b0, FileInformation=0xad6f9b8) returned 0x0 [0196.769] NtSetInformationFile (FileHandle=0xd04, IoStatusBlock=0xad6f9b0, FileInformation=0xad6f9b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3ed0) returned 1 [0197.002] FlushFileBuffers (hFile=0xd04) returned 1 [0197.017] CloseHandle (hObject=0xd04) returned 1 [0197.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0fb8 [0197.293] wcscpy (in: _Dest=0x81f0fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" [0197.294] wcscat (in: _Dest=0x81f0fb8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\F0DBEC-Readme.txt" [0197.294] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\f0dbec-readme.txt")) returned 0xffffffff [0197.294] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd04 [0197.462] WriteFile (in: hFile=0xd04, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xad6f9fc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xad6f9fc*=0x70c, lpOverlapped=0x0) returned 1 [0197.966] CloseHandle (hObject=0xd04) returned 1 [0197.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0fb8) returned 1 [0197.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3458) returned 1 Thread: id = 4739 os_tid = 0x24d8 [0178.045] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json")) returned 0x2020 [0182.027] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.969] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22c8 [0191.675] GetFileSizeEx (in: hFile=0x22c8, lpFileSize=0xa2afd00 | out: lpFileSize=0xa2afd00*=345) returned 1 [0191.675] SetFilePointerEx (in: hFile=0x22c8, liDistanceToMove=0x155, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.675] ReadFile (in: hFile=0x22c8, lpBuffer=0xa2afd0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa2afce8, lpOverlapped=0x0 | out: lpBuffer=0xa2afd0c*, lpNumberOfBytesRead=0xa2afce8*=0x4, lpOverlapped=0x0) returned 1 [0191.677] SetFilePointerEx (in: hFile=0x22c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43398 [0191.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43550 [0191.677] NtQuerySystemTime (in: CurrentTime=0xa2afc88 | out: CurrentTime=0xa2afc88*=132471540595896000) returned 0x0 [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x24f6aafa [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x364a19fd [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x528fe28 [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x289dd18b [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x15beefe [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x670049c [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x7881db7 [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x5dd15b82 [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x452e4719 [0191.677] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x5f4b4081 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x37dfa2ba [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x5286cf26 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x788eaf2f [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x43675e7a [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x5837d5bb [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x733d6bf1 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x4cb576a4 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x1b3da831 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x461a4105 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x3f59ff36 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x4380ef25 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x5f5d157f [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x5ecab641 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x4abd0f40 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x6f7a7109 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x436b45d [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x6332aa65 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x45c1a695 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x501633d3 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x3709f7f1 [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0x6f26f9be [0191.678] RtlRandomEx (in: Seed=0xa2afc80 | out: Seed=0xa2afc80) returned 0xc1faccb [0191.689] ReadFile (in: hFile=0x22c8, lpBuffer=0x814dc68, nNumberOfBytesToRead=0x159, lpNumberOfBytesRead=0xa2afc7c, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesRead=0xa2afc7c*=0x159, lpOverlapped=0x0) returned 1 [0191.689] SetFilePointerEx (in: hFile=0x22c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.689] WriteFile (in: hFile=0x22c8, lpBuffer=0x8151870*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0xa2afc80, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesWritten=0xa2afc80*=0x159, lpOverlapped=0x0) returned 1 [0196.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344328 [0196.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3443c8 [0196.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3443c8) returned 1 [0196.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0196.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0196.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d18) returned 1 [0196.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5100) returned 1 [0196.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e693c0 [0196.013] SetFilePointerEx (in: hFile=0x22c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.013] WriteFile (in: hFile=0x22c8, lpBuffer=0x30bc768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa2afcf4, lpOverlapped=0x0 | out: lpBuffer=0x30bc768*, lpNumberOfBytesWritten=0xa2afcf4*=0x10c, lpOverlapped=0x0) returned 1 [0196.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0196.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693f0) returned 1 [0196.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3443c8) returned 1 [0196.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693c0) returned 1 [0196.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344328) returned 1 [0196.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43398) returned 1 [0196.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435f0) returned 1 [0196.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0196.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4140 [0196.484] wcscpy (in: _Dest=0x81f4140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" [0196.484] wcscat (in: _Dest=0x81f4140, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json.f0dbec" [0196.484] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0xa2afc78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8333b20 [0196.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333b20) returned 1 [0196.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ff210) returned 1 [0196.772] NtQueryInformationFile (in: FileHandle=0x22c8, IoStatusBlock=0xa2afc50, FileInformation=0xa2afc58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa2afc50, FileInformation=0xa2afc58) returned 0x0 [0196.772] NtSetInformationFile (FileHandle=0x22c8, IoStatusBlock=0xa2afc50, FileInformation=0xa2afc58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4140) returned 1 [0197.012] FlushFileBuffers (hFile=0x22c8) returned 1 [0197.021] CloseHandle (hObject=0x22c8) returned 1 [0197.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f10e0 [0197.295] wcscpy (in: _Dest=0x81f10e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" [0197.295] wcscat (in: _Dest=0x81f10e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\F0DBEC-Readme.txt" [0197.295] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0197.295] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580 [0197.463] WriteFile (in: hFile=0x580, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa2afc9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa2afc9c*=0x70c, lpOverlapped=0x0) returned 1 [0197.974] CloseHandle (hObject=0x580) returned 1 [0197.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f10e0) returned 1 [0197.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186458) returned 1 Thread: id = 4740 os_tid = 0x24dc [0178.045] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json")) returned 0x2020 [0178.045] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0189.969] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2ca0 [0191.690] GetFileSizeEx (in: hFile=0x2ca0, lpFileSize=0xbb3f8e0 | out: lpFileSize=0xbb3f8e0*=278) returned 1 [0191.690] SetFilePointerEx (in: hFile=0x2ca0, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.690] ReadFile (in: hFile=0x2ca0, lpBuffer=0xbb3f8ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbb3f8c8, lpOverlapped=0x0 | out: lpBuffer=0xbb3f8ec*, lpNumberOfBytesRead=0xbb3f8c8*=0x4, lpOverlapped=0x0) returned 1 [0191.692] SetFilePointerEx (in: hFile=0x2ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43550 [0191.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436e0 [0191.693] NtQuerySystemTime (in: CurrentTime=0xbb3f868 | out: CurrentTime=0xbb3f868*=132471540596052000) returned 0x0 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x5ecbfd34 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x255caa37 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x3b5a234d [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x15aa2c4e [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x6b8d3a54 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x4b747cc8 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x79bbfa33 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x17adabab [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x5e9fdd81 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x488193b [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x6dec84c7 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x6b6016ea [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x6330af3 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x5f761941 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x659d0533 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x2d5cbf0f [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x6a59e69e [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x3d074a2d [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0xeaf9b5 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x1146a550 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x4f5bb5a2 [0191.693] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x6f336166 [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x6dcc01d0 [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x673b0b9f [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x6fd10339 [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x6e99ae78 [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x174751b9 [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x20fdd981 [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x30bc9941 [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x452e4719 [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0x7f6df1da [0191.694] RtlRandomEx (in: Seed=0xbb3f860 | out: Seed=0xbb3f860) returned 0xab3e396 [0191.704] ReadFile (in: hFile=0x2ca0, lpBuffer=0x8155478, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0xbb3f85c, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesRead=0xbb3f85c*=0x116, lpOverlapped=0x0) returned 1 [0191.704] SetFilePointerEx (in: hFile=0x2ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.704] WriteFile (in: hFile=0x2ca0, lpBuffer=0x8159080*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xbb3f860, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesWritten=0xbb3f860*=0x116, lpOverlapped=0x0) returned 1 [0196.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344670 [0196.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3447d8 [0196.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447d8) returned 1 [0196.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0196.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0196.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32610) returned 1 [0196.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4020) returned 1 [0196.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69a20 [0196.016] SetFilePointerEx (in: hFile=0x2ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.016] WriteFile (in: hFile=0x2ca0, lpBuffer=0x30bd258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbb3f8d4, lpOverlapped=0x0 | out: lpBuffer=0x30bd258*, lpNumberOfBytesWritten=0xbb3f8d4*=0x10c, lpOverlapped=0x0) returned 1 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a50) returned 1 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447d8) returned 1 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a20) returned 1 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344670) returned 1 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43550) returned 1 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c68) returned 1 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a38) returned 1 [0196.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4008 [0196.482] wcscpy (in: _Dest=0x81f4008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" [0196.482] wcscat (in: _Dest=0x81f4008, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json.f0dbec" [0196.482] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json.f0dbec", NtPathName=0xbb3f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83339d8 [0196.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83339d8) returned 1 [0196.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f3450) returned 1 [0196.771] NtQueryInformationFile (in: FileHandle=0x2ca0, IoStatusBlock=0xbb3f830, FileInformation=0xbb3f838, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbb3f830, FileInformation=0xbb3f838) returned 0x0 [0196.771] NtSetInformationFile (FileHandle=0x2ca0, IoStatusBlock=0xbb3f830, FileInformation=0xbb3f838, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4008) returned 1 [0197.007] FlushFileBuffers (hFile=0x2ca0) returned 1 [0197.022] CloseHandle (hObject=0x2ca0) returned 1 [0197.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f1208 [0197.297] wcscpy (in: _Dest=0x81f1208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" [0197.297] wcscat (in: _Dest=0x81f1208, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\F0DBEC-Readme.txt" [0197.297] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\f0dbec-readme.txt")) returned 0xffffffff [0197.297] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcdc [0197.463] WriteFile (in: hFile=0xcdc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbb3f87c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbb3f87c*=0x70c, lpOverlapped=0x0) returned 1 [0197.970] CloseHandle (hObject=0xcdc) returned 1 [0197.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1208) returned 1 [0197.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186580) returned 1 Thread: id = 4741 os_tid = 0x24e0 [0178.048] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json")) returned 0x2020 [0182.028] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.970] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1974 [0191.705] GetFileSizeEx (in: hFile=0x1974, lpFileSize=0xb5ffa88 | out: lpFileSize=0xb5ffa88*=252) returned 1 [0191.705] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.705] ReadFile (in: hFile=0x1974, lpBuffer=0xb5ffa94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb5ffa70, lpOverlapped=0x0 | out: lpBuffer=0xb5ffa94*, lpNumberOfBytesRead=0xb5ffa70*=0x4, lpOverlapped=0x0) returned 1 [0191.708] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436e0 [0191.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0191.708] NtQuerySystemTime (in: CurrentTime=0xb5ffa10 | out: CurrentTime=0xb5ffa10*=132471540596052000) returned 0x0 [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x553c49ba [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x1bd9eece [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x539369e4 [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x393a4f01 [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x55bf2f24 [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x12468ea8 [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x40ef2f20 [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x5611846c [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x1ee1341e [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x18624940 [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0xc3ce8c8 [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x6f2eaf7a [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x6c98a227 [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x42545c2f [0191.708] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x7f51f30d [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x5fcf972e [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x7a80d4f3 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x5816b506 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0xa023de3 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x30765a01 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x37facebb [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x31eddc07 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x214c90ca [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x7df04159 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x455ea9b6 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0xccdca5a [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0xd432fb1 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x6866f1a9 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x49086021 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x40eeec5a [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x1495bca9 [0191.709] RtlRandomEx (in: Seed=0xb5ffa08 | out: Seed=0xb5ffa08) returned 0x5f2067c1 [0191.719] ReadFile (in: hFile=0x1974, lpBuffer=0x815cc88, nNumberOfBytesToRead=0xfc, lpNumberOfBytesRead=0xb5ffa04, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesRead=0xb5ffa04*=0xfc, lpOverlapped=0x0) returned 1 [0191.719] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.720] WriteFile (in: hFile=0x1974, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0xb5ffa08, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0xb5ffa08*=0xfc, lpOverlapped=0x0) returned 1 [0196.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3447b0 [0196.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3441c0 [0196.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3441c0) returned 1 [0196.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0196.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0196.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33150) returned 1 [0196.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e46e0) returned 1 [0196.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69a80 [0196.025] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.025] WriteFile (in: hFile=0x1974, lpBuffer=0x81dff08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb5ffa7c, lpOverlapped=0x0 | out: lpBuffer=0x81dff08*, lpNumberOfBytesWritten=0xb5ffa7c*=0x10c, lpOverlapped=0x0) returned 1 [0196.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dff08) returned 1 [0196.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ab0) returned 1 [0196.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3441c0) returned 1 [0196.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a80) returned 1 [0196.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447b0) returned 1 [0196.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0196.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d437d0) returned 1 [0196.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43488) returned 1 [0196.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4278 [0196.487] wcscpy (in: _Dest=0x81f4278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" [0196.487] wcscat (in: _Dest=0x81f4278, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json.f0dbec" [0196.487] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0xb5ffa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8333c68 [0196.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333c68) returned 1 [0196.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ff438) returned 1 [0196.774] NtQueryInformationFile (in: FileHandle=0x1974, IoStatusBlock=0xb5ff9d8, FileInformation=0xb5ff9e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb5ff9d8, FileInformation=0xb5ff9e0) returned 0x0 [0196.774] NtSetInformationFile (FileHandle=0x1974, IoStatusBlock=0xb5ff9d8, FileInformation=0xb5ff9e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4278) returned 1 [0197.016] FlushFileBuffers (hFile=0x1974) returned 1 [0197.029] CloseHandle (hObject=0x1974) returned 1 [0197.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f1330 [0197.298] wcscpy (in: _Dest=0x81f1330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" [0197.298] wcscat (in: _Dest=0x81f1330, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\F0DBEC-Readme.txt" [0197.298] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0197.298] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c6c [0197.464] WriteFile (in: hFile=0x1c6c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb5ffa24, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb5ffa24*=0x70c, lpOverlapped=0x0) returned 1 [0197.983] CloseHandle (hObject=0x1c6c) returned 1 [0197.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1330) returned 1 [0197.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81866a8) returned 1 Thread: id = 4742 os_tid = 0x24e4 [0178.051] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json")) returned 0x2020 [0178.051] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0189.924] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cc8 [0191.304] GetFileSizeEx (in: hFile=0x1cc8, lpFileSize=0xb82f840 | out: lpFileSize=0xb82f840*=260) returned 1 [0191.304] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.304] ReadFile (in: hFile=0x1cc8, lpBuffer=0xb82f84c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb82f828, lpOverlapped=0x0 | out: lpBuffer=0xb82f84c*, lpNumberOfBytesRead=0xb82f828*=0x4, lpOverlapped=0x0) returned 1 [0191.306] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a60 [0191.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42290 [0191.306] NtQuerySystemTime (in: CurrentTime=0xb82f7c8 | out: CurrentTime=0xb82f7c8*=132471540592152000) returned 0x0 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0xdd4140e [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0xa6e2da4 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0xdf67610 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0xb57570a [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0xed0a814 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x3cd548e1 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x7f861685 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x3810da34 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x8926a58 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x25a20f23 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x4d0b116d [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x678debc4 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x2466491f [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x643431ee [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0xa9fae8d [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x2bfb2c4d [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x447cfeeb [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x20212b3 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x422069a3 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x7a3f39ff [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x7218ee8a [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x5a9aef48 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x79525d16 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x211b2ca7 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x7b3fe8c5 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x2f361334 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x4440ca3a [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x2825fd53 [0191.306] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x6c98a227 [0191.307] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x17fc5552 [0191.307] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x3340b662 [0191.307] RtlRandomEx (in: Seed=0xb82f7c0 | out: Seed=0xb82f7c0) returned 0x40c5b9d8 [0191.314] ReadFile (in: hFile=0x1cc8, lpBuffer=0x80b4890, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xb82f7bc, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesRead=0xb82f7bc*=0x104, lpOverlapped=0x0) returned 1 [0191.314] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.314] WriteFile (in: hFile=0x1cc8, lpBuffer=0x80b8498*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xb82f7c0, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesWritten=0xb82f7c0*=0x104, lpOverlapped=0x0) returned 1 [0195.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0195.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687e0) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4890) returned 1 [0195.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69000 [0195.933] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.933] WriteFile (in: hFile=0x1cc8, lpBuffer=0x30bbb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb82f834, lpOverlapped=0x0 | out: lpBuffer=0x30bbb60*, lpNumberOfBytesWritten=0xb82f834*=0x10c, lpOverlapped=0x0) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69030) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69000) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0196.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0196.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0196.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0196.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8405400 [0196.401] wcscpy (in: _Dest=0x8405400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" [0196.401] wcscat (in: _Dest=0x8405400, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json.f0dbec" [0196.401] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0xb82f7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9030 [0196.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9030) returned 1 [0196.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f7fc8) returned 1 [0196.741] NtQueryInformationFile (in: FileHandle=0x1cc8, IoStatusBlock=0xb82f790, FileInformation=0xb82f798, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb82f790, FileInformation=0xb82f798) returned 0x0 [0196.741] NtSetInformationFile (FileHandle=0x1cc8, IoStatusBlock=0xb82f790, FileInformation=0xb82f798, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405400) returned 1 [0196.936] FlushFileBuffers (hFile=0x1cc8) returned 1 [0196.952] CloseHandle (hObject=0x1cc8) returned 1 [0197.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f6890 [0197.220] wcscpy (in: _Dest=0x81f6890, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" [0197.220] wcscat (in: _Dest=0x81f6890, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\F0DBEC-Readme.txt" [0197.220] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0197.221] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1924 [0197.454] WriteFile (in: hFile=0x1924, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb82f7dc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb82f7dc*=0x70c, lpOverlapped=0x0) returned 1 [0197.904] CloseHandle (hObject=0x1924) returned 1 [0197.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6890) returned 1 [0197.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81867d0) returned 1 Thread: id = 4743 os_tid = 0x24e8 [0178.052] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json")) returned 0x2020 [0178.052] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.970] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ce0 [0191.720] GetFileSizeEx (in: hFile=0x1ce0, lpFileSize=0xb70fbc8 | out: lpFileSize=0xb70fbc8*=257) returned 1 [0191.721] SetFilePointerEx (in: hFile=0x1ce0, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.721] ReadFile (in: hFile=0x1ce0, lpBuffer=0xb70fbd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb70fbb0, lpOverlapped=0x0 | out: lpBuffer=0xb70fbd4*, lpNumberOfBytesRead=0xb70fbb0*=0x4, lpOverlapped=0x0) returned 1 [0191.723] SetFilePointerEx (in: hFile=0x1ce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0191.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0191.723] NtQuerySystemTime (in: CurrentTime=0xb70fb50 | out: CurrentTime=0xb70fb50*=132471540596208000) returned 0x0 [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x4fb8b424 [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x3c3ff2b3 [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x5157e4aa [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x42545c2f [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0xd82ca14 [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x390c6266 [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x7a08e244 [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0xd432fb1 [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x5fcbcac1 [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x485450e2 [0191.723] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x1b90bfb9 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x2eb7a920 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x6663480e [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x9944137 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x459a7656 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x6dec84c7 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x7d21148f [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0xbac0def [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x177dc984 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x7cbd2072 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x594671d [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x62f1069c [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x745b0ea0 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x4bcecf03 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x3931bb44 [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x7011e5cc [0191.724] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x4e118a5d [0191.725] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x65035530 [0191.725] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x5f0956d6 [0191.725] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x5cf2047f [0191.725] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x7a3e26e2 [0191.725] RtlRandomEx (in: Seed=0xb70fb48 | out: Seed=0xb70fb48) returned 0x5c35d985 [0191.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0191.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81680a0 [0191.736] ReadFile (in: hFile=0x1ce0, lpBuffer=0x8164498, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0xb70fb44, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0xb70fb44*=0x101, lpOverlapped=0x0) returned 1 [0191.736] SetFilePointerEx (in: hFile=0x1ce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.736] WriteFile (in: hFile=0x1ce0, lpBuffer=0x81680a0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xb70fb48, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesWritten=0xb70fb48*=0x101, lpOverlapped=0x0) returned 1 [0196.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3448c8 [0196.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344440 [0196.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344440) returned 1 [0196.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0196.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0196.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0196.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4608) returned 1 [0196.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ae0 [0196.028] SetFilePointerEx (in: hFile=0x1ce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.028] WriteFile (in: hFile=0x1ce0, lpBuffer=0x81dfcd8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb70fbbc, lpOverlapped=0x0 | out: lpBuffer=0x81dfcd8*, lpNumberOfBytesWritten=0xb70fbbc*=0x10c, lpOverlapped=0x0) returned 1 [0196.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfcd8) returned 1 [0196.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b10) returned 1 [0196.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344440) returned 1 [0196.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ae0) returned 1 [0196.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3448c8) returned 1 [0196.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0196.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43078) returned 1 [0196.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43c58) returned 1 [0196.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f43b0 [0196.490] wcscpy (in: _Dest=0x81f43b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" [0196.490] wcscat (in: _Dest=0x81f43b0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json.f0dbec" [0196.490] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0xb70fb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8333db0 [0196.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333db0) returned 1 [0196.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fba00) returned 1 [0196.775] NtQueryInformationFile (in: FileHandle=0x1ce0, IoStatusBlock=0xb70fb18, FileInformation=0xb70fb20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb70fb18, FileInformation=0xb70fb20) returned 0x0 [0196.775] NtSetInformationFile (FileHandle=0x1ce0, IoStatusBlock=0xb70fb18, FileInformation=0xb70fb20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f43b0) returned 1 [0197.019] FlushFileBuffers (hFile=0x1ce0) returned 1 [0197.033] CloseHandle (hObject=0x1ce0) returned 1 [0197.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f1458 [0197.299] wcscpy (in: _Dest=0x81f1458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" [0197.299] wcscat (in: _Dest=0x81f1458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\F0DBEC-Readme.txt" [0197.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0197.300] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x24d0 [0197.466] WriteFile (in: hFile=0x24d0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb70fb64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb70fb64*=0x70c, lpOverlapped=0x0) returned 1 [0197.988] CloseHandle (hObject=0x24d0) returned 1 [0197.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1458) returned 1 [0197.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f8) returned 1 Thread: id = 4744 os_tid = 0x24ec [0178.056] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json")) returned 0x2020 [0178.057] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json", dwFileAttributes=0x20) returned 1 [0189.924] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a98 [0191.292] GetFileSizeEx (in: hFile=0x2a98, lpFileSize=0xa61f898 | out: lpFileSize=0xa61f898*=243) returned 1 [0191.292] SetFilePointerEx (in: hFile=0x2a98, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.292] ReadFile (in: hFile=0x2a98, lpBuffer=0xa61f8a4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa61f880, lpOverlapped=0x0 | out: lpBuffer=0xa61f8a4*, lpNumberOfBytesRead=0xa61f880*=0x4, lpOverlapped=0x0) returned 1 [0191.294] SetFilePointerEx (in: hFile=0x2a98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d80 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a60 [0191.294] NtQuerySystemTime (in: CurrentTime=0xa61f820 | out: CurrentTime=0xa61f820*=132471540591996000) returned 0x0 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x173bb96b [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x269f41c7 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x4abb2a2 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x71696c6 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x57fd2122 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x68a04ae5 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x4989f1b9 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x23ed33b4 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x269f41c7 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x7cb830b4 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x1ee7ae01 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x22f09980 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x1254be2e [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x49bb5123 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x133e1b97 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x1a3fc7a2 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x1785bb78 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x38b8ad46 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x2c16dc01 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x5112b502 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x5e14ce01 [0191.294] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x5dccf63a [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x1ab64e0a [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x61fff610 [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x66fe3301 [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x4caf4594 [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x33dbe10e [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x2248da37 [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x4014bd71 [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x1c788cf5 [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x11748f94 [0191.295] RtlRandomEx (in: Seed=0xa61f818 | out: Seed=0xa61f818) returned 0x54b4095f [0191.302] ReadFile (in: hFile=0x2a98, lpBuffer=0x835b558, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0xa61f814, lpOverlapped=0x0 | out: lpBuffer=0x835b558*, lpNumberOfBytesRead=0xa61f814*=0xf3, lpOverlapped=0x0) returned 1 [0191.302] SetFilePointerEx (in: hFile=0x2a98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.302] WriteFile (in: hFile=0x2a98, lpBuffer=0x809a458*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0xa61f818, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesWritten=0xa61f818*=0xf3, lpOverlapped=0x0) returned 1 [0195.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0195.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0195.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0195.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0195.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835b558) returned 1 [0195.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 [0195.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e37b0) returned 1 [0195.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69060 [0195.930] SetFilePointerEx (in: hFile=0x2a98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.930] WriteFile (in: hFile=0x2a98, lpBuffer=0x30bc998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa61f88c, lpOverlapped=0x0 | out: lpBuffer=0x30bc998*, lpNumberOfBytesWritten=0xa61f88c*=0x10c, lpOverlapped=0x0) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69090) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69060) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d80) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42448) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426f0) returned 1 [0196.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84052c8 [0196.397] wcscpy (in: _Dest=0x84052c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" [0196.397] wcscat (in: _Dest=0x84052c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json.f0dbec" [0196.397] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json.f0dbec", NtPathName=0xa61f810, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9178 [0196.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9178) returned 1 [0196.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ffab0) returned 1 [0196.733] NtQueryInformationFile (in: FileHandle=0x2a98, IoStatusBlock=0xa61f7e8, FileInformation=0xa61f7f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa61f7e8, FileInformation=0xa61f7f0) returned 0x0 [0196.733] NtSetInformationFile (FileHandle=0x2a98, IoStatusBlock=0xa61f7e8, FileInformation=0xa61f7f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84052c8) returned 1 [0196.930] FlushFileBuffers (hFile=0x2a98) returned 1 [0196.942] CloseHandle (hObject=0x2a98) returned 1 [0197.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81efe60 [0197.218] wcscpy (in: _Dest=0x81efe60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" [0197.219] wcscat (in: _Dest=0x81efe60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\F0DBEC-Readme.txt" [0197.219] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\f0dbec-readme.txt")) returned 0xffffffff [0197.219] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18e4 [0197.453] WriteFile (in: hFile=0x18e4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa61f834, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa61f834*=0x70c, lpOverlapped=0x0) returned 1 [0197.897] CloseHandle (hObject=0x18e4) returned 1 [0197.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efe60) returned 1 [0197.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a20) returned 1 Thread: id = 4745 os_tid = 0x24f0 [0178.060] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json")) returned 0x2020 [0178.062] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0189.970] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19d0 [0191.216] GetFileSizeEx (in: hFile=0x19d0, lpFileSize=0xb0dfdb0 | out: lpFileSize=0xb0dfdb0*=251) returned 1 [0191.216] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0xf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.216] ReadFile (in: hFile=0x19d0, lpBuffer=0xb0dfdbc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb0dfd98, lpOverlapped=0x0 | out: lpBuffer=0xb0dfdbc*, lpNumberOfBytesRead=0xb0dfd98*=0x4, lpOverlapped=0x0) returned 1 [0191.218] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0191.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f88 [0191.218] NtQuerySystemTime (in: CurrentTime=0xb0dfd38 | out: CurrentTime=0xb0dfd38*=132471540591216000) returned 0x0 [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x657e21f2 [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x33d50bf0 [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x5a1c52ba [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x2fd54e57 [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x2631d32b [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x522f3da0 [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0xde41705 [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x14f7d3c6 [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x793dfefd [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x5014a16d [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0xb1534bf [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x5e47b525 [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x3105b6ef [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x7528680c [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x5c7e624 [0191.218] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x1ed98db0 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x1b8a2f6c [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x19c177f5 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x6931bd5 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x64c936f2 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x66e8aeed [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x2a88a94d [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x7e493f39 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x7276bd62 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x2ac30ab2 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x5ef5431c [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x279909ef [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x2daf8d27 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x676f1ca9 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x680ad039 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x5df9ba3 [0191.219] RtlRandomEx (in: Seed=0xb0dfd30 | out: Seed=0xb0dfd30) returned 0x570f46c8 [0191.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c44d8 [0191.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8353d48 [0191.227] ReadFile (in: hFile=0x19d0, lpBuffer=0x82c44d8, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0xb0dfd2c, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesRead=0xb0dfd2c*=0xfb, lpOverlapped=0x0) returned 1 [0191.227] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.227] WriteFile (in: hFile=0x19d0, lpBuffer=0x8353d48*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0xb0dfd30, lpOverlapped=0x0 | out: lpBuffer=0x8353d48*, lpNumberOfBytesWritten=0xb0dfd30*=0xfb, lpOverlapped=0x0) returned 1 [0193.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42920 [0193.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0193.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0193.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8353d48) returned 1 [0193.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0193.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 [0193.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5070) returned 1 [0193.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0193.214] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.215] WriteFile (in: hFile=0x19d0, lpBuffer=0x30bc880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0dfda4, lpOverlapped=0x0 | out: lpBuffer=0x30bc880*, lpNumberOfBytesWritten=0xb0dfda4*=0x10c, lpOverlapped=0x0) returned 1 [0196.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0196.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0196.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0196.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0196.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42920) returned 1 [0196.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0196.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0196.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42128) returned 1 [0196.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403ba0 [0196.103] wcscpy (in: _Dest=0x8403ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" [0196.103] wcscat (in: _Dest=0x8403ba0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json.f0dbec" [0196.103] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json.f0dbec", NtPathName=0xb0dfd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9928 [0196.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9928) returned 1 [0196.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83faae8) returned 1 [0196.571] NtQueryInformationFile (in: FileHandle=0x19d0, IoStatusBlock=0xb0dfd00, FileInformation=0xb0dfd08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb0dfd00, FileInformation=0xb0dfd08) returned 0x0 [0196.571] NtSetInformationFile (FileHandle=0x19d0, IoStatusBlock=0xb0dfd00, FileInformation=0xb0dfd08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403ba0) returned 1 [0196.843] FlushFileBuffers (hFile=0x19d0) returned 1 [0196.848] CloseHandle (hObject=0x19d0) returned 1 [0197.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81eff88 [0197.048] wcscpy (in: _Dest=0x81eff88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" [0197.048] wcscat (in: _Dest=0x81eff88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\F0DBEC-Readme.txt" [0197.048] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\f0dbec-readme.txt")) returned 0xffffffff [0197.048] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x193c [0197.443] WriteFile (in: hFile=0x193c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb0dfd4c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb0dfd4c*=0x70c, lpOverlapped=0x0) returned 1 [0197.862] CloseHandle (hObject=0x193c) returned 1 [0197.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff88) returned 1 [0197.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186b48) returned 1 Thread: id = 4746 os_tid = 0x24f4 [0178.066] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0178.066] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0189.924] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x181c [0191.280] GetFileSizeEx (in: hFile=0x181c, lpFileSize=0xba9f9c8 | out: lpFileSize=0xba9f9c8*=259) returned 1 [0191.280] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.280] ReadFile (in: hFile=0x181c, lpBuffer=0xba9f9d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xba9f9b0, lpOverlapped=0x0 | out: lpBuffer=0xba9f9d4*, lpNumberOfBytesRead=0xba9f9b0*=0x4, lpOverlapped=0x0) returned 1 [0191.281] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0191.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d80 [0191.282] NtQuerySystemTime (in: CurrentTime=0xba9f950 | out: CurrentTime=0xba9f950*=132471540591840000) returned 0x0 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x27137e57 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x5ae408f1 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x694e190f [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x76af024 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x6041c823 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x1914de9 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x71e8c64e [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x78357426 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x3d1029a [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x520f3631 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x2466491f [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x1a8bf806 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x45cde759 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x46d7bc02 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x7ce29e87 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x15fc7ae7 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x30b5703b [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x29e415df [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x2c16dc01 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x666487ab [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x164d9d3 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x7e8aadc8 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x5581a1d8 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x2168ee1c [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x4d4c796 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x11f8cf7 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x1f2e830c [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x618f4439 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x11748f94 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x2783f65c [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x4523a723 [0191.282] RtlRandomEx (in: Seed=0xba9f948 | out: Seed=0xba9f948) returned 0x6d6c5d4 [0191.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8366970 [0191.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x836e180 [0191.290] ReadFile (in: hFile=0x181c, lpBuffer=0x8366970, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0xba9f944, lpOverlapped=0x0 | out: lpBuffer=0x8366970*, lpNumberOfBytesRead=0xba9f944*=0x103, lpOverlapped=0x0) returned 1 [0191.290] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.290] WriteFile (in: hFile=0x181c, lpBuffer=0x836e180*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xba9f948, lpOverlapped=0x0 | out: lpBuffer=0x836e180*, lpNumberOfBytesWritten=0xba9f948*=0x103, lpOverlapped=0x0) returned 1 [0195.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0195.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836e180) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8366970) returned 1 [0195.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 [0195.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4ec0) returned 1 [0195.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e690c0 [0195.927] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.927] WriteFile (in: hFile=0x181c, lpBuffer=0x30bb818*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xba9f9bc, lpOverlapped=0x0 | out: lpBuffer=0x30bb818*, lpNumberOfBytesWritten=0xba9f9bc*=0x10c, lpOverlapped=0x0) returned 1 [0196.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0196.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690f0) returned 1 [0196.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0196.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690c0) returned 1 [0196.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0b8) returned 1 [0196.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0196.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42420) returned 1 [0196.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42218) returned 1 [0196.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8405190 [0196.394] wcscpy (in: _Dest=0x8405190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" [0196.394] wcscat (in: _Dest=0x8405190, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json.f0dbec" [0196.395] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json.f0dbec", NtPathName=0xba9f940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16f90 [0196.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16f90) returned 1 [0196.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ff660) returned 1 [0196.731] NtQueryInformationFile (in: FileHandle=0x181c, IoStatusBlock=0xba9f918, FileInformation=0xba9f920, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xba9f918, FileInformation=0xba9f920) returned 0x0 [0196.731] NtSetInformationFile (FileHandle=0x181c, IoStatusBlock=0xba9f918, FileInformation=0xba9f920, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405190) returned 1 [0196.925] FlushFileBuffers (hFile=0x181c) returned 1 [0196.934] CloseHandle (hObject=0x181c) returned 1 [0197.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f6b00 [0197.216] wcscpy (in: _Dest=0x81f6b00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" [0197.216] wcscat (in: _Dest=0x81f6b00, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\F0DBEC-Readme.txt" [0197.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\f0dbec-readme.txt")) returned 0xffffffff [0197.216] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18dc [0197.452] WriteFile (in: hFile=0x18dc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xba9f964, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xba9f964*=0x70c, lpOverlapped=0x0) returned 1 [0197.893] CloseHandle (hObject=0x18dc) returned 1 [0197.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6b00) returned 1 [0197.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186c70) returned 1 Thread: id = 4747 os_tid = 0x24f8 [0178.069] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json")) returned 0x2020 [0178.069] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.971] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffc [0193.839] GetFileSizeEx (in: hFile=0xffc, lpFileSize=0xb8afd08 | out: lpFileSize=0xb8afd08*=179) returned 1 [0193.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0193.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49c18 [0193.839] NtQuerySystemTime (in: CurrentTime=0xb8afc90 | out: CurrentTime=0xb8afc90*=132471540617424000) returned 0x0 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x129a5ffc [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x7459ecae [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x4ece6449 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x638e4206 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x75d59829 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x52c60922 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x782f4789 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0xb35ac36 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x1027cb01 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x64aa638c [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x543d2130 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x7311b4fa [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x14dc0e0e [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x2fedf870 [0193.839] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x617fdfc7 [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x89a9e7 [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x57071e38 [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x15640d16 [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x314b0232 [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x7b72f72a [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x1bcd64fa [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x709e70fb [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x596d0e46 [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x129a5ffc [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x27e4fbaa [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x33250fdc [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x1791373c [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x728b077d [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x36fb4cd1 [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x727b18a7 [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0xb617f1b [0193.840] RtlRandomEx (in: Seed=0xb8afc88 | out: Seed=0xb8afc88) returned 0x5c9f9e40 [0193.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1492f4b8 [0193.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149330c0 [0193.848] ReadFile (in: hFile=0xffc, lpBuffer=0x1492f4b8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xb8afc84, lpOverlapped=0x0 | out: lpBuffer=0x1492f4b8*, lpNumberOfBytesRead=0xb8afc84*=0xb3, lpOverlapped=0x0) returned 1 [0193.850] SetFilePointerEx (in: hFile=0xffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.850] WriteFile (in: hFile=0xffc, lpBuffer=0x149330c0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xb8afc88, lpOverlapped=0x0 | out: lpBuffer=0x149330c0*, lpNumberOfBytesWritten=0xb8afc88*=0xb3, lpOverlapped=0x0) returned 1 [0201.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062508 [0201.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062530 [0201.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062530) returned 1 [0201.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149330c0) returned 1 [0201.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1492f4b8) returned 1 [0201.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68150) returned 1 [0201.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6338) returned 1 [0201.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fca8 [0201.530] SetFilePointerEx (in: hFile=0xffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.530] WriteFile (in: hFile=0xffc, lpBuffer=0x30bd028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb8afcfc, lpOverlapped=0x0 | out: lpBuffer=0x30bd028*, lpNumberOfBytesWritten=0xb8afcfc*=0x10c, lpOverlapped=0x0) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700f8) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062530) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fca8) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062508) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49880) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a848) returned 1 [0203.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef84b8 [0203.771] wcscpy (in: _Dest=0x3ef84b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" [0203.771] wcscat (in: _Dest=0x3ef84b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.f0dbec" [0203.771] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0xb8afc80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9178 [0204.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9178) returned 1 [0204.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8312c30) returned 1 [0204.257] NtQueryInformationFile (in: FileHandle=0xffc, IoStatusBlock=0xb8afc58, FileInformation=0xb8afc60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb8afc58, FileInformation=0xb8afc60) returned 0x0 [0204.257] NtSetInformationFile (FileHandle=0xffc, IoStatusBlock=0xb8afc58, FileInformation=0xb8afc60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef84b8) returned 1 [0204.652] FlushFileBuffers (hFile=0xffc) returned 1 [0204.667] CloseHandle (hObject=0xffc) returned 1 [0207.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346cd8 [0207.807] wcscpy (in: _Dest=0x8346cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" [0207.807] wcscat (in: _Dest=0x8346cd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\F0DBEC-Readme.txt" [0207.807] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0207.807] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1564 [0208.360] WriteFile (in: hFile=0x1564, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb8afca4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb8afca4*=0x70c, lpOverlapped=0x0) returned 1 [0209.138] CloseHandle (hObject=0x1564) returned 1 [0209.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346cd8) returned 1 [0209.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186d98) returned 1 Thread: id = 4748 os_tid = 0x24fc [0178.070] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0178.070] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0189.971] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2ca8 [0193.223] GetFileSizeEx (in: hFile=0x2ca8, lpFileSize=0x7f3f8d0 | out: lpFileSize=0x7f3f8d0*=179) returned 1 [0193.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43640 [0193.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43370 [0193.223] NtQuerySystemTime (in: CurrentTime=0x7f3f858 | out: CurrentTime=0x7f3f858*=132471540611340000) returned 0x0 [0193.223] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x45f7e96a [0193.223] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x6886bd62 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x3d074a2d [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x5700a33d [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x5c5e027 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x6cf1cca6 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x77aa8be3 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x4a024aee [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x5b46ee81 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x7978e2e7 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x7bc4acef [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x5518905 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x61f4856d [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x4a87b50c [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x1b3b4c70 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x46a8409e [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x2de704f4 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x4b372b21 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x9606 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x5a0c9998 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x7ffff7a6 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x73d91076 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x15a736b7 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x160229bd [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x5b46ee81 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x5f7ae65 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x1f232e66 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x4a87b50c [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x66df90a4 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x6daa8a0b [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x20445d69 [0193.224] RtlRandomEx (in: Seed=0x7f3f850 | out: Seed=0x7f3f850) returned 0x4447d42d [0193.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c44d8 [0193.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828fc68 [0193.233] ReadFile (in: hFile=0x2ca8, lpBuffer=0x82c44d8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x7f3f84c, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesRead=0x7f3f84c*=0xb3, lpOverlapped=0x0) returned 1 [0193.239] SetFilePointerEx (in: hFile=0x2ca8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.239] WriteFile (in: hFile=0x2ca8, lpBuffer=0x828fc68*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x7f3f850, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesWritten=0x7f3f850*=0xb3, lpOverlapped=0x0) returned 1 [0201.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80624b8 [0201.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80624e0 [0201.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80624e0) returned 1 [0201.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828fc68) returned 1 [0201.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0201.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 [0201.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4458) returned 1 [0201.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f918 [0201.528] SetFilePointerEx (in: hFile=0x2ca8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.528] WriteFile (in: hFile=0x2ca8, lpBuffer=0x8405fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7f3f8c4, lpOverlapped=0x0 | out: lpBuffer=0x8405fc0*, lpNumberOfBytesWritten=0x7f3f8c4*=0x10c, lpOverlapped=0x0) returned 1 [0203.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405fc0) returned 1 [0203.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd08) returned 1 [0203.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80624e0) returned 1 [0203.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f918) returned 1 [0203.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80624b8) returned 1 [0203.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43640) returned 1 [0203.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42308) returned 1 [0203.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0203.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x8404b78 [0203.745] wcscpy (in: _Dest=0x8404b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" [0203.745] wcscat (in: _Dest=0x8404b78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.f0dbec" [0203.745] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0x7f3f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e177a0 [0204.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e177a0) returned 1 [0204.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830d818) returned 1 [0204.245] NtQueryInformationFile (in: FileHandle=0x2ca8, IoStatusBlock=0x7f3f820, FileInformation=0x7f3f828, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7f3f820, FileInformation=0x7f3f828) returned 0x0 [0204.246] NtSetInformationFile (FileHandle=0x2ca8, IoStatusBlock=0x7f3f820, FileInformation=0x7f3f828, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404b78) returned 1 [0204.596] FlushFileBuffers (hFile=0x2ca8) returned 1 [0204.632] CloseHandle (hObject=0x2ca8) returned 1 [0207.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8347698 [0207.774] wcscpy (in: _Dest=0x8347698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" [0207.774] wcscat (in: _Dest=0x8347698, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0207.774] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0207.775] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19f4 [0208.356] WriteFile (in: hFile=0x19f4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7f3f86c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7f3f86c*=0x70c, lpOverlapped=0x0) returned 1 [0209.103] CloseHandle (hObject=0x19f4) returned 1 [0209.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347698) returned 1 [0209.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ec0) returned 1 Thread: id = 4749 os_tid = 0x2500 [0178.071] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json")) returned 0x2020 [0185.005] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", dwFileAttributes=0x20) returned 1 [0194.753] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf0 [0194.753] GetFileSizeEx (in: hFile=0xdf0, lpFileSize=0xb6cf930 | out: lpFileSize=0xb6cf930*=132) returned 1 [0194.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3480 [0194.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0194.754] NtQuerySystemTime (in: CurrentTime=0xb6cf8b8 | out: CurrentTime=0xb6cf8b8*=132471540626472000) returned 0x0 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0xffb2ff0 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x1b308ca9 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x415bc54f [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x16dee91a [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x7a23ab09 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x24f24db7 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x337efa6e [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x36c2741b [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x303b80c1 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x6d212bff [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x166d7f8b [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0xd27e09b [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x1e9c7ee1 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x3248fefb [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x213707a9 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x10ce8844 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x525b16c3 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x24aca8c5 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x30882391 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x38e0e5b4 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x63792cde [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x7cd67c97 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x44a22973 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x7770d1f6 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x605ef042 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x1a4210a8 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x5d3c7a35 [0194.754] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x2b2a0ee [0194.755] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x6a859dac [0194.755] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x7454da96 [0194.755] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x511b92b9 [0194.755] RtlRandomEx (in: Seed=0xb6cf8b0 | out: Seed=0xb6cf8b0) returned 0x293efcb0 [0194.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0cd0 [0194.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e13810 [0194.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1518 [0194.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e13810) returned 1 [0194.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0194.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d870 [0194.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e13810 [0194.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149f30c0 [0194.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149f6cc8 [0194.782] ReadFile (in: hFile=0xdf0, lpBuffer=0x149f30c0, nNumberOfBytesToRead=0x84, lpNumberOfBytesRead=0xb6cf8ac, lpOverlapped=0x0 | out: lpBuffer=0x149f30c0*, lpNumberOfBytesRead=0xb6cf8ac*=0x84, lpOverlapped=0x0) returned 1 [0194.784] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.785] WriteFile (in: hFile=0xdf0, lpBuffer=0x149f6cc8*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xb6cf8b0, lpOverlapped=0x0 | out: lpBuffer=0x149f6cc8*, lpNumberOfBytesWritten=0xb6cf8b0*=0x84, lpOverlapped=0x0) returned 1 [0196.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435a0 [0196.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e70 [0196.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0196.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149f6cc8) returned 1 [0196.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149f30c0) returned 1 [0196.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e13810) returned 1 [0196.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d870) returned 1 [0196.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70068 [0196.327] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.327] WriteFile (in: hFile=0xdf0, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb6cf924, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0xb6cf924*=0x10c, lpOverlapped=0x0) returned 1 [0196.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0196.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70038) returned 1 [0196.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0196.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70068) returned 1 [0196.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435a0) returned 1 [0196.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0196.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0cd0) returned 1 [0196.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0196.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f69c8 [0196.712] wcscpy (in: _Dest=0x81f69c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" [0196.712] wcscat (in: _Dest=0x81f69c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.f0dbec" [0196.712] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.f0dbec", NtPathName=0xb6cf8a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8346f98 [0197.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346f98) returned 1 [0197.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fa470) returned 1 [0197.627] NtQueryInformationFile (in: FileHandle=0xdf0, IoStatusBlock=0xb6cf880, FileInformation=0xb6cf888, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb6cf880, FileInformation=0xb6cf888) returned 0x0 [0197.627] NtSetInformationFile (FileHandle=0xdf0, IoStatusBlock=0xb6cf880, FileInformation=0xb6cf888, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f69c8) returned 1 [0197.733] FlushFileBuffers (hFile=0xdf0) returned 1 [0197.738] CloseHandle (hObject=0xdf0) returned 1 [0197.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8333148 [0197.765] wcscpy (in: _Dest=0x8333148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" [0197.765] wcscat (in: _Dest=0x8333148, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\F0DBEC-Readme.txt" [0197.765] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\f0dbec-readme.txt")) returned 0xffffffff [0197.765] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cfc [0198.278] WriteFile (in: hFile=0x1cfc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb6cf8cc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb6cf8cc*=0x70c, lpOverlapped=0x0) returned 1 [0198.286] CloseHandle (hObject=0x1cfc) returned 1 [0198.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333148) returned 1 [0198.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186fe8) returned 1 Thread: id = 4750 os_tid = 0x2504 [0178.071] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json")) returned 0x2020 [0185.144] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", dwFileAttributes=0x20) returned 1 [0194.808] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd0 [0194.833] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0xae8ff38 | out: lpFileSize=0xae8ff38*=259) returned 1 [0194.833] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.833] ReadFile (in: hFile=0xcd0, lpBuffer=0xae8ff44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xae8ff20, lpOverlapped=0x0 | out: lpBuffer=0xae8ff44*, lpNumberOfBytesRead=0xae8ff20*=0x4, lpOverlapped=0x0) returned 1 [0194.834] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ed8 [0194.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1068 [0194.835] NtQuerySystemTime (in: CurrentTime=0xae8fec0 | out: CurrentTime=0xae8fec0*=132471540627252000) returned 0x0 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x4e22c043 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x6eeb17b9 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x1e33ca29 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x1b345ac6 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x3e7d4d81 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x3e279c01 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x200e9585 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x58006d9d [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x29bba315 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x3f7ba914 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x2cfaba80 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x1fdfc710 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x1721c01 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x58ddbb6c [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x697e1272 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x6bdc21e4 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x3dfcc341 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x4e8c3dac [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x605500ff [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0xd01b90d [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x72b637d2 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x117e1d76 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x4aca4035 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x35ba9de4 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x38f5d4f [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x35966790 [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x8c403aa [0194.835] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x18e7b03 [0194.836] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x33fb9523 [0194.836] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x2b185a60 [0194.836] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x283c01c9 [0194.836] RtlRandomEx (in: Seed=0xae8feb8 | out: Seed=0xae8feb8) returned 0x7127d075 [0194.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0194.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x8054858 [0194.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0194.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054858) returned 1 [0194.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1068) returned 1 [0194.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d750 [0194.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x8054858 [0194.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a09c68 [0194.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a0d870 [0194.845] ReadFile (in: hFile=0xcd0, lpBuffer=0x14a09c68, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0xae8feb4, lpOverlapped=0x0 | out: lpBuffer=0x14a09c68*, lpNumberOfBytesRead=0xae8feb4*=0x103, lpOverlapped=0x0) returned 1 [0194.845] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.845] WriteFile (in: hFile=0xcd0, lpBuffer=0x14a0d870*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xae8feb8, lpOverlapped=0x0 | out: lpBuffer=0x14a0d870*, lpNumberOfBytesWritten=0xae8feb8*=0x103, lpOverlapped=0x0) returned 1 [0196.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420b0 [0196.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d437a8 [0196.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d437a8) returned 1 [0196.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a0d870) returned 1 [0196.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a09c68) returned 1 [0196.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054858) returned 1 [0196.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d750) returned 1 [0196.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70008 [0196.339] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.339] WriteFile (in: hFile=0xcd0, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae8ff2c, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xae8ff2c*=0x10c, lpOverlapped=0x0) returned 1 [0196.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0196.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ffd8) returned 1 [0196.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d437a8) returned 1 [0196.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70008) returned 1 [0196.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420b0) returned 1 [0196.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0196.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0196.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0196.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6d70 [0196.724] wcscpy (in: _Dest=0x81f6d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" [0196.724] wcscat (in: _Dest=0x81f6d70, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.f0dbec" [0196.724] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.f0dbec", NtPathName=0xae8feb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83470e0 [0197.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83470e0) returned 1 [0197.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fa248) returned 1 [0197.627] NtQueryInformationFile (in: FileHandle=0xcd0, IoStatusBlock=0xae8fe88, FileInformation=0xae8fe90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xae8fe88, FileInformation=0xae8fe90) returned 0x0 [0197.627] NtSetInformationFile (FileHandle=0xcd0, IoStatusBlock=0xae8fe88, FileInformation=0xae8fe90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6d70) returned 1 [0197.729] FlushFileBuffers (hFile=0xcd0) returned 1 [0197.738] CloseHandle (hObject=0xcd0) returned 1 [0197.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401020 [0197.764] wcscpy (in: _Dest=0x8401020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" [0197.764] wcscat (in: _Dest=0x8401020, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\F0DBEC-Readme.txt" [0197.764] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\f0dbec-readme.txt")) returned 0xffffffff [0197.764] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0c [0198.278] WriteFile (in: hFile=0xe0c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xae8fed4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xae8fed4*=0x70c, lpOverlapped=0x0) returned 1 [0198.297] CloseHandle (hObject=0xe0c) returned 1 [0198.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401020) returned 1 [0198.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187238) returned 1 Thread: id = 4751 os_tid = 0x2508 [0178.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68ab0 [0178.072] wcscpy (in: _Dest=0x3e68ab0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" [0178.072] wcscat (in: _Dest=0x3e68ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\" [0178.072] wcscat (in: _Dest=0x3e68ab0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*" [0178.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0178.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51037b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x51037b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51037b90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f90 [0186.597] wcscmp (_String1=".", _String2=".") returned 0 [0186.597] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51037b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x51037b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51037b90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.597] wcscmp (_String1="..", _String2=".") returned 1 [0186.597] wcscmp (_String1="..", _String2="..") returned 0 [0186.597] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088b800, ftCreationTime.dwHighDateTime=0x1ca5efc, ftLastAccessTime.dwLowDateTime=0x51083e50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb088b800, ftLastWriteTime.dwHighDateTime=0x1ca5efc, nFileSizeHigh=0x0, nFileSizeLow=0x310750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 1 [0186.597] wcscmp (_String1="MSGR3EN.DLL", _String2=".") returned 1 [0186.597] wcscmp (_String1="MSGR3EN.DLL", _String2="..") returned 1 [0186.597] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088b800, ftCreationTime.dwHighDateTime=0x1ca5efc, ftLastAccessTime.dwLowDateTime=0x51083e50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb088b800, ftLastWriteTime.dwHighDateTime=0x1ca5efc, nFileSizeHigh=0x0, nFileSizeLow=0x310750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 0 [0186.597] FindClose (in: hFindFile=0x8098f90 | out: hFindFile=0x8098f90) returned 1 [0186.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0186.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 [0186.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 Thread: id = 4752 os_tid = 0x250c [0178.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e686f0 [0178.073] wcscpy (in: _Dest=0x3e686f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" [0178.073] wcscat (in: _Dest=0x3e686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\" [0178.073] wcscat (in: _Dest=0x3e686f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*" [0178.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0178.073] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc970910, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xdc970910, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdc970910, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099590 [0186.263] wcscmp (_String1=".", _String2=".") returned 0 [0186.263] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc970910, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xdc970910, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdc970910, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.263] wcscmp (_String1="..", _String2=".") returned 1 [0186.263] wcscmp (_String1="..", _String2="..") returned 0 [0186.264] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa867400, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdca2eff0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xaa867400, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0xa79990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 1 [0186.264] wcscmp (_String1="MSGR3FR.DLL", _String2=".") returned 1 [0186.264] wcscmp (_String1="MSGR3FR.DLL", _String2="..") returned 1 [0186.264] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa867400, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdca2eff0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xaa867400, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0xa79990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 0 [0186.264] FindClose (in: hFindFile=0x8099590 | out: hFindFile=0x8099590) returned 1 [0186.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0186.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0186.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68240) returned 1 Thread: id = 4753 os_tid = 0x2510 [0178.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e67ef8 [0178.073] wcscpy (in: _Dest=0x3e67ef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" [0178.073] wcscat (in: _Dest=0x3e67ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\" [0178.073] wcscat (in: _Dest=0x3e67ef8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*" [0178.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0178.073] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b9ede10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4b9ede10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b9ede10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f90 [0186.605] wcscmp (_String1=".", _String2=".") returned 0 [0186.605] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b9ede10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4b9ede10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b9ede10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.606] wcscmp (_String1="..", _String2=".") returned 1 [0186.606] wcscmp (_String1="..", _String2="..") returned 0 [0186.606] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fa4600, ftCreationTime.dwHighDateTime=0x1ca5f02, ftLastAccessTime.dwLowDateTime=0x4ba13f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14fa4600, ftLastWriteTime.dwHighDateTime=0x1ca5f02, nFileSizeHigh=0x0, nFileSizeLow=0x11b748, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 1 [0186.606] wcscmp (_String1="MSGR3ES.DLL", _String2=".") returned 1 [0186.606] wcscmp (_String1="MSGR3ES.DLL", _String2="..") returned 1 [0186.606] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fa4600, ftCreationTime.dwHighDateTime=0x1ca5f02, ftLastAccessTime.dwLowDateTime=0x4ba13f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14fa4600, ftLastWriteTime.dwHighDateTime=0x1ca5f02, nFileSizeHigh=0x0, nFileSizeLow=0x11b748, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 0 [0186.606] FindClose (in: hFindFile=0x8098f90 | out: hFindFile=0x8098f90) returned 1 [0189.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0189.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 [0189.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 Thread: id = 4754 os_tid = 0x2514 [0178.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex")) returned 0x20 [0186.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX", dwFileAttributes=0x20) returned 0 [0186.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.446] GetLastError () returned 0x5 [0186.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX", dwFileAttributes=0x20) returned 0 [0186.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 4755 os_tid = 0x2518 [0178.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex")) returned 0x20 [0186.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX", dwFileAttributes=0x20) returned 0 [0186.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.604] GetLastError () returned 0x5 [0186.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX", dwFileAttributes=0x20) returned 0 [0186.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bec50) returned 1 Thread: id = 4756 os_tid = 0x251c [0178.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex")) returned 0x20 [0186.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX", dwFileAttributes=0x20) returned 0 [0186.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.444] GetLastError () returned 0x5 [0186.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX", dwFileAttributes=0x20) returned 0 [0186.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfe60) returned 1 Thread: id = 4757 os_tid = 0x2520 [0178.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex")) returned 0x20 [0186.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX", dwFileAttributes=0x20) returned 0 [0186.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.442] GetLastError () returned 0x5 [0186.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX", dwFileAttributes=0x20) returned 0 [0186.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 4758 os_tid = 0x2524 [0178.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex")) returned 0x20 [0186.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX", dwFileAttributes=0x20) returned 0 [0186.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.440] GetLastError () returned 0x5 [0186.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX", dwFileAttributes=0x20) returned 0 [0186.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 4759 os_tid = 0x2528 [0178.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex")) returned 0x20 [0186.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX", dwFileAttributes=0x20) returned 0 [0186.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.602] GetLastError () returned 0x5 [0186.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX", dwFileAttributes=0x20) returned 0 [0186.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 4760 os_tid = 0x252c [0178.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub")) returned 0x20 [0186.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub", dwFileAttributes=0x20) returned 0 [0186.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.601] GetLastError () returned 0x5 [0186.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub", dwFileAttributes=0x20) returned 0 [0186.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 4761 os_tid = 0x2530 [0178.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex")) returned 0x20 [0186.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX", dwFileAttributes=0x20) returned 0 [0186.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.439] GetLastError () returned 0x5 [0186.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX", dwFileAttributes=0x20) returned 0 [0186.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 4762 os_tid = 0x2534 [0178.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub")) returned 0x20 [0186.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub", dwFileAttributes=0x20) returned 0 [0186.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.437] GetLastError () returned 0x5 [0186.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub", dwFileAttributes=0x20) returned 0 [0186.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 4763 os_tid = 0x2538 [0178.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex")) returned 0x20 [0186.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX", dwFileAttributes=0x20) returned 0 [0186.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.599] GetLastError () returned 0x5 [0186.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX", dwFileAttributes=0x20) returned 0 [0186.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfc40) returned 1 Thread: id = 4764 os_tid = 0x253c [0178.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub")) returned 0x20 [0186.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub", dwFileAttributes=0x20) returned 0 [0186.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.455] GetLastError () returned 0x5 [0186.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub", dwFileAttributes=0x20) returned 0 [0186.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 4765 os_tid = 0x2540 [0178.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex")) returned 0x20 [0186.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX", dwFileAttributes=0x20) returned 0 [0186.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.453] GetLastError () returned 0x5 [0186.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX", dwFileAttributes=0x20) returned 0 [0186.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 4766 os_tid = 0x2544 [0178.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex")) returned 0x20 [0186.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX", dwFileAttributes=0x20) returned 0 [0186.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.452] GetLastError () returned 0x5 [0186.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX", dwFileAttributes=0x20) returned 0 [0186.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 4767 os_tid = 0x2548 [0178.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex")) returned 0x20 [0186.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX", dwFileAttributes=0x20) returned 0 [0186.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.450] GetLastError () returned 0x5 [0186.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX", dwFileAttributes=0x20) returned 0 [0186.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 4768 os_tid = 0x254c [0178.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex")) returned 0x20 [0186.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX", dwFileAttributes=0x20) returned 0 [0186.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.448] GetLastError () returned 0x5 [0186.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX", dwFileAttributes=0x20) returned 0 [0186.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 4769 os_tid = 0x2550 [0178.082] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json")) returned 0x2020 [0178.083] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0189.958] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe0c [0191.534] GetFileSizeEx (in: hFile=0xe0c, lpFileSize=0xc34f7b0 | out: lpFileSize=0xc34f7b0*=265) returned 1 [0191.535] SetFilePointerEx (in: hFile=0xe0c, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.535] ReadFile (in: hFile=0xe0c, lpBuffer=0xc34f7bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc34f798, lpOverlapped=0x0 | out: lpBuffer=0xc34f7bc*, lpNumberOfBytesRead=0xc34f798*=0x4, lpOverlapped=0x0) returned 1 [0191.537] SetFilePointerEx (in: hFile=0xe0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42da8 [0191.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42df8 [0191.537] NtQuerySystemTime (in: CurrentTime=0xc34f738 | out: CurrentTime=0xc34f738*=132471540594492000) returned 0x0 [0191.537] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x7cb3943c [0191.537] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x624e7e01 [0191.537] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x21206a1b [0191.537] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x467b2a4 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x2f5599f8 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0xe06773a [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x531585e3 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x2a608e41 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x617ea6 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x4e332275 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x77ce527c [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0xf9e6912 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x6bbcb2c2 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x609b9a33 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x29cc0547 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x485450e2 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x62a42f81 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x6b830f41 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x48cd5fc0 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x9101c94 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x5cddfd5a [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x32a70631 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x3149c517 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x7c8cd074 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x7a78664d [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x3dad8dea [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x44ef2d7c [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x67479092 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x216f027a [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x7aecea75 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x66e11317 [0191.538] RtlRandomEx (in: Seed=0xc34f730 | out: Seed=0xc34f730) returned 0x353cf1aa [0191.549] ReadFile (in: hFile=0xe0c, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0xc34f72c, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0xc34f72c*=0x109, lpOverlapped=0x0) returned 1 [0191.549] SetFilePointerEx (in: hFile=0xe0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.549] WriteFile (in: hFile=0xe0c, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0xc34f730, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xc34f730*=0x109, lpOverlapped=0x0) returned 1 [0195.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3a0 [0195.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0195.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0195.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0195.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0195.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e08) returned 1 [0195.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6abc0) returned 1 [0195.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e694e0 [0195.990] SetFilePointerEx (in: hFile=0xe0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.990] WriteFile (in: hFile=0xe0c, lpBuffer=0x30bcce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc34f7a4, lpOverlapped=0x0 | out: lpBuffer=0x30bcce0*, lpNumberOfBytesWritten=0xc34f7a4*=0x10c, lpOverlapped=0x0) returned 1 [0196.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0196.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69510) returned 1 [0196.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0196.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694e0) returned 1 [0196.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3a0) returned 1 [0196.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0196.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42330) returned 1 [0196.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423d0) returned 1 [0196.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x2d2ac0 [0196.434] wcscpy (in: _Dest=0x2d2ac0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" [0196.434] wcscat (in: _Dest=0x2d2ac0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json.f0dbec" [0196.434] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0xc34f728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8332e50 [0196.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332e50) returned 1 [0196.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07858) returned 1 [0196.752] NtQueryInformationFile (in: FileHandle=0xe0c, IoStatusBlock=0xc34f700, FileInformation=0xc34f708, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc34f700, FileInformation=0xc34f708) returned 0x0 [0196.752] NtSetInformationFile (FileHandle=0xe0c, IoStatusBlock=0xc34f700, FileInformation=0xc34f708, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d2ac0) returned 1 [0196.962] FlushFileBuffers (hFile=0xe0c) returned 1 [0196.974] CloseHandle (hObject=0xe0c) returned 1 [0197.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f08c8 [0197.233] wcscpy (in: _Dest=0x81f08c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" [0197.233] wcscat (in: _Dest=0x81f08c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\F0DBEC-Readme.txt" [0197.233] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0197.233] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1da8 [0197.456] WriteFile (in: hFile=0x1da8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc34f74c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc34f74c*=0x70c, lpOverlapped=0x0) returned 1 [0197.928] CloseHandle (hObject=0x1da8) returned 1 [0197.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f08c8) returned 1 [0197.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2428) returned 1 Thread: id = 4770 os_tid = 0x25b8 [0178.084] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json")) returned 0x2020 [0178.084] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0189.925] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ccc [0191.315] GetFileSizeEx (in: hFile=0x1ccc, lpFileSize=0xc1efcf8 | out: lpFileSize=0xc1efcf8*=259) returned 1 [0191.316] SetFilePointerEx (in: hFile=0x1ccc, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.316] ReadFile (in: hFile=0x1ccc, lpBuffer=0xc1efd04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc1efce0, lpOverlapped=0x0 | out: lpBuffer=0xc1efd04*, lpNumberOfBytesRead=0xc1efce0*=0x4, lpOverlapped=0x0) returned 1 [0191.317] SetFilePointerEx (in: hFile=0x1ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42290 [0191.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0191.317] NtQuerySystemTime (in: CurrentTime=0xc1efc80 | out: CurrentTime=0xc1efc80*=132471540592152000) returned 0x0 [0191.317] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x5de6d885 [0191.317] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x27d2645d [0191.317] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x3371c7a6 [0191.317] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x3767a651 [0191.317] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x5898d150 [0191.317] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x45414817 [0191.317] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x480540c3 [0191.317] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x66dc9c7d [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x62cf0841 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x5a9aef48 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x76c13e9 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x4ebac8e7 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x402ee987 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x483068c1 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0xe7c730e [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x7f37134 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x8d0241f [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x3334f134 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x17f1d13b [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x585dbe5d [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x2a9affd4 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x65c4c65c [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x16e0a7e1 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x79a411e8 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x4884c1c4 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x251b6770 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x30b5703b [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x615d7594 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x1c00b296 [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x712d3e6a [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x26a5fb7e [0191.318] RtlRandomEx (in: Seed=0xc1efc78 | out: Seed=0xc1efc78) returned 0x76dddf7a [0191.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bc0a0 [0191.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8248458 [0191.326] ReadFile (in: hFile=0x1ccc, lpBuffer=0x80bc0a0, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0xc1efc74, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesRead=0xc1efc74*=0x103, lpOverlapped=0x0) returned 1 [0191.327] SetFilePointerEx (in: hFile=0x1ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.327] WriteFile (in: hFile=0x1ccc, lpBuffer=0x8248458*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xc1efc78, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesWritten=0xc1efc78*=0x103, lpOverlapped=0x0) returned 1 [0195.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0195.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0195.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0195.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e39a8) returned 1 [0195.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68dc0 [0195.939] SetFilePointerEx (in: hFile=0x1ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.939] WriteFile (in: hFile=0x1ccc, lpBuffer=0x30bcbc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc1efcec, lpOverlapped=0x0 | out: lpBuffer=0x30bcbc8*, lpNumberOfBytesWritten=0xc1efcec*=0x10c, lpOverlapped=0x0) returned 1 [0196.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0196.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d90) returned 1 [0196.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0196.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68dc0) returned 1 [0196.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0196.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42290) returned 1 [0196.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0196.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0196.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405538 [0196.404] wcscpy (in: _Dest=0x8405538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" [0196.404] wcscat (in: _Dest=0x8405538, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json.f0dbec" [0196.404] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0xc1efc70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8ee8 [0196.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8ee8) returned 1 [0196.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f4e30) returned 1 [0196.742] NtQueryInformationFile (in: FileHandle=0x1ccc, IoStatusBlock=0xc1efc48, FileInformation=0xc1efc50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc1efc48, FileInformation=0xc1efc50) returned 0x0 [0196.742] NtSetInformationFile (FileHandle=0x1ccc, IoStatusBlock=0xc1efc48, FileInformation=0xc1efc50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405538) returned 1 [0196.940] FlushFileBuffers (hFile=0x1ccc) returned 1 [0196.955] CloseHandle (hObject=0x1ccc) returned 1 [0197.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0300 [0197.223] wcscpy (in: _Dest=0x81f0300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" [0197.223] wcscat (in: _Dest=0x81f0300, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\F0DBEC-Readme.txt" [0197.223] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0197.223] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1908 [0197.453] WriteFile (in: hFile=0x1908, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc1efc94, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc1efc94*=0x70c, lpOverlapped=0x0) returned 1 [0197.900] CloseHandle (hObject=0x1908) returned 1 [0197.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0300) returned 1 [0197.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2550) returned 1 Thread: id = 4771 os_tid = 0x25bc [0178.085] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json")) returned 0x2020 [0178.085] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0189.925] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f4 [0193.522] GetFileSizeEx (in: hFile=0x15f4, lpFileSize=0xc19f9a0 | out: lpFileSize=0xc19f9a0*=179) returned 1 [0193.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0193.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7f8 [0193.522] NtQuerySystemTime (in: CurrentTime=0xc19f928 | out: CurrentTime=0xc19f928*=132471540614304000) returned 0x0 [0193.522] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0xdee7441 [0193.522] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x5f3464e1 [0193.522] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x2a6a4d05 [0193.522] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x1e205ea7 [0193.522] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x4786b59e [0193.522] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x1dae4626 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x7e051321 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x39417043 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x260f1d3 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x7dd419c7 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x1c5b65ff [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x396190e0 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x28d06716 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x1c63d9d6 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x55d1a113 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x26f3131b [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x1fd4f824 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x79cecf63 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x2ac37eba [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x7d6a9c24 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x2262b7f4 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x21c67fe1 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x52253f0c [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x23c02d94 [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x76a681a [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x15caf7fd [0193.523] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x48b3ed24 [0193.524] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x4070a516 [0193.524] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x28d06716 [0193.524] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x40cdc454 [0193.524] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x482cd275 [0193.524] RtlRandomEx (in: Seed=0xc19f920 | out: Seed=0xc19f920) returned 0x69bf1113 [0193.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x834c538 [0193.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8350140 [0193.536] ReadFile (in: hFile=0x15f4, lpBuffer=0x834c538, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc19f91c, lpOverlapped=0x0 | out: lpBuffer=0x834c538*, lpNumberOfBytesRead=0xc19f91c*=0xb3, lpOverlapped=0x0) returned 1 [0193.539] SetFilePointerEx (in: hFile=0x15f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.539] WriteFile (in: hFile=0x15f4, lpBuffer=0x8350140*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc19f920, lpOverlapped=0x0 | out: lpBuffer=0x8350140*, lpNumberOfBytesWritten=0xc19f920*=0xb3, lpOverlapped=0x0) returned 1 [0201.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062a80 [0201.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062aa8 [0201.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062aa8) returned 1 [0201.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8350140) returned 1 [0201.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x834c538) returned 1 [0201.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 [0201.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6ad0) returned 1 [0201.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f3a8 [0201.587] SetFilePointerEx (in: hFile=0x15f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.587] WriteFile (in: hFile=0x15f4, lpBuffer=0x81df760*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc19f994, lpOverlapped=0x0 | out: lpBuffer=0x81df760*, lpNumberOfBytesWritten=0xc19f994*=0x10c, lpOverlapped=0x0) returned 1 [0203.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df760) returned 1 [0203.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f6a8) returned 1 [0203.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062aa8) returned 1 [0203.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f3a8) returned 1 [0203.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a80) returned 1 [0203.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0203.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0203.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0203.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f58b8 [0203.816] wcscpy (in: _Dest=0x81f58b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" [0203.816] wcscat (in: _Dest=0x81f58b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.f0dbec" [0203.816] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0xc19f918, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3c990 [0207.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c990) returned 1 [0207.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8316ab8) returned 1 [0207.183] NtQueryInformationFile (in: FileHandle=0x15f4, IoStatusBlock=0xc19f8f0, FileInformation=0xc19f8f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc19f8f0, FileInformation=0xc19f8f8) returned 0x0 [0207.183] NtSetInformationFile (FileHandle=0x15f4, IoStatusBlock=0xc19f8f0, FileInformation=0xc19f8f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f58b8) returned 1 [0208.187] FlushFileBuffers (hFile=0x15f4) returned 1 [0208.194] CloseHandle (hObject=0x15f4) returned 1 [0208.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83eea68 [0208.496] wcscpy (in: _Dest=0x83eea68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" [0208.496] wcscat (in: _Dest=0x83eea68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\F0DBEC-Readme.txt" [0208.496] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0208.496] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a04 [0208.878] WriteFile (in: hFile=0x1a04, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc19f93c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc19f93c*=0x70c, lpOverlapped=0x0) returned 1 [0209.473] CloseHandle (hObject=0x1a04) returned 1 [0209.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eea68) returned 1 [0209.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2678) returned 1 Thread: id = 4772 os_tid = 0x25c0 [0178.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333590 [0178.086] wcscpy (in: _Dest=0x8333590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0178.086] wcscat (in: _Dest=0x8333590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" [0178.086] wcscat (in: _Dest=0x8333590, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*" [0178.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0178.086] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62738e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6275ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6275ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80992d0 [0183.754] wcscmp (_String1=".", _String2=".") returned 0 [0183.754] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62738e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6275ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6275ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.754] wcscmp (_String1="..", _String2=".") returned 1 [0183.754] wcscmp (_String1="..", _String2="..") returned 0 [0183.754] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6275ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6278700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.754] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.754] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8400ef8 [0183.754] wcscpy (in: _Dest=0x8400ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0183.754] wcscat (in: _Dest=0x8400ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" [0183.754] wcscat (in: _Dest=0x8400ef8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" [0188.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8400ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0188.091] FindNextFileW (in: hFindFile=0x80992d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6275ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6278700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.091] FindClose (in: hFindFile=0x80992d0 | out: hFindFile=0x80992d0) returned 1 [0189.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0189.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333590) returned 1 [0189.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6410) returned 1 Thread: id = 4773 os_tid = 0x25c4 [0178.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333698 [0178.087] wcscpy (in: _Dest=0x8333698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0178.087] wcscat (in: _Dest=0x8333698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" [0178.087] wcscat (in: _Dest=0x8333698, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*" [0178.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0178.087] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe627d520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe627fc30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe627fc30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099410 [0183.755] wcscmp (_String1=".", _String2=".") returned 0 [0183.755] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe627d520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe627fc30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe627fc30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.755] wcscmp (_String1="..", _String2=".") returned 1 [0183.755] wcscmp (_String1="..", _String2="..") returned 0 [0183.755] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe627fc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6282340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.755] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.755] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401398 [0183.756] wcscpy (in: _Dest=0x8401398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0183.756] wcscat (in: _Dest=0x8401398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" [0183.756] wcscat (in: _Dest=0x8401398, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" [0187.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0187.998] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe627fc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6282340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.998] FindClose (in: hFindFile=0x8099410 | out: hFindFile=0x8099410) returned 1 [0187.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0187.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333698) returned 1 [0187.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60f8) returned 1 Thread: id = 4774 os_tid = 0x25c8 [0178.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83337a0 [0178.088] wcscpy (in: _Dest=0x83337a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0178.088] wcscat (in: _Dest=0x83337a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" [0178.088] wcscat (in: _Dest=0x83337a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*" [0178.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0178.088] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6287160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe628bf80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe628bf80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80995d0 [0183.756] wcscmp (_String1=".", _String2=".") returned 0 [0183.756] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6287160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe628bf80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe628bf80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.756] wcscmp (_String1="..", _String2=".") returned 1 [0183.756] wcscmp (_String1="..", _String2="..") returned 0 [0183.756] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe628bf80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62abb50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.756] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.756] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8402050 [0183.757] wcscpy (in: _Dest=0x8402050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0183.757] wcscat (in: _Dest=0x8402050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" [0183.757] wcscat (in: _Dest=0x8402050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" [0187.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0187.306] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe628bf80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62abb50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.306] FindClose (in: hFindFile=0x80995d0 | out: hFindFile=0x80995d0) returned 1 [0187.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0187.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83337a0) returned 1 [0187.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6200) returned 1 Thread: id = 4775 os_tid = 0x25cc [0178.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83338a8 [0178.088] wcscpy (in: _Dest=0x83338a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0178.088] wcscat (in: _Dest=0x83338a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" [0178.089] wcscat (in: _Dest=0x83338a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*" [0178.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0178.089] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62b0970, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62b5790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098850 [0183.757] wcscmp (_String1=".", _String2=".") returned 0 [0183.757] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62b0970, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62b5790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.757] wcscmp (_String1="..", _String2=".") returned 1 [0183.757] wcscmp (_String1="..", _String2="..") returned 0 [0183.757] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62b5790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.757] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.757] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8402178 [0183.758] wcscpy (in: _Dest=0x8402178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0183.758] wcscat (in: _Dest=0x8402178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" [0183.758] wcscat (in: _Dest=0x8402178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" [0187.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0187.313] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62b5790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.313] FindClose (in: hFindFile=0x8098850 | out: hFindFile=0x8098850) returned 1 [0187.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0187.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83338a8) returned 1 [0187.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5180) returned 1 Thread: id = 4776 os_tid = 0x25d0 [0178.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333170 [0178.090] wcscpy (in: _Dest=0x8333170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0178.090] wcscat (in: _Dest=0x8333170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" [0178.090] wcscat (in: _Dest=0x8333170, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*" [0178.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0178.090] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62ba5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62bf3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099450 [0183.758] wcscmp (_String1=".", _String2=".") returned 0 [0183.758] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62ba5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62bf3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.758] wcscmp (_String1="..", _String2=".") returned 1 [0183.758] wcscmp (_String1="..", _String2="..") returned 0 [0183.758] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62bf3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.758] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.758] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x84022a0 [0183.758] wcscpy (in: _Dest=0x84022a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0183.759] wcscat (in: _Dest=0x84022a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" [0183.759] wcscat (in: _Dest=0x84022a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" [0187.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84022a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0187.316] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62bf3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.316] FindClose (in: hFindFile=0x8099450 | out: hFindFile=0x8099450) returned 1 [0187.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0187.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333170) returned 1 [0187.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef57b0) returned 1 Thread: id = 4777 os_tid = 0x25d4 [0178.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333278 [0178.090] wcscpy (in: _Dest=0x8333278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0178.090] wcscat (in: _Dest=0x8333278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" [0178.091] wcscat (in: _Dest=0x8333278, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*" [0178.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0178.091] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62c6900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62c9010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099290 [0183.759] wcscmp (_String1=".", _String2=".") returned 0 [0183.759] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62c6900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62c9010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.759] wcscmp (_String1="..", _String2=".") returned 1 [0183.759] wcscmp (_String1="..", _String2="..") returned 0 [0183.759] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62c9010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.759] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.759] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x84023c8 [0183.759] wcscpy (in: _Dest=0x84023c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0183.759] wcscat (in: _Dest=0x84023c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" [0183.760] wcscat (in: _Dest=0x84023c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" [0187.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84023c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0187.319] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62c9010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.319] FindClose (in: hFindFile=0x8099290 | out: hFindFile=0x8099290) returned 1 [0187.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0187.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333278) returned 1 [0187.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6308) returned 1 Thread: id = 4778 os_tid = 0x25d8 [0178.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335278 [0178.091] wcscpy (in: _Dest=0x8335278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0178.091] wcscat (in: _Dest=0x8335278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" [0178.091] wcscat (in: _Dest=0x8335278, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*" [0178.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0178.091] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62d0540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62d2c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c10 [0183.760] wcscmp (_String1=".", _String2=".") returned 0 [0183.760] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62d0540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62d2c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.761] wcscmp (_String1="..", _String2=".") returned 1 [0183.761] wcscmp (_String1="..", _String2="..") returned 0 [0183.761] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62d2c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.761] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.761] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x84024f0 [0183.761] wcscpy (in: _Dest=0x84024f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0183.761] wcscat (in: _Dest=0x84024f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" [0183.761] wcscat (in: _Dest=0x84024f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" [0187.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84024f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2894 [0187.322] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62d2c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.322] FindClose (in: hFindFile=0x8098c10 | out: hFindFile=0x8098c10) returned 1 [0187.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0187.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335278) returned 1 [0187.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5e88) returned 1 Thread: id = 4779 os_tid = 0x25dc [0178.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x83487d0 [0178.092] wcscpy (in: _Dest=0x83487d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0178.092] wcscat (in: _Dest=0x83487d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" [0178.092] wcscat (in: _Dest=0x83487d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*" [0178.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0178.092] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62dc890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62defa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62defa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098890 [0183.761] wcscmp (_String1=".", _String2=".") returned 0 [0183.761] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62dc890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62defa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62defa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.762] wcscmp (_String1="..", _String2=".") returned 1 [0183.762] wcscmp (_String1="..", _String2="..") returned 0 [0183.762] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62defa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.762] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.762] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8402618 [0183.762] wcscpy (in: _Dest=0x8402618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0183.762] wcscat (in: _Dest=0x8402618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" [0183.762] wcscat (in: _Dest=0x8402618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" [0187.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2660 [0187.325] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62defa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.325] FindClose (in: hFindFile=0x8098890 | out: hFindFile=0x8098890) returned 1 [0187.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0187.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83487d0) returned 1 [0187.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5d80) returned 1 Thread: id = 4780 os_tid = 0x25e0 [0178.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x83485a0 [0178.093] wcscpy (in: _Dest=0x83485a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0178.093] wcscat (in: _Dest=0x83485a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" [0178.093] wcscat (in: _Dest=0x83485a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*" [0178.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0178.093] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62e64d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62e8be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098fd0 [0183.762] wcscmp (_String1=".", _String2=".") returned 0 [0183.762] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62e64d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62e8be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.763] wcscmp (_String1="..", _String2=".") returned 1 [0183.763] wcscmp (_String1="..", _String2="..") returned 0 [0183.763] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62e8be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.763] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.763] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8402740 [0183.763] wcscpy (in: _Dest=0x8402740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0183.763] wcscat (in: _Dest=0x8402740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" [0183.763] wcscat (in: _Dest=0x8402740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" [0187.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8402740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2898 [0187.328] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62e8be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.328] FindClose (in: hFindFile=0x8098fd0 | out: hFindFile=0x8098fd0) returned 1 [0187.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0187.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83485a0) returned 1 [0187.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6ae8) returned 1 Thread: id = 4781 os_tid = 0x25e4 [0178.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335170 [0178.095] wcscpy (in: _Dest=0x8335170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0178.095] wcscat (in: _Dest=0x8335170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" [0178.095] wcscat (in: _Dest=0x8335170, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*" [0178.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0178.095] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62f2820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62f4f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099790 [0183.763] wcscmp (_String1=".", _String2=".") returned 0 [0183.763] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62f2820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62f4f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.764] wcscmp (_String1="..", _String2=".") returned 1 [0183.764] wcscmp (_String1="..", _String2="..") returned 0 [0183.764] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62f4f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.764] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.764] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d0ec0 [0183.764] wcscpy (in: _Dest=0x81d0ec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0183.764] wcscat (in: _Dest=0x81d0ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" [0183.764] wcscat (in: _Dest=0x81d0ec0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" [0186.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0186.807] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62f4f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.807] FindClose (in: hFindFile=0x8099790 | out: hFindFile=0x8099790) returned 1 [0186.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0186.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335170) returned 1 [0186.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f69e0) returned 1 Thread: id = 4782 os_tid = 0x25e8 [0178.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x81e12b8 [0178.096] wcscpy (in: _Dest=0x81e12b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0178.096] wcscat (in: _Dest=0x81e12b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" [0178.096] wcscat (in: _Dest=0x81e12b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*" [0178.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0178.096] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62fc460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62feb70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62feb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099090 [0183.764] wcscmp (_String1=".", _String2=".") returned 0 [0183.764] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62fc460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62feb70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62feb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.764] wcscmp (_String1="..", _String2=".") returned 1 [0183.764] wcscmp (_String1="..", _String2="..") returned 0 [0183.765] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62feb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6301280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.765] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.765] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81d1800 [0183.765] wcscpy (in: _Dest=0x81d1800, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0183.765] wcscat (in: _Dest=0x81d1800, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" [0183.765] wcscat (in: _Dest=0x81d1800, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" [0186.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2668 [0186.810] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62feb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6301280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.810] FindClose (in: hFindFile=0x8099090 | out: hFindFile=0x8099090) returned 1 [0186.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0186.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e12b8) returned 1 [0186.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346b60) returned 1 Thread: id = 4783 os_tid = 0x25ec [0178.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335590 [0178.097] wcscpy (in: _Dest=0x8335590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0178.097] wcscat (in: _Dest=0x8335590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" [0178.097] wcscat (in: _Dest=0x8335590, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*" [0178.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0178.097] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe630d5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe630fce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe630fce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0183.765] wcscmp (_String1=".", _String2=".") returned 0 [0183.765] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe630d5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe630fce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe630fce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.765] wcscmp (_String1="..", _String2=".") returned 1 [0183.765] wcscmp (_String1="..", _String2="..") returned 0 [0183.765] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe630fce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63123f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.765] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.765] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d1360 [0183.765] wcscpy (in: _Dest=0x81d1360, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0183.766] wcscat (in: _Dest=0x81d1360, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" [0183.766] wcscat (in: _Dest=0x81d1360, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" [0186.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28cc [0186.813] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe630fce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63123f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.813] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335590) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f68d8) returned 1 Thread: id = 4784 os_tid = 0x25f0 [0178.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334b40 [0178.098] wcscpy (in: _Dest=0x8334b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0178.098] wcscat (in: _Dest=0x8334b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" [0178.098] wcscat (in: _Dest=0x8334b40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*" [0178.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0178.098] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6317210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe631c030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0183.766] wcscmp (_String1=".", _String2=".") returned 0 [0183.766] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6317210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe631c030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.766] wcscmp (_String1="..", _String2=".") returned 1 [0183.766] wcscmp (_String1="..", _String2="..") returned 0 [0183.766] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe631c030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.767] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.767] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d15b0 [0183.767] wcscpy (in: _Dest=0x81d15b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0183.767] wcscat (in: _Dest=0x81d15b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" [0183.767] wcscat (in: _Dest=0x81d15b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" [0186.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d15b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2678 [0186.816] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe631c030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.816] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0186.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0186.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334b40) returned 1 [0186.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f67d0) returned 1 Thread: id = 4785 os_tid = 0x2620 [0178.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8335068 [0178.098] wcscpy (in: _Dest=0x8335068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0178.098] wcscat (in: _Dest=0x8335068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" [0178.098] wcscat (in: _Dest=0x8335068, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*" [0178.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0178.099] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6320e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6325c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0183.767] wcscmp (_String1=".", _String2=".") returned 0 [0183.767] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6320e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6325c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.767] wcscmp (_String1="..", _String2=".") returned 1 [0183.767] wcscmp (_String1="..", _String2="..") returned 0 [0183.767] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6325c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.767] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.767] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81d1ca0 [0183.768] wcscpy (in: _Dest=0x81d1ca0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0183.768] wcscat (in: _Dest=0x81d1ca0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" [0183.768] wcscat (in: _Dest=0x81d1ca0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" [0186.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b5c [0186.825] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6325c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.825] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0186.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0186.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335068) returned 1 [0186.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f66c8) returned 1 Thread: id = 4786 os_tid = 0x2624 [0178.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334c48 [0178.099] wcscpy (in: _Dest=0x8334c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0178.099] wcscat (in: _Dest=0x8334c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" [0178.099] wcscat (in: _Dest=0x8334c48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*" [0178.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a3f8 [0178.099] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe632d1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe632f8b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0183.768] wcscmp (_String1=".", _String2=".") returned 0 [0183.768] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe632d1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe632f8b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.769] wcscmp (_String1="..", _String2=".") returned 1 [0183.769] wcscmp (_String1="..", _String2="..") returned 0 [0183.769] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe632f8b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.769] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.769] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d0b48 [0183.769] wcscpy (in: _Dest=0x81d0b48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0183.769] wcscat (in: _Dest=0x81d0b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" [0183.769] wcscat (in: _Dest=0x81d0b48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" [0186.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2680 [0186.832] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x804a3f8 | out: lpFindFileData=0x804a3f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe632f8b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.832] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0186.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a3f8) returned 1 [0186.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334c48) returned 1 [0186.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f65c0) returned 1 Thread: id = 4787 os_tid = 0x2628 [0178.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f41a0 [0178.100] wcscpy (in: _Dest=0x81f41a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0178.100] wcscat (in: _Dest=0x81f41a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" [0178.100] wcscat (in: _Dest=0x81f41a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*" [0178.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047170 [0178.100] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6336de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63394f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098cd0 [0183.769] wcscmp (_String1=".", _String2=".") returned 0 [0183.769] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6336de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63394f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.769] wcscmp (_String1="..", _String2=".") returned 1 [0183.769] wcscmp (_String1="..", _String2="..") returned 0 [0183.770] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63394f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.770] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.770] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d0fe8 [0183.770] wcscpy (in: _Dest=0x81d0fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0183.770] wcscat (in: _Dest=0x81d0fe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" [0183.770] wcscat (in: _Dest=0x81d0fe8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" [0185.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0185.335] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x8047170 | out: lpFindFileData=0x8047170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63394f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.335] FindClose (in: hFindFile=0x8098cd0 | out: hFindFile=0x8098cd0) returned 1 [0185.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047170) returned 1 [0185.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f41a0) returned 1 [0185.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f64b8) returned 1 Thread: id = 4788 os_tid = 0x262c [0178.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f4098 [0178.101] wcscpy (in: _Dest=0x81f4098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0178.101] wcscat (in: _Dest=0x81f4098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" [0178.101] wcscat (in: _Dest=0x81f4098, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*" [0178.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047d78 [0178.101] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6340a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6343130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6343130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099510 [0183.770] wcscmp (_String1=".", _String2=".") returned 0 [0183.770] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6340a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6343130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6343130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.770] wcscmp (_String1="..", _String2=".") returned 1 [0183.770] wcscmp (_String1="..", _String2="..") returned 0 [0183.770] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6343130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6345840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.771] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.771] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d08f8 [0183.771] wcscpy (in: _Dest=0x81d08f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0183.771] wcscat (in: _Dest=0x81d08f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" [0183.771] wcscat (in: _Dest=0x81d08f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" [0185.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d08f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bec [0185.337] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x8047d78 | out: lpFindFileData=0x8047d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6343130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6345840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.337] FindClose (in: hFindFile=0x8099510 | out: hFindFile=0x8099510) returned 1 [0185.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047d78) returned 1 [0185.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4098) returned 1 [0185.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f63b0) returned 1 Thread: id = 4789 os_tid = 0x2630 [0178.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f44b8 [0178.102] wcscpy (in: _Dest=0x81f44b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0178.102] wcscat (in: _Dest=0x81f44b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" [0178.102] wcscat (in: _Dest=0x81f44b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*" [0178.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049f28 [0178.102] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe634a660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634cd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe634cd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80994d0 [0183.771] wcscmp (_String1=".", _String2=".") returned 0 [0183.771] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe634a660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634cd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe634cd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.771] wcscmp (_String1="..", _String2=".") returned 1 [0183.771] wcscmp (_String1="..", _String2="..") returned 0 [0183.771] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe634cd70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634f480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.771] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.771] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d1928 [0183.772] wcscpy (in: _Dest=0x81d1928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0183.772] wcscat (in: _Dest=0x81d1928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" [0183.772] wcscat (in: _Dest=0x81d1928, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" [0185.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2984 [0185.340] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x8049f28 | out: lpFindFileData=0x8049f28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe634cd70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634f480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.340] FindClose (in: hFindFile=0x80994d0 | out: hFindFile=0x80994d0) returned 1 [0185.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049f28) returned 1 [0185.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f44b8) returned 1 [0185.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6e00) returned 1 Thread: id = 4790 os_tid = 0x2634 [0178.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f43b0 [0178.103] wcscpy (in: _Dest=0x81f43b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0178.103] wcscat (in: _Dest=0x81f43b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" [0178.103] wcscat (in: _Dest=0x81f43b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*" [0178.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047b10 [0178.103] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63542a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63569b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63569b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80988d0 [0183.772] wcscmp (_String1=".", _String2=".") returned 0 [0183.772] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63542a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63569b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63569b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.772] wcscmp (_String1="..", _String2=".") returned 1 [0183.772] wcscmp (_String1="..", _String2="..") returned 0 [0183.772] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63569b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63590c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.772] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.772] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d16d8 [0183.772] wcscpy (in: _Dest=0x81d16d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0183.773] wcscat (in: _Dest=0x81d16d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" [0183.773] wcscat (in: _Dest=0x81d16d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" [0185.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d16d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298c [0185.342] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x8047b10 | out: lpFindFileData=0x8047b10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63569b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63590c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.342] FindClose (in: hFindFile=0x80988d0 | out: hFindFile=0x80988d0) returned 1 [0185.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047b10) returned 1 [0185.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f43b0) returned 1 [0185.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6bf0) returned 1 Thread: id = 4791 os_tid = 0x2638 [0178.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f42a8 [0178.104] wcscpy (in: _Dest=0x81f42a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0178.104] wcscat (in: _Dest=0x81f42a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" [0178.104] wcscat (in: _Dest=0x81f42a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*" [0178.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046ca0 [0178.104] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe635dee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63605f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63605f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099390 [0183.773] wcscmp (_String1=".", _String2=".") returned 0 [0183.773] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe635dee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63605f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63605f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.773] wcscmp (_String1="..", _String2=".") returned 1 [0183.773] wcscmp (_String1="..", _String2="..") returned 0 [0183.773] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63605f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6362d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.773] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.773] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d1b78 [0183.773] wcscpy (in: _Dest=0x81d1b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0183.773] wcscat (in: _Dest=0x81d1b78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" [0183.773] wcscat (in: _Dest=0x81d1b78, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" [0185.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2554 [0185.344] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x8046ca0 | out: lpFindFileData=0x8046ca0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63605f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6362d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.344] FindClose (in: hFindFile=0x8099390 | out: hFindFile=0x8099390) returned 1 [0185.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046ca0) returned 1 [0185.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f42a8) returned 1 [0185.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5b70) returned 1 Thread: id = 4792 os_tid = 0x263c [0178.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8322718 [0178.104] wcscpy (in: _Dest=0x8322718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0178.104] wcscat (in: _Dest=0x8322718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" [0178.104] wcscat (in: _Dest=0x8322718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*" [0178.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048718 [0178.105] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6367b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636a230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe636a230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099710 [0183.774] wcscmp (_String1=".", _String2=".") returned 0 [0183.774] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6367b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636a230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe636a230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.774] wcscmp (_String1="..", _String2=".") returned 1 [0183.774] wcscmp (_String1="..", _String2="..") returned 0 [0183.774] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe636a230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636c940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.774] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.774] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d1488 [0183.774] wcscpy (in: _Dest=0x81d1488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0183.774] wcscat (in: _Dest=0x81d1488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" [0183.774] wcscat (in: _Dest=0x81d1488, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" [0185.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c68 [0185.346] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x8048718 | out: lpFindFileData=0x8048718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe636a230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636c940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.346] FindClose (in: hFindFile=0x8099710 | out: hFindFile=0x8099710) returned 1 [0185.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048718) returned 1 [0185.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322718) returned 1 [0185.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333068) returned 1 Thread: id = 4793 os_tid = 0x2640 [0178.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321068 [0178.105] wcscpy (in: _Dest=0x8321068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0178.105] wcscat (in: _Dest=0x8321068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" [0178.105] wcscat (in: _Dest=0x8321068, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*" [0178.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80473d8 [0178.105] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6371760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6373e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6373e70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80993d0 [0183.775] wcscmp (_String1=".", _String2=".") returned 0 [0183.775] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6371760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6373e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6373e70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.775] wcscmp (_String1="..", _String2=".") returned 1 [0183.775] wcscmp (_String1="..", _String2="..") returned 0 [0183.775] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6373e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6376580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.775] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.775] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d1dc8 [0183.775] wcscpy (in: _Dest=0x81d1dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0183.775] wcscat (in: _Dest=0x81d1dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" [0183.775] wcscat (in: _Dest=0x81d1dc8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" [0185.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0185.348] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80473d8 | out: lpFindFileData=0x80473d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6373e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6376580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.348] FindClose (in: hFindFile=0x80993d0 | out: hFindFile=0x80993d0) returned 1 [0185.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80473d8) returned 1 [0185.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321068) returned 1 [0185.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333380) returned 1 Thread: id = 4794 os_tid = 0x2650 [0178.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335cc8 [0178.296] wcscpy (in: _Dest=0x8335cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0178.296] wcscat (in: _Dest=0x8335cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" [0178.296] wcscat (in: _Dest=0x8335cc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*" [0178.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f138 [0178.296] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe637b3a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe637dab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe637dab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0182.135] wcscmp (_String1=".", _String2=".") returned 0 [0182.135] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe637b3a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe637dab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe637dab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.135] wcscmp (_String1="..", _String2=".") returned 1 [0182.135] wcscmp (_String1="..", _String2="..") returned 0 [0182.135] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe637dab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63801c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0182.135] wcscmp (_String1="messages.json", _String2=".") returned 1 [0182.135] wcscmp (_String1="messages.json", _String2="..") returned 1 [0182.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8187110 [0182.135] wcscpy (in: _Dest=0x8187110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0182.135] wcscat (in: _Dest=0x8187110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" [0182.135] wcscat (in: _Dest=0x8187110, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" [0183.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab8 [0183.613] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x808f138 | out: lpFindFileData=0x808f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe637dab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63801c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0183.613] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0183.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f138) returned 1 [0183.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335cc8) returned 1 [0183.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333488) returned 1 Thread: id = 4795 os_tid = 0x2654 [0178.297] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json")) returned 0x2020 [0178.297] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0189.926] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1580 [0193.540] GetFileSizeEx (in: hFile=0x1580, lpFileSize=0xf58fd28 | out: lpFileSize=0xf58fd28*=179) returned 1 [0193.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7f8 [0193.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0193.541] NtQuerySystemTime (in: CurrentTime=0xf58fcb0 | out: CurrentTime=0xf58fcb0*=132471540614460000) returned 0x0 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x415b0f9a [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x43068d37 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x6a19d6d7 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x7e39f563 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x61b95801 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x76d21958 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x7e6c3afe [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0xc742b17 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x6dcdd973 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x415a9687 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x7163dace [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x55181955 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x29be7e7c [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x12be9f26 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0xa2ee497 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x2e897ebb [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x4869564 [0193.541] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0xfaaeb4 [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x51aca9d9 [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x72fe907e [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x4b81e897 [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x6e5fb71b [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x728d620d [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x6a91d6f2 [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x62abc4f6 [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x4f551f5 [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x77ba8ff6 [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x5c68e8da [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0xcc259ae [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x2e98cf15 [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x41fa2bf0 [0193.542] RtlRandomEx (in: Seed=0xf58fca8 | out: Seed=0xf58fca8) returned 0x40dfc9b4 [0193.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148c6060 [0193.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148c9c68 [0193.572] ReadFile (in: hFile=0x1580, lpBuffer=0x148c6060, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xf58fca4, lpOverlapped=0x0 | out: lpBuffer=0x148c6060*, lpNumberOfBytesRead=0xf58fca4*=0xb3, lpOverlapped=0x0) returned 1 [0195.074] SetFilePointerEx (in: hFile=0x1580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.074] WriteFile (in: hFile=0x1580, lpBuffer=0x148c9c68*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xf58fca8, lpOverlapped=0x0 | out: lpBuffer=0x148c9c68*, lpNumberOfBytesWritten=0xf58fca8*=0xb3, lpOverlapped=0x0) returned 1 [0201.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062990 [0201.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80629b8 [0201.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80629b8) returned 1 [0201.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148c9c68) returned 1 [0201.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148c6060) returned 1 [0201.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b898) returned 1 [0201.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5fd8) returned 1 [0201.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f288 [0201.565] SetFilePointerEx (in: hFile=0x1580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.566] WriteFile (in: hFile=0x1580, lpBuffer=0x30bc880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf58fd1c, lpOverlapped=0x0 | out: lpBuffer=0x30bc880*, lpNumberOfBytesWritten=0xf58fd1c*=0x10c, lpOverlapped=0x0) returned 1 [0203.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0203.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f468) returned 1 [0203.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80629b8) returned 1 [0203.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f288) returned 1 [0203.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062990) returned 1 [0203.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7f8) returned 1 [0203.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0203.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0203.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5d98 [0203.829] wcscpy (in: _Dest=0x81f5d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" [0203.829] wcscat (in: _Dest=0x81f5d98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.f0dbec" [0203.829] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0xf58fca0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3cd68 [0207.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd68) returned 1 [0207.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833f780) returned 1 [0207.190] NtQueryInformationFile (in: FileHandle=0x1580, IoStatusBlock=0xf58fc78, FileInformation=0xf58fc80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf58fc78, FileInformation=0xf58fc80) returned 0x0 [0207.190] NtSetInformationFile (FileHandle=0x1580, IoStatusBlock=0xf58fc78, FileInformation=0xf58fc80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5d98) returned 1 [0208.199] FlushFileBuffers (hFile=0x1580) returned 1 [0208.383] CloseHandle (hObject=0x1580) returned 1 [0208.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6140 [0208.817] wcscpy (in: _Dest=0x81f6140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" [0208.817] wcscat (in: _Dest=0x81f6140, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\F0DBEC-Readme.txt" [0208.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0208.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c0 [0209.526] WriteFile (in: hFile=0x13c0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf58fcc4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf58fcc4*=0x70c, lpOverlapped=0x0) returned 1 [0209.581] CloseHandle (hObject=0x13c0) returned 1 [0209.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6140) returned 1 [0209.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d88c8) returned 1 Thread: id = 4796 os_tid = 0x2658 [0178.298] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json")) returned 0x2020 [0178.299] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0189.926] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2174 [0193.278] GetFileSizeEx (in: hFile=0x2174, lpFileSize=0xcc8fc50 | out: lpFileSize=0xcc8fc50*=179) returned 1 [0193.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0193.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0193.279] NtQuerySystemTime (in: CurrentTime=0xcc8fbd8 | out: CurrentTime=0xcc8fbd8*=132471540611808000) returned 0x0 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x27c8baee [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x6249c127 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x50f3a396 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x6a90c116 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x492e84a [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x6886bd62 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x16848a38 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x5fc76615 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x75800b74 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x79e671a9 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x64621dad [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x4d43e16b [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x6de7b6ae [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x6fbc7f00 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x6b983297 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x4e50e7e4 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x58c26ca4 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x1d76868a [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x5c5e027 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0xa987221 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x385d3782 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x6fbc7f00 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x5406404e [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x4f86bc93 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x4e6fb566 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x50552ced [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x3cbd9759 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x6f4c7116 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x58c26ca4 [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x43670cfa [0193.279] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x34d5574c [0193.280] RtlRandomEx (in: Seed=0xcc8fbd0 | out: Seed=0xcc8fbd0) returned 0x4e6c710e [0193.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8397950 [0193.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x839b558 [0193.288] ReadFile (in: hFile=0x2174, lpBuffer=0x8397950, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xcc8fbcc, lpOverlapped=0x0 | out: lpBuffer=0x8397950*, lpNumberOfBytesRead=0xcc8fbcc*=0xb3, lpOverlapped=0x0) returned 1 [0193.290] SetFilePointerEx (in: hFile=0x2174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.290] WriteFile (in: hFile=0x2174, lpBuffer=0x839b558*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xcc8fbd0, lpOverlapped=0x0 | out: lpBuffer=0x839b558*, lpNumberOfBytesWritten=0xcc8fbd0*=0xb3, lpOverlapped=0x0) returned 1 [0201.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80629e0 [0201.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062a08 [0201.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a08) returned 1 [0201.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x839b558) returned 1 [0201.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8397950) returned 1 [0201.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68588) returned 1 [0201.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7070) returned 1 [0201.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f2e8 [0201.567] SetFilePointerEx (in: hFile=0x2174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.567] WriteFile (in: hFile=0x2174, lpBuffer=0x81e08e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcc8fc44, lpOverlapped=0x0 | out: lpBuffer=0x81e08e0*, lpNumberOfBytesWritten=0xcc8fc44*=0x10c, lpOverlapped=0x0) returned 1 [0203.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e08e0) returned 1 [0203.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f258) returned 1 [0203.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a08) returned 1 [0203.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f2e8) returned 1 [0203.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80629e0) returned 1 [0203.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0203.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0203.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c860) returned 1 [0203.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5780 [0203.812] wcscpy (in: _Dest=0x81f5780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" [0203.812] wcscat (in: _Dest=0x81f5780, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.f0dbec" [0203.812] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0xcc8fbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3c848 [0204.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c848) returned 1 [0204.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83186c0) returned 1 [0204.394] NtQueryInformationFile (in: FileHandle=0x2174, IoStatusBlock=0xcc8fba0, FileInformation=0xcc8fba8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcc8fba0, FileInformation=0xcc8fba8) returned 0x0 [0204.394] NtSetInformationFile (FileHandle=0x2174, IoStatusBlock=0xcc8fba0, FileInformation=0xcc8fba8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5780) returned 1 [0207.350] FlushFileBuffers (hFile=0x2174) returned 1 [0207.363] CloseHandle (hObject=0x2174) returned 1 [0208.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef080 [0208.509] wcscpy (in: _Dest=0x83ef080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" [0208.509] wcscat (in: _Dest=0x83ef080, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\F0DBEC-Readme.txt" [0208.509] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0208.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0208.975] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xcc8fbec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xcc8fbec*=0x70c, lpOverlapped=0x0) returned 1 [0208.976] CloseHandle (hObject=0x1bc4) returned 1 [0208.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef080) returned 1 [0208.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d89f0) returned 1 Thread: id = 4797 os_tid = 0x265c [0178.299] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json")) returned 0x2020 [0178.299] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.926] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f7c [0193.291] GetFileSizeEx (in: hFile=0x1f7c, lpFileSize=0x860ff70 | out: lpFileSize=0x860ff70*=179) returned 1 [0193.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0193.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0193.291] NtQuerySystemTime (in: CurrentTime=0x860fef8 | out: CurrentTime=0x860fef8*=132471540611964000) returned 0x0 [0193.291] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x7042f56e [0193.291] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x310a7d56 [0193.291] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x2bcce0bb [0193.291] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x7c7ccb56 [0193.291] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x4db859c1 [0193.291] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x1b4abdf8 [0193.291] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x511a2f44 [0193.291] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x3df9787a [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x48ffdc64 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x65587a50 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x4d8d8101 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x49c64305 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x1f607d97 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x5d58efd8 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x689d2268 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x10e51250 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x7043d112 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x7119e98b [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x5d58efd8 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x5cdce7fb [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x2984baa0 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x2b1d3307 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x27174a04 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x16d06af8 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x1cd7fd4c [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x24758727 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x57e96788 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x138bf005 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x28028b61 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x427544e1 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x23c02d94 [0193.292] RtlRandomEx (in: Seed=0x860fef0 | out: Seed=0x860fef0) returned 0x757185f6 [0193.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x839f160 [0193.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83a2d68 [0193.310] ReadFile (in: hFile=0x1f7c, lpBuffer=0x839f160, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x860feec, lpOverlapped=0x0 | out: lpBuffer=0x839f160*, lpNumberOfBytesRead=0x860feec*=0xb3, lpOverlapped=0x0) returned 1 [0193.311] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.312] WriteFile (in: hFile=0x1f7c, lpBuffer=0x83a2d68*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x860fef0, lpOverlapped=0x0 | out: lpBuffer=0x83a2d68*, lpNumberOfBytesWritten=0x860fef0*=0xb3, lpOverlapped=0x0) returned 1 [0201.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062a30 [0201.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062a58 [0201.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a58) returned 1 [0201.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83a2d68) returned 1 [0201.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x839f160) returned 1 [0201.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 [0201.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5418) returned 1 [0201.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f318 [0201.585] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.585] WriteFile (in: hFile=0x1f7c, lpBuffer=0x81df648*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x860ff64, lpOverlapped=0x0 | out: lpBuffer=0x81df648*, lpNumberOfBytesWritten=0x860ff64*=0x10c, lpOverlapped=0x0) returned 1 [0203.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df648) returned 1 [0203.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa08) returned 1 [0203.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a58) returned 1 [0203.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f318) returned 1 [0203.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a30) returned 1 [0203.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b578) returned 1 [0203.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0203.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0203.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f6140 [0203.842] wcscpy (in: _Dest=0x81f6140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" [0203.842] wcscat (in: _Dest=0x81f6140, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.f0dbec" [0203.843] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.f0dbec", NtPathName=0x860fee8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3d140 [0207.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d140) returned 1 [0207.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8340698) returned 1 [0207.195] NtQueryInformationFile (in: FileHandle=0x1f7c, IoStatusBlock=0x860fec0, FileInformation=0x860fec8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x860fec0, FileInformation=0x860fec8) returned 0x0 [0207.195] NtSetInformationFile (FileHandle=0x1f7c, IoStatusBlock=0x860fec0, FileInformation=0x860fec8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6140) returned 1 [0208.207] FlushFileBuffers (hFile=0x1f7c) returned 1 [0208.209] CloseHandle (hObject=0x1f7c) returned 1 [0208.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef1b8 [0208.504] wcscpy (in: _Dest=0x83ef1b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" [0208.504] wcscat (in: _Dest=0x83ef1b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\F0DBEC-Readme.txt" [0208.504] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\f0dbec-readme.txt")) returned 0xffffffff [0208.504] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cf4 [0208.880] WriteFile (in: hFile=0x1cf4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x860ff0c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x860ff0c*=0x70c, lpOverlapped=0x0) returned 1 [0209.486] CloseHandle (hObject=0x1cf4) returned 1 [0209.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef1b8) returned 1 [0209.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8b18) returned 1 Thread: id = 4798 os_tid = 0x26a8 [0178.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json")) returned 0x2020 [0178.301] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.926] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d10 [0193.312] GetFileSizeEx (in: hFile=0x1d10, lpFileSize=0xc6afb10 | out: lpFileSize=0xc6afb10*=179) returned 1 [0193.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0193.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0193.312] NtQuerySystemTime (in: CurrentTime=0xc6afa98 | out: CurrentTime=0xc6afa98*=132471540612120000) returned 0x0 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x2fd232ec [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x15033aa5 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x2562da6b [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x7c600cbc [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x511c73c6 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x4360e161 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x24bf11b4 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x55e31e6 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x4d985cb3 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x5cd82033 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x7170b6ad [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x791485e3 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x2dabaa8f [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x5624679d [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x340bc2a9 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x6de7b6ae [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x360e83f5 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x7f3122e0 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x5abcd767 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x35ed777f [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x4de33281 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x41e85ae0 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x63d2f344 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x43fad23c [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0xaa96d51 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x1ba2f727 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0xb0d88be [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x6b5861a1 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x60672a7 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0xe8a9f02 [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x7e6e5e9a [0193.313] RtlRandomEx (in: Seed=0xc6afa90 | out: Seed=0xc6afa90) returned 0x15c9875 [0193.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83a6970 [0193.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83aa578 [0193.331] ReadFile (in: hFile=0x1d10, lpBuffer=0x83a6970, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc6afa8c, lpOverlapped=0x0 | out: lpBuffer=0x83a6970*, lpNumberOfBytesRead=0xc6afa8c*=0xb3, lpOverlapped=0x0) returned 1 [0193.333] SetFilePointerEx (in: hFile=0x1d10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.333] WriteFile (in: hFile=0x1d10, lpBuffer=0x83aa578*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc6afa90, lpOverlapped=0x0 | out: lpBuffer=0x83aa578*, lpNumberOfBytesWritten=0xc6afa90*=0xb3, lpOverlapped=0x0) returned 1 [0201.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062558 [0201.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062580 [0201.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062580) returned 1 [0201.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83aa578) returned 1 [0201.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83a6970) returned 1 [0201.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0201.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e61d0) returned 1 [0201.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70158 [0201.532] SetFilePointerEx (in: hFile=0x1d10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.532] WriteFile (in: hFile=0x1d10, lpBuffer=0x30bd370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc6afb04, lpOverlapped=0x0 | out: lpBuffer=0x30bd370*, lpNumberOfBytesWritten=0xc6afb04*=0x10c, lpOverlapped=0x0) returned 1 [0203.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0203.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd38) returned 1 [0203.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062580) returned 1 [0203.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70158) returned 1 [0203.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062558) returned 1 [0203.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b398) returned 1 [0203.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc08) returned 1 [0203.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc58) returned 1 [0203.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404a40 [0203.748] wcscpy (in: _Dest=0x8404a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" [0203.749] wcscat (in: _Dest=0x8404a40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.f0dbec" [0203.749] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0xc6afa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3efa4b0 [0204.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa4b0) returned 1 [0204.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8319c50) returned 1 [0204.247] NtQueryInformationFile (in: FileHandle=0x1d10, IoStatusBlock=0xc6afa60, FileInformation=0xc6afa68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc6afa60, FileInformation=0xc6afa68) returned 0x0 [0204.247] NtSetInformationFile (FileHandle=0x1d10, IoStatusBlock=0xc6afa60, FileInformation=0xc6afa68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404a40) returned 1 [0204.621] FlushFileBuffers (hFile=0x1d10) returned 1 [0204.637] CloseHandle (hObject=0x1d10) returned 1 [0207.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347560 [0207.779] wcscpy (in: _Dest=0x8347560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" [0207.779] wcscat (in: _Dest=0x8347560, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\F0DBEC-Readme.txt" [0207.779] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0207.779] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1274 [0208.357] WriteFile (in: hFile=0x1274, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc6afaac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc6afaac*=0x70c, lpOverlapped=0x0) returned 1 [0209.112] CloseHandle (hObject=0x1274) returned 1 [0209.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347560) returned 1 [0209.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8c40) returned 1 Thread: id = 4799 os_tid = 0x26ac [0178.301] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json")) returned 0x2020 [0178.301] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0189.926] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f8c [0193.334] GetFileSizeEx (in: hFile=0x1f8c, lpFileSize=0xf34fd20 | out: lpFileSize=0xf34fd20*=179) returned 1 [0193.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0193.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cab8 [0193.334] NtQuerySystemTime (in: CurrentTime=0xf34fca8 | out: CurrentTime=0xf34fca8*=132471540612432000) returned 0x0 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x572c4fda [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x1f17b661 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x7c8e95bc [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x72c4b01f [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x2b357dee [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x284423a8 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x7979b16e [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x909b027 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x5d519d04 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0xc0ceda7 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x28b829c8 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0xbfc36e5 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x1d7e7062 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x7c8e95bc [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x14bea450 [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x27aae28a [0193.334] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x6a130822 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x56fbe708 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x4685103 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x31d29a7e [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x178f7a3c [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x22b6cedf [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x35fc120a [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x677142a8 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x248f9248 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x4147f970 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x3c5dfa43 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x178a2aeb [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x42e8344 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x3d27c292 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x41646705 [0193.335] RtlRandomEx (in: Seed=0xf34fca0 | out: Seed=0xf34fca0) returned 0x5bdb94cf [0193.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83ae180 [0193.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83b1d88 [0193.345] ReadFile (in: hFile=0x1f8c, lpBuffer=0x83ae180, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xf34fc9c, lpOverlapped=0x0 | out: lpBuffer=0x83ae180*, lpNumberOfBytesRead=0xf34fc9c*=0xb3, lpOverlapped=0x0) returned 1 [0193.353] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.354] WriteFile (in: hFile=0x1f8c, lpBuffer=0x83b1d88*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xf34fca0, lpOverlapped=0x0 | out: lpBuffer=0x83b1d88*, lpNumberOfBytesWritten=0xf34fca0*=0xb3, lpOverlapped=0x0) returned 1 [0201.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80625d0 [0201.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80625f8 [0201.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625f8) returned 1 [0201.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83b1d88) returned 1 [0201.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ae180) returned 1 [0201.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68240) returned 1 [0201.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e57f8) returned 1 [0201.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e701b8 [0201.536] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.536] WriteFile (in: hFile=0x1f8c, lpBuffer=0x30bd258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf34fd14, lpOverlapped=0x0 | out: lpBuffer=0x30bd258*, lpNumberOfBytesWritten=0xf34fd14*=0x10c, lpOverlapped=0x0) returned 1 [0203.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0203.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0203.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625f8) returned 1 [0203.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0203.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625d0) returned 1 [0203.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca90) returned 1 [0203.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0203.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0203.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef8ad0 [0203.775] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" [0203.775] wcscat (in: _Dest=0x3ef8ad0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.f0dbec" [0203.775] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.f0dbec", NtPathName=0xf34fc98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3bf50 [0204.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bf50) returned 1 [0204.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830c900) returned 1 [0204.258] NtQueryInformationFile (in: FileHandle=0x1f8c, IoStatusBlock=0xf34fc70, FileInformation=0xf34fc78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf34fc70, FileInformation=0xf34fc78) returned 0x0 [0204.258] NtSetInformationFile (FileHandle=0x1f8c, IoStatusBlock=0xf34fc70, FileInformation=0xf34fc78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8ad0) returned 1 [0204.656] FlushFileBuffers (hFile=0x1f8c) returned 1 [0204.671] CloseHandle (hObject=0x1f8c) returned 1 [0207.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346ba0 [0207.811] wcscpy (in: _Dest=0x8346ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" [0207.811] wcscat (in: _Dest=0x8346ba0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\F0DBEC-Readme.txt" [0207.811] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\f0dbec-readme.txt")) returned 0xffffffff [0207.811] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a84 [0208.362] WriteFile (in: hFile=0x1a84, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf34fcbc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf34fcbc*=0x70c, lpOverlapped=0x0) returned 1 [0209.142] CloseHandle (hObject=0x1a84) returned 1 [0209.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346ba0) returned 1 [0209.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8d68) returned 1 Thread: id = 4800 os_tid = 0x26b0 [0178.302] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json")) returned 0x2020 [0178.303] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.927] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2c9c [0193.354] GetFileSizeEx (in: hFile=0x2c9c, lpFileSize=0xe04faf0 | out: lpFileSize=0xe04faf0*=179) returned 1 [0193.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cab8 [0193.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0193.355] NtQuerySystemTime (in: CurrentTime=0xe04fa78 | out: CurrentTime=0xe04fa78*=132471540612588000) returned 0x0 [0193.355] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x48b4c280 [0193.355] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x4ce21e01 [0193.355] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x4ade55a3 [0193.355] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x24cb9906 [0193.355] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x791485e3 [0193.355] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x160229bd [0193.355] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x4d62a841 [0193.355] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x5e0280b1 [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x73c92262 [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x4c62eb4 [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x1d26c29 [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x5f0ca438 [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x14aae07e [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x1dec524 [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x3bbc091f [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x541514c0 [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x4d04eeb9 [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x49ee01af [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x40165010 [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x7fe566cf [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x1d564aef [0193.356] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x413f1a7a [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x69902326 [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x7dcbd6f4 [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x13679f29 [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x6aae47d0 [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x5da99bfa [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x23386b25 [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x257b0f1b [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x2136dac2 [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x3033527 [0193.357] RtlRandomEx (in: Seed=0xe04fa70 | out: Seed=0xe04fa70) returned 0x471dec0d [0193.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83b5990 [0193.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83b9598 [0193.368] ReadFile (in: hFile=0x2c9c, lpBuffer=0x83b5990, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xe04fa6c, lpOverlapped=0x0 | out: lpBuffer=0x83b5990*, lpNumberOfBytesRead=0xe04fa6c*=0xb3, lpOverlapped=0x0) returned 1 [0193.378] SetFilePointerEx (in: hFile=0x2c9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.378] WriteFile (in: hFile=0x2c9c, lpBuffer=0x83b9598*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xe04fa70, lpOverlapped=0x0 | out: lpBuffer=0x83b9598*, lpNumberOfBytesWritten=0xe04fa70*=0xb3, lpOverlapped=0x0) returned 1 [0201.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062620 [0201.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062648 [0201.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062648) returned 1 [0201.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83b9598) returned 1 [0201.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83b5990) returned 1 [0201.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 [0201.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e74a8) returned 1 [0201.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70128 [0201.538] SetFilePointerEx (in: hFile=0x2c9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.538] WriteFile (in: hFile=0x2c9c, lpBuffer=0x30bc768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe04fae4, lpOverlapped=0x0 | out: lpBuffer=0x30bc768*, lpNumberOfBytesWritten=0xe04fae4*=0x10c, lpOverlapped=0x0) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd98) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062648) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70128) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062620) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cab8) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4a0) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0203.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404908 [0203.751] wcscpy (in: _Dest=0x8404908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" [0203.751] wcscat (in: _Dest=0x8404908, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.f0dbec" [0203.752] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0xe04fa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef97e0 [0204.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef97e0) returned 1 [0204.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830f870) returned 1 [0204.248] NtQueryInformationFile (in: FileHandle=0x2c9c, IoStatusBlock=0xe04fa40, FileInformation=0xe04fa48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe04fa40, FileInformation=0xe04fa48) returned 0x0 [0204.248] NtSetInformationFile (FileHandle=0x2c9c, IoStatusBlock=0xe04fa40, FileInformation=0xe04fa48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404908) returned 1 [0204.625] FlushFileBuffers (hFile=0x2c9c) returned 1 [0204.641] CloseHandle (hObject=0x2c9c) returned 1 [0207.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347428 [0207.783] wcscpy (in: _Dest=0x8347428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" [0207.783] wcscat (in: _Dest=0x8347428, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\F0DBEC-Readme.txt" [0207.783] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0207.783] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29f0 [0208.357] WriteFile (in: hFile=0x29f0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe04fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe04fa8c*=0x70c, lpOverlapped=0x0) returned 1 [0209.108] CloseHandle (hObject=0x29f0) returned 1 [0209.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347428) returned 1 [0209.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8e90) returned 1 Thread: id = 4801 os_tid = 0x26b4 [0178.303] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json")) returned 0x2020 [0178.304] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0189.927] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13f4 [0193.379] GetFileSizeEx (in: hFile=0x13f4, lpFileSize=0x1138ff58 | out: lpFileSize=0x1138ff58*=179) returned 1 [0193.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0193.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0193.379] NtQuerySystemTime (in: CurrentTime=0x1138fee0 | out: CurrentTime=0x1138fee0*=132471540612900000) returned 0x0 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x617ecab3 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x3f39b3a6 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x1819e3a7 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x4c8c6c81 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x449e6a21 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x20445d69 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x4e0e0b41 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x257ab7ba [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x3305af0e [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x5eecd70a [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x7ba60abc [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x4e2dfe02 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x7e259b24 [0193.379] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x20f7cfa4 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x3945f88c [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x42c11626 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x14068bd3 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x3afc024 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x96ce1d8 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x3e049467 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x6feebaf1 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0xc42395 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x7a40d19d [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x587e566d [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x12a7380f [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x4c97a67d [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x7a8f670c [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x70dcf703 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x30aa4d8d [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x2cdc8968 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x66f0c160 [0193.380] RtlRandomEx (in: Seed=0x1138fed8 | out: Seed=0x1138fed8) returned 0x770b63c7 [0193.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83bd1a0 [0193.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83c0da8 [0193.388] ReadFile (in: hFile=0x13f4, lpBuffer=0x83bd1a0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1138fed4, lpOverlapped=0x0 | out: lpBuffer=0x83bd1a0*, lpNumberOfBytesRead=0x1138fed4*=0xb3, lpOverlapped=0x0) returned 1 [0193.390] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.390] WriteFile (in: hFile=0x13f4, lpBuffer=0x83c0da8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1138fed8, lpOverlapped=0x0 | out: lpBuffer=0x83c0da8*, lpNumberOfBytesWritten=0x1138fed8*=0xb3, lpOverlapped=0x0) returned 1 [0201.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062670 [0201.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062698 [0201.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062698) returned 1 [0201.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83c0da8) returned 1 [0201.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83bd1a0) returned 1 [0201.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 [0201.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e71d8) returned 1 [0201.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fdc8 [0201.540] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.540] WriteFile (in: hFile=0x13f4, lpBuffer=0x30bc308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1138ff4c, lpOverlapped=0x0 | out: lpBuffer=0x30bc308*, lpNumberOfBytesWritten=0x1138ff4c*=0x10c, lpOverlapped=0x0) returned 1 [0203.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0203.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff78) returned 1 [0203.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062698) returned 1 [0203.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdc8) returned 1 [0203.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062670) returned 1 [0203.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bdc0) returned 1 [0203.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0203.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0203.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3ef8860 [0203.779] wcscpy (in: _Dest=0x3ef8860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" [0203.779] wcscat (in: _Dest=0x3ef8860, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.f0dbec" [0203.779] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0x1138fed0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3c098 [0204.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c098) returned 1 [0204.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8310110) returned 1 [0204.260] NtQueryInformationFile (in: FileHandle=0x13f4, IoStatusBlock=0x1138fea8, FileInformation=0x1138feb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1138fea8, FileInformation=0x1138feb0) returned 0x0 [0204.260] NtSetInformationFile (FileHandle=0x13f4, IoStatusBlock=0x1138fea8, FileInformation=0x1138feb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8860) returned 1 [0204.660] FlushFileBuffers (hFile=0x13f4) returned 1 [0204.674] CloseHandle (hObject=0x13f4) returned 1 [0207.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8347b78 [0207.820] wcscpy (in: _Dest=0x8347b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" [0207.820] wcscat (in: _Dest=0x8347b78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\F0DBEC-Readme.txt" [0207.820] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0207.820] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f7c [0208.362] WriteFile (in: hFile=0x1f7c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1138fef4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1138fef4*=0x70c, lpOverlapped=0x0) returned 1 [0209.146] CloseHandle (hObject=0x1f7c) returned 1 [0209.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347b78) returned 1 [0209.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8fb8) returned 1 Thread: id = 4802 os_tid = 0x26b8 [0178.305] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json")) returned 0x2020 [0178.305] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.927] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe2c [0193.391] GetFileSizeEx (in: hFile=0xe2c, lpFileSize=0x800fbc8 | out: lpFileSize=0x800fbc8*=179) returned 1 [0193.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0193.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0193.391] NtQuerySystemTime (in: CurrentTime=0x800fb50 | out: CurrentTime=0x800fb50*=132471540612900000) returned 0x0 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x5cdce7fb [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x5ccba40a [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x7a80d4f3 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x4ade2616 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x763d2501 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x6a90c116 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x1e658152 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x64788f7e [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x3f39b3a6 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x1cce9e0c [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x6d1c18db [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x45b52778 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x702b7dec [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x2fb365a1 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x51de12e2 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x5358e102 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x3a094fe5 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0xbb51d81 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x74e17ce9 [0193.391] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x56581e92 [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x1076a17e [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x5306d92c [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x2b46050e [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x1b1d848 [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x770b63c7 [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x783d0c91 [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x49f7932e [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x1cf1251c [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x7e4fb1b0 [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x32f31490 [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x2e936637 [0193.392] RtlRandomEx (in: Seed=0x800fb48 | out: Seed=0x800fb48) returned 0x1fcff7 [0193.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83c49b0 [0193.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d64d8 [0193.400] ReadFile (in: hFile=0xe2c, lpBuffer=0x83c49b0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x800fb44, lpOverlapped=0x0 | out: lpBuffer=0x83c49b0*, lpNumberOfBytesRead=0x800fb44*=0xb3, lpOverlapped=0x0) returned 1 [0193.402] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.402] WriteFile (in: hFile=0xe2c, lpBuffer=0x80d64d8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x800fb48, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesWritten=0x800fb48*=0xb3, lpOverlapped=0x0) returned 1 [0201.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80626c0 [0201.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80626e8 [0201.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80626e8) returned 1 [0201.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0201.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83c49b0) returned 1 [0201.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e683a8) returned 1 [0201.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6ba8) returned 1 [0201.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f2b8 [0201.542] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.542] WriteFile (in: hFile=0xe2c, lpBuffer=0x30bc538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x800fbbc, lpOverlapped=0x0 | out: lpBuffer=0x30bc538*, lpNumberOfBytesWritten=0x800fbbc*=0x10c, lpOverlapped=0x0) returned 1 [0203.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc538) returned 1 [0203.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc78) returned 1 [0203.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80626e8) returned 1 [0203.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f2b8) returned 1 [0203.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80626c0) returned 1 [0203.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0203.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb58) returned 1 [0203.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0203.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x84047d0 [0203.755] wcscpy (in: _Dest=0x84047d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" [0203.755] wcscat (in: _Dest=0x84047d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.f0dbec" [0203.755] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0x800fb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9550 [0204.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9550) returned 1 [0204.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83109b0) returned 1 [0204.250] NtQueryInformationFile (in: FileHandle=0xe2c, IoStatusBlock=0x800fb18, FileInformation=0x800fb20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x800fb18, FileInformation=0x800fb20) returned 0x0 [0204.250] NtSetInformationFile (FileHandle=0xe2c, IoStatusBlock=0x800fb18, FileInformation=0x800fb20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84047d0) returned 1 [0204.630] FlushFileBuffers (hFile=0xe2c) returned 1 [0204.646] CloseHandle (hObject=0xe2c) returned 1 [0207.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83472f0 [0207.789] wcscpy (in: _Dest=0x83472f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" [0207.789] wcscat (in: _Dest=0x83472f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\F0DBEC-Readme.txt" [0207.789] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0207.789] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1840 [0208.357] WriteFile (in: hFile=0x1840, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x800fb64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x800fb64*=0x70c, lpOverlapped=0x0) returned 1 [0209.116] CloseHandle (hObject=0x1840) returned 1 [0209.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83472f0) returned 1 [0209.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d90e0) returned 1 Thread: id = 4803 os_tid = 0x26bc [0178.306] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json")) returned 0x2020 [0178.306] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0189.927] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1048 [0193.402] GetFileSizeEx (in: hFile=0x1048, lpFileSize=0x347fc28 | out: lpFileSize=0x347fc28*=179) returned 1 [0193.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0193.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0193.403] NtQuerySystemTime (in: CurrentTime=0x347fbb0 | out: CurrentTime=0x347fbb0*=132471540613056000) returned 0x0 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x4869564 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x47fc66fd [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x7b2ae4ed [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x2132fbb5 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x61eac0da [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x145fb3b8 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x6b85093b [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x50762b4 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x1e205ea7 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x74e17ce9 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0xb2633e1 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x702b7dec [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x2b7f0501 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x7513a4c1 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x6087725 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x6604691d [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x5b1deb80 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x38e71ac2 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x6d621c07 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x5196b827 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x5cbf24ed [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x6b85093b [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x70a5598e [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x113a2633 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x5eecd70a [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x2781620e [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x78873a9d [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x39a2cfdf [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x70a5598e [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0xf102b27 [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x613278a [0193.403] RtlRandomEx (in: Seed=0x347fba8 | out: Seed=0x347fba8) returned 0x4d0cf6c1 [0193.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0193.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a5870 [0193.412] ReadFile (in: hFile=0x1048, lpBuffer=0x80a9478, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x347fba4, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesRead=0x347fba4*=0xb3, lpOverlapped=0x0) returned 1 [0193.414] SetFilePointerEx (in: hFile=0x1048, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.414] WriteFile (in: hFile=0x1048, lpBuffer=0x80a5870*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x347fba8, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesWritten=0x347fba8*=0xb3, lpOverlapped=0x0) returned 1 [0201.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062710 [0201.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062738 [0201.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062738) returned 1 [0201.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0201.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0201.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0201.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6d58) returned 1 [0201.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fc48 [0201.546] SetFilePointerEx (in: hFile=0x1048, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.546] WriteFile (in: hFile=0x1048, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x347fc1c, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0x347fc1c*=0x10c, lpOverlapped=0x0) returned 1 [0203.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0203.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0203.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062738) returned 1 [0203.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0203.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062710) returned 1 [0203.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0203.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0203.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0203.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef7d68 [0203.782] wcscpy (in: _Dest=0x3ef7d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" [0203.782] wcscat (in: _Dest=0x3ef7d68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.f0dbec" [0203.782] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0x347fba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3c1e0 [0204.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1e0) returned 1 [0204.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830f648) returned 1 [0204.261] NtQueryInformationFile (in: FileHandle=0x1048, IoStatusBlock=0x347fb78, FileInformation=0x347fb80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x347fb78, FileInformation=0x347fb80) returned 0x0 [0204.261] NtSetInformationFile (FileHandle=0x1048, IoStatusBlock=0x347fb78, FileInformation=0x347fb80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0204.665] FlushFileBuffers (hFile=0x1048) returned 1 [0204.676] CloseHandle (hObject=0x1048) returned 1 [0207.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347cb0 [0207.828] wcscpy (in: _Dest=0x8347cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" [0207.828] wcscat (in: _Dest=0x8347cb0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\F0DBEC-Readme.txt" [0207.829] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0207.829] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1610 [0208.363] WriteFile (in: hFile=0x1610, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x347fbc4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x347fbc4*=0x70c, lpOverlapped=0x0) returned 1 [0209.150] CloseHandle (hObject=0x1610) returned 1 [0209.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347cb0) returned 1 [0209.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9208) returned 1 Thread: id = 4804 os_tid = 0x26c0 [0178.312] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl")) returned 0x2020 [0178.312] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", dwFileAttributes=0x20) returned 1 [0189.928] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ee8 [0189.928] GetFileSizeEx (in: hFile=0x1ee8, lpFileSize=0x1032fc68 | out: lpFileSize=0x1032fc68*=933) returned 1 [0189.928] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x3a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.928] ReadFile (in: hFile=0x1ee8, lpBuffer=0x1032fc74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1032fc50, lpOverlapped=0x0 | out: lpBuffer=0x1032fc74*, lpNumberOfBytesRead=0x1032fc50*=0x4, lpOverlapped=0x0) returned 1 [0189.931] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43140 [0189.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43410 [0189.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0189.932] NtQuerySystemTime (in: CurrentTime=0x1032fbf0 | out: CurrentTime=0x1032fbf0*=132471540578424000) returned 0x0 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x136840d8 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0xfd5e647 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x212f9eac [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x34771952 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x406991a [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x364dcaf6 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x27a65844 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x6f827780 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x5bb4c4 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x22ab7091 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x49afdf04 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x49383386 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0xc7b749f [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x5fd487ff [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x60e6775c [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x65424451 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x3a04590a [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x4685b1a7 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x3729c242 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x2f89ac7d [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x66fac4aa [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x7410cc0c [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x5d5b60a7 [0189.932] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x10ef5b8f [0189.933] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x46327cc0 [0189.933] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x3f3602ea [0189.933] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x2e07553f [0189.933] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x28d398b4 [0189.933] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x33d4aedb [0189.933] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x27de7b80 [0189.933] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x472e4e3f [0189.933] RtlRandomEx (in: Seed=0x1032fbe8 | out: Seed=0x1032fbe8) returned 0x341e5e [0189.943] ReadFile (in: hFile=0x1ee8, lpBuffer=0x80a5870, nNumberOfBytesToRead=0x3a5, lpNumberOfBytesRead=0x1032fbe4, lpOverlapped=0x0 | out: lpBuffer=0x80a5870*, lpNumberOfBytesRead=0x1032fbe4*=0x3a5, lpOverlapped=0x0) returned 1 [0189.943] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.943] WriteFile (in: hFile=0x1ee8, lpBuffer=0x80ad080*, nNumberOfBytesToWrite=0x3a5, lpNumberOfBytesWritten=0x1032fbe8, lpOverlapped=0x0 | out: lpBuffer=0x80ad080*, lpNumberOfBytesWritten=0x1032fbe8*=0x3a5, lpOverlapped=0x0) returned 1 [0193.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0e10 [0193.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef13d8 [0193.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef13d8) returned 1 [0193.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ad080) returned 1 [0193.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5870) returned 1 [0193.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0193.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e54a8) returned 1 [0193.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8403650 [0193.107] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.107] WriteFile (in: hFile=0x1ee8, lpBuffer=0x3e16f90*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x1032fc5c, lpOverlapped=0x0 | out: lpBuffer=0x3e16f90*, lpNumberOfBytesWritten=0x1032fc5c*=0x14a, lpOverlapped=0x0) returned 1 [0196.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16f90) returned 1 [0196.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84035e0) returned 1 [0196.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef13d8) returned 1 [0196.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403650) returned 1 [0196.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0196.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43410) returned 1 [0196.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0196.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0196.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e25040 [0196.062] wcscpy (in: _Dest=0x3e25040, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" [0196.062] wcscat (in: _Dest=0x3e25040, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.f0dbec" [0196.062] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.f0dbec", NtPathName=0x1032fbe0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x81e0368 [0196.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0368) returned 1 [0196.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e080f8) returned 1 [0196.531] NtQueryInformationFile (in: FileHandle=0x1ee8, IoStatusBlock=0x1032fbb8, FileInformation=0x1032fbc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1032fbb8, FileInformation=0x1032fbc0) returned 0x0 [0196.531] NtSetInformationFile (FileHandle=0x1ee8, IoStatusBlock=0x1032fbb8, FileInformation=0x1032fbc0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25040) returned 1 [0197.679] FlushFileBuffers (hFile=0x1ee8) returned 1 [0201.838] CloseHandle (hObject=0x1ee8) returned 1 [0203.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81d5a08 [0203.986] wcscpy (in: _Dest=0x81d5a08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0203.986] wcscat (in: _Dest=0x81d5a08, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\F0DBEC-Readme.txt" [0203.986] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\f0dbec-readme.txt")) returned 0x2020 [0203.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a08) returned 1 [0203.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80216e0) returned 1 Thread: id = 4805 os_tid = 0x26c4 [0178.313] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl")) returned 0x2020 [0178.313] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", dwFileAttributes=0x20) returned 1 [0189.974] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc54 [0189.974] GetFileSizeEx (in: hFile=0xc54, lpFileSize=0xe00fde0 | out: lpFileSize=0xe00fde0*=37703) returned 1 [0189.974] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x9343, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.975] ReadFile (in: hFile=0xc54, lpBuffer=0xe00fdec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe00fdc8, lpOverlapped=0x0 | out: lpBuffer=0xe00fdec*, lpNumberOfBytesRead=0xe00fdc8*=0x4, lpOverlapped=0x0) returned 1 [0190.004] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43140 [0190.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0190.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42740 [0190.004] NtQuerySystemTime (in: CurrentTime=0xe00fd68 | out: CurrentTime=0xe00fd68*=132471540579048000) returned 0x0 [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x4918aafc [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x10316d81 [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x75d3ca1d [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0xff2158d [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x2196c4ef [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x3d04c10d [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x14ee8ef [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x5a3834f0 [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x65396d99 [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x3f2b3e6b [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x5bbe0139 [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x7aaa0b0e [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x109a2582 [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x7bf06843 [0190.004] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x9f210f7 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x5930ce73 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x10613d22 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x5f1d27dc [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x48fc23aa [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x2b5ade81 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x1f01dc51 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x5a0c604d [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x6de0c02a [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x62f57ae [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x165d7cb1 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x4544722 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x3ebcd2c4 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x37549b02 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0xef59c35 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x68739ef5 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x20d40d59 [0190.005] RtlRandomEx (in: Seed=0xe00fd60 | out: Seed=0xe00fd60) returned 0x6eefe522 [0190.013] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.013] ReadFile (in: hFile=0xc54, lpBuffer=0x80d64d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xe00fd68, lpOverlapped=0x0 | out: lpBuffer=0x80d64d8*, lpNumberOfBytesRead=0xe00fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0190.014] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e6a110 [0190.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e68420 [0190.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43140 [0190.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43140) returned 1 [0190.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9478 [0190.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43140 [0190.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42740 [0190.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42740) returned 1 [0190.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 [0190.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a110) returned 1 [0190.015] WriteFile (in: hFile=0xc54, lpBuffer=0x80a9478*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xe00fd68, lpOverlapped=0x0 | out: lpBuffer=0x80a9478*, lpNumberOfBytesWritten=0xe00fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0193.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9478) returned 1 [0193.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d64d8) returned 1 [0193.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8403500 [0193.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0193.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x8402a10 [0193.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0193.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0193.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0193.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0193.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e54a8) returned 1 [0193.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e177a0 [0193.111] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.112] WriteFile (in: hFile=0xc54, lpBuffer=0x3e177a0*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xe00fdd4, lpOverlapped=0x0 | out: lpBuffer=0x3e177a0*, lpNumberOfBytesWritten=0xe00fdd4*=0x14a, lpOverlapped=0x0) returned 1 [0196.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e177a0) returned 1 [0196.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a10) returned 1 [0196.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0196.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403500) returned 1 [0196.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43140) returned 1 [0196.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0196.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426a0) returned 1 [0196.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428a8) returned 1 [0196.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e27540 [0196.065] wcscpy (in: _Dest=0x3e27540, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" [0196.066] wcscat (in: _Dest=0x3e27540, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.f0dbec" [0196.066] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.f0dbec", NtPathName=0xe00fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x81e08e0 [0197.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e08e0) returned 1 [0197.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e037a8) returned 1 [0197.679] NtQueryInformationFile (in: FileHandle=0xc54, IoStatusBlock=0xe00fd30, FileInformation=0xe00fd38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe00fd30, FileInformation=0xe00fd38) returned 0x0 [0197.679] NtSetInformationFile (FileHandle=0xc54, IoStatusBlock=0xe00fd30, FileInformation=0xe00fd38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27540) returned 1 [0197.752] FlushFileBuffers (hFile=0xc54) returned 1 [0197.755] CloseHandle (hObject=0xc54) returned 1 [0197.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3333a8 [0197.767] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0197.767] wcscat (in: _Dest=0x3333a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\F0DBEC-Readme.txt" [0197.767] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\f0dbec-readme.txt")) returned 0xffffffff [0197.768] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15fc [0198.347] WriteFile (in: hFile=0x15fc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe00fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe00fd7c*=0x70c, lpOverlapped=0x0) returned 1 [0198.349] CloseHandle (hObject=0x15fc) returned 1 [0198.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 [0198.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80219b0) returned 1 Thread: id = 4806 os_tid = 0x26c8 [0178.314] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png")) returned 0x2020 [0187.083] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", dwFileAttributes=0x20) returned 1 [0194.911] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x29cc [0194.914] GetFileSizeEx (in: hFile=0x29cc, lpFileSize=0x7affbf0 | out: lpFileSize=0x7affbf0*=6159) returned 1 [0194.914] SetFilePointerEx (in: hFile=0x29cc, liDistanceToMove=0x180b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.914] ReadFile (in: hFile=0x29cc, lpBuffer=0x7affbfc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7affbd8, lpOverlapped=0x0 | out: lpBuffer=0x7affbfc*, lpNumberOfBytesRead=0x7affbd8*=0x4, lpOverlapped=0x0) returned 1 [0194.917] SetFilePointerEx (in: hFile=0x29cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0194.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ce8 [0194.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d88 [0194.917] NtQuerySystemTime (in: CurrentTime=0x7affb78 | out: CurrentTime=0x7affb78*=132471540628032000) returned 0x0 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x13b53aaf [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x303b80c1 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x39b6ad4b [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x2e924bb1 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x406bf643 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x425aac29 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x1f36f54e [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x9ad0565 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x6b2d9149 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x7727cdc [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x5219e026 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x630e6080 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x5977480 [0194.917] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x1b59cec3 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x3dc77bff [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x27f947cd [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x10e6f4ab [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x7cb76e67 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x2d8baba9 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x228547bf [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x7b705716 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x51fc97a8 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x64c383da [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x236370c3 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x1193f992 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x4c2deddb [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0xd27e09b [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x30aed20f [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0xd2e4755 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x3a8d56a0 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x6a40ba61 [0194.918] RtlRandomEx (in: Seed=0x7affb70 | out: Seed=0x7affb70) returned 0x733b9da4 [0194.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0194.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x80549c0 [0194.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0194.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80549c0) returned 1 [0194.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d88) returned 1 [0194.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0194.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5cd30 [0194.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x80549c0 [0194.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0194.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0194.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a2f4b8 [0194.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a330c0 [0194.930] ReadFile (in: hFile=0x29cc, lpBuffer=0x14a2f4b8, nNumberOfBytesToRead=0x180f, lpNumberOfBytesRead=0x7affb6c, lpOverlapped=0x0 | out: lpBuffer=0x14a2f4b8*, lpNumberOfBytesRead=0x7affb6c*=0x180f, lpOverlapped=0x0) returned 1 [0194.931] SetFilePointerEx (in: hFile=0x29cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.932] WriteFile (in: hFile=0x29cc, lpBuffer=0x14a330c0*, nNumberOfBytesToWrite=0x180f, lpNumberOfBytesWritten=0x7affb70, lpOverlapped=0x0 | out: lpBuffer=0x14a330c0*, lpNumberOfBytesWritten=0x7affb70*=0x180f, lpOverlapped=0x0) returned 1 [0196.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42740 [0196.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d9008 [0196.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d9008) returned 1 [0196.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a330c0) returned 1 [0196.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a2f4b8) returned 1 [0196.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80549c0) returned 1 [0196.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd30) returned 1 [0196.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x2d9008 [0196.384] SetFilePointerEx (in: hFile=0x29cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.384] WriteFile (in: hFile=0x29cc, lpBuffer=0x8321cc8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7affbe4, lpOverlapped=0x0 | out: lpBuffer=0x8321cc8*, lpNumberOfBytesWritten=0x7affbe4*=0x100, lpOverlapped=0x0) returned 1 [0196.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321cc8) returned 1 [0196.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fe0) returned 1 [0196.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8f40) returned 1 [0196.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d9008) returned 1 [0196.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42740) returned 1 [0196.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ce8) returned 1 [0196.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0196.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0196.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321cc8 [0196.726] wcscpy (in: _Dest=0x8321cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" [0196.726] wcscat (in: _Dest=0x8321cc8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.f0dbec" [0196.726] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.f0dbec", NtPathName=0x7affb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401148 [0197.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401148) returned 1 [0197.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f5f70) returned 1 [0197.681] NtQueryInformationFile (in: FileHandle=0x29cc, IoStatusBlock=0x7affb40, FileInformation=0x7affb48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7affb40, FileInformation=0x7affb48) returned 0x0 [0197.681] NtSetInformationFile (FileHandle=0x29cc, IoStatusBlock=0x7affb40, FileInformation=0x7affb48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321cc8) returned 1 [0197.756] FlushFileBuffers (hFile=0x29cc) returned 1 [0197.758] CloseHandle (hObject=0x29cc) returned 1 [0197.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x81e08e0 [0197.772] wcscpy (in: _Dest=0x81e08e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0197.773] wcscat (in: _Dest=0x81e08e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\F0DBEC-Readme.txt" [0197.773] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\f0dbec-readme.txt")) returned 0x2020 [0198.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e08e0) returned 1 [0198.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25140) returned 1 Thread: id = 4807 os_tid = 0x26cc [0178.314] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json")) returned 0x2020 [0186.547] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0194.862] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1204 [0194.863] GetFileSizeEx (in: hFile=0x1204, lpFileSize=0x857faa8 | out: lpFileSize=0x857faa8*=784) returned 1 [0194.863] SetFilePointerEx (in: hFile=0x1204, liDistanceToMove=0x30c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.863] ReadFile (in: hFile=0x1204, lpBuffer=0x857fab4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x857fa90, lpOverlapped=0x0 | out: lpBuffer=0x857fab4*, lpNumberOfBytesRead=0x857fa90*=0x4, lpOverlapped=0x0) returned 1 [0194.867] SetFilePointerEx (in: hFile=0x1204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2120 [0194.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0194.867] NtQuerySystemTime (in: CurrentTime=0x857fa30 | out: CurrentTime=0x857fa30*=132471540627564000) returned 0x0 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x3feb7035 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x6eac8d9b [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x7fc62187 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x1794ad71 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x2d43fda9 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x2e8930da [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x15e0fcd8 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x1dca4207 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x501040c4 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x6916ece [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x6056a0e1 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x1814a73a [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0xa746671 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x43d0cbd0 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x6980b286 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x5913fac6 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x29ae99d [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x546b7543 [0194.867] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x4e916360 [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x17172b87 [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x7e71ecfd [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x177ee3d5 [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x65a1d859 [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x3078f354 [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x237dc52d [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x25abe56f [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x724e6dc1 [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x62d18608 [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x767c4821 [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x26e5b6ed [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x76cbc892 [0194.868] RtlRandomEx (in: Seed=0x857fa28 | out: Seed=0x857fa28) returned 0x55588c58 [0194.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ba8 [0194.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x8054948 [0194.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0194.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054948) returned 1 [0194.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0194.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d828 [0194.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x8054948 [0194.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a18c88 [0194.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a1c890 [0194.879] ReadFile (in: hFile=0x1204, lpBuffer=0x14a18c88, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x857fa24, lpOverlapped=0x0 | out: lpBuffer=0x14a18c88*, lpNumberOfBytesRead=0x857fa24*=0x310, lpOverlapped=0x0) returned 1 [0194.879] SetFilePointerEx (in: hFile=0x1204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.879] WriteFile (in: hFile=0x1204, lpBuffer=0x14a1c890*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x857fa28, lpOverlapped=0x0 | out: lpBuffer=0x14a1c890*, lpNumberOfBytesWritten=0x857fa28*=0x310, lpOverlapped=0x0) returned 1 [0196.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b00 [0196.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42790 [0196.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42790) returned 1 [0196.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a1c890) returned 1 [0196.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a18c88) returned 1 [0196.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054948) returned 1 [0196.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d828) returned 1 [0196.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6ffa8 [0196.343] SetFilePointerEx (in: hFile=0x1204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.344] WriteFile (in: hFile=0x1204, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x857fa9c, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x857fa9c*=0x10c, lpOverlapped=0x0) returned 1 [0196.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0196.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff48) returned 1 [0196.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42790) returned 1 [0196.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ffa8) returned 1 [0196.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b00) returned 1 [0196.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2120) returned 1 [0196.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ba8) returned 1 [0196.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0196.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec828 [0196.722] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" [0196.722] wcscat (in: _Dest=0x3dec828, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.f0dbec" [0196.722] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.f0dbec", NtPathName=0x857fa20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f6c38 [0196.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6c38) returned 1 [0196.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f9780) returned 1 [0196.923] NtQueryInformationFile (in: FileHandle=0x1204, IoStatusBlock=0x857f9f8, FileInformation=0x857fa00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x857f9f8, FileInformation=0x857fa00) returned 0x0 [0196.923] NtSetInformationFile (FileHandle=0x1204, IoStatusBlock=0x857f9f8, FileInformation=0x857fa00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0197.214] FlushFileBuffers (hFile=0x1204) returned 1 [0197.221] CloseHandle (hObject=0x1204) returned 1 [0197.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec828 [0197.350] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0197.350] wcscat (in: _Dest=0x3dec828, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\F0DBEC-Readme.txt" [0197.350] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\f0dbec-readme.txt")) returned 0xffffffff [0197.350] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a3c [0197.680] WriteFile (in: hFile=0x1a3c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x857fa44, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x857fa44*=0x70c, lpOverlapped=0x0) returned 1 [0198.124] CloseHandle (hObject=0x1a3c) returned 1 [0198.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0198.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335ab8) returned 1 Thread: id = 4808 os_tid = 0x26d0 [0178.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e24e40 [0178.315] wcscpy (in: _Dest=0x3e24e40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0178.315] wcscat (in: _Dest=0x3e24e40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0178.315] wcscat (in: _Dest=0x3e24e40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*" [0178.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e798 [0178.315] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6878150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6911e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6911e40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099350 [0189.304] wcscmp (_String1=".", _String2=".") returned 0 [0189.304] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6878150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6911e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6911e40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.304] wcscmp (_String1="..", _String2=".") returned 1 [0189.304] wcscmp (_String1="..", _String2="..") returned 0 [0189.304] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6905af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e1690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0189.304] wcscmp (_String1="ar", _String2=".") returned 1 [0189.304] wcscmp (_String1="ar", _String2="..") returned 1 [0189.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6410 [0189.304] wcscpy (in: _Dest=0x3ef6410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.304] wcscat (in: _Dest=0x3ef6410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.304] wcscat (in: _Dest=0x3ef6410, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0191.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0191.154] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6900cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69da160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69da160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0191.154] wcscmp (_String1="bg", _String2=".") returned 1 [0191.154] wcscmp (_String1="bg", _String2="..") returned 1 [0191.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef56a8 [0191.154] wcscpy (in: _Dest=0x3ef56a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.154] wcscat (in: _Dest=0x3ef56a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.154] wcscat (in: _Dest=0x3ef56a8, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0191.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef56a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650 [0191.155] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a1960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe694c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0191.155] wcscmp (_String1="ca", _String2=".") returned 1 [0191.155] wcscmp (_String1="ca", _String2="..") returned 1 [0191.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef4d60 [0191.155] wcscpy (in: _Dest=0x3ef4d60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.155] wcscat (in: _Dest=0x3ef4d60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.155] wcscat (in: _Dest=0x3ef4d60, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0191.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef4d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f8 [0191.156] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68844a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6922fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0191.156] wcscmp (_String1="cs", _String2=".") returned 1 [0191.157] wcscmp (_String1="cs", _String2="..") returned 1 [0191.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5ac8 [0191.157] wcscpy (in: _Dest=0x3ef5ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.157] wcscat (in: _Dest=0x3ef5ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.157] wcscat (in: _Dest=0x3ef5ac8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0191.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2908 [0191.158] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f97a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d0520, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0191.158] wcscmp (_String1="da", _String2=".") returned 1 [0191.158] wcscmp (_String1="da", _String2="..") returned 1 [0191.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef60f8 [0191.158] wcscpy (in: _Dest=0x3ef60f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.158] wcscat (in: _Dest=0x3ef60f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.158] wcscat (in: _Dest=0x3ef60f8, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0191.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef60f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2904 [0191.159] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6897d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6940470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6940470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0191.159] wcscmp (_String1="de", _String2=".") returned 1 [0191.159] wcscmp (_String1="de", _String2="..") returned 1 [0191.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6308 [0191.159] wcscpy (in: _Dest=0x3ef6308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.159] wcscat (in: _Dest=0x3ef6308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.159] wcscat (in: _Dest=0x3ef6308, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0191.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0191.160] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c1530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697adf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe697adf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0191.160] wcscmp (_String1="el", _String2=".") returned 1 [0191.160] wcscmp (_String1="el", _String2="..") returned 1 [0191.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef57b0 [0191.160] wcscpy (in: _Dest=0x3ef57b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.160] wcscat (in: _Dest=0x3ef57b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.160] wcscat (in: _Dest=0x3ef57b0, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0191.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef57b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0191.161] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f4980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c8ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0191.161] wcscmp (_String1="en", _String2=".") returned 1 [0191.161] wcscmp (_String1="en", _String2="..") returned 1 [0191.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5180 [0191.161] wcscpy (in: _Dest=0x3ef5180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.161] wcscat (in: _Dest=0x3ef5180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.161] wcscat (in: _Dest=0x3ef5180, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0191.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2960 [0191.162] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe688b9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692f300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0191.162] wcscmp (_String1="es", _String2=".") returned 1 [0191.163] wcscmp (_String1="es", _String2="..") returned 1 [0191.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6200 [0191.163] wcscpy (in: _Dest=0x3ef6200, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.163] wcscat (in: _Dest=0x3ef6200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.163] wcscat (in: _Dest=0x3ef6200, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0191.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0191.164] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b78f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69711b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0191.164] wcscmp (_String1="fi", _String2=".") returned 1 [0191.164] wcscmp (_String1="fi", _String2="..") returned 1 [0191.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6a40 [0191.164] wcscpy (in: _Dest=0x3ef6a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.164] wcscat (in: _Dest=0x3ef6a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.164] wcscat (in: _Dest=0x3ef6a40, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0191.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0191.165] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68dc2e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a6d10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0191.165] wcscmp (_String1="fil", _String2=".") returned 1 [0191.165] wcscmp (_String1="fil", _String2="..") returned 1 [0191.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3ef55a0 [0191.165] wcscpy (in: _Dest=0x3ef55a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.165] wcscat (in: _Dest=0x3ef55a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.165] wcscat (in: _Dest=0x3ef55a0, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0191.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef55a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x186c [0191.166] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a6780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69515e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0191.166] wcscmp (_String1="fr", _String2=".") returned 1 [0191.166] wcscmp (_String1="fr", _String2="..") returned 1 [0191.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5498 [0191.166] wcscpy (in: _Dest=0x3ef5498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.166] wcscat (in: _Dest=0x3ef5498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.166] wcscat (in: _Dest=0x3ef5498, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0191.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0191.167] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6881d90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe691e190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0191.167] wcscmp (_String1="hi", _String2=".") returned 1 [0191.167] wcscmp (_String1="hi", _String2="..") returned 1 [0191.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef58b8 [0191.167] wcscpy (in: _Dest=0x3ef58b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.167] wcscat (in: _Dest=0x3ef58b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.167] wcscat (in: _Dest=0x3ef58b8, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0191.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef58b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0191.168] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68bc710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6975fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0191.168] wcscmp (_String1="hr", _String2=".") returned 1 [0191.168] wcscmp (_String1="hr", _String2="..") returned 1 [0191.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef4f70 [0191.168] wcscpy (in: _Dest=0x3ef4f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.168] wcscat (in: _Dest=0x3ef4f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.168] wcscat (in: _Dest=0x3ef4f70, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0191.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef4f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0191.169] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68892c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692a4e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0191.169] wcscmp (_String1="hu", _String2=".") returned 1 [0191.169] wcscmp (_String1="hu", _String2="..") returned 1 [0191.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6518 [0191.169] wcscpy (in: _Dest=0x3ef6518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.169] wcscat (in: _Dest=0x3ef6518, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.169] wcscat (in: _Dest=0x3ef6518, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0191.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0191.170] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690a910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e3da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0191.170] wcscmp (_String1="id", _String2=".") returned 1 [0191.170] wcscmp (_String1="id", _String2="..") returned 1 [0191.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6620 [0191.170] wcscpy (in: _Dest=0x3ef6620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.170] wcscat (in: _Dest=0x3ef6620, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.170] wcscat (in: _Dest=0x3ef6620, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0191.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0191.171] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6911e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f00f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0191.171] wcscmp (_String1="it", _String2=".") returned 1 [0191.171] wcscmp (_String1="it", _String2="..") returned 1 [0191.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6728 [0191.172] wcscpy (in: _Dest=0x3ef6728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.172] wcscat (in: _Dest=0x3ef6728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.172] wcscat (in: _Dest=0x3ef6728, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" [0191.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0191.172] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68fe5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d5340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0191.172] wcscmp (_String1="ja", _String2=".") returned 1 [0191.173] wcscmp (_String1="ja", _String2="..") returned 1 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6830 [0191.173] wcscpy (in: _Dest=0x3ef6830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.173] wcscat (in: _Dest=0x3ef6830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.173] wcscat (in: _Dest=0x3ef6830, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" [0191.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0191.173] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c8a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6989850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0191.173] wcscmp (_String1="ko", _String2=".") returned 1 [0191.174] wcscmp (_String1="ko", _String2="..") returned 1 [0191.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef6938 [0191.174] wcscpy (in: _Dest=0x3ef6938, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.174] wcscat (in: _Dest=0x3ef6938, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.174] wcscat (in: _Dest=0x3ef6938, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" [0191.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef6938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0191.175] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d74c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a1ef0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0191.175] wcscmp (_String1="lt", _String2=".") returned 1 [0191.175] wcscmp (_String1="lt", _String2="..") returned 1 [0191.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5ee8 [0191.175] wcscpy (in: _Dest=0x3ef5ee8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.175] wcscat (in: _Dest=0x3ef5ee8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.175] wcscat (in: _Dest=0x3ef5ee8, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" [0191.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0191.176] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cff90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6995ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0191.176] wcscmp (_String1="lv", _String2=".") returned 1 [0191.176] wcscmp (_String1="lv", _String2="..") returned 1 [0191.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5ff0 [0191.176] wcscpy (in: _Dest=0x3ef5ff0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.176] wcscat (in: _Dest=0x3ef5ff0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.176] wcscat (in: _Dest=0x3ef5ff0, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" [0191.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0191.177] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6895610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe693b650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0191.177] wcscmp (_String1="nl", _String2=".") returned 1 [0191.177] wcscmp (_String1="nl", _String2="..") returned 1 [0191.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5bd0 [0191.177] wcscpy (in: _Dest=0x3ef5bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.177] wcscat (in: _Dest=0x3ef5bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.177] wcscat (in: _Dest=0x3ef5bd0, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" [0191.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0191.178] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cb170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe698e670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe698e670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0191.178] wcscmp (_String1="no", _String2=".") returned 1 [0191.178] wcscmp (_String1="no", _String2="..") returned 1 [0191.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5cd8 [0191.179] wcscpy (in: _Dest=0x3ef5cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.179] wcscat (in: _Dest=0x3ef5cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.179] wcscat (in: _Dest=0x3ef5cd8, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" [0191.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0191.179] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d4db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe699a9c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0191.180] wcscmp (_String1="pl", _String2=".") returned 1 [0191.180] wcscmp (_String1="pl", _String2="..") returned 1 [0191.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5de0 [0191.180] wcscpy (in: _Dest=0x3ef5de0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.180] wcscat (in: _Dest=0x3ef5de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.180] wcscat (in: _Dest=0x3ef5de0, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" [0191.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0191.181] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e8630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b7e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0191.181] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0191.181] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0191.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3ef5288 [0191.181] wcscpy (in: _Dest=0x3ef5288, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.181] wcscat (in: _Dest=0x3ef5288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.181] wcscat (in: _Dest=0x3ef5288, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" [0191.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0191.182] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6956400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6956400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0191.182] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0191.182] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0191.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3ef4e68 [0191.182] wcscpy (in: _Dest=0x3ef4e68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.182] wcscat (in: _Dest=0x3ef4e68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.182] wcscat (in: _Dest=0x3ef4e68, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" [0191.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef4e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0191.183] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe689cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69479a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0191.183] wcscmp (_String1="ro", _String2=".") returned 1 [0191.183] wcscmp (_String1="ro", _String2="..") returned 1 [0191.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5390 [0191.183] wcscpy (in: _Dest=0x3ef5390, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.183] wcscat (in: _Dest=0x3ef5390, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.183] wcscat (in: _Dest=0x3ef5390, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0191.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3ef5390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0191.184] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b51e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6969c80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0191.184] wcscmp (_String1="ru", _String2=".") returned 1 [0191.184] wcscmp (_String1="ru", _String2="..") returned 1 [0191.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8321cc8 [0191.184] wcscpy (in: _Dest=0x8321cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.184] wcscat (in: _Dest=0x8321cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.185] wcscat (in: _Dest=0x8321cc8, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0191.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0191.185] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b03c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6964e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0191.185] wcscmp (_String1="se", _String2=".") returned 1 [0191.186] wcscmp (_String1="se", _String2="..") returned 1 [0191.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83222f8 [0191.186] wcscpy (in: _Dest=0x83222f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.186] wcscat (in: _Dest=0x83222f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.186] wcscat (in: _Dest=0x83222f8, _Source="se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0191.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83222f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0191.186] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c3c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6982320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0191.187] wcscmp (_String1="sk", _String2=".") returned 1 [0191.187] wcscmp (_String1="sk", _String2="..") returned 1 [0191.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83217a0 [0191.187] wcscpy (in: _Dest=0x83217a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.187] wcscat (in: _Dest=0x83217a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.187] wcscat (in: _Dest=0x83217a0, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0191.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x83217a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0191.188] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68907f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6936830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0191.188] wcscmp (_String1="sl", _String2=".") returned 1 [0191.188] wcscmp (_String1="sl", _String2="..") returned 1 [0191.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8321698 [0191.188] wcscpy (in: _Dest=0x8321698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.188] wcscat (in: _Dest=0x8321698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.188] wcscat (in: _Dest=0x8321698, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0191.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0191.189] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68efb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c41d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0191.189] wcscmp (_String1="sr", _String2=".") returned 1 [0191.189] wcscmp (_String1="sr", _String2="..") returned 1 [0191.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8321488 [0191.189] wcscpy (in: _Dest=0x8321488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.189] wcscat (in: _Dest=0x8321488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.189] wcscat (in: _Dest=0x8321488, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0191.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0191.190] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690d020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e8bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e8bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0191.190] wcscmp (_String1="th", _String2=".") returned 1 [0191.190] wcscmp (_String1="th", _String2="..") returned 1 [0191.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8321fe0 [0191.190] wcscpy (in: _Dest=0x8321fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.190] wcscat (in: _Dest=0x8321fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.190] wcscat (in: _Dest=0x8321fe0, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0191.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8321fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0191.527] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe687a860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6914550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0191.527] wcscmp (_String1="tr", _String2=".") returned 1 [0191.527] wcscmp (_String1="tr", _String2="..") returned 1 [0191.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333ab8 [0191.527] wcscpy (in: _Dest=0x8333ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0191.527] wcscat (in: _Dest=0x8333ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0191.527] wcscat (in: _Dest=0x8333ab8, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0192.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0192.555] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe695d930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0192.555] wcscmp (_String1="uk", _String2=".") returned 1 [0192.555] wcscmp (_String1="uk", _String2="..") returned 1 [0192.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333fe0 [0192.555] wcscpy (in: _Dest=0x8333fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0192.555] wcscat (in: _Dest=0x8333fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0192.555] wcscat (in: _Dest=0x8333fe0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0192.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0192.556] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e3810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b3060, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0192.556] wcscmp (_String1="vi", _String2=".") returned 1 [0192.556] wcscmp (_String1="vi", _String2="..") returned 1 [0192.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8333ed8 [0192.556] wcscpy (in: _Dest=0x8333ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0192.556] wcscat (in: _Dest=0x8333ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0192.556] wcscat (in: _Dest=0x8333ed8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0192.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0192.557] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e1100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69abb30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0192.557] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0192.558] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0192.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8333698 [0192.558] wcscpy (in: _Dest=0x8333698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0192.558] wcscat (in: _Dest=0x8333698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0192.558] wcscat (in: _Dest=0x8333698, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0192.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0192.559] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0192.559] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0192.559] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0192.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8333278 [0192.559] wcscpy (in: _Dest=0x8333278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0192.559] wcscat (in: _Dest=0x8333278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0192.559] wcscat (in: _Dest=0x8333278, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0192.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x8333278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0192.560] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x808e798 | out: lpFindFileData=0x808e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0192.560] FindClose (in: hFindFile=0x8099350 | out: hFindFile=0x8099350) returned 1 [0192.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e798) returned 1 [0192.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24e40) returned 1 [0192.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27a40) returned 1 Thread: id = 4809 os_tid = 0x26d4 [0178.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8335dd0 [0178.315] wcscpy (in: _Dest=0x8335dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0178.315] wcscat (in: _Dest=0x8335dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" [0178.315] wcscat (in: _Dest=0x8335dd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*" [0178.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fad8 [0178.316] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0185.090] wcscmp (_String1=".", _String2=".") returned 0 [0185.090] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.091] wcscmp (_String1="..", _String2=".") returned 1 [0185.091] wcscmp (_String1="..", _String2="..") returned 0 [0185.091] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f9d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x35d07400, ftLastWriteTime.dwHighDateTime=0x1d068b4, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0185.091] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0185.091] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0185.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef7fd8 [0185.091] wcscpy (in: _Dest=0x3ef7fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0185.091] wcscat (in: _Dest=0x3ef7fd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" [0185.091] wcscat (in: _Dest=0x3ef7fd8, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" [0188.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3ef7fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0188.005] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x808fad8 | out: lpFindFileData=0x808fad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f9d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x35d07400, ftLastWriteTime.dwHighDateTime=0x1d068b4, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0188.005] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0188.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fad8) returned 1 [0188.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335dd0) returned 1 [0188.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25740) returned 1 Thread: id = 4810 os_tid = 0x26d8 [0178.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\antananarivo")) returned 0x20 [0185.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo", dwFileAttributes=0x20) returned 0 [0185.095] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\antananarivo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.626] GetLastError () returned 0x5 [0186.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo", dwFileAttributes=0x20) returned 0 [0186.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 Thread: id = 4811 os_tid = 0x26dc [0178.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\chagos")) returned 0x20 [0186.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos", dwFileAttributes=0x20) returned 0 [0186.268] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\chagos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.268] GetLastError () returned 0x5 [0186.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos", dwFileAttributes=0x20) returned 0 [0186.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46540) returned 1 Thread: id = 4812 os_tid = 0x26e0 [0178.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\christmas")) returned 0x20 [0186.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas", dwFileAttributes=0x20) returned 0 [0186.631] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\christmas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.632] GetLastError () returned 0x5 [0186.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas", dwFileAttributes=0x20) returned 0 [0186.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a188) returned 1 Thread: id = 4813 os_tid = 0x26e4 [0178.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\cocos")) returned 0x20 [0186.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos", dwFileAttributes=0x20) returned 0 [0186.630] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\cocos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.630] GetLastError () returned 0x5 [0186.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos", dwFileAttributes=0x20) returned 0 [0186.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d469b8) returned 1 Thread: id = 4814 os_tid = 0x26e8 [0178.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\comoro")) returned 0x20 [0186.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro", dwFileAttributes=0x20) returned 0 [0186.628] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\comoro"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.628] GetLastError () returned 0x5 [0186.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro", dwFileAttributes=0x20) returned 0 [0186.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47650) returned 1 Thread: id = 4815 os_tid = 0x26ec [0178.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\kerguelen")) returned 0x20 [0186.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen", dwFileAttributes=0x20) returned 0 [0186.478] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\kerguelen"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.478] GetLastError () returned 0x5 [0186.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen", dwFileAttributes=0x20) returned 0 [0186.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33f98) returned 1 Thread: id = 4816 os_tid = 0x26f0 [0178.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mahe")) returned 0x20 [0186.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe", dwFileAttributes=0x20) returned 0 [0186.476] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mahe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.476] GetLastError () returned 0x5 [0186.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe", dwFileAttributes=0x20) returned 0 [0186.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47720) returned 1 Thread: id = 4817 os_tid = 0x26f4 [0178.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\maldives")) returned 0x20 [0186.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives", dwFileAttributes=0x20) returned 0 [0186.463] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\maldives"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.463] GetLastError () returned 0x5 [0186.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives", dwFileAttributes=0x20) returned 0 [0186.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33a58) returned 1 Thread: id = 4818 os_tid = 0x26f8 [0178.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mauritius")) returned 0x20 [0186.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius", dwFileAttributes=0x20) returned 0 [0186.461] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mauritius"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.461] GetLastError () returned 0x5 [0186.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius", dwFileAttributes=0x20) returned 0 [0186.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34238) returned 1 Thread: id = 4819 os_tid = 0x26fc [0178.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mayotte")) returned 0x20 [0186.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte", dwFileAttributes=0x20) returned 0 [0186.459] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mayotte"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.459] GetLastError () returned 0x5 [0186.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte", dwFileAttributes=0x20) returned 0 [0186.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f339e8) returned 1 Thread: id = 4820 os_tid = 0x2700 [0178.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\reunion")) returned 0x20 [0186.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion", dwFileAttributes=0x20) returned 0 [0186.457] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\reunion"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.457] GetLastError () returned 0x5 [0186.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion", dwFileAttributes=0x20) returned 0 [0186.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33978) returned 1 Thread: id = 4821 os_tid = 0x2704 [0178.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif")) returned 0x20 [0187.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF", dwFileAttributes=0x20) returned 0 [0187.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.608] GetLastError () returned 0x5 [0187.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF", dwFileAttributes=0x20) returned 0 [0187.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 4822 os_tid = 0x2708 [0178.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif")) returned 0x20 [0187.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF", dwFileAttributes=0x20) returned 0 [0187.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.576] GetLastError () returned 0x5 [0187.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF", dwFileAttributes=0x20) returned 0 [0187.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b2e0) returned 1 Thread: id = 4823 os_tid = 0x270c [0178.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif")) returned 0x20 [0187.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF", dwFileAttributes=0x20) returned 0 [0187.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.597] GetLastError () returned 0x5 [0187.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF", dwFileAttributes=0x20) returned 0 [0187.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ab28) returned 1 Thread: id = 4824 os_tid = 0x2710 [0178.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif")) returned 0x20 [0187.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF", dwFileAttributes=0x20) returned 0 [0187.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.588] GetLastError () returned 0x5 [0187.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF", dwFileAttributes=0x20) returned 0 [0187.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bd90) returned 1 Thread: id = 4825 os_tid = 0x2714 [0178.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif")) returned 0x20 [0187.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF", dwFileAttributes=0x20) returned 0 [0187.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.619] GetLastError () returned 0x5 [0187.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF", dwFileAttributes=0x20) returned 0 [0187.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 Thread: id = 4826 os_tid = 0x2718 [0178.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif")) returned 0x20 [0187.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF", dwFileAttributes=0x20) returned 0 [0187.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.595] GetLastError () returned 0x5 [0187.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF", dwFileAttributes=0x20) returned 0 [0187.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a8c8) returned 1 Thread: id = 4827 os_tid = 0x271c [0178.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif")) returned 0x20 [0187.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF", dwFileAttributes=0x20) returned 0 [0187.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.617] GetLastError () returned 0x5 [0187.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF", dwFileAttributes=0x20) returned 0 [0187.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bbc8) returned 1 Thread: id = 4828 os_tid = 0x2720 [0178.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif")) returned 0x20 [0187.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF", dwFileAttributes=0x20) returned 0 [0187.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.593] GetLastError () returned 0x5 [0187.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF", dwFileAttributes=0x20) returned 0 [0187.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a700) returned 1 Thread: id = 4829 os_tid = 0x2724 [0178.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif")) returned 0x20 [0187.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF", dwFileAttributes=0x20) returned 0 [0187.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.615] GetLastError () returned 0x5 [0187.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF", dwFileAttributes=0x20) returned 0 [0187.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a798) returned 1 Thread: id = 4830 os_tid = 0x2758 [0178.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif")) returned 0x20 [0187.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF", dwFileAttributes=0x20) returned 0 [0187.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.591] GetLastError () returned 0x5 [0187.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF", dwFileAttributes=0x20) returned 0 [0187.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a4a0) returned 1 Thread: id = 4831 os_tid = 0x275c [0178.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif")) returned 0x20 [0187.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF", dwFileAttributes=0x20) returned 0 [0187.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.589] GetLastError () returned 0x5 [0187.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF", dwFileAttributes=0x20) returned 0 [0187.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a240) returned 1 Thread: id = 4832 os_tid = 0x2760 [0178.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif")) returned 0x20 [0187.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF", dwFileAttributes=0x20) returned 0 [0187.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.614] GetLastError () returned 0x5 [0187.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF", dwFileAttributes=0x20) returned 0 [0187.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ba98) returned 1 Thread: id = 4833 os_tid = 0x2764 [0178.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif")) returned 0x20 [0187.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF", dwFileAttributes=0x20) returned 0 [0187.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.613] GetLastError () returned 0x5 [0187.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF", dwFileAttributes=0x20) returned 0 [0187.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ac58) returned 1 Thread: id = 4834 os_tid = 0x2768 [0178.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif")) returned 0x20 [0187.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF", dwFileAttributes=0x20) returned 0 [0187.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.256] GetLastError () returned 0x5 [0187.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF", dwFileAttributes=0x20) returned 0 [0187.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2af50) returned 1 Thread: id = 4835 os_tid = 0x2778 [0178.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif")) returned 0x20 [0187.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF", dwFileAttributes=0x20) returned 0 [0187.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.611] GetLastError () returned 0x5 [0187.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF", dwFileAttributes=0x20) returned 0 [0187.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a2d8) returned 1 Thread: id = 4836 os_tid = 0x277c [0178.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif")) returned 0x20 [0187.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF", dwFileAttributes=0x20) returned 0 [0187.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.643] GetLastError () returned 0x5 [0187.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF", dwFileAttributes=0x20) returned 0 [0187.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b378) returned 1 Thread: id = 4837 os_tid = 0x2780 [0178.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif")) returned 0x20 [0187.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF", dwFileAttributes=0x20) returned 0 [0187.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.610] GetLastError () returned 0x5 [0187.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF", dwFileAttributes=0x20) returned 0 [0187.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a830) returned 1 Thread: id = 4838 os_tid = 0x2784 [0178.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif")) returned 0x20 [0187.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF", dwFileAttributes=0x20) returned 0 [0187.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.640] GetLastError () returned 0x5 [0187.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF", dwFileAttributes=0x20) returned 0 [0187.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 Thread: id = 4839 os_tid = 0x2788 [0178.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif")) returned 0x20 [0187.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF", dwFileAttributes=0x20) returned 0 [0187.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.638] GetLastError () returned 0x5 [0187.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF", dwFileAttributes=0x20) returned 0 [0187.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e29f48) returned 1 Thread: id = 4840 os_tid = 0x27e8 [0178.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif")) returned 0x20 [0187.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF", dwFileAttributes=0x20) returned 0 [0187.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.637] GetLastError () returned 0x5 [0187.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF", dwFileAttributes=0x20) returned 0 [0187.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bcf8) returned 1 Thread: id = 4841 os_tid = 0x27f0 [0178.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif")) returned 0x20 [0187.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF", dwFileAttributes=0x20) returned 0 [0187.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.635] GetLastError () returned 0x5 [0187.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF", dwFileAttributes=0x20) returned 0 [0187.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 Thread: id = 4842 os_tid = 0x2834 [0178.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif")) returned 0x20 [0187.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF", dwFileAttributes=0x20) returned 0 [0187.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.633] GetLastError () returned 0x5 [0187.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF", dwFileAttributes=0x20) returned 0 [0187.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b968) returned 1 Thread: id = 4843 os_tid = 0x2838 [0178.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif")) returned 0x20 [0187.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF", dwFileAttributes=0x20) returned 0 [0187.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.632] GetLastError () returned 0x5 [0187.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF", dwFileAttributes=0x20) returned 0 [0187.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b7a0) returned 1 Thread: id = 4844 os_tid = 0x283c [0178.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif")) returned 0x20 [0187.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF", dwFileAttributes=0x20) returned 0 [0187.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.630] GetLastError () returned 0x5 [0187.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF", dwFileAttributes=0x20) returned 0 [0187.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a078) returned 1 Thread: id = 4845 os_tid = 0x2840 [0178.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif")) returned 0x20 [0187.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF", dwFileAttributes=0x20) returned 0 [0187.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.629] GetLastError () returned 0x5 [0187.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF", dwFileAttributes=0x20) returned 0 [0187.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3de30) returned 1 Thread: id = 4846 os_tid = 0x2844 [0178.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif")) returned 0x20 [0187.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF", dwFileAttributes=0x20) returned 0 [0187.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.627] GetLastError () returned 0x5 [0187.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF", dwFileAttributes=0x20) returned 0 [0187.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3dbd0) returned 1 Thread: id = 4847 os_tid = 0x2848 [0178.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif")) returned 0x20 [0187.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF", dwFileAttributes=0x20) returned 0 [0187.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.626] GetLastError () returned 0x5 [0187.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF", dwFileAttributes=0x20) returned 0 [0187.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c838) returned 1 Thread: id = 4848 os_tid = 0x285c [0178.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif")) returned 0x20 [0187.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF", dwFileAttributes=0x20) returned 0 [0187.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.624] GetLastError () returned 0x5 [0187.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF", dwFileAttributes=0x20) returned 0 [0187.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c540) returned 1 Thread: id = 4849 os_tid = 0x2860 [0178.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif")) returned 0x20 [0187.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF", dwFileAttributes=0x20) returned 0 [0187.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.622] GetLastError () returned 0x5 [0187.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF", dwFileAttributes=0x20) returned 0 [0187.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d7a8) returned 1 Thread: id = 4850 os_tid = 0x289c [0178.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif")) returned 0x20 [0187.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF", dwFileAttributes=0x20) returned 0 [0187.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.621] GetLastError () returned 0x5 [0187.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF", dwFileAttributes=0x20) returned 0 [0187.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d4b0) returned 1 Thread: id = 4851 os_tid = 0x28a0 [0178.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif")) returned 0x20 [0187.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF", dwFileAttributes=0x20) returned 0 [0187.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.539] GetLastError () returned 0x5 [0187.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF", dwFileAttributes=0x20) returned 0 [0187.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cb30) returned 1 Thread: id = 4852 os_tid = 0x28a4 [0178.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif")) returned 0x20 [0187.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF", dwFileAttributes=0x20) returned 0 [0187.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.538] GetLastError () returned 0x5 [0187.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF", dwFileAttributes=0x20) returned 0 [0187.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c7a0) returned 1 Thread: id = 4853 os_tid = 0x130 [0178.432] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json")) returned 0x2020 [0178.433] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0189.959] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc60 [0193.812] GetFileSizeEx (in: hFile=0xc60, lpFileSize=0x1274f7b8 | out: lpFileSize=0x1274f7b8*=179) returned 1 [0193.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0193.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0193.813] NtQuerySystemTime (in: CurrentTime=0x1274f740 | out: CurrentTime=0x1274f740*=132471540617112000) returned 0x0 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x2f40194a [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x6715bbaf [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x18e3fafb [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x3045b702 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x4078cd67 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x686d5ef4 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x2583cbf2 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x183ba2fe [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x2d7e3889 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x6f77db27 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x76520d85 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x1d8713bd [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x4adf8565 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x421e58c9 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x2b88dd34 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x4cb9e7b3 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x21cb2663 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x5e4fcc7 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x2e135b54 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x534a0a53 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x27c27c3b [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x4bce89e4 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x24cb45e2 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x41cf915a [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x13b16272 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0xedfb806 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x4497fe02 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x25b207b1 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x3c489e9f [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0xbcdbacf [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x636ae527 [0193.813] RtlRandomEx (in: Seed=0x1274f738 | out: Seed=0x1274f738) returned 0x27c27c3b [0193.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14920498 [0193.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149240a0 [0193.822] ReadFile (in: hFile=0xc60, lpBuffer=0x14920498, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1274f734, lpOverlapped=0x0 | out: lpBuffer=0x14920498*, lpNumberOfBytesRead=0x1274f734*=0xb3, lpOverlapped=0x0) returned 1 [0193.824] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.824] WriteFile (in: hFile=0xc60, lpBuffer=0x149240a0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1274f738, lpOverlapped=0x0 | out: lpBuffer=0x149240a0*, lpNumberOfBytesWritten=0x1274f738*=0xb3, lpOverlapped=0x0) returned 1 [0201.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062468 [0201.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062490 [0201.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062490) returned 1 [0201.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149240a0) returned 1 [0201.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14920498) returned 1 [0201.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 [0201.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e58d0) returned 1 [0201.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fdf8 [0201.526] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.526] WriteFile (in: hFile=0xc60, lpBuffer=0x8405d90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1274f7ac, lpOverlapped=0x0 | out: lpBuffer=0x8405d90*, lpNumberOfBytesWritten=0x1274f7ac*=0x10c, lpOverlapped=0x0) returned 1 [0203.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405d90) returned 1 [0203.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fee8) returned 1 [0203.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062490) returned 1 [0203.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdf8) returned 1 [0203.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062468) returned 1 [0203.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be88) returned 1 [0203.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd20) returned 1 [0203.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0203.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef8998 [0203.767] wcscpy (in: _Dest=0x3ef8998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" [0203.767] wcscat (in: _Dest=0x3ef8998, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.f0dbec" [0203.767] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.f0dbec", NtPathName=0x1274f730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9030 [0204.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9030) returned 1 [0204.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830bc10) returned 1 [0204.256] NtQueryInformationFile (in: FileHandle=0xc60, IoStatusBlock=0x1274f708, FileInformation=0x1274f710, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1274f708, FileInformation=0x1274f710) returned 0x0 [0204.256] NtSetInformationFile (FileHandle=0xc60, IoStatusBlock=0x1274f708, FileInformation=0x1274f710, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8998) returned 1 [0204.647] FlushFileBuffers (hFile=0xc60) returned 1 [0204.662] CloseHandle (hObject=0xc60) returned 1 [0207.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346e10 [0207.803] wcscpy (in: _Dest=0x8346e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" [0207.804] wcscat (in: _Dest=0x8346e10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\F0DBEC-Readme.txt" [0207.804] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\f0dbec-readme.txt")) returned 0xffffffff [0207.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1570 [0208.359] WriteFile (in: hFile=0x1570, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1274f754, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1274f754*=0x70c, lpOverlapped=0x0) returned 1 [0209.132] CloseHandle (hObject=0x1570) returned 1 [0209.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346e10) returned 1 [0209.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187928) returned 1 Thread: id = 4854 os_tid = 0x22c [0178.434] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json")) returned 0x2020 [0178.434] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0189.959] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1528 [0193.800] GetFileSizeEx (in: hFile=0x1528, lpFileSize=0x128bfb10 | out: lpFileSize=0x128bfb10*=179) returned 1 [0193.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0193.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0193.801] NtQuerySystemTime (in: CurrentTime=0x128bfa98 | out: CurrentTime=0x128bfa98*=132471540617112000) returned 0x0 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x3d36f127 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x84103e1 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x3ca9093f [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x6f639b8d [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x69b515da [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x22d63c23 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x5614b875 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x51ad5b77 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x109b1b06 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x62fac560 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x52b527af [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x192d3d2 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x6ce3da3a [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x492facef [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x10bd0c01 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x2d463e49 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x7e749339 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x3a45e756 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x52756e4d [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x2bba515 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x299296f6 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x647803ec [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x686f0be2 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x6ad00010 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x77f57f51 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x66e98f3f [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x2c0f7807 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x88702c5 [0193.801] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x72af0625 [0193.802] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x14d9448c [0193.802] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x725cf168 [0193.802] RtlRandomEx (in: Seed=0x128bfa90 | out: Seed=0x128bfa90) returned 0x5ef4ff7a [0193.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14918c88 [0193.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1491c890 [0193.810] ReadFile (in: hFile=0x1528, lpBuffer=0x14918c88, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x128bfa8c, lpOverlapped=0x0 | out: lpBuffer=0x14918c88*, lpNumberOfBytesRead=0x128bfa8c*=0xb3, lpOverlapped=0x0) returned 1 [0193.812] SetFilePointerEx (in: hFile=0x1528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.812] WriteFile (in: hFile=0x1528, lpBuffer=0x1491c890*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x128bfa90, lpOverlapped=0x0 | out: lpBuffer=0x1491c890*, lpNumberOfBytesWritten=0x128bfa90*=0xb3, lpOverlapped=0x0) returned 1 [0201.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062418 [0201.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062440 [0201.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062440) returned 1 [0201.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1491c890) returned 1 [0201.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14918c88) returned 1 [0201.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0201.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5918) returned 1 [0201.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fd68 [0201.524] SetFilePointerEx (in: hFile=0x1528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.524] WriteFile (in: hFile=0x1528, lpBuffer=0x8405c78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x128bfb04, lpOverlapped=0x0 | out: lpBuffer=0x8405c78*, lpNumberOfBytesWritten=0x128bfb04*=0x10c, lpOverlapped=0x0) returned 1 [0203.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405c78) returned 1 [0203.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6feb8) returned 1 [0203.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062440) returned 1 [0203.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fd68) returned 1 [0203.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062418) returned 1 [0203.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0203.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0203.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0203.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404cb0 [0203.742] wcscpy (in: _Dest=0x8404cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" [0203.742] wcscat (in: _Dest=0x8404cb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.f0dbec" [0203.742] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0x128bfa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9698 [0204.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9698) returned 1 [0204.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830dc68) returned 1 [0204.244] NtQueryInformationFile (in: FileHandle=0x1528, IoStatusBlock=0x128bfa60, FileInformation=0x128bfa68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x128bfa60, FileInformation=0x128bfa68) returned 0x0 [0204.244] NtSetInformationFile (FileHandle=0x1528, IoStatusBlock=0x128bfa60, FileInformation=0x128bfa68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404cb0) returned 1 [0204.593] FlushFileBuffers (hFile=0x1528) returned 1 [0204.628] CloseHandle (hObject=0x1528) returned 1 [0207.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83477d0 [0207.769] wcscpy (in: _Dest=0x83477d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" [0207.769] wcscat (in: _Dest=0x83477d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\F0DBEC-Readme.txt" [0207.769] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0207.769] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b94 [0208.356] WriteFile (in: hFile=0x1b94, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x128bfaac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x128bfaac*=0x70c, lpOverlapped=0x0) returned 1 [0209.099] CloseHandle (hObject=0x1b94) returned 1 [0209.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83477d0) returned 1 [0209.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187a50) returned 1 Thread: id = 4855 os_tid = 0x61c [0178.435] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json")) returned 0x2020 [0178.435] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.965] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x152c [0193.788] GetFileSizeEx (in: hFile=0x152c, lpFileSize=0x123ff8a8 | out: lpFileSize=0x123ff8a8*=179) returned 1 [0193.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0193.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0193.788] NtQuerySystemTime (in: CurrentTime=0x123ff830 | out: CurrentTime=0x123ff830*=132471540616956000) returned 0x0 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x63333af0 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x510f9e9b [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x109e332f [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x27676cb6 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x6c749da7 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x11829da3 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x43978c6a [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x566c7ab [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x505d7f31 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x48326901 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x48ddcc01 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x498a11dc [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x15e639c5 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x4339e5ac [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x1937fa3a [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x24651749 [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x1ec5f5bd [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x2f43356a [0193.788] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x6df78e51 [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x4647ed6 [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x469c526b [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x5fcce9f6 [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x6ad8b5a3 [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x70607215 [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x74450f55 [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x4d20061b [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x3b8c7282 [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x7166894b [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x4ac8735e [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x76240d1f [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0x1fecbebc [0193.789] RtlRandomEx (in: Seed=0x123ff828 | out: Seed=0x123ff828) returned 0xf308adf [0193.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8357950 [0193.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8371d88 [0193.797] ReadFile (in: hFile=0x152c, lpBuffer=0x8357950, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x123ff824, lpOverlapped=0x0 | out: lpBuffer=0x8357950*, lpNumberOfBytesRead=0x123ff824*=0xb3, lpOverlapped=0x0) returned 1 [0193.799] SetFilePointerEx (in: hFile=0x152c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.799] WriteFile (in: hFile=0x152c, lpBuffer=0x8371d88*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x123ff828, lpOverlapped=0x0 | out: lpBuffer=0x8371d88*, lpNumberOfBytesWritten=0x123ff828*=0xb3, lpOverlapped=0x0) returned 1 [0201.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80623c8 [0201.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80623f0 [0201.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80623f0) returned 1 [0201.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8371d88) returned 1 [0201.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8357950) returned 1 [0201.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 [0201.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4770) returned 1 [0201.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e700c8 [0201.523] SetFilePointerEx (in: hFile=0x152c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.523] WriteFile (in: hFile=0x152c, lpBuffer=0x8405b60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x123ff89c, lpOverlapped=0x0 | out: lpBuffer=0x8405b60*, lpNumberOfBytesWritten=0x123ff89c*=0x10c, lpOverlapped=0x0) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405b60) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70098) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80623f0) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700c8) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80623c8) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5f0) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0203.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef8380 [0203.764] wcscpy (in: _Dest=0x3ef8380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" [0203.764] wcscat (in: _Dest=0x3ef8380, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.f0dbec" [0203.764] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0x123ff820, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef8ee8 [0204.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8ee8) returned 1 [0204.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8310e00) returned 1 [0204.254] NtQueryInformationFile (in: FileHandle=0x152c, IoStatusBlock=0x123ff7f8, FileInformation=0x123ff800, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x123ff7f8, FileInformation=0x123ff800) returned 0x0 [0204.254] NtSetInformationFile (FileHandle=0x152c, IoStatusBlock=0x123ff7f8, FileInformation=0x123ff800, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8380) returned 1 [0204.643] FlushFileBuffers (hFile=0x152c) returned 1 [0204.658] CloseHandle (hObject=0x152c) returned 1 [0207.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346f48 [0207.799] wcscpy (in: _Dest=0x8346f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" [0207.799] wcscat (in: _Dest=0x8346f48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\F0DBEC-Readme.txt" [0207.799] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0207.799] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18f4 [0208.359] WriteFile (in: hFile=0x18f4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x123ff844, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x123ff844*=0x70c, lpOverlapped=0x0) returned 1 [0209.124] CloseHandle (hObject=0x18f4) returned 1 [0209.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346f48) returned 1 [0209.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187b78) returned 1 Thread: id = 4856 os_tid = 0x33c [0178.436] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json")) returned 0x2020 [0178.436] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0189.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc34 [0193.750] GetFileSizeEx (in: hFile=0xc34, lpFileSize=0x12c8f830 | out: lpFileSize=0x12c8f830*=179) returned 1 [0193.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0193.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0193.750] NtQuerySystemTime (in: CurrentTime=0x12c8f7b8 | out: CurrentTime=0x12c8f7b8*=132471540616488000) returned 0x0 [0193.750] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x7ecfc65e [0193.750] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x7385283 [0193.750] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x7cc6df36 [0193.750] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x3aba5af2 [0193.750] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x45ca75d1 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x5a0a063 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x6067a7a7 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x3654b31 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x6e963c13 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x6ef088f8 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x283129d1 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x330344c [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x11447661 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x50d0329 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x1bcda5b0 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x527b5a16 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x761c527d [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x13b3aa58 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x2b7a4db1 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x6d79b909 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x7814642e [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x284f528d [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x151a5124 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0xb8a5960 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x2e686307 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x43927d71 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x69aa7cd6 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x396fc65e [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x1ab4b8cd [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x3ae3c194 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x50603677 [0193.751] RtlRandomEx (in: Seed=0x12c8f7b0 | out: Seed=0x12c8f7b0) returned 0x1b192199 [0193.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8375990 [0193.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8362d68 [0193.785] ReadFile (in: hFile=0xc34, lpBuffer=0x8375990, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x12c8f7ac, lpOverlapped=0x0 | out: lpBuffer=0x8375990*, lpNumberOfBytesRead=0x12c8f7ac*=0xb3, lpOverlapped=0x0) returned 1 [0193.787] SetFilePointerEx (in: hFile=0xc34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.787] WriteFile (in: hFile=0xc34, lpBuffer=0x8362d68*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12c8f7b0, lpOverlapped=0x0 | out: lpBuffer=0x8362d68*, lpNumberOfBytesWritten=0x12c8f7b0*=0xb3, lpOverlapped=0x0) returned 1 [0201.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062328 [0201.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062350 [0201.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062350) returned 1 [0201.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8362d68) returned 1 [0201.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8375990) returned 1 [0201.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 [0201.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e49b0) returned 1 [0201.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6ffa8 [0201.519] SetFilePointerEx (in: hFile=0xc34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.519] WriteFile (in: hFile=0xc34, lpBuffer=0x8406ab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12c8f824, lpOverlapped=0x0 | out: lpBuffer=0x8406ab0*, lpNumberOfBytesWritten=0x12c8f824*=0x10c, lpOverlapped=0x0) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ab0) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff48) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062350) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ffa8) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062328) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0203.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404de8 [0203.739] wcscpy (in: _Dest=0x8404de8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" [0203.739] wcscat (in: _Dest=0x8404de8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.f0dbec" [0203.739] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x12c8f7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9928 [0204.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9928) returned 1 [0204.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f6198) returned 1 [0204.242] NtQueryInformationFile (in: FileHandle=0xc34, IoStatusBlock=0x12c8f780, FileInformation=0x12c8f788, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12c8f780, FileInformation=0x12c8f788) returned 0x0 [0204.242] NtSetInformationFile (FileHandle=0xc34, IoStatusBlock=0x12c8f780, FileInformation=0x12c8f788, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404de8) returned 1 [0204.589] FlushFileBuffers (hFile=0xc34) returned 1 [0204.598] CloseHandle (hObject=0xc34) returned 1 [0207.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347a40 [0207.764] wcscpy (in: _Dest=0x8347a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" [0207.764] wcscat (in: _Dest=0x8347a40, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\F0DBEC-Readme.txt" [0207.764] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0207.764] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x141c [0208.355] WriteFile (in: hFile=0x141c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12c8f7cc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12c8f7cc*=0x70c, lpOverlapped=0x0) returned 1 [0209.095] CloseHandle (hObject=0x141c) returned 1 [0209.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347a40) returned 1 [0209.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187ca0) returned 1 Thread: id = 4857 os_tid = 0x2a24 [0178.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wake")) returned 0x20 [0187.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake", dwFileAttributes=0x20) returned 0 [0187.776] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wake"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.549] GetLastError () returned 0x5 [0188.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake", dwFileAttributes=0x20) returned 0 [0188.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d464d8) returned 1 Thread: id = 4858 os_tid = 0x2a28 [0178.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wallis")) returned 0x20 [0187.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis", dwFileAttributes=0x20) returned 0 [0187.776] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wallis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.548] GetLastError () returned 0x5 [0188.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis", dwFileAttributes=0x20) returned 0 [0188.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33d68) returned 1 Thread: id = 4859 os_tid = 0x2a2c [0178.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\adak")) returned 0x20 [0178.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak", dwFileAttributes=0x20) returned 0 [0178.439] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\adak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.439] GetLastError () returned 0x5 [0178.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak", dwFileAttributes=0x20) returned 0 [0178.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce780) returned 1 Thread: id = 4860 os_tid = 0x2a30 [0178.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anchorage")) returned 0x20 [0178.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage", dwFileAttributes=0x20) returned 0 [0178.445] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anchorage"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.446] GetLastError () returned 0x5 [0178.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage", dwFileAttributes=0x20) returned 0 [0178.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33e48) returned 1 Thread: id = 4861 os_tid = 0x2a34 [0178.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anguilla")) returned 0x20 [0178.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla", dwFileAttributes=0x20) returned 0 [0178.448] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anguilla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.448] GetLastError () returned 0x5 [0178.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla", dwFileAttributes=0x20) returned 0 [0178.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33dd8) returned 1 Thread: id = 4862 os_tid = 0x2a38 [0178.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\antigua")) returned 0x20 [0178.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua", dwFileAttributes=0x20) returned 0 [0178.450] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\antigua"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.450] GetLastError () returned 0x5 [0178.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua", dwFileAttributes=0x20) returned 0 [0178.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33f28) returned 1 Thread: id = 4863 os_tid = 0x2a3c [0178.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\araguaina")) returned 0x20 [0178.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina", dwFileAttributes=0x20) returned 0 [0178.460] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\araguaina"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.460] GetLastError () returned 0x5 [0178.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina", dwFileAttributes=0x20) returned 0 [0178.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33c18) returned 1 Thread: id = 4864 os_tid = 0x2a40 [0178.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e68948 [0178.462] wcscpy (in: _Dest=0x3e68948, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0178.462] wcscat (in: _Dest=0x3e68948, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0178.462] wcscat (in: _Dest=0x3e68948, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\*" [0178.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805dfe0 [0178.462] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0182.337] wcscmp (_String1=".", _String2=".") returned 0 [0182.337] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.337] wcscmp (_String1="..", _String2=".") returned 1 [0182.337] wcscmp (_String1="..", _String2="..") returned 0 [0182.337] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Buenos_Aires", cAlternateFileName="BUENOS~1")) returned 1 [0182.337] wcscmp (_String1="Buenos_Aires", _String2=".") returned 1 [0182.337] wcscmp (_String1="Buenos_Aires", _String2="..") returned 1 [0182.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3f345f0 [0182.337] wcscpy (in: _Dest=0x3f345f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0182.337] wcscat (in: _Dest=0x3f345f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0182.337] wcscat (in: _Dest=0x3f345f0, _Source="Buenos_Aires" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" [0187.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f345f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0187.278] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catamarca", cAlternateFileName="CATAMA~1")) returned 1 [0187.279] wcscmp (_String1="Catamarca", _String2=".") returned 1 [0187.279] wcscmp (_String1="Catamarca", _String2="..") returned 1 [0187.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f30518 [0187.279] wcscpy (in: _Dest=0x3f30518, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.279] wcscat (in: _Dest=0x3f30518, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.279] wcscat (in: _Dest=0x3f30518, _Source="Catamarca" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" [0187.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0187.280] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cordoba", cAlternateFileName="")) returned 1 [0187.280] wcscmp (_String1="Cordoba", _String2=".") returned 1 [0187.280] wcscmp (_String1="Cordoba", _String2="..") returned 1 [0187.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831acd8 [0187.281] wcscpy (in: _Dest=0x831acd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.281] wcscat (in: _Dest=0x831acd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.281] wcscat (in: _Dest=0x831acd8, _Source="Cordoba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" [0187.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831acd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0187.282] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jujuy", cAlternateFileName="")) returned 1 [0187.282] wcscmp (_String1="Jujuy", _String2=".") returned 1 [0187.282] wcscmp (_String1="Jujuy", _String2="..") returned 1 [0187.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831afd8 [0187.282] wcscpy (in: _Dest=0x831afd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.282] wcscat (in: _Dest=0x831afd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.283] wcscat (in: _Dest=0x831afd8, _Source="Jujuy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" [0187.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831afd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0187.284] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Rioja", cAlternateFileName="")) returned 1 [0187.284] wcscmp (_String1="La_Rioja", _String2=".") returned 1 [0187.284] wcscmp (_String1="La_Rioja", _String2="..") returned 1 [0187.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f30160 [0187.284] wcscpy (in: _Dest=0x3f30160, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.284] wcscat (in: _Dest=0x3f30160, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.284] wcscat (in: _Dest=0x3f30160, _Source="La_Rioja" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" [0187.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f30160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0187.286] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mendoza", cAlternateFileName="")) returned 1 [0187.286] wcscmp (_String1="Mendoza", _String2=".") returned 1 [0187.286] wcscmp (_String1="Mendoza", _String2="..") returned 1 [0187.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831bb58 [0187.286] wcscpy (in: _Dest=0x831bb58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.286] wcscat (in: _Dest=0x831bb58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.286] wcscat (in: _Dest=0x831bb58, _Source="Mendoza" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" [0187.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831bb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0187.287] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Gallegos", cAlternateFileName="RIO_GA~1")) returned 1 [0187.287] wcscmp (_String1="Rio_Gallegos", _String2=".") returned 1 [0187.287] wcscmp (_String1="Rio_Gallegos", _String2="..") returned 1 [0187.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81de7b8 [0187.288] wcscpy (in: _Dest=0x81de7b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.288] wcscat (in: _Dest=0x81de7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.288] wcscat (in: _Dest=0x81de7b8, _Source="Rio_Gallegos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" [0187.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b9c [0187.295] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Salta", cAlternateFileName="")) returned 1 [0187.295] wcscmp (_String1="Salta", _String2=".") returned 1 [0187.295] wcscmp (_String1="Salta", _String2="..") returned 1 [0187.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a858 [0187.295] wcscpy (in: _Dest=0x831a858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.295] wcscat (in: _Dest=0x831a858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.295] wcscat (in: _Dest=0x831a858, _Source="Salta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" [0187.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0187.297] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Juan", cAlternateFileName="")) returned 1 [0187.297] wcscmp (_String1="San_Juan", _String2=".") returned 1 [0187.297] wcscmp (_String1="San_Juan", _String2="..") returned 1 [0187.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f301e8 [0187.297] wcscpy (in: _Dest=0x3f301e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.297] wcscat (in: _Dest=0x3f301e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.297] wcscat (in: _Dest=0x3f301e8, _Source="San_Juan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" [0187.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f301e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x290c [0187.298] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Luis", cAlternateFileName="")) returned 1 [0187.299] wcscmp (_String1="San_Luis", _String2=".") returned 1 [0187.299] wcscmp (_String1="San_Luis", _String2="..") returned 1 [0187.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f2feb8 [0187.299] wcscpy (in: _Dest=0x3f2feb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.299] wcscat (in: _Dest=0x3f2feb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.299] wcscat (in: _Dest=0x3f2feb8, _Source="San_Luis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" [0187.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2feb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0187.300] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tucuman", cAlternateFileName="")) returned 1 [0187.300] wcscmp (_String1="Tucuman", _String2=".") returned 1 [0187.300] wcscmp (_String1="Tucuman", _String2="..") returned 1 [0187.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a9d8 [0187.300] wcscpy (in: _Dest=0x831a9d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.300] wcscat (in: _Dest=0x831a9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.300] wcscat (in: _Dest=0x831a9d8, _Source="Tucuman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" [0187.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0187.302] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 1 [0187.302] wcscmp (_String1="Ushuaia", _String2=".") returned 1 [0187.302] wcscmp (_String1="Ushuaia", _String2="..") returned 1 [0187.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831b6d8 [0187.302] wcscpy (in: _Dest=0x831b6d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0187.302] wcscat (in: _Dest=0x831b6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0187.302] wcscat (in: _Dest=0x831b6d8, _Source="Ushuaia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" [0187.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831b6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4 [0187.304] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 0 [0187.304] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0190.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805dfe0) returned 1 [0190.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0190.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33828) returned 1 Thread: id = 4865 os_tid = 0x2a44 [0178.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\aruba")) returned 0x20 [0178.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba", dwFileAttributes=0x20) returned 0 [0178.463] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\aruba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.463] GetLastError () returned 0x5 [0178.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba", dwFileAttributes=0x20) returned 0 [0178.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47170) returned 1 Thread: id = 4866 os_tid = 0x14a4 [0178.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\asuncion")) returned 0x20 [0178.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion", dwFileAttributes=0x20) returned 0 [0178.465] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\asuncion"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.465] GetLastError () returned 0x5 [0178.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion", dwFileAttributes=0x20) returned 0 [0178.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33588) returned 1 Thread: id = 4867 os_tid = 0x1530 [0178.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\atikokan")) returned 0x20 [0178.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan", dwFileAttributes=0x20) returned 0 [0178.467] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\atikokan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.467] GetLastError () returned 0x5 [0178.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan", dwFileAttributes=0x20) returned 0 [0178.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33518) returned 1 Thread: id = 4868 os_tid = 0x1424 [0178.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia")) returned 0x20 [0178.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia", dwFileAttributes=0x20) returned 0 [0178.469] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.469] GetLastError () returned 0x5 [0178.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia", dwFileAttributes=0x20) returned 0 [0178.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47928) returned 1 Thread: id = 4869 os_tid = 0x18bc [0178.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia_banderas")) returned 0x20 [0178.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas", dwFileAttributes=0x20) returned 0 [0178.471] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia_banderas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.471] GetLastError () returned 0x5 [0178.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas", dwFileAttributes=0x20) returned 0 [0178.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831af58) returned 1 Thread: id = 4870 os_tid = 0x18f4 [0178.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\barbados")) returned 0x20 [0178.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados", dwFileAttributes=0x20) returned 0 [0178.473] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\barbados"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.473] GetLastError () returned 0x5 [0178.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados", dwFileAttributes=0x20) returned 0 [0178.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1718) returned 1 Thread: id = 4871 os_tid = 0x1af4 [0178.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belem")) returned 0x20 [0178.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem", dwFileAttributes=0x20) returned 0 [0178.480] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.480] GetLastError () returned 0x5 [0178.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem", dwFileAttributes=0x20) returned 0 [0178.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47fa8) returned 1 Thread: id = 4872 os_tid = 0x1b20 [0178.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belize")) returned 0x20 [0178.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize", dwFileAttributes=0x20) returned 0 [0178.482] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belize"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.482] GetLastError () returned 0x5 [0178.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize", dwFileAttributes=0x20) returned 0 [0178.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1a28) returned 1 Thread: id = 4873 os_tid = 0x1b24 [0178.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\blanc-sablon")) returned 0x20 [0178.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon", dwFileAttributes=0x20) returned 0 [0178.484] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\blanc-sablon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.484] GetLastError () returned 0x5 [0178.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon", dwFileAttributes=0x20) returned 0 [0178.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e08) returned 1 Thread: id = 4874 os_tid = 0x1b28 [0178.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boa_vista")) returned 0x20 [0178.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista", dwFileAttributes=0x20) returned 0 [0178.486] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boa_vista"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.486] GetLastError () returned 0x5 [0178.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista", dwFileAttributes=0x20) returned 0 [0178.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1be8) returned 1 Thread: id = 4875 os_tid = 0x1b30 [0178.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bogota")) returned 0x20 [0178.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota", dwFileAttributes=0x20) returned 0 [0178.494] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bogota"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.494] GetLastError () returned 0x5 [0178.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota", dwFileAttributes=0x20) returned 0 [0178.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1b78) returned 1 Thread: id = 4876 os_tid = 0x1bc0 [0178.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boise")) returned 0x20 [0178.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise", dwFileAttributes=0x20) returned 0 [0178.496] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boise"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.496] GetLastError () returned 0x5 [0178.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise", dwFileAttributes=0x20) returned 0 [0178.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d478c0) returned 1 Thread: id = 4877 os_tid = 0x1d7c [0178.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cambridge_bay")) returned 0x20 [0178.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay", dwFileAttributes=0x20) returned 0 [0178.498] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cambridge_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.498] GetLastError () returned 0x5 [0178.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay", dwFileAttributes=0x20) returned 0 [0178.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 Thread: id = 4878 os_tid = 0x1e7c [0178.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\campo_grande")) returned 0x20 [0178.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande", dwFileAttributes=0x20) returned 0 [0178.501] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\campo_grande"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.501] GetLastError () returned 0x5 [0178.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande", dwFileAttributes=0x20) returned 0 [0178.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 Thread: id = 4879 os_tid = 0x1ec4 [0178.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cancun")) returned 0x20 [0178.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun", dwFileAttributes=0x20) returned 0 [0178.503] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cancun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.503] GetLastError () returned 0x5 [0178.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun", dwFileAttributes=0x20) returned 0 [0178.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1a98) returned 1 Thread: id = 4880 os_tid = 0x1ecc [0178.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\caracas")) returned 0x20 [0178.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas", dwFileAttributes=0x20) returned 0 [0178.510] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\caracas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.510] GetLastError () returned 0x5 [0178.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas", dwFileAttributes=0x20) returned 0 [0178.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1cc8) returned 1 Thread: id = 4881 os_tid = 0x1ed0 [0178.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayenne")) returned 0x20 [0178.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne", dwFileAttributes=0x20) returned 0 [0178.617] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayenne"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.617] GetLastError () returned 0x5 [0178.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne", dwFileAttributes=0x20) returned 0 [0178.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1638) returned 1 Thread: id = 4882 os_tid = 0x1ed4 [0178.618] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json")) returned 0x2020 [0178.619] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0189.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b30 [0191.565] GetFileSizeEx (in: hFile=0x2b30, lpFileSize=0x12d2fef0 | out: lpFileSize=0x12d2fef0*=243) returned 1 [0191.565] SetFilePointerEx (in: hFile=0x2b30, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.566] ReadFile (in: hFile=0x2b30, lpBuffer=0x12d2fefc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12d2fed8, lpOverlapped=0x0 | out: lpBuffer=0x12d2fefc*, lpNumberOfBytesRead=0x12d2fed8*=0x4, lpOverlapped=0x0) returned 1 [0191.568] SetFilePointerEx (in: hFile=0x2b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42628 [0191.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42100 [0191.568] NtQuerySystemTime (in: CurrentTime=0x12d2fe78 | out: CurrentTime=0x12d2fe78*=132471540594804000) returned 0x0 [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x273d781a [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x7041904a [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x22340eab [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x72acbc9c [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x535ff2c [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x12faa2c0 [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x229eba8e [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x5d6675e3 [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x38881a01 [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x6388ce48 [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x2f3d5bb3 [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x10d6e1c3 [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x6cbb6e10 [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x6894904f [0191.568] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x1856f7b9 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x1d37514f [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x2a614733 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x272ecd02 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x3ab3ae35 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x6636b241 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x1812cf41 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x40a880a4 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x22cfe17 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x5e0c9b0b [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x6a1c51e1 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x3e19578a [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x6fdabcbb [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x1e14b206 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x13d8c147 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x6961d36a [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0xd716b24 [0191.569] RtlRandomEx (in: Seed=0x12d2fe70 | out: Seed=0x12d2fe70) returned 0x43d7a916 [0191.579] ReadFile (in: hFile=0x2b30, lpBuffer=0x82790c0, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0x12d2fe6c, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesRead=0x12d2fe6c*=0xf3, lpOverlapped=0x0) returned 1 [0191.579] SetFilePointerEx (in: hFile=0x2b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.580] WriteFile (in: hFile=0x2b30, lpBuffer=0x827ccc8*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x12d2fe70, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesWritten=0x12d2fe70*=0xf3, lpOverlapped=0x0) returned 1 [0195.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312f68 [0195.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0195.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b30) returned 1 [0195.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0195.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0195.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32fe8) returned 1 [0195.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ab78) returned 1 [0195.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69420 [0195.996] SetFilePointerEx (in: hFile=0x2b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.996] WriteFile (in: hFile=0x2b30, lpBuffer=0x30bc650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12d2fee4, lpOverlapped=0x0 | out: lpBuffer=0x30bc650*, lpNumberOfBytesWritten=0x12d2fee4*=0x10c, lpOverlapped=0x0) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69450) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b30) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69420) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312f68) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42628) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0196.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f3780 [0196.439] wcscpy (in: _Dest=0x81f3780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" [0196.440] wcscat (in: _Dest=0x81f3780, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json.f0dbec" [0196.440] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json.f0dbec", NtPathName=0x12d2fe68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83330e0 [0196.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83330e0) returned 1 [0196.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a80) returned 1 [0196.754] NtQueryInformationFile (in: FileHandle=0x2b30, IoStatusBlock=0x12d2fe40, FileInformation=0x12d2fe48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12d2fe40, FileInformation=0x12d2fe48) returned 0x0 [0196.754] NtSetInformationFile (FileHandle=0x2b30, IoStatusBlock=0x12d2fe40, FileInformation=0x12d2fe48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3780) returned 1 [0196.967] FlushFileBuffers (hFile=0x2b30) returned 1 [0196.978] CloseHandle (hObject=0x2b30) returned 1 [0197.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0b18 [0197.281] wcscpy (in: _Dest=0x81f0b18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" [0197.281] wcscat (in: _Dest=0x81f0b18, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\F0DBEC-Readme.txt" [0197.281] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\f0dbec-readme.txt")) returned 0xffffffff [0197.281] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1604 [0197.458] WriteFile (in: hFile=0x1604, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12d2fe8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12d2fe8c*=0x70c, lpOverlapped=0x0) returned 1 [0197.938] CloseHandle (hObject=0x1604) returned 1 [0197.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0b18) returned 1 [0197.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e27a0) returned 1 Thread: id = 4883 os_tid = 0x1edc [0178.619] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json")) returned 0x2020 [0182.122] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0189.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1200 [0191.581] GetFileSizeEx (in: hFile=0x1200, lpFileSize=0xbcbfed0 | out: lpFileSize=0xbcbfed0*=256) returned 1 [0191.581] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.581] ReadFile (in: hFile=0x1200, lpBuffer=0xbcbfedc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbcbfeb8, lpOverlapped=0x0 | out: lpBuffer=0xbcbfedc*, lpNumberOfBytesRead=0xbcbfeb8*=0x4, lpOverlapped=0x0) returned 1 [0191.583] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42100 [0191.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d427b8 [0191.584] NtQuerySystemTime (in: CurrentTime=0xbcbfe58 | out: CurrentTime=0xbcbfe58*=132471540594960000) returned 0x0 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x50e4200b [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x1b63da80 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x43abbe24 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x617021c [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x67937f [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x19c7e501 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x5f7c07e0 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x211b2ca7 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x78b7a0d5 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x70cedb90 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x351eaf7b [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x3eb4ed39 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0xad19c40 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x3e6c400d [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x6223a541 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x696b3fbf [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x2b757183 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x58d62225 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0xde246fb [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x4f7a90af [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x1377e624 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x5c06a900 [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x2d54198d [0191.584] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x747dbff7 [0191.585] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x455ea9b6 [0191.585] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x1261d9cb [0191.585] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x120936ea [0191.585] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x35ad3834 [0191.585] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x123153e0 [0191.585] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x1e54a20a [0191.585] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x5e705ae2 [0191.585] RtlRandomEx (in: Seed=0xbcbfe50 | out: Seed=0xbcbfe50) returned 0x5899df97 [0191.595] ReadFile (in: hFile=0x1200, lpBuffer=0x82808d0, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xbcbfe4c, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesRead=0xbcbfe4c*=0x100, lpOverlapped=0x0) returned 1 [0191.595] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.595] WriteFile (in: hFile=0x1200, lpBuffer=0x82844d8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xbcbfe50, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesWritten=0xbcbfe50*=0x100, lpOverlapped=0x0) returned 1 [0195.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b58 [0195.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312f90 [0195.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312f90) returned 1 [0195.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82844d8) returned 1 [0195.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0195.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0195.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a158) returned 1 [0195.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e50 [0195.999] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.999] WriteFile (in: hFile=0x1200, lpBuffer=0x30bbd90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbcbfec4, lpOverlapped=0x0 | out: lpBuffer=0x30bbd90*, lpNumberOfBytesWritten=0xbcbfec4*=0x10c, lpOverlapped=0x0) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68df0) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312f90) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e50) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b58) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42100) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43500) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0196.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f38b8 [0196.452] wcscpy (in: _Dest=0x81f38b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" [0196.452] wcscat (in: _Dest=0x81f38b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json.f0dbec" [0196.452] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0xbcbfe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8333228 [0196.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333228) returned 1 [0196.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fbe50) returned 1 [0196.760] NtQueryInformationFile (in: FileHandle=0x1200, IoStatusBlock=0xbcbfe20, FileInformation=0xbcbfe28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbcbfe20, FileInformation=0xbcbfe28) returned 0x0 [0196.760] NtSetInformationFile (FileHandle=0x1200, IoStatusBlock=0xbcbfe20, FileInformation=0xbcbfe28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f38b8) returned 1 [0196.980] FlushFileBuffers (hFile=0x1200) returned 1 [0196.990] CloseHandle (hObject=0x1200) returned 1 [0197.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0c40 [0197.285] wcscpy (in: _Dest=0x81f0c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" [0197.285] wcscat (in: _Dest=0x81f0c40, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\F0DBEC-Readme.txt" [0197.285] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0197.285] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe3c [0197.459] WriteFile (in: hFile=0xe3c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbcbfe6c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbcbfe6c*=0x70c, lpOverlapped=0x0) returned 1 [0197.947] CloseHandle (hObject=0xe3c) returned 1 [0197.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0c40) returned 1 [0197.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e28c8) returned 1 Thread: id = 4884 os_tid = 0x1ee0 [0178.620] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json")) returned 0x2020 [0178.620] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0189.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x24d0 [0191.596] GetFileSizeEx (in: hFile=0x24d0, lpFileSize=0x12b6fc18 | out: lpFileSize=0x12b6fc18*=329) returned 1 [0191.596] SetFilePointerEx (in: hFile=0x24d0, liDistanceToMove=0x145, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.596] ReadFile (in: hFile=0x24d0, lpBuffer=0x12b6fc24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12b6fc00, lpOverlapped=0x0 | out: lpBuffer=0x12b6fc24*, lpNumberOfBytesRead=0x12b6fc00*=0x4, lpOverlapped=0x0) returned 1 [0191.598] SetFilePointerEx (in: hFile=0x24d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d427b8 [0191.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42cb8 [0191.599] NtQuerySystemTime (in: CurrentTime=0x12b6fba0 | out: CurrentTime=0x12b6fba0*=132471540594960000) returned 0x0 [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x14d146a [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x39d20c14 [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x5c199bd2 [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x402ee987 [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x3deca132 [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x6ecbb5c0 [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x712d3e6a [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x1ef094fe [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x360aa085 [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x1e3baaad [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x6d064e7b [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x786de8e4 [0191.599] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x604c5501 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x7ceddaeb [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x76fbaec8 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x618f4439 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x3cf7d571 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x2ff1e5ae [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x631d18f0 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x171f2241 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x10693aad [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x4f288055 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x7a2c7abb [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x5f5dc001 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x29aa279a [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x5f7c07e0 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x1f5810ee [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x66aa5ff1 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x494771f6 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x60b892b4 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x7896d6a5 [0191.600] RtlRandomEx (in: Seed=0x12b6fb98 | out: Seed=0x12b6fb98) returned 0x6324b9c1 [0191.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148a6060 [0191.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148a9c68 [0191.611] ReadFile (in: hFile=0x24d0, lpBuffer=0x148a6060, nNumberOfBytesToRead=0x149, lpNumberOfBytesRead=0x12b6fb94, lpOverlapped=0x0 | out: lpBuffer=0x148a6060*, lpNumberOfBytesRead=0x12b6fb94*=0x149, lpOverlapped=0x0) returned 1 [0191.611] SetFilePointerEx (in: hFile=0x24d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.611] WriteFile (in: hFile=0x24d0, lpBuffer=0x148a9c68*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x12b6fb98, lpOverlapped=0x0 | out: lpBuffer=0x148a9c68*, lpNumberOfBytesWritten=0x12b6fb98*=0x149, lpOverlapped=0x0) returned 1 [0196.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b08 [0196.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc248 [0196.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc248) returned 1 [0196.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a9c68) returned 1 [0196.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a6060) returned 1 [0196.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32868) returned 1 [0196.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aa10) returned 1 [0196.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e691e0 [0196.001] SetFilePointerEx (in: hFile=0x24d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.001] WriteFile (in: hFile=0x24d0, lpBuffer=0x30bc308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12b6fc0c, lpOverlapped=0x0 | out: lpBuffer=0x30bc308*, lpNumberOfBytesWritten=0x12b6fc0c*=0x10c, lpOverlapped=0x0) returned 1 [0196.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0196.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69210) returned 1 [0196.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc248) returned 1 [0196.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691e0) returned 1 [0196.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b08) returned 1 [0196.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427b8) returned 1 [0196.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0196.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ec0) returned 1 [0196.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f39f0 [0196.462] wcscpy (in: _Dest=0x81f39f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" [0196.462] wcscat (in: _Dest=0x81f39f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json.f0dbec" [0196.462] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0x12b6fb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8333370 [0196.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333370) returned 1 [0196.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f1848) returned 1 [0196.764] NtQueryInformationFile (in: FileHandle=0x24d0, IoStatusBlock=0x12b6fb68, FileInformation=0x12b6fb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12b6fb68, FileInformation=0x12b6fb70) returned 0x0 [0196.764] NtSetInformationFile (FileHandle=0x24d0, IoStatusBlock=0x12b6fb68, FileInformation=0x12b6fb70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f39f0) returned 1 [0196.988] FlushFileBuffers (hFile=0x24d0) returned 1 [0197.000] CloseHandle (hObject=0x24d0) returned 1 [0197.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0d68 [0197.286] wcscpy (in: _Dest=0x81f0d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" [0197.286] wcscat (in: _Dest=0x81f0d68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\F0DBEC-Readme.txt" [0197.286] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0197.287] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ce0 [0197.460] WriteFile (in: hFile=0x1ce0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12b6fbb4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12b6fbb4*=0x70c, lpOverlapped=0x0) returned 1 [0197.951] CloseHandle (hObject=0x1ce0) returned 1 [0197.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0d68) returned 1 [0197.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e29f0) returned 1 Thread: id = 4885 os_tid = 0x1ee4 [0178.621] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0182.123] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0189.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c6c [0191.612] GetFileSizeEx (in: hFile=0x1c6c, lpFileSize=0x1278fec8 | out: lpFileSize=0x1278fec8*=249) returned 1 [0191.612] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.612] ReadFile (in: hFile=0x1c6c, lpBuffer=0x1278fed4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1278feb0, lpOverlapped=0x0 | out: lpBuffer=0x1278fed4*, lpNumberOfBytesRead=0x1278feb0*=0x4, lpOverlapped=0x0) returned 1 [0191.614] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42cb8 [0191.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e98 [0191.614] NtQuerySystemTime (in: CurrentTime=0x1278fe50 | out: CurrentTime=0x1278fe50*=132471540595116000) returned 0x0 [0191.614] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x8459fab [0191.614] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x55a8320e [0191.614] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x5ad24294 [0191.614] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x101150e [0191.614] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x501633d3 [0191.614] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x40f1991d [0191.614] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x2f41f55f [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x255caa37 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0xe92004f [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x2f427058 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x2b757183 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x1c637ed1 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x111f8ae8 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x43abbe24 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x79a111f3 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x3daafb57 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x2c4452f [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x313edfeb [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x728f95d1 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x4bcecf03 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x7e57e2c9 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x667da8c1 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x20d1d71a [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x9bb570c [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x71be0487 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x22befff8 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0xfa7a0c0 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x5adc899 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x4f288055 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x7db9a1a1 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x78642f62 [0191.615] RtlRandomEx (in: Seed=0x1278fe48 | out: Seed=0x1278fe48) returned 0x5fa0f201 [0191.626] ReadFile (in: hFile=0x1c6c, lpBuffer=0x148ad870, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x1278fe44, lpOverlapped=0x0 | out: lpBuffer=0x148ad870*, lpNumberOfBytesRead=0x1278fe44*=0xf9, lpOverlapped=0x0) returned 1 [0191.626] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.626] WriteFile (in: hFile=0x1c6c, lpBuffer=0x148b1478*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x1278fe48, lpOverlapped=0x0 | out: lpBuffer=0x148b1478*, lpNumberOfBytesWritten=0x1278fe48*=0xf9, lpOverlapped=0x0) returned 1 [0196.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc270 [0196.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc1d0 [0196.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1d0) returned 1 [0196.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b1478) returned 1 [0196.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148ad870) returned 1 [0196.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e80) returned 1 [0196.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a620) returned 1 [0196.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fa0 [0196.004] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.004] WriteFile (in: hFile=0x1c6c, lpBuffer=0x30bc538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1278febc, lpOverlapped=0x0 | out: lpBuffer=0x30bc538*, lpNumberOfBytesWritten=0x1278febc*=0x10c, lpOverlapped=0x0) returned 1 [0196.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc538) returned 1 [0196.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692d0) returned 1 [0196.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1d0) returned 1 [0196.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fa0) returned 1 [0196.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc270) returned 1 [0196.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0196.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ce0) returned 1 [0196.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42088) returned 1 [0196.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f3b28 [0196.465] wcscpy (in: _Dest=0x81f3b28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" [0196.465] wcscat (in: _Dest=0x81f3b28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json.f0dbec" [0196.466] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json.f0dbec", NtPathName=0x1278fe40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x83334b8 [0196.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83334b8) returned 1 [0196.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fd1b8) returned 1 [0196.762] NtQueryInformationFile (in: FileHandle=0x1c6c, IoStatusBlock=0x1278fe18, FileInformation=0x1278fe20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1278fe18, FileInformation=0x1278fe20) returned 0x0 [0196.762] NtSetInformationFile (FileHandle=0x1c6c, IoStatusBlock=0x1278fe18, FileInformation=0x1278fe20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3b28) returned 1 [0196.984] FlushFileBuffers (hFile=0x1c6c) returned 1 [0197.005] CloseHandle (hObject=0x1c6c) returned 1 [0197.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f6620 [0197.288] wcscpy (in: _Dest=0x81f6620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" [0197.288] wcscat (in: _Dest=0x81f6620, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\F0DBEC-Readme.txt" [0197.288] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\f0dbec-readme.txt")) returned 0xffffffff [0197.288] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ca0 [0197.461] WriteFile (in: hFile=0x2ca0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1278fe64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1278fe64*=0x70c, lpOverlapped=0x0) returned 1 [0197.958] CloseHandle (hObject=0x2ca0) returned 1 [0197.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6620) returned 1 [0197.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2b18) returned 1 Thread: id = 4886 os_tid = 0x1ee8 [0178.621] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0178.622] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0189.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x580 [0191.627] GetFileSizeEx (in: hFile=0x580, lpFileSize=0xbbbfd90 | out: lpFileSize=0xbbbfd90*=249) returned 1 [0191.627] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.627] ReadFile (in: hFile=0x580, lpBuffer=0xbbbfd9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbbbfd78, lpOverlapped=0x0 | out: lpBuffer=0xbbbfd9c*, lpNumberOfBytesRead=0xbbbfd78*=0x4, lpOverlapped=0x0) returned 1 [0191.629] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e98 [0191.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43758 [0191.629] NtQuerySystemTime (in: CurrentTime=0xbbbfd18 | out: CurrentTime=0xbbbfd18*=132471540595272000) returned 0x0 [0191.629] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x6f26f9be [0191.629] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x79bbfa33 [0191.629] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0xd9922ef [0191.629] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x2523d6d9 [0191.629] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x4884c1c4 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x47e9168 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x22befff8 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0xa3ae36 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x13319235 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x224db5a3 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x68fcaf64 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x32856f0c [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x4692095f [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x2e26b4ad [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x50d3e0ea [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x1d0916a4 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x781e187c [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x5177fb31 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x58f9fc6d [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x101150e [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x34275139 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x729e30e4 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x47a7df14 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x70e08fab [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x747dbff7 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x58f9fc6d [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x3376e27 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x3692fdc9 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x5b578378 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x258dda27 [0191.630] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x16893a49 [0191.631] RtlRandomEx (in: Seed=0xbbbfd10 | out: Seed=0xbbbfd10) returned 0x628b7b53 [0191.641] ReadFile (in: hFile=0x580, lpBuffer=0x148b5080, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0xbbbfd0c, lpOverlapped=0x0 | out: lpBuffer=0x148b5080*, lpNumberOfBytesRead=0xbbbfd0c*=0xf9, lpOverlapped=0x0) returned 1 [0191.641] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.641] WriteFile (in: hFile=0x580, lpBuffer=0x148b8c88*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0xbbbfd10, lpOverlapped=0x0 | out: lpBuffer=0x148b8c88*, lpNumberOfBytesWritten=0xbbbfd10*=0xf9, lpOverlapped=0x0) returned 1 [0196.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc1f8 [0196.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc2e8 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc2e8) returned 1 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b8c88) returned 1 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b5080) returned 1 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d68) returned 1 [0196.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68d00 [0196.006] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.006] WriteFile (in: hFile=0x580, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbbbfd84, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0xbbbfd84*=0x10c, lpOverlapped=0x0) returned 1 [0196.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0196.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692a0) returned 1 [0196.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc2e8) returned 1 [0196.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d00) returned 1 [0196.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1f8) returned 1 [0196.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0196.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0196.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0196.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f3c60 [0196.473] wcscpy (in: _Dest=0x81f3c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" [0196.473] wcscat (in: _Dest=0x81f3c60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json.f0dbec" [0196.474] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json.f0dbec", NtPathName=0xbbbfd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x8333600 [0196.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333600) returned 1 [0196.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fd3e0) returned 1 [0196.765] NtQueryInformationFile (in: FileHandle=0x580, IoStatusBlock=0xbbbfce0, FileInformation=0xbbbfce8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbbbfce0, FileInformation=0xbbbfce8) returned 0x0 [0196.765] NtSetInformationFile (FileHandle=0x580, IoStatusBlock=0xbbbfce0, FileInformation=0xbbbfce8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3c60) returned 1 [0196.991] FlushFileBuffers (hFile=0x580) returned 1 [0197.009] CloseHandle (hObject=0x580) returned 1 [0197.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f64e8 [0197.290] wcscpy (in: _Dest=0x81f64e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" [0197.291] wcscat (in: _Dest=0x81f64e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\F0DBEC-Readme.txt" [0197.291] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\f0dbec-readme.txt")) returned 0xffffffff [0197.291] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1974 [0197.460] WriteFile (in: hFile=0x1974, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbbbfd2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbbbfd2c*=0x70c, lpOverlapped=0x0) returned 1 [0197.954] CloseHandle (hObject=0x1974) returned 1 [0197.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f64e8) returned 1 [0197.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2c40) returned 1 Thread: id = 4887 os_tid = 0x1eec [0178.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr")) returned 0x20 [0186.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR", dwFileAttributes=0x20) returned 0 [0186.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.481] GetLastError () returned 0x5 [0186.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR", dwFileAttributes=0x20) returned 0 [0186.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 4888 os_tid = 0x1ef0 [0178.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr")) returned 0x20 [0186.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR", dwFileAttributes=0x20) returned 0 [0186.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.483] GetLastError () returned 0x5 [0186.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR", dwFileAttributes=0x20) returned 0 [0186.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 4889 os_tid = 0x1ef4 [0178.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr")) returned 0x20 [0186.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR", dwFileAttributes=0x20) returned 0 [0186.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.485] GetLastError () returned 0x5 [0186.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR", dwFileAttributes=0x20) returned 0 [0186.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 4890 os_tid = 0x1ef8 [0178.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr")) returned 0x20 [0186.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR", dwFileAttributes=0x20) returned 0 [0186.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.633] GetLastError () returned 0x5 [0186.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR", dwFileAttributes=0x20) returned 0 [0186.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 4891 os_tid = 0x1efc [0178.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr")) returned 0x20 [0186.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR", dwFileAttributes=0x20) returned 0 [0186.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.271] GetLastError () returned 0x5 [0186.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR", dwFileAttributes=0x20) returned 0 [0186.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 4892 os_tid = 0x1f00 [0178.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr")) returned 0x20 [0189.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR", dwFileAttributes=0x20) returned 0 [0189.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.198] GetLastError () returned 0x5 [0189.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR", dwFileAttributes=0x20) returned 0 [0189.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 4893 os_tid = 0x1f04 [0178.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr")) returned 0x20 [0186.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR", dwFileAttributes=0x20) returned 0 [0186.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.639] GetLastError () returned 0x5 [0186.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR", dwFileAttributes=0x20) returned 0 [0186.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 4894 os_tid = 0x1f08 [0178.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr")) returned 0x20 [0186.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR", dwFileAttributes=0x20) returned 0 [0186.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.488] GetLastError () returned 0x5 [0186.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR", dwFileAttributes=0x20) returned 0 [0186.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 4895 os_tid = 0x1f0c [0178.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr")) returned 0x20 [0186.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR", dwFileAttributes=0x20) returned 0 [0186.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.637] GetLastError () returned 0x5 [0186.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR", dwFileAttributes=0x20) returned 0 [0186.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831af58) returned 1 Thread: id = 4896 os_tid = 0x1f10 [0178.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr")) returned 0x20 [0186.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR", dwFileAttributes=0x20) returned 0 [0186.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.490] GetLastError () returned 0x5 [0186.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR", dwFileAttributes=0x20) returned 0 [0186.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 4897 os_tid = 0x1f14 [0178.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr")) returned 0x20 [0186.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR", dwFileAttributes=0x20) returned 0 [0186.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.635] GetLastError () returned 0x5 [0186.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR", dwFileAttributes=0x20) returned 0 [0186.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 Thread: id = 4898 os_tid = 0x1f18 [0178.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr")) returned 0x20 [0186.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR", dwFileAttributes=0x20) returned 0 [0186.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.497] GetLastError () returned 0x5 [0186.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR", dwFileAttributes=0x20) returned 0 [0186.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831acd8) returned 1 Thread: id = 4899 os_tid = 0x1f1c [0178.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr")) returned 0x20 [0186.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR", dwFileAttributes=0x20) returned 0 [0186.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.495] GetLastError () returned 0x5 [0186.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR", dwFileAttributes=0x20) returned 0 [0186.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831afd8) returned 1 Thread: id = 4900 os_tid = 0x1f20 [0178.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr")) returned 0x20 [0186.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR", dwFileAttributes=0x20) returned 0 [0186.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.493] GetLastError () returned 0x5 [0186.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR", dwFileAttributes=0x20) returned 0 [0186.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bb58) returned 1 Thread: id = 4901 os_tid = 0x1f24 [0178.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr")) returned 0x20 [0186.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR", dwFileAttributes=0x20) returned 0 [0186.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.491] GetLastError () returned 0x5 [0186.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR", dwFileAttributes=0x20) returned 0 [0186.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a858) returned 1 Thread: id = 4902 os_tid = 0x1f28 [0178.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x20 [0185.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x20) returned 0 [0185.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.836] GetLastError () returned 0x5 [0185.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x20) returned 0 [0185.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80538e0) returned 1 Thread: id = 4903 os_tid = 0x1f2c [0178.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x20 [0185.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x20) returned 0 [0185.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.831] GetLastError () returned 0x5 [0185.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x20) returned 0 [0185.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 Thread: id = 4904 os_tid = 0x1f30 [0178.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x20 [0185.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x20) returned 0 [0185.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.829] GetLastError () returned 0x5 [0185.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x20) returned 0 [0185.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 Thread: id = 4905 os_tid = 0x1f34 [0178.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x20 [0185.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x20) returned 0 [0185.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.826] GetLastError () returned 0x5 [0185.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x20) returned 0 [0185.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf5e0) returned 1 Thread: id = 4906 os_tid = 0x1fb8 [0178.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif")) returned 0x20 [0185.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x20) returned 0 [0185.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.824] GetLastError () returned 0x5 [0185.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x20) returned 0 [0185.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be5f0) returned 1 Thread: id = 4907 os_tid = 0x21f0 [0178.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif")) returned 0x20 [0185.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x20) returned 0 [0185.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.773] GetLastError () returned 0x5 [0185.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x20) returned 0 [0185.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf998) returned 1 Thread: id = 4908 os_tid = 0x21f4 [0178.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif")) returned 0x20 [0185.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x20) returned 0 [0185.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.875] GetLastError () returned 0x5 [0185.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x20) returned 0 [0185.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0108) returned 1 Thread: id = 4909 os_tid = 0x21f8 [0178.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif")) returned 0x20 [0185.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x20) returned 0 [0185.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.863] GetLastError () returned 0x5 [0185.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x20) returned 0 [0185.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be678) returned 1 Thread: id = 4910 os_tid = 0x21fc [0178.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x20 [0185.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x20) returned 0 [0185.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.841] GetLastError () returned 0x5 [0185.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x20) returned 0 [0185.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be568) returned 1 Thread: id = 4911 os_tid = 0x2200 [0178.676] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json")) returned 0x2020 [0178.676] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0189.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a4 [0193.735] GetFileSizeEx (in: hFile=0x11a4, lpFileSize=0xb9af998 | out: lpFileSize=0xb9af998*=179) returned 1 [0193.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0193.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0193.735] NtQuerySystemTime (in: CurrentTime=0xb9af920 | out: CurrentTime=0xb9af920*=132471540616332000) returned 0x0 [0193.735] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x33165e44 [0193.735] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x8b92de9 [0193.735] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x6fe0d24b [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x575def27 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x5d33b9af [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x36b26fe [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x6a56d57f [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x7026e2c5 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x4561d276 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x4fce6203 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x7706a208 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x4648e78a [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x5324ebb9 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0xa218c2e [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x4b6052c5 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x1341092 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x539d5d7c [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x188a2c03 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x495e5641 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x4be27f74 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x6fb19119 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x2a10b71b [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x75770663 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x2e1ac22a [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x9023434 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x2aff0fca [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x5dd8541a [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x10775b5 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x1d5e0591 [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x27b01c3d [0193.736] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x4908a4c1 [0193.737] RtlRandomEx (in: Seed=0xb9af918 | out: Seed=0xb9af918) returned 0x6c04ffdd [0193.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14911478 [0193.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14915080 [0193.747] ReadFile (in: hFile=0x11a4, lpBuffer=0x14911478, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xb9af914, lpOverlapped=0x0 | out: lpBuffer=0x14911478*, lpNumberOfBytesRead=0xb9af914*=0xb3, lpOverlapped=0x0) returned 1 [0193.749] SetFilePointerEx (in: hFile=0x11a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.749] WriteFile (in: hFile=0x11a4, lpBuffer=0x14915080*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xb9af918, lpOverlapped=0x0 | out: lpBuffer=0x14915080*, lpNumberOfBytesWritten=0xb9af918*=0xb3, lpOverlapped=0x0) returned 1 [0201.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062bc0 [0201.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062be8 [0201.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062be8) returned 1 [0201.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14915080) returned 1 [0201.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14911478) returned 1 [0201.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c1f8) returned 1 [0201.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6b18) returned 1 [0201.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f438 [0201.594] SetFilePointerEx (in: hFile=0x11a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.594] WriteFile (in: hFile=0x11a4, lpBuffer=0x81e0e58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb9af98c, lpOverlapped=0x0 | out: lpBuffer=0x81e0e58*, lpNumberOfBytesWritten=0xb9af98c*=0x10c, lpOverlapped=0x0) returned 1 [0203.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0e58) returned 1 [0203.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fe28) returned 1 [0203.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062be8) returned 1 [0203.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f438) returned 1 [0203.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062bc0) returned 1 [0203.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0203.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0203.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0203.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5b28 [0203.822] wcscpy (in: _Dest=0x81f5b28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" [0203.822] wcscat (in: _Dest=0x81f5b28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.f0dbec" [0203.822] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0xb9af910, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3cad8 [0207.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cad8) returned 1 [0207.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8344dc0) returned 1 [0207.187] NtQueryInformationFile (in: FileHandle=0x11a4, IoStatusBlock=0xb9af8e8, FileInformation=0xb9af8f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb9af8e8, FileInformation=0xb9af8f0) returned 0x0 [0207.187] NtSetInformationFile (FileHandle=0x11a4, IoStatusBlock=0xb9af8e8, FileInformation=0xb9af8f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5b28) returned 1 [0208.193] FlushFileBuffers (hFile=0x11a4) returned 1 [0208.203] CloseHandle (hObject=0x11a4) returned 1 [0208.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef560 [0208.500] wcscpy (in: _Dest=0x83ef560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" [0208.500] wcscat (in: _Dest=0x83ef560, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\F0DBEC-Readme.txt" [0208.500] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0208.500] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8c [0208.879] WriteFile (in: hFile=0x2c8c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb9af934, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb9af934*=0x70c, lpOverlapped=0x0) returned 1 [0209.479] CloseHandle (hObject=0x2c8c) returned 1 [0209.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef560) returned 1 [0209.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81875b0) returned 1 Thread: id = 4912 os_tid = 0x2204 [0178.684] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json")) returned 0x2020 [0178.687] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0189.968] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ec8 [0193.712] GetFileSizeEx (in: hFile=0x1ec8, lpFileSize=0x138bfd48 | out: lpFileSize=0x138bfd48*=179) returned 1 [0193.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0193.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0193.712] NtQuerySystemTime (in: CurrentTime=0x138bfcd0 | out: CurrentTime=0x138bfcd0*=132471540616176000) returned 0x0 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x593c2b5a [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x4692d66c [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x45efb851 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x12e2b235 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x5fff0f9c [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x2515c6e1 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0xa2ee497 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x244bc16d [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0xac83a78 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x2231366e [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x72ac6614 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x21889b23 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x359e0374 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x5dc0f11a [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x42c8dc2d [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x4a070149 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x18688b96 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x6b6db9f0 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x3a044de6 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x5d646a27 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x234871da [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x7e0a328c [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x67a6022a [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x7ca03896 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x7ace22a2 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x2a6c31d4 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x4393ed47 [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x5a8251fa [0193.713] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x31771385 [0193.714] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x5ee59ab7 [0193.714] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x1d440dda [0193.714] RtlRandomEx (in: Seed=0x138bfcc8 | out: Seed=0x138bfcc8) returned 0x1aedb523 [0193.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14909c68 [0193.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1490d870 [0193.732] ReadFile (in: hFile=0x1ec8, lpBuffer=0x14909c68, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x138bfcc4, lpOverlapped=0x0 | out: lpBuffer=0x14909c68*, lpNumberOfBytesRead=0x138bfcc4*=0xb3, lpOverlapped=0x0) returned 1 [0193.734] SetFilePointerEx (in: hFile=0x1ec8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.734] WriteFile (in: hFile=0x1ec8, lpBuffer=0x1490d870*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x138bfcc8, lpOverlapped=0x0 | out: lpBuffer=0x1490d870*, lpNumberOfBytesWritten=0x138bfcc8*=0xb3, lpOverlapped=0x0) returned 1 [0201.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062378 [0201.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80623a0 [0201.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80623a0) returned 1 [0201.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1490d870) returned 1 [0201.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14909c68) returned 1 [0201.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c180) returned 1 [0201.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6968) returned 1 [0201.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70068 [0201.522] SetFilePointerEx (in: hFile=0x1ec8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.522] WriteFile (in: hFile=0x1ec8, lpBuffer=0x8406420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x138bfd3c, lpOverlapped=0x0 | out: lpBuffer=0x8406420*, lpNumberOfBytesWritten=0x138bfd3c*=0x10c, lpOverlapped=0x0) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406420) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70038) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80623a0) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70068) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062378) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0203.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0203.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ef85f0 [0203.761] wcscpy (in: _Dest=0x3ef85f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" [0203.761] wcscat (in: _Dest=0x3ef85f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.f0dbec" [0203.761] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0x138bfcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3efa888 [0204.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa888) returned 1 [0204.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830fcc0) returned 1 [0204.253] NtQueryInformationFile (in: FileHandle=0x1ec8, IoStatusBlock=0x138bfc98, FileInformation=0x138bfca0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x138bfc98, FileInformation=0x138bfca0) returned 0x0 [0204.253] NtSetInformationFile (FileHandle=0x1ec8, IoStatusBlock=0x138bfc98, FileInformation=0x138bfca0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef85f0) returned 1 [0204.639] FlushFileBuffers (hFile=0x1ec8) returned 1 [0204.654] CloseHandle (hObject=0x1ec8) returned 1 [0207.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347080 [0207.797] wcscpy (in: _Dest=0x8347080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" [0207.797] wcscat (in: _Dest=0x8347080, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\F0DBEC-Readme.txt" [0207.797] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0207.797] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1104 [0208.359] WriteFile (in: hFile=0x1104, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x138bfce4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x138bfce4*=0x70c, lpOverlapped=0x0) returned 1 [0209.128] CloseHandle (hObject=0x1104) returned 1 [0209.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347080) returned 1 [0209.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81876d8) returned 1 Thread: id = 4913 os_tid = 0x2208 [0178.693] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json")) returned 0x2020 [0178.693] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.968] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a04 [0193.682] GetFileSizeEx (in: hFile=0x2a04, lpFileSize=0xc4bf7c0 | out: lpFileSize=0xc4bf7c0*=179) returned 1 [0193.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0193.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0193.682] NtQuerySystemTime (in: CurrentTime=0xc4bf748 | out: CurrentTime=0xc4bf748*=132471540615864000) returned 0x0 [0193.682] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x57faa7a0 [0193.682] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x3004f88 [0193.682] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x1eef6d00 [0193.682] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x5b652ef9 [0193.682] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x49b407c1 [0193.682] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x7623cc [0193.682] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x269ceacf [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x4de08490 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x3551c05f [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x3cbc0526 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x3bc603df [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x305f12e3 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x51577427 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x15250a08 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x7a84adee [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x4e7fe6b [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x4264b39 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x49892f01 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x501ff297 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x31efeac4 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x5bfc6353 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x776ca411 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x49dee081 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x545ab1a7 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x3f9950bc [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x5df688ad [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x119f81fa [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x9fa063 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x2295301e [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x5e38f0e5 [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x257faaae [0193.683] RtlRandomEx (in: Seed=0xc4bf740 | out: Seed=0xc4bf740) returned 0x6f8fb91d [0193.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149020e0 [0193.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14906060 [0193.703] ReadFile (in: hFile=0x2a04, lpBuffer=0x149020e0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc4bf73c, lpOverlapped=0x0 | out: lpBuffer=0x149020e0*, lpNumberOfBytesRead=0xc4bf73c*=0xb3, lpOverlapped=0x0) returned 1 [0193.711] SetFilePointerEx (in: hFile=0x2a04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.711] WriteFile (in: hFile=0x2a04, lpBuffer=0x14906060*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc4bf740, lpOverlapped=0x0 | out: lpBuffer=0x14906060*, lpNumberOfBytesWritten=0xc4bf740*=0xb3, lpOverlapped=0x0) returned 1 [0201.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80622d8 [0201.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062300 [0201.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062300) returned 1 [0201.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14906060) returned 1 [0201.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149020e0) returned 1 [0201.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b730) returned 1 [0201.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5f48) returned 1 [0201.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70008 [0201.515] SetFilePointerEx (in: hFile=0x2a04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.516] WriteFile (in: hFile=0x2a04, lpBuffer=0x8406538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc4bf7b4, lpOverlapped=0x0 | out: lpBuffer=0x8406538*, lpNumberOfBytesWritten=0xc4bf7b4*=0x10c, lpOverlapped=0x0) returned 1 [0203.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406538) returned 1 [0203.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ffd8) returned 1 [0203.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062300) returned 1 [0203.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70008) returned 1 [0203.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80622d8) returned 1 [0203.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7e8) returned 1 [0203.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5b8) returned 1 [0203.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0203.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404f20 [0203.736] wcscpy (in: _Dest=0x8404f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" [0203.736] wcscat (in: _Dest=0x8404f20, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.f0dbec" [0203.736] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0xc4bf738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9bb8 [0204.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9bb8) returned 1 [0204.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fa248) returned 1 [0204.239] NtQueryInformationFile (in: FileHandle=0x2a04, IoStatusBlock=0xc4bf710, FileInformation=0xc4bf718, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc4bf710, FileInformation=0xc4bf718) returned 0x0 [0204.239] NtSetInformationFile (FileHandle=0x2a04, IoStatusBlock=0xc4bf710, FileInformation=0xc4bf718, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404f20) returned 1 [0204.583] FlushFileBuffers (hFile=0x2a04) returned 1 [0204.590] CloseHandle (hObject=0x2a04) returned 1 [0207.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347908 [0207.758] wcscpy (in: _Dest=0x8347908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" [0207.758] wcscat (in: _Dest=0x8347908, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\F0DBEC-Readme.txt" [0207.758] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0207.758] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c1c [0208.071] WriteFile (in: hFile=0x1c1c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc4bf75c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc4bf75c*=0x70c, lpOverlapped=0x0) returned 1 [0208.443] CloseHandle (hObject=0x1c1c) returned 1 [0209.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347908) returned 1 [0209.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187800) returned 1 Thread: id = 4914 os_tid = 0x220c [0178.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f5f90 [0178.695] wcscpy (in: _Dest=0x81f5f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" [0178.695] wcscat (in: _Dest=0x81f5f90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" [0178.695] wcscat (in: _Dest=0x81f5f90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*" [0178.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80917b8 [0178.695] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*", lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0178.695] wcscmp (_String1=".", _String2=".") returned 0 [0178.695] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.696] wcscmp (_String1="..", _String2=".") returned 1 [0178.696] wcscmp (_String1="..", _String2="..") returned 0 [0178.696] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0178.696] wcscmp (_String1="messages.json", _String2=".") returned 1 [0178.696] wcscmp (_String1="messages.json", _String2="..") returned 1 [0178.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x8188268 [0178.696] wcscpy (in: _Dest=0x8188268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" [0178.696] wcscat (in: _Dest=0x8188268, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" [0178.696] wcscat (in: _Dest=0x8188268, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" [0179.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8188268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0179.124] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0179.124] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0179.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80917b8) returned 1 [0179.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5f90) returned 1 [0179.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27c40) returned 1 Thread: id = 4915 os_tid = 0x2210 [0178.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f6098 [0178.697] wcscpy (in: _Dest=0x81f6098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" [0178.697] wcscat (in: _Dest=0x81f6098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" [0178.697] wcscat (in: _Dest=0x81f6098, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*" [0178.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ffa8 [0178.697] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*", lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0183.549] wcscmp (_String1=".", _String2=".") returned 0 [0183.549] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.550] wcscmp (_String1="..", _String2=".") returned 1 [0183.550] wcscmp (_String1="..", _String2="..") returned 0 [0183.550] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.550] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.550] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x84014c0 [0183.550] wcscpy (in: _Dest=0x84014c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" [0183.550] wcscat (in: _Dest=0x84014c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" [0183.550] wcscat (in: _Dest=0x84014c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" [0184.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84014c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0184.866] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x808ffa8 | out: lpFindFileData=0x808ffa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.866] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0184.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ffa8) returned 1 [0184.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6098) returned 1 [0184.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27640) returned 1 Thread: id = 4916 os_tid = 0x2214 [0178.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f61a0 [0178.697] wcscpy (in: _Dest=0x81f61a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" [0178.697] wcscat (in: _Dest=0x81f61a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" [0178.697] wcscat (in: _Dest=0x81f61a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*" [0178.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80906e0 [0178.697] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*", lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0183.797] wcscmp (_String1=".", _String2=".") returned 0 [0183.797] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.797] wcscmp (_String1="..", _String2=".") returned 1 [0183.797] wcscmp (_String1="..", _String2="..") returned 0 [0183.797] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.797] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.797] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x8187dc8 [0183.797] wcscpy (in: _Dest=0x8187dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" [0183.797] wcscat (in: _Dest=0x8187dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" [0183.797] wcscat (in: _Dest=0x8187dc8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" [0185.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8187dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x624 [0185.391] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x80906e0 | out: lpFindFileData=0x80906e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.391] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0185.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80906e0) returned 1 [0185.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f61a0) returned 1 [0185.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27440) returned 1 Thread: id = 4917 os_tid = 0x2224 [0178.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f5c78 [0178.699] wcscpy (in: _Dest=0x81f5c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" [0178.699] wcscat (in: _Dest=0x81f5c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" [0178.699] wcscat (in: _Dest=0x81f5c78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*" [0178.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090210 [0178.699] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*", lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38258 [0184.340] wcscmp (_String1=".", _String2=".") returned 0 [0184.341] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.341] wcscmp (_String1="..", _String2=".") returned 1 [0184.341] wcscmp (_String1="..", _String2="..") returned 0 [0184.341] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.341] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.341] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a49a0 [0184.341] wcscpy (in: _Dest=0x148a49a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" [0184.341] wcscat (in: _Dest=0x148a49a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" [0184.341] wcscat (in: _Dest=0x148a49a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" [0185.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a49a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0185.475] FindNextFileW (in: hFindFile=0x3f38258, lpFindFileData=0x8090210 | out: lpFindFileData=0x8090210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.475] FindClose (in: hFindFile=0x3f38258 | out: hFindFile=0x3f38258) returned 1 [0185.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090210) returned 1 [0185.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5c78) returned 1 [0185.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25840) returned 1 Thread: id = 4918 os_tid = 0x2228 [0178.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f5a68 [0178.699] wcscpy (in: _Dest=0x81f5a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" [0178.700] wcscat (in: _Dest=0x81f5a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" [0178.700] wcscat (in: _Dest=0x81f5a68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*" [0178.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808fd40 [0178.700] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*", lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38158 [0184.339] wcscmp (_String1=".", _String2=".") returned 0 [0184.339] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.339] wcscmp (_String1="..", _String2=".") returned 1 [0184.339] wcscmp (_String1="..", _String2="..") returned 0 [0184.339] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.339] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.340] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4878 [0184.340] wcscpy (in: _Dest=0x148a4878, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" [0184.340] wcscat (in: _Dest=0x148a4878, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" [0184.340] wcscat (in: _Dest=0x148a4878, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" [0185.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0185.472] FindNextFileW (in: hFindFile=0x3f38158, lpFindFileData=0x808fd40 | out: lpFindFileData=0x808fd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.472] FindClose (in: hFindFile=0x3f38158 | out: hFindFile=0x3f38158) returned 1 [0185.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808fd40) returned 1 [0185.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5a68) returned 1 [0185.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27e40) returned 1 Thread: id = 4919 os_tid = 0x222c [0178.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8320f60 [0178.700] wcscpy (in: _Dest=0x8320f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" [0178.701] wcscat (in: _Dest=0x8320f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" [0178.701] wcscat (in: _Dest=0x8320f60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*" [0178.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090478 [0178.701] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*", lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38118 [0184.338] wcscmp (_String1=".", _String2=".") returned 0 [0184.338] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.338] wcscmp (_String1="..", _String2=".") returned 1 [0184.338] wcscmp (_String1="..", _String2="..") returned 0 [0184.338] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.338] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.338] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4750 [0184.338] wcscpy (in: _Dest=0x148a4750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" [0184.338] wcscat (in: _Dest=0x148a4750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" [0184.339] wcscat (in: _Dest=0x148a4750, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" [0185.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0185.470] FindNextFileW (in: hFindFile=0x3f38118, lpFindFileData=0x8090478 | out: lpFindFileData=0x8090478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.470] FindClose (in: hFindFile=0x3f38118 | out: hFindFile=0x3f38118) returned 1 [0185.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090478) returned 1 [0185.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320f60) returned 1 [0185.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27f40) returned 1 Thread: id = 4920 os_tid = 0x2230 [0178.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8320d50 [0178.701] wcscpy (in: _Dest=0x8320d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" [0178.702] wcscat (in: _Dest=0x8320d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" [0178.702] wcscat (in: _Dest=0x8320d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*" [0178.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f870 [0178.702] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*", lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0184.337] wcscmp (_String1=".", _String2=".") returned 0 [0184.337] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.337] wcscmp (_String1="..", _String2=".") returned 1 [0184.337] wcscmp (_String1="..", _String2="..") returned 0 [0184.337] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.337] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.337] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4628 [0184.337] wcscpy (in: _Dest=0x148a4628, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" [0184.337] wcscat (in: _Dest=0x148a4628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" [0184.337] wcscat (in: _Dest=0x148a4628, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" [0185.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b54 [0185.467] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x808f870 | out: lpFindFileData=0x808f870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.467] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0185.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f870) returned 1 [0185.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320d50) returned 1 [0185.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28040) returned 1 Thread: id = 4921 os_tid = 0x2234 [0178.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8320c48 [0178.702] wcscpy (in: _Dest=0x8320c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" [0178.702] wcscat (in: _Dest=0x8320c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" [0178.703] wcscat (in: _Dest=0x8320c48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*" [0178.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091c88 [0178.703] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*", lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d98 [0184.335] wcscmp (_String1=".", _String2=".") returned 0 [0184.335] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.336] wcscmp (_String1="..", _String2=".") returned 1 [0184.336] wcscmp (_String1="..", _String2="..") returned 0 [0184.336] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.336] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.336] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4500 [0184.336] wcscpy (in: _Dest=0x148a4500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" [0184.336] wcscat (in: _Dest=0x148a4500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" [0184.336] wcscat (in: _Dest=0x148a4500, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" [0185.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0185.465] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x8091c88 | out: lpFindFileData=0x8091c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.465] FindClose (in: hFindFile=0x3f37d98 | out: hFindFile=0x3f37d98) returned 1 [0185.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091c88) returned 1 [0185.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320c48) returned 1 [0185.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28140) returned 1 Thread: id = 4922 os_tid = 0x2238 [0178.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8334d50 [0178.705] wcscpy (in: _Dest=0x8334d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" [0178.705] wcscat (in: _Dest=0x8334d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" [0178.705] wcscat (in: _Dest=0x8334d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*" [0178.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090bb0 [0178.705] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*", lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f516a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f18 [0184.334] wcscmp (_String1=".", _String2=".") returned 0 [0184.334] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f516a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.334] wcscmp (_String1="..", _String2=".") returned 1 [0184.334] wcscmp (_String1="..", _String2="..") returned 0 [0184.334] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.334] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.334] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a43d8 [0184.335] wcscpy (in: _Dest=0x148a43d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" [0184.335] wcscat (in: _Dest=0x148a43d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" [0184.335] wcscat (in: _Dest=0x148a43d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" [0185.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a43d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0185.462] FindNextFileW (in: hFindFile=0x3f37f18, lpFindFileData=0x8090bb0 | out: lpFindFileData=0x8090bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.462] FindClose (in: hFindFile=0x3f37f18 | out: hFindFile=0x3f37f18) returned 1 [0185.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090bb0) returned 1 [0185.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334d50) returned 1 [0185.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28240) returned 1 Thread: id = 4923 os_tid = 0x223c [0178.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8335488 [0178.705] wcscpy (in: _Dest=0x8335488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" [0178.706] wcscat (in: _Dest=0x8335488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" [0178.706] wcscat (in: _Dest=0x8335488, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*" [0178.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090948 [0178.706] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*", lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37cd8 [0184.333] wcscmp (_String1=".", _String2=".") returned 0 [0184.333] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.333] wcscmp (_String1="..", _String2=".") returned 1 [0184.333] wcscmp (_String1="..", _String2="..") returned 0 [0184.333] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.333] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.333] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a42b0 [0184.333] wcscpy (in: _Dest=0x148a42b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" [0184.333] wcscat (in: _Dest=0x148a42b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" [0184.334] wcscat (in: _Dest=0x148a42b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" [0185.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a42b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x279c [0185.460] FindNextFileW (in: hFindFile=0x3f37cd8, lpFindFileData=0x8090948 | out: lpFindFileData=0x8090948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.460] FindClose (in: hFindFile=0x3f37cd8 | out: hFindFile=0x3f37cd8) returned 1 [0185.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090948) returned 1 [0185.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335488) returned 1 [0185.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28340) returned 1 Thread: id = 4924 os_tid = 0x23b4 [0178.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x8335380 [0178.706] wcscpy (in: _Dest=0x8335380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" [0178.706] wcscat (in: _Dest=0x8335380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" [0178.707] wcscat (in: _Dest=0x8335380, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*" [0178.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e2c8 [0178.707] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*", lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38058 [0184.332] wcscmp (_String1=".", _String2=".") returned 0 [0184.332] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.332] wcscmp (_String1="..", _String2=".") returned 1 [0184.332] wcscmp (_String1="..", _String2="..") returned 0 [0184.332] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.332] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.332] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x148a4188 [0184.332] wcscpy (in: _Dest=0x148a4188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" [0184.332] wcscat (in: _Dest=0x148a4188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" [0184.332] wcscat (in: _Dest=0x148a4188, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" [0185.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0185.458] FindNextFileW (in: hFindFile=0x3f38058, lpFindFileData=0x808e2c8 | out: lpFindFileData=0x808e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.458] FindClose (in: hFindFile=0x3f38058 | out: hFindFile=0x3f38058) returned 1 [0185.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e2c8) returned 1 [0185.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335380) returned 1 [0185.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28440) returned 1 Thread: id = 4925 os_tid = 0x23b8 [0178.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8334a38 [0178.707] wcscpy (in: _Dest=0x8334a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" [0178.707] wcscat (in: _Dest=0x8334a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" [0178.707] wcscat (in: _Dest=0x8334a38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*" [0178.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ec68 [0178.708] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*", lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38318 [0184.331] wcscmp (_String1=".", _String2=".") returned 0 [0184.331] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.331] wcscmp (_String1="..", _String2=".") returned 1 [0184.331] wcscmp (_String1="..", _String2="..") returned 0 [0184.331] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.331] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.331] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4060 [0184.331] wcscpy (in: _Dest=0x148a4060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" [0184.331] wcscat (in: _Dest=0x148a4060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" [0184.331] wcscat (in: _Dest=0x148a4060, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" [0185.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0185.456] FindNextFileW (in: hFindFile=0x3f38318, lpFindFileData=0x808ec68 | out: lpFindFileData=0x808ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.456] FindClose (in: hFindFile=0x3f38318 | out: hFindFile=0x3f38318) returned 1 [0185.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ec68) returned 1 [0185.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334a38) returned 1 [0185.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28540) returned 1 Thread: id = 4926 os_tid = 0x23bc [0178.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83359b0 [0178.708] wcscpy (in: _Dest=0x83359b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" [0178.708] wcscat (in: _Dest=0x83359b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" [0178.708] wcscat (in: _Dest=0x83359b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*" [0178.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091080 [0178.708] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*", lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0184.351] wcscmp (_String1=".", _String2=".") returned 0 [0184.351] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.351] wcscmp (_String1="..", _String2=".") returned 1 [0184.351] wcscmp (_String1="..", _String2="..") returned 0 [0184.351] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.351] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.351] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a52e0 [0184.352] wcscpy (in: _Dest=0x148a52e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" [0184.352] wcscat (in: _Dest=0x148a52e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" [0184.352] wcscat (in: _Dest=0x148a52e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" [0185.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a52e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0185.495] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8091080 | out: lpFindFileData=0x8091080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.495] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0185.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091080) returned 1 [0185.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83359b0) returned 1 [0185.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28640) returned 1 Thread: id = 4927 os_tid = 0x23c0 [0178.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8335ed8 [0178.716] wcscpy (in: _Dest=0x8335ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" [0178.716] wcscat (in: _Dest=0x8335ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" [0178.716] wcscat (in: _Dest=0x8335ed8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*" [0178.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8091a20 [0178.716] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*", lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099590 [0183.795] wcscmp (_String1=".", _String2=".") returned 0 [0183.795] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.795] wcscmp (_String1="..", _String2=".") returned 1 [0183.795] wcscmp (_String1="..", _String2="..") returned 0 [0183.795] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.795] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.795] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x81d7648 [0183.796] wcscpy (in: _Dest=0x81d7648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" [0183.796] wcscat (in: _Dest=0x81d7648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" [0183.796] wcscat (in: _Dest=0x81d7648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" [0185.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af4 [0185.388] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x8091a20 | out: lpFindFileData=0x8091a20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.388] FindClose (in: hFindFile=0x8099590 | out: hFindFile=0x8099590) returned 1 [0185.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8091a20) returned 1 [0185.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335ed8) returned 1 [0185.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28740) returned 1 Thread: id = 4928 os_tid = 0x23c4 [0178.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x8335fe0 [0178.718] wcscpy (in: _Dest=0x8335fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" [0178.718] wcscat (in: _Dest=0x8335fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" [0178.718] wcscat (in: _Dest=0x8335fe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*" [0178.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048e50 [0178.718] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*", lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0184.350] wcscmp (_String1=".", _String2=".") returned 0 [0184.350] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.350] wcscmp (_String1="..", _String2=".") returned 1 [0184.350] wcscmp (_String1="..", _String2="..") returned 0 [0184.350] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.350] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.350] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a51b8 [0184.350] wcscpy (in: _Dest=0x148a51b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" [0184.350] wcscat (in: _Dest=0x148a51b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" [0184.350] wcscat (in: _Dest=0x148a51b8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" [0185.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a51b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0185.492] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x8048e50 | out: lpFindFileData=0x8048e50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.492] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0185.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048e50) returned 1 [0185.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335fe0) returned 1 [0185.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28840) returned 1 Thread: id = 4929 os_tid = 0x24b0 [0178.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83360e8 [0178.719] wcscpy (in: _Dest=0x83360e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" [0178.719] wcscat (in: _Dest=0x83360e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" [0178.719] wcscat (in: _Dest=0x83360e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*" [0178.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80478a8 [0178.720] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*", lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38358 [0181.742] wcscmp (_String1=".", _String2=".") returned 0 [0181.742] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.742] wcscmp (_String1="..", _String2=".") returned 1 [0181.743] wcscmp (_String1="..", _String2="..") returned 0 [0181.743] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0181.743] wcscmp (_String1="messages.json", _String2=".") returned 1 [0181.743] wcscmp (_String1="messages.json", _String2="..") returned 1 [0181.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x8400dd0 [0181.743] wcscpy (in: _Dest=0x8400dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" [0181.743] wcscat (in: _Dest=0x8400dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" [0181.743] wcscat (in: _Dest=0x8400dd0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" [0184.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8400dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0184.879] FindNextFileW (in: hFindFile=0x3f38358, lpFindFileData=0x80478a8 | out: lpFindFileData=0x80478a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.879] FindClose (in: hFindFile=0x3f38358 | out: hFindFile=0x3f38358) returned 1 [0184.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80478a8) returned 1 [0184.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83360e8) returned 1 [0184.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e28940) returned 1 Thread: id = 4930 os_tid = 0x255c [0178.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83361f0 [0178.720] wcscpy (in: _Dest=0x83361f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" [0178.720] wcscat (in: _Dest=0x83361f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" [0178.720] wcscat (in: _Dest=0x83361f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*" [0178.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046f08 [0178.721] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*", lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0184.349] wcscmp (_String1=".", _String2=".") returned 0 [0184.349] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.349] wcscmp (_String1="..", _String2=".") returned 1 [0184.349] wcscmp (_String1="..", _String2="..") returned 0 [0184.349] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.349] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.349] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a5090 [0184.349] wcscpy (in: _Dest=0x148a5090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" [0184.349] wcscat (in: _Dest=0x148a5090, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" [0184.349] wcscat (in: _Dest=0x148a5090, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" [0185.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a5090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264c [0185.489] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8046f08 | out: lpFindFileData=0x8046f08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.490] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0185.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046f08) returned 1 [0185.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83361f0) returned 1 [0185.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f7ac8) returned 1 Thread: id = 4931 os_tid = 0x25fc [0178.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x83362f8 [0178.721] wcscpy (in: _Dest=0x83362f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" [0178.721] wcscat (in: _Dest=0x83362f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" [0178.721] wcscat (in: _Dest=0x83362f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*" [0178.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048be8 [0178.722] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*", lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0184.347] wcscmp (_String1=".", _String2=".") returned 0 [0184.347] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.348] wcscmp (_String1="..", _String2=".") returned 1 [0184.348] wcscmp (_String1="..", _String2="..") returned 0 [0184.348] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.348] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.348] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4f68 [0184.348] wcscpy (in: _Dest=0x148a4f68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" [0184.348] wcscat (in: _Dest=0x148a4f68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" [0184.348] wcscat (in: _Dest=0x148a4f68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" [0185.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0185.487] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x8048be8 | out: lpFindFileData=0x8048be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.487] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0185.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048be8) returned 1 [0185.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83362f8) returned 1 [0185.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8059fe0) returned 1 Thread: id = 4932 os_tid = 0x2604 [0178.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5bd0 [0178.728] wcscpy (in: _Dest=0x3ef5bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" [0178.728] wcscat (in: _Dest=0x3ef5bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" [0178.728] wcscat (in: _Dest=0x3ef5bd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*" [0178.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8046a38 [0178.729] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*", lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f375d8 [0184.346] wcscmp (_String1=".", _String2=".") returned 0 [0184.346] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.346] wcscmp (_String1="..", _String2=".") returned 1 [0184.346] wcscmp (_String1="..", _String2="..") returned 0 [0184.346] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.346] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.347] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4e40 [0184.347] wcscpy (in: _Dest=0x148a4e40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" [0184.347] wcscat (in: _Dest=0x148a4e40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" [0184.347] wcscat (in: _Dest=0x148a4e40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" [0185.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0185.484] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x8046a38 | out: lpFindFileData=0x8046a38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.484] FindClose (in: hFindFile=0x3f375d8 | out: hFindFile=0x3f375d8) returned 1 [0185.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8046a38) returned 1 [0185.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0185.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a0e0) returned 1 Thread: id = 4933 os_tid = 0x2608 [0178.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5cd8 [0178.729] wcscpy (in: _Dest=0x3ef5cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" [0178.729] wcscat (in: _Dest=0x3ef5cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" [0178.729] wcscat (in: _Dest=0x3ef5cd8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*" [0178.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80467d0 [0178.730] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*", lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c18 [0184.345] wcscmp (_String1=".", _String2=".") returned 0 [0184.345] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.345] wcscmp (_String1="..", _String2=".") returned 1 [0184.345] wcscmp (_String1="..", _String2="..") returned 0 [0184.345] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f5d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.345] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.345] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4d18 [0184.345] wcscpy (in: _Dest=0x148a4d18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" [0184.346] wcscat (in: _Dest=0x148a4d18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" [0184.346] wcscat (in: _Dest=0x148a4d18, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" [0185.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0185.482] FindNextFileW (in: hFindFile=0x3f37c18, lpFindFileData=0x80467d0 | out: lpFindFileData=0x80467d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f5d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.482] FindClose (in: hFindFile=0x3f37c18 | out: hFindFile=0x3f37c18) returned 1 [0185.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80467d0) returned 1 [0185.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cd8) returned 1 [0185.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a1e0) returned 1 Thread: id = 4934 os_tid = 0x260c [0178.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3ef5de0 [0178.734] wcscpy (in: _Dest=0x3ef5de0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" [0178.734] wcscat (in: _Dest=0x3ef5de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" [0178.734] wcscat (in: _Dest=0x3ef5de0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*" [0178.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049cc0 [0178.735] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*", lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37698 [0184.344] wcscmp (_String1=".", _String2=".") returned 0 [0184.344] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.344] wcscmp (_String1="..", _String2=".") returned 1 [0184.344] wcscmp (_String1="..", _String2="..") returned 0 [0184.344] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.344] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.344] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4bf0 [0184.344] wcscpy (in: _Dest=0x148a4bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" [0184.344] wcscat (in: _Dest=0x148a4bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" [0184.344] wcscat (in: _Dest=0x148a4bf0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" [0185.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0185.480] FindNextFileW (in: hFindFile=0x3f37698, lpFindFileData=0x8049cc0 | out: lpFindFileData=0x8049cc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.480] FindClose (in: hFindFile=0x3f37698 | out: hFindFile=0x3f37698) returned 1 [0185.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049cc0) returned 1 [0185.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0185.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a2e0) returned 1 Thread: id = 4935 os_tid = 0x2610 [0178.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2f93d0 [0178.820] wcscpy (in: _Dest=0x2f93d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" [0178.820] wcscat (in: _Dest=0x2f93d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" [0178.820] wcscat (in: _Dest=0x2f93d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*" [0178.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09c58 [0178.820] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*", lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b58 [0184.342] wcscmp (_String1=".", _String2=".") returned 0 [0184.342] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.343] wcscmp (_String1="..", _String2=".") returned 1 [0184.343] wcscmp (_String1="..", _String2="..") returned 0 [0184.343] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.343] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.343] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a4ac8 [0184.343] wcscpy (in: _Dest=0x148a4ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" [0184.343] wcscat (in: _Dest=0x148a4ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" [0184.343] wcscat (in: _Dest=0x148a4ac8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" [0185.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a4ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0185.478] FindNextFileW (in: hFindFile=0x3f37b58, lpFindFileData=0x3f09c58 | out: lpFindFileData=0x3f09c58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.478] FindClose (in: hFindFile=0x3f37b58 | out: hFindFile=0x3f37b58) returned 1 [0185.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09c58) returned 1 [0185.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f93d0) returned 1 [0185.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a3e0) returned 1 Thread: id = 4936 os_tid = 0x2614 [0178.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lome")) returned 0x20 [0187.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome", dwFileAttributes=0x20) returned 0 [0187.774] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.546] GetLastError () returned 0x5 [0188.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome", dwFileAttributes=0x20) returned 0 [0188.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46060) returned 1 Thread: id = 4937 os_tid = 0x276c [0178.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\luanda")) returned 0x20 [0187.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda", dwFileAttributes=0x20) returned 0 [0187.774] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\luanda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.546] GetLastError () returned 0x5 [0188.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda", dwFileAttributes=0x20) returned 0 [0188.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d478c0) returned 1 Thread: id = 4938 os_tid = 0x282c [0178.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lubumbashi")) returned 0x20 [0188.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", dwFileAttributes=0x20) returned 0 [0188.572] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lubumbashi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.695] GetLastError () returned 0x5 [0188.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", dwFileAttributes=0x20) returned 0 [0188.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1638) returned 1 Thread: id = 4939 os_tid = 0x284c [0178.824] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json")) returned 0x2020 [0178.825] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0189.968] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1eec [0190.950] GetFileSizeEx (in: hFile=0x1eec, lpFileSize=0x13fffa60 | out: lpFileSize=0x13fffa60*=259) returned 1 [0190.950] SetFilePointerEx (in: hFile=0x1eec, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.950] ReadFile (in: hFile=0x1eec, lpBuffer=0x13fffa6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x13fffa48, lpOverlapped=0x0 | out: lpBuffer=0x13fffa6c*, lpNumberOfBytesRead=0x13fffa48*=0x4, lpOverlapped=0x0) returned 1 [0190.951] SetFilePointerEx (in: hFile=0x1eec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0190.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0190.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42880 [0190.952] NtQuerySystemTime (in: CurrentTime=0x13fff9e8 | out: CurrentTime=0x13fff9e8*=132471540588564000) returned 0x0 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x622bfea6 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x76c182f1 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x73a6aecf [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x61615d74 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0xea98f43 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x544d00b7 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x4fe11c81 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x643206d3 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x41b37acb [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x49c8d3bc [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x3fe9849b [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x2bd8157e [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x1b2e9e93 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x18e8180a [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x30659086 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x3900dfe9 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x1ca87f27 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x5c5df3e2 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x3f1d2c23 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x66a88181 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x5033ab53 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x6856e253 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x6498bb29 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x3c9ed145 [0190.952] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x2261547f [0190.953] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x4897e81c [0190.953] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x9f72a91 [0190.953] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x763b42be [0190.953] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x59b89244 [0190.953] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x22288f54 [0190.953] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x6d43ec43 [0190.953] RtlRandomEx (in: Seed=0x13fff9e0 | out: Seed=0x13fff9e0) returned 0x49f709dc [0190.963] ReadFile (in: hFile=0x1eec, lpBuffer=0x82b54b8, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x13fff9dc, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesRead=0x13fff9dc*=0x103, lpOverlapped=0x0) returned 1 [0190.963] SetFilePointerEx (in: hFile=0x1eec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.963] WriteFile (in: hFile=0x1eec, lpBuffer=0x82b90c0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x13fff9e0, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesWritten=0x13fff9e0*=0x103, lpOverlapped=0x0) returned 1 [0193.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0193.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0193.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0193.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0193.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0193.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0193.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5e28) returned 1 [0193.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69600 [0193.769] SetFilePointerEx (in: hFile=0x1eec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.769] WriteFile (in: hFile=0x1eec, lpBuffer=0x30bb4d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x13fffa54, lpOverlapped=0x0 | out: lpBuffer=0x30bb4d0*, lpNumberOfBytesWritten=0x13fffa54*=0x10c, lpOverlapped=0x0) returned 1 [0196.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0196.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69630) returned 1 [0196.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0196.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69600) returned 1 [0196.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0196.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0196.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425b0) returned 1 [0196.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421a0) returned 1 [0196.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8860 [0196.132] wcscpy (in: _Dest=0x3ef8860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" [0196.132] wcscat (in: _Dest=0x3ef8860, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.f0dbec" [0196.132] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0x13fff9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9698 [0196.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9698) returned 1 [0196.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fe2f8) returned 1 [0196.592] NtQueryInformationFile (in: FileHandle=0x1eec, IoStatusBlock=0x13fff9b0, FileInformation=0x13fff9b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x13fff9b0, FileInformation=0x13fff9b8) returned 0x0 [0196.592] NtSetInformationFile (FileHandle=0x1eec, IoStatusBlock=0x13fff9b0, FileInformation=0x13fff9b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8860) returned 1 [0196.850] FlushFileBuffers (hFile=0x1eec) returned 1 [0196.863] CloseHandle (hObject=0x1eec) returned 1 [0197.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f38b8 [0197.052] wcscpy (in: _Dest=0x81f38b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" [0197.052] wcscat (in: _Dest=0x81f38b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\F0DBEC-Readme.txt" [0197.052] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0197.052] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1938 [0197.449] WriteFile (in: hFile=0x1938, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x13fff9fc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x13fff9fc*=0x70c, lpOverlapped=0x0) returned 1 [0197.865] CloseHandle (hObject=0x1938) returned 1 [0197.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f38b8) returned 1 [0197.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d573a0) returned 1 Thread: id = 4940 os_tid = 0x2864 [0178.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one")) returned 0x20 [0178.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one", dwFileAttributes=0x20) returned 0 [0178.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.826] GetLastError () returned 0x5 [0178.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one", dwFileAttributes=0x20) returned 0 [0178.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de068) returned 1 Thread: id = 4941 os_tid = 0x2868 [0178.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta")) returned 0x20 [0183.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta", dwFileAttributes=0x20) returned 0 [0183.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.554] GetLastError () returned 0x5 [0183.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta", dwFileAttributes=0x20) returned 0 [0183.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df388) returned 1 Thread: id = 4942 os_tid = 0x286c [0178.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css")) returned 0x20 [0183.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS", dwFileAttributes=0x20) returned 0 [0183.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.983] GetLastError () returned 0x5 [0183.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS", dwFileAttributes=0x20) returned 0 [0183.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a9d8) returned 1 Thread: id = 4943 os_tid = 0x2870 [0178.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl")) returned 0x20 [0183.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL", dwFileAttributes=0x20) returned 0 [0183.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.978] GetLastError () returned 0x5 [0183.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL", dwFileAttributes=0x20) returned 0 [0183.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b6d8) returned 1 Thread: id = 4944 os_tid = 0x2874 [0178.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll")) returned 0x20 [0183.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0183.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.924] GetLastError () returned 0x5 [0183.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0183.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df538) returned 1 Thread: id = 4945 os_tid = 0x2878 [0178.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll")) returned 0x20 [0183.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0183.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.975] GetLastError () returned 0x5 [0183.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0183.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ce18) returned 1 Thread: id = 4946 os_tid = 0x2900 [0178.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd")) returned 0x20 [0184.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", dwFileAttributes=0x20) returned 0 [0184.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.056] GetLastError () returned 0x5 [0184.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", dwFileAttributes=0x20) returned 0 [0184.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bd58) returned 1 Thread: id = 4947 os_tid = 0x2904 [0178.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs")) returned 0x20 [0183.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS", dwFileAttributes=0x20) returned 0 [0183.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.968] GetLastError () returned 0x5 [0183.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS", dwFileAttributes=0x20) returned 0 [0183.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df148) returned 1 Thread: id = 4948 os_tid = 0x2908 [0178.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc")) returned 0x20 [0183.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.966] GetLastError () returned 0x5 [0183.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 Thread: id = 4949 os_tid = 0x290c [0178.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt")) returned 0x20 [0183.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.963] GetLastError () returned 0x5 [0183.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 Thread: id = 4950 os_tid = 0x2910 [0178.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk")) returned 0x20 [0183.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.960] GetLastError () returned 0x5 [0183.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 4951 os_tid = 0x2914 [0178.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk")) returned 0x20 [0183.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.946] GetLastError () returned 0x5 [0183.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 4952 os_tid = 0x2918 [0178.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs")) returned 0x20 [0183.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS", dwFileAttributes=0x20) returned 0 [0183.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.944] GetLastError () returned 0x5 [0183.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS", dwFileAttributes=0x20) returned 0 [0183.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 4953 os_tid = 0x291c [0178.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc")) returned 0x20 [0183.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.942] GetLastError () returned 0x5 [0183.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de728) returned 1 Thread: id = 4954 os_tid = 0x2920 [0178.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt")) returned 0x20 [0183.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.939] GetLastError () returned 0x5 [0183.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddc78) returned 1 Thread: id = 4955 os_tid = 0x2924 [0178.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk")) returned 0x20 [0183.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.937] GetLastError () returned 0x5 [0183.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd6d8) returned 1 Thread: id = 4956 os_tid = 0x2928 [0178.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk")) returned 0x20 [0183.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.935] GetLastError () returned 0x5 [0183.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81decc8) returned 1 Thread: id = 4957 os_tid = 0x292c [0178.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl")) returned 0x20 [0183.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0183.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.933] GetLastError () returned 0x5 [0183.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0183.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 Thread: id = 4958 os_tid = 0x2930 [0178.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs")) returned 0x20 [0183.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", dwFileAttributes=0x20) returned 0 [0183.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.930] GetLastError () returned 0x5 [0183.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", dwFileAttributes=0x20) returned 0 [0183.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b4d8) returned 1 Thread: id = 4959 os_tid = 0x2934 [0178.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc")) returned 0x20 [0183.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.928] GetLastError () returned 0x5 [0183.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 4960 os_tid = 0x2938 [0179.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt")) returned 0x20 [0183.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.926] GetLastError () returned 0x5 [0183.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 4961 os_tid = 0x2940 [0179.021] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json")) returned 0x2020 [0179.022] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0189.952] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x66c [0193.619] GetFileSizeEx (in: hFile=0x66c, lpFileSize=0x143bfa50 | out: lpFileSize=0x143bfa50*=179) returned 1 [0193.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0193.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0193.619] NtQuerySystemTime (in: CurrentTime=0x143bf9d8 | out: CurrentTime=0x143bf9d8*=132471540615240000) returned 0x0 [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x42e531cb [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x79661b05 [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x33a5248a [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x2426d9a7 [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x41948a8a [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0xcacf811 [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x70622fed [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x7fff5b49 [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x6b9c650e [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x5aad2528 [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x4adff501 [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x3602f489 [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x4010e6be [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x344e7afb [0193.619] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x4b50f927 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x7538aacb [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x3c544995 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x33cace1a [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x454a7e27 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x7fc8d88b [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x4a349201 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0xe90f477 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x2c8b0f0c [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x5524b6b5 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x1bee2b1 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0xcacdd67 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x544abe41 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x687a82b5 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x3eca0ea7 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0xad31fd8 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0x58266a05 [0193.620] RtlRandomEx (in: Seed=0x143bf9d0 | out: Seed=0x143bf9d0) returned 0xae9f9a0 [0193.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148e40a0 [0193.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148e7ca8 [0193.633] ReadFile (in: hFile=0x66c, lpBuffer=0x148e40a0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x143bf9cc, lpOverlapped=0x0 | out: lpBuffer=0x148e40a0*, lpNumberOfBytesRead=0x143bf9cc*=0xb3, lpOverlapped=0x0) returned 1 [0193.635] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.635] WriteFile (in: hFile=0x66c, lpBuffer=0x148e7ca8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x143bf9d0, lpOverlapped=0x0 | out: lpBuffer=0x148e7ca8*, lpNumberOfBytesWritten=0x143bf9d0*=0xb3, lpOverlapped=0x0) returned 1 [0201.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80628a0 [0201.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80628c8 [0201.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80628c8) returned 1 [0201.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148e7ca8) returned 1 [0201.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148e40a0) returned 1 [0201.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b4d8) returned 1 [0201.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6da0) returned 1 [0201.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fa98 [0201.559] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.559] WriteFile (in: hFile=0x66c, lpBuffer=0x30bcdf8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x143bfa44, lpOverlapped=0x0 | out: lpBuffer=0x30bcdf8*, lpNumberOfBytesWritten=0x143bfa44*=0x10c, lpOverlapped=0x0) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa38) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80628c8) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa98) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80628a0) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0203.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x2d2ac0 [0203.805] wcscpy (in: _Dest=0x2d2ac0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" [0203.805] wcscat (in: _Dest=0x2d2ac0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.f0dbec" [0203.805] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0x143bf9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3c5b8 [0204.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c5b8) returned 1 [0204.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8314610) returned 1 [0204.279] NtQueryInformationFile (in: FileHandle=0x66c, IoStatusBlock=0x143bf9a0, FileInformation=0x143bf9a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x143bf9a0, FileInformation=0x143bf9a8) returned 0x0 [0204.279] NtSetInformationFile (FileHandle=0x66c, IoStatusBlock=0x143bf9a0, FileInformation=0x143bf9a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d2ac0) returned 1 [0204.688] FlushFileBuffers (hFile=0x66c) returned 1 [0204.697] CloseHandle (hObject=0x66c) returned 1 [0207.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346a68 [0207.854] wcscpy (in: _Dest=0x8346a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" [0207.854] wcscat (in: _Dest=0x8346a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\F0DBEC-Readme.txt" [0207.855] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0207.855] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1560 [0208.381] WriteFile (in: hFile=0x1560, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x143bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x143bf9ec*=0x70c, lpOverlapped=0x0) returned 1 [0209.164] CloseHandle (hObject=0x1560) returned 1 [0209.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346a68) returned 1 [0209.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8428) returned 1 Thread: id = 4962 os_tid = 0x2944 [0179.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0179.023] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0189.953] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1564 [0193.636] GetFileSizeEx (in: hFile=0x1564, lpFileSize=0x145efde8 | out: lpFileSize=0x145efde8*=179) returned 1 [0193.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0193.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0193.636] NtQuerySystemTime (in: CurrentTime=0x145efd70 | out: CurrentTime=0x145efd70*=132471540615396000) returned 0x0 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x1bd86e84 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x785a93e9 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x1a5c7681 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x6a88cdfb [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x5e8bb860 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x28d55e6b [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x5a2d08f6 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x261840f [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x1692f90d [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x403deb27 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x7e1427fa [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x31432034 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x34534398 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x35107215 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x622dd7ff [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x3debe352 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x51d7655e [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x4a09b941 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x4f5added [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x43230b81 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x3123c33f [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x52a33810 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x44d7fa42 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0xd67200b [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x256a03f7 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x48a62f34 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x7253c283 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x6dd8ccb [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x5bb82e10 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x4a8a4381 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x253a3783 [0193.637] RtlRandomEx (in: Seed=0x145efd68 | out: Seed=0x145efd68) returned 0x36a6877d [0193.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148eb8b0 [0193.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148ef4b8 [0193.650] ReadFile (in: hFile=0x1564, lpBuffer=0x148eb8b0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x145efd64, lpOverlapped=0x0 | out: lpBuffer=0x148eb8b0*, lpNumberOfBytesRead=0x145efd64*=0xb3, lpOverlapped=0x0) returned 1 [0193.652] SetFilePointerEx (in: hFile=0x1564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.652] WriteFile (in: hFile=0x1564, lpBuffer=0x148ef4b8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x145efd68, lpOverlapped=0x0 | out: lpBuffer=0x148ef4b8*, lpNumberOfBytesWritten=0x145efd68*=0xb3, lpOverlapped=0x0) returned 1 [0201.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062ad0 [0201.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062af8 [0201.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062af8) returned 1 [0201.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148ef4b8) returned 1 [0201.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148eb8b0) returned 1 [0201.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b5c8) returned 1 [0201.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5648) returned 1 [0201.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f798 [0201.589] SetFilePointerEx (in: hFile=0x1564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.589] WriteFile (in: hFile=0x1564, lpBuffer=0x81e13d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x145efddc, lpOverlapped=0x0 | out: lpBuffer=0x81e13d0*, lpNumberOfBytesWritten=0x145efddc*=0x10c, lpOverlapped=0x0) returned 1 [0203.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e13d0) returned 1 [0203.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f408) returned 1 [0203.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062af8) returned 1 [0203.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f798) returned 1 [0203.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ad0) returned 1 [0203.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0203.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0203.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0203.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x81f6278 [0203.845] wcscpy (in: _Dest=0x81f6278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" [0203.845] wcscat (in: _Dest=0x81f6278, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.f0dbec" [0203.845] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0x145efd60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e16628 [0207.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16628) returned 1 [0207.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83408c0) returned 1 [0207.196] NtQueryInformationFile (in: FileHandle=0x1564, IoStatusBlock=0x145efd38, FileInformation=0x145efd40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x145efd38, FileInformation=0x145efd40) returned 0x0 [0207.196] NtSetInformationFile (FileHandle=0x1564, IoStatusBlock=0x145efd38, FileInformation=0x145efd40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6278) returned 1 [0208.220] FlushFileBuffers (hFile=0x1564) returned 1 [0208.222] CloseHandle (hObject=0x1564) returned 1 [0208.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8348058 [0208.539] wcscpy (in: _Dest=0x8348058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" [0208.539] wcscat (in: _Dest=0x8348058, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0208.539] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0208.540] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.008] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x145efd84, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x145efd84*=0x70c, lpOverlapped=0x0) returned 1 [0209.010] CloseHandle (hObject=0x1bc4) returned 1 [0209.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348058) returned 1 [0209.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8550) returned 1 Thread: id = 4963 os_tid = 0x2948 [0179.023] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json")) returned 0x2020 [0179.024] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0189.953] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1560 [0193.652] GetFileSizeEx (in: hFile=0x1560, lpFileSize=0x1441ff60 | out: lpFileSize=0x1441ff60*=179) returned 1 [0193.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0193.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0193.653] NtQuerySystemTime (in: CurrentTime=0x1441fee8 | out: CurrentTime=0x1441fee8*=132471540615552000) returned 0x0 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x49fa6833 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x149c4fc3 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x1546b256 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x18c6cfc8 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x70e45c9c [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x478930a8 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x532a55bf [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x20ff5c38 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x320232e9 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x4e5436a7 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0xd0cc297 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x47d9d4fa [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x3247ae07 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x5afc72db [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x6f00e4b8 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x484dbba7 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x4077382a [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x15d4f6fc [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0xed22f63 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x4f0d523 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0xea80a3c [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x51993a56 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0xe0e3475 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x427741e7 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0xa140be6 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x7137066b [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0xb9490 [0193.653] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x3353aa2c [0193.654] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x5cbba8ba [0193.654] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x354eb5c1 [0193.654] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x593a7574 [0193.654] RtlRandomEx (in: Seed=0x1441fee0 | out: Seed=0x1441fee0) returned 0x75e3642d [0193.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148f30c0 [0193.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148f6cc8 [0193.663] ReadFile (in: hFile=0x1560, lpBuffer=0x148f30c0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1441fedc, lpOverlapped=0x0 | out: lpBuffer=0x148f30c0*, lpNumberOfBytesRead=0x1441fedc*=0xb3, lpOverlapped=0x0) returned 1 [0193.665] SetFilePointerEx (in: hFile=0x1560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.665] WriteFile (in: hFile=0x1560, lpBuffer=0x148f6cc8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1441fee0, lpOverlapped=0x0 | out: lpBuffer=0x148f6cc8*, lpNumberOfBytesWritten=0x1441fee0*=0xb3, lpOverlapped=0x0) returned 1 [0201.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80628f0 [0201.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062918 [0201.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062918) returned 1 [0201.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148f6cc8) returned 1 [0201.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148f30c0) returned 1 [0201.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c018) returned 1 [0201.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7100) returned 1 [0201.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f228 [0201.562] SetFilePointerEx (in: hFile=0x1560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.562] WriteFile (in: hFile=0x1560, lpBuffer=0x30bbea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1441ff54, lpOverlapped=0x0 | out: lpBuffer=0x30bbea8*, lpNumberOfBytesWritten=0x1441ff54*=0x10c, lpOverlapped=0x0) returned 1 [0203.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbea8) returned 1 [0203.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa68) returned 1 [0203.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062918) returned 1 [0203.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f228) returned 1 [0203.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80628f0) returned 1 [0203.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0203.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0203.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0203.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f6008 [0203.839] wcscpy (in: _Dest=0x81f6008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" [0203.839] wcscat (in: _Dest=0x81f6008, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.f0dbec" [0203.839] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0x1441fed8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3cff8 [0207.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cff8) returned 1 [0207.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83422a0) returned 1 [0207.192] NtQueryInformationFile (in: FileHandle=0x1560, IoStatusBlock=0x1441feb0, FileInformation=0x1441feb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1441feb0, FileInformation=0x1441feb8) returned 0x0 [0207.192] NtSetInformationFile (FileHandle=0x1560, IoStatusBlock=0x1441feb0, FileInformation=0x1441feb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6008) returned 1 [0208.205] FlushFileBuffers (hFile=0x1560) returned 1 [0208.380] CloseHandle (hObject=0x1560) returned 1 [0208.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6278 [0208.816] wcscpy (in: _Dest=0x81f6278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" [0208.816] wcscat (in: _Dest=0x81f6278, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\F0DBEC-Readme.txt" [0208.816] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0208.816] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cf4 [0209.499] WriteFile (in: hFile=0x1cf4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1441fefc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1441fefc*=0x70c, lpOverlapped=0x0) returned 1 [0209.501] CloseHandle (hObject=0x1cf4) returned 1 [0209.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6278) returned 1 [0209.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8678) returned 1 Thread: id = 4964 os_tid = 0x29c4 [0179.027] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json")) returned 0x2020 [0179.028] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0189.953] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x155c [0193.665] GetFileSizeEx (in: hFile=0x155c, lpFileSize=0x86ff8d8 | out: lpFileSize=0x86ff8d8*=179) returned 1 [0193.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0193.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0193.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c7e8 [0193.666] NtQuerySystemTime (in: CurrentTime=0x86ff860 | out: CurrentTime=0x86ff860*=132471540615708000) returned 0x0 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x4a5f6ac1 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x1bd68e90 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x7f2f8da3 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x294f8674 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x75940892 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x2a6f3195 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x4c64ac23 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x106a63d7 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x44d0ea4b [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x2aadbb11 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x4040790e [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x7bd86b5a [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x9acec22 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0xf0b1fa1 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x437219fd [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x2705f84a [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x6bb2858f [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x7b777cbe [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x3e0c5ec [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x1585522d [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x6d729ba6 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x49a42486 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x33be3e4e [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x597b754c [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x39c4f363 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x3ac7a30f [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x412b7bb3 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x4df10e08 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x4d70fd12 [0193.666] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x641e08a4 [0193.667] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x59ddc198 [0193.667] RtlRandomEx (in: Seed=0x86ff858 | out: Seed=0x86ff858) returned 0x50f876ed [0193.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148fa8d0 [0193.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148fe4d8 [0193.679] ReadFile (in: hFile=0x155c, lpBuffer=0x148fa8d0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x86ff854, lpOverlapped=0x0 | out: lpBuffer=0x148fa8d0*, lpNumberOfBytesRead=0x86ff854*=0xb3, lpOverlapped=0x0) returned 1 [0193.681] SetFilePointerEx (in: hFile=0x155c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.681] WriteFile (in: hFile=0x155c, lpBuffer=0x148fe4d8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x86ff858, lpOverlapped=0x0 | out: lpBuffer=0x148fe4d8*, lpNumberOfBytesWritten=0x86ff858*=0xb3, lpOverlapped=0x0) returned 1 [0201.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062940 [0201.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062968 [0201.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062968) returned 1 [0201.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148fe4d8) returned 1 [0201.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148fa8d0) returned 1 [0201.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 [0201.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5768) returned 1 [0201.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f4f8 [0201.563] SetFilePointerEx (in: hFile=0x155c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.563] WriteFile (in: hFile=0x155c, lpBuffer=0x30bbc78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x86ff8cc, lpOverlapped=0x0 | out: lpBuffer=0x30bbc78*, lpNumberOfBytesWritten=0x86ff8cc*=0x10c, lpOverlapped=0x0) returned 1 [0203.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0203.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f588) returned 1 [0203.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062968) returned 1 [0203.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f4f8) returned 1 [0203.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062940) returned 1 [0203.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0203.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c7c0) returned 1 [0203.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb18) returned 1 [0203.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5648 [0203.809] wcscpy (in: _Dest=0x81f5648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" [0203.809] wcscat (in: _Dest=0x81f5648, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.f0dbec" [0203.809] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0x86ff850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3c700 [0204.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c700) returned 1 [0204.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83134d0) returned 1 [0204.280] NtQueryInformationFile (in: FileHandle=0x155c, IoStatusBlock=0x86ff828, FileInformation=0x86ff830, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x86ff828, FileInformation=0x86ff830) returned 0x0 [0204.280] NtSetInformationFile (FileHandle=0x155c, IoStatusBlock=0x86ff828, FileInformation=0x86ff830, Length=0x28, FileInformationClass=0x4) returned 0x0 [0204.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5648) returned 1 [0204.693] FlushFileBuffers (hFile=0x155c) returned 1 [0204.704] CloseHandle (hObject=0x155c) returned 1 [0207.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346930 [0207.862] wcscpy (in: _Dest=0x8346930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" [0207.862] wcscat (in: _Dest=0x8346930, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\F0DBEC-Readme.txt" [0207.862] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0207.862] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1580 [0208.384] WriteFile (in: hFile=0x1580, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x86ff874, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x86ff874*=0x70c, lpOverlapped=0x0) returned 1 [0209.168] CloseHandle (hObject=0x1580) returned 1 [0209.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346930) returned 1 [0209.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d87a0) returned 1 Thread: id = 4965 os_tid = 0x29c8 [0179.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8348370 [0179.029] wcscpy (in: _Dest=0x8348370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0179.029] wcscat (in: _Dest=0x8348370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" [0179.029] wcscat (in: _Dest=0x8348370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*" [0179.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff060 [0179.029] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfe90 [0184.403] wcscmp (_String1=".", _String2=".") returned 0 [0184.403] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.403] wcscmp (_String1="..", _String2=".") returned 1 [0184.403] wcscmp (_String1="..", _String2="..") returned 0 [0184.403] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.403] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.403] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a18a8 [0184.403] wcscpy (in: _Dest=0x148a18a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0184.403] wcscat (in: _Dest=0x148a18a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" [0184.403] wcscat (in: _Dest=0x148a18a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" [0185.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a18a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0185.598] FindNextFileW (in: hFindFile=0x3dcfe90, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.598] FindClose (in: hFindFile=0x3dcfe90 | out: hFindFile=0x3dcfe90) returned 1 [0185.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff060) returned 1 [0185.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348370) returned 1 [0185.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346c78) returned 1 Thread: id = 4966 os_tid = 0x29cc [0179.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8347998 [0179.029] wcscpy (in: _Dest=0x8347998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0179.029] wcscat (in: _Dest=0x8347998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" [0179.029] wcscat (in: _Dest=0x8347998, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*" [0179.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101948 [0179.029] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb50 [0184.402] wcscmp (_String1=".", _String2=".") returned 0 [0184.402] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.402] wcscmp (_String1="..", _String2=".") returned 1 [0184.402] wcscmp (_String1="..", _String2="..") returned 0 [0184.402] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.402] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.402] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a1780 [0184.402] wcscpy (in: _Dest=0x148a1780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0184.402] wcscat (in: _Dest=0x148a1780, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" [0184.402] wcscat (in: _Dest=0x148a1780, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" [0185.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a1780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0185.595] FindNextFileW (in: hFindFile=0x3dcfb50, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.596] FindClose (in: hFindFile=0x3dcfb50 | out: hFindFile=0x3dcfb50) returned 1 [0185.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101948) returned 1 [0185.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347998) returned 1 [0185.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347768) returned 1 Thread: id = 4967 os_tid = 0x29d0 [0179.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347bc8 [0179.030] wcscpy (in: _Dest=0x8347bc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0179.030] wcscat (in: _Dest=0x8347bc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" [0179.030] wcscat (in: _Dest=0x8347bc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*" [0179.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0179.030] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a58 [0184.400] wcscmp (_String1=".", _String2=".") returned 0 [0184.401] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.401] wcscmp (_String1="..", _String2=".") returned 1 [0184.401] wcscmp (_String1="..", _String2="..") returned 0 [0184.401] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.401] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.401] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a1658 [0184.401] wcscpy (in: _Dest=0x148a1658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0184.401] wcscat (in: _Dest=0x148a1658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" [0184.401] wcscat (in: _Dest=0x148a1658, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" [0185.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a1658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0185.593] FindNextFileW (in: hFindFile=0x3f37a58, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.593] FindClose (in: hFindFile=0x3f37a58 | out: hFindFile=0x3f37a58) returned 1 [0185.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0185.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347bc8) returned 1 [0185.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336400) returned 1 Thread: id = 4968 os_tid = 0x29d4 [0179.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347ab0 [0179.036] wcscpy (in: _Dest=0x8347ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0179.036] wcscat (in: _Dest=0x8347ab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" [0179.036] wcscat (in: _Dest=0x8347ab0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*" [0179.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80497f0 [0179.036] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*", lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c98 [0184.399] wcscmp (_String1=".", _String2=".") returned 0 [0184.399] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.399] wcscmp (_String1="..", _String2=".") returned 1 [0184.400] wcscmp (_String1="..", _String2="..") returned 0 [0184.400] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44624a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.400] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.400] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a1530 [0184.400] wcscpy (in: _Dest=0x148a1530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0184.400] wcscat (in: _Dest=0x148a1530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" [0184.400] wcscat (in: _Dest=0x148a1530, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json" [0185.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a1530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0185.591] FindNextFileW (in: hFindFile=0x3f37c98, lpFindFileData=0x80497f0 | out: lpFindFileData=0x80497f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44624a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.591] FindClose (in: hFindFile=0x3f37c98 | out: hFindFile=0x3f37c98) returned 1 [0185.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80497f0) returned 1 [0185.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347ab0) returned 1 [0185.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336508) returned 1 Thread: id = 4969 os_tid = 0x29d8 [0179.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346930 [0179.037] wcscpy (in: _Dest=0x8346930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0179.037] wcscat (in: _Dest=0x8346930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" [0179.037] wcscat (in: _Dest=0x8346930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*" [0179.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80484b0 [0179.037] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*", lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f374d8 [0184.398] wcscmp (_String1=".", _String2=".") returned 0 [0184.398] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.398] wcscmp (_String1="..", _String2=".") returned 1 [0184.398] wcscmp (_String1="..", _String2="..") returned 0 [0184.398] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.398] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.399] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a1408 [0184.399] wcscpy (in: _Dest=0x148a1408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0184.399] wcscat (in: _Dest=0x148a1408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" [0184.399] wcscat (in: _Dest=0x148a1408, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" [0185.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0185.589] FindNextFileW (in: hFindFile=0x3f374d8, lpFindFileData=0x80484b0 | out: lpFindFileData=0x80484b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.589] FindClose (in: hFindFile=0x3f374d8 | out: hFindFile=0x3f374d8) returned 1 [0185.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80484b0) returned 1 [0185.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346930) returned 1 [0185.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336610) returned 1 Thread: id = 4970 os_tid = 0x29dc [0179.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8348488 [0179.038] wcscpy (in: _Dest=0x8348488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0179.038] wcscat (in: _Dest=0x8348488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" [0179.038] wcscat (in: _Dest=0x8348488, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*" [0179.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x804a190 [0179.038] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*", lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37898 [0184.397] wcscmp (_String1=".", _String2=".") returned 0 [0184.397] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.397] wcscmp (_String1="..", _String2=".") returned 1 [0184.397] wcscmp (_String1="..", _String2="..") returned 0 [0184.397] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44adf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.397] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.397] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a12e0 [0184.398] wcscpy (in: _Dest=0x148a12e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0184.398] wcscat (in: _Dest=0x148a12e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" [0184.398] wcscat (in: _Dest=0x148a12e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" [0185.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a12e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0185.587] FindNextFileW (in: hFindFile=0x3f37898, lpFindFileData=0x804a190 | out: lpFindFileData=0x804a190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44adf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.587] FindClose (in: hFindFile=0x3f37898 | out: hFindFile=0x3f37898) returned 1 [0185.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x804a190) returned 1 [0185.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348488) returned 1 [0185.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ee8) returned 1 Thread: id = 4971 os_tid = 0x29e0 [0179.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8348028 [0179.042] wcscpy (in: _Dest=0x8348028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0179.042] wcscat (in: _Dest=0x8348028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" [0179.042] wcscat (in: _Dest=0x8348028, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*" [0179.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049320 [0179.042] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*", lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e58 [0184.396] wcscmp (_String1=".", _String2=".") returned 0 [0184.396] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.396] wcscmp (_String1="..", _String2=".") returned 1 [0184.396] wcscmp (_String1="..", _String2="..") returned 0 [0184.396] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4545570, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.396] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.396] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a11b8 [0184.397] wcscpy (in: _Dest=0x148a11b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0184.397] wcscat (in: _Dest=0x148a11b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" [0184.397] wcscat (in: _Dest=0x148a11b8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" [0185.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a11b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0185.584] FindNextFileW (in: hFindFile=0x3f37e58, lpFindFileData=0x8049320 | out: lpFindFileData=0x8049320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4545570, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.584] FindClose (in: hFindFile=0x3f37e58 | out: hFindFile=0x3f37e58) returned 1 [0185.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049320) returned 1 [0185.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348028) returned 1 [0185.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 Thread: id = 4972 os_tid = 0x29e4 [0179.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347f10 [0179.043] wcscpy (in: _Dest=0x8347f10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0179.043] wcscat (in: _Dest=0x8347f10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" [0179.043] wcscat (in: _Dest=0x8347f10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*" [0179.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8048248 [0179.043] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*", lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37498 [0184.395] wcscmp (_String1=".", _String2=".") returned 0 [0184.395] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.395] wcscmp (_String1="..", _String2=".") returned 1 [0184.395] wcscmp (_String1="..", _String2="..") returned 0 [0184.395] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456c670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.395] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.395] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a1090 [0184.395] wcscpy (in: _Dest=0x148a1090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0184.395] wcscat (in: _Dest=0x148a1090, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" [0184.395] wcscat (in: _Dest=0x148a1090, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" [0185.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a1090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a50 [0185.582] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x8048248 | out: lpFindFileData=0x8048248*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456c670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.582] FindClose (in: hFindFile=0x3f37498 | out: hFindFile=0x3f37498) returned 1 [0185.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8048248) returned 1 [0185.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347f10) returned 1 [0185.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320a38) returned 1 Thread: id = 4973 os_tid = 0x29e8 [0179.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347df8 [0179.044] wcscpy (in: _Dest=0x8347df8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0179.044] wcscat (in: _Dest=0x8347df8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" [0179.044] wcscat (in: _Dest=0x8347df8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*" [0179.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8049588 [0179.044] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*", lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0184.394] wcscmp (_String1=".", _String2=".") returned 0 [0184.394] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.394] wcscmp (_String1="..", _String2=".") returned 1 [0184.394] wcscmp (_String1="..", _String2="..") returned 0 [0184.394] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b8160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.394] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.394] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0f68 [0184.394] wcscpy (in: _Dest=0x148a0f68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0184.394] wcscat (in: _Dest=0x148a0f68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" [0184.394] wcscat (in: _Dest=0x148a0f68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" [0185.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0185.579] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x8049588 | out: lpFindFileData=0x8049588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b8160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.579] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0185.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8049588) returned 1 [0185.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347df8) returned 1 [0185.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5960) returned 1 Thread: id = 4974 os_tid = 0x29ec [0179.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8347ce0 [0179.045] wcscpy (in: _Dest=0x8347ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0179.045] wcscat (in: _Dest=0x8347ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" [0179.045] wcscat (in: _Dest=0x8347ce0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*" [0179.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047fe0 [0179.045] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*", lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0184.393] wcscmp (_String1=".", _String2=".") returned 0 [0184.393] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.393] wcscmp (_String1="..", _String2=".") returned 1 [0184.393] wcscmp (_String1="..", _String2="..") returned 0 [0184.393] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.393] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.393] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0e40 [0184.393] wcscpy (in: _Dest=0x148a0e40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0184.393] wcscat (in: _Dest=0x148a0e40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" [0184.393] wcscat (in: _Dest=0x148a0e40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" [0185.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0185.575] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x8047fe0 | out: lpFindFileData=0x8047fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.576] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0185.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047fe0) returned 1 [0185.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347ce0) returned 1 [0185.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb648) returned 1 Thread: id = 4975 os_tid = 0x2af8 [0179.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346d90 [0179.046] wcscpy (in: _Dest=0x8346d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0179.046] wcscat (in: _Dest=0x8346d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" [0179.046] wcscat (in: _Dest=0x8346d90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*" [0179.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80490b8 [0179.046] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*", lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a98 [0184.391] wcscmp (_String1=".", _String2=".") returned 0 [0184.391] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.391] wcscmp (_String1="..", _String2=".") returned 1 [0184.391] wcscmp (_String1="..", _String2="..") returned 0 [0184.391] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c2330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.391] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.391] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0d18 [0184.392] wcscpy (in: _Dest=0x148a0d18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0184.392] wcscat (in: _Dest=0x148a0d18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" [0184.392] wcscat (in: _Dest=0x148a0d18, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" [0185.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0185.565] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x80490b8 | out: lpFindFileData=0x80490b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c2330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.565] FindClose (in: hFindFile=0x3f37a98 | out: hFindFile=0x3f37a98) returned 1 [0185.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80490b8) returned 1 [0185.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346d90) returned 1 [0185.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb750) returned 1 Thread: id = 4976 os_tid = 0x2afc [0179.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x8346ea8 [0179.046] wcscpy (in: _Dest=0x8346ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0179.046] wcscat (in: _Dest=0x8346ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" [0179.046] wcscat (in: _Dest=0x8346ea8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*" [0179.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8047640 [0179.047] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*", lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0184.390] wcscmp (_String1=".", _String2=".") returned 0 [0184.390] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.390] wcscmp (_String1="..", _String2=".") returned 1 [0184.390] wcscmp (_String1="..", _String2="..") returned 0 [0184.390] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e9430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.390] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.390] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x148a0bf0 [0184.390] wcscpy (in: _Dest=0x148a0bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0184.391] wcscat (in: _Dest=0x148a0bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" [0184.391] wcscat (in: _Dest=0x148a0bf0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" [0185.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e4 [0185.562] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x8047640 | out: lpFindFileData=0x8047640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e9430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.562] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0185.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8047640) returned 1 [0185.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346ea8) returned 1 [0185.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb858) returned 1 Thread: id = 4977 os_tid = 0x2b00 [0179.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x8346fc0 [0179.047] wcscpy (in: _Dest=0x8346fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0179.047] wcscat (in: _Dest=0x8346fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" [0179.047] wcscat (in: _Dest=0x8346fc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*" [0179.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e248 [0179.047] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*", lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0184.389] wcscmp (_String1=".", _String2=".") returned 0 [0184.389] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.389] wcscmp (_String1="..", _String2=".") returned 1 [0184.389] wcscmp (_String1="..", _String2="..") returned 0 [0184.389] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4734f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.389] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.389] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a0ac8 [0184.389] wcscpy (in: _Dest=0x148a0ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0184.389] wcscat (in: _Dest=0x148a0ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" [0184.389] wcscat (in: _Dest=0x148a0ac8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" [0185.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0185.558] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4734f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.558] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0185.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e248) returned 1 [0185.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346fc0) returned 1 [0185.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347880) returned 1 Thread: id = 4978 os_tid = 0x2ab4 [0179.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h")) returned 0x20 [0179.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H", dwFileAttributes=0x20) returned 0 [0179.049] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.049] GetLastError () returned 0x5 [0179.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H", dwFileAttributes=0x20) returned 0 [0179.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 4979 os_tid = 0x141c [0179.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v")) returned 0x20 [0179.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V", dwFileAttributes=0x20) returned 0 [0179.055] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.055] GetLastError () returned 0x5 [0179.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V", dwFileAttributes=0x20) returned 0 [0179.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 4980 os_tid = 0x18d8 [0179.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h")) returned 0x20 [0182.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H", dwFileAttributes=0x20) returned 0 [0182.147] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.147] GetLastError () returned 0x5 [0182.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H", dwFileAttributes=0x20) returned 0 [0182.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b258) returned 1 Thread: id = 4981 os_tid = 0x1a98 [0179.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v")) returned 0x20 [0182.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V", dwFileAttributes=0x20) returned 0 [0182.136] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.136] GetLastError () returned 0x5 [0182.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V", dwFileAttributes=0x20) returned 0 [0182.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bc58) returned 1 Thread: id = 4982 os_tid = 0x1ac0 [0179.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-h")) returned 0x20 [0183.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H", dwFileAttributes=0x20) returned 0 [0183.910] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.917] GetLastError () returned 0x5 [0183.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H", dwFileAttributes=0x20) returned 0 [0183.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b058) returned 1 Thread: id = 4983 os_tid = 0x1b2c [0179.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-v")) returned 0x20 [0183.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V", dwFileAttributes=0x20) returned 0 [0183.887] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.887] GetLastError () returned 0x5 [0183.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V", dwFileAttributes=0x20) returned 0 [0183.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b8d8) returned 1 Thread: id = 4984 os_tid = 0x1b38 [0179.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h")) returned 0x20 [0183.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H", dwFileAttributes=0x20) returned 0 [0183.885] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.885] GetLastError () returned 0x5 [0183.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H", dwFileAttributes=0x20) returned 0 [0183.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b3d8) returned 1 Thread: id = 4985 os_tid = 0x1b3c [0179.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v")) returned 0x20 [0183.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V", dwFileAttributes=0x20) returned 0 [0183.882] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.882] GetLastError () returned 0x5 [0183.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V", dwFileAttributes=0x20) returned 0 [0183.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b558) returned 1 Thread: id = 4986 os_tid = 0x1b40 [0179.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h")) returned 0x20 [0183.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H", dwFileAttributes=0x20) returned 0 [0183.855] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.855] GetLastError () returned 0x5 [0183.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H", dwFileAttributes=0x20) returned 0 [0183.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81becd8) returned 1 Thread: id = 4987 os_tid = 0x1b44 [0179.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h")) returned 0x20 [0181.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H", dwFileAttributes=0x20) returned 0 [0181.651] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.651] GetLastError () returned 0x5 [0181.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H", dwFileAttributes=0x20) returned 0 [0181.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 4988 os_tid = 0x1b48 [0179.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v")) returned 0x20 [0183.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V", dwFileAttributes=0x20) returned 0 [0183.902] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.903] GetLastError () returned 0x5 [0183.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V", dwFileAttributes=0x20) returned 0 [0183.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 4989 os_tid = 0x1b4c [0179.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2")) returned 0x20 [0183.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2", dwFileAttributes=0x20) returned 0 [0183.901] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.901] GetLastError () returned 0x5 [0183.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2", dwFileAttributes=0x20) returned 0 [0183.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 4990 os_tid = 0x1b50 [0179.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v")) returned 0x20 [0183.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V", dwFileAttributes=0x20) returned 0 [0183.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.899] GetLastError () returned 0x5 [0183.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V", dwFileAttributes=0x20) returned 0 [0183.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 4991 os_tid = 0x1b54 [0179.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h")) returned 0x20 [0183.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H", dwFileAttributes=0x20) returned 0 [0183.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.897] GetLastError () returned 0x5 [0183.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H", dwFileAttributes=0x20) returned 0 [0183.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0328) returned 1 Thread: id = 4992 os_tid = 0x1b58 [0179.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2")) returned 0x20 [0183.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0183.896] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.896] GetLastError () returned 0x5 [0183.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0183.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfff8) returned 1 Thread: id = 4993 os_tid = 0x1b5c [0179.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c")) returned 0x20 [0183.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0183.894] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.894] GetLastError () returned 0x5 [0183.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0183.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de068) returned 1 Thread: id = 4994 os_tid = 0x1b60 [0179.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj")) returned 0x20 [0183.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0183.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.880] GetLastError () returned 0x5 [0183.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0183.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 4995 os_tid = 0x1bc4 [0179.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj")) returned 0x20 [0183.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0183.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.892] GetLastError () returned 0x5 [0183.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0183.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 4996 os_tid = 0x1ca0 [0179.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc")) returned 0x20 [0183.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc", dwFileAttributes=0x20) returned 0 [0183.878] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.878] GetLastError () returned 0x5 [0183.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc", dwFileAttributes=0x20) returned 0 [0183.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bdd8) returned 1 Thread: id = 4997 os_tid = 0x1ca4 [0179.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5")) returned 0x20 [0183.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5", dwFileAttributes=0x20) returned 0 [0183.876] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.876] GetLastError () returned 0x5 [0183.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5", dwFileAttributes=0x20) returned 0 [0183.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 4998 os_tid = 0x1ca8 [0179.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc")) returned 0x20 [0183.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC", dwFileAttributes=0x20) returned 0 [0183.875] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.875] GetLastError () returned 0x5 [0183.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC", dwFileAttributes=0x20) returned 0 [0183.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf888) returned 1 Thread: id = 4999 os_tid = 0x1cac [0179.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc")) returned 0x20 [0183.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0183.873] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.873] GetLastError () returned 0x5 [0183.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0183.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 5000 os_tid = 0x1cb4 [0179.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc")) returned 0x20 [0183.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0183.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.890] GetLastError () returned 0x5 [0183.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0183.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 5001 os_tid = 0x1d20 [0179.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc")) returned 0x20 [0183.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0183.871] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.871] GetLastError () returned 0x5 [0183.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0183.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 5002 os_tid = 0x1d34 [0179.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h")) returned 0x20 [0183.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H", dwFileAttributes=0x20) returned 0 [0183.869] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.869] GetLastError () returned 0x5 [0183.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H", dwFileAttributes=0x20) returned 0 [0183.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f305a0) returned 1 Thread: id = 5003 os_tid = 0x1d48 [0179.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v")) returned 0x20 [0183.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V", dwFileAttributes=0x20) returned 0 [0183.867] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.867] GetLastError () returned 0x5 [0183.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V", dwFileAttributes=0x20) returned 0 [0183.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 Thread: id = 5004 os_tid = 0x1d4c [0179.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h")) returned 0x20 [0183.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H", dwFileAttributes=0x20) returned 0 [0183.865] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.865] GetLastError () returned 0x5 [0183.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H", dwFileAttributes=0x20) returned 0 [0183.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 5005 os_tid = 0x1d64 [0179.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v")) returned 0x20 [0183.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V", dwFileAttributes=0x20) returned 0 [0183.864] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.864] GetLastError () returned 0x5 [0183.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V", dwFileAttributes=0x20) returned 0 [0183.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 5006 os_tid = 0x1e70 [0179.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h")) returned 0x20 [0183.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H", dwFileAttributes=0x20) returned 0 [0183.862] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.862] GetLastError () returned 0x5 [0183.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H", dwFileAttributes=0x20) returned 0 [0183.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 Thread: id = 5007 os_tid = 0x1e74 [0179.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v")) returned 0x20 [0183.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V", dwFileAttributes=0x20) returned 0 [0183.860] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.860] GetLastError () returned 0x5 [0183.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V", dwFileAttributes=0x20) returned 0 [0183.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 5008 os_tid = 0x1e78 [0179.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h")) returned 0x20 [0183.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H", dwFileAttributes=0x20) returned 0 [0183.858] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.858] GetLastError () returned 0x5 [0183.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H", dwFileAttributes=0x20) returned 0 [0183.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 5009 os_tid = 0x1e80 [0179.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v")) returned 0x20 [0183.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V", dwFileAttributes=0x20) returned 0 [0183.857] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.857] GetLastError () returned 0x5 [0183.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V", dwFileAttributes=0x20) returned 0 [0183.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f5b0) returned 1 Thread: id = 5010 os_tid = 0x1e84 [0179.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h")) returned 0x20 [0183.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H", dwFileAttributes=0x20) returned 0 [0183.888] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.889] GetLastError () returned 0x5 [0183.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H", dwFileAttributes=0x20) returned 0 [0183.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 5011 os_tid = 0x1e88 [0179.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml")) returned 0x20 [0184.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML", dwFileAttributes=0x20) returned 0 [0184.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.522] GetLastError () returned 0x5 [0184.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML", dwFileAttributes=0x20) returned 0 [0184.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de188) returned 1 Thread: id = 5012 os_tid = 0x1e8c [0179.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml")) returned 0x20 [0182.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML", dwFileAttributes=0x20) returned 0 [0182.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.353] GetLastError () returned 0x5 [0182.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML", dwFileAttributes=0x20) returned 0 [0182.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddb58) returned 1 Thread: id = 5013 os_tid = 0x1e90 [0179.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml")) returned 0x20 [0182.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML", dwFileAttributes=0x20) returned 0 [0182.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.355] GetLastError () returned 0x5 [0182.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML", dwFileAttributes=0x20) returned 0 [0182.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd648) returned 1 Thread: id = 5014 os_tid = 0x1e94 [0179.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml")) returned 0x20 [0182.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML", dwFileAttributes=0x20) returned 0 [0182.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.357] GetLastError () returned 0x5 [0182.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML", dwFileAttributes=0x20) returned 0 [0182.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df0b8) returned 1 Thread: id = 5015 os_tid = 0x1e98 [0179.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml")) returned 0x20 [0182.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML", dwFileAttributes=0x20) returned 0 [0182.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.358] GetLastError () returned 0x5 [0182.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML", dwFileAttributes=0x20) returned 0 [0182.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddbe8) returned 1 Thread: id = 5016 os_tid = 0x1e9c [0179.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml")) returned 0x20 [0182.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML", dwFileAttributes=0x20) returned 0 [0182.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.360] GetLastError () returned 0x5 [0182.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML", dwFileAttributes=0x20) returned 0 [0182.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dea88) returned 1 Thread: id = 5017 os_tid = 0x1ea0 [0179.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml")) returned 0x20 [0182.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML", dwFileAttributes=0x20) returned 0 [0182.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.362] GetLastError () returned 0x5 [0182.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML", dwFileAttributes=0x20) returned 0 [0182.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df268) returned 1 Thread: id = 5018 os_tid = 0x1ea4 [0179.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml")) returned 0x20 [0182.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML", dwFileAttributes=0x20) returned 0 [0182.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.342] GetLastError () returned 0x5 [0182.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML", dwFileAttributes=0x20) returned 0 [0182.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dee78) returned 1 Thread: id = 5019 os_tid = 0x1ea8 [0179.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml")) returned 0x20 [0182.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML", dwFileAttributes=0x20) returned 0 [0182.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.344] GetLastError () returned 0x5 [0182.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML", dwFileAttributes=0x20) returned 0 [0182.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de608) returned 1 Thread: id = 5020 os_tid = 0x1eac [0179.234] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json")) returned 0x2020 [0184.316] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0194.199] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1da8 [0194.200] GetFileSizeEx (in: hFile=0x1da8, lpFileSize=0x15d2f8f8 | out: lpFileSize=0x15d2f8f8*=312) returned 1 [0194.200] SetFilePointerEx (in: hFile=0x1da8, liDistanceToMove=0x134, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.200] ReadFile (in: hFile=0x1da8, lpBuffer=0x15d2f904, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x15d2f8e0, lpOverlapped=0x0 | out: lpBuffer=0x15d2f904*, lpNumberOfBytesRead=0x15d2f8e0*=0x4, lpOverlapped=0x0) returned 1 [0194.202] SetFilePointerEx (in: hFile=0x1da8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaf0 [0194.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49c18 [0194.202] NtQuerySystemTime (in: CurrentTime=0x15d2f880 | out: CurrentTime=0x15d2f880*=132471540621012000) returned 0x0 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x149cc441 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0xd02640b [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x88702c5 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x4203fd6d [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x761478a5 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x757e5627 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x5aa5d6eb [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x68c1461f [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x16686674 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x42eebc6e [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x77818e7c [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x5bbd81e8 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x33e50e81 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x56ddb939 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x377fd6e2 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x3dcbfa90 [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x30dda51b [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x2ff3d0aa [0194.202] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x709e70fb [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x48079041 [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x2e135b54 [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x311b8c8c [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x47b1dec1 [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x29a21719 [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x52c60922 [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x5df8a5be [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x30d6acfe [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x30941b9d [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x57071e38 [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x17c3b708 [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x3ff85a1a [0194.203] RtlRandomEx (in: Seed=0x15d2f878 | out: Seed=0x15d2f878) returned 0x126121c1 [0194.212] ReadFile (in: hFile=0x1da8, lpBuffer=0x14936cc8, nNumberOfBytesToRead=0x138, lpNumberOfBytesRead=0x15d2f874, lpOverlapped=0x0 | out: lpBuffer=0x14936cc8*, lpNumberOfBytesRead=0x15d2f874*=0x138, lpOverlapped=0x0) returned 1 [0194.213] SetFilePointerEx (in: hFile=0x1da8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.213] WriteFile (in: hFile=0x1da8, lpBuffer=0x1493a8d0*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x15d2f878, lpOverlapped=0x0 | out: lpBuffer=0x1493a8d0*, lpNumberOfBytesWritten=0x15d2f878*=0x138, lpOverlapped=0x0) returned 1 [0196.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428d0 [0196.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42880 [0196.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42880) returned 1 [0196.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1493a8d0) returned 1 [0196.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14936cc8) returned 1 [0196.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bbe0) returned 1 [0196.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4338) returned 1 [0196.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69960 [0196.244] SetFilePointerEx (in: hFile=0x1da8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.244] WriteFile (in: hFile=0x1da8, lpBuffer=0x81e0f70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x15d2f8ec, lpOverlapped=0x0 | out: lpBuffer=0x81e0f70*, lpNumberOfBytesWritten=0x15d2f8ec*=0x10c, lpOverlapped=0x0) returned 1 [0196.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0f70) returned 1 [0196.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69990) returned 1 [0196.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42880) returned 1 [0196.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69960) returned 1 [0196.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428d0) returned 1 [0196.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaf0) returned 1 [0196.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4abb8) returned 1 [0196.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5e0) returned 1 [0196.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d57278 [0196.630] wcscpy (in: _Dest=0x3d57278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" [0196.630] wcscat (in: _Dest=0x3d57278, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json.f0dbec" [0196.630] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json.f0dbec", NtPathName=0x15d2f870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ef9928 [0196.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9928) returned 1 [0196.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8a90) returned 1 [0196.880] NtQueryInformationFile (in: FileHandle=0x1da8, IoStatusBlock=0x15d2f848, FileInformation=0x15d2f850, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x15d2f848, FileInformation=0x15d2f850) returned 0x0 [0196.880] NtSetInformationFile (FileHandle=0x1da8, IoStatusBlock=0x15d2f848, FileInformation=0x15d2f850, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 [0197.085] FlushFileBuffers (hFile=0x1da8) returned 1 [0197.096] CloseHandle (hObject=0x1da8) returned 1 [0197.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d575f0 [0197.306] wcscpy (in: _Dest=0x3d575f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" [0197.306] wcscat (in: _Dest=0x3d575f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\F0DBEC-Readme.txt" [0197.306] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\f0dbec-readme.txt")) returned 0xffffffff [0197.306] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a84 [0197.468] WriteFile (in: hFile=0x2a84, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x15d2f894, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x15d2f894*=0x70c, lpOverlapped=0x0) returned 1 [0198.007] CloseHandle (hObject=0x2a84) returned 1 [0198.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0198.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188268) returned 1 Thread: id = 5021 os_tid = 0x1eb0 [0179.235] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020 [0182.302] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0189.921] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e4 [0190.307] GetFileSizeEx (in: hFile=0x16e4, lpFileSize=0x15e9fe98 | out: lpFileSize=0x15e9fe98*=233) returned 1 [0190.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420b0 [0190.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e70 [0190.307] NtQuerySystemTime (in: CurrentTime=0x15e9fe20 | out: CurrentTime=0x15e9fe20*=132471540582168000) returned 0x0 [0190.307] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x43115131 [0190.307] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x2a1ef47 [0190.307] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x40528bc0 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x192d51ab [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x730a9797 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x8ef834d [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x6f4848e5 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x13295755 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x54f2d9de [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0xf2a2380 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x41dcefe6 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x27ded27b [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x798d49fb [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x3321e350 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x2708ffff [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x381eb443 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x5724201f [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x6db01101 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x18337c58 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x5b9fa3ba [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x2e0d4296 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x52ff2601 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x241fa37c [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0xe69e6f0 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x58c70691 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x35aa6cd1 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x3e084be0 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x56431861 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0xb84ce6 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x3335c26d [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x1c9b3755 [0190.308] RtlRandomEx (in: Seed=0x15e9fe18 | out: Seed=0x15e9fe18) returned 0x500a1671 [0190.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0190.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cb0c0 [0190.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0190.316] ReadFile (in: hFile=0x16e4, lpBuffer=0x80cb0c0, nNumberOfBytesToRead=0xe9, lpNumberOfBytesRead=0x15e9fe14, lpOverlapped=0x0 | out: lpBuffer=0x80cb0c0*, lpNumberOfBytesRead=0x15e9fe14*=0xe9, lpOverlapped=0x0) returned 1 [0190.318] SetFilePointerEx (in: hFile=0x16e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.318] WriteFile (in: hFile=0x16e4, lpBuffer=0x80cecc8*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x15e9fe18, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesWritten=0x15e9fe18*=0xe9, lpOverlapped=0x0) returned 1 [0193.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1630 [0193.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0193.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0193.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0193.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cb0c0) returned 1 [0193.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e683a8) returned 1 [0193.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5f58) returned 1 [0193.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0193.061] SetFilePointerEx (in: hFile=0x16e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.061] WriteFile (in: hFile=0x16e4, lpBuffer=0x81e0480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x15e9fe8c, lpOverlapped=0x0 | out: lpBuffer=0x81e0480*, lpNumberOfBytesWritten=0x15e9fe8c*=0x10c, lpOverlapped=0x0) returned 1 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0480) returned 1 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420b0) returned 1 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e20) returned 1 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b50) returned 1 [0196.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84042f0 [0196.036] wcscpy (in: _Dest=0x84042f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" [0196.036] wcscat (in: _Dest=0x84042f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.f0dbec" [0196.036] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0x15e9fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef92c0 [0196.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef92c0) returned 1 [0196.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04d38) returned 1 [0196.493] NtQueryInformationFile (in: FileHandle=0x16e4, IoStatusBlock=0x15e9fde8, FileInformation=0x15e9fdf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x15e9fde8, FileInformation=0x15e9fdf0) returned 0x0 [0196.493] NtSetInformationFile (FileHandle=0x16e4, IoStatusBlock=0x15e9fde8, FileInformation=0x15e9fdf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84042f0) returned 1 [0196.778] FlushFileBuffers (hFile=0x16e4) returned 1 [0196.784] CloseHandle (hObject=0x16e4) returned 1 [0197.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81efae8 [0197.023] wcscpy (in: _Dest=0x81efae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" [0197.023] wcscat (in: _Dest=0x81efae8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\F0DBEC-Readme.txt" [0197.023] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0197.023] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1718 [0197.438] WriteFile (in: hFile=0x1718, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x15e9fe34, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x15e9fe34*=0x70c, lpOverlapped=0x0) returned 1 [0197.829] CloseHandle (hObject=0x1718) returned 1 [0197.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efae8) returned 1 [0197.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 Thread: id = 5022 os_tid = 0x1eb4 [0179.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html")) returned 0x20 [0179.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0179.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.237] GetLastError () returned 0x5 [0179.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0179.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8f08) returned 1 Thread: id = 5023 os_tid = 0x1eb8 [0179.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html")) returned 0x20 [0179.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0179.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.244] GetLastError () returned 0x5 [0179.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0179.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1b58) returned 1 Thread: id = 5024 os_tid = 0x1ebc [0179.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html")) returned 0x20 [0179.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0179.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.248] GetLastError () returned 0x5 [0179.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0179.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 5025 os_tid = 0x1ec0 [0179.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html")) returned 0x20 [0179.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0179.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.250] GetLastError () returned 0x5 [0179.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0179.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1d08) returned 1 Thread: id = 5026 os_tid = 0x1ec8 [0179.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js")) returned 0x20 [0179.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0179.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.255] GetLastError () returned 0x5 [0179.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0179.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 5027 os_tid = 0x1fbc [0179.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css")) returned 0x20 [0179.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0179.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.257] GetLastError () returned 0x5 [0179.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0179.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8fe8) returned 1 Thread: id = 5028 os_tid = 0x2030 [0179.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html")) returned 0x20 [0179.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0179.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.259] GetLastError () returned 0x5 [0179.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0179.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c91a8) returned 1 Thread: id = 5029 os_tid = 0x2034 [0179.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html")) returned 0x20 [0179.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0179.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.261] GetLastError () returned 0x5 [0179.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0179.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 Thread: id = 5030 os_tid = 0x22b0 [0179.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html")) returned 0x20 [0179.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0179.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.268] GetLastError () returned 0x5 [0179.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0179.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b9e0) returned 1 Thread: id = 5031 os_tid = 0x22b4 [0179.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html")) returned 0x20 [0179.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0179.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.282] GetLastError () returned 0x5 [0179.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0179.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c90c8) returned 1 Thread: id = 5032 os_tid = 0x22b8 [0179.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x81f00d8 [0179.287] wcscpy (in: _Dest=0x81f00d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0179.287] wcscat (in: _Dest=0x81f00d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0179.287] wcscat (in: _Dest=0x81f00d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*" [0179.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0aac8 [0179.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099010 [0182.345] wcscmp (_String1=".", _String2=".") returned 0 [0182.345] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.363] wcscmp (_String1="..", _String2=".") returned 1 [0182.363] wcscmp (_String1="..", _String2="..") returned 0 [0182.363] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0182.363] wcscmp (_String1="Adobe.css", _String2=".") returned 1 [0182.364] wcscmp (_String1="Adobe.css", _String2="..") returned 1 [0182.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8aa8 [0182.365] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0182.365] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0182.365] wcscat (in: _Dest=0x2c8aa8, _Source="Adobe.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" [0187.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0187.830] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8584e390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1 [0187.830] wcscmp (_String1="Americana", _String2=".") returned 1 [0187.830] wcscmp (_String1="Americana", _String2="..") returned 1 [0187.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9a68 [0187.830] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.830] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.830] wcscat (in: _Dest=0x2c9a68, _Source="Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0187.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0187.831] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1 [0187.831] wcscmp (_String1="Americana.css", _String2=".") returned 1 [0187.831] wcscmp (_String1="Americana.css", _String2="..") returned 1 [0187.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3b558 [0187.832] wcscpy (in: _Dest=0x3e3b558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.832] wcscat (in: _Dest=0x3e3b558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.832] wcscat (in: _Dest=0x3e3b558, _Source="Americana.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" [0187.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0187.833] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85dcf670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0187.833] wcscmp (_String1="BabyBlue", _String2=".") returned 1 [0187.833] wcscmp (_String1="BabyBlue", _String2="..") returned 1 [0187.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f1de0 [0187.833] wcscpy (in: _Dest=0x81f1de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.833] wcscat (in: _Dest=0x81f1de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.833] wcscat (in: _Dest=0x81f1de0, _Source="BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0187.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f1de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0187.835] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x100d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0187.835] wcscmp (_String1="BabyBlue.css", _String2=".") returned 1 [0187.835] wcscmp (_String1="BabyBlue.css", _String2="..") returned 1 [0187.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c98a8 [0187.835] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.835] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.835] wcscat (in: _Dest=0x2c98a8, _Source="BabyBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" [0187.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0187.837] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76c80030, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86a28890, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0187.837] wcscmp (_String1="Biscay", _String2=".") returned 1 [0187.837] wcscmp (_String1="Biscay", _String2="..") returned 1 [0187.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1eb8 [0187.837] wcscpy (in: _Dest=0x81f1eb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.837] wcscat (in: _Dest=0x81f1eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.837] wcscat (in: _Dest=0x81f1eb8, _Source="Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0187.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f1eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0187.838] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0187.838] wcscmp (_String1="Biscay.css", _String2=".") returned 1 [0187.838] wcscmp (_String1="Biscay.css", _String2="..") returned 1 [0187.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c96e8 [0187.839] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.839] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.839] wcscat (in: _Dest=0x2c96e8, _Source="Biscay.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" [0187.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d8 [0187.840] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1 [0187.840] wcscmp (_String1="BrightOrange", _String2=".") returned 1 [0187.840] wcscmp (_String1="BrightOrange", _String2="..") returned 1 [0187.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81f5648 [0187.841] wcscpy (in: _Dest=0x81f5648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.841] wcscat (in: _Dest=0x81f5648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.841] wcscat (in: _Dest=0x81f5648, _Source="BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0187.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0187.842] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1 [0187.842] wcscmp (_String1="BrightOrange.css", _String2=".") returned 1 [0187.842] wcscmp (_String1="BrightOrange.css", _String2="..") returned 1 [0187.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a8a8 [0187.842] wcscpy (in: _Dest=0x3e3a8a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.842] wcscat (in: _Dest=0x3e3a8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.843] wcscat (in: _Dest=0x3e3a8a8, _Source="BrightOrange.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" [0187.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0187.859] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1 [0187.859] wcscmp (_String1="BrightYellow", _String2=".") returned 1 [0187.859] wcscmp (_String1="BrightYellow", _String2="..") returned 1 [0187.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81f5728 [0187.860] wcscpy (in: _Dest=0x81f5728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.860] wcscat (in: _Dest=0x81f5728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.860] wcscat (in: _Dest=0x81f5728, _Source="BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0187.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0187.872] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1074, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1 [0187.872] wcscmp (_String1="BrightYellow.css", _String2=".") returned 1 [0187.872] wcscmp (_String1="BrightYellow.css", _String2="..") returned 1 [0187.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a168 [0187.873] wcscpy (in: _Dest=0x3e3a168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.873] wcscat (in: _Dest=0x3e3a168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.873] wcscat (in: _Dest=0x3e3a168, _Source="BrightYellow.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" [0187.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0187.874] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0187.874] wcscmp (_String1="Casual.css", _String2=".") returned 1 [0187.874] wcscmp (_String1="Casual.css", _String2="..") returned 1 [0187.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81f5808 [0187.875] wcscpy (in: _Dest=0x81f5808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.875] wcscat (in: _Dest=0x81f5808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.875] wcscat (in: _Dest=0x81f5808, _Source="Casual.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" [0187.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0187.877] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cd6150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0187.877] wcscmp (_String1="Country.css", _String2=".") returned 1 [0187.877] wcscmp (_String1="Country.css", _String2="..") returned 1 [0187.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81f58e8 [0187.877] wcscpy (in: _Dest=0x81f58e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.877] wcscat (in: _Dest=0x81f58e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.877] wcscat (in: _Dest=0x81f58e8, _Source="Country.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" [0187.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f58e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0187.878] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7718eef0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876357f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0187.878] wcscmp (_String1="Desert", _String2=".") returned 1 [0187.878] wcscmp (_String1="Desert", _String2="..") returned 1 [0187.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2800 [0187.879] wcscpy (in: _Dest=0x81f2800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.879] wcscat (in: _Dest=0x81f2800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.879] wcscat (in: _Dest=0x81f2800, _Source="Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0187.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f2800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0187.880] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0187.880] wcscmp (_String1="Desert.css", _String2=".") returned 1 [0187.880] wcscmp (_String1="Desert.css", _String2="..") returned 1 [0187.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81f59c8 [0187.880] wcscpy (in: _Dest=0x81f59c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.880] wcscat (in: _Dest=0x81f59c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.880] wcscat (in: _Dest=0x81f59c8, _Source="Desert.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" [0187.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f59c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08 [0187.882] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x773a4230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x72e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0187.882] wcscmp (_String1="Earthy.css", _String2=".") returned 1 [0187.882] wcscmp (_String1="Earthy.css", _String2="..") returned 1 [0187.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81f5aa8 [0187.882] wcscpy (in: _Dest=0x81f5aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.882] wcscat (in: _Dest=0x81f5aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.882] wcscat (in: _Dest=0x81f5aa8, _Source="Earthy.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" [0187.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f5aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0187.884] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c7c7d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88777770, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1 [0187.884] wcscmp (_String1="GrayCheck", _String2=".") returned 1 [0187.884] wcscmp (_String1="GrayCheck", _String2="..") returned 1 [0187.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81f5b88 [0187.884] wcscpy (in: _Dest=0x81f5b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.884] wcscat (in: _Dest=0x81f5b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.884] wcscat (in: _Dest=0x81f5b88, _Source="GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0187.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34 [0187.885] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xeb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1 [0187.885] wcscmp (_String1="GrayCheck.css", _String2=".") returned 1 [0187.886] wcscmp (_String1="GrayCheck.css", _String2="..") returned 1 [0187.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3ac48 [0187.886] wcscpy (in: _Dest=0x3e3ac48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.886] wcscat (in: _Dest=0x3e3ac48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.886] wcscat (in: _Dest=0x3e3ac48, _Source="GrayCheck.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" [0187.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ac48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x282c [0187.887] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x762, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0187.888] wcscmp (_String1="GreenTea.css", _String2=".") returned 1 [0187.888] wcscmp (_String1="GreenTea.css", _String2="..") returned 1 [0187.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81f5c68 [0187.888] wcscpy (in: _Dest=0x81f5c68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.888] wcscat (in: _Dest=0x81f5c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.888] wcscat (in: _Dest=0x81f5c68, _Source="GreenTea.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" [0187.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f5c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b58 [0187.889] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1 [0187.889] wcscmp (_String1="LightSpirit.css", _String2=".") returned 1 [0187.889] wcscmp (_String1="LightSpirit.css", _String2="..") returned 1 [0187.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3ad30 [0187.890] wcscpy (in: _Dest=0x3e3ad30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.890] wcscat (in: _Dest=0x3e3ad30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.890] wcscat (in: _Dest=0x3e3ad30, _Source="LightSpirit.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" [0187.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ad30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26bc [0187.891] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8be11010, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0187.891] wcscmp (_String1="Lime", _String2=".") returned 1 [0187.891] wcscmp (_String1="Lime", _String2="..") returned 1 [0187.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x81f0688 [0187.891] wcscpy (in: _Dest=0x81f0688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.891] wcscat (in: _Dest=0x81f0688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.891] wcscat (in: _Dest=0x81f0688, _Source="Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0187.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f0688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0187.893] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1091, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0187.893] wcscmp (_String1="Lime.css", _String2=".") returned 1 [0187.893] wcscmp (_String1="Lime.css", _String2="..") returned 1 [0187.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f28d8 [0187.893] wcscpy (in: _Dest=0x81f28d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0187.893] wcscat (in: _Dest=0x81f28d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0187.893] wcscat (in: _Dest=0x81f28d8, _Source="Lime.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" [0187.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f28d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0188.148] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f2b1870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0188.148] wcscmp (_String1="Maroon.css", _String2=".") returned 1 [0188.148] wcscmp (_String1="Maroon.css", _String2="..") returned 1 [0188.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81f6448 [0188.148] wcscpy (in: _Dest=0x81f6448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.148] wcscat (in: _Dest=0x81f6448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.148] wcscat (in: _Dest=0x81f6448, _Source="Maroon.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" [0188.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f6448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a04 [0188.345] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81287eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e3dad50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0188.345] wcscmp (_String1="Oasis", _String2=".") returned 1 [0188.345] wcscmp (_String1="Oasis", _String2="..") returned 1 [0188.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f2f98 [0188.345] wcscpy (in: _Dest=0x81f2f98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.345] wcscat (in: _Dest=0x81f2f98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.345] wcscat (in: _Dest=0x81f2f98, _Source="Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0188.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f2f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0188.346] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0188.346] wcscmp (_String1="Oasis.css", _String2=".") returned 1 [0188.346] wcscmp (_String1="Oasis.css", _String2="..") returned 1 [0188.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81f6608 [0188.346] wcscpy (in: _Dest=0x81f6608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.347] wcscat (in: _Dest=0x81f6608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.347] wcscat (in: _Dest=0x81f6608, _Source="Oasis.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" [0188.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f6608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0188.348] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1 [0188.348] wcscmp (_String1="OliveGreen.css", _String2=".") returned 1 [0188.348] wcscmp (_String1="OliveGreen.css", _String2="..") returned 1 [0188.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3b728 [0188.348] wcscpy (in: _Dest=0x3e3b728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.348] wcscat (in: _Dest=0x3e3b728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.348] wcscat (in: _Dest=0x3e3b728, _Source="OliveGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" [0188.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0188.349] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x902a69f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x706, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0188.349] wcscmp (_String1="Premium.css", _String2=".") returned 1 [0188.349] wcscmp (_String1="Premium.css", _String2="..") returned 1 [0188.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81f66e8 [0188.350] wcscpy (in: _Dest=0x81f66e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.350] wcscat (in: _Dest=0x81f66e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.350] wcscat (in: _Dest=0x81f66e8, _Source="Premium.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" [0188.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f66e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0188.351] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82592eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90507ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0188.351] wcscmp (_String1="Slate", _String2=".") returned 1 [0188.351] wcscmp (_String1="Slate", _String2="..") returned 1 [0188.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f3070 [0188.352] wcscpy (in: _Dest=0x81f3070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.352] wcscat (in: _Dest=0x81f3070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.352] wcscat (in: _Dest=0x81f3070, _Source="Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0188.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0188.353] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0188.353] wcscmp (_String1="Slate.css", _String2=".") returned 1 [0188.353] wcscmp (_String1="Slate.css", _String2="..") returned 1 [0188.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81f67c8 [0188.353] wcscpy (in: _Dest=0x81f67c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.353] wcscat (in: _Dest=0x81f67c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.353] wcscat (in: _Dest=0x81f67c8, _Source="Slate.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" [0188.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f67c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0188.355] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1 [0188.355] wcscmp (_String1="SlateBlue.css", _String2=".") returned 1 [0188.355] wcscmp (_String1="SlateBlue.css", _String2="..") returned 1 [0188.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e39dc8 [0188.355] wcscpy (in: _Dest=0x3e39dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.355] wcscat (in: _Dest=0x3e39dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.355] wcscat (in: _Dest=0x3e39dc8, _Source="SlateBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" [0188.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0188.356] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x826776f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x905c66d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0188.357] wcscmp (_String1="SoftBlue", _String2=".") returned 1 [0188.357] wcscmp (_String1="SoftBlue", _String2="..") returned 1 [0188.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f3148 [0188.357] wcscpy (in: _Dest=0x81f3148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.357] wcscat (in: _Dest=0x81f3148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.357] wcscat (in: _Dest=0x81f3148, _Source="SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0188.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f3148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0188.358] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826776f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x11ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0188.358] wcscmp (_String1="SoftBlue.css", _String2=".") returned 1 [0188.358] wcscmp (_String1="SoftBlue.css", _String2="..") returned 1 [0188.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x81f68a8 [0188.358] wcscpy (in: _Dest=0x81f68a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.358] wcscat (in: _Dest=0x81f68a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.358] wcscat (in: _Dest=0x81f68a8, _Source="SoftBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" [0188.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0188.360] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8269d850, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1 [0188.360] wcscmp (_String1="SpringGreen", _String2=".") returned 1 [0188.360] wcscmp (_String1="SpringGreen", _String2="..") returned 1 [0188.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81f6988 [0188.360] wcscpy (in: _Dest=0x81f6988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.360] wcscat (in: _Dest=0x81f6988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.360] wcscat (in: _Dest=0x81f6988, _Source="SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0188.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f6988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x157c [0188.362] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1 [0188.362] wcscmp (_String1="SpringGreen.css", _String2=".") returned 1 [0188.362] wcscmp (_String1="SpringGreen.css", _String2="..") returned 1 [0188.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3af00 [0188.362] wcscpy (in: _Dest=0x3e3af00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.362] wcscat (in: _Dest=0x3e3af00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.362] wcscat (in: _Dest=0x3e3af00, _Source="SpringGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" [0188.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3af00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0188.363] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xadd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0188.890] wcscmp (_String1="Sts.css", _String2=".") returned 1 [0188.890] wcscmp (_String1="Sts.css", _String2="..") returned 1 [0188.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e65a28 [0188.890] wcscpy (in: _Dest=0x3e65a28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.890] wcscat (in: _Dest=0x3e65a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.890] wcscat (in: _Dest=0x3e65a28, _Source="Sts.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" [0188.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0188.909] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8270fc70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906d1070, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0188.909] wcscmp (_String1="STS2", _String2=".") returned 1 [0188.909] wcscmp (_String1="STS2", _String2="..") returned 1 [0188.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x81f04e8 [0188.909] wcscpy (in: _Dest=0x81f04e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.909] wcscat (in: _Dest=0x81f04e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.909] wcscat (in: _Dest=0x81f04e8, _Source="STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0188.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x81f04e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d20 [0188.911] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0188.911] wcscmp (_String1="Sts2.css", _String2=".") returned 1 [0188.911] wcscmp (_String1="Sts2.css", _String2="..") returned 1 [0188.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e656c8 [0188.911] wcscpy (in: _Dest=0x3e656c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.911] wcscat (in: _Dest=0x3e656c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.911] wcscat (in: _Dest=0x3e656c8, _Source="Sts2.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" [0188.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e656c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c84 [0188.912] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8275bf30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906f71d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0188.912] wcscmp (_String1="Swirl", _String2=".") returned 1 [0188.912] wcscmp (_String1="Swirl", _String2="..") returned 1 [0188.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e64438 [0188.912] wcscpy (in: _Dest=0x3e64438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.913] wcscat (in: _Dest=0x3e64438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.913] wcscat (in: _Dest=0x3e64438, _Source="Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0188.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x3e64438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444 [0188.914] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0188.914] wcscmp (_String1="Swirl.css", _String2=".") returned 1 [0188.914] wcscmp (_String1="Swirl.css", _String2="..") returned 1 [0188.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x81f6b48 [0188.914] wcscpy (in: _Dest=0x81f6b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.914] wcscat (in: _Dest=0x81f6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.914] wcscat (in: _Dest=0x81f6b48, _Source="Swirl.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" [0188.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0188.915] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90743490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0188.915] wcscmp (_String1="Teal.css", _String2=".") returned 1 [0188.916] wcscmp (_String1="Teal.css", _String2="..") returned 1 [0188.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e65950 [0188.916] wcscpy (in: _Dest=0x3e65950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.916] wcscat (in: _Dest=0x3e65950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.916] wcscat (in: _Dest=0x3e65950, _Source="Teal.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" [0188.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e65950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0188.917] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1 [0188.917] wcscmp (_String1="TexturedBlue.css", _String2=".") returned 1 [0188.917] wcscmp (_String1="TexturedBlue.css", _String2="..") returned 1 [0188.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b0d0 [0188.917] wcscpy (in: _Dest=0x3e3b0d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.917] wcscat (in: _Dest=0x3e3b0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.917] wcscat (in: _Dest=0x3e3b0d0, _Source="TexturedBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" [0188.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0188.919] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1 [0188.919] wcscmp (_String1="VelvetRose.css", _String2=".") returned 1 [0188.919] wcscmp (_String1="VelvetRose.css", _String2="..") returned 1 [0188.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3aa78 [0188.919] wcscpy (in: _Dest=0x3e3aa78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0188.919] wcscat (in: _Dest=0x3e3aa78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0188.919] wcscat (in: _Dest=0x3e3aa78, _Source="VelvetRose.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" [0188.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3aa78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d18 [0188.920] FindNextFileW (in: hFindFile=0x8099010, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0 [0189.299] FindClose (in: hFindFile=0x8099010 | out: hFindFile=0x8099010) returned 1 [0189.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0aac8) returned 1 [0189.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f00d8) returned 1 [0189.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6840) returned 1 Thread: id = 5033 os_tid = 0x22bc [0179.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm")) returned 0x20 [0179.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0179.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.294] GetLastError () returned 0x5 [0179.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0179.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 5034 os_tid = 0x22c0 [0179.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg")) returned 0x20 [0179.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0179.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.297] GetLastError () returned 0x5 [0179.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0179.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 Thread: id = 5035 os_tid = 0x22c4 [0179.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0179.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0179.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.299] GetLastError () returned 0x5 [0179.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0179.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021aa0) returned 1 Thread: id = 5036 os_tid = 0x22c8 [0179.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html")) returned 0x20 [0179.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0179.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.301] GetLastError () returned 0x5 [0179.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0179.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f18d0) returned 1 Thread: id = 5037 os_tid = 0x22cc [0179.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html")) returned 0x20 [0179.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0179.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.303] GetLastError () returned 0x5 [0179.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0179.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 Thread: id = 5038 os_tid = 0x22d0 [0179.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg")) returned 0x20 [0179.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0179.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.305] GetLastError () returned 0x5 [0179.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0179.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f19a8) returned 1 Thread: id = 5039 os_tid = 0x22d4 [0179.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js")) returned 0x20 [0179.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js", dwFileAttributes=0x20) returned 0 [0179.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.307] GetLastError () returned 0x5 [0179.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js", dwFileAttributes=0x20) returned 0 [0179.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6b60) returned 1 Thread: id = 5040 os_tid = 0x22d8 [0179.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif")) returned 0x20 [0179.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0179.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.313] GetLastError () returned 0x5 [0179.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0179.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6908) returned 1 Thread: id = 5041 os_tid = 0x22dc [0179.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif")) returned 0x20 [0179.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0179.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.316] GetLastError () returned 0x5 [0179.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0179.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1a80) returned 1 Thread: id = 5042 os_tid = 0x22e0 [0179.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js")) returned 0x20 [0179.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0179.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.318] GetLastError () returned 0x5 [0179.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0179.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f17f8) returned 1 Thread: id = 5043 os_tid = 0x22e4 [0179.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif")) returned 0x20 [0179.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0179.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.552] GetLastError () returned 0x5 [0179.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0179.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1c30) returned 1 Thread: id = 5044 os_tid = 0x22e8 [0179.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f62a8 [0179.554] wcscpy (in: _Dest=0x81f62a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" [0179.555] wcscat (in: _Dest=0x81f62a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" [0179.555] wcscat (in: _Dest=0x81f62a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*" [0179.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8090e18 [0179.555] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*", lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37618 [0184.329] wcscmp (_String1=".", _String2=".") returned 0 [0184.329] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.329] wcscmp (_String1="..", _String2=".") returned 1 [0184.329] wcscmp (_String1="..", _String2="..") returned 0 [0184.329] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.330] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.330] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x83ee740 [0184.330] wcscpy (in: _Dest=0x83ee740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" [0184.330] wcscat (in: _Dest=0x83ee740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" [0184.330] wcscat (in: _Dest=0x83ee740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" [0185.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0185.454] FindNextFileW (in: hFindFile=0x3f37618, lpFindFileData=0x8090e18 | out: lpFindFileData=0x8090e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.454] FindClose (in: hFindFile=0x3f37618 | out: hFindFile=0x3f37618) returned 1 [0185.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8090e18) returned 1 [0185.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f62a8) returned 1 [0185.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a4e0) returned 1 Thread: id = 5045 os_tid = 0x22ec [0179.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f5858 [0179.556] wcscpy (in: _Dest=0x81f5858, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" [0179.556] wcscat (in: _Dest=0x81f5858, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" [0179.556] wcscat (in: _Dest=0x81f5858, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*" [0179.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80917b8 [0179.556] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*", lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0184.359] wcscmp (_String1=".", _String2=".") returned 0 [0184.359] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.359] wcscmp (_String1="..", _String2=".") returned 1 [0184.359] wcscmp (_String1="..", _String2="..") returned 0 [0184.359] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.359] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.359] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a59d0 [0184.359] wcscpy (in: _Dest=0x148a59d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" [0184.359] wcscat (in: _Dest=0x148a59d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" [0184.359] wcscat (in: _Dest=0x148a59d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" [0185.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a59d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0185.511] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x80917b8 | out: lpFindFileData=0x80917b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.511] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0185.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80917b8) returned 1 [0185.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5858) returned 1 [0185.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27c40) returned 1 Thread: id = 5046 os_tid = 0x22f0 [0179.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f5750 [0179.556] wcscpy (in: _Dest=0x81f5750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" [0179.557] wcscat (in: _Dest=0x81f5750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" [0179.557] wcscat (in: _Dest=0x81f5750, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*" [0179.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ee50 [0179.557] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*", lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a18 [0184.328] wcscmp (_String1=".", _String2=".") returned 0 [0184.328] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.328] wcscmp (_String1="..", _String2=".") returned 1 [0184.328] wcscmp (_String1="..", _String2="..") returned 0 [0184.328] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.328] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.328] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x83ee618 [0184.328] wcscpy (in: _Dest=0x83ee618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" [0184.328] wcscat (in: _Dest=0x83ee618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" [0184.328] wcscat (in: _Dest=0x83ee618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" [0185.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ee618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0185.451] FindNextFileW (in: hFindFile=0x3f37a18, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.452] FindClose (in: hFindFile=0x3f37a18 | out: hFindFile=0x3f37a18) returned 1 [0185.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ee50) returned 1 [0185.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5750) returned 1 [0185.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3c78) returned 1 Thread: id = 5047 os_tid = 0x22f4 [0179.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81f7430 [0179.557] wcscpy (in: _Dest=0x81f7430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" [0179.557] wcscat (in: _Dest=0x81f7430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" [0179.557] wcscat (in: _Dest=0x81f7430, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*" [0179.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ebe8 [0179.558] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*", lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37558 [0184.357] wcscmp (_String1=".", _String2=".") returned 0 [0184.357] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.358] wcscmp (_String1="..", _String2=".") returned 1 [0184.358] wcscmp (_String1="..", _String2="..") returned 0 [0184.358] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.358] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.358] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x148a58a8 [0184.358] wcscpy (in: _Dest=0x148a58a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" [0184.358] wcscat (in: _Dest=0x148a58a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" [0184.358] wcscat (in: _Dest=0x148a58a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" [0185.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a58a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0185.509] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.509] FindClose (in: hFindFile=0x3f37558 | out: hFindFile=0x3f37558) returned 1 [0185.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ebe8) returned 1 [0185.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7430) returned 1 [0185.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb960) returned 1 Thread: id = 5048 os_tid = 0x22f8 [0179.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f5648 [0179.558] wcscpy (in: _Dest=0x81f5648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" [0179.558] wcscat (in: _Dest=0x81f5648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" [0179.558] wcscat (in: _Dest=0x81f5648, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*" [0179.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e980 [0179.558] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*", lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37918 [0184.327] wcscmp (_String1=".", _String2=".") returned 0 [0184.327] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.327] wcscmp (_String1="..", _String2=".") returned 1 [0184.327] wcscmp (_String1="..", _String2="..") returned 0 [0184.327] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4227000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.327] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.327] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x83ee4f0 [0184.327] wcscpy (in: _Dest=0x83ee4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" [0184.327] wcscat (in: _Dest=0x83ee4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" [0184.327] wcscat (in: _Dest=0x83ee4f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" [0185.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ee4f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0185.449] FindNextFileW (in: hFindFile=0x3f37918, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4227000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.449] FindClose (in: hFindFile=0x3f37918 | out: hFindFile=0x3f37918) returned 1 [0185.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e980) returned 1 [0185.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5648) returned 1 [0185.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a5e0) returned 1 Thread: id = 5049 os_tid = 0x22fc [0179.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f7328 [0179.559] wcscpy (in: _Dest=0x81f7328, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" [0179.559] wcscat (in: _Dest=0x81f7328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" [0179.559] wcscat (in: _Dest=0x81f7328, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*" [0179.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e4b0 [0179.559] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*", lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f379d8 [0184.325] wcscmp (_String1=".", _String2=".") returned 0 [0184.325] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.326] wcscmp (_String1="..", _String2=".") returned 1 [0184.326] wcscmp (_String1="..", _String2="..") returned 0 [0184.326] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.326] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.326] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x83ee3c8 [0184.326] wcscpy (in: _Dest=0x83ee3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" [0184.326] wcscat (in: _Dest=0x83ee3c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" [0184.326] wcscat (in: _Dest=0x83ee3c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" [0185.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ee3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0185.446] FindNextFileW (in: hFindFile=0x3f379d8, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.446] FindClose (in: hFindFile=0x3f379d8 | out: hFindFile=0x3f379d8) returned 1 [0185.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e4b0) returned 1 [0185.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7328) returned 1 [0185.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a6e0) returned 1 Thread: id = 5050 os_tid = 0x2300 [0179.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f7220 [0179.560] wcscpy (in: _Dest=0x81f7220, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" [0179.560] wcscat (in: _Dest=0x81f7220, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" [0179.560] wcscat (in: _Dest=0x81f7220, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*" [0179.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80614d0 [0179.560] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*", lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b18 [0184.324] wcscmp (_String1=".", _String2=".") returned 0 [0184.324] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.324] wcscmp (_String1="..", _String2=".") returned 1 [0184.324] wcscmp (_String1="..", _String2="..") returned 0 [0184.324] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.324] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.324] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x83ee2a0 [0184.325] wcscpy (in: _Dest=0x83ee2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" [0184.325] wcscat (in: _Dest=0x83ee2a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" [0184.325] wcscat (in: _Dest=0x83ee2a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" [0185.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ee2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b7c [0185.444] FindNextFileW (in: hFindFile=0x3f37b18, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.444] FindClose (in: hFindFile=0x3f37b18 | out: hFindFile=0x3f37b18) returned 1 [0185.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80614d0) returned 1 [0185.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7220) returned 1 [0185.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a7e0) returned 1 Thread: id = 5051 os_tid = 0x2304 [0179.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f7118 [0179.561] wcscpy (in: _Dest=0x81f7118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" [0179.561] wcscat (in: _Dest=0x81f7118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" [0179.561] wcscat (in: _Dest=0x81f7118, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*" [0179.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e718 [0179.561] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*", lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37b98 [0184.323] wcscmp (_String1=".", _String2=".") returned 0 [0184.323] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.323] wcscmp (_String1="..", _String2=".") returned 1 [0184.323] wcscmp (_String1="..", _String2="..") returned 0 [0184.323] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.323] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.323] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x83ee178 [0184.323] wcscpy (in: _Dest=0x83ee178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" [0184.323] wcscat (in: _Dest=0x83ee178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" [0184.324] wcscat (in: _Dest=0x83ee178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" [0185.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ee178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0185.441] FindNextFileW (in: hFindFile=0x3f37b98, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.441] FindClose (in: hFindFile=0x3f37b98 | out: hFindFile=0x3f37b98) returned 1 [0185.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e718) returned 1 [0185.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7118) returned 1 [0185.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a8e0) returned 1 Thread: id = 5052 os_tid = 0x2308 [0179.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f7010 [0179.562] wcscpy (in: _Dest=0x81f7010, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" [0179.562] wcscat (in: _Dest=0x81f7010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" [0179.562] wcscat (in: _Dest=0x81f7010, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*" [0179.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f0b8 [0179.562] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*", lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d58 [0184.322] wcscmp (_String1=".", _String2=".") returned 0 [0184.322] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.322] wcscmp (_String1="..", _String2=".") returned 1 [0184.322] wcscmp (_String1="..", _String2="..") returned 0 [0184.322] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.322] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.322] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x83ee050 [0184.322] wcscpy (in: _Dest=0x83ee050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" [0184.322] wcscat (in: _Dest=0x83ee050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" [0184.322] wcscat (in: _Dest=0x83ee050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" [0185.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ee050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28fc [0185.439] FindNextFileW (in: hFindFile=0x3f37d58, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.439] FindClose (in: hFindFile=0x3f37d58 | out: hFindFile=0x3f37d58) returned 1 [0185.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f0b8) returned 1 [0185.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7010) returned 1 [0185.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805a9e0) returned 1 Thread: id = 5053 os_tid = 0x230c [0179.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f6f08 [0179.563] wcscpy (in: _Dest=0x81f6f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" [0179.563] wcscat (in: _Dest=0x81f6f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" [0179.563] wcscat (in: _Dest=0x81f6f08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*" [0179.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f320 [0179.563] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*", lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37ad8 [0184.356] wcscmp (_String1=".", _String2=".") returned 0 [0184.356] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.356] wcscmp (_String1="..", _String2=".") returned 1 [0184.356] wcscmp (_String1="..", _String2="..") returned 0 [0184.356] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.356] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.356] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a5780 [0184.357] wcscpy (in: _Dest=0x148a5780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" [0184.357] wcscat (in: _Dest=0x148a5780, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" [0184.357] wcscat (in: _Dest=0x148a5780, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" [0185.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a5780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0185.506] FindNextFileW (in: hFindFile=0x3f37ad8, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.506] FindClose (in: hFindFile=0x3f37ad8 | out: hFindFile=0x3f37ad8) returned 1 [0185.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f320) returned 1 [0185.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6f08) returned 1 [0185.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805aae0) returned 1 Thread: id = 5054 os_tid = 0x2310 [0179.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f6cf8 [0179.564] wcscpy (in: _Dest=0x81f6cf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" [0179.564] wcscat (in: _Dest=0x81f6cf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" [0179.564] wcscat (in: _Dest=0x81f6cf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*" [0179.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f588 [0179.564] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*", lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37c58 [0184.320] wcscmp (_String1=".", _String2=".") returned 0 [0184.320] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.320] wcscmp (_String1="..", _String2=".") returned 1 [0184.320] wcscmp (_String1="..", _String2="..") returned 0 [0184.320] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.320] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.320] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x83edf28 [0184.320] wcscpy (in: _Dest=0x83edf28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" [0184.320] wcscat (in: _Dest=0x83edf28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" [0184.320] wcscat (in: _Dest=0x83edf28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" [0185.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83edf28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0185.437] FindNextFileW (in: hFindFile=0x3f37c58, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.437] FindClose (in: hFindFile=0x3f37c58 | out: hFindFile=0x3f37c58) returned 1 [0185.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f588) returned 1 [0185.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6cf8) returned 1 [0185.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805abe0) returned 1 Thread: id = 5055 os_tid = 0x2314 [0179.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81f5f90 [0179.564] wcscpy (in: _Dest=0x81f5f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" [0179.565] wcscat (in: _Dest=0x81f5f90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" [0179.565] wcscat (in: _Dest=0x81f5f90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*" [0179.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f7f0 [0179.565] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*", lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38198 [0184.318] wcscmp (_String1=".", _String2=".") returned 0 [0184.318] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.319] wcscmp (_String1="..", _String2=".") returned 1 [0184.319] wcscmp (_String1="..", _String2="..") returned 0 [0184.319] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.319] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.319] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x83ede00 [0184.319] wcscpy (in: _Dest=0x83ede00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" [0184.319] wcscat (in: _Dest=0x83ede00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" [0184.319] wcscat (in: _Dest=0x83ede00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" [0185.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83ede00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0185.435] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.435] FindClose (in: hFindFile=0x3f38198 | out: hFindFile=0x3f38198) returned 1 [0185.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f7f0) returned 1 [0185.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5f90) returned 1 [0185.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ace0) returned 1 Thread: id = 5056 os_tid = 0x2318 [0179.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81ecbf0 [0179.565] wcscpy (in: _Dest=0x81ecbf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" [0179.566] wcscat (in: _Dest=0x81ecbf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" [0179.566] wcscat (in: _Dest=0x81ecbf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*" [0179.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805fa58 [0179.566] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*", lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f381d8 [0184.355] wcscmp (_String1=".", _String2=".") returned 0 [0184.355] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.355] wcscmp (_String1="..", _String2=".") returned 1 [0184.355] wcscmp (_String1="..", _String2="..") returned 0 [0184.355] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.355] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.355] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a5658 [0184.355] wcscpy (in: _Dest=0x148a5658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" [0184.355] wcscat (in: _Dest=0x148a5658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" [0184.355] wcscat (in: _Dest=0x148a5658, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" [0185.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a5658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0185.503] FindNextFileW (in: hFindFile=0x3f381d8, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.503] FindClose (in: hFindFile=0x3f381d8 | out: hFindFile=0x3f381d8) returned 1 [0185.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805fa58) returned 1 [0185.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecbf0) returned 1 [0185.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ade0) returned 1 Thread: id = 5057 os_tid = 0x23a8 [0179.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x81eccf8 [0179.574] wcscpy (in: _Dest=0x81eccf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" [0179.574] wcscat (in: _Dest=0x81eccf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" [0179.574] wcscat (in: _Dest=0x81eccf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*" [0179.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805fcc0 [0179.574] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*", lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37758 [0184.354] wcscmp (_String1=".", _String2=".") returned 0 [0184.354] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.354] wcscmp (_String1="..", _String2=".") returned 1 [0184.354] wcscmp (_String1="..", _String2="..") returned 0 [0184.354] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ef8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.354] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.354] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x148a5530 [0184.354] wcscpy (in: _Dest=0x148a5530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" [0184.354] wcscat (in: _Dest=0x148a5530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" [0184.354] wcscat (in: _Dest=0x148a5530, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" [0185.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a5530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0185.501] FindNextFileW (in: hFindFile=0x3f37758, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ef8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.501] FindClose (in: hFindFile=0x3f37758 | out: hFindFile=0x3f37758) returned 1 [0185.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805fcc0) returned 1 [0185.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eccf8) returned 1 [0185.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805aee0) returned 1 Thread: id = 5058 os_tid = 0x23ac [0179.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81ece00 [0179.580] wcscpy (in: _Dest=0x81ece00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" [0179.580] wcscat (in: _Dest=0x81ece00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" [0179.580] wcscat (in: _Dest=0x81ece00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*" [0179.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ff28 [0179.580] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*", lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e98 [0184.317] wcscmp (_String1=".", _String2=".") returned 0 [0184.317] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.317] wcscmp (_String1="..", _String2=".") returned 1 [0184.317] wcscmp (_String1="..", _String2="..") returned 0 [0184.317] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.317] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.317] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x83edcd8 [0184.318] wcscpy (in: _Dest=0x83edcd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" [0184.318] wcscat (in: _Dest=0x83edcd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" [0184.318] wcscat (in: _Dest=0x83edcd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" [0185.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83edcd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0185.432] FindNextFileW (in: hFindFile=0x3f37e98, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.432] FindClose (in: hFindFile=0x3f37e98 | out: hFindFile=0x3f37e98) returned 1 [0185.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ff28) returned 1 [0185.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ece00) returned 1 [0185.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eba68) returned 1 Thread: id = 5059 os_tid = 0x242c [0179.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x81ecf08 [0179.581] wcscpy (in: _Dest=0x81ecf08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" [0179.581] wcscat (in: _Dest=0x81ecf08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" [0179.581] wcscat (in: _Dest=0x81ecf08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*" [0179.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060190 [0179.581] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*", lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37998 [0184.352] wcscmp (_String1=".", _String2=".") returned 0 [0184.352] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.353] wcscmp (_String1="..", _String2=".") returned 1 [0184.353] wcscmp (_String1="..", _String2="..") returned 0 [0184.353] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.353] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.353] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x148a5408 [0184.353] wcscpy (in: _Dest=0x148a5408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" [0184.353] wcscat (in: _Dest=0x148a5408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" [0184.353] wcscat (in: _Dest=0x148a5408, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" [0185.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a5408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0185.498] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.498] FindClose (in: hFindFile=0x3f37998 | out: hFindFile=0x3f37998) returned 1 [0185.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060190) returned 1 [0185.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecf08) returned 1 [0185.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebb70) returned 1 Thread: id = 5060 os_tid = 0x2560 [0179.590] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json")) returned 0x2020 [0179.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0189.954] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1710 [0190.474] GetFileSizeEx (in: hFile=0x1710, lpFileSize=0x1639fc38 | out: lpFileSize=0x1639fc38*=278) returned 1 [0190.474] SetFilePointerEx (in: hFile=0x1710, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.474] ReadFile (in: hFile=0x1710, lpBuffer=0x1639fc44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1639fc20, lpOverlapped=0x0 | out: lpBuffer=0x1639fc44*, lpNumberOfBytesRead=0x1639fc20*=0x4, lpOverlapped=0x0) returned 1 [0190.477] SetFilePointerEx (in: hFile=0x1710, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425b0 [0190.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42678 [0190.477] NtQuerySystemTime (in: CurrentTime=0x1639fbc0 | out: CurrentTime=0x1639fbc0*=132471540583884000) returned 0x0 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x29d4ce5b [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x698bc0a0 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x7a40f9c2 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x73af6275 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x14dfcf87 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x2f3a130a [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x1ef3179b [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x56fded7f [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x7c933e69 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x207004e3 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x5b5c0000 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x3ca2f9cb [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x348e4c51 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x2e078afa [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x5b0528dc [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0xe61fe08 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x4896402d [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x1387ffb7 [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x1ba538fc [0190.477] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x2deaa909 [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x6a4fd43 [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x754ff8dc [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x6f578d03 [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x6b42ab0c [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x73c91843 [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x5db11ff3 [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0xbd34bab [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x7f2e2a2e [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x8819bcd [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x465b4450 [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x1cfdf3d4 [0190.478] RtlRandomEx (in: Seed=0x1639fbb8 | out: Seed=0x1639fbb8) returned 0x643206d3 [0190.486] ReadFile (in: hFile=0x1710, lpBuffer=0x8297478, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0x1639fbb4, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0x1639fbb4*=0x116, lpOverlapped=0x0) returned 1 [0190.486] SetFilePointerEx (in: hFile=0x1710, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.486] WriteFile (in: hFile=0x1710, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x1639fbb8, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0x1639fbb8*=0x116, lpOverlapped=0x0) returned 1 [0190.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421a0 [0190.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0190.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0190.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0190.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0190.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 [0190.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b57c0) returned 1 [0190.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69660 [0190.665] SetFilePointerEx (in: hFile=0x1710, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.665] WriteFile (in: hFile=0x1710, lpBuffer=0x30bb700*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1639fc2c, lpOverlapped=0x0 | out: lpBuffer=0x30bb700*, lpNumberOfBytesWritten=0x1639fc2c*=0x10c, lpOverlapped=0x0) returned 1 [0190.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0190.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69690) returned 1 [0190.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0190.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69660) returned 1 [0190.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421a0) returned 1 [0190.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425b0) returned 1 [0190.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42880) returned 1 [0190.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424c0) returned 1 [0190.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8403a68 [0190.801] wcscpy (in: _Dest=0x8403a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" [0190.801] wcscat (in: _Dest=0x8403a68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.f0dbec" [0190.801] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.f0dbec", NtPathName=0x1639fbb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef8c58 [0193.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8c58) returned 1 [0193.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fd1b8) returned 1 [0193.143] NtQueryInformationFile (in: FileHandle=0x1710, IoStatusBlock=0x1639fb88, FileInformation=0x1639fb90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1639fb88, FileInformation=0x1639fb90) returned 0x0 [0193.145] NtSetInformationFile (FileHandle=0x1710, IoStatusBlock=0x1639fb88, FileInformation=0x1639fb90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403a68) returned 1 [0196.089] FlushFileBuffers (hFile=0x1710) returned 1 [0196.094] CloseHandle (hObject=0x1710) returned 1 [0196.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f49c8 [0196.542] wcscpy (in: _Dest=0x81f49c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" [0196.542] wcscat (in: _Dest=0x81f49c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\F0DBEC-Readme.txt" [0196.542] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\f0dbec-readme.txt")) returned 0xffffffff [0196.542] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.398] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1639fbd4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1639fbd4*=0x70c, lpOverlapped=0x0) returned 1 [0197.401] CloseHandle (hObject=0x1204) returned 1 [0197.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f49c8) returned 1 [0197.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57840) returned 1 Thread: id = 5061 os_tid = 0x25f4 [0179.596] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json")) returned 0x2020 [0179.596] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0189.954] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1714 [0190.487] GetFileSizeEx (in: hFile=0x1714, lpFileSize=0x1232fd38 | out: lpFileSize=0x1232fd38*=319) returned 1 [0190.488] SetFilePointerEx (in: hFile=0x1714, liDistanceToMove=0x13b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.488] ReadFile (in: hFile=0x1714, lpBuffer=0x1232fd44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1232fd20, lpOverlapped=0x0 | out: lpBuffer=0x1232fd44*, lpNumberOfBytesRead=0x1232fd20*=0x4, lpOverlapped=0x0) returned 1 [0190.489] SetFilePointerEx (in: hFile=0x1714, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42678 [0190.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42538 [0190.490] NtQuerySystemTime (in: CurrentTime=0x1232fcc0 | out: CurrentTime=0x1232fcc0*=132471540583884000) returned 0x0 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x6fd0389e [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x59fcfe6d [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x60df31f5 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x6bade801 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0xdc6339a [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x33f7c454 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x3287bb52 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x6d04ae01 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x1e8e63a1 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x4f50a805 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x71552f91 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x679e041c [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x7624dad7 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x375a6060 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x6c594b01 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x61488ca0 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x45947ecf [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x6214ab18 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x15280ed1 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x407681f2 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x6bd8c0c1 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x5dab1379 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x743f5b82 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x32553318 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x32ef50f [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x2c4eb979 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x6bade801 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x433c09bb [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x66e30b58 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x179ca981 [0190.490] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x6119a9f8 [0190.491] RtlRandomEx (in: Seed=0x1232fcb8 | out: Seed=0x1232fcb8) returned 0x6e324e19 [0190.501] ReadFile (in: hFile=0x1714, lpBuffer=0x829ec88, nNumberOfBytesToRead=0x13f, lpNumberOfBytesRead=0x1232fcb4, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesRead=0x1232fcb4*=0x13f, lpOverlapped=0x0) returned 1 [0190.501] SetFilePointerEx (in: hFile=0x1714, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.501] WriteFile (in: hFile=0x1714, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x1232fcb8, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0x1232fcb8*=0x13f, lpOverlapped=0x0) returned 1 [0190.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0190.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42bc8 [0190.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0190.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0190.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0190.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68150) returned 1 [0190.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4bf0) returned 1 [0190.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69720 [0190.671] SetFilePointerEx (in: hFile=0x1714, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.671] WriteFile (in: hFile=0x1714, lpBuffer=0x30bbfc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1232fd2c, lpOverlapped=0x0 | out: lpBuffer=0x30bbfc0*, lpNumberOfBytesWritten=0x1232fd2c*=0x10c, lpOverlapped=0x0) returned 1 [0190.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 [0190.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0190.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0190.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0190.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0190.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42678) returned 1 [0190.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42358) returned 1 [0190.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423f8) returned 1 [0190.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x84041b8 [0190.813] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" [0190.813] wcscat (in: _Dest=0x84041b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.f0dbec" [0190.813] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0x1232fcb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9e48 [0193.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9e48) returned 1 [0193.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fc918) returned 1 [0193.163] NtQueryInformationFile (in: FileHandle=0x1714, IoStatusBlock=0x1232fc88, FileInformation=0x1232fc90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1232fc88, FileInformation=0x1232fc90) returned 0x0 [0193.163] NtSetInformationFile (FileHandle=0x1714, IoStatusBlock=0x1232fc88, FileInformation=0x1232fc90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84041b8) returned 1 [0196.549] FlushFileBuffers (hFile=0x1714) returned 1 [0201.839] CloseHandle (hObject=0x1714) returned 1 [0203.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f6c38 [0203.989] wcscpy (in: _Dest=0x81f6c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" [0203.989] wcscat (in: _Dest=0x81f6c38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\F0DBEC-Readme.txt" [0203.989] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0203.989] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1744 [0204.466] WriteFile (in: hFile=0x1744, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1232fcd4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1232fcd4*=0x70c, lpOverlapped=0x0) returned 1 [0209.692] CloseHandle (hObject=0x1744) returned 1 [0209.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6c38) returned 1 [0209.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57968) returned 1 Thread: id = 5062 os_tid = 0x25f8 [0179.605] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json")) returned 0x2020 [0179.605] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0189.954] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x171c [0190.502] GetFileSizeEx (in: hFile=0x171c, lpFileSize=0x159cf8b0 | out: lpFileSize=0x159cf8b0*=265) returned 1 [0190.502] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.502] ReadFile (in: hFile=0x171c, lpBuffer=0x159cf8bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x159cf898, lpOverlapped=0x0 | out: lpBuffer=0x159cf8bc*, lpNumberOfBytesRead=0x159cf898*=0x4, lpOverlapped=0x0) returned 1 [0190.504] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42538 [0190.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0190.504] NtQuerySystemTime (in: CurrentTime=0x159cf838 | out: CurrentTime=0x159cf838*=132471540584040000) returned 0x0 [0190.504] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x70cff2c5 [0190.504] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x2c320c46 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x571edbfc [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x387ad0f [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x6214ab18 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0xb5ccd2a [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x47bab417 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x22288f54 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x44093385 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x8436843 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x11df5350 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x6c542f5e [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x28e61c76 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x381fa7c9 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x3da59c50 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x28c301d3 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x8105eee [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x16f7fb10 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x4e448bdd [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0xc84aa0d [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x3c8a6f75 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x73a2fb44 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x1e187812 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x3e442981 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x3ca2f9cb [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x36451969 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x4be9831f [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x2782f487 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x538b908f [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x59fcfe6d [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x2dbec388 [0190.505] RtlRandomEx (in: Seed=0x159cf830 | out: Seed=0x159cf830) returned 0x6cfbff0b [0190.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0190.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a458 [0190.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0190.604] ReadFile (in: hFile=0x171c, lpBuffer=0x809a458, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0x159cf82c, lpOverlapped=0x0 | out: lpBuffer=0x809a458*, lpNumberOfBytesRead=0x159cf82c*=0x109, lpOverlapped=0x0) returned 1 [0190.604] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.604] WriteFile (in: hFile=0x171c, lpBuffer=0x80b4890*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x159cf830, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesWritten=0x159cf830*=0x109, lpOverlapped=0x0) returned 1 [0190.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0190.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0190.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0190.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0190.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a458) returned 1 [0190.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0190.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b53d0) returned 1 [0190.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0190.776] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.776] WriteFile (in: hFile=0x171c, lpBuffer=0x30bb4d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x159cf8a4, lpOverlapped=0x0 | out: lpBuffer=0x30bb4d0*, lpNumberOfBytesWritten=0x159cf8a4*=0x10c, lpOverlapped=0x0) returned 1 [0190.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0190.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0190.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0190.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0190.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0190.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42538) returned 1 [0190.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0190.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0190.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8403ba0 [0190.878] wcscpy (in: _Dest=0x8403ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" [0190.878] wcscat (in: _Dest=0x8403ba0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.f0dbec" [0190.879] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0x159cf828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9f90 [0193.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9f90) returned 1 [0193.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f4590) returned 1 [0193.171] NtQueryInformationFile (in: FileHandle=0x171c, IoStatusBlock=0x159cf800, FileInformation=0x159cf808, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x159cf800, FileInformation=0x159cf808) returned 0x0 [0193.171] NtSetInformationFile (FileHandle=0x171c, IoStatusBlock=0x159cf800, FileInformation=0x159cf808, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403ba0) returned 1 [0196.093] FlushFileBuffers (hFile=0x171c) returned 1 [0196.099] CloseHandle (hObject=0x171c) returned 1 [0196.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f4b00 [0196.543] wcscpy (in: _Dest=0x81f4b00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" [0196.543] wcscat (in: _Dest=0x81f4b00, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\F0DBEC-Readme.txt" [0196.543] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0196.543] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.403] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x159cf84c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x159cf84c*=0x70c, lpOverlapped=0x0) returned 1 [0197.406] CloseHandle (hObject=0x1204) returned 1 [0197.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4b00) returned 1 [0197.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57a90) returned 1 Thread: id = 5063 os_tid = 0x2600 [0179.607] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json")) returned 0x2020 [0179.608] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0189.954] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1720 [0190.605] GetFileSizeEx (in: hFile=0x1720, lpFileSize=0x1619fd90 | out: lpFileSize=0x1619fd90*=259) returned 1 [0190.605] SetFilePointerEx (in: hFile=0x1720, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.605] ReadFile (in: hFile=0x1720, lpBuffer=0x1619fd9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1619fd78, lpOverlapped=0x0 | out: lpBuffer=0x1619fd9c*, lpNumberOfBytesRead=0x1619fd78*=0x4, lpOverlapped=0x0) returned 1 [0190.607] SetFilePointerEx (in: hFile=0x1720, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0190.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0190.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42588 [0190.607] NtQuerySystemTime (in: CurrentTime=0x1619fd18 | out: CurrentTime=0x1619fd18*=132471540585132000) returned 0x0 [0190.607] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x7c03ac6a [0190.607] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x23f03575 [0190.607] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x6e324e19 [0190.607] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x2800c19 [0190.607] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x69415715 [0190.607] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x52e856d9 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x538b908f [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x559237c2 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x2c361c0d [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x23153e71 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x5103e651 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x747b84df [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x7d1c2331 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x1925ebd7 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x61a3201a [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x49689d2d [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x6dc5afa2 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x45c75094 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x2c4eb979 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x7f2e2a2e [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x14f96d41 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x766d6775 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x62478e7b [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x77aadcb6 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x31ee1da8 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x1bd7f3c [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x74a63b5d [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x51bdbda9 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x4e448bdd [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x6ed95306 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x1ea57569 [0190.608] RtlRandomEx (in: Seed=0x1619fd10 | out: Seed=0x1619fd10) returned 0x45801d1b [0190.618] ReadFile (in: hFile=0x1720, lpBuffer=0x82a6498, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x1619fd0c, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesRead=0x1619fd0c*=0x103, lpOverlapped=0x0) returned 1 [0190.618] SetFilePointerEx (in: hFile=0x1720, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.619] WriteFile (in: hFile=0x1720, lpBuffer=0x82aa0a0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1619fd10, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesWritten=0x1619fd10*=0x103, lpOverlapped=0x0) returned 1 [0190.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43640 [0190.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43370 [0190.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0190.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0190.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0190.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 [0190.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b51d8) returned 1 [0190.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0190.783] SetFilePointerEx (in: hFile=0x1720, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.783] WriteFile (in: hFile=0x1720, lpBuffer=0x30bcdf8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1619fd84, lpOverlapped=0x0 | out: lpBuffer=0x30bcdf8*, lpNumberOfBytesWritten=0x1619fd84*=0x10c, lpOverlapped=0x0) returned 1 [0193.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0193.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0193.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0193.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0193.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43640) returned 1 [0193.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0193.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0193.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42920) returned 1 [0193.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404560 [0193.135] wcscpy (in: _Dest=0x8404560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" [0193.135] wcscat (in: _Dest=0x8404560, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.f0dbec" [0193.135] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0x1619fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0193.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9928 [0196.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9928) returned 1 [0196.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83faae8) returned 1 [0196.073] NtQueryInformationFile (in: FileHandle=0x1720, IoStatusBlock=0x1619fce0, FileInformation=0x1619fce8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1619fce0, FileInformation=0x1619fce8) returned 0x0 [0196.073] NtSetInformationFile (FileHandle=0x1720, IoStatusBlock=0x1619fce0, FileInformation=0x1619fce8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404560) returned 1 [0196.529] FlushFileBuffers (hFile=0x1720) returned 1 [0196.535] CloseHandle (hObject=0x1720) returned 1 [0196.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x8405058 [0196.824] wcscpy (in: _Dest=0x8405058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" [0196.824] wcscat (in: _Dest=0x8405058, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\F0DBEC-Readme.txt" [0196.824] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0196.824] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13dc [0197.412] WriteFile (in: hFile=0x13dc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1619fd2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1619fd2c*=0x70c, lpOverlapped=0x0) returned 1 [0197.683] CloseHandle (hObject=0x13dc) returned 1 [0198.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405058) returned 1 [0198.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57bb8) returned 1 Thread: id = 5064 os_tid = 0x2824 [0179.608] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json")) returned 0x2020 [0179.609] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0189.955] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1724 [0190.620] GetFileSizeEx (in: hFile=0x1724, lpFileSize=0x1642fc00 | out: lpFileSize=0x1642fc00*=243) returned 1 [0190.620] SetFilePointerEx (in: hFile=0x1724, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.620] ReadFile (in: hFile=0x1724, lpBuffer=0x1642fc0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1642fbe8, lpOverlapped=0x0 | out: lpBuffer=0x1642fc0c*, lpNumberOfBytesRead=0x1642fbe8*=0x4, lpOverlapped=0x0) returned 1 [0190.755] SetFilePointerEx (in: hFile=0x1724, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0190.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42808 [0190.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0190.755] NtQuerySystemTime (in: CurrentTime=0x1642fb88 | out: CurrentTime=0x1642fb88*=132471540586536000) returned 0x0 [0190.755] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x60e6aad1 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x170a3110 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x7f98ee31 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x62468b7b [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x7b9e1e80 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x194acd5 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x3e442981 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0xec10876 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x6d5a5f81 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x4b0d18ac [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x202fd5aa [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x202fd5aa [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x31f5c464 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x7a0f8014 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x56fc14ae [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x68d58341 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x16ce536f [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x3b0c930a [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0xec10876 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x3174ec6d [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x315d8d1a [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x3260608e [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x2d5611ce [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x530b4ffb [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x743f5b82 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x766d6775 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x1f3514a9 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x5e8a54eb [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x1a513e7a [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x61b3d48f [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x1389f7f8 [0190.756] RtlRandomEx (in: Seed=0x1642fb80 | out: Seed=0x1642fb80) returned 0x741e9f34 [0190.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0190.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a6498 [0190.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82aa0a0 [0190.902] ReadFile (in: hFile=0x1724, lpBuffer=0x82a6498, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0x1642fb7c, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesRead=0x1642fb7c*=0xf3, lpOverlapped=0x0) returned 1 [0190.902] SetFilePointerEx (in: hFile=0x1724, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.902] WriteFile (in: hFile=0x1724, lpBuffer=0x82aa0a0*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x1642fb80, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesWritten=0x1642fb80*=0xf3, lpOverlapped=0x0) returned 1 [0193.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0193.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0193.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0193.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0193.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0193.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 [0193.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6770) returned 1 [0193.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69840 [0193.759] SetFilePointerEx (in: hFile=0x1724, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.759] WriteFile (in: hFile=0x1724, lpBuffer=0x30bbc78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1642fbf4, lpOverlapped=0x0 | out: lpBuffer=0x30bbc78*, lpNumberOfBytesWritten=0x1642fbf4*=0x10c, lpOverlapped=0x0) returned 1 [0196.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0196.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69870) returned 1 [0196.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0196.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69840) returned 1 [0196.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0196.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42808) returned 1 [0196.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0196.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0196.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef7d68 [0196.118] wcscpy (in: _Dest=0x3ef7d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" [0196.118] wcscat (in: _Dest=0x3ef7d68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.f0dbec" [0196.118] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.f0dbec", NtPathName=0x1642fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3efa4b0 [0196.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa4b0) returned 1 [0196.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8a90) returned 1 [0196.581] NtQueryInformationFile (in: FileHandle=0x1724, IoStatusBlock=0x1642fb50, FileInformation=0x1642fb58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1642fb50, FileInformation=0x1642fb58) returned 0x0 [0196.581] NtSetInformationFile (FileHandle=0x1724, IoStatusBlock=0x1642fb50, FileInformation=0x1642fb58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0196.845] FlushFileBuffers (hFile=0x1724) returned 1 [0196.857] CloseHandle (hObject=0x1724) returned 1 [0197.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f3b28 [0197.050] wcscpy (in: _Dest=0x81f3b28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" [0197.050] wcscat (in: _Dest=0x81f3b28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\F0DBEC-Readme.txt" [0197.050] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\f0dbec-readme.txt")) returned 0xffffffff [0197.050] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1944 [0197.449] WriteFile (in: hFile=0x1944, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1642fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1642fb9c*=0x70c, lpOverlapped=0x0) returned 1 [0197.869] CloseHandle (hObject=0x1944) returned 1 [0197.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3b28) returned 1 [0197.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57ce0) returned 1 Thread: id = 5065 os_tid = 0x2828 [0179.609] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json")) returned 0x2020 [0179.610] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0189.955] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b98 [0190.903] GetFileSizeEx (in: hFile=0x1b98, lpFileSize=0x124ffc60 | out: lpFileSize=0x124ffc60*=256) returned 1 [0190.903] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.903] ReadFile (in: hFile=0x1b98, lpBuffer=0x124ffc6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x124ffc48, lpOverlapped=0x0 | out: lpBuffer=0x124ffc6c*, lpNumberOfBytesRead=0x124ffc48*=0x4, lpOverlapped=0x0) returned 1 [0190.905] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0190.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0190.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42538 [0190.905] NtQuerySystemTime (in: CurrentTime=0x124ffbe8 | out: CurrentTime=0x124ffbe8*=132471540588096000) returned 0x0 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x407681f2 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x4f50a805 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x2c59909f [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x13a2c190 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x63c467e6 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x591da907 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x2e3a2349 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x2dcaf5fb [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x1e8e63a1 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x3c8a6f75 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x4819a650 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x47bde03e [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x4075d4b5 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x2664cac1 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x1fd1ff72 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x663dfac0 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x2249dee8 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x361d034c [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x6aece52 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x1925f385 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x4ed316a6 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x2112eee3 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x373d4cf0 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x235c0498 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x638bd8c9 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x1a8bf806 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x74abea7a [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x63c88561 [0190.906] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x59fb062c [0190.907] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x7cfe635b [0190.907] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x3bea1d39 [0190.907] RtlRandomEx (in: Seed=0x124ffbe0 | out: Seed=0x124ffbe0) returned 0x4e0cd2e4 [0190.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0190.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829ec88 [0190.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0190.917] ReadFile (in: hFile=0x1b98, lpBuffer=0x829ec88, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124ffbdc, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesRead=0x124ffbdc*=0x100, lpOverlapped=0x0) returned 1 [0190.917] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.918] WriteFile (in: hFile=0x1b98, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x124ffbe0, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0x124ffbe0*=0x100, lpOverlapped=0x0) returned 1 [0193.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0193.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0193.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0193.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0193.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0193.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0193.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6b60) returned 1 [0193.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e698a0 [0193.762] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.762] WriteFile (in: hFile=0x1b98, lpBuffer=0x30bcdf8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x124ffc54, lpOverlapped=0x0 | out: lpBuffer=0x30bcdf8*, lpNumberOfBytesWritten=0x124ffc54*=0x10c, lpOverlapped=0x0) returned 1 [0196.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0196.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698d0) returned 1 [0196.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0196.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698a0) returned 1 [0196.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0196.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0196.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0196.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0196.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8ad0 [0196.128] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" [0196.128] wcscat (in: _Dest=0x3ef8ad0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.f0dbec" [0196.128] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0x124ffbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef97e0 [0196.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef97e0) returned 1 [0196.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400128) returned 1 [0196.591] NtQueryInformationFile (in: FileHandle=0x1b98, IoStatusBlock=0x124ffbb0, FileInformation=0x124ffbb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x124ffbb0, FileInformation=0x124ffbb8) returned 0x0 [0196.591] NtSetInformationFile (FileHandle=0x1b98, IoStatusBlock=0x124ffbb0, FileInformation=0x124ffbb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8ad0) returned 1 [0196.852] FlushFileBuffers (hFile=0x1b98) returned 1 [0196.869] CloseHandle (hObject=0x1b98) returned 1 [0197.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x84041b8 [0197.057] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" [0197.057] wcscat (in: _Dest=0x84041b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\F0DBEC-Readme.txt" [0197.057] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0197.057] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1948 [0197.450] WriteFile (in: hFile=0x1948, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x124ffbfc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x124ffbfc*=0x70c, lpOverlapped=0x0) returned 1 [0197.878] CloseHandle (hObject=0x1948) returned 1 [0197.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84041b8) returned 1 [0197.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57e08) returned 1 Thread: id = 5066 os_tid = 0x2830 [0179.610] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json")) returned 0x2020 [0179.611] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0189.955] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f0c [0190.918] GetFileSizeEx (in: hFile=0x1f0c, lpFileSize=0x126bf878 | out: lpFileSize=0x126bf878*=329) returned 1 [0190.919] SetFilePointerEx (in: hFile=0x1f0c, liDistanceToMove=0x145, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.919] ReadFile (in: hFile=0x1f0c, lpBuffer=0x126bf884, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x126bf860, lpOverlapped=0x0 | out: lpBuffer=0x126bf884*, lpNumberOfBytesRead=0x126bf860*=0x4, lpOverlapped=0x0) returned 1 [0190.921] SetFilePointerEx (in: hFile=0x1f0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0190.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42538 [0190.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423f8 [0190.921] NtQuerySystemTime (in: CurrentTime=0x126bf800 | out: CurrentTime=0x126bf800*=132471540588252000) returned 0x0 [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x6c542f5e [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x1f3514a9 [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x2ac194 [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x26499b2c [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x483aed51 [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x6ac27222 [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x5d219cb1 [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x7b57dff [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0xff2e545 [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x579c8f3c [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x375be0e8 [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x1db096dc [0190.921] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x1048aa28 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0xf097d58 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x89b55e6 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x29346012 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x534b9ff5 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x3fae4f0c [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x15fc7ae7 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0xd95321a [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x676512f [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x67bf34a2 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x56a4f28f [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x60ebe0e7 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x277ffe99 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x5eaad37a [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x2994c78b [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x2fc7fd04 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x3e4c2421 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x215b0da8 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x3eb02f75 [0190.922] RtlRandomEx (in: Seed=0x126bf7f8 | out: Seed=0x126bf7f8) returned 0x70c8ed22 [0190.933] ReadFile (in: hFile=0x1f0c, lpBuffer=0x8297478, nNumberOfBytesToRead=0x149, lpNumberOfBytesRead=0x126bf7f4, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0x126bf7f4*=0x149, lpOverlapped=0x0) returned 1 [0190.933] SetFilePointerEx (in: hFile=0x1f0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.933] WriteFile (in: hFile=0x1f0c, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x126bf7f8, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0x126bf7f8*=0x149, lpOverlapped=0x0) returned 1 [0193.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0193.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0193.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0193.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0193.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0193.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68150) returned 1 [0193.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6338) returned 1 [0193.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69960 [0193.765] SetFilePointerEx (in: hFile=0x1f0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.765] WriteFile (in: hFile=0x1f0c, lpBuffer=0x30bbea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x126bf86c, lpOverlapped=0x0 | out: lpBuffer=0x30bbea8*, lpNumberOfBytesWritten=0x126bf86c*=0x10c, lpOverlapped=0x0) returned 1 [0196.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbea8) returned 1 [0196.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69990) returned 1 [0196.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0196.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69960) returned 1 [0196.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0196.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42538) returned 1 [0196.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42358) returned 1 [0196.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42678) returned 1 [0196.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8998 [0196.125] wcscpy (in: _Dest=0x3ef8998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" [0196.125] wcscat (in: _Dest=0x3ef8998, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.f0dbec" [0196.125] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0x126bf7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3efa888 [0196.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa888) returned 1 [0196.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f99a8) returned 1 [0196.759] NtQueryInformationFile (in: FileHandle=0x1f0c, IoStatusBlock=0x126bf7c8, FileInformation=0x126bf7d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x126bf7c8, FileInformation=0x126bf7d0) returned 0x0 [0196.759] NtSetInformationFile (FileHandle=0x1f0c, IoStatusBlock=0x126bf7c8, FileInformation=0x126bf7d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8998) returned 1 [0196.976] FlushFileBuffers (hFile=0x1f0c) returned 1 [0196.982] CloseHandle (hObject=0x1f0c) returned 1 [0197.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f6758 [0197.283] wcscpy (in: _Dest=0x81f6758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" [0197.283] wcscat (in: _Dest=0x81f6758, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\F0DBEC-Readme.txt" [0197.283] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0197.283] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1600 [0197.458] WriteFile (in: hFile=0x1600, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x126bf814, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x126bf814*=0x70c, lpOverlapped=0x0) returned 1 [0197.935] CloseHandle (hObject=0x1600) returned 1 [0197.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6758) returned 1 [0197.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57f30) returned 1 Thread: id = 5067 os_tid = 0x2a18 [0179.611] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0179.612] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0189.956] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ef0 [0190.934] GetFileSizeEx (in: hFile=0x1ef0, lpFileSize=0xe34fa48 | out: lpFileSize=0xe34fa48*=249) returned 1 [0190.934] SetFilePointerEx (in: hFile=0x1ef0, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.934] ReadFile (in: hFile=0x1ef0, lpBuffer=0xe34fa54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe34fa30, lpOverlapped=0x0 | out: lpBuffer=0xe34fa54*, lpNumberOfBytesRead=0xe34fa30*=0x4, lpOverlapped=0x0) returned 1 [0190.936] SetFilePointerEx (in: hFile=0x1ef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0190.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423f8 [0190.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0190.936] NtQuerySystemTime (in: CurrentTime=0xe34f9d0 | out: CurrentTime=0xe34f9d0*=132471540588408000) returned 0x0 [0190.936] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0xe9954ed [0190.936] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x5c76013 [0190.936] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x66d35a41 [0190.936] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x43a3b30b [0190.936] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x69956447 [0190.936] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x391443a1 [0190.936] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x5a460730 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0xde6ac17 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x55d8ce0b [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x77b70b00 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x18dbd651 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x79380717 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x753d23d4 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x791c3d84 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x137ef2b7 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x676e700e [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x4819a650 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x2f24365a [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x514ce4de [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x6bee6c9a [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x1925ebd7 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x20fcc523 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x2f6a2f78 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x69da22b1 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x50559c16 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x5341513b [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x7a669960 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x67290bc1 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x23007d9f [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x1bf75ec5 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0xb3b8af4 [0190.937] RtlRandomEx (in: Seed=0xe34f9c8 | out: Seed=0xe34f9c8) returned 0x5041fffc [0190.947] ReadFile (in: hFile=0x1ef0, lpBuffer=0x82adca8, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0xe34f9c4, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xe34f9c4*=0xf9, lpOverlapped=0x0) returned 1 [0190.947] SetFilePointerEx (in: hFile=0x1ef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.947] WriteFile (in: hFile=0x1ef0, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0xe34f9c8, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xe34f9c8*=0xf9, lpOverlapped=0x0) returned 1 [0193.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0193.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0193.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0193.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0193.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82adca8) returned 1 [0193.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 [0193.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e58d0) returned 1 [0193.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e695a0 [0193.769] SetFilePointerEx (in: hFile=0x1ef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.770] WriteFile (in: hFile=0x1ef0, lpBuffer=0x30bcf10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe34fa3c, lpOverlapped=0x0 | out: lpBuffer=0x30bcf10*, lpNumberOfBytesWritten=0xe34fa3c*=0x10c, lpOverlapped=0x0) returned 1 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695d0) returned 1 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695a0) returned 1 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423f8) returned 1 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424c0) returned 1 [0196.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef84b8 [0196.164] wcscpy (in: _Dest=0x3ef84b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" [0196.164] wcscat (in: _Dest=0x3ef84b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.f0dbec" [0196.164] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.f0dbec", NtPathName=0xe34f9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e177a0 [0196.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e177a0) returned 1 [0196.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f6e88) returned 1 [0196.594] NtQueryInformationFile (in: FileHandle=0x1ef0, IoStatusBlock=0xe34f998, FileInformation=0xe34f9a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe34f998, FileInformation=0xe34f9a0) returned 0x0 [0196.594] NtSetInformationFile (FileHandle=0x1ef0, IoStatusBlock=0xe34f998, FileInformation=0xe34f9a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef84b8) returned 1 [0196.855] FlushFileBuffers (hFile=0x1ef0) returned 1 [0196.870] CloseHandle (hObject=0x1ef0) returned 1 [0197.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x84057a8 [0197.063] wcscpy (in: _Dest=0x84057a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" [0197.063] wcscat (in: _Dest=0x84057a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\F0DBEC-Readme.txt" [0197.063] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\f0dbec-readme.txt")) returned 0xffffffff [0197.063] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x197c [0197.450] WriteFile (in: hFile=0x197c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe34f9e4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe34f9e4*=0x70c, lpOverlapped=0x0) returned 1 [0197.882] CloseHandle (hObject=0x197c) returned 1 [0197.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84057a8) returned 1 [0197.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58058) returned 1 Thread: id = 5068 os_tid = 0x2a1c [0179.612] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json")) returned 0x2020 [0179.613] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0189.922] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a68 [0191.267] GetFileSizeEx (in: hFile=0x1a68, lpFileSize=0x125ff860 | out: lpFileSize=0x125ff860*=259) returned 1 [0191.267] SetFilePointerEx (in: hFile=0x1a68, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.267] ReadFile (in: hFile=0x1a68, lpBuffer=0x125ff86c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x125ff848, lpOverlapped=0x0 | out: lpBuffer=0x125ff86c*, lpNumberOfBytesRead=0x125ff848*=0x4, lpOverlapped=0x0) returned 1 [0191.269] SetFilePointerEx (in: hFile=0x1a68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0191.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42718 [0191.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0191.269] NtQuerySystemTime (in: CurrentTime=0x125ff7e8 | out: CurrentTime=0x125ff7e8*=132471540591684000) returned 0x0 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x4ebac8e7 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x709ce5ff [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x2f742d69 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x2bff6632 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x60ed05a7 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x2168ee1c [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x5364693c [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x634f9281 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x25a20f23 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x74547cf9 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x24babb9b [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x79525d16 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x4540f1a0 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x78357426 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x23ed33b4 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x70cedb90 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x11a02d6 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x6ae8fe4a [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0xbd8b848 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x16470e4d [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x4c9f0190 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x173bb96b [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x6c2bccb7 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x5898d150 [0191.269] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x13a2c190 [0191.270] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x7be69ee3 [0191.270] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x5e8ca60e [0191.270] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x237e3f44 [0191.270] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x76dddf7a [0191.270] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x6796afa2 [0191.270] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x45414817 [0191.270] RtlRandomEx (in: Seed=0x125ff7e0 | out: Seed=0x125ff7e0) returned 0x666487ab [0191.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0191.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8375990 [0191.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8362d68 [0191.278] ReadFile (in: hFile=0x1a68, lpBuffer=0x8375990, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x125ff7dc, lpOverlapped=0x0 | out: lpBuffer=0x8375990*, lpNumberOfBytesRead=0x125ff7dc*=0x103, lpOverlapped=0x0) returned 1 [0191.278] SetFilePointerEx (in: hFile=0x1a68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.278] WriteFile (in: hFile=0x1a68, lpBuffer=0x8362d68*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x125ff7e0, lpOverlapped=0x0 | out: lpBuffer=0x8362d68*, lpNumberOfBytesWritten=0x125ff7e0*=0x103, lpOverlapped=0x0) returned 1 [0193.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0193.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0193.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0193.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8362d68) returned 1 [0193.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8375990) returned 1 [0193.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 [0193.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e49b0) returned 1 [0193.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69120 [0193.778] SetFilePointerEx (in: hFile=0x1a68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.778] WriteFile (in: hFile=0x1a68, lpBuffer=0x30bb700*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x125ff854, lpOverlapped=0x0 | out: lpBuffer=0x30bb700*, lpNumberOfBytesWritten=0x125ff854*=0x10c, lpOverlapped=0x0) returned 1 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69150) returned 1 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69120) returned 1 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42718) returned 1 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42470) returned 1 [0196.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403f48 [0196.172] wcscpy (in: _Dest=0x8403f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" [0196.172] wcscat (in: _Dest=0x8403f48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json.f0dbec" [0196.173] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0x125ff7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9408 [0196.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9408) returned 1 [0196.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8868) returned 1 [0196.603] NtQueryInformationFile (in: FileHandle=0x1a68, IoStatusBlock=0x125ff7b0, FileInformation=0x125ff7b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x125ff7b0, FileInformation=0x125ff7b8) returned 0x0 [0196.603] NtSetInformationFile (FileHandle=0x1a68, IoStatusBlock=0x125ff7b0, FileInformation=0x125ff7b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f48) returned 1 [0196.862] FlushFileBuffers (hFile=0x1a68) returned 1 [0196.875] CloseHandle (hObject=0x1a68) returned 1 [0197.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f01d8 [0197.075] wcscpy (in: _Dest=0x81f01d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" [0197.075] wcscat (in: _Dest=0x81f01d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\F0DBEC-Readme.txt" [0197.075] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0197.075] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c68 [0197.452] WriteFile (in: hFile=0x1c68, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x125ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x125ff7fc*=0x70c, lpOverlapped=0x0) returned 1 [0197.889] CloseHandle (hObject=0x1c68) returned 1 [0197.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f01d8) returned 1 [0197.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2300) returned 1 Thread: id = 5069 os_tid = 0x1b00 [0179.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81ed010 [0179.614] wcscpy (in: _Dest=0x81ed010, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0179.614] wcscat (in: _Dest=0x81ed010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" [0179.614] wcscat (in: _Dest=0x81ed010, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*" [0179.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80603f8 [0179.614] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6389e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe638c510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099250 [0183.776] wcscmp (_String1=".", _String2=".") returned 0 [0183.776] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6389e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe638c510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.776] wcscmp (_String1="..", _String2=".") returned 1 [0183.776] wcscmp (_String1="..", _String2="..") returned 0 [0183.776] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe638c510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.776] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.776] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d0a20 [0183.776] wcscpy (in: _Dest=0x81d0a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0183.776] wcscat (in: _Dest=0x81d0a20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" [0183.776] wcscat (in: _Dest=0x81d0a20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" [0185.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c4 [0185.351] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe638c510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.351] FindClose (in: hFindFile=0x8099250 | out: hFindFile=0x8099250) returned 1 [0185.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80603f8) returned 1 [0185.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed010) returned 1 [0185.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335bc0) returned 1 Thread: id = 5070 os_tid = 0x2424 [0179.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81ed118 [0179.614] wcscpy (in: _Dest=0x81ed118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0179.614] wcscat (in: _Dest=0x81ed118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" [0179.614] wcscat (in: _Dest=0x81ed118, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*" [0179.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060660 [0179.615] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6393a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6398860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d10 [0183.753] wcscmp (_String1=".", _String2=".") returned 0 [0183.753] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6393a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6398860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.753] wcscmp (_String1="..", _String2=".") returned 1 [0183.753] wcscmp (_String1="..", _String2="..") returned 0 [0183.753] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6398860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.753] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.753] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401e00 [0183.753] wcscpy (in: _Dest=0x8401e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0183.753] wcscat (in: _Dest=0x8401e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" [0183.753] wcscat (in: _Dest=0x8401e00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" [0188.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0188.088] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6398860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.088] FindClose (in: hFindFile=0x8098d10 | out: hFindFile=0x8098d10) returned 1 [0188.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060660) returned 1 [0188.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed118) returned 1 [0188.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef56a8) returned 1 Thread: id = 5071 os_tid = 0x2bf0 [0179.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81ed220 [0179.615] wcscpy (in: _Dest=0x81ed220, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0179.615] wcscat (in: _Dest=0x81ed220, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" [0179.615] wcscat (in: _Dest=0x81ed220, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*" [0179.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80608c8 [0179.615] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe639d680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a24a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38198 [0181.590] wcscmp (_String1=".", _String2=".") returned 0 [0181.590] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe639d680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a24a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.590] wcscmp (_String1="..", _String2=".") returned 1 [0181.590] wcscmp (_String1="..", _String2="..") returned 0 [0181.590] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63a24a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0181.590] wcscmp (_String1="messages.json", _String2=".") returned 1 [0181.590] wcscmp (_String1="messages.json", _String2="..") returned 1 [0181.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8400a58 [0181.590] wcscpy (in: _Dest=0x8400a58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0181.590] wcscat (in: _Dest=0x8400a58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" [0181.591] wcscat (in: _Dest=0x8400a58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" [0183.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8400a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba8 [0183.587] FindNextFileW (in: hFindFile=0x3f38198, lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63a24a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0183.587] FindClose (in: hFindFile=0x3f38198 | out: hFindFile=0x3f38198) returned 1 [0183.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80608c8) returned 1 [0183.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed220) returned 1 [0183.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4e68) returned 1 Thread: id = 5072 os_tid = 0x2bf4 [0179.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81ed328 [0179.616] wcscpy (in: _Dest=0x81ed328, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0179.616] wcscat (in: _Dest=0x81ed328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" [0179.616] wcscat (in: _Dest=0x81ed328, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*" [0179.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060b30 [0179.616] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63a99d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ae7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0183.791] wcscmp (_String1=".", _String2=".") returned 0 [0183.791] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63a99d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ae7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.791] wcscmp (_String1="..", _String2=".") returned 1 [0183.791] wcscmp (_String1="..", _String2="..") returned 0 [0183.791] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ae7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.791] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.791] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7898 [0183.792] wcscpy (in: _Dest=0x81d7898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0183.792] wcscat (in: _Dest=0x81d7898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" [0183.792] wcscat (in: _Dest=0x81d7898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" [0185.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0185.386] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ae7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.386] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0185.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060b30) returned 1 [0185.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed328) returned 1 [0185.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5288) returned 1 Thread: id = 5073 os_tid = 0x2bf8 [0179.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81ed430 [0179.617] wcscpy (in: _Dest=0x81ed430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0179.617] wcscat (in: _Dest=0x81ed430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" [0179.617] wcscat (in: _Dest=0x81ed430, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*" [0179.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060d98 [0179.617] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63b3610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63b8430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0183.790] wcscmp (_String1=".", _String2=".") returned 0 [0183.790] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63b3610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63b8430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.790] wcscmp (_String1="..", _String2=".") returned 1 [0183.790] wcscmp (_String1="..", _String2="..") returned 0 [0183.790] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63b8430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.791] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.791] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7e60 [0183.791] wcscpy (in: _Dest=0x81d7e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0183.791] wcscat (in: _Dest=0x81d7e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" [0183.791] wcscat (in: _Dest=0x81d7e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" [0185.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d14 [0185.384] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63b8430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.384] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0185.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060d98) returned 1 [0185.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed430) returned 1 [0185.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebc78) returned 1 Thread: id = 5074 os_tid = 0x115c [0179.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8346a48 [0179.618] wcscpy (in: _Dest=0x8346a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0179.618] wcscat (in: _Dest=0x8346a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" [0179.618] wcscat (in: _Dest=0x8346a48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*" [0179.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08448 [0179.618] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63bf960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c2070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c2070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0183.789] wcscmp (_String1=".", _String2=".") returned 0 [0183.789] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63bf960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c2070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c2070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.790] wcscmp (_String1="..", _String2=".") returned 1 [0183.790] wcscmp (_String1="..", _String2="..") returned 0 [0183.790] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63c2070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c4780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.790] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.790] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d7770 [0183.790] wcscpy (in: _Dest=0x81d7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0183.790] wcscat (in: _Dest=0x81d7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" [0183.790] wcscat (in: _Dest=0x81d7770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" [0185.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0185.382] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f08448 | out: lpFindFileData=0x3f08448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63c2070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c4780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.382] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0185.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08448) returned 1 [0185.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346a48) returned 1 [0185.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebd80) returned 1 Thread: id = 5075 os_tid = 0x2bfc [0179.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x83470d8 [0179.619] wcscpy (in: _Dest=0x83470d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0179.619] wcscat (in: _Dest=0x83470d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" [0179.619] wcscat (in: _Dest=0x83470d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*" [0179.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f099f0 [0179.619] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63cbcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ce3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0183.789] wcscmp (_String1=".", _String2=".") returned 0 [0183.789] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63cbcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ce3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.789] wcscmp (_String1="..", _String2=".") returned 1 [0183.789] wcscmp (_String1="..", _String2="..") returned 0 [0183.789] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ce3c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.789] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.789] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d7f88 [0183.789] wcscpy (in: _Dest=0x81d7f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0183.789] wcscat (in: _Dest=0x81d7f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" [0183.789] wcscat (in: _Dest=0x81d7f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" [0185.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e4 [0185.380] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f099f0 | out: lpFindFileData=0x3f099f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ce3c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.380] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0185.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f099f0) returned 1 [0185.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83470d8) returned 1 [0185.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebe88) returned 1 Thread: id = 5076 os_tid = 0x2b60 [0179.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5430 [0179.620] wcscpy (in: _Dest=0x81f5430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0179.620] wcscat (in: _Dest=0x81f5430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" [0179.620] wcscat (in: _Dest=0x81f5430, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*" [0179.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07f78 [0179.620] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63d58f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63d8000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63d8000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0183.788] wcscmp (_String1=".", _String2=".") returned 0 [0183.788] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63d58f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63d8000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63d8000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.788] wcscmp (_String1="..", _String2=".") returned 1 [0183.788] wcscmp (_String1="..", _String2="..") returned 0 [0183.788] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63d8000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63da710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.788] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.788] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d79c0 [0183.788] wcscpy (in: _Dest=0x81d79c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0183.788] wcscat (in: _Dest=0x81d79c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" [0183.788] wcscat (in: _Dest=0x81d79c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" [0185.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d79c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0185.378] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f07f78 | out: lpFindFileData=0x3f07f78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63d8000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63da710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.378] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0185.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07f78) returned 1 [0185.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5430) returned 1 [0185.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebf90) returned 1 Thread: id = 5077 os_tid = 0x2b64 [0179.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f3d80 [0179.620] wcscpy (in: _Dest=0x81f3d80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0179.620] wcscat (in: _Dest=0x81f3d80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" [0179.621] wcscat (in: _Dest=0x81f3d80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*" [0179.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08918 [0179.621] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63df530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e1c40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63e1c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0183.787] wcscmp (_String1=".", _String2=".") returned 0 [0183.787] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63df530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e1c40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63e1c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.787] wcscmp (_String1="..", _String2=".") returned 1 [0183.787] wcscmp (_String1="..", _String2="..") returned 0 [0183.787] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63e1c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e4350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.787] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.787] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7ae8 [0183.787] wcscpy (in: _Dest=0x81d7ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0183.787] wcscat (in: _Dest=0x81d7ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" [0183.787] wcscat (in: _Dest=0x81d7ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" [0185.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b14 [0185.376] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f08918 | out: lpFindFileData=0x3f08918*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63e1c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e4350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.376] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0185.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08918) returned 1 [0185.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3d80) returned 1 [0185.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec098) returned 1 Thread: id = 5078 os_tid = 0x2b68 [0179.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334e58 [0179.621] wcscpy (in: _Dest=0x8334e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0179.621] wcscat (in: _Dest=0x8334e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" [0179.621] wcscat (in: _Dest=0x8334e58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*" [0179.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0ad30 [0179.621] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63e9170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63edf90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0183.786] wcscmp (_String1=".", _String2=".") returned 0 [0183.786] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63e9170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63edf90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.786] wcscmp (_String1="..", _String2=".") returned 1 [0183.786] wcscmp (_String1="..", _String2="..") returned 0 [0183.786] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63edf90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.786] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.786] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7d38 [0183.786] wcscpy (in: _Dest=0x81d7d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0183.786] wcscat (in: _Dest=0x81d7d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" [0183.786] wcscat (in: _Dest=0x81d7d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" [0185.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2598 [0185.374] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3f0ad30 | out: lpFindFileData=0x3f0ad30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63edf90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.374] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0185.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0ad30) returned 1 [0185.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334e58) returned 1 [0185.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec1a0) returned 1 Thread: id = 5079 os_tid = 0x2b6c [0179.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8320930 [0179.622] wcscpy (in: _Dest=0x8320930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0179.622] wcscat (in: _Dest=0x8320930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" [0179.622] wcscat (in: _Dest=0x8320930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*" [0179.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f081e0 [0179.622] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63f54c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63f7bd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0183.785] wcscmp (_String1=".", _String2=".") returned 0 [0183.785] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63f54c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63f7bd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.785] wcscmp (_String1="..", _String2=".") returned 1 [0183.785] wcscmp (_String1="..", _String2="..") returned 0 [0183.785] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63f7bd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.785] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.785] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d7c10 [0183.785] wcscpy (in: _Dest=0x81d7c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0183.785] wcscat (in: _Dest=0x81d7c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" [0183.785] wcscat (in: _Dest=0x81d7c10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" [0185.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c0 [0185.372] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f081e0 | out: lpFindFileData=0x3f081e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63f7bd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.372] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0185.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f081e0) returned 1 [0185.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320930) returned 1 [0185.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec2a8) returned 1 Thread: id = 5080 os_tid = 0x2b70 [0179.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x80547e0 [0179.623] wcscpy (in: _Dest=0x80547e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0179.623] wcscat (in: _Dest=0x80547e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" [0179.623] wcscat (in: _Dest=0x80547e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*" [0179.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f075d8 [0179.623] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63ff100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6403f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0183.784] wcscmp (_String1=".", _String2=".") returned 0 [0183.784] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63ff100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6403f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.784] wcscmp (_String1="..", _String2=".") returned 1 [0183.784] wcscmp (_String1="..", _String2="..") returned 0 [0183.784] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6403f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.784] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.784] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d1110 [0183.784] wcscpy (in: _Dest=0x81d1110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0183.785] wcscat (in: _Dest=0x81d1110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" [0183.785] wcscat (in: _Dest=0x81d1110, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" [0185.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ac [0185.370] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f075d8 | out: lpFindFileData=0x3f075d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6403f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.370] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0185.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f075d8) returned 1 [0185.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80547e0) returned 1 [0185.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec3b0) returned 1 Thread: id = 5081 os_tid = 0x2b88 [0179.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x80548e8 [0179.624] wcscpy (in: _Dest=0x80548e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0179.624] wcscat (in: _Dest=0x80548e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" [0179.624] wcscat (in: _Dest=0x80548e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*" [0179.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f08b80 [0179.624] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe640b450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe640db60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0183.783] wcscmp (_String1=".", _String2=".") returned 0 [0183.783] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe640b450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe640db60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.783] wcscmp (_String1="..", _String2=".") returned 1 [0183.783] wcscmp (_String1="..", _String2="..") returned 0 [0183.783] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe640db60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.783] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.783] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d2140 [0183.784] wcscpy (in: _Dest=0x81d2140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0183.784] wcscat (in: _Dest=0x81d2140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" [0183.784] wcscat (in: _Dest=0x81d2140, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" [0185.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d2140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b6c [0185.368] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f08b80 | out: lpFindFileData=0x3f08b80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe640db60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.368] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0185.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f08b80) returned 1 [0185.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80548e8) returned 1 [0185.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec4b8) returned 1 Thread: id = 5082 os_tid = 0x2b8c [0179.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x80549f0 [0179.625] wcscpy (in: _Dest=0x80549f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0179.625] wcscat (in: _Dest=0x80549f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" [0179.625] wcscat (in: _Dest=0x80549f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*" [0179.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d84ba0 [0179.625] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6412980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64177a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0183.782] wcscmp (_String1=".", _String2=".") returned 0 [0183.782] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6412980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64177a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.782] wcscmp (_String1="..", _String2=".") returned 1 [0183.782] wcscmp (_String1="..", _String2="..") returned 0 [0183.782] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64177a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.782] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.782] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d1238 [0183.782] wcscpy (in: _Dest=0x81d1238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0183.782] wcscat (in: _Dest=0x81d1238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" [0183.783] wcscat (in: _Dest=0x81d1238, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" [0185.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d1238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be4 [0185.366] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3d84ba0 | out: lpFindFileData=0x3d84ba0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64177a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.366] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0185.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ba0) returned 1 [0185.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80549f0) returned 1 [0185.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec5c0) returned 1 Thread: id = 5083 os_tid = 0x2b90 [0179.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8054af8 [0179.626] wcscpy (in: _Dest=0x8054af8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0179.626] wcscat (in: _Dest=0x8054af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" [0179.626] wcscat (in: _Dest=0x8054af8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*" [0179.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d85540 [0179.626] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe641ecd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64213e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0183.781] wcscmp (_String1=".", _String2=".") returned 0 [0183.781] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe641ecd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64213e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.781] wcscmp (_String1="..", _String2=".") returned 1 [0183.781] wcscmp (_String1="..", _String2="..") returned 0 [0183.781] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64213e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.781] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.781] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81d0d98 [0183.782] wcscpy (in: _Dest=0x81d0d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0183.782] wcscat (in: _Dest=0x81d0d98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" [0183.782] wcscat (in: _Dest=0x81d0d98, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" [0185.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be8 [0185.362] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3d85540 | out: lpFindFileData=0x3d85540*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64213e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.362] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0185.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85540) returned 1 [0185.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054af8) returned 1 [0185.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec6c8) returned 1 Thread: id = 5136 os_tid = 0x1ae4 [0179.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd")) returned 0x20 [0179.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd", dwFileAttributes=0x20) returned 0 [0179.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.864] GetLastError () returned 0x5 [0179.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd", dwFileAttributes=0x20) returned 0 [0179.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23e40) returned 1 Thread: id = 5152 os_tid = 0x2004 [0179.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif")) returned 0x20 [0179.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0179.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.993] GetLastError () returned 0x5 [0179.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0179.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f17f8) returned 1 Thread: id = 5153 os_tid = 0x2008 [0179.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif")) returned 0x20 [0179.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0179.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.995] GetLastError () returned 0x5 [0179.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0179.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6908) returned 1 Thread: id = 5154 os_tid = 0x200c [0179.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif")) returned 0x20 [0179.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0179.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.997] GetLastError () returned 0x5 [0179.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0179.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef718) returned 1 Thread: id = 5155 os_tid = 0x2010 [0180.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif")) returned 0x20 [0180.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0180.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.032] GetLastError () returned 0x5 [0180.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0180.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef648) returned 1 Thread: id = 5162 os_tid = 0x23a0 [0180.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif")) returned 0x20 [0180.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0180.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.066] GetLastError () returned 0x5 [0180.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0180.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efd98) returned 1 Thread: id = 5163 os_tid = 0x23a4 [0180.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif")) returned 0x20 [0180.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0180.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.068] GetLastError () returned 0x5 [0180.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0180.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0008) returned 1 Thread: id = 5206 os_tid = 0x2980 [0180.331] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json")) returned 0x2020 [0184.252] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0184.253] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bcc [0184.253] GetFileSizeEx (in: hFile=0x1bcc, lpFileSize=0x1753fec0 | out: lpFileSize=0x1753fec0*=267) returned 1 [0184.253] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.253] ReadFile (in: hFile=0x1bcc, lpBuffer=0x1753fecc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1753fea8, lpOverlapped=0x0 | out: lpBuffer=0x1753fecc*, lpNumberOfBytesRead=0x1753fea8*=0x4, lpOverlapped=0x0) returned 1 [0184.255] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0184.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0184.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0184.256] NtQuerySystemTime (in: CurrentTime=0x1753fe48 | out: CurrentTime=0x1753fe48*=132471540522108000) returned 0x0 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x243ce838 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x92f2073 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x74209c2d [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x41f672f4 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x3cf5f1bf [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x53bf97c4 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x5ef7743c [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x62f5cec3 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x77a9e653 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x3bd47249 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x747575d8 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x337ef286 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x37fffe02 [0184.256] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x232379e4 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x4147e82c [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x3d1465fa [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x1fa5159f [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x73078636 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x2737c92 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x172b2432 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x9d164a4 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x331761e [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0xc4e2d60 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x6efbc1dc [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x5a092c83 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x402d1084 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x51de820d [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x3a7b6614 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x160dcddd [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x3abacef [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x1085d0d2 [0184.257] RtlRandomEx (in: Seed=0x1753fe40 | out: Seed=0x1753fe40) returned 0x4e90951 [0184.266] ReadFile (in: hFile=0x1bcc, lpBuffer=0x809e060, nNumberOfBytesToRead=0x10b, lpNumberOfBytesRead=0x1753fe3c, lpOverlapped=0x0 | out: lpBuffer=0x809e060*, lpNumberOfBytesRead=0x1753fe3c*=0x10b, lpOverlapped=0x0) returned 1 [0184.266] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.266] WriteFile (in: hFile=0x1bcc, lpBuffer=0x80a1c68*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x1753fe40, lpOverlapped=0x0 | out: lpBuffer=0x80a1c68*, lpNumberOfBytesWritten=0x1753fe40*=0x10b, lpOverlapped=0x0) returned 1 [0186.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4a0 [0186.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0186.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0186.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1c68) returned 1 [0186.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809e060) returned 1 [0186.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b5c8) returned 1 [0186.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83e9c08) returned 1 [0186.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69780 [0186.518] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.518] WriteFile (in: hFile=0x1bcc, lpBuffer=0x8405fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1753feb4, lpOverlapped=0x0 | out: lpBuffer=0x8405fc0*, lpNumberOfBytesWritten=0x1753feb4*=0x10c, lpOverlapped=0x0) returned 1 [0189.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405fc0) returned 1 [0189.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697b0) returned 1 [0189.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0189.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69780) returned 1 [0189.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4a0) returned 1 [0189.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bdc0) returned 1 [0189.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0189.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0189.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403f48 [0189.503] wcscpy (in: _Dest=0x8403f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" [0189.503] wcscat (in: _Dest=0x8403f48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json.f0dbec" [0189.503] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0x1753fe38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9e48 [0190.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9e48) returned 1 [0190.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08bc0) returned 1 [0190.574] NtQueryInformationFile (in: FileHandle=0x1bcc, IoStatusBlock=0x1753fe10, FileInformation=0x1753fe18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1753fe10, FileInformation=0x1753fe18) returned 0x0 [0190.574] NtSetInformationFile (FileHandle=0x1bcc, IoStatusBlock=0x1753fe10, FileInformation=0x1753fe18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f48) returned 1 [0190.726] FlushFileBuffers (hFile=0x1bcc) returned 1 [0190.750] CloseHandle (hObject=0x1bcc) returned 1 [0190.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403e10 [0190.845] wcscpy (in: _Dest=0x8403e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" [0190.845] wcscat (in: _Dest=0x8403e10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\F0DBEC-Readme.txt" [0190.845] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0190.845] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1540 [0193.711] WriteFile (in: hFile=0x1540, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1753fe5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1753fe5c*=0x70c, lpOverlapped=0x0) returned 1 [0200.195] CloseHandle (hObject=0x1540) returned 1 [0205.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403e10) returned 1 [0205.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188018) returned 1 Thread: id = 5207 os_tid = 0x2984 [0180.332] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json")) returned 0x2020 [0184.371] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0194.291] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1718 [0194.292] GetFileSizeEx (in: hFile=0x1718, lpFileSize=0x1119f9d8 | out: lpFileSize=0x1119f9d8*=234) returned 1 [0194.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49bc8 [0194.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0194.292] NtQuerySystemTime (in: CurrentTime=0x1119f960 | out: CurrentTime=0x1119f960*=132471540621948000) returned 0x0 [0194.292] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x7683caa4 [0194.292] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x253a3a08 [0194.292] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x49d91028 [0194.292] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x2abbc02b [0194.292] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x5aadbca1 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x6468f9b5 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x73f168b6 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x5b6fd763 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x73f168b6 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x4cdc4da8 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x316e8d4c [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x6afbd57b [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x51ea9ebe [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x7ac5167c [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x716bd5ea [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x5311049d [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x46d24d5e [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x30ef14b7 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x5e7f4741 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x609655d6 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x42d75101 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x6c8b8692 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x2184f580 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x345ad663 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x356df6aa [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x2229efa7 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x617cc3df [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x269ea14f [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x6c8b8692 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x5aadbca1 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x4ebcdce9 [0194.293] RtlRandomEx (in: Seed=0x1119f958 | out: Seed=0x1119f958) returned 0x6681cde8 [0194.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829ec88 [0194.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0194.302] ReadFile (in: hFile=0x1718, lpBuffer=0x829ec88, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x1119f954, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesRead=0x1119f954*=0xea, lpOverlapped=0x0) returned 1 [0194.304] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.304] WriteFile (in: hFile=0x1718, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x1119f958, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0x1119f958*=0xea, lpOverlapped=0x0) returned 1 [0196.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42128 [0196.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42bf0 [0196.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0196.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0196.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0196.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0be38) returned 1 [0196.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4068) returned 1 [0196.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69660 [0196.267] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.268] WriteFile (in: hFile=0x1718, lpBuffer=0x81e0598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1119f9cc, lpOverlapped=0x0 | out: lpBuffer=0x81e0598*, lpNumberOfBytesWritten=0x1119f9cc*=0x10c, lpOverlapped=0x0) returned 1 [0196.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0598) returned 1 [0196.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69690) returned 1 [0196.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0196.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69660) returned 1 [0196.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42128) returned 1 [0196.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0196.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0196.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b8b0) returned 1 [0196.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5648 [0196.648] wcscpy (in: _Dest=0x81f5648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" [0196.648] wcscat (in: _Dest=0x81f5648, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json.f0dbec" [0196.648] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0x1119f950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9f90 [0196.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9f90) returned 1 [0196.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f20e8) returned 1 [0196.890] NtQueryInformationFile (in: FileHandle=0x1718, IoStatusBlock=0x1119f928, FileInformation=0x1119f930, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1119f928, FileInformation=0x1119f930) returned 0x0 [0196.890] NtSetInformationFile (FileHandle=0x1718, IoStatusBlock=0x1119f928, FileInformation=0x1119f930, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5648) returned 1 [0197.110] FlushFileBuffers (hFile=0x1718) returned 1 [0197.412] CloseHandle (hObject=0x1718) returned 1 [0197.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f69c8 [0197.746] wcscpy (in: _Dest=0x81f69c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" [0197.746] wcscat (in: _Dest=0x81f69c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\F0DBEC-Readme.txt" [0197.746] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0197.822] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29cc [0197.823] WriteFile (in: hFile=0x29cc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1119f974, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1119f974*=0x70c, lpOverlapped=0x0) returned 1 [0197.825] CloseHandle (hObject=0x29cc) returned 1 [0197.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f69c8) returned 1 [0197.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188140) returned 1 Thread: id = 5208 os_tid = 0x298c [0180.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\adelaide")) returned 0x20 [0186.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide", dwFileAttributes=0x20) returned 0 [0186.653] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\adelaide"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.653] GetLastError () returned 0x5 [0186.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide", dwFileAttributes=0x20) returned 0 [0186.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 Thread: id = 5209 os_tid = 0x2990 [0180.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\brisbane")) returned 0x20 [0186.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane", dwFileAttributes=0x20) returned 0 [0186.652] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\brisbane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.652] GetLastError () returned 0x5 [0186.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane", dwFileAttributes=0x20) returned 0 [0186.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b4d8) returned 1 Thread: id = 5210 os_tid = 0x2994 [0180.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\broken_hill")) returned 0x20 [0186.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill", dwFileAttributes=0x20) returned 0 [0186.281] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\broken_hill"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.281] GetLastError () returned 0x5 [0186.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill", dwFileAttributes=0x20) returned 0 [0186.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b988) returned 1 Thread: id = 5211 os_tid = 0x29f0 [0180.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\currie")) returned 0x20 [0189.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie", dwFileAttributes=0x20) returned 0 [0189.225] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\currie"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.244] GetLastError () returned 0x5 [0189.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie", dwFileAttributes=0x20) returned 0 [0189.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db19b8) returned 1 Thread: id = 5212 os_tid = 0x29f4 [0180.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\darwin")) returned 0x20 [0186.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin", dwFileAttributes=0x20) returned 0 [0186.665] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\darwin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.665] GetLastError () returned 0x5 [0186.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin", dwFileAttributes=0x20) returned 0 [0186.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1328) returned 1 Thread: id = 5213 os_tid = 0x29f8 [0180.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\eucla")) returned 0x20 [0186.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla", dwFileAttributes=0x20) returned 0 [0186.514] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\eucla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.514] GetLastError () returned 0x5 [0186.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla", dwFileAttributes=0x20) returned 0 [0186.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1948) returned 1 Thread: id = 5214 os_tid = 0x29fc [0180.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\hobart")) returned 0x20 [0186.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart", dwFileAttributes=0x20) returned 0 [0186.663] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\hobart"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.663] GetLastError () returned 0x5 [0186.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart", dwFileAttributes=0x20) returned 0 [0186.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db16a8) returned 1 Thread: id = 5215 os_tid = 0x2a00 [0180.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lindeman")) returned 0x20 [0186.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman", dwFileAttributes=0x20) returned 0 [0186.661] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lindeman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.661] GetLastError () returned 0x5 [0186.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman", dwFileAttributes=0x20) returned 0 [0186.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 Thread: id = 5216 os_tid = 0x2a04 [0180.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lord_howe")) returned 0x20 [0186.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe", dwFileAttributes=0x20) returned 0 [0186.659] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lord_howe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.659] GetLastError () returned 0x5 [0186.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe", dwFileAttributes=0x20) returned 0 [0186.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bbe0) returned 1 Thread: id = 5217 os_tid = 0x2a08 [0180.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\melbourne")) returned 0x20 [0186.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne", dwFileAttributes=0x20) returned 0 [0186.502] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\melbourne"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.502] GetLastError () returned 0x5 [0186.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne", dwFileAttributes=0x20) returned 0 [0186.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c018) returned 1 Thread: id = 5218 os_tid = 0x2a0c [0180.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\perth")) returned 0x20 [0186.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth", dwFileAttributes=0x20) returned 0 [0186.504] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\perth"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.504] GetLastError () returned 0x5 [0186.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth", dwFileAttributes=0x20) returned 0 [0186.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5240) returned 1 Thread: id = 5219 os_tid = 0x2a10 [0180.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\sydney")) returned 0x20 [0186.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney", dwFileAttributes=0x20) returned 0 [0186.512] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\sydney"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.512] GetLastError () returned 0x5 [0186.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney", dwFileAttributes=0x20) returned 0 [0186.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff51d0) returned 1 Thread: id = 5220 os_tid = 0x2a14 [0180.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jakarta")) returned 0x20 [0184.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta", dwFileAttributes=0x20) returned 0 [0184.179] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jakarta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.179] GetLastError () returned 0x5 [0184.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta", dwFileAttributes=0x20) returned 0 [0184.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46950) returned 1 Thread: id = 5221 os_tid = 0x1524 [0180.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jayapura")) returned 0x20 [0184.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura", dwFileAttributes=0x20) returned 0 [0184.174] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jayapura"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.174] GetLastError () returned 0x5 [0184.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura", dwFileAttributes=0x20) returned 0 [0184.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d477f0) returned 1 Thread: id = 5222 os_tid = 0x1afc [0180.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jerusalem")) returned 0x20 [0184.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem", dwFileAttributes=0x20) returned 0 [0184.172] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jerusalem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.172] GetLastError () returned 0x5 [0184.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem", dwFileAttributes=0x20) returned 0 [0184.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5470) returned 1 Thread: id = 5223 os_tid = 0x1840 [0180.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kabul")) returned 0x20 [0184.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul", dwFileAttributes=0x20) returned 0 [0184.170] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kabul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.171] GetLastError () returned 0x5 [0184.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul", dwFileAttributes=0x20) returned 0 [0184.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d460c8) returned 1 Thread: id = 5224 os_tid = 0x19d4 [0180.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kamchatka")) returned 0x20 [0181.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka", dwFileAttributes=0x20) returned 0 [0181.723] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kamchatka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.723] GetLastError () returned 0x5 [0181.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka", dwFileAttributes=0x20) returned 0 [0181.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff52b0) returned 1 Thread: id = 5225 os_tid = 0x1af8 [0180.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\karachi")) returned 0x20 [0184.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi", dwFileAttributes=0x20) returned 0 [0184.177] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\karachi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.177] GetLastError () returned 0x5 [0184.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi", dwFileAttributes=0x20) returned 0 [0184.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47fa8) returned 1 Thread: id = 5226 os_tid = 0x15f8 [0180.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kashgar")) returned 0x20 [0184.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar", dwFileAttributes=0x20) returned 0 [0184.175] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kashgar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.176] GetLastError () returned 0x5 [0184.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar", dwFileAttributes=0x20) returned 0 [0184.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47b98) returned 1 Thread: id = 5227 os_tid = 0x15f4 [0180.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ebab8 [0180.401] wcscpy (in: _Dest=0x83ebab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0180.401] wcscat (in: _Dest=0x83ebab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" [0180.401] wcscat (in: _Dest=0x83ebab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*" [0180.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a5f8 [0180.401] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe575c330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5761150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37e18 [0185.699] wcscmp (_String1=".", _String2=".") returned 0 [0185.699] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe575c330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5761150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.699] wcscmp (_String1="..", _String2=".") returned 1 [0185.699] wcscmp (_String1="..", _String2="..") returned 0 [0185.699] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5761150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.699] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.699] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a39d0 [0185.699] wcscpy (in: _Dest=0x148a39d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0185.700] wcscat (in: _Dest=0x148a39d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" [0185.700] wcscat (in: _Dest=0x148a39d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" [0186.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a39d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0186.929] FindNextFileW (in: hFindFile=0x3f37e18, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5761150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.929] FindClose (in: hFindFile=0x3f37e18 | out: hFindFile=0x3f37e18) returned 1 [0186.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a5f8) returned 1 [0186.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ebab8) returned 1 [0186.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334400) returned 1 Thread: id = 5228 os_tid = 0x2a20 [0180.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ebbc0 [0180.407] wcscpy (in: _Dest=0x83ebbc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0180.407] wcscat (in: _Dest=0x83ebbc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" [0180.407] wcscat (in: _Dest=0x83ebbc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*" [0180.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09788 [0180.407] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5765f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe576ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f378d8 [0185.698] wcscmp (_String1=".", _String2=".") returned 0 [0185.698] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5765f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe576ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.698] wcscmp (_String1="..", _String2=".") returned 1 [0185.698] wcscmp (_String1="..", _String2="..") returned 0 [0185.698] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe576ad90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.698] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.698] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a38a8 [0185.699] wcscpy (in: _Dest=0x148a38a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0185.699] wcscat (in: _Dest=0x148a38a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" [0185.699] wcscat (in: _Dest=0x148a38a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" [0186.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a38a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0186.926] FindNextFileW (in: hFindFile=0x3f378d8, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe576ad90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.926] FindClose (in: hFindFile=0x3f378d8 | out: hFindFile=0x3f378d8) returned 1 [0186.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09788) returned 1 [0186.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ebbc0) returned 1 [0186.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332c48) returned 1 Thread: id = 5229 os_tid = 0x2ae8 [0180.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ebcc8 [0180.408] wcscpy (in: _Dest=0x83ebcc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0180.408] wcscat (in: _Dest=0x83ebcc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" [0180.408] wcscat (in: _Dest=0x83ebcc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*" [0180.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a390 [0180.408] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57749d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57770e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57770e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38298 [0185.697] wcscmp (_String1=".", _String2=".") returned 0 [0185.697] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57749d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57770e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57770e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.697] wcscmp (_String1="..", _String2=".") returned 1 [0185.697] wcscmp (_String1="..", _String2="..") returned 0 [0185.697] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57770e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57797f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.697] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.697] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a3780 [0185.697] wcscpy (in: _Dest=0x148a3780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0185.698] wcscat (in: _Dest=0x148a3780, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" [0185.698] wcscat (in: _Dest=0x148a3780, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" [0186.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a3780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0186.924] FindNextFileW (in: hFindFile=0x3f38298, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57770e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57797f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.924] FindClose (in: hFindFile=0x3f38298 | out: hFindFile=0x3f38298) returned 1 [0186.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a390) returned 1 [0186.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ebcc8) returned 1 [0186.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334508) returned 1 Thread: id = 5230 os_tid = 0x2aec [0180.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ebdd0 [0180.409] wcscpy (in: _Dest=0x83ebdd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0180.409] wcscat (in: _Dest=0x83ebdd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" [0180.409] wcscat (in: _Dest=0x83ebdd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*" [0180.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f086b0 [0180.409] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe577e610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5783430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37558 [0185.710] wcscmp (_String1=".", _String2=".") returned 0 [0185.710] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe577e610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5783430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.710] wcscmp (_String1="..", _String2=".") returned 1 [0185.710] wcscmp (_String1="..", _String2="..") returned 0 [0185.710] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5783430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.710] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.711] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408398 [0185.711] wcscpy (in: _Dest=0x8408398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0185.711] wcscat (in: _Dest=0x8408398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" [0185.711] wcscat (in: _Dest=0x8408398, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" [0186.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0186.966] FindNextFileW (in: hFindFile=0x3f37558, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5783430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.966] FindClose (in: hFindFile=0x3f37558 | out: hFindFile=0x3f37558) returned 1 [0186.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f086b0) returned 1 [0186.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ebdd0) returned 1 [0186.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054e10) returned 1 Thread: id = 5231 os_tid = 0x2af0 [0180.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ebed8 [0180.409] wcscpy (in: _Dest=0x83ebed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0180.410] wcscat (in: _Dest=0x83ebed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" [0180.410] wcscat (in: _Dest=0x83ebed8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*" [0180.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a860 [0180.410] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5788250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe578d070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37798 [0185.709] wcscmp (_String1=".", _String2=".") returned 0 [0185.710] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5788250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe578d070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.710] wcscmp (_String1="..", _String2=".") returned 1 [0185.710] wcscmp (_String1="..", _String2="..") returned 0 [0185.710] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe578d070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.710] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.710] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408270 [0185.710] wcscpy (in: _Dest=0x8408270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0185.710] wcscat (in: _Dest=0x8408270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" [0185.710] wcscat (in: _Dest=0x8408270, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" [0186.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0186.963] FindNextFileW (in: hFindFile=0x3f37798, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe578d070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.964] FindClose (in: hFindFile=0x3f37798 | out: hFindFile=0x3f37798) returned 1 [0186.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a860) returned 1 [0186.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ebed8) returned 1 [0186.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054f18) returned 1 Thread: id = 5232 os_tid = 0x2af4 [0180.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ebfe0 [0180.410] wcscpy (in: _Dest=0x83ebfe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0180.410] wcscat (in: _Dest=0x83ebfe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" [0180.410] wcscat (in: _Dest=0x83ebfe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*" [0180.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ac68 [0180.410] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x808ac68 | out: lpFindFileData=0x808ac68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5791e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57993c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f38218 [0185.709] wcscmp (_String1=".", _String2=".") returned 0 [0185.709] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x808ac68 | out: lpFindFileData=0x808ac68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5791e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57993c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.709] wcscmp (_String1="..", _String2=".") returned 1 [0185.709] wcscmp (_String1="..", _String2="..") returned 0 [0185.709] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x808ac68 | out: lpFindFileData=0x808ac68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57993c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.709] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.709] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408148 [0185.709] wcscpy (in: _Dest=0x8408148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0185.709] wcscat (in: _Dest=0x8408148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" [0185.709] wcscat (in: _Dest=0x8408148, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" [0186.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0186.961] FindNextFileW (in: hFindFile=0x3f38218, lpFindFileData=0x808ac68 | out: lpFindFileData=0x808ac68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57993c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.961] FindClose (in: hFindFile=0x3f38218 | out: hFindFile=0x3f38218) returned 1 [0186.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ac68) returned 1 [0186.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ebfe0) returned 1 [0186.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055020) returned 1 Thread: id = 5233 os_tid = 0x2b04 [0180.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ec0e8 [0180.411] wcscpy (in: _Dest=0x83ec0e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0180.411] wcscat (in: _Dest=0x83ec0e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" [0180.411] wcscat (in: _Dest=0x83ec0e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*" [0180.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808aed0 [0180.411] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x808aed0 | out: lpFindFileData=0x808aed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57a08f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57a5710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f377d8 [0185.708] wcscmp (_String1=".", _String2=".") returned 0 [0185.708] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x808aed0 | out: lpFindFileData=0x808aed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57a08f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57a5710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.708] wcscmp (_String1="..", _String2=".") returned 1 [0185.708] wcscmp (_String1="..", _String2="..") returned 0 [0185.708] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x808aed0 | out: lpFindFileData=0x808aed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57a5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.708] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.708] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408020 [0185.708] wcscpy (in: _Dest=0x8408020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0185.708] wcscat (in: _Dest=0x8408020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" [0185.708] wcscat (in: _Dest=0x8408020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" [0186.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0186.958] FindNextFileW (in: hFindFile=0x3f377d8, lpFindFileData=0x808aed0 | out: lpFindFileData=0x808aed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57a5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.958] FindClose (in: hFindFile=0x3f377d8 | out: hFindFile=0x3f377d8) returned 1 [0186.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808aed0) returned 1 [0186.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ec0e8) returned 1 [0186.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055128) returned 1 Thread: id = 5234 os_tid = 0x2b08 [0180.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ec1f0 [0180.412] wcscpy (in: _Dest=0x83ec1f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0180.412] wcscat (in: _Dest=0x83ec1f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" [0180.412] wcscat (in: _Dest=0x83ec1f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*" [0180.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808b138 [0180.412] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x808b138 | out: lpFindFileData=0x808b138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57aa530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57af350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37a98 [0185.696] wcscmp (_String1=".", _String2=".") returned 0 [0185.696] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x808b138 | out: lpFindFileData=0x808b138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57aa530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57af350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.696] wcscmp (_String1="..", _String2=".") returned 1 [0185.696] wcscmp (_String1="..", _String2="..") returned 0 [0185.696] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x808b138 | out: lpFindFileData=0x808b138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57af350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.696] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.696] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a3658 [0185.697] wcscpy (in: _Dest=0x148a3658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0185.697] wcscat (in: _Dest=0x148a3658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" [0185.697] wcscat (in: _Dest=0x148a3658, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" [0186.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a3658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0186.921] FindNextFileW (in: hFindFile=0x3f37a98, lpFindFileData=0x808b138 | out: lpFindFileData=0x808b138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57af350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.921] FindClose (in: hFindFile=0x3f37a98 | out: hFindFile=0x3f37a98) returned 1 [0186.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808b138) returned 1 [0186.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ec1f0) returned 1 [0186.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055230) returned 1 Thread: id = 5235 os_tid = 0x2a48 [0180.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ec2f8 [0180.412] wcscpy (in: _Dest=0x83ec2f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0180.412] wcscat (in: _Dest=0x83ec2f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" [0180.412] wcscat (in: _Dest=0x83ec2f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*" [0180.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808b3a0 [0180.413] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x808b3a0 | out: lpFindFileData=0x808b3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57b4170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57b8f90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37518 [0185.695] wcscmp (_String1=".", _String2=".") returned 0 [0185.695] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x808b3a0 | out: lpFindFileData=0x808b3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57b4170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57b8f90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.695] wcscmp (_String1="..", _String2=".") returned 1 [0185.696] wcscmp (_String1="..", _String2="..") returned 0 [0185.696] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x808b3a0 | out: lpFindFileData=0x808b3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57b8f90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.696] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.696] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a3530 [0185.696] wcscpy (in: _Dest=0x148a3530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0185.696] wcscat (in: _Dest=0x148a3530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" [0185.696] wcscat (in: _Dest=0x148a3530, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" [0186.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a3530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0186.918] FindNextFileW (in: hFindFile=0x3f37518, lpFindFileData=0x808b3a0 | out: lpFindFileData=0x808b3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57b8f90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.918] FindClose (in: hFindFile=0x3f37518 | out: hFindFile=0x3f37518) returned 1 [0186.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808b3a0) returned 1 [0186.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ec2f8) returned 1 [0186.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055338) returned 1 Thread: id = 5236 os_tid = 0x2a4c [0180.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ec400 [0180.413] wcscpy (in: _Dest=0x83ec400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0180.413] wcscat (in: _Dest=0x83ec400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" [0180.413] wcscat (in: _Dest=0x83ec400, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*" [0180.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808b608 [0180.413] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x808b608 | out: lpFindFileData=0x808b608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57c04c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57c52e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37fd8 [0185.695] wcscmp (_String1=".", _String2=".") returned 0 [0185.695] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x808b608 | out: lpFindFileData=0x808b608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57c04c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57c52e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.695] wcscmp (_String1="..", _String2=".") returned 1 [0185.695] wcscmp (_String1="..", _String2="..") returned 0 [0185.695] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x808b608 | out: lpFindFileData=0x808b608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57c52e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.695] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.695] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a3408 [0185.695] wcscpy (in: _Dest=0x148a3408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0185.695] wcscat (in: _Dest=0x148a3408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" [0185.695] wcscat (in: _Dest=0x148a3408, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" [0186.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a3408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0186.913] FindNextFileW (in: hFindFile=0x3f37fd8, lpFindFileData=0x808b608 | out: lpFindFileData=0x808b608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57c52e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.913] FindClose (in: hFindFile=0x3f37fd8 | out: hFindFile=0x3f37fd8) returned 1 [0186.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808b608) returned 1 [0186.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ec400) returned 1 [0186.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055440) returned 1 Thread: id = 5237 os_tid = 0x2a50 [0180.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83ec508 [0180.414] wcscpy (in: _Dest=0x83ec508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0180.414] wcscat (in: _Dest=0x83ec508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" [0180.414] wcscat (in: _Dest=0x83ec508, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*" [0180.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808b870 [0180.414] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x808b870 | out: lpFindFileData=0x808b870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57cc810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57d1630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37498 [0185.693] wcscmp (_String1=".", _String2=".") returned 0 [0185.694] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x808b870 | out: lpFindFileData=0x808b870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57cc810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57d1630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.694] wcscmp (_String1="..", _String2=".") returned 1 [0185.694] wcscmp (_String1="..", _String2="..") returned 0 [0185.694] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x808b870 | out: lpFindFileData=0x808b870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57d1630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.694] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.694] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a32e0 [0185.694] wcscpy (in: _Dest=0x148a32e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0185.694] wcscat (in: _Dest=0x148a32e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" [0185.694] wcscat (in: _Dest=0x148a32e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" [0186.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a32e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0186.910] FindNextFileW (in: hFindFile=0x3f37498, lpFindFileData=0x808b870 | out: lpFindFileData=0x808b870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57d1630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.910] FindClose (in: hFindFile=0x3f37498 | out: hFindFile=0x3f37498) returned 1 [0186.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808b870) returned 1 [0186.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ec508) returned 1 [0186.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055548) returned 1 Thread: id = 5265 os_tid = 0x2ac8 [0180.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt")) returned 0x20 [0186.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt", dwFileAttributes=0x20) returned 0 [0186.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.613] GetLastError () returned 0x5 [0186.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt", dwFileAttributes=0x20) returned 0 [0186.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021aa0) returned 1 Thread: id = 5286 os_tid = 0x2b48 [0180.461] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json")) returned 0x2020 [0186.668] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0194.846] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x141c [0194.846] GetFileSizeEx (in: hFile=0x141c, lpFileSize=0x1900fdb8 | out: lpFileSize=0x1900fdb8*=1322) returned 1 [0194.846] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x526, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.846] ReadFile (in: hFile=0x141c, lpBuffer=0x1900fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1900fda0, lpOverlapped=0x0 | out: lpBuffer=0x1900fdc4*, lpNumberOfBytesRead=0x1900fda0*=0x4, lpOverlapped=0x0) returned 1 [0194.849] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1068 [0194.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2120 [0194.849] NtQuerySystemTime (in: CurrentTime=0x1900fd40 | out: CurrentTime=0x1900fd40*=132471540627408000) returned 0x0 [0194.849] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x9a5b634 [0194.849] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x7db563b9 [0194.849] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x531f34e8 [0194.849] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x2c9915a4 [0194.849] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x766bb816 [0194.849] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x28eeb978 [0194.849] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x2a2175dd [0194.849] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0xdbc38ac [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x3ef97c65 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0xd449326 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x6c4d07fa [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x39531b12 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x63fb598d [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x364db629 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x79c702f8 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x3a5a9069 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x6237bdce [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x7024e0d1 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x82ff570 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x3663d92e [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x4a0d0e52 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x3a2e3d0c [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x112da716 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x7ef08cbe [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x38d7fb91 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x5cb2a5d0 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x52ebfa27 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x1522b3b1 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x3886247f [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x4521ed75 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x3a05edc8 [0194.850] RtlRandomEx (in: Seed=0x1900fd38 | out: Seed=0x1900fd38) returned 0x6f6233da [0194.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35c0 [0194.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x80548d0 [0194.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0194.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80548d0) returned 1 [0194.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2120) returned 1 [0194.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d9d8 [0194.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x80548d0 [0194.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a11478 [0194.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a15080 [0194.862] ReadFile (in: hFile=0x141c, lpBuffer=0x14a11478, nNumberOfBytesToRead=0x52a, lpNumberOfBytesRead=0x1900fd34, lpOverlapped=0x0 | out: lpBuffer=0x14a11478*, lpNumberOfBytesRead=0x1900fd34*=0x52a, lpOverlapped=0x0) returned 1 [0194.862] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.862] WriteFile (in: hFile=0x141c, lpBuffer=0x14a15080*, nNumberOfBytesToWrite=0x52a, lpNumberOfBytesWritten=0x1900fd38, lpOverlapped=0x0 | out: lpBuffer=0x14a15080*, lpNumberOfBytesWritten=0x1900fd38*=0x52a, lpOverlapped=0x0) returned 1 [0201.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fd0 [0201.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062ff8 [0201.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ff8) returned 1 [0201.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a15080) returned 1 [0201.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a11478) returned 1 [0201.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80548d0) returned 1 [0201.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d8) returned 1 [0201.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e699c0 [0201.622] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.622] WriteFile (in: hFile=0x141c, lpBuffer=0x81dfaa8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1900fdac, lpOverlapped=0x0 | out: lpBuffer=0x81dfaa8*, lpNumberOfBytesWritten=0x1900fdac*=0x10c, lpOverlapped=0x0) returned 1 [0203.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfaa8) returned 1 [0203.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699f0) returned 1 [0203.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ff8) returned 1 [0203.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699c0) returned 1 [0203.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fd0) returned 1 [0203.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1068) returned 1 [0203.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0203.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0203.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81f09f0 [0203.873] wcscpy (in: _Dest=0x81f09f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" [0203.873] wcscat (in: _Dest=0x81f09f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.f0dbec" [0203.873] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.f0dbec", NtPathName=0x1900fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f6758 [0207.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6758) returned 1 [0207.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8204998) returned 1 [0207.252] NtQueryInformationFile (in: FileHandle=0x141c, IoStatusBlock=0x1900fd08, FileInformation=0x1900fd10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1900fd08, FileInformation=0x1900fd10) returned 0x0 [0207.252] NtSetInformationFile (FileHandle=0x141c, IoStatusBlock=0x1900fd08, FileInformation=0x1900fd10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f09f0) returned 1 [0208.335] FlushFileBuffers (hFile=0x141c) returned 1 [0208.337] CloseHandle (hObject=0x141c) returned 1 [0208.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc1f0 [0208.788] wcscpy (in: _Dest=0x30bc1f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0208.788] wcscat (in: _Dest=0x30bc1f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\F0DBEC-Readme.txt" [0208.788] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\f0dbec-readme.txt")) returned 0xffffffff [0208.788] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1418 [0209.760] WriteFile (in: hFile=0x1418, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1900fd54, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1900fd54*=0x70c, lpOverlapped=0x0) returned 1 [0209.762] CloseHandle (hObject=0x1418) returned 1 [0209.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0209.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df990) returned 1 Thread: id = 5303 os_tid = 0x2bc4 [0180.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml")) returned 0x20 [0183.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML", dwFileAttributes=0x20) returned 0 [0183.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.820] GetLastError () returned 0x5 [0183.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML", dwFileAttributes=0x20) returned 0 [0183.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ec930) returned 1 Thread: id = 5310 os_tid = 0x2c18 [0180.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\amsterdam")) returned 0x20 [0180.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam", dwFileAttributes=0x20) returned 0 [0180.545] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\amsterdam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.545] GetLastError () returned 0x5 [0180.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam", dwFileAttributes=0x20) returned 0 [0180.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39ee8) returned 1 Thread: id = 5311 os_tid = 0x2c1c [0180.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\andorra")) returned 0x20 [0180.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra", dwFileAttributes=0x20) returned 0 [0180.547] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\andorra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.547] GetLastError () returned 0x5 [0180.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra", dwFileAttributes=0x20) returned 0 [0180.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33588) returned 1 Thread: id = 5326 os_tid = 0xb5c [0180.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc")) returned 0x20 [0184.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC", dwFileAttributes=0x20) returned 0 [0184.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.132] GetLastError () returned 0x5 [0184.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC", dwFileAttributes=0x20) returned 0 [0184.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 5327 os_tid = 0xb18 [0180.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc")) returned 0x20 [0184.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC", dwFileAttributes=0x20) returned 0 [0184.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.131] GetLastError () returned 0x5 [0184.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC", dwFileAttributes=0x20) returned 0 [0184.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 5328 os_tid = 0xb78 [0180.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc")) returned 0x20 [0184.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC", dwFileAttributes=0x20) returned 0 [0184.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.129] GetLastError () returned 0x5 [0184.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC", dwFileAttributes=0x20) returned 0 [0184.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 5360 os_tid = 0x2cf0 [0180.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vilnius")) returned 0x20 [0184.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius", dwFileAttributes=0x20) returned 0 [0184.716] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vilnius"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.716] GetLastError () returned 0x5 [0184.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius", dwFileAttributes=0x20) returned 0 [0184.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33c18) returned 1 Thread: id = 5361 os_tid = 0x2cf4 [0180.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\volgograd")) returned 0x20 [0184.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd", dwFileAttributes=0x20) returned 0 [0184.723] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\volgograd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.723] GetLastError () returned 0x5 [0184.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd", dwFileAttributes=0x20) returned 0 [0184.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33f28) returned 1 Thread: id = 5366 os_tid = 0x2d08 [0183.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lusaka")) returned 0x20 [0188.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", dwFileAttributes=0x20) returned 0 [0188.623] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lusaka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.700] GetLastError () returned 0x5 [0188.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", dwFileAttributes=0x20) returned 0 [0188.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e4e8) returned 1 Thread: id = 5367 os_tid = 0x2d0c [0183.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\malabo")) returned 0x20 [0188.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo", dwFileAttributes=0x20) returned 0 [0188.721] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\malabo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.732] GetLastError () returned 0x5 [0188.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo", dwFileAttributes=0x20) returned 0 [0188.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e008) returned 1 Thread: id = 5368 os_tid = 0x484 [0183.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maputo")) returned 0x20 [0188.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo", dwFileAttributes=0x20) returned 0 [0188.723] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maputo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.741] GetLastError () returned 0x5 [0188.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo", dwFileAttributes=0x20) returned 0 [0188.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb10) returned 1 Thread: id = 5369 os_tid = 0x264 [0183.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maseru")) returned 0x20 [0188.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru", dwFileAttributes=0x20) returned 0 [0188.717] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maseru"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.727] GetLastError () returned 0x5 [0188.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru", dwFileAttributes=0x20) returned 0 [0188.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c810) returned 1 Thread: id = 5370 os_tid = 0xc4 [0183.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mbabane")) returned 0x20 [0188.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", dwFileAttributes=0x20) returned 0 [0188.762] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mbabane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.762] GetLastError () returned 0x5 [0188.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", dwFileAttributes=0x20) returned 0 [0188.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33e48) returned 1 Thread: id = 5371 os_tid = 0x918 [0183.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mogadishu")) returned 0x20 [0187.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", dwFileAttributes=0x20) returned 0 [0187.775] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mogadishu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.667] GetLastError () returned 0x5 [0188.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", dwFileAttributes=0x20) returned 0 [0188.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33588) returned 1 Thread: id = 5372 os_tid = 0xdf4 [0183.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\monrovia")) returned 0x20 [0188.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", dwFileAttributes=0x20) returned 0 [0188.763] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\monrovia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.763] GetLastError () returned 0x5 [0188.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", dwFileAttributes=0x20) returned 0 [0188.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39ee8) returned 1 Thread: id = 5373 os_tid = 0x5ec [0183.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nairobi")) returned 0x20 [0188.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", dwFileAttributes=0x20) returned 0 [0188.636] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nairobi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.705] GetLastError () returned 0x5 [0188.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", dwFileAttributes=0x20) returned 0 [0188.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15700) returned 1 Thread: id = 5374 os_tid = 0x14b0 [0183.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ndjamena")) returned 0x20 [0188.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", dwFileAttributes=0x20) returned 0 [0188.667] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ndjamena"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.709] GetLastError () returned 0x5 [0188.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", dwFileAttributes=0x20) returned 0 [0188.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3519c0) returned 1 Thread: id = 5375 os_tid = 0x11a8 [0183.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\niamey")) returned 0x20 [0188.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey", dwFileAttributes=0x20) returned 0 [0188.695] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\niamey"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.712] GetLastError () returned 0x5 [0188.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey", dwFileAttributes=0x20) returned 0 [0188.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 Thread: id = 5376 os_tid = 0x508 [0183.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nouakchott")) returned 0x20 [0188.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", dwFileAttributes=0x20) returned 0 [0188.741] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nouakchott"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.759] GetLastError () returned 0x5 [0188.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", dwFileAttributes=0x20) returned 0 [0188.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364a80) returned 1 Thread: id = 5377 os_tid = 0xfd8 [0183.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ouagadougou")) returned 0x20 [0188.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", dwFileAttributes=0x20) returned 0 [0188.746] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ouagadougou"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.758] GetLastError () returned 0x5 [0188.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", dwFileAttributes=0x20) returned 0 [0188.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32fe8) returned 1 Thread: id = 5378 os_tid = 0x1350 [0183.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\porto-novo")) returned 0x20 [0188.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", dwFileAttributes=0x20) returned 0 [0188.750] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\porto-novo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.761] GetLastError () returned 0x5 [0188.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", dwFileAttributes=0x20) returned 0 [0188.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ccd8) returned 1 Thread: id = 5379 os_tid = 0x2d40 [0183.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\sao_tome")) returned 0x20 [0188.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome", dwFileAttributes=0x20) returned 0 [0188.700] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\sao_tome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.717] GetLastError () returned 0x5 [0188.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome", dwFileAttributes=0x20) returned 0 [0188.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402930) returned 1 Thread: id = 5380 os_tid = 0x2d44 [0183.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tripoli")) returned 0x20 [0188.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli", dwFileAttributes=0x20) returned 0 [0188.705] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tripoli"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.720] GetLastError () returned 0x5 [0188.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli", dwFileAttributes=0x20) returned 0 [0188.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84029a0) returned 1 Thread: id = 5381 os_tid = 0x2d48 [0183.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tunis")) returned 0x20 [0188.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis", dwFileAttributes=0x20) returned 0 [0188.709] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tunis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.741] GetLastError () returned 0x5 [0188.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis", dwFileAttributes=0x20) returned 0 [0188.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e890) returned 1 Thread: id = 5382 os_tid = 0x1004 [0183.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\windhoek")) returned 0x20 [0188.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek", dwFileAttributes=0x20) returned 0 [0188.713] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\windhoek"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.746] GetLastError () returned 0x5 [0188.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek", dwFileAttributes=0x20) returned 0 [0188.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a10) returned 1 Thread: id = 5383 os_tid = 0x1354 [0183.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef5ac8 [0183.547] wcscpy (in: _Dest=0x3ef5ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0183.547] wcscat (in: _Dest=0x3ef5ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" [0183.547] wcscat (in: _Dest=0x3ef5ac8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*" [0183.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f3a0 [0183.547] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57e27a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57e4eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0050 [0185.678] wcscmp (_String1=".", _String2=".") returned 0 [0185.678] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57e27a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57e4eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.678] wcscmp (_String1="..", _String2=".") returned 1 [0185.678] wcscmp (_String1="..", _String2="..") returned 0 [0185.678] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57e4eb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.678] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.678] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a2500 [0185.678] wcscpy (in: _Dest=0x148a2500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0185.678] wcscat (in: _Dest=0x148a2500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" [0185.678] wcscat (in: _Dest=0x148a2500, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" [0188.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0188.050] FindNextFileW (in: hFindFile=0x3dd0050, lpFindFileData=0x808f3a0 | out: lpFindFileData=0x808f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57e4eb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.050] FindClose (in: hFindFile=0x3dd0050 | out: hFindFile=0x3dd0050) returned 1 [0188.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f3a0) returned 1 [0188.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ac8) returned 1 [0188.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f9a00) returned 1 Thread: id = 5384 os_tid = 0x100c [0183.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef55a0 [0183.549] wcscpy (in: _Dest=0x3ef55a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0183.549] wcscat (in: _Dest=0x3ef55a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" [0183.549] wcscat (in: _Dest=0x3ef55a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*" [0183.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808f608 [0183.549] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57f1200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57f3910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0185.680] wcscmp (_String1=".", _String2=".") returned 0 [0185.680] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57f1200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57f3910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.680] wcscmp (_String1="..", _String2=".") returned 1 [0185.680] wcscmp (_String1="..", _String2="..") returned 0 [0185.680] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57f3910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.680] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.680] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x148a2750 [0185.680] wcscpy (in: _Dest=0x148a2750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0185.680] wcscat (in: _Dest=0x148a2750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" [0185.680] wcscat (in: _Dest=0x148a2750, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" [0187.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0187.272] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x808f608 | out: lpFindFileData=0x808f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57f3910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.272] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0187.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808f608) returned 1 [0187.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef55a0) returned 1 [0187.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83efab8) returned 1 Thread: id = 5385 os_tid = 0x135c [0183.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef4f70 [0183.552] wcscpy (in: _Dest=0x3ef4f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0183.552] wcscat (in: _Dest=0x3ef4f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" [0183.552] wcscat (in: _Dest=0x3ef4f70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*" [0183.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808e530 [0183.553] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57fae40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57fd550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37998 [0185.720] wcscmp (_String1=".", _String2=".") returned 0 [0185.720] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57fae40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57fd550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.720] wcscmp (_String1="..", _String2=".") returned 1 [0185.720] wcscmp (_String1="..", _String2="..") returned 0 [0185.720] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57fd550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.720] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.721] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408838 [0185.721] wcscpy (in: _Dest=0x8408838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0185.721] wcscat (in: _Dest=0x8408838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" [0185.721] wcscat (in: _Dest=0x8408838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" [0186.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0186.980] FindNextFileW (in: hFindFile=0x3f37998, lpFindFileData=0x808e530 | out: lpFindFileData=0x808e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57fd550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.980] FindClose (in: hFindFile=0x3f37998 | out: hFindFile=0x3f37998) returned 1 [0186.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808e530) returned 1 [0186.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f70) returned 1 [0186.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83efbc0) returned 1 Thread: id = 5386 os_tid = 0x2dc0 [0183.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef58b8 [0183.565] wcscpy (in: _Dest=0x3ef58b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0183.565] wcscat (in: _Dest=0x3ef58b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" [0183.565] wcscat (in: _Dest=0x3ef58b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*" [0183.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8025f90 [0183.566] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x8025f90 | out: lpFindFileData=0x8025f90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5804a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5807190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37f98 [0185.721] wcscmp (_String1=".", _String2=".") returned 0 [0185.721] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8025f90 | out: lpFindFileData=0x8025f90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5804a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5807190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.721] wcscmp (_String1="..", _String2=".") returned 1 [0185.721] wcscmp (_String1="..", _String2="..") returned 0 [0185.722] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8025f90 | out: lpFindFileData=0x8025f90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5807190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.722] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.722] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408960 [0185.722] wcscpy (in: _Dest=0x8408960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0185.722] wcscat (in: _Dest=0x8408960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" [0185.722] wcscat (in: _Dest=0x8408960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" [0186.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0186.983] FindNextFileW (in: hFindFile=0x3f37f98, lpFindFileData=0x8025f90 | out: lpFindFileData=0x8025f90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5807190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.983] FindClose (in: hFindFile=0x3f37f98 | out: hFindFile=0x3f37f98) returned 1 [0186.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8025f90) returned 1 [0186.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef58b8) returned 1 [0186.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83efcc8) returned 1 Thread: id = 5387 os_tid = 0x2dc4 [0183.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef5498 [0183.571] wcscpy (in: _Dest=0x3ef5498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0183.571] wcscat (in: _Dest=0x3ef5498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" [0183.571] wcscat (in: _Dest=0x3ef5498, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*" [0183.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80261f8 [0183.571] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x80261f8 | out: lpFindFileData=0x80261f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5810dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5815bf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d18 [0185.722] wcscmp (_String1=".", _String2=".") returned 0 [0185.722] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x80261f8 | out: lpFindFileData=0x80261f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5810dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5815bf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.722] wcscmp (_String1="..", _String2=".") returned 1 [0185.722] wcscmp (_String1="..", _String2="..") returned 0 [0185.723] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x80261f8 | out: lpFindFileData=0x80261f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5815bf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.723] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.723] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408a88 [0185.723] wcscpy (in: _Dest=0x8408a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0185.723] wcscat (in: _Dest=0x8408a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" [0185.723] wcscat (in: _Dest=0x8408a88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" [0186.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0186.987] FindNextFileW (in: hFindFile=0x3f37d18, lpFindFileData=0x80261f8 | out: lpFindFileData=0x80261f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5815bf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.987] FindClose (in: hFindFile=0x3f37d18 | out: hFindFile=0x3f37d18) returned 1 [0186.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80261f8) returned 1 [0186.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5498) returned 1 [0186.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83efdd0) returned 1 Thread: id = 5388 os_tid = 0x2dc8 [0183.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8403d50 [0183.573] wcscpy (in: _Dest=0x8403d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0183.573] wcscat (in: _Dest=0x8403d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" [0183.573] wcscat (in: _Dest=0x8403d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*" [0183.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8026460 [0183.573] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x8026460 | out: lpFindFileData=0x8026460*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe581d120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe581f830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe581f830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37598 [0185.723] wcscmp (_String1=".", _String2=".") returned 0 [0185.723] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8026460 | out: lpFindFileData=0x8026460*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe581d120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe581f830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe581f830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.724] wcscmp (_String1="..", _String2=".") returned 1 [0185.724] wcscmp (_String1="..", _String2="..") returned 0 [0185.724] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8026460 | out: lpFindFileData=0x8026460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe581f830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5821f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.724] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.724] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408bb0 [0185.724] wcscpy (in: _Dest=0x8408bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0185.724] wcscat (in: _Dest=0x8408bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" [0185.724] wcscat (in: _Dest=0x8408bb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" [0186.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0186.989] FindNextFileW (in: hFindFile=0x3f37598, lpFindFileData=0x8026460 | out: lpFindFileData=0x8026460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe581f830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5821f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.989] FindClose (in: hFindFile=0x3f37598 | out: hFindFile=0x3f37598) returned 1 [0186.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8026460) returned 1 [0186.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403d50) returned 1 [0186.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83efed8) returned 1 Thread: id = 5389 os_tid = 0x2dcc [0183.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8403e58 [0183.574] wcscpy (in: _Dest=0x8403e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0183.574] wcscat (in: _Dest=0x8403e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" [0183.574] wcscat (in: _Dest=0x8403e58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*" [0183.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80266c8 [0183.574] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x80266c8 | out: lpFindFileData=0x80266c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5826d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe582bb80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37718 [0185.725] wcscmp (_String1=".", _String2=".") returned 0 [0185.725] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x80266c8 | out: lpFindFileData=0x80266c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5826d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe582bb80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.725] wcscmp (_String1="..", _String2=".") returned 1 [0185.725] wcscmp (_String1="..", _String2="..") returned 0 [0185.725] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x80266c8 | out: lpFindFileData=0x80266c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe582bb80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.725] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.725] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408cd8 [0185.725] wcscpy (in: _Dest=0x8408cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0185.725] wcscat (in: _Dest=0x8408cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" [0185.725] wcscat (in: _Dest=0x8408cd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" [0186.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0186.992] FindNextFileW (in: hFindFile=0x3f37718, lpFindFileData=0x80266c8 | out: lpFindFileData=0x80266c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe582bb80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.992] FindClose (in: hFindFile=0x3f37718 | out: hFindFile=0x3f37718) returned 1 [0186.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80266c8) returned 1 [0186.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403e58) returned 1 [0186.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83effe0) returned 1 Thread: id = 5390 os_tid = 0x2dd0 [0183.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8403f60 [0183.575] wcscpy (in: _Dest=0x8403f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0183.575] wcscat (in: _Dest=0x8403f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" [0183.575] wcscat (in: _Dest=0x8403f60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*" [0183.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8026930 [0183.575] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x8026930 | out: lpFindFileData=0x8026930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58309a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5841b10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f375d8 [0185.726] wcscmp (_String1=".", _String2=".") returned 0 [0185.726] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x8026930 | out: lpFindFileData=0x8026930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58309a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5841b10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.726] wcscmp (_String1="..", _String2=".") returned 1 [0185.726] wcscmp (_String1="..", _String2="..") returned 0 [0185.726] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x8026930 | out: lpFindFileData=0x8026930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5841b10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.726] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.726] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8408e00 [0185.726] wcscpy (in: _Dest=0x8408e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0185.726] wcscat (in: _Dest=0x8408e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" [0185.726] wcscat (in: _Dest=0x8408e00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" [0186.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8408e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0186.995] FindNextFileW (in: hFindFile=0x3f375d8, lpFindFileData=0x8026930 | out: lpFindFileData=0x8026930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5841b10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.995] FindClose (in: hFindFile=0x3f375d8 | out: hFindFile=0x3f375d8) returned 1 [0186.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8026930) returned 1 [0186.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f60) returned 1 [0186.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f00e8) returned 1 Thread: id = 5401 os_tid = 0x2e4c [0184.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bbb60 [0184.746] wcscpy (in: _Dest=0x30bbb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0184.746] wcscat (in: _Dest=0x30bbb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" [0184.746] wcscat (in: _Dest=0x30bbb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*" [0184.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0184.746] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80996d0 [0185.144] wcscmp (_String1=".", _String2=".") returned 0 [0185.144] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.145] wcscmp (_String1="..", _String2=".") returned 1 [0185.145] wcscmp (_String1="..", _String2="..") returned 0 [0185.145] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.145] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.145] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a2188 [0185.145] wcscpy (in: _Dest=0x148a2188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0185.145] wcscat (in: _Dest=0x148a2188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" [0185.145] wcscat (in: _Dest=0x148a2188, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" [0188.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x148a2188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0188.007] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.008] FindClose (in: hFindFile=0x80996d0 | out: hFindFile=0x80996d0) returned 1 [0188.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0188.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0188.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83486b8) returned 1 Thread: id = 5402 os_tid = 0x2e50 [0184.747] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020 [0191.215] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0201.658] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19f8 [0201.659] GetFileSizeEx (in: hFile=0x19f8, lpFileSize=0x7d9f990 | out: lpFileSize=0x7d9f990*=217) returned 1 [0201.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d50 [0201.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80631b0 [0201.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0201.660] NtQuerySystemTime (in: CurrentTime=0x7d9f918 | out: CurrentTime=0x7d9f918*=132471540694956000) returned 0x0 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x7533f96b [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x62ff042c [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x293d2b81 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x6789ded [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x237204fe [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x47aae4e0 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0xc7612fa [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0xf84b033 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x616e60dd [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x7806d9c0 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x31828f22 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0xa11b49e [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x7982a7e1 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x3cdcdc5a [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x316b13a8 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x65343144 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x6db87b36 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x5d837539 [0201.660] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x692e7480 [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x31754662 [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x147c9477 [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x7bf164b1 [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x100514ac [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x79f1ad2c [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x186d1881 [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x6e9ca6d2 [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x6784dab2 [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x2c2b3fac [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x1797934 [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x445d0a4c [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x6f23e7f8 [0201.661] RtlRandomEx (in: Seed=0x7d9f910 | out: Seed=0x7d9f910) returned 0x1fb2aa2e [0201.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d50) returned 1 [0201.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a20498 [0201.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a240a0 [0201.674] ReadFile (in: hFile=0x19f8, lpBuffer=0x14a20498, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0x7d9f90c, lpOverlapped=0x0 | out: lpBuffer=0x14a20498*, lpNumberOfBytesRead=0x7d9f90c*=0xd9, lpOverlapped=0x0) returned 1 [0201.676] SetFilePointerEx (in: hFile=0x19f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.676] WriteFile (in: hFile=0x19f8, lpBuffer=0x14a240a0*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x7d9f910, lpOverlapped=0x0 | out: lpBuffer=0x14a240a0*, lpNumberOfBytesWritten=0x7d9f910*=0xd9, lpOverlapped=0x0) returned 1 [0202.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063340 [0202.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063390 [0202.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063390) returned 1 [0202.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a240a0) returned 1 [0202.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a20498) returned 1 [0202.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80547e0) returned 1 [0202.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d8) returned 1 [0202.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69600 [0202.998] SetFilePointerEx (in: hFile=0x19f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.998] WriteFile (in: hFile=0x19f8, lpBuffer=0x8406768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7d9f984, lpOverlapped=0x0 | out: lpBuffer=0x8406768*, lpNumberOfBytesWritten=0x7d9f984*=0x10c, lpOverlapped=0x0) returned 1 [0207.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406768) returned 1 [0207.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69630) returned 1 [0207.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063390) returned 1 [0207.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69600) returned 1 [0207.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063340) returned 1 [0207.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631b0) returned 1 [0207.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063188) returned 1 [0207.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625a8) returned 1 [0207.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83eea68 [0207.180] wcscpy (in: _Dest=0x83eea68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" [0207.180] wcscat (in: _Dest=0x83eea68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.f0dbec" [0207.180] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.f0dbec", NtPathName=0x7d9f908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8335228 [0208.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335228) returned 1 [0208.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14898a60) returned 1 [0208.185] NtQueryInformationFile (in: FileHandle=0x19f8, IoStatusBlock=0x7d9f8e0, FileInformation=0x7d9f8e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7d9f8e0, FileInformation=0x7d9f8e8) returned 0x0 [0208.185] NtSetInformationFile (FileHandle=0x19f8, IoStatusBlock=0x7d9f8e0, FileInformation=0x7d9f8e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eea68) returned 1 [0208.493] FlushFileBuffers (hFile=0x19f8) returned 1 [0208.501] CloseHandle (hObject=0x19f8) returned 1 [0208.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d2268 [0208.860] wcscpy (in: _Dest=0x81d2268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" [0208.860] wcscat (in: _Dest=0x81d2268, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\F0DBEC-Readme.txt" [0208.860] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\f0dbec-readme.txt")) returned 0xffffffff [0208.860] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1144 [0209.561] WriteFile (in: hFile=0x1144, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7d9f92c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7d9f92c*=0x70c, lpOverlapped=0x0) returned 1 [0209.606] CloseHandle (hObject=0x1144) returned 1 [0209.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2268) returned 1 [0209.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400a58) returned 1 Thread: id = 5403 os_tid = 0x2e54 [0184.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml")) returned 0x20 [0184.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML", dwFileAttributes=0x20) returned 0 [0184.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.750] GetLastError () returned 0x5 [0184.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML", dwFileAttributes=0x20) returned 0 [0184.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d488) returned 1 Thread: id = 5404 os_tid = 0x2e58 [0184.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml")) returned 0x20 [0184.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML", dwFileAttributes=0x20) returned 0 [0184.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.752] GetLastError () returned 0x5 [0184.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML", dwFileAttributes=0x20) returned 0 [0184.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cff0) returned 1 Thread: id = 5405 os_tid = 0x2e5c [0184.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml")) returned 0x20 [0184.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML", dwFileAttributes=0x20) returned 0 [0184.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.754] GetLastError () returned 0x5 [0184.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML", dwFileAttributes=0x20) returned 0 [0184.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ddb8) returned 1 Thread: id = 5406 os_tid = 0x2e60 [0184.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml")) returned 0x20 [0184.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML", dwFileAttributes=0x20) returned 0 [0184.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.756] GetLastError () returned 0x5 [0184.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML", dwFileAttributes=0x20) returned 0 [0184.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 Thread: id = 5407 os_tid = 0x2e64 [0184.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml")) returned 0x20 [0184.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML", dwFileAttributes=0x20) returned 0 [0184.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.758] GetLastError () returned 0x5 [0184.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML", dwFileAttributes=0x20) returned 0 [0184.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcd68) returned 1 Thread: id = 5408 os_tid = 0x2e68 [0184.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml")) returned 0x20 [0184.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML", dwFileAttributes=0x20) returned 0 [0184.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.760] GetLastError () returned 0x5 [0184.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML", dwFileAttributes=0x20) returned 0 [0184.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbf08) returned 1 Thread: id = 5409 os_tid = 0x2e6c [0184.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml")) returned 0x20 [0184.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML", dwFileAttributes=0x20) returned 0 [0184.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.762] GetLastError () returned 0x5 [0184.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML", dwFileAttributes=0x20) returned 0 [0184.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcb88) returned 1 Thread: id = 5410 os_tid = 0x2e78 [0184.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml")) returned 0x20 [0184.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML", dwFileAttributes=0x20) returned 0 [0184.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.764] GetLastError () returned 0x5 [0184.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML", dwFileAttributes=0x20) returned 0 [0184.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 5411 os_tid = 0x2e7c [0184.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml")) returned 0x20 [0184.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML", dwFileAttributes=0x20) returned 0 [0184.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.772] GetLastError () returned 0x5 [0184.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML", dwFileAttributes=0x20) returned 0 [0184.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce08) returned 1 Thread: id = 5412 os_tid = 0x2e80 [0184.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml")) returned 0x20 [0184.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML", dwFileAttributes=0x20) returned 0 [0184.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.774] GetLastError () returned 0x5 [0184.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML", dwFileAttributes=0x20) returned 0 [0184.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcc28) returned 1 Thread: id = 5413 os_tid = 0x2e84 [0184.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml")) returned 0x20 [0184.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML", dwFileAttributes=0x20) returned 0 [0184.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.782] GetLastError () returned 0x5 [0184.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML", dwFileAttributes=0x20) returned 0 [0184.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dca48) returned 1 Thread: id = 5414 os_tid = 0x2e88 [0184.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml")) returned 0x20 [0184.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML", dwFileAttributes=0x20) returned 0 [0184.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.785] GetLastError () returned 0x5 [0184.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML", dwFileAttributes=0x20) returned 0 [0184.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbbe8) returned 1 Thread: id = 5415 os_tid = 0x2e8c [0184.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml")) returned 0x20 [0184.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML", dwFileAttributes=0x20) returned 0 [0184.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.787] GetLastError () returned 0x5 [0184.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML", dwFileAttributes=0x20) returned 0 [0184.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbaa8) returned 1 Thread: id = 5416 os_tid = 0x2e90 [0184.790] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020 [0191.228] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0201.697] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a04 [0201.698] GetFileSizeEx (in: hFile=0x1a04, lpFileSize=0x998f800 | out: lpFileSize=0x998f800*=228) returned 1 [0201.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d50 [0201.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063160 [0201.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063228 [0201.699] NtQuerySystemTime (in: CurrentTime=0x998f788 | out: CurrentTime=0x998f788*=132471540695424000) returned 0x0 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x7260ab04 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x34b484d2 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x56413f5e [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x2d47caba [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x3449b031 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x742d6080 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0xb471975 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x57535966 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x75e2cd22 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0xaa978eb [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x2bb68408 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x25f31586 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x62b8fc53 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x330ba42e [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x1941342 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x5d2cfa92 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x3c0ff176 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x161712ee [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x4ec8bbb3 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x72d66172 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x55b1a153 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x1abbceb5 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x57d29f1 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x6bbe06d4 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x1ecb7706 [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x6967726c [0201.699] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x495c7df3 [0201.700] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x7c65850d [0201.700] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x3c9b0b8a [0201.700] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x48cf337e [0201.700] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x2d430284 [0201.700] RtlRandomEx (in: Seed=0x998f780 | out: Seed=0x998f780) returned 0x6ced25af [0201.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d50) returned 1 [0201.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a06060 [0201.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a3e4d8 [0201.711] ReadFile (in: hFile=0x1a04, lpBuffer=0x14a06060, nNumberOfBytesToRead=0xe4, lpNumberOfBytesRead=0x998f77c, lpOverlapped=0x0 | out: lpBuffer=0x14a06060*, lpNumberOfBytesRead=0x998f77c*=0xe4, lpOverlapped=0x0) returned 1 [0201.714] SetFilePointerEx (in: hFile=0x1a04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.714] WriteFile (in: hFile=0x1a04, lpBuffer=0x14a3e4d8*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x998f780, lpOverlapped=0x0 | out: lpBuffer=0x14a3e4d8*, lpNumberOfBytesWritten=0x998f780*=0xe4, lpOverlapped=0x0) returned 1 [0203.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0203.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0203.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0203.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a3e4d8) returned 1 [0203.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a06060) returned 1 [0203.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80548d0) returned 1 [0203.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d090) returned 1 [0203.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69240 [0203.982] SetFilePointerEx (in: hFile=0x1a04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.982] WriteFile (in: hFile=0x1a04, lpBuffer=0x81dfbc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x998f7f4, lpOverlapped=0x0 | out: lpBuffer=0x81dfbc0*, lpNumberOfBytesWritten=0x998f7f4*=0x10c, lpOverlapped=0x0) returned 1 [0204.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfbc0) returned 1 [0204.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69270) returned 1 [0204.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0204.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69240) returned 1 [0204.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0204.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063160) returned 1 [0204.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063250) returned 1 [0204.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063278) returned 1 [0204.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83487a8 [0204.452] wcscpy (in: _Dest=0x83487a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" [0204.452] wcscat (in: _Dest=0x83487a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.f0dbec" [0204.452] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0x998f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3bf50 [0207.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bf50) returned 1 [0207.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f9d18) returned 1 [0207.422] NtQueryInformationFile (in: FileHandle=0x1a04, IoStatusBlock=0x998f750, FileInformation=0x998f758, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x998f750, FileInformation=0x998f758) returned 0x0 [0207.422] NtSetInformationFile (FileHandle=0x1a04, IoStatusBlock=0x998f750, FileInformation=0x998f758, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83487a8) returned 1 [0208.770] FlushFileBuffers (hFile=0x1a04) returned 1 [0208.774] CloseHandle (hObject=0x1a04) returned 1 [0208.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3042500 [0208.898] wcscpy (in: _Dest=0x3042500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" [0208.898] wcscat (in: _Dest=0x3042500, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\F0DBEC-Readme.txt" [0208.898] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0208.898] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18f8 [0209.595] WriteFile (in: hFile=0x18f8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x998f79c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x998f79c*=0x70c, lpOverlapped=0x0) returned 1 [0209.637] CloseHandle (hObject=0x18f8) returned 1 [0209.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0209.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187110) returned 1 Thread: id = 5417 os_tid = 0x2e94 [0184.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kathmandu")) returned 0x20 [0190.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu", dwFileAttributes=0x20) returned 0 [0190.998] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kathmandu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.088] GetLastError () returned 0x5 [0192.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu", dwFileAttributes=0x20) returned 0 [0192.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff5010) returned 1 Thread: id = 5418 os_tid = 0x2e98 [0184.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\khandyga")) returned 0x20 [0190.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga", dwFileAttributes=0x20) returned 0 [0190.997] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\khandyga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.869] GetLastError () returned 0x5 [0191.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga", dwFileAttributes=0x20) returned 0 [0191.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 Thread: id = 5419 os_tid = 0x2e9c [0184.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kolkata")) returned 0x20 [0195.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata", dwFileAttributes=0x20) returned 0 [0195.599] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kolkata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.599] GetLastError () returned 0x5 [0195.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata", dwFileAttributes=0x20) returned 0 [0195.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c128) returned 1 Thread: id = 5420 os_tid = 0x2ea0 [0184.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js")) returned 0x20 [0184.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js", dwFileAttributes=0x20) returned 0 [0184.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.797] GetLastError () returned 0x5 [0184.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js", dwFileAttributes=0x20) returned 0 [0184.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401148) returned 1 Thread: id = 5421 os_tid = 0x2ea4 [0184.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl")) returned 0x20 [0187.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl", dwFileAttributes=0x20) returned 0 [0187.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.235] GetLastError () returned 0x5 [0187.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl", dwFileAttributes=0x20) returned 0 [0187.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401bb0) returned 1 Thread: id = 5422 os_tid = 0x2ea8 [0184.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif")) returned 0x20 [0187.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF", dwFileAttributes=0x20) returned 0 [0187.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.450] GetLastError () returned 0x5 [0187.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF", dwFileAttributes=0x20) returned 0 [0187.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401cd8) returned 1 Thread: id = 5423 os_tid = 0x2eac [0184.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif")) returned 0x20 [0187.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF", dwFileAttributes=0x20) returned 0 [0187.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.489] GetLastError () returned 0x5 [0187.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF", dwFileAttributes=0x20) returned 0 [0187.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401a88) returned 1 Thread: id = 5424 os_tid = 0x2eb0 [0184.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif")) returned 0x20 [0187.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0187.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.487] GetLastError () returned 0x5 [0187.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0187.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401960) returned 1 Thread: id = 5425 os_tid = 0x2eb4 [0184.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk")) returned 0x20 [0195.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk", dwFileAttributes=0x20) returned 0 [0195.612] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.612] GetLastError () returned 0x5 [0195.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk", dwFileAttributes=0x20) returned 0 [0195.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a80) returned 1 Thread: id = 5426 os_tid = 0x2eb8 [0184.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur")) returned 0x20 [0195.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur", dwFileAttributes=0x20) returned 0 [0195.614] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.614] GetLastError () returned 0x5 [0195.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur", dwFileAttributes=0x20) returned 0 [0195.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402af0) returned 1 Thread: id = 5427 os_tid = 0x2ebc [0184.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuching")) returned 0x20 [0195.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching", dwFileAttributes=0x20) returned 0 [0195.598] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuching"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.598] GetLastError () returned 0x5 [0195.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching", dwFileAttributes=0x20) returned 0 [0195.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c330) returned 1 Thread: id = 5428 os_tid = 0x2ec0 [0184.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuwait")) returned 0x20 [0195.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait", dwFileAttributes=0x20) returned 0 [0195.596] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuwait"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.596] GetLastError () returned 0x5 [0195.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait", dwFileAttributes=0x20) returned 0 [0195.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 5429 os_tid = 0x2ec4 [0184.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\macau")) returned 0x20 [0195.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau", dwFileAttributes=0x20) returned 0 [0195.595] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\macau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.595] GetLastError () returned 0x5 [0195.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau", dwFileAttributes=0x20) returned 0 [0195.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cbb8) returned 1 Thread: id = 5430 os_tid = 0x2ec8 [0184.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\magadan")) returned 0x20 [0195.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan", dwFileAttributes=0x20) returned 0 [0195.593] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\magadan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.593] GetLastError () returned 0x5 [0195.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan", dwFileAttributes=0x20) returned 0 [0195.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 Thread: id = 5431 os_tid = 0x2ecc [0184.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\makassar")) returned 0x20 [0195.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar", dwFileAttributes=0x20) returned 0 [0195.592] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\makassar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.592] GetLastError () returned 0x5 [0195.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar", dwFileAttributes=0x20) returned 0 [0195.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d1d0) returned 1 Thread: id = 5432 os_tid = 0x2ed0 [0184.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\manila")) returned 0x20 [0195.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila", dwFileAttributes=0x20) returned 0 [0195.590] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\manila"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.590] GetLastError () returned 0x5 [0195.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila", dwFileAttributes=0x20) returned 0 [0195.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bff0) returned 1 Thread: id = 5433 os_tid = 0x2ed4 [0184.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\muscat")) returned 0x20 [0195.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat", dwFileAttributes=0x20) returned 0 [0195.587] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\muscat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.587] GetLastError () returned 0x5 [0195.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat", dwFileAttributes=0x20) returned 0 [0195.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e8f8) returned 1 Thread: id = 5434 os_tid = 0x2ed8 [0184.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\nicosia")) returned 0x20 [0192.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia", dwFileAttributes=0x20) returned 0 [0192.661] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\nicosia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.059] GetLastError () returned 0x5 [0195.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia", dwFileAttributes=0x20) returned 0 [0195.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dc60) returned 1 Thread: id = 5435 os_tid = 0x2edc [0184.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novokuznetsk")) returned 0x20 [0195.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk", dwFileAttributes=0x20) returned 0 [0195.615] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novokuznetsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.616] GetLastError () returned 0x5 [0195.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk", dwFileAttributes=0x20) returned 0 [0195.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402b60) returned 1 Thread: id = 5436 os_tid = 0x2ee0 [0184.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h")) returned 0x20 [0184.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H", dwFileAttributes=0x20) returned 0 [0184.826] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.826] GetLastError () returned 0x5 [0184.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H", dwFileAttributes=0x20) returned 0 [0184.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34950) returned 1 Thread: id = 5437 os_tid = 0x2ee4 [0184.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v")) returned 0x20 [0184.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V", dwFileAttributes=0x20) returned 0 [0184.829] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.829] GetLastError () returned 0x5 [0184.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V", dwFileAttributes=0x20) returned 0 [0184.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 5438 os_tid = 0x2ee8 [0184.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v")) returned 0x20 [0184.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V", dwFileAttributes=0x20) returned 0 [0184.831] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.831] GetLastError () returned 0x5 [0184.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V", dwFileAttributes=0x20) returned 0 [0184.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 5439 os_tid = 0x2eec [0184.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h")) returned 0x20 [0184.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H", dwFileAttributes=0x20) returned 0 [0184.833] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.833] GetLastError () returned 0x5 [0184.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H", dwFileAttributes=0x20) returned 0 [0184.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 5440 os_tid = 0x2ef0 [0184.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v")) returned 0x20 [0184.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V", dwFileAttributes=0x20) returned 0 [0184.835] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.835] GetLastError () returned 0x5 [0184.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V", dwFileAttributes=0x20) returned 0 [0184.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be920) returned 1 Thread: id = 5441 os_tid = 0x2ef4 [0184.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h")) returned 0x20 [0184.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H", dwFileAttributes=0x20) returned 0 [0184.837] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.838] GetLastError () returned 0x5 [0184.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H", dwFileAttributes=0x20) returned 0 [0184.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df388) returned 1 Thread: id = 5442 os_tid = 0x2ef8 [0184.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v")) returned 0x20 [0184.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V", dwFileAttributes=0x20) returned 0 [0184.839] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.840] GetLastError () returned 0x5 [0184.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V", dwFileAttributes=0x20) returned 0 [0184.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df268) returned 1 Thread: id = 5443 os_tid = 0x2efc [0184.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h")) returned 0x20 [0184.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H", dwFileAttributes=0x20) returned 0 [0184.841] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.842] GetLastError () returned 0x5 [0184.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H", dwFileAttributes=0x20) returned 0 [0184.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 5444 os_tid = 0x2f00 [0184.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v")) returned 0x20 [0184.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V", dwFileAttributes=0x20) returned 0 [0184.843] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.844] GetLastError () returned 0x5 [0184.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V", dwFileAttributes=0x20) returned 0 [0184.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 5445 os_tid = 0x2f04 [0184.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h")) returned 0x20 [0184.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H", dwFileAttributes=0x20) returned 0 [0184.846] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.846] GetLastError () returned 0x5 [0184.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H", dwFileAttributes=0x20) returned 0 [0184.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 5446 os_tid = 0x2f08 [0184.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v")) returned 0x20 [0184.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V", dwFileAttributes=0x20) returned 0 [0184.848] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.848] GetLastError () returned 0x5 [0184.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V", dwFileAttributes=0x20) returned 0 [0184.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 Thread: id = 5447 os_tid = 0x2f0c [0184.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\v")) returned 0x20 [0184.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V", dwFileAttributes=0x20) returned 0 [0184.855] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.855] GetLastError () returned 0x5 [0184.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V", dwFileAttributes=0x20) returned 0 [0184.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402bd0) returned 1 Thread: id = 5448 os_tid = 0x2f10 [0184.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novosibirsk")) returned 0x20 [0195.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk", dwFileAttributes=0x20) returned 0 [0195.617] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novosibirsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.617] GetLastError () returned 0x5 [0195.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk", dwFileAttributes=0x20) returned 0 [0195.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33cf8) returned 1 Thread: id = 5449 os_tid = 0x2f28 [0184.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\omsk")) returned 0x20 [0195.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk", dwFileAttributes=0x20) returned 0 [0195.584] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\omsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.584] GetLastError () returned 0x5 [0195.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk", dwFileAttributes=0x20) returned 0 [0195.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 Thread: id = 5450 os_tid = 0x2f2c [0184.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\oral")) returned 0x20 [0195.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral", dwFileAttributes=0x20) returned 0 [0195.580] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\oral"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.580] GetLastError () returned 0x5 [0195.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral", dwFileAttributes=0x20) returned 0 [0195.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 Thread: id = 5451 os_tid = 0x2f30 [0184.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\phnom_penh")) returned 0x20 [0195.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh", dwFileAttributes=0x20) returned 0 [0195.619] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\phnom_penh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.619] GetLastError () returned 0x5 [0195.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh", dwFileAttributes=0x20) returned 0 [0195.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402c40) returned 1 Thread: id = 5452 os_tid = 0x2f34 [0184.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pontianak")) returned 0x20 [0195.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak", dwFileAttributes=0x20) returned 0 [0195.620] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pontianak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.620] GetLastError () returned 0x5 [0195.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak", dwFileAttributes=0x20) returned 0 [0195.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402cb0) returned 1 Thread: id = 5453 os_tid = 0x2f38 [0184.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pyongyang")) returned 0x20 [0192.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang", dwFileAttributes=0x20) returned 0 [0192.659] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pyongyang"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.578] GetLastError () returned 0x5 [0195.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang", dwFileAttributes=0x20) returned 0 [0195.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402d20) returned 1 Thread: id = 5454 os_tid = 0x2f3c [0184.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qatar")) returned 0x20 [0195.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar", dwFileAttributes=0x20) returned 0 [0195.412] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qatar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.412] GetLastError () returned 0x5 [0195.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar", dwFileAttributes=0x20) returned 0 [0195.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e688) returned 1 Thread: id = 5455 os_tid = 0x2f40 [0184.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qyzylorda")) returned 0x20 [0192.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda", dwFileAttributes=0x20) returned 0 [0192.310] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qyzylorda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.581] GetLastError () returned 0x5 [0195.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda", dwFileAttributes=0x20) returned 0 [0195.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402d90) returned 1 Thread: id = 5456 os_tid = 0x2f44 [0184.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\rangoon")) returned 0x20 [0189.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon", dwFileAttributes=0x20) returned 0 [0189.355] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\rangoon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.356] GetLastError () returned 0x5 [0189.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon", dwFileAttributes=0x20) returned 0 [0189.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dfa0) returned 1 Thread: id = 5457 os_tid = 0x2f48 [0185.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh")) returned 0x20 [0192.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh", dwFileAttributes=0x20) returned 0 [0194.101] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.586] GetLastError () returned 0x5 [0195.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh", dwFileAttributes=0x20) returned 0 [0195.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 Thread: id = 5458 os_tid = 0x2f50 [0185.230] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json")) returned 0x2020 [0185.231] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0194.213] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x194c [0194.213] GetFileSizeEx (in: hFile=0x194c, lpFileSize=0x76bf7b0 | out: lpFileSize=0x76bf7b0*=231) returned 1 [0194.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49c18 [0194.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c418 [0194.214] NtQuerySystemTime (in: CurrentTime=0x76bf738 | out: CurrentTime=0x76bf738*=132471540621168000) returned 0x0 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x160d3d0b [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x3de7e31d [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x292e7235 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x538909f9 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x4a972996 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x7d5ffe94 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x43ad8cc1 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x798939f2 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x6484585a [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x6764e244 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x1916332f [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x17f07aa1 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x3fd9217b [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x76df58cb [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x501cda55 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x8b9d839 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x3ae816ed [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x36267fdd [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x2a6fdb15 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x45cd4407 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x2b11c115 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x42e4d88d [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x4ce6d8d2 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x757cf296 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x4b1ecbab [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x5b0cfd24 [0194.214] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x3c1d594d [0194.215] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x27862fd [0194.215] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x636ad99 [0194.215] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x31254009 [0194.215] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x570f5107 [0194.215] RtlRandomEx (in: Seed=0x76bf730 | out: Seed=0x76bf730) returned 0x3c489e9f [0194.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1493e4d8 [0194.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149420e0 [0194.225] ReadFile (in: hFile=0x194c, lpBuffer=0x1493e4d8, nNumberOfBytesToRead=0xe7, lpNumberOfBytesRead=0x76bf72c, lpOverlapped=0x0 | out: lpBuffer=0x1493e4d8*, lpNumberOfBytesRead=0x76bf72c*=0xe7, lpOverlapped=0x0) returned 1 [0194.227] SetFilePointerEx (in: hFile=0x194c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.227] WriteFile (in: hFile=0x194c, lpBuffer=0x149420e0*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x76bf730, lpOverlapped=0x0 | out: lpBuffer=0x149420e0*, lpNumberOfBytesWritten=0x76bf730*=0xe7, lpOverlapped=0x0) returned 1 [0196.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421a0 [0196.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425b0 [0196.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425b0) returned 1 [0196.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149420e0) returned 1 [0196.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1493e4d8) returned 1 [0196.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bf28) returned 1 [0196.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4fe0) returned 1 [0196.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69840 [0196.247] SetFilePointerEx (in: hFile=0x194c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.248] WriteFile (in: hFile=0x194c, lpBuffer=0x81e0250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x76bf7a4, lpOverlapped=0x0 | out: lpBuffer=0x81e0250*, lpNumberOfBytesWritten=0x76bf7a4*=0x10c, lpOverlapped=0x0) returned 1 [0196.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0250) returned 1 [0196.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69870) returned 1 [0196.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425b0) returned 1 [0196.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69840) returned 1 [0196.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421a0) returned 1 [0196.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49c18) returned 1 [0196.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b310) returned 1 [0196.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0196.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5118 [0196.633] wcscpy (in: _Dest=0x81f5118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" [0196.633] wcscat (in: _Dest=0x81f5118, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json.f0dbec" [0196.633] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0x76bf728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ef9bb8 [0196.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9bb8) returned 1 [0196.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83faae8) returned 1 [0196.882] NtQueryInformationFile (in: FileHandle=0x194c, IoStatusBlock=0x76bf700, FileInformation=0x76bf708, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x76bf700, FileInformation=0x76bf708) returned 0x0 [0196.882] NtSetInformationFile (FileHandle=0x194c, IoStatusBlock=0x76bf700, FileInformation=0x76bf708, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5118) returned 1 [0197.090] FlushFileBuffers (hFile=0x194c) returned 1 [0197.107] CloseHandle (hObject=0x194c) returned 1 [0197.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5d98 [0197.310] wcscpy (in: _Dest=0x81f5d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" [0197.310] wcscat (in: _Dest=0x81f5d98, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\F0DBEC-Readme.txt" [0197.310] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0197.310] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d04 [0197.470] WriteFile (in: hFile=0x1d04, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x76bf74c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x76bf74c*=0x70c, lpOverlapped=0x0) returned 1 [0198.025] CloseHandle (hObject=0x1d04) returned 1 [0198.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5d98) returned 1 [0198.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401838) returned 1 Thread: id = 5459 os_tid = 0x2f54 [0185.231] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json")) returned 0x2020 [0185.231] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0194.227] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1940 [0194.227] GetFileSizeEx (in: hFile=0x1940, lpFileSize=0x8a1fde0 | out: lpFileSize=0x8a1fde0*=292) returned 1 [0194.227] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.227] ReadFile (in: hFile=0x1940, lpBuffer=0x8a1fdec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a1fdc8, lpOverlapped=0x0 | out: lpBuffer=0x8a1fdec*, lpNumberOfBytesRead=0x8a1fdc8*=0x4, lpOverlapped=0x0) returned 1 [0194.229] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c418 [0194.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b888 [0194.229] NtQuerySystemTime (in: CurrentTime=0x8a1fd68 | out: CurrentTime=0x8a1fd68*=132471540621324000) returned 0x0 [0194.229] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x2056e331 [0194.229] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x2aa41a71 [0194.229] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x299296f6 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x47dcb781 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x1ec88f78 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x78c06c43 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x60ec4d39 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0xf72e2da [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x55e5e94f [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x6764e244 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x5ef4ff7a [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x3d1df0f5 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x4465d9ee [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x37d5adb3 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0xb8ee62c [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x2a293c2a [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0xcfa332f [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x29a21719 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x1f4b0156 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x3d80d65c [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x388f1a10 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x656ab4ea [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x4b5c9ce7 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x56fdde50 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x2372dfad [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x62265e17 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x2f6291b4 [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x1f1f336e [0194.230] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x6468f9b5 [0194.238] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x3eab8765 [0194.238] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x69480ce5 [0194.238] RtlRandomEx (in: Seed=0x8a1fd60 | out: Seed=0x8a1fd60) returned 0x2e3b0c59 [0194.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82bccc8 [0194.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0194.249] ReadFile (in: hFile=0x1940, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0x124, lpNumberOfBytesRead=0x8a1fd5c, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0x8a1fd5c*=0x124, lpOverlapped=0x0) returned 1 [0194.249] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.249] WriteFile (in: hFile=0x1940, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x8a1fd60, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0x8a1fd60*=0x124, lpOverlapped=0x0) returned 1 [0196.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0196.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0196.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0196.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0196.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0196.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0196.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e52b0) returned 1 [0196.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0196.251] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.251] WriteFile (in: hFile=0x1940, lpBuffer=0x81e0480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8a1fdd4, lpOverlapped=0x0 | out: lpBuffer=0x81e0480*, lpNumberOfBytesWritten=0x8a1fdd4*=0x10c, lpOverlapped=0x0) returned 1 [0196.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0480) returned 1 [0196.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0196.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0196.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0196.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0196.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0196.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0196.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0196.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d575f0 [0196.636] wcscpy (in: _Dest=0x3d575f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" [0196.636] wcscat (in: _Dest=0x3d575f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json.f0dbec" [0196.636] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0x8a1fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ef9d00 [0196.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9d00) returned 1 [0196.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f9108) returned 1 [0196.883] NtQueryInformationFile (in: FileHandle=0x1940, IoStatusBlock=0x8a1fd30, FileInformation=0x8a1fd38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8a1fd30, FileInformation=0x8a1fd38) returned 0x0 [0196.883] NtSetInformationFile (FileHandle=0x1940, IoStatusBlock=0x8a1fd30, FileInformation=0x8a1fd38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 [0197.094] FlushFileBuffers (hFile=0x1940) returned 1 [0197.108] CloseHandle (hObject=0x1940) returned 1 [0197.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d57278 [0197.312] wcscpy (in: _Dest=0x3d57278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" [0197.312] wcscat (in: _Dest=0x3d57278, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\F0DBEC-Readme.txt" [0197.312] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0197.312] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cf8 [0197.471] WriteFile (in: hFile=0x1cf8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8a1fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8a1fd7c*=0x70c, lpOverlapped=0x0) returned 1 [0198.030] CloseHandle (hObject=0x1cf8) returned 1 [0198.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 [0198.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84014c0) returned 1 Thread: id = 5460 os_tid = 0x2f58 [0185.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x8053418 [0185.232] wcscpy (in: _Dest=0x8053418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.232] wcscat (in: _Dest=0x8053418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.232] wcscat (in: _Dest=0x8053418, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*" [0185.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808da20 [0185.232] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0189.179] wcscmp (_String1=".", _String2=".") returned 0 [0189.179] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.305] wcscmp (_String1="..", _String2=".") returned 1 [0189.305] wcscmp (_String1="..", _String2="..") returned 0 [0189.305] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a32b00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa44b8fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2a32b00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_M.VST", cAlternateFileName="")) returned 1 [0189.305] wcscmp (_String1="ACTDIR_M.VST", _String2=".") returned 1 [0189.305] wcscmp (_String1="ACTDIR_M.VST", _String2="..") returned 1 [0189.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ad18 [0189.305] wcscpy (in: _Dest=0x819ad18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0189.305] wcscat (in: _Dest=0x819ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0189.305] wcscat (in: _Dest=0x819ad18, _Source="ACTDIR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" [0192.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ad18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0192.046] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb636b200, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa44b8fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb636b200, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_U.VST", cAlternateFileName="")) returned 1 [0192.046] wcscmp (_String1="ACTDIR_U.VST", _String2=".") returned 1 [0192.046] wcscmp (_String1="ACTDIR_U.VST", _String2="..") returned 1 [0192.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11fa8 [0192.046] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.046] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.046] wcscat (in: _Dest=0x3e11fa8, _Source="ACTDIR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" [0192.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0192.047] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748df600, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44b8fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x748df600, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_M.VSS", cAlternateFileName="")) returned 1 [0192.047] wcscmp (_String1="ADO_M.VSS", _String2=".") returned 1 [0192.047] wcscmp (_String1="ADO_M.VSS", _String2="..") returned 1 [0192.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2b378 [0192.047] wcscpy (in: _Dest=0x3e2b378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.048] wcscat (in: _Dest=0x3e2b378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.048] wcscat (in: _Dest=0x3e2b378, _Source="ADO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" [0192.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0192.048] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a032000, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a032000, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_U.VSS", cAlternateFileName="")) returned 1 [0192.048] wcscmp (_String1="ADO_U.VSS", _String2=".") returned 1 [0192.048] wcscmp (_String1="ADO_U.VSS", _String2="..") returned 1 [0192.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2b1b0 [0192.049] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.049] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.049] wcscat (in: _Dest=0x3e2b1b0, _Source="ADO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" [0192.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0192.049] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912a2e00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x912a2e00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_M.VSS", cAlternateFileName="")) returned 1 [0192.049] wcscmp (_String1="ADS_M.VSS", _String2=".") returned 1 [0192.050] wcscmp (_String1="ADS_M.VSS", _String2="..") returned 1 [0192.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e29f48 [0192.050] wcscpy (in: _Dest=0x3e29f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.050] wcscat (in: _Dest=0x3e29f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.050] wcscat (in: _Dest=0x3e29f48, _Source="ADS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" [0192.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e29f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0192.051] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98513c00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98513c00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_U.VSS", cAlternateFileName="")) returned 1 [0192.051] wcscmp (_String1="ADS_U.VSS", _String2=".") returned 1 [0192.051] wcscmp (_String1="ADS_U.VSS", _String2="..") returned 1 [0192.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2bcf8 [0192.051] wcscpy (in: _Dest=0x3e2bcf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.051] wcscat (in: _Dest=0x3e2bcf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.051] wcscat (in: _Dest=0x3e2bcf8, _Source="ADS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" [0192.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0192.052] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e471d00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e471d00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_M.VSS", cAlternateFileName="")) returned 1 [0192.052] wcscmp (_String1="ALARM_M.VSS", _String2=".") returned 1 [0192.052] wcscmp (_String1="ALARM_M.VSS", _String2="..") returned 1 [0192.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11968 [0192.052] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.052] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.052] wcscat (in: _Dest=0x3e11968, _Source="ALARM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" [0192.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0192.053] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56e2b00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa56e2b00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_U.VSS", cAlternateFileName="")) returned 1 [0192.053] wcscmp (_String1="ALARM_U.VSS", _String2=".") returned 1 [0192.053] wcscmp (_String1="ALARM_U.VSS", _String2="..") returned 1 [0192.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e12408 [0192.053] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.053] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.053] wcscat (in: _Dest=0x3e12408, _Source="ALARM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" [0192.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad8 [0192.054] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef79300, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4505270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaef79300, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x2c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_M.VSS", cAlternateFileName="")) returned 1 [0192.054] wcscmp (_String1="ANNOT_M.VSS", _String2=".") returned 1 [0192.054] wcscmp (_String1="ANNOT_M.VSS", _String2="..") returned 1 [0192.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e12228 [0192.054] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.054] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.054] wcscat (in: _Dest=0x3e12228, _Source="ANNOT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" [0192.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0192.055] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74fce00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4505270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb74fce00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x26800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_U.VSS", cAlternateFileName="")) returned 1 [0192.055] wcscmp (_String1="ANNOT_U.VSS", _String2=".") returned 1 [0192.055] wcscmp (_String1="ANNOT_U.VSS", _String2="..") returned 1 [0192.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11d28 [0192.055] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.055] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.056] wcscat (in: _Dest=0x3e11d28, _Source="ANNOT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" [0192.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0192.056] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59dea00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4505270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc59dea00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_M.VSS", cAlternateFileName="")) returned 1 [0192.056] wcscmp (_String1="APPL_M.VSS", _String2=".") returned 1 [0192.056] wcscmp (_String1="APPL_M.VSS", _String2="..") returned 1 [0192.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11148 [0192.057] wcscpy (in: _Dest=0x3e11148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.057] wcscat (in: _Dest=0x3e11148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.057] wcscat (in: _Dest=0x3e11148, _Source="APPL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" [0192.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0192.058] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51d3300, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa452b3d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd51d3300, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_U.VSS", cAlternateFileName="")) returned 1 [0192.058] wcscmp (_String1="APPL_U.VSS", _String2=".") returned 1 [0192.058] wcscmp (_String1="APPL_U.VSS", _String2="..") returned 1 [0192.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e10a68 [0192.058] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.058] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.058] wcscat (in: _Dest=0x3e10a68, _Source="APPL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" [0192.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0192.059] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd77f8d00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa452b3d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd77f8d00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_M.VSS", cAlternateFileName="")) returned 1 [0192.059] wcscmp (_String1="ARROWS_M.VSS", _String2=".") returned 1 [0192.059] wcscmp (_String1="ARROWS_M.VSS", _String2="..") returned 1 [0192.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11788 [0192.059] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.059] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.059] wcscat (in: _Dest=0x3e11788, _Source="ARROWS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" [0192.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0192.061] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b0ba00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa452b3d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd8b0ba00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_U.VSS", cAlternateFileName="")) returned 1 [0192.061] wcscmp (_String1="ARROWS_U.VSS", _String2=".") returned 1 [0192.061] wcscmp (_String1="ARROWS_U.VSS", _String2="..") returned 1 [0192.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e120e8 [0192.061] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.061] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.061] wcscat (in: _Dest=0x3e120e8, _Source="ARROWS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" [0192.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0192.062] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34038600, ftCreationTime.dwHighDateTime=0x1ca1ccd, ftLastAccessTime.dwLowDateTime=0xa4551530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34038600, ftLastWriteTime.dwHighDateTime=0x1ca1ccd, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT.XLS", cAlternateFileName="")) returned 1 [0192.062] wcscmp (_String1="ASTMGT.XLS", _String2=".") returned 1 [0192.062] wcscmp (_String1="ASTMGT.XLS", _String2="..") returned 1 [0192.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e116e8 [0192.062] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.062] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.062] wcscat (in: _Dest=0x3e116e8, _Source="ASTMGT.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" [0192.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0192.063] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c0b200, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa4551530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5c0b200, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x120000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_M.VST", cAlternateFileName="")) returned 1 [0192.063] wcscmp (_String1="ASTMGT_M.VST", _String2=".") returned 1 [0192.063] wcscmp (_String1="ASTMGT_M.VST", _String2="..") returned 1 [0192.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11a08 [0192.063] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.063] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.063] wcscat (in: _Dest=0x3e11a08, _Source="ASTMGT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" [0192.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0192.064] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb061d00, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcb061d00, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x11c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_U.VST", cAlternateFileName="")) returned 1 [0192.065] wcscmp (_String1="ASTMGT_U.VST", _String2=".") returned 1 [0192.065] wcscmp (_String1="ASTMGT_U.VST", _String2="..") returned 1 [0192.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbaa8 [0192.065] wcscpy (in: _Dest=0x81dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.065] wcscat (in: _Dest=0x81dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.065] wcscat (in: _Dest=0x81dbaa8, _Source="ASTMGT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" [0192.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0192.066] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a2200, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe23a2200, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x26c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VSS", cAlternateFileName="")) returned 1 [0192.066] wcscmp (_String1="AUDIT_M.VSS", _String2=".") returned 1 [0192.066] wcscmp (_String1="AUDIT_M.VSS", _String2="..") returned 1 [0192.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbbe8 [0192.066] wcscpy (in: _Dest=0x81dbbe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.066] wcscat (in: _Dest=0x81dbbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.066] wcscat (in: _Dest=0x81dbbe8, _Source="AUDIT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" [0192.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a0 [0192.067] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9498200, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc9498200, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VST", cAlternateFileName="")) returned 1 [0192.067] wcscmp (_String1="AUDIT_M.VST", _String2=".") returned 1 [0192.067] wcscmp (_String1="AUDIT_M.VST", _String2="..") returned 1 [0192.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dca48 [0192.067] wcscpy (in: _Dest=0x81dca48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.067] wcscat (in: _Dest=0x81dca48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.067] wcscat (in: _Dest=0x81dca48, _Source="AUDIT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" [0192.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dca48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2880 [0192.068] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf4b700, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecf4b700, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VSS", cAlternateFileName="")) returned 1 [0192.068] wcscmp (_String1="AUDIT_U.VSS", _String2=".") returned 1 [0192.068] wcscmp (_String1="AUDIT_U.VSS", _String2="..") returned 1 [0192.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dcc28 [0192.068] wcscpy (in: _Dest=0x81dcc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.068] wcscat (in: _Dest=0x81dcc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.068] wcscat (in: _Dest=0x81dcc28, _Source="AUDIT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" [0192.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0192.069] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdd0900, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccdd0900, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VST", cAlternateFileName="")) returned 1 [0192.069] wcscmp (_String1="AUDIT_U.VST", _String2=".") returned 1 [0192.069] wcscmp (_String1="AUDIT_U.VST", _String2="..") returned 1 [0192.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dce08 [0192.069] wcscpy (in: _Dest=0x81dce08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.069] wcscat (in: _Dest=0x81dce08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.069] wcscat (in: _Dest=0x81dce08, _Source="AUDIT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" [0192.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b3c [0192.070] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fde4600, ftCreationTime.dwHighDateTime=0x1ca484d, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6fde4600, ftLastWriteTime.dwHighDateTime=0x1ca484d, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VSS", cAlternateFileName="")) returned 1 [0192.070] wcscmp (_String1="BASFLO_M.VSS", _String2=".") returned 1 [0192.070] wcscmp (_String1="BASFLO_M.VSS", _String2="..") returned 1 [0192.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dccc8 [0192.070] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.070] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.070] wcscat (in: _Dest=0x81dccc8, _Source="BASFLO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" [0192.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0192.071] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b6c500, ftCreationTime.dwHighDateTime=0x1ca6c61, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99b6c500, ftLastWriteTime.dwHighDateTime=0x1ca6c61, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VST", cAlternateFileName="")) returned 1 [0192.071] wcscmp (_String1="BASFLO_M.VST", _String2=".") returned 1 [0192.071] wcscmp (_String1="BASFLO_M.VST", _String2="..") returned 1 [0192.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcb88 [0192.071] wcscpy (in: _Dest=0x81dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.071] wcscat (in: _Dest=0x81dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.071] wcscat (in: _Dest=0x81dcb88, _Source="BASFLO_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" [0192.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a4 [0192.072] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a01e00, ftCreationTime.dwHighDateTime=0x1ca484d, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2a01e00, ftLastWriteTime.dwHighDateTime=0x1ca484d, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VSS", cAlternateFileName="")) returned 1 [0192.072] wcscmp (_String1="BASFLO_U.VSS", _String2=".") returned 1 [0192.072] wcscmp (_String1="BASFLO_U.VSS", _String2="..") returned 1 [0192.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbf08 [0192.073] wcscpy (in: _Dest=0x81dbf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.073] wcscat (in: _Dest=0x81dbf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.073] wcscat (in: _Dest=0x81dbf08, _Source="BASFLO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" [0192.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0192.073] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3873a600, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3873a600, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VST", cAlternateFileName="")) returned 1 [0192.074] wcscmp (_String1="BASFLO_U.VST", _String2=".") returned 1 [0192.074] wcscmp (_String1="BASFLO_U.VST", _String2="..") returned 1 [0192.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcd68 [0192.074] wcscpy (in: _Dest=0x81dcd68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.074] wcscat (in: _Dest=0x81dcd68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.074] wcscat (in: _Dest=0x81dcd68, _Source="BASFLO_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" [0192.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0c [0192.075] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0709000, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0709000, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_M.VST", cAlternateFileName="")) returned 1 [0192.075] wcscmp (_String1="BASICD_M.VST", _String2=".") returned 1 [0192.075] wcscmp (_String1="BASICD_M.VST", _String2="..") returned 1 [0192.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc9a8 [0192.075] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.075] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.075] wcscat (in: _Dest=0x81dc9a8, _Source="BASICD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" [0192.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0192.076] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d2ea00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2d2ea00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_U.VST", cAlternateFileName="")) returned 1 [0192.076] wcscmp (_String1="BASICD_U.VST", _String2=".") returned 1 [0192.076] wcscmp (_String1="BASICD_U.VST", _String2="..") returned 1 [0192.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc908 [0192.076] wcscpy (in: _Dest=0x81dc908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.076] wcscat (in: _Dest=0x81dc908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.076] wcscat (in: _Dest=0x81dc908, _Source="BASICD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" [0192.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2818 [0192.077] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda52d00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfda52d00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_M.VSS", cAlternateFileName="")) returned 1 [0192.077] wcscmp (_String1="BASIC_M.VSS", _String2=".") returned 1 [0192.077] wcscmp (_String1="BASIC_M.VSS", _String2="..") returned 1 [0192.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc868 [0192.077] wcscpy (in: _Dest=0x81dc868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.077] wcscat (in: _Dest=0x81dc868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.077] wcscat (in: _Dest=0x81dc868, _Source="BASIC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" [0192.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2524 [0192.078] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b0e00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39b0e00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_U.VSS", cAlternateFileName="")) returned 1 [0192.078] wcscmp (_String1="BASIC_U.VSS", _String2=".") returned 1 [0192.078] wcscmp (_String1="BASIC_U.VSS", _String2="..") returned 1 [0192.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc7c8 [0192.078] wcscpy (in: _Dest=0x81dc7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.078] wcscat (in: _Dest=0x81dc7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.078] wcscat (in: _Dest=0x81dc7c8, _Source="BASIC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" [0192.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c [0192.079] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x33400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_M.VSS", cAlternateFileName="")) returned 1 [0192.079] wcscmp (_String1="BCKGRN_M.VSS", _String2=".") returned 1 [0192.079] wcscmp (_String1="BCKGRN_M.VSS", _String2="..") returned 1 [0192.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc688 [0192.079] wcscpy (in: _Dest=0x81dc688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.080] wcscat (in: _Dest=0x81dc688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.080] wcscat (in: _Dest=0x81dc688, _Source="BCKGRN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" [0192.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0192.081] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x30600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_U.VSS", cAlternateFileName="")) returned 1 [0192.081] wcscmp (_String1="BCKGRN_U.VSS", _String2=".") returned 1 [0192.081] wcscmp (_String1="BCKGRN_U.VSS", _String2="..") returned 1 [0192.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc728 [0192.081] wcscpy (in: _Dest=0x81dc728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.081] wcscat (in: _Dest=0x81dc728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.081] wcscat (in: _Dest=0x81dc728, _Source="BCKGRN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" [0192.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd8 [0192.083] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23cacd00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23cacd00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x51000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_M.VSS", cAlternateFileName="")) returned 1 [0192.083] wcscmp (_String1="BLDCOR_M.VSS", _String2=".") returned 1 [0192.083] wcscmp (_String1="BLDCOR_M.VSS", _String2="..") returned 1 [0192.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc5e8 [0192.083] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.083] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.083] wcscat (in: _Dest=0x81dc5e8, _Source="BLDCOR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" [0192.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f8 [0192.305] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x393ff700, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x393ff700, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x4fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_U.VSS", cAlternateFileName="")) returned 1 [0192.305] wcscmp (_String1="BLDCOR_U.VSS", _String2=".") returned 1 [0192.305] wcscmp (_String1="BLDCOR_U.VSS", _String2="..") returned 1 [0192.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ad18 [0192.305] wcscpy (in: _Dest=0x819ad18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.305] wcscat (in: _Dest=0x819ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.305] wcscat (in: _Dest=0x819ad18, _Source="BLDCOR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" [0193.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ad18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0193.953] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f378100, ftCreationTime.dwHighDateTime=0x1c33fd1, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f378100, ftLastWriteTime.dwHighDateTime=0x1c33fd1, nFileSizeHigh=0x0, nFileSizeLow=0x72a6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.DWG", cAlternateFileName="")) returned 1 [0196.562] wcscmp (_String1="BLDGPLAN.DWG", _String2=".") returned 1 [0196.562] wcscmp (_String1="BLDGPLAN.DWG", _String2="..") returned 1 [0196.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11fa8 [0196.563] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.563] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.563] wcscat (in: _Dest=0x3e11fa8, _Source="BLDGPLAN.DWG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" [0201.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc8 [0201.967] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca85900, ftCreationTime.dwHighDateTime=0x1c2efb3, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdca85900, ftLastWriteTime.dwHighDateTime=0x1c2efb3, nFileSizeHigh=0x0, nFileSizeLow=0xd9ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.JPG", cAlternateFileName="")) returned 1 [0201.967] wcscmp (_String1="BLDGPLAN.JPG", _String2=".") returned 1 [0201.967] wcscmp (_String1="BLDGPLAN.JPG", _String2="..") returned 1 [0201.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e10608 [0201.967] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.967] wcscat (in: _Dest=0x3e10608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.967] wcscat (in: _Dest=0x3e10608, _Source="BLDGPLAN.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" [0201.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc4 [0201.969] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17fa9200, ftCreationTime.dwHighDateTime=0x1c907a7, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17fa9200, ftLastWriteTime.dwHighDateTime=0x1c907a7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_M.VSD", cAlternateFileName="")) returned 1 [0201.969] wcscmp (_String1="BLNKDG_M.VSD", _String2=".") returned 1 [0201.969] wcscmp (_String1="BLNKDG_M.VSD", _String2="..") returned 1 [0201.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e111e8 [0201.969] wcscpy (in: _Dest=0x3e111e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.969] wcscat (in: _Dest=0x3e111e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.969] wcscat (in: _Dest=0x3e111e8, _Source="BLNKDG_M.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" [0201.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e111e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cbc [0201.970] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395b7e00, ftCreationTime.dwHighDateTime=0x1c907a7, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x395b7e00, ftLastWriteTime.dwHighDateTime=0x1c907a7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_U.VSD", cAlternateFileName="")) returned 1 [0201.970] wcscmp (_String1="BLNKDG_U.VSD", _String2=".") returned 1 [0201.971] wcscmp (_String1="BLNKDG_U.VSD", _String2="..") returned 1 [0201.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e10a68 [0201.971] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.971] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.971] wcscat (in: _Dest=0x3e10a68, _Source="BLNKDG_U.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" [0201.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0201.972] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40670500, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x40670500, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_M.VSS", cAlternateFileName="")) returned 1 [0201.972] wcscmp (_String1="BLOCK3_M.VSS", _String2=".") returned 1 [0201.972] wcscmp (_String1="BLOCK3_M.VSS", _String2="..") returned 1 [0201.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11148 [0201.972] wcscpy (in: _Dest=0x3e11148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.972] wcscat (in: _Dest=0x3e11148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.972] wcscat (in: _Dest=0x3e11148, _Source="BLOCK3_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" [0201.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0201.974] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51177b00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x51177b00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_U.VSS", cAlternateFileName="")) returned 1 [0201.974] wcscmp (_String1="BLOCK3_U.VSS", _String2=".") returned 1 [0201.974] wcscmp (_String1="BLOCK3_U.VSS", _String2="..") returned 1 [0201.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11d28 [0201.974] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.974] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.974] wcscat (in: _Dest=0x3e11d28, _Source="BLOCK3_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" [0201.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0201.975] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596fb600, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x596fb600, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VSS", cAlternateFileName="")) returned 1 [0201.975] wcscmp (_String1="BLOCKP_M.VSS", _String2=".") returned 1 [0201.975] wcscmp (_String1="BLOCKP_M.VSS", _String2="..") returned 1 [0201.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11968 [0201.976] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.976] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.976] wcscat (in: _Dest=0x3e11968, _Source="BLOCKP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" [0201.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0201.977] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6667100, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd6667100, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VST", cAlternateFileName="")) returned 1 [0201.977] wcscmp (_String1="BLOCKP_M.VST", _String2=".") returned 1 [0201.977] wcscmp (_String1="BLOCKP_M.VST", _String2="..") returned 1 [0201.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11788 [0201.977] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.977] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.977] wcscat (in: _Dest=0x3e11788, _Source="BLOCKP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" [0201.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b8 [0201.978] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f91e00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62f91e00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x2b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VSS", cAlternateFileName="")) returned 1 [0201.979] wcscmp (_String1="BLOCKP_U.VSS", _String2=".") returned 1 [0201.979] wcscmp (_String1="BLOCKP_U.VSS", _String2="..") returned 1 [0201.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e120e8 [0201.979] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.979] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.979] wcscat (in: _Dest=0x3e120e8, _Source="BLOCKP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" [0201.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0201.980] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c8cb00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd8c8cb00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VST", cAlternateFileName="")) returned 1 [0201.980] wcscmp (_String1="BLOCKP_U.VST", _String2=".") returned 1 [0201.980] wcscmp (_String1="BLOCKP_U.VST", _String2="..") returned 1 [0201.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e116e8 [0201.980] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.980] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.980] wcscat (in: _Dest=0x3e116e8, _Source="BLOCKP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" [0201.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba0 [0201.981] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72bf500, ftCreationTime.dwHighDateTime=0x1c63651, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb72bf500, ftLastWriteTime.dwHighDateTime=0x1c63651, nFileSizeHigh=0x0, nFileSizeLow=0xf1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKS.DWG", cAlternateFileName="")) returned 1 [0201.981] wcscmp (_String1="BLOCKS.DWG", _String2=".") returned 1 [0201.982] wcscmp (_String1="BLOCKS.DWG", _String2="..") returned 1 [0201.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e11a08 [0201.982] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.982] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.982] wcscat (in: _Dest=0x3e11a08, _Source="BLOCKS.DWG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" [0201.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a38 [0201.983] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b515900, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b515900, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VSS", cAlternateFileName="")) returned 1 [0201.983] wcscmp (_String1="BLOCK_M.VSS", _String2=".") returned 1 [0201.983] wcscmp (_String1="BLOCK_M.VSS", _String2="..") returned 1 [0201.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e12408 [0201.983] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.983] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.983] wcscat (in: _Dest=0x3e12408, _Source="BLOCK_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" [0201.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0201.985] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5c5200, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc5c5200, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VST", cAlternateFileName="")) returned 1 [0201.985] wcscmp (_String1="BLOCK_M.VST", _String2=".") returned 1 [0201.985] wcscmp (_String1="BLOCK_M.VST", _String2="..") returned 1 [0201.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e12228 [0201.985] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.985] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.985] wcscat (in: _Dest=0x3e12228, _Source="BLOCK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" [0201.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0201.986] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73a99400, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73a99400, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VSS", cAlternateFileName="")) returned 1 [0201.986] wcscmp (_String1="BLOCK_U.VSS", _String2=".") returned 1 [0201.986] wcscmp (_String1="BLOCK_U.VSS", _String2="..") returned 1 [0201.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc5e8 [0201.987] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.987] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.987] wcscat (in: _Dest=0x81dc5e8, _Source="BLOCK_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" [0201.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2654 [0201.988] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfefd900, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfefd900, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VST", cAlternateFileName="")) returned 1 [0201.988] wcscmp (_String1="BLOCK_U.VST", _String2=".") returned 1 [0201.988] wcscmp (_String1="BLOCK_U.VST", _String2="..") returned 1 [0201.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc9a8 [0201.988] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.988] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.988] wcscat (in: _Dest=0x81dc9a8, _Source="BLOCK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" [0201.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0201.990] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf042a600, ftCreationTime.dwHighDateTime=0x1ca5ee2, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf042a600, ftLastWriteTime.dwHighDateTime=0x1ca5ee2, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_M.VSS", cAlternateFileName="")) returned 1 [0201.990] wcscmp (_String1="BORDRS_M.VSS", _String2=".") returned 1 [0201.990] wcscmp (_String1="BORDRS_M.VSS", _String2="..") returned 1 [0201.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc908 [0201.990] wcscpy (in: _Dest=0x81dc908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.990] wcscat (in: _Dest=0x81dc908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.990] wcscat (in: _Dest=0x81dc908, _Source="BORDRS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" [0201.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0201.992] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf042a600, ftCreationTime.dwHighDateTime=0x1ca5ee2, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf042a600, ftLastWriteTime.dwHighDateTime=0x1ca5ee2, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_U.VSS", cAlternateFileName="")) returned 1 [0201.992] wcscmp (_String1="BORDRS_U.VSS", _String2=".") returned 1 [0201.992] wcscmp (_String1="BORDRS_U.VSS", _String2="..") returned 1 [0201.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc7c8 [0201.992] wcscpy (in: _Dest=0x81dc7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.992] wcscat (in: _Dest=0x81dc7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.992] wcscat (in: _Dest=0x81dc7c8, _Source="BORDRS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" [0201.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0201.993] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4426600, ftCreationTime.dwHighDateTime=0x1ca4e99, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4426600, ftLastWriteTime.dwHighDateTime=0x1ca4e99, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_M.VSS", cAlternateFileName="")) returned 1 [0201.993] wcscmp (_String1="BPMNA_M.VSS", _String2=".") returned 1 [0201.993] wcscmp (_String1="BPMNA_M.VSS", _String2="..") returned 1 [0201.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dca48 [0201.994] wcscpy (in: _Dest=0x81dca48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.994] wcscat (in: _Dest=0x81dca48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.994] wcscat (in: _Dest=0x81dca48, _Source="BPMNA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" [0201.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dca48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0201.995] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eac0300, ftCreationTime.dwHighDateTime=0x1ca4e9a, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1eac0300, ftLastWriteTime.dwHighDateTime=0x1ca4e9a, nFileSizeHigh=0x0, nFileSizeLow=0x8da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_U.VSS", cAlternateFileName="")) returned 1 [0201.995] wcscmp (_String1="BPMNA_U.VSS", _String2=".") returned 1 [0201.995] wcscmp (_String1="BPMNA_U.VSS", _String2="..") returned 1 [0201.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbaa8 [0201.995] wcscpy (in: _Dest=0x81dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.995] wcscat (in: _Dest=0x81dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.995] wcscat (in: _Dest=0x81dbaa8, _Source="BPMNA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" [0201.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1adc [0201.997] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e94700, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4e94700, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0xe800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_M.VSS", cAlternateFileName="")) returned 1 [0201.997] wcscmp (_String1="BPMNC_M.VSS", _String2=".") returned 1 [0201.997] wcscmp (_String1="BPMNC_M.VSS", _String2="..") returned 1 [0201.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbbe8 [0201.997] wcscpy (in: _Dest=0x81dbbe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.997] wcscat (in: _Dest=0x81dbbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.997] wcscat (in: _Dest=0x81dbbe8, _Source="BPMNC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" [0201.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0201.999] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9adfb00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9adfb00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_U.VSS", cAlternateFileName="")) returned 1 [0201.999] wcscmp (_String1="BPMNC_U.VSS", _String2=".") returned 1 [0201.999] wcscmp (_String1="BPMNC_U.VSS", _String2="..") returned 1 [0201.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dce08 [0201.999] wcscpy (in: _Dest=0x81dce08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.999] wcscat (in: _Dest=0x81dce08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.999] wcscat (in: _Dest=0x81dce08, _Source="BPMNC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" [0201.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0202.000] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52957300, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52957300, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0xb2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_M.VSS", cAlternateFileName="")) returned 1 [0202.000] wcscmp (_String1="BPMNE_M.VSS", _String2=".") returned 1 [0202.000] wcscmp (_String1="BPMNE_M.VSS", _String2="..") returned 1 [0202.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dccc8 [0202.000] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.001] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.001] wcscat (in: _Dest=0x81dccc8, _Source="BPMNE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" [0202.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0202.002] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bcde300, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8bcde300, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0xb0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_U.VSS", cAlternateFileName="")) returned 1 [0202.002] wcscmp (_String1="BPMNE_U.VSS", _String2=".") returned 1 [0202.002] wcscmp (_String1="BPMNE_U.VSS", _String2="..") returned 1 [0202.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc728 [0202.002] wcscpy (in: _Dest=0x81dc728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.002] wcscat (in: _Dest=0x81dc728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.003] wcscat (in: _Dest=0x81dc728, _Source="BPMNE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" [0202.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0202.937] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34212d00, ftCreationTime.dwHighDateTime=0x1ca4e9a, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34212d00, ftLastWriteTime.dwHighDateTime=0x1ca4e9a, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_M.VSS", cAlternateFileName="")) returned 1 [0202.937] wcscmp (_String1="BPMNG_M.VSS", _String2=".") returned 1 [0202.937] wcscmp (_String1="BPMNG_M.VSS", _String2="..") returned 1 [0202.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dce08 [0202.937] wcscpy (in: _Dest=0x81dce08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.937] wcscat (in: _Dest=0x81dce08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.937] wcscat (in: _Dest=0x81dce08, _Source="BPMNG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" [0203.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0203.062] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400cef00, ftCreationTime.dwHighDateTime=0x1ca4e9a, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x400cef00, ftLastWriteTime.dwHighDateTime=0x1ca4e9a, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_U.VSS", cAlternateFileName="")) returned 1 [0203.062] wcscmp (_String1="BPMNG_U.VSS", _String2=".") returned 1 [0203.062] wcscmp (_String1="BPMNG_U.VSS", _String2="..") returned 1 [0203.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc728 [0203.063] wcscpy (in: _Dest=0x81dc728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.063] wcscat (in: _Dest=0x81dc728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.063] wcscat (in: _Dest=0x81dc728, _Source="BPMNG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" [0203.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0203.064] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4d6000, ftCreationTime.dwHighDateTime=0x1ca5d6c, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7b4d6000, ftLastWriteTime.dwHighDateTime=0x1ca5d6c, nFileSizeHigh=0x0, nFileSizeLow=0x4d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VSS", cAlternateFileName="")) returned 1 [0203.064] wcscmp (_String1="BPMN_M.VSS", _String2=".") returned 1 [0203.064] wcscmp (_String1="BPMN_M.VSS", _String2="..") returned 1 [0203.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbbe8 [0203.064] wcscpy (in: _Dest=0x81dbbe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.064] wcscat (in: _Dest=0x81dbbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.064] wcscat (in: _Dest=0x81dbbe8, _Source="BPMN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" [0203.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0203.065] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed291300, ftCreationTime.dwHighDateTime=0x1ca6c61, ftLastAccessTime.dwLowDateTime=0xa4635d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xed291300, ftLastWriteTime.dwHighDateTime=0x1ca6c61, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VST", cAlternateFileName="")) returned 1 [0203.065] wcscmp (_String1="BPMN_M.VST", _String2=".") returned 1 [0203.065] wcscmp (_String1="BPMN_M.VST", _String2="..") returned 1 [0203.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbaa8 [0203.065] wcscpy (in: _Dest=0x81dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.065] wcscat (in: _Dest=0x81dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.065] wcscat (in: _Dest=0x81dbaa8, _Source="BPMN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" [0203.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0203.067] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51f6600, ftCreationTime.dwHighDateTime=0x1ca5d6e, ftLastAccessTime.dwLowDateTime=0xa4635d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb51f6600, ftLastWriteTime.dwHighDateTime=0x1ca5d6e, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VSS", cAlternateFileName="")) returned 1 [0203.067] wcscmp (_String1="BPMN_U.VSS", _String2=".") returned 1 [0203.067] wcscmp (_String1="BPMN_U.VSS", _String2="..") returned 1 [0203.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dca48 [0203.067] wcscpy (in: _Dest=0x81dca48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.067] wcscat (in: _Dest=0x81dca48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.067] wcscat (in: _Dest=0x81dca48, _Source="BPMN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" [0203.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dca48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a8 [0203.068] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26b97200, ftCreationTime.dwHighDateTime=0x1ca4e9d, ftLastAccessTime.dwLowDateTime=0xa4635d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26b97200, ftLastWriteTime.dwHighDateTime=0x1ca4e9d, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VST", cAlternateFileName="")) returned 1 [0203.068] wcscmp (_String1="BPMN_U.VST", _String2=".") returned 1 [0203.069] wcscmp (_String1="BPMN_U.VST", _String2="..") returned 1 [0203.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc7c8 [0203.069] wcscpy (in: _Dest=0x81dc7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.069] wcscat (in: _Dest=0x81dc7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.069] wcscat (in: _Dest=0x81dc7c8, _Source="BPMN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" [0203.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0203.070] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce8fbb00, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xce8fbb00, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x19c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_M.VSS", cAlternateFileName="")) returned 1 [0203.070] wcscmp (_String1="BPRES_M.VSS", _String2=".") returned 1 [0203.070] wcscmp (_String1="BPRES_M.VSS", _String2="..") returned 1 [0203.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc908 [0203.070] wcscpy (in: _Dest=0x81dc908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.070] wcscat (in: _Dest=0x81dc908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.070] wcscat (in: _Dest=0x81dc908, _Source="BPRES_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" [0203.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0203.072] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4859c00, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd4859c00, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_U.VSS", cAlternateFileName="")) returned 1 [0203.072] wcscmp (_String1="BPRES_U.VSS", _String2=".") returned 1 [0203.072] wcscmp (_String1="BPRES_U.VSS", _String2="..") returned 1 [0203.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc9a8 [0203.072] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.072] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.072] wcscat (in: _Dest=0x81dc9a8, _Source="BPRES_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" [0203.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0203.073] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94726300, ftCreationTime.dwHighDateTime=0x1c33005, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x94726300, ftLastWriteTime.dwHighDateTime=0x1c33005, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRAINSTM.XML", cAlternateFileName="")) returned 1 [0203.073] wcscmp (_String1="BRAINSTM.XML", _String2=".") returned 1 [0203.073] wcscmp (_String1="BRAINSTM.XML", _String2="..") returned 1 [0203.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc5e8 [0203.073] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.074] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.074] wcscat (in: _Dest=0x81dc5e8, _Source="BRAINSTM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" [0203.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0203.075] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e7f600, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd6e7f600, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VSS", cAlternateFileName="")) returned 1 [0203.075] wcscmp (_String1="BSTORM_M.VSS", _String2=".") returned 1 [0203.075] wcscmp (_String1="BSTORM_M.VSS", _String2="..") returned 1 [0203.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcae8 [0203.075] wcscpy (in: _Dest=0x81dcae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.075] wcscat (in: _Dest=0x81dcae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.075] wcscat (in: _Dest=0x81dcae8, _Source="BSTORM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" [0203.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0203.076] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ecd900, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23ecd900, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VST", cAlternateFileName="")) returned 1 [0203.076] wcscmp (_String1="BSTORM_M.VST", _String2=".") returned 1 [0203.076] wcscmp (_String1="BSTORM_M.VST", _String2="..") returned 1 [0203.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc688 [0203.076] wcscpy (in: _Dest=0x81dc688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.076] wcscat (in: _Dest=0x81dc688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.076] wcscat (in: _Dest=0x81dc688, _Source="BSTORM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" [0203.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0203.078] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd94a5000, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd94a5000, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VSS", cAlternateFileName="")) returned 1 [0203.082] wcscmp (_String1="BSTORM_U.VSS", _String2=".") returned 1 [0203.082] wcscmp (_String1="BSTORM_U.VSS", _String2="..") returned 1 [0203.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc868 [0203.083] wcscpy (in: _Dest=0x81dc868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.083] wcscat (in: _Dest=0x81dc868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.083] wcscat (in: _Dest=0x81dc868, _Source="BSTORM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" [0203.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0203.084] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b18d00, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28b18d00, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VST", cAlternateFileName="")) returned 1 [0203.084] wcscmp (_String1="BSTORM_U.VST", _String2=".") returned 1 [0203.084] wcscmp (_String1="BSTORM_U.VST", _String2="..") returned 1 [0203.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcd68 [0203.084] wcscpy (in: _Dest=0x81dcd68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.084] wcscat (in: _Dest=0x81dcd68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.084] wcscat (in: _Dest=0x81dcd68, _Source="BSTORM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" [0203.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0203.086] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d3b800, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2d3b800, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_M.VSS", cAlternateFileName="")) returned 1 [0203.086] wcscmp (_String1="BTHKT_M.VSS", _String2=".") returned 1 [0203.086] wcscmp (_String1="BTHKT_M.VSS", _String2="..") returned 1 [0203.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbf08 [0203.086] wcscpy (in: _Dest=0x81dbf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.086] wcscat (in: _Dest=0x81dbf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.086] wcscat (in: _Dest=0x81dbf08, _Source="BTHKT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" [0203.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0203.088] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2bf300, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb2bf300, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_U.VSS", cAlternateFileName="")) returned 1 [0203.088] wcscmp (_String1="BTHKT_U.VSS", _String2=".") returned 1 [0203.088] wcscmp (_String1="BTHKT_U.VSS", _String2="..") returned 1 [0203.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dcb88 [0203.088] wcscpy (in: _Dest=0x81dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.088] wcscat (in: _Dest=0x81dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.088] wcscat (in: _Dest=0x81dcb88, _Source="BTHKT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" [0203.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0203.089] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf717b500, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf717b500, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_M.VSS", cAlternateFileName="")) returned 1 [0203.089] wcscmp (_String1="CABNT_M.VSS", _String2=".") returned 1 [0203.089] wcscmp (_String1="CABNT_M.VSS", _String2="..") returned 1 [0203.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dcc28 [0203.090] wcscpy (in: _Dest=0x81dcc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.090] wcscat (in: _Dest=0x81dcc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.090] wcscat (in: _Dest=0x81dcc28, _Source="CABNT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" [0203.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0203.091] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d24a00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1d24a00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x1c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_U.VSS", cAlternateFileName="")) returned 1 [0203.091] wcscmp (_String1="CABNT_U.VSS", _String2=".") returned 1 [0203.091] wcscmp (_String1="CABNT_U.VSS", _String2="..") returned 1 [0203.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc548 [0203.091] wcscpy (in: _Dest=0x81dc548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.092] wcscat (in: _Dest=0x81dc548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.092] wcscat (in: _Dest=0x81dc548, _Source="CABNT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" [0203.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0203.093] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dedcb00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa46f4450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2dedcb00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x19f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VSS", cAlternateFileName="")) returned 1 [0203.093] wcscmp (_String1="CALNDR_M.VSS", _String2=".") returned 1 [0203.093] wcscmp (_String1="CALNDR_M.VSS", _String2="..") returned 1 [0203.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc368 [0203.093] wcscpy (in: _Dest=0x81dc368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.094] wcscat (in: _Dest=0x81dc368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.094] wcscat (in: _Dest=0x81dc368, _Source="CALNDR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" [0203.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0203.095] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaaa6e00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa46f4450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeaaa6e00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VST", cAlternateFileName="")) returned 1 [0203.096] wcscmp (_String1="CALNDR_M.VST", _String2=".") returned 1 [0203.096] wcscmp (_String1="CALNDR_M.VST", _String2="..") returned 1 [0203.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc4a8 [0203.096] wcscpy (in: _Dest=0x81dc4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.096] wcscat (in: _Dest=0x81dc4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.096] wcscat (in: _Dest=0x81dc4a8, _Source="CALNDR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" [0203.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0203.098] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54136b00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54136b00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x19da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VSS", cAlternateFileName="")) returned 1 [0203.098] wcscmp (_String1="CALNDR_U.VSS", _String2=".") returned 1 [0203.098] wcscmp (_String1="CALNDR_U.VSS", _String2="..") returned 1 [0203.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc408 [0203.098] wcscpy (in: _Dest=0x81dc408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.098] wcscat (in: _Dest=0x81dc408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.098] wcscat (in: _Dest=0x81dc408, _Source="CALNDR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" [0203.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0203.100] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee3df500, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee3df500, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VST", cAlternateFileName="")) returned 1 [0203.100] wcscmp (_String1="CALNDR_U.VST", _String2=".") returned 1 [0203.100] wcscmp (_String1="CALNDR_U.VST", _String2="..") returned 1 [0203.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc2c8 [0203.100] wcscpy (in: _Dest=0x81dc2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.100] wcscat (in: _Dest=0x81dc2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.100] wcscat (in: _Dest=0x81dc2c8, _Source="CALNDR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" [0203.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f4 [0203.412] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b3a7900, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5b3a7900, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_M.VSS", cAlternateFileName="")) returned 1 [0203.412] wcscmp (_String1="CALOUT_M.VSS", _String2=".") returned 1 [0203.412] wcscmp (_String1="CALOUT_M.VSS", _String2="..") returned 1 [0203.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbaa8 [0203.412] wcscpy (in: _Dest=0x81dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.412] wcscat (in: _Dest=0x81dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.412] wcscat (in: _Dest=0x81dbaa8, _Source="CALOUT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" [0205.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0205.345] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62618700, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62618700, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_U.VSS", cAlternateFileName="")) returned 1 [0205.345] wcscmp (_String1="CALOUT_U.VSS", _String2=".") returned 1 [0205.345] wcscmp (_String1="CALOUT_U.VSS", _String2="..") returned 1 [0205.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbbe8 [0205.345] wcscpy (in: _Dest=0x81dbbe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.345] wcscat (in: _Dest=0x81dbbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.345] wcscat (in: _Dest=0x81dbbe8, _Source="CALOUT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" [0205.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0205.347] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64c3e100, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64c3e100, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VSS", cAlternateFileName="")) returned 1 [0205.347] wcscmp (_String1="CAUSEF_M.VSS", _String2=".") returned 1 [0205.347] wcscmp (_String1="CAUSEF_M.VSS", _String2="..") returned 1 [0205.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc728 [0205.347] wcscpy (in: _Dest=0x81dc728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.347] wcscat (in: _Dest=0x81dc728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.347] wcscat (in: _Dest=0x81dc728, _Source="CAUSEF_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" [0205.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a8 [0205.349] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454dc500, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x454dc500, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VST", cAlternateFileName="")) returned 1 [0205.349] wcscmp (_String1="CAUSEF_M.VST", _String2=".") returned 1 [0205.349] wcscmp (_String1="CAUSEF_M.VST", _String2="..") returned 1 [0205.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dce08 [0205.349] wcscpy (in: _Dest=0x81dce08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.349] wcscat (in: _Dest=0x81dce08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.349] wcscat (in: _Dest=0x81dce08, _Source="CAUSEF_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" [0205.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0205.351] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68576800, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68576800, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VSS", cAlternateFileName="")) returned 1 [0205.351] wcscmp (_String1="CAUSEF_U.VSS", _String2=".") returned 1 [0205.351] wcscmp (_String1="CAUSEF_U.VSS", _String2="..") returned 1 [0205.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc0e8 [0205.351] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.351] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.351] wcscat (in: _Dest=0x81dc0e8, _Source="CAUSEF_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" [0205.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0205.353] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b43a600, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b43a600, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VST", cAlternateFileName="")) returned 1 [0205.353] wcscmp (_String1="CAUSEF_U.VST", _String2=".") returned 1 [0205.353] wcscmp (_String1="CAUSEF_U.VST", _String2="..") returned 1 [0205.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc188 [0205.353] wcscpy (in: _Dest=0x81dc188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.353] wcscat (in: _Dest=0x81dc188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.353] wcscat (in: _Dest=0x81dc188, _Source="CAUSEF_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" [0205.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0205.355] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeee6b00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfeee6b00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_M.VST", cAlternateFileName="")) returned 1 [0205.355] wcscmp (_String1="CEILPL_M.VST", _String2=".") returned 1 [0205.355] wcscmp (_String1="CEILPL_M.VST", _String2="..") returned 1 [0205.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc228 [0205.355] wcscpy (in: _Dest=0x81dc228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.355] wcscat (in: _Dest=0x81dc228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.355] wcscat (in: _Dest=0x81dc228, _Source="CEILPL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" [0205.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0205.357] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877d300, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x877d300, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_U.VST", cAlternateFileName="")) returned 1 [0205.357] wcscmp (_String1="CEILPL_U.VST", _String2=".") returned 1 [0205.357] wcscmp (_String1="CEILPL_U.VST", _String2="..") returned 1 [0205.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbe68 [0205.357] wcscpy (in: _Dest=0x81dbe68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.357] wcscat (in: _Dest=0x81dbe68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.357] wcscat (in: _Dest=0x81dbe68, _Source="CEILPL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" [0205.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbe68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0205.359] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802eec00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x802eec00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VSS", cAlternateFileName="")) returned 1 [0205.359] wcscmp (_String1="CHART_M.VSS", _String2=".") returned 1 [0205.359] wcscmp (_String1="CHART_M.VSS", _String2="..") returned 1 [0205.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbfa8 [0205.359] wcscpy (in: _Dest=0x81dbfa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.359] wcscat (in: _Dest=0x81dbfa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.359] wcscat (in: _Dest=0x81dbfa8, _Source="CHART_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" [0205.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbfa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0205.361] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b5a00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc0b5a00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VST", cAlternateFileName="")) returned 1 [0205.361] wcscmp (_String1="CHART_M.VST", _String2=".") returned 1 [0205.361] wcscmp (_String1="CHART_M.VST", _String2="..") returned 1 [0205.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc048 [0205.361] wcscpy (in: _Dest=0x81dc048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.361] wcscat (in: _Dest=0x81dc048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.361] wcscat (in: _Dest=0x81dc048, _Source="CHART_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" [0205.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0205.362] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99379d00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99379d00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VSS", cAlternateFileName="")) returned 1 [0205.362] wcscmp (_String1="CHART_U.VSS", _String2=".") returned 1 [0205.362] wcscmp (_String1="CHART_U.VSS", _String2="..") returned 1 [0205.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbdc8 [0205.363] wcscpy (in: _Dest=0x81dbdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.363] wcscat (in: _Dest=0x81dbdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.363] wcscat (in: _Dest=0x81dbdc8, _Source="CHART_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" [0205.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34 [0205.366] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ee100, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf9ee100, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VST", cAlternateFileName="")) returned 1 [0205.366] wcscmp (_String1="CHART_U.VST", _String2=".") returned 1 [0205.367] wcscmp (_String1="CHART_U.VST", _String2="..") returned 1 [0205.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbd28 [0205.367] wcscpy (in: _Dest=0x81dbd28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.367] wcscat (in: _Dest=0x81dbd28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.367] wcscat (in: _Dest=0x81dbd28, _Source="CHART_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" [0205.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbd28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08 [0205.368] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2d7e00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9f2d7e00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VSS", cAlternateFileName="")) returned 1 [0205.368] wcscmp (_String1="COMOLE_M.VSS", _String2=".") returned 1 [0205.368] wcscmp (_String1="COMOLE_M.VSS", _String2="..") returned 1 [0205.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbc88 [0205.368] wcscpy (in: _Dest=0x81dbc88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.368] wcscat (in: _Dest=0x81dbc88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.369] wcscat (in: _Dest=0x81dbc88, _Source="COMOLE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" [0205.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0205.370] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13326800, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13326800, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VST", cAlternateFileName="")) returned 1 [0205.370] wcscmp (_String1="COMOLE_M.VST", _String2=".") returned 1 [0205.370] wcscmp (_String1="COMOLE_M.VST", _String2="..") returned 1 [0205.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db8c8 [0205.370] wcscpy (in: _Dest=0x81db8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.370] wcscat (in: _Dest=0x81db8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.370] wcscat (in: _Dest=0x81db8c8, _Source="COMOLE_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" [0205.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0205.371] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f23200, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa3f23200, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VSS", cAlternateFileName="")) returned 1 [0205.371] wcscmp (_String1="COMOLE_U.VSS", _String2=".") returned 1 [0205.371] wcscmp (_String1="COMOLE_U.VSS", _String2="..") returned 1 [0205.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcf48 [0205.372] wcscpy (in: _Dest=0x81dcf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.372] wcscat (in: _Dest=0x81dcf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.372] wcscat (in: _Dest=0x81dcf48, _Source="COMOLE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" [0205.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0205.373] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594c200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1594c200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VST", cAlternateFileName="")) returned 1 [0205.373] wcscmp (_String1="COMOLE_U.VST", _String2=".") returned 1 [0205.373] wcscmp (_String1="COMOLE_U.VST", _String2="..") returned 1 [0205.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcea8 [0205.373] wcscpy (in: _Dest=0x81dcea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.373] wcscat (in: _Dest=0x81dcea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.373] wcscat (in: _Dest=0x81dcea8, _Source="COMOLE_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" [0205.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0205.375] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa47fedf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_M.VSS", cAlternateFileName="")) returned 1 [0205.375] wcscmp (_String1="COMPLN_M.VSS", _String2=".") returned 1 [0205.375] wcscmp (_String1="COMPLN_M.VSS", _String2="..") returned 1 [0205.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbb48 [0205.375] wcscpy (in: _Dest=0x81dbb48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.375] wcscat (in: _Dest=0x81dbb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.375] wcscat (in: _Dest=0x81dbb48, _Source="COMPLN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" [0205.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0205.376] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa47fedf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_U.VSS", cAlternateFileName="")) returned 1 [0205.376] wcscmp (_String1="COMPLN_U.VSS", _String2=".") returned 1 [0205.376] wcscmp (_String1="COMPLN_U.VSS", _String2="..") returned 1 [0205.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db828 [0205.376] wcscpy (in: _Dest=0x81db828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.376] wcscat (in: _Dest=0x81db828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.377] wcscat (in: _Dest=0x81db828, _Source="COMPLN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" [0205.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0205.378] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2404e00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4824f50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2404e00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x3de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_M.VSS", cAlternateFileName="")) returned 1 [0205.378] wcscmp (_String1="COMPS_M.VSS", _String2=".") returned 1 [0205.378] wcscmp (_String1="COMPS_M.VSS", _String2="..") returned 1 [0205.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dba08 [0205.378] wcscpy (in: _Dest=0x81dba08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.378] wcscat (in: _Dest=0x81dba08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.378] wcscat (in: _Dest=0x81dba08, _Source="COMPS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" [0205.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dba08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0205.379] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbc9b600, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbbc9b600, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x3c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_U.VSS", cAlternateFileName="")) returned 1 [0205.379] wcscmp (_String1="COMPS_U.VSS", _String2=".") returned 1 [0205.379] wcscmp (_String1="COMPS_U.VSS", _String2="..") returned 1 [0205.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81db788 [0205.380] wcscpy (in: _Dest=0x81db788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.380] wcscat (in: _Dest=0x81db788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.380] wcscat (in: _Dest=0x81db788, _Source="COMPS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" [0205.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0205.381] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a597600, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1a597600, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_M.VST", cAlternateFileName="")) returned 1 [0205.381] wcscmp (_String1="CONLOG_M.VST", _String2=".") returned 1 [0205.381] wcscmp (_String1="CONLOG_M.VST", _String2="..") returned 1 [0205.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db6e8 [0205.381] wcscpy (in: _Dest=0x81db6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.381] wcscat (in: _Dest=0x81db6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.381] wcscat (in: _Dest=0x81db6e8, _Source="CONLOG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" [0205.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0205.607] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f1e2a00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f1e2a00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_U.VST", cAlternateFileName="")) returned 1 [0205.607] wcscmp (_String1="CONLOG_U.VST", _String2=".") returned 1 [0205.607] wcscmp (_String1="CONLOG_U.VST", _String2="..") returned 1 [0205.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db648 [0205.607] wcscpy (in: _Dest=0x81db648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.607] wcscat (in: _Dest=0x81db648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.607] wcscat (in: _Dest=0x81db648, _Source="CONLOG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" [0206.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0206.135] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e6a500, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8e6a500, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_M.VSS", cAlternateFileName="")) returned 1 [0206.136] wcscmp (_String1="CONNEC_M.VSS", _String2=".") returned 1 [0206.136] wcscmp (_String1="CONNEC_M.VSS", _String2="..") returned 1 [0206.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dccc8 [0206.136] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0206.136] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0206.136] wcscat (in: _Dest=0x81dccc8, _Source="CONNEC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" [0206.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0206.137] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd865ee00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4871210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd865ee00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x34600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_U.VSS", cAlternateFileName="")) returned 1 [0206.137] wcscmp (_String1="CONNEC_U.VSS", _String2=".") returned 1 [0206.137] wcscmp (_String1="CONNEC_U.VSS", _String2="..") returned 1 [0206.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db968 [0206.137] wcscpy (in: _Dest=0x81db968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0206.137] wcscat (in: _Dest=0x81db968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0206.137] wcscat (in: _Dest=0x81db968, _Source="CONNEC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" [0206.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0206.139] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0ad700, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4871210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe0ad700, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x89200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_M.VSS", cAlternateFileName="")) returned 1 [0206.885] wcscmp (_String1="CUBICL_M.VSS", _String2=".") returned 1 [0206.885] wcscmp (_String1="CUBICL_M.VSS", _String2="..") returned 1 [0206.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dccc8 [0206.946] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0206.956] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.010] wcscat (in: _Dest=0x81dccc8, _Source="CUBICL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" [0207.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0209.848] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427e9300, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4871210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x427e9300, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x8ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_U.VSS", cAlternateFileName="")) returned 1 [0209.848] wcscmp (_String1="CUBICL_U.VSS", _String2=".") returned 1 [0209.848] wcscmp (_String1="CUBICL_U.VSS", _String2="..") returned 1 [0209.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11468 [0209.848] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0209.848] wcscat (in: _Dest=0x3e11468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0209.848] wcscat (in: _Dest=0x3e11468, _Source="CUBICL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" [0209.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0209.854] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47434700, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4897370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47434700, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VSS", cAlternateFileName="")) returned 1 [0209.854] wcscmp (_String1="DATFLO_M.VSS", _String2=".") returned 1 [0209.854] wcscmp (_String1="DATFLO_M.VSS", _String2="..") returned 1 [0209.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11328 [0209.855] wcscpy (in: _Dest=0x3e11328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0209.855] wcscat (in: _Dest=0x3e11328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0209.855] wcscat (in: _Dest=0x3e11328, _Source="DATFLO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" [0209.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0209.861] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21808400, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa492f8f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x21808400, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VST", cAlternateFileName="")) returned 1 [0209.861] wcscmp (_String1="DATFLO_M.VST", _String2=".") returned 1 [0209.861] wcscmp (_String1="DATFLO_M.VST", _String2="..") returned 1 [0209.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12228 [0209.861] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0209.861] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0209.861] wcscat (in: _Dest=0x3e12228, _Source="DATFLO_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" [0209.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0209.862] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d392800, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa492f8f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d392800, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VSS", cAlternateFileName="")) returned 1 [0209.862] wcscmp (_String1="DATFLO_U.VSS", _String2=".") returned 1 [0209.862] wcscmp (_String1="DATFLO_U.VSS", _String2="..") returned 1 [0209.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12408 [0209.862] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0209.862] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0209.862] wcscat (in: _Dest=0x3e12408, _Source="DATFLO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" [0209.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0209.863] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25140b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa492f8f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x25140b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VST", cAlternateFileName="")) returned 1 [0209.864] wcscmp (_String1="DATFLO_U.VST", _String2=".") returned 1 [0209.864] wcscmp (_String1="DATFLO_U.VST", _String2="..") returned 1 [0209.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11a08 [0209.864] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0209.864] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0209.864] wcscat (in: _Dest=0x3e11a08, _Source="DATFLO_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" [0209.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0211.651] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26453800, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa49c7e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26453800, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_M.VST", cAlternateFileName="")) returned 1 [0211.651] wcscmp (_String1="DATMOD_M.VST", _String2=".") returned 1 [0211.651] wcscmp (_String1="DATMOD_M.VST", _String2="..") returned 1 [0211.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e120e8 [0211.651] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.651] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.651] wcscat (in: _Dest=0x3e120e8, _Source="DATMOD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" [0212.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0212.130] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a79200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa49c7e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28a79200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_U.VST", cAlternateFileName="")) returned 1 [0212.130] wcscmp (_String1="DATMOD_U.VST", _String2=".") returned 1 [0212.130] wcscmp (_String1="DATMOD_U.VST", _String2="..") returned 1 [0212.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11468 [0212.130] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.130] wcscat (in: _Dest=0x3e11468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.130] wcscat (in: _Dest=0x3e11468, _Source="DATMOD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" [0212.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0212.131] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b09ec00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa49edfd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b09ec00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_M.VST", cAlternateFileName="")) returned 1 [0212.131] wcscmp (_String1="DBMODL_M.VST", _String2=".") returned 1 [0212.131] wcscmp (_String1="DBMODL_M.VST", _String2="..") returned 1 [0212.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11328 [0212.131] wcscpy (in: _Dest=0x3e11328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.131] wcscat (in: _Dest=0x3e11328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.131] wcscat (in: _Dest=0x3e11328, _Source="DBMODL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" [0212.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2798 [0212.132] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9d7300, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e9d7300, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_U.VST", cAlternateFileName="")) returned 1 [0212.132] wcscmp (_String1="DBMODL_U.VST", _String2=".") returned 1 [0212.132] wcscmp (_String1="DBMODL_U.VST", _String2="..") returned 1 [0212.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12228 [0212.133] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.133] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.133] wcscat (in: _Dest=0x3e12228, _Source="DBMODL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" [0212.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b98 [0212.133] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532f0900, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4a603f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x532f0900, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_M.VSS", cAlternateFileName="")) returned 1 [0212.133] wcscmp (_String1="DGICON_M.VSS", _String2=".") returned 1 [0212.133] wcscmp (_String1="DGICON_M.VSS", _String2="..") returned 1 [0212.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12408 [0212.134] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.134] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.134] wcscat (in: _Dest=0x3e12408, _Source="DGICON_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" [0212.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d28 [0212.134] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f3bd00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4aac6b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x57f3bd00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_U.VSS", cAlternateFileName="")) returned 1 [0212.135] wcscmp (_String1="DGICON_U.VSS", _String2=".") returned 1 [0212.135] wcscmp (_String1="DGICON_U.VSS", _String2="..") returned 1 [0212.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e116e8 [0212.135] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.135] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.135] wcscat (in: _Dest=0x3e116e8, _Source="DGICON_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" [0212.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d30 [0212.136] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67730600, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4aac6b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67730600, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMARC_U.VSS", cAlternateFileName="")) returned 1 [0212.136] wcscmp (_String1="DIMARC_U.VSS", _String2=".") returned 1 [0212.136] wcscmp (_String1="DIMARC_U.VSS", _String2="..") returned 1 [0212.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11a08 [0212.136] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.136] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.136] wcscat (in: _Dest=0x3e11a08, _Source="DIMARC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" [0212.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0212.137] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78237c00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4aac6b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78237c00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_M.VSS", cAlternateFileName="")) returned 1 [0212.137] wcscmp (_String1="DIMENG_M.VSS", _String2=".") returned 1 [0212.137] wcscmp (_String1="DIMENG_M.VSS", _String2="..") returned 1 [0212.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11788 [0212.137] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.137] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.137] wcscat (in: _Dest=0x3e11788, _Source="DIMENG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" [0212.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0212.138] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a2c500, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87a2c500, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x2d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_U.VSS", cAlternateFileName="")) returned 1 [0212.138] wcscmp (_String1="DIMENG_U.VSS", _String2=".") returned 1 [0212.138] wcscmp (_String1="DIMENG_U.VSS", _String2="..") returned 1 [0212.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11968 [0212.138] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.138] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.138] wcscat (in: _Dest=0x3e11968, _Source="DIMENG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" [0212.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0212.139] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d98a600, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8d98a600, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_M.VSS", cAlternateFileName="")) returned 1 [0212.139] wcscmp (_String1="DRAWTL_M.VSS", _String2=".") returned 1 [0212.139] wcscmp (_String1="DRAWTL_M.VSS", _String2="..") returned 1 [0212.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11d28 [0212.139] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.139] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.139] wcscat (in: _Dest=0x3e11d28, _Source="DRAWTL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" [0212.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0212.140] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f0e100, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95f0e100, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_U.VSS", cAlternateFileName="")) returned 1 [0212.140] wcscmp (_String1="DRAWTL_U.VSS", _String2=".") returned 1 [0212.140] wcscmp (_String1="DRAWTL_U.VSS", _String2="..") returned 1 [0212.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11148 [0212.140] wcscpy (in: _Dest=0x3e11148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.140] wcscat (in: _Dest=0x3e11148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.140] wcscat (in: _Dest=0x3e11148, _Source="DRAWTL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" [0212.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0212.141] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98533b00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98533b00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VSS", cAlternateFileName="")) returned 1 [0212.141] wcscmp (_String1="DRILLD_M.VSS", _String2=".") returned 1 [0212.141] wcscmp (_String1="DRILLD_M.VSS", _String2="..") returned 1 [0212.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e10a68 [0212.141] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.141] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.142] wcscat (in: _Dest=0x3e10a68, _Source="DRILLD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" [0212.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0212.142] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33622700, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x33622700, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VST", cAlternateFileName="")) returned 1 [0212.143] wcscmp (_String1="DRILLD_M.VST", _String2=".") returned 1 [0212.143] wcscmp (_String1="DRILLD_M.VST", _String2="..") returned 1 [0212.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e111e8 [0212.143] wcscpy (in: _Dest=0x3e111e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.143] wcscat (in: _Dest=0x3e111e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.143] wcscat (in: _Dest=0x3e111e8, _Source="DRILLD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" [0212.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e111e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b90 [0212.144] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab59500, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ab59500, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VSS", cAlternateFileName="")) returned 1 [0212.144] wcscmp (_String1="DRILLD_U.VSS", _String2=".") returned 1 [0212.144] wcscmp (_String1="DRILLD_U.VSS", _String2="..") returned 1 [0212.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e10608 [0212.144] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.144] wcscat (in: _Dest=0x3e10608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.144] wcscat (in: _Dest=0x3e10608, _Source="DRILLD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" [0212.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0212.145] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3826db00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4af8970, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3826db00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VST", cAlternateFileName="")) returned 1 [0212.145] wcscmp (_String1="DRILLD_U.VST", _String2=".") returned 1 [0212.145] wcscmp (_String1="DRILLD_U.VST", _String2="..") returned 1 [0212.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11fa8 [0212.145] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.145] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.146] wcscat (in: _Dest=0x3e11fa8, _Source="DRILLD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" [0212.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0212.147] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac973800, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4af8970, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xac973800, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VSS", cAlternateFileName="")) returned 1 [0212.147] wcscmp (_String1="DTLNET_M.VSS", _String2=".") returned 1 [0212.147] wcscmp (_String1="DTLNET_M.VSS", _String2="..") returned 1 [0212.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bdf8 [0212.147] wcscpy (in: _Dest=0x819bdf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.147] wcscat (in: _Dest=0x819bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.147] wcscat (in: _Dest=0x819bdf8, _Source="DTLNET_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" [0212.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0212.148] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a087e00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4a087e00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VST", cAlternateFileName="")) returned 1 [0212.148] wcscmp (_String1="DTLNET_M.VST", _String2=".") returned 1 [0212.148] wcscmp (_String1="DTLNET_M.VST", _String2="..") returned 1 [0212.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819adb8 [0212.148] wcscpy (in: _Dest=0x819adb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.148] wcscat (in: _Dest=0x819adb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.149] wcscat (in: _Dest=0x819adb8, _Source="DTLNET_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" [0212.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819adb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0212.150] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd47ae00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd47ae00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x63600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VSS", cAlternateFileName="")) returned 1 [0212.150] wcscmp (_String1="DTLNET_U.VSS", _String2=".") returned 1 [0212.150] wcscmp (_String1="DTLNET_U.VSS", _String2="..") returned 1 [0212.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ad18 [0212.150] wcscpy (in: _Dest=0x819ad18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.150] wcscat (in: _Dest=0x819ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.150] wcscat (in: _Dest=0x819ad18, _Source="DTLNET_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" [0212.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ad18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0212.151] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5391e600, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5391e600, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VST", cAlternateFileName="")) returned 1 [0212.151] wcscmp (_String1="DTLNET_U.VST", _String2=".") returned 1 [0212.151] wcscmp (_String1="DTLNET_U.VST", _String2="..") returned 1 [0212.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a9f8 [0212.151] wcscpy (in: _Dest=0x819a9f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.151] wcscat (in: _Dest=0x819a9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.151] wcscat (in: _Dest=0x819a9f8, _Source="DTLNET_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" [0212.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0212.152] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfaa0800, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbfaa0800, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_M.VSS", cAlternateFileName="")) returned 1 [0212.152] wcscmp (_String1="DVCALL_M.VSS", _String2=".") returned 1 [0212.152] wcscmp (_String1="DVCALL_M.VSS", _String2="..") returned 1 [0212.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a638 [0212.153] wcscpy (in: _Dest=0x819a638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.153] wcscat (in: _Dest=0x819a638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.153] wcscat (in: _Dest=0x819a638, _Source="DVCALL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" [0212.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0212.154] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46ebc00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc46ebc00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x4b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_U.VSS", cAlternateFileName="")) returned 1 [0212.154] wcscmp (_String1="DVCALL_U.VSS", _String2=".") returned 1 [0212.154] wcscmp (_String1="DVCALL_U.VSS", _String2="..") returned 1 [0212.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a598 [0212.154] wcscpy (in: _Dest=0x819a598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.154] wcscat (in: _Dest=0x819a598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.154] wcscat (in: _Dest=0x819a598, _Source="DVCALL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" [0212.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0212.155] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdf5400, ftCreationTime.dwHighDateTime=0x1ca3706, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccdf5400, ftLastWriteTime.dwHighDateTime=0x1ca3706, nFileSizeHigh=0x0, nFileSizeLow=0xf699f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_M.VTX", cAlternateFileName="")) returned 1 [0212.155] wcscmp (_String1="DWGCNV_M.VTX", _String2=".") returned 1 [0212.155] wcscmp (_String1="DWGCNV_M.VTX", _String2="..") returned 1 [0212.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ab38 [0212.155] wcscpy (in: _Dest=0x819ab38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.155] wcscat (in: _Dest=0x819ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.155] wcscat (in: _Dest=0x819ab38, _Source="DWGCNV_M.VTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" [0212.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0212.157] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdf5400, ftCreationTime.dwHighDateTime=0x1ca3706, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccdf5400, ftLastWriteTime.dwHighDateTime=0x1ca3706, nFileSizeHigh=0x0, nFileSizeLow=0xef20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_U.VTX", cAlternateFileName="")) returned 1 [0212.157] wcscmp (_String1="DWGCNV_U.VTX", _String2=".") returned 1 [0212.157] wcscmp (_String1="DWGCNV_U.VTX", _String2="..") returned 1 [0212.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819abd8 [0212.157] wcscpy (in: _Dest=0x819abd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.157] wcscat (in: _Dest=0x819abd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.157] wcscat (in: _Dest=0x819abd8, _Source="DWGCNV_U.VTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" [0212.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819abd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0212.158] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e3e600, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9e3e600, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x5d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VSS", cAlternateFileName="")) returned 1 [0212.158] wcscmp (_String1="EECHIP_M.VSS", _String2=".") returned 1 [0212.158] wcscmp (_String1="EECHIP_M.VSS", _String2="..") returned 1 [0212.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bf38 [0212.158] wcscpy (in: _Dest=0x819bf38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.158] wcscat (in: _Dest=0x819bf38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.158] wcscat (in: _Dest=0x819bf38, _Source="EECHIP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" [0212.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0212.159] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58569a00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58569a00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VST", cAlternateFileName="")) returned 1 [0212.160] wcscmp (_String1="EECHIP_M.VST", _String2=".") returned 1 [0212.160] wcscmp (_String1="EECHIP_M.VST", _String2="..") returned 1 [0212.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b038 [0212.160] wcscpy (in: _Dest=0x819b038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.160] wcscat (in: _Dest=0x819b038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.160] wcscat (in: _Dest=0x819b038, _Source="EECHIP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" [0212.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0212.161] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bb6a00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf1bb6a00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VSS", cAlternateFileName="")) returned 1 [0212.161] wcscmp (_String1="EECHIP_U.VSS", _String2=".") returned 1 [0212.161] wcscmp (_String1="EECHIP_U.VSS", _String2="..") returned 1 [0212.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bcb8 [0212.161] wcscpy (in: _Dest=0x819bcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.161] wcscat (in: _Dest=0x819bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.161] wcscat (in: _Dest=0x819bcb8, _Source="EECHIP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" [0212.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0212.163] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e4c7b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e4c7b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VST", cAlternateFileName="")) returned 1 [0212.163] wcscmp (_String1="EECHIP_U.VST", _String2=".") returned 1 [0212.163] wcscmp (_String1="EECHIP_U.VST", _String2="..") returned 1 [0212.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a458 [0212.163] wcscpy (in: _Dest=0x819a458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.163] wcscat (in: _Dest=0x819a458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.163] wcscat (in: _Dest=0x819a458, _Source="EECHIP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" [0212.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0212.164] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13a500, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfa13a500, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x26000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_M.VSS", cAlternateFileName="")) returned 1 [0212.164] wcscmp (_String1="EECOMP_M.VSS", _String2=".") returned 1 [0212.164] wcscmp (_String1="EECOMP_M.VSS", _String2="..") returned 1 [0212.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c2f8 [0212.164] wcscpy (in: _Dest=0x819c2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.164] wcscat (in: _Dest=0x819c2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.164] wcscat (in: _Dest=0x819c2f8, _Source="EECOMP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" [0212.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0212.165] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d0d00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39d0d00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x24600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_U.VSS", cAlternateFileName="")) returned 1 [0212.252] wcscmp (_String1="EECOMP_U.VSS", _String2=".") returned 1 [0212.252] wcscmp (_String1="EECOMP_U.VSS", _String2="..") returned 1 [0212.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a778 [0212.252] wcscpy (in: _Dest=0x819a778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.252] wcscat (in: _Dest=0x819a778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.252] wcscat (in: _Dest=0x819a778, _Source="EECOMP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" [0212.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0212.760] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11eb2900, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x11eb2900, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_M.VSS", cAlternateFileName="")) returned 1 [0212.760] wcscmp (_String1="EEFUND_M.VSS", _String2=".") returned 1 [0212.761] wcscmp (_String1="EEFUND_M.VSS", _String2="..") returned 1 [0212.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ac78 [0212.761] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.761] wcscat (in: _Dest=0x819ac78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.761] wcscat (in: _Dest=0x819ac78, _Source="EEFUND_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" [0212.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d4 [0212.762] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20394500, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x20394500, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_U.VSS", cAlternateFileName="")) returned 1 [0212.762] wcscmp (_String1="EEFUND_U.VSS", _String2=".") returned 1 [0212.762] wcscmp (_String1="EEFUND_U.VSS", _String2="..") returned 1 [0212.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c258 [0212.762] wcscpy (in: _Dest=0x819c258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.762] wcscat (in: _Dest=0x819c258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.762] wcscat (in: _Dest=0x819c258, _Source="EEFUND_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" [0212.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0212.763] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64425c00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64425c00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_M.VST", cAlternateFileName="")) returned 1 [0212.763] wcscmp (_String1="EEGENR_M.VST", _String2=".") returned 1 [0212.763] wcscmp (_String1="EEGENR_M.VST", _String2="..") returned 1 [0212.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b8f8 [0212.763] wcscpy (in: _Dest=0x819b8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.763] wcscat (in: _Dest=0x819b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.763] wcscat (in: _Dest=0x819b8f8, _Source="EEGENR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" [0212.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0212.764] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a383d00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6a383d00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_U.VST", cAlternateFileName="")) returned 1 [0212.764] wcscmp (_String1="EEGENR_U.VST", _String2=".") returned 1 [0212.764] wcscmp (_String1="EEGENR_U.VST", _String2="..") returned 1 [0212.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b858 [0212.764] wcscpy (in: _Dest=0x819b858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.764] wcscat (in: _Dest=0x819b858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.764] wcscat (in: _Dest=0x819b858, _Source="EEGENR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" [0212.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0212.765] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715f4b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x715f4b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_M.VST", cAlternateFileName="")) returned 1 [0212.765] wcscmp (_String1="EEICS_M.VST", _String2=".") returned 1 [0212.765] wcscmp (_String1="EEICS_M.VST", _String2="..") returned 1 [0212.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819aa98 [0212.765] wcscpy (in: _Dest=0x819aa98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.765] wcscat (in: _Dest=0x819aa98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.765] wcscat (in: _Dest=0x819aa98, _Source="EEICS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" [0212.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0212.766] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77552c00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77552c00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_U.VST", cAlternateFileName="")) returned 1 [0212.766] wcscmp (_String1="EEICS_U.VST", _String2=".") returned 1 [0212.767] wcscmp (_String1="EEICS_U.VST", _String2="..") returned 1 [0212.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819bc18 [0212.767] wcscpy (in: _Dest=0x819bc18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.767] wcscat (in: _Dest=0x819bc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.767] wcscat (in: _Dest=0x819bc18, _Source="EEICS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" [0212.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0212.768] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fdf900, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x24fdf900, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_M.VSS", cAlternateFileName="")) returned 1 [0212.768] wcscmp (_String1="EEMAIN_M.VSS", _String2=".") returned 1 [0212.768] wcscmp (_String1="EEMAIN_M.VSS", _String2="..") returned 1 [0212.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b7b8 [0212.768] wcscpy (in: _Dest=0x819b7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.768] wcscat (in: _Dest=0x819b7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.768] wcscat (in: _Dest=0x819b7b8, _Source="EEMAIN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" [0212.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0 [0212.769] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c2ad00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x29c2ad00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_U.VSS", cAlternateFileName="")) returned 1 [0212.769] wcscmp (_String1="EEMAIN_U.VSS", _String2=".") returned 1 [0212.769] wcscmp (_String1="EEMAIN_U.VSS", _String2="..") returned 1 [0212.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a958 [0212.769] wcscpy (in: _Dest=0x819a958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.769] wcscat (in: _Dest=0x819a958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.769] wcscat (in: _Dest=0x819a958, _Source="EEMAIN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" [0212.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0212.774] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ae6f00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35ae6f00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_M.VSS", cAlternateFileName="")) returned 1 [0212.775] wcscmp (_String1="EEMAPS_M.VSS", _String2=".") returned 1 [0212.775] wcscmp (_String1="EEMAPS_M.VSS", _String2="..") returned 1 [0212.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a8b8 [0212.775] wcscpy (in: _Dest=0x819a8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.775] wcscat (in: _Dest=0x819a8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.775] wcscat (in: _Dest=0x819a8b8, _Source="EEMAPS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" [0212.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0212.779] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419a3100, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x419a3100, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x2ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_U.VSS", cAlternateFileName="")) returned 1 [0212.779] wcscmp (_String1="EEMAPS_U.VSS", _String2=".") returned 1 [0212.779] wcscmp (_String1="EEMAPS_U.VSS", _String2="..") returned 1 [0212.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bad8 [0212.779] wcscpy (in: _Dest=0x819bad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.779] wcscat (in: _Dest=0x819bad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.779] wcscat (in: _Dest=0x819bad8, _Source="EEMAPS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" [0212.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0212.780] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47901200, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47901200, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_M.VSS", cAlternateFileName="")) returned 1 [0212.780] wcscmp (_String1="EEMECH_M.VSS", _String2=".") returned 1 [0212.780] wcscmp (_String1="EEMECH_M.VSS", _String2="..") returned 1 [0212.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b5d8 [0212.780] wcscpy (in: _Dest=0x819b5d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.780] wcscat (in: _Dest=0x819b5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.780] wcscat (in: _Dest=0x819b5d8, _Source="EEMECH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" [0212.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0212.781] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c54c600, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4c54c600, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x14800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_U.VSS", cAlternateFileName="")) returned 1 [0212.781] wcscmp (_String1="EEMECH_U.VSS", _String2=".") returned 1 [0212.781] wcscmp (_String1="EEMECH_U.VSS", _String2="..") returned 1 [0212.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b218 [0212.781] wcscpy (in: _Dest=0x819b218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.781] wcscat (in: _Dest=0x819b218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.781] wcscat (in: _Dest=0x819b218, _Source="EEMECH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" [0212.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0212.782] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54ad0100, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bb7050, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54ad0100, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_M.VSS", cAlternateFileName="")) returned 1 [0212.782] wcscmp (_String1="EEPATH_M.VSS", _String2=".") returned 1 [0212.782] wcscmp (_String1="EEPATH_M.VSS", _String2="..") returned 1 [0212.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819aef8 [0212.783] wcscpy (in: _Dest=0x819aef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.783] wcscat (in: _Dest=0x819aef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.783] wcscat (in: _Dest=0x819aef8, _Source="EEPATH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" [0212.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0212.784] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d053c00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5d053c00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_U.VSS", cAlternateFileName="")) returned 1 [0212.784] wcscmp (_String1="EEPATH_U.VSS", _String2=".") returned 1 [0212.784] wcscmp (_String1="EEPATH_U.VSS", _String2="..") returned 1 [0212.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a818 [0212.784] wcscpy (in: _Dest=0x819a818, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.784] wcscat (in: _Dest=0x819a818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.784] wcscat (in: _Dest=0x819a818, _Source="EEPATH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" [0212.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0212.785] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62fb1d00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62fb1d00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_M.VSS", cAlternateFileName="")) returned 1 [0212.785] wcscmp (_String1="EEQUAL_M.VSS", _String2=".") returned 1 [0212.785] wcscmp (_String1="EEQUAL_M.VSS", _String2="..") returned 1 [0212.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ae58 [0212.785] wcscpy (in: _Dest=0x819ae58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.785] wcscat (in: _Dest=0x819ae58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.785] wcscat (in: _Dest=0x819ae58, _Source="EEQUAL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" [0212.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ae58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0212.786] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f0fe00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68f0fe00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_U.VSS", cAlternateFileName="")) returned 1 [0212.786] wcscmp (_String1="EEQUAL_U.VSS", _String2=".") returned 1 [0212.786] wcscmp (_String1="EEQUAL_U.VSS", _String2="..") returned 1 [0212.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a6d8 [0212.786] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.786] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.786] wcscat (in: _Dest=0x819a6d8, _Source="EEQUAL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" [0212.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0212.787] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ab9300, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73ab9300, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_M.VSS", cAlternateFileName="")) returned 1 [0212.787] wcscmp (_String1="EESEMI_M.VSS", _String2=".") returned 1 [0212.787] wcscmp (_String1="EESEMI_M.VSS", _String2="..") returned 1 [0212.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c1b8 [0212.787] wcscpy (in: _Dest=0x819c1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.787] wcscat (in: _Dest=0x819c1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.787] wcscat (in: _Dest=0x819c1b8, _Source="EESEMI_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" [0212.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0212.788] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e662800, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7e662800, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x29a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_U.VSS", cAlternateFileName="")) returned 1 [0212.788] wcscmp (_String1="EESEMI_U.VSS", _String2=".") returned 1 [0212.788] wcscmp (_String1="EESEMI_U.VSS", _String2="..") returned 1 [0212.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c118 [0212.788] wcscpy (in: _Dest=0x819c118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.788] wcscat (in: _Dest=0x819c118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.788] wcscat (in: _Dest=0x819c118, _Source="EESEMI_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" [0212.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0212.789] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9178f800, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9178f800, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x4b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_M.VSS", cAlternateFileName="")) returned 1 [0212.789] wcscmp (_String1="EESWCH_M.VSS", _String2=".") returned 1 [0212.789] wcscmp (_String1="EESWCH_M.VSS", _String2="..") returned 1 [0212.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b998 [0212.789] wcscpy (in: _Dest=0x819b998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.790] wcscat (in: _Dest=0x819b998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.790] wcscat (in: _Dest=0x819b998, _Source="EESWCH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" [0212.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0212.790] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa48bc800, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa48bc800, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x48600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_U.VSS", cAlternateFileName="")) returned 1 [0212.790] wcscmp (_String1="EESWCH_U.VSS", _String2=".") returned 1 [0212.791] wcscmp (_String1="EESWCH_U.VSS", _String2="..") returned 1 [0212.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ba38 [0212.791] wcscpy (in: _Dest=0x819ba38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.791] wcscat (in: _Dest=0x819ba38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.791] wcscat (in: _Dest=0x819ba38, _Source="EESWCH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" [0212.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ba38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0212.792] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fad6700, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7fad6700, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_M.VST", cAlternateFileName="")) returned 1 [0212.792] wcscmp (_String1="EESYS_M.VST", _String2=".") returned 1 [0212.792] wcscmp (_String1="EESYS_M.VST", _String2="..") returned 1 [0212.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b0d8 [0212.792] wcscpy (in: _Dest=0x819b0d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.792] wcscat (in: _Dest=0x819b0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.792] wcscat (in: _Dest=0x819b0d8, _Source="EESYS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" [0212.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0212.793] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8805a200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8805a200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_U.VST", cAlternateFileName="")) returned 1 [0212.793] wcscmp (_String1="EESYS_U.VST", _String2=".") returned 1 [0212.793] wcscmp (_String1="EESYS_U.VST", _String2="..") returned 1 [0212.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819bd58 [0212.793] wcscpy (in: _Dest=0x819bd58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.793] wcscat (in: _Dest=0x819bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.793] wcscat (in: _Dest=0x819bd58, _Source="EESYS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" [0212.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0212.794] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb2d600, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xabb2d600, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_M.VSS", cAlternateFileName="")) returned 1 [0212.794] wcscmp (_String1="EETCOM_M.VSS", _String2=".") returned 1 [0212.794] wcscmp (_String1="EETCOM_M.VSS", _String2="..") returned 1 [0212.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b538 [0212.794] wcscpy (in: _Dest=0x819b538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.794] wcscat (in: _Dest=0x819b538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.794] wcscat (in: _Dest=0x819b538, _Source="EETCOM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" [0212.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0212.795] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d9e400, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2d9e400, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_U.VSS", cAlternateFileName="")) returned 1 [0212.795] wcscmp (_String1="EETCOM_U.VSS", _String2=".") returned 1 [0212.795] wcscmp (_String1="EETCOM_U.VSS", _String2="..") returned 1 [0212.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c078 [0212.795] wcscpy (in: _Dest=0x819c078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.795] wcscat (in: _Dest=0x819c078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.795] wcscat (in: _Dest=0x819c078, _Source="EETCOM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" [0212.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0212.796] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc634c00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbc634c00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_M.VSS", cAlternateFileName="")) returned 1 [0212.796] wcscmp (_String1="EETERM_M.VSS", _String2=".") returned 1 [0212.796] wcscmp (_String1="EETERM_M.VSS", _String2="..") returned 1 [0212.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b358 [0212.796] wcscpy (in: _Dest=0x819b358, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.796] wcscat (in: _Dest=0x819b358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.796] wcscat (in: _Dest=0x819b358, _Source="EETERM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" [0212.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0212.797] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc71de100, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc71de100, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_U.VSS", cAlternateFileName="")) returned 1 [0212.797] wcscmp (_String1="EETERM_U.VSS", _String2=".") returned 1 [0212.797] wcscmp (_String1="EETERM_U.VSS", _String2="..") returned 1 [0212.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bfd8 [0212.797] wcscpy (in: _Dest=0x819bfd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.797] wcscat (in: _Dest=0x819bfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.798] wcscat (in: _Dest=0x819bfd8, _Source="EETERM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" [0212.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bfd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0212.799] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd13c200, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd13c200, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_M.VSS", cAlternateFileName="")) returned 1 [0212.799] wcscmp (_String1="EETRAN_M.VSS", _String2=".") returned 1 [0212.799] wcscmp (_String1="EETRAN_M.VSS", _String2="..") returned 1 [0212.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bb78 [0212.799] wcscpy (in: _Dest=0x819bb78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.799] wcscat (in: _Dest=0x819bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.799] wcscat (in: _Dest=0x819bb78, _Source="EETRAN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" [0212.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0212.800] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd309a300, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd309a300, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_U.VSS", cAlternateFileName="")) returned 1 [0212.800] wcscmp (_String1="EETRAN_U.VSS", _String2=".") returned 1 [0212.800] wcscmp (_String1="EETRAN_U.VSS", _String2="..") returned 1 [0212.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b718 [0212.800] wcscpy (in: _Dest=0x819b718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.800] wcscat (in: _Dest=0x819b718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.800] wcscat (in: _Dest=0x819b718, _Source="EETRAN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" [0212.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0212.801] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc930b00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc930b00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_M.VSS", cAlternateFileName="")) returned 1 [0212.801] wcscmp (_String1="EEVHF_M.VSS", _String2=".") returned 1 [0212.801] wcscmp (_String1="EEVHF_M.VSS", _String2="..") returned 1 [0212.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a4f8 [0212.801] wcscpy (in: _Dest=0x819a4f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.801] wcscat (in: _Dest=0x819a4f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.801] wcscat (in: _Dest=0x819a4f8, _Source="EEVHF_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" [0212.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a4f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0212.802] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61c7300, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe61c7300, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x27c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_U.VSS", cAlternateFileName="")) returned 1 [0212.802] wcscmp (_String1="EEVHF_U.VSS", _String2=".") returned 1 [0212.802] wcscmp (_String1="EEVHF_U.VSS", _String2="..") returned 1 [0212.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b678 [0212.802] wcscpy (in: _Dest=0x819b678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.802] wcscat (in: _Dest=0x819b678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.802] wcscat (in: _Dest=0x819b678, _Source="EEVHF_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" [0212.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0212.803] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2083500, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2083500, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x25c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VSS", cAlternateFileName="")) returned 1 [0212.803] wcscmp (_String1="ELETEL_M.VSS", _String2=".") returned 1 [0212.803] wcscmp (_String1="ELETEL_M.VSS", _String2="..") returned 1 [0212.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b498 [0212.803] wcscpy (in: _Dest=0x819b498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.804] wcscat (in: _Dest=0x819b498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.804] wcscat (in: _Dest=0x819b498, _Source="ELETEL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" [0212.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0212.934] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905ddd00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x905ddd00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VST", cAlternateFileName="")) returned 1 [0212.934] wcscmp (_String1="ELETEL_M.VST", _String2=".") returned 1 [0212.934] wcscmp (_String1="ELETEL_M.VST", _String2="..") returned 1 [0212.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b8f8 [0212.934] wcscpy (in: _Dest=0x819b8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.934] wcscat (in: _Dest=0x819b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.934] wcscat (in: _Dest=0x819b8f8, _Source="ELETEL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" [0212.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0212.935] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf3f700, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfdf3f700, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x27a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VSS", cAlternateFileName="")) returned 1 [0212.935] wcscmp (_String1="ELETEL_U.VSS", _String2=".") returned 1 [0212.935] wcscmp (_String1="ELETEL_U.VSS", _String2="..") returned 1 [0212.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c258 [0212.935] wcscpy (in: _Dest=0x819c258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.935] wcscat (in: _Dest=0x819c258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.935] wcscat (in: _Dest=0x819c258, _Source="ELETEL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" [0212.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0212.936] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e74500, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99e74500, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VST", cAlternateFileName="")) returned 1 [0213.541] wcscmp (_String1="ELETEL_U.VST", _String2=".") returned 1 [0213.541] wcscmp (_String1="ELETEL_U.VST", _String2="..") returned 1 [0213.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ac78 [0213.541] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.541] wcscat (in: _Dest=0x819ac78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.541] wcscat (in: _Dest=0x819ac78, _Source="ELETEL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" [0213.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0213.814] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dfb900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9dfb900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_M.VSS", cAlternateFileName="")) returned 1 [0213.814] wcscmp (_String1="EMBELL_M.VSS", _String2=".") returned 1 [0213.814] wcscmp (_String1="EMBELL_M.VSS", _String2="..") returned 1 [0213.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a778 [0213.814] wcscpy (in: _Dest=0x819a778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.814] wcscat (in: _Dest=0x819a778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.814] wcscat (in: _Dest=0x819a778, _Source="EMBELL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" [0213.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0213.816] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15cb7b00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15cb7b00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x54c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_U.VSS", cAlternateFileName="")) returned 1 [0213.816] wcscmp (_String1="EMBELL_U.VSS", _String2=".") returned 1 [0213.816] wcscmp (_String1="EMBELL_U.VSS", _String2="..") returned 1 [0213.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c2f8 [0213.816] wcscpy (in: _Dest=0x819c2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.816] wcscat (in: _Dest=0x819c2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.816] wcscat (in: _Dest=0x819c2f8, _Source="EMBELL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" [0213.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0213.817] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b40a500, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b40a500, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x6d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VSS", cAlternateFileName="")) returned 1 [0213.817] wcscmp (_String1="ENTAPP_M.VSS", _String2=".") returned 1 [0213.817] wcscmp (_String1="ENTAPP_M.VSS", _String2="..") returned 1 [0213.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b2b8 [0213.817] wcscpy (in: _Dest=0x819b2b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.817] wcscat (in: _Dest=0x819b2b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.817] wcscat (in: _Dest=0x819b2b8, _Source="ENTAPP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" [0213.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0213.818] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d7acc00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9d7acc00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VST", cAlternateFileName="")) returned 1 [0213.818] wcscmp (_String1="ENTAPP_M.VST", _String2=".") returned 1 [0213.819] wcscmp (_String1="ENTAPP_M.VST", _String2="..") returned 1 [0213.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819af98 [0213.819] wcscpy (in: _Dest=0x819af98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.819] wcscat (in: _Dest=0x819af98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.819] wcscat (in: _Dest=0x819af98, _Source="ENTAPP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" [0213.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819af98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0213.820] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f84a200, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f84a200, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x69c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VSS", cAlternateFileName="")) returned 1 [0213.820] wcscmp (_String1="ENTAPP_U.VSS", _String2=".") returned 1 [0213.820] wcscmp (_String1="ENTAPP_U.VSS", _String2="..") returned 1 [0213.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819be98 [0213.820] wcscpy (in: _Dest=0x819be98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.820] wcscat (in: _Dest=0x819be98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.820] wcscat (in: _Dest=0x819be98, _Source="ENTAPP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" [0213.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819be98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0213.822] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fdd2600, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9fdd2600, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VST", cAlternateFileName="")) returned 1 [0213.822] wcscmp (_String1="ENTAPP_U.VST", _String2=".") returned 1 [0213.822] wcscmp (_String1="ENTAPP_U.VST", _String2="..") returned 1 [0213.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b178 [0213.822] wcscpy (in: _Dest=0x819b178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.822] wcscat (in: _Dest=0x819b178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.822] wcscat (in: _Dest=0x819b178, _Source="ENTAPP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" [0213.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0213.823] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43182900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x43182900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_M.VSS", cAlternateFileName="")) returned 1 [0213.823] wcscmp (_String1="ENTITY_M.VSS", _String2=".") returned 1 [0213.823] wcscmp (_String1="ENTITY_M.VSS", _String2="..") returned 1 [0213.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c398 [0213.823] wcscpy (in: _Dest=0x819c398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.823] wcscat (in: _Dest=0x819c398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.823] wcscat (in: _Dest=0x819c398, _Source="ENTITY_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" [0213.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b54 [0213.824] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46abb000, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46abb000, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_U.VSS", cAlternateFileName="")) returned 1 [0213.824] wcscmp (_String1="ENTITY_U.VSS", _String2=".") returned 1 [0213.824] wcscmp (_String1="ENTITY_U.VSS", _String2="..") returned 1 [0213.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7558 [0213.824] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.825] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.825] wcscat (in: _Dest=0x2c7558, _Source="ENTITY_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" [0213.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0213.825] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x490e0a00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x490e0a00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VSS", cAlternateFileName="")) returned 1 [0213.826] wcscmp (_String1="EPC_M.VSS", _String2=".") returned 1 [0213.826] wcscmp (_String1="EPC_M.VSS", _String2="..") returned 1 [0213.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d9fc8 [0213.826] wcscpy (in: _Dest=0x81d9fc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.826] wcscat (in: _Dest=0x81d9fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.826] wcscat (in: _Dest=0x81d9fc8, _Source="EPC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" [0213.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0213.827] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa370ad00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa370ad00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VST", cAlternateFileName="")) returned 1 [0213.827] wcscmp (_String1="EPC_M.VST", _String2=".") returned 1 [0213.827] wcscmp (_String1="EPC_M.VST", _String2="..") returned 1 [0213.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d9f30 [0213.827] wcscpy (in: _Dest=0x81d9f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.827] wcscat (in: _Dest=0x81d9f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.827] wcscat (in: _Dest=0x81d9f30, _Source="EPC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" [0213.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x279c [0213.828] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca19100, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca19100, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VSS", cAlternateFileName="")) returned 1 [0213.828] wcscmp (_String1="EPC_U.VSS", _String2=".") returned 1 [0213.828] wcscmp (_String1="EPC_U.VSS", _String2="..") returned 1 [0213.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d9e98 [0213.828] wcscpy (in: _Dest=0x81d9e98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.828] wcscat (in: _Dest=0x81d9e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.828] wcscat (in: _Dest=0x81d9e98, _Source="EPC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" [0213.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0213.829] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d30700, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d30700, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VST", cAlternateFileName="")) returned 1 [0213.829] wcscmp (_String1="EPC_U.VST", _String2=".") returned 1 [0213.829] wcscmp (_String1="EPC_U.VST", _String2="..") returned 1 [0213.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81da060 [0213.830] wcscpy (in: _Dest=0x81da060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.830] wcscat (in: _Dest=0x81da060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.830] wcscat (in: _Dest=0x81da060, _Source="EPC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" [0213.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0213.831] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e833400, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e833400, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_M.VSS", cAlternateFileName="")) returned 1 [0213.831] wcscmp (_String1="EXCOBJ_M.VSS", _String2=".") returned 1 [0213.831] wcscmp (_String1="EXCOBJ_M.VSS", _String2="..") returned 1 [0213.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c74b8 [0213.831] wcscpy (in: _Dest=0x2c74b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.831] wcscat (in: _Dest=0x2c74b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.831] wcscat (in: _Dest=0x2c74b8, _Source="EXCOBJ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" [0213.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c74b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0213.832] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33aa00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6f33aa00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_U.VSS", cAlternateFileName="")) returned 1 [0213.832] wcscmp (_String1="EXCOBJ_U.VSS", _String2=".") returned 1 [0213.832] wcscmp (_String1="EXCOBJ_U.VSS", _String2="..") returned 1 [0213.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c75f8 [0213.832] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.832] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.832] wcscat (in: _Dest=0x2c75f8, _Source="EXCOBJ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" [0213.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0213.834] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82467a00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x82467a00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x42800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_M.VSS", cAlternateFileName="")) returned 1 [0213.834] wcscmp (_String1="FASTN1_M.VSS", _String2=".") returned 1 [0213.834] wcscmp (_String1="FASTN1_M.VSS", _String2="..") returned 1 [0213.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7238 [0213.834] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.834] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.834] wcscat (in: _Dest=0x2c7238, _Source="FASTN1_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" [0213.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0213.835] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94281d00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x94281d00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x3ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_U.VSS", cAlternateFileName="")) returned 1 [0213.835] wcscmp (_String1="FASTN1_U.VSS", _String2=".") returned 1 [0213.835] wcscmp (_String1="FASTN1_U.VSS", _String2="..") returned 1 [0213.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7738 [0213.835] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.835] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.835] wcscat (in: _Dest=0x2c7738, _Source="FASTN1_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" [0213.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0213.836] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2763900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa2763900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_M.VSS", cAlternateFileName="")) returned 1 [0213.836] wcscmp (_String1="FASTN2_M.VSS", _String2=".") returned 1 [0213.837] wcscmp (_String1="FASTN2_M.VSS", _String2="..") returned 1 [0213.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7198 [0213.837] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.837] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.837] wcscat (in: _Dest=0x2c7198, _Source="FASTN2_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" [0213.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b7c [0213.838] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf932800, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaf932800, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_U.VSS", cAlternateFileName="")) returned 1 [0213.838] wcscmp (_String1="FASTN2_U.VSS", _String2=".") returned 1 [0213.838] wcscmp (_String1="FASTN2_U.VSS", _String2="..") returned 1 [0213.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c72d8 [0213.838] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.838] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.838] wcscat (in: _Dest=0x2c72d8, _Source="FASTN2_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" [0213.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0213.839] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f58200, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1f58200, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VSS", cAlternateFileName="")) returned 1 [0213.839] wcscmp (_String1="FAULT_M.VSS", _String2=".") returned 1 [0213.839] wcscmp (_String1="FAULT_M.VSS", _String2="..") returned 1 [0213.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7698 [0213.839] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.839] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.839] wcscat (in: _Dest=0x2c7698, _Source="FAULT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" [0213.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28fc [0213.840] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8356100, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa8356100, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VST", cAlternateFileName="")) returned 1 [0213.840] wcscmp (_String1="FAULT_M.VST", _String2=".") returned 1 [0213.840] wcscmp (_String1="FAULT_M.VST", _String2="..") returned 1 [0213.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7378 [0213.841] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.841] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.841] wcscat (in: _Dest=0x2c7378, _Source="FAULT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" [0213.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0213.842] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5890900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5890900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VSS", cAlternateFileName="")) returned 1 [0213.842] wcscmp (_String1="FAULT_U.VSS", _String2=".") returned 1 [0213.842] wcscmp (_String1="FAULT_U.VSS", _String2="..") returned 1 [0213.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c70f8 [0213.842] wcscpy (in: _Dest=0x2c70f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.842] wcscat (in: _Dest=0x2c70f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.842] wcscat (in: _Dest=0x2c70f8, _Source="FAULT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" [0213.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c70f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f4 [0213.843] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa97bb00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaa97bb00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VST", cAlternateFileName="")) returned 1 [0213.843] wcscmp (_String1="FAULT_U.VST", _String2=".") returned 1 [0213.843] wcscmp (_String1="FAULT_U.VST", _String2="..") returned 1 [0213.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e120e8 [0213.843] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.843] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.843] wcscat (in: _Dest=0x3e120e8, _Source="FAULT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" [0213.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0213.844] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d72500, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc3d72500, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_M.VSS", cAlternateFileName="")) returned 1 [0213.844] wcscmp (_String1="FLOSHP_M.VSS", _String2=".") returned 1 [0213.844] wcscmp (_String1="FLOSHP_M.VSS", _String2="..") returned 1 [0213.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e116e8 [0213.844] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.844] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.844] wcscat (in: _Dest=0x3e116e8, _Source="FLOSHP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" [0213.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0213.868] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2254100, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2254100, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_U.VSS", cAlternateFileName="")) returned 1 [0213.868] wcscmp (_String1="FLOSHP_U.VSS", _String2=".") returned 1 [0213.868] wcscmp (_String1="FLOSHP_U.VSS", _String2="..") returned 1 [0213.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db648 [0213.868] wcscpy (in: _Dest=0x81db648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.868] wcscat (in: _Dest=0x81db648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.868] wcscat (in: _Dest=0x81db648, _Source="FLOSHP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" [0213.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0213.870] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5525000, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5525000, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_M.VST", cAlternateFileName="")) returned 1 [0213.870] wcscmp (_String1="FLRPLN_M.VST", _String2=".") returned 1 [0213.870] wcscmp (_String1="FLRPLN_M.VST", _String2="..") returned 1 [0213.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db6e8 [0213.870] wcscpy (in: _Dest=0x81db6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.870] wcscat (in: _Dest=0x81db6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.870] wcscat (in: _Dest=0x81db6e8, _Source="FLRPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" [0213.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0214.261] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc13e1200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc13e1200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_U.VST", cAlternateFileName="")) returned 1 [0214.261] wcscmp (_String1="FLRPLN_U.VST", _String2=".") returned 1 [0214.261] wcscmp (_String1="FLRPLN_U.VST", _String2="..") returned 1 [0214.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db788 [0214.262] wcscpy (in: _Dest=0x81db788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0214.262] wcscat (in: _Dest=0x81db788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0214.262] wcscat (in: _Dest=0x81db788, _Source="FLRPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" [0215.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0215.357] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9964d00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc9964d00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_M.VST", cAlternateFileName="")) returned 1 [0215.357] wcscmp (_String1="FPALL_M.VST", _String2=".") returned 1 [0215.358] wcscmp (_String1="FPALL_M.VST", _String2="..") returned 1 [0215.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e11788 [0215.358] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.358] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.358] wcscat (in: _Dest=0x3e11788, _Source="FPALL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" [0215.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0215.359] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bd5b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0bd5b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_U.VST", cAlternateFileName="")) returned 1 [0215.359] wcscmp (_String1="FPALL_U.VST", _String2=".") returned 1 [0215.359] wcscmp (_String1="FPALL_U.VST", _String2="..") returned 1 [0215.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81db828 [0215.359] wcscpy (in: _Dest=0x81db828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.359] wcscat (in: _Dest=0x81db828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.359] wcscat (in: _Dest=0x81db828, _Source="FPALL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" [0215.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0215.360] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a6b00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe79a6b00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_M.VSS", cAlternateFileName="")) returned 1 [0215.360] wcscmp (_String1="FPASSM_M.VSS", _String2=".") returned 1 [0215.360] wcscmp (_String1="FPASSM_M.VSS", _String2="..") returned 1 [0215.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db8c8 [0215.360] wcscpy (in: _Dest=0x81db8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.360] wcscat (in: _Dest=0x81db8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.360] wcscat (in: _Dest=0x81db8c8, _Source="FPASSM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" [0215.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0215.361] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf84ae100, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf84ae100, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x40200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_U.VSS", cAlternateFileName="")) returned 1 [0215.361] wcscmp (_String1="FPASSM_U.VSS", _String2=".") returned 1 [0215.361] wcscmp (_String1="FPASSM_U.VSS", _String2="..") returned 1 [0215.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db968 [0215.362] wcscpy (in: _Dest=0x81db968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.362] wcscat (in: _Dest=0x81db968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.362] wcscat (in: _Dest=0x81db968, _Source="FPASSM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" [0215.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0215.362] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef13800, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xef13800, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x4e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_M.VSS", cAlternateFileName="")) returned 1 [0215.362] wcscmp (_String1="FPEQP_M.VSS", _String2=".") returned 1 [0215.362] wcscmp (_String1="FPEQP_M.VSS", _String2="..") returned 1 [0215.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dba08 [0215.363] wcscpy (in: _Dest=0x81dba08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.363] wcscat (in: _Dest=0x81dba08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.363] wcscat (in: _Dest=0x81dba08, _Source="FPEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" [0215.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dba08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0215.366] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22040800, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22040800, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x45e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_U.VSS", cAlternateFileName="")) returned 1 [0215.366] wcscmp (_String1="FPEQP_U.VSS", _String2=".") returned 1 [0215.366] wcscmp (_String1="FPEQP_U.VSS", _String2="..") returned 1 [0215.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbaa8 [0215.366] wcscpy (in: _Dest=0x81dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.366] wcscat (in: _Dest=0x81dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.366] wcscat (in: _Dest=0x81dbaa8, _Source="FPEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" [0215.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c [0215.367] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e5ab00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x33e5ab00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x3a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_M.VSS", cAlternateFileName="")) returned 1 [0215.367] wcscmp (_String1="FPVALV_M.VSS", _String2=".") returned 1 [0215.367] wcscmp (_String1="FPVALV_M.VSS", _String2="..") returned 1 [0215.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbb48 [0215.367] wcscpy (in: _Dest=0x81dbb48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.367] wcscat (in: _Dest=0x81dbb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.367] wcscat (in: _Dest=0x81dbb48, _Source="FPVALV_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" [0215.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0215.368] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4364f400, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4364f400, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_U.VSS", cAlternateFileName="")) returned 1 [0215.370] wcscmp (_String1="FPVALV_U.VSS", _String2=".") returned 1 [0215.370] wcscmp (_String1="FPVALV_U.VSS", _String2="..") returned 1 [0215.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbbe8 [0215.370] wcscpy (in: _Dest=0x81dbbe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.370] wcscat (in: _Dest=0x81dbbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.370] wcscat (in: _Dest=0x81dbbe8, _Source="FPVALV_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" [0215.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0215.371] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bbd2f00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4bbd2f00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_M.VSS", cAlternateFileName="")) returned 1 [0215.371] wcscmp (_String1="FREEQP_M.VSS", _String2=".") returned 1 [0215.371] wcscmp (_String1="FREEQP_M.VSS", _String2="..") returned 1 [0215.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbc88 [0215.371] wcscpy (in: _Dest=0x81dbc88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.371] wcscat (in: _Dest=0x81dbc88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.371] wcscat (in: _Dest=0x81dbc88, _Source="FREEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" [0215.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0215.372] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e43d00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52e43d00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_U.VSS", cAlternateFileName="")) returned 1 [0215.372] wcscmp (_String1="FREEQP_U.VSS", _String2=".") returned 1 [0215.372] wcscmp (_String1="FREEQP_U.VSS", _String2="..") returned 1 [0215.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbd28 [0215.372] wcscpy (in: _Dest=0x81dbd28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.372] wcscat (in: _Dest=0x81dbd28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.372] wcscat (in: _Dest=0x81dbd28, _Source="FREEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" [0215.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbd28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0215.373] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60012c00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x60012c00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x31600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_M.VSS", cAlternateFileName="")) returned 1 [0215.373] wcscmp (_String1="FURN_M.VSS", _String2=".") returned 1 [0215.373] wcscmp (_String1="FURN_M.VSS", _String2="..") returned 1 [0215.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbdc8 [0215.373] wcscpy (in: _Dest=0x81dbdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.373] wcscat (in: _Dest=0x81dbdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.373] wcscat (in: _Dest=0x81dbdc8, _Source="FURN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" [0215.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0215.374] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1e1b00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d1e1b00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x31200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_U.VSS", cAlternateFileName="")) returned 1 [0215.374] wcscmp (_String1="FURN_U.VSS", _String2=".") returned 1 [0215.374] wcscmp (_String1="FURN_U.VSS", _String2="..") returned 1 [0215.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbe68 [0215.374] wcscpy (in: _Dest=0x81dbe68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.374] wcscat (in: _Dest=0x81dbe68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.374] wcscat (in: _Dest=0x81dbe68, _Source="FURN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" [0215.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbe68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab0 [0215.375] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f807500, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6f807500, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_M.VSS", cAlternateFileName="")) returned 1 [0215.375] wcscmp (_String1="GANESA_M.VSS", _String2=".") returned 1 [0215.375] wcscmp (_String1="GANESA_M.VSS", _String2="..") returned 1 [0215.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbf08 [0215.375] wcscpy (in: _Dest=0x81dbf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.375] wcscat (in: _Dest=0x81dbf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.375] wcscat (in: _Dest=0x81dbf08, _Source="GANESA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" [0215.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0215.376] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b1a200, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70b1a200, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_U.VSS", cAlternateFileName="")) returned 1 [0215.376] wcscmp (_String1="GANESA_U.VSS", _String2=".") returned 1 [0215.376] wcscmp (_String1="GANESA_U.VSS", _String2="..") returned 1 [0215.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbfa8 [0215.376] wcscpy (in: _Dest=0x81dbfa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.376] wcscat (in: _Dest=0x81dbfa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.376] wcscat (in: _Dest=0x81dbfa8, _Source="GANESA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" [0215.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbfa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0215.377] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b6c3700, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7b6c3700, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VSS", cAlternateFileName="")) returned 1 [0215.377] wcscmp (_String1="GANTT_M.VSS", _String2=".") returned 1 [0215.377] wcscmp (_String1="GANTT_M.VSS", _String2="..") returned 1 [0215.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc048 [0215.377] wcscpy (in: _Dest=0x81dc048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.378] wcscat (in: _Dest=0x81dc048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.378] wcscat (in: _Dest=0x81dc048, _Source="GANTT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" [0215.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0 [0215.379] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5820f00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5820f00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VST", cAlternateFileName="")) returned 1 [0215.379] wcscmp (_String1="GANTT_M.VST", _String2=".") returned 1 [0215.379] wcscmp (_String1="GANTT_M.VST", _String2="..") returned 1 [0215.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc0e8 [0215.379] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.379] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.379] wcscat (in: _Dest=0x81dc0e8, _Source="GANTT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" [0215.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0215.380] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f59f00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x84f59f00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VSS", cAlternateFileName="")) returned 1 [0215.380] wcscmp (_String1="GANTT_U.VSS", _String2=".") returned 1 [0215.380] wcscmp (_String1="GANTT_U.VSS", _String2="..") returned 1 [0215.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc188 [0215.380] wcscpy (in: _Dest=0x81dc188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.380] wcscat (in: _Dest=0x81dc188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.380] wcscat (in: _Dest=0x81dc188, _Source="GANTT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" [0215.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0215.381] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda46c300, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xda46c300, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VST", cAlternateFileName="")) returned 1 [0215.381] wcscmp (_String1="GANTT_U.VST", _String2=".") returned 1 [0215.381] wcscmp (_String1="GANTT_U.VST", _String2="..") returned 1 [0215.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc228 [0215.381] wcscpy (in: _Dest=0x81dc228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.381] wcscat (in: _Dest=0x81dc228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.381] wcscat (in: _Dest=0x81dc228, _Source="GANTT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" [0215.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0215.382] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aeb8000, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8aeb8000, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_M.VSS", cAlternateFileName="")) returned 1 [0215.382] wcscmp (_String1="GARDEN_M.VSS", _String2=".") returned 1 [0215.382] wcscmp (_String1="GARDEN_M.VSS", _String2="..") returned 1 [0215.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc2c8 [0215.382] wcscpy (in: _Dest=0x81dc2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.382] wcscat (in: _Dest=0x81dc2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.382] wcscat (in: _Dest=0x81dc2c8, _Source="GARDEN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" [0215.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0215.383] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e16100, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90e16100, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_U.VSS", cAlternateFileName="")) returned 1 [0215.383] wcscmp (_String1="GARDEN_U.VSS", _String2=".") returned 1 [0215.383] wcscmp (_String1="GARDEN_U.VSS", _String2="..") returned 1 [0215.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc368 [0215.384] wcscpy (in: _Dest=0x81dc368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.384] wcscat (in: _Dest=0x81dc368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.384] wcscat (in: _Dest=0x81dc368, _Source="GARDEN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" [0215.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0215.385] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99399c00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99399c00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_M.VSS", cAlternateFileName="")) returned 1 [0215.385] wcscmp (_String1="GDT_M.VSS", _String2=".") returned 1 [0215.385] wcscmp (_String1="GDT_M.VSS", _String2="..") returned 1 [0215.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d9778 [0215.385] wcscpy (in: _Dest=0x81d9778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.385] wcscat (in: _Dest=0x81d9778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.385] wcscat (in: _Dest=0x81d9778, _Source="GDT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" [0215.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0215.386] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa191d700, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa191d700, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_U.VSS", cAlternateFileName="")) returned 1 [0215.386] wcscmp (_String1="GDT_U.VSS", _String2=".") returned 1 [0215.386] wcscmp (_String1="GDT_U.VSS", _String2="..") returned 1 [0215.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d96e0 [0215.386] wcscpy (in: _Dest=0x81d96e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.386] wcscat (in: _Dest=0x81d96e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.386] wcscat (in: _Dest=0x81d96e0, _Source="GDT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" [0215.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d96e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0215.387] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c60c00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9c60c00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_M.VST", cAlternateFileName="")) returned 1 [0215.387] wcscmp (_String1="HOMPLN_M.VST", _String2=".") returned 1 [0215.387] wcscmp (_String1="HOMPLN_M.VST", _String2="..") returned 1 [0215.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc408 [0215.387] wcscpy (in: _Dest=0x81dc408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.387] wcscat (in: _Dest=0x81dc408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.387] wcscat (in: _Dest=0x81dc408, _Source="HOMPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" [0215.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0215.388] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8142800, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8142800, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_U.VST", cAlternateFileName="")) returned 1 [0215.388] wcscmp (_String1="HOMPLN_U.VST", _String2=".") returned 1 [0215.388] wcscmp (_String1="HOMPLN_U.VST", _String2="..") returned 1 [0215.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc4a8 [0215.388] wcscpy (in: _Dest=0x81dc4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.389] wcscat (in: _Dest=0x81dc4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.389] wcscat (in: _Dest=0x81dc4a8, _Source="HOMPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" [0215.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2878 [0215.390] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaec600, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaeaec600, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_M.VSS", cAlternateFileName="")) returned 1 [0215.390] wcscmp (_String1="HVACCE_M.VSS", _String2=".") returned 1 [0215.390] wcscmp (_String1="HVACCE_M.VSS", _String2="..") returned 1 [0215.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc548 [0215.390] wcscpy (in: _Dest=0x81dc548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.390] wcscat (in: _Dest=0x81dc548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.390] wcscat (in: _Dest=0x81dc548, _Source="HVACCE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" [0215.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c4 [0215.391] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2e0f00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe2e0f00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_U.VSS", cAlternateFileName="")) returned 1 [0215.391] wcscmp (_String1="HVACCE_U.VSS", _String2=".") returned 1 [0215.391] wcscmp (_String1="HVACCE_U.VSS", _String2="..") returned 1 [0215.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc5e8 [0215.391] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.391] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.392] wcscat (in: _Dest=0x81dc5e8, _Source="HVACCE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" [0215.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0215.393] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca19d100, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xca19d100, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_M.VSS", cAlternateFileName="")) returned 1 [0215.393] wcscmp (_String1="HVACC_M.VSS", _String2=".") returned 1 [0215.393] wcscmp (_String1="HVACC_M.VSS", _String2="..") returned 1 [0215.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc688 [0215.393] wcscpy (in: _Dest=0x81dc688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.393] wcscat (in: _Dest=0x81dc688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.393] wcscat (in: _Dest=0x81dc688, _Source="HVACC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" [0215.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c68 [0216.769] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6059300, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd6059300, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_U.VSS", cAlternateFileName="")) returned 1 [0216.769] wcscmp (_String1="HVACC_U.VSS", _String2=".") returned 1 [0216.769] wcscmp (_String1="HVACC_U.VSS", _String2="..") returned 1 [0216.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b3f8 [0216.770] wcscpy (in: _Dest=0x819b3f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0216.770] wcscat (in: _Dest=0x819b3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0216.770] wcscat (in: _Dest=0x819b3f8, _Source="HVACC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" [0217.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c [0217.583] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3228200, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe3228200, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_M.VSS", cAlternateFileName="")) returned 1 [0217.583] wcscmp (_String1="HVACD_M.VSS", _String2=".") returned 1 [0217.583] wcscmp (_String1="HVACD_M.VSS", _String2="..") returned 1 [0217.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a8b8 [0217.583] wcscpy (in: _Dest=0x819a8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.584] wcscat (in: _Dest=0x819a8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.584] wcscat (in: _Dest=0x819a8b8, _Source="HVACD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" [0217.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0217.585] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03f7100, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf03f7100, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x26a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_U.VSS", cAlternateFileName="")) returned 1 [0217.585] wcscmp (_String1="HVACD_U.VSS", _String2=".") returned 1 [0217.585] wcscmp (_String1="HVACD_U.VSS", _String2="..") returned 1 [0217.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc728 [0217.585] wcscpy (in: _Dest=0x81dc728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.585] wcscat (in: _Dest=0x81dc728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.585] wcscat (in: _Dest=0x81dc728, _Source="HVACD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" [0217.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0217.587] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2b3300, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc2b3300, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_M.VSS", cAlternateFileName="")) returned 1 [0217.587] wcscmp (_String1="HVACEQ_M.VSS", _String2=".") returned 1 [0217.587] wcscmp (_String1="HVACEQ_M.VSS", _String2="..") returned 1 [0217.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc7c8 [0217.587] wcscpy (in: _Dest=0x81dc7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.587] wcscat (in: _Dest=0x81dc7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.587] wcscat (in: _Dest=0x81dc7c8, _Source="HVACEQ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" [0217.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0217.589] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4836e00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4836e00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_U.VSS", cAlternateFileName="")) returned 1 [0217.589] wcscmp (_String1="HVACEQ_U.VSS", _String2=".") returned 1 [0217.589] wcscmp (_String1="HVACEQ_U.VSS", _String2="..") returned 1 [0217.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc868 [0217.589] wcscpy (in: _Dest=0x81dc868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.589] wcscat (in: _Dest=0x81dc868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.589] wcscat (in: _Dest=0x81dc868, _Source="HVACEQ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" [0217.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0217.590] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19d9000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19d9000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_M.VST", cAlternateFileName="")) returned 1 [0217.590] wcscmp (_String1="HVAC_M.VST", _String2=".") returned 1 [0217.590] wcscmp (_String1="HVAC_M.VST", _String2="..") returned 1 [0217.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc908 [0217.591] wcscpy (in: _Dest=0x81dc908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.591] wcscat (in: _Dest=0x81dc908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.591] wcscat (in: _Dest=0x81dc908, _Source="HVAC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" [0217.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0217.592] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26f800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb26f800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_U.VST", cAlternateFileName="")) returned 1 [0217.592] wcscmp (_String1="HVAC_U.VST", _String2=".") returned 1 [0217.592] wcscmp (_String1="HVAC_U.VST", _String2="..") returned 1 [0217.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc9a8 [0217.592] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.592] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.592] wcscat (in: _Dest=0x81dc9a8, _Source="HVAC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" [0217.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0217.594] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x816f500, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x816f500, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VSS", cAlternateFileName="")) returned 1 [0217.594] wcscmp (_String1="IDEF0_M.VSS", _String2=".") returned 1 [0217.594] wcscmp (_String1="IDEF0_M.VSS", _String2="..") returned 1 [0217.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dca48 [0217.594] wcscpy (in: _Dest=0x81dca48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.594] wcscat (in: _Dest=0x81dca48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.594] wcscat (in: _Dest=0x81dca48, _Source="IDEF0_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" [0217.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dca48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0217.596] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd895200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd895200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VST", cAlternateFileName="")) returned 1 [0217.596] wcscmp (_String1="IDEF0_M.VST", _String2=".") returned 1 [0217.596] wcscmp (_String1="IDEF0_M.VST", _String2="..") returned 1 [0217.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dcae8 [0217.597] wcscpy (in: _Dest=0x81dcae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.597] wcscat (in: _Dest=0x81dcae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.597] wcscat (in: _Dest=0x81dcae8, _Source="IDEF0_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" [0217.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0217.598] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbaa7c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VSS", cAlternateFileName="")) returned 1 [0217.598] wcscmp (_String1="IDEF0_U.VSS", _String2=".") returned 1 [0217.598] wcscmp (_String1="IDEF0_U.VSS", _String2="..") returned 1 [0217.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dcb88 [0217.599] wcscpy (in: _Dest=0x81dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.599] wcscat (in: _Dest=0x81dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.599] wcscat (in: _Dest=0x81dcb88, _Source="IDEF0_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" [0217.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0217.600] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfebac00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfebac00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VST", cAlternateFileName="")) returned 1 [0217.600] wcscmp (_String1="IDEF0_U.VST", _String2=".") returned 1 [0217.600] wcscmp (_String1="IDEF0_U.VST", _String2="..") returned 1 [0217.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dcc28 [0217.600] wcscpy (in: _Dest=0x81dcc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.600] wcscat (in: _Dest=0x81dcc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.600] wcscat (in: _Dest=0x81dcc28, _Source="IDEF0_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" [0217.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0217.603] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106f3000, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x106f3000, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_M.VSS", cAlternateFileName="")) returned 1 [0217.603] wcscmp (_String1="INTANN_M.VSS", _String2=".") returned 1 [0217.603] wcscmp (_String1="INTANN_M.VSS", _String2="..") returned 1 [0217.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dccc8 [0217.604] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.604] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.604] wcscat (in: _Dest=0x81dccc8, _Source="INTANN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" [0217.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0217.605] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16651100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16651100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_U.VSS", cAlternateFileName="")) returned 1 [0217.605] wcscmp (_String1="INTANN_U.VSS", _String2=".") returned 1 [0217.605] wcscmp (_String1="INTANN_U.VSS", _String2="..") returned 1 [0217.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcd68 [0217.605] wcscpy (in: _Dest=0x81dcd68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.605] wcscat (in: _Dest=0x81dcd68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.605] wcscat (in: _Dest=0x81dcd68, _Source="INTANN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" [0217.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0217.607] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f89800, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19f89800, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_M.VSS", cAlternateFileName="")) returned 1 [0217.607] wcscmp (_String1="IRRIG_M.VSS", _String2=".") returned 1 [0217.607] wcscmp (_String1="IRRIG_M.VSS", _String2="..") returned 1 [0217.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dce08 [0217.607] wcscpy (in: _Dest=0x81dce08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.607] wcscat (in: _Dest=0x81dce08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.607] wcscat (in: _Dest=0x81dce08, _Source="IRRIG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" [0217.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0217.609] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebd4c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ebd4c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_U.VSS", cAlternateFileName="")) returned 1 [0220.012] wcscmp (_String1="IRRIG_U.VSS", _String2=".") returned 1 [0220.012] wcscmp (_String1="IRRIG_U.VSS", _String2="..") returned 1 [0220.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc7c8 [0220.012] wcscpy (in: _Dest=0x81dc7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.012] wcscat (in: _Dest=0x81dc7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.012] wcscat (in: _Dest=0x81dc7c8, _Source="IRRIG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" [0220.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0 [0220.124] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2977e100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2977e100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x67600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VSS", cAlternateFileName="")) returned 1 [0220.124] wcscmp (_String1="ITIL_M.VSS", _String2=".") returned 1 [0220.124] wcscmp (_String1="ITIL_M.VSS", _String2="..") returned 1 [0220.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc728 [0220.124] wcscpy (in: _Dest=0x81dc728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.124] wcscat (in: _Dest=0x81dc728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.124] wcscat (in: _Dest=0x81dc728, _Source="ITIL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" [0220.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0220.125] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafa93a00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xafa93a00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VST", cAlternateFileName="")) returned 1 [0220.125] wcscmp (_String1="ITIL_M.VST", _String2=".") returned 1 [0220.125] wcscmp (_String1="ITIL_M.VST", _String2="..") returned 1 [0220.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc688 [0220.126] wcscpy (in: _Dest=0x81dc688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.126] wcscat (in: _Dest=0x81dc688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.126] wcscat (in: _Dest=0x81dc688, _Source="ITIL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" [0220.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0220.127] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34327600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34327600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x65c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_U.VSS", cAlternateFileName="")) returned 1 [0220.127] wcscmp (_String1="ITIL_U.VSS", _String2=".") returned 1 [0220.127] wcscmp (_String1="ITIL_U.VSS", _String2="..") returned 1 [0220.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dcea8 [0220.127] wcscpy (in: _Dest=0x81dcea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.127] wcscat (in: _Dest=0x81dcea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.127] wcscat (in: _Dest=0x81dcea8, _Source="ITIL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" [0220.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0220.128] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4cd6c00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4cd6c00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_U.VST", cAlternateFileName="")) returned 1 [0220.128] wcscmp (_String1="ITIL_U.VST", _String2=".") returned 1 [0220.128] wcscmp (_String1="ITIL_U.VST", _String2="..") returned 1 [0220.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dcf48 [0220.128] wcscpy (in: _Dest=0x81dcf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.128] wcscat (in: _Dest=0x81dcf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.128] wcscat (in: _Dest=0x81dcf48, _Source="ITIL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" [0220.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0220.130] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37c5fd00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37c5fd00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LANGLV_M.VSS", cAlternateFileName="")) returned 1 [0220.130] wcscmp (_String1="LANGLV_M.VSS", _String2=".") returned 1 [0220.130] wcscmp (_String1="LANGLV_M.VSS", _String2="..") returned 1 [0220.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcfe8 [0220.130] wcscpy (in: _Dest=0x81dcfe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.130] wcscat (in: _Dest=0x81dcfe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.130] wcscat (in: _Dest=0x81dcfe8, _Source="LANGLV_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" [0220.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcfe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0220.131] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b598400, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3b598400, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LANGLV_U.VSS", cAlternateFileName="")) returned 1 [0220.131] wcscmp (_String1="LANGLV_U.VSS", _String2=".") returned 1 [0220.131] wcscmp (_String1="LANGLV_U.VSS", _String2="..") returned 1 [0220.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd088 [0220.131] wcscpy (in: _Dest=0x81dd088, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.132] wcscat (in: _Dest=0x81dd088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.132] wcscat (in: _Dest=0x81dd088, _Source="LANGLV_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" [0220.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c7c [0220.133] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x124e0600, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x124e0600, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPDR_M.VST", cAlternateFileName="")) returned 1 [0220.133] wcscmp (_String1="LDAPDR_M.VST", _String2=".") returned 1 [0220.133] wcscmp (_String1="LDAPDR_M.VST", _String2="..") returned 1 [0220.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd128 [0220.133] wcscpy (in: _Dest=0x81dd128, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.133] wcscat (in: _Dest=0x81dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.133] wcscat (in: _Dest=0x81dd128, _Source="LDAPDR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" [0220.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0220.137] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15e18d00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15e18d00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPDR_U.VST", cAlternateFileName="")) returned 1 [0220.137] wcscmp (_String1="LDAPDR_U.VST", _String2=".") returned 1 [0220.137] wcscmp (_String1="LDAPDR_U.VST", _String2="..") returned 1 [0220.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd1c8 [0220.138] wcscpy (in: _Dest=0x81dd1c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.138] wcscat (in: _Dest=0x81dd1c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.138] wcscat (in: _Dest=0x81dd1c8, _Source="LDAPDR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" [0220.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd1c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c [0220.140] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48767300, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x48767300, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPOB_M.VSS", cAlternateFileName="")) returned 1 [0220.140] wcscmp (_String1="LDAPOB_M.VSS", _String2=".") returned 1 [0220.140] wcscmp (_String1="LDAPOB_M.VSS", _String2="..") returned 1 [0220.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd268 [0220.140] wcscpy (in: _Dest=0x81dd268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.140] wcscat (in: _Dest=0x81dd268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.140] wcscat (in: _Dest=0x81dd268, _Source="LDAPOB_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" [0220.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0220.141] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c48f00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56c48f00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPOB_U.VSS", cAlternateFileName="")) returned 1 [0220.141] wcscmp (_String1="LDAPOB_U.VSS", _String2=".") returned 1 [0220.141] wcscmp (_String1="LDAPOB_U.VSS", _String2="..") returned 1 [0220.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd308 [0220.141] wcscpy (in: _Dest=0x81dd308, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.141] wcscat (in: _Dest=0x81dd308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.141] wcscat (in: _Dest=0x81dd308, _Source="LDAPOB_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" [0220.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca8 [0220.143] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x968b1300, ftCreationTime.dwHighDateTime=0x1ca630a, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x968b1300, ftLastWriteTime.dwHighDateTime=0x1ca630a, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEGEND_M.VSS", cAlternateFileName="")) returned 1 [0220.143] wcscmp (_String1="LEGEND_M.VSS", _String2=".") returned 1 [0220.143] wcscmp (_String1="LEGEND_M.VSS", _String2="..") returned 1 [0220.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd3a8 [0220.143] wcscpy (in: _Dest=0x81dd3a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.143] wcscat (in: _Dest=0x81dd3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.143] wcscat (in: _Dest=0x81dd3a8, _Source="LEGEND_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" [0220.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0220.144] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b4fc700, ftCreationTime.dwHighDateTime=0x1ca630a, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9b4fc700, ftLastWriteTime.dwHighDateTime=0x1ca630a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEGEND_U.VSS", cAlternateFileName="")) returned 1 [0220.144] wcscmp (_String1="LEGEND_U.VSS", _String2=".") returned 1 [0220.144] wcscmp (_String1="LEGEND_U.VSS", _String2="..") returned 1 [0220.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd448 [0220.144] wcscpy (in: _Dest=0x81dd448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.144] wcscat (in: _Dest=0x81dd448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.144] wcscat (in: _Dest=0x81dd448, _Source="LEGEND_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" [0220.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0220.145] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b05100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62b05100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND_M.VSS", cAlternateFileName="")) returned 1 [0220.146] wcscmp (_String1="LGND_M.VSS", _String2=".") returned 1 [0220.146] wcscmp (_String1="LGND_M.VSS", _String2="..") returned 1 [0220.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dd4e8 [0220.146] wcscpy (in: _Dest=0x81dd4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.146] wcscat (in: _Dest=0x81dd4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.146] wcscat (in: _Dest=0x81dd4e8, _Source="LGND_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" [0220.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a04 [0220.147] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a63200, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68a63200, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x37600, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND_U.VSS", cAlternateFileName="")) returned 1 [0220.147] wcscmp (_String1="LGND_U.VSS", _String2=".") returned 1 [0220.147] wcscmp (_String1="LGND_U.VSS", _String2="..") returned 1 [0220.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dd588 [0220.147] wcscpy (in: _Dest=0x81dd588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.147] wcscat (in: _Dest=0x81dd588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.147] wcscat (in: _Dest=0x81dd588, _Source="LGND_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" [0220.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0220.148] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6ae600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e18650, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d6ae600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINPAT_M.VSS", cAlternateFileName="")) returned 1 [0220.148] wcscmp (_String1="LINPAT_M.VSS", _String2=".") returned 1 [0220.148] wcscmp (_String1="LINPAT_M.VSS", _String2="..") returned 1 [0220.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a8b8 [0220.149] wcscpy (in: _Dest=0x819a8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.149] wcscat (in: _Dest=0x819a8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.149] wcscat (in: _Dest=0x819a8b8, _Source="LINPAT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" [0220.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0220.150] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722f9a00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e18650, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x722f9a00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINPAT_U.VSS", cAlternateFileName="")) returned 1 [0220.150] wcscmp (_String1="LINPAT_U.VSS", _String2=".") returned 1 [0220.150] wcscmp (_String1="LINPAT_U.VSS", _String2="..") returned 1 [0220.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b3f8 [0220.150] wcscpy (in: _Dest=0x819b3f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.150] wcscat (in: _Dest=0x819b3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.150] wcscat (in: _Dest=0x819b3f8, _Source="LINPAT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" [0220.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0220.151] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda8cb00, ftCreationTime.dwHighDateTime=0x1cac094, ftLastAccessTime.dwLowDateTime=0xa4e18650, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdda8cb00, ftLastWriteTime.dwHighDateTime=0x1cac094, nFileSizeHigh=0x0, nFileSizeLow=0xe1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="LNDMRK_M.VSS", cAlternateFileName="")) returned 1 [0220.152] wcscmp (_String1="LNDMRK_M.VSS", _String2=".") returned 1 [0220.152] wcscmp (_String1="LNDMRK_M.VSS", _String2="..") returned 1 [0220.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e10a68 [0220.152] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.152] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.152] wcscat (in: _Dest=0x3e10a68, _Source="LNDMRK_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" [0220.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0220.153] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded9f800, ftCreationTime.dwHighDateTime=0x1cac094, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xded9f800, ftLastWriteTime.dwHighDateTime=0x1cac094, nFileSizeHigh=0x0, nFileSizeLow=0xe0800, dwReserved0=0x0, dwReserved1=0x0, cFileName="LNDMRK_U.VSS", cAlternateFileName="")) returned 1 [0220.153] wcscmp (_String1="LNDMRK_U.VSS", _String2=".") returned 1 [0220.153] wcscmp (_String1="LNDMRK_U.VSS", _String2="..") returned 1 [0220.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8332930 [0220.153] wcscpy (in: _Dest=0x8332930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.153] wcscat (in: _Dest=0x8332930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.153] wcscat (in: _Dest=0x8332930, _Source="LNDMRK_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" [0220.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0220.154] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a071e00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a071e00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGIC_M.VSS", cAlternateFileName="")) returned 1 [0220.154] wcscmp (_String1="LOGIC_M.VSS", _String2=".") returned 1 [0220.154] wcscmp (_String1="LOGIC_M.VSS", _String2="..") returned 1 [0220.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x83329d0 [0220.155] wcscpy (in: _Dest=0x83329d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.155] wcscat (in: _Dest=0x83329d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.155] wcscat (in: _Dest=0x83329d0, _Source="LOGIC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" [0220.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83329d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0220.156] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93908600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x93908600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGIC_U.VSS", cAlternateFileName="")) returned 1 [0220.156] wcscmp (_String1="LOGIC_U.VSS", _String2=".") returned 1 [0220.156] wcscmp (_String1="LOGIC_U.VSS", _String2="..") returned 1 [0220.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8332a70 [0220.156] wcscpy (in: _Dest=0x8332a70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.156] wcscat (in: _Dest=0x8332a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.156] wcscat (in: _Dest=0x8332a70, _Source="LOGIC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" [0220.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0220.157] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d19ee00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9d19ee00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x35800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_M.VSS", cAlternateFileName="")) returned 1 [0220.157] wcscmp (_String1="MAP3D_M.VSS", _String2=".") returned 1 [0220.157] wcscmp (_String1="MAP3D_M.VSS", _String2="..") returned 1 [0220.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8332b10 [0220.157] wcscpy (in: _Dest=0x8332b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.157] wcscat (in: _Dest=0x8332b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.157] wcscat (in: _Dest=0x8332b10, _Source="MAP3D_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" [0220.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0220.159] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19751400, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19751400, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_M.VST", cAlternateFileName="")) returned 1 [0220.159] wcscmp (_String1="MAP3D_M.VST", _String2=".") returned 1 [0220.159] wcscmp (_String1="MAP3D_M.VST", _String2="..") returned 1 [0220.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8332bb0 [0220.159] wcscpy (in: _Dest=0x8332bb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.159] wcscat (in: _Dest=0x8332bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.159] wcscat (in: _Dest=0x8332bb0, _Source="MAP3D_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" [0220.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0220.160] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa905b000, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa905b000, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_U.VSS", cAlternateFileName="")) returned 1 [0220.160] wcscmp (_String1="MAP3D_U.VSS", _String2=".") returned 1 [0220.160] wcscmp (_String1="MAP3D_U.VSS", _String2="..") returned 1 [0220.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8332c50 [0220.160] wcscpy (in: _Dest=0x8332c50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.161] wcscat (in: _Dest=0x8332c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.161] wcscat (in: _Dest=0x8332c50, _Source="MAP3D_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" [0220.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0220.162] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d089b00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1d089b00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_U.VST", cAlternateFileName="")) returned 1 [0220.162] wcscmp (_String1="MAP3D_U.VST", _String2=".") returned 1 [0220.162] wcscmp (_String1="MAP3D_U.VST", _String2="..") returned 1 [0220.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8332cf0 [0220.162] wcscpy (in: _Dest=0x8332cf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.162] wcscat (in: _Dest=0x8332cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.162] wcscat (in: _Dest=0x8332cf0, _Source="MAP3D_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" [0220.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0221.249] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22fe7c00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22fe7c00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP_M.VST", cAlternateFileName="")) returned 1 [0221.249] wcscmp (_String1="MAP_M.VST", _String2=".") returned 1 [0221.249] wcscmp (_String1="MAP_M.VST", _String2="..") returned 1 [0221.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db068 [0221.250] wcscpy (in: _Dest=0x81db068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.250] wcscat (in: _Dest=0x81db068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.250] wcscat (in: _Dest=0x81db068, _Source="MAP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" [0221.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc4 [0221.258] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f45d00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28f45d00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xe200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP_U.VST", cAlternateFileName="")) returned 1 [0221.258] wcscmp (_String1="MAP_U.VST", _String2=".") returned 1 [0221.259] wcscmp (_String1="MAP_U.VST", _String2="..") returned 1 [0221.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db100 [0221.259] wcscpy (in: _Dest=0x81db100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.259] wcscat (in: _Dest=0x81db100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.259] wcscat (in: _Dest=0x81db100, _Source="MAP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" [0221.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a94 [0221.260] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ad60000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3ad60000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEALL_M.VST", cAlternateFileName="")) returned 1 [0221.260] wcscmp (_String1="MEALL_M.VST", _String2=".") returned 1 [0221.260] wcscmp (_String1="MEALL_M.VST", _String2="..") returned 1 [0221.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8332d90 [0221.261] wcscpy (in: _Dest=0x8332d90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.261] wcscat (in: _Dest=0x8332d90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.261] wcscat (in: _Dest=0x8332d90, _Source="MEALL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" [0221.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0221.262] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445f6800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x445f6800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEALL_U.VST", cAlternateFileName="")) returned 1 [0221.262] wcscmp (_String1="MEALL_U.VST", _String2=".") returned 1 [0221.262] wcscmp (_String1="MEALL_U.VST", _String2="..") returned 1 [0221.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8332e30 [0221.262] wcscpy (in: _Dest=0x8332e30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.262] wcscat (in: _Dest=0x8332e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.262] wcscat (in: _Dest=0x8332e30, _Source="MEALL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" [0221.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0221.263] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb9100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaefb9100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEMOBJ_M.VSS", cAlternateFileName="")) returned 1 [0221.263] wcscmp (_String1="MEMOBJ_M.VSS", _String2=".") returned 1 [0221.264] wcscmp (_String1="MEMOBJ_M.VSS", _String2="..") returned 1 [0221.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8332ed0 [0221.264] wcscpy (in: _Dest=0x8332ed0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.264] wcscat (in: _Dest=0x8332ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.264] wcscat (in: _Dest=0x8332ed0, _Source="MEMOBJ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" [0221.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0221.265] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c04500, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3c04500, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEMOBJ_U.VSS", cAlternateFileName="")) returned 1 [0221.265] wcscmp (_String1="MEMOBJ_U.VSS", _String2=".") returned 1 [0221.265] wcscmp (_String1="MEMOBJ_U.VSS", _String2="..") returned 1 [0221.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8332f70 [0221.265] wcscpy (in: _Dest=0x8332f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.265] wcscat (in: _Dest=0x8332f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.265] wcscat (in: _Dest=0x8332f70, _Source="MEMOBJ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" [0221.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0221.267] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb753cc00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb753cc00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="METRO_M.VSS", cAlternateFileName="")) returned 1 [0221.267] wcscmp (_String1="METRO_M.VSS", _String2=".") returned 1 [0221.267] wcscmp (_String1="METRO_M.VSS", _String2="..") returned 1 [0221.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8333010 [0221.267] wcscpy (in: _Dest=0x8333010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.267] wcscat (in: _Dest=0x8333010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.267] wcscat (in: _Dest=0x8333010, _Source="METRO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" [0221.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0221.268] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b62600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb9b62600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="METRO_U.VSS", cAlternateFileName="")) returned 1 [0221.269] wcscmp (_String1="METRO_U.VSS", _String2=".") returned 1 [0221.269] wcscmp (_String1="METRO_U.VSS", _String2="..") returned 1 [0221.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x83330b0 [0221.269] wcscpy (in: _Dest=0x83330b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.269] wcscat (in: _Dest=0x83330b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.269] wcscat (in: _Dest=0x83330b0, _Source="METRO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" [0221.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83330b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a98 [0221.270] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca669c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xca669c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_M.VSS", cAlternateFileName="")) returned 1 [0221.270] wcscmp (_String1="MRKTDG_M.VSS", _String2=".") returned 1 [0221.270] wcscmp (_String1="MRKTDG_M.VSS", _String2="..") returned 1 [0221.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333150 [0221.270] wcscpy (in: _Dest=0x8333150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.270] wcscat (in: _Dest=0x8333150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.270] wcscat (in: _Dest=0x8333150, _Source="MRKTDG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" [0221.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0221.272] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a554900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4a554900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_M.VST", cAlternateFileName="")) returned 1 [0222.823] wcscmp (_String1="MRKTDG_M.VST", _String2=".") returned 1 [0222.823] wcscmp (_String1="MRKTDG_M.VST", _String2="..") returned 1 [0222.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c118 [0222.823] wcscpy (in: _Dest=0x819c118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.823] wcscat (in: _Dest=0x819c118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.823] wcscat (in: _Dest=0x819c118, _Source="MRKTDG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" [0222.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0222.951] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd796c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdd796c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x5c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_U.VSS", cAlternateFileName="")) returned 1 [0222.951] wcscmp (_String1="MRKTDG_U.VSS", _String2=".") returned 1 [0222.951] wcscmp (_String1="MRKTDG_U.VSS", _String2="..") returned 1 [0222.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b998 [0222.951] wcscpy (in: _Dest=0x819b998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.951] wcscat (in: _Dest=0x819b998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.951] wcscat (in: _Dest=0x819b998, _Source="MRKTDG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" [0222.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2798 [0222.952] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f19fd00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4f19fd00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_U.VST", cAlternateFileName="")) returned 1 [0222.952] wcscmp (_String1="MRKTDG_U.VST", _String2=".") returned 1 [0222.952] wcscmp (_String1="MRKTDG_U.VST", _String2="..") returned 1 [0222.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bd58 [0222.952] wcscpy (in: _Dest=0x819bd58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.953] wcscat (in: _Dest=0x819bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.953] wcscat (in: _Dest=0x819bd58, _Source="MRKTDG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" [0222.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0222.954] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d1a700, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe5d1a700, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETLOC_M.VSS", cAlternateFileName="")) returned 1 [0222.954] wcscmp (_String1="NETLOC_M.VSS", _String2=".") returned 1 [0222.954] wcscmp (_String1="NETLOC_M.VSS", _String2="..") returned 1 [0222.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bf38 [0222.954] wcscpy (in: _Dest=0x819bf38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.954] wcscat (in: _Dest=0x819bf38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.954] wcscat (in: _Dest=0x819bf38, _Source="NETLOC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" [0222.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0222.955] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee29e200, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee29e200, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETLOC_U.VSS", cAlternateFileName="")) returned 1 [0222.955] wcscmp (_String1="NETLOC_U.VSS", _String2=".") returned 1 [0222.955] wcscmp (_String1="NETLOC_U.VSS", _String2="..") returned 1 [0222.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b038 [0222.955] wcscpy (in: _Dest=0x819b038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.955] wcscat (in: _Dest=0x819b038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.956] wcscat (in: _Dest=0x819b038, _Source="NETLOC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" [0222.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0222.957] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08c3c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf08c3c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETRM_M.VSS", cAlternateFileName="")) returned 1 [0222.957] wcscmp (_String1="NETRM_M.VSS", _String2=".") returned 1 [0222.957] wcscmp (_String1="NETRM_M.VSS", _String2="..") returned 1 [0222.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819bcb8 [0222.957] wcscpy (in: _Dest=0x819bcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.957] wcscat (in: _Dest=0x819bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.957] wcscat (in: _Dest=0x819bcb8, _Source="NETRM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" [0222.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4 [0222.958] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf41fc300, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf41fc300, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETRM_U.VSS", cAlternateFileName="")) returned 1 [0222.958] wcscmp (_String1="NETRM_U.VSS", _String2=".") returned 1 [0222.958] wcscmp (_String1="NETRM_U.VSS", _String2="..") returned 1 [0222.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a458 [0222.958] wcscpy (in: _Dest=0x819a458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.958] wcscat (in: _Dest=0x819a458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.958] wcscat (in: _Dest=0x819a458, _Source="NETRM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" [0222.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0222.960] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d03900, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d03900, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x4ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETSYM_M.VSS", cAlternateFileName="")) returned 1 [0222.960] wcscmp (_String1="NETSYM_M.VSS", _String2=".") returned 1 [0222.960] wcscmp (_String1="NETSYM_M.VSS", _String2="..") returned 1 [0222.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a598 [0222.960] wcscpy (in: _Dest=0x819a598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.960] wcscat (in: _Dest=0x819a598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.960] wcscat (in: _Dest=0x819a598, _Source="NETSYM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" [0222.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0222.961] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b1dc00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16b1dc00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETSYM_U.VSS", cAlternateFileName="")) returned 1 [0222.961] wcscmp (_String1="NETSYM_U.VSS", _String2=".") returned 1 [0222.961] wcscmp (_String1="NETSYM_U.VSS", _String2="..") returned 1 [0222.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bdf8 [0222.961] wcscpy (in: _Dest=0x819bdf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.961] wcscat (in: _Dest=0x819bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.961] wcscat (in: _Dest=0x819bdf8, _Source="NETSYM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" [0222.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bbc [0222.962] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53deb100, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x53deb100, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETW_M.VST", cAlternateFileName="")) returned 1 [0222.963] wcscmp (_String1="NETW_M.VST", _String2=".") returned 1 [0222.963] wcscmp (_String1="NETW_M.VST", _String2="..") returned 1 [0222.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819adb8 [0222.963] wcscpy (in: _Dest=0x819adb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.963] wcscat (in: _Dest=0x819adb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.963] wcscat (in: _Dest=0x819adb8, _Source="NETW_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" [0222.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819adb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0222.964] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57723800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x57723800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETW_U.VST", cAlternateFileName="")) returned 1 [0222.964] wcscmp (_String1="NETW_U.VST", _String2=".") returned 1 [0222.964] wcscmp (_String1="NETW_U.VST", _String2="..") returned 1 [0222.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819ad18 [0222.964] wcscpy (in: _Dest=0x819ad18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.964] wcscat (in: _Dest=0x819ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.964] wcscat (in: _Dest=0x819ad18, _Source="NETW_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" [0222.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ad18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0222.965] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b769000, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b769000, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OBJREL_M.VSS", cAlternateFileName="")) returned 1 [0222.965] wcscmp (_String1="OBJREL_M.VSS", _String2=".") returned 1 [0222.965] wcscmp (_String1="OBJREL_M.VSS", _String2="..") returned 1 [0222.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b538 [0222.965] wcscpy (in: _Dest=0x819b538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.965] wcscat (in: _Dest=0x819b538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.965] wcscat (in: _Dest=0x819b538, _Source="OBJREL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" [0222.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0222.967] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203b4400, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x203b4400, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OBJREL_U.VSS", cAlternateFileName="")) returned 1 [0222.967] wcscmp (_String1="OBJREL_U.VSS", _String2=".") returned 1 [0222.967] wcscmp (_String1="OBJREL_U.VSS", _String2="..") returned 1 [0222.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b358 [0222.967] wcscpy (in: _Dest=0x819b358, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.967] wcscat (in: _Dest=0x819b358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.967] wcscat (in: _Dest=0x819b358, _Source="OBJREL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" [0222.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b5c [0222.968] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26312500, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26312500, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFACC_M.VSS", cAlternateFileName="")) returned 1 [0222.968] wcscmp (_String1="OFFACC_M.VSS", _String2=".") returned 1 [0222.968] wcscmp (_String1="OFFACC_M.VSS", _String2="..") returned 1 [0222.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bfd8 [0222.968] wcscpy (in: _Dest=0x819bfd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.968] wcscat (in: _Dest=0x819bfd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.968] wcscat (in: _Dest=0x819bfd8, _Source="OFFACC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" [0222.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bfd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2680 [0222.969] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c270600, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2c270600, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFACC_U.VSS", cAlternateFileName="")) returned 1 [0222.970] wcscmp (_String1="OFFACC_U.VSS", _String2=".") returned 1 [0222.970] wcscmp (_String1="OFFACC_U.VSS", _String2="..") returned 1 [0222.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bb78 [0222.970] wcscpy (in: _Dest=0x819bb78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.970] wcscat (in: _Dest=0x819bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.970] wcscat (in: _Dest=0x819bb78, _Source="OFFACC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" [0222.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0222.971] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3943f500, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3943f500, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x32600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFEQP_M.VSS", cAlternateFileName="")) returned 1 [0222.971] wcscmp (_String1="OFFEQP_M.VSS", _String2=".") returned 1 [0222.971] wcscmp (_String1="OFFEQP_M.VSS", _String2="..") returned 1 [0222.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b718 [0222.971] wcscpy (in: _Dest=0x819b718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.971] wcscat (in: _Dest=0x819b718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.971] wcscat (in: _Dest=0x819b718, _Source="OFFEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" [0222.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0222.972] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4660e400, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4660e400, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFEQP_U.VSS", cAlternateFileName="")) returned 1 [0222.972] wcscmp (_String1="OFFEQP_U.VSS", _String2=".") returned 1 [0222.973] wcscmp (_String1="OFFEQP_U.VSS", _String2="..") returned 1 [0222.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a4f8 [0222.973] wcscpy (in: _Dest=0x819a4f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.973] wcscat (in: _Dest=0x819a4f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.973] wcscat (in: _Dest=0x819a4f8, _Source="OFFEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" [0222.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a4f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0222.974] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x609ac200, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x609ac200, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x77000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFFRN_M.VSS", cAlternateFileName="")) returned 1 [0222.975] wcscmp (_String1="OFFFRN_M.VSS", _String2=".") returned 1 [0222.975] wcscmp (_String1="OFFFRN_M.VSS", _String2="..") returned 1 [0222.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b678 [0222.975] wcscpy (in: _Dest=0x819b678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.975] wcscat (in: _Dest=0x819b678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.975] wcscat (in: _Dest=0x819b678, _Source="OFFFRN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" [0222.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0222.976] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad4a000, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7ad4a000, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x75800, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFFRN_U.VSS", cAlternateFileName="")) returned 1 [0222.976] wcscmp (_String1="OFFFRN_U.VSS", _String2=".") returned 1 [0222.976] wcscmp (_String1="OFFFRN_U.VSS", _String2="..") returned 1 [0222.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819aa98 [0222.976] wcscpy (in: _Dest=0x819aa98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.976] wcscat (in: _Dest=0x819aa98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.977] wcscat (in: _Dest=0x819aa98, _Source="OFFFRN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" [0222.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0222.978] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60fba000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x60fba000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLYT_M.VST", cAlternateFileName="")) returned 1 [0222.978] wcscmp (_String1="OFFLYT_M.VST", _String2=".") returned 1 [0222.978] wcscmp (_String1="OFFLYT_M.VST", _String2="..") returned 1 [0222.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b858 [0222.978] wcscpy (in: _Dest=0x819b858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.978] wcscat (in: _Dest=0x819b858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.978] wcscat (in: _Dest=0x819b858, _Source="OFFLYT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" [0222.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0222.979] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6953db00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6953db00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLYT_U.VST", cAlternateFileName="")) returned 1 [0222.979] wcscmp (_String1="OFFLYT_U.VST", _String2=".") returned 1 [0222.980] wcscmp (_String1="OFFLYT_U.VST", _String2="..") returned 1 [0222.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c258 [0222.980] wcscpy (in: _Dest=0x819c258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.980] wcscat (in: _Dest=0x819c258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.980] wcscat (in: _Dest=0x819c258, _Source="OFFLYT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" [0222.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0222.981] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c06200, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x86c06200, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_M.VSS", cAlternateFileName="")) returned 1 [0222.981] wcscmp (_String1="ORGCH_M.VSS", _String2=".") returned 1 [0222.981] wcscmp (_String1="ORGCH_M.VSS", _String2="..") returned 1 [0222.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b498 [0222.981] wcscpy (in: _Dest=0x819b498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.981] wcscat (in: _Dest=0x819b498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.981] wcscat (in: _Dest=0x819b498, _Source="ORGCH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" [0222.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0222.983] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce76200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6ce76200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_M.VST", cAlternateFileName="")) returned 1 [0222.983] wcscmp (_String1="ORGCH_M.VST", _String2=".") returned 1 [0222.983] wcscmp (_String1="ORGCH_M.VST", _String2="..") returned 1 [0222.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b7b8 [0222.983] wcscpy (in: _Dest=0x819b7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.983] wcscat (in: _Dest=0x819b7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.983] wcscat (in: _Dest=0x819b7b8, _Source="ORGCH_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" [0222.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0222.984] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ac2400, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x92ac2400, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_U.VSS", cAlternateFileName="")) returned 1 [0222.984] wcscmp (_String1="ORGCH_U.VSS", _String2=".") returned 1 [0222.984] wcscmp (_String1="ORGCH_U.VSS", _String2="..") returned 1 [0222.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a958 [0222.985] wcscpy (in: _Dest=0x819a958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.985] wcscat (in: _Dest=0x819a958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.985] wcscat (in: _Dest=0x819a958, _Source="ORGCH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" [0222.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0223.050] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ae900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x707ae900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_U.VST", cAlternateFileName="")) returned 1 [0223.050] wcscmp (_String1="ORGCH_U.VST", _String2=".") returned 1 [0223.050] wcscmp (_String1="ORGCH_U.VST", _String2="..") returned 1 [0223.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a9f8 [0223.050] wcscpy (in: _Dest=0x819a9f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.050] wcscat (in: _Dest=0x819a9f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.050] wcscat (in: _Dest=0x819a9f8, _Source="ORGCH_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" [0223.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27ec [0223.051] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca85900, ftCreationTime.dwHighDateTime=0x1c2efb3, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdca85900, ftLastWriteTime.dwHighDateTime=0x1c2efb3, nFileSizeHigh=0x0, nFileSizeLow=0x1345, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGDATA.TXT", cAlternateFileName="")) returned 1 [0223.051] wcscmp (_String1="ORGDATA.TXT", _String2=".") returned 1 [0223.051] wcscmp (_String1="ORGDATA.TXT", _String2="..") returned 1 [0223.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819a638 [0223.051] wcscpy (in: _Dest=0x819a638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.051] wcscat (in: _Dest=0x819a638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.051] wcscat (in: _Dest=0x819a638, _Source="ORGDATA.TXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" [0223.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0223.056] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c890500, ftCreationTime.dwHighDateTime=0x1c6653c, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6c890500, ftLastWriteTime.dwHighDateTime=0x1c6653c, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGDATA.XLS", cAlternateFileName="")) returned 1 [0223.056] wcscmp (_String1="ORGDATA.XLS", _String2=".") returned 1 [0223.056] wcscmp (_String1="ORGDATA.XLS", _String2="..") returned 1 [0223.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819abd8 [0223.056] wcscpy (in: _Dest=0x819abd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.056] wcscat (in: _Dest=0x819abd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.056] wcscat (in: _Dest=0x819abd8, _Source="ORGDATA.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" [0223.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819abd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0223.057] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x740e7000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x740e7000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ_M.VST", cAlternateFileName="")) returned 1 [0223.057] wcscmp (_String1="ORGWIZ_M.VST", _String2=".") returned 1 [0223.057] wcscmp (_String1="ORGWIZ_M.VST", _String2="..") returned 1 [0223.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x83331f0 [0223.057] wcscpy (in: _Dest=0x83331f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.058] wcscat (in: _Dest=0x83331f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.058] wcscat (in: _Dest=0x83331f0, _Source="ORGWIZ_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" [0223.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83331f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0223.059] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7670ca00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7670ca00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ_U.VST", cAlternateFileName="")) returned 1 [0223.059] wcscmp (_String1="ORGWIZ_U.VST", _String2=".") returned 1 [0223.059] wcscmp (_String1="ORGWIZ_U.VST", _String2="..") returned 1 [0223.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333290 [0223.059] wcscpy (in: _Dest=0x8333290, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.059] wcscat (in: _Dest=0x8333290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.059] wcscat (in: _Dest=0x8333290, _Source="ORGWIZ_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" [0223.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0223.060] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc51900, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4bc51900, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x67e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBASLN_M.VST", cAlternateFileName="")) returned 1 [0223.060] wcscmp (_String1="PBASLN_M.VST", _String2=".") returned 1 [0223.060] wcscmp (_String1="PBASLN_M.VST", _String2="..") returned 1 [0223.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333330 [0223.060] wcscpy (in: _Dest=0x8333330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.060] wcscat (in: _Dest=0x8333330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.060] wcscat (in: _Dest=0x8333330, _Source="PBASLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" [0223.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0223.062] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ec2700, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52ec2700, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x67000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBASLN_U.VST", cAlternateFileName="")) returned 1 [0223.062] wcscmp (_String1="PBASLN_U.VST", _String2=".") returned 1 [0223.062] wcscmp (_String1="PBASLN_U.VST", _String2="..") returned 1 [0223.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x83333d0 [0223.062] wcscpy (in: _Dest=0x83333d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.062] wcscat (in: _Dest=0x83333d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.062] wcscat (in: _Dest=0x83333d0, _Source="PBASLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" [0223.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83333d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0223.064] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554e8100, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x554e8100, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBLANK_M.VST", cAlternateFileName="")) returned 1 [0223.064] wcscmp (_String1="PBLANK_M.VST", _String2=".") returned 1 [0223.064] wcscmp (_String1="PBLANK_M.VST", _String2="..") returned 1 [0223.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333470 [0223.064] wcscpy (in: _Dest=0x8333470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.064] wcscat (in: _Dest=0x8333470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.064] wcscat (in: _Dest=0x8333470, _Source="PBLANK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" [0223.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0223.098] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58e20800, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58e20800, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBLANK_U.VST", cAlternateFileName="")) returned 1 [0223.098] wcscmp (_String1="PBLANK_U.VST", _String2=".") returned 1 [0223.098] wcscmp (_String1="PBLANK_U.VST", _String2="..") returned 1 [0223.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333510 [0223.098] wcscpy (in: _Dest=0x8333510, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.098] wcscat (in: _Dest=0x8333510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.098] wcscat (in: _Dest=0x8333510, _Source="PBLANK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" [0223.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934 [0223.100] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed7e900, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f49150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ed7e900, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x65a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCRTSK_M.VST", cAlternateFileName="")) returned 1 [0223.100] wcscmp (_String1="PCRTSK_M.VST", _String2=".") returned 1 [0223.100] wcscmp (_String1="PCRTSK_M.VST", _String2="..") returned 1 [0223.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x83335b0 [0223.100] wcscpy (in: _Dest=0x83335b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.100] wcscat (in: _Dest=0x83335b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.100] wcscat (in: _Dest=0x83335b0, _Source="PCRTSK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" [0223.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83335b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0223.101] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fef700, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f49150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65fef700, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x65000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCRTSK_U.VST", cAlternateFileName="")) returned 1 [0223.425] wcscmp (_String1="PCRTSK_U.VST", _String2=".") returned 1 [0223.425] wcscmp (_String1="PCRTSK_U.VST", _String2="..") returned 1 [0223.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc188 [0223.425] wcscpy (in: _Dest=0x81dc188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.425] wcscat (in: _Dest=0x81dc188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.425] wcscat (in: _Dest=0x81dc188, _Source="PCRTSK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" [0223.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0223.450] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d260500, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d260500, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x4e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCSHFL_M.VST", cAlternateFileName="")) returned 1 [0223.451] wcscmp (_String1="PCSHFL_M.VST", _String2=".") returned 1 [0223.451] wcscmp (_String1="PCSHFL_M.VST", _String2="..") returned 1 [0223.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db6e8 [0223.451] wcscpy (in: _Dest=0x81db6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.451] wcscat (in: _Dest=0x81db6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.451] wcscat (in: _Dest=0x81db6e8, _Source="PCSHFL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" [0223.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0223.454] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731be600, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x731be600, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x4da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCSHFL_U.VST", cAlternateFileName="")) returned 1 [0223.454] wcscmp (_String1="PCSHFL_U.VST", _String2=".") returned 1 [0223.454] wcscmp (_String1="PCSHFL_U.VST", _String2="..") returned 1 [0223.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db648 [0223.454] wcscpy (in: _Dest=0x81db648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.454] wcscat (in: _Dest=0x81db648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.454] wcscat (in: _Dest=0x81db648, _Source="PCSHFL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" [0223.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0223.455] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a20500, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98a20500, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEANNT_M.VSS", cAlternateFileName="")) returned 1 [0223.455] wcscmp (_String1="PEANNT_M.VSS", _String2=".") returned 1 [0223.455] wcscmp (_String1="PEANNT_M.VSS", _String2="..") returned 1 [0223.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333650 [0223.455] wcscpy (in: _Dest=0x8333650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.455] wcscat (in: _Dest=0x8333650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.455] wcscat (in: _Dest=0x8333650, _Source="PEANNT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" [0223.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0223.456] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e97e600, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e97e600, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEANNT_U.VSS", cAlternateFileName="")) returned 1 [0223.456] wcscmp (_String1="PEANNT_U.VSS", _String2=".") returned 1 [0223.456] wcscmp (_String1="PEANNT_U.VSS", _String2="..") returned 1 [0223.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x83336f0 [0223.456] wcscpy (in: _Dest=0x83336f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.456] wcscat (in: _Dest=0x83336f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.457] wcscat (in: _Dest=0x83336f0, _Source="PEANNT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" [0223.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83336f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0223.462] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb932a200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb932a200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEDG_M.VST", cAlternateFileName="")) returned 1 [0223.462] wcscmp (_String1="PEDG_M.VST", _String2=".") returned 1 [0223.462] wcscmp (_String1="PEDG_M.VST", _String2="..") returned 1 [0223.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x8333790 [0223.463] wcscpy (in: _Dest=0x8333790, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.463] wcscat (in: _Dest=0x8333790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.463] wcscat (in: _Dest=0x8333790, _Source="PEDG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" [0223.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x279c [0223.468] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51e6400, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc51e6400, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEDG_U.VST", cAlternateFileName="")) returned 1 [0223.468] wcscmp (_String1="PEDG_U.VST", _String2=".") returned 1 [0223.468] wcscmp (_String1="PEDG_U.VST", _String2="..") returned 1 [0223.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x8333830 [0223.468] wcscpy (in: _Dest=0x8333830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.468] wcscat (in: _Dest=0x8333830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.468] wcscat (in: _Dest=0x8333830, _Source="PEDG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" [0223.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0223.470] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1aab600, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1aab600, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x31400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEEQP_M.VSS", cAlternateFileName="")) returned 1 [0223.470] wcscmp (_String1="PEEQP_M.VSS", _String2=".") returned 1 [0223.470] wcscmp (_String1="PEEQP_M.VSS", _String2="..") returned 1 [0223.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x83338d0 [0223.470] wcscpy (in: _Dest=0x83338d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.470] wcscat (in: _Dest=0x83338d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.470] wcscat (in: _Dest=0x83338d0, _Source="PEEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" [0223.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83338d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0223.471] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc25b2c00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc25b2c00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x2fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEEQP_U.VSS", cAlternateFileName="")) returned 1 [0223.471] wcscmp (_String1="PEEQP_U.VSS", _String2=".") returned 1 [0223.471] wcscmp (_String1="PEEQP_U.VSS", _String2="..") returned 1 [0223.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8333970 [0223.471] wcscpy (in: _Dest=0x8333970, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.471] wcscat (in: _Dest=0x8333970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.471] wcscat (in: _Dest=0x8333970, _Source="PEEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" [0223.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b54 [0223.472] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce46ee00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xce46ee00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEHEAT_M.VSS", cAlternateFileName="")) returned 1 [0223.472] wcscmp (_String1="PEHEAT_M.VSS", _String2=".") returned 1 [0223.472] wcscmp (_String1="PEHEAT_M.VSS", _String2="..") returned 1 [0223.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333a10 [0223.472] wcscpy (in: _Dest=0x8333a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.472] wcscat (in: _Dest=0x8333a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.472] wcscat (in: _Dest=0x8333a10, _Source="PEHEAT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" [0223.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0223.473] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9018300, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9018300, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEHEAT_U.VSS", cAlternateFileName="")) returned 1 [0223.473] wcscmp (_String1="PEHEAT_U.VSS", _String2=".") returned 1 [0223.473] wcscmp (_String1="PEHEAT_U.VSS", _String2="..") returned 1 [0223.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333ab0 [0223.473] wcscpy (in: _Dest=0x8333ab0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.473] wcscat (in: _Dest=0x8333ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.473] wcscat (in: _Dest=0x8333ab0, _Source="PEHEAT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" [0223.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0223.474] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59dbb00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf59dbb00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x52800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEINST_M.VSS", cAlternateFileName="")) returned 1 [0223.474] wcscmp (_String1="PEINST_M.VSS", _String2=".") returned 1 [0223.474] wcscmp (_String1="PEINST_M.VSS", _String2="..") returned 1 [0223.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333b50 [0223.474] wcscpy (in: _Dest=0x8333b50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.474] wcscat (in: _Dest=0x8333b50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.474] wcscat (in: _Dest=0x8333b50, _Source="PEINST_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" [0223.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0223.475] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1239f300, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa4fbb570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1239f300, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x50c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEINST_U.VSS", cAlternateFileName="")) returned 1 [0223.475] wcscmp (_String1="PEINST_U.VSS", _String2=".") returned 1 [0223.475] wcscmp (_String1="PEINST_U.VSS", _String2="..") returned 1 [0223.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333bf0 [0223.475] wcscpy (in: _Dest=0x8333bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.476] wcscat (in: _Dest=0x8333bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.476] wcscat (in: _Dest=0x8333bf0, _Source="PEINST_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" [0223.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0223.476] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149c4d00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa4fbb570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x149c4d00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_M.VSS", cAlternateFileName="")) returned 1 [0223.476] wcscmp (_String1="PEPIPE_M.VSS", _String2=".") returned 1 [0223.476] wcscmp (_String1="PEPIPE_M.VSS", _String2="..") returned 1 [0223.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333c90 [0223.477] wcscpy (in: _Dest=0x8333c90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.477] wcscat (in: _Dest=0x8333c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.477] wcscat (in: _Dest=0x8333c90, _Source="PEPIPE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" [0223.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0223.478] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfd8f900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa50c5f10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcfd8f900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_M.VST", cAlternateFileName="")) returned 1 [0223.478] wcscmp (_String1="PEPIPE_M.VST", _String2=".") returned 1 [0223.478] wcscmp (_String1="PEPIPE_M.VST", _String2="..") returned 1 [0223.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333d30 [0223.478] wcscpy (in: _Dest=0x8333d30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.478] wcscat (in: _Dest=0x8333d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.478] wcscat (in: _Dest=0x8333d30, _Source="PEPIPE_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" [0223.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0223.479] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x182fd400, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50c5f10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x182fd400, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_U.VSS", cAlternateFileName="")) returned 1 [0223.479] wcscmp (_String1="PEPIPE_U.VSS", _String2=".") returned 1 [0223.479] wcscmp (_String1="PEPIPE_U.VSS", _String2="..") returned 1 [0223.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333dd0 [0223.479] wcscpy (in: _Dest=0x8333dd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.479] wcscat (in: _Dest=0x8333dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.479] wcscat (in: _Dest=0x8333dd0, _Source="PEPIPE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" [0223.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0223.480] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda938e00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa50c5f10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xda938e00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_U.VST", cAlternateFileName="")) returned 1 [0223.480] wcscmp (_String1="PEPIPE_U.VST", _String2=".") returned 1 [0223.480] wcscmp (_String1="PEPIPE_U.VST", _String2="..") returned 1 [0223.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333e70 [0223.480] wcscpy (in: _Dest=0x8333e70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.480] wcscat (in: _Dest=0x8333e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.480] wcscat (in: _Dest=0x8333e70, _Source="PEPIPE_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" [0223.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0223.481] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22ea6900, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50ec070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22ea6900, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPUMP_M.VSS", cAlternateFileName="")) returned 1 [0223.481] wcscmp (_String1="PEPUMP_M.VSS", _String2=".") returned 1 [0223.481] wcscmp (_String1="PEPUMP_M.VSS", _String2="..") returned 1 [0223.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333f10 [0223.481] wcscpy (in: _Dest=0x8333f10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.481] wcscat (in: _Dest=0x8333f10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.481] wcscat (in: _Dest=0x8333f10, _Source="PEPUMP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" [0223.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0223.482] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da4fe00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50ec070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2da4fe00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPUMP_U.VSS", cAlternateFileName="")) returned 1 [0223.482] wcscmp (_String1="PEPUMP_U.VSS", _String2=".") returned 1 [0223.482] wcscmp (_String1="PEPUMP_U.VSS", _String2="..") returned 1 [0223.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8333fb0 [0223.482] wcscpy (in: _Dest=0x8333fb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.482] wcscat (in: _Dest=0x8333fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.482] wcscat (in: _Dest=0x8333fb0, _Source="PEPUMP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" [0223.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0223.483] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dedc00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50ec070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47dedc00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x89c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERIPH_M.VSS", cAlternateFileName="")) returned 1 [0223.483] wcscmp (_String1="PERIPH_M.VSS", _String2=".") returned 1 [0223.483] wcscmp (_String1="PERIPH_M.VSS", _String2="..") returned 1 [0223.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8334050 [0223.483] wcscpy (in: _Dest=0x8334050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.483] wcscat (in: _Dest=0x8334050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.483] wcscat (in: _Dest=0x8334050, _Source="PERIPH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" [0223.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0223.484] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6349e700, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6349e700, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x87c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERIPH_U.VSS", cAlternateFileName="")) returned 1 [0223.484] wcscmp (_String1="PERIPH_U.VSS", _String2=".") returned 1 [0223.484] wcscmp (_String1="PERIPH_U.VSS", _String2="..") returned 1 [0223.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x83340f0 [0223.484] wcscpy (in: _Dest=0x83340f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.484] wcscat (in: _Dest=0x83340f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.484] wcscat (in: _Dest=0x83340f0, _Source="PERIPH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" [0223.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83340f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0223.485] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65ac4100, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65ac4100, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_M.VSS", cAlternateFileName="")) returned 1 [0223.485] wcscmp (_String1="PERT_M.VSS", _String2=".") returned 1 [0223.485] wcscmp (_String1="PERT_M.VSS", _String2="..") returned 1 [0223.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x8334190 [0223.485] wcscpy (in: _Dest=0x8334190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.485] wcscat (in: _Dest=0x8334190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.485] wcscat (in: _Dest=0x8334190, _Source="PERT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" [0223.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0223.487] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf5e800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdcf5e800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_M.VST", cAlternateFileName="")) returned 1 [0223.487] wcscmp (_String1="PERT_M.VST", _String2=".") returned 1 [0223.488] wcscmp (_String1="PERT_M.VST", _String2="..") returned 1 [0223.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x8334230 [0223.488] wcscpy (in: _Dest=0x8334230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.488] wcscat (in: _Dest=0x8334230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.488] wcscat (in: _Dest=0x8334230, _Source="PERT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" [0223.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0223.489] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680e9b00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x680e9b00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_U.VSS", cAlternateFileName="")) returned 1 [0223.489] wcscmp (_String1="PERT_U.VSS", _String2=".") returned 1 [0223.489] wcscmp (_String1="PERT_U.VSS", _String2="..") returned 1 [0223.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x83342d0 [0223.489] wcscpy (in: _Dest=0x83342d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.489] wcscat (in: _Dest=0x83342d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.489] wcscat (in: _Dest=0x83342d0, _Source="PERT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" [0223.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83342d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0223.490] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf584200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdf584200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_U.VST", cAlternateFileName="")) returned 1 [0223.490] wcscmp (_String1="PERT_U.VST", _String2=".") returned 1 [0223.490] wcscmp (_String1="PERT_U.VST", _String2="..") returned 1 [0223.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x8334370 [0223.490] wcscpy (in: _Dest=0x8334370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.490] wcscat (in: _Dest=0x8334370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.490] wcscat (in: _Dest=0x8334370, _Source="PERT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" [0223.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f8 [0223.491] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778de400, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x778de400, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x32800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVALV_M.VSS", cAlternateFileName="")) returned 1 [0223.491] wcscmp (_String1="PEVALV_M.VSS", _String2=".") returned 1 [0223.491] wcscmp (_String1="PEVALV_M.VSS", _String2="..") returned 1 [0223.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8334410 [0223.491] wcscpy (in: _Dest=0x8334410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.491] wcscat (in: _Dest=0x8334410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.491] wcscat (in: _Dest=0x8334410, _Source="PEVALV_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" [0223.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0223.493] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870d2d00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x870d2d00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x31400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVALV_U.VSS", cAlternateFileName="")) returned 1 [0223.493] wcscmp (_String1="PEVALV_U.VSS", _String2=".") returned 1 [0223.493] wcscmp (_String1="PEVALV_U.VSS", _String2="..") returned 1 [0223.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x83344b0 [0223.493] wcscpy (in: _Dest=0x83344b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.493] wcscat (in: _Dest=0x83344b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.493] wcscat (in: _Dest=0x83344b0, _Source="PEVALV_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" [0223.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83344b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0223.494] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90969500, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90969500, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVESS_M.VSS", cAlternateFileName="")) returned 1 [0223.494] wcscmp (_String1="PEVESS_M.VSS", _String2=".") returned 1 [0223.494] wcscmp (_String1="PEVESS_M.VSS", _String2="..") returned 1 [0223.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x8334550 [0223.494] wcscpy (in: _Dest=0x8334550, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.494] wcscat (in: _Dest=0x8334550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.494] wcscat (in: _Dest=0x8334550, _Source="PEVESS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" [0223.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0223.495] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1ffd00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a1ffd00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVESS_U.VSS", cAlternateFileName="")) returned 1 [0223.495] wcscmp (_String1="PEVESS_U.VSS", _String2=".") returned 1 [0223.495] wcscmp (_String1="PEVESS_U.VSS", _String2="..") returned 1 [0223.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x83345f0 [0223.495] wcscpy (in: _Dest=0x83345f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.495] wcscat (in: _Dest=0x83345f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.495] wcscat (in: _Dest=0x83345f0, _Source="PEVESS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" [0223.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83345f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bac [0223.496] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaad07300, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaad07300, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE1_M.VSS", cAlternateFileName="")) returned 1 [0223.496] wcscmp (_String1="PIPE1_M.VSS", _String2=".") returned 1 [0223.496] wcscmp (_String1="PIPE1_M.VSS", _String2="..") returned 1 [0223.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8334690 [0223.496] wcscpy (in: _Dest=0x8334690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.496] wcscat (in: _Dest=0x8334690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.496] wcscat (in: _Dest=0x8334690, _Source="PIPE1_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" [0223.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0223.497] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb80e900, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbb80e900, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x36600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE1_U.VSS", cAlternateFileName="")) returned 1 [0223.497] wcscmp (_String1="PIPE1_U.VSS", _String2=".") returned 1 [0223.497] wcscmp (_String1="PIPE1_U.VSS", _String2="..") returned 1 [0223.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8334730 [0223.498] wcscpy (in: _Dest=0x8334730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.498] wcscat (in: _Dest=0x8334730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.498] wcscat (in: _Dest=0x8334730, _Source="PIPE1_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" [0223.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0223.622] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc76cab00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc76cab00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE2_M.VSS", cAlternateFileName="")) returned 1 [0223.622] wcscmp (_String1="PIPE2_M.VSS", _String2=".") returned 1 [0223.622] wcscmp (_String1="PIPE2_M.VSS", _String2="..") returned 1 [0223.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc0e8 [0223.622] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.622] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.622] wcscat (in: _Dest=0x81dc0e8, _Source="PIPE2_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" [0223.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0223.623] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2274000, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51aa750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2274000, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE2_U.VSS", cAlternateFileName="")) returned 1 [0223.623] wcscmp (_String1="PIPE2_U.VSS", _String2=".") returned 1 [0223.623] wcscmp (_String1="PIPE2_U.VSS", _String2="..") returned 1 [0223.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x83347d0 [0223.623] wcscpy (in: _Dest=0x83347d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.623] wcscat (in: _Dest=0x83347d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.623] wcscat (in: _Dest=0x83347d0, _Source="PIPE2_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" [0223.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83347d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264c [0223.625] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde130200, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51d08b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde130200, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x56600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANT_M.VSS", cAlternateFileName="")) returned 1 [0223.625] wcscmp (_String1="PLANT_M.VSS", _String2=".") returned 1 [0223.625] wcscmp (_String1="PLANT_M.VSS", _String2="..") returned 1 [0223.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x8334870 [0223.625] wcscpy (in: _Dest=0x8334870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.625] wcscat (in: _Dest=0x8334870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.625] wcscat (in: _Dest=0x8334870, _Source="PLANT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" [0223.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8334870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0223.626] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9fec400, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5268e30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9fec400, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x51000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANT_U.VSS", cAlternateFileName="")) returned 1 [0223.779] wcscmp (_String1="PLANT_U.VSS", _String2=".") returned 1 [0223.779] wcscmp (_String1="PLANT_U.VSS", _String2="..") returned 1 [0223.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819ab38 [0223.779] wcscpy (in: _Dest=0x819ab38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.779] wcscat (in: _Dest=0x819ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.779] wcscat (in: _Dest=0x819ab38, _Source="PLANT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" [0223.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0223.780] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb440400, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa5268e30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb440400, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLMPIP_M.VST", cAlternateFileName="")) returned 1 [0223.780] wcscmp (_String1="PLMPIP_M.VST", _String2=".") returned 1 [0223.781] wcscmp (_String1="PLMPIP_M.VST", _String2="..") returned 1 [0223.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b8f8 [0223.781] wcscpy (in: _Dest=0x819b8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.781] wcscat (in: _Dest=0x819b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.781] wcscat (in: _Dest=0x819b8f8, _Source="PLMPIP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" [0223.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0223.782] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5fe9900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa5268e30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5fe9900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLMPIP_U.VST", cAlternateFileName="")) returned 1 [0223.782] wcscmp (_String1="PLMPIP_U.VST", _String2=".") returned 1 [0223.782] wcscmp (_String1="PLMPIP_U.VST", _String2="..") returned 1 [0223.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a6d8 [0223.782] wcscpy (in: _Dest=0x819a6d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.782] wcscat (in: _Dest=0x819a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.782] wcscat (in: _Dest=0x819a6d8, _Source="PLMPIP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" [0223.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0223.784] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b8800, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x31b8800, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x16200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLTLYT_M.VST", cAlternateFileName="")) returned 1 [0223.784] wcscmp (_String1="PLTLYT_M.VST", _String2=".") returned 1 [0223.784] wcscmp (_String1="PLTLYT_M.VST", _String2="..") returned 1 [0223.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c1b8 [0223.784] wcscpy (in: _Dest=0x819c1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.784] wcscat (in: _Dest=0x819c1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.784] wcscat (in: _Dest=0x819c1b8, _Source="PLTLYT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" [0223.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0223.785] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10387700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10387700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLTLYT_U.VST", cAlternateFileName="")) returned 1 [0223.785] wcscmp (_String1="PLTLYT_U.VST", _String2=".") returned 1 [0223.785] wcscmp (_String1="PLTLYT_U.VST", _String2="..") returned 1 [0223.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bad8 [0223.785] wcscpy (in: _Dest=0x819bad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.785] wcscat (in: _Dest=0x819bad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.785] wcscat (in: _Dest=0x819bad8, _Source="PLTLYT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" [0223.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0223.786] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3882c00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3882c00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUMB_M.VSS", cAlternateFileName="")) returned 1 [0223.786] wcscmp (_String1="PLUMB_M.VSS", _String2=".") returned 1 [0223.786] wcscmp (_String1="PLUMB_M.VSS", _String2="..") returned 1 [0223.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b5d8 [0223.786] wcscpy (in: _Dest=0x819b5d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.786] wcscat (in: _Dest=0x819b5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.786] wcscat (in: _Dest=0x819b5d8, _Source="PLUMB_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" [0223.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0223.787] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe42c100, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfe42c100, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUMB_U.VSS", cAlternateFileName="")) returned 1 [0223.787] wcscmp (_String1="PLUMB_U.VSS", _String2=".") returned 1 [0223.787] wcscmp (_String1="PLUMB_U.VSS", _String2="..") returned 1 [0223.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b218 [0223.787] wcscpy (in: _Dest=0x819b218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.787] wcscat (in: _Dest=0x819b218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.787] wcscat (in: _Dest=0x819b218, _Source="PLUMB_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" [0223.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0223.788] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f92900, ftCreationTime.dwHighDateTime=0x1c982e4, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37f92900, ftLastWriteTime.dwHighDateTime=0x1c982e4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRCIMP.XLS", cAlternateFileName="")) returned 1 [0223.788] wcscmp (_String1="PRCIMP.XLS", _String2=".") returned 1 [0223.788] wcscmp (_String1="PRCIMP.XLS", _String2="..") returned 1 [0223.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819aef8 [0223.788] wcscpy (in: _Dest=0x819aef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.788] wcscat (in: _Dest=0x819aef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.788] wcscat (in: _Dest=0x819aef8, _Source="PRCIMP.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" [0223.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819aef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0223.789] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d38200, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe8d38200, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x81a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRCIMP_M.VST", cAlternateFileName="")) returned 1 [0223.789] wcscmp (_String1="PRCIMP_M.VST", _String2=".") returned 1 [0223.789] wcscmp (_String1="PRCIMP_M.VST", _String2="..") returned 1 [0223.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a818 [0223.789] wcscpy (in: _Dest=0x819a818, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.789] wcscat (in: _Dest=0x819a818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.789] wcscat (in: _Dest=0x819a818, _Source="PRCIMP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" [0223.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0223.790] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4a1a00, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdf4a1a00, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRCIMP_U.VST", cAlternateFileName="")) returned 1 [0223.790] wcscmp (_String1="PRCIMP_U.VST", _String2=".") returned 1 [0223.790] wcscmp (_String1="PRCIMP_U.VST", _String2="..") returned 1 [0223.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ae58 [0223.791] wcscpy (in: _Dest=0x819ae58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.791] wcscat (in: _Dest=0x819ae58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.791] wcscat (in: _Dest=0x819ae58, _Source="PRCIMP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" [0223.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ae58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0223.791] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34038600, ftCreationTime.dwHighDateTime=0x1ca1ccd, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34038600, ftLastWriteTime.dwHighDateTime=0x1ca1ccd, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJMGT.XLS", cAlternateFileName="")) returned 1 [0223.791] wcscmp (_String1="PRJMGT.XLS", _String2=".") returned 1 [0223.792] wcscmp (_String1="PRJMGT.XLS", _String2="..") returned 1 [0223.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819ba38 [0223.792] wcscpy (in: _Dest=0x819ba38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.792] wcscat (in: _Dest=0x819ba38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.792] wcscat (in: _Dest=0x819ba38, _Source="PRJMGT.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" [0223.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ba38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0223.793] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe48ac00, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52db250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfe48ac00, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0xf7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJMGT_M.VST", cAlternateFileName="")) returned 1 [0223.793] wcscmp (_String1="PRJMGT_M.VST", _String2=".") returned 1 [0223.793] wcscmp (_String1="PRJMGT_M.VST", _String2="..") returned 1 [0223.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819bc18 [0223.793] wcscpy (in: _Dest=0x819bc18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.793] wcscat (in: _Dest=0x819bc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.793] wcscat (in: _Dest=0x819bc18, _Source="PRJMGT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" [0223.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819bc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0223.794] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf38e1700, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52db250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf38e1700, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0xf5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJMGT_U.VST", cAlternateFileName="")) returned 1 [0223.794] wcscmp (_String1="PRJMGT_U.VST", _String2=".") returned 1 [0223.794] wcscmp (_String1="PRJMGT_U.VST", _String2="..") returned 1 [0223.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c398 [0223.794] wcscpy (in: _Dest=0x819c398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.794] wcscat (in: _Dest=0x819c398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.794] wcscat (in: _Dest=0x819c398, _Source="PRJMGT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" [0223.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0223.795] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5fb000, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5fb000, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRKRD_M.VSS", cAlternateFileName="")) returned 1 [0223.795] wcscmp (_String1="PRKRD_M.VSS", _String2=".") returned 1 [0223.795] wcscmp (_String1="PRKRD_M.VSS", _String2="..") returned 1 [0223.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819b178 [0223.795] wcscpy (in: _Dest=0x819b178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.795] wcscat (in: _Dest=0x819b178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.795] wcscat (in: _Dest=0x819b178, _Source="PRKRD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" [0223.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0223.796] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1286be00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1286be00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRKRD_U.VSS", cAlternateFileName="")) returned 1 [0223.796] wcscmp (_String1="PRKRD_U.VSS", _String2=".") returned 1 [0223.796] wcscmp (_String1="PRKRD_U.VSS", _String2="..") returned 1 [0223.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x819be98 [0223.796] wcscpy (in: _Dest=0x819be98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.796] wcscat (in: _Dest=0x819be98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.796] wcscat (in: _Dest=0x819be98, _Source="PRKRD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" [0223.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819be98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0223.797] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34038600, ftCreationTime.dwHighDateTime=0x1ca1ccd, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34038600, ftLastWriteTime.dwHighDateTime=0x1ca1ccd, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJTL.XLS", cAlternateFileName="")) returned 1 [0223.797] wcscmp (_String1="PROJTL.XLS", _String2=".") returned 1 [0223.797] wcscmp (_String1="PROJTL.XLS", _String2="..") returned 1 [0223.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x819af98 [0223.798] wcscpy (in: _Dest=0x819af98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.798] wcscat (in: _Dest=0x819af98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.798] wcscat (in: _Dest=0x819af98, _Source="PROJTL.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" [0223.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819af98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0223.798] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa346e00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa346e00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x63400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJTL_M.VST", cAlternateFileName="")) returned 1 [0223.799] wcscmp (_String1="PROJTL_M.VST", _String2=".") returned 1 [0223.799] wcscmp (_String1="PROJTL_M.VST", _String2="..") returned 1 [0223.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b2b8 [0223.799] wcscpy (in: _Dest=0x819b2b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.799] wcscat (in: _Dest=0x819b2b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.799] wcscat (in: _Dest=0x819b2b8, _Source="PROJTL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" [0223.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2664 [0223.800] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e8d00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x43e8d00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x63000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJTL_U.VST", cAlternateFileName="")) returned 1 [0223.800] wcscmp (_String1="PROJTL_U.VST", _String2=".") returned 1 [0223.800] wcscmp (_String1="PROJTL_U.VST", _String2="..") returned 1 [0223.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c2f8 [0223.800] wcscpy (in: _Dest=0x819c2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.800] wcscat (in: _Dest=0x819c2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.800] wcscat (in: _Dest=0x819c2f8, _Source="PROJTL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" [0223.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b4 [0223.801] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875fe300, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5327510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x875fe300, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSAVL_M.VST", cAlternateFileName="")) returned 1 [0223.801] wcscmp (_String1="PRSAVL_M.VST", _String2=".") returned 1 [0223.801] wcscmp (_String1="PRSAVL_M.VST", _String2="..") returned 1 [0223.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819a778 [0223.801] wcscpy (in: _Dest=0x819a778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.801] wcscat (in: _Dest=0x819a778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.801] wcscat (in: _Dest=0x819a778, _Source="PRSAVL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" [0223.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819a778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0223.802] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb81e00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5327510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8fb81e00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSAVL_U.VST", cAlternateFileName="")) returned 1 [0223.802] wcscmp (_String1="PRSAVL_U.VST", _String2=".") returned 1 [0223.802] wcscmp (_String1="PRSAVL_U.VST", _String2="..") returned 1 [0223.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819ac78 [0223.802] wcscpy (in: _Dest=0x819ac78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.802] wcscat (in: _Dest=0x819ac78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.802] wcscat (in: _Dest=0x819ac78, _Source="PRSAVL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" [0223.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819ac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0223.803] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95adff00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5327510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95adff00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x51400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSSTS_M.VST", cAlternateFileName="")) returned 1 [0223.803] wcscmp (_String1="PRSSTS_M.VST", _String2=".") returned 1 [0223.803] wcscmp (_String1="PRSSTS_M.VST", _String2="..") returned 1 [0223.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819b0d8 [0223.803] wcscpy (in: _Dest=0x819b0d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.803] wcscat (in: _Dest=0x819b0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.803] wcscat (in: _Dest=0x819b0d8, _Source="PRSSTS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" [0223.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819b0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c8 [0223.804] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba3e000, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ba3e000, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x50c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSSTS_U.VST", cAlternateFileName="")) returned 1 [0223.804] wcscmp (_String1="PRSSTS_U.VST", _String2=".") returned 1 [0223.804] wcscmp (_String1="PRSSTS_U.VST", _String2="..") returned 1 [0223.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x819c078 [0223.804] wcscpy (in: _Dest=0x819c078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.804] wcscat (in: _Dest=0x819c078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.805] wcscat (in: _Dest=0x819c078, _Source="PRSSTS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" [0223.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x819c078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0223.806] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee61100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ee61100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTRCT_M.VST", cAlternateFileName="")) returned 1 [0223.806] wcscmp (_String1="PSTRCT_M.VST", _String2=".") returned 1 [0223.806] wcscmp (_String1="PSTRCT_M.VST", _String2="..") returned 1 [0223.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e116e8 [0223.806] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.806] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.806] wcscat (in: _Dest=0x3e116e8, _Source="PSTRCT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" [0223.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0223.807] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62799800, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62799800, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTRCT_U.VST", cAlternateFileName="")) returned 1 [0223.807] wcscmp (_String1="PSTRCT_U.VST", _String2=".") returned 1 [0223.807] wcscmp (_String1="PSTRCT_U.VST", _String2="..") returned 1 [0223.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e120e8 [0223.807] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.807] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.807] wcscat (in: _Dest=0x3e120e8, _Source="PSTRCT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" [0223.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0223.808] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161a4500, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x161a4500, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSCLD_M.VSS", cAlternateFileName="")) returned 1 [0223.808] wcscmp (_String1="PTSCLD_M.VSS", _String2=".") returned 1 [0223.808] wcscmp (_String1="PTSCLD_M.VSS", _String2="..") returned 1 [0223.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12228 [0223.808] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.808] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.808] wcscat (in: _Dest=0x3e12228, _Source="PTSCLD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" [0223.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0223.809] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187c9f00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x187c9f00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSCLD_U.VSS", cAlternateFileName="")) returned 1 [0223.809] wcscmp (_String1="PTSCLD_U.VSS", _String2=".") returned 1 [0223.809] wcscmp (_String1="PTSCLD_U.VSS", _String2="..") returned 1 [0223.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12408 [0223.809] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.810] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.810] wcscat (in: _Dest=0x3e12408, _Source="PTSCLD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" [0223.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0223.810] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f22f600, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2f22f600, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSINT_M.VSS", cAlternateFileName="")) returned 1 [0223.810] wcscmp (_String1="PTSINT_M.VSS", _String2=".") returned 1 [0223.811] wcscmp (_String1="PTSINT_M.VSS", _String2="..") returned 1 [0223.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11a08 [0223.811] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.811] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.811] wcscat (in: _Dest=0x3e11a08, _Source="PTSINT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" [0223.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0223.812] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c94d00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x45c94d00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x56e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSINT_U.VSS", cAlternateFileName="")) returned 1 [0223.812] wcscmp (_String1="PTSINT_U.VSS", _String2=".") returned 1 [0223.812] wcscmp (_String1="PTSINT_U.VSS", _String2="..") returned 1 [0223.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11968 [0223.812] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.812] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.812] wcscat (in: _Dest=0x3e11968, _Source="PTSINT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" [0223.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0223.813] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7911c700, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7911c700, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSKST_M.VST", cAlternateFileName="")) returned 1 [0223.813] wcscmp (_String1="PTSKST_M.VST", _String2=".") returned 1 [0223.813] wcscmp (_String1="PTSKST_M.VST", _String2="..") returned 1 [0223.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11468 [0223.813] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.813] wcscat (in: _Dest=0x3e11468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.813] wcscat (in: _Dest=0x3e11468, _Source="PTSKST_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" [0223.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0223.814] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038d500, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8038d500, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSKST_U.VST", cAlternateFileName="")) returned 1 [0223.814] wcscmp (_String1="PTSKST_U.VST", _String2=".") returned 1 [0223.814] wcscmp (_String1="PTSKST_U.VST", _String2="..") returned 1 [0223.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11328 [0223.814] wcscpy (in: _Dest=0x3e11328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.814] wcscat (in: _Dest=0x3e11328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.814] wcscat (in: _Dest=0x3e11328, _Source="PTSKST_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" [0223.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0223.815] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf05b00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4cf05b00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x25c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTUSCL_M.VSS", cAlternateFileName="")) returned 1 [0223.815] wcscmp (_String1="PTUSCL_M.VSS", _String2=".") returned 1 [0223.815] wcscmp (_String1="PTUSCL_M.VSS", _String2="..") returned 1 [0223.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11d28 [0223.815] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.815] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.815] wcscat (in: _Dest=0x3e11d28, _Source="PTUSCL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" [0223.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0223.895] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54176900, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54176900, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTUSCL_U.VSS", cAlternateFileName="")) returned 1 [0223.895] wcscmp (_String1="PTUSCL_U.VSS", _String2=".") returned 1 [0223.895] wcscmp (_String1="PTUSCL_U.VSS", _String2="..") returned 1 [0223.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11148 [0223.895] wcscpy (in: _Dest=0x3e11148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0223.895] wcscat (in: _Dest=0x3e11148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0223.895] wcscat (in: _Dest=0x3e11148, _Source="PTUSCL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" [0224.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0224.840] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745b3b00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x745b3b00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x35c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RACK_M.VST", cAlternateFileName="")) returned 1 [0224.840] wcscmp (_String1="RACK_M.VST", _String2=".") returned 1 [0224.840] wcscmp (_String1="RACK_M.VST", _String2="..") returned 1 [0224.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e111e8 [0224.840] wcscpy (in: _Dest=0x3e111e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0224.840] wcscat (in: _Dest=0x3e111e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0224.840] wcscat (in: _Dest=0x3e111e8, _Source="RACK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" [0224.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e111e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0224.841] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791fef00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x791fef00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RACK_U.VST", cAlternateFileName="")) returned 1 [0224.841] wcscmp (_String1="RACK_U.VST", _String2=".") returned 1 [0224.841] wcscmp (_String1="RACK_U.VST", _String2="..") returned 1 [0224.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e10608 [0224.841] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0224.841] wcscat (in: _Dest=0x3e10608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0224.842] wcscat (in: _Dest=0x3e10608, _Source="RACK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" [0224.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0224.844] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698c9300, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x698c9300, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x54a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKEQP_M.VSS", cAlternateFileName="")) returned 1 [0225.335] wcscmp (_String1="RCKEQP_M.VSS", _String2=".") returned 1 [0225.335] wcscmp (_String1="RCKEQP_M.VSS", _String2="..") returned 1 [0225.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11148 [0225.335] wcscpy (in: _Dest=0x3e11148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.336] wcscat (in: _Dest=0x3e11148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.336] wcscat (in: _Dest=0x3e11148, _Source="RCKEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" [0225.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0225.337] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8032ea00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8032ea00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x53600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKEQP_U.VSS", cAlternateFileName="")) returned 1 [0225.337] wcscmp (_String1="RCKEQP_U.VSS", _String2=".") returned 1 [0225.337] wcscmp (_String1="RCKEQP_U.VSS", _String2="..") returned 1 [0225.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11788 [0225.337] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.337] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.337] wcscat (in: _Dest=0x3e11788, _Source="RCKEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" [0225.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0225.339] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993b9b00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x993b9b00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xd7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKSVR_M.VSS", cAlternateFileName="")) returned 1 [0225.339] wcscmp (_String1="RCKSVR_M.VSS", _String2=".") returned 1 [0225.339] wcscmp (_String1="RCKSVR_M.VSS", _String2="..") returned 1 [0225.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11fa8 [0225.339] wcscpy (in: _Dest=0x3e11fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.339] wcscat (in: _Dest=0x3e11fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.339] wcscat (in: _Dest=0x3e11fa8, _Source="RCKSVR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" [0225.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0225.340] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7090000, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb7090000, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xd6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKSVR_U.VSS", cAlternateFileName="")) returned 1 [0225.340] wcscmp (_String1="RCKSVR_U.VSS", _String2=".") returned 1 [0225.340] wcscmp (_String1="RCKSVR_U.VSS", _String2="..") returned 1 [0225.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db968 [0225.340] wcscpy (in: _Dest=0x81db968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.340] wcscat (in: _Dest=0x81db968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.340] wcscat (in: _Dest=0x81db968, _Source="RCKSVR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" [0225.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0225.342] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfee100, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcfee100, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECRT_M.VSS", cAlternateFileName="")) returned 1 [0225.342] wcscmp (_String1="RECRT_M.VSS", _String2=".") returned 1 [0225.342] wcscmp (_String1="RECRT_M.VSS", _String2="..") returned 1 [0225.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc908 [0225.342] wcscpy (in: _Dest=0x81dc908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.342] wcscat (in: _Dest=0x81dc908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.342] wcscat (in: _Dest=0x81dc908, _Source="RECRT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" [0225.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0225.343] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc425ef00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc425ef00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECRT_U.VSS", cAlternateFileName="")) returned 1 [0225.343] wcscmp (_String1="RECRT_U.VSS", _String2=".") returned 1 [0225.343] wcscmp (_String1="RECRT_U.VSS", _String2="..") returned 1 [0225.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc4a8 [0225.343] wcscpy (in: _Dest=0x81dc4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.343] wcscat (in: _Dest=0x81dc4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.343] wcscat (in: _Dest=0x81dc4a8, _Source="RECRT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" [0225.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0225.345] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4cfd00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcb4cfd00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECSHP_M.VSS", cAlternateFileName="")) returned 1 [0225.345] wcscmp (_String1="RECSHP_M.VSS", _String2=".") returned 1 [0225.345] wcscmp (_String1="RECSHP_M.VSS", _String2="..") returned 1 [0225.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc548 [0225.345] wcscpy (in: _Dest=0x81dc548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.345] wcscat (in: _Dest=0x81dc548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.345] wcscat (in: _Dest=0x81dc548, _Source="RECSHP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" [0225.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0225.346] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd142de00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd142de00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x42200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECSHP_U.VSS", cAlternateFileName="")) returned 1 [0225.346] wcscmp (_String1="RECSHP_U.VSS", _String2=".") returned 1 [0225.346] wcscmp (_String1="RECSHP_U.VSS", _String2="..") returned 1 [0225.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc228 [0225.346] wcscpy (in: _Dest=0x81dc228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.346] wcscat (in: _Dest=0x81dc228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.346] wcscat (in: _Dest=0x81dc228, _Source="RECSHP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" [0225.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0225.347] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd738bf00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd738bf00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="REGSTR_M.VSS", cAlternateFileName="")) returned 1 [0225.347] wcscmp (_String1="REGSTR_M.VSS", _String2=".") returned 1 [0225.347] wcscmp (_String1="REGSTR_M.VSS", _String2="..") returned 1 [0225.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc2c8 [0225.347] wcscpy (in: _Dest=0x81dc2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.347] wcscat (in: _Dest=0x81dc2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.348] wcscat (in: _Dest=0x81dc2c8, _Source="REGSTR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" [0225.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0225.349] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2ea000, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdd2ea000, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="REGSTR_U.VSS", cAlternateFileName="")) returned 1 [0225.349] wcscmp (_String1="REGSTR_U.VSS", _String2=".") returned 1 [0225.349] wcscmp (_String1="REGSTR_U.VSS", _String2="..") returned 1 [0225.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc368 [0225.349] wcscpy (in: _Dest=0x81dc368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.349] wcscat (in: _Dest=0x81dc368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.349] wcscat (in: _Dest=0x81dc368, _Source="REGSTR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" [0225.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0225.350] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f35400, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe1f35400, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_M.VSS", cAlternateFileName="")) returned 1 [0225.350] wcscmp (_String1="ROAD_M.VSS", _String2=".") returned 1 [0225.350] wcscmp (_String1="ROAD_M.VSS", _String2="..") returned 1 [0225.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dc408 [0225.350] wcscpy (in: _Dest=0x81dc408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.350] wcscat (in: _Dest=0x81dc408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.350] wcscat (in: _Dest=0x81dc408, _Source="ROAD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" [0225.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0225.351] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e93500, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7e93500, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_U.VSS", cAlternateFileName="")) returned 1 [0225.351] wcscmp (_String1="ROAD_U.VSS", _String2=".") returned 1 [0225.351] wcscmp (_String1="ROAD_U.VSS", _String2="..") returned 1 [0225.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81db828 [0225.351] wcscpy (in: _Dest=0x81db828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.351] wcscat (in: _Dest=0x81db828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.352] wcscat (in: _Dest=0x81db828, _Source="ROAD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" [0225.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0225.353] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6db400, ftCreationTime.dwHighDateTime=0x1c67041, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc6db400, ftLastWriteTime.dwHighDateTime=0x1c67041, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SALSUM.XLS", cAlternateFileName="")) returned 1 [0225.353] wcscmp (_String1="SALSUM.XLS", _String2=".") returned 1 [0225.353] wcscmp (_String1="SALSUM.XLS", _String2="..") returned 1 [0225.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81db8c8 [0225.353] wcscpy (in: _Dest=0x81db8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.353] wcscat (in: _Dest=0x81db8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.353] wcscat (in: _Dest=0x81db8c8, _Source="SALSUM.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" [0225.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0225.354] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa99800, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1fa99800, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0xbee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SALSUM_M.VST", cAlternateFileName="")) returned 1 [0225.354] wcscmp (_String1="SALSUM_M.VST", _String2=".") returned 1 [0225.354] wcscmp (_String1="SALSUM_M.VST", _String2="..") returned 1 [0225.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc048 [0225.354] wcscpy (in: _Dest=0x81dc048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.354] wcscat (in: _Dest=0x81dc048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.354] wcscat (in: _Dest=0x81dc048, _Source="SALSUM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" [0225.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0225.355] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ef0300, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x14ef0300, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0xbce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SALSUM_U.VST", cAlternateFileName="")) returned 1 [0225.355] wcscmp (_String1="SALSUM_U.VST", _String2=".") returned 1 [0225.355] wcscmp (_String1="SALSUM_U.VST", _String2="..") returned 1 [0225.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbfa8 [0225.355] wcscpy (in: _Dest=0x81dbfa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.355] wcscat (in: _Dest=0x81dbfa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.355] wcscat (in: _Dest=0x81dbfa8, _Source="SALSUM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" [0225.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbfa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0225.356] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39eba100, ftCreationTime.dwHighDateTime=0x1ca48e3, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39eba100, ftLastWriteTime.dwHighDateTime=0x1ca48e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCALL_M.VSS", cAlternateFileName="")) returned 1 [0225.356] wcscmp (_String1="SDCALL_M.VSS", _String2=".") returned 1 [0225.356] wcscmp (_String1="SDCALL_M.VSS", _String2="..") returned 1 [0225.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c72d8 [0225.357] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.357] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.357] wcscat (in: _Dest=0x2c72d8, _Source="SDCALL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" [0225.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0225.358] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8270a00, ftCreationTime.dwHighDateTime=0x1ca48e4, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8270a00, ftLastWriteTime.dwHighDateTime=0x1ca48e4, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCALL_U.VSS", cAlternateFileName="")) returned 1 [0225.358] wcscmp (_String1="SDCALL_U.VSS", _String2=".") returned 1 [0225.358] wcscmp (_String1="SDCALL_U.VSS", _String2="..") returned 1 [0225.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c70f8 [0225.358] wcscpy (in: _Dest=0x2c70f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.358] wcscat (in: _Dest=0x2c70f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.358] wcscat (in: _Dest=0x2c70f8, _Source="SDCALL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" [0225.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c70f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0225.359] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb874a100, ftCreationTime.dwHighDateTime=0x1ca4e03, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb874a100, ftLastWriteTime.dwHighDateTime=0x1ca4e03, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCONT_M.VSS", cAlternateFileName="")) returned 1 [0225.359] wcscmp (_String1="SDCONT_M.VSS", _String2=".") returned 1 [0225.359] wcscmp (_String1="SDCONT_M.VSS", _String2="..") returned 1 [0225.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7378 [0225.359] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.359] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.359] wcscat (in: _Dest=0x2c7378, _Source="SDCONT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" [0225.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0225.360] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22dc800, ftCreationTime.dwHighDateTime=0x1ca4e03, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe22dc800, ftLastWriteTime.dwHighDateTime=0x1ca4e03, nFileSizeHigh=0x0, nFileSizeLow=0x37e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCONT_U.VSS", cAlternateFileName="")) returned 1 [0225.360] wcscmp (_String1="SDCONT_U.VSS", _String2=".") returned 1 [0225.361] wcscmp (_String1="SDCONT_U.VSS", _String2="..") returned 1 [0225.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7698 [0225.361] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.361] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.361] wcscat (in: _Dest=0x2c7698, _Source="SDCONT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" [0225.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0225.362] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefd9000, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaefd9000, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_M.VSS", cAlternateFileName="")) returned 1 [0225.362] wcscmp (_String1="SDL_M.VSS", _String2=".") returned 1 [0225.362] wcscmp (_String1="SDL_M.VSS", _String2="..") returned 1 [0225.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d9778 [0225.362] wcscpy (in: _Dest=0x81d9778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.362] wcscat (in: _Dest=0x81d9778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.362] wcscat (in: _Dest=0x81d9778, _Source="SDL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" [0225.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0225.363] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bc2700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95bc2700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_M.VST", cAlternateFileName="")) returned 1 [0225.363] wcscmp (_String1="SDL_M.VST", _String2=".") returned 1 [0225.363] wcscmp (_String1="SDL_M.VST", _String2="..") returned 1 [0225.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81d96e0 [0225.363] wcscpy (in: _Dest=0x81d96e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.364] wcscat (in: _Dest=0x81d96e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.364] wcscat (in: _Dest=0x81d96e0, _Source="SDL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" [0225.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d96e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0225.365] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6249e00, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb6249e00, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_U.VSS", cAlternateFileName="")) returned 1 [0225.365] wcscmp (_String1="SDL_U.VSS", _String2=".") returned 1 [0225.365] wcscmp (_String1="SDL_U.VSS", _String2="..") returned 1 [0225.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81daea0 [0225.365] wcscpy (in: _Dest=0x81daea0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.365] wcscat (in: _Dest=0x81daea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.365] wcscat (in: _Dest=0x81daea0, _Source="SDL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" [0225.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b8 [0225.366] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981e8100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x981e8100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_U.VST", cAlternateFileName="")) returned 1 [0225.366] wcscmp (_String1="SDL_U.VST", _String2=".") returned 1 [0225.366] wcscmp (_String1="SDL_U.VST", _String2="..") returned 1 [0225.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81dafd0 [0225.366] wcscpy (in: _Dest=0x81dafd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.366] wcscat (in: _Dest=0x81dafd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.366] wcscat (in: _Dest=0x81dafd0, _Source="SDL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" [0225.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dafd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0225.368] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d91600, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa2d91600, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECACC_M.VST", cAlternateFileName="")) returned 1 [0225.368] wcscmp (_String1="SECACC_M.VST", _String2=".") returned 1 [0225.368] wcscmp (_String1="SECACC_M.VST", _String2="..") returned 1 [0225.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7738 [0225.368] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.368] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.368] wcscat (in: _Dest=0x2c7738, _Source="SECACC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" [0225.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc [0225.369] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab315100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab315100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECACC_U.VST", cAlternateFileName="")) returned 1 [0225.369] wcscmp (_String1="SECACC_U.VST", _String2=".") returned 1 [0225.369] wcscmp (_String1="SECACC_U.VST", _String2="..") returned 1 [0225.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7238 [0225.369] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.369] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.369] wcscat (in: _Dest=0x2c7238, _Source="SECACC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" [0225.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0225.756] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcccaf500, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa5431eb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcccaf500, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVER_M.VSS", cAlternateFileName="")) returned 1 [0225.756] wcscmp (_String1="SERVER_M.VSS", _String2=".") returned 1 [0225.756] wcscmp (_String1="SERVER_M.VSS", _String2="..") returned 1 [0225.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e111e8 [0225.756] wcscpy (in: _Dest=0x3e111e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.756] wcscat (in: _Dest=0x3e111e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.756] wcscat (in: _Dest=0x3e111e8, _Source="SERVER_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" [0225.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e111e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0225.832] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3714c00, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa5431eb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe3714c00, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVER_U.VSS", cAlternateFileName="")) returned 1 [0225.832] wcscmp (_String1="SERVER_U.VSS", _String2=".") returned 1 [0225.832] wcscmp (_String1="SERVER_U.VSS", _String2="..") returned 1 [0225.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e10608 [0225.832] wcscpy (in: _Dest=0x3e10608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.832] wcscat (in: _Dest=0x3e10608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.832] wcscat (in: _Dest=0x3e10608, _Source="SERVER_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" [0225.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0225.833] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b54900, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7b54900, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPMCH_M.VSS", cAlternateFileName="")) returned 1 [0225.833] wcscmp (_String1="SHPMCH_M.VSS", _String2=".") returned 1 [0225.833] wcscmp (_String1="SHPMCH_M.VSS", _String2="..") returned 1 [0225.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11d28 [0225.833] wcscpy (in: _Dest=0x3e11d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.833] wcscat (in: _Dest=0x3e11d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.833] wcscat (in: _Dest=0x3e11d28, _Source="SHPMCH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" [0225.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0225.834] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf94600, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbf94600, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x42800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPMCH_U.VSS", cAlternateFileName="")) returned 1 [0225.834] wcscmp (_String1="SHPMCH_U.VSS", _String2=".") returned 1 [0225.835] wcscmp (_String1="SHPMCH_U.VSS", _String2="..") returned 1 [0225.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e116e8 [0225.835] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.835] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.835] wcscat (in: _Dest=0x3e116e8, _Source="SHPMCH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" [0225.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0225.836] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b788f00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b788f00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPREC_M.VSS", cAlternateFileName="")) returned 1 [0225.836] wcscmp (_String1="SHPREC_M.VSS", _String2=".") returned 1 [0225.836] wcscmp (_String1="SHPREC_M.VSS", _String2="..") returned 1 [0225.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e120e8 [0225.836] wcscpy (in: _Dest=0x3e120e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.836] wcscat (in: _Dest=0x3e120e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.836] wcscat (in: _Dest=0x3e120e8, _Source="SHPREC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" [0225.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e120e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0225.837] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28957e00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28957e00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPREC_U.VSS", cAlternateFileName="")) returned 1 [0225.837] wcscmp (_String1="SHPREC_U.VSS", _String2=".") returned 1 [0225.837] wcscmp (_String1="SHPREC_U.VSS", _String2="..") returned 1 [0225.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12228 [0225.837] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.837] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.837] wcscat (in: _Dest=0x3e12228, _Source="SHPREC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" [0225.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0225.838] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419e2f00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x419e2f00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPSTR_M.VSS", cAlternateFileName="")) returned 1 [0225.838] wcscmp (_String1="SHPSTR_M.VSS", _String2=".") returned 1 [0225.838] wcscmp (_String1="SHPSTR_M.VSS", _String2="..") returned 1 [0225.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e12408 [0225.838] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.838] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.838] wcscat (in: _Dest=0x3e12408, _Source="SHPSTR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" [0225.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0225.839] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58448600, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58448600, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPSTR_U.VSS", cAlternateFileName="")) returned 1 [0225.839] wcscmp (_String1="SHPSTR_U.VSS", _String2=".") returned 1 [0225.839] wcscmp (_String1="SHPSTR_U.VSS", _String2="..") returned 1 [0225.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11a08 [0225.839] wcscpy (in: _Dest=0x3e11a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.839] wcscat (in: _Dest=0x3e11a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.839] wcscat (in: _Dest=0x3e11a08, _Source="SHPSTR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" [0225.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0225.840] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64304800, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64304800, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x22e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITACC_M.VSS", cAlternateFileName="")) returned 1 [0225.840] wcscmp (_String1="SITACC_M.VSS", _String2=".") returned 1 [0225.840] wcscmp (_String1="SITACC_M.VSS", _String2="..") returned 1 [0225.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11968 [0225.840] wcscpy (in: _Dest=0x3e11968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0225.840] wcscat (in: _Dest=0x3e11968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0225.840] wcscat (in: _Dest=0x3e11968, _Source="SITACC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" [0225.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0225.842] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeadd00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6eeadd00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x22a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITACC_U.VSS", cAlternateFileName="")) returned 1 [0226.095] wcscmp (_String1="SITACC_U.VSS", _String2=".") returned 1 [0226.095] wcscmp (_String1="SITACC_U.VSS", _String2="..") returned 1 [0226.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11468 [0226.095] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.095] wcscat (in: _Dest=0x3e11468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.095] wcscat (in: _Dest=0x3e11468, _Source="SITACC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" [0226.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0226.185] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ebe600, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5ebe600, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITPLN_M.VST", cAlternateFileName="")) returned 1 [0226.185] wcscmp (_String1="SITPLN_M.VST", _String2=".") returned 1 [0226.185] wcscmp (_String1="SITPLN_M.VST", _String2="..") returned 1 [0226.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11328 [0226.185] wcscpy (in: _Dest=0x3e11328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.185] wcscat (in: _Dest=0x3e11328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.185] wcscat (in: _Dest=0x3e11328, _Source="SITPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" [0226.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0226.186] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d7a800, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1d7a800, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITPLN_U.VST", cAlternateFileName="")) returned 1 [0226.186] wcscmp (_String1="SITPLN_U.VST", _String2=".") returned 1 [0226.186] wcscmp (_String1="SITPLN_U.VST", _String2="..") returned 1 [0226.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e10a68 [0226.187] wcscpy (in: _Dest=0x3e10a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.187] wcscat (in: _Dest=0x3e10a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.187] wcscat (in: _Dest=0x3e10a68, _Source="SITPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" [0226.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e10a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0226.188] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89ff00, ftCreationTime.dwHighDateTime=0x1ca6c62, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe89ff00, ftLastWriteTime.dwHighDateTime=0x1ca6c62, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIXSIG_M.VST", cAlternateFileName="")) returned 1 [0226.188] wcscmp (_String1="SIXSIG_M.VST", _String2=".") returned 1 [0226.188] wcscmp (_String1="SIXSIG_M.VST", _String2="..") returned 1 [0226.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd4e8 [0226.188] wcscpy (in: _Dest=0x81dd4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.188] wcscat (in: _Dest=0x81dd4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.188] wcscat (in: _Dest=0x81dd4e8, _Source="SIXSIG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" [0226.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0226.189] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbda00, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6fbda00, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIXSIG_U.VST", cAlternateFileName="")) returned 1 [0226.189] wcscmp (_String1="SIXSIG_U.VST", _String2=".") returned 1 [0226.189] wcscmp (_String1="SIXSIG_U.VST", _String2="..") returned 1 [0226.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc0e8 [0226.189] wcscpy (in: _Dest=0x81dc0e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.189] wcscat (in: _Dest=0x81dc0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.189] wcscat (in: _Dest=0x81dc0e8, _Source="SIXSIG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" [0226.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0226.190] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8feb600, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8feb600, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPCPLN_M.VST", cAlternateFileName="")) returned 1 [0226.190] wcscmp (_String1="SPCPLN_M.VST", _String2=".") returned 1 [0226.190] wcscmp (_String1="SPCPLN_M.VST", _String2="..") returned 1 [0226.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db6e8 [0226.190] wcscpy (in: _Dest=0x81db6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.191] wcscat (in: _Dest=0x81db6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.191] wcscat (in: _Dest=0x81db6e8, _Source="SPCPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" [0226.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0226.192] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd025c400, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd025c400, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPCPLN_U.VST", cAlternateFileName="")) returned 1 [0226.192] wcscmp (_String1="SPCPLN_U.VST", _String2=".") returned 1 [0226.192] wcscmp (_String1="SPCPLN_U.VST", _String2="..") returned 1 [0226.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc188 [0226.192] wcscpy (in: _Dest=0x81dc188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.192] wcscat (in: _Dest=0x81dc188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.192] wcscat (in: _Dest=0x81dc188, _Source="SPCPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" [0226.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0226.193] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x832eda00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x832eda00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRBR_M.VSS", cAlternateFileName="")) returned 1 [0226.193] wcscmp (_String1="SPRBR_M.VSS", _String2=".") returned 1 [0226.193] wcscmp (_String1="SPRBR_M.VSS", _String2="..") returned 1 [0226.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81db648 [0226.193] wcscpy (in: _Dest=0x81db648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.193] wcscat (in: _Dest=0x81db648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.193] wcscat (in: _Dest=0x81db648, _Source="SPRBR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" [0226.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0226.194] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9641aa00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9641aa00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRBR_U.VSS", cAlternateFileName="")) returned 1 [0226.194] wcscmp (_String1="SPRBR_U.VSS", _String2=".") returned 1 [0226.194] wcscmp (_String1="SPRBR_U.VSS", _String2="..") returned 1 [0226.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc9a8 [0226.194] wcscpy (in: _Dest=0x81dc9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.195] wcscat (in: _Dest=0x81dc9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.195] wcscat (in: _Dest=0x81dc9a8, _Source="SPRBR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" [0226.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b54 [0226.196] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x55a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWA_M.VSS", cAlternateFileName="")) returned 1 [0226.196] wcscmp (_String1="SPWA_M.VSS", _String2=".") returned 1 [0226.196] wcscmp (_String1="SPWA_M.VSS", _String2="..") returned 1 [0226.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dccc8 [0226.196] wcscpy (in: _Dest=0x81dccc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.196] wcscat (in: _Dest=0x81dccc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.196] wcscat (in: _Dest=0x81dccc8, _Source="SPWA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" [0226.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0226.197] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x55c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWA_U.VSS", cAlternateFileName="")) returned 1 [0226.197] wcscmp (_String1="SPWA_U.VSS", _String2=".") returned 1 [0226.197] wcscmp (_String1="SPWA_U.VSS", _String2="..") returned 1 [0226.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dcd68 [0226.197] wcscpy (in: _Dest=0x81dcd68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.197] wcscat (in: _Dest=0x81dcd68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.197] wcscat (in: _Dest=0x81dcd68, _Source="SPWA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" [0226.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0226.200] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWC_M.VSS", cAlternateFileName="")) returned 1 [0226.200] wcscmp (_String1="SPWC_M.VSS", _String2=".") returned 1 [0226.200] wcscmp (_String1="SPWC_M.VSS", _String2="..") returned 1 [0226.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dcae8 [0226.201] wcscpy (in: _Dest=0x81dcae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.201] wcscat (in: _Dest=0x81dcae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.201] wcscat (in: _Dest=0x81dcae8, _Source="SPWC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" [0226.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x279c [0226.202] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWC_U.VSS", cAlternateFileName="")) returned 1 [0226.202] wcscmp (_String1="SPWC_U.VSS", _String2=".") returned 1 [0226.202] wcscmp (_String1="SPWC_U.VSS", _String2="..") returned 1 [0226.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dca48 [0226.202] wcscpy (in: _Dest=0x81dca48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.202] wcscat (in: _Dest=0x81dca48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.202] wcscat (in: _Dest=0x81dca48, _Source="SPWC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" [0226.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dca48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0226.203] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWT_M.VSS", cAlternateFileName="")) returned 1 [0226.203] wcscmp (_String1="SPWT_M.VSS", _String2=".") returned 1 [0226.203] wcscmp (_String1="SPWT_M.VSS", _String2="..") returned 1 [0226.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dcb88 [0226.203] wcscpy (in: _Dest=0x81dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.203] wcscat (in: _Dest=0x81dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.203] wcscat (in: _Dest=0x81dcb88, _Source="SPWT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" [0226.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0226.204] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWT_U.VSS", cAlternateFileName="")) returned 1 [0226.204] wcscmp (_String1="SPWT_U.VSS", _String2=".") returned 1 [0226.204] wcscmp (_String1="SPWT_U.VSS", _String2="..") returned 1 [0226.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x81dbc88 [0226.205] wcscpy (in: _Dest=0x81dbc88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.205] wcscat (in: _Dest=0x81dbc88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.205] wcscat (in: _Dest=0x81dbc88, _Source="SPWT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" [0226.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0226.206] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e9fc00, ftCreationTime.dwHighDateTime=0x1ca6c70, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70e9fc00, ftLastWriteTime.dwHighDateTime=0x1ca6c70, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPW_M.VST", cAlternateFileName="")) returned 1 [0226.206] wcscmp (_String1="SPW_M.VST", _String2=".") returned 1 [0226.206] wcscmp (_String1="SPW_M.VST", _String2="..") returned 1 [0226.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db068 [0226.206] wcscpy (in: _Dest=0x81db068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.206] wcscat (in: _Dest=0x81db068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.206] wcscat (in: _Dest=0x81db068, _Source="SPW_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" [0226.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0226.207] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPW_U.VST", cAlternateFileName="")) returned 1 [0226.207] wcscmp (_String1="SPW_U.VST", _String2=".") returned 1 [0226.207] wcscmp (_String1="SPW_U.VST", _String2="..") returned 1 [0226.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db100 [0226.207] wcscpy (in: _Dest=0x81db100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.207] wcscat (in: _Dest=0x81db100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.207] wcscat (in: _Dest=0x81db100, _Source="SPW_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" [0226.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0226.208] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ac600, ftCreationTime.dwHighDateTime=0x1ca48e4, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c9ac600, ftLastWriteTime.dwHighDateTime=0x1ca48e4, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSFLOW_M.VSS", cAlternateFileName="")) returned 1 [0226.208] wcscmp (_String1="SSFLOW_M.VSS", _String2=".") returned 1 [0226.208] wcscmp (_String1="SSFLOW_M.VSS", _String2="..") returned 1 [0226.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbbe8 [0226.208] wcscpy (in: _Dest=0x81dbbe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.208] wcscat (in: _Dest=0x81dbbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.208] wcscat (in: _Dest=0x81dbbe8, _Source="SSFLOW_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" [0226.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0226.215] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e70b00, ftCreationTime.dwHighDateTime=0x1ca48eb, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3e70b00, ftLastWriteTime.dwHighDateTime=0x1ca48eb, nFileSizeHigh=0x0, nFileSizeLow=0xec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSFLOW_U.VSS", cAlternateFileName="")) returned 1 [0226.215] wcscmp (_String1="SSFLOW_U.VSS", _String2=".") returned 1 [0226.215] wcscmp (_String1="SSFLOW_U.VSS", _String2="..") returned 1 [0226.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81db788 [0226.215] wcscpy (in: _Dest=0x81db788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.215] wcscat (in: _Dest=0x81db788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.215] wcscat (in: _Dest=0x81db788, _Source="SSFLOW_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" [0226.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0226.221] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf68700, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1cf68700, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0xa6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSHOQ_M.VSS", cAlternateFileName="")) returned 1 [0226.221] wcscmp (_String1="SSHOQ_M.VSS", _String2=".") returned 1 [0226.221] wcscmp (_String1="SSHOQ_M.VSS", _String2="..") returned 1 [0226.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dba08 [0226.221] wcscpy (in: _Dest=0x81dba08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.221] wcscat (in: _Dest=0x81dba08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.221] wcscat (in: _Dest=0x81dba08, _Source="SSHOQ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" [0226.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dba08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0226.223] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba42100, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6ba42100, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0xa3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSHOQ_U.VSS", cAlternateFileName="")) returned 1 [0226.223] wcscmp (_String1="SSHOQ_U.VSS", _String2=".") returned 1 [0226.223] wcscmp (_String1="SSHOQ_U.VSS", _String2="..") returned 1 [0226.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dbaa8 [0226.223] wcscpy (in: _Dest=0x81dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.223] wcscat (in: _Dest=0x81dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.223] wcscat (in: _Dest=0x81dbaa8, _Source="SSHOQ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" [0226.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0226.224] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73fc5c00, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73fc5c00, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x3d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL_M.VSS", cAlternateFileName="")) returned 1 [0226.224] wcscmp (_String1="SYMBOL_M.VSS", _String2=".") returned 1 [0226.224] wcscmp (_String1="SYMBOL_M.VSS", _String2="..") returned 1 [0226.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbb48 [0226.224] wcscpy (in: _Dest=0x81dbb48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.224] wcscat (in: _Dest=0x81dbb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.224] wcscat (in: _Dest=0x81dbb48, _Source="SYMBOL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" [0226.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0226.225] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d85c400, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7d85c400, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x3ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL_U.VSS", cAlternateFileName="")) returned 1 [0226.225] wcscmp (_String1="SYMBOL_U.VSS", _String2=".") returned 1 [0226.225] wcscmp (_String1="SYMBOL_U.VSS", _String2="..") returned 1 [0226.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbd28 [0226.225] wcscpy (in: _Dest=0x81dbd28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.225] wcscat (in: _Dest=0x81dbd28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.225] wcscat (in: _Dest=0x81dbd28, _Source="SYMBOL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" [0226.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbd28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2680 [0226.227] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f139a00, ftCreationTime.dwHighDateTime=0x1c33be1, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2f139a00, ftLastWriteTime.dwHighDateTime=0x1c33be1, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELINE.MPP", cAlternateFileName="")) returned 1 [0226.227] wcscmp (_String1="TIMELINE.MPP", _String2=".") returned 1 [0226.227] wcscmp (_String1="TIMELINE.MPP", _String2="..") returned 1 [0226.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbdc8 [0226.227] wcscpy (in: _Dest=0x81dbdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.227] wcscat (in: _Dest=0x81dbdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.227] wcscat (in: _Dest=0x81dbdc8, _Source="TIMELINE.MPP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" [0226.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b5c [0226.228] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1490a00, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa1490a00, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x99e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_M.VSS", cAlternateFileName="")) returned 1 [0226.228] wcscmp (_String1="TIMELN_M.VSS", _String2=".") returned 1 [0226.228] wcscmp (_String1="TIMELN_M.VSS", _String2="..") returned 1 [0226.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbe68 [0226.229] wcscpy (in: _Dest=0x81dbe68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.229] wcscat (in: _Dest=0x81dbe68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.229] wcscat (in: _Dest=0x81dbe68, _Source="TIMELN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" [0226.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbe68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0226.229] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae05900, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdae05900, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_M.VST", cAlternateFileName="")) returned 1 [0226.230] wcscmp (_String1="TIMELN_M.VST", _String2=".") returned 1 [0226.230] wcscmp (_String1="TIMELN_M.VST", _String2="..") returned 1 [0226.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dbf08 [0226.230] wcscpy (in: _Dest=0x81dbf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.230] wcscat (in: _Dest=0x81dbf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.230] wcscat (in: _Dest=0x81dbf08, _Source="TIMELN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" [0226.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dbf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0226.231] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc178c900, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc178c900, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x98800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_U.VSS", cAlternateFileName="")) returned 1 [0226.231] wcscmp (_String1="TIMELN_U.VSS", _String2=".") returned 1 [0226.231] wcscmp (_String1="TIMELN_U.VSS", _String2="..") returned 1 [0226.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd588 [0226.231] wcscpy (in: _Dest=0x81dd588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.231] wcscat (in: _Dest=0x81dd588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.231] wcscat (in: _Dest=0x81dd588, _Source="TIMELN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" [0226.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0226.232] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde73e000, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde73e000, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_U.VST", cAlternateFileName="")) returned 1 [0226.232] wcscmp (_String1="TIMELN_U.VST", _String2=".") returned 1 [0226.232] wcscmp (_String1="TIMELN_U.VST", _String2="..") returned 1 [0226.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc728 [0226.232] wcscpy (in: _Dest=0x81dc728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.232] wcscat (in: _Dest=0x81dc728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.232] wcscat (in: _Dest=0x81dc728, _Source="TIMELN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" [0226.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bbc [0226.234] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc335e00, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc335e00, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE_M.VSS", cAlternateFileName="")) returned 1 [0226.234] wcscmp (_String1="TITLE_M.VSS", _String2=".") returned 1 [0226.234] wcscmp (_String1="TITLE_M.VSS", _String2="..") returned 1 [0226.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc688 [0226.234] wcscpy (in: _Dest=0x81dc688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.234] wcscat (in: _Dest=0x81dc688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.234] wcscat (in: _Dest=0x81dc688, _Source="TITLE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" [0226.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0226.235] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5bcc600, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5bcc600, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE_U.VSS", cAlternateFileName="")) returned 1 [0226.235] wcscmp (_String1="TITLE_U.VSS", _String2=".") returned 1 [0226.236] wcscmp (_String1="TITLE_U.VSS", _String2="..") returned 1 [0226.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc7c8 [0226.236] wcscpy (in: _Dest=0x81dc7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.236] wcscat (in: _Dest=0x81dc7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.236] wcscat (in: _Dest=0x81dc7c8, _Source="TITLE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" [0226.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0226.237] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d9b500, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2d9b500, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x30800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_M.VSS", cAlternateFileName="")) returned 1 [0226.237] wcscmp (_String1="TQM_M.VSS", _String2=".") returned 1 [0226.237] wcscmp (_String1="TQM_M.VSS", _String2="..") returned 1 [0226.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db2c8 [0226.237] wcscpy (in: _Dest=0x81db2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.237] wcscat (in: _Dest=0x81db2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.237] wcscat (in: _Dest=0x81db2c8, _Source="TQM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" [0226.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4 [0226.238] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2076700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2076700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_M.VST", cAlternateFileName="")) returned 1 [0226.238] wcscmp (_String1="TQM_M.VST", _String2=".") returned 1 [0226.238] wcscmp (_String1="TQM_M.VST", _String2="..") returned 1 [0226.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db230 [0226.238] wcscpy (in: _Dest=0x81db230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.238] wcscat (in: _Dest=0x81db230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.238] wcscat (in: _Dest=0x81db230, _Source="TQM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" [0226.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0226.300] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff6a400, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeff6a400, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_U.VSS", cAlternateFileName="")) returned 1 [0226.300] wcscmp (_String1="TQM_U.VSS", _String2=".") returned 1 [0226.300] wcscmp (_String1="TQM_U.VSS", _String2="..") returned 1 [0226.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db198 [0226.300] wcscpy (in: _Dest=0x81db198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.300] wcscat (in: _Dest=0x81db198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.300] wcscat (in: _Dest=0x81db198, _Source="TQM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" [0226.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0226.301] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59aee00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe59aee00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_U.VST", cAlternateFileName="")) returned 1 [0226.301] wcscmp (_String1="TQM_U.VST", _String2=".") returned 1 [0226.301] wcscmp (_String1="TQM_U.VST", _String2="..") returned 1 [0226.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db528 [0226.302] wcscpy (in: _Dest=0x81db528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.302] wcscat (in: _Dest=0x81db528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.302] wcscat (in: _Dest=0x81db528, _Source="TQM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" [0226.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0226.303] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe26600, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfbe26600, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x44200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSP_M.VSS", cAlternateFileName="")) returned 1 [0226.618] wcscmp (_String1="TRANSP_M.VSS", _String2=".") returned 1 [0226.618] wcscmp (_String1="TRANSP_M.VSS", _String2="..") returned 1 [0226.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11788 [0226.618] wcscpy (in: _Dest=0x3e11788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.618] wcscat (in: _Dest=0x3e11788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.618] wcscat (in: _Dest=0x3e11788, _Source="TRANSP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" [0226.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0226.619] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3097400, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3097400, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x27200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSP_U.VSS", cAlternateFileName="")) returned 1 [0226.619] wcscmp (_String1="TRANSP_U.VSS", _String2=".") returned 1 [0226.619] wcscmp (_String1="TRANSP_U.VSS", _String2="..") returned 1 [0226.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11148 [0226.619] wcscpy (in: _Dest=0x3e11148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.619] wcscat (in: _Dest=0x3e11148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.619] wcscat (in: _Dest=0x3e11148, _Source="TRANSP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" [0226.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0226.620] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ff5500, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8ff5500, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLACT_M.VSS", cAlternateFileName="")) returned 1 [0226.620] wcscmp (_String1="UMLACT_M.VSS", _String2=".") returned 1 [0226.620] wcscmp (_String1="UMLACT_M.VSS", _String2="..") returned 1 [0226.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcea8 [0226.621] wcscpy (in: _Dest=0x81dcea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.621] wcscat (in: _Dest=0x81dcea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.621] wcscat (in: _Dest=0x81dcea8, _Source="UMLACT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" [0226.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a94 [0226.622] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef53600, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xef53600, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLACT_U.VSS", cAlternateFileName="")) returned 1 [0226.622] wcscmp (_String1="UMLACT_U.VSS", _String2=".") returned 1 [0226.622] wcscmp (_String1="UMLACT_U.VSS", _String2="..") returned 1 [0226.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcf48 [0226.622] wcscpy (in: _Dest=0x81dcf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.622] wcscat (in: _Dest=0x81dcf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.622] wcscat (in: _Dest=0x81dcf48, _Source="UMLACT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" [0226.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc4 [0226.623] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b9ea00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13b9ea00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOL_M.VSS", cAlternateFileName="")) returned 1 [0226.623] wcscmp (_String1="UMLCOL_M.VSS", _String2=".") returned 1 [0226.623] wcscmp (_String1="UMLCOL_M.VSS", _String2="..") returned 1 [0226.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd128 [0226.623] wcscpy (in: _Dest=0x81dd128, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.623] wcscat (in: _Dest=0x81dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.623] wcscat (in: _Dest=0x81dd128, _Source="UMLCOL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" [0226.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0226.624] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19afcb00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19afcb00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOL_U.VSS", cAlternateFileName="")) returned 1 [0226.624] wcscmp (_String1="UMLCOL_U.VSS", _String2=".") returned 1 [0226.624] wcscmp (_String1="UMLCOL_U.VSS", _String2="..") returned 1 [0226.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd1c8 [0226.624] wcscpy (in: _Dest=0x81dd1c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.625] wcscat (in: _Dest=0x81dd1c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.625] wcscat (in: _Dest=0x81dd1c8, _Source="UMLCOL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" [0226.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd1c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0226.626] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e747f00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e747f00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOM_M.VSS", cAlternateFileName="")) returned 1 [0226.626] wcscmp (_String1="UMLCOM_M.VSS", _String2=".") returned 1 [0226.626] wcscmp (_String1="UMLCOM_M.VSS", _String2="..") returned 1 [0226.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd268 [0226.626] wcscpy (in: _Dest=0x81dd268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.626] wcscat (in: _Dest=0x81dd268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.626] wcscat (in: _Dest=0x81dd268, _Source="UMLCOM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" [0226.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0226.628] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23393300, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23393300, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOM_U.VSS", cAlternateFileName="")) returned 1 [0226.628] wcscmp (_String1="UMLCOM_U.VSS", _String2=".") returned 1 [0226.628] wcscmp (_String1="UMLCOM_U.VSS", _String2="..") returned 1 [0226.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd308 [0226.628] wcscpy (in: _Dest=0x81dd308, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.628] wcscat (in: _Dest=0x81dd308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.628] wcscat (in: _Dest=0x81dd308, _Source="UMLCOM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" [0226.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0226.629] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b916e00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b916e00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDEP_M.VSS", cAlternateFileName="")) returned 1 [0226.629] wcscmp (_String1="UMLDEP_M.VSS", _String2=".") returned 1 [0226.629] wcscmp (_String1="UMLDEP_M.VSS", _String2="..") returned 1 [0226.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd3a8 [0226.629] wcscpy (in: _Dest=0x81dd3a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.629] wcscat (in: _Dest=0x81dd3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.629] wcscat (in: _Dest=0x81dd3a8, _Source="UMLDEP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" [0226.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0226.630] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31874f00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x31874f00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDEP_U.VSS", cAlternateFileName="")) returned 1 [0226.630] wcscmp (_String1="UMLDEP_U.VSS", _String2=".") returned 1 [0226.630] wcscmp (_String1="UMLDEP_U.VSS", _String2="..") returned 1 [0226.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcc28 [0226.630] wcscpy (in: _Dest=0x81dcc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.630] wcscat (in: _Dest=0x81dcc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.630] wcscat (in: _Dest=0x81dcc28, _Source="UMLDEP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" [0226.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0226.635] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37686d00, ftCreationTime.dwHighDateTime=0x1c68be5, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37686d00, ftLastWriteTime.dwHighDateTime=0x1c68be5, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDG_M.VSD", cAlternateFileName="")) returned 1 [0226.635] wcscmp (_String1="UMLDG_M.VSD", _String2=".") returned 1 [0226.635] wcscmp (_String1="UMLDG_M.VSD", _String2="..") returned 1 [0226.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dce08 [0226.635] wcscpy (in: _Dest=0x81dce08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.635] wcscat (in: _Dest=0x81dce08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.635] wcscat (in: _Dest=0x81dce08, _Source="UMLDG_M.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" [0226.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dce08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0226.636] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8a4500, ftCreationTime.dwHighDateTime=0x1c67518, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfd8a4500, ftLastWriteTime.dwHighDateTime=0x1c67518, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDG_U.VSD", cAlternateFileName="")) returned 1 [0226.636] wcscmp (_String1="UMLDG_U.VSD", _String2=".") returned 1 [0226.636] wcscmp (_String1="UMLDG_U.VSD", _String2="..") returned 1 [0226.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81dc5e8 [0226.636] wcscpy (in: _Dest=0x81dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.637] wcscat (in: _Dest=0x81dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.637] wcscat (in: _Dest=0x81dc5e8, _Source="UMLDG_U.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" [0226.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0226.643] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc1fc00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecc1fc00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLMOD_M.VST", cAlternateFileName="")) returned 1 [0226.643] wcscmp (_String1="UMLMOD_M.VST", _String2=".") returned 1 [0226.643] wcscmp (_String1="UMLMOD_M.VST", _String2="..") returned 1 [0226.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dc868 [0226.643] wcscpy (in: _Dest=0x81dc868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.643] wcscat (in: _Dest=0x81dc868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.643] wcscat (in: _Dest=0x81dc868, _Source="UMLMOD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" [0226.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dc868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0226.644] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b7dd00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2b7dd00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLMOD_U.VST", cAlternateFileName="")) returned 1 [0226.644] wcscmp (_String1="UMLMOD_U.VST", _String2=".") returned 1 [0226.644] wcscmp (_String1="UMLMOD_U.VST", _String2="..") returned 1 [0226.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dcfe8 [0226.644] wcscpy (in: _Dest=0x81dcfe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.644] wcscat (in: _Dest=0x81dcfe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.644] wcscat (in: _Dest=0x81dcfe8, _Source="UMLMOD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" [0226.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dcfe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0226.645] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39df8a00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39df8a00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSEQ_M.VSS", cAlternateFileName="")) returned 1 [0226.645] wcscmp (_String1="UMLSEQ_M.VSS", _String2=".") returned 1 [0226.645] wcscmp (_String1="UMLSEQ_M.VSS", _String2="..") returned 1 [0226.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd088 [0226.645] wcscpy (in: _Dest=0x81dd088, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.645] wcscat (in: _Dest=0x81dd088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.645] wcscat (in: _Dest=0x81dd088, _Source="UMLSEQ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" [0226.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0226.647] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4237c500, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4237c500, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSEQ_U.VSS", cAlternateFileName="")) returned 1 [0226.647] wcscmp (_String1="UMLSEQ_U.VSS", _String2=".") returned 1 [0226.647] wcscmp (_String1="UMLSEQ_U.VSS", _String2="..") returned 1 [0226.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x81dd448 [0226.647] wcscpy (in: _Dest=0x81dd448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.647] wcscat (in: _Dest=0x81dd448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.647] wcscat (in: _Dest=0x81dd448, _Source="UMLSEQ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" [0226.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dd448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0226.648] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482da600, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x482da600, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTA_M.VSS", cAlternateFileName="")) returned 1 [0226.648] wcscmp (_String1="UMLSTA_M.VSS", _String2=".") returned 1 [0226.648] wcscmp (_String1="UMLSTA_M.VSS", _String2="..") returned 1 [0226.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7238 [0226.648] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.648] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.648] wcscat (in: _Dest=0x2c7238, _Source="UMLSTA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" [0226.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0226.649] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e238700, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e238700, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTA_U.VSS", cAlternateFileName="")) returned 1 [0226.649] wcscmp (_String1="UMLSTA_U.VSS", _String2=".") returned 1 [0226.649] wcscmp (_String1="UMLSTA_U.VSS", _String2="..") returned 1 [0226.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7198 [0226.649] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.649] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.649] wcscat (in: _Dest=0x2c7198, _Source="UMLSTA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" [0226.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0226.650] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60052a00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x60052a00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x36600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTR_M.VSS", cAlternateFileName="")) returned 1 [0226.650] wcscmp (_String1="UMLSTR_M.VSS", _String2=".") returned 1 [0226.650] wcscmp (_String1="UMLSTR_M.VSS", _String2="..") returned 1 [0226.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c75f8 [0226.650] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.650] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.650] wcscat (in: _Dest=0x2c75f8, _Source="UMLSTR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" [0226.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0226.651] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e6cd00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71e6cd00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTR_U.VSS", cAlternateFileName="")) returned 1 [0226.651] wcscmp (_String1="UMLSTR_U.VSS", _String2=".") returned 1 [0226.651] wcscmp (_String1="UMLSTR_U.VSS", _String2="..") returned 1 [0226.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c74b8 [0226.651] wcscpy (in: _Dest=0x2c74b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.651] wcscat (in: _Dest=0x2c74b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.651] wcscat (in: _Dest=0x2c74b8, _Source="UMLSTR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" [0226.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c74b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0226.652] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76ab8100, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76ab8100, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLUSE_M.VSS", cAlternateFileName="")) returned 1 [0226.652] wcscmp (_String1="UMLUSE_M.VSS", _String2=".") returned 1 [0226.652] wcscmp (_String1="UMLUSE_M.VSS", _String2="..") returned 1 [0226.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7558 [0226.652] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.652] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.652] wcscat (in: _Dest=0x2c7558, _Source="UMLUSE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" [0226.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0226.653] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca16200, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7ca16200, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLUSE_U.VSS", cAlternateFileName="")) returned 1 [0226.653] wcscmp (_String1="UMLUSE_U.VSS", _String2=".") returned 1 [0226.653] wcscmp (_String1="UMLUSE_U.VSS", _String2="..") returned 1 [0226.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40060 [0226.653] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.654] wcscat (in: _Dest=0x3d40060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.654] wcscat (in: _Dest=0x3d40060, _Source="UMLUSE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" [0226.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0226.655] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89be5100, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x89be5100, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE1_M.VSS", cAlternateFileName="")) returned 1 [0226.655] wcscmp (_String1="VALVE1_M.VSS", _String2=".") returned 1 [0226.655] wcscmp (_String1="VALVE1_M.VSS", _String2="..") returned 1 [0226.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40100 [0226.655] wcscpy (in: _Dest=0x3d40100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.655] wcscat (in: _Dest=0x3d40100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.655] wcscat (in: _Dest=0x3d40100, _Source="VALVE1_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" [0226.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0226.656] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95aa1300, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95aa1300, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x20e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE1_U.VSS", cAlternateFileName="")) returned 1 [0226.656] wcscmp (_String1="VALVE1_U.VSS", _String2=".") returned 1 [0226.656] wcscmp (_String1="VALVE1_U.VSS", _String2="..") returned 1 [0226.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d401a0 [0226.656] wcscpy (in: _Dest=0x3d401a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.656] wcscat (in: _Dest=0x3d401a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.656] wcscat (in: _Dest=0x3d401a0, _Source="VALVE1_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" [0226.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d401a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0226.657] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cd12100, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9cd12100, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE2_M.VSS", cAlternateFileName="")) returned 1 [0226.657] wcscmp (_String1="VALVE2_M.VSS", _String2=".") returned 1 [0226.657] wcscmp (_String1="VALVE2_M.VSS", _String2="..") returned 1 [0226.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40240 [0226.657] wcscpy (in: _Dest=0x3d40240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.657] wcscat (in: _Dest=0x3d40240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.657] wcscat (in: _Dest=0x3d40240, _Source="VALVE2_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" [0226.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0 [0226.658] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2c70200, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa2c70200, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE2_U.VSS", cAlternateFileName="")) returned 1 [0226.658] wcscmp (_String1="VALVE2_U.VSS", _String2=".") returned 1 [0226.658] wcscmp (_String1="VALVE2_U.VSS", _String2="..") returned 1 [0226.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d402e0 [0226.658] wcscpy (in: _Dest=0x3d402e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.658] wcscat (in: _Dest=0x3d402e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.658] wcscat (in: _Dest=0x3d402e0, _Source="VALVE2_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" [0226.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d402e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0226.659] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1151e00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1151e00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEHICL_M.VSS", cAlternateFileName="")) returned 1 [0226.659] wcscmp (_String1="VEHICL_M.VSS", _String2=".") returned 1 [0226.659] wcscmp (_String1="VEHICL_M.VSS", _String2="..") returned 1 [0226.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40380 [0226.660] wcscpy (in: _Dest=0x3d40380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.660] wcscat (in: _Dest=0x3d40380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.660] wcscat (in: _Dest=0x3d40380, _Source="VEHICL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" [0226.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0226.810] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd00e000, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd00e000, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x3fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEHICL_U.VSS", cAlternateFileName="")) returned 1 [0226.810] wcscmp (_String1="VEHICL_U.VSS", _String2=".") returned 1 [0226.810] wcscmp (_String1="VEHICL_U.VSS", _String2="..") returned 1 [0226.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40420 [0226.810] wcscpy (in: _Dest=0x3d40420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0226.810] wcscat (in: _Dest=0x3d40420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0226.810] wcscat (in: _Dest=0x3d40420, _Source="VEHICL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" [0227.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0227.300] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc427ee00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc427ee00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIDSUR_M.VSS", cAlternateFileName="")) returned 1 [0227.300] wcscmp (_String1="VIDSUR_M.VSS", _String2=".") returned 1 [0227.300] wcscmp (_String1="VIDSUR_M.VSS", _String2="..") returned 1 [0227.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d404c0 [0227.300] wcscpy (in: _Dest=0x3d404c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.300] wcscat (in: _Dest=0x3d404c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.300] wcscat (in: _Dest=0x3d404c0, _Source="VIDSUR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" [0227.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d404c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0227.302] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc802900, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc802900, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIDSUR_U.VSS", cAlternateFileName="")) returned 1 [0227.302] wcscmp (_String1="VIDSUR_U.VSS", _String2=".") returned 1 [0227.303] wcscmp (_String1="VIDSUR_U.VSS", _String2="..") returned 1 [0227.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40560 [0227.303] wcscpy (in: _Dest=0x3d40560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.303] wcscat (in: _Dest=0x3d40560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.303] wcscat (in: _Dest=0x3d40560, _Source="VIDSUR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" [0227.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0227.305] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3a73700, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd3a73700, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_M.VSS", cAlternateFileName="")) returned 1 [0227.305] wcscmp (_String1="VSM_M.VSS", _String2=".") returned 1 [0227.305] wcscmp (_String1="VSM_M.VSS", _String2="..") returned 1 [0227.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db490 [0227.305] wcscpy (in: _Dest=0x81db490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.305] wcscat (in: _Dest=0x81db490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.305] wcscat (in: _Dest=0x81db490, _Source="VSM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" [0227.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0227.307] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51a3700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf51a3700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_M.VST", cAlternateFileName="")) returned 1 [0227.307] wcscmp (_String1="VSM_M.VST", _String2=".") returned 1 [0227.307] wcscmp (_String1="VSM_M.VST", _String2="..") returned 1 [0227.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db3f8 [0227.308] wcscpy (in: _Dest=0x81db3f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.308] wcscat (in: _Dest=0x81db3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.308] wcscat (in: _Dest=0x81db3f8, _Source="VSM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" [0227.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x266c [0227.310] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbff7200, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdbff7200, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_U.VSS", cAlternateFileName="")) returned 1 [0227.310] wcscmp (_String1="VSM_U.VSS", _String2=".") returned 1 [0227.310] wcscmp (_String1="VSM_U.VSS", _String2="..") returned 1 [0227.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81db360 [0227.310] wcscpy (in: _Dest=0x81db360, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.310] wcscat (in: _Dest=0x81db360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.310] wcscat (in: _Dest=0x81db360, _Source="VSM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" [0227.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0227.311] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf77c9100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf77c9100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_U.VST", cAlternateFileName="")) returned 1 [0227.311] wcscmp (_String1="VSM_U.VST", _String2=".") returned 1 [0227.311] wcscmp (_String1="VSM_U.VST", _String2="..") returned 1 [0227.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x81dacd8 [0227.312] wcscpy (in: _Dest=0x81dacd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.312] wcscat (in: _Dest=0x81dacd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.312] wcscat (in: _Dest=0x81dacd8, _Source="VSM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" [0227.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dacd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0227.313] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1537e200, ftCreationTime.dwHighDateTime=0x1ca479a, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1537e200, ftLastWriteTime.dwHighDateTime=0x1ca479a, nFileSizeHigh=0x0, nFileSizeLow=0x7fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WADOWI_M.VSS", cAlternateFileName="")) returned 1 [0227.315] wcscmp (_String1="WADOWI_M.VSS", _String2=".") returned 1 [0227.315] wcscmp (_String1="WADOWI_M.VSS", _String2="..") returned 1 [0227.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40600 [0227.315] wcscpy (in: _Dest=0x3d40600, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.315] wcscat (in: _Dest=0x3d40600, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.315] wcscat (in: _Dest=0x3d40600, _Source="WADOWI_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" [0227.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0227.316] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e705200, ftCreationTime.dwHighDateTime=0x1ca479a, ftLastAccessTime.dwLowDateTime=0xa5940d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e705200, ftLastWriteTime.dwHighDateTime=0x1ca479a, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WADOWI_U.VSS", cAlternateFileName="")) returned 1 [0227.316] wcscmp (_String1="WADOWI_U.VSS", _String2=".") returned 1 [0227.316] wcscmp (_String1="WADOWI_U.VSS", _String2="..") returned 1 [0227.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d406a0 [0227.316] wcscpy (in: _Dest=0x3d406a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.316] wcscat (in: _Dest=0x3d406a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.316] wcscat (in: _Dest=0x3d406a0, _Source="WADOWI_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" [0227.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d406a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0227.318] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7ed800, ftCreationTime.dwHighDateTime=0x1ca479a, ftLastAccessTime.dwLowDateTime=0xa5940d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe7ed800, ftLastWriteTime.dwHighDateTime=0x1ca479a, nFileSizeHigh=0x0, nFileSizeLow=0xdae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WALL_M.VSS", cAlternateFileName="")) returned 1 [0227.318] wcscmp (_String1="WALL_M.VSS", _String2=".") returned 1 [0227.318] wcscmp (_String1="WALL_M.VSS", _String2="..") returned 1 [0227.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3d40740 [0227.318] wcscpy (in: _Dest=0x3d40740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.319] wcscat (in: _Dest=0x3d40740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.319] wcscat (in: _Dest=0x3d40740, _Source="WALL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" [0227.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0227.320] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cabbb00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1cabbb00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0xd9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WALL_U.VSS", cAlternateFileName="")) returned 1 [0227.320] wcscmp (_String1="WALL_U.VSS", _String2=".") returned 1 [0227.320] wcscmp (_String1="WALL_U.VSS", _String2="..") returned 1 [0227.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3d407e0 [0227.320] wcscpy (in: _Dest=0x3d407e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.320] wcscat (in: _Dest=0x3d407e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.320] wcscat (in: _Dest=0x3d407e0, _Source="WALL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" [0227.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d407e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0227.321] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b595500, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b595500, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_M.VSS", cAlternateFileName="")) returned 1 [0227.321] wcscmp (_String1="WEBMAP_M.VSS", _String2=".") returned 1 [0227.321] wcscmp (_String1="WEBMAP_M.VSS", _String2="..") returned 1 [0227.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40880 [0227.322] wcscpy (in: _Dest=0x3d40880, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.322] wcscat (in: _Dest=0x3d40880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.322] wcscat (in: _Dest=0x3d40880, _Source="WEBMAP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" [0227.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0227.323] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc414500, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa5a979d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc414500, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x18800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_M.VST", cAlternateFileName="")) returned 1 [0227.323] wcscmp (_String1="WEBMAP_M.VST", _String2=".") returned 1 [0227.323] wcscmp (_String1="WEBMAP_M.VST", _String2="..") returned 1 [0227.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40920 [0227.323] wcscpy (in: _Dest=0x3d40920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.323] wcscat (in: _Dest=0x3d40920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.323] wcscat (in: _Dest=0x3d40920, _Source="WEBMAP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" [0227.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0227.325] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d5c200, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5ae3c90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb8d5c200, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x189200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_U.VSS", cAlternateFileName="")) returned 1 [0227.325] wcscmp (_String1="WEBMAP_U.VSS", _String2=".") returned 1 [0227.325] wcscmp (_String1="WEBMAP_U.VSS", _String2="..") returned 1 [0227.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d409c0 [0227.325] wcscpy (in: _Dest=0x3d409c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.325] wcscat (in: _Dest=0x3d409c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.325] wcscat (in: _Dest=0x3d409c0, _Source="WEBMAP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" [0227.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d409c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0227.326] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105f900, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x105f900, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_U.VST", cAlternateFileName="")) returned 1 [0227.326] wcscmp (_String1="WEBMAP_U.VST", _String2=".") returned 1 [0227.327] wcscmp (_String1="WEBMAP_U.VST", _String2="..") returned 1 [0227.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40a60 [0227.327] wcscpy (in: _Dest=0x3d40a60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.327] wcscat (in: _Dest=0x3d40a60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.327] wcscat (in: _Dest=0x3d40a60, _Source="WEBMAP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" [0227.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0227.328] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecba300, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbecba300, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_M.VSS", cAlternateFileName="")) returned 1 [0227.328] wcscmp (_String1="WEBSIT_M.VSS", _String2=".") returned 1 [0227.328] wcscmp (_String1="WEBSIT_M.VSS", _String2="..") returned 1 [0227.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40b00 [0227.328] wcscpy (in: _Dest=0x3d40b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.328] wcscat (in: _Dest=0x3d40b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.328] wcscat (in: _Dest=0x3d40b00, _Source="WEBSIT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" [0227.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0227.329] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4998000, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4998000, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_M.VST", cAlternateFileName="")) returned 1 [0227.330] wcscmp (_String1="WEBSIT_M.VST", _String2=".") returned 1 [0227.330] wcscmp (_String1="WEBSIT_M.VST", _String2="..") returned 1 [0227.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40ba0 [0227.330] wcscpy (in: _Dest=0x3d40ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.330] wcscat (in: _Dest=0x3d40ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.330] wcscat (in: _Dest=0x3d40ba0, _Source="WEBSIT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" [0227.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a18 [0227.331] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3905700, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc3905700, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_U.VSS", cAlternateFileName="")) returned 1 [0227.331] wcscmp (_String1="WEBSIT_U.VSS", _String2=".") returned 1 [0227.331] wcscmp (_String1="WEBSIT_U.VSS", _String2="..") returned 1 [0227.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40c40 [0227.331] wcscpy (in: _Dest=0x3d40c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.331] wcscat (in: _Dest=0x3d40c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.331] wcscat (in: _Dest=0x3d40c40, _Source="WEBSIT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" [0227.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d4 [0227.333] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e3400, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95e3400, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_U.VST", cAlternateFileName="")) returned 1 [0227.333] wcscmp (_String1="WEBSIT_U.VST", _String2=".") returned 1 [0227.333] wcscmp (_String1="WEBSIT_U.VST", _String2="..") returned 1 [0227.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40ce0 [0227.333] wcscpy (in: _Dest=0x3d40ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.333] wcscat (in: _Dest=0x3d40ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.333] wcscat (in: _Dest=0x3d40ce0, _Source="WEBSIT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" [0227.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2548 [0227.334] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8550b00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8550b00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WELD_M.VSS", cAlternateFileName="")) returned 1 [0227.334] wcscmp (_String1="WELD_M.VSS", _String2=".") returned 1 [0227.334] wcscmp (_String1="WELD_M.VSS", _String2="..") returned 1 [0227.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3d40d80 [0227.335] wcscpy (in: _Dest=0x3d40d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.335] wcscat (in: _Dest=0x3d40d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.335] wcscat (in: _Dest=0x3d40d80, _Source="WELD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" [0227.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0227.423] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19bf00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd19bf00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WELD_U.VSS", cAlternateFileName="")) returned 1 [0227.423] wcscmp (_String1="WELD_U.VSS", _String2=".") returned 1 [0227.423] wcscmp (_String1="WELD_U.VSS", _String2="..") returned 1 [0227.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3d40420 [0227.424] wcscpy (in: _Dest=0x3d40420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.424] wcscat (in: _Dest=0x3d40420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.424] wcscat (in: _Dest=0x3d40420, _Source="WELD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" [0227.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0227.424] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad4600, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0ad4600, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCICN_M.VSS", cAlternateFileName="")) returned 1 [0227.424] wcscmp (_String1="WFCICN_M.VSS", _String2=".") returned 1 [0227.424] wcscmp (_String1="WFCICN_M.VSS", _String2="..") returned 1 [0227.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d402e0 [0227.425] wcscpy (in: _Dest=0x3d402e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.425] wcscat (in: _Dest=0x3d402e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.425] wcscat (in: _Dest=0x3d402e0, _Source="WFCICN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" [0227.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d402e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0227.425] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd440cd00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd440cd00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCICN_U.VSS", cAlternateFileName="")) returned 1 [0227.425] wcscmp (_String1="WFCICN_U.VSS", _String2=".") returned 1 [0227.425] wcscmp (_String1="WFCICN_U.VSS", _String2="..") returned 1 [0227.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d40e20 [0227.426] wcscpy (in: _Dest=0x3d40e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.426] wcscat (in: _Dest=0x3d40e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.426] wcscat (in: _Dest=0x3d40e20, _Source="WFCICN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" [0227.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0227.426] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec185100, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xec185100, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x78000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCRS_M.VSS", cAlternateFileName="")) returned 1 [0227.426] wcscmp (_String1="WFCRS_M.VSS", _String2=".") returned 1 [0227.426] wcscmp (_String1="WFCRS_M.VSS", _String2="..") returned 1 [0227.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d40ec0 [0227.427] wcscpy (in: _Dest=0x3d40ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.427] wcscat (in: _Dest=0x3d40ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.427] wcscat (in: _Dest=0x3d40ec0, _Source="WFCRS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" [0227.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0227.427] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3efd500, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3efd500, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x77e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCRS_U.VSS", cAlternateFileName="")) returned 1 [0227.427] wcscmp (_String1="WFCRS_U.VSS", _String2=".") returned 1 [0227.427] wcscmp (_String1="WFCRS_U.VSS", _String2="..") returned 1 [0227.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d40f60 [0227.428] wcscpy (in: _Dest=0x3d40f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.428] wcscat (in: _Dest=0x3d40f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.428] wcscat (in: _Dest=0x3d40f60, _Source="WFCRS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" [0227.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0227.428] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96949100, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5b560b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96949100, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x27800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCTRL_M.VSS", cAlternateFileName="")) returned 1 [0227.428] wcscmp (_String1="WFCTRL_M.VSS", _String2=".") returned 1 [0227.429] wcscmp (_String1="WFCTRL_M.VSS", _String2="..") returned 1 [0227.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41000 [0227.429] wcscpy (in: _Dest=0x3d41000, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.429] wcscat (in: _Dest=0x3d41000, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.429] wcscat (in: _Dest=0x3d41000, _Source="WFCTRL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" [0227.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0227.429] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeccc00, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5b560b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9eeccc00, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCTRL_U.VSS", cAlternateFileName="")) returned 1 [0227.429] wcscmp (_String1="WFCTRL_U.VSS", _String2=".") returned 1 [0227.430] wcscmp (_String1="WFCTRL_U.VSS", _String2="..") returned 1 [0227.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d410a0 [0227.430] wcscpy (in: _Dest=0x3d410a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.430] wcscat (in: _Dest=0x3d410a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.430] wcscat (in: _Dest=0x3d410a0, _Source="WFCTRL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" [0227.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d410a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0227.430] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x516c4200, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5ba2370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x516c4200, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x217a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDEP_M.VSS", cAlternateFileName="")) returned 1 [0227.431] wcscmp (_String1="WFDEP_M.VSS", _String2=".") returned 1 [0227.431] wcscmp (_String1="WFDEP_M.VSS", _String2="..") returned 1 [0227.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d41140 [0227.431] wcscpy (in: _Dest=0x3d41140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.431] wcscat (in: _Dest=0x3d41140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.431] wcscat (in: _Dest=0x3d41140, _Source="WFDEP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" [0227.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b04 [0227.432] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x837da400, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5bc84d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x837da400, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x215e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDEP_U.VSS", cAlternateFileName="")) returned 1 [0227.432] wcscmp (_String1="WFDEP_U.VSS", _String2=".") returned 1 [0227.432] wcscmp (_String1="WFDEP_U.VSS", _String2="..") returned 1 [0227.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d411e0 [0227.432] wcscpy (in: _Dest=0x3d411e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.432] wcscat (in: _Dest=0x3d411e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.432] wcscat (in: _Dest=0x3d411e0, _Source="WFDEP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" [0227.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d411e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec [0227.433] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDGM_M.VST", cAlternateFileName="")) returned 1 [0227.433] wcscmp (_String1="WFDGM_M.VST", _String2=".") returned 1 [0227.433] wcscmp (_String1="WFDGM_M.VST", _String2="..") returned 1 [0227.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d41280 [0227.433] wcscpy (in: _Dest=0x3d41280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.433] wcscat (in: _Dest=0x3d41280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.433] wcscat (in: _Dest=0x3d41280, _Source="WFDGM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" [0227.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a8 [0227.434] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDGM_U.VST", cAlternateFileName="")) returned 1 [0227.434] wcscmp (_String1="WFDGM_U.VST", _String2=".") returned 1 [0227.434] wcscmp (_String1="WFDGM_U.VST", _String2="..") returned 1 [0227.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d41320 [0227.435] wcscpy (in: _Dest=0x3d41320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.435] wcscat (in: _Dest=0x3d41320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.435] wcscat (in: _Dest=0x3d41320, _Source="WFDGM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" [0227.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c [0227.435] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e2ad00, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4e2ad00, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDLGS_M.VSS", cAlternateFileName="")) returned 1 [0227.435] wcscmp (_String1="WFDLGS_M.VSS", _String2=".") returned 1 [0227.435] wcscmp (_String1="WFDLGS_M.VSS", _String2="..") returned 1 [0227.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d413c0 [0227.436] wcscpy (in: _Dest=0x3d413c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.436] wcscat (in: _Dest=0x3d413c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.436] wcscat (in: _Dest=0x3d413c0, _Source="WFDLGS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" [0227.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d413c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0227.437] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9a76100, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa9a76100, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDLGS_U.VSS", cAlternateFileName="")) returned 1 [0227.437] wcscmp (_String1="WFDLGS_U.VSS", _String2=".") returned 1 [0227.437] wcscmp (_String1="WFDLGS_U.VSS", _String2="..") returned 1 [0227.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41460 [0227.437] wcscpy (in: _Dest=0x3d41460, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.437] wcscat (in: _Dest=0x3d41460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.437] wcscat (in: _Dest=0x3d41460, _Source="WFDLGS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" [0227.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0227.438] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa14b0900, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5c60a50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa14b0900, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFOBJ_M.VSS", cAlternateFileName="")) returned 1 [0227.438] wcscmp (_String1="WFOBJ_M.VSS", _String2=".") returned 1 [0227.438] wcscmp (_String1="WFOBJ_M.VSS", _String2="..") returned 1 [0227.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d41500 [0227.438] wcscpy (in: _Dest=0x3d41500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.438] wcscat (in: _Dest=0x3d41500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.438] wcscat (in: _Dest=0x3d41500, _Source="WFOBJ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" [0227.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27d4 [0227.439] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45dd900, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5c86bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb45dd900, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xb9800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFOBJ_U.VSS", cAlternateFileName="")) returned 1 [0227.439] wcscmp (_String1="WFOBJ_U.VSS", _String2=".") returned 1 [0227.439] wcscmp (_String1="WFOBJ_U.VSS", _String2="..") returned 1 [0227.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d415a0 [0227.439] wcscpy (in: _Dest=0x3d415a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.439] wcscat (in: _Dest=0x3d415a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.439] wcscat (in: _Dest=0x3d415a0, _Source="WFOBJ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" [0227.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d415a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x269c [0227.440] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50e4f00, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc50e4f00, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xa7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFSTEP_M.VSS", cAlternateFileName="")) returned 1 [0227.440] wcscmp (_String1="WFSTEP_M.VSS", _String2=".") returned 1 [0227.440] wcscmp (_String1="WFSTEP_M.VSS", _String2="..") returned 1 [0227.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41640 [0227.440] wcscpy (in: _Dest=0x3d41640, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.440] wcscat (in: _Dest=0x3d41640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.440] wcscat (in: _Dest=0x3d41640, _Source="WFSTEP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" [0227.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0227.441] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd48d9800, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd48d9800, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xa7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFSTEP_U.VSS", cAlternateFileName="")) returned 1 [0227.441] wcscmp (_String1="WFSTEP_U.VSS", _String2=".") returned 1 [0227.441] wcscmp (_String1="WFSTEP_U.VSS", _String2="..") returned 1 [0227.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d416e0 [0227.441] wcscpy (in: _Dest=0x3d416e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.441] wcscat (in: _Dest=0x3d416e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.441] wcscat (in: _Dest=0x3d416e0, _Source="WFSTEP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" [0227.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d416e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b34 [0227.442] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad3ae800, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xad3ae800, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFTLBR_M.VSS", cAlternateFileName="")) returned 1 [0227.443] wcscmp (_String1="WFTLBR_M.VSS", _String2=".") returned 1 [0227.443] wcscmp (_String1="WFTLBR_M.VSS", _String2="..") returned 1 [0227.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41780 [0227.443] wcscpy (in: _Dest=0x3d41780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.443] wcscat (in: _Dest=0x3d41780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.443] wcscat (in: _Dest=0x3d41780, _Source="WFTLBR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" [0227.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0227.444] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ff9c00, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1ff9c00, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFTLBR_U.VSS", cAlternateFileName="")) returned 1 [0227.444] wcscmp (_String1="WFTLBR_U.VSS", _String2=".") returned 1 [0227.444] wcscmp (_String1="WFTLBR_U.VSS", _String2="..") returned 1 [0227.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41820 [0227.444] wcscpy (in: _Dest=0x3d41820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.444] wcscat (in: _Dest=0x3d41820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.444] wcscat (in: _Dest=0x3d41820, _Source="WFTLBR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" [0227.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0227.445] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe66f3b00, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe66f3b00, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFWICN_M.VSS", cAlternateFileName="")) returned 1 [0227.445] wcscmp (_String1="WFWICN_M.VSS", _String2=".") returned 1 [0227.445] wcscmp (_String1="WFWICN_M.VSS", _String2="..") returned 1 [0227.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d418c0 [0227.445] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.445] wcscat (in: _Dest=0x3d418c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.445] wcscat (in: _Dest=0x3d418c0, _Source="WFWICN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" [0227.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d418c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0227.446] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb33ef00, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cd2e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb33ef00, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x22600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFWICN_U.VSS", cAlternateFileName="")) returned 1 [0227.446] wcscmp (_String1="WFWICN_U.VSS", _String2=".") returned 1 [0227.446] wcscmp (_String1="WFWICN_U.VSS", _String2="..") returned 1 [0227.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41960 [0227.446] wcscpy (in: _Dest=0x3d41960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.446] wcscat (in: _Dest=0x3d41960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.446] wcscat (in: _Dest=0x3d41960, _Source="WFWICN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" [0227.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0227.447] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56dcd00, ftCreationTime.dwHighDateTime=0x1ca479d, ftLastAccessTime.dwLowDateTime=0xa5cf8fd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56dcd00, ftLastWriteTime.dwHighDateTime=0x1ca479d, nFileSizeHigh=0x0, nFileSizeLow=0xa2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_M.VSS", cAlternateFileName="")) returned 1 [0227.505] wcscmp (_String1="WRKFLO_M.VSS", _String2=".") returned 1 [0227.505] wcscmp (_String1="WRKFLO_M.VSS", _String2="..") returned 1 [0227.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41a00 [0227.505] wcscpy (in: _Dest=0x3d41a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.505] wcscat (in: _Dest=0x3d41a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.505] wcscat (in: _Dest=0x3d41a00, _Source="WRKFLO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" [0227.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0227.507] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18dd7d00, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5cf8fd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x18dd7d00, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x39a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_M.VST", cAlternateFileName="")) returned 1 [0227.507] wcscmp (_String1="WRKFLO_M.VST", _String2=".") returned 1 [0227.507] wcscmp (_String1="WRKFLO_M.VST", _String2="..") returned 1 [0227.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41aa0 [0227.507] wcscpy (in: _Dest=0x3d41aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.507] wcscat (in: _Dest=0x3d41aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.507] wcscat (in: _Dest=0x3d41aa0, _Source="WRKFLO_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" [0227.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a60 [0227.508] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e767e00, ftCreationTime.dwHighDateTime=0x1ca479d, ftLastAccessTime.dwLowDateTime=0xa5d1f130, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e767e00, ftLastWriteTime.dwHighDateTime=0x1ca479d, nFileSizeHigh=0x0, nFileSizeLow=0x9b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_U.VSS", cAlternateFileName="")) returned 1 [0227.508] wcscmp (_String1="WRKFLO_U.VSS", _String2=".") returned 1 [0227.508] wcscmp (_String1="WRKFLO_U.VSS", _String2="..") returned 1 [0227.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41b40 [0227.508] wcscpy (in: _Dest=0x3d41b40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.508] wcscat (in: _Dest=0x3d41b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.508] wcscat (in: _Dest=0x3d41b40, _Source="WRKFLO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" [0227.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0227.509] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed35e00, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5d1f130, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ed35e00, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_U.VST", cAlternateFileName="")) returned 1 [0227.509] wcscmp (_String1="WRKFLO_U.VST", _String2=".") returned 1 [0227.509] wcscmp (_String1="WRKFLO_U.VST", _String2="..") returned 1 [0227.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41be0 [0227.509] wcscpy (in: _Dest=0x3d41be0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.509] wcscat (in: _Dest=0x3d41be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.509] wcscat (in: _Dest=0x3d41be0, _Source="WRKFLO_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" [0227.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0227.511] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f28e100, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d45290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2f28e100, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x74400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSISS_M.VST", cAlternateFileName="")) returned 1 [0227.511] wcscmp (_String1="WSSISS_M.VST", _String2=".") returned 1 [0227.511] wcscmp (_String1="WSSISS_M.VST", _String2="..") returned 1 [0227.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41c80 [0227.511] wcscpy (in: _Dest=0x3d41c80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.511] wcscat (in: _Dest=0x3d41c80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.511] wcscat (in: _Dest=0x3d41c80, _Source="WSSISS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" [0227.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0227.512] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d0a600, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d45290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26d0a600, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x72a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSISS_U.VST", cAlternateFileName="")) returned 1 [0227.512] wcscmp (_String1="WSSISS_U.VST", _String2=".") returned 1 [0227.512] wcscmp (_String1="WSSISS_U.VST", _String2="..") returned 1 [0227.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41d20 [0227.512] wcscpy (in: _Dest=0x3d41d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.512] wcscat (in: _Dest=0x3d41d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.512] wcscat (in: _Dest=0x3d41d20, _Source="WSSISS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" [0227.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0227.513] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436cde00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x436cde00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSTSK_M.VST", cAlternateFileName="")) returned 1 [0227.513] wcscmp (_String1="WSSTSK_M.VST", _String2=".") returned 1 [0227.513] wcscmp (_String1="WSSTSK_M.VST", _String2="..") returned 1 [0227.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41dc0 [0227.513] wcscpy (in: _Dest=0x3d41dc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.513] wcscat (in: _Dest=0x3d41dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.513] wcscat (in: _Dest=0x3d41dc0, _Source="WSSTSK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" [0227.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0227.514] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e37600, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39e37600, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSTSK_U.VST", cAlternateFileName="")) returned 1 [0227.514] wcscmp (_String1="WSSTSK_U.VST", _String2=".") returned 1 [0227.514] wcscmp (_String1="WSSTSK_U.VST", _String2="..") returned 1 [0227.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3d41e60 [0227.514] wcscpy (in: _Dest=0x3d41e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.515] wcscat (in: _Dest=0x3d41e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.515] wcscat (in: _Dest=0x3d41e60, _Source="WSSTSK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" [0227.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0227.515] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d3ec00, ftCreationTime.dwHighDateTime=0x1ca5d6c, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2d3ec00, ftLastWriteTime.dwHighDateTime=0x1ca5d6c, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_M.VSS", cAlternateFileName="")) returned 1 [0227.515] wcscmp (_String1="XFUNC_M.VSS", _String2=".") returned 1 [0227.516] wcscmp (_String1="XFUNC_M.VSS", _String2="..") returned 1 [0227.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d41f00 [0227.516] wcscpy (in: _Dest=0x3d41f00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.516] wcscat (in: _Dest=0x3d41f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.516] wcscat (in: _Dest=0x3d41f00, _Source="XFUNC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" [0227.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0227.517] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83139600, ftCreationTime.dwHighDateTime=0x1ca4e8b, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x83139600, ftLastWriteTime.dwHighDateTime=0x1ca4e8b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_M.VST", cAlternateFileName="")) returned 1 [0227.517] wcscmp (_String1="XFUNC_M.VST", _String2=".") returned 1 [0227.517] wcscmp (_String1="XFUNC_M.VST", _String2="..") returned 1 [0227.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3d41fa0 [0227.517] wcscpy (in: _Dest=0x3d41fa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.517] wcscat (in: _Dest=0x3d41fa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.517] wcscat (in: _Dest=0x3d41fa0, _Source="XFUNC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" [0227.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0227.518] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9aa0200, ftCreationTime.dwHighDateTime=0x1ca5d6c, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf9aa0200, ftLastWriteTime.dwHighDateTime=0x1ca5d6c, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_U.VSS", cAlternateFileName="")) returned 1 [0227.519] wcscmp (_String1="XFUNC_U.VSS", _String2=".") returned 1 [0227.519] wcscmp (_String1="XFUNC_U.VSS", _String2="..") returned 1 [0227.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81db968 [0227.519] wcscpy (in: _Dest=0x81db968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.519] wcscat (in: _Dest=0x81db968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.519] wcscat (in: _Dest=0x81db968, _Source="XFUNC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" [0227.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0227.520] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9cfe00, ftCreationTime.dwHighDateTime=0x1ca4e8b, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8c9cfe00, ftLastWriteTime.dwHighDateTime=0x1ca4e8b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_U.VST", cAlternateFileName="")) returned 1 [0227.520] wcscmp (_String1="XFUNC_U.VST", _String2=".") returned 1 [0227.520] wcscmp (_String1="XFUNC_U.VST", _String2="..") returned 1 [0227.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x81d0458 [0227.520] wcscpy (in: _Dest=0x81d0458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0227.520] wcscat (in: _Dest=0x81d0458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0227.520] wcscat (in: _Dest=0x81d0458, _Source="XFUNC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" [0227.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d0458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0227.521] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x808da20 | out: lpFindFileData=0x808da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9cfe00, ftCreationTime.dwHighDateTime=0x1ca4e8b, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8c9cfe00, ftLastWriteTime.dwHighDateTime=0x1ca4e8b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_U.VST", cAlternateFileName="")) returned 0 [0227.560] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0228.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808da20) returned 1 [0228.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053418) returned 1 [0228.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fb00) returned 1 Thread: id = 5461 os_tid = 0x2f5c [0185.234] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json")) returned 0x2020 [0185.234] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0194.250] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1924 [0194.253] GetFileSizeEx (in: hFile=0x1924, lpFileSize=0x8e8f910 | out: lpFileSize=0x8e8f910*=287) returned 1 [0194.254] SetFilePointerEx (in: hFile=0x1924, liDistanceToMove=0x11b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.254] ReadFile (in: hFile=0x1924, lpBuffer=0x8e8f91c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e8f8f8, lpOverlapped=0x0 | out: lpBuffer=0x8e8f91c*, lpNumberOfBytesRead=0x8e8f8f8*=0x4, lpOverlapped=0x0) returned 1 [0194.255] SetFilePointerEx (in: hFile=0x1924, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b888 [0194.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce90 [0194.256] NtQuerySystemTime (in: CurrentTime=0x8e8f898 | out: CurrentTime=0x8e8f898*=132471540621636000) returned 0x0 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x15960eb3 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x2254990a [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x6c809c75 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x5117606e [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x49d13bb [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x3c706672 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0xb617f1b [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x40cf57a8 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x26dde5a8 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x7bb60733 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x66374930 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x3ac8dca8 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x63cb3879 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x6f77db27 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x56ddb939 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x3654fecb [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x2cf0ed43 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x42a393d5 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x328f8419 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x5f02a9c [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x214487dd [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x55f83809 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x71e8b5fa [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x3ae816ed [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x2c83f1a9 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x736f0883 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x63a1065 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x5d631b49 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x60c42c59 [0194.256] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x4685bb28 [0194.257] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x62eecbc0 [0194.257] RtlRandomEx (in: Seed=0x8e8f890 | out: Seed=0x8e8f890) returned 0x244e909b [0194.265] ReadFile (in: hFile=0x1924, lpBuffer=0x82adca8, nNumberOfBytesToRead=0x11f, lpNumberOfBytesRead=0x8e8f88c, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0x8e8f88c*=0x11f, lpOverlapped=0x0) returned 1 [0194.265] SetFilePointerEx (in: hFile=0x1924, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.265] WriteFile (in: hFile=0x1924, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x8e8f890, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0x8e8f890*=0x11f, lpOverlapped=0x0) returned 1 [0196.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0196.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0196.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0196.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0196.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82adca8) returned 1 [0196.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0196.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4698) returned 1 [0196.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e699c0 [0196.254] SetFilePointerEx (in: hFile=0x1924, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.254] WriteFile (in: hFile=0x1924, lpBuffer=0x81dfbc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8e8f904, lpOverlapped=0x0 | out: lpBuffer=0x81dfbc0*, lpNumberOfBytesWritten=0x8e8f904*=0x10c, lpOverlapped=0x0) returned 1 [0196.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfbc0) returned 1 [0196.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699f0) returned 1 [0196.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0196.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699c0) returned 1 [0196.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0196.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b888) returned 1 [0196.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cee0) returned 1 [0196.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0196.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5250 [0196.638] wcscpy (in: _Dest=0x81f5250, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" [0196.638] wcscat (in: _Dest=0x81f5250, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json.f0dbec" [0196.638] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0x8e8f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa368 [0196.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa368) returned 1 [0196.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fd830) returned 1 [0196.885] NtQueryInformationFile (in: FileHandle=0x1924, IoStatusBlock=0x8e8f860, FileInformation=0x8e8f868, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8e8f860, FileInformation=0x8e8f868) returned 0x0 [0196.885] NtSetInformationFile (FileHandle=0x1924, IoStatusBlock=0x8e8f860, FileInformation=0x8e8f868, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5250) returned 1 [0197.098] FlushFileBuffers (hFile=0x1924) returned 1 [0197.137] CloseHandle (hObject=0x1924) returned 1 [0197.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8332a58 [0197.315] wcscpy (in: _Dest=0x8332a58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\" [0197.315] wcscat (in: _Dest=0x8332a58, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\F0DBEC-Readme.txt" [0197.315] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0197.315] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d00 [0197.471] WriteFile (in: hFile=0x1d00, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8e8f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8e8f8ac*=0x70c, lpOverlapped=0x0) returned 1 [0198.034] CloseHandle (hObject=0x1d00) returned 1 [0198.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332a58) returned 1 [0198.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401710) returned 1 Thread: id = 5462 os_tid = 0x2f60 [0185.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl")) returned 0x20 [0185.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL", dwFileAttributes=0x20) returned 0 [0185.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.235] GetLastError () returned 0x5 [0185.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL", dwFileAttributes=0x20) returned 0 [0185.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 Thread: id = 5463 os_tid = 0x2f64 [0185.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp")) returned 0x20 [0185.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP", dwFileAttributes=0x20) returned 0 [0185.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.238] GetLastError () returned 0x5 [0185.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP", dwFileAttributes=0x20) returned 0 [0185.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 Thread: id = 5464 os_tid = 0x2f68 [0185.239] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json")) returned 0x2020 [0185.239] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0194.266] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1910 [0194.266] GetFileSizeEx (in: hFile=0x1910, lpFileSize=0x5c7f9e0 | out: lpFileSize=0x5c7f9e0*=353) returned 1 [0194.266] SetFilePointerEx (in: hFile=0x1910, liDistanceToMove=0x15d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.266] ReadFile (in: hFile=0x1910, lpBuffer=0x5c7f9ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c7f9c8, lpOverlapped=0x0 | out: lpBuffer=0x5c7f9ec*, lpNumberOfBytesRead=0x5c7f9c8*=0x4, lpOverlapped=0x0) returned 1 [0194.268] SetFilePointerEx (in: hFile=0x1910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce90 [0194.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf58 [0194.268] NtQuerySystemTime (in: CurrentTime=0x5c7f968 | out: CurrentTime=0x5c7f968*=132471540621792000) returned 0x0 [0194.268] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x4382b401 [0194.268] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x3b4f947c [0194.268] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x3db47f46 [0194.268] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x59e4faaa [0194.268] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x4c5b37fc [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x48d8a830 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0xc7ac143 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x22691187 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x4140e34e [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x78482594 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x3dcc1a28 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x27079ba7 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x1b49434a [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x48079041 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x12dc39ac [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0xa5e1ef6 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x4d337e1c [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x6970043e [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x14dc0e0e [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x4fb2f5ef [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x66af540 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x6eb1c961 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x27be2f8 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x43e2c0a5 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x6f081494 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x748c0f15 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x5f67c766 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x18711930 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x1db1767a [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x1222dac1 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x3970a3f3 [0194.269] RtlRandomEx (in: Seed=0x5c7f960 | out: Seed=0x5c7f960) returned 0x76b87756 [0194.277] ReadFile (in: hFile=0x1910, lpBuffer=0x82b54b8, nNumberOfBytesToRead=0x161, lpNumberOfBytesRead=0x5c7f95c, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesRead=0x5c7f95c*=0x161, lpOverlapped=0x0) returned 1 [0194.278] SetFilePointerEx (in: hFile=0x1910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.278] WriteFile (in: hFile=0x1910, lpBuffer=0x82b90c0*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x5c7f960, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesWritten=0x5c7f960*=0x161, lpOverlapped=0x0) returned 1 [0196.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42678 [0196.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42358 [0196.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42358) returned 1 [0196.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0196.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0196.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b910) returned 1 [0196.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3720) returned 1 [0196.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69180 [0196.257] SetFilePointerEx (in: hFile=0x1910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.258] WriteFile (in: hFile=0x1910, lpBuffer=0x81dfdf0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5c7f9d4, lpOverlapped=0x0 | out: lpBuffer=0x81dfdf0*, lpNumberOfBytesWritten=0x5c7f9d4*=0x10c, lpOverlapped=0x0) returned 1 [0196.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfdf0) returned 1 [0196.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0196.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42358) returned 1 [0196.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0196.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42678) returned 1 [0196.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0196.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0196.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0196.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5388 [0196.642] wcscpy (in: _Dest=0x81f5388, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" [0196.642] wcscat (in: _Dest=0x81f5388, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json.f0dbec" [0196.642] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x5c7f958, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8c58 [0196.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8c58) returned 1 [0196.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fc6f0) returned 1 [0196.886] NtQueryInformationFile (in: FileHandle=0x1910, IoStatusBlock=0x5c7f930, FileInformation=0x5c7f938, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5c7f930, FileInformation=0x5c7f938) returned 0x0 [0196.886] NtSetInformationFile (FileHandle=0x1910, IoStatusBlock=0x5c7f930, FileInformation=0x5c7f938, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5388) returned 1 [0197.102] FlushFileBuffers (hFile=0x1910) returned 1 [0197.112] CloseHandle (hObject=0x1910) returned 1 [0197.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8332930 [0197.313] wcscpy (in: _Dest=0x8332930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\" [0197.313] wcscat (in: _Dest=0x8332930, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\F0DBEC-Readme.txt" [0197.313] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0197.314] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ccc [0197.472] WriteFile (in: hFile=0x1ccc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x5c7f97c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x5c7f97c*=0x70c, lpOverlapped=0x0) returned 1 [0198.038] CloseHandle (hObject=0x1ccc) returned 1 [0198.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332930) returned 1 [0198.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400b80) returned 1 Thread: id = 5465 os_tid = 0x2f6c [0185.240] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0185.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0194.304] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12e8 [0194.304] GetFileSizeEx (in: hFile=0x12e8, lpFileSize=0x87cf9b8 | out: lpFileSize=0x87cf9b8*=178) returned 1 [0194.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0194.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8c0 [0194.304] NtQuerySystemTime (in: CurrentTime=0x87cf940 | out: CurrentTime=0x87cf940*=132471540622104000) returned 0x0 [0194.304] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x53c9ec27 [0194.304] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x4a9baf62 [0194.304] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x3a0e7420 [0194.304] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0xc101de5 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0xa3e810 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x2de65fc3 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0xfead8a9 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x159f3ad4 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x2189db82 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x10e7d5e1 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x1f2c33ab [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x1ec4595 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x3f3056da [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x983d24e [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x16ec2366 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x24151f65 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x4ee45db9 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x6d09fcc0 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x1431bb7 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x33370d27 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x430229c1 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x3dfed393 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x453fb975 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x27a628eb [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x57ca1d88 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x37133e47 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x410daad5 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x792df083 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x46e84ae9 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x426310d1 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x550918f7 [0194.305] RtlRandomEx (in: Seed=0x87cf938 | out: Seed=0x87cf938) returned 0x294f0ccf [0194.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf30 [0194.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c270 [0194.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0194.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c270) returned 1 [0194.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8c0) returned 1 [0194.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e41d0 [0194.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0c270 [0194.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a6498 [0194.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82aa0a0 [0194.341] ReadFile (in: hFile=0x12e8, lpBuffer=0x82a6498, nNumberOfBytesToRead=0xb2, lpNumberOfBytesRead=0x87cf934, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesRead=0x87cf934*=0xb2, lpOverlapped=0x0) returned 1 [0194.343] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.343] WriteFile (in: hFile=0x12e8, lpBuffer=0x82aa0a0*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x87cf938, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesWritten=0x87cf938*=0xb2, lpOverlapped=0x0) returned 1 [0196.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0196.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42920 [0196.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42920) returned 1 [0196.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0196.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0196.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c270) returned 1 [0196.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e41d0) returned 1 [0196.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69240 [0196.270] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.270] WriteFile (in: hFile=0x12e8, lpBuffer=0x81e06b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x87cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x81e06b0*, lpNumberOfBytesWritten=0x87cf9ac*=0x10c, lpOverlapped=0x0) returned 1 [0196.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e06b0) returned 1 [0196.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69270) returned 1 [0196.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42920) returned 1 [0196.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69240) returned 1 [0196.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0196.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0196.652] wcscpy (in: _Dest=0x81f5780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" [0196.652] wcscat (in: _Dest=0x81f5780, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.f0dbec" [0196.652] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.f0dbec", NtPathName=0x87cf930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef9a70 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9a70) returned 1 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fe970) returned 1 [0197.626] NtQueryInformationFile (in: FileHandle=0x12e8, IoStatusBlock=0x87cf908, FileInformation=0x87cf910, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x87cf908, FileInformation=0x87cf910) returned 0x0 [0197.626] NtSetInformationFile (FileHandle=0x12e8, IoStatusBlock=0x87cf908, FileInformation=0x87cf910, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5780) returned 1 [0197.726] FlushFileBuffers (hFile=0x12e8) returned 1 [0197.735] CloseHandle (hObject=0x12e8) returned 1 [0197.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f6d70 [0197.762] wcscpy (in: _Dest=0x81f6d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" [0197.763] wcscat (in: _Dest=0x81f6d70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\F0DBEC-Readme.txt" [0197.763] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\f0dbec-readme.txt")) returned 0xffffffff [0197.763] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0c [0198.299] WriteFile (in: hFile=0xe0c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x87cf954, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x87cf954*=0x70c, lpOverlapped=0x0) returned 1 [0198.302] CloseHandle (hObject=0xe0c) returned 1 [0198.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6d70) returned 1 [0198.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400ca8) returned 1 Thread: id = 5466 os_tid = 0x2f70 [0185.241] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json")) returned 0x2020 [0185.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0194.344] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18e4 [0194.345] GetFileSizeEx (in: hFile=0x18e4, lpFileSize=0x94bf788 | out: lpFileSize=0x94bf788*=242) returned 1 [0194.345] SetFilePointerEx (in: hFile=0x18e4, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.345] ReadFile (in: hFile=0x18e4, lpBuffer=0x94bf794, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94bf770, lpOverlapped=0x0 | out: lpBuffer=0x94bf794*, lpNumberOfBytesRead=0x94bf770*=0x4, lpOverlapped=0x0) returned 1 [0194.347] SetFilePointerEx (in: hFile=0x18e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8c0 [0194.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b978 [0194.347] NtQuerySystemTime (in: CurrentTime=0x94bf710 | out: CurrentTime=0x94bf710*=132471540622572000) returned 0x0 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x6c53cca0 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x7a4afd0e [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x6c46ba50 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x4f25aaa9 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x7683caa4 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x7248ecd4 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x1f2c33ab [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0xad62ecc [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x56ccfcb3 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x362922d8 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x3e44a7c8 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x621b9c74 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x194d6218 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x41770e00 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x1c58dce1 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x554c3a34 [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x741ce06d [0194.347] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x1902e3d8 [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x34a41d7f [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x5508d108 [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x60779107 [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x3e6cd745 [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x3234e174 [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x811a1e8 [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x739a57d [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x3aabb58 [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x21961001 [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x6231667d [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x3a0e7420 [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x356df6aa [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x55c3e5a [0194.348] RtlRandomEx (in: Seed=0x94bf708 | out: Seed=0x94bf708) returned 0x1c077ee [0194.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb70 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bb68 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0194.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bb68) returned 1 [0194.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b978) returned 1 [0194.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e5340 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bb68 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14946060 [0194.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14949c68 [0194.367] ReadFile (in: hFile=0x18e4, lpBuffer=0x14946060, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0x94bf704, lpOverlapped=0x0 | out: lpBuffer=0x14946060*, lpNumberOfBytesRead=0x94bf704*=0xf2, lpOverlapped=0x0) returned 1 [0194.367] SetFilePointerEx (in: hFile=0x18e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.367] WriteFile (in: hFile=0x18e4, lpBuffer=0x14949c68*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x94bf708, lpOverlapped=0x0 | out: lpBuffer=0x14949c68*, lpNumberOfBytesWritten=0x94bf708*=0xf2, lpOverlapped=0x0) returned 1 [0196.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0196.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0196.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428a8) returned 1 [0196.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14949c68) returned 1 [0196.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14946060) returned 1 [0196.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bb68) returned 1 [0196.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5340) returned 1 [0196.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0196.274] SetFilePointerEx (in: hFile=0x18e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.274] WriteFile (in: hFile=0x18e4, lpBuffer=0x81e09f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x94bf77c, lpOverlapped=0x0 | out: lpBuffer=0x81e09f8*, lpNumberOfBytesWritten=0x94bf77c*=0x10c, lpOverlapped=0x0) returned 1 [0196.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e09f8) returned 1 [0196.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0196.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428a8) returned 1 [0196.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0196.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0196.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8c0) returned 1 [0196.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb70) returned 1 [0196.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf40) returned 1 [0196.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81efe60 [0196.655] wcscpy (in: _Dest=0x81efe60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" [0196.655] wcscat (in: _Dest=0x81efe60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json.f0dbec" [0196.655] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0x94bf700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3efa9d0 [0196.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa9d0) returned 1 [0196.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f9558) returned 1 [0196.893] NtQueryInformationFile (in: FileHandle=0x18e4, IoStatusBlock=0x94bf6d8, FileInformation=0x94bf6e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x94bf6d8, FileInformation=0x94bf6e0) returned 0x0 [0196.893] NtSetInformationFile (FileHandle=0x18e4, IoStatusBlock=0x94bf6d8, FileInformation=0x94bf6e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efe60) returned 1 [0197.135] FlushFileBuffers (hFile=0x18e4) returned 1 [0197.170] CloseHandle (hObject=0x18e4) returned 1 [0197.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8332b80 [0197.318] wcscpy (in: _Dest=0x8332b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" [0197.318] wcscat (in: _Dest=0x8332b80, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\F0DBEC-Readme.txt" [0197.318] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0197.318] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a98 [0197.473] WriteFile (in: hFile=0x2a98, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x94bf724, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x94bf724*=0x70c, lpOverlapped=0x0) returned 1 [0198.046] CloseHandle (hObject=0x2a98) returned 1 [0198.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332b80) returned 1 [0198.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400dd0) returned 1 Thread: id = 5467 os_tid = 0xca0 [0185.242] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json")) returned 0x2020 [0185.242] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0194.367] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18dc [0194.368] GetFileSizeEx (in: hFile=0x18dc, lpFileSize=0x5ccfdb0 | out: lpFileSize=0x5ccfdb0*=236) returned 1 [0194.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b978 [0194.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0194.368] NtQuerySystemTime (in: CurrentTime=0x5ccfd38 | out: CurrentTime=0x5ccfd38*=132471540622728000) returned 0x0 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x624836e8 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x24f57642 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x188289e9 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x5e308970 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x2bac02a8 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x7a4afd0e [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x2e4bcdcc [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x63658294 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x2abbc02b [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x7df25cf8 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x66bdaf1a [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x77b17b6b [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x7ecc7cb7 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x48beedf1 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x3f582046 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x4f72fea [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x1ced0302 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x1ca6a6b3 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x2af207c4 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x3d72f658 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x65a103ba [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x5614d28 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x3e44a7c8 [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x175391cc [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x1499f6af [0194.368] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x4f71b83d [0194.369] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x541bb617 [0194.369] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x1f839d6f [0194.369] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x629344c7 [0194.369] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x31ccbf3 [0194.369] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x1fc8bc65 [0194.369] RtlRandomEx (in: Seed=0x5ccfd30 | out: Seed=0x5ccfd30) returned 0x4b7a151a [0194.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0194.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8970 [0194.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0194.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0194.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0194.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81e4f98 [0194.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3df8970 [0194.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c058 [0194.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0194.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1494d870 [0194.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14951478 [0194.377] ReadFile (in: hFile=0x18dc, lpBuffer=0x1494d870, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0x5ccfd2c, lpOverlapped=0x0 | out: lpBuffer=0x1494d870*, lpNumberOfBytesRead=0x5ccfd2c*=0xec, lpOverlapped=0x0) returned 1 [0194.384] SetFilePointerEx (in: hFile=0x18dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.384] WriteFile (in: hFile=0x18dc, lpBuffer=0x14951478*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x5ccfd30, lpOverlapped=0x0 | out: lpBuffer=0x14951478*, lpNumberOfBytesWritten=0x5ccfd30*=0xec, lpOverlapped=0x0) returned 1 [0196.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d426a0 [0196.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0196.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0196.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14951478) returned 1 [0196.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1494d870) returned 1 [0196.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0196.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4f98) returned 1 [0196.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0196.277] SetFilePointerEx (in: hFile=0x18dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.277] WriteFile (in: hFile=0x18dc, lpBuffer=0x81e0c28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5ccfda4, lpOverlapped=0x0 | out: lpBuffer=0x81e0c28*, lpNumberOfBytesWritten=0x5ccfda4*=0x10c, lpOverlapped=0x0) returned 1 [0196.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0c28) returned 1 [0196.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0196.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0196.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0196.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426a0) returned 1 [0196.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b978) returned 1 [0196.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0196.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0196.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f58b8 [0196.658] wcscpy (in: _Dest=0x81f58b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" [0196.658] wcscat (in: _Dest=0x81f58b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json.f0dbec" [0196.658] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0x5ccfd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef92c0 [0196.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef92c0) returned 1 [0196.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f8cb8) returned 1 [0196.894] NtQueryInformationFile (in: FileHandle=0x18dc, IoStatusBlock=0x5ccfd00, FileInformation=0x5ccfd08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5ccfd00, FileInformation=0x5ccfd08) returned 0x0 [0196.894] NtSetInformationFile (FileHandle=0x18dc, IoStatusBlock=0x5ccfd00, FileInformation=0x5ccfd08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f58b8) returned 1 [0197.162] FlushFileBuffers (hFile=0x18dc) returned 1 [0197.173] CloseHandle (hObject=0x18dc) returned 1 [0197.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f5b28 [0197.320] wcscpy (in: _Dest=0x81f5b28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" [0197.320] wcscat (in: _Dest=0x81f5b28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\F0DBEC-Readme.txt" [0197.320] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0197.320] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1204 [0197.355] WriteFile (in: hFile=0x1204, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x5ccfd4c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x5ccfd4c*=0x70c, lpOverlapped=0x0) returned 1 [0197.357] CloseHandle (hObject=0x1204) returned 1 [0197.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5b28) returned 1 [0197.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401020) returned 1 Thread: id = 5468 os_tid = 0x2f74 [0185.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dominica")) returned 0x20 [0185.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica", dwFileAttributes=0x20) returned 0 [0185.243] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dominica"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.243] GetLastError () returned 0x5 [0185.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica", dwFileAttributes=0x20) returned 0 [0185.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff52b0) returned 1 Thread: id = 5469 os_tid = 0x2f78 [0185.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\edmonton")) returned 0x20 [0185.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton", dwFileAttributes=0x20) returned 0 [0185.246] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\edmonton"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.246] GetLastError () returned 0x5 [0185.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton", dwFileAttributes=0x20) returned 0 [0185.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402bd0) returned 1 Thread: id = 5470 os_tid = 0x2f7c [0185.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\eirunepe")) returned 0x20 [0185.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe", dwFileAttributes=0x20) returned 0 [0185.248] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\eirunepe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.248] GetLastError () returned 0x5 [0185.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe", dwFileAttributes=0x20) returned 0 [0185.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402e00) returned 1 Thread: id = 5471 os_tid = 0x2f80 [0185.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\el_salvador")) returned 0x20 [0185.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador", dwFileAttributes=0x20) returned 0 [0185.251] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\el_salvador"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.251] GetLastError () returned 0x5 [0185.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador", dwFileAttributes=0x20) returned 0 [0185.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 Thread: id = 5472 os_tid = 0x2f84 [0185.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\fortaleza")) returned 0x20 [0185.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza", dwFileAttributes=0x20) returned 0 [0185.253] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\fortaleza"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.253] GetLastError () returned 0x5 [0185.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza", dwFileAttributes=0x20) returned 0 [0185.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402e70) returned 1 Thread: id = 5473 os_tid = 0x2f88 [0185.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\glace_bay")) returned 0x20 [0185.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay", dwFileAttributes=0x20) returned 0 [0185.255] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\glace_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.255] GetLastError () returned 0x5 [0185.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay", dwFileAttributes=0x20) returned 0 [0185.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402ee0) returned 1 Thread: id = 5474 os_tid = 0x2f8c [0185.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\godthab")) returned 0x20 [0185.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab", dwFileAttributes=0x20) returned 0 [0185.257] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\godthab"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.257] GetLastError () returned 0x5 [0185.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab", dwFileAttributes=0x20) returned 0 [0185.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402f50) returned 1 Thread: id = 5475 os_tid = 0x2f90 [0185.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\goose_bay")) returned 0x20 [0185.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay", dwFileAttributes=0x20) returned 0 [0185.259] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\goose_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.260] GetLastError () returned 0x5 [0185.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay", dwFileAttributes=0x20) returned 0 [0185.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402fc0) returned 1 Thread: id = 5476 os_tid = 0x2f94 [0185.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grand_turk")) returned 0x20 [0185.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk", dwFileAttributes=0x20) returned 0 [0185.262] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grand_turk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.262] GetLastError () returned 0x5 [0185.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk", dwFileAttributes=0x20) returned 0 [0185.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 Thread: id = 5477 os_tid = 0x2f98 [0185.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grenada")) returned 0x20 [0185.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada", dwFileAttributes=0x20) returned 0 [0185.264] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grenada"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.264] GetLastError () returned 0x5 [0185.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada", dwFileAttributes=0x20) returned 0 [0185.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403030) returned 1 Thread: id = 5478 os_tid = 0x2f9c [0185.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guadeloupe")) returned 0x20 [0185.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe", dwFileAttributes=0x20) returned 0 [0185.266] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guadeloupe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.266] GetLastError () returned 0x5 [0185.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe", dwFileAttributes=0x20) returned 0 [0185.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 Thread: id = 5479 os_tid = 0x2fa0 [0185.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guatemala")) returned 0x20 [0185.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala", dwFileAttributes=0x20) returned 0 [0185.269] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guatemala"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.269] GetLastError () returned 0x5 [0185.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala", dwFileAttributes=0x20) returned 0 [0185.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84030a0) returned 1 Thread: id = 5480 os_tid = 0x2fa4 [0185.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guayaquil")) returned 0x20 [0185.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil", dwFileAttributes=0x20) returned 0 [0185.271] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guayaquil"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.271] GetLastError () returned 0x5 [0185.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil", dwFileAttributes=0x20) returned 0 [0185.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403110) returned 1 Thread: id = 5481 os_tid = 0x2fac [0185.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guyana")) returned 0x20 [0185.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana", dwFileAttributes=0x20) returned 0 [0185.273] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guyana"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.273] GetLastError () returned 0x5 [0185.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana", dwFileAttributes=0x20) returned 0 [0185.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403180) returned 1 Thread: id = 5482 os_tid = 0x2fb0 [0185.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\halifax")) returned 0x20 [0185.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax", dwFileAttributes=0x20) returned 0 [0185.275] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\halifax"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.275] GetLastError () returned 0x5 [0185.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax", dwFileAttributes=0x20) returned 0 [0185.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84031f0) returned 1 Thread: id = 5483 os_tid = 0x2fb4 [0185.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\havana")) returned 0x20 [0185.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana", dwFileAttributes=0x20) returned 0 [0185.278] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\havana"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.278] GetLastError () returned 0x5 [0185.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana", dwFileAttributes=0x20) returned 0 [0185.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403260) returned 1 Thread: id = 5484 os_tid = 0x2fb8 [0185.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\hermosillo")) returned 0x20 [0185.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo", dwFileAttributes=0x20) returned 0 [0185.280] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\hermosillo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.280] GetLastError () returned 0x5 [0185.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo", dwFileAttributes=0x20) returned 0 [0185.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 5485 os_tid = 0x1014 [0185.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x8403260 [0185.314] wcscpy (in: _Dest=0x8403260, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0185.314] wcscat (in: _Dest=0x8403260, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0185.314] wcscat (in: _Dest=0x8403260, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\*" [0185.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808aa00 [0185.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0185.991] wcscmp (_String1=".", _String2=".") returned 0 [0185.991] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.991] wcscmp (_String1="..", _String2=".") returned 1 [0185.991] wcscmp (_String1="..", _String2="..") returned 0 [0185.991] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x364, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indianapolis", cAlternateFileName="INDIAN~1")) returned 1 [0185.991] wcscmp (_String1="Indianapolis", _String2=".") returned 1 [0185.991] wcscmp (_String1="Indianapolis", _String2="..") returned 1 [0185.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x81be458 [0185.991] wcscpy (in: _Dest=0x81be458, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0185.991] wcscat (in: _Dest=0x81be458, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0185.992] wcscat (in: _Dest=0x81be458, _Source="Indianapolis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" [0187.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81be458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0187.029] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Knox", cAlternateFileName="")) returned 1 [0187.029] wcscmp (_String1="Knox", _String2=".") returned 1 [0187.029] wcscmp (_String1="Knox", _String2="..") returned 1 [0187.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f0b7a8 [0187.029] wcscpy (in: _Dest=0x3f0b7a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0187.029] wcscat (in: _Dest=0x3f0b7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0187.029] wcscat (in: _Dest=0x3f0b7a8, _Source="Knox" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" [0187.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0b7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0187.030] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marengo", cAlternateFileName="")) returned 1 [0187.030] wcscmp (_String1="Marengo", _String2=".") returned 1 [0187.030] wcscmp (_String1="Marengo", _String2="..") returned 1 [0187.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a7d8 [0187.031] wcscpy (in: _Dest=0x831a7d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0187.031] wcscat (in: _Dest=0x831a7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0187.031] wcscat (in: _Dest=0x831a7d8, _Source="Marengo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" [0187.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0187.032] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Petersburg", cAlternateFileName="PETERS~1")) returned 1 [0187.032] wcscmp (_String1="Petersburg", _String2=".") returned 1 [0187.032] wcscmp (_String1="Petersburg", _String2="..") returned 1 [0187.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x81bf228 [0187.032] wcscpy (in: _Dest=0x81bf228, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0187.032] wcscat (in: _Dest=0x81bf228, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0187.032] wcscat (in: _Dest=0x81bf228, _Source="Petersburg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" [0187.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0187.034] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tell_City", cAlternateFileName="TELL_C~1")) returned 1 [0187.034] wcscmp (_String1="Tell_City", _String2=".") returned 1 [0187.034] wcscmp (_String1="Tell_City", _String2="..") returned 1 [0187.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831af58 [0187.034] wcscpy (in: _Dest=0x831af58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0187.034] wcscat (in: _Dest=0x831af58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0187.034] wcscat (in: _Dest=0x831af58, _Source="Tell_City" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" [0187.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831af58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0187.035] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vevay", cAlternateFileName="")) returned 1 [0187.035] wcscmp (_String1="Vevay", _String2=".") returned 1 [0187.035] wcscmp (_String1="Vevay", _String2="..") returned 1 [0187.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f0bbe0 [0187.035] wcscpy (in: _Dest=0x3f0bbe0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0187.035] wcscat (in: _Dest=0x3f0bbe0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0187.035] wcscat (in: _Dest=0x3f0bbe0, _Source="Vevay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" [0187.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f0bbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc [0187.036] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vincennes", cAlternateFileName="VINCEN~1")) returned 1 [0187.037] wcscmp (_String1="Vincennes", _String2=".") returned 1 [0187.037] wcscmp (_String1="Vincennes", _String2="..") returned 1 [0187.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x831a5d8 [0187.037] wcscpy (in: _Dest=0x831a5d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0187.037] wcscat (in: _Dest=0x831a5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0187.037] wcscat (in: _Dest=0x831a5d8, _Source="Vincennes" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" [0187.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0187.038] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 1 [0187.038] wcscmp (_String1="Winamac", _String2=".") returned 1 [0187.038] wcscmp (_String1="Winamac", _String2="..") returned 1 [0187.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x831a6d8 [0187.038] wcscpy (in: _Dest=0x831a6d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0187.039] wcscat (in: _Dest=0x831a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0187.039] wcscat (in: _Dest=0x831a6d8, _Source="Winamac" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" [0187.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x831a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0187.040] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 0 [0187.040] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0190.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808aa00) returned 1 [0190.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403260) returned 1 [0190.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84032d0) returned 1 Thread: id = 5486 os_tid = 0x101c [0185.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\inuvik")) returned 0x20 [0185.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik", dwFileAttributes=0x20) returned 0 [0185.318] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\inuvik"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.318] GetLastError () returned 0x5 [0185.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik", dwFileAttributes=0x20) returned 0 [0185.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403340) returned 1 Thread: id = 5487 os_tid = 0x1024 [0185.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\iqaluit")) returned 0x20 [0185.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit", dwFileAttributes=0x20) returned 0 [0185.321] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\iqaluit"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.321] GetLastError () returned 0x5 [0185.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit", dwFileAttributes=0x20) returned 0 [0185.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84033b0) returned 1 Thread: id = 5488 os_tid = 0x1064 [0185.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\jamaica")) returned 0x20 [0185.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica", dwFileAttributes=0x20) returned 0 [0185.323] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\jamaica"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.323] GetLastError () returned 0x5 [0185.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica", dwFileAttributes=0x20) returned 0 [0185.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403420) returned 1 Thread: id = 5489 os_tid = 0x11bc [0185.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\juneau")) returned 0x20 [0185.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau", dwFileAttributes=0x20) returned 0 [0185.324] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\juneau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.325] GetLastError () returned 0x5 [0185.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau", dwFileAttributes=0x20) returned 0 [0185.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403490) returned 1 Thread: id = 5490 os_tid = 0x10c4 [0185.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e68498 [0185.326] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0185.326] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\" [0185.326] wcscat (in: _Dest=0x3e68498, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*" [0185.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8024780 [0185.326] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x8024780 | out: lpFindFileData=0x8024780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099310 [0185.326] wcscmp (_String1=".", _String2=".") returned 0 [0185.326] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x8024780 | out: lpFindFileData=0x8024780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.327] wcscmp (_String1="..", _String2=".") returned 1 [0185.327] wcscmp (_String1="..", _String2="..") returned 0 [0185.327] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x8024780 | out: lpFindFileData=0x8024780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Louisville", cAlternateFileName="LOUISV~1")) returned 1 [0185.327] wcscmp (_String1="Louisville", _String2=".") returned 1 [0185.327] wcscmp (_String1="Louisville", _String2="..") returned 1 [0185.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x8053a78 [0185.327] wcscpy (in: _Dest=0x8053a78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0185.327] wcscat (in: _Dest=0x8053a78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\" [0185.327] wcscat (in: _Dest=0x8053a78, _Source="Louisville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" [0188.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8053a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0188.010] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x8024780 | out: lpFindFileData=0x8024780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="MONTIC~1")) returned 1 [0188.010] wcscmp (_String1="Monticello", _String2=".") returned 1 [0188.010] wcscmp (_String1="Monticello", _String2="..") returned 1 [0188.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1f3c0 [0188.010] wcscpy (in: _Dest=0x3e1f3c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0188.010] wcscat (in: _Dest=0x3e1f3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\" [0188.010] wcscat (in: _Dest=0x3e1f3c0, _Source="Monticello" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" [0188.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1f3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c8 [0188.012] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x8024780 | out: lpFindFileData=0x8024780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="MONTIC~1")) returned 0 [0188.012] FindClose (in: hFindFile=0x8099310 | out: hFindFile=0x8099310) returned 1 [0188.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8024780) returned 1 [0188.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0188.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403500) returned 1 Thread: id = 5491 os_tid = 0x1360 [0185.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\la_paz")) returned 0x20 [0185.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz", dwFileAttributes=0x20) returned 0 [0185.328] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\la_paz"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.328] GetLastError () returned 0x5 [0185.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz", dwFileAttributes=0x20) returned 0 [0185.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403570) returned 1 Thread: id = 5492 os_tid = 0x10c8 [0185.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\lima")) returned 0x20 [0186.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima", dwFileAttributes=0x20) returned 0 [0186.528] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\lima"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.528] GetLastError () returned 0x5 [0186.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima", dwFileAttributes=0x20) returned 0 [0186.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ecd340) returned 1 Thread: id = 5493 os_tid = 0x10d0 [0185.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\los_angeles")) returned 0x20 [0186.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles", dwFileAttributes=0x20) returned 0 [0186.529] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\los_angeles"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.530] GetLastError () returned 0x5 [0186.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles", dwFileAttributes=0x20) returned 0 [0186.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 Thread: id = 5494 os_tid = 0x1110 [0185.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\maceio")) returned 0x20 [0186.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio", dwFileAttributes=0x20) returned 0 [0186.002] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\maceio"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.002] GetLastError () returned 0x5 [0186.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio", dwFileAttributes=0x20) returned 0 [0186.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84035e0) returned 1 Thread: id = 5495 os_tid = 0x93c [0185.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\managua")) returned 0x20 [0186.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua", dwFileAttributes=0x20) returned 0 [0186.004] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\managua"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.004] GetLastError () returned 0x5 [0186.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua", dwFileAttributes=0x20) returned 0 [0186.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403650) returned 1 Thread: id = 5496 os_tid = 0x1114 [0186.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\manaus")) returned 0x20 [0186.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus", dwFileAttributes=0x20) returned 0 [0186.007] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\manaus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.007] GetLastError () returned 0x5 [0186.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus", dwFileAttributes=0x20) returned 0 [0186.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84036c0) returned 1 Thread: id = 5497 os_tid = 0x1118 [0186.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020 [0191.229] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0201.117] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2578 [0201.118] GetFileSizeEx (in: hFile=0x2578, lpFileSize=0x9d1ff30 | out: lpFileSize=0x9d1ff30*=221) returned 1 [0201.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42218 [0201.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8fe0 [0201.119] NtQuerySystemTime (in: CurrentTime=0x9d1feb8 | out: CurrentTime=0x9d1feb8*=132471540689652000) returned 0x0 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x6d01d29a [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x654c71c8 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x19d67e54 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x6628fb01 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x633b1a72 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x5f063df8 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x23bfcef2 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x3f6bb780 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0xd4d6754 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x18b2f67b [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x29a1d331 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x108ebbda [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x60723a02 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x134dcc21 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0xb07fb22 [0201.119] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0xcb83c86 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x2c1a2aee [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x76331ec5 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0xf9d1cf5 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x3067d5d9 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x2487a56f [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x764e8ff7 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x67274e4e [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x21cc2597 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x4a6fabd7 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x523ff005 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x1ab87a76 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x4dd61334 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x2ec0deef [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x2114c2f6 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x1fa55b21 [0201.120] RtlRandomEx (in: Seed=0x9d1feb0 | out: Seed=0x9d1feb0) returned 0x465f976d [0201.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bdc890 [0201.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14be0498 [0201.134] ReadFile (in: hFile=0x2578, lpBuffer=0x14bdc890, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x9d1feac, lpOverlapped=0x0 | out: lpBuffer=0x14bdc890*, lpNumberOfBytesRead=0x9d1feac*=0xdd, lpOverlapped=0x0) returned 1 [0201.137] SetFilePointerEx (in: hFile=0x2578, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.137] WriteFile (in: hFile=0x2578, lpBuffer=0x14be0498*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x9d1feb0, lpOverlapped=0x0 | out: lpBuffer=0x14be0498*, lpNumberOfBytesWritten=0x9d1feb0*=0xdd, lpOverlapped=0x0) returned 1 [0204.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0204.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421c8 [0204.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421c8) returned 1 [0204.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14be0498) returned 1 [0204.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bdc890) returned 1 [0204.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402f48) returned 1 [0204.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5220) returned 1 [0204.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f228 [0204.308] SetFilePointerEx (in: hFile=0x2578, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.308] WriteFile (in: hFile=0x2578, lpBuffer=0x30bcbc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9d1ff24, lpOverlapped=0x0 | out: lpBuffer=0x30bcbc8*, lpNumberOfBytesWritten=0x9d1ff24*=0x10c, lpOverlapped=0x0) returned 1 [0207.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0207.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa68) returned 1 [0207.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421c8) returned 1 [0207.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f228) returned 1 [0207.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0207.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42218) returned 1 [0207.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed230) returned 1 [0207.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x307a2b8) returned 1 [0207.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83eef48 [0207.348] wcscpy (in: _Dest=0x83eef48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" [0207.348] wcscat (in: _Dest=0x83eef48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.f0dbec" [0207.348] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.f0dbec", NtPathName=0x9d1fea8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3cc20 [0208.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cc20) returned 1 [0208.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f9250) returned 1 [0208.510] NtQueryInformationFile (in: FileHandle=0x2578, IoStatusBlock=0x9d1fe80, FileInformation=0x9d1fe88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9d1fe80, FileInformation=0x9d1fe88) returned 0x0 [0208.510] NtSetInformationFile (FileHandle=0x2578, IoStatusBlock=0x9d1fe80, FileInformation=0x9d1fe88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eef48) returned 1 [0208.885] FlushFileBuffers (hFile=0x2578) returned 1 [0208.887] CloseHandle (hObject=0x2578) returned 1 [0208.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x331860 [0208.937] wcscpy (in: _Dest=0x331860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" [0208.937] wcscat (in: _Dest=0x331860, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\F0DBEC-Readme.txt" [0208.937] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\f0dbec-readme.txt")) returned 0xffffffff [0208.938] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2578 [0208.953] WriteFile (in: hFile=0x2578, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9d1fecc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9d1fecc*=0x70c, lpOverlapped=0x0) returned 1 [0208.965] CloseHandle (hObject=0x2578) returned 1 [0208.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x331860) returned 1 [0208.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0fe8) returned 1 Thread: id = 5498 os_tid = 0x111c [0186.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020 [0191.232] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0200.536] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1274 [0200.536] GetFileSizeEx (in: hFile=0x1274, lpFileSize=0x921fea0 | out: lpFileSize=0x921fea0*=279) returned 1 [0200.536] SetFilePointerEx (in: hFile=0x1274, liDistanceToMove=0x113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.536] ReadFile (in: hFile=0x1274, lpBuffer=0x921feac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x921fe88, lpOverlapped=0x0 | out: lpBuffer=0x921feac*, lpNumberOfBytesRead=0x921fe88*=0x4, lpOverlapped=0x0) returned 1 [0200.538] SetFilePointerEx (in: hFile=0x1274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0200.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42128 [0200.538] NtQuerySystemTime (in: CurrentTime=0x921fe28 | out: CurrentTime=0x921fe28*=132471540684036000) returned 0x0 [0200.538] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x6abdc0e8 [0200.538] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0xd75011a [0200.538] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x7502b98b [0200.538] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x11306c45 [0200.538] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0xaec7cdb [0200.538] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x72636774 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x71c21703 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x2923101 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x29ff6d8b [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x6e8929de [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x73f9d217 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x21b5142c [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x5949fffd [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x34c60245 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x54730e14 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x6cc5876f [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x6482bae9 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x75df6fb1 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x214494a7 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x4a3fbfe2 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x3b5f385c [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x3bc2d55a [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0xfb56c75 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x398e90c2 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x1ec2d208 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x44f52cc8 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x586f3a15 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x619d4837 [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x78aedebf [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x4252187b [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x2f81e15d [0200.539] RtlRandomEx (in: Seed=0x921fe20 | out: Seed=0x921fe20) returned 0x6458c5d1 [0200.595] ReadFile (in: hFile=0x1274, lpBuffer=0x14b020e0, nNumberOfBytesToRead=0x117, lpNumberOfBytesRead=0x921fe1c, lpOverlapped=0x0 | out: lpBuffer=0x14b020e0*, lpNumberOfBytesRead=0x921fe1c*=0x117, lpOverlapped=0x0) returned 1 [0200.595] SetFilePointerEx (in: hFile=0x1274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.595] WriteFile (in: hFile=0x1274, lpBuffer=0x14b06060*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x921fe20, lpOverlapped=0x0 | out: lpBuffer=0x14b06060*, lpNumberOfBytesWritten=0x921fe20*=0x117, lpOverlapped=0x0) returned 1 [0204.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b838 [0204.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd28 [0204.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd28) returned 1 [0204.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b06060) returned 1 [0204.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b020e0) returned 1 [0204.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0204.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b44a0) returned 1 [0204.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69120 [0204.735] SetFilePointerEx (in: hFile=0x1274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.735] WriteFile (in: hFile=0x1274, lpBuffer=0x84060d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x921fe94, lpOverlapped=0x0 | out: lpBuffer=0x84060d8*, lpNumberOfBytesWritten=0x921fe94*=0x10c, lpOverlapped=0x0) returned 1 [0207.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 [0207.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69150) returned 1 [0207.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd28) returned 1 [0207.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69120) returned 1 [0207.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b838) returned 1 [0207.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428a8) returned 1 [0207.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0207.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42538) returned 1 [0207.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef1b8 [0207.882] wcscpy (in: _Dest=0x83ef1b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" [0207.883] wcscat (in: _Dest=0x83ef1b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.f0dbec" [0207.883] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0x921fe18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c1e0 [0208.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1e0) returned 1 [0208.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830f648) returned 1 [0208.114] NtQueryInformationFile (in: FileHandle=0x1274, IoStatusBlock=0x921fdf0, FileInformation=0x921fdf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x921fdf0, FileInformation=0x921fdf8) returned 0x0 [0208.114] NtSetInformationFile (FileHandle=0x1274, IoStatusBlock=0x921fdf0, FileInformation=0x921fdf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef1b8) returned 1 [0208.270] FlushFileBuffers (hFile=0x1274) returned 1 [0208.286] CloseHandle (hObject=0x1274) returned 1 [0208.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d4268 [0208.563] wcscpy (in: _Dest=0x81d4268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" [0208.563] wcscat (in: _Dest=0x81d4268, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\F0DBEC-Readme.txt" [0208.563] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0208.563] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.035] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x921fe3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x921fe3c*=0x70c, lpOverlapped=0x0) returned 1 [0209.037] CloseHandle (hObject=0x1bc4) returned 1 [0209.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4268) returned 1 [0209.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d08f8) returned 1 Thread: id = 5499 os_tid = 0x1364 [0186.010] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020 [0191.233] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0200.468] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1540 [0200.469] GetFileSizeEx (in: hFile=0x1540, lpFileSize=0xa7ffc20 | out: lpFileSize=0xa7ffc20*=235) returned 1 [0200.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0200.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43618 [0200.469] NtQuerySystemTime (in: CurrentTime=0xa7ffba8 | out: CurrentTime=0xa7ffba8*=132471540683256000) returned 0x0 [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x1da626a8 [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x5e786df5 [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x66cf3c31 [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0xd56ff98 [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x1e483304 [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x4c8ac92d [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x49b725dc [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x126789bb [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x54180735 [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x31e5152b [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x617057a7 [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x24835902 [0200.469] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x14106c06 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x38ea81b4 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x1fb01fec [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x106b2eff [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x67695e5c [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x60a7dc79 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x6c085e4c [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x4171da15 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x14cf5070 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x24a23b0a [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x69eaef64 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x66c6989 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x596a8ff1 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x14c658a6 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x564ed2d1 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x79edd540 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x2e7c69c9 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x3b18efa8 [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x1bb2637b [0200.470] RtlRandomEx (in: Seed=0xa7ffba0 | out: Seed=0xa7ffba0) returned 0x28989400 [0200.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14aeb8b0 [0200.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14aef4b8 [0200.501] ReadFile (in: hFile=0x1540, lpBuffer=0x14aeb8b0, nNumberOfBytesToRead=0xeb, lpNumberOfBytesRead=0xa7ffb9c, lpOverlapped=0x0 | out: lpBuffer=0x14aeb8b0*, lpNumberOfBytesRead=0xa7ffb9c*=0xeb, lpOverlapped=0x0) returned 1 [0200.503] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.503] WriteFile (in: hFile=0x1540, lpBuffer=0x14aef4b8*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0xa7ffba0, lpOverlapped=0x0 | out: lpBuffer=0x14aef4b8*, lpNumberOfBytesWritten=0xa7ffba0*=0xeb, lpOverlapped=0x0) returned 1 [0204.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d422b8 [0204.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42150 [0204.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42150) returned 1 [0204.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aef4b8) returned 1 [0204.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aeb8b0) returned 1 [0204.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0204.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5ec8) returned 1 [0204.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f318 [0204.306] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.306] WriteFile (in: hFile=0x1540, lpBuffer=0x30bb5e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa7ffc14, lpOverlapped=0x0 | out: lpBuffer=0x30bb5e8*, lpNumberOfBytesWritten=0xa7ffc14*=0x10c, lpOverlapped=0x0) returned 1 [0207.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0207.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa08) returned 1 [0207.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42150) returned 1 [0207.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f318) returned 1 [0207.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422b8) returned 1 [0207.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0207.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43140) returned 1 [0207.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43e60) returned 1 [0207.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83eee10 [0207.344] wcscpy (in: _Dest=0x83eee10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" [0207.344] wcscat (in: _Dest=0x83eee10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.f0dbec" [0207.344] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0xa7ffb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3cd68 [0208.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cd68) returned 1 [0208.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8205d00) returned 1 [0208.506] NtQueryInformationFile (in: FileHandle=0x1540, IoStatusBlock=0xa7ffb70, FileInformation=0xa7ffb78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa7ffb70, FileInformation=0xa7ffb78) returned 0x0 [0208.506] NtSetInformationFile (FileHandle=0x1540, IoStatusBlock=0xa7ffb70, FileInformation=0xa7ffb78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eee10) returned 1 [0209.057] FlushFileBuffers (hFile=0x1540) returned 1 [0209.545] CloseHandle (hObject=0x1540) returned 1 [0209.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a43d8 [0209.565] wcscpy (in: _Dest=0x148a43d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" [0209.565] wcscat (in: _Dest=0x148a43d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\F0DBEC-Readme.txt" [0209.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0209.566] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1144 [0209.612] WriteFile (in: hFile=0x1144, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa7ffbbc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa7ffbbc*=0x70c, lpOverlapped=0x0) returned 1 [0209.633] CloseHandle (hObject=0x1144) returned 1 [0209.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a43d8) returned 1 [0209.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1928) returned 1 Thread: id = 5500 os_tid = 0x1368 [0186.010] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020 [0191.234] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0200.329] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1568 [0200.329] GetFileSizeEx (in: hFile=0x1568, lpFileSize=0x892faf0 | out: lpFileSize=0x892faf0*=209) returned 1 [0200.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0200.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43118 [0200.330] NtQuerySystemTime (in: CurrentTime=0x892fa78 | out: CurrentTime=0x892fa78*=132471540681852000) returned 0x0 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x254597be [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x622fec7f [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x7c63ba5d [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x2d91abb1 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x38371518 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0xee4a8f2 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x6ff8bbf1 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x4945a01 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0xa5e0cb1 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x522ef44e [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x5575e6d5 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x2c5d5073 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x69e3acdf [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x7de482b6 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x46c5f971 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x22960a7b [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x35456cfb [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x25fa82a8 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x556e5ee6 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x18b1fe87 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x21c1fa26 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x7b1dff6f [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x6436fd41 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x1a10f6ec [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x534e0943 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x4bf32c1 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x2082c8c2 [0200.330] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x6ecedb53 [0200.331] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x4648a144 [0200.331] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0x51b88db1 [0200.331] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0xe95c139 [0200.331] RtlRandomEx (in: Seed=0x892fa70 | out: Seed=0x892fa70) returned 0xd7b2aad [0200.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad5080 [0200.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad8c88 [0200.347] ReadFile (in: hFile=0x1568, lpBuffer=0x14ad5080, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0x892fa6c, lpOverlapped=0x0 | out: lpBuffer=0x14ad5080*, lpNumberOfBytesRead=0x892fa6c*=0xd1, lpOverlapped=0x0) returned 1 [0200.349] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.349] WriteFile (in: hFile=0x1568, lpBuffer=0x14ad8c88*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x892fa70, lpOverlapped=0x0 | out: lpBuffer=0x14ad8c88*, lpNumberOfBytesWritten=0x892fa70*=0xd1, lpOverlapped=0x0) returned 1 [0204.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b78 [0204.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e48 [0204.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0204.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad8c88) returned 1 [0204.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad5080) returned 1 [0204.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0ba00) returned 1 [0204.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b6150) returned 1 [0204.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6faf8 [0204.309] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.309] WriteFile (in: hFile=0x1568, lpBuffer=0x30bbb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x892fae4, lpOverlapped=0x0 | out: lpBuffer=0x30bbb60*, lpNumberOfBytesWritten=0x892fae4*=0x10c, lpOverlapped=0x0) returned 1 [0207.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0207.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fac8) returned 1 [0207.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0207.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6faf8) returned 1 [0207.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0207.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0207.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0207.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427e0) returned 1 [0207.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5780 [0207.352] wcscpy (in: _Dest=0x81f5780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" [0207.352] wcscat (in: _Dest=0x81f5780, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.f0dbec" [0207.352] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0x892fa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3cad8 [0208.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cad8) returned 1 [0208.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fd750) returned 1 [0208.508] NtQueryInformationFile (in: FileHandle=0x1568, IoStatusBlock=0x892fa40, FileInformation=0x892fa48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x892fa40, FileInformation=0x892fa48) returned 0x0 [0208.508] NtSetInformationFile (FileHandle=0x1568, IoStatusBlock=0x892fa40, FileInformation=0x892fa48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5780) returned 1 [0208.883] FlushFileBuffers (hFile=0x1568) returned 1 [0209.026] CloseHandle (hObject=0x1568) returned 1 [0209.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d2fe8 [0209.028] wcscpy (in: _Dest=0x81d2fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" [0209.028] wcscat (in: _Dest=0x81d2fe8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\F0DBEC-Readme.txt" [0209.028] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0209.028] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1568 [0209.029] WriteFile (in: hFile=0x1568, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x892fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x892fa8c*=0x70c, lpOverlapped=0x0) returned 1 [0209.030] CloseHandle (hObject=0x1568) returned 1 [0209.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2fe8) returned 1 [0209.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d16d8) returned 1 Thread: id = 5501 os_tid = 0x1144 [0186.011] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020 [0191.237] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0201.175] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1840 [0201.176] GetFileSizeEx (in: hFile=0x1840, lpFileSize=0x7e1fbd8 | out: lpFileSize=0x7e1fbd8*=213) returned 1 [0201.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd90a8 [0201.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8061fe0 [0201.176] NtQuerySystemTime (in: CurrentTime=0x7e1fb60 | out: CurrentTime=0x7e1fb60*=132471540690120000) returned 0x0 [0201.176] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x28186fc1 [0201.176] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x2d3785e8 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x367052ef [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x7aa45218 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x4bddb242 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x2283c177 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x67d11b8f [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x14f55937 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x18420364 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x6e610bb2 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x6729c5c3 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x6c43d3d9 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x334c0fa7 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x5b23e2b6 [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x4882393a [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x347e2c7a [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x3385214f [0201.177] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x71644932 [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x4559e31a [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x1f076374 [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x76c77dab [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x5006b90d [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x23cc4b10 [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x7c668a46 [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x52d23fa8 [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x18773271 [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0xe319a73 [0201.240] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x1b7e6b32 [0201.241] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x3d93bae2 [0201.241] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x4f20df28 [0201.241] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x8323ac [0201.241] RtlRandomEx (in: Seed=0x7e1fb58 | out: Seed=0x7e1fb58) returned 0x37811f5e [0201.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bf30c0 [0201.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bf6cc8 [0201.252] ReadFile (in: hFile=0x1840, lpBuffer=0x14bf30c0, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0x7e1fb54, lpOverlapped=0x0 | out: lpBuffer=0x14bf30c0*, lpNumberOfBytesRead=0x7e1fb54*=0xd5, lpOverlapped=0x0) returned 1 [0201.254] SetFilePointerEx (in: hFile=0x1840, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.254] WriteFile (in: hFile=0x1840, lpBuffer=0x14bf6cc8*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x7e1fb58, lpOverlapped=0x0 | out: lpBuffer=0x14bf6cc8*, lpNumberOfBytesWritten=0x7e1fb58*=0xd5, lpOverlapped=0x0) returned 1 [0204.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42da8 [0204.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42830 [0204.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42830) returned 1 [0204.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bf6cc8) returned 1 [0204.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bf30c0) returned 1 [0204.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84030b0) returned 1 [0204.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b60c0) returned 1 [0204.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ae0 [0204.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0204.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69b10 [0204.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4d020 [0204.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b838 [0204.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b838) returned 1 [0204.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84030b0) returned 1 [0204.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b60c0) returned 1 [0204.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x84061f0 [0204.728] SetFilePointerEx (in: hFile=0x1840, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.728] WriteFile (in: hFile=0x1840, lpBuffer=0x84061f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7e1fbcc, lpOverlapped=0x0 | out: lpBuffer=0x84061f0*, lpNumberOfBytesWritten=0x7e1fbcc*=0x10c, lpOverlapped=0x0) returned 1 [0207.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84061f0) returned 1 [0207.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b10) returned 1 [0207.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0207.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ae0) returned 1 [0207.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0207.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd90a8) returned 1 [0207.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062008) returned 1 [0207.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062030) returned 1 [0207.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef080 [0207.879] wcscpy (in: _Dest=0x83ef080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" [0207.880] wcscat (in: _Dest=0x83ef080, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.f0dbec" [0207.880] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0x7e1fb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c470 [0208.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c470) returned 1 [0208.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8319188) returned 1 [0208.112] NtQueryInformationFile (in: FileHandle=0x1840, IoStatusBlock=0x7e1fb28, FileInformation=0x7e1fb30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7e1fb28, FileInformation=0x7e1fb30) returned 0x0 [0208.112] NtSetInformationFile (FileHandle=0x1840, IoStatusBlock=0x7e1fb28, FileInformation=0x7e1fb30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef080) returned 1 [0208.267] FlushFileBuffers (hFile=0x1840) returned 1 [0208.275] CloseHandle (hObject=0x1840) returned 1 [0208.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d36d8 [0208.561] wcscpy (in: _Dest=0x81d36d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" [0208.561] wcscat (in: _Dest=0x81d36d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\F0DBEC-Readme.txt" [0208.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0208.562] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.026] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7e1fb74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7e1fb74*=0x70c, lpOverlapped=0x0) returned 1 [0209.033] CloseHandle (hObject=0x1bc4) returned 1 [0209.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d36d8) returned 1 [0209.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1b78) returned 1 Thread: id = 5502 os_tid = 0x1164 [0186.011] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020 [0191.240] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0200.664] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc8c [0200.664] GetFileSizeEx (in: hFile=0xc8c, lpFileSize=0x454fbc0 | out: lpFileSize=0x454fbc0*=221) returned 1 [0200.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42380 [0200.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d424e8 [0200.665] NtQuerySystemTime (in: CurrentTime=0x454fb48 | out: CurrentTime=0x454fb48*=132471540685128000) returned 0x0 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x4d47ab56 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x75333b1c [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x2427d209 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x5ded6a22 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x5c574904 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x682895a8 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x5bf9cde1 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x7f641ac0 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x583ef66e [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x5419d291 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x63b3910c [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x78e2ad31 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x3206f945 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x86f85e5 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0xedf0f85 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x1acc27ac [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x1da535a8 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x1bbf541 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x33b4bbe3 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x4265d7bb [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x38637f86 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x615b7171 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x11e2d35 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x2520b0d1 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x16643c1 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x7eee99c8 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x11c1b013 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x1d28ec77 [0200.665] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x1637ba81 [0200.666] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x2a3b7ddf [0200.666] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x63d082f [0200.666] RtlRandomEx (in: Seed=0x454fb40 | out: Seed=0x454fb40) returned 0x5b3ddaef [0200.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b2f4b8 [0200.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b330c0 [0200.679] ReadFile (in: hFile=0xc8c, lpBuffer=0x14b2f4b8, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x454fb3c, lpOverlapped=0x0 | out: lpBuffer=0x14b2f4b8*, lpNumberOfBytesRead=0x454fb3c*=0xdd, lpOverlapped=0x0) returned 1 [0200.681] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.681] WriteFile (in: hFile=0xc8c, lpBuffer=0x14b330c0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x454fb40, lpOverlapped=0x0 | out: lpBuffer=0x14b330c0*, lpNumberOfBytesWritten=0x454fb40*=0xdd, lpOverlapped=0x0) returned 1 [0203.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064740 [0203.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064768 [0203.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064768) returned 1 [0203.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b330c0) returned 1 [0203.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b2f4b8) returned 1 [0203.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0203.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4da0) returned 1 [0203.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36e30 [0203.679] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.679] WriteFile (in: hFile=0xc8c, lpBuffer=0x8321998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x454fbb4, lpOverlapped=0x0 | out: lpBuffer=0x8321998*, lpNumberOfBytesWritten=0x454fbb4*=0x10c, lpOverlapped=0x0) returned 1 [0204.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321998) returned 1 [0204.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36e60) returned 1 [0204.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064768) returned 1 [0204.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36e30) returned 1 [0204.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064740) returned 1 [0204.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42380) returned 1 [0204.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f88) returned 1 [0204.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42718) returned 1 [0204.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346e10 [0204.179] wcscpy (in: _Dest=0x8346e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" [0204.179] wcscat (in: _Dest=0x8346e10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.f0dbec" [0204.179] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0x454fb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f4fe8 [0204.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4fe8) returned 1 [0204.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833fbd0) returned 1 [0204.567] NtQueryInformationFile (in: FileHandle=0xc8c, IoStatusBlock=0x454fb10, FileInformation=0x454fb18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x454fb10, FileInformation=0x454fb18) returned 0x0 [0204.567] NtSetInformationFile (FileHandle=0xc8c, IoStatusBlock=0x454fb10, FileInformation=0x454fb18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346e10) returned 1 [0207.701] FlushFileBuffers (hFile=0xc8c) returned 1 [0207.726] CloseHandle (hObject=0xc8c) returned 1 [0208.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d26a8 [0208.054] wcscpy (in: _Dest=0x81d26a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" [0208.054] wcscat (in: _Dest=0x81d26a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\F0DBEC-Readme.txt" [0208.054] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0208.054] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5ac [0208.440] WriteFile (in: hFile=0x5ac, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x454fb5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x454fb5c*=0x70c, lpOverlapped=0x0) returned 1 [0209.389] CloseHandle (hObject=0x5ac) returned 1 [0209.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d26a8) returned 1 [0209.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1488) returned 1 Thread: id = 5503 os_tid = 0x1168 [0186.012] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020 [0191.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0200.719] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11b4 [0200.719] GetFileSizeEx (in: hFile=0x11b4, lpFileSize=0xa01f800 | out: lpFileSize=0xa01f800*=218) returned 1 [0200.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43c58 [0200.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43488 [0200.719] NtQuerySystemTime (in: CurrentTime=0xa01f788 | out: CurrentTime=0xa01f788*=132471540685596000) returned 0x0 [0200.719] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x61c8943c [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x6a313b12 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x2c9678fb [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x59c67a33 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x65ddf5ef [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0xcc1ec1b [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x5aa1bc80 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0xd63c635 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x459dc127 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x34dd5321 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x2fafe813 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x34b296e1 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0xb16eaae [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x51f85744 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x14eec317 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x7e8ddf00 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x5deb02e4 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x33044b78 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x59d3690d [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x7ac846ef [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x356d0c27 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x7922dc34 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x6d4a4e1 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x1fe5937e [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x3c89dcf0 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x607a57f1 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x62145a11 [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x9fdf9af [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x6d088b0a [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x4e3d3a3d [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x76f2c8ab [0200.720] RtlRandomEx (in: Seed=0xa01f780 | out: Seed=0xa01f780) returned 0x559f8a44 [0200.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b46060 [0200.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b49c68 [0200.734] ReadFile (in: hFile=0x11b4, lpBuffer=0x14b46060, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0xa01f77c, lpOverlapped=0x0 | out: lpBuffer=0x14b46060*, lpNumberOfBytesRead=0xa01f77c*=0xda, lpOverlapped=0x0) returned 1 [0200.736] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.736] WriteFile (in: hFile=0x11b4, lpBuffer=0x14b49c68*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0xa01f780, lpOverlapped=0x0 | out: lpBuffer=0x14b49c68*, lpNumberOfBytesWritten=0xa01f780*=0xda, lpOverlapped=0x0) returned 1 [0203.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064830 [0203.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064858 [0203.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064858) returned 1 [0203.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b49c68) returned 1 [0203.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b46060) returned 1 [0203.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51548) returned 1 [0203.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5028) returned 1 [0203.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36f50 [0203.689] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.689] WriteFile (in: hFile=0x11b4, lpBuffer=0x8321ce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa01f7f4, lpOverlapped=0x0 | out: lpBuffer=0x8321ce0*, lpNumberOfBytesWritten=0xa01f7f4*=0x10c, lpOverlapped=0x0) returned 1 [0204.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321ce0) returned 1 [0204.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36f80) returned 1 [0204.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064858) returned 1 [0204.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36f50) returned 1 [0204.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064830) returned 1 [0204.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43c58) returned 1 [0204.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d437d0) returned 1 [0204.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0204.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83471b8 [0204.213] wcscpy (in: _Dest=0x83471b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" [0204.213] wcscat (in: _Dest=0x83471b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.f0dbec" [0204.213] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0xa01f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f53c0 [0204.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f53c0) returned 1 [0204.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833e868) returned 1 [0204.572] NtQueryInformationFile (in: FileHandle=0x11b4, IoStatusBlock=0xa01f750, FileInformation=0xa01f758, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa01f750, FileInformation=0xa01f758) returned 0x0 [0204.572] NtSetInformationFile (FileHandle=0x11b4, IoStatusBlock=0xa01f750, FileInformation=0xa01f758, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83471b8) returned 1 [0207.725] FlushFileBuffers (hFile=0x11b4) returned 1 [0207.739] CloseHandle (hObject=0x11b4) returned 1 [0208.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d2580 [0208.061] wcscpy (in: _Dest=0x81d2580, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" [0208.061] wcscat (in: _Dest=0x81d2580, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\F0DBEC-Readme.txt" [0208.061] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0208.061] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcc4 [0208.440] WriteFile (in: hFile=0xcc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa01f79c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa01f79c*=0x70c, lpOverlapped=0x0) returned 1 [0209.392] CloseHandle (hObject=0xcc4) returned 1 [0209.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2580) returned 1 [0209.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1dc8) returned 1 Thread: id = 5504 os_tid = 0x11d8 [0186.012] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020 [0191.242] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0200.879] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a74 [0200.879] GetFileSizeEx (in: hFile=0x1a74, lpFileSize=0x782fe28 | out: lpFileSize=0x782fe28*=224) returned 1 [0200.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42830 [0200.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423d0 [0200.880] NtQuerySystemTime (in: CurrentTime=0x782fdb0 | out: CurrentTime=0x782fdb0*=132471540687156000) returned 0x0 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x4e744de2 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x40ca46c6 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x200a945a [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x258b8048 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x3b9daf8a [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x322e9785 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x162f3186 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x201e7c72 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x5f12c553 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x4503ca88 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x48f2c120 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x2dfd491d [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x6191c9d2 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x2cb27c48 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x31fa4da3 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x6a304f63 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x41a1c183 [0200.880] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x40dcda99 [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x1a9b4a7d [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x46566449 [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x4e75f315 [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x7ce16780 [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x2114c2f6 [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x2f05291 [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x4ee9a807 [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x3970575e [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x39cbed62 [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x5af115fe [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x2819f72e [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x7d0c4040 [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x470cc09b [0200.881] RtlRandomEx (in: Seed=0x782fda8 | out: Seed=0x782fda8) returned 0x43815638 [0200.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b98c88 [0200.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b9c890 [0200.920] ReadFile (in: hFile=0x1a74, lpBuffer=0x14b98c88, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0x782fda4, lpOverlapped=0x0 | out: lpBuffer=0x14b98c88*, lpNumberOfBytesRead=0x782fda4*=0xe0, lpOverlapped=0x0) returned 1 [0200.922] SetFilePointerEx (in: hFile=0x1a74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.922] WriteFile (in: hFile=0x1a74, lpBuffer=0x14b9c890*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x782fda8, lpOverlapped=0x0 | out: lpBuffer=0x14b9c890*, lpNumberOfBytesWritten=0x782fda8*=0xe0, lpOverlapped=0x0) returned 1 [0203.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b50 [0203.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b78 [0203.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b78) returned 1 [0203.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b9c890) returned 1 [0203.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b98c88) returned 1 [0203.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402b10) returned 1 [0203.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4f08) returned 1 [0203.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f37310 [0203.722] SetFilePointerEx (in: hFile=0x1a74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.722] WriteFile (in: hFile=0x1a74, lpBuffer=0x83227d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x782fe1c, lpOverlapped=0x0 | out: lpBuffer=0x83227d0*, lpNumberOfBytesWritten=0x782fe1c*=0x10c, lpOverlapped=0x0) returned 1 [0204.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83227d0) returned 1 [0204.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37340) returned 1 [0204.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b78) returned 1 [0204.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37310) returned 1 [0204.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b50) returned 1 [0204.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42830) returned 1 [0204.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42330) returned 1 [0204.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0204.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83477d0 [0204.233] wcscpy (in: _Dest=0x83477d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" [0204.233] wcscat (in: _Dest=0x83477d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.f0dbec" [0204.234] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0x782fda0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83eae50 [0204.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eae50) returned 1 [0204.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833dda0) returned 1 [0204.580] NtQueryInformationFile (in: FileHandle=0x1a74, IoStatusBlock=0x782fd78, FileInformation=0x782fd80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x782fd78, FileInformation=0x782fd80) returned 0x0 [0204.580] NtSetInformationFile (FileHandle=0x1a74, IoStatusBlock=0x782fd78, FileInformation=0x782fd80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83477d0) returned 1 [0207.748] FlushFileBuffers (hFile=0x1a74) returned 1 [0207.767] CloseHandle (hObject=0x1a74) returned 1 [0208.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d3a50 [0208.077] wcscpy (in: _Dest=0x81d3a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" [0208.077] wcscat (in: _Dest=0x81d3a50, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\F0DBEC-Readme.txt" [0208.077] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0208.077] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcd8 [0208.448] WriteFile (in: hFile=0xcd8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x782fdc4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x782fdc4*=0x70c, lpOverlapped=0x0) returned 1 [0209.412] CloseHandle (hObject=0xcd8) returned 1 [0209.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3a50) returned 1 [0209.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0a20) returned 1 Thread: id = 5505 os_tid = 0x14e4 [0186.012] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0191.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0200.958] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e9c [0200.959] GetFileSizeEx (in: hFile=0x1e9c, lpFileSize=0x342f8f8 | out: lpFileSize=0x342f8f8*=206) returned 1 [0200.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0200.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a88 [0200.959] NtQuerySystemTime (in: CurrentTime=0x342f880 | out: CurrentTime=0x342f880*=132471540688092000) returned 0x0 [0200.959] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x6a980a36 [0200.959] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x48e5f7b [0200.959] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x2a0dc75e [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x7c360480 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x719cc9ff [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x7f4f6 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0xaa74759 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x23357f88 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x2ea094b7 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x497480c8 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x4d2e529e [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x4433aeb2 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x689d10db [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x2f9cbc6 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x2c19c2b2 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x1a9b4a7d [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x4425ea9b [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x7078a0f8 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0xc4e3271 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x345db736 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x77692683 [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x395db6bc [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x5b7342ad [0200.960] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x518fa446 [0200.961] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x686cf161 [0200.961] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x2e2c9e82 [0200.961] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x2a775738 [0200.961] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x44a0c031 [0200.961] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x43e672cc [0200.961] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x64a6e5fe [0200.961] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x16acd86 [0200.961] RtlRandomEx (in: Seed=0x342f878 | out: Seed=0x342f878) returned 0x330a8361 [0200.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14baf4b8 [0200.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bb30c0 [0200.976] ReadFile (in: hFile=0x1e9c, lpBuffer=0x14baf4b8, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x342f874, lpOverlapped=0x0 | out: lpBuffer=0x14baf4b8*, lpNumberOfBytesRead=0x342f874*=0xce, lpOverlapped=0x0) returned 1 [0200.978] SetFilePointerEx (in: hFile=0x1e9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.979] WriteFile (in: hFile=0x1e9c, lpBuffer=0x14bb30c0*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x342f878, lpOverlapped=0x0 | out: lpBuffer=0x14bb30c0*, lpNumberOfBytesWritten=0x342f878*=0xce, lpOverlapped=0x0) returned 1 [0203.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bf0 [0203.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064c18 [0203.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064c18) returned 1 [0203.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bb30c0) returned 1 [0203.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14baf4b8) returned 1 [0203.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402c78) returned 1 [0203.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4530) returned 1 [0203.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f373d0 [0203.729] SetFilePointerEx (in: hFile=0x1e9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.729] WriteFile (in: hFile=0x1e9c, lpBuffer=0x83eea48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x342f8ec, lpOverlapped=0x0 | out: lpBuffer=0x83eea48*, lpNumberOfBytesWritten=0x342f8ec*=0x10c, lpOverlapped=0x0) returned 1 [0204.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eea48) returned 1 [0204.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8409930) returned 1 [0204.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064c18) returned 1 [0204.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f373d0) returned 1 [0204.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064bf0) returned 1 [0204.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0204.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42150) returned 1 [0204.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422b8) returned 1 [0204.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8347a40 [0204.240] wcscpy (in: _Dest=0x8347a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" [0204.240] wcscat (in: _Dest=0x8347a40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.f0dbec" [0204.240] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.f0dbec", NtPathName=0x342f870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef9bb8 [0204.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9bb8) returned 1 [0204.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83fa248) returned 1 [0204.586] NtQueryInformationFile (in: FileHandle=0x1e9c, IoStatusBlock=0x342f848, FileInformation=0x342f850, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x342f848, FileInformation=0x342f850) returned 0x0 [0204.586] NtSetInformationFile (FileHandle=0x1e9c, IoStatusBlock=0x342f848, FileInformation=0x342f850, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347a40) returned 1 [0207.759] FlushFileBuffers (hFile=0x1e9c) returned 1 [0207.777] CloseHandle (hObject=0x1e9c) returned 1 [0208.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f6890 [0208.081] wcscpy (in: _Dest=0x81f6890, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" [0208.081] wcscat (in: _Dest=0x81f6890, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" [0208.081] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\f0dbec-readme.txt")) returned 0xffffffff [0208.082] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d18 [0208.449] WriteFile (in: hFile=0x2d18, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x342f894, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x342f894*=0x70c, lpOverlapped=0x0) returned 1 [0209.418] CloseHandle (hObject=0x2d18) returned 1 [0209.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6890) returned 1 [0209.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0c70) returned 1 Thread: id = 5506 os_tid = 0x116c [0186.013] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0191.245] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0201.034] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a24 [0201.034] GetFileSizeEx (in: hFile=0x2a24, lpFileSize=0x9e0fc90 | out: lpFileSize=0x9e0fc90*=206) returned 1 [0201.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d30 [0201.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42588 [0201.035] NtQuerySystemTime (in: CurrentTime=0x9e0fc18 | out: CurrentTime=0x9e0fc18*=132471540688716000) returned 0x0 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x3ffcf0d4 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x3eed74a5 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x376cbb76 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x51691df0 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0xd470338 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x40ca8b9a [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x725492d4 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x39cbed62 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x4cc407dc [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x55ded6eb [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x58653e01 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x5bc2c44b [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x285706e3 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x2b228d7e [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x4307bff1 [0201.035] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x47e91135 [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x4de016fd [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x200808ff [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x40c2699b [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x5d823b2 [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x3309d96d [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x3710d3 [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x708a52ba [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x1b45c5bc [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x7b34f000 [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x3f3c7e39 [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x1101c5d2 [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x6128bf3c [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x34c0061c [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x1a377241 [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x7310da0a [0201.036] RtlRandomEx (in: Seed=0x9e0fc10 | out: Seed=0x9e0fc10) returned 0x12bc6561 [0201.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bc6060 [0201.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bc9c68 [0201.062] ReadFile (in: hFile=0x2a24, lpBuffer=0x14bc6060, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x9e0fc0c, lpOverlapped=0x0 | out: lpBuffer=0x14bc6060*, lpNumberOfBytesRead=0x9e0fc0c*=0xce, lpOverlapped=0x0) returned 1 [0201.065] SetFilePointerEx (in: hFile=0x2a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.065] WriteFile (in: hFile=0x2a24, lpBuffer=0x14bc9c68*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x9e0fc10, lpOverlapped=0x0 | out: lpBuffer=0x14bc9c68*, lpNumberOfBytesWritten=0x9e0fc10*=0xce, lpOverlapped=0x0) returned 1 [0203.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0203.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0203.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0203.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bc9c68) returned 1 [0203.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bc6060) returned 1 [0203.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402de0) returned 1 [0203.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b54f0) returned 1 [0203.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fdc8 [0203.795] SetFilePointerEx (in: hFile=0x2a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.795] WriteFile (in: hFile=0x2a24, lpBuffer=0x30bc308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9e0fc84, lpOverlapped=0x0 | out: lpBuffer=0x30bc308*, lpNumberOfBytesWritten=0x9e0fc84*=0x10c, lpOverlapped=0x0) returned 1 [0204.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0204.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff78) returned 1 [0204.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0204.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdc8) returned 1 [0204.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0204.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0204.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0204.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0204.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8347de8 [0204.273] wcscpy (in: _Dest=0x8347de8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" [0204.273] wcscat (in: _Dest=0x8347de8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.f0dbec" [0204.273] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0x9e0fc08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3c098 [0204.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c098) returned 1 [0204.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8310110) returned 1 [0204.678] NtQueryInformationFile (in: FileHandle=0x2a24, IoStatusBlock=0x9e0fbe0, FileInformation=0x9e0fbe8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9e0fbe0, FileInformation=0x9e0fbe8) returned 0x0 [0204.678] NtSetInformationFile (FileHandle=0x2a24, IoStatusBlock=0x9e0fbe0, FileInformation=0x9e0fbe8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347de8) returned 1 [0207.832] FlushFileBuffers (hFile=0x2a24) returned 1 [0207.843] CloseHandle (hObject=0x2a24) returned 1 [0208.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8380 [0208.092] wcscpy (in: _Dest=0x3ef8380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" [0208.092] wcscat (in: _Dest=0x3ef8380, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0208.092] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0208.092] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x147c [0208.451] WriteFile (in: hFile=0x147c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9e0fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9e0fc2c*=0x70c, lpOverlapped=0x0) returned 1 [0209.427] CloseHandle (hObject=0x147c) returned 1 [0209.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8380) returned 1 [0209.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2018) returned 1 Thread: id = 5507 os_tid = 0x14ec [0186.013] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020 [0191.246] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0200.623] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xad0 [0200.623] GetFileSizeEx (in: hFile=0xad0, lpFileSize=0xc73fd50 | out: lpFileSize=0xc73fd50*=225) returned 1 [0200.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0200.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0200.624] NtQuerySystemTime (in: CurrentTime=0xc73fcd8 | out: CurrentTime=0xc73fcd8*=132471540684660000) returned 0x0 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x7ee33731 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0xa0dc415 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x25eecee6 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x66dc1316 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x326aecf9 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x2fec0247 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x6a6239ef [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x6f30b948 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x236e4a42 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x5a1c79e6 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x7844c0e7 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x396c2ea9 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x409a85bb [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0xf646558 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x2167d6bf [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x747b563a [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x4486a829 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0xdc5ebee [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x256ed648 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x6c19268a [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0xbd348db [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x4efd0d39 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x55103e08 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x58daf88e [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x6309acfe [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x1ec65b2 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x663b4a00 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x3c7122e0 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x5a2db841 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x3fc92074 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0xb2a6f75 [0200.624] RtlRandomEx (in: Seed=0xc73fcd0 | out: Seed=0xc73fcd0) returned 0x7247d864 [0200.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b18c88 [0200.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b1c890 [0200.634] ReadFile (in: hFile=0xad0, lpBuffer=0x14b18c88, nNumberOfBytesToRead=0xe1, lpNumberOfBytesRead=0xc73fccc, lpOverlapped=0x0 | out: lpBuffer=0x14b18c88*, lpNumberOfBytesRead=0xc73fccc*=0xe1, lpOverlapped=0x0) returned 1 [0200.635] SetFilePointerEx (in: hFile=0xad0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.635] WriteFile (in: hFile=0xad0, lpBuffer=0x14b1c890*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0xc73fcd0, lpOverlapped=0x0 | out: lpBuffer=0x14b1c890*, lpNumberOfBytesWritten=0xc73fcd0*=0xe1, lpOverlapped=0x0) returned 1 [0203.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064650 [0203.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064678 [0203.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064678) returned 1 [0203.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b1c890) returned 1 [0203.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b18c88) returned 1 [0203.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0203.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4a40) returned 1 [0203.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36d10 [0203.670] SetFilePointerEx (in: hFile=0xad0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.670] WriteFile (in: hFile=0xad0, lpBuffer=0x8321650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc73fd44, lpOverlapped=0x0 | out: lpBuffer=0x8321650*, lpNumberOfBytesWritten=0xc73fd44*=0x10c, lpOverlapped=0x0) returned 1 [0204.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321650) returned 1 [0204.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36d40) returned 1 [0204.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064678) returned 1 [0204.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36d10) returned 1 [0204.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064650) returned 1 [0204.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0204.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421a0) returned 1 [0204.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425b0) returned 1 [0204.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346a68 [0204.169] wcscpy (in: _Dest=0x8346a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" [0204.169] wcscat (in: _Dest=0x8346a68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.f0dbec" [0204.169] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0xc73fcc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f4c10 [0204.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4c10) returned 1 [0204.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8340ae8) returned 1 [0204.562] NtQueryInformationFile (in: FileHandle=0xad0, IoStatusBlock=0xc73fca0, FileInformation=0xc73fca8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc73fca0, FileInformation=0xc73fca8) returned 0x0 [0204.562] NtSetInformationFile (FileHandle=0xad0, IoStatusBlock=0xc73fca0, FileInformation=0xc73fca8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346a68) returned 1 [0207.688] FlushFileBuffers (hFile=0xad0) returned 1 [0207.703] CloseHandle (hObject=0xad0) returned 1 [0208.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e2550 [0208.046] wcscpy (in: _Dest=0x81e2550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\" [0208.046] wcscat (in: _Dest=0x81e2550, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\F0DBEC-Readme.txt" [0208.046] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0208.046] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e48 [0208.434] WriteFile (in: hFile=0x1e48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc73fcec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc73fcec*=0x70c, lpOverlapped=0x0) returned 1 [0209.377] CloseHandle (hObject=0x1e48) returned 1 [0209.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2550) returned 1 [0209.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1a50) returned 1 Thread: id = 5508 os_tid = 0x11e8 [0186.014] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020 [0191.247] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0200.649] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10b0 [0200.650] GetFileSizeEx (in: hFile=0x10b0, lpFileSize=0x7ddfa20 | out: lpFileSize=0x7ddfa20*=264) returned 1 [0200.650] SetFilePointerEx (in: hFile=0x10b0, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.650] ReadFile (in: hFile=0x10b0, lpBuffer=0x7ddfa2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7ddfa08, lpOverlapped=0x0 | out: lpBuffer=0x7ddfa2c*, lpNumberOfBytesRead=0x7ddfa08*=0x4, lpOverlapped=0x0) returned 1 [0200.652] SetFilePointerEx (in: hFile=0x10b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428d0 [0200.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42380 [0200.652] NtQuerySystemTime (in: CurrentTime=0x7ddf9a8 | out: CurrentTime=0x7ddf9a8*=132471540684972000) returned 0x0 [0200.652] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x28c90b25 [0200.652] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0xc471ad5 [0200.652] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x5d60d93f [0200.652] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x77a79211 [0200.652] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x7fb9cc40 [0200.652] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0xcd9b312 [0200.652] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x1aabf8d9 [0200.652] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x6e7e9d56 [0200.652] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x535d6da3 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x21dd3724 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x1a5d65dc [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x54b79d9d [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x15a31c56 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x45cef3ed [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x5a6ee94f [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x77486b1a [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x78f2be8d [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x5bc32929 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0xb45fd95 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x7f302814 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x3a5681 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x8be5cb7 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x654e8952 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x6047377a [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x4fd4cbb5 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x35142b48 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x6bb4c29 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x7fe4a500 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x2f439828 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x4b92abfb [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x4f3144c5 [0200.653] RtlRandomEx (in: Seed=0x7ddf9a0 | out: Seed=0x7ddf9a0) returned 0x7bb4e83e [0200.663] ReadFile (in: hFile=0x10b0, lpBuffer=0x14b27ca8, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x7ddf99c, lpOverlapped=0x0 | out: lpBuffer=0x14b27ca8*, lpNumberOfBytesRead=0x7ddf99c*=0x108, lpOverlapped=0x0) returned 1 [0200.663] SetFilePointerEx (in: hFile=0x10b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.663] WriteFile (in: hFile=0x10b0, lpBuffer=0x14b2b8b0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x7ddf9a0, lpOverlapped=0x0 | out: lpBuffer=0x14b2b8b0*, lpNumberOfBytesWritten=0x7ddf9a0*=0x108, lpOverlapped=0x0) returned 1 [0203.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80646f0 [0203.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064718 [0203.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064718) returned 1 [0203.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b2b8b0) returned 1 [0203.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b27ca8) returned 1 [0203.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0203.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5850) returned 1 [0203.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36dd0 [0203.676] SetFilePointerEx (in: hFile=0x10b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.676] WriteFile (in: hFile=0x10b0, lpBuffer=0x8321880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7ddfa14, lpOverlapped=0x0 | out: lpBuffer=0x8321880*, lpNumberOfBytesWritten=0x7ddfa14*=0x10c, lpOverlapped=0x0) returned 1 [0204.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321880) returned 1 [0204.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36e00) returned 1 [0204.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064718) returned 1 [0204.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36dd0) returned 1 [0204.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80646f0) returned 1 [0204.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428d0) returned 1 [0204.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424c0) returned 1 [0204.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0204.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346cd8 [0204.176] wcscpy (in: _Dest=0x8346cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" [0204.176] wcscat (in: _Dest=0x8346cd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.f0dbec" [0204.176] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x7ddf998, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f4ea0 [0204.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4ea0) returned 1 [0204.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833f9a8) returned 1 [0204.565] NtQueryInformationFile (in: FileHandle=0x10b0, IoStatusBlock=0x7ddf970, FileInformation=0x7ddf978, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7ddf970, FileInformation=0x7ddf978) returned 0x0 [0204.565] NtSetInformationFile (FileHandle=0x10b0, IoStatusBlock=0x7ddf970, FileInformation=0x7ddf978, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346cd8) returned 1 [0207.697] FlushFileBuffers (hFile=0x10b0) returned 1 [0207.722] CloseHandle (hObject=0x10b0) returned 1 [0208.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d27d0 [0208.050] wcscpy (in: _Dest=0x81d27d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\" [0208.050] wcscat (in: _Dest=0x81d27d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\F0DBEC-Readme.txt" [0208.050] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0208.050] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc50 [0208.439] WriteFile (in: hFile=0xc50, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7ddf9bc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7ddf9bc*=0x70c, lpOverlapped=0x0) returned 1 [0209.387] CloseHandle (hObject=0xc50) returned 1 [0209.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d27d0) returned 1 [0209.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1ef0) returned 1 Thread: id = 5509 os_tid = 0x11ec [0186.014] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020 [0191.253] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0200.817] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1434 [0200.818] GetFileSizeEx (in: hFile=0x1434, lpFileSize=0xcadfdc8 | out: lpFileSize=0xcadfdc8*=227) returned 1 [0200.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42088 [0200.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ec0 [0200.818] NtQuerySystemTime (in: CurrentTime=0xcadfd50 | out: CurrentTime=0xcadfd50*=132471540686688000) returned 0x0 [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x1791df41 [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x3f0a6747 [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x22bff9ad [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x1df4f8b1 [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x5a8fc4b4 [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x7d8cca80 [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x6425bcfa [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x604ceb9c [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0xe15c45b [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x205bd34f [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x17b3023c [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x7553ee3b [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0xdf95bb2 [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x259d45e0 [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x362cd52e [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x7de27c00 [0200.819] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x79702e0d [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x50ae1fe0 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x1fe30c7f [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x1bd9f22b [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x19f4ccf4 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x200cccb2 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x458104e6 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x1ce877df [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x2039a303 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x194e4b41 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x10abff91 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x4d51aa66 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x7fe35dd3 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0xb3e326f [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x6fff6985 [0200.820] RtlRandomEx (in: Seed=0xcadfd48 | out: Seed=0xcadfd48) returned 0x2b8e413c [0200.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b7a8d0 [0200.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b7e4d8 [0200.830] ReadFile (in: hFile=0x1434, lpBuffer=0x14b7a8d0, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xcadfd44, lpOverlapped=0x0 | out: lpBuffer=0x14b7a8d0*, lpNumberOfBytesRead=0xcadfd44*=0xe3, lpOverlapped=0x0) returned 1 [0200.831] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.831] WriteFile (in: hFile=0x1434, lpBuffer=0x14b7e4d8*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xcadfd48, lpOverlapped=0x0 | out: lpBuffer=0x14b7e4d8*, lpNumberOfBytesWritten=0xcadfd48*=0xe3, lpOverlapped=0x0) returned 1 [0203.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80649c0 [0203.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80649e8 [0203.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80649e8) returned 1 [0203.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b7e4d8) returned 1 [0203.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b7a8d0) returned 1 [0203.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402930) returned 1 [0203.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4cc8) returned 1 [0203.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f37130 [0203.710] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.710] WriteFile (in: hFile=0x1434, lpBuffer=0x8322258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcadfdbc, lpOverlapped=0x0 | out: lpBuffer=0x8322258*, lpNumberOfBytesWritten=0xcadfdbc*=0x10c, lpOverlapped=0x0) returned 1 [0204.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322258) returned 1 [0204.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37160) returned 1 [0204.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80649e8) returned 1 [0204.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37130) returned 1 [0204.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80649c0) returned 1 [0204.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42088) returned 1 [0204.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0204.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427b8) returned 1 [0204.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347428 [0204.221] wcscpy (in: _Dest=0x8347428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" [0204.221] wcscat (in: _Dest=0x8347428, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.f0dbec" [0204.221] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0xcadfd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83eaa78 [0204.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eaa78) returned 1 [0204.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833fdf8) returned 1 [0204.575] NtQueryInformationFile (in: FileHandle=0x1434, IoStatusBlock=0xcadfd18, FileInformation=0xcadfd20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcadfd18, FileInformation=0xcadfd20) returned 0x0 [0204.575] NtSetInformationFile (FileHandle=0x1434, IoStatusBlock=0xcadfd18, FileInformation=0xcadfd20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347428) returned 1 [0207.736] FlushFileBuffers (hFile=0x1434) returned 1 [0207.750] CloseHandle (hObject=0x1434) returned 1 [0208.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d3dc8 [0208.066] wcscpy (in: _Dest=0x81d3dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" [0208.066] wcscat (in: _Dest=0x81d3dc8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\F0DBEC-Readme.txt" [0208.066] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0208.067] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf94 [0208.442] WriteFile (in: hFile=0xf94, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xcadfd64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xcadfd64*=0x70c, lpOverlapped=0x0) returned 1 [0209.402] CloseHandle (hObject=0xf94) returned 1 [0209.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3dc8) returned 1 [0209.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0d98) returned 1 Thread: id = 5510 os_tid = 0x1170 [0186.015] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020 [0191.254] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0200.850] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x29f4 [0200.851] GetFileSizeEx (in: hFile=0x29f4, lpFileSize=0xcb9fef0 | out: lpFileSize=0xcb9fef0*=254) returned 1 [0200.851] SetFilePointerEx (in: hFile=0x29f4, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.851] ReadFile (in: hFile=0x29f4, lpBuffer=0xcb9fefc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcb9fed8, lpOverlapped=0x0 | out: lpBuffer=0xcb9fefc*, lpNumberOfBytesRead=0xcb9fed8*=0x4, lpOverlapped=0x0) returned 1 [0200.852] SetFilePointerEx (in: hFile=0x29f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0200.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431b8 [0200.853] NtQuerySystemTime (in: CurrentTime=0xcb9fe78 | out: CurrentTime=0xcb9fe78*=132471540687000000) returned 0x0 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x2472a3a0 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x20b443bb [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x5b5bd508 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x42091ed1 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x156028d4 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x13982b0 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x28c4d868 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x35237b32 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x55244922 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x2e955187 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x2f7c8cf [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x41ec93db [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x5fb475d7 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x761cc2c8 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x78b95862 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x11823010 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0xdb3b082 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x5c30faae [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x7f70c677 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x22ede3ad [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x66304f39 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x6d00495a [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x21e42b0f [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x62a06484 [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x458525be [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x419a29ff [0200.853] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x5d4a3a39 [0200.854] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x38288387 [0200.854] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x1c605c48 [0200.854] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x69b2b14c [0200.854] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x7ff2f326 [0200.854] RtlRandomEx (in: Seed=0xcb9fe70 | out: Seed=0xcb9fe70) returned 0x1144bcbd [0200.863] ReadFile (in: hFile=0x29f4, lpBuffer=0x14b89c68, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xcb9fe6c, lpOverlapped=0x0 | out: lpBuffer=0x14b89c68*, lpNumberOfBytesRead=0xcb9fe6c*=0xfe, lpOverlapped=0x0) returned 1 [0200.863] SetFilePointerEx (in: hFile=0x29f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.863] WriteFile (in: hFile=0x29f4, lpBuffer=0x14b8d870*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xcb9fe70, lpOverlapped=0x0 | out: lpBuffer=0x14b8d870*, lpNumberOfBytesWritten=0xcb9fe70*=0xfe, lpOverlapped=0x0) returned 1 [0203.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a60 [0203.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a88 [0203.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a88) returned 1 [0203.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b8d870) returned 1 [0203.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b89c68) returned 1 [0203.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a20) returned 1 [0203.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4ba8) returned 1 [0203.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f371f0 [0203.716] SetFilePointerEx (in: hFile=0x29f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.716] WriteFile (in: hFile=0x29f4, lpBuffer=0x8322488*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcb9fee4, lpOverlapped=0x0 | out: lpBuffer=0x8322488*, lpNumberOfBytesWritten=0xcb9fee4*=0x10c, lpOverlapped=0x0) returned 1 [0207.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322488) returned 1 [0207.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37220) returned 1 [0207.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a88) returned 1 [0207.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f371f0) returned 1 [0207.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a60) returned 1 [0207.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0207.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0207.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42628) returned 1 [0207.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404de8 [0207.175] wcscpy (in: _Dest=0x8404de8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" [0207.175] wcscat (in: _Dest=0x8404de8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.f0dbec" [0207.175] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0xcb9fe68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83354b8 [0208.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83354b8) returned 1 [0208.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14898610) returned 1 [0208.177] NtQueryInformationFile (in: FileHandle=0x29f4, IoStatusBlock=0xcb9fe40, FileInformation=0xcb9fe48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcb9fe40, FileInformation=0xcb9fe48) returned 0x0 [0208.177] NtSetInformationFile (FileHandle=0x29f4, IoStatusBlock=0xcb9fe40, FileInformation=0xcb9fe48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404de8) returned 1 [0208.481] FlushFileBuffers (hFile=0x29f4) returned 1 [0208.492] CloseHandle (hObject=0x29f4) returned 1 [0208.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8186b48 [0208.855] wcscpy (in: _Dest=0x8186b48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" [0208.855] wcscat (in: _Dest=0x8186b48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\F0DBEC-Readme.txt" [0208.855] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0208.855] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c88 [0209.548] WriteFile (in: hFile=0x2c88, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xcb9fe8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xcb9fe8c*=0x70c, lpOverlapped=0x0) returned 1 [0209.727] CloseHandle (hObject=0x2c88) returned 1 [0209.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186b48) returned 1 [0209.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1238) returned 1 Thread: id = 5511 os_tid = 0x1174 [0186.015] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020 [0191.266] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0200.749] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb20 [0200.750] GetFileSizeEx (in: hFile=0xb20, lpFileSize=0x9aafb30 | out: lpFileSize=0x9aafb30*=214) returned 1 [0200.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0200.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a38 [0200.750] NtQuerySystemTime (in: CurrentTime=0x9aafab8 | out: CurrentTime=0x9aafab8*=132471540685908000) returned 0x0 [0200.750] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x147bffdd [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x38e31d0b [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x72560431 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x501eb6fe [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x4c247174 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x21b27f21 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x39aa8435 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x6cefd7e3 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x3d472da1 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x34327f34 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x10331595 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x364a2541 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x2f90f953 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x497cad44 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x59f7a3ee [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x66df9e3e [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x5569d788 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x4e6fce39 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x3f41916b [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x79ee97f5 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x454fb698 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x2026b657 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x51789a55 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x5c687b47 [0200.751] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x65c17c8a [0200.752] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x3f199b3b [0200.752] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x2065290a [0200.752] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x23f076f1 [0200.752] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x21730f6d [0200.752] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0xa754b9 [0200.752] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x1bfda166 [0200.752] RtlRandomEx (in: Seed=0x9aafab0 | out: Seed=0x9aafab0) returned 0x1e880f78 [0200.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b55080 [0200.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b58c88 [0200.761] ReadFile (in: hFile=0xb20, lpBuffer=0x14b55080, nNumberOfBytesToRead=0xd6, lpNumberOfBytesRead=0x9aafaac, lpOverlapped=0x0 | out: lpBuffer=0x14b55080*, lpNumberOfBytesRead=0x9aafaac*=0xd6, lpOverlapped=0x0) returned 1 [0200.763] SetFilePointerEx (in: hFile=0xb20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.763] WriteFile (in: hFile=0xb20, lpBuffer=0x14b58c88*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x9aafab0, lpOverlapped=0x0 | out: lpBuffer=0x14b58c88*, lpNumberOfBytesWritten=0x9aafab0*=0xd6, lpOverlapped=0x0) returned 1 [0205.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064858 [0205.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064790 [0205.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064790) returned 1 [0205.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b58c88) returned 1 [0205.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b55080) returned 1 [0205.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0205.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b52b0) returned 1 [0205.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0205.256] SetFilePointerEx (in: hFile=0xb20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.256] WriteFile (in: hFile=0xb20, lpBuffer=0x84077d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x84077d0*, lpNumberOfBytesWritten=0x9aafb24*=0x10c, lpOverlapped=0x0) returned 1 [0207.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84077d0) returned 1 [0207.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0207.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064790) returned 1 [0207.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0207.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064858) returned 1 [0207.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0207.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c68) returned 1 [0207.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43550) returned 1 [0207.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef560 [0207.924] wcscpy (in: _Dest=0x83ef560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" [0207.924] wcscat (in: _Dest=0x83ef560, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.f0dbec" [0207.925] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.f0dbec", NtPathName=0x9aafaa8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3da38 [0208.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3da38) returned 1 [0208.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f13f8) returned 1 [0208.161] NtQueryInformationFile (in: FileHandle=0xb20, IoStatusBlock=0x9aafa80, FileInformation=0x9aafa88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9aafa80, FileInformation=0x9aafa88) returned 0x0 [0208.161] NtSetInformationFile (FileHandle=0xb20, IoStatusBlock=0x9aafa80, FileInformation=0x9aafa88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef560) returned 1 [0208.460] FlushFileBuffers (hFile=0xb20) returned 1 [0208.470] CloseHandle (hObject=0xb20) returned 1 [0208.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8186a20 [0208.844] wcscpy (in: _Dest=0x8186a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" [0208.844] wcscat (in: _Dest=0x8186a20, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\F0DBEC-Readme.txt" [0208.844] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\f0dbec-readme.txt")) returned 0xffffffff [0208.844] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1aa0 [0209.557] WriteFile (in: hFile=0x1aa0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9aafacc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9aafacc*=0x70c, lpOverlapped=0x0) returned 1 [0209.600] CloseHandle (hObject=0x1aa0) returned 1 [0209.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a20) returned 1 [0209.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2140) returned 1 Thread: id = 5512 os_tid = 0x1178 [0186.015] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020 [0191.278] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0200.764] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe24 [0200.764] GetFileSizeEx (in: hFile=0xe24, lpFileSize=0xc04f910 | out: lpFileSize=0xc04f910*=248) returned 1 [0200.764] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.764] ReadFile (in: hFile=0xe24, lpBuffer=0xc04f91c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc04f8f8, lpOverlapped=0x0 | out: lpBuffer=0xc04f91c*, lpNumberOfBytesRead=0xc04f8f8*=0x4, lpOverlapped=0x0) returned 1 [0200.766] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a38 [0200.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434b0 [0200.766] NtQuerySystemTime (in: CurrentTime=0xc04f898 | out: CurrentTime=0xc04f898*=132471540686064000) returned 0x0 [0200.766] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x7014e2ae [0200.766] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x441d6062 [0200.766] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x7c83c923 [0200.766] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x518c9713 [0200.766] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x6e3674b7 [0200.766] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x65a8206a [0200.766] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x3fb33d1b [0200.766] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x3765d0c4 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x3a976ebe [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x1ceda78e [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x79110855 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x27a82d08 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x6af0df91 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x7e0d54c0 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x7bb6f366 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x17031432 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x5617aa6b [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x82aa694 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x1f32ad6b [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x6e25cd34 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x5a223b57 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x745cdaf7 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x75f3b441 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x37042988 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x538c874b [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x4808c7de [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x759643e [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x1cb4ec6 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x2000e21a [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x30feca69 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x26958495 [0200.767] RtlRandomEx (in: Seed=0xc04f890 | out: Seed=0xc04f890) returned 0x1ca3585e [0200.775] ReadFile (in: hFile=0xe24, lpBuffer=0x14b5c890, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0xc04f88c, lpOverlapped=0x0 | out: lpBuffer=0x14b5c890*, lpNumberOfBytesRead=0xc04f88c*=0xf8, lpOverlapped=0x0) returned 1 [0200.776] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.776] WriteFile (in: hFile=0xe24, lpBuffer=0x14b60498*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xc04f890, lpOverlapped=0x0 | out: lpBuffer=0x14b60498*, lpNumberOfBytesWritten=0xc04f890*=0xf8, lpOverlapped=0x0) returned 1 [0205.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80647b8 [0205.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80647e0 [0205.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80647e0) returned 1 [0205.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b60498) returned 1 [0205.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b5c890) returned 1 [0205.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50be8) returned 1 [0205.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5148) returned 1 [0205.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69a80 [0205.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80647e0) returned 1 [0205.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ab0 [0205.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80647e0 [0205.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064808 [0205.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064808) returned 1 [0205.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50be8) returned 1 [0205.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5148) returned 1 [0205.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x8406bc8 [0205.686] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.687] WriteFile (in: hFile=0xe24, lpBuffer=0x8406bc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc04f904, lpOverlapped=0x0 | out: lpBuffer=0x8406bc8*, lpNumberOfBytesWritten=0xc04f904*=0x10c, lpOverlapped=0x0) returned 1 [0211.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406bc8) returned 1 [0211.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ab0) returned 1 [0211.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80647e0) returned 1 [0211.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a80) returned 1 [0211.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80647b8) returned 1 [0211.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a38) returned 1 [0211.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0211.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0211.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405670 [0211.769] wcscpy (in: _Dest=0x8405670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" [0211.769] wcscat (in: _Dest=0x8405670, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.f0dbec" [0211.769] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0xc04f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0211.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3ceb0 [0215.579] FlushFileBuffers (hFile=0xe24) returned 1 [0215.585] CloseHandle (hObject=0xe24) returned 1 [0215.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e9458 [0215.720] wcscpy (in: _Dest=0x81e9458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" [0215.720] wcscat (in: _Dest=0x81e9458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\F0DBEC-Readme.txt" [0215.720] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0215.721] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.404] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc04f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc04f8ac*=0x70c, lpOverlapped=0x0) returned 1 [0216.406] CloseHandle (hObject=0x10c4) returned 1 [0216.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9458) returned 1 [0216.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1110) returned 1 Thread: id = 5513 os_tid = 0x117c [0186.016] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020 [0191.291] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20c8 [0210.969] GetFileSizeEx (in: hFile=0x20c8, lpFileSize=0xcf0fcd8 | out: lpFileSize=0xcf0fcd8*=218) returned 1 [0210.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064588 [0210.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064470 [0210.969] NtQuerySystemTime (in: CurrentTime=0xcf0fc60 | out: CurrentTime=0xcf0fc60*=132471540786840000) returned 0x0 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x4cd4f0b2 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x1e267b2a [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x11d291ba [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x2359ddde [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x3ae6623 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x723300f1 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x43367e44 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x1ca5bf9c [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x4a5ac9e9 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x64f9b004 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x22aaec68 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0xe807391 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x5e0ffdca [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x452f64a1 [0210.969] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x20d1788b [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x3c7b2e08 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x287ff67 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0xc3d3892 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x407062ce [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x4ff9132d [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x28b94851 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x51338116 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x42999542 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x6c73d4fd [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x5df50eaf [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x22aaec68 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x6ee834b0 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x3a2610a0 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x52b885d5 [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x19c6277b [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x182d0f0f [0210.970] RtlRandomEx (in: Seed=0xcf0fc58 | out: Seed=0xcf0fc58) returned 0x5c26e281 [0210.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0210.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0210.979] ReadFile (in: hFile=0x20c8, lpBuffer=0x824c060, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0xcf0fc54, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesRead=0xcf0fc54*=0xda, lpOverlapped=0x0) returned 1 [0210.981] SetFilePointerEx (in: hFile=0x20c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.981] WriteFile (in: hFile=0x20c8, lpBuffer=0x824fc68*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0xcf0fc58, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesWritten=0xcf0fc58*=0xda, lpOverlapped=0x0) returned 1 [0213.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e98 [0213.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43208 [0213.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0213.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0213.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0213.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 [0213.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3ba0) returned 1 [0213.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69000 [0213.924] SetFilePointerEx (in: hFile=0x20c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.924] WriteFile (in: hFile=0x20c8, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcf0fccc, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0xcf0fccc*=0x10c, lpOverlapped=0x0) returned 1 [0214.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0214.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69030) returned 1 [0214.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0214.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69000) returned 1 [0214.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0214.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064588) returned 1 [0214.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064498) returned 1 [0214.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80644c0) returned 1 [0214.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8ad0 [0214.069] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" [0214.069] wcscat (in: _Dest=0x3ef8ad0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.f0dbec" [0214.069] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0xcf0fc50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3cff8 [0215.803] FlushFileBuffers (hFile=0x20c8) returned 1 [0215.815] CloseHandle (hObject=0x20c8) returned 1 [0216.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8678 [0216.043] wcscpy (in: _Dest=0x81d8678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" [0216.043] wcscat (in: _Dest=0x81d8678, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\F0DBEC-Readme.txt" [0216.043] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0216.044] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.526] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xcf0fc74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xcf0fc74*=0x70c, lpOverlapped=0x0) returned 1 [0216.528] CloseHandle (hObject=0x10c4) returned 1 [0216.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8678) returned 1 [0216.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7c10) returned 1 Thread: id = 5514 os_tid = 0xbe8 [0186.016] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020 [0191.303] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0202.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cbc [0210.982] GetFileSizeEx (in: hFile=0x1cbc, lpFileSize=0xc77ff08 | out: lpFileSize=0xc77ff08*=221) returned 1 [0210.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064470 [0210.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80644e8 [0210.982] NtQuerySystemTime (in: CurrentTime=0xc77fe90 | out: CurrentTime=0xc77fe90*=132471540786996000) returned 0x0 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x83f1f62 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x23b2057e [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x51f92818 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x28b94851 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0xffb606f [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x3736c041 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x4a60ec2c [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x4cd4f0b2 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x52eb9d39 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x77900377 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x282e1e5d [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x26082843 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x12c49c00 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x3f19b9c6 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x7c5886c7 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x139ad7c0 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x1c1996c1 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x124411c0 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x6fe3bc18 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x3d80a606 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x13386f87 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x53bde71e [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x457282d2 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x2359ddde [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x71035af2 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0xffb606f [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x4340bfd4 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x51338116 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x6a04ea85 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0xcfa2493 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x605337f3 [0210.983] RtlRandomEx (in: Seed=0xc77fe88 | out: Seed=0xc77fe88) returned 0x1cd62196 [0210.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8253870 [0210.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0210.991] ReadFile (in: hFile=0x1cbc, lpBuffer=0x8253870, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xc77fe84, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesRead=0xc77fe84*=0xdd, lpOverlapped=0x0) returned 1 [0210.995] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.995] WriteFile (in: hFile=0x1cbc, lpBuffer=0x8257478*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xc77fe88, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesWritten=0xc77fe88*=0xdd, lpOverlapped=0x0) returned 1 [0213.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423d0 [0213.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42100 [0213.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42100) returned 1 [0213.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0213.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0213.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0213.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea1d0) returned 1 [0213.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68f70 [0213.928] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.928] WriteFile (in: hFile=0x1cbc, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc77fefc, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xc77fefc*=0x10c, lpOverlapped=0x0) returned 1 [0214.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0214.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ee0) returned 1 [0214.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42100) returned 1 [0214.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f70) returned 1 [0214.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423d0) returned 1 [0214.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064470) returned 1 [0214.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064420) returned 1 [0214.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064448) returned 1 [0214.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef7fd8 [0214.074] wcscpy (in: _Dest=0x3ef7fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" [0214.074] wcscat (in: _Dest=0x3ef7fd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.f0dbec" [0214.074] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0xc77fe80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d288 [0215.810] FlushFileBuffers (hFile=0x1cbc) returned 1 [0215.823] CloseHandle (hObject=0x1cbc) returned 1 [0216.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8b18 [0216.045] wcscpy (in: _Dest=0x81d8b18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" [0216.045] wcscat (in: _Dest=0x81d8b18, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\F0DBEC-Readme.txt" [0216.045] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0216.045] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.530] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc77fea4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc77fea4*=0x70c, lpOverlapped=0x0) returned 1 [0216.532] CloseHandle (hObject=0x10c4) returned 1 [0216.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8b18) returned 1 [0216.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7d38) returned 1 Thread: id = 5515 os_tid = 0x1180 [0186.017] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020 [0191.314] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0202.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcc4 [0210.996] GetFileSizeEx (in: hFile=0xcc4, lpFileSize=0xb92fa30 | out: lpFileSize=0xb92fa30*=266) returned 1 [0210.996] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x106, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.996] ReadFile (in: hFile=0xcc4, lpBuffer=0xb92fa3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb92fa18, lpOverlapped=0x0 | out: lpBuffer=0xb92fa3c*, lpNumberOfBytesRead=0xb92fa18*=0x4, lpOverlapped=0x0) returned 1 [0210.997] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80644e8 [0210.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80643d0 [0210.998] NtQuerySystemTime (in: CurrentTime=0xb92f9b8 | out: CurrentTime=0xb92f9b8*=132471540787152000) returned 0x0 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x6952d47b [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x3a2610a0 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x321d6949 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x515b707d [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x6325c5ba [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x453d2f28 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x1e935b64 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x61f41a90 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x41c685b4 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x19071335 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x25289172 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x69994f1f [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x3d3d3b41 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x6d3944de [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x341f425e [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x4117aabc [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x77ba62fd [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x52700a85 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x6c55fe82 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x2cf4534f [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x7587ba2c [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x1dc2d0a8 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x7a155155 [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x56d2242f [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x17f02db [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x14138ea [0210.998] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x621d6fc9 [0210.999] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x5e47475f [0210.999] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x64c4f768 [0210.999] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x70ad902c [0210.999] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x64bfa12b [0210.999] RtlRandomEx (in: Seed=0xb92f9b0 | out: Seed=0xb92f9b0) returned 0x40379741 [0211.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0211.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825ec88 [0211.008] ReadFile (in: hFile=0xcc4, lpBuffer=0x825b080, nNumberOfBytesToRead=0x10a, lpNumberOfBytesRead=0xb92f9ac, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesRead=0xb92f9ac*=0x10a, lpOverlapped=0x0) returned 1 [0211.008] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.008] WriteFile (in: hFile=0xcc4, lpBuffer=0x825ec88*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xb92f9b0, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesWritten=0xb92f9b0*=0x10a, lpOverlapped=0x0) returned 1 [0213.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43320 [0213.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42830 [0213.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42830) returned 1 [0213.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0213.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0213.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e08) returned 1 [0213.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea530) returned 1 [0213.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68dc0 [0213.927] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.927] WriteFile (in: hFile=0xcc4, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb92fa24, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xb92fa24*=0x10c, lpOverlapped=0x0) returned 1 [0214.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0214.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d90) returned 1 [0214.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42830) returned 1 [0214.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68dc0) returned 1 [0214.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43320) returned 1 [0214.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80644e8) returned 1 [0214.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643f8) returned 1 [0214.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064380) returned 1 [0214.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef7d68 [0214.072] wcscpy (in: _Dest=0x3ef7d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" [0214.072] wcscat (in: _Dest=0x3ef7d68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.f0dbec" [0214.072] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.f0dbec", NtPathName=0xb92f9a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d140 [0215.806] FlushFileBuffers (hFile=0xcc4) returned 1 [0215.819] CloseHandle (hObject=0xcc4) returned 1 [0216.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d9330 [0216.046] wcscpy (in: _Dest=0x81d9330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" [0216.046] wcscat (in: _Dest=0x81d9330, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\F0DBEC-Readme.txt" [0216.046] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\f0dbec-readme.txt")) returned 0xffffffff [0216.046] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.535] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb92f9cc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb92f9cc*=0x70c, lpOverlapped=0x0) returned 1 [0216.537] CloseHandle (hObject=0x10c4) returned 1 [0216.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9330) returned 1 [0216.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7ae8) returned 1 Thread: id = 5516 os_tid = 0x1374 [0186.017] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020 [0191.327] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0202.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5ac [0211.012] GetFileSizeEx (in: hFile=0x5ac, lpFileSize=0xd1ff960 | out: lpFileSize=0xd1ff960*=213) returned 1 [0211.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80643d0 [0211.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80643a8 [0211.013] NtQuerySystemTime (in: CurrentTime=0xd1ff8e8 | out: CurrentTime=0xd1ff8e8*=132471540787308000) returned 0x0 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x199eefb7 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x7bce445e [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x524467c6 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x5fdb05ea [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x56d2242f [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x28b3e570 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0xa7fe1b0 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x6d2767d8 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0xe03399e [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x7b778228 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x182d0f0f [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x515eef3c [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x11ee6040 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x4b7f3116 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x16131bc1 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x29b8c48d [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x77772b8e [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x6653b237 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x2252f928 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x51d3e771 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x65397469 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x32d324e2 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x6b8fcade [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x23f3a17b [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x1df2ccf6 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x26256479 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x6c964e28 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x3cb26e87 [0211.013] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x65baf65 [0211.014] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x7fb4c7a3 [0211.014] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x59a392b7 [0211.014] RtlRandomEx (in: Seed=0xd1ff8e0 | out: Seed=0xd1ff8e0) returned 0x116dd600 [0211.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8262890 [0211.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8266498 [0211.024] ReadFile (in: hFile=0x5ac, lpBuffer=0x8262890, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0xd1ff8dc, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesRead=0xd1ff8dc*=0xd5, lpOverlapped=0x0) returned 1 [0211.026] SetFilePointerEx (in: hFile=0x5ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.026] WriteFile (in: hFile=0x5ac, lpBuffer=0x8266498*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0xd1ff8e0, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesWritten=0xd1ff8e0*=0xd5, lpOverlapped=0x0) returned 1 [0213.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d427b8 [0213.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f10 [0213.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0213.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0213.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0213.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 [0213.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb538) returned 1 [0213.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e20 [0213.933] SetFilePointerEx (in: hFile=0x5ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.933] WriteFile (in: hFile=0x5ac, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd1ff954, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0xd1ff954*=0x10c, lpOverlapped=0x0) returned 1 [0214.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0214.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d60) returned 1 [0214.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0214.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e20) returned 1 [0214.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427b8) returned 1 [0214.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643d0) returned 1 [0214.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064330) returned 1 [0214.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064358) returned 1 [0214.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8df0 [0214.082] wcscpy (in: _Dest=0x3dd8df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" [0214.083] wcscat (in: _Dest=0x3dd8df0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.f0dbec" [0214.083] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0xd1ff8d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3bf50 [0215.818] FlushFileBuffers (hFile=0x5ac) returned 1 [0215.831] CloseHandle (hObject=0x5ac) returned 1 [0216.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d81d8 [0216.049] wcscpy (in: _Dest=0x81d81d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" [0216.049] wcscat (in: _Dest=0x81d81d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\F0DBEC-Readme.txt" [0216.049] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0216.049] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.540] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd1ff8fc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd1ff8fc*=0x70c, lpOverlapped=0x0) returned 1 [0216.542] CloseHandle (hObject=0x10c4) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d81d8) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d79c0) returned 1 Thread: id = 5517 os_tid = 0x118c [0186.017] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0191.339] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0202.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc50 [0211.028] GetFileSizeEx (in: hFile=0xc50, lpFileSize=0xab7fec0 | out: lpFileSize=0xab7fec0*=208) returned 1 [0211.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80643a8 [0211.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80642e0 [0211.028] NtQuerySystemTime (in: CurrentTime=0xab7fe48 | out: CurrentTime=0xab7fe48*=132471540787464000) returned 0x0 [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x2ebb020b [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x30b3cfbb [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x2d4a1a2c [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x124411c0 [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x6c20477 [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x1c3a1377 [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x2e38d55c [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x68a2f3bd [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x79d6a7b9 [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x41e65af9 [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x2b8f97cd [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x6c73d4fd [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x7c26ccb9 [0211.028] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x49d9a6d6 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x310e8c2d [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x6511cc5d [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x1ed929b [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x45459ab0 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x3644ccc8 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x13eb6ba0 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x674b6b9f [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x383733c9 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x75180a5e [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x3fdb2578 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x533ab284 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x21b6f62f [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x566bf302 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x6d84620 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x3ca7db9a [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x6fe75353 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x745375c4 [0211.029] RtlRandomEx (in: Seed=0xab7fe40 | out: Seed=0xab7fe40) returned 0x7f9ea6c1 [0211.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0211.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0211.039] ReadFile (in: hFile=0xc50, lpBuffer=0x826a0a0, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0xab7fe3c, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesRead=0xab7fe3c*=0xd0, lpOverlapped=0x0) returned 1 [0211.046] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.046] WriteFile (in: hFile=0xc50, lpBuffer=0x826dca8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0xab7fe40, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesWritten=0xab7fe40*=0xd0, lpOverlapped=0x0) returned 1 [0213.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43500 [0213.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ec0 [0213.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ec0) returned 1 [0213.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0213.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0213.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 [0213.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea458) returned 1 [0213.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e80 [0213.932] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.932] WriteFile (in: hFile=0xc50, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xab7feb4, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0xab7feb4*=0x10c, lpOverlapped=0x0) returned 1 [0214.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0214.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68eb0) returned 1 [0214.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ec0) returned 1 [0214.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e80) returned 1 [0214.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43500) returned 1 [0214.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643a8) returned 1 [0214.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064308) returned 1 [0214.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064290) returned 1 [0214.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3ef8110 [0214.077] wcscpy (in: _Dest=0x3ef8110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" [0214.077] wcscat (in: _Dest=0x3ef8110, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.f0dbec" [0214.077] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0xab7fe38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3d3d0 [0215.814] FlushFileBuffers (hFile=0xc50) returned 1 [0215.827] CloseHandle (hObject=0xc50) returned 1 [0216.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x84052c8 [0216.047] wcscpy (in: _Dest=0x84052c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" [0216.047] wcscat (in: _Dest=0x84052c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0216.047] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0216.047] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.544] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xab7fe5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xab7fe5c*=0x70c, lpOverlapped=0x0) returned 1 [0216.546] CloseHandle (hObject=0x10c4) returned 1 [0216.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84052c8) returned 1 [0216.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7f88) returned 1 Thread: id = 5518 os_tid = 0x608 [0186.018] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0191.249] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0201.287] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a20 [0201.288] GetFileSizeEx (in: hFile=0x2a20, lpFileSize=0xa8df998 | out: lpFileSize=0xa8df998*=206) returned 1 [0201.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80620d0 [0201.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062148 [0201.289] NtQuerySystemTime (in: CurrentTime=0xa8df920 | out: CurrentTime=0xa8df920*=132471540691368000) returned 0x0 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x58694cde [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x4b5bc2b8 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0xdffebd [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x4cf6236d [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x136a753d [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x7ba2b89e [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x1984317f [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x6d2ab72d [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x32d2d25b [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x232357df [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x50ca0eed [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x6e417e5c [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x4a78da26 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x2bd317b7 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x4f8dde9a [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x34cae52b [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x3ff38e47 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x424ce4a [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x391c2e85 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x680658e4 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x321350c2 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x78876400 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x4ac14ca6 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x51fc988b [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x61fad810 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x7e83f92e [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x51caf30e [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x38a89f31 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x728e2d55 [0201.289] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x47dba822 [0201.290] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x466e2dd4 [0201.290] RtlRandomEx (in: Seed=0xa8df918 | out: Seed=0xa8df918) returned 0x487dade3 [0201.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14c09c68 [0201.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14c0d870 [0201.301] ReadFile (in: hFile=0x2a20, lpBuffer=0x14c09c68, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0xa8df914, lpOverlapped=0x0 | out: lpBuffer=0x14c09c68*, lpNumberOfBytesRead=0xa8df914*=0xce, lpOverlapped=0x0) returned 1 [0201.304] SetFilePointerEx (in: hFile=0x2a20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.304] WriteFile (in: hFile=0x2a20, lpBuffer=0x14c0d870*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0xa8df918, lpOverlapped=0x0 | out: lpBuffer=0x14c0d870*, lpNumberOfBytesWritten=0xa8df918*=0xce, lpOverlapped=0x0) returned 1 [0205.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064880 [0205.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064880) returned 1 [0205.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14c0d870) returned 1 [0205.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14c09c68) returned 1 [0205.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403218) returned 1 [0205.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b57c0) returned 1 [0205.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fd0 [0205.254] SetFilePointerEx (in: hFile=0x2a20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.254] WriteFile (in: hFile=0x2a20, lpBuffer=0x8406998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa8df98c, lpOverlapped=0x0 | out: lpBuffer=0x8406998*, lpNumberOfBytesWritten=0xa8df98c*=0x10c, lpOverlapped=0x0) returned 1 [0207.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 [0207.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0207.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064880) returned 1 [0207.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0207.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0207.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620d0) returned 1 [0207.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062170) returned 1 [0207.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062198) returned 1 [0207.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x83ef428 [0207.921] wcscpy (in: _Dest=0x83ef428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" [0207.921] wcscat (in: _Dest=0x83ef428, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.f0dbec" [0207.921] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0xa8df910, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3d660 [0208.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d660) returned 1 [0208.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400578) returned 1 [0208.159] NtQueryInformationFile (in: FileHandle=0x2a20, IoStatusBlock=0xa8df8e8, FileInformation=0xa8df8f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa8df8e8, FileInformation=0xa8df8f0) returned 0x0 [0208.159] NtSetInformationFile (FileHandle=0x2a20, IoStatusBlock=0xa8df8e8, FileInformation=0xa8df8f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef428) returned 1 [0208.458] FlushFileBuffers (hFile=0x2a20) returned 1 [0208.464] CloseHandle (hObject=0x2a20) returned 1 [0208.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x83ef2f0 [0208.836] wcscpy (in: _Dest=0x83ef2f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" [0208.836] wcscat (in: _Dest=0x83ef2f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0208.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0208.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18f8 [0209.531] WriteFile (in: hFile=0x18f8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa8df934, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa8df934*=0x70c, lpOverlapped=0x0) returned 1 [0209.533] CloseHandle (hObject=0x18f8) returned 1 [0209.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef2f0) returned 1 [0209.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7770) returned 1 Thread: id = 5519 os_tid = 0x1380 [0186.018] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020 [0191.250] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0201.319] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2c88 [0201.320] GetFileSizeEx (in: hFile=0x2c88, lpFileSize=0xc26fd50 | out: lpFileSize=0xc26fd50*=213) returned 1 [0201.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80621c0 [0201.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062238 [0201.320] NtQuerySystemTime (in: CurrentTime=0xc26fcd8 | out: CurrentTime=0xc26fcd8*=132471540691680000) returned 0x0 [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x38fc44f0 [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x729b1806 [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x418cccb9 [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x6570fc0c [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x35697e8f [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x1ca506d1 [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x465f415b [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x68ab9c2b [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0xad74914 [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x4906eb40 [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x7883cae6 [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x65454dd3 [0201.320] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x596af33a [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x10bb7b15 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x52d19c4a [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x2d5e193 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x97e3533 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x2ac9126d [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x4bffaf89 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x37f7eb92 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0xae2ab76 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x2251a435 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x6787c96b [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x68d0aaff [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x5c80a95c [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x11d673b5 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x7931ab70 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x4d1ef59 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x4c4525c5 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x490755e8 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x71184f47 [0201.321] RtlRandomEx (in: Seed=0xc26fcd0 | out: Seed=0xc26fcd0) returned 0x4f302f9b [0201.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14c18c88 [0201.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14c1c890 [0201.330] ReadFile (in: hFile=0x2c88, lpBuffer=0x14c18c88, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0xc26fccc, lpOverlapped=0x0 | out: lpBuffer=0x14c18c88*, lpNumberOfBytesRead=0xc26fccc*=0xd5, lpOverlapped=0x0) returned 1 [0201.332] SetFilePointerEx (in: hFile=0x2c88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.332] WriteFile (in: hFile=0x2c88, lpBuffer=0x14c1c890*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0xc26fcd0, lpOverlapped=0x0 | out: lpBuffer=0x14c1c890*, lpNumberOfBytesWritten=0xc26fcd0*=0xd5, lpOverlapped=0x0) returned 1 [0203.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0203.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0203.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0203.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14c1c890) returned 1 [0203.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14c18c88) returned 1 [0203.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403308) returned 1 [0203.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5a48) returned 1 [0203.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0203.961] SetFilePointerEx (in: hFile=0x2c88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.961] WriteFile (in: hFile=0x2c88, lpBuffer=0x81e06b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc26fd44, lpOverlapped=0x0 | out: lpBuffer=0x81e06b0*, lpNumberOfBytesWritten=0xc26fd44*=0x10c, lpOverlapped=0x0) returned 1 [0204.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e06b0) returned 1 [0204.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0204.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0204.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0204.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0204.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621c0) returned 1 [0204.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062260) returned 1 [0204.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062288) returned 1 [0204.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8348400 [0204.442] wcscpy (in: _Dest=0x8348400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" [0204.442] wcscat (in: _Dest=0x8348400, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.f0dbec" [0204.442] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0xc26fcc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c848 [0207.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c848) returned 1 [0207.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82015d8) returned 1 [0207.417] NtQueryInformationFile (in: FileHandle=0x2c88, IoStatusBlock=0xc26fca0, FileInformation=0xc26fca8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc26fca0, FileInformation=0xc26fca8) returned 0x0 [0207.417] NtSetInformationFile (FileHandle=0x2c88, IoStatusBlock=0xc26fca0, FileInformation=0xc26fca8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348400) returned 1 [0208.582] FlushFileBuffers (hFile=0x2c88) returned 1 [0208.771] CloseHandle (hObject=0x2c88) returned 1 [0208.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3041f38 [0208.896] wcscpy (in: _Dest=0x3041f38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" [0208.896] wcscat (in: _Dest=0x3041f38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\F0DBEC-Readme.txt" [0208.896] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0208.896] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11dc [0209.591] WriteFile (in: hFile=0x11dc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc26fcec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc26fcec*=0x70c, lpOverlapped=0x0) returned 1 [0209.625] CloseHandle (hObject=0x11dc) returned 1 [0209.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041f38) returned 1 [0209.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7e60) returned 1 Thread: id = 5520 os_tid = 0x1384 [0186.019] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020 [0191.251] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0200.790] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a64 [0200.791] GetFileSizeEx (in: hFile=0x1a64, lpFileSize=0xd41fe60 | out: lpFileSize=0xd41fe60*=195) returned 1 [0200.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43320 [0200.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430f0 [0200.791] NtQuerySystemTime (in: CurrentTime=0xd41fde8 | out: CurrentTime=0xd41fde8*=132471540686376000) returned 0x0 [0200.791] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x4b6bd660 [0200.791] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x7cebbcae [0200.791] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x11a74d4 [0200.791] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x2137765 [0200.791] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x18c66235 [0200.791] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x4d22e286 [0200.791] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x3ab1e03e [0200.791] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x45b4639a [0200.791] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x31a995cc [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x16ca9583 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x7bd285d4 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x4391454b [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x138c124d [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x6ae39525 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x32d4dbd1 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x20a31fd5 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x29168532 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x42d0cbda [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x464cb1ca [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x3e4e76db [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x2ba7a42b [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x303ebb5a [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x74377449 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x743c0ac1 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x7f394200 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x2eeb1dd8 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x576b68a6 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x48e1a3a5 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x2cc99698 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x1e7ba455 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x1d098f32 [0200.792] RtlRandomEx (in: Seed=0xd41fde0 | out: Seed=0xd41fde0) returned 0x8097ac [0200.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b6b8b0 [0200.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b6f4b8 [0200.801] ReadFile (in: hFile=0x1a64, lpBuffer=0x14b6b8b0, nNumberOfBytesToRead=0xc3, lpNumberOfBytesRead=0xd41fddc, lpOverlapped=0x0 | out: lpBuffer=0x14b6b8b0*, lpNumberOfBytesRead=0xd41fddc*=0xc3, lpOverlapped=0x0) returned 1 [0200.803] SetFilePointerEx (in: hFile=0x1a64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.803] WriteFile (in: hFile=0x1a64, lpBuffer=0x14b6f4b8*, nNumberOfBytesToWrite=0xc3, lpNumberOfBytesWritten=0xd41fde0, lpOverlapped=0x0 | out: lpBuffer=0x14b6f4b8*, lpNumberOfBytesWritten=0xd41fde0*=0xc3, lpOverlapped=0x0) returned 1 [0203.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80648d0 [0203.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80648f8 [0203.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648f8) returned 1 [0203.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b6f4b8) returned 1 [0203.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b6b8b0) returned 1 [0203.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e13810) returned 1 [0203.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4ad0) returned 1 [0203.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f37010 [0203.697] SetFilePointerEx (in: hFile=0x1a64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.698] WriteFile (in: hFile=0x1a64, lpBuffer=0x8321f10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd41fe54, lpOverlapped=0x0 | out: lpBuffer=0x8321f10*, lpNumberOfBytesWritten=0xd41fe54*=0x10c, lpOverlapped=0x0) returned 1 [0207.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321f10) returned 1 [0207.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37040) returned 1 [0207.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648f8) returned 1 [0207.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37010) returned 1 [0207.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648d0) returned 1 [0207.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43320) returned 1 [0207.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0207.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0207.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404a40 [0207.162] wcscpy (in: _Dest=0x8404a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" [0207.162] wcscat (in: _Dest=0x8404a40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.f0dbec" [0207.162] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.f0dbec", NtPathName=0xd41fdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8335890 [0208.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335890) returned 1 [0208.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148972a8) returned 1 [0208.132] NtQueryInformationFile (in: FileHandle=0x1a64, IoStatusBlock=0xd41fdb0, FileInformation=0xd41fdb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd41fdb0, FileInformation=0xd41fdb8) returned 0x0 [0208.132] NtSetInformationFile (FileHandle=0x1a64, IoStatusBlock=0xd41fdb0, FileInformation=0xd41fdb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404a40) returned 1 [0208.370] FlushFileBuffers (hFile=0x1a64) returned 1 [0208.373] CloseHandle (hObject=0x1a64) returned 1 [0208.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e29f0 [0208.812] wcscpy (in: _Dest=0x81e29f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" [0208.812] wcscat (in: _Dest=0x81e29f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\F0DBEC-Readme.txt" [0208.812] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\f0dbec-readme.txt")) returned 0xffffffff [0208.813] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c40 [0209.087] WriteFile (in: hFile=0x1c40, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd41fdfc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd41fdfc*=0x70c, lpOverlapped=0x0) returned 1 [0209.089] CloseHandle (hObject=0x1c40) returned 1 [0209.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e29f0) returned 1 [0209.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7898) returned 1 Thread: id = 5521 os_tid = 0x1224 [0186.019] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json")) returned 0x2020 [0190.221] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.806] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2108 [0198.808] GetFileSizeEx (in: hFile=0x2108, lpFileSize=0x849f8a8 | out: lpFileSize=0x849f8a8*=230) returned 1 [0198.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0198.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0198.809] NtQuerySystemTime (in: CurrentTime=0x849f830 | out: CurrentTime=0x849f830*=132471540667032000) returned 0x0 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x66c2da58 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x2a0207f3 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x65e9f71 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x2a9213f2 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0xd58c9d1 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x25d49333 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x610a50e7 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x141ab1f5 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x9c63547 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x355f7fd0 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x52e6b639 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x261f728f [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x4bb4c379 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x216efdfe [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x645f70a1 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x631b4c79 [0198.809] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x2e7bc3d [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x668c04f [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x7fd99f0f [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x51c2d918 [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x16f0faa0 [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x5946087 [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x3384bb2f [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x24db0d90 [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x7ac1e887 [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x60e142af [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x61b2aa37 [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0xa643cc9 [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x27c49e6d [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x2edbe72 [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0x1ba98ba [0198.810] RtlRandomEx (in: Seed=0x849f828 | out: Seed=0x849f828) returned 0xcac4e53 [0198.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0198.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814a060 [0198.827] ReadFile (in: hFile=0x2108, lpBuffer=0x8146458, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0x849f824, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesRead=0x849f824*=0xe6, lpOverlapped=0x0) returned 1 [0198.830] SetFilePointerEx (in: hFile=0x2108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.830] WriteFile (in: hFile=0x2108, lpBuffer=0x814a060*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x849f828, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesWritten=0x849f828*=0xe6, lpOverlapped=0x0) returned 1 [0202.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062e40 [0202.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062e68 [0202.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e68) returned 1 [0202.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0202.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0202.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32610) returned 1 [0202.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e65c0) returned 1 [0202.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69b40 [0202.158] SetFilePointerEx (in: hFile=0x2108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.158] WriteFile (in: hFile=0x2108, lpBuffer=0x81e09f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x849f89c, lpOverlapped=0x0 | out: lpBuffer=0x81e09f8*, lpNumberOfBytesWritten=0x849f89c*=0x10c, lpOverlapped=0x0) returned 1 [0203.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e09f8) returned 1 [0203.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b70) returned 1 [0203.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e68) returned 1 [0203.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b40) returned 1 [0203.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e40) returned 1 [0203.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0203.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0203.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0203.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0428 [0203.938] wcscpy (in: _Dest=0x81f0428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" [0203.938] wcscat (in: _Dest=0x81f0428, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json.f0dbec" [0203.939] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json.f0dbec", NtPathName=0x849f820, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3d660 [0204.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d660) returned 1 [0204.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fddc8) returned 1 [0204.420] NtQueryInformationFile (in: FileHandle=0x2108, IoStatusBlock=0x849f7f8, FileInformation=0x849f800, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x849f7f8, FileInformation=0x849f800) returned 0x0 [0204.421] NtSetInformationFile (FileHandle=0x2108, IoStatusBlock=0x849f7f8, FileInformation=0x849f800, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0428) returned 1 [0207.389] FlushFileBuffers (hFile=0x2108) returned 1 [0207.403] CloseHandle (hObject=0x2108) returned 1 [0208.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8186fe8 [0208.567] wcscpy (in: _Dest=0x8186fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" [0208.567] wcscat (in: _Dest=0x8186fe8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\F0DBEC-Readme.txt" [0208.567] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\f0dbec-readme.txt")) returned 0xffffffff [0208.567] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.042] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x849f844, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x849f844*=0x70c, lpOverlapped=0x0) returned 1 [0209.044] CloseHandle (hObject=0x1bc4) returned 1 [0209.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186fe8) returned 1 [0209.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7648) returned 1 Thread: id = 5522 os_tid = 0xaf0 [0186.020] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json")) returned 0x2020 [0190.232] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0199.027] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cc4 [0199.028] GetFileSizeEx (in: hFile=0x1cc4, lpFileSize=0xdabfdb0 | out: lpFileSize=0xdabfdb0*=254) returned 1 [0199.028] SetFilePointerEx (in: hFile=0x1cc4, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.028] ReadFile (in: hFile=0x1cc4, lpBuffer=0xdabfdbc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdabfd98, lpOverlapped=0x0 | out: lpBuffer=0xdabfdbc*, lpNumberOfBytesRead=0xdabfd98*=0x4, lpOverlapped=0x0) returned 1 [0199.035] SetFilePointerEx (in: hFile=0x1cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ac80 [0199.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0199.035] NtQuerySystemTime (in: CurrentTime=0xdabfd38 | out: CurrentTime=0xdabfd38*=132471540669216000) returned 0x0 [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x2ed83e6b [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x376a05e7 [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x4b9ea72f [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0xeb48e75 [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x28a912de [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x5bc55081 [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0xdd3ef5d [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x64ef917e [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x5bed2c5a [0199.035] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x7cbdb4b9 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x3af5d3 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x6c024b17 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x3f49d6fb [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x2d3663b [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x5fbeb49c [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x200ec773 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x79018101 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x2099c530 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x11778bc1 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x24f0bc18 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x4f7d2521 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0xd1519b6 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x54ff4846 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x52ce4b0e [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x952e163 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x72a73169 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x69504b08 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x310272b0 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x32bec461 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x69336366 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x6bed5126 [0199.036] RtlRandomEx (in: Seed=0xdabfd30 | out: Seed=0xdabfd30) returned 0x67d6b816 [0199.050] ReadFile (in: hFile=0x1cc4, lpBuffer=0x14a67ca8, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xdabfd2c, lpOverlapped=0x0 | out: lpBuffer=0x14a67ca8*, lpNumberOfBytesRead=0xdabfd2c*=0xfe, lpOverlapped=0x0) returned 1 [0199.051] SetFilePointerEx (in: hFile=0x1cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.051] WriteFile (in: hFile=0x1cc4, lpBuffer=0x14a6b8b0*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xdabfd30, lpOverlapped=0x0 | out: lpBuffer=0x14a6b8b0*, lpNumberOfBytesWritten=0xdabfd30*=0xfe, lpOverlapped=0x0) returned 1 [0203.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063570 [0203.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063598 [0203.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063598) returned 1 [0203.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a6b8b0) returned 1 [0203.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a67ca8) returned 1 [0203.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33240) returned 1 [0203.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5be8) returned 1 [0203.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e693c0 [0203.450] SetFilePointerEx (in: hFile=0x1cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.451] WriteFile (in: hFile=0x1cc4, lpBuffer=0x8407140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdabfda4, lpOverlapped=0x0 | out: lpBuffer=0x8407140*, lpNumberOfBytesWritten=0xdabfda4*=0x10c, lpOverlapped=0x0) returned 1 [0206.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407140) returned 1 [0206.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693f0) returned 1 [0206.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063598) returned 1 [0206.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693c0) returned 1 [0206.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063570) returned 1 [0206.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ac80) returned 1 [0206.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0206.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b978) returned 1 [0206.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81868f8 [0206.884] wcscpy (in: _Dest=0x81868f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" [0206.884] wcscat (in: _Dest=0x81868f8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json.f0dbec" [0206.884] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0xdabfd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x83366a8 [0209.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83366a8) returned 1 [0209.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1489e0a0) returned 1 [0209.687] NtQueryInformationFile (in: FileHandle=0x1cc4, IoStatusBlock=0xdabfd00, FileInformation=0xdabfd08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdabfd00, FileInformation=0xdabfd08) returned 0x0 [0209.688] NtSetInformationFile (FileHandle=0x1cc4, IoStatusBlock=0xdabfd00, FileInformation=0xdabfd08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81868f8) returned 1 [0209.689] FlushFileBuffers (hFile=0x1cc4) returned 1 [0209.825] CloseHandle (hObject=0x1cc4) returned 1 [0209.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d565c0 [0209.826] wcscpy (in: _Dest=0x3d565c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" [0209.826] wcscat (in: _Dest=0x3d565c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\F0DBEC-Readme.txt" [0209.826] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0209.826] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc4 [0209.827] WriteFile (in: hFile=0x1cc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdabfd4c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdabfd4c*=0x70c, lpOverlapped=0x0) returned 1 [0209.835] CloseHandle (hObject=0x1cc4) returned 1 [0209.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 [0209.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187dc8) returned 1 Thread: id = 5523 os_tid = 0xf70 [0186.020] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json")) returned 0x2020 [0191.242] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0200.864] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1760 [0200.864] GetFileSizeEx (in: hFile=0x1760, lpFileSize=0x43ef968 | out: lpFileSize=0x43ef968*=270) returned 1 [0200.864] SetFilePointerEx (in: hFile=0x1760, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.864] ReadFile (in: hFile=0x1760, lpBuffer=0x43ef974, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x43ef950, lpOverlapped=0x0 | out: lpBuffer=0x43ef974*, lpNumberOfBytesRead=0x43ef950*=0x4, lpOverlapped=0x0) returned 1 [0200.866] SetFilePointerEx (in: hFile=0x1760, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431b8 [0200.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42830 [0200.866] NtQuerySystemTime (in: CurrentTime=0x43ef8f0 | out: CurrentTime=0x43ef8f0*=132471540687156000) returned 0x0 [0200.866] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x6f6b25ce [0200.866] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x7bff831a [0200.866] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x1b15768 [0200.866] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x4430dbb3 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x165d389f [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x55663900 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x63e61ef [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x1a5ad170 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x6f2a611 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0xd26c03e [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x1101c5d2 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0xf9d1cf5 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x5b5badd7 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x657be04e [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x5eee6b79 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x48f25419 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x3826b8b2 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x7ce16780 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x43ec9247 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x7d61f1c0 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x70ce19c2 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x636f1dcd [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x6814261f [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x1784ae44 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x72fd50e8 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x7558b621 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x22fe74c [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x58abbef8 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x32203db2 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x15436c2 [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x10b8ee6e [0200.867] RtlRandomEx (in: Seed=0x43ef8e8 | out: Seed=0x43ef8e8) returned 0x73922f3a [0200.878] ReadFile (in: hFile=0x1760, lpBuffer=0x14b91478, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0x43ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x14b91478*, lpNumberOfBytesRead=0x43ef8e4*=0x10e, lpOverlapped=0x0) returned 1 [0200.878] SetFilePointerEx (in: hFile=0x1760, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.879] WriteFile (in: hFile=0x1760, lpBuffer=0x14b95080*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x43ef8e8, lpOverlapped=0x0 | out: lpBuffer=0x14b95080*, lpNumberOfBytesWritten=0x43ef8e8*=0x10e, lpOverlapped=0x0) returned 1 [0203.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064ab0 [0203.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064ad8 [0203.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ad8) returned 1 [0203.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b95080) returned 1 [0203.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b91478) returned 1 [0203.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a98) returned 1 [0203.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5e80) returned 1 [0203.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f37250 [0203.718] SetFilePointerEx (in: hFile=0x1760, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.718] WriteFile (in: hFile=0x1760, lpBuffer=0x83225a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x43ef95c, lpOverlapped=0x0 | out: lpBuffer=0x83225a0*, lpNumberOfBytesWritten=0x43ef95c*=0x10c, lpOverlapped=0x0) returned 1 [0207.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83225a0) returned 1 [0207.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37280) returned 1 [0207.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ad8) returned 1 [0207.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37250) returned 1 [0207.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ab0) returned 1 [0207.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0207.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d58) returned 1 [0207.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0207.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404f20 [0207.178] wcscpy (in: _Dest=0x8404f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" [0207.179] wcscat (in: _Dest=0x8404f20, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json.f0dbec" [0207.179] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0x43ef8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8335370 [0208.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335370) returned 1 [0208.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14898838) returned 1 [0208.184] NtQueryInformationFile (in: FileHandle=0x1760, IoStatusBlock=0x43ef8b8, FileInformation=0x43ef8c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x43ef8b8, FileInformation=0x43ef8c0) returned 0x0 [0208.184] NtSetInformationFile (FileHandle=0x1760, IoStatusBlock=0x43ef8b8, FileInformation=0x43ef8c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404f20) returned 1 [0208.491] FlushFileBuffers (hFile=0x1760) returned 1 [0208.497] CloseHandle (hObject=0x1760) returned 1 [0208.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8188140 [0208.858] wcscpy (in: _Dest=0x8188140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\" [0208.858] wcscat (in: _Dest=0x8188140, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\F0DBEC-Readme.txt" [0208.858] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0208.858] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22a8 [0209.561] WriteFile (in: hFile=0x22a8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x43ef904, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x43ef904*=0x70c, lpOverlapped=0x0) returned 1 [0209.734] CloseHandle (hObject=0x22a8) returned 1 [0209.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188140) returned 1 [0209.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041bc0) returned 1 Thread: id = 5524 os_tid = 0x824 [0186.020] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json")) returned 0x2020 [0191.243] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0200.940] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2c98 [0200.940] GetFileSizeEx (in: hFile=0x2c98, lpFileSize=0xd5bf790 | out: lpFileSize=0xd5bf790*=268) returned 1 [0200.940] SetFilePointerEx (in: hFile=0x2c98, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.940] ReadFile (in: hFile=0x2c98, lpBuffer=0xd5bf79c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd5bf778, lpOverlapped=0x0 | out: lpBuffer=0xd5bf79c*, lpNumberOfBytesRead=0xd5bf778*=0x4, lpOverlapped=0x0) returned 1 [0200.943] SetFilePointerEx (in: hFile=0x2c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e48 [0200.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0200.943] NtQuerySystemTime (in: CurrentTime=0xd5bf718 | out: CurrentTime=0xd5bf718*=132471540687780000) returned 0x0 [0200.943] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x3a8a2073 [0200.943] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x420d1806 [0200.943] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x43e672cc [0200.943] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x1921e803 [0200.943] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x4a7f91c4 [0200.943] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x518fa446 [0200.943] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x2a97c40e [0200.943] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x7654e331 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x625488ed [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x7db7a340 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x138b0527 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x5247cd32 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x19af77aa [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x2c8a4a73 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x58a1bc6b [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x4f53ef9f [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x30d306b4 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x77692683 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x35992e7a [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x3826b8b2 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x533c7134 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x5d52c3 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x4778d3e [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x28f502e2 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x35a073f4 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x42d8aa37 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x8df483b [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x5d5d9a54 [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x684edcd [0200.944] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x13467b66 [0200.945] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x509a6db3 [0200.945] RtlRandomEx (in: Seed=0xd5bf710 | out: Seed=0xd5bf710) returned 0x33533c99 [0200.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ba7ca8 [0200.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bab8b0 [0200.958] ReadFile (in: hFile=0x2c98, lpBuffer=0x14ba7ca8, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0xd5bf70c, lpOverlapped=0x0 | out: lpBuffer=0x14ba7ca8*, lpNumberOfBytesRead=0xd5bf70c*=0x10c, lpOverlapped=0x0) returned 1 [0200.958] SetFilePointerEx (in: hFile=0x2c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.958] WriteFile (in: hFile=0x2c98, lpBuffer=0x14bab8b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd5bf710, lpOverlapped=0x0 | out: lpBuffer=0x14bab8b0*, lpNumberOfBytesWritten=0xd5bf710*=0x10c, lpOverlapped=0x0) returned 1 [0203.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064ba0 [0203.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bc8 [0203.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064bc8) returned 1 [0203.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bab8b0) returned 1 [0203.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ba7ca8) returned 1 [0203.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402c00) returned 1 [0203.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4e78) returned 1 [0203.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f37370 [0203.727] SetFilePointerEx (in: hFile=0x2c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.727] WriteFile (in: hFile=0x2c98, lpBuffer=0x83ee930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd5bf784, lpOverlapped=0x0 | out: lpBuffer=0x83ee930*, lpNumberOfBytesWritten=0xd5bf784*=0x10c, lpOverlapped=0x0) returned 1 [0204.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee930) returned 1 [0204.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f373a0) returned 1 [0204.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064bc8) returned 1 [0204.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37370) returned 1 [0204.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ba0) returned 1 [0204.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0204.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0204.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421c8) returned 1 [0204.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347908 [0204.236] wcscpy (in: _Dest=0x8347908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" [0204.236] wcscat (in: _Dest=0x8347908, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json.f0dbec" [0204.237] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0xd5bf708, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83eaf98 [0204.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eaf98) returned 1 [0204.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8345ab0) returned 1 [0204.581] NtQueryInformationFile (in: FileHandle=0x2c98, IoStatusBlock=0xd5bf6e0, FileInformation=0xd5bf6e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd5bf6e0, FileInformation=0xd5bf6e8) returned 0x0 [0204.581] NtSetInformationFile (FileHandle=0x2c98, IoStatusBlock=0xd5bf6e0, FileInformation=0xd5bf6e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347908) returned 1 [0207.754] FlushFileBuffers (hFile=0x2c98) returned 1 [0207.771] CloseHandle (hObject=0x2c98) returned 1 [0208.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d3ca0 [0208.080] wcscpy (in: _Dest=0x81d3ca0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\" [0208.080] wcscat (in: _Dest=0x81d3ca0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\F0DBEC-Readme.txt" [0208.080] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0208.080] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cd4 [0208.449] WriteFile (in: hFile=0x1cd4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd5bf72c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd5bf72c*=0x70c, lpOverlapped=0x0) returned 1 [0209.415] CloseHandle (hObject=0x1cd4) returned 1 [0209.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3ca0) returned 1 [0209.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ec930) returned 1 Thread: id = 5525 os_tid = 0x844 [0186.021] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json")) returned 0x2020 [0191.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0201.015] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15a0 [0201.015] GetFileSizeEx (in: hFile=0x15a0, lpFileSize=0xd3dfa28 | out: lpFileSize=0xd3dfa28*=285) returned 1 [0201.015] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.016] ReadFile (in: hFile=0x15a0, lpBuffer=0xd3dfa34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd3dfa10, lpOverlapped=0x0 | out: lpBuffer=0xd3dfa34*, lpNumberOfBytesRead=0xd3dfa10*=0x4, lpOverlapped=0x0) returned 1 [0201.018] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420d8 [0201.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d30 [0201.018] NtQuerySystemTime (in: CurrentTime=0xd3df9b0 | out: CurrentTime=0xd3df9b0*=132471540688560000) returned 0x0 [0201.018] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x63290bcc [0201.018] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x2e2c9e82 [0201.018] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x53adaeb0 [0201.018] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x3c760ad0 [0201.018] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x253a1834 [0201.018] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x33c3c0e [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x77920ce1 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x16cd7d3f [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x76dbdb3d [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x694eb612 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x9010850 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x248a9569 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x36f39234 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x505e6357 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x250b5295 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x34908d24 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x20366dc [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x71c22ee6 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x41307132 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x7c60dd40 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x7e8f1422 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x77411e9 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x11298715 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x4d3d6732 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x6c8850cb [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x33c7b2b0 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x3f651d3c [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x45c3c6c7 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x7b5fc8c0 [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x40e7efca [0201.019] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x5f25e96 [0201.020] RtlRandomEx (in: Seed=0xd3df9a8 | out: Seed=0xd3df9a8) returned 0x160e5f0c [0201.033] ReadFile (in: hFile=0x15a0, lpBuffer=0x14bbe4d8, nNumberOfBytesToRead=0x11d, lpNumberOfBytesRead=0xd3df9a4, lpOverlapped=0x0 | out: lpBuffer=0x14bbe4d8*, lpNumberOfBytesRead=0xd3df9a4*=0x11d, lpOverlapped=0x0) returned 1 [0201.033] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.033] WriteFile (in: hFile=0x15a0, lpBuffer=0x14bc20e0*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0xd3df9a8, lpOverlapped=0x0 | out: lpBuffer=0x14bc20e0*, lpNumberOfBytesWritten=0xd3df9a8*=0x11d, lpOverlapped=0x0) returned 1 [0203.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0203.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0203.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0203.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bc20e0) returned 1 [0203.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bbe4d8) returned 1 [0203.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402d68) returned 1 [0203.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b6198) returned 1 [0203.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fc48 [0203.793] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.793] WriteFile (in: hFile=0x15a0, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd3dfa1c, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0xd3dfa1c*=0x10c, lpOverlapped=0x0) returned 1 [0204.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0204.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0204.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0204.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0204.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0204.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420d8) returned 1 [0204.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0204.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42290) returned 1 [0204.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347cb0 [0204.270] wcscpy (in: _Dest=0x8347cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" [0204.270] wcscat (in: _Dest=0x8347cb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json.f0dbec" [0204.270] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0xd3df9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c1e0 [0204.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1e0) returned 1 [0204.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830f648) returned 1 [0204.676] NtQueryInformationFile (in: FileHandle=0x15a0, IoStatusBlock=0xd3df978, FileInformation=0xd3df980, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd3df978, FileInformation=0xd3df980) returned 0x0 [0204.676] NtSetInformationFile (FileHandle=0x15a0, IoStatusBlock=0xd3df978, FileInformation=0xd3df980, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347cb0) returned 1 [0207.824] FlushFileBuffers (hFile=0x15a0) returned 1 [0207.836] CloseHandle (hObject=0x15a0) returned 1 [0208.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d4018 [0208.090] wcscpy (in: _Dest=0x81d4018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\" [0208.090] wcscat (in: _Dest=0x81d4018, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\F0DBEC-Readme.txt" [0208.090] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0208.090] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe6c [0208.450] WriteFile (in: hFile=0xe6c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd3df9c4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd3df9c4*=0x70c, lpOverlapped=0x0) returned 1 [0209.424] CloseHandle (hObject=0xe6c) returned 1 [0209.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4018) returned 1 [0209.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eca58) returned 1 Thread: id = 5526 os_tid = 0x854 [0186.021] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json")) returned 0x2020 [0191.245] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0200.609] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x560 [0200.609] GetFileSizeEx (in: hFile=0x560, lpFileSize=0xddbff48 | out: lpFileSize=0xddbff48*=258) returned 1 [0200.609] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.609] ReadFile (in: hFile=0x560, lpBuffer=0xddbff54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xddbff30, lpOverlapped=0x0 | out: lpBuffer=0xddbff54*, lpNumberOfBytesRead=0xddbff30*=0x4, lpOverlapped=0x0) returned 1 [0200.611] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42808 [0200.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0200.611] NtQuerySystemTime (in: CurrentTime=0xddbfed0 | out: CurrentTime=0xddbfed0*=132471540684504000) returned 0x0 [0200.611] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x15a69ae9 [0200.611] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x36defd9a [0200.611] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x5a617e [0200.611] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x47edfabb [0200.611] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0xc20840c [0200.611] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x629d7ae4 [0200.611] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x5fa6a1b1 [0200.611] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x772c979 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x25a1ae67 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x2e92f8a4 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x4494f4ac [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0xfd241 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x49d57f40 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x2311de64 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x1e99bd77 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x4efa332 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x5ae58c4d [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x5eec6977 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x517ece7 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x20ea8fe9 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x2dc81cb9 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x8e50d50 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x1fe8807e [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x1a0d046e [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x7d12610 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x7be5eab1 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x734b52a2 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x7b40fab6 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x3afe1922 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x5fe51022 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x3f4a8f50 [0200.612] RtlRandomEx (in: Seed=0xddbfec8 | out: Seed=0xddbfec8) returned 0x5ddfc1c7 [0200.622] ReadFile (in: hFile=0x560, lpBuffer=0x14b11478, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0xddbfec4, lpOverlapped=0x0 | out: lpBuffer=0x14b11478*, lpNumberOfBytesRead=0xddbfec4*=0x102, lpOverlapped=0x0) returned 1 [0200.622] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.622] WriteFile (in: hFile=0x560, lpBuffer=0x14b15080*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xddbfec8, lpOverlapped=0x0 | out: lpBuffer=0x14b15080*, lpNumberOfBytesWritten=0xddbfec8*=0x102, lpOverlapped=0x0) returned 1 [0203.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064600 [0203.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064628 [0203.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064628) returned 1 [0203.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b15080) returned 1 [0203.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b11478) returned 1 [0203.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0203.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4c80) returned 1 [0203.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36cb0 [0203.667] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.667] WriteFile (in: hFile=0x560, lpBuffer=0x8321538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xddbff3c, lpOverlapped=0x0 | out: lpBuffer=0x8321538*, lpNumberOfBytesWritten=0xddbff3c*=0x10c, lpOverlapped=0x0) returned 1 [0204.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321538) returned 1 [0204.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36ce0) returned 1 [0204.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064628) returned 1 [0204.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36cb0) returned 1 [0204.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064600) returned 1 [0204.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42808) returned 1 [0204.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0204.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0204.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346930 [0204.165] wcscpy (in: _Dest=0x8346930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" [0204.165] wcscat (in: _Dest=0x8346930, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json.f0dbec" [0204.165] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0xddbfec0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f4ac8 [0204.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4ac8) returned 1 [0204.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8338538) returned 1 [0204.560] NtQueryInformationFile (in: FileHandle=0x560, IoStatusBlock=0xddbfe98, FileInformation=0xddbfea0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xddbfe98, FileInformation=0xddbfea0) returned 0x0 [0204.560] NtSetInformationFile (FileHandle=0x560, IoStatusBlock=0xddbfe98, FileInformation=0xddbfea0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346930) returned 1 [0207.684] FlushFileBuffers (hFile=0x560) returned 1 [0207.699] CloseHandle (hObject=0x560) returned 1 [0208.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e3208 [0208.045] wcscpy (in: _Dest=0x81e3208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\" [0208.045] wcscat (in: _Dest=0x81e3208, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\F0DBEC-Readme.txt" [0208.045] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0208.045] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1da4 [0208.433] WriteFile (in: hFile=0x1da4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xddbfee4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xddbfee4*=0x70c, lpOverlapped=0x0) returned 1 [0209.374] CloseHandle (hObject=0x1da4) returned 1 [0209.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3208) returned 1 [0209.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ecb80) returned 1 Thread: id = 5527 os_tid = 0x864 [0186.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json")) returned 0x2020 [0191.247] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0200.636] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1550 [0200.636] GetFileSizeEx (in: hFile=0x1550, lpFileSize=0xd70fb28 | out: lpFileSize=0xd70fb28*=254) returned 1 [0200.636] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.636] ReadFile (in: hFile=0x1550, lpBuffer=0xd70fb34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd70fb10, lpOverlapped=0x0 | out: lpBuffer=0xd70fb34*, lpNumberOfBytesRead=0xd70fb10*=0x4, lpOverlapped=0x0) returned 1 [0200.638] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0200.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428d0 [0200.638] NtQuerySystemTime (in: CurrentTime=0xd70fab0 | out: CurrentTime=0xd70fab0*=132471540684816000) returned 0x0 [0200.638] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x41e4dd52 [0200.638] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x7f8ef380 [0200.638] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0xaf61e32 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x7bcf57a1 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x1e3dda8f [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x5930ad61 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x21c20278 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x7b104782 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x6599020b [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x3dbb793 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x24515785 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x20a0beb7 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x5de86ff6 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x10ed5bae [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x23001cc8 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x54d6d494 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x61c70fde [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x2997d399 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0xadd4529 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x652f41 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x50d37fce [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x70ec333e [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x1a91aa84 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x66445fb8 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x400b8bfb [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x3ff019eb [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x398b2431 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x34c391c5 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x1e721f37 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x491fd308 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x25700591 [0200.639] RtlRandomEx (in: Seed=0xd70faa8 | out: Seed=0xd70faa8) returned 0x6d470132 [0200.649] ReadFile (in: hFile=0x1550, lpBuffer=0x14b20498, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xd70faa4, lpOverlapped=0x0 | out: lpBuffer=0x14b20498*, lpNumberOfBytesRead=0xd70faa4*=0xfe, lpOverlapped=0x0) returned 1 [0200.649] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.649] WriteFile (in: hFile=0x1550, lpBuffer=0x14b240a0*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xd70faa8, lpOverlapped=0x0 | out: lpBuffer=0x14b240a0*, lpNumberOfBytesWritten=0xd70faa8*=0xfe, lpOverlapped=0x0) returned 1 [0203.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80646a0 [0203.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80646c8 [0203.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80646c8) returned 1 [0203.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b240a0) returned 1 [0203.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b20498) returned 1 [0203.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0203.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b46e0) returned 1 [0203.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36d70 [0203.673] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.673] WriteFile (in: hFile=0x1550, lpBuffer=0x8321768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd70fb1c, lpOverlapped=0x0 | out: lpBuffer=0x8321768*, lpNumberOfBytesWritten=0xd70fb1c*=0x10c, lpOverlapped=0x0) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321768) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36da0) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80646c8) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36d70) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80646a0) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42880) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423f8) returned 1 [0204.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346ba0 [0204.172] wcscpy (in: _Dest=0x8346ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" [0204.172] wcscat (in: _Dest=0x8346ba0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json.f0dbec" [0204.172] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json.f0dbec", NtPathName=0xd70faa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f4d58 [0204.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4d58) returned 1 [0204.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8340d10) returned 1 [0204.564] NtQueryInformationFile (in: FileHandle=0x1550, IoStatusBlock=0xd70fa78, FileInformation=0xd70fa80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd70fa78, FileInformation=0xd70fa80) returned 0x0 [0204.564] NtSetInformationFile (FileHandle=0x1550, IoStatusBlock=0xd70fa78, FileInformation=0xd70fa80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346ba0) returned 1 [0207.692] FlushFileBuffers (hFile=0x1550) returned 1 [0207.717] CloseHandle (hObject=0x1550) returned 1 [0208.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e2300 [0208.048] wcscpy (in: _Dest=0x81e2300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\" [0208.048] wcscat (in: _Dest=0x81e2300, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\F0DBEC-Readme.txt" [0208.048] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\f0dbec-readme.txt")) returned 0xffffffff [0208.048] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc6c [0208.438] WriteFile (in: hFile=0xc6c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd70fac4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd70fac4*=0x70c, lpOverlapped=0x0) returned 1 [0209.380] CloseHandle (hObject=0xc6c) returned 1 [0209.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2300) returned 1 [0209.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ecca8) returned 1 Thread: id = 5528 os_tid = 0x123c [0186.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json")) returned 0x2020 [0191.248] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0201.272] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cf4 [0201.272] GetFileSizeEx (in: hFile=0x1cf4, lpFileSize=0xb79fe40 | out: lpFileSize=0xb79fe40*=242) returned 1 [0201.273] SetFilePointerEx (in: hFile=0x1cf4, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.273] ReadFile (in: hFile=0x1cf4, lpBuffer=0xb79fe4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb79fe28, lpOverlapped=0x0 | out: lpBuffer=0xb79fe4c*, lpNumberOfBytesRead=0xb79fe28*=0x4, lpOverlapped=0x0) returned 1 [0201.274] SetFilePointerEx (in: hFile=0x1cf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062058 [0201.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80620d0 [0201.275] NtQuerySystemTime (in: CurrentTime=0xb79fdc8 | out: CurrentTime=0xb79fdc8*=132471540691212000) returned 0x0 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x4194e82d [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x535834b4 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x7ddcb413 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x738aa6d1 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0xf94e693 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x5bf56f5c [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0xae3f183 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x18ebcb20 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x29f5c3bc [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x38b58adf [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x5f86fcce [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x783d211 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x2f9a2e20 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x16427405 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0xc4a6cb6 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x338c4ec9 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x3b7b25a4 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x3b6e39c3 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x2728c17d [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x1c5cce96 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x269c1ac3 [0201.275] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x34781e49 [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x4d5eda17 [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x2805a817 [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x5218956d [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x427ff7e6 [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x256a1cf4 [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x2ced6fb5 [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x75dd96 [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x7200cfb9 [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x33a18298 [0201.276] RtlRandomEx (in: Seed=0xb79fdc0 | out: Seed=0xb79fdc0) returned 0x129f264c [0201.287] ReadFile (in: hFile=0x1cf4, lpBuffer=0x14c020e0, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0xb79fdbc, lpOverlapped=0x0 | out: lpBuffer=0x14c020e0*, lpNumberOfBytesRead=0xb79fdbc*=0xf2, lpOverlapped=0x0) returned 1 [0201.287] SetFilePointerEx (in: hFile=0x1cf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.287] WriteFile (in: hFile=0x1cf4, lpBuffer=0x14c06060*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0xb79fdc0, lpOverlapped=0x0 | out: lpBuffer=0x14c06060*, lpNumberOfBytesWritten=0xb79fdc0*=0xf2, lpOverlapped=0x0) returned 1 [0203.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0203.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0203.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0203.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14c06060) returned 1 [0203.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14c020e0) returned 1 [0203.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84031a0) returned 1 [0203.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5388) returned 1 [0203.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69840 [0203.955] SetFilePointerEx (in: hFile=0x1cf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.955] WriteFile (in: hFile=0x1cf4, lpBuffer=0x81e0138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb79fe34, lpOverlapped=0x0 | out: lpBuffer=0x81e0138*, lpNumberOfBytesWritten=0xb79fe34*=0x10c, lpOverlapped=0x0) returned 1 [0204.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0138) returned 1 [0204.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69870) returned 1 [0204.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0204.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69840) returned 1 [0204.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0204.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062058) returned 1 [0204.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620f8) returned 1 [0204.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062120) returned 1 [0204.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8348190 [0204.435] wcscpy (in: _Dest=0x8348190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" [0204.435] wcscat (in: _Dest=0x8348190, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json.f0dbec" [0204.435] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json.f0dbec", NtPathName=0xb79fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3da38 [0207.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3da38) returned 1 [0207.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8200b10) returned 1 [0207.410] NtQueryInformationFile (in: FileHandle=0x1cf4, IoStatusBlock=0xb79fd90, FileInformation=0xb79fd98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb79fd90, FileInformation=0xb79fd98) returned 0x0 [0207.410] NtSetInformationFile (FileHandle=0x1cf4, IoStatusBlock=0xb79fd90, FileInformation=0xb79fd98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348190) returned 1 [0208.569] FlushFileBuffers (hFile=0x1cf4) returned 1 [0208.578] CloseHandle (hObject=0x1cf4) returned 1 [0208.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d06a8 [0208.894] wcscpy (in: _Dest=0x81d06a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\" [0208.894] wcscat (in: _Dest=0x81d06a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\F0DBEC-Readme.txt" [0208.894] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\f0dbec-readme.txt")) returned 0xffffffff [0208.894] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19cc [0209.567] WriteFile (in: hFile=0x19cc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb79fddc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb79fddc*=0x70c, lpOverlapped=0x0) returned 1 [0209.603] CloseHandle (hObject=0x19cc) returned 1 [0209.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d06a8) returned 1 [0209.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ecdd0) returned 1 Thread: id = 5529 os_tid = 0x874 [0186.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json")) returned 0x2020 [0191.250] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0201.304] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2c8c [0201.305] GetFileSizeEx (in: hFile=0x2c8c, lpFileSize=0xd90f7e8 | out: lpFileSize=0xd90f7e8*=218) returned 1 [0201.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062148 [0201.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80621c0 [0201.305] NtQuerySystemTime (in: CurrentTime=0xd90f770 | out: CurrentTime=0xd90f770*=132471540691524000) returned 0x0 [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x49bbe2b6 [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x288e928d [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x75fbe7f9 [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x3cd3c483 [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x28088593 [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x5d75c040 [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x5520422c [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x2eca863 [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x174091c0 [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x152c75d5 [0201.305] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0xc8172b3 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x5ea4d10c [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x2a0fda04 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x5e0e46dd [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x3fbae8bc [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x2f70dca8 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x54717ed6 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x16462ea0 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x1fba5e3 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x707c69aa [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x263d302c [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x786e67e [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x60404501 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x4fb29ca6 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x17d06ed6 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x52ff1e8a [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x403cfb80 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x50f3bea9 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x7c04ba61 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x5c816581 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x6bbbb87 [0201.306] RtlRandomEx (in: Seed=0xd90f768 | out: Seed=0xd90f768) returned 0x7831b280 [0201.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14c11478 [0201.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14c15080 [0201.316] ReadFile (in: hFile=0x2c8c, lpBuffer=0x14c11478, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0xd90f764, lpOverlapped=0x0 | out: lpBuffer=0x14c11478*, lpNumberOfBytesRead=0xd90f764*=0xda, lpOverlapped=0x0) returned 1 [0201.319] SetFilePointerEx (in: hFile=0x2c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.319] WriteFile (in: hFile=0x2c8c, lpBuffer=0x14c15080*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0xd90f768, lpOverlapped=0x0 | out: lpBuffer=0x14c15080*, lpNumberOfBytesWritten=0xd90f768*=0xda, lpOverlapped=0x0) returned 1 [0203.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0203.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0203.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0203.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14c15080) returned 1 [0203.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14c11478) returned 1 [0203.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403290) returned 1 [0203.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5778) returned 1 [0203.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69b40 [0203.959] SetFilePointerEx (in: hFile=0x2c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.960] WriteFile (in: hFile=0x2c8c, lpBuffer=0x81e09f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd90f7dc, lpOverlapped=0x0 | out: lpBuffer=0x81e09f8*, lpNumberOfBytesWritten=0xd90f7dc*=0x10c, lpOverlapped=0x0) returned 1 [0204.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e09f8) returned 1 [0204.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b70) returned 1 [0204.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0204.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b40) returned 1 [0204.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0204.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062148) returned 1 [0204.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621e8) returned 1 [0204.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062210) returned 1 [0204.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83482c8 [0204.438] wcscpy (in: _Dest=0x83482c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" [0204.438] wcscat (in: _Dest=0x83482c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json.f0dbec" [0204.438] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json.f0dbec", NtPathName=0xd90f760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d660 [0207.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d660) returned 1 [0207.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fddc8) returned 1 [0207.415] NtQueryInformationFile (in: FileHandle=0x2c8c, IoStatusBlock=0xd90f738, FileInformation=0xd90f740, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd90f738, FileInformation=0xd90f740) returned 0x0 [0207.415] NtSetInformationFile (FileHandle=0x2c8c, IoStatusBlock=0xd90f738, FileInformation=0xd90f740, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83482c8) returned 1 [0208.575] FlushFileBuffers (hFile=0x2c8c) returned 1 [0208.620] CloseHandle (hObject=0x2c8c) returned 1 [0208.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d0580 [0208.895] wcscpy (in: _Dest=0x81d0580, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\" [0208.895] wcscat (in: _Dest=0x81d0580, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\F0DBEC-Readme.txt" [0208.895] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\f0dbec-readme.txt")) returned 0xffffffff [0208.895] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564 [0209.587] WriteFile (in: hFile=0x564, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd90f784, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd90f784*=0x70c, lpOverlapped=0x0) returned 1 [0209.654] CloseHandle (hObject=0x564) returned 1 [0209.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0580) returned 1 [0209.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ecef8) returned 1 Thread: id = 5530 os_tid = 0x11cc [0186.023] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json")) returned 0x2020 [0191.251] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0200.777] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1618 [0200.777] GetFileSizeEx (in: hFile=0x1618, lpFileSize=0xdd7fdf0 | out: lpFileSize=0xdd7fdf0*=257) returned 1 [0200.777] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.777] ReadFile (in: hFile=0x1618, lpBuffer=0xdd7fdfc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdd7fdd8, lpOverlapped=0x0 | out: lpBuffer=0xdd7fdfc*, lpNumberOfBytesRead=0xdd7fdd8*=0x4, lpOverlapped=0x0) returned 1 [0200.779] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434b0 [0200.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43320 [0200.779] NtQuerySystemTime (in: CurrentTime=0xdd7fd78 | out: CurrentTime=0xdd7fd78*=132471540686220000) returned 0x0 [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x40619e6b [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x6ceb4779 [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x614fc4bc [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x2d86cba2 [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x5e34eeae [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x60227e1f [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x53c73e21 [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x5a72a40b [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x63acad6c [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x2b1cf9aa [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x402bcad6 [0200.779] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x1950fee6 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x4b3296ca [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x10fc9932 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x7c237fb6 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x1b96d369 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x5aa19aa9 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x384e1394 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x337b9180 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x3f6f5dd1 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x6579cbae [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x52a4f53a [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x4870276a [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x1cdc3c98 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x3066c1a4 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x3487c2c5 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x1042048d [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x30d90280 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x6c23c8db [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x7246df31 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0x36716585 [0200.780] RtlRandomEx (in: Seed=0xdd7fd70 | out: Seed=0xdd7fd70) returned 0xa829f54 [0200.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b640a0 [0200.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b67ca8 [0200.790] ReadFile (in: hFile=0x1618, lpBuffer=0x14b640a0, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0xdd7fd6c, lpOverlapped=0x0 | out: lpBuffer=0x14b640a0*, lpNumberOfBytesRead=0xdd7fd6c*=0x101, lpOverlapped=0x0) returned 1 [0200.790] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.790] WriteFile (in: hFile=0x1618, lpBuffer=0x14b67ca8*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xdd7fd70, lpOverlapped=0x0 | out: lpBuffer=0x14b67ca8*, lpNumberOfBytesWritten=0xdd7fd70*=0x101, lpOverlapped=0x0) returned 1 [0203.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064920 [0203.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064948 [0203.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064948) returned 1 [0203.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b67ca8) returned 1 [0203.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b640a0) returned 1 [0203.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0203.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4920) returned 1 [0203.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f37070 [0203.701] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.701] WriteFile (in: hFile=0x1618, lpBuffer=0x8322028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdd7fde4, lpOverlapped=0x0 | out: lpBuffer=0x8322028*, lpNumberOfBytesWritten=0xdd7fde4*=0x10c, lpOverlapped=0x0) returned 1 [0207.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322028) returned 1 [0207.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f370a0) returned 1 [0207.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064948) returned 1 [0207.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37070) returned 1 [0207.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064920) returned 1 [0207.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434b0) returned 1 [0207.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432a8) returned 1 [0207.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43758) returned 1 [0207.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404b78 [0207.166] wcscpy (in: _Dest=0x8404b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" [0207.166] wcscat (in: _Dest=0x8404b78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json.f0dbec" [0207.166] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0xdd7fd68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8335748 [0208.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335748) returned 1 [0208.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14890d50) returned 1 [0208.173] NtQueryInformationFile (in: FileHandle=0x1618, IoStatusBlock=0xdd7fd40, FileInformation=0xdd7fd48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdd7fd40, FileInformation=0xdd7fd48) returned 0x0 [0208.173] NtSetInformationFile (FileHandle=0x1618, IoStatusBlock=0xdd7fd40, FileInformation=0xdd7fd48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404b78) returned 1 [0208.472] FlushFileBuffers (hFile=0x1618) returned 1 [0208.486] CloseHandle (hObject=0x1618) returned 1 [0208.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8186c70 [0208.848] wcscpy (in: _Dest=0x8186c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\" [0208.848] wcscat (in: _Dest=0x8186c70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\F0DBEC-Readme.txt" [0208.848] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0208.848] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc4 [0209.573] WriteFile (in: hFile=0x2cc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdd7fd8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdd7fd8c*=0x70c, lpOverlapped=0x0) returned 1 [0209.629] CloseHandle (hObject=0x2cc4) returned 1 [0209.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186c70) returned 1 [0209.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ed020) returned 1 Thread: id = 5531 os_tid = 0x11d4 [0186.023] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0191.252] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0200.803] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a6c [0200.803] GetFileSizeEx (in: hFile=0x1a6c, lpFileSize=0xd0afbd8 | out: lpFileSize=0xd0afbd8*=246) returned 1 [0200.803] SetFilePointerEx (in: hFile=0x1a6c, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.804] ReadFile (in: hFile=0x1a6c, lpBuffer=0xd0afbe4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd0afbc0, lpOverlapped=0x0 | out: lpBuffer=0xd0afbe4*, lpNumberOfBytesRead=0xd0afbc0*=0x4, lpOverlapped=0x0) returned 1 [0200.805] SetFilePointerEx (in: hFile=0x1a6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430f0 [0200.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42088 [0200.805] NtQuerySystemTime (in: CurrentTime=0xd0afb60 | out: CurrentTime=0xd0afb60*=132471540686532000) returned 0x0 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x1c6aa23a [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x6a0ac44b [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x7161a714 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x70c7e7b4 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x3ec1ee9e [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x951d5da [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x2f229ccd [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x3377e68d [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x138dc699 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x1802e73d [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x23100a32 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x18926c3b [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x261347b2 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x53e8078f [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x7eaef1a3 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x4badc580 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x1a140351 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x587f4a9e [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x7c8372ba [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x64c6834d [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x3d932188 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x615a365f [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x5afee35b [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x3ddb3fbb [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x76f555ab [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x3d0829fa [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x53c1c1f8 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x278315c [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x7af80347 [0200.806] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x40193f8d [0200.807] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x5b144f4e [0200.807] RtlRandomEx (in: Seed=0xd0afb58 | out: Seed=0xd0afb58) returned 0x6d720492 [0200.817] ReadFile (in: hFile=0x1a6c, lpBuffer=0x14b730c0, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0xd0afb54, lpOverlapped=0x0 | out: lpBuffer=0x14b730c0*, lpNumberOfBytesRead=0xd0afb54*=0xf6, lpOverlapped=0x0) returned 1 [0200.817] SetFilePointerEx (in: hFile=0x1a6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.817] WriteFile (in: hFile=0x1a6c, lpBuffer=0x14b76cc8*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0xd0afb58, lpOverlapped=0x0 | out: lpBuffer=0x14b76cc8*, lpNumberOfBytesWritten=0xd0afb58*=0xf6, lpOverlapped=0x0) returned 1 [0203.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064970 [0203.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064998 [0203.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064998) returned 1 [0203.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b76cc8) returned 1 [0203.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b730c0) returned 1 [0203.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0203.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5cd0) returned 1 [0203.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f370d0 [0203.703] SetFilePointerEx (in: hFile=0x1a6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.703] WriteFile (in: hFile=0x1a6c, lpBuffer=0x8322140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd0afbcc, lpOverlapped=0x0 | out: lpBuffer=0x8322140*, lpNumberOfBytesWritten=0xd0afbcc*=0x10c, lpOverlapped=0x0) returned 1 [0207.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322140) returned 1 [0207.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37100) returned 1 [0207.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064998) returned 1 [0207.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f370d0) returned 1 [0207.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064970) returned 1 [0207.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0207.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ce0) returned 1 [0207.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0207.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8404cb0 [0207.169] wcscpy (in: _Dest=0x8404cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" [0207.169] wcscat (in: _Dest=0x8404cb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json.f0dbec" [0207.169] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0xd0afb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x8335600 [0208.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335600) returned 1 [0208.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148983e8) returned 1 [0208.176] NtQueryInformationFile (in: FileHandle=0x1a6c, IoStatusBlock=0xd0afb28, FileInformation=0xd0afb30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd0afb28, FileInformation=0xd0afb30) returned 0x0 [0208.176] NtSetInformationFile (FileHandle=0x1a6c, IoStatusBlock=0xd0afb28, FileInformation=0xd0afb30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404cb0) returned 1 [0208.478] FlushFileBuffers (hFile=0x1a6c) returned 1 [0208.492] CloseHandle (hObject=0x1a6c) returned 1 [0208.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3dd8b80 [0208.856] wcscpy (in: _Dest=0x3dd8b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\" [0208.856] wcscat (in: _Dest=0x3dd8b80, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0208.856] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0208.856] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a04 [0209.553] WriteFile (in: hFile=0x1a04, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd0afb74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd0afb74*=0x70c, lpOverlapped=0x0) returned 1 [0209.623] CloseHandle (hObject=0x1a04) returned 1 [0209.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0209.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ed148) returned 1 Thread: id = 5532 os_tid = 0x1248 [0186.023] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0191.254] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0200.832] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d3c [0200.832] GetFileSizeEx (in: hFile=0x1d3c, lpFileSize=0x7c8fc60 | out: lpFileSize=0x7c8fc60*=264) returned 1 [0200.832] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.832] ReadFile (in: hFile=0x1d3c, lpBuffer=0x7c8fc6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7c8fc48, lpOverlapped=0x0 | out: lpBuffer=0x7c8fc6c*, lpNumberOfBytesRead=0x7c8fc48*=0x4, lpOverlapped=0x0) returned 1 [0200.834] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ec0 [0200.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0200.834] NtQuerySystemTime (in: CurrentTime=0x7c8fbe8 | out: CurrentTime=0x7c8fbe8*=132471540686844000) returned 0x0 [0200.834] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x387eb52e [0200.834] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x6d395078 [0200.834] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x1ed95ac9 [0200.834] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x40cfe87b [0200.834] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x5774f932 [0200.834] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x55fad760 [0200.834] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x553bd0f1 [0200.834] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x25e8ea15 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x556f112 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x10bdd2bd [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0xcc96abf [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0xf65225e [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x7e382d80 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x5fb8ad9f [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x74fb334d [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x5d6fad79 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x6f61f21d [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x2f1d0032 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x52a72e77 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x5d4ac9c6 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x44686e9 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x25c00a10 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x77044e41 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x52ff3c05 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x7f977a6a [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x7ecffdb7 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x6187da73 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x7174280 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x4a93e135 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x11f1b50c [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x1ff47312 [0200.835] RtlRandomEx (in: Seed=0x7c8fbe0 | out: Seed=0x7c8fbe0) returned 0x3980443f [0200.849] ReadFile (in: hFile=0x1d3c, lpBuffer=0x14b820e0, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x7c8fbdc, lpOverlapped=0x0 | out: lpBuffer=0x14b820e0*, lpNumberOfBytesRead=0x7c8fbdc*=0x108, lpOverlapped=0x0) returned 1 [0200.849] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.849] WriteFile (in: hFile=0x1d3c, lpBuffer=0x14b86060*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x7c8fbe0, lpOverlapped=0x0 | out: lpBuffer=0x14b86060*, lpNumberOfBytesWritten=0x7c8fbe0*=0x108, lpOverlapped=0x0) returned 1 [0203.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a10 [0203.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a38 [0203.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a38) returned 1 [0203.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b86060) returned 1 [0203.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b820e0) returned 1 [0203.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84029a8) returned 1 [0203.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4d10) returned 1 [0203.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f37190 [0203.713] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.713] WriteFile (in: hFile=0x1d3c, lpBuffer=0x8322370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7c8fc54, lpOverlapped=0x0 | out: lpBuffer=0x8322370*, lpNumberOfBytesWritten=0x7c8fc54*=0x10c, lpOverlapped=0x0) returned 1 [0204.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322370) returned 1 [0204.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f371c0) returned 1 [0204.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a38) returned 1 [0204.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37190) returned 1 [0204.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a10) returned 1 [0204.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ec0) returned 1 [0204.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43500) returned 1 [0204.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42100) returned 1 [0204.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8347560 [0204.225] wcscpy (in: _Dest=0x8347560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" [0204.226] wcscat (in: _Dest=0x8347560, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json.f0dbec" [0204.226] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0x7c8fbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x83eabc0 [0204.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eabc0) returned 1 [0204.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8340020) returned 1 [0204.576] NtQueryInformationFile (in: FileHandle=0x1d3c, IoStatusBlock=0x7c8fbb0, FileInformation=0x7c8fbb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7c8fbb0, FileInformation=0x7c8fbb8) returned 0x0 [0204.576] NtSetInformationFile (FileHandle=0x1d3c, IoStatusBlock=0x7c8fbb0, FileInformation=0x7c8fbb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347560) returned 1 [0207.741] FlushFileBuffers (hFile=0x1d3c) returned 1 [0207.755] CloseHandle (hObject=0x1d3c) returned 1 [0208.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8998 [0208.068] wcscpy (in: _Dest=0x3ef8998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\" [0208.068] wcscat (in: _Dest=0x3ef8998, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0208.068] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0208.068] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d08 [0208.447] WriteFile (in: hFile=0x1d08, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7c8fbfc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7c8fbfc*=0x70c, lpOverlapped=0x0) returned 1 [0209.406] CloseHandle (hObject=0x1d08) returned 1 [0209.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8998) returned 1 [0209.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ed270) returned 1 Thread: id = 5533 os_tid = 0x11dc [0186.024] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json")) returned 0x2020 [0191.227] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0201.680] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19fc [0201.681] GetFileSizeEx (in: hFile=0x19fc, lpFileSize=0x1026f7d8 | out: lpFileSize=0x1026f7d8*=281) returned 1 [0201.681] SetFilePointerEx (in: hFile=0x19fc, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.681] ReadFile (in: hFile=0x19fc, lpBuffer=0x1026f7e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1026f7c0, lpOverlapped=0x0 | out: lpBuffer=0x1026f7e4*, lpNumberOfBytesRead=0x1026f7c0*=0x4, lpOverlapped=0x0) returned 1 [0201.683] SetFilePointerEx (in: hFile=0x19fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d50 [0201.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0201.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063160 [0201.684] NtQuerySystemTime (in: CurrentTime=0x1026f760 | out: CurrentTime=0x1026f760*=132471540695268000) returned 0x0 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x3bb58a0 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x485446ae [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x5d7bf569 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x19b2f0ac [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x10fbaaa2 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x2e6cae72 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x5149d275 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x3cea6325 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x55df30e0 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x74d031e0 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x6a13077d [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x96e2722 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x1b02b7fa [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x6fb04ee8 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x16031a84 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x58b388 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x6ca384cc [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x7e7d0d82 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x612086df [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x66bc9a1b [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x1e1f6684 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x25a9380f [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x5d91e329 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x1431f7bd [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x4edc97d6 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x43b114b7 [0201.684] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x5a1a0eb0 [0201.685] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x360d934f [0201.685] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x6b30f2c [0201.685] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x79b35140 [0201.685] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x267b565c [0201.685] RtlRandomEx (in: Seed=0x1026f758 | out: Seed=0x1026f758) returned 0x7daf06e [0201.695] ReadFile (in: hFile=0x19fc, lpBuffer=0x14a27ca8, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0x1026f754, lpOverlapped=0x0 | out: lpBuffer=0x14a27ca8*, lpNumberOfBytesRead=0x1026f754*=0x119, lpOverlapped=0x0) returned 1 [0201.696] SetFilePointerEx (in: hFile=0x19fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.696] WriteFile (in: hFile=0x19fc, lpBuffer=0x14a2b8b0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x1026f758, lpOverlapped=0x0 | out: lpBuffer=0x14a2b8b0*, lpNumberOfBytesWritten=0x1026f758*=0x119, lpOverlapped=0x0) returned 1 [0203.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0203.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0203.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0203.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a2b8b0) returned 1 [0203.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a27ca8) returned 1 [0203.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054a38) returned 1 [0203.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1b0) returned 1 [0203.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0203.976] SetFilePointerEx (in: hFile=0x19fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.976] WriteFile (in: hFile=0x19fc, lpBuffer=0x81e07c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1026f7cc, lpOverlapped=0x0 | out: lpBuffer=0x81e07c8*, lpNumberOfBytesWritten=0x1026f7cc*=0x10c, lpOverlapped=0x0) returned 1 [0204.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e07c8) returned 1 [0204.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0204.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0204.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0204.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0204.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0204.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631d8) returned 1 [0204.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063200) returned 1 [0204.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8348538 [0204.445] wcscpy (in: _Dest=0x8348538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" [0204.445] wcscat (in: _Dest=0x8348538, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json.f0dbec" [0204.445] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0x1026f750, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c700 [0207.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c700) returned 1 [0207.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fb920) returned 1 [0207.419] NtQueryInformationFile (in: FileHandle=0x19fc, IoStatusBlock=0x1026f728, FileInformation=0x1026f730, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1026f728, FileInformation=0x1026f730) returned 0x0 [0207.419] NtSetInformationFile (FileHandle=0x19fc, IoStatusBlock=0x1026f728, FileInformation=0x1026f730, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348538) returned 1 [0207.950] FlushFileBuffers (hFile=0x19fc) returned 1 [0207.955] CloseHandle (hObject=0x19fc) returned 1 [0208.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8187360 [0208.181] wcscpy (in: _Dest=0x8187360, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\" [0208.181] wcscat (in: _Dest=0x8187360, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\F0DBEC-Readme.txt" [0208.182] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0208.182] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0208.869] WriteFile (in: hFile=0x1518, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1026f774, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1026f774*=0x70c, lpOverlapped=0x0) returned 1 [0209.436] CloseHandle (hObject=0x1518) returned 1 [0209.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187360) returned 1 [0209.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ed398) returned 1 Thread: id = 5534 os_tid = 0x11e0 [0186.024] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json")) returned 0x2020 [0191.228] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0201.725] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19cc [0201.726] GetFileSizeEx (in: hFile=0x19cc, lpFileSize=0x10d5fb20 | out: lpFileSize=0x10d5fb20*=338) returned 1 [0201.726] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x14e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.726] ReadFile (in: hFile=0x19cc, lpBuffer=0x10d5fb2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10d5fb08, lpOverlapped=0x0 | out: lpBuffer=0x10d5fb2c*, lpNumberOfBytesRead=0x10d5fb08*=0x4, lpOverlapped=0x0) returned 1 [0201.729] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d50 [0201.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063228 [0201.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80632a0 [0201.729] NtQuerySystemTime (in: CurrentTime=0x10d5faa8 | out: CurrentTime=0x10d5faa8*=132471540695736000) returned 0x0 [0201.729] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x7de445e6 [0201.729] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x768eeab [0201.729] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x1fbdc358 [0201.729] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x5333d421 [0201.729] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x18a57f6a [0201.729] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x2f8dbfad [0201.729] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x2a107bed [0201.729] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x16b9f41d [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x1c2f44cd [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x7a9f37bc [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x67af7b3 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0xb84e519 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x73acd640 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x2f79b044 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x7a741f4 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x246284af [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x45fc3c2c [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x4358f8e9 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x77b66b37 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x564f4ef0 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x577f24a3 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x41415d2f [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x19cf102c [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x6e6c72d7 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x3d193007 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x74a5c40d [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x55c7b090 [0201.730] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x5e610e82 [0201.731] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x5c23b68b [0201.731] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x468ec175 [0201.731] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x6249c415 [0201.731] RtlRandomEx (in: Seed=0x10d5faa0 | out: Seed=0x10d5faa0) returned 0x60c9d714 [0201.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d50) returned 1 [0201.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a420e0 [0201.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a11478 [0201.747] ReadFile (in: hFile=0x19cc, lpBuffer=0x14a420e0, nNumberOfBytesToRead=0x152, lpNumberOfBytesRead=0x10d5fa9c, lpOverlapped=0x0 | out: lpBuffer=0x14a420e0*, lpNumberOfBytesRead=0x10d5fa9c*=0x152, lpOverlapped=0x0) returned 1 [0201.747] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.747] WriteFile (in: hFile=0x19cc, lpBuffer=0x14a11478*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x10d5faa0, lpOverlapped=0x0 | out: lpBuffer=0x14a11478*, lpNumberOfBytesWritten=0x10d5faa0*=0x152, lpOverlapped=0x0) returned 1 [0203.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0203.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0203.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0203.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a11478) returned 1 [0203.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a420e0) returned 1 [0203.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403380) returned 1 [0203.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4da0) returned 1 [0203.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0203.984] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.984] WriteFile (in: hFile=0x19cc, lpBuffer=0x81dfdf0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10d5fb14, lpOverlapped=0x0 | out: lpBuffer=0x81dfdf0*, lpNumberOfBytesWritten=0x10d5fb14*=0x10c, lpOverlapped=0x0) returned 1 [0204.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfdf0) returned 1 [0204.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0204.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0204.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0204.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0204.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063228) returned 1 [0204.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632c8) returned 1 [0204.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632f0) returned 1 [0204.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ee930 [0204.455] wcscpy (in: _Dest=0x83ee930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" [0204.455] wcscat (in: _Dest=0x83ee930, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json.f0dbec" [0204.455] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json.f0dbec", NtPathName=0x10d5fa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83eb0e0 [0207.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eb0e0) returned 1 [0207.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fe890) returned 1 [0207.423] NtQueryInformationFile (in: FileHandle=0x19cc, IoStatusBlock=0x10d5fa70, FileInformation=0x10d5fa78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10d5fa70, FileInformation=0x10d5fa78) returned 0x0 [0207.424] NtSetInformationFile (FileHandle=0x19cc, IoStatusBlock=0x10d5fa70, FileInformation=0x10d5fa78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee930) returned 1 [0208.804] FlushFileBuffers (hFile=0x19cc) returned 1 [0208.807] CloseHandle (hObject=0x19cc) returned 1 [0208.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e9458 [0208.906] wcscpy (in: _Dest=0x81e9458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\" [0208.906] wcscat (in: _Dest=0x81e9458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\F0DBEC-Readme.txt" [0208.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\f0dbec-readme.txt")) returned 0xffffffff [0208.906] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a24 [0209.584] WriteFile (in: hFile=0x1a24, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x10d5fabc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x10d5fabc*=0x70c, lpOverlapped=0x0) returned 1 [0209.627] CloseHandle (hObject=0x1a24) returned 1 [0209.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9458) returned 1 [0209.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ed4c0) returned 1 Thread: id = 5535 os_tid = 0x11e4 [0186.025] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json")) returned 0x2020 [0191.231] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0200.595] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c80 [0200.595] GetFileSizeEx (in: hFile=0x1c80, lpFileSize=0x10daf7a0 | out: lpFileSize=0x10daf7a0*=274) returned 1 [0200.596] SetFilePointerEx (in: hFile=0x1c80, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.596] ReadFile (in: hFile=0x1c80, lpBuffer=0x10daf7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10daf788, lpOverlapped=0x0 | out: lpBuffer=0x10daf7ac*, lpNumberOfBytesRead=0x10daf788*=0x4, lpOverlapped=0x0) returned 1 [0200.597] SetFilePointerEx (in: hFile=0x1c80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42128 [0200.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42808 [0200.598] NtQuerySystemTime (in: CurrentTime=0x10daf728 | out: CurrentTime=0x10daf728*=132471540684348000) returned 0x0 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0xe276b30 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x228e828a [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x4c85ae59 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x4f40adb4 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x7ccd69b8 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x4da1861 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x23ddf74 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x1fc404c [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x6242a3c4 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x292d8c01 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x8cc2c5c [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x7db5c4bd [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x4386a6e4 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0xc0a4bf8 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x53609558 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x2c75b1e7 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x77fe51f7 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x3a5b0e18 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x723511b6 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x22682882 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x7202b401 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x619b73a1 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x1dcdd6f [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x5778b3cb [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x1772d910 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x3a93cee5 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x6d77069 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x1598d59d [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x482dea3d [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x3b45645 [0200.598] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x2746a852 [0200.599] RtlRandomEx (in: Seed=0x10daf720 | out: Seed=0x10daf720) returned 0x5fb97d7f [0200.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b09c68 [0200.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b0d870 [0200.608] ReadFile (in: hFile=0x1c80, lpBuffer=0x14b09c68, nNumberOfBytesToRead=0x112, lpNumberOfBytesRead=0x10daf71c, lpOverlapped=0x0 | out: lpBuffer=0x14b09c68*, lpNumberOfBytesRead=0x10daf71c*=0x112, lpOverlapped=0x0) returned 1 [0200.608] SetFilePointerEx (in: hFile=0x1c80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.608] WriteFile (in: hFile=0x1c80, lpBuffer=0x14b0d870*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x10daf720, lpOverlapped=0x0 | out: lpBuffer=0x14b0d870*, lpNumberOfBytesWritten=0x10daf720*=0x112, lpOverlapped=0x0) returned 1 [0203.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80645b0 [0203.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80645d8 [0203.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80645d8) returned 1 [0203.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b0d870) returned 1 [0203.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b09c68) returned 1 [0203.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df89e8) returned 1 [0203.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b6078) returned 1 [0203.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36c50 [0203.664] SetFilePointerEx (in: hFile=0x1c80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.665] WriteFile (in: hFile=0x1c80, lpBuffer=0x8321420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10daf794, lpOverlapped=0x0 | out: lpBuffer=0x8321420*, lpNumberOfBytesWritten=0x10daf794*=0x10c, lpOverlapped=0x0) returned 1 [0204.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321420) returned 1 [0204.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36c80) returned 1 [0204.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80645d8) returned 1 [0204.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36c50) returned 1 [0204.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80645b0) returned 1 [0204.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42128) returned 1 [0204.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42678) returned 1 [0204.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42358) returned 1 [0204.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3e5cb18 [0204.158] wcscpy (in: _Dest=0x3e5cb18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" [0204.158] wcscat (in: _Dest=0x3e5cb18, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json.f0dbec" [0204.158] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0x10daf718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f4980 [0204.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4980) returned 1 [0204.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833b6d0) returned 1 [0204.558] NtQueryInformationFile (in: FileHandle=0x1c80, IoStatusBlock=0x10daf6f0, FileInformation=0x10daf6f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10daf6f0, FileInformation=0x10daf6f8) returned 0x0 [0204.558] NtSetInformationFile (FileHandle=0x1c80, IoStatusBlock=0x10daf6f0, FileInformation=0x10daf6f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cb18) returned 1 [0207.680] FlushFileBuffers (hFile=0x1c80) returned 1 [0207.694] CloseHandle (hObject=0x1c80) returned 1 [0208.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e2fb8 [0208.043] wcscpy (in: _Dest=0x81e2fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\" [0208.043] wcscat (in: _Dest=0x81e2fb8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\F0DBEC-Readme.txt" [0208.043] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0208.043] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc8 [0208.433] WriteFile (in: hFile=0x1dc8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x10daf73c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x10daf73c*=0x70c, lpOverlapped=0x0) returned 1 [0209.371] CloseHandle (hObject=0x1dc8) returned 1 [0209.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2fb8) returned 1 [0209.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ed5e8) returned 1 Thread: id = 5536 os_tid = 0x11f0 [0186.025] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json")) returned 0x2020 [0191.232] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0200.503] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc4c [0200.504] GetFileSizeEx (in: hFile=0xc4c, lpFileSize=0x10e5f980 | out: lpFileSize=0x10e5f980*=279) returned 1 [0200.504] SetFilePointerEx (in: hFile=0xc4c, liDistanceToMove=0x113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.504] ReadFile (in: hFile=0xc4c, lpBuffer=0x10e5f98c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10e5f968, lpOverlapped=0x0 | out: lpBuffer=0x10e5f98c*, lpNumberOfBytesRead=0x10e5f968*=0x4, lpOverlapped=0x0) returned 1 [0200.507] SetFilePointerEx (in: hFile=0xc4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43618 [0200.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d426a0 [0200.507] NtQuerySystemTime (in: CurrentTime=0x10e5f908 | out: CurrentTime=0x10e5f908*=132471540683724000) returned 0x0 [0200.507] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x476bce0c [0200.507] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x1b89052c [0200.507] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x105da2a8 [0200.507] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x7449492f [0200.507] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x57a6499b [0200.507] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x59835b71 [0200.507] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x6cd5b731 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x2b15b004 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x478481d5 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x7d7886ed [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x64b4304f [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x1e71d2f9 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x41a6f6e3 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x626fe10a [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x6fe7004f [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x17507bee [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x3a975d3d [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x3e7bdf13 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x4b8f5531 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x26b2e651 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x7664b7d9 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0xb0f6a8f [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x2acea328 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x4b083648 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x33eb9096 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x5462cfee [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x1ba87a08 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x4a9ae3d5 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x35d72ac9 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x14ad269b [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x1109241 [0200.508] RtlRandomEx (in: Seed=0x10e5f900 | out: Seed=0x10e5f900) returned 0x2b24e05c [0200.521] ReadFile (in: hFile=0xc4c, lpBuffer=0x14af30c0, nNumberOfBytesToRead=0x117, lpNumberOfBytesRead=0x10e5f8fc, lpOverlapped=0x0 | out: lpBuffer=0x14af30c0*, lpNumberOfBytesRead=0x10e5f8fc*=0x117, lpOverlapped=0x0) returned 1 [0200.521] SetFilePointerEx (in: hFile=0xc4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.521] WriteFile (in: hFile=0xc4c, lpBuffer=0x14af6cc8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x10e5f900, lpOverlapped=0x0 | out: lpBuffer=0x14af6cc8*, lpNumberOfBytesWritten=0x10e5f900*=0x117, lpOverlapped=0x0) returned 1 [0203.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064510 [0203.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064538 [0203.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064538) returned 1 [0203.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14af6cc8) returned 1 [0203.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14af30c0) returned 1 [0203.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bf28) returned 1 [0203.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5bf8) returned 1 [0203.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36b90 [0203.657] SetFilePointerEx (in: hFile=0xc4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.657] WriteFile (in: hFile=0xc4c, lpBuffer=0x83211f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10e5f974, lpOverlapped=0x0 | out: lpBuffer=0x83211f0*, lpNumberOfBytesWritten=0x10e5f974*=0x10c, lpOverlapped=0x0) returned 1 [0204.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83211f0) returned 1 [0204.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36bc0) returned 1 [0204.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064538) returned 1 [0204.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36b90) returned 1 [0204.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064510) returned 1 [0204.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43618) returned 1 [0204.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0204.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0204.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3e5c8a8 [0204.151] wcscpy (in: _Dest=0x3e5c8a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" [0204.151] wcscat (in: _Dest=0x3e5c8a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json.f0dbec" [0204.151] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0x10e5f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f46f0 [0204.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f46f0) returned 1 [0204.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8345438) returned 1 [0204.539] NtQueryInformationFile (in: FileHandle=0xc4c, IoStatusBlock=0x10e5f8d0, FileInformation=0x10e5f8d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10e5f8d0, FileInformation=0x10e5f8d8) returned 0x0 [0204.539] NtSetInformationFile (FileHandle=0xc4c, IoStatusBlock=0x10e5f8d0, FileInformation=0x10e5f8d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c8a8) returned 1 [0207.668] FlushFileBuffers (hFile=0xc4c) returned 1 [0207.682] CloseHandle (hObject=0xc4c) returned 1 [0208.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e2428 [0208.038] wcscpy (in: _Dest=0x81e2428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\" [0208.038] wcscat (in: _Dest=0x81e2428, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\F0DBEC-Readme.txt" [0208.038] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0208.038] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1afc [0208.427] WriteFile (in: hFile=0x1afc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x10e5f91c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x10e5f91c*=0x70c, lpOverlapped=0x0) returned 1 [0209.358] CloseHandle (hObject=0x1afc) returned 1 [0209.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2428) returned 1 [0209.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ed710) returned 1 Thread: id = 5537 os_tid = 0x1258 [0186.025] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json")) returned 0x2020 [0191.233] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0200.349] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xccc [0200.350] GetFileSizeEx (in: hFile=0xccc, lpFileSize=0xa37fbc0 | out: lpFileSize=0xa37fbc0*=356) returned 1 [0200.350] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.350] ReadFile (in: hFile=0xccc, lpBuffer=0xa37fbcc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa37fba8, lpOverlapped=0x0 | out: lpBuffer=0xa37fbcc*, lpNumberOfBytesRead=0xa37fba8*=0x4, lpOverlapped=0x0) returned 1 [0200.397] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43118 [0200.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42858 [0200.398] NtQuerySystemTime (in: CurrentTime=0xa37fb48 | out: CurrentTime=0xa37fb48*=132471540682632000) returned 0x0 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x3b408f9b [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x2184b5b1 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x128fb7b3 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x13a7662 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x39809c69 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x21359570 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x5101ea30 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x5927234a [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x4a9862e7 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x60c8c131 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x31e26a44 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x740d28f6 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x426cf44 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x11fad20b [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x6a05ecde [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x1b245201 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x65feaa40 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x53b4f42a [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x42b54bab [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x44db1435 [0200.398] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x4c4cff67 [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x18282aaa [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x20e36ad7 [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x11734319 [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x7e1486f4 [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x5baa3252 [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x6d9358ce [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x6a64f878 [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x37ea8d7b [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x3c9b79ac [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x7df6fcb4 [0200.399] RtlRandomEx (in: Seed=0xa37fb40 | out: Seed=0xa37fb40) returned 0x37bb97f6 [0200.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14adc890 [0200.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ae0498 [0200.418] ReadFile (in: hFile=0xccc, lpBuffer=0x14adc890, nNumberOfBytesToRead=0x164, lpNumberOfBytesRead=0xa37fb3c, lpOverlapped=0x0 | out: lpBuffer=0x14adc890*, lpNumberOfBytesRead=0xa37fb3c*=0x164, lpOverlapped=0x0) returned 1 [0200.418] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.439] WriteFile (in: hFile=0xccc, lpBuffer=0x14ae0498*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0xa37fb40, lpOverlapped=0x0 | out: lpBuffer=0x14ae0498*, lpNumberOfBytesWritten=0xa37fb40*=0x164, lpOverlapped=0x0) returned 1 [0203.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064470 [0203.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064498 [0203.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064498) returned 1 [0203.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae0498) returned 1 [0203.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14adc890) returned 1 [0203.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b910) returned 1 [0203.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4578) returned 1 [0203.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36ad0 [0203.648] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.649] WriteFile (in: hFile=0xccc, lpBuffer=0x8320fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa37fbb4, lpOverlapped=0x0 | out: lpBuffer=0x8320fc0*, lpNumberOfBytesWritten=0xa37fbb4*=0x10c, lpOverlapped=0x0) returned 1 [0204.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320fc0) returned 1 [0204.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36b00) returned 1 [0204.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064498) returned 1 [0204.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36ad0) returned 1 [0204.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064470) returned 1 [0204.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43118) returned 1 [0204.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43410) returned 1 [0204.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42600) returned 1 [0204.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3e5c770 [0204.148] wcscpy (in: _Dest=0x3e5c770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" [0204.148] wcscat (in: _Dest=0x3e5c770, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json.f0dbec" [0204.148] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0xa37fb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f45a8 [0204.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f45a8) returned 1 [0204.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833c198) returned 1 [0204.531] NtQueryInformationFile (in: FileHandle=0xccc, IoStatusBlock=0xa37fb10, FileInformation=0xa37fb18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa37fb10, FileInformation=0xa37fb18) returned 0x0 [0204.531] NtSetInformationFile (FileHandle=0xccc, IoStatusBlock=0xa37fb10, FileInformation=0xa37fb18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c770) returned 1 [0207.633] FlushFileBuffers (hFile=0xccc) returned 1 [0207.670] CloseHandle (hObject=0xccc) returned 1 [0208.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e27a0 [0208.033] wcscpy (in: _Dest=0x81e27a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\" [0208.033] wcscat (in: _Dest=0x81e27a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\F0DBEC-Readme.txt" [0208.033] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0208.034] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc4c [0208.426] WriteFile (in: hFile=0xc4c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa37fb5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa37fb5c*=0x70c, lpOverlapped=0x0) returned 1 [0209.354] CloseHandle (hObject=0xc4c) returned 1 [0209.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e27a0) returned 1 [0209.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ed838) returned 1 Thread: id = 5538 os_tid = 0x11f4 [0186.026] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0191.236] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0201.254] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe78 [0201.255] GetFileSizeEx (in: hFile=0xe78, lpFileSize=0x10f8f7d0 | out: lpFileSize=0x10f8f7d0*=267) returned 1 [0201.255] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.255] ReadFile (in: hFile=0xe78, lpBuffer=0x10f8f7dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10f8f7b8, lpOverlapped=0x0 | out: lpBuffer=0x10f8f7dc*, lpNumberOfBytesRead=0x10f8f7b8*=0x4, lpOverlapped=0x0) returned 1 [0201.257] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8061fe0 [0201.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062058 [0201.257] NtQuerySystemTime (in: CurrentTime=0x10f8f758 | out: CurrentTime=0x10f8f758*=132471540691056000) returned 0x0 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x177a0eeb [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x16167932 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x66d7f9a5 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x79de2a00 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x6387ac90 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x15181888 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x22c45af6 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x25f929ad [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x6022759a [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x2b5bda46 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x367ae5a3 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x78b23cc0 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x2c1ada88 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x6f2da30 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x34680acc [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x6d2d3556 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x3a457e0e [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x3bf9048c [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x23da87d6 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x772a0806 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x12be309d [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x6f32d9d9 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x4c5836c9 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x4b5c28cd [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x116c7c5b [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x45c37193 [0201.258] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x3e9519ae [0201.259] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x70401679 [0201.259] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x2e79e055 [0201.259] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x4b4ea8f8 [0201.259] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x3fc33161 [0201.259] RtlRandomEx (in: Seed=0x10f8f750 | out: Seed=0x10f8f750) returned 0x7ef4173e [0201.267] ReadFile (in: hFile=0xe78, lpBuffer=0x14bfa8d0, nNumberOfBytesToRead=0x10b, lpNumberOfBytesRead=0x10f8f74c, lpOverlapped=0x0 | out: lpBuffer=0x14bfa8d0*, lpNumberOfBytesRead=0x10f8f74c*=0x10b, lpOverlapped=0x0) returned 1 [0201.268] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.268] WriteFile (in: hFile=0xe78, lpBuffer=0x14bfe4d8*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x10f8f750, lpOverlapped=0x0 | out: lpBuffer=0x14bfe4d8*, lpNumberOfBytesWritten=0x10f8f750*=0x10b, lpOverlapped=0x0) returned 1 [0203.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0203.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0203.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0203.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bfe4d8) returned 1 [0203.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bfa8d0) returned 1 [0203.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403128) returned 1 [0203.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5610) returned 1 [0203.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69960 [0203.953] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.953] WriteFile (in: hFile=0xe78, lpBuffer=0x81e1088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10f8f7c4, lpOverlapped=0x0 | out: lpBuffer=0x81e1088*, lpNumberOfBytesWritten=0x10f8f7c4*=0x10c, lpOverlapped=0x0) returned 1 [0204.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1088) returned 1 [0204.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69990) returned 1 [0204.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0204.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69960) returned 1 [0204.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0204.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061fe0) returned 1 [0204.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062080) returned 1 [0204.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620a8) returned 1 [0204.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8348058 [0204.432] wcscpy (in: _Dest=0x8348058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" [0204.432] wcscat (in: _Dest=0x8348058, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json.f0dbec" [0204.432] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json.f0dbec", NtPathName=0x10f8f748, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3d7a8 [0207.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d7a8) returned 1 [0207.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81faa08) returned 1 [0207.403] NtQueryInformationFile (in: FileHandle=0xe78, IoStatusBlock=0x10f8f720, FileInformation=0x10f8f728, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10f8f720, FileInformation=0x10f8f728) returned 0x0 [0207.403] NtSetInformationFile (FileHandle=0xe78, IoStatusBlock=0x10f8f720, FileInformation=0x10f8f728, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348058) returned 1 [0208.534] FlushFileBuffers (hFile=0xe78) returned 1 [0208.537] CloseHandle (hObject=0xe78) returned 1 [0208.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x83eef48 [0208.889] wcscpy (in: _Dest=0x83eef48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\" [0208.889] wcscat (in: _Dest=0x83eef48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" [0208.889] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\f0dbec-readme.txt")) returned 0xffffffff [0208.889] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11cc [0209.562] WriteFile (in: hFile=0x11cc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x10f8f76c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x10f8f76c*=0x70c, lpOverlapped=0x0) returned 1 [0209.616] CloseHandle (hObject=0x11cc) returned 1 [0209.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eef48) returned 1 [0209.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ed960) returned 1 Thread: id = 5539 os_tid = 0x1210 [0186.026] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0191.240] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0201.138] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1aa0 [0201.138] GetFileSizeEx (in: hFile=0x1aa0, lpFileSize=0xe82f7c8 | out: lpFileSize=0xe82f7c8*=273) returned 1 [0201.138] SetFilePointerEx (in: hFile=0x1aa0, liDistanceToMove=0x10d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.138] ReadFile (in: hFile=0x1aa0, lpBuffer=0xe82f7d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe82f7b0, lpOverlapped=0x0 | out: lpBuffer=0xe82f7d4*, lpNumberOfBytesRead=0xe82f7b0*=0x4, lpOverlapped=0x0) returned 1 [0201.141] SetFilePointerEx (in: hFile=0x1aa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8fe0 [0201.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0201.141] NtQuerySystemTime (in: CurrentTime=0xe82f750 | out: CurrentTime=0xe82f750*=132471540689808000) returned 0x0 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x1d86a62a [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x3c3d45f2 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x4c50cc32 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x3775bee3 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x2d158044 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x4d3b3272 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x61c7b60a [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x79bba938 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x4e4e005d [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x6f10b880 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x5e89f696 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x73678030 [0201.141] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x6b270c5 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x3ab7d894 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x55f50711 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x4de016fd [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x395db6bc [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x4227eeb4 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x5c8645fa [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x685a90b2 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x5247cd32 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x547cfaf5 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x2d7abafb [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x6fb2fe60 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x3b3abb28 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x8ca3cfc [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x721f5e01 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x7ee6dca4 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x3bf28989 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x12d65d56 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x4ad2956 [0201.142] RtlRandomEx (in: Seed=0xe82f748 | out: Seed=0xe82f748) returned 0x574e2503 [0201.156] ReadFile (in: hFile=0x1aa0, lpBuffer=0x14be40a0, nNumberOfBytesToRead=0x111, lpNumberOfBytesRead=0xe82f744, lpOverlapped=0x0 | out: lpBuffer=0x14be40a0*, lpNumberOfBytesRead=0xe82f744*=0x111, lpOverlapped=0x0) returned 1 [0201.156] SetFilePointerEx (in: hFile=0x1aa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.156] WriteFile (in: hFile=0x1aa0, lpBuffer=0x14be7ca8*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0xe82f748, lpOverlapped=0x0 | out: lpBuffer=0x14be7ca8*, lpNumberOfBytesWritten=0xe82f748*=0x111, lpOverlapped=0x0) returned 1 [0203.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3408 [0203.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0203.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0203.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14be7ca8) returned 1 [0203.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14be40a0) returned 1 [0203.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402fc0) returned 1 [0203.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b6390) returned 1 [0203.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0203.895] SetFilePointerEx (in: hFile=0x1aa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.895] WriteFile (in: hFile=0x1aa0, lpBuffer=0x81e0b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe82f7bc, lpOverlapped=0x0 | out: lpBuffer=0x81e0b10*, lpNumberOfBytesWritten=0xe82f7bc*=0x10c, lpOverlapped=0x0) returned 1 [0207.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0b10) returned 1 [0207.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0207.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0207.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0207.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3408) returned 1 [0207.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fe0) returned 1 [0207.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1d0) returned 1 [0207.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312a90) returned 1 [0207.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8405400 [0207.245] wcscpy (in: _Dest=0x8405400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" [0207.245] wcscat (in: _Dest=0x8405400, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json.f0dbec" [0207.245] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0xe82f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3d3d0 [0208.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d3d0) returned 1 [0208.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fae58) returned 1 [0208.305] NtQueryInformationFile (in: FileHandle=0x1aa0, IoStatusBlock=0xe82f718, FileInformation=0xe82f720, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe82f718, FileInformation=0xe82f720) returned 0x0 [0208.305] NtSetInformationFile (FileHandle=0x1aa0, IoStatusBlock=0xe82f718, FileInformation=0xe82f720, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405400) returned 1 [0208.777] FlushFileBuffers (hFile=0x1aa0) returned 1 [0208.783] CloseHandle (hObject=0x1aa0) returned 1 [0208.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x83eecd8 [0208.899] wcscpy (in: _Dest=0x83eecd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\" [0208.899] wcscat (in: _Dest=0x83eecd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0208.899] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0208.899] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1744 [0209.714] WriteFile (in: hFile=0x1744, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe82f764, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe82f764*=0x70c, lpOverlapped=0x0) returned 1 [0209.716] CloseHandle (hObject=0x1744) returned 1 [0209.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eecd8) returned 1 [0209.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eda88) returned 1 Thread: id = 5540 os_tid = 0x1214 [0186.026] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json")) returned 0x2020 [0191.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0200.702] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2ab0 [0200.702] GetFileSizeEx (in: hFile=0x2ab0, lpFileSize=0x10d1fe60 | out: lpFileSize=0x10d1fe60*=253) returned 1 [0200.702] SetFilePointerEx (in: hFile=0x2ab0, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.702] ReadFile (in: hFile=0x2ab0, lpBuffer=0x10d1fe6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10d1fe48, lpOverlapped=0x0 | out: lpBuffer=0x10d1fe6c*, lpNumberOfBytesRead=0x10d1fe48*=0x4, lpOverlapped=0x0) returned 1 [0200.704] SetFilePointerEx (in: hFile=0x2ab0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430a0 [0200.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43c58 [0200.705] NtQuerySystemTime (in: CurrentTime=0x10d1fde8 | out: CurrentTime=0x10d1fde8*=132471540685440000) returned 0x0 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x12a76380 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x7eb8b7c0 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x75229894 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x774a37c3 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x78490a5d [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x70bdcfca [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x664ec7d0 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x5b4e71c5 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x101e3c55 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x57db9f6 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x6be0d209 [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x7883bd0f [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x7ddbce1d [0200.705] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x5d6b7e17 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0xf480237 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x7ee39080 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x7e8ed827 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x70ae8454 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x5121033c [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0xab8b24f [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x472f2b73 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x565b3d5 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x274ec67f [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x3c5d3afb [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x1ad751f4 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x2e882cd8 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x1cc813fd [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x4a30e1ee [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x18b1687e [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x3c0b9a04 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0xe9b7f86 [0200.706] RtlRandomEx (in: Seed=0x10d1fde0 | out: Seed=0x10d1fde0) returned 0x6e712218 [0200.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b3e4d8 [0200.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b420e0 [0200.718] ReadFile (in: hFile=0x2ab0, lpBuffer=0x14b3e4d8, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0x10d1fddc, lpOverlapped=0x0 | out: lpBuffer=0x14b3e4d8*, lpNumberOfBytesRead=0x10d1fddc*=0xfd, lpOverlapped=0x0) returned 1 [0200.718] SetFilePointerEx (in: hFile=0x2ab0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.718] WriteFile (in: hFile=0x2ab0, lpBuffer=0x14b420e0*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x10d1fde0, lpOverlapped=0x0 | out: lpBuffer=0x14b420e0*, lpNumberOfBytesWritten=0x10d1fde0*=0xfd, lpOverlapped=0x0) returned 1 [0203.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80647e0 [0203.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064808 [0203.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064808) returned 1 [0203.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b420e0) returned 1 [0203.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b3e4d8) returned 1 [0203.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0203.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b50b8) returned 1 [0203.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36ef0 [0203.685] SetFilePointerEx (in: hFile=0x2ab0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.685] WriteFile (in: hFile=0x2ab0, lpBuffer=0x8321bc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10d1fe54, lpOverlapped=0x0 | out: lpBuffer=0x8321bc8*, lpNumberOfBytesWritten=0x10d1fe54*=0x10c, lpOverlapped=0x0) returned 1 [0204.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321bc8) returned 1 [0204.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36f20) returned 1 [0204.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064808) returned 1 [0204.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36ef0) returned 1 [0204.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80647e0) returned 1 [0204.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430a0) returned 1 [0204.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43078) returned 1 [0204.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0204.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8346f48 [0204.183] wcscpy (in: _Dest=0x8346f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" [0204.183] wcscat (in: _Dest=0x8346f48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json.f0dbec" [0204.183] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json.f0dbec", NtPathName=0x10d1fdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f5130 [0204.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5130) returned 1 [0204.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8345210) returned 1 [0204.568] NtQueryInformationFile (in: FileHandle=0x2ab0, IoStatusBlock=0x10d1fdb0, FileInformation=0x10d1fdb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10d1fdb0, FileInformation=0x10d1fdb8) returned 0x0 [0204.568] NtSetInformationFile (FileHandle=0x2ab0, IoStatusBlock=0x10d1fdb0, FileInformation=0x10d1fdb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346f48) returned 1 [0207.715] FlushFileBuffers (hFile=0x2ab0) returned 1 [0207.734] CloseHandle (hObject=0x2ab0) returned 1 [0208.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d2a20 [0208.052] wcscpy (in: _Dest=0x81d2a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\" [0208.052] wcscat (in: _Dest=0x81d2a20, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\F0DBEC-Readme.txt" [0208.052] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\f0dbec-readme.txt")) returned 0xffffffff [0208.052] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cac [0208.439] WriteFile (in: hFile=0x1cac, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x10d1fdfc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x10d1fdfc*=0x70c, lpOverlapped=0x0) returned 1 [0209.383] CloseHandle (hObject=0x1cac) returned 1 [0209.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2a20) returned 1 [0209.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83edbb0) returned 1 Thread: id = 5541 os_tid = 0xc68 [0186.027] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0190.215] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0198.653] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a20 [0198.654] GetFileSizeEx (in: hFile=0x1a20, lpFileSize=0x10a8fcc8 | out: lpFileSize=0x10a8fcc8*=258) returned 1 [0198.654] SetFilePointerEx (in: hFile=0x1a20, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.654] ReadFile (in: hFile=0x1a20, lpBuffer=0x10a8fcd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10a8fcb0, lpOverlapped=0x0 | out: lpBuffer=0x10a8fcd4*, lpNumberOfBytesRead=0x10a8fcb0*=0x4, lpOverlapped=0x0) returned 1 [0198.656] SetFilePointerEx (in: hFile=0x1a20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0198.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0198.656] NtQuerySystemTime (in: CurrentTime=0x10a8fc50 | out: CurrentTime=0x10a8fc50*=132471540665472000) returned 0x0 [0198.656] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x3008278c [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x576fc775 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x2e390255 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0xfab70c4 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x49dabb21 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x5a23f97d [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x6245b578 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x32f0ebd7 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0xd56355f [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x240e6af [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x142fe910 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x49832d22 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x7696ddfe [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x54fabc33 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x16f8b45c [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x527ec457 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x40c6616b [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x4ff84aad [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0xa0523be [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x7ef21472 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x68d4d870 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x65f211f9 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x5bae766 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x1f6d37e5 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x5e5da634 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x3021209 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x6bde1adb [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x825e90c [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x58a45eec [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x78ea8098 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x48bac89 [0198.657] RtlRandomEx (in: Seed=0x10a8fc48 | out: Seed=0x10a8fc48) returned 0x2d07497 [0198.667] ReadFile (in: hFile=0x1a20, lpBuffer=0x14a2f4b8, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x10a8fc44, lpOverlapped=0x0 | out: lpBuffer=0x14a2f4b8*, lpNumberOfBytesRead=0x10a8fc44*=0x102, lpOverlapped=0x0) returned 1 [0198.667] SetFilePointerEx (in: hFile=0x1a20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.667] WriteFile (in: hFile=0x1a20, lpBuffer=0x14a330c0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x10a8fc48, lpOverlapped=0x0 | out: lpBuffer=0x14a330c0*, lpNumberOfBytesWritten=0x10a8fc48*=0x102, lpOverlapped=0x0) returned 1 [0202.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428f8 [0202.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ad8 [0202.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ad8) returned 1 [0202.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a330c0) returned 1 [0202.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a2f4b8) returned 1 [0202.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f327f0) returned 1 [0202.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5d18) returned 1 [0202.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69180 [0202.134] SetFilePointerEx (in: hFile=0x1a20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.134] WriteFile (in: hFile=0x1a20, lpBuffer=0x81e0f70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10a8fcbc, lpOverlapped=0x0 | out: lpBuffer=0x81e0f70*, lpNumberOfBytesWritten=0x10a8fcbc*=0x10c, lpOverlapped=0x0) returned 1 [0203.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0f70) returned 1 [0203.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0203.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ad8) returned 1 [0203.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0203.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428f8) returned 1 [0203.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0203.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b8e8) returned 1 [0203.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0203.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f6b00 [0203.911] wcscpy (in: _Dest=0x81f6b00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" [0203.911] wcscat (in: _Dest=0x81f6b00, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json.f0dbec" [0203.912] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0x10a8fc40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9d00 [0204.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9d00) returned 1 [0204.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8204548) returned 1 [0204.409] NtQueryInformationFile (in: FileHandle=0x1a20, IoStatusBlock=0x10a8fc18, FileInformation=0x10a8fc20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10a8fc18, FileInformation=0x10a8fc20) returned 0x0 [0204.409] NtSetInformationFile (FileHandle=0x1a20, IoStatusBlock=0x10a8fc18, FileInformation=0x10a8fc20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6b00) returned 1 [0207.355] FlushFileBuffers (hFile=0x1a20) returned 1 [0207.373] CloseHandle (hObject=0x1a20) returned 1 [0208.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f64e8 [0208.512] wcscpy (in: _Dest=0x81f64e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" [0208.512] wcscat (in: _Dest=0x81f64e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0208.512] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0208.512] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0208.978] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x10a8fc64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x10a8fc64*=0x70c, lpOverlapped=0x0) returned 1 [0208.980] CloseHandle (hObject=0x1bc4) returned 1 [0208.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f64e8) returned 1 [0208.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83edcd8) returned 1 Thread: id = 5542 os_tid = 0x518 [0186.027] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json")) returned 0x2020 [0190.216] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.677] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a70 [0198.678] GetFileSizeEx (in: hFile=0x1a70, lpFileSize=0xc2ffa58 | out: lpFileSize=0xc2ffa58*=234) returned 1 [0198.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0198.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0198.678] NtQuerySystemTime (in: CurrentTime=0xc2ff9e0 | out: CurrentTime=0xc2ff9e0*=132471540665628000) returned 0x0 [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x631fa793 [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x4ba37c66 [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x22609867 [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x6a34ddfb [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x34e50c4b [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x68990b9e [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x52ecd43e [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x5dbb494b [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x625db3e9 [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x253d2e99 [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x4c0faeb6 [0198.678] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x6b10202a [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x7a4e18dc [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x65fa07b1 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x57756fa8 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x46d2788e [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x19551282 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x249c82dc [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x8149f34 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0xc30319b [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x78a2e82d [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x51ddc64 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x3cd94e67 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x1587c714 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x2a61e585 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x268bc5d1 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x4471531f [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x4ad77ba1 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x79caf298 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x68ba33 [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x3b51ab1a [0198.679] RtlRandomEx (in: Seed=0xc2ff9d8 | out: Seed=0xc2ff9d8) returned 0x65d0be0a [0198.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a18c88 [0198.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a1c890 [0198.689] ReadFile (in: hFile=0x1a70, lpBuffer=0x14a18c88, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xc2ff9d4, lpOverlapped=0x0 | out: lpBuffer=0x14a18c88*, lpNumberOfBytesRead=0xc2ff9d4*=0xea, lpOverlapped=0x0) returned 1 [0198.691] SetFilePointerEx (in: hFile=0x1a70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.691] WriteFile (in: hFile=0x1a70, lpBuffer=0x14a1c890*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xc2ff9d8, lpOverlapped=0x0 | out: lpBuffer=0x14a1c890*, lpNumberOfBytesWritten=0xc2ff9d8*=0xea, lpOverlapped=0x0) returned 1 [0202.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0202.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42240 [0202.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0202.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a1c890) returned 1 [0202.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a18c88) returned 1 [0202.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32700) returned 1 [0202.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5970) returned 1 [0202.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69780 [0202.138] SetFilePointerEx (in: hFile=0x1a70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.138] WriteFile (in: hFile=0x1a70, lpBuffer=0x81e0250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc2ffa4c, lpOverlapped=0x0 | out: lpBuffer=0x81e0250*, lpNumberOfBytesWritten=0xc2ffa4c*=0x10c, lpOverlapped=0x0) returned 1 [0203.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0250) returned 1 [0203.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697b0) returned 1 [0203.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42240) returned 1 [0203.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69780) returned 1 [0203.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0203.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0203.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0203.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0203.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8400930 [0203.915] wcscpy (in: _Dest=0x8400930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" [0203.915] wcscat (in: _Dest=0x8400930, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json.f0dbec" [0203.915] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0xc2ff9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ef8c58 [0204.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8c58) returned 1 [0204.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f9af0) returned 1 [0204.411] NtQueryInformationFile (in: FileHandle=0x1a70, IoStatusBlock=0xc2ff9a8, FileInformation=0xc2ff9b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc2ff9a8, FileInformation=0xc2ff9b0) returned 0x0 [0204.411] NtSetInformationFile (FileHandle=0x1a70, IoStatusBlock=0xc2ff9a8, FileInformation=0xc2ff9b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400930) returned 1 [0207.361] FlushFileBuffers (hFile=0x1a70) returned 1 [0207.377] CloseHandle (hObject=0x1a70) returned 1 [0208.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81f0550 [0208.516] wcscpy (in: _Dest=0x81f0550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" [0208.516] wcscat (in: _Dest=0x81f0550, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\F0DBEC-Readme.txt" [0208.516] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0208.516] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0208.986] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc2ff9f4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc2ff9f4*=0x70c, lpOverlapped=0x0) returned 1 [0208.988] CloseHandle (hObject=0x1bc4) returned 1 [0208.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0550) returned 1 [0208.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ede00) returned 1 Thread: id = 5543 os_tid = 0xf30 [0186.027] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json")) returned 0x2020 [0190.217] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0198.692] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b3c [0198.692] GetFileSizeEx (in: hFile=0x1b3c, lpFileSize=0x10f3fea0 | out: lpFileSize=0x10f3fea0*=324) returned 1 [0198.692] SetFilePointerEx (in: hFile=0x1b3c, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.692] ReadFile (in: hFile=0x1b3c, lpBuffer=0x10f3feac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10f3fe88, lpOverlapped=0x0 | out: lpBuffer=0x10f3feac*, lpNumberOfBytesRead=0x10f3fe88*=0x4, lpOverlapped=0x0) returned 1 [0198.694] SetFilePointerEx (in: hFile=0x1b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0198.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bac8 [0198.694] NtQuerySystemTime (in: CurrentTime=0x10f3fe28 | out: CurrentTime=0x10f3fe28*=132471540665784000) returned 0x0 [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x5fcd2fe7 [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x4a2c170c [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x742a3ca3 [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x21067673 [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x7c740058 [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x142517c1 [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x4f1cede3 [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x440f3b3b [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x4d16eff6 [0198.694] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x6ff745c2 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x6b0f6a9e [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x332e3bbd [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x7e478097 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x68bfb4e3 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x57d342d8 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x7b13500b [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x631465b5 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x54c6d355 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x3bf190ce [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x727a8da7 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x666c444d [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x6682403a [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x360165e2 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x3a1981e0 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x33e6d5d8 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x13fa3f01 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x4392a178 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x48b7c172 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x784eddd9 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x5752a301 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x4a5211a5 [0198.695] RtlRandomEx (in: Seed=0x10f3fe20 | out: Seed=0x10f3fe20) returned 0x59461dc7 [0198.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817e8d0 [0198.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81824d8 [0198.710] ReadFile (in: hFile=0x1b3c, lpBuffer=0x817e8d0, nNumberOfBytesToRead=0x144, lpNumberOfBytesRead=0x10f3fe1c, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesRead=0x10f3fe1c*=0x144, lpOverlapped=0x0) returned 1 [0198.710] SetFilePointerEx (in: hFile=0x1b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.710] WriteFile (in: hFile=0x1b3c, lpBuffer=0x81824d8*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x10f3fe20, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesWritten=0x10f3fe20*=0x144, lpOverlapped=0x0) returned 1 [0202.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0202.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43528 [0202.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43528) returned 1 [0202.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0202.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0202.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32bb0) returned 1 [0202.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5960) returned 1 [0202.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0202.141] SetFilePointerEx (in: hFile=0x1b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.141] WriteFile (in: hFile=0x1b3c, lpBuffer=0x81dfdf0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10f3fe94, lpOverlapped=0x0 | out: lpBuffer=0x81dfdf0*, lpNumberOfBytesWritten=0x10f3fe94*=0x10c, lpOverlapped=0x0) returned 1 [0203.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfdf0) returned 1 [0203.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0203.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43528) returned 1 [0203.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0203.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43280) returned 1 [0203.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0203.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0203.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0203.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401020 [0203.919] wcscpy (in: _Dest=0x8401020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" [0203.919] wcscat (in: _Dest=0x8401020, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json.f0dbec" [0203.919] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0x10f3fe18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ef9e48 [0204.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9e48) returned 1 [0204.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f9d18) returned 1 [0204.414] NtQueryInformationFile (in: FileHandle=0x1b3c, IoStatusBlock=0x10f3fdf0, FileInformation=0x10f3fdf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10f3fdf0, FileInformation=0x10f3fdf8) returned 0x0 [0204.414] NtSetInformationFile (FileHandle=0x1b3c, IoStatusBlock=0x10f3fdf0, FileInformation=0x10f3fdf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401020) returned 1 [0207.372] FlushFileBuffers (hFile=0x1b3c) returned 1 [0207.382] CloseHandle (hObject=0x1b3c) returned 1 [0208.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81f07a0 [0208.518] wcscpy (in: _Dest=0x81f07a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" [0208.518] wcscat (in: _Dest=0x81f07a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\F0DBEC-Readme.txt" [0208.518] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0208.518] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0208.982] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x10f3fe3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x10f3fe3c*=0x70c, lpOverlapped=0x0) returned 1 [0208.983] CloseHandle (hObject=0x1bc4) returned 1 [0208.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f07a0) returned 1 [0208.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83edf28) returned 1 Thread: id = 5544 os_tid = 0x74c [0186.028] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json")) returned 0x2020 [0190.218] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0198.711] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b40 [0198.712] GetFileSizeEx (in: hFile=0x1b40, lpFileSize=0x110dfe78 | out: lpFileSize=0x110dfe78*=234) returned 1 [0198.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bac8 [0198.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0198.712] NtQuerySystemTime (in: CurrentTime=0x110dfe00 | out: CurrentTime=0x110dfe00*=132471540665940000) returned 0x0 [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0xac6a0bb [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x736209f5 [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x4903d13f [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x3fb0a54a [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x3f49031c [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x6d648795 [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x71e3936d [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x79f3384a [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0xabec548 [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x1d480e0f [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x13161a56 [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x15510501 [0198.712] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x4c3855d9 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x1b913645 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x15695954 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x22fa6e63 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0xf31cf42 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x1b6acf2f [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x59c4f68c [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x2e4d1451 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x127d6e72 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x3b0a53aa [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x42148ad9 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x6fbaf102 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x3e94920b [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x73bca345 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x44eebfe9 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x5615a2c8 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x3e2ae78e [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x198dbaf5 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x164d7219 [0198.713] RtlRandomEx (in: Seed=0x110dfdf8 | out: Seed=0x110dfdf8) returned 0x14f37249 [0198.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0198.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81680a0 [0198.722] ReadFile (in: hFile=0x1b40, lpBuffer=0x8164498, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x110dfdf4, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0x110dfdf4*=0xea, lpOverlapped=0x0) returned 1 [0198.728] SetFilePointerEx (in: hFile=0x1b40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.728] WriteFile (in: hFile=0x1b40, lpBuffer=0x81680a0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x110dfdf8, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesWritten=0x110dfdf8*=0xea, lpOverlapped=0x0) returned 1 [0202.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43000 [0202.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0202.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0202.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0202.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0202.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f331c8) returned 1 [0202.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e72b0) returned 1 [0202.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69240 [0202.148] SetFilePointerEx (in: hFile=0x1b40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.148] WriteFile (in: hFile=0x1b40, lpBuffer=0x81dfbc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x110dfe6c, lpOverlapped=0x0 | out: lpBuffer=0x81dfbc0*, lpNumberOfBytesWritten=0x110dfe6c*=0x10c, lpOverlapped=0x0) returned 1 [0203.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfbc0) returned 1 [0203.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69270) returned 1 [0203.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0203.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69240) returned 1 [0203.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43000) returned 1 [0203.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bac8) returned 1 [0203.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0203.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0203.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f08c8 [0203.923] wcscpy (in: _Dest=0x81f08c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" [0203.923] wcscat (in: _Dest=0x81f08c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json.f0dbec" [0203.923] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0x110dfdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ef9f90 [0204.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9f90) returned 1 [0204.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fe890) returned 1 [0204.413] NtQueryInformationFile (in: FileHandle=0x1b40, IoStatusBlock=0x110dfdc8, FileInformation=0x110dfdd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x110dfdc8, FileInformation=0x110dfdd0) returned 0x0 [0204.413] NtSetInformationFile (FileHandle=0x1b40, IoStatusBlock=0x110dfdc8, FileInformation=0x110dfdd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f08c8) returned 1 [0207.367] FlushFileBuffers (hFile=0x1b40) returned 1 [0207.387] CloseHandle (hObject=0x1b40) returned 1 [0208.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81f0678 [0208.522] wcscpy (in: _Dest=0x81f0678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" [0208.522] wcscat (in: _Dest=0x81f0678, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\F0DBEC-Readme.txt" [0208.523] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0208.523] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0208.989] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x110dfe14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x110dfe14*=0x70c, lpOverlapped=0x0) returned 1 [0208.991] CloseHandle (hObject=0x1bc4) returned 1 [0208.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0678) returned 1 [0208.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee050) returned 1 Thread: id = 5545 os_tid = 0x9ec [0186.028] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json")) returned 0x2020 [0190.218] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0198.729] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a30 [0198.730] GetFileSizeEx (in: hFile=0x1a30, lpFileSize=0xc5dfc58 | out: lpFileSize=0xc5dfc58*=222) returned 1 [0198.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0198.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0198.730] NtQuerySystemTime (in: CurrentTime=0xc5dfbe0 | out: CurrentTime=0xc5dfbe0*=132471540666252000) returned 0x0 [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x5760a250 [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x44f3b9a0 [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x1971b337 [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x59be25e7 [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x6d559cea [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x257bc71a [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x14a7fd3b [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x496521d [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x4814b76 [0198.730] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x6e7f6d1d [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x70ef02b1 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x32f0e1c1 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x2f9a74a8 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x6bb06a8b [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x13af760a [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x3aa94ab0 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x6e8cce1a [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x2e9eaae6 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x510e694d [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x5e809f0e [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x1ac952a3 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x4d750e23 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x64db852e [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x48e660e1 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0xfca2ee6 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x6e8df9fe [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x6fce7570 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x4fbaea5d [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x3d7c3901 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x209d1810 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x2d61f2c5 [0198.731] RtlRandomEx (in: Seed=0xc5dfbd8 | out: Seed=0xc5dfbd8) returned 0x186791af [0198.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0198.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8160890 [0198.742] ReadFile (in: hFile=0x1a30, lpBuffer=0x815cc88, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xc5dfbd4, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesRead=0xc5dfbd4*=0xde, lpOverlapped=0x0) returned 1 [0198.744] SetFilePointerEx (in: hFile=0x1a30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.744] WriteFile (in: hFile=0x1a30, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xc5dfbd8, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0xc5dfbd8*=0xde, lpOverlapped=0x0) returned 1 [0202.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432f8 [0202.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f58 [0202.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f58) returned 1 [0202.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0202.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0202.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32958) returned 1 [0202.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5a38) returned 1 [0202.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69720 [0202.149] SetFilePointerEx (in: hFile=0x1a30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.149] WriteFile (in: hFile=0x1a30, lpBuffer=0x81e0598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc5dfc4c, lpOverlapped=0x0 | out: lpBuffer=0x81e0598*, lpNumberOfBytesWritten=0xc5dfc4c*=0x10c, lpOverlapped=0x0) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0598) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f58) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432f8) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0b8) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0203.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0678 [0203.927] wcscpy (in: _Dest=0x81f0678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" [0203.927] wcscat (in: _Dest=0x81f0678, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json.f0dbec" [0203.928] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0xc5dfbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3efa9d0 [0204.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa9d0) returned 1 [0204.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f98c8) returned 1 [0204.416] NtQueryInformationFile (in: FileHandle=0x1a30, IoStatusBlock=0xc5dfba8, FileInformation=0xc5dfbb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc5dfba8, FileInformation=0xc5dfbb0) returned 0x0 [0204.416] NtSetInformationFile (FileHandle=0x1a30, IoStatusBlock=0xc5dfba8, FileInformation=0xc5dfbb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0678) returned 1 [0207.376] FlushFileBuffers (hFile=0x1a30) returned 1 [0207.392] CloseHandle (hObject=0x1a30) returned 1 [0208.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81f08c8 [0208.524] wcscpy (in: _Dest=0x81f08c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" [0208.524] wcscat (in: _Dest=0x81f08c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\F0DBEC-Readme.txt" [0208.524] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0208.524] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0208.993] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc5dfbf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc5dfbf4*=0x70c, lpOverlapped=0x0) returned 1 [0208.995] CloseHandle (hObject=0x1bc4) returned 1 [0208.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f08c8) returned 1 [0208.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee178) returned 1 Thread: id = 5546 os_tid = 0x1394 [0186.029] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json")) returned 0x2020 [0190.219] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json", dwFileAttributes=0x20) returned 1 [0198.745] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2100 [0198.746] GetFileSizeEx (in: hFile=0x2100, lpFileSize=0xd39fdd0 | out: lpFileSize=0xd39fdd0*=210) returned 1 [0198.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0198.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0198.746] NtQuerySystemTime (in: CurrentTime=0xd39fd58 | out: CurrentTime=0xd39fd58*=132471540666408000) returned 0x0 [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x6a621c4e [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x3804b29c [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x2d464f78 [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x6e865eba [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x349b2b8b [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x848640f [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x689c44a5 [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x1564542f [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x2fa2e6c6 [0198.746] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x25032c1b [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x463ac21f [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x6cdf379f [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x1c9bf2f3 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x5f7b9a4d [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x1a85e81c [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x611b9059 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x34811c5 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x507979c8 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x4a826a4b [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x586f4e61 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x5b349617 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x456ff573 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x4d57cd25 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x20fbb7bf [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0xca27a35 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x1c2240a0 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x66e2b595 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x13a48d81 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x647d863c [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0xca2fc6f [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0xdc50143 [0198.747] RtlRandomEx (in: Seed=0xd39fd50 | out: Seed=0xd39fd50) returned 0x1c936808 [0198.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8155478 [0198.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8159080 [0198.766] ReadFile (in: hFile=0x2100, lpBuffer=0x8155478, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xd39fd4c, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesRead=0xd39fd4c*=0xd2, lpOverlapped=0x0) returned 1 [0198.769] SetFilePointerEx (in: hFile=0x2100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.769] WriteFile (in: hFile=0x2100, lpBuffer=0x8159080*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xd39fd50, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesWritten=0xd39fd50*=0xd2, lpOverlapped=0x0) returned 1 [0202.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f80 [0202.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f08 [0202.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f08) returned 1 [0202.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0202.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0202.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32a48) returned 1 [0202.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5f00) returned 1 [0202.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0202.152] SetFilePointerEx (in: hFile=0x2100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.152] WriteFile (in: hFile=0x2100, lpBuffer=0x81e07c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd39fdc4, lpOverlapped=0x0 | out: lpBuffer=0x81e07c8*, lpNumberOfBytesWritten=0xd39fdc4*=0x10c, lpOverlapped=0x0) returned 1 [0203.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e07c8) returned 1 [0203.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0203.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f08) returned 1 [0203.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0203.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f80) returned 1 [0203.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0203.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0203.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0203.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f07a0 [0203.931] wcscpy (in: _Dest=0x81f07a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" [0203.931] wcscat (in: _Dest=0x81f07a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json.f0dbec" [0203.931] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json.f0dbec", NtPathName=0xd39fd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ef92c0 [0204.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef92c0) returned 1 [0204.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fb920) returned 1 [0204.417] NtQueryInformationFile (in: FileHandle=0x2100, IoStatusBlock=0xd39fd20, FileInformation=0xd39fd28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd39fd20, FileInformation=0xd39fd28) returned 0x0 [0204.417] NtSetInformationFile (FileHandle=0x2100, IoStatusBlock=0xd39fd20, FileInformation=0xd39fd28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f07a0) returned 1 [0207.380] FlushFileBuffers (hFile=0x2100) returned 1 [0207.397] CloseHandle (hObject=0x2100) returned 1 [0208.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d3b78 [0208.528] wcscpy (in: _Dest=0x81d3b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" [0208.528] wcscat (in: _Dest=0x81d3b78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\F0DBEC-Readme.txt" [0208.528] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\f0dbec-readme.txt")) returned 0xffffffff [0208.528] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.001] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd39fd6c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd39fd6c*=0x70c, lpOverlapped=0x0) returned 1 [0209.003] CloseHandle (hObject=0x1bc4) returned 1 [0209.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3b78) returned 1 [0209.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee2a0) returned 1 Thread: id = 5547 os_tid = 0x2a8 [0186.029] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json")) returned 0x2020 [0190.220] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0198.770] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2104 [0198.770] GetFileSizeEx (in: hFile=0x2104, lpFileSize=0x111ffc78 | out: lpFileSize=0x111ffc78*=286) returned 1 [0198.770] SetFilePointerEx (in: hFile=0x2104, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.771] ReadFile (in: hFile=0x2104, lpBuffer=0x111ffc84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x111ffc60, lpOverlapped=0x0 | out: lpBuffer=0x111ffc84*, lpNumberOfBytesRead=0x111ffc60*=0x4, lpOverlapped=0x0) returned 1 [0198.772] SetFilePointerEx (in: hFile=0x2104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0198.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0198.773] NtQuerySystemTime (in: CurrentTime=0x111ffc00 | out: CurrentTime=0x111ffc00*=132471540666564000) returned 0x0 [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x1f52341b [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x108a31f [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0xbda37d9 [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x34f44e9f [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x5bbc766e [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x3e428b50 [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x3258ff94 [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x39942270 [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x25e74a72 [0198.773] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x14ca6d7 [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x7da2af2f [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x79348cd3 [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x12fa8fae [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x45afae9a [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x8ecb16e [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x482c7ce5 [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x5c3089a5 [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x237bbdd4 [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x5d6a500e [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x263223e3 [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x1e6e0caf [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x33a3855f [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x2108c7d5 [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x4e3ff0bb [0198.774] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0xf110c9c [0198.775] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x63c8b395 [0198.775] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x43af69e3 [0198.775] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x5af4d0ba [0198.775] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x61b2b8fc [0198.784] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x30a15579 [0198.785] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x65c6e5d8 [0198.785] RtlRandomEx (in: Seed=0x111ffbf8 | out: Seed=0x111ffbf8) returned 0x38a37bcb [0198.802] ReadFile (in: hFile=0x2104, lpBuffer=0x814dc68, nNumberOfBytesToRead=0x11e, lpNumberOfBytesRead=0x111ffbf4, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesRead=0x111ffbf4*=0x11e, lpOverlapped=0x0) returned 1 [0198.803] SetFilePointerEx (in: hFile=0x2104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.803] WriteFile (in: hFile=0x2104, lpBuffer=0x8151870*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x111ffbf8, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesWritten=0x111ffbf8*=0x11e, lpOverlapped=0x0) returned 1 [0202.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f30 [0202.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062e18 [0202.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e18) returned 1 [0202.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0202.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0202.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33150) returned 1 [0202.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e74f0) returned 1 [0202.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0202.155] SetFilePointerEx (in: hFile=0x2104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.155] WriteFile (in: hFile=0x2104, lpBuffer=0x81e06b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x111ffc6c, lpOverlapped=0x0 | out: lpBuffer=0x81e06b0*, lpNumberOfBytesWritten=0x111ffc6c*=0x10c, lpOverlapped=0x0) returned 1 [0203.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e06b0) returned 1 [0203.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0203.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e18) returned 1 [0203.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0203.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f30) returned 1 [0203.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0203.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0203.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0203.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0550 [0203.934] wcscpy (in: _Dest=0x81f0550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" [0203.934] wcscat (in: _Dest=0x81f0550, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json.f0dbec" [0203.934] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json.f0dbec", NtPathName=0x111ffbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ef9a70 [0204.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9a70) returned 1 [0204.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82015d8) returned 1 [0204.419] NtQueryInformationFile (in: FileHandle=0x2104, IoStatusBlock=0x111ffbc8, FileInformation=0x111ffbd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x111ffbc8, FileInformation=0x111ffbd0) returned 0x0 [0204.419] NtSetInformationFile (FileHandle=0x2104, IoStatusBlock=0x111ffbc8, FileInformation=0x111ffbd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0550) returned 1 [0207.385] FlushFileBuffers (hFile=0x2104) returned 1 [0207.401] CloseHandle (hObject=0x2104) returned 1 [0208.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d28f8 [0208.530] wcscpy (in: _Dest=0x81d28f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" [0208.530] wcscat (in: _Dest=0x81d28f8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\F0DBEC-Readme.txt" [0208.530] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\f0dbec-readme.txt")) returned 0xffffffff [0208.530] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0208.997] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x111ffc14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x111ffc14*=0x70c, lpOverlapped=0x0) returned 1 [0208.999] CloseHandle (hObject=0x1bc4) returned 1 [0208.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d28f8) returned 1 [0208.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee3c8) returned 1 Thread: id = 5548 os_tid = 0x1510 [0186.035] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json")) returned 0x2020 [0190.236] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0199.052] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d08 [0199.053] GetFileSizeEx (in: hFile=0x1d08, lpFileSize=0x1109fa20 | out: lpFileSize=0x1109fa20*=265) returned 1 [0199.053] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.053] ReadFile (in: hFile=0x1d08, lpBuffer=0x1109fa2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1109fa08, lpOverlapped=0x0 | out: lpBuffer=0x1109fa2c*, lpNumberOfBytesRead=0x1109fa08*=0x4, lpOverlapped=0x0) returned 1 [0199.055] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0199.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0199.055] NtQuerySystemTime (in: CurrentTime=0x1109f9a8 | out: CurrentTime=0x1109f9a8*=132471540669372000) returned 0x0 [0199.055] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x38aa3427 [0199.055] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x7609b754 [0199.055] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x67e80b2a [0199.055] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x52363141 [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x789deb6a [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x6727c4d9 [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x55eef269 [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x4ce5455f [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x6e9630ea [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x75fbe55a [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x270c9592 [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x1497f028 [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x2d35e0ce [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x5db2182f [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x6180d917 [0199.056] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x641f93fd [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0xff5ed01 [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x43075d6b [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x4c6b04f9 [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x51a5222f [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x6e85edb1 [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x6e4b445b [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x50eb84be [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x5d526b52 [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x168e0732 [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x28e931d5 [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x577399bf [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x404d5c7a [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x4b002965 [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0xfc1cf10 [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x5bd3f065 [0199.057] RtlRandomEx (in: Seed=0x1109f9a0 | out: Seed=0x1109f9a0) returned 0x441a14e2 [0199.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a6f4b8 [0199.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a730c0 [0199.072] ReadFile (in: hFile=0x1d08, lpBuffer=0x14a6f4b8, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0x1109f99c, lpOverlapped=0x0 | out: lpBuffer=0x14a6f4b8*, lpNumberOfBytesRead=0x1109f99c*=0x109, lpOverlapped=0x0) returned 1 [0199.072] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.072] WriteFile (in: hFile=0x1d08, lpBuffer=0x14a730c0*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x1109f9a0, lpOverlapped=0x0 | out: lpBuffer=0x14a730c0*, lpNumberOfBytesWritten=0x1109f9a0*=0x109, lpOverlapped=0x0) returned 1 [0203.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80635c0 [0203.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80635e8 [0203.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80635e8) returned 1 [0203.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a730c0) returned 1 [0203.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a6f4b8) returned 1 [0203.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32c28) returned 1 [0203.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5ba0) returned 1 [0203.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69a20 [0203.454] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.455] WriteFile (in: hFile=0x1d08, lpBuffer=0x8407028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1109fa14, lpOverlapped=0x0 | out: lpBuffer=0x8407028*, lpNumberOfBytesWritten=0x1109fa14*=0x10c, lpOverlapped=0x0) returned 1 [0207.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407028) returned 1 [0207.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a50) returned 1 [0207.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80635e8) returned 1 [0207.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a20) returned 1 [0207.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80635c0) returned 1 [0207.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0207.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb70) returned 1 [0207.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8c0) returned 1 [0207.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8186fe8 [0207.133] wcscpy (in: _Dest=0x8186fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" [0207.133] wcscat (in: _Dest=0x8186fe8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json.f0dbec" [0207.133] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0x1109f998, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x8336560 [0208.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336560) returned 1 [0208.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14893648) returned 1 [0208.118] NtQueryInformationFile (in: FileHandle=0x1d08, IoStatusBlock=0x1109f970, FileInformation=0x1109f978, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1109f970, FileInformation=0x1109f978) returned 0x0 [0208.118] NtSetInformationFile (FileHandle=0x1d08, IoStatusBlock=0x1109f970, FileInformation=0x1109f978, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186fe8) returned 1 [0208.285] FlushFileBuffers (hFile=0x1d08) returned 1 [0208.446] CloseHandle (hObject=0x1d08) returned 1 [0208.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8186458 [0208.832] wcscpy (in: _Dest=0x8186458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" [0208.832] wcscat (in: _Dest=0x8186458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\F0DBEC-Readme.txt" [0208.832] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0208.833] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1540 [0209.547] WriteFile (in: hFile=0x1540, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1109f9bc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1109f9bc*=0x70c, lpOverlapped=0x0) returned 1 [0209.599] CloseHandle (hObject=0x1540) returned 1 [0209.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186458) returned 1 [0209.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee4f0) returned 1 Thread: id = 5549 os_tid = 0x410 [0186.042] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0190.236] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0199.073] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d0c [0199.073] GetFileSizeEx (in: hFile=0x1d0c, lpFileSize=0x10fdff00 | out: lpFileSize=0x10fdff00*=222) returned 1 [0199.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0199.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0199.074] NtQuerySystemTime (in: CurrentTime=0x10fdfe88 | out: CurrentTime=0x10fdfe88*=132471540669684000) returned 0x0 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x31af36c1 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0xc29456a [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x5c613bab [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x644c0b76 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x40ae12b9 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x177ce707 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x29fe125f [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x7bdab6ed [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x33511bcb [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x1bcdac01 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x7695e5ac [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0xb935b4b [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x75de71fb [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x524c1e5f [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x47c7549c [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x2d8846d2 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x7192b38 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x4cfecf0 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x4ec2995a [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x760d8749 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x1192d7f5 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0xc60b5e5 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x654f39a2 [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x522bd0fa [0199.074] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x213335a8 [0199.075] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x1955930b [0199.075] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x2079a637 [0199.075] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x2652601 [0199.075] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x5b4a5a0c [0199.075] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x7b428fac [0199.075] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x1fb49f69 [0199.075] RtlRandomEx (in: Seed=0x10fdfe80 | out: Seed=0x10fdfe80) returned 0x1d6d98a2 [0199.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a76cc8 [0199.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a7a8d0 [0199.085] ReadFile (in: hFile=0x1d0c, lpBuffer=0x14a76cc8, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0x10fdfe7c, lpOverlapped=0x0 | out: lpBuffer=0x14a76cc8*, lpNumberOfBytesRead=0x10fdfe7c*=0xde, lpOverlapped=0x0) returned 1 [0199.087] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.087] WriteFile (in: hFile=0x1d0c, lpBuffer=0x14a7a8d0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x10fdfe80, lpOverlapped=0x0 | out: lpBuffer=0x14a7a8d0*, lpNumberOfBytesWritten=0x10fdfe80*=0xde, lpOverlapped=0x0) returned 1 [0203.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063610 [0203.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063638 [0203.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063638) returned 1 [0203.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a7a8d0) returned 1 [0203.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a76cc8) returned 1 [0203.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ac0) returned 1 [0203.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7340) returned 1 [0203.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69360 [0203.458] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.458] WriteFile (in: hFile=0x1d0c, lpBuffer=0x8406f10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10fdfef4, lpOverlapped=0x0 | out: lpBuffer=0x8406f10*, lpNumberOfBytesWritten=0x10fdfef4*=0x10c, lpOverlapped=0x0) returned 1 [0207.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406f10) returned 1 [0207.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69390) returned 1 [0207.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063638) returned 1 [0207.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69360) returned 1 [0207.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063610) returned 1 [0207.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf40) returned 1 [0207.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf30) returned 1 [0207.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0207.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404428 [0207.137] wcscpy (in: _Dest=0x8404428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" [0207.137] wcscat (in: _Dest=0x8404428, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json.f0dbec" [0207.137] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0x10fdfe78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x8336418 [0208.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336418) returned 1 [0208.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148990d8) returned 1 [0208.120] NtQueryInformationFile (in: FileHandle=0x1d0c, IoStatusBlock=0x10fdfe50, FileInformation=0x10fdfe58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10fdfe50, FileInformation=0x10fdfe58) returned 0x0 [0208.120] NtSetInformationFile (FileHandle=0x1d0c, IoStatusBlock=0x10fdfe50, FileInformation=0x10fdfe58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404428) returned 1 [0208.288] FlushFileBuffers (hFile=0x1d0c) returned 1 [0208.390] CloseHandle (hObject=0x1d0c) returned 1 [0208.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f6008 [0208.819] wcscpy (in: _Dest=0x81f6008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" [0208.819] wcscat (in: _Dest=0x81f6008, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0208.819] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0208.820] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18f8 [0209.511] WriteFile (in: hFile=0x18f8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x10fdfe9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x10fdfe9c*=0x70c, lpOverlapped=0x0) returned 1 [0209.513] CloseHandle (hObject=0x18f8) returned 1 [0209.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6008) returned 1 [0209.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee618) returned 1 Thread: id = 5550 os_tid = 0x1518 [0186.052] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json")) returned 0x2020 [0190.237] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0199.088] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c8c [0199.088] GetFileSizeEx (in: hFile=0x1c8c, lpFileSize=0x1104f8d0 | out: lpFileSize=0x1104f8d0*=210) returned 1 [0199.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0199.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b8b0 [0199.089] NtQuerySystemTime (in: CurrentTime=0x1104f858 | out: CurrentTime=0x1104f858*=132471540669840000) returned 0x0 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x3a954942 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x710d0cc7 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x25b9e828 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x40854fe [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x5003a09e [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x1a8b957e [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x40cf8929 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x2308fb44 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x499efb26 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x2ed0c744 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0xbc32acc [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x2cad1d4c [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x104e1e28 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x4a9f2308 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x1b9a8e02 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x1c4fd8b0 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x3530225f [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0xc965b10 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x7611d8a1 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x8041d46 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x2e4a1aab [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x6244d3ee [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x69a449c1 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x77d02836 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x37724fe1 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0xc2056a5 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x4ab991b2 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x2c09e561 [0199.089] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x4b07f164 [0199.090] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x1742883f [0199.090] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x26b7ef83 [0199.090] RtlRandomEx (in: Seed=0x1104f850 | out: Seed=0x1104f850) returned 0x61c150bd [0199.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a7e4d8 [0199.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a820e0 [0199.102] ReadFile (in: hFile=0x1c8c, lpBuffer=0x14a7e4d8, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0x1104f84c, lpOverlapped=0x0 | out: lpBuffer=0x14a7e4d8*, lpNumberOfBytesRead=0x1104f84c*=0xd2, lpOverlapped=0x0) returned 1 [0199.105] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.105] WriteFile (in: hFile=0x1c8c, lpBuffer=0x14a820e0*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x1104f850, lpOverlapped=0x0 | out: lpBuffer=0x14a820e0*, lpNumberOfBytesWritten=0x1104f850*=0xd2, lpOverlapped=0x0) returned 1 [0203.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063660 [0203.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063688 [0203.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063688) returned 1 [0203.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a820e0) returned 1 [0203.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a7e4d8) returned 1 [0203.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 [0203.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e64a0) returned 1 [0203.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69300 [0203.461] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.462] WriteFile (in: hFile=0x1c8c, lpBuffer=0x8406df8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1104f8c4, lpOverlapped=0x0 | out: lpBuffer=0x8406df8*, lpNumberOfBytesWritten=0x1104f8c4*=0x10c, lpOverlapped=0x0) returned 1 [0207.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406df8) returned 1 [0207.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69330) returned 1 [0207.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063688) returned 1 [0207.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69300) returned 1 [0207.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063660) returned 1 [0207.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0207.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0207.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0207.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8188268 [0207.140] wcscpy (in: _Dest=0x8188268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" [0207.140] wcscat (in: _Dest=0x8188268, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json.f0dbec" [0207.140] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json.f0dbec", NtPathName=0x1104f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x83362d0 [0208.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83362d0) returned 1 [0208.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14899300) returned 1 [0208.124] NtQueryInformationFile (in: FileHandle=0x1c8c, IoStatusBlock=0x1104f820, FileInformation=0x1104f828, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1104f820, FileInformation=0x1104f828) returned 0x0 [0208.124] NtSetInformationFile (FileHandle=0x1c8c, IoStatusBlock=0x1104f820, FileInformation=0x1104f828, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188268) returned 1 [0208.297] FlushFileBuffers (hFile=0x1c8c) returned 1 [0208.393] CloseHandle (hObject=0x1c8c) returned 1 [0208.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e3458 [0208.821] wcscpy (in: _Dest=0x81e3458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" [0208.821] wcscat (in: _Dest=0x81e3458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\F0DBEC-Readme.txt" [0208.821] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\f0dbec-readme.txt")) returned 0xffffffff [0208.821] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18f8 [0209.537] WriteFile (in: hFile=0x18f8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1104f86c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1104f86c*=0x70c, lpOverlapped=0x0) returned 1 [0209.593] CloseHandle (hObject=0x18f8) returned 1 [0209.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3458) returned 1 [0209.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee740) returned 1 Thread: id = 5551 os_tid = 0xabc [0186.059] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json")) returned 0x2020 [0190.238] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.947] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c1c [0198.948] GetFileSizeEx (in: hFile=0x1c1c, lpFileSize=0x925fad8 | out: lpFileSize=0x925fad8*=268) returned 1 [0198.948] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.948] ReadFile (in: hFile=0x1c1c, lpBuffer=0x925fae4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x925fac0, lpOverlapped=0x0 | out: lpBuffer=0x925fae4*, lpNumberOfBytesRead=0x925fac0*=0x4, lpOverlapped=0x0) returned 1 [0198.950] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0198.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0198.950] NtQuerySystemTime (in: CurrentTime=0x925fa60 | out: CurrentTime=0x925fa60*=132471540668436000) returned 0x0 [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x217789bf [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x14f3a641 [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x10f70181 [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x60092567 [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x25985051 [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x49af03de [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x134edc01 [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x4ee63382 [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x48e30c21 [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x267f8f05 [0198.950] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x46d5f926 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x2b2d0a4 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x7e033627 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x75be0754 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x4aa762f2 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x2e0dd021 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x4755288b [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x23c630f4 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x74ed0bf4 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x70fed876 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x4e5723f [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x73fc0cc1 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x39708f40 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x60f67b6 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x6450a5ca [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x73c043d2 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x2c601acf [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x397106b1 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0xbf69b62 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x598bf9c1 [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x1ce777cf [0198.951] RtlRandomEx (in: Seed=0x925fa58 | out: Seed=0x925fa58) returned 0x6c34688d [0198.961] ReadFile (in: hFile=0x1c1c, lpBuffer=0x14951478, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0x925fa54, lpOverlapped=0x0 | out: lpBuffer=0x14951478*, lpNumberOfBytesRead=0x925fa54*=0x10c, lpOverlapped=0x0) returned 1 [0198.961] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.961] WriteFile (in: hFile=0x1c1c, lpBuffer=0x14946060*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x925fa58, lpOverlapped=0x0 | out: lpBuffer=0x14946060*, lpNumberOfBytesWritten=0x925fa58*=0x10c, lpOverlapped=0x0) returned 1 [0204.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3443a0 [0204.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344418 [0204.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344418) returned 1 [0204.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14946060) returned 1 [0204.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14951478) returned 1 [0204.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33060) returned 1 [0204.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7580) returned 1 [0204.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3246d0 [0204.069] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.069] WriteFile (in: hFile=0x1c1c, lpBuffer=0x30bc650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x925facc, lpOverlapped=0x0 | out: lpBuffer=0x30bc650*, lpNumberOfBytesWritten=0x925facc*=0x10c, lpOverlapped=0x0) returned 1 [0204.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0204.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8409960) returned 1 [0204.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344418) returned 1 [0204.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3246d0) returned 1 [0204.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3443a0) returned 1 [0204.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ceb8) returned 1 [0204.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49fb0) returned 1 [0204.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0204.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e3330 [0204.501] wcscpy (in: _Dest=0x81e3330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" [0204.501] wcscat (in: _Dest=0x81e3330, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json.f0dbec" [0204.501] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0x925fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x8336040 [0207.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336040) returned 1 [0207.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833a368) returned 1 [0207.557] NtQueryInformationFile (in: FileHandle=0x1c1c, IoStatusBlock=0x925fa28, FileInformation=0x925fa30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x925fa28, FileInformation=0x925fa30) returned 0x0 [0207.557] NtSetInformationFile (FileHandle=0x1c1c, IoStatusBlock=0x925fa28, FileInformation=0x925fa30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3330) returned 1 [0207.999] FlushFileBuffers (hFile=0x1c1c) returned 1 [0208.005] CloseHandle (hObject=0x1c1c) returned 1 [0208.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81eff88 [0208.217] wcscpy (in: _Dest=0x81eff88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" [0208.217] wcscat (in: _Dest=0x81eff88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\F0DBEC-Readme.txt" [0208.218] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0208.218] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564 [0208.872] WriteFile (in: hFile=0x564, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x925fa74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x925fa74*=0x70c, lpOverlapped=0x0) returned 1 [0209.439] CloseHandle (hObject=0x564) returned 1 [0209.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff88) returned 1 [0209.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4060) returned 1 Thread: id = 5552 os_tid = 0x1398 [0186.070] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json")) returned 0x2020 [0190.238] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0198.963] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb0 [0198.963] GetFileSizeEx (in: hFile=0x1cb0, lpFileSize=0x11dff980 | out: lpFileSize=0x11dff980*=234) returned 1 [0198.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0198.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0198.963] NtQuerySystemTime (in: CurrentTime=0x11dff908 | out: CurrentTime=0x11dff908*=132471540668592000) returned 0x0 [0198.963] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x7c18a6d [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x64b1c62f [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x330c7c91 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x4ea1e4af [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x691f3d8a [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x30f6d005 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x6018bf5b [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x386a5e4c [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x297874ed [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x4140ed53 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x1f9a7ec4 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x2fa3947c [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x10de870e [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x71c93e42 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x69f66d69 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x377e86 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x42d48673 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x3f342873 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x104bf6d0 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x681866c2 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x4389eca0 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x774dfb87 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x78e85802 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0xcf81c08 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0xa132528 [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x51b1ba1d [0198.964] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x75c797eb [0198.965] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x79f580d [0198.965] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x47112888 [0198.965] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x6c6df060 [0198.965] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x39fd169f [0198.965] RtlRandomEx (in: Seed=0x11dff900 | out: Seed=0x11dff900) returned 0x20246365 [0198.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14949c68 [0198.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a4d870 [0198.975] ReadFile (in: hFile=0x1cb0, lpBuffer=0x14949c68, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x11dff8fc, lpOverlapped=0x0 | out: lpBuffer=0x14949c68*, lpNumberOfBytesRead=0x11dff8fc*=0xea, lpOverlapped=0x0) returned 1 [0198.978] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.978] WriteFile (in: hFile=0x1cb0, lpBuffer=0x14a4d870*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x11dff900, lpOverlapped=0x0 | out: lpBuffer=0x14a4d870*, lpNumberOfBytesWritten=0x11dff900*=0xea, lpOverlapped=0x0) returned 1 [0203.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435c8 [0203.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063458 [0203.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063458) returned 1 [0203.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a4d870) returned 1 [0203.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14949c68) returned 1 [0203.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32fe8) returned 1 [0203.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5d50) returned 1 [0203.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fd0 [0203.435] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.435] WriteFile (in: hFile=0x1cb0, lpBuffer=0x8406998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11dff974, lpOverlapped=0x0 | out: lpBuffer=0x8406998*, lpNumberOfBytesWritten=0x11dff974*=0x10c, lpOverlapped=0x0) returned 1 [0204.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 [0204.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0204.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063458) returned 1 [0204.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0204.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435c8) returned 1 [0204.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0204.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0204.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d498f8) returned 1 [0204.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f5648 [0204.700] wcscpy (in: _Dest=0x81f5648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" [0204.700] wcscat (in: _Dest=0x81f5648, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json.f0dbec" [0204.700] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0x11dff8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x138) returned 0x3e3c470 [0207.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c470) returned 1 [0207.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8319188) returned 1 [0207.869] NtQueryInformationFile (in: FileHandle=0x1cb0, IoStatusBlock=0x11dff8d0, FileInformation=0x11dff8d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11dff8d0, FileInformation=0x11dff8d8) returned 0x0 [0207.869] NtSetInformationFile (FileHandle=0x1cb0, IoStatusBlock=0x11dff8d0, FileInformation=0x11dff8d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5648) returned 1 [0208.109] FlushFileBuffers (hFile=0x1cb0) returned 1 [0208.114] CloseHandle (hObject=0x1cb0) returned 1 [0208.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81d81d8 [0208.273] wcscpy (in: _Dest=0x81d81d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" [0208.274] wcscat (in: _Dest=0x81d81d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\F0DBEC-Readme.txt" [0208.274] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0208.274] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210c [0208.875] WriteFile (in: hFile=0x210c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x11dff91c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x11dff91c*=0x70c, lpOverlapped=0x0) returned 1 [0209.460] CloseHandle (hObject=0x210c) returned 1 [0209.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d81d8) returned 1 [0209.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4188) returned 1 Thread: id = 5553 os_tid = 0xe8c [0186.075] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json")) returned 0x2020 [0190.239] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0198.979] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb4 [0198.979] GetFileSizeEx (in: hFile=0x1cb4, lpFileSize=0x9a6f8f8 | out: lpFileSize=0x9a6f8f8*=256) returned 1 [0198.979] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.979] ReadFile (in: hFile=0x1cb4, lpBuffer=0x9a6f904, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a6f8e0, lpOverlapped=0x0 | out: lpBuffer=0x9a6f904*, lpNumberOfBytesRead=0x9a6f8e0*=0x4, lpOverlapped=0x0) returned 1 [0198.981] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0198.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd28 [0198.981] NtQuerySystemTime (in: CurrentTime=0x9a6f880 | out: CurrentTime=0x9a6f880*=132471540668748000) returned 0x0 [0198.981] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x129cdb1 [0198.981] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x58471a21 [0198.981] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x1278a041 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x6b0f8951 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0xcb262a [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0xbc11f7d [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x7615ed3b [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x11c5126 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x2d34a8f7 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x72545781 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x643bde42 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x71b750cf [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x2b7f4663 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x456bc1c0 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x524c63bf [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x32e70e29 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x10a15001 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x3449df5f [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x6a909c65 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x76cbced8 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x7c108e96 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x27ddf755 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x14c5aadf [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x12eab4f7 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x241cac22 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x95e54f7 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x45982c2f [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0xccee215 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x3f91b12f [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x315c3b89 [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x328afe1b [0198.982] RtlRandomEx (in: Seed=0x9a6f878 | out: Seed=0x9a6f878) returned 0x73ca5f11 [0198.991] ReadFile (in: hFile=0x1cb4, lpBuffer=0x14a51478, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x9a6f874, lpOverlapped=0x0 | out: lpBuffer=0x14a51478*, lpNumberOfBytesRead=0x9a6f874*=0x100, lpOverlapped=0x0) returned 1 [0198.991] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.991] WriteFile (in: hFile=0x1cb4, lpBuffer=0x14a55080*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x9a6f878, lpOverlapped=0x0 | out: lpBuffer=0x14a55080*, lpNumberOfBytesWritten=0x9a6f878*=0x100, lpOverlapped=0x0) returned 1 [0203.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063480 [0203.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634a8 [0203.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634a8) returned 1 [0203.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a55080) returned 1 [0203.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a51478) returned 1 [0203.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ef8) returned 1 [0203.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6698) returned 1 [0203.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69120 [0203.438] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.438] WriteFile (in: hFile=0x1cb4, lpBuffer=0x84060d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9a6f8ec, lpOverlapped=0x0 | out: lpBuffer=0x84060d8*, lpNumberOfBytesWritten=0x9a6f8ec*=0x10c, lpOverlapped=0x0) returned 1 [0204.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 [0204.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69150) returned 1 [0204.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634a8) returned 1 [0204.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69120) returned 1 [0204.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063480) returned 1 [0204.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf90) returned 1 [0204.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c030) returned 1 [0204.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0204.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e2b18 [0204.703] wcscpy (in: _Dest=0x81e2b18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" [0204.703] wcscat (in: _Dest=0x81e2b18, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json.f0dbec" [0204.703] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0x9a6f870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3c098 [0207.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c098) returned 1 [0207.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8310110) returned 1 [0207.859] NtQueryInformationFile (in: FileHandle=0x1cb4, IoStatusBlock=0x9a6f848, FileInformation=0x9a6f850, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9a6f848, FileInformation=0x9a6f850) returned 0x0 [0207.859] NtSetInformationFile (FileHandle=0x1cb4, IoStatusBlock=0x9a6f848, FileInformation=0x9a6f850, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2b18) returned 1 [0208.103] FlushFileBuffers (hFile=0x1cb4) returned 1 [0208.105] CloseHandle (hObject=0x1cb4) returned 1 [0208.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d80b0 [0208.265] wcscpy (in: _Dest=0x81d80b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" [0208.265] wcscat (in: _Dest=0x81d80b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\F0DBEC-Readme.txt" [0208.265] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0208.265] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11cc [0208.874] WriteFile (in: hFile=0x11cc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9a6f894, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9a6f894*=0x70c, lpOverlapped=0x0) returned 1 [0209.457] CloseHandle (hObject=0x11cc) returned 1 [0209.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d80b0) returned 1 [0209.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a42b0) returned 1 Thread: id = 5554 os_tid = 0x12b4 [0186.084] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json")) returned 0x2020 [0190.240] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0198.996] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb8 [0198.997] GetFileSizeEx (in: hFile=0x1cb8, lpFileSize=0x113fff40 | out: lpFileSize=0x113fff40*=269) returned 1 [0198.997] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.997] ReadFile (in: hFile=0x1cb8, lpBuffer=0x113fff4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x113fff28, lpOverlapped=0x0 | out: lpBuffer=0x113fff4c*, lpNumberOfBytesRead=0x113fff28*=0x4, lpOverlapped=0x0) returned 1 [0198.999] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd28 [0199.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0199.000] NtQuerySystemTime (in: CurrentTime=0x113ffec8 | out: CurrentTime=0x113ffec8*=132471540668904000) returned 0x0 [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x785f4acb [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x38eb4e24 [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x9ceea1c [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x2c808baf [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x5ef62d6f [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x28592e3b [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x148430f6 [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x4263986a [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x58edacee [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x36a0fc4a [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x2e4e9a95 [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x37f7512d [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x10cc28c1 [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0xfc55b52 [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x489b69af [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x10767741 [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x5b638caf [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x1e6c603a [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x2f4ffe7f [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x547d40b8 [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x582c26cc [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x3275518d [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x426ad1b9 [0199.000] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x28ae4288 [0199.001] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x4180e9ae [0199.001] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x253510a8 [0199.001] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x5c4fb6c3 [0199.001] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0xc22b510 [0199.001] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x13177d6b [0199.001] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x3dd9563c [0199.001] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x57ab9d2f [0199.001] RtlRandomEx (in: Seed=0x113ffec0 | out: Seed=0x113ffec0) returned 0x2591f968 [0199.010] ReadFile (in: hFile=0x1cb8, lpBuffer=0x14a58c88, nNumberOfBytesToRead=0x10d, lpNumberOfBytesRead=0x113ffebc, lpOverlapped=0x0 | out: lpBuffer=0x14a58c88*, lpNumberOfBytesRead=0x113ffebc*=0x10d, lpOverlapped=0x0) returned 1 [0199.010] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.010] WriteFile (in: hFile=0x1cb8, lpBuffer=0x14a5c890*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x113ffec0, lpOverlapped=0x0 | out: lpBuffer=0x14a5c890*, lpNumberOfBytesWritten=0x113ffec0*=0x10d, lpOverlapped=0x0) returned 1 [0203.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634d0 [0203.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634f8 [0203.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634f8) returned 1 [0203.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a5c890) returned 1 [0203.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a58c88) returned 1 [0203.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e08) returned 1 [0203.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5c30) returned 1 [0203.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ae0 [0203.441] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.442] WriteFile (in: hFile=0x1cb8, lpBuffer=0x84061f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x113fff34, lpOverlapped=0x0 | out: lpBuffer=0x84061f0*, lpNumberOfBytesWritten=0x113fff34*=0x10c, lpOverlapped=0x0) returned 1 [0204.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84061f0) returned 1 [0204.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b10) returned 1 [0204.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634f8) returned 1 [0204.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ae0) returned 1 [0204.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634d0) returned 1 [0204.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd28) returned 1 [0204.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b838) returned 1 [0204.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0204.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e2c40 [0204.706] wcscpy (in: _Dest=0x81e2c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" [0204.706] wcscat (in: _Dest=0x81e2c40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json.f0dbec" [0204.706] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0x113ffeb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3c1e0 [0207.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1e0) returned 1 [0207.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x830f648) returned 1 [0207.865] NtQueryInformationFile (in: FileHandle=0x1cb8, IoStatusBlock=0x113ffe90, FileInformation=0x113ffe98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x113ffe90, FileInformation=0x113ffe98) returned 0x0 [0207.865] NtSetInformationFile (FileHandle=0x1cb8, IoStatusBlock=0x113ffe90, FileInformation=0x113ffe98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2c40) returned 1 [0208.107] FlushFileBuffers (hFile=0x1cb8) returned 1 [0208.413] CloseHandle (hObject=0x1cb8) returned 1 [0208.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e2b18 [0208.824] wcscpy (in: _Dest=0x81e2b18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" [0208.824] wcscat (in: _Dest=0x81e2b18, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\F0DBEC-Readme.txt" [0208.824] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0208.825] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18f8 [0209.519] WriteFile (in: hFile=0x18f8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x113ffedc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x113ffedc*=0x70c, lpOverlapped=0x0) returned 1 [0209.528] CloseHandle (hObject=0x18f8) returned 1 [0209.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2b18) returned 1 [0209.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a43d8) returned 1 Thread: id = 5555 os_tid = 0xf48 [0186.085] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json")) returned 0x2020 [0190.240] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0199.011] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cc0 [0199.012] GetFileSizeEx (in: hFile=0x1cc0, lpFileSize=0x1010fad8 | out: lpFileSize=0x1010fad8*=215) returned 1 [0199.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0199.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ac80 [0199.012] NtQuerySystemTime (in: CurrentTime=0x1010fa60 | out: CurrentTime=0x1010fa60*=132471540669060000) returned 0x0 [0199.012] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x575e0664 [0199.012] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x7c0325f3 [0199.012] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x35d626b0 [0199.012] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x258f44a2 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x7532f455 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x6bc100da [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x5f1c3e2c [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x35047649 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0xe5527a5 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x7f748133 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x17e11f0b [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x54a85faf [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x54e353b1 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x4a2c466c [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x77e99ea7 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x8855e64 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x454cca5d [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x5aaedaaf [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x3b243e8e [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x3e24068e [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x6712c60e [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x398b362f [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x5937c142 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x59a2f1de [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x3d7102a5 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x1bfcab5a [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x7f55dae8 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x584e1686 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x7c8c3882 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x59df3049 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x13001b69 [0199.013] RtlRandomEx (in: Seed=0x1010fa58 | out: Seed=0x1010fa58) returned 0x1a630289 [0199.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a60498 [0199.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a640a0 [0199.024] ReadFile (in: hFile=0x1cc0, lpBuffer=0x14a60498, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0x1010fa54, lpOverlapped=0x0 | out: lpBuffer=0x14a60498*, lpNumberOfBytesRead=0x1010fa54*=0xd7, lpOverlapped=0x0) returned 1 [0199.026] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.026] WriteFile (in: hFile=0x1cc0, lpBuffer=0x14a640a0*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x1010fa58, lpOverlapped=0x0 | out: lpBuffer=0x14a640a0*, lpNumberOfBytesWritten=0x1010fa58*=0xd7, lpOverlapped=0x0) returned 1 [0203.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063520 [0203.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063548 [0203.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063548) returned 1 [0203.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a640a0) returned 1 [0203.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a60498) returned 1 [0203.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f332b8) returned 1 [0203.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6728) returned 1 [0203.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69a80 [0203.444] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.444] WriteFile (in: hFile=0x1cc0, lpBuffer=0x8406bc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1010facc, lpOverlapped=0x0 | out: lpBuffer=0x8406bc8*, lpNumberOfBytesWritten=0x1010facc*=0x10c, lpOverlapped=0x0) returned 1 [0205.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406bc8) returned 1 [0205.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ab0) returned 1 [0205.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063548) returned 1 [0205.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a80) returned 1 [0205.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063520) returned 1 [0205.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0205.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0205.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0205.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8188018 [0205.415] wcscpy (in: _Dest=0x8188018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" [0205.415] wcscat (in: _Dest=0x8188018, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json.f0dbec" [0205.415] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json.f0dbec", NtPathName=0x1010fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0205.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3c328 [0207.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c328) returned 1 [0207.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400578) returned 1 [0207.915] NtQueryInformationFile (in: FileHandle=0x1cc0, IoStatusBlock=0x1010fa28, FileInformation=0x1010fa30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1010fa28, FileInformation=0x1010fa30) returned 0x0 [0207.915] NtSetInformationFile (FileHandle=0x1cc0, IoStatusBlock=0x1010fa28, FileInformation=0x1010fa30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188018) returned 1 [0208.146] FlushFileBuffers (hFile=0x1cc0) returned 1 [0208.157] CloseHandle (hObject=0x1cc0) returned 1 [0208.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81f0428 [0208.455] wcscpy (in: _Dest=0x81f0428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" [0208.455] wcscat (in: _Dest=0x81f0428, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\F0DBEC-Readme.txt" [0208.455] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\f0dbec-readme.txt")) returned 0xffffffff [0208.456] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1aa0 [0208.878] WriteFile (in: hFile=0x1aa0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1010fa74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1010fa74*=0x70c, lpOverlapped=0x0) returned 1 [0209.469] CloseHandle (hObject=0x1aa0) returned 1 [0209.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0428) returned 1 [0209.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4500) returned 1 Thread: id = 5556 os_tid = 0xb50 [0186.086] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json")) returned 0x2020 [0190.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0198.831] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2280 [0198.832] GetFileSizeEx (in: hFile=0x2280, lpFileSize=0x12a3fd68 | out: lpFileSize=0x12a3fd68*=332) returned 1 [0198.832] SetFilePointerEx (in: hFile=0x2280, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.832] ReadFile (in: hFile=0x2280, lpBuffer=0x12a3fd74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12a3fd50, lpOverlapped=0x0 | out: lpBuffer=0x12a3fd74*, lpNumberOfBytesRead=0x12a3fd50*=0x4, lpOverlapped=0x0) returned 1 [0198.834] SetFilePointerEx (in: hFile=0x2280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0198.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0198.835] NtQuerySystemTime (in: CurrentTime=0x12a3fcf0 | out: CurrentTime=0x12a3fcf0*=132471540667188000) returned 0x0 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x6fb0c776 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x4476f32a [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x23e680bb [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x26dcf27a [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x404cbc08 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x27368158 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x14fa2e31 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x7c63760 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x4c1aace7 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x1b4b7f52 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x12f92a81 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x124dc781 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x8c68dd0 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x7bd93f00 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x4a98d65b [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x3a046bd8 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x2a8fae64 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x46839fb1 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x13240341 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x3026a9df [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x359cf70 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x4b46dcf8 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x2d7ce72f [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x774cab60 [0198.835] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x5dd8baf7 [0198.836] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x247487af [0198.836] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x3408da86 [0198.836] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x7f811292 [0198.836] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x570da628 [0198.836] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x19a5b8e6 [0198.836] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x8ca90be [0198.836] RtlRandomEx (in: Seed=0x12a3fce8 | out: Seed=0x12a3fce8) returned 0x464ca585 [0198.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149820e0 [0198.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1497a8d0 [0198.847] ReadFile (in: hFile=0x2280, lpBuffer=0x149820e0, nNumberOfBytesToRead=0x14c, lpNumberOfBytesRead=0x12a3fce4, lpOverlapped=0x0 | out: lpBuffer=0x149820e0*, lpNumberOfBytesRead=0x12a3fce4*=0x14c, lpOverlapped=0x0) returned 1 [0198.848] SetFilePointerEx (in: hFile=0x2280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.848] WriteFile (in: hFile=0x2280, lpBuffer=0x1497a8d0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x12a3fce8, lpOverlapped=0x0 | out: lpBuffer=0x1497a8d0*, lpNumberOfBytesWritten=0x12a3fce8*=0x14c, lpOverlapped=0x0) returned 1 [0202.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062e90 [0202.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d78 [0202.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d78) returned 1 [0202.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1497a8d0) returned 1 [0202.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149820e0) returned 1 [0202.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d18) returned 1 [0202.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7028) returned 1 [0202.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69840 [0202.163] SetFilePointerEx (in: hFile=0x2280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.164] WriteFile (in: hFile=0x2280, lpBuffer=0x81e0138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12a3fd5c, lpOverlapped=0x0 | out: lpBuffer=0x81e0138*, lpNumberOfBytesWritten=0x12a3fd5c*=0x10c, lpOverlapped=0x0) returned 1 [0203.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0138) returned 1 [0203.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69870) returned 1 [0203.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d78) returned 1 [0203.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69840) returned 1 [0203.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e90) returned 1 [0203.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0203.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0203.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0203.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0300 [0203.942] wcscpy (in: _Dest=0x81f0300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" [0203.942] wcscat (in: _Dest=0x81f0300, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json.f0dbec" [0203.942] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0x12a3fce0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3d7a8 [0204.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d7a8) returned 1 [0204.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81faa08) returned 1 [0204.427] NtQueryInformationFile (in: FileHandle=0x2280, IoStatusBlock=0x12a3fcb8, FileInformation=0x12a3fcc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12a3fcb8, FileInformation=0x12a3fcc0) returned 0x0 [0204.427] NtSetInformationFile (FileHandle=0x2280, IoStatusBlock=0x12a3fcb8, FileInformation=0x12a3fcc0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0300) returned 1 [0207.399] FlushFileBuffers (hFile=0x2280) returned 1 [0207.413] CloseHandle (hObject=0x2280) returned 1 [0208.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8187ef0 [0208.572] wcscpy (in: _Dest=0x8187ef0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" [0208.572] wcscat (in: _Dest=0x8187ef0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\F0DBEC-Readme.txt" [0208.572] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0208.572] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.046] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12a3fd04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12a3fd04*=0x70c, lpOverlapped=0x0) returned 1 [0209.048] CloseHandle (hObject=0x1bc4) returned 1 [0209.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187ef0) returned 1 [0209.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4628) returned 1 Thread: id = 5557 os_tid = 0x2ac [0186.094] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json")) returned 0x2020 [0190.242] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0198.849] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17a4 [0198.850] GetFileSizeEx (in: hFile=0x17a4, lpFileSize=0x7f7f870 | out: lpFileSize=0x7f7f870*=239) returned 1 [0198.850] SetFilePointerEx (in: hFile=0x17a4, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.850] ReadFile (in: hFile=0x17a4, lpBuffer=0x7f7f87c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f7f858, lpOverlapped=0x0 | out: lpBuffer=0x7f7f87c*, lpNumberOfBytesRead=0x7f7f858*=0x4, lpOverlapped=0x0) returned 1 [0198.852] SetFilePointerEx (in: hFile=0x17a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0198.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0198.852] NtQuerySystemTime (in: CurrentTime=0x7f7f7f8 | out: CurrentTime=0x7f7f7f8*=132471540667344000) returned 0x0 [0198.852] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x2c0fd974 [0198.852] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x163d4a3d [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0xfd3931f [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x3911e7b9 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x24c54653 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x7d08eaa9 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x6cfecc46 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x17193d46 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x530ca1b3 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x33fcebfa [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x6a501392 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x54309809 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x12dc6a01 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x102ba328 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x5803d685 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x55281d22 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x70e12196 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x2e48c611 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x606bde4d [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x6bc8e22a [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x2bc72fb6 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x30294f68 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x714a1463 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x13cf6641 [0198.853] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x14954f16 [0198.854] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x52b0cde8 [0198.854] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x48cb7aa1 [0198.854] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x2777c52f [0198.854] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x6a3e4234 [0198.854] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x185c4497 [0198.854] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x4f6d543b [0198.854] RtlRandomEx (in: Seed=0x7f7f7f0 | out: Seed=0x7f7f7f0) returned 0x7a9ac72a [0198.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1497e4d8 [0198.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149730c0 [0198.876] ReadFile (in: hFile=0x17a4, lpBuffer=0x1497e4d8, nNumberOfBytesToRead=0xef, lpNumberOfBytesRead=0x7f7f7ec, lpOverlapped=0x0 | out: lpBuffer=0x1497e4d8*, lpNumberOfBytesRead=0x7f7f7ec*=0xef, lpOverlapped=0x0) returned 1 [0198.876] SetFilePointerEx (in: hFile=0x17a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.876] WriteFile (in: hFile=0x17a4, lpBuffer=0x149730c0*, nNumberOfBytesToWrite=0xef, lpNumberOfBytesWritten=0x7f7f7f0, lpOverlapped=0x0 | out: lpBuffer=0x149730c0*, lpNumberOfBytesWritten=0x7f7f7f0*=0xef, lpOverlapped=0x0) returned 1 [0202.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062da0 [0202.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062dc8 [0202.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062dc8) returned 1 [0202.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149730c0) returned 1 [0202.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1497e4d8) returned 1 [0202.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0202.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e75c8) returned 1 [0202.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69960 [0202.165] SetFilePointerEx (in: hFile=0x17a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.166] WriteFile (in: hFile=0x17a4, lpBuffer=0x81e1088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7f7f864, lpOverlapped=0x0 | out: lpBuffer=0x81e1088*, lpNumberOfBytesWritten=0x7f7f864*=0x10c, lpOverlapped=0x0) returned 1 [0203.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1088) returned 1 [0203.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69990) returned 1 [0203.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062dc8) returned 1 [0203.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69960) returned 1 [0203.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062da0) returned 1 [0203.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0203.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0203.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0203.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f01d8 [0203.947] wcscpy (in: _Dest=0x81f01d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" [0203.947] wcscat (in: _Dest=0x81f01d8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json.f0dbec" [0203.947] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0x7f7f7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3da38 [0204.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3da38) returned 1 [0204.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8200b10) returned 1 [0204.425] NtQueryInformationFile (in: FileHandle=0x17a4, IoStatusBlock=0x7f7f7c0, FileInformation=0x7f7f7c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7f7f7c0, FileInformation=0x7f7f7c8) returned 0x0 [0204.425] NtSetInformationFile (FileHandle=0x17a4, IoStatusBlock=0x7f7f7c0, FileInformation=0x7f7f7c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f01d8) returned 1 [0207.395] FlushFileBuffers (hFile=0x17a4) returned 1 [0207.415] CloseHandle (hObject=0x17a4) returned 1 [0208.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81866a8 [0208.580] wcscpy (in: _Dest=0x81866a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" [0208.580] wcscat (in: _Dest=0x81866a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\F0DBEC-Readme.txt" [0208.580] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0208.580] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.049] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7f7f80c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7f7f80c*=0x70c, lpOverlapped=0x0) returned 1 [0209.051] CloseHandle (hObject=0x1bc4) returned 1 [0209.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81866a8) returned 1 [0209.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4750) returned 1 Thread: id = 5558 os_tid = 0x1520 [0186.097] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json")) returned 0x2020 [0190.242] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0198.877] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a84 [0198.878] GetFileSizeEx (in: hFile=0x1a84, lpFileSize=0x864fdd8 | out: lpFileSize=0x864fdd8*=236) returned 1 [0198.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0198.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0198.878] NtQuerySystemTime (in: CurrentTime=0x864fd60 | out: CurrentTime=0x864fd60*=132471540667656000) returned 0x0 [0198.878] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x68b3486a [0198.878] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x291ca122 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x3ee2128b [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x2ccd8e8e [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x1d186a6d [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x2409f677 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x1e5bcb6 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x6890a279 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x21873878 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x3687f8af [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x2be4165a [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x46c4e3db [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x5cee86f1 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x342cdc14 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0xe9c5c60 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x1222eec1 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x627fa54 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0xcbfabfb [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x73d06094 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x2295adc8 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x1be27dec [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x7a8a5975 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x3e9620b2 [0198.879] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x74488415 [0198.880] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x7de4eda0 [0198.880] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x620a0722 [0198.880] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x217007d8 [0198.880] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x552bae4b [0198.880] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x5c431b71 [0198.880] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x1de2cdeb [0198.880] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x54d88654 [0198.880] RtlRandomEx (in: Seed=0x864fd58 | out: Seed=0x864fd58) returned 0x61b16067 [0198.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14976cc8 [0198.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1496b8b0 [0198.893] ReadFile (in: hFile=0x1a84, lpBuffer=0x14976cc8, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0x864fd54, lpOverlapped=0x0 | out: lpBuffer=0x14976cc8*, lpNumberOfBytesRead=0x864fd54*=0xec, lpOverlapped=0x0) returned 1 [0198.896] SetFilePointerEx (in: hFile=0x1a84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.896] WriteFile (in: hFile=0x1a84, lpBuffer=0x1496b8b0*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x864fd58, lpOverlapped=0x0 | out: lpBuffer=0x1496b8b0*, lpNumberOfBytesWritten=0x864fd58*=0xec, lpOverlapped=0x0) returned 1 [0203.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063318 [0203.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063408 [0203.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063408) returned 1 [0203.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1496b8b0) returned 1 [0203.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14976cc8) returned 1 [0203.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32520) returned 1 [0203.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e62f0) returned 1 [0203.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e695a0 [0203.261] SetFilePointerEx (in: hFile=0x1a84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.261] WriteFile (in: hFile=0x1a84, lpBuffer=0x8406650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x864fdcc, lpOverlapped=0x0 | out: lpBuffer=0x8406650*, lpNumberOfBytesWritten=0x864fdcc*=0x10c, lpOverlapped=0x0) returned 1 [0207.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 [0207.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695d0) returned 1 [0207.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063408) returned 1 [0207.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695a0) returned 1 [0207.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063318) returned 1 [0207.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0207.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0207.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0207.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81eff88 [0207.553] wcscpy (in: _Dest=0x81eff88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" [0207.553] wcscat (in: _Dest=0x81eff88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json.f0dbec" [0207.554] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json.f0dbec", NtPathName=0x864fd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3bf50 [0207.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bf50) returned 1 [0207.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fe890) returned 1 [0207.996] NtQueryInformationFile (in: FileHandle=0x1a84, IoStatusBlock=0x864fd28, FileInformation=0x864fd30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x864fd28, FileInformation=0x864fd30) returned 0x0 [0207.996] NtSetInformationFile (FileHandle=0x1a84, IoStatusBlock=0x864fd28, FileInformation=0x864fd30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff88) returned 1 [0208.211] FlushFileBuffers (hFile=0x1a84) returned 1 [0208.218] CloseHandle (hObject=0x1a84) returned 1 [0208.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d3928 [0208.537] wcscpy (in: _Dest=0x81d3928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" [0208.537] wcscat (in: _Dest=0x81d3928, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\F0DBEC-Readme.txt" [0208.537] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\f0dbec-readme.txt")) returned 0xffffffff [0208.537] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.004] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x864fd74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x864fd74*=0x70c, lpOverlapped=0x0) returned 1 [0209.006] CloseHandle (hObject=0x1bc4) returned 1 [0209.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3928) returned 1 [0209.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4878) returned 1 Thread: id = 5559 os_tid = 0xf6c [0186.098] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json")) returned 0x2020 [0190.243] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0198.897] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x29f0 [0198.898] GetFileSizeEx (in: hFile=0x29f0, lpFileSize=0x1161fd78 | out: lpFileSize=0x1161fd78*=249) returned 1 [0198.898] SetFilePointerEx (in: hFile=0x29f0, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.898] ReadFile (in: hFile=0x29f0, lpBuffer=0x1161fd84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1161fd60, lpOverlapped=0x0 | out: lpBuffer=0x1161fd84*, lpNumberOfBytesRead=0x1161fd60*=0x4, lpOverlapped=0x0) returned 1 [0198.906] SetFilePointerEx (in: hFile=0x29f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0198.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8fb8 [0198.906] NtQuerySystemTime (in: CurrentTime=0x1161fd00 | out: CurrentTime=0x1161fd00*=132471540667968000) returned 0x0 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x4d22cf9d [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x611dfebe [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x2ee8b177 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x660d8539 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x6de4f2f [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x78ba3ca3 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x696f4fe4 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x66bfcc72 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x403b0ab5 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x1e20bda4 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x416c202 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x74644418 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x58376828 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x6d9881ee [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x2b539086 [0198.906] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x3fd7f982 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x4b90934a [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x497b6e34 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x463c2594 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x77b99331 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x83bf36c [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x4d0e8ba4 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x34287025 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x7c191a57 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x5f5b8606 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x94cbd6d [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x36665b9f [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x6bfea4f1 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x2f918568 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x4cfc984e [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0xd807035 [0198.907] RtlRandomEx (in: Seed=0x1161fcf8 | out: Seed=0x1161fcf8) returned 0x6a037e3c [0198.917] ReadFile (in: hFile=0x29f0, lpBuffer=0x1496f4b8, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x1161fcf4, lpOverlapped=0x0 | out: lpBuffer=0x1496f4b8*, lpNumberOfBytesRead=0x1161fcf4*=0xf9, lpOverlapped=0x0) returned 1 [0198.917] SetFilePointerEx (in: hFile=0x29f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.917] WriteFile (in: hFile=0x29f0, lpBuffer=0x1495c890*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x1161fcf8, lpOverlapped=0x0 | out: lpBuffer=0x1495c890*, lpNumberOfBytesWritten=0x1161fcf8*=0xf9, lpOverlapped=0x0) returned 1 [0204.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0204.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d30 [0204.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0204.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1495c890) returned 1 [0204.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1496f4b8) returned 1 [0204.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32778) returned 1 [0204.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e63c8) returned 1 [0204.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fc48 [0204.289] SetFilePointerEx (in: hFile=0x29f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.289] WriteFile (in: hFile=0x29f0, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1161fd6c, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0x1161fd6c*=0x10c, lpOverlapped=0x0) returned 1 [0207.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0207.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0207.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0207.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0207.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0207.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0207.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d9008) returned 1 [0207.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8f40) returned 1 [0207.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e3458 [0207.884] wcscpy (in: _Dest=0x81e3458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" [0207.884] wcscat (in: _Dest=0x81e3458, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json.f0dbec" [0207.884] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0x1161fcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3c098 [0208.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c098) returned 1 [0208.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8316ab8) returned 1 [0208.116] NtQueryInformationFile (in: FileHandle=0x29f0, IoStatusBlock=0x1161fcc8, FileInformation=0x1161fcd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1161fcc8, FileInformation=0x1161fcd0) returned 0x0 [0208.116] NtSetInformationFile (FileHandle=0x29f0, IoStatusBlock=0x1161fcc8, FileInformation=0x1161fcd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3458) returned 1 [0208.278] FlushFileBuffers (hFile=0x29f0) returned 1 [0208.290] CloseHandle (hObject=0x29f0) returned 1 [0208.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81d4140 [0208.566] wcscpy (in: _Dest=0x81d4140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" [0208.566] wcscat (in: _Dest=0x81d4140, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\F0DBEC-Readme.txt" [0208.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0208.566] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.039] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1161fd14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1161fd14*=0x70c, lpOverlapped=0x0) returned 1 [0209.041] CloseHandle (hObject=0x1bc4) returned 1 [0209.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4140) returned 1 [0209.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a49a0) returned 1 Thread: id = 5560 os_tid = 0x3c8 [0186.098] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json")) returned 0x2020 [0190.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0198.919] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x210c [0198.919] GetFileSizeEx (in: hFile=0x210c, lpFileSize=0x132efce8 | out: lpFileSize=0x132efce8*=232) returned 1 [0198.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8fb8 [0198.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8fe0 [0198.919] NtQuerySystemTime (in: CurrentTime=0x132efc70 | out: CurrentTime=0x132efc70*=132471540668124000) returned 0x0 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x12b471d9 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x5f05f4dd [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x5502c17d [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x783d01b [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0xd511cf1 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x45e6e75 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x494f264c [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x114cb301 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x2d6e39b9 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x11cd3d41 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x472315f7 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x13ba4071 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0xbdb70a8 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x3ef5f9a9 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0xe14c768 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x1463206d [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x29a1f268 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x2c6bc8f8 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x55524011 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x2f814454 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x6b801067 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x669f5cba [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x739593db [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x109c4a92 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x3a146913 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x3f5b5e78 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x613e1d2f [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x70cd1cc9 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x50f33603 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x6be018c0 [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0x620fe87b [0198.920] RtlRandomEx (in: Seed=0x132efc68 | out: Seed=0x132efc68) returned 0xea55f63 [0198.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14960498 [0198.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14955080 [0198.929] ReadFile (in: hFile=0x210c, lpBuffer=0x14960498, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x132efc64, lpOverlapped=0x0 | out: lpBuffer=0x14960498*, lpNumberOfBytesRead=0x132efc64*=0xe8, lpOverlapped=0x0) returned 1 [0198.932] SetFilePointerEx (in: hFile=0x210c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.932] WriteFile (in: hFile=0x210c, lpBuffer=0x14955080*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x132efc68, lpOverlapped=0x0 | out: lpBuffer=0x14955080*, lpNumberOfBytesWritten=0x132efc68*=0xe8, lpOverlapped=0x0) returned 1 [0204.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42588 [0204.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a60 [0204.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0204.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14955080) returned 1 [0204.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14960498) returned 1 [0204.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32e80) returned 1 [0204.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6068) returned 1 [0204.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fdc8 [0204.287] SetFilePointerEx (in: hFile=0x210c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.287] WriteFile (in: hFile=0x210c, lpBuffer=0x30bc308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x132efcdc, lpOverlapped=0x0 | out: lpBuffer=0x30bc308*, lpNumberOfBytesWritten=0x132efcdc*=0x10c, lpOverlapped=0x0) returned 1 [0207.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0207.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff78) returned 1 [0207.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0207.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdc8) returned 1 [0207.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0207.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fb8) returned 1 [0207.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8f18) returned 1 [0207.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49b28) returned 1 [0207.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e29f0 [0207.263] wcscpy (in: _Dest=0x81e29f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" [0207.263] wcscat (in: _Dest=0x81e29f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json.f0dbec" [0207.263] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json.f0dbec", NtPathName=0x132efc60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3cff8 [0208.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cff8) returned 1 [0208.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82013b0) returned 1 [0208.340] NtQueryInformationFile (in: FileHandle=0x210c, IoStatusBlock=0x132efc38, FileInformation=0x132efc40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x132efc38, FileInformation=0x132efc40) returned 0x0 [0208.341] NtSetInformationFile (FileHandle=0x210c, IoStatusBlock=0x132efc38, FileInformation=0x132efc40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e29f0) returned 1 [0208.791] FlushFileBuffers (hFile=0x210c) returned 1 [0208.802] CloseHandle (hObject=0x210c) returned 1 [0208.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3040a68 [0208.903] wcscpy (in: _Dest=0x3040a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" [0208.903] wcscat (in: _Dest=0x3040a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\F0DBEC-Readme.txt" [0208.903] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\f0dbec-readme.txt")) returned 0xffffffff [0208.903] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cbc [0209.572] WriteFile (in: hFile=0x2cbc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x132efc84, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x132efc84*=0x70c, lpOverlapped=0x0) returned 1 [0209.644] CloseHandle (hObject=0x2cbc) returned 1 [0209.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 [0209.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4ac8) returned 1 Thread: id = 5561 os_tid = 0xfb0 [0186.099] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json")) returned 0x2020 [0190.245] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0198.932] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22a8 [0198.933] GetFileSizeEx (in: hFile=0x22a8, lpFileSize=0xd53f9f0 | out: lpFileSize=0xd53f9f0*=238) returned 1 [0198.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b360 [0198.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0198.933] NtQuerySystemTime (in: CurrentTime=0xd53f978 | out: CurrentTime=0xd53f978*=132471540668280000) returned 0x0 [0198.933] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x289fa72 [0198.933] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x23bf522e [0198.933] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x5aa8a521 [0198.933] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x5194c82c [0198.933] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x261fd77b [0198.933] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x1d5009b [0198.933] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x247e074f [0198.933] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x867d14c [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x1b4ce46c [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x2e7ab2d [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x161f7c87 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x4bb5f699 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x138d66af [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x60aad66e [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x78bb5ddc [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x6f237c30 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x1121da41 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x34cb9c37 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x162c61ad [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x3daa8dc4 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0xa19fc13 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x55bcc3ba [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x6512916b [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x32df354 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x113065db [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x4f47b0e [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x51c9f1b0 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x2a7b02af [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x1179c7af [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x3ef3c135 [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x7fa9cf8e [0198.934] RtlRandomEx (in: Seed=0xd53f970 | out: Seed=0xd53f970) returned 0x2fd5a485 [0198.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14958c88 [0198.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1494d870 [0198.944] ReadFile (in: hFile=0x22a8, lpBuffer=0x14958c88, nNumberOfBytesToRead=0xee, lpNumberOfBytesRead=0xd53f96c, lpOverlapped=0x0 | out: lpBuffer=0x14958c88*, lpNumberOfBytesRead=0xd53f96c*=0xee, lpOverlapped=0x0) returned 1 [0198.947] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.947] WriteFile (in: hFile=0x22a8, lpBuffer=0x1494d870*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0xd53f970, lpOverlapped=0x0 | out: lpBuffer=0x1494d870*, lpNumberOfBytesWritten=0xd53f970*=0xee, lpOverlapped=0x0) returned 1 [0204.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d80 [0204.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42448 [0204.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42448) returned 1 [0204.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1494d870) returned 1 [0204.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14958c88) returned 1 [0204.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32868) returned 1 [0204.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6020) returned 1 [0204.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e701b8 [0204.285] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.285] WriteFile (in: hFile=0x22a8, lpBuffer=0x30bd258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd53f9e4, lpOverlapped=0x0 | out: lpBuffer=0x30bd258*, lpNumberOfBytesWritten=0xd53f9e4*=0x10c, lpOverlapped=0x0) returned 1 [0207.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0207.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0207.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42448) returned 1 [0207.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0207.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d80) returned 1 [0207.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b360) returned 1 [0207.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0207.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a4d8) returned 1 [0207.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0b18 [0207.260] wcscpy (in: _Dest=0x81f0b18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" [0207.260] wcscat (in: _Dest=0x81f0b18, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json.f0dbec" [0207.260] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0xd53f968, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3d140 [0208.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d140) returned 1 [0208.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8204998) returned 1 [0208.337] NtQueryInformationFile (in: FileHandle=0x22a8, IoStatusBlock=0xd53f940, FileInformation=0xd53f948, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd53f940, FileInformation=0xd53f948) returned 0x0 [0208.337] NtSetInformationFile (FileHandle=0x22a8, IoStatusBlock=0xd53f940, FileInformation=0xd53f948, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0b18) returned 1 [0208.785] FlushFileBuffers (hFile=0x22a8) returned 1 [0208.794] CloseHandle (hObject=0x22a8) returned 1 [0208.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3041720 [0208.902] wcscpy (in: _Dest=0x3041720, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" [0208.902] wcscat (in: _Dest=0x3041720, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\F0DBEC-Readme.txt" [0208.902] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0208.902] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1744 [0209.711] WriteFile (in: hFile=0x1744, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd53f98c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd53f98c*=0x70c, lpOverlapped=0x0) returned 1 [0209.713] CloseHandle (hObject=0x1744) returned 1 [0209.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0209.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4bf0) returned 1 Thread: id = 5562 os_tid = 0xff4 [0186.104] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json")) returned 0x2020 [0190.245] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0200.111] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dc8 [0200.112] GetFileSizeEx (in: hFile=0x1dc8, lpFileSize=0x1144fa60 | out: lpFileSize=0x1144fa60*=253) returned 1 [0200.112] SetFilePointerEx (in: hFile=0x1dc8, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.112] ReadFile (in: hFile=0x1dc8, lpBuffer=0x1144fa6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1144fa48, lpOverlapped=0x0 | out: lpBuffer=0x1144fa6c*, lpNumberOfBytesRead=0x1144fa48*=0x4, lpOverlapped=0x0) returned 1 [0200.114] SetFilePointerEx (in: hFile=0x1dc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43050 [0200.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42178 [0200.114] NtQuerySystemTime (in: CurrentTime=0x1144f9e8 | out: CurrentTime=0x1144f9e8*=132471540679668000) returned 0x0 [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x7ba8763d [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x31e40e64 [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x21043621 [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x2cd138e0 [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x2406decc [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x56e08023 [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x4b0cf0d0 [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x1bdc224d [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x4d2cffcc [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x702eb5b6 [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x7450e867 [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x7e2eed4c [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x41462716 [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x2fffb31b [0200.114] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x6911402e [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0xc29a464 [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x1eb305dd [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x24ab394d [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x20b3505a [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x1cb738e8 [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0xda54c56 [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x367eaabd [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x2c1410d2 [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x55a0b198 [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x648f0e7 [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x3189d59e [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x6ec3bd9a [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x59b6754f [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x66baa41 [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x215801be [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x63c87769 [0200.115] RtlRandomEx (in: Seed=0x1144f9e0 | out: Seed=0x1144f9e0) returned 0x4ef9b4c1 [0200.124] ReadFile (in: hFile=0x1dc8, lpBuffer=0x14abe4d8, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0x1144f9dc, lpOverlapped=0x0 | out: lpBuffer=0x14abe4d8*, lpNumberOfBytesRead=0x1144f9dc*=0xfd, lpOverlapped=0x0) returned 1 [0200.124] SetFilePointerEx (in: hFile=0x1dc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.124] WriteFile (in: hFile=0x1dc8, lpBuffer=0x14ac20e0*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x1144f9e0, lpOverlapped=0x0 | out: lpBuffer=0x14ac20e0*, lpNumberOfBytesWritten=0x1144f9e0*=0xfd, lpOverlapped=0x0) returned 1 [0203.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064380 [0203.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80643a8 [0203.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643a8) returned 1 [0203.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ac20e0) returned 1 [0203.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14abe4d8) returned 1 [0203.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bb68) returned 1 [0203.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4968) returned 1 [0203.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f369b0 [0203.634] SetFilePointerEx (in: hFile=0x1dc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.634] WriteFile (in: hFile=0x1dc8, lpBuffer=0x8320c78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1144fa54, lpOverlapped=0x0 | out: lpBuffer=0x8320c78*, lpNumberOfBytesWritten=0x1144fa54*=0x10c, lpOverlapped=0x0) returned 1 [0204.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320c78) returned 1 [0204.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f369e0) returned 1 [0204.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643a8) returned 1 [0204.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f369b0) returned 1 [0204.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064380) returned 1 [0204.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43050) returned 1 [0204.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0204.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42650) returned 1 [0204.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e1c10 [0204.131] wcscpy (in: _Dest=0x81e1c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" [0204.131] wcscat (in: _Dest=0x81e1c10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json.f0dbec" [0204.131] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0x1144f9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x81f4088 [0204.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4088) returned 1 [0204.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833ce88) returned 1 [0204.525] NtQueryInformationFile (in: FileHandle=0x1dc8, IoStatusBlock=0x1144f9b0, FileInformation=0x1144f9b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1144f9b0, FileInformation=0x1144f9b8) returned 0x0 [0204.525] NtSetInformationFile (FileHandle=0x1dc8, IoStatusBlock=0x1144f9b0, FileInformation=0x1144f9b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1c10) returned 1 [0207.617] FlushFileBuffers (hFile=0x1dc8) returned 1 [0207.661] CloseHandle (hObject=0x1dc8) returned 1 [0208.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e21d8 [0208.030] wcscpy (in: _Dest=0x81e21d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" [0208.030] wcscat (in: _Dest=0x81e21d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\F0DBEC-Readme.txt" [0208.030] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0208.030] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c80 [0208.421] WriteFile (in: hFile=0x1c80, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1144f9fc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1144f9fc*=0x70c, lpOverlapped=0x0) returned 1 [0209.345] CloseHandle (hObject=0x1c80) returned 1 [0209.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e21d8) returned 1 [0209.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4d18) returned 1 Thread: id = 5563 os_tid = 0x3f4 [0186.104] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json")) returned 0x2020 [0190.246] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0200.125] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x59c [0200.126] GetFileSizeEx (in: hFile=0x59c, lpFileSize=0x126ff888 | out: lpFileSize=0x126ff888*=256) returned 1 [0200.126] SetFilePointerEx (in: hFile=0x59c, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.126] ReadFile (in: hFile=0x59c, lpBuffer=0x126ff894, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x126ff870, lpOverlapped=0x0 | out: lpBuffer=0x126ff894*, lpNumberOfBytesRead=0x126ff870*=0x4, lpOverlapped=0x0) returned 1 [0200.127] SetFilePointerEx (in: hFile=0x59c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42178 [0200.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c40 [0200.128] NtQuerySystemTime (in: CurrentTime=0x126ff810 | out: CurrentTime=0x126ff810*=132471540679824000) returned 0x0 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x2fbbfbfc [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x251270ba [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x421f90de [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x2c3bf95a [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x2d868308 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x6f018d68 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x4d0f2e09 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x4dba328 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x2ba92f0d [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x363caae0 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x2a8e6e31 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x6c97d90a [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x2487f331 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x6872bf97 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x621b807d [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x709361f7 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x2ff35d9b [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x3364596b [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x11820d16 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x6e91d669 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0xe627c43 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x73e7a422 [0200.128] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x24c84805 [0200.129] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x475a324e [0200.129] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x7164dcba [0200.129] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x68a7d51 [0200.129] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x1ae86afc [0200.129] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x7a8801b4 [0200.129] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x6b56afc1 [0200.129] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x6a3a0461 [0200.129] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x1ab77fb7 [0200.129] RtlRandomEx (in: Seed=0x126ff808 | out: Seed=0x126ff808) returned 0x357493de [0200.141] ReadFile (in: hFile=0x59c, lpBuffer=0x14ac6060, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x126ff804, lpOverlapped=0x0 | out: lpBuffer=0x14ac6060*, lpNumberOfBytesRead=0x126ff804*=0x100, lpOverlapped=0x0) returned 1 [0200.141] SetFilePointerEx (in: hFile=0x59c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.141] WriteFile (in: hFile=0x59c, lpBuffer=0x14ac9c68*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x126ff808, lpOverlapped=0x0 | out: lpBuffer=0x14ac9c68*, lpNumberOfBytesWritten=0x126ff808*=0x100, lpOverlapped=0x0) returned 1 [0203.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80643d0 [0203.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80643f8 [0203.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643f8) returned 1 [0203.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ac9c68) returned 1 [0203.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ac6060) returned 1 [0203.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0c270) returned 1 [0203.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5c88) returned 1 [0203.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36a10 [0203.637] SetFilePointerEx (in: hFile=0x59c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.637] WriteFile (in: hFile=0x59c, lpBuffer=0x8320d90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x126ff87c, lpOverlapped=0x0 | out: lpBuffer=0x8320d90*, lpNumberOfBytesWritten=0x126ff87c*=0x10c, lpOverlapped=0x0) returned 1 [0204.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320d90) returned 1 [0204.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36a40) returned 1 [0204.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643f8) returned 1 [0204.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36a10) returned 1 [0204.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643d0) returned 1 [0204.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42178) returned 1 [0204.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0204.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43578) returned 1 [0204.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e1ae8 [0204.135] wcscpy (in: _Dest=0x81e1ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" [0204.135] wcscat (in: _Dest=0x81e1ae8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json.f0dbec" [0204.135] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0x126ff800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x81f41d0 [0204.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f41d0) returned 1 [0204.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833cc60) returned 1 [0204.527] NtQueryInformationFile (in: FileHandle=0x59c, IoStatusBlock=0x126ff7d8, FileInformation=0x126ff7e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x126ff7d8, FileInformation=0x126ff7e0) returned 0x0 [0204.527] NtSetInformationFile (FileHandle=0x59c, IoStatusBlock=0x126ff7d8, FileInformation=0x126ff7e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1ae8) returned 1 [0207.624] FlushFileBuffers (hFile=0x59c) returned 1 [0207.664] CloseHandle (hObject=0x59c) returned 1 [0208.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e28c8 [0208.032] wcscpy (in: _Dest=0x81e28c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" [0208.032] wcscat (in: _Dest=0x81e28c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\F0DBEC-Readme.txt" [0208.032] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0208.032] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1440 [0208.426] WriteFile (in: hFile=0x1440, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x126ff824, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x126ff824*=0x70c, lpOverlapped=0x0) returned 1 [0209.351] CloseHandle (hObject=0x1440) returned 1 [0209.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e28c8) returned 1 [0209.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4e40) returned 1 Thread: id = 5564 os_tid = 0x640 [0186.105] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json")) returned 0x2020 [0190.247] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0200.142] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e38 [0200.142] GetFileSizeEx (in: hFile=0x1e38, lpFileSize=0x1056fa10 | out: lpFileSize=0x1056fa10*=271) returned 1 [0200.142] SetFilePointerEx (in: hFile=0x1e38, liDistanceToMove=0x10b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.143] ReadFile (in: hFile=0x1e38, lpBuffer=0x1056fa1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1056f9f8, lpOverlapped=0x0 | out: lpBuffer=0x1056fa1c*, lpNumberOfBytesRead=0x1056f9f8*=0x4, lpOverlapped=0x0) returned 1 [0200.144] SetFilePointerEx (in: hFile=0x1e38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c40 [0200.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0200.144] NtQuerySystemTime (in: CurrentTime=0x1056f998 | out: CurrentTime=0x1056f998*=132471540679980000) returned 0x0 [0200.144] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x6bf5f854 [0200.144] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x4566f451 [0200.144] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x6e4da030 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x47e6b35 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x411e5616 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0xfe20712 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x312bc029 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x5d52bd00 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x38b2d23c [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x61e88c0f [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x64b412aa [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x75258b09 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x3836934c [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x4bc1ed4b [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x1dc7e082 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x5c437a6b [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x14222d02 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x110d60fc [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x36d3784 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x61475c8 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x53fbd01 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x32726071 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0xdfdd807 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x2619d5f8 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x381e3474 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0xf2c2f0d [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x55357392 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x611b5462 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x514e441 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x1db74227 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x278b30b1 [0200.145] RtlRandomEx (in: Seed=0x1056f990 | out: Seed=0x1056f990) returned 0x563a4714 [0200.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14acd870 [0200.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad1478 [0200.157] ReadFile (in: hFile=0x1e38, lpBuffer=0x14acd870, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x1056f98c, lpOverlapped=0x0 | out: lpBuffer=0x14acd870*, lpNumberOfBytesRead=0x1056f98c*=0x10f, lpOverlapped=0x0) returned 1 [0200.157] SetFilePointerEx (in: hFile=0x1e38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.157] WriteFile (in: hFile=0x1e38, lpBuffer=0x14ad1478*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x1056f990, lpOverlapped=0x0 | out: lpBuffer=0x14ad1478*, lpNumberOfBytesWritten=0x1056f990*=0x10f, lpOverlapped=0x0) returned 1 [0203.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064420 [0203.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064448 [0203.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064448) returned 1 [0203.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad1478) returned 1 [0203.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14acd870) returned 1 [0203.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0be38) returned 1 [0203.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5d60) returned 1 [0203.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36a70 [0203.638] SetFilePointerEx (in: hFile=0x1e38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.638] WriteFile (in: hFile=0x1e38, lpBuffer=0x8320ea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1056fa04, lpOverlapped=0x0 | out: lpBuffer=0x8320ea8*, lpNumberOfBytesWritten=0x1056fa04*=0x10c, lpOverlapped=0x0) returned 1 [0204.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320ea8) returned 1 [0204.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36aa0) returned 1 [0204.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064448) returned 1 [0204.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36a70) returned 1 [0204.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064420) returned 1 [0204.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c40) returned 1 [0204.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421f0) returned 1 [0204.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0204.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e3458 [0204.138] wcscpy (in: _Dest=0x81e3458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" [0204.138] wcscat (in: _Dest=0x81e3458, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json.f0dbec" [0204.138] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0x1056f988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x81f4318 [0204.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4318) returned 1 [0204.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336d80) returned 1 [0204.529] NtQueryInformationFile (in: FileHandle=0x1e38, IoStatusBlock=0x1056f960, FileInformation=0x1056f968, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1056f960, FileInformation=0x1056f968) returned 0x0 [0204.529] NtSetInformationFile (FileHandle=0x1e38, IoStatusBlock=0x1056f960, FileInformation=0x1056f968, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3458) returned 1 [0207.628] FlushFileBuffers (hFile=0x1e38) returned 1 [0207.676] CloseHandle (hObject=0x1e38) returned 1 [0208.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e2e90 [0208.035] wcscpy (in: _Dest=0x81e2e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" [0208.035] wcscat (in: _Dest=0x81e2e90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\F0DBEC-Readme.txt" [0208.035] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0208.035] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e38 [0208.428] WriteFile (in: hFile=0x1e38, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1056f9ac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1056f9ac*=0x70c, lpOverlapped=0x0) returned 1 [0209.361] CloseHandle (hObject=0x1e38) returned 1 [0209.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2e90) returned 1 [0209.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a4f68) returned 1 Thread: id = 5565 os_tid = 0x434 [0186.105] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json")) returned 0x2020 [0190.247] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0199.992] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cbc [0199.993] GetFileSizeEx (in: hFile=0x1cbc, lpFileSize=0x1113fc08 | out: lpFileSize=0x1113fc08*=256) returned 1 [0199.993] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.993] ReadFile (in: hFile=0x1cbc, lpBuffer=0x1113fc14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1113fbf0, lpOverlapped=0x0 | out: lpBuffer=0x1113fc14*, lpNumberOfBytesRead=0x1113fbf0*=0x4, lpOverlapped=0x0) returned 1 [0199.995] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0199.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0199.995] NtQuerySystemTime (in: CurrentTime=0x1113fb90 | out: CurrentTime=0x1113fb90*=132471540678576000) returned 0x0 [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x21c8f0cb [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x45c1ec3c [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x3b411e1f [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0xc6e0731 [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x773290b5 [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x6800ada1 [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x3deaaa07 [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x924aa4a [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x1c897b48 [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x1b0d7210 [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x742c8fad [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x9e2fd7d [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x615f8c1 [0199.995] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x7408c907 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x63925b99 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x5761dd35 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x1e15d700 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x1f1904e2 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x567dd150 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x692eb1c7 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0xde04f94 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x22568b26 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x5b6c068e [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x11c9c87b [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x5defdbec [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x3a726de2 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x52d8da65 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x7b5980a4 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x387489bd [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0xb955819 [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x20728c4d [0199.996] RtlRandomEx (in: Seed=0x1113fb88 | out: Seed=0x1113fb88) returned 0x1d19f801 [0200.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a89c68 [0200.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a8d870 [0200.008] ReadFile (in: hFile=0x1cbc, lpBuffer=0x14a89c68, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1113fb84, lpOverlapped=0x0 | out: lpBuffer=0x14a89c68*, lpNumberOfBytesRead=0x1113fb84*=0x100, lpOverlapped=0x0) returned 1 [0200.008] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.008] WriteFile (in: hFile=0x1cbc, lpBuffer=0x14a8d870*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1113fb88, lpOverlapped=0x0 | out: lpBuffer=0x14a8d870*, lpNumberOfBytesWritten=0x1113fb88*=0x100, lpOverlapped=0x0) returned 1 [0203.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064150 [0203.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064178 [0203.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064178) returned 1 [0203.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a8d870) returned 1 [0203.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a89c68) returned 1 [0203.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e08) returned 1 [0203.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6a40) returned 1 [0203.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36710 [0203.596] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.597] WriteFile (in: hFile=0x1cbc, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1113fbfc, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x1113fbfc*=0x10c, lpOverlapped=0x0) returned 1 [0204.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0204.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36740) returned 1 [0204.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064178) returned 1 [0204.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36710) returned 1 [0204.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064150) returned 1 [0204.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0204.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca378) returned 1 [0204.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0204.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81efae8 [0204.100] wcscpy (in: _Dest=0x81efae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" [0204.100] wcscat (in: _Dest=0x81efae8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json.f0dbec" [0204.100] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0x1113fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x81f3790 [0204.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3790) returned 1 [0204.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833d2d8) returned 1 [0204.512] NtQueryInformationFile (in: FileHandle=0x1cbc, IoStatusBlock=0x1113fb58, FileInformation=0x1113fb60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1113fb58, FileInformation=0x1113fb60) returned 0x0 [0204.512] NtSetInformationFile (FileHandle=0x1cbc, IoStatusBlock=0x1113fb58, FileInformation=0x1113fb60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efae8) returned 1 [0207.586] FlushFileBuffers (hFile=0x1cbc) returned 1 [0207.601] CloseHandle (hObject=0x1cbc) returned 1 [0208.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e3330 [0208.014] wcscpy (in: _Dest=0x81e3330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" [0208.014] wcscat (in: _Dest=0x81e3330, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\F0DBEC-Readme.txt" [0208.014] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0208.014] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe50 [0208.418] WriteFile (in: hFile=0xe50, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1113fba4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1113fba4*=0x70c, lpOverlapped=0x0) returned 1 [0209.305] CloseHandle (hObject=0xe50) returned 1 [0209.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3330) returned 1 [0209.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a5090) returned 1 Thread: id = 5566 os_tid = 0xb20 [0186.106] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json")) returned 0x2020 [0190.248] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0200.009] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcc4 [0200.009] GetFileSizeEx (in: hFile=0xcc4, lpFileSize=0x133dfae0 | out: lpFileSize=0x133dfae0*=226) returned 1 [0200.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0200.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd90a8 [0200.010] NtQuerySystemTime (in: CurrentTime=0x133dfa68 | out: CurrentTime=0x133dfa68*=132471540678732000) returned 0x0 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x1d46d4c4 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x4b0a54d6 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x1a502488 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x398a2696 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x47469e90 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x35b136bb [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x1e000b64 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x432082c9 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x5bd3d8a4 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x96ac9b1 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x4ddbdc94 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x3560b2f0 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x435c3911 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x7d94854e [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x69c0c30d [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x50a42511 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x2f671d52 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x290383bd [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x580e9263 [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x80f076d [0200.010] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x37f22255 [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x33ced84f [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x67f2369b [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x737e57be [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x44e0eea1 [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x36cde21b [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x2e227311 [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x394608ad [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x7d08d999 [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x7a13aa73 [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0xe8d212f [0200.011] RtlRandomEx (in: Seed=0x133dfa60 | out: Seed=0x133dfa60) returned 0x49676b73 [0200.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a91478 [0200.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a95080 [0200.023] ReadFile (in: hFile=0xcc4, lpBuffer=0x14a91478, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0x133dfa5c, lpOverlapped=0x0 | out: lpBuffer=0x14a91478*, lpNumberOfBytesRead=0x133dfa5c*=0xe2, lpOverlapped=0x0) returned 1 [0200.025] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.025] WriteFile (in: hFile=0xcc4, lpBuffer=0x14a95080*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x133dfa60, lpOverlapped=0x0 | out: lpBuffer=0x14a95080*, lpNumberOfBytesWritten=0x133dfa60*=0xe2, lpOverlapped=0x0) returned 1 [0203.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80641a0 [0203.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80641c8 [0203.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641c8) returned 1 [0203.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a95080) returned 1 [0203.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a91478) returned 1 [0203.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0203.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6e30) returned 1 [0203.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36770 [0203.599] SetFilePointerEx (in: hFile=0xcc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.599] WriteFile (in: hFile=0xcc4, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x133dfad4, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0x133dfad4*=0x10c, lpOverlapped=0x0) returned 1 [0204.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0204.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f367a0) returned 1 [0204.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641c8) returned 1 [0204.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36770) returned 1 [0204.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641a0) returned 1 [0204.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0204.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd8fb8) returned 1 [0204.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42740) returned 1 [0204.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81efc10 [0204.104] wcscpy (in: _Dest=0x81efc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" [0204.104] wcscat (in: _Dest=0x81efc10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json.f0dbec" [0204.104] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0x133dfa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x81f38d8 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f38d8) returned 1 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833d950) returned 1 [0204.514] NtQueryInformationFile (in: FileHandle=0xcc4, IoStatusBlock=0x133dfa30, FileInformation=0x133dfa38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x133dfa30, FileInformation=0x133dfa38) returned 0x0 [0204.514] NtSetInformationFile (FileHandle=0xcc4, IoStatusBlock=0x133dfa30, FileInformation=0x133dfa38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efc10) returned 1 [0207.590] FlushFileBuffers (hFile=0xcc4) returned 1 [0207.606] CloseHandle (hObject=0xcc4) returned 1 [0208.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e1ae8 [0208.016] wcscpy (in: _Dest=0x81e1ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" [0208.016] wcscat (in: _Dest=0x81e1ae8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\F0DBEC-Readme.txt" [0208.016] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0208.016] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc8c [0208.418] WriteFile (in: hFile=0xc8c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x133dfa7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x133dfa7c*=0x70c, lpOverlapped=0x0) returned 1 [0209.328] CloseHandle (hObject=0xc8c) returned 1 [0209.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1ae8) returned 1 [0209.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a51b8) returned 1 Thread: id = 5567 os_tid = 0x1528 [0186.106] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json")) returned 0x2020 [0190.249] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0200.026] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5ac [0200.026] GetFileSizeEx (in: hFile=0x5ac, lpFileSize=0x1123fe00 | out: lpFileSize=0x1123fe00*=289) returned 1 [0200.026] SetFilePointerEx (in: hFile=0x5ac, liDistanceToMove=0x11d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.026] ReadFile (in: hFile=0x5ac, lpBuffer=0x1123fe0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1123fde8, lpOverlapped=0x0 | out: lpBuffer=0x1123fe0c*, lpNumberOfBytesRead=0x1123fde8*=0x4, lpOverlapped=0x0) returned 1 [0200.028] SetFilePointerEx (in: hFile=0x5ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420b0 [0200.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d437a8 [0200.028] NtQuerySystemTime (in: CurrentTime=0x1123fd88 | out: CurrentTime=0x1123fd88*=132471540678888000) returned 0x0 [0200.028] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x6d73c910 [0200.028] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x30f828cf [0200.028] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x4e0a2cf8 [0200.028] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0xa666ddd [0200.028] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x72444d47 [0200.028] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x29031e2e [0200.028] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x40b83e2a [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x2ca883d7 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x49548613 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x20437e50 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x69e2cbc9 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x361bfd5 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x865dc16 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x2299c115 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x780bc47b [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x3adf0729 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x1347bb53 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x72714a26 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x74c50f54 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x348d649 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x187afd31 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x6ee4b0d7 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x2b8ea036 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0xe3bebd [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x6ffc9679 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x7c1fe4a3 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x47b6cd98 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x503da7db [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x618a3d54 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x203d6b32 [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x1288e38a [0200.029] RtlRandomEx (in: Seed=0x1123fd80 | out: Seed=0x1123fd80) returned 0x716d8fcc [0200.038] ReadFile (in: hFile=0x5ac, lpBuffer=0x14a98c88, nNumberOfBytesToRead=0x121, lpNumberOfBytesRead=0x1123fd7c, lpOverlapped=0x0 | out: lpBuffer=0x14a98c88*, lpNumberOfBytesRead=0x1123fd7c*=0x121, lpOverlapped=0x0) returned 1 [0200.038] SetFilePointerEx (in: hFile=0x5ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.038] WriteFile (in: hFile=0x5ac, lpBuffer=0x14a9c890*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x1123fd80, lpOverlapped=0x0 | out: lpBuffer=0x14a9c890*, lpNumberOfBytesWritten=0x1123fd80*=0x121, lpOverlapped=0x0) returned 1 [0203.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80641f0 [0203.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064218 [0203.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064218) returned 1 [0203.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a9c890) returned 1 [0203.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a98c88) returned 1 [0203.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 [0203.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4ec0) returned 1 [0203.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f367d0 [0203.619] SetFilePointerEx (in: hFile=0x5ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.620] WriteFile (in: hFile=0x5ac, lpBuffer=0x81dff08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1123fdf4, lpOverlapped=0x0 | out: lpBuffer=0x81dff08*, lpNumberOfBytesWritten=0x1123fdf4*=0x10c, lpOverlapped=0x0) returned 1 [0204.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dff08) returned 1 [0204.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36800) returned 1 [0204.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064218) returned 1 [0204.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f367d0) returned 1 [0204.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641f0) returned 1 [0204.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420b0) returned 1 [0204.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b00) returned 1 [0204.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42790) returned 1 [0204.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e21d8 [0204.112] wcscpy (in: _Dest=0x81e21d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" [0204.112] wcscat (in: _Dest=0x81e21d8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json.f0dbec" [0204.112] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0x1123fd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x81f3a20 [0204.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3a20) returned 1 [0204.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8340f38) returned 1 [0204.517] NtQueryInformationFile (in: FileHandle=0x5ac, IoStatusBlock=0x1123fd50, FileInformation=0x1123fd58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1123fd50, FileInformation=0x1123fd58) returned 0x0 [0204.517] NtSetInformationFile (FileHandle=0x5ac, IoStatusBlock=0x1123fd50, FileInformation=0x1123fd58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e21d8) returned 1 [0207.595] FlushFileBuffers (hFile=0x5ac) returned 1 [0207.610] CloseHandle (hObject=0x5ac) returned 1 [0208.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e1c10 [0208.017] wcscpy (in: _Dest=0x81e1c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" [0208.017] wcscat (in: _Dest=0x81e1c10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\F0DBEC-Readme.txt" [0208.018] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0208.018] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1550 [0208.419] WriteFile (in: hFile=0x1550, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1123fd9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1123fd9c*=0x70c, lpOverlapped=0x0) returned 1 [0209.335] CloseHandle (hObject=0x1550) returned 1 [0209.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1c10) returned 1 [0209.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a52e0) returned 1 Thread: id = 5568 os_tid = 0x570 [0186.107] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0190.249] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0200.039] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc50 [0200.039] GetFileSizeEx (in: hFile=0xc50, lpFileSize=0x12a8fd20 | out: lpFileSize=0x12a8fd20*=249) returned 1 [0200.039] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.039] ReadFile (in: hFile=0xc50, lpBuffer=0x12a8fd2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12a8fd08, lpOverlapped=0x0 | out: lpBuffer=0x12a8fd2c*, lpNumberOfBytesRead=0x12a8fd08*=0x4, lpOverlapped=0x0) returned 1 [0200.041] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d437a8 [0200.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b50 [0200.041] NtQuerySystemTime (in: CurrentTime=0x12a8fca8 | out: CurrentTime=0x12a8fca8*=132471540679044000) returned 0x0 [0200.041] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x5eb2001 [0200.041] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x66ffdd19 [0200.041] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x73f537ca [0200.041] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x2abfeff9 [0200.041] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x7ebb0e3 [0200.041] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x23d05c65 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x107248cb [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x2f7fce00 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x6a5147ef [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x3c8a08b2 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x6ef17a18 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x84fe19e [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x64be35c [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x21a21fed [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x57699635 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x6678c31 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x1625102b [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x68ede744 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x3bae763b [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x41490b7b [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x10f995c2 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x2c56a2df [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x7ca2ff80 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x7be79a53 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0xefc3495 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x2b17fe72 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x42f27751 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x258619d6 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x556be18d [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x4131a830 [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x7e6a23cd [0200.042] RtlRandomEx (in: Seed=0x12a8fca0 | out: Seed=0x12a8fca0) returned 0x3666277e [0200.053] ReadFile (in: hFile=0xc50, lpBuffer=0x14aa0498, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x12a8fc9c, lpOverlapped=0x0 | out: lpBuffer=0x14aa0498*, lpNumberOfBytesRead=0x12a8fc9c*=0xf9, lpOverlapped=0x0) returned 1 [0200.053] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.053] WriteFile (in: hFile=0xc50, lpBuffer=0x14aa40a0*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x12a8fca0, lpOverlapped=0x0 | out: lpBuffer=0x14aa40a0*, lpNumberOfBytesWritten=0x12a8fca0*=0xf9, lpOverlapped=0x0) returned 1 [0203.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064240 [0203.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064268 [0203.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064268) returned 1 [0203.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aa40a0) returned 1 [0203.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aa0498) returned 1 [0203.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 [0203.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b56a0) returned 1 [0203.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36830 [0203.622] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.622] WriteFile (in: hFile=0xc50, lpBuffer=0x81dfcd8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12a8fd14, lpOverlapped=0x0 | out: lpBuffer=0x81dfcd8*, lpNumberOfBytesWritten=0x12a8fd14*=0x10c, lpOverlapped=0x0) returned 1 [0204.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfcd8) returned 1 [0204.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36860) returned 1 [0204.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064268) returned 1 [0204.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36830) returned 1 [0204.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064240) returned 1 [0204.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d437a8) returned 1 [0204.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e20) returned 1 [0204.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435a0) returned 1 [0204.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3e5c500 [0204.116] wcscpy (in: _Dest=0x3e5c500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" [0204.116] wcscat (in: _Dest=0x3e5c500, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json.f0dbec" [0204.116] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json.f0dbec", NtPathName=0x12a8fc98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x81f3b68 [0204.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3b68) returned 1 [0204.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83415b0) returned 1 [0204.519] NtQueryInformationFile (in: FileHandle=0xc50, IoStatusBlock=0x12a8fc70, FileInformation=0x12a8fc78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12a8fc70, FileInformation=0x12a8fc78) returned 0x0 [0204.519] NtSetInformationFile (FileHandle=0xc50, IoStatusBlock=0x12a8fc70, FileInformation=0x12a8fc78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c500) returned 1 [0207.599] FlushFileBuffers (hFile=0xc50) returned 1 [0207.615] CloseHandle (hObject=0xc50) returned 1 [0208.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ef84b8 [0208.019] wcscpy (in: _Dest=0x3ef84b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" [0208.019] wcscat (in: _Dest=0x3ef84b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" [0208.019] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\f0dbec-readme.txt")) returned 0xffffffff [0208.020] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10b0 [0208.419] WriteFile (in: hFile=0x10b0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12a8fcbc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12a8fcbc*=0x70c, lpOverlapped=0x0) returned 1 [0209.331] CloseHandle (hObject=0x10b0) returned 1 [0209.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef84b8) returned 1 [0209.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a5408) returned 1 Thread: id = 5569 os_tid = 0xbf4 [0186.107] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json")) returned 0x2020 [0190.250] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0200.053] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc6c [0200.054] GetFileSizeEx (in: hFile=0xc6c, lpFileSize=0x134bfc18 | out: lpFileSize=0x134bfc18*=232) returned 1 [0200.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b50 [0200.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e70 [0200.055] NtQuerySystemTime (in: CurrentTime=0x134bfba0 | out: CurrentTime=0x134bfba0*=132471540679200000) returned 0x0 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x38cbffed [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x3f336adc [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x5f60c934 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x367b4ac [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x780e6ed7 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x56a95c1 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x6a9e039c [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x425aa0c9 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x23c43e37 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x4cb6defc [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x6aba850f [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x33056a04 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x4b31da0e [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x3fcfe71b [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x341a4243 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x7ce5072 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x511f5641 [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x7be18dae [0200.055] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x12748231 [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x7ee2a4a6 [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x7c424535 [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x5c04741 [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x58c2137f [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x59c7d01e [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x64c8bbc6 [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x4719bf81 [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x56dc4aef [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x59f7cd84 [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x17723bae [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x12d60361 [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x5da01fef [0200.056] RtlRandomEx (in: Seed=0x134bfb98 | out: Seed=0x134bfb98) returned 0x44a755b0 [0200.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14aa7ca8 [0200.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14aab8b0 [0200.069] ReadFile (in: hFile=0xc6c, lpBuffer=0x14aa7ca8, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x134bfb94, lpOverlapped=0x0 | out: lpBuffer=0x14aa7ca8*, lpNumberOfBytesRead=0x134bfb94*=0xe8, lpOverlapped=0x0) returned 1 [0200.076] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.076] WriteFile (in: hFile=0xc6c, lpBuffer=0x14aab8b0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x134bfb98, lpOverlapped=0x0 | out: lpBuffer=0x14aab8b0*, lpNumberOfBytesWritten=0x134bfb98*=0xe8, lpOverlapped=0x0) returned 1 [0203.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064290 [0203.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80642b8 [0203.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80642b8) returned 1 [0203.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aab8b0) returned 1 [0203.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aa7ca8) returned 1 [0203.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 [0203.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b47b8) returned 1 [0203.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36890 [0203.625] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.625] WriteFile (in: hFile=0xc6c, lpBuffer=0x8320930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x134bfc0c, lpOverlapped=0x0 | out: lpBuffer=0x8320930*, lpNumberOfBytesWritten=0x134bfc0c*=0x10c, lpOverlapped=0x0) returned 1 [0204.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320930) returned 1 [0204.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f368c0) returned 1 [0204.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80642b8) returned 1 [0204.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36890) returned 1 [0204.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064290) returned 1 [0204.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b50) returned 1 [0204.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0204.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432d0) returned 1 [0204.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e1f88 [0204.119] wcscpy (in: _Dest=0x81e1f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" [0204.119] wcscat (in: _Dest=0x81e1f88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json.f0dbec" [0204.120] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0x134bfb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x81f3cb0 [0204.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3cb0) returned 1 [0204.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833b8f8) returned 1 [0204.520] NtQueryInformationFile (in: FileHandle=0xc6c, IoStatusBlock=0x134bfb68, FileInformation=0x134bfb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x134bfb68, FileInformation=0x134bfb70) returned 0x0 [0204.520] NtSetInformationFile (FileHandle=0xc6c, IoStatusBlock=0x134bfb68, FileInformation=0x134bfb70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1f88) returned 1 [0207.604] FlushFileBuffers (hFile=0xc6c) returned 1 [0207.621] CloseHandle (hObject=0xc6c) returned 1 [0208.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e1d38 [0208.021] wcscpy (in: _Dest=0x81e1d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" [0208.021] wcscat (in: _Dest=0x81e1d38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\F0DBEC-Readme.txt" [0208.021] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0208.022] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xad0 [0208.420] WriteFile (in: hFile=0xad0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x134bfbb4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x134bfbb4*=0x70c, lpOverlapped=0x0) returned 1 [0209.338] CloseHandle (hObject=0xad0) returned 1 [0209.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1d38) returned 1 [0209.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a5530) returned 1 Thread: id = 5570 os_tid = 0x584 [0186.243] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json")) returned 0x2020 [0190.251] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0200.076] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e48 [0200.077] GetFileSizeEx (in: hFile=0x1e48, lpFileSize=0x1332fc00 | out: lpFileSize=0x1332fc00*=304) returned 1 [0200.077] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x12c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.077] ReadFile (in: hFile=0x1e48, lpBuffer=0x1332fc0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1332fbe8, lpOverlapped=0x0 | out: lpBuffer=0x1332fc0c*, lpNumberOfBytesRead=0x1332fbe8*=0x4, lpOverlapped=0x0) returned 1 [0200.079] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e70 [0200.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434d8 [0200.079] NtQuerySystemTime (in: CurrentTime=0x1332fb88 | out: CurrentTime=0x1332fb88*=132471540679356000) returned 0x0 [0200.079] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x3b3f8483 [0200.079] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0xa433011 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x4bc24c45 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x524fa875 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x25b6b6ea [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x4534a0f6 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x2cf3c2ef [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x2db4316d [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x7ea86f64 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x4e27af68 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x699e8b74 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x111fdf4e [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x278b297b [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x4ab3420 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x72f5a342 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x429b6db6 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0xe0875f3 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0xa859656 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x1577bfb1 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x16d86755 [0200.080] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x3dcd9a20 [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x15ea3713 [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x44efaa1 [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x68b489cc [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x79d53f3d [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x12da318d [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x45631b50 [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x36230257 [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x596fd530 [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x4599de1d [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x546e089 [0200.081] RtlRandomEx (in: Seed=0x1332fb80 | out: Seed=0x1332fb80) returned 0x5588ae85 [0200.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14aaf4b8 [0200.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ab30c0 [0200.097] ReadFile (in: hFile=0x1e48, lpBuffer=0x14aaf4b8, nNumberOfBytesToRead=0x130, lpNumberOfBytesRead=0x1332fb7c, lpOverlapped=0x0 | out: lpBuffer=0x14aaf4b8*, lpNumberOfBytesRead=0x1332fb7c*=0x130, lpOverlapped=0x0) returned 1 [0200.097] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.097] WriteFile (in: hFile=0x1e48, lpBuffer=0x14ab30c0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1332fb80, lpOverlapped=0x0 | out: lpBuffer=0x14ab30c0*, lpNumberOfBytesWritten=0x1332fb80*=0x130, lpOverlapped=0x0) returned 1 [0203.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80642e0 [0203.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064308 [0203.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064308) returned 1 [0203.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ab30c0) returned 1 [0203.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aaf4b8) returned 1 [0203.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b28) returned 1 [0203.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5190) returned 1 [0203.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f368f0 [0203.629] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.629] WriteFile (in: hFile=0x1e48, lpBuffer=0x8320a48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1332fbf4, lpOverlapped=0x0 | out: lpBuffer=0x8320a48*, lpNumberOfBytesWritten=0x1332fbf4*=0x10c, lpOverlapped=0x0) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320a48) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36920) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064308) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f368f0) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80642e0) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43190) returned 1 [0204.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e1e60 [0204.123] wcscpy (in: _Dest=0x81e1e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" [0204.123] wcscat (in: _Dest=0x81e1e60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json.f0dbec" [0204.123] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x1332fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x81f3df8 [0204.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3df8) returned 1 [0204.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8342f90) returned 1 [0204.521] NtQueryInformationFile (in: FileHandle=0x1e48, IoStatusBlock=0x1332fb50, FileInformation=0x1332fb58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1332fb50, FileInformation=0x1332fb58) returned 0x0 [0204.522] NtSetInformationFile (FileHandle=0x1e48, IoStatusBlock=0x1332fb50, FileInformation=0x1332fb58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1e60) returned 1 [0207.608] FlushFileBuffers (hFile=0x1e48) returned 1 [0207.626] CloseHandle (hObject=0x1e48) returned 1 [0208.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e1e60 [0208.023] wcscpy (in: _Dest=0x81e1e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" [0208.023] wcscat (in: _Dest=0x81e1e60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\F0DBEC-Readme.txt" [0208.023] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0208.023] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560 [0208.420] WriteFile (in: hFile=0x560, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1332fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1332fb9c*=0x70c, lpOverlapped=0x0) returned 1 [0209.341] CloseHandle (hObject=0x560) returned 1 [0209.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1e60) returned 1 [0209.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a5658) returned 1 Thread: id = 5571 os_tid = 0xc14 [0186.244] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json")) returned 0x2020 [0190.251] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0200.097] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1da4 [0200.098] GetFileSizeEx (in: hFile=0x1da4, lpFileSize=0x1364fe78 | out: lpFileSize=0x1364fe78*=295) returned 1 [0200.098] SetFilePointerEx (in: hFile=0x1da4, liDistanceToMove=0x123, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.098] ReadFile (in: hFile=0x1da4, lpBuffer=0x1364fe84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1364fe60, lpOverlapped=0x0 | out: lpBuffer=0x1364fe84*, lpNumberOfBytesRead=0x1364fe60*=0x4, lpOverlapped=0x0) returned 1 [0200.100] SetFilePointerEx (in: hFile=0x1da4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434d8 [0200.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43050 [0200.100] NtQuerySystemTime (in: CurrentTime=0x1364fe00 | out: CurrentTime=0x1364fe00*=132471540679512000) returned 0x0 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x4383fc88 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x200567d7 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x7ab38307 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x4af39c08 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x4bcbef26 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x1cc97c79 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x5bff2a3d [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x5956e81 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x1b7e3ab1 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x1e817831 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x28aa48f1 [0200.100] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x7db8b732 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x511248ee [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x730ba0c6 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x4dbbaf95 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0xe760dc8 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0xeaa034b [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x2447afce [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x5c922eb2 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x74223123 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x135aa69 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x437c1a42 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x55988b3d [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x2f1c7609 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x1a80112 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x234e4f5d [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x18a15ec8 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x2c938c6f [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x3c0fce5c [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x78501bb9 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x57e409e4 [0200.101] RtlRandomEx (in: Seed=0x1364fdf8 | out: Seed=0x1364fdf8) returned 0x6e70e64c [0200.111] ReadFile (in: hFile=0x1da4, lpBuffer=0x14ab6cc8, nNumberOfBytesToRead=0x127, lpNumberOfBytesRead=0x1364fdf4, lpOverlapped=0x0 | out: lpBuffer=0x14ab6cc8*, lpNumberOfBytesRead=0x1364fdf4*=0x127, lpOverlapped=0x0) returned 1 [0200.111] SetFilePointerEx (in: hFile=0x1da4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.111] WriteFile (in: hFile=0x1da4, lpBuffer=0x14aba8d0*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x1364fdf8, lpOverlapped=0x0 | out: lpBuffer=0x14aba8d0*, lpNumberOfBytesWritten=0x1364fdf8*=0x127, lpOverlapped=0x0) returned 1 [0203.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064330 [0203.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064358 [0203.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064358) returned 1 [0203.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aba8d0) returned 1 [0203.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ab6cc8) returned 1 [0203.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0203.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4b60) returned 1 [0203.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36950 [0203.632] SetFilePointerEx (in: hFile=0x1da4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.632] WriteFile (in: hFile=0x1da4, lpBuffer=0x8320b60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1364fe6c, lpOverlapped=0x0 | out: lpBuffer=0x8320b60*, lpNumberOfBytesWritten=0x1364fe6c*=0x10c, lpOverlapped=0x0) returned 1 [0204.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320b60) returned 1 [0204.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36980) returned 1 [0204.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064358) returned 1 [0204.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36950) returned 1 [0204.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064330) returned 1 [0204.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434d8) returned 1 [0204.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43028) returned 1 [0204.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42768) returned 1 [0204.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e1d38 [0204.128] wcscpy (in: _Dest=0x81e1d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" [0204.128] wcscat (in: _Dest=0x81e1d38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json.f0dbec" [0204.128] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0x1364fdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x81f3f40 [0204.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3f40) returned 1 [0204.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8343ea8) returned 1 [0204.523] NtQueryInformationFile (in: FileHandle=0x1da4, IoStatusBlock=0x1364fdc8, FileInformation=0x1364fdd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1364fdc8, FileInformation=0x1364fdd0) returned 0x0 [0204.523] NtSetInformationFile (FileHandle=0x1da4, IoStatusBlock=0x1364fdc8, FileInformation=0x1364fdd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1d38) returned 1 [0207.613] FlushFileBuffers (hFile=0x1da4) returned 1 [0207.630] CloseHandle (hObject=0x1da4) returned 1 [0208.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e1f88 [0208.028] wcscpy (in: _Dest=0x81e1f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" [0208.028] wcscat (in: _Dest=0x81e1f88, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\F0DBEC-Readme.txt" [0208.028] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0208.028] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1548 [0208.421] WriteFile (in: hFile=0x1548, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1364fe14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1364fe14*=0x70c, lpOverlapped=0x0) returned 1 [0209.348] CloseHandle (hObject=0x1548) returned 1 [0209.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e1f88) returned 1 [0209.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a5780) returned 1 Thread: id = 5572 os_tid = 0x6fc [0186.244] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0190.252] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0199.698] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x118c [0199.698] GetFileSizeEx (in: hFile=0x118c, lpFileSize=0x11aefdc0 | out: lpFileSize=0x11aefdc0*=223) returned 1 [0199.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ba628 [0199.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ba678 [0199.699] NtQuerySystemTime (in: CurrentTime=0x11aefd48 | out: CurrentTime=0x11aefd48*=132471540675768000) returned 0x0 [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x44a7277e [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0xd004c4d [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x10a60c76 [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x24dedffb [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x612d4358 [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x3b6e98a7 [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x110829bf [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x5c7eeea4 [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x739725ee [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x3030d550 [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x4778fb92 [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x6989e79d [0199.699] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x74267a94 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x56cd4898 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x523943fd [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x3a82ebfc [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x7f6f56f6 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x73f0cea6 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x33e9f521 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x222fec5b [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x19701196 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x55db5728 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x315ba6af [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x5d233bce [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x5936f1b0 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x128927bb [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x6abdf4f9 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x30716926 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x766111c5 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0xbd79cd8 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x13acfcf6 [0199.700] RtlRandomEx (in: Seed=0x11aefd40 | out: Seed=0x11aefd40) returned 0x6cef3252 [0199.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1493a8d0 [0199.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a09c68 [0199.713] ReadFile (in: hFile=0x118c, lpBuffer=0x1493a8d0, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0x11aefd3c, lpOverlapped=0x0 | out: lpBuffer=0x1493a8d0*, lpNumberOfBytesRead=0x11aefd3c*=0xdf, lpOverlapped=0x0) returned 1 [0199.716] SetFilePointerEx (in: hFile=0x118c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.716] WriteFile (in: hFile=0x118c, lpBuffer=0x14a09c68*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x11aefd40, lpOverlapped=0x0 | out: lpBuffer=0x14a09c68*, lpNumberOfBytesWritten=0x11aefd40*=0xdf, lpOverlapped=0x0) returned 1 [0203.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d90 [0203.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063db8 [0203.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063db8) returned 1 [0203.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a09c68) returned 1 [0203.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1493a8d0) returned 1 [0203.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80552a8) returned 1 [0203.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e59f0) returned 1 [0203.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acfc8 [0203.552] SetFilePointerEx (in: hFile=0x118c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.553] WriteFile (in: hFile=0x118c, lpBuffer=0x30bc0d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11aefdb4, lpOverlapped=0x0 | out: lpBuffer=0x30bc0d8*, lpNumberOfBytesWritten=0x11aefdb4*=0x10c, lpOverlapped=0x0) returned 1 [0204.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0204.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acdb8) returned 1 [0204.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063db8) returned 1 [0204.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acfc8) returned 1 [0204.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d90) returned 1 [0204.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ba628) returned 1 [0204.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed2f8) returned 1 [0204.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed258) returned 1 [0204.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3e5b798 [0204.050] wcscpy (in: _Dest=0x3e5b798, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" [0204.050] wcscat (in: _Dest=0x3e5b798, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json.f0dbec" [0204.050] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0x11aefd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x83359d8 [0204.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83359d8) returned 1 [0204.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833ac08) returned 1 [0204.487] NtQueryInformationFile (in: FileHandle=0x118c, IoStatusBlock=0x11aefd10, FileInformation=0x11aefd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11aefd10, FileInformation=0x11aefd18) returned 0x0 [0204.487] NtSetInformationFile (FileHandle=0x118c, IoStatusBlock=0x11aefd10, FileInformation=0x11aefd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5b798) returned 1 [0207.501] FlushFileBuffers (hFile=0x118c) returned 1 [0207.518] CloseHandle (hObject=0x118c) returned 1 [0207.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x81f7388 [0207.987] wcscpy (in: _Dest=0x81f7388, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" [0207.987] wcscat (in: _Dest=0x81f7388, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0207.987] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0207.987] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf30 [0208.399] WriteFile (in: hFile=0xf30, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x11aefd5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x11aefd5c*=0x70c, lpOverlapped=0x0) returned 1 [0209.271] CloseHandle (hObject=0xf30) returned 1 [0209.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7388) returned 1 [0209.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a58a8) returned 1 Thread: id = 5573 os_tid = 0xbf8 [0186.245] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json")) returned 0x2020 [0190.253] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0199.716] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11dc [0199.717] GetFileSizeEx (in: hFile=0x11dc, lpFileSize=0x12b0f8c0 | out: lpFileSize=0x12b0f8c0*=264) returned 1 [0199.717] SetFilePointerEx (in: hFile=0x11dc, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.717] ReadFile (in: hFile=0x11dc, lpBuffer=0x12b0f8cc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12b0f8a8, lpOverlapped=0x0 | out: lpBuffer=0x12b0f8cc*, lpNumberOfBytesRead=0x12b0f8a8*=0x4, lpOverlapped=0x0) returned 1 [0199.719] SetFilePointerEx (in: hFile=0x11dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ed208 [0199.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ed230 [0199.719] NtQuerySystemTime (in: CurrentTime=0x12b0f848 | out: CurrentTime=0x12b0f848*=132471540675768000) returned 0x0 [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0xd7339c1 [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x6701d24f [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0xc59c987 [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x38b51e4e [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0xdb2af80 [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x727caa21 [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x31d64614 [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x5acc7026 [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x43dc9543 [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x6bfff0a3 [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x4001e22c [0199.719] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0xac5adc1 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x21e54d04 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x39a3bda5 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x525252d1 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x1c91001d [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x68cbd37e [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x7a5b07a1 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x65c756e1 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x4fbf1bc3 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x503d2ee3 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x6167e128 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x6f4037d0 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x4842128c [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x4d269d1f [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x6e053b5 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x64900c02 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x464f3782 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x5049f9c1 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0xe6e1896 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x5acc7026 [0199.720] RtlRandomEx (in: Seed=0x12b0f840 | out: Seed=0x12b0f840) returned 0x31a27317 [0199.732] ReadFile (in: hFile=0x11dc, lpBuffer=0x14a0d870, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x12b0f83c, lpOverlapped=0x0 | out: lpBuffer=0x14a0d870*, lpNumberOfBytesRead=0x12b0f83c*=0x108, lpOverlapped=0x0) returned 1 [0199.732] SetFilePointerEx (in: hFile=0x11dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.732] WriteFile (in: hFile=0x11dc, lpBuffer=0x838c538*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12b0f840, lpOverlapped=0x0 | out: lpBuffer=0x838c538*, lpNumberOfBytesWritten=0x12b0f840*=0x108, lpOverlapped=0x0) returned 1 [0203.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063de0 [0203.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e08 [0203.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e08) returned 1 [0203.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x838c538) returned 1 [0203.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a0d870) returned 1 [0203.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055320) returned 1 [0203.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e66e0) returned 1 [0203.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acd88 [0203.555] SetFilePointerEx (in: hFile=0x11dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.555] WriteFile (in: hFile=0x11dc, lpBuffer=0x30bba48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12b0f8b4, lpOverlapped=0x0 | out: lpBuffer=0x30bba48*, lpNumberOfBytesWritten=0x12b0f8b4*=0x10c, lpOverlapped=0x0) returned 1 [0204.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba48) returned 1 [0204.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3968) returned 1 [0204.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e08) returned 1 [0204.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acd88) returned 1 [0204.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063de0) returned 1 [0204.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed208) returned 1 [0204.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3448c8) returned 1 [0204.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344440) returned 1 [0204.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81eff88 [0204.054] wcscpy (in: _Dest=0x81eff88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" [0204.054] wcscat (in: _Dest=0x81eff88, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json.f0dbec" [0204.054] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0x12b0f838, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x8335b20 [0204.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335b20) returned 1 [0204.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833a9e0) returned 1 [0204.492] NtQueryInformationFile (in: FileHandle=0x11dc, IoStatusBlock=0x12b0f810, FileInformation=0x12b0f818, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12b0f810, FileInformation=0x12b0f818) returned 0x0 [0204.492] NtSetInformationFile (FileHandle=0x11dc, IoStatusBlock=0x12b0f810, FileInformation=0x12b0f818, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eff88) returned 1 [0207.506] FlushFileBuffers (hFile=0x11dc) returned 1 [0207.522] CloseHandle (hObject=0x11dc) returned 1 [0207.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8187238 [0207.989] wcscpy (in: _Dest=0x8187238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" [0207.989] wcscat (in: _Dest=0x8187238, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\F0DBEC-Readme.txt" [0207.989] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0207.989] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c98 [0208.405] WriteFile (in: hFile=0x2c98, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12b0f85c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12b0f85c*=0x70c, lpOverlapped=0x0) returned 1 [0209.277] CloseHandle (hObject=0x2c98) returned 1 [0209.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187238) returned 1 [0209.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a59d0) returned 1 Thread: id = 5574 os_tid = 0x564 [0186.245] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json")) returned 0x2020 [0190.253] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0199.732] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x103c [0199.733] GetFileSizeEx (in: hFile=0x103c, lpFileSize=0x1236f820 | out: lpFileSize=0x1236f820*=250) returned 1 [0199.733] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0xf6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.733] ReadFile (in: hFile=0x103c, lpBuffer=0x1236f82c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1236f808, lpOverlapped=0x0 | out: lpBuffer=0x1236f82c*, lpNumberOfBytesRead=0x1236f808*=0x4, lpOverlapped=0x0) returned 1 [0199.735] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3447b0 [0199.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3441c0 [0199.735] NtQuerySystemTime (in: CurrentTime=0x1236f7a8 | out: CurrentTime=0x1236f7a8*=132471540675924000) returned 0x0 [0199.735] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x5049f9c1 [0199.735] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x7e132734 [0199.735] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x5bb2b3c2 [0199.735] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x29228f7f [0199.735] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x27596730 [0199.735] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x1da01d0b [0199.735] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x5ec925cf [0199.735] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x9193641 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x5c3a2f30 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x215da37b [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x7c424535 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x276a8119 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x6a0948b9 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x6701d24f [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x663c7e71 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x11583997 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x727caa21 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x5325b324 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x7d494051 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x5af603da [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x25debea4 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x3235f41c [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x144db6ab [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x797e4f75 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x57fbe3e3 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x4f271954 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x435a6894 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x733c0961 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x1de09577 [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x5028b58d [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x1b441a7e [0199.736] RtlRandomEx (in: Seed=0x1236f7a0 | out: Seed=0x1236f7a0) returned 0x43df9c4a [0199.749] ReadFile (in: hFile=0x103c, lpBuffer=0x8248458, nNumberOfBytesToRead=0xfa, lpNumberOfBytesRead=0x1236f79c, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0x1236f79c*=0xfa, lpOverlapped=0x0) returned 1 [0199.749] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.749] WriteFile (in: hFile=0x103c, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x1236f7a0, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0x1236f7a0*=0xfa, lpOverlapped=0x0) returned 1 [0203.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e30 [0203.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e58 [0203.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e58) returned 1 [0203.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0203.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0203.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055398) returned 1 [0203.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6380) returned 1 [0203.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3019fc8 [0203.558] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.558] WriteFile (in: hFile=0x103c, lpBuffer=0x30bcce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1236f814, lpOverlapped=0x0 | out: lpBuffer=0x30bcce0*, lpNumberOfBytesWritten=0x1236f814*=0x10c, lpOverlapped=0x0) returned 1 [0204.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0204.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3010278) returned 1 [0204.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e58) returned 1 [0204.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3019fc8) returned 1 [0204.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e30) returned 1 [0204.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447b0) returned 1 [0204.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344328) returned 1 [0204.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3443c8) returned 1 [0204.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5b8d0 [0204.057] wcscpy (in: _Dest=0x3e5b8d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" [0204.057] wcscat (in: _Dest=0x3e5b8d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json.f0dbec" [0204.057] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0x1236f798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335c68 [0204.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335c68) returned 1 [0204.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83373f8) returned 1 [0204.493] NtQueryInformationFile (in: FileHandle=0x103c, IoStatusBlock=0x1236f770, FileInformation=0x1236f778, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1236f770, FileInformation=0x1236f778) returned 0x0 [0204.493] NtSetInformationFile (FileHandle=0x103c, IoStatusBlock=0x1236f770, FileInformation=0x1236f778, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5b8d0) returned 1 [0207.510] FlushFileBuffers (hFile=0x103c) returned 1 [0207.547] CloseHandle (hObject=0x103c) returned 1 [0207.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f7250 [0207.991] wcscpy (in: _Dest=0x81f7250, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" [0207.991] wcscat (in: _Dest=0x81f7250, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\F0DBEC-Readme.txt" [0207.991] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0207.991] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e9c [0208.400] WriteFile (in: hFile=0x1e9c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1236f7bc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1236f7bc*=0x70c, lpOverlapped=0x0) returned 1 [0209.273] CloseHandle (hObject=0x1e9c) returned 1 [0209.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7250) returned 1 [0209.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a5af8) returned 1 Thread: id = 5575 os_tid = 0x56c [0186.247] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json")) returned 0x2020 [0190.254] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0199.750] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1208 [0199.750] GetFileSizeEx (in: hFile=0x1208, lpFileSize=0x12bbf7e0 | out: lpFileSize=0x12bbf7e0*=216) returned 1 [0199.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3441c0 [0199.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344670 [0199.751] NtQuerySystemTime (in: CurrentTime=0x12bbf768 | out: CurrentTime=0x12bbf768*=132471540676080000) returned 0x0 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x43a1d09 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x5e808dfe [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x7ea4c632 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x75964cd6 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x4501d8f3 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x435721f8 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x5c3a2f30 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x488adc84 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x8ee5d81 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x65255adb [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x598cc36a [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x65c756e1 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x3fd64 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x59d769b4 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x7d7b6285 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0xaf08681 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x7068f424 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x1f5ce4ca [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x56569836 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x45dc39c5 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x2693378d [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x464f3782 [0199.751] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x536cf841 [0199.752] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x4fbf1bc3 [0199.752] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x5f3d6cb0 [0199.752] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x19337928 [0199.752] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x3e8ae57 [0199.752] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x1816cdc8 [0199.752] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x435721f8 [0199.752] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x59117807 [0199.752] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x9bd93ad [0199.752] RtlRandomEx (in: Seed=0x12bbf760 | out: Seed=0x12bbf760) returned 0x2643fa9d [0199.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0199.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8253870 [0199.766] ReadFile (in: hFile=0x1208, lpBuffer=0x824fc68, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x12bbf75c, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesRead=0x12bbf75c*=0xd8, lpOverlapped=0x0) returned 1 [0199.773] SetFilePointerEx (in: hFile=0x1208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.773] WriteFile (in: hFile=0x1208, lpBuffer=0x8253870*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x12bbf760, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesWritten=0x12bbf760*=0xd8, lpOverlapped=0x0) returned 1 [0203.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e80 [0203.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ea8 [0203.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ea8) returned 1 [0203.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0203.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0203.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055410) returned 1 [0203.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5720) returned 1 [0203.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30566c8 [0203.560] SetFilePointerEx (in: hFile=0x1208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.560] WriteFile (in: hFile=0x1208, lpBuffer=0x30bc420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12bbf7d4, lpOverlapped=0x0 | out: lpBuffer=0x30bc420*, lpNumberOfBytesWritten=0x12bbf7d4*=0x10c, lpOverlapped=0x0) returned 1 [0204.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0204.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300550) returned 1 [0204.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ea8) returned 1 [0204.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30566c8) returned 1 [0204.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e80) returned 1 [0204.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3441c0) returned 1 [0204.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447d8) returned 1 [0204.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344288) returned 1 [0204.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5ba08 [0204.060] wcscpy (in: _Dest=0x3e5ba08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" [0204.060] wcscat (in: _Dest=0x3e5ba08, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json.f0dbec" [0204.060] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json.f0dbec", NtPathName=0x12bbf758, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335db0 [0204.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335db0) returned 1 [0204.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833f330) returned 1 [0204.495] NtQueryInformationFile (in: FileHandle=0x1208, IoStatusBlock=0x12bbf730, FileInformation=0x12bbf738, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12bbf730, FileInformation=0x12bbf738) returned 0x0 [0204.495] NtSetInformationFile (FileHandle=0x1208, IoStatusBlock=0x12bbf730, FileInformation=0x12bbf738, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ba08) returned 1 [0207.516] FlushFileBuffers (hFile=0x1208) returned 1 [0207.846] CloseHandle (hObject=0x1208) returned 1 [0208.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef85f0 [0208.095] wcscpy (in: _Dest=0x3ef85f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" [0208.095] wcscat (in: _Dest=0x3ef85f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\F0DBEC-Readme.txt" [0208.095] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\f0dbec-readme.txt")) returned 0xffffffff [0208.095] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x103c [0208.451] WriteFile (in: hFile=0x103c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12bbf77c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12bbf77c*=0x70c, lpOverlapped=0x0) returned 1 [0209.430] CloseHandle (hObject=0x103c) returned 1 [0209.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef85f0) returned 1 [0209.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a5c20) returned 1 Thread: id = 5576 os_tid = 0xb48 [0186.247] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json")) returned 0x2020 [0190.254] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0199.773] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x147c [0199.774] GetFileSizeEx (in: hFile=0x147c, lpFileSize=0xc2af968 | out: lpFileSize=0xc2af968*=246) returned 1 [0199.774] SetFilePointerEx (in: hFile=0x147c, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.774] ReadFile (in: hFile=0x147c, lpBuffer=0xc2af974, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc2af950, lpOverlapped=0x0 | out: lpBuffer=0xc2af974*, lpNumberOfBytesRead=0xc2af950*=0x4, lpOverlapped=0x0) returned 1 [0199.776] SetFilePointerEx (in: hFile=0x147c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344670 [0199.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344350 [0199.776] NtQuerySystemTime (in: CurrentTime=0xc2af8f0 | out: CurrentTime=0xc2af8f0*=132471540676392000) returned 0x0 [0199.776] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x6bf2c878 [0199.776] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x42fde7ef [0199.776] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x41df3627 [0199.776] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x39a3bda5 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x685c45bc [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x4d863d29 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x2cde025 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x26b22ae6 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x4f89188e [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x6f1624cf [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x86dd341 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x7a96ac5d [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x79c0dc46 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x37f6108e [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x4598a92e [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x66357d61 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x6de94beb [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x186a102e [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x9440f01 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x76ef55a4 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x3a617af0 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x1de56ca4 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x34a1ccaf [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x43df9c4a [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x663c7e71 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x61924016 [0199.777] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x298b0822 [0199.778] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x20b7f00c [0199.778] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x7dd316ad [0199.778] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x707082c6 [0199.778] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x4dae5b56 [0199.778] RtlRandomEx (in: Seed=0xc2af8e8 | out: Seed=0xc2af8e8) returned 0x325b349b [0199.790] ReadFile (in: hFile=0x147c, lpBuffer=0x8257478, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0xc2af8e4, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xc2af8e4*=0xf6, lpOverlapped=0x0) returned 1 [0199.790] SetFilePointerEx (in: hFile=0x147c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.790] WriteFile (in: hFile=0x147c, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0xc2af8e8, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xc2af8e8*=0xf6, lpOverlapped=0x0) returned 1 [0203.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ed0 [0203.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ef8 [0203.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ef8) returned 1 [0203.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0203.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0203.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055488) returned 1 [0203.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6770) returned 1 [0203.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3246d0 [0203.563] SetFilePointerEx (in: hFile=0x147c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.563] WriteFile (in: hFile=0x147c, lpBuffer=0x30bc650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc2af95c, lpOverlapped=0x0 | out: lpBuffer=0x30bc650*, lpNumberOfBytesWritten=0xc2af95c*=0x10c, lpOverlapped=0x0) returned 1 [0204.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0204.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36440) returned 1 [0204.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ef8) returned 1 [0204.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3246d0) returned 1 [0204.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ed0) returned 1 [0204.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344670) returned 1 [0204.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344418) returned 1 [0204.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3443a0) returned 1 [0204.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5bb40 [0204.067] wcscpy (in: _Dest=0x3e5bb40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" [0204.067] wcscat (in: _Dest=0x3e5bb40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json.f0dbec" [0204.067] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0xc2af8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335ef8 [0204.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335ef8) returned 1 [0204.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83398a0) returned 1 [0204.496] NtQueryInformationFile (in: FileHandle=0x147c, IoStatusBlock=0xc2af8b8, FileInformation=0xc2af8c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc2af8b8, FileInformation=0xc2af8c0) returned 0x0 [0204.496] NtSetInformationFile (FileHandle=0x147c, IoStatusBlock=0xc2af8b8, FileInformation=0xc2af8c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bb40) returned 1 [0207.521] FlushFileBuffers (hFile=0x147c) returned 1 [0207.552] CloseHandle (hObject=0x147c) returned 1 [0207.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f7118 [0207.993] wcscpy (in: _Dest=0x81f7118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" [0207.993] wcscat (in: _Dest=0x81f7118, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\F0DBEC-Readme.txt" [0207.993] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0207.993] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a74 [0208.406] WriteFile (in: hFile=0x1a74, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc2af904, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc2af904*=0x70c, lpOverlapped=0x0) returned 1 [0209.280] CloseHandle (hObject=0x1a74) returned 1 [0209.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7118) returned 1 [0209.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a5d48) returned 1 Thread: id = 5577 os_tid = 0x9d0 [0186.248] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json")) returned 0x2020 [0190.265] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0199.479] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1720 [0199.480] GetFileSizeEx (in: hFile=0x1720, lpFileSize=0x12fef7c8 | out: lpFileSize=0x12fef7c8*=254) returned 1 [0199.480] SetFilePointerEx (in: hFile=0x1720, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.480] ReadFile (in: hFile=0x1720, lpBuffer=0x12fef7d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12fef7b0, lpOverlapped=0x0 | out: lpBuffer=0x12fef7d4*, lpNumberOfBytesRead=0x12fef7b0*=0x4, lpOverlapped=0x0) returned 1 [0199.482] SetFilePointerEx (in: hFile=0x1720, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0199.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0199.483] NtQuerySystemTime (in: CurrentTime=0x12fef750 | out: CurrentTime=0x12fef750*=132471540673740000) returned 0x0 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x38065d2b [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x29f5a225 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x1c29d5ac [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x678dde5d [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x204f7332 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x77b4d1cd [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x6f1ed381 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x2a1a4d1a [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x680deef5 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x1ae13b3a [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x6fc23b8a [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x66539300 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x554b614b [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x1b5afc1d [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0xb557029 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x6505f301 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x6fc5892f [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x779de842 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x1ef7ae75 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x4fd5fd62 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x7d1dfbb1 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0xcba9924 [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x48c0d09c [0199.483] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x736727bf [0199.484] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x3d0b4946 [0199.484] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x2853df42 [0199.484] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x79fe2c49 [0199.484] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x67ec8723 [0199.484] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x467fb55e [0199.484] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x7bbaf02 [0199.484] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x1dc8315e [0199.484] RtlRandomEx (in: Seed=0x12fef748 | out: Seed=0x12fef748) returned 0x6b533210 [0199.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8379598 [0199.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x837d1a0 [0199.496] ReadFile (in: hFile=0x1720, lpBuffer=0x8379598, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0x12fef744, lpOverlapped=0x0 | out: lpBuffer=0x8379598*, lpNumberOfBytesRead=0x12fef744*=0xfe, lpOverlapped=0x0) returned 1 [0199.496] SetFilePointerEx (in: hFile=0x1720, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.496] WriteFile (in: hFile=0x1720, lpBuffer=0x837d1a0*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x12fef748, lpOverlapped=0x0 | out: lpBuffer=0x837d1a0*, lpNumberOfBytesWritten=0x12fef748*=0xfe, lpOverlapped=0x0) returned 1 [0203.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a70 [0203.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a98 [0203.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a98) returned 1 [0203.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x837d1a0) returned 1 [0203.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8379598) returned 1 [0203.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054df8) returned 1 [0203.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e64e8) returned 1 [0203.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68f70 [0203.509] SetFilePointerEx (in: hFile=0x1720, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.509] WriteFile (in: hFile=0x1720, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12fef7bc, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0x12fef7bc*=0x10c, lpOverlapped=0x0) returned 1 [0204.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0204.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ee0) returned 1 [0204.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a98) returned 1 [0204.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f70) returned 1 [0204.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a70) returned 1 [0204.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0204.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ca8) returned 1 [0204.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef14f0) returned 1 [0204.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f74c0 [0204.015] wcscpy (in: _Dest=0x81f74c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" [0204.015] wcscat (in: _Dest=0x81f74c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json.f0dbec" [0204.015] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0x12fef740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8334f98 [0204.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334f98) returned 1 [0204.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336b58) returned 1 [0204.471] NtQueryInformationFile (in: FileHandle=0x1720, IoStatusBlock=0x12fef718, FileInformation=0x12fef720, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12fef718, FileInformation=0x12fef720) returned 0x0 [0204.471] NtSetInformationFile (FileHandle=0x1720, IoStatusBlock=0x12fef718, FileInformation=0x12fef720, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f74c0) returned 1 [0207.455] FlushFileBuffers (hFile=0x1720) returned 1 [0207.471] CloseHandle (hObject=0x1720) returned 1 [0207.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83efde8 [0207.968] wcscpy (in: _Dest=0x83efde8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" [0207.968] wcscat (in: _Dest=0x83efde8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\F0DBEC-Readme.txt" [0207.968] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0207.969] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0c [0208.391] WriteFile (in: hFile=0x1d0c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12fef764, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12fef764*=0x70c, lpOverlapped=0x0) returned 1 [0209.233] CloseHandle (hObject=0x1d0c) returned 1 [0209.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83efde8) returned 1 [0209.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a5e70) returned 1 Thread: id = 5578 os_tid = 0x9e0 [0186.251] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json")) returned 0x2020 [0190.265] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0199.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b90 [0199.498] GetFileSizeEx (in: hFile=0x1b90, lpFileSize=0x1375f9d8 | out: lpFileSize=0x1375f9d8*=268) returned 1 [0199.498] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.498] ReadFile (in: hFile=0x1b90, lpBuffer=0x1375f9e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1375f9c0, lpOverlapped=0x0 | out: lpBuffer=0x1375f9e4*, lpNumberOfBytesRead=0x1375f9c0*=0x4, lpOverlapped=0x0) returned 1 [0199.500] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1798 [0199.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0199.501] NtQuerySystemTime (in: CurrentTime=0x1375f960 | out: CurrentTime=0x1375f960*=132471540673896000) returned 0x0 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x2c065730 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x1d8fa30 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x4949994e [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x7bb5079d [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x5389ceeb [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x62030929 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x74609590 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x22ffe390 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x5ebbb4d7 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x61486c91 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0xb9be981 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x2f0994b0 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0xbf19b01 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x33e44d40 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x2eca8c34 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x20c39958 [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x641482db [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x323f378f [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x5454d11b [0199.501] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0xf3172c8 [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x331e1e80 [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x6b1d05dc [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x32d6444d [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x28b8e51f [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x61bf747a [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x2cebd060 [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x1fa96c76 [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x648dcf95 [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x7cb5bb94 [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x68a28359 [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x5d8ae621 [0199.502] RtlRandomEx (in: Seed=0x1375f958 | out: Seed=0x1375f958) returned 0x4d4576a8 [0199.512] ReadFile (in: hFile=0x1b90, lpBuffer=0x8353d48, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0x1375f954, lpOverlapped=0x0 | out: lpBuffer=0x8353d48*, lpNumberOfBytesRead=0x1375f954*=0x10c, lpOverlapped=0x0) returned 1 [0199.512] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.512] WriteFile (in: hFile=0x1b90, lpBuffer=0x835b558*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1375f958, lpOverlapped=0x0 | out: lpBuffer=0x835b558*, lpNumberOfBytesWritten=0x1375f958*=0x10c, lpOverlapped=0x0) returned 1 [0203.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ac0 [0203.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ae8 [0203.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ae8) returned 1 [0203.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835b558) returned 1 [0203.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8353d48) returned 1 [0203.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054e70) returned 1 [0203.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6458) returned 1 [0203.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68dc0 [0203.514] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.515] WriteFile (in: hFile=0x1b90, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1375f9cc, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x1375f9cc*=0x10c, lpOverlapped=0x0) returned 1 [0204.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0204.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d90) returned 1 [0204.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ae8) returned 1 [0204.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68dc0) returned 1 [0204.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ac0) returned 1 [0204.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1798) returned 1 [0204.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0204.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1630) returned 1 [0204.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5aca0 [0204.018] wcscpy (in: _Dest=0x3e5aca0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" [0204.018] wcscat (in: _Dest=0x3e5aca0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json.f0dbec" [0204.018] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0x1375f950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x83350e0 [0204.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83350e0) returned 1 [0204.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833d728) returned 1 [0204.473] NtQueryInformationFile (in: FileHandle=0x1b90, IoStatusBlock=0x1375f928, FileInformation=0x1375f930, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1375f928, FileInformation=0x1375f930) returned 0x0 [0204.473] NtSetInformationFile (FileHandle=0x1b90, IoStatusBlock=0x1375f928, FileInformation=0x1375f930, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5aca0) returned 1 [0207.459] FlushFileBuffers (hFile=0x1b90) returned 1 [0207.475] CloseHandle (hObject=0x1b90) returned 1 [0207.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83eff20 [0207.970] wcscpy (in: _Dest=0x83eff20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" [0207.970] wcscat (in: _Dest=0x83eff20, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\F0DBEC-Readme.txt" [0207.970] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0207.970] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8c [0208.394] WriteFile (in: hFile=0x1c8c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1375f974, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1375f974*=0x70c, lpOverlapped=0x0) returned 1 [0209.241] CloseHandle (hObject=0x1c8c) returned 1 [0209.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eff20) returned 1 [0209.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0060) returned 1 Thread: id = 5579 os_tid = 0x9f0 [0186.253] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json")) returned 0x2020 [0190.266] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0199.512] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b5c [0199.513] GetFileSizeEx (in: hFile=0x1b5c, lpFileSize=0x1379fc98 | out: lpFileSize=0x1379fc98*=231) returned 1 [0199.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1680 [0199.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0199.513] NtQuerySystemTime (in: CurrentTime=0x1379fc20 | out: CurrentTime=0x1379fc20*=132471540674052000) returned 0x0 [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x76b17d5f [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x51fc0af9 [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x55592a79 [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x7b991034 [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x2457d000 [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x66783407 [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x57951c9f [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x1cc6f972 [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x77f5963c [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x176f301a [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0xb463801 [0199.513] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x66f02b85 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x10bb6f7b [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x9d3293f [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x45a67fd7 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x3a69e63b [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x290319b0 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x46ef51ae [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x36af3e45 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x3450d239 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x6ad97590 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x5bcfe537 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x7e08adcb [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x2d7c1314 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x31538b5d [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x72a3e60f [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x46e89d5f [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x48f86b4 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x52d2291b [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x40d5a2aa [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x51357b93 [0199.514] RtlRandomEx (in: Seed=0x1379fc18 | out: Seed=0x1379fc18) returned 0x35100fb0 [0199.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8366970 [0199.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x836e180 [0199.528] ReadFile (in: hFile=0x1b5c, lpBuffer=0x8366970, nNumberOfBytesToRead=0xe7, lpNumberOfBytesRead=0x1379fc14, lpOverlapped=0x0 | out: lpBuffer=0x8366970*, lpNumberOfBytesRead=0x1379fc14*=0xe7, lpOverlapped=0x0) returned 1 [0199.530] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.530] WriteFile (in: hFile=0x1b5c, lpBuffer=0x836e180*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x1379fc18, lpOverlapped=0x0 | out: lpBuffer=0x836e180*, lpNumberOfBytesWritten=0x1379fc18*=0xe7, lpOverlapped=0x0) returned 1 [0203.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b10 [0203.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b38 [0203.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b38) returned 1 [0203.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836e180) returned 1 [0203.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8366970) returned 1 [0203.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054ee8) returned 1 [0203.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e69b0) returned 1 [0203.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69000 [0203.519] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.519] WriteFile (in: hFile=0x1b5c, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1379fc8c, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x1379fc8c*=0x10c, lpOverlapped=0x0) returned 1 [0204.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0204.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69030) returned 1 [0204.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b38) returned 1 [0204.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69000) returned 1 [0204.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b10) returned 1 [0204.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1680) returned 1 [0204.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef10e0) returned 1 [0204.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0204.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5add8 [0204.021] wcscpy (in: _Dest=0x3e5add8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" [0204.021] wcscat (in: _Dest=0x3e5add8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json.f0dbec" [0204.021] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0x1379fc10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335228 [0204.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335228) returned 1 [0204.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833ecb8) returned 1 [0204.474] NtQueryInformationFile (in: FileHandle=0x1b5c, IoStatusBlock=0x1379fbe8, FileInformation=0x1379fbf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1379fbe8, FileInformation=0x1379fbf0) returned 0x0 [0204.474] NtSetInformationFile (FileHandle=0x1b5c, IoStatusBlock=0x1379fbe8, FileInformation=0x1379fbf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5add8) returned 1 [0207.465] FlushFileBuffers (hFile=0x1b5c) returned 1 [0207.480] CloseHandle (hObject=0x1b5c) returned 1 [0207.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83f0058 [0207.972] wcscpy (in: _Dest=0x83f0058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" [0207.972] wcscat (in: _Dest=0x83f0058, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\F0DBEC-Readme.txt" [0207.972] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0207.972] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cb0 [0208.395] WriteFile (in: hFile=0x1cb0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1379fc34, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1379fc34*=0x70c, lpOverlapped=0x0) returned 1 [0209.246] CloseHandle (hObject=0x1cb0) returned 1 [0209.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f0058) returned 1 [0209.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0188) returned 1 Thread: id = 5580 os_tid = 0xa00 [0186.253] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json")) returned 0x2020 [0190.266] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0199.531] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x171c [0199.531] GetFileSizeEx (in: hFile=0x171c, lpFileSize=0x1383fa50 | out: lpFileSize=0x1383fa50*=297) returned 1 [0199.532] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x125, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.532] ReadFile (in: hFile=0x171c, lpBuffer=0x1383fa5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1383fa38, lpOverlapped=0x0 | out: lpBuffer=0x1383fa5c*, lpNumberOfBytesRead=0x1383fa38*=0x4, lpOverlapped=0x0) returned 1 [0199.534] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0199.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0199.534] NtQuerySystemTime (in: CurrentTime=0x1383f9d8 | out: CurrentTime=0x1383f9d8*=132471540674208000) returned 0x0 [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x572e75f0 [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x176f4939 [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x69bf0e2f [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x6c3bd164 [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x4d46a855 [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x3b168ab0 [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x1bc95ad4 [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x3534d8cf [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x2aa4432b [0199.534] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x14080a24 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x35278811 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x7a99ee05 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x599ec34d [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x14bc1302 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x41260b6d [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x2f8f4545 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x42d83be5 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x321e9e7d [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0xb61e1d9 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x2ca2d312 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x2d391bd2 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x57b3ef67 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x30d97a00 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x3d56290 [0199.535] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x641ff7bf [0199.536] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x768ecc4f [0199.536] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0xb053f1e [0199.536] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x3b38cf4a [0199.536] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x3e6730eb [0199.536] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x638e0021 [0199.536] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0xe8e52dc [0199.536] RtlRandomEx (in: Seed=0x1383f9d0 | out: Seed=0x1383f9d0) returned 0x3021dddb [0199.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149fa8d0 [0199.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149fe4d8 [0199.553] ReadFile (in: hFile=0x171c, lpBuffer=0x149fa8d0, nNumberOfBytesToRead=0x129, lpNumberOfBytesRead=0x1383f9cc, lpOverlapped=0x0 | out: lpBuffer=0x149fa8d0*, lpNumberOfBytesRead=0x1383f9cc*=0x129, lpOverlapped=0x0) returned 1 [0199.553] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.553] WriteFile (in: hFile=0x171c, lpBuffer=0x149fe4d8*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x1383f9d0, lpOverlapped=0x0 | out: lpBuffer=0x149fe4d8*, lpNumberOfBytesWritten=0x1383f9d0*=0x129, lpOverlapped=0x0) returned 1 [0203.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b60 [0203.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b88 [0203.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b88) returned 1 [0203.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149fe4d8) returned 1 [0203.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149fa8d0) returned 1 [0203.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054f60) returned 1 [0203.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6530) returned 1 [0203.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69060 [0203.522] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.522] WriteFile (in: hFile=0x171c, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1383fa44, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0x1383fa44*=0x10c, lpOverlapped=0x0) returned 1 [0204.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0204.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69090) returned 1 [0204.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b88) returned 1 [0204.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69060) returned 1 [0204.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b60) returned 1 [0204.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0204.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3079d90) returned 1 [0204.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x307a4c0) returned 1 [0204.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5af10 [0204.024] wcscpy (in: _Dest=0x3e5af10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" [0204.024] wcscat (in: _Dest=0x3e5af10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json.f0dbec" [0204.025] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0x1383f9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335370 [0204.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335370) returned 1 [0204.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83424c8) returned 1 [0204.476] NtQueryInformationFile (in: FileHandle=0x171c, IoStatusBlock=0x1383f9a0, FileInformation=0x1383f9a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1383f9a0, FileInformation=0x1383f9a8) returned 0x0 [0204.476] NtSetInformationFile (FileHandle=0x171c, IoStatusBlock=0x1383f9a0, FileInformation=0x1383f9a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5af10) returned 1 [0207.469] FlushFileBuffers (hFile=0x171c) returned 1 [0207.485] CloseHandle (hObject=0x171c) returned 1 [0207.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83f0190 [0207.974] wcscpy (in: _Dest=0x83f0190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" [0207.974] wcscat (in: _Dest=0x83f0190, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\F0DBEC-Readme.txt" [0207.974] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0207.974] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x189c [0208.396] WriteFile (in: hFile=0x189c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1383f9ec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1383f9ec*=0x70c, lpOverlapped=0x0) returned 1 [0209.252] CloseHandle (hObject=0x189c) returned 1 [0209.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f0190) returned 1 [0209.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a02b0) returned 1 Thread: id = 5581 os_tid = 0xa10 [0186.254] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json")) returned 0x2020 [0190.267] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0199.554] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1710 [0199.554] GetFileSizeEx (in: hFile=0x1710, lpFileSize=0x1337fd70 | out: lpFileSize=0x1337fd70*=263) returned 1 [0199.554] SetFilePointerEx (in: hFile=0x1710, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.555] ReadFile (in: hFile=0x1710, lpBuffer=0x1337fd7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1337fd58, lpOverlapped=0x0 | out: lpBuffer=0x1337fd7c*, lpNumberOfBytesRead=0x1337fd58*=0x4, lpOverlapped=0x0) returned 1 [0199.557] SetFilePointerEx (in: hFile=0x1710, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x307a830 [0199.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x307a2b8 [0199.557] NtQuerySystemTime (in: CurrentTime=0x1337fcf8 | out: CurrentTime=0x1337fcf8*=132471540674520000) returned 0x0 [0199.557] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x236eaecb [0199.557] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x7fb82ebb [0199.557] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x2ad256dd [0199.557] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x4a25b0ec [0199.557] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x8494091 [0199.557] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x3a4ef0c [0199.557] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x103da30b [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x49598f21 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x62f42ed4 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x4a6644ae [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x251b29eb [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x778e17ae [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x28d8b05b [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x4d6d1053 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0xa01ff9f [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0xa6ffc41 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x6dbc662c [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x46dd7e33 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x62bf3445 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x58d3383d [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x50ef9a8 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x2fbfa27 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x586a3f5b [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x1cbe8f35 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x4a486905 [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x35bb465a [0199.558] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x6da4fc2b [0199.559] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x4248c12e [0199.559] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x415eabbe [0199.559] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x44cf2b7d [0199.559] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x79d8daf2 [0199.559] RtlRandomEx (in: Seed=0x1337fcf0 | out: Seed=0x1337fcf0) returned 0x35cad3da [0199.597] ReadFile (in: hFile=0x1710, lpBuffer=0x149f30c0, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0x1337fcec, lpOverlapped=0x0 | out: lpBuffer=0x149f30c0*, lpNumberOfBytesRead=0x1337fcec*=0x107, lpOverlapped=0x0) returned 1 [0199.598] SetFilePointerEx (in: hFile=0x1710, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.598] WriteFile (in: hFile=0x1710, lpBuffer=0x149f6cc8*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x1337fcf0, lpOverlapped=0x0 | out: lpBuffer=0x149f6cc8*, lpNumberOfBytesWritten=0x1337fcf0*=0x107, lpOverlapped=0x0) returned 1 [0203.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063bb0 [0203.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063bd8 [0203.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bd8) returned 1 [0203.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149f6cc8) returned 1 [0203.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149f30c0) returned 1 [0203.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054fd8) returned 1 [0203.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6848) returned 1 [0203.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e690c0 [0203.533] SetFilePointerEx (in: hFile=0x1710, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.533] WriteFile (in: hFile=0x1710, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1337fd64, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x1337fd64*=0x10c, lpOverlapped=0x0) returned 1 [0204.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0204.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690f0) returned 1 [0204.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bd8) returned 1 [0204.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690c0) returned 1 [0204.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bb0) returned 1 [0204.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x307a830) returned 1 [0204.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3079b38) returned 1 [0204.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0204.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5b048 [0204.028] wcscpy (in: _Dest=0x3e5b048, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" [0204.028] wcscat (in: _Dest=0x3e5b048, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json.f0dbec" [0204.028] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json.f0dbec", NtPathName=0x1337fce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x83354b8 [0204.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83354b8) returned 1 [0204.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833d500) returned 1 [0204.478] NtQueryInformationFile (in: FileHandle=0x1710, IoStatusBlock=0x1337fcc0, FileInformation=0x1337fcc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1337fcc0, FileInformation=0x1337fcc8) returned 0x0 [0204.478] NtSetInformationFile (FileHandle=0x1710, IoStatusBlock=0x1337fcc0, FileInformation=0x1337fcc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5b048) returned 1 [0207.473] FlushFileBuffers (hFile=0x1710) returned 1 [0207.490] CloseHandle (hObject=0x1710) returned 1 [0207.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83f02c8 [0207.976] wcscpy (in: _Dest=0x83f02c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" [0207.976] wcscat (in: _Dest=0x83f02c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\F0DBEC-Readme.txt" [0207.976] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\f0dbec-readme.txt")) returned 0xffffffff [0207.977] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cb4 [0208.395] WriteFile (in: hFile=0x1cb4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1337fd0c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1337fd0c*=0x70c, lpOverlapped=0x0) returned 1 [0209.249] CloseHandle (hObject=0x1cb4) returned 1 [0209.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f02c8) returned 1 [0209.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a03d8) returned 1 Thread: id = 5582 os_tid = 0xa30 [0186.254] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json")) returned 0x2020 [0190.268] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0199.599] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16fc [0199.600] GetFileSizeEx (in: hFile=0x16fc, lpFileSize=0x138ffb68 | out: lpFileSize=0x138ffb68*=241) returned 1 [0199.600] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.600] ReadFile (in: hFile=0x16fc, lpBuffer=0x138ffb74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x138ffb50, lpOverlapped=0x0 | out: lpBuffer=0x138ffb74*, lpNumberOfBytesRead=0x138ffb50*=0x4, lpOverlapped=0x0) returned 1 [0199.608] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0199.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0199.608] NtQuerySystemTime (in: CurrentTime=0x138ffaf0 | out: CurrentTime=0x138ffaf0*=132471540674832000) returned 0x0 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x2f05327b [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x65b01194 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x1050e6c [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x4a26be30 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x59cd5fb1 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x27ed20e3 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x52da827b [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x2ad14386 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x6b5b288b [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x216e0049 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x5199ad95 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x45832b04 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x5f5f54f7 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0xea4925c [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0xa1a4ac1 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x6e868b9 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x2363c76c [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x47cbf323 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x22de913c [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x189ed52c [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x5c8d2879 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x7079d2a5 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x4946a059 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0xc48f7eb [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x22a73e0a [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x3153afc8 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x34a78d89 [0199.609] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x6bd3b88c [0199.610] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x99a5997 [0199.610] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x6dea7d98 [0199.610] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x4bdc0694 [0199.610] RtlRandomEx (in: Seed=0x138ffae8 | out: Seed=0x138ffae8) returned 0x7834d5c4 [0199.623] ReadFile (in: hFile=0x16fc, lpBuffer=0x149c6060, nNumberOfBytesToRead=0xf1, lpNumberOfBytesRead=0x138ffae4, lpOverlapped=0x0 | out: lpBuffer=0x149c6060*, lpNumberOfBytesRead=0x138ffae4*=0xf1, lpOverlapped=0x0) returned 1 [0199.623] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.624] WriteFile (in: hFile=0x16fc, lpBuffer=0x149c9c68*, nNumberOfBytesToWrite=0xf1, lpNumberOfBytesWritten=0x138ffae8, lpOverlapped=0x0 | out: lpBuffer=0x149c9c68*, lpNumberOfBytesWritten=0x138ffae8*=0xf1, lpOverlapped=0x0) returned 1 [0203.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c00 [0203.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c28 [0203.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c28) returned 1 [0203.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149c9c68) returned 1 [0203.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149c6060) returned 1 [0203.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055050) returned 1 [0203.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5f90) returned 1 [0203.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df3908 [0203.536] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.536] WriteFile (in: hFile=0x16fc, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x138ffb5c, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x138ffb5c*=0x10c, lpOverlapped=0x0) returned 1 [0204.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0204.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df35a8) returned 1 [0204.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c28) returned 1 [0204.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3908) returned 1 [0204.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c00) returned 1 [0204.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0204.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0204.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0204.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5b180 [0204.035] wcscpy (in: _Dest=0x3e5b180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" [0204.035] wcscat (in: _Dest=0x3e5b180, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json.f0dbec" [0204.035] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0x138ffae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335600 [0204.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335600) returned 1 [0204.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8339000) returned 1 [0204.479] NtQueryInformationFile (in: FileHandle=0x16fc, IoStatusBlock=0x138ffab8, FileInformation=0x138ffac0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x138ffab8, FileInformation=0x138ffac0) returned 0x0 [0204.479] NtSetInformationFile (FileHandle=0x16fc, IoStatusBlock=0x138ffab8, FileInformation=0x138ffac0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5b180) returned 1 [0207.478] FlushFileBuffers (hFile=0x16fc) returned 1 [0207.494] CloseHandle (hObject=0x16fc) returned 1 [0207.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83f0400 [0207.978] wcscpy (in: _Dest=0x83f0400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" [0207.978] wcscat (in: _Dest=0x83f0400, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\F0DBEC-Readme.txt" [0207.978] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0207.978] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19fc [0208.396] WriteFile (in: hFile=0x19fc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x138ffb04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x138ffb04*=0x70c, lpOverlapped=0x0) returned 1 [0209.255] CloseHandle (hObject=0x19fc) returned 1 [0209.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f0400) returned 1 [0209.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0500) returned 1 Thread: id = 5583 os_tid = 0x130c [0186.254] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json")) returned 0x2020 [0190.255] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0199.791] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x564 [0199.791] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x12ddfee0 | out: lpFileSize=0x12ddfee0*=218) returned 1 [0199.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344350 [0199.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0199.792] NtQuerySystemTime (in: CurrentTime=0x12ddfe68 | out: CurrentTime=0x12ddfe68*=132471540676548000) returned 0x0 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x53eeeb08 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x1f5ce4ca [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0xc8fb2d7 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x7a0b15c3 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x8c384c1 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x45e76ba [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x13f64f6d [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x7ce41b82 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x41df3627 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0xb32872 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x37f937ee [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x1ab3ba63 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x33111ee7 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x5a2e9dec [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x68472530 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x5baa88fb [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x23b77e2a [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x9193641 [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x4a24ebcb [0199.792] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x10b2d5c0 [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x6ddf2791 [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x153622e4 [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x537b1c55 [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x565d83d7 [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x124f0d0a [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x66c91938 [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x3c6db83f [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x3892df44 [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x7a00bbf5 [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x3108fe0c [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x343bb17e [0199.793] RtlRandomEx (in: Seed=0x12ddfe60 | out: Seed=0x12ddfe60) returned 0x4fc92806 [0199.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825ec88 [0199.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8262890 [0199.805] ReadFile (in: hFile=0x564, lpBuffer=0x825ec88, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0x12ddfe5c, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0x12ddfe5c*=0xda, lpOverlapped=0x0) returned 1 [0201.696] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.696] WriteFile (in: hFile=0x564, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x12ddfe60, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0x12ddfe60*=0xda, lpOverlapped=0x0) returned 1 [0203.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0203.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0203.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0203.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0203.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0203.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055500) returned 1 [0203.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6b60) returned 1 [0203.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69720 [0203.979] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.980] WriteFile (in: hFile=0x564, lpBuffer=0x81e0598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12ddfed4, lpOverlapped=0x0 | out: lpBuffer=0x81e0598*, lpNumberOfBytesWritten=0x12ddfed4*=0x10c, lpOverlapped=0x0) returned 1 [0204.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0598) returned 1 [0204.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0204.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0204.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0204.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0204.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344350) returned 1 [0204.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304468) returned 1 [0204.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b340) returned 1 [0204.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8348670 [0204.448] wcscpy (in: _Dest=0x8348670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" [0204.449] wcscat (in: _Dest=0x8348670, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json.f0dbec" [0204.449] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0x12ddfe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3c5b8 [0207.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c5b8) returned 1 [0207.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f98c8) returned 1 [0207.420] NtQueryInformationFile (in: FileHandle=0x564, IoStatusBlock=0x12ddfe30, FileInformation=0x12ddfe38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12ddfe30, FileInformation=0x12ddfe38) returned 0x0 [0207.420] NtSetInformationFile (FileHandle=0x564, IoStatusBlock=0x12ddfe30, FileInformation=0x12ddfe38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348670) returned 1 [0208.626] FlushFileBuffers (hFile=0x564) returned 1 [0208.871] CloseHandle (hObject=0x564) returned 1 [0208.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84041b8 [0208.921] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" [0208.921] wcscat (in: _Dest=0x84041b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\F0DBEC-Readme.txt" [0208.921] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0208.922] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c54 [0208.944] WriteFile (in: hFile=0x1c54, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12ddfe7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12ddfe7c*=0x70c, lpOverlapped=0x0) returned 1 [0208.963] CloseHandle (hObject=0x1c54) returned 1 [0208.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84041b8) returned 1 [0208.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0628) returned 1 Thread: id = 5584 os_tid = 0xb74 [0186.255] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json")) returned 0x2020 [0190.256] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0199.808] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe6c [0199.809] GetFileSizeEx (in: hFile=0xe6c, lpFileSize=0x11a4fb70 | out: lpFileSize=0x11a4fb70*=232) returned 1 [0199.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x32b390 [0199.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc1f8 [0199.810] NtQuerySystemTime (in: CurrentTime=0x11a4faf8 | out: CurrentTime=0x11a4faf8*=132471540676704000) returned 0x0 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x488adc84 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x6ddf2791 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x27cfe063 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x2433df21 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x748a920 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x18ae6a17 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x19e2969b [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x76078ffc [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x5e808dfe [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x5e4e30fc [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x842fa81 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x7dcdfdb5 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0xf230c7f [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x3f28b82e [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x751e6978 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x671ea8f9 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x43f7d723 [0199.810] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x9ca286e [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0xd5e22e5 [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x285bd4de [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x232c6d1d [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x336238c8 [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x5e049a21 [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x3a470286 [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x3e8abc54 [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x6b4a62b0 [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x27965eea [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x7add3450 [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0xad4b4ce [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x42c6a069 [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x631801ac [0199.811] RtlRandomEx (in: Seed=0x11a4faf0 | out: Seed=0x11a4faf0) returned 0x6a6222a6 [0199.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8266498 [0199.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0199.823] ReadFile (in: hFile=0xe6c, lpBuffer=0x8266498, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x11a4faec, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0x11a4faec*=0xe8, lpOverlapped=0x0) returned 1 [0199.826] SetFilePointerEx (in: hFile=0xe6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.826] WriteFile (in: hFile=0xe6c, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x11a4faf0, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0x11a4faf0*=0xe8, lpOverlapped=0x0) returned 1 [0203.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f20 [0203.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f48 [0203.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f48) returned 1 [0203.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0203.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0203.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055578) returned 1 [0203.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7268) returned 1 [0203.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36470 [0203.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f48) returned 1 [0203.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f364a0 [0203.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f48 [0203.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f70 [0203.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f70) returned 1 [0203.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055578) returned 1 [0203.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7268) returned 1 [0203.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bb930 [0203.572] SetFilePointerEx (in: hFile=0xe6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.572] WriteFile (in: hFile=0xe6c, lpBuffer=0x30bb930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11a4fb64, lpOverlapped=0x0 | out: lpBuffer=0x30bb930*, lpNumberOfBytesWritten=0x11a4fb64*=0x10c, lpOverlapped=0x0) returned 1 [0204.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 [0204.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f364a0) returned 1 [0204.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f48) returned 1 [0204.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36470) returned 1 [0204.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f20) returned 1 [0204.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b390) returned 1 [0204.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc2e8) returned 1 [0204.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc270) returned 1 [0204.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5bc78 [0204.074] wcscpy (in: _Dest=0x3e5bc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" [0204.074] wcscat (in: _Dest=0x3e5bc78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json.f0dbec" [0204.074] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0x11a4fae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8336040 [0204.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336040) returned 1 [0204.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833a368) returned 1 [0204.500] NtQueryInformationFile (in: FileHandle=0xe6c, IoStatusBlock=0x11a4fac0, FileInformation=0x11a4fac8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11a4fac0, FileInformation=0x11a4fac8) returned 0x0 [0204.500] NtSetInformationFile (FileHandle=0xe6c, IoStatusBlock=0x11a4fac0, FileInformation=0x11a4fac8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bc78) returned 1 [0207.525] FlushFileBuffers (hFile=0xe6c) returned 1 [0207.555] CloseHandle (hObject=0xe6c) returned 1 [0207.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6fe0 [0207.997] wcscpy (in: _Dest=0x81f6fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" [0207.997] wcscat (in: _Dest=0x81f6fe0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\F0DBEC-Readme.txt" [0207.997] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0207.997] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17c0 [0208.408] WriteFile (in: hFile=0x17c0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x11a4fb0c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x11a4fb0c*=0x70c, lpOverlapped=0x0) returned 1 [0209.283] CloseHandle (hObject=0x17c0) returned 1 [0209.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6fe0) returned 1 [0209.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0750) returned 1 Thread: id = 5585 os_tid = 0x1564 [0186.255] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json")) returned 0x2020 [0190.256] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0199.827] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3e8 [0199.828] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x1149fac8 | out: lpFileSize=0x1149fac8*=227) returned 1 [0199.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc1f8 [0199.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc1d0 [0199.828] NtQuerySystemTime (in: CurrentTime=0x1149fa50 | out: CurrentTime=0x1149fa50*=132471540676860000) returned 0x0 [0199.828] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x2eda910f [0199.828] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x265d6e30 [0199.828] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x58842cc1 [0199.828] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x7ed4901 [0199.828] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x733c0961 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x2e1168da [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x56275706 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x7cdc7558 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x576acdc1 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x745a4f6c [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x7eef1254 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x1cc711fd [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x3630989 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x3a9ed7af [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x635f9c4f [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x51a66a1b [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0xbf54061 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x629930cd [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x28c178f0 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x96ee7c1 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x46b4da25 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x1b8ca7f8 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x16330ede [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x424c89d2 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x2f0abf79 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x6f891ed3 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x56ba71a3 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x50ab9d98 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x57ce7e69 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x65de5c37 [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x7184b5fa [0199.829] RtlRandomEx (in: Seed=0x1149fa48 | out: Seed=0x1149fa48) returned 0x2aff6255 [0199.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826dca8 [0199.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0199.843] ReadFile (in: hFile=0x3e8, lpBuffer=0x826dca8, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0x1149fa44, lpOverlapped=0x0 | out: lpBuffer=0x826dca8*, lpNumberOfBytesRead=0x1149fa44*=0xe3, lpOverlapped=0x0) returned 1 [0199.846] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.846] WriteFile (in: hFile=0x3e8, lpBuffer=0x82718b0*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x1149fa48, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesWritten=0x1149fa48*=0xe3, lpOverlapped=0x0) returned 1 [0203.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f70 [0203.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f98 [0203.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f98) returned 1 [0203.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0203.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826dca8) returned 1 [0203.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80555f0) returned 1 [0203.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e56d8) returned 1 [0203.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f364d0 [0203.575] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.575] WriteFile (in: hFile=0x3e8, lpBuffer=0x30bc998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1149fabc, lpOverlapped=0x0 | out: lpBuffer=0x30bc998*, lpNumberOfBytesWritten=0x1149fabc*=0x10c, lpOverlapped=0x0) returned 1 [0204.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0204.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36500) returned 1 [0204.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f98) returned 1 [0204.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f364d0) returned 1 [0204.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f70) returned 1 [0204.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1f8) returned 1 [0204.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc248) returned 1 [0204.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36bca8) returned 1 [0204.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5bdb0 [0204.078] wcscpy (in: _Dest=0x3e5bdb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" [0204.078] wcscat (in: _Dest=0x3e5bdb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json.f0dbec" [0204.078] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json.f0dbec", NtPathName=0x1149fa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8336188 [0204.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336188) returned 1 [0204.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8337ec0) returned 1 [0204.503] NtQueryInformationFile (in: FileHandle=0x3e8, IoStatusBlock=0x1149fa18, FileInformation=0x1149fa20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1149fa18, FileInformation=0x1149fa20) returned 0x0 [0204.503] NtSetInformationFile (FileHandle=0x3e8, IoStatusBlock=0x1149fa18, FileInformation=0x1149fa20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bdb0) returned 1 [0207.559] FlushFileBuffers (hFile=0x3e8) returned 1 [0207.571] CloseHandle (hObject=0x3e8) returned 1 [0208.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6ea8 [0208.001] wcscpy (in: _Dest=0x81f6ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" [0208.001] wcscat (in: _Dest=0x81f6ea8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\F0DBEC-Readme.txt" [0208.001] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\f0dbec-readme.txt")) returned 0xffffffff [0208.002] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cb8 [0208.414] WriteFile (in: hFile=0x1cb8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1149fa64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1149fa64*=0x70c, lpOverlapped=0x0) returned 1 [0209.286] CloseHandle (hObject=0x1cb8) returned 1 [0209.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6ea8) returned 1 [0209.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0878) returned 1 Thread: id = 5586 os_tid = 0x156c [0186.256] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json")) returned 0x2020 [0190.257] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0199.846] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2d18 [0199.847] GetFileSizeEx (in: hFile=0x2d18, lpFileSize=0x1177fab8 | out: lpFileSize=0x1177fab8*=283) returned 1 [0199.847] SetFilePointerEx (in: hFile=0x2d18, liDistanceToMove=0x117, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.847] ReadFile (in: hFile=0x2d18, lpBuffer=0x1177fac4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1177faa0, lpOverlapped=0x0 | out: lpBuffer=0x1177fac4*, lpNumberOfBytesRead=0x1177faa0*=0x4, lpOverlapped=0x0) returned 1 [0199.850] SetFilePointerEx (in: hFile=0x2d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x36b960 [0199.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b08 [0199.850] NtQuerySystemTime (in: CurrentTime=0x1177fa40 | out: CurrentTime=0x1177fa40*=132471540677016000) returned 0x0 [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x3671150d [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x63db2f4c [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0xe6e1896 [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x3470228 [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x43bc8a22 [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x3cbe4956 [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x4c9f9b6e [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x14dd1423 [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x874954b [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x653060d4 [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x391aac2c [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x1f65d16f [0199.850] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x5631f4c1 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x68adfc87 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x38134d30 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x7c339fe0 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x361ec334 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x8c3053d [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x47f71954 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x6b3877fc [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x338cf6fd [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x5af603da [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x44dee55c [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x5ac4cf4 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x186a102e [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x81821c1 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x1f45bced [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x1683efe0 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x6522891e [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x4e1fe857 [0199.851] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x2bf65583 [0199.852] RtlRandomEx (in: Seed=0x1177fa38 | out: Seed=0x1177fa38) returned 0x1443203f [0199.867] ReadFile (in: hFile=0x2d18, lpBuffer=0x82754b8, nNumberOfBytesToRead=0x11b, lpNumberOfBytesRead=0x1177fa34, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesRead=0x1177fa34*=0x11b, lpOverlapped=0x0) returned 1 [0199.867] SetFilePointerEx (in: hFile=0x2d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.867] WriteFile (in: hFile=0x2d18, lpBuffer=0x82790c0*, nNumberOfBytesToWrite=0x11b, lpNumberOfBytesWritten=0x1177fa38, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesWritten=0x1177fa38*=0x11b, lpOverlapped=0x0) returned 1 [0203.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063fc0 [0203.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063fe8 [0203.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063fe8) returned 1 [0203.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0203.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0203.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055668) returned 1 [0203.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6800) returned 1 [0203.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36530 [0203.579] SetFilePointerEx (in: hFile=0x2d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.580] WriteFile (in: hFile=0x2d18, lpBuffer=0x30bbb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1177faac, lpOverlapped=0x0 | out: lpBuffer=0x30bbb60*, lpNumberOfBytesWritten=0x1177faac*=0x10c, lpOverlapped=0x0) returned 1 [0204.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0204.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36560) returned 1 [0204.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063fe8) returned 1 [0204.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36530) returned 1 [0204.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063fc0) returned 1 [0204.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36b960) returned 1 [0204.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b58) returned 1 [0204.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312f90) returned 1 [0204.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5bee8 [0204.081] wcscpy (in: _Dest=0x3e5bee8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" [0204.081] wcscat (in: _Dest=0x3e5bee8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json.f0dbec" [0204.081] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0x1177fa30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x83362d0 [0204.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83362d0) returned 1 [0204.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833dfc8) returned 1 [0204.504] NtQueryInformationFile (in: FileHandle=0x2d18, IoStatusBlock=0x1177fa08, FileInformation=0x1177fa10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1177fa08, FileInformation=0x1177fa10) returned 0x0 [0204.504] NtSetInformationFile (FileHandle=0x2d18, IoStatusBlock=0x1177fa08, FileInformation=0x1177fa10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bee8) returned 1 [0207.561] FlushFileBuffers (hFile=0x2d18) returned 1 [0207.579] CloseHandle (hObject=0x2d18) returned 1 [0208.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6d70 [0208.004] wcscpy (in: _Dest=0x81f6d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" [0208.004] wcscat (in: _Dest=0x81f6d70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\F0DBEC-Readme.txt" [0208.004] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0208.005] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d3c [0208.414] WriteFile (in: hFile=0x1d3c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1177fa54, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1177fa54*=0x70c, lpOverlapped=0x0) returned 1 [0209.289] CloseHandle (hObject=0x1d3c) returned 1 [0209.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6d70) returned 1 [0209.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a09a0) returned 1 Thread: id = 5587 os_tid = 0x1570 [0186.256] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0190.258] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0199.868] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11cc [0199.869] GetFileSizeEx (in: hFile=0x11cc, lpFileSize=0x112bfaa0 | out: lpFileSize=0x112bfaa0*=218) returned 1 [0199.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b08 [0199.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312f68 [0199.869] NtQuerySystemTime (in: CurrentTime=0x112bfa28 | out: CurrentTime=0x112bfa28*=132471540677328000) returned 0x0 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x74541b30 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x185d6382 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x4ad745f1 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x27286788 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x707cca25 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x40cdf5e0 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x7a5a9630 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x1da01d0b [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x5e4e30fc [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x66b3a700 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x308c29c1 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x9c49941 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x1b2e61b0 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x64933e69 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x1286915 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x6a5897da [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x445ec1f2 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x54756486 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x6e87aa0 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x7ea4c632 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x4a5b01de [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x3a76083 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x7f897bb7 [0199.870] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x4dbc46ce [0199.871] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x21ab20d9 [0199.871] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x24f4d3eb [0199.871] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x60d4d56d [0199.871] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x6a0098da [0199.871] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x78d31697 [0199.871] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x4e08b858 [0199.871] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x101c3050 [0199.871] RtlRandomEx (in: Seed=0x112bfa20 | out: Seed=0x112bfa20) returned 0x20dbc4c7 [0199.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x827ccc8 [0199.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0199.884] ReadFile (in: hFile=0x11cc, lpBuffer=0x827ccc8, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0x112bfa1c, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesRead=0x112bfa1c*=0xda, lpOverlapped=0x0) returned 1 [0199.886] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.886] WriteFile (in: hFile=0x11cc, lpBuffer=0x82808d0*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x112bfa20, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesWritten=0x112bfa20*=0xda, lpOverlapped=0x0) returned 1 [0204.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42290 [0204.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42498 [0204.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0204.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0204.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0204.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80556e0) returned 1 [0204.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5eb8) returned 1 [0204.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fbb8 [0204.299] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.299] WriteFile (in: hFile=0x11cc, lpBuffer=0x30bbfc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x112bfa94, lpOverlapped=0x0 | out: lpBuffer=0x30bbfc0*, lpNumberOfBytesWritten=0x112bfa94*=0x10c, lpOverlapped=0x0) returned 1 [0207.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 [0207.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb88) returned 1 [0207.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0207.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fbb8) returned 1 [0207.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42290) returned 1 [0207.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b08) returned 1 [0207.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b30) returned 1 [0207.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312ae0) returned 1 [0207.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x81f6758 [0207.333] wcscpy (in: _Dest=0x81f6758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" [0207.333] wcscat (in: _Dest=0x81f6758, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json.f0dbec" [0207.333] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0x112bfa18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e16780 [0208.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16780) returned 1 [0208.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fd528) returned 1 [0208.344] NtQueryInformationFile (in: FileHandle=0x11cc, IoStatusBlock=0x112bf9f0, FileInformation=0x112bf9f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x112bf9f0, FileInformation=0x112bf9f8) returned 0x0 [0208.344] NtSetInformationFile (FileHandle=0x11cc, IoStatusBlock=0x112bf9f0, FileInformation=0x112bf9f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6758) returned 1 [0208.795] FlushFileBuffers (hFile=0x11cc) returned 1 [0208.806] CloseHandle (hObject=0x11cc) returned 1 [0208.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f5780 [0208.904] wcscpy (in: _Dest=0x81f5780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" [0208.904] wcscat (in: _Dest=0x81f5780, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0208.904] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0208.904] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ce4 [0209.586] WriteFile (in: hFile=0x1ce4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x112bfa3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x112bfa3c*=0x70c, lpOverlapped=0x0) returned 1 [0209.659] CloseHandle (hObject=0x1ce4) returned 1 [0209.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5780) returned 1 [0209.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0ac8) returned 1 Thread: id = 5588 os_tid = 0x1574 [0186.257] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json")) returned 0x2020 [0190.259] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0199.887] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1518 [0199.888] GetFileSizeEx (in: hFile=0x1518, lpFileSize=0x117df8f0 | out: lpFileSize=0x117df8f0*=263) returned 1 [0199.888] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.888] ReadFile (in: hFile=0x1518, lpBuffer=0x117df8fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x117df8d8, lpOverlapped=0x0 | out: lpBuffer=0x117df8fc*, lpNumberOfBytesRead=0x117df8d8*=0x4, lpOverlapped=0x0) returned 1 [0199.890] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312f68 [0199.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312a90 [0199.891] NtQuerySystemTime (in: CurrentTime=0x117df878 | out: CurrentTime=0x117df878*=132471540677484000) returned 0x0 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x65a17052 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x7fb58ef3 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x22657ede [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x496f009c [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x42f10f0d [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x57fbe3e3 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x3e689cb2 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x77250292 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x2be71198 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0xfbeee4c [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x7c60cbf9 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x3e3b368d [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x17740856 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x688881b [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x76cbec1 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x7b5f60ff [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x40490b4d [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x6da59c53 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x2ff3ca63 [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x29a30fca [0199.891] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x7bb307b1 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x475e41b5 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x7c27041 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x2c0c84d2 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x3e8ae57 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x4d18b715 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x16d2a546 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x49e1c869 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x1a7d42c7 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x7d1920ca [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x741e601 [0199.892] RtlRandomEx (in: Seed=0x117df870 | out: Seed=0x117df870) returned 0x1a3ec1d3 [0199.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82844d8 [0199.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148a6060 [0199.904] ReadFile (in: hFile=0x1518, lpBuffer=0x82844d8, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0x117df86c, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesRead=0x117df86c*=0x107, lpOverlapped=0x0) returned 1 [0199.904] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.904] WriteFile (in: hFile=0x1518, lpBuffer=0x148a6060*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x117df870, lpOverlapped=0x0 | out: lpBuffer=0x148a6060*, lpNumberOfBytesWritten=0x117df870*=0x107, lpOverlapped=0x0) returned 1 [0204.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420d8 [0204.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0204.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436b8) returned 1 [0204.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a6060) returned 1 [0204.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82844d8) returned 1 [0204.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 [0204.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6218) returned 1 [0204.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f528 [0204.301] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.301] WriteFile (in: hFile=0x1518, lpBuffer=0x30bb818*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x117df8e4, lpOverlapped=0x0 | out: lpBuffer=0x30bb818*, lpNumberOfBytesWritten=0x117df8e4*=0x10c, lpOverlapped=0x0) returned 1 [0207.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0207.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f3d8) returned 1 [0207.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436b8) returned 1 [0207.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f528) returned 1 [0207.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420d8) returned 1 [0207.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312f68) returned 1 [0207.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3016b38) returned 1 [0207.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3016ac0) returned 1 [0207.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x83eeba0 [0207.337] wcscpy (in: _Dest=0x83eeba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" [0207.337] wcscat (in: _Dest=0x83eeba0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json.f0dbec" [0207.337] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0x117df868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3e3ceb0 [0208.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ceb0) returned 1 [0208.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f9478) returned 1 [0208.347] NtQueryInformationFile (in: FileHandle=0x1518, IoStatusBlock=0x117df840, FileInformation=0x117df848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x117df840, FileInformation=0x117df848) returned 0x0 [0208.347] NtSetInformationFile (FileHandle=0x1518, IoStatusBlock=0x117df840, FileInformation=0x117df848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eeba0) returned 1 [0208.798] FlushFileBuffers (hFile=0x1518) returned 1 [0208.807] CloseHandle (hObject=0x1518) returned 1 [0208.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5c60 [0208.907] wcscpy (in: _Dest=0x81f5c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" [0208.907] wcscat (in: _Dest=0x81f5c60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\F0DBEC-Readme.txt" [0208.907] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0208.907] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0209.589] WriteFile (in: hFile=0x1518, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x117df88c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x117df88c*=0x70c, lpOverlapped=0x0) returned 1 [0209.651] CloseHandle (hObject=0x1518) returned 1 [0209.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5c60) returned 1 [0209.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0bf0) returned 1 Thread: id = 5589 os_tid = 0x1578 [0186.257] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json")) returned 0x2020 [0190.259] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0199.905] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cd4 [0199.906] GetFileSizeEx (in: hFile=0x1cd4, lpFileSize=0x1187fb40 | out: lpFileSize=0x1187fb40*=270) returned 1 [0199.906] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.906] ReadFile (in: hFile=0x1cd4, lpBuffer=0x1187fb4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1187fb28, lpOverlapped=0x0 | out: lpBuffer=0x1187fb4c*, lpNumberOfBytesRead=0x1187fb28*=0x4, lpOverlapped=0x0) returned 1 [0199.915] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d88 [0199.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0199.915] NtQuerySystemTime (in: CurrentTime=0x1187fac8 | out: CurrentTime=0x1187fac8*=132471540677796000) returned 0x0 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x70e91600 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x6ec3481 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x3a470286 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x797869bf [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x52161653 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x6ab92200 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x5c517ed9 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x53cd84e0 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x4f3860b4 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x1ae6513 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x2451475 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0xf08c2a [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x75889044 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x4ba8c0b4 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x1c1a99b [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x606212dd [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x1ab3ba63 [0199.916] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x6240aa30 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x7f32548d [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x4e6587b0 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x1aebbb8c [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x63f445d7 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x1b6ccfe8 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x16bd2160 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x1ca4fb37 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x4d697540 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0xe3f791d [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x391f55ea [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x3fd81e33 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x49581568 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x18069b11 [0199.917] RtlRandomEx (in: Seed=0x1187fac0 | out: Seed=0x1187fac0) returned 0x4cc026f1 [0199.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148a9c68 [0199.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148ad870 [0199.931] ReadFile (in: hFile=0x1cd4, lpBuffer=0x148a9c68, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0x1187fabc, lpOverlapped=0x0 | out: lpBuffer=0x148a9c68*, lpNumberOfBytesRead=0x1187fabc*=0x10e, lpOverlapped=0x0) returned 1 [0199.931] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.931] WriteFile (in: hFile=0x1cd4, lpBuffer=0x148ad870*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x1187fac0, lpOverlapped=0x0 | out: lpBuffer=0x148ad870*, lpNumberOfBytesWritten=0x1187fac0*=0x10e, lpOverlapped=0x0) returned 1 [0203.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064010 [0203.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064038 [0203.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064038) returned 1 [0203.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148ad870) returned 1 [0203.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a9c68) returned 1 [0203.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0203.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7418) returned 1 [0203.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36590 [0203.585] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.585] WriteFile (in: hFile=0x1cd4, lpBuffer=0x30bcbc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1187fb34, lpOverlapped=0x0 | out: lpBuffer=0x30bcbc8*, lpNumberOfBytesWritten=0x1187fb34*=0x10c, lpOverlapped=0x0) returned 1 [0204.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0204.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f365c0) returned 1 [0204.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064038) returned 1 [0204.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36590) returned 1 [0204.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064010) returned 1 [0204.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d88) returned 1 [0204.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ce8) returned 1 [0204.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0204.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5c020 [0204.085] wcscpy (in: _Dest=0x3e5c020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" [0204.085] wcscat (in: _Dest=0x3e5c020, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json.f0dbec" [0204.085] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x1187fab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8336418 [0204.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336418) returned 1 [0204.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833f108) returned 1 [0204.506] NtQueryInformationFile (in: FileHandle=0x1cd4, IoStatusBlock=0x1187fa90, FileInformation=0x1187fa98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1187fa90, FileInformation=0x1187fa98) returned 0x0 [0204.506] NtSetInformationFile (FileHandle=0x1cd4, IoStatusBlock=0x1187fa90, FileInformation=0x1187fa98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c020) returned 1 [0207.569] FlushFileBuffers (hFile=0x1cd4) returned 1 [0207.583] CloseHandle (hObject=0x1cd4) returned 1 [0208.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f6b00 [0208.006] wcscpy (in: _Dest=0x81f6b00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" [0208.006] wcscat (in: _Dest=0x81f6b00, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\F0DBEC-Readme.txt" [0208.006] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0208.006] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1434 [0208.415] WriteFile (in: hFile=0x1434, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1187fadc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1187fadc*=0x70c, lpOverlapped=0x0) returned 1 [0209.293] CloseHandle (hObject=0x1434) returned 1 [0209.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6b00) returned 1 [0209.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0d18) returned 1 Thread: id = 5590 os_tid = 0x7fc [0186.257] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json")) returned 0x2020 [0190.260] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0199.931] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd8 [0199.932] GetFileSizeEx (in: hFile=0xcd8, lpFileSize=0x11c3fd48 | out: lpFileSize=0x11c3fd48*=231) returned 1 [0199.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0199.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ba8 [0199.932] NtQuerySystemTime (in: CurrentTime=0x11c3fcd0 | out: CurrentTime=0x11c3fcd0*=132471540677952000) returned 0x0 [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x6016a1f2 [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x2e5684c3 [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x182034f1 [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x57f6e17b [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x4193e88b [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x6b289c49 [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x14396d5a [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x12596170 [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x66e40241 [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x6c15bc1 [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x2318bb9 [0199.932] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x7c9663f3 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x6249a178 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x1dc0bc74 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x8554cd4 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x7e81203b [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x44cc4638 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x7efb9bb4 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x5c55261 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0xcb82451 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x7c6655e1 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x20522cc5 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x3d046080 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x690cc78a [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x23314dc2 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x7588206a [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x7150ddb0 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x8506954 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x64900c02 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x710509f7 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x5aa619f1 [0199.933] RtlRandomEx (in: Seed=0x11c3fcc8 | out: Seed=0x11c3fcc8) returned 0x3088a8 [0199.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148b1478 [0199.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148b5080 [0199.946] ReadFile (in: hFile=0xcd8, lpBuffer=0x148b1478, nNumberOfBytesToRead=0xe7, lpNumberOfBytesRead=0x11c3fcc4, lpOverlapped=0x0 | out: lpBuffer=0x148b1478*, lpNumberOfBytesRead=0x11c3fcc4*=0xe7, lpOverlapped=0x0) returned 1 [0199.948] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.948] WriteFile (in: hFile=0xcd8, lpBuffer=0x148b5080*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x11c3fcc8, lpOverlapped=0x0 | out: lpBuffer=0x148b5080*, lpNumberOfBytesWritten=0x11c3fcc8*=0xe7, lpOverlapped=0x0) returned 1 [0203.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064060 [0203.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064088 [0203.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064088) returned 1 [0203.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b5080) returned 1 [0203.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b1478) returned 1 [0203.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687e0) returned 1 [0203.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6a88) returned 1 [0203.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f365f0 [0203.588] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.588] WriteFile (in: hFile=0xcd8, lpBuffer=0x30bb5e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11c3fd3c, lpOverlapped=0x0 | out: lpBuffer=0x30bb5e8*, lpNumberOfBytesWritten=0x11c3fd3c*=0x10c, lpOverlapped=0x0) returned 1 [0204.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0204.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36620) returned 1 [0204.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064088) returned 1 [0204.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f365f0) returned 1 [0204.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064060) returned 1 [0204.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0204.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3a0) returned 1 [0204.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0204.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5c158 [0204.088] wcscpy (in: _Dest=0x3e5c158, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" [0204.088] wcscat (in: _Dest=0x3e5c158, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json.f0dbec" [0204.088] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0x11c3fcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8336560 [0204.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336560) returned 1 [0204.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833d0b0) returned 1 [0204.508] NtQueryInformationFile (in: FileHandle=0xcd8, IoStatusBlock=0x11c3fc98, FileInformation=0x11c3fca0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11c3fc98, FileInformation=0x11c3fca0) returned 0x0 [0204.508] NtSetInformationFile (FileHandle=0xcd8, IoStatusBlock=0x11c3fc98, FileInformation=0x11c3fca0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c158) returned 1 [0207.573] FlushFileBuffers (hFile=0xcd8) returned 1 [0207.588] CloseHandle (hObject=0xcd8) returned 1 [0208.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef7d68 [0208.008] wcscpy (in: _Dest=0x3ef7d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" [0208.008] wcscat (in: _Dest=0x3ef7d68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\F0DBEC-Readme.txt" [0208.008] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0208.008] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x598 [0208.416] WriteFile (in: hFile=0x598, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x11c3fce4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x11c3fce4*=0x70c, lpOverlapped=0x0) returned 1 [0209.296] CloseHandle (hObject=0x598) returned 1 [0209.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d68) returned 1 [0209.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0e40) returned 1 Thread: id = 5591 os_tid = 0x98c [0186.258] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json")) returned 0x2020 [0190.260] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0199.948] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf94 [0199.949] GetFileSizeEx (in: hFile=0xf94, lpFileSize=0xd13ff38 | out: lpFileSize=0xd13ff38*=272) returned 1 [0199.949] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.949] ReadFile (in: hFile=0xf94, lpBuffer=0xd13ff44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd13ff20, lpOverlapped=0x0 | out: lpBuffer=0xd13ff44*, lpNumberOfBytesRead=0xd13ff20*=0x4, lpOverlapped=0x0) returned 1 [0199.951] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ba8 [0199.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e28 [0199.951] NtQuerySystemTime (in: CurrentTime=0xd13fec0 | out: CurrentTime=0xd13fec0*=132471540678108000) returned 0x0 [0199.951] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x54dde589 [0199.951] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x611dd457 [0199.951] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x2d8e161 [0199.951] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x1739c91a [0199.951] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x1fd629d1 [0199.951] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0xb1ac42f [0199.951] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x773cee16 [0199.951] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x232bfa2b [0199.951] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x5f6de815 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x53bf29c [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x7bcbf547 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x3a38d9e5 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x68de726b [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x27ee8717 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x569e4ef6 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x1befbda3 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x34b8509b [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x3260000d [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x57248f89 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x67cd807c [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x6b274817 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x20613e28 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x6968301 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x313a8020 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0xf9c73b4 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x5cff3574 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x2cc0a49e [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x28de2733 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x68d68636 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x4a45ae3c [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x6abdf4f9 [0199.952] RtlRandomEx (in: Seed=0xd13feb8 | out: Seed=0xd13feb8) returned 0x760e3d8e [0199.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148b8c88 [0199.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148bc890 [0199.963] ReadFile (in: hFile=0xf94, lpBuffer=0x148b8c88, nNumberOfBytesToRead=0x110, lpNumberOfBytesRead=0xd13feb4, lpOverlapped=0x0 | out: lpBuffer=0x148b8c88*, lpNumberOfBytesRead=0xd13feb4*=0x110, lpOverlapped=0x0) returned 1 [0199.963] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.963] WriteFile (in: hFile=0xf94, lpBuffer=0x148bc890*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xd13feb8, lpOverlapped=0x0 | out: lpBuffer=0x148bc890*, lpNumberOfBytesWritten=0xd13feb8*=0x110, lpOverlapped=0x0) returned 1 [0203.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80640b0 [0203.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80640d8 [0203.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80640d8) returned 1 [0203.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148bc890) returned 1 [0203.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b8c88) returned 1 [0203.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 [0203.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e57b0) returned 1 [0203.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36650 [0203.591] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.591] WriteFile (in: hFile=0xf94, lpBuffer=0x30bd140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd13ff2c, lpOverlapped=0x0 | out: lpBuffer=0x30bd140*, lpNumberOfBytesWritten=0xd13ff2c*=0x10c, lpOverlapped=0x0) returned 1 [0204.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0204.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36680) returned 1 [0204.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80640d8) returned 1 [0204.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36650) returned 1 [0204.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80640b0) returned 1 [0204.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ba8) returned 1 [0204.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9680) returned 1 [0204.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9dd8) returned 1 [0204.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5c290 [0204.091] wcscpy (in: _Dest=0x3e5c290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" [0204.091] wcscat (in: _Dest=0x3e5c290, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json.f0dbec" [0204.091] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0xd13feb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x83366a8 [0204.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83366a8) returned 1 [0204.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833e1f0) returned 1 [0204.509] NtQueryInformationFile (in: FileHandle=0xf94, IoStatusBlock=0xd13fe88, FileInformation=0xd13fe90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd13fe88, FileInformation=0xd13fe90) returned 0x0 [0204.509] NtSetInformationFile (FileHandle=0xf94, IoStatusBlock=0xd13fe88, FileInformation=0xd13fe90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c290) returned 1 [0207.577] FlushFileBuffers (hFile=0xf94) returned 1 [0207.592] CloseHandle (hObject=0xf94) returned 1 [0208.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8860 [0208.010] wcscpy (in: _Dest=0x3ef8860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" [0208.010] wcscat (in: _Dest=0x3ef8860, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\F0DBEC-Readme.txt" [0208.010] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0208.010] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ab0 [0208.417] WriteFile (in: hFile=0x2ab0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd13fed4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd13fed4*=0x70c, lpOverlapped=0x0) returned 1 [0209.302] CloseHandle (hObject=0x2ab0) returned 1 [0209.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8860) returned 1 [0209.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a0f68) returned 1 Thread: id = 5592 os_tid = 0xde4 [0186.258] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json")) returned 0x2020 [0190.261] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0199.963] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20c8 [0199.964] GetFileSizeEx (in: hFile=0x20c8, lpFileSize=0x1396f9c0 | out: lpFileSize=0x1396f9c0*=226) returned 1 [0199.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e28 [0199.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0199.964] NtQuerySystemTime (in: CurrentTime=0x1396f948 | out: CurrentTime=0x1396f948*=132471540678264000) returned 0x0 [0199.964] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x3377dffb [0199.964] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x224cae6e [0199.964] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x420273f3 [0199.964] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x169bbc03 [0199.964] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x25800b3d [0199.964] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x3e4b6337 [0199.964] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x4d6e405e [0199.964] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x6399a5f4 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x376d534a [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x5a746ca1 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x43095421 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x7e5554af [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x113a914c [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x5199009 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x7d5dd3b0 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x40d69b35 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x39171119 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x3d6cf89c [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x1fdf1179 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x691d5901 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0xa60a1b6 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x32ffabb7 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x68dd3114 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x6a822c5a [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x3c65daeb [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x3cdd14c7 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x35b725e1 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x3644eb1 [0199.965] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x79136391 [0199.966] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x4e73781d [0199.966] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x190dfaa0 [0199.966] RtlRandomEx (in: Seed=0x1396f940 | out: Seed=0x1396f940) returned 0x5c26ba9f [0199.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148c0498 [0199.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a86060 [0199.990] ReadFile (in: hFile=0x20c8, lpBuffer=0x148c0498, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0x1396f93c, lpOverlapped=0x0 | out: lpBuffer=0x148c0498*, lpNumberOfBytesRead=0x1396f93c*=0xe2, lpOverlapped=0x0) returned 1 [0199.992] SetFilePointerEx (in: hFile=0x20c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.992] WriteFile (in: hFile=0x20c8, lpBuffer=0x14a86060*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x1396f940, lpOverlapped=0x0 | out: lpBuffer=0x14a86060*, lpNumberOfBytesWritten=0x1396f940*=0xe2, lpOverlapped=0x0) returned 1 [0203.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064100 [0203.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064128 [0203.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064128) returned 1 [0203.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a86060) returned 1 [0203.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148c0498) returned 1 [0203.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 [0203.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e62a8) returned 1 [0203.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f366b0 [0203.593] SetFilePointerEx (in: hFile=0x20c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.593] WriteFile (in: hFile=0x20c8, lpBuffer=0x30bb818*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1396f9b4, lpOverlapped=0x0 | out: lpBuffer=0x30bb818*, lpNumberOfBytesWritten=0x1396f9b4*=0x10c, lpOverlapped=0x0) returned 1 [0204.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0204.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f366e0) returned 1 [0204.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064128) returned 1 [0204.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f366b0) returned 1 [0204.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064100) returned 1 [0204.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e28) returned 1 [0204.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0204.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0204.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5c3c8 [0204.095] wcscpy (in: _Dest=0x3e5c3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" [0204.095] wcscat (in: _Dest=0x3e5c3c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json.f0dbec" [0204.095] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json.f0dbec", NtPathName=0x1396f938, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x81f3648 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3648) returned 1 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8339678) returned 1 [0204.511] NtQueryInformationFile (in: FileHandle=0x20c8, IoStatusBlock=0x1396f910, FileInformation=0x1396f918, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1396f910, FileInformation=0x1396f918) returned 0x0 [0204.511] NtSetInformationFile (FileHandle=0x20c8, IoStatusBlock=0x1396f910, FileInformation=0x1396f918, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c3c8) returned 1 [0207.581] FlushFileBuffers (hFile=0x20c8) returned 1 [0207.597] CloseHandle (hObject=0x20c8) returned 1 [0208.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8ad0 [0208.012] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" [0208.012] wcscat (in: _Dest=0x3ef8ad0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\F0DBEC-Readme.txt" [0208.012] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\f0dbec-readme.txt")) returned 0xffffffff [0208.012] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11b4 [0208.416] WriteFile (in: hFile=0x11b4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1396f95c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1396f95c*=0x70c, lpOverlapped=0x0) returned 1 [0209.299] CloseHandle (hObject=0x11b4) returned 1 [0209.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8ad0) returned 1 [0209.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1090) returned 1 Thread: id = 5593 os_tid = 0x490 [0186.259] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json")) returned 0x2020 [0190.262] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0199.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e0 [0199.338] GetFileSizeEx (in: hFile=0x16e0, lpFileSize=0x1168fdb8 | out: lpFileSize=0x1168fdb8*=269) returned 1 [0199.338] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.338] ReadFile (in: hFile=0x16e0, lpBuffer=0x1168fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1168fda0, lpOverlapped=0x0 | out: lpBuffer=0x1168fdc4*, lpNumberOfBytesRead=0x1168fda0*=0x4, lpOverlapped=0x0) returned 1 [0199.340] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3480 [0199.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0199.340] NtQuerySystemTime (in: CurrentTime=0x1168fd40 | out: CurrentTime=0x1168fd40*=132471540672336000) returned 0x0 [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x202b351e [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x5ab959d9 [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x73b1b91e [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0xd772ba7 [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x5d51c62 [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x19f2e630 [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0xf22039c [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x701014fd [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x1ae262b [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x75c09447 [0199.340] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x54c14fbe [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x569ca8c0 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x7f234457 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x1355fd3a [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x4d4f2518 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0xcc7d6c1 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x405e3ccb [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x527d4150 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x2ccbdbbb [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x28e85d84 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x15493f49 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x49898297 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x13ec6b30 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x6dae41a8 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x421b5f02 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x3cf643a3 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x163c5203 [0199.341] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x5139b012 [0199.342] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x4e6f47d3 [0199.342] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x28841563 [0199.342] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x3737acee [0199.342] RtlRandomEx (in: Seed=0x1168fd38 | out: Seed=0x1168fd38) returned 0x682d2b9 [0199.355] ReadFile (in: hFile=0x16e0, lpBuffer=0x82b90c0, nNumberOfBytesToRead=0x10d, lpNumberOfBytesRead=0x1168fd34, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesRead=0x1168fd34*=0x10d, lpOverlapped=0x0) returned 1 [0199.355] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.356] WriteFile (in: hFile=0x16e0, lpBuffer=0x82adca8*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x1168fd38, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesWritten=0x1168fd38*=0x10d, lpOverlapped=0x0) returned 1 [0203.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80638e0 [0203.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063908 [0203.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063908) returned 1 [0203.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82adca8) returned 1 [0203.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0203.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054ba0) returned 1 [0203.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e60b0) returned 1 [0203.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69480 [0203.493] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.493] WriteFile (in: hFile=0x16e0, lpBuffer=0x84075a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1168fdac, lpOverlapped=0x0 | out: lpBuffer=0x84075a0*, lpNumberOfBytesWritten=0x1168fdac*=0x10c, lpOverlapped=0x0) returned 1 [0204.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84075a0) returned 1 [0204.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694b0) returned 1 [0204.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063908) returned 1 [0204.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69480) returned 1 [0204.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80638e0) returned 1 [0204.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0204.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0204.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0204.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f7118 [0204.006] wcscpy (in: _Dest=0x81f7118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" [0204.006] wcscat (in: _Dest=0x81f7118, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json.f0dbec" [0204.006] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0x1168fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8334bc0 [0204.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334bc0) returned 1 [0204.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833eee0) returned 1 [0204.462] NtQueryInformationFile (in: FileHandle=0x16e0, IoStatusBlock=0x1168fd08, FileInformation=0x1168fd10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1168fd08, FileInformation=0x1168fd10) returned 0x0 [0204.463] NtSetInformationFile (FileHandle=0x16e0, IoStatusBlock=0x1168fd08, FileInformation=0x1168fd10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7118) returned 1 [0207.437] FlushFileBuffers (hFile=0x16e0) returned 1 [0207.453] CloseHandle (hObject=0x16e0) returned 1 [0207.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83efa40 [0207.959] wcscpy (in: _Dest=0x83efa40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" [0207.959] wcscat (in: _Dest=0x83efa40, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\F0DBEC-Readme.txt" [0207.959] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0207.959] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1578 [0208.387] WriteFile (in: hFile=0x1578, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1168fd54, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1168fd54*=0x70c, lpOverlapped=0x0) returned 1 [0209.225] CloseHandle (hObject=0x1578) returned 1 [0209.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83efa40) returned 1 [0209.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a11b8) returned 1 Thread: id = 5594 os_tid = 0xfd0 [0186.259] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json")) returned 0x2020 [0190.262] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0199.356] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1708 [0199.357] GetFileSizeEx (in: hFile=0x1708, lpFileSize=0x13affc90 | out: lpFileSize=0x13affc90*=245) returned 1 [0199.357] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0xf1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.357] ReadFile (in: hFile=0x1708, lpBuffer=0x13affc9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x13affc78, lpOverlapped=0x0 | out: lpBuffer=0x13affc9c*, lpNumberOfBytesRead=0x13affc78*=0x4, lpOverlapped=0x0) returned 1 [0199.359] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0199.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0199.360] NtQuerySystemTime (in: CurrentTime=0x13affc18 | out: CurrentTime=0x13affc18*=132471540672492000) returned 0x0 [0199.360] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x6340e8ca [0199.360] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x49bf61e4 [0199.360] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x73a8e743 [0199.360] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x44d6ebce [0199.360] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0xd486101 [0199.360] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x75987cbf [0199.360] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x4a3d4f62 [0199.360] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x6037fe01 [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x267c2bdd [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x38a2b164 [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x63d9f8b2 [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x1077b749 [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x149ea738 [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0xcd83dd1 [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x3053bd3b [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x1a4b029c [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x126d49a4 [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x364a14a4 [0199.361] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x573e7004 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x1cf623b0 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x9b5af18 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x53d2a46c [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x1dd63675 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x2fd520a2 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x7346c7d1 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x472b15ae [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x625c3e6 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x70a037d1 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x1c40019 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x7a7c64d4 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0x1566a065 [0199.362] RtlRandomEx (in: Seed=0x13affc10 | out: Seed=0x13affc10) returned 0xf853194 [0199.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0199.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82bccc8 [0199.412] ReadFile (in: hFile=0x1708, lpBuffer=0x82b18b0, nNumberOfBytesToRead=0xf5, lpNumberOfBytesRead=0x13affc0c, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesRead=0x13affc0c*=0xf5, lpOverlapped=0x0) returned 1 [0199.412] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.412] WriteFile (in: hFile=0x1708, lpBuffer=0x82bccc8*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0x13affc10, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesWritten=0x13affc10*=0xf5, lpOverlapped=0x0) returned 1 [0203.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063930 [0203.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063958 [0203.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063958) returned 1 [0203.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0203.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0203.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054c18) returned 1 [0203.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7148) returned 1 [0203.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e694e0 [0203.496] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.497] WriteFile (in: hFile=0x1708, lpBuffer=0x8407488*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x13affc84, lpOverlapped=0x0 | out: lpBuffer=0x8407488*, lpNumberOfBytesWritten=0x13affc84*=0x10c, lpOverlapped=0x0) returned 1 [0207.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407488) returned 1 [0207.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69510) returned 1 [0207.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063958) returned 1 [0207.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694e0) returned 1 [0207.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063930) returned 1 [0207.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0207.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0e10) returned 1 [0207.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef13d8) returned 1 [0207.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x84047d0 [0207.156] wcscpy (in: _Dest=0x84047d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" [0207.156] wcscat (in: _Dest=0x84047d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json.f0dbec" [0207.156] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0x13affc08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335b20 [0208.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335b20) returned 1 [0208.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14892da8) returned 1 [0208.129] NtQueryInformationFile (in: FileHandle=0x1708, IoStatusBlock=0x13affbe0, FileInformation=0x13affbe8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x13affbe0, FileInformation=0x13affbe8) returned 0x0 [0208.129] NtSetInformationFile (FileHandle=0x1708, IoStatusBlock=0x13affbe0, FileInformation=0x13affbe8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84047d0) returned 1 [0208.350] FlushFileBuffers (hFile=0x1708) returned 1 [0208.366] CloseHandle (hObject=0x1708) returned 1 [0208.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ee930 [0208.810] wcscpy (in: _Dest=0x83ee930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" [0208.810] wcscat (in: _Dest=0x83ee930, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\F0DBEC-Readme.txt" [0208.810] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0208.810] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.074] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x13affc2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x13affc2c*=0x70c, lpOverlapped=0x0) returned 1 [0209.076] CloseHandle (hObject=0x1bc4) returned 1 [0209.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ee930) returned 1 [0209.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a12e0) returned 1 Thread: id = 5595 os_tid = 0xfd4 [0186.260] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json")) returned 0x2020 [0190.263] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0199.415] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f6c [0199.416] GetFileSizeEx (in: hFile=0x1f6c, lpFileSize=0xddff920 | out: lpFileSize=0xddff920*=229) returned 1 [0199.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b28 [0199.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0199.416] NtQuerySystemTime (in: CurrentTime=0xddff8a8 | out: CurrentTime=0xddff8a8*=132471540673116000) returned 0x0 [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x38597642 [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x3e0812b8 [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x576b58fd [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x1e26a49f [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x42560f36 [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x56fa182 [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x2de8871b [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x56456603 [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x1dd65ebd [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x25e7ce8b [0199.416] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x33e26d6f [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x13a42048 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x341143ab [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x315e7f3f [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x795fb974 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x4e81b125 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x2baf305b [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x111da7e9 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x5d80fb97 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x2988870b [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x7744f58a [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x27ad9ee2 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x27852f05 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x7aac8331 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x37cbb90b [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x28e36b3e [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x10e92db0 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x1ede85ea [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x3b473a45 [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x2251fb6e [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x5bb8df4d [0199.417] RtlRandomEx (in: Seed=0xddff8a0 | out: Seed=0xddff8a0) returned 0x56ffd4cf [0199.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0199.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828c060 [0199.429] ReadFile (in: hFile=0x1f6c, lpBuffer=0x82c08d0, nNumberOfBytesToRead=0xe5, lpNumberOfBytesRead=0xddff89c, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesRead=0xddff89c*=0xe5, lpOverlapped=0x0) returned 1 [0199.438] SetFilePointerEx (in: hFile=0x1f6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.438] WriteFile (in: hFile=0x1f6c, lpBuffer=0x828c060*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0xddff8a0, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesWritten=0xddff8a0*=0xe5, lpOverlapped=0x0) returned 1 [0203.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063980 [0203.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80639a8 [0203.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639a8) returned 1 [0203.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0203.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0203.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054c90) returned 1 [0203.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6188) returned 1 [0203.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69540 [0203.500] SetFilePointerEx (in: hFile=0x1f6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.500] WriteFile (in: hFile=0x1f6c, lpBuffer=0x8407370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xddff914, lpOverlapped=0x0 | out: lpBuffer=0x8407370*, lpNumberOfBytesWritten=0xddff914*=0x10c, lpOverlapped=0x0) returned 1 [0207.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407370) returned 1 [0207.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69570) returned 1 [0207.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639a8) returned 1 [0207.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69540) returned 1 [0207.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063980) returned 1 [0207.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0207.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1090) returned 1 [0207.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0207.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404908 [0207.159] wcscpy (in: _Dest=0x8404908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" [0207.159] wcscat (in: _Dest=0x8404908, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json.f0dbec" [0207.159] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0xddff898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x83359d8 [0208.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83359d8) returned 1 [0208.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14892b80) returned 1 [0208.130] NtQueryInformationFile (in: FileHandle=0x1f6c, IoStatusBlock=0xddff870, FileInformation=0xddff878, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xddff870, FileInformation=0xddff878) returned 0x0 [0208.131] NtSetInformationFile (FileHandle=0x1f6c, IoStatusBlock=0xddff870, FileInformation=0xddff878, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404908) returned 1 [0208.352] FlushFileBuffers (hFile=0x1f6c) returned 1 [0208.371] CloseHandle (hObject=0x1f6c) returned 1 [0208.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83eeba0 [0208.811] wcscpy (in: _Dest=0x83eeba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" [0208.811] wcscat (in: _Dest=0x83eeba0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\F0DBEC-Readme.txt" [0208.811] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0208.812] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c40 [0209.083] WriteFile (in: hFile=0x1c40, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xddff8bc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xddff8bc*=0x70c, lpOverlapped=0x0) returned 1 [0209.085] CloseHandle (hObject=0x1c40) returned 1 [0209.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eeba0) returned 1 [0209.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1408) returned 1 Thread: id = 5597 os_tid = 0x1598 [0186.261] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json")) returned 0x2020 [0190.264] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0199.456] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e4 [0199.457] GetFileSizeEx (in: hFile=0x16e4, lpFileSize=0xf8dfc38 | out: lpFileSize=0xf8dfc38*=240) returned 1 [0199.457] SetFilePointerEx (in: hFile=0x16e4, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.457] ReadFile (in: hFile=0x16e4, lpBuffer=0xf8dfc44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf8dfc20, lpOverlapped=0x0 | out: lpBuffer=0xf8dfc44*, lpNumberOfBytesRead=0xf8dfc20*=0x4, lpOverlapped=0x0) returned 1 [0199.460] SetFilePointerEx (in: hFile=0x16e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0199.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0199.460] NtQuerySystemTime (in: CurrentTime=0xf8dfbc0 | out: CurrentTime=0xf8dfbc0*=132471540673428000) returned 0x0 [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0xc9cfe01 [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x253a66f4 [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x1e75bab1 [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x5e9498b0 [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x39a18fa6 [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0xdf3c401 [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x437abd8e [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x54fde6e1 [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0xae2b2b0 [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x63cb46ac [0199.460] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x6757ec5e [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x8203333 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0xbc6c241 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x4f3cdc0a [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x5f1b52a1 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x6b05c9e8 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x35c22415 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x58b83e15 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x525137ba [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x16e5ab0f [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x2cf1c97f [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x4bea315f [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0xac6a99d [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x508b1db1 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x278580c [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x60f466b1 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x37bd1a68 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x70fa8fc6 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x762941e5 [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x5a2cd9be [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x4906816c [0199.461] RtlRandomEx (in: Seed=0xf8dfbb8 | out: Seed=0xf8dfbb8) returned 0x431cf05b [0199.473] ReadFile (in: hFile=0x16e4, lpBuffer=0x8380da8, nNumberOfBytesToRead=0xf0, lpNumberOfBytesRead=0xf8dfbb4, lpOverlapped=0x0 | out: lpBuffer=0x8380da8*, lpNumberOfBytesRead=0xf8dfbb4*=0xf0, lpOverlapped=0x0) returned 1 [0199.473] SetFilePointerEx (in: hFile=0x16e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.473] WriteFile (in: hFile=0x16e4, lpBuffer=0x83849b0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0xf8dfbb8, lpOverlapped=0x0 | out: lpBuffer=0x83849b0*, lpNumberOfBytesWritten=0xf8dfbb8*=0xf0, lpOverlapped=0x0) returned 1 [0203.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a20 [0203.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a48 [0203.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a48) returned 1 [0203.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83849b0) returned 1 [0203.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8380da8) returned 1 [0203.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054d80) returned 1 [0203.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5a80) returned 1 [0203.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e80 [0203.506] SetFilePointerEx (in: hFile=0x16e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.506] WriteFile (in: hFile=0x16e4, lpBuffer=0x84077d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf8dfc2c, lpOverlapped=0x0 | out: lpBuffer=0x84077d0*, lpNumberOfBytesWritten=0xf8dfc2c*=0x10c, lpOverlapped=0x0) returned 1 [0204.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84077d0) returned 1 [0204.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68eb0) returned 1 [0204.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a48) returned 1 [0204.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e80) returned 1 [0204.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a20) returned 1 [0204.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0204.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0d70) returned 1 [0204.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0204.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f7388 [0204.012] wcscpy (in: _Dest=0x81f7388, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" [0204.012] wcscat (in: _Dest=0x81f7388, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json.f0dbec" [0204.012] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0xf8dfbb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8334e50 [0204.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334e50) returned 1 [0204.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346578) returned 1 [0204.465] NtQueryInformationFile (in: FileHandle=0x16e4, IoStatusBlock=0xf8dfb88, FileInformation=0xf8dfb90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf8dfb88, FileInformation=0xf8dfb90) returned 0x0 [0204.465] NtSetInformationFile (FileHandle=0x16e4, IoStatusBlock=0xf8dfb88, FileInformation=0xf8dfb90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f7388) returned 1 [0207.446] FlushFileBuffers (hFile=0x16e4) returned 1 [0207.463] CloseHandle (hObject=0x16e4) returned 1 [0207.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83efcb0 [0207.962] wcscpy (in: _Dest=0x83efcb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" [0207.962] wcscat (in: _Dest=0x83efcb0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\F0DBEC-Readme.txt" [0207.962] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0207.962] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc0 [0208.391] WriteFile (in: hFile=0x1cc0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf8dfbd4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf8dfbd4*=0x70c, lpOverlapped=0x0) returned 1 [0209.237] CloseHandle (hObject=0x1cc0) returned 1 [0209.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83efcb0) returned 1 [0209.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1658) returned 1 Thread: id = 5598 os_tid = 0x1020 [0186.266] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0190.268] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0199.624] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1700 [0199.625] GetFileSizeEx (in: hFile=0x1700, lpFileSize=0x13b7fec0 | out: lpFileSize=0x13b7fec0*=232) returned 1 [0199.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0199.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0199.626] NtQuerySystemTime (in: CurrentTime=0x13b7fe48 | out: CurrentTime=0x13b7fe48*=132471540674988000) returned 0x0 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x2a137e05 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x3a8a2c1 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x5a10c245 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x3f7444ce [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x73e65e39 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x33c00f2c [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x18a16159 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x296ef0f0 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x6590e507 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x18025577 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x4d29fbb0 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x6adccda1 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x3e19c830 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x24f271f3 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x54531f75 [0199.626] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x32649bc4 [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x44d502a8 [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x59f2913c [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0xa2693ea [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x9ef7201 [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x310d21b0 [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x786db549 [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x15faa258 [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x7a0275bb [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x2905cfea [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x2c3f38de [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x15cc8f87 [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x81da3ad [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x56e26a7e [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x6801143e [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x6e07673b [0199.627] RtlRandomEx (in: Seed=0x13b7fe40 | out: Seed=0x13b7fe40) returned 0x6b466d46 [0199.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cecc8 [0199.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bc0a0 [0199.641] ReadFile (in: hFile=0x1700, lpBuffer=0x80cecc8, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x13b7fe3c, lpOverlapped=0x0 | out: lpBuffer=0x80cecc8*, lpNumberOfBytesRead=0x13b7fe3c*=0xe8, lpOverlapped=0x0) returned 1 [0199.646] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.646] WriteFile (in: hFile=0x1700, lpBuffer=0x80bc0a0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x13b7fe40, lpOverlapped=0x0 | out: lpBuffer=0x80bc0a0*, lpNumberOfBytesWritten=0x13b7fe40*=0xe8, lpOverlapped=0x0) returned 1 [0203.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c50 [0203.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c78 [0203.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c78) returned 1 [0203.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bc0a0) returned 1 [0203.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cecc8) returned 1 [0203.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80550c8) returned 1 [0203.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6260) returned 1 [0203.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df41d8 [0203.540] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.540] WriteFile (in: hFile=0x1700, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x13b7feb4, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x13b7feb4*=0x10c, lpOverlapped=0x0) returned 1 [0204.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0204.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4328) returned 1 [0204.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c78) returned 1 [0204.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41d8) returned 1 [0204.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c50) returned 1 [0204.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0204.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a920) returned 1 [0204.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0204.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3e5b2b8 [0204.037] wcscpy (in: _Dest=0x3e5b2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" [0204.037] wcscat (in: _Dest=0x3e5b2b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json.f0dbec" [0204.038] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0x13b7fe38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e16ce0 [0204.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16ce0) returned 1 [0204.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346128) returned 1 [0204.481] NtQueryInformationFile (in: FileHandle=0x1700, IoStatusBlock=0x13b7fe10, FileInformation=0x13b7fe18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x13b7fe10, FileInformation=0x13b7fe18) returned 0x0 [0204.481] NtSetInformationFile (FileHandle=0x1700, IoStatusBlock=0x13b7fe10, FileInformation=0x13b7fe18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5b2b8) returned 1 [0207.483] FlushFileBuffers (hFile=0x1700) returned 1 [0207.499] CloseHandle (hObject=0x1700) returned 1 [0207.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x83f0538 [0207.980] wcscpy (in: _Dest=0x83f0538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" [0207.980] wcscat (in: _Dest=0x83f0538, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0207.980] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0207.980] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ca4 [0208.397] WriteFile (in: hFile=0x2ca4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x13b7fe5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x13b7fe5c*=0x70c, lpOverlapped=0x0) returned 1 [0209.258] CloseHandle (hObject=0x2ca4) returned 1 [0209.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f0538) returned 1 [0209.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1780) returned 1 Thread: id = 5599 os_tid = 0x10e0 [0186.266] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0190.269] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0199.647] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8 [0199.648] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x1387fd18 | out: lpFileSize=0x1387fd18*=233) returned 1 [0199.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0199.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0199.648] NtQuerySystemTime (in: CurrentTime=0x1387fca0 | out: CurrentTime=0x1387fca0*=132471540675144000) returned 0x0 [0199.648] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x130c4d59 [0199.648] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x4b4c0658 [0199.648] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x48ea1496 [0199.648] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0xa2be266 [0199.648] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x6e093310 [0199.648] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0xb1b5f41 [0199.648] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x66f3fca8 [0199.648] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x1348f38b [0199.649] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x5cd1fa58 [0199.649] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0xe025e11 [0199.649] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x1d97614a [0199.649] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x64170d38 [0199.649] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x38d50d68 [0199.649] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x44204330 [0199.649] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x23964244 [0199.649] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x64aaab81 [0199.649] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x68544018 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x3c473a36 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x793c6586 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x67e1dabc [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x387fbf82 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x7cf38c06 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x21f7b07d [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x7d35e433 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x739f7de2 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x48878b51 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x5908b977 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x452251a3 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x7385cb3a [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x2fec9359 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x627154c1 [0199.650] RtlRandomEx (in: Seed=0x1387fc98 | out: Seed=0x1387fc98) returned 0x3933d4e5 [0199.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b4890 [0199.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b8498 [0199.663] ReadFile (in: hFile=0x16f8, lpBuffer=0x80b4890, nNumberOfBytesToRead=0xe9, lpNumberOfBytesRead=0x1387fc94, lpOverlapped=0x0 | out: lpBuffer=0x80b4890*, lpNumberOfBytesRead=0x1387fc94*=0xe9, lpOverlapped=0x0) returned 1 [0199.666] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.666] WriteFile (in: hFile=0x16f8, lpBuffer=0x80b8498*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x1387fc98, lpOverlapped=0x0 | out: lpBuffer=0x80b8498*, lpNumberOfBytesWritten=0x1387fc98*=0xe9, lpOverlapped=0x0) returned 1 [0203.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ca0 [0203.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063cc8 [0203.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063cc8) returned 1 [0203.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b8498) returned 1 [0203.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b4890) returned 1 [0203.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055140) returned 1 [0203.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7190) returned 1 [0203.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df3ed8 [0203.544] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.544] WriteFile (in: hFile=0x16f8, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1387fd0c, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x1387fd0c*=0x10c, lpOverlapped=0x0) returned 1 [0204.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0204.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3f38) returned 1 [0204.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063cc8) returned 1 [0204.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3ed8) returned 1 [0204.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ca0) returned 1 [0204.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0204.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a880) returned 1 [0204.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0204.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3e5b3f0 [0204.041] wcscpy (in: _Dest=0x3e5b3f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" [0204.041] wcscat (in: _Dest=0x3e5b3f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json.f0dbec" [0204.041] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0x1387fc90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e17240 [0204.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17240) returned 1 [0204.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833ea90) returned 1 [0204.482] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x1387fc68, FileInformation=0x1387fc70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1387fc68, FileInformation=0x1387fc70) returned 0x0 [0204.482] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x1387fc68, FileInformation=0x1387fc70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5b3f0) returned 1 [0207.488] FlushFileBuffers (hFile=0x16f8) returned 1 [0207.503] CloseHandle (hObject=0x16f8) returned 1 [0207.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x83f0670 [0207.981] wcscpy (in: _Dest=0x83f0670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" [0207.981] wcscat (in: _Dest=0x83f0670, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0207.982] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0207.982] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a24 [0208.398] WriteFile (in: hFile=0x2a24, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1387fcb4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1387fcb4*=0x70c, lpOverlapped=0x0) returned 1 [0209.265] CloseHandle (hObject=0x2a24) returned 1 [0209.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f0670) returned 1 [0209.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a18a8) returned 1 Thread: id = 5601 os_tid = 0x12f4 [0186.294] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json")) returned 0x2020 [0190.270] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0199.681] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf74 [0199.682] GetFileSizeEx (in: hFile=0xf74, lpFileSize=0x1130f820 | out: lpFileSize=0x1130f820*=229) returned 1 [0199.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a970 [0199.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ba628 [0199.682] NtQuerySystemTime (in: CurrentTime=0x1130f7a8 | out: CurrentTime=0x1130f7a8*=132471540675612000) returned 0x0 [0199.682] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0xf8d72b6 [0199.682] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x40ab82ba [0199.682] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x3e248e31 [0199.682] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x1227c97e [0199.682] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x55173247 [0199.682] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x1330b5ca [0199.682] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x343de40 [0199.682] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x3a230157 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x3aff11a3 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x1b91e8d0 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x3a1bedb9 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x61bce46d [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0xd6f5c13 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x107a1100 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x5a7d8825 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x6097b59f [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x19b828c8 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x96fa8c2 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x3cc58f39 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x35553a88 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x7c798a62 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x3bb6be5e [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x7fde18a2 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x713be14b [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x278428f8 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x84332ce [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x7f13382e [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0xe2b866c [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x313e893b [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0xaa12364 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x4b8c5737 [0199.683] RtlRandomEx (in: Seed=0x1130f7a0 | out: Seed=0x1130f7a0) returned 0x262444e [0199.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149420e0 [0199.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14936cc8 [0199.695] ReadFile (in: hFile=0xf74, lpBuffer=0x149420e0, nNumberOfBytesToRead=0xe5, lpNumberOfBytesRead=0x1130f79c, lpOverlapped=0x0 | out: lpBuffer=0x149420e0*, lpNumberOfBytesRead=0x1130f79c*=0xe5, lpOverlapped=0x0) returned 1 [0199.697] SetFilePointerEx (in: hFile=0xf74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.697] WriteFile (in: hFile=0xf74, lpBuffer=0x14936cc8*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x1130f7a0, lpOverlapped=0x0 | out: lpBuffer=0x14936cc8*, lpNumberOfBytesWritten=0x1130f7a0*=0xe5, lpOverlapped=0x0) returned 1 [0203.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d40 [0203.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d68 [0203.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d68) returned 1 [0203.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14936cc8) returned 1 [0203.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149420e0) returned 1 [0203.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8055230) returned 1 [0203.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6c38) returned 1 [0203.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3df3578 [0203.549] SetFilePointerEx (in: hFile=0xf74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.549] WriteFile (in: hFile=0xf74, lpBuffer=0x30bbd90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1130f814, lpOverlapped=0x0 | out: lpBuffer=0x30bbd90*, lpNumberOfBytesWritten=0x1130f814*=0x10c, lpOverlapped=0x0) returned 1 [0204.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 [0204.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acde8) returned 1 [0204.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d68) returned 1 [0204.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3578) returned 1 [0204.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d40) returned 1 [0204.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0204.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ba768) returned 1 [0204.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ba6a0) returned 1 [0204.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3e5b660 [0204.047] wcscpy (in: _Dest=0x3e5b660, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" [0204.047] wcscat (in: _Dest=0x3e5b660, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json.f0dbec" [0204.047] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0x1130f798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335890 [0204.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335890) returned 1 [0204.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833f558) returned 1 [0204.485] NtQueryInformationFile (in: FileHandle=0xf74, IoStatusBlock=0x1130f770, FileInformation=0x1130f778, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1130f770, FileInformation=0x1130f778) returned 0x0 [0204.486] NtSetInformationFile (FileHandle=0xf74, IoStatusBlock=0x1130f770, FileInformation=0x1130f778, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5b660) returned 1 [0207.497] FlushFileBuffers (hFile=0xf74) returned 1 [0207.511] CloseHandle (hObject=0xf74) returned 1 [0207.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f74c0 [0207.986] wcscpy (in: _Dest=0x81f74c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" [0207.986] wcscat (in: _Dest=0x81f74c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\F0DBEC-Readme.txt" [0207.986] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0207.986] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15a0 [0208.399] WriteFile (in: hFile=0x15a0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1130f7bc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1130f7bc*=0x70c, lpOverlapped=0x0) returned 1 [0209.268] CloseHandle (hObject=0x15a0) returned 1 [0209.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f74c0) returned 1 [0209.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1af8) returned 1 Thread: id = 5602 os_tid = 0x1304 [0186.295] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json")) returned 0x2020 [0190.271] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0199.106] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cac [0199.106] GetFileSizeEx (in: hFile=0x1cac, lpFileSize=0x11b4fe68 | out: lpFileSize=0x11b4fe68*=220) returned 1 [0199.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b8b0 [0199.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b040 [0199.107] NtQuerySystemTime (in: CurrentTime=0x11b4fdf0 | out: CurrentTime=0x11b4fdf0*=132471540669996000) returned 0x0 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x2a6639ef [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x38308926 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x3ddae4 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x185ab925 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x1a014c11 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x5b59354b [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x76513764 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x7ba69bbb [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x703e8651 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x5cf7ac1d [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0xfb14358 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x7b3a5d92 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x66bbd0af [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x104b9e81 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x2d4a4137 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x60ceacc [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x6da1ac5 [0199.107] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x15c9c4dd [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x296156e3 [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x6580766c [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x5a56ad66 [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x505a80c5 [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x689b79c [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x890d8fc [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x1dea512a [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0xf7562c1 [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0xa5116cb [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x723a21d6 [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x674ddeeb [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x18ae8aa1 [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x4aa1de9 [0199.108] RtlRandomEx (in: Seed=0x11b4fde8 | out: Seed=0x11b4fde8) returned 0x3eca1fb7 [0199.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149a7ca8 [0199.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149ab8b0 [0199.125] ReadFile (in: hFile=0x1cac, lpBuffer=0x149a7ca8, nNumberOfBytesToRead=0xdc, lpNumberOfBytesRead=0x11b4fde4, lpOverlapped=0x0 | out: lpBuffer=0x149a7ca8*, lpNumberOfBytesRead=0x11b4fde4*=0xdc, lpOverlapped=0x0) returned 1 [0199.128] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.128] WriteFile (in: hFile=0x1cac, lpBuffer=0x149ab8b0*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x11b4fde8, lpOverlapped=0x0 | out: lpBuffer=0x149ab8b0*, lpNumberOfBytesWritten=0x11b4fde8*=0xdc, lpOverlapped=0x0) returned 1 [0203.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80636b0 [0203.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80636d8 [0203.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80636d8) returned 1 [0203.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149ab8b0) returned 1 [0203.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149a7ca8) returned 1 [0203.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 [0203.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e72f8) returned 1 [0203.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68d00 [0203.466] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.466] WriteFile (in: hFile=0x1cac, lpBuffer=0x8406ce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11b4fe5c, lpOverlapped=0x0 | out: lpBuffer=0x8406ce0*, lpNumberOfBytesWritten=0x11b4fe5c*=0x10c, lpOverlapped=0x0) returned 1 [0207.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ce0) returned 1 [0207.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692a0) returned 1 [0207.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80636d8) returned 1 [0207.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d00) returned 1 [0207.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80636b0) returned 1 [0207.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b8b0) returned 1 [0207.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b018) returned 1 [0207.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0207.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x84042f0 [0207.144] wcscpy (in: _Dest=0x84042f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" [0207.144] wcscat (in: _Dest=0x84042f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json.f0dbec" [0207.144] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0x11b4fde0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8336188 [0208.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336188) returned 1 [0208.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1489b7a8) returned 1 [0208.121] NtQueryInformationFile (in: FileHandle=0x1cac, IoStatusBlock=0x11b4fdb8, FileInformation=0x11b4fdc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11b4fdb8, FileInformation=0x11b4fdc0) returned 0x0 [0208.121] NtSetInformationFile (FileHandle=0x1cac, IoStatusBlock=0x11b4fdb8, FileInformation=0x11b4fdc0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84042f0) returned 1 [0208.290] FlushFileBuffers (hFile=0x1cac) returned 1 [0208.438] CloseHandle (hObject=0x1cac) returned 1 [0208.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5d98 [0208.830] wcscpy (in: _Dest=0x81f5d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" [0208.830] wcscat (in: _Dest=0x81f5d98, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\F0DBEC-Readme.txt" [0208.830] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0208.831] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8c [0209.542] WriteFile (in: hFile=0x2c8c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x11b4fe04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x11b4fe04*=0x70c, lpOverlapped=0x0) returned 1 [0209.730] CloseHandle (hObject=0x2c8c) returned 1 [0209.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5d98) returned 1 [0209.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1c20) returned 1 Thread: id = 5603 os_tid = 0x1358 [0186.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json")) returned 0x2020 [0190.271] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0199.128] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19f4 [0199.129] GetFileSizeEx (in: hFile=0x19f4, lpFileSize=0xf40f838 | out: lpFileSize=0xf40f838*=229) returned 1 [0199.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b040 [0199.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49ad8 [0199.130] NtQuerySystemTime (in: CurrentTime=0xf40f7c0 | out: CurrentTime=0xf40f7c0*=132471540670152000) returned 0x0 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x5ce64ee [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x6f9bbec9 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x43acd087 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x88a5a36 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x6645a7f6 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x772662b4 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x1272d023 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x3eb5314e [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x594f7076 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x6c341eda [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x6cc24baf [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x55b379f8 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x15b6b2d8 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x3e8e266d [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x46cb5367 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x29babf98 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x1473e5f2 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x7ec8b8a6 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x7f88745b [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x43ba406e [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x5551e59a [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x411d7b7a [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x44a8f14a [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x4c94f0f9 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x6a140540 [0199.130] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x52d2570d [0199.131] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x5eee01e2 [0199.131] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x5f31fbb0 [0199.131] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x5343ddd2 [0199.131] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x509fed55 [0199.131] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0xb19189d [0199.131] RtlRandomEx (in: Seed=0xf40f7b8 | out: Seed=0xf40f7b8) returned 0x37fba8fa [0199.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149af4b8 [0199.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149b30c0 [0199.176] ReadFile (in: hFile=0x19f4, lpBuffer=0x149af4b8, nNumberOfBytesToRead=0xe5, lpNumberOfBytesRead=0xf40f7b4, lpOverlapped=0x0 | out: lpBuffer=0x149af4b8*, lpNumberOfBytesRead=0xf40f7b4*=0xe5, lpOverlapped=0x0) returned 1 [0199.178] SetFilePointerEx (in: hFile=0x19f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.178] WriteFile (in: hFile=0x19f4, lpBuffer=0x149b30c0*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0xf40f7b8, lpOverlapped=0x0 | out: lpBuffer=0x149b30c0*, lpNumberOfBytesWritten=0xf40f7b8*=0xe5, lpOverlapped=0x0) returned 1 [0203.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063700 [0203.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063728 [0203.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063728) returned 1 [0203.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149b30c0) returned 1 [0203.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149af4b8) returned 1 [0203.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f329d0) returned 1 [0203.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7388) returned 1 [0203.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fa0 [0203.469] SetFilePointerEx (in: hFile=0x19f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.469] WriteFile (in: hFile=0x19f4, lpBuffer=0x8407258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf40f82c, lpOverlapped=0x0 | out: lpBuffer=0x8407258*, lpNumberOfBytesWritten=0xf40f82c*=0x10c, lpOverlapped=0x0) returned 1 [0207.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407258) returned 1 [0207.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692d0) returned 1 [0207.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063728) returned 1 [0207.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fa0) returned 1 [0207.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063700) returned 1 [0207.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b040) returned 1 [0207.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0207.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0207.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403e10 [0207.147] wcscpy (in: _Dest=0x8403e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" [0207.147] wcscat (in: _Dest=0x8403e10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json.f0dbec" [0207.147] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0xf40f7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335ef8 [0208.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335ef8) returned 1 [0208.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1489b9d0) returned 1 [0208.122] NtQueryInformationFile (in: FileHandle=0x19f4, IoStatusBlock=0xf40f788, FileInformation=0xf40f790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf40f788, FileInformation=0xf40f790) returned 0x0 [0208.122] NtSetInformationFile (FileHandle=0x19f4, IoStatusBlock=0xf40f788, FileInformation=0xf40f790, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403e10) returned 1 [0208.294] FlushFileBuffers (hFile=0x19f4) returned 1 [0208.300] CloseHandle (hObject=0x19f4) returned 1 [0208.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83487a8 [0208.773] wcscpy (in: _Dest=0x83487a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" [0208.773] wcscat (in: _Dest=0x83487a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\F0DBEC-Readme.txt" [0208.773] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0208.773] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.053] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf40f7d4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf40f7d4*=0x70c, lpOverlapped=0x0) returned 1 [0209.054] CloseHandle (hObject=0x1bc4) returned 1 [0209.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83487a8) returned 1 [0209.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1d48) returned 1 Thread: id = 5604 os_tid = 0x1644 [0186.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json")) returned 0x2020 [0190.272] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0199.179] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1440 [0199.180] GetFileSizeEx (in: hFile=0x1440, lpFileSize=0x1172ff40 | out: lpFileSize=0x1172ff40*=220) returned 1 [0199.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49ad8 [0199.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0199.180] NtQuerySystemTime (in: CurrentTime=0x1172fec8 | out: CurrentTime=0x1172fec8*=132471540670620000) returned 0x0 [0199.180] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x79616c47 [0199.180] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x3ce777fe [0199.180] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x33ed5d4b [0199.180] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x5c593f83 [0199.180] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x7d467be6 [0199.180] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x697a4c68 [0199.180] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0xf1fb141 [0199.180] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x1b2a618 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x5c8ebd6f [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x3cb17b30 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x22de2ec5 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x36dcbaa1 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x6326eefc [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x1d870e37 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x61e4c296 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x36f1475c [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x4e7c4d56 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x20027562 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x1b98881 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0xd34d451 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x7360d1ef [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x18a937b7 [0199.181] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x2620a5af [0199.182] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x12491210 [0199.182] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x3b85565b [0199.182] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x222f7ce4 [0199.182] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0xc5d55d5 [0199.182] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x7a7dd643 [0199.182] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x65d16651 [0199.182] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x15e30406 [0199.182] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0xfa03b81 [0199.182] RtlRandomEx (in: Seed=0x1172fec0 | out: Seed=0x1172fec0) returned 0x77848681 [0199.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149a0498 [0199.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x149a40a0 [0199.194] ReadFile (in: hFile=0x1440, lpBuffer=0x149a0498, nNumberOfBytesToRead=0xdc, lpNumberOfBytesRead=0x1172febc, lpOverlapped=0x0 | out: lpBuffer=0x149a0498*, lpNumberOfBytesRead=0x1172febc*=0xdc, lpOverlapped=0x0) returned 1 [0199.198] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.198] WriteFile (in: hFile=0x1440, lpBuffer=0x149a40a0*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x1172fec0, lpOverlapped=0x0 | out: lpBuffer=0x149a40a0*, lpNumberOfBytesWritten=0x1172fec0*=0xdc, lpOverlapped=0x0) returned 1 [0203.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063750 [0203.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063778 [0203.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063778) returned 1 [0203.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149a40a0) returned 1 [0203.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149a0498) returned 1 [0203.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 [0203.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5690) returned 1 [0203.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e691e0 [0203.472] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.472] WriteFile (in: hFile=0x1440, lpBuffer=0x8406308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1172ff34, lpOverlapped=0x0 | out: lpBuffer=0x8406308*, lpNumberOfBytesWritten=0x1172ff34*=0x10c, lpOverlapped=0x0) returned 1 [0207.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406308) returned 1 [0207.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69210) returned 1 [0207.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063778) returned 1 [0207.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691e0) returned 1 [0207.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063750) returned 1 [0207.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0207.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cee0) returned 1 [0207.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b888) returned 1 [0207.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404080 [0207.151] wcscpy (in: _Dest=0x8404080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" [0207.151] wcscat (in: _Dest=0x8404080, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json.f0dbec" [0207.151] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json.f0dbec", NtPathName=0x1172feb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8335c68 [0208.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335c68) returned 1 [0208.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1489be20) returned 1 [0208.128] NtQueryInformationFile (in: FileHandle=0x1440, IoStatusBlock=0x1172fe90, FileInformation=0x1172fe98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1172fe90, FileInformation=0x1172fe98) returned 0x0 [0208.128] NtSetInformationFile (FileHandle=0x1440, IoStatusBlock=0x1172fe90, FileInformation=0x1172fe98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404080) returned 1 [0208.349] FlushFileBuffers (hFile=0x1440) returned 1 [0208.425] CloseHandle (hObject=0x1440) returned 1 [0208.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f5ed0 [0208.827] wcscpy (in: _Dest=0x81f5ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" [0208.827] wcscat (in: _Dest=0x81f5ed0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\F0DBEC-Readme.txt" [0208.827] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\f0dbec-readme.txt")) returned 0xffffffff [0208.827] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cf4 [0209.540] WriteFile (in: hFile=0x1cf4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1172fedc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1172fedc*=0x70c, lpOverlapped=0x0) returned 1 [0209.719] CloseHandle (hObject=0x1cf4) returned 1 [0209.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5ed0) returned 1 [0209.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1e70) returned 1 Thread: id = 5605 os_tid = 0x14bc [0186.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc")) returned 0x20 [0186.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC", dwFileAttributes=0x20) returned 0 [0186.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.301] GetLastError () returned 0x5 [0186.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC", dwFileAttributes=0x20) returned 0 [0186.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 5606 os_tid = 0x1648 [0186.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc")) returned 0x20 [0186.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC", dwFileAttributes=0x20) returned 0 [0186.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.303] GetLastError () returned 0x5 [0186.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC", dwFileAttributes=0x20) returned 0 [0186.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053d20) returned 1 Thread: id = 5610 os_tid = 0x814 [0186.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc")) returned 0x20 [0189.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC", dwFileAttributes=0x20) returned 0 [0189.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.639] GetLastError () returned 0x5 [0189.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC", dwFileAttributes=0x20) returned 0 [0189.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 5611 os_tid = 0xe08 [0186.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc")) returned 0x20 [0189.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC", dwFileAttributes=0x20) returned 0 [0189.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.634] GetLastError () returned 0x5 [0189.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC", dwFileAttributes=0x20) returned 0 [0189.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 5612 os_tid = 0x14c4 [0186.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv")) returned 0x20 [0189.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV", dwFileAttributes=0x20) returned 0 [0189.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.627] GetLastError () returned 0x5 [0189.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV", dwFileAttributes=0x20) returned 0 [0189.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831aed8) returned 1 Thread: id = 5613 os_tid = 0xe54 [0186.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml")) returned 0x20 [0189.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML", dwFileAttributes=0x20) returned 0 [0189.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.621] GetLastError () returned 0x5 [0189.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML", dwFileAttributes=0x20) returned 0 [0189.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b9d8) returned 1 Thread: id = 5614 os_tid = 0x14c8 [0186.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc")) returned 0x20 [0189.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC", dwFileAttributes=0x20) returned 0 [0189.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.616] GetLastError () returned 0x5 [0189.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC", dwFileAttributes=0x20) returned 0 [0189.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 5615 os_tid = 0x834 [0186.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc")) returned 0x20 [0189.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC", dwFileAttributes=0x20) returned 0 [0189.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.610] GetLastError () returned 0x5 [0189.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC", dwFileAttributes=0x20) returned 0 [0189.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 5619 os_tid = 0x14d8 [0186.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc")) returned 0x20 [0189.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC", dwFileAttributes=0x20) returned 0 [0189.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.573] GetLastError () returned 0x5 [0189.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC", dwFileAttributes=0x20) returned 0 [0189.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 5624 os_tid = 0x167c [0186.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl")) returned 0x20 [0186.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL", dwFileAttributes=0x20) returned 0 [0186.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.716] GetLastError () returned 0x5 [0186.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL", dwFileAttributes=0x20) returned 0 [0186.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 Thread: id = 5625 os_tid = 0x1220 [0186.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.719] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" [0186.719] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\" [0186.719] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*" [0186.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.719] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.720] wcscmp (_String1=".", _String2=".") returned 0 [0186.720] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.720] wcscmp (_String1="..", _String2=".") returned 1 [0186.720] wcscmp (_String1="..", _String2="..") returned 0 [0186.720] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.720] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405930) returned 1 Thread: id = 5626 os_tid = 0x1008 [0186.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.722] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" [0186.722] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\" [0186.722] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*" [0186.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.723] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.723] wcscmp (_String1=".", _String2=".") returned 0 [0186.723] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.723] wcscmp (_String1="..", _String2=".") returned 1 [0186.723] wcscmp (_String1="..", _String2="..") returned 0 [0186.723] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.723] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 Thread: id = 5627 os_tid = 0x1228 [0186.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.725] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" [0186.725] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\" [0186.725] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*" [0186.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.726] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.726] wcscmp (_String1=".", _String2=".") returned 0 [0186.726] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.726] wcscmp (_String1="..", _String2=".") returned 1 [0186.726] wcscmp (_String1="..", _String2="..") returned 0 [0186.726] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.726] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 Thread: id = 5628 os_tid = 0x13ac [0186.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.728] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" [0186.728] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\" [0186.728] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*" [0186.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.728] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.729] wcscmp (_String1=".", _String2=".") returned 0 [0186.729] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.729] wcscmp (_String1="..", _String2=".") returned 1 [0186.729] wcscmp (_String1="..", _String2="..") returned 0 [0186.729] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.729] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 Thread: id = 5629 os_tid = 0x13b0 [0186.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.737] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" [0186.737] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\" [0186.737] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*" [0186.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.738] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.738] wcscmp (_String1=".", _String2=".") returned 0 [0186.738] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.738] wcscmp (_String1="..", _String2=".") returned 1 [0186.738] wcscmp (_String1="..", _String2="..") returned 0 [0186.738] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.738] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 Thread: id = 5630 os_tid = 0x13c8 [0186.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.740] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" [0186.740] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\" [0186.740] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*" [0186.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.741] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.741] wcscmp (_String1=".", _String2=".") returned 0 [0186.741] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.741] wcscmp (_String1="..", _String2=".") returned 1 [0186.741] wcscmp (_String1="..", _String2="..") returned 0 [0186.741] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.741] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 Thread: id = 5631 os_tid = 0x13cc [0186.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.743] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" [0186.743] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\" [0186.743] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*" [0186.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.743] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.744] wcscmp (_String1=".", _String2=".") returned 0 [0186.744] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.744] wcscmp (_String1="..", _String2=".") returned 1 [0186.744] wcscmp (_String1="..", _String2="..") returned 0 [0186.744] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.744] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 Thread: id = 5632 os_tid = 0x152c [0186.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.746] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" [0186.746] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\" [0186.746] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*" [0186.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.746] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.746] wcscmp (_String1=".", _String2=".") returned 0 [0186.746] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.746] wcscmp (_String1="..", _String2=".") returned 1 [0186.746] wcscmp (_String1="..", _String2="..") returned 0 [0186.747] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.747] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 Thread: id = 5633 os_tid = 0x128c [0186.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.749] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" [0186.749] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\" [0186.749] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*" [0186.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.749] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.749] wcscmp (_String1=".", _String2=".") returned 0 [0186.749] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.749] wcscmp (_String1="..", _String2=".") returned 1 [0186.749] wcscmp (_String1="..", _String2="..") returned 0 [0186.750] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.750] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 Thread: id = 5634 os_tid = 0x1290 [0186.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0186.751] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" [0186.751] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\" [0186.751] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*" [0186.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.752] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.752] wcscmp (_String1=".", _String2=".") returned 0 [0186.752] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.752] wcscmp (_String1="..", _String2=".") returned 1 [0186.752] wcscmp (_String1="..", _String2="..") returned 0 [0186.752] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.752] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 Thread: id = 5635 os_tid = 0x1294 [0186.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401270 [0186.760] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" [0186.761] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\" [0186.761] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*" [0186.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.761] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.761] wcscmp (_String1=".", _String2=".") returned 0 [0186.761] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.761] wcscmp (_String1="..", _String2=".") returned 1 [0186.761] wcscmp (_String1="..", _String2="..") returned 0 [0186.761] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.761] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0186.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 Thread: id = 5636 os_tid = 0x1298 [0186.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0186.775] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" [0186.775] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\" [0186.775] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*" [0186.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.775] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.776] wcscmp (_String1=".", _String2=".") returned 0 [0186.776] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.776] wcscmp (_String1="..", _String2=".") returned 1 [0186.776] wcscmp (_String1="..", _String2="..") returned 0 [0186.776] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.776] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0186.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406538) returned 1 Thread: id = 5637 os_tid = 0x129c [0186.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0186.781] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" [0186.782] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\" [0186.782] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*" [0186.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.782] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.782] wcscmp (_String1=".", _String2=".") returned 0 [0186.782] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.782] wcscmp (_String1="..", _String2=".") returned 1 [0186.782] wcscmp (_String1="..", _String2="..") returned 0 [0186.782] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.783] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0186.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ab0) returned 1 Thread: id = 5638 os_tid = 0x1408 [0186.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0186.785] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" [0186.785] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\" [0186.785] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*" [0186.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.785] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.785] wcscmp (_String1=".", _String2=".") returned 0 [0186.785] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.785] wcscmp (_String1="..", _String2=".") returned 1 [0186.786] wcscmp (_String1="..", _String2="..") returned 0 [0186.786] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.786] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0186.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406420) returned 1 Thread: id = 5639 os_tid = 0xe7c [0186.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0186.788] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" [0186.788] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\" [0186.788] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*" [0186.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.788] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.789] wcscmp (_String1=".", _String2=".") returned 0 [0186.789] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.789] wcscmp (_String1="..", _String2=".") returned 1 [0186.789] wcscmp (_String1="..", _String2="..") returned 0 [0186.789] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.789] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0186.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405a48) returned 1 Thread: id = 5640 os_tid = 0xe68 [0186.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0186.791] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" [0186.791] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\" [0186.791] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*" [0186.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.791] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.792] wcscmp (_String1=".", _String2=".") returned 0 [0186.792] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.792] wcscmp (_String1="..", _String2=".") returned 1 [0186.792] wcscmp (_String1="..", _String2="..") returned 0 [0186.792] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.792] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0186.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 Thread: id = 5641 os_tid = 0x1140 [0186.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0186.794] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" [0186.794] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\" [0186.794] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*" [0186.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.794] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.795] wcscmp (_String1=".", _String2=".") returned 0 [0186.795] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.795] wcscmp (_String1="..", _String2=".") returned 1 [0186.795] wcscmp (_String1="..", _String2="..") returned 0 [0186.795] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.795] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0186.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 Thread: id = 5642 os_tid = 0x1728 [0186.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0186.797] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" [0186.797] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\" [0186.797] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*" [0186.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.797] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.798] wcscmp (_String1=".", _String2=".") returned 0 [0186.798] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.798] wcscmp (_String1="..", _String2=".") returned 1 [0186.798] wcscmp (_String1="..", _String2="..") returned 0 [0186.798] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.798] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0186.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406768) returned 1 Thread: id = 5643 os_tid = 0x1798 [0186.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0186.800] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" [0186.800] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\" [0186.800] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*" [0186.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.800] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.800] wcscmp (_String1=".", _String2=".") returned 0 [0186.800] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.800] wcscmp (_String1="..", _String2=".") returned 1 [0186.801] wcscmp (_String1="..", _String2="..") returned 0 [0186.801] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.801] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0186.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406308) returned 1 Thread: id = 5644 os_tid = 0x179c [0186.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0186.803] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" [0186.803] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\" [0186.803] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*" [0186.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0186.803] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0186.803] wcscmp (_String1=".", _String2=".") returned 0 [0186.803] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.803] wcscmp (_String1="..", _String2=".") returned 1 [0186.803] wcscmp (_String1="..", _String2="..") returned 0 [0186.804] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.804] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0186.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0186.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0186.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84061f0) returned 1 Thread: id = 5645 os_tid = 0x17b0 [0187.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0187.175] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" [0187.175] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\" [0187.175] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*" [0187.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d86618 [0187.175] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*", lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0187.175] wcscmp (_String1=".", _String2=".") returned 0 [0187.175] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.175] wcscmp (_String1="..", _String2=".") returned 1 [0187.175] wcscmp (_String1="..", _String2="..") returned 0 [0187.176] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3d86618 | out: lpFindFileData=0x3d86618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0187.176] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0187.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86618) returned 1 [0187.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0187.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 Thread: id = 5646 os_tid = 0x17b4 [0187.192] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020 [0191.352] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0202.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cac [0211.047] GetFileSizeEx (in: hFile=0x1cac, lpFileSize=0x3cafd10 | out: lpFileSize=0x3cafd10*=206) returned 1 [0211.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80642e0 [0211.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80642b8 [0211.048] NtQuerySystemTime (in: CurrentTime=0x3cafc98 | out: CurrentTime=0x3cafc98*=132471540787620000) returned 0x0 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x3f31c0ad [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x614b56cb [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x1198aec0 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x496bd072 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x327faed9 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x4a60ec2c [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x34c7a31a [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x64ed9673 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x7305b47a [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x21e010af [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x6c68e993 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x228e3627 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x47532d80 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x5c019b8b [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x3bfc8daf [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x216fb34b [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x11c38780 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x533c8c5c [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x11182480 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x58a1a93e [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x4caa7169 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x4c02ca0b [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x609f935e [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x343c8f97 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x5d281bd5 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x5a9247a4 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x144ad947 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x1e267b2a [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x5c8f2333 [0211.048] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x1417a8 [0211.049] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0xfa0eeab [0211.049] RtlRandomEx (in: Seed=0x3cafc90 | out: Seed=0x3cafc90) returned 0x28268cc1 [0211.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82718b0 [0211.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82754b8 [0211.059] ReadFile (in: hFile=0x1cac, lpBuffer=0x82718b0, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x3cafc8c, lpOverlapped=0x0 | out: lpBuffer=0x82718b0*, lpNumberOfBytesRead=0x3cafc8c*=0xce, lpOverlapped=0x0) returned 1 [0211.061] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.061] WriteFile (in: hFile=0x1cac, lpBuffer=0x82754b8*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x3cafc90, lpOverlapped=0x0 | out: lpBuffer=0x82754b8*, lpNumberOfBytesWritten=0x3cafc90*=0xce, lpOverlapped=0x0) returned 1 [0213.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42088 [0213.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43398 [0213.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43398) returned 1 [0213.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82754b8) returned 1 [0213.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82718b0) returned 1 [0213.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687e0) returned 1 [0213.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9b10) returned 1 [0213.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69480 [0213.936] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.936] WriteFile (in: hFile=0x1cac, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x3cafd04, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x3cafd04*=0x10c, lpOverlapped=0x0) returned 1 [0214.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0214.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694b0) returned 1 [0214.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43398) returned 1 [0214.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69480) returned 1 [0214.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42088) returned 1 [0214.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80642e0) returned 1 [0214.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064240) returned 1 [0214.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064268) returned 1 [0214.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8b80 [0214.086] wcscpy (in: _Dest=0x3dd8b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" [0214.086] wcscat (in: _Dest=0x3dd8b80, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.f0dbec" [0214.087] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0x3cafc88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d518 [0215.821] FlushFileBuffers (hFile=0x1cac) returned 1 [0215.835] CloseHandle (hObject=0x1cac) returned 1 [0216.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d80b0 [0216.077] wcscpy (in: _Dest=0x81d80b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" [0216.077] wcscat (in: _Dest=0x81d80b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\F0DBEC-Readme.txt" [0216.077] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0216.077] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.549] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x3cafcac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x3cafcac*=0x70c, lpOverlapped=0x0) returned 1 [0216.551] CloseHandle (hObject=0x10c4) returned 1 [0216.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d80b0) returned 1 [0216.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0ec0) returned 1 Thread: id = 5647 os_tid = 0x17b8 [0187.198] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0191.366] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0202.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc6c [0211.062] GetFileSizeEx (in: hFile=0xc6c, lpFileSize=0x88ef918 | out: lpFileSize=0x88ef918*=206) returned 1 [0211.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80642b8 [0211.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80641f0 [0211.063] NtQuerySystemTime (in: CurrentTime=0x88ef8a0 | out: CurrentTime=0x88ef8a0*=132471540787776000) returned 0x0 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x7def8620 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x3ae37758 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x65397469 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x6fd9c7d5 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x47ae148f [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x196df49c [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x621a0708 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x72acca37 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x4f50ac41 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x1f0f7856 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0xf02dc28 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0xc09ffe0 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x65bba118 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x6ba3560f [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x2c9a3754 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x19f5709 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x3c328ee7 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x20c57a23 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x4b5eeeae [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x31b1d529 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0xf1b18ac [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x75c28dab [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x56d70e9a [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x6e3aefae [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x1ec18b17 [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x732e0abc [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x66af37bb [0211.063] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x4471f37d [0211.064] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x5d4bb0dd [0211.064] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x483e096d [0211.064] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x32b0c101 [0211.064] RtlRandomEx (in: Seed=0x88ef898 | out: Seed=0x88ef898) returned 0x3dbcd14d [0211.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82790c0 [0211.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x827ccc8 [0211.072] ReadFile (in: hFile=0xc6c, lpBuffer=0x82790c0, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x88ef894, lpOverlapped=0x0 | out: lpBuffer=0x82790c0*, lpNumberOfBytesRead=0x88ef894*=0xce, lpOverlapped=0x0) returned 1 [0211.074] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.074] WriteFile (in: hFile=0xc6c, lpBuffer=0x827ccc8*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x88ef898, lpOverlapped=0x0 | out: lpBuffer=0x827ccc8*, lpNumberOfBytesWritten=0x88ef898*=0xce, lpOverlapped=0x0) returned 1 [0213.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435f0 [0213.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43488 [0213.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43488) returned 1 [0213.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x827ccc8) returned 1 [0213.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82790c0) returned 1 [0213.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0213.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea4a0) returned 1 [0213.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69420 [0213.938] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.938] WriteFile (in: hFile=0xc6c, lpBuffer=0x81df648*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x88ef90c, lpOverlapped=0x0 | out: lpBuffer=0x81df648*, lpNumberOfBytesWritten=0x88ef90c*=0x10c, lpOverlapped=0x0) returned 1 [0214.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df648) returned 1 [0214.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69450) returned 1 [0214.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43488) returned 1 [0214.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69420) returned 1 [0214.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435f0) returned 1 [0214.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80642b8) returned 1 [0214.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064218) returned 1 [0214.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641a0) returned 1 [0214.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x2d2ac0 [0214.090] wcscpy (in: _Dest=0x2d2ac0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" [0214.090] wcscat (in: _Dest=0x2d2ac0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.f0dbec" [0214.090] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.f0dbec", NtPathName=0x88ef890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e18108 [0215.825] FlushFileBuffers (hFile=0xc6c) returned 1 [0215.842] CloseHandle (hObject=0xc6c) returned 1 [0216.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403cd8 [0216.079] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" [0216.079] wcscat (in: _Dest=0x8403cd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\F0DBEC-Readme.txt" [0216.079] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\f0dbec-readme.txt")) returned 0xffffffff [0216.079] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.558] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x88ef8b4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x88ef8b4*=0x70c, lpOverlapped=0x0) returned 1 [0216.560] CloseHandle (hObject=0x10c4) returned 1 [0216.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403cd8) returned 1 [0216.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1800) returned 1 Thread: id = 5648 os_tid = 0x17bc [0187.205] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020 [0191.382] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0204.798] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2ca4 [0211.260] GetFileSizeEx (in: hFile=0x2ca4, lpFileSize=0x7b6fc20 | out: lpFileSize=0x7b6fc20*=216) returned 1 [0211.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d18 [0211.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c50 [0211.260] NtQuerySystemTime (in: CurrentTime=0x7b6fba8 | out: CurrentTime=0x7b6fba8*=132471540789804000) returned 0x0 [0211.260] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x18030d2 [0211.260] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x57d4890f [0211.260] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x4e785d41 [0211.260] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x37b5ba10 [0211.260] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x6c3cc3af [0211.260] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x2b5dac21 [0211.260] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x2148cf16 [0211.260] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x4be725ee [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0xb7f486a [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x687eb893 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x425acb72 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0xc6f5356 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x3d0b5787 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x767acbc1 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x6d711341 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0xe267471 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x566e66e4 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x310ce84e [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0xa18167a [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x5a7fe5e6 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x303ba6ed [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x5c08f1a1 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x676a9841 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x1ff80c9 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x6d711341 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x608dd86 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x6c7b2eb8 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x530e5ca9 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x49dcde5c [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x1d3e6cd5 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x64eddcb3 [0211.261] RtlRandomEx (in: Seed=0x7b6fba0 | out: Seed=0x7b6fba0) returned 0x2ce5f85f [0211.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad1438 [0211.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad5040 [0211.272] ReadFile (in: hFile=0x2ca4, lpBuffer=0x14ad1438, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x7b6fb9c, lpOverlapped=0x0 | out: lpBuffer=0x14ad1438*, lpNumberOfBytesRead=0x7b6fb9c*=0xd8, lpOverlapped=0x0) returned 1 [0211.274] SetFilePointerEx (in: hFile=0x2ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.274] WriteFile (in: hFile=0x2ca4, lpBuffer=0x14ad5040*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x7b6fba0, lpOverlapped=0x0 | out: lpBuffer=0x14ad5040*, lpNumberOfBytesWritten=0x7b6fba0*=0xd8, lpOverlapped=0x0) returned 1 [0213.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0213.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42808 [0213.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42808) returned 1 [0213.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad5040) returned 1 [0213.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad1438) returned 1 [0213.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68150) returned 1 [0213.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea9f8) returned 1 [0213.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f828 [0213.967] SetFilePointerEx (in: hFile=0x2ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.967] WriteFile (in: hFile=0x2ca4, lpBuffer=0x81e0368*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7b6fc14, lpOverlapped=0x0 | out: lpBuffer=0x81e0368*, lpNumberOfBytesWritten=0x7b6fc14*=0x10c, lpOverlapped=0x0) returned 1 [0214.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0368) returned 1 [0214.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f8b8) returned 1 [0214.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42808) returned 1 [0214.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f828) returned 1 [0214.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0214.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d18) returned 1 [0214.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c78) returned 1 [0214.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c00) returned 1 [0214.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81871c0 [0214.125] wcscpy (in: _Dest=0x81871c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" [0214.125] wcscat (in: _Dest=0x81871c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.f0dbec" [0214.125] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.f0dbec", NtPathName=0x7b6fb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9bb8 [0215.873] FlushFileBuffers (hFile=0x2ca4) [0215.873] FlushFileBuffers (hFile=0x2ca4) returned 1 [0215.887] CloseHandle (hObject=0x2ca4) returned 1 [0216.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8e90 [0216.101] wcscpy (in: _Dest=0x81d8e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" [0216.101] wcscat (in: _Dest=0x81d8e90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\F0DBEC-Readme.txt" [0216.101] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\f0dbec-readme.txt")) returned 0xffffffff [0216.101] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.602] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7b6fbbc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7b6fbbc*=0x70c, lpOverlapped=0x0) returned 1 [0216.604] CloseHandle (hObject=0x10c4) returned 1 [0216.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8e90) returned 1 [0216.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1360) returned 1 Thread: id = 5649 os_tid = 0x17c0 [0187.206] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020 [0191.381] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0204.797] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1208 [0211.244] GetFileSizeEx (in: hFile=0x1208, lpFileSize=0x77afb90 | out: lpFileSize=0x77afb90*=216) returned 1 [0211.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d40 [0211.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d18 [0211.244] NtQuerySystemTime (in: CurrentTime=0x77afb18 | out: CurrentTime=0x77afb18*=132471540789648000) returned 0x0 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x2717055f [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x663dcdc7 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0xd17aa41 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x67467b1f [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x16e55c3d [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x12722822 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0xb7f486a [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x2ffce0f0 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x2e87f84a [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x6c3cc3af [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x7ce7ae89 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x1b05544b [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x6fedbb97 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x13606c57 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x1538ea9c [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x46459b0f [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x480103c9 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x676a9841 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x3a814b23 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x63ba3d66 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x7b897126 [0211.245] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x32e441a2 [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0xeeb22c0 [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x20261c28 [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x64fc90ff [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x23500f64 [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x5d304424 [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x14560730 [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x50100816 [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x67467b1f [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x3ce11cef [0211.246] RtlRandomEx (in: Seed=0x77afb10 | out: Seed=0x77afb10) returned 0x31537ee5 [0211.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ac9c28 [0211.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14acd830 [0211.256] ReadFile (in: hFile=0x1208, lpBuffer=0x14ac9c28, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x77afb0c, lpOverlapped=0x0 | out: lpBuffer=0x14ac9c28*, lpNumberOfBytesRead=0x77afb0c*=0xd8, lpOverlapped=0x0) returned 1 [0211.259] SetFilePointerEx (in: hFile=0x1208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.259] WriteFile (in: hFile=0x1208, lpBuffer=0x14acd830*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x77afb10, lpOverlapped=0x0 | out: lpBuffer=0x14acd830*, lpNumberOfBytesWritten=0x77afb10*=0xd8, lpOverlapped=0x0) returned 1 [0213.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425b0 [0213.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421a0 [0213.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421a0) returned 1 [0213.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14acd830) returned 1 [0213.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ac9c28) returned 1 [0213.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0213.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9768) returned 1 [0213.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f288 [0213.964] SetFilePointerEx (in: hFile=0x1208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.964] WriteFile (in: hFile=0x1208, lpBuffer=0x81e0138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x77afb84, lpOverlapped=0x0 | out: lpBuffer=0x81e0138*, lpNumberOfBytesWritten=0x77afb84*=0x10c, lpOverlapped=0x0) returned 1 [0214.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0138) returned 1 [0214.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f468) returned 1 [0214.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421a0) returned 1 [0214.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f288) returned 1 [0214.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425b0) returned 1 [0214.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d40) returned 1 [0214.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ca0) returned 1 [0214.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063cc8) returned 1 [0214.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8186f50 [0214.119] wcscpy (in: _Dest=0x8186f50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" [0214.119] wcscat (in: _Dest=0x8186f50, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.f0dbec" [0214.119] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0x77afb08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa5f8 [0215.866] FlushFileBuffers (hFile=0x1208) returned 1 [0215.877] CloseHandle (hObject=0x1208) returned 1 [0216.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d90e0 [0216.096] wcscpy (in: _Dest=0x81d90e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" [0216.096] wcscat (in: _Dest=0x81d90e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\F0DBEC-Readme.txt" [0216.096] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0216.096] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.598] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x77afb2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x77afb2c*=0x70c, lpOverlapped=0x0) returned 1 [0216.600] CloseHandle (hObject=0x10c4) returned 1 [0216.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d90e0) returned 1 [0216.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d15b0) returned 1 Thread: id = 5650 os_tid = 0x17c4 [0187.206] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020 [0191.380] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0202.968] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1da4 [0211.088] GetFileSizeEx (in: hFile=0x1da4, lpFileSize=0x9e6fdc0 | out: lpFileSize=0x9e6fdc0*=219) returned 1 [0211.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80641c8 [0211.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064100 [0211.089] NtQuerySystemTime (in: CurrentTime=0x9e6fd48 | out: CurrentTime=0x9e6fd48*=132471540788088000) returned 0x0 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x6647fdd1 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x4e1d77d7 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x50e989b3 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0xdc39ab0 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x25be2140 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x6a4689d1 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x3c5f2a6 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x326d241c [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0xd8daaa9 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x701843a9 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x6e83f2a6 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x479216ee [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x162a7aef [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x55cd5520 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x5de75a97 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x38b1f675 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x3106eda7 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x7e30ff1 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x36199026 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x5eff1f2b [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x67f1648f [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x37cab82 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x3bc2002 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x24db318 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x2f2999ac [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x12003101 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x67924b54 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x43022162 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x49af2345 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x2f1331a5 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x7b603113 [0211.089] RtlRandomEx (in: Seed=0x9e6fd40 | out: Seed=0x9e6fd40) returned 0x62242f06 [0211.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809a378 [0211.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x809df80 [0211.102] ReadFile (in: hFile=0x1da4, lpBuffer=0x809a378, nNumberOfBytesToRead=0xdb, lpNumberOfBytesRead=0x9e6fd3c, lpOverlapped=0x0 | out: lpBuffer=0x809a378*, lpNumberOfBytesRead=0x9e6fd3c*=0xdb, lpOverlapped=0x0) returned 1 [0211.103] SetFilePointerEx (in: hFile=0x1da4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.104] WriteFile (in: hFile=0x1da4, lpBuffer=0x809df80*, nNumberOfBytesToWrite=0xdb, lpNumberOfBytesWritten=0x9e6fd40, lpOverlapped=0x0 | out: lpBuffer=0x809df80*, lpNumberOfBytesWritten=0x9e6fd40*=0xdb, lpOverlapped=0x0) returned 1 [0213.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43c58 [0213.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43460 [0213.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0213.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809df80) returned 1 [0213.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x809a378) returned 1 [0213.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 [0213.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb2b0) returned 1 [0213.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e698a0 [0213.943] SetFilePointerEx (in: hFile=0x1da4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.943] WriteFile (in: hFile=0x1da4, lpBuffer=0x81df878*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9e6fdb4, lpOverlapped=0x0 | out: lpBuffer=0x81df878*, lpNumberOfBytesWritten=0x9e6fdb4*=0x10c, lpOverlapped=0x0) returned 1 [0214.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df878) returned 1 [0214.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698d0) returned 1 [0214.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0214.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698a0) returned 1 [0214.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43c58) returned 1 [0214.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641c8) returned 1 [0214.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064128) returned 1 [0214.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80640b0) returned 1 [0214.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8186590 [0214.097] wcscpy (in: _Dest=0x8186590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" [0214.097] wcscat (in: _Dest=0x8186590, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.f0dbec" [0214.097] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0x9e6fd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3e3c700 [0215.833] FlushFileBuffers (hFile=0x1da4) returned 1 [0215.850] CloseHandle (hObject=0x1da4) returned 1 [0216.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x8404a40 [0216.082] wcscpy (in: _Dest=0x8404a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" [0216.082] wcscat (in: _Dest=0x8404a40, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\F0DBEC-Readme.txt" [0216.082] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0216.082] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.563] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9e6fd5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9e6fd5c*=0x70c, lpOverlapped=0x0) returned 1 [0216.565] CloseHandle (hObject=0x10c4) returned 1 [0216.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404a40) returned 1 [0216.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1ca0) returned 1 Thread: id = 5651 os_tid = 0x1700 [0187.206] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020 [0191.378] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0202.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e48 [0211.075] GetFileSizeEx (in: hFile=0x1e48, lpFileSize=0x9eaff38 | out: lpFileSize=0x9eaff38*=215) returned 1 [0211.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80641f0 [0211.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80641c8 [0211.076] NtQuerySystemTime (in: CurrentTime=0x9eafec0 | out: CurrentTime=0x9eafec0*=132471540787932000) returned 0x0 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x17675038 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0xc1e5b9a [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x66c33e7b [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x3e9425a7 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x7b863e9d [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x3fbefbc4 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x444f4517 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x7208e0d0 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x1142fd40 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x6a8047b8 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x419280f7 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x1bb7e6c8 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x4646f3c1 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x1d5d98ea [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x21b2aeea [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x37c8411e [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x1baa7cc9 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x4c4d6ec1 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x508f98a8 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0xf71812e [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x573a4210 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x2faf4c5 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x75818a2 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x30a68223 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x4cb1183 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x3c14f017 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x4f945122 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x5221b7eb [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x494a3141 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x3a18868d [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0x2cbb0447 [0211.076] RtlRandomEx (in: Seed=0x9eafeb8 | out: Seed=0x9eafeb8) returned 0xd8349ff [0211.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82808d0 [0211.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82844d8 [0211.085] ReadFile (in: hFile=0x1e48, lpBuffer=0x82808d0, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0x9eafeb4, lpOverlapped=0x0 | out: lpBuffer=0x82808d0*, lpNumberOfBytesRead=0x9eafeb4*=0xd7, lpOverlapped=0x0) returned 1 [0211.087] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.087] WriteFile (in: hFile=0x1e48, lpBuffer=0x82844d8*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x9eafeb8, lpOverlapped=0x0 | out: lpBuffer=0x82844d8*, lpNumberOfBytesWritten=0x9eafeb8*=0xd7, lpOverlapped=0x0) returned 1 [0213.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436e0 [0213.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d437d0 [0213.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d437d0) returned 1 [0213.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82844d8) returned 1 [0213.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82808d0) returned 1 [0213.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0213.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eacc8) returned 1 [0213.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e50 [0213.940] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.940] WriteFile (in: hFile=0x1e48, lpBuffer=0x81df760*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9eaff2c, lpOverlapped=0x0 | out: lpBuffer=0x81df760*, lpNumberOfBytesWritten=0x9eaff2c*=0x10c, lpOverlapped=0x0) returned 1 [0214.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df760) returned 1 [0214.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68df0) returned 1 [0214.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d437d0) returned 1 [0214.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e50) returned 1 [0214.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0214.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641f0) returned 1 [0214.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064150) returned 1 [0214.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064178) returned 1 [0214.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8186458 [0214.094] wcscpy (in: _Dest=0x8186458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" [0214.094] wcscat (in: _Dest=0x8186458, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.f0dbec" [0214.094] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0x9eafeb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d660 [0215.829] FlushFileBuffers (hFile=0x1e48) returned 1 [0215.846] CloseHandle (hObject=0x1e48) returned 1 [0216.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d87a0 [0216.081] wcscpy (in: _Dest=0x81d87a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" [0216.081] wcscat (in: _Dest=0x81d87a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\F0DBEC-Readme.txt" [0216.081] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0216.081] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.553] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9eafed4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9eafed4*=0x70c, lpOverlapped=0x0) returned 1 [0216.555] CloseHandle (hObject=0x10c4) returned 1 [0216.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d87a0) returned 1 [0216.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0b48) returned 1 Thread: id = 5652 os_tid = 0x1760 [0187.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh87")) returned 0x20 [0195.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87", dwFileAttributes=0x20) returned 0 [0195.607] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh87"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.607] GetLastError () returned 0x5 [0195.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87", dwFileAttributes=0x20) returned 0 [0195.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eccd28) returned 1 Thread: id = 5653 os_tid = 0x18b8 [0187.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh88")) returned 0x20 [0195.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88", dwFileAttributes=0x20) returned 0 [0195.606] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh88"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.606] GetLastError () returned 0x5 [0195.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88", dwFileAttributes=0x20) returned 0 [0195.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46610) returned 1 Thread: id = 5654 os_tid = 0x1aac [0187.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh89")) returned 0x20 [0194.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89", dwFileAttributes=0x20) returned 0 [0195.058] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh89"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.582] GetLastError () returned 0x5 [0195.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89", dwFileAttributes=0x20) returned 0 [0195.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46678) returned 1 Thread: id = 5655 os_tid = 0x1ad4 [0187.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\sakhalin")) returned 0x20 [0193.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin", dwFileAttributes=0x20) returned 0 [0195.059] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\sakhalin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.589] GetLastError () returned 0x5 [0195.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin", dwFileAttributes=0x20) returned 0 [0195.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d469b8) returned 1 Thread: id = 5656 os_tid = 0x1c18 [0187.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\samarkand")) returned 0x20 [0195.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand", dwFileAttributes=0x20) returned 0 [0195.609] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\samarkand"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.609] GetLastError () returned 0x5 [0195.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand", dwFileAttributes=0x20) returned 0 [0195.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39e08) returned 1 Thread: id = 5657 os_tid = 0x1c1c [0187.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\seoul")) returned 0x20 [0195.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul", dwFileAttributes=0x20) returned 0 [0195.604] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\seoul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.604] GetLastError () returned 0x5 [0195.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul", dwFileAttributes=0x20) returned 0 [0195.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47650) returned 1 Thread: id = 5658 os_tid = 0x1c38 [0187.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\shanghai")) returned 0x20 [0195.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai", dwFileAttributes=0x20) returned 0 [0195.602] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\shanghai"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.602] GetLastError () returned 0x5 [0195.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai", dwFileAttributes=0x20) returned 0 [0195.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47720) returned 1 Thread: id = 5659 os_tid = 0x1c9c [0187.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\singapore")) returned 0x20 [0195.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore", dwFileAttributes=0x20) returned 0 [0195.610] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\singapore"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.611] GetLastError () returned 0x5 [0195.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore", dwFileAttributes=0x20) returned 0 [0195.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a188) returned 1 Thread: id = 5660 os_tid = 0x1d0c [0187.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\taipei")) returned 0x20 [0195.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei", dwFileAttributes=0x20) returned 0 [0195.601] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\taipei"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.601] GetLastError () returned 0x5 [0195.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei", dwFileAttributes=0x20) returned 0 [0195.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d466e0) returned 1 Thread: id = 5661 os_tid = 0x1d24 [0187.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tashkent")) returned 0x20 [0189.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent", dwFileAttributes=0x20) returned 0 [0189.069] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tashkent"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.069] GetLastError () returned 0x5 [0189.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent", dwFileAttributes=0x20) returned 0 [0189.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46338) returned 1 Thread: id = 5662 os_tid = 0x1d30 [0187.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tbilisi")) returned 0x20 [0189.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi", dwFileAttributes=0x20) returned 0 [0189.517] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tbilisi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.517] GetLastError () returned 0x5 [0189.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi", dwFileAttributes=0x20) returned 0 [0189.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d465a8) returned 1 Thread: id = 5663 os_tid = 0x1d3c [0187.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tehran")) returned 0x20 [0192.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran", dwFileAttributes=0x20) returned 0 [0192.661] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tehran"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.059] GetLastError () returned 0x5 [0195.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran", dwFileAttributes=0x20) returned 0 [0195.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46540) returned 1 Thread: id = 5664 os_tid = 0x1d44 [0187.214] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json")) returned 0x2020 [0191.237] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", dwFileAttributes=0x20) returned 1 [0201.157] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1144 [0201.157] GetFileSizeEx (in: hFile=0x1144, lpFileSize=0xa32fdb0 | out: lpFileSize=0xa32fdb0*=167) returned 1 [0201.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0201.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd90a8 [0201.157] NtQuerySystemTime (in: CurrentTime=0xa32fd38 | out: CurrentTime=0xa32fd38*=132471540689964000) returned 0x0 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x6e765df0 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x5e6a516e [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x4454429c [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x49061e08 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x6942c2ea [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x5f50d832 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x1fae07e6 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x355580d4 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x6b5dce32 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x2a697715 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x13c47c2a [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x661ca22d [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x1ff53302 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x3c5bbbb9 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x7a33db80 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x111c763c [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x89a6abf [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x5c779c0b [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x39bddce [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x44d0721b [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x2b9cdbd7 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x5300918e [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x3f2264f4 [0201.158] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x6093ef2e [0201.159] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x51322cc1 [0201.159] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x30cf4e69 [0201.159] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x1f0b6f47 [0201.159] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x55f6ca6d [0201.159] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x3873d62f [0201.159] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x5a4ca92a [0201.159] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x3d2d2d30 [0201.159] RtlRandomEx (in: Seed=0xa32fd30 | out: Seed=0xa32fd30) returned 0x24f4d04f [0201.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14beb8b0 [0201.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bef4b8 [0201.172] ReadFile (in: hFile=0x1144, lpBuffer=0x14beb8b0, nNumberOfBytesToRead=0xa7, lpNumberOfBytesRead=0xa32fd2c, lpOverlapped=0x0 | out: lpBuffer=0x14beb8b0*, lpNumberOfBytesRead=0xa32fd2c*=0xa7, lpOverlapped=0x0) returned 1 [0201.175] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.175] WriteFile (in: hFile=0x1144, lpBuffer=0x14bef4b8*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0xa32fd30, lpOverlapped=0x0 | out: lpBuffer=0x14bef4b8*, lpNumberOfBytesWritten=0xa32fd30*=0xa7, lpOverlapped=0x0) returned 1 [0203.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0203.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0203.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0203.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bef4b8) returned 1 [0203.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14beb8b0) returned 1 [0203.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403038) returned 1 [0203.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5bb0) returned 1 [0203.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e699c0 [0203.905] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.905] WriteFile (in: hFile=0x1144, lpBuffer=0x81dfaa8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa32fda4, lpOverlapped=0x0 | out: lpBuffer=0x81dfaa8*, lpNumberOfBytesWritten=0xa32fda4*=0x10c, lpOverlapped=0x0) returned 1 [0207.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfaa8) returned 1 [0207.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699f0) returned 1 [0207.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0207.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699c0) returned 1 [0207.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0207.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f18) returned 1 [0207.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ba678) returned 1 [0207.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0207.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84052c8 [0207.251] wcscpy (in: _Dest=0x84052c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" [0207.251] wcscat (in: _Dest=0x84052c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.f0dbec" [0207.251] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.f0dbec", NtPathName=0xa32fd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d288 [0208.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d288) returned 1 [0208.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fa390) returned 1 [0208.333] NtQueryInformationFile (in: FileHandle=0x1144, IoStatusBlock=0xa32fd00, FileInformation=0xa32fd08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa32fd00, FileInformation=0xa32fd08) returned 0x0 [0208.333] NtSetInformationFile (FileHandle=0x1144, IoStatusBlock=0xa32fd00, FileInformation=0xa32fd08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84052c8) returned 1 [0208.782] FlushFileBuffers (hFile=0x1144) returned 1 [0208.789] CloseHandle (hObject=0x1144) returned 1 [0208.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3041e10 [0208.900] wcscpy (in: _Dest=0x3041e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" [0208.900] wcscat (in: _Dest=0x3041e10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\F0DBEC-Readme.txt" [0208.900] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\f0dbec-readme.txt")) returned 0xffffffff [0208.900] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1744 [0209.707] WriteFile (in: hFile=0x1744, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa32fd4c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa32fd4c*=0x70c, lpOverlapped=0x0) returned 1 [0209.709] CloseHandle (hObject=0x1744) returned 1 [0209.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041e10) returned 1 [0209.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a29a0) returned 1 Thread: id = 5665 os_tid = 0x1d50 [0187.214] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json")) returned 0x2020 [0191.236] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0201.271] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c54 [0204.333] GetFileSizeEx (in: hFile=0x1c54, lpFileSize=0xb16ff78 | out: lpFileSize=0xb16ff78*=276) returned 1 [0204.333] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.333] ReadFile (in: hFile=0x1c54, lpBuffer=0xb16ff84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb16ff60, lpOverlapped=0x0 | out: lpBuffer=0xb16ff84*, lpNumberOfBytesRead=0xb16ff60*=0x4, lpOverlapped=0x0) returned 1 [0204.335] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42da8 [0204.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42330 [0204.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42830 [0204.336] NtQuerySystemTime (in: CurrentTime=0xb16ff00 | out: CurrentTime=0xb16ff00*=132471540721788000) returned 0x0 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x5dd8ef33 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x38788167 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x1ba0feda [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x7a0902c0 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x25c4e137 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x28840918 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x1ddb170a [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x5f84a825 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x45700883 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x2f669b68 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x401dfc1a [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x1b379b61 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x62dcfeee [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0xdecf298 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x14c415e9 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x6ef88a9f [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x29719af5 [0204.336] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x4d987e92 [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x740287c0 [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x379b7cb3 [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x450afaef [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x58dad6eb [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x16451dc4 [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x5a60610c [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x2266e253 [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x40f22139 [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x17113b26 [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x432d9d91 [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x3b0cf39a [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x1443c4a2 [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x133c2c5d [0204.337] RtlRandomEx (in: Seed=0xb16fef8 | out: Seed=0xb16fef8) returned 0x5600a4c7 [0204.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0204.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad5080 [0204.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad8c88 [0204.351] ReadFile (in: hFile=0x1c54, lpBuffer=0x14ad5080, nNumberOfBytesToRead=0x114, lpNumberOfBytesRead=0xb16fef4, lpOverlapped=0x0 | out: lpBuffer=0x14ad5080*, lpNumberOfBytesRead=0xb16fef4*=0x114, lpOverlapped=0x0) returned 1 [0204.351] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.351] WriteFile (in: hFile=0x1c54, lpBuffer=0x14ad8c88*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xb16fef8, lpOverlapped=0x0 | out: lpBuffer=0x14ad8c88*, lpNumberOfBytesWritten=0xb16fef8*=0x114, lpOverlapped=0x0) returned 1 [0207.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8f40 [0207.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d9008 [0207.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d9008) returned 1 [0207.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad8c88) returned 1 [0207.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad5080) returned 1 [0207.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0ba00) returned 1 [0207.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b6150) returned 1 [0207.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fc48 [0207.891] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.891] WriteFile (in: hFile=0x1c54, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb16ff6c, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0xb16ff6c*=0x10c, lpOverlapped=0x0) returned 1 [0208.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0208.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0208.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d9008) returned 1 [0208.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0208.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8f40) returned 1 [0208.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42330) returned 1 [0208.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0208.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0208.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404a40 [0208.430] wcscpy (in: _Dest=0x8404a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" [0208.430] wcscat (in: _Dest=0x8404a40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.f0dbec" [0208.430] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0xb16fef0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3ceb0 [0208.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ceb0) returned 1 [0208.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81fe218) returned 1 [0208.829] NtQueryInformationFile (in: FileHandle=0x1c54, IoStatusBlock=0xb16fec8, FileInformation=0xb16fed0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb16fec8, FileInformation=0xb16fed0) returned 0x0 [0208.829] NtSetInformationFile (FileHandle=0x1c54, IoStatusBlock=0xb16fec8, FileInformation=0xb16fed0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404a40) returned 1 [0208.911] FlushFileBuffers (hFile=0x1c54) returned 1 [0208.915] CloseHandle (hObject=0x1c54) returned 1 [0208.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x330cd0 [0208.941] wcscpy (in: _Dest=0x330cd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" [0208.941] wcscat (in: _Dest=0x330cd0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\F0DBEC-Readme.txt" [0208.941] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0208.941] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0208.955] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb16ff14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb16ff14*=0x70c, lpOverlapped=0x0) returned 1 [0208.968] CloseHandle (hObject=0x1bc4) returned 1 [0208.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330cd0) returned 1 [0208.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2ac8) returned 1 Thread: id = 5666 os_tid = 0x1d5c [0187.214] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json")) returned 0x2020 [0191.233] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", dwFileAttributes=0x20) returned 1 [0200.439] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1afc [0200.440] GetFileSizeEx (in: hFile=0x1afc, lpFileSize=0xb45fc08 | out: lpFileSize=0xb45fc08*=331) returned 1 [0200.440] SetFilePointerEx (in: hFile=0x1afc, liDistanceToMove=0x147, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.440] ReadFile (in: hFile=0x1afc, lpBuffer=0xb45fc14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb45fbf0, lpOverlapped=0x0 | out: lpBuffer=0xb45fc14*, lpNumberOfBytesRead=0xb45fbf0*=0x4, lpOverlapped=0x0) returned 1 [0200.442] SetFilePointerEx (in: hFile=0x1afc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42858 [0200.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0200.442] NtQuerySystemTime (in: CurrentTime=0xb45fb90 | out: CurrentTime=0xb45fb90*=132471540682944000) returned 0x0 [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x6bddf22e [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x6e752d05 [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x279205c4 [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0xfe90250 [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x29382a68 [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x53cdb896 [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x5b74ca2e [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x6b549a27 [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x4ba3c138 [0200.442] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x63ad2964 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x4013104 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x205c6913 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x4ea0b81 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x7b46356d [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x45e547ff [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x22f0ebd8 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x3f9eb2a1 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x456dc443 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x57131e67 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x78799f75 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x653e5f87 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x4ddd8858 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x77845566 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x96c57e1 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x5a936ffd [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x8cda73f [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x6e6923e4 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x411bfabf [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x4a13d6e2 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x63ff32b7 [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x164f7dfe [0200.443] RtlRandomEx (in: Seed=0xb45fb88 | out: Seed=0xb45fb88) returned 0x3d1171a3 [0200.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ae40a0 [0200.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ae7ca8 [0200.468] ReadFile (in: hFile=0x1afc, lpBuffer=0x14ae40a0, nNumberOfBytesToRead=0x14b, lpNumberOfBytesRead=0xb45fb84, lpOverlapped=0x0 | out: lpBuffer=0x14ae40a0*, lpNumberOfBytesRead=0xb45fb84*=0x14b, lpOverlapped=0x0) returned 1 [0200.468] SetFilePointerEx (in: hFile=0x1afc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.468] WriteFile (in: hFile=0x1afc, lpBuffer=0x14ae7ca8*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0xb45fb88, lpOverlapped=0x0 | out: lpBuffer=0x14ae7ca8*, lpNumberOfBytesWritten=0xb45fb88*=0x14b, lpOverlapped=0x0) returned 1 [0203.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80644c0 [0203.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80644e8 [0203.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80644e8) returned 1 [0203.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae7ca8) returned 1 [0203.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae40a0) returned 1 [0203.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b370) returned 1 [0203.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4e30) returned 1 [0203.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36b30 [0203.652] SetFilePointerEx (in: hFile=0x1afc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.652] WriteFile (in: hFile=0x1afc, lpBuffer=0x83210d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb45fbfc, lpOverlapped=0x0 | out: lpBuffer=0x83210d8*, lpNumberOfBytesWritten=0xb45fbfc*=0x10c, lpOverlapped=0x0) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83210d8) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36b60) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80644e8) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36b30) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80644c0) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42858) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42510) returned 1 [0204.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3e5c638 [0204.142] wcscpy (in: _Dest=0x3e5c638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" [0204.143] wcscat (in: _Dest=0x3e5c638, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.f0dbec" [0204.143] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.f0dbec", NtPathName=0xb45fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f4460 [0204.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4460) returned 1 [0204.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8344970) returned 1 [0204.532] NtQueryInformationFile (in: FileHandle=0x1afc, IoStatusBlock=0xb45fb58, FileInformation=0xb45fb60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb45fb58, FileInformation=0xb45fb60) returned 0x0 [0204.532] NtSetInformationFile (FileHandle=0x1afc, IoStatusBlock=0xb45fb58, FileInformation=0xb45fb60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c638) returned 1 [0207.663] FlushFileBuffers (hFile=0x1afc) returned 1 [0207.677] CloseHandle (hObject=0x1afc) returned 1 [0208.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e2d68 [0208.039] wcscpy (in: _Dest=0x81e2d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" [0208.039] wcscat (in: _Dest=0x81e2d68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\F0DBEC-Readme.txt" [0208.039] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\f0dbec-readme.txt")) returned 0xffffffff [0208.039] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xccc [0208.431] WriteFile (in: hFile=0xccc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb45fba4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb45fba4*=0x70c, lpOverlapped=0x0) returned 1 [0209.365] CloseHandle (hObject=0xccc) returned 1 [0209.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e2d68) returned 1 [0209.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2bf0) returned 1 Thread: id = 5667 os_tid = 0x1d60 [0187.215] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json")) returned 0x2020 [0191.232] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0200.522] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1548 [0200.522] GetFileSizeEx (in: hFile=0x1548, lpFileSize=0xa3bfee0 | out: lpFileSize=0xa3bfee0*=207) returned 1 [0200.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d426a0 [0200.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0200.522] NtQuerySystemTime (in: CurrentTime=0xa3bfe68 | out: CurrentTime=0xa3bfe68*=132471540683880000) returned 0x0 [0200.522] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x58f91e42 [0200.522] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x5b88447c [0200.522] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x7e3d538b [0200.522] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x1b4a5065 [0200.522] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x3a6cd88d [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x5661d1f0 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x77683945 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x900801 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x2ceb1271 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x46e37d43 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x6e1ab0d3 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x49654e33 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x57be4d2e [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x74f50059 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x6696d0f9 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x766b3d36 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x39beec52 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x3416431 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x61a4e14a [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x14061e40 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x288e86f3 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x26c2d9aa [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x24522ae8 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x583f25eb [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x41060946 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x59ecbca0 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x7a491b5e [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x79a524e7 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x6d1f3cd7 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x303d3359 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0xc609421 [0200.523] RtlRandomEx (in: Seed=0xa3bfe60 | out: Seed=0xa3bfe60) returned 0x7364823 [0200.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14afa8d0 [0200.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14afe4d8 [0200.533] ReadFile (in: hFile=0x1548, lpBuffer=0x14afa8d0, nNumberOfBytesToRead=0xcf, lpNumberOfBytesRead=0xa3bfe5c, lpOverlapped=0x0 | out: lpBuffer=0x14afa8d0*, lpNumberOfBytesRead=0xa3bfe5c*=0xcf, lpOverlapped=0x0) returned 1 [0200.535] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.535] WriteFile (in: hFile=0x1548, lpBuffer=0x14afe4d8*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0xa3bfe60, lpOverlapped=0x0 | out: lpBuffer=0x14afe4d8*, lpNumberOfBytesWritten=0xa3bfe60*=0xcf, lpOverlapped=0x0) returned 1 [0203.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064560 [0203.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064588 [0203.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064588) returned 1 [0203.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14afe4d8) returned 1 [0203.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14afa8d0) returned 1 [0203.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bbe0) returned 1 [0203.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5c40) returned 1 [0203.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36bf0 [0203.659] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.660] WriteFile (in: hFile=0x1548, lpBuffer=0x8321308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa3bfed4, lpOverlapped=0x0 | out: lpBuffer=0x8321308*, lpNumberOfBytesWritten=0xa3bfed4*=0x10c, lpOverlapped=0x0) returned 1 [0204.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321308) returned 1 [0204.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36c20) returned 1 [0204.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064588) returned 1 [0204.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36bf0) returned 1 [0204.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064560) returned 1 [0204.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426a0) returned 1 [0204.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0204.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42920) returned 1 [0204.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3e5c9e0 [0204.155] wcscpy (in: _Dest=0x3e5c9e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" [0204.155] wcscat (in: _Dest=0x3e5c9e0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.f0dbec" [0204.155] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0xa3bfe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f4838 [0204.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4838) returned 1 [0204.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8345888) returned 1 [0204.557] NtQueryInformationFile (in: FileHandle=0x1548, IoStatusBlock=0xa3bfe30, FileInformation=0xa3bfe38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa3bfe30, FileInformation=0xa3bfe38) returned 0x0 [0204.557] NtSetInformationFile (FileHandle=0x1548, IoStatusBlock=0xa3bfe30, FileInformation=0xa3bfe38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c9e0) returned 1 [0207.672] FlushFileBuffers (hFile=0x1548) returned 1 [0207.690] CloseHandle (hObject=0x1548) returned 1 [0208.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e30e0 [0208.041] wcscpy (in: _Dest=0x81e30e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" [0208.041] wcscat (in: _Dest=0x81e30e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\F0DBEC-Readme.txt" [0208.041] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0208.041] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x59c [0208.432] WriteFile (in: hFile=0x59c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa3bfe7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa3bfe7c*=0x70c, lpOverlapped=0x0) returned 1 [0209.368] CloseHandle (hObject=0x59c) returned 1 [0209.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e30e0) returned 1 [0209.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2d18) returned 1 Thread: id = 5668 os_tid = 0x1d68 [0187.215] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json")) returned 0x2020 [0191.230] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0201.093] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22c4 [0201.094] GetFileSizeEx (in: hFile=0x22c4, lpFileSize=0xa91ff00 | out: lpFileSize=0xa91ff00*=173) returned 1 [0201.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d426f0 [0201.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42218 [0201.094] NtQuerySystemTime (in: CurrentTime=0xa91fe88 | out: CurrentTime=0xa91fe88*=132471540689340000) returned 0x0 [0201.094] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x192c9db4 [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x4b2c2197 [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x3f1017ff [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x4bc79888 [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x4a1cf659 [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x495a044 [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x19f0954e [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x7ab465c0 [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x1988712a [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x65dfc307 [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0xdbf1fb9 [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x2c1e3c43 [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x5d4da60e [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x436aab1a [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x7471677b [0201.095] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x1dc9b758 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x2819f72e [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x6f53d766 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x65e42a42 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x26187496 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x74c58085 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x3adce918 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x2957f9d4 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x56471fb2 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x625415b2 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x595d039a [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x7a898d00 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0xa6d18bb [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x3d8c8adc [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x2bf74629 [0201.096] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x70433c1c [0201.097] RtlRandomEx (in: Seed=0xa91fe80 | out: Seed=0xa91fe80) returned 0x49f6ad77 [0201.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bd5080 [0201.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bd8c88 [0201.114] ReadFile (in: hFile=0x22c4, lpBuffer=0x14bd5080, nNumberOfBytesToRead=0xad, lpNumberOfBytesRead=0xa91fe7c, lpOverlapped=0x0 | out: lpBuffer=0x14bd5080*, lpNumberOfBytesRead=0xa91fe7c*=0xad, lpOverlapped=0x0) returned 1 [0201.117] SetFilePointerEx (in: hFile=0x22c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.117] WriteFile (in: hFile=0x22c4, lpBuffer=0x14bd8c88*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0xa91fe80, lpOverlapped=0x0 | out: lpBuffer=0x14bd8c88*, lpNumberOfBytesWritten=0xa91fe80*=0xad, lpOverlapped=0x0) returned 1 [0203.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3188 [0203.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef32c8 [0203.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32c8) returned 1 [0203.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bd8c88) returned 1 [0203.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bd5080) returned 1 [0203.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402ed0) returned 1 [0203.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5460) returned 1 [0203.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69660 [0203.858] SetFilePointerEx (in: hFile=0x22c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.858] WriteFile (in: hFile=0x22c4, lpBuffer=0x81e0480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa91fef4, lpOverlapped=0x0 | out: lpBuffer=0x81e0480*, lpNumberOfBytesWritten=0xa91fef4*=0x10c, lpOverlapped=0x0) returned 1 [0207.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0480) returned 1 [0207.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69690) returned 1 [0207.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32c8) returned 1 [0207.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69660) returned 1 [0207.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3188) returned 1 [0207.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426f0) returned 1 [0207.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42420) returned 1 [0207.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0207.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84057a8 [0207.206] wcscpy (in: _Dest=0x84057a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" [0207.206] wcscat (in: _Dest=0x84057a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.f0dbec" [0207.206] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0xa91fe78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d518 [0208.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d518) returned 1 [0208.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336fa8) returned 1 [0208.235] NtQueryInformationFile (in: FileHandle=0x22c4, IoStatusBlock=0xa91fe50, FileInformation=0xa91fe58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa91fe50, FileInformation=0xa91fe58) returned 0x0 [0208.235] NtSetInformationFile (FileHandle=0x22c4, IoStatusBlock=0xa91fe50, FileInformation=0xa91fe58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84057a8) returned 1 [0208.546] FlushFileBuffers (hFile=0x22c4) returned 1 [0208.549] CloseHandle (hObject=0x22c4) returned 1 [0208.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d0458 [0208.890] wcscpy (in: _Dest=0x81d0458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" [0208.890] wcscat (in: _Dest=0x81d0458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\F0DBEC-Readme.txt" [0208.890] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0208.890] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c0 [0209.583] WriteFile (in: hFile=0x13c0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa91fe9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa91fe9c*=0x70c, lpOverlapped=0x0) returned 1 [0209.641] CloseHandle (hObject=0x13c0) returned 1 [0209.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0458) returned 1 [0209.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2e40) returned 1 Thread: id = 5669 os_tid = 0x1e4c [0187.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json")) returned 0x2020 [0191.391] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0215.161] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2be4 [0215.162] GetFileSizeEx (in: hFile=0x2be4, lpFileSize=0x75df838 | out: lpFileSize=0x75df838*=212) returned 1 [0215.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063840 [0215.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062da0 [0215.162] NtQuerySystemTime (in: CurrentTime=0x75df7c0 | out: CurrentTime=0x75df7c0*=132471540828804000) returned 0x0 [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x205fa2cb [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x65e9b2ff [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x22dd43b8 [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x25b25d68 [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x1d0b250a [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x67d700f3 [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x39468d79 [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x6513773f [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x7d378263 [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x2ca4e8de [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x6747b7d1 [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x65beda3f [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x6f454468 [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x646dfdbc [0215.162] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x4c3ee30 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x10a1c52b [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x7e38acaa [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x7809e9b4 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x57cded0 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0xb0d04f8 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x55cdcad1 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x63e949e3 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x59756e6e [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x63abd246 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x274deb59 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x49c1eb64 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x77d141f [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x13b3ee3f [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x2f8cb571 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x6c1d388e [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x54fb98c5 [0215.163] RtlRandomEx (in: Seed=0x75df7b8 | out: Seed=0x75df7b8) returned 0x389fc816 [0215.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148b5080 [0215.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148b8c88 [0215.174] ReadFile (in: hFile=0x2be4, lpBuffer=0x148b5080, nNumberOfBytesToRead=0xd4, lpNumberOfBytesRead=0x75df7b4, lpOverlapped=0x0 | out: lpBuffer=0x148b5080*, lpNumberOfBytesRead=0x75df7b4*=0xd4, lpOverlapped=0x0) returned 1 [0215.176] SetFilePointerEx (in: hFile=0x2be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.176] WriteFile (in: hFile=0x2be4, lpBuffer=0x148b8c88*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x75df7b8, lpOverlapped=0x0 | out: lpBuffer=0x148b8c88*, lpNumberOfBytesWritten=0x75df7b8*=0xd4, lpOverlapped=0x0) returned 1 [0215.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063408 [0215.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a98 [0215.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a98) returned 1 [0215.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b8c88) returned 1 [0215.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b5080) returned 1 [0215.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e08) returned 1 [0215.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4c38) returned 1 [0215.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fb58 [0215.662] SetFilePointerEx (in: hFile=0x2be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.663] WriteFile (in: hFile=0x2be4, lpBuffer=0x8405a48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x75df82c, lpOverlapped=0x0 | out: lpBuffer=0x8405a48*, lpNumberOfBytesWritten=0x75df82c*=0x10c, lpOverlapped=0x0) returned 1 [0215.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405a48) returned 1 [0215.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f528) returned 1 [0215.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a98) returned 1 [0215.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb58) returned 1 [0215.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063408) returned 1 [0215.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063840) returned 1 [0215.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062dc8) returned 1 [0215.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e90) returned 1 [0215.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81877d8 [0215.934] wcscpy (in: _Dest=0x81877d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" [0215.934] wcscat (in: _Dest=0x81877d8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.f0dbec" [0215.934] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.f0dbec", NtPathName=0x75df7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9d00 [0216.177] FlushFileBuffers (hFile=0x2be4) returned 1 [0216.191] CloseHandle (hObject=0x2be4) returned 1 [0216.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d0d98 [0216.286] wcscpy (in: _Dest=0x81d0d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" [0216.286] wcscat (in: _Dest=0x81d0d98, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\F0DBEC-Readme.txt" [0216.286] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\f0dbec-readme.txt")) returned 0xffffffff [0216.286] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1968 [0217.839] WriteFile (in: hFile=0x1968, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x75df7d4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x75df7d4*=0x70c, lpOverlapped=0x0) returned 1 [0221.138] CloseHandle (hObject=0x1968) returned 1 [0221.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0d98) returned 1 [0221.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2f68) returned 1 Thread: id = 5670 os_tid = 0x1e68 [0187.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0191.392] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0215.267] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2298 [0215.268] GetFileSizeEx (in: hFile=0x2298, lpFileSize=0xabcfb00 | out: lpFileSize=0xabcfb00*=227) returned 1 [0215.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063070 [0215.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063048 [0215.268] NtQuerySystemTime (in: CurrentTime=0xabcfa88 | out: CurrentTime=0xabcfa88*=132471540829896000) returned 0x0 [0215.268] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x2dfc366d [0215.268] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x7deb36c9 [0215.268] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x196e00db [0215.268] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0xe787cf8 [0215.268] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x787cc1f3 [0215.268] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x237a8456 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x6468143f [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x5d59c313 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0xb6bd65 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x6fb04860 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x1d94f0ca [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x681d1dbe [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x41dde236 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0xa901e16 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x5ba25fc1 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x2ecd8b0b [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x72cadea4 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x65776e89 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x3ad058b4 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x2df3e859 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0xb8f31a7 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0xab1b733 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x2f391968 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x5894a747 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x694a9665 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x1d9bb2c3 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x526c43b8 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x1cf26af5 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x670f812d [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x5671de1a [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x3f50fa17 [0215.269] RtlRandomEx (in: Seed=0xabcfa80 | out: Seed=0xabcfa80) returned 0x76f47a85 [0215.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8266498 [0215.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x826a0a0 [0215.279] ReadFile (in: hFile=0x2298, lpBuffer=0x8266498, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xabcfa7c, lpOverlapped=0x0 | out: lpBuffer=0x8266498*, lpNumberOfBytesRead=0xabcfa7c*=0xe3, lpOverlapped=0x0) returned 1 [0215.281] SetFilePointerEx (in: hFile=0x2298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.281] WriteFile (in: hFile=0x2298, lpBuffer=0x826a0a0*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xabcfa80, lpOverlapped=0x0 | out: lpBuffer=0x826a0a0*, lpNumberOfBytesWritten=0xabcfa80*=0xe3, lpOverlapped=0x0) returned 1 [0215.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062b70 [0215.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062b98 [0215.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062b98) returned 1 [0215.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x826a0a0) returned 1 [0215.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8266498) returned 1 [0215.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0ba00) returned 1 [0215.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4968) returned 1 [0215.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f288 [0215.676] SetFilePointerEx (in: hFile=0x2298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.676] WriteFile (in: hFile=0x2298, lpBuffer=0x8406ce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabcfaf4, lpOverlapped=0x0 | out: lpBuffer=0x8406ce0*, lpNumberOfBytesWritten=0xabcfaf4*=0x10c, lpOverlapped=0x0) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ce0) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f468) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062b98) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f288) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062b70) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063070) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fd0) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ff8) returned 1 [0215.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8186f50 [0215.954] wcscpy (in: _Dest=0x8186f50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" [0215.954] wcscat (in: _Dest=0x8186f50, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.f0dbec" [0215.955] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.f0dbec", NtPathName=0xabcfa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e18108 [0216.209] FlushFileBuffers (hFile=0x2298) returned 1 [0216.218] CloseHandle (hObject=0x2298) returned 1 [0216.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404428 [0216.300] wcscpy (in: _Dest=0x8404428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" [0216.300] wcscat (in: _Dest=0x8404428, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\F0DBEC-Readme.txt" [0216.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\f0dbec-readme.txt")) returned 0xffffffff [0216.300] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a40 [0217.845] WriteFile (in: hFile=0x1a40, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xabcfa9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xabcfa9c*=0x70c, lpOverlapped=0x0) returned 1 [0221.152] CloseHandle (hObject=0x1a40) returned 1 [0221.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404428) returned 1 [0221.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3090) returned 1 Thread: id = 5671 os_tid = 0x1e6c [0187.217] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json")) returned 0x2020 [0191.393] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", dwFileAttributes=0x20) returned 1 [0214.863] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b58 [0214.864] GetFileSizeEx (in: hFile=0x1b58, lpFileSize=0xadffd68 | out: lpFileSize=0xadffd68*=450) returned 1 [0214.864] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x1be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.864] ReadFile (in: hFile=0x1b58, lpBuffer=0xadffd74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xadffd50, lpOverlapped=0x0 | out: lpBuffer=0xadffd74*, lpNumberOfBytesRead=0xadffd50*=0x4, lpOverlapped=0x0) returned 1 [0214.866] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80637a0 [0214.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063660 [0214.866] NtQuerySystemTime (in: CurrentTime=0xadffcf0 | out: CurrentTime=0xadffcf0*=132471540825840000) returned 0x0 [0214.866] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x7a62c950 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x31575910 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x6f61bde [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x20809780 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x3aba064d [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x15a297e5 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x78334794 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x6220da80 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x19bd81df [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x7b3034c6 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x454e3075 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x6d73f29b [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x7b208d53 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0xb453650 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x228da764 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x4fb6c57 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x77059056 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x74f67426 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x36f558bf [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x662fc076 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x718bb1d4 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x744de553 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x54f253c5 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0xce6e44b [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x4f682ffe [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x50a47769 [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x2601697e [0214.867] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x255d91c7 [0214.868] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x4dff5634 [0214.868] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x4a3e08fc [0214.868] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x17c3f27c [0214.868] RtlRandomEx (in: Seed=0xadffce8 | out: Seed=0xadffce8) returned 0x406f477d [0214.878] ReadFile (in: hFile=0x1b58, lpBuffer=0x82b54b8, nNumberOfBytesToRead=0x1c2, lpNumberOfBytesRead=0xadffce4, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesRead=0xadffce4*=0x1c2, lpOverlapped=0x0) returned 1 [0214.879] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.879] WriteFile (in: hFile=0x1b58, lpBuffer=0x82b90c0*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0xadffce8, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesWritten=0xadffce8*=0x1c2, lpOverlapped=0x0) returned 1 [0219.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c78 [0219.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063bd8 [0219.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bd8) returned 1 [0219.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0219.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0219.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68150) returned 1 [0219.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4cc8) returned 1 [0219.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68d90 [0219.826] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.826] WriteFile (in: hFile=0x1b58, lpBuffer=0x84077d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xadffd5c, lpOverlapped=0x0 | out: lpBuffer=0x84077d0*, lpNumberOfBytesWritten=0xadffd5c*=0x10c, lpOverlapped=0x0) returned 1 [0220.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84077d0) returned 1 [0220.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69000) returned 1 [0220.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bd8) returned 1 [0220.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d90) returned 1 [0220.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c78) returned 1 [0220.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80637a0) returned 1 [0220.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80636d8) returned 1 [0220.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80637c8) returned 1 [0220.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84057a8 [0220.336] wcscpy (in: _Dest=0x84057a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" [0220.337] wcscat (in: _Dest=0x84057a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.f0dbec" [0220.337] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.f0dbec", NtPathName=0xadffce0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef92c0 [0220.604] FlushFileBuffers (hFile=0x1b58) returned 1 [0220.611] CloseHandle (hObject=0x1b58) returned 1 [0220.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ec550 [0220.735] wcscpy (in: _Dest=0x81ec550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" [0220.735] wcscat (in: _Dest=0x81ec550, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\F0DBEC-Readme.txt" [0220.735] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\f0dbec-readme.txt")) returned 0xffffffff [0220.735] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.027] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xadffd04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xadffd04*=0x70c, lpOverlapped=0x0) returned 1 [0221.028] CloseHandle (hObject=0x1b48) returned 1 [0221.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec550) returned 1 [0221.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a31b8) returned 1 Thread: id = 5672 os_tid = 0x2024 [0187.217] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json")) returned 0x2020 [0191.394] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0214.879] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bd0 [0214.880] GetFileSizeEx (in: hFile=0x1bd0, lpFileSize=0xbdef968 | out: lpFileSize=0xbdef968*=217) returned 1 [0214.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063660 [0214.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b28 [0214.880] NtQuerySystemTime (in: CurrentTime=0xbdef8f0 | out: CurrentTime=0xbdef8f0*=132471540825996000) returned 0x0 [0214.880] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x49328f1e [0214.880] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x40bf011 [0214.880] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x27366f5d [0214.880] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x3cbcc6bf [0214.880] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x3e18a8de [0214.880] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x51a66920 [0214.880] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x78ca7da8 [0214.880] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x6d9755c9 [0214.880] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x68ecf07f [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x4a6c8436 [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x34cd156b [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0xfc4baac [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x5f3f56f2 [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x100b0f44 [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x4863f88f [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x3d1a81c8 [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0xc2a0f35 [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x6a45badc [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x68973eff [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x18e8f9c4 [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0xaa328fd [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x30c47303 [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x4098372a [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x3f42678a [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x718dc3d [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x1f1bd98a [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x653b432e [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x569d114a [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x7820894b [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x3b47dee3 [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x35697eab [0214.881] RtlRandomEx (in: Seed=0xbdef8e8 | out: Seed=0xbdef8e8) returned 0x61d54679 [0214.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82bccc8 [0214.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0214.892] ReadFile (in: hFile=0x1bd0, lpBuffer=0x82bccc8, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0xbdef8e4, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesRead=0xbdef8e4*=0xd9, lpOverlapped=0x0) returned 1 [0214.894] SetFilePointerEx (in: hFile=0x1bd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.894] WriteFile (in: hFile=0x1bd0, lpBuffer=0x82c08d0*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0xbdef8e8, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesWritten=0xbdef8e8*=0xd9, lpOverlapped=0x0) returned 1 [0219.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ae8 [0219.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062198 [0219.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062198) returned 1 [0219.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0219.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0219.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68240) returned 1 [0219.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4c80) returned 1 [0219.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e690f0 [0219.835] SetFilePointerEx (in: hFile=0x1bd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.835] WriteFile (in: hFile=0x1bd0, lpBuffer=0x8406768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbdef95c, lpOverlapped=0x0 | out: lpBuffer=0x8406768*, lpNumberOfBytesWritten=0xbdef95c*=0x10c, lpOverlapped=0x0) returned 1 [0220.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406768) returned 1 [0220.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0220.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062198) returned 1 [0220.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690f0) returned 1 [0220.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ae8) returned 1 [0220.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063660) returned 1 [0220.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063958) returned 1 [0220.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063930) returned 1 [0220.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405670 [0220.362] wcscpy (in: _Dest=0x8405670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" [0220.362] wcscat (in: _Dest=0x8405670, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.f0dbec" [0220.362] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0xbdef8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9e48 [0220.596] FlushFileBuffers (hFile=0x1bd0) returned 1 [0220.608] CloseHandle (hObject=0x1bd0) returned 1 [0220.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ec9f0 [0220.734] wcscpy (in: _Dest=0x81ec9f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" [0220.734] wcscat (in: _Dest=0x81ec9f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\F0DBEC-Readme.txt" [0220.734] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0220.734] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0220.996] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbdef904, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbdef904*=0x70c, lpOverlapped=0x0) returned 1 [0220.998] CloseHandle (hObject=0x1b48) returned 1 [0221.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec9f0) returned 1 [0221.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a32e0) returned 1 Thread: id = 5673 os_tid = 0x2090 [0187.218] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json")) returned 0x2020 [0191.395] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", dwFileAttributes=0x20) returned 1 [0214.895] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf0 [0214.895] GetFileSizeEx (in: hFile=0x1bf0, lpFileSize=0xbc7f7a0 | out: lpFileSize=0xbc7f7a0*=327) returned 1 [0214.896] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x143, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.896] ReadFile (in: hFile=0x1bf0, lpBuffer=0xbc7f7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbc7f788, lpOverlapped=0x0 | out: lpBuffer=0xbc7f7ac*, lpNumberOfBytesRead=0xbc7f788*=0x4, lpOverlapped=0x0) returned 1 [0214.898] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b28 [0214.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80648d0 [0214.898] NtQuerySystemTime (in: CurrentTime=0xbc7f728 | out: CurrentTime=0xbc7f728*=132471540826152000) returned 0x0 [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x6816b4bf [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x7a31f21b [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0xdb6586d [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x2fd472d8 [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x1df14273 [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x4e9f1ace [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0xad3dc55 [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x5ff7f27e [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0xc64f74b [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x1c076d7f [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x3422dfab [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x41f2a446 [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x1f010b34 [0214.898] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x130c4359 [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x53a3559d [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x19e3363e [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0xd54b807 [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0xf83342d [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x690c979 [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x68273bf [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x26c174a [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x4b41400f [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x15df17b [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x5df8a1aa [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x3e9517b6 [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x46abd507 [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x6616dd78 [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x44130f4e [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x6ff85c [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x1b49753f [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x5285dfdd [0214.899] RtlRandomEx (in: Seed=0xbc7f720 | out: Seed=0xbc7f720) returned 0x40a5d5c7 [0214.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c44d8 [0214.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8348930 [0214.910] ReadFile (in: hFile=0x1bf0, lpBuffer=0x82c44d8, nNumberOfBytesToRead=0x147, lpNumberOfBytesRead=0xbc7f71c, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesRead=0xbc7f71c*=0x147, lpOverlapped=0x0) returned 1 [0214.911] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.911] WriteFile (in: hFile=0x1bf0, lpBuffer=0x8348930*, nNumberOfBytesToWrite=0x147, lpNumberOfBytesWritten=0xbc7f720, lpOverlapped=0x0 | out: lpBuffer=0x8348930*, lpNumberOfBytesWritten=0xbc7f720*=0x147, lpOverlapped=0x0) returned 1 [0219.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063368 [0219.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062ad0 [0219.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ad0) returned 1 [0219.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348930) returned 1 [0219.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0219.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e686f0) returned 1 [0219.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d45c0) returned 1 [0219.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69030 [0219.830] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.830] WriteFile (in: hFile=0x1bf0, lpBuffer=0x84060d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbc7f794, lpOverlapped=0x0 | out: lpBuffer=0x84060d8*, lpNumberOfBytesWritten=0xbc7f794*=0x10c, lpOverlapped=0x0) returned 1 [0220.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 [0220.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69060) returned 1 [0220.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ad0) returned 1 [0220.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69030) returned 1 [0220.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063368) returned 1 [0220.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b28) returned 1 [0220.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064948) returned 1 [0220.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064920) returned 1 [0220.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84041b8 [0220.358] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" [0220.358] wcscat (in: _Dest=0x84041b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.f0dbec" [0220.358] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.f0dbec", NtPathName=0xbc7f718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa9d0 [0220.610] FlushFileBuffers (hFile=0x1bf0) returned 1 [0220.618] CloseHandle (hObject=0x1bf0) returned 1 [0220.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81eb648 [0220.738] wcscpy (in: _Dest=0x81eb648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" [0220.738] wcscat (in: _Dest=0x81eb648, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\F0DBEC-Readme.txt" [0220.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\f0dbec-readme.txt")) returned 0xffffffff [0220.739] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.033] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbc7f73c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbc7f73c*=0x70c, lpOverlapped=0x0) returned 1 [0221.034] CloseHandle (hObject=0x1b48) returned 1 [0221.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb648) returned 1 [0221.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3408) returned 1 Thread: id = 5674 os_tid = 0x2094 [0187.218] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json")) returned 0x2020 [0191.395] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", dwFileAttributes=0x20) returned 1 [0214.911] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c24 [0214.912] GetFileSizeEx (in: hFile=0x1c24, lpFileSize=0x886fdc8 | out: lpFileSize=0x886fdc8*=607) returned 1 [0214.912] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x25b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.912] ReadFile (in: hFile=0x1c24, lpBuffer=0x886fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x886fdb0, lpOverlapped=0x0 | out: lpBuffer=0x886fdd4*, lpNumberOfBytesRead=0x886fdb0*=0x4, lpOverlapped=0x0) returned 1 [0214.932] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80648d0 [0214.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a60 [0214.932] NtQuerySystemTime (in: CurrentTime=0x886fd50 | out: CurrentTime=0x886fd50*=132471540826464000) returned 0x0 [0214.932] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x33889775 [0214.932] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x4385c408 [0214.932] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x7b76c141 [0214.932] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x284e67b5 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x45d51d77 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x4b3fb1f2 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x20f86ca6 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x30acde12 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x686d6c00 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x41a627b [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x6aac9fdc [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x34b206f2 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x1ec9e67f [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x6fd0ac89 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x650953a9 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x5ac7ee12 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x471a5020 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x78def8b9 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x265d7a [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x57a75c2c [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x3325c74a [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x6aa03045 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x27a577a [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x5f38ecf9 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x3ae5a3ab [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x6eefadcd [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x7a32cf51 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x563b849f [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x536ffe04 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x250aee08 [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x198454ef [0214.933] RtlRandomEx (in: Seed=0x886fd48 | out: Seed=0x886fd48) returned 0x6e8f5ec2 [0214.944] ReadFile (in: hFile=0x1c24, lpBuffer=0x834c538, nNumberOfBytesToRead=0x25f, lpNumberOfBytesRead=0x886fd44, lpOverlapped=0x0 | out: lpBuffer=0x834c538*, lpNumberOfBytesRead=0x886fd44*=0x25f, lpOverlapped=0x0) returned 1 [0214.944] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.944] WriteFile (in: hFile=0x1c24, lpBuffer=0x8350140*, nNumberOfBytesToWrite=0x25f, lpNumberOfBytesWritten=0x886fd48, lpOverlapped=0x0 | out: lpBuffer=0x8350140*, lpNumberOfBytesWritten=0x886fd48*=0x25f, lpOverlapped=0x0) returned 1 [0219.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c50 [0219.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063bb0 [0219.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bb0) returned 1 [0219.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8350140) returned 1 [0219.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x834c538) returned 1 [0219.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 [0219.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d49f8) returned 1 [0219.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69090 [0219.833] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.833] WriteFile (in: hFile=0x1c24, lpBuffer=0x84061f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x886fdbc, lpOverlapped=0x0 | out: lpBuffer=0x84061f0*, lpNumberOfBytesWritten=0x886fdbc*=0x10c, lpOverlapped=0x0) returned 1 [0220.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84061f0) returned 1 [0220.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690c0) returned 1 [0220.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bb0) returned 1 [0220.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69090) returned 1 [0220.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c50) returned 1 [0220.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648d0) returned 1 [0220.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063980) returned 1 [0220.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648f8) returned 1 [0220.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f44e8 [0220.526] wcscpy (in: _Dest=0x81f44e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" [0220.526] wcscat (in: _Dest=0x81f44e8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.f0dbec" [0220.526] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.f0dbec", NtPathName=0x886fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9178 [0220.826] FlushFileBuffers (hFile=0x1c24) returned 1 [0220.836] CloseHandle (hObject=0x1c24) returned 1 [0220.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401398 [0220.885] wcscpy (in: _Dest=0x8401398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" [0220.885] wcscat (in: _Dest=0x8401398, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\F0DBEC-Readme.txt" [0220.885] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\f0dbec-readme.txt")) returned 0xffffffff [0220.885] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x624 [0220.902] WriteFile (in: hFile=0x624, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x886fd64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x886fd64*=0x70c, lpOverlapped=0x0) returned 1 [0220.916] CloseHandle (hObject=0x624) returned 1 [0220.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401398) returned 1 [0220.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3530) returned 1 Thread: id = 5675 os_tid = 0x2098 [0187.218] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json")) returned 0x2020 [0191.303] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", dwFileAttributes=0x20) returned 1 [0214.817] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19c4 [0214.818] GetFileSizeEx (in: hFile=0x19c4, lpFileSize=0xbadff10 | out: lpFileSize=0xbadff10*=357) returned 1 [0214.818] SetFilePointerEx (in: hFile=0x19c4, liDistanceToMove=0x161, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.818] ReadFile (in: hFile=0x19c4, lpBuffer=0xbadff1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbadfef8, lpOverlapped=0x0 | out: lpBuffer=0xbadff1c*, lpNumberOfBytesRead=0xbadfef8*=0x4, lpOverlapped=0x0) returned 1 [0214.820] SetFilePointerEx (in: hFile=0x19c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064560 [0214.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063728 [0214.820] NtQuerySystemTime (in: CurrentTime=0xbadfe98 | out: CurrentTime=0xbadfe98*=132471540825372000) returned 0x0 [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x18eb14ec [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x49947e36 [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x743e0973 [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x538f1fed [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x67b83d56 [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x6ff195c2 [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x6942a1ff [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x20e4f613 [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x3ca0a1ca [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x2f814fe7 [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x3a2b3383 [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x57b60fdc [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x5532e23f [0214.820] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x6da4a3b6 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x38df295 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x8e15dd5 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x5e7162c5 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0xf10f965 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x1a1948a8 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x6b705a04 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x9867eeb [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x19bce097 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x5ec759fa [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x7ab1ef0b [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x41246cc3 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x1fefc10e [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x800cd00 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x20e69c7c [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0xe845643 [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x7f809d7f [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x4090f2da [0214.821] RtlRandomEx (in: Seed=0xbadfe90 | out: Seed=0xbadfe90) returned 0x65df8df4 [0214.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829ec88 [0214.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0214.832] ReadFile (in: hFile=0x19c4, lpBuffer=0x829ec88, nNumberOfBytesToRead=0x165, lpNumberOfBytesRead=0xbadfe8c, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesRead=0xbadfe8c*=0x165, lpOverlapped=0x0) returned 1 [0214.832] SetFilePointerEx (in: hFile=0x19c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.832] WriteFile (in: hFile=0x19c4, lpBuffer=0x82a2890*, nNumberOfBytesToWrite=0x165, lpNumberOfBytesWritten=0xbadfe90, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesWritten=0xbadfe90*=0x165, lpOverlapped=0x0) returned 1 [0219.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d40 [0219.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ca0 [0219.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ca0) returned 1 [0219.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0219.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0219.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 [0219.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5190) returned 1 [0219.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68d60 [0219.818] SetFilePointerEx (in: hFile=0x19c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.818] WriteFile (in: hFile=0x19c4, lpBuffer=0x84075a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbadff04, lpOverlapped=0x0 | out: lpBuffer=0x84075a0*, lpNumberOfBytesWritten=0xbadff04*=0x10c, lpOverlapped=0x0) returned 1 [0220.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84075a0) returned 1 [0220.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e80) returned 1 [0220.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ca0) returned 1 [0220.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d60) returned 1 [0220.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d40) returned 1 [0220.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064560) returned 1 [0220.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063700) returned 1 [0220.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063750) returned 1 [0220.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404698 [0220.331] wcscpy (in: _Dest=0x8404698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" [0220.331] wcscat (in: _Dest=0x8404698, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.f0dbec" [0220.331] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.f0dbec", NtPathName=0xbadfe88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9408 [0220.593] FlushFileBuffers (hFile=0x19c4) returned 1 [0220.600] CloseHandle (hObject=0x19c4) returned 1 [0220.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ed208 [0220.730] wcscpy (in: _Dest=0x81ed208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" [0220.730] wcscat (in: _Dest=0x81ed208, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\F0DBEC-Readme.txt" [0220.731] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\f0dbec-readme.txt")) returned 0xffffffff [0220.731] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0220.982] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbadfeac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbadfeac*=0x70c, lpOverlapped=0x0) returned 1 [0220.984] CloseHandle (hObject=0x1bf8) returned 1 [0220.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed208) returned 1 [0220.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3658) returned 1 Thread: id = 5676 os_tid = 0x209c [0187.219] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json")) returned 0x2020 [0191.315] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0214.832] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x25a8 [0214.833] GetFileSizeEx (in: hFile=0x25a8, lpFileSize=0xb2ff820 | out: lpFileSize=0xb2ff820*=187) returned 1 [0214.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063728 [0214.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063570 [0214.833] NtQuerySystemTime (in: CurrentTime=0xb2ff7a8 | out: CurrentTime=0xb2ff7a8*=132471540825528000) returned 0x0 [0214.833] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x12129b8c [0214.833] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x6506ce71 [0214.833] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x5a893171 [0214.833] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x1b031421 [0214.833] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x124165f [0214.833] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x1a865a3e [0214.833] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x5352eef6 [0214.833] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x5499eb71 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x38dfb492 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x7a52ae2e [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x102725ac [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x4f3f0130 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x5ab85f83 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x650dd812 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x728cbcb8 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x338eab67 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x69979058 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x2dc18e9f [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x5648048d [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x70ce76a7 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x5a1f021f [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x445eb3ed [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x2dcb02fe [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x23fd26ad [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x7dbbc9d [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x7219ab6c [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x225a5447 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x15a612c1 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0xa760371 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x6d260f27 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x120a3ab7 [0214.834] RtlRandomEx (in: Seed=0xb2ff7a0 | out: Seed=0xb2ff7a0) returned 0x2b20a27 [0214.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a6498 [0214.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82aa0a0 [0214.845] ReadFile (in: hFile=0x25a8, lpBuffer=0x82a6498, nNumberOfBytesToRead=0xbb, lpNumberOfBytesRead=0xb2ff79c, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesRead=0xb2ff79c*=0xbb, lpOverlapped=0x0) returned 1 [0214.847] SetFilePointerEx (in: hFile=0x25a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.847] WriteFile (in: hFile=0x25a8, lpBuffer=0x82aa0a0*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0xb2ff7a0, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesWritten=0xb2ff7a0*=0xbb, lpOverlapped=0x0) returned 1 [0219.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063cf0 [0219.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062af8 [0219.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062af8) returned 1 [0219.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0219.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0219.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0219.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4de8) returned 1 [0219.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68eb0 [0219.821] SetFilePointerEx (in: hFile=0x25a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.821] WriteFile (in: hFile=0x25a8, lpBuffer=0x8405a48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb2ff814, lpOverlapped=0x0 | out: lpBuffer=0x8405a48*, lpNumberOfBytesWritten=0xb2ff814*=0x10c, lpOverlapped=0x0) returned 1 [0220.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405a48) returned 1 [0220.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f70) returned 1 [0220.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062af8) returned 1 [0220.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68eb0) returned 1 [0220.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063cf0) returned 1 [0220.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063728) returned 1 [0220.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80635e8) returned 1 [0220.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063688) returned 1 [0220.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403e10 [0220.327] wcscpy (in: _Dest=0x8403e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" [0220.328] wcscat (in: _Dest=0x8403e10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.f0dbec" [0220.328] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0xb2ff798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9030 [0220.582] FlushFileBuffers (hFile=0x25a8) returned 1 [0220.597] CloseHandle (hObject=0x25a8) returned 1 [0220.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ecc40 [0220.728] wcscpy (in: _Dest=0x81ecc40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" [0220.728] wcscat (in: _Dest=0x81ecc40, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\F0DBEC-Readme.txt" [0220.728] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0220.728] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0220.976] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb2ff7bc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb2ff7bc*=0x70c, lpOverlapped=0x0) returned 1 [0220.978] CloseHandle (hObject=0x1bf8) returned 1 [0220.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecc40) returned 1 [0220.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3780) returned 1 Thread: id = 5677 os_tid = 0x20a0 [0187.219] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json")) returned 0x2020 [0191.328] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", dwFileAttributes=0x20) returned 1 [0215.046] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2d14 [0215.047] GetFileSizeEx (in: hFile=0x2d14, lpFileSize=0xb9efd08 | out: lpFileSize=0xb9efd08*=665) returned 1 [0215.047] SetFilePointerEx (in: hFile=0x2d14, liDistanceToMove=0x295, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.047] ReadFile (in: hFile=0x2d14, lpBuffer=0xb9efd14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb9efcf0, lpOverlapped=0x0 | out: lpBuffer=0xb9efd14*, lpNumberOfBytesRead=0xb9efcf0*=0x4, lpOverlapped=0x0) returned 1 [0215.050] SetFilePointerEx (in: hFile=0x2d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b50 [0215.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063250 [0215.050] NtQuerySystemTime (in: CurrentTime=0xb9efc90 | out: CurrentTime=0xb9efc90*=132471540827712000) returned 0x0 [0215.050] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x583b46f3 [0215.050] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x4d7f3e17 [0215.050] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x37736087 [0215.050] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x660b27cf [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x22d6ba6a [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x35d64fa3 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x2f0a88c2 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x2a7cb504 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x5be13be7 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x6a88d4de [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x66481329 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x30c38383 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x3eb83f46 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x5158e6ad [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x204c2386 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0xa29c979 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x21b33d68 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x70ed57e9 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x735bc6c4 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x24a14472 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x36e7188f [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x5078481b [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x45883f2c [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x528e2c47 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x676d426a [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x3d34054b [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x4607436e [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x75ac4ac3 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x5b9751f [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x4eeea6d3 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x2860cf47 [0215.051] RtlRandomEx (in: Seed=0xb9efc88 | out: Seed=0xb9efc88) returned 0x6e0ea3f1 [0215.062] ReadFile (in: hFile=0x2d14, lpBuffer=0x8380da8, nNumberOfBytesToRead=0x299, lpNumberOfBytesRead=0xb9efc84, lpOverlapped=0x0 | out: lpBuffer=0x8380da8*, lpNumberOfBytesRead=0xb9efc84*=0x299, lpOverlapped=0x0) returned 1 [0215.062] SetFilePointerEx (in: hFile=0x2d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.062] WriteFile (in: hFile=0x2d14, lpBuffer=0x83849b0*, nNumberOfBytesToWrite=0x299, lpNumberOfBytesWritten=0xb9efc88, lpOverlapped=0x0 | out: lpBuffer=0x83849b0*, lpNumberOfBytesWritten=0xb9efc88*=0x299, lpOverlapped=0x0) returned 1 [0220.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0220.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0220.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0220.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83849b0) returned 1 [0220.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8380da8) returned 1 [0220.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ca0) returned 1 [0220.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4bf0) returned 1 [0220.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fd0 [0220.084] SetFilePointerEx (in: hFile=0x2d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.084] WriteFile (in: hFile=0x2d14, lpBuffer=0x81d5648*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb9efcfc, lpOverlapped=0x0 | out: lpBuffer=0x81d5648*, lpNumberOfBytesWritten=0xb9efcfc*=0x10c, lpOverlapped=0x0) returned 1 [0220.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5648) returned 1 [0220.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0220.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0220.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0220.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0220.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b50) returned 1 [0220.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063160) returned 1 [0220.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620a8) returned 1 [0220.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x2d2100 [0220.435] wcscpy (in: _Dest=0x2d2100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" [0220.435] wcscat (in: _Dest=0x2d2100, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.f0dbec" [0220.436] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.f0dbec", NtPathName=0xb9efc80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9f90 [0220.658] FlushFileBuffers (hFile=0x2d14) returned 1 [0220.664] CloseHandle (hObject=0x2d14) returned 1 [0220.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8400ef8 [0220.811] wcscpy (in: _Dest=0x8400ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" [0220.811] wcscat (in: _Dest=0x8400ef8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\F0DBEC-Readme.txt" [0220.811] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\f0dbec-readme.txt")) returned 0xffffffff [0220.811] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.077] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb9efca4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb9efca4*=0x70c, lpOverlapped=0x0) returned 1 [0221.078] CloseHandle (hObject=0x1b48) returned 1 [0221.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400ef8) returned 1 [0221.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a38a8) returned 1 Thread: id = 5678 os_tid = 0x20a4 [0187.220] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json")) returned 0x2020 [0191.340] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0215.049] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x180c [0215.063] GetFileSizeEx (in: hFile=0x180c, lpFileSize=0xb2bfd70 | out: lpFileSize=0xb2bfd70*=198) returned 1 [0215.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063250 [0215.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d28 [0215.063] NtQuerySystemTime (in: CurrentTime=0xb2bfcf8 | out: CurrentTime=0xb2bfcf8*=132471540827868000) returned 0x0 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x5bd291d5 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x424c9b78 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x75d6b782 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x5787e6e3 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x36ee6646 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x1e8699af [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x552d6e01 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x437df8c7 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x67c1033f [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x5e9bd098 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x3838ee51 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x57c59c76 [0215.063] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x1ddca552 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x170b8ccf [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x351a08f [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x35300e8 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x47e49769 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x42f878c2 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x7abe7465 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x75ceec66 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0xba28c92 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x2e921d7e [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x2da72142 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x79122b14 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x7a410a84 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x6b6ee082 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x59070b3a [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x3150cec9 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x4429ef73 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x39b48eba [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x5ce30139 [0215.064] RtlRandomEx (in: Seed=0xb2bfcf0 | out: Seed=0xb2bfcf0) returned 0x884a7f6 [0215.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80de458 [0215.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80e2060 [0215.075] ReadFile (in: hFile=0x180c, lpBuffer=0x80de458, nNumberOfBytesToRead=0xc6, lpNumberOfBytesRead=0xb2bfcec, lpOverlapped=0x0 | out: lpBuffer=0x80de458*, lpNumberOfBytesRead=0xb2bfcec*=0xc6, lpOverlapped=0x0) returned 1 [0215.078] SetFilePointerEx (in: hFile=0x180c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.078] WriteFile (in: hFile=0x180c, lpBuffer=0x80e2060*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0xb2bfcf0, lpOverlapped=0x0 | out: lpBuffer=0x80e2060*, lpNumberOfBytesWritten=0xb2bfcf0*=0xc6, lpOverlapped=0x0) returned 1 [0219.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80632c8 [0219.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80631d8 [0219.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631d8) returned 1 [0219.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80e2060) returned 1 [0219.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80de458) returned 1 [0219.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67f70) returned 1 [0219.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4848) returned 1 [0219.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e693c0 [0219.855] SetFilePointerEx (in: hFile=0x180c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.855] WriteFile (in: hFile=0x180c, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb2bfd64, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xb2bfd64*=0x10c, lpOverlapped=0x0) returned 1 [0220.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0220.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693f0) returned 1 [0220.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631d8) returned 1 [0220.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693c0) returned 1 [0220.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632c8) returned 1 [0220.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063250) returned 1 [0220.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064bc8) returned 1 [0220.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063890) returned 1 [0220.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef7fd8 [0220.398] wcscpy (in: _Dest=0x3ef7fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" [0220.398] wcscat (in: _Dest=0x3ef7fd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.f0dbec" [0220.398] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0xb2bfce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9d00 [0220.613] FlushFileBuffers (hFile=0x180c) returned 1 [0220.625] CloseHandle (hObject=0x180c) returned 1 [0220.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x84022a0 [0220.743] wcscpy (in: _Dest=0x84022a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" [0220.743] wcscat (in: _Dest=0x84022a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\F0DBEC-Readme.txt" [0220.743] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0220.743] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.043] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb2bfd0c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb2bfd0c*=0x70c, lpOverlapped=0x0) returned 1 [0221.045] CloseHandle (hObject=0x1b48) returned 1 [0221.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84022a0) returned 1 [0221.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a39d0) returned 1 Thread: id = 5679 os_tid = 0x20a8 [0187.220] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json")) returned 0x2020 [0191.353] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0215.078] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2ba8 [0215.079] GetFileSizeEx (in: hFile=0x2ba8, lpFileSize=0xc52fb58 | out: lpFileSize=0xc52fb58*=200) returned 1 [0215.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d28 [0215.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80638b8 [0215.079] NtQuerySystemTime (in: CurrentTime=0xc52fae0 | out: CurrentTime=0xc52fae0*=132471540828024000) returned 0x0 [0215.079] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x2785224 [0215.079] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x14573802 [0215.079] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x6104efea [0215.079] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x53080c8c [0215.079] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x7ec7710c [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x2d213064 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x55bab947 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x29316cc0 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x4fde9798 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x578aedd2 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x7cfa6d45 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x18e62d85 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x7998cdbf [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x6af0046b [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x590b5506 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x34f050de [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x279530 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0xa15135d [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x18cd95cd [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x733844e2 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x1240c087 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x669515ff [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x11de0f9d [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x638c05eb [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x53175668 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x65646aeb [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x6b6ee082 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x66ac3076 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x53aa98b5 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x355c4e69 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x2ce43a6 [0215.080] RtlRandomEx (in: Seed=0xc52fad8 | out: Seed=0xc52fad8) returned 0x437df8c7 [0215.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80e5c68 [0215.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80e9870 [0215.092] ReadFile (in: hFile=0x2ba8, lpBuffer=0x80e5c68, nNumberOfBytesToRead=0xc8, lpNumberOfBytesRead=0xc52fad4, lpOverlapped=0x0 | out: lpBuffer=0x80e5c68*, lpNumberOfBytesRead=0xc52fad4*=0xc8, lpOverlapped=0x0) returned 1 [0215.094] SetFilePointerEx (in: hFile=0x2ba8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.094] WriteFile (in: hFile=0x2ba8, lpBuffer=0x80e9870*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0xc52fad8, lpOverlapped=0x0 | out: lpBuffer=0x80e9870*, lpNumberOfBytesWritten=0xc52fad8*=0xc8, lpOverlapped=0x0) returned 1 [0219.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063200 [0219.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80639f8 [0219.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639f8) returned 1 [0219.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80e9870) returned 1 [0219.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80e5c68) returned 1 [0219.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d18) returned 1 [0219.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4d10) returned 1 [0219.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e691e0 [0219.857] SetFilePointerEx (in: hFile=0x2ba8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.857] WriteFile (in: hFile=0x2ba8, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc52fb4c, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0xc52fb4c*=0x10c, lpOverlapped=0x0) returned 1 [0220.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0220.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69210) returned 1 [0220.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639f8) returned 1 [0220.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691e0) returned 1 [0220.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063200) returned 1 [0220.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d28) returned 1 [0220.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064830) returned 1 [0220.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648a8) returned 1 [0220.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8110 [0220.396] wcscpy (in: _Dest=0x3ef8110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" [0220.396] wcscat (in: _Dest=0x3ef8110, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.f0dbec" [0220.396] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.f0dbec", NtPathName=0xc52fad0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa888 [0220.607] FlushFileBuffers (hFile=0x2ba8) returned 1 [0220.618] CloseHandle (hObject=0x2ba8) returned 1 [0220.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x84023c8 [0220.740] wcscpy (in: _Dest=0x84023c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" [0220.740] wcscat (in: _Dest=0x84023c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\F0DBEC-Readme.txt" [0220.740] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\f0dbec-readme.txt")) returned 0xffffffff [0220.740] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.036] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc52faf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc52faf4*=0x70c, lpOverlapped=0x0) returned 1 [0221.038] CloseHandle (hObject=0x1b48) returned 1 [0221.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84023c8) returned 1 [0221.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3af8) returned 1 Thread: id = 5680 os_tid = 0x20ac [0187.221] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json")) returned 0x2020 [0191.366] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0215.094] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14a0 [0215.095] GetFileSizeEx (in: hFile=0x14a0, lpFileSize=0xac5fd08 | out: lpFileSize=0xac5fd08*=318) returned 1 [0215.095] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x13a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.095] ReadFile (in: hFile=0x14a0, lpBuffer=0xac5fd14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac5fcf0, lpOverlapped=0x0 | out: lpBuffer=0xac5fd14*, lpNumberOfBytesRead=0xac5fcf0*=0x4, lpOverlapped=0x0) returned 1 [0215.098] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80638b8 [0215.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a38 [0215.098] NtQuerySystemTime (in: CurrentTime=0xac5fc90 | out: CurrentTime=0xac5fc90*=132471540828180000) returned 0x0 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x78f4eb7b [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x7d4fa595 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x5dc74745 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0xaea2ebc [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x2e30b086 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x720a0349 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x3aca4323 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x4a878216 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x3757ead2 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x4442b5b5 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x7b1fb02e [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x714df6a7 [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x2b5eca6e [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x66bfeebf [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x2cce81cf [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x23c045ae [0215.098] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x3a515441 [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x25762590 [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0xbff3e0a [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x559169c7 [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x137d41fe [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x597adf2f [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x4131497e [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x7bf00ea8 [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x3fd0cc66 [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x426b2d7c [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x150a99dc [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0xba7f62e [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x6594017f [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x61256684 [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x5db15b9e [0215.099] RtlRandomEx (in: Seed=0xac5fc88 | out: Seed=0xac5fc88) returned 0x722b483c [0215.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80ed478 [0215.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80f1080 [0215.110] ReadFile (in: hFile=0x14a0, lpBuffer=0x80ed478, nNumberOfBytesToRead=0x13e, lpNumberOfBytesRead=0xac5fc84, lpOverlapped=0x0 | out: lpBuffer=0x80ed478*, lpNumberOfBytesRead=0xac5fc84*=0x13e, lpOverlapped=0x0) returned 1 [0215.110] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.110] WriteFile (in: hFile=0x14a0, lpBuffer=0x80f1080*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0xac5fc88, lpOverlapped=0x0 | out: lpBuffer=0x80f1080*, lpNumberOfBytesWritten=0xac5fc88*=0x13e, lpOverlapped=0x0) returned 1 [0219.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063278 [0219.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062080 [0219.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062080) returned 1 [0219.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80f1080) returned 1 [0219.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ed478) returned 1 [0219.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687e0) returned 1 [0219.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4ec0) returned 1 [0219.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0219.864] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.864] WriteFile (in: hFile=0x14a0, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xac5fcfc, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0xac5fcfc*=0x10c, lpOverlapped=0x0) returned 1 [0220.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0220.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0220.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062080) returned 1 [0220.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0220.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063278) returned 1 [0220.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80638b8) returned 1 [0220.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80638e0) returned 1 [0220.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063908) returned 1 [0220.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4c38 [0220.551] wcscpy (in: _Dest=0x81f4c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" [0220.551] wcscat (in: _Dest=0x81f4c38, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.f0dbec" [0220.551] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0xac5fc80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8c58 [0220.868] FlushFileBuffers (hFile=0x14a0) returned 1 [0220.872] CloseHandle (hObject=0x14a0) returned 1 [0220.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401f28 [0220.896] wcscpy (in: _Dest=0x8401f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" [0220.896] wcscat (in: _Dest=0x8401f28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\F0DBEC-Readme.txt" [0220.896] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0220.896] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14a0 [0220.907] WriteFile (in: hFile=0x14a0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xac5fca4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xac5fca4*=0x70c, lpOverlapped=0x0) returned 1 [0221.109] CloseHandle (hObject=0x14a0) returned 1 [0221.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401f28) returned 1 [0221.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3c20) returned 1 Thread: id = 5681 os_tid = 0x20b0 [0187.221] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json")) returned 0x2020 [0191.379] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", dwFileAttributes=0x20) returned 1 [0214.965] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c00 [0214.966] GetFileSizeEx (in: hFile=0x1c00, lpFileSize=0xbe9f8b0 | out: lpFileSize=0xbe9f8b0*=286) returned 1 [0214.966] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.966] ReadFile (in: hFile=0x1c00, lpBuffer=0xbe9f8bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbe9f898, lpOverlapped=0x0 | out: lpBuffer=0xbe9f8bc*, lpNumberOfBytesRead=0xbe9f898*=0x4, lpOverlapped=0x0) returned 1 [0214.969] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064998 [0214.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062170 [0214.969] NtQuerySystemTime (in: CurrentTime=0xbe9f838 | out: CurrentTime=0xbe9f838*=132471540826932000) returned 0x0 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x3c05c2a9 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x6ca92fba [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x117ba7f6 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x5f7d30ec [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x69d463e8 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x23de113f [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x18086f19 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x4bbd8584 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x68418d7f [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x7d4d6d2f [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x5aedb25c [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x55260e28 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x500ab40b [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x308e5264 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x56d54fd3 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x1c6b8ea2 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x18f5c395 [0214.969] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x11b85f65 [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x1ac9133f [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x4be065c1 [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x59bc3fca [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x412481bc [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x2a274c09 [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x754c1ec6 [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x2b91e162 [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x61301932 [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0xdfe83a [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x92dc818 [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x7041abaf [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x4b7b82b8 [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x79122b14 [0214.970] RtlRandomEx (in: Seed=0xbe9f830 | out: Seed=0xbe9f830) returned 0x36441c1 [0214.980] ReadFile (in: hFile=0x1c00, lpBuffer=0x835b558, nNumberOfBytesToRead=0x11e, lpNumberOfBytesRead=0xbe9f82c, lpOverlapped=0x0 | out: lpBuffer=0x835b558*, lpNumberOfBytesRead=0xbe9f82c*=0x11e, lpOverlapped=0x0) returned 1 [0214.980] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.980] WriteFile (in: hFile=0x1c00, lpBuffer=0x835f160*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xbe9f830, lpOverlapped=0x0 | out: lpBuffer=0x835f160*, lpNumberOfBytesWritten=0xbe9f830*=0x11e, lpOverlapped=0x0) returned 1 [0219.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ac0 [0219.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b10 [0219.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b10) returned 1 [0219.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835f160) returned 1 [0219.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835b558) returned 1 [0219.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 [0219.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4530) returned 1 [0219.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69990 [0219.840] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.840] WriteFile (in: hFile=0x1c00, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbe9f8a4, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xbe9f8a4*=0x10c, lpOverlapped=0x0) returned 1 [0220.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0220.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b40) returned 1 [0220.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b10) returned 1 [0220.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69990) returned 1 [0220.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ac0) returned 1 [0220.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064998) returned 1 [0220.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062df0) returned 1 [0220.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063818) returned 1 [0220.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4758 [0220.531] wcscpy (in: _Dest=0x81f4758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" [0220.532] wcscat (in: _Dest=0x81f4758, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.f0dbec" [0220.532] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.f0dbec", NtPathName=0xbe9f828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9e48 [0220.831] FlushFileBuffers (hFile=0x1c00) returned 1 [0220.839] CloseHandle (hObject=0x1c00) returned 1 [0220.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401960 [0220.886] wcscpy (in: _Dest=0x8401960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" [0220.886] wcscat (in: _Dest=0x8401960, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\F0DBEC-Readme.txt" [0220.886] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\f0dbec-readme.txt")) returned 0xffffffff [0220.887] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c00 [0220.902] WriteFile (in: hFile=0x1c00, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbe9f84c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbe9f84c*=0x70c, lpOverlapped=0x0) returned 1 [0220.919] CloseHandle (hObject=0x1c00) returned 1 [0220.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401960) returned 1 [0220.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3d48) returned 1 Thread: id = 5682 os_tid = 0x20b4 [0187.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json")) returned 0x2020 [0191.380] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", dwFileAttributes=0x20) returned 1 [0214.980] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf00 [0214.981] GetFileSizeEx (in: hFile=0xf00, lpFileSize=0xbf7fe68 | out: lpFileSize=0xbf7fe68*=172) returned 1 [0214.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062170 [0214.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063868 [0214.982] NtQuerySystemTime (in: CurrentTime=0xbf7fdf0 | out: CurrentTime=0xbf7fdf0*=132471540826932000) returned 0x0 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x4f7b4905 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x41c59b5f [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x2353de12 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x27f07959 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x51e2947b [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x37291e91 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x1cc51355 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x2e674a47 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x4b3b3473 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x74204b06 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x66eac77f [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x2165ae6f [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x586987d5 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x70c37a2 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x7a24a3c5 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x3afe8a7e [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x2cddb154 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x5282b1 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x78542993 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x4a84a338 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0xbc9adb [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x3d777dc7 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x509a5488 [0214.982] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x782cf8f0 [0214.983] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x47984fd9 [0214.983] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0xa15135d [0214.983] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x35222e22 [0214.983] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x5438f308 [0214.983] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x676b51bf [0214.983] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x2fc8ff07 [0214.983] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x674078ff [0214.983] RtlRandomEx (in: Seed=0xbf7fde8 | out: Seed=0xbf7fde8) returned 0x62595708 [0214.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8362d68 [0214.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8366970 [0214.993] ReadFile (in: hFile=0xf00, lpBuffer=0x8362d68, nNumberOfBytesToRead=0xac, lpNumberOfBytesRead=0xbf7fde4, lpOverlapped=0x0 | out: lpBuffer=0x8362d68*, lpNumberOfBytesRead=0xbf7fde4*=0xac, lpOverlapped=0x0) returned 1 [0214.995] SetFilePointerEx (in: hFile=0xf00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.995] WriteFile (in: hFile=0xf00, lpBuffer=0x8366970*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0xbf7fde8, lpOverlapped=0x0 | out: lpBuffer=0x8366970*, lpNumberOfBytesWritten=0xbf7fde8*=0xac, lpOverlapped=0x0) returned 1 [0219.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c28 [0219.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b88 [0219.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b88) returned 1 [0219.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8366970) returned 1 [0219.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8362d68) returned 1 [0219.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0219.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4698) returned 1 [0219.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69870 [0219.846] SetFilePointerEx (in: hFile=0xf00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.846] WriteFile (in: hFile=0xf00, lpBuffer=0x3dec3c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbf7fe5c, lpOverlapped=0x0 | out: lpBuffer=0x3dec3c8*, lpNumberOfBytesWritten=0xbf7fe5c*=0x10c, lpOverlapped=0x0) returned 1 [0220.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0220.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0220.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b88) returned 1 [0220.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69870) returned 1 [0220.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c28) returned 1 [0220.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062170) returned 1 [0220.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063188) returned 1 [0220.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063480) returned 1 [0220.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f49c8 [0220.546] wcscpy (in: _Dest=0x81f49c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" [0220.546] wcscat (in: _Dest=0x81f49c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.f0dbec" [0220.546] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.f0dbec", NtPathName=0xbf7fde0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9a70 [0220.850] FlushFileBuffers (hFile=0xf00) returned 1 [0220.857] CloseHandle (hObject=0xf00) returned 1 [0220.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401710 [0220.890] wcscpy (in: _Dest=0x8401710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" [0220.891] wcscat (in: _Dest=0x8401710, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\F0DBEC-Readme.txt" [0220.891] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\f0dbec-readme.txt")) returned 0xffffffff [0220.891] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1db4 [0220.903] WriteFile (in: hFile=0x1db4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbf7fe04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbf7fe04*=0x70c, lpOverlapped=0x0) returned 1 [0220.923] CloseHandle (hObject=0x1db4) returned 1 [0220.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401710) returned 1 [0220.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3e70) returned 1 Thread: id = 5683 os_tid = 0x20b8 [0187.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json")) returned 0x2020 [0191.382] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", dwFileAttributes=0x20) returned 1 [0215.177] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2be8 [0215.178] GetFileSizeEx (in: hFile=0x2be8, lpFileSize=0xcf6fc78 | out: lpFileSize=0xcf6fc78*=210) returned 1 [0215.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062da0 [0215.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d78 [0215.178] NtQuerySystemTime (in: CurrentTime=0xcf6fc00 | out: CurrentTime=0xcf6fc00*=132471540828960000) returned 0x0 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x3e9de103 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x2e885c13 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x1643434c [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x746b186c [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x288fd7f3 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x39b9ece1 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x7b6bc355 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x790a0d39 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x40939651 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x35be3bfb [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x79349594 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x36c4a985 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x25e2d0a8 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x3afe8a7e [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x45045021 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x2b05d067 [0215.178] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x3fba8c63 [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x1e84a68b [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x5a1be710 [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x61699f0b [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x24f42952 [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x39e2bdfd [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x2819b1e9 [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x3f957ede [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x7cbebee5 [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x591796b8 [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x72bd1c5d [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x31c86e75 [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x130267f9 [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x2003dbbe [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x259e5133 [0215.179] RtlRandomEx (in: Seed=0xcf6fbf8 | out: Seed=0xcf6fbf8) returned 0x20ca32bd [0215.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148bc890 [0215.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148c0498 [0215.191] ReadFile (in: hFile=0x2be8, lpBuffer=0x148bc890, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xcf6fbf4, lpOverlapped=0x0 | out: lpBuffer=0x148bc890*, lpNumberOfBytesRead=0xcf6fbf4*=0xd2, lpOverlapped=0x0) returned 1 [0215.193] SetFilePointerEx (in: hFile=0x2be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.193] WriteFile (in: hFile=0x2be8, lpBuffer=0x148c0498*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xcf6fbf8, lpOverlapped=0x0 | out: lpBuffer=0x148c0498*, lpNumberOfBytesWritten=0xcf6fbf8*=0xd2, lpOverlapped=0x0) returned 1 [0215.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80620d0 [0215.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064858 [0215.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064858) returned 1 [0215.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148c0498) returned 1 [0215.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148bc890) returned 1 [0215.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 [0215.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d44a0) returned 1 [0215.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fa08 [0215.665] SetFilePointerEx (in: hFile=0x2be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.665] WriteFile (in: hFile=0x2be8, lpBuffer=0x8405c78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcf6fc6c, lpOverlapped=0x0 | out: lpBuffer=0x8405c78*, lpNumberOfBytesWritten=0xcf6fc6c*=0x10c, lpOverlapped=0x0) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405c78) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f588) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064858) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa08) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620d0) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062da0) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e40) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e68) returned 1 [0215.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8187568 [0215.940] wcscpy (in: _Dest=0x8187568, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" [0215.940] wcscat (in: _Dest=0x8187568, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.f0dbec" [0215.940] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.f0dbec", NtPathName=0xcf6fbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef9178 [0216.185] FlushFileBuffers (hFile=0x2be8) returned 1 [0216.202] CloseHandle (hObject=0x2be8) returned 1 [0216.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404080 [0216.290] wcscpy (in: _Dest=0x8404080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" [0216.290] wcscat (in: _Dest=0x8404080, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\F0DBEC-Readme.txt" [0216.290] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\f0dbec-readme.txt")) returned 0xffffffff [0216.290] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28a8 [0217.842] WriteFile (in: hFile=0x28a8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xcf6fc14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xcf6fc14*=0x70c, lpOverlapped=0x0) returned 1 [0221.144] CloseHandle (hObject=0x28a8) returned 1 [0221.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404080) returned 1 [0221.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407930) returned 1 Thread: id = 5684 os_tid = 0x20bc [0187.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json")) returned 0x2020 [0191.383] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0215.194] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x287c [0215.194] GetFileSizeEx (in: hFile=0x287c, lpFileSize=0xc47f7a8 | out: lpFileSize=0xc47f7a8*=187) returned 1 [0215.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d78 [0215.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f30 [0215.195] NtQuerySystemTime (in: CurrentTime=0xc47f730 | out: CurrentTime=0xc47f730*=132471540829116000) returned 0x0 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x5c67a021 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x7537650b [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x7c4f6103 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x5105b9ac [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x421ae4ed [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x4b194814 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0xf907fef [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x7fe83b82 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x1deb2483 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x6b27ea60 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x619e5fc7 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x30b8c152 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x1d73f7b8 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x17bce130 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x32e1ee9f [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x47eb01d7 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x1477f8e1 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x64bdc5bf [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x50e690da [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x6dab55c7 [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0xc713ccf [0215.195] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x712f1421 [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x6233f4dc [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x2ba28854 [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x3251e76f [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x56e58ce [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x21bbe0b9 [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0xab09562 [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x36689db7 [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x7d4b11b0 [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x763db9ee [0215.196] RtlRandomEx (in: Seed=0xc47f728 | out: Seed=0xc47f728) returned 0x3cf51303 [0215.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8248458 [0215.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824c060 [0215.212] ReadFile (in: hFile=0x287c, lpBuffer=0x8248458, nNumberOfBytesToRead=0xbb, lpNumberOfBytesRead=0xc47f724, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xc47f724*=0xbb, lpOverlapped=0x0) returned 1 [0215.215] SetFilePointerEx (in: hFile=0x287c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.215] WriteFile (in: hFile=0x287c, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0xc47f728, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xc47f728*=0xbb, lpOverlapped=0x0) returned 1 [0215.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063048 [0215.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063048) returned 1 [0215.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0215.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0215.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 [0215.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d51d8) returned 1 [0215.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f3a8 [0215.669] SetFilePointerEx (in: hFile=0x287c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.669] WriteFile (in: hFile=0x287c, lpBuffer=0x84076b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc47f79c, lpOverlapped=0x0 | out: lpBuffer=0x84076b8*, lpNumberOfBytesWritten=0xc47f79c*=0x10c, lpOverlapped=0x0) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84076b8) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f6a8) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063048) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f3a8) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d78) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062e18) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f80) returned 1 [0215.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81872f8 [0215.946] wcscpy (in: _Dest=0x81872f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" [0215.946] wcscat (in: _Dest=0x81872f8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.f0dbec" [0215.946] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0xc47f720, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa9d0 [0216.194] FlushFileBuffers (hFile=0x287c) returned 1 [0216.211] CloseHandle (hObject=0x287c) returned 1 [0216.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d1dc8 [0216.292] wcscpy (in: _Dest=0x81d1dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" [0216.292] wcscat (in: _Dest=0x81d1dc8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\F0DBEC-Readme.txt" [0216.292] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0216.292] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a6c [0217.841] WriteFile (in: hFile=0x2a6c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc47f744, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc47f744*=0x70c, lpOverlapped=0x0) returned 1 [0221.142] CloseHandle (hObject=0x2a6c) returned 1 [0221.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1dc8) returned 1 [0221.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407a58) returned 1 Thread: id = 5685 os_tid = 0x20c0 [0187.223] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json")) returned 0x2020 [0191.384] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0215.215] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x27fc [0215.216] GetFileSizeEx (in: hFile=0x27fc, lpFileSize=0xbf3fe80 | out: lpFileSize=0xbf3fe80*=199) returned 1 [0215.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f30 [0215.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f08 [0215.216] NtQuerySystemTime (in: CurrentTime=0xbf3fe08 | out: CurrentTime=0xbf3fe08*=132471540829272000) returned 0x0 [0215.216] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x51d0741d [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x30aee487 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x59fef336 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x1d593f53 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x4a84a338 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x7703c8d5 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x420da405 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x367085f7 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x63cf58b0 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x2e4ab7 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x70ae9347 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0xe6d5e27 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x1d8df38c [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x4a056005 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x6dd894cf [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x61c5b0e [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x4628a224 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x5720c3b8 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x59bc3fca [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x1c23bab8 [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x1b3526ea [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x560d53ee [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x653e4fff [0215.217] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x7355c401 [0215.218] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x79364e22 [0215.218] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x3f57d5ae [0215.218] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x51cbed10 [0215.218] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x6b0d6e09 [0215.218] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x11249932 [0215.218] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x2cddb154 [0215.218] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x3a969398 [0215.218] RtlRandomEx (in: Seed=0xbf3fe00 | out: Seed=0xbf3fe00) returned 0x7b873651 [0215.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x824fc68 [0215.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8253870 [0215.230] ReadFile (in: hFile=0x27fc, lpBuffer=0x824fc68, nNumberOfBytesToRead=0xc7, lpNumberOfBytesRead=0xbf3fdfc, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesRead=0xbf3fdfc*=0xc7, lpOverlapped=0x0) returned 1 [0215.232] SetFilePointerEx (in: hFile=0x27fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.232] WriteFile (in: hFile=0x27fc, lpBuffer=0x8253870*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0xbf3fe00, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesWritten=0xbf3fe00*=0xc7, lpOverlapped=0x0) returned 1 [0215.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a10 [0215.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a20 [0215.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a20) returned 1 [0215.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0215.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0215.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 [0215.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4920) returned 1 [0215.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f2e8 [0215.668] SetFilePointerEx (in: hFile=0x27fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.668] WriteFile (in: hFile=0x27fc, lpBuffer=0x8405fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbf3fe74, lpOverlapped=0x0 | out: lpBuffer=0x8405fc0*, lpNumberOfBytesWritten=0xbf3fe74*=0x10c, lpOverlapped=0x0) returned 1 [0215.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405fc0) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f258) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a20) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f2e8) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a10) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f30) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f58) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80630c0) returned 1 [0215.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8187430 [0215.943] wcscpy (in: _Dest=0x8187430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" [0215.943] wcscat (in: _Dest=0x8187430, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.f0dbec" [0215.943] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0xbf3fdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ef9e48 [0216.189] FlushFileBuffers (hFile=0x27fc) returned 1 [0216.206] CloseHandle (hObject=0x27fc) returned 1 [0216.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x84042f0 [0216.294] wcscpy (in: _Dest=0x84042f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" [0216.294] wcscat (in: _Dest=0x84042f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\F0DBEC-Readme.txt" [0216.295] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0216.295] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29ec [0217.842] WriteFile (in: hFile=0x29ec, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbf3fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbf3fe1c*=0x70c, lpOverlapped=0x0) returned 1 [0221.146] CloseHandle (hObject=0x29ec) returned 1 [0221.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84042f0) returned 1 [0221.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407b80) returned 1 Thread: id = 5686 os_tid = 0x20c4 [0187.223] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json")) returned 0x2020 [0191.385] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0215.233] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2480 [0215.234] GetFileSizeEx (in: hFile=0x2480, lpFileSize=0xb1afaf0 | out: lpFileSize=0xb1afaf0*=183) returned 1 [0215.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062f08 [0215.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063110 [0215.234] NtQuerySystemTime (in: CurrentTime=0xb1afa78 | out: CurrentTime=0xb1afa78*=132471540829584000) returned 0x0 [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x505d72b1 [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x3c5766c7 [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0xc8de95d [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x68de3e0d [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x2fa8ecf7 [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x2b2a74d4 [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x5d9a3a13 [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x49ad4ede [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x540c65ea [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x1e059738 [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x5343ab11 [0215.234] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x45781d1f [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x4cd894ed [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x5fb23cc7 [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x4d98f1a0 [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x2a394063 [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x7a2e814e [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x6180d0b [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x641262bf [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x66699121 [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x5aac49f9 [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x643525a6 [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x5e9e1870 [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x1abd08e [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x668d547e [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x20f42598 [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x3c23fe5e [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x7179de9b [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x2c12e5eb [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x2beda24c [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x7f136727 [0215.235] RtlRandomEx (in: Seed=0xb1afa70 | out: Seed=0xb1afa70) returned 0x5c8b12d6 [0215.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8257478 [0215.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825b080 [0215.247] ReadFile (in: hFile=0x2480, lpBuffer=0x8257478, nNumberOfBytesToRead=0xb7, lpNumberOfBytesRead=0xb1afa6c, lpOverlapped=0x0 | out: lpBuffer=0x8257478*, lpNumberOfBytesRead=0xb1afa6c*=0xb7, lpOverlapped=0x0) returned 1 [0215.250] SetFilePointerEx (in: hFile=0x2480, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.250] WriteFile (in: hFile=0x2480, lpBuffer=0x825b080*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0xb1afa70, lpOverlapped=0x0 | out: lpBuffer=0x825b080*, lpNumberOfBytesWritten=0xb1afa70*=0xb7, lpOverlapped=0x0) returned 1 [0215.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062c10 [0215.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062c38 [0215.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062c38) returned 1 [0215.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825b080) returned 1 [0215.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8257478) returned 1 [0215.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 [0215.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d47b8) returned 1 [0215.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f438 [0215.674] SetFilePointerEx (in: hFile=0x2480, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.674] WriteFile (in: hFile=0x2480, lpBuffer=0x8406f10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb1afae4, lpOverlapped=0x0 | out: lpBuffer=0x8406f10*, lpNumberOfBytesWritten=0xb1afae4*=0x10c, lpOverlapped=0x0) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406f10) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fe28) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062c38) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f438) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062c10) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062f08) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80630e8) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063138) returned 1 [0215.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187088 [0215.951] wcscpy (in: _Dest=0x8187088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" [0215.951] wcscat (in: _Dest=0x8187088, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.f0dbec" [0215.951] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0xb1afa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9a70 [0216.204] FlushFileBuffers (hFile=0x2480) returned 1 [0216.215] CloseHandle (hObject=0x2480) returned 1 [0216.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d1ef0 [0216.299] wcscpy (in: _Dest=0x81d1ef0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" [0216.299] wcscat (in: _Dest=0x81d1ef0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\F0DBEC-Readme.txt" [0216.299] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0216.299] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a48 [0217.844] WriteFile (in: hFile=0x1a48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb1afa8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb1afa8c*=0x70c, lpOverlapped=0x0) returned 1 [0221.150] CloseHandle (hObject=0x1a48) returned 1 [0221.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1ef0) returned 1 [0221.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407ca8) returned 1 Thread: id = 5687 os_tid = 0x20c8 [0187.224] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json")) returned 0x2020 [0191.386] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", dwFileAttributes=0x20) returned 1 [0215.250] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a3c [0215.251] GetFileSizeEx (in: hFile=0x2a3c, lpFileSize=0xd64fb20 | out: lpFileSize=0xd64fb20*=255) returned 1 [0215.251] SetFilePointerEx (in: hFile=0x2a3c, liDistanceToMove=0xfb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.251] ReadFile (in: hFile=0x2a3c, lpBuffer=0xd64fb2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd64fb08, lpOverlapped=0x0 | out: lpBuffer=0xd64fb2c*, lpNumberOfBytesRead=0xd64fb08*=0x4, lpOverlapped=0x0) returned 1 [0215.253] SetFilePointerEx (in: hFile=0x2a3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063110 [0215.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063070 [0215.254] NtQuerySystemTime (in: CurrentTime=0xd64faa8 | out: CurrentTime=0xd64faa8*=132471540829740000) returned 0x0 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x226e8df2 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x3218d4bc [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x1fe2cc35 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x54a022bb [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x22cf6259 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x262c1462 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x3fa95498 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x76b50e47 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x2744feb5 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x74435a09 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x788c1663 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x27af7c50 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0xc4e6a1d [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x2c16945e [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x7080c3ee [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x4e220c5 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x10a2bef4 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x5ade4a28 [0215.254] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0xd6b157d [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x773184f4 [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x3643f05a [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x541aff6b [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x3b25a30c [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x44442c13 [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x61a48652 [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x41a7c7b7 [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x639b5dcf [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x4ef39b0d [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x49f3f7b6 [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0xd3fed0c [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x548e9299 [0215.255] RtlRandomEx (in: Seed=0xd64faa0 | out: Seed=0xd64faa0) returned 0x4b9f3f5f [0215.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x825ec88 [0215.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8262890 [0215.267] ReadFile (in: hFile=0x2a3c, lpBuffer=0x825ec88, nNumberOfBytesToRead=0xff, lpNumberOfBytesRead=0xd64fa9c, lpOverlapped=0x0 | out: lpBuffer=0x825ec88*, lpNumberOfBytesRead=0xd64fa9c*=0xff, lpOverlapped=0x0) returned 1 [0215.267] SetFilePointerEx (in: hFile=0x2a3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.267] WriteFile (in: hFile=0x2a3c, lpBuffer=0x8262890*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0xd64faa0, lpOverlapped=0x0 | out: lpBuffer=0x8262890*, lpNumberOfBytesWritten=0xd64faa0*=0xff, lpOverlapped=0x0) returned 1 [0215.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062eb8 [0215.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062ee0 [0215.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ee0) returned 1 [0215.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8262890) returned 1 [0215.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x825ec88) returned 1 [0215.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 [0215.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4f98) returned 1 [0215.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f828 [0215.673] SetFilePointerEx (in: hFile=0x2a3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.673] WriteFile (in: hFile=0x2a3c, lpBuffer=0x8405d90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd64fb14, lpOverlapped=0x0 | out: lpBuffer=0x8405d90*, lpNumberOfBytesWritten=0xd64fb14*=0x10c, lpOverlapped=0x0) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405d90) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f8b8) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ee0) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f828) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062eb8) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063110) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063098) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063020) returned 1 [0215.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81871c0 [0215.949] wcscpy (in: _Dest=0x81871c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" [0215.949] wcscat (in: _Dest=0x81871c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.f0dbec" [0215.949] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.f0dbec", NtPathName=0xd64fa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef92c0 [0216.199] FlushFileBuffers (hFile=0x2a3c) returned 1 [0216.213] CloseHandle (hObject=0x2a3c) returned 1 [0216.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d1488 [0216.296] wcscpy (in: _Dest=0x81d1488, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" [0216.296] wcscat (in: _Dest=0x81d1488, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\F0DBEC-Readme.txt" [0216.296] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\f0dbec-readme.txt")) returned 0xffffffff [0216.296] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b04 [0217.843] WriteFile (in: hFile=0x2b04, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd64fabc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd64fabc*=0x70c, lpOverlapped=0x0) returned 1 [0221.148] CloseHandle (hObject=0x2b04) returned 1 [0221.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1488) returned 1 [0221.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407dd0) returned 1 Thread: id = 5688 os_tid = 0x20cc [0187.224] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json")) returned 0x2020 [0191.387] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", dwFileAttributes=0x20) returned 1 [0215.029] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1090 [0215.031] GetFileSizeEx (in: hFile=0x1090, lpFileSize=0xd88fcc0 | out: lpFileSize=0xd88fcc0*=152) returned 1 [0215.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bf0 [0215.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b50 [0215.031] NtQuerySystemTime (in: CurrentTime=0xd88fc48 | out: CurrentTime=0xd88fc48*=132471540827556000) returned 0x0 [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x67ebdbff [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x267e986d [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x7b215e6b [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0xf4fd152 [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x2ed55b0f [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x93ca71c [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x52646d45 [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x6ec3539 [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x303879e7 [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x5a1a42df [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x41094aa7 [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x490fd540 [0215.031] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x4f8aeec7 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x18d29859 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x34ff98af [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x2a8789a5 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x7809e9b4 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x2610819 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x5bda7db5 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x21315be5 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x6c6347fd [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x2bd638a1 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x4a3fa919 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x7456f7bc [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x26d9bbf1 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x658fee6f [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x3b88b68a [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x45131234 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x346dc547 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x6588fb20 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x161a0a32 [0215.032] RtlRandomEx (in: Seed=0xd88fc40 | out: Seed=0xd88fc40) returned 0x658fee6f [0215.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8379598 [0215.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x837d1a0 [0215.044] ReadFile (in: hFile=0x1090, lpBuffer=0x8379598, nNumberOfBytesToRead=0x98, lpNumberOfBytesRead=0xd88fc3c, lpOverlapped=0x0 | out: lpBuffer=0x8379598*, lpNumberOfBytesRead=0xd88fc3c*=0x98, lpOverlapped=0x0) returned 1 [0215.046] SetFilePointerEx (in: hFile=0x1090, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.046] WriteFile (in: hFile=0x1090, lpBuffer=0x837d1a0*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0xd88fc40, lpOverlapped=0x0 | out: lpBuffer=0x837d1a0*, lpNumberOfBytesWritten=0xd88fc40*=0x98, lpOverlapped=0x0) returned 1 [0219.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063458 [0219.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a70 [0219.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a70) returned 1 [0219.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x837d1a0) returned 1 [0219.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8379598) returned 1 [0219.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68588) returned 1 [0219.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4ba8) returned 1 [0219.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69750 [0219.851] SetFilePointerEx (in: hFile=0x1090, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.851] WriteFile (in: hFile=0x1090, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd88fcb4, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xd88fcb4*=0x10c, lpOverlapped=0x0) returned 1 [0220.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0220.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69270) returned 1 [0220.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a70) returned 1 [0220.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0220.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063458) returned 1 [0220.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064bf0) returned 1 [0220.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b78) returned 1 [0220.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062288) returned 1 [0220.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404560 [0220.366] wcscpy (in: _Dest=0x8404560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" [0220.366] wcscat (in: _Dest=0x8404560, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.f0dbec" [0220.366] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.f0dbec", NtPathName=0xd88fc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9178 [0220.602] FlushFileBuffers (hFile=0x1090) returned 1 [0220.614] CloseHandle (hObject=0x1090) returned 1 [0220.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81eb770 [0220.737] wcscpy (in: _Dest=0x81eb770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" [0220.737] wcscat (in: _Dest=0x81eb770, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\F0DBEC-Readme.txt" [0220.737] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\f0dbec-readme.txt")) returned 0xffffffff [0220.737] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.030] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd88fc5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd88fc5c*=0x70c, lpOverlapped=0x0) returned 1 [0221.032] CloseHandle (hObject=0x1b48) returned 1 [0221.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb770) returned 1 [0221.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407ef8) returned 1 Thread: id = 5689 os_tid = 0x20d0 [0187.224] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json")) returned 0x2020 [0191.388] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0214.767] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b4c [0214.768] GetFileSizeEx (in: hFile=0x1b4c, lpFileSize=0xb96fa58 | out: lpFileSize=0xb96fa58*=251) returned 1 [0214.768] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0xf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.768] ReadFile (in: hFile=0x1b4c, lpBuffer=0xb96fa64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb96fa40, lpOverlapped=0x0 | out: lpBuffer=0xb96fa64*, lpNumberOfBytesRead=0xb96fa40*=0x4, lpOverlapped=0x0) returned 1 [0214.770] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064380 [0214.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80644c0 [0214.770] NtQuerySystemTime (in: CurrentTime=0xb96f9e0 | out: CurrentTime=0xb96f9e0*=132471540824904000) returned 0x0 [0214.770] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x68c65497 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x6e4d3991 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x5bdcffcb [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x7edb3905 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x6b766d15 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x43b3c1d0 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x19c987d4 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x445f3769 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x3364ea7c [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x53e694e2 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x29d1d989 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x1fa924d0 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0xb9cc69f [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x5a2b4a5c [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x47bfc78e [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x768363a7 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x454d78 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x71ac543a [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x452da5da [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0xf3eb41c [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x650062e1 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x5338cf75 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x32efb37e [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x30b83522 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x3ab10fe9 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x39eb5610 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x1e213a0 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x6902cfcb [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x1495fd58 [0214.771] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x5f8ce159 [0214.772] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x38550bc2 [0214.772] RtlRandomEx (in: Seed=0xb96f9d8 | out: Seed=0xb96f9d8) returned 0x1fe6ccb0 [0214.783] ReadFile (in: hFile=0x1b4c, lpBuffer=0x8288458, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0xb96f9d4, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesRead=0xb96f9d4*=0xfb, lpOverlapped=0x0) returned 1 [0214.783] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.783] WriteFile (in: hFile=0x1b4c, lpBuffer=0x828c060*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0xb96f9d8, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesWritten=0xb96f9d8*=0xfb, lpOverlapped=0x0) returned 1 [0219.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062850 [0219.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e08 [0219.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e08) returned 1 [0219.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0219.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0219.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84031a0) returned 1 [0219.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5070) returned 1 [0219.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68df0 [0219.810] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.810] WriteFile (in: hFile=0x1b4c, lpBuffer=0x84076b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb96fa4c, lpOverlapped=0x0 | out: lpBuffer=0x84076b8*, lpNumberOfBytesWritten=0xb96fa4c*=0x10c, lpOverlapped=0x0) returned 1 [0220.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84076b8) returned 1 [0220.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69420) returned 1 [0220.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e08) returned 1 [0220.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68df0) returned 1 [0220.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062850) returned 1 [0220.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064380) returned 1 [0220.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064498) returned 1 [0220.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064588) returned 1 [0220.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404cb0 [0220.316] wcscpy (in: _Dest=0x8404cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" [0220.316] wcscat (in: _Dest=0x8404cb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.f0dbec" [0220.316] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0xb96f9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9bb8 [0220.575] FlushFileBuffers (hFile=0x1b4c) returned 1 [0220.591] CloseHandle (hObject=0x1b4c) returned 1 [0220.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ece90 [0220.723] wcscpy (in: _Dest=0x81ece90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" [0220.723] wcscat (in: _Dest=0x81ece90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\F0DBEC-Readme.txt" [0220.723] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0220.723] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0220.973] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb96f9f4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb96f9f4*=0x70c, lpOverlapped=0x0) returned 1 [0220.974] CloseHandle (hObject=0x1bf8) returned 1 [0220.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ece90) returned 1 [0220.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408020) returned 1 Thread: id = 5690 os_tid = 0x20d4 [0187.225] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json")) returned 0x2020 [0191.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", dwFileAttributes=0x20) returned 1 [0200.681] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe50 [0200.682] GetFileSizeEx (in: hFile=0xe50, lpFileSize=0xbb7fb98 | out: lpFileSize=0xbb7fb98*=362) returned 1 [0200.682] SetFilePointerEx (in: hFile=0xe50, liDistanceToMove=0x166, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.682] ReadFile (in: hFile=0xe50, lpBuffer=0xbb7fba4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbb7fb80, lpOverlapped=0x0 | out: lpBuffer=0xbb7fba4*, lpNumberOfBytesRead=0xbb7fb80*=0x4, lpOverlapped=0x0) returned 1 [0200.684] SetFilePointerEx (in: hFile=0xe50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d424e8 [0200.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430a0 [0200.685] NtQuerySystemTime (in: CurrentTime=0xbb7fb20 | out: CurrentTime=0xbb7fb20*=132471540685284000) returned 0x0 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x4b7163ea [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x7f0e6940 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x7f82e113 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x2f981167 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x50c67f1 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x408843b2 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0xe9d2e4a [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x116f885d [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x10f5f3ad [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x7d5fccdd [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x5dd721dc [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x312ea0bf [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x4b7d68d5 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x1cdf7f69 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x2726863f [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x303b00c1 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x300b6821 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x3f037634 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x4eb4dd97 [0200.685] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x4fcbbd76 [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x731f5f61 [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x67cb4ae1 [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x7b8278e2 [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x3a8d176d [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x2d3f4ced [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x3d51eee9 [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x6bcb4a5 [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x3fd682ae [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x2ec9612a [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x7f2e0b2 [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x564d3b2f [0200.686] RtlRandomEx (in: Seed=0xbb7fb18 | out: Seed=0xbb7fb18) returned 0x5664b4e7 [0200.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b36cc8 [0200.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b3a8d0 [0200.701] ReadFile (in: hFile=0xe50, lpBuffer=0x14b36cc8, nNumberOfBytesToRead=0x16a, lpNumberOfBytesRead=0xbb7fb14, lpOverlapped=0x0 | out: lpBuffer=0x14b36cc8*, lpNumberOfBytesRead=0xbb7fb14*=0x16a, lpOverlapped=0x0) returned 1 [0200.701] SetFilePointerEx (in: hFile=0xe50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.701] WriteFile (in: hFile=0xe50, lpBuffer=0x14b3a8d0*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0xbb7fb18, lpOverlapped=0x0 | out: lpBuffer=0x14b3a8d0*, lpNumberOfBytesWritten=0xbb7fb18*=0x16a, lpOverlapped=0x0) returned 1 [0203.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064790 [0203.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80647b8 [0203.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80647b8) returned 1 [0203.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b3a8d0) returned 1 [0203.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b36cc8) returned 1 [0203.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 [0203.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5df0) returned 1 [0203.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36e90 [0203.681] SetFilePointerEx (in: hFile=0xe50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.682] WriteFile (in: hFile=0xe50, lpBuffer=0x8321ab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbb7fb8c, lpOverlapped=0x0 | out: lpBuffer=0x8321ab0*, lpNumberOfBytesWritten=0xbb7fb8c*=0x10c, lpOverlapped=0x0) returned 1 [0204.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321ab0) returned 1 [0204.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36ec0) returned 1 [0204.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80647b8) returned 1 [0204.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36e90) returned 1 [0204.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064790) returned 1 [0204.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424e8) returned 1 [0204.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42470) returned 1 [0204.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0204.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347080 [0204.187] wcscpy (in: _Dest=0x8347080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" [0204.187] wcscat (in: _Dest=0x8347080, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.f0dbec" [0204.187] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.f0dbec", NtPathName=0xbb7fb10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x81f5278 [0204.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5278) returned 1 [0204.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8339cf0) returned 1 [0204.570] NtQueryInformationFile (in: FileHandle=0xe50, IoStatusBlock=0xbb7fae8, FileInformation=0xbb7faf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbb7fae8, FileInformation=0xbb7faf0) returned 0x0 [0204.570] NtSetInformationFile (FileHandle=0xe50, IoStatusBlock=0xbb7fae8, FileInformation=0xbb7faf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347080) returned 1 [0207.720] FlushFileBuffers (hFile=0xe50) returned 1 [0207.733] CloseHandle (hObject=0xe50) returned 1 [0208.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d2458 [0208.062] wcscpy (in: _Dest=0x81d2458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" [0208.062] wcscat (in: _Dest=0x81d2458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\F0DBEC-Readme.txt" [0208.062] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\f0dbec-readme.txt")) returned 0xffffffff [0208.062] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c8 [0208.441] WriteFile (in: hFile=0x20c8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbb7fb34, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbb7fb34*=0x70c, lpOverlapped=0x0) returned 1 [0209.398] CloseHandle (hObject=0x20c8) returned 1 [0209.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2458) returned 1 [0209.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408148) returned 1 Thread: id = 5691 os_tid = 0x20d8 [0187.225] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json")) returned 0x2020 [0191.242] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0200.736] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x598 [0200.737] GetFileSizeEx (in: hFile=0x598, lpFileSize=0xde8fa00 | out: lpFileSize=0xde8fa00*=182) returned 1 [0200.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43488 [0200.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0200.737] NtQuerySystemTime (in: CurrentTime=0xde8f988 | out: CurrentTime=0xde8f988*=132471540685752000) returned 0x0 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x4157920c [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x1ec5cbda [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x48901cfd [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x2eacf7f [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x13ffd6b2 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x13531efc [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x5f7e3b5f [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x67d7bae2 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x7238fb6e [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x268b81a8 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x7b8c840a [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x27ce77e7 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x13bab1cc [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x35ef38d6 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x4446df59 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x1a0651b2 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x549e927b [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x7e630640 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x28642a7e [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x5e1f9b8c [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x95d969e [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x8156906 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x41dba0e3 [0200.737] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x722404c [0200.738] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0xefc1008 [0200.738] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x2d2579e5 [0200.738] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x7f3d20d8 [0200.738] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x7e3987d0 [0200.738] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0xaacf8ba [0200.738] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x889d871 [0200.738] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x7fb1e76e [0200.738] RtlRandomEx (in: Seed=0xde8f980 | out: Seed=0xde8f980) returned 0x5e8eafc4 [0200.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b4d870 [0200.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b51478 [0200.747] ReadFile (in: hFile=0x598, lpBuffer=0x14b4d870, nNumberOfBytesToRead=0xb6, lpNumberOfBytesRead=0xde8f97c, lpOverlapped=0x0 | out: lpBuffer=0x14b4d870*, lpNumberOfBytesRead=0xde8f97c*=0xb6, lpOverlapped=0x0) returned 1 [0200.749] SetFilePointerEx (in: hFile=0x598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.749] WriteFile (in: hFile=0x598, lpBuffer=0x14b51478*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0xde8f980, lpOverlapped=0x0 | out: lpBuffer=0x14b51478*, lpNumberOfBytesWritten=0xde8f980*=0xb6, lpOverlapped=0x0) returned 1 [0203.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064880 [0203.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80648a8 [0203.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648a8) returned 1 [0203.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b51478) returned 1 [0203.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b4d870) returned 1 [0203.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0203.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5a90) returned 1 [0203.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f36fb0 [0203.691] SetFilePointerEx (in: hFile=0x598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.691] WriteFile (in: hFile=0x598, lpBuffer=0x8321df8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xde8f9f4, lpOverlapped=0x0 | out: lpBuffer=0x8321df8*, lpNumberOfBytesWritten=0xde8f9f4*=0x10c, lpOverlapped=0x0) returned 1 [0204.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321df8) returned 1 [0204.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36fe0) returned 1 [0204.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648a8) returned 1 [0204.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36fb0) returned 1 [0204.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064880) returned 1 [0204.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43488) returned 1 [0204.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435f0) returned 1 [0204.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43398) returned 1 [0204.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83472f0 [0204.217] wcscpy (in: _Dest=0x83472f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" [0204.217] wcscat (in: _Dest=0x83472f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.f0dbec" [0204.217] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0xde8f978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83ea930 [0204.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea930) returned 1 [0204.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x833ca38) returned 1 [0204.573] NtQueryInformationFile (in: FileHandle=0x598, IoStatusBlock=0xde8f950, FileInformation=0xde8f958, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xde8f950, FileInformation=0xde8f958) returned 0x0 [0204.573] NtSetInformationFile (FileHandle=0x598, IoStatusBlock=0xde8f950, FileInformation=0xde8f958, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83472f0) returned 1 [0207.728] FlushFileBuffers (hFile=0x598) returned 1 [0207.746] CloseHandle (hObject=0x598) returned 1 [0208.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d2b48 [0208.064] wcscpy (in: _Dest=0x81d2b48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" [0208.064] wcscat (in: _Dest=0x81d2b48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\F0DBEC-Readme.txt" [0208.064] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0208.065] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cbc [0208.441] WriteFile (in: hFile=0x1cbc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xde8f99c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xde8f99c*=0x70c, lpOverlapped=0x0) returned 1 [0209.395] CloseHandle (hObject=0x1cbc) returned 1 [0209.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2b48) returned 1 [0209.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408270) returned 1 Thread: id = 5692 os_tid = 0x20dc [0187.226] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json")) returned 0x2020 [0191.243] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", dwFileAttributes=0x20) returned 1 [0200.922] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17c0 [0200.922] GetFileSizeEx (in: hFile=0x17c0, lpFileSize=0xc94fc88 | out: lpFileSize=0xc94fc88*=178) returned 1 [0200.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423d0 [0200.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e48 [0200.923] NtQuerySystemTime (in: CurrentTime=0xc94fc10 | out: CurrentTime=0xc94fc10*=132471540687624000) returned 0x0 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x71c705ce [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0xa2b6709 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x6fa94ed7 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x40dcda99 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x63e61ef [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x25bbc22a [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x2ff5fc39 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x1784ae44 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x372db54 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x4b1a3191 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x7619db1f [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x1a377241 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x66f3f687 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x7d371900 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x7aa272b2 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x65247e54 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x228073d0 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x43ec9247 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x5e46c3a7 [0200.923] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x26187496 [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x58cc58ca [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x7078a0f8 [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x44d89ea1 [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0xe807195 [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x77f671c9 [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x42d8aa37 [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x6249b7a5 [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x69f4cf63 [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x436f8f2b [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x14f47e9 [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x4cc407dc [0200.924] RtlRandomEx (in: Seed=0xc94fc08 | out: Seed=0xc94fc08) returned 0x2c8a4a73 [0200.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0200.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ba0498 [0200.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ba40a0 [0200.937] ReadFile (in: hFile=0x17c0, lpBuffer=0x14ba0498, nNumberOfBytesToRead=0xb2, lpNumberOfBytesRead=0xc94fc04, lpOverlapped=0x0 | out: lpBuffer=0x14ba0498*, lpNumberOfBytesRead=0xc94fc04*=0xb2, lpOverlapped=0x0) returned 1 [0200.939] SetFilePointerEx (in: hFile=0x17c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.939] WriteFile (in: hFile=0x17c0, lpBuffer=0x14ba40a0*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0xc94fc08, lpOverlapped=0x0 | out: lpBuffer=0x14ba40a0*, lpNumberOfBytesWritten=0xc94fc08*=0xb2, lpOverlapped=0x0) returned 1 [0203.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b00 [0203.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b28 [0203.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b28) returned 1 [0203.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ba40a0) returned 1 [0203.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ba0498) returned 1 [0203.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402b88) returned 1 [0203.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5340) returned 1 [0203.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f372b0 [0203.721] SetFilePointerEx (in: hFile=0x17c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.721] WriteFile (in: hFile=0x17c0, lpBuffer=0x83226b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc94fc7c, lpOverlapped=0x0 | out: lpBuffer=0x83226b8*, lpNumberOfBytesWritten=0xc94fc7c*=0x10c, lpOverlapped=0x0) returned 1 [0204.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83226b8) returned 1 [0204.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f372e0) returned 1 [0204.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b28) returned 1 [0204.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f372b0) returned 1 [0204.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b00) returned 1 [0204.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423d0) returned 1 [0204.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0204.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0204.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347698 [0204.230] wcscpy (in: _Dest=0x8347698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" [0204.230] wcscat (in: _Dest=0x8347698, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.f0dbec" [0204.230] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.f0dbec", NtPathName=0xc94fc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x83ead08 [0204.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ead08) returned 1 [0204.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8343830) returned 1 [0204.578] NtQueryInformationFile (in: FileHandle=0x17c0, IoStatusBlock=0xc94fbd8, FileInformation=0xc94fbe0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc94fbd8, FileInformation=0xc94fbe0) returned 0x0 [0204.578] NtSetInformationFile (FileHandle=0x17c0, IoStatusBlock=0xc94fbd8, FileInformation=0xc94fbe0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347698) returned 1 [0207.744] FlushFileBuffers (hFile=0x17c0) returned 1 [0207.762] CloseHandle (hObject=0x17c0) returned 1 [0208.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d3ef0 [0208.073] wcscpy (in: _Dest=0x81d3ef0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" [0208.073] wcscat (in: _Dest=0x81d3ef0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\F0DBEC-Readme.txt" [0208.073] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\f0dbec-readme.txt")) returned 0xffffffff [0208.073] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c1c [0208.448] WriteFile (in: hFile=0x1c1c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc94fc24, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc94fc24*=0x70c, lpOverlapped=0x0) returned 1 [0209.409] CloseHandle (hObject=0x1c1c) returned 1 [0209.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3ef0) returned 1 [0209.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408398) returned 1 Thread: id = 5693 os_tid = 0x20f4 [0187.226] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json")) returned 0x2020 [0191.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0200.979] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf30 [0200.980] GetFileSizeEx (in: hFile=0xf30, lpFileSize=0xe0cf7b8 | out: lpFileSize=0xe0cf7b8*=204) returned 1 [0200.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0200.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a88 [0200.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420d8 [0200.980] NtQuerySystemTime (in: CurrentTime=0xe0cf740 | out: CurrentTime=0xe0cf740*=132471540688248000) returned 0x0 [0200.980] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x16d1161c [0200.980] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x29e183c8 [0200.980] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x5c1287f1 [0200.980] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0xe24bbae [0200.980] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x658d3152 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x41b6a007 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x609fffa5 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x59313712 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x7be05300 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x54d851ee [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x17bb17e1 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x2a929793 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x36f39234 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x2e080641 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x469be4d8 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x492aba77 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x4b148047 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x7bb57a40 [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x183c05bc [0200.981] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x12f7db1f [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x6ee6aef2 [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x3ebbdb3c [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x4a3a29b2 [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x6fa94ed7 [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x2228c86e [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x479e73ce [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x66f3f687 [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x45b14f08 [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x36e5a31b [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x58abbef8 [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x19738 [0200.982] RtlRandomEx (in: Seed=0xe0cf738 | out: Seed=0xe0cf738) returned 0x50af3d64 [0201.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bb6cc8 [0201.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14bba8d0 [0201.012] ReadFile (in: hFile=0xf30, lpBuffer=0x14bb6cc8, nNumberOfBytesToRead=0xcc, lpNumberOfBytesRead=0xe0cf734, lpOverlapped=0x0 | out: lpBuffer=0x14bb6cc8*, lpNumberOfBytesRead=0xe0cf734*=0xcc, lpOverlapped=0x0) returned 1 [0201.014] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.014] WriteFile (in: hFile=0xf30, lpBuffer=0x14bba8d0*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0xe0cf738, lpOverlapped=0x0 | out: lpBuffer=0x14bba8d0*, lpNumberOfBytesWritten=0xe0cf738*=0xcc, lpOverlapped=0x0) returned 1 [0203.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0203.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0203.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0203.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bba8d0) returned 1 [0203.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bb6cc8) returned 1 [0203.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402cf0) returned 1 [0203.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5928) returned 1 [0203.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fbb8 [0203.789] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.790] WriteFile (in: hFile=0xf30, lpBuffer=0x30bbfc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe0cf7ac, lpOverlapped=0x0 | out: lpBuffer=0x30bbfc0*, lpNumberOfBytesWritten=0xe0cf7ac*=0x10c, lpOverlapped=0x0) returned 1 [0204.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 [0204.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb88) returned 1 [0204.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0204.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fbb8) returned 1 [0204.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0204.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0204.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42060) returned 1 [0204.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436b8) returned 1 [0204.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8347b78 [0204.267] wcscpy (in: _Dest=0x8347b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" [0204.267] wcscat (in: _Dest=0x8347b78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.f0dbec" [0204.267] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0xe0cf730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c328 [0204.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c328) returned 1 [0204.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8318b10) returned 1 [0204.673] NtQueryInformationFile (in: FileHandle=0xf30, IoStatusBlock=0xe0cf708, FileInformation=0xe0cf710, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe0cf708, FileInformation=0xe0cf710) returned 0x0 [0204.673] NtSetInformationFile (FileHandle=0xf30, IoStatusBlock=0xe0cf708, FileInformation=0xe0cf710, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347b78) returned 1 [0207.816] FlushFileBuffers (hFile=0xf30) returned 1 [0207.827] CloseHandle (hObject=0xf30) returned 1 [0208.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d3800 [0208.086] wcscpy (in: _Dest=0x81d3800, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" [0208.086] wcscat (in: _Dest=0x81d3800, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\F0DBEC-Readme.txt" [0208.086] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0208.086] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e8 [0208.450] WriteFile (in: hFile=0x3e8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe0cf754, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe0cf754*=0x70c, lpOverlapped=0x0) returned 1 [0209.421] CloseHandle (hObject=0x3e8) returned 1 [0209.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d3800) returned 1 [0209.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84084c0) returned 1 Thread: id = 5694 os_tid = 0x20f8 [0187.226] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0191.245] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0201.065] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2ca4 [0201.066] GetFileSizeEx (in: hFile=0x2ca4, lpFileSize=0xd68ff60 | out: lpFileSize=0xd68ff60*=265) returned 1 [0201.066] SetFilePointerEx (in: hFile=0x2ca4, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.066] ReadFile (in: hFile=0x2ca4, lpBuffer=0xd68ff6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd68ff48, lpOverlapped=0x0 | out: lpBuffer=0xd68ff6c*, lpNumberOfBytesRead=0xd68ff48*=0x4, lpOverlapped=0x0) returned 1 [0201.069] SetFilePointerEx (in: hFile=0x2ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42588 [0201.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d426f0 [0201.069] NtQuerySystemTime (in: CurrentTime=0xd68fee8 | out: CurrentTime=0xd68fee8*=132471540689184000) returned 0x0 [0201.069] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x327f1051 [0201.069] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x71d2b5e [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x5f063df8 [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x909e88a [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x6e2da2e5 [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x10de4fcd [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x760daccb [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0xd470338 [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x667d8c57 [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x511e59a3 [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x3204221e [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x2e48242c [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x88fc4c0 [0201.070] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x6effc533 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x79c36033 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x7bb599a0 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x7c20d0ed [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x11aebe35 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x2153f9c7 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x6bfb9e3 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x7bb650ba [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x3eebdd07 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0xf365a7e [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x6c0c09db [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x6fb12386 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x388efabb [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x44e4631 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x79d6bd60 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0xf54aa1b [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x61ea4c16 [0201.071] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x64199ab8 [0201.072] RtlRandomEx (in: Seed=0xd68fee0 | out: Seed=0xd68fee0) returned 0x5343e232 [0201.092] ReadFile (in: hFile=0x2ca4, lpBuffer=0x14bcd870, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0xd68fedc, lpOverlapped=0x0 | out: lpBuffer=0x14bcd870*, lpNumberOfBytesRead=0xd68fedc*=0x109, lpOverlapped=0x0) returned 1 [0201.092] SetFilePointerEx (in: hFile=0x2ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.092] WriteFile (in: hFile=0x2ca4, lpBuffer=0x14bd1478*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0xd68fee0, lpOverlapped=0x0 | out: lpBuffer=0x14bd1478*, lpNumberOfBytesWritten=0xd68fee0*=0x109, lpOverlapped=0x0) returned 1 [0203.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0203.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0203.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0203.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bd1478) returned 1 [0203.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14bcd870) returned 1 [0203.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402e58) returned 1 [0203.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b55c8) returned 1 [0203.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e701b8 [0203.798] SetFilePointerEx (in: hFile=0x2ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.798] WriteFile (in: hFile=0x2ca4, lpBuffer=0x30bd258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd68ff54, lpOverlapped=0x0 | out: lpBuffer=0x30bd258*, lpNumberOfBytesWritten=0xd68ff54*=0x10c, lpOverlapped=0x0) returned 1 [0204.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0204.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0204.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0204.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0204.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0204.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0204.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42448) returned 1 [0204.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d80) returned 1 [0204.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8347f20 [0204.276] wcscpy (in: _Dest=0x8347f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" [0204.277] wcscat (in: _Dest=0x8347f20, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.f0dbec" [0204.277] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.f0dbec", NtPathName=0xd68fed8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3c470 [0204.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c470) returned 1 [0204.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8319188) returned 1 [0204.686] NtQueryInformationFile (in: FileHandle=0x2ca4, IoStatusBlock=0xd68feb0, FileInformation=0xd68feb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd68feb0, FileInformation=0xd68feb8) returned 0x0 [0204.686] NtSetInformationFile (FileHandle=0x2ca4, IoStatusBlock=0xd68feb0, FileInformation=0xd68feb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347f20) returned 1 [0207.849] FlushFileBuffers (hFile=0x2ca4) returned 1 [0207.852] CloseHandle (hObject=0x2ca4) returned 1 [0208.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404560 [0208.098] wcscpy (in: _Dest=0x8404560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" [0208.098] wcscat (in: _Dest=0x8404560, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\F0DBEC-Readme.txt" [0208.099] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\f0dbec-readme.txt")) returned 0xffffffff [0208.099] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11dc [0208.452] WriteFile (in: hFile=0x11dc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd68fefc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd68fefc*=0x70c, lpOverlapped=0x0) returned 1 [0209.433] CloseHandle (hObject=0x11dc) returned 1 [0209.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404560) returned 1 [0209.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84085e8) returned 1 Thread: id = 5695 os_tid = 0x20fc [0187.227] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json")) returned 0x2020 [0191.247] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0214.568] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c10 [0214.569] GetFileSizeEx (in: hFile=0x1c10, lpFileSize=0xe10f878 | out: lpFileSize=0xe10f878*=260) returned 1 [0214.569] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.569] ReadFile (in: hFile=0x1c10, lpBuffer=0xe10f884, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe10f860, lpOverlapped=0x0 | out: lpBuffer=0xe10f884*, lpNumberOfBytesRead=0xe10f860*=0x4, lpOverlapped=0x0) returned 1 [0214.571] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ed0 [0214.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f98 [0214.571] NtQuerySystemTime (in: CurrentTime=0xe10f800 | out: CurrentTime=0xe10f800*=132471540822876000) returned 0x0 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x1dad75f0 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x28e47d9c [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x55c5f8b2 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x5181867f [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x56a5f900 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x616f7c81 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x48cf23bc [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x460c3e9f [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x6e4e3337 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x6255700c [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x6bc5553f [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x4a08ca99 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x337f2f43 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x6c1b06bf [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x7bae05de [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x34e5e64d [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x4df11604 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x29bf2cff [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x7d147f43 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x691cc3c6 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x4e9f6ac8 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x5947723b [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x7529b9c6 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x6f673a00 [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x6295e26e [0214.572] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x4fce34da [0214.573] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x6924a849 [0214.573] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x8155d6c [0214.573] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x14d1e727 [0214.573] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x5121cd09 [0214.573] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0x1793f895 [0214.573] RtlRandomEx (in: Seed=0xe10f7f8 | out: Seed=0xe10f7f8) returned 0xf06a479 [0214.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83c0da8 [0214.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8397950 [0214.585] ReadFile (in: hFile=0x1c10, lpBuffer=0x83c0da8, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xe10f7f4, lpOverlapped=0x0 | out: lpBuffer=0x83c0da8*, lpNumberOfBytesRead=0xe10f7f4*=0x104, lpOverlapped=0x0) returned 1 [0214.585] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.585] WriteFile (in: hFile=0x1c10, lpBuffer=0x8397950*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xe10f7f8, lpOverlapped=0x0 | out: lpBuffer=0x8397950*, lpNumberOfBytesWritten=0xe10f7f8*=0x104, lpOverlapped=0x0) returned 1 [0219.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634a8 [0219.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064ad8 [0219.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ad8) returned 1 [0219.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8397950) returned 1 [0219.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83c0da8) returned 1 [0219.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403380) returned 1 [0219.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83e8ae0) returned 1 [0219.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ba0 [0219.781] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.781] WriteFile (in: hFile=0x1c10, lpBuffer=0x8406998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe10f86c, lpOverlapped=0x0 | out: lpBuffer=0x8406998*, lpNumberOfBytesWritten=0xe10f86c*=0x10c, lpOverlapped=0x0) returned 1 [0220.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 [0220.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bd0) returned 1 [0220.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ad8) returned 1 [0220.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ba0) returned 1 [0220.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634a8) returned 1 [0220.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ed0) returned 1 [0220.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f70) returned 1 [0220.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064010) returned 1 [0220.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403cd8 [0220.506] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" [0220.506] wcscat (in: _Dest=0x8403cd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.f0dbec" [0220.506] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0xe10f7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9f90 [0220.788] FlushFileBuffers (hFile=0x1c10) returned 1 [0220.937] CloseHandle (hObject=0x1c10) returned 1 [0220.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x84092a0 [0220.938] wcscpy (in: _Dest=0x84092a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\" [0220.938] wcscat (in: _Dest=0x84092a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\F0DBEC-Readme.txt" [0220.938] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0220.938] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c10 [0220.939] WriteFile (in: hFile=0x1c10, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe10f814, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe10f814*=0x70c, lpOverlapped=0x0) returned 1 [0220.941] CloseHandle (hObject=0x1c10) returned 1 [0220.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84092a0) returned 1 [0220.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408710) returned 1 Thread: id = 5696 os_tid = 0x2100 [0187.227] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json")) returned 0x2020 [0191.248] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", dwFileAttributes=0x20) returned 1 [0214.585] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19b0 [0214.587] GetFileSizeEx (in: hFile=0x19b0, lpFileSize=0xe1cfb18 | out: lpFileSize=0xe1cfb18*=387) returned 1 [0214.587] SetFilePointerEx (in: hFile=0x19b0, liDistanceToMove=0x17f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.587] ReadFile (in: hFile=0x19b0, lpBuffer=0xe1cfb24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe1cfb00, lpOverlapped=0x0 | out: lpBuffer=0xe1cfb24*, lpNumberOfBytesRead=0xe1cfb00*=0x4, lpOverlapped=0x0) returned 1 [0214.590] SetFilePointerEx (in: hFile=0x19b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f98 [0214.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063fc0 [0214.590] NtQuerySystemTime (in: CurrentTime=0xe1cfaa0 | out: CurrentTime=0xe1cfaa0*=132471540823032000) returned 0x0 [0214.590] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x17a792f6 [0214.590] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x21de51e8 [0214.590] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x615af3d9 [0214.590] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x42225e28 [0214.590] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x70ec1b6c [0214.590] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x349bdaa3 [0214.590] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x1a80e772 [0214.590] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x72267c46 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x403f0e5f [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x6b6fa3bf [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x18cc507d [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0xc66e75b [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x350bafa9 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x117613fa [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x6e7f6e2a [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x62e78304 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x2600de6f [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x4319b4f0 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x26293ea4 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x7ea56d15 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x797f4795 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x573296f1 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x50c7371 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x5b1117f5 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x108ed5d0 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x45169dc3 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x1af8d6af [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x45b2982d [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x2e98e2f9 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x68607919 [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0xbb8c96e [0214.591] RtlRandomEx (in: Seed=0xe1cfa98 | out: Seed=0xe1cfa98) returned 0x4a6c7ce8 [0214.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x839b558 [0214.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8388930 [0214.604] ReadFile (in: hFile=0x19b0, lpBuffer=0x839b558, nNumberOfBytesToRead=0x183, lpNumberOfBytesRead=0xe1cfa94, lpOverlapped=0x0 | out: lpBuffer=0x839b558*, lpNumberOfBytesRead=0xe1cfa94*=0x183, lpOverlapped=0x0) returned 1 [0214.604] SetFilePointerEx (in: hFile=0x19b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.604] WriteFile (in: hFile=0x19b0, lpBuffer=0x8388930*, nNumberOfBytesToWrite=0x183, lpNumberOfBytesWritten=0xe1cfa98, lpOverlapped=0x0 | out: lpBuffer=0x8388930*, lpNumberOfBytesWritten=0xe1cfa98*=0x183, lpOverlapped=0x0) returned 1 [0220.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0220.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0220.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0220.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8388930) returned 1 [0220.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x839b558) returned 1 [0220.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402d68) returned 1 [0220.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83e8930) returned 1 [0220.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68d00 [0220.062] SetFilePointerEx (in: hFile=0x19b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.062] WriteFile (in: hFile=0x19b0, lpBuffer=0x8406880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe1cfb0c, lpOverlapped=0x0 | out: lpBuffer=0x8406880*, lpNumberOfBytesWritten=0xe1cfb0c*=0x10c, lpOverlapped=0x0) returned 1 [0220.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 [0220.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692a0) returned 1 [0220.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0220.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d00) returned 1 [0220.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b730) returned 1 [0220.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f98) returned 1 [0220.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064038) returned 1 [0220.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80640d8) returned 1 [0220.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8df0 [0220.433] wcscpy (in: _Dest=0x3dd8df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" [0220.433] wcscat (in: _Dest=0x3dd8df0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.f0dbec" [0220.433] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.f0dbec", NtPathName=0xe1cfa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa220 [0220.654] FlushFileBuffers (hFile=0x19b0) returned 1 [0220.661] CloseHandle (hObject=0x19b0) returned 1 [0220.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x84024f0 [0220.805] wcscpy (in: _Dest=0x84024f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" [0220.805] wcscat (in: _Dest=0x84024f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\F0DBEC-Readme.txt" [0220.805] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\f0dbec-readme.txt")) returned 0xffffffff [0220.805] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.071] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe1cfab4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe1cfab4*=0x70c, lpOverlapped=0x0) returned 1 [0221.073] CloseHandle (hObject=0x1b48) returned 1 [0221.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84024f0) returned 1 [0221.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408838) returned 1 Thread: id = 5697 os_tid = 0x2104 [0187.228] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json")) returned 0x2020 [0191.249] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", dwFileAttributes=0x20) returned 1 [0210.760] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x103c [0210.761] GetFileSizeEx (in: hFile=0x103c, lpFileSize=0xcbff870 | out: lpFileSize=0xcbff870*=451) returned 1 [0210.761] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x1bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.761] ReadFile (in: hFile=0x103c, lpBuffer=0xcbff87c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcbff858, lpOverlapped=0x0 | out: lpBuffer=0xcbff87c*, lpNumberOfBytesRead=0xcbff858*=0x4, lpOverlapped=0x0) returned 1 [0210.763] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063750 [0210.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80637c8 [0210.763] NtQuerySystemTime (in: CurrentTime=0xcbff7f8 | out: CurrentTime=0xcbff7f8*=132471540784812000) returned 0x0 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x27baad69 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x4caad2a6 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x33c48649 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x4b915830 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x3f333de3 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x6585e53d [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0xa84d8c [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x17ef2b61 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x7b16a41b [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x337fabf6 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x6fde97c8 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x6e35c60d [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x56859500 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x19ee2394 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x72a80c2e [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x3011391a [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x2d347bfe [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x2d95a7d6 [0210.763] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x60518868 [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x777829e1 [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x462b1ef2 [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x6cd8a5c8 [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x64f751cf [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x3a7d4a8f [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x5c2e8e9a [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x2c53b2aa [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x22294f2 [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x1bfd300d [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x31686f47 [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x3de5d5e3 [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0x358f5f36 [0210.764] RtlRandomEx (in: Seed=0xcbff7f0 | out: Seed=0xcbff7f0) returned 0xa603d99 [0210.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148bc890 [0210.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148c0498 [0210.773] ReadFile (in: hFile=0x103c, lpBuffer=0x148bc890, nNumberOfBytesToRead=0x1c3, lpNumberOfBytesRead=0xcbff7ec, lpOverlapped=0x0 | out: lpBuffer=0x148bc890*, lpNumberOfBytesRead=0xcbff7ec*=0x1c3, lpOverlapped=0x0) returned 1 [0210.773] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.773] WriteFile (in: hFile=0x103c, lpBuffer=0x148c0498*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0xcbff7f0, lpOverlapped=0x0 | out: lpBuffer=0x148c0498*, lpNumberOfBytesWritten=0xcbff7f0*=0x1c3, lpOverlapped=0x0) returned 1 [0213.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42df8 [0213.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d58 [0213.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d58) returned 1 [0213.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148c0498) returned 1 [0213.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148bc890) returned 1 [0213.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84035d8) returned 1 [0213.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea5c0) returned 1 [0213.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68cd0 [0213.906] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.907] WriteFile (in: hFile=0x103c, lpBuffer=0x8405a48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcbff864, lpOverlapped=0x0 | out: lpBuffer=0x8405a48*, lpNumberOfBytesWritten=0xcbff864*=0x10c, lpOverlapped=0x0) returned 1 [0214.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405a48) returned 1 [0214.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0214.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d58) returned 1 [0214.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68cd0) returned 1 [0214.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0214.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063750) returned 1 [0214.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063700) returned 1 [0214.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063728) returned 1 [0214.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef8998 [0214.059] wcscpy (in: _Dest=0x3ef8998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" [0214.059] wcscat (in: _Dest=0x3ef8998, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.f0dbec" [0214.059] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.f0dbec", NtPathName=0xcbff7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d7a8 [0215.793] FlushFileBuffers (hFile=0x103c) returned 1 [0215.801] CloseHandle (hObject=0x103c) returned 1 [0216.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d88c8 [0216.039] wcscpy (in: _Dest=0x81d88c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" [0216.039] wcscat (in: _Dest=0x81d88c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\F0DBEC-Readme.txt" [0216.039] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\f0dbec-readme.txt")) returned 0xffffffff [0216.039] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.507] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xcbff80c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xcbff80c*=0x70c, lpOverlapped=0x0) returned 1 [0216.509] CloseHandle (hObject=0x10c4) returned 1 [0216.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d88c8) returned 1 [0216.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408960) returned 1 Thread: id = 5698 os_tid = 0x2108 [0187.228] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json")) returned 0x2020 [0191.251] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", dwFileAttributes=0x20) returned 1 [0214.605] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19a4 [0214.606] GetFileSizeEx (in: hFile=0x19a4, lpFileSize=0xe14fde0 | out: lpFileSize=0xe14fde0*=300) returned 1 [0214.606] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.606] ReadFile (in: hFile=0x19a4, lpBuffer=0xe14fdec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe14fdc8, lpOverlapped=0x0 | out: lpBuffer=0xe14fdec*, lpNumberOfBytesRead=0xe14fdc8*=0x4, lpOverlapped=0x0) returned 1 [0214.608] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063fc0 [0214.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064088 [0214.609] NtQuerySystemTime (in: CurrentTime=0xe14fd68 | out: CurrentTime=0xe14fd68*=132471540823188000) returned 0x0 [0214.609] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x33206e5b [0214.609] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x2abdebb4 [0214.609] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x7e6c9789 [0214.609] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x882258d [0214.609] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x4a2a6bd0 [0214.609] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x66237883 [0214.609] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x3eef66c6 [0214.609] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x32b3276e [0214.609] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x185e5438 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x1ffc7f30 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x49046b19 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0xf894807 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x56ac56b2 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x143c54a1 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x1c1670e6 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x67656f51 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x10fe7a06 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x78b54db4 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x37f1dcc3 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x390d155c [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x3f9e6ff8 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x569c49c6 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x7dd1c19f [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x68b3aea6 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x78ed8f54 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x57629b19 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x3a2418cf [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x6858ef43 [0214.610] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x68547db7 [0214.611] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x1dc7ebb1 [0214.611] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x66177bdf [0214.611] RtlRandomEx (in: Seed=0xe14fd60 | out: Seed=0xe14fd60) returned 0x2464a921 [0214.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x838c538 [0214.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ac6020 [0214.622] ReadFile (in: hFile=0x19a4, lpBuffer=0x838c538, nNumberOfBytesToRead=0x12c, lpNumberOfBytesRead=0xe14fd5c, lpOverlapped=0x0 | out: lpBuffer=0x838c538*, lpNumberOfBytesRead=0xe14fd5c*=0x12c, lpOverlapped=0x0) returned 1 [0214.622] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.622] WriteFile (in: hFile=0x19a4, lpBuffer=0x14ac6020*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0xe14fd60, lpOverlapped=0x0 | out: lpBuffer=0x14ac6020*, lpNumberOfBytesWritten=0xe14fd60*=0x12c, lpOverlapped=0x0) returned 1 [0219.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064ab0 [0219.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062210 [0219.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062210) returned 1 [0219.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ac6020) returned 1 [0219.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x838c538) returned 1 [0219.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402cf0) returned 1 [0219.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5388) returned 1 [0219.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69a20 [0219.785] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.785] WriteFile (in: hFile=0x19a4, lpBuffer=0x8406420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe14fdd4, lpOverlapped=0x0 | out: lpBuffer=0x8406420*, lpNumberOfBytesWritten=0xe14fdd4*=0x10c, lpOverlapped=0x0) returned 1 [0220.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406420) returned 1 [0220.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a50) returned 1 [0220.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062210) returned 1 [0220.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a20) returned 1 [0220.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ab0) returned 1 [0220.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063fc0) returned 1 [0220.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064060) returned 1 [0220.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064100) returned 1 [0220.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404a40 [0220.508] wcscpy (in: _Dest=0x8404a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" [0220.508] wcscat (in: _Dest=0x8404a40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.f0dbec" [0220.508] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.f0dbec", NtPathName=0xe14fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa220 [0220.809] FlushFileBuffers (hFile=0x19a4) returned 1 [0220.813] CloseHandle (hObject=0x19a4) returned 1 [0220.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8402740 [0220.878] wcscpy (in: _Dest=0x8402740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" [0220.878] wcscat (in: _Dest=0x8402740, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\F0DBEC-Readme.txt" [0220.878] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\f0dbec-readme.txt")) returned 0xffffffff [0220.878] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.102] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe14fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe14fd7c*=0x70c, lpOverlapped=0x0) returned 1 [0221.104] CloseHandle (hObject=0x1b48) returned 1 [0221.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402740) returned 1 [0221.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408a88) returned 1 Thread: id = 5699 os_tid = 0x2150 [0187.229] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json")) returned 0x2020 [0191.252] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0214.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf4 [0214.511] GetFileSizeEx (in: hFile=0x1bf4, lpFileSize=0xe6bfc00 | out: lpFileSize=0xe6bfc00*=203) returned 1 [0214.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063db8 [0214.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063de0 [0214.511] NtQuerySystemTime (in: CurrentTime=0xe6bfb88 | out: CurrentTime=0xe6bfb88*=132471540822252000) returned 0x0 [0214.511] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x371ca396 [0214.511] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x507d2d21 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x2a1c1be7 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x8027afe [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x6c45df7f [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x26774a43 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x61f7f4bb [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x7fff8de [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x4441aae5 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0xa7e9261 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x279ada74 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x1ab85493 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x42aad662 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x559f152b [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x3c1bc39e [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x4d3b61ef [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x3690f1d [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x30acd0d7 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x3f27f73b [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x1c5b1ff3 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x6bf02dff [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x2f4b83f7 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x4ec364bd [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x579086d2 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x5087f214 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x429cefb9 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x78148333 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x37c6c713 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x47f91f46 [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x5091722b [0214.512] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x66198646 [0214.513] RtlRandomEx (in: Seed=0xe6bfb80 | out: Seed=0xe6bfb80) returned 0x631c4e7c [0214.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0214.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8160890 [0214.524] ReadFile (in: hFile=0x1bf4, lpBuffer=0x815cc88, nNumberOfBytesToRead=0xcb, lpNumberOfBytesRead=0xe6bfb7c, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesRead=0xe6bfb7c*=0xcb, lpOverlapped=0x0) returned 1 [0214.526] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.527] WriteFile (in: hFile=0x1bf4, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0xe6bfb80, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0xe6bfb80*=0xcb, lpOverlapped=0x0) returned 1 [0215.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062918 [0215.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062850 [0215.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062850) returned 1 [0215.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0215.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0215.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84033f8) returned 1 [0215.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea3e8) returned 1 [0215.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fca8 [0215.746] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.746] WriteFile (in: hFile=0x1bf4, lpBuffer=0x8406bc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe6bfbf4, lpOverlapped=0x0 | out: lpBuffer=0x8406bc8*, lpNumberOfBytesWritten=0xe6bfbf4*=0x10c, lpOverlapped=0x0) returned 1 [0216.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406bc8) returned 1 [0216.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700f8) returned 1 [0216.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062850) returned 1 [0216.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fca8) returned 1 [0216.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062918) returned 1 [0216.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063db8) returned 1 [0216.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e58) returned 1 [0216.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ef8) returned 1 [0216.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84042f0 [0216.011] wcscpy (in: _Dest=0x84042f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" [0216.011] wcscat (in: _Dest=0x84042f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.f0dbec" [0216.011] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.f0dbec", NtPathName=0xe6bfb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa740 [0216.268] FlushFileBuffers (hFile=0x1bf4) returned 1 [0216.281] CloseHandle (hObject=0x1bf4) returned 1 [0216.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f09f0 [0216.361] wcscpy (in: _Dest=0x81f09f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" [0216.361] wcscat (in: _Dest=0x81f09f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\F0DBEC-Readme.txt" [0216.361] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\f0dbec-readme.txt")) returned 0xffffffff [0216.361] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12dc [0216.370] WriteFile (in: hFile=0x12dc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe6bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe6bfb9c*=0x70c, lpOverlapped=0x0) returned 1 [0216.384] CloseHandle (hObject=0x12dc) returned 1 [0216.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f09f0) returned 1 [0216.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408bb0) returned 1 Thread: id = 5700 os_tid = 0x21b8 [0187.229] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json")) returned 0x2020 [0191.253] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", dwFileAttributes=0x20) returned 1 [0214.527] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c04 [0214.528] GetFileSizeEx (in: hFile=0x1c04, lpFileSize=0xc6efd90 | out: lpFileSize=0xc6efd90*=523) returned 1 [0214.528] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x207, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.528] ReadFile (in: hFile=0x1c04, lpBuffer=0xc6efd9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc6efd78, lpOverlapped=0x0 | out: lpBuffer=0xc6efd9c*, lpNumberOfBytesRead=0xc6efd78*=0x4, lpOverlapped=0x0) returned 1 [0214.530] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063de0 [0214.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ea8 [0214.530] NtQuerySystemTime (in: CurrentTime=0xc6efd18 | out: CurrentTime=0xc6efd18*=132471540822408000) returned 0x0 [0214.530] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x34834d66 [0214.530] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x1c329e3 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0xaef20a0 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x7d8e5c9d [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x59ed7c63 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x5881a1a5 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x2fa40a15 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x4e26d442 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x86ee1ca [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x2c55c7b9 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x123c115f [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x599560ea [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x60130b46 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x2d7cb36f [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x6c200146 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x50f724b8 [0214.531] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x2cdc99ac [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x4682d46 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x3ade2c03 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x22aff2ba [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x5d08b171 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x3f0097eb [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x41af5028 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x6a992479 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x66c0f94 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x2d4d40c1 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x65d285d2 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x4a39306 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x603758ac [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x41099b0 [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x1265016a [0214.532] RtlRandomEx (in: Seed=0xc6efd10 | out: Seed=0xc6efd10) returned 0x56a54e97 [0214.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814dc68 [0214.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8151870 [0214.541] ReadFile (in: hFile=0x1c04, lpBuffer=0x814dc68, nNumberOfBytesToRead=0x20b, lpNumberOfBytesRead=0xc6efd0c, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesRead=0xc6efd0c*=0x20b, lpOverlapped=0x0) returned 1 [0214.542] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.542] WriteFile (in: hFile=0x1c04, lpBuffer=0x8151870*, nNumberOfBytesToWrite=0x20b, lpNumberOfBytesWritten=0xc6efd10, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesWritten=0xc6efd10*=0x20b, lpOverlapped=0x0) returned 1 [0215.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80629b8 [0215.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062c60 [0215.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062c60) returned 1 [0215.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0215.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0215.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403470) returned 1 [0215.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea430) returned 1 [0215.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e700c8 [0215.750] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.750] WriteFile (in: hFile=0x1c04, lpBuffer=0x8407028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc6efd84, lpOverlapped=0x0 | out: lpBuffer=0x8407028*, lpNumberOfBytesWritten=0xc6efd84*=0x10c, lpOverlapped=0x0) returned 1 [0216.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407028) returned 1 [0216.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70098) returned 1 [0216.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062c60) returned 1 [0216.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700c8) returned 1 [0216.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80629b8) returned 1 [0216.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063de0) returned 1 [0216.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e80) returned 1 [0216.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f20) returned 1 [0216.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404908 [0216.019] wcscpy (in: _Dest=0x8404908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" [0216.019] wcscat (in: _Dest=0x8404908, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.f0dbec" [0216.019] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.f0dbec", NtPathName=0xc6efd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9550 [0216.278] FlushFileBuffers (hFile=0x1c04) returned 1 [0216.282] CloseHandle (hObject=0x1c04) returned 1 [0216.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f01d8 [0216.365] wcscpy (in: _Dest=0x81f01d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" [0216.365] wcscat (in: _Dest=0x81f01d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\F0DBEC-Readme.txt" [0216.365] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\f0dbec-readme.txt")) returned 0xffffffff [0216.365] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17fc [0216.371] WriteFile (in: hFile=0x17fc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc6efd2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc6efd2c*=0x70c, lpOverlapped=0x0) returned 1 [0216.386] CloseHandle (hObject=0x17fc) returned 1 [0216.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f01d8) returned 1 [0216.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408cd8) returned 1 Thread: id = 5701 os_tid = 0x21c8 [0187.229] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json")) returned 0x2020 [0191.255] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0214.550] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bec [0214.551] GetFileSizeEx (in: hFile=0x1bec, lpFileSize=0xe2cf8e0 | out: lpFileSize=0xe2cf8e0*=177) returned 1 [0214.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ea8 [0214.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ed0 [0214.551] NtQuerySystemTime (in: CurrentTime=0xe2cf868 | out: CurrentTime=0xe2cf868*=132471540822720000) returned 0x0 [0214.551] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x326beadb [0214.551] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x6e94eb47 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x4f6fbae5 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x147fa184 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x63804864 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x1e259d1b [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x712658 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x43d3b40e [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x2efa0129 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x74697c56 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x45765cfd [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x46e2a21d [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x250286c6 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x3e8065d6 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x251fe1d1 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0xe329a4d [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x48b8fe72 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x5d6994e2 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x781063f [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x3edeb2f3 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x2f703753 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x62fe1bb5 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x277f45e9 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x348f0cfc [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x235db809 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x20c3bb5c [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x79f611b7 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x1bfa3bc9 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x38f9f791 [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x1323988c [0214.552] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x1c90ca90 [0214.553] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x21e17742 [0214.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83c49b0 [0214.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83bd1a0 [0214.565] ReadFile (in: hFile=0x1bec, lpBuffer=0x83c49b0, nNumberOfBytesToRead=0xb1, lpNumberOfBytesRead=0xe2cf85c, lpOverlapped=0x0 | out: lpBuffer=0x83c49b0*, lpNumberOfBytesRead=0xe2cf85c*=0xb1, lpOverlapped=0x0) returned 1 [0214.568] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.568] WriteFile (in: hFile=0x1bec, lpBuffer=0x83bd1a0*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0xe2cf860, lpOverlapped=0x0 | out: lpBuffer=0x83bd1a0*, lpNumberOfBytesWritten=0xe2cf860*=0xb1, lpOverlapped=0x0) returned 1 [0219.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80633b8 [0219.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80633e0 [0219.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80633e0) returned 1 [0219.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83bd1a0) returned 1 [0219.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83c49b0) returned 1 [0219.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402930) returned 1 [0219.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea508) returned 1 [0219.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68d00 [0219.377] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.377] WriteFile (in: hFile=0x1bec, lpBuffer=0x8406880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe2cf8d4, lpOverlapped=0x0 | out: lpBuffer=0x8406880*, lpNumberOfBytesWritten=0xe2cf8d4*=0x10c, lpOverlapped=0x0) returned 1 [0219.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 [0219.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692a0) returned 1 [0219.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80633e0) returned 1 [0219.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d00) returned 1 [0219.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80633b8) returned 1 [0219.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ea8) returned 1 [0219.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f48) returned 1 [0219.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063fe8) returned 1 [0219.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84052c8 [0219.884] wcscpy (in: _Dest=0x84052c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" [0219.884] wcscat (in: _Dest=0x84052c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.f0dbec" [0219.884] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.f0dbec", NtPathName=0xe2cf858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0219.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa220 [0220.474] FlushFileBuffers (hFile=0x1bec) returned 1 [0220.479] CloseHandle (hObject=0x1bec) returned 1 [0220.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ec8c8 [0220.622] wcscpy (in: _Dest=0x81ec8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" [0220.622] wcscat (in: _Dest=0x81ec8c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\F0DBEC-Readme.txt" [0220.622] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\f0dbec-readme.txt")) returned 0xffffffff [0220.622] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a60 [0220.790] WriteFile (in: hFile=0x2a60, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe2cf87c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe2cf87c*=0x70c, lpOverlapped=0x0) returned 1 [0221.120] CloseHandle (hObject=0x2a60) returned 1 [0221.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec8c8) returned 1 [0221.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408e00) returned 1 Thread: id = 5702 os_tid = 0x21dc [0187.230] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json")) returned 0x2020 [0191.267] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0214.945] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf8 [0214.946] GetFileSizeEx (in: hFile=0x1bf8, lpFileSize=0xd99f788 | out: lpFileSize=0xd99f788*=150) returned 1 [0214.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a60 [0214.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064998 [0214.946] NtQuerySystemTime (in: CurrentTime=0xd99f710 | out: CurrentTime=0xd99f710*=132471540826620000) returned 0x0 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x851759b [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x13d86279 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x7b631bbb [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x6c230e7a [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x3164a7b2 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x1703ed5c [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x61b94f48 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x4ae33c48 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x78d01d3c [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x165f4a85 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x22202370 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x8f867fd [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x15fe34b5 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x14d5c152 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0xe391761 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x7c2318eb [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x6d4cc266 [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x3625131d [0214.946] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x5a63a046 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x419ae4 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x2a9e3a32 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x24a8b812 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x696c7bd8 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0xc599905 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x24febacb [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x6eb40129 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x316a87c7 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x667c5ffb [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x408379 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x51ed3617 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x3f788728 [0214.947] RtlRandomEx (in: Seed=0xd99f708 | out: Seed=0xd99f708) returned 0x350d29a4 [0214.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8353d48 [0214.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8357950 [0214.957] ReadFile (in: hFile=0x1bf8, lpBuffer=0x8353d48, nNumberOfBytesToRead=0x96, lpNumberOfBytesRead=0xd99f704, lpOverlapped=0x0 | out: lpBuffer=0x8353d48*, lpNumberOfBytesRead=0xd99f704*=0x96, lpOverlapped=0x0) returned 1 [0214.960] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.960] WriteFile (in: hFile=0x1bf8, lpBuffer=0x8357950*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0xd99f708, lpOverlapped=0x0 | out: lpBuffer=0x8357950*, lpNumberOfBytesWritten=0xd99f708*=0x96, lpOverlapped=0x0) returned 1 [0219.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064790 [0219.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b60 [0219.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b60) returned 1 [0219.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8357950) returned 1 [0219.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8353d48) returned 1 [0219.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e683a8) returned 1 [0219.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4578) returned 1 [0219.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68ca0 [0219.837] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.837] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd99f77c, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0xd99f77c*=0x10c, lpOverlapped=0x0) returned 1 [0220.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0220.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69960) returned 1 [0220.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b60) returned 1 [0220.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ca0) returned 1 [0220.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064790) returned 1 [0220.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a60) returned 1 [0220.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064970) returned 1 [0220.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a88) returned 1 [0220.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4620 [0220.527] wcscpy (in: _Dest=0x81f4620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" [0220.528] wcscat (in: _Dest=0x81f4620, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.f0dbec" [0220.528] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.f0dbec", NtPathName=0xd99f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef92c0 [0220.829] FlushFileBuffers (hFile=0x1bf8) returned 1 [0220.964] CloseHandle (hObject=0x1bf8) returned 1 [0220.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a2500 [0220.966] wcscpy (in: _Dest=0x148a2500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\" [0220.966] wcscat (in: _Dest=0x148a2500, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\F0DBEC-Readme.txt" [0220.966] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\f0dbec-readme.txt")) returned 0xffffffff [0220.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0220.967] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd99f724, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd99f724*=0x70c, lpOverlapped=0x0) returned 1 [0220.968] CloseHandle (hObject=0x1bf8) returned 1 [0220.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2500) returned 1 [0220.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8408f28) returned 1 Thread: id = 5703 os_tid = 0x21ec [0187.230] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json")) returned 0x2020 [0191.279] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0214.783] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19c8 [0214.784] GetFileSizeEx (in: hFile=0x19c8, lpFileSize=0xea3f850 | out: lpFileSize=0xea3f850*=180) returned 1 [0214.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80644c0 [0214.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064538 [0214.785] NtQuerySystemTime (in: CurrentTime=0xea3f7d8 | out: CurrentTime=0xea3f7d8*=132471540825060000) returned 0x0 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x230fec8d [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x518d29cd [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x6917c93f [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x259f419a [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x501cda8f [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x71d7605f [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x57d22d59 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x69d18008 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x21ab8c2 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x52e71837 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x9d1d541 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x3cf1d997 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x10cd7daa [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x3e91f382 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x51199836 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x55fbac22 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x47b9c9e1 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x64579713 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x4dd8f0ce [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x2a38d827 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x72e8ce53 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x1e83faae [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x2e8bd275 [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x28e8617f [0214.785] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x61c84206 [0214.786] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x4c334bec [0214.786] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0xe0a234a [0214.786] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x1c53d947 [0214.786] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x4173948b [0214.786] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0xd43a5c7 [0214.786] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0xf309d95 [0214.786] RtlRandomEx (in: Seed=0xea3f7d0 | out: Seed=0xea3f7d0) returned 0x68f66085 [0214.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828fc68 [0214.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8293870 [0214.798] ReadFile (in: hFile=0x19c8, lpBuffer=0x828fc68, nNumberOfBytesToRead=0xb4, lpNumberOfBytesRead=0xea3f7cc, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesRead=0xea3f7cc*=0xb4, lpOverlapped=0x0) returned 1 [0214.801] SetFilePointerEx (in: hFile=0x19c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.801] WriteFile (in: hFile=0x19c8, lpBuffer=0x8293870*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0xea3f7d0, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesWritten=0xea3f7d0*=0xb4, lpOverlapped=0x0) returned 1 [0219.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d68 [0219.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c00 [0219.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c00) returned 1 [0219.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8293870) returned 1 [0219.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828fc68) returned 1 [0219.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 [0219.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4fe0) returned 1 [0219.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69450 [0219.812] SetFilePointerEx (in: hFile=0x19c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.812] WriteFile (in: hFile=0x19c8, lpBuffer=0x8405fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xea3f844, lpOverlapped=0x0 | out: lpBuffer=0x8405fc0*, lpNumberOfBytesWritten=0xea3f844*=0x10c, lpOverlapped=0x0) returned 1 [0220.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405fc0) returned 1 [0220.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69480) returned 1 [0220.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c00) returned 1 [0220.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69450) returned 1 [0220.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d68) returned 1 [0220.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80644c0) returned 1 [0220.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064510) returned 1 [0220.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80645b0) returned 1 [0220.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404b78 [0220.319] wcscpy (in: _Dest=0x8404b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" [0220.319] wcscat (in: _Dest=0x8404b78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.f0dbec" [0220.319] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0xea3f7c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8ee8 [0220.571] FlushFileBuffers (hFile=0x19c8) returned 1 [0220.587] CloseHandle (hObject=0x19c8) returned 1 [0220.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ecd68 [0220.721] wcscpy (in: _Dest=0x81ecd68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\" [0220.721] wcscat (in: _Dest=0x81ecd68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\F0DBEC-Readme.txt" [0220.721] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0220.721] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0220.970] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xea3f7ec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xea3f7ec*=0x70c, lpOverlapped=0x0) returned 1 [0220.971] CloseHandle (hObject=0x1bf8) returned 1 [0220.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecd68) returned 1 [0220.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8409050) returned 1 Thread: id = 5704 os_tid = 0x2240 [0187.231] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0191.291] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0214.802] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b54 [0214.803] GetFileSizeEx (in: hFile=0x1b54, lpFileSize=0xeb4fea8 | out: lpFileSize=0xeb4fea8*=187) returned 1 [0214.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064538 [0214.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064560 [0214.803] NtQuerySystemTime (in: CurrentTime=0xeb4fe30 | out: CurrentTime=0xeb4fe30*=132471540825216000) returned 0x0 [0214.803] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x4eb89469 [0214.803] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x1f5716c7 [0214.803] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0xdd4a790 [0214.803] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x281f6360 [0214.803] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x68f885ab [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x7da34984 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x321dbe1f [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x8f4ecc4 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x78ac164 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0xa84bb30 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x5746a0cb [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x4b5ba121 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x5d3f59a9 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x7a9151a6 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x7483f7bd [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x47238575 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x1feb5b4a [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x21037810 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x70ff6fcd [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x5db077f7 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x616336aa [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x2e062f64 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x36a8ec3e [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x6757fc88 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x6ea5262a [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x546f9a56 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x21c7745b [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x68c217bf [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x3cb49f87 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x42d7ecc [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x3bd03e25 [0214.804] RtlRandomEx (in: Seed=0xeb4fe28 | out: Seed=0xeb4fe28) returned 0x54665c8f [0214.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8297478 [0214.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0214.814] ReadFile (in: hFile=0x1b54, lpBuffer=0x8297478, nNumberOfBytesToRead=0xbb, lpNumberOfBytesRead=0xeb4fe24, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesRead=0xeb4fe24*=0xbb, lpOverlapped=0x0) returned 1 [0214.816] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.816] WriteFile (in: hFile=0x1b54, lpBuffer=0x829b080*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0xeb4fe28, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesWritten=0xeb4fe28*=0xbb, lpOverlapped=0x0) returned 1 [0219.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062a58 [0219.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80628f0 [0219.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80628f0) returned 1 [0219.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0219.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0219.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 [0219.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4f50) returned 1 [0219.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e694b0 [0219.815] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.815] WriteFile (in: hFile=0x1b54, lpBuffer=0x8405c78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xeb4fe9c, lpOverlapped=0x0 | out: lpBuffer=0x8405c78*, lpNumberOfBytesWritten=0xeb4fe9c*=0x10c, lpOverlapped=0x0) returned 1 [0220.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405c78) returned 1 [0220.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e20) returned 1 [0220.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80628f0) returned 1 [0220.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694b0) returned 1 [0220.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a58) returned 1 [0220.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064538) returned 1 [0220.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80645d8) returned 1 [0220.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064678) returned 1 [0220.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x84047d0 [0220.322] wcscpy (in: _Dest=0x84047d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" [0220.323] wcscat (in: _Dest=0x84047d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.f0dbec" [0220.323] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0xeb4fe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef8c58 [0220.578] FlushFileBuffers (hFile=0x1b54) returned 1 [0220.594] CloseHandle (hObject=0x1b54) returned 1 [0220.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f3d98 [0220.726] wcscpy (in: _Dest=0x81f3d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\" [0220.726] wcscat (in: _Dest=0x81f3d98, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0220.726] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0220.726] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0220.979] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xeb4fe44, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xeb4fe44*=0x70c, lpOverlapped=0x0) returned 1 [0220.981] CloseHandle (hObject=0x1bf8) returned 1 [0220.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3d98) returned 1 [0220.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8409178) returned 1 Thread: id = 5705 os_tid = 0x2244 [0187.231] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0191.396] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0214.750] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b50 [0214.751] GetFileSizeEx (in: hFile=0x1b50, lpFileSize=0xe18f8d0 | out: lpFileSize=0xe18f8d0*=198) returned 1 [0214.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064448 [0214.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064380 [0214.751] NtQuerySystemTime (in: CurrentTime=0xe18f858 | out: CurrentTime=0xe18f858*=132471540824748000) returned 0x0 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x242b326c [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x867cb9e [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0xf33104a [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x7b3f3a51 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x6b89f898 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x1d2bf486 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x6d91ea58 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x48182774 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x5e38ab8e [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x1d8f0b43 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x31948ef4 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0xa052c18 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x19509bc7 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x3c9d3b02 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x164d5e47 [0214.751] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0xf486430 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x323cd347 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x709faf76 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x1b8540d0 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x2cac9c71 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x3d5c5f1a [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x113e57c4 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x6ce8f461 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x3d3ac5a6 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x1ead365b [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x1576edae [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x181a4987 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x5e1a9e83 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x2923437f [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x6998537f [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x56f655e5 [0214.752] RtlRandomEx (in: Seed=0xe18f850 | out: Seed=0xe18f850) returned 0x2ed91851 [0214.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14afe498 [0214.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14b020a0 [0214.764] ReadFile (in: hFile=0x1b50, lpBuffer=0x14afe498, nNumberOfBytesToRead=0xc6, lpNumberOfBytesRead=0xe18f84c, lpOverlapped=0x0 | out: lpBuffer=0x14afe498*, lpNumberOfBytesRead=0xe18f84c*=0xc6, lpOverlapped=0x0) returned 1 [0214.767] SetFilePointerEx (in: hFile=0x1b50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.767] WriteFile (in: hFile=0x1b50, lpBuffer=0x14b020a0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0xe18f850, lpOverlapped=0x0 | out: lpBuffer=0x14b020a0*, lpNumberOfBytesWritten=0xe18f850*=0xc6, lpOverlapped=0x0) returned 1 [0219.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063db8 [0219.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062918 [0219.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062918) returned 1 [0219.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b020a0) returned 1 [0219.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14afe498) returned 1 [0219.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403128) returned 1 [0219.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d50b8) returned 1 [0219.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e698d0 [0219.807] SetFilePointerEx (in: hFile=0x1b50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.807] WriteFile (in: hFile=0x1b50, lpBuffer=0x8405d90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe18f8c4, lpOverlapped=0x0 | out: lpBuffer=0x8405d90*, lpNumberOfBytesWritten=0xe18f8c4*=0x10c, lpOverlapped=0x0) returned 1 [0220.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405d90) returned 1 [0220.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e50) returned 1 [0220.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062918) returned 1 [0220.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698d0) returned 1 [0220.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063db8) returned 1 [0220.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064448) returned 1 [0220.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643f8) returned 1 [0220.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80644e8) returned 1 [0220.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8404de8 [0220.312] wcscpy (in: _Dest=0x8404de8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" [0220.313] wcscat (in: _Dest=0x8404de8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.f0dbec" [0220.313] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0xe18f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3efa368 [0220.565] FlushFileBuffers (hFile=0x1b50) returned 1 [0220.576] CloseHandle (hObject=0x1b50) returned 1 [0220.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f3ed0 [0220.717] wcscpy (in: _Dest=0x81f3ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\" [0220.717] wcscat (in: _Dest=0x81f3ed0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0220.717] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0220.717] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1480 [0220.931] WriteFile (in: hFile=0x1480, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe18f86c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe18f86c*=0x70c, lpOverlapped=0x0) returned 1 [0220.932] CloseHandle (hObject=0x1480) returned 1 [0220.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3ed0) returned 1 [0220.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84092a0) returned 1 Thread: id = 5706 os_tid = 0x2248 [0187.232] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json")) returned 0x2020 [0191.397] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0214.848] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fdc [0214.849] GetFileSizeEx (in: hFile=0x1fdc, lpFileSize=0xeacf910 | out: lpFileSize=0xeacf910*=175) returned 1 [0214.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063570 [0214.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80637a0 [0214.849] NtQuerySystemTime (in: CurrentTime=0xeacf898 | out: CurrentTime=0xeacf898*=132471540825684000) returned 0x0 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x4b5bf792 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x5b0404c3 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x7a1eddfd [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x5a71ef9d [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x5365d92f [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x4ba2e612 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x7fdcc23c [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x602766c8 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x686c663f [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x687cf9cc [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x22bfc24e [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x28f4c53f [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x18139af1 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x1d18ff76 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x6954dd5e [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x1f094881 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x2b640cc7 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x40871df8 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x6484a1c2 [0214.849] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x461b691f [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x31de1a0f [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x2a9104a [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x721abac3 [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x13fee928 [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x282e96a7 [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x775ff8d1 [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x74efcde7 [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x72f719bf [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x3e2c2b34 [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x225a85c5 [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x4398c158 [0214.850] RtlRandomEx (in: Seed=0xeacf890 | out: Seed=0xeacf890) returned 0x60655982 [0214.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82adca8 [0214.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0214.860] ReadFile (in: hFile=0x1fdc, lpBuffer=0x82adca8, nNumberOfBytesToRead=0xaf, lpNumberOfBytesRead=0xeacf88c, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesRead=0xeacf88c*=0xaf, lpOverlapped=0x0) returned 1 [0214.863] SetFilePointerEx (in: hFile=0x1fdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.863] WriteFile (in: hFile=0x1fdc, lpBuffer=0x82b18b0*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0xeacf890, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesWritten=0xeacf890*=0xaf, lpOverlapped=0x0) returned 1 [0219.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062a30 [0219.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d18 [0219.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d18) returned 1 [0219.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0219.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82adca8) returned 1 [0219.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 [0219.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4da0) returned 1 [0219.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68ee0 [0219.823] SetFilePointerEx (in: hFile=0x1fdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.824] WriteFile (in: hFile=0x1fdc, lpBuffer=0x8406538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xeacf904, lpOverlapped=0x0 | out: lpBuffer=0x8406538*, lpNumberOfBytesWritten=0xeacf904*=0x10c, lpOverlapped=0x0) returned 1 [0220.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406538) returned 1 [0220.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68dc0) returned 1 [0220.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d18) returned 1 [0220.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ee0) returned 1 [0220.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a30) returned 1 [0220.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063570) returned 1 [0220.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063778) returned 1 [0220.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639a8) returned 1 [0220.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405058 [0220.334] wcscpy (in: _Dest=0x8405058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" [0220.334] wcscat (in: _Dest=0x8405058, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.f0dbec" [0220.334] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0xeacf888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9a70 [0220.589] FlushFileBuffers (hFile=0x1fdc) returned 1 [0220.604] CloseHandle (hObject=0x1fdc) returned 1 [0220.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81eb898 [0220.732] wcscpy (in: _Dest=0x81eb898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\" [0220.732] wcscat (in: _Dest=0x81eb898, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\F0DBEC-Readme.txt" [0220.732] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0220.732] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0220.993] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xeacf8ac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xeacf8ac*=0x70c, lpOverlapped=0x0) returned 1 [0220.995] CloseHandle (hObject=0x1b48) returned 1 [0220.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb898) returned 1 [0220.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84093c8) returned 1 Thread: id = 5707 os_tid = 0x224c [0187.232] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json")) returned 0x2020 [0191.397] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0214.718] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b48 [0214.719] GetFileSizeEx (in: hFile=0x1b48, lpFileSize=0xee9f948 | out: lpFileSize=0xee9f948*=281) returned 1 [0214.719] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.719] ReadFile (in: hFile=0x1b48, lpBuffer=0xee9f954, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xee9f930, lpOverlapped=0x0 | out: lpBuffer=0xee9f954*, lpNumberOfBytesRead=0xee9f930*=0x4, lpOverlapped=0x0) returned 1 [0214.721] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064358 [0214.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064290 [0214.722] NtQuerySystemTime (in: CurrentTime=0xee9f8d0 | out: CurrentTime=0xee9f8d0*=132471540824436000) returned 0x0 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x47a35e01 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x4e1b6b55 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x6a9967ff [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x904523c [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x1eca2150 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x74c69f65 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x268ac699 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x9367bdb [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x6bf13509 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x1e88e411 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x69c32c3f [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0xc732d81 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x3fb924a2 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x65f90be3 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x79aa81fa [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x7179a18a [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x340890b [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x2a654790 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x6c7aaa69 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x79583a0e [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x1d472471 [0214.722] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x77d22d89 [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x2468e804 [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x19b7aa01 [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x2244201f [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x439931 [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x385a3dd3 [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x1735bd91 [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x6ba17ddd [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x7c05d3b7 [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x579ed0e2 [0214.723] RtlRandomEx (in: Seed=0xee9f8c8 | out: Seed=0xee9f8c8) returned 0x290bc7bc [0214.733] ReadFile (in: hFile=0x1b48, lpBuffer=0x14aef478, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xee9f8c4, lpOverlapped=0x0 | out: lpBuffer=0x14aef478*, lpNumberOfBytesRead=0xee9f8c4*=0x119, lpOverlapped=0x0) returned 1 [0214.733] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.733] WriteFile (in: hFile=0x1b48, lpBuffer=0x14af3080*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xee9f8c8, lpOverlapped=0x0 | out: lpBuffer=0x14af3080*, lpNumberOfBytesWritten=0xee9f8c8*=0x119, lpOverlapped=0x0) returned 1 [0219.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d90 [0219.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063cc8 [0219.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063cc8) returned 1 [0219.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14af3080) returned 1 [0219.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aef478) returned 1 [0219.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402f48) returned 1 [0219.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4458) returned 1 [0219.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69c30 [0219.797] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.797] WriteFile (in: hFile=0x1b48, lpBuffer=0x8406ab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xee9f93c, lpOverlapped=0x0 | out: lpBuffer=0x8406ab0*, lpNumberOfBytesWritten=0xee9f93c*=0x10c, lpOverlapped=0x0) returned 1 [0220.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ab0) returned 1 [0220.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0220.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063cc8) returned 1 [0220.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c30) returned 1 [0220.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d90) returned 1 [0220.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064358) returned 1 [0220.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064308) returned 1 [0220.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643a8) returned 1 [0220.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4140 [0220.517] wcscpy (in: _Dest=0x81f4140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" [0220.517] wcscat (in: _Dest=0x81f4140, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.f0dbec" [0220.517] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.f0dbec", NtPathName=0xee9f8c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9d00 [0220.818] FlushFileBuffers (hFile=0x1b48) returned 1 [0220.987] CloseHandle (hObject=0x1b48) returned 1 [0220.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a3658 [0220.988] wcscpy (in: _Dest=0x148a3658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\" [0220.988] wcscat (in: _Dest=0x148a3658, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\F0DBEC-Readme.txt" [0220.988] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\f0dbec-readme.txt")) returned 0xffffffff [0220.989] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0220.990] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xee9f8e4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xee9f8e4*=0x70c, lpOverlapped=0x0) returned 1 [0220.992] CloseHandle (hObject=0x1b48) returned 1 [0220.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a3658) returned 1 [0220.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84094f0) returned 1 Thread: id = 5708 os_tid = 0x2250 [0187.233] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json")) returned 0x2020 [0191.397] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", dwFileAttributes=0x20) returned 1 [0214.702] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe28 [0214.704] GetFileSizeEx (in: hFile=0xe28, lpFileSize=0xe30f9f8 | out: lpFileSize=0xe30f9f8*=334) returned 1 [0214.704] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x14a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.704] ReadFile (in: hFile=0xe28, lpBuffer=0xe30fa04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe30f9e0, lpOverlapped=0x0 | out: lpBuffer=0xe30fa04*, lpNumberOfBytesRead=0xe30f9e0*=0x4, lpOverlapped=0x0) returned 1 [0214.706] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064268 [0214.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064358 [0214.706] NtQuerySystemTime (in: CurrentTime=0xe30f980 | out: CurrentTime=0xe30f980*=132471540824280000) returned 0x0 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x2c7fa957 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x2540a9cd [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x35857cb5 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x1c5d5810 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0xeffc3d6 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x6851cf98 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x1046e347 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x2bc04bda [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x27d63d20 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x7472dfc2 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x390e8823 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x36feb31d [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x382f3f2c [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x1478b5fa [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x499dd3f9 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x44e5e025 [0214.706] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x6e68da8d [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x349848e [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x63ca55e6 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x52364396 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x4ac2caf6 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x4e352224 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x36089da0 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x782cf746 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x558de600 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x1b408101 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0xd2d71c6 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x7bcc8597 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x23d2b467 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x31c6355 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x47971cd4 [0214.707] RtlRandomEx (in: Seed=0xe30f978 | out: Seed=0xe30f978) returned 0x6ad2b9c9 [0214.718] ReadFile (in: hFile=0xe28, lpBuffer=0x14ae7c68, nNumberOfBytesToRead=0x14e, lpNumberOfBytesRead=0xe30f974, lpOverlapped=0x0 | out: lpBuffer=0x14ae7c68*, lpNumberOfBytesRead=0xe30f974*=0x14e, lpOverlapped=0x0) returned 1 [0214.718] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.718] WriteFile (in: hFile=0xe28, lpBuffer=0x14aeb870*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xe30f978, lpOverlapped=0x0 | out: lpBuffer=0x14aeb870*, lpNumberOfBytesWritten=0xe30f978*=0x14e, lpOverlapped=0x0) returned 1 [0219.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062878 [0219.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062990 [0219.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062990) returned 1 [0219.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aeb870) returned 1 [0219.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae7c68) returned 1 [0219.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402ed0) returned 1 [0219.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5148) returned 1 [0219.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e691b0 [0219.798] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.798] WriteFile (in: hFile=0xe28, lpBuffer=0x8406ce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe30f9ec, lpOverlapped=0x0 | out: lpBuffer=0x8406ce0*, lpNumberOfBytesWritten=0xe30f9ec*=0x10c, lpOverlapped=0x0) returned 1 [0220.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ce0) returned 1 [0220.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69780) returned 1 [0220.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062990) returned 1 [0220.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0220.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062878) returned 1 [0220.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064268) returned 1 [0220.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064330) returned 1 [0220.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80643d0) returned 1 [0220.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f43b0 [0220.524] wcscpy (in: _Dest=0x81f43b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" [0220.524] wcscat (in: _Dest=0x81f43b0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.f0dbec" [0220.524] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.f0dbec", NtPathName=0xe30f970, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa888 [0220.824] FlushFileBuffers (hFile=0xe28) returned 1 [0220.827] CloseHandle (hObject=0xe28) returned 1 [0220.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8401e00 [0220.881] wcscpy (in: _Dest=0x8401e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\" [0220.881] wcscat (in: _Dest=0x8401e00, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\F0DBEC-Readme.txt" [0220.882] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\f0dbec-readme.txt")) returned 0xffffffff [0220.882] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2af4 [0220.901] WriteFile (in: hFile=0x2af4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe30f994, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe30f994*=0x70c, lpOverlapped=0x0) returned 1 [0220.911] CloseHandle (hObject=0x2af4) returned 1 [0220.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401e00) returned 1 [0220.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8409618) returned 1 Thread: id = 5709 os_tid = 0x2254 [0187.233] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json")) returned 0x2020 [0191.398] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0214.688] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1480 [0214.689] GetFileSizeEx (in: hFile=0x1480, lpFileSize=0xec4ff08 | out: lpFileSize=0xec4ff08*=197) returned 1 [0214.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80641a0 [0214.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064268 [0214.689] NtQuerySystemTime (in: CurrentTime=0xec4fe90 | out: CurrentTime=0xec4fe90*=132471540824124000) returned 0x0 [0214.689] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x439ed47 [0214.689] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x2a3f6705 [0214.689] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x7983fdf1 [0214.689] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x1b4ea08b [0214.689] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x74fc45d3 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x1fef2ac6 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x99b91c2 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x547d29bf [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x21273bf [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x4191341a [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x1357d985 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x783e66ba [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x750cf738 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x595051e2 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x7bc5f589 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x69cdb4df [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x642adfa9 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x77b924be [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x2d8402b5 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x74b824c0 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0xf348b5d [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x41a256f6 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x1f5a81bd [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x5c070ddc [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x3b4cc83d [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x4778aac4 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x6b44caff [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x44d4adc7 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x270627c2 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0xca96b7e [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x4b0d6a33 [0214.690] RtlRandomEx (in: Seed=0xec4fe88 | out: Seed=0xec4fe88) returned 0x6aef197f [0214.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ae0458 [0214.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ae4060 [0214.700] ReadFile (in: hFile=0x1480, lpBuffer=0x14ae0458, nNumberOfBytesToRead=0xc5, lpNumberOfBytesRead=0xec4fe84, lpOverlapped=0x0 | out: lpBuffer=0x14ae0458*, lpNumberOfBytesRead=0xec4fe84*=0xc5, lpOverlapped=0x0) returned 1 [0214.702] SetFilePointerEx (in: hFile=0x1480, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.702] WriteFile (in: hFile=0x1480, lpBuffer=0x14ae4060*, nNumberOfBytesToWrite=0xc5, lpNumberOfBytesWritten=0xec4fe88, lpOverlapped=0x0 | out: lpBuffer=0x14ae4060*, lpNumberOfBytesWritten=0xec4fe88*=0xc5, lpOverlapped=0x0) returned 1 [0219.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062c60 [0219.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e30 [0219.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e30) returned 1 [0219.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae4060) returned 1 [0219.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae0458) returned 1 [0219.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402c78) returned 1 [0219.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d44e8) returned 1 [0219.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0219.793] SetFilePointerEx (in: hFile=0x1480, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.794] WriteFile (in: hFile=0x1480, lpBuffer=0x8407140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xec4fefc, lpOverlapped=0x0 | out: lpBuffer=0x8407140*, lpNumberOfBytesWritten=0xec4fefc*=0x10c, lpOverlapped=0x0) returned 1 [0220.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407140) returned 1 [0220.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c00) returned 1 [0220.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e30) returned 1 [0220.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0220.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062c60) returned 1 [0220.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641a0) returned 1 [0220.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064240) returned 1 [0220.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80642e0) returned 1 [0220.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4008 [0220.514] wcscpy (in: _Dest=0x81f4008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" [0220.514] wcscat (in: _Dest=0x81f4008, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.f0dbec" [0220.514] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0xec4fe80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa740 [0220.816] FlushFileBuffers (hFile=0x1480) returned 1 [0220.822] CloseHandle (hObject=0x1480) returned 1 [0220.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8402618 [0220.880] wcscpy (in: _Dest=0x8402618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\" [0220.880] wcscat (in: _Dest=0x8402618, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\F0DBEC-Readme.txt" [0220.880] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0220.880] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd6c [0220.900] WriteFile (in: hFile=0xd6c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xec4fea4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xec4fea4*=0x70c, lpOverlapped=0x0) returned 1 [0220.909] CloseHandle (hObject=0xd6c) returned 1 [0221.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402618) returned 1 [0221.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8409740) returned 1 Thread: id = 5710 os_tid = 0x2258 [0187.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis")) returned 0x20 [0189.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis", dwFileAttributes=0x20) returned 0 [0191.006] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.306] GetLastError () returned 0x5 [0192.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis", dwFileAttributes=0x20) returned 0 [0193.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 5711 os_tid = 0x225c [0187.234] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html")) returned 0x2020 [0190.276] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", dwFileAttributes=0x20) returned 1 [0199.198] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a00 [0199.199] GetFileSizeEx (in: hFile=0x1a00, lpFileSize=0xf00f838 | out: lpFileSize=0xf00f838*=810) returned 1 [0199.199] SetFilePointerEx (in: hFile=0x1a00, liDistanceToMove=0x326, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.199] ReadFile (in: hFile=0x1a00, lpBuffer=0xf00f844, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf00f820, lpOverlapped=0x0 | out: lpBuffer=0xf00f844*, lpNumberOfBytesRead=0xf00f820*=0x4, lpOverlapped=0x0) returned 1 [0199.202] SetFilePointerEx (in: hFile=0x1a00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0199.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0199.202] NtQuerySystemTime (in: CurrentTime=0xf00f7c0 | out: CurrentTime=0xf00f7c0*=132471540670932000) returned 0x0 [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x25191e4e [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0xf4a8a01 [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x63313ce5 [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x9d8be94 [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x5a144dee [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x6fb5f0d6 [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x65894391 [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x2b840a80 [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x6dae9957 [0199.202] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x604518f4 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x7436306d [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x6c80ffe1 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x3d92b630 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x51b45970 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x31c9455 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x6d31ee22 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x333ff968 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x44974cbe [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x1727e3c8 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x4f70aa5c [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x383c44b8 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x14f8bb64 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x4f1a3069 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x7601a492 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x14f3e20e [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x702bbf97 [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x19f661ea [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x5227e4fe [0199.203] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x11e584dd [0199.204] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x2a70836e [0199.204] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x7edd1de0 [0199.204] RtlRandomEx (in: Seed=0xf00f7b8 | out: Seed=0xf00f7b8) returned 0x18c59727 [0199.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14998c88 [0199.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1499c890 [0199.217] ReadFile (in: hFile=0x1a00, lpBuffer=0x14998c88, nNumberOfBytesToRead=0x32a, lpNumberOfBytesRead=0xf00f7b4, lpOverlapped=0x0 | out: lpBuffer=0x14998c88*, lpNumberOfBytesRead=0xf00f7b4*=0x32a, lpOverlapped=0x0) returned 1 [0199.218] SetFilePointerEx (in: hFile=0x1a00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.218] WriteFile (in: hFile=0x1a00, lpBuffer=0x1499c890*, nNumberOfBytesToWrite=0x32a, lpNumberOfBytesWritten=0xf00f7b8, lpOverlapped=0x0 | out: lpBuffer=0x1499c890*, lpNumberOfBytesWritten=0xf00f7b8*=0x32a, lpOverlapped=0x0) returned 1 [0205.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0205.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfe0 [0205.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0205.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1499c890) returned 1 [0205.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14998c88) returned 1 [0205.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 [0205.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5840) returned 1 [0205.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e77e18 [0205.422] SetFilePointerEx (in: hFile=0x1a00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.422] WriteFile (in: hFile=0x1a00, lpBuffer=0x8187360*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xf00f82c, lpOverlapped=0x0 | out: lpBuffer=0x8187360*, lpNumberOfBytesWritten=0xf00f82c*=0x112, lpOverlapped=0x0) returned 1 [0207.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187360) returned 1 [0207.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0207.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0207.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0207.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0207.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0207.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0207.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0207.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef698 [0207.926] wcscpy (in: _Dest=0x83ef698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" [0207.927] wcscat (in: _Dest=0x83ef698, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.f0dbec" [0207.927] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.f0dbec", NtPathName=0xf00f7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d7a8 [0208.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d7a8) returned 1 [0208.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f11d0) returned 1 [0208.163] NtQueryInformationFile (in: FileHandle=0x1a00, IoStatusBlock=0xf00f788, FileInformation=0xf00f790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf00f788, FileInformation=0xf00f790) returned 0x0 [0208.163] NtSetInformationFile (FileHandle=0x1a00, IoStatusBlock=0xf00f788, FileInformation=0xf00f790, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef698) returned 1 [0208.463] FlushFileBuffers (hFile=0x1a00) returned 1 [0208.468] CloseHandle (hObject=0x1a00) returned 1 [0208.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x8186580 [0208.841] wcscpy (in: _Dest=0x8186580, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" [0208.841] wcscat (in: _Dest=0x8186580, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\F0DBEC-Readme.txt" [0208.842] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\f0dbec-readme.txt")) returned 0xffffffff [0208.842] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1418 [0209.756] WriteFile (in: hFile=0x1418, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf00f7d4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf00f7d4*=0x70c, lpOverlapped=0x0) returned 1 [0209.758] CloseHandle (hObject=0x1418) returned 1 [0209.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186580) returned 1 [0209.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7648) returned 1 Thread: id = 5712 os_tid = 0x2260 [0187.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\knox")) returned 0x20 [0193.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox", dwFileAttributes=0x20) returned 0 [0193.002] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\knox"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.003] GetLastError () returned 0x5 [0193.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox", dwFileAttributes=0x20) returned 0 [0193.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b7a8) returned 1 Thread: id = 5713 os_tid = 0x2264 [0187.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\marengo")) returned 0x20 [0192.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo", dwFileAttributes=0x20) returned 0 [0193.000] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\marengo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.092] GetLastError () returned 0x5 [0194.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo", dwFileAttributes=0x20) returned 0 [0194.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a7d8) returned 1 Thread: id = 5714 os_tid = 0x2268 [0187.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg")) returned 0x20 [0192.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg", dwFileAttributes=0x20) returned 0 [0192.658] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.097] GetLastError () returned 0x5 [0194.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg", dwFileAttributes=0x20) returned 0 [0194.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 5715 os_tid = 0x226c [0187.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city")) returned 0x20 [0191.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City", dwFileAttributes=0x20) returned 0 [0191.869] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.000] GetLastError () returned 0x5 [0193.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City", dwFileAttributes=0x20) returned 0 [0194.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831af58) returned 1 Thread: id = 5716 os_tid = 0x2270 [0187.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vevay")) returned 0x20 [0194.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay", dwFileAttributes=0x20) returned 0 [0194.098] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vevay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.098] GetLastError () returned 0x5 [0194.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay", dwFileAttributes=0x20) returned 0 [0194.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0bbe0) returned 1 Thread: id = 5717 os_tid = 0x2274 [0187.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes")) returned 0x20 [0192.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes", dwFileAttributes=0x20) returned 0 [0194.095] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.095] GetLastError () returned 0x5 [0194.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes", dwFileAttributes=0x20) returned 0 [0194.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a5d8) returned 1 Thread: id = 5718 os_tid = 0x2278 [0187.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\winamac")) returned 0x20 [0191.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac", dwFileAttributes=0x20) returned 0 [0191.240] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\winamac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.086] GetLastError () returned 0x5 [0192.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac", dwFileAttributes=0x20) returned 0 [0192.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a6d8) returned 1 Thread: id = 5719 os_tid = 0x227c [0187.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x20 [0187.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x20) returned 0 [0187.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.241] GetLastError () returned 0x5 [0187.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x20) returned 0 [0187.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30518) returned 1 Thread: id = 5720 os_tid = 0x2280 [0187.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x20 [0189.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x20) returned 0 [0189.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.359] GetLastError () returned 0x5 [0189.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x20) returned 0 [0189.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 Thread: id = 5721 os_tid = 0x2284 [0187.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x20 [0189.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x20) returned 0 [0189.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.735] GetLastError () returned 0x5 [0189.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x20) returned 0 [0189.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 5722 os_tid = 0x2288 [0187.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x20 [0189.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x20) returned 0 [0189.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.001] GetLastError () returned 0x5 [0189.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x20) returned 0 [0189.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bec50) returned 1 Thread: id = 5723 os_tid = 0x228c [0187.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x20 [0189.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x20) returned 0 [0189.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.564] GetLastError () returned 0x5 [0189.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x20) returned 0 [0189.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 5724 os_tid = 0x2290 [0187.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x20 [0189.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x20) returned 0 [0189.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.558] GetLastError () returned 0x5 [0189.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x20) returned 0 [0189.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 5725 os_tid = 0x2294 [0187.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x20 [0189.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x20) returned 0 [0189.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.555] GetLastError () returned 0x5 [0189.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x20) returned 0 [0189.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfc40) returned 1 Thread: id = 5726 os_tid = 0x2298 [0187.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x20 [0189.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x20) returned 0 [0189.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.723] GetLastError () returned 0x5 [0189.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x20) returned 0 [0189.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 5727 os_tid = 0x229c [0187.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x20 [0189.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x20) returned 0 [0189.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.720] GetLastError () returned 0x5 [0189.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x20) returned 0 [0189.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 5728 os_tid = 0x22a0 [0187.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x20 [0189.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x20) returned 0 [0189.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.716] GetLastError () returned 0x5 [0189.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x20) returned 0 [0189.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 5729 os_tid = 0x22a4 [0187.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x20 [0189.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x20) returned 0 [0189.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.713] GetLastError () returned 0x5 [0189.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x20) returned 0 [0189.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 5730 os_tid = 0x22a8 [0187.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x20 [0189.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x20) returned 0 [0189.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.709] GetLastError () returned 0x5 [0189.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x20) returned 0 [0189.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 5731 os_tid = 0x22ac [0187.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x20 [0189.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x20) returned 0 [0189.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.704] GetLastError () returned 0x5 [0189.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x20) returned 0 [0189.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 5732 os_tid = 0x2554 [0187.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x20 [0189.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x20) returned 0 [0189.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.692] GetLastError () returned 0x5 [0189.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x20) returned 0 [0189.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 5733 os_tid = 0x2558 [0187.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x20 [0189.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x20) returned 0 [0189.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.687] GetLastError () returned 0x5 [0189.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x20) returned 0 [0189.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 5734 os_tid = 0x2564 [0187.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x20 [0189.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x20) returned 0 [0189.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.681] GetLastError () returned 0x5 [0189.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x20) returned 0 [0189.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 5735 os_tid = 0x2568 [0187.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x20 [0189.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x20) returned 0 [0189.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.675] GetLastError () returned 0x5 [0189.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x20) returned 0 [0189.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 5736 os_tid = 0x256c [0187.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x20 [0189.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x20) returned 0 [0189.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.669] GetLastError () returned 0x5 [0189.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x20) returned 0 [0189.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 5737 os_tid = 0x2570 [0187.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x20 [0189.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x20) returned 0 [0189.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.661] GetLastError () returned 0x5 [0189.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x20) returned 0 [0189.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfe60) returned 1 Thread: id = 5738 os_tid = 0x2574 [0187.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x20 [0189.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x20) returned 0 [0189.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.655] GetLastError () returned 0x5 [0189.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x20) returned 0 [0189.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 5739 os_tid = 0x2578 [0187.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x20 [0189.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x20) returned 0 [0189.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.649] GetLastError () returned 0x5 [0189.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x20) returned 0 [0189.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 5740 os_tid = 0x257c [0187.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x20 [0189.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x20) returned 0 [0189.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.642] GetLastError () returned 0x5 [0189.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x20) returned 0 [0189.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 5741 os_tid = 0x2580 [0187.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x20 [0189.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x20) returned 0 [0189.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.635] GetLastError () returned 0x5 [0189.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x20) returned 0 [0189.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 5742 os_tid = 0x2584 [0187.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x20 [0189.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x20) returned 0 [0189.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.630] GetLastError () returned 0x5 [0189.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x20) returned 0 [0189.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 5743 os_tid = 0x2588 [0187.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x20 [0189.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x20) returned 0 [0189.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.623] GetLastError () returned 0x5 [0189.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x20) returned 0 [0189.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 5744 os_tid = 0x258c [0187.658] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json")) returned 0x2020 [0191.399] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0214.635] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1980 [0214.636] GetFileSizeEx (in: hFile=0x1980, lpFileSize=0xf84fec8 | out: lpFileSize=0xf84fec8*=198) returned 1 [0214.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064088 [0214.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80640b0 [0214.636] NtQuerySystemTime (in: CurrentTime=0xf84fe50 | out: CurrentTime=0xf84fe50*=132471540823500000) returned 0x0 [0214.636] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x56e36b42 [0214.636] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x7b2f5080 [0214.636] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x136afc7 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x631648c6 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x25d6ebce [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x6a24db9e [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x79e8a18e [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x6b6b5f01 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x4ffcecd6 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0xa1a1671 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x14fb6a57 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x16fcea0 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x7f4bebca [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x4310efc7 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x3e4dba6d [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x5a5ff68d [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x5ab3dc55 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x53e249b0 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x61740f54 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x6976412d [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x4e0f79e [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x6b19f23f [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x14c5a968 [0214.637] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x794b42c7 [0214.638] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x485ba7d [0214.638] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0xf66121c [0214.638] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x2d01d606 [0214.638] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x19714c90 [0214.638] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x34bc4a0b [0214.638] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x64027513 [0214.638] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x3b0a40c0 [0214.638] RtlRandomEx (in: Seed=0xf84fe48 | out: Seed=0xf84fe48) returned 0x4b61c0f7 [0214.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ac9c28 [0214.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14acd830 [0214.651] ReadFile (in: hFile=0x1980, lpBuffer=0x14ac9c28, nNumberOfBytesToRead=0xc6, lpNumberOfBytesRead=0xf84fe44, lpOverlapped=0x0 | out: lpBuffer=0x14ac9c28*, lpNumberOfBytesRead=0xf84fe44*=0xc6, lpOverlapped=0x0) returned 1 [0214.653] SetFilePointerEx (in: hFile=0x1980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.653] WriteFile (in: hFile=0x1980, lpBuffer=0x14acd830*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0xf84fe48, lpOverlapped=0x0 | out: lpBuffer=0x14acd830*, lpNumberOfBytesWritten=0xf84fe48*=0xc6, lpOverlapped=0x0) returned 1 [0219.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062260 [0219.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80621c0 [0219.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621c0) returned 1 [0219.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14acd830) returned 1 [0219.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ac9c28) returned 1 [0219.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403290) returned 1 [0219.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d52f8) returned 1 [0219.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69540 [0219.787] SetFilePointerEx (in: hFile=0x1980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.787] WriteFile (in: hFile=0x1980, lpBuffer=0x8407258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf84febc, lpOverlapped=0x0 | out: lpBuffer=0x8407258*, lpNumberOfBytesWritten=0xf84febc*=0x10c, lpOverlapped=0x0) returned 1 [0220.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407258) returned 1 [0220.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69570) returned 1 [0220.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621c0) returned 1 [0220.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69540) returned 1 [0220.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062260) returned 1 [0220.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064088) returned 1 [0220.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064128) returned 1 [0220.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641c8) returned 1 [0220.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84052c8 [0220.511] wcscpy (in: _Dest=0x84052c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" [0220.511] wcscat (in: _Dest=0x84052c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.f0dbec" [0220.511] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0xf84fe40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa0d8 [0220.815] FlushFileBuffers (hFile=0x1980) returned 1 [0220.946] CloseHandle (hObject=0x1980) returned 1 [0220.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a22b0 [0220.947] wcscpy (in: _Dest=0x148a22b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" [0220.947] wcscat (in: _Dest=0x148a22b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\F0DBEC-Readme.txt" [0220.947] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0220.948] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1980 [0220.949] WriteFile (in: hFile=0x1980, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf84fe64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf84fe64*=0x70c, lpOverlapped=0x0) returned 1 [0220.951] CloseHandle (hObject=0x1980) returned 1 [0220.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a22b0) returned 1 [0220.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2750) returned 1 Thread: id = 5745 os_tid = 0x2590 [0187.658] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json")) returned 0x2020 [0191.398] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0214.996] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x624 [0214.997] GetFileSizeEx (in: hFile=0x624, lpFileSize=0xfeaf888 | out: lpFileSize=0xfeaf888*=237) returned 1 [0214.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063868 [0214.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063340 [0214.997] NtQuerySystemTime (in: CurrentTime=0xfeaf810 | out: CurrentTime=0xfeaf810*=132471540827088000) returned 0x0 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x2fe6b269 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x2a274c09 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x490fd540 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x1ff9d159 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x504820be [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x4fde9798 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x131d4e94 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x93ca71c [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x489472bd [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x558c45b6 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x7cb8f84a [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x5871c3c1 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x42f36031 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x15b7e126 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x5e88aff8 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x6206c77 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x4d8be2b2 [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x7cb8f84a [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x66eac77f [0214.997] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x233cced0 [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x72343690 [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x63d37abd [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x7e622aae [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x78542993 [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x33b4576 [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x37727643 [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x22c3f077 [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x39766d9c [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x6fbe26d9 [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x586987d5 [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x3a744047 [0214.998] RtlRandomEx (in: Seed=0xfeaf808 | out: Seed=0xfeaf808) returned 0x5eeb8e51 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x836a578 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x836e180 [0215.009] ReadFile (in: hFile=0x624, lpBuffer=0x836a578, nNumberOfBytesToRead=0xed, lpNumberOfBytesRead=0xfeaf804, lpOverlapped=0x0 | out: lpBuffer=0x836a578*, lpNumberOfBytesRead=0xfeaf804*=0xed, lpOverlapped=0x0) returned 1 [0215.012] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.012] WriteFile (in: hFile=0x624, lpBuffer=0x836e180*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0xfeaf808, lpOverlapped=0x0 | out: lpBuffer=0x836e180*, lpNumberOfBytesWritten=0xfeaf808*=0xed, lpOverlapped=0x0) returned 1 [0219.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80625a8 [0219.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80631b0 [0219.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631b0) returned 1 [0219.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836e180) returned 1 [0219.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836a578) returned 1 [0219.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0219.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4b18) returned 1 [0219.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69b70 [0219.844] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.845] WriteFile (in: hFile=0x624, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfeaf87c, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xfeaf87c*=0x10c, lpOverlapped=0x0) returned 1 [0220.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0220.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69840) returned 1 [0220.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631b0) returned 1 [0220.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b70) returned 1 [0220.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625a8) returned 1 [0220.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063868) returned 1 [0220.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064c18) returned 1 [0220.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ba0) returned 1 [0220.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4890 [0220.536] wcscpy (in: _Dest=0x81f4890, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" [0220.536] wcscat (in: _Dest=0x81f4890, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.f0dbec" [0220.536] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.f0dbec", NtPathName=0xfeaf800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9408 [0220.834] FlushFileBuffers (hFile=0x624) returned 1 [0220.842] CloseHandle (hObject=0x624) returned 1 [0220.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8400b80 [0220.889] wcscpy (in: _Dest=0x8400b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" [0220.889] wcscat (in: _Dest=0x8400b80, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\F0DBEC-Readme.txt" [0220.889] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\f0dbec-readme.txt")) returned 0xffffffff [0220.889] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c24 [0220.903] WriteFile (in: hFile=0x1c24, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xfeaf824, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xfeaf824*=0x70c, lpOverlapped=0x0) returned 1 [0220.921] CloseHandle (hObject=0x1c24) returned 1 [0220.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400b80) returned 1 [0220.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2878) returned 1 Thread: id = 5746 os_tid = 0x2594 [0187.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires")) returned 0x20 [0189.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires", dwFileAttributes=0x20) returned 0 [0191.006] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.000] GetLastError () returned 0x5 [0193.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires", dwFileAttributes=0x20) returned 0 [0195.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f345f0) returned 1 Thread: id = 5747 os_tid = 0x2598 [0187.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca")) returned 0x20 [0192.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca", dwFileAttributes=0x20) returned 0 [0194.091] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.053] GetLastError () returned 0x5 [0195.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca", dwFileAttributes=0x20) returned 0 [0195.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30518) returned 1 Thread: id = 5748 os_tid = 0x259c [0187.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba")) returned 0x20 [0195.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba", dwFileAttributes=0x20) returned 0 [0195.577] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.577] GetLastError () returned 0x5 [0195.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba", dwFileAttributes=0x20) returned 0 [0195.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831acd8) returned 1 Thread: id = 5749 os_tid = 0x25a0 [0187.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy")) returned 0x20 [0195.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy", dwFileAttributes=0x20) returned 0 [0195.574] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.574] GetLastError () returned 0x5 [0195.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy", dwFileAttributes=0x20) returned 0 [0195.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831afd8) returned 1 Thread: id = 5750 os_tid = 0x25a4 [0187.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja")) returned 0x20 [0195.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja", dwFileAttributes=0x20) returned 0 [0195.410] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.410] GetLastError () returned 0x5 [0195.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja", dwFileAttributes=0x20) returned 0 [0195.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30160) returned 1 Thread: id = 5751 os_tid = 0x25a8 [0187.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza")) returned 0x20 [0194.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza", dwFileAttributes=0x20) returned 0 [0195.051] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.054] GetLastError () returned 0x5 [0195.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza", dwFileAttributes=0x20) returned 0 [0195.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bb58) returned 1 Thread: id = 5752 os_tid = 0x2618 [0187.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos")) returned 0x20 [0191.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos", dwFileAttributes=0x20) returned 0 [0191.239] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.085] GetLastError () returned 0x5 [0192.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos", dwFileAttributes=0x20) returned 0 [0192.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 Thread: id = 5753 os_tid = 0x261c [0187.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\salta")) returned 0x20 [0193.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta", dwFileAttributes=0x20) returned 0 [0195.050] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\salta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.056] GetLastError () returned 0x5 [0195.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta", dwFileAttributes=0x20) returned 0 [0195.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a858) returned 1 Thread: id = 5754 os_tid = 0x2728 [0187.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan")) returned 0x20 [0192.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan", dwFileAttributes=0x20) returned 0 [0192.999] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.573] GetLastError () returned 0x5 [0195.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan", dwFileAttributes=0x20) returned 0 [0195.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f301e8) returned 1 Thread: id = 5755 os_tid = 0x272c [0187.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis")) returned 0x20 [0192.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis", dwFileAttributes=0x20) returned 0 [0192.657] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.547] GetLastError () returned 0x5 [0195.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis", dwFileAttributes=0x20) returned 0 [0195.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2feb8) returned 1 Thread: id = 5756 os_tid = 0x2730 [0187.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman")) returned 0x20 [0191.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman", dwFileAttributes=0x20) returned 0 [0192.305] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.050] GetLastError () returned 0x5 [0195.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman", dwFileAttributes=0x20) returned 0 [0195.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a9d8) returned 1 Thread: id = 5757 os_tid = 0x2734 [0187.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia")) returned 0x20 [0191.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia", dwFileAttributes=0x20) returned 0 [0191.868] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.999] GetLastError () returned 0x5 [0192.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia", dwFileAttributes=0x20) returned 0 [0194.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b6d8) returned 1 Thread: id = 5758 os_tid = 0x2738 [0187.663] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020 [0191.390] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0204.796] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15a0 [0211.210] GetFileSizeEx (in: hFile=0x15a0, lpFileSize=0x11aafeb0 | out: lpFileSize=0x11aafeb0*=207) returned 1 [0211.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e30 [0211.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e08 [0211.210] NtQuerySystemTime (in: CurrentTime=0x11aafe38 | out: CurrentTime=0x11aafe38*=132471540789336000) returned 0x0 [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x5edf6e2c [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x12c7749c [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x559db1b6 [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x646fb23c [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x7b40f918 [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x20087c6d [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x4ef02703 [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x10c27300 [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x28e17033 [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x413bf09f [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x766f59f3 [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x3ce57cf3 [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x34b85b8a [0211.210] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x3d0b5787 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x5de2b3d4 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x40619f10 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x1c040657 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x566b57b5 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x794b1356 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x135b96a1 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x146718d [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0xf872e9f [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x2df9ccc9 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x1d3e6cd5 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x5d1913a3 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x14560730 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x32beb32c [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x64eddcb3 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x7b8d54de [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x7922d09a [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0xf9685c0 [0211.211] RtlRandomEx (in: Seed=0x11aafe30 | out: Seed=0x11aafe30) returned 0x2df9ccc9 [0211.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80cebe8 [0211.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d27f0 [0211.220] ReadFile (in: hFile=0x15a0, lpBuffer=0x80cebe8, nNumberOfBytesToRead=0xcf, lpNumberOfBytesRead=0x11aafe2c, lpOverlapped=0x0 | out: lpBuffer=0x80cebe8*, lpNumberOfBytesRead=0x11aafe2c*=0xcf, lpOverlapped=0x0) returned 1 [0211.222] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.222] WriteFile (in: hFile=0x15a0, lpBuffer=0x80d27f0*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x11aafe30, lpOverlapped=0x0 | out: lpBuffer=0x80d27f0*, lpNumberOfBytesWritten=0x11aafe30*=0xcf, lpOverlapped=0x0) returned 1 [0213.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42880 [0213.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0213.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0213.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d27f0) returned 1 [0213.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cebe8) returned 1 [0213.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e80) returned 1 [0213.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eaec0) returned 1 [0213.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e701b8 [0213.960] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.960] WriteFile (in: hFile=0x15a0, lpBuffer=0x81e0020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11aafea4, lpOverlapped=0x0 | out: lpBuffer=0x81e0020*, lpNumberOfBytesWritten=0x11aafea4*=0x10c, lpOverlapped=0x0) returned 1 [0214.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0020) returned 1 [0214.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0214.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0214.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0214.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42880) returned 1 [0214.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e30) returned 1 [0214.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d90) returned 1 [0214.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063db8) returned 1 [0214.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8186e18 [0214.116] wcscpy (in: _Dest=0x8186e18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" [0214.116] wcscat (in: _Dest=0x8186e18, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.f0dbec" [0214.116] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0x11aafe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa220 [0215.862] FlushFileBuffers (hFile=0x15a0) returned 1 [0215.876] CloseHandle (hObject=0x15a0) returned 1 [0216.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8300 [0216.094] wcscpy (in: _Dest=0x81d8300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" [0216.094] wcscat (in: _Dest=0x81d8300, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\F0DBEC-Readme.txt" [0216.094] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0216.095] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.594] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x11aafe4c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x11aafe4c*=0x70c, lpOverlapped=0x0) returned 1 [0216.596] CloseHandle (hObject=0x10c4) returned 1 [0216.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8300) returned 1 [0216.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402050) returned 1 Thread: id = 5759 os_tid = 0x273c [0187.663] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020 [0191.391] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0204.797] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a24 [0211.223] GetFileSizeEx (in: hFile=0x2a24, lpFileSize=0xca2f980 | out: lpFileSize=0xca2f980*=222) returned 1 [0211.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e08 [0211.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063d40 [0211.223] NtQuerySystemTime (in: CurrentTime=0xca2f908 | out: CurrentTime=0xca2f908*=132471540789336000) returned 0x0 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x11f37e61 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x587acf32 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x5d6e80e4 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x7b51d4a8 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x687eb893 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x28f0eb14 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x4cd58601 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0xf872e9f [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x302732d4 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x6cf40d65 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x480103c9 [0211.223] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x2911fc6c [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x779deca3 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x31c6355 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x1ff80c9 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x310ce84e [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x6fedbb97 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x64164219 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x4e0ca522 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x19d1ef2b [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x53bcdf33 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x382bf6ed [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0xf40d440 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x544a409e [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x49a4ea25 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x17a4887e [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x766f59f3 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x544a409e [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x559db1b6 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x25dd8eee [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0xa7f8ae7 [0211.224] RtlRandomEx (in: Seed=0xca2f900 | out: Seed=0xca2f900) returned 0x3a708a89 [0211.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80d63f8 [0211.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ac6020 [0211.240] ReadFile (in: hFile=0x2a24, lpBuffer=0x80d63f8, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xca2f8fc, lpOverlapped=0x0 | out: lpBuffer=0x80d63f8*, lpNumberOfBytesRead=0xca2f8fc*=0xde, lpOverlapped=0x0) returned 1 [0211.243] SetFilePointerEx (in: hFile=0x2a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.243] WriteFile (in: hFile=0x2a24, lpBuffer=0x14ac6020*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xca2f900, lpOverlapped=0x0 | out: lpBuffer=0x14ac6020*, lpNumberOfBytesWritten=0xca2f900*=0xde, lpOverlapped=0x0) returned 1 [0213.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0213.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0213.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0213.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ac6020) returned 1 [0213.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80d63f8) returned 1 [0213.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68240) returned 1 [0213.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb220) returned 1 [0213.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f438 [0213.965] SetFilePointerEx (in: hFile=0x2a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.965] WriteFile (in: hFile=0x2a24, lpBuffer=0x81e0250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xca2f974, lpOverlapped=0x0 | out: lpBuffer=0x81e0250*, lpNumberOfBytesWritten=0xca2f974*=0x10c, lpOverlapped=0x0) returned 1 [0214.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0250) returned 1 [0214.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fe28) returned 1 [0214.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0214.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f438) returned 1 [0214.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0214.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e08) returned 1 [0214.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d68) returned 1 [0214.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063cf0) returned 1 [0214.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187088 [0214.122] wcscpy (in: _Dest=0x8187088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" [0214.122] wcscat (in: _Dest=0x8187088, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.f0dbec" [0214.122] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0xca2f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa368 [0215.870] FlushFileBuffers (hFile=0x2a24) returned 1 [0215.881] CloseHandle (hObject=0x2a24) returned 1 [0216.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8c40 [0216.097] wcscpy (in: _Dest=0x81d8c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" [0216.097] wcscat (in: _Dest=0x81d8c40, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\F0DBEC-Readme.txt" [0216.097] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0216.097] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.619] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xca2f91c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xca2f91c*=0x70c, lpOverlapped=0x0) returned 1 [0216.621] CloseHandle (hObject=0x10c4) returned 1 [0216.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8c40) returned 1 [0216.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402178) returned 1 Thread: id = 5760 os_tid = 0x2740 [0187.663] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020 [0191.383] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0204.798] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19fc [0211.275] GetFileSizeEx (in: hFile=0x19fc, lpFileSize=0x942fe90 | out: lpFileSize=0x942fe90*=216) returned 1 [0211.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c50 [0211.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c28 [0211.275] NtQuerySystemTime (in: CurrentTime=0x942fe18 | out: CurrentTime=0x942fe18*=132471540789960000) returned 0x0 [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x527b9a9c [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x2d32d665 [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x63df8376 [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x303ba6ed [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x382bf6ed [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x238f686f [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x1bce4313 [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x5edf6e2c [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x1f4e7352 [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x72b94232 [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x446f999b [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x2148cf16 [0211.275] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0xbe646b5 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0xf40d440 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x61305643 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x1e2d4ab2 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x4ddd2fa [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x63ba3d66 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x5f56b6c4 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x51db8318 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x302732d4 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x49a2aa88 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x8320b9d [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x3277cc66 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x7d32f876 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x3ce11cef [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x4007794b [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x28bf0870 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x1538ea9c [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x543f0be2 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x5c08f1a1 [0211.276] RtlRandomEx (in: Seed=0x942fe10 | out: Seed=0x942fe10) returned 0x6ad28067 [0211.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad8c48 [0211.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14adc850 [0211.286] ReadFile (in: hFile=0x19fc, lpBuffer=0x14ad8c48, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x942fe0c, lpOverlapped=0x0 | out: lpBuffer=0x14ad8c48*, lpNumberOfBytesRead=0x942fe0c*=0xd8, lpOverlapped=0x0) returned 1 [0211.288] SetFilePointerEx (in: hFile=0x19fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.288] WriteFile (in: hFile=0x19fc, lpBuffer=0x14adc850*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x942fe10, lpOverlapped=0x0 | out: lpBuffer=0x14adc850*, lpNumberOfBytesWritten=0x942fe10*=0xd8, lpOverlapped=0x0) returned 1 [0213.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42358 [0213.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42678 [0213.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42678) returned 1 [0213.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14adc850) returned 1 [0213.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad8c48) returned 1 [0213.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68510) returned 1 [0213.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9d50) returned 1 [0213.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f3a8 [0213.969] SetFilePointerEx (in: hFile=0x19fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.969] WriteFile (in: hFile=0x19fc, lpBuffer=0x81e0480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x942fe84, lpOverlapped=0x0 | out: lpBuffer=0x81e0480*, lpNumberOfBytesWritten=0x942fe84*=0x10c, lpOverlapped=0x0) returned 1 [0214.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0480) returned 1 [0214.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f6a8) returned 1 [0214.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42678) returned 1 [0214.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f3a8) returned 1 [0214.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42358) returned 1 [0214.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c50) returned 1 [0214.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bb0) returned 1 [0214.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bd8) returned 1 [0214.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81872f8 [0214.128] wcscpy (in: _Dest=0x81872f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" [0214.128] wcscat (in: _Dest=0x81872f8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.f0dbec" [0214.128] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.f0dbec", NtPathName=0x942fe08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9a70 [0215.875] FlushFileBuffers (hFile=0x19fc) returned 1 [0215.890] CloseHandle (hObject=0x19fc) returned 1 [0216.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d7898 [0216.103] wcscpy (in: _Dest=0x81d7898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" [0216.103] wcscat (in: _Dest=0x81d7898, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\F0DBEC-Readme.txt" [0216.103] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\f0dbec-readme.txt")) returned 0xffffffff [0216.103] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.624] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x942fe2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x942fe2c*=0x70c, lpOverlapped=0x0) returned 1 [0216.626] CloseHandle (hObject=0x10c4) returned 1 [0216.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7898) returned 1 [0216.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84022a0) returned 1 Thread: id = 5761 os_tid = 0x2744 [0187.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020 [0191.384] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0204.798] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x189c [0211.289] GetFileSizeEx (in: hFile=0x189c, lpFileSize=0x790fc58 | out: lpFileSize=0x790fc58*=217) returned 1 [0211.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c28 [0211.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b60 [0211.290] NtQuerySystemTime (in: CurrentTime=0x790fbe0 | out: CurrentTime=0x790fbe0*=132471540790116000) returned 0x0 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x446f999b [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x326a8766 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x371d0f8b [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x74827a90 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x1a2b8126 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x66bffa76 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x438782cf [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x29bf54fd [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x82113a3 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x10979a40 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x7660bb2f [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0xd3dd3f8 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x71378cf5 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x50100816 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x424049fd [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x5f21b6f3 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x566e66e4 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x3ffd9a32 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x975878a [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x395ac82c [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x28672a2f [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x86f01ab [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x7b51d4a8 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x5270a9d9 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x543f0be2 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x12d31be [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x696251d7 [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x6831e1bc [0211.290] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x55bc780e [0211.291] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x31528d90 [0211.291] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0x3ee90620 [0211.291] RtlRandomEx (in: Seed=0x790fbd8 | out: Seed=0x790fbd8) returned 0xe957140 [0211.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ae0458 [0211.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ae4060 [0211.300] ReadFile (in: hFile=0x189c, lpBuffer=0x14ae0458, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0x790fbd4, lpOverlapped=0x0 | out: lpBuffer=0x14ae0458*, lpNumberOfBytesRead=0x790fbd4*=0xd9, lpOverlapped=0x0) returned 1 [0211.325] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.325] WriteFile (in: hFile=0x189c, lpBuffer=0x14ae4060*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x790fbd8, lpOverlapped=0x0 | out: lpBuffer=0x14ae4060*, lpNumberOfBytesWritten=0x790fbd8*=0xd9, lpOverlapped=0x0) returned 1 [0213.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0213.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d426a0 [0213.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426a0) returned 1 [0213.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae4060) returned 1 [0213.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae0458) returned 1 [0213.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a38) returned 1 [0213.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea380) returned 1 [0213.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f4f8 [0213.974] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.974] WriteFile (in: hFile=0x189c, lpBuffer=0x81e06b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x790fc4c, lpOverlapped=0x0 | out: lpBuffer=0x81e06b0*, lpNumberOfBytesWritten=0x790fc4c*=0x10c, lpOverlapped=0x0) returned 1 [0214.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e06b0) returned 1 [0214.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f588) returned 1 [0214.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426a0) returned 1 [0214.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f4f8) returned 1 [0214.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0214.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c28) returned 1 [0214.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b88) returned 1 [0214.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b10) returned 1 [0214.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187568 [0214.134] wcscpy (in: _Dest=0x8187568, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" [0214.134] wcscat (in: _Dest=0x8187568, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.f0dbec" [0214.134] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0x790fbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa9d0 [0215.882] FlushFileBuffers (hFile=0x189c) returned 1 [0215.894] CloseHandle (hObject=0x189c) returned 1 [0216.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d7648 [0216.104] wcscpy (in: _Dest=0x81d7648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" [0216.104] wcscat (in: _Dest=0x81d7648, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\F0DBEC-Readme.txt" [0216.104] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0216.104] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.628] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x790fbf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x790fbf4*=0x70c, lpOverlapped=0x0) returned 1 [0216.630] CloseHandle (hObject=0x10c4) returned 1 [0216.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7648) returned 1 [0216.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84023c8) returned 1 Thread: id = 5762 os_tid = 0x2748 [0187.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020 [0191.385] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0204.795] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e9c [0211.177] GetFileSizeEx (in: hFile=0x1e9c, lpFileSize=0xbd0fd80 | out: lpFileSize=0xbd0fd80*=260) returned 1 [0211.177] SetFilePointerEx (in: hFile=0x1e9c, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.177] ReadFile (in: hFile=0x1e9c, lpBuffer=0xbd0fd8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd0fd68, lpOverlapped=0x0 | out: lpBuffer=0xbd0fd8c*, lpNumberOfBytesRead=0xbd0fd68*=0x4, lpOverlapped=0x0) returned 1 [0211.178] SetFilePointerEx (in: hFile=0x1e9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f20 [0211.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ef8 [0211.179] NtQuerySystemTime (in: CurrentTime=0xbd0fd08 | out: CurrentTime=0xbd0fd08*=132471540789024000) returned 0x0 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x781a4ed9 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0xabd7e41 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x5b5da241 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x5961f0e6 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x19a0127a [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x556e7c02 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x37893180 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x3a708a89 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x783c8fac [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x7a48c169 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x62e8b745 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x2f3d2eba [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x44a2195b [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x15b4b7cd [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x2ce10dd5 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x33f92d5d [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x2bbc71af [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x3953df29 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x6bf36258 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x14480f68 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x4ccc8e69 [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x3533d83d [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x2c2bac9d [0211.179] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x4c7be3fb [0211.180] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x3730b3cc [0211.180] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x64e0f8e3 [0211.180] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x6092249 [0211.180] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x425acb72 [0211.180] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x539845fc [0211.180] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x199dfc57 [0211.180] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x5ad9b2bf [0211.180] RtlRandomEx (in: Seed=0xbd0fd00 | out: Seed=0xbd0fd00) returned 0x42b50b36 [0211.189] ReadFile (in: hFile=0x1e9c, lpBuffer=0x80bfbc8, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xbd0fcfc, lpOverlapped=0x0 | out: lpBuffer=0x80bfbc8*, lpNumberOfBytesRead=0xbd0fcfc*=0x104, lpOverlapped=0x0) returned 1 [0211.189] SetFilePointerEx (in: hFile=0x1e9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.189] WriteFile (in: hFile=0x1e9c, lpBuffer=0x80c37d0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xbd0fd00, lpOverlapped=0x0 | out: lpBuffer=0x80c37d0*, lpNumberOfBytesWritten=0xbd0fd00*=0x104, lpOverlapped=0x0) returned 1 [0213.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428d0 [0213.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423f8 [0213.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423f8) returned 1 [0213.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c37d0) returned 1 [0213.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bfbc8) returned 1 [0213.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e683a8) returned 1 [0213.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eae78) returned 1 [0213.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fdc8 [0213.959] SetFilePointerEx (in: hFile=0x1e9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.959] WriteFile (in: hFile=0x1e9c, lpBuffer=0x81dff08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbd0fd74, lpOverlapped=0x0 | out: lpBuffer=0x81dff08*, lpNumberOfBytesWritten=0xbd0fd74*=0x10c, lpOverlapped=0x0) returned 1 [0214.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dff08) returned 1 [0214.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff78) returned 1 [0214.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423f8) returned 1 [0214.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdc8) returned 1 [0214.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428d0) returned 1 [0214.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f20) returned 1 [0214.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e80) returned 1 [0214.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ea8) returned 1 [0214.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8186ba8 [0214.111] wcscpy (in: _Dest=0x8186ba8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" [0214.111] wcscat (in: _Dest=0x8186ba8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.f0dbec" [0214.111] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0xbd0fcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa0d8 [0215.859] FlushFileBuffers (hFile=0x1e9c) returned 1 [0215.872] CloseHandle (hObject=0x1e9c) returned 1 [0216.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8d68 [0216.092] wcscpy (in: _Dest=0x81d8d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" [0216.092] wcscat (in: _Dest=0x81d8d68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\F0DBEC-Readme.txt" [0216.092] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0216.092] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.589] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xbd0fd1c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xbd0fd1c*=0x70c, lpOverlapped=0x0) returned 1 [0216.591] CloseHandle (hObject=0x10c4) returned 1 [0216.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8d68) returned 1 [0216.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84024f0) returned 1 Thread: id = 5763 os_tid = 0x274c [0187.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0191.386] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0204.796] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2c98 [0211.158] GetFileSizeEx (in: hFile=0x2c98, lpFileSize=0x108cf8f8 | out: lpFileSize=0x108cf8f8*=208) returned 1 [0211.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063fe8 [0211.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f20 [0211.158] NtQuerySystemTime (in: CurrentTime=0x108cf880 | out: CurrentTime=0x108cf880*=132471540788712000) returned 0x0 [0211.158] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x56896813 [0211.158] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x7e42c0b0 [0211.158] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x68567cc5 [0211.158] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x5dcd9a38 [0211.158] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x6a56ae61 [0211.158] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x17dfc155 [0211.158] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x12e74f01 [0211.158] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x1cb16e49 [0211.158] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x4f4535ee [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x3f674015 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x26f5f124 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x3233dd10 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x1f4b1400 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x6e9766a4 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0xd75ee58 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x33b93fd [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x21fcc604 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x1f49f813 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x9defbf9 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0xfec3740 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x4cb897bf [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x678b27c6 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x6f6b3f4b [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x6cc0016f [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x2a54d73c [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x7829e6e [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x1faae397 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x36898240 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x4414ce15 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x743c9e40 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x71164277 [0211.159] RtlRandomEx (in: Seed=0x108cf878 | out: Seed=0x108cf878) returned 0x202c23b6 [0211.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b83b8 [0211.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80bbfc0 [0211.169] ReadFile (in: hFile=0x2c98, lpBuffer=0x80b83b8, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0x108cf874, lpOverlapped=0x0 | out: lpBuffer=0x80b83b8*, lpNumberOfBytesRead=0x108cf874*=0xd0, lpOverlapped=0x0) returned 1 [0211.176] SetFilePointerEx (in: hFile=0x2c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.176] WriteFile (in: hFile=0x2c98, lpBuffer=0x80bbfc0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x108cf878, lpOverlapped=0x0 | out: lpBuffer=0x80bbfc0*, lpNumberOfBytesWritten=0x108cf878*=0xd0, lpOverlapped=0x0) returned 1 [0213.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f88 [0213.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42380 [0213.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42380) returned 1 [0213.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80bbfc0) returned 1 [0213.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b83b8) returned 1 [0213.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0213.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb2f8) returned 1 [0213.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ba0 [0213.954] SetFilePointerEx (in: hFile=0x2c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.954] WriteFile (in: hFile=0x2c98, lpBuffer=0x81dfcd8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x108cf8ec, lpOverlapped=0x0 | out: lpBuffer=0x81dfcd8*, lpNumberOfBytesWritten=0x108cf8ec*=0x10c, lpOverlapped=0x0) returned 1 [0214.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfcd8) returned 1 [0214.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bd0) returned 1 [0214.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42380) returned 1 [0214.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ba0) returned 1 [0214.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f88) returned 1 [0214.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063fe8) returned 1 [0214.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f48) returned 1 [0214.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ed0) returned 1 [0214.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8186a70 [0214.108] wcscpy (in: _Dest=0x8186a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" [0214.108] wcscat (in: _Dest=0x8186a70, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.f0dbec" [0214.108] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.f0dbec", NtPathName=0x108cf870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3c470 [0215.852] FlushFileBuffers (hFile=0x2c98) returned 1 [0215.865] CloseHandle (hObject=0x2c98) returned 1 [0216.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef7fd8 [0216.089] wcscpy (in: _Dest=0x3ef7fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" [0216.089] wcscat (in: _Dest=0x3ef7fd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\F0DBEC-Readme.txt" [0216.089] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\f0dbec-readme.txt")) returned 0xffffffff [0216.089] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.576] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x108cf894, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x108cf894*=0x70c, lpOverlapped=0x0) returned 1 [0216.578] CloseHandle (hObject=0x10c4) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7fd8) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402618) returned 1 Thread: id = 5764 os_tid = 0x2750 [0187.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0191.387] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0204.796] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a74 [0211.144] GetFileSizeEx (in: hFile=0x1a74, lpFileSize=0xce1fac8 | out: lpFileSize=0xce1fac8*=209) returned 1 [0211.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064010 [0211.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063fe8 [0211.144] NtQuerySystemTime (in: CurrentTime=0xce1fa50 | out: CurrentTime=0xce1fa50*=132471540788556000) returned 0x0 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x585a64c1 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x37b6b3cd [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x3cc5bf9f [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x941ab7e [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x3c0cb435 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x34575c42 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x7e3b4793 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x3e3d9e02 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x2b3383cf [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x7334e3a9 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x2cf4534f [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x41a8a80a [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x549f63c [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x5abc5bd0 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x471b5401 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x39a11132 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x3ad3f0ac [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x7fdf3d25 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x11022dd4 [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x7025777d [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x29eb39db [0211.144] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x7b6e4023 [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x5e7bce3 [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x211b1f5a [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x71f597a4 [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x690c03d9 [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x582d06c3 [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x785a749c [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x10171000 [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x68e31584 [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x4eb244ad [0211.145] RtlRandomEx (in: Seed=0xce1fa48 | out: Seed=0xce1fa48) returned 0x136a9725 [0211.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b0ba8 [0211.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80b47b0 [0211.155] ReadFile (in: hFile=0x1a74, lpBuffer=0x80b0ba8, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0xce1fa44, lpOverlapped=0x0 | out: lpBuffer=0x80b0ba8*, lpNumberOfBytesRead=0xce1fa44*=0xd1, lpOverlapped=0x0) returned 1 [0211.157] SetFilePointerEx (in: hFile=0x1a74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.157] WriteFile (in: hFile=0x1a74, lpBuffer=0x80b47b0*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0xce1fa48, lpOverlapped=0x0 | out: lpBuffer=0x80b47b0*, lpNumberOfBytesWritten=0xce1fa48*=0xd1, lpOverlapped=0x0) returned 1 [0213.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430a0 [0213.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42718 [0213.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42718) returned 1 [0213.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b47b0) returned 1 [0213.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80b0ba8) returned 1 [0213.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 [0213.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea188) returned 1 [0213.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69c00 [0213.952] SetFilePointerEx (in: hFile=0x1a74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.952] WriteFile (in: hFile=0x1a74, lpBuffer=0x81dfbc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xce1fabc, lpOverlapped=0x0 | out: lpBuffer=0x81dfbc0*, lpNumberOfBytesWritten=0xce1fabc*=0x10c, lpOverlapped=0x0) returned 1 [0214.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfbc0) returned 1 [0214.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c30) returned 1 [0214.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42718) returned 1 [0214.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c00) returned 1 [0214.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430a0) returned 1 [0214.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064010) returned 1 [0214.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f70) returned 1 [0214.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f98) returned 1 [0214.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8186938 [0214.105] wcscpy (in: _Dest=0x8186938, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" [0214.105] wcscat (in: _Dest=0x8186938, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.f0dbec" [0214.105] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.f0dbec", NtPathName=0xce1fa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3c1e0 [0215.848] FlushFileBuffers (hFile=0x1a74) returned 1 [0215.860] CloseHandle (hObject=0x1a74) returned 1 [0216.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ef8110 [0216.087] wcscpy (in: _Dest=0x3ef8110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" [0216.087] wcscat (in: _Dest=0x3ef8110, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\F0DBEC-Readme.txt" [0216.087] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\f0dbec-readme.txt")) returned 0xffffffff [0216.087] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.580] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xce1fa64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xce1fa64*=0x70c, lpOverlapped=0x0) returned 1 [0216.582] CloseHandle (hObject=0x10c4) returned 1 [0216.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8110) returned 1 [0216.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402740) returned 1 Thread: id = 5765 os_tid = 0x2754 [0187.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv")) returned 0x20 [0189.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV", dwFileAttributes=0x20) returned 0 [0189.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.721] GetLastError () returned 0x5 [0189.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV", dwFileAttributes=0x20) returned 0 [0189.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bd58) returned 1 Thread: id = 5766 os_tid = 0x2770 [0187.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml")) returned 0x20 [0189.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML", dwFileAttributes=0x20) returned 0 [0189.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.708] GetLastError () returned 0x5 [0189.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML", dwFileAttributes=0x20) returned 0 [0189.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b4d8) returned 1 Thread: id = 5767 os_tid = 0x2774 [0187.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv")) returned 0x20 [0189.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV", dwFileAttributes=0x20) returned 0 [0189.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.702] GetLastError () returned 0x5 [0189.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV", dwFileAttributes=0x20) returned 0 [0189.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 5768 os_tid = 0x27f4 [0187.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml")) returned 0x20 [0189.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML", dwFileAttributes=0x20) returned 0 [0189.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.690] GetLastError () returned 0x5 [0189.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML", dwFileAttributes=0x20) returned 0 [0189.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 5769 os_tid = 0x27f8 [0187.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv")) returned 0x20 [0189.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV", dwFileAttributes=0x20) returned 0 [0189.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.718] GetLastError () returned 0x5 [0189.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV", dwFileAttributes=0x20) returned 0 [0189.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f307c0) returned 1 Thread: id = 5770 os_tid = 0x27fc [0187.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml")) returned 0x20 [0189.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML", dwFileAttributes=0x20) returned 0 [0189.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.005] GetLastError () returned 0x5 [0189.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML", dwFileAttributes=0x20) returned 0 [0189.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc10) returned 1 Thread: id = 5771 os_tid = 0xe88 [0187.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv")) returned 0x20 [0189.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV", dwFileAttributes=0x20) returned 0 [0189.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.685] GetLastError () returned 0x5 [0189.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV", dwFileAttributes=0x20) returned 0 [0189.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 5772 os_tid = 0xc24 [0187.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml")) returned 0x20 [0189.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML", dwFileAttributes=0x20) returned 0 [0189.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.680] GetLastError () returned 0x5 [0189.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML", dwFileAttributes=0x20) returned 0 [0189.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 5773 os_tid = 0x2804 [0187.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv")) returned 0x20 [0189.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV", dwFileAttributes=0x20) returned 0 [0189.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.673] GetLastError () returned 0x5 [0189.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV", dwFileAttributes=0x20) returned 0 [0189.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30408) returned 1 Thread: id = 5774 os_tid = 0x2808 [0187.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml")) returned 0x20 [0189.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML", dwFileAttributes=0x20) returned 0 [0189.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.714] GetLastError () returned 0x5 [0189.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML", dwFileAttributes=0x20) returned 0 [0189.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 5775 os_tid = 0x280c [0187.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv")) returned 0x20 [0189.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV", dwFileAttributes=0x20) returned 0 [0189.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.666] GetLastError () returned 0x5 [0189.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV", dwFileAttributes=0x20) returned 0 [0189.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b058) returned 1 Thread: id = 5776 os_tid = 0x2810 [0187.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml")) returned 0x20 [0189.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML", dwFileAttributes=0x20) returned 0 [0189.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.659] GetLastError () returned 0x5 [0189.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML", dwFileAttributes=0x20) returned 0 [0189.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b8d8) returned 1 Thread: id = 5777 os_tid = 0x2814 [0187.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv")) returned 0x20 [0189.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV", dwFileAttributes=0x20) returned 0 [0189.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.653] GetLastError () returned 0x5 [0189.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV", dwFileAttributes=0x20) returned 0 [0189.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 5778 os_tid = 0x2818 [0187.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml")) returned 0x20 [0189.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML", dwFileAttributes=0x20) returned 0 [0189.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.734] GetLastError () returned 0x5 [0189.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML", dwFileAttributes=0x20) returned 0 [0189.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 5779 os_tid = 0x281c [0187.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml")) returned 0x20 [0189.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML", dwFileAttributes=0x20) returned 0 [0189.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.646] GetLastError () returned 0x5 [0189.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML", dwFileAttributes=0x20) returned 0 [0189.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 5780 os_tid = 0x2820 [0187.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml")) returned 0x20 [0189.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML", dwFileAttributes=0x20) returned 0 [0189.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.864] GetLastError () returned 0x5 [0189.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML", dwFileAttributes=0x20) returned 0 [0189.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35130) returned 1 Thread: id = 5781 os_tid = 0x2850 [0187.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml")) returned 0x20 [0189.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML", dwFileAttributes=0x20) returned 0 [0189.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.525] GetLastError () returned 0x5 [0189.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML", dwFileAttributes=0x20) returned 0 [0189.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddeb8) returned 1 Thread: id = 5782 os_tid = 0x2854 [0187.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml")) returned 0x20 [0189.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML", dwFileAttributes=0x20) returned 0 [0189.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.870] GetLastError () returned 0x5 [0189.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML", dwFileAttributes=0x20) returned 0 [0189.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de458) returned 1 Thread: id = 5783 os_tid = 0x2858 [0187.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml")) returned 0x20 [0189.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML", dwFileAttributes=0x20) returned 0 [0189.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.868] GetLastError () returned 0x5 [0189.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML", dwFileAttributes=0x20) returned 0 [0189.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de4e8) returned 1 Thread: id = 5784 os_tid = 0x287c [0187.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml")) returned 0x20 [0189.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML", dwFileAttributes=0x20) returned 0 [0189.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.867] GetLastError () returned 0x5 [0189.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML", dwFileAttributes=0x20) returned 0 [0189.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 Thread: id = 5785 os_tid = 0x2880 [0187.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml")) returned 0x20 [0189.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML", dwFileAttributes=0x20) returned 0 [0189.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.873] GetLastError () returned 0x5 [0189.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML", dwFileAttributes=0x20) returned 0 [0189.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de0f8) returned 1 Thread: id = 5786 os_tid = 0x2884 [0187.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml")) returned 0x20 [0189.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML", dwFileAttributes=0x20) returned 0 [0189.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.866] GetLastError () returned 0x5 [0189.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML", dwFileAttributes=0x20) returned 0 [0189.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 Thread: id = 5787 os_tid = 0x2888 [0187.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml")) returned 0x20 [0189.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML", dwFileAttributes=0x20) returned 0 [0189.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.871] GetLastError () returned 0x5 [0189.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML", dwFileAttributes=0x20) returned 0 [0189.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 5788 os_tid = 0x288c [0187.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml")) returned 0x20 [0189.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML", dwFileAttributes=0x20) returned 0 [0189.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.401] GetLastError () returned 0x5 [0189.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML", dwFileAttributes=0x20) returned 0 [0189.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 5789 os_tid = 0x2890 [0187.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml")) returned 0x20 [0189.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML", dwFileAttributes=0x20) returned 0 [0189.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.907] GetLastError () returned 0x5 [0189.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML", dwFileAttributes=0x20) returned 0 [0189.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 5790 os_tid = 0x2894 [0187.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml")) returned 0x20 [0189.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML", dwFileAttributes=0x20) returned 0 [0189.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.895] GetLastError () returned 0x5 [0189.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML", dwFileAttributes=0x20) returned 0 [0189.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 5791 os_tid = 0x2898 [0187.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml")) returned 0x20 [0189.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML", dwFileAttributes=0x20) returned 0 [0189.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.894] GetLastError () returned 0x5 [0189.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML", dwFileAttributes=0x20) returned 0 [0189.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 Thread: id = 5792 os_tid = 0x28a8 [0187.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml")) returned 0x20 [0189.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML", dwFileAttributes=0x20) returned 0 [0189.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.863] GetLastError () returned 0x5 [0189.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML", dwFileAttributes=0x20) returned 0 [0189.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f9f0) returned 1 Thread: id = 5793 os_tid = 0x28ac [0187.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml")) returned 0x20 [0189.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML", dwFileAttributes=0x20) returned 0 [0189.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.862] GetLastError () returned 0x5 [0189.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML", dwFileAttributes=0x20) returned 0 [0189.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 5794 os_tid = 0x28b0 [0187.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml")) returned 0x20 [0189.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML", dwFileAttributes=0x20) returned 0 [0189.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.860] GetLastError () returned 0x5 [0189.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML", dwFileAttributes=0x20) returned 0 [0189.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 5795 os_tid = 0x28b4 [0187.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml")) returned 0x20 [0189.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML", dwFileAttributes=0x20) returned 0 [0189.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.859] GetLastError () returned 0x5 [0189.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML", dwFileAttributes=0x20) returned 0 [0189.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 5796 os_tid = 0x28b8 [0187.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml")) returned 0x20 [0189.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML", dwFileAttributes=0x20) returned 0 [0189.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.858] GetLastError () returned 0x5 [0189.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML", dwFileAttributes=0x20) returned 0 [0189.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f305a0) returned 1 Thread: id = 5797 os_tid = 0x28bc [0187.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml")) returned 0x20 [0189.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML", dwFileAttributes=0x20) returned 0 [0189.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.856] GetLastError () returned 0x5 [0189.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML", dwFileAttributes=0x20) returned 0 [0189.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 Thread: id = 5798 os_tid = 0x28c0 [0187.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml")) returned 0x20 [0189.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML", dwFileAttributes=0x20) returned 0 [0189.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.855] GetLastError () returned 0x5 [0189.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML", dwFileAttributes=0x20) returned 0 [0189.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 5799 os_tid = 0x28c4 [0187.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml")) returned 0x20 [0189.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML", dwFileAttributes=0x20) returned 0 [0189.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.854] GetLastError () returned 0x5 [0189.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML", dwFileAttributes=0x20) returned 0 [0189.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 5800 os_tid = 0x28c8 [0187.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml")) returned 0x20 [0189.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML", dwFileAttributes=0x20) returned 0 [0189.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.878] GetLastError () returned 0x5 [0189.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML", dwFileAttributes=0x20) returned 0 [0189.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 Thread: id = 5801 os_tid = 0x28cc [0187.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml")) returned 0x20 [0189.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML", dwFileAttributes=0x20) returned 0 [0189.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.877] GetLastError () returned 0x5 [0189.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML", dwFileAttributes=0x20) returned 0 [0189.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 5802 os_tid = 0x28d0 [0187.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml")) returned 0x20 [0189.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML", dwFileAttributes=0x20) returned 0 [0189.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.875] GetLastError () returned 0x5 [0189.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML", dwFileAttributes=0x20) returned 0 [0189.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 5803 os_tid = 0x28d4 [0187.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml")) returned 0x20 [0189.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML", dwFileAttributes=0x20) returned 0 [0189.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.874] GetLastError () returned 0x5 [0189.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML", dwFileAttributes=0x20) returned 0 [0189.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f5b0) returned 1 Thread: id = 5804 os_tid = 0x28d8 [0187.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css")) returned 0x20 [0192.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0192.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.345] GetLastError () returned 0x5 [0192.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0192.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c90c8) returned 1 Thread: id = 5805 os_tid = 0x28dc [0187.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9608 [0187.787] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0187.787] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\" [0187.787] wcscat (in: _Dest=0x2c9608, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*" [0187.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0187.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099490 [0189.361] wcscmp (_String1=".", _String2=".") returned 0 [0189.361] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.361] wcscmp (_String1="..", _String2=".") returned 1 [0189.361] wcscmp (_String1="..", _String2="..") returned 0 [0189.361] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0189.361] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0189.361] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0189.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae3e8 [0189.361] wcscpy (in: _Dest=0x3dae3e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0189.361] wcscat (in: _Dest=0x3dae3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\" [0189.362] wcscat (in: _Dest=0x3dae3e8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" [0191.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0191.814] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0191.814] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0191.814] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0191.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80217d0 [0191.814] wcscpy (in: _Dest=0x80217d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0191.814] wcscat (in: _Dest=0x80217d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\" [0191.814] wcscat (in: _Dest=0x80217d0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" [0191.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80217d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a2c [0191.815] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0191.816] FindClose (in: hFindFile=0x8099490 | out: hFindFile=0x8099490) returned 1 [0191.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0191.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 [0191.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 Thread: id = 5806 os_tid = 0x28e0 [0187.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css")) returned 0x20 [0192.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0192.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.323] GetLastError () returned 0x5 [0192.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0192.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 Thread: id = 5807 os_tid = 0x28e4 [0187.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8568 [0187.788] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0187.788] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0187.788] wcscat (in: _Dest=0x2c8568, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*" [0187.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0187.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55508 [0192.352] wcscmp (_String1=".", _String2=".") returned 0 [0192.352] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.352] wcscmp (_String1="..", _String2=".") returned 1 [0192.352] wcscmp (_String1="..", _String2="..") returned 0 [0192.352] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0192.352] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0192.352] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0192.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8020e70 [0192.352] wcscpy (in: _Dest=0x8020e70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0192.352] wcscat (in: _Dest=0x8020e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0192.352] wcscat (in: _Dest=0x8020e70, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" [0192.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0192.589] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0192.589] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0192.589] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0192.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8021b90 [0192.589] wcscpy (in: _Dest=0x8021b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0192.589] wcscat (in: _Dest=0x8021b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0192.589] wcscat (in: _Dest=0x8021b90, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" [0192.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0192.590] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.590] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.590] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80207e0 [0192.590] wcscpy (in: _Dest=0x80207e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0192.590] wcscat (in: _Dest=0x80207e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0192.590] wcscat (in: _Dest=0x80207e0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" [0192.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80207e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0192.591] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.591] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.591] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80217d0 [0192.591] wcscpy (in: _Dest=0x80217d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0192.592] wcscat (in: _Dest=0x80217d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0192.592] wcscat (in: _Dest=0x80217d0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" [0192.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80217d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0192.592] FindNextFileW (in: hFindFile=0x3e55508, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.593] FindClose (in: hFindFile=0x3e55508 | out: hFindFile=0x3e55508) returned 1 [0192.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0192.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 [0192.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1648) returned 1 Thread: id = 5808 os_tid = 0x28e8 [0187.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css")) returned 0x20 [0192.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0192.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.353] GetLastError () returned 0x5 [0192.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0192.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 Thread: id = 5809 os_tid = 0x28ec [0187.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f1a80 [0187.789] wcscpy (in: _Dest=0x81f1a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0187.789] wcscat (in: _Dest=0x81f1a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\" [0187.789] wcscat (in: _Dest=0x81f1a80, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*" [0187.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0187.790] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0189.039] wcscmp (_String1=".", _String2=".") returned 0 [0189.039] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.039] wcscmp (_String1="..", _String2=".") returned 1 [0189.039] wcscmp (_String1="..", _String2="..") returned 0 [0189.039] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0189.039] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0189.039] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0189.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x8021050 [0189.040] wcscpy (in: _Dest=0x8021050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0189.040] wcscat (in: _Dest=0x8021050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\" [0189.040] wcscat (in: _Dest=0x8021050, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" [0189.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0189.041] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0189.042] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0189.042] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0189.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8021aa0 [0189.042] wcscpy (in: _Dest=0x8021aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0189.042] wcscat (in: _Dest=0x8021aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\" [0189.042] wcscat (in: _Dest=0x8021aa0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" [0189.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0189.043] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0189.043] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0189.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0189.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1a80) returned 1 [0189.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1b58) returned 1 Thread: id = 5810 os_tid = 0x28f0 [0187.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css")) returned 0x20 [0192.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0192.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.328] GetLastError () returned 0x5 [0192.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0192.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c91a8) returned 1 Thread: id = 5811 os_tid = 0x28f4 [0187.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3b388 [0187.791] wcscpy (in: _Dest=0x3e3b388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0187.791] wcscat (in: _Dest=0x3e3b388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0187.791] wcscat (in: _Dest=0x3e3b388, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*" [0187.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0187.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55648 [0192.321] wcscmp (_String1=".", _String2=".") returned 0 [0192.321] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.321] wcscmp (_String1="..", _String2=".") returned 1 [0192.321] wcscmp (_String1="..", _String2="..") returned 0 [0192.321] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0192.321] wcscmp (_String1="background.gif", _String2=".") returned 1 [0192.321] wcscmp (_String1="background.gif", _String2="..") returned 1 [0192.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e26340 [0192.321] wcscpy (in: _Dest=0x3e26340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0192.321] wcscat (in: _Dest=0x3e26340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0192.321] wcscat (in: _Dest=0x3e26340, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" [0193.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e26340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0193.954] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button.gif", cAlternateFileName="")) returned 1 [0193.955] wcscmp (_String1="button.gif", _String2=".") returned 1 [0193.955] wcscmp (_String1="button.gif", _String2="..") returned 1 [0193.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae5d8 [0193.955] wcscpy (in: _Dest=0x3dae5d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0193.955] wcscat (in: _Dest=0x3dae5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0193.955] wcscat (in: _Dest=0x3dae5d8, _Source="button.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" [0193.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0193.956] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0193.956] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0193.956] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0193.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae6d0 [0193.956] wcscpy (in: _Dest=0x3dae6d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0193.957] wcscat (in: _Dest=0x3dae6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0193.957] wcscat (in: _Dest=0x3dae6d0, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" [0193.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0193.958] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0193.958] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0193.958] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0193.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae7c8 [0193.958] wcscpy (in: _Dest=0x3dae7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0193.958] wcscat (in: _Dest=0x3dae7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0193.958] wcscat (in: _Dest=0x3dae7c8, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" [0193.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0193.959] FindNextFileW (in: hFindFile=0x3e55648, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0193.959] FindClose (in: hFindFile=0x3e55648 | out: hFindFile=0x3e55648) returned 1 [0193.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0193.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b388) returned 1 [0193.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8fe8) returned 1 Thread: id = 5812 os_tid = 0x28f8 [0187.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css")) returned 0x20 [0192.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0192.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.315] GetLastError () returned 0x5 [0192.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0192.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a990) returned 1 Thread: id = 5813 os_tid = 0x28fc [0187.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3b2a0 [0187.799] wcscpy (in: _Dest=0x3e3b2a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0187.799] wcscat (in: _Dest=0x3e3b2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0187.799] wcscat (in: _Dest=0x3e3b2a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*" [0187.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0187.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55488 [0192.320] wcscmp (_String1=".", _String2=".") returned 0 [0192.320] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.320] wcscmp (_String1="..", _String2=".") returned 1 [0192.320] wcscmp (_String1="..", _String2="..") returned 0 [0192.320] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0192.320] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0192.320] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0192.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae008 [0192.320] wcscpy (in: _Dest=0x3dae008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0192.320] wcscat (in: _Dest=0x3dae008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0192.320] wcscat (in: _Dest=0x3dae008, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" [0192.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0192.829] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.829] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.829] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadf10 [0192.829] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0192.829] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0192.829] wcscat (in: _Dest=0x3dadf10, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" [0192.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0192.830] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.830] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.830] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dada38 [0192.830] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0192.830] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0192.830] wcscat (in: _Dest=0x3dada38, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" [0192.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dada38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0192.832] FindNextFileW (in: hFindFile=0x3e55488, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.832] FindClose (in: hFindFile=0x3e55488 | out: hFindFile=0x3e55488) returned 1 [0192.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0192.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b2a0) returned 1 [0192.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 5814 os_tid = 0x29b4 [0187.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css")) returned 0x20 [0192.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0192.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.314] GetLastError () returned 0x5 [0192.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0192.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b9e0) returned 1 Thread: id = 5815 os_tid = 0x29b8 [0187.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css")) returned 0x20 [0192.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0192.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.329] GetLastError () returned 0x5 [0192.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0192.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 5816 os_tid = 0x29bc [0187.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css")) returned 0x20 [0192.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0192.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.331] GetLastError () returned 0x5 [0192.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0192.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8f08) returned 1 Thread: id = 5817 os_tid = 0x29c0 [0187.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f1c30 [0187.818] wcscpy (in: _Dest=0x81f1c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0187.818] wcscat (in: _Dest=0x81f1c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0187.818] wcscat (in: _Dest=0x81f1c30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*" [0187.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0187.819] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54f08 [0192.346] wcscmp (_String1=".", _String2=".") returned 0 [0192.346] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.346] wcscmp (_String1="..", _String2=".") returned 1 [0192.346] wcscmp (_String1="..", _String2="..") returned 0 [0192.346] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0192.346] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0192.346] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0192.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80208d0 [0192.346] wcscpy (in: _Dest=0x80208d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0192.346] wcscat (in: _Dest=0x80208d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0192.346] wcscat (in: _Dest=0x80208d0, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" [0195.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80208d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26b8 [0195.701] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.701] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.701] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x8021140 [0195.702] wcscpy (in: _Dest=0x8021140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0195.702] wcscat (in: _Dest=0x8021140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0195.702] wcscat (in: _Dest=0x8021140, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" [0195.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0195.703] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.703] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.703] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8021500 [0195.703] wcscpy (in: _Dest=0x8021500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0195.703] wcscat (in: _Dest=0x8021500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0195.703] wcscat (in: _Dest=0x8021500, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" [0195.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x186c [0195.704] FindNextFileW (in: hFindFile=0x3e54f08, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.704] FindClose (in: hFindFile=0x3e54f08 | out: hFindFile=0x3e54f08) returned 1 [0195.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0195.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1c30) returned 1 [0195.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1d08) returned 1 Thread: id = 5818 os_tid = 0xba0 [0187.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css")) returned 0x20 [0192.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0192.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.332] GetLastError () returned 0x5 [0192.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0192.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9368) returned 1 Thread: id = 5819 os_tid = 0x2ad0 [0187.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css")) returned 0x20 [0192.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0192.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.312] GetLastError () returned 0x5 [0192.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0192.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 5820 os_tid = 0x2adc [0187.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9988 [0187.820] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0187.820] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0187.821] wcscat (in: _Dest=0x2c9988, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*" [0187.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0187.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55608 [0192.319] wcscmp (_String1=".", _String2=".") returned 0 [0192.319] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.319] wcscmp (_String1="..", _String2=".") returned 1 [0192.319] wcscmp (_String1="..", _String2="..") returned 0 [0192.319] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0192.319] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0192.319] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0192.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021320 [0192.320] wcscpy (in: _Dest=0x8021320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0192.320] wcscat (in: _Dest=0x8021320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0192.320] wcscat (in: _Dest=0x8021320, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" [0192.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0192.576] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.576] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.576] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae3e8 [0192.576] wcscpy (in: _Dest=0x3dae3e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0192.576] wcscat (in: _Dest=0x3dae3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0192.576] wcscat (in: _Dest=0x3dae3e8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" [0192.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0192.577] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.577] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.577] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021500 [0192.577] wcscpy (in: _Dest=0x8021500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0192.577] wcscat (in: _Dest=0x8021500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0192.577] wcscat (in: _Dest=0x8021500, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" [0192.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0192.578] FindNextFileW (in: hFindFile=0x3e55608, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.578] FindClose (in: hFindFile=0x3e55608 | out: hFindFile=0x3e55608) returned 1 [0192.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0192.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 [0192.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 5821 os_tid = 0x2d5c [0187.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css")) returned 0x20 [0192.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0192.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.313] GetLastError () returned 0x5 [0192.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0192.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a6d8) returned 1 Thread: id = 5822 os_tid = 0x2d60 [0187.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css")) returned 0x20 [0192.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0192.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.334] GetLastError () returned 0x5 [0192.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0192.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9288) returned 1 Thread: id = 5823 os_tid = 0x2d64 [0187.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css")) returned 0x20 [0192.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0192.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.359] GetLastError () returned 0x5 [0192.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0192.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b1b8) returned 1 Thread: id = 5824 os_tid = 0x2d68 [0187.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f17f8 [0187.825] wcscpy (in: _Dest=0x81f17f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0187.825] wcscat (in: _Dest=0x81f17f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\" [0187.826] wcscat (in: _Dest=0x81f17f8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*" [0187.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0187.826] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e55008 [0192.346] wcscmp (_String1=".", _String2=".") returned 0 [0192.346] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.346] wcscmp (_String1="..", _String2=".") returned 1 [0192.346] wcscmp (_String1="..", _String2="..") returned 0 [0192.346] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.346] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.346] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a080 [0192.347] wcscpy (in: _Dest=0x3e3a080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0192.347] wcscat (in: _Dest=0x3e3a080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\" [0192.347] wcscat (in: _Dest=0x3e3a080, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" [0192.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0192.834] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.834] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.834] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b2a0 [0192.834] wcscpy (in: _Dest=0x3e3b2a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0192.834] wcscat (in: _Dest=0x3e3b2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\" [0192.834] wcscat (in: _Dest=0x3e3b2a0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" [0192.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0192.835] FindNextFileW (in: hFindFile=0x3e55008, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.835] FindClose (in: hFindFile=0x3e55008 | out: hFindFile=0x3e55008) returned 1 [0192.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0192.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f17f8) returned 1 [0192.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efcc8) returned 1 Thread: id = 5825 os_tid = 0x2d6c [0187.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css")) returned 0x20 [0192.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0192.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.337] GetLastError () returned 0x5 [0192.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0192.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f18d0) returned 1 Thread: id = 5826 os_tid = 0x2d70 [0187.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css")) returned 0x20 [0192.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0192.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.339] GetLastError () returned 0x5 [0192.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0192.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 5827 os_tid = 0x2d74 [0187.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f29b0 [0187.932] wcscpy (in: _Dest=0x81f29b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0187.932] wcscat (in: _Dest=0x81f29b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0187.932] wcscat (in: _Dest=0x81f29b0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*" [0187.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0187.932] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a08 [0192.347] wcscmp (_String1=".", _String2=".") returned 0 [0192.347] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.347] wcscmp (_String1="..", _String2=".") returned 1 [0192.347] wcscmp (_String1="..", _String2="..") returned 0 [0192.347] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0192.347] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0192.347] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0192.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b810 [0192.347] wcscpy (in: _Dest=0x3e3b810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0192.347] wcscat (in: _Dest=0x3e3b810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0192.347] wcscat (in: _Dest=0x3e3b810, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" [0192.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0192.584] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.585] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.585] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8020ba0 [0192.585] wcscpy (in: _Dest=0x8020ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0192.585] wcscat (in: _Dest=0x8020ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0192.585] wcscat (in: _Dest=0x8020ba0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" [0192.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0192.586] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.586] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.586] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a7c0 [0192.586] wcscpy (in: _Dest=0x3e3a7c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0192.586] wcscat (in: _Dest=0x3e3a7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0192.586] wcscat (in: _Dest=0x3e3a7c0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" [0192.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0192.587] FindNextFileW (in: hFindFile=0x3e54a08, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.587] FindClose (in: hFindFile=0x3e54a08 | out: hFindFile=0x3e54a08) returned 1 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f29b0) returned 1 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f19a8) returned 1 Thread: id = 5828 os_tid = 0x2d7c [0187.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css")) returned 0x20 [0189.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0189.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.362] GetLastError () returned 0x5 [0189.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0189.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 5829 os_tid = 0x2d80 [0187.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81f5e28 [0187.933] wcscpy (in: _Dest=0x81f5e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0187.933] wcscat (in: _Dest=0x81f5e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\" [0187.933] wcscat (in: _Dest=0x81f5e28, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*" [0187.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0187.933] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8584e390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0189.529] wcscmp (_String1=".", _String2=".") returned 0 [0189.529] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8584e390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.529] wcscmp (_String1="..", _String2=".") returned 1 [0189.529] wcscmp (_String1="..", _String2="..") returned 0 [0189.529] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0189.529] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0189.529] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0189.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadf10 [0189.529] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0189.529] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\" [0189.529] wcscat (in: _Dest=0x3dadf10, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" [0192.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2718 [0192.264] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.264] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.264] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80209c0 [0192.264] wcscpy (in: _Dest=0x80209c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0192.264] wcscat (in: _Dest=0x80209c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\" [0192.264] wcscat (in: _Dest=0x80209c0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" [0192.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80209c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0192.265] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.265] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0192.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0192.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5e28) returned 1 [0192.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 5830 os_tid = 0x2d84 [0187.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css")) returned 0x20 [0191.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0191.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.755] GetLastError () returned 0x5 [0191.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0191.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b558) returned 1 Thread: id = 5831 os_tid = 0x2d88 [0187.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81f5f08 [0187.938] wcscpy (in: _Dest=0x81f5f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0187.939] wcscat (in: _Dest=0x81f5f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0187.939] wcscat (in: _Dest=0x81f5f08, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*" [0187.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0187.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85dcf670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80997d0 [0191.903] wcscmp (_String1=".", _String2=".") returned 0 [0191.903] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85dcf670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.904] wcscmp (_String1="..", _String2=".") returned 1 [0191.904] wcscmp (_String1="..", _String2="..") returned 0 [0191.904] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0191.904] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0191.904] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0191.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80207e0 [0191.904] wcscpy (in: _Dest=0x80207e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0191.904] wcscat (in: _Dest=0x80207e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0191.904] wcscat (in: _Dest=0x80207e0, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" [0192.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80207e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba4 [0192.224] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0192.224] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0192.224] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0192.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8021b90 [0192.224] wcscpy (in: _Dest=0x8021b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0192.224] wcscat (in: _Dest=0x8021b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0192.224] wcscat (in: _Dest=0x8021b90, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" [0192.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0192.225] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.226] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.226] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8020ba0 [0192.230] wcscpy (in: _Dest=0x8020ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0192.230] wcscat (in: _Dest=0x8020ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0192.230] wcscat (in: _Dest=0x8020ba0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" [0192.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0192.231] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.231] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.231] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8021500 [0192.232] wcscpy (in: _Dest=0x8021500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0192.232] wcscat (in: _Dest=0x8021500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0192.232] wcscat (in: _Dest=0x8021500, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" [0192.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0192.233] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.233] FindClose (in: hFindFile=0x80997d0 | out: hFindFile=0x80997d0) returned 1 [0192.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0192.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5f08) returned 1 [0192.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1de0) returned 1 Thread: id = 5832 os_tid = 0x2d8c [0187.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css")) returned 0x20 [0191.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0191.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.905] GetLastError () returned 0x5 [0191.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0191.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 5833 os_tid = 0x2d90 [0187.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f2a88 [0187.940] wcscpy (in: _Dest=0x81f2a88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0187.940] wcscat (in: _Dest=0x81f2a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\" [0187.940] wcscat (in: _Dest=0x81f2a88, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*" [0187.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0187.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76c80030, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86a28890, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099410 [0191.917] wcscmp (_String1=".", _String2=".") returned 0 [0191.917] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76c80030, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86a28890, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.917] wcscmp (_String1="..", _String2=".") returned 1 [0191.917] wcscmp (_String1="..", _String2="..") returned 0 [0191.917] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0191.917] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0191.917] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0191.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x8020c90 [0191.917] wcscpy (in: _Dest=0x8020c90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0191.917] wcscat (in: _Dest=0x8020c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\" [0191.917] wcscat (in: _Dest=0x8020c90, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" [0192.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0192.602] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.602] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.602] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8021c80 [0192.602] wcscpy (in: _Dest=0x8021c80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0192.602] wcscat (in: _Dest=0x8021c80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\" [0192.602] wcscat (in: _Dest=0x8021c80, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" [0192.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0192.603] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.603] FindClose (in: hFindFile=0x8099410 | out: hFindFile=0x8099410) returned 1 [0192.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0192.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2a88) returned 1 [0192.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1eb8) returned 1 Thread: id = 5834 os_tid = 0x2d94 [0187.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css")) returned 0x20 [0191.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0191.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.909] GetLastError () returned 0x5 [0191.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0191.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 5835 os_tid = 0x2d98 [0187.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e3ab60 [0187.949] wcscpy (in: _Dest=0x3e3ab60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0187.949] wcscat (in: _Dest=0x3e3ab60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0187.949] wcscat (in: _Dest=0x3e3ab60, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*" [0187.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0187.949] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098dd0 [0191.885] wcscmp (_String1=".", _String2=".") returned 0 [0191.885] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.885] wcscmp (_String1="..", _String2=".") returned 1 [0191.885] wcscmp (_String1="..", _String2="..") returned 0 [0191.885] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0191.885] wcscmp (_String1="background.gif", _String2=".") returned 1 [0191.885] wcscmp (_String1="background.gif", _String2="..") returned 1 [0191.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e27540 [0191.885] wcscpy (in: _Dest=0x3e27540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0191.885] wcscat (in: _Dest=0x3e27540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0191.885] wcscat (in: _Dest=0x3e27540, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" [0194.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e27540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0194.027] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0194.027] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0194.027] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0194.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae8c0 [0194.027] wcscpy (in: _Dest=0x3dae8c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0194.027] wcscat (in: _Dest=0x3dae8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0194.027] wcscat (in: _Dest=0x3dae8c0, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" [0194.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0194.028] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0194.028] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0194.028] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0194.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae9b8 [0194.029] wcscpy (in: _Dest=0x3dae9b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0194.029] wcscat (in: _Dest=0x3dae9b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0194.029] wcscat (in: _Dest=0x3dae9b8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" [0194.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0194.031] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0194.031] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0194.031] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0194.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3daeab0 [0194.031] wcscpy (in: _Dest=0x3daeab0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0194.031] wcscat (in: _Dest=0x3daeab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0194.031] wcscat (in: _Dest=0x3daeab0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" [0194.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3daeab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0194.032] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0194.032] FindClose (in: hFindFile=0x8098dd0 | out: hFindFile=0x8098dd0) returned 1 [0194.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0194.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ab60) returned 1 [0194.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5648) returned 1 Thread: id = 5836 os_tid = 0x2d9c [0187.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css")) returned 0x20 [0191.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0191.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.872] GetLastError () returned 0x5 [0191.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0191.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a8a8) returned 1 Thread: id = 5837 os_tid = 0x2da0 [0187.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3e39b10 [0187.951] wcscpy (in: _Dest=0x3e39b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0187.951] wcscat (in: _Dest=0x3e39b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0187.951] wcscat (in: _Dest=0x3e39b10, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*" [0187.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0187.951] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099490 [0191.871] wcscmp (_String1=".", _String2=".") returned 0 [0191.871] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.871] wcscmp (_String1="..", _String2=".") returned 1 [0191.871] wcscmp (_String1="..", _String2="..") returned 0 [0191.871] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0191.871] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0191.871] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0191.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae100 [0191.872] wcscpy (in: _Dest=0x3dae100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0191.872] wcscat (in: _Dest=0x3dae100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0191.872] wcscat (in: _Dest=0x3dae100, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" [0193.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f4 [0193.936] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0193.936] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0193.936] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0193.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae008 [0193.936] wcscpy (in: _Dest=0x3dae008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0193.936] wcscat (in: _Dest=0x3dae008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0193.936] wcscat (in: _Dest=0x3dae008, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" [0193.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0193.938] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0193.938] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0193.938] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0193.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadc28 [0193.938] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0193.938] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0193.938] wcscat (in: _Dest=0x3dadc28, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" [0193.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c [0193.939] FindNextFileW (in: hFindFile=0x8099490, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0193.939] FindClose (in: hFindFile=0x8099490 | out: hFindFile=0x8099490) returned 1 [0193.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0193.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39b10) returned 1 [0193.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5728) returned 1 Thread: id = 5838 os_tid = 0x2da4 [0187.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css")) returned 0x20 [0191.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0191.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.883] GetLastError () returned 0x5 [0191.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0191.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a168) returned 1 Thread: id = 5839 os_tid = 0x2da8 [0187.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css")) returned 0x20 [0191.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0191.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.911] GetLastError () returned 0x5 [0191.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0191.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5808) returned 1 Thread: id = 5840 os_tid = 0x2dac [0187.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css")) returned 0x20 [0191.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0191.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.913] GetLastError () returned 0x5 [0191.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0191.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f58e8) returned 1 Thread: id = 5841 os_tid = 0x2db0 [0187.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x81f2b60 [0187.955] wcscpy (in: _Dest=0x81f2b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0187.955] wcscat (in: _Dest=0x81f2b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0187.955] wcscat (in: _Dest=0x81f2b60, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*" [0187.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0187.955] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7718eef0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876357f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099610 [0191.915] wcscmp (_String1=".", _String2=".") returned 0 [0191.915] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7718eef0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876357f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.915] wcscmp (_String1="..", _String2=".") returned 1 [0191.915] wcscmp (_String1="..", _String2="..") returned 0 [0191.915] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0191.915] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0191.915] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0191.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8021230 [0191.915] wcscpy (in: _Dest=0x8021230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0191.915] wcscat (in: _Dest=0x8021230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0191.915] wcscat (in: _Dest=0x8021230, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" [0193.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0193.962] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0193.962] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0193.962] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0193.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x8020d80 [0193.962] wcscpy (in: _Dest=0x8020d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0193.962] wcscat (in: _Dest=0x8020d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0193.962] wcscat (in: _Dest=0x8020d80, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" [0193.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0193.963] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x771b5050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0193.963] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0193.963] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0193.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8020c90 [0193.963] wcscpy (in: _Dest=0x8020c90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0193.963] wcscat (in: _Dest=0x8020c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0193.963] wcscat (in: _Dest=0x8020c90, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" [0193.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0193.964] FindNextFileW (in: hFindFile=0x8099610, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x771b5050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0193.964] FindClose (in: hFindFile=0x8099610 | out: hFindFile=0x8099610) returned 1 [0193.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0193.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2b60) returned 1 [0193.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2800) returned 1 Thread: id = 5842 os_tid = 0x2db4 [0187.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css")) returned 0x20 [0191.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0191.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.753] GetLastError () returned 0x5 [0191.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0191.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f59c8) returned 1 Thread: id = 5843 os_tid = 0x2db8 [0187.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css")) returned 0x20 [0191.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0191.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.916] GetLastError () returned 0x5 [0191.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0191.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5aa8) returned 1 Thread: id = 5844 os_tid = 0x2dbc [0187.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x81f5fe8 [0187.957] wcscpy (in: _Dest=0x81f5fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0187.957] wcscat (in: _Dest=0x81f5fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0187.957] wcscat (in: _Dest=0x81f5fe8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*" [0187.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0187.957] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c7c7d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88777770, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.882] wcscmp (_String1=".", _String2=".") returned 0 [0191.882] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c7c7d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88777770, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.882] wcscmp (_String1="..", _String2=".") returned 1 [0191.882] wcscmp (_String1="..", _String2="..") returned 0 [0191.882] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0191.883] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0191.883] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0191.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80218c0 [0191.883] wcscpy (in: _Dest=0x80218c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0191.883] wcscat (in: _Dest=0x80218c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0191.883] wcscat (in: _Dest=0x80218c0, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" [0192.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80218c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0192.562] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.562] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.562] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadf10 [0192.562] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0192.562] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0192.562] wcscat (in: _Dest=0x3dadf10, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" [0192.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0192.563] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.563] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.563] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80209c0 [0192.563] wcscpy (in: _Dest=0x80209c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0192.564] wcscat (in: _Dest=0x80209c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0192.564] wcscat (in: _Dest=0x80209c0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" [0192.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80209c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0192.565] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.565] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0192.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0192.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5fe8) returned 1 [0192.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5b88) returned 1 Thread: id = 5845 os_tid = 0x2e00 [0187.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css")) returned 0x20 [0191.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0191.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.881] GetLastError () returned 0x5 [0191.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0191.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ac48) returned 1 Thread: id = 5846 os_tid = 0x2f14 [0187.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css")) returned 0x20 [0191.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0191.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.901] GetLastError () returned 0x5 [0191.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0191.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5c68) returned 1 Thread: id = 5847 os_tid = 0x2f18 [0187.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css")) returned 0x20 [0191.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0191.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.879] GetLastError () returned 0x5 [0191.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0191.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ad30) returned 1 Thread: id = 5848 os_tid = 0x2f1c [0187.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f2c38 [0187.967] wcscpy (in: _Dest=0x81f2c38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0187.967] wcscat (in: _Dest=0x81f2c38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\" [0187.967] wcscat (in: _Dest=0x81f2c38, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*" [0187.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80255f0 [0187.967] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x80255f0 | out: lpFindFileData=0x80255f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8be11010, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0191.903] wcscmp (_String1=".", _String2=".") returned 0 [0191.903] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x80255f0 | out: lpFindFileData=0x80255f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8be11010, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.903] wcscmp (_String1="..", _String2=".") returned 1 [0191.903] wcscmp (_String1="..", _String2="..") returned 0 [0191.903] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x80255f0 | out: lpFindFileData=0x80255f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0191.903] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0191.903] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0191.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3ac48 [0191.903] wcscpy (in: _Dest=0x3e3ac48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0191.903] wcscat (in: _Dest=0x3e3ac48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\" [0191.903] wcscat (in: _Dest=0x3e3ac48, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" [0192.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ac48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0192.572] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x80255f0 | out: lpFindFileData=0x80255f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.572] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.573] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b8f8 [0192.573] wcscpy (in: _Dest=0x3e3b8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0192.573] wcscat (in: _Dest=0x3e3b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\" [0192.573] wcscat (in: _Dest=0x3e3b8f8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" [0192.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0192.574] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x80255f0 | out: lpFindFileData=0x80255f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.574] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80255f0) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2c38) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0688) returned 1 Thread: id = 5849 os_tid = 0x2f20 [0188.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css")) returned 0x20 [0191.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0191.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.906] GetLastError () returned 0x5 [0191.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0191.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f28d8) returned 1 Thread: id = 5850 os_tid = 0x2f24 [0188.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df2f8 [0188.185] wcscpy (in: _Dest=0x81df2f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" [0188.185] wcscat (in: _Dest=0x81df2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\" [0188.185] wcscat (in: _Dest=0x81df2f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*" [0188.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060660 [0188.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d10 [0188.185] wcscmp (_String1=".", _String2=".") returned 0 [0188.185] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.186] wcscmp (_String1="..", _String2=".") returned 1 [0188.186] wcscmp (_String1="..", _String2="..") returned 0 [0188.186] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 1 [0188.186] wcscmp (_String1="Proximity", _String2=".") returned 1 [0188.186] wcscmp (_String1="Proximity", _String2="..") returned 1 [0188.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x819ad18 [0188.186] wcscpy (in: _Dest=0x819ad18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" [0188.186] wcscat (in: _Dest=0x819ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\" [0188.186] wcscat (in: _Dest=0x819ad18, _Source="Proximity" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" [0188.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb080, lpParameter=0x819ad18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d4 [0188.409] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 0 [0188.410] FindClose (in: hFindFile=0x8098d10 | out: hFindFile=0x8098d10) returned 1 [0188.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060660) returned 1 [0188.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df2f8) returned 1 [0188.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 5851 os_tid = 0x2fa8 [0188.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x20 [0189.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x20) returned 0 [0189.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.617] GetLastError () returned 0x5 [0189.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x20) returned 0 [0189.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f8e0) returned 1 Thread: id = 5852 os_tid = 0xe44 [0188.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x20 [0189.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x20) returned 0 [0189.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.612] GetLastError () returned 0x5 [0189.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x20) returned 0 [0189.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 5853 os_tid = 0x136c [0188.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x20 [0189.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x20) returned 0 [0189.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.606] GetLastError () returned 0x5 [0189.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x20) returned 0 [0189.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 5854 os_tid = 0x1670 [0188.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x20 [0189.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x20) returned 0 [0189.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.594] GetLastError () returned 0x5 [0189.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x20) returned 0 [0189.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f858) returned 1 Thread: id = 5855 os_tid = 0x1674 [0188.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x20 [0189.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x20) returned 0 [0189.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.587] GetLastError () returned 0x5 [0189.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x20) returned 0 [0189.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f338) returned 1 Thread: id = 5856 os_tid = 0xc94 [0188.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x20 [0189.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x20) returned 0 [0189.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.581] GetLastError () returned 0x5 [0189.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x20) returned 0 [0189.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f558) returned 1 Thread: id = 5857 os_tid = 0x1678 [0188.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x20 [0189.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x20) returned 0 [0189.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.571] GetLastError () returned 0x5 [0189.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x20) returned 0 [0189.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5e0) returned 1 Thread: id = 5858 os_tid = 0xdf8 [0188.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x20 [0189.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x20) returned 0 [0189.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.569] GetLastError () returned 0x5 [0189.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x20) returned 0 [0189.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f668) returned 1 Thread: id = 5859 os_tid = 0x1370 [0188.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x20 [0189.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x20) returned 0 [0189.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.567] GetLastError () returned 0x5 [0189.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x20) returned 0 [0189.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f778) returned 1 Thread: id = 5860 os_tid = 0x614 [0188.200] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020 [0191.392] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0202.968] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dc8 [0211.104] GetFileSizeEx (in: hFile=0x1dc8, lpFileSize=0xf45fbd8 | out: lpFileSize=0xf45fbd8*=264) returned 1 [0211.104] SetFilePointerEx (in: hFile=0x1dc8, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.105] ReadFile (in: hFile=0x1dc8, lpBuffer=0xf45fbe4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf45fbc0, lpOverlapped=0x0 | out: lpBuffer=0xf45fbe4*, lpNumberOfBytesRead=0xf45fbc0*=0x4, lpOverlapped=0x0) returned 1 [0211.106] SetFilePointerEx (in: hFile=0x1dc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064100 [0211.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80640d8 [0211.106] NtQuerySystemTime (in: CurrentTime=0xf45fb60 | out: CurrentTime=0xf45fb60*=132471540788244000) returned 0x0 [0211.106] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x1fd4f75c [0211.106] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x6952d47b [0211.106] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x3047e07 [0211.106] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x6c53e326 [0211.106] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x5253e9c1 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x15275b52 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x46871e1d [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x75bd3967 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x451f5015 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x7e9655f3 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0xa9b212b [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x58c88927 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x1e4b3dd2 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x117e42a6 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x13cbdc9c [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x385209ad [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x682e7fbf [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x78e97d50 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x4b099008 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0xa3b5192 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0xf1dd02a [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x78d0dc06 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x496bd072 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x4343b641 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x7ba15f3e [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x106cc180 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x40c7b073 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x520fceb0 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x68ab6323 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x545c8a81 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x7f953012 [0211.107] RtlRandomEx (in: Seed=0xf45fb58 | out: Seed=0xf45fb58) returned 0x1030efcf [0211.116] ReadFile (in: hFile=0x1dc8, lpBuffer=0x80a1b88, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xf45fb54, lpOverlapped=0x0 | out: lpBuffer=0x80a1b88*, lpNumberOfBytesRead=0xf45fb54*=0x108, lpOverlapped=0x0) returned 1 [0211.116] SetFilePointerEx (in: hFile=0x1dc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.116] WriteFile (in: hFile=0x1dc8, lpBuffer=0x80a5790*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xf45fb58, lpOverlapped=0x0 | out: lpBuffer=0x80a5790*, lpNumberOfBytesWritten=0xf45fb58*=0x108, lpOverlapped=0x0) returned 1 [0213.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42470 [0213.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d424e8 [0213.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424e8) returned 1 [0213.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a5790) returned 1 [0213.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a1b88) returned 1 [0213.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68588) returned 1 [0213.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb1d8) returned 1 [0213.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69780 [0213.945] SetFilePointerEx (in: hFile=0x1dc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.945] WriteFile (in: hFile=0x1dc8, lpBuffer=0x81df990*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf45fbcc, lpOverlapped=0x0 | out: lpBuffer=0x81df990*, lpNumberOfBytesWritten=0xf45fbcc*=0x10c, lpOverlapped=0x0) returned 1 [0214.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df990) returned 1 [0214.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697b0) returned 1 [0214.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424e8) returned 1 [0214.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69780) returned 1 [0214.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42470) returned 1 [0214.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064100) returned 1 [0214.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064060) returned 1 [0214.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064088) returned 1 [0214.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81866c8 [0214.100] wcscpy (in: _Dest=0x81866c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" [0214.100] wcscat (in: _Dest=0x81866c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.f0dbec" [0214.100] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0xf45fb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c5b8 [0215.838] FlushFileBuffers (hFile=0x1dc8) returned 1 [0215.854] CloseHandle (hObject=0x1dc8) returned 1 [0216.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8428 [0216.084] wcscpy (in: _Dest=0x81d8428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" [0216.084] wcscat (in: _Dest=0x81d8428, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\F0DBEC-Readme.txt" [0216.084] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0216.084] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.567] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf45fb74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf45fb74*=0x70c, lpOverlapped=0x0) returned 1 [0216.569] CloseHandle (hObject=0x10c4) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8428) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401398) returned 1 Thread: id = 5861 os_tid = 0x1378 [0188.201] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json")) returned 0x2020 [0190.279] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0199.255] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1704 [0199.256] GetFileSizeEx (in: hFile=0x1704, lpFileSize=0x1229fb28 | out: lpFileSize=0x1229fb28*=11770) returned 1 [0199.256] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x2df6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.256] ReadFile (in: hFile=0x1704, lpBuffer=0x1229fb34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1229fb10, lpOverlapped=0x0 | out: lpBuffer=0x1229fb34*, lpNumberOfBytesRead=0x1229fb10*=0x4, lpOverlapped=0x0) returned 1 [0199.259] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5e0 [0199.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0199.259] NtQuerySystemTime (in: CurrentTime=0x1229fab0 | out: CurrentTime=0x1229fab0*=132471540671556000) returned 0x0 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x24a7c562 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x19a441c4 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x49b93796 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x6eeee00b [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x2c1f0886 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x78cf41af [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x62206f7f [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x65864acb [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x22697445 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x63022e49 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x11a18072 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x1d26bbff [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x46083a06 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x16d6165 [0199.259] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x2b9d6551 [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x68fc2237 [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x5c7b3aef [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x2e6a2b56 [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x50fa172d [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x241a7a1c [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x6594e9a3 [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x131d4e6a [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x62af0a77 [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x365bfc0d [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x545a954b [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x4f403e85 [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x430ba23d [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x386a176b [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x65d9a8eb [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x773a82c4 [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x2068526c [0199.260] RtlRandomEx (in: Seed=0x1229faa8 | out: Seed=0x1229faa8) returned 0x139a45b6 [0199.270] ReadFile (in: hFile=0x1704, lpBuffer=0x1498d870, nNumberOfBytesToRead=0x2dfa, lpNumberOfBytesRead=0x1229faa4, lpOverlapped=0x0 | out: lpBuffer=0x1498d870*, lpNumberOfBytesRead=0x1229faa4*=0x2dfa, lpOverlapped=0x0) returned 1 [0199.271] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.271] WriteFile (in: hFile=0x1704, lpBuffer=0x82a6498*, nNumberOfBytesToWrite=0x2dfa, lpNumberOfBytesWritten=0x1229faa8, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesWritten=0x1229faa8*=0x2dfa, lpOverlapped=0x0) returned 1 [0205.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063520 [0205.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063548 [0205.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063548) returned 1 [0205.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0205.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1498d870) returned 1 [0205.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054948) returned 1 [0205.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6140) returned 1 [0205.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x81e6140 [0205.586] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.586] WriteFile (in: hFile=0x1704, lpBuffer=0x8187238*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x1229fb1c, lpOverlapped=0x0 | out: lpBuffer=0x8187238*, lpNumberOfBytesWritten=0x1229fb1c*=0x11e, lpOverlapped=0x0) returned 1 [0207.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187238) returned 1 [0207.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5888) returned 1 [0207.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063548) returned 1 [0207.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6140) returned 1 [0207.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063520) returned 1 [0207.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5e0) returned 1 [0207.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0207.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0207.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c990 [0207.947] wcscpy (in: _Dest=0x3e3c990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" [0207.947] wcscat (in: _Dest=0x3e3c990, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.f0dbec" [0207.947] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.f0dbec", NtPathName=0x1229faa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x3e16628 [0208.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16628) returned 1 [0208.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f3cf0) returned 1 [0208.178] NtQueryInformationFile (in: FileHandle=0x1704, IoStatusBlock=0x1229fa78, FileInformation=0x1229fa80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1229fa78, FileInformation=0x1229fa80) returned 0x0 [0208.178] NtSetInformationFile (FileHandle=0x1704, IoStatusBlock=0x1229fa78, FileInformation=0x1229fa80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c990) returned 1 [0208.484] FlushFileBuffers (hFile=0x1704) returned 1 [0208.489] CloseHandle (hObject=0x1704) returned 1 [0208.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8df0 [0208.853] wcscpy (in: _Dest=0x3dd8df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" [0208.853] wcscat (in: _Dest=0x3dd8df0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\F0DBEC-Readme.txt" [0208.853] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\f0dbec-readme.txt")) returned 0xffffffff [0208.853] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1418 [0209.739] WriteFile (in: hFile=0x1418, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1229fac4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1229fac4*=0x70c, lpOverlapped=0x0) returned 1 [0209.741] CloseHandle (hObject=0x1418) returned 1 [0209.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8df0) returned 1 [0209.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8728) returned 1 Thread: id = 5862 os_tid = 0x137c [0188.201] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css")) returned 0x2020 [0190.279] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", dwFileAttributes=0x20) returned 1 [0199.271] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x170c [0199.272] GetFileSizeEx (in: hFile=0x170c, lpFileSize=0x1295fce8 | out: lpFileSize=0x1295fce8*=1741) returned 1 [0199.272] SetFilePointerEx (in: hFile=0x170c, liDistanceToMove=0x6c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.272] ReadFile (in: hFile=0x170c, lpBuffer=0x1295fcf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1295fcd0, lpOverlapped=0x0 | out: lpBuffer=0x1295fcf4*, lpNumberOfBytesRead=0x1295fcd0*=0x4, lpOverlapped=0x0) returned 1 [0199.274] SetFilePointerEx (in: hFile=0x170c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0199.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2120 [0199.275] NtQuerySystemTime (in: CurrentTime=0x1295fc70 | out: CurrentTime=0x1295fc70*=132471540671712000) returned 0x0 [0199.275] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x3ddca837 [0199.275] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x1ce7bb71 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x216ff6c8 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x55e56b6e [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x23f431ad [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0xfd9d4bd [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x2364e841 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x42a4f7bd [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x2d5c9a5e [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x1495d2e5 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x59aa8c97 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x1f2718f5 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x1f4d0f0b [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x3fd8cd9d [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x56b21f2f [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x4151b5d8 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0xd98c9f [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x362a87d6 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x6779ce69 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x172918fa [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x46ea2ad7 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x1d2549a8 [0199.278] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0xa68645c [0199.279] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x71f710f5 [0199.279] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x36e02746 [0199.279] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x73e3404c [0199.279] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x241c5a66 [0199.279] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x2975d99b [0199.279] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x703473f2 [0199.279] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x37b98fdf [0199.279] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x33343eee [0199.279] RtlRandomEx (in: Seed=0x1295fc68 | out: Seed=0x1295fc68) returned 0x1e4597d7 [0199.294] ReadFile (in: hFile=0x170c, lpBuffer=0x82aa0a0, nNumberOfBytesToRead=0x6cd, lpNumberOfBytesRead=0x1295fc64, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesRead=0x1295fc64*=0x6cd, lpOverlapped=0x0) returned 1 [0199.294] SetFilePointerEx (in: hFile=0x170c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.294] WriteFile (in: hFile=0x170c, lpBuffer=0x829ec88*, nNumberOfBytesToWrite=0x6cd, lpNumberOfBytesWritten=0x1295fc68, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesWritten=0x1295fc68*=0x6cd, lpOverlapped=0x0) returned 1 [0203.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80637f0 [0203.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063818 [0203.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063818) returned 1 [0203.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0203.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0203.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054858) returned 1 [0203.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e60f8) returned 1 [0203.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e77e18 [0203.482] SetFilePointerEx (in: hFile=0x170c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.482] WriteFile (in: hFile=0x170c, lpBuffer=0x8406880*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1295fcdc, lpOverlapped=0x0 | out: lpBuffer=0x8406880*, lpNumberOfBytesWritten=0x1295fcdc*=0x110, lpOverlapped=0x0) returned 1 [0203.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 [0203.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77d38) returned 1 [0203.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063818) returned 1 [0203.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e77e18) returned 1 [0203.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80637f0) returned 1 [0203.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0203.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0c80) returned 1 [0203.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3390) returned 1 [0203.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f00b0 [0203.997] wcscpy (in: _Dest=0x81f00b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" [0203.997] wcscat (in: _Dest=0x81f00b0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.f0dbec" [0203.997] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.f0dbec", NtPathName=0x1295fc60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e3dcc8 [0209.853] FlushFileBuffers (hFile=0x170c) returned 1 [0209.856] CloseHandle (hObject=0x170c) returned 1 [0209.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81f00b0 [0209.857] wcscpy (in: _Dest=0x81f00b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" [0209.857] wcscat (in: _Dest=0x81f00b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\F0DBEC-Readme.txt" [0209.857] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\f0dbec-readme.txt")) returned 0xffffffff [0209.857] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170c [0209.858] WriteFile (in: hFile=0x170c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1295fc84, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1295fc84*=0x70c, lpOverlapped=0x0) returned 1 [0209.859] CloseHandle (hObject=0x170c) returned 1 [0209.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f00b0) returned 1 [0209.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7898) returned 1 Thread: id = 5863 os_tid = 0x11fc [0188.202] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json")) returned 0x2020 [0190.277] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0199.201] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b94 [0199.218] GetFileSizeEx (in: hFile=0x1b94, lpFileSize=0x114dfcc0 | out: lpFileSize=0x114dfcc0*=9862) returned 1 [0199.219] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x2682, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.219] ReadFile (in: hFile=0x1b94, lpBuffer=0x114dfccc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x114dfca8, lpOverlapped=0x0 | out: lpBuffer=0x114dfccc*, lpNumberOfBytesRead=0x114dfca8*=0x4, lpOverlapped=0x0) returned 1 [0199.226] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0199.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0199.226] NtQuerySystemTime (in: CurrentTime=0x114dfc48 | out: CurrentTime=0x114dfc48*=132471540671088000) returned 0x0 [0199.226] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x664f26a9 [0199.226] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x3e9fb07a [0199.226] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x2c46fd6a [0199.226] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x6d7b9a5e [0199.226] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x4a87c2dd [0199.226] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x7c8559bc [0199.226] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x582af71f [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x5ebe6863 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0xa97a135 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0xacd2ec1 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x247ae06a [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x77e506d3 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x429d950e [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x5b4227c [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x1660c817 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x70b742bd [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x1020c5c1 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x129cf46e [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x136beb4e [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x4e490c8c [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x31174254 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x55cdf883 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x26cf58c7 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x2be8a68e [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x10910067 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x4cfa9f89 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x6455d460 [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x74331fe [0199.227] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x6686ae0c [0199.228] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x4b44ea34 [0199.228] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x396f7c53 [0199.228] RtlRandomEx (in: Seed=0x114dfc40 | out: Seed=0x114dfc40) returned 0x3c86532f [0199.238] ReadFile (in: hFile=0x1b94, lpBuffer=0x14991478, nNumberOfBytesToRead=0x2686, lpNumberOfBytesRead=0x114dfc3c, lpOverlapped=0x0 | out: lpBuffer=0x14991478*, lpNumberOfBytesRead=0x114dfc3c*=0x2686, lpOverlapped=0x0) returned 1 [0199.239] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.239] WriteFile (in: hFile=0x1b94, lpBuffer=0x14995080*, nNumberOfBytesToWrite=0x2686, lpNumberOfBytesWritten=0x114dfc40, lpOverlapped=0x0 | out: lpBuffer=0x14995080*, lpNumberOfBytesWritten=0x114dfc40*=0x2686, lpOverlapped=0x0) returned 1 [0203.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80637a0 [0203.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80637c8 [0203.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80637c8) returned 1 [0203.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14995080) returned 1 [0203.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14991478) returned 1 [0203.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 [0203.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5cc0) returned 1 [0203.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x81e5cc0 [0203.477] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.477] WriteFile (in: hFile=0x1b94, lpBuffer=0x81f0b18*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x114dfcb4, lpOverlapped=0x0 | out: lpBuffer=0x81f0b18*, lpNumberOfBytesWritten=0x114dfcb4*=0x11e, lpOverlapped=0x0) returned 1 [0207.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0b18) returned 1 [0207.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7388) returned 1 [0207.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80637c8) returned 1 [0207.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5cc0) returned 1 [0207.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80637a0) returned 1 [0207.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0207.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b310) returned 1 [0207.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49c18) returned 1 [0207.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x8335db0 [0207.150] wcscpy (in: _Dest=0x8335db0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" [0207.150] wcscat (in: _Dest=0x8335db0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.f0dbec" [0207.150] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.f0dbec", NtPathName=0x114dfc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e17240 [0208.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17240) returned 1 [0208.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1489bbf8) returned 1 [0208.125] NtQueryInformationFile (in: FileHandle=0x1b94, IoStatusBlock=0x114dfc10, FileInformation=0x114dfc18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x114dfc10, FileInformation=0x114dfc18) returned 0x0 [0208.125] NtSetInformationFile (FileHandle=0x1b94, IoStatusBlock=0x114dfc10, FileInformation=0x114dfc18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335db0) returned 1 [0208.300] FlushFileBuffers (hFile=0x1b94) returned 1 [0208.330] CloseHandle (hObject=0x1b94) returned 1 [0208.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81867d0 [0208.779] wcscpy (in: _Dest=0x81867d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" [0208.779] wcscat (in: _Dest=0x81867d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\F0DBEC-Readme.txt" [0208.779] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\f0dbec-readme.txt")) returned 0xffffffff [0208.779] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0209.063] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x114dfc5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x114dfc5c*=0x70c, lpOverlapped=0x0) returned 1 [0209.071] CloseHandle (hObject=0x1bc4) returned 1 [0209.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81867d0) returned 1 [0209.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7fd8) returned 1 Thread: id = 5864 os_tid = 0x1208 [0188.203] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0190.278] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0199.239] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ce4 [0199.240] GetFileSizeEx (in: hFile=0x1ce4, lpFileSize=0x1221f928 | out: lpFileSize=0x1221f928*=224) returned 1 [0199.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0199.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5e0 [0199.240] NtQuerySystemTime (in: CurrentTime=0x1221f8b0 | out: CurrentTime=0x1221f8b0*=132471540671244000) returned 0x0 [0199.240] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x5a81e0f1 [0199.240] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x106f6409 [0199.240] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x261a3a60 [0199.240] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x79276c90 [0199.240] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0xc376afb [0199.240] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x7ed5bcaf [0199.240] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0xe9f2701 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x42744c2f [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x762369c6 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x56c93db6 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x5a057a5b [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x4d1e3bf [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x26b67ec8 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x73c2aeb8 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0xd13a15d [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x27f07c4d [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x61705213 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0xe497581 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x31828fc7 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x598d4356 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x4156aa08 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x3fd3bedb [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x2089cf22 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x6f5c384a [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x41ae40a0 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0xe1e9cc1 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x7ef8797d [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x293dfc55 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x18cba710 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x50143064 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x7df6ade8 [0199.241] RtlRandomEx (in: Seed=0x1221f8a8 | out: Seed=0x1221f8a8) returned 0x2a9284fb [0199.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14986060 [0199.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14989c68 [0199.253] ReadFile (in: hFile=0x1ce4, lpBuffer=0x14986060, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0x1221f8a4, lpOverlapped=0x0 | out: lpBuffer=0x14986060*, lpNumberOfBytesRead=0x1221f8a4*=0xe0, lpOverlapped=0x0) returned 1 [0199.255] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.255] WriteFile (in: hFile=0x1ce4, lpBuffer=0x14989c68*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1221f8a8, lpOverlapped=0x0 | out: lpBuffer=0x14989c68*, lpNumberOfBytesWritten=0x1221f8a8*=0xe0, lpOverlapped=0x0) returned 1 [0204.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42060 [0204.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a88 [0204.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0204.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14989c68) returned 1 [0204.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14986060) returned 1 [0204.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80549c0) returned 1 [0204.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5888) returned 1 [0204.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f798 [0204.303] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.303] WriteFile (in: hFile=0x1ce4, lpBuffer=0x30bd140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1221f91c, lpOverlapped=0x0 | out: lpBuffer=0x30bd140*, lpNumberOfBytesWritten=0x1221f91c*=0x10c, lpOverlapped=0x0) returned 1 [0207.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0207.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f408) returned 1 [0207.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0207.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f798) returned 1 [0207.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42060) returned 1 [0207.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0207.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4abb8) returned 1 [0207.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaf0) returned 1 [0207.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x83eecd8 [0207.341] wcscpy (in: _Dest=0x83eecd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" [0207.341] wcscat (in: _Dest=0x83eecd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json.f0dbec" [0207.341] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json.f0dbec", NtPathName=0x1221f8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0207.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e17648 [0208.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17648) returned 1 [0208.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ff358) returned 1 [0208.505] NtQueryInformationFile (in: FileHandle=0x1ce4, IoStatusBlock=0x1221f878, FileInformation=0x1221f880, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1221f878, FileInformation=0x1221f880) returned 0x0 [0208.505] NtSetInformationFile (FileHandle=0x1ce4, IoStatusBlock=0x1221f878, FileInformation=0x1221f880, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83eecd8) returned 1 [0208.861] FlushFileBuffers (hFile=0x1ce4) returned 1 [0208.869] CloseHandle (hObject=0x1ce4) returned 1 [0208.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8404a40 [0208.920] wcscpy (in: _Dest=0x8404a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" [0208.920] wcscat (in: _Dest=0x8404a40, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" [0208.920] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_tw\\f0dbec-readme.txt")) returned 0xffffffff [0208.920] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_tw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2574 [0208.943] WriteFile (in: hFile=0x2574, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1221f8c4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1221f8c4*=0x70c, lpOverlapped=0x0) returned 1 [0208.961] CloseHandle (hObject=0x2574) returned 1 [0208.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404a40) returned 1 [0208.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2188) returned 1 Thread: id = 5865 os_tid = 0x1680 [0188.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville")) returned 0x20 [0189.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville", dwFileAttributes=0x20) returned 0 [0189.748] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.749] GetLastError () returned 0x5 [0189.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville", dwFileAttributes=0x20) returned 0 [0189.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053a78) returned 1 Thread: id = 5866 os_tid = 0x668 [0188.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello")) returned 0x20 [0189.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello", dwFileAttributes=0x20) returned 0 [0189.751] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.751] GetLastError () returned 0x5 [0189.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello", dwFileAttributes=0x20) returned 0 [0189.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f3c0) returned 1 Thread: id = 5867 os_tid = 0x1684 [0188.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\martinique")) returned 0x20 [0189.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique", dwFileAttributes=0x20) returned 0 [0189.746] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\martinique"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.747] GetLastError () returned 0x5 [0189.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique", dwFileAttributes=0x20) returned 0 [0189.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 Thread: id = 5868 os_tid = 0x96c [0188.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\matamoros")) returned 0x20 [0189.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros", dwFileAttributes=0x20) returned 0 [0189.054] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\matamoros"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.054] GetLastError () returned 0x5 [0189.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros", dwFileAttributes=0x20) returned 0 [0189.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403500) returned 1 Thread: id = 5869 os_tid = 0x1688 [0188.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mazatlan")) returned 0x20 [0189.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan", dwFileAttributes=0x20) returned 0 [0189.764] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mazatlan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.765] GetLastError () returned 0x5 [0189.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan", dwFileAttributes=0x20) returned 0 [0189.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84036c0) returned 1 Thread: id = 5870 os_tid = 0x168c [0188.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\menominee")) returned 0x20 [0189.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee", dwFileAttributes=0x20) returned 0 [0189.754] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\menominee"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.754] GetLastError () returned 0x5 [0189.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee", dwFileAttributes=0x20) returned 0 [0189.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403650) returned 1 Thread: id = 5871 os_tid = 0x1690 [0188.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\merida")) returned 0x20 [0189.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida", dwFileAttributes=0x20) returned 0 [0189.752] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\merida"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.753] GetLastError () returned 0x5 [0189.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida", dwFileAttributes=0x20) returned 0 [0189.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84035e0) returned 1 Thread: id = 5872 os_tid = 0x120c [0188.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\metlakatla")) returned 0x20 [0189.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla", dwFileAttributes=0x20) returned 0 [0189.758] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\metlakatla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.758] GetLastError () returned 0x5 [0189.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla", dwFileAttributes=0x20) returned 0 [0189.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 5873 os_tid = 0x1694 [0188.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mexico_city")) returned 0x20 [0189.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City", dwFileAttributes=0x20) returned 0 [0189.756] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mexico_city"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.756] GetLastError () returned 0x5 [0189.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City", dwFileAttributes=0x20) returned 0 [0189.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68858) returned 1 Thread: id = 5874 os_tid = 0x14f8 [0188.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css")) returned 0x20 [0192.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0192.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.341] GetLastError () returned 0x5 [0192.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0192.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5d48) returned 1 Thread: id = 5875 os_tid = 0x1504 [0188.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css")) returned 0x20 [0192.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0192.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.317] GetLastError () returned 0x5 [0192.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0192.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b640) returned 1 Thread: id = 5876 os_tid = 0x138c [0188.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css")) returned 0x20 [0192.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0192.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.343] GetLastError () returned 0x5 [0192.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0192.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f60c8) returned 1 Thread: id = 5877 os_tid = 0x1400 [0188.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f2ec0 [0188.210] wcscpy (in: _Dest=0x81f2ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0188.211] wcscat (in: _Dest=0x81f2ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\" [0188.211] wcscat (in: _Dest=0x81f2ec0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*" [0188.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80619a0 [0188.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x80619a0 | out: lpFindFileData=0x80619a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54b48 [0192.350] wcscmp (_String1=".", _String2=".") returned 0 [0192.350] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x80619a0 | out: lpFindFileData=0x80619a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.350] wcscmp (_String1="..", _String2=".") returned 1 [0192.350] wcscmp (_String1="..", _String2="..") returned 0 [0192.350] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x80619a0 | out: lpFindFileData=0x80619a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.350] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.350] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8020d80 [0192.350] wcscpy (in: _Dest=0x8020d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0192.350] wcscat (in: _Dest=0x8020d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\" [0192.350] wcscat (in: _Dest=0x8020d80, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" [0192.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0192.837] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x80619a0 | out: lpFindFileData=0x80619a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.837] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.837] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b8f8 [0192.837] wcscpy (in: _Dest=0x3e3b8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0192.837] wcscat (in: _Dest=0x3e3b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\" [0192.837] wcscat (in: _Dest=0x3e3b8f8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" [0192.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0192.838] FindNextFileW (in: hFindFile=0x3e54b48, lpFindFileData=0x80619a0 | out: lpFindFileData=0x80619a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.838] FindClose (in: hFindFile=0x3e54b48 | out: hFindFile=0x3e54b48) returned 1 [0192.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80619a0) returned 1 [0192.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2ec0) returned 1 [0192.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2d10) returned 1 Thread: id = 5878 os_tid = 0x1404 [0188.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css")) returned 0x20 [0192.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0192.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.348] GetLastError () returned 0x5 [0192.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0192.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f61a8) returned 1 Thread: id = 5879 os_tid = 0x170c [0188.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css")) returned 0x20 [0192.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0192.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.318] GetLastError () returned 0x5 [0192.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0192.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b8f8) returned 1 Thread: id = 5880 os_tid = 0x12b0 [0188.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81f6528 [0188.213] wcscpy (in: _Dest=0x81f6528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0188.213] wcscat (in: _Dest=0x81f6528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0188.213] wcscat (in: _Dest=0x81f6528, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*" [0188.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8061c08 [0188.213] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54d88 [0192.349] wcscmp (_String1=".", _String2=".") returned 0 [0192.349] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.349] wcscmp (_String1="..", _String2=".") returned 1 [0192.349] wcscmp (_String1="..", _String2="..") returned 0 [0192.349] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0192.349] wcscmp (_String1="background.gif", _String2=".") returned 1 [0192.349] wcscmp (_String1="background.gif", _String2="..") returned 1 [0192.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadb30 [0192.349] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0192.349] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0192.349] wcscat (in: _Dest=0x3dadb30, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" [0194.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0194.034] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0194.034] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0194.034] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0194.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021c80 [0194.035] wcscpy (in: _Dest=0x8021c80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0194.035] wcscat (in: _Dest=0x8021c80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0194.035] wcscat (in: _Dest=0x8021c80, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" [0194.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0194.036] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0194.036] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0194.036] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0194.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80217d0 [0194.036] wcscpy (in: _Dest=0x80217d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0194.036] wcscat (in: _Dest=0x80217d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0194.036] wcscat (in: _Dest=0x80217d0, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" [0194.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80217d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0194.037] FindNextFileW (in: hFindFile=0x3e54d88, lpFindFileData=0x8061c08 | out: lpFindFileData=0x8061c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0194.037] FindClose (in: hFindFile=0x3e54d88 | out: hFindFile=0x3e54d88) returned 1 [0194.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061c08) returned 1 [0194.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6528) returned 1 [0194.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2de8) returned 1 Thread: id = 5881 os_tid = 0x25ac [0188.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css")) returned 0x20 [0192.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0192.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.351] GetLastError () returned 0x5 [0192.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0192.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6288) returned 1 Thread: id = 5882 os_tid = 0x8d0 [0188.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3a7c0 [0188.215] wcscpy (in: _Dest=0x3e3a7c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0188.215] wcscat (in: _Dest=0x3e3a7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0188.215] wcscat (in: _Dest=0x3e3a7c0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*" [0188.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e248 [0188.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54ac8 [0192.326] wcscmp (_String1=".", _String2=".") returned 0 [0192.326] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.326] wcscmp (_String1="..", _String2=".") returned 1 [0192.326] wcscmp (_String1="..", _String2="..") returned 0 [0192.326] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0192.326] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0192.326] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0192.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadd20 [0192.326] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0192.326] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0192.326] wcscat (in: _Dest=0x3dadd20, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" [0192.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0192.580] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.580] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.580] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae1f8 [0192.580] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0192.580] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0192.580] wcscat (in: _Dest=0x3dae1f8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" [0192.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0192.581] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.581] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.581] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae2f0 [0192.582] wcscpy (in: _Dest=0x3dae2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0192.582] wcscat (in: _Dest=0x3dae2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0192.582] wcscat (in: _Dest=0x3dae2f0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" [0192.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0192.583] FindNextFileW (in: hFindFile=0x3e54ac8, lpFindFileData=0x805e248 | out: lpFindFileData=0x805e248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.583] FindClose (in: hFindFile=0x3e54ac8 | out: hFindFile=0x3e54ac8) returned 1 [0192.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e248) returned 1 [0192.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a7c0) returned 1 [0192.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6368) returned 1 Thread: id = 5883 os_tid = 0x1568 [0188.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css")) returned 0x20 [0192.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0192.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.325] GetLastError () returned 0x5 [0192.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0192.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b810) returned 1 Thread: id = 5884 os_tid = 0x13a8 [0188.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json")) returned 0x2020 [0191.399] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0214.673] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11c4 [0214.673] GetFileSizeEx (in: hFile=0x11c4, lpFileSize=0x127cfc90 | out: lpFileSize=0x127cfc90*=190) returned 1 [0214.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064178 [0214.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80641a0 [0214.674] NtQuerySystemTime (in: CurrentTime=0x127cfc18 | out: CurrentTime=0x127cfc18*=132471540823968000) returned 0x0 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x4c14bc10 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x20367016 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x6dc204b [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x5b6e70cc [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x3c2c1e33 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x2dfc5a0c [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0xdc5ec93 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x1bcbf83a [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x6b2560e0 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0xcad8ea4 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x6a6e8f3f [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x5af6afbd [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x366450d8 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x3b01074c [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x55c9a81f [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x62adf59d [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x2cf2508c [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x2601a68f [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x1338cc11 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x2a0f28d7 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x1a16d158 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x756385c4 [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x1dcd636f [0214.674] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x4150c9c9 [0214.675] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x6a18ddbf [0214.675] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x60470dcd [0214.675] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x464316dd [0214.675] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x55f4f721 [0214.675] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x68341f8e [0214.675] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x678f01f1 [0214.675] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0x2e8c377f [0214.675] RtlRandomEx (in: Seed=0x127cfc10 | out: Seed=0x127cfc10) returned 0xe8ec61d [0214.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad8c48 [0214.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14adc850 [0214.685] ReadFile (in: hFile=0x11c4, lpBuffer=0x14ad8c48, nNumberOfBytesToRead=0xbe, lpNumberOfBytesRead=0x127cfc0c, lpOverlapped=0x0 | out: lpBuffer=0x14ad8c48*, lpNumberOfBytesRead=0x127cfc0c*=0xbe, lpOverlapped=0x0) returned 1 [0214.688] SetFilePointerEx (in: hFile=0x11c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.688] WriteFile (in: hFile=0x11c4, lpBuffer=0x14adc850*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x127cfc10, lpOverlapped=0x0 | out: lpBuffer=0x14adc850*, lpNumberOfBytesWritten=0x127cfc10*=0xbe, lpOverlapped=0x0) returned 1 [0219.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063430 [0219.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d50 [0219.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d50) returned 1 [0219.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14adc850) returned 1 [0219.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad8c48) returned 1 [0219.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403038) returned 1 [0219.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5340) returned 1 [0219.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e694e0 [0219.790] SetFilePointerEx (in: hFile=0x11c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.790] WriteFile (in: hFile=0x11c4, lpBuffer=0x8405ea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x127cfc84, lpOverlapped=0x0 | out: lpBuffer=0x8405ea8*, lpNumberOfBytesWritten=0x127cfc84*=0x10c, lpOverlapped=0x0) returned 1 [0220.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405ea8) returned 1 [0220.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69510) returned 1 [0220.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d50) returned 1 [0220.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694e0) returned 1 [0220.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063430) returned 1 [0220.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064178) returned 1 [0220.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064218) returned 1 [0220.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80642b8) returned 1 [0220.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405538 [0220.306] wcscpy (in: _Dest=0x8405538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" [0220.306] wcscat (in: _Dest=0x8405538, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.f0dbec" [0220.306] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0x127cfc08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9550 [0220.562] FlushFileBuffers (hFile=0x11c4) returned 1 [0220.569] CloseHandle (hObject=0x11c4) returned 1 [0220.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ed330 [0220.711] wcscpy (in: _Dest=0x81ed330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\" [0220.711] wcscat (in: _Dest=0x81ed330, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\F0DBEC-Readme.txt" [0220.711] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0220.711] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1480 [0220.936] WriteFile (in: hFile=0x1480, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x127cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x127cfc2c*=0x70c, lpOverlapped=0x0) returned 1 [0220.943] CloseHandle (hObject=0x1480) returned 1 [0220.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed330) returned 1 [0220.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a22b0) returned 1 Thread: id = 5885 os_tid = 0x21d8 [0188.217] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json")) returned 0x2020 [0191.400] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0215.012] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2af4 [0215.013] GetFileSizeEx (in: hFile=0x2af4, lpFileSize=0x12acfdc0 | out: lpFileSize=0x12acfdc0*=193) returned 1 [0215.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063340 [0215.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bf0 [0215.014] NtQuerySystemTime (in: CurrentTime=0x12acfd48 | out: CurrentTime=0x12acfd48*=132471540827244000) returned 0x0 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x3aa58053 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x6765051d [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x4278da2d [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x3e118f12 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x538a393b [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x44b0c8cc [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x1b61ed66 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x68f4c883 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x7ffc5aef [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x6ffbc51f [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x5380a890 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x5be13be7 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x3117777c [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x19f3af06 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x605cf9e5 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x5f6bbfc0 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x50632a07 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x3d52321a [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x489472bd [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x46813647 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x54afdbbb [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x5a1a42df [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x42ac85c9 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x498473c7 [0215.014] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x1240c087 [0215.015] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x3d8135a3 [0215.015] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x48003c25 [0215.015] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x5fcde6df [0215.015] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x7787bd05 [0215.015] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x2d9927bd [0215.015] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0xd0da21b [0215.015] RtlRandomEx (in: Seed=0x12acfd40 | out: Seed=0x12acfd40) returned 0x5c1aa4a0 [0215.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8371d88 [0215.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8375990 [0215.026] ReadFile (in: hFile=0x2af4, lpBuffer=0x8371d88, nNumberOfBytesToRead=0xc1, lpNumberOfBytesRead=0x12acfd3c, lpOverlapped=0x0 | out: lpBuffer=0x8371d88*, lpNumberOfBytesRead=0x12acfd3c*=0xc1, lpOverlapped=0x0) returned 1 [0215.029] SetFilePointerEx (in: hFile=0x2af4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.029] WriteFile (in: hFile=0x2af4, lpBuffer=0x8375990*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x12acfd40, lpOverlapped=0x0 | out: lpBuffer=0x8375990*, lpNumberOfBytesWritten=0x12acfd40*=0xc1, lpOverlapped=0x0) returned 1 [0219.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634f8 [0219.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80639d0 [0219.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639d0) returned 1 [0219.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8375990) returned 1 [0219.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8371d88) returned 1 [0219.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67fe8) returned 1 [0219.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4b60) returned 1 [0219.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69240 [0219.848] SetFilePointerEx (in: hFile=0x2af4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.848] WriteFile (in: hFile=0x2af4, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12acfdb4, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x12acfdb4*=0x10c, lpOverlapped=0x0) returned 1 [0220.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0220.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0220.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639d0) returned 1 [0220.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69240) returned 1 [0220.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634f8) returned 1 [0220.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063340) returned 1 [0220.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621e8) returned 1 [0220.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062148) returned 1 [0220.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4b00 [0220.549] wcscpy (in: _Dest=0x81f4b00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" [0220.549] wcscat (in: _Dest=0x81f4b00, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.f0dbec" [0220.549] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0x12acfd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9030 [0220.855] FlushFileBuffers (hFile=0x2af4) returned 1 [0220.862] CloseHandle (hObject=0x2af4) returned 1 [0220.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8400dd0 [0220.892] wcscpy (in: _Dest=0x8400dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" [0220.892] wcscat (in: _Dest=0x8400dd0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\F0DBEC-Readme.txt" [0220.892] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0220.893] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe28 [0220.904] WriteFile (in: hFile=0xe28, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x12acfd5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x12acfd5c*=0x70c, lpOverlapped=0x0) returned 1 [0220.925] CloseHandle (hObject=0xe28) returned 1 [0220.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400dd0) returned 1 [0220.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a23d8) returned 1 Thread: id = 5886 os_tid = 0x27c0 [0188.218] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json")) returned 0x2020 [0191.400] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0214.654] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b88 [0214.655] GetFileSizeEx (in: hFile=0x1b88, lpFileSize=0x11dbf888 | out: lpFileSize=0x11dbf888*=213) returned 1 [0214.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80640b0 [0214.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064178 [0214.655] NtQuerySystemTime (in: CurrentTime=0x11dbf810 | out: CurrentTime=0x11dbf810*=132471540823656000) returned 0x0 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x314e1a58 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x61ac5cea [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x65bfe8c8 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x4ba2e075 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x67e1e733 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x3b2fb482 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x39400a3b [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x1aa7a46d [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x22ca5666 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x33ed50c5 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x36d53163 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x2cb96800 [0214.655] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x2e262daa [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x15af6a8b [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x1b6c2a93 [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x9a7a6e6 [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x7479caef [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0xba88bac [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x57988546 [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x775f2ff4 [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x4b9e9b14 [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x495e13d0 [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x7d2eef92 [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x384df596 [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x326b6555 [0214.656] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x7202dc1e [0214.657] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0xcd69cc7 [0214.657] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x2efa0894 [0214.657] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x14060066 [0214.657] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x6cb2c0d4 [0214.657] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x4fec440f [0214.657] RtlRandomEx (in: Seed=0x11dbf808 | out: Seed=0x11dbf808) returned 0x65285a3 [0214.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad1438 [0214.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad5040 [0214.670] ReadFile (in: hFile=0x1b88, lpBuffer=0x14ad1438, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0x11dbf804, lpOverlapped=0x0 | out: lpBuffer=0x14ad1438*, lpNumberOfBytesRead=0x11dbf804*=0xd5, lpOverlapped=0x0) returned 1 [0214.672] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.672] WriteFile (in: hFile=0x1b88, lpBuffer=0x14ad5040*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x11dbf808, lpOverlapped=0x0 | out: lpBuffer=0x14ad5040*, lpNumberOfBytesWritten=0x11dbf808*=0xd5, lpOverlapped=0x0) returned 1 [0219.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063de0 [0219.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80629b8 [0219.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80629b8) returned 1 [0219.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad5040) returned 1 [0219.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad1438) returned 1 [0219.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403308) returned 1 [0219.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d53d0) returned 1 [0219.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fa0 [0219.791] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.791] WriteFile (in: hFile=0x1b88, lpBuffer=0x8405930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11dbf87c, lpOverlapped=0x0 | out: lpBuffer=0x8405930*, lpNumberOfBytesWritten=0x11dbf87c*=0x10c, lpOverlapped=0x0) returned 1 [0220.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405930) returned 1 [0220.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692d0) returned 1 [0220.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80629b8) returned 1 [0220.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fa0) returned 1 [0220.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063de0) returned 1 [0220.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80640b0) returned 1 [0220.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064150) returned 1 [0220.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80641f0) returned 1 [0220.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404f20 [0220.310] wcscpy (in: _Dest=0x8404f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" [0220.310] wcscat (in: _Dest=0x8404f20, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.f0dbec" [0220.310] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0x11dbf800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa5f8 [0220.568] FlushFileBuffers (hFile=0x1b88) returned 1 [0220.580] CloseHandle (hObject=0x1b88) returned 1 [0220.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81eb9c0 [0220.719] wcscpy (in: _Dest=0x81eb9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" [0220.719] wcscat (in: _Dest=0x81eb9c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\F0DBEC-Readme.txt" [0220.719] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0220.719] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1980 [0220.953] WriteFile (in: hFile=0x1980, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x11dbf824, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x11dbf824*=0x70c, lpOverlapped=0x0) returned 1 [0220.954] CloseHandle (hObject=0x1980) returned 1 [0220.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb9c0) returned 1 [0220.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2500) returned 1 Thread: id = 5887 os_tid = 0xed4 [0188.218] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json")) returned 0x2020 [0191.401] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0215.110] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd6c [0215.111] GetFileSizeEx (in: hFile=0xd6c, lpFileSize=0x1421fd58 | out: lpFileSize=0x1421fd58*=298) returned 1 [0215.111] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x126, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.111] ReadFile (in: hFile=0xd6c, lpBuffer=0x1421fd64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1421fd40, lpOverlapped=0x0 | out: lpBuffer=0x1421fd64*, lpNumberOfBytesRead=0x1421fd40*=0x4, lpOverlapped=0x0) returned 1 [0215.115] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a38 [0215.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80649e8 [0215.115] NtQuerySystemTime (in: CurrentTime=0x1421fce0 | out: CurrentTime=0x1421fce0*=132471540828336000) returned 0x0 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x7997587f [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x3e62e6b7 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x63f837a1 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x418b7756 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x36809678 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x759f6e08 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x41dac5bd [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x47861bf7 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x19f3af06 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x216abea1 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x3200e2ba [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x64f41de [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x8d34167 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x30c38383 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x15fa0cda [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x5476cd02 [0215.115] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x7892085b [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x54ac2d80 [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x3f137508 [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x5ef07b2f [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x6c3d90bf [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0xbc821a3 [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x15b7e126 [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x656928bf [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x1c300b73 [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x4bd502a1 [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x65581dd3 [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x98d888c [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x1858c83e [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0xd931cfa [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x4016f2ab [0215.116] RtlRandomEx (in: Seed=0x1421fcd8 | out: Seed=0x1421fcd8) returned 0x7bc68fb9 [0215.127] ReadFile (in: hFile=0xd6c, lpBuffer=0x80f4c88, nNumberOfBytesToRead=0x12a, lpNumberOfBytesRead=0x1421fcd4, lpOverlapped=0x0 | out: lpBuffer=0x80f4c88*, lpNumberOfBytesRead=0x1421fcd4*=0x12a, lpOverlapped=0x0) returned 1 [0215.127] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.127] WriteFile (in: hFile=0xd6c, lpBuffer=0x80f8890*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x1421fcd8, lpOverlapped=0x0 | out: lpBuffer=0x80f8890*, lpNumberOfBytesWritten=0x1421fcd8*=0x12a, lpOverlapped=0x0) returned 1 [0219.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634d0 [0219.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80632f0 [0219.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632f0) returned 1 [0219.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80f8890) returned 1 [0219.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80f4c88) returned 1 [0219.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 [0219.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4d58) returned 1 [0219.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69300 [0219.862] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.862] WriteFile (in: hFile=0xd6c, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1421fd4c, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x1421fd4c*=0x10c, lpOverlapped=0x0) returned 1 [0220.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0220.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69330) returned 1 [0220.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632f0) returned 1 [0220.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69300) returned 1 [0220.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634d0) returned 1 [0220.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a38) returned 1 [0220.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80649c0) returned 1 [0220.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b00) returned 1 [0220.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4d70 [0220.553] wcscpy (in: _Dest=0x81f4d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" [0220.553] wcscat (in: _Dest=0x81f4d70, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.f0dbec" [0220.553] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0x1421fcd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9bb8 [0220.861] FlushFileBuffers (hFile=0xd6c) returned 1 [0220.869] CloseHandle (hObject=0xd6c) returned 1 [0220.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8400a58 [0220.893] wcscpy (in: _Dest=0x8400a58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" [0220.893] wcscat (in: _Dest=0x8400a58, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\F0DBEC-Readme.txt" [0220.893] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0220.893] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1480 [0220.904] WriteFile (in: hFile=0x1480, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1421fcf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1421fcf4*=0x70c, lpOverlapped=0x0) returned 1 [0220.927] CloseHandle (hObject=0x1480) returned 1 [0220.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400a58) returned 1 [0220.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a2628) returned 1 Thread: id = 5888 os_tid = 0x166c [0188.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x8401270 [0188.219] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" [0188.219] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\" [0188.219] wcscat (in: _Dest=0x8401270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*" [0188.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ebe8 [0188.219] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*", lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.035] wcscmp (_String1=".", _String2=".") returned 0 [0191.035] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.035] wcscmp (_String1="..", _String2=".") returned 1 [0191.035] wcscmp (_String1="..", _String2="..") returned 0 [0191.035] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.036] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ebe8) returned 1 [0191.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 [0191.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 Thread: id = 5889 os_tid = 0x8c4 [0188.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7770 [0188.227] wcscpy (in: _Dest=0x81e7770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" [0188.227] wcscat (in: _Dest=0x81e7770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\" [0188.227] wcscat (in: _Dest=0x81e7770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*" [0188.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f320 [0188.227] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*", lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.033] wcscmp (_String1=".", _String2=".") returned 0 [0191.033] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.033] wcscmp (_String1="..", _String2=".") returned 1 [0191.033] wcscmp (_String1="..", _String2="..") returned 0 [0191.033] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.033] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f320) returned 1 [0191.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 [0191.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83486b8) returned 1 Thread: id = 5890 os_tid = 0x1708 [0188.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e79c0 [0188.233] wcscpy (in: _Dest=0x81e79c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" [0188.233] wcscat (in: _Dest=0x81e79c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\" [0188.233] wcscat (in: _Dest=0x81e79c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*" [0188.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805fa58 [0188.234] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*", lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.031] wcscmp (_String1=".", _String2=".") returned 0 [0191.031] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.031] wcscmp (_String1="..", _String2=".") returned 1 [0191.031] wcscmp (_String1="..", _String2="..") returned 0 [0191.031] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.031] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805fa58) returned 1 [0191.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e79c0) returned 1 [0191.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83485a0) returned 1 Thread: id = 5891 os_tid = 0x12a4 [0188.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7ae8 [0188.239] wcscpy (in: _Dest=0x81e7ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" [0188.239] wcscat (in: _Dest=0x81e7ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\" [0188.239] wcscat (in: _Dest=0x81e7ae8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*" [0188.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805fcc0 [0188.239] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*", lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.029] wcscmp (_String1=".", _String2=".") returned 0 [0191.029] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.029] wcscmp (_String1="..", _String2=".") returned 1 [0191.029] wcscmp (_String1="..", _String2="..") returned 0 [0191.029] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.029] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805fcc0) returned 1 [0191.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7ae8) returned 1 [0191.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83487d0) returned 1 Thread: id = 5892 os_tid = 0x2ffc [0188.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e7c10 [0188.244] wcscpy (in: _Dest=0x81e7c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" [0188.244] wcscat (in: _Dest=0x81e7c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\" [0188.244] wcscat (in: _Dest=0x81e7c10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*" [0188.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060190 [0188.244] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*", lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.027] wcscmp (_String1=".", _String2=".") returned 0 [0191.027] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.027] wcscmp (_String1="..", _String2=".") returned 1 [0191.027] wcscmp (_String1="..", _String2="..") returned 0 [0191.027] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.027] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060190) returned 1 [0191.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7c10) returned 1 [0191.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401a88) returned 1 Thread: id = 5893 os_tid = 0xc70 [0188.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e7d38 [0188.245] wcscpy (in: _Dest=0x81e7d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" [0188.245] wcscat (in: _Dest=0x81e7d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\" [0188.245] wcscat (in: _Dest=0x81e7d38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*" [0188.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ee50 [0188.246] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*", lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.025] wcscmp (_String1=".", _String2=".") returned 0 [0191.025] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.025] wcscmp (_String1="..", _String2=".") returned 1 [0191.025] wcscmp (_String1="..", _String2="..") returned 0 [0191.025] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.025] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ee50) returned 1 [0191.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7d38) returned 1 [0191.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401960) returned 1 Thread: id = 5894 os_tid = 0x488 [0188.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7e60 [0188.246] wcscpy (in: _Dest=0x81e7e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" [0188.246] wcscat (in: _Dest=0x81e7e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\" [0188.246] wcscat (in: _Dest=0x81e7e60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*" [0188.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e980 [0188.247] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*", lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.023] wcscmp (_String1=".", _String2=".") returned 0 [0191.023] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.023] wcscmp (_String1="..", _String2=".") returned 1 [0191.023] wcscmp (_String1="..", _String2="..") returned 0 [0191.023] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.023] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e980) returned 1 [0191.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7e60) returned 1 [0191.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346b60) returned 1 Thread: id = 5895 os_tid = 0xbc4 [0188.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e7f88 [0188.247] wcscpy (in: _Dest=0x81e7f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" [0188.247] wcscat (in: _Dest=0x81e7f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\" [0188.248] wcscat (in: _Dest=0x81e7f88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*" [0188.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e4b0 [0188.248] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*", lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.021] wcscmp (_String1=".", _String2=".") returned 0 [0191.021] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.021] wcscmp (_String1="..", _String2=".") returned 1 [0191.021] wcscmp (_String1="..", _String2="..") returned 0 [0191.021] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.021] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e4b0) returned 1 [0191.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7f88) returned 1 [0191.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346c78) returned 1 Thread: id = 5896 os_tid = 0x8cc [0188.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e80b0 [0188.248] wcscpy (in: _Dest=0x81e80b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" [0188.248] wcscat (in: _Dest=0x81e80b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\" [0188.248] wcscat (in: _Dest=0x81e80b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*" [0188.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80614d0 [0188.249] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*", lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.019] wcscmp (_String1=".", _String2=".") returned 0 [0191.019] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.019] wcscmp (_String1="..", _String2=".") returned 1 [0191.019] wcscmp (_String1="..", _String2="..") returned 0 [0191.019] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.020] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80614d0) returned 1 [0191.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e80b0) returned 1 [0191.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348370) returned 1 Thread: id = 5897 os_tid = 0x2fc8 [0188.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e81d8 [0188.249] wcscpy (in: _Dest=0x81e81d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" [0188.249] wcscat (in: _Dest=0x81e81d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\" [0188.249] wcscat (in: _Dest=0x81e81d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*" [0188.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e718 [0188.249] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*", lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0190.065] wcscmp (_String1=".", _String2=".") returned 0 [0190.065] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.065] wcscmp (_String1="..", _String2=".") returned 1 [0190.065] wcscmp (_String1="..", _String2="..") returned 0 [0190.065] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0190.065] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0190.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e718) returned 1 [0190.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e81d8) returned 1 [0190.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347768) returned 1 Thread: id = 5898 os_tid = 0x2fcc [0188.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e8300 [0188.263] wcscpy (in: _Dest=0x81e8300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" [0188.263] wcscat (in: _Dest=0x81e8300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\" [0188.263] wcscat (in: _Dest=0x81e8300, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*" [0188.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f0b8 [0188.263] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*", lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.018] wcscmp (_String1=".", _String2=".") returned 0 [0191.018] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.018] wcscmp (_String1="..", _String2=".") returned 1 [0191.018] wcscmp (_String1="..", _String2="..") returned 0 [0191.018] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.018] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f0b8) returned 1 [0191.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8300) returned 1 [0191.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347998) returned 1 Thread: id = 5899 os_tid = 0xebc [0188.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e8428 [0188.270] wcscpy (in: _Dest=0x81e8428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" [0188.270] wcscat (in: _Dest=0x81e8428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\" [0188.270] wcscat (in: _Dest=0x81e8428, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*" [0188.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f588 [0188.270] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*", lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0190.063] wcscmp (_String1=".", _String2=".") returned 0 [0190.063] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.063] wcscmp (_String1="..", _String2=".") returned 1 [0190.063] wcscmp (_String1="..", _String2="..") returned 0 [0190.063] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0190.063] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0190.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f588) returned 1 [0190.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8428) returned 1 [0190.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347bc8) returned 1 Thread: id = 5900 os_tid = 0xed0 [0188.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e8550 [0188.284] wcscpy (in: _Dest=0x81e8550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" [0188.284] wcscat (in: _Dest=0x81e8550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\" [0188.284] wcscat (in: _Dest=0x81e8550, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*" [0188.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f7f0 [0188.285] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*", lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.016] wcscmp (_String1=".", _String2=".") returned 0 [0191.016] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.016] wcscmp (_String1="..", _String2=".") returned 1 [0191.016] wcscmp (_String1="..", _String2="..") returned 0 [0191.016] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.016] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f7f0) returned 1 [0191.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8550) returned 1 [0191.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8347ab0) returned 1 Thread: id = 5901 os_tid = 0xe0c [0188.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e8678 [0188.285] wcscpy (in: _Dest=0x81e8678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" [0188.286] wcscat (in: _Dest=0x81e8678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\" [0188.286] wcscat (in: _Dest=0x81e8678, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*" [0188.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ff28 [0188.286] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*", lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0191.043] wcscmp (_String1=".", _String2=".") returned 0 [0191.043] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.043] wcscmp (_String1="..", _String2=".") returned 1 [0191.043] wcscmp (_String1="..", _String2="..") returned 0 [0191.043] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.043] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0191.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ff28) returned 1 [0191.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8678) returned 1 [0191.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8346930) returned 1 Thread: id = 5902 os_tid = 0xe14 [0188.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e87a0 [0188.286] wcscpy (in: _Dest=0x81e87a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" [0188.286] wcscat (in: _Dest=0x81e87a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\" [0188.287] wcscat (in: _Dest=0x81e87a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*" [0188.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8061268 [0188.287] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*", lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.014] wcscmp (_String1=".", _String2=".") returned 0 [0191.014] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.015] wcscmp (_String1="..", _String2=".") returned 1 [0191.015] wcscmp (_String1="..", _String2="..") returned 0 [0191.015] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.015] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061268) returned 1 [0191.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e87a0) returned 1 [0191.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348488) returned 1 Thread: id = 5903 os_tid = 0x924 [0188.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x81e88c8 [0188.287] wcscpy (in: _Dest=0x81e88c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" [0188.287] wcscat (in: _Dest=0x81e88c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\" [0188.287] wcscat (in: _Dest=0x81e88c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*" [0188.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060b30 [0188.287] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*", lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0191.012] wcscmp (_String1=".", _String2=".") returned 0 [0191.012] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.012] wcscmp (_String1="..", _String2=".") returned 1 [0191.012] wcscmp (_String1="..", _String2="..") returned 0 [0191.012] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.012] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0191.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060b30) returned 1 [0191.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e88c8) returned 1 [0191.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348028) returned 1 Thread: id = 5904 os_tid = 0x8ec [0188.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e89f0 [0188.288] wcscpy (in: _Dest=0x81e89f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" [0188.288] wcscat (in: _Dest=0x81e89f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\" [0188.288] wcscat (in: _Dest=0x81e89f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*" [0188.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060d98 [0188.288] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*", lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0191.041] wcscmp (_String1=".", _String2=".") returned 0 [0191.041] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.041] wcscmp (_String1="..", _String2=".") returned 1 [0191.041] wcscmp (_String1="..", _String2="..") returned 0 [0191.041] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.041] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0191.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060d98) returned 1 [0191.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e89f0) returned 1 [0191.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401cd8) returned 1 Thread: id = 5905 os_tid = 0x92c [0188.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x81e8b18 [0188.289] wcscpy (in: _Dest=0x81e8b18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" [0188.289] wcscat (in: _Dest=0x81e8b18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\" [0188.289] wcscat (in: _Dest=0x81e8b18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*" [0188.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80603f8 [0188.289] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*", lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0191.039] wcscmp (_String1=".", _String2=".") returned 0 [0191.039] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.039] wcscmp (_String1="..", _String2=".") returned 1 [0191.039] wcscmp (_String1="..", _String2="..") returned 0 [0191.039] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0191.039] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0191.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80603f8) returned 1 [0191.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8b18) returned 1 [0191.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401bb0) returned 1 Thread: id = 5906 os_tid = 0x75c [0188.290] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020 [0191.393] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0203.261] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x560 [0211.123] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x107cf908 | out: lpFileSize=0x107cf908*=207) returned 1 [0211.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80640d8 [0211.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064010 [0211.123] NtQuerySystemTime (in: CurrentTime=0x107cf890 | out: CurrentTime=0x107cf890*=132471540788400000) returned 0x0 [0211.123] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x1cbc4026 [0211.123] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x23f3073f [0211.123] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x6a86aaaf [0211.123] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x16696d6c [0211.123] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x1041e8c0 [0211.123] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x70329b5a [0211.123] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x1ff4e7f6 [0211.123] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x334f20c0 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x55572741 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x3b743a3d [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x49f687e8 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x5267891f [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x23cc5e40 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x45cf97f9 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x1508747 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x202375c2 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x2a758c6e [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x37b065e4 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x1974b14a [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x274c0202 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x9a3ccbb [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x2c17cb6b [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x598adb90 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0xcc4cbd4 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x4ea74d56 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x3d81b81b [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0xe9084e4 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x22815f27 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x71cc84f1 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x1a29aada [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x78b8a3a6 [0211.124] RtlRandomEx (in: Seed=0x107cf888 | out: Seed=0x107cf888) returned 0x3e90c808 [0211.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80a9398 [0211.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x80acfa0 [0211.133] ReadFile (in: hFile=0x560, lpBuffer=0x80a9398, nNumberOfBytesToRead=0xcf, lpNumberOfBytesRead=0x107cf884, lpOverlapped=0x0 | out: lpBuffer=0x80a9398*, lpNumberOfBytesRead=0x107cf884*=0xcf, lpOverlapped=0x0) returned 1 [0211.135] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.135] WriteFile (in: hFile=0x560, lpBuffer=0x80acfa0*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x107cf888, lpOverlapped=0x0 | out: lpBuffer=0x80acfa0*, lpNumberOfBytesWritten=0x107cf888*=0xcf, lpOverlapped=0x0) returned 1 [0213.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0213.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43078 [0213.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43078) returned 1 [0213.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80acfa0) returned 1 [0213.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80a9398) returned 1 [0213.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67fe8) returned 1 [0213.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eae30) returned 1 [0213.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69180 [0213.947] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.947] WriteFile (in: hFile=0x560, lpBuffer=0x81dfaa8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x107cf8fc, lpOverlapped=0x0 | out: lpBuffer=0x81dfaa8*, lpNumberOfBytesWritten=0x107cf8fc*=0x10c, lpOverlapped=0x0) returned 1 [0214.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfaa8) returned 1 [0214.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691b0) returned 1 [0214.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43078) returned 1 [0214.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69180) returned 1 [0214.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0214.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80640d8) returned 1 [0214.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064038) returned 1 [0214.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063fc0) returned 1 [0214.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8186800 [0214.103] wcscpy (in: _Dest=0x8186800, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" [0214.103] wcscat (in: _Dest=0x8186800, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.f0dbec" [0214.103] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.f0dbec", NtPathName=0x107cf880, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c098 [0215.845] FlushFileBuffers (hFile=0x560) returned 1 [0215.855] CloseHandle (hObject=0x560) returned 1 [0216.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d9208 [0216.086] wcscpy (in: _Dest=0x81d9208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" [0216.086] wcscat (in: _Dest=0x81d9208, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\F0DBEC-Readme.txt" [0216.086] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\f0dbec-readme.txt")) returned 0xffffffff [0216.086] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.571] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x107cf8a4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x107cf8a4*=0x70c, lpOverlapped=0x0) returned 1 [0216.574] CloseHandle (hObject=0x10c4) returned 1 [0216.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9208) returned 1 [0216.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401e00) returned 1 Thread: id = 5907 os_tid = 0x920 [0188.290] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020 [0191.394] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0204.795] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf30 [0211.190] GetFileSizeEx (in: hFile=0xf30, lpFileSize=0x150cf878 | out: lpFileSize=0x150cf878*=246) returned 1 [0211.190] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.190] ReadFile (in: hFile=0xf30, lpBuffer=0x150cf884, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x150cf860, lpOverlapped=0x0 | out: lpBuffer=0x150cf884*, lpNumberOfBytesRead=0x150cf860*=0x4, lpOverlapped=0x0) returned 1 [0211.192] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ef8 [0211.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e30 [0211.192] NtQuerySystemTime (in: CurrentTime=0x150cf800 | out: CurrentTime=0x150cf800*=132471540789024000) returned 0x0 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x523f7d3c [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x536d2b08 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0xf9685c0 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x52900229 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x5e60dfc1 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x7e36eb38 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x20382edd [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x7cbb562b [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x1598d5b4 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x1d27ba73 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x61641d41 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x35cb888c [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x4dd8c6d9 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x51af84df [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x3ab8f008 [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x2c2bac9d [0211.192] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x2e87f84a [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x66e26650 [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x729b352e [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x55e743e8 [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x5eb5a6fb [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x498914bc [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x7b78da2 [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x2301d58b [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x12eeea71 [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x62e8b745 [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x5b94ef2c [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x2975d4b [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x14bcfd0 [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x2717055f [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0xdb53d92 [0211.193] RtlRandomEx (in: Seed=0x150cf7f8 | out: Seed=0x150cf7f8) returned 0x64164219 [0211.204] ReadFile (in: hFile=0xf30, lpBuffer=0x80c73d8, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0x150cf7f4, lpOverlapped=0x0 | out: lpBuffer=0x80c73d8*, lpNumberOfBytesRead=0x150cf7f4*=0xf6, lpOverlapped=0x0) returned 1 [0211.204] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.204] WriteFile (in: hFile=0xf30, lpBuffer=0x80cafe0*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x150cf7f8, lpOverlapped=0x0 | out: lpBuffer=0x80cafe0*, lpNumberOfBytesWritten=0x150cf7f8*=0xf6, lpOverlapped=0x0) returned 1 [0213.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42bc8 [0213.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d424c0 [0213.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424c0) returned 1 [0213.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80cafe0) returned 1 [0213.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80c73d8) returned 1 [0213.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68600) returned 1 [0213.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb268) returned 1 [0213.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fbb8 [0213.958] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.958] WriteFile (in: hFile=0xf30, lpBuffer=0x81dfdf0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x150cf86c, lpOverlapped=0x0 | out: lpBuffer=0x81dfdf0*, lpNumberOfBytesWritten=0x150cf86c*=0x10c, lpOverlapped=0x0) returned 1 [0214.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfdf0) returned 1 [0214.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb88) returned 1 [0214.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d424c0) returned 1 [0214.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fbb8) returned 1 [0214.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0214.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ef8) returned 1 [0214.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e58) returned 1 [0214.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063de0) returned 1 [0214.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8186ce0 [0214.112] wcscpy (in: _Dest=0x8186ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" [0214.112] wcscat (in: _Dest=0x8186ce0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.f0dbec" [0214.112] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.f0dbec", NtPathName=0x150cf7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa740 [0215.858] FlushFileBuffers (hFile=0xf30) returned 1 [0215.868] CloseHandle (hObject=0xf30) returned 1 [0216.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8fb8 [0216.090] wcscpy (in: _Dest=0x81d8fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" [0216.090] wcscat (in: _Dest=0x81d8fb8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\F0DBEC-Readme.txt" [0216.090] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\f0dbec-readme.txt")) returned 0xffffffff [0216.091] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.585] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x150cf814, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x150cf814*=0x70c, lpOverlapped=0x0) returned 1 [0216.587] CloseHandle (hObject=0x10c4) returned 1 [0216.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8fb8) returned 1 [0216.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400ef8) returned 1 Thread: id = 5908 os_tid = 0x7f0 [0188.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs")) returned 0x20 [0188.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", dwFileAttributes=0x20) returned 0 [0188.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.292] GetLastError () returned 0x5 [0188.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", dwFileAttributes=0x20) returned 0 [0188.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 5909 os_tid = 0x8d8 [0188.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc")) returned 0x20 [0188.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0188.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.294] GetLastError () returned 0x5 [0188.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0188.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 Thread: id = 5910 os_tid = 0x940 [0188.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt")) returned 0x20 [0188.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0188.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.296] GetLastError () returned 0x5 [0188.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0188.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 Thread: id = 5911 os_tid = 0x12a0 [0188.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk")) returned 0x20 [0188.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0188.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.298] GetLastError () returned 0x5 [0188.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0188.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 Thread: id = 5912 os_tid = 0x90c [0188.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk")) returned 0x20 [0188.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0188.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.300] GetLastError () returned 0x5 [0188.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0188.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 Thread: id = 5913 os_tid = 0x91c [0188.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs")) returned 0x20 [0188.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", dwFileAttributes=0x20) returned 0 [0188.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.302] GetLastError () returned 0x5 [0188.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", dwFileAttributes=0x20) returned 0 [0188.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 Thread: id = 5914 os_tid = 0xbe4 [0188.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg")) returned 0x20 [0189.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", dwFileAttributes=0x20) returned 0 [0189.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.583] GetLastError () returned 0x5 [0189.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", dwFileAttributes=0x20) returned 0 [0189.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5308) returned 1 Thread: id = 5915 os_tid = 0xc8 [0188.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc")) returned 0x20 [0189.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.590] GetLastError () returned 0x5 [0189.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 5916 os_tid = 0x7b4 [0188.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt")) returned 0x20 [0189.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.598] GetLastError () returned 0x5 [0189.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f448) returned 1 Thread: id = 5917 os_tid = 0x960 [0188.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk")) returned 0x20 [0189.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.608] GetLastError () returned 0x5 [0189.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f2b0) returned 1 Thread: id = 5918 os_tid = 0x970 [0188.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk")) returned 0x20 [0189.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.366] GetLastError () returned 0x5 [0189.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f228) returned 1 Thread: id = 5919 os_tid = 0x990 [0188.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm")) returned 0x20 [0189.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", dwFileAttributes=0x20) returned 0 [0189.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.553] GetLastError () returned 0x5 [0189.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", dwFileAttributes=0x20) returned 0 [0189.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 Thread: id = 5920 os_tid = 0x9a0 [0188.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs")) returned 0x20 [0189.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", dwFileAttributes=0x20) returned 0 [0189.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.657] GetLastError () returned 0x5 [0189.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", dwFileAttributes=0x20) returned 0 [0189.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4608) returned 1 Thread: id = 5921 os_tid = 0x9b0 [0188.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc")) returned 0x20 [0189.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.651] GetLastError () returned 0x5 [0189.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f800) returned 1 Thread: id = 5922 os_tid = 0x9c0 [0188.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt")) returned 0x20 [0189.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.614] GetLastError () returned 0x5 [0189.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 Thread: id = 5923 os_tid = 0x2fdc [0188.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk")) returned 0x20 [0189.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.620] GetLastError () returned 0x5 [0189.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 Thread: id = 5924 os_tid = 0x2fe4 [0188.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk")) returned 0x20 [0189.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.625] GetLastError () returned 0x5 [0189.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 Thread: id = 5925 os_tid = 0x1640 [0188.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css")) returned 0x20 [0189.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", dwFileAttributes=0x20) returned 0 [0189.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.632] GetLastError () returned 0x5 [0189.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", dwFileAttributes=0x20) returned 0 [0189.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5708) returned 1 Thread: id = 5926 os_tid = 0x14b8 [0188.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd")) returned 0x20 [0189.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", dwFileAttributes=0x20) returned 0 [0189.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.638] GetLastError () returned 0x5 [0189.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", dwFileAttributes=0x20) returned 0 [0189.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 5927 os_tid = 0x2fd0 [0188.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd")) returned 0x20 [0189.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", dwFileAttributes=0x20) returned 0 [0189.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.644] GetLastError () returned 0x5 [0189.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", dwFileAttributes=0x20) returned 0 [0189.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f1a0) returned 1 Thread: id = 5928 os_tid = 0x2fe0 [0188.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd")) returned 0x20 [0189.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", dwFileAttributes=0x20) returned 0 [0189.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.683] GetLastError () returned 0x5 [0189.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", dwFileAttributes=0x20) returned 0 [0189.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 5929 os_tid = 0x2fe8 [0188.462] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json")) returned 0x2020 [0190.280] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0199.294] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f4 [0199.295] GetFileSizeEx (in: hFile=0x16f4, lpFileSize=0x1520fd48 | out: lpFileSize=0x1520fd48*=230) returned 1 [0199.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2120 [0199.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0199.295] NtQuerySystemTime (in: CurrentTime=0x1520fcd0 | out: CurrentTime=0x1520fcd0*=132471540671868000) returned 0x0 [0199.295] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x2c18ab1 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x32021d19 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x7c2cf2e2 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x70289856 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x43386e8a [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x1cec8716 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0xde5f030 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x3279c771 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x775e8033 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x21111e72 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x58c98fd8 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x3931e5dc [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x364f6f5b [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x1d547099 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x5b87923f [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x387592b5 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x50669470 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x4aacd81e [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x388fc9c [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x4dc37b0 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x5d9c1f6f [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x60b555af [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x310b4986 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x3fe6e389 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x4e643f51 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x74cdb19e [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x3c88f3b1 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x2509d21e [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x61b7f012 [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x170400df [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0xad3437a [0199.296] RtlRandomEx (in: Seed=0x1520fcc8 | out: Seed=0x1520fcc8) returned 0x5295bb85 [0199.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0199.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8297478 [0199.311] ReadFile (in: hFile=0x16f4, lpBuffer=0x82a2890, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0x1520fcc4, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesRead=0x1520fcc4*=0xe6, lpOverlapped=0x0) returned 1 [0199.316] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.316] WriteFile (in: hFile=0x16f4, lpBuffer=0x8297478*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x1520fcc8, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesWritten=0x1520fcc8*=0xe6, lpOverlapped=0x0) returned 1 [0203.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063840 [0203.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063868 [0203.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063868) returned 1 [0203.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0203.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0203.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054ab0) returned 1 [0203.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6c80) returned 1 [0203.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68e50 [0203.486] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.487] WriteFile (in: hFile=0x16f4, lpBuffer=0x8405ea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1520fd3c, lpOverlapped=0x0 | out: lpBuffer=0x8405ea8*, lpNumberOfBytesWritten=0x1520fd3c*=0x10c, lpOverlapped=0x0) returned 1 [0203.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405ea8) returned 1 [0203.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68df0) returned 1 [0203.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063868) returned 1 [0203.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68e50) returned 1 [0203.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063840) returned 1 [0203.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2120) returned 1 [0203.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1518) returned 1 [0203.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0cd0) returned 1 [0203.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f6ea8 [0203.998] wcscpy (in: _Dest=0x81f6ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" [0203.998] wcscat (in: _Dest=0x81f6ea8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json.f0dbec" [0203.998] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json.f0dbec", NtPathName=0x1520fcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8334930 [0204.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334930) returned 1 [0204.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86980) returned 1 [0204.459] NtQueryInformationFile (in: FileHandle=0x16f4, IoStatusBlock=0x1520fc98, FileInformation=0x1520fca0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1520fc98, FileInformation=0x1520fca0) returned 0x0 [0204.459] NtSetInformationFile (FileHandle=0x16f4, IoStatusBlock=0x1520fc98, FileInformation=0x1520fca0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6ea8) returned 1 [0207.429] FlushFileBuffers (hFile=0x16f4) returned 1 [0207.443] CloseHandle (hObject=0x16f4) returned 1 [0207.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef7d0 [0207.954] wcscpy (in: _Dest=0x83ef7d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" [0207.954] wcscat (in: _Dest=0x83ef7d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\F0DBEC-Readme.txt" [0207.954] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\f0dbec-readme.txt")) returned 0xffffffff [0207.954] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1708 [0208.386] WriteFile (in: hFile=0x1708, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1520fce4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1520fce4*=0x70c, lpOverlapped=0x0) returned 1 [0209.221] CloseHandle (hObject=0x1708) returned 1 [0209.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef7d0) returned 1 [0209.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401f28) returned 1 Thread: id = 5930 os_tid = 0x2fec [0188.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml")) returned 0x20 [0189.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML", dwFileAttributes=0x20) returned 0 [0189.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.883] GetLastError () returned 0x5 [0189.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML", dwFileAttributes=0x20) returned 0 [0189.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f418) returned 1 Thread: id = 5931 os_tid = 0x2ff0 [0188.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml")) returned 0x20 [0189.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML", dwFileAttributes=0x20) returned 0 [0189.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.880] GetLastError () returned 0x5 [0189.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML", dwFileAttributes=0x20) returned 0 [0189.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 5932 os_tid = 0x2ff4 [0188.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml")) returned 0x20 [0189.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML", dwFileAttributes=0x20) returned 0 [0189.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.885] GetLastError () returned 0x5 [0189.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML", dwFileAttributes=0x20) returned 0 [0189.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 5933 os_tid = 0x2ff8 [0188.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml")) returned 0x20 [0189.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML", dwFileAttributes=0x20) returned 0 [0189.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.886] GetLastError () returned 0x5 [0189.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML", dwFileAttributes=0x20) returned 0 [0189.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f6f0) returned 1 Thread: id = 5934 os_tid = 0x2fc0 [0188.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml")) returned 0x20 [0189.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML", dwFileAttributes=0x20) returned 0 [0189.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.888] GetLastError () returned 0x5 [0189.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML", dwFileAttributes=0x20) returned 0 [0189.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 5935 os_tid = 0x4e4 [0188.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml")) returned 0x20 [0189.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML", dwFileAttributes=0x20) returned 0 [0189.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.889] GetLastError () returned 0x5 [0189.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML", dwFileAttributes=0x20) returned 0 [0189.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 5936 os_tid = 0x124 [0188.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml")) returned 0x20 [0189.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML", dwFileAttributes=0x20) returned 0 [0189.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.881] GetLastError () returned 0x5 [0189.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML", dwFileAttributes=0x20) returned 0 [0189.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ede8) returned 1 Thread: id = 5937 os_tid = 0x2fc4 [0188.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml")) returned 0x20 [0189.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML", dwFileAttributes=0x20) returned 0 [0189.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.891] GetLastError () returned 0x5 [0189.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML", dwFileAttributes=0x20) returned 0 [0189.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f118) returned 1 Thread: id = 5938 os_tid = 0x11a0 [0188.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml")) returned 0x20 [0189.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML", dwFileAttributes=0x20) returned 0 [0189.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.892] GetLastError () returned 0x5 [0189.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML", dwFileAttributes=0x20) returned 0 [0189.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eb40) returned 1 Thread: id = 5939 os_tid = 0x163c [0188.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml")) returned 0x20 [0189.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML", dwFileAttributes=0x20) returned 0 [0189.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.852] GetLastError () returned 0x5 [0189.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML", dwFileAttributes=0x20) returned 0 [0189.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f090) returned 1 Thread: id = 5940 os_tid = 0x14b4 [0188.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json")) returned 0x2020 [0190.281] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0199.316] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec [0199.317] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x1435fbf8 | out: lpFileSize=0x1435fbf8*=226) returned 1 [0199.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0199.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0199.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3480 [0199.317] NtQuerySystemTime (in: CurrentTime=0x1435fb80 | out: CurrentTime=0x1435fb80*=132471540672024000) returned 0x0 [0199.317] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x31195d99 [0199.317] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x3c1023a4 [0199.317] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x46d2024 [0199.317] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x70b41c95 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x243d3cd0 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x5a135196 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x5815921 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x19741a48 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x7ca0ce79 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0xc50c75a [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x128774e8 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0xd1d8841 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x5637e946 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x1a1cb197 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x73538eaa [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x736ff9ca [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0xd9e1281 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x5783fc89 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x3e5edd49 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x3178d05e [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x2492c373 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x47fd91c9 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x33316818 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x41d3e287 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x47b06ad5 [0199.318] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x671dd6e6 [0199.319] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x71d35fbe [0199.319] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x61c4b5ec [0199.319] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x4e6a5e8e [0199.319] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x4f9ac961 [0199.319] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x701198cb [0199.319] RtlRandomEx (in: Seed=0x1435fb78 | out: Seed=0x1435fb78) returned 0x19607661 [0199.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0199.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0199.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b54b8 [0199.333] ReadFile (in: hFile=0x16ec, lpBuffer=0x829b080, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0x1435fb74, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesRead=0x1435fb74*=0xe2, lpOverlapped=0x0) returned 1 [0199.335] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.335] WriteFile (in: hFile=0x16ec, lpBuffer=0x82b54b8*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x1435fb78, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesWritten=0x1435fb78*=0xe2, lpOverlapped=0x0) returned 1 [0203.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063890 [0203.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80638b8 [0203.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80638b8) returned 1 [0203.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0203.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0203.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054b28) returned 1 [0203.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7220) returned 1 [0203.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69420 [0203.490] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.490] WriteFile (in: hFile=0x16ec, lpBuffer=0x84076b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1435fbec, lpOverlapped=0x0 | out: lpBuffer=0x84076b8*, lpNumberOfBytesWritten=0x1435fbec*=0x10c, lpOverlapped=0x0) returned 1 [0204.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84076b8) returned 1 [0204.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69450) returned 1 [0204.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80638b8) returned 1 [0204.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69420) returned 1 [0204.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063890) returned 1 [0204.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0204.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0eb0) returned 1 [0204.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1040) returned 1 [0204.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f6fe0 [0204.003] wcscpy (in: _Dest=0x81f6fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" [0204.003] wcscat (in: _Dest=0x81f6fe0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json.f0dbec" [0204.003] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0x1435fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x8334a78 [0204.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334a78) returned 1 [0204.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8337848) returned 1 [0204.460] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x1435fb48, FileInformation=0x1435fb50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1435fb48, FileInformation=0x1435fb50) returned 0x0 [0204.461] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x1435fb48, FileInformation=0x1435fb50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6fe0) returned 1 [0207.432] FlushFileBuffers (hFile=0x16ec) returned 1 [0207.451] CloseHandle (hObject=0x16ec) returned 1 [0207.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef908 [0207.957] wcscpy (in: _Dest=0x83ef908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" [0207.957] wcscat (in: _Dest=0x83ef908, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\F0DBEC-Readme.txt" [0207.957] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0207.958] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f6c [0208.386] WriteFile (in: hFile=0x1f6c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1435fb94, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1435fb94*=0x70c, lpOverlapped=0x0) returned 1 [0209.217] CloseHandle (hObject=0x1f6c) returned 1 [0209.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef908) returned 1 [0209.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84015e8) returned 1 Thread: id = 5941 os_tid = 0x2fd4 [0188.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css")) returned 0x20 [0191.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0191.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.897] GetLastError () returned 0x5 [0191.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0191.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6448) returned 1 Thread: id = 5942 os_tid = 0x2fbc [0188.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f3220 [0188.494] wcscpy (in: _Dest=0x81f3220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0188.494] wcscat (in: _Dest=0x81f3220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0188.494] wcscat (in: _Dest=0x81f3220, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*" [0188.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c150 [0188.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81287eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e3dad50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80996d0 [0191.898] wcscmp (_String1=".", _String2=".") returned 0 [0191.898] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81287eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e3dad50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.899] wcscmp (_String1="..", _String2=".") returned 1 [0191.899] wcscmp (_String1="..", _String2="..") returned 0 [0191.899] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0191.899] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0191.899] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0191.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a168 [0191.899] wcscpy (in: _Dest=0x3e3a168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0191.899] wcscat (in: _Dest=0x3e3a168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0191.899] wcscat (in: _Dest=0x3e3a168, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" [0195.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1584 [0195.745] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.745] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.745] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x8021c80 [0195.745] wcscpy (in: _Dest=0x8021c80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0195.745] wcscat (in: _Dest=0x8021c80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0195.745] wcscat (in: _Dest=0x8021c80, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" [0195.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0195.746] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.746] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.746] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3afe8 [0195.746] wcscpy (in: _Dest=0x3e3afe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0195.747] wcscat (in: _Dest=0x3e3afe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0195.747] wcscat (in: _Dest=0x3e3afe8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" [0195.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3afe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0195.748] FindNextFileW (in: hFindFile=0x80996d0, lpFindFileData=0x3f3c150 | out: lpFindFileData=0x3f3c150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.748] FindClose (in: hFindFile=0x80996d0 | out: hFindFile=0x80996d0) returned 1 [0195.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c150) returned 1 [0195.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3220) returned 1 [0195.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2f98) returned 1 Thread: id = 5943 os_tid = 0x2fd8 [0188.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css")) returned 0x20 [0191.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0191.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.908] GetLastError () returned 0x5 [0191.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0191.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6608) returned 1 Thread: id = 5944 os_tid = 0xed8 [0188.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css")) returned 0x20 [0191.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0191.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.877] GetLastError () returned 0x5 [0191.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0191.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b728) returned 1 Thread: id = 5945 os_tid = 0xf38 [0188.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css")) returned 0x20 [0191.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0191.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.900] GetLastError () returned 0x5 [0191.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0191.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f66e8) returned 1 Thread: id = 5946 os_tid = 0x11a4 [0188.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f32f8 [0188.497] wcscpy (in: _Dest=0x81f32f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0188.497] wcscat (in: _Dest=0x81f32f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\" [0188.498] wcscat (in: _Dest=0x81f32f8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*" [0188.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0188.498] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82592eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90507ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80991d0 [0188.996] wcscmp (_String1=".", _String2=".") returned 0 [0188.996] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82592eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90507ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.996] wcscmp (_String1="..", _String2=".") returned 1 [0188.996] wcscmp (_String1="..", _String2="..") returned 0 [0188.996] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0188.996] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0188.996] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0188.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80217d0 [0188.997] wcscpy (in: _Dest=0x80217d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0188.997] wcscat (in: _Dest=0x80217d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\" [0188.997] wcscat (in: _Dest=0x80217d0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" [0188.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80217d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c [0189.002] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0189.002] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0189.002] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0189.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b470 [0189.003] wcscpy (in: _Dest=0x3e3b470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0189.003] wcscat (in: _Dest=0x3e3b470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\" [0189.003] wcscat (in: _Dest=0x3e3b470, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" [0189.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0189.006] FindNextFileW (in: hFindFile=0x80991d0, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0189.006] FindClose (in: hFindFile=0x80991d0 | out: hFindFile=0x80991d0) returned 1 [0189.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0189.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f32f8) returned 1 [0189.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3070) returned 1 Thread: id = 5947 os_tid = 0x134c [0188.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css")) returned 0x20 [0191.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0191.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.892] GetLastError () returned 0x5 [0191.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0191.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f67c8) returned 1 Thread: id = 5948 os_tid = 0x79c [0188.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css")) returned 0x20 [0191.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0191.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.876] GetLastError () returned 0x5 [0191.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0191.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39dc8) returned 1 Thread: id = 5949 os_tid = 0x293c [0188.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x81f6a68 [0188.513] wcscpy (in: _Dest=0x81f6a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0188.514] wcscat (in: _Dest=0x81f6a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0188.514] wcscat (in: _Dest=0x81f6a68, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*" [0188.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3aba8 [0188.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x826776f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x905c66d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099310 [0191.896] wcscmp (_String1=".", _String2=".") returned 0 [0191.896] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x826776f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x905c66d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.896] wcscmp (_String1="..", _String2=".") returned 1 [0191.896] wcscmp (_String1="..", _String2="..") returned 0 [0191.896] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826776f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0191.896] wcscmp (_String1="background.gif", _String2=".") returned 1 [0191.896] wcscmp (_String1="background.gif", _String2="..") returned 1 [0191.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadc28 [0191.896] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0191.896] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0191.896] wcscat (in: _Dest=0x3dadc28, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" [0192.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dadc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0192.819] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.819] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.819] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021c80 [0192.819] wcscpy (in: _Dest=0x8021c80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0192.819] wcscat (in: _Dest=0x8021c80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0192.819] wcscat (in: _Dest=0x8021c80, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" [0192.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c [0192.820] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.820] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.820] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8020c90 [0192.820] wcscpy (in: _Dest=0x8020c90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0192.820] wcscat (in: _Dest=0x8020c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0192.820] wcscat (in: _Dest=0x8020c90, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" [0192.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80 [0192.821] FindNextFileW (in: hFindFile=0x8099310, lpFindFileData=0x3f3aba8 | out: lpFindFileData=0x3f3aba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.821] FindClose (in: hFindFile=0x8099310 | out: hFindFile=0x8099310) returned 1 [0192.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3aba8) returned 1 [0192.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6a68) returned 1 [0192.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3148) returned 1 Thread: id = 5950 os_tid = 0xb04 [0188.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css")) returned 0x20 [0191.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0191.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.894] GetLastError () returned 0x5 [0191.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0191.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f68a8) returned 1 Thread: id = 5951 os_tid = 0xba8 [0188.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3e3ae18 [0188.515] wcscpy (in: _Dest=0x3e3ae18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0188.515] wcscat (in: _Dest=0x3e3ae18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0188.515] wcscat (in: _Dest=0x3e3ae18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*" [0188.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3de30 [0188.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8269d850, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098e50 [0191.886] wcscmp (_String1=".", _String2=".") returned 0 [0191.886] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8269d850, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.886] wcscmp (_String1="..", _String2=".") returned 1 [0191.886] wcscmp (_String1="..", _String2="..") returned 0 [0191.886] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0191.886] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0191.886] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0191.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dade18 [0191.886] wcscpy (in: _Dest=0x3dade18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0191.886] wcscat (in: _Dest=0x3dade18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0191.886] wcscat (in: _Dest=0x3dade18, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" [0193.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dade18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0193.947] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0193.947] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0193.947] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0193.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dad468 [0193.947] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0193.947] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0193.947] wcscat (in: _Dest=0x3dad468, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" [0193.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dad468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0193.948] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0193.948] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0193.949] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0193.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae4e0 [0193.949] wcscpy (in: _Dest=0x3dae4e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0193.949] wcscat (in: _Dest=0x3dae4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0193.949] wcscat (in: _Dest=0x3dae4e0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" [0193.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3dae4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0193.950] FindNextFileW (in: hFindFile=0x8098e50, lpFindFileData=0x3f3de30 | out: lpFindFileData=0x3f3de30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0193.950] FindClose (in: hFindFile=0x8098e50 | out: hFindFile=0x8098e50) returned 1 [0193.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de30) returned 1 [0193.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ae18) returned 1 [0193.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6988) returned 1 Thread: id = 5952 os_tid = 0xb90 [0188.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css")) returned 0x20 [0191.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0191.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.874] GetLastError () returned 0x5 [0191.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0191.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3af00) returned 1 Thread: id = 5953 os_tid = 0xbc8 [0188.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f4f08 [0188.517] wcscpy (in: _Dest=0x81f4f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0188.517] wcscat (in: _Dest=0x81f4f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" [0188.517] wcscat (in: _Dest=0x81f4f08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*" [0188.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3dbc8 [0188.517] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58b1ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58b6e10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0190.022] wcscmp (_String1=".", _String2=".") returned 0 [0190.022] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58b1ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58b6e10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.022] wcscmp (_String1="..", _String2=".") returned 1 [0190.022] wcscmp (_String1="..", _String2="..") returned 0 [0190.022] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58b6e10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.022] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.022] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e9208 [0190.023] wcscpy (in: _Dest=0x81e9208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0190.023] wcscat (in: _Dest=0x81e9208, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" [0190.023] wcscat (in: _Dest=0x81e9208, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" [0194.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0194.041] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f3dbc8 | out: lpFindFileData=0x3f3dbc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58b6e10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.041] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0194.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dbc8) returned 1 [0194.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4f08) returned 1 [0194.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333488) returned 1 Thread: id = 5954 os_tid = 0xbd0 [0188.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5118 [0188.518] wcscpy (in: _Dest=0x81f5118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0188.518] wcscat (in: _Dest=0x81f5118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" [0188.518] wcscat (in: _Dest=0x81f5118, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*" [0188.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3e098 [0188.518] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58bbc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58c0a50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0191.229] wcscmp (_String1=".", _String2=".") returned 0 [0191.229] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58bbc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58c0a50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.229] wcscmp (_String1="..", _String2=".") returned 1 [0191.230] wcscmp (_String1="..", _String2="..") returned 0 [0191.230] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58c0a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.230] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.230] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e8678 [0191.230] wcscpy (in: _Dest=0x81e8678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0191.230] wcscat (in: _Dest=0x81e8678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" [0191.230] wcscat (in: _Dest=0x81e8678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" [0192.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0192.553] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x3f3e098 | out: lpFindFileData=0x3f3e098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58c0a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.553] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e098) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5118) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333fe0) returned 1 Thread: id = 5955 os_tid = 0x1884 [0188.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f3e88 [0188.519] wcscpy (in: _Dest=0x81f3e88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0188.519] wcscat (in: _Dest=0x81f3e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" [0188.519] wcscat (in: _Dest=0x81f3e88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*" [0188.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b7b0 [0188.519] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ca690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0191.744] wcscmp (_String1=".", _String2=".") returned 0 [0191.744] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ca690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.744] wcscmp (_String1="..", _String2=".") returned 1 [0191.744] wcscmp (_String1="..", _String2="..") returned 0 [0191.744] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ca690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.745] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.745] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e80b0 [0191.745] wcscpy (in: _Dest=0x81e80b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0191.745] wcscat (in: _Dest=0x81e80b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" [0191.745] wcscat (in: _Dest=0x81e80b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" [0192.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e80b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc4 [0192.262] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f3b7b0 | out: lpFindFileData=0x3f3b7b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ca690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.262] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b7b0) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3e88) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ed8) returned 1 Thread: id = 5956 os_tid = 0x1874 [0188.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f3b70 [0188.520] wcscpy (in: _Dest=0x81f3b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0188.520] wcscat (in: _Dest=0x81f3b70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" [0188.520] wcscat (in: _Dest=0x81f3b70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*" [0188.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b078 [0188.520] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58cf4b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58d42d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0191.743] wcscmp (_String1=".", _String2=".") returned 0 [0191.743] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58cf4b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58d42d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.744] wcscmp (_String1="..", _String2=".") returned 1 [0191.744] wcscmp (_String1="..", _String2="..") returned 0 [0191.744] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58d42d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.744] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.744] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e7f88 [0191.744] wcscpy (in: _Dest=0x81e7f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0191.744] wcscat (in: _Dest=0x81e7f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" [0191.744] wcscat (in: _Dest=0x81e7f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" [0192.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e7f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a94 [0192.261] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f3b078 | out: lpFindFileData=0x3f3b078*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58d42d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.261] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0192.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b078) returned 1 [0192.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3b70) returned 1 [0192.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333698) returned 1 Thread: id = 5957 os_tid = 0xbe0 [0188.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f3f90 [0188.521] wcscpy (in: _Dest=0x81f3f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0188.521] wcscat (in: _Dest=0x81f3f90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" [0188.521] wcscat (in: _Dest=0x81f3f90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*" [0188.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cd58 [0188.521] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58d90f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ddf10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0191.743] wcscmp (_String1=".", _String2=".") returned 0 [0191.743] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58d90f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ddf10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.743] wcscmp (_String1="..", _String2=".") returned 1 [0191.743] wcscmp (_String1="..", _String2="..") returned 0 [0191.743] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ddf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.743] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.743] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e7e60 [0191.743] wcscpy (in: _Dest=0x81e7e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0191.743] wcscat (in: _Dest=0x81e7e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" [0191.743] wcscat (in: _Dest=0x81e7e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" [0192.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e7e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a64 [0192.259] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f3cd58 | out: lpFindFileData=0x3f3cd58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ddf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.259] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0192.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd58) returned 1 [0192.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3f90) returned 1 [0192.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333278) returned 1 Thread: id = 5958 os_tid = 0xbec [0188.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x81f5010 [0188.522] wcscpy (in: _Dest=0x81f5010, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0188.522] wcscat (in: _Dest=0x81f5010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" [0188.522] wcscat (in: _Dest=0x81f5010, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*" [0188.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3a940 [0188.522] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58e5440, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58e7b50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58e7b50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0191.742] wcscmp (_String1=".", _String2=".") returned 0 [0191.742] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58e5440, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58e7b50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58e7b50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.742] wcscmp (_String1="..", _String2=".") returned 1 [0191.742] wcscmp (_String1="..", _String2="..") returned 0 [0191.742] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58e7b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ea260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.742] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.742] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e7d38 [0191.742] wcscpy (in: _Dest=0x81e7d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0191.742] wcscat (in: _Dest=0x81e7d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" [0191.742] wcscat (in: _Dest=0x81e7d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" [0192.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e7d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0192.257] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f3a940 | out: lpFindFileData=0x3f3a940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58e7b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ea260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.257] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0192.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a940) returned 1 [0192.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5010) returned 1 [0192.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333170) returned 1 Thread: id = 5963 os_tid = 0xc00 [0188.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x81dfcd8 [0188.527] wcscpy (in: _Dest=0x81dfcd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0188.527] wcscat (in: _Dest=0x81dfcd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" [0188.527] wcscat (in: _Dest=0x81dfcd8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*" [0188.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c888 [0188.527] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5918890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe591afa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0191.737] wcscmp (_String1=".", _String2=".") returned 0 [0191.737] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5918890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe591afa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.737] wcscmp (_String1="..", _String2=".") returned 1 [0191.737] wcscmp (_String1="..", _String2="..") returned 0 [0191.737] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe591afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.738] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.738] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e8b18 [0191.738] wcscpy (in: _Dest=0x81e8b18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0191.738] wcscat (in: _Dest=0x81e8b18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" [0191.738] wcscat (in: _Dest=0x81e8b18, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" [0192.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0192.247] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f3c888 | out: lpFindFileData=0x3f3c888*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe591afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.247] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0192.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c888) returned 1 [0192.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfcd8) returned 1 [0192.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332e58) returned 1 Thread: id = 5964 os_tid = 0xbfc [0188.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x81e12b8 [0188.528] wcscpy (in: _Dest=0x81e12b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0188.528] wcscat (in: _Dest=0x81e12b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" [0188.528] wcscat (in: _Dest=0x81e12b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*" [0188.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ae10 [0188.528] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe59224d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5924be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0190.023] wcscmp (_String1=".", _String2=".") returned 0 [0190.023] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe59224d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5924be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.023] wcscmp (_String1="..", _String2=".") returned 1 [0190.023] wcscmp (_String1="..", _String2="..") returned 0 [0190.023] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5924be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.023] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.023] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81e9330 [0190.023] wcscpy (in: _Dest=0x81e9330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0190.023] wcscat (in: _Dest=0x81e9330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" [0190.023] wcscat (in: _Dest=0x81e9330, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" [0191.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e9330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0191.488] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5924be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.488] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0191.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ae10) returned 1 [0191.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e12b8) returned 1 [0191.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ab8) returned 1 Thread: id = 5972 os_tid = 0x1548 [0188.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt")) returned 0x20 [0189.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.706] GetLastError () returned 0x5 [0189.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5508) returned 1 Thread: id = 5975 os_tid = 0x7cc [0188.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35af88 [0188.555] wcscpy (in: _Dest=0x35af88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.555] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.555] wcscat (in: _Dest=0x35af88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*" [0188.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ba18 [0188.555] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d10 [0189.315] wcscmp (_String1=".", _String2=".") returned 0 [0189.315] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.319] wcscmp (_String1="..", _String2=".") returned 1 [0189.319] wcscmp (_String1="..", _String2="..") returned 0 [0189.319] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3982c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1 [0189.319] wcscmp (_String1="ara131.lex", _String2=".") returned 1 [0189.319] wcscmp (_String1="ara131.lex", _String2="..") returned 1 [0189.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35348 [0189.319] wcscpy (in: _Dest=0x3e35348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.319] wcscat (in: _Dest=0x3e35348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.319] wcscat (in: _Dest=0x3e35348, _Source="ara131.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" [0189.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0189.813] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb372160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara32.clx", cAlternateFileName="")) returned 1 [0189.813] wcscmp (_String1="ara32.clx", _String2=".") returned 1 [0189.813] wcscmp (_String1="ara32.clx", _String2="..") returned 1 [0189.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333468 [0189.813] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.813] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.813] wcscat (in: _Dest=0x333468, _Source="ara32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" [0189.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2578 [0189.814] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb372160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="araphon.env", cAlternateFileName="")) returned 1 [0189.814] wcscmp (_String1="araphon.env", _String2=".") returned 1 [0189.814] wcscmp (_String1="araphon.env", _String2="..") returned 1 [0189.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e35988 [0189.814] wcscpy (in: _Dest=0x3e35988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.814] wcscat (in: _Dest=0x3e35988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.814] wcscat (in: _Dest=0x3e35988, _Source="araphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" [0189.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0189.815] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1 [0189.815] wcscmp (_String1="brt.fca", _String2=".") returned 1 [0189.815] wcscmp (_String1="brt.fca", _String2="..") returned 1 [0189.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x334068 [0189.816] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.816] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.816] wcscat (in: _Dest=0x334068, _Source="brt.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" [0189.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0189.817] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1 [0189.817] wcscmp (_String1="brt.hyp", _String2=".") returned 1 [0189.817] wcscmp (_String1="brt.hyp", _String2="..") returned 1 [0189.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333528 [0189.817] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.817] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.817] wcscat (in: _Dest=0x333528, _Source="brt.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" [0189.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0189.818] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0c48a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2d1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt04.hsp", cAlternateFileName="")) returned 1 [0189.818] wcscmp (_String1="brt04.hsp", _String2=".") returned 1 [0189.818] wcscmp (_String1="brt04.hsp", _String2="..") returned 1 [0189.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3339a8 [0189.818] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.818] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.818] wcscat (in: _Dest=0x3339a8, _Source="brt04.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" [0189.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0189.819] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt32.clx", cAlternateFileName="")) returned 1 [0189.819] wcscmp (_String1="brt32.clx", _String2=".") returned 1 [0189.819] wcscmp (_String1="brt32.clx", _String2="..") returned 1 [0189.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333ee8 [0189.820] wcscpy (in: _Dest=0x333ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.820] wcscat (in: _Dest=0x333ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.820] wcscat (in: _Dest=0x333ee8, _Source="brt32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" [0189.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a20 [0189.821] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt55.ths", cAlternateFileName="")) returned 1 [0189.821] wcscmp (_String1="brt55.ths", _String2=".") returned 1 [0189.821] wcscmp (_String1="brt55.ths", _String2="..") returned 1 [0189.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333228 [0189.821] wcscpy (in: _Dest=0x333228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.821] wcscat (in: _Dest=0x333228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.821] wcscat (in: _Dest=0x333228, _Source="brt55.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" [0189.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8c [0189.822] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.fca", cAlternateFileName="")) returned 1 [0189.822] wcscmp (_String1="brz.fca", _String2=".") returned 1 [0189.822] wcscmp (_String1="brz.fca", _String2="..") returned 1 [0189.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333e28 [0189.822] wcscpy (in: _Dest=0x333e28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.822] wcscat (in: _Dest=0x333e28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.822] wcscat (in: _Dest=0x333e28, _Source="brz.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" [0189.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c88 [0189.824] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.hyp", cAlternateFileName="")) returned 1 [0189.824] wcscmp (_String1="brz.hyp", _String2=".") returned 1 [0189.824] wcscmp (_String1="brz.hyp", _String2="..") returned 1 [0189.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0189.824] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.824] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.824] wcscat (in: _Dest=0x3333a8, _Source="brz.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" [0189.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0189.825] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz32.clx", cAlternateFileName="")) returned 1 [0189.825] wcscmp (_String1="brz32.clx", _String2=".") returned 1 [0189.825] wcscmp (_String1="brz32.clx", _String2="..") returned 1 [0189.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0189.825] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.825] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.825] wcscat (in: _Dest=0x3336a8, _Source="brz32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" [0189.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0189.826] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz40.hsp", cAlternateFileName="")) returned 1 [0189.826] wcscmp (_String1="brz40.hsp", _String2=".") returned 1 [0189.826] wcscmp (_String1="brz40.hsp", _String2="..") returned 1 [0189.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333168 [0189.826] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.826] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.827] wcscat (in: _Dest=0x333168, _Source="brz40.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" [0189.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0189.828] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul.hyp", cAlternateFileName="")) returned 1 [0189.828] wcscmp (_String1="bul.hyp", _String2=".") returned 1 [0189.828] wcscmp (_String1="bul.hyp", _String2="..") returned 1 [0189.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3329e8 [0189.828] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.828] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.828] wcscat (in: _Dest=0x3329e8, _Source="bul.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" [0189.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0189.829] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul120.lex", cAlternateFileName="")) returned 1 [0189.829] wcscmp (_String1="bul120.lex", _String2=".") returned 1 [0189.829] wcscmp (_String1="bul120.lex", _String2="..") returned 1 [0189.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35410 [0189.830] wcscpy (in: _Dest=0x3e35410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.830] wcscat (in: _Dest=0x3e35410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.830] wcscat (in: _Dest=0x3e35410, _Source="bul120.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" [0189.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0189.831] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul32.clx", cAlternateFileName="")) returned 1 [0189.831] wcscmp (_String1="bul32.clx", _String2=".") returned 1 [0189.831] wcscmp (_String1="bul32.clx", _String2="..") returned 1 [0189.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3330a8 [0189.831] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.831] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.831] wcscat (in: _Dest=0x3330a8, _Source="bul32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" [0189.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0189.832] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulphon.env", cAlternateFileName="")) returned 1 [0189.832] wcscmp (_String1="bulphon.env", _String2=".") returned 1 [0189.832] wcscmp (_String1="bulphon.env", _String2="..") returned 1 [0189.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e35730 [0189.832] wcscpy (in: _Dest=0x3e35730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.832] wcscat (in: _Dest=0x3e35730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.832] wcscat (in: _Dest=0x3e35730, _Source="bulphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" [0189.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0189.833] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb110b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1 [0189.833] wcscmp (_String1="can.fca", _String2=".") returned 1 [0189.833] wcscmp (_String1="can.fca", _String2="..") returned 1 [0189.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333a68 [0189.833] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.833] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.833] wcscat (in: _Dest=0x333a68, _Source="can.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" [0189.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0189.835] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.hyp", cAlternateFileName="")) returned 1 [0189.835] wcscmp (_String1="can.hyp", _String2=".") returned 1 [0189.835] wcscmp (_String1="can.hyp", _String2="..") returned 1 [0189.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333768 [0189.835] wcscpy (in: _Dest=0x333768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.835] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.835] wcscat (in: _Dest=0x333768, _Source="can.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" [0189.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80 [0189.836] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0c48a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="can03.ths", cAlternateFileName="")) returned 1 [0189.836] wcscmp (_String1="can03.ths", _String2=".") returned 1 [0189.836] wcscmp (_String1="can03.ths", _String2="..") returned 1 [0189.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333fa8 [0189.836] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.836] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.836] wcscat (in: _Dest=0x333fa8, _Source="can03.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" [0189.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c [0189.837] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb110b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="can129.hsp", cAlternateFileName="")) returned 1 [0189.837] wcscmp (_String1="can129.hsp", _String2=".") returned 1 [0189.837] wcscmp (_String1="can129.hsp", _String2="..") returned 1 [0189.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e354d8 [0189.837] wcscpy (in: _Dest=0x3e354d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.837] wcscat (in: _Dest=0x3e354d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.837] wcscat (in: _Dest=0x3e354d8, _Source="can129.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" [0189.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e354d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0189.838] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb110b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="can32.clx", cAlternateFileName="")) returned 1 [0189.838] wcscmp (_String1="can32.clx", _String2=".") returned 1 [0189.838] wcscmp (_String1="can32.clx", _String2="..") returned 1 [0189.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3338e8 [0189.838] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.838] wcscat (in: _Dest=0x3338e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.838] wcscat (in: _Dest=0x3338e8, _Source="can32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" [0189.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3338e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0189.839] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.fca", cAlternateFileName="")) returned 1 [0189.839] wcscmp (_String1="cfr.fca", _String2=".") returned 1 [0189.839] wcscmp (_String1="cfr.fca", _String2="..") returned 1 [0189.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0189.839] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.839] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.839] wcscat (in: _Dest=0x333828, _Source="cfr.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" [0189.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0189.840] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.hyp", cAlternateFileName="")) returned 1 [0189.840] wcscmp (_String1="cfr.hyp", _String2=".") returned 1 [0189.840] wcscmp (_String1="cfr.hyp", _String2="..") returned 1 [0189.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5648 [0189.841] wcscpy (in: _Dest=0x81d5648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.841] wcscat (in: _Dest=0x81d5648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.841] wcscat (in: _Dest=0x81d5648, _Source="cfr.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" [0189.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0189.842] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr32.clx", cAlternateFileName="")) returned 1 [0189.842] wcscmp (_String1="cfr32.clx", _String2=".") returned 1 [0189.842] wcscmp (_String1="cfr32.clx", _String2="..") returned 1 [0189.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5708 [0189.842] wcscpy (in: _Dest=0x81d5708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.842] wcscat (in: _Dest=0x81d5708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.842] wcscat (in: _Dest=0x81d5708, _Source="cfr32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" [0189.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c [0189.843] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a251, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr68.hsp", cAlternateFileName="")) returned 1 [0189.843] wcscmp (_String1="cfr68.hsp", _String2=".") returned 1 [0189.843] wcscmp (_String1="cfr68.hsp", _String2="..") returned 1 [0189.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d57c8 [0189.843] wcscpy (in: _Dest=0x81d57c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.843] wcscat (in: _Dest=0x81d57c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.843] wcscat (in: _Dest=0x81d57c8, _Source="cfr68.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" [0189.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d57c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a8 [0189.844] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr95.ths", cAlternateFileName="")) returned 1 [0189.844] wcscmp (_String1="cfr95.ths", _String2=".") returned 1 [0189.844] wcscmp (_String1="cfr95.ths", _String2="..") returned 1 [0189.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5888 [0189.844] wcscpy (in: _Dest=0x81d5888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.844] wcscat (in: _Dest=0x81d5888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.844] wcscat (in: _Dest=0x81d5888, _Source="cfr95.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" [0189.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec [0189.845] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.fca", cAlternateFileName="")) returned 1 [0189.845] wcscmp (_String1="ctl.fca", _String2=".") returned 1 [0189.845] wcscmp (_String1="ctl.fca", _String2="..") returned 1 [0189.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5948 [0189.845] wcscpy (in: _Dest=0x81d5948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.845] wcscat (in: _Dest=0x81d5948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.845] wcscat (in: _Dest=0x81d5948, _Source="ctl.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" [0189.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f4 [0189.846] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.hyp", cAlternateFileName="")) returned 1 [0189.846] wcscmp (_String1="ctl.hyp", _String2=".") returned 1 [0189.846] wcscmp (_String1="ctl.hyp", _String2="..") returned 1 [0189.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5a08 [0189.846] wcscpy (in: _Dest=0x81d5a08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.846] wcscat (in: _Dest=0x81d5a08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.846] wcscat (in: _Dest=0x81d5a08, _Source="ctl.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" [0189.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f8 [0189.847] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4589f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl28.hsp", cAlternateFileName="")) returned 1 [0189.847] wcscmp (_String1="ctl28.hsp", _String2=".") returned 1 [0189.847] wcscmp (_String1="ctl28.hsp", _String2="..") returned 1 [0189.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5ac8 [0189.848] wcscpy (in: _Dest=0x81d5ac8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.848] wcscat (in: _Dest=0x81d5ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.848] wcscat (in: _Dest=0x81d5ac8, _Source="ctl28.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" [0189.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x266c [0189.848] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl32.clx", cAlternateFileName="")) returned 1 [0189.849] wcscmp (_String1="ctl32.clx", _String2=".") returned 1 [0189.849] wcscmp (_String1="ctl32.clx", _String2="..") returned 1 [0189.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5b88 [0189.849] wcscpy (in: _Dest=0x81d5b88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.849] wcscat (in: _Dest=0x81d5b88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.849] wcscat (in: _Dest=0x81d5b88, _Source="ctl32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" [0189.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0189.850] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb325ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.fca", cAlternateFileName="")) returned 1 [0189.850] wcscmp (_String1="cze.fca", _String2=".") returned 1 [0189.850] wcscmp (_String1="cze.fca", _String2="..") returned 1 [0189.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5c48 [0189.850] wcscpy (in: _Dest=0x81d5c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.850] wcscat (in: _Dest=0x81d5c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.850] wcscat (in: _Dest=0x81d5c48, _Source="cze.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" [0189.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0190.192] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb325ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.hyp", cAlternateFileName="")) returned 1 [0190.192] wcscmp (_String1="cze.hyp", _String2=".") returned 1 [0190.192] wcscmp (_String1="cze.hyp", _String2="..") returned 1 [0190.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3335e8 [0190.193] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0190.193] wcscat (in: _Dest=0x3335e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0190.193] wcscat (in: _Dest=0x3335e8, _Source="cze.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" [0193.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3335e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0193.969] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb34c000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x127204, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze108.hsp", cAlternateFileName="")) returned 1 [0193.970] wcscmp (_String1="cze108.hsp", _String2=".") returned 1 [0193.970] wcscmp (_String1="cze108.hsp", _String2="..") returned 1 [0193.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35730 [0193.970] wcscpy (in: _Dest=0x3e35730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0193.970] wcscat (in: _Dest=0x3e35730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0193.970] wcscat (in: _Dest=0x3e35730, _Source="cze108.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" [0193.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0193.971] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb34c000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze32.clx", cAlternateFileName="")) returned 1 [0193.971] wcscmp (_String1="cze32.clx", _String2=".") returned 1 [0193.971] wcscmp (_String1="cze32.clx", _String2="..") returned 1 [0193.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333768 [0193.972] wcscpy (in: _Dest=0x333768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0193.972] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0193.972] wcscat (in: _Dest=0x333768, _Source="cze32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" [0193.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0193.973] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb15ce20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan.hyp", cAlternateFileName="")) returned 1 [0193.973] wcscmp (_String1="dan.hyp", _String2=".") returned 1 [0193.973] wcscmp (_String1="dan.hyp", _String2="..") returned 1 [0193.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333a68 [0193.973] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0193.973] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0193.973] wcscat (in: _Dest=0x333a68, _Source="dan.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" [0193.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d18 [0193.974] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan32.clx", cAlternateFileName="")) returned 1 [0193.976] wcscmp (_String1="dan32.clx", _String2=".") returned 1 [0193.976] wcscmp (_String1="dan32.clx", _String2="..") returned 1 [0193.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0193.976] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0193.976] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0193.976] wcscat (in: _Dest=0x333828, _Source="dan32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" [0194.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0194.053] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x74c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan45.lex", cAlternateFileName="")) returned 1 [0194.053] wcscmp (_String1="dan45.lex", _String2=".") returned 1 [0194.053] wcscmp (_String1="dan45.lex", _String2="..") returned 1 [0194.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333fa8 [0194.053] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.053] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.053] wcscat (in: _Dest=0x333fa8, _Source="dan45.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" [0194.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0194.054] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb15ce20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan94.ths", cAlternateFileName="")) returned 1 [0194.054] wcscmp (_String1="dan94.ths", _String2=".") returned 1 [0194.055] wcscmp (_String1="dan94.ths", _String2="..") returned 1 [0194.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0194.055] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.055] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.055] wcscat (in: _Dest=0x3336a8, _Source="dan94.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" [0194.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0194.056] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb15ce20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="danphon.env", cAlternateFileName="")) returned 1 [0194.056] wcscmp (_String1="danphon.env", _String2=".") returned 1 [0194.056] wcscmp (_String1="danphon.env", _String2="..") returned 1 [0194.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e354d8 [0194.056] wcscpy (in: _Dest=0x3e354d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.056] wcscat (in: _Dest=0x3e354d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.056] wcscat (in: _Dest=0x3e354d8, _Source="danphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" [0194.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e354d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0194.057] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1 [0194.057] wcscmp (_String1="dut.fca", _String2=".") returned 1 [0194.057] wcscmp (_String1="dut.fca", _String2="..") returned 1 [0194.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0194.057] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.057] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.058] wcscat (in: _Dest=0x3333a8, _Source="dut.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" [0194.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0194.059] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.hyp", cAlternateFileName="")) returned 1 [0194.059] wcscmp (_String1="dut.hyp", _String2=".") returned 1 [0194.059] wcscmp (_String1="dut.hyp", _String2="..") returned 1 [0194.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333e28 [0194.059] wcscpy (in: _Dest=0x333e28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.059] wcscat (in: _Dest=0x333e28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.059] wcscat (in: _Dest=0x333e28, _Source="dut.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" [0194.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0194.060] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c06a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut102.hsp", cAlternateFileName="")) returned 1 [0194.060] wcscmp (_String1="dut102.hsp", _String2=".") returned 1 [0194.060] wcscmp (_String1="dut102.hsp", _String2="..") returned 1 [0194.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35988 [0194.060] wcscpy (in: _Dest=0x3e35988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.060] wcscat (in: _Dest=0x3e35988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.060] wcscat (in: _Dest=0x3e35988, _Source="dut102.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" [0194.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0194.061] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut32.clx", cAlternateFileName="")) returned 1 [0194.061] wcscmp (_String1="dut32.clx", _String2=".") returned 1 [0194.061] wcscmp (_String1="dut32.clx", _String2="..") returned 1 [0194.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333228 [0194.061] wcscpy (in: _Dest=0x333228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.061] wcscat (in: _Dest=0x333228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.061] wcscat (in: _Dest=0x333228, _Source="dut32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" [0194.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0194.062] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad0c640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut57.ths", cAlternateFileName="")) returned 1 [0194.062] wcscmp (_String1="dut57.ths", _String2=".") returned 1 [0194.062] wcscmp (_String1="dut57.ths", _String2="..") returned 1 [0194.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333ee8 [0194.062] wcscpy (in: _Dest=0x333ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.062] wcscat (in: _Dest=0x333ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.062] wcscat (in: _Dest=0x333ee8, _Source="dut57.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" [0194.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0194.063] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng.hyp", cAlternateFileName="")) returned 1 [0194.063] wcscmp (_String1="eng.hyp", _String2=".") returned 1 [0194.063] wcscmp (_String1="eng.hyp", _String2="..") returned 1 [0194.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3339a8 [0194.064] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.064] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.064] wcscat (in: _Dest=0x3339a8, _Source="eng.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" [0194.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0194.065] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng32.clx", cAlternateFileName="")) returned 1 [0194.065] wcscmp (_String1="eng32.clx", _String2=".") returned 1 [0194.065] wcscmp (_String1="eng32.clx", _String2="..") returned 1 [0194.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333528 [0194.065] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.065] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.065] wcscat (in: _Dest=0x333528, _Source="eng32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" [0194.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0194.066] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="engphon.env", cAlternateFileName="")) returned 1 [0194.066] wcscmp (_String1="engphon.env", _String2=".") returned 1 [0194.066] wcscmp (_String1="engphon.env", _String2="..") returned 1 [0194.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e35410 [0194.066] wcscpy (in: _Dest=0x3e35410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.066] wcscat (in: _Dest=0x3e35410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.066] wcscat (in: _Dest=0x3e35410, _Source="engphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" [0194.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0194.067] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2d9be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1 [0194.067] wcscmp (_String1="est.hyp", _String2=".") returned 1 [0194.067] wcscmp (_String1="est.hyp", _String2="..") returned 1 [0194.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x334068 [0194.067] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.068] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.068] wcscat (in: _Dest=0x334068, _Source="est.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" [0194.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0194.069] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="est133.lex", cAlternateFileName="")) returned 1 [0194.069] wcscmp (_String1="est133.lex", _String2=".") returned 1 [0194.069] wcscmp (_String1="est133.lex", _String2="..") returned 1 [0194.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35348 [0194.069] wcscpy (in: _Dest=0x3e35348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.069] wcscat (in: _Dest=0x3e35348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.069] wcscat (in: _Dest=0x3e35348, _Source="est133.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" [0194.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0194.070] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="est32.clx", cAlternateFileName="")) returned 1 [0194.070] wcscmp (_String1="est32.clx", _String2=".") returned 1 [0194.070] wcscmp (_String1="est32.clx", _String2="..") returned 1 [0194.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333468 [0194.070] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.070] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.070] wcscat (in: _Dest=0x333468, _Source="est32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" [0194.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0194.071] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1029, dwReserved0=0x0, dwReserved1=0x0, cFileName="estphon.env", cAlternateFileName="")) returned 1 [0194.071] wcscmp (_String1="estphon.env", _String2=".") returned 1 [0194.071] wcscmp (_String1="estphon.env", _String2="..") returned 1 [0194.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e355a0 [0194.071] wcscpy (in: _Dest=0x3e355a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.071] wcscat (in: _Dest=0x3e355a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.072] wcscat (in: _Dest=0x3e355a0, _Source="estphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" [0194.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e355a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0194.073] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1 [0194.073] wcscmp (_String1="fin.hyp", _String2=".") returned 1 [0194.073] wcscmp (_String1="fin.hyp", _String2="..") returned 1 [0194.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3330a8 [0194.073] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.073] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.073] wcscat (in: _Dest=0x3330a8, _Source="fin.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" [0194.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0194.074] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin32.clx", cAlternateFileName="")) returned 1 [0194.074] wcscmp (_String1="fin32.clx", _String2=".") returned 1 [0194.074] wcscmp (_String1="fin32.clx", _String2="..") returned 1 [0194.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333168 [0194.074] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.074] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.074] wcscat (in: _Dest=0x333168, _Source="fin32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" [0194.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0194.075] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin49.lex", cAlternateFileName="")) returned 1 [0194.075] wcscmp (_String1="fin49.lex", _String2=".") returned 1 [0194.075] wcscmp (_String1="fin49.lex", _String2="..") returned 1 [0194.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5b88 [0194.075] wcscpy (in: _Dest=0x81d5b88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.075] wcscat (in: _Dest=0x81d5b88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.075] wcscat (in: _Dest=0x81d5b88, _Source="fin49.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" [0194.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0 [0194.076] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="finphon.env", cAlternateFileName="")) returned 1 [0194.076] wcscmp (_String1="finphon.env", _String2=".") returned 1 [0194.076] wcscmp (_String1="finphon.env", _String2="..") returned 1 [0194.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e342e0 [0194.076] wcscpy (in: _Dest=0x3e342e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.076] wcscat (in: _Dest=0x3e342e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.076] wcscat (in: _Dest=0x3e342e0, _Source="finphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" [0194.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e342e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b4 [0194.077] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1 [0194.078] wcscmp (_String1="frn.fca", _String2=".") returned 1 [0194.078] wcscmp (_String1="frn.fca", _String2="..") returned 1 [0194.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5ac8 [0194.078] wcscpy (in: _Dest=0x81d5ac8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.078] wcscat (in: _Dest=0x81d5ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.078] wcscat (in: _Dest=0x81d5ac8, _Source="frn.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" [0194.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0194.079] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.hyp", cAlternateFileName="")) returned 1 [0194.079] wcscmp (_String1="frn.hyp", _String2=".") returned 1 [0194.079] wcscmp (_String1="frn.hyp", _String2="..") returned 1 [0194.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5a08 [0194.079] wcscpy (in: _Dest=0x81d5a08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.079] wcscat (in: _Dest=0x81d5a08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.079] wcscat (in: _Dest=0x81d5a08, _Source="frn.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" [0194.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8 [0194.080] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44280, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn21.hsp", cAlternateFileName="")) returned 1 [0194.080] wcscmp (_String1="frn21.hsp", _String2=".") returned 1 [0194.080] wcscmp (_String1="frn21.hsp", _String2="..") returned 1 [0194.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5948 [0194.080] wcscpy (in: _Dest=0x81d5948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.080] wcscat (in: _Dest=0x81d5948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.080] wcscat (in: _Dest=0x81d5948, _Source="frn21.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" [0194.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0194.081] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn32.clx", cAlternateFileName="")) returned 1 [0194.081] wcscmp (_String1="frn32.clx", _String2=".") returned 1 [0194.081] wcscmp (_String1="frn32.clx", _String2="..") returned 1 [0194.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5c48 [0194.081] wcscpy (in: _Dest=0x81d5c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.081] wcscat (in: _Dest=0x81d5c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.081] wcscat (in: _Dest=0x81d5c48, _Source="frn32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" [0194.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29fc [0194.082] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn93.ths", cAlternateFileName="")) returned 1 [0194.082] wcscmp (_String1="frn93.ths", _String2=".") returned 1 [0194.082] wcscmp (_String1="frn93.ths", _String2="..") returned 1 [0194.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5888 [0194.082] wcscpy (in: _Dest=0x81d5888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.082] wcscat (in: _Dest=0x81d5888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.082] wcscat (in: _Dest=0x81d5888, _Source="frn93.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" [0194.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0194.083] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.fca", cAlternateFileName="")) returned 1 [0194.083] wcscmp (_String1="gre.fca", _String2=".") returned 1 [0194.083] wcscmp (_String1="gre.fca", _String2="..") returned 1 [0194.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5648 [0194.084] wcscpy (in: _Dest=0x81d5648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.084] wcscat (in: _Dest=0x81d5648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.084] wcscat (in: _Dest=0x81d5648, _Source="gre.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" [0194.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c8 [0194.085] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.hyp", cAlternateFileName="")) returned 1 [0194.085] wcscmp (_String1="gre.hyp", _String2=".") returned 1 [0194.085] wcscmp (_String1="gre.hyp", _String2="..") returned 1 [0194.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5708 [0194.085] wcscpy (in: _Dest=0x81d5708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.085] wcscat (in: _Dest=0x81d5708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.085] wcscat (in: _Dest=0x81d5708, _Source="gre.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" [0194.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0194.086] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2d9be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre110.hsp", cAlternateFileName="")) returned 1 [0194.086] wcscmp (_String1="gre110.hsp", _String2=".") returned 1 [0194.086] wcscmp (_String1="gre110.hsp", _String2="..") returned 1 [0194.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35280 [0194.086] wcscpy (in: _Dest=0x3e35280, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.086] wcscat (in: _Dest=0x3e35280, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.086] wcscat (in: _Dest=0x3e35280, _Source="gre110.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" [0194.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0194.087] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre32.clx", cAlternateFileName="")) returned 1 [0194.087] wcscmp (_String1="gre32.clx", _String2=".") returned 1 [0194.087] wcscmp (_String1="gre32.clx", _String2="..") returned 1 [0194.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d57c8 [0194.087] wcscpy (in: _Dest=0x81d57c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.087] wcscat (in: _Dest=0x81d57c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.087] wcscat (in: _Dest=0x81d57c8, _Source="gre32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" [0194.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d57c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27b4 [0194.088] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.fca", cAlternateFileName="")) returned 1 [0194.088] wcscmp (_String1="grm.fca", _String2=".") returned 1 [0194.088] wcscmp (_String1="grm.fca", _String2="..") returned 1 [0194.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5f48 [0194.088] wcscpy (in: _Dest=0x81d5f48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0194.088] wcscat (in: _Dest=0x81d5f48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0194.088] wcscat (in: _Dest=0x81d5f48, _Source="grm.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" [0194.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0195.409] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.hyp", cAlternateFileName="")) returned 1 [0195.409] wcscmp (_String1="grm.hyp", _String2=".") returned 1 [0195.409] wcscmp (_String1="grm.hyp", _String2="..") returned 1 [0195.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333528 [0195.409] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0195.409] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0195.409] wcscat (in: _Dest=0x333528, _Source="grm.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" [0201.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0201.957] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafe0060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x98af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm104.hsp", cAlternateFileName="")) returned 1 [0201.957] wcscmp (_String1="grm104.hsp", _String2=".") returned 1 [0201.957] wcscmp (_String1="grm104.hsp", _String2="..") returned 1 [0201.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e351b8 [0201.957] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0201.957] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0201.958] wcscat (in: _Dest=0x3e351b8, _Source="grm104.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" [0201.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e351b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25a8 [0201.959] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm32.clx", cAlternateFileName="")) returned 1 [0201.959] wcscmp (_String1="grm32.clx", _String2=".") returned 1 [0201.959] wcscmp (_String1="grm32.clx", _String2="..") returned 1 [0201.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333fa8 [0201.959] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0201.959] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0201.959] wcscat (in: _Dest=0x333fa8, _Source="grm32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" [0201.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ccc [0201.961] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafe0060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc0c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm92.ths", cAlternateFileName="")) returned 1 [0201.961] wcscmp (_String1="grm92.ths", _String2=".") returned 1 [0201.961] wcscmp (_String1="grm92.ths", _String2="..") returned 1 [0201.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0201.961] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0201.961] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0201.961] wcscat (in: _Dest=0x3336a8, _Source="grm92.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" [0201.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f0 [0201.962] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.fca", cAlternateFileName="")) returned 1 [0201.962] wcscmp (_String1="heb.fca", _String2=".") returned 1 [0201.962] wcscmp (_String1="heb.fca", _String2="..") returned 1 [0201.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333768 [0201.962] wcscpy (in: _Dest=0x333768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0201.962] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0201.963] wcscat (in: _Dest=0x333768, _Source="heb.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" [0201.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0201.964] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.hyp", cAlternateFileName="")) returned 1 [0201.964] wcscmp (_String1="heb.hyp", _String2=".") returned 1 [0201.964] wcscmp (_String1="heb.hyp", _String2="..") returned 1 [0201.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3335e8 [0201.964] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0201.964] wcscat (in: _Dest=0x3335e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0201.964] wcscat (in: _Dest=0x3335e8, _Source="heb.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" [0201.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3335e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0201.965] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb325ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb47de, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb134.hsp", cAlternateFileName="")) returned 1 [0203.219] wcscmp (_String1="heb134.hsp", _String2=".") returned 1 [0203.219] wcscmp (_String1="heb134.hsp", _String2="..") returned 1 [0203.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e34d08 [0203.219] wcscpy (in: _Dest=0x3e34d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.219] wcscat (in: _Dest=0x3e34d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.219] wcscat (in: _Dest=0x3e34d08, _Source="heb134.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" [0203.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08 [0203.333] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb32.clx", cAlternateFileName="")) returned 1 [0203.333] wcscmp (_String1="heb32.clx", _String2=".") returned 1 [0203.333] wcscmp (_String1="heb32.clx", _String2="..") returned 1 [0203.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0203.333] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.333] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.333] wcscat (in: _Dest=0x3336a8, _Source="heb32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" [0203.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34 [0203.334] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv.hyp", cAlternateFileName="")) returned 1 [0203.335] wcscmp (_String1="hrv.hyp", _String2=".") returned 1 [0203.335] wcscmp (_String1="hrv.hyp", _String2="..") returned 1 [0203.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333fa8 [0203.335] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.335] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.335] wcscat (in: _Dest=0x333fa8, _Source="hrv.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" [0203.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x282c [0203.336] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv132.lex", cAlternateFileName="")) returned 1 [0203.336] wcscmp (_String1="hrv132.lex", _String2=".") returned 1 [0203.336] wcscmp (_String1="hrv132.lex", _String2="..") returned 1 [0203.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35280 [0203.336] wcscpy (in: _Dest=0x3e35280, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.336] wcscat (in: _Dest=0x3e35280, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.336] wcscat (in: _Dest=0x3e35280, _Source="hrv132.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" [0203.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0203.338] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv32.clx", cAlternateFileName="")) returned 1 [0203.338] wcscmp (_String1="hrv32.clx", _String2=".") returned 1 [0203.338] wcscmp (_String1="hrv32.clx", _String2="..") returned 1 [0203.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333768 [0203.338] wcscpy (in: _Dest=0x333768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.338] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.338] wcscat (in: _Dest=0x333768, _Source="hrv32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" [0203.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0203.339] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrvphon.env", cAlternateFileName="")) returned 1 [0203.339] wcscmp (_String1="hrvphon.env", _String2=".") returned 1 [0203.339] wcscmp (_String1="hrvphon.env", _String2="..") returned 1 [0203.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e35348 [0203.339] wcscpy (in: _Dest=0x3e35348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.339] wcscat (in: _Dest=0x3e35348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.340] wcscat (in: _Dest=0x3e35348, _Source="hrvphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" [0203.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0203.341] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1 [0203.341] wcscmp (_String1="hun.fca", _String2=".") returned 1 [0203.341] wcscmp (_String1="hun.fca", _String2="..") returned 1 [0203.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3335e8 [0203.341] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.341] wcscat (in: _Dest=0x3335e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.341] wcscat (in: _Dest=0x3335e8, _Source="hun.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" [0203.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3335e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0203.342] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.hyp", cAlternateFileName="")) returned 1 [0203.342] wcscmp (_String1="hun.hyp", _String2=".") returned 1 [0203.342] wcscmp (_String1="hun.hyp", _String2="..") returned 1 [0203.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3330a8 [0203.342] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.342] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.342] wcscat (in: _Dest=0x3330a8, _Source="hun.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" [0203.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0203.352] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9eeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun109.hsp", cAlternateFileName="")) returned 1 [0203.352] wcscmp (_String1="hun109.hsp", _String2=".") returned 1 [0203.352] wcscmp (_String1="hun109.hsp", _String2="..") returned 1 [0203.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e355a0 [0203.352] wcscpy (in: _Dest=0x3e355a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.352] wcscat (in: _Dest=0x3e355a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.352] wcscat (in: _Dest=0x3e355a0, _Source="hun109.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" [0203.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e355a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0203.355] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun32.clx", cAlternateFileName="")) returned 1 [0203.355] wcscmp (_String1="hun32.clx", _String2=".") returned 1 [0203.356] wcscmp (_String1="hun32.clx", _String2="..") returned 1 [0203.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x334068 [0203.356] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.356] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.356] wcscat (in: _Dest=0x334068, _Source="hun32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" [0203.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0203.357] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.fca", cAlternateFileName="")) returned 1 [0203.357] wcscmp (_String1="itl.fca", _String2=".") returned 1 [0203.357] wcscmp (_String1="itl.fca", _String2="..") returned 1 [0203.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333468 [0203.357] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.357] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.357] wcscat (in: _Dest=0x333468, _Source="itl.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" [0203.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0203.359] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.hyp", cAlternateFileName="")) returned 1 [0203.359] wcscmp (_String1="itl.hyp", _String2=".") returned 1 [0203.359] wcscmp (_String1="itl.hyp", _String2="..") returned 1 [0203.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333168 [0203.359] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.359] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.359] wcscat (in: _Dest=0x333168, _Source="itl.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" [0203.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0203.360] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2efe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl26.hsp", cAlternateFileName="")) returned 1 [0203.360] wcscmp (_String1="itl26.hsp", _String2=".") returned 1 [0203.360] wcscmp (_String1="itl26.hsp", _String2="..") returned 1 [0203.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333528 [0203.360] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.360] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.360] wcscat (in: _Dest=0x333528, _Source="itl26.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" [0203.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0203.361] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl32.clx", cAlternateFileName="")) returned 1 [0203.361] wcscmp (_String1="itl32.clx", _String2=".") returned 1 [0203.361] wcscmp (_String1="itl32.clx", _String2="..") returned 1 [0203.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3329e8 [0203.361] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.362] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.362] wcscat (in: _Dest=0x3329e8, _Source="itl32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" [0203.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b04 [0203.362] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl61.ths", cAlternateFileName="")) returned 1 [0203.362] wcscmp (_String1="itl61.ths", _String2=".") returned 1 [0203.363] wcscmp (_String1="itl61.ths", _String2="..") returned 1 [0203.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3338e8 [0203.363] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.363] wcscat (in: _Dest=0x3338e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.363] wcscat (in: _Dest=0x3338e8, _Source="itl61.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" [0203.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3338e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec [0203.365] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav.hyp", cAlternateFileName="")) returned 1 [0203.365] wcscmp (_String1="lav.hyp", _String2=".") returned 1 [0203.365] wcscmp (_String1="lav.hyp", _String2="..") returned 1 [0203.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5f48 [0203.365] wcscpy (in: _Dest=0x81d5f48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.365] wcscat (in: _Dest=0x81d5f48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.365] wcscat (in: _Dest=0x81d5f48, _Source="lav.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" [0203.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a8 [0203.366] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav135.lex", cAlternateFileName="")) returned 1 [0203.366] wcscmp (_String1="lav135.lex", _String2=".") returned 1 [0203.366] wcscmp (_String1="lav135.lex", _String2="..") returned 1 [0203.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e342e0 [0203.367] wcscpy (in: _Dest=0x3e342e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.367] wcscat (in: _Dest=0x3e342e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.367] wcscat (in: _Dest=0x3e342e0, _Source="lav135.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" [0203.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e342e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c [0203.368] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav32.clx", cAlternateFileName="")) returned 1 [0203.368] wcscmp (_String1="lav32.clx", _String2=".") returned 1 [0203.368] wcscmp (_String1="lav32.clx", _String2="..") returned 1 [0203.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d57c8 [0203.368] wcscpy (in: _Dest=0x81d57c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.368] wcscat (in: _Dest=0x81d57c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.368] wcscat (in: _Dest=0x81d57c8, _Source="lav32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" [0203.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d57c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c [0203.370] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="lavphon.env", cAlternateFileName="")) returned 1 [0203.370] wcscmp (_String1="lavphon.env", _String2=".") returned 1 [0203.370] wcscmp (_String1="lavphon.env", _String2="..") returned 1 [0203.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e357f8 [0203.370] wcscpy (in: _Dest=0x3e357f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.370] wcscat (in: _Dest=0x3e357f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.370] wcscat (in: _Dest=0x3e357f8, _Source="lavphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" [0203.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e357f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0203.371] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit.hyp", cAlternateFileName="")) returned 1 [0203.371] wcscmp (_String1="lit.hyp", _String2=".") returned 1 [0203.372] wcscmp (_String1="lit.hyp", _String2="..") returned 1 [0203.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5c48 [0203.372] wcscpy (in: _Dest=0x81d5c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.372] wcscat (in: _Dest=0x81d5c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.372] wcscat (in: _Dest=0x81d5c48, _Source="lit.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" [0203.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0203.373] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x73800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit136.lex", cAlternateFileName="")) returned 1 [0203.373] wcscmp (_String1="lit136.lex", _String2=".") returned 1 [0203.373] wcscmp (_String1="lit136.lex", _String2="..") returned 1 [0203.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35730 [0203.373] wcscpy (in: _Dest=0x3e35730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.373] wcscat (in: _Dest=0x3e35730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.373] wcscat (in: _Dest=0x3e35730, _Source="lit136.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" [0203.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0203.392] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit32.clx", cAlternateFileName="")) returned 1 [0203.392] wcscmp (_String1="lit32.clx", _String2=".") returned 1 [0203.392] wcscmp (_String1="lit32.clx", _String2="..") returned 1 [0203.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5888 [0203.393] wcscpy (in: _Dest=0x81d5888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.393] wcscat (in: _Dest=0x81d5888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.393] wcscat (in: _Dest=0x81d5888, _Source="lit32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" [0203.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d1c [0203.406] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="litphon.env", cAlternateFileName="")) returned 1 [0203.406] wcscmp (_String1="litphon.env", _String2=".") returned 1 [0203.406] wcscmp (_String1="litphon.env", _String2="..") returned 1 [0203.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e34c40 [0203.407] wcscpy (in: _Dest=0x3e34c40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.407] wcscat (in: _Dest=0x3e34c40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.407] wcscat (in: _Dest=0x3e34c40, _Source="litphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" [0203.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80 [0203.410] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.fca", cAlternateFileName="")) returned 1 [0203.410] wcscmp (_String1="nrw.fca", _String2=".") returned 1 [0203.410] wcscmp (_String1="nrw.fca", _String2="..") returned 1 [0203.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5648 [0203.410] wcscpy (in: _Dest=0x81d5648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0203.410] wcscat (in: _Dest=0x81d5648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0203.410] wcscat (in: _Dest=0x81d5648, _Source="nrw.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" [0203.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0204.790] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.hyp", cAlternateFileName="")) returned 1 [0204.790] wcscmp (_String1="nrw.hyp", _String2=".") returned 1 [0204.790] wcscmp (_String1="nrw.hyp", _String2="..") returned 1 [0204.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3336a8 [0204.790] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0204.790] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0204.790] wcscat (in: _Dest=0x3336a8, _Source="nrw.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" [0205.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0205.548] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff1, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw32.clx", cAlternateFileName="")) returned 1 [0205.548] wcscmp (_String1="nrw32.clx", _String2=".") returned 1 [0205.548] wcscmp (_String1="nrw32.clx", _String2="..") returned 1 [0205.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333fa8 [0205.548] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.548] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.548] wcscat (in: _Dest=0x333fa8, _Source="nrw32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" [0205.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0205.549] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4669e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw38.hsp", cAlternateFileName="")) returned 1 [0205.549] wcscmp (_String1="nrw38.hsp", _String2=".") returned 1 [0205.549] wcscmp (_String1="nrw38.hsp", _String2="..") returned 1 [0205.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5888 [0205.549] wcscpy (in: _Dest=0x81d5888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.549] wcscat (in: _Dest=0x81d5888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.549] wcscat (in: _Dest=0x81d5888, _Source="nrw38.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" [0205.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0205.550] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x57400, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw56.ths", cAlternateFileName="")) returned 1 [0205.550] wcscmp (_String1="nrw56.ths", _String2=".") returned 1 [0205.550] wcscmp (_String1="nrw56.ths", _String2="..") returned 1 [0205.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5a08 [0205.550] wcscpy (in: _Dest=0x81d5a08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.550] wcscat (in: _Dest=0x81d5a08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.550] wcscat (in: _Dest=0x81d5a08, _Source="nrw56.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" [0205.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0205.551] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.fca", cAlternateFileName="")) returned 1 [0205.551] wcscmp (_String1="nyn.fca", _String2=".") returned 1 [0205.551] wcscmp (_String1="nyn.fca", _String2="..") returned 1 [0205.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5948 [0205.551] wcscpy (in: _Dest=0x81d5948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.552] wcscat (in: _Dest=0x81d5948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.552] wcscat (in: _Dest=0x81d5948, _Source="nyn.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" [0205.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0205.553] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.hyp", cAlternateFileName="")) returned 1 [0205.553] wcscmp (_String1="nyn.hyp", _String2=".") returned 1 [0205.553] wcscmp (_String1="nyn.hyp", _String2="..") returned 1 [0205.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5dc8 [0205.553] wcscpy (in: _Dest=0x81d5dc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.553] wcscat (in: _Dest=0x81d5dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.553] wcscat (in: _Dest=0x81d5dc8, _Source="nyn.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" [0205.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0205.554] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn16.clx", cAlternateFileName="")) returned 1 [0205.554] wcscmp (_String1="nyn16.clx", _String2=".") returned 1 [0205.554] wcscmp (_String1="nyn16.clx", _String2="..") returned 1 [0205.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5d08 [0205.554] wcscpy (in: _Dest=0x81d5d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.555] wcscat (in: _Dest=0x81d5d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.555] wcscat (in: _Dest=0x81d5d08, _Source="nyn16.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" [0205.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0205.556] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3b11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn47.hsp", cAlternateFileName="")) returned 1 [0205.556] wcscmp (_String1="nyn47.hsp", _String2=".") returned 1 [0205.556] wcscmp (_String1="nyn47.hsp", _String2="..") returned 1 [0205.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5e88 [0205.556] wcscpy (in: _Dest=0x81d5e88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.556] wcscat (in: _Dest=0x81d5e88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.556] wcscat (in: _Dest=0x81d5e88, _Source="nyn47.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" [0205.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0205.557] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.fca", cAlternateFileName="")) returned 1 [0205.557] wcscmp (_String1="pol.fca", _String2=".") returned 1 [0205.557] wcscmp (_String1="pol.fca", _String2="..") returned 1 [0205.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6188 [0205.557] wcscpy (in: _Dest=0x81d6188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.557] wcscat (in: _Dest=0x81d6188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.557] wcscat (in: _Dest=0x81d6188, _Source="pol.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" [0205.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0205.558] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.hyp", cAlternateFileName="")) returned 1 [0205.558] wcscmp (_String1="pol.hyp", _String2=".") returned 1 [0205.558] wcscmp (_String1="pol.hyp", _String2="..") returned 1 [0205.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6248 [0205.558] wcscpy (in: _Dest=0x81d6248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.558] wcscat (in: _Dest=0x81d6248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.558] wcscat (in: _Dest=0x81d6248, _Source="pol.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" [0205.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0205.559] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xafcef, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol103.hsp", cAlternateFileName="")) returned 1 [0205.559] wcscmp (_String1="pol103.hsp", _String2=".") returned 1 [0205.559] wcscmp (_String1="pol103.hsp", _String2="..") returned 1 [0205.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e34d08 [0205.559] wcscpy (in: _Dest=0x3e34d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0205.559] wcscat (in: _Dest=0x3e34d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0205.559] wcscat (in: _Dest=0x3e34d08, _Source="pol103.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" [0205.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0205.560] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol32.clx", cAlternateFileName="")) returned 1 [0206.171] wcscmp (_String1="pol32.clx", _String2=".") returned 1 [0206.171] wcscmp (_String1="pol32.clx", _String2="..") returned 1 [0206.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d6308 [0206.172] wcscpy (in: _Dest=0x81d6308, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.172] wcscat (in: _Dest=0x81d6308, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.172] wcscat (in: _Dest=0x81d6308, _Source="pol32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" [0206.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0206.173] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.fca", cAlternateFileName="")) returned 1 [0206.173] wcscmp (_String1="prt.fca", _String2=".") returned 1 [0206.173] wcscmp (_String1="prt.fca", _String2="..") returned 1 [0206.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d63c8 [0206.173] wcscpy (in: _Dest=0x81d63c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.173] wcscat (in: _Dest=0x81d63c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.173] wcscat (in: _Dest=0x81d63c8, _Source="prt.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" [0206.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d63c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0206.174] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.hyp", cAlternateFileName="")) returned 1 [0206.174] wcscmp (_String1="prt.hyp", _String2=".") returned 1 [0206.174] wcscmp (_String1="prt.hyp", _String2="..") returned 1 [0206.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6488 [0206.174] wcscpy (in: _Dest=0x81d6488, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.174] wcscat (in: _Dest=0x81d6488, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.174] wcscat (in: _Dest=0x81d6488, _Source="prt.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" [0206.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0206.175] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt32.clx", cAlternateFileName="")) returned 1 [0206.175] wcscmp (_String1="prt32.clx", _String2=".") returned 1 [0206.175] wcscmp (_String1="prt32.clx", _String2="..") returned 1 [0206.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d6548 [0206.175] wcscpy (in: _Dest=0x81d6548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.175] wcscat (in: _Dest=0x81d6548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.175] wcscat (in: _Dest=0x81d6548, _Source="prt32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" [0206.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0206.176] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1766c, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt39.hsp", cAlternateFileName="")) returned 1 [0206.176] wcscmp (_String1="prt39.hsp", _String2=".") returned 1 [0206.176] wcscmp (_String1="prt39.hsp", _String2="..") returned 1 [0206.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d6608 [0206.176] wcscpy (in: _Dest=0x81d6608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.176] wcscat (in: _Dest=0x81d6608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.176] wcscat (in: _Dest=0x81d6608, _Source="prt39.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" [0206.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0206.177] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum.hyp", cAlternateFileName="")) returned 1 [0206.177] wcscmp (_String1="rum.hyp", _String2=".") returned 1 [0206.177] wcscmp (_String1="rum.hyp", _String2="..") returned 1 [0206.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d66c8 [0206.177] wcscpy (in: _Dest=0x81d66c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.177] wcscat (in: _Dest=0x81d66c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.177] wcscat (in: _Dest=0x81d66c8, _Source="rum.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" [0206.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0206.178] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum124.lex", cAlternateFileName="")) returned 1 [0206.178] wcscmp (_String1="rum124.lex", _String2=".") returned 1 [0206.178] wcscmp (_String1="rum124.lex", _String2="..") returned 1 [0206.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x83329f8 [0206.178] wcscpy (in: _Dest=0x83329f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.178] wcscat (in: _Dest=0x83329f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.178] wcscat (in: _Dest=0x83329f8, _Source="rum124.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" [0206.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83329f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0206.179] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum32.clx", cAlternateFileName="")) returned 1 [0206.179] wcscmp (_String1="rum32.clx", _String2=".") returned 1 [0206.179] wcscmp (_String1="rum32.clx", _String2="..") returned 1 [0206.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d6788 [0206.179] wcscpy (in: _Dest=0x81d6788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.179] wcscat (in: _Dest=0x81d6788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.179] wcscat (in: _Dest=0x81d6788, _Source="rum32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" [0206.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0206.180] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2478, dwReserved0=0x0, dwReserved1=0x0, cFileName="rumphon.env", cAlternateFileName="")) returned 1 [0206.180] wcscmp (_String1="rumphon.env", _String2=".") returned 1 [0206.180] wcscmp (_String1="rumphon.env", _String2="..") returned 1 [0206.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x8332ac0 [0206.181] wcscpy (in: _Dest=0x8332ac0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.181] wcscat (in: _Dest=0x8332ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.181] wcscat (in: _Dest=0x8332ac0, _Source="rumphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" [0206.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29cc [0206.181] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.fca", cAlternateFileName="")) returned 1 [0206.181] wcscmp (_String1="rus.fca", _String2=".") returned 1 [0206.181] wcscmp (_String1="rus.fca", _String2="..") returned 1 [0206.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6848 [0206.182] wcscpy (in: _Dest=0x81d6848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.182] wcscat (in: _Dest=0x81d6848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.182] wcscat (in: _Dest=0x81d6848, _Source="rus.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" [0206.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0206.182] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.hyp", cAlternateFileName="")) returned 1 [0206.182] wcscmp (_String1="rus.hyp", _String2=".") returned 1 [0206.182] wcscmp (_String1="rus.hyp", _String2="..") returned 1 [0206.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6908 [0206.183] wcscpy (in: _Dest=0x81d6908, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.183] wcscat (in: _Dest=0x81d6908, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.183] wcscat (in: _Dest=0x81d6908, _Source="rus.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" [0206.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0206.190] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x70ad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus101.hsp", cAlternateFileName="")) returned 1 [0206.190] wcscmp (_String1="rus101.hsp", _String2=".") returned 1 [0206.190] wcscmp (_String1="rus101.hsp", _String2="..") returned 1 [0206.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x8332b88 [0206.190] wcscpy (in: _Dest=0x8332b88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.190] wcscat (in: _Dest=0x8332b88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.190] wcscat (in: _Dest=0x8332b88, _Source="rus101.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" [0206.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2534 [0206.191] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8025, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus32.clx", cAlternateFileName="")) returned 1 [0206.191] wcscmp (_String1="rus32.clx", _String2=".") returned 1 [0206.191] wcscmp (_String1="rus32.clx", _String2="..") returned 1 [0206.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d69c8 [0206.191] wcscpy (in: _Dest=0x81d69c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.191] wcscat (in: _Dest=0x81d69c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.191] wcscat (in: _Dest=0x81d69c8, _Source="rus32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" [0206.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d69c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0206.192] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.fca", cAlternateFileName="")) returned 1 [0206.192] wcscmp (_String1="sgr.fca", _String2=".") returned 1 [0206.192] wcscmp (_String1="sgr.fca", _String2="..") returned 1 [0206.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6a88 [0206.193] wcscpy (in: _Dest=0x81d6a88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.193] wcscat (in: _Dest=0x81d6a88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.193] wcscat (in: _Dest=0x81d6a88, _Source="sgr.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" [0206.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0206.194] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.hyp", cAlternateFileName="")) returned 1 [0206.194] wcscmp (_String1="sgr.hyp", _String2=".") returned 1 [0206.194] wcscmp (_String1="sgr.hyp", _String2="..") returned 1 [0206.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6b48 [0206.194] wcscpy (in: _Dest=0x81d6b48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.194] wcscat (in: _Dest=0x81d6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.194] wcscat (in: _Dest=0x81d6b48, _Source="sgr.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" [0206.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0206.195] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0061c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9e2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr105.hsp", cAlternateFileName="")) returned 1 [0206.195] wcscmp (_String1="sgr105.hsp", _String2=".") returned 1 [0206.195] wcscmp (_String1="sgr105.hsp", _String2="..") returned 1 [0206.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x8332c50 [0206.195] wcscpy (in: _Dest=0x8332c50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.195] wcscat (in: _Dest=0x8332c50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.195] wcscat (in: _Dest=0x8332c50, _Source="sgr105.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" [0206.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aac [0206.196] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr32.clx", cAlternateFileName="")) returned 1 [0206.196] wcscmp (_String1="sgr32.clx", _String2=".") returned 1 [0206.196] wcscmp (_String1="sgr32.clx", _String2="..") returned 1 [0206.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d6c08 [0206.196] wcscpy (in: _Dest=0x81d6c08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.196] wcscat (in: _Dest=0x81d6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.196] wcscat (in: _Dest=0x81d6c08, _Source="sgr32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" [0206.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0206.197] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr96.ths", cAlternateFileName="")) returned 1 [0206.197] wcscmp (_String1="sgr96.ths", _String2=".") returned 1 [0206.197] wcscmp (_String1="sgr96.ths", _String2="..") returned 1 [0206.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d6cc8 [0206.197] wcscpy (in: _Dest=0x81d6cc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.197] wcscat (in: _Dest=0x81d6cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.197] wcscat (in: _Dest=0x81d6cc8, _Source="sgr96.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" [0206.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0206.198] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.fca", cAlternateFileName="")) returned 1 [0206.198] wcscmp (_String1="slo.fca", _String2=".") returned 1 [0206.198] wcscmp (_String1="slo.fca", _String2="..") returned 1 [0206.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6d88 [0206.199] wcscpy (in: _Dest=0x81d6d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.199] wcscat (in: _Dest=0x81d6d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.199] wcscat (in: _Dest=0x81d6d88, _Source="slo.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" [0206.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0206.200] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.hyp", cAlternateFileName="")) returned 1 [0206.200] wcscmp (_String1="slo.hyp", _String2=".") returned 1 [0206.200] wcscmp (_String1="slo.hyp", _String2="..") returned 1 [0206.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6e48 [0206.200] wcscpy (in: _Dest=0x81d6e48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.200] wcscat (in: _Dest=0x81d6e48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.200] wcscat (in: _Dest=0x81d6e48, _Source="slo.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" [0206.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0206.201] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo113.hsp", cAlternateFileName="")) returned 1 [0206.201] wcscmp (_String1="slo113.hsp", _String2=".") returned 1 [0206.201] wcscmp (_String1="slo113.hsp", _String2="..") returned 1 [0206.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x8332d18 [0206.201] wcscpy (in: _Dest=0x8332d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.201] wcscat (in: _Dest=0x8332d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.201] wcscat (in: _Dest=0x8332d18, _Source="slo113.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" [0206.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0206.202] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo32.clx", cAlternateFileName="")) returned 1 [0206.202] wcscmp (_String1="slo32.clx", _String2=".") returned 1 [0206.202] wcscmp (_String1="slo32.clx", _String2="..") returned 1 [0206.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d6f08 [0206.202] wcscpy (in: _Dest=0x81d6f08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.202] wcscat (in: _Dest=0x81d6f08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.202] wcscat (in: _Dest=0x81d6f08, _Source="slo32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" [0206.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0206.203] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv.hyp", cAlternateFileName="")) returned 1 [0206.203] wcscmp (_String1="slv.hyp", _String2=".") returned 1 [0206.203] wcscmp (_String1="slv.hyp", _String2="..") returned 1 [0206.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6fc8 [0206.204] wcscpy (in: _Dest=0x81d6fc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.204] wcscat (in: _Dest=0x81d6fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.204] wcscat (in: _Dest=0x81d6fc8, _Source="slv.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" [0206.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0206.205] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x51800, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv137.lex", cAlternateFileName="")) returned 1 [0206.205] wcscmp (_String1="slv137.lex", _String2=".") returned 1 [0206.205] wcscmp (_String1="slv137.lex", _String2="..") returned 1 [0206.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x8332de0 [0206.205] wcscpy (in: _Dest=0x8332de0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.205] wcscat (in: _Dest=0x8332de0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.205] wcscat (in: _Dest=0x8332de0, _Source="slv137.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" [0206.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0206.211] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv32.clx", cAlternateFileName="")) returned 1 [0206.211] wcscmp (_String1="slv32.clx", _String2=".") returned 1 [0206.211] wcscmp (_String1="slv32.clx", _String2="..") returned 1 [0206.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d7088 [0206.211] wcscpy (in: _Dest=0x81d7088, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.211] wcscat (in: _Dest=0x81d7088, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.211] wcscat (in: _Dest=0x81d7088, _Source="slv32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" [0206.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0206.212] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x109f, dwReserved0=0x0, dwReserved1=0x0, cFileName="slvphon.env", cAlternateFileName="")) returned 1 [0206.212] wcscmp (_String1="slvphon.env", _String2=".") returned 1 [0206.212] wcscmp (_String1="slvphon.env", _String2="..") returned 1 [0206.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x8332ea8 [0206.212] wcscpy (in: _Dest=0x8332ea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.212] wcscat (in: _Dest=0x8332ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.212] wcscat (in: _Dest=0x8332ea8, _Source="slvphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" [0206.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0206.213] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.fca", cAlternateFileName="")) returned 1 [0206.214] wcscmp (_String1="spn.fca", _String2=".") returned 1 [0206.214] wcscmp (_String1="spn.fca", _String2="..") returned 1 [0206.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d7148 [0206.214] wcscpy (in: _Dest=0x81d7148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.214] wcscat (in: _Dest=0x81d7148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.214] wcscat (in: _Dest=0x81d7148, _Source="spn.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" [0206.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0206.215] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.hyp", cAlternateFileName="")) returned 1 [0206.215] wcscmp (_String1="spn.hyp", _String2=".") returned 1 [0206.215] wcscmp (_String1="spn.hyp", _String2="..") returned 1 [0206.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d7208 [0206.215] wcscpy (in: _Dest=0x81d7208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.215] wcscat (in: _Dest=0x81d7208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.215] wcscat (in: _Dest=0x81d7208, _Source="spn.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" [0206.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0206.216] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad7ea60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x33c91, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn24.hsp", cAlternateFileName="")) returned 1 [0206.216] wcscmp (_String1="spn24.hsp", _String2=".") returned 1 [0206.216] wcscmp (_String1="spn24.hsp", _String2="..") returned 1 [0206.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d72c8 [0206.216] wcscpy (in: _Dest=0x81d72c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.216] wcscat (in: _Dest=0x81d72c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.216] wcscat (in: _Dest=0x81d72c8, _Source="spn24.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" [0206.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d72c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0206.217] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn32.clx", cAlternateFileName="")) returned 1 [0206.217] wcscmp (_String1="spn32.clx", _String2=".") returned 1 [0206.217] wcscmp (_String1="spn32.clx", _String2="..") returned 1 [0206.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d7388 [0206.217] wcscpy (in: _Dest=0x81d7388, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.217] wcscat (in: _Dest=0x81d7388, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.217] wcscat (in: _Dest=0x81d7388, _Source="spn32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" [0206.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0206.218] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdada4bc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x84800, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn62.ths", cAlternateFileName="")) returned 1 [0206.218] wcscmp (_String1="spn62.ths", _String2=".") returned 1 [0206.218] wcscmp (_String1="spn62.ths", _String2="..") returned 1 [0206.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d7448 [0206.218] wcscpy (in: _Dest=0x81d7448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.219] wcscat (in: _Dest=0x81d7448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.219] wcscat (in: _Dest=0x81d7448, _Source="spn62.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" [0206.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0206.223] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad58900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.fca", cAlternateFileName="")) returned 1 [0206.223] wcscmp (_String1="swd.fca", _String2=".") returned 1 [0206.223] wcscmp (_String1="swd.fca", _String2="..") returned 1 [0206.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d7508 [0206.224] wcscpy (in: _Dest=0x81d7508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.224] wcscat (in: _Dest=0x81d7508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.224] wcscat (in: _Dest=0x81d7508, _Source="swd.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" [0206.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d7508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0206.276] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.hyp", cAlternateFileName="")) returned 1 [0206.276] wcscmp (_String1="swd.hyp", _String2=".") returned 1 [0206.276] wcscmp (_String1="swd.hyp", _String2="..") returned 1 [0206.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81f3648 [0206.276] wcscpy (in: _Dest=0x81f3648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.276] wcscat (in: _Dest=0x81f3648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.276] wcscat (in: _Dest=0x81f3648, _Source="swd.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" [0206.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0206.277] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad58900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd32.clx", cAlternateFileName="")) returned 1 [0206.277] wcscmp (_String1="swd32.clx", _String2=".") returned 1 [0206.277] wcscmp (_String1="swd32.clx", _String2="..") returned 1 [0206.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81f3708 [0206.278] wcscpy (in: _Dest=0x81f3708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.278] wcscat (in: _Dest=0x81f3708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.278] wcscat (in: _Dest=0x81f3708, _Source="swd32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" [0206.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d0 [0206.342] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad58900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x821bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd43.hsp", cAlternateFileName="")) returned 1 [0206.342] wcscmp (_String1="swd43.hsp", _String2=".") returned 1 [0206.342] wcscmp (_String1="swd43.hsp", _String2="..") returned 1 [0206.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81f37c8 [0206.342] wcscpy (in: _Dest=0x81f37c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.342] wcscat (in: _Dest=0x81f37c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.342] wcscat (in: _Dest=0x81f37c8, _Source="swd43.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" [0206.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f37c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25cc [0206.344] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad7ea60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd58.ths", cAlternateFileName="")) returned 1 [0206.344] wcscmp (_String1="swd58.ths", _String2=".") returned 1 [0206.344] wcscmp (_String1="swd58.ths", _String2="..") returned 1 [0206.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81f3888 [0206.344] wcscpy (in: _Dest=0x81f3888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0206.344] wcscat (in: _Dest=0x81f3888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0206.344] wcscat (in: _Dest=0x81f3888, _Source="swd58.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" [0206.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27a8 [0206.345] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.fca", cAlternateFileName="")) returned 1 [0210.074] wcscmp (_String1="tur.fca", _String2=".") returned 1 [0210.074] wcscmp (_String1="tur.fca", _String2="..") returned 1 [0210.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5b88 [0210.075] wcscpy (in: _Dest=0x81d5b88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0210.075] wcscat (in: _Dest=0x81d5b88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0210.075] wcscat (in: _Dest=0x81d5b88, _Source="tur.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" [0211.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb8 [0211.563] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.hyp", cAlternateFileName="")) returned 1 [0211.563] wcscmp (_String1="tur.hyp", _String2=".") returned 1 [0211.563] wcscmp (_String1="tur.hyp", _String2="..") returned 1 [0211.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d5708 [0211.563] wcscpy (in: _Dest=0x81d5708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0211.563] wcscat (in: _Dest=0x81d5708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0211.563] wcscat (in: _Dest=0x81d5708, _Source="tur.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" [0211.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a28 [0211.564] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x72b36, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur111.hsp", cAlternateFileName="")) returned 1 [0211.564] wcscmp (_String1="tur111.hsp", _String2=".") returned 1 [0211.564] wcscmp (_String1="tur111.hsp", _String2="..") returned 1 [0211.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x83331c8 [0211.564] wcscpy (in: _Dest=0x83331c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0211.564] wcscat (in: _Dest=0x83331c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0211.564] wcscat (in: _Dest=0x83331c8, _Source="tur111.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" [0211.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83331c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0211.565] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur32.clx", cAlternateFileName="")) returned 1 [0211.566] wcscmp (_String1="tur32.clx", _String2=".") returned 1 [0211.566] wcscmp (_String1="tur32.clx", _String2="..") returned 1 [0211.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5ac8 [0211.566] wcscpy (in: _Dest=0x81d5ac8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0211.566] wcscat (in: _Dest=0x81d5ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0211.566] wcscat (in: _Dest=0x81d5ac8, _Source="tur32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" [0211.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0211.567] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0c48a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa.fca", cAlternateFileName="")) returned 1 [0211.567] wcscmp (_String1="usa.fca", _String2=".") returned 1 [0211.567] wcscmp (_String1="usa.fca", _String2="..") returned 1 [0211.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d60c8 [0211.567] wcscpy (in: _Dest=0x81d60c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0211.567] wcscat (in: _Dest=0x81d60c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0211.567] wcscat (in: _Dest=0x81d60c8, _Source="usa.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" [0211.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d60c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0211.568] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a6da, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.hsp", cAlternateFileName="")) returned 1 [0211.568] wcscmp (_String1="usa03.hsp", _String2=".") returned 1 [0211.568] wcscmp (_String1="usa03.hsp", _String2="..") returned 1 [0211.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d6008 [0211.568] wcscpy (in: _Dest=0x81d6008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0211.569] wcscat (in: _Dest=0x81d6008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0211.569] wcscat (in: _Dest=0x81d6008, _Source="usa03.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" [0211.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0211.570] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.ths", cAlternateFileName="")) returned 1 [0211.570] wcscmp (_String1="usa03.ths", _String2=".") returned 1 [0211.570] wcscmp (_String1="usa03.ths", _String2="..") returned 1 [0211.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81f3c48 [0211.570] wcscpy (in: _Dest=0x81f3c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0211.570] wcscat (in: _Dest=0x81f3c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0211.570] wcscat (in: _Dest=0x81f3c48, _Source="usa03.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" [0211.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0211.571] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 1 [0211.571] wcscmp (_String1="usa37.hyp", _String2=".") returned 1 [0211.571] wcscmp (_String1="usa37.hyp", _String2="..") returned 1 [0211.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81f3d08 [0211.571] wcscpy (in: _Dest=0x81f3d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0211.571] wcscat (in: _Dest=0x81f3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0211.571] wcscat (in: _Dest=0x81f3d08, _Source="usa37.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" [0211.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0211.572] FindNextFileW (in: hFindFile=0x8098d10, lpFindFileData=0x3f3ba18 | out: lpFindFileData=0x3f3ba18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 0 [0211.740] FindClose (in: hFindFile=0x8098d10 | out: hFindFile=0x8098d10) returned 1 [0217.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ba18) returned 1 [0217.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 [0217.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 5976 os_tid = 0x928 [0189.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\thimphu")) returned 0x20 [0189.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu", dwFileAttributes=0x20) returned 0 [0189.515] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\thimphu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.515] GetLastError () returned 0x5 [0189.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu", dwFileAttributes=0x20) returned 0 [0189.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e890) returned 1 Thread: id = 5977 os_tid = 0x95c [0189.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tokyo")) returned 0x20 [0195.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo", dwFileAttributes=0x20) returned 0 [0195.068] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tokyo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.068] GetLastError () returned 0x5 [0195.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo", dwFileAttributes=0x20) returned 0 [0195.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb10) returned 1 Thread: id = 5978 os_tid = 0x97c [0189.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar")) returned 0x20 [0195.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar", dwFileAttributes=0x20) returned 0 [0195.622] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.622] GetLastError () returned 0x5 [0195.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar", dwFileAttributes=0x20) returned 0 [0195.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39ee8) returned 1 Thread: id = 5979 os_tid = 0x154c [0189.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\urumqi")) returned 0x20 [0195.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi", dwFileAttributes=0x20) returned 0 [0195.633] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\urumqi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.633] GetLastError () returned 0x5 [0195.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi", dwFileAttributes=0x20) returned 0 [0195.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e008) returned 1 Thread: id = 5980 os_tid = 0x1550 [0189.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ust-nera")) returned 0x20 [0195.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera", dwFileAttributes=0x20) returned 0 [0195.631] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ust-nera"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.631] GetLastError () returned 0x5 [0195.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera", dwFileAttributes=0x20) returned 0 [0195.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c810) returned 1 Thread: id = 5981 os_tid = 0x1558 [0189.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vientiane")) returned 0x20 [0195.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane", dwFileAttributes=0x20) returned 0 [0195.623] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vientiane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.623] GetLastError () returned 0x5 [0195.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane", dwFileAttributes=0x20) returned 0 [0195.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a038) returned 1 Thread: id = 5982 os_tid = 0x72c [0189.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vladivostok")) returned 0x20 [0195.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok", dwFileAttributes=0x20) returned 0 [0195.625] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vladivostok"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.625] GetLastError () returned 0x5 [0195.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok", dwFileAttributes=0x20) returned 0 [0195.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a118) returned 1 Thread: id = 5983 os_tid = 0x1560 [0189.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yakutsk")) returned 0x20 [0195.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk", dwFileAttributes=0x20) returned 0 [0195.629] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yakutsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.630] GetLastError () returned 0x5 [0195.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk", dwFileAttributes=0x20) returned 0 [0195.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 Thread: id = 5984 os_tid = 0x157c [0189.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yekaterinburg")) returned 0x20 [0195.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg", dwFileAttributes=0x20) returned 0 [0195.626] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yekaterinburg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.627] GetLastError () returned 0x5 [0195.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg", dwFileAttributes=0x20) returned 0 [0195.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32598) returned 1 Thread: id = 5985 os_tid = 0x1888 [0189.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yerevan")) returned 0x20 [0195.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan", dwFileAttributes=0x20) returned 0 [0195.628] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yerevan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.628] GetLastError () returned 0x5 [0195.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan", dwFileAttributes=0x20) returned 0 [0195.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e4e8) returned 1 Thread: id = 5986 os_tid = 0x1580 [0189.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css")) returned 0x20 [0191.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0191.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.887] GetLastError () returned 0x5 [0191.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0191.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65a28) returned 1 Thread: id = 5987 os_tid = 0x534 [0189.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f1b58 [0189.534] wcscpy (in: _Dest=0x81f1b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0189.534] wcscat (in: _Dest=0x81f1b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0189.534] wcscat (in: _Dest=0x81f1b58, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*" [0189.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07840 [0189.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8270fc70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906d1070, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0191.888] wcscmp (_String1=".", _String2=".") returned 0 [0191.888] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8270fc70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906d1070, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.888] wcscmp (_String1="..", _String2=".") returned 1 [0191.889] wcscmp (_String1="..", _String2="..") returned 0 [0191.889] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0191.889] wcscmp (_String1="background.gif", _String2=".") returned 1 [0191.889] wcscmp (_String1="background.gif", _String2="..") returned 1 [0191.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x80206f0 [0191.889] wcscpy (in: _Dest=0x80206f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0191.889] wcscat (in: _Dest=0x80206f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0191.889] wcscat (in: _Dest=0x80206f0, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" [0192.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80206f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0192.567] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0192.567] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0192.567] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0192.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3b1b8 [0192.567] wcscpy (in: _Dest=0x3e3b1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0192.567] wcscat (in: _Dest=0x3e3b1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0192.567] wcscat (in: _Dest=0x3e3b1b8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" [0192.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0192.568] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0192.568] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0192.568] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0192.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3afe8 [0192.568] wcscpy (in: _Dest=0x3e3afe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0192.568] wcscat (in: _Dest=0x3e3afe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0192.568] wcscat (in: _Dest=0x3e3afe8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" [0192.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3afe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0192.569] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0192.569] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0192.569] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0192.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e39ce0 [0192.569] wcscpy (in: _Dest=0x3e39ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0192.569] wcscat (in: _Dest=0x3e39ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0192.569] wcscat (in: _Dest=0x3e39ce0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" [0192.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e39ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0192.570] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0192.570] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0192.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07840) returned 1 [0192.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1b58) returned 1 [0192.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f04e8) returned 1 Thread: id = 5988 os_tid = 0x1584 [0189.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css")) returned 0x20 [0191.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0191.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.890] GetLastError () returned 0x5 [0191.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0191.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e656c8) returned 1 Thread: id = 5989 os_tid = 0x1588 [0189.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f1a80 [0189.536] wcscpy (in: _Dest=0x81f1a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0189.536] wcscat (in: _Dest=0x81f1a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0189.536] wcscat (in: _Dest=0x81f1a80, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*" [0189.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0aac8 [0189.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8275bf30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906f71d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f10 [0191.891] wcscmp (_String1=".", _String2=".") returned 0 [0191.891] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8275bf30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906f71d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.891] wcscmp (_String1="..", _String2=".") returned 1 [0191.891] wcscmp (_String1="..", _String2="..") returned 0 [0191.891] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0191.891] wcscmp (_String1="background.gif", _String2=".") returned 1 [0191.891] wcscmp (_String1="background.gif", _String2="..") returned 1 [0191.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x8021140 [0191.891] wcscpy (in: _Dest=0x8021140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0191.891] wcscat (in: _Dest=0x8021140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0191.892] wcscat (in: _Dest=0x8021140, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" [0195.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8021140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0195.360] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0195.360] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0195.360] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0195.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b8f8 [0195.360] wcscpy (in: _Dest=0x3e3b8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0195.360] wcscat (in: _Dest=0x3e3b8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0195.361] wcscat (in: _Dest=0x3e3b8f8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" [0195.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0195.362] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.362] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.362] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80217d0 [0195.362] wcscpy (in: _Dest=0x80217d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0195.362] wcscat (in: _Dest=0x80217d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0195.362] wcscat (in: _Dest=0x80217d0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" [0195.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80217d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0195.364] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.365] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.365] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b2a0 [0195.365] wcscpy (in: _Dest=0x3e3b2a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0195.365] wcscat (in: _Dest=0x3e3b2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0195.365] wcscat (in: _Dest=0x3e3b2a0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" [0195.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0195.366] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.366] FindClose (in: hFindFile=0x8098f10 | out: hFindFile=0x8098f10) returned 1 [0195.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0aac8) returned 1 [0195.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1a80) returned 1 [0195.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e64438) returned 1 Thread: id = 5990 os_tid = 0x12f8 [0189.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css")) returned 0x20 [0191.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0191.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.921] GetLastError () returned 0x5 [0191.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0191.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6b48) returned 1 Thread: id = 5991 os_tid = 0x474 [0189.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css")) returned 0x20 [0191.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0191.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.751] GetLastError () returned 0x5 [0191.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0191.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65950) returned 1 Thread: id = 5992 os_tid = 0xf00 [0189.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css")) returned 0x20 [0191.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0191.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.919] GetLastError () returned 0x5 [0191.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0191.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b0d0) returned 1 Thread: id = 5993 os_tid = 0xedc [0189.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css")) returned 0x20 [0191.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0191.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.918] GetLastError () returned 0x5 [0191.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0191.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3aa78) returned 1 Thread: id = 5994 os_tid = 0xe80 [0189.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml")) returned 0x20 [0189.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML", dwFileAttributes=0x20) returned 0 [0189.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.540] GetLastError () returned 0x5 [0189.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML", dwFileAttributes=0x20) returned 0 [0189.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ef80) returned 1 Thread: id = 5995 os_tid = 0xe50 [0189.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml")) returned 0x20 [0189.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML", dwFileAttributes=0x20) returned 0 [0189.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.542] GetLastError () returned 0x5 [0189.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML", dwFileAttributes=0x20) returned 0 [0189.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 5996 os_tid = 0xe6c [0189.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml")) returned 0x20 [0189.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML", dwFileAttributes=0x20) returned 0 [0189.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.544] GetLastError () returned 0x5 [0189.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML", dwFileAttributes=0x20) returned 0 [0189.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec50) returned 1 Thread: id = 5997 os_tid = 0xe70 [0189.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml")) returned 0x20 [0189.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML", dwFileAttributes=0x20) returned 0 [0189.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.546] GetLastError () returned 0x5 [0189.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML", dwFileAttributes=0x20) returned 0 [0189.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 Thread: id = 5998 os_tid = 0xee0 [0189.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml")) returned 0x20 [0189.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML", dwFileAttributes=0x20) returned 0 [0189.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.549] GetLastError () returned 0x5 [0189.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML", dwFileAttributes=0x20) returned 0 [0189.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 5999 os_tid = 0x158c [0189.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif")) returned 0x20 [0189.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0189.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.726] GetLastError () returned 0x5 [0189.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0189.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80217d0) returned 1 Thread: id = 6000 os_tid = 0xe78 [0189.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif")) returned 0x20 [0189.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0189.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.732] GetLastError () returned 0x5 [0189.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0189.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b470) returned 1 Thread: id = 6001 os_tid = 0xe84 [0189.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css")) returned 0x20 [0192.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0192.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.327] GetLastError () returned 0x5 [0192.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0192.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3070) returned 1 Thread: id = 6002 os_tid = 0xe58 [0189.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x81f23c8 [0189.738] wcscpy (in: _Dest=0x81f23c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0189.738] wcscat (in: _Dest=0x81f23c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0189.738] wcscat (in: _Dest=0x81f23c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*" [0189.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09050 [0189.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098950 [0192.100] wcscmp (_String1=".", _String2=".") returned 0 [0192.100] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.100] wcscmp (_String1="..", _String2=".") returned 1 [0192.100] wcscmp (_String1="..", _String2="..") returned 0 [0192.100] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0192.100] wcscmp (_String1="background.gif", _String2=".") returned 1 [0192.100] wcscmp (_String1="background.gif", _String2="..") returned 1 [0192.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x8020f60 [0192.100] wcscpy (in: _Dest=0x8020f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0192.100] wcscat (in: _Dest=0x8020f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0192.100] wcscat (in: _Dest=0x8020f60, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" [0192.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8020f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0192.936] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0192.936] wcscmp (_String1="header.gif", _String2=".") returned 1 [0192.936] wcscmp (_String1="header.gif", _String2="..") returned 1 [0192.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3ac48 [0192.936] wcscpy (in: _Dest=0x3e3ac48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0192.936] wcscat (in: _Dest=0x3e3ac48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0192.936] wcscat (in: _Dest=0x3e3ac48, _Source="header.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" [0192.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3ac48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0192.937] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0192.937] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0192.937] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0192.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3b640 [0192.938] wcscpy (in: _Dest=0x3e3b640, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0192.938] wcscat (in: _Dest=0x3e3b640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0192.938] wcscat (in: _Dest=0x3e3b640, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" [0192.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3b640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0192.939] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0192.939] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0192.939] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0192.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3e3a990 [0192.939] wcscpy (in: _Dest=0x3e3a990, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0192.939] wcscat (in: _Dest=0x3e3a990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0192.939] wcscat (in: _Dest=0x3e3a990, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" [0192.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0192.940] FindNextFileW (in: hFindFile=0x8098950, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0192.940] FindClose (in: hFindFile=0x8098950 | out: hFindFile=0x8098950) returned 1 [0192.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09050) returned 1 [0192.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f23c8) returned 1 [0192.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efbf8) returned 1 Thread: id = 6003 os_tid = 0xe10 [0189.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css")) returned 0x20 [0192.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0192.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.342] GetLastError () returned 0x5 [0192.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0192.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f32f8) returned 1 Thread: id = 6004 os_tid = 0xe24 [0189.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x81f2650 [0189.739] wcscpy (in: _Dest=0x81f2650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0189.739] wcscat (in: _Dest=0x81f2650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0189.739] wcscat (in: _Dest=0x81f2650, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*" [0189.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09ec0 [0189.739] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88457a90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e555c8 [0192.355] wcscmp (_String1=".", _String2=".") returned 0 [0192.355] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88457a90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.355] wcscmp (_String1="..", _String2=".") returned 1 [0192.355] wcscmp (_String1="..", _String2="..") returned 0 [0192.355] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0192.355] wcscmp (_String1="background.gif", _String2=".") returned 1 [0192.355] wcscmp (_String1="background.gif", _String2="..") returned 1 [0192.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x80215f0 [0192.355] wcscpy (in: _Dest=0x80215f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0192.355] wcscat (in: _Dest=0x80215f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0192.355] wcscat (in: _Dest=0x80215f0, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" [0198.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80215f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0198.476] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0198.476] wcscmp (_String1="header.gif", _String2=".") returned 1 [0198.476] wcscmp (_String1="header.gif", _String2="..") returned 1 [0198.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3afe8 [0198.476] wcscpy (in: _Dest=0x3e3afe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0198.476] wcscat (in: _Dest=0x3e3afe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0198.477] wcscat (in: _Dest=0x3e3afe8, _Source="header.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" [0198.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3afe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0198.478] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0198.478] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0198.478] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0198.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x80219b0 [0198.478] wcscpy (in: _Dest=0x80219b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0198.478] wcscat (in: _Dest=0x80219b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0198.478] wcscat (in: _Dest=0x80219b0, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" [0198.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x80219b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0198.479] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0198.480] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0198.480] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0198.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3e3a168 [0198.480] wcscpy (in: _Dest=0x3e3a168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0198.480] wcscat (in: _Dest=0x3e3a168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0198.480] wcscat (in: _Dest=0x3e3a168, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" [0198.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e3a168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a00 [0198.481] FindNextFileW (in: hFindFile=0x3e555c8, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0198.481] FindClose (in: hFindFile=0x3e555c8 | out: hFindFile=0x3e555c8) returned 1 [0198.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09ec0) returned 1 [0198.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2650) returned 1 [0198.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1720) returned 1 Thread: id = 6005 os_tid = 0xe1c [0189.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css")) returned 0x20 [0192.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0192.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.338] GetLastError () returned 0x5 [0192.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0192.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6c28) returned 1 Thread: id = 6006 os_tid = 0xe18 [0189.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css")) returned 0x20 [0192.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0192.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.336] GetLastError () returned 0x5 [0192.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0192.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f22f0) returned 1 Thread: id = 6007 os_tid = 0xe60 [0189.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css")) returned 0x20 [0192.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0192.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.333] GetLastError () returned 0x5 [0192.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0192.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a080) returned 1 Thread: id = 6008 os_tid = 0x650 [0189.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css")) returned 0x20 [0192.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0192.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.354] GetLastError () returned 0x5 [0192.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0192.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3afe8) returned 1 Thread: id = 6009 os_tid = 0x7c4 [0189.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif")) returned 0x20 [0192.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.672] GetLastError () returned 0x5 [0192.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021050) returned 1 Thread: id = 6010 os_tid = 0x7b0 [0189.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif")) returned 0x20 [0192.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.670] GetLastError () returned 0x5 [0192.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021aa0) returned 1 Thread: id = 6011 os_tid = 0xb44 [0189.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\miquelon")) returned 0x20 [0189.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon", dwFileAttributes=0x20) returned 0 [0189.801] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\miquelon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.801] GetLastError () returned 0x5 [0189.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon", dwFileAttributes=0x20) returned 0 [0189.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db19b8) returned 1 Thread: id = 6012 os_tid = 0x728 [0189.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\moncton")) returned 0x20 [0189.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton", dwFileAttributes=0x20) returned 0 [0189.802] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\moncton"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.803] GetLastError () returned 0x5 [0189.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton", dwFileAttributes=0x20) returned 0 [0189.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1be8) returned 1 Thread: id = 6013 os_tid = 0xf9c [0189.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\monterrey")) returned 0x20 [0192.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey", dwFileAttributes=0x20) returned 0 [0192.427] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\monterrey"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.427] GetLastError () returned 0x5 [0192.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey", dwFileAttributes=0x20) returned 0 [0192.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1638) returned 1 Thread: id = 6014 os_tid = 0x5f8 [0189.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montevideo")) returned 0x20 [0192.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo", dwFileAttributes=0x20) returned 0 [0192.449] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montevideo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.449] GetLastError () returned 0x5 [0192.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo", dwFileAttributes=0x20) returned 0 [0192.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 Thread: id = 6015 os_tid = 0x188c [0189.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montreal")) returned 0x20 [0192.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal", dwFileAttributes=0x20) returned 0 [0192.450] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montreal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.450] GetLastError () returned 0x5 [0192.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal", dwFileAttributes=0x20) returned 0 [0192.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1328) returned 1 Thread: id = 6016 os_tid = 0x1890 [0189.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montserrat")) returned 0x20 [0192.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat", dwFileAttributes=0x20) returned 0 [0192.451] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montserrat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.452] GetLastError () returned 0x5 [0192.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat", dwFileAttributes=0x20) returned 0 [0192.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 Thread: id = 6017 os_tid = 0x1894 [0189.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nassau")) returned 0x20 [0192.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau", dwFileAttributes=0x20) returned 0 [0192.229] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nassau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.229] GetLastError () returned 0x5 [0192.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau", dwFileAttributes=0x20) returned 0 [0192.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db16a8) returned 1 Thread: id = 6018 os_tid = 0x1898 [0189.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\new_york")) returned 0x20 [0192.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York", dwFileAttributes=0x20) returned 0 [0192.458] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\new_york"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.458] GetLastError () returned 0x5 [0192.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York", dwFileAttributes=0x20) returned 0 [0192.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1a28) returned 1 Thread: id = 6019 os_tid = 0x189c [0189.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nipigon")) returned 0x20 [0192.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon", dwFileAttributes=0x20) returned 0 [0192.456] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nipigon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.456] GetLastError () returned 0x5 [0192.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon", dwFileAttributes=0x20) returned 0 [0192.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1718) returned 1 Thread: id = 6020 os_tid = 0xd1c [0189.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nome")) returned 0x20 [0192.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome", dwFileAttributes=0x20) returned 0 [0192.463] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.463] GetLastError () returned 0x5 [0192.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome", dwFileAttributes=0x20) returned 0 [0192.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46338) returned 1 Thread: id = 6021 os_tid = 0x7b8 [0189.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\noronha")) returned 0x20 [0192.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha", dwFileAttributes=0x20) returned 0 [0192.461] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\noronha"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.461] GetLastError () returned 0x5 [0192.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha", dwFileAttributes=0x20) returned 0 [0192.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1b78) returned 1 Thread: id = 6022 os_tid = 0x950 [0189.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x831bd58 [0189.809] wcscpy (in: _Dest=0x831bd58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0189.809] wcscat (in: _Dest=0x831bd58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0189.809] wcscat (in: _Dest=0x831bd58, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*" [0189.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07d10 [0189.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54a48 [0192.465] wcscmp (_String1=".", _String2=".") returned 0 [0192.465] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.465] wcscmp (_String1="..", _String2=".") returned 1 [0192.465] wcscmp (_String1="..", _String2="..") returned 0 [0192.465] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beulah", cAlternateFileName="")) returned 1 [0192.465] wcscmp (_String1="Beulah", _String2=".") returned 1 [0192.465] wcscmp (_String1="Beulah", _String2="..") returned 1 [0192.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f2fd20 [0192.465] wcscpy (in: _Dest=0x3f2fd20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0192.465] wcscat (in: _Dest=0x3f2fd20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0192.465] wcscat (in: _Dest=0x3f2fd20, _Source="Beulah" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" [0192.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3f2fd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0192.597] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Center", cAlternateFileName="")) returned 1 [0192.597] wcscmp (_String1="Center", _String2=".") returned 1 [0192.597] wcscmp (_String1="Center", _String2="..") returned 1 [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bf008 [0192.597] wcscpy (in: _Dest=0x81bf008, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0192.597] wcscat (in: _Dest=0x81bf008, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0192.598] wcscat (in: _Dest=0x81bf008, _Source="Center" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" [0192.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81bf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0192.599] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="NEW_SA~1")) returned 1 [0192.599] wcscmp (_String1="New_Salem", _String2=".") returned 1 [0192.599] wcscmp (_String1="New_Salem", _String2="..") returned 1 [0192.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x81df2f8 [0192.599] wcscpy (in: _Dest=0x81df2f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0192.599] wcscat (in: _Dest=0x81df2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0192.599] wcscat (in: _Dest=0x81df2f8, _Source="New_Salem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" [0192.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0192.600] FindNextFileW (in: hFindFile=0x3e54a48, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="NEW_SA~1")) returned 0 [0192.600] FindClose (in: hFindFile=0x3e54a48 | out: hFindFile=0x3e54a48) returned 1 [0192.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07d10) returned 1 [0192.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bd58) returned 1 [0192.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b28) returned 1 Thread: id = 6023 os_tid = 0xa40 [0189.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\ojinaga")) returned 0x20 [0192.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga", dwFileAttributes=0x20) returned 0 [0192.454] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\ojinaga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.455] GetLastError () returned 0x5 [0192.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga", dwFileAttributes=0x20) returned 0 [0192.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1948) returned 1 Thread: id = 6024 os_tid = 0xaa0 [0189.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\panama")) returned 0x20 [0192.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama", dwFileAttributes=0x20) returned 0 [0192.453] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\panama"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.453] GetLastError () returned 0x5 [0192.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama", dwFileAttributes=0x20) returned 0 [0192.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1a98) returned 1 Thread: id = 6025 os_tid = 0x18a0 [0189.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\pangnirtung")) returned 0x20 [0192.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung", dwFileAttributes=0x20) returned 0 [0192.460] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\pangnirtung"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.460] GetLastError () returned 0x5 [0192.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung", dwFileAttributes=0x20) returned 0 [0192.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 Thread: id = 6026 os_tid = 0x18a4 [0189.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\paramaribo")) returned 0x20 [0192.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo", dwFileAttributes=0x20) returned 0 [0192.466] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\paramaribo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.466] GetLastError () returned 0x5 [0192.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo", dwFileAttributes=0x20) returned 0 [0192.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 Thread: id = 6027 os_tid = 0x18a8 [0189.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\phoenix")) returned 0x20 [0192.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix", dwFileAttributes=0x20) returned 0 [0192.426] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\phoenix"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.426] GetLastError () returned 0x5 [0192.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix", dwFileAttributes=0x20) returned 0 [0192.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1cc8) returned 1 Thread: id = 6028 os_tid = 0x18ac [0189.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port-au-prince")) returned 0x20 [0192.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince", dwFileAttributes=0x20) returned 0 [0192.467] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port-au-prince"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.467] GetLastError () returned 0x5 [0192.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince", dwFileAttributes=0x20) returned 0 [0192.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 Thread: id = 6029 os_tid = 0x18b0 [0190.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\porto_velho")) returned 0x20 [0192.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho", dwFileAttributes=0x20) returned 0 [0192.447] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\porto_velho"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.447] GetLastError () returned 0x5 [0192.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho", dwFileAttributes=0x20) returned 0 [0192.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e08) returned 1 Thread: id = 6030 os_tid = 0x1590 [0190.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex")) returned 0x20 [0191.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", dwFileAttributes=0x20) returned 0 [0191.960] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.960] GetLastError () returned 0x5 [0191.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", dwFileAttributes=0x20) returned 0 [0191.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35348) returned 1 Thread: id = 6031 os_tid = 0x18b4 [0190.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx")) returned 0x20 [0192.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", dwFileAttributes=0x20) returned 0 [0192.107] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.108] GetLastError () returned 0x5 [0192.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", dwFileAttributes=0x20) returned 0 [0192.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 6032 os_tid = 0x18c4 [0190.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env")) returned 0x20 [0192.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", dwFileAttributes=0x20) returned 0 [0192.109] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.109] GetLastError () returned 0x5 [0192.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", dwFileAttributes=0x20) returned 0 [0192.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35988) returned 1 Thread: id = 6033 os_tid = 0x18c8 [0190.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca")) returned 0x20 [0192.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", dwFileAttributes=0x20) returned 0 [0192.111] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.111] GetLastError () returned 0x5 [0192.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", dwFileAttributes=0x20) returned 0 [0192.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 6034 os_tid = 0x18cc [0190.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp")) returned 0x20 [0192.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", dwFileAttributes=0x20) returned 0 [0192.112] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.113] GetLastError () returned 0x5 [0192.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", dwFileAttributes=0x20) returned 0 [0192.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 6035 os_tid = 0x1594 [0190.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp")) returned 0x20 [0192.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", dwFileAttributes=0x20) returned 0 [0192.133] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.133] GetLastError () returned 0x5 [0192.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", dwFileAttributes=0x20) returned 0 [0192.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 6036 os_tid = 0x6b0 [0190.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx")) returned 0x20 [0192.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", dwFileAttributes=0x20) returned 0 [0192.134] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.134] GetLastError () returned 0x5 [0192.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", dwFileAttributes=0x20) returned 0 [0192.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333ee8) returned 1 Thread: id = 6037 os_tid = 0x18d0 [0190.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths")) returned 0x20 [0192.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", dwFileAttributes=0x20) returned 0 [0192.136] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.136] GetLastError () returned 0x5 [0192.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", dwFileAttributes=0x20) returned 0 [0192.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333228) returned 1 Thread: id = 6038 os_tid = 0xc78 [0190.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca")) returned 0x20 [0192.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", dwFileAttributes=0x20) returned 0 [0192.137] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.137] GetLastError () returned 0x5 [0192.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", dwFileAttributes=0x20) returned 0 [0192.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333e28) returned 1 Thread: id = 6039 os_tid = 0xc6c [0190.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp")) returned 0x20 [0192.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", dwFileAttributes=0x20) returned 0 [0192.139] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.139] GetLastError () returned 0x5 [0192.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", dwFileAttributes=0x20) returned 0 [0192.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 6040 os_tid = 0xc7c [0190.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx")) returned 0x20 [0192.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", dwFileAttributes=0x20) returned 0 [0192.147] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.147] GetLastError () returned 0x5 [0192.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", dwFileAttributes=0x20) returned 0 [0192.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6041 os_tid = 0xb10 [0190.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp")) returned 0x20 [0192.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", dwFileAttributes=0x20) returned 0 [0192.105] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.105] GetLastError () returned 0x5 [0192.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", dwFileAttributes=0x20) returned 0 [0192.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 6042 os_tid = 0x5d4 [0190.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp")) returned 0x20 [0192.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", dwFileAttributes=0x20) returned 0 [0192.176] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.181] GetLastError () returned 0x5 [0192.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", dwFileAttributes=0x20) returned 0 [0192.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 6043 os_tid = 0xc10 [0190.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex")) returned 0x20 [0192.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", dwFileAttributes=0x20) returned 0 [0192.103] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.103] GetLastError () returned 0x5 [0192.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", dwFileAttributes=0x20) returned 0 [0192.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35410) returned 1 Thread: id = 6044 os_tid = 0x18d4 [0190.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx")) returned 0x20 [0192.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", dwFileAttributes=0x20) returned 0 [0192.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.106] GetLastError () returned 0x5 [0192.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", dwFileAttributes=0x20) returned 0 [0192.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 6045 os_tid = 0x18dc [0190.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env")) returned 0x20 [0192.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", dwFileAttributes=0x20) returned 0 [0192.174] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.174] GetLastError () returned 0x5 [0192.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", dwFileAttributes=0x20) returned 0 [0192.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35730) returned 1 Thread: id = 6046 os_tid = 0x18e0 [0190.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca")) returned 0x20 [0192.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", dwFileAttributes=0x20) returned 0 [0192.163] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.163] GetLastError () returned 0x5 [0192.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", dwFileAttributes=0x20) returned 0 [0192.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 6047 os_tid = 0x18e4 [0190.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp")) returned 0x20 [0192.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", dwFileAttributes=0x20) returned 0 [0192.168] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.168] GetLastError () returned 0x5 [0192.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", dwFileAttributes=0x20) returned 0 [0192.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 6048 os_tid = 0x18e8 [0190.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths")) returned 0x20 [0192.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", dwFileAttributes=0x20) returned 0 [0192.149] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.149] GetLastError () returned 0x5 [0192.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", dwFileAttributes=0x20) returned 0 [0192.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6049 os_tid = 0x18ec [0190.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp")) returned 0x20 [0192.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", dwFileAttributes=0x20) returned 0 [0192.164] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.164] GetLastError () returned 0x5 [0192.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", dwFileAttributes=0x20) returned 0 [0192.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e354d8) returned 1 Thread: id = 6050 os_tid = 0x18f0 [0190.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx")) returned 0x20 [0192.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", dwFileAttributes=0x20) returned 0 [0192.165] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.166] GetLastError () returned 0x5 [0192.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", dwFileAttributes=0x20) returned 0 [0192.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3338e8) returned 1 Thread: id = 6051 os_tid = 0x18f8 [0190.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca")) returned 0x20 [0192.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", dwFileAttributes=0x20) returned 0 [0192.159] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.159] GetLastError () returned 0x5 [0192.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", dwFileAttributes=0x20) returned 0 [0192.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 6052 os_tid = 0x18fc [0190.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp")) returned 0x20 [0192.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", dwFileAttributes=0x20) returned 0 [0192.160] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.160] GetLastError () returned 0x5 [0192.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", dwFileAttributes=0x20) returned 0 [0192.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5648) returned 1 Thread: id = 6053 os_tid = 0x1130 [0190.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx")) returned 0x20 [0192.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", dwFileAttributes=0x20) returned 0 [0192.151] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.151] GetLastError () returned 0x5 [0192.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", dwFileAttributes=0x20) returned 0 [0192.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5708) returned 1 Thread: id = 6054 os_tid = 0xdfc [0190.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp")) returned 0x20 [0192.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", dwFileAttributes=0x20) returned 0 [0192.150] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.150] GetLastError () returned 0x5 [0192.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", dwFileAttributes=0x20) returned 0 [0192.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d57c8) returned 1 Thread: id = 6055 os_tid = 0xe00 [0190.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths")) returned 0x20 [0192.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", dwFileAttributes=0x20) returned 0 [0192.162] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.162] GetLastError () returned 0x5 [0192.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", dwFileAttributes=0x20) returned 0 [0192.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5888) returned 1 Thread: id = 6056 os_tid = 0xe04 [0190.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca")) returned 0x20 [0192.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", dwFileAttributes=0x20) returned 0 [0192.169] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.169] GetLastError () returned 0x5 [0192.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", dwFileAttributes=0x20) returned 0 [0192.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5948) returned 1 Thread: id = 6057 os_tid = 0xdec [0190.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp")) returned 0x20 [0192.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", dwFileAttributes=0x20) returned 0 [0192.171] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.171] GetLastError () returned 0x5 [0192.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", dwFileAttributes=0x20) returned 0 [0192.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a08) returned 1 Thread: id = 6058 os_tid = 0xad0 [0190.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp")) returned 0x20 [0192.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", dwFileAttributes=0x20) returned 0 [0192.172] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.172] GetLastError () returned 0x5 [0192.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", dwFileAttributes=0x20) returned 0 [0192.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ac8) returned 1 Thread: id = 6059 os_tid = 0x4c0 [0190.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx")) returned 0x20 [0192.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", dwFileAttributes=0x20) returned 0 [0192.173] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.173] GetLastError () returned 0x5 [0192.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", dwFileAttributes=0x20) returned 0 [0192.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5b88) returned 1 Thread: id = 6060 os_tid = 0x110 [0191.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca")) returned 0x20 [0192.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", dwFileAttributes=0x20) returned 0 [0192.167] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.167] GetLastError () returned 0x5 [0192.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", dwFileAttributes=0x20) returned 0 [0192.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5c48) returned 1 Thread: id = 6061 os_tid = 0x20c [0191.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x20 [0192.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x20) returned 0 [0192.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.375] GetLastError () returned 0x5 [0192.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x20) returned 0 [0192.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 6062 os_tid = 0x9bc [0191.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x20 [0192.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x20) returned 0 [0192.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.379] GetLastError () returned 0x5 [0192.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x20) returned 0 [0192.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 6063 os_tid = 0x106c [0191.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x20 [0192.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x20) returned 0 [0192.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.191] GetLastError () returned 0x5 [0192.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x20) returned 0 [0192.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 6064 os_tid = 0x6d4 [0191.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x20 [0192.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x20) returned 0 [0192.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.378] GetLastError () returned 0x5 [0192.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x20) returned 0 [0192.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 Thread: id = 6065 os_tid = 0xc50 [0191.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x20 [0192.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x20) returned 0 [0192.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.377] GetLastError () returned 0x5 [0192.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x20) returned 0 [0192.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f418) returned 1 Thread: id = 6066 os_tid = 0x48c [0191.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x20 [0192.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x20) returned 0 [0192.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.190] GetLastError () returned 0x5 [0192.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x20) returned 0 [0192.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 6067 os_tid = 0x11ac [0191.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x20 [0192.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x20) returned 0 [0192.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.416] GetLastError () returned 0x5 [0192.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x20) returned 0 [0192.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 Thread: id = 6068 os_tid = 0x11b0 [0191.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf")) returned 0x20 [0192.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x20) returned 0 [0192.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.380] GetLastError () returned 0x5 [0192.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x20) returned 0 [0192.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b4d8) returned 1 Thread: id = 6069 os_tid = 0x11b4 [0191.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf")) returned 0x20 [0192.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x20) returned 0 [0192.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.404] GetLastError () returned 0x5 [0192.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x20) returned 0 [0192.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 6070 os_tid = 0x11b8 [0191.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x20 [0192.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x20) returned 0 [0192.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.402] GetLastError () returned 0x5 [0192.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x20) returned 0 [0192.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 6071 os_tid = 0x6c0 [0191.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x20 [0192.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x20) returned 0 [0192.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.401] GetLastError () returned 0x5 [0192.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x20) returned 0 [0192.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f5b0) returned 1 Thread: id = 6072 os_tid = 0x11c0 [0191.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x20 [0192.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x20) returned 0 [0192.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.400] GetLastError () returned 0x5 [0192.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x20) returned 0 [0192.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 6073 os_tid = 0x11c4 [0191.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x20 [0192.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x20) returned 0 [0192.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.398] GetLastError () returned 0x5 [0192.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x20) returned 0 [0192.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f9f0) returned 1 Thread: id = 6074 os_tid = 0x11c8 [0191.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x20 [0192.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x20) returned 0 [0192.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.386] GetLastError () returned 0x5 [0192.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x20) returned 0 [0192.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 6075 os_tid = 0x2c5c [0191.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x20 [0192.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x20) returned 0 [0192.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.384] GetLastError () returned 0x5 [0192.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x20) returned 0 [0192.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 6076 os_tid = 0xbd8 [0191.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x20 [0192.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x20) returned 0 [0192.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.383] GetLastError () returned 0x5 [0192.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x20) returned 0 [0192.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 6077 os_tid = 0xbd4 [0191.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x20 [0192.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x20) returned 0 [0192.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.405] GetLastError () returned 0x5 [0192.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x20) returned 0 [0192.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f305a0) returned 1 Thread: id = 6078 os_tid = 0x2c6c [0191.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x20 [0192.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x20) returned 0 [0192.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.382] GetLastError () returned 0x5 [0192.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x20) returned 0 [0192.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 Thread: id = 6079 os_tid = 0x2c70 [0191.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x20 [0192.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x20) returned 0 [0192.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.406] GetLastError () returned 0x5 [0192.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x20) returned 0 [0192.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 6080 os_tid = 0xc34 [0191.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x20 [0192.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x20) returned 0 [0192.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.391] GetLastError () returned 0x5 [0192.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x20) returned 0 [0192.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 6081 os_tid = 0xc40 [0191.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x20 [0192.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x20) returned 0 [0192.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.408] GetLastError () returned 0x5 [0192.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x20) returned 0 [0192.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 6082 os_tid = 0xc38 [0191.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x20 [0192.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x20) returned 0 [0192.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.389] GetLastError () returned 0x5 [0192.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x20) returned 0 [0192.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31370) returned 1 Thread: id = 6083 os_tid = 0x1200 [0191.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x20 [0192.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x20) returned 0 [0192.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.388] GetLastError () returned 0x5 [0192.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x20) returned 0 [0192.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c00) returned 1 Thread: id = 6084 os_tid = 0x1204 [0191.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x20 [0192.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x20) returned 0 [0192.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.409] GetLastError () returned 0x5 [0192.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x20) returned 0 [0192.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f312e8) returned 1 Thread: id = 6085 os_tid = 0xa3c [0191.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x20 [0192.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x20) returned 0 [0192.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.411] GetLastError () returned 0x5 [0192.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x20) returned 0 [0192.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f307c0) returned 1 Thread: id = 6086 os_tid = 0xa4c [0191.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x20 [0192.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x20) returned 0 [0192.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.387] GetLastError () returned 0x5 [0192.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x20) returned 0 [0192.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 6087 os_tid = 0xa5c [0191.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x20 [0192.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x20) returned 0 [0192.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.395] GetLastError () returned 0x5 [0192.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x20) returned 0 [0192.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 6088 os_tid = 0xa6c [0191.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x20 [0192.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x20) returned 0 [0192.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.412] GetLastError () returned 0x5 [0192.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x20) returned 0 [0192.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 6089 os_tid = 0xa7c [0191.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x20 [0192.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x20) returned 0 [0192.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.413] GetLastError () returned 0x5 [0192.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x20) returned 0 [0192.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 6090 os_tid = 0xa8c [0191.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x20 [0192.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x20) returned 0 [0192.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.393] GetLastError () returned 0x5 [0192.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x20) returned 0 [0192.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 6091 os_tid = 0xa9c [0191.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x20 [0192.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x20) returned 0 [0192.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.414] GetLastError () returned 0x5 [0192.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x20) returned 0 [0192.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 6092 os_tid = 0xaac [0191.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x20 [0192.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x20) returned 0 [0192.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.392] GetLastError () returned 0x5 [0192.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x20) returned 0 [0192.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30408) returned 1 Thread: id = 6093 os_tid = 0xac0 [0191.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x20 [0192.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x20) returned 0 [0192.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.397] GetLastError () returned 0x5 [0192.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x20) returned 0 [0192.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 6094 os_tid = 0xacc [0191.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x20 [0192.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x20) returned 0 [0192.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.396] GetLastError () returned 0x5 [0192.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x20) returned 0 [0192.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 6095 os_tid = 0xb58 [0191.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll")) returned 0x20 [0191.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0191.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.139] GetLastError () returned 0x5 [0191.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0191.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df2f8) returned 1 Thread: id = 6096 os_tid = 0x43c [0191.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs")) returned 0x20 [0193.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", dwFileAttributes=0x20) returned 0 [0193.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.010] GetLastError () returned 0x5 [0193.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", dwFileAttributes=0x20) returned 0 [0193.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b058) returned 1 Thread: id = 6097 os_tid = 0xdb4 [0191.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc")) returned 0x20 [0193.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", dwFileAttributes=0x20) returned 0 [0193.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.026] GetLastError () returned 0x5 [0193.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", dwFileAttributes=0x20) returned 0 [0193.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 6098 os_tid = 0xdf0 [0191.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt")) returned 0x20 [0192.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", dwFileAttributes=0x20) returned 0 [0192.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.773] GetLastError () returned 0x5 [0192.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", dwFileAttributes=0x20) returned 0 [0192.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 6099 os_tid = 0xde8 [0191.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk")) returned 0x20 [0193.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.016] GetLastError () returned 0x5 [0193.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de0f8) returned 1 Thread: id = 6100 os_tid = 0x68c [0191.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk")) returned 0x20 [0193.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.018] GetLastError () returned 0x5 [0193.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de458) returned 1 Thread: id = 6101 os_tid = 0xe98 [0191.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg")) returned 0x20 [0193.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", dwFileAttributes=0x20) returned 0 [0193.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.020] GetLastError () returned 0x5 [0193.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", dwFileAttributes=0x20) returned 0 [0193.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f8e0) returned 1 Thread: id = 6102 os_tid = 0xe9c [0191.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll")) returned 0x20 [0193.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.022] GetLastError () returned 0x5 [0193.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de4e8) returned 1 Thread: id = 6103 os_tid = 0xeb0 [0191.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll")) returned 0x20 [0193.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.024] GetLastError () returned 0x5 [0193.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 Thread: id = 6104 os_tid = 0xeac [0191.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd")) returned 0x20 [0193.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", dwFileAttributes=0x20) returned 0 [0193.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.012] GetLastError () returned 0x5 [0193.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", dwFileAttributes=0x20) returned 0 [0193.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b8d8) returned 1 Thread: id = 6105 os_tid = 0xea8 [0191.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl")) returned 0x20 [0193.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", dwFileAttributes=0x20) returned 0 [0193.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.008] GetLastError () returned 0x5 [0193.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", dwFileAttributes=0x20) returned 0 [0193.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 6106 os_tid = 0xeb4 [0191.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd")) returned 0x20 [0193.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", dwFileAttributes=0x20) returned 0 [0193.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.030] GetLastError () returned 0x5 [0193.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", dwFileAttributes=0x20) returned 0 [0193.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831aed8) returned 1 Thread: id = 6107 os_tid = 0xeb8 [0191.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl")) returned 0x20 [0193.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", dwFileAttributes=0x20) returned 0 [0193.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.028] GetLastError () returned 0x5 [0193.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", dwFileAttributes=0x20) returned 0 [0193.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b9d8) returned 1 Thread: id = 6108 os_tid = 0x159c [0191.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83220e8 [0191.454] wcscpy (in: _Dest=0x83220e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0191.454] wcscat (in: _Dest=0x83220e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" [0191.454] wcscat (in: _Dest=0x83220e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*" [0191.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ff28 [0191.454] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6905af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e1690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099710 [0192.700] wcscmp (_String1=".", _String2=".") returned 0 [0192.700] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6905af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e1690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.700] wcscmp (_String1="..", _String2=".") returned 1 [0192.700] wcscmp (_String1="..", _String2="..") returned 0 [0192.700] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e1690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.701] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.701] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e88c8 [0192.701] wcscpy (in: _Dest=0x81e88c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0192.701] wcscat (in: _Dest=0x81e88c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" [0192.701] wcscat (in: _Dest=0x81e88c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" [0193.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e88c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0193.913] FindNextFileW (in: hFindFile=0x8099710, lpFindFileData=0x805ff28 | out: lpFindFileData=0x805ff28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e1690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.913] FindClose (in: hFindFile=0x8099710 | out: hFindFile=0x8099710) returned 1 [0193.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ff28) returned 1 [0193.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83220e8) returned 1 [0193.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6410) returned 1 Thread: id = 6109 os_tid = 0x15a0 [0191.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8320a38 [0191.455] wcscpy (in: _Dest=0x8320a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0191.455] wcscat (in: _Dest=0x8320a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" [0191.455] wcscat (in: _Dest=0x8320a38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*" [0191.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060d98 [0191.455] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6900cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69da160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69da160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099390 [0192.701] wcscmp (_String1=".", _String2=".") returned 0 [0192.701] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6900cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69da160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69da160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.701] wcscmp (_String1="..", _String2=".") returned 1 [0192.701] wcscmp (_String1="..", _String2="..") returned 0 [0192.701] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69da160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69dc870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.701] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.701] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e8428 [0192.702] wcscpy (in: _Dest=0x81e8428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0192.702] wcscat (in: _Dest=0x81e8428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" [0192.702] wcscat (in: _Dest=0x81e8428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" [0193.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0193.916] FindNextFileW (in: hFindFile=0x8099390, lpFindFileData=0x8060d98 | out: lpFindFileData=0x8060d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69da160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69dc870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.916] FindClose (in: hFindFile=0x8099390 | out: hFindFile=0x8099390) returned 1 [0193.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060d98) returned 1 [0193.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320a38) returned 1 [0193.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef56a8) returned 1 Thread: id = 6110 os_tid = 0x15a4 [0191.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321bc0 [0191.456] wcscpy (in: _Dest=0x8321bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0191.456] wcscat (in: _Dest=0x8321bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" [0191.456] wcscat (in: _Dest=0x8321bc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*" [0191.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80603f8 [0191.457] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a1960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe694c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098fd0 [0192.683] wcscmp (_String1=".", _String2=".") returned 0 [0192.683] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a1960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe694c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.683] wcscmp (_String1="..", _String2=".") returned 1 [0192.683] wcscmp (_String1="..", _String2="..") returned 0 [0192.683] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe694c7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.683] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.683] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ec300 [0192.683] wcscpy (in: _Dest=0x81ec300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0192.683] wcscat (in: _Dest=0x81ec300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" [0192.683] wcscat (in: _Dest=0x81ec300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" [0193.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0193.989] FindNextFileW (in: hFindFile=0x8098fd0, lpFindFileData=0x80603f8 | out: lpFindFileData=0x80603f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe694c7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.989] FindClose (in: hFindFile=0x8098fd0 | out: hFindFile=0x8098fd0) returned 1 [0193.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80603f8) returned 1 [0193.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321bc0) returned 1 [0193.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d60) returned 1 Thread: id = 6111 os_tid = 0x15a8 [0191.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83219b0 [0191.457] wcscpy (in: _Dest=0x83219b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0191.457] wcscat (in: _Dest=0x83219b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" [0191.457] wcscat (in: _Dest=0x83219b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*" [0191.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ebe8 [0191.457] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68844a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6922fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099410 [0192.675] wcscmp (_String1=".", _String2=".") returned 0 [0192.675] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68844a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6922fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.675] wcscmp (_String1="..", _String2=".") returned 1 [0192.675] wcscmp (_String1="..", _String2="..") returned 0 [0192.675] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6922fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.675] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.675] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81eb9c0 [0192.675] wcscpy (in: _Dest=0x81eb9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0192.675] wcscat (in: _Dest=0x81eb9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" [0192.675] wcscat (in: _Dest=0x81eb9c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" [0194.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0194.043] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x805ebe8 | out: lpFindFileData=0x805ebe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6922fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.043] FindClose (in: hFindFile=0x8099410 | out: hFindFile=0x8099410) returned 1 [0194.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ebe8) returned 1 [0194.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83219b0) returned 1 [0194.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ac8) returned 1 Thread: id = 6112 os_tid = 0x1434 [0191.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83218a8 [0191.458] wcscpy (in: _Dest=0x83218a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0191.458] wcscat (in: _Dest=0x83218a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" [0191.458] wcscat (in: _Dest=0x83218a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*" [0191.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f320 [0191.458] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f97a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d0520, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099110 [0192.697] wcscmp (_String1=".", _String2=".") returned 0 [0192.697] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f97a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d0520, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.697] wcscmp (_String1="..", _String2=".") returned 1 [0192.697] wcscmp (_String1="..", _String2="..") returned 0 [0192.697] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d0520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.697] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.697] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ed458 [0192.697] wcscpy (in: _Dest=0x81ed458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0192.697] wcscat (in: _Dest=0x81ed458, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" [0192.697] wcscat (in: _Dest=0x81ed458, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" [0193.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0193.904] FindNextFileW (in: hFindFile=0x8099110, lpFindFileData=0x805f320 | out: lpFindFileData=0x805f320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d0520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.904] FindClose (in: hFindFile=0x8099110 | out: hFindFile=0x8099110) returned 1 [0193.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f320) returned 1 [0193.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83218a8) returned 1 [0193.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60f8) returned 1 Thread: id = 6113 os_tid = 0x15c0 [0191.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321590 [0191.459] wcscpy (in: _Dest=0x8321590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0191.459] wcscat (in: _Dest=0x8321590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" [0191.459] wcscat (in: _Dest=0x8321590, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*" [0191.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805fa58 [0191.459] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6897d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6940470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6940470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099350 [0192.679] wcscmp (_String1=".", _String2=".") returned 0 [0192.679] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6897d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6940470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6940470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.679] wcscmp (_String1="..", _String2=".") returned 1 [0192.679] wcscmp (_String1="..", _String2="..") returned 0 [0192.679] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6940470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6942b80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.679] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.679] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ebe60 [0192.679] wcscpy (in: _Dest=0x81ebe60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0192.679] wcscat (in: _Dest=0x81ebe60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" [0192.679] wcscat (in: _Dest=0x81ebe60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" [0193.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0193.979] FindNextFileW (in: hFindFile=0x8099350, lpFindFileData=0x805fa58 | out: lpFindFileData=0x805fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6940470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6942b80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.979] FindClose (in: hFindFile=0x8099350 | out: hFindFile=0x8099350) returned 1 [0193.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805fa58) returned 1 [0193.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321590) returned 1 [0193.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6308) returned 1 Thread: id = 6114 os_tid = 0x15c4 [0191.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321380 [0191.459] wcscpy (in: _Dest=0x8321380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0191.459] wcscat (in: _Dest=0x8321380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" [0191.459] wcscat (in: _Dest=0x8321380, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*" [0191.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805fcc0 [0191.459] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c1530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697adf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe697adf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099590 [0192.689] wcscmp (_String1=".", _String2=".") returned 0 [0192.689] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c1530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697adf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe697adf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.689] wcscmp (_String1="..", _String2=".") returned 1 [0192.689] wcscmp (_String1="..", _String2="..") returned 0 [0192.689] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe697adf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697d500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.689] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.689] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ecb18 [0192.690] wcscpy (in: _Dest=0x81ecb18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0192.690] wcscat (in: _Dest=0x81ecb18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" [0192.690] wcscat (in: _Dest=0x81ecb18, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" [0193.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0193.999] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x805fcc0 | out: lpFindFileData=0x805fcc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe697adf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697d500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.999] FindClose (in: hFindFile=0x8099590 | out: hFindFile=0x8099590) returned 1 [0193.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805fcc0) returned 1 [0193.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321380) returned 1 [0193.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef57b0) returned 1 Thread: id = 6115 os_tid = 0x12fc [0191.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321dd0 [0191.460] wcscpy (in: _Dest=0x8321dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0191.460] wcscat (in: _Dest=0x8321dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" [0191.460] wcscat (in: _Dest=0x8321dd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*" [0191.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060190 [0191.460] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f4980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c8ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80990d0 [0192.697] wcscmp (_String1=".", _String2=".") returned 0 [0192.698] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f4980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c8ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.698] wcscmp (_String1="..", _String2=".") returned 1 [0192.698] wcscmp (_String1="..", _String2="..") returned 0 [0192.698] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c8ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.698] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.698] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e8300 [0192.698] wcscpy (in: _Dest=0x81e8300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0192.698] wcscat (in: _Dest=0x81e8300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" [0192.698] wcscat (in: _Dest=0x81e8300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" [0193.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0193.906] FindNextFileW (in: hFindFile=0x80990d0, lpFindFileData=0x8060190 | out: lpFindFileData=0x8060190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c8ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.907] FindClose (in: hFindFile=0x80990d0 | out: hFindFile=0x80990d0) returned 1 [0193.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060190) returned 1 [0193.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321dd0) returned 1 [0193.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5180) returned 1 Thread: id = 6116 os_tid = 0x1300 [0191.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321ed8 [0191.461] wcscpy (in: _Dest=0x8321ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0191.461] wcscat (in: _Dest=0x8321ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" [0191.461] wcscat (in: _Dest=0x8321ed8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*" [0191.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805ee50 [0191.461] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe688b9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692f300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0192.676] wcscmp (_String1=".", _String2=".") returned 0 [0192.676] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe688b9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692f300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.676] wcscmp (_String1="..", _String2=".") returned 1 [0192.676] wcscmp (_String1="..", _String2="..") returned 0 [0192.676] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692f300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.676] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.676] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ebae8 [0192.676] wcscpy (in: _Dest=0x81ebae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0192.676] wcscat (in: _Dest=0x81ebae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" [0192.676] wcscat (in: _Dest=0x81ebae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" [0194.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0194.046] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x805ee50 | out: lpFindFileData=0x805ee50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692f300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.046] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0194.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805ee50) returned 1 [0194.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321ed8) returned 1 [0194.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6200) returned 1 Thread: id = 6117 os_tid = 0x15d4 [0191.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321278 [0191.461] wcscpy (in: _Dest=0x8321278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0191.461] wcscat (in: _Dest=0x8321278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" [0191.461] wcscat (in: _Dest=0x8321278, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*" [0191.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e980 [0191.461] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b78f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69711b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099290 [0192.685] wcscmp (_String1=".", _String2=".") returned 0 [0192.685] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b78f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69711b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.685] wcscmp (_String1="..", _String2=".") returned 1 [0192.686] wcscmp (_String1="..", _String2="..") returned 0 [0192.686] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69711b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.686] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.686] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ec678 [0192.686] wcscpy (in: _Dest=0x81ec678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0192.686] wcscat (in: _Dest=0x81ec678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" [0192.686] wcscat (in: _Dest=0x81ec678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" [0192.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0192.967] FindNextFileW (in: hFindFile=0x8099290, lpFindFileData=0x805e980 | out: lpFindFileData=0x805e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69711b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.967] FindClose (in: hFindFile=0x8099290 | out: hFindFile=0x8099290) returned 1 [0192.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e980) returned 1 [0192.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321278) returned 1 [0192.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6a40) returned 1 Thread: id = 6118 os_tid = 0x15d8 [0191.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x8321170 [0191.462] wcscpy (in: _Dest=0x8321170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0191.462] wcscat (in: _Dest=0x8321170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" [0191.462] wcscat (in: _Dest=0x8321170, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*" [0191.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e4b0 [0191.462] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68dc2e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a6d10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0192.693] wcscmp (_String1=".", _String2=".") returned 0 [0192.693] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68dc2e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a6d10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.693] wcscmp (_String1="..", _String2=".") returned 1 [0192.693] wcscmp (_String1="..", _String2="..") returned 0 [0192.693] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a6d10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.693] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.693] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x81ecfb8 [0192.693] wcscpy (in: _Dest=0x81ecfb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0192.693] wcscat (in: _Dest=0x81ecfb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" [0192.693] wcscat (in: _Dest=0x81ecfb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" [0194.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0194.009] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x805e4b0 | out: lpFindFileData=0x805e4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a6d10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.009] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0194.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e4b0) returned 1 [0194.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321170) returned 1 [0194.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef55a0) returned 1 Thread: id = 6119 os_tid = 0x15dc [0191.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8320f60 [0191.463] wcscpy (in: _Dest=0x8320f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0191.463] wcscat (in: _Dest=0x8320f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" [0191.463] wcscat (in: _Dest=0x8320f60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*" [0191.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80614d0 [0191.463] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a6780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69515e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098890 [0192.684] wcscmp (_String1=".", _String2=".") returned 0 [0192.684] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a6780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69515e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.684] wcscmp (_String1="..", _String2=".") returned 1 [0192.684] wcscmp (_String1="..", _String2="..") returned 0 [0192.684] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69515e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.684] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.684] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ec428 [0192.684] wcscpy (in: _Dest=0x81ec428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0192.684] wcscat (in: _Dest=0x81ec428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" [0192.684] wcscat (in: _Dest=0x81ec428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" [0193.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0193.992] FindNextFileW (in: hFindFile=0x8098890, lpFindFileData=0x80614d0 | out: lpFindFileData=0x80614d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69515e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.992] FindClose (in: hFindFile=0x8098890 | out: hFindFile=0x8098890) returned 1 [0193.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80614d0) returned 1 [0193.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320f60) returned 1 [0193.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5498) returned 1 Thread: id = 6120 os_tid = 0x2d3c [0191.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8320d50 [0191.463] wcscpy (in: _Dest=0x8320d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0191.464] wcscat (in: _Dest=0x8320d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" [0191.464] wcscat (in: _Dest=0x8320d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*" [0191.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f0b8 [0191.464] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6881d90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe691e190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0192.677] wcscmp (_String1=".", _String2=".") returned 0 [0192.677] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6881d90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe691e190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.677] wcscmp (_String1="..", _String2=".") returned 1 [0192.677] wcscmp (_String1="..", _String2="..") returned 0 [0192.677] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe691e190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.677] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.677] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ebc10 [0192.677] wcscpy (in: _Dest=0x81ebc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0192.677] wcscat (in: _Dest=0x81ebc10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" [0192.677] wcscat (in: _Dest=0x81ebc10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" [0194.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b34 [0194.048] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x805f0b8 | out: lpFindFileData=0x805f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe691e190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.048] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0194.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f0b8) returned 1 [0194.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320d50) returned 1 [0194.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef58b8) returned 1 Thread: id = 6121 os_tid = 0x15e0 [0191.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8320c48 [0191.464] wcscpy (in: _Dest=0x8320c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0191.464] wcscat (in: _Dest=0x8320c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" [0191.464] wcscat (in: _Dest=0x8320c48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*" [0191.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f7f0 [0191.464] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68bc710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6975fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099450 [0192.686] wcscmp (_String1=".", _String2=".") returned 0 [0192.686] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68bc710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6975fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.686] wcscmp (_String1="..", _String2=".") returned 1 [0192.687] wcscmp (_String1="..", _String2="..") returned 0 [0192.687] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6975fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.687] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.687] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ec7a0 [0192.687] wcscpy (in: _Dest=0x81ec7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0192.687] wcscat (in: _Dest=0x81ec7a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" [0192.687] wcscat (in: _Dest=0x81ec7a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" [0192.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0192.973] FindNextFileW (in: hFindFile=0x8099450, lpFindFileData=0x805f7f0 | out: lpFindFileData=0x805f7f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6975fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.973] FindClose (in: hFindFile=0x8099450 | out: hFindFile=0x8099450) returned 1 [0192.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f7f0) returned 1 [0192.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320c48) returned 1 [0192.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f70) returned 1 Thread: id = 6122 os_tid = 0x15e4 [0191.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321ab8 [0191.465] wcscpy (in: _Dest=0x8321ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0191.465] wcscat (in: _Dest=0x8321ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" [0191.465] wcscat (in: _Dest=0x8321ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*" [0191.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8061268 [0191.465] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68892c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692a4e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099750 [0192.678] wcscmp (_String1=".", _String2=".") returned 0 [0192.678] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68892c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692a4e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.678] wcscmp (_String1="..", _String2=".") returned 1 [0192.678] wcscmp (_String1="..", _String2="..") returned 0 [0192.678] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692a4e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.678] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.678] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ebd38 [0192.678] wcscpy (in: _Dest=0x81ebd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0192.678] wcscat (in: _Dest=0x81ebd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" [0192.678] wcscat (in: _Dest=0x81ebd38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" [0193.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0193.977] FindNextFileW (in: hFindFile=0x8099750, lpFindFileData=0x8061268 | out: lpFindFileData=0x8061268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692a4e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.977] FindClose (in: hFindFile=0x8099750 | out: hFindFile=0x8099750) returned 1 [0193.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061268) returned 1 [0193.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321ab8) returned 1 [0193.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6518) returned 1 Thread: id = 6123 os_tid = 0x15e8 [0191.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83221f0 [0191.466] wcscpy (in: _Dest=0x83221f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0191.466] wcscat (in: _Dest=0x83221f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" [0191.466] wcscat (in: _Dest=0x83221f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*" [0191.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060b30 [0191.466] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690a910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e3da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80988d0 [0192.702] wcscmp (_String1=".", _String2=".") returned 0 [0192.702] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690a910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e3da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.702] wcscmp (_String1="..", _String2=".") returned 1 [0192.702] wcscmp (_String1="..", _String2="..") returned 0 [0192.702] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e3da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.702] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.702] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e81d8 [0192.703] wcscpy (in: _Dest=0x81e81d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0192.703] wcscat (in: _Dest=0x81e81d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" [0192.703] wcscat (in: _Dest=0x81e81d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" [0193.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e81d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0193.918] FindNextFileW (in: hFindFile=0x80988d0, lpFindFileData=0x8060b30 | out: lpFindFileData=0x8060b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e3da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.918] FindClose (in: hFindFile=0x80988d0 | out: hFindFile=0x80988d0) returned 1 [0193.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060b30) returned 1 [0193.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83221f0) returned 1 [0193.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6620) returned 1 Thread: id = 6124 os_tid = 0x15ec [0191.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8322610 [0191.466] wcscpy (in: _Dest=0x8322610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" [0191.466] wcscat (in: _Dest=0x8322610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" [0191.466] wcscat (in: _Dest=0x8322610, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*" [0191.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805e718 [0191.467] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6911e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f00f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e54cc8 [0192.424] wcscmp (_String1=".", _String2=".") returned 0 [0192.424] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6911e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f00f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.424] wcscmp (_String1="..", _String2=".") returned 1 [0192.424] wcscmp (_String1="..", _String2="..") returned 0 [0192.424] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f00f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.424] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.424] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81eb770 [0192.425] wcscpy (in: _Dest=0x81eb770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" [0192.425] wcscat (in: _Dest=0x81eb770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" [0192.425] wcscat (in: _Dest=0x81eb770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" [0192.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0192.841] FindNextFileW (in: hFindFile=0x3e54cc8, lpFindFileData=0x805e718 | out: lpFindFileData=0x805e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f00f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.841] FindClose (in: hFindFile=0x3e54cc8 | out: hFindFile=0x3e54cc8) returned 1 [0192.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805e718) returned 1 [0192.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322610) returned 1 [0192.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6728) returned 1 Thread: id = 6125 os_tid = 0x1600 [0191.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8320930 [0191.467] wcscpy (in: _Dest=0x8320930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" [0191.467] wcscat (in: _Dest=0x8320930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" [0191.467] wcscat (in: _Dest=0x8320930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*" [0191.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805f588 [0191.467] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68fe5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d5340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099250 [0192.698] wcscmp (_String1=".", _String2=".") returned 0 [0192.698] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68fe5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d5340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.699] wcscmp (_String1="..", _String2=".") returned 1 [0192.699] wcscmp (_String1="..", _String2="..") returned 0 [0192.699] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d5340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.699] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.699] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e8550 [0192.699] wcscpy (in: _Dest=0x81e8550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" [0192.699] wcscat (in: _Dest=0x81e8550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" [0192.699] wcscat (in: _Dest=0x81e8550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" [0193.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0193.909] FindNextFileW (in: hFindFile=0x8099250, lpFindFileData=0x805f588 | out: lpFindFileData=0x805f588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d5340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.909] FindClose (in: hFindFile=0x8099250 | out: hFindFile=0x8099250) returned 1 [0193.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805f588) returned 1 [0193.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320930) returned 1 [0193.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6830) returned 1 Thread: id = 6126 os_tid = 0x160c [0191.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8321068 [0191.468] wcscpy (in: _Dest=0x8321068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" [0191.468] wcscat (in: _Dest=0x8321068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" [0191.468] wcscat (in: _Dest=0x8321068, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*" [0191.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x805dfe0 [0191.468] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c8a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6989850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0192.690] wcscmp (_String1=".", _String2=".") returned 0 [0192.690] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c8a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6989850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.690] wcscmp (_String1="..", _String2=".") returned 1 [0192.690] wcscmp (_String1="..", _String2="..") returned 0 [0192.690] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6989850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.690] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.690] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ecc40 [0192.690] wcscpy (in: _Dest=0x81ecc40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" [0192.691] wcscat (in: _Dest=0x81ecc40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" [0192.691] wcscat (in: _Dest=0x81ecc40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" [0194.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0194.002] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x805dfe0 | out: lpFindFileData=0x805dfe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6989850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.002] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0194.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x805dfe0) returned 1 [0194.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321068) returned 1 [0194.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6938) returned 1 Thread: id = 6127 os_tid = 0x1610 [0191.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8322718 [0191.469] wcscpy (in: _Dest=0x8322718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" [0191.469] wcscat (in: _Dest=0x8322718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" [0191.469] wcscat (in: _Dest=0x8322718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*" [0191.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8060660 [0191.469] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d74c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a1ef0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099090 [0192.694] wcscmp (_String1=".", _String2=".") returned 0 [0192.694] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d74c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a1ef0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.694] wcscmp (_String1="..", _String2=".") returned 1 [0192.694] wcscmp (_String1="..", _String2="..") returned 0 [0192.694] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a1ef0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.694] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.694] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ed0e0 [0192.694] wcscpy (in: _Dest=0x81ed0e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" [0192.694] wcscat (in: _Dest=0x81ed0e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" [0192.694] wcscat (in: _Dest=0x81ed0e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" [0194.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed0e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0194.012] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x8060660 | out: lpFindFileData=0x8060660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a1ef0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.012] FindClose (in: hFindFile=0x8099090 | out: hFindFile=0x8099090) returned 1 [0194.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8060660) returned 1 [0194.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322718) returned 1 [0194.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ee8) returned 1 Thread: id = 6128 os_tid = 0x1614 [0191.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8320e58 [0191.469] wcscpy (in: _Dest=0x8320e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" [0191.469] wcscat (in: _Dest=0x8320e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" [0191.469] wcscat (in: _Dest=0x8320e58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*" [0191.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8061000 [0191.469] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cff90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6995ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099790 [0192.695] wcscmp (_String1=".", _String2=".") returned 0 [0192.695] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cff90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6995ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.695] wcscmp (_String1="..", _String2=".") returned 1 [0192.695] wcscmp (_String1="..", _String2="..") returned 0 [0192.695] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6995ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.695] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.695] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ed208 [0192.695] wcscpy (in: _Dest=0x81ed208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" [0192.695] wcscat (in: _Dest=0x81ed208, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" [0192.695] wcscat (in: _Dest=0x81ed208, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" [0193.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0193.900] FindNextFileW (in: hFindFile=0x8099790, lpFindFileData=0x8061000 | out: lpFindFileData=0x8061000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6995ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.900] FindClose (in: hFindFile=0x8099790 | out: hFindFile=0x8099790) returned 1 [0193.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061000) returned 1 [0193.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8320e58) returned 1 [0193.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 Thread: id = 6129 os_tid = 0x154 [0191.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8322400 [0191.470] wcscpy (in: _Dest=0x8322400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" [0191.470] wcscat (in: _Dest=0x8322400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" [0191.470] wcscat (in: _Dest=0x8322400, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*" [0191.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80608c8 [0191.470] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6895610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe693b650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f50 [0192.679] wcscmp (_String1=".", _String2=".") returned 0 [0192.679] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6895610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe693b650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.680] wcscmp (_String1="..", _String2=".") returned 1 [0192.680] wcscmp (_String1="..", _String2="..") returned 0 [0192.680] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe693b650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.680] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.680] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ebf88 [0192.680] wcscpy (in: _Dest=0x81ebf88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" [0192.680] wcscat (in: _Dest=0x81ebf88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" [0192.680] wcscat (in: _Dest=0x81ebf88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" [0193.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ebf88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0193.982] FindNextFileW (in: hFindFile=0x8098f50, lpFindFileData=0x80608c8 | out: lpFindFileData=0x80608c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe693b650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.982] FindClose (in: hFindFile=0x8098f50 | out: hFindFile=0x8098f50) returned 1 [0193.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80608c8) returned 1 [0193.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322400) returned 1 [0193.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 Thread: id = 6130 os_tid = 0x1618 [0191.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8322508 [0191.471] wcscpy (in: _Dest=0x8322508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" [0191.471] wcscat (in: _Dest=0x8322508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" [0191.471] wcscat (in: _Dest=0x8322508, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*" [0191.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8061738 [0191.471] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x8061738 | out: lpFindFileData=0x8061738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cb170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe698e670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe698e670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0192.691] wcscmp (_String1=".", _String2=".") returned 0 [0192.691] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8061738 | out: lpFindFileData=0x8061738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cb170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe698e670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe698e670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.691] wcscmp (_String1="..", _String2=".") returned 1 [0192.691] wcscmp (_String1="..", _String2="..") returned 0 [0192.691] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8061738 | out: lpFindFileData=0x8061738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe698e670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6990d80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.691] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.691] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ecd68 [0192.691] wcscpy (in: _Dest=0x81ecd68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" [0192.692] wcscat (in: _Dest=0x81ecd68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" [0192.692] wcscat (in: _Dest=0x81ecd68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" [0194.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ecd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0194.004] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x8061738 | out: lpFindFileData=0x8061738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe698e670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6990d80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.005] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0194.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061738) returned 1 [0194.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8322508) returned 1 [0194.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cd8) returned 1 Thread: id = 6131 os_tid = 0x161c [0191.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335dd0 [0191.471] wcscpy (in: _Dest=0x8335dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" [0191.471] wcscat (in: _Dest=0x8335dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" [0191.471] wcscat (in: _Dest=0x8335dd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*" [0191.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8027ed8 [0191.472] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x8027ed8 | out: lpFindFileData=0x8027ed8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d4db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe699a9c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e556c8 [0192.425] wcscmp (_String1=".", _String2=".") returned 0 [0192.425] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x8027ed8 | out: lpFindFileData=0x8027ed8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d4db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe699a9c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.425] wcscmp (_String1="..", _String2=".") returned 1 [0192.425] wcscmp (_String1="..", _String2="..") returned 0 [0192.425] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x8027ed8 | out: lpFindFileData=0x8027ed8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe699a9c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.425] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.425] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81eb898 [0192.425] wcscpy (in: _Dest=0x81eb898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" [0192.425] wcscat (in: _Dest=0x81eb898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" [0192.425] wcscat (in: _Dest=0x81eb898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" [0192.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81eb898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0192.594] FindNextFileW (in: hFindFile=0x3e556c8, lpFindFileData=0x8027ed8 | out: lpFindFileData=0x8027ed8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe699a9c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.594] FindClose (in: hFindFile=0x3e556c8 | out: hFindFile=0x3e556c8) returned 1 [0192.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8027ed8) returned 1 [0192.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335dd0) returned 1 [0192.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 Thread: id = 6132 os_tid = 0x1620 [0191.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x8406650 [0191.475] wcscpy (in: _Dest=0x8406650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" [0191.475] wcscat (in: _Dest=0x8406650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" [0191.475] wcscat (in: _Dest=0x8406650, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*" [0191.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8024780 [0191.475] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x8024780 | out: lpFindFileData=0x8024780*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e8630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b7e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098d90 [0192.696] wcscmp (_String1=".", _String2=".") returned 0 [0192.696] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x8024780 | out: lpFindFileData=0x8024780*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e8630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b7e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.696] wcscmp (_String1="..", _String2=".") returned 1 [0192.696] wcscmp (_String1="..", _String2="..") returned 0 [0192.696] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x8024780 | out: lpFindFileData=0x8024780*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b7e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.696] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.696] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81ed330 [0192.696] wcscpy (in: _Dest=0x81ed330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" [0192.696] wcscat (in: _Dest=0x81ed330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" [0192.696] wcscat (in: _Dest=0x81ed330, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" [0193.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ed330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0193.902] FindNextFileW (in: hFindFile=0x8098d90, lpFindFileData=0x8024780 | out: lpFindFileData=0x8024780*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b7e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.902] FindClose (in: hFindFile=0x8098d90 | out: hFindFile=0x8098d90) returned 1 [0193.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8024780) returned 1 [0193.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 [0193.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5288) returned 1 Thread: id = 6133 os_tid = 0x1624 [0191.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x84060d8 [0191.475] wcscpy (in: _Dest=0x84060d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" [0191.475] wcscat (in: _Dest=0x84060d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" [0191.475] wcscat (in: _Dest=0x84060d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*" [0191.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8025388 [0191.476] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x8025388 | out: lpFindFileData=0x8025388*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6956400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6956400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098c10 [0192.684] wcscmp (_String1=".", _String2=".") returned 0 [0192.685] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x8025388 | out: lpFindFileData=0x8025388*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6956400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6956400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.685] wcscmp (_String1="..", _String2=".") returned 1 [0192.685] wcscmp (_String1="..", _String2="..") returned 0 [0192.685] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x8025388 | out: lpFindFileData=0x8025388*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6956400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6958b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.685] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.685] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x81ec550 [0192.685] wcscpy (in: _Dest=0x81ec550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" [0192.685] wcscat (in: _Dest=0x81ec550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" [0192.685] wcscat (in: _Dest=0x81ec550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" [0193.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0193.994] FindNextFileW (in: hFindFile=0x8098c10, lpFindFileData=0x8025388 | out: lpFindFileData=0x8025388*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6956400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6958b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.994] FindClose (in: hFindFile=0x8098c10 | out: hFindFile=0x8098c10) returned 1 [0193.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8025388) returned 1 [0193.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 [0193.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4e68) returned 1 Thread: id = 6134 os_tid = 0x1438 [0191.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335278 [0191.476] wcscpy (in: _Dest=0x8335278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0191.476] wcscat (in: _Dest=0x8335278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" [0191.476] wcscat (in: _Dest=0x8335278, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*" [0191.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8025d28 [0191.476] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x8025d28 | out: lpFindFileData=0x8025d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe689cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69479a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f90 [0192.681] wcscmp (_String1=".", _String2=".") returned 0 [0192.681] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x8025d28 | out: lpFindFileData=0x8025d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe689cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69479a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.681] wcscmp (_String1="..", _String2=".") returned 1 [0192.681] wcscmp (_String1="..", _String2="..") returned 0 [0192.681] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x8025d28 | out: lpFindFileData=0x8025d28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69479a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.681] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.681] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ec0b0 [0192.681] wcscpy (in: _Dest=0x81ec0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0192.681] wcscat (in: _Dest=0x81ec0b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" [0192.681] wcscat (in: _Dest=0x81ec0b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" [0193.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0193.984] FindNextFileW (in: hFindFile=0x8098f90, lpFindFileData=0x8025d28 | out: lpFindFileData=0x8025d28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69479a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.984] FindClose (in: hFindFile=0x8098f90 | out: hFindFile=0x8098f90) returned 1 [0193.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8025d28) returned 1 [0193.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335278) returned 1 [0193.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5390) returned 1 Thread: id = 6135 os_tid = 0x1628 [0191.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334f60 [0191.477] wcscpy (in: _Dest=0x8334f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0191.477] wcscat (in: _Dest=0x8334f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" [0191.477] wcscat (in: _Dest=0x8334f60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*" [0191.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8027c70 [0191.477] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x8027c70 | out: lpFindFileData=0x8027c70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b51e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6969c80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098850 [0192.687] wcscmp (_String1=".", _String2=".") returned 0 [0192.687] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8027c70 | out: lpFindFileData=0x8027c70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b51e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6969c80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.687] wcscmp (_String1="..", _String2=".") returned 1 [0192.687] wcscmp (_String1="..", _String2="..") returned 0 [0192.688] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8027c70 | out: lpFindFileData=0x8027c70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6969c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.688] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.688] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ec8c8 [0192.688] wcscpy (in: _Dest=0x81ec8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0192.688] wcscat (in: _Dest=0x81ec8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" [0192.688] wcscat (in: _Dest=0x81ec8c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" [0192.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0192.978] FindNextFileW (in: hFindFile=0x8098850, lpFindFileData=0x8027c70 | out: lpFindFileData=0x8027c70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6969c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.978] FindClose (in: hFindFile=0x8098850 | out: hFindFile=0x8098850) returned 1 [0192.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8027c70) returned 1 [0192.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334f60) returned 1 [0192.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321cc8) returned 1 Thread: id = 6136 os_tid = 0xbbc [0191.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8336718 [0191.478] wcscpy (in: _Dest=0x8336718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0191.478] wcscat (in: _Dest=0x8336718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" [0191.478] wcscat (in: _Dest=0x8336718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*" [0191.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8027a08 [0191.478] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x8027a08 | out: lpFindFileData=0x8027a08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b03c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6964e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80995d0 [0192.688] wcscmp (_String1=".", _String2=".") returned 0 [0192.688] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8027a08 | out: lpFindFileData=0x8027a08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b03c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6964e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.688] wcscmp (_String1="..", _String2=".") returned 1 [0192.688] wcscmp (_String1="..", _String2="..") returned 0 [0192.688] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8027a08 | out: lpFindFileData=0x8027a08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6964e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.688] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.689] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ec9f0 [0192.689] wcscpy (in: _Dest=0x81ec9f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0192.689] wcscat (in: _Dest=0x81ec9f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" [0192.689] wcscat (in: _Dest=0x81ec9f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" [0193.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0193.996] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x8027a08 | out: lpFindFileData=0x8027a08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6964e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.997] FindClose (in: hFindFile=0x80995d0 | out: hFindFile=0x80995d0) returned 1 [0193.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8027a08) returned 1 [0193.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8336718) returned 1 [0193.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83222f8) returned 1 Thread: id = 6137 os_tid = 0x1630 [0191.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335698 [0191.485] wcscpy (in: _Dest=0x8335698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0191.485] wcscat (in: _Dest=0x8335698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" [0191.485] wcscat (in: _Dest=0x8335698, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*" [0191.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80277a0 [0191.485] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x80277a0 | out: lpFindFileData=0x80277a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c3c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6982320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0192.692] wcscmp (_String1=".", _String2=".") returned 0 [0192.692] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x80277a0 | out: lpFindFileData=0x80277a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c3c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6982320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.692] wcscmp (_String1="..", _String2=".") returned 1 [0192.692] wcscmp (_String1="..", _String2="..") returned 0 [0192.692] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x80277a0 | out: lpFindFileData=0x80277a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6982320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.692] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.692] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ece90 [0192.692] wcscpy (in: _Dest=0x81ece90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0192.693] wcscat (in: _Dest=0x81ece90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" [0192.693] wcscat (in: _Dest=0x81ece90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" [0194.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ece90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0194.007] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x80277a0 | out: lpFindFileData=0x80277a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6982320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.007] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0194.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80277a0) returned 1 [0194.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335698) returned 1 [0194.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83217a0) returned 1 Thread: id = 6138 os_tid = 0x143c [0191.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83357a0 [0191.486] wcscpy (in: _Dest=0x83357a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0191.486] wcscat (in: _Dest=0x83357a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" [0191.486] wcscat (in: _Dest=0x83357a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*" [0191.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8027538 [0191.486] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x8027538 | out: lpFindFileData=0x8027538*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68907f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6936830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80997d0 [0192.682] wcscmp (_String1=".", _String2=".") returned 0 [0192.682] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x8027538 | out: lpFindFileData=0x8027538*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68907f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6936830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.682] wcscmp (_String1="..", _String2=".") returned 1 [0192.682] wcscmp (_String1="..", _String2="..") returned 0 [0192.682] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x8027538 | out: lpFindFileData=0x8027538*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6936830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.682] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.682] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81ec1d8 [0192.682] wcscpy (in: _Dest=0x81ec1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0192.682] wcscat (in: _Dest=0x81ec1d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" [0192.682] wcscat (in: _Dest=0x81ec1d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" [0193.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ec1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0193.987] FindNextFileW (in: hFindFile=0x80997d0, lpFindFileData=0x8027538 | out: lpFindFileData=0x8027538*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6936830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.987] FindClose (in: hFindFile=0x80997d0 | out: hFindFile=0x80997d0) returned 1 [0193.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8027538) returned 1 [0193.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83357a0) returned 1 [0193.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321698) returned 1 Thread: id = 6139 os_tid = 0xb80 [0191.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x83358a8 [0191.487] wcscpy (in: _Dest=0x83358a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0191.487] wcscat (in: _Dest=0x83358a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" [0191.487] wcscat (in: _Dest=0x83358a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*" [0191.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80272d0 [0191.487] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x80272d0 | out: lpFindFileData=0x80272d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68efb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c41d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80993d0 [0192.699] wcscmp (_String1=".", _String2=".") returned 0 [0192.699] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80272d0 | out: lpFindFileData=0x80272d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68efb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c41d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.699] wcscmp (_String1="..", _String2=".") returned 1 [0192.700] wcscmp (_String1="..", _String2="..") returned 0 [0192.700] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80272d0 | out: lpFindFileData=0x80272d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c41d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.700] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.700] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e87a0 [0192.700] wcscpy (in: _Dest=0x81e87a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0192.700] wcscat (in: _Dest=0x81e87a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" [0192.700] wcscat (in: _Dest=0x81e87a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" [0193.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e87a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0193.911] FindNextFileW (in: hFindFile=0x80993d0, lpFindFileData=0x80272d0 | out: lpFindFileData=0x80272d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c41d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.911] FindClose (in: hFindFile=0x80993d0 | out: hFindFile=0x80993d0) returned 1 [0193.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80272d0) returned 1 [0193.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83358a8) returned 1 [0193.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321488) returned 1 Thread: id = 6140 os_tid = 0xb70 [0191.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8333590 [0191.779] wcscpy (in: _Dest=0x8333590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0191.779] wcscat (in: _Dest=0x8333590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" [0191.779] wcscat (in: _Dest=0x8333590, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*" [0191.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3ae10 [0191.779] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690d020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e8bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e8bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80994d0 [0192.703] wcscmp (_String1=".", _String2=".") returned 0 [0192.703] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690d020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e8bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e8bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.703] wcscmp (_String1="..", _String2=".") returned 1 [0192.703] wcscmp (_String1="..", _String2="..") returned 0 [0192.703] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e8bc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69eb2d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.703] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.703] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x81e8fb8 [0192.703] wcscpy (in: _Dest=0x81e8fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0192.704] wcscat (in: _Dest=0x81e8fb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" [0192.704] wcscat (in: _Dest=0x81e8fb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" [0193.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0193.921] FindNextFileW (in: hFindFile=0x80994d0, lpFindFileData=0x3f3ae10 | out: lpFindFileData=0x3f3ae10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e8bc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69eb2d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.921] FindClose (in: hFindFile=0x80994d0 | out: hFindFile=0x80994d0) returned 1 [0193.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ae10) returned 1 [0193.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333590) returned 1 [0193.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8321fe0) returned 1 Thread: id = 6141 os_tid = 0x1440 [0191.780] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0204.329] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0214.733] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1db4 [0214.734] GetFileSizeEx (in: hFile=0x1db4, lpFileSize=0x10a4fd68 | out: lpFileSize=0x10a4fd68*=170) returned 1 [0214.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064290 [0214.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064448 [0214.734] NtQuerySystemTime (in: CurrentTime=0x10a4fcf0 | out: CurrentTime=0x10a4fcf0*=132471540824592000) returned 0x0 [0214.734] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x572a400 [0214.734] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x696d7abf [0214.734] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x5acd62ea [0214.734] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x31160bae [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x1a5ab53b [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x7b90fd0c [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x265261a5 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x69ee04ff [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x24c9b1c3 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x65179409 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x386350c0 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x19b0a2b6 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x6a27a3c5 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x780b4d93 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x47d5ce52 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0xa406847 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x221767b2 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x12cdffd6 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0xf44ff25 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x1df077c3 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x52eaa6a1 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x6003efba [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x7eb053c [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x2a84d46a [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x5f600452 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x601b130c [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x4004f149 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0xd742f91 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x6bf113d [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x690a4512 [0214.735] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x134a20c7 [0214.736] RtlRandomEx (in: Seed=0x10a4fce8 | out: Seed=0x10a4fce8) returned 0x220e0d17 [0214.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14af6c88 [0214.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14afa890 [0214.747] ReadFile (in: hFile=0x1db4, lpBuffer=0x14af6c88, nNumberOfBytesToRead=0xaa, lpNumberOfBytesRead=0x10a4fce4, lpOverlapped=0x0 | out: lpBuffer=0x14af6c88*, lpNumberOfBytesRead=0x10a4fce4*=0xaa, lpOverlapped=0x0) returned 1 [0214.749] SetFilePointerEx (in: hFile=0x1db4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.750] WriteFile (in: hFile=0x1db4, lpBuffer=0x14afa890*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0x10a4fce8, lpOverlapped=0x0 | out: lpBuffer=0x14afa890*, lpNumberOfBytesWritten=0x10a4fce8*=0xaa, lpOverlapped=0x0) returned 1 [0219.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ef8 [0219.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e58 [0219.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e58) returned 1 [0219.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14afa890) returned 1 [0219.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14af6c88) returned 1 [0219.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84030b0) returned 1 [0219.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5100) returned 1 [0219.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697b0 [0219.802] SetFilePointerEx (in: hFile=0x1db4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.802] WriteFile (in: hFile=0x1db4, lpBuffer=0x8406f10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10a4fd5c, lpOverlapped=0x0 | out: lpBuffer=0x8406f10*, lpNumberOfBytesWritten=0x10a4fd5c*=0x10c, lpOverlapped=0x0) returned 1 [0220.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406f10) returned 1 [0220.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698a0) returned 1 [0220.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e58) returned 1 [0220.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697b0) returned 1 [0220.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ef8) returned 1 [0220.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064290) returned 1 [0220.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064420) returned 1 [0220.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064470) returned 1 [0220.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f4278 [0220.522] wcscpy (in: _Dest=0x81f4278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" [0220.522] wcscat (in: _Dest=0x81f4278, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.f0dbec" [0220.522] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.f0dbec", NtPathName=0x10a4fce0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3efa9d0 [0220.821] FlushFileBuffers (hFile=0x1db4) returned 1 [0220.832] CloseHandle (hObject=0x1db4) returned 1 [0220.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x81f3b28 [0220.883] wcscpy (in: _Dest=0x81f3b28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" [0220.883] wcscat (in: _Dest=0x81f3b28, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" [0220.883] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\f0dbec-readme.txt")) returned 0xffffffff [0220.883] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf00 [0220.901] WriteFile (in: hFile=0xf00, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x10a4fd04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x10a4fd04*=0x70c, lpOverlapped=0x0) returned 1 [0220.914] CloseHandle (hObject=0xf00) returned 1 [0220.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3b28) returned 1 [0220.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9330) returned 1 Thread: id = 6142 os_tid = 0xb7c [0191.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css")) returned 0x20 [0195.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0195.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.005] GetLastError () returned 0x5 [0195.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0195.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 6143 os_tid = 0xb64 [0191.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d41af8 [0191.797] wcscpy (in: _Dest=0x3d41af8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0191.797] wcscat (in: _Dest=0x3d41af8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\" [0191.797] wcscat (in: _Dest=0x3d41af8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*" [0191.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c3b8 [0191.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098910 [0195.006] wcscmp (_String1=".", _String2=".") returned 0 [0195.006] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.006] wcscmp (_String1="..", _String2=".") returned 1 [0195.006] wcscmp (_String1="..", _String2="..") returned 0 [0195.006] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.006] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.006] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e34c40 [0195.007] wcscpy (in: _Dest=0x3e34c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0195.007] wcscat (in: _Dest=0x3e34c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\" [0195.007] wcscat (in: _Dest=0x3e34c40, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" [0198.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0198.417] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0198.417] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0198.417] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0198.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e35730 [0198.417] wcscpy (in: _Dest=0x3e35730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0198.417] wcscat (in: _Dest=0x3e35730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\" [0198.418] wcscat (in: _Dest=0x3e35730, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" [0198.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0198.419] FindNextFileW (in: hFindFile=0x8098910, lpFindFileData=0x3f3c3b8 | out: lpFindFileData=0x3f3c3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0198.419] FindClose (in: hFindFile=0x8098910 | out: hFindFile=0x8098910) returned 1 [0198.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3b8) returned 1 [0198.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41af8) returned 1 [0198.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6c8) returned 1 Thread: id = 6144 os_tid = 0x1444 [0191.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css")) returned 0x20 [0195.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0195.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.022] GetLastError () returned 0x5 [0195.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0195.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 Thread: id = 6145 os_tid = 0xde0 [0191.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da098 [0191.799] wcscpy (in: _Dest=0x81da098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0191.799] wcscat (in: _Dest=0x81da098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0191.799] wcscat (in: _Dest=0x81da098, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*" [0191.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bee8 [0191.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f79a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099050 [0194.956] wcscmp (_String1=".", _String2=".") returned 0 [0194.956] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f79a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.956] wcscmp (_String1="..", _String2=".") returned 1 [0194.956] wcscmp (_String1="..", _String2="..") returned 0 [0194.956] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0194.956] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0194.956] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0194.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e357f8 [0194.956] wcscpy (in: _Dest=0x3e357f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0194.956] wcscat (in: _Dest=0x3e357f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0194.956] wcscat (in: _Dest=0x3e357f8, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" [0198.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e357f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2594 [0198.422] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0198.422] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0198.422] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0198.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e34d08 [0198.423] wcscpy (in: _Dest=0x3e34d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0198.423] wcscat (in: _Dest=0x3e34d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0198.423] wcscat (in: _Dest=0x3e34d08, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" [0198.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0198.424] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0198.424] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0198.424] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0198.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e34088 [0198.424] wcscpy (in: _Dest=0x3e34088, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0198.425] wcscat (in: _Dest=0x3e34088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0198.425] wcscat (in: _Dest=0x3e34088, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" [0198.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0198.426] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0198.426] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0198.426] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0198.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e351b8 [0198.426] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0198.427] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0198.427] wcscat (in: _Dest=0x3e351b8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" [0198.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e351b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0198.428] FindNextFileW (in: hFindFile=0x8099050, lpFindFileData=0x3f3bee8 | out: lpFindFileData=0x3f3bee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0198.428] FindClose (in: hFindFile=0x8099050 | out: hFindFile=0x8099050) returned 1 [0198.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bee8) returned 1 [0198.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da098) returned 1 [0198.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da408) returned 1 Thread: id = 6146 os_tid = 0x133c [0191.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css")) returned 0x20 [0195.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0195.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.020] GetLastError () returned 0x5 [0195.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0195.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d410e8) returned 1 Thread: id = 6147 os_tid = 0xe48 [0191.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css")) returned 0x20 [0195.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", dwFileAttributes=0x20) returned 0 [0195.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.018] GetLastError () returned 0x5 [0195.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", dwFileAttributes=0x20) returned 0 [0195.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c78) returned 1 Thread: id = 6148 os_tid = 0x1344 [0191.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81d9fe8 [0191.800] wcscpy (in: _Dest=0x81d9fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0191.800] wcscat (in: _Dest=0x81d9fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\" [0191.800] wcscat (in: _Dest=0x81d9fe8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*" [0191.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3c620 [0191.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099550 [0194.979] wcscmp (_String1=".", _String2=".") returned 0 [0194.979] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.979] wcscmp (_String1="..", _String2=".") returned 1 [0194.979] wcscmp (_String1="..", _String2="..") returned 0 [0194.979] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0194.991] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0194.991] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0194.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81d5d08 [0194.991] wcscpy (in: _Dest=0x81d5d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0194.991] wcscat (in: _Dest=0x81d5d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\" [0194.991] wcscat (in: _Dest=0x81d5d08, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" [0195.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0195.685] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.685] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.685] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3339a8 [0195.685] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0195.685] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\" [0195.685] wcscat (in: _Dest=0x3339a8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" [0195.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0195.686] FindNextFileW (in: hFindFile=0x8099550, lpFindFileData=0x3f3c620 | out: lpFindFileData=0x3f3c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.686] FindClose (in: hFindFile=0x8099550 | out: hFindFile=0x8099550) returned 1 [0195.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c620) returned 1 [0195.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9fe8) returned 1 [0195.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d098) returned 1 Thread: id = 6149 os_tid = 0x1448 [0191.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css")) returned 0x20 [0194.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0194.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.954] GetLastError () returned 0x5 [0194.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0194.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da148) returned 1 Thread: id = 6150 os_tid = 0x144c [0191.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41e90 [0191.801] wcscpy (in: _Dest=0x3d41e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0191.802] wcscat (in: _Dest=0x3d41e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0191.802] wcscat (in: _Dest=0x3d41e90, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*" [0191.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3caf0 [0191.802] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099410 [0194.993] wcscmp (_String1=".", _String2=".") returned 0 [0194.993] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.994] wcscmp (_String1="..", _String2=".") returned 1 [0194.994] wcscmp (_String1="..", _String2="..") returned 0 [0194.994] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0194.994] wcscmp (_String1="background.gif", _String2=".") returned 1 [0194.994] wcscmp (_String1="background.gif", _String2="..") returned 1 [0194.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x81f2de8 [0194.994] wcscpy (in: _Dest=0x81f2de8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0194.994] wcscat (in: _Dest=0x81f2de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0194.994] wcscat (in: _Dest=0x81f2de8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" [0195.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f2de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0195.739] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0195.739] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0195.739] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0195.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1b558 [0195.739] wcscpy (in: _Dest=0x3e1b558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0195.739] wcscat (in: _Dest=0x3e1b558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0195.739] wcscat (in: _Dest=0x3e1b558, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" [0195.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1b558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a68 [0195.740] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.740] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.740] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c808 [0195.740] wcscpy (in: _Dest=0x3e1c808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0195.740] wcscat (in: _Dest=0x3e1c808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0195.740] wcscat (in: _Dest=0x3e1c808, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" [0195.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0195.741] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.741] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.741] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1ca78 [0195.742] wcscpy (in: _Dest=0x3e1ca78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0195.742] wcscat (in: _Dest=0x3e1ca78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0195.742] wcscat (in: _Dest=0x3e1ca78, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" [0195.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1ca78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0195.743] FindNextFileW (in: hFindFile=0x8099410, lpFindFileData=0x3f3caf0 | out: lpFindFileData=0x3f3caf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.743] FindClose (in: hFindFile=0x8099410 | out: hFindFile=0x8099410) returned 1 [0195.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3caf0) returned 1 [0195.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e90) returned 1 [0195.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41f48) returned 1 Thread: id = 6151 os_tid = 0x145c [0191.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css")) returned 0x20 [0194.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0194.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.951] GetLastError () returned 0x5 [0194.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0194.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5d08) returned 1 Thread: id = 6152 os_tid = 0x1460 [0191.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3d41d20 [0191.803] wcscpy (in: _Dest=0x3d41d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0191.803] wcscat (in: _Dest=0x3d41d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0191.803] wcscat (in: _Dest=0x3d41d20, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*" [0191.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3cfc0 [0191.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098dd0 [0194.999] wcscmp (_String1=".", _String2=".") returned 0 [0194.999] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.999] wcscmp (_String1="..", _String2=".") returned 1 [0194.999] wcscmp (_String1="..", _String2="..") returned 0 [0194.999] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0194.999] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0195.000] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0195.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c738 [0195.000] wcscpy (in: _Dest=0x3e1c738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0195.000] wcscat (in: _Dest=0x3e1c738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0195.000] wcscat (in: _Dest=0x3e1c738, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" [0195.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0195.689] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.689] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.689] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e1c9a8 [0195.689] wcscpy (in: _Dest=0x3e1c9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0195.689] wcscat (in: _Dest=0x3e1c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0195.689] wcscat (in: _Dest=0x3e1c9a8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" [0195.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0195.690] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.690] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.690] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1bb08 [0195.690] wcscpy (in: _Dest=0x3e1bb08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0195.690] wcscat (in: _Dest=0x3e1bb08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0195.690] wcscat (in: _Dest=0x3e1bb08, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" [0195.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1bb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0195.691] FindNextFileW (in: hFindFile=0x8098dd0, lpFindFileData=0x3f3cfc0 | out: lpFindFileData=0x3f3cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.691] FindClose (in: hFindFile=0x8098dd0 | out: hFindFile=0x8098dd0) returned 1 [0195.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cfc0) returned 1 [0195.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d20) returned 1 [0195.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41988) returned 1 Thread: id = 6153 os_tid = 0x1464 [0191.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css")) returned 0x20 [0194.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0194.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.949] GetLastError () returned 0x5 [0194.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0194.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5dc8) returned 1 Thread: id = 6154 os_tid = 0x1468 [0191.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css")) returned 0x20 [0194.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0194.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.961] GetLastError () returned 0x5 [0194.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0194.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da778) returned 1 Thread: id = 6155 os_tid = 0x146c [0191.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x81da2a8 [0191.806] wcscpy (in: _Dest=0x81da2a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0191.806] wcscat (in: _Dest=0x81da2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0191.806] wcscat (in: _Dest=0x81da2a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*" [0191.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3bc80 [0191.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099650 [0195.002] wcscmp (_String1=".", _String2=".") returned 0 [0195.002] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.002] wcscmp (_String1="..", _String2=".") returned 1 [0195.002] wcscmp (_String1="..", _String2="..") returned 0 [0195.002] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0195.002] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0195.002] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0195.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x81d5dc8 [0195.002] wcscpy (in: _Dest=0x81d5dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0195.002] wcscat (in: _Dest=0x81d5dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0195.002] wcscat (in: _Dest=0x81d5dc8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" [0198.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d5dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0198.309] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0198.309] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0198.309] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0198.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0198.309] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0198.309] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0198.309] wcscat (in: _Dest=0x3336a8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" [0198.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0198.310] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0198.310] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0198.310] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0198.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333fa8 [0198.310] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0198.310] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0198.311] wcscat (in: _Dest=0x333fa8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" [0198.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a84 [0198.312] FindNextFileW (in: hFindFile=0x8099650, lpFindFileData=0x3f3bc80 | out: lpFindFileData=0x3f3bc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0198.312] FindClose (in: hFindFile=0x8099650 | out: hFindFile=0x8099650) returned 1 [0198.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc80) returned 1 [0198.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da2a8) returned 1 [0198.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d530) returned 1 Thread: id = 6156 os_tid = 0x1470 [0191.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css")) returned 0x20 [0194.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0194.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.959] GetLastError () returned 0x5 [0194.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0194.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa38) returned 1 Thread: id = 6157 os_tid = 0xac4 [0191.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css")) returned 0x20 [0194.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", dwFileAttributes=0x20) returned 0 [0194.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.957] GetLastError () returned 0x5 [0194.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", dwFileAttributes=0x20) returned 0 [0194.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40790) returned 1 Thread: id = 6158 os_tid = 0x520 [0191.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css")) returned 0x20 [0195.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0195.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.015] GetLastError () returned 0x5 [0195.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0195.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da1f8) returned 1 Thread: id = 6159 os_tid = 0x1474 [0191.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d40a70 [0191.808] wcscpy (in: _Dest=0x3d40a70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0191.808] wcscat (in: _Dest=0x3d40a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0191.808] wcscat (in: _Dest=0x3d40a70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*" [0191.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b548 [0191.808] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099090 [0195.001] wcscmp (_String1=".", _String2=".") returned 0 [0195.001] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.001] wcscmp (_String1="..", _String2=".") returned 1 [0195.001] wcscmp (_String1="..", _String2="..") returned 0 [0195.001] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0195.001] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0195.001] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0195.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e358c0 [0195.001] wcscpy (in: _Dest=0x3e358c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0195.001] wcscat (in: _Dest=0x3e358c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0195.001] wcscat (in: _Dest=0x3e358c0, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" [0203.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e358c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0203.045] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0203.046] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0203.046] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0203.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e351b8 [0203.046] wcscpy (in: _Dest=0x3e351b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0203.046] wcscat (in: _Dest=0x3e351b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0203.046] wcscat (in: _Dest=0x3e351b8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" [0203.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e351b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0203.047] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0203.047] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0203.047] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0203.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e34088 [0203.047] wcscpy (in: _Dest=0x3e34088, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0203.047] wcscat (in: _Dest=0x3e34088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0203.047] wcscat (in: _Dest=0x3e34088, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" [0203.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e34088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0203.048] FindNextFileW (in: hFindFile=0x8099090, lpFindFileData=0x3f3b548 | out: lpFindFileData=0x3f3b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0203.048] FindClose (in: hFindFile=0x8099090 | out: hFindFile=0x8099090) returned 1 [0203.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b548) returned 1 [0203.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a70) returned 1 [0203.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8d8) returned 1 Thread: id = 6160 os_tid = 0x2de4 [0191.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css")) returned 0x20 [0194.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0194.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.997] GetLastError () returned 0x5 [0194.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0194.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409b8) returned 1 Thread: id = 6161 os_tid = 0x2de8 [0191.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css")) returned 0x20 [0194.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0194.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.995] GetLastError () returned 0x5 [0194.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0194.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40848) returned 1 Thread: id = 6162 os_tid = 0xb0 [0191.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css")) returned 0x20 [0195.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0195.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.009] GetLastError () returned 0x5 [0195.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0195.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5e88) returned 1 Thread: id = 6163 os_tid = 0x2df0 [0191.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2d7d0 [0191.810] wcscpy (in: _Dest=0x3e2d7d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0191.810] wcscat (in: _Dest=0x3e2d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\" [0191.810] wcscat (in: _Dest=0x3e2d7d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*" [0191.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f3b2e0 [0191.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098990 [0195.003] wcscmp (_String1=".", _String2=".") returned 0 [0195.003] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.003] wcscmp (_String1="..", _String2=".") returned 1 [0195.003] wcscmp (_String1="..", _String2="..") returned 0 [0195.003] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.003] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.003] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d6008 [0195.004] wcscpy (in: _Dest=0x81d6008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0195.004] wcscat (in: _Dest=0x81d6008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\" [0195.004] wcscat (in: _Dest=0x81d6008, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" [0195.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d6008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0195.694] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.694] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.694] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333ee8 [0195.694] wcscpy (in: _Dest=0x333ee8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0195.694] wcscat (in: _Dest=0x333ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\" [0195.694] wcscat (in: _Dest=0x333ee8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" [0195.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0195.695] FindNextFileW (in: hFindFile=0x8098990, lpFindFileData=0x3f3b2e0 | out: lpFindFileData=0x3f3b2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.695] FindClose (in: hFindFile=0x8098990 | out: hFindFile=0x8098990) returned 1 [0195.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b2e0) returned 1 [0195.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d7d0) returned 1 [0195.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dd10) returned 1 Thread: id = 6164 os_tid = 0x2df4 [0191.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css")) returned 0x20 [0194.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0194.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.937] GetLastError () returned 0x5 [0194.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0194.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daae8) returned 1 Thread: id = 6165 os_tid = 0x2df8 [0191.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css")) returned 0x20 [0194.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0194.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.945] GetLastError () returned 0x5 [0194.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0194.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9858) returned 1 Thread: id = 6166 os_tid = 0x2dfc [0191.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81d9bc8 [0191.811] wcscpy (in: _Dest=0x81d9bc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0191.811] wcscat (in: _Dest=0x81d9bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0191.812] wcscat (in: _Dest=0x81d9bc8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*" [0191.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8027068 [0191.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x8027068 | out: lpFindFileData=0x8027068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098ed0 [0195.007] wcscmp (_String1=".", _String2=".") returned 0 [0195.007] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x8027068 | out: lpFindFileData=0x8027068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.007] wcscmp (_String1="..", _String2=".") returned 1 [0195.008] wcscmp (_String1="..", _String2="..") returned 0 [0195.008] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x8027068 | out: lpFindFileData=0x8027068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0195.008] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0195.008] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0195.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81d60c8 [0195.008] wcscpy (in: _Dest=0x81d60c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0195.008] wcscat (in: _Dest=0x81d60c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0195.008] wcscat (in: _Dest=0x81d60c8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" [0195.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d60c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a1c [0195.697] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x8027068 | out: lpFindFileData=0x8027068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.697] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.697] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333228 [0195.697] wcscpy (in: _Dest=0x333228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0195.697] wcscat (in: _Dest=0x333228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0195.697] wcscat (in: _Dest=0x333228, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" [0195.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0195.698] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x8027068 | out: lpFindFileData=0x8027068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.698] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.698] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333e28 [0195.698] wcscpy (in: _Dest=0x333e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0195.698] wcscat (in: _Dest=0x333e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0195.698] wcscat (in: _Dest=0x333e28, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" [0195.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0195.699] FindNextFileW (in: hFindFile=0x8098ed0, lpFindFileData=0x8027068 | out: lpFindFileData=0x8027068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.699] FindClose (in: hFindFile=0x8098ed0 | out: hFindFile=0x8098ed0) returned 1 [0195.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8027068) returned 1 [0195.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9bc8) returned 1 [0195.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dc68) returned 1 Thread: id = 6167 os_tid = 0x1478 [0191.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css")) returned 0x20 [0194.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0194.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.947] GetLastError () returned 0x5 [0194.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0194.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da568) returned 1 Thread: id = 6168 os_tid = 0x2e04 [0191.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css")) returned 0x20 [0194.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0194.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.943] GetLastError () returned 0x5 [0194.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0194.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d403f8) returned 1 Thread: id = 6169 os_tid = 0x2e08 [0191.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif")) returned 0x20 [0192.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.357] GetLastError () returned 0x5 [0192.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae3e8) returned 1 Thread: id = 6170 os_tid = 0x2e0c [0191.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif")) returned 0x20 [0192.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.356] GetLastError () returned 0x5 [0192.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80217d0) returned 1 Thread: id = 6171 os_tid = 0x2e10 [0191.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv")) returned 0x20 [0191.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV", dwFileAttributes=0x20) returned 0 [0191.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.976] GetLastError () returned 0x5 [0191.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV", dwFileAttributes=0x20) returned 0 [0191.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f668) returned 1 Thread: id = 6172 os_tid = 0x2e14 [0191.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml")) returned 0x20 [0191.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML", dwFileAttributes=0x20) returned 0 [0191.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.978] GetLastError () returned 0x5 [0191.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML", dwFileAttributes=0x20) returned 0 [0191.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 6173 os_tid = 0x2e18 [0191.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv")) returned 0x20 [0198.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV", dwFileAttributes=0x20) returned 0 [0198.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.646] GetLastError () returned 0x5 [0198.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV", dwFileAttributes=0x20) returned 0 [0198.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 6174 os_tid = 0x2e1c [0191.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml")) returned 0x20 [0198.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML", dwFileAttributes=0x20) returned 0 [0198.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.617] GetLastError () returned 0x5 [0198.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML", dwFileAttributes=0x20) returned 0 [0198.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30050) returned 1 Thread: id = 6175 os_tid = 0x2e20 [0192.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml")) returned 0x20 [0198.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML", dwFileAttributes=0x20) returned 0 [0198.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.595] GetLastError () returned 0x5 [0198.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML", dwFileAttributes=0x20) returned 0 [0198.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f858) returned 1 Thread: id = 6176 os_tid = 0x2e24 [0192.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv")) returned 0x20 [0198.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV", dwFileAttributes=0x20) returned 0 [0198.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.618] GetLastError () returned 0x5 [0198.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV", dwFileAttributes=0x20) returned 0 [0198.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 6177 os_tid = 0x2e28 [0192.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml")) returned 0x20 [0198.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML", dwFileAttributes=0x20) returned 0 [0198.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.593] GetLastError () returned 0x5 [0198.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML", dwFileAttributes=0x20) returned 0 [0198.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 Thread: id = 6178 os_tid = 0x2e2c [0192.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv")) returned 0x20 [0198.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV", dwFileAttributes=0x20) returned 0 [0198.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.598] GetLastError () returned 0x5 [0198.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV", dwFileAttributes=0x20) returned 0 [0198.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 6179 os_tid = 0x2e30 [0192.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml")) returned 0x20 [0198.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML", dwFileAttributes=0x20) returned 0 [0198.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.597] GetLastError () returned 0x5 [0198.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML", dwFileAttributes=0x20) returned 0 [0198.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc10) returned 1 Thread: id = 6180 os_tid = 0x2e34 [0192.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml")) returned 0x20 [0198.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML", dwFileAttributes=0x20) returned 0 [0198.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.620] GetLastError () returned 0x5 [0198.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML", dwFileAttributes=0x20) returned 0 [0198.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 6181 os_tid = 0x2c0 [0192.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv")) returned 0x20 [0198.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV", dwFileAttributes=0x20) returned 0 [0198.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.607] GetLastError () returned 0x5 [0198.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV", dwFileAttributes=0x20) returned 0 [0198.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 6182 os_tid = 0x414 [0192.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml")) returned 0x20 [0198.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML", dwFileAttributes=0x20) returned 0 [0198.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.621] GetLastError () returned 0x5 [0198.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML", dwFileAttributes=0x20) returned 0 [0198.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 6183 os_tid = 0xb08 [0192.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv")) returned 0x20 [0198.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV", dwFileAttributes=0x20) returned 0 [0198.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.606] GetLastError () returned 0x5 [0198.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV", dwFileAttributes=0x20) returned 0 [0198.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 6184 os_tid = 0x7bc [0192.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv")) returned 0x20 [0198.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV", dwFileAttributes=0x20) returned 0 [0198.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.633] GetLastError () returned 0x5 [0198.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV", dwFileAttributes=0x20) returned 0 [0198.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 6185 os_tid = 0xfc8 [0192.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml")) returned 0x20 [0198.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML", dwFileAttributes=0x20) returned 0 [0198.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.625] GetLastError () returned 0x5 [0198.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML", dwFileAttributes=0x20) returned 0 [0198.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 6186 os_tid = 0x16a0 [0192.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv")) returned 0x20 [0198.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV", dwFileAttributes=0x20) returned 0 [0198.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.612] GetLastError () returned 0x5 [0198.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV", dwFileAttributes=0x20) returned 0 [0198.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 6187 os_tid = 0x16a4 [0192.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml")) returned 0x20 [0198.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML", dwFileAttributes=0x20) returned 0 [0198.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.624] GetLastError () returned 0x5 [0198.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML", dwFileAttributes=0x20) returned 0 [0198.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 6188 os_tid = 0x16a8 [0192.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv")) returned 0x20 [0198.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV", dwFileAttributes=0x20) returned 0 [0198.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.631] GetLastError () returned 0x5 [0198.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV", dwFileAttributes=0x20) returned 0 [0198.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 6189 os_tid = 0x16ac [0192.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml")) returned 0x20 [0198.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML", dwFileAttributes=0x20) returned 0 [0198.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.591] GetLastError () returned 0x5 [0198.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML", dwFileAttributes=0x20) returned 0 [0198.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 6190 os_tid = 0x16b0 [0192.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv")) returned 0x20 [0198.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV", dwFileAttributes=0x20) returned 0 [0198.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.614] GetLastError () returned 0x5 [0198.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV", dwFileAttributes=0x20) returned 0 [0198.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 6191 os_tid = 0x1010 [0192.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml")) returned 0x20 [0198.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML", dwFileAttributes=0x20) returned 0 [0198.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.615] GetLastError () returned 0x5 [0198.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML", dwFileAttributes=0x20) returned 0 [0198.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 6192 os_tid = 0x16b4 [0192.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv")) returned 0x20 [0198.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV", dwFileAttributes=0x20) returned 0 [0198.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.630] GetLastError () returned 0x5 [0198.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV", dwFileAttributes=0x20) returned 0 [0198.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfe60) returned 1 Thread: id = 6193 os_tid = 0x1018 [0192.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml")) returned 0x20 [0198.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML", dwFileAttributes=0x20) returned 0 [0198.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.628] GetLastError () returned 0x5 [0198.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML", dwFileAttributes=0x20) returned 0 [0198.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 6194 os_tid = 0x16b8 [0192.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv")) returned 0x20 [0198.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV", dwFileAttributes=0x20) returned 0 [0198.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.627] GetLastError () returned 0x5 [0198.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV", dwFileAttributes=0x20) returned 0 [0198.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 6195 os_tid = 0x2e70 [0192.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml")) returned 0x20 [0198.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML", dwFileAttributes=0x20) returned 0 [0198.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.622] GetLastError () returned 0x5 [0198.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML", dwFileAttributes=0x20) returned 0 [0198.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 6196 os_tid = 0x2e74 [0192.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst")) returned 0x20 [0192.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST", dwFileAttributes=0x20) returned 0 [0192.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.211] GetLastError () returned 0x5 [0192.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST", dwFileAttributes=0x20) returned 0 [0192.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ad18) returned 1 Thread: id = 6197 os_tid = 0x16bc [0192.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst")) returned 0x20 [0195.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST", dwFileAttributes=0x20) returned 0 [0195.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.570] GetLastError () returned 0x5 [0195.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST", dwFileAttributes=0x20) returned 0 [0195.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 Thread: id = 6198 os_tid = 0x16c0 [0192.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss")) returned 0x20 [0196.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS", dwFileAttributes=0x20) returned 0 [0196.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.565] GetLastError () returned 0x5 [0196.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS", dwFileAttributes=0x20) returned 0 [0196.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b378) returned 1 Thread: id = 6199 os_tid = 0x1030 [0192.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss")) returned 0x20 [0196.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS", dwFileAttributes=0x20) returned 0 [0196.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.566] GetLastError () returned 0x5 [0196.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS", dwFileAttributes=0x20) returned 0 [0196.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 Thread: id = 6200 os_tid = 0x1038 [0192.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss")) returned 0x20 [0197.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS", dwFileAttributes=0x20) returned 0 [0197.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.610] GetLastError () returned 0x5 [0197.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS", dwFileAttributes=0x20) returned 0 [0197.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e29f48) returned 1 Thread: id = 6201 os_tid = 0x103c [0192.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss")) returned 0x20 [0197.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS", dwFileAttributes=0x20) returned 0 [0197.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.578] GetLastError () returned 0x5 [0197.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS", dwFileAttributes=0x20) returned 0 [0197.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bcf8) returned 1 Thread: id = 6202 os_tid = 0x1040 [0192.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss")) returned 0x20 [0197.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS", dwFileAttributes=0x20) returned 0 [0197.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.592] GetLastError () returned 0x5 [0197.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS", dwFileAttributes=0x20) returned 0 [0197.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 6203 os_tid = 0x1044 [0192.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss")) returned 0x20 [0197.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS", dwFileAttributes=0x20) returned 0 [0197.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.575] GetLastError () returned 0x5 [0197.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS", dwFileAttributes=0x20) returned 0 [0197.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 6204 os_tid = 0x1048 [0192.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss")) returned 0x20 [0197.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS", dwFileAttributes=0x20) returned 0 [0197.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.573] GetLastError () returned 0x5 [0197.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS", dwFileAttributes=0x20) returned 0 [0197.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 6205 os_tid = 0x104c [0192.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss")) returned 0x20 [0197.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS", dwFileAttributes=0x20) returned 0 [0197.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.600] GetLastError () returned 0x5 [0197.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS", dwFileAttributes=0x20) returned 0 [0197.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 Thread: id = 6206 os_tid = 0x1050 [0192.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss")) returned 0x20 [0197.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS", dwFileAttributes=0x20) returned 0 [0197.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.602] GetLastError () returned 0x5 [0197.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS", dwFileAttributes=0x20) returned 0 [0197.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11148) returned 1 Thread: id = 6207 os_tid = 0x1054 [0192.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss")) returned 0x20 [0197.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS", dwFileAttributes=0x20) returned 0 [0197.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.603] GetLastError () returned 0x5 [0197.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS", dwFileAttributes=0x20) returned 0 [0197.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 6208 os_tid = 0x1058 [0192.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss")) returned 0x20 [0197.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS", dwFileAttributes=0x20) returned 0 [0197.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.589] GetLastError () returned 0x5 [0197.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS", dwFileAttributes=0x20) returned 0 [0197.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 Thread: id = 6209 os_tid = 0x105c [0192.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss")) returned 0x20 [0197.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS", dwFileAttributes=0x20) returned 0 [0197.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.587] GetLastError () returned 0x5 [0197.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS", dwFileAttributes=0x20) returned 0 [0197.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 6210 os_tid = 0x16c4 [0192.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls")) returned 0x20 [0197.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS", dwFileAttributes=0x20) returned 0 [0197.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.586] GetLastError () returned 0x5 [0197.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS", dwFileAttributes=0x20) returned 0 [0197.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 Thread: id = 6211 os_tid = 0x16c8 [0192.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst")) returned 0x20 [0197.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST", dwFileAttributes=0x20) returned 0 [0197.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.584] GetLastError () returned 0x5 [0197.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST", dwFileAttributes=0x20) returned 0 [0197.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 Thread: id = 6212 os_tid = 0x1070 [0192.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst")) returned 0x20 [0197.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST", dwFileAttributes=0x20) returned 0 [0197.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.597] GetLastError () returned 0x5 [0197.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST", dwFileAttributes=0x20) returned 0 [0197.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbaa8) returned 1 Thread: id = 6213 os_tid = 0x1074 [0192.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss")) returned 0x20 [0197.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS", dwFileAttributes=0x20) returned 0 [0197.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.595] GetLastError () returned 0x5 [0197.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS", dwFileAttributes=0x20) returned 0 [0197.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbbe8) returned 1 Thread: id = 6214 os_tid = 0x1078 [0192.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst")) returned 0x20 [0197.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST", dwFileAttributes=0x20) returned 0 [0197.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.599] GetLastError () returned 0x5 [0197.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST", dwFileAttributes=0x20) returned 0 [0197.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dca48) returned 1 Thread: id = 6215 os_tid = 0x107c [0192.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss")) returned 0x20 [0196.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS", dwFileAttributes=0x20) returned 0 [0196.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.568] GetLastError () returned 0x5 [0196.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS", dwFileAttributes=0x20) returned 0 [0196.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcc28) returned 1 Thread: id = 6216 os_tid = 0x1080 [0192.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst")) returned 0x20 [0197.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST", dwFileAttributes=0x20) returned 0 [0197.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.594] GetLastError () returned 0x5 [0197.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST", dwFileAttributes=0x20) returned 0 [0197.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce08) returned 1 Thread: id = 6217 os_tid = 0x1088 [0192.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss")) returned 0x20 [0197.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0197.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.591] GetLastError () returned 0x5 [0197.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0197.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 6218 os_tid = 0x108c [0192.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst")) returned 0x20 [0197.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST", dwFileAttributes=0x20) returned 0 [0197.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.553] GetLastError () returned 0x5 [0197.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST", dwFileAttributes=0x20) returned 0 [0197.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcb88) returned 1 Thread: id = 6219 os_tid = 0x1090 [0192.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss")) returned 0x20 [0197.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0197.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.555] GetLastError () returned 0x5 [0197.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0197.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbf08) returned 1 Thread: id = 6220 os_tid = 0x1094 [0192.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst")) returned 0x20 [0197.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST", dwFileAttributes=0x20) returned 0 [0197.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.557] GetLastError () returned 0x5 [0197.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST", dwFileAttributes=0x20) returned 0 [0197.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcd68) returned 1 Thread: id = 6221 os_tid = 0x1098 [0192.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst")) returned 0x20 [0197.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST", dwFileAttributes=0x20) returned 0 [0197.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.608] GetLastError () returned 0x5 [0197.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST", dwFileAttributes=0x20) returned 0 [0197.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 Thread: id = 6222 os_tid = 0x109c [0192.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst")) returned 0x20 [0197.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST", dwFileAttributes=0x20) returned 0 [0197.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.607] GetLastError () returned 0x5 [0197.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST", dwFileAttributes=0x20) returned 0 [0197.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc908) returned 1 Thread: id = 6223 os_tid = 0x10a0 [0192.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss")) returned 0x20 [0197.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS", dwFileAttributes=0x20) returned 0 [0197.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.564] GetLastError () returned 0x5 [0197.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS", dwFileAttributes=0x20) returned 0 [0197.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc868) returned 1 Thread: id = 6224 os_tid = 0x10a4 [0192.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss")) returned 0x20 [0197.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS", dwFileAttributes=0x20) returned 0 [0197.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.605] GetLastError () returned 0x5 [0197.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS", dwFileAttributes=0x20) returned 0 [0197.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7c8) returned 1 Thread: id = 6225 os_tid = 0x10a8 [0192.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss")) returned 0x20 [0197.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS", dwFileAttributes=0x20) returned 0 [0197.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.567] GetLastError () returned 0x5 [0197.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS", dwFileAttributes=0x20) returned 0 [0197.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc688) returned 1 Thread: id = 6226 os_tid = 0x10ac [0192.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss")) returned 0x20 [0197.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS", dwFileAttributes=0x20) returned 0 [0197.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.571] GetLastError () returned 0x5 [0197.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS", dwFileAttributes=0x20) returned 0 [0197.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc728) returned 1 Thread: id = 6227 os_tid = 0x10b0 [0192.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss")) returned 0x20 [0197.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS", dwFileAttributes=0x20) returned 0 [0197.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.611] GetLastError () returned 0x5 [0197.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS", dwFileAttributes=0x20) returned 0 [0197.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 Thread: id = 6228 os_tid = 0x10bc [0192.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif")) returned 0x20 [0192.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0192.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.429] GetLastError () returned 0x5 [0192.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0192.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80207e0) returned 1 Thread: id = 6229 os_tid = 0x16d4 [0192.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif")) returned 0x20 [0192.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0192.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.431] GetLastError () returned 0x5 [0192.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0192.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021b90) returned 1 Thread: id = 6230 os_tid = 0x10d4 [0192.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20 [0192.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.469] GetLastError () returned 0x5 [0192.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020ba0) returned 1 Thread: id = 6231 os_tid = 0x10d8 [0192.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20 [0192.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.471] GetLastError () returned 0x5 [0192.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021500) returned 1 Thread: id = 6232 os_tid = 0x10dc [0192.472] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif")) returned 0x2020 [0192.476] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", dwFileAttributes=0x20) returned 1 [0204.803] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda4 [0204.804] GetFileSizeEx (in: hFile=0xda4, lpFileSize=0xbd4fb80 | out: lpFileSize=0xbd4fb80*=70364) returned 1 [0204.804] SetFilePointerEx (in: hFile=0xda4, liDistanceToMove=0x112d8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.804] ReadFile (in: hFile=0xda4, lpBuffer=0xbd4fb8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd4fb68, lpOverlapped=0x0 | out: lpBuffer=0xbd4fb8c*, lpNumberOfBytesRead=0xbd4fb68*=0x4, lpOverlapped=0x0) returned 1 [0204.807] SetFilePointerEx (in: hFile=0xda4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0204.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c030 [0204.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0204.807] NtQuerySystemTime (in: CurrentTime=0xbd4fb08 | out: CurrentTime=0xbd4fb08*=132471540726468000) returned 0x0 [0204.807] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x4155d345 [0204.807] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x5916dee7 [0204.807] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x482bbf14 [0204.807] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x58d090b1 [0204.807] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x590f6c41 [0204.807] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x517b0197 [0204.807] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x54e87c52 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0xf4ab160 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x259a7364 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x35003588 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x2dfb6c7 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x73f469b9 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x2a80fa99 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x52b40a80 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x35b2c2f3 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x253a5aec [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x3da38049 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x12d5045b [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x12c7ef61 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x2a9437ce [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x36548215 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x7a9737f4 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0xac76a46 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x726b7a3c [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x2faf7cdf [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x1b0bbe56 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x343a9f3d [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x4dba283 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x41d3b0 [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x2df12aef [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x9bf968b [0204.808] RtlRandomEx (in: Seed=0xbd4fb00 | out: Seed=0xbd4fb00) returned 0x69c3f85f [0204.820] SetFilePointerEx (in: hFile=0xda4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.820] ReadFile (in: hFile=0xda4, lpBuffer=0x14b020e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbd4fb08, lpOverlapped=0x0 | out: lpBuffer=0x14b020e0*, lpNumberOfBytesRead=0xbd4fb08*=0x3c00, lpOverlapped=0x0) returned 1 [0205.542] SetFilePointerEx (in: hFile=0xda4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x81b5f10 [0205.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f32b38 [0205.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0205.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0205.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14998c88 [0205.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0205.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063520 [0205.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063520) returned 1 [0205.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 [0205.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5f10) returned 1 [0205.543] WriteFile (in: hFile=0xda4, lpBuffer=0x14998c88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbd4fb08, lpOverlapped=0x0 | out: lpBuffer=0x14998c88*, lpNumberOfBytesWritten=0xbd4fb08*=0x3c00, lpOverlapped=0x0) returned 1 [0209.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14998c88) returned 1 [0209.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14b020e0) returned 1 [0209.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e6fc48 [0209.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062148) returned 1 [0209.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e6fcd8 [0209.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062148 [0209.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80621e8 [0209.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621e8) returned 1 [0209.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0209.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4da0) returned 1 [0209.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x81e12b8 [0209.908] SetFilePointerEx (in: hFile=0xda4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.908] WriteFile (in: hFile=0xda4, lpBuffer=0x81e12b8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xbd4fb74, lpOverlapped=0x0 | out: lpBuffer=0x81e12b8*, lpNumberOfBytesWritten=0xbd4fb74*=0x108, lpOverlapped=0x0) returned 1 [0209.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e12b8) returned 1 [0209.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0209.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062148) returned 1 [0209.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0209.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0209.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c030) returned 1 [0209.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d498f8) returned 1 [0209.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0209.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81e7898 [0209.910] wcscpy (in: _Dest=0x81e7898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" [0209.910] wcscat (in: _Dest=0x81e7898, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.f0dbec" [0209.910] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.f0dbec", NtPathName=0xbd4faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x3e3ceb0 [0209.914] FlushFileBuffers (hFile=0xda4) returned 1 [0209.916] CloseHandle (hObject=0xda4) returned 1 [0209.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81e7898 [0209.917] wcscpy (in: _Dest=0x81e7898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0209.917] wcscat (in: _Dest=0x81e7898, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" [0209.917] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\f0dbec-readme.txt")) returned 0x2020 [0209.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7898) returned 1 [0209.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0020) returned 1 Thread: id = 6233 os_tid = 0x10f0 [0192.477] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png")) returned 0x2020 [0192.478] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", dwFileAttributes=0x20) returned 1 [0204.821] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1aa8 [0204.822] GetFileSizeEx (in: hFile=0x1aa8, lpFileSize=0x8bdfe98 | out: lpFileSize=0x8bdfe98*=4361) returned 1 [0204.822] SetFilePointerEx (in: hFile=0x1aa8, liDistanceToMove=0x1105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.822] ReadFile (in: hFile=0x1aa8, lpBuffer=0x8bdfea4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8bdfe80, lpOverlapped=0x0 | out: lpBuffer=0x8bdfea4*, lpNumberOfBytesRead=0x8bdfe80*=0x4, lpOverlapped=0x0) returned 1 [0204.824] SetFilePointerEx (in: hFile=0x1aa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0204.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf90 [0204.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0204.825] NtQuerySystemTime (in: CurrentTime=0x8bdfe20 | out: CurrentTime=0x8bdfe20*=132471540726624000) returned 0x0 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x534feebc [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x77f59597 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x4f19be3e [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x53d52ea7 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x763ec00f [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x377ba33 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x763d5c9a [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x582829e0 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x7761eb77 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x5c10cd9 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x54cf36b3 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x1b1d7155 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x769606f [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x4139f932 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x276b1823 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x6396a51f [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x2a2af757 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x18d21ccf [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x31cee04e [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x6cc1c1b4 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x5e46c3a7 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x10388907 [0204.825] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x6a707553 [0204.826] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x57b97100 [0204.826] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x1877aac4 [0204.826] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x60f9e3ff [0204.826] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x2d05b15b [0204.826] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x585d3c8b [0204.826] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0xd475a10 [0204.826] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x3a8a4b5b [0204.826] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x747d52ac [0204.826] RtlRandomEx (in: Seed=0x8bdfe18 | out: Seed=0x8bdfe18) returned 0x1ee5ef2c [0204.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0204.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14aeb8b0 [0204.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14aef4b8 [0204.837] ReadFile (in: hFile=0x1aa8, lpBuffer=0x14aeb8b0, nNumberOfBytesToRead=0x1109, lpNumberOfBytesRead=0x8bdfe14, lpOverlapped=0x0 | out: lpBuffer=0x14aeb8b0*, lpNumberOfBytesRead=0x8bdfe14*=0x1109, lpOverlapped=0x0) returned 1 [0205.395] SetFilePointerEx (in: hFile=0x1aa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.395] WriteFile (in: hFile=0x1aa8, lpBuffer=0x14aef4b8*, nNumberOfBytesToWrite=0x1109, lpNumberOfBytesWritten=0x8bdfe18, lpOverlapped=0x0 | out: lpBuffer=0x14aef4b8*, lpNumberOfBytesWritten=0x8bdfe18*=0x1109, lpOverlapped=0x0) returned 1 [0207.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4d020 [0207.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaf0 [0207.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaf0) returned 1 [0207.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aef4b8) returned 1 [0207.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aeb8b0) returned 1 [0207.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0207.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5a90) returned 1 [0207.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e699c0 [0207.945] SetFilePointerEx (in: hFile=0x1aa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.946] WriteFile (in: hFile=0x1aa8, lpBuffer=0x8406768*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x8bdfe8c, lpOverlapped=0x0 | out: lpBuffer=0x8406768*, lpNumberOfBytesWritten=0x8bdfe8c*=0x10a, lpOverlapped=0x0) returned 1 [0208.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406768) returned 1 [0208.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699f0) returned 1 [0208.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaf0) returned 1 [0208.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699c0) returned 1 [0208.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0208.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf90) returned 1 [0208.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0208.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49fb0) returned 1 [0208.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8188018 [0208.180] wcscpy (in: _Dest=0x8188018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" [0208.180] wcscat (in: _Dest=0x8188018, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.f0dbec" [0208.180] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.f0dbec", NtPathName=0x8bdfe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x83354b8 [0209.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83354b8) returned 1 [0209.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f3cf0) returned 1 [0209.766] NtQueryInformationFile (in: FileHandle=0x1aa8, IoStatusBlock=0x8bdfde8, FileInformation=0x8bdfdf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8bdfde8, FileInformation=0x8bdfdf0) returned 0x0 [0209.766] NtSetInformationFile (FileHandle=0x1aa8, IoStatusBlock=0x8bdfde8, FileInformation=0x8bdfdf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188018) returned 1 [0209.767] FlushFileBuffers (hFile=0x1aa8) returned 1 [0209.810] CloseHandle (hObject=0x1aa8) returned 1 [0209.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8188018 [0209.813] wcscpy (in: _Dest=0x8188018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0209.813] wcscat (in: _Dest=0x8188018, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" [0209.813] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\f0dbec-readme.txt")) returned 0x2020 [0209.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188018) returned 1 [0209.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 Thread: id = 6234 os_tid = 0x16f0 [0192.478] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png")) returned 0x2020 [0192.478] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", dwFileAttributes=0x20) returned 1 [0204.932] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1aac [0204.933] GetFileSizeEx (in: hFile=0x1aac, lpFileSize=0x759f810 | out: lpFileSize=0x759f810*=556) returned 1 [0204.933] SetFilePointerEx (in: hFile=0x1aac, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.933] ReadFile (in: hFile=0x1aac, lpBuffer=0x759f81c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x759f7f8, lpOverlapped=0x0 | out: lpBuffer=0x759f81c*, lpNumberOfBytesRead=0x759f7f8*=0x4, lpOverlapped=0x0) returned 1 [0204.935] SetFilePointerEx (in: hFile=0x1aac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0204.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0204.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0204.935] NtQuerySystemTime (in: CurrentTime=0x759f798 | out: CurrentTime=0x759f798*=132471540726936000) returned 0x0 [0204.935] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x1027dfb6 [0204.935] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x617afc88 [0204.935] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x712a2abe [0204.935] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x4acc3ff8 [0204.935] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x6246b355 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x3c645379 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x58112f04 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x2f5742b8 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x6b2854df [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x4941dad0 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x2bdd4ecd [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x7d89b587 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x396e4aa6 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x4636ac72 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x55998757 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0xc40c6d2 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x48534115 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x19d57291 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x4b3d2e0b [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x395e1d92 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x4e8f0496 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x4971bdf1 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x409ce331 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x322503c1 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x95e6347 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x57d27433 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x325a8038 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x5fa7a112 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x12257ad5 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x2762d602 [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x298998dc [0204.936] RtlRandomEx (in: Seed=0x759f790 | out: Seed=0x759f790) returned 0x265b1566 [0204.944] ReadFile (in: hFile=0x1aac, lpBuffer=0x14afa8d0, nNumberOfBytesToRead=0x22c, lpNumberOfBytesRead=0x759f78c, lpOverlapped=0x0 | out: lpBuffer=0x14afa8d0*, lpNumberOfBytesRead=0x759f78c*=0x22c, lpOverlapped=0x0) returned 1 [0204.944] SetFilePointerEx (in: hFile=0x1aac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.944] WriteFile (in: hFile=0x1aac, lpBuffer=0x14afe4d8*, nNumberOfBytesToWrite=0x22c, lpNumberOfBytesWritten=0x759f790, lpOverlapped=0x0 | out: lpBuffer=0x14afe4d8*, lpNumberOfBytesWritten=0x759f790*=0x22c, lpOverlapped=0x0) returned 1 [0207.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8f18 [0207.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8fb8 [0207.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fb8) returned 1 [0207.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14afe4d8) returned 1 [0207.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14afa8d0) returned 1 [0207.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0207.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5028) returned 1 [0207.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e6faf8 [0207.897] SetFilePointerEx (in: hFile=0x1aac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.897] WriteFile (in: hFile=0x1aac, lpBuffer=0x30bbb60*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x759f804, lpOverlapped=0x0 | out: lpBuffer=0x30bbb60*, lpNumberOfBytesWritten=0x759f804*=0x108, lpOverlapped=0x0) returned 1 [0208.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0208.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fac8) returned 1 [0208.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fb8) returned 1 [0208.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6faf8) returned 1 [0208.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8f18) returned 1 [0208.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0208.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0208.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a848) returned 1 [0208.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81e2c40 [0208.139] wcscpy (in: _Dest=0x81e2c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" [0208.139] wcscat (in: _Dest=0x81e2c40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.f0dbec" [0208.139] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.f0dbec", NtPathName=0x759f788, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x83359d8 [0209.779] FlushFileBuffers (hFile=0x1aac) returned 1 [0209.815] CloseHandle (hObject=0x1aac) returned 1 [0209.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d565c0 [0209.816] wcscpy (in: _Dest=0x3d565c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0209.816] wcscat (in: _Dest=0x3d565c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" [0209.816] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\f0dbec-readme.txt")) returned 0x2020 [0209.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 [0209.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e12b8) returned 1 Thread: id = 6235 os_tid = 0x1108 [0192.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png")) returned 0x2020 [0192.486] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", dwFileAttributes=0x20) returned 1 [0204.944] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fdc [0204.945] GetFileSizeEx (in: hFile=0x1fdc, lpFileSize=0xa76ff70 | out: lpFileSize=0xa76ff70*=160) returned 1 [0204.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0204.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ceb8 [0204.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49880 [0204.945] NtQuerySystemTime (in: CurrentTime=0xa76fef8 | out: CurrentTime=0xa76fef8*=132471540727092000) returned 0x0 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0xa36755f [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x665814e [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x7277267c [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x3a784d48 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x559aeacc [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x78bb3a90 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x76d8c4be [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x5bb702a [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x731934d6 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x4c8b034c [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x2efdf18e [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x69ec7a36 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x40dca4c8 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x92e55cc [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x2c513c34 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x2d64e315 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x6698610b [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x508769fc [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x30a7e400 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0xbc1dde5 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x66bf2e20 [0204.945] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x75bf85ea [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x586d2709 [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x514373d4 [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x1451dcd1 [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x739f4afb [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x417bfdf [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0xaa90034 [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x2916185e [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x17ee07c6 [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x5eccba0d [0204.946] RtlRandomEx (in: Seed=0xa76fef0 | out: Seed=0xa76fef0) returned 0x3860fb38 [0204.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0204.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14af30c0 [0204.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14af6cc8 [0204.954] ReadFile (in: hFile=0x1fdc, lpBuffer=0x14af30c0, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xa76feec, lpOverlapped=0x0 | out: lpBuffer=0x14af30c0*, lpNumberOfBytesRead=0xa76feec*=0xa0, lpOverlapped=0x0) returned 1 [0204.955] SetFilePointerEx (in: hFile=0x1fdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.955] WriteFile (in: hFile=0x1fdc, lpBuffer=0x14af6cc8*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xa76fef0, lpOverlapped=0x0 | out: lpBuffer=0x14af6cc8*, lpNumberOfBytesWritten=0xa76fef0*=0xa0, lpOverlapped=0x0) returned 1 [0207.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8fe0 [0207.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062030 [0207.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062030) returned 1 [0207.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14af6cc8) returned 1 [0207.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14af30c0) returned 1 [0207.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 [0207.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b50b8) returned 1 [0207.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3dc5f38 [0207.900] SetFilePointerEx (in: hFile=0x1fdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.900] WriteFile (in: hFile=0x1fdc, lpBuffer=0x83ef2f0*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0xa76ff64, lpOverlapped=0x0 | out: lpBuffer=0x83ef2f0*, lpNumberOfBytesWritten=0xa76ff64*=0x126, lpOverlapped=0x0) returned 1 [0208.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef2f0) returned 1 [0208.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc60c8) returned 1 [0208.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062030) returned 1 [0208.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5f38) returned 1 [0208.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fe0) returned 1 [0208.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ceb8) returned 1 [0208.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd10) returned 1 [0208.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49da8) returned 1 [0208.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x8335890 [0208.135] wcscpy (in: _Dest=0x8335890, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" [0208.135] wcscat (in: _Dest=0x8335890, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.f0dbec" [0208.135] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.f0dbec", NtPathName=0xa76fee8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x152) returned 0x3dce3d8 [0209.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0209.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148972a8) returned 1 [0209.706] NtQueryInformationFile (in: FileHandle=0x1fdc, IoStatusBlock=0xa76fec0, FileInformation=0xa76fec8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa76fec0, FileInformation=0xa76fec8) returned 0x0 [0209.706] NtSetInformationFile (FileHandle=0x1fdc, IoStatusBlock=0xa76fec0, FileInformation=0xa76fec8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335890) returned 1 [0209.792] FlushFileBuffers (hFile=0x1fdc) returned 1 [0209.845] CloseHandle (hObject=0x1fdc) returned 1 [0209.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d565c0 [0209.846] wcscpy (in: _Dest=0x3d565c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0209.846] wcscat (in: _Dest=0x3d565c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" [0209.846] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\f0dbec-readme.txt")) returned 0x2020 [0209.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 [0209.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403930) returned 1 Thread: id = 6236 os_tid = 0x16fc [0192.486] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png")) returned 0x2020 [0192.486] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", dwFileAttributes=0x20) returned 1 [0204.956] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fa4 [0204.956] GetFileSizeEx (in: hFile=0x1fa4, lpFileSize=0xc81fa60 | out: lpFileSize=0xc81fa60*=252) returned 1 [0204.956] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.956] ReadFile (in: hFile=0x1fa4, lpBuffer=0xc81fa6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc81fa48, lpOverlapped=0x0 | out: lpBuffer=0xc81fa6c*, lpNumberOfBytesRead=0xc81fa48*=0x4, lpOverlapped=0x0) returned 1 [0204.958] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0204.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49880 [0204.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4acd0 [0204.958] NtQuerySystemTime (in: CurrentTime=0xc81f9e8 | out: CurrentTime=0xc81f9e8*=132471540727248000) returned 0x0 [0204.958] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0xeae146c [0204.958] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x2c5e65a8 [0204.958] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x24613680 [0204.958] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x1cb9afcb [0204.958] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x7965bc2a [0204.958] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x3cb5961f [0204.958] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x6cbf8701 [0204.958] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x3c5524f4 [0204.958] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x1d330cd1 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x1b350c8e [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x6b6227b7 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x683a48a7 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x7b5f1d63 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x7b347b99 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x51575a33 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x19d2ea57 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x4258762d [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x1a318db4 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x2ee60fc [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x6b516b1d [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0xf5f0842 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x4ee80843 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x5b028130 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x2e6df7c8 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x504a702d [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x3b3b718d [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x615e108a [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x40157f3c [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x21454adf [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x74831200 [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x7f448dbd [0204.959] RtlRandomEx (in: Seed=0xc81f9e0 | out: Seed=0xc81f9e0) returned 0x46e1056f [0204.968] ReadFile (in: hFile=0x1fa4, lpBuffer=0x14ae40a0, nNumberOfBytesToRead=0xfc, lpNumberOfBytesRead=0xc81f9dc, lpOverlapped=0x0 | out: lpBuffer=0x14ae40a0*, lpNumberOfBytesRead=0xc81f9dc*=0xfc, lpOverlapped=0x0) returned 1 [0204.969] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.969] WriteFile (in: hFile=0x1fa4, lpBuffer=0x14ae7ca8*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0xc81f9e0, lpOverlapped=0x0 | out: lpBuffer=0x14ae7ca8*, lpNumberOfBytesWritten=0xc81f9e0*=0xfc, lpOverlapped=0x0) returned 1 [0207.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063408 [0207.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80625a8 [0207.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625a8) returned 1 [0207.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae7ca8) returned 1 [0207.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae40a0) returned 1 [0207.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0207.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5df0) returned 1 [0207.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e230c0 [0207.909] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.909] WriteFile (in: hFile=0x1fa4, lpBuffer=0x3e3c700*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0xc81fa54, lpOverlapped=0x0 | out: lpBuffer=0x3e3c700*, lpNumberOfBytesWritten=0xc81fa54*=0x132, lpOverlapped=0x0) returned 1 [0208.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c700) returned 1 [0208.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22c48) returned 1 [0208.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625a8) returned 1 [0208.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e230c0) returned 1 [0208.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063408) returned 1 [0208.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49880) returned 1 [0208.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634d0) returned 1 [0208.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634f8) returned 1 [0208.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e16f90 [0208.144] wcscpy (in: _Dest=0x3e16f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" [0208.144] wcscat (in: _Dest=0x3e16f90, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.f0dbec" [0208.144] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.f0dbec", NtPathName=0xc81f9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dce108 [0209.769] FlushFileBuffers (hFile=0x1fa4) returned 1 [0209.824] CloseHandle (hObject=0x1fa4) returned 1 [0209.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d565c0 [0209.840] wcscpy (in: _Dest=0x3d565c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0209.840] wcscat (in: _Dest=0x3d565c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" [0209.840] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\f0dbec-readme.txt")) returned 0x2020 [0209.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 [0209.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa0d8) returned 1 Thread: id = 6237 os_tid = 0x1704 [0192.487] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png")) returned 0x2020 [0192.487] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", dwFileAttributes=0x20) returned 1 [0204.969] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x27f0 [0204.969] GetFileSizeEx (in: hFile=0x27f0, lpFileSize=0xbdafb70 | out: lpFileSize=0xbdafb70*=160) returned 1 [0204.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0204.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4acd0 [0204.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063480 [0204.970] NtQuerySystemTime (in: CurrentTime=0xbdafaf8 | out: CurrentTime=0xbdafaf8*=132471540727404000) returned 0x0 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x255a3e26 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x68250fd0 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x6a256c3f [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x773bbb05 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x327f10f6 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x52338040 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x6bfdf0e2 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x4cacdcc2 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x49492cef [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x5daa798f [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x7112ab70 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x74bb078f [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x12c36872 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x7116893f [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x56444937 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x3983d4e6 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x2014420c [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x2be6e3f7 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x411c8f0c [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x73af6b02 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x6297a7e8 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x7bbf635b [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x170763bc [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x615cd9ed [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x327210c4 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x14534046 [0204.970] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x374318eb [0204.971] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x4641d4dc [0204.971] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x68d17bd3 [0204.971] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x51b2f600 [0204.971] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x60bc4222 [0204.971] RtlRandomEx (in: Seed=0xbdafaf0 | out: Seed=0xbdafaf0) returned 0x2920bc11 [0204.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0204.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14adc890 [0204.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ae0498 [0204.982] ReadFile (in: hFile=0x27f0, lpBuffer=0x14adc890, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xbdafaec, lpOverlapped=0x0 | out: lpBuffer=0x14adc890*, lpNumberOfBytesRead=0xbdafaec*=0xa0, lpOverlapped=0x0) returned 1 [0204.984] SetFilePointerEx (in: hFile=0x27f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.984] WriteFile (in: hFile=0x27f0, lpBuffer=0x14ae0498*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xbdafaf0, lpOverlapped=0x0 | out: lpBuffer=0x14ae0498*, lpNumberOfBytesWritten=0xbdafaf0*=0xa0, lpOverlapped=0x0) returned 1 [0207.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062008 [0207.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063318 [0207.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063318) returned 1 [0207.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae0498) returned 1 [0207.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14adc890) returned 1 [0207.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0207.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b4da0) returned 1 [0207.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e234e0 [0207.902] SetFilePointerEx (in: hFile=0x27f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.902] WriteFile (in: hFile=0x27f0, lpBuffer=0x3e3c5b8*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0xbdafb64, lpOverlapped=0x0 | out: lpBuffer=0x3e3c5b8*, lpNumberOfBytesWritten=0xbdafb64*=0x132, lpOverlapped=0x0) returned 1 [0208.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c5b8) returned 1 [0208.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e22fb8) returned 1 [0208.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063318) returned 1 [0208.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e234e0) returned 1 [0208.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062008) returned 1 [0208.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4acd0) returned 1 [0208.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634a8) returned 1 [0208.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063458) returned 1 [0208.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e17240 [0208.141] wcscpy (in: _Dest=0x3e17240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" [0208.141] wcscat (in: _Dest=0x3e17240, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.f0dbec" [0208.141] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.f0dbec", NtPathName=0xbdafae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dce270 [0209.772] FlushFileBuffers (hFile=0x27f0) returned 1 [0209.818] CloseHandle (hObject=0x27f0) returned 1 [0209.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d565c0 [0209.819] wcscpy (in: _Dest=0x3d565c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0209.819] wcscat (in: _Dest=0x3d565c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" [0209.819] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\f0dbec-readme.txt")) returned 0x2020 [0209.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 [0209.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa220) returned 1 Thread: id = 6238 os_tid = 0x112c [0192.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png")) returned 0x2020 [0192.488] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", dwFileAttributes=0x20) returned 1 [0204.985] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2ccc [0204.985] GetFileSizeEx (in: hFile=0x2ccc, lpFileSize=0x845f8d8 | out: lpFileSize=0x845f8d8*=166) returned 1 [0204.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0204.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063480 [0204.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80632f0 [0204.986] NtQuerySystemTime (in: CurrentTime=0x845f860 | out: CurrentTime=0x845f860*=132471540727560000) returned 0x0 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x2c9dc7fb [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x746da46b [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x5b66ab93 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x5abdf76a [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x5ff030ed [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x293df326 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x44a8438f [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x52f402cb [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x5b38ada4 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x530b95bf [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x7c2a1b8a [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x51ea5d0c [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x7cd38db9 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x4b0b7981 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x8fa9ba0 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x4ad977a5 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x6ef9a9b8 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x51881d40 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x5a8881a2 [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x638a90ab [0204.986] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x1e39c461 [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x7f686387 [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x5ac41c8e [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x3f035679 [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x1bb2c68c [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x3315257b [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x50fe645b [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x369900b3 [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x4795fdf8 [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x7ff6db5b [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x6ccd045 [0204.987] RtlRandomEx (in: Seed=0x845f858 | out: Seed=0x845f858) returned 0x77b11e18 [0204.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0204.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14acd870 [0204.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ad1478 [0204.999] ReadFile (in: hFile=0x2ccc, lpBuffer=0x14acd870, nNumberOfBytesToRead=0xa6, lpNumberOfBytesRead=0x845f854, lpOverlapped=0x0 | out: lpBuffer=0x14acd870*, lpNumberOfBytesRead=0x845f854*=0xa6, lpOverlapped=0x0) returned 1 [0205.004] SetFilePointerEx (in: hFile=0x2ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.004] WriteFile (in: hFile=0x2ccc, lpBuffer=0x14ad1478*, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0x845f858, lpOverlapped=0x0 | out: lpBuffer=0x14ad1478*, lpNumberOfBytesWritten=0x845f858*=0xa6, lpOverlapped=0x0) returned 1 [0207.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063188 [0207.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80631b0 [0207.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631b0) returned 1 [0207.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ad1478) returned 1 [0207.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14acd870) returned 1 [0207.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0207.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b5850) returned 1 [0207.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6b48 [0207.911] SetFilePointerEx (in: hFile=0x2ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.911] WriteFile (in: hFile=0x2ccc, lpBuffer=0x3e3c848*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x845f8cc, lpOverlapped=0x0 | out: lpBuffer=0x3e3c848*, lpNumberOfBytesWritten=0x845f8cc*=0x138, lpOverlapped=0x0) returned 1 [0208.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c848) returned 1 [0208.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0208.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631b0) returned 1 [0208.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 [0208.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063188) returned 1 [0208.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063480) returned 1 [0208.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632c8) returned 1 [0208.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063228) returned 1 [0208.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x3e177a0 [0208.148] wcscpy (in: _Dest=0x3e177a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" [0208.148] wcscat (in: _Dest=0x3e177a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.f0dbec" [0208.148] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.f0dbec", NtPathName=0x845f850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x164) returned 0x3e396f8 [0209.783] FlushFileBuffers (hFile=0x2ccc) returned 1 [0209.802] CloseHandle (hObject=0x2ccc) returned 1 [0209.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8188018 [0209.804] wcscpy (in: _Dest=0x8188018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0209.804] wcscat (in: _Dest=0x8188018, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" [0209.804] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\f0dbec-readme.txt")) returned 0xffffffff [0209.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ccc [0209.806] WriteFile (in: hFile=0x2ccc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x845f874, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x845f874*=0x70c, lpOverlapped=0x0) returned 1 [0209.808] CloseHandle (hObject=0x2ccc) returned 1 [0209.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8188018) returned 1 [0209.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa5f8) returned 1 Thread: id = 6239 os_tid = 0x1134 [0192.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png")) returned 0x2020 [0192.488] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", dwFileAttributes=0x20) returned 1 [0205.004] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c08 [0205.005] GetFileSizeEx (in: hFile=0x1c08, lpFileSize=0xa4ff858 | out: lpFileSize=0xa4ff858*=160) returned 1 [0205.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80632f0 [0205.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063278 [0205.005] NtQuerySystemTime (in: CurrentTime=0xa4ff7e0 | out: CurrentTime=0xa4ff7e0*=132471540727716000) returned 0x0 [0205.005] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x744677aa [0205.005] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x51ddcec0 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x6b308da [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x73bbc872 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x11ba0ce9 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x1dccd959 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x528931c0 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x1b254f89 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x672a7b2e [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x5d3244f5 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x3d8574e0 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x6b3f2590 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x392008b0 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x19a39b7d [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0xe434d72 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x7269190d [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x515d4480 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0xbbe747a [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x50c85026 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x47f08695 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x1603ca2f [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x57b8237f [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x6f785b0c [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x23ce192 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x6461c5e0 [0205.006] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x5fa48ba9 [0205.007] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x292f784a [0205.007] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x50cf196 [0205.007] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x7a0ab6c9 [0205.007] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x79a9b568 [0205.007] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x2778ad0c [0205.007] RtlRandomEx (in: Seed=0xa4ff7d8 | out: Seed=0xa4ff7d8) returned 0x7b1b7d5f [0205.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ac6060 [0205.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ac9c68 [0205.020] ReadFile (in: hFile=0x1c08, lpBuffer=0x14ac6060, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xa4ff7d4, lpOverlapped=0x0 | out: lpBuffer=0x14ac6060*, lpNumberOfBytesRead=0xa4ff7d4*=0xa0, lpOverlapped=0x0) returned 1 [0205.022] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.022] WriteFile (in: hFile=0x1c08, lpBuffer=0x14ac9c68*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xa4ff7d8, lpOverlapped=0x0 | out: lpBuffer=0x14ac9c68*, lpNumberOfBytesWritten=0xa4ff7d8*=0xa0, lpOverlapped=0x0) returned 1 [0207.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064ab0 [0207.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064ad8 [0207.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ad8) returned 1 [0207.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ac9c68) returned 1 [0207.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ac6060) returned 1 [0207.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0207.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81b46e0) returned 1 [0207.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe5b28 [0207.917] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.917] WriteFile (in: hFile=0x1c08, lpBuffer=0x3e3c328*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0xa4ff84c, lpOverlapped=0x0 | out: lpBuffer=0x3e3c328*, lpNumberOfBytesWritten=0xa4ff84c*=0x136, lpOverlapped=0x0) returned 1 [0208.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c328) returned 1 [0208.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 [0208.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ad8) returned 1 [0208.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5b28) returned 1 [0208.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ab0) returned 1 [0208.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632f0) returned 1 [0208.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063250) returned 1 [0208.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063160) returned 1 [0208.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e16ce0 [0208.160] wcscpy (in: _Dest=0x3e16ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" [0208.160] wcscat (in: _Dest=0x3e16ce0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.f0dbec" [0208.160] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.f0dbec", NtPathName=0xa4ff7d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x3e38cb0 [0209.788] FlushFileBuffers (hFile=0x1c08) returned 1 [0209.821] CloseHandle (hObject=0x1c08) returned 1 [0209.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d565c0 [0209.822] wcscpy (in: _Dest=0x3d565c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0209.822] wcscat (in: _Dest=0x3d565c0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" [0209.823] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\f0dbec-readme.txt")) returned 0x2020 [0209.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565c0) returned 1 [0209.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa740) returned 1 Thread: id = 6240 os_tid = 0x1138 [0192.489] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json")) returned 0x2020 [0204.353] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", dwFileAttributes=0x20) returned 1 [0214.283] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e2c [0214.284] GetFileSizeEx (in: hFile=0x1e2c, lpFileSize=0xdcffac8 | out: lpFileSize=0xdcffac8*=210) returned 1 [0214.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063278 [0214.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80631d8 [0214.285] NtQuerySystemTime (in: CurrentTime=0xdcffa50 | out: CurrentTime=0xdcffa50*=132471540820068000) returned 0x0 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0xec04a00 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x6e48087f [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x7ce7ae89 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x13c20c6f [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x2296757b [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x6b21b91 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x584ab63a [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x387c3d93 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x5c7da0fc [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x1fc94c40 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x6d2234fc [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x26fe1733 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x9bae380 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x3b1b779b [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0xba31cdc [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x628dde2d [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x57f9e8d8 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x1e151383 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x4d5a5230 [0214.285] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x5274601f [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x778d9395 [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x12c7749c [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x5b93090f [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x241162a6 [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x24a0ffd [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x3c346090 [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x40fdb28 [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x3533d83d [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x2d1c49ad [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x7231898d [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0xb3faaf0 [0214.286] RtlRandomEx (in: Seed=0xdcffa48 | out: Seed=0xdcffa48) returned 0x76c71012 [0214.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8222890 [0214.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8226498 [0214.298] ReadFile (in: hFile=0x1e2c, lpBuffer=0x8222890, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xdcffa44, lpOverlapped=0x0 | out: lpBuffer=0x8222890*, lpNumberOfBytesRead=0xdcffa44*=0xd2, lpOverlapped=0x0) returned 1 [0214.300] SetFilePointerEx (in: hFile=0x1e2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.300] WriteFile (in: hFile=0x1e2c, lpBuffer=0x8226498*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xdcffa48, lpOverlapped=0x0 | out: lpBuffer=0x8226498*, lpNumberOfBytesWritten=0xdcffa48*=0xd2, lpOverlapped=0x0) returned 1 [0215.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062080 [0215.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8061fe0 [0215.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061fe0) returned 1 [0215.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8226498) returned 1 [0215.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8222890) returned 1 [0215.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a98) returned 1 [0215.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea868) returned 1 [0215.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fa38 [0215.699] SetFilePointerEx (in: hFile=0x1e2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.699] WriteFile (in: hFile=0x1e2c, lpBuffer=0x8406ab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdcffabc, lpOverlapped=0x0 | out: lpBuffer=0x8406ab0*, lpNumberOfBytesWritten=0xdcffabc*=0x10c, lpOverlapped=0x0) returned 1 [0215.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ab0) returned 1 [0215.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f4f8) returned 1 [0215.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061fe0) returned 1 [0215.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa38) returned 1 [0215.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062080) returned 1 [0215.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063278) returned 1 [0215.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632f0) returned 1 [0215.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634d0) returned 1 [0215.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8187cb8 [0215.978] wcscpy (in: _Dest=0x8187cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" [0215.978] wcscat (in: _Dest=0x8187cb8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.f0dbec" [0215.978] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.f0dbec", NtPathName=0xdcffa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef9408 [0216.224] FlushFileBuffers (hFile=0x1e2c) returned 1 [0216.234] CloseHandle (hObject=0x1e2c) returned 1 [0216.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8403930 [0216.302] wcscpy (in: _Dest=0x8403930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" [0216.302] wcscat (in: _Dest=0x8403930, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\F0DBEC-Readme.txt" [0216.302] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\f0dbec-readme.txt")) returned 0xffffffff [0216.303] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a38 [0217.846] WriteFile (in: hFile=0x1a38, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdcffa64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdcffa64*=0x70c, lpOverlapped=0x0) returned 1 [0221.154] CloseHandle (hObject=0x1a38) returned 1 [0221.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403930) returned 1 [0221.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8b18) returned 1 Thread: id = 6241 os_tid = 0x113c [0192.489] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0204.352] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0215.143] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b6c [0215.143] GetFileSizeEx (in: hFile=0x2b6c, lpFileSize=0xb1efb08 | out: lpFileSize=0xb1efb08*=176) returned 1 [0215.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a48 [0215.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063840 [0215.144] NtQuerySystemTime (in: CurrentTime=0xb1efa90 | out: CurrentTime=0xb1efa90*=132471540828648000) returned 0x0 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x54b82a60 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x30665b38 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x18c16c9b [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x67fcfcdc [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x5bb694d [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0xa29c979 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x596def46 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0xcbd8e92 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x66d517fa [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x1bd17cf8 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x7c7b1982 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x66148bbf [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x64a19d47 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x2e317d5c [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x7f978c8 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0xcd67ed3 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x155df82 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x1c5ec8e7 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x3457c382 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x51d44098 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x76a2ace0 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x491ef7e2 [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x67f6489f [0215.144] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x334f3900 [0215.145] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x29d4b03f [0215.145] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x5b97e4c7 [0215.145] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x3f58348e [0215.145] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x73418844 [0215.145] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x2009b934 [0215.145] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0xb31bebd [0215.145] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x731018fb [0215.145] RtlRandomEx (in: Seed=0xb1efa88 | out: Seed=0xb1efa88) returned 0x42665cda [0215.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148ad870 [0215.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148b1478 [0215.158] ReadFile (in: hFile=0x2b6c, lpBuffer=0x148ad870, nNumberOfBytesToRead=0xb0, lpNumberOfBytesRead=0xb1efa84, lpOverlapped=0x0 | out: lpBuffer=0x148ad870*, lpNumberOfBytesRead=0xb1efa84*=0xb0, lpOverlapped=0x0) returned 1 [0215.160] SetFilePointerEx (in: hFile=0x2b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.160] WriteFile (in: hFile=0x2b6c, lpBuffer=0x148b1478*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0xb1efa88, lpOverlapped=0x0 | out: lpBuffer=0x148b1478*, lpNumberOfBytesWritten=0xb1efa88*=0xb0, lpOverlapped=0x0) returned 1 [0215.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b38 [0215.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064880 [0215.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064880) returned 1 [0215.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b1478) returned 1 [0215.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148ad870) returned 1 [0215.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 [0215.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4e78) returned 1 [0215.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f3d8 [0215.663] SetFilePointerEx (in: hFile=0x2b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.664] WriteFile (in: hFile=0x2b6c, lpBuffer=0x84075a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb1efafc, lpOverlapped=0x0 | out: lpBuffer=0x84075a0*, lpNumberOfBytesWritten=0xb1efafc*=0x10c, lpOverlapped=0x0) returned 1 [0215.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84075a0) returned 1 [0215.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f318) returned 1 [0215.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064880) returned 1 [0215.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f3d8) returned 1 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b38) returned 1 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a48) returned 1 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80637f0) returned 1 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d00) returned 1 [0215.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81876a0 [0215.937] wcscpy (in: _Dest=0x81876a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" [0215.937] wcscat (in: _Dest=0x81876a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.f0dbec" [0215.937] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0xb1efa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3efa888 [0216.180] FlushFileBuffers (hFile=0x2b6c) returned 1 [0216.196] CloseHandle (hObject=0x2b6c) returned 1 [0216.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404908 [0216.287] wcscpy (in: _Dest=0x8404908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\" [0216.287] wcscat (in: _Dest=0x8404908, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0216.287] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0216.288] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b18 [0217.840] WriteFile (in: hFile=0x1b18, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb1efaa4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb1efaa4*=0x70c, lpOverlapped=0x0) returned 1 [0221.140] CloseHandle (hObject=0x1b18) returned 1 [0221.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404908) returned 1 [0221.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7770) returned 1 Thread: id = 6242 os_tid = 0x1710 [0192.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json")) returned 0x2020 [0203.280] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0215.127] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b74 [0215.128] GetFileSizeEx (in: hFile=0x1b74, lpFileSize=0xdfcfdf8 | out: lpFileSize=0xdfcfdf8*=221) returned 1 [0215.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0215.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80649e8 [0215.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a48 [0215.128] NtQuerySystemTime (in: CurrentTime=0xdfcfd80 | out: CurrentTime=0xdfcfd80*=132471540828492000) returned 0x0 [0215.128] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x42ac85c9 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x4c09e4b0 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x62595708 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x285bec68 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x1aabf97e [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x3f827c5a [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x4d915373 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x5ce30139 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x412481bc [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x683b35ba [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x2af56b4c [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x1e0142fe [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x2cea3a45 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x3c85737c [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x69878e9a [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x1d385523 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x774a6277 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x36452ccb [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x133e50cf [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0xb507520 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x6e9269d5 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x5e9b2247 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x49f31aa [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x6fb98be9 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0xbe4ccb8 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x665b7b59 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x2f22d976 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x5412e49 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0xbcc4dbf [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x3257a075 [0215.129] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x3036383d [0215.130] RtlRandomEx (in: Seed=0xdfcfd78 | out: Seed=0xdfcfd78) returned 0x37727643 [0215.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0215.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148a6060 [0215.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148a9c68 [0215.140] ReadFile (in: hFile=0x1b74, lpBuffer=0x148a6060, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xdfcfd74, lpOverlapped=0x0 | out: lpBuffer=0x148a6060*, lpNumberOfBytesRead=0xdfcfd74*=0xdd, lpOverlapped=0x0) returned 1 [0215.142] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.142] WriteFile (in: hFile=0x1b74, lpBuffer=0x148a9c68*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xdfcfd78, lpOverlapped=0x0 | out: lpBuffer=0x148a9c68*, lpNumberOfBytesWritten=0xdfcfd78*=0xdd, lpOverlapped=0x0) returned 1 [0215.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063318 [0215.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062008 [0215.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062008) returned 1 [0215.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a9c68) returned 1 [0215.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a6060) returned 1 [0215.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67d90) returned 1 [0215.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d4e30) returned 1 [0215.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fb28 [0215.658] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.658] WriteFile (in: hFile=0x1b74, lpBuffer=0x8406538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdfcfdec, lpOverlapped=0x0 | out: lpBuffer=0x8406538*, lpNumberOfBytesWritten=0xdfcfdec*=0x10c, lpOverlapped=0x0) returned 1 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406538) returned 1 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa98) returned 1 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062008) returned 1 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb28) returned 1 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063318) returned 1 [0215.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80649e8) returned 1 [0215.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80647b8) returned 1 [0215.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80647e0) returned 1 [0215.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187a48 [0215.912] wcscpy (in: _Dest=0x8187a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" [0215.912] wcscat (in: _Dest=0x8187a48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.f0dbec" [0215.912] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0xdfcfd70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9f90 [0216.174] FlushFileBuffers (hFile=0x1b74) returned 1 [0216.182] CloseHandle (hObject=0x1b74) returned 1 [0216.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d0a20 [0216.284] wcscpy (in: _Dest=0x81d0a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\" [0216.284] wcscat (in: _Dest=0x81d0a20, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\F0DBEC-Readme.txt" [0216.285] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0216.285] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27d4 [0217.839] WriteFile (in: hFile=0x27d4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdfcfd94, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdfcfd94*=0x70c, lpOverlapped=0x0) returned 1 [0221.136] CloseHandle (hObject=0x27d4) returned 1 [0221.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0a20) returned 1 [0221.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e79c0) returned 1 Thread: id = 6243 os_tid = 0x1714 [0192.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json")) returned 0x2020 [0204.359] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", dwFileAttributes=0x20) returned 1 [0214.493] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19b4 [0214.494] GetFileSizeEx (in: hFile=0x19b4, lpFileSize=0x46bf790 | out: lpFileSize=0x46bf790*=375) returned 1 [0214.494] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x173, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.494] ReadFile (in: hFile=0x19b4, lpBuffer=0x46bf79c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x46bf778, lpOverlapped=0x0 | out: lpBuffer=0x46bf79c*, lpNumberOfBytesRead=0x46bf778*=0x4, lpOverlapped=0x0) returned 1 [0214.496] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063cc8 [0214.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063db8 [0214.497] NtQuerySystemTime (in: CurrentTime=0x46bf718 | out: CurrentTime=0x46bf718*=132471540822096000) returned 0x0 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x11c6b223 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x466cb3ff [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x69d22e2d [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x13b6f33 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x539142dc [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x7e72d9af [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x1451315 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x52348ec9 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x762df998 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x2bfd7ca8 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x65ec6fa5 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x83f722d [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x2a38e3f0 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x4dccd3cc [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x7ad082b1 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x5560261b [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x1c3a0d1f [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x3d791276 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x35f8b493 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x5a9f3a27 [0214.497] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x773c12f0 [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x3ea2fd03 [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x509541a7 [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x1f0a0d6a [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x6d46f3ff [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x38a19443 [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x63c21f0c [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x190d1f7a [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x29377bf3 [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x9793d9a [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x7c59d0dd [0214.498] RtlRandomEx (in: Seed=0x46bf710 | out: Seed=0x46bf710) returned 0x4ec48e90 [0214.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x817e8d0 [0214.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81824d8 [0214.510] ReadFile (in: hFile=0x19b4, lpBuffer=0x817e8d0, nNumberOfBytesToRead=0x177, lpNumberOfBytesRead=0x46bf70c, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesRead=0x46bf70c*=0x177, lpOverlapped=0x0) returned 1 [0214.510] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.510] WriteFile (in: hFile=0x19b4, lpBuffer=0x81824d8*, nNumberOfBytesToWrite=0x177, lpNumberOfBytesWritten=0x46bf710, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesWritten=0x46bf710*=0x177, lpOverlapped=0x0) returned 1 [0215.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062878 [0215.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062990 [0215.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062990) returned 1 [0215.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0215.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0215.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84034e8) returned 1 [0215.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea3a0) returned 1 [0215.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fdf8 [0215.747] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.747] WriteFile (in: hFile=0x19b4, lpBuffer=0x8406df8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x46bf784, lpOverlapped=0x0 | out: lpBuffer=0x8406df8*, lpNumberOfBytesWritten=0x46bf784*=0x10c, lpOverlapped=0x0) returned 1 [0216.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406df8) returned 1 [0216.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fee8) returned 1 [0216.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062990) returned 1 [0216.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdf8) returned 1 [0216.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062878) returned 1 [0216.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063cc8) returned 1 [0216.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d90) returned 1 [0216.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e30) returned 1 [0216.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404080 [0216.015] wcscpy (in: _Dest=0x8404080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" [0216.015] wcscat (in: _Dest=0x8404080, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.f0dbec" [0216.015] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.f0dbec", NtPathName=0x46bf708, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa0d8 [0216.274] FlushFileBuffers (hFile=0x19b4) returned 1 [0216.280] CloseHandle (hObject=0x19b4) returned 1 [0216.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f0428 [0216.359] wcscpy (in: _Dest=0x81f0428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\" [0216.359] wcscat (in: _Dest=0x81f0428, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\F0DBEC-Readme.txt" [0216.359] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\f0dbec-readme.txt")) returned 0xffffffff [0216.359] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fe4 [0216.370] WriteFile (in: hFile=0x1fe4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x46bf72c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x46bf72c*=0x70c, lpOverlapped=0x0) returned 1 [0216.381] CloseHandle (hObject=0x1fe4) returned 1 [0216.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0428) returned 1 [0216.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7ae8) returned 1 Thread: id = 6244 os_tid = 0x1720 [0192.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json")) returned 0x2020 [0204.359] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0214.476] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12dc [0214.477] GetFileSizeEx (in: hFile=0x12dc, lpFileSize=0x8f4f8f8 | out: lpFileSize=0x8f4f8f8*=277) returned 1 [0214.477] SetFilePointerEx (in: hFile=0x12dc, liDistanceToMove=0x111, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.477] ReadFile (in: hFile=0x12dc, lpBuffer=0x8f4f904, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8f4f8e0, lpOverlapped=0x0 | out: lpBuffer=0x8f4f904*, lpNumberOfBytesRead=0x8f4f8e0*=0x4, lpOverlapped=0x0) returned 1 [0214.479] SetFilePointerEx (in: hFile=0x12dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063cf0 [0214.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063cc8 [0214.480] NtQuerySystemTime (in: CurrentTime=0x8f4f880 | out: CurrentTime=0x8f4f880*=132471540821940000) returned 0x0 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x4b9f9516 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x17a4887e [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x57efe65f [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x7de139eb [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x6f4913e4 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x6c70b83f [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x58035960 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x7f3d51d1 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x37c0053c [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x95b86b8 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x2ec7842d [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x7122dcdf [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x27406284 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x6fd359e6 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x2323ad88 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x7ce71c23 [0214.480] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x122fe987 [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x59da751d [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x71886f3f [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x58c37bfb [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x7ae980eb [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x69a9f615 [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x9688e99 [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x35b8cb3a [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x53f05bf0 [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x3ea934ca [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x11d31ceb [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x40726cd [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x172dd57 [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x610ead06 [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x398774b6 [0214.481] RtlRandomEx (in: Seed=0x8f4f878 | out: Seed=0x8f4f878) returned 0x3a4179cd [0214.492] ReadFile (in: hFile=0x12dc, lpBuffer=0x81770c0, nNumberOfBytesToRead=0x115, lpNumberOfBytesRead=0x8f4f874, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesRead=0x8f4f874*=0x115, lpOverlapped=0x0) returned 1 [0214.492] SetFilePointerEx (in: hFile=0x12dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.492] WriteFile (in: hFile=0x12dc, lpBuffer=0x817acc8*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0x8f4f878, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesWritten=0x8f4f878*=0x115, lpOverlapped=0x0) returned 1 [0215.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062af8 [0215.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062a30 [0215.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a30) returned 1 [0215.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0215.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0215.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84035d8) returned 1 [0215.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea310) returned 1 [0215.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f228 [0215.742] SetFilePointerEx (in: hFile=0x12dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.742] WriteFile (in: hFile=0x12dc, lpBuffer=0x8407488*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8f4f8ec, lpOverlapped=0x0 | out: lpBuffer=0x8407488*, lpNumberOfBytesWritten=0x8f4f8ec*=0x10c, lpOverlapped=0x0) returned 1 [0216.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407488) returned 1 [0216.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa68) returned 1 [0216.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a30) returned 1 [0216.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f228) returned 1 [0216.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062af8) returned 1 [0216.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063cf0) returned 1 [0216.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ca0) returned 1 [0216.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d40) returned 1 [0216.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403930 [0216.007] wcscpy (in: _Dest=0x8403930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" [0216.007] wcscat (in: _Dest=0x8403930, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.f0dbec" [0216.007] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x8f4f870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa5f8 [0216.258] FlushFileBuffers (hFile=0x12dc) returned 1 [0216.276] CloseHandle (hObject=0x12dc) returned 1 [0216.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81f00b0 [0216.353] wcscpy (in: _Dest=0x81f00b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\" [0216.353] wcscat (in: _Dest=0x81f00b0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\F0DBEC-Readme.txt" [0216.353] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0216.354] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf4 [0216.369] WriteFile (in: hFile=0x1bf4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8f4f894, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8f4f894*=0x70c, lpOverlapped=0x0) returned 1 [0216.376] CloseHandle (hObject=0x1bf4) returned 1 [0216.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f00b0) returned 1 [0216.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7c10) returned 1 Thread: id = 6245 os_tid = 0x1724 [0192.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json")) returned 0x2020 [0204.356] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0214.458] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fe4 [0214.459] GetFileSizeEx (in: hFile=0x1fe4, lpFileSize=0xb11f788 | out: lpFileSize=0xb11f788*=205) returned 1 [0214.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c00 [0214.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063cf0 [0214.459] NtQuerySystemTime (in: CurrentTime=0xb11f710 | out: CurrentTime=0xb11f710*=132471540821784000) returned 0x0 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x1295131e [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x4b9cc708 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x4dff9a46 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x7421d424 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x5c60e785 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x558161fa [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x704c8504 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x4383bb73 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x13d9509f [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x93a5940 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x6ab226e4 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x60d0bf3b [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x412efdd3 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x1dc6aad3 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x5670fa50 [0214.459] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x3d5204ef [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0xdb03f00 [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x6e0275fb [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x5579aaee [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x124b399 [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x5d72cfd3 [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x510d52a6 [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x3b1d56be [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x514b0e4b [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x544d0d25 [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x7991b61 [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x506da087 [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0xf38c08b [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x643d225a [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x736c75c5 [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x3184a7a5 [0214.460] RtlRandomEx (in: Seed=0xb11f708 | out: Seed=0xb11f708) returned 0x72f77df5 [0214.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814a060 [0214.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81734b8 [0214.473] ReadFile (in: hFile=0x1fe4, lpBuffer=0x814a060, nNumberOfBytesToRead=0xcd, lpNumberOfBytesRead=0xb11f704, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesRead=0xb11f704*=0xcd, lpOverlapped=0x0) returned 1 [0214.476] SetFilePointerEx (in: hFile=0x1fe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.476] WriteFile (in: hFile=0x1fe4, lpBuffer=0x81734b8*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0xb11f708, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesWritten=0xb11f708*=0xcd, lpOverlapped=0x0) returned 1 [0215.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062a58 [0215.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80628f0 [0215.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80628f0) returned 1 [0215.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0215.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0215.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403560) returned 1 [0215.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea2c8) returned 1 [0215.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fc48 [0215.743] SetFilePointerEx (in: hFile=0x1fe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.743] WriteFile (in: hFile=0x1fe4, lpBuffer=0x8407370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb11f77c, lpOverlapped=0x0 | out: lpBuffer=0x8407370*, lpNumberOfBytesWritten=0xb11f77c*=0x10c, lpOverlapped=0x0) returned 1 [0216.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407370) returned 1 [0216.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0216.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80628f0) returned 1 [0216.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0216.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062a58) returned 1 [0216.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c00) returned 1 [0216.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d68) returned 1 [0216.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e08) returned 1 [0216.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404428 [0216.009] wcscpy (in: _Dest=0x8404428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" [0216.009] wcscat (in: _Dest=0x8404428, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.f0dbec" [0216.009] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0xb11f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa220 [0216.264] FlushFileBuffers (hFile=0x1fe4) returned 1 [0216.279] CloseHandle (hObject=0x1fe4) returned 1 [0216.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81efe60 [0216.356] wcscpy (in: _Dest=0x81efe60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" [0216.356] wcscat (in: _Dest=0x81efe60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\F0DBEC-Readme.txt" [0216.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0216.356] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19b4 [0216.369] WriteFile (in: hFile=0x19b4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xb11f724, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xb11f724*=0x70c, lpOverlapped=0x0) returned 1 [0216.379] CloseHandle (hObject=0x19b4) returned 1 [0216.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efe60) returned 1 [0216.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7d38) returned 1 Thread: id = 6246 os_tid = 0x1734 [0192.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json")) returned 0x2020 [0204.356] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0214.384] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17fc [0214.385] GetFileSizeEx (in: hFile=0x17fc, lpFileSize=0xdf3fde8 | out: lpFileSize=0xdf3fde8*=293) returned 1 [0214.385] SetFilePointerEx (in: hFile=0x17fc, liDistanceToMove=0x121, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.385] ReadFile (in: hFile=0x17fc, lpBuffer=0xdf3fdf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdf3fdd0, lpOverlapped=0x0 | out: lpBuffer=0xdf3fdf4*, lpNumberOfBytesRead=0xdf3fdd0*=0x4, lpOverlapped=0x0) returned 1 [0214.387] SetFilePointerEx (in: hFile=0x17fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063bd8 [0214.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063c00 [0214.387] NtQuerySystemTime (in: CurrentTime=0xdf3fd70 | out: CurrentTime=0xdf3fd70*=132471540821004000) returned 0x0 [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x4fc3b6f7 [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x30a7509e [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x4732821d [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x2cf7d54a [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x380b257b [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x5102d7c6 [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x57f90bb3 [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x458a89 [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x727351a2 [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0xe6a9880 [0214.387] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0xa060980 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x4b9354c2 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x5d5f7ee1 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x625fb7d9 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x37b5ba10 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x5404e999 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x77dcc2f [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x4afc5cc6 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x2be4314d [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0xeebc08e [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x530fc01e [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x7d71fafb [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x4fa122a0 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x324a3ad4 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x3361fba0 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x6807fce9 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x1540bacd [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x526ceca3 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x7f7943ac [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x20d85e28 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x377f4559 [0214.388] RtlRandomEx (in: Seed=0xdf3fd68 | out: Seed=0xdf3fd68) returned 0x12fb85d [0214.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8208458 [0214.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0214.457] ReadFile (in: hFile=0x17fc, lpBuffer=0x8208458, nNumberOfBytesToRead=0x125, lpNumberOfBytesRead=0xdf3fd64, lpOverlapped=0x0 | out: lpBuffer=0x8208458*, lpNumberOfBytesRead=0xdf3fd64*=0x125, lpOverlapped=0x0) returned 1 [0214.457] SetFilePointerEx (in: hFile=0x17fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.457] WriteFile (in: hFile=0x17fc, lpBuffer=0x8146458*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0xdf3fd68, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesWritten=0xdf3fd68*=0x125, lpOverlapped=0x0) returned 1 [0215.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063368 [0215.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062ad0 [0215.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ad0) returned 1 [0215.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0215.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8208458) returned 1 [0215.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403650) returned 1 [0215.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83e9bc0) returned 1 [0215.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6faf8 [0215.738] SetFilePointerEx (in: hFile=0x17fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.739] WriteFile (in: hFile=0x17fc, lpBuffer=0x8406308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdf3fddc, lpOverlapped=0x0 | out: lpBuffer=0x8406308*, lpNumberOfBytesWritten=0xdf3fddc*=0x10c, lpOverlapped=0x0) returned 1 [0216.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406308) returned 1 [0216.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fac8) returned 1 [0216.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ad0) returned 1 [0216.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6faf8) returned 1 [0216.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063368) returned 1 [0216.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bd8) returned 1 [0216.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c78) returned 1 [0216.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063d18) returned 1 [0216.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81882d0 [0216.004] wcscpy (in: _Dest=0x81882d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" [0216.004] wcscat (in: _Dest=0x81882d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.f0dbec" [0216.004] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0xdf3fd60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa368 [0216.253] FlushFileBuffers (hFile=0x17fc) returned 1 [0216.270] CloseHandle (hObject=0x17fc) returned 1 [0216.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d0fe8 [0216.338] wcscpy (in: _Dest=0x81d0fe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" [0216.338] wcscat (in: _Dest=0x81d0fe8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\F0DBEC-Readme.txt" [0216.338] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0216.339] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c04 [0216.368] WriteFile (in: hFile=0x1c04, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdf3fd84, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdf3fd84*=0x70c, lpOverlapped=0x0) returned 1 [0216.373] CloseHandle (hObject=0x1c04) returned 1 [0216.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0fe8) returned 1 [0216.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7e60) returned 1 Thread: id = 6247 os_tid = 0x1744 [0192.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json")) returned 0x2020 [0204.355] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", dwFileAttributes=0x20) returned 1 [0214.368] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x26e4 [0214.369] GetFileSizeEx (in: hFile=0x26e4, lpFileSize=0xe25fa48 | out: lpFileSize=0xe25fa48*=277) returned 1 [0214.369] SetFilePointerEx (in: hFile=0x26e4, liDistanceToMove=0x111, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.369] ReadFile (in: hFile=0x26e4, lpBuffer=0xe25fa54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe25fa30, lpOverlapped=0x0 | out: lpBuffer=0xe25fa54*, lpNumberOfBytesRead=0xe25fa30*=0x4, lpOverlapped=0x0) returned 1 [0214.371] SetFilePointerEx (in: hFile=0x26e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ae8 [0214.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063bd8 [0214.371] NtQuerySystemTime (in: CurrentTime=0xe25f9d0 | out: CurrentTime=0xe25f9d0*=132471540820848000) returned 0x0 [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x49adf73 [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x6e1b7435 [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x30c960ef [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x41d33664 [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x2629ed2c [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x57d684f3 [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x3dfc3e8d [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x3d13c92c [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x778192a2 [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x131ca58b [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x6d71ccbf [0214.371] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x78dfb12d [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x30c5424a [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x6f45c4c4 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x3e8ea643 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x70fae891 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x2b804866 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x2ce3f11d [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x73b39561 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x3a484291 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x587d31a5 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x788453c9 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x197c0aa [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x56930089 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0xe5ba582 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x1becb164 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x15451274 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x73e4424f [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x6c509634 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x46483c66 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0x4d0aa046 [0214.372] RtlRandomEx (in: Seed=0xe25f9c8 | out: Seed=0xe25f9c8) returned 0xdea0e40 [0214.383] ReadFile (in: hFile=0x26e4, lpBuffer=0x82390c0, nNumberOfBytesToRead=0x115, lpNumberOfBytesRead=0xe25f9c4, lpOverlapped=0x0 | out: lpBuffer=0x82390c0*, lpNumberOfBytesRead=0xe25f9c4*=0x115, lpOverlapped=0x0) returned 1 [0214.383] SetFilePointerEx (in: hFile=0x26e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.383] WriteFile (in: hFile=0x26e4, lpBuffer=0x823ccc8*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0xe25f9c8, lpOverlapped=0x0 | out: lpBuffer=0x823ccc8*, lpNumberOfBytesWritten=0xe25f9c8*=0x115, lpOverlapped=0x0) returned 1 [0215.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062198 [0215.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064790 [0215.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064790) returned 1 [0215.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x823ccc8) returned 1 [0215.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82390c0) returned 1 [0215.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403740) returned 1 [0215.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea820) returned 1 [0215.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f798 [0215.737] SetFilePointerEx (in: hFile=0x26e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.737] WriteFile (in: hFile=0x26e4, lpBuffer=0x8407258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe25fa3c, lpOverlapped=0x0 | out: lpBuffer=0x8407258*, lpNumberOfBytesWritten=0xe25fa3c*=0x10c, lpOverlapped=0x0) returned 1 [0216.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407258) returned 1 [0216.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f408) returned 1 [0216.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064790) returned 1 [0216.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f798) returned 1 [0216.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062198) returned 1 [0216.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ae8) returned 1 [0216.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063bb0) returned 1 [0216.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c50) returned 1 [0216.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8186458 [0216.002] wcscpy (in: _Dest=0x8186458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" [0216.002] wcscat (in: _Dest=0x8186458, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.f0dbec" [0216.002] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.f0dbec", NtPathName=0xe25f9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9bb8 [0216.249] FlushFileBuffers (hFile=0x26e4) returned 1 [0216.266] CloseHandle (hObject=0x26e4) returned 1 [0216.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d16d8 [0216.336] wcscpy (in: _Dest=0x81d16d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" [0216.336] wcscat (in: _Dest=0x81d16d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\F0DBEC-Readme.txt" [0216.336] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\f0dbec-readme.txt")) returned 0xffffffff [0216.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b08 [0217.849] WriteFile (in: hFile=0x1b08, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe25f9e4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe25f9e4*=0x70c, lpOverlapped=0x0) returned 1 [0221.162] CloseHandle (hObject=0x1b08) returned 1 [0221.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d16d8) returned 1 [0221.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7f88) returned 1 Thread: id = 6248 os_tid = 0x1748 [0192.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json")) returned 0x2020 [0204.355] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", dwFileAttributes=0x20) returned 1 [0214.351] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x24a4 [0214.352] GetFileSizeEx (in: hFile=0x24a4, lpFileSize=0xc15fb58 | out: lpFileSize=0xc15fb58*=336) returned 1 [0214.352] SetFilePointerEx (in: hFile=0x24a4, liDistanceToMove=0x14c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.352] ReadFile (in: hFile=0x24a4, lpBuffer=0xc15fb64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc15fb40, lpOverlapped=0x0 | out: lpBuffer=0xc15fb64*, lpNumberOfBytesRead=0xc15fb40*=0x4, lpOverlapped=0x0) returned 1 [0214.354] SetFilePointerEx (in: hFile=0x24a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b10 [0214.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063ae8 [0214.355] NtQuerySystemTime (in: CurrentTime=0xc15fae0 | out: CurrentTime=0xc15fae0*=132471540820692000) returned 0x0 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x174b994a [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x1a9ea56c [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x3edfb17c [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x5caf388c [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x707bcccd [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x43744413 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x14dc9ee1 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x17cd4362 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x4d10300c [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x15fe1ede [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x87cd3ef [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0xdbf3580 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x7b1c4221 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x59f35625 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x6d9ca57f [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x6aa50939 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x3225c3df [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x72043ab5 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x14576aa5 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x6650097f [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x5d5fadf1 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x6559b3 [0214.355] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x2dd8f913 [0214.356] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0xfa95ca9 [0214.356] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x188a3585 [0214.356] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x197c8e14 [0214.356] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x5402d193 [0214.356] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x1e5e3d6f [0214.356] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x11da8027 [0214.356] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x6dc77e3f [0214.356] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x65bc4035 [0214.356] RtlRandomEx (in: Seed=0xc15fad8 | out: Seed=0xc15fad8) returned 0x3901b5a8 [0214.367] ReadFile (in: hFile=0x24a4, lpBuffer=0x82408d0, nNumberOfBytesToRead=0x150, lpNumberOfBytesRead=0xc15fad4, lpOverlapped=0x0 | out: lpBuffer=0x82408d0*, lpNumberOfBytesRead=0xc15fad4*=0x150, lpOverlapped=0x0) returned 1 [0214.367] SetFilePointerEx (in: hFile=0x24a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.367] WriteFile (in: hFile=0x24a4, lpBuffer=0x82444d8*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0xc15fad8, lpOverlapped=0x0 | out: lpBuffer=0x82444d8*, lpNumberOfBytesWritten=0xc15fad8*=0x150, lpOverlapped=0x0) returned 1 [0215.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80625a8 [0215.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80631b0 [0215.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631b0) returned 1 [0215.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82444d8) returned 1 [0215.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82408d0) returned 1 [0215.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84029a8) returned 1 [0215.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea7d8) returned 1 [0215.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fdc8 [0215.714] SetFilePointerEx (in: hFile=0x24a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.714] WriteFile (in: hFile=0x24a4, lpBuffer=0x8405ea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc15fb4c, lpOverlapped=0x0 | out: lpBuffer=0x8405ea8*, lpNumberOfBytesWritten=0xc15fb4c*=0x10c, lpOverlapped=0x0) returned 1 [0215.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405ea8) returned 1 [0215.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff78) returned 1 [0215.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631b0) returned 1 [0215.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdc8) returned 1 [0215.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625a8) returned 1 [0215.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b10) returned 1 [0215.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ac0) returned 1 [0215.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b60) returned 1 [0215.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8186ce0 [0215.990] wcscpy (in: _Dest=0x8186ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" [0215.990] wcscat (in: _Dest=0x8186ce0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.f0dbec" [0215.990] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.f0dbec", NtPathName=0xc15fad0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8ee8 [0216.245] FlushFileBuffers (hFile=0x24a4) returned 1 [0216.256] CloseHandle (hObject=0x24a4) returned 1 [0216.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d08f8 [0216.307] wcscpy (in: _Dest=0x81d08f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" [0216.307] wcscat (in: _Dest=0x81d08f8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\F0DBEC-Readme.txt" [0216.307] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\f0dbec-readme.txt")) returned 0xffffffff [0216.307] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a08 [0217.846] WriteFile (in: hFile=0x1a08, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc15faf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc15faf4*=0x70c, lpOverlapped=0x0) returned 1 [0221.156] CloseHandle (hObject=0x1a08) returned 1 [0221.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d08f8) returned 1 [0221.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e80b0) returned 1 Thread: id = 6249 os_tid = 0x174c [0192.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif")) returned 0x20 [0192.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.500] GetLastError () returned 0x5 [0192.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 6250 os_tid = 0x1750 [0192.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif")) returned 0x20 [0192.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.502] GetLastError () returned 0x5 [0192.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80209c0) returned 1 Thread: id = 6251 os_tid = 0x175c [0192.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x20 [0192.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x20) returned 0 [0192.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.503] GetLastError () returned 0x5 [0192.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x20) returned 0 [0192.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 6252 os_tid = 0x1764 [0192.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x20 [0192.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x20) returned 0 [0192.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.505] GetLastError () returned 0x5 [0192.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x20) returned 0 [0192.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 6253 os_tid = 0x17c8 [0192.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x20 [0192.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x20) returned 0 [0192.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.507] GetLastError () returned 0x5 [0192.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x20) returned 0 [0192.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 6254 os_tid = 0x17cc [0192.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x20 [0192.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x20) returned 0 [0192.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.514] GetLastError () returned 0x5 [0192.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x20) returned 0 [0192.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 6255 os_tid = 0x17dc [0192.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid")) returned 0x20 [0195.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x20) returned 0 [0195.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.072] GetLastError () returned 0x5 [0195.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x20) returned 0 [0195.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 6256 os_tid = 0x7ec [0192.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf")) returned 0x20 [0195.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x20) returned 0 [0195.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.467] GetLastError () returned 0x5 [0195.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x20) returned 0 [0195.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 6257 os_tid = 0x598 [0192.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf")) returned 0x20 [0195.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x20) returned 0 [0195.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.418] GetLastError () returned 0x5 [0195.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x20) returned 0 [0195.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 6258 os_tid = 0xb4c [0192.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf")) returned 0x20 [0195.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x20) returned 0 [0195.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.420] GetLastError () returned 0x5 [0195.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x20) returned 0 [0195.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 6259 os_tid = 0x6a8 [0192.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf")) returned 0x20 [0195.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x20) returned 0 [0195.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.422] GetLastError () returned 0x5 [0195.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x20) returned 0 [0195.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a6d8) returned 1 Thread: id = 6260 os_tid = 0x6a4 [0192.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x20 [0195.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x20) returned 0 [0195.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.424] GetLastError () returned 0x5 [0195.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x20) returned 0 [0195.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfc40) returned 1 Thread: id = 6261 os_tid = 0x448 [0192.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf")) returned 0x20 [0195.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x20) returned 0 [0195.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.426] GetLastError () returned 0x5 [0195.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x20) returned 0 [0195.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 Thread: id = 6262 os_tid = 0x524 [0192.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf")) returned 0x20 [0195.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x20) returned 0 [0195.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.428] GetLastError () returned 0x5 [0195.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x20) returned 0 [0195.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 Thread: id = 6263 os_tid = 0x14c [0192.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf")) returned 0x20 [0195.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x20) returned 0 [0195.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.430] GetLastError () returned 0x5 [0195.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x20) returned 0 [0195.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b558) returned 1 Thread: id = 6264 os_tid = 0x4f8 [0192.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf")) returned 0x20 [0195.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x20) returned 0 [0195.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.431] GetLastError () returned 0x5 [0195.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x20) returned 0 [0195.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bec50) returned 1 Thread: id = 6265 os_tid = 0x754 [0192.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x20 [0195.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x20) returned 0 [0195.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.433] GetLastError () returned 0x5 [0195.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x20) returned 0 [0195.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0108) returned 1 Thread: id = 6266 os_tid = 0x894 [0192.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x20 [0195.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x20) returned 0 [0195.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.439] GetLastError () returned 0x5 [0195.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x20) returned 0 [0195.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be678) returned 1 Thread: id = 6267 os_tid = 0xba4 [0192.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x20 [0195.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x20) returned 0 [0195.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.441] GetLastError () returned 0x5 [0195.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x20) returned 0 [0195.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be568) returned 1 Thread: id = 6268 os_tid = 0xb9c [0192.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x20 [0195.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x20) returned 0 [0195.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.435] GetLastError () returned 0x5 [0195.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x20) returned 0 [0195.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 Thread: id = 6269 os_tid = 0xb98 [0192.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x20 [0195.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x20) returned 0 [0195.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.442] GetLastError () returned 0x5 [0195.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x20) returned 0 [0195.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 Thread: id = 6270 os_tid = 0xbb8 [0192.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x20 [0195.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x20) returned 0 [0195.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.437] GetLastError () returned 0x5 [0195.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x20) returned 0 [0195.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf5e0) returned 1 Thread: id = 6271 os_tid = 0x8d4 [0192.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x20 [0195.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x20) returned 0 [0195.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.444] GetLastError () returned 0x5 [0195.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x20) returned 0 [0195.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be5f0) returned 1 Thread: id = 6272 os_tid = 0x8e8 [0192.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x20 [0195.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x20) returned 0 [0195.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.447] GetLastError () returned 0x5 [0195.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x20) returned 0 [0195.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf998) returned 1 Thread: id = 6273 os_tid = 0x8f8 [0192.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x20 [0195.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x20) returned 0 [0195.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.449] GetLastError () returned 0x5 [0195.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x20) returned 0 [0195.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be920) returned 1 Thread: id = 6274 os_tid = 0xadc [0192.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x20 [0195.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x20) returned 0 [0195.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.451] GetLastError () returned 0x5 [0195.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x20) returned 0 [0195.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 6275 os_tid = 0x7e0 [0192.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x20 [0195.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x20) returned 0 [0195.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.453] GetLastError () returned 0x5 [0195.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x20) returned 0 [0195.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 6276 os_tid = 0x578 [0192.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x20 [0195.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x20) returned 0 [0195.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.454] GetLastError () returned 0x5 [0195.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x20) returned 0 [0195.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 Thread: id = 6277 os_tid = 0x32c [0192.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x20 [0195.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x20) returned 0 [0195.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.456] GetLastError () returned 0x5 [0195.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x20) returned 0 [0195.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 6278 os_tid = 0x5f4 [0192.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x20 [0195.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x20) returned 0 [0195.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.458] GetLastError () returned 0x5 [0195.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x20) returned 0 [0195.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 6279 os_tid = 0x5d8 [0192.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x20 [0195.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x20) returned 0 [0195.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.460] GetLastError () returned 0x5 [0195.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x20) returned 0 [0195.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 6280 os_tid = 0x99c [0192.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x20 [0195.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x20) returned 0 [0195.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.462] GetLastError () returned 0x5 [0195.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x20) returned 0 [0195.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 6281 os_tid = 0x9cc [0192.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x20 [0195.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x20) returned 0 [0195.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.463] GetLastError () returned 0x5 [0195.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x20) returned 0 [0195.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 6282 os_tid = 0x9dc [0192.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x20 [0195.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x20) returned 0 [0195.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.465] GetLastError () returned 0x5 [0195.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x20) returned 0 [0195.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 6283 os_tid = 0xf50 [0192.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x20 [0195.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x20) returned 0 [0195.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.417] GetLastError () returned 0x5 [0195.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x20) returned 0 [0195.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0328) returned 1 Thread: id = 6284 os_tid = 0xe74 [0192.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x20 [0195.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x20) returned 0 [0195.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.415] GetLastError () returned 0x5 [0195.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x20) returned 0 [0195.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfff8) returned 1 Thread: id = 6285 os_tid = 0x6f0 [0192.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml")) returned 0x20 [0195.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML", dwFileAttributes=0x20) returned 0 [0195.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.814] GetLastError () returned 0x5 [0195.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML", dwFileAttributes=0x20) returned 0 [0195.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 6286 os_tid = 0x714 [0192.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml")) returned 0x20 [0198.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML", dwFileAttributes=0x20) returned 0 [0198.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.641] GetLastError () returned 0x5 [0198.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML", dwFileAttributes=0x20) returned 0 [0198.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 6287 os_tid = 0x710 [0192.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml")) returned 0x20 [0198.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML", dwFileAttributes=0x20) returned 0 [0198.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.639] GetLastError () returned 0x5 [0198.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML", dwFileAttributes=0x20) returned 0 [0198.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 Thread: id = 6288 os_tid = 0x1804 [0192.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv")) returned 0x20 [0198.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV", dwFileAttributes=0x20) returned 0 [0198.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.645] GetLastError () returned 0x5 [0198.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV", dwFileAttributes=0x20) returned 0 [0198.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 6289 os_tid = 0x1808 [0192.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv")) returned 0x20 [0198.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV", dwFileAttributes=0x20) returned 0 [0198.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.638] GetLastError () returned 0x5 [0198.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV", dwFileAttributes=0x20) returned 0 [0198.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 Thread: id = 6290 os_tid = 0x180c [0192.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml")) returned 0x20 [0198.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML", dwFileAttributes=0x20) returned 0 [0198.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.643] GetLastError () returned 0x5 [0198.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML", dwFileAttributes=0x20) returned 0 [0198.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5508) returned 1 Thread: id = 6291 os_tid = 0x1810 [0192.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml")) returned 0x20 [0198.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML", dwFileAttributes=0x20) returned 0 [0198.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.636] GetLastError () returned 0x5 [0198.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML", dwFileAttributes=0x20) returned 0 [0198.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 6292 os_tid = 0x1814 [0192.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv")) returned 0x20 [0198.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV", dwFileAttributes=0x20) returned 0 [0198.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.642] GetLastError () returned 0x5 [0198.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV", dwFileAttributes=0x20) returned 0 [0198.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 6293 os_tid = 0x1818 [0192.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml")) returned 0x20 [0198.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML", dwFileAttributes=0x20) returned 0 [0198.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.634] GetLastError () returned 0x5 [0198.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML", dwFileAttributes=0x20) returned 0 [0198.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 6294 os_tid = 0x1824 [0192.714] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json")) returned 0x2020 [0204.321] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", dwFileAttributes=0x20) returned 1 [0216.848] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fec [0216.849] GetFileSizeEx (in: hFile=0x1fec, lpFileSize=0x9c8fd80 | out: lpFileSize=0x9c8fd80*=196) returned 1 [0216.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0216.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b9c8 [0216.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49920 [0216.849] NtQuerySystemTime (in: CurrentTime=0x9c8fd08 | out: CurrentTime=0x9c8fd08*=132471540845652000) returned 0x0 [0216.849] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x3be341c3 [0216.849] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x710aabb4 [0216.849] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x67a4dac7 [0216.849] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x25dd3ac2 [0216.849] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x52d52d7f [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x280da30e [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x180ed92b [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x2989606e [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x143a04bb [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x11aa82a8 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x1fe874e4 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x625f9b7d [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x6b87118b [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x4c8f6183 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x259ae8f4 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x79813527 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x7326aea9 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x46c58926 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0xf51e9b9 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x34633cc8 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x66abd537 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0xbd2f97f [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x5f6a344c [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x6dbc582b [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x7e62efb4 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x625b69d6 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x62714bfd [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x5fa868c1 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x707581b2 [0216.850] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x71ed5a57 [0216.851] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x54db4ad8 [0216.851] RtlRandomEx (in: Seed=0x9c8fd00 | out: Seed=0x9c8fd00) returned 0x100cf29 [0216.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b810) returned 1 [0216.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8390140 [0216.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8393d48 [0216.862] ReadFile (in: hFile=0x1fec, lpBuffer=0x8390140, nNumberOfBytesToRead=0xc4, lpNumberOfBytesRead=0x9c8fcfc, lpOverlapped=0x0 | out: lpBuffer=0x8390140*, lpNumberOfBytesRead=0x9c8fcfc*=0xc4, lpOverlapped=0x0) returned 1 [0216.865] SetFilePointerEx (in: hFile=0x1fec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.865] WriteFile (in: hFile=0x1fec, lpBuffer=0x8393d48*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x9c8fd00, lpOverlapped=0x0 | out: lpBuffer=0x8393d48*, lpNumberOfBytesWritten=0x9c8fd00*=0xc4, lpOverlapped=0x0) returned 1 [0219.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8061fe0 [0219.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062ff8 [0219.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ff8) returned 1 [0219.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8393d48) returned 1 [0219.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8390140) returned 1 [0219.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84036c8) returned 1 [0219.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5d98) returned 1 [0219.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0219.865] SetFilePointerEx (in: hFile=0x1fec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.866] WriteFile (in: hFile=0x1fec, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9c8fd74, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0x9c8fd74*=0x10c, lpOverlapped=0x0) returned 1 [0220.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0220.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0220.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062ff8) returned 1 [0220.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0220.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061fe0) returned 1 [0220.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0220.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0220.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0220.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81f4ea8 [0220.555] wcscpy (in: _Dest=0x81f4ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" [0220.555] wcscat (in: _Dest=0x81f4ea8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.f0dbec" [0220.555] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.f0dbec", NtPathName=0x9c8fcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8ee8 [0220.864] FlushFileBuffers (hFile=0x1fec) returned 1 [0220.873] CloseHandle (hObject=0x1fec) returned 1 [0220.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x84015e8 [0220.898] wcscpy (in: _Dest=0x84015e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" [0220.898] wcscat (in: _Dest=0x84015e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\F0DBEC-Readme.txt" [0220.898] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\f0dbec-readme.txt")) returned 0xffffffff [0220.899] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19a4 [0220.907] WriteFile (in: hFile=0x19a4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9c8fd1c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9c8fd1c*=0x70c, lpOverlapped=0x0) returned 1 [0221.111] CloseHandle (hObject=0x19a4) returned 1 [0221.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84015e8) returned 1 [0221.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8678) returned 1 Thread: id = 6295 os_tid = 0x1828 [0192.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3ef5de0 [0192.715] wcscpy (in: _Dest=0x3ef5de0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0192.715] wcscat (in: _Dest=0x3ef5de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" [0192.715] wcscat (in: _Dest=0x3ef5de0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*" [0192.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0192.715] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe687a860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6914550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099510 [0192.715] wcscmp (_String1=".", _String2=".") returned 0 [0192.715] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe687a860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6914550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.715] wcscmp (_String1="..", _String2=".") returned 1 [0192.716] wcscmp (_String1="..", _String2="..") returned 0 [0192.716] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6914550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.716] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.716] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401cd8 [0192.716] wcscpy (in: _Dest=0x8401cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0192.716] wcscat (in: _Dest=0x8401cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" [0192.716] wcscat (in: _Dest=0x8401cd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" [0193.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0193.923] FindNextFileW (in: hFindFile=0x8099510, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6914550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.924] FindClose (in: hFindFile=0x8099510 | out: hFindFile=0x8099510) returned 1 [0193.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0193.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0193.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ab8) returned 1 Thread: id = 6296 os_tid = 0x182c [0192.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8335dd0 [0192.717] wcscpy (in: _Dest=0x8335dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0192.717] wcscat (in: _Dest=0x8335dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" [0192.717] wcscat (in: _Dest=0x8335dd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*" [0192.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0192.717] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe695d930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098cd0 [0192.717] wcscmp (_String1=".", _String2=".") returned 0 [0192.717] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe695d930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.717] wcscmp (_String1="..", _String2=".") returned 1 [0192.717] wcscmp (_String1="..", _String2="..") returned 0 [0192.717] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe695d930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.717] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.717] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401bb0 [0192.717] wcscpy (in: _Dest=0x8401bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0192.718] wcscat (in: _Dest=0x8401bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" [0192.718] wcscat (in: _Dest=0x8401bb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" [0193.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0193.926] FindNextFileW (in: hFindFile=0x8098cd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe695d930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.926] FindClose (in: hFindFile=0x8098cd0 | out: hFindFile=0x8098cd0) returned 1 [0193.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0193.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335dd0) returned 1 [0193.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333fe0) returned 1 Thread: id = 6297 os_tid = 0x1830 [0192.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x8334c48 [0192.719] wcscpy (in: _Dest=0x8334c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0192.719] wcscat (in: _Dest=0x8334c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" [0192.719] wcscat (in: _Dest=0x8334c48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*" [0192.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0192.719] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e3810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b3060, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37458 [0192.719] wcscmp (_String1=".", _String2=".") returned 0 [0192.719] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e3810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b3060, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.720] wcscmp (_String1="..", _String2=".") returned 1 [0192.720] wcscmp (_String1="..", _String2="..") returned 0 [0192.720] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b3060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.720] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.720] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x8401270 [0192.720] wcscpy (in: _Dest=0x8401270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0192.720] wcscat (in: _Dest=0x8401270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" [0192.720] wcscat (in: _Dest=0x8401270, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" [0193.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0193.928] FindNextFileW (in: hFindFile=0x3f37458, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b3060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.928] FindClose (in: hFindFile=0x3f37458 | out: hFindFile=0x3f37458) returned 1 [0193.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0193.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334c48) returned 1 [0193.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ed8) returned 1 Thread: id = 6298 os_tid = 0xad8 [0192.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x81dfdf0 [0192.721] wcscpy (in: _Dest=0x81dfdf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0192.721] wcscat (in: _Dest=0x81dfdf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" [0192.721] wcscat (in: _Dest=0x81dfdf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*" [0192.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0192.721] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e1100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69abb30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37d98 [0192.721] wcscmp (_String1=".", _String2=".") returned 0 [0192.721] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e1100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69abb30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.721] wcscmp (_String1="..", _String2=".") returned 1 [0192.721] wcscmp (_String1="..", _String2="..") returned 0 [0192.721] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69abb30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.721] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.722] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8401a88 [0192.722] wcscpy (in: _Dest=0x8401a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0192.722] wcscat (in: _Dest=0x8401a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" [0192.722] wcscat (in: _Dest=0x8401a88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" [0193.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x266c [0193.931] FindNextFileW (in: hFindFile=0x3f37d98, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69abb30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.931] FindClose (in: hFindFile=0x3f37d98 | out: hFindFile=0x3f37d98) returned 1 [0193.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0193.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfdf0) returned 1 [0193.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333698) returned 1 Thread: id = 6299 os_tid = 0x1834 [0192.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x81dfcd8 [0192.723] wcscpy (in: _Dest=0x81dfcd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0192.723] wcscat (in: _Dest=0x81dfcd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" [0192.723] wcscat (in: _Dest=0x81dfcd8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*" [0192.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0192.723] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f37dd8 [0192.723] wcscmp (_String1=".", _String2=".") returned 0 [0192.723] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.723] wcscmp (_String1="..", _String2=".") returned 1 [0192.723] wcscmp (_String1="..", _String2="..") returned 0 [0192.723] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69bcca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bf3b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.723] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.724] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x8401960 [0192.724] wcscpy (in: _Dest=0x8401960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0192.724] wcscat (in: _Dest=0x8401960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" [0192.724] wcscat (in: _Dest=0x8401960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" [0193.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f8 [0193.933] FindNextFileW (in: hFindFile=0x3f37dd8, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69bcca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bf3b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.933] FindClose (in: hFindFile=0x3f37dd8 | out: hFindFile=0x3f37dd8) returned 1 [0193.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0193.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfcd8) returned 1 [0193.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333278) returned 1 Thread: id = 6300 os_tid = 0x1838 [0192.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif")) returned 0x20 [0192.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0192.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.725] GetLastError () returned 0x5 [0192.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0192.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80218c0) returned 1 Thread: id = 6301 os_tid = 0x119c [0192.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20 [0192.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.728] GetLastError () returned 0x5 [0192.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 6302 os_tid = 0xf7c [0192.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20 [0192.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.730] GetLastError () returned 0x5 [0192.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80209c0) returned 1 Thread: id = 6303 os_tid = 0xf78 [0192.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif")) returned 0x20 [0195.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0195.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.822] GetLastError () returned 0x5 [0195.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0195.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80206f0) returned 1 Thread: id = 6304 os_tid = 0x14fc [0192.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif")) returned 0x20 [0196.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0196.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.561] GetLastError () returned 0x5 [0196.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0196.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b1b8) returned 1 Thread: id = 6305 os_tid = 0x804 [0192.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif")) returned 0x20 [0195.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.565] GetLastError () returned 0x5 [0195.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3afe8) returned 1 Thread: id = 6306 os_tid = 0x1388 [0192.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif")) returned 0x20 [0195.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.824] GetLastError () returned 0x5 [0195.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39ce0) returned 1 Thread: id = 6307 os_tid = 0x121c [0192.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif")) returned 0x20 [0192.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.734] GetLastError () returned 0x5 [0192.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ac48) returned 1 Thread: id = 6308 os_tid = 0x6b8 [0192.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif")) returned 0x20 [0192.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.736] GetLastError () returned 0x5 [0192.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b8f8) returned 1 Thread: id = 6309 os_tid = 0xf74 [0192.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif")) returned 0x20 [0195.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0195.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.816] GetLastError () returned 0x5 [0195.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0195.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021320) returned 1 Thread: id = 6310 os_tid = 0x1844 [0192.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20 [0195.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.879] GetLastError () returned 0x5 [0195.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae3e8) returned 1 Thread: id = 6311 os_tid = 0x1848 [0192.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20 [0195.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.553] GetLastError () returned 0x5 [0195.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021500) returned 1 Thread: id = 6312 os_tid = 0x184c [0192.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif")) returned 0x20 [0195.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0195.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.819] GetLastError () returned 0x5 [0195.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0195.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 Thread: id = 6313 os_tid = 0x1850 [0192.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20 [0195.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.882] GetLastError () returned 0x5 [0195.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 6314 os_tid = 0x1854 [0192.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20 [0195.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.558] GetLastError () returned 0x5 [0195.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae2f0) returned 1 Thread: id = 6315 os_tid = 0x1858 [0192.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif")) returned 0x20 [0195.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0195.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.818] GetLastError () returned 0x5 [0195.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0195.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b810) returned 1 Thread: id = 6316 os_tid = 0x185c [0192.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif")) returned 0x20 [0195.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.880] GetLastError () returned 0x5 [0195.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020ba0) returned 1 Thread: id = 6317 os_tid = 0x1860 [0192.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif")) returned 0x20 [0195.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.555] GetLastError () returned 0x5 [0195.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a7c0) returned 1 Thread: id = 6318 os_tid = 0x1864 [0192.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif")) returned 0x20 [0192.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0192.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.744] GetLastError () returned 0x5 [0192.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0192.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020e70) returned 1 Thread: id = 6319 os_tid = 0x1868 [0192.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif")) returned 0x20 [0192.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0192.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.746] GetLastError () returned 0x5 [0192.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0192.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021b90) returned 1 Thread: id = 6320 os_tid = 0x1870 [0192.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20 [0192.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.749] GetLastError () returned 0x5 [0192.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80207e0) returned 1 Thread: id = 6321 os_tid = 0x1900 [0192.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20 [0192.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.751] GetLastError () returned 0x5 [0192.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80217d0) returned 1 Thread: id = 6322 os_tid = 0x1904 [0192.753] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json")) returned 0x2020 [0193.086] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0205.065] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde0 [0205.066] GetFileSizeEx (in: hFile=0xde0, lpFileSize=0xd46f800 | out: lpFileSize=0xd46f800*=264) returned 1 [0205.066] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.066] ReadFile (in: hFile=0xde0, lpBuffer=0xd46f80c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd46f7e8, lpOverlapped=0x0 | out: lpBuffer=0xd46f80c*, lpNumberOfBytesRead=0xd46f7e8*=0x4, lpOverlapped=0x0) returned 1 [0205.068] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063200 [0205.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062288 [0205.069] NtQuerySystemTime (in: CurrentTime=0xd46f788 | out: CurrentTime=0xd46f788*=132471540728340000) returned 0x0 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x4d2d0df7 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x7310ce70 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0xa4934c [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0xd6e09e8 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x488bd8ca [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x4b4fa16b [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x11c3eb39 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x7dedfb26 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x71a748c9 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x3d18c588 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x50b1e180 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x6e53b7f2 [0205.069] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x25170337 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x4e1cf152 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x55d203d1 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x11563166 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x550d80c9 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x79db837d [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x24899236 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x2ad7cd72 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x416ab3b8 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x535a04b6 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x75323aa4 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x39d26f64 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x61caca77 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x3beb8f4b [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x7fabcc5c [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x393174a7 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x567a8c00 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x2f784e67 [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x34421c2b [0205.070] RtlRandomEx (in: Seed=0xd46f780 | out: Seed=0xd46f780) returned 0x48b90a5a [0205.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8353d48 [0205.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x835b558 [0205.086] ReadFile (in: hFile=0xde0, lpBuffer=0x8353d48, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xd46f77c, lpOverlapped=0x0 | out: lpBuffer=0x8353d48*, lpNumberOfBytesRead=0xd46f77c*=0x108, lpOverlapped=0x0) returned 1 [0205.086] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.086] WriteFile (in: hFile=0xde0, lpBuffer=0x835b558*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xd46f780, lpOverlapped=0x0 | out: lpBuffer=0x835b558*, lpNumberOfBytesWritten=0xd46f780*=0x108, lpOverlapped=0x0) returned 1 [0209.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c18 [0209.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d429e8 [0209.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0209.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835b558) returned 1 [0209.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8353d48) returned 1 [0209.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df89e8) returned 1 [0209.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4bf0) returned 1 [0209.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fc48 [0209.884] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.884] WriteFile (in: hFile=0xde0, lpBuffer=0x81e12b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd46f7f4, lpOverlapped=0x0 | out: lpBuffer=0x81e12b8*, lpNumberOfBytesWritten=0xd46f7f4*=0x10c, lpOverlapped=0x0) returned 1 [0209.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e12b8) returned 1 [0209.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0209.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0209.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0209.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0209.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063200) returned 1 [0209.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062260) returned 1 [0209.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621c0) returned 1 [0209.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403930 [0209.887] wcscpy (in: _Dest=0x8403930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" [0209.887] wcscat (in: _Dest=0x8403930, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.f0dbec" [0209.887] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0xd46f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3dcc8 [0215.291] FlushFileBuffers (hFile=0xde0) returned 1 [0215.301] CloseHandle (hObject=0xde0) returned 1 [0215.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e7898 [0215.679] wcscpy (in: _Dest=0x81e7898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" [0215.679] wcscat (in: _Dest=0x81e7898, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\F0DBEC-Readme.txt" [0215.680] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0215.680] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.050] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd46f79c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd46f79c*=0x70c, lpOverlapped=0x0) returned 1 [0216.397] CloseHandle (hObject=0x10c4) returned 1 [0216.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7898) returned 1 [0216.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb898) returned 1 Thread: id = 6323 os_tid = 0x1908 [0192.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah")) returned 0x20 [0195.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah", dwFileAttributes=0x20) returned 0 [0195.885] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.885] GetLastError () returned 0x5 [0195.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah", dwFileAttributes=0x20) returned 0 [0195.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 Thread: id = 6324 os_tid = 0x1920 [0192.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\center")) returned 0x20 [0195.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center", dwFileAttributes=0x20) returned 0 [0195.884] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\center"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.884] GetLastError () returned 0x5 [0195.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center", dwFileAttributes=0x20) returned 0 [0195.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 6325 os_tid = 0x1924 [0192.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem")) returned 0x20 [0196.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem", dwFileAttributes=0x20) returned 0 [0196.555] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.556] GetLastError () returned 0x5 [0196.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem", dwFileAttributes=0x20) returned 0 [0196.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df2f8) returned 1 Thread: id = 6326 os_tid = 0x1928 [0192.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif")) returned 0x20 [0192.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.762] GetLastError () returned 0x5 [0192.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0192.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020c90) returned 1 Thread: id = 6327 os_tid = 0x192c [0192.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif")) returned 0x20 [0192.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.765] GetLastError () returned 0x5 [0192.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0192.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021c80) returned 1 Thread: id = 6328 os_tid = 0x1930 [0192.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port_of_spain")) returned 0x20 [0192.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain", dwFileAttributes=0x20) returned 0 [0192.767] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port_of_spain"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.767] GetLastError () returned 0x5 [0192.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain", dwFileAttributes=0x20) returned 0 [0192.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 6329 os_tid = 0x1934 [0192.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\puerto_rico")) returned 0x20 [0195.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico", dwFileAttributes=0x20) returned 0 [0195.901] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\puerto_rico"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.902] GetLastError () returned 0x5 [0195.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico", dwFileAttributes=0x20) returned 0 [0195.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b28) returned 1 Thread: id = 6330 os_tid = 0x1938 [0192.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rainy_river")) returned 0x20 [0195.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River", dwFileAttributes=0x20) returned 0 [0195.903] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rainy_river"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.903] GetLastError () returned 0x5 [0195.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River", dwFileAttributes=0x20) returned 0 [0195.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 Thread: id = 6331 os_tid = 0x193c [0192.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rankin_inlet")) returned 0x20 [0195.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet", dwFileAttributes=0x20) returned 0 [0195.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rankin_inlet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.904] GetLastError () returned 0x5 [0195.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet", dwFileAttributes=0x20) returned 0 [0195.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ab0) returned 1 Thread: id = 6332 os_tid = 0x1940 [0192.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\recife")) returned 0x20 [0195.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife", dwFileAttributes=0x20) returned 0 [0195.906] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\recife"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.906] GetLastError () returned 0x5 [0195.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife", dwFileAttributes=0x20) returned 0 [0195.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1b78) returned 1 Thread: id = 6333 os_tid = 0x1944 [0192.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\regina")) returned 0x20 [0195.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina", dwFileAttributes=0x20) returned 0 [0195.907] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\regina"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.907] GetLastError () returned 0x5 [0195.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina", dwFileAttributes=0x20) returned 0 [0195.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1a28) returned 1 Thread: id = 6334 os_tid = 0x1948 [0192.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\resolute")) returned 0x20 [0195.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute", dwFileAttributes=0x20) returned 0 [0195.908] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\resolute"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.909] GetLastError () returned 0x5 [0195.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute", dwFileAttributes=0x20) returned 0 [0195.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1718) returned 1 Thread: id = 6335 os_tid = 0x194c [0192.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rio_branco")) returned 0x20 [0195.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco", dwFileAttributes=0x20) returned 0 [0195.910] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rio_branco"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.910] GetLastError () returned 0x5 [0195.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco", dwFileAttributes=0x20) returned 0 [0195.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67ef8) returned 1 Thread: id = 6336 os_tid = 0x1950 [0192.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santarem")) returned 0x20 [0195.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem", dwFileAttributes=0x20) returned 0 [0195.911] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santarem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.911] GetLastError () returned 0x5 [0195.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem", dwFileAttributes=0x20) returned 0 [0195.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1948) returned 1 Thread: id = 6337 os_tid = 0x1954 [0192.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santa_isabel")) returned 0x20 [0195.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel", dwFileAttributes=0x20) returned 0 [0195.914] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santa_isabel"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.914] GetLastError () returned 0x5 [0195.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel", dwFileAttributes=0x20) returned 0 [0195.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e680d8) returned 1 Thread: id = 6338 os_tid = 0x1958 [0192.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santiago")) returned 0x20 [0195.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago", dwFileAttributes=0x20) returned 0 [0195.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santiago"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.913] GetLastError () returned 0x5 [0195.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago", dwFileAttributes=0x20) returned 0 [0195.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1a98) returned 1 Thread: id = 6339 os_tid = 0x195c [0192.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santo_domingo")) returned 0x20 [0195.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo", dwFileAttributes=0x20) returned 0 [0195.915] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santo_domingo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.916] GetLastError () returned 0x5 [0195.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo", dwFileAttributes=0x20) returned 0 [0195.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67e08) returned 1 Thread: id = 6340 os_tid = 0x1960 [0192.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sao_paulo")) returned 0x20 [0195.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo", dwFileAttributes=0x20) returned 0 [0195.917] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sao_paulo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.917] GetLastError () returned 0x5 [0195.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo", dwFileAttributes=0x20) returned 0 [0195.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1328) returned 1 Thread: id = 6341 os_tid = 0x1964 [0192.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\scoresbysund")) returned 0x20 [0195.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund", dwFileAttributes=0x20) returned 0 [0195.919] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\scoresbysund"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.919] GetLastError () returned 0x5 [0195.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund", dwFileAttributes=0x20) returned 0 [0195.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32ca0) returned 1 Thread: id = 6342 os_tid = 0xb34 [0192.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sitka")) returned 0x20 [0195.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka", dwFileAttributes=0x20) returned 0 [0195.921] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sitka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.922] GetLastError () returned 0x5 [0195.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka", dwFileAttributes=0x20) returned 0 [0195.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46338) returned 1 Thread: id = 6343 os_tid = 0x1968 [0192.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_johns")) returned 0x20 [0195.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns", dwFileAttributes=0x20) returned 0 [0195.923] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_johns"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.923] GetLastError () returned 0x5 [0195.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns", dwFileAttributes=0x20) returned 0 [0195.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1638) returned 1 Thread: id = 6344 os_tid = 0x196c [0192.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_kitts")) returned 0x20 [0195.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts", dwFileAttributes=0x20) returned 0 [0195.900] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_kitts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.900] GetLastError () returned 0x5 [0195.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts", dwFileAttributes=0x20) returned 0 [0195.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1cc8) returned 1 Thread: id = 6345 os_tid = 0x1970 [0192.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_lucia")) returned 0x20 [0195.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia", dwFileAttributes=0x20) returned 0 [0195.821] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_lucia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.821] GetLastError () returned 0x5 [0195.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia", dwFileAttributes=0x20) returned 0 [0195.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db16a8) returned 1 Thread: id = 6346 os_tid = 0x1974 [0192.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_thomas")) returned 0x20 [0195.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas", dwFileAttributes=0x20) returned 0 [0195.888] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_thomas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.888] GetLastError () returned 0x5 [0195.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas", dwFileAttributes=0x20) returned 0 [0195.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1be8) returned 1 Thread: id = 6347 os_tid = 0x1978 [0192.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_vincent")) returned 0x20 [0195.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent", dwFileAttributes=0x20) returned 0 [0195.890] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_vincent"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.890] GetLastError () returned 0x5 [0195.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent", dwFileAttributes=0x20) returned 0 [0195.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32b38) returned 1 Thread: id = 6348 os_tid = 0x197c [0192.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\swift_current")) returned 0x20 [0195.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current", dwFileAttributes=0x20) returned 0 [0195.891] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\swift_current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.891] GetLastError () returned 0x5 [0195.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current", dwFileAttributes=0x20) returned 0 [0195.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32d90) returned 1 Thread: id = 6349 os_tid = 0x1980 [0192.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tegucigalpa")) returned 0x20 [0195.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa", dwFileAttributes=0x20) returned 0 [0195.893] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tegucigalpa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.893] GetLastError () returned 0x5 [0195.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa", dwFileAttributes=0x20) returned 0 [0195.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f329d0) returned 1 Thread: id = 6350 os_tid = 0x1984 [0192.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thule")) returned 0x20 [0195.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule", dwFileAttributes=0x20) returned 0 [0195.894] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thule"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.894] GetLastError () returned 0x5 [0195.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule", dwFileAttributes=0x20) returned 0 [0195.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d465a8) returned 1 Thread: id = 6351 os_tid = 0x1988 [0192.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thunder_bay")) returned 0x20 [0195.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay", dwFileAttributes=0x20) returned 0 [0195.896] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thunder_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.896] GetLastError () returned 0x5 [0195.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay", dwFileAttributes=0x20) returned 0 [0195.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33330) returned 1 Thread: id = 6352 os_tid = 0x198c [0192.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tijuana")) returned 0x20 [0195.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana", dwFileAttributes=0x20) returned 0 [0195.897] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tijuana"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.897] GetLastError () returned 0x5 [0195.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana", dwFileAttributes=0x20) returned 0 [0195.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db19b8) returned 1 Thread: id = 6353 os_tid = 0x1990 [0192.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\toronto")) returned 0x20 [0195.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto", dwFileAttributes=0x20) returned 0 [0195.898] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\toronto"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.899] GetLastError () returned 0x5 [0195.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto", dwFileAttributes=0x20) returned 0 [0195.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1b08) returned 1 Thread: id = 6354 os_tid = 0x1994 [0192.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tortola")) returned 0x20 [0196.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola", dwFileAttributes=0x20) returned 0 [0196.558] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tortola"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.558] GetLastError () returned 0x5 [0196.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola", dwFileAttributes=0x20) returned 0 [0196.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84032d0) returned 1 Thread: id = 6355 os_tid = 0x1758 [0192.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\vancouver")) returned 0x20 [0196.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver", dwFileAttributes=0x20) returned 0 [0196.557] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\vancouver"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.557] GetLastError () returned 0x5 [0196.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver", dwFileAttributes=0x20) returned 0 [0196.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403260) returned 1 Thread: id = 6356 os_tid = 0x1998 [0193.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\whitehorse")) returned 0x20 [0196.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse", dwFileAttributes=0x20) returned 0 [0196.554] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\whitehorse"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.554] GetLastError () returned 0x5 [0196.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse", dwFileAttributes=0x20) returned 0 [0196.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 Thread: id = 6357 os_tid = 0x199c [0193.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css")) returned 0x20 [0195.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0195.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.024] GetLastError () returned 0x5 [0195.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0195.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404b0) returned 1 Thread: id = 6358 os_tid = 0x19a0 [0193.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif")) returned 0x20 [0195.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0195.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.027] GetLastError () returned 0x5 [0195.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0195.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40340) returned 1 Thread: id = 6359 os_tid = 0x19a4 [0193.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif")) returned 0x20 [0195.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0195.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.029] GetLastError () returned 0x5 [0195.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0195.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 6360 os_tid = 0x230 [0193.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif")) returned 0x20 [0195.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0195.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.031] GetLastError () returned 0x5 [0195.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0195.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40d50) returned 1 Thread: id = 6361 os_tid = 0xe94 [0193.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif")) returned 0x20 [0193.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0193.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.306] GetLastError () returned 0x5 [0193.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0193.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 6362 os_tid = 0x740 [0193.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif")) returned 0x20 [0194.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0194.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.941] GetLastError () returned 0x5 [0194.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0194.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3338e8) returned 1 Thread: id = 6363 os_tid = 0xa50 [0193.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif")) returned 0x20 [0193.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0193.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.037] GetLastError () returned 0x5 [0193.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0193.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 Thread: id = 6364 os_tid = 0xa60 [0193.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif")) returned 0x20 [0193.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0193.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.039] GetLastError () returned 0x5 [0193.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0193.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021c80) returned 1 Thread: id = 6365 os_tid = 0x1310 [0193.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif")) returned 0x20 [0193.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0193.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.042] GetLastError () returned 0x5 [0193.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0193.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020c90) returned 1 Thread: id = 6366 os_tid = 0x1314 [0193.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif")) returned 0x20 [0193.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0193.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.044] GetLastError () returned 0x5 [0193.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0193.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae008) returned 1 Thread: id = 6367 os_tid = 0x1318 [0193.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20 [0195.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.550] GetLastError () returned 0x5 [0195.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 6368 os_tid = 0x131c [0193.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20 [0195.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.635] GetLastError () returned 0x5 [0195.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 Thread: id = 6369 os_tid = 0xb6c [0193.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif")) returned 0x20 [0193.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0193.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.048] GetLastError () returned 0x5 [0193.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0193.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a080) returned 1 Thread: id = 6370 os_tid = 0xb60 [0193.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif")) returned 0x20 [0194.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.122] GetLastError () returned 0x5 [0194.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b2a0) returned 1 Thread: id = 6371 os_tid = 0xbac [0193.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif")) returned 0x20 [0193.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0193.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.052] GetLastError () returned 0x5 [0193.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0193.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020d80) returned 1 Thread: id = 6372 os_tid = 0xbc0 [0193.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif")) returned 0x20 [0194.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.125] GetLastError () returned 0x5 [0194.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b8f8) returned 1 Thread: id = 6373 os_tid = 0x1320 [0193.055] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json")) returned 0x2020 [0193.055] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0205.039] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c40 [0205.039] GetFileSizeEx (in: hFile=0x1c40, lpFileSize=0xde4fb50 | out: lpFileSize=0xde4fb50*=256) returned 1 [0205.039] SetFilePointerEx (in: hFile=0x1c40, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.039] ReadFile (in: hFile=0x1c40, lpBuffer=0xde4fb5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xde4fb38, lpOverlapped=0x0 | out: lpBuffer=0xde4fb5c*, lpNumberOfBytesRead=0xde4fb38*=0x4, lpOverlapped=0x0) returned 1 [0205.042] SetFilePointerEx (in: hFile=0x1c40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063278 [0205.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063200 [0205.042] NtQuerySystemTime (in: CurrentTime=0xde4fad8 | out: CurrentTime=0xde4fad8*=132471540728028000) returned 0x0 [0205.042] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x2e0eda42 [0205.042] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x4233f687 [0205.042] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x3888953f [0205.042] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x2085b8d6 [0205.042] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x53923cb4 [0205.042] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x68835d16 [0205.042] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x6e43b7f8 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x26c37429 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0xd9610c9 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x7d515298 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x1ea49a43 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x712015f5 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x49c4077f [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x3e935ae7 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x19a4e712 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0xd2e0868 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x4d77a9b8 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x2c9bcf2e [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x30483102 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x2305edb9 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x5b75a9ef [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x42f4a719 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x669ecbc0 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x5bc2c964 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x3dfa86d6 [0205.043] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x74b47704 [0205.045] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x4514d89f [0205.045] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0xb72d1a0 [0205.045] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x5b036d0 [0205.045] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x60342899 [0205.045] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x5208a780 [0205.045] RtlRandomEx (in: Seed=0xde4fad0 | out: Seed=0xde4fad0) returned 0x49189cfb [0205.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8366970 [0205.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x836e180 [0205.063] ReadFile (in: hFile=0x1c40, lpBuffer=0x8366970, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xde4facc, lpOverlapped=0x0 | out: lpBuffer=0x8366970*, lpNumberOfBytesRead=0xde4facc*=0x100, lpOverlapped=0x0) returned 1 [0205.063] SetFilePointerEx (in: hFile=0x1c40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.063] WriteFile (in: hFile=0x1c40, lpBuffer=0x836e180*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xde4fad0, lpOverlapped=0x0 | out: lpBuffer=0x836e180*, lpNumberOfBytesWritten=0xde4fad0*=0x100, lpOverlapped=0x0) returned 1 [0207.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063340 [0207.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063390 [0207.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063390) returned 1 [0207.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836e180) returned 1 [0207.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8366970) returned 1 [0207.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0207.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4d10) returned 1 [0207.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f228 [0207.916] SetFilePointerEx (in: hFile=0x1c40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.916] WriteFile (in: hFile=0x1c40, lpBuffer=0x30bcbc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xde4fb44, lpOverlapped=0x0 | out: lpBuffer=0x30bcbc8*, lpNumberOfBytesWritten=0xde4fb44*=0x10c, lpOverlapped=0x0) returned 1 [0208.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0208.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa68) returned 1 [0208.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063390) returned 1 [0208.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f228) returned 1 [0208.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063340) returned 1 [0208.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063278) returned 1 [0208.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631d8) returned 1 [0208.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0208.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x83ef2f0 [0208.156] wcscpy (in: _Dest=0x83ef2f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" [0208.156] wcscat (in: _Dest=0x83ef2f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.f0dbec" [0208.156] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0xde4fac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c848 [0208.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c848) returned 1 [0208.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14899300) returned 1 [0208.454] NtQueryInformationFile (in: FileHandle=0x1c40, IoStatusBlock=0xde4faa0, FileInformation=0xde4faa8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xde4faa0, FileInformation=0xde4faa8) returned 0x0 [0208.454] NtSetInformationFile (FileHandle=0x1c40, IoStatusBlock=0xde4faa0, FileInformation=0xde4faa8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ef2f0) returned 1 [0208.835] FlushFileBuffers (hFile=0x1c40) returned 1 [0209.077] CloseHandle (hObject=0x1c40) returned 1 [0209.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a12e0 [0209.079] wcscpy (in: _Dest=0x148a12e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" [0209.079] wcscat (in: _Dest=0x148a12e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\F0DBEC-Readme.txt" [0209.079] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0209.079] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c40 [0209.080] WriteFile (in: hFile=0x1c40, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xde4faec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xde4faec*=0x70c, lpOverlapped=0x0) returned 1 [0209.081] CloseHandle (hObject=0x1c40) returned 1 [0209.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a12e0) returned 1 [0209.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb770) returned 1 Thread: id = 6374 os_tid = 0x1324 [0193.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif")) returned 0x20 [0195.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0195.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.809] GetLastError () returned 0x5 [0195.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0195.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020f60) returned 1 Thread: id = 6375 os_tid = 0x1328 [0193.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif")) returned 0x20 [0195.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif", dwFileAttributes=0x20) returned 0 [0195.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.874] GetLastError () returned 0x5 [0195.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif", dwFileAttributes=0x20) returned 0 [0195.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ac48) returned 1 Thread: id = 6376 os_tid = 0x132c [0193.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif")) returned 0x20 [0195.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0195.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.876] GetLastError () returned 0x5 [0195.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0195.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b640) returned 1 Thread: id = 6377 os_tid = 0xb68 [0193.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif")) returned 0x20 [0195.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0195.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.872] GetLastError () returned 0x5 [0195.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0195.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a990) returned 1 Thread: id = 6378 os_tid = 0x1534 [0193.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat")) returned 0x20 [0193.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", dwFileAttributes=0x20) returned 0 [0193.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.858] GetLastError () returned 0x5 [0193.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", dwFileAttributes=0x20) returned 0 [0193.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b3d8) returned 1 Thread: id = 6379 os_tid = 0x1330 [0193.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf")) returned 0x20 [0193.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", dwFileAttributes=0x20) returned 0 [0193.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.860] GetLastError () returned 0x5 [0193.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", dwFileAttributes=0x20) returned 0 [0193.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bd58) returned 1 Thread: id = 6380 os_tid = 0x1334 [0193.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll")) returned 0x20 [0193.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.862] GetLastError () returned 0x5 [0193.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 Thread: id = 6381 os_tid = 0x1540 [0193.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll")) returned 0x20 [0193.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.864] GetLastError () returned 0x5 [0193.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b968) returned 1 Thread: id = 6382 os_tid = 0x1340 [0193.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs")) returned 0x20 [0193.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", dwFileAttributes=0x20) returned 0 [0193.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.865] GetLastError () returned 0x5 [0193.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", dwFileAttributes=0x20) returned 0 [0193.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 6383 os_tid = 0x588 [0193.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc")) returned 0x20 [0193.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0193.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.867] GetLastError () returned 0x5 [0193.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0193.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 Thread: id = 6384 os_tid = 0xab0 [0193.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt")) returned 0x20 [0193.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0193.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.869] GetLastError () returned 0x5 [0193.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0193.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 Thread: id = 6385 os_tid = 0xad4 [0193.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk")) returned 0x20 [0193.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.870] GetLastError () returned 0x5 [0193.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b7a0) returned 1 Thread: id = 6386 os_tid = 0xbb4 [0193.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk")) returned 0x20 [0193.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.872] GetLastError () returned 0x5 [0193.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a078) returned 1 Thread: id = 6387 os_tid = 0x1554 [0193.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol")) returned 0x20 [0193.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", dwFileAttributes=0x20) returned 0 [0193.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.874] GetLastError () returned 0x5 [0193.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", dwFileAttributes=0x20) returned 0 [0193.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b4d8) returned 1 Thread: id = 6388 os_tid = 0xc64 [0193.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs")) returned 0x20 [0193.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", dwFileAttributes=0x20) returned 0 [0193.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.876] GetLastError () returned 0x5 [0193.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", dwFileAttributes=0x20) returned 0 [0193.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bdd8) returned 1 Thread: id = 6389 os_tid = 0xb14 [0193.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc")) returned 0x20 [0193.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", dwFileAttributes=0x20) returned 0 [0193.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.878] GetLastError () returned 0x5 [0193.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", dwFileAttributes=0x20) returned 0 [0193.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 6390 os_tid = 0x155c [0193.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt")) returned 0x20 [0193.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", dwFileAttributes=0x20) returned 0 [0193.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.879] GetLastError () returned 0x5 [0193.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", dwFileAttributes=0x20) returned 0 [0193.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 6391 os_tid = 0x1c4 [0193.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk")) returned 0x20 [0193.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.881] GetLastError () returned 0x5 [0193.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 Thread: id = 6392 os_tid = 0x1a60 [0193.883] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json")) returned 0x2020 [0195.119] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0205.087] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb4 [0211.326] GetFileSizeEx (in: hFile=0x1cb4, lpFileSize=0xf6afd78 | out: lpFileSize=0xf6afd78*=256) returned 1 [0211.326] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.326] ReadFile (in: hFile=0x1cb4, lpBuffer=0xf6afd84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf6afd60, lpOverlapped=0x0 | out: lpBuffer=0xf6afd84*, lpNumberOfBytesRead=0xf6afd60*=0x4, lpOverlapped=0x0) returned 1 [0211.328] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b60 [0211.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b38 [0211.328] NtQuerySystemTime (in: CurrentTime=0xf6afd00 | out: CurrentTime=0xf6afd00*=132471540790428000) returned 0x0 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x6ef9582f [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x56643821 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x233861a3 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x4a4e6b2e [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x43069b47 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x3b8d35e9 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x7feaa7f0 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x75235920 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x536c23d9 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x7c8146c1 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x11f37e61 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x797e0941 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x73778e41 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x17163e97 [0211.328] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x75f0265 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x70a4f03 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x75232362 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x7393a090 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x2d02ceaa [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x5696fb70 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x229167de [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x1206608c [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x3a814b23 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x282a82ba [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x1bce4313 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x46d73b60 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0xd8e5a77 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x78bf8ebb [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x2b2837 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x301f8f56 [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x7b8d54de [0211.329] RtlRandomEx (in: Seed=0xf6afcf8 | out: Seed=0xf6afcf8) returned 0x1dc09984 [0211.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14ae7c68 [0211.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14aeb870 [0211.339] ReadFile (in: hFile=0x1cb4, lpBuffer=0x14ae7c68, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xf6afcf4, lpOverlapped=0x0 | out: lpBuffer=0x14ae7c68*, lpNumberOfBytesRead=0xf6afcf4*=0x100, lpOverlapped=0x0) returned 1 [0211.339] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.339] WriteFile (in: hFile=0x1cb4, lpBuffer=0x14aeb870*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xf6afcf8, lpOverlapped=0x0 | out: lpBuffer=0x14aeb870*, lpNumberOfBytesWritten=0xf6afcf8*=0x100, lpOverlapped=0x0) returned 1 [0213.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42128 [0213.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42920 [0213.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42920) returned 1 [0213.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aeb870) returned 1 [0213.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14ae7c68) returned 1 [0213.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68ba0) returned 1 [0213.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9cc0) returned 1 [0213.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f2e8 [0213.973] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.973] WriteFile (in: hFile=0x1cb4, lpBuffer=0x81e0598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf6afd6c, lpOverlapped=0x0 | out: lpBuffer=0x81e0598*, lpNumberOfBytesWritten=0xf6afd6c*=0x10c, lpOverlapped=0x0) returned 1 [0214.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0598) returned 1 [0214.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f258) returned 1 [0214.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42920) returned 1 [0214.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f2e8) returned 1 [0214.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42128) returned 1 [0214.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b60) returned 1 [0214.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ac0) returned 1 [0214.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063ae8) returned 1 [0214.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187430 [0214.131] wcscpy (in: _Dest=0x8187430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" [0214.131] wcscat (in: _Dest=0x8187430, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.f0dbec" [0214.131] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0xf6afcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef92c0 [0215.879] FlushFileBuffers (hFile=0x1cb4) returned 1 [0215.890] CloseHandle (hObject=0x1cb4) returned 1 [0216.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d9458 [0216.108] wcscpy (in: _Dest=0x81d9458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" [0216.108] wcscat (in: _Dest=0x81d9458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\F0DBEC-Readme.txt" [0216.108] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0216.109] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.633] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf6afd14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf6afd14*=0x70c, lpOverlapped=0x0) returned 1 [0216.635] CloseHandle (hObject=0x10c4) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9458) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec678) returned 1 Thread: id = 6393 os_tid = 0x1a74 [0193.885] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json")) returned 0x2020 [0195.120] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0205.087] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb0 [0211.340] GetFileSizeEx (in: hFile=0x1cb0, lpFileSize=0xf95f9f8 | out: lpFileSize=0xf95f9f8*=230) returned 1 [0211.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b38 [0211.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a70 [0211.340] NtQuerySystemTime (in: CurrentTime=0xf95f980 | out: CurrentTime=0xf95f980*=132471540790584000) returned 0x0 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x45eeab7 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x77cbeab6 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x55cd77c9 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0xce8a312 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x31a4f126 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x37dd36a5 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x22657a76 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0xce8a312 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x28e17033 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x467c767d [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x4ed36193 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x66ab9078 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x743ab66 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0xe14e700 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x20712892 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x1eb6638 [0211.340] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x59f3394c [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x7cf72be5 [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x58aff42 [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x4078cd2c [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x2193d36a [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x7f179678 [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x18e3b04f [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x454f0bf4 [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x7ae980eb [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0xc5b57cc [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x7922d09a [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x470124f9 [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x7f797874 [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x18fc93a7 [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x33d13d8a [0211.341] RtlRandomEx (in: Seed=0xf95f978 | out: Seed=0xf95f978) returned 0x211fa8e6 [0211.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0211.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14aef478 [0211.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14af3080 [0211.353] ReadFile (in: hFile=0x1cb0, lpBuffer=0x14aef478, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0xf95f974, lpOverlapped=0x0 | out: lpBuffer=0x14aef478*, lpNumberOfBytesRead=0xf95f974*=0xe6, lpOverlapped=0x0) returned 1 [0211.355] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.355] WriteFile (in: hFile=0x1cb0, lpBuffer=0x14af3080*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xf95f978, lpOverlapped=0x0 | out: lpBuffer=0x14af3080*, lpNumberOfBytesWritten=0xf95f978*=0xe6, lpOverlapped=0x0) returned 1 [0213.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43618 [0213.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42600 [0213.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42600) returned 1 [0213.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14af3080) returned 1 [0213.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14aef478) returned 1 [0213.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68060) returned 1 [0213.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea338) returned 1 [0213.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fb58 [0213.983] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.983] WriteFile (in: hFile=0x1cb0, lpBuffer=0x81e08e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf95f9ec, lpOverlapped=0x0 | out: lpBuffer=0x81e08e0*, lpNumberOfBytesWritten=0xf95f9ec*=0x10c, lpOverlapped=0x0) returned 1 [0214.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e08e0) returned 1 [0214.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb28) returned 1 [0214.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42600) returned 1 [0214.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb58) returned 1 [0214.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43618) returned 1 [0214.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b38) returned 1 [0214.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a98) returned 1 [0214.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a20) returned 1 [0214.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81877d8 [0214.137] wcscpy (in: _Dest=0x81877d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" [0214.137] wcscat (in: _Dest=0x81877d8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.f0dbec" [0214.137] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.f0dbec", NtPathName=0xf95f970, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9f90 [0215.888] FlushFileBuffers (hFile=0x1cb0) returned 1 [0215.897] CloseHandle (hObject=0x1cb0) returned 1 [0216.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d89f0 [0216.115] wcscpy (in: _Dest=0x81d89f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" [0216.115] wcscat (in: _Dest=0x81d89f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\F0DBEC-Readme.txt" [0216.115] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\f0dbec-readme.txt")) returned 0xffffffff [0216.115] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.642] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf95f994, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf95f994*=0x70c, lpOverlapped=0x0) returned 1 [0216.646] CloseHandle (hObject=0x10c4) returned 1 [0216.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d89f0) returned 1 [0216.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec7a0) returned 1 Thread: id = 6394 os_tid = 0x1a78 [0193.886] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json")) returned 0x2020 [0195.121] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0205.087] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c8c [0211.357] GetFileSizeEx (in: hFile=0x1c8c, lpFileSize=0x129aff10 | out: lpFileSize=0x129aff10*=286) returned 1 [0211.357] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.357] ReadFile (in: hFile=0x1c8c, lpBuffer=0x129aff1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x129afef8, lpOverlapped=0x0 | out: lpBuffer=0x129aff1c*, lpNumberOfBytesRead=0x129afef8*=0x4, lpOverlapped=0x0) returned 1 [0211.359] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a70 [0211.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a48 [0211.359] NtQuerySystemTime (in: CurrentTime=0x129afe98 | out: CurrentTime=0x129afe98*=132471540790740000) returned 0x0 [0211.359] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x28fd7bd6 [0211.359] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x40619f10 [0211.359] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x5198d8e2 [0211.359] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x139d917b [0211.359] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x14dd6373 [0211.359] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x38273b52 [0211.359] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x20261c28 [0211.359] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x34140e76 [0211.359] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x56279499 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x6ded62e0 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x4f2ecdbe [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x54c13891 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x93dbf03 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x28d3930c [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x75f0265 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x18f39292 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x3ca9e149 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x373c693c [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x13a97ee7 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x2ea3c3ad [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x12bcb8c3 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x404078c1 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x3106504b [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x116bbd19 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x14458503 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x2a99ef00 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x77a0f91 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x5eb83f76 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x2670b11 [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x27fc5bfb [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x287f68d [0211.360] RtlRandomEx (in: Seed=0x129afe90 | out: Seed=0x129afe90) returned 0x5abf1826 [0211.374] ReadFile (in: hFile=0x1c8c, lpBuffer=0x14af6c88, nNumberOfBytesToRead=0x11e, lpNumberOfBytesRead=0x129afe8c, lpOverlapped=0x0 | out: lpBuffer=0x14af6c88*, lpNumberOfBytesRead=0x129afe8c*=0x11e, lpOverlapped=0x0) returned 1 [0211.374] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.374] WriteFile (in: hFile=0x1c8c, lpBuffer=0x14afa890*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x129afe90, lpOverlapped=0x0 | out: lpBuffer=0x14afa890*, lpNumberOfBytesWritten=0x129afe90*=0x11e, lpOverlapped=0x0) returned 1 [0213.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0213.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0213.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0213.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14afa890) returned 1 [0213.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14af6c88) returned 1 [0213.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68420) returned 1 [0213.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9c78) returned 1 [0213.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fa98 [0213.982] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.982] WriteFile (in: hFile=0x1c8c, lpBuffer=0x81e07c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x129aff04, lpOverlapped=0x0 | out: lpBuffer=0x81e07c8*, lpNumberOfBytesWritten=0x129aff04*=0x10c, lpOverlapped=0x0) returned 1 [0214.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e07c8) returned 1 [0214.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa38) returned 1 [0214.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0214.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa98) returned 1 [0214.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0214.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a70) returned 1 [0214.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639d0) returned 1 [0214.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639f8) returned 1 [0214.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x81876a0 [0214.136] wcscpy (in: _Dest=0x81876a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" [0214.136] wcscat (in: _Dest=0x81876a0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.f0dbec" [0214.136] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.f0dbec", NtPathName=0x129afe88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9e48 [0215.885] FlushFileBuffers (hFile=0x1c8c) returned 1 [0215.895] CloseHandle (hObject=0x1c8c) returned 1 [0216.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d8550 [0216.111] wcscpy (in: _Dest=0x81d8550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" [0216.111] wcscat (in: _Dest=0x81d8550, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\F0DBEC-Readme.txt" [0216.111] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\f0dbec-readme.txt")) returned 0xffffffff [0216.111] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.638] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x129afeac, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x129afeac*=0x70c, lpOverlapped=0x0) returned 1 [0216.640] CloseHandle (hObject=0x10c4) returned 1 [0216.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d8550) returned 1 [0216.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec8c8) returned 1 Thread: id = 6395 os_tid = 0x10e8 [0193.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk")) returned 0x20 [0193.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.888] GetLastError () returned 0x5 [0193.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0193.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df268) returned 1 Thread: id = 6396 os_tid = 0x15ac [0193.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h")) returned 0x20 [0193.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", dwFileAttributes=0x20) returned 0 [0193.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.891] GetLastError () returned 0x5 [0193.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", dwFileAttributes=0x20) returned 0 [0193.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b258) returned 1 Thread: id = 6397 os_tid = 0x15b0 [0193.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini")) returned 0x20 [0193.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", dwFileAttributes=0x20) returned 0 [0193.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.893] GetLastError () returned 0x5 [0193.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", dwFileAttributes=0x20) returned 0 [0193.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 6398 os_tid = 0x15b4 [0193.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll")) returned 0x20 [0193.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.895] GetLastError () returned 0x5 [0193.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0193.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df388) returned 1 Thread: id = 6399 os_tid = 0x15b8 [0193.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\owshlp10.chm")) returned 0x20 [0193.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM", dwFileAttributes=0x20) returned 0 [0193.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\owshlp10.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.897] GetLastError () returned 0x5 [0193.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM", dwFileAttributes=0x20) returned 0 [0193.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 6400 os_tid = 0x10ec [0193.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css")) returned 0x20 [0201.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", dwFileAttributes=0x20) returned 0 [0201.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.105] GetLastError () returned 0x5 [0203.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", dwFileAttributes=0x20) returned 0 [0203.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 6401 os_tid = 0x15bc [0195.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css")) returned 0x20 [0203.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", dwFileAttributes=0x20) returned 0 [0203.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.004] GetLastError () returned 0x5 [0206.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", dwFileAttributes=0x20) returned 0 [0206.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bc58) returned 1 Thread: id = 6402 os_tid = 0x10f4 [0195.124] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json")) returned 0x2020 [0195.124] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0205.096] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf68 [0205.096] GetFileSizeEx (in: hFile=0xf68, lpFileSize=0x9dbfb88 | out: lpFileSize=0x9dbfb88*=238) returned 1 [0205.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062288 [0205.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062210 [0205.097] NtQuerySystemTime (in: CurrentTime=0x9dbfb10 | out: CurrentTime=0x9dbfb10*=132471540728652000) returned 0x0 [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0xb08fe58 [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x2d41c127 [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x699f0488 [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x2fd86b6f [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x1b5e0afe [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x4ecab16f [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x7a85cbfd [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x254adfde [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x5c44f613 [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x47712eb8 [0205.097] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x1720758f [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x12d1ae25 [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x3e677638 [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x2f1ea4af [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0xcdce847 [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x156ea9af [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x99548bd [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x199c2523 [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x2ef09a59 [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x158be203 [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x1a297069 [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x136339e4 [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x7ac99ccf [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x75a2fbcc [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x6ecb8f66 [0205.098] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x4498624c [0205.099] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x785c8b40 [0205.099] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x537e24b8 [0205.099] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x4514cd32 [0205.099] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x50dc6cd9 [0205.099] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0xa311e9c [0205.099] RtlRandomEx (in: Seed=0x9dbfb08 | out: Seed=0x9dbfb08) returned 0x5380e278 [0205.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8379598 [0205.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x837d1a0 [0205.116] ReadFile (in: hFile=0xf68, lpBuffer=0x8379598, nNumberOfBytesToRead=0xee, lpNumberOfBytesRead=0x9dbfb04, lpOverlapped=0x0 | out: lpBuffer=0x8379598*, lpNumberOfBytesRead=0x9dbfb04*=0xee, lpOverlapped=0x0) returned 1 [0205.118] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.118] WriteFile (in: hFile=0xf68, lpBuffer=0x837d1a0*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x9dbfb08, lpOverlapped=0x0 | out: lpBuffer=0x837d1a0*, lpNumberOfBytesWritten=0x9dbfb08*=0xee, lpOverlapped=0x0) returned 1 [0209.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80621c0 [0209.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062260 [0209.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062260) returned 1 [0209.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x837d1a0) returned 1 [0209.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8379598) returned 1 [0209.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0209.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4da0) returned 1 [0209.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fc48 [0209.888] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.888] WriteFile (in: hFile=0xf68, lpBuffer=0x81e12b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9dbfb7c, lpOverlapped=0x0 | out: lpBuffer=0x81e12b8*, lpNumberOfBytesWritten=0x9dbfb7c*=0x10c, lpOverlapped=0x0) returned 1 [0209.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e12b8) returned 1 [0209.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0209.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062260) returned 1 [0209.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0209.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621c0) returned 1 [0209.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062288) returned 1 [0209.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621e8) returned 1 [0209.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062148) returned 1 [0209.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404560 [0209.891] wcscpy (in: _Dest=0x8404560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" [0209.891] wcscat (in: _Dest=0x8404560, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.f0dbec" [0209.891] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0x9dbfb00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d8f0 [0215.572] FlushFileBuffers (hFile=0xf68) returned 1 [0215.580] CloseHandle (hObject=0xf68) returned 1 [0215.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e7648 [0215.712] wcscpy (in: _Dest=0x81e7648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" [0215.712] wcscat (in: _Dest=0x81e7648, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\F0DBEC-Readme.txt" [0215.713] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0215.713] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.399] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9dbfb24, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9dbfb24*=0x70c, lpOverlapped=0x0) returned 1 [0216.401] CloseHandle (hObject=0x10c4) returned 1 [0216.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7648) returned 1 [0216.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed208) returned 1 Thread: id = 6403 os_tid = 0x10fc [0195.125] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0195.639] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0210.774] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x147c [0210.774] GetFileSizeEx (in: hFile=0x147c, lpFileSize=0xdbcfbf0 | out: lpFileSize=0xdbcfbf0*=222) returned 1 [0210.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80637c8 [0210.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80636b0 [0210.775] NtQuerySystemTime (in: CurrentTime=0xdbcfb78 | out: CurrentTime=0xdbcfb78*=132471540784968000) returned 0x0 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x6149bd57 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x15790d03 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x6105e870 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x295a0e1 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x58c457a4 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x1f9eb4f6 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x3beb4df0 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x3d2f11b5 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x75a1e9a1 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x599186bf [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x4048fa7f [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x6e3d0849 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x4b7a32b1 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x5b4872d4 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x64e4ac4 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x48a7b75f [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x6b4130f1 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x7ade62cc [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x5c35aeae [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x6a82cbf [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x6a9b85b7 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x60ebb4e9 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x6a185a1e [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x82cda55 [0210.775] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x7f2902a4 [0210.776] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x21bb794a [0210.776] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x182bc372 [0210.776] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x19165941 [0210.776] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x11098d7 [0210.776] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x2ddf7208 [0210.776] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x91c943b [0210.776] RtlRandomEx (in: Seed=0xdbcfb70 | out: Seed=0xdbcfb70) returned 0x341505ee [0210.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8388930 [0210.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x838c538 [0210.788] ReadFile (in: hFile=0x147c, lpBuffer=0x8388930, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xdbcfb6c, lpOverlapped=0x0 | out: lpBuffer=0x8388930*, lpNumberOfBytesRead=0xdbcfb6c*=0xde, lpOverlapped=0x0) returned 1 [0210.790] SetFilePointerEx (in: hFile=0x147c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.790] WriteFile (in: hFile=0x147c, lpBuffer=0x838c538*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xdbcfb70, lpOverlapped=0x0 | out: lpBuffer=0x838c538*, lpNumberOfBytesWritten=0xdbcfb70*=0xde, lpOverlapped=0x0) returned 1 [0213.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0213.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0213.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0213.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x838c538) returned 1 [0213.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8388930) returned 1 [0213.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403650) returned 1 [0213.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea2a8) returned 1 [0213.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69840 [0213.910] SetFilePointerEx (in: hFile=0x147c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.910] WriteFile (in: hFile=0x147c, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdbcfbe4, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xdbcfbe4*=0x10c, lpOverlapped=0x0) returned 1 [0214.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0214.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69870) returned 1 [0214.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0214.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69840) returned 1 [0214.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0214.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80637c8) returned 1 [0214.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80636d8) returned 1 [0214.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063660) returned 1 [0214.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3ef8728 [0214.054] wcscpy (in: _Dest=0x3ef8728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" [0214.054] wcscat (in: _Dest=0x3ef8728, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.f0dbec" [0214.054] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0xdbcfb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3c990 [0215.782] FlushFileBuffers (hFile=0x147c) returned 1 [0215.794] CloseHandle (hObject=0x147c) returned 1 [0216.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404f20 [0216.031] wcscpy (in: _Dest=0x8404f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" [0216.031] wcscat (in: _Dest=0x8404f20, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0216.031] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0216.032] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.499] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdbcfb8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdbcfb8c*=0x70c, lpOverlapped=0x0) returned 1 [0216.501] CloseHandle (hObject=0x10c4) returned 1 [0216.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404f20) returned 1 [0216.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed330) returned 1 Thread: id = 6404 os_tid = 0x15c8 [0195.126] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json")) returned 0x2020 [0195.640] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0210.247] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1aa8 [0210.248] GetFileSizeEx (in: hFile=0x1aa8, lpFileSize=0xe55f9e8 | out: lpFileSize=0xe55f9e8*=236) returned 1 [0210.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8000 [0210.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0210.248] NtQuerySystemTime (in: CurrentTime=0xe55f970 | out: CurrentTime=0xe55f970*=132471540779664000) returned 0x0 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x719e8bb8 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x23e8338e [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x57daffea [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x211a26d4 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x312be902 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x529a0143 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x7417a418 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x6debb381 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x2fa4f0c0 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x2bfbd6a9 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x5ada3fd5 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x1e4f3456 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x3c8de2d3 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x2d188209 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x104f01b [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x475342c2 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x684ae7db [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x4c3e05 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x1054538c [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x371ad616 [0210.248] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x694dd59d [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x16ec55ed [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x123e790f [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x669bc0ad [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x299e75c0 [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x44c3f871 [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x126d93ce [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0xb751cf9 [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x16bfd40a [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x126959ef [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x605a590b [0210.249] RtlRandomEx (in: Seed=0xe55f968 | out: Seed=0xe55f968) returned 0x5233a0b0 [0210.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b90c0 [0210.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82adca8 [0210.259] ReadFile (in: hFile=0x1aa8, lpBuffer=0x82b90c0, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0xe55f964, lpOverlapped=0x0 | out: lpBuffer=0x82b90c0*, lpNumberOfBytesRead=0xe55f964*=0xec, lpOverlapped=0x0) returned 1 [0210.261] SetFilePointerEx (in: hFile=0x1aa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.261] WriteFile (in: hFile=0x1aa8, lpBuffer=0x82adca8*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xe55f968, lpOverlapped=0x0 | out: lpBuffer=0x82adca8*, lpNumberOfBytesWritten=0xe55f968*=0xec, lpOverlapped=0x0) returned 1 [0211.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4150 [0211.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef0ed8 [0211.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0211.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82adca8) returned 1 [0211.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b90c0) returned 1 [0211.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8bc8) returned 1 [0211.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3a80) returned 1 [0211.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f318 [0211.747] SetFilePointerEx (in: hFile=0x1aa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.747] WriteFile (in: hFile=0x1aa8, lpBuffer=0x8406998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe55f9dc, lpOverlapped=0x0 | out: lpBuffer=0x8406998*, lpNumberOfBytesWritten=0xe55f9dc*=0x10c, lpOverlapped=0x0) returned 1 [0214.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 [0214.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa08) returned 1 [0214.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef0ed8) returned 1 [0214.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f318) returned 1 [0214.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0214.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc8000) returned 1 [0214.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0214.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f68) returned 1 [0214.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187a48 [0214.150] wcscpy (in: _Dest=0x8187a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" [0214.150] wcscat (in: _Dest=0x8187a48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.f0dbec" [0214.150] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.f0dbec", NtPathName=0xe55f960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9d00 [0215.893] FlushFileBuffers (hFile=0x1aa8) returned 1 [0219.679] CloseHandle (hObject=0x1aa8) returned 1 [0219.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ec1d8 [0219.882] wcscpy (in: _Dest=0x81ec1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" [0219.882] wcscat (in: _Dest=0x81ec1d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\F0DBEC-Readme.txt" [0219.882] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\f0dbec-readme.txt")) returned 0xffffffff [0219.882] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1418 [0220.688] WriteFile (in: hFile=0x1418, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe55f984, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe55f984*=0x70c, lpOverlapped=0x0) returned 1 [0221.127] CloseHandle (hObject=0x1418) returned 1 [0221.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec1d8) returned 1 [0221.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed458) returned 1 Thread: id = 6405 os_tid = 0x1100 [0195.127] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json")) returned 0x2020 [0195.640] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0210.281] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21d4 [0210.281] GetFileSizeEx (in: hFile=0x21d4, lpFileSize=0xccdf8d0 | out: lpFileSize=0xccdf8d0*=215) returned 1 [0210.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0210.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca350 [0210.282] NtQuerySystemTime (in: CurrentTime=0xccdf858 | out: CurrentTime=0xccdf858*=132471540779976000) returned 0x0 [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x357bd06e [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x46403d7c [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x364a3306 [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x21ff5740 [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x2667123d [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x4e24d38b [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x2d1615f5 [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x4600d882 [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x101d6107 [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x27dff8ec [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x2ae23433 [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x44017b78 [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x6c6151fd [0210.282] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x18c9a9e8 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x662ac185 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x8fe6113 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x2d9d0651 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x2ec86950 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x12dbb83e [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x21b74bb6 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x3a608938 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x575d04c4 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x78ef55a0 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x385eb358 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x608a1998 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x74dc7dbf [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x3b8193c [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x4a3fe62a [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x15c733a5 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x41d20d70 [0210.283] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0xee863ae [0210.284] RtlRandomEx (in: Seed=0xccdf850 | out: Seed=0xccdf850) returned 0x3ba22d05 [0210.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a2890 [0210.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8297478 [0210.297] ReadFile (in: hFile=0x21d4, lpBuffer=0x82a2890, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0xccdf84c, lpOverlapped=0x0 | out: lpBuffer=0x82a2890*, lpNumberOfBytesRead=0xccdf84c*=0xd7, lpOverlapped=0x0) returned 1 [0210.299] SetFilePointerEx (in: hFile=0x21d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.299] WriteFile (in: hFile=0x21d4, lpBuffer=0x8297478*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0xccdf850, lpOverlapped=0x0 | out: lpBuffer=0x8297478*, lpNumberOfBytesWritten=0xccdf850*=0xd7, lpOverlapped=0x0) returned 1 [0211.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0211.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0211.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0211.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8297478) returned 1 [0211.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a2890) returned 1 [0211.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403308) returned 1 [0211.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4a40) returned 1 [0211.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f798 [0211.748] SetFilePointerEx (in: hFile=0x21d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.748] WriteFile (in: hFile=0x21d4, lpBuffer=0x84077d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xccdf8c4, lpOverlapped=0x0 | out: lpBuffer=0x84077d0*, lpNumberOfBytesWritten=0xccdf8c4*=0x10c, lpOverlapped=0x0) returned 1 [0214.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84077d0) returned 1 [0214.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f408) returned 1 [0214.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0214.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f798) returned 1 [0214.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0214.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0214.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0214.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d28) returned 1 [0214.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403cd8 [0214.004] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" [0214.004] wcscat (in: _Dest=0x8403cd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.f0dbec" [0214.004] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.f0dbec", NtPathName=0xccdf848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d8f0 [0215.700] FlushFileBuffers (hFile=0x21d4) returned 1 [0215.706] CloseHandle (hObject=0x21d4) returned 1 [0215.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e81d8 [0215.981] wcscpy (in: _Dest=0x81e81d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" [0215.981] wcscat (in: _Dest=0x81e81d8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\F0DBEC-Readme.txt" [0215.981] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\f0dbec-readme.txt")) returned 0xffffffff [0215.981] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.422] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xccdf86c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xccdf86c*=0x70c, lpOverlapped=0x0) returned 1 [0216.425] CloseHandle (hObject=0x10c4) returned 1 [0216.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e81d8) returned 1 [0216.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8300) returned 1 Thread: id = 6406 os_tid = 0x1104 [0195.128] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json")) returned 0x2020 [0195.641] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0210.349] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1418 [0210.350] GetFileSizeEx (in: hFile=0x1418, lpFileSize=0xe79fa98 | out: lpFileSize=0xe79fa98*=271) returned 1 [0210.350] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x10b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.350] ReadFile (in: hFile=0x1418, lpBuffer=0xe79faa4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe79fa80, lpOverlapped=0x0 | out: lpBuffer=0xe79faa4*, lpNumberOfBytesRead=0xe79fa80*=0x4, lpOverlapped=0x0) returned 1 [0210.352] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063430 [0210.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062288 [0210.352] NtQuerySystemTime (in: CurrentTime=0xe79fa20 | out: CurrentTime=0xe79fa20*=132471540780756000) returned 0x0 [0210.352] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x5cf46473 [0210.352] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0xcdbc590 [0210.352] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x5b5fd836 [0210.352] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x5d205bf3 [0210.352] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x56567603 [0210.352] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x32a82e40 [0210.352] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x35ab6bc0 [0210.352] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x297f40c4 [0210.352] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x47bedcc0 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x22a86568 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x2dbbc1d0 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x7068492b [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x3ed0c46d [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x74947a39 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x352f8c5a [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x1e0ae812 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x7681a7c0 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x652ed100 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x49323283 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x3738486d [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x2f50bac7 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x385254e9 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x254f2673 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x18a03e40 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0xae99d99 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x50c30911 [0210.353] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x622daf6f [0210.354] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x6cb0931a [0210.354] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0xeca8692 [0210.354] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x18756580 [0210.354] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x16a740bf [0210.354] RtlRandomEx (in: Seed=0xe79fa18 | out: Seed=0xe79fa18) returned 0x4cc0b774 [0210.366] ReadFile (in: hFile=0x1418, lpBuffer=0x8293870, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0xe79fa14, lpOverlapped=0x0 | out: lpBuffer=0x8293870*, lpNumberOfBytesRead=0xe79fa14*=0x10f, lpOverlapped=0x0) returned 1 [0210.366] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.366] WriteFile (in: hFile=0x1418, lpBuffer=0x8288458*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0xe79fa18, lpOverlapped=0x0 | out: lpBuffer=0x8288458*, lpNumberOfBytesWritten=0xe79fa18*=0x10f, lpOverlapped=0x0) returned 1 [0213.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0213.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42290 [0213.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42290) returned 1 [0213.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8288458) returned 1 [0213.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8293870) returned 1 [0213.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403380) returned 1 [0213.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3b58) returned 1 [0213.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69a20 [0213.757] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.758] WriteFile (in: hFile=0x1418, lpBuffer=0x8406420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe79fa8c, lpOverlapped=0x0 | out: lpBuffer=0x8406420*, lpNumberOfBytesWritten=0xe79fa8c*=0x10c, lpOverlapped=0x0) returned 1 [0217.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406420) returned 1 [0217.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a50) returned 1 [0217.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42290) returned 1 [0217.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a20) returned 1 [0217.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436b8) returned 1 [0217.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063430) returned 1 [0217.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621c0) returned 1 [0217.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062260) returned 1 [0217.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3db78c0 [0217.865] wcscpy (in: _Dest=0x3db78c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" [0217.865] wcscat (in: _Dest=0x3db78c0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.f0dbec" [0217.865] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0xe79fa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0217.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9550 [0220.558] FlushFileBuffers (hFile=0x1418) returned 1 [0220.560] CloseHandle (hObject=0x1418) returned 1 [0220.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ebc10 [0220.708] wcscpy (in: _Dest=0x81ebc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" [0220.708] wcscat (in: _Dest=0x81ebc10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\F0DBEC-Readme.txt" [0220.708] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0220.708] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fec [0220.892] WriteFile (in: hFile=0x1fec, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe79fa34, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe79fa34*=0x70c, lpOverlapped=0x0) returned 1 [0221.106] CloseHandle (hObject=0x1fec) returned 1 [0221.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebc10) returned 1 [0221.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8550) returned 1 Thread: id = 6407 os_tid = 0x110c [0195.129] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json")) returned 0x2020 [0195.642] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0210.385] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2c8c [0210.385] GetFileSizeEx (in: hFile=0x2c8c, lpFileSize=0xe70ff18 | out: lpFileSize=0xe70ff18*=295) returned 1 [0210.385] SetFilePointerEx (in: hFile=0x2c8c, liDistanceToMove=0x123, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.385] ReadFile (in: hFile=0x2c8c, lpBuffer=0xe70ff24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe70ff00, lpOverlapped=0x0 | out: lpBuffer=0xe70ff24*, lpNumberOfBytesRead=0xe70ff00*=0x4, lpOverlapped=0x0) returned 1 [0210.392] SetFilePointerEx (in: hFile=0x2c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063200 [0210.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bf0 [0210.392] NtQuerySystemTime (in: CurrentTime=0xe70fea0 | out: CurrentTime=0xe70fea0*=132471540781068000) returned 0x0 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x1ca782bd [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x6d088baf [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x57de2be0 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0xbeab547 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x25043f89 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x46260e5c [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x67739381 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x3ad3ab4f [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x35bce7c0 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x79d84964 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x81fd439 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x39dfa0a3 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x4ebb01bd [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x591bb90c [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x6e46b445 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x7b1e52e1 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x3f5d0c99 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x6fb07e48 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x73e4d48c [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x19cc2b80 [0210.392] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x47f1dcff [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x633bae7b [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x6f32473c [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x40eefc07 [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x464a14f4 [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0xf7bad02 [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x75c3244d [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x70fe75cb [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x4ac21a40 [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x4dad6312 [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x482a311d [0210.393] RtlRandomEx (in: Seed=0xe70fe98 | out: Seed=0xe70fe98) returned 0x55f3c01c [0210.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8146458 [0210.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x814a060 [0210.403] ReadFile (in: hFile=0x2c8c, lpBuffer=0x8146458, nNumberOfBytesToRead=0x127, lpNumberOfBytesRead=0xe70fe94, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesRead=0xe70fe94*=0x127, lpOverlapped=0x0) returned 1 [0210.403] SetFilePointerEx (in: hFile=0x2c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.403] WriteFile (in: hFile=0x2c8c, lpBuffer=0x814a060*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0xe70fe98, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesWritten=0xe70fe98*=0x127, lpOverlapped=0x0) returned 1 [0214.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80639f8 [0214.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80639d0 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639d0) returned 1 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403218) returned 1 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3c30) returned 1 [0214.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fa38 [0214.143] SetFilePointerEx (in: hFile=0x2c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.143] WriteFile (in: hFile=0x2c8c, lpBuffer=0x8406ab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe70ff0c, lpOverlapped=0x0 | out: lpBuffer=0x8406ab0*, lpNumberOfBytesWritten=0xe70ff0c*=0x10c, lpOverlapped=0x0) returned 1 [0215.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ab0) returned 1 [0215.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f4f8) returned 1 [0215.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639d0) returned 1 [0215.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa38) returned 1 [0215.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639f8) returned 1 [0215.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063200) returned 1 [0215.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061fe0) returned 1 [0215.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062080) returned 1 [0215.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8188198 [0215.694] wcscpy (in: _Dest=0x8188198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" [0215.694] wcscat (in: _Dest=0x8188198, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.f0dbec" [0215.694] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0xe70fe90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9408 [0216.142] FlushFileBuffers (hFile=0x2c8c) returned 1 [0216.151] CloseHandle (hObject=0x2c8c) returned 1 [0216.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d0c70 [0216.226] wcscpy (in: _Dest=0x81d0c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" [0216.226] wcscat (in: _Dest=0x81d0c70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\F0DBEC-Readme.txt" [0216.227] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0216.227] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x269c [0217.837] WriteFile (in: hFile=0x269c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe70feb4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe70feb4*=0x70c, lpOverlapped=0x0) returned 1 [0221.134] CloseHandle (hObject=0x269c) returned 1 [0221.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0c70) returned 1 [0221.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e87a0) returned 1 Thread: id = 6408 os_tid = 0x64c [0195.133] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json")) returned 0x2020 [0195.642] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0210.420] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cf4 [0210.421] GetFileSizeEx (in: hFile=0x1cf4, lpFileSize=0xdf8f888 | out: lpFileSize=0xdf8f888*=312) returned 1 [0210.421] SetFilePointerEx (in: hFile=0x1cf4, liDistanceToMove=0x134, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.421] ReadFile (in: hFile=0x1cf4, lpBuffer=0xdf8f894, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdf8f870, lpOverlapped=0x0 | out: lpBuffer=0xdf8f894*, lpNumberOfBytesRead=0xdf8f870*=0x4, lpOverlapped=0x0) returned 1 [0210.423] SetFilePointerEx (in: hFile=0x1cf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062120 [0210.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80620a8 [0210.423] NtQuerySystemTime (in: CurrentTime=0xdf8f810 | out: CurrentTime=0xdf8f810*=132471540781380000) returned 0x0 [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x4879943c [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x4e98d561 [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x4229205f [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x2945375b [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x4544e083 [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x6dc313c0 [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0xa32226b [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x1152fd42 [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x29ad52fd [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x1788d8a3 [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x4d8f67b1 [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x2b2bc942 [0210.423] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x2c4ac75f [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x364e443a [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x176f9ef9 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x62ae94fe [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x5cdbb10 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x24ae37f7 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x3df6f85f [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x4523921c [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x14f98396 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0xf7a31f7 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x7cfba6dc [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x2c3ec19b [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x1da93db9 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x72e742cf [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x7e2936b7 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x74a79259 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x17f4db40 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x19767a00 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x1c861252 [0210.424] RtlRandomEx (in: Seed=0xdf8f808 | out: Seed=0xdf8f808) returned 0x62bdfb0f [0210.434] ReadFile (in: hFile=0x1cf4, lpBuffer=0x8155478, nNumberOfBytesToRead=0x138, lpNumberOfBytesRead=0xdf8f804, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesRead=0xdf8f804*=0x138, lpOverlapped=0x0) returned 1 [0210.434] SetFilePointerEx (in: hFile=0x1cf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.435] WriteFile (in: hFile=0x1cf4, lpBuffer=0x8159080*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0xdf8f808, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesWritten=0xdf8f808*=0x138, lpOverlapped=0x0) returned 1 [0215.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0215.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0215.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0215.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0215.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0215.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402fc0) returned 1 [0215.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3b10) returned 1 [0215.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69600 [0215.310] SetFilePointerEx (in: hFile=0x1cf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.311] WriteFile (in: hFile=0x1cf4, lpBuffer=0x8406650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdf8f87c, lpOverlapped=0x0 | out: lpBuffer=0x8406650*, lpNumberOfBytesWritten=0xdf8f87c*=0x10c, lpOverlapped=0x0) returned 1 [0220.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 [0220.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69630) returned 1 [0220.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0220.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69600) returned 1 [0220.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0220.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062120) returned 1 [0220.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062058) returned 1 [0220.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620f8) returned 1 [0220.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8430 [0220.428] wcscpy (in: _Dest=0x3dd8430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" [0220.428] wcscat (in: _Dest=0x3dd8430, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.f0dbec" [0220.428] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.f0dbec", NtPathName=0xdf8f800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa0d8 [0220.645] FlushFileBuffers (hFile=0x1cf4) returned 1 [0220.660] CloseHandle (hObject=0x1cf4) returned 1 [0220.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8402050 [0220.786] wcscpy (in: _Dest=0x8402050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" [0220.786] wcscat (in: _Dest=0x8402050, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\F0DBEC-Readme.txt" [0220.786] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\f0dbec-readme.txt")) returned 0xffffffff [0220.786] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.068] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdf8f824, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdf8f824*=0x70c, lpOverlapped=0x0) returned 1 [0221.070] CloseHandle (hObject=0x1b48) returned 1 [0221.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402050) returned 1 [0221.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e88c8) returned 1 Thread: id = 6409 os_tid = 0xfc4 [0195.136] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json")) returned 0x2020 [0195.643] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0210.453] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ce4 [0210.453] GetFileSizeEx (in: hFile=0x1ce4, lpFileSize=0xe67fdc8 | out: lpFileSize=0xe67fdc8*=292) returned 1 [0210.453] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.454] ReadFile (in: hFile=0x1ce4, lpBuffer=0xe67fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe67fdb0, lpOverlapped=0x0 | out: lpBuffer=0xe67fdd4*, lpNumberOfBytesRead=0xe67fdb0*=0x4, lpOverlapped=0x0) returned 1 [0210.455] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062210 [0210.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80632f0 [0210.455] NtQuerySystemTime (in: CurrentTime=0xe67fd50 | out: CurrentTime=0xe67fd50*=132471540781692000) returned 0x0 [0210.455] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x359d58d9 [0210.455] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x19221b58 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x683d7252 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x17ca0280 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x2e2a6bdf [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0xb870ce5 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x7dfdc6b6 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x62d57698 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x5e1095d7 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x6bbd4d25 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0xd4d250c [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x19af340c [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x31d3ad2 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x5d72fbdb [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x25971ea4 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x55a2e74d [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x49963f9c [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x4f2a9f9b [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x162a1d56 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x639662d7 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x77770f10 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x3f0752da [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x22288626 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x3a354716 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x60db7a9d [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x702cbf3c [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x1bd86d46 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x2badf5f1 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x2a7e6046 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x5b247727 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x4dc557c0 [0210.456] RtlRandomEx (in: Seed=0xe67fd48 | out: Seed=0xe67fd48) returned 0x56cf1040 [0210.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8164498 [0210.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81680a0 [0210.467] ReadFile (in: hFile=0x1ce4, lpBuffer=0x8164498, nNumberOfBytesToRead=0x124, lpNumberOfBytesRead=0xe67fd44, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0xe67fd44*=0x124, lpOverlapped=0x0) returned 1 [0210.468] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.468] WriteFile (in: hFile=0x1ce4, lpBuffer=0x81680a0*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0xe67fd48, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesWritten=0xe67fd48*=0x124, lpOverlapped=0x0) returned 1 [0215.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2b0 [0215.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8000 [0215.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc8000) returned 1 [0215.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0215.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0215.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402e58) returned 1 [0215.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e37f8) returned 1 [0215.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ba0 [0215.544] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.544] WriteFile (in: hFile=0x1ce4, lpBuffer=0x8406998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe67fdbc, lpOverlapped=0x0 | out: lpBuffer=0x8406998*, lpNumberOfBytesWritten=0xe67fdbc*=0x10c, lpOverlapped=0x0) returned 1 [0217.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 [0217.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bd0) returned 1 [0217.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc8000) returned 1 [0217.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ba0) returned 1 [0217.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0217.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062210) returned 1 [0217.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ab0) returned 1 [0217.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ad8) returned 1 [0217.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404a40 [0217.869] wcscpy (in: _Dest=0x8404a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" [0217.869] wcscat (in: _Dest=0x8404a40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.f0dbec" [0217.869] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0xe67fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0217.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa0d8 [0220.483] FlushFileBuffers (hFile=0x1ce4) returned 1 [0220.488] CloseHandle (hObject=0x1ce4) returned 1 [0220.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ec678 [0220.635] wcscpy (in: _Dest=0x81ec678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" [0220.635] wcscat (in: _Dest=0x81ec678, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\F0DBEC-Readme.txt" [0220.635] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0220.635] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x199c [0220.791] WriteFile (in: hFile=0x199c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe67fd64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe67fd64*=0x70c, lpOverlapped=0x0) returned 1 [0221.122] CloseHandle (hObject=0x199c) returned 1 [0221.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec678) returned 1 [0221.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8428) returned 1 Thread: id = 6410 os_tid = 0x980 [0195.138] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json")) returned 0x2020 [0195.139] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0205.118] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a1c [0205.119] GetFileSizeEx (in: hFile=0x1a1c, lpFileSize=0xed2fb58 | out: lpFileSize=0xed2fb58*=242) returned 1 [0205.119] SetFilePointerEx (in: hFile=0x1a1c, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.119] ReadFile (in: hFile=0x1a1c, lpBuffer=0xed2fb64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xed2fb40, lpOverlapped=0x0 | out: lpBuffer=0xed2fb64*, lpNumberOfBytesRead=0xed2fb40*=0x4, lpOverlapped=0x0) returned 1 [0205.121] SetFilePointerEx (in: hFile=0x1a1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062210 [0205.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062120 [0205.122] NtQuerySystemTime (in: CurrentTime=0xed2fae0 | out: CurrentTime=0xed2fae0*=132471540728808000) returned 0x0 [0205.122] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x4bda29be [0205.122] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0xc6a5946 [0205.122] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x31ed4282 [0205.122] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x42d9dec [0205.122] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x2f2b85a2 [0205.122] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x9f66580 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x60cfbada [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x18a2336a [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x56215f7f [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x1aa98a8a [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x5d87733f [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0xde7fcf1 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x72a4d8a3 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x77742449 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x450a0ffe [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x46caeb88 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x1fb7bb10 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x6c79e548 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x1cc92359 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x568ebb72 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x51079300 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x4c672b17 [0205.123] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x7ca61614 [0205.124] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x59849fb8 [0205.124] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x3305634a [0205.124] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x23abaaec [0205.124] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x200ec5ae [0205.124] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x1cd934 [0205.124] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x2488c48c [0205.124] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x6f342ab3 [0205.124] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x3e060fa1 [0205.124] RtlRandomEx (in: Seed=0xed2fad8 | out: Seed=0xed2fad8) returned 0x6e622de6 [0205.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8380da8 [0205.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83849b0 [0205.144] ReadFile (in: hFile=0x1a1c, lpBuffer=0x8380da8, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0xed2fad4, lpOverlapped=0x0 | out: lpBuffer=0x8380da8*, lpNumberOfBytesRead=0xed2fad4*=0xf2, lpOverlapped=0x0) returned 1 [0205.145] SetFilePointerEx (in: hFile=0x1a1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.145] WriteFile (in: hFile=0x1a1c, lpBuffer=0x83849b0*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0xed2fad8, lpOverlapped=0x0 | out: lpBuffer=0x83849b0*, lpNumberOfBytesWritten=0xed2fad8*=0xf2, lpOverlapped=0x0) returned 1 [0207.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c418 [0207.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5f8 [0207.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0207.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83849b0) returned 1 [0207.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8380da8) returned 1 [0207.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84030b0) returned 1 [0207.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4140) returned 1 [0207.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0207.932] SetFilePointerEx (in: hFile=0x1a1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.932] WriteFile (in: hFile=0x1a1c, lpBuffer=0x84077d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xed2fb4c, lpOverlapped=0x0 | out: lpBuffer=0x84077d0*, lpNumberOfBytesWritten=0xed2fb4c*=0x10c, lpOverlapped=0x0) returned 1 [0208.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84077d0) returned 1 [0208.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0208.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0208.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0208.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0208.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062210) returned 1 [0208.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620f8) returned 1 [0208.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062058) returned 1 [0208.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403cd8 [0208.166] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" [0208.166] wcscat (in: _Dest=0x8403cd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.f0dbec" [0208.166] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0xed2fad0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3d7a8 [0208.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3d7a8) returned 1 [0208.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f11d0) returned 1 [0208.467] NtQueryInformationFile (in: FileHandle=0x1a1c, IoStatusBlock=0xed2faa8, FileInformation=0xed2fab0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xed2faa8, FileInformation=0xed2fab0) returned 0x0 [0208.467] NtSetInformationFile (FileHandle=0x1a1c, IoStatusBlock=0xed2faa8, FileInformation=0xed2fab0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403cd8) returned 1 [0208.839] FlushFileBuffers (hFile=0x1a1c) returned 1 [0209.063] CloseHandle (hObject=0x1a1c) returned 1 [0209.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x148a1d48 [0209.065] wcscpy (in: _Dest=0x148a1d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" [0209.065] wcscat (in: _Dest=0x148a1d48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\F0DBEC-Readme.txt" [0209.065] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0209.066] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a1c [0209.066] WriteFile (in: hFile=0x1a1c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xed2faf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xed2faf4*=0x70c, lpOverlapped=0x0) returned 1 [0209.068] CloseHandle (hObject=0x1a1c) returned 1 [0209.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a1d48) returned 1 [0209.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e81d8) returned 1 Thread: id = 6411 os_tid = 0x1348 [0195.140] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json")) returned 0x2020 [0195.182] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0205.145] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a24 [0205.146] GetFileSizeEx (in: hFile=0x1a24, lpFileSize=0xaf3faa0 | out: lpFileSize=0xaf3faa0*=324) returned 1 [0205.146] SetFilePointerEx (in: hFile=0x1a24, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.146] ReadFile (in: hFile=0x1a24, lpBuffer=0xaf3faac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf3fa88, lpOverlapped=0x0 | out: lpBuffer=0xaf3faac*, lpNumberOfBytesRead=0xaf3fa88*=0x4, lpOverlapped=0x0) returned 1 [0205.148] SetFilePointerEx (in: hFile=0x1a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062120 [0205.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80620a8 [0205.148] NtQuerySystemTime (in: CurrentTime=0xaf3fa28 | out: CurrentTime=0xaf3fa28*=132471540729120000) returned 0x0 [0205.148] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x1f707f5 [0205.148] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x7df8ba1b [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x1c724922 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x21216ac8 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x1f486749 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x2e54ff1e [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x7e381172 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x6a0373a8 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x5ca17089 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x7d9b9236 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x748f05ab [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x626ffa1f [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x4f696f03 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x6e880d9 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x25445706 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x6e4b296f [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x2f967ea5 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x4535eac1 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x667f5cca [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x5f6de0a4 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x67f724e0 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x3c52724a [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x4bb3aef2 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x32c35952 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x6e90c0e8 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x12b23485 [0205.149] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x6616ad91 [0205.150] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x60a3a82e [0205.150] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x22357e28 [0205.150] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x2392e669 [0205.150] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x5fb7bbb2 [0205.150] RtlRandomEx (in: Seed=0xaf3fa20 | out: Seed=0xaf3fa20) returned 0x398646c8 [0205.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x836a578 [0205.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8348930 [0205.165] ReadFile (in: hFile=0x1a24, lpBuffer=0x836a578, nNumberOfBytesToRead=0x144, lpNumberOfBytesRead=0xaf3fa1c, lpOverlapped=0x0 | out: lpBuffer=0x836a578*, lpNumberOfBytesRead=0xaf3fa1c*=0x144, lpOverlapped=0x0) returned 1 [0205.165] SetFilePointerEx (in: hFile=0x1a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.165] WriteFile (in: hFile=0x1a24, lpBuffer=0x8348930*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0xaf3fa20, lpOverlapped=0x0 | out: lpBuffer=0x8348930*, lpNumberOfBytesWritten=0xaf3fa20*=0x144, lpOverlapped=0x0) returned 1 [0207.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfe0 [0207.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0207.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0207.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348930) returned 1 [0207.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836a578) returned 1 [0207.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402f48) returned 1 [0207.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e40f8) returned 1 [0207.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69120 [0207.937] SetFilePointerEx (in: hFile=0x1a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.937] WriteFile (in: hFile=0x1a24, lpBuffer=0x84060d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf3fa94, lpOverlapped=0x0 | out: lpBuffer=0x84060d8*, lpNumberOfBytesWritten=0xaf3fa94*=0x10c, lpOverlapped=0x0) returned 1 [0208.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 [0208.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69150) returned 1 [0208.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0208.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69120) returned 1 [0208.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0208.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062120) returned 1 [0208.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062080) returned 1 [0208.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8061fe0) returned 1 [0208.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8df0 [0208.171] wcscpy (in: _Dest=0x3dd8df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" [0208.171] wcscat (in: _Dest=0x3dd8df0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.f0dbec" [0208.171] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0xaf3fa18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c328 [0208.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c328) returned 1 [0208.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1489b9d0) returned 1 [0208.488] NtQueryInformationFile (in: FileHandle=0x1a24, IoStatusBlock=0xaf3f9f0, FileInformation=0xaf3f9f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaf3f9f0, FileInformation=0xaf3f9f8) returned 0x0 [0208.488] NtSetInformationFile (FileHandle=0x1a24, IoStatusBlock=0xaf3f9f0, FileInformation=0xaf3f9f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8df0) returned 1 [0208.851] FlushFileBuffers (hFile=0x1a24) returned 1 [0208.855] CloseHandle (hObject=0x1a24) returned 1 [0208.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e8d68 [0208.918] wcscpy (in: _Dest=0x81e8d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" [0208.918] wcscat (in: _Dest=0x81e8d68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\F0DBEC-Readme.txt" [0208.918] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0208.918] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc8 [0208.943] WriteFile (in: hFile=0x1bc8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xaf3fa3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xaf3fa3c*=0x70c, lpOverlapped=0x0) returned 1 [0208.959] CloseHandle (hObject=0x1bc8) returned 1 [0208.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8d68) returned 1 [0208.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8fb8) returned 1 Thread: id = 6412 os_tid = 0x1148 [0195.188] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json")) returned 0x2020 [0195.188] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0205.165] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2cbc [0205.166] GetFileSizeEx (in: hFile=0x2cbc, lpFileSize=0xa1df8c0 | out: lpFileSize=0xa1df8c0*=234) returned 1 [0205.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80620a8 [0205.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bf0 [0205.166] NtQuerySystemTime (in: CurrentTime=0xa1df848 | out: CurrentTime=0xa1df848*=132471540729276000) returned 0x0 [0205.166] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x51606aff [0205.166] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x74a4ef5e [0205.166] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x72113e62 [0205.166] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x14433ed0 [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x776f79bd [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x25c683b5 [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x7068c43d [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x56f9c76c [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x7bf5b84c [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x1bd87a15 [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x5eba13a [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x46bd29cf [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x1c94cb3c [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x6798b77d [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x39a1822c [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x237a2858 [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x1bf3ffc6 [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x1708491 [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x40eb175f [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x336b6909 [0205.167] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x304509ca [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x7e076f85 [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x3164dc62 [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x73fad1f4 [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x14cab083 [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x5cc722c2 [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x5ccbe7af [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x7af1a379 [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x3e4316b1 [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x4a46342e [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x4ba94335 [0205.168] RtlRandomEx (in: Seed=0xa1df840 | out: Seed=0xa1df840) returned 0x214ac27d [0205.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x834c538 [0205.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8350140 [0205.181] ReadFile (in: hFile=0x2cbc, lpBuffer=0x834c538, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xa1df83c, lpOverlapped=0x0 | out: lpBuffer=0x834c538*, lpNumberOfBytesRead=0xa1df83c*=0xea, lpOverlapped=0x0) returned 1 [0205.183] SetFilePointerEx (in: hFile=0x2cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.183] WriteFile (in: hFile=0x2cbc, lpBuffer=0x8350140*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa1df840, lpOverlapped=0x0 | out: lpBuffer=0x8350140*, lpNumberOfBytesWritten=0xa1df840*=0xea, lpOverlapped=0x0) returned 1 [0207.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0207.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0207.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0207.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8350140) returned 1 [0207.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x834c538) returned 1 [0207.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403380) returned 1 [0207.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4f50) returned 1 [0207.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fd0 [0207.936] SetFilePointerEx (in: hFile=0x2cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.936] WriteFile (in: hFile=0x2cbc, lpBuffer=0x8406998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa1df8b4, lpOverlapped=0x0 | out: lpBuffer=0x8406998*, lpNumberOfBytesWritten=0xa1df8b4*=0x10c, lpOverlapped=0x0) returned 1 [0208.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 [0208.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0208.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0208.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0208.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0208.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620a8) returned 1 [0208.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064c18) returned 1 [0208.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ba0) returned 1 [0208.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84041b8 [0208.168] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" [0208.168] wcscat (in: _Dest=0x84041b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.f0dbec" [0208.168] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0xa1df838, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3da38 [0208.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3da38) returned 1 [0208.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83f13f8) returned 1 [0208.468] NtQueryInformationFile (in: FileHandle=0x2cbc, IoStatusBlock=0xa1df810, FileInformation=0xa1df818, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa1df810, FileInformation=0xa1df818) returned 0x0 [0208.468] NtSetInformationFile (FileHandle=0x2cbc, IoStatusBlock=0xa1df810, FileInformation=0xa1df818, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84041b8) returned 1 [0208.840] FlushFileBuffers (hFile=0x2cbc) returned 1 [0208.844] CloseHandle (hObject=0x2cbc) returned 1 [0208.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e8e90 [0208.915] wcscpy (in: _Dest=0x81e8e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" [0208.915] wcscat (in: _Dest=0x81e8e90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\F0DBEC-Readme.txt" [0208.915] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0208.915] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0208.939] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa1df85c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa1df85c*=0x70c, lpOverlapped=0x0) returned 1 [0208.955] CloseHandle (hObject=0x1bc4) returned 1 [0208.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8e90) returned 1 [0208.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401cd8) returned 1 Thread: id = 6413 os_tid = 0xec4 [0195.189] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json")) returned 0x2020 [0195.190] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0205.183] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2cc4 [0205.183] GetFileSizeEx (in: hFile=0x2cc4, lpFileSize=0x9f9fdc0 | out: lpFileSize=0x9f9fdc0*=304) returned 1 [0205.184] SetFilePointerEx (in: hFile=0x2cc4, liDistanceToMove=0x12c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.184] ReadFile (in: hFile=0x2cc4, lpBuffer=0x9f9fdcc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f9fda8, lpOverlapped=0x0 | out: lpBuffer=0x9f9fdcc*, lpNumberOfBytesRead=0x9f9fda8*=0x4, lpOverlapped=0x0) returned 1 [0205.185] SetFilePointerEx (in: hFile=0x2cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bf0 [0205.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bc8 [0205.185] NtQuerySystemTime (in: CurrentTime=0x9f9fd48 | out: CurrentTime=0x9f9fd48*=132471540729432000) returned 0x0 [0205.185] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x22c871ef [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x39a5bcf0 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x34b3b082 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0xd50a603 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x1318b3fc [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x183d20ef [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x2b0fb7e6 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x78e51191 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x2ab9c155 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x1c616b94 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x3eb715e6 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x69f6d1b3 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x24c22a57 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x20f01348 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x14206988 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x6894d338 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x41d223d9 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x4f85f440 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x5dd2f924 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x193d1af [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0xca5411f [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x5d0b6e81 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x5ce7f017 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x3e1d10b0 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x2d5db2b5 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x35e3fbbc [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x65503783 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x758f5b94 [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x4bf04cd [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x7f15657b [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x420bd78a [0205.186] RtlRandomEx (in: Seed=0x9f9fd40 | out: Seed=0x9f9fd40) returned 0x2b43cf1c [0205.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8357950 [0205.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8371d88 [0205.197] ReadFile (in: hFile=0x2cc4, lpBuffer=0x8357950, nNumberOfBytesToRead=0x130, lpNumberOfBytesRead=0x9f9fd3c, lpOverlapped=0x0 | out: lpBuffer=0x8357950*, lpNumberOfBytesRead=0x9f9fd3c*=0x130, lpOverlapped=0x0) returned 1 [0205.197] SetFilePointerEx (in: hFile=0x2cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.197] WriteFile (in: hFile=0x2cc4, lpBuffer=0x8371d88*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x9f9fd40, lpOverlapped=0x0 | out: lpBuffer=0x8371d88*, lpNumberOfBytesWritten=0x9f9fd40*=0x130, lpOverlapped=0x0) returned 1 [0207.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b838 [0207.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd28 [0207.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd28) returned 1 [0207.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8371d88) returned 1 [0207.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8357950) returned 1 [0207.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403308) returned 1 [0207.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e37f8) returned 1 [0207.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ae0 [0207.938] SetFilePointerEx (in: hFile=0x2cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.939] WriteFile (in: hFile=0x2cc4, lpBuffer=0x84061f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9f9fdb4, lpOverlapped=0x0 | out: lpBuffer=0x84061f0*, lpNumberOfBytesWritten=0x9f9fdb4*=0x10c, lpOverlapped=0x0) returned 1 [0208.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84061f0) returned 1 [0208.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b10) returned 1 [0208.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd28) returned 1 [0208.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ae0) returned 1 [0208.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b838) returned 1 [0208.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064bf0) returned 1 [0208.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b50) returned 1 [0208.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b78) returned 1 [0208.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8b80 [0208.174] wcscpy (in: _Dest=0x3dd8b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" [0208.174] wcscat (in: _Dest=0x3dd8b80, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.f0dbec" [0208.174] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x9f9fd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x8335748 [0208.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8335748) returned 1 [0208.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14890d50) returned 1 [0208.473] NtQueryInformationFile (in: FileHandle=0x2cc4, IoStatusBlock=0x9f9fd10, FileInformation=0x9f9fd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9f9fd10, FileInformation=0x9f9fd18) returned 0x0 [0208.473] NtSetInformationFile (FileHandle=0x2cc4, IoStatusBlock=0x9f9fd10, FileInformation=0x9f9fd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0208.846] FlushFileBuffers (hFile=0x2cc4) returned 1 [0208.852] CloseHandle (hObject=0x2cc4) returned 1 [0208.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e90e0 [0208.916] wcscpy (in: _Dest=0x81e90e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" [0208.916] wcscat (in: _Dest=0x81e90e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\F0DBEC-Readme.txt" [0208.916] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0208.917] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bcc [0208.942] WriteFile (in: hFile=0x1bcc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9f9fd5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9f9fd5c*=0x70c, lpOverlapped=0x0) returned 1 [0208.957] CloseHandle (hObject=0x1bcc) returned 1 [0208.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e90e0) returned 1 [0208.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401bb0) returned 1 Thread: id = 6414 os_tid = 0x1150 [0195.203] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json")) returned 0x2020 [0195.652] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0210.469] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x564 [0210.470] GetFileSizeEx (in: hFile=0x564, lpFileSize=0xdd3f9e8 | out: lpFileSize=0xdd3f9e8*=232) returned 1 [0210.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80632f0 [0210.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0210.470] NtQuerySystemTime (in: CurrentTime=0xdd3f970 | out: CurrentTime=0xdd3f970*=132471540781848000) returned 0x0 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x49bd57d0 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x5ec7caa5 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x24153dc7 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x6f00c6d2 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x781ef523 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0xdf6bfd0 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x2e76fd7c [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x7e92b5fb [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x3ddce9c8 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x50afd319 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x5f757b1b [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x2b2c2a77 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x76e5035f [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0xa551d14 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x179f29c0 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x19269113 [0210.470] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x4e636c53 [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x33681427 [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x2c52ddbf [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x6519289f [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x4dd90662 [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x30a0b32b [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x4b97e5b8 [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x6ecad6aa [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x3703e740 [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0xcfda906 [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x1d014695 [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x31f204f0 [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x3b49cc6a [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x56c6deae [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x966baba [0210.471] RtlRandomEx (in: Seed=0xdd3f968 | out: Seed=0xdd3f968) returned 0x6d16bbcb [0210.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816bca8 [0210.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x816f8b0 [0210.485] ReadFile (in: hFile=0x564, lpBuffer=0x816bca8, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0xdd3f964, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesRead=0xdd3f964*=0xe8, lpOverlapped=0x0) returned 1 [0210.497] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.497] WriteFile (in: hFile=0x564, lpBuffer=0x816f8b0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xdd3f968, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesWritten=0xdd3f968*=0xe8, lpOverlapped=0x0) returned 1 [0211.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0211.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0211.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0211.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0211.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0211.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402de0) returned 1 [0211.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e40f8) returned 1 [0211.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f528 [0211.750] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.750] WriteFile (in: hFile=0x564, lpBuffer=0x8406650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdd3f9dc, lpOverlapped=0x0 | out: lpBuffer=0x8406650*, lpNumberOfBytesWritten=0xdd3f9dc*=0x10c, lpOverlapped=0x0) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f3d8) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f528) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632f0) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631d8) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063278) returned 1 [0214.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187cb8 [0214.152] wcscpy (in: _Dest=0x8187cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" [0214.152] wcscat (in: _Dest=0x8187cb8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.f0dbec" [0214.152] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0xdd3f960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9030 [0215.962] FlushFileBuffers (hFile=0x564) returned 1 [0219.680] CloseHandle (hObject=0x564) returned 1 [0219.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81ec7a0 [0219.885] wcscpy (in: _Dest=0x81ec7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" [0219.885] wcscat (in: _Dest=0x81ec7a0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\F0DBEC-Readme.txt" [0219.885] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0219.885] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b34 [0220.792] WriteFile (in: hFile=0x2b34, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdd3f984, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdd3f984*=0x70c, lpOverlapped=0x0) returned 1 [0221.131] CloseHandle (hObject=0x2b34) returned 1 [0221.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec7a0) returned 1 [0221.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401270) returned 1 Thread: id = 6415 os_tid = 0x1154 [0195.206] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0195.653] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0210.499] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1518 [0210.500] GetFileSizeEx (in: hFile=0x1518, lpFileSize=0x94ffe60 | out: lpFileSize=0x94ffe60*=258) returned 1 [0210.500] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.500] ReadFile (in: hFile=0x1518, lpBuffer=0x94ffe6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94ffe48, lpOverlapped=0x0 | out: lpBuffer=0x94ffe6c*, lpNumberOfBytesRead=0x94ffe48*=0x4, lpOverlapped=0x0) returned 1 [0210.502] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0210.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063340 [0210.502] NtQuerySystemTime (in: CurrentTime=0x94ffde8 | out: CurrentTime=0x94ffde8*=132471540782160000) returned 0x0 [0210.502] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x49b1535 [0210.502] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x2c3022a0 [0210.502] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x41046a0f [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x7d7591a9 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x2b6dfc67 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x58fd6511 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x3e5a2739 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x330e03cc [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x22faa73b [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x456c9a0c [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x6903bb64 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x62dc0640 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x4716380d [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x752f8392 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x2f138441 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0xc878f36 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x453bab00 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0xdb8da [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x7c38ce75 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x242806e6 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x773376c5 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x63daa66f [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0xfc92fa1 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x78fc3536 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x68b92f95 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x21b9bd3c [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x7871c3f1 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x5b914473 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x16f3c6c0 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x7aedc0b7 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x73b988a0 [0210.503] RtlRandomEx (in: Seed=0x94ffde0 | out: Seed=0x94ffde0) returned 0x109364ea [0210.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81734b8 [0210.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81770c0 [0210.524] ReadFile (in: hFile=0x1518, lpBuffer=0x81734b8, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x94ffddc, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesRead=0x94ffddc*=0x102, lpOverlapped=0x0) returned 1 [0210.524] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.524] WriteFile (in: hFile=0x1518, lpBuffer=0x81770c0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x94ffde0, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesWritten=0x94ffde0*=0x102, lpOverlapped=0x0) returned 1 [0213.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a88 [0213.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d420d8 [0213.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420d8) returned 1 [0213.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0213.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0213.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402d68) returned 1 [0213.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4f50) returned 1 [0213.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69360 [0213.756] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.757] WriteFile (in: hFile=0x1518, lpBuffer=0x8405b60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x94ffe54, lpOverlapped=0x0 | out: lpBuffer=0x8405b60*, lpNumberOfBytesWritten=0x94ffe54*=0x10c, lpOverlapped=0x0) returned 1 [0214.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405b60) returned 1 [0214.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69390) returned 1 [0214.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d420d8) returned 1 [0214.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69360) returned 1 [0214.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0214.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063390) returned 1 [0214.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063228) returned 1 [0214.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8187df0 [0214.153] wcscpy (in: _Dest=0x8187df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" [0214.153] wcscat (in: _Dest=0x8187df0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.f0dbec" [0214.153] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0x94ffdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ef8ee8 [0215.901] FlushFileBuffers (hFile=0x1518) returned 1 [0219.679] CloseHandle (hObject=0x1518) returned 1 [0219.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8405400 [0219.888] wcscpy (in: _Dest=0x8405400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" [0219.888] wcscat (in: _Dest=0x8405400, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0219.888] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0219.888] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1174 [0220.792] WriteFile (in: hFile=0x1174, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x94ffdfc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x94ffdfc*=0x70c, lpOverlapped=0x0) returned 1 [0221.129] CloseHandle (hObject=0x1174) returned 1 [0221.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405400) returned 1 [0221.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401a88) returned 1 Thread: id = 6416 os_tid = 0x1158 [0195.207] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0195.654] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0210.526] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2cbc [0210.527] GetFileSizeEx (in: hFile=0x2cbc, lpFileSize=0xf0dff68 | out: lpFileSize=0xf0dff68*=249) returned 1 [0210.527] SetFilePointerEx (in: hFile=0x2cbc, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.527] ReadFile (in: hFile=0x2cbc, lpBuffer=0xf0dff74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf0dff50, lpOverlapped=0x0 | out: lpBuffer=0xf0dff74*, lpNumberOfBytesRead=0xf0dff50*=0x4, lpOverlapped=0x0) returned 1 [0210.529] SetFilePointerEx (in: hFile=0x2cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063340 [0210.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80632c8 [0210.529] NtQuerySystemTime (in: CurrentTime=0xf0dfef0 | out: CurrentTime=0xf0dfef0*=132471540782472000) returned 0x0 [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0xac850d4 [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x71c65945 [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x6f6ac1bf [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x6bd8cd5 [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x1f335d86 [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x6db08aac [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x3c74e89b [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x6f52a8ba [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x639b4c34 [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x25865067 [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x5466cb6e [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x7aa04be7 [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x6c5bc77d [0210.529] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x780eef99 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x5f424a2 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x4586c614 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x69687c63 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0xdd2c33d [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x53cbd2c0 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x6c3e7bc0 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x3a02c032 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x56d1007e [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x618bf8ea [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x59d24dc0 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x76d9e06e [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x3eab9a05 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x7ed8fad7 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0xa716ba9 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0xb64ed3 [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x19d2ba7a [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x6fde41ba [0210.530] RtlRandomEx (in: Seed=0xf0dfee8 | out: Seed=0xf0dfee8) returned 0x115df7e4 [0210.541] ReadFile (in: hFile=0x2cbc, lpBuffer=0x817acc8, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0xf0dfee4, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesRead=0xf0dfee4*=0xf9, lpOverlapped=0x0) returned 1 [0210.541] SetFilePointerEx (in: hFile=0x2cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.541] WriteFile (in: hFile=0x2cbc, lpBuffer=0x817e8d0*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0xf0dfee8, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesWritten=0xf0dfee8*=0xf9, lpOverlapped=0x0) returned 1 [0213.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42150 [0213.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42060 [0213.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42060) returned 1 [0213.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0213.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0213.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402cf0) returned 1 [0213.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4140) returned 1 [0213.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69300 [0213.755] SetFilePointerEx (in: hFile=0x2cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.755] WriteFile (in: hFile=0x2cbc, lpBuffer=0x8405d90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf0dff5c, lpOverlapped=0x0 | out: lpBuffer=0x8405d90*, lpNumberOfBytesWritten=0xf0dff5c*=0x10c, lpOverlapped=0x0) returned 1 [0214.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405d90) returned 1 [0214.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69330) returned 1 [0214.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42060) returned 1 [0214.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69300) returned 1 [0214.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42150) returned 1 [0214.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063340) returned 1 [0214.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063480) returned 1 [0214.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063188) returned 1 [0214.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x8404908 [0214.033] wcscpy (in: _Dest=0x8404908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" [0214.033] wcscat (in: _Dest=0x8404908, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.f0dbec" [0214.033] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.f0dbec", NtPathName=0xf0dfee0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3db80 [0215.758] FlushFileBuffers (hFile=0x2cbc) returned 1 [0215.770] CloseHandle (hObject=0x2cbc) returned 1 [0216.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404de8 [0216.024] wcscpy (in: _Dest=0x8404de8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" [0216.024] wcscat (in: _Dest=0x8404de8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" [0216.024] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\f0dbec-readme.txt")) returned 0xffffffff [0216.024] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.481] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf0dff04, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf0dff04*=0x70c, lpOverlapped=0x0) returned 1 [0216.483] CloseHandle (hObject=0x10c4) returned 1 [0216.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404de8) returned 1 [0216.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401960) returned 1 Thread: id = 6417 os_tid = 0x1160 [0195.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif")) returned 0x20 [0195.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0195.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.209] GetLastError () returned 0x5 [0195.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0195.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae100) returned 1 Thread: id = 6418 os_tid = 0x147c [0195.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20 [0195.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.212] GetLastError () returned 0x5 [0195.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae008) returned 1 Thread: id = 6419 os_tid = 0x1480 [0195.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20 [0195.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.214] GetLastError () returned 0x5 [0195.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 Thread: id = 6420 os_tid = 0x6cc [0195.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif")) returned 0x20 [0195.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0195.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.217] GetLastError () returned 0x5 [0195.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0195.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dade18) returned 1 Thread: id = 6421 os_tid = 0x1484 [0195.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20 [0195.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.219] GetLastError () returned 0x5 [0195.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 Thread: id = 6422 os_tid = 0xf3c [0195.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20 [0195.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.223] GetLastError () returned 0x5 [0195.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae4e0) returned 1 Thread: id = 6423 os_tid = 0xef8 [0195.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss")) returned 0x20 [0196.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS", dwFileAttributes=0x20) returned 0 [0196.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.563] GetLastError () returned 0x5 [0196.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS", dwFileAttributes=0x20) returned 0 [0196.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ad18) returned 1 Thread: id = 6424 os_tid = 0x1488 [0195.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif")) returned 0x20 [0195.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0195.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.228] GetLastError () returned 0x5 [0195.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0195.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e26340) returned 1 Thread: id = 6425 os_tid = 0x158 [0195.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif")) returned 0x20 [0195.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif", dwFileAttributes=0x20) returned 0 [0195.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.230] GetLastError () returned 0x5 [0195.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif", dwFileAttributes=0x20) returned 0 [0195.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae5d8) returned 1 Thread: id = 6426 os_tid = 0x148c [0195.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20 [0195.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0195.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.241] GetLastError () returned 0x5 [0195.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0195.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae6d0) returned 1 Thread: id = 6427 os_tid = 0x1490 [0195.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20 [0195.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0195.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.245] GetLastError () returned 0x5 [0195.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0195.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae7c8) returned 1 Thread: id = 6428 os_tid = 0x1494 [0195.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif")) returned 0x20 [0195.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0195.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.248] GetLastError () returned 0x5 [0195.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0195.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021230) returned 1 Thread: id = 6429 os_tid = 0x1498 [0195.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif")) returned 0x20 [0195.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.259] GetLastError () returned 0x5 [0195.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020d80) returned 1 Thread: id = 6430 os_tid = 0x149c [0195.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif")) returned 0x20 [0195.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.262] GetLastError () returned 0x5 [0195.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8020c90) returned 1 Thread: id = 6431 os_tid = 0x162c [0195.263] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json")) returned 0x2020 [0204.354] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", dwFileAttributes=0x20) returned 1 [0214.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b28 [0214.337] GetFileSizeEx (in: hFile=0x1b28, lpFileSize=0xdc0fe48 | out: lpFileSize=0xdc0fe48*=194) returned 1 [0214.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634f8 [0214.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b10 [0214.337] NtQuerySystemTime (in: CurrentTime=0xdc0fdd0 | out: CurrentTime=0xdc0fdd0*=132471540820536000) returned 0x0 [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x4ac3623 [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x6284a089 [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x59e5b942 [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x5f262cb2 [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x796ae790 [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x4f50db32 [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x2cb0b85f [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x45fbff21 [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x4dc39616 [0214.337] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x5d56cf40 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x69f48853 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x180b9f39 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x66fcd216 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x2d1829ec [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x673918f4 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x2051519f [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0xba31cdc [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x12215689 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x1b0ee99f [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x7642ea6e [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x2c7e207d [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x6e1d2fbf [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0xcce69df [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x581196d5 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x10576b42 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x47efd745 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x30418818 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x11d72eef [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x52594a07 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x6fe56d36 [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x4451359b [0214.338] RtlRandomEx (in: Seed=0xdc0fdc8 | out: Seed=0xdc0fdc8) returned 0x6f117c4d [0214.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82318b0 [0214.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82354b8 [0214.349] ReadFile (in: hFile=0x1b28, lpBuffer=0x82318b0, nNumberOfBytesToRead=0xc2, lpNumberOfBytesRead=0xdc0fdc4, lpOverlapped=0x0 | out: lpBuffer=0x82318b0*, lpNumberOfBytesRead=0xdc0fdc4*=0xc2, lpOverlapped=0x0) returned 1 [0214.351] SetFilePointerEx (in: hFile=0x1b28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.351] WriteFile (in: hFile=0x1b28, lpBuffer=0x82354b8*, nNumberOfBytesToWrite=0xc2, lpNumberOfBytesWritten=0xdc0fdc8, lpOverlapped=0x0 | out: lpBuffer=0x82354b8*, lpNumberOfBytesWritten=0xdc0fdc8*=0xc2, lpOverlapped=0x0) returned 1 [0215.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80639d0 [0215.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063458 [0215.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063458) returned 1 [0215.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82354b8) returned 1 [0215.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82318b0) returned 1 [0215.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402b10) returned 1 [0215.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83e8a08) returned 1 [0215.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fbb8 [0215.708] SetFilePointerEx (in: hFile=0x1b28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.708] WriteFile (in: hFile=0x1b28, lpBuffer=0x8405930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdc0fe3c, lpOverlapped=0x0 | out: lpBuffer=0x8405930*, lpNumberOfBytesWritten=0xdc0fe3c*=0x10c, lpOverlapped=0x0) returned 1 [0215.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405930) returned 1 [0215.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb88) returned 1 [0215.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063458) returned 1 [0215.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fbb8) returned 1 [0215.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639d0) returned 1 [0215.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634f8) returned 1 [0215.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b88) returned 1 [0215.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063c28) returned 1 [0215.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8186e18 [0215.985] wcscpy (in: _Dest=0x8186e18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" [0215.985] wcscat (in: _Dest=0x8186e18, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.f0dbec" [0215.985] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.f0dbec", NtPathName=0xdc0fdc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8c58 [0216.240] FlushFileBuffers (hFile=0x1b28) returned 1 [0216.260] CloseHandle (hObject=0x1b28) returned 1 [0216.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d1b78 [0216.334] wcscpy (in: _Dest=0x81d1b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\" [0216.334] wcscat (in: _Dest=0x81d1b78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\F0DBEC-Readme.txt" [0216.334] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\f0dbec-readme.txt")) returned 0xffffffff [0216.334] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb18 [0217.848] WriteFile (in: hFile=0xb18, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdc0fde4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdc0fde4*=0x70c, lpOverlapped=0x0) returned 1 [0221.160] CloseHandle (hObject=0xb18) returned 1 [0221.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1b78) returned 1 [0221.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e89f0) returned 1 Thread: id = 6432 os_tid = 0x1198 [0195.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp")) returned 0x20 [0195.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", dwFileAttributes=0x20) returned 0 [0195.265] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.265] GetLastError () returned 0x5 [0195.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", dwFileAttributes=0x20) returned 0 [0195.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3335e8) returned 1 Thread: id = 6433 os_tid = 0x14a8 [0195.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp")) returned 0x20 [0195.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", dwFileAttributes=0x20) returned 0 [0195.267] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.267] GetLastError () returned 0x5 [0195.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", dwFileAttributes=0x20) returned 0 [0195.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35730) returned 1 Thread: id = 6434 os_tid = 0x1634 [0195.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx")) returned 0x20 [0195.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", dwFileAttributes=0x20) returned 0 [0195.269] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.270] GetLastError () returned 0x5 [0195.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", dwFileAttributes=0x20) returned 0 [0195.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 6435 os_tid = 0x14ac [0195.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp")) returned 0x20 [0195.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", dwFileAttributes=0x20) returned 0 [0195.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.272] GetLastError () returned 0x5 [0195.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", dwFileAttributes=0x20) returned 0 [0195.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 6436 os_tid = 0x1aa8 [0195.273] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json")) returned 0x2020 [0195.655] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0210.101] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c4 [0210.102] GetFileSizeEx (in: hFile=0x10c4, lpFileSize=0xfa7ff38 | out: lpFileSize=0xfa7ff38*=226) returned 1 [0210.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca328 [0210.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ea0 [0210.102] NtQuerySystemTime (in: CurrentTime=0xfa7fec0 | out: CurrentTime=0xfa7fec0*=132471540778260000) returned 0x0 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x39f6b77 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x456d60a2 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x7a494bd0 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x7417a418 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x653a847e [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x719e8bb8 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x7837886e [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x38477249 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x659195b8 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x282a6c48 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x574e2de6 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x4cd887c3 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x5c3e4120 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x5e4b4d8f [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x37afa232 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x4f056a00 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x21c62cd7 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0xefe41e0 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x42036693 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x7258b6db [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x43be7f58 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x502dd363 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x2fe8f57 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x15523011 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x7ef067c3 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x2d0462ae [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x11fdcbc6 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x178b04c0 [0210.103] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x4732df4 [0210.104] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x1e4f3456 [0210.104] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x28fb7ddb [0210.104] RtlRandomEx (in: Seed=0xfa7feb8 | out: Seed=0xfa7feb8) returned 0x13f0f3e2 [0210.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8379598 [0210.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x837d1a0 [0210.113] ReadFile (in: hFile=0x10c4, lpBuffer=0x8379598, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xfa7feb4, lpOverlapped=0x0 | out: lpBuffer=0x8379598*, lpNumberOfBytesRead=0xfa7feb4*=0xe2, lpOverlapped=0x0) returned 1 [0210.115] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.116] WriteFile (in: hFile=0x10c4, lpBuffer=0x837d1a0*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xfa7feb8, lpOverlapped=0x0 | out: lpBuffer=0x837d1a0*, lpNumberOfBytesWritten=0xfa7feb8*=0xe2, lpOverlapped=0x0) returned 1 [0212.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43e60 [0212.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43140 [0212.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43140) returned 1 [0212.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x837d1a0) returned 1 [0212.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8379598) returned 1 [0212.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df88f8) returned 1 [0212.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3ac8) returned 1 [0212.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69540 [0212.810] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.810] WriteFile (in: hFile=0x10c4, lpBuffer=0x84075a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfa7ff2c, lpOverlapped=0x0 | out: lpBuffer=0x84075a0*, lpNumberOfBytesWritten=0xfa7ff2c*=0x10c, lpOverlapped=0x0) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84075a0) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69570) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43140) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69540) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43e60) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca328) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0214.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187910 [0214.149] wcscpy (in: _Dest=0x8187910, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" [0214.149] wcscat (in: _Dest=0x8187910, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.f0dbec" [0214.149] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0xfa7feb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8c58 [0215.967] FlushFileBuffers (hFile=0x10c4) returned 1 [0215.974] CloseHandle (hObject=0x10c4) returned 1 [0216.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d2140 [0216.148] wcscpy (in: _Dest=0x81d2140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" [0216.148] wcscat (in: _Dest=0x81d2140, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\F0DBEC-Readme.txt" [0216.148] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0216.148] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e7c [0217.832] WriteFile (in: hFile=0x1e7c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xfa7fed4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xfa7fed4*=0x70c, lpOverlapped=0x0) returned 1 [0220.794] CloseHandle (hObject=0x1e7c) returned 1 [0222.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2140) returned 1 [0222.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebd38) returned 1 Thread: id = 6437 os_tid = 0x1ab0 [0195.274] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json")) returned 0x2020 [0195.656] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0210.135] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1154 [0210.135] GetFileSizeEx (in: hFile=0x1154, lpFileSize=0xfc1fc48 | out: lpFileSize=0xfc1fc48*=239) returned 1 [0210.135] SetFilePointerEx (in: hFile=0x1154, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.135] ReadFile (in: hFile=0x1154, lpBuffer=0xfc1fc54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfc1fc30, lpOverlapped=0x0 | out: lpBuffer=0xfc1fc54*, lpNumberOfBytesRead=0xfc1fc30*=0x4, lpOverlapped=0x0) returned 1 [0210.137] SetFilePointerEx (in: hFile=0x1154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ab8 [0210.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0210.137] NtQuerySystemTime (in: CurrentTime=0xfc1fbd0 | out: CurrentTime=0xfc1fbd0*=132471540778572000) returned 0x0 [0210.137] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x21f4d35b [0210.137] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x4d55d6a6 [0210.137] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x39147fc4 [0210.137] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x71b61fa7 [0210.137] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x3cf4ae36 [0210.137] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x6b95d75b [0210.137] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x7c8f03f3 [0210.137] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x6513f1b4 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x6debb381 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x1c0bdd3f [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x389e8f [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x798ce8a5 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x2da2cc4 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x5b3e66a [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x1225794 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x2e533193 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x425fb5fc [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x411a22b5 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x1760681e [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x7a494bd0 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x348a9e74 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x1acd4000 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x5db578cc [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x6683170c [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x29a49438 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x4f294d0c [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x1959cc4f [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x4a75667e [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x201cf230 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x15b9d090 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x6f8bdd86 [0210.138] RtlRandomEx (in: Seed=0xfc1fbc8 | out: Seed=0xfc1fbc8) returned 0x4a19eba5 [0210.147] ReadFile (in: hFile=0x1154, lpBuffer=0x8357950, nNumberOfBytesToRead=0xef, lpNumberOfBytesRead=0xfc1fbc4, lpOverlapped=0x0 | out: lpBuffer=0x8357950*, lpNumberOfBytesRead=0xfc1fbc4*=0xef, lpOverlapped=0x0) returned 1 [0210.148] SetFilePointerEx (in: hFile=0x1154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.148] WriteFile (in: hFile=0x1154, lpBuffer=0x8371d88*, nNumberOfBytesToWrite=0xef, lpNumberOfBytesWritten=0xfc1fbc8, lpOverlapped=0x0 | out: lpBuffer=0x8371d88*, lpNumberOfBytesWritten=0xfc1fbc8*=0xef, lpOverlapped=0x0) returned 1 [0213.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435c8 [0213.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0213.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0213.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8371d88) returned 1 [0213.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8357950) returned 1 [0213.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9438) returned 1 [0213.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3648) returned 1 [0213.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fa0 [0213.551] SetFilePointerEx (in: hFile=0x1154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.551] WriteFile (in: hFile=0x1154, lpBuffer=0x8405ea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfc1fc3c, lpOverlapped=0x0 | out: lpBuffer=0x8405ea8*, lpNumberOfBytesWritten=0xfc1fc3c*=0x10c, lpOverlapped=0x0) returned 1 [0215.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405ea8) returned 1 [0215.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692d0) returned 1 [0215.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0215.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fa0) returned 1 [0215.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435c8) returned 1 [0215.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ab8) returned 1 [0215.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca300) returned 1 [0215.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e28) returned 1 [0215.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84041b8 [0215.677] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" [0215.677] wcscat (in: _Dest=0x84041b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.f0dbec" [0215.677] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0xfc1fbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8ee8 [0216.129] FlushFileBuffers (hFile=0x1154) returned 1 [0216.134] CloseHandle (hObject=0x1154) returned 1 [0216.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d0458 [0216.216] wcscpy (in: _Dest=0x81d0458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" [0216.216] wcscat (in: _Dest=0x81d0458, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\F0DBEC-Readme.txt" [0216.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0216.216] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x718 [0217.835] WriteFile (in: hFile=0x718, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xfc1fbe4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xfc1fbe4*=0x70c, lpOverlapped=0x0) returned 1 [0220.800] CloseHandle (hObject=0x718) returned 1 [0222.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0458) returned 1 [0222.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebe60) returned 1 Thread: id = 6438 os_tid = 0x1ab4 [0195.275] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json")) returned 0x2020 [0195.657] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0210.174] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fa4 [0210.175] GetFileSizeEx (in: hFile=0x1fa4, lpFileSize=0xfb0fa90 | out: lpFileSize=0xfb0fa90*=232) returned 1 [0210.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9dd8 [0210.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0210.176] NtQuerySystemTime (in: CurrentTime=0xfb0fa18 | out: CurrentTime=0xfb0fa18*=132471540778884000) returned 0x0 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x17f65f22 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x1aa26740 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x3e060ce5 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x80673ae [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x347db498 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x7c04d9b5 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x3e38c60d [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x6bc5043f [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x2d491662 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x5fb6e9a5 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x763a4a06 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x7f2bfa72 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x211cacf3 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x1a778e80 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x7c254e15 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x158db064 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x7f708f50 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x13459521 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x150f01f2 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x55453402 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x7ed47fe0 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x237fb9c2 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x45608238 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x3466a633 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x62fd4565 [0210.176] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x20bef81b [0210.177] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x5eaf6671 [0210.177] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x490c738b [0210.177] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x421b633c [0210.177] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x6d3deccb [0210.177] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x6f76db4e [0210.177] RtlRandomEx (in: Seed=0xfb0fa10 | out: Seed=0xfb0fa10) returned 0x3c3f894e [0210.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x834c538 [0210.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8350140 [0210.188] ReadFile (in: hFile=0x1fa4, lpBuffer=0x834c538, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0xfb0fa0c, lpOverlapped=0x0 | out: lpBuffer=0x834c538*, lpNumberOfBytesRead=0xfb0fa0c*=0xe8, lpOverlapped=0x0) returned 1 [0210.190] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.190] WriteFile (in: hFile=0x1fa4, lpBuffer=0x8350140*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xfb0fa10, lpOverlapped=0x0 | out: lpBuffer=0x8350140*, lpNumberOfBytesWritten=0xfb0fa10*=0xe8, lpOverlapped=0x0) returned 1 [0213.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0213.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d422b8 [0213.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422b8) returned 1 [0213.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8350140) returned 1 [0213.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x834c538) returned 1 [0213.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9528) returned 1 [0213.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e48d8) returned 1 [0213.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68d00 [0213.721] SetFilePointerEx (in: hFile=0x1fa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.721] WriteFile (in: hFile=0x1fa4, lpBuffer=0x8406880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfb0fa84, lpOverlapped=0x0 | out: lpBuffer=0x8406880*, lpNumberOfBytesWritten=0xfb0fa84*=0x10c, lpOverlapped=0x0) returned 1 [0215.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 [0215.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692a0) returned 1 [0215.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422b8) returned 1 [0215.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d00) returned 1 [0215.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0215.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9dd8) returned 1 [0215.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3a0) returned 1 [0215.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0215.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187f28 [0215.304] wcscpy (in: _Dest=0x8187f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" [0215.304] wcscat (in: _Dest=0x8187f28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.f0dbec" [0215.304] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.f0dbec", NtPathName=0xfb0fa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9408 [0215.959] FlushFileBuffers (hFile=0x1fa4) returned 1 [0215.970] CloseHandle (hObject=0x1fa4) returned 1 [0216.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d06a8 [0216.145] wcscpy (in: _Dest=0x81d06a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" [0216.145] wcscat (in: _Dest=0x81d06a8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\F0DBEC-Readme.txt" [0216.145] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\f0dbec-readme.txt")) returned 0xffffffff [0216.145] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b1c [0217.819] WriteFile (in: hFile=0x1b1c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xfb0fa2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xfb0fa2c*=0x70c, lpOverlapped=0x0) returned 1 [0220.454] CloseHandle (hObject=0x1b1c) returned 1 [0222.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d06a8) returned 1 [0222.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebf88) returned 1 Thread: id = 6439 os_tid = 0x1ab8 [0195.276] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json")) returned 0x2020 [0195.658] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0210.208] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x27f0 [0210.209] GetFileSizeEx (in: hFile=0x27f0, lpFileSize=0xf76fe58 | out: lpFileSize=0xf76fe58*=265) returned 1 [0210.209] SetFilePointerEx (in: hFile=0x27f0, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.209] ReadFile (in: hFile=0x27f0, lpBuffer=0xf76fe64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf76fe40, lpOverlapped=0x0 | out: lpBuffer=0xf76fe64*, lpNumberOfBytesRead=0xf76fe40*=0x4, lpOverlapped=0x0) returned 1 [0210.215] SetFilePointerEx (in: hFile=0x27f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0210.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0210.216] NtQuerySystemTime (in: CurrentTime=0xf76fde0 | out: CurrentTime=0xf76fde0*=132471540779352000) returned 0x0 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x395d5cc7 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x5bb4688a [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x308117a8 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x62b54db5 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x62729d1a [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x2d823155 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x2648b064 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x5d1fdff3 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x22ca7ae9 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x655964c8 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x20194a51 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x8439338 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x3c44261a [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x433551e7 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x2a38c012 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x5e1532a3 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x4781d0c5 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x6c298f00 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x135b6497 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x2da2cc4 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x53d06b40 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x788fb462 [0210.216] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x3eca7165 [0210.217] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x54727483 [0210.217] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x6a06b828 [0210.217] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x239317a1 [0210.217] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x23281678 [0210.217] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x5a121fe9 [0210.217] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x1f36d7ca [0210.217] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x4fb0cd00 [0210.217] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x2971e934 [0210.217] RtlRandomEx (in: Seed=0xf76fdd8 | out: Seed=0xf76fdd8) returned 0x1cec3d9a [0210.227] ReadFile (in: hFile=0x27f0, lpBuffer=0x8366970, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0xf76fdd4, lpOverlapped=0x0 | out: lpBuffer=0x8366970*, lpNumberOfBytesRead=0xf76fdd4*=0x109, lpOverlapped=0x0) returned 1 [0210.227] SetFilePointerEx (in: hFile=0x27f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.228] WriteFile (in: hFile=0x27f0, lpBuffer=0x836e180*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0xf76fdd8, lpOverlapped=0x0 | out: lpBuffer=0x836e180*, lpNumberOfBytesWritten=0xf76fdd8*=0x109, lpOverlapped=0x0) returned 1 [0212.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42268 [0212.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d422e0 [0212.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422e0) returned 1 [0212.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836e180) returned 1 [0212.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8366970) returned 1 [0212.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df9690) returned 1 [0212.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4da0) returned 1 [0212.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e694e0 [0212.988] SetFilePointerEx (in: hFile=0x27f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.988] WriteFile (in: hFile=0x27f0, lpBuffer=0x8405930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf76fe4c, lpOverlapped=0x0 | out: lpBuffer=0x8405930*, lpNumberOfBytesWritten=0xf76fe4c*=0x10c, lpOverlapped=0x0) returned 1 [0215.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405930) returned 1 [0215.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69510) returned 1 [0215.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d422e0) returned 1 [0215.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694e0) returned 1 [0215.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42268) returned 1 [0215.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0215.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0215.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0215.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403930 [0215.302] wcscpy (in: _Dest=0x8403930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" [0215.302] wcscat (in: _Dest=0x8403930, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.f0dbec" [0215.302] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0xf76fdd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa888 [0215.957] FlushFileBuffers (hFile=0x27f0) returned 1 [0215.963] CloseHandle (hObject=0x27f0) returned 1 [0216.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d07d0 [0216.134] wcscpy (in: _Dest=0x81d07d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" [0216.134] wcscat (in: _Dest=0x81d07d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\F0DBEC-Readme.txt" [0216.134] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0216.134] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a14 [0217.867] WriteFile (in: hFile=0x1a14, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf76fdf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf76fdf4*=0x70c, lpOverlapped=0x0) returned 1 [0222.052] CloseHandle (hObject=0x1a14) returned 1 [0222.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d07d0) returned 1 [0222.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec0b0) returned 1 Thread: id = 6440 os_tid = 0x1abc [0195.278] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json")) returned 0x2020 [0195.658] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0210.545] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13c0 [0210.546] GetFileSizeEx (in: hFile=0x13c0, lpFileSize=0xfd0fd48 | out: lpFileSize=0xfd0fd48*=234) returned 1 [0210.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80632c8 [0210.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80631b0 [0210.546] NtQuerySystemTime (in: CurrentTime=0xfd0fcd0 | out: CurrentTime=0xfd0fcd0*=132471540782628000) returned 0x0 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x1e512658 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x7d0261e2 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x2f368837 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x18da56a6 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x4ab2eafc [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x7e4441e6 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x5d22567d [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x674bf35 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x14e7eccf [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x71553aa8 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x225f60a0 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x7f09006f [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x622cc248 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x7e1f0d42 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x6dea4a50 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x60552e32 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0xe1bb76e [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x1f4cccc3 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x653659cb [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x108c76c8 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x6570db37 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x169e1540 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x801dfe4 [0210.546] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x4d8894f0 [0210.547] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x7b15933 [0210.547] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x1b4778ad [0210.547] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x7f14a40d [0210.547] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x7e037176 [0210.547] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x3d4b5800 [0210.547] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x7dc35975 [0210.547] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x2047d854 [0210.547] RtlRandomEx (in: Seed=0xfd0fcc8 | out: Seed=0xfd0fcc8) returned 0x418ed96e [0210.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81824d8 [0210.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8208458 [0210.558] ReadFile (in: hFile=0x13c0, lpBuffer=0x81824d8, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xfd0fcc4, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesRead=0xfd0fcc4*=0xea, lpOverlapped=0x0) returned 1 [0210.566] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.567] WriteFile (in: hFile=0x13c0, lpBuffer=0x8208458*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xfd0fcc8, lpOverlapped=0x0 | out: lpBuffer=0x8208458*, lpNumberOfBytesWritten=0xfd0fcc8*=0xea, lpOverlapped=0x0) returned 1 [0212.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0212.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d421c8 [0212.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421c8) returned 1 [0212.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8208458) returned 1 [0212.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0212.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402c78) returned 1 [0212.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4d10) returned 1 [0212.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69600 [0212.659] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.659] WriteFile (in: hFile=0x13c0, lpBuffer=0x8407140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfd0fd3c, lpOverlapped=0x0 | out: lpBuffer=0x8407140*, lpNumberOfBytesWritten=0xfd0fd3c*=0x10c, lpOverlapped=0x0) returned 1 [0214.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407140) returned 1 [0214.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69630) returned 1 [0214.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d421c8) returned 1 [0214.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69600) returned 1 [0214.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0214.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632c8) returned 1 [0214.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634f8) returned 1 [0214.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634d0) returned 1 [0214.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187b80 [0214.151] wcscpy (in: _Dest=0x8187b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" [0214.151] wcscat (in: _Dest=0x8187b80, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.f0dbec" [0214.151] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0xfd0fcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9178 [0215.899] FlushFileBuffers (hFile=0x13c0) returned 1 [0215.907] CloseHandle (hObject=0x13c0) returned 1 [0216.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d1238 [0216.117] wcscpy (in: _Dest=0x81d1238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" [0216.117] wcscat (in: _Dest=0x81d1238, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\F0DBEC-Readme.txt" [0216.118] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0216.118] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.648] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xfd0fce4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xfd0fce4*=0x70c, lpOverlapped=0x0) returned 1 [0216.650] CloseHandle (hObject=0x10c4) returned 1 [0216.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1238) returned 1 [0216.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec1d8) returned 1 Thread: id = 6441 os_tid = 0x1ac4 [0195.279] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json")) returned 0x2020 [0195.659] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0210.568] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18f8 [0210.569] GetFileSizeEx (in: hFile=0x18f8, lpFileSize=0xfbbfb20 | out: lpFileSize=0xfbbfb20*=254) returned 1 [0210.569] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.569] ReadFile (in: hFile=0x18f8, lpBuffer=0xfbbfb2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfbbfb08, lpOverlapped=0x0 | out: lpBuffer=0xfbbfb2c*, lpNumberOfBytesRead=0xfbbfb08*=0x4, lpOverlapped=0x0) returned 1 [0210.571] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80631b0 [0210.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063408 [0210.571] NtQuerySystemTime (in: CurrentTime=0xfbbfaa8 | out: CurrentTime=0xfbbfaa8*=132471540782940000) returned 0x0 [0210.571] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x3af2c9d7 [0210.571] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x629cb509 [0210.571] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x4ca8d9fb [0210.571] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x60baa974 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0xb62c6e3 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x40146747 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x6604577b [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x7244407f [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0xc6586d9 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x3f6b7a01 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x1e61a5d9 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x68e28140 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x78cb33d9 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x1f8470ab [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x1d7ebcaa [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x4c999a09 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x53b1d90f [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x7be5b682 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x307eaebf [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x3fc7a4d5 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x1717b64f [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x3dc984a [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x2ef91c1c [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x10c5b1fc [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x49038ef7 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x10f7d2b6 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x536f86c1 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x2fe6c49b [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x5a7ec64 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x7d63f033 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x4a520ee1 [0210.572] RtlRandomEx (in: Seed=0xfbbfaa0 | out: Seed=0xfbbfaa0) returned 0x669c3f27 [0210.584] ReadFile (in: hFile=0x18f8, lpBuffer=0x820c060, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xfbbfa9c, lpOverlapped=0x0 | out: lpBuffer=0x820c060*, lpNumberOfBytesRead=0xfbbfa9c*=0xfe, lpOverlapped=0x0) returned 1 [0210.584] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.584] WriteFile (in: hFile=0x18f8, lpBuffer=0x820fc68*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xfbbfaa0, lpOverlapped=0x0 | out: lpBuffer=0x820fc68*, lpNumberOfBytesWritten=0xfbbfaa0*=0xfe, lpOverlapped=0x0) returned 1 [0215.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca080 [0215.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f68 [0215.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f68) returned 1 [0215.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x820fc68) returned 1 [0215.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x820c060) returned 1 [0215.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402c00) returned 1 [0215.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4b60) returned 1 [0215.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69540 [0215.334] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.334] WriteFile (in: hFile=0x18f8, lpBuffer=0x8407140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfbbfb14, lpOverlapped=0x0 | out: lpBuffer=0x8407140*, lpNumberOfBytesWritten=0xfbbfb14*=0x10c, lpOverlapped=0x0) returned 1 [0215.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407140) returned 1 [0215.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69570) returned 1 [0215.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f68) returned 1 [0215.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69540) returned 1 [0215.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca080) returned 1 [0215.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631b0) returned 1 [0215.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80625a8) returned 1 [0215.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063458) returned 1 [0215.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8188060 [0215.692] wcscpy (in: _Dest=0x8188060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" [0215.692] wcscat (in: _Dest=0x8188060, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.f0dbec" [0215.692] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0xfbbfa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9030 [0216.139] FlushFileBuffers (hFile=0x18f8) returned 1 [0216.149] CloseHandle (hObject=0x18f8) returned 1 [0216.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d2018 [0216.221] wcscpy (in: _Dest=0x81d2018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" [0216.221] wcscat (in: _Dest=0x81d2018, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\F0DBEC-Readme.txt" [0216.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0216.222] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe2c [0217.837] WriteFile (in: hFile=0xe2c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xfbbfabc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xfbbfabc*=0x70c, lpOverlapped=0x0) returned 1 [0221.132] CloseHandle (hObject=0xe2c) returned 1 [0221.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2018) returned 1 [0221.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec300) returned 1 Thread: id = 6442 os_tid = 0x1ac8 [0195.280] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json")) returned 0x2020 [0195.660] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0210.585] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1144 [0210.586] GetFileSizeEx (in: hFile=0x1144, lpFileSize=0xff2f9f0 | out: lpFileSize=0xff2f9f0*=268) returned 1 [0210.586] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.586] ReadFile (in: hFile=0x1144, lpBuffer=0xff2f9fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xff2f9d8, lpOverlapped=0x0 | out: lpBuffer=0xff2f9fc*, lpNumberOfBytesRead=0xff2f9d8*=0x4, lpOverlapped=0x0) returned 1 [0210.588] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063408 [0210.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634a8 [0210.588] NtQuerySystemTime (in: CurrentTime=0xff2f978 | out: CurrentTime=0xff2f978*=132471540783096000) returned 0x0 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x23c20566 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x7ca6e16c [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x226d5bf5 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x6b7b43d6 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x6841002f [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x76d0efa0 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x21cdf9ba [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x5cd58b40 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x74ef7740 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x4901d634 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x1dbcd2ad [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x6bce7c37 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x2e7f33a8 [0210.588] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x5ddef011 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x75b1b041 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x2aca7b04 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x71ec39c0 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x2bc20320 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x194ba140 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x4c219e86 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x4a68322 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x75270d1a [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x3b0e5ded [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x26eec015 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x14b366b7 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x6be5bec0 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x734797e2 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x4e932ef5 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x26778fab [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0xa9d7d59 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x6ffc0230 [0210.589] RtlRandomEx (in: Seed=0xff2f970 | out: Seed=0xff2f970) returned 0x6ac18c9 [0210.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8213870 [0210.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8217478 [0210.602] ReadFile (in: hFile=0x1144, lpBuffer=0x8213870, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0xff2f96c, lpOverlapped=0x0 | out: lpBuffer=0x8213870*, lpNumberOfBytesRead=0xff2f96c*=0x10c, lpOverlapped=0x0) returned 1 [0210.602] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.602] WriteFile (in: hFile=0x1144, lpBuffer=0x8217478*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xff2f970, lpOverlapped=0x0 | out: lpBuffer=0x8217478*, lpNumberOfBytesWritten=0xff2f970*=0x10c, lpOverlapped=0x0) returned 1 [0214.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a98 [0214.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063b38 [0214.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b38) returned 1 [0214.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8217478) returned 1 [0214.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8213870) returned 1 [0214.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402b10) returned 1 [0214.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4d58) returned 1 [0214.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fb28 [0214.139] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.139] WriteFile (in: hFile=0x1144, lpBuffer=0x8406538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xff2f9e4, lpOverlapped=0x0 | out: lpBuffer=0x8406538*, lpNumberOfBytesWritten=0xff2f9e4*=0x10c, lpOverlapped=0x0) returned 1 [0215.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406538) returned 1 [0215.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa98) returned 1 [0215.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063b38) returned 1 [0215.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb28) returned 1 [0215.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a98) returned 1 [0215.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063408) returned 1 [0215.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062008) returned 1 [0215.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063318) returned 1 [0215.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404560 [0215.646] wcscpy (in: _Dest=0x8404560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" [0215.646] wcscat (in: _Dest=0x8404560, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.f0dbec" [0215.647] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0xff2f968, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9d00 [0216.106] FlushFileBuffers (hFile=0x1144) returned 1 [0216.111] CloseHandle (hObject=0x1144) returned 1 [0216.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d2268 [0216.171] wcscpy (in: _Dest=0x81d2268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" [0216.171] wcscat (in: _Dest=0x81d2268, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\F0DBEC-Readme.txt" [0216.171] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0216.171] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e78 [0217.833] WriteFile (in: hFile=0x1e78, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xff2f98c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xff2f98c*=0x70c, lpOverlapped=0x0) returned 1 [0220.796] CloseHandle (hObject=0x1e78) returned 1 [0222.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d2268) returned 1 [0222.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec428) returned 1 Thread: id = 6443 os_tid = 0x1acc [0195.281] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0195.281] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0198.555] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c18 [0198.556] GetFileSizeEx (in: hFile=0x1c18, lpFileSize=0xf09fb40 | out: lpFileSize=0xf09fb40*=223) returned 1 [0198.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0198.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0198.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0198.556] NtQuerySystemTime (in: CurrentTime=0xf09fac8 | out: CurrentTime=0xf09fac8*=132471540664380000) returned 0x0 [0198.556] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0xd629bbb [0198.556] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x75c22886 [0198.556] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x7dffa209 [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x5d4bffea [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x21ffbf47 [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x5edb71f0 [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x728f9277 [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x2e2dde21 [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x7f82f502 [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x47e52276 [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x6039b0d4 [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x7868af04 [0198.565] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0xff03f14 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x7e97b7d8 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x38b87c7d [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x3f576ea9 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x6a1168d5 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x4ffaf740 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x78ddbcc0 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x53385be [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x12c448a6 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x577388af [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x3c504bc1 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x5e98278a [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x65ec422 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x15354881 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x4da5af [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x78d4da7a [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x8fd36b6 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x124e7ae7 [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x715a680f [0198.566] RtlRandomEx (in: Seed=0xf09fac0 | out: Seed=0xf09fac0) returned 0x594d3802 [0198.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0198.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a36cc8 [0198.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x14a3a8d0 [0198.577] ReadFile (in: hFile=0x1c18, lpBuffer=0x14a36cc8, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0xf09fabc, lpOverlapped=0x0 | out: lpBuffer=0x14a36cc8*, lpNumberOfBytesRead=0xf09fabc*=0xdf, lpOverlapped=0x0) returned 1 [0198.588] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.588] WriteFile (in: hFile=0x1c18, lpBuffer=0x14a3a8d0*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0xf09fac0, lpOverlapped=0x0 | out: lpBuffer=0x14a3a8d0*, lpNumberOfBytesWritten=0xf09fac0*=0xdf, lpOverlapped=0x0) returned 1 [0202.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062df0 [0202.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062d00 [0202.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d00) returned 1 [0202.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a3a8d0) returned 1 [0202.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x14a36cc8) returned 1 [0202.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 [0202.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d0e8) returned 1 [0202.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e698a0 [0202.222] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.222] WriteFile (in: hFile=0x1c18, lpBuffer=0x81e0368*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf09fb34, lpOverlapped=0x0 | out: lpBuffer=0x81e0368*, lpNumberOfBytesWritten=0xf09fb34*=0x10c, lpOverlapped=0x0) returned 1 [0203.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e0368) returned 1 [0203.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698d0) returned 1 [0203.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062d00) returned 1 [0203.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e698a0) returned 1 [0203.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062df0) returned 1 [0203.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0203.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0203.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0203.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f6d70 [0203.992] wcscpy (in: _Dest=0x81f6d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" [0203.992] wcscat (in: _Dest=0x81f6d70, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.f0dbec" [0203.993] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0xf09fab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e3db80 [0204.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3db80) returned 1 [0204.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e844d8) returned 1 [0204.457] NtQueryInformationFile (in: FileHandle=0x1c18, IoStatusBlock=0xf09fa90, FileInformation=0xf09fa98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf09fa90, FileInformation=0xf09fa98) returned 0x0 [0204.457] NtSetInformationFile (FileHandle=0x1c18, IoStatusBlock=0xf09fa90, FileInformation=0xf09fa98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0207.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f6d70) returned 1 [0207.426] FlushFileBuffers (hFile=0x1c18) returned 1 [0207.434] CloseHandle (hObject=0x1c18) returned 1 [0207.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8348538 [0207.951] wcscpy (in: _Dest=0x8348538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" [0207.951] wcscat (in: _Dest=0x8348538, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0207.951] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0207.951] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a64 [0208.385] WriteFile (in: hFile=0x1a64, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf09fadc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf09fadc*=0x70c, lpOverlapped=0x0) returned 1 [0209.194] CloseHandle (hObject=0x1a64) returned 1 [0209.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348538) returned 1 [0209.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec550) returned 1 Thread: id = 6444 os_tid = 0x1ad0 [0195.282] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json")) returned 0x2020 [0195.283] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", dwFileAttributes=0x20) returned 1 [0202.948] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13c0 [0202.948] GetFileSizeEx (in: hFile=0x13c0, lpFileSize=0xe43fda0 | out: lpFileSize=0xe43fda0*=210) returned 1 [0202.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063340 [0202.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063368 [0202.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063390 [0202.949] NtQuerySystemTime (in: CurrentTime=0xe43fd28 | out: CurrentTime=0xe43fd28*=132471540707904000) returned 0x0 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x3e689c0d [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x3c5fec96 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x64f585a5 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x53e0cd72 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x79cb63a1 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x16b1820f [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x52d15847 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x70309f5c [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x48d5ac35 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x749c3cc9 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x23ef04af [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x3c4493ad [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x60ce147a [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0xb5a952d [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x6f698b1b [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x25f9b1d4 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x77c29029 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x7a81f1d2 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x66ecd5b6 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x9d3e732 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0xcaff1d4 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x4898981b [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x25392cdf [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x6cec9051 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x7f743a40 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x37850721 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x575dda02 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x16d0363c [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x4d03b991 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x671d22bf [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x5995ae9 [0202.949] RtlRandomEx (in: Seed=0xe43fd20 | out: Seed=0xe43fd20) returned 0x655c2f88 [0202.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063340) returned 1 [0202.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8388930 [0202.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x839f160 [0202.958] ReadFile (in: hFile=0x13c0, lpBuffer=0x8388930, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xe43fd1c, lpOverlapped=0x0 | out: lpBuffer=0x8388930*, lpNumberOfBytesRead=0xe43fd1c*=0xd2, lpOverlapped=0x0) returned 1 [0202.959] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.959] WriteFile (in: hFile=0x13c0, lpBuffer=0x839f160*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xe43fd20, lpOverlapped=0x0 | out: lpBuffer=0x839f160*, lpNumberOfBytesWritten=0xe43fd20*=0xd2, lpOverlapped=0x0) returned 1 [0207.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0207.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a4d8 [0207.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a4d8) returned 1 [0207.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x839f160) returned 1 [0207.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8388930) returned 1 [0207.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f324a8) returned 1 [0207.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d838) returned 1 [0207.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e695a0 [0207.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0207.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e695d0 [0207.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0207.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0207.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0207.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0207.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6d838) returned 1 [0207.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x8406650 [0207.845] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.845] WriteFile (in: hFile=0x13c0, lpBuffer=0x8406650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe43fd94, lpOverlapped=0x0 | out: lpBuffer=0x8406650*, lpNumberOfBytesWritten=0xe43fd94*=0x10c, lpOverlapped=0x0) returned 1 [0208.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 [0208.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695d0) returned 1 [0208.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0208.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695a0) returned 1 [0208.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49b28) returned 1 [0208.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063368) returned 1 [0208.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80633b8) returned 1 [0208.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80633e0) returned 1 [0208.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405538 [0208.097] wcscpy (in: _Dest=0x8405538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" [0208.097] wcscat (in: _Dest=0x8405538, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.f0dbec" [0208.097] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.f0dbec", NtPathName=0xe43fd18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3bf50 [0208.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bf50) returned 1 [0208.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1489da28) returned 1 [0208.263] NtQueryInformationFile (in: FileHandle=0x13c0, IoStatusBlock=0xe43fcf0, FileInformation=0xe43fcf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe43fcf0, FileInformation=0xe43fcf8) returned 0x0 [0208.263] NtSetInformationFile (FileHandle=0x13c0, IoStatusBlock=0xe43fcf0, FileInformation=0xe43fcf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405538) returned 1 [0208.557] FlushFileBuffers (hFile=0x13c0) returned 1 [0208.560] CloseHandle (hObject=0x13c0) returned 1 [0208.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d07d0 [0208.892] wcscpy (in: _Dest=0x81d07d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" [0208.892] wcscat (in: _Dest=0x81d07d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\F0DBEC-Readme.txt" [0208.892] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\f0dbec-readme.txt")) returned 0xffffffff [0208.892] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210c [0209.562] WriteFile (in: hFile=0x210c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe43fd3c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe43fd3c*=0x70c, lpOverlapped=0x0) returned 1 [0209.614] CloseHandle (hObject=0x210c) returned 1 [0209.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d07d0) returned 1 [0209.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec9f0) returned 1 Thread: id = 6445 os_tid = 0x1ad8 [0195.283] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json")) returned 0x2020 [0195.284] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0210.655] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a04 [0210.656] GetFileSizeEx (in: hFile=0x1a04, lpFileSize=0xfa3fa30 | out: lpFileSize=0xfa3fa30*=332) returned 1 [0210.656] SetFilePointerEx (in: hFile=0x1a04, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.657] ReadFile (in: hFile=0x1a04, lpBuffer=0xfa3fa3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfa3fa18, lpOverlapped=0x0 | out: lpBuffer=0xfa3fa3c*, lpNumberOfBytesRead=0xfa3fa18*=0x4, lpOverlapped=0x0) returned 1 [0210.659] SetFilePointerEx (in: hFile=0x1a04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064858 [0210.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062170 [0210.659] NtQuerySystemTime (in: CurrentTime=0xfa3f9b8 | out: CurrentTime=0xfa3f9b8*=132471540783720000) returned 0x0 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x2eb406a5 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x4c964a14 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x12686667 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0xc393e1c [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x527a80c0 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x69d89634 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x15603cd7 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x614fb922 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x417a6fb [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x2864fb52 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x52197c09 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x38e46798 [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x59606dbd [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x34dfce5c [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x6613fd2f [0210.659] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x630af7cc [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x7f522733 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x247aa432 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x6330c1ad [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x40d69974 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x42da10ba [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x35ba6c02 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x2e22870b [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x6ae50411 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x7f3bb8a2 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x733fac23 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x403812ca [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0xca300 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x300ea5a1 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x6e405131 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x144f8885 [0210.660] RtlRandomEx (in: Seed=0xfa3f9b0 | out: Seed=0xfa3f9b0) returned 0x3ddd3f14 [0210.670] ReadFile (in: hFile=0x1a04, lpBuffer=0x82318b0, nNumberOfBytesToRead=0x14c, lpNumberOfBytesRead=0xfa3f9ac, lpOverlapped=0x0 | out: lpBuffer=0x82318b0*, lpNumberOfBytesRead=0xfa3f9ac*=0x14c, lpOverlapped=0x0) returned 1 [0210.670] SetFilePointerEx (in: hFile=0x1a04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.670] WriteFile (in: hFile=0x1a04, lpBuffer=0x82354b8*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xfa3f9b0, lpOverlapped=0x0 | out: lpBuffer=0x82354b8*, lpNumberOfBytesWritten=0xfa3f9b0*=0x14c, lpOverlapped=0x0) returned 1 [0213.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a10 [0213.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b28 [0214.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b28) returned 1 [0214.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82354b8) returned 1 [0214.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82318b0) returned 1 [0214.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84029a8) returned 1 [0214.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4cc8) returned 1 [0214.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0214.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a20) returned 1 [0214.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fb58 [0214.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a20 [0214.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a98 [0214.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a98) returned 1 [0214.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84029a8) returned 1 [0214.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4cc8) returned 1 [0214.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x8405a48 [0214.138] SetFilePointerEx (in: hFile=0x1a04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.139] WriteFile (in: hFile=0x1a04, lpBuffer=0x8405a48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfa3fa24, lpOverlapped=0x0 | out: lpBuffer=0x8405a48*, lpNumberOfBytesWritten=0xfa3fa24*=0x10c, lpOverlapped=0x0) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405a48) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb58) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a20) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a10) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064858) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620d0) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064880) returned 1 [0215.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405670 [0215.641] wcscpy (in: _Dest=0x8405670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" [0215.641] wcscat (in: _Dest=0x8405670, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.f0dbec" [0215.641] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0xfa3f9a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9f90 [0216.113] FlushFileBuffers (hFile=0x1a04) returned 1 [0216.115] CloseHandle (hObject=0x1a04) returned 1 [0216.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d0580 [0216.172] wcscpy (in: _Dest=0x81d0580, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" [0216.172] wcscat (in: _Dest=0x81d0580, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\F0DBEC-Readme.txt" [0216.172] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0216.172] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfe8 [0217.834] WriteFile (in: hFile=0xfe8, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xfa3f9cc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xfa3f9cc*=0x70c, lpOverlapped=0x0) returned 1 [0220.798] CloseHandle (hObject=0xfe8) returned 1 [0222.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0580) returned 1 [0222.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecb18) returned 1 Thread: id = 6446 os_tid = 0x1ae0 [0195.285] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json")) returned 0x2020 [0195.285] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0210.675] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11cc [0210.676] GetFileSizeEx (in: hFile=0x11cc, lpFileSize=0xffbf9a8 | out: lpFileSize=0xffbf9a8*=256) returned 1 [0210.676] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.676] ReadFile (in: hFile=0x11cc, lpBuffer=0xffbf9b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xffbf990, lpOverlapped=0x0 | out: lpBuffer=0xffbf9b4*, lpNumberOfBytesRead=0xffbf990*=0x4, lpOverlapped=0x0) returned 1 [0210.678] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062170 [0210.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a60 [0210.678] NtQuerySystemTime (in: CurrentTime=0xffbf930 | out: CurrentTime=0xffbf930*=132471540784032000) returned 0x0 [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x3362f238 [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x33f1191d [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x55b10f81 [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x2b37d3a0 [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x1fce182a [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x37578823 [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x6ca7af2b [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x32a7dae9 [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x293a2ce [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x5b768808 [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x4bcfffba [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x325273b6 [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x3f7a4a42 [0210.678] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x44066de0 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x16733c80 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x168cde89 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x17745100 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0xa49a999 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x6727d1e1 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x756a8ec2 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x52983267 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x612da3d1 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x22ed89b8 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x344e870e [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x796e1386 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x5996a988 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x2012e935 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x221c4dcf [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x758587b [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x7f0c7ff [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x48b013b9 [0210.679] RtlRandomEx (in: Seed=0xffbf928 | out: Seed=0xffbf928) returned 0x132a40f [0210.687] ReadFile (in: hFile=0x11cc, lpBuffer=0x82390c0, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xffbf924, lpOverlapped=0x0 | out: lpBuffer=0x82390c0*, lpNumberOfBytesRead=0xffbf924*=0x100, lpOverlapped=0x0) returned 1 [0210.687] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.687] WriteFile (in: hFile=0x11cc, lpBuffer=0x823ccc8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xffbf928, lpOverlapped=0x0 | out: lpBuffer=0x823ccc8*, lpNumberOfBytesWritten=0xffbf928*=0x100, lpOverlapped=0x0) returned 1 [0213.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42498 [0213.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42588 [0213.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0213.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x823ccc8) returned 1 [0213.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82390c0) returned 1 [0213.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402930) returned 1 [0213.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4188) returned 1 [0213.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e693c0 [0213.894] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.894] WriteFile (in: hFile=0x11cc, lpBuffer=0x8405fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xffbf99c, lpOverlapped=0x0 | out: lpBuffer=0x8405fc0*, lpNumberOfBytesWritten=0xffbf99c*=0x10c, lpOverlapped=0x0) returned 1 [0214.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405fc0) returned 1 [0214.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693f0) returned 1 [0214.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42588) returned 1 [0214.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e693c0) returned 1 [0214.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42498) returned 1 [0214.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062170) returned 1 [0214.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a88) returned 1 [0214.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064970) returned 1 [0214.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404080 [0214.042] wcscpy (in: _Dest=0x8404080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" [0214.042] wcscat (in: _Dest=0x8404080, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.f0dbec" [0214.042] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0xffbf920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3cc20 [0215.764] FlushFileBuffers (hFile=0x11cc) returned 1 [0215.777] CloseHandle (hObject=0x11cc) returned 1 [0216.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e8fb8 [0216.026] wcscpy (in: _Dest=0x81e8fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" [0216.026] wcscat (in: _Dest=0x81e8fb8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\F0DBEC-Readme.txt" [0216.026] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0216.026] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.477] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xffbf944, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xffbf944*=0x70c, lpOverlapped=0x0) returned 1 [0216.479] CloseHandle (hObject=0x10c4) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8fb8) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecc40) returned 1 Thread: id = 6447 os_tid = 0x1ae8 [0195.286] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json")) returned 0x2020 [0195.286] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0210.688] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x210c [0210.689] GetFileSizeEx (in: hFile=0x210c, lpFileSize=0xe47fa50 | out: lpFileSize=0xe47fa50*=210) returned 1 [0210.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a60 [0210.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064998 [0210.689] NtQuerySystemTime (in: CurrentTime=0xe47f9d8 | out: CurrentTime=0xe47f9d8*=132471540784032000) returned 0x0 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x5fadf651 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x48437d44 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x5f9521cd [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x702e841 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x56c60024 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x55cc495d [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0xf9a3b70 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x5469ac37 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x89fcf29 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0xfdad97c [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x1adcb2ad [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x64c36ee0 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x70e93592 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x10ef4a33 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x4dd0ba4 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x47839f4c [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x517aaff1 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x45c4ae04 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x15474f40 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x3497acf3 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0xec5700d [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x21e010af [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x7633dcf0 [0210.689] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x2b6004a5 [0210.690] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x7266f821 [0210.690] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0xfc6d41 [0210.690] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x7111efd4 [0210.690] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0xdcd044e [0210.690] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x3e81f60f [0210.690] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x4d077f43 [0210.690] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x5b0336ae [0210.690] RtlRandomEx (in: Seed=0xe47f9d0 | out: Seed=0xe47f9d0) returned 0x4d077f43 [0210.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82408d0 [0210.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82444d8 [0210.699] ReadFile (in: hFile=0x210c, lpBuffer=0x82408d0, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xe47f9cc, lpOverlapped=0x0 | out: lpBuffer=0x82408d0*, lpNumberOfBytesRead=0xe47f9cc*=0xd2, lpOverlapped=0x0) returned 1 [0210.706] SetFilePointerEx (in: hFile=0x210c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.706] WriteFile (in: hFile=0x210c, lpBuffer=0x82444d8*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xe47f9d0, lpOverlapped=0x0 | out: lpBuffer=0x82444d8*, lpNumberOfBytesWritten=0xe47f9d0*=0xd2, lpOverlapped=0x0) returned 1 [0213.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42448 [0213.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0213.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0213.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82444d8) returned 1 [0213.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82408d0) returned 1 [0213.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84033f8) returned 1 [0213.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3a38) returned 1 [0213.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69240 [0213.900] SetFilePointerEx (in: hFile=0x210c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.900] WriteFile (in: hFile=0x210c, lpBuffer=0x8406ab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe47fa44, lpOverlapped=0x0 | out: lpBuffer=0x8406ab0*, lpNumberOfBytesWritten=0xe47fa44*=0x10c, lpOverlapped=0x0) returned 1 [0214.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ab0) returned 1 [0214.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69720) returned 1 [0214.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0214.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69240) returned 1 [0214.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42448) returned 1 [0214.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a60) returned 1 [0214.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064920) returned 1 [0214.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064948) returned 1 [0214.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84042f0 [0214.047] wcscpy (in: _Dest=0x84042f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" [0214.047] wcscat (in: _Dest=0x84042f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.f0dbec" [0214.047] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.f0dbec", NtPathName=0xe47f9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3cd68 [0215.772] FlushFileBuffers (hFile=0x210c) returned 1 [0215.787] CloseHandle (hObject=0x210c) returned 1 [0216.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e90e0 [0216.029] wcscpy (in: _Dest=0x81e90e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" [0216.029] wcscat (in: _Dest=0x81e90e0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\F0DBEC-Readme.txt" [0216.029] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\f0dbec-readme.txt")) returned 0xffffffff [0216.029] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.490] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe47f9ec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe47f9ec*=0x70c, lpOverlapped=0x0) returned 1 [0216.492] CloseHandle (hObject=0x10c4) returned 1 [0216.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e90e0) returned 1 [0216.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecd68) returned 1 Thread: id = 6448 os_tid = 0x1aec [0195.287] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json")) returned 0x2020 [0195.287] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0210.706] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19cc [0210.707] GetFileSizeEx (in: hFile=0x19cc, lpFileSize=0xfdffd90 | out: lpFileSize=0xfdffd90*=222) returned 1 [0210.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064998 [0210.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80648d0 [0210.707] NtQuerySystemTime (in: CurrentTime=0xfdffd18 | out: CurrentTime=0xfdffd18*=132471540784188000) returned 0x0 [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x46d21300 [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x14c6c500 [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0xa0625c1 [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x337b9225 [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x2db15052 [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x14f19dc0 [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x1c7b6f96 [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x14f19dc0 [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x6f60743a [0210.707] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x3d23cd33 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x2b676d41 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x72ba512b [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x28e653fa [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x14be5c94 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x53aa9ba [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x1f46b1ce [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x2d347bfe [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x15b81e37 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x7d762630 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x17636081 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x1cbab31 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x34a25134 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x225953a4 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x78becc61 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x1cbab31 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x55bdfa6d [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x1ec9fbe9 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x78becc61 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x5f9521cd [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x159d00c0 [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x19c6277b [0210.708] RtlRandomEx (in: Seed=0xfdffd10 | out: Seed=0xfdffd10) returned 0x1f46b1ce [0210.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148a6060 [0210.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148a9c68 [0210.716] ReadFile (in: hFile=0x19cc, lpBuffer=0x148a6060, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xfdffd0c, lpOverlapped=0x0 | out: lpBuffer=0x148a6060*, lpNumberOfBytesRead=0xfdffd0c*=0xde, lpOverlapped=0x0) returned 1 [0210.719] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.719] WriteFile (in: hFile=0x19cc, lpBuffer=0x148a9c68*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xfdffd10, lpOverlapped=0x0 | out: lpBuffer=0x148a9c68*, lpNumberOfBytesWritten=0xfdffd10*=0xde, lpOverlapped=0x0) returned 1 [0213.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a60 [0213.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d80 [0213.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d80) returned 1 [0213.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a9c68) returned 1 [0213.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148a6060) returned 1 [0213.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403470) returned 1 [0213.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e42a8) returned 1 [0213.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69750 [0213.899] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.899] WriteFile (in: hFile=0x19cc, lpBuffer=0x8405c78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfdffd84, lpOverlapped=0x0 | out: lpBuffer=0x8405c78*, lpNumberOfBytesWritten=0xfdffd84*=0x10c, lpOverlapped=0x0) returned 1 [0214.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405c78) returned 1 [0214.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69270) returned 1 [0214.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d80) returned 1 [0214.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69750) returned 1 [0214.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a60) returned 1 [0214.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064998) returned 1 [0214.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648f8) returned 1 [0214.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063980) returned 1 [0214.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403e10 [0214.045] wcscpy (in: _Dest=0x8403e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" [0214.045] wcscat (in: _Dest=0x8403e10, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.f0dbec" [0214.045] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0xfdffd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3cad8 [0215.769] FlushFileBuffers (hFile=0x19cc) returned 1 [0215.784] CloseHandle (hObject=0x19cc) returned 1 [0216.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e8d68 [0216.027] wcscpy (in: _Dest=0x81e8d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" [0216.027] wcscat (in: _Dest=0x81e8d68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\F0DBEC-Readme.txt" [0216.027] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0216.027] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.485] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xfdffd2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xfdffd2c*=0x70c, lpOverlapped=0x0) returned 1 [0216.487] CloseHandle (hObject=0x10c4) returned 1 [0216.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8d68) returned 1 [0216.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ece90) returned 1 Thread: id = 6449 os_tid = 0x1af0 [0195.288] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json")) returned 0x2020 [0195.661] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0210.603] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2cc4 [0210.604] GetFileSizeEx (in: hFile=0x2cc4, lpFileSize=0x1004fd58 | out: lpFileSize=0x1004fd58*=234) returned 1 [0210.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634a8 [0210.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062030 [0210.604] NtQuerySystemTime (in: CurrentTime=0x1004fce0 | out: CurrentTime=0x1004fce0*=132471540783252000) returned 0x0 [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x732e74ed [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x25a2da4d [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x54cfa047 [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x18637416 [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x79a6b27e [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x15f2b240 [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x34a8cc83 [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x3f668c1 [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x1d6eca51 [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x3b9a1390 [0210.604] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x161d8b00 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x33cebf8a [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x3e2ee485 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x18231428 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0xb4c50cf [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x15c7d980 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0xd4b846f [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x4e27da6d [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x7f12f223 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x512ef2ee [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x77f2b4c0 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x61283bea [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x6ed9ecb2 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x327c05c5 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x519e8d47 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x4bcf965c [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x5bb4b184 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x7c0ead86 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x66531e84 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x10fb4514 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x6a7076b5 [0210.605] RtlRandomEx (in: Seed=0x1004fcd8 | out: Seed=0x1004fcd8) returned 0x5b142b57 [0210.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x821b080 [0210.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x821ec88 [0210.616] ReadFile (in: hFile=0x2cc4, lpBuffer=0x821b080, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x1004fcd4, lpOverlapped=0x0 | out: lpBuffer=0x821b080*, lpNumberOfBytesRead=0x1004fcd4*=0xea, lpOverlapped=0x0) returned 1 [0210.619] SetFilePointerEx (in: hFile=0x2cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.619] WriteFile (in: hFile=0x2cc4, lpBuffer=0x821ec88*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x1004fcd8, lpOverlapped=0x0 | out: lpBuffer=0x821ec88*, lpNumberOfBytesWritten=0x1004fcd8*=0xea, lpOverlapped=0x0) returned 1 [0215.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0215.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3a0 [0215.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3a0) returned 1 [0215.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x821ec88) returned 1 [0215.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x821b080) returned 1 [0215.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402b88) returned 1 [0215.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4848) returned 1 [0215.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68d00 [0215.305] SetFilePointerEx (in: hFile=0x2cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.306] WriteFile (in: hFile=0x2cc4, lpBuffer=0x8406880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1004fd4c, lpOverlapped=0x0 | out: lpBuffer=0x8406880*, lpNumberOfBytesWritten=0x1004fd4c*=0x10c, lpOverlapped=0x0) returned 1 [0217.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 [0217.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e692a0) returned 1 [0217.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3a0) returned 1 [0217.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d00) returned 1 [0217.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0217.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80634a8) returned 1 [0217.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80633e0) returned 1 [0217.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80633b8) returned 1 [0217.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8403cd8 [0217.874] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" [0217.874] wcscat (in: _Dest=0x8403cd8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.f0dbec" [0217.874] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0x1004fcd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0217.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3efa740 [0220.490] FlushFileBuffers (hFile=0x2cc4) returned 1 [0220.496] CloseHandle (hObject=0x2cc4) returned 1 [0220.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ef85f0 [0220.643] wcscpy (in: _Dest=0x3ef85f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" [0220.643] wcscat (in: _Dest=0x3ef85f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\F0DBEC-Readme.txt" [0220.643] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0220.643] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ea4 [0220.791] WriteFile (in: hFile=0x1ea4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1004fcf4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1004fcf4*=0x70c, lpOverlapped=0x0) returned 1 [0221.125] CloseHandle (hObject=0x1ea4) returned 1 [0221.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef85f0) returned 1 [0221.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecfb8) returned 1 Thread: id = 6450 os_tid = 0x1b04 [0195.289] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json")) returned 0x2020 [0195.662] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0210.619] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a24 [0210.620] GetFileSizeEx (in: hFile=0x1a24, lpFileSize=0x1036f7c0 | out: lpFileSize=0x1036f7c0*=253) returned 1 [0210.620] SetFilePointerEx (in: hFile=0x1a24, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.620] ReadFile (in: hFile=0x1a24, lpBuffer=0x1036f7cc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1036f7a8, lpOverlapped=0x0 | out: lpBuffer=0x1036f7cc*, lpNumberOfBytesRead=0x1036f7a8*=0x4, lpOverlapped=0x0) returned 1 [0210.623] SetFilePointerEx (in: hFile=0x1a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062030 [0210.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063368 [0210.623] NtQuerySystemTime (in: CurrentTime=0x1036f748 | out: CurrentTime=0x1036f748*=132471540783408000) returned 0x0 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x561fa5b1 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x32e0158e [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x13b8d166 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x11aa6f27 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x761e1ed7 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x4e552459 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x1a028731 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x3656421d [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x66bbc709 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x10aaf93c [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x2cb24f4f [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x40a5e814 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x452bb139 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x21d1110e [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x40ed2f80 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x11320ec [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x1f469e33 [0210.623] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x8329ed6 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x7667df22 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x1e77edf6 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x476491b9 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x4880207b [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x5aedce9d [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x2bd27e4e [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x20f0b187 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x38aca231 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x46cc0113 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x1894f399 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x76f9eca7 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x463af3e7 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x1d332b17 [0210.624] RtlRandomEx (in: Seed=0x1036f740 | out: Seed=0x1036f740) returned 0x2def59b2 [0210.636] ReadFile (in: hFile=0x1a24, lpBuffer=0x8222890, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0x1036f73c, lpOverlapped=0x0 | out: lpBuffer=0x8222890*, lpNumberOfBytesRead=0x1036f73c*=0xfd, lpOverlapped=0x0) returned 1 [0210.637] SetFilePointerEx (in: hFile=0x1a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.637] WriteFile (in: hFile=0x1a24, lpBuffer=0x8226498*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x1036f740, lpOverlapped=0x0 | out: lpBuffer=0x8226498*, lpNumberOfBytesWritten=0x1036f740*=0xfd, lpOverlapped=0x0) returned 1 [0214.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063228 [0214.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063390 [0214.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063390) returned 1 [0214.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8226498) returned 1 [0214.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8222890) returned 1 [0214.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a98) returned 1 [0214.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4e30) returned 1 [0214.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69360 [0214.155] SetFilePointerEx (in: hFile=0x1a24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.155] WriteFile (in: hFile=0x1a24, lpBuffer=0x8405b60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1036f7b4, lpOverlapped=0x0 | out: lpBuffer=0x8405b60*, lpNumberOfBytesWritten=0x1036f7b4*=0x10c, lpOverlapped=0x0) returned 1 [0220.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405b60) returned 1 [0220.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69390) returned 1 [0220.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063390) returned 1 [0220.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69360) returned 1 [0220.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063228) returned 1 [0220.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062030) returned 1 [0220.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063520) returned 1 [0220.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063548) returned 1 [0220.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef85f0 [0220.424] wcscpy (in: _Dest=0x3ef85f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" [0220.424] wcscat (in: _Dest=0x3ef85f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.f0dbec" [0220.424] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0x1036f738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3efa740 [0220.639] FlushFileBuffers (hFile=0x1a24) returned 1 [0220.644] CloseHandle (hObject=0x1a24) returned 1 [0220.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x8402178 [0220.782] wcscpy (in: _Dest=0x8402178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" [0220.782] wcscat (in: _Dest=0x8402178, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\F0DBEC-Readme.txt" [0220.782] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0220.782] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.063] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1036f75c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1036f75c*=0x70c, lpOverlapped=0x0) returned 1 [0221.065] CloseHandle (hObject=0x1b48) returned 1 [0221.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402178) returned 1 [0221.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed0e0) returned 1 Thread: id = 6451 os_tid = 0x1b08 [0195.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\winnipeg")) returned 0x20 [0196.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg", dwFileAttributes=0x20) returned 0 [0196.560] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\winnipeg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.560] GetLastError () returned 0x5 [0196.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg", dwFileAttributes=0x20) returned 0 [0196.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84036c0) returned 1 Thread: id = 6452 os_tid = 0x1b0c [0195.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yakutat")) returned 0x20 [0195.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat", dwFileAttributes=0x20) returned 0 [0195.563] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yakutat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.563] GetLastError () returned 0x5 [0195.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat", dwFileAttributes=0x20) returned 0 [0195.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84029a0) returned 1 Thread: id = 6453 os_tid = 0x730 [0195.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yellowknife")) returned 0x20 [0195.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife", dwFileAttributes=0x20) returned 0 [0195.887] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yellowknife"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.887] GetLastError () returned 0x5 [0195.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife", dwFileAttributes=0x20) returned 0 [0195.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 Thread: id = 6454 os_tid = 0x884 [0195.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif")) returned 0x20 [0195.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0195.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.293] GetLastError () returned 0x5 [0195.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0195.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27540) returned 1 Thread: id = 6455 os_tid = 0x14dc [0195.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif")) returned 0x20 [0195.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0195.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.295] GetLastError () returned 0x5 [0195.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0195.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae8c0) returned 1 Thread: id = 6456 os_tid = 0x11d0 [0195.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20 [0195.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.304] GetLastError () returned 0x5 [0195.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae9b8) returned 1 Thread: id = 6457 os_tid = 0x14e0 [0195.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20 [0195.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.307] GetLastError () returned 0x5 [0195.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daeab0) returned 1 Thread: id = 6458 os_tid = 0x14e8 [0195.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif")) returned 0x20 [0195.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0195.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.310] GetLastError () returned 0x5 [0195.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0195.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 6459 os_tid = 0x1650 [0195.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif")) returned 0x20 [0195.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0195.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.312] GetLastError () returned 0x5 [0195.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0195.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021c80) returned 1 Thread: id = 6460 os_tid = 0x1654 [0195.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif")) returned 0x20 [0195.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0195.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.315] GetLastError () returned 0x5 [0195.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0195.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80217d0) returned 1 Thread: id = 6461 os_tid = 0x1658 [0195.316] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json")) returned 0x2020 [0204.353] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0214.301] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e30 [0214.302] GetFileSizeEx (in: hFile=0x1e30, lpFileSize=0x1051fd40 | out: lpFileSize=0x1051fd40*=179) returned 1 [0214.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062fa8 [0214.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80631d8 [0214.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80634f8 [0214.302] NtQuerySystemTime (in: CurrentTime=0x1051fcc8 | out: CurrentTime=0x1051fcc8*=132471540820224000) returned 0x0 [0214.302] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x915770b [0214.302] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x30464857 [0214.302] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x132ac5cf [0214.302] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0xd17aa41 [0214.302] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x12acb614 [0214.302] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x5bdc8613 [0214.302] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x369ee998 [0214.302] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x7717ed3a [0214.302] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x120cb23b [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x50dc00c2 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x56cadff9 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x6197ff21 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x5e440691 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x4211d3fa [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x6eb5885c [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x20cde8f9 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x5cf072ce [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x191988d8 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x42414811 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x66eb5189 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x108c05f4 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x5637aa74 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x5768ee88 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x69b407c [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x5f9eb593 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x40bcd1a4 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x36e296f3 [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x7f2aadfe [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x7d4c09ba [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x635473cf [0214.303] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x185a84bc [0214.304] RtlRandomEx (in: Seed=0x1051fcc0 | out: Seed=0x1051fcc0) returned 0x31859e3d [0214.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062fa8) returned 1 [0214.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8213870 [0214.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8217478 [0214.333] ReadFile (in: hFile=0x1e30, lpBuffer=0x8213870, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1051fcbc, lpOverlapped=0x0 | out: lpBuffer=0x8213870*, lpNumberOfBytesRead=0x1051fcbc*=0xb3, lpOverlapped=0x0) returned 1 [0214.336] SetFilePointerEx (in: hFile=0x1e30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.336] WriteFile (in: hFile=0x1e30, lpBuffer=0x8217478*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1051fcc0, lpOverlapped=0x0 | out: lpBuffer=0x8217478*, lpNumberOfBytesWritten=0x1051fcc0*=0xb3, lpOverlapped=0x0) returned 1 [0215.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063200 [0215.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80639f8 [0215.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639f8) returned 1 [0215.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8217478) returned 1 [0215.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8213870) returned 1 [0215.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403218) returned 1 [0215.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ea358) returned 1 [0215.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e701b8 [0215.706] SetFilePointerEx (in: hFile=0x1e30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.706] WriteFile (in: hFile=0x1e30, lpBuffer=0x8407140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1051fd34, lpOverlapped=0x0 | out: lpBuffer=0x8407140*, lpNumberOfBytesWritten=0x1051fd34*=0x10c, lpOverlapped=0x0) returned 1 [0215.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407140) returned 1 [0215.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0215.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639f8) returned 1 [0215.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0215.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063200) returned 1 [0215.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80631d8) returned 1 [0215.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632c8) returned 1 [0215.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a70) returned 1 [0215.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8187f28 [0215.982] wcscpy (in: _Dest=0x8187f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" [0215.982] wcscat (in: _Dest=0x8187f28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.f0dbec" [0215.982] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.f0dbec", NtPathName=0x1051fcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef9030 [0216.237] FlushFileBuffers (hFile=0x1e30) returned 1 [0216.247] CloseHandle (hObject=0x1e30) returned 1 [0216.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d1a50 [0216.304] wcscpy (in: _Dest=0x81d1a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" [0216.304] wcscat (in: _Dest=0x81d1a50, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\F0DBEC-Readme.txt" [0216.304] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\f0dbec-readme.txt")) returned 0xffffffff [0216.304] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a10 [0217.847] WriteFile (in: hFile=0x1a10, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1051fcdc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1051fcdc*=0x70c, lpOverlapped=0x0) returned 1 [0221.158] CloseHandle (hObject=0x1a10) returned 1 [0221.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1a50) returned 1 [0221.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9208) returned 1 Thread: id = 6462 os_tid = 0x14f4 [0195.317] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json")) returned 0x2020 [0195.317] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0210.719] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1aa0 [0210.720] GetFileSizeEx (in: hFile=0x1aa0, lpFileSize=0x1041fab0 | out: lpFileSize=0x1041fab0*=249) returned 1 [0210.720] SetFilePointerEx (in: hFile=0x1aa0, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.720] ReadFile (in: hFile=0x1aa0, lpBuffer=0x1041fabc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1041fa98, lpOverlapped=0x0 | out: lpBuffer=0x1041fabc*, lpNumberOfBytesRead=0x1041fa98*=0x4, lpOverlapped=0x0) returned 1 [0210.721] SetFilePointerEx (in: hFile=0x1aa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80648d0 [0210.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80639a8 [0210.722] NtQuerySystemTime (in: CurrentTime=0x1041fa38 | out: CurrentTime=0x1041fa38*=132471540784344000) returned 0x0 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x35d51dce [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x53aa9ba [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x63f4b5fe [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x1975a4a7 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x586403 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x4cec41bc [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x76131e7d [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x6a4233f5 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x5dbff25b [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x3c70a4ea [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x5289a439 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x7d0641ce [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x640f11af [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x47839f4c [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x5fadf651 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x2fc7cc59 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x439b77b [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x23f9a1ca [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x702e841 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x498859f9 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0xd096341 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x517aaff1 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x149bec40 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x55cc495d [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x1e3ed371 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x5b0336ae [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x154b347f [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x639e9cb7 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x55cea853 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x28752e3b [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x3a9d9261 [0210.722] RtlRandomEx (in: Seed=0x1041fa30 | out: Seed=0x1041fa30) returned 0x6cd540a5 [0210.730] ReadFile (in: hFile=0x1aa0, lpBuffer=0x148ad870, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x1041fa2c, lpOverlapped=0x0 | out: lpBuffer=0x148ad870*, lpNumberOfBytesRead=0x1041fa2c*=0xf9, lpOverlapped=0x0) returned 1 [0210.731] SetFilePointerEx (in: hFile=0x1aa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.731] WriteFile (in: hFile=0x1aa0, lpBuffer=0x148b1478*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x1041fa30, lpOverlapped=0x0 | out: lpBuffer=0x148b1478*, lpNumberOfBytesWritten=0x1041fa30*=0xf9, lpOverlapped=0x0) returned 1 [0213.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42420 [0213.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d426f0 [0213.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426f0) returned 1 [0213.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b1478) returned 1 [0213.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148ad870) returned 1 [0213.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84034e8) returned 1 [0213.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4920) returned 1 [0213.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e696c0 [0213.902] SetFilePointerEx (in: hFile=0x1aa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.902] WriteFile (in: hFile=0x1aa0, lpBuffer=0x8406538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1041faa4, lpOverlapped=0x0 | out: lpBuffer=0x8406538*, lpNumberOfBytesWritten=0x1041faa4*=0x10c, lpOverlapped=0x0) returned 1 [0214.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406538) returned 1 [0214.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696f0) returned 1 [0214.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d426f0) returned 1 [0214.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e696c0) returned 1 [0214.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42420) returned 1 [0214.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648d0) returned 1 [0214.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063930) returned 1 [0214.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063958) returned 1 [0214.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8404428 [0214.050] wcscpy (in: _Dest=0x8404428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" [0214.050] wcscat (in: _Dest=0x8404428, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.f0dbec" [0214.050] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0x1041fa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3c328 [0215.779] FlushFileBuffers (hFile=0x1aa0) returned 1 [0215.791] CloseHandle (hObject=0x1aa0) returned 1 [0216.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81e8e90 [0216.029] wcscpy (in: _Dest=0x81e8e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" [0216.030] wcscat (in: _Dest=0x81e8e90, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\F0DBEC-Readme.txt" [0216.030] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0216.030] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.494] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x1041fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x1041fa4c*=0x70c, lpOverlapped=0x0) returned 1 [0216.496] CloseHandle (hObject=0x10c4) returned 1 [0216.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8e90) returned 1 [0216.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb9c0) returned 1 Thread: id = 6463 os_tid = 0x1b10 [0195.318] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json")) returned 0x2020 [0195.663] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0210.637] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11dc [0210.638] GetFileSizeEx (in: hFile=0x11dc, lpFileSize=0x102ef830 | out: lpFileSize=0x102ef830*=269) returned 1 [0210.638] SetFilePointerEx (in: hFile=0x11dc, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.639] ReadFile (in: hFile=0x11dc, lpBuffer=0x102ef83c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x102ef818, lpOverlapped=0x0 | out: lpBuffer=0x102ef83c*, lpNumberOfBytesRead=0x102ef818*=0x4, lpOverlapped=0x0) returned 1 [0210.641] SetFilePointerEx (in: hFile=0x11dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063368 [0210.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064858 [0210.641] NtQuerySystemTime (in: CurrentTime=0x102ef7b8 | out: CurrentTime=0x102ef7b8*=132471540783564000) returned 0x0 [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x46d74673 [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x5a26d23e [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x1a3160bb [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x17497840 [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x4d08e029 [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x51f9bdef [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x2843b578 [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x59e1a326 [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x53fa7989 [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x6ee64aad [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x27c2bf98 [0210.641] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x590c3bb2 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x1c711360 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x2f51d8c9 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x7ff0b70b [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x34ad5b30 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x74c28d61 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x724772d6 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x43824ccb [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x6880f550 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x7f1c89c3 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x6b331e41 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x378c45fa [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x4c03d9e8 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x50dfc75 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x7df92fc0 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x777976d6 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x63b2ee5c [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x5a8ca654 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x2b3d3d4e [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0x20dc8480 [0210.642] RtlRandomEx (in: Seed=0x102ef7b0 | out: Seed=0x102ef7b0) returned 0xcbd22cc [0210.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x822a0a0 [0210.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x822dca8 [0210.655] ReadFile (in: hFile=0x11dc, lpBuffer=0x822a0a0, nNumberOfBytesToRead=0x10d, lpNumberOfBytesRead=0x102ef7ac, lpOverlapped=0x0 | out: lpBuffer=0x822a0a0*, lpNumberOfBytesRead=0x102ef7ac*=0x10d, lpOverlapped=0x0) returned 1 [0210.655] SetFilePointerEx (in: hFile=0x11dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.655] WriteFile (in: hFile=0x11dc, lpBuffer=0x822dca8*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x102ef7b0, lpOverlapped=0x0 | out: lpBuffer=0x822dca8*, lpNumberOfBytesWritten=0x102ef7b0*=0x10d, lpOverlapped=0x0) returned 1 [0215.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9dd8 [0215.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0215.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0215.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x822dca8) returned 1 [0215.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x822a0a0) returned 1 [0215.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a20) returned 1 [0215.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e53d0) returned 1 [0215.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e694e0 [0215.309] SetFilePointerEx (in: hFile=0x11dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.309] WriteFile (in: hFile=0x11dc, lpBuffer=0x8405930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x102ef824, lpOverlapped=0x0 | out: lpBuffer=0x8405930*, lpNumberOfBytesWritten=0x102ef824*=0x10c, lpOverlapped=0x0) returned 1 [0215.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405930) returned 1 [0215.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69510) returned 1 [0215.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0215.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e694e0) returned 1 [0215.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9dd8) returned 1 [0215.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063368) returned 1 [0215.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064790) returned 1 [0215.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062198) returned 1 [0215.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x84057a8 [0215.688] wcscpy (in: _Dest=0x84057a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" [0215.688] wcscat (in: _Dest=0x84057a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.f0dbec" [0215.688] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0x102ef7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0215.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ef8c58 [0216.137] FlushFileBuffers (hFile=0x11dc) returned 1 [0216.144] CloseHandle (hObject=0x11dc) returned 1 [0216.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d1928 [0216.219] wcscpy (in: _Dest=0x81d1928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" [0216.219] wcscat (in: _Dest=0x81d1928, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\F0DBEC-Readme.txt" [0216.219] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0216.219] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1048 [0217.836] WriteFile (in: hFile=0x1048, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x102ef7cc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x102ef7cc*=0x70c, lpOverlapped=0x0) returned 1 [0220.802] CloseHandle (hObject=0x1048) returned 1 [0222.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d1928) returned 1 [0222.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebae8) returned 1 Thread: id = 6464 os_tid = 0x1b14 [0195.319] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json")) returned 0x2020 [0195.320] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0210.731] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1540 [0210.732] GetFileSizeEx (in: hFile=0x1540, lpFileSize=0x103cf898 | out: lpFileSize=0x103cf898*=289) returned 1 [0210.732] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x11d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.732] ReadFile (in: hFile=0x1540, lpBuffer=0x103cf8a4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x103cf880, lpOverlapped=0x0 | out: lpBuffer=0x103cf8a4*, lpNumberOfBytesRead=0x103cf880*=0x4, lpOverlapped=0x0) returned 1 [0210.733] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80639a8 [0210.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063750 [0210.734] NtQuerySystemTime (in: CurrentTime=0x103cf820 | out: CurrentTime=0x103cf820*=132471540784500000) returned 0x0 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x7fe1a260 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x46d21300 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x100ca0c1 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x198d0de1 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x15570530 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x470f6c9 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x15790d03 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x46f7cc46 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x281e40c3 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x182bc372 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x47299d33 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x8b4cb85 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x23126675 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x6a185a1e [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x199559fd [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0xffe4ffc [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x79c8f78d [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x455fa0c6 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x7395eaec [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x1ef85a6b [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x78dea518 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x168cde89 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x2a50fbd5 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x45c4ae04 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x4cec41bc [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x7b5f0353 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x28d0af98 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x742a8beb [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x601e6009 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x587ef06c [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x295a0e1 [0210.734] RtlRandomEx (in: Seed=0x103cf818 | out: Seed=0x103cf818) returned 0x2153a70e [0210.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148b5080 [0210.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148b8c88 [0210.758] ReadFile (in: hFile=0x1540, lpBuffer=0x148b5080, nNumberOfBytesToRead=0x121, lpNumberOfBytesRead=0x103cf814, lpOverlapped=0x0 | out: lpBuffer=0x148b5080*, lpNumberOfBytesRead=0x103cf814*=0x121, lpOverlapped=0x0) returned 1 [0210.758] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.759] WriteFile (in: hFile=0x1540, lpBuffer=0x148b8c88*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x103cf818, lpOverlapped=0x0 | out: lpBuffer=0x148b8c88*, lpNumberOfBytesWritten=0x103cf818*=0x121, lpOverlapped=0x0) returned 1 [0213.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431b8 [0213.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42628 [0213.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42628) returned 1 [0213.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b8c88) returned 1 [0213.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148b5080) returned 1 [0213.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403560) returned 1 [0213.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e42f0) returned 1 [0213.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69b40 [0213.908] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.908] WriteFile (in: hFile=0x1540, lpBuffer=0x3deb9f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x103cf88c, lpOverlapped=0x0 | out: lpBuffer=0x3deb9f0*, lpNumberOfBytesWritten=0x103cf88c*=0x10c, lpOverlapped=0x0) returned 1 [0214.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0214.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b70) returned 1 [0214.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42628) returned 1 [0214.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b40) returned 1 [0214.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0214.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80639a8) returned 1 [0214.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063778) returned 1 [0214.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80637a0) returned 1 [0214.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ef85f0 [0214.055] wcscpy (in: _Dest=0x3ef85f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" [0214.055] wcscat (in: _Dest=0x3ef85f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.f0dbec" [0214.055] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0x103cf810, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e3da38 [0215.786] FlushFileBuffers (hFile=0x1540) returned 1 [0215.800] CloseHandle (hObject=0x1540) returned 1 [0216.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x81d7e60 [0216.037] wcscpy (in: _Dest=0x81d7e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" [0216.037] wcscat (in: _Dest=0x81d7e60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\F0DBEC-Readme.txt" [0216.037] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0216.037] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.512] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x103cf834, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x103cf834*=0x70c, lpOverlapped=0x0) returned 1 [0216.515] CloseHandle (hObject=0x10c4) returned 1 [0216.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7e60) returned 1 [0216.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebc10) returned 1 Thread: id = 6465 os_tid = 0x1b18 [0195.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx")) returned 0x20 [0195.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", dwFileAttributes=0x20) returned 0 [0195.321] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.321] GetLastError () returned 0x5 [0195.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", dwFileAttributes=0x20) returned 0 [0195.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 6466 os_tid = 0x1b1c [0195.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex")) returned 0x20 [0195.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", dwFileAttributes=0x20) returned 0 [0195.323] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.323] GetLastError () returned 0x5 [0195.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", dwFileAttributes=0x20) returned 0 [0195.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6467 os_tid = 0x1b34 [0195.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths")) returned 0x20 [0195.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", dwFileAttributes=0x20) returned 0 [0195.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.326] GetLastError () returned 0x5 [0195.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", dwFileAttributes=0x20) returned 0 [0195.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6468 os_tid = 0x1b64 [0195.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env")) returned 0x20 [0195.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", dwFileAttributes=0x20) returned 0 [0195.328] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.329] GetLastError () returned 0x5 [0195.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", dwFileAttributes=0x20) returned 0 [0195.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e354d8) returned 1 Thread: id = 6469 os_tid = 0x1b68 [0195.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca")) returned 0x20 [0195.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", dwFileAttributes=0x20) returned 0 [0195.330] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.331] GetLastError () returned 0x5 [0195.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", dwFileAttributes=0x20) returned 0 [0195.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 6470 os_tid = 0x1bd8 [0195.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp")) returned 0x20 [0195.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", dwFileAttributes=0x20) returned 0 [0195.333] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.333] GetLastError () returned 0x5 [0195.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", dwFileAttributes=0x20) returned 0 [0195.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333e28) returned 1 Thread: id = 6471 os_tid = 0x1bdc [0195.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp")) returned 0x20 [0195.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", dwFileAttributes=0x20) returned 0 [0195.335] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.335] GetLastError () returned 0x5 [0195.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", dwFileAttributes=0x20) returned 0 [0195.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35988) returned 1 Thread: id = 6472 os_tid = 0x1be0 [0195.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx")) returned 0x20 [0195.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", dwFileAttributes=0x20) returned 0 [0195.337] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.337] GetLastError () returned 0x5 [0195.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", dwFileAttributes=0x20) returned 0 [0195.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333228) returned 1 Thread: id = 6473 os_tid = 0x122c [0195.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths")) returned 0x20 [0195.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", dwFileAttributes=0x20) returned 0 [0195.339] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.339] GetLastError () returned 0x5 [0195.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", dwFileAttributes=0x20) returned 0 [0195.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333ee8) returned 1 Thread: id = 6474 os_tid = 0x1230 [0195.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp")) returned 0x20 [0195.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", dwFileAttributes=0x20) returned 0 [0195.341] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.341] GetLastError () returned 0x5 [0195.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", dwFileAttributes=0x20) returned 0 [0195.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 6475 os_tid = 0x1234 [0195.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx")) returned 0x20 [0195.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", dwFileAttributes=0x20) returned 0 [0195.343] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.343] GetLastError () returned 0x5 [0195.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", dwFileAttributes=0x20) returned 0 [0195.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 6476 os_tid = 0xb84 [0195.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env")) returned 0x20 [0195.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", dwFileAttributes=0x20) returned 0 [0195.345] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.345] GetLastError () returned 0x5 [0195.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", dwFileAttributes=0x20) returned 0 [0195.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35410) returned 1 Thread: id = 6477 os_tid = 0x1238 [0195.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp")) returned 0x20 [0203.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", dwFileAttributes=0x20) returned 0 [0203.233] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.233] GetLastError () returned 0x5 [0203.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", dwFileAttributes=0x20) returned 0 [0203.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 6478 os_tid = 0x1028 [0195.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex")) returned 0x20 [0203.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", dwFileAttributes=0x20) returned 0 [0203.231] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.232] GetLastError () returned 0x5 [0203.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", dwFileAttributes=0x20) returned 0 [0203.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35348) returned 1 Thread: id = 6479 os_tid = 0x102c [0195.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx")) returned 0x20 [0203.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", dwFileAttributes=0x20) returned 0 [0203.230] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.230] GetLastError () returned 0x5 [0203.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", dwFileAttributes=0x20) returned 0 [0203.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 6480 os_tid = 0x124c [0195.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env")) returned 0x20 [0203.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", dwFileAttributes=0x20) returned 0 [0203.229] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.229] GetLastError () returned 0x5 [0203.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", dwFileAttributes=0x20) returned 0 [0203.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e355a0) returned 1 Thread: id = 6481 os_tid = 0x1254 [0195.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp")) returned 0x20 [0203.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", dwFileAttributes=0x20) returned 0 [0203.241] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.241] GetLastError () returned 0x5 [0203.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", dwFileAttributes=0x20) returned 0 [0203.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 6482 os_tid = 0x125c [0195.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx")) returned 0x20 [0203.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", dwFileAttributes=0x20) returned 0 [0203.223] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.223] GetLastError () returned 0x5 [0203.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", dwFileAttributes=0x20) returned 0 [0203.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 6483 os_tid = 0x1260 [0195.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex")) returned 0x20 [0203.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", dwFileAttributes=0x20) returned 0 [0203.221] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.221] GetLastError () returned 0x5 [0203.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", dwFileAttributes=0x20) returned 0 [0203.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5b88) returned 1 Thread: id = 6484 os_tid = 0x1264 [0195.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env")) returned 0x20 [0203.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", dwFileAttributes=0x20) returned 0 [0203.224] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.225] GetLastError () returned 0x5 [0203.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", dwFileAttributes=0x20) returned 0 [0203.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e342e0) returned 1 Thread: id = 6485 os_tid = 0x150c [0195.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca")) returned 0x20 [0203.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", dwFileAttributes=0x20) returned 0 [0203.219] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.219] GetLastError () returned 0x5 [0203.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", dwFileAttributes=0x20) returned 0 [0203.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ac8) returned 1 Thread: id = 6486 os_tid = 0x1268 [0195.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp")) returned 0x20 [0203.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", dwFileAttributes=0x20) returned 0 [0203.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.006] GetLastError () returned 0x5 [0203.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", dwFileAttributes=0x20) returned 0 [0203.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a08) returned 1 Thread: id = 6487 os_tid = 0xc0c [0195.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp")) returned 0x20 [0203.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", dwFileAttributes=0x20) returned 0 [0203.005] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.005] GetLastError () returned 0x5 [0203.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", dwFileAttributes=0x20) returned 0 [0203.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5948) returned 1 Thread: id = 6488 os_tid = 0x1060 [0195.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx")) returned 0x20 [0203.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", dwFileAttributes=0x20) returned 0 [0203.236] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.236] GetLastError () returned 0x5 [0203.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", dwFileAttributes=0x20) returned 0 [0203.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5c48) returned 1 Thread: id = 6489 os_tid = 0x126c [0195.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths")) returned 0x20 [0203.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", dwFileAttributes=0x20) returned 0 [0203.234] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.234] GetLastError () returned 0x5 [0203.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", dwFileAttributes=0x20) returned 0 [0203.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5888) returned 1 Thread: id = 6490 os_tid = 0x1068 [0195.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca")) returned 0x20 [0203.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", dwFileAttributes=0x20) returned 0 [0203.228] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.228] GetLastError () returned 0x5 [0203.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", dwFileAttributes=0x20) returned 0 [0203.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5648) returned 1 Thread: id = 6491 os_tid = 0x1390 [0195.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp")) returned 0x20 [0203.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", dwFileAttributes=0x20) returned 0 [0203.226] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.226] GetLastError () returned 0x5 [0203.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", dwFileAttributes=0x20) returned 0 [0203.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5708) returned 1 Thread: id = 6492 os_tid = 0x1270 [0195.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp")) returned 0x20 [0203.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", dwFileAttributes=0x20) returned 0 [0203.243] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.243] GetLastError () returned 0x5 [0203.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", dwFileAttributes=0x20) returned 0 [0203.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35280) returned 1 Thread: id = 6493 os_tid = 0x1278 [0195.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx")) returned 0x20 [0203.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", dwFileAttributes=0x20) returned 0 [0203.238] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.238] GetLastError () returned 0x5 [0203.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", dwFileAttributes=0x20) returned 0 [0203.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d57c8) returned 1 Thread: id = 6494 os_tid = 0x127c [0195.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca")) returned 0x20 [0203.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", dwFileAttributes=0x20) returned 0 [0203.239] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.240] GetLastError () returned 0x5 [0203.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", dwFileAttributes=0x20) returned 0 [0203.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5f48) returned 1 Thread: id = 6495 os_tid = 0x1280 [0195.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif")) returned 0x20 [0195.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0195.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.666] GetLastError () returned 0x5 [0195.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0195.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021140) returned 1 Thread: id = 6496 os_tid = 0x139c [0195.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif")) returned 0x20 [0201.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0201.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.344] GetLastError () returned 0x5 [0201.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0201.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b8f8) returned 1 Thread: id = 6497 os_tid = 0x13a0 [0195.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif")) returned 0x20 [0201.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.719] GetLastError () returned 0x5 [0201.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80217d0) returned 1 Thread: id = 6498 os_tid = 0x13a4 [0195.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif")) returned 0x20 [0201.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.716] GetLastError () returned 0x5 [0201.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b2a0) returned 1 Thread: id = 6499 os_tid = 0x1284 [0195.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x8406308 [0195.669] wcscpy (in: _Dest=0x8406308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" [0195.670] wcscat (in: _Dest=0x8406308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" [0195.670] wcscat (in: _Dest=0x8406308, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*" [0195.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0aac8 [0195.670] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8098f10 [0195.670] wcscmp (_String1=".", _String2=".") returned 0 [0195.670] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.670] wcscmp (_String1="..", _String2=".") returned 1 [0195.670] wcscmp (_String1="..", _String2="..") returned 0 [0195.670] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c9f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.670] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.670] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81e8c40 [0195.670] wcscpy (in: _Dest=0x81e8c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" [0195.670] wcscat (in: _Dest=0x81e8c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" [0195.670] wcscat (in: _Dest=0x81e8c40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" [0195.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81e8c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a60 [0195.732] FindNextFileW (in: hFindFile=0x8098f10, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c9f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.732] FindClose (in: hFindFile=0x8098f10 | out: hFindFile=0x8098f10) returned 1 [0195.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0aac8) returned 1 [0195.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406308) returned 1 [0195.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dff08) returned 1 Thread: id = 6500 os_tid = 0x1be4 [0195.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x8406768 [0195.671] wcscpy (in: _Dest=0x8406768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" [0195.671] wcscat (in: _Dest=0x8406768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" [0195.671] wcscat (in: _Dest=0x8406768, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*" [0195.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09050 [0195.671] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8099590 [0195.672] wcscmp (_String1=".", _String2=".") returned 0 [0195.672] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.672] wcscmp (_String1="..", _String2=".") returned 1 [0195.672] wcscmp (_String1="..", _String2="..") returned 0 [0195.672] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4415a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.672] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.672] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81ef898 [0195.672] wcscpy (in: _Dest=0x81ef898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" [0195.672] wcscat (in: _Dest=0x81ef898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" [0195.672] wcscat (in: _Dest=0x81ef898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" [0195.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0195.734] FindNextFileW (in: hFindFile=0x8099590, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4415a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.734] FindClose (in: hFindFile=0x8099590 | out: hFindFile=0x8099590) returned 1 [0195.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09050) returned 1 [0195.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406768) returned 1 [0195.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 Thread: id = 6501 os_tid = 0x1be8 [0195.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x8406998 [0195.673] wcscpy (in: _Dest=0x8406998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" [0195.673] wcscat (in: _Dest=0x8406998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" [0195.673] wcscat (in: _Dest=0x8406998, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*" [0195.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07d10 [0195.673] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x80995d0 [0195.673] wcscmp (_String1=".", _String2=".") returned 0 [0195.673] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.673] wcscmp (_String1="..", _String2=".") returned 1 [0195.673] wcscmp (_String1="..", _String2="..") returned 0 [0195.673] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.673] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.673] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81ef9c0 [0195.673] wcscpy (in: _Dest=0x81ef9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" [0195.674] wcscat (in: _Dest=0x81ef9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" [0195.674] wcscat (in: _Dest=0x81ef9c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" [0195.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0195.736] FindNextFileW (in: hFindFile=0x80995d0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.736] FindClose (in: hFindFile=0x80995d0 | out: hFindFile=0x80995d0) returned 1 [0195.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07d10) returned 1 [0195.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 [0195.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 Thread: id = 6502 os_tid = 0x1bec [0195.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x20 [0195.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x20) returned 0 [0195.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.674] GetLastError () returned 0x5 [0195.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x20) returned 0 [0195.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 6503 os_tid = 0x13b4 [0195.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x20 [0202.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x20) returned 0 [0202.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.977] GetLastError () returned 0x5 [0202.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x20) returned 0 [0202.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 6504 os_tid = 0x13b8 [0195.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x20 [0203.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x20) returned 0 [0203.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.116] GetLastError () returned 0x5 [0203.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x20) returned 0 [0203.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 6505 os_tid = 0x1bf0 [0195.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x20 [0203.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x20) returned 0 [0203.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.142] GetLastError () returned 0x5 [0203.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x20) returned 0 [0203.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf888) returned 1 Thread: id = 6506 os_tid = 0x1bf4 [0195.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x20 [0203.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x20) returned 0 [0203.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.164] GetLastError () returned 0x5 [0203.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x20) returned 0 [0203.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 6507 os_tid = 0x13d0 [0195.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x20 [0203.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x20) returned 0 [0203.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.117] GetLastError () returned 0x5 [0203.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x20) returned 0 [0203.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 6508 os_tid = 0x13d4 [0195.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x20 [0203.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x20) returned 0 [0203.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.119] GetLastError () returned 0x5 [0203.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x20) returned 0 [0203.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81becd8) returned 1 Thread: id = 6509 os_tid = 0x13d8 [0195.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x20 [0203.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x20) returned 0 [0203.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.144] GetLastError () returned 0x5 [0203.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x20) returned 0 [0203.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30518) returned 1 Thread: id = 6510 os_tid = 0x16d0 [0195.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x20 [0203.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x20) returned 0 [0203.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.140] GetLastError () returned 0x5 [0203.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x20) returned 0 [0203.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 6511 os_tid = 0x13dc [0195.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x20 [0203.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x20) returned 0 [0203.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.138] GetLastError () returned 0x5 [0203.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x20) returned 0 [0203.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 6512 os_tid = 0x13e0 [0195.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x20 [0203.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x20) returned 0 [0203.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.137] GetLastError () returned 0x5 [0203.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x20) returned 0 [0203.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 6513 os_tid = 0x13e4 [0195.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x20 [0203.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x20) returned 0 [0203.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.147] GetLastError () returned 0x5 [0203.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x20) returned 0 [0203.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 6514 os_tid = 0x13e8 [0195.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x20 [0203.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x20) returned 0 [0203.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.135] GetLastError () returned 0x5 [0203.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x20) returned 0 [0203.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 6515 os_tid = 0x13ec [0195.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x20 [0203.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x20) returned 0 [0203.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.133] GetLastError () returned 0x5 [0203.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x20) returned 0 [0203.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 6516 os_tid = 0x16d8 [0195.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x20 [0203.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x20) returned 0 [0203.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.132] GetLastError () returned 0x5 [0203.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x20) returned 0 [0203.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f8e0) returned 1 Thread: id = 6517 os_tid = 0x16dc [0195.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x20 [0203.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x20) returned 0 [0203.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.130] GetLastError () returned 0x5 [0203.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x20) returned 0 [0203.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 6518 os_tid = 0x16e0 [0195.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x20 [0203.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x20) returned 0 [0203.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.128] GetLastError () returned 0x5 [0203.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x20) returned 0 [0203.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 6519 os_tid = 0x16e4 [0195.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x20 [0203.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x20) returned 0 [0203.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.126] GetLastError () returned 0x5 [0203.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x20) returned 0 [0203.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f307c0) returned 1 Thread: id = 6520 os_tid = 0x13f0 [0195.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x20 [0203.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x20) returned 0 [0203.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.124] GetLastError () returned 0x5 [0203.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x20) returned 0 [0203.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f312e8) returned 1 Thread: id = 6521 os_tid = 0x13f4 [0195.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x20 [0203.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x20) returned 0 [0203.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.123] GetLastError () returned 0x5 [0203.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x20) returned 0 [0203.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 6522 os_tid = 0x13f8 [0195.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x20 [0203.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x20) returned 0 [0203.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.121] GetLastError () returned 0x5 [0203.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x20) returned 0 [0203.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 6523 os_tid = 0x16ec [0195.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x20 [0203.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x20) returned 0 [0203.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.162] GetLastError () returned 0x5 [0203.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x20) returned 0 [0203.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f305a0) returned 1 Thread: id = 6524 os_tid = 0x13fc [0197.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x20 [0203.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x20) returned 0 [0203.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.145] GetLastError () returned 0x5 [0203.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x20) returned 0 [0203.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 6525 os_tid = 0x16f4 [0197.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif")) returned 0x20 [0201.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.346] GetLastError () returned 0x5 [0201.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5d08) returned 1 Thread: id = 6526 os_tid = 0x1bf8 [0197.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif")) returned 0x20 [0206.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.447] GetLastError () returned 0x5 [0206.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 6527 os_tid = 0x1bfc [0197.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif")) returned 0x20 [0206.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0206.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.412] GetLastError () returned 0x5 [0206.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0206.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c738) returned 1 Thread: id = 6528 os_tid = 0x1c00 [0197.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20 [0206.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.382] GetLastError () returned 0x5 [0212.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c9a8) returned 1 Thread: id = 6529 os_tid = 0x1288 [0197.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20 [0206.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.352] GetLastError () returned 0x5 [0206.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bb08) returned 1 Thread: id = 6530 os_tid = 0x1c04 [0197.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif")) returned 0x20 [0206.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.370] GetLastError () returned 0x5 [0206.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6008) returned 1 Thread: id = 6531 os_tid = 0x1c08 [0197.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif")) returned 0x20 [0206.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0210.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.417] GetLastError () returned 0x5 [0212.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333ee8) returned 1 Thread: id = 6532 os_tid = 0x1c0c [0197.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif")) returned 0x20 [0206.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0206.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.373] GetLastError () returned 0x5 [0206.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0206.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d60c8) returned 1 Thread: id = 6533 os_tid = 0x1c10 [0197.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif")) returned 0x20 [0206.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.375] GetLastError () returned 0x5 [0206.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333228) returned 1 Thread: id = 6534 os_tid = 0x1c14 [0197.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif")) returned 0x20 [0206.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.225] GetLastError () returned 0x5 [0212.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333e28) returned 1 Thread: id = 6535 os_tid = 0x1c20 [0197.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif")) returned 0x20 [0197.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0197.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.661] GetLastError () returned 0x5 [0197.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0197.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80208d0) returned 1 Thread: id = 6536 os_tid = 0x1c24 [0197.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif")) returned 0x20 [0197.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0197.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.663] GetLastError () returned 0x5 [0197.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0197.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021140) returned 1 Thread: id = 6537 os_tid = 0x1c28 [0197.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif")) returned 0x20 [0197.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0197.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.667] GetLastError () returned 0x5 [0197.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0197.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021500) returned 1 Thread: id = 6538 os_tid = 0x12a8 [0197.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl")) returned 0x20 [0206.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", dwFileAttributes=0x20) returned 0 [0206.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.032] GetLastError () returned 0x5 [0206.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", dwFileAttributes=0x20) returned 0 [0206.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 Thread: id = 6539 os_tid = 0x12ac [0197.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd")) returned 0x20 [0206.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", dwFileAttributes=0x20) returned 0 [0206.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.033] GetLastError () returned 0x5 [0206.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", dwFileAttributes=0x20) returned 0 [0206.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 6540 os_tid = 0xe20 [0197.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs")) returned 0x20 [0206.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", dwFileAttributes=0x20) returned 0 [0206.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.022] GetLastError () returned 0x5 [0206.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", dwFileAttributes=0x20) returned 0 [0206.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f345f0) returned 1 Thread: id = 6541 os_tid = 0x172c [0197.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc")) returned 0x20 [0206.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0206.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.021] GetLastError () returned 0x5 [0206.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0206.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a078) returned 1 Thread: id = 6542 os_tid = 0x1730 [0197.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt")) returned 0x20 [0206.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0206.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.019] GetLastError () returned 0x5 [0206.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0206.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b7a0) returned 1 Thread: id = 6543 os_tid = 0x12bc [0197.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk")) returned 0x20 [0206.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.018] GetLastError () returned 0x5 [0206.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b968) returned 1 Thread: id = 6544 os_tid = 0x1738 [0197.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk")) returned 0x20 [0206.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.027] GetLastError () returned 0x5 [0206.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 Thread: id = 6545 os_tid = 0x173c [0197.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs")) returned 0x20 [0206.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", dwFileAttributes=0x20) returned 0 [0206.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.029] GetLastError () returned 0x5 [0206.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", dwFileAttributes=0x20) returned 0 [0206.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 6546 os_tid = 0x12c0 [0197.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc")) returned 0x20 [0206.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", dwFileAttributes=0x20) returned 0 [0206.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.026] GetLastError () returned 0x5 [0206.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", dwFileAttributes=0x20) returned 0 [0206.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35130) returned 1 Thread: id = 6547 os_tid = 0x12c4 [0197.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt")) returned 0x20 [0206.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", dwFileAttributes=0x20) returned 0 [0206.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.024] GetLastError () returned 0x5 [0206.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", dwFileAttributes=0x20) returned 0 [0206.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34950) returned 1 Thread: id = 6548 os_tid = 0x12c8 [0197.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk")) returned 0x20 [0206.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.016] GetLastError () returned 0x5 [0206.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34f80) returned 1 Thread: id = 6549 os_tid = 0x12cc [0197.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk")) returned 0x20 [0206.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.014] GetLastError () returned 0x5 [0206.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34680) returned 1 Thread: id = 6550 os_tid = 0x1754 [0197.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll")) returned 0x20 [0203.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0205.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.009] GetLastError () returned 0x5 [0206.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34710) returned 1 Thread: id = 6551 os_tid = 0x12d0 [0197.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll")) returned 0x20 [0202.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0203.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.007] GetLastError () returned 0x5 [0206.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34560) returned 1 Thread: id = 6552 os_tid = 0x140c [0197.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css")) returned 0x20 [0206.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", dwFileAttributes=0x20) returned 0 [0206.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.030] GetLastError () returned 0x5 [0206.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", dwFileAttributes=0x20) returned 0 [0206.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831acd8) returned 1 Thread: id = 6553 os_tid = 0x1410 [0197.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl")) returned 0x20 [0205.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", dwFileAttributes=0x20) returned 0 [0205.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.704] GetLastError () returned 0x5 [0205.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", dwFileAttributes=0x20) returned 0 [0205.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831afd8) returned 1 Thread: id = 6554 os_tid = 0x1768 [0197.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss")) returned 0x20 [0206.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", dwFileAttributes=0x20) returned 0 [0206.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.006] GetLastError () returned 0x5 [0206.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", dwFileAttributes=0x20) returned 0 [0206.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831b558) returned 1 Thread: id = 6555 os_tid = 0x176c [0197.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc")) returned 0x20 [0206.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", dwFileAttributes=0x20) returned 0 [0206.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.008] GetLastError () returned 0x5 [0206.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", dwFileAttributes=0x20) returned 0 [0206.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 6556 os_tid = 0x1770 [0197.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt")) returned 0x20 [0206.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", dwFileAttributes=0x20) returned 0 [0206.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.011] GetLastError () returned 0x5 [0206.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", dwFileAttributes=0x20) returned 0 [0206.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 6557 os_tid = 0x1774 [0197.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls")) returned 0x20 [0206.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", dwFileAttributes=0x20) returned 0 [0206.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.012] GetLastError () returned 0x5 [0206.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", dwFileAttributes=0x20) returned 0 [0206.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 6558 os_tid = 0x1778 [0197.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json")) returned 0x2020 [0197.693] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0205.197] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2cc8 [0205.198] GetFileSizeEx (in: hFile=0x2cc8, lpFileSize=0x9c0fe08 | out: lpFileSize=0x9c0fe08*=886) returned 1 [0205.198] SetFilePointerEx (in: hFile=0x2cc8, liDistanceToMove=0x372, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.198] ReadFile (in: hFile=0x2cc8, lpBuffer=0x9c0fe14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9c0fdf0, lpOverlapped=0x0 | out: lpBuffer=0x9c0fe14*, lpNumberOfBytesRead=0x9c0fdf0*=0x4, lpOverlapped=0x0) returned 1 [0205.231] SetFilePointerEx (in: hFile=0x2cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a38 [0205.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064880 [0205.231] NtQuerySystemTime (in: CurrentTime=0x9c0fd90 | out: CurrentTime=0x9c0fd90*=132471540729900000) returned 0x0 [0205.231] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x5c87dd38 [0205.231] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x4df56346 [0205.231] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x1959cc4f [0205.231] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x473879ca [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x4277e02b [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x50315740 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x7837886e [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x4f056a00 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x37afa232 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x503318f [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x2aa9105d [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x3d78c45b [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x403975bf [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x3e268367 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x4a2d6e1f [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x190ed9dd [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x66d8ab12 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x282a6c48 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x3df1b89c [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x2648b064 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x798ce8a5 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x639b4175 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x32928dd9 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x3b6438b8 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x169298f [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x28435809 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x80673ae [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x617f63f3 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x131c5f6 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x35f84c84 [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x2e85fcf [0205.232] RtlRandomEx (in: Seed=0x9c0fd88 | out: Seed=0x9c0fd88) returned 0x50805876 [0205.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b18b0 [0205.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82bccc8 [0205.244] ReadFile (in: hFile=0x2cc8, lpBuffer=0x82b18b0, nNumberOfBytesToRead=0x376, lpNumberOfBytesRead=0x9c0fd84, lpOverlapped=0x0 | out: lpBuffer=0x82b18b0*, lpNumberOfBytesRead=0x9c0fd84*=0x376, lpOverlapped=0x0) returned 1 [0205.244] SetFilePointerEx (in: hFile=0x2cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.244] WriteFile (in: hFile=0x2cc8, lpBuffer=0x82bccc8*, nNumberOfBytesToWrite=0x376, lpNumberOfBytesWritten=0x9c0fd88, lpOverlapped=0x0 | out: lpBuffer=0x82bccc8*, lpNumberOfBytesWritten=0x9c0fd88*=0x376, lpOverlapped=0x0) returned 1 [0211.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80638e0 [0211.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063908 [0211.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063908) returned 1 [0211.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82bccc8) returned 1 [0211.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b18b0) returned 1 [0211.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403128) returned 1 [0211.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3d08) returned 1 [0211.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f228 [0211.708] SetFilePointerEx (in: hFile=0x2cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.708] WriteFile (in: hFile=0x2cc8, lpBuffer=0x84061f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9c0fdfc, lpOverlapped=0x0 | out: lpBuffer=0x84061f0*, lpNumberOfBytesWritten=0x9c0fdfc*=0x10c, lpOverlapped=0x0) returned 1 [0213.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84061f0) returned 1 [0213.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa68) returned 1 [0213.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063908) returned 1 [0213.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f228) returned 1 [0213.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80638e0) returned 1 [0213.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a38) returned 1 [0213.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80648a8) returned 1 [0213.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064830) returned 1 [0213.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x84041b8 [0213.989] wcscpy (in: _Dest=0x84041b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" [0213.989] wcscat (in: _Dest=0x84041b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.f0dbec" [0213.989] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.f0dbec", NtPathName=0x9c0fd80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0213.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e177a0 [0215.653] FlushFileBuffers (hFile=0x2cc8) returned 1 [0215.658] CloseHandle (hObject=0x2cc8) returned 1 [0215.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8187b80 [0215.910] wcscpy (in: _Dest=0x8187b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" [0215.910] wcscat (in: _Dest=0x8187b80, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\F0DBEC-Readme.txt" [0215.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\f0dbec-readme.txt")) returned 0xffffffff [0215.910] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.413] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x9c0fda4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x9c0fda4*=0x70c, lpOverlapped=0x0) returned 1 [0216.416] CloseHandle (hObject=0x10c4) returned 1 [0216.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187b80) returned 1 [0216.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e8c40) returned 1 Thread: id = 6559 os_tid = 0x177c [0197.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json")) returned 0x2020 [0197.694] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0205.200] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2990 [0205.200] GetFileSizeEx (in: hFile=0x2990, lpFileSize=0xaa4fe20 | out: lpFileSize=0xaa4fe20*=705) returned 1 [0205.200] SetFilePointerEx (in: hFile=0x2990, liDistanceToMove=0x2bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.200] ReadFile (in: hFile=0x2990, lpBuffer=0xaa4fe2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaa4fe08, lpOverlapped=0x0 | out: lpBuffer=0xaa4fe2c*, lpNumberOfBytesRead=0xaa4fe08*=0x4, lpOverlapped=0x0) returned 1 [0205.206] SetFilePointerEx (in: hFile=0x2990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bc8 [0205.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b00 [0205.206] NtQuerySystemTime (in: CurrentTime=0xaa4fda8 | out: CurrentTime=0xaa4fda8*=132471540729744000) returned 0x0 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x3a6f081 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x2482e9cc [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x3267c07c [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x6a963182 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x54f60db7 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x446df138 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x5bc378c5 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0xa15ec12 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x7fe4c380 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0xcb371e [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x4e40db94 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x18c67403 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x669b13b5 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x62396c7a [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x4b5d9698 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x2ba67daf [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x5f397a78 [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x1e35fdbb [0205.206] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x258925c5 [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x250af8a0 [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x59deef02 [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x571474e9 [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x16fccf4b [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x5b2ad806 [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x43becadd [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x753b6fc5 [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x3ef61983 [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x298a7c7f [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x61e2aed9 [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x48ce418b [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x36cbbfef [0205.207] RtlRandomEx (in: Seed=0xaa4fda0 | out: Seed=0xaa4fda0) returned 0x423913cf [0205.217] ReadFile (in: hFile=0x2990, lpBuffer=0x8375990, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0xaa4fd9c, lpOverlapped=0x0 | out: lpBuffer=0x8375990*, lpNumberOfBytesRead=0xaa4fd9c*=0x2c1, lpOverlapped=0x0) returned 1 [0205.217] SetFilePointerEx (in: hFile=0x2990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.217] WriteFile (in: hFile=0x2990, lpBuffer=0x8362d68*, nNumberOfBytesToWrite=0x2c1, lpNumberOfBytesWritten=0xaa4fda0, lpOverlapped=0x0 | out: lpBuffer=0x8362d68*, lpNumberOfBytesWritten=0xaa4fda0*=0x2c1, lpOverlapped=0x0) returned 1 [0211.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063890 [0211.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80638b8 [0211.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80638b8) returned 1 [0211.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8362d68) returned 1 [0211.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8375990) returned 1 [0211.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403290) returned 1 [0211.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5418) returned 1 [0211.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6faf8 [0211.710] SetFilePointerEx (in: hFile=0x2990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.710] WriteFile (in: hFile=0x2990, lpBuffer=0x84060d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa4fe14, lpOverlapped=0x0 | out: lpBuffer=0x84060d8*, lpNumberOfBytesWritten=0xaa4fe14*=0x10c, lpOverlapped=0x0) returned 1 [0213.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 [0213.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fac8) returned 1 [0213.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80638b8) returned 1 [0213.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6faf8) returned 1 [0213.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063890) returned 1 [0213.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064bc8) returned 1 [0213.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b28) returned 1 [0213.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064a10) returned 1 [0213.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8404a40 [0213.992] wcscpy (in: _Dest=0x8404a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" [0213.992] wcscat (in: _Dest=0x8404a40, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.f0dbec" [0213.992] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.f0dbec", NtPathName=0xaa4fd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0213.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17240 [0215.697] FlushFileBuffers (hFile=0x2990) returned 1 [0215.702] CloseHandle (hObject=0x2990) returned 1 [0215.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8187910 [0215.977] wcscpy (in: _Dest=0x8187910, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" [0215.977] wcscat (in: _Dest=0x8187910, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\F0DBEC-Readme.txt" [0215.977] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\f0dbec-readme.txt")) returned 0xffffffff [0215.977] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.418] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xaa4fdbc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xaa4fdbc*=0x70c, lpOverlapped=0x0) returned 1 [0216.420] CloseHandle (hObject=0x10c4) returned 1 [0216.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187910) returned 1 [0216.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef898) returned 1 Thread: id = 6560 os_tid = 0x1780 [0197.695] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json")) returned 0x2020 [0197.695] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0205.202] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x24b0 [0205.202] GetFileSizeEx (in: hFile=0x24b0, lpFileSize=0x953fd50 | out: lpFileSize=0x953fd50*=663) returned 1 [0205.203] SetFilePointerEx (in: hFile=0x24b0, liDistanceToMove=0x293, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.203] ReadFile (in: hFile=0x24b0, lpBuffer=0x953fd5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x953fd38, lpOverlapped=0x0 | out: lpBuffer=0x953fd5c*, lpNumberOfBytesRead=0x953fd38*=0x4, lpOverlapped=0x0) returned 1 [0205.218] SetFilePointerEx (in: hFile=0x24b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cda0 [0205.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064b00 [0205.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064a38 [0205.218] NtQuerySystemTime (in: CurrentTime=0x953fcd8 | out: CurrentTime=0x953fcd8*=132471540729900000) returned 0x0 [0205.218] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x62e54f97 [0205.218] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x6fd31b2e [0205.218] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x2e1945ff [0205.218] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x8d803d4 [0205.218] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x1aec8d99 [0205.218] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x4ac860dd [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x13c7c1d0 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x7ebc7434 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x503d169f [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x5b3e66a [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x5c5b57e4 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x4df199ad [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x250104c3 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x107edd0c [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x1ea40b2 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x6b4c2b93 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x5267cb83 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x61e59b26 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0xbe06718 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x1c2177c [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x57fc9b2c [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x554a0b25 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x28be52f5 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x55b10f81 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x4ca8d9fb [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x2a91a959 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x1c20ac13 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x6e9b4e38 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x17a2bcaf [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x15a69838 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x34acc4c7 [0205.219] RtlRandomEx (in: Seed=0x953fcd0 | out: Seed=0x953fcd0) returned 0x605c187f [0205.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0205.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c08d0 [0205.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828c060 [0205.230] ReadFile (in: hFile=0x24b0, lpBuffer=0x82c08d0, nNumberOfBytesToRead=0x297, lpNumberOfBytesRead=0x953fccc, lpOverlapped=0x0 | out: lpBuffer=0x82c08d0*, lpNumberOfBytesRead=0x953fccc*=0x297, lpOverlapped=0x0) returned 1 [0205.231] SetFilePointerEx (in: hFile=0x24b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.231] WriteFile (in: hFile=0x24b0, lpBuffer=0x828c060*, nNumberOfBytesToWrite=0x297, lpNumberOfBytesWritten=0x953fcd0, lpOverlapped=0x0 | out: lpBuffer=0x828c060*, lpNumberOfBytesWritten=0x953fcd0*=0x297, lpOverlapped=0x0) returned 1 [0211.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0211.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063a48 [0211.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a48) returned 1 [0211.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828c060) returned 1 [0211.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c08d0) returned 1 [0211.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84031a0) returned 1 [0211.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3960) returned 1 [0211.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fc48 [0211.707] SetFilePointerEx (in: hFile=0x24b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.707] WriteFile (in: hFile=0x24b0, lpBuffer=0x8406768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x953fd44, lpOverlapped=0x0 | out: lpBuffer=0x8406768*, lpNumberOfBytesWritten=0x953fd44*=0x10c, lpOverlapped=0x0) returned 1 [0213.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406768) returned 1 [0213.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0213.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063a48) returned 1 [0213.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0213.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0213.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b00) returned 1 [0213.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80649c0) returned 1 [0213.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80649e8) returned 1 [0213.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x84057a8 [0213.986] wcscpy (in: _Dest=0x84057a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" [0213.986] wcscat (in: _Dest=0x84057a8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.f0dbec" [0213.986] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.f0dbec", NtPathName=0x953fcc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0213.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16ce0 [0215.651] FlushFileBuffers (hFile=0x24b0) returned 1 [0215.654] CloseHandle (hObject=0x24b0) returned 1 [0215.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8187df0 [0215.906] wcscpy (in: _Dest=0x8187df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" [0215.906] wcscat (in: _Dest=0x8187df0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\F0DBEC-Readme.txt" [0215.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\f0dbec-readme.txt")) returned 0xffffffff [0215.906] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.409] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x953fcec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x953fcec*=0x70c, lpOverlapped=0x0) returned 1 [0216.411] CloseHandle (hObject=0x10c4) returned 1 [0216.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8187df0) returned 1 [0216.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef9c0) returned 1 Thread: id = 6561 os_tid = 0x1784 [0197.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif")) returned 0x20 [0206.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0206.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.377] GetLastError () returned 0x5 [0206.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0206.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f2de8) returned 1 Thread: id = 6562 os_tid = 0x1788 [0197.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif")) returned 0x20 [0206.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0206.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.378] GetLastError () returned 0x5 [0206.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0206.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b558) returned 1 Thread: id = 6563 os_tid = 0x178c [0197.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20 [0206.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.380] GetLastError () returned 0x5 [0206.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c808) returned 1 Thread: id = 6564 os_tid = 0x1790 [0197.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20 [0206.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.376] GetLastError () returned 0x5 [0212.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca78) returned 1 Thread: id = 6565 os_tid = 0x17a0 [0197.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif")) returned 0x20 [0197.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0197.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.705] GetLastError () returned 0x5 [0197.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0197.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a168) returned 1 Thread: id = 6566 os_tid = 0x17a4 [0197.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif")) returned 0x20 [0197.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0197.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.707] GetLastError () returned 0x5 [0197.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0197.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8021c80) returned 1 Thread: id = 6567 os_tid = 0x17a8 [0197.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif")) returned 0x20 [0197.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0197.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.710] GetLastError () returned 0x5 [0197.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0197.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3afe8) returned 1 Thread: id = 6568 os_tid = 0x17ac [0198.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec828 [0198.202] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" [0198.202] wcscat (in: _Dest=0x3dec828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" [0198.202] wcscat (in: _Dest=0x3dec828, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*" [0198.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100d40 [0198.203] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0198.203] wcscmp (_String1=".", _String2=".") returned 0 [0198.203] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.203] wcscmp (_String1="..", _String2=".") returned 1 [0198.203] wcscmp (_String1="..", _String2="..") returned 0 [0198.203] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4461500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.203] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.203] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d57bb8 [0198.204] wcscpy (in: _Dest=0x3d57bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" [0198.204] wcscat (in: _Dest=0x3d57bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" [0198.204] wcscat (in: _Dest=0x3d57bb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" [0201.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0201.909] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8100d40 | out: lpFindFileData=0x8100d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4461500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.910] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0201.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100d40) returned 1 [0201.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0201.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84061f0) returned 1 Thread: id = 6569 os_tid = 0x17d0 [0198.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec080 [0198.206] wcscpy (in: _Dest=0x3dec080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" [0198.206] wcscat (in: _Dest=0x3dec080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" [0198.206] wcscat (in: _Dest=0x3dec080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*" [0198.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe458 [0198.207] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0198.207] wcscmp (_String1=".", _String2=".") returned 0 [0198.207] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.207] wcscmp (_String1="..", _String2=".") returned 1 [0198.207] wcscmp (_String1="..", _String2="..") returned 0 [0198.207] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4488600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.207] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.207] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d56f00 [0198.208] wcscpy (in: _Dest=0x3d56f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" [0198.208] wcscat (in: _Dest=0x3d56f00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" [0198.208] wcscat (in: _Dest=0x3d56f00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" [0201.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d56f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0201.913] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80fe458 | out: lpFindFileData=0x80fe458*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4488600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.913] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0201.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe458) returned 1 [0201.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0201.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 Thread: id = 6570 os_tid = 0x17d4 [0198.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec3c8 [0198.215] wcscpy (in: _Dest=0x3dec3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" [0198.215] wcscat (in: _Dest=0x3dec3c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" [0198.215] wcscat (in: _Dest=0x3dec3c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*" [0198.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff798 [0198.215] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0198.215] wcscmp (_String1=".", _String2=".") returned 0 [0198.215] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.216] wcscmp (_String1="..", _String2=".") returned 1 [0198.216] wcscmp (_String1="..", _String2="..") returned 0 [0198.216] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.216] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.216] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d57150 [0198.216] wcscpy (in: _Dest=0x3d57150, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" [0198.216] wcscat (in: _Dest=0x3d57150, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" [0198.216] wcscat (in: _Dest=0x3d57150, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" [0201.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0201.916] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x80ff798 | out: lpFindFileData=0x80ff798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.916] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0201.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff798) returned 1 [0201.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0201.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 Thread: id = 6571 os_tid = 0x17d8 [0198.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec198 [0198.217] wcscpy (in: _Dest=0x3dec198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" [0198.217] wcscat (in: _Dest=0x3dec198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" [0198.217] wcscat (in: _Dest=0x3dec198, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*" [0198.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100608 [0198.217] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0198.218] wcscmp (_String1=".", _String2=".") returned 0 [0198.218] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.218] wcscmp (_String1="..", _String2=".") returned 1 [0198.218] wcscmp (_String1="..", _String2="..") returned 0 [0198.218] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.218] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.218] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d57278 [0198.218] wcscpy (in: _Dest=0x3d57278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" [0198.218] wcscat (in: _Dest=0x3d57278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" [0198.218] wcscat (in: _Dest=0x3d57278, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" [0201.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0201.919] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x8100608 | out: lpFindFileData=0x8100608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.919] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0201.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100608) returned 1 [0201.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0201.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 Thread: id = 6572 os_tid = 0x1414 [0198.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec5f8 [0198.219] wcscpy (in: _Dest=0x3dec5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" [0198.219] wcscat (in: _Dest=0x3dec5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" [0198.219] wcscat (in: _Dest=0x3dec5f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*" [0198.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffa00 [0198.219] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0198.219] wcscmp (_String1=".", _String2=".") returned 0 [0198.220] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.220] wcscmp (_String1="..", _String2=".") returned 1 [0198.220] wcscmp (_String1="..", _String2="..") returned 0 [0198.220] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4546ce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.220] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.220] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405058 [0198.220] wcscpy (in: _Dest=0x8405058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" [0198.220] wcscat (in: _Dest=0x8405058, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" [0198.220] wcscat (in: _Dest=0x8405058, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" [0201.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0201.921] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x80ffa00 | out: lpFindFileData=0x80ffa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4546ce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.922] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0201.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffa00) returned 1 [0201.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0201.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406768) returned 1 Thread: id = 6573 os_tid = 0x17e0 [0198.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec4e0 [0198.221] wcscpy (in: _Dest=0x3dec4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" [0198.221] wcscat (in: _Dest=0x3dec4e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" [0198.221] wcscat (in: _Dest=0x3dec4e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*" [0198.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe928 [0198.221] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0198.221] wcscmp (_String1=".", _String2=".") returned 0 [0198.221] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.222] wcscmp (_String1="..", _String2=".") returned 1 [0198.222] wcscmp (_String1="..", _String2="..") returned 0 [0198.222] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456b6d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.222] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.222] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d575f0 [0198.222] wcscpy (in: _Dest=0x3d575f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" [0198.222] wcscat (in: _Dest=0x3d575f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" [0198.222] wcscat (in: _Dest=0x3d575f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" [0201.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d575f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0201.924] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x80fe928 | out: lpFindFileData=0x80fe928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456b6d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.924] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0201.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe928) returned 1 [0201.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0201.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406308) returned 1 Thread: id = 6574 os_tid = 0x17e4 [0198.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3dec710 [0198.229] wcscpy (in: _Dest=0x3dec710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" [0198.229] wcscat (in: _Dest=0x3dec710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" [0198.229] wcscat (in: _Dest=0x3dec710, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*" [0198.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101210 [0198.229] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4591060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0198.230] wcscmp (_String1=".", _String2=".") returned 0 [0198.230] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4591060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.230] wcscmp (_String1="..", _String2=".") returned 1 [0198.230] wcscmp (_String1="..", _String2="..") returned 0 [0198.230] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.230] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.230] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x8404698 [0198.230] wcscpy (in: _Dest=0x8404698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" [0198.230] wcscat (in: _Dest=0x8404698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" [0198.231] wcscat (in: _Dest=0x8404698, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" [0201.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8404698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0201.927] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x8101210 | out: lpFindFileData=0x8101210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.927] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0201.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101210) returned 1 [0201.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0201.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 Thread: id = 6575 os_tid = 0x17e8 [0198.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec940 [0198.231] wcscpy (in: _Dest=0x3dec940, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" [0198.231] wcscat (in: _Dest=0x3dec940, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" [0198.231] wcscat (in: _Dest=0x3dec940, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*" [0198.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100ad8 [0198.232] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0198.232] wcscmp (_String1=".", _String2=".") returned 0 [0198.232] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.232] wcscmp (_String1="..", _String2=".") returned 1 [0198.232] wcscmp (_String1="..", _String2="..") returned 0 [0198.232] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45de2c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.232] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.232] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d57f30 [0198.232] wcscpy (in: _Dest=0x3d57f30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" [0198.232] wcscat (in: _Dest=0x3d57f30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" [0198.232] wcscat (in: _Dest=0x3d57f30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" [0201.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0201.462] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x8100ad8 | out: lpFindFileData=0x8100ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45de2c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.462] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0201.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100ad8) returned 1 [0201.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0201.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405a48) returned 1 Thread: id = 6576 os_tid = 0x17ec [0198.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3deb9f0 [0198.242] wcscpy (in: _Dest=0x3deb9f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" [0198.242] wcscat (in: _Dest=0x3deb9f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" [0198.242] wcscat (in: _Dest=0x3deb9f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*" [0198.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8102080 [0198.242] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0198.242] wcscmp (_String1=".", _String2=".") returned 0 [0198.242] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.243] wcscmp (_String1="..", _String2=".") returned 1 [0198.243] wcscmp (_String1="..", _String2="..") returned 0 [0198.243] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46053c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.243] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.243] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d58058 [0198.243] wcscpy (in: _Dest=0x3d58058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" [0198.243] wcscat (in: _Dest=0x3d58058, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" [0198.243] wcscat (in: _Dest=0x3d58058, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" [0198.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d58058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0198.454] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x8102080 | out: lpFindFileData=0x8102080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46053c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.454] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0198.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8102080) returned 1 [0198.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deb9f0) returned 1 [0198.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406420) returned 1 Thread: id = 6577 os_tid = 0x17f0 [0198.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bc768 [0198.245] wcscpy (in: _Dest=0x30bc768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" [0198.245] wcscat (in: _Dest=0x30bc768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" [0198.245] wcscat (in: _Dest=0x30bc768, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*" [0198.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fedf8 [0198.246] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0198.246] wcscmp (_String1=".", _String2=".") returned 0 [0198.246] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.246] wcscmp (_String1="..", _String2=".") returned 1 [0198.246] wcscmp (_String1="..", _String2="..") returned 0 [0198.246] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4629db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.246] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.246] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d57e08 [0198.247] wcscpy (in: _Dest=0x3d57e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" [0198.247] wcscat (in: _Dest=0x3d57e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" [0198.247] wcscat (in: _Dest=0x3d57e08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" [0198.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0198.457] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x80fedf8 | out: lpFindFileData=0x80fedf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4629db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.457] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0198.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fedf8) returned 1 [0198.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0198.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ab0) returned 1 Thread: id = 6578 os_tid = 0x17f4 [0198.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bd258 [0198.247] wcscpy (in: _Dest=0x30bd258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" [0198.247] wcscat (in: _Dest=0x30bd258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" [0198.247] wcscat (in: _Dest=0x30bd258, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*" [0198.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81016e0 [0198.248] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0198.248] wcscmp (_String1=".", _String2=".") returned 0 [0198.248] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.248] wcscmp (_String1="..", _String2=".") returned 1 [0198.248] wcscmp (_String1="..", _String2="..") returned 0 [0198.248] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c3aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.248] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.248] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d57ce0 [0198.248] wcscpy (in: _Dest=0x3d57ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" [0198.248] wcscat (in: _Dest=0x3d57ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" [0198.249] wcscat (in: _Dest=0x3d57ce0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" [0198.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d57ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0198.459] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x81016e0 | out: lpFindFileData=0x81016e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c3aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.459] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0198.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81016e0) returned 1 [0198.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0198.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406538) returned 1 Thread: id = 6579 os_tid = 0x17f8 [0198.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bd370 [0198.255] wcscpy (in: _Dest=0x30bd370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" [0198.256] wcscat (in: _Dest=0x30bd370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" [0198.256] wcscat (in: _Dest=0x30bd370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*" [0198.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff060 [0198.256] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0198.256] wcscmp (_String1=".", _String2=".") returned 0 [0198.256] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.256] wcscmp (_String1="..", _String2=".") returned 1 [0198.257] wcscmp (_String1="..", _String2="..") returned 0 [0198.257] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e8490, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.257] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.257] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d573a0 [0198.257] wcscpy (in: _Dest=0x3d573a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" [0198.257] wcscat (in: _Dest=0x3d573a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" [0198.257] wcscat (in: _Dest=0x3d573a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" [0198.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d573a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a98 [0198.471] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x80ff060 | out: lpFindFileData=0x80ff060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e8490, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.471] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0198.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff060) returned 1 [0198.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0198.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405930) returned 1 Thread: id = 6580 os_tid = 0x17fc [0198.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bd028 [0198.258] wcscpy (in: _Dest=0x30bd028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" [0198.258] wcscat (in: _Dest=0x30bd028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" [0198.258] wcscat (in: _Dest=0x30bd028, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*" [0198.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101948 [0198.258] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0198.259] wcscmp (_String1=".", _String2=".") returned 0 [0198.259] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.259] wcscmp (_String1="..", _String2=".") returned 1 [0198.259] wcscmp (_String1="..", _String2="..") returned 0 [0198.259] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.259] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.259] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d582a8 [0198.259] wcscpy (in: _Dest=0x3d582a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" [0198.259] wcscat (in: _Dest=0x3d582a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" [0198.259] wcscat (in: _Dest=0x3d582a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" [0198.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d582a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0198.473] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x8101948 | out: lpFindFileData=0x8101948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.473] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0198.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101948) returned 1 [0198.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0198.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405ea8) returned 1 Thread: id = 6581 os_tid = 0x7dc [0198.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc1f0 [0198.260] wcscpy (in: _Dest=0x30bc1f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" [0198.260] wcscat (in: _Dest=0x30bc1f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" [0198.260] wcscat (in: _Dest=0x30bc1f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*" [0198.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff530 [0198.260] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0198.261] wcscmp (_String1=".", _String2=".") returned 0 [0198.261] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.261] wcscmp (_String1="..", _String2=".") returned 1 [0198.261] wcscmp (_String1="..", _String2="..") returned 0 [0198.261] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475b080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.261] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.261] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d58180 [0198.261] wcscpy (in: _Dest=0x3d58180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" [0198.261] wcscat (in: _Dest=0x3d58180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" [0198.261] wcscat (in: _Dest=0x3d58180, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" [0198.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d58180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0198.406] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x80ff530 | out: lpFindFileData=0x80ff530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475b080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.406] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0198.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff530) returned 1 [0198.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0198.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405d90) returned 1 Thread: id = 6582 os_tid = 0x3ec [0198.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc538 [0198.262] wcscpy (in: _Dest=0x30bc538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" [0198.262] wcscat (in: _Dest=0x30bc538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" [0198.262] wcscat (in: _Dest=0x30bc538, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*" [0198.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffed0 [0198.262] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0198.263] wcscmp (_String1=".", _String2=".") returned 0 [0198.263] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.263] wcscmp (_String1="..", _String2=".") returned 1 [0198.263] wcscmp (_String1="..", _String2="..") returned 0 [0198.263] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4782180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.263] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.263] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d56498 [0198.263] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" [0198.263] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" [0198.263] wcscat (in: _Dest=0x3d56498, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" [0198.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0198.409] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x80ffed0 | out: lpFindFileData=0x80ffed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4782180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.409] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0198.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffed0) returned 1 [0198.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc538) returned 1 [0198.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405c78) returned 1 Thread: id = 6583 os_tid = 0x2a4 [0198.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc308 [0198.264] wcscpy (in: _Dest=0x30bc308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" [0198.264] wcscat (in: _Dest=0x30bc308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" [0198.264] wcscat (in: _Dest=0x30bc308, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*" [0198.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100870 [0198.264] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cc500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47cc500, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0198.265] wcscmp (_String1=".", _String2=".") returned 0 [0198.265] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cc500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47cc500, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.265] wcscmp (_String1="..", _String2=".") returned 1 [0198.265] wcscmp (_String1="..", _String2="..") returned 0 [0198.265] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.265] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.265] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d574c8 [0198.265] wcscpy (in: _Dest=0x3d574c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" [0198.265] wcscat (in: _Dest=0x3d574c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" [0198.265] wcscat (in: _Dest=0x3d574c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" [0198.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d574c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0198.412] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8100870 | out: lpFindFileData=0x8100870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.412] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0198.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100870) returned 1 [0198.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0198.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405b60) returned 1 Thread: id = 6584 os_tid = 0xec0 [0198.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bbd90 [0198.266] wcscpy (in: _Dest=0x30bbd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" [0198.266] wcscat (in: _Dest=0x30bbd90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" [0198.266] wcscat (in: _Dest=0x30bbd90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*" [0198.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100138 [0198.266] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47f2660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0202.732] wcscmp (_String1=".", _String2=".") returned 0 [0202.732] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47f2660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.732] wcscmp (_String1="..", _String2=".") returned 1 [0202.732] wcscmp (_String1="..", _String2="..") returned 0 [0202.732] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.732] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.732] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8400ca8 [0202.732] wcscpy (in: _Dest=0x8400ca8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" [0202.732] wcscat (in: _Dest=0x8400ca8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" [0202.732] wcscat (in: _Dest=0x8400ca8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" [0203.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8400ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0203.308] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x8100138 | out: lpFindFileData=0x8100138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.308] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0203.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100138) returned 1 [0203.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 [0203.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406bc8) returned 1 Thread: id = 6585 os_tid = 0x218 [0198.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc650 [0198.267] wcscpy (in: _Dest=0x30bc650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" [0198.267] wcscat (in: _Dest=0x30bc650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" [0198.267] wcscat (in: _Dest=0x30bc650, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*" [0198.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8100fa8 [0198.267] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0202.733] wcscmp (_String1=".", _String2=".") returned 0 [0202.733] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.733] wcscmp (_String1="..", _String2=".") returned 1 [0202.733] wcscmp (_String1="..", _String2="..") returned 0 [0202.733] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.733] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.733] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x84014c0 [0202.733] wcscpy (in: _Dest=0x84014c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" [0202.733] wcscat (in: _Dest=0x84014c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" [0202.733] wcscat (in: _Dest=0x84014c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" [0203.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x84014c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a18 [0203.050] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x8100fa8 | out: lpFindFileData=0x8100fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.051] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0203.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8100fa8) returned 1 [0203.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0203.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ce0) returned 1 Thread: id = 6586 os_tid = 0x300 [0198.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc420 [0198.270] wcscpy (in: _Dest=0x30bc420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" [0198.270] wcscat (in: _Dest=0x30bc420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" [0198.270] wcscat (in: _Dest=0x30bc420, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*" [0198.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101e18 [0198.270] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0202.734] wcscmp (_String1=".", _String2=".") returned 0 [0202.734] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.734] wcscmp (_String1="..", _String2=".") returned 1 [0202.734] wcscmp (_String1="..", _String2="..") returned 0 [0202.734] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.734] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.734] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8401838 [0202.734] wcscpy (in: _Dest=0x8401838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" [0202.734] wcscat (in: _Dest=0x8401838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" [0202.734] wcscat (in: _Dest=0x8401838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" [0203.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0203.053] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x8101e18 | out: lpFindFileData=0x8101e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.053] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0203.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101e18) returned 1 [0203.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0203.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406df8) returned 1 Thread: id = 6587 os_tid = 0x7a8 [0198.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bcce0 [0198.271] wcscpy (in: _Dest=0x30bcce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" [0198.271] wcscat (in: _Dest=0x30bcce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" [0198.271] wcscat (in: _Dest=0x30bcce0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*" [0198.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ffc68 [0198.271] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe483e920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe483e920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0202.734] wcscmp (_String1=".", _String2=".") returned 0 [0202.735] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe483e920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe483e920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.735] wcscmp (_String1="..", _String2=".") returned 1 [0202.735] wcscmp (_String1="..", _String2="..") returned 0 [0202.735] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4840860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.735] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.735] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8401148 [0202.735] wcscpy (in: _Dest=0x8401148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" [0202.735] wcscat (in: _Dest=0x8401148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" [0202.735] wcscat (in: _Dest=0x8401148, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" [0203.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0203.055] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x80ffc68 | out: lpFindFileData=0x80ffc68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4840860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.055] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0203.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ffc68) returned 1 [0203.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0203.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406f10) returned 1 Thread: id = 6588 os_tid = 0x4d0 [0198.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bba48 [0198.272] wcscpy (in: _Dest=0x30bba48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" [0198.272] wcscat (in: _Dest=0x30bba48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" [0198.272] wcscat (in: _Dest=0x30bba48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*" [0198.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80fe6c0 [0198.272] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4864a80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4864a80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0202.735] wcscmp (_String1=".", _String2=".") returned 0 [0202.735] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4864a80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4864a80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.736] wcscmp (_String1="..", _String2=".") returned 1 [0202.736] wcscmp (_String1="..", _String2="..") returned 0 [0202.736] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4864a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4865250, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.736] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.736] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81ef770 [0202.736] wcscpy (in: _Dest=0x81ef770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" [0202.736] wcscat (in: _Dest=0x81ef770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" [0202.736] wcscat (in: _Dest=0x81ef770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" [0203.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0203.057] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x80fe6c0 | out: lpFindFileData=0x80fe6c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4864a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4865250, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.057] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0203.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80fe6c0) returned 1 [0203.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba48) returned 1 [0203.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407028) returned 1 Thread: id = 6589 os_tid = 0x784 [0198.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc0d8 [0198.273] wcscpy (in: _Dest=0x30bc0d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" [0198.273] wcscat (in: _Dest=0x30bc0d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" [0198.273] wcscat (in: _Dest=0x30bc0d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*" [0198.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x81003a0 [0198.273] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488abe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe488abe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0202.736] wcscmp (_String1=".", _String2=".") returned 0 [0202.736] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488abe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe488abe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.737] wcscmp (_String1="..", _String2=".") returned 1 [0202.737] wcscmp (_String1="..", _String2="..") returned 0 [0202.737] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488c350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.737] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.737] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81ef648 [0202.737] wcscpy (in: _Dest=0x81ef648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" [0202.737] wcscat (in: _Dest=0x81ef648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" [0202.737] wcscat (in: _Dest=0x81ef648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" [0203.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ef648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0203.060] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x81003a0 | out: lpFindFileData=0x81003a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488c350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.060] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0203.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81003a0) returned 1 [0203.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0203.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407140) returned 1 Thread: id = 6590 os_tid = 0x5e8 [0198.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bb930 [0198.274] wcscpy (in: _Dest=0x30bb930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" [0198.274] wcscat (in: _Dest=0x30bb930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" [0198.274] wcscat (in: _Dest=0x30bb930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*" [0198.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101bb0 [0198.274] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48b0d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d6ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48d6ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0202.737] wcscmp (_String1=".", _String2=".") returned 0 [0202.737] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48b0d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d6ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48d6ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.738] wcscmp (_String1="..", _String2=".") returned 1 [0202.738] wcscmp (_String1="..", _String2="..") returned 0 [0202.738] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48d6ea0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d7e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.738] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.738] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81efd38 [0202.738] wcscpy (in: _Dest=0x81efd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" [0202.738] wcscat (in: _Dest=0x81efd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" [0202.738] wcscat (in: _Dest=0x81efd38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" [0203.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81efd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c [0203.043] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x8101bb0 | out: lpFindFileData=0x8101bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48d6ea0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d7e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.043] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0203.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101bb0) returned 1 [0203.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 [0203.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407258) returned 1 Thread: id = 6591 os_tid = 0xeec [0198.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bb5e8 [0198.275] wcscpy (in: _Dest=0x30bb5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" [0198.275] wcscat (in: _Dest=0x30bb5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" [0198.275] wcscat (in: _Dest=0x30bb5e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*" [0198.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x80ff2c8 [0198.275] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48fd000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4923160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0202.738] wcscmp (_String1=".", _String2=".") returned 0 [0202.738] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48fd000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4923160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.739] wcscmp (_String1="..", _String2=".") returned 1 [0202.739] wcscmp (_String1="..", _String2="..") returned 0 [0202.739] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4923160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.739] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.739] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8405190 [0202.739] wcscpy (in: _Dest=0x8405190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" [0202.739] wcscat (in: _Dest=0x8405190, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" [0202.739] wcscat (in: _Dest=0x8405190, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" [0202.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8405190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bbc [0202.872] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x80ff2c8 | out: lpFindFileData=0x80ff2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4923160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.872] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0202.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80ff2c8) returned 1 [0202.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0202.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407370) returned 1 Thread: id = 6592 os_tid = 0xef0 [0198.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bcbc8 [0198.304] wcscpy (in: _Dest=0x30bcbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" [0198.304] wcscat (in: _Dest=0x30bcbc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" [0198.304] wcscat (in: _Dest=0x30bcbc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*" [0198.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x8101478 [0198.304] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49492c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49492c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0202.739] wcscmp (_String1=".", _String2=".") returned 0 [0202.739] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49492c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49492c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.739] wcscmp (_String1="..", _String2=".") returned 1 [0202.740] wcscmp (_String1="..", _String2="..") returned 0 [0202.740] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe494aa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.740] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.740] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403f48 [0202.740] wcscpy (in: _Dest=0x8403f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" [0202.740] wcscat (in: _Dest=0x8403f48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" [0202.740] wcscat (in: _Dest=0x8403f48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" [0202.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0202.874] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x8101478 | out: lpFindFileData=0x8101478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe494aa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.874] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0202.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8101478) returned 1 [0202.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0202.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407488) returned 1 Thread: id = 6593 os_tid = 0xef4 [0198.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bbb60 [0198.305] wcscpy (in: _Dest=0x30bbb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" [0198.305] wcscat (in: _Dest=0x30bbb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" [0198.305] wcscat (in: _Dest=0x30bbb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*" [0198.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808aa00 [0198.305] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe496f420, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0202.740] wcscmp (_String1=".", _String2=".") returned 0 [0202.740] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe496f420, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.740] wcscmp (_String1="..", _String2=".") returned 1 [0202.740] wcscmp (_String1="..", _String2="..") returned 0 [0202.740] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.741] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.741] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81f1458 [0202.741] wcscpy (in: _Dest=0x81f1458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" [0202.741] wcscat (in: _Dest=0x81f1458, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" [0202.741] wcscat (in: _Dest=0x81f1458, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" [0202.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0202.881] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x808aa00 | out: lpFindFileData=0x808aa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.881] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0202.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808aa00) returned 1 [0202.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0202.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84075a0) returned 1 Thread: id = 6594 os_tid = 0xa20 [0198.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc998 [0198.306] wcscpy (in: _Dest=0x30bc998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" [0198.306] wcscat (in: _Dest=0x30bc998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" [0198.306] wcscat (in: _Dest=0x30bc998, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*" [0198.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808ac68 [0198.306] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x808ac68 | out: lpFindFileData=0x808ac68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4995580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4995580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0202.741] wcscmp (_String1=".", _String2=".") returned 0 [0202.741] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x808ac68 | out: lpFindFileData=0x808ac68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4995580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4995580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.741] wcscmp (_String1="..", _String2=".") returned 1 [0202.741] wcscmp (_String1="..", _String2="..") returned 0 [0202.741] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x808ac68 | out: lpFindFileData=0x808ac68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4996520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.741] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.741] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81f1330 [0202.742] wcscpy (in: _Dest=0x81f1330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" [0202.742] wcscat (in: _Dest=0x81f1330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" [0202.742] wcscat (in: _Dest=0x81f1330, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" [0202.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0202.889] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x808ac68 | out: lpFindFileData=0x808ac68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4996520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.889] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0202.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808ac68) returned 1 [0202.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0202.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84076b8) returned 1 Thread: id = 6595 os_tid = 0xee8 [0198.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bb818 [0198.307] wcscpy (in: _Dest=0x30bb818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" [0198.307] wcscat (in: _Dest=0x30bb818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" [0198.307] wcscat (in: _Dest=0x30bb818, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*" [0198.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x808aed0 [0198.307] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x808aed0 | out: lpFindFileData=0x808aed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0201.826] wcscmp (_String1=".", _String2=".") returned 0 [0201.826] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x808aed0 | out: lpFindFileData=0x808aed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.826] wcscmp (_String1="..", _String2=".") returned 1 [0201.826] wcscmp (_String1="..", _String2="..") returned 0 [0201.826] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x808aed0 | out: lpFindFileData=0x808aed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bd620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.827] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.827] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8400b80 [0201.827] wcscpy (in: _Dest=0x8400b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" [0201.827] wcscat (in: _Dest=0x8400b80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" [0201.827] wcscat (in: _Dest=0x8400b80, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" [0201.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8400b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0201.948] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x808aed0 | out: lpFindFileData=0x808aed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bd620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.948] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0201.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x808aed0) returned 1 [0201.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0201.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84077d0) returned 1 Thread: id = 6596 os_tid = 0xee4 [0201.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x8405930 [0201.369] wcscpy (in: _Dest=0x8405930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" [0201.370] wcscat (in: _Dest=0x8405930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" [0201.370] wcscat (in: _Dest=0x8405930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*" [0201.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09ec0 [0201.370] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a079a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a079a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0201.827] wcscmp (_String1=".", _String2=".") returned 0 [0201.828] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a079a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a079a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.828] wcscmp (_String1="..", _String2=".") returned 1 [0201.828] wcscmp (_String1="..", _String2="..") returned 0 [0201.828] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a7bd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.828] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.828] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x8401710 [0201.828] wcscpy (in: _Dest=0x8401710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" [0201.828] wcscat (in: _Dest=0x8401710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" [0201.828] wcscat (in: _Dest=0x8401710, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" [0201.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8401710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc [0201.951] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a7bd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.952] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0201.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09ec0) returned 1 [0201.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405930) returned 1 [0201.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 Thread: id = 6598 os_tid = 0xa70 [0201.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif")) returned 0x20 [0201.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0201.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.372] GetLastError () returned 0x5 [0201.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0201.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5dc8) returned 1 Thread: id = 6599 os_tid = 0x1418 [0201.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif")) returned 0x20 [0201.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.374] GetLastError () returned 0x5 [0201.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6600 os_tid = 0x1420 [0201.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif")) returned 0x20 [0201.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.376] GetLastError () returned 0x5 [0201.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6601 os_tid = 0x1428 [0201.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da408 [0201.385] wcscpy (in: _Dest=0x81da408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0201.385] wcscat (in: _Dest=0x81da408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\" [0201.385] wcscat (in: _Dest=0x81da408, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*" [0201.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07d10 [0201.385] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0206.422] wcscmp (_String1=".", _String2=".") returned 0 [0206.422] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.422] wcscmp (_String1="..", _String2=".") returned 1 [0206.422] wcscmp (_String1="..", _String2="..") returned 0 [0206.422] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0206.422] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0206.422] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0206.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3333a8 [0206.422] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0206.422] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\" [0206.422] wcscat (in: _Dest=0x3333a8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" [0206.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0206.423] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0206.423] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0206.423] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0206.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0206.423] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0206.423] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\" [0206.423] wcscat (in: _Dest=0x333828, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" [0206.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0206.424] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f07d10 | out: lpFindFileData=0x3f07d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0206.424] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0206.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07d10) returned 1 [0206.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da408) returned 1 [0206.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2cf48) returned 1 Thread: id = 6602 os_tid = 0x142c [0201.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css")) returned 0x20 [0203.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0204.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.350] GetLastError () returned 0x5 [0206.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0206.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da2a8) returned 1 Thread: id = 6603 os_tid = 0x12dc [0201.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css")) returned 0x20 [0205.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0205.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.249] GetLastError () returned 0x5 [0206.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0206.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41f48) returned 1 Thread: id = 6604 os_tid = 0x1430 [0201.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x81da098 [0201.399] wcscpy (in: _Dest=0x81da098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0201.399] wcscat (in: _Dest=0x81da098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0201.400] wcscat (in: _Dest=0x81da098, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*" [0201.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09050 [0201.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0206.414] wcscmp (_String1=".", _String2=".") returned 0 [0206.414] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.414] wcscmp (_String1="..", _String2=".") returned 1 [0206.414] wcscmp (_String1="..", _String2="..") returned 0 [0206.414] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0206.414] wcscmp (_String1="background.gif", _String2=".") returned 1 [0206.414] wcscmp (_String1="background.gif", _String2="..") returned 1 [0206.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c738 [0206.414] wcscpy (in: _Dest=0x3e1c738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0206.414] wcscat (in: _Dest=0x3e1c738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0206.414] wcscat (in: _Dest=0x3e1c738, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" [0206.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0206.415] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0206.415] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0206.415] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0206.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e35410 [0206.416] wcscpy (in: _Dest=0x3e35410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0206.416] wcscat (in: _Dest=0x3e35410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0206.416] wcscat (in: _Dest=0x3e35410, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" [0206.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0206.417] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0206.417] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0206.417] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0206.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e35988 [0206.417] wcscpy (in: _Dest=0x3e35988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0206.417] wcscat (in: _Dest=0x3e35988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0206.418] wcscat (in: _Dest=0x3e35988, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" [0206.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e35988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0206.418] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f09050 | out: lpFindFileData=0x3f09050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0206.419] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0206.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09050) returned 1 [0206.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da098) returned 1 [0206.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da828) returned 1 Thread: id = 6605 os_tid = 0x12e8 [0201.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css")) returned 0x20 [0206.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0206.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.446] GetLastError () returned 0x5 [0206.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0206.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41988) returned 1 Thread: id = 6606 os_tid = 0x12ec [0201.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3d41af8 [0201.401] wcscpy (in: _Dest=0x3d41af8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0201.401] wcscat (in: _Dest=0x3d41af8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0201.401] wcscat (in: _Dest=0x3d41af8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*" [0201.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0aac8 [0201.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x460d0670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0209.871] wcscmp (_String1=".", _String2=".") returned 0 [0209.871] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x460d0670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.871] wcscmp (_String1="..", _String2=".") returned 1 [0209.871] wcscmp (_String1="..", _String2="..") returned 0 [0209.871] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1 [0209.871] wcscmp (_String1="arrow.png", _String2=".") returned 1 [0209.871] wcscmp (_String1="arrow.png", _String2="..") returned 1 [0209.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x8332930 [0209.871] wcscpy (in: _Dest=0x8332930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0209.871] wcscat (in: _Dest=0x8332930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0209.871] wcscat (in: _Dest=0x8332930, _Source="arrow.png" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" [0211.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0211.592] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1 [0211.592] wcscmp (_String1="Document.gif", _String2=".") returned 1 [0211.592] wcscmp (_String1="Document.gif", _String2="..") returned 1 [0211.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x8333290 [0211.592] wcscpy (in: _Dest=0x8333290, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0211.592] wcscat (in: _Dest=0x8333290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0211.592] wcscat (in: _Dest=0x8333290, _Source="Document.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" [0211.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0211.594] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1 [0211.594] wcscmp (_String1="Generic.gif", _String2=".") returned 1 [0211.594] wcscmp (_String1="Generic.gif", _String2="..") returned 1 [0211.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x8333358 [0211.594] wcscpy (in: _Dest=0x8333358, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0211.594] wcscat (in: _Dest=0x8333358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0211.594] wcscat (in: _Dest=0x8333358, _Source="Generic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" [0211.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b90 [0211.595] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1 [0211.595] wcscmp (_String1="gradient.png", _String2=".") returned 1 [0211.595] wcscmp (_String1="gradient.png", _String2="..") returned 1 [0211.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x8333420 [0211.595] wcscpy (in: _Dest=0x8333420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0211.595] wcscat (in: _Dest=0x8333420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0211.595] wcscat (in: _Dest=0x8333420, _Source="gradient.png" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" [0211.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0211.597] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1 [0211.597] wcscmp (_String1="Main.gif", _String2=".") returned 1 [0211.597] wcscmp (_String1="Main.gif", _String2="..") returned 1 [0211.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x81f3dc8 [0211.597] wcscpy (in: _Dest=0x81f3dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0211.597] wcscat (in: _Dest=0x81f3dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0211.597] wcscat (in: _Dest=0x81f3dc8, _Source="Main.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" [0211.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0211.598] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1 [0211.598] wcscmp (_String1="Person.gif", _String2=".") returned 1 [0211.598] wcscmp (_String1="Person.gif", _String2="..") returned 1 [0211.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x83334e8 [0211.598] wcscpy (in: _Dest=0x83334e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0211.598] wcscat (in: _Dest=0x83334e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0211.598] wcscat (in: _Dest=0x83334e8, _Source="Person.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" [0211.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83334e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0211.599] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1 [0211.599] wcscmp (_String1="Response.gif", _String2=".") returned 1 [0211.600] wcscmp (_String1="Response.gif", _String2="..") returned 1 [0211.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x83335b0 [0211.600] wcscpy (in: _Dest=0x83335b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0211.600] wcscat (in: _Dest=0x83335b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0211.600] wcscat (in: _Dest=0x83335b0, _Source="Response.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" [0211.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x83335b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0211.601] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 0 [0211.601] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0211.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0aac8) returned 1 [0211.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41af8) returned 1 [0211.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9bc8) returned 1 Thread: id = 6607 os_tid = 0x368 [0201.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css")) returned 0x20 [0206.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", dwFileAttributes=0x20) returned 0 [0206.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.401] GetLastError () returned 0x5 [0206.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", dwFileAttributes=0x20) returned 0 [0206.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d20) returned 1 Thread: id = 6608 os_tid = 0x1538 [0201.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css")) returned 0x20 [0206.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", dwFileAttributes=0x20) returned 0 [0206.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.399] GetLastError () returned 0x5 [0206.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", dwFileAttributes=0x20) returned 0 [0206.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 6609 os_tid = 0xb94 [0201.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css")) returned 0x20 [0206.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", dwFileAttributes=0x20) returned 0 [0206.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.398] GetLastError () returned 0x5 [0206.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", dwFileAttributes=0x20) returned 0 [0206.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35410) returned 1 Thread: id = 6610 os_tid = 0x153c [0201.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css")) returned 0x20 [0206.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", dwFileAttributes=0x20) returned 0 [0206.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.396] GetLastError () returned 0x5 [0206.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", dwFileAttributes=0x20) returned 0 [0206.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35988) returned 1 Thread: id = 6611 os_tid = 0x1cb8 [0201.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css")) returned 0x20 [0206.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", dwFileAttributes=0x20) returned 0 [0206.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.394] GetLastError () returned 0x5 [0206.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", dwFileAttributes=0x20) returned 0 [0206.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e354d8) returned 1 Thread: id = 6612 os_tid = 0x1cbc [0201.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3d404b0 [0201.404] wcscpy (in: _Dest=0x3d404b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0201.404] wcscat (in: _Dest=0x3d404b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0201.404] wcscat (in: _Dest=0x3d404b0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*" [0201.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f07840 [0201.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0206.383] wcscmp (_String1=".", _String2=".") returned 0 [0206.383] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.383] wcscmp (_String1="..", _String2=".") returned 1 [0206.383] wcscmp (_String1="..", _String2="..") returned 0 [0206.383] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0206.383] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0206.383] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0206.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x8332f70 [0206.384] wcscpy (in: _Dest=0x8332f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0206.384] wcscat (in: _Dest=0x8332f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0206.384] wcscat (in: _Dest=0x8332f70, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" [0206.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8332f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0206.385] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0206.385] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0206.385] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0206.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e1c808 [0206.385] wcscpy (in: _Dest=0x3e1c808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0206.385] wcscat (in: _Dest=0x3e1c808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0206.385] wcscat (in: _Dest=0x3e1c808, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" [0206.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e1c808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0206.390] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0206.391] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0206.391] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0206.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x8333038 [0206.391] wcscpy (in: _Dest=0x8333038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0206.391] wcscat (in: _Dest=0x8333038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0206.391] wcscat (in: _Dest=0x8333038, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" [0206.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0206.392] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f07840 | out: lpFindFileData=0x3f07840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0206.392] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0206.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f07840) returned 1 [0206.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404b0) returned 1 [0206.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40d50) returned 1 Thread: id = 6613 os_tid = 0x186c [0201.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css")) returned 0x20 [0206.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0206.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.382] GetLastError () returned 0x5 [0206.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0206.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 6614 os_tid = 0x1dc0 [0201.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css")) returned 0x20 [0206.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0206.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.406] GetLastError () returned 0x5 [0206.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0206.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9fe8) returned 1 Thread: id = 6615 os_tid = 0x1dc4 [0201.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e2dc68 [0201.406] wcscpy (in: _Dest=0x3e2dc68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0201.406] wcscat (in: _Dest=0x3e2dc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0201.406] wcscat (in: _Dest=0x3e2dc68, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*" [0201.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f086b0 [0201.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0206.440] wcscmp (_String1=".", _String2=".") returned 0 [0206.440] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.440] wcscmp (_String1="..", _String2=".") returned 1 [0206.440] wcscmp (_String1="..", _String2="..") returned 0 [0206.440] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0206.440] wcscmp (_String1="background.gif", _String2=".") returned 1 [0206.440] wcscmp (_String1="background.gif", _String2="..") returned 1 [0206.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x8333100 [0206.440] wcscpy (in: _Dest=0x8333100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0206.440] wcscat (in: _Dest=0x8333100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0206.440] wcscat (in: _Dest=0x8333100, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" [0206.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8333100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0206.441] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0206.441] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0206.441] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0206.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81f3a08 [0206.441] wcscpy (in: _Dest=0x81f3a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0206.441] wcscat (in: _Dest=0x81f3a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0206.441] wcscat (in: _Dest=0x81f3a08, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" [0206.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0206.442] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0206.442] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0206.442] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81f3ac8 [0206.442] wcscpy (in: _Dest=0x81f3ac8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0206.442] wcscat (in: _Dest=0x81f3ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0206.442] wcscat (in: _Dest=0x81f3ac8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" [0206.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0206.443] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0206.443] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0206.443] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0206.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x81f3b88 [0206.443] wcscpy (in: _Dest=0x81f3b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0206.443] wcscat (in: _Dest=0x81f3b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0206.443] wcscat (in: _Dest=0x81f3b88, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" [0206.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0206.444] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f086b0 | out: lpFindFileData=0x3f086b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0206.444] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0206.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f086b0) returned 1 [0206.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dc68) returned 1 [0206.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d530) returned 1 Thread: id = 6616 os_tid = 0x1dc8 [0201.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css")) returned 0x20 [0206.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0206.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.407] GetLastError () returned 0x5 [0206.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0206.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c78) returned 1 Thread: id = 6617 os_tid = 0x1df8 [0201.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x81da6c8 [0201.407] wcscpy (in: _Dest=0x81da6c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0201.407] wcscat (in: _Dest=0x81da6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0201.407] wcscat (in: _Dest=0x81da6c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*" [0201.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a860 [0201.407] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0206.426] wcscmp (_String1=".", _String2=".") returned 0 [0206.426] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.426] wcscmp (_String1="..", _String2=".") returned 1 [0206.426] wcscmp (_String1="..", _String2="..") returned 0 [0206.426] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0206.426] wcscmp (_String1="background.gif", _String2=".") returned 1 [0206.426] wcscmp (_String1="background.gif", _String2="..") returned 1 [0206.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e354d8 [0206.426] wcscpy (in: _Dest=0x3e354d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0206.426] wcscat (in: _Dest=0x3e354d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0206.426] wcscat (in: _Dest=0x3e354d8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" [0206.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e354d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0206.427] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0206.427] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0206.427] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0206.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333a68 [0206.427] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0206.428] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0206.428] wcscat (in: _Dest=0x333a68, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" [0206.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0206.429] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0206.429] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0206.429] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0206.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333228 [0206.429] wcscpy (in: _Dest=0x333228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0206.429] wcscat (in: _Dest=0x333228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0206.429] wcscat (in: _Dest=0x333228, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" [0206.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x333228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0206.430] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0206.431] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0206.431] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x81f3948 [0206.431] wcscpy (in: _Dest=0x81f3948, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0206.431] wcscat (in: _Dest=0x81f3948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0206.431] wcscat (in: _Dest=0x81f3948, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" [0206.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f3948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0 [0206.437] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f0a860 | out: lpFindFileData=0x3f0a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0206.437] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0206.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a860) returned 1 [0206.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6c8) returned 1 [0206.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2dd10) returned 1 Thread: id = 6618 os_tid = 0x1dfc [0201.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css")) returned 0x20 [0206.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0206.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.409] GetLastError () returned 0x5 [0206.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0206.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da1f8) returned 1 Thread: id = 6619 os_tid = 0x1f40 [0201.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css")) returned 0x20 [0206.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0206.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.411] GetLastError () returned 0x5 [0206.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0206.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da778) returned 1 Thread: id = 6620 os_tid = 0x1f44 [0201.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css")) returned 0x20 [0206.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0206.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.421] GetLastError () returned 0x5 [0206.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0206.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 6621 os_tid = 0x1f48 [0201.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css")) returned 0x20 [0206.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0206.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.349] GetLastError () returned 0x5 [0206.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0206.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40340) returned 1 Thread: id = 6622 os_tid = 0x1f4c [0201.413] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json")) returned 0x2020 [0201.413] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0211.719] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1960 [0211.720] GetFileSizeEx (in: hFile=0x1960, lpFileSize=0x931fe60 | out: lpFileSize=0x931fe60*=710) returned 1 [0211.720] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x2c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.720] ReadFile (in: hFile=0x1960, lpBuffer=0x931fe6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x931fe48, lpOverlapped=0x0 | out: lpBuffer=0x931fe6c*, lpNumberOfBytesRead=0x931fe48*=0x4, lpOverlapped=0x0) returned 1 [0211.723] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063840 [0211.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063868 [0211.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80637f0 [0211.723] NtQuerySystemTime (in: CurrentTime=0x931fde8 | out: CurrentTime=0x931fde8*=132471540794484000) returned 0x0 [0211.723] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x5b49ac08 [0211.723] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x606f9922 [0211.723] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x38a49003 [0211.723] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0xbfda364 [0211.723] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x7584c8cd [0211.723] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x50560b06 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x10ed4bc0 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x6e9387d2 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x11a71852 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x59da94f9 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x2b4d176f [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x6c890465 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x5b94ef2c [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x4abf2fa3 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x42393a29 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x6c11c767 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x4e524840 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x7d3df296 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x7016038f [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x3eb1392 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x39789f7f [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x731d4182 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x6dac9e4c [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x2bc61f93 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x767bb792 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x50123559 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x39a072f0 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x239b224b [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0xf375d16 [0211.724] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0xb8c7806 [0211.725] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x5f378984 [0211.725] RtlRandomEx (in: Seed=0x931fde0 | out: Seed=0x931fde0) returned 0x6c0e6617 [0211.734] ReadFile (in: hFile=0x1960, lpBuffer=0x8375990, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x931fddc, lpOverlapped=0x0 | out: lpBuffer=0x8375990*, lpNumberOfBytesRead=0x931fddc*=0x2c6, lpOverlapped=0x0) returned 1 [0211.734] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.734] WriteFile (in: hFile=0x1960, lpBuffer=0x8362d68*, nNumberOfBytesToWrite=0x2c6, lpNumberOfBytesWritten=0x931fde0, lpOverlapped=0x0 | out: lpBuffer=0x8362d68*, lpNumberOfBytesWritten=0x931fde0*=0x2c6, lpOverlapped=0x0) returned 1 [0213.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42560 [0213.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0213.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0213.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8362d68) returned 1 [0213.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8375990) returned 1 [0213.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403290) returned 1 [0213.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4578) returned 1 [0213.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e691e0 [0213.292] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.292] WriteFile (in: hFile=0x1960, lpBuffer=0x84076b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x931fe54, lpOverlapped=0x0 | out: lpBuffer=0x84076b8*, lpNumberOfBytesWritten=0x931fe54*=0x10c, lpOverlapped=0x0) returned 1 [0214.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84076b8) returned 1 [0214.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69210) returned 1 [0214.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0214.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e691e0) returned 1 [0214.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42560) returned 1 [0214.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063868) returned 1 [0214.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063818) returned 1 [0214.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062df0) returned 1 [0214.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x84047d0 [0214.037] wcscpy (in: _Dest=0x84047d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" [0214.037] wcscat (in: _Dest=0x84047d0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.f0dbec" [0214.037] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.f0dbec", NtPathName=0x931fdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17d00 [0215.760] FlushFileBuffers (hFile=0x1960) returned 1 [0215.767] CloseHandle (hObject=0x1960) returned 1 [0216.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404cb0 [0216.022] wcscpy (in: _Dest=0x8404cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" [0216.022] wcscat (in: _Dest=0x8404cb0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\F0DBEC-Readme.txt" [0216.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\f0dbec-readme.txt")) returned 0xffffffff [0216.022] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.473] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x931fdfc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x931fdfc*=0x70c, lpOverlapped=0x0) returned 1 [0216.475] CloseHandle (hObject=0x10c4) returned 1 [0216.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404cb0) returned 1 [0216.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58180) returned 1 Thread: id = 6623 os_tid = 0x1f50 [0201.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json")) returned 0x2020 [0201.414] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0211.750] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x29d4 [0211.751] GetFileSizeEx (in: hFile=0x29d4, lpFileSize=0x88afe20 | out: lpFileSize=0x88afe20*=617) returned 1 [0211.751] SetFilePointerEx (in: hFile=0x29d4, liDistanceToMove=0x265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.751] ReadFile (in: hFile=0x29d4, lpBuffer=0x88afe2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x88afe08, lpOverlapped=0x0 | out: lpBuffer=0x88afe2c*, lpNumberOfBytesRead=0x88afe08*=0x4, lpOverlapped=0x0) returned 1 [0211.773] SetFilePointerEx (in: hFile=0x29d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0211.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43438 [0211.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a38 [0211.774] NtQuerySystemTime (in: CurrentTime=0x88afda8 | out: CurrentTime=0x88afda8*=132471540794952000) returned 0x0 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x65ffba1e [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x31dfd8d6 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x1e904d0b [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x67f16d4d [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x4e18546e [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x475d6e33 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x19f84f05 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x1eebc51b [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x570b896a [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x483146da [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x46ddf86 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x72b7eadb [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0xbc1d79f [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x7bb3def9 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x1e73bfa6 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x88e3cc2 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0xfa63859 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x5e5db09a [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x4d91ace5 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x2ea18635 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x7369e56b [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x749459ef [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x2c8a7166 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x46be7c67 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x287c1c2 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x4e0ca522 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x4e5f54c7 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x2fdb3259 [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x39a7ea1f [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x3d5204ef [0211.774] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x59a8918c [0211.775] RtlRandomEx (in: Seed=0x88afda0 | out: Seed=0x88afda0) returned 0x3c0e2899 [0211.782] ReadFile (in: hFile=0x29d4, lpBuffer=0x816bca8, nNumberOfBytesToRead=0x269, lpNumberOfBytesRead=0x88afd9c, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesRead=0x88afd9c*=0x269, lpOverlapped=0x0) returned 1 [0211.782] SetFilePointerEx (in: hFile=0x29d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.782] WriteFile (in: hFile=0x29d4, lpBuffer=0x816f8b0*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x88afda0, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesWritten=0x88afda0*=0x269, lpOverlapped=0x0) returned 1 [0216.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb58 [0216.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb08 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb08) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402de0) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e40f8) returned 1 [0216.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f558 [0216.698] SetFilePointerEx (in: hFile=0x29d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.698] WriteFile (in: hFile=0x29d4, lpBuffer=0x8407028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x88afe14, lpOverlapped=0x0 | out: lpBuffer=0x8407028*, lpNumberOfBytesWritten=0x88afe14*=0x10c, lpOverlapped=0x0) returned 1 [0220.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407028) returned 1 [0220.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700c8) returned 1 [0220.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb08) returned 1 [0220.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f558) returned 1 [0220.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb58) returned 1 [0220.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0220.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0220.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0220.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef7d68 [0220.403] wcscpy (in: _Dest=0x3ef7d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" [0220.403] wcscat (in: _Dest=0x3ef7d68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.f0dbec" [0220.403] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.f0dbec", NtPathName=0x88afd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e18108 [0220.616] FlushFileBuffers (hFile=0x29d4) returned 1 [0220.621] CloseHandle (hObject=0x29d4) returned 1 [0220.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f3c60 [0220.742] wcscpy (in: _Dest=0x81f3c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" [0220.742] wcscat (in: _Dest=0x81f3c60, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\F0DBEC-Readme.txt" [0220.742] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\f0dbec-readme.txt")) returned 0xffffffff [0220.742] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.040] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x88afdbc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x88afdbc*=0x70c, lpOverlapped=0x0) returned 1 [0221.042] CloseHandle (hObject=0x1b48) returned 1 [0221.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3c60) returned 1 [0221.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 Thread: id = 6624 os_tid = 0x1f54 [0201.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json")) returned 0x2020 [0201.414] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0210.793] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe6c [0210.793] GetFileSizeEx (in: hFile=0xe6c, lpFileSize=0x946f818 | out: lpFileSize=0x946f818*=622) returned 1 [0210.793] SetFilePointerEx (in: hFile=0xe6c, liDistanceToMove=0x26a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.793] ReadFile (in: hFile=0xe6c, lpBuffer=0x946f824, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x946f800, lpOverlapped=0x0 | out: lpBuffer=0x946f824*, lpNumberOfBytesRead=0x946f800*=0x4, lpOverlapped=0x0) returned 1 [0210.800] SetFilePointerEx (in: hFile=0xe6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80636b0 [0210.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063688 [0210.800] NtQuerySystemTime (in: CurrentTime=0x946f7a0 | out: CurrentTime=0x946f7a0*=132471540785124000) returned 0x0 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x586875cc [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x35f53c1 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x77a2d72d [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x3c6db92e [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x27b449c0 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x4713181f [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x76b6099f [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x1b65a71 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x5efcfb08 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x497484db [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x1062d087 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x14711380 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x16a537bd [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x16b51560 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x16bc21c7 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x1750f63 [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x93a935e [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x482a81da [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x4e08ed1c [0210.800] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x42042f03 [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x55cc5c9a [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x7bc9c71c [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x65c4eacd [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x4ffb7868 [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x58277d4b [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x5a5e7215 [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x11fa97c7 [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x5ab4f732 [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x6b2e0760 [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x7baa2bb3 [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x7d7d158a [0210.801] RtlRandomEx (in: Seed=0x946f798 | out: Seed=0x946f798) returned 0x137b66cc [0210.812] ReadFile (in: hFile=0xe6c, lpBuffer=0x8390140, nNumberOfBytesToRead=0x26e, lpNumberOfBytesRead=0x946f794, lpOverlapped=0x0 | out: lpBuffer=0x8390140*, lpNumberOfBytesRead=0x946f794*=0x26e, lpOverlapped=0x0) returned 1 [0210.812] SetFilePointerEx (in: hFile=0xe6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.812] WriteFile (in: hFile=0xe6c, lpBuffer=0x8393d48*, nNumberOfBytesToWrite=0x26e, lpNumberOfBytesWritten=0x946f798, lpOverlapped=0x0 | out: lpBuffer=0x8393d48*, lpNumberOfBytesWritten=0x946f798*=0x26e, lpOverlapped=0x0) returned 1 [0216.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c508 [0216.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0216.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0216.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8393d48) returned 1 [0216.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8390140) returned 1 [0216.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84036c8) returned 1 [0216.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea608) returned 1 [0216.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70098 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0216.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fdf8 [0216.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0216.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b810) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84036c8) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea608) returned 1 [0216.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x8406df8 [0216.700] SetFilePointerEx (in: hFile=0xe6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.700] WriteFile (in: hFile=0xe6c, lpBuffer=0x8406df8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x946f80c, lpOverlapped=0x0 | out: lpBuffer=0x8406df8*, lpNumberOfBytesWritten=0x946f80c*=0x10c, lpOverlapped=0x0) returned 1 [0220.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406df8) returned 1 [0220.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdf8) returned 1 [0220.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0220.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70098) returned 1 [0220.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c508) returned 1 [0220.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80636b0) returned 1 [0220.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063610) returned 1 [0220.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063638) returned 1 [0220.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef8380 [0220.415] wcscpy (in: _Dest=0x3ef8380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" [0220.415] wcscat (in: _Dest=0x3ef8380, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.f0dbec" [0220.415] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.f0dbec", NtPathName=0x946f790, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17a50 [0220.632] FlushFileBuffers (hFile=0xe6c) returned 1 [0220.638] CloseHandle (hObject=0xe6c) returned 1 [0220.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4fe0 [0220.752] wcscpy (in: _Dest=0x81f4fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" [0220.752] wcscat (in: _Dest=0x81f4fe0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\F0DBEC-Readme.txt" [0220.752] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\f0dbec-readme.txt")) returned 0xffffffff [0220.753] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.057] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x946f7b4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x946f7b4*=0x70c, lpOverlapped=0x0) returned 1 [0221.059] CloseHandle (hObject=0x1b48) returned 1 [0221.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4fe0) returned 1 [0221.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574c8) returned 1 Thread: id = 6625 os_tid = 0x1f58 [0201.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif")) returned 0x20 [0201.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.415] GetLastError () returned 0x5 [0201.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 Thread: id = 6626 os_tid = 0x1f60 [0201.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif")) returned 0x20 [0201.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.417] GetLastError () returned 0x5 [0201.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35730) returned 1 Thread: id = 6627 os_tid = 0x1f64 [0201.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif")) returned 0x20 [0201.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0201.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.423] GetLastError () returned 0x5 [0201.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0201.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e357f8) returned 1 Thread: id = 6628 os_tid = 0x1f68 [0201.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif")) returned 0x20 [0201.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0201.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.430] GetLastError () returned 0x5 [0201.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0201.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34d08) returned 1 Thread: id = 6629 os_tid = 0x1f6c [0201.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20 [0201.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.840] GetLastError () returned 0x5 [0201.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34088) returned 1 Thread: id = 6630 os_tid = 0x2084 [0201.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20 [0201.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.842] GetLastError () returned 0x5 [0201.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 Thread: id = 6631 os_tid = 0x2088 [0201.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x20 [0203.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x20) returned 0 [0203.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.013] GetLastError () returned 0x5 [0203.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x20) returned 0 [0203.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 6632 os_tid = 0x208c [0201.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x20 [0203.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x20) returned 0 [0203.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.196] GetLastError () returned 0x5 [0203.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x20) returned 0 [0203.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 Thread: id = 6633 os_tid = 0x21e0 [0201.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x20 [0203.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x20) returned 0 [0203.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.174] GetLastError () returned 0x5 [0203.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x20) returned 0 [0203.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f301e8) returned 1 Thread: id = 6634 os_tid = 0x21e4 [0201.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x20 [0203.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x20) returned 0 [0203.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.173] GetLastError () returned 0x5 [0203.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x20) returned 0 [0203.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2feb8) returned 1 Thread: id = 6635 os_tid = 0x221c [0201.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x20 [0203.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x20) returned 0 [0203.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.171] GetLastError () returned 0x5 [0203.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x20) returned 0 [0203.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30160) returned 1 Thread: id = 6636 os_tid = 0x2220 [0201.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x20 [0203.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x20) returned 0 [0203.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.114] GetLastError () returned 0x5 [0203.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x20) returned 0 [0203.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 6637 os_tid = 0x2418 [0201.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x20 [0203.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x20) returned 0 [0203.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.170] GetLastError () returned 0x5 [0203.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x20) returned 0 [0203.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f5b0) returned 1 Thread: id = 6638 os_tid = 0x241c [0201.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x20 [0203.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x20) returned 0 [0203.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.169] GetLastError () returned 0x5 [0203.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x20) returned 0 [0203.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 6639 os_tid = 0x1d18 [0201.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x20 [0203.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x20) returned 0 [0203.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.167] GetLastError () returned 0x5 [0203.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x20) returned 0 [0203.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f9f0) returned 1 Thread: id = 6640 os_tid = 0x2a2c [0201.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x20 [0203.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x20) returned 0 [0203.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.166] GetLastError () returned 0x5 [0203.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x20) returned 0 [0203.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 6641 os_tid = 0x2a30 [0201.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x20 [0201.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x20) returned 0 [0201.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.759] GetLastError () returned 0x5 [0201.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x20) returned 0 [0201.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 6642 os_tid = 0x2a34 [0201.440] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json")) returned 0x2020 [0201.440] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0210.813] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3e8 [0210.813] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0xa4bf788 | out: lpFileSize=0xa4bf788*=673) returned 1 [0210.813] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x29d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.813] ReadFile (in: hFile=0x3e8, lpBuffer=0xa4bf794, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa4bf770, lpOverlapped=0x0 | out: lpBuffer=0xa4bf794*, lpNumberOfBytesRead=0xa4bf770*=0x4, lpOverlapped=0x0) returned 1 [0210.816] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063688 [0210.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80635c0 [0210.816] NtQuerySystemTime (in: CurrentTime=0xa4bf710 | out: CurrentTime=0xa4bf710*=132471540785280000) returned 0x0 [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x37a09b3e [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x5f886774 [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x6f926daa [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x590d5643 [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x7ce8daea [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x4868b98e [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x6e3c8038 [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x78729f8a [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x24403a40 [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x59d8548 [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x3a108567 [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x4f2cc82b [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x7d7d158a [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0xecc5690 [0210.816] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x4b9f8e3 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x795b246 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x5393a099 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x2a9018e7 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x66719f6d [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x5c5d0d5a [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x67071771 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x31e1d495 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x1ec9fbe9 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x5734edcc [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x6fe75ccd [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x3967aa1e [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x3387baa8 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x6d02de65 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x6730a88f [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x3dea50da [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x5e5f88c3 [0210.817] RtlRandomEx (in: Seed=0xa4bf708 | out: Seed=0xa4bf708) returned 0x607ca68e [0210.829] ReadFile (in: hFile=0x3e8, lpBuffer=0x8397950, nNumberOfBytesToRead=0x2a1, lpNumberOfBytesRead=0xa4bf704, lpOverlapped=0x0 | out: lpBuffer=0x8397950*, lpNumberOfBytesRead=0xa4bf704*=0x2a1, lpOverlapped=0x0) returned 1 [0210.829] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.829] WriteFile (in: hFile=0x3e8, lpBuffer=0x839b558*, nNumberOfBytesToWrite=0x2a1, lpNumberOfBytesWritten=0xa4bf708, lpOverlapped=0x0 | out: lpBuffer=0x839b558*, lpNumberOfBytesWritten=0xa4bf708*=0x2a1, lpOverlapped=0x0) returned 1 [0213.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42cb8 [0213.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ce0 [0213.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ce0) returned 1 [0213.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x839b558) returned 1 [0213.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8397950) returned 1 [0213.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403740) returned 1 [0213.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea2f0) returned 1 [0213.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69960 [0213.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ce0) returned 1 [0213.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69990 [0213.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ce0 [0213.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430f0 [0213.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0213.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403740) returned 1 [0213.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea2f0) returned 1 [0213.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec828 [0213.914] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.914] WriteFile (in: hFile=0x3e8, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa4bf77c, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xa4bf77c*=0x10c, lpOverlapped=0x0) returned 1 [0214.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0214.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69990) returned 1 [0214.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ce0) returned 1 [0214.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69960) returned 1 [0214.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0214.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063688) returned 1 [0214.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80635e8) returned 1 [0214.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063570) returned 1 [0214.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef8380 [0214.058] wcscpy (in: _Dest=0x3ef8380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" [0214.058] wcscat (in: _Dest=0x3ef8380, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.f0dbec" [0214.058] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.f0dbec", NtPathName=0xa4bf700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17e58 [0215.790] FlushFileBuffers (hFile=0x3e8) returned 1 [0215.797] CloseHandle (hObject=0x3e8) returned 1 [0216.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8405538 [0216.035] wcscpy (in: _Dest=0x8405538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" [0216.035] wcscat (in: _Dest=0x8405538, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\F0DBEC-Readme.txt" [0216.035] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\f0dbec-readme.txt")) returned 0xffffffff [0216.036] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.503] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa4bf724, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa4bf724*=0x70c, lpOverlapped=0x0) returned 1 [0216.505] CloseHandle (hObject=0x10c4) returned 1 [0216.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405538) returned 1 [0216.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58058) returned 1 Thread: id = 6643 os_tid = 0x2a38 [0201.440] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json")) returned 0x2020 [0201.441] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0210.830] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2d18 [0210.831] GetFileSizeEx (in: hFile=0x2d18, lpFileSize=0x918f7c0 | out: lpFileSize=0x918f7c0*=692) returned 1 [0210.831] SetFilePointerEx (in: hFile=0x2d18, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.831] ReadFile (in: hFile=0x2d18, lpBuffer=0x918f7cc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x918f7a8, lpOverlapped=0x0 | out: lpBuffer=0x918f7cc*, lpNumberOfBytesRead=0x918f7a8*=0x4, lpOverlapped=0x0) returned 1 [0210.842] SetFilePointerEx (in: hFile=0x2d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80635c0 [0210.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063598 [0210.842] NtQuerySystemTime (in: CurrentTime=0x918f748 | out: CurrentTime=0x918f748*=132471540785592000) returned 0x0 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0xe7ebdfb [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x248adc6b [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x2152c569 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x82b9ebf [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x56e2b7e4 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x936f834 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x64351b0b [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x51650b8d [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x121e3688 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x54412a5 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x966c717 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x19726e81 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x2cc1dd34 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x434c1c31 [0210.842] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x1c21ea5c [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x77a17ce3 [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x1091e3da [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x76c37af4 [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x4d393071 [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x63846d2c [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x1aeca0b3 [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x26415a8b [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x67447f00 [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x7055eb5 [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x5bfd939c [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x5351c3dc [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x3a446866 [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x1ab38d6a [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x6ad69e7d [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x2db6a8ad [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x5d486200 [0210.843] RtlRandomEx (in: Seed=0x918f740 | out: Seed=0x918f740) returned 0x75523eb1 [0210.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x839f160 [0210.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83a2d68 [0210.858] ReadFile (in: hFile=0x2d18, lpBuffer=0x839f160, nNumberOfBytesToRead=0x2b4, lpNumberOfBytesRead=0x918f73c, lpOverlapped=0x0 | out: lpBuffer=0x839f160*, lpNumberOfBytesRead=0x918f73c*=0x2b4, lpOverlapped=0x0) returned 1 [0210.858] SetFilePointerEx (in: hFile=0x2d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.858] WriteFile (in: hFile=0x2d18, lpBuffer=0x83a2d68*, nNumberOfBytesToWrite=0x2b4, lpNumberOfBytesWritten=0x918f740, lpOverlapped=0x0 | out: lpBuffer=0x83a2d68*, lpNumberOfBytesWritten=0x918f740*=0x2b4, lpOverlapped=0x0) returned 1 [0217.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0217.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0217.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0217.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83a2d68) returned 1 [0217.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x839f160) returned 1 [0217.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84037b8) returned 1 [0217.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9ac8) returned 1 [0217.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fa68 [0217.539] SetFilePointerEx (in: hFile=0x2d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.539] WriteFile (in: hFile=0x2d18, lpBuffer=0x8406308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x918f7b4, lpOverlapped=0x0 | out: lpBuffer=0x8406308*, lpNumberOfBytesWritten=0x918f7b4*=0x10c, lpOverlapped=0x0) returned 1 [0220.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406308) returned 1 [0220.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6faf8) returned 1 [0220.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0220.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa68) returned 1 [0220.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0220.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80635c0) returned 1 [0220.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80632a0) returned 1 [0220.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80646a0) returned 1 [0220.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3ef8998 [0220.413] wcscpy (in: _Dest=0x3ef8998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" [0220.413] wcscat (in: _Dest=0x3ef8998, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.f0dbec" [0220.413] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.f0dbec", NtPathName=0x918f738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e17ba8 [0220.630] FlushFileBuffers (hFile=0x2d18) returned 1 [0220.635] CloseHandle (hObject=0x2d18) returned 1 [0220.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x81f3648 [0220.750] wcscpy (in: _Dest=0x81f3648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" [0220.750] wcscat (in: _Dest=0x81f3648, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\F0DBEC-Readme.txt" [0220.750] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\f0dbec-readme.txt")) returned 0xffffffff [0220.751] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.054] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x918f75c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x918f75c*=0x70c, lpOverlapped=0x0) returned 1 [0221.056] CloseHandle (hObject=0x1b48) returned 1 [0221.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3648) returned 1 [0221.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57e08) returned 1 Thread: id = 6644 os_tid = 0x2a3c [0201.441] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json")) returned 0x2020 [0201.441] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0210.859] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cd4 [0210.860] GetFileSizeEx (in: hFile=0x1cd4, lpFileSize=0xac9f8d8 | out: lpFileSize=0xac9f8d8*=708) returned 1 [0210.860] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.860] ReadFile (in: hFile=0x1cd4, lpBuffer=0xac9f8e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac9f8c0, lpOverlapped=0x0 | out: lpBuffer=0xac9f8e4*, lpNumberOfBytesRead=0xac9f8c0*=0x4, lpOverlapped=0x0) returned 1 [0210.863] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063598 [0210.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064718 [0210.864] NtQuerySystemTime (in: CurrentTime=0xac9f860 | out: CurrentTime=0xac9f860*=132471540785748000) returned 0x0 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x5502292d [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x2136b029 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x2aec7fcd [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x68621476 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x6ceed654 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x6ab69c48 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x10b0aff4 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x34e131a9 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x702f2477 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x402d5b60 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x51c0de0d [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x70e91bb6 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x3fb56a92 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x4f25987c [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x141b6200 [0210.864] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x319ba7f9 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x34d3df80 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x49009b9d [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x7ccf92fa [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x3d0fef01 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x3c6153c3 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x790ddfe2 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x314c747a [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x44a60448 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x4649fb2d [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x39e02a31 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x3011391a [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x5102630b [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x2d417f58 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x50729341 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x1e3ed371 [0210.865] RtlRandomEx (in: Seed=0xac9f858 | out: Seed=0xac9f858) returned 0x7d7b9ce2 [0210.878] ReadFile (in: hFile=0x1cd4, lpBuffer=0x83a6970, nNumberOfBytesToRead=0x2c4, lpNumberOfBytesRead=0xac9f854, lpOverlapped=0x0 | out: lpBuffer=0x83a6970*, lpNumberOfBytesRead=0xac9f854*=0x2c4, lpOverlapped=0x0) returned 1 [0210.878] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.878] WriteFile (in: hFile=0x1cd4, lpBuffer=0x83aa578*, nNumberOfBytesToWrite=0x2c4, lpNumberOfBytesWritten=0xac9f858, lpOverlapped=0x0 | out: lpBuffer=0x83aa578*, lpNumberOfBytesWritten=0xac9f858*=0x2c4, lpOverlapped=0x0) returned 1 [0217.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0217.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0217.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0217.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83aa578) returned 1 [0217.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83a6970) returned 1 [0217.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403830) returned 1 [0217.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb580) returned 1 [0217.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fee8 [0217.531] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.531] WriteFile (in: hFile=0x1cd4, lpBuffer=0x8406bc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xac9f8cc, lpOverlapped=0x0 | out: lpBuffer=0x8406bc8*, lpNumberOfBytesWritten=0xac9f8cc*=0x10c, lpOverlapped=0x0) returned 1 [0220.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406bc8) returned 1 [0220.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fca8) returned 1 [0220.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0220.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fee8) returned 1 [0220.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0220.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063598) returned 1 [0220.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80646f0) returned 1 [0220.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064768) returned 1 [0220.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef8ad0 [0220.405] wcscpy (in: _Dest=0x3ef8ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" [0220.405] wcscat (in: _Dest=0x3ef8ad0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.f0dbec" [0220.405] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.f0dbec", NtPathName=0xac9f850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17fb0 [0220.620] FlushFileBuffers (hFile=0x1cd4) returned 1 [0220.627] CloseHandle (hObject=0x1cd4) returned 1 [0220.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f39f0 [0220.744] wcscpy (in: _Dest=0x81f39f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" [0220.745] wcscat (in: _Dest=0x81f39f0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\F0DBEC-Readme.txt" [0220.745] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\f0dbec-readme.txt")) returned 0xffffffff [0220.745] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.046] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xac9f874, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xac9f874*=0x70c, lpOverlapped=0x0) returned 1 [0221.048] CloseHandle (hObject=0x1b48) returned 1 [0221.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f39f0) returned 1 [0221.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57ce0) returned 1 Thread: id = 6645 os_tid = 0x2a44 [0201.442] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json")) returned 0x2020 [0201.442] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0210.879] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd8 [0210.880] GetFileSizeEx (in: hFile=0xcd8, lpFileSize=0xa18fee8 | out: lpFileSize=0xa18fee8*=941) returned 1 [0210.880] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x3a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.880] ReadFile (in: hFile=0xcd8, lpBuffer=0xa18fef4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa18fed0, lpOverlapped=0x0 | out: lpBuffer=0xa18fef4*, lpNumberOfBytesRead=0xa18fed0*=0x4, lpOverlapped=0x0) returned 1 [0210.883] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064718 [0210.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064808 [0210.883] NtQuerySystemTime (in: CurrentTime=0xa18fe70 | out: CurrentTime=0xa18fe70*=132471540786060000) returned 0x0 [0210.883] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0xf9c0ce8 [0210.883] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x78190d3e [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x2a279cdd [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x314585f9 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x62cbe121 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x20ccaf8b [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x6f5b4700 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x6969ff4f [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x13452640 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x4924bf3 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x949249b [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x35f43aae [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x41281c05 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x2d4ef7ce [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0xb0529e [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x7af5f240 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x684d53ef [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x52365926 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x455fa0c6 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x291a8f69 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x2e2d07c1 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x6a269a65 [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x633662e [0210.884] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x4dd508f2 [0210.885] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x62e02782 [0210.885] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x491a48bc [0210.885] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x459dcd57 [0210.885] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x27cdcaf3 [0210.885] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x5c95e16b [0210.885] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x1caf6f56 [0210.885] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x6a272502 [0210.885] RtlRandomEx (in: Seed=0xa18fe68 | out: Seed=0xa18fe68) returned 0x2570e3aa [0210.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83ae180 [0210.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x83b1d88 [0210.899] ReadFile (in: hFile=0xcd8, lpBuffer=0x83ae180, nNumberOfBytesToRead=0x3ad, lpNumberOfBytesRead=0xa18fe64, lpOverlapped=0x0 | out: lpBuffer=0x83ae180*, lpNumberOfBytesRead=0xa18fe64*=0x3ad, lpOverlapped=0x0) returned 1 [0210.899] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.899] WriteFile (in: hFile=0xcd8, lpBuffer=0x83b1d88*, nNumberOfBytesToWrite=0x3ad, lpNumberOfBytesWritten=0xa18fe68, lpOverlapped=0x0 | out: lpBuffer=0x83b1d88*, lpNumberOfBytesWritten=0xa18fe68*=0x3ad, lpOverlapped=0x0) returned 1 [0217.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0217.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0217.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0217.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83b1d88) returned 1 [0217.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83ae180) returned 1 [0217.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68948) returned 1 [0217.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eac80) returned 1 [0217.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e700f8 [0217.534] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.534] WriteFile (in: hFile=0xcd8, lpBuffer=0x8407370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa18fedc, lpOverlapped=0x0 | out: lpBuffer=0x8407370*, lpNumberOfBytesWritten=0xa18fedc*=0x10c, lpOverlapped=0x0) returned 1 [0220.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407370) returned 1 [0220.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fc48) returned 1 [0220.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0220.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e700f8) returned 1 [0220.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0220.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064718) returned 1 [0220.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80646c8) returned 1 [0220.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064650) returned 1 [0220.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef8860 [0220.407] wcscpy (in: _Dest=0x3ef8860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" [0220.407] wcscat (in: _Dest=0x3ef8860, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.f0dbec" [0220.408] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.f0dbec", NtPathName=0xa18fe60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17e58 [0220.624] FlushFileBuffers (hFile=0xcd8) returned 1 [0220.630] CloseHandle (hObject=0xcd8) returned 1 [0220.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f38b8 [0220.746] wcscpy (in: _Dest=0x81f38b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" [0220.746] wcscat (in: _Dest=0x81f38b8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\F0DBEC-Readme.txt" [0220.746] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\f0dbec-readme.txt")) returned 0xffffffff [0220.746] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.049] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa18fe84, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa18fe84*=0x70c, lpOverlapped=0x0) returned 1 [0221.051] CloseHandle (hObject=0x1b48) returned 1 [0221.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f38b8) returned 1 [0221.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d573a0) returned 1 Thread: id = 6646 os_tid = 0x14a4 [0201.442] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json")) returned 0x2020 [0201.442] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0210.904] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c1c [0210.905] GetFileSizeEx (in: hFile=0x1c1c, lpFileSize=0x91cf890 | out: lpFileSize=0x91cf890*=633) returned 1 [0210.905] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x275, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.905] ReadFile (in: hFile=0x1c1c, lpBuffer=0x91cf89c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x91cf878, lpOverlapped=0x0 | out: lpBuffer=0x91cf89c*, lpNumberOfBytesRead=0x91cf878*=0x4, lpOverlapped=0x0) returned 1 [0210.908] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064808 [0210.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064678 [0210.909] NtQuerySystemTime (in: CurrentTime=0x91cf818 | out: CurrentTime=0x91cf818*=132471540786216000) returned 0x0 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x5d91a8e [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0xa49a999 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x461ac411 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x3552d03e [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x30e303b [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x291bac3 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x17636081 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0xdaa2b64 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0xe270b0c [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x77a2d72d [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x2b9501b4 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x5f2893f5 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x26719053 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x31304541 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x25234f41 [0210.909] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x76f0c167 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x418059c3 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x57f1a526 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x70fdd4b4 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x93f6591 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0xe3d1157 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x131a4d80 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x79ee989a [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0xd69bfb7 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x3e2a33e [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x660f5ace [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x7f02861c [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x78f1a333 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x1f1cd441 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x3fdb759c [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x168c0c27 [0210.910] RtlRandomEx (in: Seed=0x91cf810 | out: Seed=0x91cf810) returned 0x4092583f [0210.924] ReadFile (in: hFile=0x1c1c, lpBuffer=0x83b5990, nNumberOfBytesToRead=0x279, lpNumberOfBytesRead=0x91cf80c, lpOverlapped=0x0 | out: lpBuffer=0x83b5990*, lpNumberOfBytesRead=0x91cf80c*=0x279, lpOverlapped=0x0) returned 1 [0210.924] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.924] WriteFile (in: hFile=0x1c1c, lpBuffer=0x83b9598*, nNumberOfBytesToWrite=0x279, lpNumberOfBytesWritten=0x91cf810, lpOverlapped=0x0 | out: lpBuffer=0x83b9598*, lpNumberOfBytesWritten=0x91cf810*=0x279, lpOverlapped=0x0) returned 1 [0217.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0217.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3c0 [0217.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3c0) returned 1 [0217.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83b9598) returned 1 [0217.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83b5990) returned 1 [0217.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b28) returned 1 [0217.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e9de0) returned 1 [0217.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fcd8 [0217.536] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.537] WriteFile (in: hFile=0x1c1c, lpBuffer=0x8407488*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x91cf884, lpOverlapped=0x0 | out: lpBuffer=0x8407488*, lpNumberOfBytesWritten=0x91cf884*=0x10c, lpOverlapped=0x0) returned 1 [0220.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407488) returned 1 [0220.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f228) returned 1 [0220.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3c0) returned 1 [0220.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fcd8) returned 1 [0220.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0220.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064808) returned 1 [0220.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064600) returned 1 [0220.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064628) returned 1 [0220.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef84b8 [0220.410] wcscpy (in: _Dest=0x3ef84b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" [0220.410] wcscat (in: _Dest=0x3ef84b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.f0dbec" [0220.410] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.f0dbec", NtPathName=0x91cf808, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17d00 [0220.627] FlushFileBuffers (hFile=0x1c1c) returned 1 [0220.633] CloseHandle (hObject=0x1c1c) returned 1 [0220.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f3780 [0220.748] wcscpy (in: _Dest=0x81f3780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" [0220.748] wcscat (in: _Dest=0x81f3780, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\F0DBEC-Readme.txt" [0220.748] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\f0dbec-readme.txt")) returned 0xffffffff [0220.748] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.052] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x91cf82c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x91cf82c*=0x70c, lpOverlapped=0x0) returned 1 [0221.053] CloseHandle (hObject=0x1b48) returned 1 [0221.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3780) returned 1 [0221.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d582a8) returned 1 Thread: id = 6647 os_tid = 0x1530 [0201.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif")) returned 0x20 [0201.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0201.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.443] GetLastError () returned 0x5 [0201.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0201.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80215f0) returned 1 Thread: id = 6648 os_tid = 0x1424 [0201.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif")) returned 0x20 [0201.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif", dwFileAttributes=0x20) returned 0 [0201.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.445] GetLastError () returned 0x5 [0201.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif", dwFileAttributes=0x20) returned 0 [0201.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3afe8) returned 1 Thread: id = 6649 os_tid = 0x18bc [0201.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif")) returned 0x20 [0201.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0201.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.447] GetLastError () returned 0x5 [0201.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0201.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80219b0) returned 1 Thread: id = 6650 os_tid = 0x18f4 [0201.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif")) returned 0x20 [0201.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0201.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.449] GetLastError () returned 0x5 [0201.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0201.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a168) returned 1 Thread: id = 6651 os_tid = 0x1af4 [0201.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv")) returned 0x20 [0201.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV", dwFileAttributes=0x20) returned 0 [0201.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.450] GetLastError () returned 0x5 [0201.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV", dwFileAttributes=0x20) returned 0 [0201.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 6652 os_tid = 0x1b20 [0201.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml")) returned 0x20 [0205.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML", dwFileAttributes=0x20) returned 0 [0205.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.631] GetLastError () returned 0x5 [0205.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML", dwFileAttributes=0x20) returned 0 [0205.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 6653 os_tid = 0x1b24 [0201.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv")) returned 0x20 [0205.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV", dwFileAttributes=0x20) returned 0 [0205.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.626] GetLastError () returned 0x5 [0205.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV", dwFileAttributes=0x20) returned 0 [0205.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30408) returned 1 Thread: id = 6654 os_tid = 0x1b28 [0201.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml")) returned 0x20 [0205.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML", dwFileAttributes=0x20) returned 0 [0205.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.612] GetLastError () returned 0x5 [0205.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML", dwFileAttributes=0x20) returned 0 [0205.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 6655 os_tid = 0x1b30 [0201.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv")) returned 0x20 [0205.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV", dwFileAttributes=0x20) returned 0 [0205.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.611] GetLastError () returned 0x5 [0205.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV", dwFileAttributes=0x20) returned 0 [0205.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31370) returned 1 Thread: id = 6656 os_tid = 0x1bc0 [0201.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml")) returned 0x20 [0205.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML", dwFileAttributes=0x20) returned 0 [0205.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.610] GetLastError () returned 0x5 [0205.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML", dwFileAttributes=0x20) returned 0 [0205.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c00) returned 1 Thread: id = 6658 os_tid = 0x1d7c [0201.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml")) returned 0x20 [0205.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML", dwFileAttributes=0x20) returned 0 [0205.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.507] GetLastError () returned 0x5 [0205.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML", dwFileAttributes=0x20) returned 0 [0205.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 6659 os_tid = 0x1ec4 [0201.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv")) returned 0x20 [0205.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV", dwFileAttributes=0x20) returned 0 [0205.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.629] GetLastError () returned 0x5 [0205.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV", dwFileAttributes=0x20) returned 0 [0205.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 6660 os_tid = 0x1ecc [0201.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml")) returned 0x20 [0205.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML", dwFileAttributes=0x20) returned 0 [0205.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.628] GetLastError () returned 0x5 [0205.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML", dwFileAttributes=0x20) returned 0 [0205.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 6661 os_tid = 0x1ed0 [0201.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv")) returned 0x20 [0205.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV", dwFileAttributes=0x20) returned 0 [0205.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.617] GetLastError () returned 0x5 [0205.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV", dwFileAttributes=0x20) returned 0 [0205.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a6d8) returned 1 Thread: id = 6662 os_tid = 0x220c [0201.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml")) returned 0x20 [0205.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML", dwFileAttributes=0x20) returned 0 [0205.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.616] GetLastError () returned 0x5 [0205.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML", dwFileAttributes=0x20) returned 0 [0205.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 6663 os_tid = 0x2864 [0201.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc")) returned 0x20 [0205.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC", dwFileAttributes=0x20) returned 0 [0205.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.614] GetLastError () returned 0x5 [0205.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC", dwFileAttributes=0x20) returned 0 [0205.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a858) returned 1 Thread: id = 6664 os_tid = 0x201c [0201.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc")) returned 0x20 [0205.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC", dwFileAttributes=0x20) returned 0 [0205.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.613] GetLastError () returned 0x5 [0205.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC", dwFileAttributes=0x20) returned 0 [0205.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831bb58) returned 1 Thread: id = 6665 os_tid = 0x2020 [0201.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv")) returned 0x20 [0205.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV", dwFileAttributes=0x20) returned 0 [0205.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.623] GetLastError () returned 0x5 [0205.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV", dwFileAttributes=0x20) returned 0 [0205.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a9d8) returned 1 Thread: id = 6666 os_tid = 0x2ab4 [0201.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml")) returned 0x20 [0205.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML", dwFileAttributes=0x20) returned 0 [0205.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.622] GetLastError () returned 0x5 [0205.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML", dwFileAttributes=0x20) returned 0 [0205.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a5d8) returned 1 Thread: id = 6667 os_tid = 0x141c [0201.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc")) returned 0x20 [0205.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC", dwFileAttributes=0x20) returned 0 [0205.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.633] GetLastError () returned 0x5 [0205.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC", dwFileAttributes=0x20) returned 0 [0205.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 Thread: id = 6668 os_tid = 0x1eb4 [0201.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc")) returned 0x20 [0205.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC", dwFileAttributes=0x20) returned 0 [0205.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.632] GetLastError () returned 0x5 [0205.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC", dwFileAttributes=0x20) returned 0 [0205.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 6669 os_tid = 0x1eb8 [0201.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc")) returned 0x20 [0205.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC", dwFileAttributes=0x20) returned 0 [0205.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.621] GetLastError () returned 0x5 [0205.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC", dwFileAttributes=0x20) returned 0 [0205.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831af58) returned 1 Thread: id = 6670 os_tid = 0x1ebc [0201.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc")) returned 0x20 [0205.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC", dwFileAttributes=0x20) returned 0 [0205.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.620] GetLastError () returned 0x5 [0205.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC", dwFileAttributes=0x20) returned 0 [0205.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x831a7d8) returned 1 Thread: id = 6671 os_tid = 0x1ec0 [0201.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc")) returned 0x20 [0205.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC", dwFileAttributes=0x20) returned 0 [0205.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.618] GetLastError () returned 0x5 [0205.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC", dwFileAttributes=0x20) returned 0 [0205.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 Thread: id = 6672 os_tid = 0x1ec8 [0201.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv")) returned 0x20 [0205.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV", dwFileAttributes=0x20) returned 0 [0205.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.627] GetLastError () returned 0x5 [0205.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV", dwFileAttributes=0x20) returned 0 [0205.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f418) returned 1 Thread: id = 6673 os_tid = 0x1fbc [0201.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml")) returned 0x20 [0205.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML", dwFileAttributes=0x20) returned 0 [0205.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.634] GetLastError () returned 0x5 [0205.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML", dwFileAttributes=0x20) returned 0 [0205.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f668) returned 1 Thread: id = 6674 os_tid = 0x2034 [0201.865] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json")) returned 0x2020 [0201.866] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0210.924] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d08 [0210.925] GetFileSizeEx (in: hFile=0x1d08, lpFileSize=0x5def920 | out: lpFileSize=0x5def920*=609) returned 1 [0210.925] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x25d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.925] ReadFile (in: hFile=0x1d08, lpBuffer=0x5def92c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5def908, lpOverlapped=0x0 | out: lpBuffer=0x5def92c*, lpNumberOfBytesRead=0x5def908*=0x4, lpOverlapped=0x0) returned 1 [0210.928] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064678 [0210.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80645b0 [0210.928] NtQuerySystemTime (in: CurrentTime=0x5def8a8 | out: CurrentTime=0x5def8a8*=132471540786528000) returned 0x0 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x33ac4b54 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x28962c3a [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x25d6f5c5 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x13f08940 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x88d3621 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x50ca28a5 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x1b5cb32a [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x3937b45b [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x2b6ef1b6 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x5f1cb22f [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x78a4640d [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x7af7df8f [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x58db6cdc [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x75b5cb4c [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x737be73e [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x15722800 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x5fdb05ea [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x6f85e115 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x4231d62f [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x13c5b080 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x452f64a1 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x22f8ea0c [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x3f56c32b [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x2f6d4754 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x1ae78f9c [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x566b57b5 [0210.929] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x5901741a [0210.930] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x29cf0708 [0210.930] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x7c5b9e92 [0210.930] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x66c59fc2 [0210.930] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0xa08f2ba [0210.930] RtlRandomEx (in: Seed=0x5def8a0 | out: Seed=0x5def8a0) returned 0x605337f3 [0210.940] ReadFile (in: hFile=0x1d08, lpBuffer=0x83bd1a0, nNumberOfBytesToRead=0x261, lpNumberOfBytesRead=0x5def89c, lpOverlapped=0x0 | out: lpBuffer=0x83bd1a0*, lpNumberOfBytesRead=0x5def89c*=0x261, lpOverlapped=0x0) returned 1 [0210.940] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.940] WriteFile (in: hFile=0x1d08, lpBuffer=0x83c0da8*, nNumberOfBytesToWrite=0x261, lpNumberOfBytesWritten=0x5def8a0, lpOverlapped=0x0 | out: lpBuffer=0x83c0da8*, lpNumberOfBytesWritten=0x5def8a0*=0x261, lpOverlapped=0x0) returned 1 [0213.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430f0 [0213.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43758 [0213.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43758) returned 1 [0213.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83c0da8) returned 1 [0213.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83bd1a0) returned 1 [0213.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682b8) returned 1 [0213.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ea4e8) returned 1 [0213.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e690c0 [0213.919] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.919] WriteFile (in: hFile=0x1d08, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5def914, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x5def914*=0x10c, lpOverlapped=0x0) returned 1 [0214.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0214.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690f0) returned 1 [0214.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43758) returned 1 [0214.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e690c0) returned 1 [0214.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0214.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064678) returned 1 [0214.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80645d8) returned 1 [0214.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064560) returned 1 [0214.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef84b8 [0214.063] wcscpy (in: _Dest=0x3ef84b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" [0214.063] wcscat (in: _Dest=0x3ef84b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.f0dbec" [0214.063] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.f0dbec", NtPathName=0x5def898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17fb0 [0215.796] FlushFileBuffers (hFile=0x1d08) returned 1 [0215.805] CloseHandle (hObject=0x1d08) returned 1 [0216.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8405400 [0216.040] wcscpy (in: _Dest=0x8405400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" [0216.040] wcscat (in: _Dest=0x8405400, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\F0DBEC-Readme.txt" [0216.040] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\f0dbec-readme.txt")) returned 0xffffffff [0216.040] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.521] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x5def8bc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x5def8bc*=0x70c, lpOverlapped=0x0) returned 1 [0216.523] CloseHandle (hObject=0x10c4) returned 1 [0216.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405400) returned 1 [0216.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57f30) returned 1 Thread: id = 6675 os_tid = 0x22b0 [0201.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x20 [0201.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x20) returned 0 [0201.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.867] GetLastError () returned 0x5 [0201.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x20) returned 0 [0201.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 6676 os_tid = 0x22b4 [0201.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x20 [0201.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x20) returned 0 [0201.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.875] GetLastError () returned 0x5 [0201.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x20) returned 0 [0201.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 6677 os_tid = 0x22bc [0201.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x20 [0201.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x20) returned 0 [0201.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.877] GetLastError () returned 0x5 [0201.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x20) returned 0 [0201.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 6678 os_tid = 0x22c0 [0201.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x20 [0201.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x20) returned 0 [0201.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.879] GetLastError () returned 0x5 [0201.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x20) returned 0 [0201.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 6679 os_tid = 0x22c4 [0201.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x20 [0201.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x20) returned 0 [0201.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.881] GetLastError () returned 0x5 [0201.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x20) returned 0 [0201.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30050) returned 1 Thread: id = 6680 os_tid = 0x22c8 [0201.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid")) returned 0x20 [0201.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x20) returned 0 [0201.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.883] GetLastError () returned 0x5 [0201.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x20) returned 0 [0201.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 6681 os_tid = 0x22cc [0201.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x20 [0203.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x20) returned 0 [0203.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.149] GetLastError () returned 0x5 [0203.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x20) returned 0 [0203.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc10) returned 1 Thread: id = 6682 os_tid = 0x22d0 [0201.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x20 [0203.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x20) returned 0 [0203.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.151] GetLastError () returned 0x5 [0203.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x20) returned 0 [0203.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f858) returned 1 Thread: id = 6683 os_tid = 0x22d4 [0201.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x20 [0203.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x20) returned 0 [0203.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.152] GetLastError () returned 0x5 [0203.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x20) returned 0 [0203.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 Thread: id = 6684 os_tid = 0x22d8 [0201.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x20 [0203.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x20) returned 0 [0203.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.112] GetLastError () returned 0x5 [0203.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x20) returned 0 [0203.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eb40) returned 1 Thread: id = 6685 os_tid = 0x22dc [0201.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf")) returned 0x20 [0202.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x20) returned 0 [0202.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.984] GetLastError () returned 0x5 [0202.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x20) returned 0 [0202.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f118) returned 1 Thread: id = 6686 os_tid = 0x22e0 [0201.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf")) returned 0x20 [0203.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x20) returned 0 [0203.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.216] GetLastError () returned 0x5 [0203.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x20) returned 0 [0203.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 6687 os_tid = 0x22e4 [0201.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf")) returned 0x20 [0203.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF", dwFileAttributes=0x20) returned 0 [0203.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.214] GetLastError () returned 0x5 [0203.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF", dwFileAttributes=0x20) returned 0 [0203.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 6688 os_tid = 0x21cc [0201.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf")) returned 0x20 [0203.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF", dwFileAttributes=0x20) returned 0 [0203.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.213] GetLastError () returned 0x5 [0203.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF", dwFileAttributes=0x20) returned 0 [0203.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f6f0) returned 1 Thread: id = 6689 os_tid = 0x21d0 [0201.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf")) returned 0x20 [0203.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF", dwFileAttributes=0x20) returned 0 [0203.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.212] GetLastError () returned 0x5 [0203.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF", dwFileAttributes=0x20) returned 0 [0203.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 6690 os_tid = 0x21d4 [0201.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf")) returned 0x20 [0203.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF", dwFileAttributes=0x20) returned 0 [0203.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.198] GetLastError () returned 0x5 [0203.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF", dwFileAttributes=0x20) returned 0 [0203.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ede8) returned 1 Thread: id = 6691 os_tid = 0x2c08 [0201.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf")) returned 0x20 [0203.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF", dwFileAttributes=0x20) returned 0 [0203.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.154] GetLastError () returned 0x5 [0203.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF", dwFileAttributes=0x20) returned 0 [0203.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f090) returned 1 Thread: id = 6692 os_tid = 0x2c0c [0201.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf")) returned 0x20 [0203.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF", dwFileAttributes=0x20) returned 0 [0203.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.156] GetLastError () returned 0x5 [0203.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF", dwFileAttributes=0x20) returned 0 [0203.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f3c0) returned 1 Thread: id = 6693 os_tid = 0x2c10 [0201.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid")) returned 0x20 [0203.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID", dwFileAttributes=0x20) returned 0 [0203.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.157] GetLastError () returned 0x5 [0203.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID", dwFileAttributes=0x20) returned 0 [0203.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ebc8) returned 1 Thread: id = 6694 os_tid = 0x2c58 [0201.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid")) returned 0x20 [0203.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID", dwFileAttributes=0x20) returned 0 [0203.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.159] GetLastError () returned 0x5 [0203.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID", dwFileAttributes=0x20) returned 0 [0203.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f008) returned 1 Thread: id = 6695 os_tid = 0x2c64 [0201.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x20 [0203.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF", dwFileAttributes=0x20) returned 0 [0203.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.161] GetLastError () returned 0x5 [0203.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF", dwFileAttributes=0x20) returned 0 [0203.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 6696 os_tid = 0x2c68 [0201.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x20 [0203.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF", dwFileAttributes=0x20) returned 0 [0203.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.201] GetLastError () returned 0x5 [0203.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF", dwFileAttributes=0x20) returned 0 [0203.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eef8) returned 1 Thread: id = 6697 os_tid = 0x2c94 [0201.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x20 [0203.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF", dwFileAttributes=0x20) returned 0 [0203.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.203] GetLastError () returned 0x5 [0203.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF", dwFileAttributes=0x20) returned 0 [0203.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 Thread: id = 6698 os_tid = 0x2c98 [0201.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x20 [0203.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF", dwFileAttributes=0x20) returned 0 [0203.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.204] GetLastError () returned 0x5 [0203.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF", dwFileAttributes=0x20) returned 0 [0203.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f800) returned 1 Thread: id = 6699 os_tid = 0x2ca8 [0201.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x20 [0203.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF", dwFileAttributes=0x20) returned 0 [0203.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.205] GetLastError () returned 0x5 [0203.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF", dwFileAttributes=0x20) returned 0 [0203.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f1a0) returned 1 Thread: id = 6700 os_tid = 0x1ae4 [0201.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x20 [0203.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF", dwFileAttributes=0x20) returned 0 [0203.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.207] GetLastError () returned 0x5 [0203.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF", dwFileAttributes=0x20) returned 0 [0203.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 6701 os_tid = 0x1bb4 [0201.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x20 [0203.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF", dwFileAttributes=0x20) returned 0 [0203.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.208] GetLastError () returned 0x5 [0203.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF", dwFileAttributes=0x20) returned 0 [0203.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 Thread: id = 6702 os_tid = 0x1bcc [0201.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x20 [0203.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF", dwFileAttributes=0x20) returned 0 [0203.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.209] GetLastError () returned 0x5 [0203.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF", dwFileAttributes=0x20) returned 0 [0203.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f2b0) returned 1 Thread: id = 6703 os_tid = 0x1d10 [0201.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x20 [0203.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF", dwFileAttributes=0x20) returned 0 [0203.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.210] GetLastError () returned 0x5 [0203.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF", dwFileAttributes=0x20) returned 0 [0203.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f448) returned 1 Thread: id = 6704 os_tid = 0x1d14 [0201.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x20 [0203.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF", dwFileAttributes=0x20) returned 0 [0203.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.110] GetLastError () returned 0x5 [0203.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF", dwFileAttributes=0x20) returned 0 [0203.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 6705 os_tid = 0x1d1c [0202.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x20 [0203.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF", dwFileAttributes=0x20) returned 0 [0203.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.200] GetLastError () returned 0x5 [0203.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF", dwFileAttributes=0x20) returned 0 [0203.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f338) returned 1 Thread: id = 6706 os_tid = 0x1d38 [0202.759] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json")) returned 0x2020 [0210.117] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0210.119] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda4 [0210.119] GetFileSizeEx (in: hFile=0xda4, lpFileSize=0x93eff50 | out: lpFileSize=0x93eff50*=642) returned 1 [0210.119] SetFilePointerEx (in: hFile=0xda4, liDistanceToMove=0x27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.119] ReadFile (in: hFile=0xda4, lpBuffer=0x93eff5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x93eff38, lpOverlapped=0x0 | out: lpBuffer=0x93eff5c*, lpNumberOfBytesRead=0x93eff38*=0x4, lpOverlapped=0x0) returned 1 [0210.122] SetFilePointerEx (in: hFile=0xda4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ea0 [0210.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ab8 [0210.123] NtQuerySystemTime (in: CurrentTime=0x93efed8 | out: CurrentTime=0x93efed8*=132471540778416000) returned 0x0 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x7e7271c6 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x35afea88 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x10e10277 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x25fe33fd [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x1b22f180 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x72a7152 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x496fec75 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x72e6b4f [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x628e5838 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x3eca7165 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x505c3000 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x6499010d [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x500198b [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x15c406a1 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x1b587538 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x50ad4f5c [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x7f0407fe [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x2364de38 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x456d60a2 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x76238e49 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x4fdba5c0 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x2a3887c8 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x66d8ab12 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0xc1867f7 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0xc1867f7 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x2fb087d4 [0210.123] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x5858aa3c [0210.124] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x309f67f5 [0210.124] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0xc4181dd [0210.124] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x71b2067a [0210.124] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0xd5f67e9 [0210.124] RtlRandomEx (in: Seed=0x93efed0 | out: Seed=0x93efed0) returned 0x7ef21bf0 [0210.133] ReadFile (in: hFile=0xda4, lpBuffer=0x8353d48, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0x93efecc, lpOverlapped=0x0 | out: lpBuffer=0x8353d48*, lpNumberOfBytesRead=0x93efecc*=0x282, lpOverlapped=0x0) returned 1 [0210.133] SetFilePointerEx (in: hFile=0xda4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.133] WriteFile (in: hFile=0xda4, lpBuffer=0x835b558*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x93efed0, lpOverlapped=0x0 | out: lpBuffer=0x835b558*, lpNumberOfBytesWritten=0x93efed0*=0x282, lpOverlapped=0x0) returned 1 [0212.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c68 [0212.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0212.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0212.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835b558) returned 1 [0212.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8353d48) returned 1 [0212.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df89e8) returned 1 [0212.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e54a8) returned 1 [0212.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ae0 [0212.363] SetFilePointerEx (in: hFile=0xda4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.363] WriteFile (in: hFile=0xda4, lpBuffer=0x8407488*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x93eff44, lpOverlapped=0x0 | out: lpBuffer=0x8407488*, lpNumberOfBytesWritten=0x93eff44*=0x10c, lpOverlapped=0x0) returned 1 [0214.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407488) returned 1 [0214.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b10) returned 1 [0214.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0214.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ae0) returned 1 [0214.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c68) returned 1 [0214.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ea0) returned 1 [0214.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca378) returned 1 [0214.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0214.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8404f20 [0214.021] wcscpy (in: _Dest=0x8404f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" [0214.021] wcscat (in: _Dest=0x8404f20, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.f0dbec" [0214.021] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.f0dbec", NtPathName=0x93efec8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e174f0 [0215.728] FlushFileBuffers (hFile=0xda4) returned 1 [0215.734] CloseHandle (hObject=0xda4) returned 1 [0215.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81866c8 [0215.996] wcscpy (in: _Dest=0x81866c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" [0215.996] wcscat (in: _Dest=0x81866c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\F0DBEC-Readme.txt" [0215.996] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\f0dbec-readme.txt")) returned 0xffffffff [0215.996] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.455] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x93efeec, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x93efeec*=0x70c, lpOverlapped=0x0) returned 1 [0216.457] CloseHandle (hObject=0x10c4) returned 1 [0216.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81866c8) returned 1 [0216.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57bb8) returned 1 Thread: id = 6707 os_tid = 0x2004 [0202.759] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json")) returned 0x2020 [0210.150] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0210.151] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cc4 [0210.151] GetFileSizeEx (in: hFile=0x1cc4, lpFileSize=0x42af8f0 | out: lpFileSize=0x42af8f0*=701) returned 1 [0210.151] SetFilePointerEx (in: hFile=0x1cc4, liDistanceToMove=0x2b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.151] ReadFile (in: hFile=0x1cc4, lpBuffer=0x42af8fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x42af8d8, lpOverlapped=0x0 | out: lpBuffer=0x42af8fc*, lpNumberOfBytesRead=0x42af8d8*=0x4, lpOverlapped=0x0) returned 1 [0210.159] SetFilePointerEx (in: hFile=0x1cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0210.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9dd8 [0210.160] NtQuerySystemTime (in: CurrentTime=0x42af878 | out: CurrentTime=0x42af878*=132471540778728000) returned 0x0 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x5b6becc4 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x78df51df [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x6a801477 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x65edaa08 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x12fa08d2 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x5c80c58b [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x542057f4 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x5eb48ba8 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x1266f58 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x5e550cf [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x25ac80ee [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x3c95bc30 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x4f3042c0 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x11b76fd6 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x2d0462ae [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x7905944e [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x7aa3a369 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x2aa99c93 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x39f6b77 [0210.160] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x2a6b60fd [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x2a3887c8 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x73a8fd85 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x52af14e2 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x17b8b20 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x6f8bdd86 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x4bf20737 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x52495c86 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x4069cb4c [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x15b89431 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x6c25b346 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x6b3fa5d2 [0210.161] RtlRandomEx (in: Seed=0x42af870 | out: Seed=0x42af870) returned 0x259672d5 [0210.172] ReadFile (in: hFile=0x1cc4, lpBuffer=0x836a578, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x42af86c, lpOverlapped=0x0 | out: lpBuffer=0x836a578*, lpNumberOfBytesRead=0x42af86c*=0x2bd, lpOverlapped=0x0) returned 1 [0210.172] SetFilePointerEx (in: hFile=0x1cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.172] WriteFile (in: hFile=0x1cc4, lpBuffer=0x8348930*, nNumberOfBytesToWrite=0x2bd, lpNumberOfBytesWritten=0x42af870, lpOverlapped=0x0 | out: lpBuffer=0x8348930*, lpNumberOfBytesWritten=0x42af870*=0x2bd, lpOverlapped=0x0) returned 1 [0212.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0212.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a38 [0212.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a38) returned 1 [0212.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8348930) returned 1 [0212.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x836a578) returned 1 [0212.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8b50) returned 1 [0212.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5268) returned 1 [0212.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69a80 [0212.360] SetFilePointerEx (in: hFile=0x1cc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.360] WriteFile (in: hFile=0x1cc4, lpBuffer=0x8406bc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x42af8e4, lpOverlapped=0x0 | out: lpBuffer=0x8406bc8*, lpNumberOfBytesWritten=0x42af8e4*=0x10c, lpOverlapped=0x0) returned 1 [0214.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406bc8) returned 1 [0214.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ab0) returned 1 [0214.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a38) returned 1 [0214.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a80) returned 1 [0214.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0214.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0214.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9680) returned 1 [0214.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ba8) returned 1 [0214.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8405400 [0214.017] wcscpy (in: _Dest=0x8405400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" [0214.017] wcscat (in: _Dest=0x8405400, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.f0dbec" [0214.017] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.f0dbec", NtPathName=0x42af868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16780 [0215.723] FlushFileBuffers (hFile=0x1cc4) returned 1 [0215.729] CloseHandle (hObject=0x1cc4) returned 1 [0215.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8186938 [0215.994] wcscpy (in: _Dest=0x8186938, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" [0215.994] wcscat (in: _Dest=0x8186938, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\F0DBEC-Readme.txt" [0215.994] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\f0dbec-readme.txt")) returned 0xffffffff [0215.994] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.436] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x42af88c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x42af88c*=0x70c, lpOverlapped=0x0) returned 1 [0216.439] CloseHandle (hObject=0x10c4) returned 1 [0216.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186938) returned 1 [0216.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f00) returned 1 Thread: id = 6708 os_tid = 0x2008 [0202.760] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json")) returned 0x2020 [0210.194] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0210.194] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c08 [0210.195] GetFileSizeEx (in: hFile=0x1c08, lpFileSize=0x78cf940 | out: lpFileSize=0x78cf940*=875) returned 1 [0210.195] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x367, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.195] ReadFile (in: hFile=0x1c08, lpBuffer=0x78cf94c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x78cf928, lpOverlapped=0x0 | out: lpBuffer=0x78cf94c*, lpNumberOfBytesRead=0x78cf928*=0x4, lpOverlapped=0x0) returned 1 [0210.197] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0210.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0210.198] NtQuerySystemTime (in: CurrentTime=0x78cf8c8 | out: CurrentTime=0x78cf8c8*=132471540779196000) returned 0x0 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x24a2890d [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x5c3e4120 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x26fe7a79 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x51a5596e [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0xff6e80d [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x629ec1a [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x358ab13f [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x24d91e64 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x2010d8a1 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x5839aa40 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x1691ff3 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x61aa3ba0 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x7429e8e9 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x12d41b36 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x60a3aed7 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x21c5b4bf [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x344b9b45 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x1e0fb474 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x4ce8bc9d [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x550d9f51 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x1d9cfa1 [0210.198] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x7fa8566c [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x77fe5e26 [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x55fdabef [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x6c925cd4 [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x1af818c0 [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x253da757 [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x4f716788 [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x56567603 [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x57aacbc4 [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x29fd4d1 [0210.199] RtlRandomEx (in: Seed=0x78cf8c0 | out: Seed=0x78cf8c0) returned 0x47a8b0f8 [0210.207] ReadFile (in: hFile=0x1c08, lpBuffer=0x8380da8, nNumberOfBytesToRead=0x36b, lpNumberOfBytesRead=0x78cf8bc, lpOverlapped=0x0 | out: lpBuffer=0x8380da8*, lpNumberOfBytesRead=0x78cf8bc*=0x36b, lpOverlapped=0x0) returned 1 [0210.207] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.207] WriteFile (in: hFile=0x1c08, lpBuffer=0x83849b0*, nNumberOfBytesToWrite=0x36b, lpNumberOfBytesWritten=0x78cf8c0, lpOverlapped=0x0 | out: lpBuffer=0x83849b0*, lpNumberOfBytesWritten=0x78cf8c0*=0x36b, lpOverlapped=0x0) returned 1 [0212.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42330 [0212.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43550 [0212.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43550) returned 1 [0212.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83849b0) returned 1 [0212.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8380da8) returned 1 [0212.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8a60) returned 1 [0212.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4260) returned 1 [0212.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e699c0 [0212.361] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.362] WriteFile (in: hFile=0x1c08, lpBuffer=0x8407370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x78cf934, lpOverlapped=0x0 | out: lpBuffer=0x8407370*, lpNumberOfBytesWritten=0x78cf934*=0x10c, lpOverlapped=0x0) returned 1 [0214.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407370) returned 1 [0214.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699f0) returned 1 [0214.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43550) returned 1 [0214.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699c0) returned 1 [0214.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42330) returned 1 [0214.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0214.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ce8) returned 1 [0214.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d88) returned 1 [0214.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8405538 [0214.019] wcscpy (in: _Dest=0x8405538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" [0214.019] wcscat (in: _Dest=0x8405538, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.f0dbec" [0214.019] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.f0dbec", NtPathName=0x78cf8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16628 [0215.726] FlushFileBuffers (hFile=0x1c08) returned 1 [0215.732] CloseHandle (hObject=0x1c08) returned 1 [0215.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8186800 [0215.995] wcscpy (in: _Dest=0x8186800, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" [0215.995] wcscat (in: _Dest=0x8186800, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\F0DBEC-Readme.txt" [0215.995] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\f0dbec-readme.txt")) returned 0xffffffff [0215.995] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.440] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x78cf8dc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x78cf8dc*=0x70c, lpOverlapped=0x0) returned 1 [0216.443] CloseHandle (hObject=0x10c4) returned 1 [0216.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186800) returned 1 [0216.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57150) returned 1 Thread: id = 6709 os_tid = 0x200c [0202.760] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json")) returned 0x2020 [0210.230] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0210.231] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1aac [0210.231] GetFileSizeEx (in: hFile=0x1aac, lpFileSize=0x76efce0 | out: lpFileSize=0x76efce0*=617) returned 1 [0210.231] SetFilePointerEx (in: hFile=0x1aac, liDistanceToMove=0x265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.231] ReadFile (in: hFile=0x1aac, lpBuffer=0x76efcec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x76efcc8, lpOverlapped=0x0 | out: lpBuffer=0x76efcec*, lpNumberOfBytesRead=0x76efcc8*=0x4, lpOverlapped=0x0) returned 1 [0210.235] SetFilePointerEx (in: hFile=0x1aac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0210.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8000 [0210.235] NtQuerySystemTime (in: CurrentTime=0x76efc68 | out: CurrentTime=0x76efc68*=132471540779508000) returned 0x0 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x608fc755 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x46825fba [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x309160ac [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x5e1d2c6c [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x229e2a84 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x15a69838 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x758656f0 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x5c577473 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x6da71ddd [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x47fa34cf [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x317ffe91 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x2c8d0b65 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x1a245696 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x62827040 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x61f2e01e [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0xff3ce82 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x3d012c16 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x14d56c5f [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x71e1440e [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x2abbb24f [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x19f70440 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x7fab5348 [0210.235] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x18aadaae [0210.236] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x742b2a34 [0210.236] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0xc595f56 [0210.236] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x1fdbd049 [0210.236] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x2094bd40 [0210.236] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x31d7bffe [0210.236] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x2ca1b340 [0210.236] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x2fe6cb47 [0210.236] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x73d76e37 [0210.236] RtlRandomEx (in: Seed=0x76efc60 | out: Seed=0x76efc60) returned 0x7f505e3e [0210.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x835f160 [0210.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82a6498 [0210.246] ReadFile (in: hFile=0x1aac, lpBuffer=0x835f160, nNumberOfBytesToRead=0x269, lpNumberOfBytesRead=0x76efc5c, lpOverlapped=0x0 | out: lpBuffer=0x835f160*, lpNumberOfBytesRead=0x76efc5c*=0x269, lpOverlapped=0x0) returned 1 [0210.246] SetFilePointerEx (in: hFile=0x1aac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.246] WriteFile (in: hFile=0x1aac, lpBuffer=0x82a6498*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x76efc60, lpOverlapped=0x0 | out: lpBuffer=0x82a6498*, lpNumberOfBytesWritten=0x76efc60*=0x269, lpOverlapped=0x0) returned 1 [0212.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d428a8 [0212.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42da8 [0212.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0212.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82a6498) returned 1 [0212.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x835f160) returned 1 [0212.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8ad8) returned 1 [0212.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4bf0) returned 1 [0212.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0212.369] SetFilePointerEx (in: hFile=0x1aac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.369] WriteFile (in: hFile=0x1aac, lpBuffer=0x8406ce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x76efcd4, lpOverlapped=0x0 | out: lpBuffer=0x8406ce0*, lpNumberOfBytesWritten=0x76efcd4*=0x10c, lpOverlapped=0x0) returned 1 [0214.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406ce0) returned 1 [0214.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0214.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0214.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0214.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d428a8) returned 1 [0214.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0214.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b08) returned 1 [0214.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0214.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8404cb0 [0214.027] wcscpy (in: _Dest=0x8404cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" [0214.027] wcscat (in: _Dest=0x8404cb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.f0dbec" [0214.027] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.f0dbec", NtPathName=0x76efc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17a50 [0215.752] FlushFileBuffers (hFile=0x1aac) returned 1 [0215.756] CloseHandle (hObject=0x1aac) returned 1 [0216.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x84047d0 [0216.017] wcscpy (in: _Dest=0x84047d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" [0216.018] wcscat (in: _Dest=0x84047d0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\F0DBEC-Readme.txt" [0216.018] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\f0dbec-readme.txt")) returned 0xffffffff [0216.018] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.464] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x76efc7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x76efc7c*=0x70c, lpOverlapped=0x0) returned 1 [0216.466] CloseHandle (hObject=0x10c4) returned 1 [0216.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84047d0) returned 1 [0216.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57278) returned 1 Thread: id = 6710 os_tid = 0x2010 [0202.761] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0210.263] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0210.264] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2ccc [0210.264] GetFileSizeEx (in: hFile=0x2ccc, lpFileSize=0x905fab8 | out: lpFileSize=0x905fab8*=617) returned 1 [0210.264] SetFilePointerEx (in: hFile=0x2ccc, liDistanceToMove=0x265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.264] ReadFile (in: hFile=0x2ccc, lpBuffer=0x905fac4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x905faa0, lpOverlapped=0x0 | out: lpBuffer=0x905fac4*, lpNumberOfBytesRead=0x905faa0*=0x4, lpOverlapped=0x0) returned 1 [0210.267] SetFilePointerEx (in: hFile=0x2ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0210.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0210.267] NtQuerySystemTime (in: CurrentTime=0x905fa40 | out: CurrentTime=0x905fa40*=132471540779820000) returned 0x0 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x3c27abd5 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x200212d1 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x31c3f640 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x1d917fc0 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x39f26c3c [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x35eae62f [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x1a731991 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x428b5a9d [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x130497d2 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x6084a44f [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x50acc06 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x6cf46383 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x1afdfb2d [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x9cf0875 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x693d815e [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x32af156a [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0xa36075a [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x7ecd762f [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x2c2944d7 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x44c3f871 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x6d765e09 [0210.267] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x254da93b [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x3b92eb00 [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x35a54db2 [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x3e3ae631 [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x11e04888 [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x1342cbeb [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x5446db1b [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x5e6e51b3 [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x47bdcd30 [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x1c20ac13 [0210.268] RtlRandomEx (in: Seed=0x905fa38 | out: Seed=0x905fa38) returned 0x8027e7a [0210.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x829b080 [0210.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82b54b8 [0210.278] ReadFile (in: hFile=0x2ccc, lpBuffer=0x829b080, nNumberOfBytesToRead=0x269, lpNumberOfBytesRead=0x905fa34, lpOverlapped=0x0 | out: lpBuffer=0x829b080*, lpNumberOfBytesRead=0x905fa34*=0x269, lpOverlapped=0x0) returned 1 [0210.278] SetFilePointerEx (in: hFile=0x2ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.279] WriteFile (in: hFile=0x2ccc, lpBuffer=0x82b54b8*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x905fa38, lpOverlapped=0x0 | out: lpBuffer=0x82b54b8*, lpNumberOfBytesWritten=0x905fa38*=0x269, lpOverlapped=0x0) returned 1 [0212.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d427e0 [0212.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43730 [0212.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0212.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82b54b8) returned 1 [0212.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829b080) returned 1 [0212.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df8970) returned 1 [0212.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e4a88) returned 1 [0212.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e695a0 [0212.370] SetFilePointerEx (in: hFile=0x2ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.370] WriteFile (in: hFile=0x2ccc, lpBuffer=0x8406df8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x905faac, lpOverlapped=0x0 | out: lpBuffer=0x8406df8*, lpNumberOfBytesWritten=0x905faac*=0x10c, lpOverlapped=0x0) returned 1 [0214.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406df8) returned 1 [0214.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695d0) returned 1 [0214.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0214.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695a0) returned 1 [0214.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d427e0) returned 1 [0214.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0214.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0214.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca170) returned 1 [0214.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3e3ceb0 [0214.011] wcscpy (in: _Dest=0x3e3ceb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" [0214.011] wcscat (in: _Dest=0x3e3ceb0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.f0dbec" [0214.011] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.f0dbec", NtPathName=0x905fa30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e17648 [0215.718] FlushFileBuffers (hFile=0x2ccc) returned 1 [0215.724] CloseHandle (hObject=0x2ccc) returned 1 [0215.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x8186a70 [0215.992] wcscpy (in: _Dest=0x8186a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" [0215.992] wcscat (in: _Dest=0x8186a70, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\F0DBEC-Readme.txt" [0215.992] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\f0dbec-readme.txt")) returned 0xffffffff [0215.992] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.431] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x905fa54, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x905fa54*=0x70c, lpOverlapped=0x0) returned 1 [0216.434] CloseHandle (hObject=0x10c4) returned 1 [0216.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186a70) returned 1 [0216.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405058) returned 1 Thread: id = 6711 os_tid = 0x2014 [0202.761] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json")) returned 0x2020 [0210.301] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0210.302] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x117c [0210.302] GetFileSizeEx (in: hFile=0x117c, lpFileSize=0x5c7fa90 | out: lpFileSize=0x5c7fa90*=696) returned 1 [0210.302] SetFilePointerEx (in: hFile=0x117c, liDistanceToMove=0x2b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.303] ReadFile (in: hFile=0x117c, lpBuffer=0x5c7fa9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c7fa78, lpOverlapped=0x0 | out: lpBuffer=0x5c7fa9c*, lpNumberOfBytesRead=0x5c7fa78*=0x4, lpOverlapped=0x0) returned 1 [0210.335] SetFilePointerEx (in: hFile=0x117c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca350 [0210.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063430 [0210.335] NtQuerySystemTime (in: CurrentTime=0x5c7fa18 | out: CurrentTime=0x5c7fa18*=132471540780600000) returned 0x0 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x78a20d07 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x670f2adf [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x1a21dd00 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x2acecd3a [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x4388583f [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x3abc02f3 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x7940fee6 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x7642a046 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x2397fac0 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x4fab79bb [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x957638c [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x19a0f093 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x34fff3f5 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x15c406a1 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x5def2d43 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x643b2487 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x5f3b0dda [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x61a14faf [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x654df6db [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x37e5514a [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0xf4088fc [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x3fdaad0d [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0xad544a6 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x19120935 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x5ca1653d [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x11d029f4 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x15fd9a16 [0210.336] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x487f2845 [0210.337] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x1886faab [0210.337] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x36ac7228 [0210.337] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x7c03ad79 [0210.337] RtlRandomEx (in: Seed=0x5c7fa10 | out: Seed=0x5c7fa10) returned 0x2392ed23 [0210.347] ReadFile (in: hFile=0x117c, lpBuffer=0x82aa0a0, nNumberOfBytesToRead=0x2b8, lpNumberOfBytesRead=0x5c7fa0c, lpOverlapped=0x0 | out: lpBuffer=0x82aa0a0*, lpNumberOfBytesRead=0x5c7fa0c*=0x2b8, lpOverlapped=0x0) returned 1 [0210.347] SetFilePointerEx (in: hFile=0x117c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.347] WriteFile (in: hFile=0x117c, lpBuffer=0x829ec88*, nNumberOfBytesToWrite=0x2b8, lpNumberOfBytesWritten=0x5c7fa10, lpOverlapped=0x0 | out: lpBuffer=0x829ec88*, lpNumberOfBytesWritten=0x5c7fa10*=0x2b8, lpOverlapped=0x0) returned 1 [0212.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42538 [0212.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42bf0 [0212.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0212.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x829ec88) returned 1 [0212.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82aa0a0) returned 1 [0212.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402f48) returned 1 [0212.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5538) returned 1 [0212.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e68fd0 [0212.367] SetFilePointerEx (in: hFile=0x117c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.367] WriteFile (in: hFile=0x117c, lpBuffer=0x8407258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5c7fa84, lpOverlapped=0x0 | out: lpBuffer=0x8407258*, lpNumberOfBytesWritten=0x5c7fa84*=0x10c, lpOverlapped=0x0) returned 1 [0214.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407258) returned 1 [0214.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68f10) returned 1 [0214.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bf0) returned 1 [0214.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68fd0) returned 1 [0214.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42538) returned 1 [0214.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca350) returned 1 [0214.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062148) returned 1 [0214.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80621e8) returned 1 [0214.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8404de8 [0214.024] wcscpy (in: _Dest=0x8404de8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" [0214.024] wcscat (in: _Dest=0x8404de8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.f0dbec" [0214.024] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.f0dbec", NtPathName=0x5c7fa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e178f8 [0215.749] FlushFileBuffers (hFile=0x117c) returned 1 [0215.753] CloseHandle (hObject=0x117c) returned 1 [0216.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403e10 [0216.012] wcscpy (in: _Dest=0x8403e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" [0216.012] wcscat (in: _Dest=0x8403e10, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\F0DBEC-Readme.txt" [0216.012] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\f0dbec-readme.txt")) returned 0xffffffff [0216.012] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.460] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x5c7fa2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x5c7fa2c*=0x70c, lpOverlapped=0x0) returned 1 [0216.462] CloseHandle (hObject=0x10c4) returned 1 [0216.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403e10) returned 1 [0216.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575f0) returned 1 Thread: id = 6712 os_tid = 0x2018 [0202.762] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0210.368] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0210.369] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22a8 [0210.370] GetFileSizeEx (in: hFile=0x22a8, lpFileSize=0x869fc80 | out: lpFileSize=0x869fc80*=667) returned 1 [0210.370] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x297, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.370] ReadFile (in: hFile=0x22a8, lpBuffer=0x869fc8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x869fc68, lpOverlapped=0x0 | out: lpBuffer=0x869fc8c*, lpNumberOfBytesRead=0x869fc68*=0x4, lpOverlapped=0x0) returned 1 [0210.372] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062288 [0210.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063200 [0210.373] NtQuerySystemTime (in: CurrentTime=0x869fc08 | out: CurrentTime=0x869fc08*=132471540780912000) returned 0x0 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x65b3881c [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x5e6e51b3 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x44bb9f40 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x456d29 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x2387f281 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x382cade6 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x3cbb5a06 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x70f2ad [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x155179ec [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x19ace719 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0xdc35b5d [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x79ac5fc2 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x606f4ba8 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x38aea940 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x5260e9f7 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0xef326f1 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x1028de6f [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x5a787283 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x6a19a8bd [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x5860c44a [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x7c0998b8 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x55662d66 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x4f1dcbd [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x188c1ba2 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x150d71f6 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x5b95a7e0 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x5d1df42d [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x38b7b43c [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x75c2897d [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x32407f26 [0210.373] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x21283684 [0210.374] RtlRandomEx (in: Seed=0x869fc00 | out: Seed=0x869fc00) returned 0x4af58e0b [0210.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0210.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x82c44d8 [0210.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x828fc68 [0210.383] ReadFile (in: hFile=0x22a8, lpBuffer=0x82c44d8, nNumberOfBytesToRead=0x29b, lpNumberOfBytesRead=0x869fbfc, lpOverlapped=0x0 | out: lpBuffer=0x82c44d8*, lpNumberOfBytesRead=0x869fbfc*=0x29b, lpOverlapped=0x0) returned 1 [0210.383] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.383] WriteFile (in: hFile=0x22a8, lpBuffer=0x828fc68*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x869fc00, lpOverlapped=0x0 | out: lpBuffer=0x828fc68*, lpNumberOfBytesWritten=0x869fc00*=0x29b, lpOverlapped=0x0) returned 1 [0212.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d425d8 [0212.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d30 [0212.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0212.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x828fc68) returned 1 [0212.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x82c44d8) returned 1 [0212.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84030b0) returned 1 [0212.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e49f8) returned 1 [0212.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69120 [0212.365] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.366] WriteFile (in: hFile=0x22a8, lpBuffer=0x8406308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x869fc74, lpOverlapped=0x0 | out: lpBuffer=0x8406308*, lpNumberOfBytesWritten=0x869fc74*=0x10c, lpOverlapped=0x0) returned 1 [0214.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406308) returned 1 [0214.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69150) returned 1 [0214.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d30) returned 1 [0214.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69120) returned 1 [0214.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d425d8) returned 1 [0214.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8062288) returned 1 [0214.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b78) returned 1 [0214.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064b50) returned 1 [0214.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x3e3dcc8 [0214.023] wcscpy (in: _Dest=0x3e3dcc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" [0214.023] wcscat (in: _Dest=0x3e3dcc8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.f0dbec" [0214.023] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.f0dbec", NtPathName=0x869fbf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e16e38 [0215.731] FlushFileBuffers (hFile=0x22a8) returned 1 [0215.734] CloseHandle (hObject=0x22a8) returned 1 [0215.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x130) returned 0x8186590 [0215.998] wcscpy (in: _Dest=0x8186590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" [0215.998] wcscat (in: _Dest=0x8186590, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\F0DBEC-Readme.txt" [0215.998] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\f0dbec-readme.txt")) returned 0xffffffff [0215.998] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.445] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x869fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x869fc1c*=0x70c, lpOverlapped=0x0) returned 1 [0216.448] CloseHandle (hObject=0x10c4) returned 1 [0216.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186590) returned 1 [0216.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404698) returned 1 Thread: id = 6713 os_tid = 0x2028 [0202.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x81dfcd8 [0202.762] wcscpy (in: _Dest=0x81dfcd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" [0202.762] wcscat (in: _Dest=0x81dfcd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" [0202.763] wcscat (in: _Dest=0x81dfcd8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*" [0202.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09ec0 [0202.763] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a79dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a9ff20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a9ff20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0202.763] wcscmp (_String1=".", _String2=".") returned 0 [0202.763] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a79dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a9ff20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a9ff20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.763] wcscmp (_String1="..", _String2=".") returned 1 [0202.763] wcscmp (_String1="..", _String2="..") returned 0 [0202.763] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a9ff20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4aa06f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.763] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.763] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81f10e0 [0202.764] wcscpy (in: _Dest=0x81f10e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" [0202.764] wcscat (in: _Dest=0x81f10e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" [0202.764] wcscat (in: _Dest=0x81f10e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" [0202.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f10e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27dc [0202.892] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x3f09ec0 | out: lpFindFileData=0x3f09ec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a9ff20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4aa06f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.892] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0202.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09ec0) returned 1 [0202.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dfcd8) returned 1 [0202.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405ea8) returned 1 Thread: id = 6714 os_tid = 0x202c [0202.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x81dff08 [0202.764] wcscpy (in: _Dest=0x81dff08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" [0202.764] wcscat (in: _Dest=0x81dff08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" [0202.765] wcscat (in: _Dest=0x81dff08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*" [0202.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a5f8 [0202.765] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac6080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b384a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b384a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0202.765] wcscmp (_String1=".", _String2=".") returned 0 [0202.765] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac6080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b384a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b384a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.765] wcscmp (_String1="..", _String2=".") returned 1 [0202.765] wcscmp (_String1="..", _String2="..") returned 0 [0202.765] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b384a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b3a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.765] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.765] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81f1208 [0202.766] wcscpy (in: _Dest=0x81f1208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" [0202.766] wcscat (in: _Dest=0x81f1208, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" [0202.766] wcscat (in: _Dest=0x81f1208, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" [0202.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f1208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0202.893] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b384a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b3a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.894] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0202.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a5f8) returned 1 [0202.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dff08) returned 1 [0202.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406880) returned 1 Thread: id = 6715 os_tid = 0x21b4 [0202.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec710 [0202.766] wcscpy (in: _Dest=0x3dec710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" [0202.766] wcscat (in: _Dest=0x3dec710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" [0202.767] wcscat (in: _Dest=0x3dec710, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*" [0202.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09788 [0202.767] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0202.767] wcscmp (_String1=".", _String2=".") returned 0 [0202.767] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.767] wcscmp (_String1="..", _String2=".") returned 1 [0202.767] wcscmp (_String1="..", _String2="..") returned 0 [0202.767] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.767] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.767] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81f0fb8 [0202.768] wcscpy (in: _Dest=0x81f0fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" [0202.768] wcscat (in: _Dest=0x81f0fb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" [0202.768] wcscat (in: _Dest=0x81f0fb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" [0202.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2548 [0202.895] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.895] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0202.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09788) returned 1 [0202.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0202.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406308) returned 1 Thread: id = 6716 os_tid = 0x239c [0202.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec4e0 [0202.769] wcscpy (in: _Dest=0x3dec4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" [0202.769] wcscat (in: _Dest=0x3dec4e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" [0202.769] wcscat (in: _Dest=0x3dec4e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*" [0202.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a390 [0202.769] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0202.769] wcscmp (_String1=".", _String2=".") returned 0 [0202.769] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.769] wcscmp (_String1="..", _String2=".") returned 1 [0202.769] wcscmp (_String1="..", _String2="..") returned 0 [0202.770] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.770] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.770] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81f0e90 [0202.770] wcscpy (in: _Dest=0x81f0e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" [0202.770] wcscat (in: _Dest=0x81f0e90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" [0202.770] wcscat (in: _Dest=0x81f0e90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" [0202.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d4 [0202.897] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.897] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0202.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a390) returned 1 [0202.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0202.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406768) returned 1 Thread: id = 6717 os_tid = 0x23a0 [0202.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec5f8 [0202.771] wcscpy (in: _Dest=0x3dec5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" [0202.771] wcscat (in: _Dest=0x3dec5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" [0202.771] wcscat (in: _Dest=0x3dec5f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*" [0202.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09520 [0202.771] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0203.281] wcscmp (_String1=".", _String2=".") returned 0 [0203.281] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.281] wcscmp (_String1="..", _String2=".") returned 1 [0203.281] wcscmp (_String1="..", _String2="..") returned 0 [0203.281] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.281] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.281] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81f0d68 [0203.281] wcscpy (in: _Dest=0x81f0d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" [0203.281] wcscat (in: _Dest=0x81f0d68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" [0203.281] wcscat (in: _Dest=0x81f0d68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" [0203.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0203.326] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f09520 | out: lpFindFileData=0x3f09520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.326] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09520) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84060d8) returned 1 Thread: id = 6718 os_tid = 0x23a4 [0202.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec198 [0202.772] wcscpy (in: _Dest=0x3dec198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" [0202.773] wcscat (in: _Dest=0x3dec198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" [0202.773] wcscat (in: _Dest=0x3dec198, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*" [0202.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a128 [0202.773] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0203.282] wcscmp (_String1=".", _String2=".") returned 0 [0203.282] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.282] wcscmp (_String1="..", _String2=".") returned 1 [0203.282] wcscmp (_String1="..", _String2="..") returned 0 [0203.282] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.282] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.282] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x81f0c40 [0203.282] wcscpy (in: _Dest=0x81f0c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" [0203.282] wcscat (in: _Dest=0x81f0c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" [0203.282] wcscat (in: _Dest=0x81f0c40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" [0203.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81f0c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0203.330] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3f0a128 | out: lpFindFileData=0x3f0a128*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.330] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a128) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406998) returned 1 Thread: id = 6719 os_tid = 0x2428 [0202.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec3c8 [0202.774] wcscpy (in: _Dest=0x3dec3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" [0202.774] wcscat (in: _Dest=0x3dec3c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" [0202.774] wcscat (in: _Dest=0x3dec3c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*" [0202.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0af98 [0202.774] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0203.015] wcscmp (_String1=".", _String2=".") returned 0 [0203.015] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.015] wcscmp (_String1="..", _String2=".") returned 1 [0203.015] wcscmp (_String1="..", _String2="..") returned 0 [0203.015] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.015] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.015] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403a68 [0203.015] wcscpy (in: _Dest=0x8403a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" [0203.015] wcscat (in: _Dest=0x8403a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" [0203.015] wcscat (in: _Dest=0x8403a68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" [0203.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0203.080] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f0af98 | out: lpFindFileData=0x3f0af98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.080] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0203.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0af98) returned 1 [0203.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec3c8) returned 1 [0203.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406650) returned 1 Thread: id = 6720 os_tid = 0x25b0 [0202.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec080 [0202.776] wcscpy (in: _Dest=0x3dec080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" [0202.776] wcscat (in: _Dest=0x3dec080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" [0202.776] wcscat (in: _Dest=0x3dec080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*" [0202.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f092b8 [0202.776] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0203.015] wcscmp (_String1=".", _String2=".") returned 0 [0203.015] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.015] wcscmp (_String1="..", _String2=".") returned 1 [0203.015] wcscmp (_String1="..", _String2="..") returned 0 [0203.015] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5425720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.015] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.015] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x8403ba0 [0203.016] wcscpy (in: _Dest=0x8403ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" [0203.016] wcscat (in: _Dest=0x8403ba0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" [0203.016] wcscat (in: _Dest=0x8403ba0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" [0203.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x8403ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0203.311] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f092b8 | out: lpFindFileData=0x3f092b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5425720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.312] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0203.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f092b8) returned 1 [0203.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0203.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84061f0) returned 1 Thread: id = 6721 os_tid = 0x25b4 [0202.777] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json")) returned 0x2020 [0210.405] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0210.405] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2c88 [0210.406] GetFileSizeEx (in: hFile=0x2c88, lpFileSize=0xc8efae8 | out: lpFileSize=0xc8efae8*=671) returned 1 [0210.406] SetFilePointerEx (in: hFile=0x2c88, liDistanceToMove=0x29b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.406] ReadFile (in: hFile=0x2c88, lpBuffer=0xc8efaf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc8efad0, lpOverlapped=0x0 | out: lpBuffer=0xc8efaf4*, lpNumberOfBytesRead=0xc8efad0*=0x4, lpOverlapped=0x0) returned 1 [0210.408] SetFilePointerEx (in: hFile=0x2c88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8064bf0 [0210.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062120 [0210.409] NtQuerySystemTime (in: CurrentTime=0xc8efa70 | out: CurrentTime=0xc8efa70*=132471540781224000) returned 0x0 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x48cc5f1d [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x19a152c0 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x1c8451de [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x73c240a0 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x4586defe [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x184a8cc0 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x48489c34 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x1cda8d7c [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x68bbdcb6 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x49d92a8e [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x117c2c67 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x5a130582 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x7ed0ce8b [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x13f0c696 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x508a99de [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x1777a13c [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x7763aaeb [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x622c684f [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x3c0cfcdf [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x31cc42a [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x4603f45a [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x6c7ed8f4 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x6361f516 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x7c185427 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x7f6d0c97 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x59e90ddb [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x1a8e4240 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x3aefc07a [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x6bc01060 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x5f14be8c [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x75e90945 [0210.409] RtlRandomEx (in: Seed=0xc8efa68 | out: Seed=0xc8efa68) returned 0x56412e1c [0210.419] ReadFile (in: hFile=0x2c88, lpBuffer=0x814dc68, nNumberOfBytesToRead=0x29f, lpNumberOfBytesRead=0xc8efa64, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesRead=0xc8efa64*=0x29f, lpOverlapped=0x0) returned 1 [0210.419] SetFilePointerEx (in: hFile=0x2c88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.419] WriteFile (in: hFile=0x2c88, lpBuffer=0x8151870*, nNumberOfBytesToWrite=0x29f, lpNumberOfBytesWritten=0xc8efa68, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesWritten=0xc8efa68*=0x29f, lpOverlapped=0x0) returned 1 [0212.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0212.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b78 [0212.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0212.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0212.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0212.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403038) returned 1 [0212.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e3be8) returned 1 [0212.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e697e0 [0212.551] SetFilePointerEx (in: hFile=0x2c88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.552] WriteFile (in: hFile=0x2c88, lpBuffer=0x8406f10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc8efadc, lpOverlapped=0x0 | out: lpBuffer=0x8406f10*, lpNumberOfBytesWritten=0xc8efadc*=0x10c, lpOverlapped=0x0) returned 1 [0214.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8406f10) returned 1 [0214.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69810) returned 1 [0214.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0214.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e697e0) returned 1 [0214.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0214.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064bf0) returned 1 [0214.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064ba0) returned 1 [0214.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8064c18) returned 1 [0214.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8404b78 [0214.030] wcscpy (in: _Dest=0x8404b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" [0214.030] wcscat (in: _Dest=0x8404b78, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.f0dbec" [0214.030] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.f0dbec", NtPathName=0xc8efa60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17ba8 [0215.755] FlushFileBuffers (hFile=0x2c88) returned 1 [0215.761] CloseHandle (hObject=0x2c88) returned 1 [0216.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8404b78 [0216.020] wcscpy (in: _Dest=0x8404b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" [0216.020] wcscat (in: _Dest=0x8404b78, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\F0DBEC-Readme.txt" [0216.020] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\f0dbec-readme.txt")) returned 0xffffffff [0216.021] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.468] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc8efa84, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc8efa84*=0x70c, lpOverlapped=0x0) returned 1 [0216.470] CloseHandle (hObject=0x10c4) returned 1 [0216.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404b78) returned 1 [0216.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400b80) returned 1 Thread: id = 6722 os_tid = 0x2644 [0202.778] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json")) returned 0x2020 [0210.436] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0210.437] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1744 [0210.438] GetFileSizeEx (in: hFile=0x1744, lpFileSize=0xc9efdf8 | out: lpFileSize=0xc9efdf8*=642) returned 1 [0210.438] SetFilePointerEx (in: hFile=0x1744, liDistanceToMove=0x27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.438] ReadFile (in: hFile=0x1744, lpBuffer=0xc9efe04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc9efde0, lpOverlapped=0x0 | out: lpBuffer=0xc9efe04*, lpNumberOfBytesRead=0xc9efde0*=0x4, lpOverlapped=0x0) returned 1 [0210.441] SetFilePointerEx (in: hFile=0x1744, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0210.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x80620a8 [0210.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8062210 [0210.441] NtQuerySystemTime (in: CurrentTime=0xc9efd80 | out: CurrentTime=0xc9efd80*=132471540781536000) returned 0x0 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x1e5d2ae2 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x502da66a [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x35e8981d [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x42a82168 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0xbca8e09 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x72e4578 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x66fdb713 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x181fb400 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x7109efb4 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x15e05135 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x38af3d [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x4c37b571 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x50c89540 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x51e58138 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x1bab2e38 [0210.441] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x434113df [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x7a8bbc4d [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x3d0e398b [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x36d77e4c [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x3155384 [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x700ed0 [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x20d1a06 [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x7eb23e23 [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x7455ae52 [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x23e5c305 [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x2f2ee32c [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x7e90bcbc [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x48337b6e [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x24287f42 [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x80038c1 [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0xea458a8 [0210.442] RtlRandomEx (in: Seed=0xc9efd78 | out: Seed=0xc9efd78) returned 0x607e8250 [0210.451] ReadFile (in: hFile=0x1744, lpBuffer=0x815cc88, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0xc9efd74, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesRead=0xc9efd74*=0x282, lpOverlapped=0x0) returned 1 [0210.451] SetFilePointerEx (in: hFile=0x1744, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.451] WriteFile (in: hFile=0x1744, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0xc9efd78, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0xc9efd78*=0x282, lpOverlapped=0x0) returned 1 [0212.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e48 [0212.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42218 [0212.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42218) returned 1 [0212.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0212.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0212.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402ed0) returned 1 [0212.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e39f0) returned 1 [0212.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69660 [0212.654] SetFilePointerEx (in: hFile=0x1744, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.654] WriteFile (in: hFile=0x1744, lpBuffer=0x8407028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc9efdec, lpOverlapped=0x0 | out: lpBuffer=0x8407028*, lpNumberOfBytesWritten=0xc9efdec*=0x10c, lpOverlapped=0x0) returned 1 [0214.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8407028) returned 1 [0214.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69690) returned 1 [0214.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42218) returned 1 [0214.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69660) returned 1 [0214.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0214.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80620a8) returned 1 [0214.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063160) returned 1 [0214.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063250) returned 1 [0214.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x84052c8 [0214.009] wcscpy (in: _Dest=0x84052c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" [0214.009] wcscat (in: _Dest=0x84052c8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.f0dbec" [0214.009] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.f0dbec", NtPathName=0xc9efd70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16f90 [0215.716] FlushFileBuffers (hFile=0x1744) returned 1 [0215.719] CloseHandle (hObject=0x1744) returned 1 [0215.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8186ba8 [0215.988] wcscpy (in: _Dest=0x8186ba8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" [0215.988] wcscat (in: _Dest=0x8186ba8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\F0DBEC-Readme.txt" [0215.988] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\f0dbec-readme.txt")) returned 0xffffffff [0215.988] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10c4 [0216.427] WriteFile (in: hFile=0x10c4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xc9efd94, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xc9efd94*=0x70c, lpOverlapped=0x0) returned 1 [0216.429] CloseHandle (hObject=0x10c4) returned 1 [0216.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8186ba8) returned 1 [0216.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401710) returned 1 Thread: id = 6723 os_tid = 0x2648 [0202.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp")) returned 0x20 [0203.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", dwFileAttributes=0x20) returned 0 [0203.217] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.217] GetLastError () returned 0x5 [0203.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", dwFileAttributes=0x20) returned 0 [0203.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 6724 os_tid = 0x264c [0202.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp")) returned 0x20 [0202.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", dwFileAttributes=0x20) returned 0 [0202.991] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.991] GetLastError () returned 0x5 [0202.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", dwFileAttributes=0x20) returned 0 [0202.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 Thread: id = 6725 os_tid = 0x2660 [0202.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx")) returned 0x20 [0203.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", dwFileAttributes=0x20) returned 0 [0203.247] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.248] GetLastError () returned 0x5 [0203.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", dwFileAttributes=0x20) returned 0 [0203.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6726 os_tid = 0x2664 [0202.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths")) returned 0x20 [0203.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", dwFileAttributes=0x20) returned 0 [0203.249] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.250] GetLastError () returned 0x5 [0203.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", dwFileAttributes=0x20) returned 0 [0203.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6727 os_tid = 0x2790 [0202.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca")) returned 0x20 [0203.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", dwFileAttributes=0x20) returned 0 [0203.246] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.246] GetLastError () returned 0x5 [0203.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", dwFileAttributes=0x20) returned 0 [0203.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 6728 os_tid = 0x2794 [0202.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp")) returned 0x20 [0203.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", dwFileAttributes=0x20) returned 0 [0203.244] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.244] GetLastError () returned 0x5 [0203.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", dwFileAttributes=0x20) returned 0 [0203.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3335e8) returned 1 Thread: id = 6729 os_tid = 0x27a4 [0202.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg")) returned 0x20 [0202.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG", dwFileAttributes=0x20) returned 0 [0202.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.784] GetLastError () returned 0x5 [0202.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG", dwFileAttributes=0x20) returned 0 [0202.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 Thread: id = 6730 os_tid = 0x27ac [0202.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg")) returned 0x20 [0202.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG", dwFileAttributes=0x20) returned 0 [0202.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.787] GetLastError () returned 0x5 [0202.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG", dwFileAttributes=0x20) returned 0 [0202.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 Thread: id = 6731 os_tid = 0x27b0 [0202.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd")) returned 0x20 [0202.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD", dwFileAttributes=0x20) returned 0 [0202.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.789] GetLastError () returned 0x5 [0202.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD", dwFileAttributes=0x20) returned 0 [0202.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e111e8) returned 1 Thread: id = 6732 os_tid = 0x27b4 [0202.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd")) returned 0x20 [0202.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD", dwFileAttributes=0x20) returned 0 [0202.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.792] GetLastError () returned 0x5 [0202.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD", dwFileAttributes=0x20) returned 0 [0202.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 6733 os_tid = 0x27b8 [0202.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss")) returned 0x20 [0202.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS", dwFileAttributes=0x20) returned 0 [0202.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.794] GetLastError () returned 0x5 [0202.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS", dwFileAttributes=0x20) returned 0 [0202.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11148) returned 1 Thread: id = 6734 os_tid = 0x27c8 [0202.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss")) returned 0x20 [0202.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS", dwFileAttributes=0x20) returned 0 [0202.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.802] GetLastError () returned 0x5 [0202.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS", dwFileAttributes=0x20) returned 0 [0202.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 Thread: id = 6735 os_tid = 0x27cc [0202.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss")) returned 0x20 [0202.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS", dwFileAttributes=0x20) returned 0 [0202.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.805] GetLastError () returned 0x5 [0202.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS", dwFileAttributes=0x20) returned 0 [0202.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 6736 os_tid = 0x27d0 [0202.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst")) returned 0x20 [0202.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST", dwFileAttributes=0x20) returned 0 [0202.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.807] GetLastError () returned 0x5 [0202.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST", dwFileAttributes=0x20) returned 0 [0202.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 Thread: id = 6737 os_tid = 0x27d4 [0202.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss")) returned 0x20 [0202.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS", dwFileAttributes=0x20) returned 0 [0202.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.809] GetLastError () returned 0x5 [0202.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS", dwFileAttributes=0x20) returned 0 [0202.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 6738 os_tid = 0x27d8 [0202.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst")) returned 0x20 [0202.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST", dwFileAttributes=0x20) returned 0 [0202.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.811] GetLastError () returned 0x5 [0202.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST", dwFileAttributes=0x20) returned 0 [0202.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 Thread: id = 6739 os_tid = 0x27dc [0202.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg")) returned 0x20 [0202.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG", dwFileAttributes=0x20) returned 0 [0202.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.814] GetLastError () returned 0x5 [0202.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG", dwFileAttributes=0x20) returned 0 [0202.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 Thread: id = 6740 os_tid = 0x27e0 [0202.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss")) returned 0x20 [0202.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS", dwFileAttributes=0x20) returned 0 [0202.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.816] GetLastError () returned 0x5 [0202.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS", dwFileAttributes=0x20) returned 0 [0202.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 6741 os_tid = 0x2988 [0202.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst")) returned 0x20 [0202.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST", dwFileAttributes=0x20) returned 0 [0202.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.818] GetLastError () returned 0x5 [0202.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST", dwFileAttributes=0x20) returned 0 [0202.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 6742 os_tid = 0x29ac [0202.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss")) returned 0x20 [0202.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS", dwFileAttributes=0x20) returned 0 [0202.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.821] GetLastError () returned 0x5 [0202.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS", dwFileAttributes=0x20) returned 0 [0202.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 Thread: id = 6743 os_tid = 0x29b0 [0202.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst")) returned 0x20 [0202.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST", dwFileAttributes=0x20) returned 0 [0202.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.823] GetLastError () returned 0x5 [0202.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST", dwFileAttributes=0x20) returned 0 [0202.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 Thread: id = 6744 os_tid = 0x2414 [0202.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss")) returned 0x20 [0202.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS", dwFileAttributes=0x20) returned 0 [0202.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.826] GetLastError () returned 0x5 [0202.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS", dwFileAttributes=0x20) returned 0 [0202.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc908) returned 1 Thread: id = 6745 os_tid = 0x2c18 [0202.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss")) returned 0x20 [0202.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS", dwFileAttributes=0x20) returned 0 [0202.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.833] GetLastError () returned 0x5 [0202.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS", dwFileAttributes=0x20) returned 0 [0202.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7c8) returned 1 Thread: id = 6746 os_tid = 0x2c1c [0202.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss")) returned 0x20 [0202.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS", dwFileAttributes=0x20) returned 0 [0202.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.836] GetLastError () returned 0x5 [0202.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS", dwFileAttributes=0x20) returned 0 [0202.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dca48) returned 1 Thread: id = 6747 os_tid = 0x2c20 [0202.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss")) returned 0x20 [0202.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS", dwFileAttributes=0x20) returned 0 [0202.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.838] GetLastError () returned 0x5 [0202.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS", dwFileAttributes=0x20) returned 0 [0202.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbaa8) returned 1 Thread: id = 6748 os_tid = 0x2c24 [0202.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss")) returned 0x20 [0202.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS", dwFileAttributes=0x20) returned 0 [0202.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.840] GetLastError () returned 0x5 [0202.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS", dwFileAttributes=0x20) returned 0 [0202.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbbe8) returned 1 Thread: id = 6749 os_tid = 0x2c28 [0202.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss")) returned 0x20 [0202.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS", dwFileAttributes=0x20) returned 0 [0202.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.852] GetLastError () returned 0x5 [0202.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS", dwFileAttributes=0x20) returned 0 [0202.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce08) returned 1 Thread: id = 6750 os_tid = 0x2c2c [0202.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss")) returned 0x20 [0202.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS", dwFileAttributes=0x20) returned 0 [0202.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.854] GetLastError () returned 0x5 [0202.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS", dwFileAttributes=0x20) returned 0 [0202.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 6751 os_tid = 0x2c30 [0203.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss")) returned 0x20 [0203.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS", dwFileAttributes=0x20) returned 0 [0203.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.017] GetLastError () returned 0x5 [0203.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS", dwFileAttributes=0x20) returned 0 [0203.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc728) returned 1 Thread: id = 6753 os_tid = 0x2c38 [0203.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc")) returned 0x20 [0205.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC", dwFileAttributes=0x20) returned 0 [0205.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.688] GetLastError () returned 0x5 [0205.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC", dwFileAttributes=0x20) returned 0 [0205.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5508) returned 1 Thread: id = 6754 os_tid = 0x2c3c [0203.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc")) returned 0x20 [0205.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC", dwFileAttributes=0x20) returned 0 [0205.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.693] GetLastError () returned 0x5 [0205.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC", dwFileAttributes=0x20) returned 0 [0205.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 Thread: id = 6755 os_tid = 0x2c40 [0203.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc")) returned 0x20 [0205.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC", dwFileAttributes=0x20) returned 0 [0205.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.625] GetLastError () returned 0x5 [0205.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC", dwFileAttributes=0x20) returned 0 [0205.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30050) returned 1 Thread: id = 6756 os_tid = 0x2c44 [0203.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv")) returned 0x20 [0205.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV", dwFileAttributes=0x20) returned 0 [0205.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.608] GetLastError () returned 0x5 [0205.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV", dwFileAttributes=0x20) returned 0 [0205.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4608) returned 1 Thread: id = 6757 os_tid = 0x2c48 [0203.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml")) returned 0x20 [0205.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML", dwFileAttributes=0x20) returned 0 [0205.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.389] GetLastError () returned 0x5 [0205.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML", dwFileAttributes=0x20) returned 0 [0205.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5708) returned 1 Thread: id = 6758 os_tid = 0x2c4c [0203.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc")) returned 0x20 [0205.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC", dwFileAttributes=0x20) returned 0 [0205.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.698] GetLastError () returned 0x5 [0205.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC", dwFileAttributes=0x20) returned 0 [0205.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 6759 os_tid = 0x2c50 [0203.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc")) returned 0x20 [0205.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC", dwFileAttributes=0x20) returned 0 [0205.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.697] GetLastError () returned 0x5 [0205.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC", dwFileAttributes=0x20) returned 0 [0205.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 6760 os_tid = 0x14f0 [0203.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc")) returned 0x20 [0205.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC", dwFileAttributes=0x20) returned 0 [0205.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.696] GetLastError () returned 0x5 [0205.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC", dwFileAttributes=0x20) returned 0 [0205.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 6761 os_tid = 0x1ba4 [0203.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv")) returned 0x20 [0205.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV", dwFileAttributes=0x20) returned 0 [0205.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.694] GetLastError () returned 0x5 [0205.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV", dwFileAttributes=0x20) returned 0 [0205.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 6762 os_tid = 0x1f70 [0203.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml")) returned 0x20 [0205.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML", dwFileAttributes=0x20) returned 0 [0205.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.692] GetLastError () returned 0x5 [0205.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML", dwFileAttributes=0x20) returned 0 [0205.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f558) returned 1 Thread: id = 6763 os_tid = 0x1188 [0203.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc")) returned 0x20 [0205.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC", dwFileAttributes=0x20) returned 0 [0205.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.691] GetLastError () returned 0x5 [0205.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC", dwFileAttributes=0x20) returned 0 [0205.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5e0) returned 1 Thread: id = 6764 os_tid = 0xb88 [0203.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc")) returned 0x20 [0205.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC", dwFileAttributes=0x20) returned 0 [0205.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.690] GetLastError () returned 0x5 [0205.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC", dwFileAttributes=0x20) returned 0 [0205.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f778) returned 1 Thread: id = 6765 os_tid = 0x2c9c [0203.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0211.117] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0217.178] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe58 [0217.179] GetFileSizeEx (in: hFile=0xe58, lpFileSize=0x89dff60 | out: lpFileSize=0x89dff60*=667) returned 1 [0217.179] SetFilePointerEx (in: hFile=0xe58, liDistanceToMove=0x297, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.179] ReadFile (in: hFile=0xe58, lpBuffer=0x89dff6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x89dff48, lpOverlapped=0x0 | out: lpBuffer=0x89dff6c*, lpNumberOfBytesRead=0x89dff48*=0x4, lpOverlapped=0x0) returned 1 [0217.182] SetFilePointerEx (in: hFile=0xe58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b8b0 [0217.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0217.182] NtQuerySystemTime (in: CurrentTime=0x89dfee8 | out: CurrentTime=0x89dfee8*=132471540848928000) returned 0x0 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x65e3bfc3 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x119afa8 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x425f8d50 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x7cdcac49 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x2b5d9b59 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x1e521829 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x3fcea22c [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x29254677 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x20abd969 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x2356761 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x130c26bd [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x1a133e34 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x14fb78d [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x7974af1e [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x1b610b60 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x31d4b5df [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x5d36a4ca [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x4fa7173f [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x44f5f070 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x26c20d0e [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x54868201 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x1894a9bb [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x23b4cc68 [0217.183] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x697616a6 [0217.184] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x1ff233a8 [0217.184] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x37ee974a [0217.184] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x4c992047 [0217.184] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x26b517da [0217.184] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x7c78d540 [0217.184] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x72286982 [0217.184] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0xb464a36 [0217.184] RtlRandomEx (in: Seed=0x89dfee0 | out: Seed=0x89dfee0) returned 0x62613ccc [0217.195] ReadFile (in: hFile=0xe58, lpBuffer=0x148f6cc8, nNumberOfBytesToRead=0x29b, lpNumberOfBytesRead=0x89dfedc, lpOverlapped=0x0 | out: lpBuffer=0x148f6cc8*, lpNumberOfBytesRead=0x89dfedc*=0x29b, lpOverlapped=0x0) returned 1 [0217.195] SetFilePointerEx (in: hFile=0xe58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.195] WriteFile (in: hFile=0xe58, lpBuffer=0x148fa8d0*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x89dfee0, lpOverlapped=0x0 | out: lpBuffer=0x148fa8d0*, lpNumberOfBytesWritten=0x89dfee0*=0x29b, lpOverlapped=0x0) returned 1 [0221.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063e80 [0221.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x8063f20 [0221.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f20) returned 1 [0221.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148fa8d0) returned 1 [0221.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148f6cc8) returned 1 [0221.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a20) returned 1 [0221.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6b60) returned 1 [0221.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0221.973] SetFilePointerEx (in: hFile=0xe58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.973] WriteFile (in: hFile=0xe58, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x89dff54, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0x89dff54*=0x10c, lpOverlapped=0x0) returned 1 [0221.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0221.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0221.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f20) returned 1 [0221.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0221.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e80) returned 1 [0221.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b8b0) returned 1 [0221.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0221.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf30) returned 1 [0221.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ef8c58 [0221.977] wcscpy (in: _Dest=0x3ef8c58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" [0221.977] wcscat (in: _Dest=0x3ef8c58, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.f0dbec" [0221.977] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.f0dbec", NtPathName=0x89dfed8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0221.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e18260 [0221.982] FlushFileBuffers (hFile=0xe58) returned 1 [0221.983] CloseHandle (hObject=0xe58) returned 1 [0221.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x8403f48 [0221.985] wcscpy (in: _Dest=0x8403f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" [0221.985] wcscat (in: _Dest=0x8403f48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" [0221.985] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\f0dbec-readme.txt")) returned 0xffffffff [0221.985] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe58 [0221.986] WriteFile (in: hFile=0xe58, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x89dfefc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x89dfefc*=0x70c, lpOverlapped=0x0) returned 1 [0221.989] CloseHandle (hObject=0xe58) returned 1 [0221.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f48) returned 1 [0221.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405190) returned 1 Thread: id = 6766 os_tid = 0x2ca0 [0203.028] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0211.118] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0217.196] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ecc [0217.196] GetFileSizeEx (in: hFile=0x1ecc, lpFileSize=0xdb3fc90 | out: lpFileSize=0xdb3fc90*=661) returned 1 [0217.196] SetFilePointerEx (in: hFile=0x1ecc, liDistanceToMove=0x291, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.196] ReadFile (in: hFile=0x1ecc, lpBuffer=0xdb3fc9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdb3fc78, lpOverlapped=0x0 | out: lpBuffer=0xdb3fc9c*, lpNumberOfBytesRead=0xdb3fc78*=0x4, lpOverlapped=0x0) returned 1 [0217.199] SetFilePointerEx (in: hFile=0x1ecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0217.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0217.200] NtQuerySystemTime (in: CurrentTime=0xdb3fc18 | out: CurrentTime=0xdb3fc18*=132471540849240000) returned 0x0 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x77c791e4 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x224ddca2 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x709e8cdf [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x25b9a20b [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0xd988a16 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x7690247f [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x5027a17f [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x350ec7f6 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x64066bc8 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x278b765f [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x4d95a176 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x465b14c2 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x58cb7567 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x17b5441b [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x53971391 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x458c109a [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x7c4035b9 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x1f609f86 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x9a9c2b6 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x17ffe4f7 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x5b8748c3 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x2f8519d4 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x10e17ff8 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x350ed233 [0217.200] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x5db5b6e7 [0217.201] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x749bec0 [0217.201] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x1abec531 [0217.201] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x736b137b [0217.201] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0xe5324ac [0217.201] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x3f810132 [0217.201] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x29dd6ec5 [0217.201] RtlRandomEx (in: Seed=0xdb3fc10 | out: Seed=0xdb3fc10) returned 0x66405d4a [0217.211] ReadFile (in: hFile=0x1ecc, lpBuffer=0x148fe4d8, nNumberOfBytesToRead=0x295, lpNumberOfBytesRead=0xdb3fc0c, lpOverlapped=0x0 | out: lpBuffer=0x148fe4d8*, lpNumberOfBytesRead=0xdb3fc0c*=0x295, lpOverlapped=0x0) returned 1 [0217.211] SetFilePointerEx (in: hFile=0x1ecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.211] WriteFile (in: hFile=0x1ecc, lpBuffer=0x149020e0*, nNumberOfBytesToWrite=0x295, lpNumberOfBytesWritten=0xdb3fc10, lpOverlapped=0x0 | out: lpBuffer=0x149020e0*, lpNumberOfBytesWritten=0xdb3fc10*=0x295, lpOverlapped=0x0) returned 1 [0221.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bbd0 [0221.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49bc8 [0221.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0221.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x149020e0) returned 1 [0221.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148fe4d8) returned 1 [0221.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402b88) returned 1 [0221.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7538) returned 1 [0221.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0221.868] SetFilePointerEx (in: hFile=0x1ecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.869] WriteFile (in: hFile=0x1ecc, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdb3fc84, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0xdb3fc84*=0x10c, lpOverlapped=0x0) returned 1 [0221.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0221.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0221.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0221.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0221.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0221.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0221.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8c0) returned 1 [0221.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb70) returned 1 [0221.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ef8c58 [0221.872] wcscpy (in: _Dest=0x3ef8c58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" [0221.872] wcscat (in: _Dest=0x3ef8c58, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.f0dbec" [0221.872] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.f0dbec", NtPathName=0xdb3fc08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0221.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e18260 [0221.876] FlushFileBuffers (hFile=0x1ecc) returned 1 [0221.877] CloseHandle (hObject=0x1ecc) returned 1 [0221.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x8403ba0 [0221.879] wcscpy (in: _Dest=0x8403ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" [0221.879] wcscat (in: _Dest=0x8403ba0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" [0221.879] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\f0dbec-readme.txt")) returned 0xffffffff [0221.879] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ecc [0221.880] WriteFile (in: hFile=0x1ecc, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdb3fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdb3fc2c*=0x70c, lpOverlapped=0x0) returned 1 [0221.882] CloseHandle (hObject=0x1ecc) returned 1 [0221.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403ba0) returned 1 [0221.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f48) returned 1 Thread: id = 6767 os_tid = 0x2ca4 [0203.029] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json")) returned 0x2020 [0211.118] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0217.212] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2680 [0217.213] GetFileSizeEx (in: hFile=0x2680, lpFileSize=0xdc4fbc8 | out: lpFileSize=0xdc4fbc8*=668) returned 1 [0217.213] SetFilePointerEx (in: hFile=0x2680, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.213] ReadFile (in: hFile=0x2680, lpBuffer=0xdc4fbd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdc4fbb0, lpOverlapped=0x0 | out: lpBuffer=0xdc4fbd4*, lpNumberOfBytesRead=0xdc4fbb0*=0x4, lpOverlapped=0x0) returned 1 [0217.216] SetFilePointerEx (in: hFile=0x2680, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0217.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0217.216] NtQuerySystemTime (in: CurrentTime=0xdc4fb50 | out: CurrentTime=0xdc4fb50*=132471540849396000) returned 0x0 [0217.216] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x6e8964ec [0217.216] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x49f77e31 [0217.216] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x69439aca [0217.216] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x483868bd [0217.216] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x4f7c3e7f [0217.216] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x1a439a2 [0217.216] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x41c94c9e [0217.216] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x193f1d81 [0217.216] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x426798ce [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x462f92f1 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x5cf31760 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x2121aa9a [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x4055d17f [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x5ca3f423 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x3aed9989 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x39556f0e [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x15b26809 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x112f1071 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x5450794 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x7e132480 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x6e8d7707 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x11395c88 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x3ada726c [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x66a985e2 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x60044605 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x4d1c71ae [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x28a42ed5 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x2474b4c4 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x568a343 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x481495d1 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x5a2790c5 [0217.217] RtlRandomEx (in: Seed=0xdc4fb48 | out: Seed=0xdc4fb48) returned 0x259059d6 [0217.230] ReadFile (in: hFile=0x2680, lpBuffer=0x8248458, nNumberOfBytesToRead=0x29c, lpNumberOfBytesRead=0xdc4fb44, lpOverlapped=0x0 | out: lpBuffer=0x8248458*, lpNumberOfBytesRead=0xdc4fb44*=0x29c, lpOverlapped=0x0) returned 1 [0217.231] SetFilePointerEx (in: hFile=0x2680, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.231] WriteFile (in: hFile=0x2680, lpBuffer=0x824c060*, nNumberOfBytesToWrite=0x29c, lpNumberOfBytesWritten=0xdc4fb48, lpOverlapped=0x0 | out: lpBuffer=0x824c060*, lpNumberOfBytesWritten=0xdc4fb48*=0x29c, lpOverlapped=0x0) returned 1 [0221.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb70 [0221.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8c0 [0221.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8c0) returned 1 [0221.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824c060) returned 1 [0221.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8248458) returned 1 [0221.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0ba00) returned 1 [0221.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6da0) returned 1 [0221.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0221.886] SetFilePointerEx (in: hFile=0x2680, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.886] WriteFile (in: hFile=0x2680, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdc4fbbc, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0xdc4fbbc*=0x10c, lpOverlapped=0x0) returned 1 [0221.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0221.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0221.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8c0) returned 1 [0221.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0221.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb70) returned 1 [0221.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf40) returned 1 [0221.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b978) returned 1 [0221.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0221.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8403f48 [0221.893] wcscpy (in: _Dest=0x8403f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" [0221.893] wcscat (in: _Dest=0x8403f48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.f0dbec" [0221.893] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.f0dbec", NtPathName=0xdc4fb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0221.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e18260 [0221.897] FlushFileBuffers (hFile=0x2680) returned 1 [0221.943] CloseHandle (hObject=0x2680) returned 1 [0221.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403f48 [0221.944] wcscpy (in: _Dest=0x8403f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" [0221.944] wcscat (in: _Dest=0x8403f48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\F0DBEC-Readme.txt" [0221.944] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\f0dbec-readme.txt")) returned 0xffffffff [0221.944] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2680 [0221.945] WriteFile (in: hFile=0x2680, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdc4fb64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdc4fb64*=0x70c, lpOverlapped=0x0) returned 1 [0221.947] CloseHandle (hObject=0x2680) returned 1 [0221.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f48) returned 1 [0221.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1458) returned 1 Thread: id = 6768 os_tid = 0xa80 [0203.029] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json")) returned 0x2020 [0211.119] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0217.231] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b5c [0217.232] GetFileSizeEx (in: hFile=0x2b5c, lpFileSize=0xd4bf798 | out: lpFileSize=0xd4bf798*=783) returned 1 [0217.232] SetFilePointerEx (in: hFile=0x2b5c, liDistanceToMove=0x30b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.232] ReadFile (in: hFile=0x2b5c, lpBuffer=0xd4bf7a4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd4bf780, lpOverlapped=0x0 | out: lpBuffer=0xd4bf7a4*, lpNumberOfBytesRead=0xd4bf780*=0x4, lpOverlapped=0x0) returned 1 [0217.235] SetFilePointerEx (in: hFile=0x2b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0217.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ac80 [0217.235] NtQuerySystemTime (in: CurrentTime=0xd4bf720 | out: CurrentTime=0xd4bf720*=132471540849552000) returned 0x0 [0217.235] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x72d88db4 [0217.235] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x724d534a [0217.235] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x40f85def [0217.235] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x4534902c [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x289ba4b3 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x77fe30bf [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x2937d1dd [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x6c9d295a [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x1c6dfa7 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x5001e662 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x5c5881c8 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x42c4fc9a [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x33eab65d [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x44d9cac7 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x7e6c2652 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x797f1786 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x6273f25f [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x5a135cee [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x22a76eb2 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x3a0da136 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x52104ef6 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x4144035a [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x6a7e1b34 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x37837492 [0217.236] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x4e263ce6 [0217.237] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x4f5165bf [0217.237] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x4acc1cd1 [0217.237] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x55fc83ff [0217.237] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x2b3a9adb [0217.237] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x4ed0db7f [0217.237] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x5b3c382 [0217.237] RtlRandomEx (in: Seed=0xd4bf718 | out: Seed=0xd4bf718) returned 0x6304ca80 [0217.250] ReadFile (in: hFile=0x2b5c, lpBuffer=0x824fc68, nNumberOfBytesToRead=0x30f, lpNumberOfBytesRead=0xd4bf714, lpOverlapped=0x0 | out: lpBuffer=0x824fc68*, lpNumberOfBytesRead=0xd4bf714*=0x30f, lpOverlapped=0x0) returned 1 [0217.250] SetFilePointerEx (in: hFile=0x2b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.250] WriteFile (in: hFile=0x2b5c, lpBuffer=0x8253870*, nNumberOfBytesToWrite=0x30f, lpNumberOfBytesWritten=0xd4bf718, lpOverlapped=0x0 | out: lpBuffer=0x8253870*, lpNumberOfBytesWritten=0xd4bf718*=0x30f, lpOverlapped=0x0) returned 1 [0221.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c918 [0221.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b978 [0221.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b978) returned 1 [0221.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8253870) returned 1 [0221.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x824fc68) returned 1 [0221.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0221.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5f48) returned 1 [0221.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0221.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b978) returned 1 [0221.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69930 [0221.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b978 [0221.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf40 [0221.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf40) returned 1 [0221.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0b3e8) returned 1 [0221.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5f48) returned 1 [0221.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x300dc90 [0221.950] SetFilePointerEx (in: hFile=0x2b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.950] WriteFile (in: hFile=0x2b5c, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd4bf78c, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0xd4bf78c*=0x10c, lpOverlapped=0x0) returned 1 [0221.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0221.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0221.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b978) returned 1 [0221.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0221.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c918) returned 1 [0221.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0221.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063f20) returned 1 [0221.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8063e80) returned 1 [0221.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8403f48 [0221.958] wcscpy (in: _Dest=0x8403f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" [0221.958] wcscat (in: _Dest=0x8403f48, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.f0dbec" [0221.958] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.f0dbec", NtPathName=0xd4bf710, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0221.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e18260 [0221.962] FlushFileBuffers (hFile=0x2b5c) returned 1 [0221.963] CloseHandle (hObject=0x2b5c) returned 1 [0221.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403f48 [0221.964] wcscpy (in: _Dest=0x8403f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" [0221.964] wcscat (in: _Dest=0x8403f48, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\F0DBEC-Readme.txt" [0221.964] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\f0dbec-readme.txt")) returned 0xffffffff [0221.965] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b5c [0221.967] WriteFile (in: hFile=0x2b5c, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd4bf734, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd4bf734*=0x70c, lpOverlapped=0x0) returned 1 [0221.969] CloseHandle (hObject=0x2b5c) returned 1 [0221.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f48) returned 1 [0221.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1330) returned 1 Thread: id = 6769 os_tid = 0x1190 [0203.029] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json")) returned 0x2020 [0211.119] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0216.865] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2180 [0216.866] GetFileSizeEx (in: hFile=0x2180, lpFileSize=0xdeefee0 | out: lpFileSize=0xdeefee0*=812) returned 1 [0216.866] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.866] ReadFile (in: hFile=0x2180, lpBuffer=0xdeefeec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdeefec8, lpOverlapped=0x0 | out: lpBuffer=0xdeefeec*, lpNumberOfBytesRead=0xdeefec8*=0x4, lpOverlapped=0x0) returned 1 [0216.869] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0216.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49920 [0216.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d498f8 [0216.869] NtQuerySystemTime (in: CurrentTime=0xdeefe68 | out: CurrentTime=0xdeefe68*=132471540845808000) returned 0x0 [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x605b3225 [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x79b84bc7 [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x5b1b9e96 [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x26f8029d [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x4a88525e [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x1e3dc147 [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x9820a0d [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x118154ea [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x3fb9a780 [0216.869] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x1e5d6b27 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x1ace3c1b [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x2ce0d165 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x6e3ba1a4 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x4d7c935a [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x28b21514 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x7044287d [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x7de57cb8 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x815730f [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x1d7fc5da [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x65f205b8 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x64e89e7f [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x40852f45 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0xe6b3d58 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x426a351d [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x17643129 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0xf0b9b50 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x421c80b2 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x5af48ade [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x6e7de8b4 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x120198c7 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x7cbb8947 [0216.870] RtlRandomEx (in: Seed=0xdeefe60 | out: Seed=0xdeefe60) returned 0x7b4bc491 [0216.882] ReadFile (in: hFile=0x2180, lpBuffer=0x8146458, nNumberOfBytesToRead=0x32c, lpNumberOfBytesRead=0xdeefe5c, lpOverlapped=0x0 | out: lpBuffer=0x8146458*, lpNumberOfBytesRead=0xdeefe5c*=0x32c, lpOverlapped=0x0) returned 1 [0216.882] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.883] WriteFile (in: hFile=0x2180, lpBuffer=0x814a060*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0xdeefe60, lpOverlapped=0x0 | out: lpBuffer=0x814a060*, lpNumberOfBytesWritten=0xdeefe60*=0x32c, lpOverlapped=0x0) returned 1 [0220.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0220.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0220.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0220.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814a060) returned 1 [0220.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8146458) returned 1 [0220.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402de0) returned 1 [0220.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7100) returned 1 [0220.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69120 [0220.085] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.085] WriteFile (in: hFile=0x2180, lpBuffer=0x81d5760*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdeefed4, lpOverlapped=0x0 | out: lpBuffer=0x81d5760*, lpNumberOfBytesWritten=0xdeefed4*=0x10c, lpOverlapped=0x0) returned 1 [0220.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5760) returned 1 [0220.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69150) returned 1 [0220.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0220.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69120) returned 1 [0220.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0220.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49920) returned 1 [0220.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c030) returned 1 [0220.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0220.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x2d2ac0 [0220.437] wcscpy (in: _Dest=0x2d2ac0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" [0220.437] wcscat (in: _Dest=0x2d2ac0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.f0dbec" [0220.437] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.f0dbec", NtPathName=0xdeefe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e174f0 [0220.656] FlushFileBuffers (hFile=0x2180) returned 1 [0220.662] CloseHandle (hObject=0x2180) returned 1 [0220.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403cd8 [0220.807] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" [0220.807] wcscat (in: _Dest=0x8403cd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\F0DBEC-Readme.txt" [0220.807] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\f0dbec-readme.txt")) returned 0xffffffff [0220.807] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.073] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xdeefe7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xdeefe7c*=0x70c, lpOverlapped=0x0) returned 1 [0221.075] CloseHandle (hObject=0x1b48) returned 1 [0221.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403cd8) returned 1 [0221.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f10e0) returned 1 Thread: id = 6770 os_tid = 0x2cb0 [0203.030] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json")) returned 0x2020 [0211.120] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0216.883] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2184 [0216.884] GetFileSizeEx (in: hFile=0x2184, lpFileSize=0xa22f808 | out: lpFileSize=0xa22f808*=649) returned 1 [0216.884] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x285, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.884] ReadFile (in: hFile=0x2184, lpBuffer=0xa22f814, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa22f7f0, lpOverlapped=0x0 | out: lpBuffer=0xa22f814*, lpNumberOfBytesRead=0xa22f7f0*=0x4, lpOverlapped=0x0) returned 1 [0216.887] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0216.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d498f8 [0216.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49fb0 [0216.888] NtQuerySystemTime (in: CurrentTime=0xa22f790 | out: CurrentTime=0xa22f790*=132471540846120000) returned 0x0 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x3591d340 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x766549af [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x37af8061 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0xfa59594 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x5e6617ee [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x107eb380 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x6e4694b2 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x13ebaa9b [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x74ea42f4 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x6c504137 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x7bd77a3 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x72df18ce [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x63bcb13f [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x72343690 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x790e4312 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x6bfe61e3 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x2692d0f0 [0216.888] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x331ea088 [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x6a237134 [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0xd4e4b59 [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x1154365b [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x4ef4baba [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x29e99ad2 [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x2bb23d53 [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x4c2defbe [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x4b6d3a3d [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x6df16ee1 [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x575a88e3 [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x778b3415 [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x5c03b23a [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x24c5245d [0216.889] RtlRandomEx (in: Seed=0xa22f788 | out: Seed=0xa22f788) returned 0x5c3ea031 [0216.900] ReadFile (in: hFile=0x2184, lpBuffer=0x814dc68, nNumberOfBytesToRead=0x289, lpNumberOfBytesRead=0xa22f784, lpOverlapped=0x0 | out: lpBuffer=0x814dc68*, lpNumberOfBytesRead=0xa22f784*=0x289, lpOverlapped=0x0) returned 1 [0216.900] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.900] WriteFile (in: hFile=0x2184, lpBuffer=0x8151870*, nNumberOfBytesToWrite=0x289, lpNumberOfBytesWritten=0xa22f788, lpOverlapped=0x0 | out: lpBuffer=0x8151870*, lpNumberOfBytesWritten=0xa22f788*=0x289, lpOverlapped=0x0) returned 1 [0220.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0220.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0220.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0220.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8151870) returned 1 [0220.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x814dc68) returned 1 [0220.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403470) returned 1 [0220.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6a88) returned 1 [0220.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69ae0 [0220.088] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.088] WriteFile (in: hFile=0x2184, lpBuffer=0x81d5878*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa22f7fc, lpOverlapped=0x0 | out: lpBuffer=0x81d5878*, lpNumberOfBytesWritten=0xa22f7fc*=0x10c, lpOverlapped=0x0) returned 1 [0220.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5878) returned 1 [0220.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b10) returned 1 [0220.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0220.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ae0) returned 1 [0220.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0220.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d498f8) returned 1 [0220.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0220.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf90) returned 1 [0220.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x81f3648 [0220.440] wcscpy (in: _Dest=0x81f3648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" [0220.440] wcscat (in: _Dest=0x81f3648, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.f0dbec" [0220.440] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.f0dbec", NtPathName=0xa22f780, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16628 [0220.675] FlushFileBuffers (hFile=0x2184) returned 1 [0220.677] CloseHandle (hObject=0x2184) returned 1 [0220.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4890 [0220.837] wcscpy (in: _Dest=0x81f4890, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" [0220.837] wcscat (in: _Dest=0x81f4890, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\F0DBEC-Readme.txt" [0220.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\f0dbec-readme.txt")) returned 0xffffffff [0220.838] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.080] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa22f7a4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa22f7a4*=0x70c, lpOverlapped=0x0) returned 1 [0221.085] CloseHandle (hObject=0x1b48) returned 1 [0221.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4890) returned 1 [0221.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f1208) returned 1 Thread: id = 6771 os_tid = 0x2cb4 [0203.030] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json")) returned 0x2020 [0211.121] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0216.886] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1730 [0216.901] GetFileSizeEx (in: hFile=0x1730, lpFileSize=0xd6cfb88 | out: lpFileSize=0xd6cfb88*=1099) returned 1 [0216.901] SetFilePointerEx (in: hFile=0x1730, liDistanceToMove=0x447, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.901] ReadFile (in: hFile=0x1730, lpBuffer=0xd6cfb94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd6cfb70, lpOverlapped=0x0 | out: lpBuffer=0xd6cfb94*, lpNumberOfBytesRead=0xd6cfb70*=0x4, lpOverlapped=0x0) returned 1 [0216.905] SetFilePointerEx (in: hFile=0x1730, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0216.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49fb0 [0216.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4d020 [0216.905] NtQuerySystemTime (in: CurrentTime=0xd6cfb10 | out: CurrentTime=0xd6cfb10*=132471540846276000) returned 0x0 [0216.905] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x3996791c [0216.905] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x33526173 [0216.905] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x3d261704 [0216.905] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x74566a1f [0216.905] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x3a1959a0 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x658abe32 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x22dbabe9 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x47874a8b [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x3f098b30 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x2d02ccca [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x6ba0e1cb [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x55b66c2e [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x35a9421e [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x6ca2f0b7 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x13d828af [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x792c647b [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x450633e2 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x1d0bc6dd [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x37898a3 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x19afbc47 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x37f28c34 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x52aa54bf [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x6aa81847 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x4185444d [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x44d9a97b [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x6909a565 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x63e789ff [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x6647ccb4 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0xb7aa56d [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x34a3d7c5 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x3ee5c4d6 [0216.906] RtlRandomEx (in: Seed=0xd6cfb08 | out: Seed=0xd6cfb08) returned 0x7bb1f7cc [0216.917] ReadFile (in: hFile=0x1730, lpBuffer=0x8155478, nNumberOfBytesToRead=0x44b, lpNumberOfBytesRead=0xd6cfb04, lpOverlapped=0x0 | out: lpBuffer=0x8155478*, lpNumberOfBytesRead=0xd6cfb04*=0x44b, lpOverlapped=0x0) returned 1 [0216.917] SetFilePointerEx (in: hFile=0x1730, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.918] WriteFile (in: hFile=0x1730, lpBuffer=0x8159080*, nNumberOfBytesToWrite=0x44b, lpNumberOfBytesWritten=0xd6cfb08, lpOverlapped=0x0 | out: lpBuffer=0x8159080*, lpNumberOfBytesWritten=0xd6cfb08*=0x44b, lpOverlapped=0x0) returned 1 [0220.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0220.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0220.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0220.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8159080) returned 1 [0220.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8155478) returned 1 [0220.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84034e8) returned 1 [0220.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7418) returned 1 [0220.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e699c0 [0220.090] SetFilePointerEx (in: hFile=0x1730, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.091] WriteFile (in: hFile=0x1730, lpBuffer=0x81d5990*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd6cfb7c, lpOverlapped=0x0 | out: lpBuffer=0x81d5990*, lpNumberOfBytesWritten=0xd6cfb7c*=0x10c, lpOverlapped=0x0) returned 1 [0220.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5990) returned 1 [0220.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699f0) returned 1 [0220.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0220.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e699c0) returned 1 [0220.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0220.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49fb0) returned 1 [0220.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaf0) returned 1 [0220.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b838) returned 1 [0220.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x81f3780 [0220.441] wcscpy (in: _Dest=0x81f3780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" [0220.441] wcscat (in: _Dest=0x81f3780, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.f0dbec" [0220.441] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.f0dbec", NtPathName=0xd6cfb00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16780 [0220.679] FlushFileBuffers (hFile=0x1730) returned 1 [0220.682] CloseHandle (hObject=0x1730) returned 1 [0220.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4758 [0220.841] wcscpy (in: _Dest=0x81f4758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" [0220.841] wcscat (in: _Dest=0x81f4758, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\F0DBEC-Readme.txt" [0220.841] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\f0dbec-readme.txt")) returned 0xffffffff [0220.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.086] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd6cfb24, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd6cfb24*=0x70c, lpOverlapped=0x0) returned 1 [0221.089] CloseHandle (hObject=0x1b48) returned 1 [0221.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4758) returned 1 [0221.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0fb8) returned 1 Thread: id = 6772 os_tid = 0x2cb8 [0203.031] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json")) returned 0x2020 [0211.122] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0216.904] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2b34 [0216.918] GetFileSizeEx (in: hFile=0x2b34, lpFileSize=0xd75fcc0 | out: lpFileSize=0xd75fcc0*=650) returned 1 [0216.918] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x286, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.918] ReadFile (in: hFile=0x2b34, lpBuffer=0xd75fccc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd75fca8, lpOverlapped=0x0 | out: lpBuffer=0xd75fccc*, lpNumberOfBytesRead=0xd75fca8*=0x4, lpOverlapped=0x0) returned 1 [0216.937] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0216.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4d020 [0216.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd28 [0216.937] NtQuerySystemTime (in: CurrentTime=0xd75fc48 | out: CurrentTime=0xd75fc48*=132471540846588000) returned 0x0 [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x4fc9d064 [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x18365639 [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x5c2f30da [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x5cef8e75 [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x73b9cd67 [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x358c38f7 [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x8ebe0a3 [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x894bc88 [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x67d8b62c [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x600fadf0 [0216.937] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x548843b0 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x2b62cb8f [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x703558d9 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x1c3fc072 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x390fc2ca [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x360c854a [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x2f5e111f [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x6eb01f6e [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x4e9a4e19 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x18c5870f [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x3f163dca [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x4f238bb [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x3e92ae6a [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x105f39a7 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x6492ecff [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x1f5d19d5 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x7afbea09 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x253df886 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x73a5c9d [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x617b7e38 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x1f934689 [0216.938] RtlRandomEx (in: Seed=0xd75fc40 | out: Seed=0xd75fc40) returned 0x7a4d7b4a [0216.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b810) returned 1 [0216.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x815cc88 [0216.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x8160890 [0216.953] ReadFile (in: hFile=0x2b34, lpBuffer=0x815cc88, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0xd75fc3c, lpOverlapped=0x0 | out: lpBuffer=0x815cc88*, lpNumberOfBytesRead=0xd75fc3c*=0x28a, lpOverlapped=0x0) returned 1 [0216.954] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.954] WriteFile (in: hFile=0x2b34, lpBuffer=0x8160890*, nNumberOfBytesToWrite=0x28a, lpNumberOfBytesWritten=0xd75fc40, lpOverlapped=0x0 | out: lpBuffer=0x8160890*, lpNumberOfBytesWritten=0xd75fc40*=0x28a, lpOverlapped=0x0) returned 1 [0220.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0220.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0220.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0220.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8160890) returned 1 [0220.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x815cc88) returned 1 [0220.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84033f8) returned 1 [0220.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6800) returned 1 [0220.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69a80 [0220.093] SetFilePointerEx (in: hFile=0x2b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.093] WriteFile (in: hFile=0x2b34, lpBuffer=0x81d5aa8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd75fcb4, lpOverlapped=0x0 | out: lpBuffer=0x81d5aa8*, lpNumberOfBytesWritten=0xd75fcb4*=0x10c, lpOverlapped=0x0) returned 1 [0220.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5aa8) returned 1 [0220.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ab0) returned 1 [0220.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0220.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69a80) returned 1 [0220.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0220.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4d020) returned 1 [0220.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0220.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cda0) returned 1 [0220.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x81f38b8 [0220.444] wcscpy (in: _Dest=0x81f38b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" [0220.444] wcscat (in: _Dest=0x81f38b8, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.f0dbec" [0220.444] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.f0dbec", NtPathName=0xd75fc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17648 [0220.681] FlushFileBuffers (hFile=0x2b34) returned 1 [0220.689] CloseHandle (hObject=0x2b34) returned 1 [0220.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4620 [0220.847] wcscpy (in: _Dest=0x81f4620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" [0220.847] wcscat (in: _Dest=0x81f4620, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\F0DBEC-Readme.txt" [0220.847] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\f0dbec-readme.txt")) returned 0xffffffff [0220.847] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.090] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xd75fc5c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xd75fc5c*=0x70c, lpOverlapped=0x0) returned 1 [0221.092] CloseHandle (hObject=0x1b48) returned 1 [0221.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4620) returned 1 [0221.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0e90) returned 1 Thread: id = 6773 os_tid = 0x2cbc [0203.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc")) returned 0x20 [0206.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", dwFileAttributes=0x20) returned 0 [0206.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.053] GetLastError () returned 0x5 [0206.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", dwFileAttributes=0x20) returned 0 [0206.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 6774 os_tid = 0x2cc0 [0203.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt")) returned 0x20 [0206.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", dwFileAttributes=0x20) returned 0 [0206.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.051] GetLastError () returned 0x5 [0206.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", dwFileAttributes=0x20) returned 0 [0206.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec50) returned 1 Thread: id = 6775 os_tid = 0x1194 [0203.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls")) returned 0x20 [0206.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", dwFileAttributes=0x20) returned 0 [0206.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.050] GetLastError () returned 0x5 [0206.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", dwFileAttributes=0x20) returned 0 [0206.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 6776 os_tid = 0x358 [0203.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat")) returned 0x20 [0206.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", dwFileAttributes=0x20) returned 0 [0206.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.048] GetLastError () returned 0x5 [0206.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", dwFileAttributes=0x20) returned 0 [0206.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ef80) returned 1 Thread: id = 6777 os_tid = 0x2ccc [0203.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat")) returned 0x20 [0206.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", dwFileAttributes=0x20) returned 0 [0206.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.047] GetLastError () returned 0x5 [0206.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", dwFileAttributes=0x20) returned 0 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f228) returned 1 Thread: id = 6778 os_tid = 0x2c54 [0203.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat")) returned 0x20 [0206.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", dwFileAttributes=0x20) returned 0 [0206.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.054] GetLastError () returned 0x5 [0206.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", dwFileAttributes=0x20) returned 0 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 6779 os_tid = 0x1184 [0203.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat")) returned 0x20 [0206.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", dwFileAttributes=0x20) returned 0 [0206.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.056] GetLastError () returned 0x5 [0206.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", dwFileAttributes=0x20) returned 0 [0206.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 6780 os_tid = 0x2cd0 [0203.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat")) returned 0x20 [0206.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", dwFileAttributes=0x20) returned 0 [0206.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.058] GetLastError () returned 0x5 [0206.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", dwFileAttributes=0x20) returned 0 [0206.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 6781 os_tid = 0x2cd4 [0203.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll")) returned 0x20 [0206.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.059] GetLastError () returned 0x5 [0206.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e29f48) returned 1 Thread: id = 6782 os_tid = 0x2cd8 [0203.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll")) returned 0x20 [0206.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.062] GetLastError () returned 0x5 [0206.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bcf8) returned 1 Thread: id = 6783 os_tid = 0x2cdc [0203.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm")) returned 0x20 [0206.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", dwFileAttributes=0x20) returned 0 [0206.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.064] GetLastError () returned 0x5 [0206.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", dwFileAttributes=0x20) returned 0 [0206.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 6784 os_tid = 0x2ce0 [0203.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc4588 [0203.035] wcscpy (in: _Dest=0x3dc4588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0203.036] wcscat (in: _Dest=0x3dc4588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0203.036] wcscat (in: _Dest=0x3dc4588, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*" [0203.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a390 [0203.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620741b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62347bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0209.941] wcscmp (_String1=".", _String2=".") returned 0 [0209.941] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620741b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62347bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.701] wcscmp (_String1="..", _String2=".") returned 1 [0211.701] wcscmp (_String1="..", _String2="..") returned 0 [0211.701] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd157c700, ftCreationTime.dwHighDateTime=0x1ca66cd, ftLastAccessTime.dwLowDateTime=0x620741b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd157c700, ftLastWriteTime.dwHighDateTime=0x1ca66cd, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0211.701] wcscmp (_String1="FONTSCHM.INI", _String2=".") returned 1 [0211.701] wcscmp (_String1="FONTSCHM.INI", _String2="..") returned 1 [0211.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a078 [0211.702] wcscpy (in: _Dest=0x3e2a078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0211.702] wcscat (in: _Dest=0x3e2a078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0211.702] wcscat (in: _Dest=0x3e2a078, _Source="FONTSCHM.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" [0212.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf8 [0212.168] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcce2900, ftCreationTime.dwHighDateTime=0x1ca15db, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcce2900, ftLastWriteTime.dwHighDateTime=0x1ca15db, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0212.168] wcscmp (_String1="SCHEME01.CSS", _String2=".") returned 1 [0212.168] wcscmp (_String1="SCHEME01.CSS", _String2="..") returned 1 [0212.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e29f48 [0212.168] wcscpy (in: _Dest=0x3e29f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.168] wcscat (in: _Dest=0x3e29f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.168] wcscat (in: _Dest=0x3e29f48, _Source="SCHEME01.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" [0212.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e29f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b4 [0212.169] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cb8700, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0cb8700, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0212.169] wcscmp (_String1="SCHEME02.CSS", _String2=".") returned 1 [0212.169] wcscmp (_String1="SCHEME02.CSS", _String2="..") returned 1 [0212.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bcf8 [0212.169] wcscpy (in: _Dest=0x3e2bcf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.169] wcscat (in: _Dest=0x3e2bcf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.170] wcscat (in: _Dest=0x3e2bcf8, _Source="SCHEME02.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" [0212.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26a0 [0212.171] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf9a5a00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf9a5a00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0212.171] wcscmp (_String1="SCHEME03.CSS", _String2=".") returned 1 [0212.171] wcscmp (_String1="SCHEME03.CSS", _String2="..") returned 1 [0212.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2be28 [0212.171] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.171] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.171] wcscat (in: _Dest=0x3e2be28, _Source="SCHEME03.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" [0212.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2be28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x269c [0212.172] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe692d00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe692d00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0212.172] wcscmp (_String1="SCHEME04.CSS", _String2=".") returned 1 [0212.172] wcscmp (_String1="SCHEME04.CSS", _String2="..") returned 1 [0212.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b968 [0212.172] wcscpy (in: _Dest=0x3e2b968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.172] wcscat (in: _Dest=0x3e2b968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.172] wcscat (in: _Dest=0x3e2b968, _Source="SCHEME04.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" [0212.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2698 [0212.173] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd380000, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbd380000, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0212.173] wcscmp (_String1="SCHEME05.CSS", _String2=".") returned 1 [0212.173] wcscmp (_String1="SCHEME05.CSS", _String2="..") returned 1 [0212.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bbc8 [0212.173] wcscpy (in: _Dest=0x3e2bbc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.173] wcscat (in: _Dest=0x3e2bbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.173] wcscat (in: _Dest=0x3e2bbc8, _Source="SCHEME05.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" [0212.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2694 [0212.174] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd380000, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbd380000, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0212.174] wcscmp (_String1="SCHEME06.CSS", _String2=".") returned 1 [0212.174] wcscmp (_String1="SCHEME06.CSS", _String2="..") returned 1 [0212.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a798 [0212.175] wcscpy (in: _Dest=0x3e2a798, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.175] wcscat (in: _Dest=0x3e2a798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.175] wcscat (in: _Dest=0x3e2a798, _Source="SCHEME06.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" [0212.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2690 [0212.176] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc06d300, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc06d300, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0212.176] wcscmp (_String1="SCHEME07.CSS", _String2=".") returned 1 [0212.176] wcscmp (_String1="SCHEME07.CSS", _String2="..") returned 1 [0212.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ba98 [0212.176] wcscpy (in: _Dest=0x3e2ba98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.176] wcscat (in: _Dest=0x3e2ba98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.176] wcscat (in: _Dest=0x3e2ba98, _Source="SCHEME07.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" [0212.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ba98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b64 [0212.177] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad5a600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbad5a600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0212.177] wcscmp (_String1="SCHEME08.CSS", _String2=".") returned 1 [0212.177] wcscmp (_String1="SCHEME08.CSS", _String2="..") returned 1 [0212.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ac58 [0212.177] wcscpy (in: _Dest=0x3e2ac58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.177] wcscat (in: _Dest=0x3e2ac58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.177] wcscat (in: _Dest=0x3e2ac58, _Source="SCHEME08.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" [0212.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ac58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0212.178] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad5a600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbad5a600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0212.178] wcscmp (_String1="SCHEME09.CSS", _String2=".") returned 1 [0212.178] wcscmp (_String1="SCHEME09.CSS", _String2="..") returned 1 [0212.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a2d8 [0212.178] wcscpy (in: _Dest=0x3e2a2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.178] wcscat (in: _Dest=0x3e2a2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.178] wcscat (in: _Dest=0x3e2a2d8, _Source="SCHEME09.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" [0212.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0212.179] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8734c00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8734c00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0212.179] wcscmp (_String1="SCHEME10.CSS", _String2=".") returned 1 [0212.179] wcscmp (_String1="SCHEME10.CSS", _String2="..") returned 1 [0212.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a830 [0212.179] wcscpy (in: _Dest=0x3e2a830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.179] wcscat (in: _Dest=0x3e2a830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.179] wcscat (in: _Dest=0x3e2a830, _Source="SCHEME10.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" [0212.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0212.180] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7421f00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7421f00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0212.180] wcscmp (_String1="SCHEME11.CSS", _String2=".") returned 1 [0212.180] wcscmp (_String1="SCHEME11.CSS", _String2="..") returned 1 [0212.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ab28 [0212.180] wcscpy (in: _Dest=0x3e2ab28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.180] wcscat (in: _Dest=0x3e2ab28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.180] wcscat (in: _Dest=0x3e2ab28, _Source="SCHEME11.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" [0212.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ab28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0212.181] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb610f200, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb610f200, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0212.181] wcscmp (_String1="SCHEME12.CSS", _String2=".") returned 1 [0212.181] wcscmp (_String1="SCHEME12.CSS", _String2="..") returned 1 [0212.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a8c8 [0212.181] wcscpy (in: _Dest=0x3e2a8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.181] wcscat (in: _Dest=0x3e2a8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.181] wcscat (in: _Dest=0x3e2a8c8, _Source="SCHEME12.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" [0212.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0212.182] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4dfc500, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4dfc500, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0212.182] wcscmp (_String1="SCHEME13.CSS", _String2=".") returned 1 [0212.182] wcscmp (_String1="SCHEME13.CSS", _String2="..") returned 1 [0212.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a700 [0212.182] wcscpy (in: _Dest=0x3e2a700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.182] wcscat (in: _Dest=0x3e2a700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.182] wcscat (in: _Dest=0x3e2a700, _Source="SCHEME13.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" [0212.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0212.183] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4dfc500, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4dfc500, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0212.183] wcscmp (_String1="SCHEME14.CSS", _String2=".") returned 1 [0212.183] wcscmp (_String1="SCHEME14.CSS", _String2="..") returned 1 [0212.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a4a0 [0212.183] wcscpy (in: _Dest=0x3e2a4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.183] wcscat (in: _Dest=0x3e2a4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.184] wcscat (in: _Dest=0x3e2a4a0, _Source="SCHEME14.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" [0212.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0212.185] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ae9800, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3ae9800, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0212.185] wcscmp (_String1="SCHEME15.CSS", _String2=".") returned 1 [0212.185] wcscmp (_String1="SCHEME15.CSS", _String2="..") returned 1 [0212.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a240 [0212.185] wcscpy (in: _Dest=0x3e2a240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.185] wcscat (in: _Dest=0x3e2a240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.185] wcscat (in: _Dest=0x3e2a240, _Source="SCHEME15.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" [0212.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0212.186] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27d6b00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb27d6b00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0212.186] wcscmp (_String1="SCHEME16.CSS", _String2=".") returned 1 [0212.186] wcscmp (_String1="SCHEME16.CSS", _String2="..") returned 1 [0212.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bd90 [0212.186] wcscpy (in: _Dest=0x3e2bd90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.186] wcscat (in: _Dest=0x3e2bd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.186] wcscat (in: _Dest=0x3e2bd90, _Source="SCHEME16.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" [0212.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0212.187] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14c3e00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb14c3e00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0212.187] wcscmp (_String1="SCHEME17.CSS", _String2=".") returned 1 [0212.187] wcscmp (_String1="SCHEME17.CSS", _String2="..") returned 1 [0212.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b2e0 [0212.187] wcscpy (in: _Dest=0x3e2b2e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.187] wcscat (in: _Dest=0x3e2b2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.187] wcscat (in: _Dest=0x3e2b2e0, _Source="SCHEME17.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" [0212.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0212.188] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb01b1100, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb01b1100, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0212.188] wcscmp (_String1="SCHEME18.CSS", _String2=".") returned 1 [0212.188] wcscmp (_String1="SCHEME18.CSS", _String2="..") returned 1 [0212.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2af50 [0212.188] wcscpy (in: _Dest=0x3e2af50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.188] wcscat (in: _Dest=0x3e2af50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.188] wcscat (in: _Dest=0x3e2af50, _Source="SCHEME18.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" [0212.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2af50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0212.189] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaee9e400, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaee9e400, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0212.189] wcscmp (_String1="SCHEME19.CSS", _String2=".") returned 1 [0212.189] wcscmp (_String1="SCHEME19.CSS", _String2="..") returned 1 [0212.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bc60 [0212.189] wcscpy (in: _Dest=0x3e2bc60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.189] wcscat (in: _Dest=0x3e2bc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.190] wcscat (in: _Dest=0x3e2bc60, _Source="SCHEME19.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" [0212.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08 [0212.190] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb8b700, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xadb8b700, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0212.190] wcscmp (_String1="SCHEME20.CSS", _String2=".") returned 1 [0212.190] wcscmp (_String1="SCHEME20.CSS", _String2="..") returned 1 [0212.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c5c8 [0212.190] wcscpy (in: _Dest=0x32c5c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.190] wcscat (in: _Dest=0x32c5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.190] wcscat (in: _Dest=0x32c5c8, _Source="SCHEME20.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" [0212.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34 [0212.191] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac878a00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac878a00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0212.191] wcscmp (_String1="SCHEME21.CSS", _String2=".") returned 1 [0212.191] wcscmp (_String1="SCHEME21.CSS", _String2="..") returned 1 [0212.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0212.191] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.191] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.192] wcscat (in: _Dest=0x32cc50, _Source="SCHEME21.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" [0212.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0212.193] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa253000, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaa253000, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0212.193] wcscmp (_String1="SCHEME22.CSS", _String2=".") returned 1 [0212.193] wcscmp (_String1="SCHEME22.CSS", _String2="..") returned 1 [0212.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0212.193] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.193] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.193] wcscat (in: _Dest=0x32cb20, _Source="SCHEME22.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" [0212.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0212.194] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f40300, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8f40300, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0212.194] wcscmp (_String1="SCHEME23.CSS", _String2=".") returned 1 [0212.194] wcscmp (_String1="SCHEME23.CSS", _String2="..") returned 1 [0212.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0212.194] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.194] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.194] wcscat (in: _Dest=0x32d700, _Source="SCHEME23.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" [0212.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0212.195] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7c2d600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7c2d600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0212.195] wcscmp (_String1="SCHEME24.CSS", _String2=".") returned 1 [0212.195] wcscmp (_String1="SCHEME24.CSS", _String2="..") returned 1 [0212.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c828 [0212.196] wcscpy (in: _Dest=0x32c828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.196] wcscat (in: _Dest=0x32c828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.196] wcscat (in: _Dest=0x32c828, _Source="SCHEME24.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" [0212.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0212.197] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa691a900, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa691a900, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0212.197] wcscmp (_String1="SCHEME25.CSS", _String2=".") returned 1 [0212.197] wcscmp (_String1="SCHEME25.CSS", _String2="..") returned 1 [0212.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c9f0 [0212.197] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.197] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.197] wcscat (in: _Dest=0x32c9f0, _Source="SCHEME25.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" [0212.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0212.198] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa691a900, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa691a900, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0212.198] wcscmp (_String1="SCHEME26.CSS", _String2=".") returned 1 [0212.198] wcscmp (_String1="SCHEME26.CSS", _String2="..") returned 1 [0212.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cbb8 [0212.198] wcscpy (in: _Dest=0x32cbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.198] wcscat (in: _Dest=0x32cbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.198] wcscat (in: _Dest=0x32cbb8, _Source="SCHEME26.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" [0212.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0212.199] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42f4f00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa42f4f00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0212.199] wcscmp (_String1="SCHEME27.CSS", _String2=".") returned 1 [0212.199] wcscmp (_String1="SCHEME27.CSS", _String2="..") returned 1 [0212.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ceb0 [0212.199] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.199] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.199] wcscat (in: _Dest=0x32ceb0, _Source="SCHEME27.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" [0212.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0212.200] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42f4f00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa42f4f00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0212.200] wcscmp (_String1="SCHEME28.CSS", _String2=".") returned 1 [0212.200] wcscmp (_String1="SCHEME28.CSS", _String2="..") returned 1 [0212.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0212.200] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.200] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.200] wcscat (in: _Dest=0x32b820, _Source="SCHEME28.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" [0212.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0212.201] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa09bc800, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa09bc800, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0212.201] wcscmp (_String1="SCHEME29.CSS", _String2=".") returned 1 [0212.201] wcscmp (_String1="SCHEME29.CSS", _String2="..") returned 1 [0212.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c958 [0212.202] wcscpy (in: _Dest=0x32c958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.202] wcscat (in: _Dest=0x32c958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.202] wcscat (in: _Dest=0x32c958, _Source="SCHEME29.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" [0212.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0212.357] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6a9b00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f6a9b00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0212.357] wcscmp (_String1="SCHEME30.CSS", _String2=".") returned 1 [0212.357] wcscmp (_String1="SCHEME30.CSS", _String2="..") returned 1 [0212.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ae20 [0212.357] wcscpy (in: _Dest=0x3e2ae20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.358] wcscat (in: _Dest=0x3e2ae20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.358] wcscat (in: _Dest=0x3e2ae20, _Source="SCHEME30.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" [0212.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ae20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d04 [0212.696] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b00600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94b00600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0212.696] wcscmp (_String1="SCHEME31.CSS", _String2=".") returned 1 [0212.696] wcscmp (_String1="SCHEME31.CSS", _String2="..") returned 1 [0212.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b1b0 [0212.696] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.696] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.696] wcscat (in: _Dest=0x3e2b1b0, _Source="SCHEME31.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" [0212.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0212.697] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9974ba00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9974ba00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0212.697] wcscmp (_String1="SCHEME32.CSS", _String2=".") returned 1 [0212.697] wcscmp (_String1="SCHEME32.CSS", _String2="..") returned 1 [0212.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b378 [0212.697] wcscpy (in: _Dest=0x3e2b378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.698] wcscat (in: _Dest=0x3e2b378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.698] wcscat (in: _Dest=0x3e2b378, _Source="SCHEME32.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" [0212.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd8 [0212.698] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3daa3100, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3daa3100, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0213.258] wcscmp (_String1="SCHEME33.CSS", _String2=".") returned 1 [0213.258] wcscmp (_String1="SCHEME33.CSS", _String2="..") returned 1 [0213.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d40e08 [0213.258] wcscpy (in: _Dest=0x3d40e08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.258] wcscat (in: _Dest=0x3d40e08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.258] wcscat (in: _Dest=0x3d40e08, _Source="SCHEME33.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" [0213.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc [0213.381] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3420c900, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3420c900, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0213.381] wcscmp (_String1="SCHEME34.CSS", _String2=".") returned 1 [0213.381] wcscmp (_String1="SCHEME34.CSS", _String2="..") returned 1 [0213.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d40ea0 [0213.381] wcscpy (in: _Dest=0x3d40ea0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.381] wcscat (in: _Dest=0x3d40ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.381] wcscat (in: _Dest=0x3d40ea0, _Source="SCHEME34.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" [0213.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0213.382] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1219a100, ftCreationTime.dwHighDateTime=0x1c69ab7, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1219a100, ftLastWriteTime.dwHighDateTime=0x1c69ab7, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0213.382] wcscmp (_String1="SCHEME35.CSS", _String2=".") returned 1 [0213.383] wcscmp (_String1="SCHEME35.CSS", _String2="..") returned 1 [0213.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d40f38 [0213.383] wcscpy (in: _Dest=0x3d40f38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.383] wcscat (in: _Dest=0x3d40f38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.383] wcscat (in: _Dest=0x3d40f38, _Source="SCHEME35.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" [0213.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0213.384] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29663400, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x29663400, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0213.384] wcscmp (_String1="SCHEME36.CSS", _String2=".") returned 1 [0213.384] wcscmp (_String1="SCHEME36.CSS", _String2="..") returned 1 [0213.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d40fd0 [0213.384] wcscpy (in: _Dest=0x3d40fd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.384] wcscat (in: _Dest=0x3d40fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.384] wcscat (in: _Dest=0x3d40fd0, _Source="SCHEME36.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" [0213.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0213.385] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0083f00, ftCreationTime.dwHighDateTime=0x1c69ab6, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0083f00, ftLastWriteTime.dwHighDateTime=0x1c69ab6, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0213.386] wcscmp (_String1="SCHEME37.CSS", _String2=".") returned 1 [0213.386] wcscmp (_String1="SCHEME37.CSS", _String2="..") returned 1 [0213.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41068 [0213.386] wcscpy (in: _Dest=0x3d41068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.386] wcscat (in: _Dest=0x3d41068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.386] wcscat (in: _Dest=0x3d41068, _Source="SCHEME37.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" [0213.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0213.387] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b5be00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18b5be00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0213.387] wcscmp (_String1="SCHEME38.CSS", _String2=".") returned 1 [0213.387] wcscmp (_String1="SCHEME38.CSS", _String2="..") returned 1 [0213.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41100 [0213.387] wcscpy (in: _Dest=0x3d41100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.387] wcscat (in: _Dest=0x3d41100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.387] wcscat (in: _Dest=0x3d41100, _Source="SCHEME38.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" [0213.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0213.400] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67a200, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa67a200, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0213.400] wcscmp (_String1="SCHEME39.CSS", _String2=".") returned 1 [0213.400] wcscmp (_String1="SCHEME39.CSS", _String2="..") returned 1 [0213.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41198 [0213.400] wcscpy (in: _Dest=0x3d41198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.400] wcscat (in: _Dest=0x3d41198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.400] wcscat (in: _Dest=0x3d41198, _Source="SCHEME39.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" [0213.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0213.401] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f6700, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20f6700, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0213.401] wcscmp (_String1="SCHEME40.CSS", _String2=".") returned 1 [0213.401] wcscmp (_String1="SCHEME40.CSS", _String2="..") returned 1 [0213.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41230 [0213.402] wcscpy (in: _Dest=0x3d41230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.402] wcscat (in: _Dest=0x3d41230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.402] wcscat (in: _Dest=0x3d41230, _Source="SCHEME40.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" [0213.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0213.403] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf754d200, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf754d200, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0213.403] wcscmp (_String1="SCHEME41.CSS", _String2=".") returned 1 [0213.403] wcscmp (_String1="SCHEME41.CSS", _String2="..") returned 1 [0213.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d412c8 [0213.403] wcscpy (in: _Dest=0x3d412c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.403] wcscat (in: _Dest=0x3d412c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.403] wcscat (in: _Dest=0x3d412c8, _Source="SCHEME41.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" [0213.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d412c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0213.404] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb691000, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb691000, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0213.404] wcscmp (_String1="SCHEME42.CSS", _String2=".") returned 1 [0213.404] wcscmp (_String1="SCHEME42.CSS", _String2="..") returned 1 [0213.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41360 [0213.404] wcscpy (in: _Dest=0x3d41360, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.404] wcscat (in: _Dest=0x3d41360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.404] wcscat (in: _Dest=0x3d41360, _Source="SCHEME42.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" [0213.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0213.405] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1af400, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd1af400, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0213.405] wcscmp (_String1="SCHEME43.CSS", _String2=".") returned 1 [0213.405] wcscmp (_String1="SCHEME43.CSS", _String2="..") returned 1 [0213.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d413f8 [0213.405] wcscpy (in: _Dest=0x3d413f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.405] wcscat (in: _Dest=0x3d413f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.405] wcscat (in: _Dest=0x3d413f8, _Source="SCHEME43.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" [0213.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d413f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0213.406] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6a7e00, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc6a7e00, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0213.406] wcscmp (_String1="SCHEME44.CSS", _String2=".") returned 1 [0213.407] wcscmp (_String1="SCHEME44.CSS", _String2="..") returned 1 [0213.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41490 [0213.407] wcscpy (in: _Dest=0x3d41490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.407] wcscat (in: _Dest=0x3d41490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.407] wcscat (in: _Dest=0x3d41490, _Source="SCHEME44.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" [0213.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0213.408] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1afe900, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1afe900, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0213.408] wcscmp (_String1="SCHEME45.CSS", _String2=".") returned 1 [0213.408] wcscmp (_String1="SCHEME45.CSS", _String2="..") returned 1 [0213.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41528 [0213.408] wcscpy (in: _Dest=0x3d41528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.408] wcscat (in: _Dest=0x3d41528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.408] wcscat (in: _Dest=0x3d41528, _Source="SCHEME45.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" [0213.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b8 [0213.409] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb230a000, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb230a000, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0213.409] wcscmp (_String1="SCHEME46.CSS", _String2=".") returned 1 [0213.409] wcscmp (_String1="SCHEME46.CSS", _String2="..") returned 1 [0213.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d415c0 [0213.409] wcscpy (in: _Dest=0x3d415c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.409] wcscat (in: _Dest=0x3d415c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.410] wcscat (in: _Dest=0x3d415c0, _Source="SCHEME46.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" [0213.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d415c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0213.411] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d86500, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9d86500, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0213.411] wcscmp (_String1="SCHEME47.CSS", _String2=".") returned 1 [0213.411] wcscmp (_String1="SCHEME47.CSS", _String2="..") returned 1 [0213.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41658 [0213.411] wcscpy (in: _Dest=0x3d41658, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.411] wcscat (in: _Dest=0x3d41658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.411] wcscat (in: _Dest=0x3d41658, _Source="SCHEME47.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" [0213.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0213.412] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cbb7600, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9cbb7600, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0213.412] wcscmp (_String1="SCHEME48.CSS", _String2=".") returned 1 [0213.412] wcscmp (_String1="SCHEME48.CSS", _String2="..") returned 1 [0213.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d416f0 [0213.412] wcscpy (in: _Dest=0x3d416f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.412] wcscat (in: _Dest=0x3d416f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.412] wcscat (in: _Dest=0x3d416f0, _Source="SCHEME48.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" [0213.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d416f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0213.413] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f9e8700, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f9e8700, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0213.413] wcscmp (_String1="SCHEME49.CSS", _String2=".") returned 1 [0213.414] wcscmp (_String1="SCHEME49.CSS", _String2="..") returned 1 [0213.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41788 [0213.414] wcscpy (in: _Dest=0x3d41788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.414] wcscat (in: _Dest=0x3d41788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.414] wcscat (in: _Dest=0x3d41788, _Source="SCHEME49.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" [0213.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0213.415] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86151f00, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86151f00, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0213.415] wcscmp (_String1="SCHEME50.CSS", _String2=".") returned 1 [0213.415] wcscmp (_String1="SCHEME50.CSS", _String2="..") returned 1 [0213.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41820 [0213.415] wcscpy (in: _Dest=0x3d41820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.415] wcscat (in: _Dest=0x3d41820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.415] wcscat (in: _Dest=0x3d41820, _Source="SCHEME50.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" [0213.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0213.416] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae579e00, ftCreationTime.dwHighDateTime=0x1c69adf, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae579e00, ftLastWriteTime.dwHighDateTime=0x1c69adf, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0213.416] wcscmp (_String1="SCHEME51.CSS", _String2=".") returned 1 [0213.416] wcscmp (_String1="SCHEME51.CSS", _String2="..") returned 1 [0213.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d418b8 [0213.417] wcscpy (in: _Dest=0x3d418b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.417] wcscat (in: _Dest=0x3d418b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.417] wcscat (in: _Dest=0x3d418b8, _Source="SCHEME51.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" [0213.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d418b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0213.418] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87036a00, ftCreationTime.dwHighDateTime=0x1c696b6, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87036a00, ftLastWriteTime.dwHighDateTime=0x1c696b6, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0213.418] wcscmp (_String1="SCHEME52.CSS", _String2=".") returned 1 [0213.418] wcscmp (_String1="SCHEME52.CSS", _String2="..") returned 1 [0213.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41950 [0213.418] wcscpy (in: _Dest=0x3d41950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.418] wcscat (in: _Dest=0x3d41950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.418] wcscat (in: _Dest=0x3d41950, _Source="SCHEME52.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" [0213.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0213.419] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e3100, ftCreationTime.dwHighDateTime=0x1c69ab8, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0e3100, ftLastWriteTime.dwHighDateTime=0x1c69ab8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0213.419] wcscmp (_String1="SCHEME53.CSS", _String2=".") returned 1 [0213.419] wcscmp (_String1="SCHEME53.CSS", _String2="..") returned 1 [0213.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d419e8 [0213.419] wcscpy (in: _Dest=0x3d419e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.419] wcscat (in: _Dest=0x3d419e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.419] wcscat (in: _Dest=0x3d419e8, _Source="SCHEME53.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" [0213.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d419e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0213.421] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcf6cb00, ftCreationTime.dwHighDateTime=0x1c695fb, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfcf6cb00, ftLastWriteTime.dwHighDateTime=0x1c695fb, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0213.421] wcscmp (_String1="SCHEME54.CSS", _String2=".") returned 1 [0213.421] wcscmp (_String1="SCHEME54.CSS", _String2="..") returned 1 [0213.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41a80 [0213.421] wcscpy (in: _Dest=0x3d41a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.421] wcscat (in: _Dest=0x3d41a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.421] wcscat (in: _Dest=0x3d41a80, _Source="SCHEME54.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" [0213.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0213.429] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45f0e00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc45f0e00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0213.429] wcscmp (_String1="SCHEME55.CSS", _String2=".") returned 1 [0213.430] wcscmp (_String1="SCHEME55.CSS", _String2="..") returned 1 [0213.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3d41b18 [0213.431] wcscpy (in: _Dest=0x3d41b18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0213.431] wcscat (in: _Dest=0x3d41b18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0213.433] wcscat (in: _Dest=0x3d41b18, _Source="SCHEME55.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" [0213.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a50 [0213.442] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3f0a390 | out: lpFindFileData=0x3f0a390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45f0e00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc45f0e00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0 [0213.884] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0217.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a390) returned 1 [0217.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4588) returned 1 [0217.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5308) returned 1 Thread: id = 6785 os_tid = 0x2c84 [0203.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3dc5008 [0203.036] wcscpy (in: _Dest=0x3dc5008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0203.036] wcscat (in: _Dest=0x3dc5008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0203.036] wcscat (in: _Dest=0x3dc5008, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*" [0203.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f09788 [0203.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x621589f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x624062b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0211.702] wcscmp (_String1=".", _String2=".") returned 0 [0211.702] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x621589f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x624062b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.210] wcscmp (_String1="..", _String2=".") returned 1 [0212.210] wcscmp (_String1="..", _String2="..") returned 0 [0212.210] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1 [0212.210] wcscmp (_String1="PAPERS.INI", _String2=".") returned 1 [0212.210] wcscmp (_String1="PAPERS.INI", _String2="..") returned 1 [0212.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0212.210] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.210] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.210] wcscat (in: _Dest=0x81de8d8, _Source="PAPERS.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" [0212.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27f8 [0212.699] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR10F.GIF", cAlternateFileName="")) returned 1 [0212.699] wcscmp (_String1="PDIR10F.GIF", _String2=".") returned 1 [0212.699] wcscmp (_String1="PDIR10F.GIF", _String2="..") returned 1 [0212.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d408 [0212.699] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.699] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.699] wcscat (in: _Dest=0x32d408, _Source="PDIR10F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" [0212.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0212.700] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR11F.GIF", cAlternateFileName="")) returned 1 [0212.700] wcscmp (_String1="PDIR11F.GIF", _String2=".") returned 1 [0212.700] wcscmp (_String1="PDIR11F.GIF", _String2="..") returned 1 [0212.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ce18 [0212.700] wcscpy (in: _Dest=0x32ce18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.700] wcscat (in: _Dest=0x32ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.700] wcscat (in: _Dest=0x32ce18, _Source="PDIR11F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" [0212.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0212.701] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x46df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR12F.GIF", cAlternateFileName="")) returned 1 [0212.701] wcscmp (_String1="PDIR12F.GIF", _String2=".") returned 1 [0212.702] wcscmp (_String1="PDIR12F.GIF", _String2="..") returned 1 [0212.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0212.702] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.702] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.702] wcscat (in: _Dest=0x32cf48, _Source="PDIR12F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" [0212.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0212.703] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x430d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR13F.GIF", cAlternateFileName="")) returned 1 [0212.703] wcscmp (_String1="PDIR13F.GIF", _String2=".") returned 1 [0212.703] wcscmp (_String1="PDIR13F.GIF", _String2="..") returned 1 [0212.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c8c0 [0212.703] wcscpy (in: _Dest=0x32c8c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.703] wcscat (in: _Dest=0x32c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.703] wcscat (in: _Dest=0x32c8c0, _Source="PDIR13F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" [0212.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0212.704] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR14F.GIF", cAlternateFileName="")) returned 1 [0212.704] wcscmp (_String1="PDIR14F.GIF", _String2=".") returned 1 [0212.704] wcscmp (_String1="PDIR14F.GIF", _String2="..") returned 1 [0212.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32bd78 [0212.704] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.704] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.704] wcscat (in: _Dest=0x32bd78, _Source="PDIR14F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" [0212.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0212.705] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR15F.GIF", cAlternateFileName="")) returned 1 [0212.705] wcscmp (_String1="PDIR15F.GIF", _String2=".") returned 1 [0212.705] wcscmp (_String1="PDIR15F.GIF", _String2="..") returned 1 [0212.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32bce0 [0212.705] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.705] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.705] wcscat (in: _Dest=0x32bce0, _Source="PDIR15F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" [0212.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0212.706] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x399f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR16F.GIF", cAlternateFileName="")) returned 1 [0212.706] wcscmp (_String1="PDIR16F.GIF", _String2=".") returned 1 [0212.706] wcscmp (_String1="PDIR16F.GIF", _String2="..") returned 1 [0212.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ca88 [0212.706] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.706] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.706] wcscat (in: _Dest=0x32ca88, _Source="PDIR16F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" [0212.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0212.707] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2bb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR17F.GIF", cAlternateFileName="")) returned 1 [0212.707] wcscmp (_String1="PDIR17F.GIF", _String2=".") returned 1 [0212.707] wcscmp (_String1="PDIR17F.GIF", _String2="..") returned 1 [0212.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d668 [0212.707] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.707] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.707] wcscat (in: _Dest=0x32d668, _Source="PDIR17F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" [0212.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0212.708] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x41f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR18F.GIF", cAlternateFileName="")) returned 1 [0212.708] wcscmp (_String1="PDIR18F.GIF", _String2=".") returned 1 [0212.708] wcscmp (_String1="PDIR18F.GIF", _String2="..") returned 1 [0212.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d5d0 [0212.708] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.709] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.709] wcscat (in: _Dest=0x32d5d0, _Source="PDIR18F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" [0212.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0212.709] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR19F.GIF", cAlternateFileName="")) returned 1 [0212.710] wcscmp (_String1="PDIR19F.GIF", _String2=".") returned 1 [0212.710] wcscmp (_String1="PDIR19F.GIF", _String2="..") returned 1 [0212.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32bea8 [0212.710] wcscpy (in: _Dest=0x32bea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.710] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.710] wcscat (in: _Dest=0x32bea8, _Source="PDIR19F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" [0212.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0212.711] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1B.GIF", cAlternateFileName="")) returned 1 [0212.711] wcscmp (_String1="PDIR1B.GIF", _String2=".") returned 1 [0212.711] wcscmp (_String1="PDIR1B.GIF", _String2="..") returned 1 [0212.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0212.711] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.711] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.711] wcscat (in: _Dest=0x81deb18, _Source="PDIR1B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" [0212.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81deb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0212.724] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xf6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1F.GIF", cAlternateFileName="")) returned 1 [0212.724] wcscmp (_String1="PDIR1F.GIF", _String2=".") returned 1 [0212.724] wcscmp (_String1="PDIR1F.GIF", _String2="..") returned 1 [0212.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de218 [0212.724] wcscpy (in: _Dest=0x81de218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.724] wcscat (in: _Dest=0x81de218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.724] wcscat (in: _Dest=0x81de218, _Source="PDIR1F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" [0212.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0212.725] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR20F.GIF", cAlternateFileName="")) returned 1 [0212.725] wcscmp (_String1="PDIR20F.GIF", _String2=".") returned 1 [0212.725] wcscmp (_String1="PDIR20F.GIF", _String2="..") returned 1 [0212.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40060 [0212.725] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.725] wcscat (in: _Dest=0x3d40060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.725] wcscat (in: _Dest=0x3d40060, _Source="PDIR20F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" [0212.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0212.726] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR21F.GIF", cAlternateFileName="")) returned 1 [0212.726] wcscmp (_String1="PDIR21F.GIF", _String2=".") returned 1 [0212.726] wcscmp (_String1="PDIR21F.GIF", _String2="..") returned 1 [0212.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d400f8 [0212.726] wcscpy (in: _Dest=0x3d400f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.726] wcscat (in: _Dest=0x3d400f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.726] wcscat (in: _Dest=0x3d400f8, _Source="PDIR21F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" [0212.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d400f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0212.727] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR22F.GIF", cAlternateFileName="")) returned 1 [0212.727] wcscmp (_String1="PDIR22F.GIF", _String2=".") returned 1 [0212.727] wcscmp (_String1="PDIR22F.GIF", _String2="..") returned 1 [0212.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40190 [0212.727] wcscpy (in: _Dest=0x3d40190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.727] wcscat (in: _Dest=0x3d40190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.727] wcscat (in: _Dest=0x3d40190, _Source="PDIR22F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" [0212.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0212.728] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x313b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR23F.GIF", cAlternateFileName="")) returned 1 [0212.728] wcscmp (_String1="PDIR23F.GIF", _String2=".") returned 1 [0212.728] wcscmp (_String1="PDIR23F.GIF", _String2="..") returned 1 [0212.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40228 [0212.729] wcscpy (in: _Dest=0x3d40228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.729] wcscat (in: _Dest=0x3d40228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.729] wcscat (in: _Dest=0x3d40228, _Source="PDIR23F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" [0212.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0212.729] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR24F.GIF", cAlternateFileName="")) returned 1 [0212.729] wcscmp (_String1="PDIR24F.GIF", _String2=".") returned 1 [0212.729] wcscmp (_String1="PDIR24F.GIF", _String2="..") returned 1 [0212.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d402c0 [0212.730] wcscpy (in: _Dest=0x3d402c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.730] wcscat (in: _Dest=0x3d402c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.730] wcscat (in: _Dest=0x3d402c0, _Source="PDIR24F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" [0212.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d402c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c0 [0212.731] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5286c200, ftCreationTime.dwHighDateTime=0x1bdb63f, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5286c200, ftLastWriteTime.dwHighDateTime=0x1bdb63f, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR25F.GIF", cAlternateFileName="")) returned 1 [0212.731] wcscmp (_String1="PDIR25F.GIF", _String2=".") returned 1 [0212.731] wcscmp (_String1="PDIR25F.GIF", _String2="..") returned 1 [0212.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40358 [0212.731] wcscpy (in: _Dest=0x3d40358, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.731] wcscat (in: _Dest=0x3d40358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.731] wcscat (in: _Dest=0x3d40358, _Source="PDIR25F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" [0212.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0212.732] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1985, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR26F.GIF", cAlternateFileName="")) returned 1 [0212.732] wcscmp (_String1="PDIR26F.GIF", _String2=".") returned 1 [0212.732] wcscmp (_String1="PDIR26F.GIF", _String2="..") returned 1 [0212.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d403f0 [0212.732] wcscpy (in: _Dest=0x3d403f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.732] wcscat (in: _Dest=0x3d403f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.732] wcscat (in: _Dest=0x3d403f0, _Source="PDIR26F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" [0212.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d403f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0212.733] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR27F.GIF", cAlternateFileName="")) returned 1 [0212.733] wcscmp (_String1="PDIR27F.GIF", _String2=".") returned 1 [0212.733] wcscmp (_String1="PDIR27F.GIF", _String2="..") returned 1 [0212.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40488 [0212.733] wcscpy (in: _Dest=0x3d40488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.733] wcscat (in: _Dest=0x3d40488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.733] wcscat (in: _Dest=0x3d40488, _Source="PDIR27F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" [0212.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0212.734] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28B.GIF", cAlternateFileName="")) returned 1 [0212.734] wcscmp (_String1="PDIR28B.GIF", _String2=".") returned 1 [0212.734] wcscmp (_String1="PDIR28B.GIF", _String2="..") returned 1 [0212.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40520 [0212.734] wcscpy (in: _Dest=0x3d40520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.734] wcscat (in: _Dest=0x3d40520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.734] wcscat (in: _Dest=0x3d40520, _Source="PDIR28B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" [0212.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0212.735] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1786, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28F.GIF", cAlternateFileName="")) returned 1 [0212.735] wcscmp (_String1="PDIR28F.GIF", _String2=".") returned 1 [0212.735] wcscmp (_String1="PDIR28F.GIF", _String2="..") returned 1 [0212.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d405b8 [0212.735] wcscpy (in: _Dest=0x3d405b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.735] wcscat (in: _Dest=0x3d405b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.735] wcscat (in: _Dest=0x3d405b8, _Source="PDIR28F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" [0212.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d405b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27bc [0212.736] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29B.GIF", cAlternateFileName="")) returned 1 [0212.736] wcscmp (_String1="PDIR29B.GIF", _String2=".") returned 1 [0212.736] wcscmp (_String1="PDIR29B.GIF", _String2="..") returned 1 [0212.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40650 [0212.736] wcscpy (in: _Dest=0x3d40650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.736] wcscat (in: _Dest=0x3d40650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.736] wcscat (in: _Dest=0x3d40650, _Source="PDIR29B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" [0212.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0212.737] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x59bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29F.GIF", cAlternateFileName="")) returned 1 [0212.737] wcscmp (_String1="PDIR29F.GIF", _String2=".") returned 1 [0212.737] wcscmp (_String1="PDIR29F.GIF", _String2="..") returned 1 [0212.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d406e8 [0212.738] wcscpy (in: _Dest=0x3d406e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.738] wcscat (in: _Dest=0x3d406e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.738] wcscat (in: _Dest=0x3d406e8, _Source="PDIR29F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" [0212.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d406e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0212.738] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca9c8000, ftCreationTime.dwHighDateTime=0x1bdb3d2, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca9c8000, ftLastWriteTime.dwHighDateTime=0x1bdb3d2, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2B.GIF", cAlternateFileName="")) returned 1 [0212.738] wcscmp (_String1="PDIR2B.GIF", _String2=".") returned 1 [0212.739] wcscmp (_String1="PDIR2B.GIF", _String2="..") returned 1 [0212.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ddeb8 [0212.739] wcscpy (in: _Dest=0x81ddeb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.739] wcscat (in: _Dest=0x81ddeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.739] wcscat (in: _Dest=0x81ddeb8, _Source="PDIR2B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" [0212.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0212.740] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2F.GIF", cAlternateFileName="")) returned 1 [0212.740] wcscmp (_String1="PDIR2F.GIF", _String2=".") returned 1 [0212.740] wcscmp (_String1="PDIR2F.GIF", _String2="..") returned 1 [0212.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ddd98 [0212.740] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.740] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.740] wcscat (in: _Dest=0x81ddd98, _Source="PDIR2F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" [0212.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0212.741] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30B.GIF", cAlternateFileName="")) returned 1 [0212.741] wcscmp (_String1="PDIR30B.GIF", _String2=".") returned 1 [0212.741] wcscmp (_String1="PDIR30B.GIF", _String2="..") returned 1 [0212.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40780 [0212.741] wcscpy (in: _Dest=0x3d40780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.741] wcscat (in: _Dest=0x3d40780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.741] wcscat (in: _Dest=0x3d40780, _Source="PDIR30B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" [0212.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0212.742] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30F.GIF", cAlternateFileName="")) returned 1 [0212.742] wcscmp (_String1="PDIR30F.GIF", _String2=".") returned 1 [0212.742] wcscmp (_String1="PDIR30F.GIF", _String2="..") returned 1 [0212.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40818 [0212.742] wcscpy (in: _Dest=0x3d40818, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.742] wcscat (in: _Dest=0x3d40818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.742] wcscat (in: _Dest=0x3d40818, _Source="PDIR30F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" [0212.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0212.743] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31B.GIF", cAlternateFileName="")) returned 1 [0212.743] wcscmp (_String1="PDIR31B.GIF", _String2=".") returned 1 [0212.743] wcscmp (_String1="PDIR31B.GIF", _String2="..") returned 1 [0212.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d408b0 [0212.743] wcscpy (in: _Dest=0x3d408b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.743] wcscat (in: _Dest=0x3d408b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.743] wcscat (in: _Dest=0x3d408b0, _Source="PDIR31B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" [0212.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d408b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0212.744] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x52da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31F.GIF", cAlternateFileName="")) returned 1 [0212.744] wcscmp (_String1="PDIR31F.GIF", _String2=".") returned 1 [0212.744] wcscmp (_String1="PDIR31F.GIF", _String2="..") returned 1 [0212.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40948 [0212.744] wcscpy (in: _Dest=0x3d40948, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.744] wcscat (in: _Dest=0x3d40948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.744] wcscat (in: _Dest=0x3d40948, _Source="PDIR31F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" [0212.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0212.745] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32B.GIF", cAlternateFileName="")) returned 1 [0212.745] wcscmp (_String1="PDIR32B.GIF", _String2=".") returned 1 [0212.745] wcscmp (_String1="PDIR32B.GIF", _String2="..") returned 1 [0212.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d409e0 [0212.746] wcscpy (in: _Dest=0x3d409e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.746] wcscat (in: _Dest=0x3d409e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.746] wcscat (in: _Dest=0x3d409e0, _Source="PDIR32B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" [0212.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d409e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0212.746] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x910b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32F.GIF", cAlternateFileName="")) returned 1 [0212.747] wcscmp (_String1="PDIR32F.GIF", _String2=".") returned 1 [0212.747] wcscmp (_String1="PDIR32F.GIF", _String2="..") returned 1 [0212.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40a78 [0212.747] wcscpy (in: _Dest=0x3d40a78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.747] wcscat (in: _Dest=0x3d40a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.747] wcscat (in: _Dest=0x3d40a78, _Source="PDIR32F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" [0212.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0212.748] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1631, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33B.GIF", cAlternateFileName="")) returned 1 [0213.265] wcscmp (_String1="PDIR33B.GIF", _String2=".") returned 1 [0213.265] wcscmp (_String1="PDIR33B.GIF", _String2="..") returned 1 [0213.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40a78 [0213.265] wcscpy (in: _Dest=0x3d40a78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.265] wcscat (in: _Dest=0x3d40a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.265] wcscat (in: _Dest=0x3d40a78, _Source="PDIR33B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" [0213.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0213.443] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2d13, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33F.GIF", cAlternateFileName="")) returned 1 [0213.443] wcscmp (_String1="PDIR33F.GIF", _String2=".") returned 1 [0213.443] wcscmp (_String1="PDIR33F.GIF", _String2="..") returned 1 [0213.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41bb0 [0213.444] wcscpy (in: _Dest=0x3d41bb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.444] wcscat (in: _Dest=0x3d41bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.444] wcscat (in: _Dest=0x3d41bb0, _Source="PDIR33F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" [0213.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0213.445] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34B.GIF", cAlternateFileName="")) returned 1 [0213.445] wcscmp (_String1="PDIR34B.GIF", _String2=".") returned 1 [0213.445] wcscmp (_String1="PDIR34B.GIF", _String2="..") returned 1 [0213.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41c48 [0213.445] wcscpy (in: _Dest=0x3d41c48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.445] wcscat (in: _Dest=0x3d41c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.445] wcscat (in: _Dest=0x3d41c48, _Source="PDIR34B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" [0213.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0213.446] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34F.GIF", cAlternateFileName="")) returned 1 [0213.446] wcscmp (_String1="PDIR34F.GIF", _String2=".") returned 1 [0213.446] wcscmp (_String1="PDIR34F.GIF", _String2="..") returned 1 [0213.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41ce0 [0213.447] wcscpy (in: _Dest=0x3d41ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.447] wcscat (in: _Dest=0x3d41ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.447] wcscat (in: _Dest=0x3d41ce0, _Source="PDIR34F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" [0213.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26e4 [0213.448] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x11ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35B.GIF", cAlternateFileName="")) returned 1 [0213.448] wcscmp (_String1="PDIR35B.GIF", _String2=".") returned 1 [0213.448] wcscmp (_String1="PDIR35B.GIF", _String2="..") returned 1 [0213.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41d78 [0213.448] wcscpy (in: _Dest=0x3d41d78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.448] wcscat (in: _Dest=0x3d41d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.448] wcscat (in: _Dest=0x3d41d78, _Source="PDIR35B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" [0213.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0213.449] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35F.GIF", cAlternateFileName="")) returned 1 [0213.449] wcscmp (_String1="PDIR35F.GIF", _String2=".") returned 1 [0213.449] wcscmp (_String1="PDIR35F.GIF", _String2="..") returned 1 [0213.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41e10 [0213.449] wcscpy (in: _Dest=0x3d41e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.449] wcscat (in: _Dest=0x3d41e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.449] wcscat (in: _Dest=0x3d41e10, _Source="PDIR35F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" [0213.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0213.450] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x23e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36B.GIF", cAlternateFileName="")) returned 1 [0213.450] wcscmp (_String1="PDIR36B.GIF", _String2=".") returned 1 [0213.450] wcscmp (_String1="PDIR36B.GIF", _String2="..") returned 1 [0213.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41ea8 [0213.451] wcscpy (in: _Dest=0x3d41ea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.451] wcscat (in: _Dest=0x3d41ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.451] wcscat (in: _Dest=0x3d41ea8, _Source="PDIR36B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" [0213.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0213.451] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36F.GIF", cAlternateFileName="")) returned 1 [0213.452] wcscmp (_String1="PDIR36F.GIF", _String2=".") returned 1 [0213.452] wcscmp (_String1="PDIR36F.GIF", _String2="..") returned 1 [0213.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41f40 [0213.452] wcscpy (in: _Dest=0x3d41f40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.452] wcscat (in: _Dest=0x3d41f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.452] wcscat (in: _Dest=0x3d41f40, _Source="PDIR36F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" [0213.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0213.453] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR37F.GIF", cAlternateFileName="")) returned 1 [0213.453] wcscmp (_String1="PDIR37F.GIF", _String2=".") returned 1 [0213.453] wcscmp (_String1="PDIR37F.GIF", _String2="..") returned 1 [0213.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9648 [0213.453] wcscpy (in: _Dest=0x81d9648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.453] wcscat (in: _Dest=0x81d9648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.453] wcscat (in: _Dest=0x81d9648, _Source="PDIR37F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" [0213.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0213.454] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xb819, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR38F.GIF", cAlternateFileName="")) returned 1 [0213.454] wcscmp (_String1="PDIR38F.GIF", _String2=".") returned 1 [0213.454] wcscmp (_String1="PDIR38F.GIF", _String2="..") returned 1 [0213.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d96e0 [0213.454] wcscpy (in: _Dest=0x81d96e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.454] wcscat (in: _Dest=0x81d96e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.454] wcscat (in: _Dest=0x81d96e0, _Source="PDIR38F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" [0213.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d96e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2974 [0213.455] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xaf65, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR39F.GIF", cAlternateFileName="")) returned 1 [0213.455] wcscmp (_String1="PDIR39F.GIF", _String2=".") returned 1 [0213.455] wcscmp (_String1="PDIR39F.GIF", _String2="..") returned 1 [0213.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9778 [0213.456] wcscpy (in: _Dest=0x81d9778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.456] wcscat (in: _Dest=0x81d9778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.456] wcscat (in: _Dest=0x81d9778, _Source="PDIR39F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" [0213.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0213.457] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3B.GIF", cAlternateFileName="")) returned 1 [0213.457] wcscmp (_String1="PDIR3B.GIF", _String2=".") returned 1 [0213.457] wcscmp (_String1="PDIR3B.GIF", _String2="..") returned 1 [0213.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def08 [0213.457] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.457] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.457] wcscat (in: _Dest=0x81def08, _Source="PDIR3B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" [0213.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c8 [0213.458] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4647, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3F.GIF", cAlternateFileName="")) returned 1 [0213.458] wcscmp (_String1="PDIR3F.GIF", _String2=".") returned 1 [0213.458] wcscmp (_String1="PDIR3F.GIF", _String2="..") returned 1 [0213.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df4a8 [0213.458] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.458] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.458] wcscat (in: _Dest=0x81df4a8, _Source="PDIR3F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" [0213.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0213.459] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x10f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR40F.GIF", cAlternateFileName="")) returned 1 [0213.459] wcscmp (_String1="PDIR40F.GIF", _String2=".") returned 1 [0213.459] wcscmp (_String1="PDIR40F.GIF", _String2="..") returned 1 [0213.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9810 [0213.459] wcscpy (in: _Dest=0x81d9810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.459] wcscat (in: _Dest=0x81d9810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.459] wcscat (in: _Dest=0x81d9810, _Source="PDIR40F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" [0213.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0213.460] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x7d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR41F.GIF", cAlternateFileName="")) returned 1 [0213.460] wcscmp (_String1="PDIR41F.GIF", _String2=".") returned 1 [0213.460] wcscmp (_String1="PDIR41F.GIF", _String2="..") returned 1 [0213.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d98a8 [0213.461] wcscpy (in: _Dest=0x81d98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.461] wcscat (in: _Dest=0x81d98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.461] wcscat (in: _Dest=0x81d98a8, _Source="PDIR41F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" [0213.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0213.462] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xdf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR42F.GIF", cAlternateFileName="")) returned 1 [0213.462] wcscmp (_String1="PDIR42F.GIF", _String2=".") returned 1 [0213.462] wcscmp (_String1="PDIR42F.GIF", _String2="..") returned 1 [0213.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9940 [0213.462] wcscpy (in: _Dest=0x81d9940, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.462] wcscat (in: _Dest=0x81d9940, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.462] wcscat (in: _Dest=0x81d9940, _Source="PDIR42F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" [0213.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0213.463] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43B.GIF", cAlternateFileName="")) returned 1 [0213.463] wcscmp (_String1="PDIR43B.GIF", _String2=".") returned 1 [0213.463] wcscmp (_String1="PDIR43B.GIF", _String2="..") returned 1 [0213.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d99d8 [0213.463] wcscpy (in: _Dest=0x81d99d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.463] wcscat (in: _Dest=0x81d99d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.463] wcscat (in: _Dest=0x81d99d8, _Source="PDIR43B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" [0213.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d99d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0213.464] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43F.GIF", cAlternateFileName="")) returned 1 [0213.464] wcscmp (_String1="PDIR43F.GIF", _String2=".") returned 1 [0213.464] wcscmp (_String1="PDIR43F.GIF", _String2="..") returned 1 [0213.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9a70 [0213.464] wcscpy (in: _Dest=0x81d9a70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.464] wcscat (in: _Dest=0x81d9a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.464] wcscat (in: _Dest=0x81d9a70, _Source="PDIR43F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" [0213.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0213.465] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3606, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44B.GIF", cAlternateFileName="")) returned 1 [0213.465] wcscmp (_String1="PDIR44B.GIF", _String2=".") returned 1 [0213.465] wcscmp (_String1="PDIR44B.GIF", _String2="..") returned 1 [0213.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9b08 [0213.466] wcscpy (in: _Dest=0x81d9b08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.466] wcscat (in: _Dest=0x81d9b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.466] wcscat (in: _Dest=0x81d9b08, _Source="PDIR44B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" [0213.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0213.467] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3026, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44F.GIF", cAlternateFileName="")) returned 1 [0213.467] wcscmp (_String1="PDIR44F.GIF", _String2=".") returned 1 [0213.467] wcscmp (_String1="PDIR44F.GIF", _String2="..") returned 1 [0213.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9ba0 [0213.467] wcscpy (in: _Dest=0x81d9ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.467] wcscat (in: _Dest=0x81d9ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.467] wcscat (in: _Dest=0x81d9ba0, _Source="PDIR44F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" [0213.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0213.468] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2019, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45B.GIF", cAlternateFileName="")) returned 1 [0213.468] wcscmp (_String1="PDIR45B.GIF", _String2=".") returned 1 [0213.468] wcscmp (_String1="PDIR45B.GIF", _String2="..") returned 1 [0213.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9c38 [0213.468] wcscpy (in: _Dest=0x81d9c38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.468] wcscat (in: _Dest=0x81d9c38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.468] wcscat (in: _Dest=0x81d9c38, _Source="PDIR45B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" [0213.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0213.469] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45F.GIF", cAlternateFileName="")) returned 1 [0213.469] wcscmp (_String1="PDIR45F.GIF", _String2=".") returned 1 [0213.469] wcscmp (_String1="PDIR45F.GIF", _String2="..") returned 1 [0213.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9cd0 [0213.470] wcscpy (in: _Dest=0x81d9cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.470] wcscat (in: _Dest=0x81d9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.470] wcscat (in: _Dest=0x81d9cd0, _Source="PDIR45F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" [0213.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0213.471] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46B.GIF", cAlternateFileName="")) returned 1 [0213.471] wcscmp (_String1="PDIR46B.GIF", _String2=".") returned 1 [0213.471] wcscmp (_String1="PDIR46B.GIF", _String2="..") returned 1 [0213.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9d68 [0213.471] wcscpy (in: _Dest=0x81d9d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.471] wcscat (in: _Dest=0x81d9d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.471] wcscat (in: _Dest=0x81d9d68, _Source="PDIR46B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" [0213.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0213.472] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46F.GIF", cAlternateFileName="")) returned 1 [0213.472] wcscmp (_String1="PDIR46F.GIF", _String2=".") returned 1 [0213.472] wcscmp (_String1="PDIR46F.GIF", _String2="..") returned 1 [0213.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9e00 [0213.472] wcscpy (in: _Dest=0x81d9e00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.472] wcscat (in: _Dest=0x81d9e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.472] wcscat (in: _Dest=0x81d9e00, _Source="PDIR46F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" [0213.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0213.473] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x80d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47B.GIF", cAlternateFileName="")) returned 1 [0213.473] wcscmp (_String1="PDIR47B.GIF", _String2=".") returned 1 [0213.473] wcscmp (_String1="PDIR47B.GIF", _String2="..") returned 1 [0213.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9e98 [0213.473] wcscpy (in: _Dest=0x81d9e98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.473] wcscat (in: _Dest=0x81d9e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.473] wcscat (in: _Dest=0x81d9e98, _Source="PDIR47B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" [0213.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0213.474] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47F.GIF", cAlternateFileName="")) returned 1 [0213.474] wcscmp (_String1="PDIR47F.GIF", _String2=".") returned 1 [0213.475] wcscmp (_String1="PDIR47F.GIF", _String2="..") returned 1 [0213.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9f30 [0213.475] wcscpy (in: _Dest=0x81d9f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.475] wcscat (in: _Dest=0x81d9f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.475] wcscat (in: _Dest=0x81d9f30, _Source="PDIR47F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" [0213.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0213.476] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48B.GIF", cAlternateFileName="")) returned 1 [0213.476] wcscmp (_String1="PDIR48B.GIF", _String2=".") returned 1 [0213.476] wcscmp (_String1="PDIR48B.GIF", _String2="..") returned 1 [0213.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9fc8 [0213.476] wcscpy (in: _Dest=0x81d9fc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.476] wcscat (in: _Dest=0x81d9fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.476] wcscat (in: _Dest=0x81d9fc8, _Source="PDIR48B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" [0213.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264c [0213.717] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x178c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48F.GIF", cAlternateFileName="")) returned 1 [0213.717] wcscmp (_String1="PDIR48F.GIF", _String2=".") returned 1 [0213.717] wcscmp (_String1="PDIR48F.GIF", _String2="..") returned 1 [0213.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41c48 [0213.717] wcscpy (in: _Dest=0x3d41c48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0213.717] wcscat (in: _Dest=0x3d41c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0213.717] wcscat (in: _Dest=0x3d41c48, _Source="PDIR48F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" [0214.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0214.222] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49B.GIF", cAlternateFileName="")) returned 1 [0214.222] wcscmp (_String1="PDIR49B.GIF", _String2=".") returned 1 [0214.222] wcscmp (_String1="PDIR49B.GIF", _String2="..") returned 1 [0214.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9e00 [0214.222] wcscpy (in: _Dest=0x81d9e00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.222] wcscat (in: _Dest=0x81d9e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.222] wcscat (in: _Dest=0x81d9e00, _Source="PDIR49B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" [0214.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27e8 [0214.224] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49F.GIF", cAlternateFileName="")) returned 1 [0214.224] wcscmp (_String1="PDIR49F.GIF", _String2=".") returned 1 [0214.224] wcscmp (_String1="PDIR49F.GIF", _String2="..") returned 1 [0214.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9d68 [0214.224] wcscpy (in: _Dest=0x81d9d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.224] wcscat (in: _Dest=0x81d9d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.224] wcscat (in: _Dest=0x81d9d68, _Source="PDIR49F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" [0214.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0214.225] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2a01, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4B.GIF", cAlternateFileName="")) returned 1 [0214.225] wcscmp (_String1="PDIR4B.GIF", _String2=".") returned 1 [0214.225] wcscmp (_String1="PDIR4B.GIF", _String2="..") returned 1 [0214.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df4a8 [0214.225] wcscpy (in: _Dest=0x81df4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.225] wcscat (in: _Dest=0x81df4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.225] wcscat (in: _Dest=0x81df4a8, _Source="PDIR4B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" [0214.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0214.227] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x76cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4F.GIF", cAlternateFileName="")) returned 1 [0214.227] wcscmp (_String1="PDIR4F.GIF", _String2=".") returned 1 [0214.227] wcscmp (_String1="PDIR4F.GIF", _String2="..") returned 1 [0214.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81def08 [0214.227] wcscpy (in: _Dest=0x81def08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.227] wcscat (in: _Dest=0x81def08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.227] wcscat (in: _Dest=0x81def08, _Source="PDIR4F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" [0214.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81def08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0214.228] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1001, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50B.GIF", cAlternateFileName="")) returned 1 [0214.228] wcscmp (_String1="PDIR50B.GIF", _String2=".") returned 1 [0214.228] wcscmp (_String1="PDIR50B.GIF", _String2="..") returned 1 [0214.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9cd0 [0214.228] wcscpy (in: _Dest=0x81d9cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.228] wcscat (in: _Dest=0x81d9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.228] wcscat (in: _Dest=0x81d9cd0, _Source="PDIR50B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" [0214.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0214.230] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50F.GIF", cAlternateFileName="")) returned 1 [0214.230] wcscmp (_String1="PDIR50F.GIF", _String2=".") returned 1 [0214.230] wcscmp (_String1="PDIR50F.GIF", _String2="..") returned 1 [0214.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9c38 [0214.230] wcscpy (in: _Dest=0x81d9c38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.230] wcscat (in: _Dest=0x81d9c38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.230] wcscat (in: _Dest=0x81d9c38, _Source="PDIR50F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" [0214.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0214.231] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4217, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51B.GIF", cAlternateFileName="")) returned 1 [0214.234] wcscmp (_String1="PDIR51B.GIF", _String2=".") returned 1 [0214.234] wcscmp (_String1="PDIR51B.GIF", _String2="..") returned 1 [0214.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9ba0 [0214.234] wcscpy (in: _Dest=0x81d9ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.234] wcscat (in: _Dest=0x81d9ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.235] wcscat (in: _Dest=0x81d9ba0, _Source="PDIR51B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" [0214.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0214.238] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51F.GIF", cAlternateFileName="")) returned 1 [0214.238] wcscmp (_String1="PDIR51F.GIF", _String2=".") returned 1 [0214.238] wcscmp (_String1="PDIR51F.GIF", _String2="..") returned 1 [0214.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9b08 [0214.238] wcscpy (in: _Dest=0x81d9b08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.238] wcscat (in: _Dest=0x81d9b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.238] wcscat (in: _Dest=0x81d9b08, _Source="PDIR51F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" [0214.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0214.239] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5B.GIF", cAlternateFileName="")) returned 1 [0214.239] wcscmp (_String1="PDIR5B.GIF", _String2=".") returned 1 [0214.239] wcscmp (_String1="PDIR5B.GIF", _String2="..") returned 1 [0214.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ddd98 [0214.240] wcscpy (in: _Dest=0x81ddd98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.240] wcscat (in: _Dest=0x81ddd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.240] wcscat (in: _Dest=0x81ddd98, _Source="PDIR5B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" [0214.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0214.241] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xce72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5F.GIF", cAlternateFileName="")) returned 1 [0214.241] wcscmp (_String1="PDIR5F.GIF", _String2=".") returned 1 [0214.241] wcscmp (_String1="PDIR5F.GIF", _String2="..") returned 1 [0214.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81ddeb8 [0214.241] wcscpy (in: _Dest=0x81ddeb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.241] wcscat (in: _Dest=0x81ddeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.241] wcscat (in: _Dest=0x81ddeb8, _Source="PDIR5F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" [0214.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81ddeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0214.242] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x24dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6B.GIF", cAlternateFileName="")) returned 1 [0214.242] wcscmp (_String1="PDIR6B.GIF", _String2=".") returned 1 [0214.242] wcscmp (_String1="PDIR6B.GIF", _String2="..") returned 1 [0214.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de218 [0214.242] wcscpy (in: _Dest=0x81de218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.242] wcscat (in: _Dest=0x81de218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.243] wcscat (in: _Dest=0x81de218, _Source="PDIR6B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" [0214.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0214.244] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x6e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6F.GIF", cAlternateFileName="")) returned 1 [0214.244] wcscmp (_String1="PDIR6F.GIF", _String2=".") returned 1 [0214.244] wcscmp (_String1="PDIR6F.GIF", _String2="..") returned 1 [0214.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81deb18 [0214.244] wcscpy (in: _Dest=0x81deb18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.244] wcscat (in: _Dest=0x81deb18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.244] wcscat (in: _Dest=0x81deb18, _Source="PDIR6F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" [0214.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81deb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0214.245] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x6054, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7B.GIF", cAlternateFileName="")) returned 1 [0214.245] wcscmp (_String1="PDIR7B.GIF", _String2=".") returned 1 [0214.245] wcscmp (_String1="PDIR7B.GIF", _String2="..") returned 1 [0214.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de8d8 [0214.245] wcscpy (in: _Dest=0x81de8d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.245] wcscat (in: _Dest=0x81de8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.245] wcscat (in: _Dest=0x81de8d8, _Source="PDIR7B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" [0214.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0214.246] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x70bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7F.GIF", cAlternateFileName="")) returned 1 [0214.247] wcscmp (_String1="PDIR7F.GIF", _String2=".") returned 1 [0214.247] wcscmp (_String1="PDIR7F.GIF", _String2="..") returned 1 [0214.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de3c8 [0214.247] wcscpy (in: _Dest=0x81de3c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.247] wcscat (in: _Dest=0x81de3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.247] wcscat (in: _Dest=0x81de3c8, _Source="PDIR7F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" [0214.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0214.248] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8B.GIF", cAlternateFileName="")) returned 1 [0214.248] wcscmp (_String1="PDIR8B.GIF", _String2=".") returned 1 [0214.248] wcscmp (_String1="PDIR8B.GIF", _String2="..") returned 1 [0214.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df028 [0214.248] wcscpy (in: _Dest=0x81df028, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.248] wcscat (in: _Dest=0x81df028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.248] wcscat (in: _Dest=0x81df028, _Source="PDIR8B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" [0214.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0214.249] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8F.GIF", cAlternateFileName="")) returned 1 [0214.249] wcscmp (_String1="PDIR8F.GIF", _String2=".") returned 1 [0214.249] wcscmp (_String1="PDIR8F.GIF", _String2="..") returned 1 [0214.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81dde28 [0214.250] wcscpy (in: _Dest=0x81dde28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.250] wcscat (in: _Dest=0x81dde28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.250] wcscat (in: _Dest=0x81dde28, _Source="PDIR8F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" [0214.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dde28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0214.251] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x445d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9B.GIF", cAlternateFileName="")) returned 1 [0214.251] wcscmp (_String1="PDIR9B.GIF", _String2=".") returned 1 [0214.251] wcscmp (_String1="PDIR9B.GIF", _String2="..") returned 1 [0214.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81de848 [0214.251] wcscpy (in: _Dest=0x81de848, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.251] wcscat (in: _Dest=0x81de848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.251] wcscat (in: _Dest=0x81de848, _Source="PDIR9B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" [0214.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81de848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0214.252] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6223d230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9F.GIF", cAlternateFileName="")) returned 1 [0214.252] wcscmp (_String1="PDIR9F.GIF", _String2=".") returned 1 [0214.252] wcscmp (_String1="PDIR9F.GIF", _String2="..") returned 1 [0214.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x81df1d8 [0214.253] wcscpy (in: _Dest=0x81df1d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.253] wcscat (in: _Dest=0x81df1d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.253] wcscat (in: _Dest=0x81df1d8, _Source="PDIR9F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" [0214.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81df1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0214.254] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x189e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPAPERS.INI", cAlternateFileName="")) returned 1 [0214.254] wcscmp (_String1="ZPAPERS.INI", _String2=".") returned 1 [0214.254] wcscmp (_String1="ZPAPERS.INI", _String2="..") returned 1 [0214.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d9a70 [0214.254] wcscpy (in: _Dest=0x81d9a70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.254] wcscat (in: _Dest=0x81d9a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.254] wcscat (in: _Dest=0x81d9a70, _Source="ZPAPERS.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" [0214.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0214.255] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR00.GIF", cAlternateFileName="")) returned 1 [0214.255] wcscmp (_String1="ZPDIR00.GIF", _String2=".") returned 1 [0214.255] wcscmp (_String1="ZPDIR00.GIF", _String2="..") returned 1 [0214.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81d99d8 [0214.255] wcscpy (in: _Dest=0x81d99d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.255] wcscat (in: _Dest=0x81d99d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.255] wcscat (in: _Dest=0x81d99d8, _Source="ZPDIR00.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" [0214.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d99d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c8 [0214.257] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR10F.GIF", cAlternateFileName="")) returned 1 [0214.257] wcscmp (_String1="ZPDIR10F.GIF", _String2=".") returned 1 [0214.257] wcscmp (_String1="ZPDIR10F.GIF", _String2="..") returned 1 [0214.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d9940 [0214.257] wcscpy (in: _Dest=0x81d9940, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.257] wcscat (in: _Dest=0x81d9940, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.257] wcscat (in: _Dest=0x81d9940, _Source="ZPDIR10F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" [0214.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0214.258] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR11F.GIF", cAlternateFileName="")) returned 1 [0214.258] wcscmp (_String1="ZPDIR11F.GIF", _String2=".") returned 1 [0214.258] wcscmp (_String1="ZPDIR11F.GIF", _String2="..") returned 1 [0214.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d98a8 [0214.259] wcscpy (in: _Dest=0x81d98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.259] wcscat (in: _Dest=0x81d98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.259] wcscat (in: _Dest=0x81d98a8, _Source="ZPDIR11F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" [0214.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2974 [0214.260] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x6499, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR12F.GIF", cAlternateFileName="")) returned 1 [0214.260] wcscmp (_String1="ZPDIR12F.GIF", _String2=".") returned 1 [0214.260] wcscmp (_String1="ZPDIR12F.GIF", _String2="..") returned 1 [0214.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d9810 [0214.260] wcscpy (in: _Dest=0x81d9810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0214.260] wcscat (in: _Dest=0x81d9810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0214.260] wcscat (in: _Dest=0x81d9810, _Source="ZPDIR12F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" [0214.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0215.394] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR13F.GIF", cAlternateFileName="")) returned 1 [0215.394] wcscmp (_String1="ZPDIR13F.GIF", _String2=".") returned 1 [0215.394] wcscmp (_String1="ZPDIR13F.GIF", _String2="..") returned 1 [0215.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81d9648 [0215.394] wcscpy (in: _Dest=0x81d9648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.394] wcscat (in: _Dest=0x81d9648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.394] wcscat (in: _Dest=0x81d9648, _Source="ZPDIR13F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" [0216.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81d9648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d00 [0216.731] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x645b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR14F.GIF", cAlternateFileName="")) returned 1 [0216.731] wcscmp (_String1="ZPDIR14F.GIF", _String2=".") returned 1 [0216.731] wcscmp (_String1="ZPDIR14F.GIF", _String2="..") returned 1 [0216.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b7a0 [0216.731] wcscpy (in: _Dest=0x3e2b7a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.731] wcscat (in: _Dest=0x3e2b7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.731] wcscat (in: _Dest=0x3e2b7a0, _Source="ZPDIR14F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" [0216.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0216.733] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x452b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR15F.GIF", cAlternateFileName="")) returned 1 [0216.733] wcscmp (_String1="ZPDIR15F.GIF", _String2=".") returned 1 [0216.733] wcscmp (_String1="ZPDIR15F.GIF", _String2="..") returned 1 [0216.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da0f8 [0216.733] wcscpy (in: _Dest=0x81da0f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.733] wcscat (in: _Dest=0x81da0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.733] wcscat (in: _Dest=0x81da0f8, _Source="ZPDIR15F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" [0216.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a64 [0216.735] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2fc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR16F.GIF", cAlternateFileName="")) returned 1 [0216.735] wcscmp (_String1="ZPDIR16F.GIF", _String2=".") returned 1 [0216.735] wcscmp (_String1="ZPDIR16F.GIF", _String2="..") returned 1 [0216.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da190 [0216.735] wcscpy (in: _Dest=0x81da190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.735] wcscat (in: _Dest=0x81da190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.735] wcscat (in: _Dest=0x81da190, _Source="ZPDIR16F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" [0216.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0216.737] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR17F.GIF", cAlternateFileName="")) returned 1 [0216.737] wcscmp (_String1="ZPDIR17F.GIF", _String2=".") returned 1 [0216.737] wcscmp (_String1="ZPDIR17F.GIF", _String2="..") returned 1 [0216.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da228 [0216.737] wcscpy (in: _Dest=0x81da228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.737] wcscat (in: _Dest=0x81da228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.737] wcscat (in: _Dest=0x81da228, _Source="ZPDIR17F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" [0216.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0216.739] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR18F.GIF", cAlternateFileName="")) returned 1 [0216.739] wcscmp (_String1="ZPDIR18F.GIF", _String2=".") returned 1 [0216.739] wcscmp (_String1="ZPDIR18F.GIF", _String2="..") returned 1 [0216.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da2c0 [0216.739] wcscpy (in: _Dest=0x81da2c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.739] wcscat (in: _Dest=0x81da2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.739] wcscat (in: _Dest=0x81da2c0, _Source="ZPDIR18F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" [0216.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0216.740] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR19F.GIF", cAlternateFileName="")) returned 1 [0216.740] wcscmp (_String1="ZPDIR19F.GIF", _String2=".") returned 1 [0216.740] wcscmp (_String1="ZPDIR19F.GIF", _String2="..") returned 1 [0216.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da358 [0216.741] wcscpy (in: _Dest=0x81da358, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.741] wcscat (in: _Dest=0x81da358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.741] wcscat (in: _Dest=0x81da358, _Source="ZPDIR19F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" [0216.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc [0216.742] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1B.GIF", cAlternateFileName="")) returned 1 [0216.742] wcscmp (_String1="ZPDIR1B.GIF", _String2=".") returned 1 [0216.742] wcscmp (_String1="ZPDIR1B.GIF", _String2="..") returned 1 [0216.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81da3f0 [0216.742] wcscpy (in: _Dest=0x81da3f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.742] wcscat (in: _Dest=0x81da3f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.742] wcscat (in: _Dest=0x81da3f0, _Source="ZPDIR1B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" [0216.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0216.744] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1F.GIF", cAlternateFileName="")) returned 1 [0216.744] wcscmp (_String1="ZPDIR1F.GIF", _String2=".") returned 1 [0216.744] wcscmp (_String1="ZPDIR1F.GIF", _String2="..") returned 1 [0216.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81da488 [0216.744] wcscpy (in: _Dest=0x81da488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.744] wcscat (in: _Dest=0x81da488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.744] wcscat (in: _Dest=0x81da488, _Source="ZPDIR1F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" [0216.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0216.745] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR20F.GIF", cAlternateFileName="")) returned 1 [0216.745] wcscmp (_String1="ZPDIR20F.GIF", _String2=".") returned 1 [0216.746] wcscmp (_String1="ZPDIR20F.GIF", _String2="..") returned 1 [0216.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da520 [0216.746] wcscpy (in: _Dest=0x81da520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.746] wcscat (in: _Dest=0x81da520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.746] wcscat (in: _Dest=0x81da520, _Source="ZPDIR20F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" [0216.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0216.747] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x42ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR21F.GIF", cAlternateFileName="")) returned 1 [0216.747] wcscmp (_String1="ZPDIR21F.GIF", _String2=".") returned 1 [0216.747] wcscmp (_String1="ZPDIR21F.GIF", _String2="..") returned 1 [0216.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da5b8 [0216.747] wcscpy (in: _Dest=0x81da5b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.747] wcscat (in: _Dest=0x81da5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.747] wcscat (in: _Dest=0x81da5b8, _Source="ZPDIR21F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" [0216.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0216.749] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR22F.GIF", cAlternateFileName="")) returned 1 [0216.749] wcscmp (_String1="ZPDIR22F.GIF", _String2=".") returned 1 [0216.749] wcscmp (_String1="ZPDIR22F.GIF", _String2="..") returned 1 [0216.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da650 [0216.749] wcscpy (in: _Dest=0x81da650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.749] wcscat (in: _Dest=0x81da650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.749] wcscat (in: _Dest=0x81da650, _Source="ZPDIR22F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" [0216.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0216.750] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2a71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR23F.GIF", cAlternateFileName="")) returned 1 [0216.750] wcscmp (_String1="ZPDIR23F.GIF", _String2=".") returned 1 [0216.750] wcscmp (_String1="ZPDIR23F.GIF", _String2="..") returned 1 [0216.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da6e8 [0216.751] wcscpy (in: _Dest=0x81da6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.751] wcscat (in: _Dest=0x81da6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.751] wcscat (in: _Dest=0x81da6e8, _Source="ZPDIR23F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" [0216.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0216.752] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR24F.GIF", cAlternateFileName="")) returned 1 [0216.752] wcscmp (_String1="ZPDIR24F.GIF", _String2=".") returned 1 [0216.752] wcscmp (_String1="ZPDIR24F.GIF", _String2="..") returned 1 [0216.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da780 [0216.752] wcscpy (in: _Dest=0x81da780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.752] wcscat (in: _Dest=0x81da780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.752] wcscat (in: _Dest=0x81da780, _Source="ZPDIR24F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" [0216.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0216.754] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x326c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR25F.GIF", cAlternateFileName="")) returned 1 [0216.754] wcscmp (_String1="ZPDIR25F.GIF", _String2=".") returned 1 [0216.754] wcscmp (_String1="ZPDIR25F.GIF", _String2="..") returned 1 [0216.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da818 [0216.754] wcscpy (in: _Dest=0x81da818, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.754] wcscat (in: _Dest=0x81da818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.754] wcscat (in: _Dest=0x81da818, _Source="ZPDIR25F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" [0216.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0216.755] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR26F.GIF", cAlternateFileName="")) returned 1 [0216.755] wcscmp (_String1="ZPDIR26F.GIF", _String2=".") returned 1 [0216.755] wcscmp (_String1="ZPDIR26F.GIF", _String2="..") returned 1 [0216.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da8b0 [0216.755] wcscpy (in: _Dest=0x81da8b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.755] wcscat (in: _Dest=0x81da8b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.755] wcscat (in: _Dest=0x81da8b0, _Source="ZPDIR26F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" [0216.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0216.757] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x20f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR27F.GIF", cAlternateFileName="")) returned 1 [0216.757] wcscmp (_String1="ZPDIR27F.GIF", _String2=".") returned 1 [0216.757] wcscmp (_String1="ZPDIR27F.GIF", _String2="..") returned 1 [0216.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da948 [0216.757] wcscpy (in: _Dest=0x81da948, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.757] wcscat (in: _Dest=0x81da948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.757] wcscat (in: _Dest=0x81da948, _Source="ZPDIR27F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" [0216.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0216.758] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x10a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR28F.GIF", cAlternateFileName="")) returned 1 [0216.760] wcscmp (_String1="ZPDIR28F.GIF", _String2=".") returned 1 [0216.760] wcscmp (_String1="ZPDIR28F.GIF", _String2="..") returned 1 [0216.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81da9e0 [0216.760] wcscpy (in: _Dest=0x81da9e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.760] wcscat (in: _Dest=0x81da9e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.760] wcscat (in: _Dest=0x81da9e0, _Source="ZPDIR28F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" [0216.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81da9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0216.761] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR29F.GIF", cAlternateFileName="")) returned 1 [0216.761] wcscmp (_String1="ZPDIR29F.GIF", _String2=".") returned 1 [0216.761] wcscmp (_String1="ZPDIR29F.GIF", _String2="..") returned 1 [0216.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81daa78 [0216.761] wcscpy (in: _Dest=0x81daa78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.761] wcscat (in: _Dest=0x81daa78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.761] wcscat (in: _Dest=0x81daa78, _Source="ZPDIR29F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" [0216.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daa78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0216.763] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dadf00, ftCreationTime.dwHighDateTime=0x1bdb408, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5dadf00, ftLastWriteTime.dwHighDateTime=0x1bdb408, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2B.GIF", cAlternateFileName="")) returned 1 [0216.763] wcscmp (_String1="ZPDIR2B.GIF", _String2=".") returned 1 [0216.763] wcscmp (_String1="ZPDIR2B.GIF", _String2="..") returned 1 [0216.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81dab10 [0216.763] wcscpy (in: _Dest=0x81dab10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.763] wcscat (in: _Dest=0x81dab10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.763] wcscat (in: _Dest=0x81dab10, _Source="ZPDIR2B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" [0216.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dab10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0216.764] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x154f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2F.GIF", cAlternateFileName="")) returned 1 [0216.764] wcscmp (_String1="ZPDIR2F.GIF", _String2=".") returned 1 [0216.764] wcscmp (_String1="ZPDIR2F.GIF", _String2="..") returned 1 [0216.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81daba8 [0216.765] wcscpy (in: _Dest=0x81daba8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.765] wcscat (in: _Dest=0x81daba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.765] wcscat (in: _Dest=0x81daba8, _Source="ZPDIR2F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" [0216.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2898 [0216.766] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x905a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR30F.GIF", cAlternateFileName="")) returned 1 [0216.766] wcscmp (_String1="ZPDIR30F.GIF", _String2=".") returned 1 [0216.766] wcscmp (_String1="ZPDIR30F.GIF", _String2="..") returned 1 [0216.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81dac40 [0216.766] wcscpy (in: _Dest=0x81dac40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.766] wcscat (in: _Dest=0x81dac40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.767] wcscat (in: _Dest=0x81dac40, _Source="ZPDIR30F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" [0216.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2660 [0216.768] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR31F.GIF", cAlternateFileName="")) returned 1 [0216.768] wcscmp (_String1="ZPDIR31F.GIF", _String2=".") returned 1 [0216.768] wcscmp (_String1="ZPDIR31F.GIF", _String2="..") returned 1 [0216.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81dacd8 [0216.768] wcscpy (in: _Dest=0x81dacd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.768] wcscat (in: _Dest=0x81dacd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.768] wcscat (in: _Dest=0x81dacd8, _Source="ZPDIR31F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" [0216.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dacd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2894 [0217.674] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x9eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR32F.GIF", cAlternateFileName="")) returned 1 [0217.674] wcscmp (_String1="ZPDIR32F.GIF", _String2=".") returned 1 [0217.674] wcscmp (_String1="ZPDIR32F.GIF", _String2="..") returned 1 [0217.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b1b0 [0217.674] wcscpy (in: _Dest=0x3e2b1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0217.674] wcscat (in: _Dest=0x3e2b1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0217.674] wcscat (in: _Dest=0x3e2b1b0, _Source="ZPDIR32F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" [0219.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c68 [0219.730] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5a34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR33F.GIF", cAlternateFileName="")) returned 1 [0219.730] wcscmp (_String1="ZPDIR33F.GIF", _String2=".") returned 1 [0219.730] wcscmp (_String1="ZPDIR33F.GIF", _String2="..") returned 1 [0219.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ae20 [0219.731] wcscpy (in: _Dest=0x3e2ae20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.731] wcscat (in: _Dest=0x3e2ae20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.731] wcscat (in: _Dest=0x3e2ae20, _Source="ZPDIR33F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" [0219.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ae20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a50 [0219.732] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR34F.GIF", cAlternateFileName="")) returned 1 [0219.732] wcscmp (_String1="ZPDIR34F.GIF", _String2=".") returned 1 [0219.732] wcscmp (_String1="ZPDIR34F.GIF", _String2="..") returned 1 [0219.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a4a0 [0219.732] wcscpy (in: _Dest=0x3e2a4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.732] wcscat (in: _Dest=0x3e2a4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.732] wcscat (in: _Dest=0x3e2a4a0, _Source="ZPDIR34F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" [0219.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0219.733] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4660, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR35F.GIF", cAlternateFileName="")) returned 1 [0219.733] wcscmp (_String1="ZPDIR35F.GIF", _String2=".") returned 1 [0219.733] wcscmp (_String1="ZPDIR35F.GIF", _String2="..") returned 1 [0219.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b968 [0219.733] wcscpy (in: _Dest=0x3e2b968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.733] wcscat (in: _Dest=0x3e2b968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.733] wcscat (in: _Dest=0x3e2b968, _Source="ZPDIR35F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" [0219.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0219.734] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x875e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR36F.GIF", cAlternateFileName="")) returned 1 [0219.734] wcscmp (_String1="ZPDIR36F.GIF", _String2=".") returned 1 [0219.734] wcscmp (_String1="ZPDIR36F.GIF", _String2="..") returned 1 [0219.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bbc8 [0219.734] wcscpy (in: _Dest=0x3e2bbc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.734] wcscat (in: _Dest=0x3e2bbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.734] wcscat (in: _Dest=0x3e2bbc8, _Source="ZPDIR36F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" [0219.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0219.735] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR37F.GIF", cAlternateFileName="")) returned 1 [0219.735] wcscmp (_String1="ZPDIR37F.GIF", _String2=".") returned 1 [0219.735] wcscmp (_String1="ZPDIR37F.GIF", _String2="..") returned 1 [0219.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a798 [0219.735] wcscpy (in: _Dest=0x3e2a798, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.735] wcscat (in: _Dest=0x3e2a798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.735] wcscat (in: _Dest=0x3e2a798, _Source="ZPDIR37F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" [0219.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0219.736] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xcbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR38F.GIF", cAlternateFileName="")) returned 1 [0219.736] wcscmp (_String1="ZPDIR38F.GIF", _String2=".") returned 1 [0219.736] wcscmp (_String1="ZPDIR38F.GIF", _String2="..") returned 1 [0219.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ba98 [0219.737] wcscpy (in: _Dest=0x3e2ba98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.737] wcscat (in: _Dest=0x3e2ba98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.737] wcscat (in: _Dest=0x3e2ba98, _Source="ZPDIR38F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" [0219.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ba98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0219.740] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xdc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR39F.GIF", cAlternateFileName="")) returned 1 [0219.740] wcscmp (_String1="ZPDIR39F.GIF", _String2=".") returned 1 [0219.740] wcscmp (_String1="ZPDIR39F.GIF", _String2="..") returned 1 [0219.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ac58 [0219.740] wcscpy (in: _Dest=0x3e2ac58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.740] wcscat (in: _Dest=0x3e2ac58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.740] wcscat (in: _Dest=0x3e2ac58, _Source="ZPDIR39F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" [0219.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ac58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0219.741] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3B.GIF", cAlternateFileName="")) returned 1 [0219.741] wcscmp (_String1="ZPDIR3B.GIF", _String2=".") returned 1 [0219.741] wcscmp (_String1="ZPDIR3B.GIF", _String2="..") returned 1 [0219.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a2d8 [0219.741] wcscpy (in: _Dest=0x3e2a2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.741] wcscat (in: _Dest=0x3e2a2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.741] wcscat (in: _Dest=0x3e2a2d8, _Source="ZPDIR3B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" [0219.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0219.742] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x58e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3F.GIF", cAlternateFileName="")) returned 1 [0219.743] wcscmp (_String1="ZPDIR3F.GIF", _String2=".") returned 1 [0219.743] wcscmp (_String1="ZPDIR3F.GIF", _String2="..") returned 1 [0219.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2a830 [0219.743] wcscpy (in: _Dest=0x3e2a830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.743] wcscat (in: _Dest=0x3e2a830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.743] wcscat (in: _Dest=0x3e2a830, _Source="ZPDIR3F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" [0219.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0219.744] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x112a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR40F.GIF", cAlternateFileName="")) returned 1 [0219.744] wcscmp (_String1="ZPDIR40F.GIF", _String2=".") returned 1 [0219.744] wcscmp (_String1="ZPDIR40F.GIF", _String2="..") returned 1 [0219.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2ab28 [0219.744] wcscpy (in: _Dest=0x3e2ab28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.744] wcscat (in: _Dest=0x3e2ab28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.744] wcscat (in: _Dest=0x3e2ab28, _Source="ZPDIR40F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" [0219.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ab28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0219.745] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR41F.GIF", cAlternateFileName="")) returned 1 [0219.745] wcscmp (_String1="ZPDIR41F.GIF", _String2=".") returned 1 [0219.745] wcscmp (_String1="ZPDIR41F.GIF", _String2="..") returned 1 [0219.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a8c8 [0219.745] wcscpy (in: _Dest=0x3e2a8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.745] wcscat (in: _Dest=0x3e2a8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.746] wcscat (in: _Dest=0x3e2a8c8, _Source="ZPDIR41F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" [0219.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b8 [0219.747] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xe591, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR42F.GIF", cAlternateFileName="")) returned 1 [0219.747] wcscmp (_String1="ZPDIR42F.GIF", _String2=".") returned 1 [0219.747] wcscmp (_String1="ZPDIR42F.GIF", _String2="..") returned 1 [0219.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a700 [0219.747] wcscpy (in: _Dest=0x3e2a700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.747] wcscat (in: _Dest=0x3e2a700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.747] wcscat (in: _Dest=0x3e2a700, _Source="ZPDIR42F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" [0219.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc [0219.748] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x98a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43B.GIF", cAlternateFileName="")) returned 1 [0219.748] wcscmp (_String1="ZPDIR43B.GIF", _String2=".") returned 1 [0219.748] wcscmp (_String1="ZPDIR43B.GIF", _String2="..") returned 1 [0219.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a240 [0219.748] wcscpy (in: _Dest=0x3e2a240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.748] wcscat (in: _Dest=0x3e2a240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.748] wcscat (in: _Dest=0x3e2a240, _Source="ZPDIR43B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" [0219.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0219.749] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43F.GIF", cAlternateFileName="")) returned 1 [0219.749] wcscmp (_String1="ZPDIR43F.GIF", _String2=".") returned 1 [0219.749] wcscmp (_String1="ZPDIR43F.GIF", _String2="..") returned 1 [0219.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bd90 [0219.749] wcscpy (in: _Dest=0x3e2bd90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.749] wcscat (in: _Dest=0x3e2bd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.749] wcscat (in: _Dest=0x3e2bd90, _Source="ZPDIR43F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" [0219.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0219.750] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b06, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44B.GIF", cAlternateFileName="")) returned 1 [0219.750] wcscmp (_String1="ZPDIR44B.GIF", _String2=".") returned 1 [0219.750] wcscmp (_String1="ZPDIR44B.GIF", _String2="..") returned 1 [0219.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b2e0 [0219.750] wcscpy (in: _Dest=0x3e2b2e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.750] wcscat (in: _Dest=0x3e2b2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.751] wcscat (in: _Dest=0x3e2b2e0, _Source="ZPDIR44B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" [0219.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0219.751] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44F.GIF", cAlternateFileName="")) returned 1 [0219.752] wcscmp (_String1="ZPDIR44F.GIF", _String2=".") returned 1 [0219.752] wcscmp (_String1="ZPDIR44F.GIF", _String2="..") returned 1 [0219.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2af50 [0219.752] wcscpy (in: _Dest=0x3e2af50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.752] wcscat (in: _Dest=0x3e2af50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.752] wcscat (in: _Dest=0x3e2af50, _Source="ZPDIR44F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" [0219.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2af50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0219.753] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x17bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45B.GIF", cAlternateFileName="")) returned 1 [0219.753] wcscmp (_String1="ZPDIR45B.GIF", _String2=".") returned 1 [0219.753] wcscmp (_String1="ZPDIR45B.GIF", _String2="..") returned 1 [0219.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bc60 [0219.753] wcscpy (in: _Dest=0x3e2bc60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.753] wcscat (in: _Dest=0x3e2bc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.753] wcscat (in: _Dest=0x3e2bc60, _Source="ZPDIR45B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" [0219.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0219.754] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45F.GIF", cAlternateFileName="")) returned 1 [0219.754] wcscmp (_String1="ZPDIR45F.GIF", _String2=".") returned 1 [0219.754] wcscmp (_String1="ZPDIR45F.GIF", _String2="..") returned 1 [0219.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2bcf8 [0219.754] wcscpy (in: _Dest=0x3e2bcf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.754] wcscat (in: _Dest=0x3e2bcf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.754] wcscat (in: _Dest=0x3e2bcf8, _Source="ZPDIR45F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" [0219.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0219.755] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1304, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46B.GIF", cAlternateFileName="")) returned 1 [0219.755] wcscmp (_String1="ZPDIR46B.GIF", _String2=".") returned 1 [0219.755] wcscmp (_String1="ZPDIR46B.GIF", _String2="..") returned 1 [0219.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2a078 [0219.755] wcscpy (in: _Dest=0x3e2a078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.755] wcscat (in: _Dest=0x3e2a078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.755] wcscat (in: _Dest=0x3e2a078, _Source="ZPDIR46B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" [0219.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2a078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25d4 [0219.756] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x141c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46F.GIF", cAlternateFileName="")) returned 1 [0219.756] wcscmp (_String1="ZPDIR46F.GIF", _String2=".") returned 1 [0219.756] wcscmp (_String1="ZPDIR46F.GIF", _String2="..") returned 1 [0219.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e29f48 [0219.756] wcscpy (in: _Dest=0x3e29f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.757] wcscat (in: _Dest=0x3e29f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.757] wcscat (in: _Dest=0x3e29f48, _Source="ZPDIR46F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" [0219.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e29f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0219.894] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x7517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47B.GIF", cAlternateFileName="")) returned 1 [0219.894] wcscmp (_String1="ZPDIR47B.GIF", _String2=".") returned 1 [0219.895] wcscmp (_String1="ZPDIR47B.GIF", _String2="..") returned 1 [0219.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2b378 [0219.895] wcscpy (in: _Dest=0x3e2b378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.895] wcscat (in: _Dest=0x3e2b378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.895] wcscat (in: _Dest=0x3e2b378, _Source="ZPDIR47B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" [0219.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0219.896] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x539e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47F.GIF", cAlternateFileName="")) returned 1 [0219.896] wcscmp (_String1="ZPDIR47F.GIF", _String2=".") returned 1 [0219.896] wcscmp (_String1="ZPDIR47F.GIF", _String2="..") returned 1 [0219.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e2be28 [0219.896] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.896] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.896] wcscat (in: _Dest=0x3e2be28, _Source="ZPDIR47F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" [0219.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2be28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0219.897] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x67f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48B.GIF", cAlternateFileName="")) returned 1 [0219.897] wcscmp (_String1="ZPDIR48B.GIF", _String2=".") returned 1 [0219.897] wcscmp (_String1="ZPDIR48B.GIF", _String2="..") returned 1 [0219.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81dad70 [0219.898] wcscpy (in: _Dest=0x81dad70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.898] wcscat (in: _Dest=0x81dad70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.898] wcscat (in: _Dest=0x81dad70, _Source="ZPDIR48B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" [0219.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dad70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0219.899] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48F.GIF", cAlternateFileName="")) returned 1 [0219.899] wcscmp (_String1="ZPDIR48F.GIF", _String2=".") returned 1 [0219.899] wcscmp (_String1="ZPDIR48F.GIF", _String2="..") returned 1 [0219.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81dae08 [0219.899] wcscpy (in: _Dest=0x81dae08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.899] wcscat (in: _Dest=0x81dae08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.899] wcscat (in: _Dest=0x81dae08, _Source="ZPDIR48F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" [0219.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dae08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0219.901] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49B.GIF", cAlternateFileName="")) returned 1 [0219.901] wcscmp (_String1="ZPDIR49B.GIF", _String2=".") returned 1 [0219.901] wcscmp (_String1="ZPDIR49B.GIF", _String2="..") returned 1 [0219.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81daea0 [0219.901] wcscpy (in: _Dest=0x81daea0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.901] wcscat (in: _Dest=0x81daea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.901] wcscat (in: _Dest=0x81daea0, _Source="ZPDIR49B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" [0219.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0219.902] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b99, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49F.GIF", cAlternateFileName="")) returned 1 [0219.902] wcscmp (_String1="ZPDIR49F.GIF", _String2=".") returned 1 [0219.902] wcscmp (_String1="ZPDIR49F.GIF", _String2="..") returned 1 [0219.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81daf38 [0219.902] wcscpy (in: _Dest=0x81daf38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.902] wcscat (in: _Dest=0x81daf38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.902] wcscat (in: _Dest=0x81daf38, _Source="ZPDIR49F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" [0219.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81daf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0220.163] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2fc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4B.GIF", cAlternateFileName="")) returned 1 [0220.163] wcscmp (_String1="ZPDIR4B.GIF", _String2=".") returned 1 [0220.163] wcscmp (_String1="ZPDIR4B.GIF", _String2="..") returned 1 [0220.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81dafd0 [0220.164] wcscpy (in: _Dest=0x81dafd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.164] wcscat (in: _Dest=0x81dafd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.164] wcscat (in: _Dest=0x81dafd0, _Source="ZPDIR4B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" [0221.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81dafd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0221.249] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4F.GIF", cAlternateFileName="")) returned 1 [0222.140] wcscmp (_String1="ZPDIR4F.GIF", _String2=".") returned 1 [0222.140] wcscmp (_String1="ZPDIR4F.GIF", _String2="..") returned 1 [0222.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81db198 [0222.140] wcscpy (in: _Dest=0x81db198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.140] wcscat (in: _Dest=0x81db198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.140] wcscat (in: _Dest=0x81db198, _Source="ZPDIR4F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" [0222.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0222.141] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x10a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50B.GIF", cAlternateFileName="")) returned 1 [0222.141] wcscmp (_String1="ZPDIR50B.GIF", _String2=".") returned 1 [0222.141] wcscmp (_String1="ZPDIR50B.GIF", _String2="..") returned 1 [0222.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81db230 [0222.141] wcscpy (in: _Dest=0x81db230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.142] wcscat (in: _Dest=0x81db230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.142] wcscat (in: _Dest=0x81db230, _Source="ZPDIR50B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" [0222.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0222.143] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x117f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50F.GIF", cAlternateFileName="")) returned 1 [0222.143] wcscmp (_String1="ZPDIR50F.GIF", _String2=".") returned 1 [0222.143] wcscmp (_String1="ZPDIR50F.GIF", _String2="..") returned 1 [0222.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81db2c8 [0222.143] wcscpy (in: _Dest=0x81db2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.143] wcscat (in: _Dest=0x81db2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.143] wcscat (in: _Dest=0x81db2c8, _Source="ZPDIR50F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" [0222.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0222.203] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2395, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51B.GIF", cAlternateFileName="")) returned 1 [0222.203] wcscmp (_String1="ZPDIR51B.GIF", _String2=".") returned 1 [0222.204] wcscmp (_String1="ZPDIR51B.GIF", _String2="..") returned 1 [0222.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81db360 [0222.211] wcscpy (in: _Dest=0x81db360, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.211] wcscat (in: _Dest=0x81db360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.211] wcscat (in: _Dest=0x81db360, _Source="ZPDIR51B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" [0222.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0222.218] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51F.GIF", cAlternateFileName="")) returned 1 [0222.218] wcscmp (_String1="ZPDIR51F.GIF", _String2=".") returned 1 [0222.218] wcscmp (_String1="ZPDIR51F.GIF", _String2="..") returned 1 [0222.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x81db3f8 [0222.218] wcscpy (in: _Dest=0x81db3f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.218] wcscat (in: _Dest=0x81db3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.218] wcscat (in: _Dest=0x81db3f8, _Source="ZPDIR51F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" [0222.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0222.219] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x592b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5B.GIF", cAlternateFileName="")) returned 1 [0222.220] wcscmp (_String1="ZPDIR5B.GIF", _String2=".") returned 1 [0222.220] wcscmp (_String1="ZPDIR5B.GIF", _String2="..") returned 1 [0222.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81db490 [0222.220] wcscpy (in: _Dest=0x81db490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.220] wcscat (in: _Dest=0x81db490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.220] wcscat (in: _Dest=0x81db490, _Source="ZPDIR5B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" [0222.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0222.221] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xdb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5F.GIF", cAlternateFileName="")) returned 1 [0222.221] wcscmp (_String1="ZPDIR5F.GIF", _String2=".") returned 1 [0222.221] wcscmp (_String1="ZPDIR5F.GIF", _String2="..") returned 1 [0222.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x81db528 [0222.221] wcscpy (in: _Dest=0x81db528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.221] wcscat (in: _Dest=0x81db528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.221] wcscat (in: _Dest=0x81db528, _Source="ZPDIR5F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" [0222.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x81db528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0222.223] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6B.GIF", cAlternateFileName="")) returned 1 [0222.223] wcscmp (_String1="ZPDIR6B.GIF", _String2=".") returned 1 [0222.223] wcscmp (_String1="ZPDIR6B.GIF", _String2="..") returned 1 [0222.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d40fd0 [0222.223] wcscpy (in: _Dest=0x3d40fd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.223] wcscat (in: _Dest=0x3d40fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.223] wcscat (in: _Dest=0x3d40fd0, _Source="ZPDIR6B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" [0222.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d40fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0222.224] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x41e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6F.GIF", cAlternateFileName="")) returned 1 [0222.224] wcscmp (_String1="ZPDIR6F.GIF", _String2=".") returned 1 [0222.224] wcscmp (_String1="ZPDIR6F.GIF", _String2="..") returned 1 [0222.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41068 [0222.224] wcscpy (in: _Dest=0x3d41068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.224] wcscat (in: _Dest=0x3d41068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.225] wcscat (in: _Dest=0x3d41068, _Source="ZPDIR6F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" [0222.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0222.226] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5559, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7B.GIF", cAlternateFileName="")) returned 1 [0222.226] wcscmp (_String1="ZPDIR7B.GIF", _String2=".") returned 1 [0222.226] wcscmp (_String1="ZPDIR7B.GIF", _String2="..") returned 1 [0222.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41a80 [0222.226] wcscpy (in: _Dest=0x3d41a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.226] wcscat (in: _Dest=0x3d41a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.226] wcscat (in: _Dest=0x3d41a80, _Source="ZPDIR7B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" [0222.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0222.227] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5fdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7F.GIF", cAlternateFileName="")) returned 1 [0222.227] wcscmp (_String1="ZPDIR7F.GIF", _String2=".") returned 1 [0222.227] wcscmp (_String1="ZPDIR7F.GIF", _String2="..") returned 1 [0222.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41b18 [0222.227] wcscpy (in: _Dest=0x3d41b18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.227] wcscat (in: _Dest=0x3d41b18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.227] wcscat (in: _Dest=0x3d41b18, _Source="ZPDIR7F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" [0222.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0222.229] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8B.GIF", cAlternateFileName="")) returned 1 [0222.229] wcscmp (_String1="ZPDIR8B.GIF", _String2=".") returned 1 [0222.229] wcscmp (_String1="ZPDIR8B.GIF", _String2="..") returned 1 [0222.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41100 [0222.229] wcscpy (in: _Dest=0x3d41100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.229] wcscat (in: _Dest=0x3d41100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.229] wcscat (in: _Dest=0x3d41100, _Source="ZPDIR8B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" [0222.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0222.230] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8F.GIF", cAlternateFileName="")) returned 1 [0222.230] wcscmp (_String1="ZPDIR8F.GIF", _String2=".") returned 1 [0222.230] wcscmp (_String1="ZPDIR8F.GIF", _String2="..") returned 1 [0222.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41198 [0222.230] wcscpy (in: _Dest=0x3d41198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.230] wcscat (in: _Dest=0x3d41198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.230] wcscat (in: _Dest=0x3d41198, _Source="ZPDIR8F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" [0222.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0 [0222.232] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9B.GIF", cAlternateFileName="")) returned 1 [0222.232] wcscmp (_String1="ZPDIR9B.GIF", _String2=".") returned 1 [0222.232] wcscmp (_String1="ZPDIR9B.GIF", _String2="..") returned 1 [0222.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d41230 [0222.232] wcscpy (in: _Dest=0x3d41230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.232] wcscat (in: _Dest=0x3d41230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.232] wcscat (in: _Dest=0x3d41230, _Source="ZPDIR9B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" [0222.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d41230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2590 [0222.233] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 1 [0222.233] wcscmp (_String1="ZPDIR9F.GIF", _String2=".") returned 1 [0222.233] wcscmp (_String1="ZPDIR9F.GIF", _String2="..") returned 1 [0222.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3d412c8 [0222.233] wcscpy (in: _Dest=0x3d412c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0222.233] wcscat (in: _Dest=0x3d412c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0222.233] wcscat (in: _Dest=0x3d412c8, _Source="ZPDIR9F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" [0222.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d412c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0222.234] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f09788 | out: lpFindFileData=0x3f09788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 0 [0222.871] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0223.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f09788) returned 1 [0223.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5008) returned 1 [0223.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 Thread: id = 6786 os_tid = 0x187c [0203.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll")) returned 0x20 [0206.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.065] GetLastError () returned 0x5 [0206.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 Thread: id = 6787 os_tid = 0x2b18 [0203.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x81bed60 [0203.037] wcscpy (in: _Dest=0x81bed60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.037] wcscat (in: _Dest=0x81bed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.037] wcscat (in: _Dest=0x81bed60, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*" [0203.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0a5f8 [0203.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63ef3b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0209.870] wcscmp (_String1=".", _String2=".") returned 0 [0209.870] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63ef3b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.870] wcscmp (_String1="..", _String2=".") returned 1 [0209.870] wcscmp (_String1="..", _String2="..") returned 0 [0209.870] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae43900, ftCreationTime.dwHighDateTime=0x1c7e8ab, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2ae43900, ftLastWriteTime.dwHighDateTime=0x1c7e8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="CLASSI~1.DOT")) returned 1 [0209.870] wcscmp (_String1="Classic.dotx", _String2=".") returned 1 [0209.870] wcscmp (_String1="Classic.dotx", _String2="..") returned 1 [0209.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e116e8 [0209.870] wcscpy (in: _Dest=0x3e116e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0209.870] wcscat (in: _Dest=0x3e116e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0209.870] wcscat (in: _Dest=0x3e116e8, _Source="Classic.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" [0211.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e116e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf8 [0211.559] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x23e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="DEFAUL~1.DOT")) returned 1 [0211.559] wcscmp (_String1="Default.dotx", _String2=".") returned 1 [0211.559] wcscmp (_String1="Default.dotx", _String2="..") returned 1 [0211.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e12408 [0211.559] wcscpy (in: _Dest=0x3e12408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.559] wcscat (in: _Dest=0x3e12408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.559] wcscat (in: _Dest=0x3e12408, _Source="Default.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" [0211.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0211.560] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x20f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultBlackAndWhite.dotx", cAlternateFileName="DEFAUL~2.DOT")) returned 1 [0211.560] wcscmp (_String1="DefaultBlackAndWhite.dotx", _String2=".") returned 1 [0211.560] wcscmp (_String1="DefaultBlackAndWhite.dotx", _String2="..") returned 1 [0211.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3d411a0 [0211.561] wcscpy (in: _Dest=0x3d411a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.561] wcscat (in: _Dest=0x3d411a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.561] wcscat (in: _Dest=0x3d411a0, _Source="DefaultBlackAndWhite.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" [0211.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3d411a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0211.572] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="Distinctive.dotx", cAlternateFileName="DISTIN~1.DOT")) returned 1 [0211.572] wcscmp (_String1="Distinctive.dotx", _String2=".") returned 1 [0211.572] wcscmp (_String1="Distinctive.dotx", _String2="..") returned 1 [0211.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d680 [0211.573] wcscpy (in: _Dest=0x3e2d680, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.573] wcscat (in: _Dest=0x3e2d680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.573] wcscat (in: _Dest=0x3e2d680, _Source="Distinctive.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" [0211.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0211.574] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63f65fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x222a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elegant.dotx", cAlternateFileName="ELEGAN~1.DOT")) returned 1 [0211.574] wcscmp (_String1="Elegant.dotx", _String2=".") returned 1 [0211.574] wcscmp (_String1="Elegant.dotx", _String2="..") returned 1 [0211.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e12228 [0211.574] wcscpy (in: _Dest=0x3e12228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.574] wcscat (in: _Dest=0x3e12228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.574] wcscat (in: _Dest=0x3e12228, _Source="Elegant.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" [0211.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e12228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0211.575] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy.dotx", cAlternateFileName="FANCY~1.DOT")) returned 1 [0211.575] wcscmp (_String1="Fancy.dotx", _String2=".") returned 1 [0211.575] wcscmp (_String1="Fancy.dotx", _String2="..") returned 1 [0211.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e2be28 [0211.575] wcscpy (in: _Dest=0x3e2be28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.575] wcscat (in: _Dest=0x3e2be28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.575] wcscat (in: _Dest=0x3e2be28, _Source="Fancy.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" [0211.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2be28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0211.576] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="Formal.dotx", cAlternateFileName="FORMAL~1.DOT")) returned 1 [0211.576] wcscmp (_String1="Formal.dotx", _String2=".") returned 1 [0211.576] wcscmp (_String1="Formal.dotx", _String2="..") returned 1 [0211.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2bcf8 [0211.577] wcscpy (in: _Dest=0x3e2bcf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.577] wcscat (in: _Dest=0x3e2bcf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.577] wcscat (in: _Dest=0x3e2bcf8, _Source="Formal.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" [0211.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2bcf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0211.578] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manuscript.dotx", cAlternateFileName="MANUSC~1.DOT")) returned 1 [0211.578] wcscmp (_String1="Manuscript.dotx", _String2=".") returned 1 [0211.578] wcscmp (_String1="Manuscript.dotx", _String2="..") returned 1 [0211.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e11328 [0211.578] wcscpy (in: _Dest=0x3e11328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.578] wcscat (in: _Dest=0x3e11328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.578] wcscat (in: _Dest=0x3e11328, _Source="Manuscript.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" [0211.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0211.579] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x21ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modern.dotx", cAlternateFileName="MODERN~1.DOT")) returned 1 [0211.579] wcscmp (_String1="Modern.dotx", _String2=".") returned 1 [0211.579] wcscmp (_String1="Modern.dotx", _String2="..") returned 1 [0211.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e29f48 [0211.579] wcscpy (in: _Dest=0x3e29f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.579] wcscat (in: _Dest=0x3e29f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.579] wcscat (in: _Dest=0x3e29f48, _Source="Modern.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" [0211.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e29f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0211.580] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a92700, ftCreationTime.dwHighDateTime=0x1ca56f2, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97a92700, ftLastWriteTime.dwHighDateTime=0x1ca56f2, nFileSizeHigh=0x0, nFileSizeLow=0x8ce63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.dotx", cAlternateFileName="NEWSPR~1.DOT")) returned 1 [0211.580] wcscmp (_String1="Newsprint.dotx", _String2=".") returned 1 [0211.580] wcscmp (_String1="Newsprint.dotx", _String2="..") returned 1 [0211.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e11468 [0211.580] wcscpy (in: _Dest=0x3e11468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.580] wcscat (in: _Dest=0x3e11468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.580] wcscat (in: _Dest=0x3e11468, _Source="Newsprint.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" [0211.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e11468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0211.582] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a92700, ftCreationTime.dwHighDateTime=0x1ca56f2, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97a92700, ftLastWriteTime.dwHighDateTime=0x1ca56f2, nFileSizeHigh=0x0, nFileSizeLow=0x5adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.dotx", cAlternateFileName="PERSPE~1.DOT")) returned 1 [0211.582] wcscmp (_String1="Perspective.dotx", _String2=".") returned 1 [0211.582] wcscmp (_String1="Perspective.dotx", _String2="..") returned 1 [0211.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d7d0 [0211.582] wcscpy (in: _Dest=0x3e2d7d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.582] wcscat (in: _Dest=0x3e2d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.582] wcscat (in: _Dest=0x3e2d7d0, _Source="Perspective.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" [0211.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0211.583] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x20f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.dotx", cAlternateFileName="SIMPLE~1.DOT")) returned 1 [0211.583] wcscmp (_String1="Simple.dotx", _String2=".") returned 1 [0211.583] wcscmp (_String1="Simple.dotx", _String2="..") returned 1 [0211.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2b378 [0211.583] wcscpy (in: _Dest=0x3e2b378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.583] wcscat (in: _Dest=0x3e2b378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.583] wcscat (in: _Dest=0x3e2b378, _Source="Simple.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" [0211.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0211.585] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a92700, ftCreationTime.dwHighDateTime=0x1ca56f2, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97a92700, ftLastWriteTime.dwHighDateTime=0x1ca56f2, nFileSizeHigh=0x0, nFileSizeLow=0x5d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.dotx", cAlternateFileName="THATCH~1.DOT")) returned 1 [0211.585] wcscmp (_String1="Thatch.dotx", _String2=".") returned 1 [0211.585] wcscmp (_String1="Thatch.dotx", _String2="..") returned 1 [0211.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e2ae20 [0211.585] wcscpy (in: _Dest=0x3e2ae20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.585] wcscat (in: _Dest=0x3e2ae20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.585] wcscat (in: _Dest=0x3e2ae20, _Source="Thatch.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" [0211.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2ae20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0211.586] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="TRADIT~1.DOT")) returned 1 [0211.586] wcscmp (_String1="Traditional.dotx", _String2=".") returned 1 [0211.586] wcscmp (_String1="Traditional.dotx", _String2="..") returned 1 [0211.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e2d098 [0211.586] wcscpy (in: _Dest=0x3e2d098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0211.586] wcscat (in: _Dest=0x3e2d098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0211.587] wcscat (in: _Dest=0x3e2d098, _Source="Traditional.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" [0211.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2d098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c7c [0211.588] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0a5f8 | out: lpFindFileData=0x3f0a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="TRADIT~1.DOT")) returned 0 [0211.588] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0211.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0a5f8) returned 1 [0211.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 [0211.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 6788 os_tid = 0x2b58 [0203.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn")) returned 0x20 [0206.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", dwFileAttributes=0x20) returned 0 [0206.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.040] GetLastError () returned 0x5 [0206.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", dwFileAttributes=0x20) returned 0 [0206.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b378) returned 1 Thread: id = 6789 os_tid = 0xa0c [0203.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn")) returned 0x20 [0206.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", dwFileAttributes=0x20) returned 0 [0206.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.038] GetLastError () returned 0x5 [0206.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", dwFileAttributes=0x20) returned 0 [0206.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 6790 os_tid = 0xa1c [0203.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css")) returned 0x20 [0206.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", dwFileAttributes=0x20) returned 0 [0206.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.067] GetLastError () returned 0x5 [0206.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", dwFileAttributes=0x20) returned 0 [0206.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3f88) returned 1 Thread: id = 6791 os_tid = 0x1308 [0203.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm")) returned 0x20 [0206.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", dwFileAttributes=0x20) returned 0 [0206.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.069] GetLastError () returned 0x5 [0206.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", dwFileAttributes=0x20) returned 0 [0206.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 6792 os_tid = 0x1034 [0203.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl")) returned 0x20 [0206.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", dwFileAttributes=0x20) returned 0 [0206.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.036] GetLastError () returned 0x5 [0206.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", dwFileAttributes=0x20) returned 0 [0206.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 6793 os_tid = 0x1120 [0203.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs")) returned 0x20 [0206.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", dwFileAttributes=0x20) returned 0 [0206.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.071] GetLastError () returned 0x5 [0206.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", dwFileAttributes=0x20) returned 0 [0206.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5a08) returned 1 Thread: id = 6794 os_tid = 0x1128 [0203.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc")) returned 0x20 [0206.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", dwFileAttributes=0x20) returned 0 [0206.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.072] GetLastError () returned 0x5 [0206.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", dwFileAttributes=0x20) returned 0 [0206.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 6795 os_tid = 0x190c [0203.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt")) returned 0x20 [0206.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", dwFileAttributes=0x20) returned 0 [0206.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.074] GetLastError () returned 0x5 [0206.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", dwFileAttributes=0x20) returned 0 [0206.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfe60) returned 1 Thread: id = 6796 os_tid = 0x1910 [0203.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk")) returned 0x20 [0206.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.076] GetLastError () returned 0x5 [0206.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 Thread: id = 6797 os_tid = 0x1914 [0203.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk")) returned 0x20 [0206.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.078] GetLastError () returned 0x5 [0206.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0206.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df2f8) returned 1 Thread: id = 6798 os_tid = 0x1918 [0203.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll")) returned 0x20 [0206.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.035] GetLastError () returned 0x5 [0206.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0206.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df388) returned 1 Thread: id = 6799 os_tid = 0x191c [0203.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl")) returned 0x20 [0205.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", dwFileAttributes=0x20) returned 0 [0205.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.598] GetLastError () returned 0x5 [0205.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", dwFileAttributes=0x20) returned 0 [0205.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5808) returned 1 Thread: id = 6800 os_tid = 0x848 [0203.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css")) returned 0x20 [0206.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", dwFileAttributes=0x20) returned 0 [0206.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.003] GetLastError () returned 0x5 [0206.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", dwFileAttributes=0x20) returned 0 [0206.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f32430) returned 1 Thread: id = 6801 os_tid = 0xea0 [0203.284] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json")) returned 0x2020 [0211.139] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0217.059] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x199c [0217.060] GetFileSizeEx (in: hFile=0x199c, lpFileSize=0xa83fc60 | out: lpFileSize=0xa83fc60*=666) returned 1 [0217.060] SetFilePointerEx (in: hFile=0x199c, liDistanceToMove=0x296, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.060] ReadFile (in: hFile=0x199c, lpBuffer=0xa83fc6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa83fc48, lpOverlapped=0x0 | out: lpBuffer=0xa83fc6c*, lpNumberOfBytesRead=0xa83fc48*=0x4, lpOverlapped=0x0) returned 1 [0217.063] SetFilePointerEx (in: hFile=0x199c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0217.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0217.063] NtQuerySystemTime (in: CurrentTime=0xa83fbe8 | out: CurrentTime=0xa83fbe8*=132471540847836000) returned 0x0 [0217.063] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x25511fc6 [0217.063] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x50b13322 [0217.063] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x26fe7b1d [0217.063] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x6482549e [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x1d525e9b [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x1d9381aa [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x5e9d0f83 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x3ff0658f [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x5cd250fa [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x23fb0186 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x2d81597b [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x4f35a584 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x3e6e44cc [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x295124d0 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x2b931bad [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x1310e03 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x66882cbb [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x507d52ff [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x4b742ec5 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x4ea07a2 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x5e75cced [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x50250051 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x332e309c [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x3334e664 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x39be4d7e [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x5a13d512 [0217.064] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x6c408d99 [0217.065] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0xe8adba6 [0217.065] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x320e5efe [0217.065] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x50b85962 [0217.065] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x7ccac2ca [0217.065] RtlRandomEx (in: Seed=0xa83fbe0 | out: Seed=0xa83fbe0) returned 0x35107480 [0217.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b810) returned 1 [0217.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148c9c68 [0217.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148cd870 [0217.079] ReadFile (in: hFile=0x199c, lpBuffer=0x148c9c68, nNumberOfBytesToRead=0x29a, lpNumberOfBytesRead=0xa83fbdc, lpOverlapped=0x0 | out: lpBuffer=0x148c9c68*, lpNumberOfBytesRead=0xa83fbdc*=0x29a, lpOverlapped=0x0) returned 1 [0217.079] SetFilePointerEx (in: hFile=0x199c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.079] WriteFile (in: hFile=0x199c, lpBuffer=0x148cd870*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0xa83fbe0, lpOverlapped=0x0 | out: lpBuffer=0x148cd870*, lpNumberOfBytesWritten=0xa83fbe0*=0x29a, lpOverlapped=0x0) returned 1 [0220.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0220.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0220.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0220.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148cd870) returned 1 [0220.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148c9c68) returned 1 [0220.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402b10) returned 1 [0220.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e57b0) returned 1 [0220.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fb88 [0220.295] SetFilePointerEx (in: hFile=0x199c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.295] WriteFile (in: hFile=0x199c, lpBuffer=0x81d6138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa83fc54, lpOverlapped=0x0 | out: lpBuffer=0x81d6138*, lpNumberOfBytesWritten=0xa83fc54*=0x10c, lpOverlapped=0x0) returned 1 [0220.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6138) returned 1 [0220.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e701b8) returned 1 [0220.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0220.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fb88) returned 1 [0220.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0220.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49b28) returned 1 [0220.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a4d8) returned 1 [0220.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd88) returned 1 [0220.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x81f3d98 [0220.452] wcscpy (in: _Dest=0x81f3d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" [0220.452] wcscat (in: _Dest=0x81f3d98, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.f0dbec" [0220.452] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.f0dbec", NtPathName=0xa83fbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16ce0 [0220.694] FlushFileBuffers (hFile=0x199c) returned 1 [0220.698] CloseHandle (hObject=0x199c) returned 1 [0220.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4b00 [0220.858] wcscpy (in: _Dest=0x81f4b00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" [0220.858] wcscat (in: _Dest=0x81f4b00, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\F0DBEC-Readme.txt" [0220.858] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\f0dbec-readme.txt")) returned 0xffffffff [0220.858] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.099] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xa83fbfc, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xa83fbfc*=0x70c, lpOverlapped=0x0) returned 1 [0221.101] CloseHandle (hObject=0x1b48) returned 1 [0221.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4b00) returned 1 [0221.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81efd38) returned 1 Thread: id = 6802 os_tid = 0x1a0c [0203.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif")) returned 0x20 [0212.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.380] GetLastError () returned 0x5 [0212.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e358c0) returned 1 Thread: id = 6803 os_tid = 0x1a10 [0203.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20 [0212.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.379] GetLastError () returned 0x5 [0212.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e351b8) returned 1 Thread: id = 6804 os_tid = 0x1a14 [0203.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20 [0206.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.378] GetLastError () returned 0x5 [0212.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34088) returned 1 Thread: id = 6805 os_tid = 0x1a18 [0203.290] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json")) returned 0x2020 [0211.138] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0217.040] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ea4 [0217.041] GetFileSizeEx (in: hFile=0x1ea4, lpFileSize=0xee0fb48 | out: lpFileSize=0xee0fb48*=669) returned 1 [0217.041] SetFilePointerEx (in: hFile=0x1ea4, liDistanceToMove=0x299, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.041] ReadFile (in: hFile=0x1ea4, lpBuffer=0xee0fb54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xee0fb30, lpOverlapped=0x0 | out: lpBuffer=0xee0fb54*, lpNumberOfBytesRead=0xee0fb30*=0x4, lpOverlapped=0x0) returned 1 [0217.044] SetFilePointerEx (in: hFile=0x1ea4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49da8 [0217.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0217.045] NtQuerySystemTime (in: CurrentTime=0xee0fad0 | out: CurrentTime=0xee0fad0*=132471540847680000) returned 0x0 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x4202cff1 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x84e53cf [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x2a9b0473 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x26442175 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x2372533d [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x6fa80d93 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x42a06ccc [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x24a01c82 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x5a518c59 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x6f324c1d [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x40263690 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x5bcd60c8 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x46e7f6b8 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x7afd51e0 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x3f42c2e9 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x538a6754 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x7f0b360e [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x7727fb7c [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x5a6a9d63 [0217.045] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x4b2333ca [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x479a72d9 [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x11969e59 [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x124f14fd [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x6c31a5f3 [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x739620d [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x7c88189b [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x42197b4a [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x4e26714a [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x4368dd7f [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x622917cd [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x5cb15d89 [0217.046] RtlRandomEx (in: Seed=0xee0fac8 | out: Seed=0xee0fac8) returned 0x7275ad76 [0217.059] ReadFile (in: hFile=0x1ea4, lpBuffer=0x81824d8, nNumberOfBytesToRead=0x29d, lpNumberOfBytesRead=0xee0fac4, lpOverlapped=0x0 | out: lpBuffer=0x81824d8*, lpNumberOfBytesRead=0xee0fac4*=0x29d, lpOverlapped=0x0) returned 1 [0217.059] SetFilePointerEx (in: hFile=0x1ea4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.059] WriteFile (in: hFile=0x1ea4, lpBuffer=0x148c6060*, nNumberOfBytesToWrite=0x29d, lpNumberOfBytesWritten=0xee0fac8, lpOverlapped=0x0 | out: lpBuffer=0x148c6060*, lpNumberOfBytesWritten=0xee0fac8*=0x29d, lpOverlapped=0x0) returned 1 [0220.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0220.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0220.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0220.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148c6060) returned 1 [0220.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81824d8) returned 1 [0220.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84029a8) returned 1 [0220.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e62a8) returned 1 [0220.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6ff78 [0220.292] SetFilePointerEx (in: hFile=0x1ea4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.292] WriteFile (in: hFile=0x1ea4, lpBuffer=0x81d6020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xee0fb3c, lpOverlapped=0x0 | out: lpBuffer=0x81d6020*, lpNumberOfBytesWritten=0xee0fb3c*=0x10c, lpOverlapped=0x0) returned 1 [0220.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6020) returned 1 [0220.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fbb8) returned 1 [0220.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0220.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ff78) returned 1 [0220.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0220.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49da8) returned 1 [0220.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5e0) returned 1 [0220.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4abb8) returned 1 [0220.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x81f3c60 [0220.450] wcscpy (in: _Dest=0x81f3c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" [0220.450] wcscat (in: _Dest=0x81f3c60, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.f0dbec" [0220.450] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.f0dbec", NtPathName=0xee0fac0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e177a0 [0220.692] FlushFileBuffers (hFile=0x1ea4) returned 1 [0220.697] CloseHandle (hObject=0x1ea4) returned 1 [0220.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f49c8 [0220.853] wcscpy (in: _Dest=0x81f49c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" [0220.853] wcscat (in: _Dest=0x81f49c8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\F0DBEC-Readme.txt" [0220.853] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\f0dbec-readme.txt")) returned 0xffffffff [0220.853] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.096] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xee0fae4, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xee0fae4*=0x70c, lpOverlapped=0x0) returned 1 [0221.098] CloseHandle (hObject=0x1b48) returned 1 [0221.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f49c8) returned 1 [0221.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84014c0) returned 1 Thread: id = 6806 os_tid = 0x1a1c [0203.290] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json")) returned 0x2020 [0211.138] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0217.019] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ea8 [0217.020] GetFileSizeEx (in: hFile=0x1ea8, lpFileSize=0xe5ff7e8 | out: lpFileSize=0xe5ff7e8*=686) returned 1 [0217.020] SetFilePointerEx (in: hFile=0x1ea8, liDistanceToMove=0x2aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.020] ReadFile (in: hFile=0x1ea8, lpBuffer=0xe5ff7f4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe5ff7d0, lpOverlapped=0x0 | out: lpBuffer=0xe5ff7f4*, lpNumberOfBytesRead=0xe5ff7d0*=0x4, lpOverlapped=0x0) returned 1 [0217.023] SetFilePointerEx (in: hFile=0x1ea8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a848 [0217.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49da8 [0217.024] NtQuerySystemTime (in: CurrentTime=0xe5ff770 | out: CurrentTime=0xe5ff770*=132471540847368000) returned 0x0 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x5254a33f [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x45140520 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x47d9706b [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x39896bde [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x262f0b5e [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x16f238f8 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x72b61833 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x13b9a4b6 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x7c75af91 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x4b3e2315 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x1b81b1c4 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x3c022468 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x113632b6 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x4c7ad3e2 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x467589ed [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x5e38048b [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x7859e452 [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x6ed46b4a [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x56fdb78d [0217.024] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x3817d348 [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x428fd0b4 [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x6070743f [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x188d9062 [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x4a306ef5 [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x37865b85 [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x2497a37a [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x31a4c2c2 [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x792681f6 [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x305d12de [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x40af948b [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0x132ac042 [0217.025] RtlRandomEx (in: Seed=0xe5ff768 | out: Seed=0xe5ff768) returned 0xe954425 [0217.039] ReadFile (in: hFile=0x1ea8, lpBuffer=0x817acc8, nNumberOfBytesToRead=0x2ae, lpNumberOfBytesRead=0xe5ff764, lpOverlapped=0x0 | out: lpBuffer=0x817acc8*, lpNumberOfBytesRead=0xe5ff764*=0x2ae, lpOverlapped=0x0) returned 1 [0217.039] SetFilePointerEx (in: hFile=0x1ea8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.039] WriteFile (in: hFile=0x1ea8, lpBuffer=0x817e8d0*, nNumberOfBytesToWrite=0x2ae, lpNumberOfBytesWritten=0xe5ff768, lpOverlapped=0x0 | out: lpBuffer=0x817e8d0*, lpNumberOfBytesWritten=0xe5ff768*=0x2ae, lpOverlapped=0x0) returned 1 [0220.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0220.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0220.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0220.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817e8d0) returned 1 [0220.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x817acc8) returned 1 [0220.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403740) returned 1 [0220.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6e30) returned 1 [0220.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6fac8 [0220.236] SetFilePointerEx (in: hFile=0x1ea8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.236] WriteFile (in: hFile=0x1ea8, lpBuffer=0x81d5df0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe5ff7dc, lpOverlapped=0x0 | out: lpBuffer=0x81d5df0*, lpNumberOfBytesWritten=0xe5ff7dc*=0x10c, lpOverlapped=0x0) returned 1 [0220.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5df0) returned 1 [0220.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f798) returned 1 [0220.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0220.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fac8) returned 1 [0220.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0220.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a848) returned 1 [0220.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd10) returned 1 [0220.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ceb8) returned 1 [0220.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ef8728 [0220.426] wcscpy (in: _Dest=0x3ef8728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" [0220.426] wcscat (in: _Dest=0x3ef8728, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.f0dbec" [0220.426] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.f0dbec", NtPathName=0xe5ff760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e178f8 [0220.637] FlushFileBuffers (hFile=0x1ea8) returned 1 [0220.640] CloseHandle (hObject=0x1ea8) returned 1 [0220.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5118 [0220.754] wcscpy (in: _Dest=0x81f5118, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" [0220.754] wcscat (in: _Dest=0x81f5118, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\F0DBEC-Readme.txt" [0220.754] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\f0dbec-readme.txt")) returned 0xffffffff [0220.754] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.060] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xe5ff784, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xe5ff784*=0x70c, lpOverlapped=0x0) returned 1 [0221.062] CloseHandle (hObject=0x1b48) returned 1 [0221.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5118) returned 1 [0221.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401838) returned 1 Thread: id = 6807 os_tid = 0x1a20 [0203.291] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json")) returned 0x2020 [0211.137] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0216.995] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14f8 [0216.996] GetFileSizeEx (in: hFile=0x14f8, lpFileSize=0xeeff880 | out: lpFileSize=0xeeff880*=699) returned 1 [0216.996] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x2b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.996] ReadFile (in: hFile=0x14f8, lpBuffer=0xeeff88c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xeeff868, lpOverlapped=0x0 | out: lpBuffer=0xeeff88c*, lpNumberOfBytesRead=0xeeff868*=0x4, lpOverlapped=0x0) returned 1 [0216.999] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0216.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5f8 [0216.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a848 [0216.999] NtQuerySystemTime (in: CurrentTime=0xeeff808 | out: CurrentTime=0xeeff808*=132471540847212000) returned 0x0 [0216.999] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x11bc45b8 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x6a363e23 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x7e276ba9 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x517e677f [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x2b7efe78 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x31605e18 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x6ca6a954 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x54cd7866 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x1f795f55 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0xdf2ff90 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x51d418ff [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x5229ca7f [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x74ad964c [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x594df203 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x20763ff7 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x48142d5b [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x3831ad10 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x559cabdf [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x7ce44d87 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x227c89b8 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x34f31cf2 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x54bc8086 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x28400e4b [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x73a78df4 [0217.000] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x5d65fa06 [0217.001] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x583146a3 [0217.001] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0xb3f0279 [0217.001] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x64a13250 [0217.001] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x1aea928e [0217.001] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x3b2acb1f [0217.001] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x3f811e2c [0217.001] RtlRandomEx (in: Seed=0xeeff800 | out: Seed=0xeeff800) returned 0x39092dd6 [0217.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b810) returned 1 [0217.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81734b8 [0217.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x81770c0 [0217.019] ReadFile (in: hFile=0x14f8, lpBuffer=0x81734b8, nNumberOfBytesToRead=0x2bb, lpNumberOfBytesRead=0xeeff7fc, lpOverlapped=0x0 | out: lpBuffer=0x81734b8*, lpNumberOfBytesRead=0xeeff7fc*=0x2bb, lpOverlapped=0x0) returned 1 [0217.019] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.019] WriteFile (in: hFile=0x14f8, lpBuffer=0x81770c0*, nNumberOfBytesToWrite=0x2bb, lpNumberOfBytesWritten=0xeeff800, lpOverlapped=0x0 | out: lpBuffer=0x81770c0*, lpNumberOfBytesWritten=0xeeff800*=0x2bb, lpOverlapped=0x0) returned 1 [0220.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0220.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0220.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0220.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81770c0) returned 1 [0220.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81734b8) returned 1 [0220.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403650) returned 1 [0220.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6a40) returned 1 [0220.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e6f408 [0220.244] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.244] WriteFile (in: hFile=0x14f8, lpBuffer=0x81d5f08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xeeff874, lpOverlapped=0x0 | out: lpBuffer=0x81d5f08*, lpNumberOfBytesWritten=0xeeff874*=0x10c, lpOverlapped=0x0) returned 1 [0220.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5f08) returned 1 [0220.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fdc8) returned 1 [0220.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0220.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6f408) returned 1 [0220.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0220.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5f8) returned 1 [0220.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c058) returned 1 [0220.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0220.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3dd8b80 [0220.431] wcscpy (in: _Dest=0x3dd8b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" [0220.431] wcscat (in: _Dest=0x3dd8b80, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.f0dbec" [0220.431] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.f0dbec", NtPathName=0xeeff7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16e38 [0220.651] FlushFileBuffers (hFile=0x14f8) returned 1 [0220.654] CloseHandle (hObject=0x14f8) returned 1 [0220.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f5250 [0220.783] wcscpy (in: _Dest=0x81f5250, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" [0220.783] wcscat (in: _Dest=0x81f5250, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\F0DBEC-Readme.txt" [0220.783] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\f0dbec-readme.txt")) returned 0xffffffff [0220.783] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.066] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xeeff81c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xeeff81c*=0x70c, lpOverlapped=0x0) returned 1 [0221.067] CloseHandle (hObject=0x1b48) returned 1 [0221.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f5250) returned 1 [0221.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8401148) returned 1 Thread: id = 6808 os_tid = 0x1a24 [0203.291] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json")) returned 0x2020 [0211.136] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", dwFileAttributes=0x20) returned 1 [0216.975] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1174 [0216.975] GetFileSizeEx (in: hFile=0x1174, lpFileSize=0x94bfdb0 | out: lpFileSize=0x94bfdb0*=644) returned 1 [0216.975] SetFilePointerEx (in: hFile=0x1174, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.975] ReadFile (in: hFile=0x1174, lpBuffer=0x94bfdbc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94bfd98, lpOverlapped=0x0 | out: lpBuffer=0x94bfdbc*, lpNumberOfBytesRead=0x94bfd98*=0x4, lpOverlapped=0x0) returned 1 [0216.978] SetFilePointerEx (in: hFile=0x1174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0216.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0216.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5f8 [0216.979] NtQuerySystemTime (in: CurrentTime=0x94bfd38 | out: CurrentTime=0x94bfd38*=132471540846900000) returned 0x0 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x6cbdfe9a [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x4d500b01 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x3884fb81 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0xabef64c [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x6e9bef37 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x1f3050fb [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x451cb8ca [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x15928eaa [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x51ec8985 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x28d37682 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x458c3cb9 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x40c318d1 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x51c4fcf4 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x1974ac21 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x5aa418e0 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x6a37b27b [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x72484108 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x26e37ab5 [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x663f647f [0216.979] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x106fa787 [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x730dafaf [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x4feaeac0 [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x44015f04 [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x76eb6d23 [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x9adf1ef [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x7723ec77 [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x37a9de00 [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x213a6dd0 [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x44e8074d [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x4577b9b8 [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x6a650aa [0216.980] RtlRandomEx (in: Seed=0x94bfd30 | out: Seed=0x94bfd30) returned 0x7d5ac6af [0216.994] ReadFile (in: hFile=0x1174, lpBuffer=0x816bca8, nNumberOfBytesToRead=0x284, lpNumberOfBytesRead=0x94bfd2c, lpOverlapped=0x0 | out: lpBuffer=0x816bca8*, lpNumberOfBytesRead=0x94bfd2c*=0x284, lpOverlapped=0x0) returned 1 [0216.995] SetFilePointerEx (in: hFile=0x1174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.995] WriteFile (in: hFile=0x1174, lpBuffer=0x816f8b0*, nNumberOfBytesToWrite=0x284, lpNumberOfBytesWritten=0x94bfd30, lpOverlapped=0x0 | out: lpBuffer=0x816f8b0*, lpNumberOfBytesWritten=0x94bfd30*=0x284, lpOverlapped=0x0) returned 1 [0220.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0220.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0220.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0220.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816f8b0) returned 1 [0220.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x816bca8) returned 1 [0220.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84035d8) returned 1 [0220.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7268) returned 1 [0220.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e695a0 [0220.096] SetFilePointerEx (in: hFile=0x1174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.096] WriteFile (in: hFile=0x1174, lpBuffer=0x81d5bc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x94bfda4, lpOverlapped=0x0 | out: lpBuffer=0x81d5bc0*, lpNumberOfBytesWritten=0x94bfda4*=0x10c, lpOverlapped=0x0) returned 1 [0220.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5bc0) returned 1 [0220.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695d0) returned 1 [0220.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0220.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e695a0) returned 1 [0220.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0220.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0220.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49880) returned 1 [0220.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4acd0) returned 1 [0220.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x81f39f0 [0220.446] wcscpy (in: _Dest=0x81f39f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" [0220.446] wcscat (in: _Dest=0x81f39f0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.f0dbec" [0220.446] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.f0dbec", NtPathName=0x94bfd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e16f90 [0220.684] FlushFileBuffers (hFile=0x1174) returned 1 [0220.692] CloseHandle (hObject=0x1174) returned 1 [0220.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f44e8 [0220.848] wcscpy (in: _Dest=0x81f44e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" [0220.848] wcscat (in: _Dest=0x81f44e8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\F0DBEC-Readme.txt" [0220.848] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\f0dbec-readme.txt")) returned 0xffffffff [0220.848] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0221.093] WriteFile (in: hFile=0x1b48, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x94bfd4c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x94bfd4c*=0x70c, lpOverlapped=0x0) returned 1 [0221.095] CloseHandle (hObject=0x1b48) returned 1 [0221.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f44e8) returned 1 [0221.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef770) returned 1 Thread: id = 6809 os_tid = 0x1a28 [0203.292] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json")) returned 0x2020 [0211.136] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0216.954] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1740 [0216.955] GetFileSizeEx (in: hFile=0x1740, lpFileSize=0xec8fdc8 | out: lpFileSize=0xec8fdc8*=642) returned 1 [0216.955] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.955] ReadFile (in: hFile=0x1740, lpBuffer=0xec8fdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xec8fdb0, lpOverlapped=0x0 | out: lpBuffer=0xec8fdd4*, lpNumberOfBytesRead=0xec8fdb0*=0x4, lpOverlapped=0x0) returned 1 [0216.958] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0216.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd28 [0216.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0216.958] NtQuerySystemTime (in: CurrentTime=0xec8fd50 | out: CurrentTime=0xec8fd50*=132471540846744000) returned 0x0 [0216.958] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x7a3c8e15 [0216.958] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x2a09c097 [0216.958] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x10f22414 [0216.958] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x7ae0ef0c [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x4ef97659 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0xd3da365 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x6d77afe7 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x3bbf253c [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x5c60d48a [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x5a498b10 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x67be0238 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x38477bc [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x58e247d6 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x5bd9aeb2 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x47a50a1d [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x49774bc5 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x71121b4d [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x58263843 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x6caa7615 [0216.959] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x62f7fe50 [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x3d5e545e [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x1408a7ec [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x6d56812a [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x48c1ccae [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x322160d [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x604bc3d2 [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x571760c1 [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x68bae836 [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x4c890841 [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x4bcb6e5b [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x61eb55c7 [0216.960] RtlRandomEx (in: Seed=0xec8fd48 | out: Seed=0xec8fd48) returned 0x41fa9ed8 [0216.974] ReadFile (in: hFile=0x1740, lpBuffer=0x8164498, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0xec8fd44, lpOverlapped=0x0 | out: lpBuffer=0x8164498*, lpNumberOfBytesRead=0xec8fd44*=0x282, lpOverlapped=0x0) returned 1 [0216.974] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.974] WriteFile (in: hFile=0x1740, lpBuffer=0x81680a0*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0xec8fd48, lpOverlapped=0x0 | out: lpBuffer=0x81680a0*, lpNumberOfBytesWritten=0xec8fd48*=0x282, lpOverlapped=0x0) returned 1 [0220.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0220.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0220.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0220.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81680a0) returned 1 [0220.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8164498) returned 1 [0220.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403560) returned 1 [0220.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e56d8) returned 1 [0220.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69660 [0220.098] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.098] WriteFile (in: hFile=0x1740, lpBuffer=0x81d5cd8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xec8fdbc, lpOverlapped=0x0 | out: lpBuffer=0x81d5cd8*, lpNumberOfBytesWritten=0xec8fdbc*=0x10c, lpOverlapped=0x0) returned 1 [0220.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5cd8) returned 1 [0220.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69690) returned 1 [0220.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0220.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69660) returned 1 [0220.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0220.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd28) returned 1 [0220.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0220.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0220.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x81f3b28 [0220.448] wcscpy (in: _Dest=0x81f3b28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" [0220.448] wcscat (in: _Dest=0x81f3b28, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.f0dbec" [0220.448] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.f0dbec", NtPathName=0xec8fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e17240 [0220.876] FlushFileBuffers (hFile=0x1740) returned 1 [0221.113] CloseHandle (hObject=0x1740) returned 1 [0221.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403cd8 [0221.115] wcscpy (in: _Dest=0x8403cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" [0221.115] wcscat (in: _Dest=0x8403cd8, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\F0DBEC-Readme.txt" [0221.115] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\f0dbec-readme.txt")) returned 0xffffffff [0221.116] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1740 [0221.116] WriteFile (in: hFile=0x1740, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xec8fd64, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xec8fd64*=0x70c, lpOverlapped=0x0) returned 1 [0221.118] CloseHandle (hObject=0x1740) returned 1 [0221.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403cd8) returned 1 [0221.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ef648) returned 1 Thread: id = 6810 os_tid = 0x1a2c [0203.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss")) returned 0x20 [0203.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS", dwFileAttributes=0x20) returned 0 [0203.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.293] GetLastError () returned 0x5 [0203.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS", dwFileAttributes=0x20) returned 0 [0203.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce08) returned 1 Thread: id = 6811 os_tid = 0x1a30 [0203.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss")) returned 0x20 [0203.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS", dwFileAttributes=0x20) returned 0 [0203.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.295] GetLastError () returned 0x5 [0203.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS", dwFileAttributes=0x20) returned 0 [0203.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc728) returned 1 Thread: id = 6812 os_tid = 0x1a34 [0203.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss")) returned 0x20 [0203.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS", dwFileAttributes=0x20) returned 0 [0203.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.297] GetLastError () returned 0x5 [0203.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS", dwFileAttributes=0x20) returned 0 [0203.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbbe8) returned 1 Thread: id = 6813 os_tid = 0x1a38 [0203.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst")) returned 0x20 [0203.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST", dwFileAttributes=0x20) returned 0 [0203.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.299] GetLastError () returned 0x5 [0203.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST", dwFileAttributes=0x20) returned 0 [0203.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbaa8) returned 1 Thread: id = 6814 os_tid = 0x1a3c [0203.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss")) returned 0x20 [0210.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS", dwFileAttributes=0x20) returned 0 [0210.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.003] GetLastError () returned 0x5 [0210.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS", dwFileAttributes=0x20) returned 0 [0210.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dca48) returned 1 Thread: id = 6815 os_tid = 0x1a40 [0203.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst")) returned 0x20 [0209.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST", dwFileAttributes=0x20) returned 0 [0209.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.995] GetLastError () returned 0x5 [0209.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST", dwFileAttributes=0x20) returned 0 [0209.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7c8) returned 1 Thread: id = 6816 os_tid = 0x1a44 [0203.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss")) returned 0x20 [0209.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS", dwFileAttributes=0x20) returned 0 [0209.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.964] GetLastError () returned 0x5 [0209.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS", dwFileAttributes=0x20) returned 0 [0209.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc908) returned 1 Thread: id = 6817 os_tid = 0x1a48 [0203.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss")) returned 0x20 [0209.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS", dwFileAttributes=0x20) returned 0 [0209.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.993] GetLastError () returned 0x5 [0209.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS", dwFileAttributes=0x20) returned 0 [0209.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 Thread: id = 6818 os_tid = 0x1a54 [0203.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml")) returned 0x20 [0209.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML", dwFileAttributes=0x20) returned 0 [0209.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.991] GetLastError () returned 0x5 [0209.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML", dwFileAttributes=0x20) returned 0 [0209.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 Thread: id = 6819 os_tid = 0x1a58 [0203.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss")) returned 0x20 [0209.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS", dwFileAttributes=0x20) returned 0 [0209.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.989] GetLastError () returned 0x5 [0209.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS", dwFileAttributes=0x20) returned 0 [0209.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcae8) returned 1 Thread: id = 6820 os_tid = 0x1a5c [0203.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst")) returned 0x20 [0209.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST", dwFileAttributes=0x20) returned 0 [0209.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.987] GetLastError () returned 0x5 [0209.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST", dwFileAttributes=0x20) returned 0 [0209.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc688) returned 1 Thread: id = 6821 os_tid = 0x1a64 [0203.304] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0211.140] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0217.080] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19a0 [0217.080] GetFileSizeEx (in: hFile=0x19a0, lpFileSize=0xf54fad8 | out: lpFileSize=0xf54fad8*=595) returned 1 [0217.081] SetFilePointerEx (in: hFile=0x19a0, liDistanceToMove=0x24f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.081] ReadFile (in: hFile=0x19a0, lpBuffer=0xf54fae4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf54fac0, lpOverlapped=0x0 | out: lpBuffer=0xf54fae4*, lpNumberOfBytesRead=0xf54fac0*=0x4, lpOverlapped=0x0) returned 1 [0217.084] SetFilePointerEx (in: hFile=0x19a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0217.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b360 [0217.084] NtQuerySystemTime (in: CurrentTime=0xf54fa60 | out: CurrentTime=0xf54fa60*=132471540847992000) returned 0x0 [0217.084] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x5d338a38 [0217.084] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x5128b5ff [0217.084] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x243acc53 [0217.084] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x29e4471f [0217.084] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x573029ca [0217.084] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x32c3309d [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x191c534c [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x16a3664 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x2480eec1 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x1dd02d3 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x4db841fe [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x162b1b3 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x8aa4f55 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x14d76284 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x694c1cda [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x5a33674a [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x507e2e00 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x7d49a06e [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x2646ed51 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x3aac3af2 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x184b691e [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x35cbe56e [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x26d43897 [0217.085] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x18206e19 [0217.086] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x51a9403f [0217.086] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x5a303df2 [0217.086] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x7d50299a [0217.086] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x4f03500c [0217.086] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x250e6b28 [0217.086] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x14c0885 [0217.086] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x76a92883 [0217.086] RtlRandomEx (in: Seed=0xf54fa58 | out: Seed=0xf54fa58) returned 0x6eef362c [0217.100] ReadFile (in: hFile=0x19a0, lpBuffer=0x148d1478, nNumberOfBytesToRead=0x253, lpNumberOfBytesRead=0xf54fa54, lpOverlapped=0x0 | out: lpBuffer=0x148d1478*, lpNumberOfBytesRead=0xf54fa54*=0x253, lpOverlapped=0x0) returned 1 [0217.100] SetFilePointerEx (in: hFile=0x19a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.100] WriteFile (in: hFile=0x19a0, lpBuffer=0x148d5080*, nNumberOfBytesToWrite=0x253, lpNumberOfBytesWritten=0xf54fa58, lpOverlapped=0x0 | out: lpBuffer=0x148d5080*, lpNumberOfBytesWritten=0xf54fa58*=0x253, lpOverlapped=0x0) returned 1 [0221.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0221.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0221.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148d5080) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148d1478) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403218) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e5eb8) returned 1 [0221.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0221.786] SetFilePointerEx (in: hFile=0x19a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.786] WriteFile (in: hFile=0x19a0, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf54facc, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0xf54facc*=0x10c, lpOverlapped=0x0) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0221.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0221.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b888) returned 1 [0221.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cee0) returned 1 [0221.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ef8c58 [0221.790] wcscpy (in: _Dest=0x3ef8c58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" [0221.790] wcscat (in: _Dest=0x3ef8c58, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.f0dbec" [0221.790] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.f0dbec", NtPathName=0xf54fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0221.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e18260 [0221.794] FlushFileBuffers (hFile=0x19a0) returned 1 [0221.795] CloseHandle (hObject=0x19a0) returned 1 [0221.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x8403930 [0221.796] wcscpy (in: _Dest=0x8403930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" [0221.796] wcscat (in: _Dest=0x8403930, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" [0221.796] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\f0dbec-readme.txt")) returned 0xffffffff [0221.796] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19a0 [0221.798] WriteFile (in: hFile=0x19a0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0xf54fa74, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0xf54fa74*=0x70c, lpOverlapped=0x0) returned 1 [0221.800] CloseHandle (hObject=0x19a0) returned 1 [0221.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403930) returned 1 [0221.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403a68) returned 1 Thread: id = 6822 os_tid = 0x1a6c [0203.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss")) returned 0x20 [0209.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS", dwFileAttributes=0x20) returned 0 [0209.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.966] GetLastError () returned 0x5 [0209.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS", dwFileAttributes=0x20) returned 0 [0209.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc868) returned 1 Thread: id = 6823 os_tid = 0x1a70 [0203.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst")) returned 0x20 [0209.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST", dwFileAttributes=0x20) returned 0 [0209.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.997] GetLastError () returned 0x5 [0209.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST", dwFileAttributes=0x20) returned 0 [0209.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcd68) returned 1 Thread: id = 6824 os_tid = 0x1a7c [0203.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss")) returned 0x20 [0209.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS", dwFileAttributes=0x20) returned 0 [0209.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.985] GetLastError () returned 0x5 [0209.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS", dwFileAttributes=0x20) returned 0 [0209.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbf08) returned 1 Thread: id = 6825 os_tid = 0x15cc [0203.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss")) returned 0x20 [0209.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS", dwFileAttributes=0x20) returned 0 [0209.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.977] GetLastError () returned 0x5 [0209.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS", dwFileAttributes=0x20) returned 0 [0209.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcb88) returned 1 Thread: id = 6826 os_tid = 0x1a80 [0203.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss")) returned 0x20 [0209.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS", dwFileAttributes=0x20) returned 0 [0209.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.975] GetLastError () returned 0x5 [0209.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS", dwFileAttributes=0x20) returned 0 [0209.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcc28) returned 1 Thread: id = 6827 os_tid = 0x1a84 [0203.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss")) returned 0x20 [0209.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS", dwFileAttributes=0x20) returned 0 [0209.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.973] GetLastError () returned 0x5 [0209.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS", dwFileAttributes=0x20) returned 0 [0209.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc548) returned 1 Thread: id = 6828 os_tid = 0x1b6c [0203.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss")) returned 0x20 [0209.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS", dwFileAttributes=0x20) returned 0 [0209.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.970] GetLastError () returned 0x5 [0209.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS", dwFileAttributes=0x20) returned 0 [0209.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc368) returned 1 Thread: id = 6829 os_tid = 0x1b70 [0203.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst")) returned 0x20 [0209.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST", dwFileAttributes=0x20) returned 0 [0209.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.969] GetLastError () returned 0x5 [0209.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST", dwFileAttributes=0x20) returned 0 [0209.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc4a8) returned 1 Thread: id = 6830 os_tid = 0x1b74 [0203.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss")) returned 0x20 [0209.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS", dwFileAttributes=0x20) returned 0 [0209.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.999] GetLastError () returned 0x5 [0209.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS", dwFileAttributes=0x20) returned 0 [0209.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc408) returned 1 Thread: id = 6831 os_tid = 0x1b78 [0204.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst")) returned 0x20 [0209.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST", dwFileAttributes=0x20) returned 0 [0209.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.967] GetLastError () returned 0x5 [0209.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST", dwFileAttributes=0x20) returned 0 [0209.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc2c8) returned 1 Thread: id = 6832 os_tid = 0x1b7c [0204.362] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json")) returned 0x2020 [0211.141] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0217.100] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2a60 [0217.101] GetFileSizeEx (in: hFile=0x2a60, lpFileSize=0x880f868 | out: lpFileSize=0x880f868*=778) returned 1 [0217.101] SetFilePointerEx (in: hFile=0x2a60, liDistanceToMove=0x306, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.101] ReadFile (in: hFile=0x2a60, lpBuffer=0x880f874, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x880f850, lpOverlapped=0x0 | out: lpBuffer=0x880f874*, lpNumberOfBytesRead=0x880f850*=0x4, lpOverlapped=0x0) returned 1 [0217.104] SetFilePointerEx (in: hFile=0x2a60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b360 [0217.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49ad8 [0217.104] NtQuerySystemTime (in: CurrentTime=0x880f7f0 | out: CurrentTime=0x880f7f0*=132471540848148000) returned 0x0 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x6e94cf53 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x4ab29ba4 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x3d94458f [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x31c4a1b4 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x2e174af4 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x82fa13f [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x50fddd3f [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x4bb1b3e7 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x26a4e19 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x107ce201 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x72fcfc88 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x4ce7b517 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x2f2ff663 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x7d126b5 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x3ec7a6b7 [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x3aa46b4e [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x542cec4a [0217.105] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x30060a4a [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x421b57b4 [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x5c4817cc [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x25817498 [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x2862bc83 [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x2f2871bc [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x38b3d9bf [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x57381baf [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x63760af2 [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x64b50123 [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0xcba144a [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x398bc45 [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x2ee535f [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x2f9e0764 [0217.106] RtlRandomEx (in: Seed=0x880f7e8 | out: Seed=0x880f7e8) returned 0x74af0436 [0217.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b810) returned 1 [0217.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148d8c88 [0217.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148dc890 [0217.119] ReadFile (in: hFile=0x2a60, lpBuffer=0x148d8c88, nNumberOfBytesToRead=0x30a, lpNumberOfBytesRead=0x880f7e4, lpOverlapped=0x0 | out: lpBuffer=0x148d8c88*, lpNumberOfBytesRead=0x880f7e4*=0x30a, lpOverlapped=0x0) returned 1 [0217.120] SetFilePointerEx (in: hFile=0x2a60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.120] WriteFile (in: hFile=0x2a60, lpBuffer=0x148dc890*, nNumberOfBytesToWrite=0x30a, lpNumberOfBytesWritten=0x880f7e8, lpOverlapped=0x0 | out: lpBuffer=0x148dc890*, lpNumberOfBytesWritten=0x880f7e8*=0x30a, lpOverlapped=0x0) returned 1 [0220.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0220.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0220.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0220.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148dc890) returned 1 [0220.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148d8c88) returned 1 [0220.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402a98) returned 1 [0220.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e63c8) returned 1 [0220.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e70188 [0220.300] SetFilePointerEx (in: hFile=0x2a60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.300] WriteFile (in: hFile=0x2a60, lpBuffer=0x81d6250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x880f85c, lpOverlapped=0x0 | out: lpBuffer=0x81d6250*, lpNumberOfBytesWritten=0x880f85c*=0x10c, lpOverlapped=0x0) returned 1 [0220.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6250) returned 1 [0220.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6fa38) returned 1 [0220.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0220.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e70188) returned 1 [0220.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0220.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b360) returned 1 [0220.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49c18) returned 1 [0220.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b310) returned 1 [0220.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x81f3ed0 [0220.456] wcscpy (in: _Dest=0x81f3ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" [0220.456] wcscat (in: _Dest=0x81f3ed0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.f0dbec" [0220.456] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.f0dbec", NtPathName=0x880f7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0220.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e18260 [0220.706] FlushFileBuffers (hFile=0x2a60) returned 1 [0220.709] CloseHandle (hObject=0x2a60) returned 1 [0220.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x81f4c38 [0220.871] wcscpy (in: _Dest=0x81f4c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" [0220.871] wcscat (in: _Dest=0x81f4c38, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\F0DBEC-Readme.txt" [0220.871] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\f0dbec-readme.txt")) returned 0xffffffff [0220.871] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14a0 [0220.895] WriteFile (in: hFile=0x14a0, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x880f804, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x880f804*=0x70c, lpOverlapped=0x0) returned 1 [0220.906] CloseHandle (hObject=0x14a0) returned 1 [0220.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f4c38) returned 1 [0220.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8400ca8) returned 1 Thread: id = 6833 os_tid = 0x1bb8 [0204.362] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0211.141] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0217.120] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1464 [0217.121] GetFileSizeEx (in: hFile=0x1464, lpFileSize=0x8c2fce0 | out: lpFileSize=0x8c2fce0*=640) returned 1 [0217.121] SetFilePointerEx (in: hFile=0x1464, liDistanceToMove=0x27c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.121] ReadFile (in: hFile=0x1464, lpBuffer=0x8c2fcec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c2fcc8, lpOverlapped=0x0 | out: lpBuffer=0x8c2fcec*, lpNumberOfBytesRead=0x8c2fcc8*=0x4, lpOverlapped=0x0) returned 1 [0217.124] SetFilePointerEx (in: hFile=0x1464, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49ad8 [0217.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0217.125] NtQuerySystemTime (in: CurrentTime=0x8c2fc68 | out: CurrentTime=0x8c2fc68*=132471540848460000) returned 0x0 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x557ae140 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x4ab0d7cf [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x281b267d [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x688a4822 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x64fc76ee [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x1f62575 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x4142e1f0 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x30d2b7f6 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x4a6cda8f [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x14da1806 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x195c409f [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x7df71ad8 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x38f16ca [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x5e0e0d69 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x12d78a9f [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x24f515c6 [0217.125] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x66c094c4 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x18a5f861 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x633d1fca [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x48ce9f29 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x6ed60c99 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x8db1279 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x2f280085 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x14342946 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x4f868a33 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x4c93cb63 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x387be290 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x5fe6982c [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x2ca115 [0217.126] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0xeedde4 [0217.127] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x7b258da4 [0217.127] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x50527a3f [0217.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b810) returned 1 [0217.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148e0498 [0217.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x148e40a0 [0217.141] ReadFile (in: hFile=0x1464, lpBuffer=0x148e0498, nNumberOfBytesToRead=0x280, lpNumberOfBytesRead=0x8c2fc5c, lpOverlapped=0x0 | out: lpBuffer=0x148e0498*, lpNumberOfBytesRead=0x8c2fc5c*=0x280, lpOverlapped=0x0) returned 1 [0217.141] SetFilePointerEx (in: hFile=0x1464, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.141] WriteFile (in: hFile=0x1464, lpBuffer=0x148e40a0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x8c2fc60, lpOverlapped=0x0 | out: lpBuffer=0x148e40a0*, lpNumberOfBytesWritten=0x8c2fc60*=0x280, lpOverlapped=0x0) returned 1 [0221.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cee0 [0221.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b888 [0221.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b888) returned 1 [0221.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148e40a0) returned 1 [0221.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148e0498) returned 1 [0221.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402e58) returned 1 [0221.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6068) returned 1 [0221.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0221.804] SetFilePointerEx (in: hFile=0x1464, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.804] WriteFile (in: hFile=0x1464, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8c2fcd4, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0x8c2fcd4*=0x10c, lpOverlapped=0x0) returned 1 [0221.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0221.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0221.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b888) returned 1 [0221.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0221.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cee0) returned 1 [0221.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0221.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0221.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0221.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ef8c58 [0221.824] wcscpy (in: _Dest=0x3ef8c58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" [0221.824] wcscat (in: _Dest=0x3ef8c58, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.f0dbec" [0221.824] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.f0dbec", NtPathName=0x8c2fc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0221.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e18260 [0221.828] FlushFileBuffers (hFile=0x1464) returned 1 [0221.832] CloseHandle (hObject=0x1464) returned 1 [0221.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x8403a68 [0221.833] wcscpy (in: _Dest=0x8403a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" [0221.833] wcscat (in: _Dest=0x8403a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" [0221.833] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\f0dbec-readme.txt")) returned 0xffffffff [0221.833] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1464 [0221.834] WriteFile (in: hFile=0x1464, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x8c2fc7c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x8c2fc7c*=0x70c, lpOverlapped=0x0) returned 1 [0221.836] CloseHandle (hObject=0x1464) returned 1 [0221.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403a68) returned 1 [0221.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403ba0) returned 1 Thread: id = 6834 os_tid = 0x1bbc [0204.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x20 [0204.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF", dwFileAttributes=0x20) returned 0 [0204.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.365] GetLastError () returned 0x5 [0204.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF", dwFileAttributes=0x20) returned 0 [0204.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 6835 os_tid = 0x1bc8 [0204.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x20 [0204.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF", dwFileAttributes=0x20) returned 0 [0204.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.367] GetLastError () returned 0x5 [0204.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF", dwFileAttributes=0x20) returned 0 [0204.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 6836 os_tid = 0x1bd0 [0204.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x20 [0204.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF", dwFileAttributes=0x20) returned 0 [0204.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.369] GetLastError () returned 0x5 [0204.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF", dwFileAttributes=0x20) returned 0 [0204.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 6837 os_tid = 0x151c [0204.371] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json")) returned 0x2020 [0211.142] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0217.142] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1460 [0217.143] GetFileSizeEx (in: hFile=0x1460, lpFileSize=0x7eafe78 | out: lpFileSize=0x7eafe78*=789) returned 1 [0217.143] SetFilePointerEx (in: hFile=0x1460, liDistanceToMove=0x311, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.143] ReadFile (in: hFile=0x1460, lpBuffer=0x7eafe84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7eafe60, lpOverlapped=0x0 | out: lpBuffer=0x7eafe84*, lpNumberOfBytesRead=0x7eafe60*=0x4, lpOverlapped=0x0) returned 1 [0217.146] SetFilePointerEx (in: hFile=0x1460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0217.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b040 [0217.146] NtQuerySystemTime (in: CurrentTime=0x7eafe00 | out: CurrentTime=0x7eafe00*=132471540848616000) returned 0x0 [0217.146] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x734b4708 [0217.146] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x5fe3dab7 [0217.146] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x2cc294a2 [0217.146] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x447dc0c7 [0217.146] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x5435fdb1 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x118dbad [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x55cd9989 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x5e3a4cdd [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x37e75172 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x18c1cd78 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x73dda1e8 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x5bb7970c [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x3b0a6ca [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x5ce5cd0e [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x2ba200eb [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x261f565f [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x15ca3efe [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x1cf69a2e [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x9c8fdce [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x4458a1ab [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x575c0a2a [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x2044bbd0 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x5309b6d4 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x145b3014 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x44d7cebc [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x4fde2746 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x686517d9 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x2e50d88e [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x5a355486 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x15f646dd [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x4f797081 [0217.147] RtlRandomEx (in: Seed=0x7eafdf8 | out: Seed=0x7eafdf8) returned 0x35436536 [0217.160] ReadFile (in: hFile=0x1460, lpBuffer=0x148e7ca8, nNumberOfBytesToRead=0x315, lpNumberOfBytesRead=0x7eafdf4, lpOverlapped=0x0 | out: lpBuffer=0x148e7ca8*, lpNumberOfBytesRead=0x7eafdf4*=0x315, lpOverlapped=0x0) returned 1 [0217.160] SetFilePointerEx (in: hFile=0x1460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.160] WriteFile (in: hFile=0x1460, lpBuffer=0x148eb8b0*, nNumberOfBytesToWrite=0x315, lpNumberOfBytesWritten=0x7eafdf8, lpOverlapped=0x0 | out: lpBuffer=0x148eb8b0*, lpNumberOfBytesWritten=0x7eafdf8*=0x315, lpOverlapped=0x0) returned 1 [0221.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0221.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0221.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0221.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148eb8b0) returned 1 [0221.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148e7ca8) returned 1 [0221.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402c00) returned 1 [0221.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e6020) returned 1 [0221.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69300 [0221.806] SetFilePointerEx (in: hFile=0x1460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.806] WriteFile (in: hFile=0x1460, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7eafe6c, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x7eafe6c*=0x10c, lpOverlapped=0x0) returned 1 [0221.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0221.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69330) returned 1 [0221.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0221.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69300) returned 1 [0221.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0221.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0221.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0221.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b018) returned 1 [0221.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8403a68 [0221.810] wcscpy (in: _Dest=0x8403a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" [0221.810] wcscat (in: _Dest=0x8403a68, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.f0dbec" [0221.810] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.f0dbec", NtPathName=0x7eafdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0221.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e18260 [0221.814] FlushFileBuffers (hFile=0x1460) returned 1 [0221.816] CloseHandle (hObject=0x1460) returned 1 [0221.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403a68 [0221.818] wcscpy (in: _Dest=0x8403a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" [0221.818] wcscat (in: _Dest=0x8403a68, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\F0DBEC-Readme.txt" [0221.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\f0dbec-readme.txt")) returned 0xffffffff [0221.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1460 [0221.819] WriteFile (in: hFile=0x1460, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x7eafe14, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x7eafe14*=0x70c, lpOverlapped=0x0) returned 1 [0221.822] CloseHandle (hObject=0x1460) returned 1 [0221.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403a68) returned 1 [0221.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0d68) returned 1 Thread: id = 6838 os_tid = 0x1718 [0204.371] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json")) returned 0x2020 [0211.143] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0217.160] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xec4 [0217.161] GetFileSizeEx (in: hFile=0xec4, lpFileSize=0x975faf0 | out: lpFileSize=0x975faf0*=720) returned 1 [0217.161] SetFilePointerEx (in: hFile=0xec4, liDistanceToMove=0x2cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.161] ReadFile (in: hFile=0xec4, lpBuffer=0x975fafc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x975fad8, lpOverlapped=0x0 | out: lpBuffer=0x975fafc*, lpNumberOfBytesRead=0x975fad8*=0x4, lpOverlapped=0x0) returned 1 [0217.164] SetFilePointerEx (in: hFile=0xec4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b810 [0217.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b040 [0217.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b8b0 [0217.165] NtQuerySystemTime (in: CurrentTime=0x975fa78 | out: CurrentTime=0x975fa78*=132471540848772000) returned 0x0 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x41b1be79 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x75157546 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x3fe57fd4 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0xbbc4d10 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x554135da [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x44f53826 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x73e15b7f [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x6278a10d [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x61809b38 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x5fd89c9e [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x2cd84093 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x28e45273 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x425cba95 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x6178ced7 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x3e50c5c1 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x1b33ab2 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x77d794ba [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x68a76669 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x6098b340 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x5548101a [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x5abe0e [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x6e3a5c70 [0217.165] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x50a82bbf [0217.166] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x24112a5d [0217.166] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x90b5bdd [0217.166] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x71c45ee0 [0217.166] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x2ea0acc7 [0217.166] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x799ea2c7 [0217.166] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x4fd1efff [0217.166] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x4b34c853 [0217.166] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x1c26d4e6 [0217.166] RtlRandomEx (in: Seed=0x975fa70 | out: Seed=0x975fa70) returned 0x445488ee [0217.178] ReadFile (in: hFile=0xec4, lpBuffer=0x148ef4b8, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x975fa6c, lpOverlapped=0x0 | out: lpBuffer=0x148ef4b8*, lpNumberOfBytesRead=0x975fa6c*=0x2d0, lpOverlapped=0x0) returned 1 [0217.178] SetFilePointerEx (in: hFile=0xec4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.178] WriteFile (in: hFile=0xec4, lpBuffer=0x148f30c0*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x975fa70, lpOverlapped=0x0 | out: lpBuffer=0x148f30c0*, lpNumberOfBytesWritten=0x975fa70*=0x2d0, lpOverlapped=0x0) returned 1 [0221.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4af50 [0221.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce90 [0221.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0221.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148f30c0) returned 1 [0221.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x148ef4b8) returned 1 [0221.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8402fc0) returned 1 [0221.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81e7580) returned 1 [0221.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e69900 [0221.830] SetFilePointerEx (in: hFile=0xec4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.830] WriteFile (in: hFile=0xec4, lpBuffer=0x300dc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x975fae4, lpOverlapped=0x0 | out: lpBuffer=0x300dc90*, lpNumberOfBytesWritten=0x975fae4*=0x10c, lpOverlapped=0x0) returned 1 [0221.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dc90) returned 1 [0221.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69930) returned 1 [0221.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0221.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69900) returned 1 [0221.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0221.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b040) returned 1 [0221.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49bc8) returned 1 [0221.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bbd0) returned 1 [0221.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x8403ba0 [0221.840] wcscpy (in: _Dest=0x8403ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" [0221.840] wcscat (in: _Dest=0x8403ba0, _Source=".f0dbec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.f0dbec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.f0dbec" [0221.840] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.f0dbec", NtPathName=0x975fa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.f0dbec", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0221.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e18260 [0221.843] FlushFileBuffers (hFile=0xec4) returned 1 [0221.845] CloseHandle (hObject=0xec4) returned 1 [0221.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x8403ba0 [0221.846] wcscpy (in: _Dest=0x8403ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" [0221.846] wcscat (in: _Dest=0x8403ba0, _Source="F0DBEC-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\F0DBEC-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\F0DBEC-Readme.txt" [0221.846] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\f0dbec-readme.txt")) returned 0xffffffff [0221.846] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\F0DBEC-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\f0dbec-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xec4 [0221.848] WriteFile (in: hFile=0xec4, lpBuffer=0x3efac40*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x975fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3efac40*, lpNumberOfBytesWritten=0x975fa8c*=0x70c, lpOverlapped=0x0) returned 1 [0221.850] CloseHandle (hObject=0xec4) returned 1 [0221.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403ba0) returned 1 [0221.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f0c40) returned 1 Thread: id = 6839 os_tid = 0x171c [0204.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp")) returned 0x20 [0204.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", dwFileAttributes=0x20) returned 0 [0204.372] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.372] GetLastError () returned 0x5 [0204.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", dwFileAttributes=0x20) returned 0 [0204.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34d08) returned 1 Thread: id = 6840 os_tid = 0x12b8 [0204.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx")) returned 0x20 [0204.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", dwFileAttributes=0x20) returned 0 [0204.381] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.381] GetLastError () returned 0x5 [0204.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", dwFileAttributes=0x20) returned 0 [0204.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6841 os_tid = 0x12d8 [0204.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp")) returned 0x20 [0205.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", dwFileAttributes=0x20) returned 0 [0205.523] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.523] GetLastError () returned 0x5 [0205.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", dwFileAttributes=0x20) returned 0 [0205.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6842 os_tid = 0x1d8c [0204.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex")) returned 0x20 [0213.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", dwFileAttributes=0x20) returned 0 [0213.584] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.779] GetLastError () returned 0x5 [0216.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", dwFileAttributes=0x20) returned 0 [0216.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35280) returned 1 Thread: id = 6843 os_tid = 0x1d90 [0204.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx")) returned 0x20 [0212.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", dwFileAttributes=0x20) returned 0 [0213.323] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.288] GetLastError () returned 0x5 [0215.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", dwFileAttributes=0x20) returned 0 [0215.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 6844 os_tid = 0x1d94 [0204.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env")) returned 0x20 [0212.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", dwFileAttributes=0x20) returned 0 [0213.217] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.060] GetLastError () returned 0x5 [0216.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", dwFileAttributes=0x20) returned 0 [0217.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35348) returned 1 Thread: id = 6845 os_tid = 0x1df4 [0204.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca")) returned 0x20 [0217.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca", dwFileAttributes=0x20) returned 0 [0217.459] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.459] GetLastError () returned 0x5 [0217.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca", dwFileAttributes=0x20) returned 0 [0217.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3335e8) returned 1 Thread: id = 6846 os_tid = 0x2868 [0204.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp")) returned 0x20 [0217.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp", dwFileAttributes=0x20) returned 0 [0217.456] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.457] GetLastError () returned 0x5 [0217.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp", dwFileAttributes=0x20) returned 0 [0217.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 6847 os_tid = 0x18d8 [0204.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp")) returned 0x20 [0217.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp", dwFileAttributes=0x20) returned 0 [0217.455] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.455] GetLastError () returned 0x5 [0217.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp", dwFileAttributes=0x20) returned 0 [0217.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e355a0) returned 1 Thread: id = 6848 os_tid = 0x1a98 [0204.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx")) returned 0x20 [0217.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx", dwFileAttributes=0x20) returned 0 [0217.453] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.453] GetLastError () returned 0x5 [0217.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx", dwFileAttributes=0x20) returned 0 [0217.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 6849 os_tid = 0x1b44 [0204.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca")) returned 0x20 [0217.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca", dwFileAttributes=0x20) returned 0 [0217.451] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.451] GetLastError () returned 0x5 [0217.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca", dwFileAttributes=0x20) returned 0 [0217.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 6850 os_tid = 0x1e8c [0204.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp")) returned 0x20 [0217.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp", dwFileAttributes=0x20) returned 0 [0217.445] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.445] GetLastError () returned 0x5 [0217.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp", dwFileAttributes=0x20) returned 0 [0217.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 6851 os_tid = 0x1e90 [0204.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp")) returned 0x20 [0217.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp", dwFileAttributes=0x20) returned 0 [0217.443] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.443] GetLastError () returned 0x5 [0217.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp", dwFileAttributes=0x20) returned 0 [0217.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 6852 os_tid = 0x1e94 [0204.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx")) returned 0x20 [0217.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx", dwFileAttributes=0x20) returned 0 [0217.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.282] GetLastError () returned 0x5 [0217.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx", dwFileAttributes=0x20) returned 0 [0217.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 6853 os_tid = 0x1e98 [0204.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths")) returned 0x20 [0217.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths", dwFileAttributes=0x20) returned 0 [0217.441] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.441] GetLastError () returned 0x5 [0217.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths", dwFileAttributes=0x20) returned 0 [0217.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3338e8) returned 1 Thread: id = 6854 os_tid = 0x1e9c [0204.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp")) returned 0x20 [0217.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp", dwFileAttributes=0x20) returned 0 [0217.449] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.449] GetLastError () returned 0x5 [0217.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp", dwFileAttributes=0x20) returned 0 [0217.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5f48) returned 1 Thread: id = 6855 os_tid = 0x1ea0 [0204.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex")) returned 0x20 [0217.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex", dwFileAttributes=0x20) returned 0 [0217.439] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.439] GetLastError () returned 0x5 [0217.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex", dwFileAttributes=0x20) returned 0 [0217.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e342e0) returned 1 Thread: id = 6856 os_tid = 0x1ea4 [0204.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx")) returned 0x20 [0212.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx", dwFileAttributes=0x20) returned 0 [0212.665] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.288] GetLastError () returned 0x5 [0215.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx", dwFileAttributes=0x20) returned 0 [0215.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d57c8) returned 1 Thread: id = 6857 os_tid = 0x1ea8 [0204.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env")) returned 0x20 [0212.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env", dwFileAttributes=0x20) returned 0 [0212.840] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.584] GetLastError () returned 0x5 [0213.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env", dwFileAttributes=0x20) returned 0 [0213.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e357f8) returned 1 Thread: id = 6858 os_tid = 0x2bf0 [0204.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp")) returned 0x20 [0212.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp", dwFileAttributes=0x20) returned 0 [0212.840] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.584] GetLastError () returned 0x5 [0213.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp", dwFileAttributes=0x20) returned 0 [0213.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5c48) returned 1 Thread: id = 6859 os_tid = 0x2c74 [0204.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex")) returned 0x20 [0210.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex", dwFileAttributes=0x20) returned 0 [0210.087] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.253] GetLastError () returned 0x5 [0212.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex", dwFileAttributes=0x20) returned 0 [0212.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35730) returned 1 Thread: id = 6860 os_tid = 0x2d58 [0204.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx")) returned 0x20 [0205.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx", dwFileAttributes=0x20) returned 0 [0205.419] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.419] GetLastError () returned 0x5 [0205.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx", dwFileAttributes=0x20) returned 0 [0205.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5888) returned 1 Thread: id = 6861 os_tid = 0x1adc [0204.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env")) returned 0x20 [0213.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env", dwFileAttributes=0x20) returned 0 [0213.765] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.546] GetLastError () returned 0x5 [0215.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env", dwFileAttributes=0x20) returned 0 [0216.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 Thread: id = 6862 os_tid = 0x1ff8 [0205.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca")) returned 0x20 [0217.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca", dwFileAttributes=0x20) returned 0 [0217.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.447] GetLastError () returned 0x5 [0217.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca", dwFileAttributes=0x20) returned 0 [0217.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5648) returned 1 Thread: id = 6863 os_tid = 0x267c [0205.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x20 [0212.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF", dwFileAttributes=0x20) returned 0 [0212.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.625] GetLastError () returned 0x5 [0212.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF", dwFileAttributes=0x20) returned 0 [0212.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f6f0) returned 1 Thread: id = 6864 os_tid = 0x2688 [0205.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x20 [0212.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF", dwFileAttributes=0x20) returned 0 [0212.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.623] GetLastError () returned 0x5 [0212.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF", dwFileAttributes=0x20) returned 0 [0212.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 6865 os_tid = 0x27a0 [0205.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x20 [0212.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF", dwFileAttributes=0x20) returned 0 [0212.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.622] GetLastError () returned 0x5 [0212.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF", dwFileAttributes=0x20) returned 0 [0212.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 6866 os_tid = 0x19d4 [0205.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x20 [0212.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF", dwFileAttributes=0x20) returned 0 [0212.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.621] GetLastError () returned 0x5 [0212.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF", dwFileAttributes=0x20) returned 0 [0212.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 6867 os_tid = 0x2798 [0205.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x20 [0212.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF", dwFileAttributes=0x20) returned 0 [0212.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.620] GetLastError () returned 0x5 [0212.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF", dwFileAttributes=0x20) returned 0 [0212.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f448) returned 1 Thread: id = 6868 os_tid = 0x2ad8 [0205.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x20 [0212.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF", dwFileAttributes=0x20) returned 0 [0212.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.618] GetLastError () returned 0x5 [0212.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF", dwFileAttributes=0x20) returned 0 [0212.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f2b0) returned 1 Thread: id = 6869 os_tid = 0x2ae0 [0205.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x20 [0212.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF", dwFileAttributes=0x20) returned 0 [0212.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.617] GetLastError () returned 0x5 [0212.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF", dwFileAttributes=0x20) returned 0 [0212.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 Thread: id = 6870 os_tid = 0x2ae4 [0205.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x20 [0212.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF", dwFileAttributes=0x20) returned 0 [0212.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.375] GetLastError () returned 0x5 [0212.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF", dwFileAttributes=0x20) returned 0 [0212.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 6871 os_tid = 0x2b0c [0205.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x20 [0212.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF", dwFileAttributes=0x20) returned 0 [0212.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.652] GetLastError () returned 0x5 [0212.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF", dwFileAttributes=0x20) returned 0 [0212.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f1a0) returned 1 Thread: id = 6872 os_tid = 0x2b10 [0205.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x20 [0212.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF", dwFileAttributes=0x20) returned 0 [0212.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.639] GetLastError () returned 0x5 [0212.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF", dwFileAttributes=0x20) returned 0 [0212.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f800) returned 1 Thread: id = 6873 os_tid = 0x2b14 [0205.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x20 [0212.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF", dwFileAttributes=0x20) returned 0 [0212.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.638] GetLastError () returned 0x5 [0212.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF", dwFileAttributes=0x20) returned 0 [0212.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 Thread: id = 6874 os_tid = 0x2b1c [0205.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x20 [0212.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF", dwFileAttributes=0x20) returned 0 [0212.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.637] GetLastError () returned 0x5 [0212.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF", dwFileAttributes=0x20) returned 0 [0212.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eef8) returned 1 Thread: id = 6875 os_tid = 0x2b20 [0205.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x20 [0212.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF", dwFileAttributes=0x20) returned 0 [0212.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.636] GetLastError () returned 0x5 [0212.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF", dwFileAttributes=0x20) returned 0 [0212.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f338) returned 1 Thread: id = 6876 os_tid = 0x2b24 [0205.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x20 [0212.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF", dwFileAttributes=0x20) returned 0 [0212.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.634] GetLastError () returned 0x5 [0212.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF", dwFileAttributes=0x20) returned 0 [0212.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ede8) returned 1 Thread: id = 6877 os_tid = 0x2b28 [0205.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x20 [0212.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF", dwFileAttributes=0x20) returned 0 [0212.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.633] GetLastError () returned 0x5 [0212.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF", dwFileAttributes=0x20) returned 0 [0212.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 6878 os_tid = 0x2b2c [0205.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x20 [0212.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF", dwFileAttributes=0x20) returned 0 [0212.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.632] GetLastError () returned 0x5 [0212.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF", dwFileAttributes=0x20) returned 0 [0212.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f008) returned 1 Thread: id = 6879 os_tid = 0x2b30 [0205.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x20 [0212.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF", dwFileAttributes=0x20) returned 0 [0212.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.631] GetLastError () returned 0x5 [0212.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF", dwFileAttributes=0x20) returned 0 [0212.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ebc8) returned 1 Thread: id = 6880 os_tid = 0x2b54 [0205.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x20 [0212.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF", dwFileAttributes=0x20) returned 0 [0212.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.630] GetLastError () returned 0x5 [0212.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF", dwFileAttributes=0x20) returned 0 [0212.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f3c0) returned 1 Thread: id = 6881 os_tid = 0x2b5c [0205.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x20 [0212.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF", dwFileAttributes=0x20) returned 0 [0212.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.628] GetLastError () returned 0x5 [0212.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF", dwFileAttributes=0x20) returned 0 [0212.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f090) returned 1 Thread: id = 6882 os_tid = 0x2b74 [0205.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x20 [0212.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF", dwFileAttributes=0x20) returned 0 [0212.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.627] GetLastError () returned 0x5 [0212.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF", dwFileAttributes=0x20) returned 0 [0212.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eb40) returned 1 Thread: id = 6883 os_tid = 0x2b78 [0205.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x20 [0212.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF", dwFileAttributes=0x20) returned 0 [0212.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.626] GetLastError () returned 0x5 [0212.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF", dwFileAttributes=0x20) returned 0 [0212.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 6884 os_tid = 0x2b7c [0205.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x20 [0210.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF", dwFileAttributes=0x20) returned 0 [0210.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.374] GetLastError () returned 0x5 [0212.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF", dwFileAttributes=0x20) returned 0 [0212.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f118) returned 1 Thread: id = 6885 os_tid = 0x2b80 [0205.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x20 [0205.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF", dwFileAttributes=0x20) returned 0 [0205.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.529] GetLastError () returned 0x5 [0205.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF", dwFileAttributes=0x20) returned 0 [0205.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 6886 os_tid = 0x2b84 [0205.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x20 [0205.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF", dwFileAttributes=0x20) returned 0 [0205.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.531] GetLastError () returned 0x5 [0205.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF", dwFileAttributes=0x20) returned 0 [0205.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf888) returned 1 Thread: id = 6887 os_tid = 0x8a4 [0205.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x20 [0212.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF", dwFileAttributes=0x20) returned 0 [0212.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.641] GetLastError () returned 0x5 [0212.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF", dwFileAttributes=0x20) returned 0 [0212.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81becd8) returned 1 Thread: id = 6888 os_tid = 0x2bac [0205.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss")) returned 0x20 [0209.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS", dwFileAttributes=0x20) returned 0 [0209.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.963] GetLastError () returned 0x5 [0209.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS", dwFileAttributes=0x20) returned 0 [0209.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbaa8) returned 1 Thread: id = 6889 os_tid = 0x2bb0 [0205.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss")) returned 0x20 [0209.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS", dwFileAttributes=0x20) returned 0 [0209.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.961] GetLastError () returned 0x5 [0209.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS", dwFileAttributes=0x20) returned 0 [0209.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbbe8) returned 1 Thread: id = 6890 os_tid = 0x2bb8 [0205.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss")) returned 0x20 [0209.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS", dwFileAttributes=0x20) returned 0 [0209.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.959] GetLastError () returned 0x5 [0209.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS", dwFileAttributes=0x20) returned 0 [0209.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc728) returned 1 Thread: id = 6891 os_tid = 0x2bbc [0205.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst")) returned 0x20 [0210.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST", dwFileAttributes=0x20) returned 0 [0210.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.005] GetLastError () returned 0x5 [0210.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST", dwFileAttributes=0x20) returned 0 [0210.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce08) returned 1 Thread: id = 6892 os_tid = 0x2bc0 [0205.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss")) returned 0x20 [0210.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS", dwFileAttributes=0x20) returned 0 [0210.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.012] GetLastError () returned 0x5 [0210.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS", dwFileAttributes=0x20) returned 0 [0210.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 Thread: id = 6893 os_tid = 0x2bc4 [0205.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst")) returned 0x20 [0210.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST", dwFileAttributes=0x20) returned 0 [0210.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.010] GetLastError () returned 0x5 [0210.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST", dwFileAttributes=0x20) returned 0 [0210.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc188) returned 1 Thread: id = 6894 os_tid = 0x2bc8 [0205.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst")) returned 0x20 [0210.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST", dwFileAttributes=0x20) returned 0 [0210.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.008] GetLastError () returned 0x5 [0210.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST", dwFileAttributes=0x20) returned 0 [0210.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc228) returned 1 Thread: id = 6895 os_tid = 0x2bcc [0205.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst")) returned 0x20 [0209.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST", dwFileAttributes=0x20) returned 0 [0209.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.958] GetLastError () returned 0x5 [0209.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST", dwFileAttributes=0x20) returned 0 [0209.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbe68) returned 1 Thread: id = 6896 os_tid = 0xecc [0205.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss")) returned 0x20 [0209.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS", dwFileAttributes=0x20) returned 0 [0209.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.956] GetLastError () returned 0x5 [0209.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS", dwFileAttributes=0x20) returned 0 [0209.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbfa8) returned 1 Thread: id = 6897 os_tid = 0x670 [0205.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst")) returned 0x20 [0210.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST", dwFileAttributes=0x20) returned 0 [0210.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.015] GetLastError () returned 0x5 [0210.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST", dwFileAttributes=0x20) returned 0 [0210.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc048) returned 1 Thread: id = 6898 os_tid = 0xb8c [0205.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss")) returned 0x20 [0209.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS", dwFileAttributes=0x20) returned 0 [0209.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.954] GetLastError () returned 0x5 [0209.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS", dwFileAttributes=0x20) returned 0 [0209.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbdc8) returned 1 Thread: id = 6899 os_tid = 0x8fc [0205.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst")) returned 0x20 [0209.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST", dwFileAttributes=0x20) returned 0 [0209.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.953] GetLastError () returned 0x5 [0209.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST", dwFileAttributes=0x20) returned 0 [0209.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbd28) returned 1 Thread: id = 6900 os_tid = 0x2c14 [0205.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss")) returned 0x20 [0210.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS", dwFileAttributes=0x20) returned 0 [0210.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.017] GetLastError () returned 0x5 [0210.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS", dwFileAttributes=0x20) returned 0 [0210.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbc88) returned 1 Thread: id = 6901 os_tid = 0x2cec [0205.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst")) returned 0x20 [0209.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST", dwFileAttributes=0x20) returned 0 [0209.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.951] GetLastError () returned 0x5 [0209.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST", dwFileAttributes=0x20) returned 0 [0209.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db8c8) returned 1 Thread: id = 6902 os_tid = 0x2cf0 [0205.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss")) returned 0x20 [0210.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS", dwFileAttributes=0x20) returned 0 [0210.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.019] GetLastError () returned 0x5 [0210.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS", dwFileAttributes=0x20) returned 0 [0210.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcf48) returned 1 Thread: id = 6903 os_tid = 0x2cf4 [0205.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst")) returned 0x20 [0209.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST", dwFileAttributes=0x20) returned 0 [0209.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.949] GetLastError () returned 0x5 [0209.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST", dwFileAttributes=0x20) returned 0 [0209.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcea8) returned 1 Thread: id = 6904 os_tid = 0x2cf8 [0205.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss")) returned 0x20 [0209.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS", dwFileAttributes=0x20) returned 0 [0209.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.947] GetLastError () returned 0x5 [0209.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS", dwFileAttributes=0x20) returned 0 [0209.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbb48) returned 1 Thread: id = 6905 os_tid = 0x2cfc [0205.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss")) returned 0x20 [0209.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS", dwFileAttributes=0x20) returned 0 [0209.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.946] GetLastError () returned 0x5 [0209.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS", dwFileAttributes=0x20) returned 0 [0209.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db828) returned 1 Thread: id = 6906 os_tid = 0x2d00 [0205.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss")) returned 0x20 [0209.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS", dwFileAttributes=0x20) returned 0 [0209.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.942] GetLastError () returned 0x5 [0209.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS", dwFileAttributes=0x20) returned 0 [0209.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dba08) returned 1 Thread: id = 6907 os_tid = 0xf34 [0205.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss")) returned 0x20 [0209.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS", dwFileAttributes=0x20) returned 0 [0209.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0209.944] GetLastError () returned 0x5 [0209.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS", dwFileAttributes=0x20) returned 0 [0209.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db788) returned 1 Thread: id = 6908 os_tid = 0xb5c [0205.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst")) returned 0x20 [0210.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST", dwFileAttributes=0x20) returned 0 [0210.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.021] GetLastError () returned 0x5 [0210.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST", dwFileAttributes=0x20) returned 0 [0210.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db6e8) returned 1 Thread: id = 6909 os_tid = 0xb18 Thread: id = 6910 os_tid = 0xb78 [0205.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp")) returned 0x20 [0217.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp", dwFileAttributes=0x20) returned 0 [0217.274] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.274] GetLastError () returned 0x5 [0217.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp", dwFileAttributes=0x20) returned 0 [0217.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6911 os_tid = 0xb0c [0205.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx")) returned 0x20 [0217.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx", dwFileAttributes=0x20) returned 0 [0217.477] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.477] GetLastError () returned 0x5 [0217.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx", dwFileAttributes=0x20) returned 0 [0217.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6912 os_tid = 0x620 [0205.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp")) returned 0x20 [0217.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp", dwFileAttributes=0x20) returned 0 [0217.479] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.479] GetLastError () returned 0x5 [0217.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp", dwFileAttributes=0x20) returned 0 [0217.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5888) returned 1 Thread: id = 6913 os_tid = 0x2c7c [0205.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths")) returned 0x20 [0217.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths", dwFileAttributes=0x20) returned 0 [0217.481] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.481] GetLastError () returned 0x5 [0217.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths", dwFileAttributes=0x20) returned 0 [0217.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5a08) returned 1 Thread: id = 6914 os_tid = 0x2c80 [0205.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca")) returned 0x20 [0217.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca", dwFileAttributes=0x20) returned 0 [0217.276] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.276] GetLastError () returned 0x5 [0217.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca", dwFileAttributes=0x20) returned 0 [0217.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5948) returned 1 Thread: id = 6915 os_tid = 0x2ce4 [0205.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp")) returned 0x20 [0217.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp", dwFileAttributes=0x20) returned 0 [0217.277] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.278] GetLastError () returned 0x5 [0217.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp", dwFileAttributes=0x20) returned 0 [0217.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5dc8) returned 1 Thread: id = 6916 os_tid = 0x2e54 [0205.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx")) returned 0x20 [0217.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx", dwFileAttributes=0x20) returned 0 [0217.281] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.281] GetLastError () returned 0x5 [0217.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx", dwFileAttributes=0x20) returned 0 [0217.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5d08) returned 1 Thread: id = 6917 os_tid = 0x2e58 [0205.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp")) returned 0x20 [0217.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp", dwFileAttributes=0x20) returned 0 [0217.279] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.279] GetLastError () returned 0x5 [0217.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp", dwFileAttributes=0x20) returned 0 [0217.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5e88) returned 1 Thread: id = 6918 os_tid = 0x2e5c [0205.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca")) returned 0x20 [0217.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca", dwFileAttributes=0x20) returned 0 [0217.268] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.269] GetLastError () returned 0x5 [0217.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca", dwFileAttributes=0x20) returned 0 [0217.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6188) returned 1 Thread: id = 6919 os_tid = 0x2e60 [0205.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp")) returned 0x20 [0217.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp", dwFileAttributes=0x20) returned 0 [0217.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.271] GetLastError () returned 0x5 [0217.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp", dwFileAttributes=0x20) returned 0 [0217.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6248) returned 1 Thread: id = 6920 os_tid = 0x2e64 [0205.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp")) returned 0x20 [0217.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp", dwFileAttributes=0x20) returned 0 [0217.461] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.461] GetLastError () returned 0x5 [0217.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp", dwFileAttributes=0x20) returned 0 [0217.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34d08) returned 1 Thread: id = 6921 os_tid = 0x2e68 [0205.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc")) returned 0x20 [0205.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC", dwFileAttributes=0x20) returned 0 [0205.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.735] GetLastError () returned 0x5 [0205.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC", dwFileAttributes=0x20) returned 0 [0205.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 6922 os_tid = 0x2e6c [0205.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv")) returned 0x20 [0205.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV", dwFileAttributes=0x20) returned 0 [0205.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.737] GetLastError () returned 0x5 [0205.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV", dwFileAttributes=0x20) returned 0 [0205.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5708) returned 1 Thread: id = 6923 os_tid = 0x2e78 [0205.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml")) returned 0x20 [0205.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML", dwFileAttributes=0x20) returned 0 [0205.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.739] GetLastError () returned 0x5 [0205.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML", dwFileAttributes=0x20) returned 0 [0205.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5b88) returned 1 Thread: id = 6924 os_tid = 0x2e7c [0205.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc")) returned 0x20 [0205.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC", dwFileAttributes=0x20) returned 0 [0205.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.740] GetLastError () returned 0x5 [0205.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC", dwFileAttributes=0x20) returned 0 [0205.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf888) returned 1 Thread: id = 6925 os_tid = 0x2e80 [0205.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc")) returned 0x20 [0205.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC", dwFileAttributes=0x20) returned 0 [0205.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.742] GetLastError () returned 0x5 [0205.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC", dwFileAttributes=0x20) returned 0 [0205.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 6926 os_tid = 0x2e84 [0205.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv")) returned 0x20 [0205.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV", dwFileAttributes=0x20) returned 0 [0205.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.750] GetLastError () returned 0x5 [0205.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV", dwFileAttributes=0x20) returned 0 [0205.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 6927 os_tid = 0x2e88 [0205.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml")) returned 0x20 [0205.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML", dwFileAttributes=0x20) returned 0 [0205.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.751] GetLastError () returned 0x5 [0205.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML", dwFileAttributes=0x20) returned 0 [0205.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 6928 os_tid = 0x2e8c [0205.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv")) returned 0x20 [0205.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV", dwFileAttributes=0x20) returned 0 [0205.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.753] GetLastError () returned 0x5 [0205.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV", dwFileAttributes=0x20) returned 0 [0205.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 6929 os_tid = 0x2ea0 [0205.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc")) returned 0x20 [0205.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC", dwFileAttributes=0x20) returned 0 [0205.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.754] GetLastError () returned 0x5 [0205.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC", dwFileAttributes=0x20) returned 0 [0205.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 6930 os_tid = 0x2c60 [0205.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv")) returned 0x20 [0205.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV", dwFileAttributes=0x20) returned 0 [0205.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.756] GetLastError () returned 0x5 [0205.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV", dwFileAttributes=0x20) returned 0 [0205.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 6931 os_tid = 0x2ee0 [0205.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml")) returned 0x20 [0205.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML", dwFileAttributes=0x20) returned 0 [0205.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.757] GetLastError () returned 0x5 [0205.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML", dwFileAttributes=0x20) returned 0 [0205.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 6932 os_tid = 0x2ee4 [0205.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc")) returned 0x20 [0205.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC", dwFileAttributes=0x20) returned 0 [0205.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.759] GetLastError () returned 0x5 [0205.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC", dwFileAttributes=0x20) returned 0 [0205.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 6933 os_tid = 0x2ee8 [0205.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv")) returned 0x20 [0205.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV", dwFileAttributes=0x20) returned 0 [0205.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.761] GetLastError () returned 0x5 [0205.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV", dwFileAttributes=0x20) returned 0 [0205.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4688) returned 1 Thread: id = 6934 os_tid = 0x2eec [0205.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml")) returned 0x20 [0205.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML", dwFileAttributes=0x20) returned 0 [0205.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.762] GetLastError () returned 0x5 [0205.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML", dwFileAttributes=0x20) returned 0 [0205.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5288) returned 1 Thread: id = 6935 os_tid = 0x2ef0 [0205.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc")) returned 0x20 [0205.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC", dwFileAttributes=0x20) returned 0 [0205.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.764] GetLastError () returned 0x5 [0205.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC", dwFileAttributes=0x20) returned 0 [0205.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 6936 os_tid = 0x2ef4 [0205.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc")) returned 0x20 [0205.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC", dwFileAttributes=0x20) returned 0 [0205.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.985] GetLastError () returned 0x5 [0205.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC", dwFileAttributes=0x20) returned 0 [0205.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 6937 os_tid = 0x2ef8 [0205.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv")) returned 0x20 [0205.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV", dwFileAttributes=0x20) returned 0 [0205.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.987] GetLastError () returned 0x5 [0205.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV", dwFileAttributes=0x20) returned 0 [0205.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 6938 os_tid = 0x2efc [0205.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml")) returned 0x20 [0205.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML", dwFileAttributes=0x20) returned 0 [0205.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.989] GetLastError () returned 0x5 [0205.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML", dwFileAttributes=0x20) returned 0 [0205.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 6939 os_tid = 0x2f00 [0205.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc")) returned 0x20 [0205.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC", dwFileAttributes=0x20) returned 0 [0205.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.990] GetLastError () returned 0x5 [0205.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC", dwFileAttributes=0x20) returned 0 [0205.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 6940 os_tid = 0x2f04 [0205.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc")) returned 0x20 [0205.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC", dwFileAttributes=0x20) returned 0 [0205.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.992] GetLastError () returned 0x5 [0205.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC", dwFileAttributes=0x20) returned 0 [0205.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 6941 os_tid = 0x2f08 [0205.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc")) returned 0x20 [0205.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC", dwFileAttributes=0x20) returned 0 [0205.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.994] GetLastError () returned 0x5 [0205.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC", dwFileAttributes=0x20) returned 0 [0205.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 6942 os_tid = 0x2f0c [0206.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc")) returned 0x20 [0206.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC", dwFileAttributes=0x20) returned 0 [0206.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.001] GetLastError () returned 0x5 [0206.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC", dwFileAttributes=0x20) returned 0 [0206.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 6943 os_tid = 0x16e8 [0206.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc")) returned 0x20 [0206.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC", dwFileAttributes=0x20) returned 0 [0206.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.081] GetLastError () returned 0x5 [0206.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC", dwFileAttributes=0x20) returned 0 [0206.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 6944 os_tid = 0x10f8 [0206.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc")) returned 0x20 [0206.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC", dwFileAttributes=0x20) returned 0 [0206.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.083] GetLastError () returned 0x5 [0206.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC", dwFileAttributes=0x20) returned 0 [0206.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 6945 os_tid = 0x1240 [0206.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml")) returned 0x20 [0206.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML", dwFileAttributes=0x20) returned 0 [0206.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.085] GetLastError () returned 0x5 [0206.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML", dwFileAttributes=0x20) returned 0 [0206.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5808) returned 1 Thread: id = 6946 os_tid = 0x1bd4 [0206.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc")) returned 0x20 [0206.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC", dwFileAttributes=0x20) returned 0 [0206.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.087] GetLastError () returned 0x5 [0206.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC", dwFileAttributes=0x20) returned 0 [0206.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 Thread: id = 6947 os_tid = 0x2218 [0206.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv")) returned 0x20 [0206.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV", dwFileAttributes=0x20) returned 0 [0206.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.089] GetLastError () returned 0x5 [0206.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV", dwFileAttributes=0x20) returned 0 [0206.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 Thread: id = 6948 os_tid = 0x2340 [0206.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml")) returned 0x20 [0206.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML", dwFileAttributes=0x20) returned 0 [0206.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.091] GetLastError () returned 0x5 [0206.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML", dwFileAttributes=0x20) returned 0 [0206.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e88) returned 1 Thread: id = 6949 os_tid = 0x238c [0206.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc")) returned 0x20 [0211.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC", dwFileAttributes=0x20) returned 0 [0211.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.713] GetLastError () returned 0x5 [0211.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC", dwFileAttributes=0x20) returned 0 [0211.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 6950 os_tid = 0x2390 Thread: id = 6951 os_tid = 0x2394 [0206.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x20 [0212.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF", dwFileAttributes=0x20) returned 0 [0212.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.649] GetLastError () returned 0x5 [0212.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF", dwFileAttributes=0x20) returned 0 [0212.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 6952 os_tid = 0x2398 [0206.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x20 [0212.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF", dwFileAttributes=0x20) returned 0 [0212.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.373] GetLastError () returned 0x5 [0212.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF", dwFileAttributes=0x20) returned 0 [0212.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 Thread: id = 6953 os_tid = 0x23b0 [0206.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x20 [0212.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF", dwFileAttributes=0x20) returned 0 [0212.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.650] GetLastError () returned 0x5 [0212.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF", dwFileAttributes=0x20) returned 0 [0212.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 6954 os_tid = 0x23c8 [0206.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x20 [0212.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF", dwFileAttributes=0x20) returned 0 [0212.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.642] GetLastError () returned 0x5 [0212.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF", dwFileAttributes=0x20) returned 0 [0212.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 6955 os_tid = 0x23cc [0206.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x20 [0212.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF", dwFileAttributes=0x20) returned 0 [0212.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.643] GetLastError () returned 0x5 [0212.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF", dwFileAttributes=0x20) returned 0 [0212.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfe60) returned 1 Thread: id = 6956 os_tid = 0x23d0 [0206.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x20 [0212.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF", dwFileAttributes=0x20) returned 0 [0212.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.651] GetLastError () returned 0x5 [0212.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF", dwFileAttributes=0x20) returned 0 [0212.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 6957 os_tid = 0x23d4 [0206.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x20 [0212.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF", dwFileAttributes=0x20) returned 0 [0212.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.645] GetLastError () returned 0x5 [0212.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF", dwFileAttributes=0x20) returned 0 [0212.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 6958 os_tid = 0x23d8 [0206.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x20 [0212.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF", dwFileAttributes=0x20) returned 0 [0212.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.646] GetLastError () returned 0x5 [0212.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF", dwFileAttributes=0x20) returned 0 [0212.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 6959 os_tid = 0x23dc [0206.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x20 [0212.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF", dwFileAttributes=0x20) returned 0 [0212.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.647] GetLastError () returned 0x5 [0212.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF", dwFileAttributes=0x20) returned 0 [0212.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 6960 os_tid = 0x23e0 [0206.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl")) returned 0x20 [0212.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", dwFileAttributes=0x20) returned 0 [0212.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.222] GetLastError () returned 0x5 [0212.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", dwFileAttributes=0x20) returned 0 [0212.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 6961 os_tid = 0x23e4 [0206.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd")) returned 0x20 [0212.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", dwFileAttributes=0x20) returned 0 [0212.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.435] GetLastError () returned 0x5 [0212.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", dwFileAttributes=0x20) returned 0 [0212.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e88) returned 1 Thread: id = 6962 os_tid = 0x23e8 [0206.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css")) returned 0x20 [0212.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", dwFileAttributes=0x20) returned 0 [0212.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.434] GetLastError () returned 0x5 [0212.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", dwFileAttributes=0x20) returned 0 [0212.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 Thread: id = 6963 os_tid = 0x23ec [0206.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css")) returned 0x20 [0212.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", dwFileAttributes=0x20) returned 0 [0212.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.432] GetLastError () returned 0x5 [0212.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", dwFileAttributes=0x20) returned 0 [0212.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68768) returned 1 Thread: id = 6964 os_tid = 0x23f0 [0206.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css")) returned 0x20 [0212.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", dwFileAttributes=0x20) returned 0 [0212.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.431] GetLastError () returned 0x5 [0212.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", dwFileAttributes=0x20) returned 0 [0212.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5808) returned 1 Thread: id = 6965 os_tid = 0x23f4 [0206.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm")) returned 0x20 [0212.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", dwFileAttributes=0x20) returned 0 [0212.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.224] GetLastError () returned 0x5 [0212.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", dwFileAttributes=0x20) returned 0 [0212.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5a08) returned 1 Thread: id = 6966 os_tid = 0x23f8 [0206.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css")) returned 0x20 [0212.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", dwFileAttributes=0x20) returned 0 [0212.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.427] GetLastError () returned 0x5 [0212.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", dwFileAttributes=0x20) returned 0 [0212.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3f88) returned 1 Thread: id = 6967 os_tid = 0x23fc [0206.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css")) returned 0x20 [0212.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", dwFileAttributes=0x20) returned 0 [0212.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.430] GetLastError () returned 0x5 [0212.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", dwFileAttributes=0x20) returned 0 [0212.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5288) returned 1 Thread: id = 6968 os_tid = 0x2400 [0206.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css")) returned 0x20 [0212.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", dwFileAttributes=0x20) returned 0 [0212.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.428] GetLastError () returned 0x5 [0212.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", dwFileAttributes=0x20) returned 0 [0212.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 6969 os_tid = 0x2404 [0206.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl")) returned 0x20 [0212.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", dwFileAttributes=0x20) returned 0 [0212.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.426] GetLastError () returned 0x5 [0212.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", dwFileAttributes=0x20) returned 0 [0212.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 6970 os_tid = 0x2408 [0206.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl")) returned 0x20 [0212.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", dwFileAttributes=0x20) returned 0 [0212.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.424] GetLastError () returned 0x5 [0212.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", dwFileAttributes=0x20) returned 0 [0212.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689c0) returned 1 Thread: id = 6971 os_tid = 0x240c [0206.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd")) returned 0x20 [0212.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", dwFileAttributes=0x20) returned 0 [0212.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.423] GetLastError () returned 0x5 [0212.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", dwFileAttributes=0x20) returned 0 [0212.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4688) returned 1 Thread: id = 6972 os_tid = 0x2410 [0206.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vbaows10.chm")) returned 0x20 [0212.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM", dwFileAttributes=0x20) returned 0 [0212.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vbaows10.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.416] GetLastError () returned 0x5 [0212.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM", dwFileAttributes=0x20) returned 0 [0212.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 6973 os_tid = 0x2420 [0206.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll")) returned 0x20 [0212.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.408] GetLastError () returned 0x5 [0212.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 Thread: id = 6974 os_tid = 0x2448 [0206.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl")) returned 0x20 [0212.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", dwFileAttributes=0x20) returned 0 [0212.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.419] GetLastError () returned 0x5 [0212.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", dwFileAttributes=0x20) returned 0 [0212.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 6975 os_tid = 0x2650 [0206.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll")) returned 0x20 [0212.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.415] GetLastError () returned 0x5 [0212.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df2f8) returned 1 Thread: id = 6976 os_tid = 0x2210 [0206.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css")) returned 0x20 [0212.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", dwFileAttributes=0x20) returned 0 [0212.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.420] GetLastError () returned 0x5 [0212.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", dwFileAttributes=0x20) returned 0 [0212.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5b88) returned 1 Thread: id = 6977 os_tid = 0x24b0 [0206.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs")) returned 0x20 [0212.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", dwFileAttributes=0x20) returned 0 [0212.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.414] GetLastError () returned 0x5 [0212.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", dwFileAttributes=0x20) returned 0 [0212.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 6978 os_tid = 0x286c [0206.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc")) returned 0x20 [0212.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.406] GetLastError () returned 0x5 [0212.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 Thread: id = 6979 os_tid = 0x2870 [0206.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt")) returned 0x20 [0212.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.412] GetLastError () returned 0x5 [0212.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df388) returned 1 Thread: id = 6980 os_tid = 0x2874 [0206.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk")) returned 0x20 [0212.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.411] GetLastError () returned 0x5 [0212.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df268) returned 1 Thread: id = 6981 os_tid = 0x2878 [0206.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk")) returned 0x20 [0212.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.409] GetLastError () returned 0x5 [0212.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 Thread: id = 6982 os_tid = 0x2900 [0206.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs")) returned 0x20 [0212.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", dwFileAttributes=0x20) returned 0 [0212.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.421] GetLastError () returned 0x5 [0212.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", dwFileAttributes=0x20) returned 0 [0212.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5708) returned 1 Thread: id = 6983 os_tid = 0x2904 [0206.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst")) returned 0x20 [0210.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST", dwFileAttributes=0x20) returned 0 [0210.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.023] GetLastError () returned 0x5 [0210.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST", dwFileAttributes=0x20) returned 0 [0210.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db648) returned 1 Thread: id = 6984 os_tid = 0x2908 [0206.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss")) returned 0x20 [0206.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS", dwFileAttributes=0x20) returned 0 [0206.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.666] GetLastError () returned 0x5 [0206.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS", dwFileAttributes=0x20) returned 0 [0206.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 6985 os_tid = 0x290c [0206.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss")) returned 0x20 [0210.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS", dwFileAttributes=0x20) returned 0 [0210.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.025] GetLastError () returned 0x5 [0210.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS", dwFileAttributes=0x20) returned 0 [0210.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db968) returned 1 Thread: id = 6986 os_tid = 0x2910 [0206.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc")) returned 0x20 [0211.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC", dwFileAttributes=0x20) returned 0 [0211.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.715] GetLastError () returned 0x5 [0211.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC", dwFileAttributes=0x20) returned 0 [0211.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 6987 os_tid = 0x2914 [0206.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc")) returned 0x20 [0211.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC", dwFileAttributes=0x20) returned 0 [0211.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.717] GetLastError () returned 0x5 [0211.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC", dwFileAttributes=0x20) returned 0 [0211.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 6988 os_tid = 0x2918 [0206.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc")) returned 0x20 [0211.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC", dwFileAttributes=0x20) returned 0 [0211.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.718] GetLastError () returned 0x5 [0211.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC", dwFileAttributes=0x20) returned 0 [0211.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 6989 os_tid = 0x291c [0206.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc")) returned 0x20 [0210.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC", dwFileAttributes=0x20) returned 0 [0210.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.056] GetLastError () returned 0x5 [0210.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC", dwFileAttributes=0x20) returned 0 [0210.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 6990 os_tid = 0x2920 [0206.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc")) returned 0x20 [0211.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC", dwFileAttributes=0x20) returned 0 [0211.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.711] GetLastError () returned 0x5 [0211.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC", dwFileAttributes=0x20) returned 0 [0211.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 6991 os_tid = 0x2928 [0206.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx")) returned 0x20 [0216.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx", dwFileAttributes=0x20) returned 0 [0216.780] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.780] GetLastError () returned 0x5 [0216.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx", dwFileAttributes=0x20) returned 0 [0216.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6308) returned 1 Thread: id = 6992 os_tid = 0x292c [0206.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca")) returned 0x20 [0216.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca", dwFileAttributes=0x20) returned 0 [0216.703] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.703] GetLastError () returned 0x5 [0216.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca", dwFileAttributes=0x20) returned 0 [0216.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d63c8) returned 1 Thread: id = 6993 os_tid = 0x2930 [0206.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp")) returned 0x20 [0215.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp", dwFileAttributes=0x20) returned 0 [0215.290] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.265] GetLastError () returned 0x5 [0217.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp", dwFileAttributes=0x20) returned 0 [0217.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6488) returned 1 Thread: id = 6994 os_tid = 0x2934 [0206.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx")) returned 0x20 [0214.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx", dwFileAttributes=0x20) returned 0 [0214.156] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.267] GetLastError () returned 0x5 [0217.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx", dwFileAttributes=0x20) returned 0 [0217.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6548) returned 1 Thread: id = 6995 os_tid = 0x2938 [0206.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp")) returned 0x20 [0213.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp", dwFileAttributes=0x20) returned 0 [0215.288] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.062] GetLastError () returned 0x5 [0216.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp", dwFileAttributes=0x20) returned 0 [0217.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6608) returned 1 Thread: id = 6996 os_tid = 0x1ac0 [0206.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp")) returned 0x20 [0217.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp", dwFileAttributes=0x20) returned 0 [0217.297] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.298] GetLastError () returned 0x5 [0217.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp", dwFileAttributes=0x20) returned 0 [0217.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d66c8) returned 1 Thread: id = 6997 os_tid = 0x1b2c [0206.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex")) returned 0x20 [0217.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex", dwFileAttributes=0x20) returned 0 [0217.296] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.296] GetLastError () returned 0x5 [0217.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex", dwFileAttributes=0x20) returned 0 [0217.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83329f8) returned 1 Thread: id = 6998 os_tid = 0x1b38 [0206.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx")) returned 0x20 [0217.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx", dwFileAttributes=0x20) returned 0 [0217.405] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.405] GetLastError () returned 0x5 [0217.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx", dwFileAttributes=0x20) returned 0 [0217.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6788) returned 1 Thread: id = 6999 os_tid = 0x1b3c [0206.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env")) returned 0x20 [0217.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env", dwFileAttributes=0x20) returned 0 [0217.294] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.294] GetLastError () returned 0x5 [0217.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env", dwFileAttributes=0x20) returned 0 [0217.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332ac0) returned 1 Thread: id = 7000 os_tid = 0x1b40 [0206.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca")) returned 0x20 [0217.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca", dwFileAttributes=0x20) returned 0 [0217.292] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.293] GetLastError () returned 0x5 [0217.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca", dwFileAttributes=0x20) returned 0 [0217.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6848) returned 1 Thread: id = 7001 os_tid = 0x1b48 [0206.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp")) returned 0x20 [0217.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp", dwFileAttributes=0x20) returned 0 [0217.291] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.291] GetLastError () returned 0x5 [0217.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp", dwFileAttributes=0x20) returned 0 [0217.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6908) returned 1 Thread: id = 7002 os_tid = 0x1b4c [0206.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp")) returned 0x20 [0217.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp", dwFileAttributes=0x20) returned 0 [0217.289] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.289] GetLastError () returned 0x5 [0217.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp", dwFileAttributes=0x20) returned 0 [0217.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332b88) returned 1 Thread: id = 7003 os_tid = 0x1b50 [0206.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx")) returned 0x20 [0217.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx", dwFileAttributes=0x20) returned 0 [0217.287] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.287] GetLastError () returned 0x5 [0217.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx", dwFileAttributes=0x20) returned 0 [0217.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d69c8) returned 1 Thread: id = 7004 os_tid = 0x1b54 [0206.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca")) returned 0x20 [0217.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca", dwFileAttributes=0x20) returned 0 [0217.403] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.403] GetLastError () returned 0x5 [0217.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca", dwFileAttributes=0x20) returned 0 [0217.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6a88) returned 1 Thread: id = 7005 os_tid = 0x1b58 [0206.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp")) returned 0x20 [0217.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp", dwFileAttributes=0x20) returned 0 [0217.394] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.394] GetLastError () returned 0x5 [0217.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp", dwFileAttributes=0x20) returned 0 [0217.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6b48) returned 1 Thread: id = 7006 os_tid = 0x1b5c [0206.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp")) returned 0x20 [0217.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp", dwFileAttributes=0x20) returned 0 [0217.306] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.306] GetLastError () returned 0x5 [0217.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp", dwFileAttributes=0x20) returned 0 [0217.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332c50) returned 1 Thread: id = 7007 os_tid = 0x1b60 [0206.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx")) returned 0x20 [0217.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx", dwFileAttributes=0x20) returned 0 [0217.304] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.304] GetLastError () returned 0x5 [0217.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx", dwFileAttributes=0x20) returned 0 [0217.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6c08) returned 1 Thread: id = 7008 os_tid = 0x1bc4 [0206.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths")) returned 0x20 [0217.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths", dwFileAttributes=0x20) returned 0 [0217.302] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.303] GetLastError () returned 0x5 [0217.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths", dwFileAttributes=0x20) returned 0 [0217.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6cc8) returned 1 Thread: id = 7009 os_tid = 0x1ca0 [0206.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca")) returned 0x20 [0217.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca", dwFileAttributes=0x20) returned 0 [0217.435] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.435] GetLastError () returned 0x5 [0217.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca", dwFileAttributes=0x20) returned 0 [0217.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6d88) returned 1 Thread: id = 7010 os_tid = 0x1ca4 [0206.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp")) returned 0x20 [0217.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp", dwFileAttributes=0x20) returned 0 [0217.433] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.433] GetLastError () returned 0x5 [0217.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp", dwFileAttributes=0x20) returned 0 [0217.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6e48) returned 1 Thread: id = 7011 os_tid = 0x1ca8 [0206.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp")) returned 0x20 [0217.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp", dwFileAttributes=0x20) returned 0 [0217.431] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.431] GetLastError () returned 0x5 [0217.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp", dwFileAttributes=0x20) returned 0 [0217.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332d18) returned 1 Thread: id = 7012 os_tid = 0x1cac [0206.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx")) returned 0x20 [0217.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx", dwFileAttributes=0x20) returned 0 [0217.429] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.429] GetLastError () returned 0x5 [0217.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx", dwFileAttributes=0x20) returned 0 [0217.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6f08) returned 1 Thread: id = 7013 os_tid = 0x1cb4 [0206.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp")) returned 0x20 [0217.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp", dwFileAttributes=0x20) returned 0 [0217.427] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.427] GetLastError () returned 0x5 [0217.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp", dwFileAttributes=0x20) returned 0 [0217.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6fc8) returned 1 Thread: id = 7014 os_tid = 0x1d20 [0206.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex")) returned 0x20 [0217.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex", dwFileAttributes=0x20) returned 0 [0217.425] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.425] GetLastError () returned 0x5 [0217.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex", dwFileAttributes=0x20) returned 0 [0217.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332de0) returned 1 Thread: id = 7015 os_tid = 0x1d34 [0206.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx")) returned 0x20 [0217.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx", dwFileAttributes=0x20) returned 0 [0217.423] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.424] GetLastError () returned 0x5 [0217.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx", dwFileAttributes=0x20) returned 0 [0217.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7088) returned 1 Thread: id = 7016 os_tid = 0x1d48 [0206.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env")) returned 0x20 [0217.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env", dwFileAttributes=0x20) returned 0 [0217.422] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.422] GetLastError () returned 0x5 [0217.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env", dwFileAttributes=0x20) returned 0 [0217.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332ea8) returned 1 Thread: id = 7017 os_tid = 0x1d4c [0206.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca")) returned 0x20 [0217.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca", dwFileAttributes=0x20) returned 0 [0217.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.301] GetLastError () returned 0x5 [0217.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca", dwFileAttributes=0x20) returned 0 [0217.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7148) returned 1 Thread: id = 7018 os_tid = 0x1d64 [0206.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp")) returned 0x20 [0217.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp", dwFileAttributes=0x20) returned 0 [0217.299] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.299] GetLastError () returned 0x5 [0217.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp", dwFileAttributes=0x20) returned 0 [0217.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7208) returned 1 Thread: id = 7019 os_tid = 0x1e70 [0206.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp")) returned 0x20 [0217.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp", dwFileAttributes=0x20) returned 0 [0217.420] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.420] GetLastError () returned 0x5 [0217.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp", dwFileAttributes=0x20) returned 0 [0217.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d72c8) returned 1 Thread: id = 7020 os_tid = 0x1e74 [0206.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx")) returned 0x20 [0217.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx", dwFileAttributes=0x20) returned 0 [0217.418] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.418] GetLastError () returned 0x5 [0217.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx", dwFileAttributes=0x20) returned 0 [0217.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7388) returned 1 Thread: id = 7021 os_tid = 0x1e78 [0206.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths")) returned 0x20 [0217.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths", dwFileAttributes=0x20) returned 0 [0217.416] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.417] GetLastError () returned 0x5 [0217.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths", dwFileAttributes=0x20) returned 0 [0217.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7448) returned 1 Thread: id = 7022 os_tid = 0x1e80 [0206.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca")) returned 0x20 [0217.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca", dwFileAttributes=0x20) returned 0 [0217.415] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.415] GetLastError () returned 0x5 [0217.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca", dwFileAttributes=0x20) returned 0 [0217.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d7508) returned 1 Thread: id = 7023 os_tid = 0x1e84 Thread: id = 7024 os_tid = 0x1e88 [0206.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp")) returned 0x20 [0217.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp", dwFileAttributes=0x20) returned 0 [0217.413] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.413] GetLastError () returned 0x5 [0217.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp", dwFileAttributes=0x20) returned 0 [0217.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3648) returned 1 Thread: id = 7025 os_tid = 0x2bec [0206.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx")) returned 0x20 [0217.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx", dwFileAttributes=0x20) returned 0 [0217.411] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.411] GetLastError () returned 0x5 [0217.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx", dwFileAttributes=0x20) returned 0 [0217.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3708) returned 1 Thread: id = 7026 os_tid = 0x2c00 [0206.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp")) returned 0x20 [0217.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp", dwFileAttributes=0x20) returned 0 [0217.407] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.407] GetLastError () returned 0x5 [0217.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp", dwFileAttributes=0x20) returned 0 [0217.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f37c8) returned 1 Thread: id = 7027 os_tid = 0x2c78 [0206.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths")) returned 0x20 [0217.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths", dwFileAttributes=0x20) returned 0 [0217.463] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.463] GetLastError () returned 0x5 [0217.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths", dwFileAttributes=0x20) returned 0 [0217.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3888) returned 1 Thread: id = 7028 os_tid = 0x2c88 [0206.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif")) returned 0x20 [0212.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0212.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.404] GetLastError () returned 0x5 [0212.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0212.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332f70) returned 1 Thread: id = 7029 os_tid = 0x2c8c [0206.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20 [0212.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.383] GetLastError () returned 0x5 [0212.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c808) returned 1 Thread: id = 7030 os_tid = 0x2cac [0206.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20 [0212.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.385] GetLastError () returned 0x5 [0212.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333038) returned 1 Thread: id = 7031 os_tid = 0x2cc4 [0206.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif")) returned 0x20 [0212.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0212.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.386] GetLastError () returned 0x5 [0212.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0212.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1c738) returned 1 Thread: id = 7032 os_tid = 0x2cc8 [0206.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif")) returned 0x20 [0212.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.388] GetLastError () returned 0x5 [0212.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35410) returned 1 Thread: id = 7033 os_tid = 0x2d10 [0206.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif")) returned 0x20 [0212.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.389] GetLastError () returned 0x5 [0212.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35988) returned 1 Thread: id = 7034 os_tid = 0x2d14 [0206.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif")) returned 0x20 [0212.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.390] GetLastError () returned 0x5 [0212.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 7035 os_tid = 0x2d18 [0206.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif")) returned 0x20 [0212.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.392] GetLastError () returned 0x5 [0212.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 7036 os_tid = 0x2d1c [0206.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif")) returned 0x20 [0212.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0212.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.393] GetLastError () returned 0x5 [0212.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0212.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e354d8) returned 1 Thread: id = 7037 os_tid = 0x2d20 [0206.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif")) returned 0x20 [0212.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.395] GetLastError () returned 0x5 [0212.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 7038 os_tid = 0x2d24 [0206.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif")) returned 0x20 [0212.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.396] GetLastError () returned 0x5 [0212.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333228) returned 1 Thread: id = 7039 os_tid = 0x2d28 [0206.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif")) returned 0x20 [0212.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.398] GetLastError () returned 0x5 [0212.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3948) returned 1 Thread: id = 7040 os_tid = 0x2d2c [0206.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif")) returned 0x20 [0212.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0212.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.399] GetLastError () returned 0x5 [0212.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0212.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333100) returned 1 Thread: id = 7041 os_tid = 0x2d30 [0206.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif")) returned 0x20 [0212.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.400] GetLastError () returned 0x5 [0212.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3a08) returned 1 Thread: id = 7042 os_tid = 0x2d34 [0206.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif")) returned 0x20 [0212.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.402] GetLastError () returned 0x5 [0212.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3ac8) returned 1 Thread: id = 7043 os_tid = 0x2d38 [0206.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif")) returned 0x20 [0212.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.403] GetLastError () returned 0x5 [0212.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3b88) returned 1 Thread: id = 7046 os_tid = 0x1250 [0210.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss")) returned 0x20 [0210.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS", dwFileAttributes=0x20) returned 0 [0210.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.094] GetLastError () returned 0x5 [0210.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS", dwFileAttributes=0x20) returned 0 [0210.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 7047 os_tid = 0x18c0 [0211.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss")) returned 0x20 [0211.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS", dwFileAttributes=0x20) returned 0 [0211.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.549] GetLastError () returned 0x5 [0211.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS", dwFileAttributes=0x20) returned 0 [0211.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11468) returned 1 Thread: id = 7048 os_tid = 0x1d40 [0211.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss")) returned 0x20 [0211.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0211.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.551] GetLastError () returned 0x5 [0211.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0211.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11328) returned 1 Thread: id = 7049 os_tid = 0x1d54 [0211.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst")) returned 0x20 [0211.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST", dwFileAttributes=0x20) returned 0 [0211.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.554] GetLastError () returned 0x5 [0211.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST", dwFileAttributes=0x20) returned 0 [0211.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 7050 os_tid = 0x1d6c [0211.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss")) returned 0x20 [0211.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0211.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.556] GetLastError () returned 0x5 [0211.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0211.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 7051 os_tid = 0x1d70 [0211.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst")) returned 0x20 [0211.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST", dwFileAttributes=0x20) returned 0 [0211.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.787] GetLastError () returned 0x5 [0211.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST", dwFileAttributes=0x20) returned 0 [0211.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 Thread: id = 7052 os_tid = 0x1e1c [0211.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx")) returned 0x20 [0211.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", dwFileAttributes=0x20) returned 0 [0211.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.800] GetLastError () returned 0x5 [0211.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", dwFileAttributes=0x20) returned 0 [0211.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 Thread: id = 7053 os_tid = 0xfe4 [0211.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx")) returned 0x20 [0211.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", dwFileAttributes=0x20) returned 0 [0211.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.816] GetLastError () returned 0x5 [0211.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", dwFileAttributes=0x20) returned 0 [0211.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 7054 os_tid = 0x1d74 [0211.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx")) returned 0x20 [0211.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", dwFileAttributes=0x20) returned 0 [0211.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.835] GetLastError () returned 0x5 [0211.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", dwFileAttributes=0x20) returned 0 [0211.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d411a0) returned 1 Thread: id = 7055 os_tid = 0x2668 [0211.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca")) returned 0x20 [0217.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca", dwFileAttributes=0x20) returned 0 [0217.475] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.475] GetLastError () returned 0x5 [0217.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca", dwFileAttributes=0x20) returned 0 [0217.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5b88) returned 1 Thread: id = 7056 os_tid = 0x266c [0211.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp")) returned 0x20 [0217.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp", dwFileAttributes=0x20) returned 0 [0217.473] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.473] GetLastError () returned 0x5 [0217.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp", dwFileAttributes=0x20) returned 0 [0217.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5708) returned 1 Thread: id = 7057 os_tid = 0x2670 [0211.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp")) returned 0x20 [0217.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp", dwFileAttributes=0x20) returned 0 [0217.471] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.471] GetLastError () returned 0x5 [0217.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp", dwFileAttributes=0x20) returned 0 [0217.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83331c8) returned 1 Thread: id = 7058 os_tid = 0x2674 [0211.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx")) returned 0x20 [0217.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx", dwFileAttributes=0x20) returned 0 [0217.469] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.469] GetLastError () returned 0x5 [0217.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx", dwFileAttributes=0x20) returned 0 [0217.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d5ac8) returned 1 Thread: id = 7059 os_tid = 0x2678 [0211.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca")) returned 0x20 [0217.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca", dwFileAttributes=0x20) returned 0 [0217.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.467] GetLastError () returned 0x5 [0217.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca", dwFileAttributes=0x20) returned 0 [0217.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d60c8) returned 1 Thread: id = 7060 os_tid = 0x268c [0211.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp")) returned 0x20 [0217.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp", dwFileAttributes=0x20) returned 0 [0217.465] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.465] GetLastError () returned 0x5 [0217.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp", dwFileAttributes=0x20) returned 0 [0217.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d6008) returned 1 Thread: id = 7061 os_tid = 0x2690 [0211.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths")) returned 0x20 [0216.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths", dwFileAttributes=0x20) returned 0 [0216.064] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.064] GetLastError () returned 0x5 [0216.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths", dwFileAttributes=0x20) returned 0 [0216.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3c48) returned 1 Thread: id = 7062 os_tid = 0x2694 [0211.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp")) returned 0x20 [0217.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp", dwFileAttributes=0x20) returned 0 [0217.437] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.437] GetLastError () returned 0x5 [0217.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp", dwFileAttributes=0x20) returned 0 [0217.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3d08) returned 1 Thread: id = 7063 os_tid = 0x2698 [0211.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx")) returned 0x20 [0211.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", dwFileAttributes=0x20) returned 0 [0211.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.853] GetLastError () returned 0x5 [0211.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", dwFileAttributes=0x20) returned 0 [0211.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d680) returned 1 Thread: id = 7064 os_tid = 0x269c [0211.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx")) returned 0x20 [0211.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", dwFileAttributes=0x20) returned 0 [0211.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.868] GetLastError () returned 0x5 [0211.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", dwFileAttributes=0x20) returned 0 [0211.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 7065 os_tid = 0x26a0 [0211.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx")) returned 0x20 [0211.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", dwFileAttributes=0x20) returned 0 [0211.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.884] GetLastError () returned 0x5 [0211.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", dwFileAttributes=0x20) returned 0 [0211.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 Thread: id = 7066 os_tid = 0x26a4 [0211.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx")) returned 0x20 [0211.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", dwFileAttributes=0x20) returned 0 [0211.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.905] GetLastError () returned 0x5 [0211.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", dwFileAttributes=0x20) returned 0 [0211.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bcf8) returned 1 Thread: id = 7067 os_tid = 0x279c [0211.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx")) returned 0x20 [0211.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", dwFileAttributes=0x20) returned 0 [0211.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.920] GetLastError () returned 0x5 [0211.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", dwFileAttributes=0x20) returned 0 [0211.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11328) returned 1 Thread: id = 7068 os_tid = 0x27a8 [0211.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx")) returned 0x20 [0211.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", dwFileAttributes=0x20) returned 0 [0211.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.937] GetLastError () returned 0x5 [0211.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", dwFileAttributes=0x20) returned 0 [0211.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e29f48) returned 1 Thread: id = 7069 os_tid = 0x27c4 [0211.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx")) returned 0x20 [0211.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", dwFileAttributes=0x20) returned 0 [0211.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.958] GetLastError () returned 0x5 [0211.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", dwFileAttributes=0x20) returned 0 [0211.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11468) returned 1 Thread: id = 7070 os_tid = 0x27ec [0211.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx")) returned 0x20 [0212.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", dwFileAttributes=0x20) returned 0 [0212.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.463] GetLastError () returned 0x5 [0212.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", dwFileAttributes=0x20) returned 0 [0212.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d7d0) returned 1 Thread: id = 7071 os_tid = 0x294c [0211.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx")) returned 0x20 [0212.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", dwFileAttributes=0x20) returned 0 [0212.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.235] GetLastError () returned 0x5 [0212.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", dwFileAttributes=0x20) returned 0 [0212.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b378) returned 1 Thread: id = 7072 os_tid = 0x2950 [0211.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx")) returned 0x20 [0212.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", dwFileAttributes=0x20) returned 0 [0212.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.237] GetLastError () returned 0x5 [0212.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", dwFileAttributes=0x20) returned 0 [0212.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 Thread: id = 7073 os_tid = 0x2954 [0211.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx")) returned 0x20 [0212.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", dwFileAttributes=0x20) returned 0 [0212.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.453] GetLastError () returned 0x5 [0212.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", dwFileAttributes=0x20) returned 0 [0212.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2d098) returned 1 Thread: id = 7074 os_tid = 0x2958 [0211.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png")) returned 0x20 [0211.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", dwFileAttributes=0x20) returned 0 [0211.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.980] GetLastError () returned 0x5 [0211.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", dwFileAttributes=0x20) returned 0 [0211.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332930) returned 1 Thread: id = 7075 os_tid = 0x295c [0211.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif")) returned 0x20 [0211.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif", dwFileAttributes=0x20) returned 0 [0211.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.998] GetLastError () returned 0x5 [0211.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif", dwFileAttributes=0x20) returned 0 [0212.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333290) returned 1 Thread: id = 7076 os_tid = 0x2960 [0212.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif")) returned 0x20 [0212.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif", dwFileAttributes=0x20) returned 0 [0212.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.017] GetLastError () returned 0x5 [0212.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif", dwFileAttributes=0x20) returned 0 [0212.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333358) returned 1 Thread: id = 7077 os_tid = 0x2964 [0212.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png")) returned 0x20 [0212.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", dwFileAttributes=0x20) returned 0 [0212.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.033] GetLastError () returned 0x5 [0212.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", dwFileAttributes=0x20) returned 0 [0212.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333420) returned 1 Thread: id = 7078 os_tid = 0x2968 [0212.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif")) returned 0x20 [0212.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif", dwFileAttributes=0x20) returned 0 [0212.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.048] GetLastError () returned 0x5 [0212.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif", dwFileAttributes=0x20) returned 0 [0212.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81f3dc8) returned 1 Thread: id = 7079 os_tid = 0x296c [0212.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif")) returned 0x20 [0212.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif", dwFileAttributes=0x20) returned 0 [0212.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.064] GetLastError () returned 0x5 [0212.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif", dwFileAttributes=0x20) returned 0 [0212.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83334e8) returned 1 Thread: id = 7080 os_tid = 0x2970 [0212.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif")) returned 0x20 [0212.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif", dwFileAttributes=0x20) returned 0 [0212.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.094] GetLastError () returned 0x5 [0212.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif", dwFileAttributes=0x20) returned 0 [0212.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83335b0) returned 1 Thread: id = 7081 os_tid = 0x2974 [0212.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv")) returned 0x20 [0212.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV", dwFileAttributes=0x20) returned 0 [0212.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.100] GetLastError () returned 0x5 [0212.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV", dwFileAttributes=0x20) returned 0 [0212.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 Thread: id = 7082 os_tid = 0x2978 [0212.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml")) returned 0x20 [0212.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML", dwFileAttributes=0x20) returned 0 [0212.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.102] GetLastError () returned 0x5 [0212.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML", dwFileAttributes=0x20) returned 0 [0212.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 7083 os_tid = 0x297c [0212.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc")) returned 0x20 [0212.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC", dwFileAttributes=0x20) returned 0 [0212.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.104] GetLastError () returned 0x5 [0212.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC", dwFileAttributes=0x20) returned 0 [0212.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 7084 os_tid = 0x2a14 [0212.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc")) returned 0x20 [0212.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC", dwFileAttributes=0x20) returned 0 [0212.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.106] GetLastError () returned 0x5 [0212.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC", dwFileAttributes=0x20) returned 0 [0212.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 7085 os_tid = 0x1524 [0212.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc")) returned 0x20 [0212.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC", dwFileAttributes=0x20) returned 0 [0212.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.108] GetLastError () returned 0x5 [0212.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC", dwFileAttributes=0x20) returned 0 [0212.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 7086 os_tid = 0x1afc [0212.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc")) returned 0x20 [0212.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC", dwFileAttributes=0x20) returned 0 [0212.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.110] GetLastError () returned 0x5 [0212.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC", dwFileAttributes=0x20) returned 0 [0212.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 7087 os_tid = 0x1840 [0212.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc")) returned 0x20 [0213.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC", dwFileAttributes=0x20) returned 0 [0213.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.329] GetLastError () returned 0x5 [0213.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC", dwFileAttributes=0x20) returned 0 [0213.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 7088 os_tid = 0x1af8 [0212.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv")) returned 0x20 [0219.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV", dwFileAttributes=0x20) returned 0 [0219.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.987] GetLastError () returned 0x5 [0219.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV", dwFileAttributes=0x20) returned 0 [0219.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 7089 os_tid = 0x15f8 [0212.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc")) returned 0x20 [0213.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC", dwFileAttributes=0x20) returned 0 [0213.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.331] GetLastError () returned 0x5 [0213.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC", dwFileAttributes=0x20) returned 0 [0213.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 7090 os_tid = 0x2a88 [0212.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc")) returned 0x20 [0219.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC", dwFileAttributes=0x20) returned 0 [0219.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.942] GetLastError () returned 0x5 [0219.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC", dwFileAttributes=0x20) returned 0 [0219.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 7091 os_tid = 0x2a98 [0212.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc")) returned 0x20 [0219.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC", dwFileAttributes=0x20) returned 0 [0219.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.943] GetLastError () returned 0x5 [0219.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC", dwFileAttributes=0x20) returned 0 [0219.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 7092 os_tid = 0x278c [0212.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv")) returned 0x20 [0219.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV", dwFileAttributes=0x20) returned 0 [0219.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.945] GetLastError () returned 0x5 [0219.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV", dwFileAttributes=0x20) returned 0 [0219.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 7093 os_tid = 0x237c [0212.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml")) returned 0x20 [0219.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML", dwFileAttributes=0x20) returned 0 [0219.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.930] GetLastError () returned 0x5 [0219.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML", dwFileAttributes=0x20) returned 0 [0219.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 7094 os_tid = 0xf20 [0212.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc")) returned 0x20 [0219.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC", dwFileAttributes=0x20) returned 0 [0219.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.946] GetLastError () returned 0x5 [0219.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC", dwFileAttributes=0x20) returned 0 [0219.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 7095 os_tid = 0x12e4 [0212.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc")) returned 0x20 [0219.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC", dwFileAttributes=0x20) returned 0 [0219.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.932] GetLastError () returned 0x5 [0219.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC", dwFileAttributes=0x20) returned 0 [0219.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 7096 os_tid = 0x2f74 [0212.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc")) returned 0x20 [0219.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC", dwFileAttributes=0x20) returned 0 [0219.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.933] GetLastError () returned 0x5 [0219.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC", dwFileAttributes=0x20) returned 0 [0219.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 7097 os_tid = 0x2f78 [0212.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv")) returned 0x20 [0219.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV", dwFileAttributes=0x20) returned 0 [0219.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.935] GetLastError () returned 0x5 [0219.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV", dwFileAttributes=0x20) returned 0 [0219.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 7098 os_tid = 0x2f7c [0212.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml")) returned 0x20 [0219.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML", dwFileAttributes=0x20) returned 0 [0219.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.948] GetLastError () returned 0x5 [0219.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML", dwFileAttributes=0x20) returned 0 [0219.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 7099 os_tid = 0x2f80 [0212.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc")) returned 0x20 [0219.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC", dwFileAttributes=0x20) returned 0 [0219.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.950] GetLastError () returned 0x5 [0219.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC", dwFileAttributes=0x20) returned 0 [0219.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf888) returned 1 Thread: id = 7100 os_tid = 0x2f84 [0212.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc")) returned 0x20 [0219.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC", dwFileAttributes=0x20) returned 0 [0219.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.937] GetLastError () returned 0x5 [0219.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC", dwFileAttributes=0x20) returned 0 [0219.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 7101 os_tid = 0x2f88 [0212.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc")) returned 0x20 [0219.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC", dwFileAttributes=0x20) returned 0 [0219.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.939] GetLastError () returned 0x5 [0219.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC", dwFileAttributes=0x20) returned 0 [0219.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 7102 os_tid = 0x2f8c [0212.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv")) returned 0x20 [0219.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV", dwFileAttributes=0x20) returned 0 [0219.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.991] GetLastError () returned 0x5 [0219.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV", dwFileAttributes=0x20) returned 0 [0219.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def98) returned 1 Thread: id = 7103 os_tid = 0x2f90 [0212.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc")) returned 0x20 [0219.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC", dwFileAttributes=0x20) returned 0 [0219.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.989] GetLastError () returned 0x5 [0219.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC", dwFileAttributes=0x20) returned 0 [0219.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de698) returned 1 Thread: id = 7104 os_tid = 0x2f94 [0212.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc")) returned 0x20 [0219.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC", dwFileAttributes=0x20) returned 0 [0219.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.941] GetLastError () returned 0x5 [0219.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC", dwFileAttributes=0x20) returned 0 [0219.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be920) returned 1 Thread: id = 7105 os_tid = 0x2f98 [0212.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv")) returned 0x20 [0216.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV", dwFileAttributes=0x20) returned 0 [0216.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.676] GetLastError () returned 0x5 [0217.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV", dwFileAttributes=0x20) returned 0 [0217.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5508) returned 1 Thread: id = 7106 os_tid = 0x2f9c [0212.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml")) returned 0x20 [0219.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML", dwFileAttributes=0x20) returned 0 [0219.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.952] GetLastError () returned 0x5 [0219.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML", dwFileAttributes=0x20) returned 0 [0219.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4608) returned 1 Thread: id = 7107 os_tid = 0x2fa0 [0212.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst")) returned 0x20 [0212.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST", dwFileAttributes=0x20) returned 0 [0212.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.852] GetLastError () returned 0x5 [0212.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST", dwFileAttributes=0x20) returned 0 [0212.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 7108 os_tid = 0x2b40 [0212.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst")) returned 0x20 [0220.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST", dwFileAttributes=0x20) returned 0 [0220.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.103] GetLastError () returned 0x5 [0222.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST", dwFileAttributes=0x20) returned 0 [0222.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11468) returned 1 Thread: id = 7109 os_tid = 0x2fa4 [0212.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst")) returned 0x20 [0220.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST", dwFileAttributes=0x20) returned 0 [0220.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.103] GetLastError () returned 0x5 [0222.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST", dwFileAttributes=0x20) returned 0 [0222.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11328) returned 1 Thread: id = 7110 os_tid = 0x2fac [0212.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst")) returned 0x20 [0220.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST", dwFileAttributes=0x20) returned 0 [0220.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.102] GetLastError () returned 0x5 [0222.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST", dwFileAttributes=0x20) returned 0 [0222.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 7111 os_tid = 0x2fb0 [0212.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss")) returned 0x20 [0220.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS", dwFileAttributes=0x20) returned 0 [0220.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.102] GetLastError () returned 0x5 [0222.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS", dwFileAttributes=0x20) returned 0 [0222.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 7112 os_tid = 0x2fb4 [0212.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss")) returned 0x20 [0212.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS", dwFileAttributes=0x20) returned 0 [0212.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.850] GetLastError () returned 0x5 [0212.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS", dwFileAttributes=0x20) returned 0 [0212.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 Thread: id = 7113 os_tid = 0x2fb8 [0212.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss")) returned 0x20 [0220.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS", dwFileAttributes=0x20) returned 0 [0220.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.102] GetLastError () returned 0x5 [0222.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS", dwFileAttributes=0x20) returned 0 [0222.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 Thread: id = 7114 os_tid = 0x101c [0212.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss")) returned 0x20 [0214.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS", dwFileAttributes=0x20) returned 0 [0214.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.334] GetLastError () returned 0x5 [0215.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS", dwFileAttributes=0x20) returned 0 [0215.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 Thread: id = 7115 os_tid = 0x1024 [0212.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss")) returned 0x20 [0220.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS", dwFileAttributes=0x20) returned 0 [0220.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.103] GetLastError () returned 0x5 [0222.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS", dwFileAttributes=0x20) returned 0 [0222.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 7116 os_tid = 0x1064 [0212.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss")) returned 0x20 [0220.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS", dwFileAttributes=0x20) returned 0 [0220.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.103] GetLastError () returned 0x5 [0222.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS", dwFileAttributes=0x20) returned 0 [0222.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 Thread: id = 7117 os_tid = 0x11bc [0212.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss")) returned 0x20 [0220.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS", dwFileAttributes=0x20) returned 0 [0220.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.104] GetLastError () returned 0x5 [0222.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS", dwFileAttributes=0x20) returned 0 [0222.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11148) returned 1 Thread: id = 7118 os_tid = 0x1360 [0212.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss")) returned 0x20 [0216.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS", dwFileAttributes=0x20) returned 0 [0216.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.860] GetLastError () returned 0x5 [0217.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS", dwFileAttributes=0x20) returned 0 [0217.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 7119 os_tid = 0x10c8 [0212.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst")) returned 0x20 [0220.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST", dwFileAttributes=0x20) returned 0 [0220.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.104] GetLastError () returned 0x5 [0222.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST", dwFileAttributes=0x20) returned 0 [0222.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e111e8) returned 1 Thread: id = 7120 os_tid = 0x10d0 [0212.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss")) returned 0x20 [0220.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS", dwFileAttributes=0x20) returned 0 [0220.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.104] GetLastError () returned 0x5 [0222.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS", dwFileAttributes=0x20) returned 0 [0222.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 Thread: id = 7121 os_tid = 0x1110 [0212.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst")) returned 0x20 [0220.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST", dwFileAttributes=0x20) returned 0 [0220.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.104] GetLastError () returned 0x5 [0222.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST", dwFileAttributes=0x20) returned 0 [0222.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 Thread: id = 7122 os_tid = 0x93c [0212.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss")) returned 0x20 [0220.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS", dwFileAttributes=0x20) returned 0 [0220.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.104] GetLastError () returned 0x5 [0222.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS", dwFileAttributes=0x20) returned 0 [0222.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bdf8) returned 1 Thread: id = 7123 os_tid = 0x1114 [0212.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst")) returned 0x20 [0220.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST", dwFileAttributes=0x20) returned 0 [0220.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.105] GetLastError () returned 0x5 [0222.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST", dwFileAttributes=0x20) returned 0 [0222.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819adb8) returned 1 Thread: id = 7124 os_tid = 0xf10 [0212.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss")) returned 0x20 [0220.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS", dwFileAttributes=0x20) returned 0 [0220.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.105] GetLastError () returned 0x5 [0222.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS", dwFileAttributes=0x20) returned 0 [0222.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ad18) returned 1 Thread: id = 7125 os_tid = 0x150 [0212.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst")) returned 0x20 [0220.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST", dwFileAttributes=0x20) returned 0 [0220.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.826] GetLastError () returned 0x5 [0222.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST", dwFileAttributes=0x20) returned 0 [0222.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a9f8) returned 1 Thread: id = 7126 os_tid = 0x100c [0212.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss")) returned 0x20 [0220.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0220.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.075] GetLastError () returned 0x5 [0222.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0222.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a638) returned 1 Thread: id = 7127 os_tid = 0x135c [0212.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss")) returned 0x20 [0220.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0220.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.103] GetLastError () returned 0x5 [0222.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0222.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a598) returned 1 Thread: id = 7128 os_tid = 0x2dc0 [0212.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx")) returned 0x20 [0220.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX", dwFileAttributes=0x20) returned 0 [0220.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.288] GetLastError () returned 0x5 [0223.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX", dwFileAttributes=0x20) returned 0 [0223.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ab38) returned 1 Thread: id = 7129 os_tid = 0x2dc4 [0212.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx")) returned 0x20 [0220.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX", dwFileAttributes=0x20) returned 0 [0220.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.070] GetLastError () returned 0x5 [0222.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX", dwFileAttributes=0x20) returned 0 [0222.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819abd8) returned 1 Thread: id = 7130 os_tid = 0x2dc8 [0212.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss")) returned 0x20 [0220.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS", dwFileAttributes=0x20) returned 0 [0220.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.101] GetLastError () returned 0x5 [0222.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS", dwFileAttributes=0x20) returned 0 [0222.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bf38) returned 1 Thread: id = 7131 os_tid = 0x2dcc [0212.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst")) returned 0x20 [0220.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST", dwFileAttributes=0x20) returned 0 [0220.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.101] GetLastError () returned 0x5 [0222.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST", dwFileAttributes=0x20) returned 0 [0222.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b038) returned 1 Thread: id = 7132 os_tid = 0x2dd0 [0212.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss")) returned 0x20 [0220.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS", dwFileAttributes=0x20) returned 0 [0220.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.102] GetLastError () returned 0x5 [0222.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS", dwFileAttributes=0x20) returned 0 [0222.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bcb8) returned 1 Thread: id = 7133 os_tid = 0x2dd4 [0212.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst")) returned 0x20 [0220.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST", dwFileAttributes=0x20) returned 0 [0220.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.102] GetLastError () returned 0x5 [0222.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST", dwFileAttributes=0x20) returned 0 [0222.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a458) returned 1 Thread: id = 7134 os_tid = 0x2dd8 [0212.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss")) returned 0x20 [0212.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS", dwFileAttributes=0x20) returned 0 [0212.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.853] GetLastError () returned 0x5 [0212.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS", dwFileAttributes=0x20) returned 0 [0212.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c2f8) returned 1 Thread: id = 7135 os_tid = 0x2ddc [0212.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini")) returned 0x20 [0217.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", dwFileAttributes=0x20) returned 0 [0217.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.740] GetLastError () returned 0x5 [0217.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", dwFileAttributes=0x20) returned 0 [0217.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a078) returned 1 Thread: id = 7136 os_tid = 0x2de0 [0212.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css")) returned 0x20 [0217.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", dwFileAttributes=0x20) returned 0 [0217.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.738] GetLastError () returned 0x5 [0217.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", dwFileAttributes=0x20) returned 0 [0217.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e29f48) returned 1 Thread: id = 7137 os_tid = 0x2dec [0212.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css")) returned 0x20 [0217.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", dwFileAttributes=0x20) returned 0 [0217.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.741] GetLastError () returned 0x5 [0217.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", dwFileAttributes=0x20) returned 0 [0217.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bcf8) returned 1 Thread: id = 7138 os_tid = 0x2e38 [0212.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css")) returned 0x20 [0215.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", dwFileAttributes=0x20) returned 0 [0215.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.773] GetLastError () returned 0x5 [0216.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", dwFileAttributes=0x20) returned 0 [0216.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 Thread: id = 7139 os_tid = 0x2e3c [0212.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css")) returned 0x20 [0217.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", dwFileAttributes=0x20) returned 0 [0217.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.785] GetLastError () returned 0x5 [0217.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", dwFileAttributes=0x20) returned 0 [0217.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b968) returned 1 Thread: id = 7140 os_tid = 0x2e40 [0212.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css")) returned 0x20 [0217.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", dwFileAttributes=0x20) returned 0 [0217.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.783] GetLastError () returned 0x5 [0217.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", dwFileAttributes=0x20) returned 0 [0217.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bbc8) returned 1 Thread: id = 7141 os_tid = 0x2e48 [0212.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css")) returned 0x20 [0217.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", dwFileAttributes=0x20) returned 0 [0217.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.780] GetLastError () returned 0x5 [0217.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", dwFileAttributes=0x20) returned 0 [0217.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a798) returned 1 Thread: id = 7142 os_tid = 0x2ea4 [0212.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css")) returned 0x20 [0217.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", dwFileAttributes=0x20) returned 0 [0217.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.778] GetLastError () returned 0x5 [0217.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", dwFileAttributes=0x20) returned 0 [0217.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ba98) returned 1 Thread: id = 7143 os_tid = 0x2f60 [0212.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css")) returned 0x20 [0217.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", dwFileAttributes=0x20) returned 0 [0217.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.776] GetLastError () returned 0x5 [0217.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", dwFileAttributes=0x20) returned 0 [0217.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ac58) returned 1 Thread: id = 7144 os_tid = 0x2f64 [0212.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css")) returned 0x20 [0217.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", dwFileAttributes=0x20) returned 0 [0217.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.774] GetLastError () returned 0x5 [0217.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", dwFileAttributes=0x20) returned 0 [0217.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a2d8) returned 1 Thread: id = 7145 os_tid = 0x14bc [0212.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css")) returned 0x20 [0217.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", dwFileAttributes=0x20) returned 0 [0217.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.772] GetLastError () returned 0x5 [0217.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", dwFileAttributes=0x20) returned 0 [0217.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a830) returned 1 Thread: id = 7146 os_tid = 0x1648 [0212.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css")) returned 0x20 [0217.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", dwFileAttributes=0x20) returned 0 [0217.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.770] GetLastError () returned 0x5 [0217.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", dwFileAttributes=0x20) returned 0 [0217.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ab28) returned 1 Thread: id = 7147 os_tid = 0x1338 [0212.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css")) returned 0x20 [0217.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", dwFileAttributes=0x20) returned 0 [0217.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.768] GetLastError () returned 0x5 [0217.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", dwFileAttributes=0x20) returned 0 [0217.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a8c8) returned 1 Thread: id = 7148 os_tid = 0x167c [0212.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css")) returned 0x20 [0217.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", dwFileAttributes=0x20) returned 0 [0217.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.766] GetLastError () returned 0x5 [0217.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", dwFileAttributes=0x20) returned 0 [0217.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a700) returned 1 Thread: id = 7149 os_tid = 0x1220 [0212.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css")) returned 0x20 [0217.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", dwFileAttributes=0x20) returned 0 [0217.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.787] GetLastError () returned 0x5 [0217.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", dwFileAttributes=0x20) returned 0 [0217.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a4a0) returned 1 Thread: id = 7150 os_tid = 0x1008 [0212.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css")) returned 0x20 [0217.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", dwFileAttributes=0x20) returned 0 [0217.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.765] GetLastError () returned 0x5 [0217.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", dwFileAttributes=0x20) returned 0 [0217.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a240) returned 1 Thread: id = 7151 os_tid = 0x1228 [0212.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css")) returned 0x20 [0217.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", dwFileAttributes=0x20) returned 0 [0217.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.763] GetLastError () returned 0x5 [0217.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", dwFileAttributes=0x20) returned 0 [0217.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bd90) returned 1 Thread: id = 7152 os_tid = 0x13ac [0212.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css")) returned 0x20 [0217.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", dwFileAttributes=0x20) returned 0 [0217.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.761] GetLastError () returned 0x5 [0217.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", dwFileAttributes=0x20) returned 0 [0217.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b2e0) returned 1 Thread: id = 7153 os_tid = 0x13b0 [0212.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css")) returned 0x20 [0217.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", dwFileAttributes=0x20) returned 0 [0217.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.759] GetLastError () returned 0x5 [0217.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", dwFileAttributes=0x20) returned 0 [0217.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2af50) returned 1 Thread: id = 7154 os_tid = 0x13c8 [0212.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css")) returned 0x20 [0217.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", dwFileAttributes=0x20) returned 0 [0217.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.758] GetLastError () returned 0x5 [0217.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", dwFileAttributes=0x20) returned 0 [0217.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bc60) returned 1 Thread: id = 7155 os_tid = 0x13cc [0212.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css")) returned 0x20 [0217.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", dwFileAttributes=0x20) returned 0 [0217.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.756] GetLastError () returned 0x5 [0217.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", dwFileAttributes=0x20) returned 0 [0217.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c5c8) returned 1 Thread: id = 7156 os_tid = 0x152c [0212.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css")) returned 0x20 [0217.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", dwFileAttributes=0x20) returned 0 [0217.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.754] GetLastError () returned 0x5 [0217.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", dwFileAttributes=0x20) returned 0 [0217.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 7157 os_tid = 0x128c [0212.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css")) returned 0x20 [0217.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", dwFileAttributes=0x20) returned 0 [0217.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.752] GetLastError () returned 0x5 [0217.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", dwFileAttributes=0x20) returned 0 [0217.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 7158 os_tid = 0x1290 [0212.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css")) returned 0x20 [0217.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", dwFileAttributes=0x20) returned 0 [0217.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.750] GetLastError () returned 0x5 [0217.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", dwFileAttributes=0x20) returned 0 [0217.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 7159 os_tid = 0x1294 [0212.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css")) returned 0x20 [0217.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", dwFileAttributes=0x20) returned 0 [0217.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.748] GetLastError () returned 0x5 [0217.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", dwFileAttributes=0x20) returned 0 [0217.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c828) returned 1 Thread: id = 7160 os_tid = 0x1298 [0212.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css")) returned 0x20 [0217.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", dwFileAttributes=0x20) returned 0 [0217.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.746] GetLastError () returned 0x5 [0217.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", dwFileAttributes=0x20) returned 0 [0217.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 7161 os_tid = 0x129c [0212.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css")) returned 0x20 [0217.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", dwFileAttributes=0x20) returned 0 [0217.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.745] GetLastError () returned 0x5 [0217.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", dwFileAttributes=0x20) returned 0 [0217.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cbb8) returned 1 Thread: id = 7162 os_tid = 0x1408 [0212.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css")) returned 0x20 [0217.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", dwFileAttributes=0x20) returned 0 [0217.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.743] GetLastError () returned 0x5 [0217.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", dwFileAttributes=0x20) returned 0 [0217.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 7163 os_tid = 0x14a0 [0212.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css")) returned 0x20 [0217.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", dwFileAttributes=0x20) returned 0 [0217.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.701] GetLastError () returned 0x5 [0217.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", dwFileAttributes=0x20) returned 0 [0217.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 7164 os_tid = 0xe7c [0212.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css")) returned 0x20 [0217.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", dwFileAttributes=0x20) returned 0 [0217.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.789] GetLastError () returned 0x5 [0217.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", dwFileAttributes=0x20) returned 0 [0217.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c958) returned 1 Thread: id = 7165 os_tid = 0xe68 [0212.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs")) returned 0x20 [0212.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", dwFileAttributes=0x20) returned 0 [0212.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.486] GetLastError () returned 0x5 [0212.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", dwFileAttributes=0x20) returned 0 [0212.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b7a0) returned 1 Thread: id = 7166 os_tid = 0x1140 [0212.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc")) returned 0x20 [0212.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.488] GetLastError () returned 0x5 [0212.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b858) returned 1 Thread: id = 7167 os_tid = 0x1728 [0212.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt")) returned 0x20 [0212.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.490] GetLastError () returned 0x5 [0212.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b8f8) returned 1 Thread: id = 7168 os_tid = 0x1798 [0212.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk")) returned 0x20 [0212.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.491] GetLastError () returned 0x5 [0212.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c258) returned 1 Thread: id = 7169 os_tid = 0x179c [0212.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk")) returned 0x20 [0212.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.493] GetLastError () returned 0x5 [0212.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac78) returned 1 Thread: id = 7170 os_tid = 0x17b0 [0212.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc")) returned 0x20 [0212.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.500] GetLastError () returned 0x5 [0212.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 7171 os_tid = 0x10b4 [0212.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt")) returned 0x20 [0212.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.501] GetLastError () returned 0x5 [0212.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc98) returned 1 Thread: id = 7172 os_tid = 0x16cc [0212.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk")) returned 0x20 [0212.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.512] GetLastError () returned 0x5 [0212.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 7173 os_tid = 0x10cc [0212.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk")) returned 0x20 [0212.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.514] GetLastError () returned 0x5 [0212.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 7174 os_tid = 0x16f8 [0212.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs")) returned 0x20 [0212.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", dwFileAttributes=0x20) returned 0 [0212.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.516] GetLastError () returned 0x5 [0212.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", dwFileAttributes=0x20) returned 0 [0212.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 7175 os_tid = 0x227c [0212.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc")) returned 0x20 [0212.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.518] GetLastError () returned 0x5 [0212.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de4e8) returned 1 Thread: id = 7176 os_tid = 0xe4c [0212.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt")) returned 0x20 [0212.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.520] GetLastError () returned 0x5 [0212.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de458) returned 1 Thread: id = 7177 os_tid = 0x1820 [0212.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk")) returned 0x20 [0212.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.522] GetLastError () returned 0x5 [0212.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de0f8) returned 1 Thread: id = 7178 os_tid = 0x19ec [0212.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk")) returned 0x20 [0212.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.524] GetLastError () returned 0x5 [0212.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 7179 os_tid = 0x19f8 [0212.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs")) returned 0x20 [0212.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", dwFileAttributes=0x20) returned 0 [0212.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.526] GetLastError () returned 0x5 [0212.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", dwFileAttributes=0x20) returned 0 [0212.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 7180 os_tid = 0x1a00 [0212.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc")) returned 0x20 [0212.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.527] GetLastError () returned 0x5 [0212.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddeb8) returned 1 Thread: id = 7181 os_tid = 0x1668 [0212.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt")) returned 0x20 [0212.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.529] GetLastError () returned 0x5 [0212.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 Thread: id = 7182 os_tid = 0x11f8 [0212.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk")) returned 0x20 [0212.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.536] GetLastError () returned 0x5 [0212.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 Thread: id = 7183 os_tid = 0x1c30 [0212.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk")) returned 0x20 [0212.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.544] GetLastError () returned 0x5 [0212.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 Thread: id = 7184 os_tid = 0x1740 [0212.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl")) returned 0x20 [0212.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", dwFileAttributes=0x20) returned 0 [0212.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.546] GetLastError () returned 0x5 [0212.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", dwFileAttributes=0x20) returned 0 [0212.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 Thread: id = 7185 os_tid = 0x1cc8 [0212.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl")) returned 0x20 [0212.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", dwFileAttributes=0x20) returned 0 [0212.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.549] GetLastError () returned 0x5 [0212.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", dwFileAttributes=0x20) returned 0 [0212.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5a08) returned 1 Thread: id = 7186 os_tid = 0x1d88 [0212.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x8403038 [0212.555] wcscpy (in: _Dest=0x8403038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" [0212.555] wcscat (in: _Dest=0x8403038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\" [0212.555] wcscat (in: _Dest=0x8403038, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*" [0212.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f0aac8 [0212.555] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa55faf30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0212.556] wcscmp (_String1=".", _String2=".") returned 0 [0212.556] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa55faf30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.556] wcscmp (_String1="..", _String2=".") returned 1 [0212.556] wcscmp (_String1="..", _String2="..") returned 0 [0212.556] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede67600, ftCreationTime.dwHighDateTime=0x1c3051d, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xede67600, ftLastWriteTime.dwHighDateTime=0x1c3051d, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 1 [0212.556] wcscmp (_String1="Visfilem.vsdir", _String2=".") returned 1 [0212.556] wcscmp (_String1="Visfilem.vsdir", _String2="..") returned 1 [0212.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e2b7a0 [0212.556] wcscpy (in: _Dest=0x3e2b7a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" [0212.556] wcscat (in: _Dest=0x3e2b7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\" [0212.556] wcscat (in: _Dest=0x3e2b7a0, _Source="Visfilem.vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" [0212.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5840, lpParameter=0x3e2b7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0212.749] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f0aac8 | out: lpFindFileData=0x3f0aac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede67600, ftCreationTime.dwHighDateTime=0x1c3051d, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xede67600, ftLastWriteTime.dwHighDateTime=0x1c3051d, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 0 [0212.749] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0212.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f0aac8) returned 1 [0212.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403038) returned 1 [0212.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403308) returned 1 Thread: id = 7187 os_tid = 0x1dcc [0212.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd")) returned 0x20 [0213.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", dwFileAttributes=0x20) returned 0 [0213.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.026] GetLastError () returned 0x5 [0213.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", dwFileAttributes=0x20) returned 0 [0213.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 7188 os_tid = 0x1dd0 [0212.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml")) returned 0x20 [0213.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", dwFileAttributes=0x20) returned 0 [0213.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.028] GetLastError () returned 0x5 [0213.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", dwFileAttributes=0x20) returned 0 [0213.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 7189 os_tid = 0x1dd4 [0212.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd")) returned 0x20 [0213.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", dwFileAttributes=0x20) returned 0 [0213.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.029] GetLastError () returned 0x5 [0213.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", dwFileAttributes=0x20) returned 0 [0213.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 7190 os_tid = 0x1dd8 [0212.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs")) returned 0x20 [0212.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", dwFileAttributes=0x20) returned 0 [0212.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.985] GetLastError () returned 0x5 [0212.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", dwFileAttributes=0x20) returned 0 [0212.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 7191 os_tid = 0x1ddc [0212.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc")) returned 0x20 [0212.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.983] GetLastError () returned 0x5 [0212.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 Thread: id = 7192 os_tid = 0x1de4 [0212.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x20 [0212.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF", dwFileAttributes=0x20) returned 0 [0212.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.682] GetLastError () returned 0x5 [0212.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF", dwFileAttributes=0x20) returned 0 [0212.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf998) returned 1 Thread: id = 7193 os_tid = 0x1de8 [0212.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x20 [0222.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF", dwFileAttributes=0x20) returned 0 [0222.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.116] GetLastError () returned 0x5 [0223.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF", dwFileAttributes=0x20) returned 0 [0223.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 Thread: id = 7194 os_tid = 0x1dec [0212.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x20 [0213.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF", dwFileAttributes=0x20) returned 0 [0213.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.400] GetLastError () returned 0x5 [0215.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF", dwFileAttributes=0x20) returned 0 [0215.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 7195 os_tid = 0x1df0 [0212.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x20 [0222.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF", dwFileAttributes=0x20) returned 0 [0222.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.146] GetLastError () returned 0x5 [0223.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF", dwFileAttributes=0x20) returned 0 [0223.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 7196 os_tid = 0x1e00 [0212.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x20 [0222.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF", dwFileAttributes=0x20) returned 0 [0222.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.147] GetLastError () returned 0x5 [0223.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF", dwFileAttributes=0x20) returned 0 [0223.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 7197 os_tid = 0x1e04 [0212.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid")) returned 0x20 [0222.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID", dwFileAttributes=0x20) returned 0 [0222.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.148] GetLastError () returned 0x5 [0223.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID", dwFileAttributes=0x20) returned 0 [0223.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 7198 os_tid = 0x1e08 [0212.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid")) returned 0x20 [0222.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID", dwFileAttributes=0x20) returned 0 [0222.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.125] GetLastError () returned 0x5 [0223.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID", dwFileAttributes=0x20) returned 0 [0223.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc98) returned 1 Thread: id = 7199 os_tid = 0x1e0c [0212.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf")) returned 0x20 [0222.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF", dwFileAttributes=0x20) returned 0 [0222.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.126] GetLastError () returned 0x5 [0223.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF", dwFileAttributes=0x20) returned 0 [0223.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5a08) returned 1 Thread: id = 7200 os_tid = 0x1e10 [0212.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid")) returned 0x20 [0222.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID", dwFileAttributes=0x20) returned 0 [0222.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.127] GetLastError () returned 0x5 [0223.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID", dwFileAttributes=0x20) returned 0 [0223.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 7201 os_tid = 0x1e14 [0212.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid")) returned 0x20 [0222.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID", dwFileAttributes=0x20) returned 0 [0222.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.129] GetLastError () returned 0x5 [0223.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID", dwFileAttributes=0x20) returned 0 [0223.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f418) returned 1 Thread: id = 7202 os_tid = 0x1e18 [0212.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x20 [0222.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF", dwFileAttributes=0x20) returned 0 [0222.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.117] GetLastError () returned 0x5 [0223.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF", dwFileAttributes=0x20) returned 0 [0223.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30408) returned 1 Thread: id = 7203 os_tid = 0x1e20 [0212.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x20 [0222.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF", dwFileAttributes=0x20) returned 0 [0222.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.120] GetLastError () returned 0x5 [0223.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF", dwFileAttributes=0x20) returned 0 [0223.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30050) returned 1 Thread: id = 7204 os_tid = 0x1e24 [0212.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x20 [0222.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF", dwFileAttributes=0x20) returned 0 [0222.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.121] GetLastError () returned 0x5 [0223.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF", dwFileAttributes=0x20) returned 0 [0223.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 Thread: id = 7205 os_tid = 0x1e28 [0212.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x20 [0222.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF", dwFileAttributes=0x20) returned 0 [0222.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.122] GetLastError () returned 0x5 [0223.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF", dwFileAttributes=0x20) returned 0 [0223.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 7206 os_tid = 0x1e2c [0212.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x20 [0222.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF", dwFileAttributes=0x20) returned 0 [0222.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.124] GetLastError () returned 0x5 [0223.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF", dwFileAttributes=0x20) returned 0 [0223.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 7207 os_tid = 0x1e30 [0212.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x20 [0222.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF", dwFileAttributes=0x20) returned 0 [0222.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.102] GetLastError () returned 0x5 [0223.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF", dwFileAttributes=0x20) returned 0 [0223.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31370) returned 1 Thread: id = 7208 os_tid = 0x1e34 [0212.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x20 [0222.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF", dwFileAttributes=0x20) returned 0 [0222.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.103] GetLastError () returned 0x5 [0223.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF", dwFileAttributes=0x20) returned 0 [0223.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c00) returned 1 Thread: id = 7209 os_tid = 0x1e38 [0212.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x20 [0222.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF", dwFileAttributes=0x20) returned 0 [0222.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.104] GetLastError () returned 0x5 [0223.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF", dwFileAttributes=0x20) returned 0 [0223.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 7210 os_tid = 0x1e3c [0212.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x20 [0222.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF", dwFileAttributes=0x20) returned 0 [0222.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.105] GetLastError () returned 0x5 [0223.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF", dwFileAttributes=0x20) returned 0 [0223.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 7211 os_tid = 0x1e40 [0212.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x20 [0222.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF", dwFileAttributes=0x20) returned 0 [0222.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.106] GetLastError () returned 0x5 [0223.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF", dwFileAttributes=0x20) returned 0 [0223.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 Thread: id = 7212 os_tid = 0x1e44 [0212.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x20 [0222.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF", dwFileAttributes=0x20) returned 0 [0222.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.107] GetLastError () returned 0x5 [0223.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF", dwFileAttributes=0x20) returned 0 [0223.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f301e8) returned 1 Thread: id = 7213 os_tid = 0x1e48 [0212.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x20 [0222.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF", dwFileAttributes=0x20) returned 0 [0222.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.108] GetLastError () returned 0x5 [0223.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF", dwFileAttributes=0x20) returned 0 [0223.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2feb8) returned 1 Thread: id = 7214 os_tid = 0x1e50 [0212.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x20 [0222.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF", dwFileAttributes=0x20) returned 0 [0222.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.109] GetLastError () returned 0x5 [0223.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF", dwFileAttributes=0x20) returned 0 [0223.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30160) returned 1 Thread: id = 7215 os_tid = 0x1e54 [0212.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x20 [0222.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF", dwFileAttributes=0x20) returned 0 [0222.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.111] GetLastError () returned 0x5 [0223.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF", dwFileAttributes=0x20) returned 0 [0223.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f5b0) returned 1 Thread: id = 7216 os_tid = 0x1e58 [0212.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x20 [0222.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF", dwFileAttributes=0x20) returned 0 [0222.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.112] GetLastError () returned 0x5 [0223.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF", dwFileAttributes=0x20) returned 0 [0223.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 7217 os_tid = 0x1e5c [0212.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x20 [0222.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF", dwFileAttributes=0x20) returned 0 [0222.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.113] GetLastError () returned 0x5 [0223.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF", dwFileAttributes=0x20) returned 0 [0223.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f9f0) returned 1 Thread: id = 7218 os_tid = 0x1e60 [0212.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x20 [0222.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF", dwFileAttributes=0x20) returned 0 [0222.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.130] GetLastError () returned 0x5 [0223.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF", dwFileAttributes=0x20) returned 0 [0223.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 7219 os_tid = 0x1fdc [0212.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x20 [0217.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF", dwFileAttributes=0x20) returned 0 [0217.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.816] GetLastError () returned 0x5 [0217.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF", dwFileAttributes=0x20) returned 0 [0217.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f305a0) returned 1 Thread: id = 7220 os_tid = 0x2130 [0212.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x20 [0215.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF", dwFileAttributes=0x20) returned 0 [0215.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.000] GetLastError () returned 0x5 [0220.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF", dwFileAttributes=0x20) returned 0 [0220.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 Thread: id = 7221 os_tid = 0x216c [0212.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x20 [0220.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF", dwFileAttributes=0x20) returned 0 [0220.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.062] GetLastError () returned 0x5 [0222.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF", dwFileAttributes=0x20) returned 0 [0222.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f858) returned 1 Thread: id = 7222 os_tid = 0x21e8 [0212.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x20 [0220.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF", dwFileAttributes=0x20) returned 0 [0220.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.063] GetLastError () returned 0x5 [0222.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF", dwFileAttributes=0x20) returned 0 [0222.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc10) returned 1 Thread: id = 7223 os_tid = 0x231c [0212.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x20 [0222.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF", dwFileAttributes=0x20) returned 0 [0222.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.118] GetLastError () returned 0x5 [0223.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF", dwFileAttributes=0x20) returned 0 [0223.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 7224 os_tid = 0x2320 [0212.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x20 [0220.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF", dwFileAttributes=0x20) returned 0 [0220.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.064] GetLastError () returned 0x5 [0222.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF", dwFileAttributes=0x20) returned 0 [0222.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 7225 os_tid = 0x2324 [0212.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x20 [0222.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF", dwFileAttributes=0x20) returned 0 [0222.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.115] GetLastError () returned 0x5 [0223.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF", dwFileAttributes=0x20) returned 0 [0223.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30518) returned 1 Thread: id = 7226 os_tid = 0x2328 [0212.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css")) returned 0x20 [0217.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", dwFileAttributes=0x20) returned 0 [0217.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.793] GetLastError () returned 0x5 [0217.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", dwFileAttributes=0x20) returned 0 [0217.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 Thread: id = 7227 os_tid = 0x232c [0212.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css")) returned 0x20 [0217.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", dwFileAttributes=0x20) returned 0 [0217.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.262] GetLastError () returned 0x5 [0217.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", dwFileAttributes=0x20) returned 0 [0217.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 Thread: id = 7228 os_tid = 0x2330 [0212.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css")) returned 0x20 [0217.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", dwFileAttributes=0x20) returned 0 [0217.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.687] GetLastError () returned 0x5 [0217.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", dwFileAttributes=0x20) returned 0 [0217.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b378) returned 1 Thread: id = 7229 os_tid = 0x2344 [0212.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini")) returned 0x20 [0213.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", dwFileAttributes=0x20) returned 0 [0213.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.479] GetLastError () returned 0x5 [0213.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", dwFileAttributes=0x20) returned 0 [0213.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 Thread: id = 7230 os_tid = 0x2348 [0212.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif")) returned 0x20 [0213.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0213.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.481] GetLastError () returned 0x5 [0213.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0213.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 7231 os_tid = 0x234c [0212.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif")) returned 0x20 [0213.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0213.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.482] GetLastError () returned 0x5 [0213.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0213.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ce18) returned 1 Thread: id = 7232 os_tid = 0x2350 [0212.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif")) returned 0x20 [0213.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0213.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.483] GetLastError () returned 0x5 [0213.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0213.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 Thread: id = 7233 os_tid = 0x2354 [0212.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif")) returned 0x20 [0213.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0213.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.485] GetLastError () returned 0x5 [0213.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0213.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c8c0) returned 1 Thread: id = 7234 os_tid = 0x2358 [0212.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif")) returned 0x20 [0213.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0213.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.486] GetLastError () returned 0x5 [0213.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0213.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 7235 os_tid = 0x235c [0212.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif")) returned 0x20 [0213.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0213.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.487] GetLastError () returned 0x5 [0213.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0213.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 7236 os_tid = 0x2360 [0212.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif")) returned 0x20 [0213.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0213.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.489] GetLastError () returned 0x5 [0213.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0213.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 7237 os_tid = 0x2364 [0212.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif")) returned 0x20 [0213.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0213.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.490] GetLastError () returned 0x5 [0213.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0213.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 7238 os_tid = 0x2368 [0212.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif")) returned 0x20 [0213.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0213.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.492] GetLastError () returned 0x5 [0213.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0213.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 7239 os_tid = 0x236c [0212.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif")) returned 0x20 [0213.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0213.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.493] GetLastError () returned 0x5 [0213.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0213.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 Thread: id = 7240 os_tid = 0x2370 [0212.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif")) returned 0x20 [0213.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0213.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.494] GetLastError () returned 0x5 [0213.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0213.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 Thread: id = 7241 os_tid = 0x2374 [0212.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif")) returned 0x20 [0213.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0213.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.496] GetLastError () returned 0x5 [0213.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0213.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 Thread: id = 7242 os_tid = 0x2378 [0212.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif")) returned 0x20 [0213.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0213.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.497] GetLastError () returned 0x5 [0213.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0213.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 Thread: id = 7243 os_tid = 0x2380 [0212.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif")) returned 0x20 [0213.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0213.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.498] GetLastError () returned 0x5 [0213.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0213.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d400f8) returned 1 Thread: id = 7244 os_tid = 0x2384 [0212.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif")) returned 0x20 [0213.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0213.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.499] GetLastError () returned 0x5 [0213.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0213.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40190) returned 1 Thread: id = 7245 os_tid = 0x2388 [0212.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif")) returned 0x20 [0213.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0213.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.520] GetLastError () returned 0x5 [0213.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0213.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40228) returned 1 Thread: id = 7246 os_tid = 0x2438 [0212.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif")) returned 0x20 [0213.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0213.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.521] GetLastError () returned 0x5 [0213.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0213.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402c0) returned 1 Thread: id = 7247 os_tid = 0x243c [0212.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif")) returned 0x20 [0213.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0213.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.522] GetLastError () returned 0x5 [0213.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0213.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40358) returned 1 Thread: id = 7248 os_tid = 0x2440 [0212.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif")) returned 0x20 [0213.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0213.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.524] GetLastError () returned 0x5 [0213.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0213.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d403f0) returned 1 Thread: id = 7249 os_tid = 0x2444 [0212.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif")) returned 0x20 [0213.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0213.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.525] GetLastError () returned 0x5 [0213.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0213.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40488) returned 1 Thread: id = 7250 os_tid = 0x244c [0212.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif")) returned 0x20 [0213.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", dwFileAttributes=0x20) returned 0 [0213.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.526] GetLastError () returned 0x5 [0213.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", dwFileAttributes=0x20) returned 0 [0213.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40520) returned 1 Thread: id = 7251 os_tid = 0x2450 [0212.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif")) returned 0x20 [0213.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0213.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.527] GetLastError () returned 0x5 [0213.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0213.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d405b8) returned 1 Thread: id = 7252 os_tid = 0x2454 [0212.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif")) returned 0x20 [0213.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", dwFileAttributes=0x20) returned 0 [0213.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.528] GetLastError () returned 0x5 [0213.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", dwFileAttributes=0x20) returned 0 [0213.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40650) returned 1 Thread: id = 7253 os_tid = 0x2458 [0212.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif")) returned 0x20 [0213.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0213.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.530] GetLastError () returned 0x5 [0213.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0213.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d406e8) returned 1 Thread: id = 7254 os_tid = 0x245c [0212.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif")) returned 0x20 [0213.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", dwFileAttributes=0x20) returned 0 [0213.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.531] GetLastError () returned 0x5 [0213.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", dwFileAttributes=0x20) returned 0 [0213.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddeb8) returned 1 Thread: id = 7255 os_tid = 0x2460 [0212.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif")) returned 0x20 [0213.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", dwFileAttributes=0x20) returned 0 [0213.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.532] GetLastError () returned 0x5 [0213.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", dwFileAttributes=0x20) returned 0 [0213.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 7256 os_tid = 0x2464 [0212.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif")) returned 0x20 [0213.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", dwFileAttributes=0x20) returned 0 [0213.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.533] GetLastError () returned 0x5 [0213.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", dwFileAttributes=0x20) returned 0 [0213.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40780) returned 1 Thread: id = 7257 os_tid = 0x2468 [0212.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif")) returned 0x20 [0213.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", dwFileAttributes=0x20) returned 0 [0213.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.535] GetLastError () returned 0x5 [0213.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", dwFileAttributes=0x20) returned 0 [0213.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40818) returned 1 Thread: id = 7258 os_tid = 0x246c [0212.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif")) returned 0x20 [0213.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", dwFileAttributes=0x20) returned 0 [0213.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.536] GetLastError () returned 0x5 [0213.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", dwFileAttributes=0x20) returned 0 [0213.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d408b0) returned 1 Thread: id = 7259 os_tid = 0x2470 [0212.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif")) returned 0x20 [0213.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0213.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.537] GetLastError () returned 0x5 [0213.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0213.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40948) returned 1 Thread: id = 7260 os_tid = 0x2474 [0212.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif")) returned 0x20 [0213.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", dwFileAttributes=0x20) returned 0 [0213.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.538] GetLastError () returned 0x5 [0213.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", dwFileAttributes=0x20) returned 0 [0213.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409e0) returned 1 Thread: id = 7261 os_tid = 0x2478 [0212.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif")) returned 0x20 [0213.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0213.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.264] GetLastError () returned 0x5 [0213.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0213.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a78) returned 1 Thread: id = 7262 os_tid = 0x247c [0212.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir")) returned 0x20 [0215.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", dwFileAttributes=0x20) returned 0 [0215.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.565] GetLastError () returned 0x5 [0215.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", dwFileAttributes=0x20) returned 0 [0215.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b7a0) returned 1 Thread: id = 7263 os_tid = 0x2480 [0212.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc")) returned 0x20 [0213.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC", dwFileAttributes=0x20) returned 0 [0213.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.327] GetLastError () returned 0x5 [0213.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC", dwFileAttributes=0x20) returned 0 [0213.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 7264 os_tid = 0x2484 [0212.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc")) returned 0x20 [0215.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC", dwFileAttributes=0x20) returned 0 [0215.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.923] GetLastError () returned 0x5 [0219.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC", dwFileAttributes=0x20) returned 0 [0219.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf998) returned 1 Thread: id = 7265 os_tid = 0x2488 [0212.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc")) returned 0x20 [0219.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC", dwFileAttributes=0x20) returned 0 [0219.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.972] GetLastError () returned 0x5 [0219.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC", dwFileAttributes=0x20) returned 0 [0219.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3e88) returned 1 Thread: id = 7266 os_tid = 0x248c [0212.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc")) returned 0x20 [0219.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC", dwFileAttributes=0x20) returned 0 [0219.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.985] GetLastError () returned 0x5 [0219.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC", dwFileAttributes=0x20) returned 0 [0219.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 7267 os_tid = 0x2490 [0212.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv")) returned 0x20 [0219.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV", dwFileAttributes=0x20) returned 0 [0219.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.905] GetLastError () returned 0x5 [0219.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV", dwFileAttributes=0x20) returned 0 [0219.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 7268 os_tid = 0x2494 [0212.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml")) returned 0x20 [0219.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML", dwFileAttributes=0x20) returned 0 [0219.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.906] GetLastError () returned 0x5 [0219.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML", dwFileAttributes=0x20) returned 0 [0219.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 7269 os_tid = 0x2498 [0212.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc")) returned 0x20 [0219.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC", dwFileAttributes=0x20) returned 0 [0219.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.925] GetLastError () returned 0x5 [0219.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC", dwFileAttributes=0x20) returned 0 [0219.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 7270 os_tid = 0x249c [0212.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc")) returned 0x20 [0219.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC", dwFileAttributes=0x20) returned 0 [0219.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.927] GetLastError () returned 0x5 [0219.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC", dwFileAttributes=0x20) returned 0 [0219.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 7271 os_tid = 0x24a0 [0212.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss")) returned 0x20 [0212.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS", dwFileAttributes=0x20) returned 0 [0212.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.895] GetLastError () returned 0x5 [0212.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS", dwFileAttributes=0x20) returned 0 [0212.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a778) returned 1 Thread: id = 7272 os_tid = 0x24a4 [0212.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss")) returned 0x20 [0212.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS", dwFileAttributes=0x20) returned 0 [0212.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.897] GetLastError () returned 0x5 [0212.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS", dwFileAttributes=0x20) returned 0 [0212.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac78) returned 1 Thread: id = 7273 os_tid = 0x24a8 [0212.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss")) returned 0x20 [0212.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS", dwFileAttributes=0x20) returned 0 [0212.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.899] GetLastError () returned 0x5 [0212.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS", dwFileAttributes=0x20) returned 0 [0212.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c258) returned 1 Thread: id = 7274 os_tid = 0x24ac [0212.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst")) returned 0x20 [0212.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST", dwFileAttributes=0x20) returned 0 [0212.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.900] GetLastError () returned 0x5 [0212.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST", dwFileAttributes=0x20) returned 0 [0212.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b8f8) returned 1 Thread: id = 7275 os_tid = 0x24b4 [0212.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst")) returned 0x20 [0220.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST", dwFileAttributes=0x20) returned 0 [0220.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.081] GetLastError () returned 0x5 [0222.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST", dwFileAttributes=0x20) returned 0 [0222.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b858) returned 1 Thread: id = 7276 os_tid = 0x2508 [0212.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst")) returned 0x20 [0220.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST", dwFileAttributes=0x20) returned 0 [0220.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.082] GetLastError () returned 0x5 [0222.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST", dwFileAttributes=0x20) returned 0 [0222.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aa98) returned 1 Thread: id = 7277 os_tid = 0x250c [0212.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst")) returned 0x20 [0222.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST", dwFileAttributes=0x20) returned 0 [0222.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.320] GetLastError () returned 0x5 [0223.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST", dwFileAttributes=0x20) returned 0 [0223.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bc18) returned 1 Thread: id = 7278 os_tid = 0x2514 [0212.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss")) returned 0x20 [0220.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS", dwFileAttributes=0x20) returned 0 [0220.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.078] GetLastError () returned 0x5 [0222.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS", dwFileAttributes=0x20) returned 0 [0222.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b7b8) returned 1 Thread: id = 7279 os_tid = 0x2518 [0212.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss")) returned 0x20 [0220.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS", dwFileAttributes=0x20) returned 0 [0220.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.077] GetLastError () returned 0x5 [0222.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS", dwFileAttributes=0x20) returned 0 [0222.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a958) returned 1 Thread: id = 7280 os_tid = 0x251c [0212.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss")) returned 0x20 [0215.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS", dwFileAttributes=0x20) returned 0 [0215.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.846] GetLastError () returned 0x5 [0216.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS", dwFileAttributes=0x20) returned 0 [0216.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a8b8) returned 1 Thread: id = 7281 os_tid = 0x2520 [0212.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss")) returned 0x20 [0222.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS", dwFileAttributes=0x20) returned 0 [0222.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.330] GetLastError () returned 0x5 [0223.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS", dwFileAttributes=0x20) returned 0 [0223.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bad8) returned 1 Thread: id = 7282 os_tid = 0x2524 [0212.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss")) returned 0x20 [0222.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS", dwFileAttributes=0x20) returned 0 [0222.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.328] GetLastError () returned 0x5 [0223.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS", dwFileAttributes=0x20) returned 0 [0223.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b5d8) returned 1 Thread: id = 7283 os_tid = 0x2528 [0212.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss")) returned 0x20 [0222.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS", dwFileAttributes=0x20) returned 0 [0222.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.327] GetLastError () returned 0x5 [0223.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS", dwFileAttributes=0x20) returned 0 [0223.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b218) returned 1 Thread: id = 7284 os_tid = 0x252c [0212.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss")) returned 0x20 [0222.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS", dwFileAttributes=0x20) returned 0 [0222.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.326] GetLastError () returned 0x5 [0223.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS", dwFileAttributes=0x20) returned 0 [0223.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aef8) returned 1 Thread: id = 7285 os_tid = 0x2530 [0212.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss")) returned 0x20 [0222.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS", dwFileAttributes=0x20) returned 0 [0222.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.324] GetLastError () returned 0x5 [0223.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS", dwFileAttributes=0x20) returned 0 [0223.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a818) returned 1 Thread: id = 7286 os_tid = 0x2534 [0212.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss")) returned 0x20 [0222.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS", dwFileAttributes=0x20) returned 0 [0222.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.323] GetLastError () returned 0x5 [0223.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS", dwFileAttributes=0x20) returned 0 [0223.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ae58) returned 1 Thread: id = 7287 os_tid = 0x2538 [0212.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss")) returned 0x20 [0222.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS", dwFileAttributes=0x20) returned 0 [0222.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.332] GetLastError () returned 0x5 [0223.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS", dwFileAttributes=0x20) returned 0 [0223.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 Thread: id = 7288 os_tid = 0x253c [0212.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_m.vss")) returned 0x20 [0222.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS", dwFileAttributes=0x20) returned 0 [0222.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.331] GetLastError () returned 0x5 [0223.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS", dwFileAttributes=0x20) returned 0 [0223.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c1b8) returned 1 Thread: id = 7289 os_tid = 0x2540 [0212.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_u.vss")) returned 0x20 [0220.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS", dwFileAttributes=0x20) returned 0 [0220.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.101] GetLastError () returned 0x5 [0222.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS", dwFileAttributes=0x20) returned 0 [0222.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c118) returned 1 Thread: id = 7290 os_tid = 0x2544 [0212.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_m.vss")) returned 0x20 [0220.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS", dwFileAttributes=0x20) returned 0 [0220.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.101] GetLastError () returned 0x5 [0222.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS", dwFileAttributes=0x20) returned 0 [0222.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b998) returned 1 Thread: id = 7291 os_tid = 0x2548 [0212.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_u.vss")) returned 0x20 [0222.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS", dwFileAttributes=0x20) returned 0 [0222.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.321] GetLastError () returned 0x5 [0223.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS", dwFileAttributes=0x20) returned 0 [0223.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ba38) returned 1 Thread: id = 7292 os_tid = 0x254c [0212.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_m.vst")) returned 0x20 [0220.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST", dwFileAttributes=0x20) returned 0 [0220.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.996] GetLastError () returned 0x5 [0222.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST", dwFileAttributes=0x20) returned 0 [0223.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b0d8) returned 1 Thread: id = 7293 os_tid = 0x25c8 [0212.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_u.vst")) returned 0x20 [0220.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST", dwFileAttributes=0x20) returned 0 [0220.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.101] GetLastError () returned 0x5 [0222.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST", dwFileAttributes=0x20) returned 0 [0222.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bd58) returned 1 Thread: id = 7294 os_tid = 0x25cc [0212.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_m.vss")) returned 0x20 [0220.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS", dwFileAttributes=0x20) returned 0 [0220.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.089] GetLastError () returned 0x5 [0222.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS", dwFileAttributes=0x20) returned 0 [0222.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b538) returned 1 Thread: id = 7295 os_tid = 0x25d0 [0212.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_u.vss")) returned 0x20 [0220.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS", dwFileAttributes=0x20) returned 0 [0220.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.997] GetLastError () returned 0x5 [0222.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS", dwFileAttributes=0x20) returned 0 [0223.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c078) returned 1 Thread: id = 7296 os_tid = 0x25d4 [0212.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_m.vss")) returned 0x20 [0220.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS", dwFileAttributes=0x20) returned 0 [0220.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.088] GetLastError () returned 0x5 [0222.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS", dwFileAttributes=0x20) returned 0 [0222.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b358) returned 1 Thread: id = 7297 os_tid = 0x25d8 [0212.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_u.vss")) returned 0x20 [0220.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS", dwFileAttributes=0x20) returned 0 [0220.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.087] GetLastError () returned 0x5 [0222.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS", dwFileAttributes=0x20) returned 0 [0222.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bfd8) returned 1 Thread: id = 7298 os_tid = 0x25dc [0212.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_m.vss")) returned 0x20 [0220.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS", dwFileAttributes=0x20) returned 0 [0220.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.086] GetLastError () returned 0x5 [0222.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS", dwFileAttributes=0x20) returned 0 [0222.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bb78) returned 1 Thread: id = 7299 os_tid = 0x25e0 [0212.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_u.vss")) returned 0x20 [0220.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS", dwFileAttributes=0x20) returned 0 [0220.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.085] GetLastError () returned 0x5 [0222.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS", dwFileAttributes=0x20) returned 0 [0222.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b718) returned 1 Thread: id = 7300 os_tid = 0x25e4 [0212.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_m.vss")) returned 0x20 [0220.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS", dwFileAttributes=0x20) returned 0 [0220.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.084] GetLastError () returned 0x5 [0222.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS", dwFileAttributes=0x20) returned 0 [0222.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a4f8) returned 1 Thread: id = 7301 os_tid = 0x25e8 [0212.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_u.vss")) returned 0x20 [0220.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS", dwFileAttributes=0x20) returned 0 [0220.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.083] GetLastError () returned 0x5 [0222.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS", dwFileAttributes=0x20) returned 0 [0222.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b678) returned 1 Thread: id = 7302 os_tid = 0x25ec [0213.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vss")) returned 0x20 [0220.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS", dwFileAttributes=0x20) returned 0 [0220.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.079] GetLastError () returned 0x5 [0222.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS", dwFileAttributes=0x20) returned 0 [0222.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b498) returned 1 Thread: id = 7303 os_tid = 0x25f0 [0213.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt")) returned 0x20 [0213.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0213.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.019] GetLastError () returned 0x5 [0213.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0213.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 Thread: id = 7304 os_tid = 0x2620 [0213.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk")) returned 0x20 [0213.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0213.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.021] GetLastError () returned 0x5 [0213.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0213.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b10) returned 1 Thread: id = 7305 os_tid = 0x2624 [0213.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk")) returned 0x20 [0213.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0213.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.023] GetLastError () returned 0x5 [0213.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0213.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ba8) returned 1 Thread: id = 7306 os_tid = 0x2628 [0213.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vst")) returned 0x20 [0222.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST", dwFileAttributes=0x20) returned 0 [0222.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.334] GetLastError () returned 0x5 [0223.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST", dwFileAttributes=0x20) returned 0 [0223.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b8f8) returned 1 Thread: id = 7307 os_tid = 0x262c [0213.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vss")) returned 0x20 [0220.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS", dwFileAttributes=0x20) returned 0 [0220.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.080] GetLastError () returned 0x5 [0222.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS", dwFileAttributes=0x20) returned 0 [0222.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c258) returned 1 Thread: id = 7308 os_tid = 0x2630 [0213.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs")) returned 0x20 [0216.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", dwFileAttributes=0x20) returned 0 [0216.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.790] GetLastError () returned 0x5 [0216.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", dwFileAttributes=0x20) returned 0 [0216.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4188) returned 1 Thread: id = 7309 os_tid = 0x2634 [0213.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc")) returned 0x20 [0216.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", dwFileAttributes=0x20) returned 0 [0216.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.819] GetLastError () returned 0x5 [0216.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", dwFileAttributes=0x20) returned 0 [0216.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 7310 os_tid = 0x2638 [0213.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt")) returned 0x20 [0216.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", dwFileAttributes=0x20) returned 0 [0216.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.816] GetLastError () returned 0x5 [0216.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", dwFileAttributes=0x20) returned 0 [0216.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfe60) returned 1 Thread: id = 7311 os_tid = 0x263c [0213.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk")) returned 0x20 [0216.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.814] GetLastError () returned 0x5 [0216.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de0f8) returned 1 Thread: id = 7312 os_tid = 0x2640 [0213.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk")) returned 0x20 [0216.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.812] GetLastError () returned 0x5 [0216.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de458) returned 1 Thread: id = 7313 os_tid = 0x26d8 [0213.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd")) returned 0x20 [0216.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", dwFileAttributes=0x20) returned 0 [0216.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.831] GetLastError () returned 0x5 [0216.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", dwFileAttributes=0x20) returned 0 [0216.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5808) returned 1 Thread: id = 7314 os_tid = 0x26dc [0213.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs")) returned 0x20 [0216.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", dwFileAttributes=0x20) returned 0 [0216.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.810] GetLastError () returned 0x5 [0216.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", dwFileAttributes=0x20) returned 0 [0216.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 7315 os_tid = 0x26e0 [0213.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc")) returned 0x20 [0216.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0216.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.808] GetLastError () returned 0x5 [0216.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0216.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de4e8) returned 1 Thread: id = 7316 os_tid = 0x26e4 [0213.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt")) returned 0x20 [0216.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0216.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.806] GetLastError () returned 0x5 [0216.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0216.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df2f8) returned 1 Thread: id = 7317 os_tid = 0x26e8 [0213.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk")) returned 0x20 [0216.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.804] GetLastError () returned 0x5 [0216.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c40) returned 1 Thread: id = 7318 os_tid = 0x26ec [0213.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk")) returned 0x20 [0216.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.802] GetLastError () returned 0x5 [0216.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40cd8) returned 1 Thread: id = 7319 os_tid = 0x26f0 [0213.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs")) returned 0x20 [0216.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", dwFileAttributes=0x20) returned 0 [0216.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.800] GetLastError () returned 0x5 [0216.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", dwFileAttributes=0x20) returned 0 [0216.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5288) returned 1 Thread: id = 7320 os_tid = 0x26f4 [0213.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc")) returned 0x20 [0216.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", dwFileAttributes=0x20) returned 0 [0216.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.798] GetLastError () returned 0x5 [0216.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", dwFileAttributes=0x20) returned 0 [0216.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81becd8) returned 1 Thread: id = 7321 os_tid = 0x26f8 [0213.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt")) returned 0x20 [0216.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", dwFileAttributes=0x20) returned 0 [0216.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.796] GetLastError () returned 0x5 [0216.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", dwFileAttributes=0x20) returned 0 [0216.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 7322 os_tid = 0x26fc [0213.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk")) returned 0x20 [0216.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.792] GetLastError () returned 0x5 [0216.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df388) returned 1 Thread: id = 7323 os_tid = 0x2700 [0213.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk")) returned 0x20 [0216.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.693] GetLastError () returned 0x5 [0216.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0216.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df268) returned 1 Thread: id = 7324 os_tid = 0x2768 [0213.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl")) returned 0x20 [0216.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", dwFileAttributes=0x20) returned 0 [0216.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.825] GetLastError () returned 0x5 [0216.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", dwFileAttributes=0x20) returned 0 [0216.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 7325 os_tid = 0x1eec [0213.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll")) returned 0x20 [0216.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.827] GetLastError () returned 0x5 [0216.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de968) returned 1 Thread: id = 7326 os_tid = 0x1ef0 [0213.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll")) returned 0x20 [0216.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.823] GetLastError () returned 0x5 [0216.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de7b8) returned 1 Thread: id = 7327 os_tid = 0x1ef4 [0213.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm")) returned 0x20 [0216.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", dwFileAttributes=0x20) returned 0 [0216.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.821] GetLastError () returned 0x5 [0216.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", dwFileAttributes=0x20) returned 0 [0216.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 7328 os_tid = 0x1ef8 [0213.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl")) returned 0x20 [0216.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", dwFileAttributes=0x20) returned 0 [0216.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.829] GetLastError () returned 0x5 [0216.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", dwFileAttributes=0x20) returned 0 [0216.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3f88) returned 1 Thread: id = 7329 os_tid = 0x1efc [0213.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn")) returned 0x20 [0216.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", dwFileAttributes=0x20) returned 0 [0216.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.844] GetLastError () returned 0x5 [0216.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", dwFileAttributes=0x20) returned 0 [0216.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dec38) returned 1 Thread: id = 7330 os_tid = 0x1f04 [0213.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn")) returned 0x20 [0216.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", dwFileAttributes=0x20) returned 0 [0216.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.842] GetLastError () returned 0x5 [0216.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", dwFileAttributes=0x20) returned 0 [0216.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 7331 os_tid = 0x1f08 [0213.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll")) returned 0x20 [0216.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.840] GetLastError () returned 0x5 [0216.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ba8) returned 1 Thread: id = 7332 os_tid = 0x1f0c [0213.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll")) returned 0x20 [0216.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.838] GetLastError () returned 0x5 [0216.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b10) returned 1 Thread: id = 7333 os_tid = 0x1f10 [0213.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm")) returned 0x20 [0216.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", dwFileAttributes=0x20) returned 0 [0216.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.835] GetLastError () returned 0x5 [0216.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", dwFileAttributes=0x20) returned 0 [0216.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4688) returned 1 Thread: id = 7334 os_tid = 0x1f14 [0213.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll")) returned 0x20 [0216.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.833] GetLastError () returned 0x5 [0216.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0216.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40d70) returned 1 Thread: id = 7335 os_tid = 0x1f18 [0213.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv")) returned 0x20 [0213.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV", dwFileAttributes=0x20) returned 0 [0213.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.333] GetLastError () returned 0x5 [0213.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV", dwFileAttributes=0x20) returned 0 [0213.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 7336 os_tid = 0x1f1c [0213.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc")) returned 0x20 [0213.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC", dwFileAttributes=0x20) returned 0 [0213.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.335] GetLastError () returned 0x5 [0213.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC", dwFileAttributes=0x20) returned 0 [0213.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 7337 os_tid = 0x1f20 [0213.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv")) returned 0x20 [0213.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0213.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.337] GetLastError () returned 0x5 [0213.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0213.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 Thread: id = 7338 os_tid = 0x1f24 [0213.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc")) returned 0x20 [0213.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC", dwFileAttributes=0x20) returned 0 [0213.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.339] GetLastError () returned 0x5 [0213.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC", dwFileAttributes=0x20) returned 0 [0213.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 Thread: id = 7339 os_tid = 0x1f28 [0213.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv")) returned 0x20 [0213.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV", dwFileAttributes=0x20) returned 0 [0213.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.341] GetLastError () returned 0x5 [0213.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV", dwFileAttributes=0x20) returned 0 [0213.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5708) returned 1 Thread: id = 7340 os_tid = 0x1f2c [0213.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml")) returned 0x20 [0213.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML", dwFileAttributes=0x20) returned 0 [0213.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.343] GetLastError () returned 0x5 [0213.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML", dwFileAttributes=0x20) returned 0 [0213.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5b88) returned 1 Thread: id = 7341 os_tid = 0x1f30 [0213.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc")) returned 0x20 [0213.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC", dwFileAttributes=0x20) returned 0 [0213.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.345] GetLastError () returned 0x5 [0213.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC", dwFileAttributes=0x20) returned 0 [0213.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 7342 os_tid = 0x1f34 [0213.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc")) returned 0x20 [0213.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC", dwFileAttributes=0x20) returned 0 [0213.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.348] GetLastError () returned 0x5 [0213.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC", dwFileAttributes=0x20) returned 0 [0213.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 7343 os_tid = 0x1fb8 [0213.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc")) returned 0x20 [0213.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC", dwFileAttributes=0x20) returned 0 [0213.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.360] GetLastError () returned 0x5 [0213.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC", dwFileAttributes=0x20) returned 0 [0213.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 7344 os_tid = 0x21f0 [0213.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv")) returned 0x20 [0219.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV", dwFileAttributes=0x20) returned 0 [0219.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.984] GetLastError () returned 0x5 [0219.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV", dwFileAttributes=0x20) returned 0 [0219.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 7345 os_tid = 0x21f4 [0213.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc")) returned 0x20 [0219.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC", dwFileAttributes=0x20) returned 0 [0219.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.982] GetLastError () returned 0x5 [0219.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC", dwFileAttributes=0x20) returned 0 [0219.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 7346 os_tid = 0x21f8 [0213.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv")) returned 0x20 [0219.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0219.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.992] GetLastError () returned 0x5 [0219.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0219.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de2a8) returned 1 Thread: id = 7347 os_tid = 0x21fc [0213.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc")) returned 0x20 [0219.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC", dwFileAttributes=0x20) returned 0 [0219.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.995] GetLastError () returned 0x5 [0219.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC", dwFileAttributes=0x20) returned 0 [0219.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de338) returned 1 Thread: id = 7348 os_tid = 0x2214 [0213.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc")) returned 0x20 [0219.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC", dwFileAttributes=0x20) returned 0 [0219.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.980] GetLastError () returned 0x5 [0219.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC", dwFileAttributes=0x20) returned 0 [0219.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 7349 os_tid = 0x2224 [0213.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc")) returned 0x20 [0219.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC", dwFileAttributes=0x20) returned 0 [0219.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.999] GetLastError () returned 0x5 [0219.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC", dwFileAttributes=0x20) returned 0 [0219.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 7350 os_tid = 0x2228 [0213.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc")) returned 0x20 [0219.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC", dwFileAttributes=0x20) returned 0 [0219.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.970] GetLastError () returned 0x5 [0219.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC", dwFileAttributes=0x20) returned 0 [0219.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5108) returned 1 Thread: id = 7351 os_tid = 0x222c [0213.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc")) returned 0x20 [0219.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC", dwFileAttributes=0x20) returned 0 [0219.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.969] GetLastError () returned 0x5 [0219.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC", dwFileAttributes=0x20) returned 0 [0219.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f8e0) returned 1 Thread: id = 7352 os_tid = 0x2230 [0213.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc")) returned 0x20 [0219.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC", dwFileAttributes=0x20) returned 0 [0219.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.967] GetLastError () returned 0x5 [0219.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC", dwFileAttributes=0x20) returned 0 [0219.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5608) returned 1 Thread: id = 7353 os_tid = 0x2234 [0213.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc")) returned 0x20 [0219.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC", dwFileAttributes=0x20) returned 0 [0219.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.966] GetLastError () returned 0x5 [0219.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC", dwFileAttributes=0x20) returned 0 [0219.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 7354 os_tid = 0x2238 [0213.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc")) returned 0x20 [0219.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC", dwFileAttributes=0x20) returned 0 [0219.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.964] GetLastError () returned 0x5 [0219.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC", dwFileAttributes=0x20) returned 0 [0219.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 7355 os_tid = 0x223c [0213.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc")) returned 0x20 [0219.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC", dwFileAttributes=0x20) returned 0 [0219.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.962] GetLastError () returned 0x5 [0219.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC", dwFileAttributes=0x20) returned 0 [0219.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f307c0) returned 1 Thread: id = 7356 os_tid = 0x23b4 [0213.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc")) returned 0x20 [0219.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC", dwFileAttributes=0x20) returned 0 [0219.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.961] GetLastError () returned 0x5 [0219.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC", dwFileAttributes=0x20) returned 0 [0219.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f312e8) returned 1 Thread: id = 7357 os_tid = 0x23b8 [0213.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc")) returned 0x20 [0219.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC", dwFileAttributes=0x20) returned 0 [0219.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.955] GetLastError () returned 0x5 [0219.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC", dwFileAttributes=0x20) returned 0 [0219.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 7358 os_tid = 0x23bc [0213.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv")) returned 0x20 [0219.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV", dwFileAttributes=0x20) returned 0 [0219.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.958] GetLastError () returned 0x5 [0219.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV", dwFileAttributes=0x20) returned 0 [0219.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 7359 os_tid = 0x23c0 [0213.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml")) returned 0x20 [0219.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML", dwFileAttributes=0x20) returned 0 [0219.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.957] GetLastError () returned 0x5 [0219.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML", dwFileAttributes=0x20) returned 0 [0219.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 7360 os_tid = 0x23c4 [0213.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv")) returned 0x20 [0219.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV", dwFileAttributes=0x20) returned 0 [0219.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.953] GetLastError () returned 0x5 [0219.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV", dwFileAttributes=0x20) returned 0 [0219.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 7361 os_tid = 0x255c [0213.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml")) returned 0x20 [0219.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML", dwFileAttributes=0x20) returned 0 [0219.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.978] GetLastError () returned 0x5 [0219.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML", dwFileAttributes=0x20) returned 0 [0219.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 7362 os_tid = 0x25fc [0213.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css")) returned 0x20 [0217.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", dwFileAttributes=0x20) returned 0 [0217.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.693] GetLastError () returned 0x5 [0217.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", dwFileAttributes=0x20) returned 0 [0217.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40e08) returned 1 Thread: id = 7363 os_tid = 0x2604 [0213.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css")) returned 0x20 [0217.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", dwFileAttributes=0x20) returned 0 [0217.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.691] GetLastError () returned 0x5 [0217.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", dwFileAttributes=0x20) returned 0 [0217.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ea0) returned 1 Thread: id = 7364 os_tid = 0x2608 [0213.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css")) returned 0x20 [0217.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", dwFileAttributes=0x20) returned 0 [0217.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.678] GetLastError () returned 0x5 [0217.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", dwFileAttributes=0x20) returned 0 [0217.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f38) returned 1 Thread: id = 7365 os_tid = 0x260c [0213.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css")) returned 0x20 [0217.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", dwFileAttributes=0x20) returned 0 [0217.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.736] GetLastError () returned 0x5 [0217.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", dwFileAttributes=0x20) returned 0 [0217.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40fd0) returned 1 Thread: id = 7366 os_tid = 0x2610 [0213.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css")) returned 0x20 [0217.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", dwFileAttributes=0x20) returned 0 [0217.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.735] GetLastError () returned 0x5 [0217.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", dwFileAttributes=0x20) returned 0 [0217.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41068) returned 1 Thread: id = 7367 os_tid = 0x29c8 [0213.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css")) returned 0x20 [0217.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", dwFileAttributes=0x20) returned 0 [0217.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.729] GetLastError () returned 0x5 [0217.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", dwFileAttributes=0x20) returned 0 [0217.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41100) returned 1 Thread: id = 7368 os_tid = 0x29cc [0213.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css")) returned 0x20 [0217.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", dwFileAttributes=0x20) returned 0 [0217.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.728] GetLastError () returned 0x5 [0217.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", dwFileAttributes=0x20) returned 0 [0217.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41198) returned 1 Thread: id = 7369 os_tid = 0x29d0 [0213.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css")) returned 0x20 [0217.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", dwFileAttributes=0x20) returned 0 [0217.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.726] GetLastError () returned 0x5 [0217.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", dwFileAttributes=0x20) returned 0 [0217.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41230) returned 1 Thread: id = 7370 os_tid = 0x29d4 [0213.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css")) returned 0x20 [0217.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", dwFileAttributes=0x20) returned 0 [0217.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.724] GetLastError () returned 0x5 [0217.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", dwFileAttributes=0x20) returned 0 [0217.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412c8) returned 1 Thread: id = 7371 os_tid = 0x29d8 [0213.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css")) returned 0x20 [0217.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", dwFileAttributes=0x20) returned 0 [0217.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.722] GetLastError () returned 0x5 [0217.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", dwFileAttributes=0x20) returned 0 [0217.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41360) returned 1 Thread: id = 7372 os_tid = 0x29dc [0213.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css")) returned 0x20 [0217.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", dwFileAttributes=0x20) returned 0 [0217.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.720] GetLastError () returned 0x5 [0217.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", dwFileAttributes=0x20) returned 0 [0217.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413f8) returned 1 Thread: id = 7373 os_tid = 0x29e0 [0213.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css")) returned 0x20 [0217.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", dwFileAttributes=0x20) returned 0 [0217.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.719] GetLastError () returned 0x5 [0217.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", dwFileAttributes=0x20) returned 0 [0217.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41490) returned 1 Thread: id = 7374 os_tid = 0x29e4 [0213.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css")) returned 0x20 [0217.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", dwFileAttributes=0x20) returned 0 [0217.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.717] GetLastError () returned 0x5 [0217.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", dwFileAttributes=0x20) returned 0 [0217.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41528) returned 1 Thread: id = 7375 os_tid = 0x29e8 [0213.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css")) returned 0x20 [0217.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", dwFileAttributes=0x20) returned 0 [0217.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.715] GetLastError () returned 0x5 [0217.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", dwFileAttributes=0x20) returned 0 [0217.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d415c0) returned 1 Thread: id = 7376 os_tid = 0x29ec [0213.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css")) returned 0x20 [0217.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", dwFileAttributes=0x20) returned 0 [0217.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.713] GetLastError () returned 0x5 [0217.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", dwFileAttributes=0x20) returned 0 [0217.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41658) returned 1 Thread: id = 7377 os_tid = 0x2af8 [0213.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css")) returned 0x20 [0217.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", dwFileAttributes=0x20) returned 0 [0217.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.689] GetLastError () returned 0x5 [0217.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", dwFileAttributes=0x20) returned 0 [0217.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d416f0) returned 1 Thread: id = 7378 os_tid = 0x2afc [0213.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css")) returned 0x20 [0217.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", dwFileAttributes=0x20) returned 0 [0217.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.711] GetLastError () returned 0x5 [0217.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", dwFileAttributes=0x20) returned 0 [0217.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41788) returned 1 Thread: id = 7379 os_tid = 0x2b00 [0213.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css")) returned 0x20 [0217.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", dwFileAttributes=0x20) returned 0 [0217.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.710] GetLastError () returned 0x5 [0217.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", dwFileAttributes=0x20) returned 0 [0217.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41820) returned 1 Thread: id = 7380 os_tid = 0x22e8 [0213.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css")) returned 0x20 [0217.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", dwFileAttributes=0x20) returned 0 [0217.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.708] GetLastError () returned 0x5 [0217.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", dwFileAttributes=0x20) returned 0 [0217.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418b8) returned 1 Thread: id = 7381 os_tid = 0x22ec [0213.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css")) returned 0x20 [0217.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", dwFileAttributes=0x20) returned 0 [0217.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.706] GetLastError () returned 0x5 [0217.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", dwFileAttributes=0x20) returned 0 [0217.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41950) returned 1 Thread: id = 7382 os_tid = 0x22f0 [0213.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css")) returned 0x20 [0217.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", dwFileAttributes=0x20) returned 0 [0217.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.704] GetLastError () returned 0x5 [0217.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", dwFileAttributes=0x20) returned 0 [0217.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419e8) returned 1 Thread: id = 7383 os_tid = 0x22f4 [0213.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css")) returned 0x20 [0217.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", dwFileAttributes=0x20) returned 0 [0217.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.733] GetLastError () returned 0x5 [0217.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", dwFileAttributes=0x20) returned 0 [0217.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41a80) returned 1 Thread: id = 7384 os_tid = 0x22f8 [0213.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css")) returned 0x20 [0217.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", dwFileAttributes=0x20) returned 0 [0217.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.731] GetLastError () returned 0x5 [0217.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", dwFileAttributes=0x20) returned 0 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b18) returned 1 Thread: id = 7385 os_tid = 0x22fc [0213.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif")) returned 0x20 [0213.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", dwFileAttributes=0x20) returned 0 [0213.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.616] GetLastError () returned 0x5 [0213.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", dwFileAttributes=0x20) returned 0 [0213.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a78) returned 1 Thread: id = 7386 os_tid = 0x2300 [0213.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif")) returned 0x20 [0213.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", dwFileAttributes=0x20) returned 0 [0213.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.618] GetLastError () returned 0x5 [0213.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", dwFileAttributes=0x20) returned 0 [0213.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41bb0) returned 1 Thread: id = 7387 os_tid = 0x2304 [0213.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif")) returned 0x20 [0213.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", dwFileAttributes=0x20) returned 0 [0213.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.620] GetLastError () returned 0x5 [0213.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", dwFileAttributes=0x20) returned 0 [0213.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c48) returned 1 Thread: id = 7388 os_tid = 0x2308 [0213.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif")) returned 0x20 [0214.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", dwFileAttributes=0x20) returned 0 [0214.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.166] GetLastError () returned 0x5 [0214.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", dwFileAttributes=0x20) returned 0 [0214.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ce0) returned 1 Thread: id = 7389 os_tid = 0x230c [0213.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif")) returned 0x20 [0214.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", dwFileAttributes=0x20) returned 0 [0214.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.168] GetLastError () returned 0x5 [0214.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", dwFileAttributes=0x20) returned 0 [0214.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d78) returned 1 Thread: id = 7390 os_tid = 0x2310 [0213.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif")) returned 0x20 [0214.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", dwFileAttributes=0x20) returned 0 [0214.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.169] GetLastError () returned 0x5 [0214.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", dwFileAttributes=0x20) returned 0 [0214.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e10) returned 1 Thread: id = 7391 os_tid = 0x2314 [0213.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif")) returned 0x20 [0214.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", dwFileAttributes=0x20) returned 0 [0214.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.171] GetLastError () returned 0x5 [0214.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", dwFileAttributes=0x20) returned 0 [0214.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ea8) returned 1 Thread: id = 7392 os_tid = 0x2318 [0213.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif")) returned 0x20 [0214.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", dwFileAttributes=0x20) returned 0 [0214.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.173] GetLastError () returned 0x5 [0214.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", dwFileAttributes=0x20) returned 0 [0214.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41f40) returned 1 Thread: id = 7393 os_tid = 0x23a8 [0213.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif")) returned 0x20 [0214.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", dwFileAttributes=0x20) returned 0 [0214.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.174] GetLastError () returned 0x5 [0214.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", dwFileAttributes=0x20) returned 0 [0214.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9648) returned 1 Thread: id = 7394 os_tid = 0x23ac [0213.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif")) returned 0x20 [0214.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", dwFileAttributes=0x20) returned 0 [0214.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.176] GetLastError () returned 0x5 [0214.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", dwFileAttributes=0x20) returned 0 [0214.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d96e0) returned 1 Thread: id = 7395 os_tid = 0x242c [0213.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif")) returned 0x20 [0214.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", dwFileAttributes=0x20) returned 0 [0214.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.177] GetLastError () returned 0x5 [0214.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", dwFileAttributes=0x20) returned 0 [0214.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9778) returned 1 Thread: id = 7396 os_tid = 0x1b00 [0213.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif")) returned 0x20 [0214.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", dwFileAttributes=0x20) returned 0 [0214.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.179] GetLastError () returned 0x5 [0214.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", dwFileAttributes=0x20) returned 0 [0214.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 Thread: id = 7397 os_tid = 0x2bf4 [0213.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif")) returned 0x20 [0214.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", dwFileAttributes=0x20) returned 0 [0214.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.180] GetLastError () returned 0x5 [0214.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", dwFileAttributes=0x20) returned 0 [0214.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 Thread: id = 7398 os_tid = 0x2bf8 [0213.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif")) returned 0x20 [0214.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", dwFileAttributes=0x20) returned 0 [0214.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.182] GetLastError () returned 0x5 [0214.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", dwFileAttributes=0x20) returned 0 [0214.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9810) returned 1 Thread: id = 7399 os_tid = 0x115c [0213.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif")) returned 0x20 [0214.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", dwFileAttributes=0x20) returned 0 [0214.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.183] GetLastError () returned 0x5 [0214.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", dwFileAttributes=0x20) returned 0 [0214.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d98a8) returned 1 Thread: id = 7400 os_tid = 0x2bfc [0213.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif")) returned 0x20 [0214.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0214.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.185] GetLastError () returned 0x5 [0214.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0214.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9940) returned 1 Thread: id = 7401 os_tid = 0x2b60 [0213.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif")) returned 0x20 [0214.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", dwFileAttributes=0x20) returned 0 [0214.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.186] GetLastError () returned 0x5 [0214.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", dwFileAttributes=0x20) returned 0 [0214.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d99d8) returned 1 Thread: id = 7402 os_tid = 0x2b64 [0213.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif")) returned 0x20 [0214.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", dwFileAttributes=0x20) returned 0 [0214.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.188] GetLastError () returned 0x5 [0214.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", dwFileAttributes=0x20) returned 0 [0214.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9a70) returned 1 Thread: id = 7403 os_tid = 0x2b68 [0213.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif")) returned 0x20 [0214.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", dwFileAttributes=0x20) returned 0 [0214.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.190] GetLastError () returned 0x5 [0214.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", dwFileAttributes=0x20) returned 0 [0214.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9b08) returned 1 Thread: id = 7404 os_tid = 0x2b6c [0213.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif")) returned 0x20 [0214.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", dwFileAttributes=0x20) returned 0 [0214.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.191] GetLastError () returned 0x5 [0214.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", dwFileAttributes=0x20) returned 0 [0214.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9ba0) returned 1 Thread: id = 7405 os_tid = 0x2b70 [0213.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif")) returned 0x20 [0214.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", dwFileAttributes=0x20) returned 0 [0214.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.193] GetLastError () returned 0x5 [0214.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", dwFileAttributes=0x20) returned 0 [0214.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c38) returned 1 Thread: id = 7406 os_tid = 0x2b88 [0213.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif")) returned 0x20 [0214.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", dwFileAttributes=0x20) returned 0 [0214.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.194] GetLastError () returned 0x5 [0214.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", dwFileAttributes=0x20) returned 0 [0214.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9cd0) returned 1 Thread: id = 7407 os_tid = 0x2b8c [0213.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif")) returned 0x20 [0214.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", dwFileAttributes=0x20) returned 0 [0214.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.196] GetLastError () returned 0x5 [0214.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", dwFileAttributes=0x20) returned 0 [0214.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9d68) returned 1 Thread: id = 7408 os_tid = 0x2b90 [0213.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif")) returned 0x20 [0214.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", dwFileAttributes=0x20) returned 0 [0214.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.199] GetLastError () returned 0x5 [0214.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", dwFileAttributes=0x20) returned 0 [0214.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9e00) returned 1 Thread: id = 7409 os_tid = 0x2b94 [0213.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif")) returned 0x20 [0213.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", dwFileAttributes=0x20) returned 0 [0213.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.779] GetLastError () returned 0x5 [0213.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", dwFileAttributes=0x20) returned 0 [0213.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9e98) returned 1 Thread: id = 7410 os_tid = 0x2b98 [0213.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif")) returned 0x20 [0213.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", dwFileAttributes=0x20) returned 0 [0213.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.780] GetLastError () returned 0x5 [0213.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", dwFileAttributes=0x20) returned 0 [0213.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9f30) returned 1 Thread: id = 7411 os_tid = 0x2b9c [0213.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif")) returned 0x20 [0213.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", dwFileAttributes=0x20) returned 0 [0213.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.782] GetLastError () returned 0x5 [0213.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", dwFileAttributes=0x20) returned 0 [0213.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9fc8) returned 1 Thread: id = 7412 os_tid = 0x2ba0 [0213.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv")) returned 0x20 [0219.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV", dwFileAttributes=0x20) returned 0 [0219.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.973] GetLastError () returned 0x5 [0219.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV", dwFileAttributes=0x20) returned 0 [0219.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 7413 os_tid = 0x2ba4 [0213.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml")) returned 0x20 [0219.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML", dwFileAttributes=0x20) returned 0 [0219.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.977] GetLastError () returned 0x5 [0219.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML", dwFileAttributes=0x20) returned 0 [0219.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 7414 os_tid = 0x2ba8 [0213.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc")) returned 0x20 [0217.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC", dwFileAttributes=0x20) returned 0 [0217.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.799] GetLastError () returned 0x5 [0217.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC", dwFileAttributes=0x20) returned 0 [0217.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 7415 os_tid = 0x2bb4 [0213.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc")) returned 0x20 [0219.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC", dwFileAttributes=0x20) returned 0 [0219.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.975] GetLastError () returned 0x5 [0219.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC", dwFileAttributes=0x20) returned 0 [0219.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 7416 os_tid = 0x2bd0 [0213.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x20 [0222.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF", dwFileAttributes=0x20) returned 0 [0222.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.153] GetLastError () returned 0x5 [0223.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF", dwFileAttributes=0x20) returned 0 [0223.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 7417 os_tid = 0x2bd8 [0213.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x20 [0222.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF", dwFileAttributes=0x20) returned 0 [0222.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.154] GetLastError () returned 0x5 [0223.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF", dwFileAttributes=0x20) returned 0 [0223.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 7418 os_tid = 0x2bdc [0213.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x20 [0222.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF", dwFileAttributes=0x20) returned 0 [0222.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.155] GetLastError () returned 0x5 [0223.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF", dwFileAttributes=0x20) returned 0 [0223.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 7419 os_tid = 0x2be0 [0213.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x20 [0222.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF", dwFileAttributes=0x20) returned 0 [0222.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.156] GetLastError () returned 0x5 [0223.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF", dwFileAttributes=0x20) returned 0 [0223.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 7420 os_tid = 0x2be4 [0213.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x20 [0222.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF", dwFileAttributes=0x20) returned 0 [0222.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.157] GetLastError () returned 0x5 [0223.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF", dwFileAttributes=0x20) returned 0 [0223.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 Thread: id = 7421 os_tid = 0x2be8 [0213.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x20 [0222.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF", dwFileAttributes=0x20) returned 0 [0222.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.159] GetLastError () returned 0x5 [0223.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF", dwFileAttributes=0x20) returned 0 [0223.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 7422 os_tid = 0x298c [0213.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x20 [0222.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF", dwFileAttributes=0x20) returned 0 [0222.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.160] GetLastError () returned 0x5 [0223.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF", dwFileAttributes=0x20) returned 0 [0223.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 7423 os_tid = 0x2990 [0213.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x20 [0222.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF", dwFileAttributes=0x20) returned 0 [0222.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.131] GetLastError () returned 0x5 [0223.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF", dwFileAttributes=0x20) returned 0 [0223.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 7424 os_tid = 0x2994 [0213.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x20 [0222.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF", dwFileAttributes=0x20) returned 0 [0222.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.132] GetLastError () returned 0x5 [0223.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF", dwFileAttributes=0x20) returned 0 [0223.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 7425 os_tid = 0x29f4 [0213.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x20 [0222.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF", dwFileAttributes=0x20) returned 0 [0222.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.133] GetLastError () returned 0x5 [0223.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF", dwFileAttributes=0x20) returned 0 [0223.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 7426 os_tid = 0x29f8 [0213.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x20 [0222.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF", dwFileAttributes=0x20) returned 0 [0222.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.134] GetLastError () returned 0x5 [0223.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF", dwFileAttributes=0x20) returned 0 [0223.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 7427 os_tid = 0x29fc [0213.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x20 [0222.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF", dwFileAttributes=0x20) returned 0 [0222.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.136] GetLastError () returned 0x5 [0223.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF", dwFileAttributes=0x20) returned 0 [0223.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 7428 os_tid = 0x2a00 [0213.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x20 [0222.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF", dwFileAttributes=0x20) returned 0 [0222.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.137] GetLastError () returned 0x5 [0223.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF", dwFileAttributes=0x20) returned 0 [0223.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 7429 os_tid = 0x2a04 [0213.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x20 [0222.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF", dwFileAttributes=0x20) returned 0 [0222.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.138] GetLastError () returned 0x5 [0223.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF", dwFileAttributes=0x20) returned 0 [0223.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be5f0) returned 1 Thread: id = 7430 os_tid = 0x2a08 [0213.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x20 [0222.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF", dwFileAttributes=0x20) returned 0 [0222.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.139] GetLastError () returned 0x5 [0223.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF", dwFileAttributes=0x20) returned 0 [0223.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 Thread: id = 7431 os_tid = 0x2a0c [0213.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x20 [0222.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF", dwFileAttributes=0x20) returned 0 [0222.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.140] GetLastError () returned 0x5 [0223.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF", dwFileAttributes=0x20) returned 0 [0223.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be568) returned 1 Thread: id = 7432 os_tid = 0x2a10 [0213.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x20 [0229.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF", dwFileAttributes=0x20) returned 0 [0229.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.066] GetLastError () returned 0x5 [0230.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF", dwFileAttributes=0x20) returned 0 [0230.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be678) returned 1 Thread: id = 7433 os_tid = 0x15f4 [0213.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x20 [0229.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF", dwFileAttributes=0x20) returned 0 [0229.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.688] GetLastError () returned 0x5 [0229.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF", dwFileAttributes=0x20) returned 0 [0229.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf5e0) returned 1 Thread: id = 7434 os_tid = 0x2a20 [0213.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x20 [0229.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF", dwFileAttributes=0x20) returned 0 [0229.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.417] GetLastError () returned 0x5 [0229.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF", dwFileAttributes=0x20) returned 0 [0229.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 Thread: id = 7435 os_tid = 0x2ae8 [0213.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x20 [0224.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF", dwFileAttributes=0x20) returned 0 [0224.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.970] GetLastError () returned 0x5 [0224.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF", dwFileAttributes=0x20) returned 0 [0224.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0108) returned 1 Thread: id = 7436 os_tid = 0x2aec [0213.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x20 [0224.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF", dwFileAttributes=0x20) returned 0 [0224.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.978] GetLastError () returned 0x5 [0224.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF", dwFileAttributes=0x20) returned 0 [0224.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bec50) returned 1 Thread: id = 7437 os_tid = 0x2af0 [0213.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x20 [0224.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF", dwFileAttributes=0x20) returned 0 [0224.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.979] GetLastError () returned 0x5 [0224.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF", dwFileAttributes=0x20) returned 0 [0224.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 Thread: id = 7438 os_tid = 0x2af4 [0213.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x20 [0224.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF", dwFileAttributes=0x20) returned 0 [0224.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.985] GetLastError () returned 0x5 [0224.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF", dwFileAttributes=0x20) returned 0 [0224.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 Thread: id = 7439 os_tid = 0x2b04 [0213.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x20 [0224.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF", dwFileAttributes=0x20) returned 0 [0224.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.969] GetLastError () returned 0x5 [0224.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF", dwFileAttributes=0x20) returned 0 [0224.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfc40) returned 1 Thread: id = 7440 os_tid = 0x2b08 [0213.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x20 [0223.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF", dwFileAttributes=0x20) returned 0 [0223.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.499] GetLastError () returned 0x5 [0223.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF", dwFileAttributes=0x20) returned 0 [0223.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 7441 os_tid = 0x2a48 [0213.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x20 [0222.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF", dwFileAttributes=0x20) returned 0 [0222.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.174] GetLastError () returned 0x5 [0223.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF", dwFileAttributes=0x20) returned 0 [0223.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 7442 os_tid = 0x2a4c [0213.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x20 [0231.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF", dwFileAttributes=0x20) returned 0 [0231.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.093] GetLastError () returned 0x5 [0232.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF", dwFileAttributes=0x20) returned 0 [0232.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0328) returned 1 Thread: id = 7443 os_tid = 0x2a50 [0213.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid")) returned 0x20 [0231.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID", dwFileAttributes=0x20) returned 0 [0231.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.094] GetLastError () returned 0x5 [0232.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID", dwFileAttributes=0x20) returned 0 [0232.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfff8) returned 1 Thread: id = 7444 os_tid = 0x2a54 [0213.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf")) returned 0x20 [0222.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF", dwFileAttributes=0x20) returned 0 [0222.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.141] GetLastError () returned 0x5 [0223.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF", dwFileAttributes=0x20) returned 0 [0223.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f1a0) returned 1 Thread: id = 7445 os_tid = 0x2a58 [0213.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf")) returned 0x20 [0222.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF", dwFileAttributes=0x20) returned 0 [0222.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.144] GetLastError () returned 0x5 [0223.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF", dwFileAttributes=0x20) returned 0 [0223.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f800) returned 1 Thread: id = 7446 os_tid = 0x2a5c [0213.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf")) returned 0x20 [0222.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF", dwFileAttributes=0x20) returned 0 [0222.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.145] GetLastError () returned 0x5 [0223.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF", dwFileAttributes=0x20) returned 0 [0223.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 Thread: id = 7447 os_tid = 0x2a60 [0214.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf")) returned 0x20 [0222.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF", dwFileAttributes=0x20) returned 0 [0222.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.150] GetLastError () returned 0x5 [0223.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF", dwFileAttributes=0x20) returned 0 [0223.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eef8) returned 1 Thread: id = 7448 os_tid = 0x2a64 [0214.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm")) returned 0x20 [0216.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", dwFileAttributes=0x20) returned 0 [0216.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.794] GetLastError () returned 0x5 [0216.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", dwFileAttributes=0x20) returned 0 [0216.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 7449 os_tid = 0x2a68 [0214.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vst")) returned 0x20 [0222.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST", dwFileAttributes=0x20) returned 0 [0222.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.291] GetLastError () returned 0x5 [0223.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST", dwFileAttributes=0x20) returned 0 [0223.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac78) returned 1 Thread: id = 7450 os_tid = 0x2a6c [0214.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_m.vss")) returned 0x20 [0222.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS", dwFileAttributes=0x20) returned 0 [0222.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.292] GetLastError () returned 0x5 [0223.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS", dwFileAttributes=0x20) returned 0 [0223.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a778) returned 1 Thread: id = 7451 os_tid = 0x2a70 [0214.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_u.vss")) returned 0x20 [0222.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS", dwFileAttributes=0x20) returned 0 [0222.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.293] GetLastError () returned 0x5 [0223.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS", dwFileAttributes=0x20) returned 0 [0223.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c2f8) returned 1 Thread: id = 7452 os_tid = 0x2a74 [0214.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vss")) returned 0x20 [0222.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS", dwFileAttributes=0x20) returned 0 [0222.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.294] GetLastError () returned 0x5 [0223.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS", dwFileAttributes=0x20) returned 0 [0223.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b2b8) returned 1 Thread: id = 7453 os_tid = 0x2a78 [0214.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vst")) returned 0x20 [0222.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST", dwFileAttributes=0x20) returned 0 [0222.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.295] GetLastError () returned 0x5 [0223.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST", dwFileAttributes=0x20) returned 0 [0223.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819af98) returned 1 Thread: id = 7454 os_tid = 0x2a7c [0214.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vss")) returned 0x20 [0222.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS", dwFileAttributes=0x20) returned 0 [0222.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.297] GetLastError () returned 0x5 [0223.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS", dwFileAttributes=0x20) returned 0 [0223.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819be98) returned 1 Thread: id = 7455 os_tid = 0x2a80 [0214.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vst")) returned 0x20 [0222.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST", dwFileAttributes=0x20) returned 0 [0222.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.298] GetLastError () returned 0x5 [0223.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST", dwFileAttributes=0x20) returned 0 [0223.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b178) returned 1 Thread: id = 7456 os_tid = 0x2a84 [0214.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_m.vss")) returned 0x20 [0222.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS", dwFileAttributes=0x20) returned 0 [0222.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.300] GetLastError () returned 0x5 [0223.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS", dwFileAttributes=0x20) returned 0 [0223.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c398) returned 1 Thread: id = 7457 os_tid = 0x2a8c [0214.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_u.vss")) returned 0x20 [0222.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS", dwFileAttributes=0x20) returned 0 [0222.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.301] GetLastError () returned 0x5 [0223.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS", dwFileAttributes=0x20) returned 0 [0223.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 7458 os_tid = 0x2a90 [0214.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vss")) returned 0x20 [0222.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS", dwFileAttributes=0x20) returned 0 [0222.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.302] GetLastError () returned 0x5 [0223.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS", dwFileAttributes=0x20) returned 0 [0223.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9fc8) returned 1 Thread: id = 7459 os_tid = 0x2a94 [0214.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vst")) returned 0x20 [0222.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST", dwFileAttributes=0x20) returned 0 [0222.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.303] GetLastError () returned 0x5 [0223.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST", dwFileAttributes=0x20) returned 0 [0223.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9f30) returned 1 Thread: id = 7460 os_tid = 0x2a9c [0214.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vss")) returned 0x20 [0222.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS", dwFileAttributes=0x20) returned 0 [0222.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.308] GetLastError () returned 0x5 [0223.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS", dwFileAttributes=0x20) returned 0 [0223.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9e98) returned 1 Thread: id = 7461 os_tid = 0x2aa0 [0214.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vst")) returned 0x20 [0222.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST", dwFileAttributes=0x20) returned 0 [0222.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.309] GetLastError () returned 0x5 [0223.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST", dwFileAttributes=0x20) returned 0 [0223.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da060) returned 1 Thread: id = 7462 os_tid = 0x2aa4 [0214.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_m.vss")) returned 0x20 [0222.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0222.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.305] GetLastError () returned 0x5 [0223.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0223.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c74b8) returned 1 Thread: id = 7463 os_tid = 0x2aac [0214.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_u.vss")) returned 0x20 [0222.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0222.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.306] GetLastError () returned 0x5 [0223.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0223.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 7464 os_tid = 0x2ab0 [0214.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_m.vss")) returned 0x20 [0222.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS", dwFileAttributes=0x20) returned 0 [0222.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.311] GetLastError () returned 0x5 [0223.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS", dwFileAttributes=0x20) returned 0 [0223.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 Thread: id = 7465 os_tid = 0x2ab8 [0214.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_u.vss")) returned 0x20 [0222.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS", dwFileAttributes=0x20) returned 0 [0222.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.312] GetLastError () returned 0x5 [0223.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS", dwFileAttributes=0x20) returned 0 [0223.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 7466 os_tid = 0x2abc [0214.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_m.vss")) returned 0x20 [0222.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS", dwFileAttributes=0x20) returned 0 [0222.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.307] GetLastError () returned 0x5 [0223.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS", dwFileAttributes=0x20) returned 0 [0223.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 7467 os_tid = 0x2ac0 [0214.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_u.vss")) returned 0x20 [0223.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS", dwFileAttributes=0x20) returned 0 [0223.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.893] GetLastError () returned 0x5 [0224.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS", dwFileAttributes=0x20) returned 0 [0224.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 7468 os_tid = 0x2ac4 [0214.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vss")) returned 0x20 [0222.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS", dwFileAttributes=0x20) returned 0 [0222.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.313] GetLastError () returned 0x5 [0223.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS", dwFileAttributes=0x20) returned 0 [0223.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 7469 os_tid = 0x2ac8 [0214.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vst")) returned 0x20 [0222.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST", dwFileAttributes=0x20) returned 0 [0222.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.315] GetLastError () returned 0x5 [0223.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST", dwFileAttributes=0x20) returned 0 [0223.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 7470 os_tid = 0x2acc [0214.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vss")) returned 0x20 [0222.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS", dwFileAttributes=0x20) returned 0 [0222.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.316] GetLastError () returned 0x5 [0223.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS", dwFileAttributes=0x20) returned 0 [0223.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c70f8) returned 1 Thread: id = 7471 os_tid = 0x27bc [0214.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vst")) returned 0x20 [0222.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST", dwFileAttributes=0x20) returned 0 [0222.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.318] GetLastError () returned 0x5 [0223.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST", dwFileAttributes=0x20) returned 0 [0223.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 7472 os_tid = 0x930 [0214.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_m.vss")) returned 0x20 [0222.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0222.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.319] GetLastError () returned 0x5 [0223.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0223.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 Thread: id = 7473 os_tid = 0x2ea8 [0214.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_u.vss")) returned 0x20 [0222.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS", dwFileAttributes=0x20) returned 0 [0222.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.288] GetLastError () returned 0x5 [0223.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS", dwFileAttributes=0x20) returned 0 [0223.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db648) returned 1 Thread: id = 7474 os_tid = 0x2eac [0215.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_m.vst")) returned 0x20 [0222.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST", dwFileAttributes=0x20) returned 0 [0222.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.333] GetLastError () returned 0x5 [0223.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST", dwFileAttributes=0x20) returned 0 [0223.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db6e8) returned 1 Thread: id = 7475 os_tid = 0x2eb0 [0215.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif")) returned 0x20 [0222.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", dwFileAttributes=0x20) returned 0 [0222.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.354] GetLastError () returned 0x5 [0223.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", dwFileAttributes=0x20) returned 0 [0223.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c48) returned 1 Thread: id = 7476 os_tid = 0x19a8 [0215.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif")) returned 0x20 [0222.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", dwFileAttributes=0x20) returned 0 [0222.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.353] GetLastError () returned 0x5 [0223.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", dwFileAttributes=0x20) returned 0 [0223.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9e00) returned 1 Thread: id = 7477 os_tid = 0x19ac [0215.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif")) returned 0x20 [0223.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0223.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.936] GetLastError () returned 0x5 [0223.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0223.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9d68) returned 1 Thread: id = 7478 os_tid = 0x19b0 [0215.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif")) returned 0x20 [0223.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", dwFileAttributes=0x20) returned 0 [0223.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.935] GetLastError () returned 0x5 [0223.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", dwFileAttributes=0x20) returned 0 [0223.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df4a8) returned 1 Thread: id = 7479 os_tid = 0x19b4 [0215.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif")) returned 0x20 [0223.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", dwFileAttributes=0x20) returned 0 [0223.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.934] GetLastError () returned 0x5 [0223.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", dwFileAttributes=0x20) returned 0 [0223.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81def08) returned 1 Thread: id = 7480 os_tid = 0x19b8 [0215.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif")) returned 0x20 [0223.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", dwFileAttributes=0x20) returned 0 [0223.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.932] GetLastError () returned 0x5 [0223.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", dwFileAttributes=0x20) returned 0 [0223.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9cd0) returned 1 Thread: id = 7481 os_tid = 0x19bc [0215.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif")) returned 0x20 [0223.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", dwFileAttributes=0x20) returned 0 [0223.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.930] GetLastError () returned 0x5 [0223.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", dwFileAttributes=0x20) returned 0 [0223.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c38) returned 1 Thread: id = 7482 os_tid = 0x19c0 [0215.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf")) returned 0x20 [0222.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF", dwFileAttributes=0x20) returned 0 [0222.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.151] GetLastError () returned 0x5 [0223.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF", dwFileAttributes=0x20) returned 0 [0223.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f338) returned 1 Thread: id = 7483 os_tid = 0x19c4 [0215.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf")) returned 0x20 [0229.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF", dwFileAttributes=0x20) returned 0 [0229.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.067] GetLastError () returned 0x5 [0230.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF", dwFileAttributes=0x20) returned 0 [0230.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ede8) returned 1 Thread: id = 7484 os_tid = 0x19c8 [0215.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif")) returned 0x20 [0223.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", dwFileAttributes=0x20) returned 0 [0223.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.929] GetLastError () returned 0x5 [0223.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", dwFileAttributes=0x20) returned 0 [0223.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9ba0) returned 1 Thread: id = 7485 os_tid = 0x19cc [0215.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif")) returned 0x20 [0223.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", dwFileAttributes=0x20) returned 0 [0223.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.928] GetLastError () returned 0x5 [0223.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", dwFileAttributes=0x20) returned 0 [0223.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9b08) returned 1 Thread: id = 7486 os_tid = 0x19d0 [0215.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif")) returned 0x20 [0223.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", dwFileAttributes=0x20) returned 0 [0223.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.904] GetLastError () returned 0x5 [0223.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", dwFileAttributes=0x20) returned 0 [0223.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddd98) returned 1 Thread: id = 7487 os_tid = 0x19d8 [0215.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif")) returned 0x20 [0223.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", dwFileAttributes=0x20) returned 0 [0223.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.903] GetLastError () returned 0x5 [0223.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", dwFileAttributes=0x20) returned 0 [0223.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ddeb8) returned 1 Thread: id = 7488 os_tid = 0x19dc [0215.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif")) returned 0x20 [0223.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", dwFileAttributes=0x20) returned 0 [0223.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.901] GetLastError () returned 0x5 [0223.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", dwFileAttributes=0x20) returned 0 [0223.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de218) returned 1 Thread: id = 7489 os_tid = 0x19e0 [0215.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif")) returned 0x20 [0223.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", dwFileAttributes=0x20) returned 0 [0223.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.900] GetLastError () returned 0x5 [0223.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", dwFileAttributes=0x20) returned 0 [0223.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81deb18) returned 1 Thread: id = 7490 os_tid = 0x19e4 [0215.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif")) returned 0x20 [0223.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", dwFileAttributes=0x20) returned 0 [0223.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.899] GetLastError () returned 0x5 [0223.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", dwFileAttributes=0x20) returned 0 [0223.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de8d8) returned 1 Thread: id = 7491 os_tid = 0x19e8 [0215.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif")) returned 0x20 [0223.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", dwFileAttributes=0x20) returned 0 [0223.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.776] GetLastError () returned 0x5 [0223.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", dwFileAttributes=0x20) returned 0 [0223.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de3c8) returned 1 Thread: id = 7492 os_tid = 0x19f0 [0215.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif")) returned 0x20 [0223.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", dwFileAttributes=0x20) returned 0 [0223.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.775] GetLastError () returned 0x5 [0223.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", dwFileAttributes=0x20) returned 0 [0223.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df028) returned 1 Thread: id = 7493 os_tid = 0x19f4 [0215.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif")) returned 0x20 [0222.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", dwFileAttributes=0x20) returned 0 [0222.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.347] GetLastError () returned 0x5 [0223.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", dwFileAttributes=0x20) returned 0 [0223.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dde28) returned 1 Thread: id = 7494 os_tid = 0x19fc [0215.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif")) returned 0x20 [0222.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", dwFileAttributes=0x20) returned 0 [0222.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.352] GetLastError () returned 0x5 [0223.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", dwFileAttributes=0x20) returned 0 [0223.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81de848) returned 1 Thread: id = 7495 os_tid = 0x1a04 [0215.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif")) returned 0x20 [0222.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", dwFileAttributes=0x20) returned 0 [0222.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.351] GetLastError () returned 0x5 [0223.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", dwFileAttributes=0x20) returned 0 [0223.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81df1d8) returned 1 Thread: id = 7496 os_tid = 0x1a08 [0215.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini")) returned 0x20 [0222.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", dwFileAttributes=0x20) returned 0 [0222.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.349] GetLastError () returned 0x5 [0223.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", dwFileAttributes=0x20) returned 0 [0223.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9a70) returned 1 Thread: id = 7497 os_tid = 0x1d98 [0215.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif")) returned 0x20 [0223.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", dwFileAttributes=0x20) returned 0 [0223.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.828] GetLastError () returned 0x5 [0223.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", dwFileAttributes=0x20) returned 0 [0223.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d99d8) returned 1 Thread: id = 7498 os_tid = 0x1d9c [0215.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif")) returned 0x20 [0223.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0223.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.774] GetLastError () returned 0x5 [0223.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0223.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9940) returned 1 Thread: id = 7499 os_tid = 0x1da0 [0215.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif")) returned 0x20 [0222.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0222.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.348] GetLastError () returned 0x5 [0223.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0223.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d98a8) returned 1 Thread: id = 7500 os_tid = 0x1da4 [0216.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif")) returned 0x20 [0222.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0222.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.350] GetLastError () returned 0x5 [0223.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0223.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9810) returned 1 Thread: id = 7501 os_tid = 0x1da8 [0216.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_u.vst")) returned 0x20 [0225.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST", dwFileAttributes=0x20) returned 0 [0225.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.497] GetLastError () returned 0x5 [0225.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST", dwFileAttributes=0x20) returned 0 [0225.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db788) returned 1 Thread: id = 7502 os_tid = 0x1dac [0216.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_m.vst")) returned 0x20 [0223.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST", dwFileAttributes=0x20) returned 0 [0223.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.881] GetLastError () returned 0x5 [0224.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST", dwFileAttributes=0x20) returned 0 [0224.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 Thread: id = 7503 os_tid = 0x1db0 [0216.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_u.vst")) returned 0x20 [0223.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST", dwFileAttributes=0x20) returned 0 [0223.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.880] GetLastError () returned 0x5 [0224.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST", dwFileAttributes=0x20) returned 0 [0224.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db828) returned 1 Thread: id = 7504 os_tid = 0x1db4 [0216.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss")) returned 0x20 [0223.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS", dwFileAttributes=0x20) returned 0 [0223.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.879] GetLastError () returned 0x5 [0224.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS", dwFileAttributes=0x20) returned 0 [0224.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db8c8) returned 1 Thread: id = 7505 os_tid = 0x1db8 [0216.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_u.vss")) returned 0x20 [0223.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS", dwFileAttributes=0x20) returned 0 [0223.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.896] GetLastError () returned 0x5 [0224.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS", dwFileAttributes=0x20) returned 0 [0224.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db968) returned 1 Thread: id = 7506 os_tid = 0x1dbc [0216.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_m.vss")) returned 0x20 [0225.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.496] GetLastError () returned 0x5 [0225.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dba08) returned 1 Thread: id = 7507 os_tid = 0x1fe8 [0216.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_u.vss")) returned 0x20 [0225.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.494] GetLastError () returned 0x5 [0225.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbaa8) returned 1 Thread: id = 7508 os_tid = 0x2704 [0216.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_m.vss")) returned 0x20 [0225.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS", dwFileAttributes=0x20) returned 0 [0225.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.493] GetLastError () returned 0x5 [0225.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS", dwFileAttributes=0x20) returned 0 [0225.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbb48) returned 1 Thread: id = 7509 os_tid = 0x2708 [0216.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss")) returned 0x20 [0225.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0225.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.499] GetLastError () returned 0x5 [0225.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0225.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbbe8) returned 1 Thread: id = 7510 os_tid = 0x270c [0216.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss")) returned 0x20 [0225.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.500] GetLastError () returned 0x5 [0225.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbc88) returned 1 Thread: id = 7511 os_tid = 0x2710 [0216.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss")) returned 0x20 [0225.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.491] GetLastError () returned 0x5 [0225.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbd28) returned 1 Thread: id = 7512 os_tid = 0x2714 [0216.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss")) returned 0x20 [0225.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.490] GetLastError () returned 0x5 [0225.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbdc8) returned 1 Thread: id = 7513 os_tid = 0x2718 [0216.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss")) returned 0x20 [0225.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.489] GetLastError () returned 0x5 [0225.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbe68) returned 1 Thread: id = 7514 os_tid = 0x271c [0216.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss")) returned 0x20 [0225.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS", dwFileAttributes=0x20) returned 0 [0225.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.488] GetLastError () returned 0x5 [0225.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS", dwFileAttributes=0x20) returned 0 [0225.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbf08) returned 1 Thread: id = 7515 os_tid = 0x2720 [0216.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss")) returned 0x20 [0223.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS", dwFileAttributes=0x20) returned 0 [0223.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.876] GetLastError () returned 0x5 [0224.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS", dwFileAttributes=0x20) returned 0 [0224.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbfa8) returned 1 Thread: id = 7516 os_tid = 0x2724 [0216.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss")) returned 0x20 [0223.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS", dwFileAttributes=0x20) returned 0 [0223.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.877] GetLastError () returned 0x5 [0224.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS", dwFileAttributes=0x20) returned 0 [0224.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc048) returned 1 Thread: id = 7517 os_tid = 0x2758 [0216.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst")) returned 0x20 [0222.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST", dwFileAttributes=0x20) returned 0 [0222.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.599] GetLastError () returned 0x5 [0223.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST", dwFileAttributes=0x20) returned 0 [0223.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 Thread: id = 7518 os_tid = 0x275c [0216.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss")) returned 0x20 [0222.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS", dwFileAttributes=0x20) returned 0 [0222.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.335] GetLastError () returned 0x5 [0223.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS", dwFileAttributes=0x20) returned 0 [0223.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc188) returned 1 Thread: id = 7519 os_tid = 0x2760 [0216.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst")) returned 0x20 [0223.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST", dwFileAttributes=0x20) returned 0 [0223.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.890] GetLastError () returned 0x5 [0224.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST", dwFileAttributes=0x20) returned 0 [0224.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc228) returned 1 Thread: id = 7520 os_tid = 0x2764 [0216.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss")) returned 0x20 [0223.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS", dwFileAttributes=0x20) returned 0 [0223.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.888] GetLastError () returned 0x5 [0224.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS", dwFileAttributes=0x20) returned 0 [0224.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc2c8) returned 1 Thread: id = 7521 os_tid = 0x2778 [0216.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss")) returned 0x20 [0223.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS", dwFileAttributes=0x20) returned 0 [0223.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.887] GetLastError () returned 0x5 [0224.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS", dwFileAttributes=0x20) returned 0 [0224.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc368) returned 1 Thread: id = 7522 os_tid = 0x277c [0216.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss")) returned 0x20 [0223.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS", dwFileAttributes=0x20) returned 0 [0223.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.885] GetLastError () returned 0x5 [0224.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS", dwFileAttributes=0x20) returned 0 [0224.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9778) returned 1 Thread: id = 7523 os_tid = 0x2780 [0216.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss")) returned 0x20 [0223.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS", dwFileAttributes=0x20) returned 0 [0223.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.884] GetLastError () returned 0x5 [0224.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS", dwFileAttributes=0x20) returned 0 [0224.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d96e0) returned 1 Thread: id = 7524 os_tid = 0x2784 [0216.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst")) returned 0x20 [0223.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST", dwFileAttributes=0x20) returned 0 [0223.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.883] GetLastError () returned 0x5 [0224.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST", dwFileAttributes=0x20) returned 0 [0224.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc408) returned 1 Thread: id = 7525 os_tid = 0x2788 [0216.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst")) returned 0x20 [0223.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST", dwFileAttributes=0x20) returned 0 [0223.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.892] GetLastError () returned 0x5 [0224.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST", dwFileAttributes=0x20) returned 0 [0224.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc4a8) returned 1 Thread: id = 7526 os_tid = 0x27e8 [0216.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss")) returned 0x20 [0223.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS", dwFileAttributes=0x20) returned 0 [0223.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.891] GetLastError () returned 0x5 [0224.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS", dwFileAttributes=0x20) returned 0 [0224.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc548) returned 1 Thread: id = 7527 os_tid = 0x27f0 [0216.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss")) returned 0x20 [0225.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS", dwFileAttributes=0x20) returned 0 [0225.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.401] GetLastError () returned 0x5 [0225.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS", dwFileAttributes=0x20) returned 0 [0225.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 Thread: id = 7528 os_tid = 0x2834 [0217.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss")) returned 0x20 [0219.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS", dwFileAttributes=0x20) returned 0 [0219.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.676] GetLastError () returned 0x5 [0219.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS", dwFileAttributes=0x20) returned 0 [0219.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc688) returned 1 Thread: id = 7529 os_tid = 0x2838 [0217.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif")) returned 0x20 [0223.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0223.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.966] GetLastError () returned 0x5 [0223.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0223.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9648) returned 1 Thread: id = 7530 os_tid = 0x283c [0217.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif")) returned 0x20 [0223.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0223.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.415] GetLastError () returned 0x5 [0223.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0223.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b7a0) returned 1 Thread: id = 7531 os_tid = 0x2840 [0217.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif")) returned 0x20 [0223.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0223.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.965] GetLastError () returned 0x5 [0223.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0223.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da0f8) returned 1 Thread: id = 7532 os_tid = 0x2844 [0217.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif")) returned 0x20 [0223.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0223.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.963] GetLastError () returned 0x5 [0223.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0223.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da190) returned 1 Thread: id = 7533 os_tid = 0x2848 [0217.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif")) returned 0x20 [0223.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0223.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.962] GetLastError () returned 0x5 [0223.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0223.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da228) returned 1 Thread: id = 7534 os_tid = 0x285c [0217.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif")) returned 0x20 [0223.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0223.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.949] GetLastError () returned 0x5 [0223.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0223.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da2c0) returned 1 Thread: id = 7535 os_tid = 0x2860 [0217.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif")) returned 0x20 [0223.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0223.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.948] GetLastError () returned 0x5 [0223.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0223.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da358) returned 1 Thread: id = 7536 os_tid = 0x289c [0217.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif")) returned 0x20 [0223.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0223.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.947] GetLastError () returned 0x5 [0223.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0223.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da3f0) returned 1 Thread: id = 7537 os_tid = 0x28a0 [0217.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif")) returned 0x20 [0223.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0223.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.945] GetLastError () returned 0x5 [0223.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0223.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da488) returned 1 Thread: id = 7538 os_tid = 0x28a4 [0217.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif")) returned 0x20 [0223.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0223.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.944] GetLastError () returned 0x5 [0223.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0223.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da520) returned 1 Thread: id = 7539 os_tid = 0x2d78 [0217.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif")) returned 0x20 [0223.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0223.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.943] GetLastError () returned 0x5 [0223.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0223.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da5b8) returned 1 Thread: id = 7540 os_tid = 0x12e0 [0217.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif")) returned 0x20 [0223.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0223.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.942] GetLastError () returned 0x5 [0223.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0223.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da650) returned 1 Thread: id = 7541 os_tid = 0xfac [0217.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif")) returned 0x20 [0223.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0223.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.941] GetLastError () returned 0x5 [0223.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0223.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6e8) returned 1 Thread: id = 7542 os_tid = 0x1638 [0217.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif")) returned 0x20 [0223.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0223.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.940] GetLastError () returned 0x5 [0223.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0223.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da780) returned 1 Thread: id = 7543 os_tid = 0x1794 [0217.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif")) returned 0x20 [0223.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0223.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.938] GetLastError () returned 0x5 [0223.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0223.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da818) returned 1 Thread: id = 7544 os_tid = 0x330 [0217.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif")) returned 0x20 [0223.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0223.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.937] GetLastError () returned 0x5 [0223.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0223.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8b0) returned 1 Thread: id = 7545 os_tid = 0xec8 [0217.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif")) returned 0x20 [0223.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0223.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.973] GetLastError () returned 0x5 [0223.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0223.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da948) returned 1 Thread: id = 7546 os_tid = 0xf94 [0217.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif")) returned 0x20 [0223.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0223.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.972] GetLastError () returned 0x5 [0223.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0223.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da9e0) returned 1 Thread: id = 7547 os_tid = 0x2b3c [0217.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif")) returned 0x20 [0223.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0223.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.971] GetLastError () returned 0x5 [0223.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0223.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa78) returned 1 Thread: id = 7548 os_tid = 0x2b50 [0217.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif")) returned 0x20 [0223.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", dwFileAttributes=0x20) returned 0 [0223.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.969] GetLastError () returned 0x5 [0223.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", dwFileAttributes=0x20) returned 0 [0223.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dab10) returned 1 Thread: id = 7549 os_tid = 0x10c4 [0217.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif")) returned 0x20 [0223.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", dwFileAttributes=0x20) returned 0 [0223.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.967] GetLastError () returned 0x5 [0223.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", dwFileAttributes=0x20) returned 0 [0223.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daba8) returned 1 Thread: id = 7550 os_tid = 0x1354 [0217.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif")) returned 0x20 [0224.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", dwFileAttributes=0x20) returned 0 [0224.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.792] GetLastError () returned 0x5 [0224.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", dwFileAttributes=0x20) returned 0 [0224.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dac40) returned 1 Thread: id = 7551 os_tid = 0x2e44 [0219.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif")) returned 0x20 [0224.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0224.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.793] GetLastError () returned 0x5 [0224.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0224.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dacd8) returned 1 Thread: id = 7572 os_tid = 0x2e4c [0219.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss")) returned 0x20 [0219.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS", dwFileAttributes=0x20) returned 0 [0219.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.701] GetLastError () returned 0x5 [0219.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS", dwFileAttributes=0x20) returned 0 [0219.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b3f8) returned 1 Thread: id = 7573 os_tid = 0xa2c [0219.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss")) returned 0x20 [0219.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS", dwFileAttributes=0x20) returned 0 [0219.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.703] GetLastError () returned 0x5 [0219.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS", dwFileAttributes=0x20) returned 0 [0219.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a8b8) returned 1 Thread: id = 7574 os_tid = 0x2f24 [0219.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss")) returned 0x20 [0219.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS", dwFileAttributes=0x20) returned 0 [0219.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.704] GetLastError () returned 0x5 [0219.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS", dwFileAttributes=0x20) returned 0 [0219.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc728) returned 1 Thread: id = 7575 os_tid = 0x1508 [0219.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss")) returned 0x20 [0219.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0219.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.706] GetLastError () returned 0x5 [0219.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0219.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7c8) returned 1 Thread: id = 7576 os_tid = 0x7f0 [0219.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss")) returned 0x20 [0225.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.399] GetLastError () returned 0x5 [0225.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc868) returned 1 Thread: id = 7577 os_tid = 0x8d8 [0219.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst")) returned 0x20 [0223.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST", dwFileAttributes=0x20) returned 0 [0223.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.895] GetLastError () returned 0x5 [0224.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST", dwFileAttributes=0x20) returned 0 [0224.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc908) returned 1 Thread: id = 7578 os_tid = 0x940 [0219.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst")) returned 0x20 [0225.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST", dwFileAttributes=0x20) returned 0 [0225.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.524] GetLastError () returned 0x5 [0225.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST", dwFileAttributes=0x20) returned 0 [0225.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 Thread: id = 7579 os_tid = 0x12a0 [0219.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss")) returned 0x20 [0225.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS", dwFileAttributes=0x20) returned 0 [0225.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.518] GetLastError () returned 0x5 [0225.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS", dwFileAttributes=0x20) returned 0 [0225.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dca48) returned 1 Thread: id = 7580 os_tid = 0x90c [0219.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst")) returned 0x20 [0225.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST", dwFileAttributes=0x20) returned 0 [0225.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.519] GetLastError () returned 0x5 [0225.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST", dwFileAttributes=0x20) returned 0 [0225.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcae8) returned 1 Thread: id = 7581 os_tid = 0x91c [0219.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss")) returned 0x20 [0225.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS", dwFileAttributes=0x20) returned 0 [0225.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.517] GetLastError () returned 0x5 [0225.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS", dwFileAttributes=0x20) returned 0 [0225.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcb88) returned 1 Thread: id = 7582 os_tid = 0x2338 [0219.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst")) returned 0x20 [0225.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST", dwFileAttributes=0x20) returned 0 [0225.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.404] GetLastError () returned 0x5 [0225.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST", dwFileAttributes=0x20) returned 0 [0225.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcc28) returned 1 Thread: id = 7583 os_tid = 0x233c [0219.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss")) returned 0x20 [0225.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.522] GetLastError () returned 0x5 [0225.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 7584 os_tid = 0x2430 [0219.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss")) returned 0x20 [0225.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.521] GetLastError () returned 0x5 [0225.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcd68) returned 1 Thread: id = 7585 os_tid = 0x2434 [0219.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss")) returned 0x20 [0225.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS", dwFileAttributes=0x20) returned 0 [0225.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.402] GetLastError () returned 0x5 [0225.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS", dwFileAttributes=0x20) returned 0 [0225.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce08) returned 1 Thread: id = 7586 os_tid = 0x25c4 [0219.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf")) returned 0x20 [0219.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF", dwFileAttributes=0x20) returned 0 [0219.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.718] GetLastError () returned 0x5 [0219.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF", dwFileAttributes=0x20) returned 0 [0219.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 7587 os_tid = 0x26d4 [0219.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf")) returned 0x20 [0219.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF", dwFileAttributes=0x20) returned 0 [0219.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.720] GetLastError () returned 0x5 [0219.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF", dwFileAttributes=0x20) returned 0 [0219.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 7588 os_tid = 0x2424 [0219.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf")) returned 0x20 [0228.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF", dwFileAttributes=0x20) returned 0 [0228.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.222] GetLastError () returned 0x5 [0229.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF", dwFileAttributes=0x20) returned 0 [0229.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 7589 os_tid = 0x2334 [0219.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf")) returned 0x20 [0228.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF", dwFileAttributes=0x20) returned 0 [0228.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.176] GetLastError () returned 0x5 [0229.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF", dwFileAttributes=0x20) returned 0 [0229.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f008) returned 1 Thread: id = 7590 os_tid = 0x8b4 [0219.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf")) returned 0x20 [0224.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF", dwFileAttributes=0x20) returned 0 [0224.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.982] GetLastError () returned 0x5 [0224.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF", dwFileAttributes=0x20) returned 0 [0224.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ebc8) returned 1 Thread: id = 7591 os_tid = 0x120 [0219.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf")) returned 0x20 [0231.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF", dwFileAttributes=0x20) returned 0 [0231.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.157] GetLastError () returned 0x5 [0232.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF", dwFileAttributes=0x20) returned 0 [0232.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f3c0) returned 1 Thread: id = 7592 os_tid = 0x3e8 [0219.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf")) returned 0x20 [0231.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF", dwFileAttributes=0x20) returned 0 [0231.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.158] GetLastError () returned 0x5 [0232.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF", dwFileAttributes=0x20) returned 0 [0232.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f090) returned 1 Thread: id = 7593 os_tid = 0x1c78 [0219.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid")) returned 0x20 [0231.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID", dwFileAttributes=0x20) returned 0 [0231.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.159] GetLastError () returned 0x5 [0232.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID", dwFileAttributes=0x20) returned 0 [0232.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eb40) returned 1 Thread: id = 7594 os_tid = 0x1ffc [0219.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif")) returned 0x20 [0231.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF", dwFileAttributes=0x20) returned 0 [0231.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.167] GetLastError () returned 0x5 [0232.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF", dwFileAttributes=0x20) returned 0 [0232.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 7595 os_tid = 0x2128 [0219.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf")) returned 0x20 [0231.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF", dwFileAttributes=0x20) returned 0 [0231.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.168] GetLastError () returned 0x5 [0232.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF", dwFileAttributes=0x20) returned 0 [0232.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f6f0) returned 1 Thread: id = 7596 os_tid = 0x2134 [0219.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf")) returned 0x20 [0231.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF", dwFileAttributes=0x20) returned 0 [0231.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.169] GetLastError () returned 0x5 [0232.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF", dwFileAttributes=0x20) returned 0 [0232.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 7597 os_tid = 0x2138 [0219.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf")) returned 0x20 [0231.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF", dwFileAttributes=0x20) returned 0 [0231.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.170] GetLastError () returned 0x5 [0232.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF", dwFileAttributes=0x20) returned 0 [0232.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 7598 os_tid = 0x2168 [0219.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf")) returned 0x20 [0231.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF", dwFileAttributes=0x20) returned 0 [0231.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.171] GetLastError () returned 0x5 [0232.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF", dwFileAttributes=0x20) returned 0 [0232.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 7599 os_tid = 0x2614 [0219.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf")) returned 0x20 [0231.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF", dwFileAttributes=0x20) returned 0 [0231.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.172] GetLastError () returned 0x5 [0232.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF", dwFileAttributes=0x20) returned 0 [0232.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f448) returned 1 Thread: id = 7600 os_tid = 0x276c [0219.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf")) returned 0x20 [0231.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF", dwFileAttributes=0x20) returned 0 [0231.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.173] GetLastError () returned 0x5 [0232.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF", dwFileAttributes=0x20) returned 0 [0232.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f2b0) returned 1 Thread: id = 7601 os_tid = 0x1cc4 [0219.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf")) returned 0x20 [0231.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF", dwFileAttributes=0x20) returned 0 [0231.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.174] GetLastError () returned 0x5 [0232.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF", dwFileAttributes=0x20) returned 0 [0232.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 Thread: id = 7602 os_tid = 0x1cdc [0219.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf")) returned 0x20 [0231.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF", dwFileAttributes=0x20) returned 0 [0231.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.175] GetLastError () returned 0x5 [0232.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF", dwFileAttributes=0x20) returned 0 [0232.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 7603 os_tid = 0x1cf0 [0219.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf")) returned 0x20 [0231.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF", dwFileAttributes=0x20) returned 0 [0231.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.176] GetLastError () returned 0x5 [0232.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF", dwFileAttributes=0x20) returned 0 [0232.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f118) returned 1 Thread: id = 7604 os_tid = 0x1d84 [0219.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf")) returned 0x20 [0231.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF", dwFileAttributes=0x20) returned 0 [0231.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.177] GetLastError () returned 0x5 [0232.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF", dwFileAttributes=0x20) returned 0 [0232.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec50) returned 1 Thread: id = 7605 os_tid = 0x2198 [0219.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf")) returned 0x20 [0231.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF", dwFileAttributes=0x20) returned 0 [0231.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.155] GetLastError () returned 0x5 [0232.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF", dwFileAttributes=0x20) returned 0 [0232.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 7606 os_tid = 0x219c [0219.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf")) returned 0x20 [0231.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF", dwFileAttributes=0x20) returned 0 [0231.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.156] GetLastError () returned 0x5 [0232.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF", dwFileAttributes=0x20) returned 0 [0232.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ef80) returned 1 Thread: id = 7607 os_tid = 0x21a0 [0219.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf")) returned 0x20 [0229.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF", dwFileAttributes=0x20) returned 0 [0229.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.328] GetLastError () returned 0x5 [0229.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF", dwFileAttributes=0x20) returned 0 [0229.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f228) returned 1 Thread: id = 7608 os_tid = 0x21a4 [0220.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf")) returned 0x20 [0228.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF", dwFileAttributes=0x20) returned 0 [0228.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.175] GetLastError () returned 0x5 [0229.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF", dwFileAttributes=0x20) returned 0 [0229.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f558) returned 1 Thread: id = 7610 os_tid = 0x2a24 [0220.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif")) returned 0x20 [0224.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0224.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.815] GetLastError () returned 0x5 [0224.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0224.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b1b0) returned 1 Thread: id = 7611 os_tid = 0x2a28 [0220.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif")) returned 0x20 [0224.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", dwFileAttributes=0x20) returned 0 [0224.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.817] GetLastError () returned 0x5 [0224.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", dwFileAttributes=0x20) returned 0 [0224.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ae20) returned 1 Thread: id = 7612 os_tid = 0x2144 [0220.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif")) returned 0x20 [0224.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", dwFileAttributes=0x20) returned 0 [0224.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.819] GetLastError () returned 0x5 [0224.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", dwFileAttributes=0x20) returned 0 [0224.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a4a0) returned 1 Thread: id = 7613 os_tid = 0x2148 [0220.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif")) returned 0x20 [0224.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", dwFileAttributes=0x20) returned 0 [0224.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.791] GetLastError () returned 0x5 [0224.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", dwFileAttributes=0x20) returned 0 [0224.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b968) returned 1 Thread: id = 7614 os_tid = 0x2154 [0220.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif")) returned 0x20 [0224.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", dwFileAttributes=0x20) returned 0 [0224.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.781] GetLastError () returned 0x5 [0224.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", dwFileAttributes=0x20) returned 0 [0224.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bbc8) returned 1 Thread: id = 7615 os_tid = 0x2158 [0220.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif")) returned 0x20 [0224.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", dwFileAttributes=0x20) returned 0 [0224.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.780] GetLastError () returned 0x5 [0224.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", dwFileAttributes=0x20) returned 0 [0224.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a798) returned 1 Thread: id = 7616 os_tid = 0x215c [0220.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif")) returned 0x20 [0224.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", dwFileAttributes=0x20) returned 0 [0224.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.375] GetLastError () returned 0x5 [0224.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", dwFileAttributes=0x20) returned 0 [0224.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ba98) returned 1 Thread: id = 7617 os_tid = 0x2160 [0220.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif")) returned 0x20 [0224.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", dwFileAttributes=0x20) returned 0 [0224.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.374] GetLastError () returned 0x5 [0224.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", dwFileAttributes=0x20) returned 0 [0224.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ac58) returned 1 Thread: id = 7618 os_tid = 0x2164 [0220.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif")) returned 0x20 [0224.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", dwFileAttributes=0x20) returned 0 [0224.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.372] GetLastError () returned 0x5 [0224.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", dwFileAttributes=0x20) returned 0 [0224.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a2d8) returned 1 Thread: id = 7619 os_tid = 0x20e4 [0220.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif")) returned 0x20 [0223.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", dwFileAttributes=0x20) returned 0 [0223.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.993] GetLastError () returned 0x5 [0223.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", dwFileAttributes=0x20) returned 0 [0223.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a830) returned 1 Thread: id = 7620 os_tid = 0x20e8 [0220.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif")) returned 0x20 [0223.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", dwFileAttributes=0x20) returned 0 [0223.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.991] GetLastError () returned 0x5 [0223.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", dwFileAttributes=0x20) returned 0 [0223.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2ab28) returned 1 Thread: id = 7621 os_tid = 0x20ec [0220.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif")) returned 0x20 [0223.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", dwFileAttributes=0x20) returned 0 [0223.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.990] GetLastError () returned 0x5 [0223.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", dwFileAttributes=0x20) returned 0 [0223.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a8c8) returned 1 Thread: id = 7622 os_tid = 0x20f0 [0220.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif")) returned 0x20 [0223.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0223.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.989] GetLastError () returned 0x5 [0223.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0223.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a700) returned 1 Thread: id = 7623 os_tid = 0x210c [0220.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif")) returned 0x20 [0223.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", dwFileAttributes=0x20) returned 0 [0223.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.988] GetLastError () returned 0x5 [0223.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", dwFileAttributes=0x20) returned 0 [0223.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a240) returned 1 Thread: id = 7624 os_tid = 0x2110 [0220.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif")) returned 0x20 [0223.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", dwFileAttributes=0x20) returned 0 [0223.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.986] GetLastError () returned 0x5 [0223.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", dwFileAttributes=0x20) returned 0 [0223.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bd90) returned 1 Thread: id = 7625 os_tid = 0x213c [0220.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif")) returned 0x20 [0223.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", dwFileAttributes=0x20) returned 0 [0223.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.985] GetLastError () returned 0x5 [0223.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", dwFileAttributes=0x20) returned 0 [0223.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b2e0) returned 1 Thread: id = 7626 os_tid = 0x2140 [0220.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif")) returned 0x20 [0223.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", dwFileAttributes=0x20) returned 0 [0223.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.984] GetLastError () returned 0x5 [0223.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", dwFileAttributes=0x20) returned 0 [0223.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2af50) returned 1 Thread: id = 7627 os_tid = 0x1cf4 [0220.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif")) returned 0x20 [0223.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", dwFileAttributes=0x20) returned 0 [0223.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.983] GetLastError () returned 0x5 [0223.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", dwFileAttributes=0x20) returned 0 [0223.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bc60) returned 1 Thread: id = 7628 os_tid = 0x1fd4 [0220.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif")) returned 0x20 [0223.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", dwFileAttributes=0x20) returned 0 [0223.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.982] GetLastError () returned 0x5 [0223.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", dwFileAttributes=0x20) returned 0 [0223.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2bcf8) returned 1 Thread: id = 7629 os_tid = 0x211c [0220.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif")) returned 0x20 [0223.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", dwFileAttributes=0x20) returned 0 [0223.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.980] GetLastError () returned 0x5 [0223.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", dwFileAttributes=0x20) returned 0 [0223.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2a078) returned 1 Thread: id = 7630 os_tid = 0x2124 [0220.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif")) returned 0x20 [0223.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", dwFileAttributes=0x20) returned 0 [0223.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.979] GetLastError () returned 0x5 [0223.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", dwFileAttributes=0x20) returned 0 [0223.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e29f48) returned 1 Thread: id = 7631 os_tid = 0x212c [0220.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif")) returned 0x20 [0223.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", dwFileAttributes=0x20) returned 0 [0223.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.978] GetLastError () returned 0x5 [0223.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", dwFileAttributes=0x20) returned 0 [0223.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2b378) returned 1 Thread: id = 7632 os_tid = 0x1cec [0220.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif")) returned 0x20 [0223.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", dwFileAttributes=0x20) returned 0 [0223.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.977] GetLastError () returned 0x5 [0223.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", dwFileAttributes=0x20) returned 0 [0223.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e2be28) returned 1 Thread: id = 7633 os_tid = 0x1cc0 [0220.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif")) returned 0x20 [0223.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", dwFileAttributes=0x20) returned 0 [0223.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.976] GetLastError () returned 0x5 [0223.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", dwFileAttributes=0x20) returned 0 [0223.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dad70) returned 1 Thread: id = 7634 os_tid = 0x1cfc [0220.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif")) returned 0x20 [0223.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", dwFileAttributes=0x20) returned 0 [0223.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.975] GetLastError () returned 0x5 [0223.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", dwFileAttributes=0x20) returned 0 [0223.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dae08) returned 1 Thread: id = 7635 os_tid = 0x1d04 [0220.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif")) returned 0x20 [0224.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", dwFileAttributes=0x20) returned 0 [0224.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.820] GetLastError () returned 0x5 [0224.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", dwFileAttributes=0x20) returned 0 [0224.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daea0) returned 1 Thread: id = 7636 os_tid = 0x2038 [0220.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif")) returned 0x20 [0223.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0223.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.826] GetLastError () returned 0x5 [0223.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0223.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daf38) returned 1 Thread: id = 7637 os_tid = 0x2118 [0220.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf")) returned 0x20 [0228.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF", dwFileAttributes=0x20) returned 0 [0228.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.847] GetLastError () returned 0x5 [0228.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF", dwFileAttributes=0x20) returned 0 [0228.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 7638 os_tid = 0x1ccc [0220.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf")) returned 0x20 [0227.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF", dwFileAttributes=0x20) returned 0 [0227.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.360] GetLastError () returned 0x5 [0228.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF", dwFileAttributes=0x20) returned 0 [0228.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 Thread: id = 7639 os_tid = 0x1cd0 [0221.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf")) returned 0x20 [0227.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF", dwFileAttributes=0x20) returned 0 [0227.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.505] GetLastError () returned 0x5 [0228.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF", dwFileAttributes=0x20) returned 0 [0228.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 7640 os_tid = 0x1cd4 [0221.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf")) returned 0x20 [0227.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF", dwFileAttributes=0x20) returned 0 [0227.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.536] GetLastError () returned 0x5 [0227.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF", dwFileAttributes=0x20) returned 0 [0227.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 7641 os_tid = 0x1cd8 [0221.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf")) returned 0x20 [0226.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF", dwFileAttributes=0x20) returned 0 [0226.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.473] GetLastError () returned 0x5 [0227.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF", dwFileAttributes=0x20) returned 0 [0227.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 7642 os_tid = 0x1ce0 [0221.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf")) returned 0x20 [0226.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF", dwFileAttributes=0x20) returned 0 [0226.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.273] GetLastError () returned 0x5 [0227.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF", dwFileAttributes=0x20) returned 0 [0227.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 7643 os_tid = 0x1ce8 [0221.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg")) returned 0x20 [0226.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG", dwFileAttributes=0x20) returned 0 [0226.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.615] GetLastError () returned 0x5 [0226.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG", dwFileAttributes=0x20) returned 0 [0226.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 7644 os_tid = 0x1d80 [0221.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf")) returned 0x20 [0225.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF", dwFileAttributes=0x20) returned 0 [0225.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.424] GetLastError () returned 0x5 [0226.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF", dwFileAttributes=0x20) returned 0 [0226.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 7645 os_tid = 0x21a8 [0221.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg")) returned 0x20 [0225.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG", dwFileAttributes=0x20) returned 0 [0225.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.423] GetLastError () returned 0x5 [0226.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG", dwFileAttributes=0x20) returned 0 [0226.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f8e0) returned 1 Thread: id = 7646 os_tid = 0x21ac [0221.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg")) returned 0x20 [0225.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG", dwFileAttributes=0x20) returned 0 [0225.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.245] GetLastError () returned 0x5 [0226.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG", dwFileAttributes=0x20) returned 0 [0226.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 7647 os_tid = 0x21b0 [0221.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf")) returned 0x20 [0225.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF", dwFileAttributes=0x20) returned 0 [0225.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.971] GetLastError () returned 0x5 [0225.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF", dwFileAttributes=0x20) returned 0 [0225.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 7648 os_tid = 0x21c0 [0221.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss")) returned 0x20 [0225.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS", dwFileAttributes=0x20) returned 0 [0225.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.426] GetLastError () returned 0x5 [0225.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS", dwFileAttributes=0x20) returned 0 [0225.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7c8) returned 1 Thread: id = 7649 os_tid = 0x1c2c [0221.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss")) returned 0x20 [0225.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.438] GetLastError () returned 0x5 [0225.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc728) returned 1 Thread: id = 7650 os_tid = 0x1ce4 [0221.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst")) returned 0x20 [0225.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST", dwFileAttributes=0x20) returned 0 [0225.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.436] GetLastError () returned 0x5 [0225.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST", dwFileAttributes=0x20) returned 0 [0225.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc688) returned 1 Thread: id = 7651 os_tid = 0x1cf8 [0221.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss")) returned 0x20 [0225.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.425] GetLastError () returned 0x5 [0225.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcea8) returned 1 Thread: id = 7652 os_tid = 0x1d00 [0221.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst")) returned 0x20 [0225.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST", dwFileAttributes=0x20) returned 0 [0225.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.423] GetLastError () returned 0x5 [0225.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST", dwFileAttributes=0x20) returned 0 [0225.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcf48) returned 1 Thread: id = 7653 os_tid = 0x1d08 [0221.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss")) returned 0x20 [0225.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS", dwFileAttributes=0x20) returned 0 [0225.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.398] GetLastError () returned 0x5 [0225.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS", dwFileAttributes=0x20) returned 0 [0225.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcfe8) returned 1 Thread: id = 7654 os_tid = 0x1d28 [0221.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss")) returned 0x20 [0225.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS", dwFileAttributes=0x20) returned 0 [0225.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.396] GetLastError () returned 0x5 [0225.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS", dwFileAttributes=0x20) returned 0 [0225.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd088) returned 1 Thread: id = 7655 os_tid = 0x1d58 [0221.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst")) returned 0x20 [0225.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST", dwFileAttributes=0x20) returned 0 [0225.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.422] GetLastError () returned 0x5 [0225.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST", dwFileAttributes=0x20) returned 0 [0225.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd128) returned 1 Thread: id = 7656 os_tid = 0x1d78 [0221.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst")) returned 0x20 [0225.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST", dwFileAttributes=0x20) returned 0 [0225.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.419] GetLastError () returned 0x5 [0225.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST", dwFileAttributes=0x20) returned 0 [0225.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd1c8) returned 1 Thread: id = 7657 os_tid = 0x1fd8 [0221.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss")) returned 0x20 [0225.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS", dwFileAttributes=0x20) returned 0 [0225.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.417] GetLastError () returned 0x5 [0225.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS", dwFileAttributes=0x20) returned 0 [0225.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd268) returned 1 Thread: id = 7658 os_tid = 0x2040 [0221.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss")) returned 0x20 [0225.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS", dwFileAttributes=0x20) returned 0 [0225.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.416] GetLastError () returned 0x5 [0225.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS", dwFileAttributes=0x20) returned 0 [0225.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd308) returned 1 Thread: id = 7659 os_tid = 0x2120 [0221.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss")) returned 0x20 [0225.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS", dwFileAttributes=0x20) returned 0 [0225.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.415] GetLastError () returned 0x5 [0225.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS", dwFileAttributes=0x20) returned 0 [0225.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd3a8) returned 1 Thread: id = 7660 os_tid = 0x2d08 [0221.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss")) returned 0x20 [0225.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS", dwFileAttributes=0x20) returned 0 [0225.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.395] GetLastError () returned 0x5 [0225.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS", dwFileAttributes=0x20) returned 0 [0225.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd448) returned 1 Thread: id = 7661 os_tid = 0x918 [0221.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss")) returned 0x20 [0225.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS", dwFileAttributes=0x20) returned 0 [0225.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.636] GetLastError () returned 0x5 [0225.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS", dwFileAttributes=0x20) returned 0 [0225.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd4e8) returned 1 Thread: id = 7662 os_tid = 0x5ec [0221.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss")) returned 0x20 [0225.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS", dwFileAttributes=0x20) returned 0 [0225.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.486] GetLastError () returned 0x5 [0225.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS", dwFileAttributes=0x20) returned 0 [0225.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd588) returned 1 Thread: id = 7663 os_tid = 0x14b0 [0221.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss")) returned 0x20 [0225.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.435] GetLastError () returned 0x5 [0225.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a8b8) returned 1 Thread: id = 7664 os_tid = 0x1c58 [0221.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss")) returned 0x20 [0225.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.433] GetLastError () returned 0x5 [0225.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b3f8) returned 1 Thread: id = 7665 os_tid = 0x1c60 [0221.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss")) returned 0x20 [0225.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS", dwFileAttributes=0x20) returned 0 [0225.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.432] GetLastError () returned 0x5 [0225.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS", dwFileAttributes=0x20) returned 0 [0225.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 7666 os_tid = 0x1c64 [0221.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss")) returned 0x20 [0225.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS", dwFileAttributes=0x20) returned 0 [0225.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.414] GetLastError () returned 0x5 [0225.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS", dwFileAttributes=0x20) returned 0 [0225.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332930) returned 1 Thread: id = 7667 os_tid = 0x1c98 [0221.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss")) returned 0x20 [0225.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.440] GetLastError () returned 0x5 [0225.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83329d0) returned 1 Thread: id = 7668 os_tid = 0x2114 [0221.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss")) returned 0x20 [0225.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.439] GetLastError () returned 0x5 [0225.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332a70) returned 1 Thread: id = 7669 os_tid = 0x282c [0221.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss")) returned 0x20 [0225.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS", dwFileAttributes=0x20) returned 0 [0225.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.430] GetLastError () returned 0x5 [0225.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS", dwFileAttributes=0x20) returned 0 [0225.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332b10) returned 1 Thread: id = 7670 os_tid = 0x11a8 [0221.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst")) returned 0x20 [0225.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST", dwFileAttributes=0x20) returned 0 [0225.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.429] GetLastError () returned 0x5 [0225.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST", dwFileAttributes=0x20) returned 0 [0225.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332bb0) returned 1 Thread: id = 7671 os_tid = 0x2d40 [0221.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss")) returned 0x20 [0225.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS", dwFileAttributes=0x20) returned 0 [0225.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.427] GetLastError () returned 0x5 [0225.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS", dwFileAttributes=0x20) returned 0 [0225.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332c50) returned 1 Thread: id = 7672 os_tid = 0x2d44 [0222.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst")) returned 0x20 [0225.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST", dwFileAttributes=0x20) returned 0 [0225.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.481] GetLastError () returned 0x5 [0225.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST", dwFileAttributes=0x20) returned 0 [0225.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332cf0) returned 1 Thread: id = 7673 os_tid = 0x1c6c [0222.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif")) returned 0x20 [0224.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", dwFileAttributes=0x20) returned 0 [0224.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.814] GetLastError () returned 0x5 [0224.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", dwFileAttributes=0x20) returned 0 [0224.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dafd0) returned 1 Thread: id = 7674 os_tid = 0x1c7c [0222.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst")) returned 0x20 [0225.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST", dwFileAttributes=0x20) returned 0 [0225.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.412] GetLastError () returned 0x5 [0225.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST", dwFileAttributes=0x20) returned 0 [0225.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db068) returned 1 Thread: id = 7675 os_tid = 0x1cb0 [0222.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst")) returned 0x20 [0225.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST", dwFileAttributes=0x20) returned 0 [0225.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.411] GetLastError () returned 0x5 [0225.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST", dwFileAttributes=0x20) returned 0 [0225.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db100) returned 1 Thread: id = 7676 os_tid = 0x2d0c [0222.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst")) returned 0x20 [0225.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST", dwFileAttributes=0x20) returned 0 [0225.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.409] GetLastError () returned 0x5 [0225.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST", dwFileAttributes=0x20) returned 0 [0225.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332d90) returned 1 Thread: id = 7677 os_tid = 0x264 [0222.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst")) returned 0x20 [0225.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST", dwFileAttributes=0x20) returned 0 [0225.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.408] GetLastError () returned 0x5 [0225.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST", dwFileAttributes=0x20) returned 0 [0225.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332e30) returned 1 Thread: id = 7678 os_tid = 0x1c3c [0222.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss")) returned 0x20 [0225.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0225.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.406] GetLastError () returned 0x5 [0225.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0225.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332ed0) returned 1 Thread: id = 7679 os_tid = 0x1c44 [0222.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss")) returned 0x20 [0225.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.405] GetLastError () returned 0x5 [0225.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332f70) returned 1 Thread: id = 7680 os_tid = 0x1c70 [0222.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss")) returned 0x20 [0225.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS", dwFileAttributes=0x20) returned 0 [0225.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.512] GetLastError () returned 0x5 [0225.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS", dwFileAttributes=0x20) returned 0 [0225.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333010) returned 1 Thread: id = 7681 os_tid = 0x1c80 [0222.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss")) returned 0x20 [0225.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS", dwFileAttributes=0x20) returned 0 [0225.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.514] GetLastError () returned 0x5 [0225.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS", dwFileAttributes=0x20) returned 0 [0225.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83330b0) returned 1 Thread: id = 7682 os_tid = 0x484 [0222.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss")) returned 0x20 [0225.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS", dwFileAttributes=0x20) returned 0 [0225.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.515] GetLastError () returned 0x5 [0225.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS", dwFileAttributes=0x20) returned 0 [0225.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333150) returned 1 Thread: id = 7684 os_tid = 0x1c48 [0222.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif")) returned 0x20 [0224.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", dwFileAttributes=0x20) returned 0 [0224.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.810] GetLastError () returned 0x5 [0224.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", dwFileAttributes=0x20) returned 0 [0224.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db198) returned 1 Thread: id = 7685 os_tid = 0x1c4c [0222.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif")) returned 0x20 [0224.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", dwFileAttributes=0x20) returned 0 [0224.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.811] GetLastError () returned 0x5 [0224.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", dwFileAttributes=0x20) returned 0 [0224.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db230) returned 1 Thread: id = 7686 os_tid = 0x1c50 [0222.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif")) returned 0x20 [0224.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", dwFileAttributes=0x20) returned 0 [0224.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.813] GetLastError () returned 0x5 [0224.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", dwFileAttributes=0x20) returned 0 [0224.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db2c8) returned 1 Thread: id = 7687 os_tid = 0x1c74 [0222.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif")) returned 0x20 [0224.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", dwFileAttributes=0x20) returned 0 [0224.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.795] GetLastError () returned 0x5 [0224.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", dwFileAttributes=0x20) returned 0 [0224.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db360) returned 1 Thread: id = 7688 os_tid = 0x20e0 [0222.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif")) returned 0x20 [0224.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", dwFileAttributes=0x20) returned 0 [0224.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.796] GetLastError () returned 0x5 [0224.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", dwFileAttributes=0x20) returned 0 [0224.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db3f8) returned 1 Thread: id = 7689 os_tid = 0x214c [0222.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif")) returned 0x20 [0224.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", dwFileAttributes=0x20) returned 0 [0224.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.797] GetLastError () returned 0x5 [0224.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", dwFileAttributes=0x20) returned 0 [0224.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db490) returned 1 Thread: id = 7690 os_tid = 0xc4 [0222.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif")) returned 0x20 [0224.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", dwFileAttributes=0x20) returned 0 [0224.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.798] GetLastError () returned 0x5 [0224.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", dwFileAttributes=0x20) returned 0 [0224.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db528) returned 1 Thread: id = 7691 os_tid = 0xdf4 [0222.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif")) returned 0x20 [0224.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", dwFileAttributes=0x20) returned 0 [0224.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.800] GetLastError () returned 0x5 [0224.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", dwFileAttributes=0x20) returned 0 [0224.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40fd0) returned 1 Thread: id = 7692 os_tid = 0x508 [0222.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif")) returned 0x20 [0224.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", dwFileAttributes=0x20) returned 0 [0224.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.801] GetLastError () returned 0x5 [0224.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", dwFileAttributes=0x20) returned 0 [0224.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41068) returned 1 Thread: id = 7693 os_tid = 0x1350 [0222.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif")) returned 0x20 [0224.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", dwFileAttributes=0x20) returned 0 [0224.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.802] GetLastError () returned 0x5 [0224.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", dwFileAttributes=0x20) returned 0 [0224.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41a80) returned 1 Thread: id = 7694 os_tid = 0x1c84 [0222.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif")) returned 0x20 [0224.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", dwFileAttributes=0x20) returned 0 [0224.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.803] GetLastError () returned 0x5 [0224.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", dwFileAttributes=0x20) returned 0 [0224.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b18) returned 1 Thread: id = 7695 os_tid = 0x1fec [0222.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif")) returned 0x20 [0224.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", dwFileAttributes=0x20) returned 0 [0224.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.805] GetLastError () returned 0x5 [0224.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", dwFileAttributes=0x20) returned 0 [0224.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41100) returned 1 Thread: id = 7696 os_tid = 0x1ff0 [0222.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif")) returned 0x20 [0224.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", dwFileAttributes=0x20) returned 0 [0224.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.806] GetLastError () returned 0x5 [0224.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", dwFileAttributes=0x20) returned 0 [0224.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41198) returned 1 Thread: id = 7697 os_tid = 0x2044 [0222.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif")) returned 0x20 [0224.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", dwFileAttributes=0x20) returned 0 [0224.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.807] GetLastError () returned 0x5 [0224.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", dwFileAttributes=0x20) returned 0 [0224.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41230) returned 1 Thread: id = 7698 os_tid = 0x1c34 [0222.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif")) returned 0x20 [0224.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", dwFileAttributes=0x20) returned 0 [0224.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0224.808] GetLastError () returned 0x5 [0224.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", dwFileAttributes=0x20) returned 0 [0224.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412c8) returned 1 Thread: id = 7700 os_tid = 0x1c8c [0222.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg")) returned 0x20 [0231.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG", dwFileAttributes=0x20) returned 0 [0231.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.106] GetLastError () returned 0x5 [0232.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG", dwFileAttributes=0x20) returned 0 [0232.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 7701 os_tid = 0x1c94 [0222.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf")) returned 0x20 [0231.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF", dwFileAttributes=0x20) returned 0 [0231.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.107] GetLastError () returned 0x5 [0232.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF", dwFileAttributes=0x20) returned 0 [0232.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc10) returned 1 Thread: id = 7702 os_tid = 0x1fd0 [0222.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg")) returned 0x20 [0234.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG", dwFileAttributes=0x20) returned 0 [0234.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.249] GetLastError () returned 0x5 [0234.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG", dwFileAttributes=0x20) returned 0 [0234.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f858) returned 1 Thread: id = 7703 os_tid = 0x1fe0 [0222.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf")) returned 0x20 [0234.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF", dwFileAttributes=0x20) returned 0 [0234.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.238] GetLastError () returned 0x5 [0234.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF", dwFileAttributes=0x20) returned 0 [0234.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f307c0) returned 1 Thread: id = 7704 os_tid = 0x1fe4 [0222.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg")) returned 0x20 [0231.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG", dwFileAttributes=0x20) returned 0 [0231.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.108] GetLastError () returned 0x5 [0232.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG", dwFileAttributes=0x20) returned 0 [0232.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f312e8) returned 1 Thread: id = 7705 os_tid = 0x1ff4 [0222.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg")) returned 0x20 [0234.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG", dwFileAttributes=0x20) returned 0 [0234.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.236] GetLastError () returned 0x5 [0234.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG", dwFileAttributes=0x20) returned 0 [0234.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 7706 os_tid = 0x203c [0222.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg")) returned 0x20 [0234.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG", dwFileAttributes=0x20) returned 0 [0234.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.234] GetLastError () returned 0x5 [0234.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG", dwFileAttributes=0x20) returned 0 [0234.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 7707 os_tid = 0x1c40 [0222.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg")) returned 0x20 [0234.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG", dwFileAttributes=0x20) returned 0 [0234.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.233] GetLastError () returned 0x5 [0234.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG", dwFileAttributes=0x20) returned 0 [0234.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 7708 os_tid = 0x1c54 [0222.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf")) returned 0x20 [0234.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF", dwFileAttributes=0x20) returned 0 [0234.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.231] GetLastError () returned 0x5 [0234.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF", dwFileAttributes=0x20) returned 0 [0234.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 7709 os_tid = 0x1c68 [0222.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf")) returned 0x20 [0234.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF", dwFileAttributes=0x20) returned 0 [0234.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.230] GetLastError () returned 0x5 [0234.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF", dwFileAttributes=0x20) returned 0 [0234.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 7710 os_tid = 0x1c88 [0222.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg")) returned 0x20 [0234.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG", dwFileAttributes=0x20) returned 0 [0234.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.229] GetLastError () returned 0x5 [0234.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG", dwFileAttributes=0x20) returned 0 [0234.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f305a0) returned 1 Thread: id = 7711 os_tid = 0x1c90 [0222.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg")) returned 0x20 [0234.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG", dwFileAttributes=0x20) returned 0 [0234.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.227] GetLastError () returned 0x5 [0234.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG", dwFileAttributes=0x20) returned 0 [0234.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 7712 os_tid = 0xefc [0222.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg")) returned 0x20 [0233.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG", dwFileAttributes=0x20) returned 0 [0233.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.940] GetLastError () returned 0x5 [0233.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG", dwFileAttributes=0x20) returned 0 [0233.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5e0) returned 1 Thread: id = 7713 os_tid = 0x28ec [0222.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf")) returned 0x20 [0231.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF", dwFileAttributes=0x20) returned 0 [0231.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.161] GetLastError () returned 0x5 [0232.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF", dwFileAttributes=0x20) returned 0 [0232.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f778) returned 1 Thread: id = 7714 os_tid = 0x3c4 [0222.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf")) returned 0x20 [0231.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF", dwFileAttributes=0x20) returned 0 [0231.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.160] GetLastError () returned 0x5 [0232.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF", dwFileAttributes=0x20) returned 0 [0232.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f668) returned 1 Thread: id = 7715 os_tid = 0x1d24 [0222.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg")) returned 0x20 [0231.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG", dwFileAttributes=0x20) returned 0 [0231.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.098] GetLastError () returned 0x5 [0232.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG", dwFileAttributes=0x20) returned 0 [0232.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 7716 os_tid = 0x2288 [0222.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg")) returned 0x20 [0231.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG", dwFileAttributes=0x20) returned 0 [0231.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.101] GetLastError () returned 0x5 [0232.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG", dwFileAttributes=0x20) returned 0 [0232.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 7717 os_tid = 0x27fc [0222.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg")) returned 0x20 [0231.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG", dwFileAttributes=0x20) returned 0 [0231.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.095] GetLastError () returned 0x5 [0232.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG", dwFileAttributes=0x20) returned 0 [0232.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 7718 os_tid = 0x96c [0222.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg")) returned 0x20 [0234.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG", dwFileAttributes=0x20) returned 0 [0234.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.258] GetLastError () returned 0x5 [0234.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG", dwFileAttributes=0x20) returned 0 [0234.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 7719 os_tid = 0x11a4 [0222.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf")) returned 0x20 [0234.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF", dwFileAttributes=0x20) returned 0 [0234.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.257] GetLastError () returned 0x5 [0234.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF", dwFileAttributes=0x20) returned 0 [0234.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf888) returned 1 Thread: id = 7720 os_tid = 0x2510 [0222.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf")) returned 0x20 [0234.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF", dwFileAttributes=0x20) returned 0 [0234.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.255] GetLastError () returned 0x5 [0234.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF", dwFileAttributes=0x20) returned 0 [0234.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 7721 os_tid = 0x25c0 [0222.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf")) returned 0x20 [0234.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF", dwFileAttributes=0x20) returned 0 [0234.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.254] GetLastError () returned 0x5 [0234.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF", dwFileAttributes=0x20) returned 0 [0234.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 7722 os_tid = 0x1f00 [0222.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf")) returned 0x20 [0234.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF", dwFileAttributes=0x20) returned 0 [0234.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.252] GetLastError () returned 0x5 [0234.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF", dwFileAttributes=0x20) returned 0 [0234.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 7723 os_tid = 0x2bd4 [0222.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf")) returned 0x20 [0234.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF", dwFileAttributes=0x20) returned 0 [0234.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.251] GetLastError () returned 0x5 [0234.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF", dwFileAttributes=0x20) returned 0 [0234.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 7724 os_tid = 0x29f0 [0223.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf")) returned 0x20 [0231.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF", dwFileAttributes=0x20) returned 0 [0231.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.151] GetLastError () returned 0x5 [0232.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF", dwFileAttributes=0x20) returned 0 [0232.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 7725 os_tid = 0xe64 [0223.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst")) returned 0x20 [0225.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST", dwFileAttributes=0x20) returned 0 [0225.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.547] GetLastError () returned 0x5 [0225.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST", dwFileAttributes=0x20) returned 0 [0225.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c118) returned 1 Thread: id = 7726 os_tid = 0x2820 [0223.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss")) returned 0x20 [0225.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS", dwFileAttributes=0x20) returned 0 [0225.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.549] GetLastError () returned 0x5 [0225.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS", dwFileAttributes=0x20) returned 0 [0225.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b998) returned 1 Thread: id = 7727 os_tid = 0x2850 [0223.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst")) returned 0x20 [0225.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST", dwFileAttributes=0x20) returned 0 [0225.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.529] GetLastError () returned 0x5 [0225.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST", dwFileAttributes=0x20) returned 0 [0225.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bd58) returned 1 Thread: id = 7728 os_tid = 0x2854 [0223.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss")) returned 0x20 [0225.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.531] GetLastError () returned 0x5 [0225.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bf38) returned 1 Thread: id = 7729 os_tid = 0x2858 [0223.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss")) returned 0x20 [0225.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.532] GetLastError () returned 0x5 [0225.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b038) returned 1 Thread: id = 7730 os_tid = 0x287c [0223.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss")) returned 0x20 [0225.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.533] GetLastError () returned 0x5 [0225.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bcb8) returned 1 Thread: id = 7731 os_tid = 0x2880 [0223.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss")) returned 0x20 [0225.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.535] GetLastError () returned 0x5 [0225.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a458) returned 1 Thread: id = 7732 os_tid = 0x2e94 [0223.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss")) returned 0x20 [0225.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.544] GetLastError () returned 0x5 [0225.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a598) returned 1 Thread: id = 7733 os_tid = 0x2884 [0223.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss")) returned 0x20 [0225.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.545] GetLastError () returned 0x5 [0225.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bdf8) returned 1 Thread: id = 7734 os_tid = 0x2888 [0223.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst")) returned 0x20 [0225.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST", dwFileAttributes=0x20) returned 0 [0225.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.555] GetLastError () returned 0x5 [0225.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST", dwFileAttributes=0x20) returned 0 [0225.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819adb8) returned 1 Thread: id = 7735 os_tid = 0x288c [0223.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst")) returned 0x20 [0225.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST", dwFileAttributes=0x20) returned 0 [0225.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.525] GetLastError () returned 0x5 [0225.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST", dwFileAttributes=0x20) returned 0 [0225.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ad18) returned 1 Thread: id = 7736 os_tid = 0x2890 [0223.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss")) returned 0x20 [0225.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.536] GetLastError () returned 0x5 [0225.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b538) returned 1 Thread: id = 7737 os_tid = 0x2894 [0223.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss")) returned 0x20 [0225.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.537] GetLastError () returned 0x5 [0225.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b358) returned 1 Thread: id = 7738 os_tid = 0x2898 [0223.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss")) returned 0x20 [0225.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.539] GetLastError () returned 0x5 [0225.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bfd8) returned 1 Thread: id = 7739 os_tid = 0x28a8 [0223.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss")) returned 0x20 [0225.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.540] GetLastError () returned 0x5 [0225.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bb78) returned 1 Thread: id = 7740 os_tid = 0x2b44 [0223.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss")) returned 0x20 [0225.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.541] GetLastError () returned 0x5 [0225.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b718) returned 1 Thread: id = 7741 os_tid = 0x181c [0223.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss")) returned 0x20 [0225.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.552] GetLastError () returned 0x5 [0225.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a4f8) returned 1 Thread: id = 7742 os_tid = 0x28ac [0223.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss")) returned 0x20 [0225.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.554] GetLastError () returned 0x5 [0225.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b678) returned 1 Thread: id = 7743 os_tid = 0x2e98 [0223.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss")) returned 0x20 [0225.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.543] GetLastError () returned 0x5 [0225.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aa98) returned 1 Thread: id = 7744 os_tid = 0x28b0 [0223.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst")) returned 0x20 [0225.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST", dwFileAttributes=0x20) returned 0 [0225.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.503] GetLastError () returned 0x5 [0225.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST", dwFileAttributes=0x20) returned 0 [0225.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b858) returned 1 Thread: id = 7745 os_tid = 0x28b4 [0223.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst")) returned 0x20 [0225.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST", dwFileAttributes=0x20) returned 0 [0225.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.505] GetLastError () returned 0x5 [0225.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST", dwFileAttributes=0x20) returned 0 [0225.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c258) returned 1 Thread: id = 7746 os_tid = 0x28b8 [0223.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss")) returned 0x20 [0225.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS", dwFileAttributes=0x20) returned 0 [0225.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.550] GetLastError () returned 0x5 [0225.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS", dwFileAttributes=0x20) returned 0 [0225.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b498) returned 1 Thread: id = 7747 os_tid = 0x28bc [0223.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst")) returned 0x20 [0225.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST", dwFileAttributes=0x20) returned 0 [0225.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.551] GetLastError () returned 0x5 [0225.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST", dwFileAttributes=0x20) returned 0 [0225.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b7b8) returned 1 Thread: id = 7748 os_tid = 0x1014 [0223.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss")) returned 0x20 [0225.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS", dwFileAttributes=0x20) returned 0 [0225.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.528] GetLastError () returned 0x5 [0225.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS", dwFileAttributes=0x20) returned 0 [0225.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a958) returned 1 Thread: id = 7749 os_tid = 0x28c0 [0223.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf")) returned 0x20 [0231.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF", dwFileAttributes=0x20) returned 0 [0231.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.152] GetLastError () returned 0x5 [0232.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF", dwFileAttributes=0x20) returned 0 [0232.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be920) returned 1 Thread: id = 7750 os_tid = 0x28c4 [0223.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf")) returned 0x20 [0231.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF", dwFileAttributes=0x20) returned 0 [0231.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.163] GetLastError () returned 0x5 [0232.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF", dwFileAttributes=0x20) returned 0 [0232.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 7751 os_tid = 0x28c8 [0223.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf")) returned 0x20 [0231.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF", dwFileAttributes=0x20) returned 0 [0231.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.165] GetLastError () returned 0x5 [0232.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF", dwFileAttributes=0x20) returned 0 [0232.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 7752 os_tid = 0x28cc [0223.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf")) returned 0x20 [0231.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF", dwFileAttributes=0x20) returned 0 [0231.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.166] GetLastError () returned 0x5 [0232.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF", dwFileAttributes=0x20) returned 0 [0232.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 7753 os_tid = 0x1544 [0223.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf")) returned 0x20 [0231.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF", dwFileAttributes=0x20) returned 0 [0231.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.153] GetLastError () returned 0x5 [0232.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF", dwFileAttributes=0x20) returned 0 [0232.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 7754 os_tid = 0x28d0 [0223.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf")) returned 0x20 [0231.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF", dwFileAttributes=0x20) returned 0 [0231.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.154] GetLastError () returned 0x5 [0232.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF", dwFileAttributes=0x20) returned 0 [0232.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 7755 os_tid = 0x28d4 [0223.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf")) returned 0x20 [0231.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF", dwFileAttributes=0x20) returned 0 [0231.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.111] GetLastError () returned 0x5 [0232.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF", dwFileAttributes=0x20) returned 0 [0232.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 7756 os_tid = 0x28d8 [0223.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf")) returned 0x20 [0231.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF", dwFileAttributes=0x20) returned 0 [0231.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.112] GetLastError () returned 0x5 [0232.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF", dwFileAttributes=0x20) returned 0 [0232.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 7757 os_tid = 0x28dc [0223.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf")) returned 0x20 [0231.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF", dwFileAttributes=0x20) returned 0 [0231.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.162] GetLastError () returned 0x5 [0232.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF", dwFileAttributes=0x20) returned 0 [0232.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 7758 os_tid = 0x28e0 [0223.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst")) returned 0x20 [0225.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST", dwFileAttributes=0x20) returned 0 [0225.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.527] GetLastError () returned 0x5 [0225.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST", dwFileAttributes=0x20) returned 0 [0225.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a9f8) returned 1 Thread: id = 7759 os_tid = 0x28e4 [0223.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt")) returned 0x20 [0225.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT", dwFileAttributes=0x20) returned 0 [0225.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.506] GetLastError () returned 0x5 [0225.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT", dwFileAttributes=0x20) returned 0 [0225.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a638) returned 1 Thread: id = 7760 os_tid = 0x928 [0223.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls")) returned 0x20 [0225.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS", dwFileAttributes=0x20) returned 0 [0225.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.507] GetLastError () returned 0x5 [0225.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS", dwFileAttributes=0x20) returned 0 [0225.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819abd8) returned 1 Thread: id = 7761 os_tid = 0x28e8 [0223.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst")) returned 0x20 [0225.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST", dwFileAttributes=0x20) returned 0 [0225.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.509] GetLastError () returned 0x5 [0225.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST", dwFileAttributes=0x20) returned 0 [0225.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83331f0) returned 1 Thread: id = 7762 os_tid = 0xb44 [0223.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst")) returned 0x20 [0225.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST", dwFileAttributes=0x20) returned 0 [0225.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.510] GetLastError () returned 0x5 [0225.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST", dwFileAttributes=0x20) returned 0 [0225.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333290) returned 1 Thread: id = 7763 os_tid = 0xb54 [0223.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst")) returned 0x20 [0225.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST", dwFileAttributes=0x20) returned 0 [0225.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.502] GetLastError () returned 0x5 [0225.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST", dwFileAttributes=0x20) returned 0 [0225.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333330) returned 1 Thread: id = 7764 os_tid = 0x1580 [0223.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst")) returned 0x20 [0225.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST", dwFileAttributes=0x20) returned 0 [0225.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.556] GetLastError () returned 0x5 [0225.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST", dwFileAttributes=0x20) returned 0 [0225.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83333d0) returned 1 Thread: id = 7765 os_tid = 0x534 [0223.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst")) returned 0x20 [0225.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST", dwFileAttributes=0x20) returned 0 [0225.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.558] GetLastError () returned 0x5 [0225.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST", dwFileAttributes=0x20) returned 0 [0225.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333470) returned 1 Thread: id = 7766 os_tid = 0x1584 [0223.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst")) returned 0x20 [0225.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST", dwFileAttributes=0x20) returned 0 [0225.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.559] GetLastError () returned 0x5 [0225.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST", dwFileAttributes=0x20) returned 0 [0225.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333510) returned 1 Thread: id = 7767 os_tid = 0x12f8 [0223.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst")) returned 0x20 [0225.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST", dwFileAttributes=0x20) returned 0 [0225.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.560] GetLastError () returned 0x5 [0225.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST", dwFileAttributes=0x20) returned 0 [0225.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83335b0) returned 1 Thread: id = 7770 os_tid = 0x12f0 [0223.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf")) returned 0x20 [0231.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF", dwFileAttributes=0x20) returned 0 [0231.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.146] GetLastError () returned 0x5 [0232.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF", dwFileAttributes=0x20) returned 0 [0232.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 7771 os_tid = 0x28f0 [0223.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg")) returned 0x20 [0231.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG", dwFileAttributes=0x20) returned 0 [0231.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.147] GetLastError () returned 0x5 [0232.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG", dwFileAttributes=0x20) returned 0 [0232.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 7772 os_tid = 0x28f8 [0223.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg")) returned 0x20 [0231.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG", dwFileAttributes=0x20) returned 0 [0231.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.148] GetLastError () returned 0x5 [0232.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG", dwFileAttributes=0x20) returned 0 [0232.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 7773 os_tid = 0x29b4 [0223.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg")) returned 0x20 [0231.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG", dwFileAttributes=0x20) returned 0 [0231.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.149] GetLastError () returned 0x5 [0232.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG", dwFileAttributes=0x20) returned 0 [0232.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 Thread: id = 7774 os_tid = 0x29b8 [0223.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg")) returned 0x20 [0231.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG", dwFileAttributes=0x20) returned 0 [0231.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.109] GetLastError () returned 0x5 [0232.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG", dwFileAttributes=0x20) returned 0 [0232.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 7775 os_tid = 0x29bc [0223.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg")) returned 0x20 [0231.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG", dwFileAttributes=0x20) returned 0 [0231.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.110] GetLastError () returned 0x5 [0232.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG", dwFileAttributes=0x20) returned 0 [0232.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 7776 os_tid = 0xba0 [0223.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg")) returned 0x20 [0231.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG", dwFileAttributes=0x20) returned 0 [0231.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.150] GetLastError () returned 0x5 [0232.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG", dwFileAttributes=0x20) returned 0 [0232.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 7777 os_tid = 0x2ad0 [0223.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg")) returned 0x20 [0230.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG", dwFileAttributes=0x20) returned 0 [0230.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.857] GetLastError () returned 0x5 [0230.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG", dwFileAttributes=0x20) returned 0 [0230.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be568) returned 1 Thread: id = 7778 os_tid = 0x2adc [0223.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif")) returned 0x20 [0230.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF", dwFileAttributes=0x20) returned 0 [0230.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.654] GetLastError () returned 0x5 [0230.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF", dwFileAttributes=0x20) returned 0 [0230.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 Thread: id = 7779 os_tid = 0x2d5c [0223.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif")) returned 0x20 [0231.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF", dwFileAttributes=0x20) returned 0 [0231.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.129] GetLastError () returned 0x5 [0232.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF", dwFileAttributes=0x20) returned 0 [0232.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be5f0) returned 1 Thread: id = 7780 os_tid = 0x2d60 [0223.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif")) returned 0x20 [0231.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF", dwFileAttributes=0x20) returned 0 [0231.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.130] GetLastError () returned 0x5 [0232.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF", dwFileAttributes=0x20) returned 0 [0232.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 7781 os_tid = 0x2d64 [0223.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif")) returned 0x20 [0231.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF", dwFileAttributes=0x20) returned 0 [0231.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.131] GetLastError () returned 0x5 [0232.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF", dwFileAttributes=0x20) returned 0 [0232.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 7782 os_tid = 0x728 [0223.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif")) returned 0x20 [0231.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF", dwFileAttributes=0x20) returned 0 [0231.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.132] GetLastError () returned 0x5 [0232.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF", dwFileAttributes=0x20) returned 0 [0232.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 7783 os_tid = 0x2d6c [0223.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif")) returned 0x20 [0231.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF", dwFileAttributes=0x20) returned 0 [0231.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.133] GetLastError () returned 0x5 [0232.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF", dwFileAttributes=0x20) returned 0 [0232.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 7784 os_tid = 0x1548 [0223.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif")) returned 0x20 [0231.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF", dwFileAttributes=0x20) returned 0 [0231.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.134] GetLastError () returned 0x5 [0232.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF", dwFileAttributes=0x20) returned 0 [0232.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 7785 os_tid = 0x2d70 [0223.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif")) returned 0x20 [0231.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF", dwFileAttributes=0x20) returned 0 [0231.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.135] GetLastError () returned 0x5 [0232.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF", dwFileAttributes=0x20) returned 0 [0232.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 7786 os_tid = 0x2d74 [0223.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif")) returned 0x20 [0231.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF", dwFileAttributes=0x20) returned 0 [0231.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.136] GetLastError () returned 0x5 [0232.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF", dwFileAttributes=0x20) returned 0 [0232.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf998) returned 1 Thread: id = 7787 os_tid = 0x2d7c [0223.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif")) returned 0x20 [0231.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF", dwFileAttributes=0x20) returned 0 [0231.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.137] GetLastError () returned 0x5 [0232.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF", dwFileAttributes=0x20) returned 0 [0232.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 7788 os_tid = 0x2d80 [0223.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif")) returned 0x20 [0231.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF", dwFileAttributes=0x20) returned 0 [0231.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.138] GetLastError () returned 0x5 [0232.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF", dwFileAttributes=0x20) returned 0 [0232.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 7789 os_tid = 0x1218 [0223.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif")) returned 0x20 [0231.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF", dwFileAttributes=0x20) returned 0 [0231.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.139] GetLastError () returned 0x5 [0232.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF", dwFileAttributes=0x20) returned 0 [0232.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 7790 os_tid = 0xf54 [0223.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf")) returned 0x20 [0231.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF", dwFileAttributes=0x20) returned 0 [0231.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.140] GetLastError () returned 0x5 [0232.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF", dwFileAttributes=0x20) returned 0 [0232.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 7791 os_tid = 0xc84 [0223.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf")) returned 0x20 [0231.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF", dwFileAttributes=0x20) returned 0 [0231.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.141] GetLastError () returned 0x5 [0232.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF", dwFileAttributes=0x20) returned 0 [0232.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 7792 os_tid = 0x2f44 [0223.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp")) returned 0x20 [0231.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP", dwFileAttributes=0x20) returned 0 [0231.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.096] GetLastError () returned 0x5 [0232.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP", dwFileAttributes=0x20) returned 0 [0232.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfe60) returned 1 Thread: id = 7793 os_tid = 0x2d84 [0223.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp")) returned 0x20 [0231.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP", dwFileAttributes=0x20) returned 0 [0231.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.097] GetLastError () returned 0x5 [0232.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP", dwFileAttributes=0x20) returned 0 [0232.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 7794 os_tid = 0x2d88 [0223.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp")) returned 0x20 [0231.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP", dwFileAttributes=0x20) returned 0 [0231.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.142] GetLastError () returned 0x5 [0232.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP", dwFileAttributes=0x20) returned 0 [0232.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81becd8) returned 1 Thread: id = 7795 os_tid = 0x15d0 [0223.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp")) returned 0x20 [0231.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP", dwFileAttributes=0x20) returned 0 [0231.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.143] GetLastError () returned 0x5 [0232.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP", dwFileAttributes=0x20) returned 0 [0232.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 7796 os_tid = 0x2d8c [0223.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp")) returned 0x20 [0231.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP", dwFileAttributes=0x20) returned 0 [0231.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.145] GetLastError () returned 0x5 [0232.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP", dwFileAttributes=0x20) returned 0 [0232.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053a78) returned 1 Thread: id = 7797 os_tid = 0x2d90 [0223.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp")) returned 0x20 [0231.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP", dwFileAttributes=0x20) returned 0 [0231.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.144] GetLastError () returned 0x5 [0232.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP", dwFileAttributes=0x20) returned 0 [0232.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80540d8) returned 1 Thread: id = 7798 os_tid = 0x2d94 [0223.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp")) returned 0x20 [0231.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP", dwFileAttributes=0x20) returned 0 [0231.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.102] GetLastError () returned 0x5 [0232.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP", dwFileAttributes=0x20) returned 0 [0232.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054628) returned 1 Thread: id = 7799 os_tid = 0x14c0 [0223.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst")) returned 0x20 [0225.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST", dwFileAttributes=0x20) returned 0 [0225.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.570] GetLastError () returned 0x5 [0225.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST", dwFileAttributes=0x20) returned 0 [0225.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc188) returned 1 Thread: id = 7800 os_tid = 0x164c [0223.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst")) returned 0x20 [0225.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST", dwFileAttributes=0x20) returned 0 [0225.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.588] GetLastError () returned 0x5 [0225.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST", dwFileAttributes=0x20) returned 0 [0225.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db6e8) returned 1 Thread: id = 7801 os_tid = 0x814 [0223.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst")) returned 0x20 [0225.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST", dwFileAttributes=0x20) returned 0 [0225.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.569] GetLastError () returned 0x5 [0225.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST", dwFileAttributes=0x20) returned 0 [0225.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db648) returned 1 Thread: id = 7802 os_tid = 0xe08 [0223.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss")) returned 0x20 [0225.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.567] GetLastError () returned 0x5 [0225.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333650) returned 1 Thread: id = 7803 os_tid = 0x14c4 [0223.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss")) returned 0x20 [0225.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.585] GetLastError () returned 0x5 [0225.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83336f0) returned 1 Thread: id = 7804 os_tid = 0xe54 [0223.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst")) returned 0x20 [0225.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST", dwFileAttributes=0x20) returned 0 [0225.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.583] GetLastError () returned 0x5 [0225.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST", dwFileAttributes=0x20) returned 0 [0225.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333790) returned 1 Thread: id = 7805 os_tid = 0x14c8 [0223.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst")) returned 0x20 [0225.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST", dwFileAttributes=0x20) returned 0 [0225.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.581] GetLastError () returned 0x5 [0225.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST", dwFileAttributes=0x20) returned 0 [0225.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333830) returned 1 Thread: id = 7806 os_tid = 0x834 [0223.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss")) returned 0x20 [0225.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.580] GetLastError () returned 0x5 [0225.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83338d0) returned 1 Thread: id = 7807 os_tid = 0x14cc [0223.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss")) returned 0x20 [0225.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.578] GetLastError () returned 0x5 [0225.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333970) returned 1 Thread: id = 7808 os_tid = 0x14d0 [0223.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss")) returned 0x20 [0225.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.586] GetLastError () returned 0x5 [0225.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333a10) returned 1 Thread: id = 7809 os_tid = 0x14d4 [0223.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss")) returned 0x20 [0225.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.590] GetLastError () returned 0x5 [0225.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ab0) returned 1 Thread: id = 7810 os_tid = 0x14d8 [0223.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss")) returned 0x20 [0225.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS", dwFileAttributes=0x20) returned 0 [0225.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.594] GetLastError () returned 0x5 [0225.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS", dwFileAttributes=0x20) returned 0 [0225.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333b50) returned 1 Thread: id = 7811 os_tid = 0x165c [0223.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss")) returned 0x20 [0225.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS", dwFileAttributes=0x20) returned 0 [0225.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.592] GetLastError () returned 0x5 [0225.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS", dwFileAttributes=0x20) returned 0 [0225.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333bf0) returned 1 Thread: id = 7812 os_tid = 0x1660 [0223.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss")) returned 0x20 [0225.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS", dwFileAttributes=0x20) returned 0 [0225.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.566] GetLastError () returned 0x5 [0225.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS", dwFileAttributes=0x20) returned 0 [0225.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333c90) returned 1 Thread: id = 7813 os_tid = 0x1664 [0223.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst")) returned 0x20 [0225.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST", dwFileAttributes=0x20) returned 0 [0225.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.565] GetLastError () returned 0x5 [0225.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST", dwFileAttributes=0x20) returned 0 [0225.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333d30) returned 1 Thread: id = 7814 os_tid = 0xc20 [0223.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss")) returned 0x20 [0225.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS", dwFileAttributes=0x20) returned 0 [0225.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.563] GetLastError () returned 0x5 [0225.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS", dwFileAttributes=0x20) returned 0 [0225.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333dd0) returned 1 Thread: id = 7815 os_tid = 0x2d9c [0223.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst")) returned 0x20 [0225.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST", dwFileAttributes=0x20) returned 0 [0225.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.562] GetLastError () returned 0x5 [0225.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST", dwFileAttributes=0x20) returned 0 [0225.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333e70) returned 1 Thread: id = 7816 os_tid = 0x2da4 [0223.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss")) returned 0x20 [0225.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.600] GetLastError () returned 0x5 [0225.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333f10) returned 1 Thread: id = 7817 os_tid = 0x2da8 [0223.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss")) returned 0x20 [0225.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.599] GetLastError () returned 0x5 [0225.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333fb0) returned 1 Thread: id = 7818 os_tid = 0x2dac [0223.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss")) returned 0x20 [0225.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS", dwFileAttributes=0x20) returned 0 [0225.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.597] GetLastError () returned 0x5 [0225.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS", dwFileAttributes=0x20) returned 0 [0225.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334050) returned 1 Thread: id = 7819 os_tid = 0x2db4 [0223.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss")) returned 0x20 [0225.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS", dwFileAttributes=0x20) returned 0 [0225.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.595] GetLastError () returned 0x5 [0225.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS", dwFileAttributes=0x20) returned 0 [0225.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83340f0) returned 1 Thread: id = 7820 os_tid = 0x2db8 [0223.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss")) returned 0x20 [0225.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.608] GetLastError () returned 0x5 [0225.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334190) returned 1 Thread: id = 7821 os_tid = 0x2dbc [0223.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst")) returned 0x20 [0225.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST", dwFileAttributes=0x20) returned 0 [0225.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.606] GetLastError () returned 0x5 [0225.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST", dwFileAttributes=0x20) returned 0 [0225.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334230) returned 1 Thread: id = 7822 os_tid = 0x2e00 [0223.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss")) returned 0x20 [0225.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.605] GetLastError () returned 0x5 [0225.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83342d0) returned 1 Thread: id = 7823 os_tid = 0x2f14 [0223.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst")) returned 0x20 [0225.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST", dwFileAttributes=0x20) returned 0 [0225.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.603] GetLastError () returned 0x5 [0225.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST", dwFileAttributes=0x20) returned 0 [0225.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334370) returned 1 Thread: id = 7824 os_tid = 0x2f18 [0223.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_m.vss")) returned 0x20 [0225.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS", dwFileAttributes=0x20) returned 0 [0225.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.601] GetLastError () returned 0x5 [0225.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS", dwFileAttributes=0x20) returned 0 [0225.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334410) returned 1 Thread: id = 7825 os_tid = 0x2f1c [0223.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss")) returned 0x20 [0225.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0225.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.576] GetLastError () returned 0x5 [0225.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0225.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83344b0) returned 1 Thread: id = 7826 os_tid = 0x2f20 [0223.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_m.vss")) returned 0x20 [0225.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS", dwFileAttributes=0x20) returned 0 [0225.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.575] GetLastError () returned 0x5 [0225.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS", dwFileAttributes=0x20) returned 0 [0225.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334550) returned 1 Thread: id = 7827 os_tid = 0x908 [0223.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss")) returned 0x20 [0225.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS", dwFileAttributes=0x20) returned 0 [0225.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.573] GetLastError () returned 0x5 [0225.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS", dwFileAttributes=0x20) returned 0 [0225.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83345f0) returned 1 Thread: id = 7828 os_tid = 0x2fa8 [0223.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss")) returned 0x20 [0225.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS", dwFileAttributes=0x20) returned 0 [0225.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.572] GetLastError () returned 0x5 [0225.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS", dwFileAttributes=0x20) returned 0 [0225.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334690) returned 1 Thread: id = 7829 os_tid = 0xe44 [0223.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss")) returned 0x20 [0225.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS", dwFileAttributes=0x20) returned 0 [0225.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.485] GetLastError () returned 0x5 [0225.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS", dwFileAttributes=0x20) returned 0 [0225.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334730) returned 1 Thread: id = 7831 os_tid = 0x1670 [0223.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp")) returned 0x20 [0231.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP", dwFileAttributes=0x20) returned 0 [0231.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.103] GetLastError () returned 0x5 [0232.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP", dwFileAttributes=0x20) returned 0 [0232.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053d20) returned 1 Thread: id = 7832 os_tid = 0x1674 [0223.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp")) returned 0x20 [0231.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP", dwFileAttributes=0x20) returned 0 [0231.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.104] GetLastError () returned 0x5 [0232.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP", dwFileAttributes=0x20) returned 0 [0232.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 7833 os_tid = 0xc94 [0223.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp")) returned 0x20 [0231.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP", dwFileAttributes=0x20) returned 0 [0231.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.105] GetLastError () returned 0x5 [0232.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP", dwFileAttributes=0x20) returned 0 [0232.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053968) returned 1 Thread: id = 7834 os_tid = 0x1678 [0223.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp")) returned 0x20 [0231.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP", dwFileAttributes=0x20) returned 0 [0231.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.099] GetLastError () returned 0x5 [0232.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP", dwFileAttributes=0x20) returned 0 [0232.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80538e0) returned 1 Thread: id = 7835 os_tid = 0xf9c [0223.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp")) returned 0x20 [0231.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP", dwFileAttributes=0x20) returned 0 [0231.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.106] GetLastError () returned 0x5 [0232.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP", dwFileAttributes=0x20) returned 0 [0232.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053390) returned 1 Thread: id = 7836 os_tid = 0x1d30 [0223.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss")) returned 0x20 [0225.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS", dwFileAttributes=0x20) returned 0 [0225.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.633] GetLastError () returned 0x5 [0225.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS", dwFileAttributes=0x20) returned 0 [0225.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 Thread: id = 7837 os_tid = 0xdf8 [0223.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss")) returned 0x20 [0225.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS", dwFileAttributes=0x20) returned 0 [0225.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.484] GetLastError () returned 0x5 [0225.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS", dwFileAttributes=0x20) returned 0 [0225.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83347d0) returned 1 Thread: id = 7838 os_tid = 0x10c0 [0223.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss")) returned 0x20 [0225.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.482] GetLastError () returned 0x5 [0225.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334870) returned 1 Thread: id = 7841 os_tid = 0x2278 [0223.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss")) returned 0x20 [0225.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.479] GetLastError () returned 0x5 [0225.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ab38) returned 1 Thread: id = 7842 os_tid = 0x2280 [0223.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst")) returned 0x20 [0225.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST", dwFileAttributes=0x20) returned 0 [0225.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.477] GetLastError () returned 0x5 [0225.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST", dwFileAttributes=0x20) returned 0 [0225.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b8f8) returned 1 Thread: id = 7843 os_tid = 0x2284 [0223.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst")) returned 0x20 [0225.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST", dwFileAttributes=0x20) returned 0 [0225.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.632] GetLastError () returned 0x5 [0225.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST", dwFileAttributes=0x20) returned 0 [0225.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a6d8) returned 1 Thread: id = 7844 os_tid = 0x5f8 [0223.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst")) returned 0x20 [0225.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST", dwFileAttributes=0x20) returned 0 [0225.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.474] GetLastError () returned 0x5 [0225.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST", dwFileAttributes=0x20) returned 0 [0225.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c1b8) returned 1 Thread: id = 7845 os_tid = 0x228c [0223.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst")) returned 0x20 [0225.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST", dwFileAttributes=0x20) returned 0 [0225.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.472] GetLastError () returned 0x5 [0225.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST", dwFileAttributes=0x20) returned 0 [0225.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bad8) returned 1 Thread: id = 7846 os_tid = 0x2290 [0223.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss")) returned 0x20 [0225.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS", dwFileAttributes=0x20) returned 0 [0225.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.630] GetLastError () returned 0x5 [0225.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS", dwFileAttributes=0x20) returned 0 [0225.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b5d8) returned 1 Thread: id = 7847 os_tid = 0x2294 [0223.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss")) returned 0x20 [0225.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS", dwFileAttributes=0x20) returned 0 [0225.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.471] GetLastError () returned 0x5 [0225.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS", dwFileAttributes=0x20) returned 0 [0225.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b218) returned 1 Thread: id = 7848 os_tid = 0x2298 [0223.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls")) returned 0x20 [0225.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS", dwFileAttributes=0x20) returned 0 [0225.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.629] GetLastError () returned 0x5 [0225.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS", dwFileAttributes=0x20) returned 0 [0225.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aef8) returned 1 Thread: id = 7849 os_tid = 0x229c [0223.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_m.vst")) returned 0x20 [0225.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST", dwFileAttributes=0x20) returned 0 [0225.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.469] GetLastError () returned 0x5 [0225.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST", dwFileAttributes=0x20) returned 0 [0225.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a818) returned 1 Thread: id = 7850 os_tid = 0x22a0 [0223.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_u.vst")) returned 0x20 [0225.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST", dwFileAttributes=0x20) returned 0 [0225.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.627] GetLastError () returned 0x5 [0225.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST", dwFileAttributes=0x20) returned 0 [0225.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ae58) returned 1 Thread: id = 7851 os_tid = 0x22a4 [0223.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls")) returned 0x20 [0225.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS", dwFileAttributes=0x20) returned 0 [0225.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.467] GetLastError () returned 0x5 [0225.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS", dwFileAttributes=0x20) returned 0 [0225.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ba38) returned 1 Thread: id = 7852 os_tid = 0x22a8 [0223.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_m.vst")) returned 0x20 [0225.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST", dwFileAttributes=0x20) returned 0 [0225.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.450] GetLastError () returned 0x5 [0225.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST", dwFileAttributes=0x20) returned 0 [0225.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bc18) returned 1 Thread: id = 7853 os_tid = 0x22ac [0223.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_u.vst")) returned 0x20 [0225.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST", dwFileAttributes=0x20) returned 0 [0225.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.449] GetLastError () returned 0x5 [0225.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST", dwFileAttributes=0x20) returned 0 [0225.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c398) returned 1 Thread: id = 7854 os_tid = 0x2554 [0223.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_m.vss")) returned 0x20 [0225.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.626] GetLastError () returned 0x5 [0225.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b178) returned 1 Thread: id = 7855 os_tid = 0x2558 [0223.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_u.vss")) returned 0x20 [0225.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.447] GetLastError () returned 0x5 [0225.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819be98) returned 1 Thread: id = 7856 os_tid = 0x2564 [0223.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls")) returned 0x20 [0225.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS", dwFileAttributes=0x20) returned 0 [0225.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.446] GetLastError () returned 0x5 [0225.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS", dwFileAttributes=0x20) returned 0 [0225.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819af98) returned 1 Thread: id = 7857 os_tid = 0x2568 [0223.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst")) returned 0x20 [0225.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST", dwFileAttributes=0x20) returned 0 [0225.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.624] GetLastError () returned 0x5 [0225.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST", dwFileAttributes=0x20) returned 0 [0225.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b2b8) returned 1 Thread: id = 7858 os_tid = 0x256c [0223.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst")) returned 0x20 [0225.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST", dwFileAttributes=0x20) returned 0 [0225.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.445] GetLastError () returned 0x5 [0225.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST", dwFileAttributes=0x20) returned 0 [0225.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c2f8) returned 1 Thread: id = 7859 os_tid = 0x2570 [0223.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst")) returned 0x20 [0225.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST", dwFileAttributes=0x20) returned 0 [0225.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.623] GetLastError () returned 0x5 [0225.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST", dwFileAttributes=0x20) returned 0 [0225.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a778) returned 1 Thread: id = 7860 os_tid = 0x2574 [0223.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst")) returned 0x20 [0225.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST", dwFileAttributes=0x20) returned 0 [0225.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.443] GetLastError () returned 0x5 [0225.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST", dwFileAttributes=0x20) returned 0 [0225.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac78) returned 1 Thread: id = 7861 os_tid = 0x2578 [0223.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst")) returned 0x20 [0225.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST", dwFileAttributes=0x20) returned 0 [0225.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.442] GetLastError () returned 0x5 [0225.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST", dwFileAttributes=0x20) returned 0 [0225.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b0d8) returned 1 Thread: id = 7862 os_tid = 0x257c [0223.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst")) returned 0x20 [0225.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST", dwFileAttributes=0x20) returned 0 [0225.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.621] GetLastError () returned 0x5 [0225.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST", dwFileAttributes=0x20) returned 0 [0225.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c078) returned 1 Thread: id = 7863 os_tid = 0x2580 [0223.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst")) returned 0x20 [0225.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST", dwFileAttributes=0x20) returned 0 [0225.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.620] GetLastError () returned 0x5 [0225.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST", dwFileAttributes=0x20) returned 0 [0225.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 Thread: id = 7864 os_tid = 0x2584 [0223.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst")) returned 0x20 [0225.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST", dwFileAttributes=0x20) returned 0 [0225.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.618] GetLastError () returned 0x5 [0225.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST", dwFileAttributes=0x20) returned 0 [0225.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 7865 os_tid = 0x2588 [0223.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss")) returned 0x20 [0225.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.617] GetLastError () returned 0x5 [0225.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 7866 os_tid = 0x2618 [0223.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss")) returned 0x20 [0225.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.616] GetLastError () returned 0x5 [0225.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 7867 os_tid = 0x2754 [0223.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss")) returned 0x20 [0225.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.614] GetLastError () returned 0x5 [0225.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 Thread: id = 7868 os_tid = 0x2770 [0223.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss")) returned 0x20 [0225.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.613] GetLastError () returned 0x5 [0225.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 7869 os_tid = 0x2774 [0223.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst")) returned 0x20 [0225.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST", dwFileAttributes=0x20) returned 0 [0225.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.611] GetLastError () returned 0x5 [0225.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST", dwFileAttributes=0x20) returned 0 [0225.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11468) returned 1 Thread: id = 7870 os_tid = 0x27f4 [0223.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst")) returned 0x20 [0225.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST", dwFileAttributes=0x20) returned 0 [0225.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.610] GetLastError () returned 0x5 [0225.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST", dwFileAttributes=0x20) returned 0 [0225.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11328) returned 1 Thread: id = 7871 os_tid = 0x27f8 [0224.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss")) returned 0x20 [0225.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.635] GetLastError () returned 0x5 [0225.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 Thread: id = 7872 os_tid = 0x188c [0224.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf")) returned 0x20 [0234.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF", dwFileAttributes=0x20) returned 0 [0234.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.972] GetLastError () returned 0x5 [0234.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF", dwFileAttributes=0x20) returned 0 [0234.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053da8) returned 1 Thread: id = 7873 os_tid = 0xe88 [0224.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf")) returned 0x20 [0234.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF", dwFileAttributes=0x20) returned 0 [0234.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.244] GetLastError () returned 0x5 [0234.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF", dwFileAttributes=0x20) returned 0 [0234.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054490) returned 1 Thread: id = 7874 os_tid = 0xc24 [0224.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf")) returned 0x20 [0234.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF", dwFileAttributes=0x20) returned 0 [0234.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.243] GetLastError () returned 0x5 [0234.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF", dwFileAttributes=0x20) returned 0 [0234.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054408) returned 1 Thread: id = 7875 os_tid = 0x2804 [0224.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf")) returned 0x20 [0234.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF", dwFileAttributes=0x20) returned 0 [0234.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.101] GetLastError () returned 0x5 [0234.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF", dwFileAttributes=0x20) returned 0 [0234.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80535b0) returned 1 Thread: id = 7876 os_tid = 0x2808 [0224.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf")) returned 0x20 [0234.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF", dwFileAttributes=0x20) returned 0 [0234.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.100] GetLastError () returned 0x5 [0234.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF", dwFileAttributes=0x20) returned 0 [0234.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053528) returned 1 Thread: id = 7877 os_tid = 0x280c [0224.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf")) returned 0x20 [0234.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF", dwFileAttributes=0x20) returned 0 [0234.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.241] GetLastError () returned 0x5 [0234.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF", dwFileAttributes=0x20) returned 0 [0234.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053638) returned 1 Thread: id = 7878 os_tid = 0x2810 [0224.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf")) returned 0x20 [0234.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF", dwFileAttributes=0x20) returned 0 [0234.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.239] GetLastError () returned 0x5 [0234.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF", dwFileAttributes=0x20) returned 0 [0234.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80536c0) returned 1 Thread: id = 7879 os_tid = 0x2814 [0224.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf")) returned 0x20 [0234.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF", dwFileAttributes=0x20) returned 0 [0234.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.099] GetLastError () returned 0x5 [0234.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF", dwFileAttributes=0x20) returned 0 [0234.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053748) returned 1 Thread: id = 7880 os_tid = 0x2818 [0224.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf")) returned 0x20 [0234.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF", dwFileAttributes=0x20) returned 0 [0234.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.097] GetLastError () returned 0x5 [0234.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF", dwFileAttributes=0x20) returned 0 [0234.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80537d0) returned 1 Thread: id = 7881 os_tid = 0x281c [0224.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf")) returned 0x20 [0234.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF", dwFileAttributes=0x20) returned 0 [0234.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.087] GetLastError () returned 0x5 [0234.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF", dwFileAttributes=0x20) returned 0 [0234.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054160) returned 1 Thread: id = 7882 os_tid = 0x1680 [0224.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf")) returned 0x20 [0234.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF", dwFileAttributes=0x20) returned 0 [0234.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.086] GetLastError () returned 0x5 [0234.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF", dwFileAttributes=0x20) returned 0 [0234.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8052f50) returned 1 Thread: id = 7883 os_tid = 0x668 [0224.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf")) returned 0x20 [0234.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF", dwFileAttributes=0x20) returned 0 [0234.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.085] GetLastError () returned 0x5 [0234.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF", dwFileAttributes=0x20) returned 0 [0234.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b00) returned 1 Thread: id = 7884 os_tid = 0x1684 [0224.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf")) returned 0x20 [0234.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF", dwFileAttributes=0x20) returned 0 [0234.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.084] GetLastError () returned 0x5 [0234.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF", dwFileAttributes=0x20) returned 0 [0234.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053858) returned 1 Thread: id = 7885 os_tid = 0x1890 [0224.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf")) returned 0x20 [0234.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF", dwFileAttributes=0x20) returned 0 [0234.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.082] GetLastError () returned 0x5 [0234.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF", dwFileAttributes=0x20) returned 0 [0234.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80539f0) returned 1 Thread: id = 7886 os_tid = 0x1688 [0224.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf")) returned 0x20 [0234.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF", dwFileAttributes=0x20) returned 0 [0234.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.081] GetLastError () returned 0x5 [0234.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF", dwFileAttributes=0x20) returned 0 [0234.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053fc8) returned 1 Thread: id = 7887 os_tid = 0x168c [0224.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf")) returned 0x20 [0234.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF", dwFileAttributes=0x20) returned 0 [0234.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.080] GetLastError () returned 0x5 [0234.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF", dwFileAttributes=0x20) returned 0 [0234.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053eb8) returned 1 Thread: id = 7888 os_tid = 0x1690 [0224.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf")) returned 0x20 [0234.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF", dwFileAttributes=0x20) returned 0 [0234.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.079] GetLastError () returned 0x5 [0234.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF", dwFileAttributes=0x20) returned 0 [0234.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80534a0) returned 1 Thread: id = 7889 os_tid = 0x120c [0224.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf")) returned 0x20 [0234.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF", dwFileAttributes=0x20) returned 0 [0234.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.226] GetLastError () returned 0x5 [0234.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF", dwFileAttributes=0x20) returned 0 [0234.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b88) returned 1 Thread: id = 7890 os_tid = 0x1694 [0224.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf")) returned 0x20 [0234.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF", dwFileAttributes=0x20) returned 0 [0234.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.267] GetLastError () returned 0x5 [0234.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF", dwFileAttributes=0x20) returned 0 [0234.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053280) returned 1 Thread: id = 7891 os_tid = 0x14f8 [0224.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf")) returned 0x20 [0234.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF", dwFileAttributes=0x20) returned 0 [0234.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.265] GetLastError () returned 0x5 [0234.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF", dwFileAttributes=0x20) returned 0 [0234.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053c10) returned 1 Thread: id = 7892 os_tid = 0x1504 [0224.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf")) returned 0x20 [0234.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF", dwFileAttributes=0x20) returned 0 [0234.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.264] GetLastError () returned 0x5 [0234.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF", dwFileAttributes=0x20) returned 0 [0234.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 7893 os_tid = 0x138c [0224.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf")) returned 0x20 [0234.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF", dwFileAttributes=0x20) returned 0 [0234.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.262] GetLastError () returned 0x5 [0234.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF", dwFileAttributes=0x20) returned 0 [0234.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 7894 os_tid = 0x1404 [0224.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf")) returned 0x20 [0234.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF", dwFileAttributes=0x20) returned 0 [0234.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.261] GetLastError () returned 0x5 [0234.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF", dwFileAttributes=0x20) returned 0 [0234.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 7895 os_tid = 0x170c [0224.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf")) returned 0x20 [0234.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF", dwFileAttributes=0x20) returned 0 [0234.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.259] GetLastError () returned 0x5 [0234.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF", dwFileAttributes=0x20) returned 0 [0234.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 7896 os_tid = 0x25ac [0224.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf")) returned 0x20 [0234.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF", dwFileAttributes=0x20) returned 0 [0234.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.106] GetLastError () returned 0x5 [0234.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF", dwFileAttributes=0x20) returned 0 [0234.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 7897 os_tid = 0x8d0 [0224.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf")) returned 0x20 [0234.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF", dwFileAttributes=0x20) returned 0 [0234.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.105] GetLastError () returned 0x5 [0234.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF", dwFileAttributes=0x20) returned 0 [0234.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f418) returned 1 Thread: id = 7898 os_tid = 0x1568 [0224.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf")) returned 0x20 [0234.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF", dwFileAttributes=0x20) returned 0 [0234.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.104] GetLastError () returned 0x5 [0234.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF", dwFileAttributes=0x20) returned 0 [0234.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 7899 os_tid = 0x166c [0224.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf")) returned 0x20 [0234.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF", dwFileAttributes=0x20) returned 0 [0234.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.102] GetLastError () returned 0x5 [0234.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF", dwFileAttributes=0x20) returned 0 [0234.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc98) returned 1 Thread: id = 7900 os_tid = 0x8c4 [0225.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf")) returned 0x20 [0234.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF", dwFileAttributes=0x20) returned 0 [0234.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.095] GetLastError () returned 0x5 [0234.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF", dwFileAttributes=0x20) returned 0 [0234.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 7901 os_tid = 0x12a4 [0225.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss")) returned 0x20 [0225.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.334] GetLastError () returned 0x5 [0225.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11148) returned 1 Thread: id = 7902 os_tid = 0x2ffc [0225.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst")) returned 0x20 [0225.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST", dwFileAttributes=0x20) returned 0 [0225.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.639] GetLastError () returned 0x5 [0225.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST", dwFileAttributes=0x20) returned 0 [0225.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e111e8) returned 1 Thread: id = 7903 os_tid = 0xc70 [0225.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst")) returned 0x20 [0225.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST", dwFileAttributes=0x20) returned 0 [0225.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.638] GetLastError () returned 0x5 [0225.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST", dwFileAttributes=0x20) returned 0 [0225.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 Thread: id = 7904 os_tid = 0x488 [0225.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf")) returned 0x20 [0234.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF", dwFileAttributes=0x20) returned 0 [0234.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.248] GetLastError () returned 0x5 [0234.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF", dwFileAttributes=0x20) returned 0 [0234.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 7905 os_tid = 0xbc4 [0225.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf")) returned 0x20 [0234.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF", dwFileAttributes=0x20) returned 0 [0234.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.062] GetLastError () returned 0x5 [0234.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF", dwFileAttributes=0x20) returned 0 [0234.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 Thread: id = 7906 os_tid = 0x8cc [0225.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf")) returned 0x20 [0234.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF", dwFileAttributes=0x20) returned 0 [0234.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.061] GetLastError () returned 0x5 [0234.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF", dwFileAttributes=0x20) returned 0 [0234.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30050) returned 1 Thread: id = 7907 os_tid = 0x2fc8 [0225.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf")) returned 0x20 [0234.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF", dwFileAttributes=0x20) returned 0 [0234.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.059] GetLastError () returned 0x5 [0234.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF", dwFileAttributes=0x20) returned 0 [0234.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 7908 os_tid = 0x2fcc [0225.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf")) returned 0x20 [0234.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF", dwFileAttributes=0x20) returned 0 [0234.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.246] GetLastError () returned 0x5 [0234.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF", dwFileAttributes=0x20) returned 0 [0234.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30408) returned 1 Thread: id = 7909 os_tid = 0xed0 [0225.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf")) returned 0x20 [0234.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF", dwFileAttributes=0x20) returned 0 [0234.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.065] GetLastError () returned 0x5 [0234.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF", dwFileAttributes=0x20) returned 0 [0234.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 Thread: id = 7910 os_tid = 0xe0c [0225.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf")) returned 0x20 [0234.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF", dwFileAttributes=0x20) returned 0 [0234.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.107] GetLastError () returned 0x5 [0234.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF", dwFileAttributes=0x20) returned 0 [0234.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 Thread: id = 7911 os_tid = 0xe14 [0225.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf")) returned 0x20 [0234.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF", dwFileAttributes=0x20) returned 0 [0234.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.064] GetLastError () returned 0x5 [0234.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF", dwFileAttributes=0x20) returned 0 [0234.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bec50) returned 1 Thread: id = 7912 os_tid = 0x924 [0225.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf")) returned 0x20 [0234.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF", dwFileAttributes=0x20) returned 0 [0234.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.109] GetLastError () returned 0x5 [0234.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF", dwFileAttributes=0x20) returned 0 [0234.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0108) returned 1 Thread: id = 7913 os_tid = 0x8ec [0225.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf")) returned 0x20 [0234.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF", dwFileAttributes=0x20) returned 0 [0234.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.220] GetLastError () returned 0x5 [0234.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF", dwFileAttributes=0x20) returned 0 [0234.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfc40) returned 1 Thread: id = 7914 os_tid = 0x92c [0225.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf")) returned 0x20 [0234.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF", dwFileAttributes=0x20) returned 0 [0234.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.222] GetLastError () returned 0x5 [0234.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF", dwFileAttributes=0x20) returned 0 [0234.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 Thread: id = 7915 os_tid = 0xedc [0225.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf")) returned 0x20 [0234.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF", dwFileAttributes=0x20) returned 0 [0234.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.223] GetLastError () returned 0x5 [0234.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF", dwFileAttributes=0x20) returned 0 [0234.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30518) returned 1 Thread: id = 7916 os_tid = 0xe80 [0225.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf")) returned 0x20 [0234.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF", dwFileAttributes=0x20) returned 0 [0234.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.224] GetLastError () returned 0x5 [0234.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF", dwFileAttributes=0x20) returned 0 [0234.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f9f0) returned 1 Thread: id = 7917 os_tid = 0xe50 [0225.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf")) returned 0x20 [0234.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF", dwFileAttributes=0x20) returned 0 [0234.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.077] GetLastError () returned 0x5 [0234.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF", dwFileAttributes=0x20) returned 0 [0234.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 7918 os_tid = 0xe6c [0225.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf")) returned 0x20 [0234.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF", dwFileAttributes=0x20) returned 0 [0234.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.268] GetLastError () returned 0x5 [0234.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF", dwFileAttributes=0x20) returned 0 [0234.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f5b0) returned 1 Thread: id = 7919 os_tid = 0xe70 [0225.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf")) returned 0x20 [0234.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF", dwFileAttributes=0x20) returned 0 [0234.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.270] GetLastError () returned 0x5 [0234.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF", dwFileAttributes=0x20) returned 0 [0234.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30160) returned 1 Thread: id = 7920 os_tid = 0xee0 [0225.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf")) returned 0x20 [0234.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF", dwFileAttributes=0x20) returned 0 [0234.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.272] GetLastError () returned 0x5 [0234.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF", dwFileAttributes=0x20) returned 0 [0234.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2feb8) returned 1 Thread: id = 7921 os_tid = 0xbe4 [0225.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf")) returned 0x20 [0234.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF", dwFileAttributes=0x20) returned 0 [0234.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.274] GetLastError () returned 0x5 [0234.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF", dwFileAttributes=0x20) returned 0 [0234.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f301e8) returned 1 Thread: id = 7922 os_tid = 0xc8 [0225.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf")) returned 0x20 [0234.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF", dwFileAttributes=0x20) returned 0 [0234.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.275] GetLastError () returned 0x5 [0234.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF", dwFileAttributes=0x20) returned 0 [0234.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 Thread: id = 7923 os_tid = 0x7b4 [0225.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf")) returned 0x20 [0234.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF", dwFileAttributes=0x20) returned 0 [0234.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.277] GetLastError () returned 0x5 [0234.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF", dwFileAttributes=0x20) returned 0 [0234.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 7924 os_tid = 0x960 [0225.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf")) returned 0x20 [0234.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF", dwFileAttributes=0x20) returned 0 [0234.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.279] GetLastError () returned 0x5 [0234.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF", dwFileAttributes=0x20) returned 0 [0234.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 7925 os_tid = 0x970 [0225.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf")) returned 0x20 [0234.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF", dwFileAttributes=0x20) returned 0 [0234.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.281] GetLastError () returned 0x5 [0234.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF", dwFileAttributes=0x20) returned 0 [0234.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c00) returned 1 Thread: id = 7926 os_tid = 0x990 [0225.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf")) returned 0x20 [0234.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF", dwFileAttributes=0x20) returned 0 [0234.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.066] GetLastError () returned 0x5 [0234.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF", dwFileAttributes=0x20) returned 0 [0234.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31370) returned 1 Thread: id = 7927 os_tid = 0x9a0 [0225.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf")) returned 0x20 [0234.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF", dwFileAttributes=0x20) returned 0 [0234.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.067] GetLastError () returned 0x5 [0234.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF", dwFileAttributes=0x20) returned 0 [0234.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f3e0) returned 1 Thread: id = 7928 os_tid = 0x9b0 [0225.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf")) returned 0x20 [0234.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF", dwFileAttributes=0x20) returned 0 [0234.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.069] GetLastError () returned 0x5 [0234.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF", dwFileAttributes=0x20) returned 0 [0234.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 7929 os_tid = 0x9c0 [0225.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf")) returned 0x20 [0234.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF", dwFileAttributes=0x20) returned 0 [0234.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.088] GetLastError () returned 0x5 [0234.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF", dwFileAttributes=0x20) returned 0 [0234.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 7930 os_tid = 0x2fdc [0225.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf")) returned 0x20 [0234.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF", dwFileAttributes=0x20) returned 0 [0234.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.089] GetLastError () returned 0x5 [0234.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF", dwFileAttributes=0x20) returned 0 [0234.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 7931 os_tid = 0x2fe4 [0225.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf")) returned 0x20 [0234.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF", dwFileAttributes=0x20) returned 0 [0234.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.090] GetLastError () returned 0x5 [0234.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF", dwFileAttributes=0x20) returned 0 [0234.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 7932 os_tid = 0x1640 [0225.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf")) returned 0x20 [0234.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF", dwFileAttributes=0x20) returned 0 [0234.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.092] GetLastError () returned 0x5 [0234.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF", dwFileAttributes=0x20) returned 0 [0234.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 7933 os_tid = 0x14b8 [0225.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf")) returned 0x20 [0234.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF", dwFileAttributes=0x20) returned 0 [0234.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.093] GetLastError () returned 0x5 [0234.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF", dwFileAttributes=0x20) returned 0 [0234.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 7934 os_tid = 0x2fd0 [0225.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf")) returned 0x20 [0234.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF", dwFileAttributes=0x20) returned 0 [0234.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.094] GetLastError () returned 0x5 [0234.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF", dwFileAttributes=0x20) returned 0 [0234.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 7935 os_tid = 0x2fe0 [0225.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf")) returned 0x20 [0234.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF", dwFileAttributes=0x20) returned 0 [0234.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.018] GetLastError () returned 0x5 [0234.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF", dwFileAttributes=0x20) returned 0 [0234.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ebc8) returned 1 Thread: id = 7936 os_tid = 0x2fec [0225.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf")) returned 0x20 [0234.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF", dwFileAttributes=0x20) returned 0 [0234.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.070] GetLastError () returned 0x5 [0234.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF", dwFileAttributes=0x20) returned 0 [0234.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f338) returned 1 Thread: id = 7937 os_tid = 0x2ff0 [0225.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf")) returned 0x20 [0234.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF", dwFileAttributes=0x20) returned 0 [0234.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.071] GetLastError () returned 0x5 [0234.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF", dwFileAttributes=0x20) returned 0 [0234.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eef8) returned 1 Thread: id = 7938 os_tid = 0x2ff4 [0225.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf")) returned 0x20 [0234.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF", dwFileAttributes=0x20) returned 0 [0234.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.073] GetLastError () returned 0x5 [0234.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF", dwFileAttributes=0x20) returned 0 [0234.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 Thread: id = 7939 os_tid = 0x2ff8 [0225.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf")) returned 0x20 [0234.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF", dwFileAttributes=0x20) returned 0 [0234.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.074] GetLastError () returned 0x5 [0234.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF", dwFileAttributes=0x20) returned 0 [0234.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f800) returned 1 Thread: id = 7940 os_tid = 0x2fc0 [0225.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf")) returned 0x20 [0234.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF", dwFileAttributes=0x20) returned 0 [0234.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.075] GetLastError () returned 0x5 [0234.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF", dwFileAttributes=0x20) returned 0 [0234.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f1a0) returned 1 Thread: id = 7941 os_tid = 0x4e4 [0225.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf")) returned 0x20 [0234.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF", dwFileAttributes=0x20) returned 0 [0234.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.076] GetLastError () returned 0x5 [0234.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF", dwFileAttributes=0x20) returned 0 [0234.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a5f8) returned 1 Thread: id = 7942 os_tid = 0x124 [0225.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf")) returned 0x20 [0234.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF", dwFileAttributes=0x20) returned 0 [0234.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.742] GetLastError () returned 0x5 [0234.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF", dwFileAttributes=0x20) returned 0 [0234.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a708) returned 1 Thread: id = 7949 os_tid = 0xf38 [0225.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss")) returned 0x20 [0226.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0226.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.251] GetLastError () returned 0x5 [0226.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0226.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11148) returned 1 Thread: id = 7950 os_tid = 0x1894 [0225.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss")) returned 0x20 [0226.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0226.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.252] GetLastError () returned 0x5 [0226.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0226.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 Thread: id = 7951 os_tid = 0x134c [0225.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss")) returned 0x20 [0228.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.725] GetLastError () returned 0x5 [0228.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11fa8) returned 1 Thread: id = 7952 os_tid = 0x79c [0225.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss")) returned 0x20 [0226.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS", dwFileAttributes=0x20) returned 0 [0226.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.344] GetLastError () returned 0x5 [0227.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS", dwFileAttributes=0x20) returned 0 [0227.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db968) returned 1 Thread: id = 7953 os_tid = 0xb04 [0225.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss")) returned 0x20 [0228.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.736] GetLastError () returned 0x5 [0228.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc908) returned 1 Thread: id = 7954 os_tid = 0xb90 [0225.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss")) returned 0x20 [0228.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.730] GetLastError () returned 0x5 [0228.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc4a8) returned 1 Thread: id = 7955 os_tid = 0xbd0 [0225.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss")) returned 0x20 [0228.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.731] GetLastError () returned 0x5 [0228.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc548) returned 1 Thread: id = 7956 os_tid = 0x1884 [0225.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_u.vss")) returned 0x20 [0228.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.737] GetLastError () returned 0x5 [0228.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc228) returned 1 Thread: id = 7957 os_tid = 0x1874 [0225.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_m.vss")) returned 0x20 [0228.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.738] GetLastError () returned 0x5 [0228.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc2c8) returned 1 Thread: id = 7958 os_tid = 0xbe0 [0225.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_u.vss")) returned 0x20 [0228.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.732] GetLastError () returned 0x5 [0228.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc368) returned 1 Thread: id = 7959 os_tid = 0xbec [0225.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_m.vss")) returned 0x20 [0228.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS", dwFileAttributes=0x20) returned 0 [0228.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.739] GetLastError () returned 0x5 [0228.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS", dwFileAttributes=0x20) returned 0 [0228.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc408) returned 1 Thread: id = 7960 os_tid = 0xc3c [0225.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_u.vss")) returned 0x20 [0228.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS", dwFileAttributes=0x20) returned 0 [0228.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.740] GetLastError () returned 0x5 [0228.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS", dwFileAttributes=0x20) returned 0 [0228.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db828) returned 1 Thread: id = 7961 os_tid = 0xc28 [0225.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls")) returned 0x20 [0228.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS", dwFileAttributes=0x20) returned 0 [0228.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.734] GetLastError () returned 0x5 [0228.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS", dwFileAttributes=0x20) returned 0 [0228.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db8c8) returned 1 Thread: id = 7962 os_tid = 0xc2c [0225.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_m.vst")) returned 0x20 [0228.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST", dwFileAttributes=0x20) returned 0 [0228.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.741] GetLastError () returned 0x5 [0228.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST", dwFileAttributes=0x20) returned 0 [0228.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc048) returned 1 Thread: id = 7963 os_tid = 0xc30 [0225.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst")) returned 0x20 [0228.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST", dwFileAttributes=0x20) returned 0 [0228.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.790] GetLastError () returned 0x5 [0228.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST", dwFileAttributes=0x20) returned 0 [0228.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbfa8) returned 1 Thread: id = 7964 os_tid = 0xc00 [0225.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_m.vss")) returned 0x20 [0228.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.826] GetLastError () returned 0x5 [0228.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 7965 os_tid = 0xbfc [0225.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_u.vss")) returned 0x20 [0228.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.718] GetLastError () returned 0x5 [0228.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c70f8) returned 1 Thread: id = 7966 os_tid = 0x158c [0225.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss")) returned 0x20 [0228.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.735] GetLastError () returned 0x5 [0228.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 7967 os_tid = 0xe78 [0225.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_u.vss")) returned 0x20 [0228.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.719] GetLastError () returned 0x5 [0228.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 7968 os_tid = 0xe84 [0225.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vss")) returned 0x20 [0228.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.720] GetLastError () returned 0x5 [0228.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9778) returned 1 Thread: id = 7969 os_tid = 0xe10 [0225.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vst")) returned 0x20 [0228.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST", dwFileAttributes=0x20) returned 0 [0228.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.721] GetLastError () returned 0x5 [0228.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST", dwFileAttributes=0x20) returned 0 [0228.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d96e0) returned 1 Thread: id = 7970 os_tid = 0x1a68 [0225.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vss")) returned 0x20 [0228.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.722] GetLastError () returned 0x5 [0228.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daea0) returned 1 Thread: id = 7971 os_tid = 0xe1c [0225.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vst")) returned 0x20 [0228.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST", dwFileAttributes=0x20) returned 0 [0228.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.723] GetLastError () returned 0x5 [0228.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST", dwFileAttributes=0x20) returned 0 [0228.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dafd0) returned 1 Thread: id = 7972 os_tid = 0xe18 [0225.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_m.vst")) returned 0x20 [0228.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST", dwFileAttributes=0x20) returned 0 [0228.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.724] GetLastError () returned 0x5 [0228.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST", dwFileAttributes=0x20) returned 0 [0228.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 7973 os_tid = 0xe60 [0225.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_u.vst")) returned 0x20 [0226.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST", dwFileAttributes=0x20) returned 0 [0226.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.249] GetLastError () returned 0x5 [0226.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST", dwFileAttributes=0x20) returned 0 [0226.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 Thread: id = 7974 os_tid = 0x650 [0225.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf")) returned 0x20 [0234.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF", dwFileAttributes=0x20) returned 0 [0234.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.574] GetLastError () returned 0x5 [0234.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF", dwFileAttributes=0x20) returned 0 [0234.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a680) returned 1 Thread: id = 7975 os_tid = 0x1898 [0225.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf")) returned 0x20 [0234.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF", dwFileAttributes=0x20) returned 0 [0234.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.616] GetLastError () returned 0x5 [0234.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF", dwFileAttributes=0x20) returned 0 [0234.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30633a0) returned 1 Thread: id = 7976 os_tid = 0x189c [0225.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf")) returned 0x20 [0234.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF", dwFileAttributes=0x20) returned 0 [0234.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.575] GetLastError () returned 0x5 [0234.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF", dwFileAttributes=0x20) returned 0 [0234.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 7977 os_tid = 0xd1c [0225.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf")) returned 0x20 [0234.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF", dwFileAttributes=0x20) returned 0 [0234.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.625] GetLastError () returned 0x5 [0234.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF", dwFileAttributes=0x20) returned 0 [0234.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 7978 os_tid = 0x7b8 [0225.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf")) returned 0x20 [0234.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF", dwFileAttributes=0x20) returned 0 [0234.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.626] GetLastError () returned 0x5 [0234.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF", dwFileAttributes=0x20) returned 0 [0234.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a458) returned 1 Thread: id = 7979 os_tid = 0x950 [0225.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf")) returned 0x20 [0234.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF", dwFileAttributes=0x20) returned 0 [0234.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.628] GetLastError () returned 0x5 [0234.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF", dwFileAttributes=0x20) returned 0 [0234.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a4e0) returned 1 Thread: id = 7980 os_tid = 0xa40 [0225.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf")) returned 0x20 [0234.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF", dwFileAttributes=0x20) returned 0 [0234.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.629] GetLastError () returned 0x5 [0234.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF", dwFileAttributes=0x20) returned 0 [0234.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a568) returned 1 Thread: id = 7981 os_tid = 0xaa0 [0225.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf")) returned 0x20 [0234.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF", dwFileAttributes=0x20) returned 0 [0234.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.631] GetLastError () returned 0x5 [0234.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF", dwFileAttributes=0x20) returned 0 [0234.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a5f0) returned 1 Thread: id = 7982 os_tid = 0x18a0 [0225.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf")) returned 0x20 [0234.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF", dwFileAttributes=0x20) returned 0 [0234.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.632] GetLastError () returned 0x5 [0234.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF", dwFileAttributes=0x20) returned 0 [0234.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a678) returned 1 Thread: id = 7983 os_tid = 0x18a4 [0225.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf")) returned 0x20 [0234.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF", dwFileAttributes=0x20) returned 0 [0234.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.633] GetLastError () returned 0x5 [0234.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF", dwFileAttributes=0x20) returned 0 [0234.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a700) returned 1 Thread: id = 7984 os_tid = 0x18a8 [0225.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf")) returned 0x20 [0234.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF", dwFileAttributes=0x20) returned 0 [0234.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.635] GetLastError () returned 0x5 [0234.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF", dwFileAttributes=0x20) returned 0 [0234.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a788) returned 1 Thread: id = 7985 os_tid = 0x18ac [0225.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf")) returned 0x20 [0234.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF", dwFileAttributes=0x20) returned 0 [0234.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.636] GetLastError () returned 0x5 [0234.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF", dwFileAttributes=0x20) returned 0 [0234.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a810) returned 1 Thread: id = 7986 os_tid = 0x18b0 [0225.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf")) returned 0x20 [0234.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF", dwFileAttributes=0x20) returned 0 [0234.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.638] GetLastError () returned 0x5 [0234.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF", dwFileAttributes=0x20) returned 0 [0234.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a898) returned 1 Thread: id = 7987 os_tid = 0x1590 [0225.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf")) returned 0x20 [0234.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF", dwFileAttributes=0x20) returned 0 [0234.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.595] GetLastError () returned 0x5 [0234.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF", dwFileAttributes=0x20) returned 0 [0234.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a920) returned 1 Thread: id = 7988 os_tid = 0x18b4 [0225.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf")) returned 0x20 [0234.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF", dwFileAttributes=0x20) returned 0 [0234.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.286] GetLastError () returned 0x5 [0234.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF", dwFileAttributes=0x20) returned 0 [0234.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a9a8) returned 1 Thread: id = 7989 os_tid = 0x18c4 [0225.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf")) returned 0x20 [0234.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF", dwFileAttributes=0x20) returned 0 [0234.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.596] GetLastError () returned 0x5 [0234.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF", dwFileAttributes=0x20) returned 0 [0234.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aa30) returned 1 Thread: id = 7990 os_tid = 0x18c8 [0225.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf")) returned 0x20 [0234.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF", dwFileAttributes=0x20) returned 0 [0234.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.597] GetLastError () returned 0x5 [0234.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF", dwFileAttributes=0x20) returned 0 [0234.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aab8) returned 1 Thread: id = 7991 os_tid = 0x18cc [0225.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf")) returned 0x20 [0234.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF", dwFileAttributes=0x20) returned 0 [0234.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.599] GetLastError () returned 0x5 [0234.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF", dwFileAttributes=0x20) returned 0 [0234.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ab40) returned 1 Thread: id = 7992 os_tid = 0x1594 [0225.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf")) returned 0x20 [0234.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF", dwFileAttributes=0x20) returned 0 [0234.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.600] GetLastError () returned 0x5 [0234.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF", dwFileAttributes=0x20) returned 0 [0234.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819abc8) returned 1 Thread: id = 7993 os_tid = 0x6b0 [0225.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf")) returned 0x20 [0234.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF", dwFileAttributes=0x20) returned 0 [0234.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.602] GetLastError () returned 0x5 [0234.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF", dwFileAttributes=0x20) returned 0 [0234.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac50) returned 1 Thread: id = 7994 os_tid = 0x18d0 [0225.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf")) returned 0x20 [0234.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF", dwFileAttributes=0x20) returned 0 [0234.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.603] GetLastError () returned 0x5 [0234.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF", dwFileAttributes=0x20) returned 0 [0234.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819acd8) returned 1 Thread: id = 7995 os_tid = 0xc78 [0225.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf")) returned 0x20 [0234.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF", dwFileAttributes=0x20) returned 0 [0234.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.605] GetLastError () returned 0x5 [0234.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF", dwFileAttributes=0x20) returned 0 [0234.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ad60) returned 1 Thread: id = 7996 os_tid = 0xc6c [0225.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf")) returned 0x20 [0234.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF", dwFileAttributes=0x20) returned 0 [0234.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.607] GetLastError () returned 0x5 [0234.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF", dwFileAttributes=0x20) returned 0 [0234.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ade8) returned 1 Thread: id = 7997 os_tid = 0xc7c [0225.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf")) returned 0x20 [0234.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF", dwFileAttributes=0x20) returned 0 [0234.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.608] GetLastError () returned 0x5 [0234.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF", dwFileAttributes=0x20) returned 0 [0234.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ae70) returned 1 Thread: id = 7998 os_tid = 0xb10 [0225.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf")) returned 0x20 [0234.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF", dwFileAttributes=0x20) returned 0 [0234.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.610] GetLastError () returned 0x5 [0234.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF", dwFileAttributes=0x20) returned 0 [0234.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aef8) returned 1 Thread: id = 7999 os_tid = 0x5d4 [0225.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf")) returned 0x20 [0234.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF", dwFileAttributes=0x20) returned 0 [0234.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.611] GetLastError () returned 0x5 [0234.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF", dwFileAttributes=0x20) returned 0 [0234.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819af80) returned 1 Thread: id = 8000 os_tid = 0xc10 [0225.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf")) returned 0x20 [0234.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF", dwFileAttributes=0x20) returned 0 [0234.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.613] GetLastError () returned 0x5 [0234.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF", dwFileAttributes=0x20) returned 0 [0234.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b008) returned 1 Thread: id = 8001 os_tid = 0x18d4 [0225.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf")) returned 0x20 [0234.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF", dwFileAttributes=0x20) returned 0 [0234.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.614] GetLastError () returned 0x5 [0234.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF", dwFileAttributes=0x20) returned 0 [0234.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b090) returned 1 Thread: id = 8002 os_tid = 0x18dc [0225.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf")) returned 0x20 [0234.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF", dwFileAttributes=0x20) returned 0 [0234.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.623] GetLastError () returned 0x5 [0234.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF", dwFileAttributes=0x20) returned 0 [0234.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b118) returned 1 Thread: id = 8003 os_tid = 0x18e0 [0225.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf")) returned 0x20 [0234.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF", dwFileAttributes=0x20) returned 0 [0234.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.492] GetLastError () returned 0x5 [0234.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF", dwFileAttributes=0x20) returned 0 [0234.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b1a0) returned 1 Thread: id = 8005 os_tid = 0x18e8 [0225.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_m.vss")) returned 0x20 [0228.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS", dwFileAttributes=0x20) returned 0 [0228.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.827] GetLastError () returned 0x5 [0228.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS", dwFileAttributes=0x20) returned 0 [0228.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e111e8) returned 1 Thread: id = 8006 os_tid = 0x18ec [0225.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_u.vss")) returned 0x20 [0228.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS", dwFileAttributes=0x20) returned 0 [0228.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.713] GetLastError () returned 0x5 [0228.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS", dwFileAttributes=0x20) returned 0 [0228.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10608) returned 1 Thread: id = 8007 os_tid = 0x18f0 [0225.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_m.vss")) returned 0x20 [0228.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS", dwFileAttributes=0x20) returned 0 [0228.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.714] GetLastError () returned 0x5 [0228.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS", dwFileAttributes=0x20) returned 0 [0228.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11d28) returned 1 Thread: id = 8008 os_tid = 0x18f8 [0225.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_u.vss")) returned 0x20 [0228.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS", dwFileAttributes=0x20) returned 0 [0228.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.715] GetLastError () returned 0x5 [0228.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS", dwFileAttributes=0x20) returned 0 [0228.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e116e8) returned 1 Thread: id = 8009 os_tid = 0x18fc [0225.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_m.vss")) returned 0x20 [0228.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.711] GetLastError () returned 0x5 [0228.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e120e8) returned 1 Thread: id = 8010 os_tid = 0x1130 [0225.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_u.vss")) returned 0x20 [0228.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS", dwFileAttributes=0x20) returned 0 [0228.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.717] GetLastError () returned 0x5 [0228.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS", dwFileAttributes=0x20) returned 0 [0228.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12228) returned 1 Thread: id = 8011 os_tid = 0xdfc [0225.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_m.vss")) returned 0x20 [0228.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.716] GetLastError () returned 0x5 [0228.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e12408) returned 1 Thread: id = 8012 os_tid = 0xe00 [0225.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_u.vss")) returned 0x20 [0228.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.829] GetLastError () returned 0x5 [0228.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11a08) returned 1 Thread: id = 8013 os_tid = 0xe04 [0225.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_m.vss")) returned 0x20 [0228.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.728] GetLastError () returned 0x5 [0228.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11968) returned 1 Thread: id = 8014 os_tid = 0xdec [0225.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf")) returned 0x20 [0234.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF", dwFileAttributes=0x20) returned 0 [0234.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.283] GetLastError () returned 0x5 [0234.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF", dwFileAttributes=0x20) returned 0 [0234.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b228) returned 1 Thread: id = 8015 os_tid = 0xad0 [0225.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf")) returned 0x20 [0234.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF", dwFileAttributes=0x20) returned 0 [0234.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.284] GetLastError () returned 0x5 [0234.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF", dwFileAttributes=0x20) returned 0 [0234.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b2b0) returned 1 Thread: id = 8016 os_tid = 0x4c0 [0225.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf")) returned 0x20 [0234.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF", dwFileAttributes=0x20) returned 0 [0234.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.546] GetLastError () returned 0x5 [0234.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF", dwFileAttributes=0x20) returned 0 [0234.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b338) returned 1 Thread: id = 8017 os_tid = 0x110 [0225.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf")) returned 0x20 [0234.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF", dwFileAttributes=0x20) returned 0 [0234.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.544] GetLastError () returned 0x5 [0234.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF", dwFileAttributes=0x20) returned 0 [0234.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b3c0) returned 1 Thread: id = 8018 os_tid = 0x20c [0226.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf")) returned 0x20 [0234.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF", dwFileAttributes=0x20) returned 0 [0234.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.542] GetLastError () returned 0x5 [0234.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF", dwFileAttributes=0x20) returned 0 [0234.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 8019 os_tid = 0x9bc [0226.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf")) returned 0x20 [0234.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF", dwFileAttributes=0x20) returned 0 [0234.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.540] GetLastError () returned 0x5 [0234.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF", dwFileAttributes=0x20) returned 0 [0234.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b448) returned 1 Thread: id = 8020 os_tid = 0x106c [0226.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf")) returned 0x20 [0234.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF", dwFileAttributes=0x20) returned 0 [0234.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.539] GetLastError () returned 0x5 [0234.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF", dwFileAttributes=0x20) returned 0 [0234.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b4d0) returned 1 Thread: id = 8021 os_tid = 0x6d4 [0226.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf")) returned 0x20 [0234.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF", dwFileAttributes=0x20) returned 0 [0234.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.537] GetLastError () returned 0x5 [0234.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF", dwFileAttributes=0x20) returned 0 [0234.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b558) returned 1 Thread: id = 8022 os_tid = 0xc50 [0226.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf")) returned 0x20 [0234.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF", dwFileAttributes=0x20) returned 0 [0234.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.535] GetLastError () returned 0x5 [0234.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF", dwFileAttributes=0x20) returned 0 [0234.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b5e0) returned 1 Thread: id = 8023 os_tid = 0x48c [0226.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf")) returned 0x20 [0234.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF", dwFileAttributes=0x20) returned 0 [0234.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.533] GetLastError () returned 0x5 [0234.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF", dwFileAttributes=0x20) returned 0 [0234.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b668) returned 1 Thread: id = 8024 os_tid = 0x11ac [0226.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf")) returned 0x20 [0232.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF", dwFileAttributes=0x20) returned 0 [0232.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.011] GetLastError () returned 0x5 [0233.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF", dwFileAttributes=0x20) returned 0 [0233.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b6f0) returned 1 Thread: id = 8025 os_tid = 0x11b0 [0226.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf")) returned 0x20 [0234.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF", dwFileAttributes=0x20) returned 0 [0234.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.453] GetLastError () returned 0x5 [0234.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF", dwFileAttributes=0x20) returned 0 [0234.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b778) returned 1 Thread: id = 8026 os_tid = 0x11b4 [0226.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf")) returned 0x20 [0234.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF", dwFileAttributes=0x20) returned 0 [0234.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.481] GetLastError () returned 0x5 [0234.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF", dwFileAttributes=0x20) returned 0 [0234.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b800) returned 1 Thread: id = 8027 os_tid = 0x11b8 [0226.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf")) returned 0x20 [0234.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF", dwFileAttributes=0x20) returned 0 [0234.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.483] GetLastError () returned 0x5 [0234.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF", dwFileAttributes=0x20) returned 0 [0234.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b888) returned 1 Thread: id = 8028 os_tid = 0x6c0 [0226.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf")) returned 0x20 [0234.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF", dwFileAttributes=0x20) returned 0 [0234.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.455] GetLastError () returned 0x5 [0234.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF", dwFileAttributes=0x20) returned 0 [0234.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b910) returned 1 Thread: id = 8029 os_tid = 0x11c0 [0226.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf")) returned 0x20 [0234.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF", dwFileAttributes=0x20) returned 0 [0234.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.517] GetLastError () returned 0x5 [0234.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF", dwFileAttributes=0x20) returned 0 [0234.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b998) returned 1 Thread: id = 8030 os_tid = 0x11c4 [0226.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf")) returned 0x20 [0234.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF", dwFileAttributes=0x20) returned 0 [0234.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.465] GetLastError () returned 0x5 [0234.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF", dwFileAttributes=0x20) returned 0 [0234.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ba20) returned 1 Thread: id = 8031 os_tid = 0x11c8 [0226.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf")) returned 0x20 [0234.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF", dwFileAttributes=0x20) returned 0 [0234.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.466] GetLastError () returned 0x5 [0234.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF", dwFileAttributes=0x20) returned 0 [0234.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819baa8) returned 1 Thread: id = 8032 os_tid = 0x2c5c [0226.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf")) returned 0x20 [0234.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF", dwFileAttributes=0x20) returned 0 [0234.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.468] GetLastError () returned 0x5 [0234.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF", dwFileAttributes=0x20) returned 0 [0234.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bb30) returned 1 Thread: id = 8033 os_tid = 0xbd8 [0226.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf")) returned 0x20 [0234.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF", dwFileAttributes=0x20) returned 0 [0234.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.470] GetLastError () returned 0x5 [0234.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF", dwFileAttributes=0x20) returned 0 [0234.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bbb8) returned 1 Thread: id = 8034 os_tid = 0xbd4 [0226.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf")) returned 0x20 [0234.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF", dwFileAttributes=0x20) returned 0 [0234.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.472] GetLastError () returned 0x5 [0234.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF", dwFileAttributes=0x20) returned 0 [0234.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bc40) returned 1 Thread: id = 8035 os_tid = 0x2c6c [0226.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf")) returned 0x20 [0234.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF", dwFileAttributes=0x20) returned 0 [0234.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.474] GetLastError () returned 0x5 [0234.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF", dwFileAttributes=0x20) returned 0 [0234.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bcc8) returned 1 Thread: id = 8036 os_tid = 0x2c70 [0226.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf")) returned 0x20 [0234.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF", dwFileAttributes=0x20) returned 0 [0234.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.476] GetLastError () returned 0x5 [0234.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF", dwFileAttributes=0x20) returned 0 [0234.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bd50) returned 1 Thread: id = 8037 os_tid = 0xc34 [0226.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf")) returned 0x20 [0234.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF", dwFileAttributes=0x20) returned 0 [0234.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.478] GetLastError () returned 0x5 [0234.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF", dwFileAttributes=0x20) returned 0 [0234.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bdd8) returned 1 Thread: id = 8038 os_tid = 0xc40 [0226.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf")) returned 0x20 [0234.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF", dwFileAttributes=0x20) returned 0 [0234.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.435] GetLastError () returned 0x5 [0234.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF", dwFileAttributes=0x20) returned 0 [0234.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819be60) returned 1 Thread: id = 8039 os_tid = 0xc38 [0226.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf")) returned 0x20 [0234.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF", dwFileAttributes=0x20) returned 0 [0234.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.437] GetLastError () returned 0x5 [0234.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF", dwFileAttributes=0x20) returned 0 [0234.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bee8) returned 1 Thread: id = 8040 os_tid = 0x1200 [0226.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf")) returned 0x20 [0234.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF", dwFileAttributes=0x20) returned 0 [0234.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.439] GetLastError () returned 0x5 [0234.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF", dwFileAttributes=0x20) returned 0 [0234.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bf70) returned 1 Thread: id = 8041 os_tid = 0x1204 [0226.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf")) returned 0x20 [0234.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF", dwFileAttributes=0x20) returned 0 [0234.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.440] GetLastError () returned 0x5 [0234.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF", dwFileAttributes=0x20) returned 0 [0234.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bff8) returned 1 Thread: id = 8042 os_tid = 0xa3c [0226.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf")) returned 0x20 [0234.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF", dwFileAttributes=0x20) returned 0 [0234.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.442] GetLastError () returned 0x5 [0234.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF", dwFileAttributes=0x20) returned 0 [0234.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c080) returned 1 Thread: id = 8043 os_tid = 0xa4c [0226.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf")) returned 0x20 [0234.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF", dwFileAttributes=0x20) returned 0 [0234.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.444] GetLastError () returned 0x5 [0234.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF", dwFileAttributes=0x20) returned 0 [0234.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c108) returned 1 Thread: id = 8044 os_tid = 0xa5c [0226.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf")) returned 0x20 [0234.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF", dwFileAttributes=0x20) returned 0 [0234.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.447] GetLastError () returned 0x5 [0234.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF", dwFileAttributes=0x20) returned 0 [0234.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c190) returned 1 Thread: id = 8045 os_tid = 0xa6c [0226.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf")) returned 0x20 [0234.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF", dwFileAttributes=0x20) returned 0 [0234.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.449] GetLastError () returned 0x5 [0234.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF", dwFileAttributes=0x20) returned 0 [0234.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c218) returned 1 Thread: id = 8046 os_tid = 0xa7c [0226.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf")) returned 0x20 [0234.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF", dwFileAttributes=0x20) returned 0 [0234.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.451] GetLastError () returned 0x5 [0234.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF", dwFileAttributes=0x20) returned 0 [0234.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c2a0) returned 1 Thread: id = 8047 os_tid = 0xa8c [0226.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf")) returned 0x20 [0234.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF", dwFileAttributes=0x20) returned 0 [0234.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.479] GetLastError () returned 0x5 [0234.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF", dwFileAttributes=0x20) returned 0 [0234.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c328) returned 1 Thread: id = 8048 os_tid = 0xa9c [0226.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_u.vss")) returned 0x20 [0228.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS", dwFileAttributes=0x20) returned 0 [0228.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.869] GetLastError () returned 0x5 [0228.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS", dwFileAttributes=0x20) returned 0 [0228.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11468) returned 1 Thread: id = 8049 os_tid = 0xaac [0226.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_m.vst")) returned 0x20 [0228.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST", dwFileAttributes=0x20) returned 0 [0228.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.868] GetLastError () returned 0x5 [0228.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST", dwFileAttributes=0x20) returned 0 [0228.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11328) returned 1 Thread: id = 8050 os_tid = 0xac0 [0226.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_u.vst")) returned 0x20 [0228.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST", dwFileAttributes=0x20) returned 0 [0228.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.867] GetLastError () returned 0x5 [0228.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST", dwFileAttributes=0x20) returned 0 [0228.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10a68) returned 1 Thread: id = 8051 os_tid = 0xacc [0226.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_m.vst")) returned 0x20 [0228.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST", dwFileAttributes=0x20) returned 0 [0228.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.726] GetLastError () returned 0x5 [0228.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST", dwFileAttributes=0x20) returned 0 [0228.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd4e8) returned 1 Thread: id = 8052 os_tid = 0xb58 [0226.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_u.vst")) returned 0x20 [0228.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST", dwFileAttributes=0x20) returned 0 [0228.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.856] GetLastError () returned 0x5 [0228.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST", dwFileAttributes=0x20) returned 0 [0228.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 Thread: id = 8053 os_tid = 0x1b80 [0226.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_m.vst")) returned 0x20 [0228.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST", dwFileAttributes=0x20) returned 0 [0228.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.857] GetLastError () returned 0x5 [0228.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST", dwFileAttributes=0x20) returned 0 [0228.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db6e8) returned 1 Thread: id = 8054 os_tid = 0x1bb0 [0226.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_u.vst")) returned 0x20 [0228.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST", dwFileAttributes=0x20) returned 0 [0228.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.875] GetLastError () returned 0x5 [0228.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST", dwFileAttributes=0x20) returned 0 [0228.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc188) returned 1 Thread: id = 8055 os_tid = 0x1244 [0226.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_m.vss")) returned 0x20 [0228.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.876] GetLastError () returned 0x5 [0228.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db648) returned 1 Thread: id = 8056 os_tid = 0x161c [0226.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_u.vss")) returned 0x20 [0228.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.877] GetLastError () returned 0x5 [0228.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9a8) returned 1 Thread: id = 8057 os_tid = 0x13bc [0226.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_m.vss")) returned 0x20 [0228.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS", dwFileAttributes=0x20) returned 0 [0228.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.881] GetLastError () returned 0x5 [0228.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS", dwFileAttributes=0x20) returned 0 [0228.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dccc8) returned 1 Thread: id = 8058 os_tid = 0x2e08 [0226.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_u.vss")) returned 0x20 [0228.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS", dwFileAttributes=0x20) returned 0 [0228.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.882] GetLastError () returned 0x5 [0228.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS", dwFileAttributes=0x20) returned 0 [0228.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcd68) returned 1 Thread: id = 8059 os_tid = 0x2e0c [0226.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_m.vss")) returned 0x20 [0228.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.883] GetLastError () returned 0x5 [0228.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcae8) returned 1 Thread: id = 8060 os_tid = 0x2e10 [0226.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_u.vss")) returned 0x20 [0228.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS", dwFileAttributes=0x20) returned 0 [0228.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.885] GetLastError () returned 0x5 [0228.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS", dwFileAttributes=0x20) returned 0 [0228.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dca48) returned 1 Thread: id = 8061 os_tid = 0x2e14 [0226.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_m.vss")) returned 0x20 [0228.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.886] GetLastError () returned 0x5 [0228.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcb88) returned 1 Thread: id = 8062 os_tid = 0x2e74 [0226.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_u.vss")) returned 0x20 [0228.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.887] GetLastError () returned 0x5 [0228.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbc88) returned 1 Thread: id = 8063 os_tid = 0x10bc [0226.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_m.vst")) returned 0x20 [0228.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST", dwFileAttributes=0x20) returned 0 [0228.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.859] GetLastError () returned 0x5 [0228.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST", dwFileAttributes=0x20) returned 0 [0228.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db068) returned 1 Thread: id = 8064 os_tid = 0x16d4 [0226.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_u.vst")) returned 0x20 [0228.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST", dwFileAttributes=0x20) returned 0 [0228.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.888] GetLastError () returned 0x5 [0228.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST", dwFileAttributes=0x20) returned 0 [0228.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db100) returned 1 Thread: id = 8065 os_tid = 0x10d4 [0226.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_m.vss")) returned 0x20 [0228.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS", dwFileAttributes=0x20) returned 0 [0228.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.889] GetLastError () returned 0x5 [0228.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS", dwFileAttributes=0x20) returned 0 [0228.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbbe8) returned 1 Thread: id = 8066 os_tid = 0x10d8 [0226.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_u.vss")) returned 0x20 [0228.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS", dwFileAttributes=0x20) returned 0 [0228.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.891] GetLastError () returned 0x5 [0228.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS", dwFileAttributes=0x20) returned 0 [0228.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db788) returned 1 Thread: id = 8067 os_tid = 0x174c [0226.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_m.vss")) returned 0x20 [0228.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS", dwFileAttributes=0x20) returned 0 [0228.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.860] GetLastError () returned 0x5 [0228.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS", dwFileAttributes=0x20) returned 0 [0228.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dba08) returned 1 Thread: id = 8068 os_tid = 0x1750 [0226.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_u.vss")) returned 0x20 [0228.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS", dwFileAttributes=0x20) returned 0 [0228.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.861] GetLastError () returned 0x5 [0228.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS", dwFileAttributes=0x20) returned 0 [0228.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbaa8) returned 1 Thread: id = 8069 os_tid = 0x175c [0226.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_m.vss")) returned 0x20 [0228.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.862] GetLastError () returned 0x5 [0228.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbb48) returned 1 Thread: id = 8070 os_tid = 0x1764 [0226.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_u.vss")) returned 0x20 [0228.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.863] GetLastError () returned 0x5 [0228.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbd28) returned 1 Thread: id = 8071 os_tid = 0x17c8 [0226.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeline.mpp")) returned 0x20 [0228.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP", dwFileAttributes=0x20) returned 0 [0228.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeline.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.892] GetLastError () returned 0x5 [0228.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP", dwFileAttributes=0x20) returned 0 [0228.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbdc8) returned 1 Thread: id = 8072 os_tid = 0x17cc [0226.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vss")) returned 0x20 [0228.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS", dwFileAttributes=0x20) returned 0 [0228.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.894] GetLastError () returned 0x5 [0228.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS", dwFileAttributes=0x20) returned 0 [0228.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbe68) returned 1 Thread: id = 8073 os_tid = 0x21c4 [0226.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vst")) returned 0x20 [0228.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST", dwFileAttributes=0x20) returned 0 [0228.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.915] GetLastError () returned 0x5 [0228.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST", dwFileAttributes=0x20) returned 0 [0228.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbf08) returned 1 Thread: id = 8074 os_tid = 0x26d0 [0226.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vss")) returned 0x20 [0228.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS", dwFileAttributes=0x20) returned 0 [0228.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.864] GetLastError () returned 0x5 [0228.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS", dwFileAttributes=0x20) returned 0 [0228.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd588) returned 1 Thread: id = 8075 os_tid = 0x2a40 [0226.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vst")) returned 0x20 [0228.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST", dwFileAttributes=0x20) returned 0 [0228.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.866] GetLastError () returned 0x5 [0228.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST", dwFileAttributes=0x20) returned 0 [0228.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc728) returned 1 Thread: id = 8076 os_tid = 0x22b8 [0226.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_m.vss")) returned 0x20 [0228.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS", dwFileAttributes=0x20) returned 0 [0228.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.916] GetLastError () returned 0x5 [0228.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS", dwFileAttributes=0x20) returned 0 [0228.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc688) returned 1 Thread: id = 8077 os_tid = 0x27e4 [0226.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_u.vss")) returned 0x20 [0228.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS", dwFileAttributes=0x20) returned 0 [0228.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.918] GetLastError () returned 0x5 [0228.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS", dwFileAttributes=0x20) returned 0 [0228.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7c8) returned 1 Thread: id = 8078 os_tid = 0x1930 [0226.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vss")) returned 0x20 [0228.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS", dwFileAttributes=0x20) returned 0 [0228.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.874] GetLastError () returned 0x5 [0228.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS", dwFileAttributes=0x20) returned 0 [0228.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db2c8) returned 1 Thread: id = 8079 os_tid = 0x199c [0226.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vst")) returned 0x20 [0228.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST", dwFileAttributes=0x20) returned 0 [0228.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.872] GetLastError () returned 0x5 [0228.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST", dwFileAttributes=0x20) returned 0 [0228.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db230) returned 1 Thread: id = 8080 os_tid = 0x19a0 [0226.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf")) returned 0x20 [0234.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF", dwFileAttributes=0x20) returned 0 [0234.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.428] GetLastError () returned 0x5 [0234.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF", dwFileAttributes=0x20) returned 0 [0234.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c3b0) returned 1 Thread: id = 8081 os_tid = 0x19a4 [0226.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf")) returned 0x20 [0234.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF", dwFileAttributes=0x20) returned 0 [0234.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.422] GetLastError () returned 0x5 [0234.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF", dwFileAttributes=0x20) returned 0 [0234.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 8082 os_tid = 0x230 [0226.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf")) returned 0x20 [0234.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF", dwFileAttributes=0x20) returned 0 [0234.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.424] GetLastError () returned 0x5 [0234.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF", dwFileAttributes=0x20) returned 0 [0234.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332930) returned 1 Thread: id = 8083 os_tid = 0xe94 [0226.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf")) returned 0x20 [0234.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF", dwFileAttributes=0x20) returned 0 [0234.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.426] GetLastError () returned 0x5 [0234.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF", dwFileAttributes=0x20) returned 0 [0234.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83329b8) returned 1 Thread: id = 8084 os_tid = 0x740 [0226.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vss")) returned 0x20 [0228.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS", dwFileAttributes=0x20) returned 0 [0228.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.873] GetLastError () returned 0x5 [0228.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS", dwFileAttributes=0x20) returned 0 [0228.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db198) returned 1 Thread: id = 8085 os_tid = 0xa50 [0226.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vst")) returned 0x20 [0227.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST", dwFileAttributes=0x20) returned 0 [0227.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.389] GetLastError () returned 0x5 [0227.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST", dwFileAttributes=0x20) returned 0 [0227.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db528) returned 1 Thread: id = 8086 os_tid = 0x95c [0226.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf")) returned 0x20 [0234.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF", dwFileAttributes=0x20) returned 0 [0234.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.485] GetLastError () returned 0x5 [0234.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF", dwFileAttributes=0x20) returned 0 [0234.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332a40) returned 1 Thread: id = 8087 os_tid = 0xa60 [0226.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf")) returned 0x20 [0234.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF", dwFileAttributes=0x20) returned 0 [0234.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.457] GetLastError () returned 0x5 [0234.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF", dwFileAttributes=0x20) returned 0 [0234.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332ac8) returned 1 Thread: id = 8088 os_tid = 0x1310 [0226.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf")) returned 0x20 [0234.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF", dwFileAttributes=0x20) returned 0 [0234.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.458] GetLastError () returned 0x5 [0234.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF", dwFileAttributes=0x20) returned 0 [0234.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332b50) returned 1 Thread: id = 8089 os_tid = 0x1314 [0226.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf")) returned 0x20 [0234.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF", dwFileAttributes=0x20) returned 0 [0234.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.460] GetLastError () returned 0x5 [0234.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF", dwFileAttributes=0x20) returned 0 [0234.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332bd8) returned 1 Thread: id = 8090 os_tid = 0xb6c [0226.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf")) returned 0x20 [0234.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF", dwFileAttributes=0x20) returned 0 [0234.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.462] GetLastError () returned 0x5 [0234.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF", dwFileAttributes=0x20) returned 0 [0234.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332c60) returned 1 Thread: id = 8091 os_tid = 0xb60 [0226.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf")) returned 0x20 [0234.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF", dwFileAttributes=0x20) returned 0 [0234.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.403] GetLastError () returned 0x5 [0234.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF", dwFileAttributes=0x20) returned 0 [0234.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332ce8) returned 1 Thread: id = 8092 os_tid = 0xbac [0226.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf")) returned 0x20 [0234.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF", dwFileAttributes=0x20) returned 0 [0234.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.487] GetLastError () returned 0x5 [0234.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF", dwFileAttributes=0x20) returned 0 [0234.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332d70) returned 1 Thread: id = 8093 os_tid = 0xbc0 [0226.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf")) returned 0x20 [0234.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF", dwFileAttributes=0x20) returned 0 [0234.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.405] GetLastError () returned 0x5 [0234.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF", dwFileAttributes=0x20) returned 0 [0234.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332df8) returned 1 Thread: id = 8094 os_tid = 0x28f4 [0226.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf")) returned 0x20 [0234.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF", dwFileAttributes=0x20) returned 0 [0234.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.489] GetLastError () returned 0x5 [0234.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF", dwFileAttributes=0x20) returned 0 [0234.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332e80) returned 1 Thread: id = 8095 os_tid = 0x28fc [0226.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf")) returned 0x20 [0234.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF", dwFileAttributes=0x20) returned 0 [0234.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.407] GetLastError () returned 0x5 [0234.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF", dwFileAttributes=0x20) returned 0 [0234.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332f08) returned 1 Thread: id = 8096 os_tid = 0x1534 [0226.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf")) returned 0x20 [0234.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF", dwFileAttributes=0x20) returned 0 [0234.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.491] GetLastError () returned 0x5 [0234.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF", dwFileAttributes=0x20) returned 0 [0234.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332f90) returned 1 Thread: id = 8097 os_tid = 0x1330 [0226.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg")) returned 0x20 [0234.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG", dwFileAttributes=0x20) returned 0 [0234.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.409] GetLastError () returned 0x5 [0234.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG", dwFileAttributes=0x20) returned 0 [0234.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333018) returned 1 Thread: id = 8098 os_tid = 0x1334 [0226.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg")) returned 0x20 [0234.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG", dwFileAttributes=0x20) returned 0 [0234.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.410] GetLastError () returned 0x5 [0234.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG", dwFileAttributes=0x20) returned 0 [0234.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83330a0) returned 1 Thread: id = 8099 os_tid = 0x1540 [0226.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg")) returned 0x20 [0234.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG", dwFileAttributes=0x20) returned 0 [0234.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.412] GetLastError () returned 0x5 [0234.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG", dwFileAttributes=0x20) returned 0 [0234.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333128) returned 1 Thread: id = 8100 os_tid = 0x1340 [0226.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg")) returned 0x20 [0234.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG", dwFileAttributes=0x20) returned 0 [0234.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.414] GetLastError () returned 0x5 [0234.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG", dwFileAttributes=0x20) returned 0 [0234.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83331b0) returned 1 Thread: id = 8101 os_tid = 0x588 [0226.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg")) returned 0x20 [0234.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG", dwFileAttributes=0x20) returned 0 [0234.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.420] GetLastError () returned 0x5 [0234.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG", dwFileAttributes=0x20) returned 0 [0234.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333238) returned 1 Thread: id = 8102 os_tid = 0xab0 [0226.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg")) returned 0x20 [0234.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG", dwFileAttributes=0x20) returned 0 [0234.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.376] GetLastError () returned 0x5 [0234.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG", dwFileAttributes=0x20) returned 0 [0234.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83332c0) returned 1 Thread: id = 8103 os_tid = 0x2d68 [0226.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg")) returned 0x20 [0234.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG", dwFileAttributes=0x20) returned 0 [0234.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.374] GetLastError () returned 0x5 [0234.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG", dwFileAttributes=0x20) returned 0 [0234.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333348) returned 1 Thread: id = 8104 os_tid = 0xad4 [0226.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg")) returned 0x20 [0234.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG", dwFileAttributes=0x20) returned 0 [0234.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.433] GetLastError () returned 0x5 [0234.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG", dwFileAttributes=0x20) returned 0 [0234.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83333d0) returned 1 Thread: id = 8105 os_tid = 0xbb4 [0226.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg")) returned 0x20 [0234.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG", dwFileAttributes=0x20) returned 0 [0234.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.431] GetLastError () returned 0x5 [0234.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG", dwFileAttributes=0x20) returned 0 [0234.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333458) returned 1 Thread: id = 8106 os_tid = 0x1554 [0226.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg")) returned 0x20 [0234.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG", dwFileAttributes=0x20) returned 0 [0234.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.352] GetLastError () returned 0x5 [0234.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG", dwFileAttributes=0x20) returned 0 [0234.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83334e0) returned 1 Thread: id = 8107 os_tid = 0xc64 [0226.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg")) returned 0x20 [0234.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG", dwFileAttributes=0x20) returned 0 [0234.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.350] GetLastError () returned 0x5 [0234.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG", dwFileAttributes=0x20) returned 0 [0234.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333568) returned 1 Thread: id = 8108 os_tid = 0xb14 [0226.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg")) returned 0x20 [0234.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG", dwFileAttributes=0x20) returned 0 [0234.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.348] GetLastError () returned 0x5 [0234.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG", dwFileAttributes=0x20) returned 0 [0234.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83335f0) returned 1 Thread: id = 8109 os_tid = 0x155c [0226.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg")) returned 0x20 [0234.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG", dwFileAttributes=0x20) returned 0 [0234.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.346] GetLastError () returned 0x5 [0234.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG", dwFileAttributes=0x20) returned 0 [0234.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333678) returned 1 Thread: id = 8110 os_tid = 0x1c4 [0226.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg")) returned 0x20 [0234.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG", dwFileAttributes=0x20) returned 0 [0234.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.401] GetLastError () returned 0x5 [0234.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG", dwFileAttributes=0x20) returned 0 [0234.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333700) returned 1 Thread: id = 8111 os_tid = 0x2ed8 [0226.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg")) returned 0x20 [0234.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG", dwFileAttributes=0x20) returned 0 [0234.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.399] GetLastError () returned 0x5 [0234.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG", dwFileAttributes=0x20) returned 0 [0234.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333788) returned 1 Thread: id = 8112 os_tid = 0x10e8 [0226.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg")) returned 0x20 [0234.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG", dwFileAttributes=0x20) returned 0 [0234.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.397] GetLastError () returned 0x5 [0234.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG", dwFileAttributes=0x20) returned 0 [0234.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333810) returned 1 Thread: id = 8113 os_tid = 0x15ac [0226.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg")) returned 0x20 [0235.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG", dwFileAttributes=0x20) returned 0 [0235.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.023] GetLastError () returned 0x5 [0235.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG", dwFileAttributes=0x20) returned 0 [0235.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333898) returned 1 Thread: id = 8114 os_tid = 0x15b0 [0226.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg")) returned 0x20 [0235.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG", dwFileAttributes=0x20) returned 0 [0235.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.025] GetLastError () returned 0x5 [0235.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG", dwFileAttributes=0x20) returned 0 [0235.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 8115 os_tid = 0x15b4 [0226.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf")) returned 0x20 [0235.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF", dwFileAttributes=0x20) returned 0 [0235.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.122] GetLastError () returned 0x5 [0235.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF", dwFileAttributes=0x20) returned 0 [0235.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f8e0) returned 1 Thread: id = 8116 os_tid = 0x15b8 [0226.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf")) returned 0x20 [0235.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF", dwFileAttributes=0x20) returned 0 [0235.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.182] GetLastError () returned 0x5 [0235.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF", dwFileAttributes=0x20) returned 0 [0235.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333920) returned 1 Thread: id = 8117 os_tid = 0x1160 [0226.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf")) returned 0x20 [0235.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF", dwFileAttributes=0x20) returned 0 [0235.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.115] GetLastError () returned 0x5 [0235.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF", dwFileAttributes=0x20) returned 0 [0235.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83339a8) returned 1 Thread: id = 8118 os_tid = 0x2d98 [0226.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf")) returned 0x20 [0235.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF", dwFileAttributes=0x20) returned 0 [0235.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.117] GetLastError () returned 0x5 [0235.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF", dwFileAttributes=0x20) returned 0 [0235.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333a30) returned 1 Thread: id = 8119 os_tid = 0x147c [0226.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf")) returned 0x20 [0235.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF", dwFileAttributes=0x20) returned 0 [0235.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.120] GetLastError () returned 0x5 [0235.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF", dwFileAttributes=0x20) returned 0 [0235.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ab8) returned 1 Thread: id = 8120 os_tid = 0x2da0 [0226.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_m.vss")) returned 0x20 [0228.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.913] GetLastError () returned 0x5 [0228.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11788) returned 1 Thread: id = 8121 os_tid = 0x1480 [0226.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_u.vss")) returned 0x20 [0228.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.911] GetLastError () returned 0x5 [0228.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11148) returned 1 Thread: id = 8122 os_tid = 0x6cc [0226.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_m.vss")) returned 0x20 [0228.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.900] GetLastError () returned 0x5 [0228.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcea8) returned 1 Thread: id = 8123 os_tid = 0x1484 [0226.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_u.vss")) returned 0x20 [0228.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.898] GetLastError () returned 0x5 [0228.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcf48) returned 1 Thread: id = 8124 os_tid = 0x2db0 [0226.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_m.vss")) returned 0x20 [0228.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.897] GetLastError () returned 0x5 [0228.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd128) returned 1 Thread: id = 8125 os_tid = 0xf3c [0226.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_u.vss")) returned 0x20 [0228.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.895] GetLastError () returned 0x5 [0228.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd1c8) returned 1 Thread: id = 8126 os_tid = 0x1488 [0226.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_m.vss")) returned 0x20 [0228.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS", dwFileAttributes=0x20) returned 0 [0228.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.935] GetLastError () returned 0x5 [0228.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS", dwFileAttributes=0x20) returned 0 [0228.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd268) returned 1 Thread: id = 8127 os_tid = 0x158 [0226.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_u.vss")) returned 0x20 [0228.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS", dwFileAttributes=0x20) returned 0 [0228.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.934] GetLastError () returned 0x5 [0228.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS", dwFileAttributes=0x20) returned 0 [0228.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd308) returned 1 Thread: id = 8128 os_tid = 0x148c [0226.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_m.vss")) returned 0x20 [0228.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.932] GetLastError () returned 0x5 [0228.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd3a8) returned 1 Thread: id = 8129 os_tid = 0x1490 [0226.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_u.vss")) returned 0x20 [0228.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.931] GetLastError () returned 0x5 [0228.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcc28) returned 1 Thread: id = 8130 os_tid = 0x1494 [0226.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd")) returned 0x20 [0228.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD", dwFileAttributes=0x20) returned 0 [0228.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.929] GetLastError () returned 0x5 [0228.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD", dwFileAttributes=0x20) returned 0 [0228.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce08) returned 1 Thread: id = 8131 os_tid = 0x1498 [0226.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd")) returned 0x20 [0228.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD", dwFileAttributes=0x20) returned 0 [0228.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.927] GetLastError () returned 0x5 [0228.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD", dwFileAttributes=0x20) returned 0 [0228.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5e8) returned 1 Thread: id = 8132 os_tid = 0x149c [0226.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_m.vst")) returned 0x20 [0228.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST", dwFileAttributes=0x20) returned 0 [0228.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.926] GetLastError () returned 0x5 [0228.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST", dwFileAttributes=0x20) returned 0 [0228.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc868) returned 1 Thread: id = 8133 os_tid = 0x1198 [0226.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_u.vst")) returned 0x20 [0228.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST", dwFileAttributes=0x20) returned 0 [0228.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.924] GetLastError () returned 0x5 [0228.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST", dwFileAttributes=0x20) returned 0 [0228.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcfe8) returned 1 Thread: id = 8134 os_tid = 0x14a8 [0226.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_m.vss")) returned 0x20 [0228.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0228.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.910] GetLastError () returned 0x5 [0228.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0228.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd088) returned 1 Thread: id = 8135 os_tid = 0x1634 [0226.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_u.vss")) returned 0x20 [0228.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0228.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.908] GetLastError () returned 0x5 [0228.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0228.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd448) returned 1 Thread: id = 8136 os_tid = 0x14ac [0226.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_m.vss")) returned 0x20 [0228.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS", dwFileAttributes=0x20) returned 0 [0228.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.907] GetLastError () returned 0x5 [0228.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS", dwFileAttributes=0x20) returned 0 [0228.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 Thread: id = 8137 os_tid = 0x1d3c [0226.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_u.vss")) returned 0x20 [0228.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS", dwFileAttributes=0x20) returned 0 [0228.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.905] GetLastError () returned 0x5 [0228.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS", dwFileAttributes=0x20) returned 0 [0228.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 8138 os_tid = 0x2258 [0226.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_m.vss")) returned 0x20 [0228.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.904] GetLastError () returned 0x5 [0228.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 8139 os_tid = 0x2260 [0226.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_u.vss")) returned 0x20 [0228.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.902] GetLastError () returned 0x5 [0228.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c74b8) returned 1 Thread: id = 8140 os_tid = 0x2264 [0226.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_m.vss")) returned 0x20 [0228.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS", dwFileAttributes=0x20) returned 0 [0228.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.922] GetLastError () returned 0x5 [0228.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS", dwFileAttributes=0x20) returned 0 [0228.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 8141 os_tid = 0x2268 [0226.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_u.vss")) returned 0x20 [0228.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS", dwFileAttributes=0x20) returned 0 [0228.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.921] GetLastError () returned 0x5 [0228.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS", dwFileAttributes=0x20) returned 0 [0228.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 Thread: id = 8142 os_tid = 0x226c [0226.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_m.vss")) returned 0x20 [0228.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS", dwFileAttributes=0x20) returned 0 [0228.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.854] GetLastError () returned 0x5 [0228.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS", dwFileAttributes=0x20) returned 0 [0228.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40100) returned 1 Thread: id = 8143 os_tid = 0x2270 [0226.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_u.vss")) returned 0x20 [0228.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS", dwFileAttributes=0x20) returned 0 [0228.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.919] GetLastError () returned 0x5 [0228.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS", dwFileAttributes=0x20) returned 0 [0228.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d401a0) returned 1 Thread: id = 8144 os_tid = 0x2274 [0226.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_m.vss")) returned 0x20 [0228.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS", dwFileAttributes=0x20) returned 0 [0228.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.985] GetLastError () returned 0x5 [0228.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS", dwFileAttributes=0x20) returned 0 [0228.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40240) returned 1 Thread: id = 8145 os_tid = 0x884 [0226.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_u.vss")) returned 0x20 [0227.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS", dwFileAttributes=0x20) returned 0 [0227.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.364] GetLastError () returned 0x5 [0227.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS", dwFileAttributes=0x20) returned 0 [0227.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402e0) returned 1 Thread: id = 8146 os_tid = 0x14dc [0227.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_m.vss")) returned 0x20 [0228.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.871] GetLastError () returned 0x5 [0228.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40380) returned 1 Thread: id = 8147 os_tid = 0x11d0 [0227.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf")) returned 0x20 [0235.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF", dwFileAttributes=0x20) returned 0 [0235.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.039] GetLastError () returned 0x5 [0235.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF", dwFileAttributes=0x20) returned 0 [0235.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 8148 os_tid = 0x14e0 [0227.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf")) returned 0x20 [0235.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF", dwFileAttributes=0x20) returned 0 [0235.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.041] GetLastError () returned 0x5 [0235.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF", dwFileAttributes=0x20) returned 0 [0235.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333b40) returned 1 Thread: id = 8149 os_tid = 0x14e8 [0227.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf")) returned 0x20 [0235.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF", dwFileAttributes=0x20) returned 0 [0235.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.043] GetLastError () returned 0x5 [0235.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF", dwFileAttributes=0x20) returned 0 [0235.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333bc8) returned 1 Thread: id = 8150 os_tid = 0x1650 [0227.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf")) returned 0x20 [0235.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF", dwFileAttributes=0x20) returned 0 [0235.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.046] GetLastError () returned 0x5 [0235.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF", dwFileAttributes=0x20) returned 0 [0235.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333c50) returned 1 Thread: id = 8151 os_tid = 0x1654 [0227.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf")) returned 0x20 [0235.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF", dwFileAttributes=0x20) returned 0 [0235.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.016] GetLastError () returned 0x5 [0235.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF", dwFileAttributes=0x20) returned 0 [0235.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333cd8) returned 1 Thread: id = 8152 os_tid = 0x1b18 [0227.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf")) returned 0x20 [0235.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF", dwFileAttributes=0x20) returned 0 [0235.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.029] GetLastError () returned 0x5 [0235.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF", dwFileAttributes=0x20) returned 0 [0235.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333d60) returned 1 Thread: id = 8153 os_tid = 0x1b1c [0227.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf")) returned 0x20 [0235.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF", dwFileAttributes=0x20) returned 0 [0235.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.031] GetLastError () returned 0x5 [0235.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF", dwFileAttributes=0x20) returned 0 [0235.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333de8) returned 1 Thread: id = 8154 os_tid = 0x1b34 [0227.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf")) returned 0x20 [0235.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF", dwFileAttributes=0x20) returned 0 [0235.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.033] GetLastError () returned 0x5 [0235.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF", dwFileAttributes=0x20) returned 0 [0235.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333e70) returned 1 Thread: id = 8155 os_tid = 0x1b64 [0227.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf")) returned 0x20 [0235.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF", dwFileAttributes=0x20) returned 0 [0235.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.035] GetLastError () returned 0x5 [0235.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF", dwFileAttributes=0x20) returned 0 [0235.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ef8) returned 1 Thread: id = 8156 os_tid = 0x2598 [0227.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf")) returned 0x20 [0235.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF", dwFileAttributes=0x20) returned 0 [0235.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.037] GetLastError () returned 0x5 [0235.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF", dwFileAttributes=0x20) returned 0 [0235.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333f80) returned 1 Thread: id = 8157 os_tid = 0x25a8 [0227.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf")) returned 0x20 [0235.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF", dwFileAttributes=0x20) returned 0 [0235.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.048] GetLastError () returned 0x5 [0235.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF", dwFileAttributes=0x20) returned 0 [0235.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334008) returned 1 Thread: id = 8158 os_tid = 0x1b68 [0227.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf")) returned 0x20 [0235.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF", dwFileAttributes=0x20) returned 0 [0235.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.050] GetLastError () returned 0x5 [0235.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF", dwFileAttributes=0x20) returned 0 [0235.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334090) returned 1 Thread: id = 8159 os_tid = 0x261c [0227.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf")) returned 0x20 [0235.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF", dwFileAttributes=0x20) returned 0 [0235.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.052] GetLastError () returned 0x5 [0235.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF", dwFileAttributes=0x20) returned 0 [0235.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334118) returned 1 Thread: id = 8160 os_tid = 0x2730 [0227.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf")) returned 0x20 [0235.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF", dwFileAttributes=0x20) returned 0 [0235.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.054] GetLastError () returned 0x5 [0235.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF", dwFileAttributes=0x20) returned 0 [0235.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83341a0) returned 1 Thread: id = 8161 os_tid = 0x2734 [0227.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf")) returned 0x20 [0235.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF", dwFileAttributes=0x20) returned 0 [0235.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.056] GetLastError () returned 0x5 [0235.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF", dwFileAttributes=0x20) returned 0 [0235.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334228) returned 1 Thread: id = 8162 os_tid = 0x1bd8 [0227.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf")) returned 0x20 [0234.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF", dwFileAttributes=0x20) returned 0 [0234.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.996] GetLastError () returned 0x5 [0234.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF", dwFileAttributes=0x20) returned 0 [0234.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83342b0) returned 1 Thread: id = 8163 os_tid = 0x1bdc [0227.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf")) returned 0x20 [0234.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF", dwFileAttributes=0x20) returned 0 [0234.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.998] GetLastError () returned 0x5 [0234.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF", dwFileAttributes=0x20) returned 0 [0234.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334338) returned 1 Thread: id = 8164 os_tid = 0x1be0 [0227.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf")) returned 0x20 [0234.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF", dwFileAttributes=0x20) returned 0 [0235.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.000] GetLastError () returned 0x5 [0235.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF", dwFileAttributes=0x20) returned 0 [0235.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83343c0) returned 1 Thread: id = 8165 os_tid = 0x122c [0227.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf")) returned 0x20 [0235.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF", dwFileAttributes=0x20) returned 0 [0235.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.002] GetLastError () returned 0x5 [0235.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF", dwFileAttributes=0x20) returned 0 [0235.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334448) returned 1 Thread: id = 8166 os_tid = 0x1230 [0227.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf")) returned 0x20 [0235.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF", dwFileAttributes=0x20) returned 0 [0235.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.018] GetLastError () returned 0x5 [0235.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF", dwFileAttributes=0x20) returned 0 [0235.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83344d0) returned 1 Thread: id = 8167 os_tid = 0x1234 [0227.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf")) returned 0x20 [0235.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF", dwFileAttributes=0x20) returned 0 [0235.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.004] GetLastError () returned 0x5 [0235.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF", dwFileAttributes=0x20) returned 0 [0235.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334558) returned 1 Thread: id = 8168 os_tid = 0xb84 [0227.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf")) returned 0x20 [0235.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF", dwFileAttributes=0x20) returned 0 [0235.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.006] GetLastError () returned 0x5 [0235.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF", dwFileAttributes=0x20) returned 0 [0235.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83345e0) returned 1 Thread: id = 8169 os_tid = 0x1400 [0227.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf")) returned 0x20 [0235.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF", dwFileAttributes=0x20) returned 0 [0235.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.008] GetLastError () returned 0x5 [0235.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF", dwFileAttributes=0x20) returned 0 [0235.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334668) returned 1 Thread: id = 8170 os_tid = 0x12b0 [0227.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf")) returned 0x20 [0235.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF", dwFileAttributes=0x20) returned 0 [0235.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.021] GetLastError () returned 0x5 [0235.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF", dwFileAttributes=0x20) returned 0 [0235.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83346f0) returned 1 Thread: id = 8171 os_tid = 0x293c [0227.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf")) returned 0x20 [0235.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF", dwFileAttributes=0x20) returned 0 [0235.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.010] GetLastError () returned 0x5 [0235.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF", dwFileAttributes=0x20) returned 0 [0235.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334778) returned 1 Thread: id = 8172 os_tid = 0xba8 [0227.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf")) returned 0x20 [0235.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF", dwFileAttributes=0x20) returned 0 [0235.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.012] GetLastError () returned 0x5 [0235.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF", dwFileAttributes=0x20) returned 0 [0235.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334800) returned 1 Thread: id = 8173 os_tid = 0xbc8 [0227.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf")) returned 0x20 [0235.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF", dwFileAttributes=0x20) returned 0 [0235.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.014] GetLastError () returned 0x5 [0235.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF", dwFileAttributes=0x20) returned 0 [0235.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8334888) returned 1 Thread: id = 8174 os_tid = 0x4bc [0227.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf")) returned 0x20 [0235.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF", dwFileAttributes=0x20) returned 0 [0235.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.092] GetLastError () returned 0x5 [0235.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF", dwFileAttributes=0x20) returned 0 [0235.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb648) returned 1 Thread: id = 8175 os_tid = 0xe58 [0227.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_u.vss")) returned 0x20 [0227.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS", dwFileAttributes=0x20) returned 0 [0227.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.392] GetLastError () returned 0x5 [0227.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS", dwFileAttributes=0x20) returned 0 [0227.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40420) returned 1 Thread: id = 8176 os_tid = 0x7c4 [0227.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_m.vss")) returned 0x20 [0228.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.983] GetLastError () returned 0x5 [0228.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404c0) returned 1 Thread: id = 8177 os_tid = 0x7b0 [0227.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_u.vss")) returned 0x20 [0228.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.835] GetLastError () returned 0x5 [0228.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40560) returned 1 Thread: id = 8178 os_tid = 0x43c [0227.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vss")) returned 0x20 [0228.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS", dwFileAttributes=0x20) returned 0 [0228.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.975] GetLastError () returned 0x5 [0228.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS", dwFileAttributes=0x20) returned 0 [0228.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db490) returned 1 Thread: id = 8179 os_tid = 0xdb4 [0227.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vst")) returned 0x20 [0228.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST", dwFileAttributes=0x20) returned 0 [0228.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.972] GetLastError () returned 0x5 [0228.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST", dwFileAttributes=0x20) returned 0 [0228.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db3f8) returned 1 Thread: id = 8180 os_tid = 0xdf0 [0227.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vss")) returned 0x20 [0228.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS", dwFileAttributes=0x20) returned 0 [0228.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.971] GetLastError () returned 0x5 [0228.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS", dwFileAttributes=0x20) returned 0 [0228.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db360) returned 1 Thread: id = 8181 os_tid = 0xde8 [0227.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vst")) returned 0x20 [0228.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST", dwFileAttributes=0x20) returned 0 [0228.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.976] GetLastError () returned 0x5 [0228.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST", dwFileAttributes=0x20) returned 0 [0228.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dacd8) returned 1 Thread: id = 8182 os_tid = 0x68c [0227.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_m.vss")) returned 0x20 [0228.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS", dwFileAttributes=0x20) returned 0 [0228.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.977] GetLastError () returned 0x5 [0228.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS", dwFileAttributes=0x20) returned 0 [0228.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40600) returned 1 Thread: id = 8183 os_tid = 0xe98 [0227.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_u.vss")) returned 0x20 [0228.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS", dwFileAttributes=0x20) returned 0 [0228.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.970] GetLastError () returned 0x5 [0228.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS", dwFileAttributes=0x20) returned 0 [0228.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d406a0) returned 1 Thread: id = 8184 os_tid = 0xe9c [0227.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_m.vss")) returned 0x20 [0228.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.968] GetLastError () returned 0x5 [0228.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40740) returned 1 Thread: id = 8185 os_tid = 0xeb0 [0227.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_u.vss")) returned 0x20 [0228.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.979] GetLastError () returned 0x5 [0228.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d407e0) returned 1 Thread: id = 8186 os_tid = 0xeac [0227.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss")) returned 0x20 [0228.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.980] GetLastError () returned 0x5 [0228.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40880) returned 1 Thread: id = 8187 os_tid = 0xea8 [0227.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vst")) returned 0x20 [0228.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST", dwFileAttributes=0x20) returned 0 [0228.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.967] GetLastError () returned 0x5 [0228.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST", dwFileAttributes=0x20) returned 0 [0228.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40920) returned 1 Thread: id = 8188 os_tid = 0xeb4 [0227.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss")) returned 0x20 [0228.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.965] GetLastError () returned 0x5 [0228.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409c0) returned 1 Thread: id = 8189 os_tid = 0xeb8 [0227.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vst")) returned 0x20 [0228.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST", dwFileAttributes=0x20) returned 0 [0228.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.981] GetLastError () returned 0x5 [0228.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST", dwFileAttributes=0x20) returned 0 [0228.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a60) returned 1 Thread: id = 8190 os_tid = 0x159c [0227.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vss")) returned 0x20 [0228.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.982] GetLastError () returned 0x5 [0228.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b00) returned 1 Thread: id = 8191 os_tid = 0x15a0 [0227.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vst")) returned 0x20 [0228.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST", dwFileAttributes=0x20) returned 0 [0228.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.963] GetLastError () returned 0x5 [0228.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST", dwFileAttributes=0x20) returned 0 [0228.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ba0) returned 1 Thread: id = 8192 os_tid = 0x15a4 [0227.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vss")) returned 0x20 [0228.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.959] GetLastError () returned 0x5 [0228.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c40) returned 1 Thread: id = 8193 os_tid = 0x15a8 [0227.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vst")) returned 0x20 [0228.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST", dwFileAttributes=0x20) returned 0 [0228.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.957] GetLastError () returned 0x5 [0228.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST", dwFileAttributes=0x20) returned 0 [0228.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ce0) returned 1 Thread: id = 8194 os_tid = 0x1434 [0227.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_m.vss")) returned 0x20 [0228.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS", dwFileAttributes=0x20) returned 0 [0228.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.937] GetLastError () returned 0x5 [0228.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS", dwFileAttributes=0x20) returned 0 [0228.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40d80) returned 1 Thread: id = 8195 os_tid = 0x15c0 [0227.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf")) returned 0x20 [0235.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF", dwFileAttributes=0x20) returned 0 [0235.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.089] GetLastError () returned 0x5 [0235.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF", dwFileAttributes=0x20) returned 0 [0235.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 8196 os_tid = 0x15c4 [0227.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf")) returned 0x20 [0235.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF", dwFileAttributes=0x20) returned 0 [0235.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.027] GetLastError () returned 0x5 [0235.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF", dwFileAttributes=0x20) returned 0 [0235.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb6d0) returned 1 Thread: id = 8197 os_tid = 0x12fc [0227.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf")) returned 0x20 [0235.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF", dwFileAttributes=0x20) returned 0 [0235.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.087] GetLastError () returned 0x5 [0235.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF", dwFileAttributes=0x20) returned 0 [0235.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb758) returned 1 Thread: id = 8198 os_tid = 0x1300 [0227.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf")) returned 0x20 [0235.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF", dwFileAttributes=0x20) returned 0 [0235.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.084] GetLastError () returned 0x5 [0235.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF", dwFileAttributes=0x20) returned 0 [0235.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb7e0) returned 1 Thread: id = 8199 os_tid = 0x15d4 [0227.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf")) returned 0x20 [0235.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF", dwFileAttributes=0x20) returned 0 [0235.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.081] GetLastError () returned 0x5 [0235.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF", dwFileAttributes=0x20) returned 0 [0235.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb868) returned 1 Thread: id = 8200 os_tid = 0x15d8 [0227.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf")) returned 0x20 [0235.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF", dwFileAttributes=0x20) returned 0 [0235.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.079] GetLastError () returned 0x5 [0235.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF", dwFileAttributes=0x20) returned 0 [0235.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb8f0) returned 1 Thread: id = 8201 os_tid = 0x15dc [0227.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_u.vss")) returned 0x20 [0228.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS", dwFileAttributes=0x20) returned 0 [0228.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.938] GetLastError () returned 0x5 [0228.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS", dwFileAttributes=0x20) returned 0 [0228.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40420) returned 1 Thread: id = 8202 os_tid = 0x2d3c [0227.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_m.vss")) returned 0x20 [0228.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS", dwFileAttributes=0x20) returned 0 [0228.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.940] GetLastError () returned 0x5 [0228.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS", dwFileAttributes=0x20) returned 0 [0228.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402e0) returned 1 Thread: id = 8203 os_tid = 0x15e0 [0227.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_u.vss")) returned 0x20 [0228.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS", dwFileAttributes=0x20) returned 0 [0228.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.986] GetLastError () returned 0x5 [0228.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS", dwFileAttributes=0x20) returned 0 [0228.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40e20) returned 1 Thread: id = 8204 os_tid = 0x15e4 [0227.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_m.vss")) returned 0x20 [0228.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS", dwFileAttributes=0x20) returned 0 [0228.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.941] GetLastError () returned 0x5 [0228.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS", dwFileAttributes=0x20) returned 0 [0228.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ec0) returned 1 Thread: id = 8205 os_tid = 0x15e8 [0227.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_u.vss")) returned 0x20 [0228.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS", dwFileAttributes=0x20) returned 0 [0228.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.987] GetLastError () returned 0x5 [0228.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS", dwFileAttributes=0x20) returned 0 [0228.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f60) returned 1 Thread: id = 8206 os_tid = 0x15ec [0227.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_m.vss")) returned 0x20 [0228.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.943] GetLastError () returned 0x5 [0228.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41000) returned 1 Thread: id = 8207 os_tid = 0x1600 [0227.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_u.vss")) returned 0x20 [0228.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.988] GetLastError () returned 0x5 [0228.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d410a0) returned 1 Thread: id = 8208 os_tid = 0x160c [0227.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss")) returned 0x20 [0228.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.944] GetLastError () returned 0x5 [0228.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41140) returned 1 Thread: id = 8209 os_tid = 0x1610 [0227.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss")) returned 0x20 [0228.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.946] GetLastError () returned 0x5 [0228.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d411e0) returned 1 Thread: id = 8210 os_tid = 0x1614 [0227.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_m.vst")) returned 0x20 [0228.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST", dwFileAttributes=0x20) returned 0 [0228.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.989] GetLastError () returned 0x5 [0228.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST", dwFileAttributes=0x20) returned 0 [0228.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41280) returned 1 Thread: id = 8211 os_tid = 0x154 [0227.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_u.vst")) returned 0x20 [0228.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST", dwFileAttributes=0x20) returned 0 [0228.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.948] GetLastError () returned 0x5 [0228.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST", dwFileAttributes=0x20) returned 0 [0228.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41320) returned 1 Thread: id = 8212 os_tid = 0x1618 [0227.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_m.vss")) returned 0x20 [0228.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS", dwFileAttributes=0x20) returned 0 [0228.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.949] GetLastError () returned 0x5 [0228.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS", dwFileAttributes=0x20) returned 0 [0228.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413c0) returned 1 Thread: id = 8213 os_tid = 0x1620 [0227.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_u.vss")) returned 0x20 [0228.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS", dwFileAttributes=0x20) returned 0 [0228.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.951] GetLastError () returned 0x5 [0228.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS", dwFileAttributes=0x20) returned 0 [0228.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41460) returned 1 Thread: id = 8214 os_tid = 0x1624 [0227.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_m.vss")) returned 0x20 [0228.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0228.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.990] GetLastError () returned 0x5 [0228.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0228.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41500) returned 1 Thread: id = 8215 os_tid = 0x1438 [0227.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_u.vss")) returned 0x20 [0228.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0228.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.952] GetLastError () returned 0x5 [0228.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0228.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d415a0) returned 1 Thread: id = 8216 os_tid = 0x1628 [0227.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_m.vss")) returned 0x20 [0228.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.992] GetLastError () returned 0x5 [0228.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41640) returned 1 Thread: id = 8217 os_tid = 0xbbc [0227.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_u.vss")) returned 0x20 [0228.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.954] GetLastError () returned 0x5 [0228.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d416e0) returned 1 Thread: id = 8218 os_tid = 0x1630 [0227.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_m.vss")) returned 0x20 [0228.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.993] GetLastError () returned 0x5 [0228.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41780) returned 1 Thread: id = 8219 os_tid = 0x143c [0227.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_u.vss")) returned 0x20 [0228.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.956] GetLastError () returned 0x5 [0228.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41820) returned 1 Thread: id = 8220 os_tid = 0xb80 [0227.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_m.vss")) returned 0x20 [0228.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS", dwFileAttributes=0x20) returned 0 [0228.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.994] GetLastError () returned 0x5 [0228.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS", dwFileAttributes=0x20) returned 0 [0228.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418c0) returned 1 Thread: id = 8221 os_tid = 0xb70 [0227.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_u.vss")) returned 0x20 [0228.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS", dwFileAttributes=0x20) returned 0 [0228.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.837] GetLastError () returned 0x5 [0228.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS", dwFileAttributes=0x20) returned 0 [0228.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41960) returned 1 Thread: id = 8223 os_tid = 0x1444 [0227.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vss")) returned 0x20 [0228.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0228.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.996] GetLastError () returned 0x5 [0228.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0228.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41a00) returned 1 Thread: id = 8224 os_tid = 0x13c4 [0227.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vst")) returned 0x20 [0228.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST", dwFileAttributes=0x20) returned 0 [0228.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.997] GetLastError () returned 0x5 [0228.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST", dwFileAttributes=0x20) returned 0 [0228.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41aa0) returned 1 Thread: id = 8225 os_tid = 0x133c [0227.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vss")) returned 0x20 [0228.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0228.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.998] GetLastError () returned 0x5 [0228.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0228.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b40) returned 1 Thread: id = 8226 os_tid = 0xe48 [0227.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vst")) returned 0x20 [0228.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST", dwFileAttributes=0x20) returned 0 [0228.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.000] GetLastError () returned 0x5 [0229.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST", dwFileAttributes=0x20) returned 0 [0229.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41be0) returned 1 Thread: id = 8227 os_tid = 0x1448 [0227.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_m.vst")) returned 0x20 [0229.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST", dwFileAttributes=0x20) returned 0 [0229.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.001] GetLastError () returned 0x5 [0229.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST", dwFileAttributes=0x20) returned 0 [0229.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c80) returned 1 Thread: id = 8228 os_tid = 0x145c [0227.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_u.vst")) returned 0x20 [0229.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST", dwFileAttributes=0x20) returned 0 [0229.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.002] GetLastError () returned 0x5 [0229.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST", dwFileAttributes=0x20) returned 0 [0229.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d20) returned 1 Thread: id = 8229 os_tid = 0x1464 [0227.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_m.vst")) returned 0x20 [0229.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST", dwFileAttributes=0x20) returned 0 [0229.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.004] GetLastError () returned 0x5 [0229.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST", dwFileAttributes=0x20) returned 0 [0229.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41dc0) returned 1 Thread: id = 8230 os_tid = 0x1468 [0227.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_u.vst")) returned 0x20 [0229.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST", dwFileAttributes=0x20) returned 0 [0229.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.005] GetLastError () returned 0x5 [0229.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST", dwFileAttributes=0x20) returned 0 [0229.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e60) returned 1 Thread: id = 8231 os_tid = 0x1470 [0227.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vss")) returned 0x20 [0228.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.973] GetLastError () returned 0x5 [0228.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41f00) returned 1 Thread: id = 8232 os_tid = 0xac4 [0227.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vst")) returned 0x20 [0229.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST", dwFileAttributes=0x20) returned 0 [0229.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.007] GetLastError () returned 0x5 [0229.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST", dwFileAttributes=0x20) returned 0 [0229.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41fa0) returned 1 Thread: id = 8233 os_tid = 0x520 [0227.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vss")) returned 0x20 [0229.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS", dwFileAttributes=0x20) returned 0 [0229.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.009] GetLastError () returned 0x5 [0229.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS", dwFileAttributes=0x20) returned 0 [0229.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db968) returned 1 Thread: id = 8234 os_tid = 0x2de4 [0227.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vst")) returned 0x20 [0228.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST", dwFileAttributes=0x20) returned 0 [0228.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.834] GetLastError () returned 0x5 [0228.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST", dwFileAttributes=0x20) returned 0 [0228.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d0458) returned 1 Thread: id = 8235 os_tid = 0x2de8 [0228.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf")) returned 0x20 [0235.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF", dwFileAttributes=0x20) returned 0 [0235.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.072] GetLastError () returned 0x5 [0235.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF", dwFileAttributes=0x20) returned 0 [0235.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 8236 os_tid = 0xb0 [0228.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf")) returned 0x20 [0235.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF", dwFileAttributes=0x20) returned 0 [0235.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.106] GetLastError () returned 0x5 [0235.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF", dwFileAttributes=0x20) returned 0 [0235.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 8237 os_tid = 0x2df8 [0228.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf")) returned 0x20 [0235.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF", dwFileAttributes=0x20) returned 0 [0235.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.109] GetLastError () returned 0x5 [0235.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF", dwFileAttributes=0x20) returned 0 [0235.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eb978) returned 1 Thread: id = 8238 os_tid = 0x1478 [0228.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf")) returned 0x20 [0235.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF", dwFileAttributes=0x20) returned 0 [0235.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.113] GetLastError () returned 0x5 [0235.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF", dwFileAttributes=0x20) returned 0 [0235.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eba00) returned 1 Thread: id = 8239 os_tid = 0x2e04 [0228.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf")) returned 0x20 [0235.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF", dwFileAttributes=0x20) returned 0 [0235.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.058] GetLastError () returned 0x5 [0235.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF", dwFileAttributes=0x20) returned 0 [0235.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eba88) returned 1 Thread: id = 8240 os_tid = 0x17dc [0228.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf")) returned 0x20 [0235.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF", dwFileAttributes=0x20) returned 0 [0235.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.060] GetLastError () returned 0x5 [0235.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF", dwFileAttributes=0x20) returned 0 [0235.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebb10) returned 1 Thread: id = 8241 os_tid = 0x1828 [0228.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf")) returned 0x20 [0235.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF", dwFileAttributes=0x20) returned 0 [0235.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.074] GetLastError () returned 0x5 [0235.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF", dwFileAttributes=0x20) returned 0 [0235.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebb98) returned 1 Thread: id = 8242 os_tid = 0x182c [0228.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf")) returned 0x20 [0235.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF", dwFileAttributes=0x20) returned 0 [0235.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.063] GetLastError () returned 0x5 [0235.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF", dwFileAttributes=0x20) returned 0 [0235.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebc20) returned 1 Thread: id = 8243 os_tid = 0x1830 [0228.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf")) returned 0x20 [0235.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF", dwFileAttributes=0x20) returned 0 [0235.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.077] GetLastError () returned 0x5 [0235.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF", dwFileAttributes=0x20) returned 0 [0235.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebca8) returned 1 Thread: id = 8244 os_tid = 0xad8 [0228.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf")) returned 0x20 [0235.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF", dwFileAttributes=0x20) returned 0 [0235.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.065] GetLastError () returned 0x5 [0235.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF", dwFileAttributes=0x20) returned 0 [0235.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebd30) returned 1 Thread: id = 8245 os_tid = 0x1834 [0228.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf")) returned 0x20 [0235.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF", dwFileAttributes=0x20) returned 0 [0235.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.067] GetLastError () returned 0x5 [0235.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF", dwFileAttributes=0x20) returned 0 [0235.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebdb8) returned 1 Thread: id = 8246 os_tid = 0x1838 [0228.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf")) returned 0x20 [0235.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF", dwFileAttributes=0x20) returned 0 [0235.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.070] GetLastError () returned 0x5 [0235.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF", dwFileAttributes=0x20) returned 0 [0235.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebe40) returned 1 Thread: id = 8247 os_tid = 0x119c [0228.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf")) returned 0x20 [0234.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF", dwFileAttributes=0x20) returned 0 [0234.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.904] GetLastError () returned 0x5 [0234.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF", dwFileAttributes=0x20) returned 0 [0234.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebec8) returned 1 Thread: id = 8248 os_tid = 0xf7c [0228.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf")) returned 0x20 [0234.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF", dwFileAttributes=0x20) returned 0 [0234.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.906] GetLastError () returned 0x5 [0234.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF", dwFileAttributes=0x20) returned 0 [0234.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebf50) returned 1 Thread: id = 8249 os_tid = 0x121c [0228.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf")) returned 0x20 [0234.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF", dwFileAttributes=0x20) returned 0 [0234.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.908] GetLastError () returned 0x5 [0234.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF", dwFileAttributes=0x20) returned 0 [0234.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ebfd8) returned 1 Thread: id = 8250 os_tid = 0x6b8 [0228.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf")) returned 0x20 [0234.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF", dwFileAttributes=0x20) returned 0 [0234.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.910] GetLastError () returned 0x5 [0234.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF", dwFileAttributes=0x20) returned 0 [0234.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec060) returned 1 Thread: id = 8251 os_tid = 0x1864 [0228.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf")) returned 0x20 [0235.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF", dwFileAttributes=0x20) returned 0 [0235.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.094] GetLastError () returned 0x5 [0235.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF", dwFileAttributes=0x20) returned 0 [0235.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec0e8) returned 1 Thread: id = 8252 os_tid = 0x1868 [0228.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf")) returned 0x20 [0235.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF", dwFileAttributes=0x20) returned 0 [0235.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.100] GetLastError () returned 0x5 [0235.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF", dwFileAttributes=0x20) returned 0 [0235.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec170) returned 1 Thread: id = 8253 os_tid = 0x1870 [0228.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf")) returned 0x20 [0235.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF", dwFileAttributes=0x20) returned 0 [0235.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.103] GetLastError () returned 0x5 [0235.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF", dwFileAttributes=0x20) returned 0 [0235.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec1f8) returned 1 Thread: id = 8254 os_tid = 0x1900 [0228.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf")) returned 0x20 [0234.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF", dwFileAttributes=0x20) returned 0 [0234.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.893] GetLastError () returned 0x5 [0234.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF", dwFileAttributes=0x20) returned 0 [0234.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec280) returned 1 Thread: id = 8255 os_tid = 0x1928 [0228.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf")) returned 0x20 [0234.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF", dwFileAttributes=0x20) returned 0 [0234.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.895] GetLastError () returned 0x5 [0234.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF", dwFileAttributes=0x20) returned 0 [0234.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 Thread: id = 8256 os_tid = 0x192c [0228.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf")) returned 0x20 [0234.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF", dwFileAttributes=0x20) returned 0 [0234.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.896] GetLastError () returned 0x5 [0234.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF", dwFileAttributes=0x20) returned 0 [0234.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec308) returned 1 Thread: id = 8257 os_tid = 0xf80 [0228.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf")) returned 0x20 [0234.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF", dwFileAttributes=0x20) returned 0 [0234.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.898] GetLastError () returned 0x5 [0234.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF", dwFileAttributes=0x20) returned 0 [0234.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec390) returned 1 Thread: id = 8258 os_tid = 0x59c [0228.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf")) returned 0x20 [0234.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF", dwFileAttributes=0x20) returned 0 [0234.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.924] GetLastError () returned 0x5 [0234.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF", dwFileAttributes=0x20) returned 0 [0234.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec418) returned 1 Thread: id = 8259 os_tid = 0xaf8 [0228.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf")) returned 0x20 [0234.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF", dwFileAttributes=0x20) returned 0 [0234.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.926] GetLastError () returned 0x5 [0234.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF", dwFileAttributes=0x20) returned 0 [0234.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec4a0) returned 1 Thread: id = 8260 os_tid = 0x1280 [0228.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf")) returned 0x20 [0234.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF", dwFileAttributes=0x20) returned 0 [0234.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.928] GetLastError () returned 0x5 [0234.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF", dwFileAttributes=0x20) returned 0 [0234.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec528) returned 1 Thread: id = 8261 os_tid = 0x2ad4 [0228.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf")) returned 0x20 [0234.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF", dwFileAttributes=0x20) returned 0 [0234.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.930] GetLastError () returned 0x5 [0234.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF", dwFileAttributes=0x20) returned 0 [0234.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec5b0) returned 1 Thread: id = 8262 os_tid = 0x1934 [0228.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf")) returned 0x20 [0234.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF", dwFileAttributes=0x20) returned 0 [0234.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.900] GetLastError () returned 0x5 [0234.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF", dwFileAttributes=0x20) returned 0 [0234.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec638) returned 1 Thread: id = 8263 os_tid = 0x1938 [0228.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf")) returned 0x20 [0234.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF", dwFileAttributes=0x20) returned 0 [0234.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.932] GetLastError () returned 0x5 [0234.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF", dwFileAttributes=0x20) returned 0 [0234.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec6c0) returned 1 Thread: id = 8264 os_tid = 0x193c [0228.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf")) returned 0x20 [0234.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF", dwFileAttributes=0x20) returned 0 [0234.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.934] GetLastError () returned 0x5 [0234.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF", dwFileAttributes=0x20) returned 0 [0234.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec748) returned 1 Thread: id = 8265 os_tid = 0x1880 [0228.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf")) returned 0x20 [0234.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF", dwFileAttributes=0x20) returned 0 [0234.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.936] GetLastError () returned 0x5 [0234.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF", dwFileAttributes=0x20) returned 0 [0234.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec7d0) returned 1 Thread: id = 8266 os_tid = 0x1940 [0228.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf")) returned 0x20 [0234.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF", dwFileAttributes=0x20) returned 0 [0234.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.902] GetLastError () returned 0x5 [0234.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF", dwFileAttributes=0x20) returned 0 [0234.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec858) returned 1 Thread: id = 8267 os_tid = 0x1944 [0228.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf")) returned 0x20 [0234.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF", dwFileAttributes=0x20) returned 0 [0234.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.938] GetLastError () returned 0x5 [0234.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF", dwFileAttributes=0x20) returned 0 [0234.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec8e0) returned 1 Thread: id = 8268 os_tid = 0x1948 [0228.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf")) returned 0x20 [0234.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF", dwFileAttributes=0x20) returned 0 [0234.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.940] GetLastError () returned 0x5 [0234.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF", dwFileAttributes=0x20) returned 0 [0234.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec968) returned 1 Thread: id = 8269 os_tid = 0x194c [0228.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf")) returned 0x20 [0234.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF", dwFileAttributes=0x20) returned 0 [0234.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.942] GetLastError () returned 0x5 [0234.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF", dwFileAttributes=0x20) returned 0 [0234.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ec9f0) returned 1 Thread: id = 8270 os_tid = 0x1950 [0228.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg")) returned 0x20 [0234.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG", dwFileAttributes=0x20) returned 0 [0234.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.886] GetLastError () returned 0x5 [0234.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG", dwFileAttributes=0x20) returned 0 [0234.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eca78) returned 1 Thread: id = 8271 os_tid = 0x1954 [0228.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf")) returned 0x20 [0234.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF", dwFileAttributes=0x20) returned 0 [0234.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.888] GetLastError () returned 0x5 [0234.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF", dwFileAttributes=0x20) returned 0 [0234.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecb00) returned 1 Thread: id = 8272 os_tid = 0x1958 [0228.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf")) returned 0x20 [0234.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF", dwFileAttributes=0x20) returned 0 [0234.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.889] GetLastError () returned 0x5 [0234.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF", dwFileAttributes=0x20) returned 0 [0234.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecb88) returned 1 Thread: id = 8273 os_tid = 0x195c [0228.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf")) returned 0x20 [0234.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF", dwFileAttributes=0x20) returned 0 [0234.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.891] GetLastError () returned 0x5 [0234.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF", dwFileAttributes=0x20) returned 0 [0234.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecc10) returned 1 Thread: id = 8274 os_tid = 0x1960 [0228.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf")) returned 0x20 [0234.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF", dwFileAttributes=0x20) returned 0 [0234.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.892] GetLastError () returned 0x5 [0234.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF", dwFileAttributes=0x20) returned 0 [0234.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecc98) returned 1 Thread: id = 8275 os_tid = 0x1964 [0228.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf")) returned 0x20 [0234.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF", dwFileAttributes=0x20) returned 0 [0234.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.912] GetLastError () returned 0x5 [0234.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF", dwFileAttributes=0x20) returned 0 [0234.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecd20) returned 1 Thread: id = 8276 os_tid = 0xb34 [0228.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf")) returned 0x20 [0234.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF", dwFileAttributes=0x20) returned 0 [0234.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.914] GetLastError () returned 0x5 [0234.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF", dwFileAttributes=0x20) returned 0 [0234.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecda8) returned 1 Thread: id = 8277 os_tid = 0x1968 [0228.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf")) returned 0x20 [0234.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF", dwFileAttributes=0x20) returned 0 [0234.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.916] GetLastError () returned 0x5 [0234.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF", dwFileAttributes=0x20) returned 0 [0234.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ece30) returned 1 Thread: id = 8278 os_tid = 0x2b4c [0228.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf")) returned 0x20 [0234.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF", dwFileAttributes=0x20) returned 0 [0234.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.918] GetLastError () returned 0x5 [0234.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF", dwFileAttributes=0x20) returned 0 [0234.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81eceb8) returned 1 Thread: id = 8279 os_tid = 0x196c [0228.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf")) returned 0x20 [0234.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF", dwFileAttributes=0x20) returned 0 [0234.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.922] GetLastError () returned 0x5 [0234.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF", dwFileAttributes=0x20) returned 0 [0234.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecf40) returned 1 Thread: id = 8280 os_tid = 0x1970 [0228.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg")) returned 0x20 [0234.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG", dwFileAttributes=0x20) returned 0 [0234.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.962] GetLastError () returned 0x5 [0234.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG", dwFileAttributes=0x20) returned 0 [0234.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ecfc8) returned 1 Thread: id = 8281 os_tid = 0x1974 [0228.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg")) returned 0x20 [0234.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG", dwFileAttributes=0x20) returned 0 [0234.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.964] GetLastError () returned 0x5 [0234.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG", dwFileAttributes=0x20) returned 0 [0234.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 8282 os_tid = 0x1978 [0228.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg")) returned 0x20 [0234.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG", dwFileAttributes=0x20) returned 0 [0234.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.976] GetLastError () returned 0x5 [0234.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG", dwFileAttributes=0x20) returned 0 [0234.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed050) returned 1 Thread: id = 8283 os_tid = 0x197c [0228.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg")) returned 0x20 [0234.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG", dwFileAttributes=0x20) returned 0 [0234.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.978] GetLastError () returned 0x5 [0234.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG", dwFileAttributes=0x20) returned 0 [0234.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed0d8) returned 1 Thread: id = 8284 os_tid = 0x1980 [0228.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg")) returned 0x20 [0234.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG", dwFileAttributes=0x20) returned 0 [0234.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.966] GetLastError () returned 0x5 [0234.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG", dwFileAttributes=0x20) returned 0 [0234.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed160) returned 1 Thread: id = 8285 os_tid = 0x1984 [0228.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg")) returned 0x20 [0234.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG", dwFileAttributes=0x20) returned 0 [0234.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.981] GetLastError () returned 0x5 [0234.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG", dwFileAttributes=0x20) returned 0 [0234.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed1e8) returned 1 Thread: id = 8286 os_tid = 0x1988 [0228.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg")) returned 0x20 [0234.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG", dwFileAttributes=0x20) returned 0 [0234.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.983] GetLastError () returned 0x5 [0234.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG", dwFileAttributes=0x20) returned 0 [0234.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed270) returned 1 Thread: id = 8287 os_tid = 0x198c [0228.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg")) returned 0x20 [0234.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG", dwFileAttributes=0x20) returned 0 [0234.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.985] GetLastError () returned 0x5 [0234.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG", dwFileAttributes=0x20) returned 0 [0234.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed2f8) returned 1 Thread: id = 8288 os_tid = 0x1990 [0228.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg")) returned 0x20 [0234.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG", dwFileAttributes=0x20) returned 0 [0234.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.987] GetLastError () returned 0x5 [0234.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG", dwFileAttributes=0x20) returned 0 [0234.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed380) returned 1 Thread: id = 8289 os_tid = 0x1994 [0228.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg")) returned 0x20 [0234.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG", dwFileAttributes=0x20) returned 0 [0234.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.989] GetLastError () returned 0x5 [0234.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG", dwFileAttributes=0x20) returned 0 [0234.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed408) returned 1 Thread: id = 8290 os_tid = 0x1758 [0228.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg")) returned 0x20 [0234.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG", dwFileAttributes=0x20) returned 0 [0234.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.991] GetLastError () returned 0x5 [0234.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG", dwFileAttributes=0x20) returned 0 [0234.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed490) returned 1 Thread: id = 8291 os_tid = 0x1998 [0228.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg")) returned 0x20 [0234.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG", dwFileAttributes=0x20) returned 0 [0234.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.993] GetLastError () returned 0x5 [0234.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG", dwFileAttributes=0x20) returned 0 [0234.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed518) returned 1 Thread: id = 8292 os_tid = 0x139c [0228.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg")) returned 0x20 [0234.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG", dwFileAttributes=0x20) returned 0 [0234.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.944] GetLastError () returned 0x5 [0234.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG", dwFileAttributes=0x20) returned 0 [0234.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81ed5a0) returned 1 Thread: id = 8293 os_tid = 0x13a0 [0228.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg")) returned 0x20 [0234.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG", dwFileAttributes=0x20) returned 0 [0234.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.946] GetLastError () returned 0x5 [0234.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG", dwFileAttributes=0x20) returned 0 [0234.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403930) returned 1 Thread: id = 8294 os_tid = 0x13a4 [0228.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf")) returned 0x20 [0234.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF", dwFileAttributes=0x20) returned 0 [0234.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.948] GetLastError () returned 0x5 [0234.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF", dwFileAttributes=0x20) returned 0 [0234.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84039b8) returned 1 Thread: id = 8295 os_tid = 0x1284 [0228.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf")) returned 0x20 [0234.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF", dwFileAttributes=0x20) returned 0 [0234.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.950] GetLastError () returned 0x5 [0234.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF", dwFileAttributes=0x20) returned 0 [0234.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403a40) returned 1 Thread: id = 8296 os_tid = 0x1be4 [0228.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf")) returned 0x20 [0234.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF", dwFileAttributes=0x20) returned 0 [0234.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.956] GetLastError () returned 0x5 [0234.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF", dwFileAttributes=0x20) returned 0 [0234.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403ac8) returned 1 Thread: id = 8297 os_tid = 0x1be8 [0228.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf")) returned 0x20 [0234.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF", dwFileAttributes=0x20) returned 0 [0234.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.958] GetLastError () returned 0x5 [0234.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF", dwFileAttributes=0x20) returned 0 [0234.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403b50) returned 1 Thread: id = 8298 os_tid = 0x2ce8 [0228.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf")) returned 0x20 [0234.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF", dwFileAttributes=0x20) returned 0 [0234.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.960] GetLastError () returned 0x5 [0234.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF", dwFileAttributes=0x20) returned 0 [0234.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403bd8) returned 1 Thread: id = 8299 os_tid = 0x1bec [0228.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf")) returned 0x20 [0234.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF", dwFileAttributes=0x20) returned 0 [0234.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.952] GetLastError () returned 0x5 [0234.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF", dwFileAttributes=0x20) returned 0 [0234.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403c60) returned 1 Thread: id = 8300 os_tid = 0x97c [0228.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf")) returned 0x20 [0234.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF", dwFileAttributes=0x20) returned 0 [0234.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.970] GetLastError () returned 0x5 [0234.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF", dwFileAttributes=0x20) returned 0 [0234.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403ce8) returned 1 Thread: id = 8301 os_tid = 0x154c [0228.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf")) returned 0x20 [0234.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF", dwFileAttributes=0x20) returned 0 [0234.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.968] GetLastError () returned 0x5 [0234.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF", dwFileAttributes=0x20) returned 0 [0234.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403d70) returned 1 Thread: id = 8302 os_tid = 0x1550 [0228.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf")) returned 0x20 [0234.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF", dwFileAttributes=0x20) returned 0 [0234.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.954] GetLastError () returned 0x5 [0234.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF", dwFileAttributes=0x20) returned 0 [0234.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403df8) returned 1 Thread: id = 8303 os_tid = 0x1558 [0229.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf")) returned 0x20 [0234.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF", dwFileAttributes=0x20) returned 0 [0234.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.780] GetLastError () returned 0x5 [0234.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF", dwFileAttributes=0x20) returned 0 [0234.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 8304 os_tid = 0x72c [0229.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf")) returned 0x20 [0234.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF", dwFileAttributes=0x20) returned 0 [0234.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.841] GetLastError () returned 0x5 [0234.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF", dwFileAttributes=0x20) returned 0 [0234.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fb00) returned 1 Thread: id = 8305 os_tid = 0x1560 [0229.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf")) returned 0x20 [0234.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF", dwFileAttributes=0x20) returned 0 [0234.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.867] GetLastError () returned 0x5 [0234.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF", dwFileAttributes=0x20) returned 0 [0234.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403e80) returned 1 Thread: id = 8306 os_tid = 0x157c [0229.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf")) returned 0x20 [0234.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF", dwFileAttributes=0x20) returned 0 [0234.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.869] GetLastError () returned 0x5 [0234.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF", dwFileAttributes=0x20) returned 0 [0234.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f08) returned 1 Thread: id = 8307 os_tid = 0x1888 [0229.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf")) returned 0x20 [0234.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF", dwFileAttributes=0x20) returned 0 [0234.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.781] GetLastError () returned 0x5 [0234.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF", dwFileAttributes=0x20) returned 0 [0234.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8403f90) returned 1 Thread: id = 8308 os_tid = 0x1318 [0229.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf")) returned 0x20 [0234.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF", dwFileAttributes=0x20) returned 0 [0234.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.783] GetLastError () returned 0x5 [0234.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF", dwFileAttributes=0x20) returned 0 [0234.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404018) returned 1 Thread: id = 8309 os_tid = 0x131c [0229.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf")) returned 0x20 [0234.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF", dwFileAttributes=0x20) returned 0 [0234.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.784] GetLastError () returned 0x5 [0234.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF", dwFileAttributes=0x20) returned 0 [0234.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84040a0) returned 1 Thread: id = 8310 os_tid = 0x1588 [0229.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf")) returned 0x20 [0234.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF", dwFileAttributes=0x20) returned 0 [0234.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.785] GetLastError () returned 0x5 [0234.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF", dwFileAttributes=0x20) returned 0 [0234.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404128) returned 1 Thread: id = 8311 os_tid = 0x1324 [0229.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf")) returned 0x20 [0234.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF", dwFileAttributes=0x20) returned 0 [0234.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.787] GetLastError () returned 0x5 [0234.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF", dwFileAttributes=0x20) returned 0 [0234.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84041b0) returned 1 Thread: id = 8312 os_tid = 0x1328 [0229.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf")) returned 0x20 [0234.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF", dwFileAttributes=0x20) returned 0 [0234.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.789] GetLastError () returned 0x5 [0234.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF", dwFileAttributes=0x20) returned 0 [0234.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404238) returned 1 Thread: id = 8313 os_tid = 0x132c [0229.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf")) returned 0x20 [0234.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF", dwFileAttributes=0x20) returned 0 [0234.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.790] GetLastError () returned 0x5 [0234.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF", dwFileAttributes=0x20) returned 0 [0234.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84042c0) returned 1 Thread: id = 8314 os_tid = 0xb68 [0229.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf")) returned 0x20 [0234.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF", dwFileAttributes=0x20) returned 0 [0234.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.791] GetLastError () returned 0x5 [0234.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF", dwFileAttributes=0x20) returned 0 [0234.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404348) returned 1 Thread: id = 8315 os_tid = 0x29c0 [0229.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf")) returned 0x20 [0234.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF", dwFileAttributes=0x20) returned 0 [0234.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.793] GetLastError () returned 0x5 [0234.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF", dwFileAttributes=0x20) returned 0 [0234.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84043d0) returned 1 Thread: id = 8316 os_tid = 0x2e9c [0229.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf")) returned 0x20 [0234.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF", dwFileAttributes=0x20) returned 0 [0234.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.794] GetLastError () returned 0x5 [0234.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF", dwFileAttributes=0x20) returned 0 [0234.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404458) returned 1 Thread: id = 8317 os_tid = 0x16f4 [0229.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf")) returned 0x20 [0234.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF", dwFileAttributes=0x20) returned 0 [0234.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.796] GetLastError () returned 0x5 [0234.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF", dwFileAttributes=0x20) returned 0 [0234.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84044e0) returned 1 Thread: id = 8318 os_tid = 0x2eb4 [0229.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf")) returned 0x20 [0234.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF", dwFileAttributes=0x20) returned 0 [0234.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.800] GetLastError () returned 0x5 [0234.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF", dwFileAttributes=0x20) returned 0 [0234.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404568) returned 1 Thread: id = 8319 os_tid = 0x2eb8 [0229.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf")) returned 0x20 [0234.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF", dwFileAttributes=0x20) returned 0 [0234.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.797] GetLastError () returned 0x5 [0234.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF", dwFileAttributes=0x20) returned 0 [0234.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84045f0) returned 1 Thread: id = 8320 os_tid = 0x2ebc [0229.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf")) returned 0x20 [0234.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF", dwFileAttributes=0x20) returned 0 [0234.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.802] GetLastError () returned 0x5 [0234.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF", dwFileAttributes=0x20) returned 0 [0234.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404678) returned 1 Thread: id = 8321 os_tid = 0x2ec0 [0229.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf")) returned 0x20 [0234.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF", dwFileAttributes=0x20) returned 0 [0234.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.799] GetLastError () returned 0x5 [0234.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF", dwFileAttributes=0x20) returned 0 [0234.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404700) returned 1 Thread: id = 8322 os_tid = 0x2ec4 [0229.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf")) returned 0x20 [0234.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF", dwFileAttributes=0x20) returned 0 [0234.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.974] GetLastError () returned 0x5 [0234.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF", dwFileAttributes=0x20) returned 0 [0234.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404788) returned 1 Thread: id = 8323 os_tid = 0x2ec8 [0229.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf")) returned 0x20 [0234.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF", dwFileAttributes=0x20) returned 0 [0234.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.803] GetLastError () returned 0x5 [0234.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF", dwFileAttributes=0x20) returned 0 [0234.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404810) returned 1 Thread: id = 8324 os_tid = 0x2ecc [0229.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf")) returned 0x20 [0234.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF", dwFileAttributes=0x20) returned 0 [0234.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.805] GetLastError () returned 0x5 [0234.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF", dwFileAttributes=0x20) returned 0 [0234.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404898) returned 1 Thread: id = 8325 os_tid = 0x2ed0 [0229.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf")) returned 0x20 [0234.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF", dwFileAttributes=0x20) returned 0 [0234.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.806] GetLastError () returned 0x5 [0234.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF", dwFileAttributes=0x20) returned 0 [0234.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404920) returned 1 Thread: id = 8326 os_tid = 0x2ed4 [0229.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf")) returned 0x20 [0234.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF", dwFileAttributes=0x20) returned 0 [0234.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.808] GetLastError () returned 0x5 [0234.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF", dwFileAttributes=0x20) returned 0 [0234.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84049a8) returned 1 Thread: id = 8327 os_tid = 0x2edc [0229.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf")) returned 0x20 [0234.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF", dwFileAttributes=0x20) returned 0 [0234.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.809] GetLastError () returned 0x5 [0234.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF", dwFileAttributes=0x20) returned 0 [0234.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404a30) returned 1 Thread: id = 8328 os_tid = 0x644 [0229.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf")) returned 0x20 [0234.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF", dwFileAttributes=0x20) returned 0 [0234.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.810] GetLastError () returned 0x5 [0234.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF", dwFileAttributes=0x20) returned 0 [0234.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404ab8) returned 1 Thread: id = 8329 os_tid = 0x9ac [0229.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf")) returned 0x20 [0234.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF", dwFileAttributes=0x20) returned 0 [0234.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.812] GetLastError () returned 0x5 [0234.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF", dwFileAttributes=0x20) returned 0 [0234.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404b40) returned 1 Thread: id = 8330 os_tid = 0x9fc [0229.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf")) returned 0x20 [0234.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF", dwFileAttributes=0x20) returned 0 [0234.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.814] GetLastError () returned 0x5 [0234.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF", dwFileAttributes=0x20) returned 0 [0234.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404bc8) returned 1 Thread: id = 8331 os_tid = 0x2f10 [0229.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf")) returned 0x20 [0234.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF", dwFileAttributes=0x20) returned 0 [0234.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.815] GetLastError () returned 0x5 [0234.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF", dwFileAttributes=0x20) returned 0 [0234.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404c50) returned 1 Thread: id = 8332 os_tid = 0x2f28 [0229.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf")) returned 0x20 [0234.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF", dwFileAttributes=0x20) returned 0 [0234.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.816] GetLastError () returned 0x5 [0234.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF", dwFileAttributes=0x20) returned 0 [0234.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404cd8) returned 1 Thread: id = 8333 os_tid = 0x2f2c [0229.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf")) returned 0x20 [0234.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF", dwFileAttributes=0x20) returned 0 [0234.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.818] GetLastError () returned 0x5 [0234.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF", dwFileAttributes=0x20) returned 0 [0234.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404d60) returned 1 Thread: id = 8334 os_tid = 0x2f30 [0229.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf")) returned 0x20 [0234.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF", dwFileAttributes=0x20) returned 0 [0234.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.820] GetLastError () returned 0x5 [0234.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF", dwFileAttributes=0x20) returned 0 [0234.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404de8) returned 1 Thread: id = 8335 os_tid = 0x2f34 [0229.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf")) returned 0x20 [0234.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF", dwFileAttributes=0x20) returned 0 [0234.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.821] GetLastError () returned 0x5 [0234.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF", dwFileAttributes=0x20) returned 0 [0234.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404e70) returned 1 Thread: id = 8336 os_tid = 0x2f38 [0229.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf")) returned 0x20 [0234.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF", dwFileAttributes=0x20) returned 0 [0234.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.778] GetLastError () returned 0x5 [0234.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF", dwFileAttributes=0x20) returned 0 [0234.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404ef8) returned 1 Thread: id = 8337 os_tid = 0x2f3c [0229.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf")) returned 0x20 [0234.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF", dwFileAttributes=0x20) returned 0 [0234.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.823] GetLastError () returned 0x5 [0234.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF", dwFileAttributes=0x20) returned 0 [0234.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 8338 os_tid = 0x2f40 [0229.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf")) returned 0x20 [0234.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF", dwFileAttributes=0x20) returned 0 [0234.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.824] GetLastError () returned 0x5 [0234.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF", dwFileAttributes=0x20) returned 0 [0234.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f008) returned 1 Thread: id = 8339 os_tid = 0x2f48 [0229.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf")) returned 0x20 [0234.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF", dwFileAttributes=0x20) returned 0 [0234.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.826] GetLastError () returned 0x5 [0234.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF", dwFileAttributes=0x20) returned 0 [0234.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f558) returned 1 Thread: id = 8340 os_tid = 0x2f50 [0229.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf")) returned 0x20 [0234.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF", dwFileAttributes=0x20) returned 0 [0234.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.752] GetLastError () returned 0x5 [0234.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF", dwFileAttributes=0x20) returned 0 [0234.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8404f80) returned 1 Thread: id = 8341 os_tid = 0x2f54 [0229.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf")) returned 0x20 [0234.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF", dwFileAttributes=0x20) returned 0 [0234.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.827] GetLastError () returned 0x5 [0234.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF", dwFileAttributes=0x20) returned 0 [0234.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405008) returned 1 Thread: id = 8342 os_tid = 0x2f5c [0229.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf")) returned 0x20 [0234.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF", dwFileAttributes=0x20) returned 0 [0234.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.754] GetLastError () returned 0x5 [0234.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF", dwFileAttributes=0x20) returned 0 [0234.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405090) returned 1 Thread: id = 8343 os_tid = 0x2f68 [0229.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf")) returned 0x20 [0234.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF", dwFileAttributes=0x20) returned 0 [0234.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.829] GetLastError () returned 0x5 [0234.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF", dwFileAttributes=0x20) returned 0 [0234.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405118) returned 1 Thread: id = 8344 os_tid = 0x2f6c [0229.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf")) returned 0x20 [0234.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF", dwFileAttributes=0x20) returned 0 [0234.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.755] GetLastError () returned 0x5 [0234.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF", dwFileAttributes=0x20) returned 0 [0234.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84051a0) returned 1 Thread: id = 8345 os_tid = 0x2f70 [0229.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf")) returned 0x20 [0234.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF", dwFileAttributes=0x20) returned 0 [0234.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.757] GetLastError () returned 0x5 [0234.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF", dwFileAttributes=0x20) returned 0 [0234.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405228) returned 1 Thread: id = 8346 os_tid = 0xca0 [0229.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf")) returned 0x20 [0234.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF", dwFileAttributes=0x20) returned 0 [0234.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.759] GetLastError () returned 0x5 [0234.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF", dwFileAttributes=0x20) returned 0 [0234.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84052b0) returned 1 Thread: id = 8347 os_tid = 0x1604 [0229.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf")) returned 0x20 [0234.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF", dwFileAttributes=0x20) returned 0 [0234.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.761] GetLastError () returned 0x5 [0234.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF", dwFileAttributes=0x20) returned 0 [0234.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405338) returned 1 Thread: id = 8348 os_tid = 0x1608 [0229.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf")) returned 0x20 [0234.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF", dwFileAttributes=0x20) returned 0 [0234.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.763] GetLastError () returned 0x5 [0234.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF", dwFileAttributes=0x20) returned 0 [0234.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84053c0) returned 1 Thread: id = 8349 os_tid = 0x1c20 [0229.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf")) returned 0x20 [0234.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF", dwFileAttributes=0x20) returned 0 [0234.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.839] GetLastError () returned 0x5 [0234.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF", dwFileAttributes=0x20) returned 0 [0234.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405448) returned 1 Thread: id = 8350 os_tid = 0x1c24 [0229.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf")) returned 0x20 [0234.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF", dwFileAttributes=0x20) returned 0 [0234.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.764] GetLastError () returned 0x5 [0234.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF", dwFileAttributes=0x20) returned 0 [0234.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84054d0) returned 1 Thread: id = 8351 os_tid = 0x1c28 [0229.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf")) returned 0x20 [0234.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF", dwFileAttributes=0x20) returned 0 [0234.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.871] GetLastError () returned 0x5 [0234.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF", dwFileAttributes=0x20) returned 0 [0234.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405558) returned 1 Thread: id = 8352 os_tid = 0xef8 [0229.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf")) returned 0x20 [0234.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF", dwFileAttributes=0x20) returned 0 [0234.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.873] GetLastError () returned 0x5 [0234.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF", dwFileAttributes=0x20) returned 0 [0234.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84055e0) returned 1 Thread: id = 8353 os_tid = 0x1760 [0229.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf")) returned 0x20 [0234.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF", dwFileAttributes=0x20) returned 0 [0234.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.874] GetLastError () returned 0x5 [0234.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF", dwFileAttributes=0x20) returned 0 [0234.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405668) returned 1 Thread: id = 8354 os_tid = 0x18b8 [0229.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf")) returned 0x20 [0234.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF", dwFileAttributes=0x20) returned 0 [0234.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.875] GetLastError () returned 0x5 [0234.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF", dwFileAttributes=0x20) returned 0 [0234.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x84056f0) returned 1 Thread: id = 8355 os_tid = 0x1aac [0229.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf")) returned 0x20 [0234.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF", dwFileAttributes=0x20) returned 0 [0234.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.877] GetLastError () returned 0x5 [0234.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF", dwFileAttributes=0x20) returned 0 [0234.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405778) returned 1 Thread: id = 8356 os_tid = 0x1ad4 [0229.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf")) returned 0x20 [0234.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF", dwFileAttributes=0x20) returned 0 [0234.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.879] GetLastError () returned 0x5 [0234.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF", dwFileAttributes=0x20) returned 0 [0234.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405800) returned 1 Thread: id = 8357 os_tid = 0x1c18 [0229.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf")) returned 0x20 [0234.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF", dwFileAttributes=0x20) returned 0 [0234.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.880] GetLastError () returned 0x5 [0234.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF", dwFileAttributes=0x20) returned 0 [0234.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8405888) returned 1 Thread: id = 8358 os_tid = 0x1c1c [0229.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf")) returned 0x20 [0234.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF", dwFileAttributes=0x20) returned 0 [0234.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.838] GetLastError () returned 0x5 [0234.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF", dwFileAttributes=0x20) returned 0 [0234.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053418) returned 1 Thread: id = 8359 os_tid = 0x1c38 [0229.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf")) returned 0x20 [0234.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF", dwFileAttributes=0x20) returned 0 [0234.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.836] GetLastError () returned 0x5 [0234.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF", dwFileAttributes=0x20) returned 0 [0234.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db648) returned 1 Thread: id = 8360 os_tid = 0x1c9c [0229.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf")) returned 0x20 [0234.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF", dwFileAttributes=0x20) returned 0 [0234.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.835] GetLastError () returned 0x5 [0234.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF", dwFileAttributes=0x20) returned 0 [0234.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db6d0) returned 1 Thread: id = 8361 os_tid = 0x1d0c [0229.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf")) returned 0x20 [0234.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF", dwFileAttributes=0x20) returned 0 [0234.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.882] GetLastError () returned 0x5 [0234.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF", dwFileAttributes=0x20) returned 0 [0234.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db758) returned 1 Thread: id = 8362 os_tid = 0x10b8 [0229.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf")) returned 0x20 [0234.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF", dwFileAttributes=0x20) returned 0 [0234.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.884] GetLastError () returned 0x5 [0234.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF", dwFileAttributes=0x20) returned 0 [0234.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db7e0) returned 1 Thread: id = 8363 os_tid = 0xac8 [0229.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf")) returned 0x20 [0234.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF", dwFileAttributes=0x20) returned 0 [0234.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.833] GetLastError () returned 0x5 [0234.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF", dwFileAttributes=0x20) returned 0 [0234.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db868) returned 1 Thread: id = 8364 os_tid = 0x1b08 [0229.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf")) returned 0x20 [0234.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF", dwFileAttributes=0x20) returned 0 [0234.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.832] GetLastError () returned 0x5 [0234.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF", dwFileAttributes=0x20) returned 0 [0234.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db8f0) returned 1 Thread: id = 8365 os_tid = 0x1b0c [0229.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf")) returned 0x20 [0234.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF", dwFileAttributes=0x20) returned 0 [0234.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.830] GetLastError () returned 0x5 [0234.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF", dwFileAttributes=0x20) returned 0 [0234.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db978) returned 1 Thread: id = 8366 os_tid = 0x730 [0229.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf")) returned 0x20 [0234.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF", dwFileAttributes=0x20) returned 0 [0234.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.885] GetLastError () returned 0x5 [0234.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF", dwFileAttributes=0x20) returned 0 [0234.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dba00) returned 1 Thread: id = 8367 os_tid = 0x17a0 [0229.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf")) returned 0x20 [0234.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF", dwFileAttributes=0x20) returned 0 [0234.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.554] GetLastError () returned 0x5 [0234.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF", dwFileAttributes=0x20) returned 0 [0234.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dba88) returned 1 Thread: id = 8368 os_tid = 0x17a4 [0229.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf")) returned 0x20 [0234.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF", dwFileAttributes=0x20) returned 0 [0234.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.561] GetLastError () returned 0x5 [0234.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF", dwFileAttributes=0x20) returned 0 [0234.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f228) returned 1 Thread: id = 8369 os_tid = 0x17a8 [0229.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf")) returned 0x20 [0234.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF", dwFileAttributes=0x20) returned 0 [0234.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.744] GetLastError () returned 0x5 [0234.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF", dwFileAttributes=0x20) returned 0 [0234.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbb10) returned 1 Thread: id = 8370 os_tid = 0x17ac [0229.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf")) returned 0x20 [0234.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF", dwFileAttributes=0x20) returned 0 [0234.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.563] GetLastError () returned 0x5 [0234.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF", dwFileAttributes=0x20) returned 0 [0234.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbb98) returned 1 Thread: id = 8371 os_tid = 0x17d0 [0229.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf")) returned 0x20 [0234.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF", dwFileAttributes=0x20) returned 0 [0234.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.564] GetLastError () returned 0x5 [0234.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF", dwFileAttributes=0x20) returned 0 [0234.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbc20) returned 1 Thread: id = 8372 os_tid = 0x17d4 [0229.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf")) returned 0x20 [0234.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF", dwFileAttributes=0x20) returned 0 [0234.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.746] GetLastError () returned 0x5 [0234.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF", dwFileAttributes=0x20) returned 0 [0234.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbca8) returned 1 Thread: id = 8373 os_tid = 0x17d8 [0229.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf")) returned 0x20 [0234.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF", dwFileAttributes=0x20) returned 0 [0234.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.747] GetLastError () returned 0x5 [0234.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF", dwFileAttributes=0x20) returned 0 [0234.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbd30) returned 1 Thread: id = 8374 os_tid = 0x1414 [0229.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf")) returned 0x20 [0234.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF", dwFileAttributes=0x20) returned 0 [0234.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.565] GetLastError () returned 0x5 [0234.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF", dwFileAttributes=0x20) returned 0 [0234.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbdb8) returned 1 Thread: id = 8375 os_tid = 0x2594 [0229.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf")) returned 0x20 [0234.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF", dwFileAttributes=0x20) returned 0 [0234.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.567] GetLastError () returned 0x5 [0234.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF", dwFileAttributes=0x20) returned 0 [0234.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbe40) returned 1 Thread: id = 8376 os_tid = 0x17e0 [0229.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf")) returned 0x20 [0234.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF", dwFileAttributes=0x20) returned 0 [0234.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.568] GetLastError () returned 0x5 [0234.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF", dwFileAttributes=0x20) returned 0 [0234.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbec8) returned 1 Thread: id = 8377 os_tid = 0x259c [0229.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf")) returned 0x20 [0234.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF", dwFileAttributes=0x20) returned 0 [0234.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.570] GetLastError () returned 0x5 [0234.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF", dwFileAttributes=0x20) returned 0 [0234.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbf50) returned 1 Thread: id = 8378 os_tid = 0x25a0 [0229.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf")) returned 0x20 [0234.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF", dwFileAttributes=0x20) returned 0 [0234.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.571] GetLastError () returned 0x5 [0234.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF", dwFileAttributes=0x20) returned 0 [0234.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dbfd8) returned 1 Thread: id = 8379 os_tid = 0x25a4 [0229.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf")) returned 0x20 [0234.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF", dwFileAttributes=0x20) returned 0 [0234.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.573] GetLastError () returned 0x5 [0234.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF", dwFileAttributes=0x20) returned 0 [0234.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc060) returned 1 Thread: id = 8380 os_tid = 0x17e4 [0229.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf")) returned 0x20 [0234.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF", dwFileAttributes=0x20) returned 0 [0234.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.766] GetLastError () returned 0x5 [0234.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF", dwFileAttributes=0x20) returned 0 [0234.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc0e8) returned 1 Thread: id = 8381 os_tid = 0x17e8 [0229.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf")) returned 0x20 [0234.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF", dwFileAttributes=0x20) returned 0 [0234.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.767] GetLastError () returned 0x5 [0234.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF", dwFileAttributes=0x20) returned 0 [0234.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc170) returned 1 Thread: id = 8382 os_tid = 0x17ec [0229.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf")) returned 0x20 [0234.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF", dwFileAttributes=0x20) returned 0 [0234.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.769] GetLastError () returned 0x5 [0234.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF", dwFileAttributes=0x20) returned 0 [0234.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc1f8) returned 1 Thread: id = 8383 os_tid = 0x2728 [0229.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf")) returned 0x20 [0234.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF", dwFileAttributes=0x20) returned 0 [0234.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.770] GetLastError () returned 0x5 [0234.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF", dwFileAttributes=0x20) returned 0 [0234.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc280) returned 1 Thread: id = 8384 os_tid = 0x272c [0229.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf")) returned 0x20 [0234.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF", dwFileAttributes=0x20) returned 0 [0234.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.772] GetLastError () returned 0x5 [0234.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF", dwFileAttributes=0x20) returned 0 [0234.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc308) returned 1 Thread: id = 8385 os_tid = 0x17f0 [0229.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf")) returned 0x20 [0234.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF", dwFileAttributes=0x20) returned 0 [0234.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.774] GetLastError () returned 0x5 [0234.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF", dwFileAttributes=0x20) returned 0 [0234.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc390) returned 1 Thread: id = 8386 os_tid = 0x17f4 [0229.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf")) returned 0x20 [0234.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF", dwFileAttributes=0x20) returned 0 [0234.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.749] GetLastError () returned 0x5 [0234.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF", dwFileAttributes=0x20) returned 0 [0234.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc418) returned 1 Thread: id = 8387 os_tid = 0x17f8 [0229.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf")) returned 0x20 [0234.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF", dwFileAttributes=0x20) returned 0 [0234.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.555] GetLastError () returned 0x5 [0234.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF", dwFileAttributes=0x20) returned 0 [0234.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc4a0) returned 1 Thread: id = 8388 os_tid = 0x17fc [0229.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf")) returned 0x20 [0234.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF", dwFileAttributes=0x20) returned 0 [0234.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.751] GetLastError () returned 0x5 [0234.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF", dwFileAttributes=0x20) returned 0 [0234.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc528) returned 1 Thread: id = 8389 os_tid = 0x7dc [0229.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf")) returned 0x20 [0234.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF", dwFileAttributes=0x20) returned 0 [0234.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.557] GetLastError () returned 0x5 [0234.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF", dwFileAttributes=0x20) returned 0 [0234.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc5b0) returned 1 Thread: id = 8390 os_tid = 0x3ec [0229.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf")) returned 0x20 [0234.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF", dwFileAttributes=0x20) returned 0 [0234.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.558] GetLastError () returned 0x5 [0234.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF", dwFileAttributes=0x20) returned 0 [0234.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc638) returned 1 Thread: id = 8391 os_tid = 0x2a4 [0229.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf")) returned 0x20 [0234.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF", dwFileAttributes=0x20) returned 0 [0234.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.560] GetLastError () returned 0x5 [0234.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF", dwFileAttributes=0x20) returned 0 [0234.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc6c0) returned 1 Thread: id = 8392 os_tid = 0xee8 [0229.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf")) returned 0x20 [0234.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF", dwFileAttributes=0x20) returned 0 [0234.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.776] GetLastError () returned 0x5 [0234.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF", dwFileAttributes=0x20) returned 0 [0234.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc748) returned 1 Thread: id = 8393 os_tid = 0xee4 [0229.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf")) returned 0x20 [0234.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF", dwFileAttributes=0x20) returned 0 [0234.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.777] GetLastError () returned 0x5 [0234.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF", dwFileAttributes=0x20) returned 0 [0234.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc7d0) returned 1 Thread: id = 8394 os_tid = 0xa70 [0229.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf")) returned 0x20 [0234.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF", dwFileAttributes=0x20) returned 0 [0234.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.741] GetLastError () returned 0x5 [0234.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF", dwFileAttributes=0x20) returned 0 [0234.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc858) returned 1 Thread: id = 8395 os_tid = 0x1418 [0229.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf")) returned 0x20 [0234.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF", dwFileAttributes=0x20) returned 0 [0234.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.586] GetLastError () returned 0x5 [0234.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF", dwFileAttributes=0x20) returned 0 [0234.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc8e0) returned 1 Thread: id = 8396 os_tid = 0x1420 [0229.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf")) returned 0x20 [0234.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF", dwFileAttributes=0x20) returned 0 [0234.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.585] GetLastError () returned 0x5 [0234.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF", dwFileAttributes=0x20) returned 0 [0234.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 Thread: id = 8397 os_tid = 0xd08 [0229.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf")) returned 0x20 [0234.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF", dwFileAttributes=0x20) returned 0 [0234.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.584] GetLastError () returned 0x5 [0234.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF", dwFileAttributes=0x20) returned 0 [0234.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc968) returned 1 Thread: id = 8398 os_tid = 0xd54 [0229.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf")) returned 0x20 [0234.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF", dwFileAttributes=0x20) returned 0 [0234.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.582] GetLastError () returned 0x5 [0234.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF", dwFileAttributes=0x20) returned 0 [0234.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dc9f0) returned 1 Thread: id = 8399 os_tid = 0x1f58 [0229.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf")) returned 0x20 [0234.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF", dwFileAttributes=0x20) returned 0 [0234.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.581] GetLastError () returned 0x5 [0234.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF", dwFileAttributes=0x20) returned 0 [0234.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dca78) returned 1 Thread: id = 8400 os_tid = 0x1f60 [0229.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf")) returned 0x20 [0234.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF", dwFileAttributes=0x20) returned 0 [0234.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.647] GetLastError () returned 0x5 [0234.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF", dwFileAttributes=0x20) returned 0 [0234.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcb00) returned 1 Thread: id = 8401 os_tid = 0x1f64 [0229.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg")) returned 0x20 [0234.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG", dwFileAttributes=0x20) returned 0 [0234.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.649] GetLastError () returned 0x5 [0234.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG", dwFileAttributes=0x20) returned 0 [0234.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcb88) returned 1 Thread: id = 8402 os_tid = 0x1f68 [0229.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf")) returned 0x20 [0234.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF", dwFileAttributes=0x20) returned 0 [0234.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.580] GetLastError () returned 0x5 [0234.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF", dwFileAttributes=0x20) returned 0 [0234.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcc10) returned 1 Thread: id = 8403 os_tid = 0x1f6c [0229.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf")) returned 0x20 [0234.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF", dwFileAttributes=0x20) returned 0 [0234.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.578] GetLastError () returned 0x5 [0234.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF", dwFileAttributes=0x20) returned 0 [0234.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcc98) returned 1 Thread: id = 8404 os_tid = 0x2084 [0229.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf")) returned 0x20 [0234.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF", dwFileAttributes=0x20) returned 0 [0234.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.577] GetLastError () returned 0x5 [0234.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF", dwFileAttributes=0x20) returned 0 [0234.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcd20) returned 1 Thread: id = 8405 os_tid = 0x2a30 [0229.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf")) returned 0x20 [0234.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF", dwFileAttributes=0x20) returned 0 [0234.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.651] GetLastError () returned 0x5 [0234.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF", dwFileAttributes=0x20) returned 0 [0234.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcda8) returned 1 Thread: id = 8406 os_tid = 0x2fbc [0229.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf")) returned 0x20 [0234.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF", dwFileAttributes=0x20) returned 0 [0234.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.652] GetLastError () returned 0x5 [0234.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF", dwFileAttributes=0x20) returned 0 [0234.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dce30) returned 1 Thread: id = 8407 os_tid = 0x1530 [0229.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf")) returned 0x20 [0234.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF", dwFileAttributes=0x20) returned 0 [0234.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.654] GetLastError () returned 0x5 [0234.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF", dwFileAttributes=0x20) returned 0 [0234.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dceb8) returned 1 Thread: id = 8408 os_tid = 0x1424 [0229.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf")) returned 0x20 [0234.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF", dwFileAttributes=0x20) returned 0 [0234.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.656] GetLastError () returned 0x5 [0234.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF", dwFileAttributes=0x20) returned 0 [0234.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcf40) returned 1 Thread: id = 8409 os_tid = 0x18bc [0229.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf")) returned 0x20 [0234.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF", dwFileAttributes=0x20) returned 0 [0234.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.658] GetLastError () returned 0x5 [0234.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF", dwFileAttributes=0x20) returned 0 [0234.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dcfc8) returned 1 Thread: id = 8410 os_tid = 0x18f4 [0229.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf")) returned 0x20 [0234.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF", dwFileAttributes=0x20) returned 0 [0234.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.588] GetLastError () returned 0x5 [0234.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF", dwFileAttributes=0x20) returned 0 [0234.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd050) returned 1 Thread: id = 8411 os_tid = 0x1af4 [0229.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf")) returned 0x20 [0234.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF", dwFileAttributes=0x20) returned 0 [0234.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.660] GetLastError () returned 0x5 [0234.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF", dwFileAttributes=0x20) returned 0 [0234.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd0d8) returned 1 Thread: id = 8412 os_tid = 0xe24 [0229.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf")) returned 0x20 [0234.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF", dwFileAttributes=0x20) returned 0 [0234.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.662] GetLastError () returned 0x5 [0234.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF", dwFileAttributes=0x20) returned 0 [0234.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd160) returned 1 Thread: id = 8413 os_tid = 0x22b0 [0229.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf")) returned 0x20 [0234.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF", dwFileAttributes=0x20) returned 0 [0234.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.663] GetLastError () returned 0x5 [0234.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF", dwFileAttributes=0x20) returned 0 [0234.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd1e8) returned 1 Thread: id = 8414 os_tid = 0x22b4 [0229.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf")) returned 0x20 [0234.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF", dwFileAttributes=0x20) returned 0 [0234.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.665] GetLastError () returned 0x5 [0234.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF", dwFileAttributes=0x20) returned 0 [0234.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd270) returned 1 Thread: id = 8415 os_tid = 0x22bc [0229.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf")) returned 0x20 [0234.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF", dwFileAttributes=0x20) returned 0 [0234.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.589] GetLastError () returned 0x5 [0234.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF", dwFileAttributes=0x20) returned 0 [0234.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd2f8) returned 1 Thread: id = 8416 os_tid = 0x22c0 [0229.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf")) returned 0x20 [0234.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF", dwFileAttributes=0x20) returned 0 [0234.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.617] GetLastError () returned 0x5 [0234.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF", dwFileAttributes=0x20) returned 0 [0234.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd380) returned 1 Thread: id = 8417 os_tid = 0x22c4 [0229.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf")) returned 0x20 [0234.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF", dwFileAttributes=0x20) returned 0 [0234.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.618] GetLastError () returned 0x5 [0234.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF", dwFileAttributes=0x20) returned 0 [0234.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd408) returned 1 Thread: id = 8418 os_tid = 0x22c8 [0229.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg")) returned 0x20 [0234.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG", dwFileAttributes=0x20) returned 0 [0234.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.591] GetLastError () returned 0x5 [0234.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG", dwFileAttributes=0x20) returned 0 [0234.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd490) returned 1 Thread: id = 8419 os_tid = 0x1aa0 [0229.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg")) returned 0x20 [0234.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG", dwFileAttributes=0x20) returned 0 [0234.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.620] GetLastError () returned 0x5 [0234.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG", dwFileAttributes=0x20) returned 0 [0234.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd518) returned 1 Thread: id = 8420 os_tid = 0x1b84 [0229.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf")) returned 0x20 [0234.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF", dwFileAttributes=0x20) returned 0 [0234.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.622] GetLastError () returned 0x5 [0234.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF", dwFileAttributes=0x20) returned 0 [0234.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dd5a0) returned 1 Thread: id = 8421 os_tid = 0x1ba8 [0229.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf")) returned 0x20 [0234.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF", dwFileAttributes=0x20) returned 0 [0234.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.592] GetLastError () returned 0x5 [0234.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF", dwFileAttributes=0x20) returned 0 [0234.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 Thread: id = 8422 os_tid = 0xb64 [0229.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf")) returned 0x20 [0234.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF", dwFileAttributes=0x20) returned 0 [0234.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.643] GetLastError () returned 0x5 [0234.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF", dwFileAttributes=0x20) returned 0 [0234.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d400e8) returned 1 Thread: id = 8423 os_tid = 0x13c0 [0229.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf")) returned 0x20 [0234.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF", dwFileAttributes=0x20) returned 0 [0234.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.645] GetLastError () returned 0x5 [0234.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF", dwFileAttributes=0x20) returned 0 [0234.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40170) returned 1 Thread: id = 8424 os_tid = 0xde0 [0229.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf")) returned 0x20 [0234.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF", dwFileAttributes=0x20) returned 0 [0234.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.593] GetLastError () returned 0x5 [0234.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF", dwFileAttributes=0x20) returned 0 [0234.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d401f8) returned 1 Thread: id = 8425 os_tid = 0x1344 [0229.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf")) returned 0x20 [0234.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF", dwFileAttributes=0x20) returned 0 [0234.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.552] GetLastError () returned 0x5 [0234.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF", dwFileAttributes=0x20) returned 0 [0234.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40280) returned 1 Thread: id = 8426 os_tid = 0x144c [0230.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf")) returned 0x20 [0234.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF", dwFileAttributes=0x20) returned 0 [0234.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.669] GetLastError () returned 0x5 [0234.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF", dwFileAttributes=0x20) returned 0 [0234.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40308) returned 1 Thread: id = 8427 os_tid = 0x1460 [0230.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf")) returned 0x20 [0234.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF", dwFileAttributes=0x20) returned 0 [0234.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.671] GetLastError () returned 0x5 [0234.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF", dwFileAttributes=0x20) returned 0 [0234.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf5e0) returned 1 Thread: id = 8428 os_tid = 0x146c [0230.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg")) returned 0x20 [0234.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG", dwFileAttributes=0x20) returned 0 [0234.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.673] GetLastError () returned 0x5 [0234.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG", dwFileAttributes=0x20) returned 0 [0234.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40390) returned 1 Thread: id = 8429 os_tid = 0x2df0 [0230.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg")) returned 0x20 [0234.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG", dwFileAttributes=0x20) returned 0 [0234.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.738] GetLastError () returned 0x5 [0234.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG", dwFileAttributes=0x20) returned 0 [0234.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40418) returned 1 Thread: id = 8430 os_tid = 0x2dfc [0230.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf")) returned 0x20 [0234.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF", dwFileAttributes=0x20) returned 0 [0234.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.691] GetLastError () returned 0x5 [0234.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF", dwFileAttributes=0x20) returned 0 [0234.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404a0) returned 1 Thread: id = 8431 os_tid = 0x2e18 [0230.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf")) returned 0x20 [0234.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF", dwFileAttributes=0x20) returned 0 [0234.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.692] GetLastError () returned 0x5 [0234.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF", dwFileAttributes=0x20) returned 0 [0234.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40528) returned 1 Thread: id = 8432 os_tid = 0x2e1c [0230.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf")) returned 0x20 [0234.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF", dwFileAttributes=0x20) returned 0 [0234.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.675] GetLastError () returned 0x5 [0234.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF", dwFileAttributes=0x20) returned 0 [0234.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d405b0) returned 1 Thread: id = 8433 os_tid = 0x2e20 [0230.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf")) returned 0x20 [0234.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF", dwFileAttributes=0x20) returned 0 [0234.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.694] GetLastError () returned 0x5 [0234.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF", dwFileAttributes=0x20) returned 0 [0234.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40638) returned 1 Thread: id = 8434 os_tid = 0x2e24 [0230.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf")) returned 0x20 [0234.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF", dwFileAttributes=0x20) returned 0 [0234.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.696] GetLastError () returned 0x5 [0234.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF", dwFileAttributes=0x20) returned 0 [0234.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d406c0) returned 1 Thread: id = 8435 os_tid = 0x2e28 [0230.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf")) returned 0x20 [0234.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF", dwFileAttributes=0x20) returned 0 [0234.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.676] GetLastError () returned 0x5 [0234.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF", dwFileAttributes=0x20) returned 0 [0234.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40748) returned 1 Thread: id = 8436 os_tid = 0x2e2c [0230.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf")) returned 0x20 [0234.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF", dwFileAttributes=0x20) returned 0 [0234.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.697] GetLastError () returned 0x5 [0234.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF", dwFileAttributes=0x20) returned 0 [0234.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d407d0) returned 1 Thread: id = 8437 os_tid = 0x2e30 [0230.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf")) returned 0x20 [0234.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF", dwFileAttributes=0x20) returned 0 [0234.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.699] GetLastError () returned 0x5 [0234.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF", dwFileAttributes=0x20) returned 0 [0234.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40858) returned 1 Thread: id = 8438 os_tid = 0x2e34 [0230.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf")) returned 0x20 [0234.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF", dwFileAttributes=0x20) returned 0 [0234.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.678] GetLastError () returned 0x5 [0234.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF", dwFileAttributes=0x20) returned 0 [0234.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d408e0) returned 1 Thread: id = 8439 os_tid = 0x2c0 [0230.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf")) returned 0x20 [0234.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF", dwFileAttributes=0x20) returned 0 [0234.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.679] GetLastError () returned 0x5 [0234.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF", dwFileAttributes=0x20) returned 0 [0234.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40968) returned 1 Thread: id = 8440 os_tid = 0x414 [0230.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf")) returned 0x20 [0234.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF", dwFileAttributes=0x20) returned 0 [0234.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.681] GetLastError () returned 0x5 [0234.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF", dwFileAttributes=0x20) returned 0 [0234.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409f0) returned 1 Thread: id = 8441 os_tid = 0xb08 [0230.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf")) returned 0x20 [0234.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF", dwFileAttributes=0x20) returned 0 [0234.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.682] GetLastError () returned 0x5 [0234.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF", dwFileAttributes=0x20) returned 0 [0234.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a78) returned 1 Thread: id = 8442 os_tid = 0x7bc [0230.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf")) returned 0x20 [0234.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF", dwFileAttributes=0x20) returned 0 [0234.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.684] GetLastError () returned 0x5 [0234.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF", dwFileAttributes=0x20) returned 0 [0234.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b00) returned 1 Thread: id = 8443 os_tid = 0xfc8 [0230.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf")) returned 0x20 [0234.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF", dwFileAttributes=0x20) returned 0 [0234.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.685] GetLastError () returned 0x5 [0234.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF", dwFileAttributes=0x20) returned 0 [0234.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b88) returned 1 Thread: id = 8444 os_tid = 0x16a0 [0230.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf")) returned 0x20 [0234.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF", dwFileAttributes=0x20) returned 0 [0234.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.688] GetLastError () returned 0x5 [0234.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF", dwFileAttributes=0x20) returned 0 [0234.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c10) returned 1 Thread: id = 8445 os_tid = 0x16a4 [0230.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf")) returned 0x20 [0234.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF", dwFileAttributes=0x20) returned 0 [0234.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.689] GetLastError () returned 0x5 [0234.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF", dwFileAttributes=0x20) returned 0 [0234.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c98) returned 1 Thread: id = 8446 os_tid = 0x16a8 [0230.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf")) returned 0x20 [0234.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF", dwFileAttributes=0x20) returned 0 [0234.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.639] GetLastError () returned 0x5 [0234.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF", dwFileAttributes=0x20) returned 0 [0234.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40d20) returned 1 Thread: id = 8447 os_tid = 0x16ac [0230.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf")) returned 0x20 [0234.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF", dwFileAttributes=0x20) returned 0 [0234.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.642] GetLastError () returned 0x5 [0234.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF", dwFileAttributes=0x20) returned 0 [0234.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40da8) returned 1 Thread: id = 8448 os_tid = 0x16b0 [0230.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf")) returned 0x20 [0234.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF", dwFileAttributes=0x20) returned 0 [0234.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.728] GetLastError () returned 0x5 [0234.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF", dwFileAttributes=0x20) returned 0 [0234.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40e30) returned 1 Thread: id = 8449 os_tid = 0x1010 [0230.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf")) returned 0x20 [0234.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF", dwFileAttributes=0x20) returned 0 [0234.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.529] GetLastError () returned 0x5 [0234.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF", dwFileAttributes=0x20) returned 0 [0234.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ede8) returned 1 Thread: id = 8450 os_tid = 0x16b4 [0230.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf")) returned 0x20 [0234.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF", dwFileAttributes=0x20) returned 0 [0234.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.729] GetLastError () returned 0x5 [0234.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF", dwFileAttributes=0x20) returned 0 [0234.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40eb8) returned 1 Thread: id = 8451 os_tid = 0x1018 [0230.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf")) returned 0x20 [0234.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF", dwFileAttributes=0x20) returned 0 [0234.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.528] GetLastError () returned 0x5 [0234.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF", dwFileAttributes=0x20) returned 0 [0234.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f40) returned 1 Thread: id = 8452 os_tid = 0x16b8 [0230.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf")) returned 0x20 [0234.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF", dwFileAttributes=0x20) returned 0 [0234.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.731] GetLastError () returned 0x5 [0234.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF", dwFileAttributes=0x20) returned 0 [0234.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40fc8) returned 1 Thread: id = 8453 os_tid = 0x2e70 [0230.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf")) returned 0x20 [0234.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF", dwFileAttributes=0x20) returned 0 [0234.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.526] GetLastError () returned 0x5 [0234.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF", dwFileAttributes=0x20) returned 0 [0234.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41050) returned 1 Thread: id = 8454 os_tid = 0x16bc [0230.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf")) returned 0x20 [0234.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF", dwFileAttributes=0x20) returned 0 [0234.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.733] GetLastError () returned 0x5 [0234.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF", dwFileAttributes=0x20) returned 0 [0234.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d410d8) returned 1 Thread: id = 8455 os_tid = 0x16c0 [0230.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf")) returned 0x20 [0234.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF", dwFileAttributes=0x20) returned 0 [0234.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.735] GetLastError () returned 0x5 [0234.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF", dwFileAttributes=0x20) returned 0 [0234.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41160) returned 1 Thread: id = 8456 os_tid = 0x1030 [0230.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf")) returned 0x20 [0234.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF", dwFileAttributes=0x20) returned 0 [0234.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.736] GetLastError () returned 0x5 [0234.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF", dwFileAttributes=0x20) returned 0 [0234.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d411e8) returned 1 Thread: id = 8457 os_tid = 0x1038 [0230.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf")) returned 0x20 [0234.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF", dwFileAttributes=0x20) returned 0 [0234.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.524] GetLastError () returned 0x5 [0234.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF", dwFileAttributes=0x20) returned 0 [0234.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41270) returned 1 Thread: id = 8458 os_tid = 0x103c [0230.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf")) returned 0x20 [0234.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF", dwFileAttributes=0x20) returned 0 [0234.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.522] GetLastError () returned 0x5 [0234.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF", dwFileAttributes=0x20) returned 0 [0234.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412f8) returned 1 Thread: id = 8459 os_tid = 0x1040 [0230.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf")) returned 0x20 [0234.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF", dwFileAttributes=0x20) returned 0 [0234.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.520] GetLastError () returned 0x5 [0234.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF", dwFileAttributes=0x20) returned 0 [0234.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41380) returned 1 Thread: id = 8460 os_tid = 0x1044 [0230.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf")) returned 0x20 [0234.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF", dwFileAttributes=0x20) returned 0 [0234.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.551] GetLastError () returned 0x5 [0234.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF", dwFileAttributes=0x20) returned 0 [0234.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41408) returned 1 Thread: id = 8461 os_tid = 0x1048 [0230.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf")) returned 0x20 [0234.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF", dwFileAttributes=0x20) returned 0 [0234.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.549] GetLastError () returned 0x5 [0234.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF", dwFileAttributes=0x20) returned 0 [0234.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41490) returned 1 Thread: id = 8462 os_tid = 0x104c [0230.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf")) returned 0x20 [0234.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF", dwFileAttributes=0x20) returned 0 [0234.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.548] GetLastError () returned 0x5 [0234.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF", dwFileAttributes=0x20) returned 0 [0234.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41518) returned 1 Thread: id = 8463 os_tid = 0x1050 [0230.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf")) returned 0x20 [0234.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF", dwFileAttributes=0x20) returned 0 [0234.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.739] GetLastError () returned 0x5 [0234.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF", dwFileAttributes=0x20) returned 0 [0234.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d415a0) returned 1 Thread: id = 8464 os_tid = 0x1054 [0230.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf")) returned 0x20 [0234.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF", dwFileAttributes=0x20) returned 0 [0234.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.715] GetLastError () returned 0x5 [0234.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF", dwFileAttributes=0x20) returned 0 [0234.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41628) returned 1 Thread: id = 8465 os_tid = 0x1058 [0230.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf")) returned 0x20 [0234.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF", dwFileAttributes=0x20) returned 0 [0234.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.716] GetLastError () returned 0x5 [0234.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF", dwFileAttributes=0x20) returned 0 [0234.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d416b0) returned 1 Thread: id = 8466 os_tid = 0x105c [0230.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf")) returned 0x20 [0234.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF", dwFileAttributes=0x20) returned 0 [0234.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.718] GetLastError () returned 0x5 [0234.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF", dwFileAttributes=0x20) returned 0 [0234.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41738) returned 1 Thread: id = 8467 os_tid = 0x16c4 [0230.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf")) returned 0x20 [0234.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF", dwFileAttributes=0x20) returned 0 [0234.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.720] GetLastError () returned 0x5 [0234.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF", dwFileAttributes=0x20) returned 0 [0234.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d417c0) returned 1 Thread: id = 8468 os_tid = 0x16c8 [0230.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf")) returned 0x20 [0234.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF", dwFileAttributes=0x20) returned 0 [0234.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.721] GetLastError () returned 0x5 [0234.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF", dwFileAttributes=0x20) returned 0 [0234.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41848) returned 1 Thread: id = 8469 os_tid = 0x1070 [0230.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf")) returned 0x20 [0234.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF", dwFileAttributes=0x20) returned 0 [0234.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.531] GetLastError () returned 0x5 [0234.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF", dwFileAttributes=0x20) returned 0 [0234.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418d0) returned 1 Thread: id = 8470 os_tid = 0x1074 [0230.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf")) returned 0x20 [0234.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF", dwFileAttributes=0x20) returned 0 [0234.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.723] GetLastError () returned 0x5 [0234.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF", dwFileAttributes=0x20) returned 0 [0234.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41958) returned 1 Thread: id = 8471 os_tid = 0x1078 [0230.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf")) returned 0x20 [0234.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF", dwFileAttributes=0x20) returned 0 [0234.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.724] GetLastError () returned 0x5 [0234.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF", dwFileAttributes=0x20) returned 0 [0234.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419e0) returned 1 Thread: id = 8472 os_tid = 0x107c [0230.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf")) returned 0x20 [0234.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF", dwFileAttributes=0x20) returned 0 [0234.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.726] GetLastError () returned 0x5 [0234.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF", dwFileAttributes=0x20) returned 0 [0234.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41a68) returned 1 Thread: id = 8473 os_tid = 0x1080 [0230.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf")) returned 0x20 [0234.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF", dwFileAttributes=0x20) returned 0 [0234.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.378] GetLastError () returned 0x5 [0234.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF", dwFileAttributes=0x20) returned 0 [0234.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 Thread: id = 8474 os_tid = 0x1088 [0230.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf")) returned 0x20 [0234.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF", dwFileAttributes=0x20) returned 0 [0234.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.380] GetLastError () returned 0x5 [0234.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF", dwFileAttributes=0x20) returned 0 [0234.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be678) returned 1 Thread: id = 8475 os_tid = 0x108c [0230.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf")) returned 0x20 [0234.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF", dwFileAttributes=0x20) returned 0 [0234.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.382] GetLastError () returned 0x5 [0234.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF", dwFileAttributes=0x20) returned 0 [0234.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41af0) returned 1 Thread: id = 8476 os_tid = 0x1090 [0230.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf")) returned 0x20 [0234.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF", dwFileAttributes=0x20) returned 0 [0234.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.383] GetLastError () returned 0x5 [0234.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF", dwFileAttributes=0x20) returned 0 [0234.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b78) returned 1 Thread: id = 8477 os_tid = 0x1094 [0230.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf")) returned 0x20 [0234.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF", dwFileAttributes=0x20) returned 0 [0234.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.385] GetLastError () returned 0x5 [0234.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF", dwFileAttributes=0x20) returned 0 [0234.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c00) returned 1 Thread: id = 8478 os_tid = 0x1098 [0230.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf")) returned 0x20 [0234.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF", dwFileAttributes=0x20) returned 0 [0234.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.387] GetLastError () returned 0x5 [0234.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF", dwFileAttributes=0x20) returned 0 [0234.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c88) returned 1 Thread: id = 8479 os_tid = 0x109c [0230.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf")) returned 0x20 [0234.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF", dwFileAttributes=0x20) returned 0 [0234.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.288] GetLastError () returned 0x5 [0234.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF", dwFileAttributes=0x20) returned 0 [0234.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d10) returned 1 Thread: id = 8480 os_tid = 0x10a0 [0230.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf")) returned 0x20 [0234.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF", dwFileAttributes=0x20) returned 0 [0234.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.372] GetLastError () returned 0x5 [0234.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF", dwFileAttributes=0x20) returned 0 [0234.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d98) returned 1 Thread: id = 8481 os_tid = 0x10a4 [0230.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf")) returned 0x20 [0234.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF", dwFileAttributes=0x20) returned 0 [0234.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.370] GetLastError () returned 0x5 [0234.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF", dwFileAttributes=0x20) returned 0 [0234.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e20) returned 1 Thread: id = 8482 os_tid = 0x12d4 [0230.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf")) returned 0x20 [0234.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF", dwFileAttributes=0x20) returned 0 [0234.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.368] GetLastError () returned 0x5 [0234.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF", dwFileAttributes=0x20) returned 0 [0234.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ea8) returned 1 Thread: id = 8483 os_tid = 0x10a8 [0230.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf")) returned 0x20 [0234.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF", dwFileAttributes=0x20) returned 0 [0234.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.389] GetLastError () returned 0x5 [0234.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF", dwFileAttributes=0x20) returned 0 [0234.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41f30) returned 1 Thread: id = 8484 os_tid = 0x10ac [0230.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf")) returned 0x20 [0234.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF", dwFileAttributes=0x20) returned 0 [0234.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.391] GetLastError () returned 0x5 [0234.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF", dwFileAttributes=0x20) returned 0 [0234.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41fb8) returned 1 Thread: id = 8485 os_tid = 0x10b0 [0230.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf")) returned 0x20 [0234.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF", dwFileAttributes=0x20) returned 0 [0234.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.393] GetLastError () returned 0x5 [0234.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF", dwFileAttributes=0x20) returned 0 [0234.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9648) returned 1 Thread: id = 8486 os_tid = 0x7ec [0230.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf")) returned 0x20 [0234.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF", dwFileAttributes=0x20) returned 0 [0234.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.366] GetLastError () returned 0x5 [0234.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF", dwFileAttributes=0x20) returned 0 [0234.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d96d0) returned 1 Thread: id = 8487 os_tid = 0x598 [0230.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf")) returned 0x20 [0234.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF", dwFileAttributes=0x20) returned 0 [0234.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.365] GetLastError () returned 0x5 [0234.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF", dwFileAttributes=0x20) returned 0 [0234.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9758) returned 1 Thread: id = 8488 os_tid = 0xb4c [0230.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf")) returned 0x20 [0234.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF", dwFileAttributes=0x20) returned 0 [0234.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.363] GetLastError () returned 0x5 [0234.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF", dwFileAttributes=0x20) returned 0 [0234.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d97e0) returned 1 Thread: id = 8489 os_tid = 0x6a8 [0230.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf")) returned 0x20 [0234.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF", dwFileAttributes=0x20) returned 0 [0234.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.361] GetLastError () returned 0x5 [0234.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF", dwFileAttributes=0x20) returned 0 [0234.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9868) returned 1 Thread: id = 8490 os_tid = 0x6a4 [0230.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf")) returned 0x20 [0234.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF", dwFileAttributes=0x20) returned 0 [0234.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.359] GetLastError () returned 0x5 [0234.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF", dwFileAttributes=0x20) returned 0 [0234.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d98f0) returned 1 Thread: id = 8491 os_tid = 0x448 [0230.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf")) returned 0x20 [0234.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF", dwFileAttributes=0x20) returned 0 [0234.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.357] GetLastError () returned 0x5 [0234.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF", dwFileAttributes=0x20) returned 0 [0234.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9978) returned 1 Thread: id = 8492 os_tid = 0x524 [0230.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf")) returned 0x20 [0234.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF", dwFileAttributes=0x20) returned 0 [0234.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.355] GetLastError () returned 0x5 [0234.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF", dwFileAttributes=0x20) returned 0 [0234.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9a00) returned 1 Thread: id = 8493 os_tid = 0x14c [0230.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf")) returned 0x20 [0234.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF", dwFileAttributes=0x20) returned 0 [0234.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.353] GetLastError () returned 0x5 [0234.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF", dwFileAttributes=0x20) returned 0 [0234.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9a88) returned 1 Thread: id = 8494 os_tid = 0x4f8 [0230.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf")) returned 0x20 [0234.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF", dwFileAttributes=0x20) returned 0 [0234.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.395] GetLastError () returned 0x5 [0234.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF", dwFileAttributes=0x20) returned 0 [0234.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9b10) returned 1 Thread: id = 8495 os_tid = 0x754 [0230.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf")) returned 0x20 [0234.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF", dwFileAttributes=0x20) returned 0 [0234.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.702] GetLastError () returned 0x5 [0234.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF", dwFileAttributes=0x20) returned 0 [0234.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9b98) returned 1 Thread: id = 8496 os_tid = 0x894 [0230.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf")) returned 0x20 [0234.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF", dwFileAttributes=0x20) returned 0 [0234.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.704] GetLastError () returned 0x5 [0234.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF", dwFileAttributes=0x20) returned 0 [0234.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c20) returned 1 Thread: id = 8497 os_tid = 0xba4 [0230.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf")) returned 0x20 [0234.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF", dwFileAttributes=0x20) returned 0 [0234.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.705] GetLastError () returned 0x5 [0234.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF", dwFileAttributes=0x20) returned 0 [0234.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9ca8) returned 1 Thread: id = 8498 os_tid = 0xb9c [0230.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf")) returned 0x20 [0234.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", dwFileAttributes=0x20) returned 0 [0234.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.707] GetLastError () returned 0x5 [0234.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", dwFileAttributes=0x20) returned 0 [0234.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9d30) returned 1 Thread: id = 8499 os_tid = 0xb98 [0230.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf")) returned 0x20 [0234.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF", dwFileAttributes=0x20) returned 0 [0234.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.507] GetLastError () returned 0x5 [0234.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF", dwFileAttributes=0x20) returned 0 [0234.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9db8) returned 1 Thread: id = 8500 os_tid = 0xbb8 [0230.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf")) returned 0x20 [0234.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF", dwFileAttributes=0x20) returned 0 [0234.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.708] GetLastError () returned 0x5 [0234.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF", dwFileAttributes=0x20) returned 0 [0234.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9e40) returned 1 Thread: id = 8501 os_tid = 0x8d4 [0230.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf")) returned 0x20 [0234.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF", dwFileAttributes=0x20) returned 0 [0234.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.505] GetLastError () returned 0x5 [0234.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF", dwFileAttributes=0x20) returned 0 [0234.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9ec8) returned 1 Thread: id = 8502 os_tid = 0x8e8 [0230.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf")) returned 0x20 [0234.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF", dwFileAttributes=0x20) returned 0 [0234.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.710] GetLastError () returned 0x5 [0234.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF", dwFileAttributes=0x20) returned 0 [0234.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9f50) returned 1 Thread: id = 8503 os_tid = 0x8f8 [0230.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf")) returned 0x20 [0234.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF", dwFileAttributes=0x20) returned 0 [0234.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.503] GetLastError () returned 0x5 [0234.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF", dwFileAttributes=0x20) returned 0 [0234.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9fd8) returned 1 Thread: id = 8504 os_tid = 0xadc [0230.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf")) returned 0x20 [0234.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF", dwFileAttributes=0x20) returned 0 [0234.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.711] GetLastError () returned 0x5 [0234.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF", dwFileAttributes=0x20) returned 0 [0234.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da060) returned 1 Thread: id = 8505 os_tid = 0x7e0 [0230.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf")) returned 0x20 [0234.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF", dwFileAttributes=0x20) returned 0 [0234.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.501] GetLastError () returned 0x5 [0234.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF", dwFileAttributes=0x20) returned 0 [0234.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da0e8) returned 1 Thread: id = 8506 os_tid = 0x578 [0230.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf")) returned 0x20 [0234.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF", dwFileAttributes=0x20) returned 0 [0234.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.499] GetLastError () returned 0x5 [0234.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF", dwFileAttributes=0x20) returned 0 [0234.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da170) returned 1 Thread: id = 8507 os_tid = 0x32c [0230.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf")) returned 0x20 [0234.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF", dwFileAttributes=0x20) returned 0 [0234.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.498] GetLastError () returned 0x5 [0234.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF", dwFileAttributes=0x20) returned 0 [0234.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da1f8) returned 1 Thread: id = 8508 os_tid = 0x5f4 [0230.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf")) returned 0x20 [0234.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF", dwFileAttributes=0x20) returned 0 [0234.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.496] GetLastError () returned 0x5 [0234.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF", dwFileAttributes=0x20) returned 0 [0234.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da280) returned 1 Thread: id = 8509 os_tid = 0x5d8 [0230.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf")) returned 0x20 [0234.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF", dwFileAttributes=0x20) returned 0 [0234.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.494] GetLastError () returned 0x5 [0234.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF", dwFileAttributes=0x20) returned 0 [0234.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da308) returned 1 Thread: id = 8510 os_tid = 0x99c [0230.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf")) returned 0x20 [0234.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF", dwFileAttributes=0x20) returned 0 [0234.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.713] GetLastError () returned 0x5 [0234.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF", dwFileAttributes=0x20) returned 0 [0234.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da390) returned 1 Thread: id = 8511 os_tid = 0x9cc [0230.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf")) returned 0x20 [0234.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF", dwFileAttributes=0x20) returned 0 [0234.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.666] GetLastError () returned 0x5 [0234.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF", dwFileAttributes=0x20) returned 0 [0234.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da418) returned 1 Thread: id = 8512 os_tid = 0x9dc [0230.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf")) returned 0x20 [0234.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF", dwFileAttributes=0x20) returned 0 [0234.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.668] GetLastError () returned 0x5 [0234.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF", dwFileAttributes=0x20) returned 0 [0234.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da4a0) returned 1 Thread: id = 8513 os_tid = 0xf50 [0230.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf")) returned 0x20 [0235.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF", dwFileAttributes=0x20) returned 0 [0235.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.840] GetLastError () returned 0x5 [0235.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF", dwFileAttributes=0x20) returned 0 [0235.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da528) returned 1 Thread: id = 8514 os_tid = 0xe74 [0230.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg")) returned 0x20 [0235.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG", dwFileAttributes=0x20) returned 0 [0235.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.252] GetLastError () returned 0x5 [0235.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG", dwFileAttributes=0x20) returned 0 [0235.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da5b0) returned 1 Thread: id = 8515 os_tid = 0x6f0 [0230.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg")) returned 0x20 [0235.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG", dwFileAttributes=0x20) returned 0 [0235.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.210] GetLastError () returned 0x5 [0235.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG", dwFileAttributes=0x20) returned 0 [0235.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da638) returned 1 Thread: id = 8516 os_tid = 0x714 [0230.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg")) returned 0x20 [0234.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG", dwFileAttributes=0x20) returned 0 [0234.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.701] GetLastError () returned 0x5 [0234.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG", dwFileAttributes=0x20) returned 0 [0234.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6c0) returned 1 Thread: id = 8517 os_tid = 0x710 [0230.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg")) returned 0x20 [0235.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG", dwFileAttributes=0x20) returned 0 [0235.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.197] GetLastError () returned 0x5 [0235.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG", dwFileAttributes=0x20) returned 0 [0235.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da748) returned 1 Thread: id = 8518 os_tid = 0x1804 [0230.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg")) returned 0x20 [0234.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG", dwFileAttributes=0x20) returned 0 [0234.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.300] GetLastError () returned 0x5 [0234.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG", dwFileAttributes=0x20) returned 0 [0234.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da7d0) returned 1 Thread: id = 8519 os_tid = 0x1808 [0230.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg")) returned 0x20 [0234.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG", dwFileAttributes=0x20) returned 0 [0234.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.298] GetLastError () returned 0x5 [0234.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG", dwFileAttributes=0x20) returned 0 [0234.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be568) returned 1 Thread: id = 8520 os_tid = 0x180c [0230.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf")) returned 0x20 [0234.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF", dwFileAttributes=0x20) returned 0 [0234.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.320] GetLastError () returned 0x5 [0234.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF", dwFileAttributes=0x20) returned 0 [0234.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da858) returned 1 Thread: id = 8521 os_tid = 0x1810 [0230.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf")) returned 0x20 [0234.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF", dwFileAttributes=0x20) returned 0 [0234.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.321] GetLastError () returned 0x5 [0234.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF", dwFileAttributes=0x20) returned 0 [0234.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8e0) returned 1 Thread: id = 8522 os_tid = 0x1814 [0230.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf")) returned 0x20 [0234.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF", dwFileAttributes=0x20) returned 0 [0234.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.327] GetLastError () returned 0x5 [0234.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF", dwFileAttributes=0x20) returned 0 [0234.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da968) returned 1 Thread: id = 8523 os_tid = 0x1818 [0230.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf")) returned 0x20 [0234.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF", dwFileAttributes=0x20) returned 0 [0234.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.329] GetLastError () returned 0x5 [0234.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF", dwFileAttributes=0x20) returned 0 [0234.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da9f0) returned 1 Thread: id = 8524 os_tid = 0xf78 [0230.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf")) returned 0x20 [0234.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF", dwFileAttributes=0x20) returned 0 [0234.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.330] GetLastError () returned 0x5 [0234.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF", dwFileAttributes=0x20) returned 0 [0234.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa78) returned 1 Thread: id = 8525 os_tid = 0x14fc [0230.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf")) returned 0x20 [0234.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF", dwFileAttributes=0x20) returned 0 [0234.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.332] GetLastError () returned 0x5 [0234.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF", dwFileAttributes=0x20) returned 0 [0234.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dab00) returned 1 Thread: id = 8526 os_tid = 0x804 [0230.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf")) returned 0x20 [0234.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF", dwFileAttributes=0x20) returned 0 [0234.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.334] GetLastError () returned 0x5 [0234.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF", dwFileAttributes=0x20) returned 0 [0234.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dab88) returned 1 Thread: id = 8527 os_tid = 0x1388 [0230.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf")) returned 0x20 [0234.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF", dwFileAttributes=0x20) returned 0 [0234.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.336] GetLastError () returned 0x5 [0234.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF", dwFileAttributes=0x20) returned 0 [0234.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dac10) returned 1 Thread: id = 8528 os_tid = 0xf74 [0230.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf")) returned 0x20 [0234.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF", dwFileAttributes=0x20) returned 0 [0234.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.337] GetLastError () returned 0x5 [0234.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF", dwFileAttributes=0x20) returned 0 [0234.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dac98) returned 1 Thread: id = 8529 os_tid = 0x1844 [0230.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf")) returned 0x20 [0234.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF", dwFileAttributes=0x20) returned 0 [0234.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.339] GetLastError () returned 0x5 [0234.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF", dwFileAttributes=0x20) returned 0 [0234.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dad20) returned 1 Thread: id = 8530 os_tid = 0x1848 [0230.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf")) returned 0x20 [0235.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF", dwFileAttributes=0x20) returned 0 [0235.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.394] GetLastError () returned 0x5 [0235.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF", dwFileAttributes=0x20) returned 0 [0235.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dada8) returned 1 Thread: id = 8531 os_tid = 0x184c [0230.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf")) returned 0x20 [0236.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF", dwFileAttributes=0x20) returned 0 [0236.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.107] GetLastError () returned 0x5 [0236.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF", dwFileAttributes=0x20) returned 0 [0236.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dae30) returned 1 Thread: id = 8532 os_tid = 0x1850 [0230.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf")) returned 0x20 [0234.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF", dwFileAttributes=0x20) returned 0 [0234.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.317] GetLastError () returned 0x5 [0234.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF", dwFileAttributes=0x20) returned 0 [0234.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daeb8) returned 1 Thread: id = 8533 os_tid = 0x1854 [0230.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf")) returned 0x20 [0234.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF", dwFileAttributes=0x20) returned 0 [0234.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.315] GetLastError () returned 0x5 [0234.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF", dwFileAttributes=0x20) returned 0 [0234.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daf40) returned 1 Thread: id = 8534 os_tid = 0x1858 [0230.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf")) returned 0x20 [0234.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF", dwFileAttributes=0x20) returned 0 [0234.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.313] GetLastError () returned 0x5 [0234.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF", dwFileAttributes=0x20) returned 0 [0234.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dafc8) returned 1 Thread: id = 8535 os_tid = 0x185c [0230.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf")) returned 0x20 [0234.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF", dwFileAttributes=0x20) returned 0 [0234.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.310] GetLastError () returned 0x5 [0234.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF", dwFileAttributes=0x20) returned 0 [0234.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db050) returned 1 Thread: id = 8536 os_tid = 0x1860 [0230.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf")) returned 0x20 [0234.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF", dwFileAttributes=0x20) returned 0 [0234.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.309] GetLastError () returned 0x5 [0234.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF", dwFileAttributes=0x20) returned 0 [0234.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db0d8) returned 1 Thread: id = 8537 os_tid = 0x1908 [0230.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf")) returned 0x20 [0234.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF", dwFileAttributes=0x20) returned 0 [0234.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.307] GetLastError () returned 0x5 [0234.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF", dwFileAttributes=0x20) returned 0 [0234.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db160) returned 1 Thread: id = 8538 os_tid = 0x1920 [0230.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf")) returned 0x20 [0234.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF", dwFileAttributes=0x20) returned 0 [0234.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.305] GetLastError () returned 0x5 [0234.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF", dwFileAttributes=0x20) returned 0 [0234.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db1e8) returned 1 Thread: id = 8539 os_tid = 0x1924 [0230.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf")) returned 0x20 [0234.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF", dwFileAttributes=0x20) returned 0 [0234.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.303] GetLastError () returned 0x5 [0234.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF", dwFileAttributes=0x20) returned 0 [0234.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db270) returned 1 Thread: id = 8540 os_tid = 0x1e64 [0230.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf")) returned 0x20 [0234.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF", dwFileAttributes=0x20) returned 0 [0234.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.301] GetLastError () returned 0x5 [0234.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF", dwFileAttributes=0x20) returned 0 [0234.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db2f8) returned 1 Thread: id = 8541 os_tid = 0x1ed8 [0231.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf")) returned 0x20 [0234.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF", dwFileAttributes=0x20) returned 0 [0234.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.341] GetLastError () returned 0x5 [0234.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF", dwFileAttributes=0x20) returned 0 [0234.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db380) returned 1 Thread: id = 8542 os_tid = 0x1f38 [0231.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf")) returned 0x20 [0234.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF", dwFileAttributes=0x20) returned 0 [0234.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.343] GetLastError () returned 0x5 [0234.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF", dwFileAttributes=0x20) returned 0 [0234.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db408) returned 1 Thread: id = 8543 os_tid = 0x1f3c [0231.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf")) returned 0x20 [0234.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF", dwFileAttributes=0x20) returned 0 [0234.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.293] GetLastError () returned 0x5 [0234.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF", dwFileAttributes=0x20) returned 0 [0234.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db490) returned 1 Thread: id = 8544 os_tid = 0x1f74 [0231.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf")) returned 0x20 [0234.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF", dwFileAttributes=0x20) returned 0 [0234.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.509] GetLastError () returned 0x5 [0234.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF", dwFileAttributes=0x20) returned 0 [0234.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db518) returned 1 Thread: id = 8545 os_tid = 0x1f98 [0231.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf")) returned 0x20 [0234.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF", dwFileAttributes=0x20) returned 0 [0234.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.510] GetLastError () returned 0x5 [0234.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF", dwFileAttributes=0x20) returned 0 [0234.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db5a0) returned 1 Thread: id = 8546 os_tid = 0x1f9c [0231.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf")) returned 0x20 [0234.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF", dwFileAttributes=0x20) returned 0 [0234.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.344] GetLastError () returned 0x5 [0234.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF", dwFileAttributes=0x20) returned 0 [0234.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff370) returned 1 Thread: id = 8547 os_tid = 0x1fa0 [0231.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf")) returned 0x20 [0234.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF", dwFileAttributes=0x20) returned 0 [0234.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.290] GetLastError () returned 0x5 [0234.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF", dwFileAttributes=0x20) returned 0 [0234.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff3f8) returned 1 Thread: id = 8548 os_tid = 0x1fa4 [0231.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf")) returned 0x20 [0234.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF", dwFileAttributes=0x20) returned 0 [0234.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.292] GetLastError () returned 0x5 [0234.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF", dwFileAttributes=0x20) returned 0 [0234.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff480) returned 1 Thread: id = 8549 os_tid = 0x1fa8 [0231.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf")) returned 0x20 [0234.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF", dwFileAttributes=0x20) returned 0 [0234.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.512] GetLastError () returned 0x5 [0234.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF", dwFileAttributes=0x20) returned 0 [0234.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff508) returned 1 Thread: id = 8550 os_tid = 0x1fac [0231.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf")) returned 0x20 [0234.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF", dwFileAttributes=0x20) returned 0 [0234.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.514] GetLastError () returned 0x5 [0234.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF", dwFileAttributes=0x20) returned 0 [0234.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff590) returned 1 Thread: id = 8551 os_tid = 0x1fb0 [0231.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg")) returned 0x20 [0234.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG", dwFileAttributes=0x20) returned 0 [0234.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.516] GetLastError () returned 0x5 [0234.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG", dwFileAttributes=0x20) returned 0 [0234.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff618) returned 1 Thread: id = 8552 os_tid = 0x1fb4 [0231.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg")) returned 0x20 [0234.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG", dwFileAttributes=0x20) returned 0 [0234.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.295] GetLastError () returned 0x5 [0234.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG", dwFileAttributes=0x20) returned 0 [0234.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff6a0) returned 1 Thread: id = 8553 os_tid = 0x1fc0 [0231.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg")) returned 0x20 [0234.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG", dwFileAttributes=0x20) returned 0 [0234.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.430] GetLastError () returned 0x5 [0234.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG", dwFileAttributes=0x20) returned 0 [0234.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff728) returned 1 Thread: id = 8554 os_tid = 0x1fc4 [0231.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg")) returned 0x20 [0234.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG", dwFileAttributes=0x20) returned 0 [0234.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.323] GetLastError () returned 0x5 [0234.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG", dwFileAttributes=0x20) returned 0 [0234.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff7b0) returned 1 Thread: id = 8555 os_tid = 0x1fc8 [0231.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg")) returned 0x20 [0234.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG", dwFileAttributes=0x20) returned 0 [0234.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.325] GetLastError () returned 0x5 [0234.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG", dwFileAttributes=0x20) returned 0 [0234.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff838) returned 1 Thread: id = 8556 os_tid = 0x1fcc [0231.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg")) returned 0x20 [0235.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG", dwFileAttributes=0x20) returned 0 [0235.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.195] GetLastError () returned 0x5 [0235.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG", dwFileAttributes=0x20) returned 0 [0235.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff8c0) returned 1 Thread: id = 8557 os_tid = 0x2060 [0231.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf")) returned 0x20 [0235.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF", dwFileAttributes=0x20) returned 0 [0235.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.192] GetLastError () returned 0x5 [0235.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF", dwFileAttributes=0x20) returned 0 [0235.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff948) returned 1 Thread: id = 8558 os_tid = 0x2064 [0231.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf")) returned 0x20 [0235.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF", dwFileAttributes=0x20) returned 0 [0235.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.190] GetLastError () returned 0x5 [0235.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF", dwFileAttributes=0x20) returned 0 [0235.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eff9d0) returned 1 Thread: id = 8559 os_tid = 0x2068 [0231.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf")) returned 0x20 [0235.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF", dwFileAttributes=0x20) returned 0 [0235.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.188] GetLastError () returned 0x5 [0235.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF", dwFileAttributes=0x20) returned 0 [0235.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3effa58) returned 1 Thread: id = 8560 os_tid = 0x206c [0231.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg")) returned 0x20 [0235.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG", dwFileAttributes=0x20) returned 0 [0235.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.209] GetLastError () returned 0x5 [0235.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG", dwFileAttributes=0x20) returned 0 [0235.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3effae0) returned 1 Thread: id = 8561 os_tid = 0x2070 [0231.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg")) returned 0x20 [0235.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG", dwFileAttributes=0x20) returned 0 [0235.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.185] GetLastError () returned 0x5 [0235.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG", dwFileAttributes=0x20) returned 0 [0235.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3effb68) returned 1 Thread: id = 8562 os_tid = 0x207c [0231.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg")) returned 0x20 [0235.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG", dwFileAttributes=0x20) returned 0 [0235.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.207] GetLastError () returned 0x5 [0235.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG", dwFileAttributes=0x20) returned 0 [0235.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3effbf0) returned 1 Thread: id = 8563 os_tid = 0x2080 [0231.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg")) returned 0x20 [0235.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG", dwFileAttributes=0x20) returned 0 [0235.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.205] GetLastError () returned 0x5 [0235.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG", dwFileAttributes=0x20) returned 0 [0235.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3effc78) returned 1 Thread: id = 8564 os_tid = 0x2170 [0231.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg")) returned 0x20 [0235.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG", dwFileAttributes=0x20) returned 0 [0235.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.204] GetLastError () returned 0x5 [0235.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG", dwFileAttributes=0x20) returned 0 [0235.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3effd00) returned 1 Thread: id = 8565 os_tid = 0x2174 [0231.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg")) returned 0x20 [0235.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG", dwFileAttributes=0x20) returned 0 [0235.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.202] GetLastError () returned 0x5 [0235.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG", dwFileAttributes=0x20) returned 0 [0235.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3effd88) returned 1 Thread: id = 8566 os_tid = 0x2178 [0231.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg")) returned 0x20 [0235.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG", dwFileAttributes=0x20) returned 0 [0235.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.199] GetLastError () returned 0x5 [0235.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG", dwFileAttributes=0x20) returned 0 [0235.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3effe10) returned 1 Thread: id = 8567 os_tid = 0x217c [0231.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf")) returned 0x20 [0235.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF", dwFileAttributes=0x20) returned 0 [0235.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.223] GetLastError () returned 0x5 [0235.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF", dwFileAttributes=0x20) returned 0 [0235.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3effe98) returned 1 Thread: id = 8568 os_tid = 0x2184 [0231.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf")) returned 0x20 [0235.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF", dwFileAttributes=0x20) returned 0 [0235.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.221] GetLastError () returned 0x5 [0235.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF", dwFileAttributes=0x20) returned 0 [0235.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efff20) returned 1 Thread: id = 8569 os_tid = 0x2188 [0231.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf")) returned 0x20 [0235.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF", dwFileAttributes=0x20) returned 0 [0235.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.219] GetLastError () returned 0x5 [0235.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF", dwFileAttributes=0x20) returned 0 [0235.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efffa8) returned 1 Thread: id = 8570 os_tid = 0x218c [0231.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg")) returned 0x20 [0235.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG", dwFileAttributes=0x20) returned 0 [0235.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.217] GetLastError () returned 0x5 [0235.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG", dwFileAttributes=0x20) returned 0 [0235.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00030) returned 1 Thread: id = 8571 os_tid = 0x2190 [0231.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf")) returned 0x20 [0235.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF", dwFileAttributes=0x20) returned 0 [0235.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.215] GetLastError () returned 0x5 [0235.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF", dwFileAttributes=0x20) returned 0 [0235.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f000b8) returned 1 Thread: id = 8572 os_tid = 0x2194 [0231.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf")) returned 0x20 [0235.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF", dwFileAttributes=0x20) returned 0 [0235.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.214] GetLastError () returned 0x5 [0235.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF", dwFileAttributes=0x20) returned 0 [0235.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00140) returned 1 Thread: id = 8573 os_tid = 0x24b8 [0231.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg")) returned 0x20 [0235.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG", dwFileAttributes=0x20) returned 0 [0235.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.212] GetLastError () returned 0x5 [0235.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG", dwFileAttributes=0x20) returned 0 [0235.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f001c8) returned 1 Thread: id = 8574 os_tid = 0x24bc [0231.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg")) returned 0x20 [0235.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG", dwFileAttributes=0x20) returned 0 [0235.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.225] GetLastError () returned 0x5 [0235.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG", dwFileAttributes=0x20) returned 0 [0235.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00250) returned 1 Thread: id = 8575 os_tid = 0x24c0 [0232.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg")) returned 0x20 [0235.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG", dwFileAttributes=0x20) returned 0 [0235.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.246] GetLastError () returned 0x5 [0235.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG", dwFileAttributes=0x20) returned 0 [0235.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f002d8) returned 1 Thread: id = 8576 os_tid = 0x24c4 [0232.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg")) returned 0x20 [0235.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG", dwFileAttributes=0x20) returned 0 [0235.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.244] GetLastError () returned 0x5 [0235.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG", dwFileAttributes=0x20) returned 0 [0235.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00360) returned 1 Thread: id = 8577 os_tid = 0x24c8 [0232.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg")) returned 0x20 [0235.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG", dwFileAttributes=0x20) returned 0 [0235.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.293] GetLastError () returned 0x5 [0235.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG", dwFileAttributes=0x20) returned 0 [0235.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f003e8) returned 1 Thread: id = 8578 os_tid = 0x24cc [0232.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg")) returned 0x20 [0235.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG", dwFileAttributes=0x20) returned 0 [0235.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.287] GetLastError () returned 0x5 [0235.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG", dwFileAttributes=0x20) returned 0 [0235.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00470) returned 1 Thread: id = 8579 os_tid = 0x24d0 [0232.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg")) returned 0x20 [0235.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", dwFileAttributes=0x20) returned 0 [0235.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.285] GetLastError () returned 0x5 [0235.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", dwFileAttributes=0x20) returned 0 [0235.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f004f8) returned 1 Thread: id = 8580 os_tid = 0x24d4 [0232.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg")) returned 0x20 [0235.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG", dwFileAttributes=0x20) returned 0 [0235.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.283] GetLastError () returned 0x5 [0235.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG", dwFileAttributes=0x20) returned 0 [0235.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00580) returned 1 Thread: id = 8581 os_tid = 0x24d8 [0232.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg")) returned 0x20 [0235.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG", dwFileAttributes=0x20) returned 0 [0235.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.281] GetLastError () returned 0x5 [0235.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG", dwFileAttributes=0x20) returned 0 [0235.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00608) returned 1 Thread: id = 8582 os_tid = 0x24dc [0232.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg")) returned 0x20 [0235.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG", dwFileAttributes=0x20) returned 0 [0235.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.279] GetLastError () returned 0x5 [0235.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG", dwFileAttributes=0x20) returned 0 [0235.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00690) returned 1 Thread: id = 8583 os_tid = 0x24e0 [0232.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg")) returned 0x20 [0235.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG", dwFileAttributes=0x20) returned 0 [0235.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.242] GetLastError () returned 0x5 [0235.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG", dwFileAttributes=0x20) returned 0 [0235.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00718) returned 1 Thread: id = 8584 os_tid = 0x24e4 [0232.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg")) returned 0x20 [0235.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG", dwFileAttributes=0x20) returned 0 [0235.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.277] GetLastError () returned 0x5 [0235.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG", dwFileAttributes=0x20) returned 0 [0235.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f007a0) returned 1 Thread: id = 8585 os_tid = 0x24e8 [0232.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg")) returned 0x20 [0235.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG", dwFileAttributes=0x20) returned 0 [0235.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.268] GetLastError () returned 0x5 [0235.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG", dwFileAttributes=0x20) returned 0 [0235.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00828) returned 1 Thread: id = 8586 os_tid = 0x24ec [0232.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg")) returned 0x20 [0235.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG", dwFileAttributes=0x20) returned 0 [0235.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.235] GetLastError () returned 0x5 [0235.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG", dwFileAttributes=0x20) returned 0 [0235.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f008b0) returned 1 Thread: id = 8587 os_tid = 0x24f0 [0232.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg")) returned 0x20 [0235.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG", dwFileAttributes=0x20) returned 0 [0235.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.266] GetLastError () returned 0x5 [0235.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG", dwFileAttributes=0x20) returned 0 [0235.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00938) returned 1 Thread: id = 8588 os_tid = 0x24f4 [0232.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg")) returned 0x20 [0235.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG", dwFileAttributes=0x20) returned 0 [0235.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.264] GetLastError () returned 0x5 [0235.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG", dwFileAttributes=0x20) returned 0 [0235.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f009c0) returned 1 Thread: id = 8589 os_tid = 0x2500 [0232.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg")) returned 0x20 [0235.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG", dwFileAttributes=0x20) returned 0 [0235.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.231] GetLastError () returned 0x5 [0235.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG", dwFileAttributes=0x20) returned 0 [0235.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00a48) returned 1 Thread: id = 8590 os_tid = 0x2504 [0232.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg")) returned 0x20 [0235.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG", dwFileAttributes=0x20) returned 0 [0235.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.262] GetLastError () returned 0x5 [0235.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG", dwFileAttributes=0x20) returned 0 [0235.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00ad0) returned 1 Thread: id = 8591 os_tid = 0x2550 [0232.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg")) returned 0x20 [0235.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG", dwFileAttributes=0x20) returned 0 [0235.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.260] GetLastError () returned 0x5 [0235.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG", dwFileAttributes=0x20) returned 0 [0235.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00b58) returned 1 Thread: id = 8592 os_tid = 0x25b8 [0232.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg")) returned 0x20 [0235.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG", dwFileAttributes=0x20) returned 0 [0235.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.258] GetLastError () returned 0x5 [0235.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG", dwFileAttributes=0x20) returned 0 [0235.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00be0) returned 1 Thread: id = 8593 os_tid = 0x26c4 [0232.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg")) returned 0x20 [0235.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG", dwFileAttributes=0x20) returned 0 [0235.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.256] GetLastError () returned 0x5 [0235.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG", dwFileAttributes=0x20) returned 0 [0235.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00c68) returned 1 Thread: id = 8594 os_tid = 0x26c8 [0232.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg")) returned 0x20 [0235.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG", dwFileAttributes=0x20) returned 0 [0235.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.254] GetLastError () returned 0x5 [0235.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG", dwFileAttributes=0x20) returned 0 [0235.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00cf0) returned 1 Thread: id = 8595 os_tid = 0x26cc [0232.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg")) returned 0x20 [0235.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG", dwFileAttributes=0x20) returned 0 [0235.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.354] GetLastError () returned 0x5 [0235.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG", dwFileAttributes=0x20) returned 0 [0235.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00d78) returned 1 Thread: id = 8596 os_tid = 0x1ed4 [0232.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg")) returned 0x20 [0235.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG", dwFileAttributes=0x20) returned 0 [0235.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.342] GetLastError () returned 0x5 [0235.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG", dwFileAttributes=0x20) returned 0 [0235.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00e00) returned 1 Thread: id = 8597 os_tid = 0x1edc [0232.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg")) returned 0x20 [0235.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG", dwFileAttributes=0x20) returned 0 [0235.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.309] GetLastError () returned 0x5 [0235.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG", dwFileAttributes=0x20) returned 0 [0235.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00e88) returned 1 Thread: id = 8598 os_tid = 0x1ee0 [0232.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg")) returned 0x20 [0235.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG", dwFileAttributes=0x20) returned 0 [0235.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.307] GetLastError () returned 0x5 [0235.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG", dwFileAttributes=0x20) returned 0 [0235.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00f10) returned 1 Thread: id = 8599 os_tid = 0x1ee4 [0232.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg")) returned 0x20 [0235.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG", dwFileAttributes=0x20) returned 0 [0235.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.305] GetLastError () returned 0x5 [0235.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG", dwFileAttributes=0x20) returned 0 [0235.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f00f98) returned 1 Thread: id = 8600 os_tid = 0x1ee8 [0232.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg")) returned 0x20 [0235.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG", dwFileAttributes=0x20) returned 0 [0235.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.302] GetLastError () returned 0x5 [0235.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG", dwFileAttributes=0x20) returned 0 [0235.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01020) returned 1 Thread: id = 8601 os_tid = 0x284c [0232.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg")) returned 0x20 [0235.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG", dwFileAttributes=0x20) returned 0 [0235.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.369] GetLastError () returned 0x5 [0235.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG", dwFileAttributes=0x20) returned 0 [0235.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f010a8) returned 1 Thread: id = 8602 os_tid = 0x1eac [0232.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg")) returned 0x20 [0235.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG", dwFileAttributes=0x20) returned 0 [0235.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.391] GetLastError () returned 0x5 [0235.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG", dwFileAttributes=0x20) returned 0 [0235.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec50) returned 1 Thread: id = 8603 os_tid = 0x1eb0 [0232.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg")) returned 0x20 [0235.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG", dwFileAttributes=0x20) returned 0 [0235.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.367] GetLastError () returned 0x5 [0235.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG", dwFileAttributes=0x20) returned 0 [0235.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f118) returned 1 Thread: id = 8604 os_tid = 0x2560 [0232.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg")) returned 0x20 [0235.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG", dwFileAttributes=0x20) returned 0 [0235.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.378] GetLastError () returned 0x5 [0235.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG", dwFileAttributes=0x20) returned 0 [0235.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 8605 os_tid = 0x25f8 [0232.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg")) returned 0x20 [0235.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG", dwFileAttributes=0x20) returned 0 [0235.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.376] GetLastError () returned 0x5 [0235.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG", dwFileAttributes=0x20) returned 0 [0235.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 Thread: id = 8606 os_tid = 0x2600 [0232.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg")) returned 0x20 [0235.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG", dwFileAttributes=0x20) returned 0 [0235.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.360] GetLastError () returned 0x5 [0235.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG", dwFileAttributes=0x20) returned 0 [0235.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f2b0) returned 1 Thread: id = 8607 os_tid = 0x2824 [0232.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg")) returned 0x20 [0235.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG", dwFileAttributes=0x20) returned 0 [0235.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.373] GetLastError () returned 0x5 [0235.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG", dwFileAttributes=0x20) returned 0 [0235.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f448) returned 1 Thread: id = 8608 os_tid = 0x2828 [0232.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg")) returned 0x20 [0235.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG", dwFileAttributes=0x20) returned 0 [0235.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.371] GetLastError () returned 0x5 [0235.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG", dwFileAttributes=0x20) returned 0 [0235.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 8609 os_tid = 0x2830 [0232.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg")) returned 0x20 [0235.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG", dwFileAttributes=0x20) returned 0 [0235.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.773] GetLastError () returned 0x5 [0235.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG", dwFileAttributes=0x20) returned 0 [0235.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 8610 os_tid = 0x2a18 [0232.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg")) returned 0x20 [0235.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG", dwFileAttributes=0x20) returned 0 [0235.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.766] GetLastError () returned 0x5 [0235.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG", dwFileAttributes=0x20) returned 0 [0235.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 8611 os_tid = 0x2a1c [0232.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg")) returned 0x20 [0235.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG", dwFileAttributes=0x20) returned 0 [0235.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.410] GetLastError () returned 0x5 [0235.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG", dwFileAttributes=0x20) returned 0 [0235.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f6f0) returned 1 Thread: id = 8612 os_tid = 0x2680 [0232.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg")) returned 0x20 [0235.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG", dwFileAttributes=0x20) returned 0 [0235.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.407] GetLastError () returned 0x5 [0235.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG", dwFileAttributes=0x20) returned 0 [0235.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 8613 os_tid = 0x2984 [0232.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg")) returned 0x20 [0235.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG", dwFileAttributes=0x20) returned 0 [0235.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.405] GetLastError () returned 0x5 [0235.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG", dwFileAttributes=0x20) returned 0 [0235.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f778) returned 1 Thread: id = 8614 os_tid = 0x27a4 [0232.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg")) returned 0x20 [0235.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG", dwFileAttributes=0x20) returned 0 [0235.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.700] GetLastError () returned 0x5 [0235.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG", dwFileAttributes=0x20) returned 0 [0235.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f668) returned 1 Thread: id = 8615 os_tid = 0x27ac [0232.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg")) returned 0x20 [0235.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG", dwFileAttributes=0x20) returned 0 [0235.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.630] GetLastError () returned 0x5 [0235.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG", dwFileAttributes=0x20) returned 0 [0235.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eb40) returned 1 Thread: id = 8616 os_tid = 0x27b0 [0232.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg")) returned 0x20 [0235.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG", dwFileAttributes=0x20) returned 0 [0235.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.621] GetLastError () returned 0x5 [0235.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG", dwFileAttributes=0x20) returned 0 [0235.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f090) returned 1 Thread: id = 8617 os_tid = 0x27b4 [0232.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg")) returned 0x20 [0235.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG", dwFileAttributes=0x20) returned 0 [0235.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.619] GetLastError () returned 0x5 [0235.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG", dwFileAttributes=0x20) returned 0 [0235.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f3c0) returned 1 Thread: id = 8618 os_tid = 0x27b8 [0232.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg")) returned 0x20 [0235.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG", dwFileAttributes=0x20) returned 0 [0235.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.617] GetLastError () returned 0x5 [0235.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG", dwFileAttributes=0x20) returned 0 [0235.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ef80) returned 1 Thread: id = 8619 os_tid = 0x27c8 [0232.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg")) returned 0x20 [0235.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG", dwFileAttributes=0x20) returned 0 [0235.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.614] GetLastError () returned 0x5 [0235.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG", dwFileAttributes=0x20) returned 0 [0235.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 8620 os_tid = 0x27cc [0232.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg")) returned 0x20 [0235.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG", dwFileAttributes=0x20) returned 0 [0235.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.612] GetLastError () returned 0x5 [0235.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG", dwFileAttributes=0x20) returned 0 [0235.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01130) returned 1 Thread: id = 8621 os_tid = 0x27d0 [0232.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg")) returned 0x20 [0235.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG", dwFileAttributes=0x20) returned 0 [0235.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.609] GetLastError () returned 0x5 [0235.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG", dwFileAttributes=0x20) returned 0 [0235.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f011b8) returned 1 Thread: id = 8622 os_tid = 0x27d4 [0232.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg")) returned 0x20 [0235.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG", dwFileAttributes=0x20) returned 0 [0235.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.607] GetLastError () returned 0x5 [0235.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG", dwFileAttributes=0x20) returned 0 [0235.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01240) returned 1 Thread: id = 8623 os_tid = 0x27d8 [0232.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg")) returned 0x20 [0235.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG", dwFileAttributes=0x20) returned 0 [0235.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.604] GetLastError () returned 0x5 [0235.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG", dwFileAttributes=0x20) returned 0 [0235.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f012c8) returned 1 Thread: id = 8624 os_tid = 0x27dc [0232.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg")) returned 0x20 [0235.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG", dwFileAttributes=0x20) returned 0 [0235.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.602] GetLastError () returned 0x5 [0235.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG", dwFileAttributes=0x20) returned 0 [0235.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01350) returned 1 Thread: id = 8625 os_tid = 0x27e0 [0232.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg")) returned 0x20 [0235.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG", dwFileAttributes=0x20) returned 0 [0235.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.600] GetLastError () returned 0x5 [0235.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG", dwFileAttributes=0x20) returned 0 [0235.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f013d8) returned 1 Thread: id = 8626 os_tid = 0x2988 [0232.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg")) returned 0x20 [0235.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG", dwFileAttributes=0x20) returned 0 [0235.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.596] GetLastError () returned 0x5 [0235.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG", dwFileAttributes=0x20) returned 0 [0235.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01460) returned 1 Thread: id = 8627 os_tid = 0x29ac [0232.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg")) returned 0x20 [0235.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG", dwFileAttributes=0x20) returned 0 [0235.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.820] GetLastError () returned 0x5 [0235.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG", dwFileAttributes=0x20) returned 0 [0235.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f014e8) returned 1 Thread: id = 8628 os_tid = 0x29b0 [0232.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg")) returned 0x20 [0235.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG", dwFileAttributes=0x20) returned 0 [0235.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.819] GetLastError () returned 0x5 [0235.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG", dwFileAttributes=0x20) returned 0 [0235.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01570) returned 1 Thread: id = 8629 os_tid = 0x2414 [0232.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg")) returned 0x20 [0235.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG", dwFileAttributes=0x20) returned 0 [0235.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.817] GetLastError () returned 0x5 [0235.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG", dwFileAttributes=0x20) returned 0 [0235.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f015f8) returned 1 Thread: id = 8630 os_tid = 0x2c18 [0232.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg")) returned 0x20 [0235.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG", dwFileAttributes=0x20) returned 0 [0235.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.815] GetLastError () returned 0x5 [0235.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG", dwFileAttributes=0x20) returned 0 [0235.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01680) returned 1 Thread: id = 8631 os_tid = 0x2c1c [0232.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg")) returned 0x20 [0235.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG", dwFileAttributes=0x20) returned 0 [0235.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.813] GetLastError () returned 0x5 [0235.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG", dwFileAttributes=0x20) returned 0 [0235.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01708) returned 1 Thread: id = 8632 os_tid = 0x2c20 [0232.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg")) returned 0x20 [0235.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG", dwFileAttributes=0x20) returned 0 [0235.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.812] GetLastError () returned 0x5 [0235.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG", dwFileAttributes=0x20) returned 0 [0235.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01790) returned 1 Thread: id = 8633 os_tid = 0x2c24 [0232.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg")) returned 0x20 [0235.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG", dwFileAttributes=0x20) returned 0 [0235.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.810] GetLastError () returned 0x5 [0235.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG", dwFileAttributes=0x20) returned 0 [0235.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01818) returned 1 Thread: id = 8634 os_tid = 0x2c28 [0232.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg")) returned 0x20 [0235.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG", dwFileAttributes=0x20) returned 0 [0235.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.799] GetLastError () returned 0x5 [0235.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG", dwFileAttributes=0x20) returned 0 [0235.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f018a0) returned 1 Thread: id = 8635 os_tid = 0x2c2c [0232.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg")) returned 0x20 [0235.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG", dwFileAttributes=0x20) returned 0 [0235.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.797] GetLastError () returned 0x5 [0235.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG", dwFileAttributes=0x20) returned 0 [0235.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01928) returned 1 Thread: id = 8636 os_tid = 0xeec [0232.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg")) returned 0x20 [0235.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG", dwFileAttributes=0x20) returned 0 [0235.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.789] GetLastError () returned 0x5 [0235.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG", dwFileAttributes=0x20) returned 0 [0235.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f019b0) returned 1 Thread: id = 8637 os_tid = 0xef0 [0232.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg")) returned 0x20 [0235.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG", dwFileAttributes=0x20) returned 0 [0235.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.594] GetLastError () returned 0x5 [0235.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG", dwFileAttributes=0x20) returned 0 [0235.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01a38) returned 1 Thread: id = 8638 os_tid = 0xef4 [0232.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg")) returned 0x20 [0235.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG", dwFileAttributes=0x20) returned 0 [0235.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.592] GetLastError () returned 0x5 [0235.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG", dwFileAttributes=0x20) returned 0 [0235.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01ac0) returned 1 Thread: id = 8639 os_tid = 0xa20 [0232.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg")) returned 0x20 [0235.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG", dwFileAttributes=0x20) returned 0 [0235.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.589] GetLastError () returned 0x5 [0235.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG", dwFileAttributes=0x20) returned 0 [0235.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01b48) returned 1 Thread: id = 8640 os_tid = 0x2028 [0232.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg")) returned 0x20 [0235.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG", dwFileAttributes=0x20) returned 0 [0235.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.569] GetLastError () returned 0x5 [0235.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG", dwFileAttributes=0x20) returned 0 [0235.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01bd0) returned 1 Thread: id = 8641 os_tid = 0x202c [0232.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png")) returned 0x20 [0235.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG", dwFileAttributes=0x20) returned 0 [0235.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.567] GetLastError () returned 0x5 [0235.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG", dwFileAttributes=0x20) returned 0 [0235.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01c58) returned 1 Thread: id = 8642 os_tid = 0x21b4 [0232.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png")) returned 0x20 [0235.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG", dwFileAttributes=0x20) returned 0 [0235.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.558] GetLastError () returned 0x5 [0235.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG", dwFileAttributes=0x20) returned 0 [0235.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01ce0) returned 1 Thread: id = 8643 os_tid = 0x239c [0232.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png")) returned 0x20 [0235.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG", dwFileAttributes=0x20) returned 0 [0235.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.838] GetLastError () returned 0x5 [0235.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG", dwFileAttributes=0x20) returned 0 [0235.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01d68) returned 1 Thread: id = 8644 os_tid = 0x2998 [0232.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png")) returned 0x20 [0235.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG", dwFileAttributes=0x20) returned 0 [0235.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.836] GetLastError () returned 0x5 [0235.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG", dwFileAttributes=0x20) returned 0 [0235.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01df0) returned 1 Thread: id = 8645 os_tid = 0x29a0 [0232.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png")) returned 0x20 [0235.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG", dwFileAttributes=0x20) returned 0 [0235.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.834] GetLastError () returned 0x5 [0235.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG", dwFileAttributes=0x20) returned 0 [0235.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01e78) returned 1 Thread: id = 8646 os_tid = 0x264c [0232.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid")) returned 0x20 [0235.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID", dwFileAttributes=0x20) returned 0 [0235.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.832] GetLastError () returned 0x5 [0235.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID", dwFileAttributes=0x20) returned 0 [0235.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01f00) returned 1 Thread: id = 8647 os_tid = 0x2c30 [0232.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid")) returned 0x20 [0235.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID", dwFileAttributes=0x20) returned 0 [0235.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.830] GetLastError () returned 0x5 [0235.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID", dwFileAttributes=0x20) returned 0 [0235.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f01f88) returned 1 Thread: id = 8648 os_tid = 0x13b4 [0232.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf")) returned 0x20 [0235.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF", dwFileAttributes=0x20) returned 0 [0235.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.829] GetLastError () returned 0x5 [0235.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF", dwFileAttributes=0x20) returned 0 [0235.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02010) returned 1 Thread: id = 8649 os_tid = 0x1268 [0232.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf")) returned 0x20 [0235.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF", dwFileAttributes=0x20) returned 0 [0235.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.827] GetLastError () returned 0x5 [0235.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF", dwFileAttributes=0x20) returned 0 [0235.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02098) returned 1 Thread: id = 8650 os_tid = 0xc0c [0232.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf")) returned 0x20 [0235.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF", dwFileAttributes=0x20) returned 0 [0235.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.826] GetLastError () returned 0x5 [0235.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF", dwFileAttributes=0x20) returned 0 [0235.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02120) returned 1 Thread: id = 8651 os_tid = 0x2088 [0232.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid")) returned 0x20 [0235.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID", dwFileAttributes=0x20) returned 0 [0235.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.824] GetLastError () returned 0x5 [0235.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID", dwFileAttributes=0x20) returned 0 [0235.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f021a8) returned 1 Thread: id = 8652 os_tid = 0x22dc [0232.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf")) returned 0x20 [0235.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF", dwFileAttributes=0x20) returned 0 [0235.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.822] GetLastError () returned 0x5 [0235.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF", dwFileAttributes=0x20) returned 0 [0235.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02230) returned 1 Thread: id = 8653 os_tid = 0x2648 [0232.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf")) returned 0x20 [0235.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF", dwFileAttributes=0x20) returned 0 [0235.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.992] GetLastError () returned 0x5 [0235.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF", dwFileAttributes=0x20) returned 0 [0235.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f022b8) returned 1 Thread: id = 8654 os_tid = 0x2660 [0232.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf")) returned 0x20 [0235.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF", dwFileAttributes=0x20) returned 0 [0235.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.990] GetLastError () returned 0x5 [0235.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF", dwFileAttributes=0x20) returned 0 [0235.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02340) returned 1 Thread: id = 8655 os_tid = 0x2664 [0232.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf")) returned 0x20 [0235.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF", dwFileAttributes=0x20) returned 0 [0235.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.982] GetLastError () returned 0x5 [0235.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF", dwFileAttributes=0x20) returned 0 [0235.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f023c8) returned 1 Thread: id = 8656 os_tid = 0x2790 [0232.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf")) returned 0x20 [0235.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF", dwFileAttributes=0x20) returned 0 [0235.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.914] GetLastError () returned 0x5 [0235.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF", dwFileAttributes=0x20) returned 0 [0235.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02450) returned 1 Thread: id = 8657 os_tid = 0x2794 [0232.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf")) returned 0x20 [0235.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF", dwFileAttributes=0x20) returned 0 [0235.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.912] GetLastError () returned 0x5 [0235.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF", dwFileAttributes=0x20) returned 0 [0235.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f024d8) returned 1 Thread: id = 8658 os_tid = 0x13b8 [0232.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf")) returned 0x20 [0235.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF", dwFileAttributes=0x20) returned 0 [0235.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.910] GetLastError () returned 0x5 [0235.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF", dwFileAttributes=0x20) returned 0 [0235.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02560) returned 1 Thread: id = 8659 os_tid = 0x1bf0 [0232.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf")) returned 0x20 [0235.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", dwFileAttributes=0x20) returned 0 [0235.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.903] GetLastError () returned 0x5 [0235.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", dwFileAttributes=0x20) returned 0 [0235.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f025e8) returned 1 Thread: id = 8660 os_tid = 0x1bf4 [0232.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf")) returned 0x20 [0235.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF", dwFileAttributes=0x20) returned 0 [0235.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.894] GetLastError () returned 0x5 [0235.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF", dwFileAttributes=0x20) returned 0 [0235.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02670) returned 1 Thread: id = 8661 os_tid = 0x13d0 [0232.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf")) returned 0x20 [0235.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF", dwFileAttributes=0x20) returned 0 [0235.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.892] GetLastError () returned 0x5 [0235.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF", dwFileAttributes=0x20) returned 0 [0235.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f026f8) returned 1 Thread: id = 8662 os_tid = 0x13d4 [0232.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf")) returned 0x20 [0235.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF", dwFileAttributes=0x20) returned 0 [0235.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.891] GetLastError () returned 0x5 [0235.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF", dwFileAttributes=0x20) returned 0 [0235.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02780) returned 1 Thread: id = 8663 os_tid = 0x13d8 [0232.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf")) returned 0x20 [0235.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF", dwFileAttributes=0x20) returned 0 [0235.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.889] GetLastError () returned 0x5 [0235.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF", dwFileAttributes=0x20) returned 0 [0235.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02808) returned 1 Thread: id = 8664 os_tid = 0x16d0 [0232.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf")) returned 0x20 [0235.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF", dwFileAttributes=0x20) returned 0 [0235.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.887] GetLastError () returned 0x5 [0235.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF", dwFileAttributes=0x20) returned 0 [0235.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02890) returned 1 Thread: id = 8665 os_tid = 0x13dc [0232.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf")) returned 0x20 [0235.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF", dwFileAttributes=0x20) returned 0 [0235.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.885] GetLastError () returned 0x5 [0235.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF", dwFileAttributes=0x20) returned 0 [0235.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02918) returned 1 Thread: id = 8666 os_tid = 0x13e0 [0232.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf")) returned 0x20 [0236.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF", dwFileAttributes=0x20) returned 0 [0236.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.101] GetLastError () returned 0x5 [0236.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF", dwFileAttributes=0x20) returned 0 [0236.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f029a0) returned 1 Thread: id = 8667 os_tid = 0x13e4 [0232.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf")) returned 0x20 [0236.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF", dwFileAttributes=0x20) returned 0 [0236.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.080] GetLastError () returned 0x5 [0236.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF", dwFileAttributes=0x20) returned 0 [0236.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02a28) returned 1 Thread: id = 8668 os_tid = 0x13e8 [0232.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf")) returned 0x20 [0236.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF", dwFileAttributes=0x20) returned 0 [0236.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.094] GetLastError () returned 0x5 [0236.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF", dwFileAttributes=0x20) returned 0 [0236.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02ab0) returned 1 Thread: id = 8669 os_tid = 0x13ec [0232.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf")) returned 0x20 [0236.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF", dwFileAttributes=0x20) returned 0 [0236.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.007] GetLastError () returned 0x5 [0236.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF", dwFileAttributes=0x20) returned 0 [0236.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02b38) returned 1 Thread: id = 8670 os_tid = 0x16d8 [0232.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf")) returned 0x20 [0236.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF", dwFileAttributes=0x20) returned 0 [0236.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.002] GetLastError () returned 0x5 [0236.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF", dwFileAttributes=0x20) returned 0 [0236.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02bc0) returned 1 Thread: id = 8671 os_tid = 0x16dc [0232.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf")) returned 0x20 [0236.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF", dwFileAttributes=0x20) returned 0 [0236.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.009] GetLastError () returned 0x5 [0236.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF", dwFileAttributes=0x20) returned 0 [0236.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02c48) returned 1 Thread: id = 8672 os_tid = 0x16e0 [0232.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf")) returned 0x20 [0236.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF", dwFileAttributes=0x20) returned 0 [0236.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.011] GetLastError () returned 0x5 [0236.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF", dwFileAttributes=0x20) returned 0 [0236.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02cd0) returned 1 Thread: id = 8673 os_tid = 0x16e4 [0232.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf")) returned 0x20 [0236.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF", dwFileAttributes=0x20) returned 0 [0236.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.029] GetLastError () returned 0x5 [0236.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF", dwFileAttributes=0x20) returned 0 [0236.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02d58) returned 1 Thread: id = 8674 os_tid = 0x13f0 [0232.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf")) returned 0x20 [0236.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF", dwFileAttributes=0x20) returned 0 [0236.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.031] GetLastError () returned 0x5 [0236.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF", dwFileAttributes=0x20) returned 0 [0236.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02de0) returned 1 Thread: id = 8675 os_tid = 0x13f4 [0232.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf")) returned 0x20 [0236.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF", dwFileAttributes=0x20) returned 0 [0236.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.047] GetLastError () returned 0x5 [0236.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF", dwFileAttributes=0x20) returned 0 [0236.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02e68) returned 1 Thread: id = 8676 os_tid = 0x13f8 [0232.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf")) returned 0x20 [0236.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF", dwFileAttributes=0x20) returned 0 [0236.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.078] GetLastError () returned 0x5 [0236.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF", dwFileAttributes=0x20) returned 0 [0236.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02ef0) returned 1 Thread: id = 8677 os_tid = 0x16ec [0232.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf")) returned 0x20 [0236.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF", dwFileAttributes=0x20) returned 0 [0236.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.130] GetLastError () returned 0x5 [0236.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF", dwFileAttributes=0x20) returned 0 [0236.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f02f78) returned 1 Thread: id = 8678 os_tid = 0x13fc [0232.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf")) returned 0x20 [0235.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF", dwFileAttributes=0x20) returned 0 [0235.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.556] GetLastError () returned 0x5 [0235.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF", dwFileAttributes=0x20) returned 0 [0235.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f03000) returned 1 Thread: id = 8679 os_tid = 0x1a2c [0232.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf")) returned 0x20 [0235.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF", dwFileAttributes=0x20) returned 0 [0235.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.554] GetLastError () returned 0x5 [0235.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF", dwFileAttributes=0x20) returned 0 [0235.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f03088) returned 1 Thread: id = 8680 os_tid = 0x1a30 [0232.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf")) returned 0x20 [0236.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF", dwFileAttributes=0x20) returned 0 [0236.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.128] GetLastError () returned 0x5 [0236.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF", dwFileAttributes=0x20) returned 0 [0236.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f03110) returned 1 Thread: id = 8681 os_tid = 0x1a34 [0232.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf")) returned 0x20 [0235.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF", dwFileAttributes=0x20) returned 0 [0235.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.552] GetLastError () returned 0x5 [0235.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF", dwFileAttributes=0x20) returned 0 [0235.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f03198) returned 1 Thread: id = 8682 os_tid = 0x1a38 [0232.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf")) returned 0x20 [0235.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF", dwFileAttributes=0x20) returned 0 [0235.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.549] GetLastError () returned 0x5 [0235.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF", dwFileAttributes=0x20) returned 0 [0235.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f03220) returned 1 Thread: id = 8683 os_tid = 0x10ec [0232.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf")) returned 0x20 [0235.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF", dwFileAttributes=0x20) returned 0 [0235.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.547] GetLastError () returned 0x5 [0235.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF", dwFileAttributes=0x20) returned 0 [0235.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f032a8) returned 1 Thread: id = 8684 os_tid = 0xec0 [0232.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf")) returned 0x20 [0235.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF", dwFileAttributes=0x20) returned 0 [0235.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.545] GetLastError () returned 0x5 [0235.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF", dwFileAttributes=0x20) returned 0 [0235.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 8685 os_tid = 0x218 [0232.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf")) returned 0x20 [0235.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF", dwFileAttributes=0x20) returned 0 [0235.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.542] GetLastError () returned 0x5 [0235.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF", dwFileAttributes=0x20) returned 0 [0235.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 8686 os_tid = 0x1238 [0232.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf")) returned 0x20 [0236.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF", dwFileAttributes=0x20) returned 0 [0236.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.126] GetLastError () returned 0x5 [0236.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF", dwFileAttributes=0x20) returned 0 [0236.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 8687 os_tid = 0x1028 [0232.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf")) returned 0x20 [0236.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF", dwFileAttributes=0x20) returned 0 [0236.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.124] GetLastError () returned 0x5 [0236.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF", dwFileAttributes=0x20) returned 0 [0236.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 8688 os_tid = 0x102c [0232.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf")) returned 0x20 [0235.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF", dwFileAttributes=0x20) returned 0 [0235.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.538] GetLastError () returned 0x5 [0235.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF", dwFileAttributes=0x20) returned 0 [0235.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 8689 os_tid = 0x124c [0232.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf")) returned 0x20 [0235.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF", dwFileAttributes=0x20) returned 0 [0235.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.518] GetLastError () returned 0x5 [0235.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF", dwFileAttributes=0x20) returned 0 [0235.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 8690 os_tid = 0x1254 [0232.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf")) returned 0x20 [0235.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF", dwFileAttributes=0x20) returned 0 [0235.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.515] GetLastError () returned 0x5 [0235.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF", dwFileAttributes=0x20) returned 0 [0235.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be920) returned 1 Thread: id = 8691 os_tid = 0x125c [0232.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf")) returned 0x20 [0235.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF", dwFileAttributes=0x20) returned 0 [0235.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.513] GetLastError () returned 0x5 [0235.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF", dwFileAttributes=0x20) returned 0 [0235.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 8692 os_tid = 0x1260 [0232.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf")) returned 0x20 [0235.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF", dwFileAttributes=0x20) returned 0 [0235.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.511] GetLastError () returned 0x5 [0235.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF", dwFileAttributes=0x20) returned 0 [0235.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 8693 os_tid = 0x1264 [0232.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf")) returned 0x20 [0235.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF", dwFileAttributes=0x20) returned 0 [0235.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.504] GetLastError () returned 0x5 [0235.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF", dwFileAttributes=0x20) returned 0 [0235.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 Thread: id = 8694 os_tid = 0x150c [0232.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf")) returned 0x20 [0235.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF", dwFileAttributes=0x20) returned 0 [0235.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.502] GetLastError () returned 0x5 [0235.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF", dwFileAttributes=0x20) returned 0 [0235.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 8695 os_tid = 0x1060 [0232.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf")) returned 0x20 [0235.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF", dwFileAttributes=0x20) returned 0 [0235.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.500] GetLastError () returned 0x5 [0235.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF", dwFileAttributes=0x20) returned 0 [0235.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 8696 os_tid = 0x126c [0232.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf")) returned 0x20 [0235.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF", dwFileAttributes=0x20) returned 0 [0235.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.498] GetLastError () returned 0x5 [0235.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF", dwFileAttributes=0x20) returned 0 [0235.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 8697 os_tid = 0x1068 [0232.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf")) returned 0x20 [0235.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF", dwFileAttributes=0x20) returned 0 [0235.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.488] GetLastError () returned 0x5 [0235.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF", dwFileAttributes=0x20) returned 0 [0235.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 8698 os_tid = 0x1390 [0232.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf")) returned 0x20 [0235.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF", dwFileAttributes=0x20) returned 0 [0235.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.481] GetLastError () returned 0x5 [0235.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF", dwFileAttributes=0x20) returned 0 [0235.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81becd8) returned 1 Thread: id = 8699 os_tid = 0x1270 [0232.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf")) returned 0x20 [0235.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF", dwFileAttributes=0x20) returned 0 [0235.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.475] GetLastError () returned 0x5 [0235.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF", dwFileAttributes=0x20) returned 0 [0235.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 8700 os_tid = 0x1278 [0232.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf")) returned 0x20 [0235.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF", dwFileAttributes=0x20) returned 0 [0235.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.466] GetLastError () returned 0x5 [0235.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF", dwFileAttributes=0x20) returned 0 [0235.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 8701 os_tid = 0x127c [0233.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf")) returned 0x20 [0235.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF", dwFileAttributes=0x20) returned 0 [0235.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.462] GetLastError () returned 0x5 [0235.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF", dwFileAttributes=0x20) returned 0 [0235.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 8702 os_tid = 0x300 [0233.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf")) returned 0x20 [0235.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF", dwFileAttributes=0x20) returned 0 [0235.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.454] GetLastError () returned 0x5 [0235.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF", dwFileAttributes=0x20) returned 0 [0235.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 8703 os_tid = 0x7a8 [0233.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf")) returned 0x20 [0235.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF", dwFileAttributes=0x20) returned 0 [0235.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.451] GetLastError () returned 0x5 [0235.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF", dwFileAttributes=0x20) returned 0 [0235.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 8704 os_tid = 0x4d0 [0233.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf")) returned 0x20 [0235.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF", dwFileAttributes=0x20) returned 0 [0235.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.445] GetLastError () returned 0x5 [0235.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF", dwFileAttributes=0x20) returned 0 [0235.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf998) returned 1 Thread: id = 8705 os_tid = 0x784 [0233.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf")) returned 0x20 [0235.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF", dwFileAttributes=0x20) returned 0 [0235.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.439] GetLastError () returned 0x5 [0235.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF", dwFileAttributes=0x20) returned 0 [0235.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 8706 os_tid = 0x5e8 [0233.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf")) returned 0x20 [0235.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF", dwFileAttributes=0x20) returned 0 [0235.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.433] GetLastError () returned 0x5 [0235.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF", dwFileAttributes=0x20) returned 0 [0235.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 8707 os_tid = 0x208c [0233.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf")) returned 0x20 [0235.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF", dwFileAttributes=0x20) returned 0 [0235.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.426] GetLastError () returned 0x5 [0235.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF", dwFileAttributes=0x20) returned 0 [0235.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 8708 os_tid = 0x21e0 [0233.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf")) returned 0x20 [0235.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF", dwFileAttributes=0x20) returned 0 [0235.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.420] GetLastError () returned 0x5 [0235.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF", dwFileAttributes=0x20) returned 0 [0235.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 8709 os_tid = 0x21e4 [0233.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf")) returned 0x20 [0235.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF", dwFileAttributes=0x20) returned 0 [0235.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.415] GetLastError () returned 0x5 [0235.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF", dwFileAttributes=0x20) returned 0 [0235.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 8710 os_tid = 0x221c [0233.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf")) returned 0x20 [0234.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF", dwFileAttributes=0x20) returned 0 [0234.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.015] GetLastError () returned 0x5 [0234.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF", dwFileAttributes=0x20) returned 0 [0234.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 8711 os_tid = 0x2220 [0233.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf")) returned 0x20 [0236.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF", dwFileAttributes=0x20) returned 0 [0236.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.160] GetLastError () returned 0x5 [0236.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF", dwFileAttributes=0x20) returned 0 [0236.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b6f0) returned 1 Thread: id = 8712 os_tid = 0x2418 [0233.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf")) returned 0x20 [0236.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF", dwFileAttributes=0x20) returned 0 [0236.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.134] GetLastError () returned 0x5 [0236.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF", dwFileAttributes=0x20) returned 0 [0236.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be5f0) returned 1 Thread: id = 8713 os_tid = 0x241c [0233.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf")) returned 0x20 [0236.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF", dwFileAttributes=0x20) returned 0 [0236.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.143] GetLastError () returned 0x5 [0236.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF", dwFileAttributes=0x20) returned 0 [0236.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 8714 os_tid = 0x1d18 [0233.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf")) returned 0x20 [0236.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF", dwFileAttributes=0x20) returned 0 [0236.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.161] GetLastError () returned 0x5 [0236.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF", dwFileAttributes=0x20) returned 0 [0236.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 8715 os_tid = 0x2a2c [0233.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf")) returned 0x20 [0236.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF", dwFileAttributes=0x20) returned 0 [0236.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.163] GetLastError () returned 0x5 [0236.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF", dwFileAttributes=0x20) returned 0 [0236.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 8716 os_tid = 0x22cc [0233.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf")) returned 0x20 [0234.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF", dwFileAttributes=0x20) returned 0 [0234.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.021] GetLastError () returned 0x5 [0234.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF", dwFileAttributes=0x20) returned 0 [0234.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 8717 os_tid = 0x22d0 [0233.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf")) returned 0x20 [0236.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF", dwFileAttributes=0x20) returned 0 [0236.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.187] GetLastError () returned 0x5 [0236.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF", dwFileAttributes=0x20) returned 0 [0236.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 8718 os_tid = 0x22d4 [0233.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf")) returned 0x20 [0236.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF", dwFileAttributes=0x20) returned 0 [0236.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.182] GetLastError () returned 0x5 [0236.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF", dwFileAttributes=0x20) returned 0 [0236.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 8719 os_tid = 0x22d8 [0233.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf")) returned 0x20 [0236.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF", dwFileAttributes=0x20) returned 0 [0236.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.169] GetLastError () returned 0x5 [0236.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF", dwFileAttributes=0x20) returned 0 [0236.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 8720 os_tid = 0x22e0 [0233.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf")) returned 0x20 [0236.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF", dwFileAttributes=0x20) returned 0 [0236.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.181] GetLastError () returned 0x5 [0236.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF", dwFileAttributes=0x20) returned 0 [0236.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 8721 os_tid = 0x22e4 [0233.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf")) returned 0x20 [0236.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF", dwFileAttributes=0x20) returned 0 [0236.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.168] GetLastError () returned 0x5 [0236.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF", dwFileAttributes=0x20) returned 0 [0236.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfe60) returned 1 Thread: id = 8722 os_tid = 0x21cc [0233.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf")) returned 0x20 [0236.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF", dwFileAttributes=0x20) returned 0 [0236.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.179] GetLastError () returned 0x5 [0236.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF", dwFileAttributes=0x20) returned 0 [0236.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 8723 os_tid = 0x21d0 [0233.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf")) returned 0x20 [0236.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF", dwFileAttributes=0x20) returned 0 [0236.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.178] GetLastError () returned 0x5 [0236.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF", dwFileAttributes=0x20) returned 0 [0236.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfff8) returned 1 Thread: id = 8724 os_tid = 0x21d4 [0233.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf")) returned 0x20 [0236.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF", dwFileAttributes=0x20) returned 0 [0236.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.176] GetLastError () returned 0x5 [0236.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF", dwFileAttributes=0x20) returned 0 [0236.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0328) returned 1 Thread: id = 8725 os_tid = 0x2c08 [0233.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf")) returned 0x20 [0236.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF", dwFileAttributes=0x20) returned 0 [0236.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.175] GetLastError () returned 0x5 [0236.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF", dwFileAttributes=0x20) returned 0 [0236.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053a78) returned 1 Thread: id = 8726 os_tid = 0x2c0c [0233.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf")) returned 0x20 [0236.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF", dwFileAttributes=0x20) returned 0 [0236.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.173] GetLastError () returned 0x5 [0236.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF", dwFileAttributes=0x20) returned 0 [0236.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80540d8) returned 1 Thread: id = 8727 os_tid = 0x2c10 [0233.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf")) returned 0x20 [0236.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF", dwFileAttributes=0x20) returned 0 [0236.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.166] GetLastError () returned 0x5 [0236.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF", dwFileAttributes=0x20) returned 0 [0236.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053390) returned 1 Thread: id = 8728 os_tid = 0x2c58 [0233.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf")) returned 0x20 [0236.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF", dwFileAttributes=0x20) returned 0 [0236.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.172] GetLastError () returned 0x5 [0236.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF", dwFileAttributes=0x20) returned 0 [0236.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053968) returned 1 Thread: id = 8729 os_tid = 0x2c64 [0233.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf")) returned 0x20 [0236.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF", dwFileAttributes=0x20) returned 0 [0236.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.165] GetLastError () returned 0x5 [0236.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF", dwFileAttributes=0x20) returned 0 [0236.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053d20) returned 1 Thread: id = 8730 os_tid = 0x2c68 [0233.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf")) returned 0x20 [0236.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF", dwFileAttributes=0x20) returned 0 [0236.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.170] GetLastError () returned 0x5 [0236.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF", dwFileAttributes=0x20) returned 0 [0236.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054628) returned 1 Thread: id = 8731 os_tid = 0x2c94 [0233.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf")) returned 0x20 [0236.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF", dwFileAttributes=0x20) returned 0 [0236.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.132] GetLastError () returned 0x5 [0236.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF", dwFileAttributes=0x20) returned 0 [0236.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80538e0) returned 1 Thread: id = 8732 os_tid = 0x2c98 [0233.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf")) returned 0x20 [0236.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF", dwFileAttributes=0x20) returned 0 [0236.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.136] GetLastError () returned 0x5 [0236.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF", dwFileAttributes=0x20) returned 0 [0236.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f312e8) returned 1 Thread: id = 8733 os_tid = 0x2ca8 [0233.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf")) returned 0x20 [0236.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF", dwFileAttributes=0x20) returned 0 [0236.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.137] GetLastError () returned 0x5 [0236.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF", dwFileAttributes=0x20) returned 0 [0236.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc10) returned 1 Thread: id = 8734 os_tid = 0x1ae4 [0233.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf")) returned 0x20 [0236.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF", dwFileAttributes=0x20) returned 0 [0236.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.142] GetLastError () returned 0x5 [0236.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF", dwFileAttributes=0x20) returned 0 [0236.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 8735 os_tid = 0x1bb4 [0233.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf")) returned 0x20 [0236.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF", dwFileAttributes=0x20) returned 0 [0236.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.145] GetLastError () returned 0x5 [0236.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF", dwFileAttributes=0x20) returned 0 [0236.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e7d0) returned 1 Thread: id = 8736 os_tid = 0x1bcc [0233.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf")) returned 0x20 [0236.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF", dwFileAttributes=0x20) returned 0 [0236.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.146] GetLastError () returned 0x5 [0236.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF", dwFileAttributes=0x20) returned 0 [0236.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e858) returned 1 Thread: id = 8737 os_tid = 0x1d10 [0233.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf")) returned 0x20 [0236.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF", dwFileAttributes=0x20) returned 0 [0236.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.148] GetLastError () returned 0x5 [0236.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF", dwFileAttributes=0x20) returned 0 [0236.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e8e0) returned 1 Thread: id = 8738 os_tid = 0x1d14 [0233.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf")) returned 0x20 [0236.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF", dwFileAttributes=0x20) returned 0 [0236.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.149] GetLastError () returned 0x5 [0236.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF", dwFileAttributes=0x20) returned 0 [0236.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e968) returned 1 Thread: id = 8739 os_tid = 0x1d1c [0233.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf")) returned 0x20 [0236.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF", dwFileAttributes=0x20) returned 0 [0236.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.151] GetLastError () returned 0x5 [0236.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF", dwFileAttributes=0x20) returned 0 [0236.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e9f0) returned 1 Thread: id = 8740 os_tid = 0x2428 [0233.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf")) returned 0x20 [0236.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF", dwFileAttributes=0x20) returned 0 [0236.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.152] GetLastError () returned 0x5 [0236.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF", dwFileAttributes=0x20) returned 0 [0236.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ea78) returned 1 Thread: id = 8741 os_tid = 0x1474 [0233.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf")) returned 0x20 [0236.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF", dwFileAttributes=0x20) returned 0 [0236.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.154] GetLastError () returned 0x5 [0236.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF", dwFileAttributes=0x20) returned 0 [0236.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803eb00) returned 1 Thread: id = 8742 os_tid = 0x23a0 [0233.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf")) returned 0x20 [0236.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF", dwFileAttributes=0x20) returned 0 [0236.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.155] GetLastError () returned 0x5 [0236.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF", dwFileAttributes=0x20) returned 0 [0236.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803eb88) returned 1 Thread: id = 8743 os_tid = 0x23a4 [0233.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf")) returned 0x20 [0236.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF", dwFileAttributes=0x20) returned 0 [0236.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.157] GetLastError () returned 0x5 [0236.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF", dwFileAttributes=0x20) returned 0 [0236.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ec10) returned 1 Thread: id = 8744 os_tid = 0x25b0 [0233.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf")) returned 0x20 [0236.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF", dwFileAttributes=0x20) returned 0 [0236.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.158] GetLastError () returned 0x5 [0236.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF", dwFileAttributes=0x20) returned 0 [0236.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ec98) returned 1 Thread: id = 8745 os_tid = 0x1bc8 [0236.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf")) returned 0x20 [0236.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF", dwFileAttributes=0x20) returned 0 [0236.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.197] GetLastError () returned 0x5 [0236.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF", dwFileAttributes=0x20) returned 0 [0236.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 8746 os_tid = 0x1bd0 [0236.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf")) returned 0x20 [0236.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF", dwFileAttributes=0x20) returned 0 [0236.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.244] GetLastError () returned 0x5 [0236.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF", dwFileAttributes=0x20) returned 0 [0236.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 8747 os_tid = 0x171c [0236.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf")) returned 0x20 [0238.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF", dwFileAttributes=0x20) returned 0 [0238.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0238.753] GetLastError () returned 0x5 [0238.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF", dwFileAttributes=0x20) returned 0 [0238.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ed20) returned 1 Thread: id = 8748 os_tid = 0x12b8 [0236.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf")) returned 0x20 [0238.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF", dwFileAttributes=0x20) returned 0 [0238.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0238.754] GetLastError () returned 0x5 [0238.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF", dwFileAttributes=0x20) returned 0 [0238.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803eda8) returned 1 Thread: id = 8749 os_tid = 0x4fc [0236.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf")) returned 0x20 [0238.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF", dwFileAttributes=0x20) returned 0 [0238.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0238.529] GetLastError () returned 0x5 [0238.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF", dwFileAttributes=0x20) returned 0 [0238.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ee30) returned 1 Thread: id = 8750 os_tid = 0x1a88 [0236.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf")) returned 0x20 [0238.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF", dwFileAttributes=0x20) returned 0 [0238.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0238.547] GetLastError () returned 0x5 [0238.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF", dwFileAttributes=0x20) returned 0 [0238.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803eeb8) returned 1 Thread: id = 8751 os_tid = 0x1a8c [0236.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf")) returned 0x20 [0240.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF", dwFileAttributes=0x20) returned 0 [0240.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.759] GetLastError () returned 0x5 [0240.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF", dwFileAttributes=0x20) returned 0 [0240.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ef40) returned 1 Thread: id = 8752 os_tid = 0x1a90 [0236.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf")) returned 0x20 [0240.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF", dwFileAttributes=0x20) returned 0 [0240.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.760] GetLastError () returned 0x5 [0240.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF", dwFileAttributes=0x20) returned 0 [0240.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803efc8) returned 1 Thread: id = 8753 os_tid = 0x1a94 [0236.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf")) returned 0x20 [0240.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF", dwFileAttributes=0x20) returned 0 [0240.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.741] GetLastError () returned 0x5 [0240.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF", dwFileAttributes=0x20) returned 0 [0240.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f050) returned 1 Thread: id = 8754 os_tid = 0x1a9c [0236.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf")) returned 0x20 [0240.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF", dwFileAttributes=0x20) returned 0 [0240.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.742] GetLastError () returned 0x5 [0240.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF", dwFileAttributes=0x20) returned 0 [0240.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f0d8) returned 1 Thread: id = 8755 os_tid = 0x1aa4 [0236.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf")) returned 0x20 [0240.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF", dwFileAttributes=0x20) returned 0 [0240.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.743] GetLastError () returned 0x5 [0240.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF", dwFileAttributes=0x20) returned 0 [0240.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f160) returned 1 Thread: id = 8756 os_tid = 0x1bac [0236.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf")) returned 0x20 [0240.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF", dwFileAttributes=0x20) returned 0 [0240.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.744] GetLastError () returned 0x5 [0240.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF", dwFileAttributes=0x20) returned 0 [0240.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f1e8) returned 1 Thread: id = 8757 os_tid = 0x26c0 [0236.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf")) returned 0x20 [0240.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF", dwFileAttributes=0x20) returned 0 [0240.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.745] GetLastError () returned 0x5 [0240.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF", dwFileAttributes=0x20) returned 0 [0240.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f270) returned 1 Thread: id = 8758 os_tid = 0x2980 [0236.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf")) returned 0x20 [0240.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF", dwFileAttributes=0x20) returned 0 [0240.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.751] GetLastError () returned 0x5 [0240.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF", dwFileAttributes=0x20) returned 0 [0240.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f2f8) returned 1 Thread: id = 8759 os_tid = 0xb18 [0236.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf")) returned 0x20 [0240.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF", dwFileAttributes=0x20) returned 0 [0240.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.752] GetLastError () returned 0x5 [0240.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF", dwFileAttributes=0x20) returned 0 [0240.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f380) returned 1 Thread: id = 8760 os_tid = 0x2cbc [0236.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf")) returned 0x20 [0240.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF", dwFileAttributes=0x20) returned 0 [0240.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.761] GetLastError () returned 0x5 [0240.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF", dwFileAttributes=0x20) returned 0 [0240.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f408) returned 1 Thread: id = 8761 os_tid = 0x2cc0 [0236.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf")) returned 0x20 [0240.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF", dwFileAttributes=0x20) returned 0 [0240.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.753] GetLastError () returned 0x5 [0240.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF", dwFileAttributes=0x20) returned 0 [0240.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f490) returned 1 Thread: id = 8762 os_tid = 0x1194 [0236.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf")) returned 0x20 [0240.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF", dwFileAttributes=0x20) returned 0 [0240.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.754] GetLastError () returned 0x5 [0240.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF", dwFileAttributes=0x20) returned 0 [0240.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f518) returned 1 Thread: id = 8763 os_tid = 0x358 [0236.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf")) returned 0x20 [0240.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF", dwFileAttributes=0x20) returned 0 [0240.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.733] GetLastError () returned 0x5 [0240.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF", dwFileAttributes=0x20) returned 0 [0240.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f5a0) returned 1 Thread: id = 8764 os_tid = 0x2ccc [0236.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf")) returned 0x20 [0240.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF", dwFileAttributes=0x20) returned 0 [0240.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.756] GetLastError () returned 0x5 [0240.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF", dwFileAttributes=0x20) returned 0 [0240.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f628) returned 1 Thread: id = 8765 os_tid = 0x2c54 [0236.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf")) returned 0x20 [0240.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF", dwFileAttributes=0x20) returned 0 [0240.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.757] GetLastError () returned 0x5 [0240.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF", dwFileAttributes=0x20) returned 0 [0240.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f6b0) returned 1 Thread: id = 8766 os_tid = 0x1184 [0236.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf")) returned 0x20 [0240.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF", dwFileAttributes=0x20) returned 0 [0240.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.758] GetLastError () returned 0x5 [0240.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF", dwFileAttributes=0x20) returned 0 [0240.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f738) returned 1 Thread: id = 8767 os_tid = 0x2cd0 [0236.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf")) returned 0x20 [0240.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF", dwFileAttributes=0x20) returned 0 [0240.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.733] GetLastError () returned 0x5 [0240.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF", dwFileAttributes=0x20) returned 0 [0240.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f7c0) returned 1 Thread: id = 8768 os_tid = 0x2cd4 [0236.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf")) returned 0x20 [0240.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF", dwFileAttributes=0x20) returned 0 [0240.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.734] GetLastError () returned 0x5 [0240.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF", dwFileAttributes=0x20) returned 0 [0240.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f848) returned 1 Thread: id = 8769 os_tid = 0x2cd8 [0236.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid")) returned 0x20 [0240.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID", dwFileAttributes=0x20) returned 0 [0240.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.735] GetLastError () returned 0x5 [0240.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID", dwFileAttributes=0x20) returned 0 [0240.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f8d0) returned 1 Thread: id = 8770 os_tid = 0x2cdc [0236.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid")) returned 0x20 [0238.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID", dwFileAttributes=0x20) returned 0 [0238.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0239.112] GetLastError () returned 0x5 [0239.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID", dwFileAttributes=0x20) returned 0 [0239.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f958) returned 1 Thread: id = 8771 os_tid = 0x187c [0236.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid")) returned 0x20 [0240.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID", dwFileAttributes=0x20) returned 0 [0240.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.863] GetLastError () returned 0x5 [0240.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID", dwFileAttributes=0x20) returned 0 [0240.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f9e0) returned 1 Thread: id = 8772 os_tid = 0x2b58 [0236.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid")) returned 0x20 [0240.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID", dwFileAttributes=0x20) returned 0 [0240.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.892] GetLastError () returned 0x5 [0240.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID", dwFileAttributes=0x20) returned 0 [0240.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf800) returned 1 Thread: id = 8773 os_tid = 0xa0c [0236.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid")) returned 0x20 [0240.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID", dwFileAttributes=0x20) returned 0 [0240.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.893] GetLastError () returned 0x5 [0240.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID", dwFileAttributes=0x20) returned 0 [0240.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beab8) returned 1 Thread: id = 8774 os_tid = 0xa1c [0236.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid")) returned 0x20 [0240.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID", dwFileAttributes=0x20) returned 0 [0240.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.865] GetLastError () returned 0x5 [0240.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID", dwFileAttributes=0x20) returned 0 [0240.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf558) returned 1 Thread: id = 8775 os_tid = 0x1308 [0236.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid")) returned 0x20 [0240.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID", dwFileAttributes=0x20) returned 0 [0240.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.866] GetLastError () returned 0x5 [0240.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID", dwFileAttributes=0x20) returned 0 [0240.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf910) returned 1 Thread: id = 8776 os_tid = 0x1034 [0236.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid")) returned 0x20 [0240.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID", dwFileAttributes=0x20) returned 0 [0240.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.868] GetLastError () returned 0x5 [0240.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID", dwFileAttributes=0x20) returned 0 [0240.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be898) returned 1 Thread: id = 8777 os_tid = 0x1120 [0236.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid")) returned 0x20 [0240.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID", dwFileAttributes=0x20) returned 0 [0240.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.737] GetLastError () returned 0x5 [0240.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID", dwFileAttributes=0x20) returned 0 [0240.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0080) returned 1 Thread: id = 8778 os_tid = 0x1128 [0236.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid")) returned 0x20 [0240.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID", dwFileAttributes=0x20) returned 0 [0240.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.869] GetLastError () returned 0x5 [0240.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID", dwFileAttributes=0x20) returned 0 [0240.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfff8) returned 1 Thread: id = 8779 os_tid = 0x2c38 [0236.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid")) returned 0x20 [0240.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID", dwFileAttributes=0x20) returned 0 [0240.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.870] GetLastError () returned 0x5 [0240.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID", dwFileAttributes=0x20) returned 0 [0240.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0328) returned 1 Thread: id = 8780 os_tid = 0x2c3c [0236.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid")) returned 0x20 [0240.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID", dwFileAttributes=0x20) returned 0 [0240.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.738] GetLastError () returned 0x5 [0240.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID", dwFileAttributes=0x20) returned 0 [0240.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf338) returned 1 Thread: id = 8781 os_tid = 0x2c40 [0236.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid")) returned 0x20 [0240.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID", dwFileAttributes=0x20) returned 0 [0240.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.739] GetLastError () returned 0x5 [0240.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID", dwFileAttributes=0x20) returned 0 [0240.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfe60) returned 1 Thread: id = 8782 os_tid = 0x2c44 [0236.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid")) returned 0x20 [0240.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID", dwFileAttributes=0x20) returned 0 [0240.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.740] GetLastError () returned 0x5 [0240.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID", dwFileAttributes=0x20) returned 0 [0240.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf4d0) returned 1 Thread: id = 8783 os_tid = 0x2c48 [0236.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf")) returned 0x20 [0240.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF", dwFileAttributes=0x20) returned 0 [0240.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.871] GetLastError () returned 0x5 [0240.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF", dwFileAttributes=0x20) returned 0 [0240.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfaa8) returned 1 Thread: id = 8784 os_tid = 0x2c4c [0236.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf")) returned 0x20 [0240.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF", dwFileAttributes=0x20) returned 0 [0240.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.872] GetLastError () returned 0x5 [0240.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF", dwFileAttributes=0x20) returned 0 [0240.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfbb8) returned 1 Thread: id = 8785 os_tid = 0x2c50 [0236.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf")) returned 0x20 [0240.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF", dwFileAttributes=0x20) returned 0 [0240.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.874] GetLastError () returned 0x5 [0240.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF", dwFileAttributes=0x20) returned 0 [0240.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be5f0) returned 1 Thread: id = 8786 os_tid = 0x14f0 [0236.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf")) returned 0x20 [0240.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF", dwFileAttributes=0x20) returned 0 [0240.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.875] GetLastError () returned 0x5 [0240.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF", dwFileAttributes=0x20) returned 0 [0240.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be9a8) returned 1 Thread: id = 8787 os_tid = 0x1ba4 [0236.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf")) returned 0x20 [0240.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF", dwFileAttributes=0x20) returned 0 [0240.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.914] GetLastError () returned 0x5 [0240.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF", dwFileAttributes=0x20) returned 0 [0240.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfcc8) returned 1 Thread: id = 8788 os_tid = 0x1f70 [0236.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf")) returned 0x20 [0240.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF", dwFileAttributes=0x20) returned 0 [0240.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.877] GetLastError () returned 0x5 [0240.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF", dwFileAttributes=0x20) returned 0 [0240.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bede8) returned 1 Thread: id = 8789 os_tid = 0x1188 [0236.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf")) returned 0x20 [0240.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF", dwFileAttributes=0x20) returned 0 [0240.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.878] GetLastError () returned 0x5 [0240.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF", dwFileAttributes=0x20) returned 0 [0240.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be810) returned 1 Thread: id = 8790 os_tid = 0xb88 [0236.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf")) returned 0x20 [0240.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF", dwFileAttributes=0x20) returned 0 [0240.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.880] GetLastError () returned 0x5 [0240.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF", dwFileAttributes=0x20) returned 0 [0240.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf448) returned 1 Thread: id = 8791 os_tid = 0x190c [0236.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf")) returned 0x20 [0240.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF", dwFileAttributes=0x20) returned 0 [0240.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.881] GetLastError () returned 0x5 [0240.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF", dwFileAttributes=0x20) returned 0 [0240.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c03b0) returned 1 Thread: id = 8792 os_tid = 0x12d8 [0236.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf")) returned 0x20 [0240.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF", dwFileAttributes=0x20) returned 0 [0240.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.882] GetLastError () returned 0x5 [0240.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF", dwFileAttributes=0x20) returned 0 [0240.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be920) returned 1 Thread: id = 8793 os_tid = 0x1910 [0236.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf")) returned 0x20 [0240.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF", dwFileAttributes=0x20) returned 0 [0240.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.883] GetLastError () returned 0x5 [0240.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF", dwFileAttributes=0x20) returned 0 [0240.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfb30) returned 1 Thread: id = 8794 os_tid = 0x1914 [0236.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf")) returned 0x20 [0240.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF", dwFileAttributes=0x20) returned 0 [0240.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.885] GetLastError () returned 0x5 [0240.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF", dwFileAttributes=0x20) returned 0 [0240.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfa20) returned 1 Thread: id = 8795 os_tid = 0x1918 [0236.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf")) returned 0x20 [0240.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF", dwFileAttributes=0x20) returned 0 [0240.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.886] GetLastError () returned 0x5 [0240.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF", dwFileAttributes=0x20) returned 0 [0240.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf1a0) returned 1 Thread: id = 8796 os_tid = 0x191c [0236.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf")) returned 0x20 [0240.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF", dwFileAttributes=0x20) returned 0 [0240.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.887] GetLastError () returned 0x5 [0240.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF", dwFileAttributes=0x20) returned 0 [0240.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfdd8) returned 1 Thread: id = 8797 os_tid = 0x848 [0236.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf")) returned 0x20 [0240.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF", dwFileAttributes=0x20) returned 0 [0240.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.889] GetLastError () returned 0x5 [0240.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF", dwFileAttributes=0x20) returned 0 [0240.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf008) returned 1 Thread: id = 8798 os_tid = 0x2d58 [0236.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf")) returned 0x20 [0240.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF", dwFileAttributes=0x20) returned 0 [0240.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.890] GetLastError () returned 0x5 [0240.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF", dwFileAttributes=0x20) returned 0 [0240.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf090) returned 1 Thread: id = 8799 os_tid = 0x15bc [0236.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf")) returned 0x20 [0240.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF", dwFileAttributes=0x20) returned 0 [0240.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.891] GetLastError () returned 0x5 [0240.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF", dwFileAttributes=0x20) returned 0 [0240.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfd50) returned 1 Thread: id = 8800 os_tid = 0x12a8 [0236.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf")) returned 0x20 [0240.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF", dwFileAttributes=0x20) returned 0 [0240.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.861] GetLastError () returned 0x5 [0240.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF", dwFileAttributes=0x20) returned 0 [0240.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81becd8) returned 1 Thread: id = 8801 os_tid = 0x12ac [0236.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf")) returned 0x20 [0240.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF", dwFileAttributes=0x20) returned 0 [0240.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.844] GetLastError () returned 0x5 [0240.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF", dwFileAttributes=0x20) returned 0 [0240.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf118) returned 1 Thread: id = 8802 os_tid = 0xe20 [0236.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf")) returned 0x20 [0240.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF", dwFileAttributes=0x20) returned 0 [0240.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.862] GetLastError () returned 0x5 [0240.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF", dwFileAttributes=0x20) returned 0 [0240.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf228) returned 1 Thread: id = 8803 os_tid = 0x172c [0236.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf")) returned 0x20 [0240.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF", dwFileAttributes=0x20) returned 0 [0240.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.845] GetLastError () returned 0x5 [0240.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF", dwFileAttributes=0x20) returned 0 [0240.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bee70) returned 1 Thread: id = 8804 os_tid = 0x1730 [0236.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf")) returned 0x20 [0240.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF", dwFileAttributes=0x20) returned 0 [0240.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.846] GetLastError () returned 0x5 [0240.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF", dwFileAttributes=0x20) returned 0 [0240.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bff70) returned 1 Thread: id = 8805 os_tid = 0x12bc [0236.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf")) returned 0x20 [0240.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF", dwFileAttributes=0x20) returned 0 [0240.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.847] GetLastError () returned 0x5 [0240.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF", dwFileAttributes=0x20) returned 0 [0240.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be458) returned 1 Thread: id = 8806 os_tid = 0x1738 [0236.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf")) returned 0x20 [0240.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF", dwFileAttributes=0x20) returned 0 [0240.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.849] GetLastError () returned 0x5 [0240.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF", dwFileAttributes=0x20) returned 0 [0240.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf998) returned 1 Thread: id = 8807 os_tid = 0x173c [0236.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf")) returned 0x20 [0240.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF", dwFileAttributes=0x20) returned 0 [0240.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.850] GetLastError () returned 0x5 [0240.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF", dwFileAttributes=0x20) returned 0 [0240.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bed60) returned 1 Thread: id = 8808 os_tid = 0x12c0 [0236.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf")) returned 0x20 [0240.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF", dwFileAttributes=0x20) returned 0 [0240.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.851] GetLastError () returned 0x5 [0240.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF", dwFileAttributes=0x20) returned 0 [0240.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bebc8) returned 1 Thread: id = 8809 os_tid = 0x12c4 [0236.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf")) returned 0x20 [0240.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF", dwFileAttributes=0x20) returned 0 [0240.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.853] GetLastError () returned 0x5 [0240.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF", dwFileAttributes=0x20) returned 0 [0240.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beef8) returned 1 Thread: id = 8810 os_tid = 0x12c8 [0236.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf")) returned 0x20 [0240.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF", dwFileAttributes=0x20) returned 0 [0240.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.854] GetLastError () returned 0x5 [0240.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF", dwFileAttributes=0x20) returned 0 [0240.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81beb40) returned 1 Thread: id = 8811 os_tid = 0x12cc [0236.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf")) returned 0x20 [0240.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF", dwFileAttributes=0x20) returned 0 [0240.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.854] GetLastError () returned 0x5 [0240.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF", dwFileAttributes=0x20) returned 0 [0240.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0218) returned 1 Thread: id = 8812 os_tid = 0x1754 [0236.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf")) returned 0x20 [0240.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF", dwFileAttributes=0x20) returned 0 [0240.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.855] GetLastError () returned 0x5 [0240.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF", dwFileAttributes=0x20) returned 0 [0240.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf5e0) returned 1 Thread: id = 8813 os_tid = 0x12d0 [0236.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf")) returned 0x20 [0240.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF", dwFileAttributes=0x20) returned 0 [0240.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.857] GetLastError () returned 0x5 [0240.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF", dwFileAttributes=0x20) returned 0 [0240.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0190) returned 1 Thread: id = 8814 os_tid = 0x140c [0236.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf")) returned 0x20 [0240.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF", dwFileAttributes=0x20) returned 0 [0240.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.895] GetLastError () returned 0x5 [0240.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF", dwFileAttributes=0x20) returned 0 [0240.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be678) returned 1 Thread: id = 8815 os_tid = 0x1410 [0236.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf")) returned 0x20 [0240.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF", dwFileAttributes=0x20) returned 0 [0240.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.859] GetLastError () returned 0x5 [0240.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF", dwFileAttributes=0x20) returned 0 [0240.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c02a0) returned 1 Thread: id = 8816 os_tid = 0x1768 [0236.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf")) returned 0x20 [0240.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF", dwFileAttributes=0x20) returned 0 [0240.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.860] GetLastError () returned 0x5 [0240.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF", dwFileAttributes=0x20) returned 0 [0240.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be568) returned 1 Thread: id = 8817 os_tid = 0x176c [0236.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf")) returned 0x20 [0240.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF", dwFileAttributes=0x20) returned 0 [0240.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.830] GetLastError () returned 0x5 [0240.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF", dwFileAttributes=0x20) returned 0 [0240.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf668) returned 1 Thread: id = 8818 os_tid = 0x1770 [0236.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf")) returned 0x20 [0240.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF", dwFileAttributes=0x20) returned 0 [0240.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.831] GetLastError () returned 0x5 [0240.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF", dwFileAttributes=0x20) returned 0 [0240.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf888) returned 1 Thread: id = 8819 os_tid = 0x1774 [0236.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf")) returned 0x20 [0240.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF", dwFileAttributes=0x20) returned 0 [0240.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.832] GetLastError () returned 0x5 [0240.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF", dwFileAttributes=0x20) returned 0 [0240.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf2b0) returned 1 Thread: id = 8820 os_tid = 0x2b80 [0236.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf")) returned 0x20 [0240.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF", dwFileAttributes=0x20) returned 0 [0240.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.834] GetLastError () returned 0x5 [0240.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF", dwFileAttributes=0x20) returned 0 [0240.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf778) returned 1 Thread: id = 8821 os_tid = 0x2b84 [0236.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf")) returned 0x20 [0240.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF", dwFileAttributes=0x20) returned 0 [0240.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.834] GetLastError () returned 0x5 [0240.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF", dwFileAttributes=0x20) returned 0 [0240.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bef80) returned 1 Thread: id = 8822 os_tid = 0x2e68 [0236.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf")) returned 0x20 [0240.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", dwFileAttributes=0x20) returned 0 [0240.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.835] GetLastError () returned 0x5 [0240.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", dwFileAttributes=0x20) returned 0 [0240.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bf6f0) returned 1 Thread: id = 8823 os_tid = 0x2e6c [0236.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf")) returned 0x20 [0240.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF", dwFileAttributes=0x20) returned 0 [0240.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.836] GetLastError () returned 0x5 [0240.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF", dwFileAttributes=0x20) returned 0 [0240.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bfc40) returned 1 Thread: id = 8824 os_tid = 0x2e78 [0236.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf")) returned 0x20 [0240.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF", dwFileAttributes=0x20) returned 0 [0240.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.837] GetLastError () returned 0x5 [0240.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF", dwFileAttributes=0x20) returned 0 [0240.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81c0108) returned 1 Thread: id = 8825 os_tid = 0x2e7c [0236.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf")) returned 0x20 [0240.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF", dwFileAttributes=0x20) returned 0 [0240.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.838] GetLastError () returned 0x5 [0240.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF", dwFileAttributes=0x20) returned 0 [0240.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81be4e0) returned 1 Thread: id = 8826 os_tid = 0x2e80 [0236.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf")) returned 0x20 [0240.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF", dwFileAttributes=0x20) returned 0 [0240.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.839] GetLastError () returned 0x5 [0240.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF", dwFileAttributes=0x20) returned 0 [0240.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bea30) returned 1 Thread: id = 8827 os_tid = 0x2e84 [0236.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf")) returned 0x20 [0240.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF", dwFileAttributes=0x20) returned 0 [0240.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.840] GetLastError () returned 0x5 [0240.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF", dwFileAttributes=0x20) returned 0 [0240.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81bec50) returned 1 Thread: id = 8828 os_tid = 0x2e88 [0236.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf")) returned 0x20 [0240.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF", dwFileAttributes=0x20) returned 0 [0240.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.876] GetLastError () returned 0x5 [0240.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF", dwFileAttributes=0x20) returned 0 [0240.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ec98) returned 1 Thread: id = 8829 os_tid = 0x2e8c [0236.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf")) returned 0x20 [0240.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF", dwFileAttributes=0x20) returned 0 [0240.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.842] GetLastError () returned 0x5 [0240.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF", dwFileAttributes=0x20) returned 0 [0240.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ec10) returned 1 Thread: id = 8830 os_tid = 0x2ea0 [0236.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf")) returned 0x20 [0240.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF", dwFileAttributes=0x20) returned 0 [0240.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.843] GetLastError () returned 0x5 [0240.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF", dwFileAttributes=0x20) returned 0 [0240.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803eb88) returned 1 Thread: id = 8831 os_tid = 0x2c60 [0236.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf")) returned 0x20 [0240.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF", dwFileAttributes=0x20) returned 0 [0240.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.858] GetLastError () returned 0x5 [0240.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF", dwFileAttributes=0x20) returned 0 [0240.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803eb00) returned 1 Thread: id = 8832 os_tid = 0x2ee0 [0236.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf")) returned 0x20 [0238.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF", dwFileAttributes=0x20) returned 0 [0238.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0238.351] GetLastError () returned 0x5 [0238.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF", dwFileAttributes=0x20) returned 0 [0238.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ea78) returned 1 Thread: id = 8833 os_tid = 0x2ee4 [0236.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf")) returned 0x20 [0240.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF", dwFileAttributes=0x20) returned 0 [0240.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.813] GetLastError () returned 0x5 [0240.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF", dwFileAttributes=0x20) returned 0 [0240.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e9f0) returned 1 Thread: id = 8834 os_tid = 0x2ee8 [0236.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf")) returned 0x20 [0240.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF", dwFileAttributes=0x20) returned 0 [0240.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.814] GetLastError () returned 0x5 [0240.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF", dwFileAttributes=0x20) returned 0 [0240.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e968) returned 1 Thread: id = 8835 os_tid = 0x2eec [0236.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf")) returned 0x20 [0240.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF", dwFileAttributes=0x20) returned 0 [0240.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.826] GetLastError () returned 0x5 [0240.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF", dwFileAttributes=0x20) returned 0 [0240.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e8e0) returned 1 Thread: id = 8836 os_tid = 0x2ef0 [0236.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf")) returned 0x20 [0240.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF", dwFileAttributes=0x20) returned 0 [0240.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.815] GetLastError () returned 0x5 [0240.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF", dwFileAttributes=0x20) returned 0 [0240.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e858) returned 1 Thread: id = 8837 os_tid = 0x2ef4 [0236.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf")) returned 0x20 [0240.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF", dwFileAttributes=0x20) returned 0 [0240.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.816] GetLastError () returned 0x5 [0240.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF", dwFileAttributes=0x20) returned 0 [0240.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803e7d0) returned 1 Thread: id = 8838 os_tid = 0x2ef8 [0236.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf")) returned 0x20 [0240.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF", dwFileAttributes=0x20) returned 0 [0240.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.817] GetLastError () returned 0x5 [0240.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF", dwFileAttributes=0x20) returned 0 [0240.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803fa68) returned 1 Thread: id = 8839 os_tid = 0x2efc [0236.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf")) returned 0x20 [0240.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF", dwFileAttributes=0x20) returned 0 [0240.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.828] GetLastError () returned 0x5 [0240.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF", dwFileAttributes=0x20) returned 0 [0240.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803faf0) returned 1 Thread: id = 8840 os_tid = 0x2f00 [0236.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf")) returned 0x20 [0240.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF", dwFileAttributes=0x20) returned 0 [0240.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.818] GetLastError () returned 0x5 [0240.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF", dwFileAttributes=0x20) returned 0 [0240.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803fb78) returned 1 Thread: id = 8841 os_tid = 0x2f04 [0236.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf")) returned 0x20 [0240.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF", dwFileAttributes=0x20) returned 0 [0240.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.819] GetLastError () returned 0x5 [0240.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF", dwFileAttributes=0x20) returned 0 [0240.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803fc00) returned 1 Thread: id = 8842 os_tid = 0x2f08 [0236.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf")) returned 0x20 [0240.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF", dwFileAttributes=0x20) returned 0 [0240.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.821] GetLastError () returned 0x5 [0240.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF", dwFileAttributes=0x20) returned 0 [0240.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803fc88) returned 1 Thread: id = 8843 os_tid = 0x2f0c [0236.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf")) returned 0x20 [0240.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF", dwFileAttributes=0x20) returned 0 [0240.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.822] GetLastError () returned 0x5 [0240.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF", dwFileAttributes=0x20) returned 0 [0240.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803fd10) returned 1 Thread: id = 8844 os_tid = 0x16e8 [0236.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf")) returned 0x20 [0240.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF", dwFileAttributes=0x20) returned 0 [0240.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.829] GetLastError () returned 0x5 [0240.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF", dwFileAttributes=0x20) returned 0 [0240.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803fd98) returned 1 Thread: id = 8845 os_tid = 0x10f8 [0236.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf")) returned 0x20 [0240.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF", dwFileAttributes=0x20) returned 0 [0240.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.823] GetLastError () returned 0x5 [0240.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF", dwFileAttributes=0x20) returned 0 [0240.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803fe20) returned 1 Thread: id = 8846 os_tid = 0x1240 [0236.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf")) returned 0x20 [0240.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF", dwFileAttributes=0x20) returned 0 [0240.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.824] GetLastError () returned 0x5 [0240.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF", dwFileAttributes=0x20) returned 0 [0240.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803fea8) returned 1 Thread: id = 8847 os_tid = 0x1bd4 [0236.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf")) returned 0x20 [0240.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF", dwFileAttributes=0x20) returned 0 [0240.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.788] GetLastError () returned 0x5 [0240.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF", dwFileAttributes=0x20) returned 0 [0240.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ff30) returned 1 Thread: id = 8848 os_tid = 0x2218 [0236.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf")) returned 0x20 [0240.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF", dwFileAttributes=0x20) returned 0 [0240.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.789] GetLastError () returned 0x5 [0240.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF", dwFileAttributes=0x20) returned 0 [0240.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ffb8) returned 1 Thread: id = 8849 os_tid = 0x2340 [0236.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf")) returned 0x20 [0240.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF", dwFileAttributes=0x20) returned 0 [0240.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.790] GetLastError () returned 0x5 [0240.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF", dwFileAttributes=0x20) returned 0 [0240.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040040) returned 1 Thread: id = 8850 os_tid = 0x1b20 [0236.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf")) returned 0x20 [0240.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF", dwFileAttributes=0x20) returned 0 [0240.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.764] GetLastError () returned 0x5 [0240.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF", dwFileAttributes=0x20) returned 0 [0240.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80400c8) returned 1 Thread: id = 8851 os_tid = 0x1b24 [0236.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf")) returned 0x20 [0240.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF", dwFileAttributes=0x20) returned 0 [0240.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.765] GetLastError () returned 0x5 [0240.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF", dwFileAttributes=0x20) returned 0 [0240.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040150) returned 1 Thread: id = 8852 os_tid = 0x1b28 [0236.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf")) returned 0x20 [0240.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF", dwFileAttributes=0x20) returned 0 [0240.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.766] GetLastError () returned 0x5 [0240.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF", dwFileAttributes=0x20) returned 0 [0240.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80401d8) returned 1 Thread: id = 8853 os_tid = 0x1b30 [0236.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf")) returned 0x20 [0240.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF", dwFileAttributes=0x20) returned 0 [0240.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.767] GetLastError () returned 0x5 [0240.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF", dwFileAttributes=0x20) returned 0 [0240.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040260) returned 1 Thread: id = 8854 os_tid = 0x1bc0 [0236.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf")) returned 0x20 [0240.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF", dwFileAttributes=0x20) returned 0 [0240.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.768] GetLastError () returned 0x5 [0240.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF", dwFileAttributes=0x20) returned 0 [0240.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80402e8) returned 1 Thread: id = 8855 os_tid = 0x1d7c [0236.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf")) returned 0x20 [0240.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF", dwFileAttributes=0x20) returned 0 [0240.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.769] GetLastError () returned 0x5 [0240.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF", dwFileAttributes=0x20) returned 0 [0240.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040370) returned 1 Thread: id = 8856 os_tid = 0x1ec4 [0236.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf")) returned 0x20 [0240.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF", dwFileAttributes=0x20) returned 0 [0240.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.771] GetLastError () returned 0x5 [0240.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF", dwFileAttributes=0x20) returned 0 [0240.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80403f8) returned 1 Thread: id = 8857 os_tid = 0x1ecc [0236.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf")) returned 0x20 [0240.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF", dwFileAttributes=0x20) returned 0 [0240.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.791] GetLastError () returned 0x5 [0240.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF", dwFileAttributes=0x20) returned 0 [0240.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040480) returned 1 Thread: id = 8858 os_tid = 0x1ed0 [0236.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf")) returned 0x20 [0240.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF", dwFileAttributes=0x20) returned 0 [0240.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.772] GetLastError () returned 0x5 [0240.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF", dwFileAttributes=0x20) returned 0 [0240.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040508) returned 1 Thread: id = 8859 os_tid = 0x220c [0236.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf")) returned 0x20 [0240.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF", dwFileAttributes=0x20) returned 0 [0240.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.792] GetLastError () returned 0x5 [0240.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF", dwFileAttributes=0x20) returned 0 [0240.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040590) returned 1 Thread: id = 8860 os_tid = 0x2864 [0236.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf")) returned 0x20 [0240.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF", dwFileAttributes=0x20) returned 0 [0240.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.825] GetLastError () returned 0x5 [0240.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF", dwFileAttributes=0x20) returned 0 [0240.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040618) returned 1 Thread: id = 8861 os_tid = 0x201c [0236.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf")) returned 0x20 [0240.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF", dwFileAttributes=0x20) returned 0 [0240.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.794] GetLastError () returned 0x5 [0240.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF", dwFileAttributes=0x20) returned 0 [0240.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80406a0) returned 1 Thread: id = 8862 os_tid = 0x2020 [0236.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf")) returned 0x20 [0240.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF", dwFileAttributes=0x20) returned 0 [0240.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.795] GetLastError () returned 0x5 [0240.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF", dwFileAttributes=0x20) returned 0 [0240.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040728) returned 1 Thread: id = 8863 os_tid = 0x2ab4 [0236.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif")) returned 0x20 [0240.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF", dwFileAttributes=0x20) returned 0 [0240.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.773] GetLastError () returned 0x5 [0240.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF", dwFileAttributes=0x20) returned 0 [0240.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80407b0) returned 1 Thread: id = 8864 os_tid = 0x141c [0236.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp")) returned 0x20 [0240.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP", dwFileAttributes=0x20) returned 0 [0240.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.774] GetLastError () returned 0x5 [0240.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP", dwFileAttributes=0x20) returned 0 [0240.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040838) returned 1 Thread: id = 8865 os_tid = 0x1eb4 [0236.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp")) returned 0x20 [0240.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP", dwFileAttributes=0x20) returned 0 [0240.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.775] GetLastError () returned 0x5 [0240.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP", dwFileAttributes=0x20) returned 0 [0240.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80408c0) returned 1 Thread: id = 8866 os_tid = 0x1eb8 [0236.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg")) returned 0x20 [0240.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG", dwFileAttributes=0x20) returned 0 [0240.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.796] GetLastError () returned 0x5 [0240.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG", dwFileAttributes=0x20) returned 0 [0240.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040948) returned 1 Thread: id = 8867 os_tid = 0x1ebc [0236.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg")) returned 0x20 [0240.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG", dwFileAttributes=0x20) returned 0 [0240.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.809] GetLastError () returned 0x5 [0240.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG", dwFileAttributes=0x20) returned 0 [0240.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80409d0) returned 1 Thread: id = 8868 os_tid = 0x1ec0 [0236.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg")) returned 0x20 [0240.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG", dwFileAttributes=0x20) returned 0 [0240.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.797] GetLastError () returned 0x5 [0240.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG", dwFileAttributes=0x20) returned 0 [0240.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040a58) returned 1 Thread: id = 8869 os_tid = 0x1ec8 [0236.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg")) returned 0x20 [0240.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG", dwFileAttributes=0x20) returned 0 [0240.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.777] GetLastError () returned 0x5 [0240.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG", dwFileAttributes=0x20) returned 0 [0240.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040ae0) returned 1 Thread: id = 8870 os_tid = 0x1fbc [0236.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp")) returned 0x20 [0240.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP", dwFileAttributes=0x20) returned 0 [0240.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.798] GetLastError () returned 0x5 [0240.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP", dwFileAttributes=0x20) returned 0 [0240.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040b68) returned 1 Thread: id = 8871 os_tid = 0x12dc [0236.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp")) returned 0x20 [0240.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP", dwFileAttributes=0x20) returned 0 [0240.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.778] GetLastError () returned 0x5 [0240.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP", dwFileAttributes=0x20) returned 0 [0240.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040bf0) returned 1 Thread: id = 8872 os_tid = 0x1288 [0236.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg")) returned 0x20 [0240.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG", dwFileAttributes=0x20) returned 0 [0240.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.779] GetLastError () returned 0x5 [0240.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG", dwFileAttributes=0x20) returned 0 [0240.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040c78) returned 1 Thread: id = 8873 os_tid = 0x142c [0236.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp")) returned 0x20 [0240.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP", dwFileAttributes=0x20) returned 0 [0240.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.763] GetLastError () returned 0x5 [0240.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP", dwFileAttributes=0x20) returned 0 [0240.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040d00) returned 1 Thread: id = 8874 os_tid = 0x1f48 [0236.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif")) returned 0x20 [0240.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF", dwFileAttributes=0x20) returned 0 [0240.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.799] GetLastError () returned 0x5 [0240.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF", dwFileAttributes=0x20) returned 0 [0240.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040d88) returned 1 Thread: id = 8875 os_tid = 0x1e84 [0236.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp")) returned 0x20 [0240.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP", dwFileAttributes=0x20) returned 0 [0240.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.780] GetLastError () returned 0x5 [0240.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP", dwFileAttributes=0x20) returned 0 [0240.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040e10) returned 1 Thread: id = 8876 os_tid = 0x1c04 [0236.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp")) returned 0x20 [0240.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP", dwFileAttributes=0x20) returned 0 [0240.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.781] GetLastError () returned 0x5 [0240.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP", dwFileAttributes=0x20) returned 0 [0240.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040e98) returned 1 Thread: id = 8877 os_tid = 0x1c0c [0236.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp")) returned 0x20 [0240.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP", dwFileAttributes=0x20) returned 0 [0240.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.782] GetLastError () returned 0x5 [0240.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP", dwFileAttributes=0x20) returned 0 [0240.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040f20) returned 1 Thread: id = 8878 os_tid = 0x1c10 [0236.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp")) returned 0x20 [0240.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", dwFileAttributes=0x20) returned 0 [0240.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.784] GetLastError () returned 0x5 [0240.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", dwFileAttributes=0x20) returned 0 [0240.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8040fa8) returned 1 Thread: id = 8879 os_tid = 0x1784 [0236.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp")) returned 0x20 [0240.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP", dwFileAttributes=0x20) returned 0 [0240.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.785] GetLastError () returned 0x5 [0240.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP", dwFileAttributes=0x20) returned 0 [0240.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041030) returned 1 Thread: id = 8880 os_tid = 0x1788 [0236.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg")) returned 0x20 [0240.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG", dwFileAttributes=0x20) returned 0 [0240.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.787] GetLastError () returned 0x5 [0240.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG", dwFileAttributes=0x20) returned 0 [0240.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80410b8) returned 1 Thread: id = 8881 os_tid = 0x178c [0237.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg")) returned 0x20 [0240.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG", dwFileAttributes=0x20) returned 0 [0240.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.749] GetLastError () returned 0x5 [0240.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG", dwFileAttributes=0x20) returned 0 [0240.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041140) returned 1 Thread: id = 8882 os_tid = 0x1cbc [0237.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp")) returned 0x20 [0240.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP", dwFileAttributes=0x20) returned 0 [0240.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.750] GetLastError () returned 0x5 [0240.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP", dwFileAttributes=0x20) returned 0 [0240.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80411c8) returned 1 Thread: id = 8883 os_tid = 0x186c [0237.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp")) returned 0x20 [0240.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP", dwFileAttributes=0x20) returned 0 [0240.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.751] GetLastError () returned 0x5 [0240.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP", dwFileAttributes=0x20) returned 0 [0240.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041250) returned 1 Thread: id = 8884 os_tid = 0x368 [0237.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg")) returned 0x20 [0240.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG", dwFileAttributes=0x20) returned 0 [0240.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.728] GetLastError () returned 0x5 [0240.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG", dwFileAttributes=0x20) returned 0 [0240.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80412d8) returned 1 Thread: id = 8885 os_tid = 0x1538 [0237.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp")) returned 0x20 [0240.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP", dwFileAttributes=0x20) returned 0 [0240.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.793] GetLastError () returned 0x5 [0240.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP", dwFileAttributes=0x20) returned 0 [0240.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041360) returned 1 Thread: id = 8886 os_tid = 0xb94 [0237.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp")) returned 0x20 [0240.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP", dwFileAttributes=0x20) returned 0 [0240.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.730] GetLastError () returned 0x5 [0240.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP", dwFileAttributes=0x20) returned 0 [0240.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80413e8) returned 1 Thread: id = 8887 os_tid = 0x153c [0237.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg")) returned 0x20 [0240.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG", dwFileAttributes=0x20) returned 0 [0240.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.731] GetLastError () returned 0x5 [0240.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG", dwFileAttributes=0x20) returned 0 [0240.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041470) returned 1 Thread: id = 8888 os_tid = 0x1cb8 [0237.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp")) returned 0x20 [0240.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP", dwFileAttributes=0x20) returned 0 [0240.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.731] GetLastError () returned 0x5 [0240.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP", dwFileAttributes=0x20) returned 0 [0240.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80414f8) returned 1 Thread: id = 8889 os_tid = 0x1bfc [0237.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp")) returned 0x20 [0240.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP", dwFileAttributes=0x20) returned 0 [0240.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.934] GetLastError () returned 0x5 [0240.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP", dwFileAttributes=0x20) returned 0 [0240.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041580) returned 1 Thread: id = 8890 os_tid = 0x1430 [0237.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp")) returned 0x20 [0240.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP", dwFileAttributes=0x20) returned 0 [0240.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.761] GetLastError () returned 0x5 [0240.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP", dwFileAttributes=0x20) returned 0 [0240.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041608) returned 1 Thread: id = 8891 os_tid = 0x1dc0 [0237.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp")) returned 0x20 [0240.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP", dwFileAttributes=0x20) returned 0 [0240.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.935] GetLastError () returned 0x5 [0240.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP", dwFileAttributes=0x20) returned 0 [0240.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041690) returned 1 Thread: id = 8892 os_tid = 0x1dc8 [0237.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp")) returned 0x20 [0240.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP", dwFileAttributes=0x20) returned 0 [0240.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.936] GetLastError () returned 0x5 [0240.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP", dwFileAttributes=0x20) returned 0 [0240.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041718) returned 1 Thread: id = 8893 os_tid = 0x1dfc [0237.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp")) returned 0x20 [0240.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP", dwFileAttributes=0x20) returned 0 [0240.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.762] GetLastError () returned 0x5 [0240.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP", dwFileAttributes=0x20) returned 0 [0240.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80417a0) returned 1 Thread: id = 8894 os_tid = 0x1f40 [0237.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg")) returned 0x20 [0240.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG", dwFileAttributes=0x20) returned 0 [0240.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.938] GetLastError () returned 0x5 [0240.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG", dwFileAttributes=0x20) returned 0 [0240.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041828) returned 1 Thread: id = 8895 os_tid = 0x1428 [0237.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp")) returned 0x20 [0240.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP", dwFileAttributes=0x20) returned 0 [0240.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.939] GetLastError () returned 0x5 [0240.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP", dwFileAttributes=0x20) returned 0 [0240.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80418b0) returned 1 Thread: id = 8896 os_tid = 0x1df8 [0237.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp")) returned 0x20 [0240.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP", dwFileAttributes=0x20) returned 0 [0240.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.941] GetLastError () returned 0x5 [0240.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP", dwFileAttributes=0x20) returned 0 [0240.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041938) returned 1 Thread: id = 8897 os_tid = 0x1f44 [0237.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp")) returned 0x20 [0240.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", dwFileAttributes=0x20) returned 0 [0240.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.943] GetLastError () returned 0x5 [0240.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", dwFileAttributes=0x20) returned 0 [0240.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80419c0) returned 1 Thread: id = 8898 os_tid = 0x1bf8 [0237.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp")) returned 0x20 [0240.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP", dwFileAttributes=0x20) returned 0 [0240.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.776] GetLastError () returned 0x5 [0240.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP", dwFileAttributes=0x20) returned 0 [0240.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041a48) returned 1 Thread: id = 8899 os_tid = 0x12e8 [0237.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg")) returned 0x20 [0240.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG", dwFileAttributes=0x20) returned 0 [0240.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.747] GetLastError () returned 0x5 [0240.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG", dwFileAttributes=0x20) returned 0 [0240.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041ad0) returned 1 Thread: id = 8900 os_tid = 0x1dc4 [0237.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif")) returned 0x20 [0240.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF", dwFileAttributes=0x20) returned 0 [0240.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.748] GetLastError () returned 0x5 [0240.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF", dwFileAttributes=0x20) returned 0 [0240.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041b58) returned 1 Thread: id = 8901 os_tid = 0x2908 [0237.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp")) returned 0x20 [0240.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP", dwFileAttributes=0x20) returned 0 [0240.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.746] GetLastError () returned 0x5 [0240.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP", dwFileAttributes=0x20) returned 0 [0240.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041be0) returned 1 Thread: id = 8902 os_tid = 0x858 [0237.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp")) returned 0x20 [0240.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP", dwFileAttributes=0x20) returned 0 [0240.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.736] GetLastError () returned 0x5 [0240.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP", dwFileAttributes=0x20) returned 0 [0240.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041c68) returned 1 Thread: id = 8903 os_tid = 0x2bac [0237.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif")) returned 0x20 [0240.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF", dwFileAttributes=0x20) returned 0 [0240.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.800] GetLastError () returned 0x5 [0240.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF", dwFileAttributes=0x20) returned 0 [0240.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041cf0) returned 1 Thread: id = 8904 os_tid = 0x2bb0 [0237.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp")) returned 0x20 [0240.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP", dwFileAttributes=0x20) returned 0 [0240.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.801] GetLastError () returned 0x5 [0240.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP", dwFileAttributes=0x20) returned 0 [0240.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041d78) returned 1 Thread: id = 8905 os_tid = 0x2bb8 [0237.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif")) returned 0x20 [0240.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF", dwFileAttributes=0x20) returned 0 [0240.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.802] GetLastError () returned 0x5 [0240.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF", dwFileAttributes=0x20) returned 0 [0240.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041e00) returned 1 Thread: id = 8906 os_tid = 0x2e90 [0237.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp")) returned 0x20 [0240.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP", dwFileAttributes=0x20) returned 0 [0240.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.803] GetLastError () returned 0x5 [0240.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP", dwFileAttributes=0x20) returned 0 [0240.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041e88) returned 1 Thread: id = 8907 os_tid = 0x2904 [0237.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif")) returned 0x20 [0240.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF", dwFileAttributes=0x20) returned 0 [0240.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.804] GetLastError () returned 0x5 [0240.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF", dwFileAttributes=0x20) returned 0 [0240.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041f10) returned 1 Thread: id = 8908 os_tid = 0x1250 [0237.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif")) returned 0x20 [0240.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF", dwFileAttributes=0x20) returned 0 [0240.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.805] GetLastError () returned 0x5 [0240.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF", dwFileAttributes=0x20) returned 0 [0240.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8041f98) returned 1 Thread: id = 8909 os_tid = 0x290c [0237.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp")) returned 0x20 [0240.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP", dwFileAttributes=0x20) returned 0 [0240.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.806] GetLastError () returned 0x5 [0240.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP", dwFileAttributes=0x20) returned 0 [0240.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8042020) returned 1 Thread: id = 8910 os_tid = 0x291c [0237.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif")) returned 0x20 [0240.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF", dwFileAttributes=0x20) returned 0 [0240.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.808] GetLastError () returned 0x5 [0240.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF", dwFileAttributes=0x20) returned 0 [0240.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80420a8) returned 1 Thread: id = 8911 os_tid = 0x2b34 [0237.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp")) returned 0x20 [0240.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP", dwFileAttributes=0x20) returned 0 [0240.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.841] GetLastError () returned 0x5 [0240.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP", dwFileAttributes=0x20) returned 0 [0240.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8042130) returned 1 Thread: id = 8912 os_tid = 0x2b38 [0237.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif")) returned 0x20 [0240.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF", dwFileAttributes=0x20) returned 0 [0240.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.810] GetLastError () returned 0x5 [0240.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF", dwFileAttributes=0x20) returned 0 [0240.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80421b8) returned 1 Thread: id = 8913 os_tid = 0x2b48 [0237.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp")) returned 0x20 [0240.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP", dwFileAttributes=0x20) returned 0 [0240.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.811] GetLastError () returned 0x5 [0240.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP", dwFileAttributes=0x20) returned 0 [0240.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8042240) returned 1 Thread: id = 8914 os_tid = 0x1118 [0237.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif")) returned 0x20 [0240.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF", dwFileAttributes=0x20) returned 0 [0240.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.812] GetLastError () returned 0x5 [0240.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF", dwFileAttributes=0x20) returned 0 [0240.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80422c8) returned 1 Thread: id = 8915 os_tid = 0x111c [0237.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp")) returned 0x20 [0240.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP", dwFileAttributes=0x20) returned 0 [0240.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.923] GetLastError () returned 0x5 [0240.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP", dwFileAttributes=0x20) returned 0 [0240.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8042350) returned 1 Thread: id = 8916 os_tid = 0x1364 [0237.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif")) returned 0x20 [0240.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF", dwFileAttributes=0x20) returned 0 [0240.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.922] GetLastError () returned 0x5 [0240.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF", dwFileAttributes=0x20) returned 0 [0240.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80423d8) returned 1 Thread: id = 8917 os_tid = 0x1368 [0237.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp")) returned 0x20 [0240.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP", dwFileAttributes=0x20) returned 0 [0240.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.920] GetLastError () returned 0x5 [0240.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP", dwFileAttributes=0x20) returned 0 [0240.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8042460) returned 1 Thread: id = 8918 os_tid = 0x1144 [0237.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp")) returned 0x20 [0240.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP", dwFileAttributes=0x20) returned 0 [0240.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.905] GetLastError () returned 0x5 [0240.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP", dwFileAttributes=0x20) returned 0 [0240.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80424e8) returned 1 Thread: id = 8919 os_tid = 0x1164 [0237.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp")) returned 0x20 [0240.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP", dwFileAttributes=0x20) returned 0 [0240.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.903] GetLastError () returned 0x5 [0240.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP", dwFileAttributes=0x20) returned 0 [0240.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8042570) returned 1 Thread: id = 8920 os_tid = 0x1168 [0237.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp")) returned 0x20 [0240.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP", dwFileAttributes=0x20) returned 0 [0240.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.917] GetLastError () returned 0x5 [0240.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP", dwFileAttributes=0x20) returned 0 [0240.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80425f8) returned 1 Thread: id = 8921 os_tid = 0x11d8 [0237.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp")) returned 0x20 [0240.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP", dwFileAttributes=0x20) returned 0 [0240.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.902] GetLastError () returned 0x5 [0240.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP", dwFileAttributes=0x20) returned 0 [0240.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8042680) returned 1 Thread: id = 8922 os_tid = 0x14e4 [0237.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp")) returned 0x20 [0240.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP", dwFileAttributes=0x20) returned 0 [0240.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.901] GetLastError () returned 0x5 [0240.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP", dwFileAttributes=0x20) returned 0 [0240.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8042708) returned 1 Thread: id = 8923 os_tid = 0x116c [0237.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp")) returned 0x20 [0240.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP", dwFileAttributes=0x20) returned 0 [0240.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.900] GetLastError () returned 0x5 [0240.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP", dwFileAttributes=0x20) returned 0 [0240.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f528) returned 1 Thread: id = 8924 os_tid = 0x2bbc [0237.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg")) returned 0x20 [0240.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG", dwFileAttributes=0x20) returned 0 [0240.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.899] GetLastError () returned 0x5 [0240.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG", dwFileAttributes=0x20) returned 0 [0240.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc10) returned 1 Thread: id = 8925 os_tid = 0x14ec [0237.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg")) returned 0x20 [0240.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG", dwFileAttributes=0x20) returned 0 [0240.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.897] GetLastError () returned 0x5 [0240.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG", dwFileAttributes=0x20) returned 0 [0240.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f312e8) returned 1 Thread: id = 8926 os_tid = 0x11e8 [0237.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg")) returned 0x20 [0240.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG", dwFileAttributes=0x20) returned 0 [0240.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.896] GetLastError () returned 0x5 [0240.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG", dwFileAttributes=0x20) returned 0 [0240.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f8e0) returned 1 Thread: id = 8927 os_tid = 0x11ec [0237.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif")) returned 0x20 [0239.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF", dwFileAttributes=0x20) returned 0 [0239.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0239.825] GetLastError () returned 0x5 [0239.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF", dwFileAttributes=0x20) returned 0 [0239.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f306b0) returned 1 Thread: id = 8928 os_tid = 0x1170 [0237.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg")) returned 0x20 [0240.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG", dwFileAttributes=0x20) returned 0 [0240.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.916] GetLastError () returned 0x5 [0240.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG", dwFileAttributes=0x20) returned 0 [0240.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f968) returned 1 Thread: id = 8929 os_tid = 0x1174 [0237.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp")) returned 0x20 [0240.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP", dwFileAttributes=0x20) returned 0 [0240.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.915] GetLastError () returned 0x5 [0240.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP", dwFileAttributes=0x20) returned 0 [0240.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f311d8) returned 1 Thread: id = 8930 os_tid = 0x2bc0 [0237.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp")) returned 0x20 [0240.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP", dwFileAttributes=0x20) returned 0 [0240.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.912] GetLastError () returned 0x5 [0240.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP", dwFileAttributes=0x20) returned 0 [0240.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31040) returned 1 Thread: id = 8931 os_tid = 0x2bc4 [0237.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif")) returned 0x20 [0240.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF", dwFileAttributes=0x20) returned 0 [0240.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.911] GetLastError () returned 0x5 [0240.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF", dwFileAttributes=0x20) returned 0 [0240.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30e20) returned 1 Thread: id = 8932 os_tid = 0x1320 [0237.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg")) returned 0x20 [0240.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG", dwFileAttributes=0x20) returned 0 [0240.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.909] GetLastError () returned 0x5 [0240.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG", dwFileAttributes=0x20) returned 0 [0240.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30a68) returned 1 Thread: id = 8933 os_tid = 0x2e50 [0237.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg")) returned 0x20 [0240.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG", dwFileAttributes=0x20) returned 0 [0240.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.908] GetLastError () returned 0x5 [0240.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG", dwFileAttributes=0x20) returned 0 [0240.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c88) returned 1 Thread: id = 8934 os_tid = 0x608 [0237.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg")) returned 0x20 [0240.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG", dwFileAttributes=0x20) returned 0 [0240.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.727] GetLastError () returned 0x5 [0240.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG", dwFileAttributes=0x20) returned 0 [0240.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fb00) returned 1 Thread: id = 8935 os_tid = 0x1380 [0237.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg")) returned 0x20 [0240.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG", dwFileAttributes=0x20) returned 0 [0240.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.907] GetLastError () returned 0x5 [0240.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG", dwFileAttributes=0x20) returned 0 [0240.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30380) returned 1 Thread: id = 8936 os_tid = 0x1384 [0237.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg")) returned 0x20 [0240.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG", dwFileAttributes=0x20) returned 0 [0240.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.726] GetLastError () returned 0x5 [0240.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG", dwFileAttributes=0x20) returned 0 [0240.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f300d8) returned 1 Thread: id = 8937 os_tid = 0x1224 [0237.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg")) returned 0x20 [0240.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG", dwFileAttributes=0x20) returned 0 [0240.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.725] GetLastError () returned 0x5 [0240.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG", dwFileAttributes=0x20) returned 0 [0240.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fda8) returned 1 Thread: id = 8938 os_tid = 0xaf0 [0237.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg")) returned 0x20 [0240.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG", dwFileAttributes=0x20) returned 0 [0240.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.724] GetLastError () returned 0x5 [0240.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG", dwFileAttributes=0x20) returned 0 [0240.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30c00) returned 1 Thread: id = 8939 os_tid = 0xf70 [0237.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf")) returned 0x20 [0240.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF", dwFileAttributes=0x20) returned 0 [0240.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.932] GetLastError () returned 0x5 [0240.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF", dwFileAttributes=0x20) returned 0 [0240.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4488) returned 1 Thread: id = 8940 os_tid = 0x824 [0237.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf")) returned 0x20 [0240.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF", dwFileAttributes=0x20) returned 0 [0240.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.931] GetLastError () returned 0x5 [0240.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF", dwFileAttributes=0x20) returned 0 [0240.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30b78) returned 1 Thread: id = 8941 os_tid = 0x844 [0237.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf")) returned 0x20 [0240.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF", dwFileAttributes=0x20) returned 0 [0240.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.930] GetLastError () returned 0x5 [0240.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF", dwFileAttributes=0x20) returned 0 [0240.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f4a0) returned 1 Thread: id = 8942 os_tid = 0x854 [0237.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf")) returned 0x20 [0240.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF", dwFileAttributes=0x20) returned 0 [0240.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.929] GetLastError () returned 0x5 [0240.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF", dwFileAttributes=0x20) returned 0 [0240.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fd20) returned 1 Thread: id = 8943 os_tid = 0x864 [0237.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf")) returned 0x20 [0240.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF", dwFileAttributes=0x20) returned 0 [0240.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.925] GetLastError () returned 0x5 [0240.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF", dwFileAttributes=0x20) returned 0 [0240.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f301e8) returned 1 Thread: id = 8944 os_tid = 0x123c [0237.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf")) returned 0x20 [0240.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF", dwFileAttributes=0x20) returned 0 [0240.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.924] GetLastError () returned 0x5 [0240.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF", dwFileAttributes=0x20) returned 0 [0240.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2feb8) returned 1 Thread: id = 8945 os_tid = 0x874 [0237.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf")) returned 0x20 [0240.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF", dwFileAttributes=0x20) returned 0 [0240.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.919] GetLastError () returned 0x5 [0240.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF", dwFileAttributes=0x20) returned 0 [0240.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30160) returned 1 Thread: id = 8946 os_tid = 0x18c0 [0237.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf")) returned 0x20 [0240.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF", dwFileAttributes=0x20) returned 0 [0240.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.906] GetLastError () returned 0x5 [0240.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF", dwFileAttributes=0x20) returned 0 [0240.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f5b0) returned 1 Thread: id = 8947 os_tid = 0x1a3c [0238.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid")) returned 0x20 [0240.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID", dwFileAttributes=0x20) returned 0 [0240.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.928] GetLastError () returned 0x5 [0240.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID", dwFileAttributes=0x20) returned 0 [0240.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f638) returned 1 Thread: id = 8948 os_tid = 0x1a40 [0238.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid")) returned 0x20 [0240.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID", dwFileAttributes=0x20) returned 0 [0240.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.927] GetLastError () returned 0x5 [0240.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID", dwFileAttributes=0x20) returned 0 [0240.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f308d0) returned 1 Thread: id = 8949 os_tid = 0x1a44 [0238.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid")) returned 0x20 [0240.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID", dwFileAttributes=0x20) returned 0 [0240.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.005] GetLastError () returned 0x5 [0241.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID", dwFileAttributes=0x20) returned 0 [0241.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ffc8) returned 1 Thread: id = 8950 os_tid = 0x11d4 [0238.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid")) returned 0x20 [0240.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID", dwFileAttributes=0x20) returned 0 [0240.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.010] GetLastError () returned 0x5 [0241.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID", dwFileAttributes=0x20) returned 0 [0241.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30270) returned 1 Thread: id = 8951 os_tid = 0x1248 [0238.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf")) returned 0x20 [0241.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF", dwFileAttributes=0x20) returned 0 [0241.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.009] GetLastError () returned 0x5 [0241.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF", dwFileAttributes=0x20) returned 0 [0241.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f858) returned 1 Thread: id = 8952 os_tid = 0x11dc [0238.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf")) returned 0x20 [0241.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF", dwFileAttributes=0x20) returned 0 [0241.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.044] GetLastError () returned 0x5 [0241.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF", dwFileAttributes=0x20) returned 0 [0241.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30738) returned 1 Thread: id = 8953 os_tid = 0x11e0 [0238.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf")) returned 0x20 [0242.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF", dwFileAttributes=0x20) returned 0 [0242.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.108] GetLastError () returned 0x5 [0242.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF", dwFileAttributes=0x20) returned 0 [0242.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30408) returned 1 Thread: id = 8954 os_tid = 0x11e4 [0238.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf")) returned 0x20 [0241.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF", dwFileAttributes=0x20) returned 0 [0241.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.563] GetLastError () returned 0x5 [0241.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF", dwFileAttributes=0x20) returned 0 [0241.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f307c0) returned 1 Thread: id = 8955 os_tid = 0x11f0 [0238.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf")) returned 0x20 [0242.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF", dwFileAttributes=0x20) returned 0 [0242.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.109] GetLastError () returned 0x5 [0242.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF", dwFileAttributes=0x20) returned 0 [0242.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30848) returned 1 Thread: id = 8956 os_tid = 0x1258 [0238.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf")) returned 0x20 [0241.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF", dwFileAttributes=0x20) returned 0 [0241.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.565] GetLastError () returned 0x5 [0241.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF", dwFileAttributes=0x20) returned 0 [0241.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f748) returned 1 Thread: id = 8957 os_tid = 0x11f4 [0238.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf")) returned 0x20 [0242.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF", dwFileAttributes=0x20) returned 0 [0242.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.111] GetLastError () returned 0x5 [0242.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF", dwFileAttributes=0x20) returned 0 [0242.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30ea8) returned 1 Thread: id = 8958 os_tid = 0x1a48 [0238.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf")) returned 0x20 [0241.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF", dwFileAttributes=0x20) returned 0 [0241.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.568] GetLastError () returned 0x5 [0241.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF", dwFileAttributes=0x20) returned 0 [0241.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fe30) returned 1 Thread: id = 8959 os_tid = 0x1a54 [0238.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf")) returned 0x20 [0242.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF", dwFileAttributes=0x20) returned 0 [0242.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.113] GetLastError () returned 0x5 [0242.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF", dwFileAttributes=0x20) returned 0 [0242.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f302f8) returned 1 Thread: id = 8960 os_tid = 0x1a58 [0238.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf")) returned 0x20 [0242.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF", dwFileAttributes=0x20) returned 0 [0242.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.115] GetLastError () returned 0x5 [0242.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF", dwFileAttributes=0x20) returned 0 [0242.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f305a0) returned 1 Thread: id = 8961 os_tid = 0x1210 [0238.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf")) returned 0x20 [0241.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF", dwFileAttributes=0x20) returned 0 [0241.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.569] GetLastError () returned 0x5 [0241.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF", dwFileAttributes=0x20) returned 0 [0241.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30490) returned 1 Thread: id = 8962 os_tid = 0x1214 [0238.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf")) returned 0x20 [0241.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF", dwFileAttributes=0x20) returned 0 [0241.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.571] GetLastError () returned 0x5 [0241.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF", dwFileAttributes=0x20) returned 0 [0241.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f9f0) returned 1 Thread: id = 8963 os_tid = 0xc68 [0238.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf")) returned 0x20 [0241.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF", dwFileAttributes=0x20) returned 0 [0241.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.574] GetLastError () returned 0x5 [0241.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF", dwFileAttributes=0x20) returned 0 [0241.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30518) returned 1 Thread: id = 8964 os_tid = 0x518 [0238.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf")) returned 0x20 [0241.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF", dwFileAttributes=0x20) returned 0 [0241.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.575] GetLastError () returned 0x5 [0241.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF", dwFileAttributes=0x20) returned 0 [0241.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30f30) returned 1 Thread: id = 8965 os_tid = 0x1a5c [0238.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf")) returned 0x20 [0241.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF", dwFileAttributes=0x20) returned 0 [0241.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.577] GetLastError () returned 0x5 [0241.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF", dwFileAttributes=0x20) returned 0 [0241.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f7d0) returned 1 Thread: id = 8966 os_tid = 0x1a6c [0238.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf")) returned 0x20 [0241.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF", dwFileAttributes=0x20) returned 0 [0241.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.555] GetLastError () returned 0x5 [0241.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF", dwFileAttributes=0x20) returned 0 [0241.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2f418) returned 1 Thread: id = 8967 os_tid = 0x1a70 [0238.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf")) returned 0x20 [0241.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF", dwFileAttributes=0x20) returned 0 [0241.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.558] GetLastError () returned 0x5 [0241.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF", dwFileAttributes=0x20) returned 0 [0241.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30958) returned 1 Thread: id = 8968 os_tid = 0x1a7c [0238.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf")) returned 0x20 [0240.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF", dwFileAttributes=0x20) returned 0 [0240.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.982] GetLastError () returned 0x5 [0240.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF", dwFileAttributes=0x20) returned 0 [0240.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2fc98) returned 1 Thread: id = 8969 os_tid = 0x15cc [0238.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf")) returned 0x20 [0241.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF", dwFileAttributes=0x20) returned 0 [0241.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.560] GetLastError () returned 0x5 [0241.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF", dwFileAttributes=0x20) returned 0 [0241.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30fb8) returned 1 Thread: id = 8970 os_tid = 0x1a80 [0238.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf")) returned 0x20 [0240.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF", dwFileAttributes=0x20) returned 0 [0240.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.998] GetLastError () returned 0x5 [0240.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF", dwFileAttributes=0x20) returned 0 [0240.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30628) returned 1 Thread: id = 8971 os_tid = 0x1a84 [0238.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf")) returned 0x20 [0240.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF", dwFileAttributes=0x20) returned 0 [0240.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.980] GetLastError () returned 0x5 [0240.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF", dwFileAttributes=0x20) returned 0 [0240.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f31370) returned 1 Thread: id = 8972 os_tid = 0x1b6c [0238.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf")) returned 0x20 [0240.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF", dwFileAttributes=0x20) returned 0 [0240.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.983] GetLastError () returned 0x5 [0240.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF", dwFileAttributes=0x20) returned 0 [0240.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2ff40) returned 1 Thread: id = 8973 os_tid = 0x1b70 [0238.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf")) returned 0x20 [0240.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF", dwFileAttributes=0x20) returned 0 [0240.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.986] GetLastError () returned 0x5 [0240.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF", dwFileAttributes=0x20) returned 0 [0240.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f30050) returned 1 Thread: id = 8974 os_tid = 0x1b74 [0238.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf")) returned 0x20 [0240.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF", dwFileAttributes=0x20) returned 0 [0240.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.988] GetLastError () returned 0x5 [0240.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF", dwFileAttributes=0x20) returned 0 [0240.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f310c8) returned 1 Thread: id = 8975 os_tid = 0x1b78 [0238.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf")) returned 0x20 [0240.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF", dwFileAttributes=0x20) returned 0 [0240.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.987] GetLastError () returned 0x5 [0240.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF", dwFileAttributes=0x20) returned 0 [0240.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f998) returned 1 Thread: id = 8976 os_tid = 0xf30 [0238.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf")) returned 0x20 [0240.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF", dwFileAttributes=0x20) returned 0 [0240.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.990] GetLastError () returned 0x5 [0240.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF", dwFileAttributes=0x20) returned 0 [0240.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ecd8) returned 1 Thread: id = 8977 os_tid = 0x74c [0238.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf")) returned 0x20 [0240.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF", dwFileAttributes=0x20) returned 0 [0240.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.993] GetLastError () returned 0x5 [0240.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF", dwFileAttributes=0x20) returned 0 [0240.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f668) returned 1 Thread: id = 8978 os_tid = 0x9ec [0238.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf")) returned 0x20 [0240.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF", dwFileAttributes=0x20) returned 0 [0240.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.996] GetLastError () returned 0x5 [0240.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF", dwFileAttributes=0x20) returned 0 [0240.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eb40) returned 1 Thread: id = 8979 os_tid = 0x1394 [0238.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf")) returned 0x20 [0240.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF", dwFileAttributes=0x20) returned 0 [0240.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.994] GetLastError () returned 0x5 [0240.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF", dwFileAttributes=0x20) returned 0 [0240.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f090) returned 1 Thread: id = 8980 os_tid = 0x2a8 [0238.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf")) returned 0x20 [0241.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF", dwFileAttributes=0x20) returned 0 [0241.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.547] GetLastError () returned 0x5 [0241.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF", dwFileAttributes=0x20) returned 0 [0241.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f3c0) returned 1 Thread: id = 8981 os_tid = 0x1510 [0238.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf")) returned 0x20 [0242.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF", dwFileAttributes=0x20) returned 0 [0242.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.140] GetLastError () returned 0x5 [0242.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF", dwFileAttributes=0x20) returned 0 [0242.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ef80) returned 1 Thread: id = 8982 os_tid = 0x410 [0238.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf")) returned 0x20 [0242.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF", dwFileAttributes=0x20) returned 0 [0242.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.106] GetLastError () returned 0x5 [0242.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF", dwFileAttributes=0x20) returned 0 [0242.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fbb8) returned 1 Thread: id = 8983 os_tid = 0x1518 [0238.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf")) returned 0x20 [0242.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF", dwFileAttributes=0x20) returned 0 [0242.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.087] GetLastError () returned 0x5 [0242.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF", dwFileAttributes=0x20) returned 0 [0242.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f6f0) returned 1 Thread: id = 8984 os_tid = 0xabc [0238.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf")) returned 0x20 [0242.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF", dwFileAttributes=0x20) returned 0 [0242.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.098] GetLastError () returned 0x5 [0242.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF", dwFileAttributes=0x20) returned 0 [0242.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ed60) returned 1 Thread: id = 8985 os_tid = 0x1398 [0238.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf")) returned 0x20 [0242.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF", dwFileAttributes=0x20) returned 0 [0242.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.099] GetLastError () returned 0x5 [0242.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF", dwFileAttributes=0x20) returned 0 [0242.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f778) returned 1 Thread: id = 8986 os_tid = 0xe8c [0238.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf")) returned 0x20 [0242.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF", dwFileAttributes=0x20) returned 0 [0242.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.101] GetLastError () returned 0x5 [0242.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF", dwFileAttributes=0x20) returned 0 [0242.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec50) returned 1 Thread: id = 8987 os_tid = 0x12b4 [0238.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf")) returned 0x20 [0241.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF", dwFileAttributes=0x20) returned 0 [0241.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.048] GetLastError () returned 0x5 [0241.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF", dwFileAttributes=0x20) returned 0 [0241.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fc40) returned 1 Thread: id = 8988 os_tid = 0xf48 [0238.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf")) returned 0x20 [0242.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF", dwFileAttributes=0x20) returned 0 [0242.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.103] GetLastError () returned 0x5 [0242.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF", dwFileAttributes=0x20) returned 0 [0242.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f4d0) returned 1 Thread: id = 8989 os_tid = 0xb50 [0238.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf")) returned 0x20 [0241.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF", dwFileAttributes=0x20) returned 0 [0241.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.051] GetLastError () returned 0x5 [0241.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF", dwFileAttributes=0x20) returned 0 [0241.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f448) returned 1 Thread: id = 8990 os_tid = 0x2ac [0238.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf")) returned 0x20 [0241.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF", dwFileAttributes=0x20) returned 0 [0241.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.976] GetLastError () returned 0x5 [0241.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF", dwFileAttributes=0x20) returned 0 [0241.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e202a0) returned 1 Thread: id = 8991 os_tid = 0x1520 [0238.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf")) returned 0x20 [0241.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF", dwFileAttributes=0x20) returned 0 [0241.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.978] GetLastError () returned 0x5 [0241.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF", dwFileAttributes=0x20) returned 0 [0241.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f118) returned 1 Thread: id = 8992 os_tid = 0xf6c [0238.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf")) returned 0x20 [0241.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF", dwFileAttributes=0x20) returned 0 [0241.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.980] GetLastError () returned 0x5 [0241.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF", dwFileAttributes=0x20) returned 0 [0241.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f2b0) returned 1 Thread: id = 8993 os_tid = 0x3c8 [0238.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf")) returned 0x20 [0241.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF", dwFileAttributes=0x20) returned 0 [0241.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.982] GetLastError () returned 0x5 [0241.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF", dwFileAttributes=0x20) returned 0 [0241.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f558) returned 1 Thread: id = 8994 os_tid = 0xfb0 [0238.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf")) returned 0x20 [0241.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF", dwFileAttributes=0x20) returned 0 [0241.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.983] GetLastError () returned 0x5 [0241.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF", dwFileAttributes=0x20) returned 0 [0241.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f008) returned 1 Thread: id = 8995 os_tid = 0xff4 [0238.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf")) returned 0x20 [0241.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF", dwFileAttributes=0x20) returned 0 [0241.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.985] GetLastError () returned 0x5 [0241.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF", dwFileAttributes=0x20) returned 0 [0241.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ff70) returned 1 Thread: id = 8996 os_tid = 0x3f4 [0238.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf")) returned 0x20 [0242.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF", dwFileAttributes=0x20) returned 0 [0242.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.117] GetLastError () returned 0x5 [0242.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF", dwFileAttributes=0x20) returned 0 [0242.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f228) returned 1 Thread: id = 8997 os_tid = 0x640 [0238.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf")) returned 0x20 [0242.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF", dwFileAttributes=0x20) returned 0 [0242.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.119] GetLastError () returned 0x5 [0242.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF", dwFileAttributes=0x20) returned 0 [0242.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ede8) returned 1 Thread: id = 8998 os_tid = 0x434 [0238.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf")) returned 0x20 [0242.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF", dwFileAttributes=0x20) returned 0 [0242.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.121] GetLastError () returned 0x5 [0242.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF", dwFileAttributes=0x20) returned 0 [0242.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f1a0) returned 1 Thread: id = 8999 os_tid = 0xb20 [0238.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf")) returned 0x20 [0242.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF", dwFileAttributes=0x20) returned 0 [0242.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.123] GetLastError () returned 0x5 [0242.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF", dwFileAttributes=0x20) returned 0 [0242.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f800) returned 1 Thread: id = 9000 os_tid = 0x1528 [0238.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf")) returned 0x20 [0241.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF", dwFileAttributes=0x20) returned 0 [0241.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.050] GetLastError () returned 0x5 [0241.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF", dwFileAttributes=0x20) returned 0 [0241.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1fff8) returned 1 Thread: id = 9001 os_tid = 0x570 [0238.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf")) returned 0x20 [0241.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF", dwFileAttributes=0x20) returned 0 [0241.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.056] GetLastError () returned 0x5 [0241.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF", dwFileAttributes=0x20) returned 0 [0241.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1eef8) returned 1 Thread: id = 9002 os_tid = 0xbf4 [0238.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf")) returned 0x20 [0241.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF", dwFileAttributes=0x20) returned 0 [0241.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.474] GetLastError () returned 0x5 [0241.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF", dwFileAttributes=0x20) returned 0 [0241.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f338) returned 1 Thread: id = 9003 os_tid = 0x584 [0238.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf")) returned 0x20 [0242.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF", dwFileAttributes=0x20) returned 0 [0242.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.125] GetLastError () returned 0x5 [0242.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF", dwFileAttributes=0x20) returned 0 [0242.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ebc8) returned 1 Thread: id = 9004 os_tid = 0xc14 [0238.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf")) returned 0x20 [0242.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF", dwFileAttributes=0x20) returned 0 [0242.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.093] GetLastError () returned 0x5 [0242.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF", dwFileAttributes=0x20) returned 0 [0242.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5e0) returned 1 Thread: id = 9005 os_tid = 0x6fc [0238.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf")) returned 0x20 [0242.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF", dwFileAttributes=0x20) returned 0 [0242.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.095] GetLastError () returned 0x5 [0242.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF", dwFileAttributes=0x20) returned 0 [0242.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053a78) returned 1 Thread: id = 9006 os_tid = 0xbf8 [0238.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf")) returned 0x20 [0242.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF", dwFileAttributes=0x20) returned 0 [0242.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.127] GetLastError () returned 0x5 [0242.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF", dwFileAttributes=0x20) returned 0 [0242.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80540d8) returned 1 Thread: id = 9007 os_tid = 0x564 [0238.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf")) returned 0x20 [0242.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF", dwFileAttributes=0x20) returned 0 [0242.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.132] GetLastError () returned 0x5 [0242.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF", dwFileAttributes=0x20) returned 0 [0242.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053968) returned 1 Thread: id = 9008 os_tid = 0x56c [0238.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf")) returned 0x20 [0242.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF", dwFileAttributes=0x20) returned 0 [0242.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.134] GetLastError () returned 0x5 [0242.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF", dwFileAttributes=0x20) returned 0 [0242.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054628) returned 1 Thread: id = 9009 os_tid = 0xb48 [0238.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf")) returned 0x20 [0242.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF", dwFileAttributes=0x20) returned 0 [0242.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.136] GetLastError () returned 0x5 [0242.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF", dwFileAttributes=0x20) returned 0 [0242.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053390) returned 1 Thread: id = 9010 os_tid = 0x9d0 [0238.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf")) returned 0x20 [0242.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF", dwFileAttributes=0x20) returned 0 [0242.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.076] GetLastError () returned 0x5 [0242.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF", dwFileAttributes=0x20) returned 0 [0242.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053d20) returned 1 Thread: id = 9011 os_tid = 0x9e0 [0238.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf")) returned 0x20 [0242.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF", dwFileAttributes=0x20) returned 0 [0242.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.078] GetLastError () returned 0x5 [0242.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF", dwFileAttributes=0x20) returned 0 [0242.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80538e0) returned 1 Thread: id = 9012 os_tid = 0x9f0 [0238.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf")) returned 0x20 [0242.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF", dwFileAttributes=0x20) returned 0 [0242.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.081] GetLastError () returned 0x5 [0242.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF", dwFileAttributes=0x20) returned 0 [0242.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053da8) returned 1 Thread: id = 9013 os_tid = 0xa00 [0238.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf")) returned 0x20 [0242.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF", dwFileAttributes=0x20) returned 0 [0242.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.083] GetLastError () returned 0x5 [0242.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF", dwFileAttributes=0x20) returned 0 [0242.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053418) returned 1 Thread: id = 9014 os_tid = 0xa10 [0238.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf")) returned 0x20 [0241.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF", dwFileAttributes=0x20) returned 0 [0241.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.499] GetLastError () returned 0x5 [0241.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF", dwFileAttributes=0x20) returned 0 [0241.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053280) returned 1 Thread: id = 9015 os_tid = 0xa30 [0238.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf")) returned 0x20 [0241.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF", dwFileAttributes=0x20) returned 0 [0241.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.497] GetLastError () returned 0x5 [0241.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF", dwFileAttributes=0x20) returned 0 [0241.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053c10) returned 1 Thread: id = 9016 os_tid = 0x130c [0238.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf")) returned 0x20 [0242.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF", dwFileAttributes=0x20) returned 0 [0242.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.085] GetLastError () returned 0x5 [0242.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF", dwFileAttributes=0x20) returned 0 [0242.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054490) returned 1 Thread: id = 9017 os_tid = 0xb74 [0238.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf")) returned 0x20 [0240.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF", dwFileAttributes=0x20) returned 0 [0240.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.944] GetLastError () returned 0x5 [0240.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF", dwFileAttributes=0x20) returned 0 [0240.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ea78) returned 1 Thread: id = 9018 os_tid = 0x1564 [0238.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf")) returned 0x20 [0241.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF", dwFileAttributes=0x20) returned 0 [0241.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.696] GetLastError () returned 0x5 [0241.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF", dwFileAttributes=0x20) returned 0 [0241.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054408) returned 1 Thread: id = 9019 os_tid = 0x156c [0238.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf")) returned 0x20 [0241.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF", dwFileAttributes=0x20) returned 0 [0241.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.968] GetLastError () returned 0x5 [0241.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF", dwFileAttributes=0x20) returned 0 [0241.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053638) returned 1 Thread: id = 9020 os_tid = 0x1570 [0238.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf")) returned 0x20 [0241.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF", dwFileAttributes=0x20) returned 0 [0241.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.969] GetLastError () returned 0x5 [0241.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF", dwFileAttributes=0x20) returned 0 [0241.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80536c0) returned 1 Thread: id = 9021 os_tid = 0x1574 [0238.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf")) returned 0x20 [0241.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF", dwFileAttributes=0x20) returned 0 [0241.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.971] GetLastError () returned 0x5 [0241.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF", dwFileAttributes=0x20) returned 0 [0241.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b88) returned 1 Thread: id = 9022 os_tid = 0x1578 [0238.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf")) returned 0x20 [0241.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF", dwFileAttributes=0x20) returned 0 [0241.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.973] GetLastError () returned 0x5 [0241.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF", dwFileAttributes=0x20) returned 0 [0241.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80535b0) returned 1 Thread: id = 9023 os_tid = 0x7fc [0238.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf")) returned 0x20 [0241.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF", dwFileAttributes=0x20) returned 0 [0241.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.974] GetLastError () returned 0x5 [0241.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF", dwFileAttributes=0x20) returned 0 [0241.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053528) returned 1 Thread: id = 9024 os_tid = 0x98c [0238.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf")) returned 0x20 [0241.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF", dwFileAttributes=0x20) returned 0 [0241.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.724] GetLastError () returned 0x5 [0241.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF", dwFileAttributes=0x20) returned 0 [0241.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053748) returned 1 Thread: id = 9025 os_tid = 0xde4 [0238.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf")) returned 0x20 [0241.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF", dwFileAttributes=0x20) returned 0 [0241.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.730] GetLastError () returned 0x5 [0241.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF", dwFileAttributes=0x20) returned 0 [0241.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80537d0) returned 1 Thread: id = 9026 os_tid = 0x490 [0238.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf")) returned 0x20 [0241.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF", dwFileAttributes=0x20) returned 0 [0241.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.931] GetLastError () returned 0x5 [0241.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF", dwFileAttributes=0x20) returned 0 [0241.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8054160) returned 1 Thread: id = 9027 os_tid = 0xfd0 [0238.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf")) returned 0x20 [0241.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF", dwFileAttributes=0x20) returned 0 [0241.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.933] GetLastError () returned 0x5 [0241.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF", dwFileAttributes=0x20) returned 0 [0241.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8052f50) returned 1 Thread: id = 9028 os_tid = 0xfd4 [0238.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf")) returned 0x20 [0241.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF", dwFileAttributes=0x20) returned 0 [0241.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.935] GetLastError () returned 0x5 [0241.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF", dwFileAttributes=0x20) returned 0 [0241.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053b00) returned 1 Thread: id = 9029 os_tid = 0xfdc [0238.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf")) returned 0x20 [0241.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF", dwFileAttributes=0x20) returned 0 [0241.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.936] GetLastError () returned 0x5 [0241.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF", dwFileAttributes=0x20) returned 0 [0241.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053858) returned 1 Thread: id = 9030 os_tid = 0x1598 [0238.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf")) returned 0x20 [0241.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF", dwFileAttributes=0x20) returned 0 [0241.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.988] GetLastError () returned 0x5 [0241.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF", dwFileAttributes=0x20) returned 0 [0241.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80539f0) returned 1 Thread: id = 9031 os_tid = 0x1020 [0238.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf")) returned 0x20 [0241.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF", dwFileAttributes=0x20) returned 0 [0241.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.989] GetLastError () returned 0x5 [0241.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF", dwFileAttributes=0x20) returned 0 [0241.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053fc8) returned 1 Thread: id = 9032 os_tid = 0x10e0 [0238.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf")) returned 0x20 [0241.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", dwFileAttributes=0x20) returned 0 [0241.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.991] GetLastError () returned 0x5 [0241.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", dwFileAttributes=0x20) returned 0 [0241.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8053eb8) returned 1 Thread: id = 9033 os_tid = 0x10e4 [0238.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf")) returned 0x20 [0241.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF", dwFileAttributes=0x20) returned 0 [0241.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.993] GetLastError () returned 0x5 [0241.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF", dwFileAttributes=0x20) returned 0 [0241.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80534a0) returned 1 Thread: id = 9034 os_tid = 0x12f4 [0238.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf")) returned 0x20 [0241.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF", dwFileAttributes=0x20) returned 0 [0241.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.703] GetLastError () returned 0x5 [0241.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF", dwFileAttributes=0x20) returned 0 [0241.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 9035 os_tid = 0x1304 [0238.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf")) returned 0x20 [0241.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF", dwFileAttributes=0x20) returned 0 [0241.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.705] GetLastError () returned 0x5 [0241.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF", dwFileAttributes=0x20) returned 0 [0241.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 9036 os_tid = 0x1358 [0238.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf")) returned 0x20 [0241.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF", dwFileAttributes=0x20) returned 0 [0241.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.963] GetLastError () returned 0x5 [0241.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF", dwFileAttributes=0x20) returned 0 [0241.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 9037 os_tid = 0x1644 [0238.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf")) returned 0x20 [0241.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF", dwFileAttributes=0x20) returned 0 [0241.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.964] GetLastError () returned 0x5 [0241.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF", dwFileAttributes=0x20) returned 0 [0241.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 9038 os_tid = 0x980 [0238.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf")) returned 0x20 [0241.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF", dwFileAttributes=0x20) returned 0 [0241.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.965] GetLastError () returned 0x5 [0241.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF", dwFileAttributes=0x20) returned 0 [0241.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 9039 os_tid = 0x1348 [0238.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf")) returned 0x20 [0241.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF", dwFileAttributes=0x20) returned 0 [0241.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.967] GetLastError () returned 0x5 [0241.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF", dwFileAttributes=0x20) returned 0 [0241.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 9040 os_tid = 0x1148 [0238.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf")) returned 0x20 [0241.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF", dwFileAttributes=0x20) returned 0 [0241.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.952] GetLastError () returned 0x5 [0241.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF", dwFileAttributes=0x20) returned 0 [0241.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 9041 os_tid = 0xec4 [0238.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf")) returned 0x20 [0241.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF", dwFileAttributes=0x20) returned 0 [0241.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.676] GetLastError () returned 0x5 [0241.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF", dwFileAttributes=0x20) returned 0 [0241.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f3e0) returned 1 Thread: id = 9042 os_tid = 0x1d40 [0238.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf")) returned 0x20 [0241.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF", dwFileAttributes=0x20) returned 0 [0241.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.677] GetLastError () returned 0x5 [0241.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF", dwFileAttributes=0x20) returned 0 [0241.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a708) returned 1 Thread: id = 9043 os_tid = 0x1d54 [0238.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf")) returned 0x20 [0241.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF", dwFileAttributes=0x20) returned 0 [0241.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.671] GetLastError () returned 0x5 [0241.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF", dwFileAttributes=0x20) returned 0 [0241.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a680) returned 1 Thread: id = 9044 os_tid = 0x1d44 [0238.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf")) returned 0x20 [0241.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF", dwFileAttributes=0x20) returned 0 [0241.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.954] GetLastError () returned 0x5 [0241.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF", dwFileAttributes=0x20) returned 0 [0241.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a5f8) returned 1 Thread: id = 9045 os_tid = 0x1d50 [0238.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf")) returned 0x20 [0241.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF", dwFileAttributes=0x20) returned 0 [0241.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.673] GetLastError () returned 0x5 [0241.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF", dwFileAttributes=0x20) returned 0 [0241.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30633a0) returned 1 Thread: id = 9046 os_tid = 0x1d5c [0238.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf")) returned 0x20 [0241.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF", dwFileAttributes=0x20) returned 0 [0241.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.939] GetLastError () returned 0x5 [0241.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF", dwFileAttributes=0x20) returned 0 [0241.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 9047 os_tid = 0x1d60 [0238.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf")) returned 0x20 [0241.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF", dwFileAttributes=0x20) returned 0 [0241.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.942] GetLastError () returned 0x5 [0241.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF", dwFileAttributes=0x20) returned 0 [0241.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 9048 os_tid = 0x1d68 [0238.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf")) returned 0x20 [0241.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF", dwFileAttributes=0x20) returned 0 [0241.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.944] GetLastError () returned 0x5 [0241.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF", dwFileAttributes=0x20) returned 0 [0241.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a458) returned 1 Thread: id = 9049 os_tid = 0x1378 [0238.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf")) returned 0x20 [0241.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF", dwFileAttributes=0x20) returned 0 [0241.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.947] GetLastError () returned 0x5 [0241.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF", dwFileAttributes=0x20) returned 0 [0241.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a4e0) returned 1 Thread: id = 9050 os_tid = 0x1acc [0238.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf")) returned 0x20 [0241.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF", dwFileAttributes=0x20) returned 0 [0241.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.949] GetLastError () returned 0x5 [0241.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF", dwFileAttributes=0x20) returned 0 [0241.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a568) returned 1 Thread: id = 9051 os_tid = 0x20d4 [0238.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf")) returned 0x20 [0241.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF", dwFileAttributes=0x20) returned 0 [0241.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.950] GetLastError () returned 0x5 [0241.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF", dwFileAttributes=0x20) returned 0 [0241.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a5f0) returned 1 Thread: id = 9052 os_tid = 0x20d8 [0238.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf")) returned 0x20 [0241.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF", dwFileAttributes=0x20) returned 0 [0241.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.951] GetLastError () returned 0x5 [0241.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF", dwFileAttributes=0x20) returned 0 [0241.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a678) returned 1 Thread: id = 9053 os_tid = 0x20dc [0238.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf")) returned 0x20 [0241.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF", dwFileAttributes=0x20) returned 0 [0241.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.643] GetLastError () returned 0x5 [0241.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF", dwFileAttributes=0x20) returned 0 [0241.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a700) returned 1 Thread: id = 9054 os_tid = 0x20f4 [0238.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf")) returned 0x20 [0241.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF", dwFileAttributes=0x20) returned 0 [0241.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.645] GetLastError () returned 0x5 [0241.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF", dwFileAttributes=0x20) returned 0 [0241.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a788) returned 1 Thread: id = 9055 os_tid = 0x20f8 [0238.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf")) returned 0x20 [0241.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF", dwFileAttributes=0x20) returned 0 [0241.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.647] GetLastError () returned 0x5 [0241.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF", dwFileAttributes=0x20) returned 0 [0241.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a810) returned 1 Thread: id = 9056 os_tid = 0x1d6c [0238.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf")) returned 0x20 [0241.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF", dwFileAttributes=0x20) returned 0 [0241.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.649] GetLastError () returned 0x5 [0241.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF", dwFileAttributes=0x20) returned 0 [0241.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a898) returned 1 Thread: id = 9057 os_tid = 0x225c [0238.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf")) returned 0x20 [0241.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF", dwFileAttributes=0x20) returned 0 [0241.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.707] GetLastError () returned 0x5 [0241.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF", dwFileAttributes=0x20) returned 0 [0241.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a920) returned 1 Thread: id = 9058 os_tid = 0x1ad0 [0238.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf")) returned 0x20 [0241.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF", dwFileAttributes=0x20) returned 0 [0241.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.709] GetLastError () returned 0x5 [0241.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF", dwFileAttributes=0x20) returned 0 [0241.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819a9a8) returned 1 Thread: id = 9059 os_tid = 0x137c [0238.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf")) returned 0x20 [0241.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF", dwFileAttributes=0x20) returned 0 [0241.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.711] GetLastError () returned 0x5 [0241.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF", dwFileAttributes=0x20) returned 0 [0241.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aa30) returned 1 Thread: id = 9060 os_tid = 0x11fc [0238.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf")) returned 0x20 [0241.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF", dwFileAttributes=0x20) returned 0 [0241.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.713] GetLastError () returned 0x5 [0241.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF", dwFileAttributes=0x20) returned 0 [0241.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aab8) returned 1 Thread: id = 9061 os_tid = 0x2bc8 [0238.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf")) returned 0x20 [0241.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF", dwFileAttributes=0x20) returned 0 [0241.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.714] GetLastError () returned 0x5 [0241.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF", dwFileAttributes=0x20) returned 0 [0241.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ab40) returned 1 Thread: id = 9062 os_tid = 0x2bcc [0238.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf")) returned 0x20 [0241.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF", dwFileAttributes=0x20) returned 0 [0241.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.716] GetLastError () returned 0x5 [0241.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF", dwFileAttributes=0x20) returned 0 [0241.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819abc8) returned 1 Thread: id = 9063 os_tid = 0xecc [0238.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf")) returned 0x20 [0241.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF", dwFileAttributes=0x20) returned 0 [0241.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.718] GetLastError () returned 0x5 [0241.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF", dwFileAttributes=0x20) returned 0 [0241.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ac50) returned 1 Thread: id = 9064 os_tid = 0x1208 [0238.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf")) returned 0x20 [0241.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF", dwFileAttributes=0x20) returned 0 [0241.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.720] GetLastError () returned 0x5 [0241.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF", dwFileAttributes=0x20) returned 0 [0241.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819acd8) returned 1 Thread: id = 9065 os_tid = 0x670 [0238.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf")) returned 0x20 [0241.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF", dwFileAttributes=0x20) returned 0 [0241.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.722] GetLastError () returned 0x5 [0241.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF", dwFileAttributes=0x20) returned 0 [0241.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ad60) returned 1 Thread: id = 9066 os_tid = 0xb8c [0238.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf")) returned 0x20 [0241.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF", dwFileAttributes=0x20) returned 0 [0241.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.668] GetLastError () returned 0x5 [0241.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF", dwFileAttributes=0x20) returned 0 [0241.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ade8) returned 1 Thread: id = 9067 os_tid = 0x8fc [0238.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf")) returned 0x20 [0241.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF", dwFileAttributes=0x20) returned 0 [0241.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.669] GetLastError () returned 0x5 [0241.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF", dwFileAttributes=0x20) returned 0 [0241.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ae70) returned 1 Thread: id = 9068 os_tid = 0x2c14 [0238.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf")) returned 0x20 [0241.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF", dwFileAttributes=0x20) returned 0 [0241.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.620] GetLastError () returned 0x5 [0241.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF", dwFileAttributes=0x20) returned 0 [0241.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819aef8) returned 1 Thread: id = 9069 os_tid = 0x2cec [0238.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf")) returned 0x20 [0241.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF", dwFileAttributes=0x20) returned 0 [0241.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.679] GetLastError () returned 0x5 [0241.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF", dwFileAttributes=0x20) returned 0 [0241.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803eeb8) returned 1 Thread: id = 9070 os_tid = 0x2cf0 [0238.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf")) returned 0x20 [0241.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF", dwFileAttributes=0x20) returned 0 [0241.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.681] GetLastError () returned 0x5 [0241.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF", dwFileAttributes=0x20) returned 0 [0241.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ee30) returned 1 Thread: id = 9071 os_tid = 0x2cf4 [0238.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf")) returned 0x20 [0241.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF", dwFileAttributes=0x20) returned 0 [0241.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.683] GetLastError () returned 0x5 [0241.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF", dwFileAttributes=0x20) returned 0 [0241.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819af80) returned 1 Thread: id = 9072 os_tid = 0x2cf8 [0238.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf")) returned 0x20 [0241.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF", dwFileAttributes=0x20) returned 0 [0241.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.684] GetLastError () returned 0x5 [0241.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF", dwFileAttributes=0x20) returned 0 [0241.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b008) returned 1 Thread: id = 9073 os_tid = 0x2cfc [0238.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf")) returned 0x20 [0242.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF", dwFileAttributes=0x20) returned 0 [0242.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.245] GetLastError () returned 0x5 [0242.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF", dwFileAttributes=0x20) returned 0 [0242.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b090) returned 1 Thread: id = 9074 os_tid = 0x2d00 [0238.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf")) returned 0x20 [0241.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF", dwFileAttributes=0x20) returned 0 [0241.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.686] GetLastError () returned 0x5 [0241.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF", dwFileAttributes=0x20) returned 0 [0241.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b118) returned 1 Thread: id = 9075 os_tid = 0xf34 [0238.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf")) returned 0x20 [0241.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF", dwFileAttributes=0x20) returned 0 [0241.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.688] GetLastError () returned 0x5 [0241.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF", dwFileAttributes=0x20) returned 0 [0241.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b1a0) returned 1 Thread: id = 9076 os_tid = 0xb5c [0238.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf")) returned 0x20 [0242.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF", dwFileAttributes=0x20) returned 0 [0242.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.246] GetLastError () returned 0x5 [0242.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF", dwFileAttributes=0x20) returned 0 [0242.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b228) returned 1 Thread: id = 9077 os_tid = 0x2fe8 [0238.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf")) returned 0x20 [0241.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF", dwFileAttributes=0x20) returned 0 [0241.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.690] GetLastError () returned 0x5 [0241.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF", dwFileAttributes=0x20) returned 0 [0241.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b2b0) returned 1 Thread: id = 9078 os_tid = 0x14b4 [0238.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf")) returned 0x20 [0241.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF", dwFileAttributes=0x20) returned 0 [0241.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.692] GetLastError () returned 0x5 [0241.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF", dwFileAttributes=0x20) returned 0 [0241.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b338) returned 1 Thread: id = 9079 os_tid = 0x1b88 [0238.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf")) returned 0x20 [0241.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF", dwFileAttributes=0x20) returned 0 [0241.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.694] GetLastError () returned 0x5 [0241.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF", dwFileAttributes=0x20) returned 0 [0241.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b3c0) returned 1 Thread: id = 9080 os_tid = 0x1b8c [0238.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf")) returned 0x20 [0242.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF", dwFileAttributes=0x20) returned 0 [0242.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.250] GetLastError () returned 0x5 [0242.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF", dwFileAttributes=0x20) returned 0 [0242.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b448) returned 1 Thread: id = 9081 os_tid = 0x1b90 [0238.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf")) returned 0x20 [0242.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF", dwFileAttributes=0x20) returned 0 [0242.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.251] GetLastError () returned 0x5 [0242.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF", dwFileAttributes=0x20) returned 0 [0242.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b4d0) returned 1 Thread: id = 9082 os_tid = 0x1b94 [0238.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf")) returned 0x20 [0242.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF", dwFileAttributes=0x20) returned 0 [0242.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.253] GetLastError () returned 0x5 [0242.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF", dwFileAttributes=0x20) returned 0 [0242.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b558) returned 1 Thread: id = 9083 os_tid = 0x1b98 [0238.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf")) returned 0x20 [0242.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF", dwFileAttributes=0x20) returned 0 [0242.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.255] GetLastError () returned 0x5 [0242.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF", dwFileAttributes=0x20) returned 0 [0242.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b5e0) returned 1 Thread: id = 9084 os_tid = 0x1b9c [0238.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf")) returned 0x20 [0242.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF", dwFileAttributes=0x20) returned 0 [0242.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.256] GetLastError () returned 0x5 [0242.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF", dwFileAttributes=0x20) returned 0 [0242.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b668) returned 1 Thread: id = 9085 os_tid = 0x1ba0 [0238.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf")) returned 0x20 [0242.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF", dwFileAttributes=0x20) returned 0 [0242.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.258] GetLastError () returned 0x5 [0242.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF", dwFileAttributes=0x20) returned 0 [0242.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b6f0) returned 1 Thread: id = 9086 os_tid = 0x10dc [0238.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf")) returned 0x20 [0242.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF", dwFileAttributes=0x20) returned 0 [0242.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.259] GetLastError () returned 0x5 [0242.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF", dwFileAttributes=0x20) returned 0 [0242.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b778) returned 1 Thread: id = 9087 os_tid = 0x10f0 [0238.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf")) returned 0x20 [0242.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF", dwFileAttributes=0x20) returned 0 [0242.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.261] GetLastError () returned 0x5 [0242.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF", dwFileAttributes=0x20) returned 0 [0242.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b800) returned 1 Thread: id = 9088 os_tid = 0x16f0 [0238.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf")) returned 0x20 [0241.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF", dwFileAttributes=0x20) returned 0 [0241.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.581] GetLastError () returned 0x5 [0241.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF", dwFileAttributes=0x20) returned 0 [0241.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b888) returned 1 Thread: id = 9089 os_tid = 0x1108 [0238.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf")) returned 0x20 [0241.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF", dwFileAttributes=0x20) returned 0 [0241.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.639] GetLastError () returned 0x5 [0241.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF", dwFileAttributes=0x20) returned 0 [0241.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b910) returned 1 Thread: id = 9090 os_tid = 0x16fc [0238.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf")) returned 0x20 [0240.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF", dwFileAttributes=0x20) returned 0 [0240.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.945] GetLastError () returned 0x5 [0240.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF", dwFileAttributes=0x20) returned 0 [0240.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819b998) returned 1 Thread: id = 9091 os_tid = 0x1704 [0238.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf")) returned 0x20 [0241.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF", dwFileAttributes=0x20) returned 0 [0241.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.561] GetLastError () returned 0x5 [0241.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF", dwFileAttributes=0x20) returned 0 [0241.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819ba20) returned 1 Thread: id = 9092 os_tid = 0x112c [0238.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf")) returned 0x20 [0240.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF", dwFileAttributes=0x20) returned 0 [0240.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.978] GetLastError () returned 0x5 [0240.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF", dwFileAttributes=0x20) returned 0 [0240.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819baa8) returned 1 Thread: id = 9093 os_tid = 0x1134 [0238.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf")) returned 0x20 [0242.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF", dwFileAttributes=0x20) returned 0 [0242.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.244] GetLastError () returned 0x5 [0242.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF", dwFileAttributes=0x20) returned 0 [0242.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bb30) returned 1 Thread: id = 9094 os_tid = 0x1f5c [0238.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf")) returned 0x20 [0241.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF", dwFileAttributes=0x20) returned 0 [0241.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.641] GetLastError () returned 0x5 [0241.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF", dwFileAttributes=0x20) returned 0 [0241.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bbb8) returned 1 Thread: id = 9095 os_tid = 0x1f78 [0238.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf")) returned 0x20 [0242.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF", dwFileAttributes=0x20) returned 0 [0242.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.009] GetLastError () returned 0x5 [0242.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF", dwFileAttributes=0x20) returned 0 [0242.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bc40) returned 1 Thread: id = 9096 os_tid = 0x1f7c [0238.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf")) returned 0x20 [0242.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF", dwFileAttributes=0x20) returned 0 [0242.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.054] GetLastError () returned 0x5 [0242.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF", dwFileAttributes=0x20) returned 0 [0242.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bcc8) returned 1 Thread: id = 9097 os_tid = 0x1f80 [0238.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf")) returned 0x20 [0241.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF", dwFileAttributes=0x20) returned 0 [0241.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.618] GetLastError () returned 0x5 [0241.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF", dwFileAttributes=0x20) returned 0 [0241.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bd50) returned 1 Thread: id = 9098 os_tid = 0x1f84 [0238.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf")) returned 0x20 [0241.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF", dwFileAttributes=0x20) returned 0 [0241.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.616] GetLastError () returned 0x5 [0241.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF", dwFileAttributes=0x20) returned 0 [0241.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bdd8) returned 1 Thread: id = 9099 os_tid = 0x1f88 [0238.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf")) returned 0x20 [0241.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF", dwFileAttributes=0x20) returned 0 [0241.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.615] GetLastError () returned 0x5 [0241.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF", dwFileAttributes=0x20) returned 0 [0241.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819be60) returned 1 Thread: id = 9100 os_tid = 0x1f8c [0238.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf")) returned 0x20 [0242.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF", dwFileAttributes=0x20) returned 0 [0242.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.056] GetLastError () returned 0x5 [0242.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF", dwFileAttributes=0x20) returned 0 [0242.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bee8) returned 1 Thread: id = 9101 os_tid = 0x1f90 [0238.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf")) returned 0x20 [0241.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF", dwFileAttributes=0x20) returned 0 [0241.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.612] GetLastError () returned 0x5 [0241.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF", dwFileAttributes=0x20) returned 0 [0241.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bf70) returned 1 Thread: id = 9102 os_tid = 0x1f94 [0238.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf")) returned 0x20 [0241.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF", dwFileAttributes=0x20) returned 0 [0241.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.611] GetLastError () returned 0x5 [0241.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF", dwFileAttributes=0x20) returned 0 [0241.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819bff8) returned 1 Thread: id = 9103 os_tid = 0x2048 [0238.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf")) returned 0x20 [0241.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF", dwFileAttributes=0x20) returned 0 [0241.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.666] GetLastError () returned 0x5 [0241.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF", dwFileAttributes=0x20) returned 0 [0241.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c080) returned 1 Thread: id = 9104 os_tid = 0x204c [0238.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf")) returned 0x20 [0241.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF", dwFileAttributes=0x20) returned 0 [0241.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.955] GetLastError () returned 0x5 [0241.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF", dwFileAttributes=0x20) returned 0 [0241.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c108) returned 1 Thread: id = 9105 os_tid = 0x2050 [0238.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf")) returned 0x20 [0242.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF", dwFileAttributes=0x20) returned 0 [0242.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.239] GetLastError () returned 0x5 [0242.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF", dwFileAttributes=0x20) returned 0 [0242.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c190) returned 1 Thread: id = 9106 os_tid = 0x2054 [0238.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid")) returned 0x20 [0241.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID", dwFileAttributes=0x20) returned 0 [0241.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.957] GetLastError () returned 0x5 [0241.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID", dwFileAttributes=0x20) returned 0 [0241.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c218) returned 1 Thread: id = 9107 os_tid = 0x2058 [0238.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid")) returned 0x20 [0241.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID", dwFileAttributes=0x20) returned 0 [0241.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.958] GetLastError () returned 0x5 [0241.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID", dwFileAttributes=0x20) returned 0 [0241.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c2a0) returned 1 Thread: id = 9108 os_tid = 0x205c [0238.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf")) returned 0x20 [0241.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF", dwFileAttributes=0x20) returned 0 [0241.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.959] GetLastError () returned 0x5 [0241.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF", dwFileAttributes=0x20) returned 0 [0241.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c328) returned 1 Thread: id = 9109 os_tid = 0x2074 [0238.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf")) returned 0x20 [0241.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF", dwFileAttributes=0x20) returned 0 [0241.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.960] GetLastError () returned 0x5 [0241.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF", dwFileAttributes=0x20) returned 0 [0241.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x819c3b0) returned 1 Thread: id = 9110 os_tid = 0x2078 [0238.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid")) returned 0x20 [0241.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID", dwFileAttributes=0x20) returned 0 [0241.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.962] GetLastError () returned 0x5 [0241.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID", dwFileAttributes=0x20) returned 0 [0241.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9648) returned 1 Thread: id = 9111 os_tid = 0x24f8 [0238.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid")) returned 0x20 [0242.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID", dwFileAttributes=0x20) returned 0 [0242.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.088] GetLastError () returned 0x5 [0242.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID", dwFileAttributes=0x20) returned 0 [0242.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d96d0) returned 1 Thread: id = 9112 os_tid = 0x24fc [0238.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf")) returned 0x20 [0242.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF", dwFileAttributes=0x20) returned 0 [0242.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.090] GetLastError () returned 0x5 [0242.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF", dwFileAttributes=0x20) returned 0 [0242.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9758) returned 1 Thread: id = 9113 os_tid = 0x25bc [0238.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf")) returned 0x20 [0242.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF", dwFileAttributes=0x20) returned 0 [0242.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.092] GetLastError () returned 0x5 [0242.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF", dwFileAttributes=0x20) returned 0 [0242.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d97e0) returned 1 Thread: id = 9114 os_tid = 0x2654 [0238.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf")) returned 0x20 [0241.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF", dwFileAttributes=0x20) returned 0 [0241.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.697] GetLastError () returned 0x5 [0241.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF", dwFileAttributes=0x20) returned 0 [0241.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9868) returned 1 Thread: id = 9115 os_tid = 0x2658 [0238.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf")) returned 0x20 [0241.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF", dwFileAttributes=0x20) returned 0 [0241.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.699] GetLastError () returned 0x5 [0241.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF", dwFileAttributes=0x20) returned 0 [0241.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d98f0) returned 1 Thread: id = 9116 os_tid = 0x265c [0238.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf")) returned 0x20 [0241.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF", dwFileAttributes=0x20) returned 0 [0241.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.701] GetLastError () returned 0x5 [0241.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF", dwFileAttributes=0x20) returned 0 [0241.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9978) returned 1 Thread: id = 9117 os_tid = 0x26a8 [0238.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf")) returned 0x20 [0242.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF", dwFileAttributes=0x20) returned 0 [0242.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.005] GetLastError () returned 0x5 [0242.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF", dwFileAttributes=0x20) returned 0 [0242.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9a00) returned 1 Thread: id = 9118 os_tid = 0x26ac [0238.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf")) returned 0x20 [0242.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF", dwFileAttributes=0x20) returned 0 [0242.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.007] GetLastError () returned 0x5 [0242.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF", dwFileAttributes=0x20) returned 0 [0242.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9a88) returned 1 Thread: id = 9119 os_tid = 0x26b0 [0238.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf")) returned 0x20 [0241.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF", dwFileAttributes=0x20) returned 0 [0241.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.664] GetLastError () returned 0x5 [0241.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF", dwFileAttributes=0x20) returned 0 [0241.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9b10) returned 1 Thread: id = 9120 os_tid = 0x26b4 [0238.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf")) returned 0x20 [0241.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF", dwFileAttributes=0x20) returned 0 [0241.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.587] GetLastError () returned 0x5 [0241.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF", dwFileAttributes=0x20) returned 0 [0241.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803eda8) returned 1 Thread: id = 9121 os_tid = 0x26b8 [0238.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf")) returned 0x20 [0241.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF", dwFileAttributes=0x20) returned 0 [0241.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.600] GetLastError () returned 0x5 [0241.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF", dwFileAttributes=0x20) returned 0 [0241.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803ed20) returned 1 Thread: id = 9122 os_tid = 0x26bc [0238.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf")) returned 0x20 [0241.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF", dwFileAttributes=0x20) returned 0 [0241.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.602] GetLastError () returned 0x5 [0241.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF", dwFileAttributes=0x20) returned 0 [0241.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9b98) returned 1 Thread: id = 9123 os_tid = 0x130 [0238.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf")) returned 0x20 [0241.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF", dwFileAttributes=0x20) returned 0 [0241.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.603] GetLastError () returned 0x5 [0241.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF", dwFileAttributes=0x20) returned 0 [0241.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9c20) returned 1 Thread: id = 9124 os_tid = 0x22c [0238.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf")) returned 0x20 [0241.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF", dwFileAttributes=0x20) returned 0 [0241.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.605] GetLastError () returned 0x5 [0241.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF", dwFileAttributes=0x20) returned 0 [0241.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9ca8) returned 1 Thread: id = 9125 os_tid = 0x61c [0238.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf")) returned 0x20 [0241.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF", dwFileAttributes=0x20) returned 0 [0241.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.588] GetLastError () returned 0x5 [0241.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF", dwFileAttributes=0x20) returned 0 [0241.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9d30) returned 1 Thread: id = 9126 os_tid = 0x33c [0238.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf")) returned 0x20 [0241.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF", dwFileAttributes=0x20) returned 0 [0241.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.590] GetLastError () returned 0x5 [0241.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF", dwFileAttributes=0x20) returned 0 [0241.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9db8) returned 1 Thread: id = 9127 os_tid = 0x2200 [0238.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf")) returned 0x20 [0241.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF", dwFileAttributes=0x20) returned 0 [0241.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.592] GetLastError () returned 0x5 [0241.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF", dwFileAttributes=0x20) returned 0 [0241.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9e40) returned 1 Thread: id = 9128 os_tid = 0x2204 [0238.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf")) returned 0x20 [0241.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF", dwFileAttributes=0x20) returned 0 [0241.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.650] GetLastError () returned 0x5 [0241.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF", dwFileAttributes=0x20) returned 0 [0241.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9ec8) returned 1 Thread: id = 9129 os_tid = 0x2208 [0238.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf")) returned 0x20 [0241.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF", dwFileAttributes=0x20) returned 0 [0241.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.652] GetLastError () returned 0x5 [0241.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF", dwFileAttributes=0x20) returned 0 [0241.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9f50) returned 1 Thread: id = 9130 os_tid = 0x2940 [0238.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf")) returned 0x20 [0241.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF", dwFileAttributes=0x20) returned 0 [0241.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.654] GetLastError () returned 0x5 [0241.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF", dwFileAttributes=0x20) returned 0 [0241.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5008) returned 1 Thread: id = 9131 os_tid = 0x2944 [0238.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf")) returned 0x20 [0241.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF", dwFileAttributes=0x20) returned 0 [0241.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.607] GetLastError () returned 0x5 [0241.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF", dwFileAttributes=0x20) returned 0 [0241.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81d9fd8) returned 1 Thread: id = 9132 os_tid = 0x2948 [0238.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf")) returned 0x20 [0241.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF", dwFileAttributes=0x20) returned 0 [0241.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.609] GetLastError () returned 0x5 [0241.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF", dwFileAttributes=0x20) returned 0 [0241.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da060) returned 1 Thread: id = 9133 os_tid = 0x29c4 [0238.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf")) returned 0x20 [0241.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF", dwFileAttributes=0x20) returned 0 [0241.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.549] GetLastError () returned 0x5 [0241.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF", dwFileAttributes=0x20) returned 0 [0241.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da0e8) returned 1 Thread: id = 9134 os_tid = 0x25f4 [0238.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf")) returned 0x20 [0241.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF", dwFileAttributes=0x20) returned 0 [0241.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.656] GetLastError () returned 0x5 [0241.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF", dwFileAttributes=0x20) returned 0 [0241.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da170) returned 1 Thread: id = 9135 os_tid = 0x2c04 [0238.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf")) returned 0x20 [0241.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF", dwFileAttributes=0x20) returned 0 [0241.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.622] GetLastError () returned 0x5 [0241.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF", dwFileAttributes=0x20) returned 0 [0241.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da1f8) returned 1 Thread: id = 9136 os_tid = 0x2684 [0238.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf")) returned 0x20 [0241.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF", dwFileAttributes=0x20) returned 0 [0241.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.658] GetLastError () returned 0x5 [0241.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF", dwFileAttributes=0x20) returned 0 [0241.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da280) returned 1 Thread: id = 9137 os_tid = 0x299c [0238.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf")) returned 0x20 [0241.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF", dwFileAttributes=0x20) returned 0 [0241.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.660] GetLastError () returned 0x5 [0241.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF", dwFileAttributes=0x20) returned 0 [0241.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da308) returned 1 Thread: id = 9138 os_tid = 0x2b18 [0238.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf")) returned 0x20 [0241.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF", dwFileAttributes=0x20) returned 0 [0241.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.623] GetLastError () returned 0x5 [0241.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF", dwFileAttributes=0x20) returned 0 [0241.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da390) returned 1 Thread: id = 9139 os_tid = 0x12ec [0238.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf")) returned 0x20 [0241.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF", dwFileAttributes=0x20) returned 0 [0241.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.625] GetLastError () returned 0x5 [0241.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF", dwFileAttributes=0x20) returned 0 [0241.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da418) returned 1 Thread: id = 9140 os_tid = 0xaf4 [0238.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf")) returned 0x20 [0241.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF", dwFileAttributes=0x20) returned 0 [0241.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.627] GetLastError () returned 0x5 [0241.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF", dwFileAttributes=0x20) returned 0 [0241.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da4a0) returned 1 Thread: id = 9141 os_tid = 0x868 [0238.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf")) returned 0x20 [0241.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF", dwFileAttributes=0x20) returned 0 [0241.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.629] GetLastError () returned 0x5 [0241.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF", dwFileAttributes=0x20) returned 0 [0241.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da528) returned 1 Thread: id = 9142 os_tid = 0xe28 [0238.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf")) returned 0x20 [0241.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF", dwFileAttributes=0x20) returned 0 [0241.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.662] GetLastError () returned 0x5 [0241.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF", dwFileAttributes=0x20) returned 0 [0241.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da5b0) returned 1 Thread: id = 9143 os_tid = 0x1e1c [0238.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf")) returned 0x20 [0241.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF", dwFileAttributes=0x20) returned 0 [0241.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.631] GetLastError () returned 0x5 [0241.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF", dwFileAttributes=0x20) returned 0 [0241.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da638) returned 1 Thread: id = 9144 os_tid = 0xfe4 [0238.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf")) returned 0x20 [0241.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF", dwFileAttributes=0x20) returned 0 [0241.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.633] GetLastError () returned 0x5 [0241.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF", dwFileAttributes=0x20) returned 0 [0241.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da6c0) returned 1 Thread: id = 9145 os_tid = 0x1d74 [0238.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf")) returned 0x20 [0241.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF", dwFileAttributes=0x20) returned 0 [0241.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.635] GetLastError () returned 0x5 [0241.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF", dwFileAttributes=0x20) returned 0 [0241.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da748) returned 1 Thread: id = 9146 os_tid = 0x2910 [0239.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf")) returned 0x20 [0242.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", dwFileAttributes=0x20) returned 0 [0242.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.264] GetLastError () returned 0x5 [0242.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", dwFileAttributes=0x20) returned 0 [0242.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da7d0) returned 1 Thread: id = 9147 os_tid = 0x2914 [0239.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf")) returned 0x20 [0241.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF", dwFileAttributes=0x20) returned 0 [0241.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.594] GetLastError () returned 0x5 [0241.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF", dwFileAttributes=0x20) returned 0 [0241.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da858) returned 1 Thread: id = 9148 os_tid = 0x2918 [0239.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf")) returned 0x20 [0241.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF", dwFileAttributes=0x20) returned 0 [0241.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.637] GetLastError () returned 0x5 [0241.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF", dwFileAttributes=0x20) returned 0 [0241.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da8e0) returned 1 Thread: id = 9149 os_tid = 0x2920 [0239.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf")) returned 0x20 [0241.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF", dwFileAttributes=0x20) returned 0 [0241.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.596] GetLastError () returned 0x5 [0241.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF", dwFileAttributes=0x20) returned 0 [0241.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da968) returned 1 Thread: id = 9150 os_tid = 0x2958 [0239.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf")) returned 0x20 [0241.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF", dwFileAttributes=0x20) returned 0 [0241.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.583] GetLastError () returned 0x5 [0241.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF", dwFileAttributes=0x20) returned 0 [0241.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81da9f0) returned 1 Thread: id = 9151 os_tid = 0x2698 [0239.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf")) returned 0x20 [0241.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF", dwFileAttributes=0x20) returned 0 [0241.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.585] GetLastError () returned 0x5 [0241.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF", dwFileAttributes=0x20) returned 0 [0241.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daa78) returned 1 Thread: id = 9152 os_tid = 0x269c [0239.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf")) returned 0x20 [0241.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF", dwFileAttributes=0x20) returned 0 [0241.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.598] GetLastError () returned 0x5 [0241.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF", dwFileAttributes=0x20) returned 0 [0241.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dab00) returned 1 Thread: id = 9153 os_tid = 0x26a0 [0239.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf")) returned 0x20 [0242.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF", dwFileAttributes=0x20) returned 0 [0242.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.149] GetLastError () returned 0x5 [0242.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF", dwFileAttributes=0x20) returned 0 [0242.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x803f958) returned 1 Thread: id = 9154 os_tid = 0x26a4 [0239.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf")) returned 0x20 [0242.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF", dwFileAttributes=0x20) returned 0 [0242.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.179] GetLastError () returned 0x5 [0242.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF", dwFileAttributes=0x20) returned 0 [0242.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dab88) returned 1 Thread: id = 9155 os_tid = 0x279c [0239.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf")) returned 0x20 [0242.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF", dwFileAttributes=0x20) returned 0 [0242.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.181] GetLastError () returned 0x5 [0242.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF", dwFileAttributes=0x20) returned 0 [0242.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dac10) returned 1 Thread: id = 9156 os_tid = 0x27a8 [0239.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf")) returned 0x20 [0242.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF", dwFileAttributes=0x20) returned 0 [0242.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.182] GetLastError () returned 0x5 [0242.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF", dwFileAttributes=0x20) returned 0 [0242.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dac98) returned 1 Thread: id = 9157 os_tid = 0x27c4 [0239.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf")) returned 0x20 [0242.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF", dwFileAttributes=0x20) returned 0 [0242.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.152] GetLastError () returned 0x5 [0242.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF", dwFileAttributes=0x20) returned 0 [0242.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dad20) returned 1 Thread: id = 9158 os_tid = 0x295c [0239.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf")) returned 0x20 [0242.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF", dwFileAttributes=0x20) returned 0 [0242.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.154] GetLastError () returned 0x5 [0242.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF", dwFileAttributes=0x20) returned 0 [0242.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dada8) returned 1 Thread: id = 9159 os_tid = 0x2960 [0239.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf")) returned 0x20 [0242.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF", dwFileAttributes=0x20) returned 0 [0242.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.184] GetLastError () returned 0x5 [0242.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF", dwFileAttributes=0x20) returned 0 [0242.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dae30) returned 1 Thread: id = 9160 os_tid = 0x2964 [0239.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf")) returned 0x20 [0242.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF", dwFileAttributes=0x20) returned 0 [0242.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.156] GetLastError () returned 0x5 [0242.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF", dwFileAttributes=0x20) returned 0 [0242.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daeb8) returned 1 Thread: id = 9161 os_tid = 0x2968 [0239.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf")) returned 0x20 [0242.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF", dwFileAttributes=0x20) returned 0 [0242.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.157] GetLastError () returned 0x5 [0242.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF", dwFileAttributes=0x20) returned 0 [0242.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81daf40) returned 1 Thread: id = 9162 os_tid = 0x296c [0239.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid")) returned 0x20 [0242.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID", dwFileAttributes=0x20) returned 0 [0242.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.159] GetLastError () returned 0x5 [0242.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID", dwFileAttributes=0x20) returned 0 [0242.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81dafc8) returned 1 Thread: id = 9163 os_tid = 0x2970 [0239.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid")) returned 0x20 [0242.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID", dwFileAttributes=0x20) returned 0 [0242.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.185] GetLastError () returned 0x5 [0242.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID", dwFileAttributes=0x20) returned 0 [0242.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db050) returned 1 Thread: id = 9164 os_tid = 0x2974 [0239.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif")) returned 0x20 [0242.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF", dwFileAttributes=0x20) returned 0 [0242.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.161] GetLastError () returned 0x5 [0242.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF", dwFileAttributes=0x20) returned 0 [0242.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db0d8) returned 1 Thread: id = 9165 os_tid = 0x2978 [0239.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif")) returned 0x20 [0242.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF", dwFileAttributes=0x20) returned 0 [0242.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.163] GetLastError () returned 0x5 [0242.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF", dwFileAttributes=0x20) returned 0 [0242.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db160) returned 1 Thread: id = 9166 os_tid = 0x297c [0239.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif")) returned 0x20 [0242.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF", dwFileAttributes=0x20) returned 0 [0242.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.165] GetLastError () returned 0x5 [0242.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF", dwFileAttributes=0x20) returned 0 [0242.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db1e8) returned 1 Thread: id = 9167 os_tid = 0x2a14 [0239.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif")) returned 0x20 [0242.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF", dwFileAttributes=0x20) returned 0 [0242.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.187] GetLastError () returned 0x5 [0242.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF", dwFileAttributes=0x20) returned 0 [0242.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db270) returned 1 Thread: id = 9168 os_tid = 0x1524 [0239.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif")) returned 0x20 [0242.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF", dwFileAttributes=0x20) returned 0 [0242.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.188] GetLastError () returned 0x5 [0242.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF", dwFileAttributes=0x20) returned 0 [0242.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db2f8) returned 1 Thread: id = 9169 os_tid = 0x1afc [0239.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif")) returned 0x20 [0242.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF", dwFileAttributes=0x20) returned 0 [0242.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.192] GetLastError () returned 0x5 [0242.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF", dwFileAttributes=0x20) returned 0 [0242.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db380) returned 1 Thread: id = 9170 os_tid = 0x1d70 [0239.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif")) returned 0x20 [0242.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF", dwFileAttributes=0x20) returned 0 [0242.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.194] GetLastError () returned 0x5 [0242.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF", dwFileAttributes=0x20) returned 0 [0242.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db408) returned 1 Thread: id = 9171 os_tid = 0x238c [0239.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif")) returned 0x20 [0242.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF", dwFileAttributes=0x20) returned 0 [0242.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.166] GetLastError () returned 0x5 [0242.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF", dwFileAttributes=0x20) returned 0 [0242.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db490) returned 1 Thread: id = 9172 os_tid = 0x1500 [0239.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif")) returned 0x20 [0242.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF", dwFileAttributes=0x20) returned 0 [0242.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.168] GetLastError () returned 0x5 [0242.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF", dwFileAttributes=0x20) returned 0 [0242.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db518) returned 1 Thread: id = 9173 os_tid = 0x1a0c [0239.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif")) returned 0x20 [0242.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF", dwFileAttributes=0x20) returned 0 [0242.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.142] GetLastError () returned 0x5 [0242.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF", dwFileAttributes=0x20) returned 0 [0242.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x81db5a0) returned 1 Thread: id = 9174 os_tid = 0x27ec [0239.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif")) returned 0x20 [0242.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF", dwFileAttributes=0x20) returned 0 [0242.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.144] GetLastError () returned 0x5 [0242.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF", dwFileAttributes=0x20) returned 0 [0242.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332930) returned 1 Thread: id = 9175 os_tid = 0x294c [0239.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif")) returned 0x20 [0242.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF", dwFileAttributes=0x20) returned 0 [0242.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.146] GetLastError () returned 0x5 [0242.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF", dwFileAttributes=0x20) returned 0 [0242.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83329b8) returned 1 Thread: id = 9176 os_tid = 0x2950 [0239.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif")) returned 0x20 [0242.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF", dwFileAttributes=0x20) returned 0 [0242.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.148] GetLastError () returned 0x5 [0242.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF", dwFileAttributes=0x20) returned 0 [0242.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332a40) returned 1 Thread: id = 9177 os_tid = 0x1a10 [0239.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif")) returned 0x20 [0242.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF", dwFileAttributes=0x20) returned 0 [0242.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.172] GetLastError () returned 0x5 [0242.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF", dwFileAttributes=0x20) returned 0 [0242.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332ac8) returned 1 Thread: id = 9178 os_tid = 0x2954 [0239.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif")) returned 0x20 [0242.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF", dwFileAttributes=0x20) returned 0 [0242.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.174] GetLastError () returned 0x5 [0242.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF", dwFileAttributes=0x20) returned 0 [0242.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332b50) returned 1 Thread: id = 9179 os_tid = 0x1a14 [0239.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif")) returned 0x20 [0242.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF", dwFileAttributes=0x20) returned 0 [0242.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.175] GetLastError () returned 0x5 [0242.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF", dwFileAttributes=0x20) returned 0 [0242.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332bd8) returned 1 Thread: id = 9180 os_tid = 0x2d14 [0239.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif")) returned 0x20 [0242.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF", dwFileAttributes=0x20) returned 0 [0242.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.177] GetLastError () returned 0x5 [0242.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF", dwFileAttributes=0x20) returned 0 [0242.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332c60) returned 1 Thread: id = 9181 os_tid = 0x2c74 [0239.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif")) returned 0x20 [0242.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF", dwFileAttributes=0x20) returned 0 [0242.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.178] GetLastError () returned 0x5 [0242.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF", dwFileAttributes=0x20) returned 0 [0242.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332ce8) returned 1 Thread: id = 9182 os_tid = 0x1c00 [0239.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif")) returned 0x20 [0242.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF", dwFileAttributes=0x20) returned 0 [0242.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.267] GetLastError () returned 0x5 [0242.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF", dwFileAttributes=0x20) returned 0 [0242.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332d70) returned 1 Thread: id = 9183 os_tid = 0x2c88 [0239.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif")) returned 0x20 [0242.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF", dwFileAttributes=0x20) returned 0 [0242.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.265] GetLastError () returned 0x5 [0242.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF", dwFileAttributes=0x20) returned 0 [0242.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332df8) returned 1 Thread: id = 9184 os_tid = 0x2c8c [0239.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif")) returned 0x20 [0242.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF", dwFileAttributes=0x20) returned 0 [0242.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.240] GetLastError () returned 0x5 [0242.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF", dwFileAttributes=0x20) returned 0 [0242.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332e80) returned 1 Thread: id = 9185 os_tid = 0x1c08 [0239.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif")) returned 0x20 [0242.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF", dwFileAttributes=0x20) returned 0 [0242.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.262] GetLastError () returned 0x5 [0242.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF", dwFileAttributes=0x20) returned 0 [0242.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332f08) returned 1 Thread: id = 9186 os_tid = 0x267c [0239.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif")) returned 0x20 [0242.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF", dwFileAttributes=0x20) returned 0 [0242.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.242] GetLastError () returned 0x5 [0242.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF", dwFileAttributes=0x20) returned 0 [0242.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8332f90) returned 1 Thread: id = 9187 os_tid = 0x2688 [0239.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif")) returned 0x20 [0242.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF", dwFileAttributes=0x20) returned 0 [0242.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.170] GetLastError () returned 0x5 [0242.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF", dwFileAttributes=0x20) returned 0 [0242.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333018) returned 1 Thread: id = 9188 os_tid = 0x27a0 [0239.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif")) returned 0x20 [0242.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", dwFileAttributes=0x20) returned 0 [0242.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.220] GetLastError () returned 0x5 [0242.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", dwFileAttributes=0x20) returned 0 [0242.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83330a0) returned 1 Thread: id = 9189 os_tid = 0x2cc4 [0239.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif")) returned 0x20 [0242.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF", dwFileAttributes=0x20) returned 0 [0242.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.219] GetLastError () returned 0x5 [0242.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF", dwFileAttributes=0x20) returned 0 [0242.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333128) returned 1 Thread: id = 9190 os_tid = 0xe68 [0239.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif")) returned 0x20 [0242.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF", dwFileAttributes=0x20) returned 0 [0242.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.197] GetLastError () returned 0x5 [0242.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF", dwFileAttributes=0x20) returned 0 [0242.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83331b0) returned 1 Thread: id = 9191 os_tid = 0x1140 [0239.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif")) returned 0x20 [0242.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF", dwFileAttributes=0x20) returned 0 [0242.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.195] GetLastError () returned 0x5 [0242.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF", dwFileAttributes=0x20) returned 0 [0242.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333238) returned 1 Thread: id = 9192 os_tid = 0x1728 [0239.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif")) returned 0x20 [0242.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF", dwFileAttributes=0x20) returned 0 [0242.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.236] GetLastError () returned 0x5 [0242.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF", dwFileAttributes=0x20) returned 0 [0242.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83332c0) returned 1 Thread: id = 9193 os_tid = 0x1798 [0239.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif")) returned 0x20 [0242.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF", dwFileAttributes=0x20) returned 0 [0242.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.217] GetLastError () returned 0x5 [0242.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF", dwFileAttributes=0x20) returned 0 [0242.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333348) returned 1 Thread: id = 9194 os_tid = 0x179c [0239.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif")) returned 0x20 [0242.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF", dwFileAttributes=0x20) returned 0 [0242.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.216] GetLastError () returned 0x5 [0242.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF", dwFileAttributes=0x20) returned 0 [0242.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83333d0) returned 1 Thread: id = 9195 os_tid = 0x17b0 [0239.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif")) returned 0x20 [0242.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF", dwFileAttributes=0x20) returned 0 [0242.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.235] GetLastError () returned 0x5 [0242.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF", dwFileAttributes=0x20) returned 0 [0242.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333458) returned 1 Thread: id = 9196 os_tid = 0x10b4 [0239.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif")) returned 0x20 [0242.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF", dwFileAttributes=0x20) returned 0 [0242.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.214] GetLastError () returned 0x5 [0242.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF", dwFileAttributes=0x20) returned 0 [0242.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83334e0) returned 1 Thread: id = 9197 os_tid = 0x16cc [0239.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif")) returned 0x20 [0242.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF", dwFileAttributes=0x20) returned 0 [0242.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.233] GetLastError () returned 0x5 [0242.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF", dwFileAttributes=0x20) returned 0 [0242.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333568) returned 1 Thread: id = 9198 os_tid = 0x10cc [0239.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif")) returned 0x20 [0242.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF", dwFileAttributes=0x20) returned 0 [0242.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.231] GetLastError () returned 0x5 [0242.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF", dwFileAttributes=0x20) returned 0 [0242.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83335f0) returned 1 Thread: id = 9199 os_tid = 0x19d4 [0239.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif")) returned 0x20 [0242.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF", dwFileAttributes=0x20) returned 0 [0242.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.229] GetLastError () returned 0x5 [0242.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF", dwFileAttributes=0x20) returned 0 [0242.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333678) returned 1 Thread: id = 9200 os_tid = 0x2798 [0239.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif")) returned 0x20 [0242.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF", dwFileAttributes=0x20) returned 0 [0242.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.227] GetLastError () returned 0x5 [0242.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF", dwFileAttributes=0x20) returned 0 [0242.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333700) returned 1 Thread: id = 9201 os_tid = 0x16f8 [0239.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif")) returned 0x20 [0242.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF", dwFileAttributes=0x20) returned 0 [0242.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.225] GetLastError () returned 0x5 [0242.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF", dwFileAttributes=0x20) returned 0 [0242.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333788) returned 1 Thread: id = 9202 os_tid = 0x227c [0239.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif")) returned 0x20 [0242.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF", dwFileAttributes=0x20) returned 0 [0242.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.224] GetLastError () returned 0x5 [0242.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF", dwFileAttributes=0x20) returned 0 [0242.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333810) returned 1 Thread: id = 9203 os_tid = 0xe4c [0239.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif")) returned 0x20 [0242.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF", dwFileAttributes=0x20) returned 0 [0242.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.212] GetLastError () returned 0x5 [0242.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF", dwFileAttributes=0x20) returned 0 [0242.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333898) returned 1 Thread: id = 9204 os_tid = 0x1820 [0239.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif")) returned 0x20 [0242.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF", dwFileAttributes=0x20) returned 0 [0242.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.222] GetLastError () returned 0x5 [0242.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF", dwFileAttributes=0x20) returned 0 [0242.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333920) returned 1 Thread: id = 9205 os_tid = 0x19ec [0239.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif")) returned 0x20 [0242.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF", dwFileAttributes=0x20) returned 0 [0242.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.211] GetLastError () returned 0x5 [0242.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF", dwFileAttributes=0x20) returned 0 [0242.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x83339a8) returned 1 Thread: id = 9206 os_tid = 0x19f8 [0239.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif")) returned 0x20 [0241.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF", dwFileAttributes=0x20) returned 0 [0241.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.545] GetLastError () returned 0x5 [0241.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF", dwFileAttributes=0x20) returned 0 [0241.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333a30) returned 1 Thread: id = 9207 os_tid = 0x1a00 [0239.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif")) returned 0x20 [0242.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF", dwFileAttributes=0x20) returned 0 [0242.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.209] GetLastError () returned 0x5 [0242.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF", dwFileAttributes=0x20) returned 0 [0242.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333ab8) returned 1 Thread: id = 9208 os_tid = 0x1668 [0239.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf")) returned 0x20 [0242.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF", dwFileAttributes=0x20) returned 0 [0242.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.206] GetLastError () returned 0x5 [0242.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF", dwFileAttributes=0x20) returned 0 [0242.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333b40) returned 1 Thread: id = 9209 os_tid = 0x11f8 [0239.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf")) returned 0x20 [0242.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF", dwFileAttributes=0x20) returned 0 [0242.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.204] GetLastError () returned 0x5 [0242.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF", dwFileAttributes=0x20) returned 0 [0242.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333bc8) returned 1 Thread: id = 9210 os_tid = 0x1c30 [0239.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf")) returned 0x20 [0242.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF", dwFileAttributes=0x20) returned 0 [0242.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.203] GetLastError () returned 0x5 [0242.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF", dwFileAttributes=0x20) returned 0 [0242.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333c50) returned 1 Thread: id = 9211 os_tid = 0x1740 [0239.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf")) returned 0x20 [0242.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF", dwFileAttributes=0x20) returned 0 [0242.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.201] GetLastError () returned 0x5 [0242.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF", dwFileAttributes=0x20) returned 0 [0242.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333cd8) returned 1 Thread: id = 9212 os_tid = 0x1cc8 [0239.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid")) returned 0x20 [0242.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID", dwFileAttributes=0x20) returned 0 [0242.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0242.200] GetLastError () returned 0x5 [0242.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID", dwFileAttributes=0x20) returned 0 [0242.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x8333d60) returned 1 Thread: id = 9213 os_tid = 0x2ae4 [0246.479] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql8e3b.tmp")) returned 0x2020 [0246.479] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp", dwFileAttributes=0x20) returned 1 [0246.479] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql8e3b.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0246.480] GetLastError () returned 0x20 [0246.480] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql8E3B.tmp", dwFileAttributes=0x2020) returned 1 [0246.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8db90) returned 1 Thread: id = 9214 os_tid = 0x2b0c [0246.482] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0246.482] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0246.482] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0246.482] GetLastError () returned 0x20 [0246.482] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0246.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x80541e8) returned 1 Thread: id = 9215 os_tid = 0x2cac [0246.485] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0246.485] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0246.486] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0246.486] GetLastError () returned 0x20 [0246.486] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0246.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 9217 os_tid = 0x2d1c [0247.522] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x462f900 | out: lphEnum=0x462f900*=0x8098d10) returned 0x0 [0249.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0249.105] WNetEnumResourceW (in: hEnum=0x8098d10, lpcCount=0x462f8ec, lpBuffer=0x3d7ef68, lpBufferSize=0x462f8f4 | out: lpcCount=0x462f8ec, lpBuffer=0x3d7ef68, lpBufferSize=0x462f8f4) returned 0x0 [0249.105] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3d7ef68, lphEnum=0x462f8c4 | out: lphEnum=0x462f8c4*=0x30aded0) returned 0x0 [0249.107] NetShareEnum (in: servername="Microsoft Terminal Services", level=0x1, bufptr=0x462f878, prefmaxlen=0xffffffff, entriesread=0x462f870, totalentries=0x462f880, resume_handle=0x462f87c | out: bufptr=0x462f878, entriesread=0x462f870, totalentries=0x462f880, resume_handle=0x462f87c) returned 0x35 [0249.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d80070 [0249.133] WNetEnumResourceW (in: hEnum=0x30aded0, lpcCount=0x462f8b0, lpBuffer=0x3d80070, lpBufferSize=0x462f8b8 | out: lpcCount=0x462f8b0, lpBuffer=0x3d80070, lpBufferSize=0x462f8b8) returned 0x103 [0249.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d80070) returned 1 [0249.133] WNetCloseEnum (hEnum=0x30aded0) returned 0x0 [0249.133] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3d7ef88, lphEnum=0x462f8c4 | out: lphEnum=0x462f8c4*=0x0) returned 0x4b8 [0262.067] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3d7efa8, lphEnum=0x462f8c4 | out: lphEnum=0x462f8c4*=0x0) returned 0x4c6 [0262.068] WNetEnumResourceW (in: hEnum=0x8098d10, lpcCount=0x462f8ec, lpBuffer=0x3d7ef68, lpBufferSize=0x462f8f4 | out: lpcCount=0x462f8ec, lpBuffer=0x3d7ef68, lpBufferSize=0x462f8f4) returned 0x103 [0262.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d7ef68) returned 1 [0262.068] WNetCloseEnum (hEnum=0x8098d10) returned 0x0 Thread: id = 9229 os_tid = 0x23e8 Thread: id = 9237 os_tid = 0x240c Thread: id = 9238 os_tid = 0x1ddc Thread: id = 9239 os_tid = 0x25f0 Thread: id = 9242 os_tid = 0x1f24 Process: id = "10" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x7f1348c0" os_pid = "0xbdc" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0006105f" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 840 os_tid = 0x1304 Thread: id = 841 os_tid = 0x1274 Thread: id = 842 os_tid = 0xbb0 Thread: id = 843 os_tid = 0xc08 [0142.524] malloc (_Size=0x80) returned 0x34e5e0 [0280.648] free (_Block=0x34e5e0) Thread: id = 844 os_tid = 0xbf0 Thread: id = 845 os_tid = 0xe5c Thread: id = 846 os_tid = 0xc18 Thread: id = 1207 os_tid = 0x710 Thread: id = 6597 os_tid = 0x720 Thread: id = 9247 os_tid = 0x2354 Thread: id = 9291 os_tid = 0x2318 Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f1341e0" os_pid = "0x3d4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bbac" [0xc000000f], "LOCAL" [0x7] Thread: id = 898 os_tid = 0xff0 Thread: id = 899 os_tid = 0xdb8 Thread: id = 900 os_tid = 0x36c Thread: id = 901 os_tid = 0x12c Thread: id = 902 os_tid = 0x128 Thread: id = 903 os_tid = 0x114 Thread: id = 904 os_tid = 0xf0 Thread: id = 905 os_tid = 0x3f8 Thread: id = 906 os_tid = 0x3e8 Thread: id = 907 os_tid = 0x3e4 Thread: id = 908 os_tid = 0x3d8 Thread: id = 1009 os_tid = 0x1698 Thread: id = 1010 os_tid = 0x169c Thread: id = 6752 os_tid = 0x2c34 Thread: id = 9246 os_tid = 0x2350 Thread: id = 9287 os_tid = 0x2300 Thread: id = 9296 os_tid = 0x2b68 Thread: id = 9299 os_tid = 0x1dec Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f134820" os_pid = "0xa90" os_integrity_level = "0x4000" os_privileges = "0x60814080" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0006357c" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 2027 os_tid = 0x1a4c Thread: id = 2028 os_tid = 0x183c Thread: id = 2029 os_tid = 0x1458 Thread: id = 2030 os_tid = 0x1454 Thread: id = 2031 os_tid = 0x15fc Thread: id = 2032 os_tid = 0x530 Thread: id = 9292 os_tid = 0x23a8 Process: id = "13" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7f134660" os_pid = "0x15f4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 2308 os_tid = 0x1b00 Thread: id = 2309 os_tid = 0x1afc Thread: id = 2310 os_tid = 0x1af8 Thread: id = 2311 os_tid = 0x19d4 Thread: id = 2312 os_tid = 0x1840 Thread: id = 2313 os_tid = 0x15f8 Process: id = "14" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7f134220" os_pid = "0xefc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 4206 os_tid = 0x1708 Thread: id = 4207 os_tid = 0x12e4 Thread: id = 4208 os_tid = 0x12e0 Thread: id = 4209 os_tid = 0x330 Thread: id = 4210 os_tid = 0x1794 Thread: id = 4211 os_tid = 0x1638 Thread: id = 4212 os_tid = 0xec8 Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f134160" os_pid = "0x2c4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a4d3" [0xc000000f], "LOCAL" [0x7] Thread: id = 7552 os_tid = 0x2f4c Thread: id = 7553 os_tid = 0xffc Thread: id = 7554 os_tid = 0xfe8 Thread: id = 7555 os_tid = 0xdc8 Thread: id = 7556 os_tid = 0x140 Thread: id = 7557 os_tid = 0x580 Thread: id = 7558 os_tid = 0x7f4 Thread: id = 7559 os_tid = 0x7d8 Thread: id = 7560 os_tid = 0x430 Thread: id = 7561 os_tid = 0x420 Thread: id = 7562 os_tid = 0x38c Thread: id = 7563 os_tid = 0x384 Thread: id = 7564 os_tid = 0x374 Thread: id = 7565 os_tid = 0x324 Thread: id = 7566 os_tid = 0x320 Thread: id = 7567 os_tid = 0x31c Thread: id = 7568 os_tid = 0x2f8 Thread: id = 7569 os_tid = 0x2f4 Thread: id = 7570 os_tid = 0x2d0 Thread: id = 7571 os_tid = 0x2c8 Thread: id = 9218 os_tid = 0x2b78 Thread: id = 9240 os_tid = 0x2620 Thread: id = 9241 os_tid = 0x2624 Thread: id = 9262 os_tid = 0x235c Thread: id = 9285 os_tid = 0x2474 Process: id = "16" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x7f134220" os_pid = "0x2d48" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x334" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000ad2e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 7683 os_tid = 0x1004 Thread: id = 7768 os_tid = 0x474 Thread: id = 7769 os_tid = 0xf00 Thread: id = 7830 os_tid = 0x136c Thread: id = 7839 os_tid = 0x1370 Thread: id = 7840 os_tid = 0x1124 Thread: id = 9293 os_tid = 0x23ac Process: id = "17" image_name = "notepad.exe" filename = "c:\\windows\\system32\\notepad.exe" page_root = "0x7f1344a0" os_pid = "0x2b7c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0x5bc" cmd_line = "C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\F0DBEC-Readme.txt\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9219 os_tid = 0x1790 Process: id = "18" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7f134ca0" os_pid = "0x23ec" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9230 os_tid = 0x2408 Thread: id = 9231 os_tid = 0x2404 Thread: id = 9232 os_tid = 0x2400 Thread: id = 9233 os_tid = 0x23fc Thread: id = 9234 os_tid = 0x23f8 Thread: id = 9235 os_tid = 0x23f4 Thread: id = 9236 os_tid = 0x23f0 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f134200" os_pid = "0x424" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c0d7" [0xc000000f], "LOCAL" [0x7] Thread: id = 9248 os_tid = 0x528 Thread: id = 9249 os_tid = 0xe40 Thread: id = 9250 os_tid = 0x3dc Thread: id = 9251 os_tid = 0x1cc Thread: id = 9252 os_tid = 0x73c Thread: id = 9253 os_tid = 0x70c Thread: id = 9254 os_tid = 0x690 Thread: id = 9255 os_tid = 0x604 Thread: id = 9256 os_tid = 0x454 Thread: id = 9257 os_tid = 0x450 Thread: id = 9258 os_tid = 0x44c Thread: id = 9259 os_tid = 0x440 Thread: id = 9260 os_tid = 0x42c Thread: id = 9261 os_tid = 0x428 Thread: id = 9288 os_tid = 0x2304 Thread: id = 9294 os_tid = 0x2bf4 Thread: id = 9295 os_tid = 0x2bf8 Thread: id = 9297 os_tid = 0x2b6c Thread: id = 9298 os_tid = 0x247c Process: id = "20" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f134180" os_pid = "0x30c" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a905" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 9263 os_tid = 0x2360 Thread: id = 9264 os_tid = 0x2924 Thread: id = 9265 os_tid = 0x460 Thread: id = 9266 os_tid = 0x538 Thread: id = 9267 os_tid = 0x47c Thread: id = 9268 os_tid = 0x118 Thread: id = 9269 os_tid = 0x680 Thread: id = 9270 os_tid = 0x404 Thread: id = 9271 os_tid = 0x3e0 Thread: id = 9272 os_tid = 0x3bc Thread: id = 9273 os_tid = 0x3b8 Thread: id = 9274 os_tid = 0x3b0 Thread: id = 9275 os_tid = 0x3ac Thread: id = 9276 os_tid = 0x39c Thread: id = 9277 os_tid = 0x398 Thread: id = 9278 os_tid = 0x360 Thread: id = 9279 os_tid = 0x348 Thread: id = 9280 os_tid = 0x344 Thread: id = 9281 os_tid = 0x314 Thread: id = 9282 os_tid = 0x310 Thread: id = 9286 os_tid = 0x22fc